416 	struct iw_event iwe_buf, *iwe = &iwe_buf;  in wpa_driver_wext_event_wireless()  local
427 			   iwe->cmd, iwe->len);  in wpa_driver_wext_event_wireless()
428 		if (iwe->len <= IW_EV_LCP_LEN || iwe->len > end - pos)  in wpa_driver_wext_event_wireless()
433 		    (iwe->cmd == IWEVMICHAELMICFAILURE ||  in wpa_driver_wext_event_wireless()
434 		     iwe->cmd == IWEVCUSTOM ||  in wpa_driver_wext_event_wireless()
435 		     iwe->cmd == IWEVASSOCREQIE ||  in wpa_driver_wext_event_wireless()
436 		     iwe->cmd == IWEVASSOCRESPIE ||  in wpa_driver_wext_event_wireless()
437 		     iwe->cmd == IWEVPMKIDCAND)) {  in wpa_driver_wext_event_wireless()
448 		switch (iwe->cmd) {  in wpa_driver_wext_event_wireless()
452 				   MAC2STR((u8 *) iwe->u.ap_addr.sa_data));  in wpa_driver_wext_event_wireless()
454 				    (const u8 *) iwe->u.ap_addr.sa_data) ||  in wpa_driver_wext_event_wireless()
455 			    os_memcmp(iwe->u.ap_addr.sa_data,  in wpa_driver_wext_event_wireless()
472 			if (iwe->u.data.length > end - custom) {  in wpa_driver_wext_event_wireless()
478 				drv->ctx, custom, iwe->u.data.length);  in wpa_driver_wext_event_wireless()
481 			if (iwe->u.data.length > end - custom) {  in wpa_driver_wext_event_wireless()
486 			buf = dup_binstr(custom, iwe->u.data.length);  in wpa_driver_wext_event_wireless()
500 			if (iwe->u.data.length > end - custom) {  in wpa_driver_wext_event_wireless()
506 				drv, custom, iwe->u.data.length);  in wpa_driver_wext_event_wireless()
509 			if (iwe->u.data.length > end - custom) {  in wpa_driver_wext_event_wireless()
515 				drv, custom, iwe->u.data.length);  in wpa_driver_wext_event_wireless()
518 			if (iwe->u.data.length > end - custom) {  in wpa_driver_wext_event_wireless()
524 				drv, custom, iwe->u.data.length);  in wpa_driver_wext_event_wireless()
528 		pos += iwe->len;  in wpa_driver_wext_event_wireless()
1200 static void wext_get_scan_mode(struct iw_event *iwe,  in wext_get_scan_mode()  argument
1203 	if (iwe->u.mode == IW_MODE_ADHOC)  in wext_get_scan_mode()
1205 	else if (iwe->u.mode == IW_MODE_MASTER || iwe->u.mode == IW_MODE_INFRA)  in wext_get_scan_mode()
1210 static void wext_get_scan_ssid(struct iw_event *iwe,  in wext_get_scan_ssid()  argument
1214 	int ssid_len = iwe->u.essid.length;  in wext_get_scan_ssid()
1217 	if (iwe->u.essid.flags &&  in wext_get_scan_ssid()
1226 static void wext_get_scan_freq(struct iw_event *iwe,  in wext_get_scan_freq()  argument
1231 	if (iwe->u.freq.e == 0) {  in wext_get_scan_freq()
1244 		if (iwe->u.freq.m >= 1 && iwe->u.freq.m <= 13) {  in wext_get_scan_freq()
1245 			res->res.freq = 2407 + 5 * iwe->u.freq.m;  in wext_get_scan_freq()
1247 		} else if (iwe->u.freq.m == 14) {  in wext_get_scan_freq()
1253 	if (iwe->u.freq.e > 6) {  in wext_get_scan_freq()
1256 			   MAC2STR(res->res.bssid), iwe->u.freq.m,  in wext_get_scan_freq()
1257 			   iwe->u.freq.e);  in wext_get_scan_freq()
