2198 …_tlv_type(u_int8_t * __counted_by(buffer_length)buffer, size_t buffer_length, u_int32_t tlv_offset)  in necp_buffer_get_tlv_type()  argument
2204 	    os_add_overflow(tlv_offset, sizeof(u_int8_t), &end_offset) || buffer_length < end_offset) {  in necp_buffer_get_tlv_type()
2208 	type = (u_int8_t *)((u_int8_t *)buffer + tlv_offset);  in necp_buffer_get_tlv_type()
2213 …lv_length(u_int8_t * __counted_by(buffer_length)buffer, size_t buffer_length, u_int32_t tlv_offset)  in necp_buffer_get_tlv_length()  argument
2219 …os_add_overflow(tlv_offset, sizeof(u_int8_t) + sizeof(u_int32_t), &end_offset) || buffer_length < …  in necp_buffer_get_tlv_length()
2223 	length = (u_int32_t *)(void *)((u_int8_t *)buffer + tlv_offset + sizeof(u_int8_t));  in necp_buffer_get_tlv_length()
2228 …t * __counted_by(buffer_length)buffer, size_t buffer_length, u_int32_t tlv_offset, u_int32_t * val…  in __necp_buffer_get_tlv_value()  argument
2237 	u_int32_t length = necp_buffer_get_tlv_length(buffer, buffer_length, tlv_offset);  in __necp_buffer_get_tlv_value()
2242 …if (os_add3_overflow(tlv_offset, length, sizeof(u_int8_t) + sizeof(u_int32_t), &end_offset) || buf…  in __necp_buffer_get_tlv_value()
2250 	value = (u_int8_t *)((u_int8_t *)buffer + tlv_offset + sizeof(u_int8_t) + sizeof(u_int32_t));  in __necp_buffer_get_tlv_value()
2314 … int tlv_offset, u_int32_t out_buffer_length, void * __indexable out_buffer, u_int32_t *value_size)  in necp_get_tlv_at_offset()  argument
2324 	if (tlv_offset + sizeof(u_int8_t) + sizeof(u_int32_t) > buffer_length) {  in necp_get_tlv_at_offset()
2326 		    buffer_length, tlv_offset + sizeof(u_int8_t) + sizeof(u_int32_t));  in necp_get_tlv_at_offset()
2331 	u_int32_t tlv_length = necp_buffer_get_tlv_length(buffer, buffer_length, tlv_offset);  in necp_get_tlv_at_offset()
2332 	if (tlv_length > buffer_length - (tlv_offset + sizeof(u_int8_t) + sizeof(u_int32_t))) {  in necp_get_tlv_at_offset()
2334 		    tlv_length, buffer_length, tlv_offset + sizeof(u_int8_t) + sizeof(u_int32_t) + tlv_length);  in necp_get_tlv_at_offset()
2347 …u_int8_t * __indexable tlv_value = necp_buffer_get_tlv_value(buffer, buffer_length, tlv_offset, NU…  in necp_get_tlv_at_offset()
2371 	int tlv_offset = necp_find_tlv(buffer, buffer_length, offset, type, &error, 0);  in necp_get_tlv()  local
2372 	if (tlv_offset < 0) {  in necp_get_tlv()
2376 	return necp_get_tlv_at_offset(buffer, buffer_length, tlv_offset, buff_len, buff, value_size);  in necp_get_tlv()