summaryrefslogtreecommitdiff
Commit message (Collapse)AuthorAge
...
| * | | | | | | Merge "qcacld-2.0: Fix possible OOB access in limProcessDisassocFrame" into ↵CNSS_WLAN Service2018-10-23
| |\ \ \ \ \ \ \ | | | | | | | | | | | | | | | | | | | | | | | | | | | wlan-cld2.driver.lnx.1.0
| | * | | | | | | qcacld-2.0: Fix possible OOB access in limProcessDisassocFrametinlin2018-10-23
| | | |_|/ / / / | | |/| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Propagation from cld3.0 to cld2.0. Reason code is extracted from frame data without validating frame len which could result in out of bound access. Fix is to validate frame len before extracting reason code from frame data. Change-Id: I00795a806abcae903dd0daa019aeab990aedc3a7 CRs-Fixed: 2333989
| * | | | | | | qcacld-2.0: Fix out-of-bounds access in limProcessAssocReqFrametinlin2018-10-23
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Propagation from cld3.0 to cld2.0. Currently the function limProcessAssocReqFrame uses framelen without validation to parse the IE buffer which could lead to out-of-bounds memory access if the framelen is less than or equal to LIM_ASSOC_REQ_IE_OFFSET(4). Add check to validate the frame_len with LIM_ASSOC_REQ_IE_OFFSET before sending frame_len - LIM_ASSOC_REQ_IE_OFFSET to cfg_get_vendor_ie_ptr_from_oui to parse the only IE buffer. Change-Id: Iaa9e8db4a2605169c9ad3904878a2e626eb6de8b CRs-Fixed: 2333905
| * | | | | | | qcacld-2.0: Fix possible OOB access in lim_process_assoc_req_frametinlin2018-10-23
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Propagation from cld3.0 driver to cld2.0 driver. cfg_get_vendor_ie_ptr_from_oui is invoked in limProcessAssocReqFrame function with ie pointer pointing to frame buffer plus assoc req ie offset and ie len equal to frame buffer len. This could result in OOB access since offset is not subtracted from frame len. Fix is to subtract the offset from frame len as argument to cfg_get_vendor_ie_ptr_from_oui. Change-Id: Ic107867bcf4d7813c544309a2aff165f2dc7155d CRs-Fixed: 2333887
| * | | | | | | qcacld-2.0: Check for minimum frameLen for action framestinlin2018-10-22
| |/ / / / / / | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Propagation from cld3.0 to cld2.0. In limProcessActionFrame and limProcessActionFrameNoSession, The Rx frame pointer is directly casted to the action frame header to find the Action frame category and action ID without validating the minimum length of the frame. If the frame len is less than the action frame header len, then OOB read would occur. Check if frame_len is less than the size of action frame header len and return if true. Change-ID: Idf8ca7eeacdf57171d2850fe6317784911830aac CRs-Fixed: 2333070
| * | | | | | Merge "qcacld-2.0: Release reference of peer after copy cfr data" into ↵CNSS_WLAN Service2018-10-22
| |\ \ \ \ \ \ | | |/ / / / / | |/| | | | | | | | | | | | wlan-cld2.driver.lnx.1.0
| | * | | | | qcacld-2.0: Release reference of peer after copy cfr datanakul kachhwaha2018-10-18
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Decrementing the reference count of peer incremented from ol_txrx_peer_find_hash_find after copying cfr capture params. CRs-Fixed: 2330841 Change-Id: I8d1c18c145478267807fb7dbd2873f9741b35c84
| * | | | | | qcacld-2.0: Fix KW update about qcacld-dsrc issueGuisen Yang2018-10-19
| |/ / / / / | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Fix the OOB issues of some arrays, add NULL pointer check before use. Change-Id: Ifbc54399ed7f60291791c554d0b6396a09fa7bc3 CRs-Fixed: 2277483
| * | | | | qcacld-2.0: Provide iwpriv support to configure HPCS ParamsVisweswara Tanuku2018-10-18
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Added WMI interface to send WMI cmd for configuring HPCS Parameters Added support for iwpriv cmd to configure HPCS Parameters Usage: iwpriv wlanx setHpcsParams <start> <sync_time> <pulse_interval> <active_sync_period> <gpio_pin> <pulse_width> CRs-fixed: 2329899 Change-Id: Id1bb392bf3ac086ecbae7fa785fbee9716cc5cef
| * | | | | qcacld-2.0: HL: Obtain CFR data via HTT and send to userVisweswara Tanuku2018-10-18
