| Commit message (Collapse) | Author | Age |
| ... | |
| | | |\ \ \ \ \ \ \
| | | | | | | | | |
| | | | | | | | | |
| | | | | | | | | | |
wlan-cld2.driver.lnx.1.0
|
| | | | |/ / / / / /
| | | | | | | | |
| | | | | | | | |
| | | | | | | | |
| | | | | | | | |
| | | | | | | | |
| | | | | | | | |
| | | | | | | | |
| | | | | | | | |
| | | | | | | | | |
Always Call adf_os_spin_lock for spin_lock.
For SMP, call adf_os_spin_lock_bh for all adf_os_spin_lock.
adf_os_spin_lock_bh will disable software irq to prevent dead lock
issue.
Change-Id: I63e1792f21b2dcc3436e479521d63341e4700c1e
CRs-Fixed: 2367948
|
| | | |/ / / / / /
| | | | | | | |
| | | | | | | |
| | | | | | | |
| | | | | | | |
| | | | | | | |
| | | | | | | |
| | | | | | | |
| | | | | | | |
| | | | | | | |
| | | | | | | |
| | | | | | | |
| | | | | | | |
| | | | | | | |
| | | | | | | |
| | | | | | | |
| | | | | | | | |
QBSS IE uses min length of 4 bytes for version 1 and
min length of 5 bytes for version 2. Min length used
for IE is 5 bytes in driver which can cause WPA IE
parse failure if QBSS IE is 4 bytes resulting in failure
in fetching scan results due to security mismatch and
subsequently connection failure.
Fix is to skip the IE which has length less than the
minimum valid length.
Regression cause is I8e42fb7e9674845d152d2ec26a592e02a1b562ab.
Change-Id: I00fbffad221e2d9ecedcb87c9607ac8abd7c55b1
CRs-Fixed: 2367033
|
| | | |\ \ \ \ \ \
| | | | | | | | |
| | | | | | | | |
| | | | | | | | | |
wlan-cld2.driver.lnx.1.0
|
| | | | | | | | | |
| | | | | | | | |
| | | | | | | | |
| | | | | | | | |
| | | | | | | | |
| | | | | | | | |
| | | | | | | | | |
Update correct format of copyright year 2018
Change-Id: Ia1edf8059fe796a1a7ffae142ede090f4c6415ae
CRs-Fixed: 2364391
|
| | | |/ / / / / /
| | | | | | | |
| | | | | | | |
| | | | | | | |
| | | | | | | |
| | | | | | | |
| | | | | | | |
| | | | | | | |
| | | | | | | | |
propagation from qcacld-3.0 to qcacld-2.0
Add information to check dma double map and dma map leakage.
Change-Id: I7d0ccf987b94e01147f8777d2019809cf76fbc1d
CRs-Fixed: 2362983
|
| | | | | | | | |
| | | | | | | |
| | | | | | | |
| | | | | | | |
| | | | | | | |
| | | | | | | |
| | | | | | | |
| | | | | | | | |
When tx desc allocation fails, we will free the net buffer. Before that,
we need to do dma unmap.
Change-Id: I2418629d9f45b67ddd17bce44c05611047548b4f
CRs-Fixed: 2340747
|
| | | |\ \ \ \ \ \
| | | | | | | | |
| | | | | | | | |
| | | | | | | | | |
wlan-cld2.driver.lnx.1.0
|
| | | | | | | | | |
| | | | | | | | |
| | | | | | | | |
| | | | | | | | |
| | | | | | | | |
| | | | | | | | |
| | | | | | | | | |
Add NULL pointer check.
Change-Id: I3a85997bc84c5f24fff67b5446263d8acc6313c8
CRs-fixed: 2357467
|
| | | |\ \ \ \ \ \ \ |
|
| | | | | |_|/ / / /
| | | |/| | | | |
| | | | | | | | |
| | | | | | | | |
| | | | | | | | |
| | | | | | | | |
| | | | | | | | |
| | | | | | | | |
| | | | | | | | |
| | | | | | | | | |
When downloading a corrupted firmware file that has chunk length in
header which doesn't match the contents, buffer over-read may occur.
