| Commit message (Collapse) | Author | Age |
| ... | |
| | | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | | |
Currently when processing an EPNO vendor command the "num networks"
attribute is limit checked and if it exceeds a MAX value then it is
reset to that MAX value. This value is then used to calculate the size
of the buffer allocated to hold the internal representation of the
request. However later when the network attributes are parsed there is
no check to make sure the number of networks processed does not exceed
the (possibly modified) "num networks" used to allocate memory, and as
a result a buffer overflow can occur. Address this issue by aborting
the network parsing once "num networks" records have been parsed.
Change-Id: I6e5f321d23471d082bb000ad0422ea9baa76577a
CRs-Fixed: 1087807
|
| | | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | | |
Release 4.0.11.189
Change-Id: Ib95c773fcf85bb34fa2386cb0644e8db6039e48e
CRs-Fixed: 688141
|
| | | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | | |
If we fail to allocate receive packet bundle buffer
it will return no memory without freeing receive pkt queue.
Fix is to free the receive pkt queue before returning from message handler.
Change-Id: I4bf2aeb7bc85cc68cfa1314e6dbf5057665ba7ce
CRs-Fixed: 1079623
|
| | | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | | |
When monitor mode support is added, the initial setting of channel width
went from unconditional to conditional which raises the flag.
To fix this, write a new API for monitor mode to handle channel bonding
and to avoid channel width condition.
Moreover, The intent of original function hdd_select_cbmode was different.
Passing an argument expecting it to be filled and returned inside function.
Now in monitor mode, passing the argument as reference and as value and
expect the function to use it and not fill it and return.
Change-Id: I17f7638e0f4b28479d0e0c53a88a7f648f5bc4ba
CRs-Fixed: 1065468
|
| | | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | | |
When wlan pre-start code path fails due to firmware ready event
can't make it to host dirver quickly enough, there will be no
chance for host driver to destroy the firmware time
synchronization timer
Change-Id: I57489a4b21c3756c6d619ead9591f0409a35391d
CRs-Fixed: 1084085
|
| | | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | | |
Currently if acs configs channel width as 40/80MHZ, it may select
invalid channel as its second channel.
When doing sapSelectChannel, if acs configs channel width as
40/80MHZ, every candidate channel and its adjacent channel should
be checked whether it can satisfy 40/80MHZ or not. Mark the weight
of the channel that can't satisfy 40/80MHZ as max value
in sapSortChlWeightAll, so it will not be selected.
Change-Id: I69abbb752be8d0fae2644a9000156735048d6d16
CRs-Fixed: 1085469
|
| | | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | | |
Release 4.0.11.188
Change-Id: Iea33e7daf4dd4280176331078ee45b5eb605a305
CRs-Fixed: 688141
|
| | | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | | |
Currently even for non local ARP requests wake lock is getting
acquired which is preventing the system suspend which is a power
penalty. Do not acquire wake lock for the non local ARP requests.
Change-Id: Iec8f5870a03ed48ae08f20363c473cef8d5c19dc
CRs-Fixed: 1088974
|
| | | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | | |
By setting the corresponding parameters: reorder timeout and window size
to FW, the host will deliver information about aggregation of the packets
on RX to upper layer.
Change-Id: I404d56d8d9ca3e90f8d1dee28abd80d784924901
CRs-fixed: 1078111
|
| | | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | | |
Release 4.0.11.187
Change-Id: I46e21d3851df6eed06df766c0367c8d61b56c045
CRs-Fixed: 688141
|
| | | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | | |
MAC layer counters such as per channel signal quality,
per peer TX/RX statistics, are monitored by FW.
FW reports these counters periodically as host setting.
This change:
- Add one parameter to enable/disable mac counter
- Convert FW indication to NL80211 attributes and send the
same to user layer
- Convert user layer's NL80211 attributes to parameters for
link layer monitor and send the same to WMA
Change-Id: I17a81fcec96076e14ff9f33d0aeb0983a25de912
CRs-fixed: 1071059
|
| | | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | | |
Add both static and dynamic 5/10 MHz channel width for STA and SAP mode.
* Static 5/10 MHz
STA/SAP brings up in 5/10 MHz channel width
* Dynamic 5/10 MHz
STA/SAP brings up in 20 MHz, and then switches to 5/10 MHz after
association or WPA authenication. Once STA/SAP are disconnected, they
will go back to 20 MHz channel width.