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | In High Latency, FW sends CFR data via HTT msg to Host. Add wmi interface to configure CFR Capture parameters and htt interface to capture CFR data from FW. Provide netlink and debugfs interface for user to configure CFR capture parameters Send CFR data to user space using Relayfs, in below format <Magic Number><CFR Meta data><CFR capture><Magic Number> Change-Id: I6d1e67d2eea5117fb8c8b2e191c47c41326f4755 CRs-Fixed: 2308197
| * | | | | qcacld-2.0: Fix FT roaming failure issueMin Liu2018-10-16
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Currently, driver invokes csrRoamOffloadScan with command ROAM_SCAN_OFFLOAD_STOP to handle offload scan req and subsequently invokes CsrIsRSOCommandAllowed to check whether RSO stop command can be send down to firmware or not. If RSO is in a stopped state CsrIsRSOCommandAllowed does not allow CSR handoff request. This results in FT roaming failure. This change introduces change to allow the driver to invoke csrNeighborRoamProceedWithHandoffReq and proceed with roaming handoff req if RSO is in a stopped state. Change-Id: Ic80583dca92c4f3af1949df3303b77b4f055c4ca CRs-Fixed: 2334081
| * | | | | qcacld-2.0: Fix FT roaming failure for WEP Auto switch auth modeMin Liu2018-10-16
| |/ / / / | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | hdd_set_csr_auth_type sets roam profile auth type on the basis of pHddStaCtx->conn_info.authType. Currently, if supplicant sends pHddStaCtx->conn_info.authType = eCSR_AUTH_TYPE_AUTOSWITCH, driver is not handling this case and by default sets eCSR_AUTH_TYPE_UNKNOWN. When scan results are obtained, driver is not able to match the auth type in csrIsSecurityMatch as its set to UNKNOWN .This leads to connection failure in FT roaming. Fix is to set proper value of pRoamProfile->AuthType in case of pHddStaCtx->conn_info.authType = eCSR_AUTH_TYPE_AUTOSWITCH. Change-Id: I203f71606ee424340b447caecb91aded18c029b0 CRs-Fixed: 2333921
| * | | | qcacld-2.0: Add new parameter for iwpriv setPowergaolez2018-10-11
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | With this change the customer can set the BMPS mode dynamically while gEnableBmps disabled in ini configuration file. Change-Id: I029eb2874e1c37b857af5631b69d3ba43df383c7 CRs-Fixed: 2323762
| * | | | qcacld-2.0: Dereference adapter after successful validationPaul Zhang2018-10-09
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | propagation from qcacld-3.0 to qcacld-2.0 While retrieving fragmentation threshold, make sure adapter is dereferenced only after it is successfully validated. Change-Id: If79aff85d66b3d70e20d71dfbab87ae6f03d14df CRs-Fixed: 2324006
| * | | | qcacld-2.0: CL 5538220 - Update fw common interface filesVisweswara Tanuku2018-10-08
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | WMI: add WMI_HPCS_PULSE_START_CMD def CRs-fixed: 865207 Change-Id: I4b649e792c1842e8d4ddeaab8b98021aa323c554
| * | | | qcacld-2.0: CL 5471710 - Update fw common interface filesVisweswara Tanuku2018-10-08
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | WMI: add notif_params field to roam event msg CRs-fixed: 865207 Change-Id: Ie7e3dbc8dbdeebfc2eff6c722c43f7842eaad435
| * | | | qcacld-2.0: CL 5449242 - Update fw common interface filesVisweswara Tanuku2018-10-08
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | WMI: add new COEX_CONFIG priority defs CRs-fixed: 865207 Change-Id: I83f68e9b5cac3ff5f4f86dcb50e643f8c537ed05
| * | | | qcacld-2.0: CL 5441245 - Update fw common interface filesVisweswara Tanuku2018-10-08
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | WMI: Add WMI_PEER_PARAM_XMIT_OMI def CRs-fixed: 865207 Change-Id: I5d1be6e7ed8aa50b2feb23f989a991c1defd20fa
| * | | | qcacld-2.0: CL 5433189 - Update fw common interface filesVisweswara Tanuku2018-10-08
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | WMI: add peer_extd2_stats with rx MPDU, byte, and FCS counters CRs-fixed: 865207 Change-Id: Ieec73617648c7e08565dfc62d3ae9faa037bd02c
| * | | | qcacld-2.0: CL 5408272 - Update fw common interface filesVisweswara Tanuku2018-10-08
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | WMI: NOL enable/disable, scan/vdev fail defs for NOL violations CRs-fixed: 865207 Change-Id: Ic7d59f31b7d28db88806435312bfa77d79adb352
| * | | | qcacld-2.0: CL 5396771 - Update fw common interface filesVisweswara Tanuku2018-10-08
