308 	const unsigned char   *p, *endp;  in load_all_firmwares()  local
316 	endp = p + fw->size;  in load_all_firmwares()
347 	while (p < endp) {  in load_all_firmwares()
360 		if (endp - p < sizeof(type) + sizeof(id) + sizeof(size))  in load_all_firmwares()
372 			if (endp - p < sizeof(size))  in load_all_firmwares()
379 		if (!size || size > endp - p) {  in load_all_firmwares()
385 			       (unsigned)(endp - p), size);  in load_all_firmwares()
550 	unsigned char      *p, *endp, buf[MAX_XFER_SIZE];  in load_firmware()  local
567 	endp = p + priv->firm[pos].size;  in load_firmware()
569 	while (p < endp) {  in load_firmware()
573 		if (p + sizeof(size) > endp) {  in load_firmware()
619 		if ((size + p > endp)) {  in load_firmware()
621 				   size, (int)(endp - p));  in load_firmware()