Currently host sends vdev delete as part of vdev stop
timeout handling which can change internal states in
firmware. So trigger crash immediately once timeout
is detected.
Change-Id: Iab2aa4324f7cff493c2cf5d0e1a059970d455b23
CRs-Fixed: 1097007
LFR module in firmware copies WEP keys from old AP to new AP during
roaming. Host driver should not install 0 length keys during roam
sync indication processing.
Change-Id: I002be0ab330a7161ca2554d9d423e8e1b2170e55
CRs-Fixed: 1096918
In function __hdd_softap_hard_start_xmit, station id is
not validated with max station count, this might lead to
a buffer overflow situation for array aStaInfo in SapCtx.
Validate station id with max sta count.
CRs-Fixed: 1093122
Change-Id: If9f59c5a7b76845bb7783a96453e595b5afa4f30
When HDD IPA RT debugging is not enabled, rt_debug_fill_timer is not
initialized. However, we still check the timer status to destroy the
timer while deinit RT debug.
Change-Id: Ic541301843e4d72ad2bc6181728cf18c97d6191a
CRs-fixed: 1095787
qcacld-2.0 to qcacld-3.0 propagation
When pended HDD IPA events are resumed after driver unloading, a crash
happens, since resources are already freed up.
Fix by not pending events while driver unloading is in progress.
Change-Id: Id744aa6e683850ce25c875ab6b5ffabdca733e5d
CRs-Fixed: 987180
qcacld-2.0 to qcacld-3.0 propagation
This fixes a race condition between IPA Rx handler and wlan unloading
Change-Id: I8997d532a92b2708bc48f09badb89fabe1544c87
CRs-fixed: 1059550
hdd_wlan_get_ibss_peer_info() and hdd_wlan_get_ibss_peer_info_all()
initialize their completion variables after scheduling work, leading to
a race condition that can cause the completion variable to be set before
it is initialized. Reorder the operations so work is scheduled after
initializing the completion variables.
Change-Id: Ic773574f3620438b473cd5bcebee78ad87a37942
CRs-Fixed: 1074692
Use a flag fw_create_pending flag to compensate for the extra
peer reference count only once for the first peer map event. It
will avoid duplicate compensation of ref count and untimely peer
delete.
CRs-Fixed: 1092503
Change-Id: I8b32290ad1bc4a834a3edb68e25b212eee2951c1
In function sme_set_tspec_uapsd_mask_per_session update
uapsd_per_ac_bit_mask as per the values received from
ADD TS response. Otherwise, ini change if 0 will always
override ADD TS response values.
Change-Id: Ie834f651bb097c084c81c6ebc9c8637f96d7a075
CRs-Fixed: 1096829
Free msg->bodyptr in wma_mc_process_msg function for
WMA_SET_RSSI_MONITOR_REQ to avoid memory leak.
Change-Id: I7088a0ca54b374f2ef326ca344cedafe115d79d6
CRs-Fixed: 1095418
When WLAN_AP_DISCONNECT event is not processed during IPA resource
unloading inprogress, IPA offload disable is not invoked.
And WLAN_AP_CONNECT event comes later, since a new interface is setup,
the previous IPA offload enable status is not checked properly, and it
causes FW crash because IPA offload enabled twice.
Fix to maintain the IPA offload enabled flag per vdev, instead of per
interface.
Change-Id: I9ba7eceb5b1b69490e14f97871b30ea6a89c28f6
CRs-Fixed: 1091525
qcacld-2.0 to qcacld-3.0 propagation
Use SKB clone instead of using SKB copy for forward packets.
Addtional fix to release SKB to IPA when dropping Rx packets from IPA.
Change-Id: Ibfacf855b53148fd6b254e281f7163d03e3753ec
CRs-Fixed: 950379
This is a qcacld-2.0 to qcacld-3.0 propagation.
The wlan driver supports the following vendor command:
QCA_NL80211_VENDOR_SUBCMD_EXTSCAN_SET_SIGNIFICANT_CHANGE
This command supplies a "number of APs" attribute as well as a list of
per-AP attributes. However there is no validation that the number of
APs provided won't overflow the destination buffer. In addition there
is no validation that the number of APs actually provided matches the
number of APs expected.
To address these issues:
* Verify that the expected number of APs doesn't exceed the maximum
allowed number of APs
* Verify that the actual number of APs supplied doesn't exceed the
expected number of APs
* Only process the actual number of supplied APs if it is less than
the expected number of APs.
Change-Id: I0513ffbc4a38f1d7ddbc0815d3618fc9a2ea4f77
CRs-Fixed: 1095009
This is a qcacld-2.0 to qcacld-3.0 propagation.
Currently when processing the QCA_NL80211_VENDOR_SUBCMD_ROAM vendor
command, for the following roam commands there are input validation
issues:
QCA_WLAN_VENDOR_ATTR_ROAM_SUBCMD_SET_BSSID_PREFS
QCA_WLAN_VENDOR_ATTR_ROAM_SUBCMD_SET_BLACKLIST_BSSID
Both of these commands have a "number of BSSIDs" attribute as well as a
list of BSSIDs. However there is no validation that the number of
BSSIDs provided won't overflow the destination buffer. In addition
there is no validation that the number of BSSIDs actually provided
matches the number of BSSIDs expected.
To address these issues, for the above mentioned commands:
* Verify that the expected number of BSSIDs doesn't exceed the maximum
allowed number of BSSIDs
* Verify that the actual number of BSSIDs supplied doesn't exceed the
expected number of BSSIDs
* Only process the actual number of supplied BSSIDs if it is less than
the expected number of BSSIDs.
