Host sends the EXT CAP IE based on the capability
coming from the supplicant in join request. But, after
roaming the cached join request will be freed. Therefore,
after roaming few capabilities sent by the userspace are
not saved and therefore lost in reassoc request.
Save the EXT CAP IE from the join request in the VDEV
and use the cached capability for sending Ext cap IE.
Change-Id: I71947388b4c6e9e56a5832557416d9b462de70e2
CRs-Fixed: 3038496
Avoid OOB read in sch_get_csa_ecsa_count_offset API by
adding check for ie_len before subtracting element ID len
from it.
Change-Id: Id86e69b2c5abc37a4f33125dc5fd0bd1d92f64a7
CRs-Fixed: 3049251
Avoid OOB read in dot11f_unpack_assoc_response API. Add check
for when nBuf == len to read another byte of pBufRemaining.
Change-Id: Iccdb0b268d16f4169b8b701ade6085d47897f785
CRs-Fixed: 3042293
cfg80211 resume request will be rejected if there is an SSR in
progress, Because of this modules are not coming out of suspend state
when there is an SSR after suspend request.
To avoid this, resume all modules before recovery shutdown.
Change-Id: I3d749e0a5971468805a009cb990a220e0645c169
CRs-Fixed: 3016002
With connection manager enabled, the send IE request is
not sent after connection.
Add support to send set IE request after connection is
successful in connection manger.
Change-Id: I2f30eb67ba295e0ca416ccb40e12a376e0d7a47e
CRs-Fixed: 2976734
The extended capabilities IE is sent during vdev create and
this doesn't have the merged extended capabilities from the
userspace. So some of the fields advertised in association
request are not advertised in the re-association request.
Fix the missing fields not set in the extended capabilities IE
by sending the set IE message to LIM after connection is
successful.
Change-Id: I322d057f602e0362f12b362e7818e84cbb056cf4
CRs-Fixed: 2971072
This reverts commit I784e4b1735f4f217713f65c30092bac2ad6cb698.
Some AP reports HT20 in beacon frame but HT40 in assoc response
frame. FW roaming will decide BW HT40 based on assoc response.
In previous change host will decide BW based on assoc response
as FW does. But the issue is after roaming, the host will check
beacon for AP BW changing and then do vdev restart. But the vdev
restart may be rejected by FW if the FW roaming is still in
progress. To avoid the complication, revert the change.
The original issue will be fixed by validation the channel
segment by Ia41c51feca855cab54e908438c51a8d12075f864 to avoid
the kernel check channel failure and disconnect.
Change-Id: Ib170acb3588cf07bf666d446f5dde73de2d4705b
CRs-Fixed: 3061233
When ROAM_TARGET_IF_CONVERGENCE feature enabled, the new
channel freq and BW from roam sync are not updated to wma
interface struct.
Fix by update ch_freq & BW to wma in wma_roam_update_vdev.
Change-Id: Ia41c51feca855cab54e908438c51a8d12075f864
CRs-Fixed: 3045108
There is frequent output when get unexpected vendor specific action
frame. So, add this change and reduce the log level.
Change-Id: I9d832546a4436bdf7dd25cb00a7de5cce1295b31
CRs-Fixed: 3060750
2 threads blocked to wait channel_switch_complete_evt for SAP channel
switch is already in progress, qdf_event_set only woke up 1st thread
later, 2nd thread still kept blocked with hold net_dev for debug id
NET_DEV_HOLD_COUNTRY_CHANGE_UPDATE_SAP, leak happened.
Change-Id: Iad296f68aeaefe5a6b88ad6bea95cc377b2ae515
CRs-Fixed: 3061960
In P2P, if NDP is present, limit max ROC duration to
400ms on DBS and 250ms on non-DBS case.
If NAN is present, limit max ROC duration to 450ms on DBS
and 300ms on non-DBS case.
Change-Id: I2e943d2f55984464812bba16ca78dfab8681cf30
CRs-Fixed: 3046904
Currently, the Rx/Tx highest Long GI data rate field in
the VHT IE is filled with short GI data rate. Therefore,
change the highest supported data rate back to LGI data
rate.
Allow the short GI rate to be filled as the highest supported
rate in the wiphy if short GI is enabled.
Change-Id: Ie0652b4cdeef370cb8ad3d11b5d36b6959c1cbcb
CRs-Fixed: 3053946
For SDW5100 release branch path for common dir is changed to
device/qcom/common/monaco which is being specified in target mk file.
This change ensures other SI compilation will not break.
