715 	int ret, buflen;  in rndis_query_oid()  local
718 	buflen = *len + sizeof(*u.get);  in rndis_query_oid()
719 	if (buflen < CONTROL_BUFFER_SIZE)  in rndis_query_oid()
720 		buflen = CONTROL_BUFFER_SIZE;  in rndis_query_oid()
722 	if (buflen > COMMAND_BUFFER_SIZE) {  in rndis_query_oid()
723 		u.buf = kmalloc(buflen, GFP_KERNEL);  in rndis_query_oid()
738 	ret = rndis_command(dev, u.header, buflen);  in rndis_query_oid()
749 		if (respoffs > buflen) {  in rndis_query_oid()
753 				oid_to_string(oid), respoffs, buflen);  in rndis_query_oid()
759 		if ((resplen + respoffs) > buflen) {  in rndis_query_oid()
763 			copylen = buflen - respoffs;  in rndis_query_oid()
800 	int ret, buflen;  in rndis_set_oid()  local
802 	buflen = len + sizeof(*u.set);  in rndis_set_oid()
803 	if (buflen < CONTROL_BUFFER_SIZE)  in rndis_set_oid()
804 		buflen = CONTROL_BUFFER_SIZE;  in rndis_set_oid()
806 	if (buflen > COMMAND_BUFFER_SIZE) {  in rndis_set_oid()
807 		u.buf = kmalloc(buflen, GFP_KERNEL);  in rndis_set_oid()
826 	ret = rndis_command(dev, u.header, buflen);  in rndis_set_oid()
2904 	int flags, buflen, key_id;  in rndis_wlan_auth_indication()  local
2918 	buflen = len - offsetof(struct ndis_80211_status_indication, u);  in rndis_wlan_auth_indication()
2920 	while (buflen >= sizeof(*auth_req)) {  in rndis_wlan_auth_indication()
2963 		buflen -= le32_to_cpu(auth_req->length);  in rndis_wlan_auth_indication()
3016 			struct rndis_indicate *msg, int buflen)  in rndis_wlan_media_specific_indication()  argument
3031 	if (len > buflen || offset > buflen || offset + len > buflen) {  in rndis_wlan_media_specific_indication()
3033 			    offset + len, buflen);  in rndis_wlan_media_specific_indication()
3064 static void rndis_wlan_indication(struct usbnet *usbdev, void *ind, int buflen)  in rndis_wlan_indication()  argument
3099 		rndis_wlan_media_specific_indication(usbdev, msg, buflen);  in rndis_wlan_indication()