summaryrefslogtreecommitdiff
Commit message (Collapse)AuthorAge
...
| * | | | qcacld-2.0: Fill station info txrate value for HT20 caseVisweswara Tanuku2017-10-10
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | After station is associatied in HT20, cfg80211_get_station triggers WARN_ON since stations txrate fields are not populated by driver Fill station info txrate value in HT20 case Change-Id: Icc2c5f318d7812696202705edda17c7352f66fba CRs-Fixed: 2121005
| * | | | Release 4.0.11.209Zsnandini2017-10-10
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Release 4.0.11.209Z Change-Id: Id2a4fc3143bc00bcfe4f7de917aec456a27def9d CRs-Fixed: 774533
| * | | | qcacld-2.0: Add sanity check to avoid overflow in WMI event dataVignesh Viswanathan2017-10-10
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | In WMA, data from firmware event buffer is used without sanity checks for upper limit. This might lead to a potential integer overflow further leading to buffer corruption. Add sanity check to avoid integer overflow. Change-Id: Id47e12015a4d46af24180b621b52ffcb17596c07 CRs-Fixed: 2113919
| * | | | Release 4.0.11.209Ysnandini2017-10-06
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Release 4.0.11.209Y Change-Id: If62147df77d1136f0e3da4ba900d1c27add489f3 CRs-Fixed: 774533
| * | | | qcacld-2.0: Increase default value of Probe after HB timer to 70msecsYeshwanth Sriram Guntuka2017-10-06
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | If Probe resp is received just after the Probe after HB timer expires then it results in disconnection. Fix is to increase the probe after hb timer default value to 70msecs. Change-Id: I0d4ac3e567def348c6b03b41c54579f332099de8 CRs-Fixed: 2122322
| * | | | Release 4.0.11.209Xsnandini2017-10-06
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Release 4.0.11.209X Change-Id: I53a75733ef6d3420a2a1ca99d5e462d1ec918148 CRs-Fixed: 774533
| * | | | qcacld-2.0: Fixing assertion in kernel during module unloadNakul Kachhwaha2017-10-06
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | scan_done notification is not sent to the cfg80211 layer from SME Scan callback while module unloading is in progress (CR 1059683). This causing assertion in kernel. To avoid assertion set scan_req->notified to true. Change-Id: Id41a3d50871b2f4585297e57b9bbe7f5ea4640d6 CRs-Fixed: 2112296
| * | | | qcacld-2.0: Fixing out-of-bound memory read while loading moduleNakul Kachhwaha2017-10-06
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | hdd_update_mac_config reads the contents of wlan_mac.bin by calling the function request_firmware. It then passes the resulting buffer to get_next_line which parses the buffer as a string. The problem is that get_next_line expects the string to be NULL terminated or have a END marker but the contents of the buffer is neither NULL terminated nor having END marker. Thus when get_next_line gets to the end of the buffer, it continues to read until it hits a NULL in memory or until it hits the memory exception. Same issue can exist in hdd_parse_config_ini function for qcom_cfg.ini file hence fixing there as well. Change-Id: I2c29db7a97399f807e6c2a428500d99000dc7a52 CRs-Fixed: 2115899
| * | | | qcacld-2.0: Fix SoftAP response for a Reassoc RequestVisweswara Tanuku2017-10-06
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | After association when SoftAP received a Reassoc Request, Assoc Response is sent instead of Reassoc Response. Ensure Reassoc Response is sent correctly by SoftAP. Change-Id: Ia4c9cc4419b85e3de531185f3196606b6a8b3629 CRs-Fixed: 2092394
| * | | | Release 4.0.11.209Wsnandini2017-10-03
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Release 4.0.11.209W Change-Id: I038b3cfb45a4ffc9b3925d36052e6a4692bfb9d6 CRs-Fixed: 774533
