1445 		u8 url_len;  in ieee802_11_rx_bss_trans_mgmt_req()  local
1452 		url_len = *pos++;  in ieee802_11_rx_bss_trans_mgmt_req()
1453 		if (url_len > end - pos) {  in ieee802_11_rx_bss_trans_mgmt_req()
1458 		os_memcpy(url, pos, url_len);  in ieee802_11_rx_bss_trans_mgmt_req()
1459 		url[url_len] = '\0';  in ieee802_11_rx_bss_trans_mgmt_req()
1460 		pos += url_len;  in ieee802_11_rx_bss_trans_mgmt_req()
1765 			u8 url_len;  in ieee802_11_rx_wnm_notif_req_wfa()  local
1773 			url_len = *pos++;  in ieee802_11_rx_wnm_notif_req_wfa()
1774 			if (url_len == 0) {  in ieee802_11_rx_wnm_notif_req_wfa()
1779 				if (url_len + 1 > ie_end - pos) {  in ieee802_11_rx_wnm_notif_req_wfa()
1781 						   url_len,  in ieee802_11_rx_wnm_notif_req_wfa()
1785 				url = os_malloc(url_len + 1);  in ieee802_11_rx_wnm_notif_req_wfa()
1788 				os_memcpy(url, pos, url_len);  in ieee802_11_rx_wnm_notif_req_wfa()
1789 				url[url_len] = '\0';  in ieee802_11_rx_wnm_notif_req_wfa()
1790 				osu_method = pos[url_len];  in ieee802_11_rx_wnm_notif_req_wfa()
1803 			u8 url_len;  in ieee802_11_rx_wnm_notif_req_wfa()  local
1813 			url_len = *pos++;  in ieee802_11_rx_wnm_notif_req_wfa()
1817 				   code, reauth_delay, url_len);  in ieee802_11_rx_wnm_notif_req_wfa()
1818 			if (url_len > ie_end - pos)  in ieee802_11_rx_wnm_notif_req_wfa()
1820 			url = os_malloc(url_len + 1);  in ieee802_11_rx_wnm_notif_req_wfa()
1823 			os_memcpy(url, pos, url_len);  in ieee802_11_rx_wnm_notif_req_wfa()
1824 			url[url_len] = '\0';  in ieee802_11_rx_wnm_notif_req_wfa()
1836 			u8 url_len;  in ieee802_11_rx_wnm_notif_req_wfa()  local
1841 			url_len = *pos++;  in ieee802_11_rx_wnm_notif_req_wfa()
1844 				   url_len);  in ieee802_11_rx_wnm_notif_req_wfa()
1845 			if (url_len > ie_end - pos)  in ieee802_11_rx_wnm_notif_req_wfa()
1847 			url = os_malloc(url_len + 1);  in ieee802_11_rx_wnm_notif_req_wfa()
1850 			os_memcpy(url, pos, url_len);  in ieee802_11_rx_wnm_notif_req_wfa()
1851 			url[url_len] = '\0';  in ieee802_11_rx_wnm_notif_req_wfa()