113 			ecs->subnet_source_mask <=  INET_SIZE*8);  in subnet_ecs_opt_list_append()
115 			ecs->subnet_source_mask <= INET6_SIZE*8);  in subnet_ecs_opt_list_append()
117 		sn_octs = ecs->subnet_source_mask / 8;  in subnet_ecs_opt_list_append()
119 			(size_t)((ecs->subnet_source_mask % 8)>0?1:0);  in subnet_ecs_opt_list_append()
125 		sldns_buffer_write_u8(buf, ecs->subnet_source_mask);  in subnet_ecs_opt_list_append()
130 				~(0xFF >> (ecs->subnet_source_mask % 8)));  in subnet_ecs_opt_list_append()
173 			if(sq->ecs_server_out.subnet_source_mask == 0) {  in ecs_whitelist_check()
297 	target->subnet_source_mask = source->subnet_source_mask;  in cp_edns_bad_response()
417 	if(edns->subnet_source_mask == 0 && edns->subnet_scope_mask == 0)  in update_cache()
421 		edns->subnet_source_mask, sq->max_scope, rep,  in update_cache()
461 		ecs->subnet_source_mask, *env->now);  in lookup_and_reply()
480 		sq->ecs_client_out.subnet_source_mask = ecs->subnet_source_mask;  in lookup_and_reply()
558 		s_in->subnet_source_mask = 0;  in eval_response()
570 		s_out->subnet_source_mask != s_in->subnet_source_mask ||  in eval_response()
572 			s_out->subnet_source_mask))  in eval_response()
595 		c_out->subnet_source_mask = c_in->subnet_source_mask;  in eval_response()
625 	ecs->subnet_source_mask = ecs_option->opt_data[2];  in parse_subnet_option()
631 	if (ecs_option->opt_len != (size_t)((ecs->subnet_source_mask+7)/8 + 4))  in parse_subnet_option()
636 		if (ecs->subnet_source_mask > 32 || ecs->subnet_scope_mask > 32)  in parse_subnet_option()
639 		if (ecs->subnet_source_mask > 128 ||  in parse_subnet_option()
647 		ecs_option->opt_len - 4, ecs->subnet_source_mask))  in parse_subnet_option()
661 		ecs->subnet_source_mask = cfg->max_client_subnet_ipv4;  in subnet_option_from_ss()
666 			ecs->subnet_source_mask)) {  in subnet_option_from_ss()
672 		ecs->subnet_source_mask = cfg->max_client_subnet_ipv6;  in subnet_option_from_ss()
677 			ecs->subnet_source_mask)) {  in subnet_option_from_ss()
828 		if(sq->ecs_client_in.subnet_source_mask != 0 && (  in subnetmod_operate()
830 			 sq->ecs_client_in.subnet_source_mask < qstate->env->cfg->min_client_subnet_ipv4) ||  in subnetmod_operate()
832 			 sq->ecs_client_in.subnet_source_mask < qstate->env->cfg->min_client_subnet_ipv6))) {  in subnetmod_operate()
865 		sq->ecs_server_out.subnet_source_mask =  in subnetmod_operate()
866 			sq->ecs_client_in.subnet_source_mask;  in subnetmod_operate()
869 			&& sq->ecs_server_out.subnet_source_mask >  in subnetmod_operate()
871 			sq->ecs_server_out.subnet_source_mask =  in subnetmod_operate()
874 			&& sq->ecs_server_out.subnet_source_mask >  in subnetmod_operate()
876 			sq->ecs_server_out.subnet_source_mask =  in subnetmod_operate()
885 		if(sq->ecs_server_out.subnet_source_mask != 0 &&  in subnetmod_operate()