126 	u8 rates[MWIFIEX_SUPPORTED_RATES], *pos;  in mwifiex_tdls_append_rates_ie()  local
140 	pos = skb_put(skb, supp_rates_size + 2);  in mwifiex_tdls_append_rates_ie()
141 	*pos++ = WLAN_EID_SUPP_RATES;  in mwifiex_tdls_append_rates_ie()
142 	*pos++ = supp_rates_size;  in mwifiex_tdls_append_rates_ie()
143 	memcpy(pos, rates, supp_rates_size);  in mwifiex_tdls_append_rates_ie()
147 		pos = skb_put(skb, ext_rates_size + 2);  in mwifiex_tdls_append_rates_ie()
148 		*pos++ = WLAN_EID_EXT_SUPP_RATES;  in mwifiex_tdls_append_rates_ie()
149 		*pos++ = ext_rates_size;  in mwifiex_tdls_append_rates_ie()
150 		memcpy(pos, rates + MWIFIEX_TDLS_SUPPORTED_RATES,  in mwifiex_tdls_append_rates_ie()
161 	u8 *pos;  in mwifiex_tdls_add_aid()  local
164 	pos = (void *)skb_put(skb, 4);  in mwifiex_tdls_add_aid()
165 	*pos++ = WLAN_EID_AID;  in mwifiex_tdls_add_aid()
166 	*pos++ = 2;  in mwifiex_tdls_add_aid()
167 	*pos++ = le16_to_cpu(assoc_rsp->a_id);  in mwifiex_tdls_add_aid()
176 	u8 *pos;  in mwifiex_tdls_add_vht_capab()  local
178 	pos = (void *)skb_put(skb, sizeof(struct ieee80211_vht_cap) + 2);  in mwifiex_tdls_add_vht_capab()
179 	*pos++ = WLAN_EID_VHT_CAPABILITY;  in mwifiex_tdls_add_vht_capab()
180 	*pos++ = sizeof(struct ieee80211_vht_cap);  in mwifiex_tdls_add_vht_capab()
185 	memcpy(pos, &vht_cap, sizeof(vht_cap));  in mwifiex_tdls_add_vht_capab()
198 	u8 *pos;  in mwifiex_tdls_add_ht_oper()  local
207 	pos = (void *)skb_put(skb, sizeof(struct ieee80211_ht_operation) + 2);  in mwifiex_tdls_add_ht_oper()
208 	*pos++ = WLAN_EID_HT_OPERATION;  in mwifiex_tdls_add_ht_oper()
209 	*pos++ = sizeof(struct ieee80211_ht_operation);  in mwifiex_tdls_add_ht_oper()
210 	ht_oper = (void *)pos;  in mwifiex_tdls_add_ht_oper()
241 	u8 *pos, ap_supp_chwd_set, chan_bw;  in mwifiex_tdls_add_vht_oper()  local
265 	pos = (void *)skb_put(skb, sizeof(struct ieee80211_vht_operation) + 2);  in mwifiex_tdls_add_vht_oper()
266 	*pos++ = WLAN_EID_VHT_OPERATION;  in mwifiex_tdls_add_vht_oper()
267 	*pos++ = sizeof(struct ieee80211_vht_operation);  in mwifiex_tdls_add_vht_oper()
268 	vht_oper = (struct ieee80211_vht_operation *)pos;  in mwifiex_tdls_add_vht_oper()
364 	u8 *pos = (void *)skb_put(skb, 3);  in mwifiex_tdls_add_qos_capab()  local
366 	*pos++ = WLAN_EID_QOS_CAPA;  in mwifiex_tdls_add_qos_capab()
367 	*pos++ = 1;  in mwifiex_tdls_add_qos_capab()
368 	*pos++ = MWIFIEX_TDLS_DEF_QOS_CAPAB;  in mwifiex_tdls_add_qos_capab()
429 	u8 radio, *pos;  in mwifiex_prep_tdls_encap_data()  local
452 		pos = (void *)skb_put(skb, sizeof(struct ieee80211_ht_cap) + 2);  in mwifiex_prep_tdls_encap_data()
453 		*pos++ = WLAN_EID_HT_CAPABILITY;  in mwifiex_prep_tdls_encap_data()
454 		*pos++ = sizeof(struct ieee80211_ht_cap);  in mwifiex_prep_tdls_encap_data()
455 		ht_cap = (void *)pos;  in mwifiex_prep_tdls_encap_data()
490 		pos = (void *)skb_put(skb, sizeof(struct ieee80211_ht_cap) + 2);  in mwifiex_prep_tdls_encap_data()
491 		*pos++ = WLAN_EID_HT_CAPABILITY;  in mwifiex_prep_tdls_encap_data()
492 		*pos++ = sizeof(struct ieee80211_ht_cap);  in mwifiex_prep_tdls_encap_data()
493 		ht_cap = (void *)pos;  in mwifiex_prep_tdls_encap_data()
683 	u8 radio, *pos;  in mwifiex_construct_tdls_action_frame()  local
697 	pos = skb_put(skb, ETH_ALEN);  in mwifiex_construct_tdls_action_frame()