To fix it, before downloading the data, ensure the length is equal or
smaller than the left size of the firmware file.
Change-Id: I4e0c6c4423f94f26a8c4573b5d234296890f4ecf
CRs-Fixed: 2359884
|
| | | |\ \ \ \ \ \ \ |
|
| | | | | | | | | | |
| | | | | | | | | |
| | | | | | | | | |
| | | | | | | | | |
| | | | | | | | | |
| | | | | | | | | |
| | | | | | | | | |
| | | | | | | | | | |
Add HPCS Module Ids for fw log debugging
CRs-fixed: 2360846
Change-Id: I6c853da2d9cbbdfc513321ab017d1be9d3381ab0
|
| | | |\| | | | | | |
| | | | | | | | | |
| | | | | | | | | |
| | | | | | | | | | |
wlan-cld2.driver.lnx.1.0
|
| | | | | | | | | | |
| | | | | | | | | |
| | | | | | | | | |
| | | | | | | | | |
| | | | | | | | | |
| | | | | | | | | |
| | | | | | | | | |
| | | | | | | | | | |
Add WLAN_MODULE_HPCS_PULSE defines
CRs-fixed: 865207
Change-Id: Iad2d5792ece32bdd8a6577184f04c0ab0b2dcb3c
|
| | |/| | | | | | | |
| | | | | | | | | |
| | | | | | | | | |
| | | | | | | | | | |
wlan-cld2.driver.lnx.1.0
|
| | | | |/ / / / / /
| | |/| | | | | |
| | | | | | | | |
| | | | | | | | |
| | | | | | | | |
| | | | | | | | |
| | | | | | | | |
| | | | | | | | |
| | | | | | | | | |
Restore the correct credit for the flow control endpoint, add back
all the credits consumed by the queue, if fail to send packet by
HIFSend_head.
Change-Id: I480f7aba5ce8c8d1e57caaae5b2bfcd77209091c
CRs-Fixed: 2360669
|
| | |\ \ \ \ \ \ \ \ |
|
| | | |/ / / / / / /
| | | | | | | | |
| | | | | | | | |
| | | | | | | | |
| | | | | | | | |
| | | | | | | | |
| | | | | | | | |
| | | | | | | | |
| | | | | | | | |
| | | | | | | | |
| | | | | | | | |
| | | | | | | | |
| | | | | | | | |
| | | | | | | | |
| | | | | | | | | |
So once the coutry code change done on AP, the STA will receive
a beacon change event(in this event include new country code),
and the beacon change event function will check the max tx power
based on the old country code because the country code change
process is not start yet. So the old tx power will be applied
until next beacon change event.
In this change, update max TX power after set reg, so no need
to wait next beacon change event.
Change-Id: Iab676d677460f874ef941e600bb37c9c2c649ef0
CRs-Fixed: 2332427
|
| | |/ / / / / / /
| | | | | | | |
| | | | | | | |
| | | | | | | |
| | | | | | | |
| | | | | | | |
| | | | | | | | |
HIFMaskInterrupt and HIFUnMaskInterrupt are only defined for sdio.
Change-Id: I66c20f3572b297b0a8ec72bad2e8a01de728b42c
CRs-Fixed: 2360697
|
| | |\ \ \ \ \ \ \
| | | | | | | | |
| | | | | | | | |
| | | | | | | | | |
into wlan-cld2.driver.lnx.1.0
|
| | | | | | | | | |
| | | | | | | | |
| | | | | | | | |
| | | | | | | | |
| | | | | | | | |
| | | | | | | | |
| | | | | | | | |
| | | | | | | | | |
If HIF_PCI is not defined, do not define pci related api, otherwise
there will be build error
Change-Id: I3d6989ea2ee4c7c13ad011b6b1ca11a1123de168
CRs-Fixed: 2357878
|
| | |\ \ \ \ \ \ \ \
| | |_|_|/ / / / /
| |/| | | | | | |
| | | | | | | | | |
wlan-cld2.driver.lnx.1.0
|
| | | |/ / / / / /
| | | | | | | |
| | | | | | | |
| | | | | | | |
| | | | | | | |
| | | | | | | |
| | | | | | | |
| | | | | | | |
| | | | | | | |
| | | | | | | |
| | | | | | | |
| | | | | | | | |
It takes about 100s for SDIO to finish the FW dump.
