1859 	int left;  in wpa_parse_wpa_ie_rsn()  local
1887 		left = rsn_ie_len - 6;  in wpa_parse_wpa_ie_rsn()
1900 		left = rsn_ie_len - 2 - 4 - 2;  in wpa_parse_wpa_ie_rsn()
1915 		left = rsn_ie_len - sizeof(*hdr);  in wpa_parse_wpa_ie_rsn()
1918 	if (left >= RSN_SELECTOR_LEN) {  in wpa_parse_wpa_ie_rsn()
1936 		left -= RSN_SELECTOR_LEN;  in wpa_parse_wpa_ie_rsn()
1937 	} else if (left > 0) {  in wpa_parse_wpa_ie_rsn()
1939 			   __func__, left);  in wpa_parse_wpa_ie_rsn()
1943 	if (left >= 2) {  in wpa_parse_wpa_ie_rsn()
1947 		left -= 2;  in wpa_parse_wpa_ie_rsn()
1948 		if (count == 0 || count > left / RSN_SELECTOR_LEN) {  in wpa_parse_wpa_ie_rsn()
1950 				   "count %u left %u", __func__, count, left);  in wpa_parse_wpa_ie_rsn()
1958 			left -= RSN_SELECTOR_LEN;  in wpa_parse_wpa_ie_rsn()
1965 	} else if (left == 1) {  in wpa_parse_wpa_ie_rsn()
1971 	if (left >= 2) {  in wpa_parse_wpa_ie_rsn()
1975 		left -= 2;  in wpa_parse_wpa_ie_rsn()
1976 		if (count == 0 || count > left / RSN_SELECTOR_LEN) {  in wpa_parse_wpa_ie_rsn()
1978 				   "count %u left %u", __func__, count, left);  in wpa_parse_wpa_ie_rsn()
1984 			left -= RSN_SELECTOR_LEN;  in wpa_parse_wpa_ie_rsn()
1986 	} else if (left == 1) {  in wpa_parse_wpa_ie_rsn()
1992 	if (left >= 2) {  in wpa_parse_wpa_ie_rsn()
1995 		left -= 2;  in wpa_parse_wpa_ie_rsn()
1998 	if (left >= 2) {  in wpa_parse_wpa_ie_rsn()
2001 		left -= 2;  in wpa_parse_wpa_ie_rsn()
2002 		if (num_pmkid > (unsigned int) left / PMKID_LEN) {  in wpa_parse_wpa_ie_rsn()
2005 				   __func__, num_pmkid, left);  in wpa_parse_wpa_ie_rsn()
2012 			left -= data->num_pmkid * PMKID_LEN;  in wpa_parse_wpa_ie_rsn()
2016 	if (left >= 4) {  in wpa_parse_wpa_ie_rsn()
2026 		left -= RSN_SELECTOR_LEN;  in wpa_parse_wpa_ie_rsn()
2029 	if (left > 0) {  in wpa_parse_wpa_ie_rsn()
2032 			    pos, left);  in wpa_parse_wpa_ie_rsn()
2068 	int left;  in wpa_parse_wpa_ie_wpa()  local
2099 	left = wpa_ie_len - sizeof(*hdr);  in wpa_parse_wpa_ie_wpa()
2101 	if (left >= WPA_SELECTOR_LEN) {  in wpa_parse_wpa_ie_wpa()
2104 		left -= WPA_SELECTOR_LEN;  in wpa_parse_wpa_ie_wpa()
2105 	} else if (left > 0) {  in wpa_parse_wpa_ie_wpa()
2107 			   __func__, left);  in wpa_parse_wpa_ie_wpa()
2111 	if (left >= 2) {  in wpa_parse_wpa_ie_wpa()
2115 		left -= 2;  in wpa_parse_wpa_ie_wpa()
2116 		if (count == 0 || count > left / WPA_SELECTOR_LEN) {  in wpa_parse_wpa_ie_wpa()
2118 				   "count %u left %u", __func__, count, left);  in wpa_parse_wpa_ie_wpa()
2124 			left -= WPA_SELECTOR_LEN;  in wpa_parse_wpa_ie_wpa()
2126 	} else if (left == 1) {  in wpa_parse_wpa_ie_wpa()
2132 	if (left >= 2) {  in wpa_parse_wpa_ie_wpa()
2136 		left -= 2;  in wpa_parse_wpa_ie_wpa()
2137 		if (count == 0 || count > left / WPA_SELECTOR_LEN) {  in wpa_parse_wpa_ie_wpa()