710 		memmove(pos + ETH_ALEN, &mgmt->u.action.category,  in mwifiex_construct_tdls_action_frame()
713 		memcpy(pos, bc_addr, ETH_ALEN);  in mwifiex_construct_tdls_action_frame()
721 		pos = (void *)skb_put(skb, sizeof(struct ieee80211_ht_cap) + 2);  in mwifiex_construct_tdls_action_frame()
722 		*pos++ = WLAN_EID_HT_CAPABILITY;  in mwifiex_construct_tdls_action_frame()
723 		*pos++ = sizeof(struct ieee80211_ht_cap);  in mwifiex_construct_tdls_action_frame()
724 		ht_cap = (void *)pos;  in mwifiex_construct_tdls_action_frame()
759 	u8 *pos;  in mwifiex_send_tdls_action_frame()  local
793 	pos = skb_put(skb, MWIFIEX_MGMT_FRAME_HEADER_SIZE + sizeof(pkt_len));  in mwifiex_send_tdls_action_frame()
794 	memset(pos, 0, MWIFIEX_MGMT_FRAME_HEADER_SIZE + sizeof(pkt_len));  in mwifiex_send_tdls_action_frame()
795 	memcpy(pos, &pkt_type, sizeof(pkt_type));  in mwifiex_send_tdls_action_frame()
796 	memcpy(pos + sizeof(pkt_type), &tx_control, sizeof(tx_control));  in mwifiex_send_tdls_action_frame()
837 	u8 *peer, *pos, *end;  in mwifiex_process_tdls_action_frame()  local
859 		pos = buf + sizeof(struct ethhdr) + 4;  in mwifiex_process_tdls_action_frame()
861 		cap = cpu_to_le16(*(u16 *)pos);  in mwifiex_process_tdls_action_frame()
863 		pos += 2;  in mwifiex_process_tdls_action_frame()
870 		pos = buf + sizeof(struct ethhdr) + 6;  in mwifiex_process_tdls_action_frame()
871 		cap = cpu_to_le16(*(u16 *)pos);  in mwifiex_process_tdls_action_frame()
873 		pos += 2;  in mwifiex_process_tdls_action_frame()
879 		pos = buf + sizeof(struct ethhdr) + TDLS_CONFIRM_FIX_LEN;  in mwifiex_process_tdls_action_frame()
893 	for (end = pos + ie_len; pos + 1 < end; pos += 2 + pos[1]) {  in mwifiex_process_tdls_action_frame()
894 		if (pos + 2 + pos[1] > end)  in mwifiex_process_tdls_action_frame()
897 		switch (*pos) {  in mwifiex_process_tdls_action_frame()
899 			sta_ptr->tdls_cap.rates_len = pos[1];  in mwifiex_process_tdls_action_frame()
900 			for (i = 0; i < pos[1]; i++)  in mwifiex_process_tdls_action_frame()
901 				sta_ptr->tdls_cap.rates[i] = pos[i + 2];  in mwifiex_process_tdls_action_frame()
906 			for (i = 0; i < pos[1]; i++)  in mwifiex_process_tdls_action_frame()
907 				sta_ptr->tdls_cap.rates[basic + i] = pos[i + 2];  in mwifiex_process_tdls_action_frame()
908 			sta_ptr->tdls_cap.rates_len += pos[1];  in mwifiex_process_tdls_action_frame()
911 			memcpy((u8 *)&sta_ptr->tdls_cap.ht_capb, pos,  in mwifiex_process_tdls_action_frame()
916 			memcpy(&sta_ptr->tdls_cap.ht_oper, pos,  in mwifiex_process_tdls_action_frame()
920 			sta_ptr->tdls_cap.coex_2040 = pos[2];  in mwifiex_process_tdls_action_frame()
923 			memcpy((u8 *)&sta_ptr->tdls_cap.extcap, pos,  in mwifiex_process_tdls_action_frame()
925 			       min_t(u8, pos[1], 8));  in mwifiex_process_tdls_action_frame()
928 			memcpy((u8 *)&sta_ptr->tdls_cap.rsn_ie, pos,  in mwifiex_process_tdls_action_frame()
930 			       min_t(u8, pos[1], IEEE_MAX_IE_SIZE -  in mwifiex_process_tdls_action_frame()
934 			sta_ptr->tdls_cap.qos_info = pos[2];  in mwifiex_process_tdls_action_frame()
938 				memcpy(&sta_ptr->tdls_cap.vhtoper, pos,  in mwifiex_process_tdls_action_frame()
943 				memcpy((u8 *)&sta_ptr->tdls_cap.vhtcap, pos,  in mwifiex_process_tdls_action_frame()
951 					      le16_to_cpu(*(__le16 *)(pos + 2));  in mwifiex_process_tdls_action_frame()