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | WMI: Add WMI_PDEV_HE_TB_ACTION_FRM_CMDID def CRs-fixed: 865207 Change-Id: I1e4df29b97a51b84ad73ac4452434a004612721b
| * | | | qcacld-2.0: CL 5392072 - Update fw common interface filesVisweswara Tanuku2018-10-08
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | WMI: specify OBSS min and max RSSI limits for roaming CRs-fixed: 865207 Change-Id: I1e1da1d8c1b71ac5f2bd73d984d318f5c590df2f
| * | | | qcacld-2.0: CL 5389981 - Update fw common interface filesVisweswara Tanuku2018-10-08
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | WMI: add flags to indicate support for LTF, MCS 10-11 CRs-fixed: 865207 Change-Id: I39c73ec8c3b7a13c3bd4723ab05578b45c89ded2
| * | | | qcacld-2.0: CL 5330078 - Update fw common interface filesVisweswara Tanuku2018-10-08
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | WMI: add pdev_id to wmi_lro_info_cmd_fixed_param CRs-fixed: 865207 Change-Id: Icd57e3a82980cd8685a1b3f89e28b198bc774d4e
| * | | | qcacld-2.0: CL 5310843 - Update fw common interface filesVisweswara Tanuku2018-10-08
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | WMI: estimated throughput parameter specifications CRs-fixed: 865207 Change-Id: I7e7574071288a7cfa9499cdb9f1b6a5d21f0db63
| * | | | qcacld-2.0: CL 5282449 - Update fw common interface filesVisweswara Tanuku2018-10-08
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | WMI: correct the placement of new ul_resp_config field CRs-fixed: 865207 Change-Id: I3cdaa876707bb146f66c493771ed19191942eaaa
| * | | | qcacld-2.0: CL 5278496 - Update fw common interface filesVisweswara Tanuku2018-10-08
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Change ML debug log level CRs-fixed: 865207 Change-Id: Ifb1c7f7cac1a43f71662910ecd26acdd55b4aec3
| * | | | qcacld-2.0: CL 5273786 - Update fw common interface filesVisweswara Tanuku2018-10-08
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | WMI: add UL_RESP enable / disable flag (and clean up dbglog_id.h) CRs-fixed: 865207 Change-Id: Icf168eb44288f3689c1b8ddd02a67526fb080a34
| * | | | qcacld-2.0: CL 5253203 - Update fw common interface filesVisweswara Tanuku2018-10-08
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | ML Log - FW common CRs-fixed: 865207 Change-Id: I6ab2812f950f65caed687729c185ff6e1b505959
| * | | | qcacld-2.0: CL 5256109 - Update fw common interface filesVisweswara Tanuku2018-10-08
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Add WMI_PEER_CHAN_WIDTH_SWITCH_CMDID def CRs-fixed: 865207 Change-Id: I3624aef6befc57facec1cb495a769ba237cac7d5
| * | | | qcacld-2.0: CL 5216147 - Update fw common interface filesVisweswara Tanuku2018-10-08
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | WMI: additional 802.11ax Draft 3 changes CRs-fixed: 865207 Change-Id: I32132f5529317e7d0c7d65638787827ee2ee1f9a
| * | | | qcacld-2.0: CL 5207277 - Update fw common interface filesVisweswara Tanuku2018-10-08
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | WMI: support 11ax draft 3.0 CRs-fixed: 865207 Change-Id: I37b0312fffbf99028ad548c79028b2b4cfba5ec7
| * | | | qcacld-2.0: Check for following radio link stats eventsPragaspathi Thilagaraj2018-10-04
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | When first WMI_RADIO_LINK_STATS_EVENTID is received radio stats buffer is allocated based on num_radio param. There is an option for pending following events. So update wma_unified_link_radio_stats_event_handler to check if following events are valid wrt num_radio values to avoid buffer overwrites. Change-Id: I854538e40481ab071f24b563e1937e2d47a26409 CRs-fixed: 2317883
| * | | | Merge "qcacld-2.0: Send thermal events for userbased FW throttling" into ↵CNSS_WLAN Service2018-09-28
| |\ \ \ \ | | | | | | | | | | | | | | | | | | wlan-cld2.driver.lnx.1.0
| | * | | | qcacld-2.0: Send thermal events for userbased FW throttlingVisweswara Tanuku2018-09-20
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | In FW based thermal throttling feature, user can configure thermal throttle params via iwpriv. When throttling happens, send thermal events to userspace via netlink when temp crosses threshold values CRs-Fixed: 2287958 Change-Id: If6f9c128b4fbbe3e864a4f4f1f3f6bf074763d17
| * | | | | qcacld-2.0: Return error for invalid wow patternVisweswara Tanuku2018-09-28
