pscnt 598 source3/smbd/ipc.c unsigned int pscnt; pscnt 613 source3/smbd/ipc.c pscnt = SVAL(req->vwv+9, 0); pscnt 650 source3/smbd/ipc.c if ((dscnt > state->total_data) || (pscnt > state->total_param) || pscnt 680 source3/smbd/ipc.c if (trans_oob(state->total_param, 0, pscnt) pscnt 681 source3/smbd/ipc.c || trans_oob(smb_len(req->inbuf), psoff, pscnt)) { pscnt 700 source3/smbd/ipc.c memcpy(state->param,smb_base(req->inbuf)+psoff,pscnt); pscnt 704 source3/smbd/ipc.c state->received_param = pscnt; pscnt 739 source3/smbd/ipc.c state->received_param = pscnt; pscnt 2630 source3/smbd/nttrans.c uint32_t pscnt; pscnt 2646 source3/smbd/nttrans.c pscnt = IVAL(req->vwv+9, 1); pscnt 2693 source3/smbd/nttrans.c (unsigned)state->total_param, (unsigned)pscnt, pscnt 2718 source3/smbd/nttrans.c if ((dscnt > state->total_data) || (pscnt > state->total_param)) pscnt 2744 source3/smbd/nttrans.c if (trans_oob(state->total_param, 0, pscnt) pscnt 2745 source3/smbd/nttrans.c || trans_oob(smb_len(req->inbuf), psoff, pscnt)) { pscnt 2761 source3/smbd/nttrans.c memcpy(state->param,smb_base(req->inbuf)+psoff,pscnt); pscnt 2765 source3/smbd/nttrans.c state->received_param = pscnt; pscnt 7684 source3/smbd/trans2.c unsigned int pscnt; pscnt 7700 source3/smbd/trans2.c pscnt = SVAL(req->vwv+9, 0); pscnt 7779 source3/smbd/trans2.c if ((dscnt > state->total_data) || (pscnt > state->total_param)) pscnt 7806 source3/smbd/trans2.c if (trans_oob(state->total_param, 0, pscnt) pscnt 7807 source3/smbd/trans2.c || trans_oob(smb_len(req->inbuf), psoff, pscnt)) { pscnt 7824 source3/smbd/trans2.c memcpy(state->param,smb_base(req->inbuf)+psoff,pscnt); pscnt 7828 source3/smbd/trans2.c state->received_param = pscnt;