427 	struct iw_event iwe_buf, *iwe = &iwe_buf;  in wpa_driver_wext_event_wireless()  local
438 			   iwe->cmd, iwe->len);  in wpa_driver_wext_event_wireless()
439 		if (iwe->len <= IW_EV_LCP_LEN || iwe->len > end - pos)  in wpa_driver_wext_event_wireless()
444 		    (iwe->cmd == IWEVMICHAELMICFAILURE ||  in wpa_driver_wext_event_wireless()
445 		     iwe->cmd == IWEVCUSTOM ||  in wpa_driver_wext_event_wireless()
446 		     iwe->cmd == IWEVASSOCREQIE ||  in wpa_driver_wext_event_wireless()
447 		     iwe->cmd == IWEVASSOCRESPIE ||  in wpa_driver_wext_event_wireless()
448 		     iwe->cmd == IWEVPMKIDCAND)) {  in wpa_driver_wext_event_wireless()
459 		switch (iwe->cmd) {  in wpa_driver_wext_event_wireless()
463 				   MAC2STR((u8 *) iwe->u.ap_addr.sa_data));  in wpa_driver_wext_event_wireless()
465 				    (const u8 *) iwe->u.ap_addr.sa_data) ||  in wpa_driver_wext_event_wireless()
466 			    os_memcmp(iwe->u.ap_addr.sa_data,  in wpa_driver_wext_event_wireless()
483 			if (iwe->u.data.length > end - custom) {  in wpa_driver_wext_event_wireless()
489 				drv->ctx, custom, iwe->u.data.length);  in wpa_driver_wext_event_wireless()
492 			if (iwe->u.data.length > end - custom) {  in wpa_driver_wext_event_wireless()
497 			buf = dup_binstr(custom, iwe->u.data.length);  in wpa_driver_wext_event_wireless()
511 			if (iwe->u.data.length > end - custom) {  in wpa_driver_wext_event_wireless()
517 				drv, custom, iwe->u.data.length);  in wpa_driver_wext_event_wireless()
520 			if (iwe->u.data.length > end - custom) {  in wpa_driver_wext_event_wireless()
526 				drv, custom, iwe->u.data.length);  in wpa_driver_wext_event_wireless()
529 			if (iwe->u.data.length > end - custom) {  in wpa_driver_wext_event_wireless()
535 				drv, custom, iwe->u.data.length);  in wpa_driver_wext_event_wireless()
539 		pos += iwe->len;  in wpa_driver_wext_event_wireless()
1209 static void wext_get_scan_mode(struct iw_event *iwe,  in wext_get_scan_mode()  argument
1212 	if (iwe->u.mode == IW_MODE_ADHOC)  in wext_get_scan_mode()
1214 	else if (iwe->u.mode == IW_MODE_MASTER || iwe->u.mode == IW_MODE_INFRA)  in wext_get_scan_mode()
1219 static void wext_get_scan_ssid(struct iw_event *iwe,  in wext_get_scan_ssid()  argument
1223 	int ssid_len = iwe->u.essid.length;  in wext_get_scan_ssid()
1226 	if (iwe->u.essid.flags &&  in wext_get_scan_ssid()
1235 static void wext_get_scan_freq(struct iw_event *iwe,  in wext_get_scan_freq()  argument
1240 	if (iwe->u.freq.e == 0) {  in wext_get_scan_freq()
1253 		if (iwe->u.freq.m >= 1 && iwe->u.freq.m <= 13) {  in wext_get_scan_freq()
1254 			res->res.freq = 2407 + 5 * iwe->u.freq.m;  in wext_get_scan_freq()
1256 		} else if (iwe->u.freq.m == 14) {  in wext_get_scan_freq()
1262 	if (iwe->u.freq.e > 6) {  in wext_get_scan_freq()
1265 			   MAC2STR(res->res.bssid), iwe->u.freq.m,  in wext_get_scan_freq()
1266 			   iwe->u.freq.e);  in wext_get_scan_freq()
