| Commit message (Collapse) | Author | Age |
| ... | |
| | | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | | |
Release 4.0.11.210N
Change-Id: Iafe4fd63df336ba073911cb650acb75409701096
CRs-Fixed: 774533
|
| | | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | | |
Check if the firmware is passing a valid vdev ID or not in the
NLO match event and return error if vdev is invalid
Change-Id: I83f957ae084e17c20f607eb3862a131f3b311d23
CRs-Fixed: 2132377
|
| | | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | | |
Release 4.0.11.210M
Change-Id: Ic9fe987711850563b1654f251422d711a250850e
CRs-Fixed: 774533
|
| | | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | | |
hdd_get_hosttime_from_targettime() will get wrong host time when
it's longer than WLAN_HDD_CAPTURE_TSF_INTERVAL_SEC from last
TSF-HOST update. To fix this, TSF-HOST should be updated in at most
WLAN_HDD_CAPTURE_TSF_INTERVAL_SEC, it couldn't be achieved if the
timer interval is also WLAN_HDD_CAPTURE_TSF_INTERVAL_SEC, due to
processing or scheduling delay. So deduct several seconds from
WLAN_HDD_CAPTURE_TSF_INTERVAL_SEC.
Change-Id: Icce41c74568370d98509a2ebe69ae62e99ad2ce8
CRs-Fixed: 2104915
|
| | | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | | |
Release 4.0.11.210L
Change-Id: I7657a6c3e78da1d7bdeb57c1c9625241bd1336e9
CRs-Fixed: 774533
|
| | | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | | |
define WMI messages for PDEV_BSS_CHAN_INFO request and event
Change-Id: Id88c27019e4a4ff0b6ae04b64d0b80bc92d9b002
CRs-fixed: 865207
|
| | | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | | |
add WMI_PDEV_PARAM_ACK_TIMEOUT
Change-Id: If34f93f154eae55dc34f6a0e494fac9d01954dfc
CRs-fixed: 865207
|
| | | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | | |
Add defs of WMI extended peer stats
Change-Id: Ie100a1ab44aa7a958691924c26243f91217c6c95
CRs-fixed: 865207
|
| | | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | | |
WMI config type for BTCOEX to optimize PTA feature
Change-Id: I2e92ad09b52dd061d0541f660cf447dd2411baa1
CRs-fixed: 865207
|
| | | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | | |
WMI_SERVICE_8SS_TX_BFEE flag definition
Change-Id: I48395bc610affc0da2a9561502be3264208fd81f
CRs-fixed: 865207
|
| | | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | | |
Add WMI_PDEV_PARAM_SET_IOT_PATTERN def
Change-Id: Ia79da631d8268505ec48f0592267779f90d409dc
CRs-fixed: 865207
|
| | | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | | |
add WMI_COEX_CONFIG_HANDOVER_RSSI to WMI_COEX_CONFIG_TYPE
Change-Id: I96ee038c3c02b649d6a18abb853db847af79f505
CRs-fixed: 865207
|
| | | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | | |
WMI change for NDI MAC address randomization.
Change-Id: I6c581e7f8bd40109c74dc36107c78797739f6135
CRs-fixed: 865207
|
| | | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | | |
add WMI + RTT definitions to enable CFR/CIR capture on Lithium
Change-Id: I6f7ab0f76e6abf755e12bfad096bde438f4de55c
CRs-fixed: 865207
|
| | | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | | |
add vdev_id field to WMI_CHAN_INFO_EVENT
Change-Id: I84fd8c5af5c62a45bda54b0fe8c22708fd108db8
CRs-fixed: 865207
|
| | | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | | |
add fields to WMI VDEV_UP CMD msg for mbssid support
Change-Id: Ibf5671521e699659493b14a9437eaf79534f6f86
CRs-fixed: 865207
|
| | | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | | |
Release 4.0.11.210K
Change-Id: I559c9ecddee291aa99fb698354dd96f5fa6f2ad3
CRs-Fixed: 774533
|
| | | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | | |
In function wma_ndp_end_indication_event_handler, num_ndp_end_indication_list
from the fw is used to calculate buf_size which is in turn used to malloc.
