Lines Matching defs:psFlash2xReadWrite
3886 * @psFlash2xReadWrite :-Flash2x Read/write structure pointer
3891 int validateFlash2xReadWrite(struct bcm_mini_adapter *Adapter, struct bcm_flash2x_readwrite *psFlash2xReadWrite)
3897 uiNumOfBytes = psFlash2xReadWrite->numOfBytes;
3899 if (IsSectionExistInFlash(Adapter, psFlash2xReadWrite->Section) != TRUE) {
3900 BCM_DEBUG_PRINT(Adapter, DBG_TYPE_PRINTK, 0, 0, "Section<%x> does not exist in Flash", psFlash2xReadWrite->Section);
3903 uiSectStartOffset = BcmGetSectionValStartOffset(Adapter, psFlash2xReadWrite->Section);
3904 BCM_DEBUG_PRINT(Adapter, DBG_TYPE_OTHERS, NVM_RW, DBG_LVL_ALL, "Start offset :%x ,section :%d\n", uiSectStartOffset, psFlash2xReadWrite->Section);
3905 if ((psFlash2xReadWrite->Section == ISO_IMAGE1) || (psFlash2xReadWrite->Section == ISO_IMAGE2)) {
3906 if (psFlash2xReadWrite->Section == ISO_IMAGE1) {
3913 } else if (psFlash2xReadWrite->Section == ISO_IMAGE2) {
3929 uiSectEndOffset = BcmGetSectionValEndOffset(Adapter, psFlash2xReadWrite->Section);
3933 /* psFlash2xReadWrite->offset and uiNumOfBytes are user controlled and can lead to integer overflows */
3934 if (psFlash2xReadWrite->offset > uiSectEndOffset) {
3943 if ((uiSectStartOffset + psFlash2xReadWrite->offset + uiNumOfBytes) <= uiSectEndOffset)