193     RK_U16 len = 0;  in jpegd_skip_section()  local
197     len = jpegd_read_len(gb);  in jpegd_skip_section()
198     if (len < 2 /* invalid marker */ || (RK_U32)len - 2 > gb->bytes_left_) {  in jpegd_skip_section()
202     if (len > 2)  in jpegd_skip_section()
203         SKIP_BITS(gb, (len - 2) * 8);  in jpegd_skip_section()
216     RK_U32 len, num, value;  in jpegd_decode_dht()  local
220     len = jpegd_read_len(gb);  in jpegd_decode_dht()
221     len -= 2; /* Huffman Table Length */  in jpegd_decode_dht()
223     if (len > gb->bytes_left_) {  in jpegd_decode_dht()
224         mpp_err_f("dht: len %d is too large\n", len);  in jpegd_decode_dht()
227     jpegd_dbg_marker("dht: huffman tables length=%d\n", len);  in jpegd_decode_dht()
229     while (len > 0) {  in jpegd_decode_dht()
230         if (len < MAX_HUFFMAN_CODE_BIT_LENGTH + 1) {  in jpegd_decode_dht()
231             mpp_err_f("dht: len %d is too small\n", len);  in jpegd_decode_dht()
268         len -= 17;  in jpegd_decode_dht()
269         if (len < num ||  in jpegd_decode_dht()
300         len -= num;  in jpegd_decode_dht()
303                          table_type, table_id, num, code_max, len);  in jpegd_decode_dht()
320     RK_U32 len;  in jpegd_decode_dqt()  local
324     len = jpegd_read_len(gb);  in jpegd_decode_dqt()
325     len -= 2; /* quantize tables length */  in jpegd_decode_dqt()
327     if (len > gb->bytes_left_) {  in jpegd_decode_dqt()
328         mpp_err_f("dqt: len %d is too large\n", len);  in jpegd_decode_dqt()
332     while (len >= 65) {  in jpegd_decode_dqt()
380         len -= 1 + 64 * (1 + pr);  in jpegd_decode_dqt()
396     RK_U32 len, bits, i;  in jpegd_decode_sof()  local
400     len = jpegd_read_len(gb);  in jpegd_decode_sof()
401     if (len > gb->bytes_left_) {  in jpegd_decode_sof()
402         mpp_err_f("len %d is too large\n", len);  in jpegd_decode_sof()
430     if (len != (8 + (3 * nb_components)))  in jpegd_decode_sof()
432                   len, nb_components);  in jpegd_decode_sof()
489     RK_U32 len, nb_components, value;  in jpegd_decode_sos()  local
492     len = jpegd_read_len(gb);  in jpegd_decode_sos()
493     if (len > gb->bytes_left_) {  in jpegd_decode_sos()
494         mpp_err_f("len %d is too large\n", len);  in jpegd_decode_sos()
497     syntax->sos_len = len; /* used for calculating stream offset */  in jpegd_decode_sos()
505     if (len != 6 + 2 * nb_components) {  in jpegd_decode_sos()
507                   len, nb_components);  in jpegd_decode_sos()
579     RK_U32 len;  in jpegd_decode_dri()  local
581     len = jpegd_read_len(gb);  in jpegd_decode_dri()
582     if (len != DRI_MARKER_LENGTH) {  in jpegd_decode_dri()
583         mpp_err_f("DRI length %d error\n", len);  in jpegd_decode_dri()