126 	u8 rates[MWIFIEX_SUPPORTED_RATES], *pos;  in mwifiex_tdls_append_rates_ie()  local
140 	pos = skb_put(skb, supp_rates_size + 2);  in mwifiex_tdls_append_rates_ie()
141 	*pos++ = WLAN_EID_SUPP_RATES;  in mwifiex_tdls_append_rates_ie()
142 	*pos++ = supp_rates_size;  in mwifiex_tdls_append_rates_ie()
143 	memcpy(pos, rates, supp_rates_size);  in mwifiex_tdls_append_rates_ie()
147 		pos = skb_put(skb, ext_rates_size + 2);  in mwifiex_tdls_append_rates_ie()
148 		*pos++ = WLAN_EID_EXT_SUPP_RATES;  in mwifiex_tdls_append_rates_ie()
149 		*pos++ = ext_rates_size;  in mwifiex_tdls_append_rates_ie()
150 		memcpy(pos, rates + MWIFIEX_TDLS_SUPPORTED_RATES,  in mwifiex_tdls_append_rates_ie()
161 	u8 *pos;  in mwifiex_tdls_add_aid()  local
164 	pos = (void *)skb_put(skb, 4);  in mwifiex_tdls_add_aid()
165 	*pos++ = WLAN_EID_AID;  in mwifiex_tdls_add_aid()
166 	*pos++ = 2;  in mwifiex_tdls_add_aid()
167 	memcpy(pos, &assoc_rsp->a_id, sizeof(assoc_rsp->a_id));  in mwifiex_tdls_add_aid()
176 	u8 *pos;  in mwifiex_tdls_add_vht_capab()  local
178 	pos = (void *)skb_put(skb, sizeof(struct ieee80211_vht_cap) + 2);  in mwifiex_tdls_add_vht_capab()
179 	*pos++ = WLAN_EID_VHT_CAPABILITY;  in mwifiex_tdls_add_vht_capab()
180 	*pos++ = sizeof(struct ieee80211_vht_cap);  in mwifiex_tdls_add_vht_capab()
185 	memcpy(pos, &vht_cap, sizeof(vht_cap));  in mwifiex_tdls_add_vht_capab()
198 	u8 *pos;  in mwifiex_tdls_add_ht_oper()  local
213 	pos = (void *)skb_put(skb, sizeof(struct ieee80211_ht_operation) + 2);  in mwifiex_tdls_add_ht_oper()
214 	*pos++ = WLAN_EID_HT_OPERATION;  in mwifiex_tdls_add_ht_oper()
215 	*pos++ = sizeof(struct ieee80211_ht_operation);  in mwifiex_tdls_add_ht_oper()
216 	ht_oper = (void *)pos;  in mwifiex_tdls_add_ht_oper()
247 	u8 *pos, ap_supp_chwd_set, chan_bw;  in mwifiex_tdls_add_vht_oper()  local
278 	pos = (void *)skb_put(skb, sizeof(struct ieee80211_vht_operation) + 2);  in mwifiex_tdls_add_vht_oper()
279 	*pos++ = WLAN_EID_VHT_OPERATION;  in mwifiex_tdls_add_vht_oper()
280 	*pos++ = sizeof(struct ieee80211_vht_operation);  in mwifiex_tdls_add_vht_oper()
281 	vht_oper = (struct ieee80211_vht_operation *)pos;  in mwifiex_tdls_add_vht_oper()
378 	u8 *pos = (void *)skb_put(skb, 3);  in mwifiex_tdls_add_qos_capab()  local
380 	*pos++ = WLAN_EID_QOS_CAPA;  in mwifiex_tdls_add_qos_capab()
381 	*pos++ = 1;  in mwifiex_tdls_add_qos_capab()
382 	*pos++ = MWIFIEX_TDLS_DEF_QOS_CAPAB;  in mwifiex_tdls_add_qos_capab()
443 	u8 radio, *pos;  in mwifiex_prep_tdls_encap_data()  local
466 		pos = (void *)skb_put(skb, sizeof(struct ieee80211_ht_cap) + 2);  in mwifiex_prep_tdls_encap_data()
467 		*pos++ = WLAN_EID_HT_CAPABILITY;  in mwifiex_prep_tdls_encap_data()
468 		*pos++ = sizeof(struct ieee80211_ht_cap);  in mwifiex_prep_tdls_encap_data()
469 		ht_cap = (void *)pos;  in mwifiex_prep_tdls_encap_data()
504 		pos = (void *)skb_put(skb, sizeof(struct ieee80211_ht_cap) + 2);  in mwifiex_prep_tdls_encap_data()
505 		*pos++ = WLAN_EID_HT_CAPABILITY;  in mwifiex_prep_tdls_encap_data()
506 		*pos++ = sizeof(struct ieee80211_ht_cap);  in mwifiex_prep_tdls_encap_data()
507 		ht_cap = (void *)pos;  in mwifiex_prep_tdls_encap_data()
697 	u8 radio, *pos;  in mwifiex_construct_tdls_action_frame()  local
711 	pos = skb_put(skb, ETH_ALEN);  in mwifiex_construct_tdls_action_frame()