1270 	for (i = 0; i < iwe->u.freq.e; i++)  in wext_get_scan_freq()
1272 	res->res.freq = iwe->u.freq.m / divi;  in wext_get_scan_freq()
1277 			       struct iw_event *iwe,  in wext_get_scan_qual()  argument
1280 	res->res.qual = iwe->u.qual.qual;  in wext_get_scan_qual()
1281 	res->res.noise = iwe->u.qual.noise;  in wext_get_scan_qual()
1282 	res->res.level = iwe->u.qual.level;  in wext_get_scan_qual()
1283 	if (iwe->u.qual.updated & IW_QUAL_QUAL_INVALID)  in wext_get_scan_qual()
1285 	if (iwe->u.qual.updated & IW_QUAL_LEVEL_INVALID)  in wext_get_scan_qual()
1287 	if (iwe->u.qual.updated & IW_QUAL_NOISE_INVALID)  in wext_get_scan_qual()
1289 	if (iwe->u.qual.updated & IW_QUAL_DBM)  in wext_get_scan_qual()
1291 	if ((iwe->u.qual.updated & IW_QUAL_DBM) ||  in wext_get_scan_qual()
1292 	    ((iwe->u.qual.level != 0) &&  in wext_get_scan_qual()
1293 	     (iwe->u.qual.level > drv->max_level))) {  in wext_get_scan_qual()
1294 		if (iwe->u.qual.level >= 64)  in wext_get_scan_qual()
1296 		if (iwe->u.qual.noise >= 64)  in wext_get_scan_qual()
1302 static void wext_get_scan_encode(struct iw_event *iwe,  in wext_get_scan_encode()  argument
1305 	if (!(iwe->u.data.flags & IW_ENCODE_DISABLED))  in wext_get_scan_encode()
1310 static void wext_get_scan_rate(struct iw_event *iwe,  in wext_get_scan_rate()  argument
1319 	clen = iwe->len;  in wext_get_scan_rate()
1339 static void wext_get_scan_iwevgenie(struct iw_event *iwe,  in wext_get_scan_iwevgenie()  argument
1346 	if (iwe->u.data.length == 0)  in wext_get_scan_iwevgenie()
1350 	gend = genie + iwe->u.data.length;  in wext_get_scan_iwevgenie()
1365 static void wext_get_scan_custom(struct iw_event *iwe,  in wext_get_scan_custom()  argument
1372 	clen = iwe->u.data.length;  in wext_get_scan_custom()
1513 	struct iw_event iwe_buf, *iwe = &iwe_buf;  in wpa_driver_wext_get_scan_results()  local
1538 		if (iwe->len <= IW_EV_LCP_LEN || iwe->len > end - pos)  in wpa_driver_wext_get_scan_results()
1542 		if (wext_19_iw_point(drv, iwe->cmd)) {  in wpa_driver_wext_get_scan_results()
1553 		switch (iwe->cmd) {  in wpa_driver_wext_get_scan_results()
1561 				  iwe->u.ap_addr.sa_data, ETH_ALEN);  in wpa_driver_wext_get_scan_results()
1564 			wext_get_scan_mode(iwe, &data);  in wpa_driver_wext_get_scan_results()
1567 			wext_get_scan_ssid(iwe, &data, custom, end);  in wpa_driver_wext_get_scan_results()
1570 			wext_get_scan_freq(iwe, &data);  in wpa_driver_wext_get_scan_results()
1573 			wext_get_scan_qual(drv, iwe, &data);  in wpa_driver_wext_get_scan_results()
1576 			wext_get_scan_encode(iwe, &data);  in wpa_driver_wext_get_scan_results()
1579 			wext_get_scan_rate(iwe, &data, pos, end);  in wpa_driver_wext_get_scan_results()
1582 			wext_get_scan_iwevgenie(iwe, &data, custom, end);  in wpa_driver_wext_get_scan_results()
1585 			wext_get_scan_custom(iwe, &data, custom, end);  in wpa_driver_wext_get_scan_results()
1589 		pos += iwe->len;  in wpa_driver_wext_get_scan_results()