2108     u_int8_t * __sized_by(buffer_length)buffer, u_int32_t buffer_length)  in necp_buffer_write_tlv_validate()  argument
2110 	if (cursor < buffer || (uintptr_t)(cursor - buffer) > buffer_length) {  in necp_buffer_write_tlv_validate()
2116 …(uintptr_t)(next_tlv - buffer) > buffer_length) {     // make sure the next TLV has enough room in…  in necp_buffer_write_tlv_validate()
2118 		    length, buffer_length);  in necp_buffer_write_tlv_validate()
2127     u_int8_t * __sized_by(buffer_length)buffer, u_int32_t buffer_length)
2131 	if (!necp_buffer_write_tlv_validate(cursor, type, length, buffer, buffer_length)) {
2156     u_int8_t * __sized_by(buffer_length)buffer, u_int32_t buffer_length)
2160 	if (!necp_buffer_write_tlv_validate(cursor, type, length, buffer, buffer_length)) {
2176     u_int8_t * __sized_by(buffer_length)buffer, u_int32_t buffer_length)
2181 	if (!necp_buffer_write_tlv_validate(cursor, type, length + 1, buffer, buffer_length)) {
2198 necp_buffer_get_tlv_type(u_int8_t * __counted_by(buffer_length)buffer, size_t buffer_length, u_int3…  in necp_buffer_get_tlv_type()  argument
2204 	    os_add_overflow(tlv_offset, sizeof(u_int8_t), &end_offset) || buffer_length < end_offset) {  in necp_buffer_get_tlv_type()
2213 necp_buffer_get_tlv_length(u_int8_t * __counted_by(buffer_length)buffer, size_t buffer_length, u_in…  in necp_buffer_get_tlv_length()  argument
2219 …low(tlv_offset, sizeof(u_int8_t) + sizeof(u_int32_t), &end_offset) || buffer_length < end_offset) {  in necp_buffer_get_tlv_length()
2228 __necp_buffer_get_tlv_value(u_int8_t * __counted_by(buffer_length)buffer, size_t buffer_length, u_i…  in __necp_buffer_get_tlv_value()  argument
2237 	u_int32_t length = necp_buffer_get_tlv_length(buffer, buffer_length, tlv_offset);  in __necp_buffer_get_tlv_value()
2242 …offset, length, sizeof(u_int8_t) + sizeof(u_int32_t), &end_offset) || buffer_length < end_offset) {  in __necp_buffer_get_tlv_value()
2255 necp_buffer_find_tlv(u_int8_t * __sized_by(buffer_length)buffer, u_int32_t buffer_length, int offse…  in necp_buffer_find_tlv()  argument
2272 		if ((((u_int32_t)cursor) + sizeof(curr_type) + sizeof(curr_length)) > buffer_length) {  in necp_buffer_find_tlv()
2276 			curr_type = necp_buffer_get_tlv_type(buffer, buffer_length, cursor);  in necp_buffer_find_tlv()
2281 		curr_length = necp_buffer_get_tlv_length(buffer, buffer_length, cursor);  in necp_buffer_find_tlv()
2282 		if (curr_length > buffer_length - ((u_int32_t)cursor + sizeof(curr_type) + sizeof(curr_length))) {  in necp_buffer_find_tlv()
2289 			if (((u_int32_t)next_cursor) <= buffer_length) {  in necp_buffer_find_tlv()
2303 necp_find_tlv(u_int8_t * __sized_by(buffer_length)buffer, u_int32_t buffer_length, int offset, u_in…  in necp_find_tlv()  argument
2307 		cursor = necp_buffer_find_tlv(buffer, buffer_length, offset, type, err, next);  in necp_find_tlv()
2313 necp_get_tlv_at_offset(u_int8_t * __sized_by(buffer_length)buffer, u_int32_t buffer_length,  in necp_get_tlv_at_offset()  argument
2324 	if (tlv_offset + sizeof(u_int8_t) + sizeof(u_int32_t) > buffer_length) {  in necp_get_tlv_at_offset()
2326 		    buffer_length, tlv_offset + sizeof(u_int8_t) + sizeof(u_int32_t));  in necp_get_tlv_at_offset()
2331 	u_int32_t tlv_length = necp_buffer_get_tlv_length(buffer, buffer_length, tlv_offset);  in necp_get_tlv_at_offset()
2332 	if (tlv_length > buffer_length - (tlv_offset + sizeof(u_int8_t) + sizeof(u_int32_t))) {  in necp_get_tlv_at_offset()
2334 		    tlv_length, buffer_length, tlv_offset + sizeof(u_int8_t) + sizeof(u_int32_t) + tlv_length);  in necp_get_tlv_at_offset()
2347 …u_int8_t * __indexable tlv_value = necp_buffer_get_tlv_value(buffer, buffer_length, tlv_offset, NU…  in necp_get_tlv_at_offset()
2366 necp_get_tlv(u_int8_t * __sized_by(buffer_length)buffer, u_int32_t buffer_length,  in necp_get_tlv()  argument
2371 	int tlv_offset = necp_find_tlv(buffer, buffer_length, offset, type, &error, 0);  in necp_get_tlv()
2376 	return necp_get_tlv_at_offset(buffer, buffer_length, tlv_offset, buff_len, buff, value_size);  in necp_get_tlv()