86 static int smb2_get_data_area_len(unsigned int *off, unsigned int *len,  in smb2_get_data_area_len()  argument
91 	*off = 0;  in smb2_get_data_area_len()
101 		*off = le16_to_cpu(((struct smb2_sess_setup_req *)hdr)->SecurityBufferOffset);  in smb2_get_data_area_len()
105 		*off = le16_to_cpu(((struct smb2_tree_connect_req *)hdr)->PathOffset);  in smb2_get_data_area_len()
116 			*off = le32_to_cpu(((struct smb2_create_req *)  in smb2_get_data_area_len()
123 			if (name_off + name_len < (u64)*off + *len)  in smb2_get_data_area_len()
127 		*off = name_off;  in smb2_get_data_area_len()
132 		*off = le16_to_cpu(((struct smb2_query_info_req *)hdr)->InputBufferOffset);  in smb2_get_data_area_len()
136 		*off = le16_to_cpu(((struct smb2_set_info_req *)hdr)->BufferOffset);  in smb2_get_data_area_len()
140 		*off = le16_to_cpu(((struct smb2_read_req *)hdr)->ReadChannelInfoOffset);  in smb2_get_data_area_len()
146 			*off = max_t(unsigned int,  in smb2_get_data_area_len()
153 		*off = le16_to_cpu(((struct smb2_write_req *)hdr)->WriteChannelInfoOffset);  in smb2_get_data_area_len()
157 		*off = le16_to_cpu(((struct smb2_query_directory_req *)hdr)->FileNameOffset);  in smb2_get_data_area_len()
166 			*off = offsetof(struct smb2_lock_req, locks);  in smb2_get_data_area_len()
172 		*off = le32_to_cpu(((struct smb2_ioctl_req *)hdr)->InputOffset);  in smb2_get_data_area_len()
180 	if (*off > 4096) {  in smb2_get_data_area_len()
181 		ksmbd_debug(SMB, "offset %d too large\n", *off);  in smb2_get_data_area_len()
183 	} else if ((u64)*off + *len > MAX_STREAM_PROT_LEN) {  in smb2_get_data_area_len()
185 			    MAX_STREAM_PROT_LEN, (u64)*off + *len);  in smb2_get_data_area_len()