Change-Id: Id24b3a705c338c9055b82339576b024f22d48fa4
CRs-Fixed: 1063238
|
| | | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | | |
Add support to include only selective IEs in probe requests in
order to improve user's privacy.
Change-Id: Ib874af7ec2f5453282ffe0e8fc2e50934460b745
CRs-Fixed: 1086582
|
| | | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | | |
Randomize probe request's source address and sequence number to
improve user's privacy.
Change-Id: Ic367ce4578e65faf49e8092f0f8cce057eead728
CRs-Fixed: 1085995
|
| | | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | | |
The ol_tx_desc_free might access the invalid content of vdev referred by tx
desc, since this vdev might be detached in another thread asynchronous.
Go through tx desc pool to set corresponding tx desc's vdev to NULL
when detach this vdev, and add vdev checking in the ol_tx_desc_free to
avoid crash.
Change-Id: I3afa63659e047bbbf008440335fb71c8295ca353
CRs-Fixed: 1087690
|
| | | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | | |
Assuming gEnableModulatedDTIM=9 and gMaxLIModulatedDTIM=9,
when AP's beacon interval is 100ms, the DUT's listen
interval is 900ms, it is OK; But if AP's beacon interval
is 200ms or more, the DUT's listen interval is 1800ms
or even more. This causes large data latency.
Change-Id: I622ae9ab21aaf23c585ca67efa8452a705f8e3f0
CRs-Fixed: 1087619
|
| | | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | | |
Currently when processing an EXTSCAN vendor command the "num buckets"
attribute is limit checked and if it exceeds a MAX value then a
warning message is issued. But beyond that the "num buckets" attribute
is not used. Instead when the buckets are actually parsed the number
of buckets is calculated dynamically based upon the number of
attributes present in the request. Unfortunately when the bucket
attributes are parsed there is no check to make sure the number of
buckets processed does not exceed the MAX value, and as a result a
buffer overflow can occur. Address this issue by aborting the bucket
parsing once the expected number of records have been parsed.
Change-Id: Ic260dd65dc99118afbb8042d102acb5b26d1e123
CRs-Fixed: 1087797
|
| | | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | | |
Currently there is a single wlan_hdd_extscan_config_policy which
contains entries for both EXTSCAN and PNO attributes. However the
EXTSCAN and PNO attributes have separate and overlapping
assignments. Therefore one policy cannot be used by both types of
commands. In addition, when parsing nested PNO attributes the policy
is not used, and hence no checking is performed on the nested
data. This can result in a buffer overflow.
To address these issues introduce a new policy for PNO vendor
commands, and use that policy both when parsing the initial command
and when parsing the nested attributes. Furthermore add a zero length
SSID check to prevent underflow.
Change-Id: I92c8fc7ca1c44971502ea68b5486a2b3ae941cc5
CRs-Fixed: 1087209
|
| | | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | | |
Change to fix the compilation error.
Change-Id: Ib6f1b6d6666994f2f288bc764cfa5373070dc4fa
CRs-Fixed: 1088379
|
| | | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | | |
Propagation from prima to qcacld-2.0.
Remove frequently seen unnecessary error logs to warning and info.
Change-Id: Idbeed4f66cf89e161db0674a261e701c77ed59c8
CRs-Fixed: 971507
|
| | | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | | |
Release 4.0.11.186
Change-Id: Ia265ec5f61256142a004df5afa0edeb84d457976
CRs-Fixed: 688141
|
| | | | | |
| | | | |
| | | | |
| | | | |
| | | | | |
Change-Id: If81ab68670b2b4211f38d8471e9205ea28c887cf
CRs-Fixed: 1063238
|
| | | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | | |
In Target Suspend state don't allow FW Hang command. This would result
in target asserts.
Change-Id: Ib7ddc21467c7322a7e6873a66f2a6f135494dc37
CRs-Fixed: 1085342
|
| | | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | | |
After calling ol_tx_msdu_complete, it will reset the tx desc's pakcet
type to ol_tx_frm_freed state. So there might be a race condition
if there is another thread try to allocate this tx description between
these two operations.
The ol_tx_msdu_complete doesn't always free the tx_desc according to the
tx desc type. So need to reset the tx desc's packet type only when the
ol_tx_msdu_complete hasn't freed it.
