summaryrefslogtreecommitdiff
Commit message (Collapse)AuthorAge
...
| | * | | | | | | qcacld-2.0: CL 6460094 - Update fw common interface filesZhang Qian2019-04-11
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | WMI: add WMI_PEER_PARAM_NEED_[PTK_4_WAY,GTK_2_WAY] flag defs Change-Id: I47c5d2c5d598c84feda29b8d0aef4e0c4fa00c53 CRs-fixed: 2433619
| | * | | | | | | qcacld-2.0: CL 6443430 - Update fw common interface filesZhang Qian2019-04-11
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | WMI: add last_event flag to stats_event_fixed_param Change-Id: I3ade23fc7fda757d30484747ba60314d41fc2245 CRs-fixed: 2433619
| | * | | | | | | qcacld-2.0: CL 6438294 - Update fw common interface filesZhang Qian2019-04-11
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | WMI: add more WMi_HECAP_xxx macros (D2, D3 versions) Change-Id: Ia495cd5423f02539ab16af68f1e6573de33c2d63 CRs-Fixed: 2433619
| | * | | | | | | qcacld-2.0: CL 6432735 - Update fw common interface filesZhang Qian2019-04-11
| | | |/ / / / / | | |/| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | WMI: change wmi_wlm_link_stats within WLM_STATS_EVENT to be opaque Change-Id: I5b07137944d3b18c801cb308e3be6c68891fbe19 CRs-Fixed: 2433619
| | * | | | | | qcacld-2.0: CL 6418415 - Update fw common interface filesZhang Qian2019-04-11
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Add WMI_PDEV_PARAM_NAV_OVERRIDE_CONFIG def. Change-Id: Ic6b16406057b83bd27dba9288589ff3049cc95fc CRs-fixed: 2433619
| | * | | | | | qcacld-2.0: CL 6413865 - Update fw common interface filesZhang Qian2019-04-11
| | |/ / / / / | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | WMI: add PEER_TID_CONFIG_RATE_CONTROL DEFAULT_LOWEST_RATE, UPPER_CAP defs Change-Id: Id85ca62c2b129f2c509aebd9115f9bcd1d4e548d CRs-fixed: 2433619
| | * | | | | Merge "qcacld-2.0: CSA optimization for bandwidth switch" into ↵CNSS_WLAN Service2019-04-10
| | |\ \ \ \ \ | | | | | | | | | | | | | | | | | | | | | | | | wlan-cld2.driver.lnx.1.0
| | | * | | | | qcacld-2.0: CSA optimization for bandwidth switchgaolez2019-04-10
| | | |/ / / / | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | In the current implentmention, we can change the bandwidth and channel in one CSA process. This change optimise the CSA process for 5/10/20M bandwidth switch, so in one CSA can change both channel and bandwidth. Change-Id: I5f54d8a21ede9d45cfc79b28f5d8e8568221cfb0
| | * | | | | Merge "qcacld-2.0: Possible OOB access in wlan_hdd_cfg80211_start_bss()" ↵CNSS_WLAN Service2019-04-10
| | |\ \ \ \ \ | | | | | | | | | | | | | | | | | | | | | | | | into wlan-cld2.driver.lnx.1.0
| | | * | | | | qcacld-2.0: Possible OOB access in wlan_hdd_cfg80211_start_bss()Min Liu2019-04-02
| | | |/ / / / | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Propagation from qcacld-3.0 to qcacld-2.0 Currently in function wlan_hdd_cfg80211_start_bss(), copying supported rates and extended rates from information element pointer without checking for array bounds which may cause OOB access. To address this issue, add length checks before copying supported rates and extended rates. Change-Id: Ic6363e97bb3498a5dd23bc5e5f9b9f3ce093509d CRs-Fixed: 2427503
| | * | | | | Merge "qcacld-2.0: Fix incorrect challenge text length" into ↵CNSS_WLAN Service2019-04-10
| | |\ \ \ \ \ | | | | | | | | | | | | | | | | | | | | | | | | wlan-cld2.driver.lnx.1.0