2139 				   "count %u left %u", __func__, count, left);  in wpa_parse_wpa_ie_wpa()
2145 			left -= WPA_SELECTOR_LEN;  in wpa_parse_wpa_ie_wpa()
2147 	} else if (left == 1) {  in wpa_parse_wpa_ie_wpa()
2153 	if (left >= 2) {  in wpa_parse_wpa_ie_wpa()
2156 		left -= 2;  in wpa_parse_wpa_ie_wpa()
2159 	if (left > 0) {  in wpa_parse_wpa_ie_wpa()
2162 			    pos, left);  in wpa_parse_wpa_ie_wpa()
3449 	size_t left;  in wpa_parse_generic()  local
3463 	left = len - RSN_SELECTOR_LEN;  in wpa_parse_generic()
3465 	if (left >= 2 && selector == WPA_OUI_TYPE && p[0] == 1 && p[1] == 0) {  in wpa_parse_generic()
3479 	if (left >= PMKID_LEN && selector == RSN_KEY_DATA_PMKID) {  in wpa_parse_generic()
3485 	if (left >= 2 && selector == RSN_KEY_DATA_KEYID) {  in wpa_parse_generic()
3491 	if (left > 2 && selector == RSN_KEY_DATA_GROUPKEY) {  in wpa_parse_generic()
3493 		ie->gtk_len = left;  in wpa_parse_generic()
3498 	if (left >= ETH_ALEN && selector == RSN_KEY_DATA_MAC_ADDR) {  in wpa_parse_generic()
3505 	if (left > 2 && selector == RSN_KEY_DATA_IGTK) {  in wpa_parse_generic()
3507 		ie->igtk_len = left;  in wpa_parse_generic()
3513 	if (left > 2 && selector == RSN_KEY_DATA_BIGTK) {  in wpa_parse_generic()
3515 		ie->bigtk_len = left;  in wpa_parse_generic()
3521 	if (left >= 1 && selector == WFA_KEY_DATA_IP_ADDR_REQ) {  in wpa_parse_generic()
3524 			    ie->ip_addr_req, left);  in wpa_parse_generic()
3528 	if (left >= 3 * 4 && selector == WFA_KEY_DATA_IP_ADDR_ALLOC) {  in wpa_parse_generic()
3532 			    ie->ip_addr_alloc, left);  in wpa_parse_generic()
3536 	if (left > 2 && selector == RSN_KEY_DATA_OCI) {  in wpa_parse_generic()
3538 		ie->oci_len = left;  in wpa_parse_generic()
3544 	if (left >= 1 && selector == WFA_KEY_DATA_TRANSITION_DISABLE) {  in wpa_parse_generic()
3546 		ie->transition_disable_len = left;  in wpa_parse_generic()
3553 	if (left >= 2 && selector == WFA_KEY_DATA_DPP) {  in wpa_parse_generic()
3555 		ie->dpp_kde_len = left;  in wpa_parse_generic()
3560 	if (left >= RSN_MLO_GTK_KDE_PREFIX_LENGTH &&  in wpa_parse_generic()
3569 		ie->mlo_gtk_len[link_id] = left;  in wpa_parse_generic()
3578 	if (left >= RSN_MLO_IGTK_KDE_PREFIX_LENGTH &&  in wpa_parse_generic()
3587 		ie->mlo_igtk_len[link_id] = left;  in wpa_parse_generic()
3596 	if (left >= RSN_MLO_BIGTK_KDE_PREFIX_LENGTH &&  in wpa_parse_generic()
3605 		ie->mlo_bigtk_len[link_id] = left;  in wpa_parse_generic()
3614 	if (left >= RSN_MLO_LINK_KDE_FIXED_LENGTH &&  in wpa_parse_generic()
3623 		ie->mlo_link_len[link_id] = left;  in wpa_parse_generic()
3632 	if (left >= 1 && selector == WFA_KEY_DATA_RSN_OVERRIDE_LINK) {  in wpa_parse_generic()
3638 		ie->rsn_override_link_len[link_id] = left;  in wpa_parse_generic()
3676 		ie->rsn_selection_len = left;  in wpa_parse_generic()