99 	u32			xid = 0, msg_len, request_id, msg_type, rsp,  in rndis_command()  local
121 		buf, le32_to_cpu(buf->msg_len),  in rndis_command()
152 			msg_len = le32_to_cpu(buf->msg_len);  in rndis_command()
179 				msg->msg_len = cpu_to_le32(sizeof *msg);  in rndis_command()
197 					le32_to_cpu(buf->msg_type), msg_len);  in rndis_command()
244 	u.get->msg_len = cpu_to_le32(sizeof *u.get + in_len);  in rndis_query()
319 	u.init->msg_len = cpu_to_le32(sizeof *u.init);  in generic_rndis_bind()
427 	u.set->msg_len = cpu_to_le32(4 + sizeof *u.set);  in generic_rndis_bind()
447 	u.halt->msg_len = cpu_to_le32(sizeof *u.halt);  in generic_rndis_bind()
482 		halt->msg_len = cpu_to_le32(sizeof *halt);  in rndis_unbind()
508 		u32			msg_type, msg_len, data_offset, data_len;  in rndis_rx_fixup()  local
511 		msg_len = le32_to_cpu(hdr->msg_len);  in rndis_rx_fixup()
516 		if (unlikely(msg_type != RNDIS_MSG_PACKET || skb->len < msg_len  in rndis_rx_fixup()
517 				|| (data_offset + data_len + 8) > msg_len)) {  in rndis_rx_fixup()
521 				   msg_len, data_offset, data_len, skb->len);  in rndis_rx_fixup()
536 		skb_pull(skb, msg_len - sizeof *hdr);  in rndis_rx_fixup()
591 	hdr->msg_len = cpu_to_le32(skb->len);  in rndis_tx_fixup()