Change-Id: I0d96ef60d10048c524e93209469e8cdf20ce22c6
CRs-Fixed: 1087688
|
| | | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | | |
Regular frames in HL case are freed after downloading. There will
be no TX completion message indicated by FW. For some using case,
user layer wants more information about TX failure. There will be
redundant completion message to HTT layer. TX credit update and
MSDU buffer release should not base on such a message.
But some special frames, such as TDLS data frames, need TX completion
message.
To resolve this conflict, new tx competion status FAIL_NOTIFY is added.
Once such an indication is received, It will be dicarded by HTT layer
after failure message is sent to CFG_80211.
Change-Id: I6c5bf85de1b7e7ad0724f400259a978f6882a3ae
CRs-fixed: 1083375
|
| | | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | | |
In hdd_driver_command API user space pointer priv_data.buf
dereferenced without sanitization in GETOPPORTUNISTICRSSIDIFF
and GETROAMRESCANRSSIDIFF cases.
Use kernel space pointer command instead of priv_data.buf
CRs-Fixed: 1074779
Change-Id: Ifddb01bdee501bf467d62b81a987fb9d29b44691
|
| | | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | | |
Release 4.0.11.185
Change-Id: I7ba239498a1299c8a0ad90969cb931b4628dcd05
CRs-Fixed: 688141
|
| | | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | | |
Add support for 5Ghz network RSSI boost/penalty preference
based on ini values.
Change-Id: Ia3ae5dcc35b9a85fde5a609f8f27ff8b4bc35cec
CRs-fixed: 1085554
|
| | | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | | |
Handling of ROAM_LOSTLINK_DETECTED should be only for deauth and
disassoc indication. This handling should not interface with fall
through of ROAM_LOSTLINK.
Fix this by reordering the case statements.
Change-Id: I11a6427d0c35cb6247e57950a7e35e92a778978e
CRs-Fixed: 1086046
|
| | | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | | |
Parameter channel is not a mandatory argument for NDP requerst.
1) Do not fail NDP request if channel parameter is not present.
2) Add channel config parameter in NDP_Initiator_Request, which
indicates if channel provided is optional, force or not provided
at all.
Change-Id: I4d8dc4b3104cfe36c4bb1fdd0d44da5c6406d6b7
CRs-Fixed: 1079900
|
| | | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | | |
WMI changes for mac randomization and whitelisting IEs : FR 37569
WMI changes for mac randomization and whitelisting IEs : FR 37569
Change-Id: I5ac8ada7efd34a46d9dc479188678584ec736329
CRs-Fixed: 865207
|
| | | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | | |
Release 4.0.11.184
Change-Id: If4e5ba7f9b350a4b19d8556b5cb683152b280d43
CRs-Fixed: 688141
|
| | | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | | |
IPA disconnect events(WLAN_AP_DISCONNECT/WLAN_STA_DISCONNECT)
are not sent to IPA driver in case of SSR. This is resulting
in mismatch between IPA driver and HOST driver, and headers in
IPA can't be freed, which causes memory overflow after multiple
times SSR.
Change-Id: I9c84cc84d943d6e3c6604db7b859127a7af5a654
CRs-Fixed: 1069083
|
| | | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | | |
In the current code, when STA receives CSA IE then host look and
operate on extended channel switch element eventhough our own
channel-bonding state is not enabled. This causes setting up of
secondary subband and state in new channel during CSA eventhough
the secondary channel offset is set to zero in CSA beacon.
Fix is to set the Secondary Channel Offset if our own channel
bonding state is enabled.
Change-Id: I82ca9737f49937176801bc4cbbdd3e2fb77d4749
CRs-Fixed: 1080260
|
| | | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | | |
Add qca_wlan_vendor_config attr to config antenna diversity.
Add vendor subcmd QCA_NL80211_VENDOR_SUBCMD_GET_CHAIN_RSSI
to get chain rssi value.
Change-Id: I75c4c8016b15772b0c52be91e446f69580475496
CRs-fixed: 1071075
|
| | | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | | |
Add Support to configure multiple 'scan plans' for scheduled scan.
Each 'scan plan' defines the number of scan cycles and the interval
between scans. The scan plans are executed in the order they were
configured. The last scan plan will always run infinitely and thus
defines only the interval between scans
The maximum number of scan plans supported by the device and the
maximum number of iterations in a single scan plan are advertised
to userspace so it can configure the scan plans appropriately.
