In function hdd_update_dp_vdev_flags, hdd_ctx is not being
validated before dereference.
Add NULL check for hdd_ctx.
Change-Id: Id907e273ec3d135c0e140d3b8b9aa6346af2d9a3
CRs-Fixed: 2162252
Currently variable "tid" is from message, which is used directly
as array size which causes buffer over-write.
To address this issue add check for the array size.
Change-Id: I9b9d028ddb9566938f93ff8155284876c1ef9c03
CRs-Fixed: 2146949
Currently variable "tx_desc_id" is from message and it
is used without check.This may cause buffer over-write.
To address this issue add check for valid "tx_desc_id"
Change-Id: Ifcdbf60ce1e0f81be77308185ab51b59746c21af
CRs-Fixed: 2146878
Currently variable "tid" is from message, which is used
directly as array size which causes buffer over-write.
To address this issue add check for the array size.
Change-Id: I9fae424d19ce5e886d385071863cbfca9633dd84
CRs-Fixed: 2148184
During resume process FW may assert hence to avoid kernel panic
and let subsystem restart to gracefully recover the system avoid
kernel panic if FW is down during HDD resume failure.
Change-Id: I8c53b7251e35dd40b9700f15c0c4897ef80209f8
CRs-Fixed: 2178302
Target register is safe to access only after FW ack the wlan
enable request, which is done in hif_enable. Hence set FW ready
state after that.
Change-Id: Ieeb7dd3e1a2400c7b2568869ac27cf7f745c20d5
CRs-Fixed: 2167736
During initializing ibss security settings there is a possibility
of integer underflow while extracting wpa ie because of ie length
check miss.
Add wpa ie length boundary check before extracting wpa ie.
Change-Id: I37d8ee5ea1e1ba12277128a1407783f5647251b6
CRs-Fixed: 2151241
With bitmask used currently to save current obss detections
for different mode is overwritten by next detection bitmask,
which will failed to reconfigure continue absent detection.
Fix the same by saving detection mode only for the detected
mode and keeping other detection mode unchanged.
Change-Id: Ib9e0ba809589e33b3c8abb29939aea8d8ed0de5a
CRs-Fixed: 2177414
Check for the minimum allowed data that can be written into
the buffer param_buf->num_wow_packet_buffer in the functions
wma_wake_event_packet and wma_wake_event_piggybacked.
Change-Id: I8b83bc973fd6f0d7ad9e421a387ce3f03d6b6939
CRs-Fixed: 2161027
In change "qcacld-3.0: Validate Scan Default IEs" in the qcacld-3.0
project (Change-Id: Ifd8739c96a9990f01ff159eb59a7e904f7b8c592) the
utility API hdd_is_ie_valid() was introduced. One review comments was
that this should be a converged API.
Subsequently change "qcacmn: Introduce wlan_is_ie_valid()" in the
qcacmn project (Change-Id: I8d2a520ea70645ab54b450de83452c0035653485)
created the converged API wlan_is_ie_valid(), so now remove
hdd_is_ie_valid() and instead use wlan_is_ie_valid().
Change-Id: I60fcba09e9c962b7891315cea0e273db88a3d49d
CRs-Fixed: 2170493
hdd_ctx in hdd_connect_result is missed when changing
Iaa1934594d5ffcf3b90dd2ad41bba4eb62f71119.
Change-Id: Ic07976f45e5b51a998b0f4cdd99f98c92a799475
CRs-Fixed: 2177707
Configure IEEE80211_CHAN_DFS for DFS channel, otherwise channel changes
does not happen.
Change-Id: I0cfbff43d0fff79ae17f1e96b764d4c213ae2ea1
CRs-Fixed: 2155839
Currently remote OUI is not getting updated when get station info
is done in STA case.
Add support to send AP MAC address to upper layer, upper layer can
use this MAC to derive OUI information of the AP.
Change-Id: I2091f47c2f0d605969c047663e266992e631484b
CRs-Fixed: 2174523
Add an ini parameter for GCMP support. Send an indication
to FW with the ini value.
