382 	caddr_t ep;  in pfkey_send_getspi()  local
430 	ep = ((caddr_t)(void *)newmsg) + len;  in pfkey_send_getspi()
432 	p = pfkey_setsadbmsg((void *)newmsg, ep, SADB_GETSPI,  in pfkey_send_getspi()
439 	p = pfkey_setsadbxsa2(p, ep, mode, reqid);  in pfkey_send_getspi()
446 	p = pfkey_setsadbaddr(p, ep, SADB_EXT_ADDRESS_SRC, src, (u_int)plen,  in pfkey_send_getspi()
454 	p = pfkey_setsadbaddr(p, ep, SADB_EXT_ADDRESS_DST, dst, (u_int)plen,  in pfkey_send_getspi()
465 		if (p + sizeof(spirange) > ep) {  in pfkey_send_getspi()
480 	if (p != ep) {  in pfkey_send_getspi()
570 	caddr_t ep;  in pfkey_send_delete_all()  local
604 	ep = ((caddr_t)(void *)newmsg) + len;  in pfkey_send_delete_all()
606 	p = pfkey_setsadbmsg((void *)newmsg, ep, SADB_DELETE, (u_int)len,   in pfkey_send_delete_all()
612 	p = pfkey_setsadbaddr(p, ep, SADB_EXT_ADDRESS_SRC, src, (u_int)plen,  in pfkey_send_delete_all()
618 	p = pfkey_setsadbaddr(p, ep, SADB_EXT_ADDRESS_DST, dst, (u_int)plen,  in pfkey_send_delete_all()
620 	if (!p || p != ep) {  in pfkey_send_delete_all()
743 	caddr_t ep;  in pfkey_set_supported()  local
752 	ep = p + tlen;  in pfkey_set_supported()
756 	while (p < ep) {  in pfkey_set_supported()
758 		if (ep < p + sizeof(*sup) ||  in pfkey_set_supported()
760 		    ep < p + sup->sadb_supported_len) {  in pfkey_set_supported()
784 	if (p != ep) {  in pfkey_set_supported()
1079 	caddr_t ep;  in pfkey_send_migrate()  local
1119 	ep = ((caddr_t)newmsg) + len;  in pfkey_send_migrate()
1121 	p = pfkey_setsadbmsg((caddr_t)newmsg, ep, SADB_X_MIGRATE, (u_int)len,  in pfkey_send_migrate()
1127 	p = pfkey_setsadbaddr(p, ep, SADB_EXT_ADDRESS_SRC, src, prefs, proto);  in pfkey_send_migrate()
1132 	p = pfkey_setsadbaddr(p, ep, SADB_EXT_ADDRESS_DST, dst, prefd, proto);  in pfkey_send_migrate()
1133 	if (!p || p + policylen != ep) {  in pfkey_send_migrate()
1160 	caddr_t ep;  in pfkey_send_x1()  local
1281 	ep = ((caddr_t)(void *)newmsg) + len;  in pfkey_send_x1()
1283 	p = pfkey_setsadbmsg((void *)newmsg, ep, sa_parms->type, (u_int)len,  in pfkey_send_x1()
1289 	p = pfkey_setsadbsa(p, ep, sa_parms->spi, sa_parms->wsize,   in pfkey_send_x1()
1296 	p = pfkey_setsadbxsa2(p, ep, sa_parms->mode, sa_parms->reqid);  in pfkey_send_x1()
1301 	p = pfkey_setsadbaddr(p, ep, SADB_EXT_ADDRESS_SRC, sa_parms->src,   in pfkey_send_x1()
1307 	p = pfkey_setsadbaddr(p, ep, SADB_EXT_ADDRESS_DST, sa_parms->dst,   in pfkey_send_x1()
1316 		p = pfkey_setsadbkey(p, ep, SADB_EXT_KEY_ENCRYPT,  in pfkey_send_x1()
1324 		p = pfkey_setsadbkey(p, ep, SADB_EXT_KEY_AUTH,  in pfkey_send_x1()
