summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorRajeev Kumar <rajekuma@qca.qualcomm.com>2014-02-13 12:29:10 -0800
committerPrakash Dhavali <pdhavali@qca.qualcomm.com>2014-02-14 21:08:54 -0800
commit5fa5cc4f8498044eefcdb2bc800179f7a40d6a6d (patch)
tree3670f956c823337da7283b2cebb8bf2111d94a06
parent104952f4b7666dd23644dfe61ac52163f2617a4f (diff)
qcacld: Add panic in HTC header corruption issues
Add VOS panic to force crash whenever host receives corrupted HTC header from FW. Change-Id: I5f13a746f677dfa9962e2cd58cabfb961d863811 CRs-Fixed: 615169
-rw-r--r--CORE/SERVICES/HTC/htc_recv.c4
1 files changed, 3 insertions, 1 deletions
diff --git a/CORE/SERVICES/HTC/htc_recv.c b/CORE/SERVICES/HTC/htc_recv.c
index 7deaf0931205..f33e776c2908 100644
--- a/CORE/SERVICES/HTC/htc_recv.c
+++ b/CORE/SERVICES/HTC/htc_recv.c
@@ -281,7 +281,6 @@ A_STATUS HTCRxCompletionHandler(
do {
htc_ep_id = HTC_GET_FIELD(HtcHdr, HTC_FRAME_HDR, ENDPOINTID);
- pEndpoint = &target->EndPoint[htc_ep_id];
if (htc_ep_id >= ENDPOINT_MAX) {
AR_DEBUG_PRINTF(ATH_DEBUG_ERR,("HTC Rx: invalid EndpointID=%d\n",htc_ep_id));
@@ -291,6 +290,8 @@ A_STATUS HTCRxCompletionHandler(
break;
}
+ pEndpoint = &target->EndPoint[htc_ep_id];
+
/*
* If this endpoint that received a message from the target has
* a to-target HIF pipe whose send completions are polled rather
@@ -319,6 +320,7 @@ A_STATUS HTCRxCompletionHandler(
netlen, payloadLen + HTC_HDR_LENGTH));
DebugDumpBytes((A_UINT8 *)HtcHdr,sizeof(HTC_FRAME_HDR),"BAD RX packet length");
status = A_ERROR;
+ VOS_BUG(0);
break;
#endif
}