| * | | | qcacld-2.0: Add iwpriv command to set Dynamic BW in SAP modeNirav Shah2017-10-03
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Add iwpriv wlanx cwnenable command to enable/disable Dynamic BW in SAP mode Change-Id: I487595b5a24efcc311669025280350def866e091 CRs-Fixed: 2104386
| * | | | Release 4.0.11.209Vsnandini2017-09-28
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Release 4.0.11.209V Change-Id: Ifd97db0c25f13e6ebec7e4b945725502302a93ae CRs-Fixed: 774533
| * | | | qcacld-2.0: Add length check for array in sap_check_mcc_validJingxiang Ge2017-09-28
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Add length check to protect channels/session_cnt array. Change-Id: I98c67748f15b59395f59fb399e993ea686743565 CRs-Fixed: 2118405
| * | | | Release 4.0.11.209Usnandini2017-09-26
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Release 4.0.11.209U Change-Id: I4c6282571d6e6f47b34ff1c9cfba4b8a10269fc6 CRs-Fixed: 774533
| * | | | qcacld-2.0: Prevent buffer overflowPaul Zhang2017-09-26
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | In function WLANQCMBR_McProcessMsg, variable data_len is from message, which should not be trusted. Buffer overflow will happen if using it directory to copy data to utf_buf. Change-Id: I21479f510b95e6ced214f80d942db919837e8324 CRs-Fixed: 2113052
| * | | | Release 4.0.11.209Tsnandini2017-09-26
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Release 4.0.11.209T Change-Id: Ia1e78298eb690f5e2daaada05aad3672382f10e3 CRs-Fixed: 774533
| * | | | qcacld-2.0: Dump the txrx stat req if the queue is not emptytfyu2017-09-26
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Dump the txrx stat req if the queue is not empty when detatch the pdev. Change-Id: Ic38e01668efd28baf55acb04f448e236cc224c79 CRs-Fixed: 2113219
| * | | | Release 4.0.11.209Ssnandini2017-09-25
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Release 4.0.11.209S Change-Id: I1932b233e427690cd2234f131567a128130bb130 CRs-Fixed: 774533
| * | | | qcacld-2.0: Prevent memory leak in wlan_hdd_cfg80211_ocb_set_configMukul Sharma2017-09-25
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Currently, Host performs validation of NLA attribute QCA_WLAN_VENDOR_ATTR_OCB_SET_CONFIG_CHANNEL_ARRAY twice which leads to memory leak. As a part of fix, Check for SET_CONFIG_CHANNEL_ARRAY only once and free memory in error scenario. Change-Id: I5c90c937682417b8181fda7d499908b9425d4c6a CRs-Fixed: 2114111
| * | | | Release 4.0.11.209Rsnandini2017-09-25
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Release 4.0.11.209R Change-Id: Ia159ebf9236c92e91d0b8c0761c26a54fe479b2f CRs-Fixed: 774533
| * | | | qcacld-2.0: Dump target's registers after injecting crashZhang Qian2017-09-25
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Target crash injecting will return error when target is suspended. This will block dumping target registers. Postpone the return value check after dumping target's regiters. Change-Id: Ia661a79cff1b706112d738a0a5e67382dc915709 CRs-Fixed: 2021900
| * | | | Release 4.0.11.209Qsnandini2017-09-25
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Release 4.0.11.209Q Change-Id: If644617cdfff6e63400a602c457a115fb52593d1 CRs-Fixed: 774533
| * | | | qcacld-2.0: Fix memory leak for txrx_fw_stats cmdtfyu2017-09-25
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | The txrx_fw_stats cmd will allocate a req object before sending the cmd to the firmware, this memory is only freed when get response from firmware. The memory leak will appear if the firmware doesn't response in time before the driver unloading. This fix will add a pending queue to trace this req object in the pdev. when pdev is detaching, it will clean up this queue to avoid memory leak. Change-Id: I35f6216d35befbab978bba161252b305488bd34c CRs-Fixed: 2113219