This could lead to potential integer overflow if num_ndp_end_indication_list
is a very high value.
Add check to validate num_ndp_end_indication_list does not exceed the max
message size from firmware.
Change-Id: Icbb763bfc14ec0ef8424cab50afa5c6826fd3c60
CRs-Fixed: 2128153
|
| | | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | | |
Release 4.0.11.210J
Change-Id: Icb9cee98406e44dbce01b1e60d65948bfdf93573
CRs-Fixed: 774533
|
| | | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | | |
In WMI_SERVICE_READY_EVENTID, check for number of dbs HW modes against
the metadata.
Change-Id: I043c93c4e6bc0dfdd73dbdc65bab683c56269308
CRs-Fixed: 2125963
|
| | | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | | |
Correct the invalid type conversions in diag_fw_handler.
Change-Id: I9dfaf3830b6686a824356f790b1dc51e76b4944a
CRs-Fixed: 2125958
|
| | | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | | |
Check for data length against the size of the structure.
Change-Id: Ia8107053ca9c109632ea02a0c8fa677f19e4e225
CRs-Fixed: 2125776
|
| | | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | | |
Release 4.0.11.210I
Change-Id: I680d7f9515c50cfae9067564bc5716d521d526d6
CRs-Fixed: 774533
|
| | | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | | |
In function lim_update_ibss_prop_add_ies size of a malloc is based on
sum of two integers. Add check for integer overflow before malloc.
Change-Id: I53ad59f0a38b102d714fa8cfe9471b52935d8376
CRs-Fixed: 2116415
|
| | | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | | |
Release 4.0.11.210H
Change-Id: Idca7e43530a545b9954885887c29ce1711254a6f
CRs-Fixed: 774533
|
| | | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | | |
When Management frame Tx fails, tx_frm_ota_comp_cb is not set NULL
during cleanup, because of which assert is observed since session
is not available
Set tx_frm_ota_comp_cb NULL when Management frame tx fails
Change-Id: I318a6d04cce06955f6751f6f3df746fec50b9434
CRs-Fixed: 2127855
|
| | | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | | |
Release 4.0.11.210G
Change-Id: Ib5ec41604ef1a9c759c167e5ce2df5be62016e5a
CRs-Fixed: 774533
|
| | | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | | |
This debug feature of OCB per packet tx stats needs to turn off the
optimization controlled by macro HI_ACS_FLAGS_SDIO_REDUCE_TX_COMPL_SET,
which would degrade the throughput performance.
So, add an ini parameter to turn off this debug feature as default.
Change-Id: I997f4ff74bd037730383a333bbf1140a1028243a
CRs-Fixed: 1113905
|
| | | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | | |
Release 4.0.11.210F
Change-Id: Id5ae79d2eb34fbc84b03c3abd99f066733d07334
CRs-Fixed: 774533
|
| | | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | | |
Update LDPC flag from Vendor IE instead of VHT capabalities
for VHT20 case.
Change-Id: I7bb916353586529fb78f1caeda68687663e44af2
CRs-Fixed: 2091292
|
| | | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | | |
Add Config support for QoS Forward and enable
Data path Logging support for USB.
Change-Id: I34e2ca8c22ee280f055bfd9354ab0bfc0df4ee2d
CRs-Fixed: 2122462
|
| | | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | | |
The subtype values used in the DoS attacks check are not correct.
No MGMT frame will be dropped in a DoS attack.
Change-Id: I0fdcffd7151a78abf21bb0f4223aaba3e86a46ab
CRs-Fixed: 2103880
|
| | | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | | |
Release 4.0.11.210E
Change-Id: I8d0ec195a33bcb38d6f5957752caf0d6c17ef34c
CRs-Fixed: 774533
|
| | | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | | |
propagation from qcacld-3.0 to qcacld-2.0.
__iw_softap_set_ini_cfg assumes a given user supplied buffer is null
terminated, which can lead to a buffer overrun. Ensure the buffer is
null terminated by copying it to a new, oversized buffer whose last byte
is zero.