Change-Id: Ib24747ddb35593373ecc83d6c7f89866571c2421
CRs-Fixed: 2175104
Pdev open and close APIs are needed so that reference counting
can be separated from handler for pdev create APIs. Reference
counting cannot be done in the handlers for pdev create callbacks.
Therefore add call to pdev open and close APIs.
Change-Id: I5f1ed6a470bbedaa2772d4ad95953ae3894b2c9c
CRs-Fixed: 2170257
Release acquired vdev reference in functions lim_process_ndi_del_sta_rsp
and lim_send_sme_ndp_add_sta_rsp after vdev have been used.
Change-Id: Ibc5b884ca5a26095364950df47acecc0c35646a3
CRs-Fixed: 2170929
Recently change "qcacld-3.0: Add SAR power limit configuration"
(Change-Id: I137ce9bde2fa05e363d5af17e155dc739d862c5f) added the
ability to dynamically configure Specific Absorption Rate (SAR) power
limits. Now update the HDD layer to add the ability to retrieve the
current active power limits via a cfg80211 vendor command
Change-Id: I8d48ecfc84094f8704ef048ed4d21f63dba8c1e0
CRs-Fixed: 2161449
Recently change "qcacld-3.0: Add SAR power limit configuration"
(Change-Id: I137ce9bde2fa05e363d5af17e155dc739d862c5f) added the
ability to dynamically configure Specific Absorption Rate (SAR) power
limits. Now update the UMAC layer to add the ability to retrieve the
current active power limits.
Change-Id: Ifdf1d8b2e4d507348f013f1bcac1045bf13caa65
CRs-Fixed: 2161448
Add new config in INI for solicited BTM offload.
Those parameters will be sent to firmware.
New parameters:
* btm_solicited_timeout: Timeout value for waiting BTM request.
* btm_max_attempt_cnt: Maximum attempt for sending BTM query to ESS.
* btm_sticky_time: Stick time after roaming to new AP by BTM.
Change-Id: I24cc680bbfde3d44a57b1e1ccf644c2bed515a2c
CRs-Fixed: 2168981
Optimize driver init time log from HIF layer to avoid any console
logging related side effect.
Change-Id: If4331eb857d52330dc270cc8ebf6b559daa9413b
CRs-Fixed: 2170144
QDF_MAC_ADDR_ZERO_INITIALIZER has been depreciated in favor of
QDF_MAC_ADDR_ZERO_INIT. Replace all usages with the new macro.
Change-Id: I5847c4d41679b5aa1050fe481c4c54f640ab334c
CRs-Fixed: 2176466
QDF_MAC_ADDR_BROADCAST_INITIALIZER has been depreciated in favor of
QDF_MAC_ADDR_BCAST_INIT. Replace all usages with the new macro.
Change-Id: Ie5c0816f82169d5e0c831a3166957dc59c1d4ccb
CRs-Fixed: 2176474
When gApAutoChannelSelection is set to 1 in ini, HOST driver ACS
runs in wlan_hdd_cfg80211_start_bss() with all the channel width,
hw mode and start and end channel parameters overridden with the
values from ini. After scan on all the channels, a weight is
assigned to all the channels based on rssi and no. of BSS present
on that channel. Weights of all the channels not present in the
scan list remains 0 as no scan happened on those channels and so
BSS count is 0 and RSSI is max. As the channel with lowest weight
is selected, channel which is not even present in scan list is getting
selected.
Assign SAP_ACS_WEIGHT_MAX to all the channels not in the scan list so
only one of the channel present in scan list gets selected after ACS
algorithm is completed.
Change-Id: Ic567c412ec7f68e2bb5d12e8e982650e56fd0488
CRs-Fixed: 2164979
Sometime data path is sending packets but ce handler have been
freed when SSR recovering.
Do txrx detach before driver free ce handler.
Change-Id: I0290cc6bf4e4087754fcdd7ae1fe058b8b2e68d2
CRs-Fixed: 2166232