As part of converged init deinit architecuture, all the target
capabilities are saved as part of target_psoc_info, use the same
to update.
CRs-Fixed: 2178726
Change-Id: Iad1d0224e0fdfe1140d1600e17f3e585142eaf63
If wma_send_msg with msg_type WMA_SET_LINK_STATE_RSP, tpLinkStateParams
params has a member callbackArg which is malloc from heap. If this
message is flushed when driver unload, because no msg.flush_callback is
supplied, the flush just free msg->bodyptr and callbackArg got leak.
Fix it by supply a flush_callback as wma_discard_fw_event, and minor
change to avoid NULL pointer access.
Change-Id: Ie979a1e83cbd7c87e5bbb08382ae2af3230a13db
CRs-Fixed: 2181458
If hdd_ipa_init failes, driver cleanup is done. But return value
of hdd_ipa_init is not saved and returned to caller. This will
lead to wrong behaviors if following actions depend on the
return value.
Fix is to save return value of hdd_ipa_init.
Change-Id: Iad10733c8fcb7049aa9573ccd1da51250aa7fddf
CRs-Fixed: 2181510
Currently type conversion issues are for variables compl_msg
and pool_numap_payload. This may cause potential buffer over-read.
To address this issue add check for structure size.
Change-Id: Id4804eeaf5e80a9045f1c057fa4cb9db15c1ab7d
CRs-Fixed: 2148306
When the country code is changed, it needs to call
the new cfg80211 api cfg80211_send_reg_change_event
to sync the user-space info.
Change-Id: I1e31ff122f9337c353d8be260b4802cc363790d6
CRs-Fixed: 2183992
Currently variable "num_mpdu_ranges" is from message, which is used
directly without any validation which causes buffer over-write.
To address this issue add check for the valid num_mpdu_ranges
Change-Id: I3f340b913f3063b24c14644ea723a99690e89dcf
CRs-Fixed: 2146934
Currently wake_info->vdev_id, recevied from the FW, is directly used
to refer to wma->interfaces without validating if the vdev_id is valid.
Add sanity check to make sure vdev_id is less than max_bssid before
using it.
Change-Id: I66be7d15f370d0204e25c3d0ea60c0c9f5912005
CRs-Fixed: 2121059
Remove dependency on WMA layer for green AP component by registering
green AP events through target_if layer.
Change-Id: Ic4ea8df1928db632b8e31f0a873b74c6aff4505d
CRs-Fixed: 2167028
Currently, driver does not release resources acquired when
starting OCB adapter. So there is memory leak when stopping
OCB adapter.
CRs-Fixed: 2182236
Change-Id: I693f5ed86f55b00980f16cca1bb0567429a20385
Wlan driver probe callback is called in
CNSS work thread(cnss_driver_event_work in
cnss_powerup).
In case the hdd_wlan_startup failed, and
doing cleanup in hdd_wlan_stop_modules,
the later will call and pending on pld_power_off
to wait for cnss completion. So, deadlock
happended.
Don't need to call power_down because we are in
(driver loading).
Fix by check driver loading state to skip
power_down.
Change-Id: Ib8605d91e01277ccdf4a67e09723c3ee34ceec0d
CRs-Fixed: 2183039
Logically, minimum value of gAutoChannelSelectWeight ini
should be 0 but as CFG_AUTO_CHANNEL_SELECT_WEIGHT_MIN is
defined as 0x1, when user assigns gAutoChannelSelectWeight
as 0 in ini file, it is not taking effect and default value
of 0xff gets assigned as 0 is out of bound of [min,max]
range.
Assign CFG_AUTO_CHANNEL_SELECT_WEIGHT_MIN as 0 instead of 1.
Change-Id: I025fd2af757ca1f169b6f1a155ee9f041398c6fa
CRs-Fixed: 2181422
HDD_IPA_CHECK_HW limits to Helium and IPAv3 only.
Fix is to extend support to all platforms as long as IPA_OFFLOAD
is defined.