Change-Id: If94e753026f79a368cd6b9cb7c745ade4ae29452
CRs-Fixed: 2128900
|
| | |\ \ \ \ |
|
| | | | | | |
| | | | | |
| | | | | |
| | | | | |
| | | | | |
| | | | | |
| | | | | | |
Release 4.0.11.210D
Change-Id: If8a33ef920bc3f164a8534bce6abd770e06783f3
CRs-Fixed: 774533
|
| | |\| | | |
| | | | | |
| | | | | |
| | | | | | |
into wlan-cld2.driver.lnx.1.0-dev
|
| | | | | | |
| | | | | |
| | | | | |
| | | | | |
| | | | | |
| | | | | |
| | | | | |
| | | | | |
| | | | | |
| | | | | |
| | | | | |
| | | | | |
| | | | | | |
propagation from qcacld-3.0 to qcacld-2.0.
There is a possibility of buffer overread while processing PTT
commands, because of packet length check is missing.
While processing PTT commands, validate packet length to make sure
there is no buffer overread.
Change-Id: I65b2839b0812fc8b2421e4d73e14a05620411c53
CRs-Fixed: 2125577
|
| | |\| | | | |
|
| | | | | | |
| | | | | |
| | | | | |
| | | | | |
| | | | | |
| | | | | |
| | | | | | |
Release 4.0.11.210C
Change-Id: I625bea2d5457c0be920838976a7a27a164c4e078
CRs-Fixed: 774533
|
| | |\| | | |
| | | | | |
| | | | | |
| | | | | | |
wlan-cld2.driver.lnx.1.0-dev
|
| | | | | | |
| | | | | |
| | | | | |
| | | | | |
| | | | | |
| | | | | |
| | | | | |
| | | | | | |
SSR will be triggered when host hits device access failure or
target wakeup indication timeout.
Change-Id: I2757112d4012b3af5028c62e95763e121a7cd1fd
CRs-Fixed: 2124587
|
| | | | | | |
| | | | | |
| | | | | |
| | | | | |
| | | | | |
| | | | | |
| | | | | |
| | | | | | |
Fix the issue that used variable maybe not initialized.
Make sure the variable has been set to correct value before use.
Change-Id: I05600cfc0cda58cafd09aed25d0c24fac703b6b0
CRs-Fixed: 2123051
|
| | | | | | |
| | | | | |
| | | | | |
| | | | | |
| | | | | |
| | | | | |
| | | | | | |
Add array range value check to avoid out of bound error.
Change-Id: I007568dd2805ad946033fd40a5520c9c6a0f6f35
CRs-Fixed: 2123036
|
| | |/ / / /
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | | |
Add null check before using pointer.
Avoid unexpected NULL pointer access panic issue.
Change-Id: I47da040b68b17702fd864f1deb8cda0f1fe0b3a2
CRs-Fixed: 2118070
|
| | | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | | |
Release 4.0.11.210B
Change-Id: Ib3a3d14c19ca4213a6badf68ddc0114bdd44283c
CRs-Fixed: 774533
|
| | | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | | |
SoftAP is changing channel in response to ECSA frame from STA
Do not let SoftAP switch channel in response to ECSA.
Change-Id: Ie9ddbf10c13f62205fdd60c512a560b35c6610ba
CRs-Fixed: 2121117
|
| | | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | | |
Release 4.0.11.210A
Change-Id: Ic3b784396dec17b6856f859cb198351fdbaccf01
CRs-Fixed: 774533
|
| | | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | | |
In wma_mgmt_rx_process, hdr->buf_len is read from message,
if hdr->buf_len is larger than data_len, it will over-read
from param_tlvs->bufp with corrupted message.
Change-Id: I7f06d81fd18960d0d6c57cdb4594680178022087
CRs-Fixed: 2106669
|
| | | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | | |
Release 4.0.11.210
Change-Id: I111fb25259d3e0bf538c45d5ffcf7748a94a5721
CRs-Fixed: 774533
|