724 		memmove(pos + ETH_ALEN, &mgmt->u.action.category,  in mwifiex_construct_tdls_action_frame()
727 		memcpy(pos, bc_addr, ETH_ALEN);  in mwifiex_construct_tdls_action_frame()
735 		pos = (void *)skb_put(skb, sizeof(struct ieee80211_ht_cap) + 2);  in mwifiex_construct_tdls_action_frame()
736 		*pos++ = WLAN_EID_HT_CAPABILITY;  in mwifiex_construct_tdls_action_frame()
737 		*pos++ = sizeof(struct ieee80211_ht_cap);  in mwifiex_construct_tdls_action_frame()
738 		ht_cap = (void *)pos;  in mwifiex_construct_tdls_action_frame()
773 	u8 *pos;  in mwifiex_send_tdls_action_frame()  local
807 	pos = skb_put(skb, MWIFIEX_MGMT_FRAME_HEADER_SIZE + sizeof(pkt_len));  in mwifiex_send_tdls_action_frame()
808 	memset(pos, 0, MWIFIEX_MGMT_FRAME_HEADER_SIZE + sizeof(pkt_len));  in mwifiex_send_tdls_action_frame()
809 	memcpy(pos, &pkt_type, sizeof(pkt_type));  in mwifiex_send_tdls_action_frame()
810 	memcpy(pos + sizeof(pkt_type), &tx_control, sizeof(tx_control));  in mwifiex_send_tdls_action_frame()
851 	u8 *peer, *pos, *end;  in mwifiex_process_tdls_action_frame()  local
873 		pos = buf + sizeof(struct ethhdr) + 4;  in mwifiex_process_tdls_action_frame()
875 		cap = cpu_to_le16(*(u16 *)pos);  in mwifiex_process_tdls_action_frame()
877 		pos += 2;  in mwifiex_process_tdls_action_frame()
884 		pos = buf + sizeof(struct ethhdr) + 6;  in mwifiex_process_tdls_action_frame()
885 		cap = cpu_to_le16(*(u16 *)pos);  in mwifiex_process_tdls_action_frame()
887 		pos += 2;  in mwifiex_process_tdls_action_frame()
893 		pos = buf + sizeof(struct ethhdr) + TDLS_CONFIRM_FIX_LEN;  in mwifiex_process_tdls_action_frame()
907 	for (end = pos + ie_len; pos + 1 < end; pos += 2 + pos[1]) {  in mwifiex_process_tdls_action_frame()
908 		if (pos + 2 + pos[1] > end)  in mwifiex_process_tdls_action_frame()
911 		switch (*pos) {  in mwifiex_process_tdls_action_frame()
913 			sta_ptr->tdls_cap.rates_len = pos[1];  in mwifiex_process_tdls_action_frame()
914 			for (i = 0; i < pos[1]; i++)  in mwifiex_process_tdls_action_frame()
915 				sta_ptr->tdls_cap.rates[i] = pos[i + 2];  in mwifiex_process_tdls_action_frame()
920 			for (i = 0; i < pos[1]; i++)  in mwifiex_process_tdls_action_frame()
921 				sta_ptr->tdls_cap.rates[basic + i] = pos[i + 2];  in mwifiex_process_tdls_action_frame()
922 			sta_ptr->tdls_cap.rates_len += pos[1];  in mwifiex_process_tdls_action_frame()
925 			memcpy((u8 *)&sta_ptr->tdls_cap.ht_capb, pos,  in mwifiex_process_tdls_action_frame()
930 			memcpy(&sta_ptr->tdls_cap.ht_oper, pos,  in mwifiex_process_tdls_action_frame()
934 			sta_ptr->tdls_cap.coex_2040 = pos[2];  in mwifiex_process_tdls_action_frame()
937 			memcpy((u8 *)&sta_ptr->tdls_cap.extcap, pos,  in mwifiex_process_tdls_action_frame()
939 			       min_t(u8, pos[1], 8));  in mwifiex_process_tdls_action_frame()
942 			memcpy((u8 *)&sta_ptr->tdls_cap.rsn_ie, pos,  in mwifiex_process_tdls_action_frame()
944 			       min_t(u8, pos[1], IEEE_MAX_IE_SIZE -  in mwifiex_process_tdls_action_frame()
948 			sta_ptr->tdls_cap.qos_info = pos[2];  in mwifiex_process_tdls_action_frame()
952 				memcpy(&sta_ptr->tdls_cap.vhtoper, pos,  in mwifiex_process_tdls_action_frame()
957 				memcpy((u8 *)&sta_ptr->tdls_cap.vhtcap, pos,  in mwifiex_process_tdls_action_frame()
965 					      le16_to_cpu(*(__le16 *)(pos + 2));  in mwifiex_process_tdls_action_frame()