To reduce the dumping time, dump DRAM/IRAM/AXI with
BMI related API.
It takes about 7s for SDIO to finish the FW dump if
enable fast FW dump.
Change-Id: I99ab2a856952636f9d0851a463b9a12aca8c79ef
CRs-Fixed: 2314750
|
| | |\ \ \ \ \ \ \
| | |/ / / / / /
| |/| | | | | | |
|
| | | | | | | | |
| | | | | | | |
| | | | | | | |
| | | | | | | |
| | | | | | | |
| | | | | | | |
| | | | | | | |
| | | | | | | |
| | | | | | | |
| | | | | | | |
| | | | | | | |
| | | | | | | |
| | | | | | | |
| | | | | | | | |
In the function __wlan_hdd_cfg80211_stats_ext_request, data_len
is recieved from vendor command and is passed ultimately to
wma_stats_ext_req. In wma_stats_ext_req, len is calculated as
sum of sizeof(*cmd), WMI_TLV_HDR_SIZE, preq->request_data_len.
The len is of type u_int16_t and adding
sizeof(*cmd) + WMI_TLV_HDR_SIZE will cause a buffer overflow.
Changed the datatype of len to size_t so that it doesn't overflow.
Change-Id: I6618042e3c60bbdb1ff5d833188f4bdb4832da7a
CRs-Fixed: 2350908
|
| | |\ \ \ \ \ \ \
| | | | | | | | |
| | | | | | | | |
| | | | | | | | | |
wlan-cld2.driver.lnx.1.0
|
| | | | | | | | | |
| | | | | | | | |
| | | | | | | | |
| | | | | | | | |
| | | | | | | | |
| | | | | | | | |
| | | | | | | | |
| | | | | | | | |
| | | | | | | | |
| | | | | | | | |
| | | | | | | | |
| | | | | | | | |
| | | | | | | | |
| | | | | | | | |
| | | | | | | | | |
Some platform need wow suspend target without trigger from OS, instead
need interfaces to trigger Pattern Bitmap Match and Magic Pattern only
configure, and to trigger suspend bus and target. And also need some
configure to customized wakeup GPIO pin and wakeup wave.
Add iwpriv interfaces to configure wow wakeup parameters and command to
suspend bus and target. It is verified on USB bus platform and could
be extended to support on other bus like PCIe and SDIO. Add interface
to configure wow pulse init state to exist wow pulse feature.
Change-Id: I3de6ba34d207d2c75cbc675bea925d1e4edcd130
CRs-Fixed: 2354525
|
| | |\ \ \ \ \ \ \ \
| | | | | | | | | |
| | | | | | | | | |
| | | | | | | | | | |
wlan-cld2.driver.lnx.1.0
|
| | | | |_|/ / / / /
| | |/| | | | | |
| | | | | | | | |
| | | | | | | | |
| | | | | | | | |
| | | | | | | | |
| | | | | | | | | |
Add host interest SDIO_CRASH_DUMP_ENHANCEMENT_[HOST,FW] flags
CRs-fixed: 865207
Change-Id: I6bc22bed81dd92511a71a24b777e4004b46386ff
|
| | | |/ / / / / /
| |/| | | | | |
| | | | | | | |
| | | | | | | |
| | | | | | | |
| | | | | | | |
| | | | | | | |
| | | | | | | |
| | | | | | | | |
Country IE dose not match with the region domain setting from
user layer. It will aLways be the default code in hostapd.conf.
