230 	int ivlen;  in esp4_input_extended()  local
310 	ivlen = sav->ivlen;  in esp4_input_extended()
311 	if (ivlen < 0) {  in esp4_input_extended()
444 	if (m->m_pkthdr.len < off + esplen + ivlen + sizeof(esptail)) {  in esp4_input_extended()
451 	if (m->m_len < off + esplen + ivlen) {  in esp4_input_extended()
452 		m = m_pullup(m, (int)(off + esplen + ivlen));  in esp4_input_extended()
477 	if ((*algo->decrypt)(m, off, sav, algo, ivlen)) {  in esp4_input_extended()
570 	if (ipsec4_tunnel_validate(m, (int)(off + esplen + ivlen), nxt, sav, &ifamily)) {  in esp4_input_extended()
586 		m_adj(m, (int)(off + esplen + ivlen));  in esp4_input_extended()
751 		stripsiz = esplen + ivlen;  in esp4_input_extended()
939 	int ivlen;  in esp6_input_extended()  local
1023 	ivlen = sav->ivlen;  in esp6_input_extended()
1024 	if (__improbable(ivlen < 0)) {  in esp6_input_extended()
1152 	if (m->m_pkthdr.len < off + esplen + ivlen + sizeof(esptail)) {  in esp6_input_extended()
1160 	IP6_EXTHDR_CHECK(m, off, (int)(esplen + ivlen), goto bad);  /*XXX*/  in esp6_input_extended()
1162 	IP6_EXTHDR_GET(esp, struct esp *, m, off, esplen + ivlen);  in esp6_input_extended()
1186 	if ((*algo->decrypt)(m, off, sav, algo, ivlen)) {  in esp6_input_extended()
1277 	if (ipsec6_tunnel_validate(m, (int)(off + esplen + ivlen), nxt, sav, &ifamily)) {  in esp6_input_extended()
1291 		m_adj(m, (int)(off + esplen + ivlen));  in esp6_input_extended()
1452 		VERIFY(esplen + ivlen <= UINT16_MAX);  in esp6_input_extended()
1453 		stripsiz = (u_int16_t)(esplen + ivlen);  in esp6_input_extended()
1744 	int ivlen = 0;  in esp_kpipe_input()  local
1917 		ivlen = sav->ivlen;  in esp_kpipe_input()
1918 		if (__improbable(ivlen < 0)) {  in esp_kpipe_input()
1920 			    ivlen, ntohl(sav->spi));  in esp_kpipe_input()
1928 	esphlen = sizeof(struct newesp) + ivlen;  in esp_kpipe_input()
1998 	    encrypted_payload_len, esp, iv, ivlen, dst_payload,  in esp_kpipe_input()