| * | | | Release 4.0.11.209Psnandini2017-09-22
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Release 4.0.11.209P Change-Id: I26f0e963e47bb2c65be9b2efe66685640f1b3472 CRs-Fixed: 774533
| * | | | qcacld-2.0: Improve the SCC TCP TX KPIKe Huang2017-09-22
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | In the SCC mode, tx_flow_low_watermark will be changed to 0, and skb_orphan(skb) will not be called, which will make the TCP/IP sk->sk_wmem_alloc > limit easily, and then it make less data push to wlanhost, the TCP TX drop about half. So remove the condition "if(pAdapter->tx_flow_low_watermark > 0)". Change-Id: Ie26f8a56bde5841c5d0f2be2d309b0aca157ec50 CRs-Fixed: 2110519
| * | | | Release 4.0.11.209Osnandini2017-09-21
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Release 4.0.11.209O Change-Id: Ia596990b0d0d926cfc7a913607330fe1eb74eadb CRs-Fixed: 774533
| * | | | qcacld-2.0: Fix incorrect number ul_outstanding_cnt when do TX bundletfyu2017-09-21
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | The ul_outstanding_cnt is not increasing when do TX sending in the bundle. Which will cause the count is not correct, and will drop to the negative number. Change-Id: If7f06b376633b3384203cc49d8e8acafdd1b4853 CRs-Fixed: 2112977
| * | | | Release 4.0.11.209Nsnandini2017-09-20
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Release 4.0.11.209N Change-Id: I42f16e7a4b4a5a629a09394e8a0dfdfefbd13d48 CRs-Fixed: 774533
| * | | | qcacld-2.0: cld_txrx: Replace instances of unadorned %pJeff Johnson2017-09-20
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Replace instances of unadorned %p in CORE/CLD_TXRX. Change-Id: I7baa3ecc4f9964c47261dafa26116447fc7611b5 CRs-Fixed: 2111273
| * | | | qcacld-2.0: epping: Replace instances of unadorned %pJeff Johnson2017-09-20
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Replace instances of unadorned %p in CORE/EPPING. Change-Id: Ie10a744d443543046d32a52d7dafbc4aad6b20db CRs-Fixed: 2111273
| * | | | qcacld-2.0: hdd: Replace instances of unadorned %pJeff Johnson2017-09-20
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Replace instances of unadorned %p in CORE/HDD. Change-Id: I32b89aaf6a8b1ca3177e0c1cb5cec5fbc5f5294a CRs-Fixed: 2111273
| * | | | qcacld-2.0: mac: Replace instances of unadorned %pJeff Johnson2017-09-20
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Replace instances of unadorned %p in CORE/MAC. Change-Id: Id9b15d369dda7660f292e6c961b25d2e8270b141 CRs-Fixed: 2111273
| * | | | qcacld-2.0: sap: Replace instances of unadorned %pJeff Johnson2017-09-20
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Replace instances of unadorned %p in CORE/SAP. Change-Id: I37a803518430313d360d10e429469fa7bb471b78 CRs-Fixed: 2111273
| * | | | qcacld-2.0: services: Replace instances of unadorned %pJeff Johnson2017-09-20
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Replace instances of unadorned %p in CORE/SERVICES. Change-Id: I9fe08e236b1ef687196a0720b9cfed85d1a812a3 CRs-Fixed: 2111273
| * | | | qcacld-2.0: sme: Replace instances of unadorned %pJeff Johnson2017-09-20
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Replace instances of unadorned %p in CORE/SME. Change-Id: I8176263cf21ec7281dd5ebbaecbe1c8568465a37 CRs-Fixed: 2111273
| * | | | qcacld-2.0: svc: Replace instances of unadorned %pJeff Johnson2017-09-20
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Replace instances of unadorned %p in CORE/SVC. Change-Id: I46bf810d449fdbed352e0d8c5dbfae9a5fb14801 CRs-Fixed: 2111273
| * | | | qcacld-2.0: voss: Replace instances of unadorned %pJeff Johnson2017-09-20