Change-Id: I9afc1f97ebb55caa5121f3623d7bbeb6ba63df7b
CRs-Fixed: 1083591
|
| | | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | | |
Inform the bss using the new API cfg80211_inform_bss_frame_data() which
also has the ability to inform the timestamp when the frame has
been received.
If the support is not present in the kernel fallback to the legacy
inform bss.
Change-Id: Iaa512248a5e56d77cff39da562e0c9ee4eaeeefd
CRs-Fixed: 1082423
|
| | | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | | |
Release 4.0.11.183
Change-Id: If05f5f6eaeff7958a041dfa8f3be6c146eeced7f
CRs-Fixed: 688141
|
| | | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | | |
WMI changes for PPET
Change-Id: I8ccce0dc9dafed70be42e62c5808db349ce88da1
CRs-Fixed: 865207
|
| | | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | | |
add radio_id in wmi_tx_power_level_stats_evt_fixed_param
Change-Id: I99482ce637f964367d529aaa39676ccfb036903c
CRs-Fixed: 865207
|
| | | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | | |
NAN NDP channel config type and NAN20 responder policy defs
Change-Id: I0a2415ad0651ea93c3907e0a7fa2f59d2cb7ed05
CRs-Fixed: 865207
|
| | | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | | |
WMI defs for DFS offload
Change-Id: Ief6ea8771ec130a94f19c7296930534364bdd2fb
CRs-Fixed: 865207
|
| | | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | | |
wma_get_client_count is generic API to get the no
of connected client. Move this out of D0WOW feature flag.
Change-Id: I45d62a7088b3bec80bcad6795aa961f6fd8cb0b7
CRs-Fixed: 1067155
|
| | | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | | |
Release 4.0.11.182
Change-Id: If0ed562abca2f602e3b90270e2940851d7e9dbd7
CRs-Fixed: 688141
|
| | | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | | |
Add WMI_COEX_CONFIG_TX_POWER def.
Change-Id: I99f5ec28387ba97d1c6e73a2407a0f2984e67925
CRs-Fixed: 865207
|
| | | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | | |
WMI message to allow Specific Absorbtion Rate / tx power
limits to be set per band, chain, or modulation class.
Change-Id: Iece786a4e731462fd282e3eb3107541338a3af30
CRs-Fixed: 865207
|
| | | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | | |
Disabling Tasklet in D0-wow will results in crashes, as the interrupt
raised in not processed as the APPS resume is not complete.
If there are packets in the CE ring during this phase, the SW is not
reaping those packets and results in crashes.
Fix is by skipping tasklet enable/disable for D0-WoW to ensure we
process the interrupts even during resume sequence.
D0-WoW condition is checked with any connected client on SAP
interface.
Change-Id: I23992ad7b4e3df3ff00329971291c3917201ac99
CRs-Fixed: 1067155
|
| | | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | | |
When MAC counter offload is enabled, FW will indicate following
statistics periodically or as host's settings.
- RSSI and SNR per antenna/RF chain
- RSSI, SNR and MCS code (Tx and Rx) per peer
- 11h, 11k radio measurements on current channel, CSMA/CA parameters,
channel interference estimations
- Tx/Rx statistics(data rate, aggregation size, etc)
New WMI interface is introduced by this change:
- set threshold using WMI_PDEV_SET_STATS_THRESHOLD_CMDID
- process WMI_REPORT_STATS_EVENTID and send all mac counters
to HDD_CFG80211
Change-Id: I6d679bbf331baf187cccc882216eecc239bf298c
CRs-Fixed: 1080673
|
| | | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | | |
Currently ext scan results are not updated to kernel. Update them
to kernel which can help kernel to have same scan results as
framework.
Change-Id: I3f1e7e9a67bfb6a984487b10020ae5a840fb6f78
CRs-Fixed: 1085001
|
| | | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | | |
The tCsrRoamProfile memory is not initialized to 0 properly. For the
supported_rates field, it contains a rates array with max size 12
and an integer field numRates which is the actual length of the rates
array. If numRates is not initialized properly and value is unexpected.
it may cause memory access violation error.
CRs-Fixed: 1084846
Change-Id: Ic5b1a13356e835a1186c53768a1d8ab416c9365c
|