Flush beacon template after country code is changed.
Change-Id: I49d5aad14c0e409c2ca60831faea8d7e13c44212
CRs-Fixed: 2354690
|
| | | |/ / / / /
| |/| | | | |
| | | | | | |
| | | | | | |
| | | | | | |
| | | | | | |
| | | | | | | |
To add warm reset feature for USB.
Change-Id: Idb18082cf85a04b246d697534dc1afe015b0ab68
CRs-Fixed: 2354636
|
| | |\ \ \ \ \ \ |
|
| | | |/ / / / /
| | | | | | |
| | | | | | |
| | | | | | |
| | | | | | |
| | | | | | |
| | | | | | |
| | | | | | |
| | | | | | |
| | | | | | |
| | | | | | |
| | | | | | |
| | | | | | |
| | | | | | |
| | | | | | | |
Propagation from qcacld-3.0 to qcacld-2.0
In wma_extscan_find_unique_scan_ids() the TLV structures
for param_buf are pulled from the WMI message.
wma_extscan_find_unique_scan_ids parses the data (param_buf)
which is obtained from the firmware.
This parsing logic of rssi_list does not consider the
size of the list and thus results in an OOB access.
Fix is loop for the num_rssi_list and not the num of entries
Change-Id: Icf79b59a17b66ac858222b79589641787022572d
CRs-Fixed: 2350711
|
| | | | | | | |
| | | | | | |
| | | | | | |
| | | | | | |
| | | | | | |
| | | | | | |
| | | | | | |
| | | | | | |
| | | | | | | |
Fix possible OOB access while sending NAN msg to firmware, by checking
data len calculation against integer overflow and making sure data len
to be less than max wmi msg size.
Change-Id: I98f42b9924a1810282ae3bca031cd5a1e3dd4047
CRs-Fixed: 2350914
|
| | |/ / / / /
| | | | | |
| | | | | |
| | | | | |
| | | | | |
| | | | | |
| | | | | |
| | | | | |
| | | | | | |
Host side check RTC status by reading CIS content to determine
Mbox is really waking up and ready to send data. No time wasted
right after Mbox wakeup and improve delay and jitter KPI.
CRs-Fixed: 2346839
Change-Id: If0e2c3e949d48a5d632e3f93ff2b39ae242c85bb
|
| | | | | | |
| | | | | |
| | | | | |
| | | | | |
| | | | | |
| | | | | |
| | | | | |
| | | | | |
| | | | | |
| | | | | | |
This reverts Change I6d1e67d2eea5117fb8c8b2e191c47c41326f4755
WLAN_OPEN_SOURCE cannot be used as a compile MACRO for different
platforms.
Change-Id: Idba7708e0e7da5abd379e5f2f7521aed34014120
CRs-Fixed: 2346040
|
| | | | | | |
| | | | | |
| | | | | |
| | | | | |
| | | | | |
| | | | | |
| | | | | |
| | | | | |
| | | | | |
| | | | | |
| | | | | | |
When WLAN_FEATURE_11AC is defined, RATE_INFO_FLAGS_VHT_MCS will be set.
Once RATE_INFO_FLAGS_VHT_MCS is set, bw should be no less than
RATE_INFO_BW_20. Otherwise cfg80211 treats this as invlid setting.
Initialize bw as RATE_INFO_BW_20 if 11ac feature is defined.
Change-Id: I3d6174ea366f8e8e10d0efced38492ba47ea6e06
CRs-Fixed: 2342240
|
| | |/ / / /
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | | |
Propagation from cld3.0 to cld2.0
In the API limProcessDeauthFrame, the reason-code is
fetched from the payload, and it may happen that the
payload received is empty, and the MPDU just contains the
header, so the driver may access the memory not allocated
to the frame, thus resulting in a OOB read.