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Replace instances of unadorned %p in CORE/VOSS. Change-Id: I4582c890aa0ad5a2caa5c8622c2d1f7e9fb11cbb CRs-Fixed: 2111273
| * | | | Release 4.0.11.209Msnandini2017-09-20
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Release 4.0.11.209M Change-Id: I6e2d5309446b18984a24c73d5a8ab8ae2ed715a6 CRs-Fixed: 774533
| * | | | qcacld-2.0: Add null check and variable initializationJingxiang Ge2017-09-20
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | rtap/cbModeChange/country_code_str have possibility to be used without initialization. In lim_check_if_vendor_oui_match, before read from ie, null check is necessary to avoid potential crash. Change-Id: If509bb506dc8df9022be1bcaa6211c9cbd69914a CRs-Fixed: 2113127
| * | | | Release 4.0.11.209Lsnandini2017-09-20
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Release 4.0.11.209L Change-Id: I433fbfe7aff8e11930e284ee7afcc466e1755925 CRs-Fixed: 774533
| * | | | qcacld-2.0: Trigger SSR once CE hw_index is wrongZhang Qian2017-09-20
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | After PCIe resume, host would get invalid hw_index. The invalid hw_index will introduce infinite loop. SSR will be triggered for such a case. Change-Id: I81349098366689b329ae081b849dce8b022ae55c CRs-Fixed: 2089240
| * | | | Release 4.0.11.209Ksnandini2017-09-20
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Release 4.0.11.209K Change-Id: I94ed437dc7d980d232b54c3e9a5a5613fe675d20 CRs-Fixed: 774533
| * | | | qcacld-2.0: Fix session_cnt overflow issueLiangwei Dong2017-09-20
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Add index overflow check for channels and session_cnt. Change-Id: I57d1f78f3c917b9bd76329995f3facc93fa62fe0 CRs-Fixed: 2104892
| * | | | Release 4.0.11.209Jsnandini2017-09-18
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Release 4.0.11.209J Change-Id: I90b00d88969577dfca99a879c8064b0335d7a72c CRs-Fixed: 774533
| * | | | qcacld-2.0: use qdf_do_div to do 64 bit divisionYu Wang2017-09-18
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Use qdf_do_div() for 64 bit division, because '/' can't be used for 64 bit division on arm32 platform. Change-Id: I047334565643e695ac343a5da06e030d8e37d7e4 CRs-Fixed: 2111578
| * | | | Release 4.0.11.209Isnandini2017-09-15
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Release 4.0.11.209I Change-Id: I9f8a51cf648ab07b8248cd34e2e2e7ee1637eecb CRs-Fixed: 774533
| * | | | qcacld-2.0: Fix out-of-bounds access in limProcessActionFrameNoSessionVignesh Viswanathan2017-09-15
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Currently in the function limProcessActionFrameNoSession, mem_cmp is done on the received frame pointer without validating the frame_len which could lead to out-of-bounds memory access if the frame_len is not matching the size of action_hdr. Add check to validate the frame_len with action_hdr size before doing mem_cmp for the p2p oui. Change-Id: I39329d1a9ef45614d3c617db11a7a7f5ec2aaaec CRs-Fixed: 2109967
| * | | | Release 4.0.11.209Hsnandini2017-09-14
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Release 4.0.11.209H Change-Id: I9b0b23d11a98ac93cbd051575efa928cb820017c CRs-Fixed: 774533
| * | | | qcacld-2.0: Fix firmware download support for PCIe on x86Subrat Dash2017-09-14
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | The PCIe interface uses cnss driver APIs for firmware download. These APIs are not available for x86 platform. Fix this by using host driver APIs. CRs-Fixed: 2099656 Change-Id: Iaf71ecbb9312b709b6bd5f4854dbf550c8dc0193
| * | | | Release 4.0.11.209Gsnandini2017-09-12
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Release 4.0.11.209G Change-Id: Icb6d589ff80b61fee2290179192a6b3699836709 CRs-Fixed: 774533
generated by cgit v1.2.3 (git 2.25.1) at 2025-12-31 23:20:43 +0000