224 	if (!non_inherit_elem || non_inherit_elem->datalen < 2)  in cfg80211_is_element_inherited()
235 	if (non_inherit_elem->datalen < 3 + id_len)  in cfg80211_is_element_inherited()
239 	if (non_inherit_elem->datalen < 3 + id_len + ext_id_len)  in cfg80211_is_element_inherited()
270 		    elem->data + elem->datalen > ie + ie_len))  in cfg80211_copy_elem_with_frags()
273 	if (elem->datalen + 2 > buf + buf_len - *pos)  in cfg80211_copy_elem_with_frags()
276 	memcpy(*pos, elem, elem->datalen + 2);  in cfg80211_copy_elem_with_frags()
277 	*pos += elem->datalen + 2;  in cfg80211_copy_elem_with_frags()
280 	if (elem->datalen != 255)  in cfg80211_copy_elem_with_frags()
283 	ie_len = ie + ie_len - elem->data - elem->datalen;  in cfg80211_copy_elem_with_frags()
284 	ie = (const u8 *)elem->data + elem->datalen;  in cfg80211_copy_elem_with_frags()
290 		if (elem->datalen + 2 > buf + buf_len - *pos)  in cfg80211_copy_elem_with_frags()
293 		memcpy(*pos, elem, elem->datalen + 2);  in cfg80211_copy_elem_with_frags()
294 		*pos += elem->datalen + 2;  in cfg80211_copy_elem_with_frags()
296 		if (elem->datalen != 255)  in cfg80211_copy_elem_with_frags()
326 			if (parent->datalen < 1)  in cfg80211_gen_new_ie()
367 						       sub->data + sub->datalen,  in cfg80211_gen_new_ie()
370 							sub->datalen),  in cfg80211_gen_new_ie()
387 			if (sub->datalen < 1)  in cfg80211_gen_new_ie()
454 			   ssid_elem->datalen)) {  in cfg80211_add_nontrans_list()
556 	if (!*elem || (*elem)->datalen > IEEE80211_MAX_SSID_LEN)  in cfg80211_calc_short_ssid()
559 	*s_ssid = ~crc32_le(~0, (*elem)->data, (*elem)->datalen);  in cfg80211_calc_short_ssid()
616 		       ssid_elem->datalen);  in cfg80211_parse_ap_info()
617 		entry->ssid_len = ssid_elem->datalen;  in cfg80211_parse_ap_info()
638 	end = pos + elem->datalen;  in cfg80211_parse_colocated_ap()
1280 		if (elem->datalen >= match_offset + match_len &&  in cfg80211_find_elem_match()
1303 	if (!elem || elem->datalen < 4)  in cfg80211_find_vendor_elem()
2063 	const u8 *mbssid_end = mbssid_elem->data + mbssid_elem->datalen;  in cfg80211_get_profile_continuation()
2075 	if ((sub_elem->data + sub_elem->datalen < mbssid_end - 1) ||  in cfg80211_get_profile_continuation()
2081 	if (next_mbssid->datalen < 4)  in cfg80211_get_profile_continuation()
2086 	if (next_mbssid->data + next_mbssid->datalen <  in cfg80211_get_profile_continuation()
2087 	    next_sub->data + next_sub->datalen)  in cfg80211_get_profile_continuation()
2090 	if (next_sub->id != 0 || next_sub->datalen < 2)  in cfg80211_get_profile_continuation()
2106 	size_t copied_len = sub_elem->datalen;  in cfg80211_merge_profile()
2109 	if (sub_elem->datalen > max_copy_len)  in cfg80211_merge_profile()
2112 	memcpy(merged_ie, sub_elem->data, sub_elem->datalen);  in cfg80211_merge_profile()
2119 		if (copied_len + next_sub->datalen > max_copy_len)  in cfg80211_merge_profile()
2122 		       next_sub->datalen);  in cfg80211_merge_profile()
2123 		copied_len += next_sub->datalen;  in cfg80211_merge_profile()
2167 		if (elem->datalen < 4)  in cfg80211_parse_mbssid_data()
2171 		for_each_element(sub, elem->data + 1, elem->datalen - 1) {  in cfg80211_parse_mbssid_data()
2174 			if (sub->id != 0 || sub->datalen < 4) {  in cfg80211_parse_mbssid_data()
2332 	new_ie_len += nontrans_ssid->datalen;  in cfg80211_update_notlisted_nontrans()
2349 	cpy_len = nontrans_ssid->datalen + 2;  in cfg80211_update_notlisted_nontrans()
2451 		if (elem->datalen < sizeof(*compat))  in cfg80211_inform_single_bss_frame_data()