| | | * | | | | qcacld-2.0: Fix incorrect challenge text lengthWill Huang2019-04-02
| | | |/ / / / | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | While copy the challenge text, used length of a pointer, which is much less than the actual buffer length SIR_MAC_SAP_AUTH_CHALLENGE_LENGTH. Change-Id: I52606433a4693df432193e6d32c1d7c8e99c7353 CRs-Fixed: 2427689
| | * / / / / qcacld-2.0: Fix potential OOB read when indicate mgmt frameWu Gao2019-04-05
| | |/ / / / | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | In function __hdd_indicate_mgmt_frame, it doesn't check mgmt frame length and access pointer to frame, which cause OOB read potentially. So, check frame length before access pointer to frame. Change-Id: Id2bd4276838f1eae49e8a24e8ab3361a69321a69 CRs-Fixed: 2429210
| | * | | | qcacld-2.0: Fix wild pointer issue for AC tx queue optimizationgaolez2019-03-29
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | The WDA_SET_AC_TXQ_OPTIMIZE msg buffer freed without alloc, this will cause wild pointer. In this change, do not use pointer to pass the AC tx queue optimization parameter, and remove the invalid buffer free. Change-Id: I232a854b24f21d7fd2fdebb9351f21f64d39bc8d CRs-Fixed: 2425153
| | * | | | Merge "qcacld-2.0: Dynamic Power Control when do Suspend/Resume" into ↵CNSS_WLAN Service2019-03-27
| | |\ \ \ \ | | | | | | | | | | | | | | | | | | | | | wlan-cld2.driver.lnx.1.0
| | | * | | | qcacld-2.0: Dynamic Power Control when do Suspend/ResumeKe Huang2019-03-27
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | convert the sleep_mode type from int in wlan driver to enum cnss_sleep_power_mode in cnss. Change-Id: Ie1b8aca355a4b0a8c128341789d134e295b3e7e0 CRs-fixed: 2373073
| | * | | | | Merge "qcacld-2.0: Add a state for SA" into wlan-cld2.driver.lnx.1.0CNSS_WLAN Service2019-03-27
| | |\ \ \ \ \
| | | * | | | | qcacld-2.0: Add a state for SAZhang Qian2019-03-27
| | | |/ / / / | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Currently, SA must be enabled before SAP is started. Otherwise, no stats will be indicated. This change removes this limitation. SA could be enabled before/after starting SAP. CRs-Fixed: 2407824 Change-Id: Iab3338bef7e7fe3018c8cfe1c93fa3be0e3c8587
| | * / / / / qcacld-2.0: Add smart antenna matrixZhang Qian2019-03-27
| | |/ / / / | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Propagate FW changes for smart antenna matrix. 1. CL 6707989 add rx antenna mask to htt_rx_ind_hl_rx_desc_t 2. CL 6795655 Add HTT_RX_IND_HL_SA_ANT_MATRIX_OFFSET macro def Change-Id: I7a4dcdef668c09c2976d8dbab9bbb4e73d001f2c CRs-Fixed: 2423985
| | * | | | Merge "qcacld-2.0: Set tsf host gpio as invalid by default" into ↵CNSS_WLAN Service2019-03-22
| | |\ \ \ \ | | | | | | | | | | | | | | | | | | | | | wlan-cld2.driver.lnx.1.0
| | | * | | | qcacld-2.0: Set tsf host gpio as invalid by defaultbings2019-03-22
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Some platform may enable WLAN_FEATURE_TSF_PLUS even it does not need TSF feature. If it doesn't configure valid tsf host gpio pin, it will cause unforeseen mistake to register GPIO interrupt at this time. Change-Id: Ia52546012bd0de03f3d634307afd56df5975a6a4 CRs-Fixed: 2421308
| | * | | | | Merge "qcacld-2.0: Remove the restriction of neighbor report number" into ↵CNSS_WLAN Service2019-03-22