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Return error from driver whenever user sends invalid wow pattern via iwpriv command Change-Id: Iacf84986e95ed3f156fd588d5c855654c3541a89 CRs-Fixed: 2299629
| * | | | | qcacld-2.0: Update last_scan_reject_timestamp with proper valueAbhinav Kumar2018-09-26
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | When the scan is rejected, driver saves the scan reject reason and the rejected time by converting the jiffies to msec. In case when HZ is 100 while converting jiffies to msec, jiffies_to_msecs() return wrapped value of jiffies(in msec). This result value of the current jiffies (return value of jiffies_to_msecs API) becomes greater than scan reject time (pHddCtx->last_scan_reject_timestamp) and __wlan_hdd_cfg80211_scan trigger SSR in case of scan rejection. Fix is to Use jiffiy directly instead of using jiffies_to_msecs() while updating scan reject time(pHddCtx->last_scan_reject_timestamp). Change-Id: Ib86830456fdc48143bf282779216ab94aed11923 CRs-Fixed: 2293268
| * | | | | qcacld-2.0: Avoid buffer overflow when handle 11w rmfJianmin Zhu2018-09-21
| |/ / / / | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | If 11w is enabled, mmie should be included in broadcast multicast rmf, length check need consider it to avoid buffer overflow. CRs-Fixed: 2319068 Change-Id: I6c2ebe18fb5b6e4246ba6d28c1dbc55175279e30
| * | | | Merge "qcacld-2.0: CL 5188984 - Update fw common interface files" into ↵CNSS_WLAN Service2018-09-19
| |\ \ \ \ | | | | | | | | | | | | | | | | | | wlan-cld2.driver.lnx.1.0
| | * | | | qcacld-2.0: CL 5188984 - Update fw common interface filesVisweswara Tanuku2018-09-18
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | ath10k: provide channel state information, WMI interface CRs-fixed: 865207 Change-Id: I65cedd3e5fecf01eaeae9e55aadde3f07f4e31b8
| * | | | | Merge "qcacld-2.0: CL 5169767 - Update fw common interface files" into ↵CNSS_WLAN Service2018-09-19
| |\| | | | | | | | | | | | | | | | | | | | | | wlan-cld2.driver.lnx.1.0
| | * | | | qcacld-2.0: CL 5169767 - Update fw common interface filesVisweswara Tanuku2018-09-18
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | FFT Bin scaling implementation support CRs-fixed: 865207 Change-Id: I1afe3053a26d327ddacc201e7aa9563872a98a80
| * | | | | Merge "qcacld-2.0: CL 5157294 - Update fw common interface files" into ↵CNSS_WLAN Service2018-09-19
| |\| | | | | | | | | | | | | | | | | | | | | | wlan-cld2.driver.lnx.1.0
| | * | | | qcacld-2.0: CL 5157294 - Update fw common interface filesVisweswara Tanuku2018-09-18
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | NAN concurrency support api changes CRs-fixed: 865207 Change-Id: Id99ddd204a000f75cea8cb9fbc5b77b7888e0e6f
| * | | | | Merge "qcacld-2.0: CL 5087294 - Update fw common interface files" into ↵CNSS_WLAN Service2018-09-19
| |\| | | | | | | | | | | | | | | | | | | | | | wlan-cld2.driver.lnx.1.0
| | * | | | qcacld-2.0: CL 5087294 - Update fw common interface filesVisweswara Tanuku2018-09-18
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | WMI: define Estimate Service Parameters messages CRs-fixed: 865207 Change-Id: I48bcc45d19dd1444e35883d669aeb40882e806d5
| * | | | | Merge "qcacld-2.0: CL 5080653 - Update fw common interface files" into ↵CNSS_WLAN Service2018-09-19
| |\| | | | | | | | | | | | | | | | | | | | | | wlan-cld2.driver.lnx.1.0
| | * | | | qcacld-2.0: CL 5080653 - Update fw common interface filesVisweswara Tanuku2018-09-18
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | WMI: add EAPOL AC override flags CRs-fixed: 865207 Change-Id: I1f19f48ca9fdfb9d690847e2f6539a6e662e87bd
| * | | | | Merge "qcacld-2.0: CL 5055458 - Update fw common interface files" into ↵CNSS_WLAN Service2018-09-19
| |\| | | | | | | | | | | | | | | | | | | | | | wlan-cld2.driver.lnx.1.0
| | * | | | qcacld-2.0: CL 5055458 - Update fw common interface filesVisweswara Tanuku2018-09-18
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | WMI: add MLME retries limit and retry delay if no ack as roam params Also add a couple existing WMI CMDIDs to the WMI_RETURN_STRING list CRs-fixed: 865207 Change-Id: Ide3ff67251b5d69c280776e962e8a863fc14f460
generated by cgit v1.2.3 (git 2.25.1) at 2026-04-19 13:53:45 +0000