Change-Id: If8aa35a2e2da0e42b34c77ff8097c26aa2aa83d1
CRs-Fixed: 3020014
Since the code under FEATURE_HAL_DELAYED_REG_WRITE_V2 has been
removed and cleaned up, removing the build flag from Kbuild.
Change-Id: I66072af952877881fb700869ae4774e4f1a388cc
CRs-Fixed: 3056477
Currently during wlan suspend DP refill thread is suspended first
then RX thread is suspended but if RX thread suspend fails then
refill thread should be resumed if not refill thread will be stuck
in suspend state forever.
To avoid refill thread getting stuck in suspend state, resume
refill thread when RX thread suspend failure is encountered.
Change-Id: I2dfdfa881bb3cb660b83067c796d3a833b86ef5f
CRs-Fixed: 3054903
Deliver tx offload management to mon interface in packet capture
mode based on config filters added by vendor command.
Change-Id: Id60529b963e3021d7744858980b316b546606550
CRs-Fixed: 3045460
Deliver management and control tx packets to monitor interface
only if corresponding filter is set by vendor command.
Change-Id: Ifc7f0ecfce7d7a105902e8a9ce522ba0325ee9cd
CRs-Fixed: 3044855
Use WLAN_REG_IS_SAME_BAND_FREQS API to check if 2 channel
frequencies are on same band instead of the deprecated
WLAN_REG_IS_SAME_BAND_CHANNELS API as part of regulatory
cleanup effort.
Change-Id: I05c7a97d5217cdd725734ece457e859d5e1588c2
CRs-Fixed: 2898307
Deliver management and control rx packets to monitor interface
only if corresponding filter is set by vendor command.
Change-Id: I9aeb8071cfc6207359f8d7ec74af2a21e2742d1e
CRs-Fixed: 3044857
Deliver data packets to monitor interface only if
corresponding filter is set by vendor command.
Change-Id: Ibf24349d17d1e649819447b1cde36a834e5579a4
CRs-Fixed: 3046233
This commit adds check for data tx and rx packets based on vendor
command received from user.
Change-Id: Ieddb96d8778131ec5876c55462b518e1db552f57
CRs-Fixed: 3046231
Add tgt support in packet capture component to send user
configured beacon report interval to FW.
Change-Id: Ibeb9f9a7f9ad2c2afa6929c492bd1029784b5f9e
CRs-Fixed: 3046224
In packet capture component add support to send ctrl and beacon
frames config to FW based on frame filter received from user through
vendor command.
Change-Id: Ie45ea2135e237a156fb60663e3f85cc601490e4a
CRs-Fixed: 3046222
In packet capture component add support to send data and mgmt
mode to FW based on frame filter received from user through
vendor command.
Change-Id: Ib6d0d8abe53c29ea6c52900c628d87b603baf1e3
CRs-Fixed: 3046220
Scenario: In case of STA + STA, NB/SB issues disconnection for
vdev 0 when vdev 1 is in connecting state.
As connection is blocking serialization command and it can try
multiple candidates and can take upto 30+ sec, there is a
chance that disconnect may get timeout and is followed by
vdev delete from osif. This can lead to vdev delete sent
without vdev down/stop and bss peer delete for vdev 0.
So abort connection when trying for candidate if any of the
vdev is waiting for disconnect, to avoid disconnect timeout.
Change-Id: I876550532524767e811c9fd03e85e16d6a90b940
CRs-Fixed: 3049934
Add bound check before access array to avoid out of bound issue.
Separate array bound and duplicate check of 11a and 11b since they have
different length and type.
Change-Id: Icb9382cd42385339532518759de0f6137c5203bd
CRs-Fixed: 3051517
Currently, failure in csr_roam_synch_cb is not handled, therefore
failure during roam sync indication processing in CSR, leads to
out-of-sync between LIM and CSR sessions.
Handle the failure in csr_roam_synch_cb, by aborting the
roam complete notification to FW, and then process HO failure from
FW to cleanup LIM and CSR which will hold different BSSID profile.
Use vdev id instead of BSSID to retrieve/delete the LIM session.
Change-Id: I5ff2280e7ba1a8cb8e44c0c6b70647bf12b6ef31
CRs-Fixed: 3046370
Currently pdev_id is not initialized after ssr for thermal throttle
reconfig, Where host is sending vdev id as 64 which is leading to
firmware crash.
Hence initialize pdev_id to 0.
Change-Id: Ic614a382acb4f598c52948bcca1cd24f9754ad94
CRs-Fixed: 3041238