| | |\ \ \ \ \ | | | | | | | | | | | | | | | | | | | | | | | | wlan-cld2.driver.lnx.1.0
| | | * | | | | qcacld-2.0: Remove the restriction of neighbor report numberGuisen Yang2019-03-14
| | | |/ / / / | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | The neighbor report frames will not be processed properly if the neighbor report number is larger than 1. Remove the restriction of the neighbor report number. Change-Id: Ic44db396d6fc0b8e3ee17c96bf6654e9f90e9337 CRs-Fixed: 2416001
| | * | | | | Merge "qcacld-2.0: Fix compile error" into wlan-cld2.driver.lnx.1.0CNSS_WLAN Service2019-03-22
| | |\ \ \ \ \
| | | * | | | | qcacld-2.0: Fix compile errortinlin2019-03-22
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | <asm/uaccess.h> compiles error under kernel v4.14. Use <linux/uaccess.h> instead of <asm/uaccess.h>. Change-Id: I4eed98804a4eabc5ce3bb2ed370afc16c732f9a2 CRs-Fixed: 2421185
| | * | | | | | Merge "qcacld-2.0: Do unmap dma only for mapped and non ipa dma" into ↵CNSS_WLAN Service2019-03-21
| | |\ \ \ \ \ \ | | | | | | | | | | | | | | | | | | | | | | | | | | | wlan-cld2.driver.lnx.1.0
| | | * | | | | | qcacld-2.0: Do unmap dma only for mapped and non ipa dmabings2019-03-22
| | | | |/ / / / | | | |/| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Do unmap only for mapped and non ipa in ol_txrx_vdev_flush, otherwise wlan driver may unmap non mapped buffer. Change-Id: If3d6307068c63233aadbd05b6c3804d9e5401437 CRs-Fixed: 2418855
| | * | | | | | Merge "qcacld-2.0: Fix possible buffer overflow in ↵CNSS_WLAN Service2019-03-20
| | |\ \ \ \ \ \ | | | | | | | | | | | | | | | | | | | | | | | | | | | sirConvertAddtsRsp2Struct" into wlan-cld2.driver.lnx.1.0
| | | * | | | | | qcacld-2.0: Fix possible buffer overflow in sirConvertAddtsRsp2Structlifeng2019-03-20
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | propagation from qcacld-3.0 to qcacld-2.0 In the function sirConvertAddtsRsp2Struct, iterator j is assigned with the value pAddTs->numTclas + addts.num_WMMTCLAS. The j value is used as the index to the array pAddTs->tclasInfo. Maximum limit on pAddTs->tclasInfo entries is 2. So when the value of j exceeds 2, then a possible buffer overflow could occur. Validate the value of j against SIR_MAC_TCLASIE_MAXNUM(2). Change-Id: Icc723380ed4ccd51c729194d509e288be0e0712c CRs-Fixed: 2419829
| | * | | | | | | Merge "qcacld-2.0: fix the null pointer access issue when shutdown" into ↵CNSS_WLAN Service2019-03-20
| | |\ \ \ \ \ \ \ | | | |/ / / / / / | | |/| | | | | | | | | | | | | | | wlan-cld2.driver.lnx.1.0
| | | * | | | | | qcacld-2.0: fix the null pointer access issue when shutdownKe Huang2019-03-20
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | This issue is caused by the NULL pointer access when do wlan driver shutdown and do the process of wlan connecting operation in driver at the same time. In this case, the driver is processing connecting and there is a timer started, and if it expired before this timer destory when do PE stop, it will wakeup the MC thread and continue to process it, but if some related resource freed during the shutdown before the MC thread stop, this NULL pointer access will happen. So skip to process messages in MC thread if doing shutdown and this issue will not happen in this case. Change-Id: Ifea29a43da8e7988a418b8d72ff44a39834d7522 CRs-fixed: 2418776