1334 	p = pfkey_setsadblifetime(p, ep, SADB_EXT_LIFETIME_HARD,  in pfkey_send_x1()
1341 	p = pfkey_setsadblifetime(p, ep, SADB_EXT_LIFETIME_SOFT,  in pfkey_send_x1()
1350 		p = pfkey_setsecctx(p, ep, SADB_X_EXT_SEC_CTX, sa_parms->ctxdoi,  in pfkey_send_x1()
1363 		p = pfkey_set_natt_type(p, ep, SADB_X_EXT_NAT_T_TYPE,   in pfkey_send_x1()
1370 		p = pfkey_set_natt_port(p, ep, SADB_X_EXT_NAT_T_SPORT,  in pfkey_send_x1()
1377 		p = pfkey_set_natt_port(p, ep, SADB_X_EXT_NAT_T_DPORT,  in pfkey_send_x1()
1385 			p = pfkey_setsadbaddr(p, ep, SADB_X_EXT_NAT_T_OA,  in pfkey_send_x1()
1397 			p = pfkey_set_natt_frag(p, ep, SADB_X_EXT_NAT_T_FRAG,  in pfkey_send_x1()
1408 	if (p != ep) {  in pfkey_send_x1()
1434 	caddr_t ep;  in pfkey_send_x2()  local
1469 	ep = ((caddr_t)(void *)newmsg) + len;  in pfkey_send_x2()
1471 	p = pfkey_setsadbmsg((void *)newmsg, ep, type, (u_int)len, satype, 0,  in pfkey_send_x2()
1477 	p = pfkey_setsadbsa(p, ep, spi, 0, 0, 0, 0);  in pfkey_send_x2()
1482 	p = pfkey_setsadbaddr(p, ep, SADB_EXT_ADDRESS_SRC, src, (u_int)plen,  in pfkey_send_x2()
1488 	p = pfkey_setsadbaddr(p, ep, SADB_EXT_ADDRESS_DST, dst, (u_int)plen,  in pfkey_send_x2()
1490 	if (!p || p != ep) {  in pfkey_send_x2()
1516 	caddr_t ep;  in pfkey_send_x3()  local
1549 	ep = ((caddr_t)(void *)newmsg) + len;  in pfkey_send_x3()
1551 	p = pfkey_setsadbmsg((void *)newmsg, ep, type, (u_int)len, satype, 0,  in pfkey_send_x3()
1553 	if (!p || p != ep) {  in pfkey_send_x3()
1579 	caddr_t ep;  in pfkey_send_x4()  local
1620 	ep = ((caddr_t)(void *)newmsg) + len;  in pfkey_send_x4()
1622 	p = pfkey_setsadbmsg((void *)newmsg, ep, type, (u_int)len,  in pfkey_send_x4()
1628 	p = pfkey_setsadbaddr(p, ep, SADB_EXT_ADDRESS_SRC, src, prefs, proto);  in pfkey_send_x4()
1633 	p = pfkey_setsadbaddr(p, ep, SADB_EXT_ADDRESS_DST, dst, prefd, proto);  in pfkey_send_x4()
1638 	p = pfkey_setsadblifetime(p, ep, SADB_EXT_LIFETIME_HARD,  in pfkey_send_x4()
1640 	if (!p || p + policylen != ep) {  in pfkey_send_x4()
1665 	caddr_t ep;  in pfkey_send_x5()  local
1675 	ep = ((caddr_t)(void *)newmsg) + len;  in pfkey_send_x5()
1677 	p = pfkey_setsadbmsg((void *)newmsg, ep, type, (u_int)len,  in pfkey_send_x5()
1684 	if (p + sizeof(xpl) != ep) {  in pfkey_send_x5()
1851 	caddr_t ep;	/* XXX should be passed from upper layer */  in pfkey_align()  local
1867 	ep = p + PFKEY_UNUNIT64(msg->sadb_msg_len);  in pfkey_align()
1872 	while (p < ep) {  in pfkey_align()
1874 		if (ep < p + sizeof(*ext) || PFKEY_EXTLEN(ext) < sizeof(*ext) ||  in pfkey_align()
1875 		    ep < p + PFKEY_EXTLEN(ext)) {  in pfkey_align()
1934 	if (p != ep) {  in pfkey_align()