doff 782 source3/smbd/ipc.c unsigned int pcnt,poff,dcnt,doff,pdisp,ddisp; doff 821 source3/smbd/ipc.c doff = SVAL(req->vwv+6, 0); doff 841 source3/smbd/ipc.c || trans_oob(smb_len(req->inbuf), doff, dcnt)) { doff 844 source3/smbd/ipc.c memcpy(state->data+ddisp, smb_base(req->inbuf)+doff,dcnt); doff 2835 source3/smbd/nttrans.c uint32_t pcnt,poff,dcnt,doff,pdisp,ddisp; doff 2875 source3/smbd/nttrans.c doff = IVAL(req->vwv+13, 1); doff 2895 source3/smbd/nttrans.c || trans_oob(smb_len(req->inbuf), doff, dcnt)) { doff 2898 source3/smbd/nttrans.c memcpy(state->data+ddisp, smb_base(req->inbuf)+doff,dcnt); doff 184 source3/smbd/process.c uint16_t doff = SVAL(writeX_header,smb_vwv11); doff 187 source3/smbd/process.c if (doff > STANDARD_WRITE_AND_X_HEADER_SIZE) { doff 188 source3/smbd/process.c size_t drain = doff - STANDARD_WRITE_AND_X_HEADER_SIZE; doff 194 source3/smbd/process.c doff = STANDARD_WRITE_AND_X_HEADER_SIZE; doff 4039 source3/smbd/reply.c unsigned int doff = 0; doff 4072 source3/smbd/reply.c doff = SVAL(inbuf,smb_vwv11); doff 4076 source3/smbd/reply.c if (len > doff && len - doff > 0xFFFF) { doff 4086 source3/smbd/reply.c if (doff < STANDARD_WRITE_AND_X_HEADER_SIZE) { doff 4089 source3/smbd/reply.c (unsigned int)doff, doff 4094 source3/smbd/reply.c if (len - doff != numtowrite) { doff 4098 source3/smbd/reply.c (unsigned int)doff, doff 4106 source3/smbd/reply.c (unsigned int)doff, doff 7869 source3/smbd/trans2.c unsigned int pcnt,poff,dcnt,doff,pdisp,ddisp; doff 7908 source3/smbd/trans2.c doff = SVAL(req->vwv+6, 0); doff 7928 source3/smbd/trans2.c || trans_oob(smb_len(req->inbuf), doff, dcnt)) { doff 7931 source3/smbd/trans2.c memcpy(state->data+ddisp, smb_base(req->inbuf)+doff,dcnt);