Change-Id: I35ac2cee58e242060757465e3870327d3c06673e
CRs-Fixed: 2182459
Cleanup abort scan called from CSR and LIM by calling
ucfg_scan_cancel api to abort the scan.
Change-Id: Ie146c60a1888a55b0da295864a9edc083fc36d1a
CRs-Fixed: 2180189
As part of converged architecture use the converged
target resource configuration.
CRs-Fixed: 2178610
Change-Id: Ic0e3cbddea3c216688eb16c4e9a8045c7a0a1e9e
Initial changes for the init deinit convergence wherein
service ready, extended service ready and init cmd are
converged.
Change-Id: I1c1fd50f51362f4f09561c259961e6761429fcd0
CRs-Fixed: 2178590
Count of htt tx buffer pool should be power of 2 for fail case. For
Rome platform, it does not unmap nbuf when free htt tx buffer pool.
Change-Id: I85a9a1d02bf403f1be7289b1a0a89f86ef25f763
CRs-Fixed: 2179770
Beacon template may get updated from many use cases like change in
protection mode, update in CSA count and etc. Make sure that the driver
maintains the beacon count which is same as in beacon template, otherwise
there may be duplicate/missing beacon count due to inconsistency.
Decrement the beacon count value before updating the beacon template.
Change-Id: I0c4552445071dd6ab5322191c04d4f7d32c9a987
CRs-Fixed: 2170097
In monitor mode during driver unload VDEV, PDEV and PSOC objects
are leaking because stop adapter is not cleaning up monitor mode
vdev. Destroy monitor mode vdev object during stop adapter such
that VDEV object and its parent PDEV, PSOC objects can be cleaned
up properly.
Change-Id: I2fe41fd7aee96f731c33eff5bfa94cd3aafa401e
CRs-Fixed: 2182674
Current driver is using pld_wlan_set_dfs_nol() and pld_wlan_get_dfs_nol()
directly through eSAP_DFS_NOL_SET and eSAP_DFS_NOL_GET case statements
respectively within HDD module. These methods are obsoleted as per
new driver design.
Use DFS component's utils_dfs_init_nol() and utils_dfs_save_nol() APIs
instead to get and set DFS NOL respectively.
Change-Id: I63e8adac3f99c2052c26e6b01d19071f098e0a4f
CRs-Fixed: 2172024
Ignore the disassociation and deauthentication requests from
the old AP once roaming is in progress. Memorize the
received disassoc/deauth. If the roaming is not successful
and current AP's connection is retained, then the earlier
received disassoc/deauth can be honored and disconnect can
be triggered internally.
Change-Id: I5fa4d154c17e08904d839b8a889020680d662021
CRs-Fixed: 2160681
With FTM modification, compiler is throwing
'implicit declaration of function' warning, and treated as error.
Change-Id: I2341685ff6e25fcef25a6ae7bed365481e9d529c
CRs-Fixed: 2182458
Enabling SU beamformee in vendor vht IE gives good throughput in long
range while bad throughput in short range due to excessive sounding
action frames sent by APs.
So to give control to the user, add INI "enable_subfee_vendor_vhtie"
to enabled/disable the SU beamformee in vendor vht IE. It is
dependend on INI "gTxBFEnable" and if "gTxBFEnable" is set to 0
this will not have any effect and SU beam forming will always be
disabled.
Change-Id: Id67ea86d3e0a48fec8913d6254733f753dfdae8b
CRs-Fixed: 2178940
In ol_txrx_peer_release_ref, it is possible that this function is
scheduled out when just unlock peer_ref_mutex, unmap event will
come to decrease ref_cnt and free peer object, when
ol_txrx_peer_release_ref is scheduled back and access peer info,
it will cause use-after-free.
Get peer info in the protection of peer_ref_mutex.
Change-Id: Ic442f53e0993a931c4411d9dbc85f04d6a85dc46
CRs-Fixed: 2180584
Add support to parase and include the ADDBA extesion
element in ADDBA request and response frames
Change-Id: Ifab94f77ff9d2757794d5530fee6596534a6d73b
CRs-Fixed: 2166790
