303 	const unsigned char   *p, *endp;  in load_all_firmwares()  local
311 	endp = p + fw->size;  in load_all_firmwares()
342 	while (p < endp) {  in load_all_firmwares()
355 		if (endp - p < sizeof(type) + sizeof(id) + sizeof(size))  in load_all_firmwares()
367 			if (endp - p < sizeof(size))  in load_all_firmwares()
374 		if (!size || size > endp - p) {  in load_all_firmwares()
380 			       (unsigned)(endp - p), size);  in load_all_firmwares()
545 	unsigned char      *p, *endp, buf[MAX_XFER_SIZE];  in load_firmware()  local
562 	endp = p + priv->firm[pos].size;  in load_firmware()
564 	while (p < endp) {  in load_firmware()
568 		if (p + sizeof(size) > endp) {  in load_firmware()
614 		if ((size + p > endp)) {  in load_firmware()
616 				   size, (int)(endp - p));  in load_firmware()