879 	if (ba->ba_buf[idx].m != NULL) {  in ieee80211_input_ba()
885 	ba->ba_buf[idx].m = m;  in ieee80211_input_ba()
888 	ba->ba_buf[idx].rxi = *rxi;  in ieee80211_input_ba()
891 	if (ba->ba_buf[ba->ba_head].m == NULL && ba->ba_gapwait == 1)  in ieee80211_input_ba()
913 		if (ba->ba_buf[ba->ba_head].m != NULL) {  in ieee80211_input_ba_seq()
914 			wh = mtod(ba->ba_buf[ba->ba_head].m,  in ieee80211_input_ba_seq()
921 			ieee80211_inputm(ifp, ba->ba_buf[ba->ba_head].m,  in ieee80211_input_ba_seq()
922 			    ni, &ba->ba_buf[ba->ba_head].rxi, ml);  in ieee80211_input_ba_seq()
923 			ba->ba_buf[ba->ba_head].m = NULL;  in ieee80211_input_ba_seq()
943 	if (ba->ba_buf[ba->ba_head].m == NULL)  in ieee80211_input_ba_flush()
947 	while (ba->ba_buf[ba->ba_head].m != NULL) {  in ieee80211_input_ba_flush()
948 		ieee80211_inputm(ifp, ba->ba_buf[ba->ba_head].m, ni,  in ieee80211_input_ba_flush()
949 		    &ba->ba_buf[ba->ba_head].rxi, ml);  in ieee80211_input_ba_flush()
950 		ba->ba_buf[ba->ba_head].m = NULL;  in ieee80211_input_ba_flush()
976 	while (skipped < ba->ba_winsize && ba->ba_buf[ba->ba_head].m == NULL) {  in ieee80211_input_ba_gap_skip()
1031 		if (ba->ba_buf[ba->ba_head].m != NULL) {  in ieee80211_ba_move_window()
1032 			ieee80211_inputm(ifp, ba->ba_buf[ba->ba_head].m, ni,  in ieee80211_ba_move_window()
1033 			    &ba->ba_buf[ba->ba_head].rxi, ml);  in ieee80211_ba_move_window()
1034 			ba->ba_buf[ba->ba_head].m = NULL;  in ieee80211_ba_move_window()
2933 	ba->ba_buf = malloc(IEEE80211_BA_MAX_WINSZ * sizeof(*ba->ba_buf),  in ieee80211_recv_addba_req()
2935 	if (ba->ba_buf == NULL)  in ieee80211_recv_addba_req()
2984 	free(ba->ba_buf, M_DEVBUF,  in ieee80211_addba_req_refuse()
2985 	    IEEE80211_BA_MAX_WINSZ * sizeof(*ba->ba_buf));  in ieee80211_addba_req_refuse()
2986 	ba->ba_buf = NULL;  in ieee80211_addba_req_refuse()
3160 		if (ba->ba_buf != NULL) {  in ieee80211_recv_delba()
3163 				m_freem(ba->ba_buf[i].m);  in ieee80211_recv_delba()
3165 			free(ba->ba_buf, M_DEVBUF,  in ieee80211_recv_delba()
3166 			    IEEE80211_BA_MAX_WINSZ * sizeof(*ba->ba_buf));  in ieee80211_recv_delba()
3167 			ba->ba_buf = NULL;  in ieee80211_recv_delba()