Change-Id: Ifa6121ee1b1441ec415198897ef815b40cb5aff6
CRs-Fixed: 1092497
Driver logs prints QTIMER ticks and it's difficult to co-relate with
logcat timestamp.
Add logcat timestamp so that driver and logcat logs can be co-related.
Change-Id: If770d4a9b48301adc3deb8f4c1d16099dfa8dd8d
CRs-Fixed: 1095195
Currently host driver does not send interface index to supplicant
after successful roaming, this leads to disconnection in DBS mode.
Add changes to update respective interface index
by passing wdev to cfg80211_vendor_event_alloc().
Change-Id: Ic22fdd56a26a27d42a3ac7aaaf67bfba273a2697
CRs-Fixed: 1094297
Fix enum numbers as per the expectation from upper layers
which are same across different projects.
Also add few enums which are missing.
Change-Id: I59bce332667ae6503fee8f94bcff6a8cd27d1a54
CRs-Fixed: 1094088
Fast forward CLD3.0-2.0-dev branch to tip of CLD3-1.1-dev from 5.1.0.34A to 5.1.0.34D
Merge upto commit-id: 7c2d0a0afe
* remotes/origin/wlan-cld3.driver.lnx.1.1-dev:
Release 5.1.0.34D
qcacld-3.0: Avoid NULL pointer dereference in send_packetdump()
Release 5.1.0.34C
qcacld-3.0: Fix ext_caps IE in Probe Request sent due to HB Failure
Release 5.1.0.34B
qcacld-3.0: Fix buffer overflow in __lim_process_roam_scan_offload_req
CRs-Fixed: 688141 1083819 1081117 1082162
Change-Id: Iec230253d1a3c666187afdd087a387dea5c49bcf
qcacld-3.0: Cleanup proprietary and old stale lines
Restrict build to msm8994,96,98,msmcobalt platform
variants.
Change-Id: Ic89ce4a786e884c24ab20ee201d9558f6cccc867
CRs-Fixed: 688141
Incremental CLD3.1 Release 5.1.0.1B after relocating
the driver development to new branch and path.
Change-Id: Ibd2f045e31475458225ec43c38186074c640c8b1
CRs-Fixed: 688141
Sync up wlan-cmn.driver.lnx.1.0-dev to CAF 5.0.0.160
from 5.0.0.149 release as baseline for subsequent win
and mcl convergence refactoring.
* commit '0219ae6': (554 commits)
Release 5.0.0.160
qcacld-3.0: Add wma handler for vdev delete and peer delete responses
Release 5.0.0.159
qcacld-3.0: Fix Compilation error on WLAN_FEATURE_11W disabled
qcacld-3.0: Update channel width and center freq
qcacld-3.0: Move sta state to not connected after try disconnect
qcacld-3.0: Remove #ifdef FEATURE_WLAN_LFR from HDD
qcacld-3.0: Remove RRM ie in Assoc Req based on AP capability
qcacld-3.0: Fix fw statistics parsing on the host
qcacld-3.0: Fix IPA-uc callback in NON-SMP system
qcacld-3.0: SAP DFS-3 Feature support in DFS layer
qcacld-3.0: SAP DFS-3 Feature support in WMA
qcacld-3.0: correct phy_mode in hdd_chan_change_notify
qcacld-3.0: move hif_bus_open to hif_open
qcacld-3.0: Remove hif_claim_device
qcacld-3.0: Remove epping context from cds
qcacld-3.0: Enable Tx beamformee in SAP mode
qcacld-3.0: Set the IMPS enable/disable based on INI
qcacld-3.0: Fix memory leak in case of fw reset stats command
qcacld-3.0: Use appropriate API to get total free descriptors
...
qcacld-3.0: Enable athdiag debug support for SNOC devices
qcacld-3.0: Remove support of power gating parameters
qcacld-3.0: Add log in vos_mem_alloc if kzalloc takes more than 3 seconds
Change-Id: I903d2b6edfb715570daffbcfcdb46866f04737dc
CRs-Fixed: 688141
Sync-up wlan-cmn.driver.lnx.1.0-dev branch to caf master version
of host-common driver that is exactly same as qcacld-3.0 driver
version 5.0.0.149
* origin/caf/caf-wlan/master: (294 commits)
qcacld-3.0: Lower the log level for unhandled Action frame logs
qcacld-3.0: Add disconnect to the head of sme pending command list
Release 5.0.0.149 QCACLD3 WLAN Driver
qcacld-3.0: Enable emergency reaping for wmi pipe.
qcacld-3.0: add retry logic if htc_issue_packets fails
qcacld-3.0: Ignore HTT_T2H_MSG_TYPE_MGMT_TX_COMPL_IND from FW
qcacld-3.0: Do not reserve mgmt descriptors
qcacld-3.0: Use appropriate list API
qcacld-3.0: Remove per vdev tx descriptor pool
qcacld-3.0: Enable enahnced flow control
qcacld-3.0: Add support for telescopic PNO
...
Release 5.0.0.140
...
Initial readme for WLAN Host Driver for iHelium
Change-Id: I36e7222946f442159390bd78a65ee5dc6876b582
CRs-Fixed: 688141
qcacld-3.0: Initial snapshot of ihelium wlan driver
to match code-scanned SU Release 5.0.0.139. This is
open-source version of wlan for next Android release.
Change-Id: Icf598ca97da74f84bea607e4e902d1889806f507
Prakash Dhavali