| | * | | | | | | qcacld-2.0: Fix NULL point may be dereferencedYu Ouyang2019-03-19
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Pointer 'pesession' returned from call to function 'peFindSessionByBssid' at line 2315 may be NULL and will be dereferenced at line 2319. Check pointer 'pesession' before reference. Change-Id: Ie625b6d85587db17b7e2d4e1464f6197825dc68b CRs-Fixed: 2417930
| | * | | | | | | Merge "qcacld-2.0: Add a host interest flag to tell target do reset resume" ↵CNSS_WLAN Service2019-03-19
| | |\ \ \ \ \ \ \ | | | |_|_|/ / / / | | |/| | | | | | | | | | | | | | | into wlan-cld2.driver.lnx.1.0
| | | * | | | | | qcacld-2.0: Add a host interest flag to tell target do reset resumeWill Huang2019-03-20
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Host is requested to tell target whether USB reset resume is enabled when suspend, but it is not possible to tell it when suspend, so we have to add a host interest flag to indicate it when loading fw by static configure USB_RESET_RESUME_PERSISTENCE and HIF_USB. Also fix a compile issue if enable USB_RESET_RESUME_PERSISTENCE. Change-Id: I6cc0c9fc9c9d942a2030bfafa4bba4ffc30cab59 CRs-Fixed: 2396906
| | * | | | | | | Merge "qcacld-2.0: Purge neighbor report cache if unsolicited" into ↵CNSS_WLAN Service2019-03-18
| | |\ \ \ \ \ \ \ | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | wlan-cld2.driver.lnx.1.0
| | | * | | | | | | qcacld-2.0: Purge neighbor report cache if unsolicitedWill Huang2019-03-18
| | | | |_|/ / / / | | | |/| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | If AP sends unsolicited neighbor reports to station proactively, the cached neighbor report list will grow longer and longer. Fix it by purging the cache on reception of unsolicited neighbor report. Change-Id: I2458607041caeb84cb553aa1b9fc6f4029a5cf1c CRs-Fixed: 2416146
| | * / | | | | | qcacld-2.0: Do sanity check about usb interface data in suspendlifeng2019-03-14
| | |/ / / / / / | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Do sanity check about usb interface data in suspend in case null pointer derefrence. Change-Id: Ia3539baf0a6ade3454c3c8d4ca4618c40214ca91 CRs-Fixed: 2416669
| | * | | | | | Merge "qcacld-2.0: Memory leak fix in athdiagpfs" into wlan-cld2.driver.lnx.1.0CNSS_WLAN Service2019-03-13
| | |\ \ \ \ \ \
| | | * | | | | | qcacld-2.0: Memory leak fix in athdiagpfsdonglian2019-03-14
| | | | |/ / / / | | | |/| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | save_buffer is not freed if HIFDiagReadMem/HIFDiagReadAccess is failed. Change-Id: Ieb6955c3783dfe508d0bfec1e00dcef21f1b5721 CRs-Fixed: 2409594
| | * | | | | | Merge "qcacld-2.0: Dynamic Power Control when do Suspend/Resume" into ↵CNSS_WLAN Service2019-03-13
| | |\ \ \ \ \ \ | | | | | | | | | | | | | | | | | | | | | | | | | | | wlan-cld2.driver.lnx.1.0
| | | * | | | | | qcacld-2.0: Dynamic Power Control when do Suspend/ResumeKe Huang2019-03-13
| | | |/ / / / / | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | 1. Add one new solution to turn off/on wlan_vdd 3.3v power while do suspend/resume. During suspend, it will stop all active adapter and stop the wlanhost thread; During resume, and power on wlan_vdd again while do resume, and then reinit wlanhost driver to download firmware and start all adapter. 2. Export gChangeSleepPowerMode to INI file for user. 3. As gChangeSleepPowerMode=0 means do not change power mode when do suspend/resume, if gChangeSleepPowerMode=1, the wifi driver will notify cnss module to turn off/on WLAN_EN if gChangeSleepPowerMode=2, the wifi driver will notify cnss module to turn off/on both WLAN_VDD and WLAN_EN. Change-Id: Iea4b284ca8c5ed1407ea4669c3c65fd7777ba09c CRs-fixed: 2373073
