696 	struct rndis_indicate_status *indicate = &resp->msg.indicate_status;  in netvsc_linkstatus_callback()  local
709 	memcpy(indicate, data + RNDIS_HEADER_SIZE, sizeof(*indicate));  in netvsc_linkstatus_callback()
712 	if (indicate->status == RNDIS_STATUS_LINK_SPEED_CHANGE) {  in netvsc_linkstatus_callback()
721 		if (indicate->status_buflen < sizeof(speed) ||  in netvsc_linkstatus_callback()
722 		    indicate->status_buf_offset < sizeof(*indicate) ||  in netvsc_linkstatus_callback()
723 		    data_buflen - RNDIS_HEADER_SIZE < indicate->status_buf_offset ||  in netvsc_linkstatus_callback()
724 		    data_buflen - RNDIS_HEADER_SIZE - indicate->status_buf_offset  in netvsc_linkstatus_callback()
725 				< indicate->status_buflen) {  in netvsc_linkstatus_callback()
730 		speed = *(u32 *)(data + RNDIS_HEADER_SIZE + indicate->status_buf_offset) / 10000;  in netvsc_linkstatus_callback()
736 	if (indicate->status != RNDIS_STATUS_NETWORK_CHANGE &&  in netvsc_linkstatus_callback()
737 	    indicate->status != RNDIS_STATUS_MEDIA_CONNECT &&  in netvsc_linkstatus_callback()
738 	    indicate->status != RNDIS_STATUS_MEDIA_DISCONNECT)  in netvsc_linkstatus_callback()
747 	event->event = indicate->status;  in netvsc_linkstatus_callback()