Fix is to have a min length check of 16 bits for the
reason code before accessing it.
Change-Id: I7e7a435ba049356c13fb10240f4abb9bf6219af4
CRs-Fixed: 2338742
|
| | |\ \ \ \
| | | | | |
| | | | | |
| | | | | | |
wlan-cld2.driver.lnx.1.0
|
| | | | | | |
| | | | | |
| | | | | |
| | | | | |
| | | | | |
| | | | | |
| | | | | |
| | | | | |
| | | | | |
| | | | | |
| | | | | |
| | | | | |
| | | | | |
| | | | | | |
propagation from qcacld-3.0 to qcacld-2.0
Currently in avoid frequency vendor command, data validation
is not being done, since this data comes from userspace driver
should not be using this data pointer without validation.
To address this issue add validation for data pointer and data
length received in driver.
Change-Id: I7b56e2ddcbcb5e98dd93d152033db48063e772d3
CRs-Fixed: 2335431
|
| | |/ / / /
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | |
| | | | | |
propagation from qcacld-3.0 to qcacld-2.0
In the function cfg80211_rx_mgmt, data_len is calculated as
len - ieee80211_hdrlen(mgmt->frame_control). Len is not
validated before this calculation. So a possible integer
underflow will occur if len value is less than the value of
ieee80211_hdrlen(mgmt->frame_control).
Validate the value of len against
ieee80211_hdrlen(mgmt->frame_control) in the caller.
Change-Id: Iae776daf37b0c052bd4ce4da44ea728d121eae51
CRs-Fixed: 2337425
|
| | |\ \ \ \
| | | | | |
| | | | | |
| | | | | | |
wlan-cld2.driver.lnx.1.0
|
| | | | | | |
| | | | | |
| | | | | |
| | | | | |
| | | | | |
| | | | | |
| | | | | |
| | | | | | |
If CFR periodicity is zero via netlink, configure one shot
CFR request
Change-Id: I077d26791059737dd947b4a076f7e50def070560
CRs-Fixed: 2337524
|
| | |\ \ \ \ \
| | | | | | |
| | | | | | |
| | | | | | | |
wlan-cld2.driver.lnx.1.0
|
| | | | | | | |
| | | | | | |
| | | | | | |
| | | | | | |
| | | | | | |
| | | | | | |
| | | | | | |
| | | | | | |
| | | | | | |
| | | | | | | |
propagation from qcacld-3.0 to qcacld-2.0
In pe_drop_pending_rx_mgmt_frames(), Change frequently seen logs
log_level from LOGE to LOG1.
Change-Id: Ia8dd7838727a92c78a9ad94b90fd2d683fb98430
CRs-Fixed: 2337125
|
| | |\ \ \ \ \ \ |
|
| | | | | | | | |
| | | | | | | |
| | | | | | | |
| | | | | | | |
| | | | | | | |
| | | | | | | |
| | | | | | | |
| | | | | | | |
| | | | | | | |
| | | | | | | |
| | | | | | | | |
When first WMI_RADIO_LINK_STATS_EVENTID is received radio stats buffer
is allocated based on num_radio param. There is an option for pending
following events. So update wma_unified_link_radio_stats_event_handler
to check if following events are valid wrt num_radio values to avoid
buffer overwrites.
Change-Id: Ibd6550d2ff71d04a15f4f6cda1eb9c213bc1d3e1
CRs-fixed: 2340581
|
| | |\ \ \ \ \ \ \
| | |_|_|/ / / /
| |/| | | | | |
| | | | | | | | |
into wlan-cld2.driver.lnx.1.0
|
| | | | | | | | |
| | | | | | | |
| | | | | | | |
| | | | | | | |
| | | | | | | |
| | | | | | | |
| | | | | | | | |
Handle TCP TX throttling new logic when kernel > 3.19
Change-Id: I16e44a4d4ecb72d40eac9953c4cbeafcfa0a05c6
CRs-Fixed: 2338134
|