1097 	size_t ndpoffset = le16_to_cpu(nth16->wNdpIndex);  in cdc_ncm_ndp16()  local
1116 	while (ndpoffset) {  in cdc_ncm_ndp16()
1117 		ndp16 = (struct usb_cdc_ncm_ndp16 *)(skb->data + ndpoffset);  in cdc_ncm_ndp16()
1120 		ndpoffset = le16_to_cpu(ndp16->wNextNdpIndex);  in cdc_ncm_ndp16()
1152 	size_t ndpoffset = le32_to_cpu(nth32->dwNdpIndex);  in cdc_ncm_ndp32()  local
1171 	while (ndpoffset) {  in cdc_ncm_ndp32()
1172 		ndp32 = (struct usb_cdc_ncm_ndp32 *)(skb->data + ndpoffset);  in cdc_ncm_ndp32()
1175 		ndpoffset = le32_to_cpu(ndp32->dwNextNdpIndex);  in cdc_ncm_ndp32()
1654 int cdc_ncm_rx_verify_ndp16(struct sk_buff *skb_in, int ndpoffset)  in cdc_ncm_rx_verify_ndp16()  argument
1661 	if ((ndpoffset + sizeof(struct usb_cdc_ncm_ndp16)) > skb_in->len) {  in cdc_ncm_rx_verify_ndp16()
1663 			  ndpoffset);  in cdc_ncm_rx_verify_ndp16()
1666 	ndp16 = (struct usb_cdc_ncm_ndp16 *)(skb_in->data + ndpoffset);  in cdc_ncm_rx_verify_ndp16()
1680 	if (ndpoffset + ndp_len > skb_in->len) {  in cdc_ncm_rx_verify_ndp16()
1691 int cdc_ncm_rx_verify_ndp32(struct sk_buff *skb_in, int ndpoffset)  in cdc_ncm_rx_verify_ndp32()  argument
1698 	if ((ndpoffset + sizeof(struct usb_cdc_ncm_ndp32)) > skb_in->len) {  in cdc_ncm_rx_verify_ndp32()
1700 			  ndpoffset);  in cdc_ncm_rx_verify_ndp32()
1703 	ndp32 = (struct usb_cdc_ncm_ndp32 *)(skb_in->data + ndpoffset);  in cdc_ncm_rx_verify_ndp32()
1717 	if (ndpoffset + ndp_len > skb_in->len) {  in cdc_ncm_rx_verify_ndp32()
1744 	int ndpoffset;  in cdc_ncm_rx_fixup()  local
1749 		ndpoffset = cdc_ncm_rx_verify_nth16(ctx, skb_in);  in cdc_ncm_rx_fixup()
1751 		ndpoffset = cdc_ncm_rx_verify_nth32(ctx, skb_in);  in cdc_ncm_rx_fixup()
1753 	if (ndpoffset < 0)  in cdc_ncm_rx_fixup()
1758 		nframes = cdc_ncm_rx_verify_ndp16(skb_in, ndpoffset);  in cdc_ncm_rx_fixup()
1762 		ndp.ndp16 = (struct usb_cdc_ncm_ndp16 *)(skb_in->data + ndpoffset);  in cdc_ncm_rx_fixup()
1772 		nframes = cdc_ncm_rx_verify_ndp32(skb_in, ndpoffset);  in cdc_ncm_rx_fixup()
1776 		ndp.ndp32 = (struct usb_cdc_ncm_ndp32 *)(skb_in->data + ndpoffset);  in cdc_ncm_rx_fixup()
1834 		ndpoffset = le16_to_cpu(ndp.ndp16->wNextNdpIndex);  in cdc_ncm_rx_fixup()
1836 		ndpoffset = le32_to_cpu(ndp.ndp32->dwNextNdpIndex);  in cdc_ncm_rx_fixup()
1838 	if (ndpoffset && loopcount--)  in cdc_ncm_rx_fixup()