288 	struct ip6asfrag *af6 = NULL, *ip6af = NULL, *af6dwn = NULL;  in frag6_input()  local
575 		for (af6 = q6->ip6q_down; af6 != (struct ip6asfrag *)q6;  in frag6_input()
576 		    af6 = af6dwn) {  in frag6_input()
577 			af6dwn = af6->ip6af_down;  in frag6_input()
579 			if (q6->ip6q_unfrglen + af6->ip6af_off + af6->ip6af_frglen >  in frag6_input()
581 				struct mbuf *merr = IP6_REASS_MBUF(af6);  in frag6_input()
583 				int erroff = af6->ip6af_offset;  in frag6_input()
586 				frag6_deq(af6);  in frag6_input()
587 				ip6af_free(af6);  in frag6_input()
621 		af6 = (struct ip6asfrag *)q6;  in frag6_input()
649 	for (af6 = q6->ip6q_down; af6 != (struct ip6asfrag *)q6;  in frag6_input()
650 	    af6 = af6->ip6af_down) {  in frag6_input()
651 		if (af6->ip6af_off > ip6af->ip6af_off) {  in frag6_input()
665 	if (af6->ip6af_up != (struct ip6asfrag *)q6) {  in frag6_input()
666 		if (af6->ip6af_up->ip6af_off == ip6af->ip6af_off) {  in frag6_input()
667 			if (af6->ip6af_up->ip6af_frglen != ip6af->ip6af_frglen) {  in frag6_input()
679 			i = af6->ip6af_up->ip6af_off + af6->ip6af_up->ip6af_frglen  in frag6_input()
687 	if (af6 != (struct ip6asfrag *)q6) {  in frag6_input()
693 		VERIFY(af6->ip6af_off != ip6af->ip6af_off);  in frag6_input()
694 		i = (ip6af->ip6af_off + ip6af->ip6af_frglen) - af6->ip6af_off;  in frag6_input()
718 	frag6_enq(ip6af, af6->ip6af_up);  in frag6_input()
736 		af6 = NULL;  in frag6_input()
769 	for (af6 = q6->ip6q_down; af6 != (struct ip6asfrag *)q6;  in frag6_input()
770 	    af6 = af6->ip6af_down) {  in frag6_input()
771 		if (af6->ip6af_off != next) {  in frag6_input()
777 		next += af6->ip6af_frglen;  in frag6_input()
779 	if (af6->ip6af_up->ip6af_mff) {  in frag6_input()
791 	af6 = ip6af->ip6af_down;  in frag6_input()
793 	while (af6 != (struct ip6asfrag *)q6) {  in frag6_input()
794 		af6dwn = af6->ip6af_down;  in frag6_input()
795 		frag6_deq(af6);  in frag6_input()
799 		t->m_next = IP6_REASS_MBUF(af6);  in frag6_input()
800 		m_adj(t->m_next, af6->ip6af_offset);  in frag6_input()
801 		ip6af_free(af6);  in frag6_input()
802 		af6 = af6dwn;  in frag6_input()
948 	struct ip6asfrag *af6 = NULL;  in frag6_purgef()  local
953 	for (af6 = q6->ip6q_down; af6 != (struct ip6asfrag *)q6;  in frag6_purgef()
954 	    af6 = down6) {  in frag6_purgef()
955 		struct mbuf *m = IP6_REASS_MBUF(af6);  in frag6_purgef()
957 		down6 = af6->ip6af_down;  in frag6_purgef()
958 		frag6_deq(af6);  in frag6_purgef()
966 		if (af6->ip6af_off == 0 && diq6 != NULL) {  in frag6_purgef()
981 		ip6af_free(af6);  in frag6_purgef()
1010 frag6_enq(struct ip6asfrag *af6, struct ip6asfrag *up6)  in frag6_enq()  argument
1014 	af6->ip6af_up = up6;  in frag6_enq()
1015 	af6->ip6af_down = up6->ip6af_down;  in frag6_enq()
1016 	up6->ip6af_down->ip6af_up = af6;  in frag6_enq()
1017 	up6->ip6af_down = af6;  in frag6_enq()
1024 frag6_deq(struct ip6asfrag *af6)  in frag6_deq()  argument
1028 	af6->ip6af_up->ip6af_down = af6->ip6af_down;  in frag6_deq()
1029 	af6->ip6af_down->ip6af_up = af6->ip6af_up;  in frag6_deq()
1214 	struct ip6asfrag *af6;  in ip6af_alloc()  local
1228 		af6 = mtod(t, struct ip6asfrag *);  in ip6af_alloc()
1229 		bzero(af6, sizeof(*af6));  in ip6af_alloc()
1231 		af6 = NULL;  in ip6af_alloc()
1233 	return af6;  in ip6af_alloc()
1237 ip6af_free(struct ip6asfrag *af6)  in ip6af_free()  argument
1239 	(void) m_free(dtom(af6));  in ip6af_free()