1261 	for (i = 0; i < iwe->u.freq.e; i++)  in wext_get_scan_freq()
1263 	res->res.freq = iwe->u.freq.m / divi;  in wext_get_scan_freq()
1268 			       struct iw_event *iwe,  in wext_get_scan_qual()  argument
1271 	res->res.qual = iwe->u.qual.qual;  in wext_get_scan_qual()
1272 	res->res.noise = iwe->u.qual.noise;  in wext_get_scan_qual()
1273 	res->res.level = iwe->u.qual.level;  in wext_get_scan_qual()
1274 	if (iwe->u.qual.updated & IW_QUAL_QUAL_INVALID)  in wext_get_scan_qual()
1276 	if (iwe->u.qual.updated & IW_QUAL_LEVEL_INVALID)  in wext_get_scan_qual()
1278 	if (iwe->u.qual.updated & IW_QUAL_NOISE_INVALID)  in wext_get_scan_qual()
1280 	if (iwe->u.qual.updated & IW_QUAL_DBM)  in wext_get_scan_qual()
1282 	if ((iwe->u.qual.updated & IW_QUAL_DBM) ||  in wext_get_scan_qual()
1283 	    ((iwe->u.qual.level != 0) &&  in wext_get_scan_qual()
1284 	     (iwe->u.qual.level > drv->max_level))) {  in wext_get_scan_qual()
1285 		if (iwe->u.qual.level >= 64)  in wext_get_scan_qual()
1287 		if (iwe->u.qual.noise >= 64)  in wext_get_scan_qual()
1293 static void wext_get_scan_encode(struct iw_event *iwe,  in wext_get_scan_encode()  argument
1296 	if (!(iwe->u.data.flags & IW_ENCODE_DISABLED))  in wext_get_scan_encode()
1301 static void wext_get_scan_rate(struct iw_event *iwe,  in wext_get_scan_rate()  argument
1310 	clen = iwe->len;  in wext_get_scan_rate()
1330 static void wext_get_scan_iwevgenie(struct iw_event *iwe,  in wext_get_scan_iwevgenie()  argument
1337 	if (iwe->u.data.length == 0)  in wext_get_scan_iwevgenie()
1341 	gend = genie + iwe->u.data.length;  in wext_get_scan_iwevgenie()
1356 static void wext_get_scan_custom(struct iw_event *iwe,  in wext_get_scan_custom()  argument
1363 	clen = iwe->u.data.length;  in wext_get_scan_custom()
1504 	struct iw_event iwe_buf, *iwe = &iwe_buf;  in wpa_driver_wext_get_scan_results()  local
1529 		if (iwe->len <= IW_EV_LCP_LEN || iwe->len > end - pos)  in wpa_driver_wext_get_scan_results()
1533 		if (wext_19_iw_point(drv, iwe->cmd)) {  in wpa_driver_wext_get_scan_results()
1544 		switch (iwe->cmd) {  in wpa_driver_wext_get_scan_results()
1552 				  iwe->u.ap_addr.sa_data, ETH_ALEN);  in wpa_driver_wext_get_scan_results()
1555 			wext_get_scan_mode(iwe, &data);  in wpa_driver_wext_get_scan_results()
1558 			wext_get_scan_ssid(iwe, &data, custom, end);  in wpa_driver_wext_get_scan_results()
1561 			wext_get_scan_freq(iwe, &data);  in wpa_driver_wext_get_scan_results()
1564 			wext_get_scan_qual(drv, iwe, &data);  in wpa_driver_wext_get_scan_results()
1567 			wext_get_scan_encode(iwe, &data);  in wpa_driver_wext_get_scan_results()
1570 			wext_get_scan_rate(iwe, &data, pos, end);  in wpa_driver_wext_get_scan_results()
1573 			wext_get_scan_iwevgenie(iwe, &data, custom, end);  in wpa_driver_wext_get_scan_results()
1576 			wext_get_scan_custom(iwe, &data, custom, end);  in wpa_driver_wext_get_scan_results()
1580 		pos += iwe->len;  in wpa_driver_wext_get_scan_results()