305 	const unsigned char   *p, *endp;  in load_all_firmwares()  local
313 	endp = p + fw->size;  in load_all_firmwares()
344 	while (p < endp) {  in load_all_firmwares()
356 		if (endp - p < sizeof(type) + sizeof(id) + sizeof(size))  in load_all_firmwares()
368 			if (endp - p < sizeof(size))  in load_all_firmwares()
375 		if (!size || size > endp - p) {  in load_all_firmwares()
380 			       type, (unsigned long long)id, (endp - p), size);  in load_all_firmwares()
547 	unsigned char      *p, *endp, buf[MAX_XFER_SIZE];  in load_firmware()  local
564 	endp = p + priv->firm[pos].size;  in load_firmware()
566 	while (p < endp) {  in load_firmware()
570 		if (p + sizeof(size) > endp) {  in load_firmware()
616 		if ((size + p > endp)) {  in load_firmware()
618 				   size, (endp - p));  in load_firmware()