| | * | | | | | Merge "qcacld-2.0: Add smart antenna module" into wlan-cld2.driver.lnx.1.0CNSS_WLAN Service2019-03-13
| | |\ \ \ \ \ \
| | | * | | | | | qcacld-2.0: Add smart antenna moduleZhang Qian2019-03-13
| | | |/ / / / / | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Add smart antenna core module. Change-Id: I323f6512ab6abdff9b0ab9f3d624efe2d1135870 CRs-Fixed: 2407824
| | * | | | | | Merge "qcacld-2.0: Fix OOB read in hdd_populate_wifi_signal_info" into ↵CNSS_WLAN Service2019-03-13
| | |\ \ \ \ \ \ | | | | | | | | | | | | | | | | | | | | | | | | | | | wlan-cld2.driver.lnx.1.0
| | | * | | | | | qcacld-2.0: Fix OOB read in hdd_populate_wifi_signal_infoMin Liu2019-03-13
| | | |/ / / / / | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Propagation from qcacld-3.0 to qcacld-2.0 While handling ll stats information there is a possibility of OOB read in hdd_populate_wifi_signal_info api as FW is giving num_chan info as uint_32 and host has saved into int_32 type variable which may lead to an extremely large positive number which is getting used as index of for loop to populate signal info in skp which may lead to OOB read. Change-Id: I032eb465db30ee9e3a7ba0c4f017ed781264c47d CRs-Fixed: 2415004
| | * / / / / / qcacld-2.0: Do sanity check about pci dirver datalifeng2019-03-12
| | |/ / / / / | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Try to suspend during driver exit, it may hit null pointer dereference once the pci driver data is freed in the hif_pci_remove(). The fix is to do sanity check about pci driver data in the __hif_pci_suspend(). Change-Id: I90d036e74797de3f58e0af46c707aa53ac507e8d CRs-Fixed: 2412137
| | * | | | | Merge changes Ifb5b11c3,I20eb7aa7,I70a52030 into wlan-cld2.driver.lnx.1.0CNSS_WLAN Service2019-03-11
| | |\ \ \ \ \ | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | * changes: qcacld-2.0: Add OWE IEs qcacld-2.0: Remove the ssidlen check in get_sta_stats qcacld-2.0: Enable SAE by default
| | | * | | | | qcacld-2.0: Add OWE IEsbings2019-02-27
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | propagation from qcacld-3.0 to qcacld-2.0 Add support for Opportunistic Wireless Encryption IEs Change-Id: Ifb5b11c3f775654e31248ea5b91da0df6aebe6a9 CRs-Fixed: 2406190
| | | * | | | | qcacld-2.0: Remove the ssidlen check in get_sta_statsbings2019-02-27
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | propagation from qcacld-3.0 to qcacld-2.0 Per protocol definition, the ssid length in OWE bss’s IE is zero when in OWE transition mode. And the api wlan_hdd_get_sta_stats thinks it is invalid ssidlen and returns directly. It causes the uplayer can not get stats info. Change-Id: I20eb7aa79ce25a4b66d9be093510eb414d4fca42 CRs-Fixed: 2406181
| | | * | | | | qcacld-2.0: Enable SAE by defaultbings2019-02-27
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | propagation from qcacld-3.0 to qcacld-2.0 Enable SAE by default. Change-Id: I70a52030984f63b462cdf89c449a983f5229185b CRs-Fixed: 2406176
generated by cgit v1.2.3 (git 2.25.1) at 2026-01-06 14:01:49 +0000