1245 	uint32_t remaining_length, adjust;  in sctp_handle_error()  local
1255 	remaining_length = ntohs(ch->chunk_length);  in sctp_handle_error()
1256 	if (remaining_length > limit) {  in sctp_handle_error()
1257 		remaining_length = limit;  in sctp_handle_error()
1259 	if (remaining_length >= sizeof(struct sctp_chunkhdr)) {  in sctp_handle_error()
1260 		remaining_length -= sizeof(struct sctp_chunkhdr);  in sctp_handle_error()
1262 		remaining_length = 0;  in sctp_handle_error()
1265 	while (remaining_length >= sizeof(struct sctp_error_cause)) {  in sctp_handle_error()
1269 		if ((cause_length > remaining_length) || (cause_length == 0)) {  in sctp_handle_error()
1272 				remaining_length, cause_length);  in sctp_handle_error()
1408 		if (remaining_length >= adjust) {  in sctp_handle_error()
1409 			remaining_length -= adjust;  in sctp_handle_error()
1411 			remaining_length = 0;  in sctp_handle_error()
4386 	uint16_t remaining_length, param_len, ptype;  local
4399 	remaining_length = ntohs(ch_req->chunk_length) - sizeof(struct sctp_chunkhdr);
4437 	while (remaining_length >= sizeof(struct sctp_paramhdr)) {
4444 		if ((param_len > remaining_length) ||
4535 		if (remaining_length >= SCTP_SIZE32(param_len)) {
4536 			remaining_length -= SCTP_SIZE32(param_len);
4538 			remaining_length = 0;