samsung-sm8650/android_kernel_samsung_sm8650-modules
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

qcacmn: Use cpu index for tx. ring id

Browse Source 
The list of SW descriptors that we create from the HW descriptors 
in DP Tx completion path is corrupted in intra-bss path. This is causing a
crash when corrupted descriptor is accessed.
The cause of corruption seems to be due to incorrect rings being accessed. 
Use cpu index to fetch tx. ring IDs.

Change-Id: I5342b7c4e24df983900fde79f36df8395bf628cb
CRs-Fixed: 3223420
This commit is contained in:
Neha Bisht
2022-07-25 10:25:36 +05:30
committed by Madan Koyyalamudi
parent 71cf1a4856
commit 173f9e6b1d
1 changed files with 2 additions and 4 deletions
Download Patch File Download Diff File Expand all files Collapse all files

6
dp/wifi3.0/dp_rx.c
View File

@@ -866,7 +866,6 @@ bool dp_rx_intrabss_mcbc_fwd(struct dp_soc *soc, struct dp_txrx_peer *ta_peer,
{ {
uint16_t len; uint16_t len;
qdf_nbuf_t nbuf_copy; qdf_nbuf_t nbuf_copy;
uint8_t ring_id = QDF_NBUF_CB_RX_CTX_ID(nbuf);
if (dp_rx_intrabss_eapol_drop_check(soc, ta_peer, rx_tlv_hdr, if (dp_rx_intrabss_eapol_drop_check(soc, ta_peer, rx_tlv_hdr,
nbuf)) nbuf))
@@ -890,7 +889,7 @@ bool dp_rx_intrabss_mcbc_fwd(struct dp_soc *soc, struct dp_txrx_peer *ta_peer,
qdf_mem_set(nbuf_copy->cb, 0x0, sizeof(nbuf_copy->cb)); qdf_mem_set(nbuf_copy->cb, 0x0, sizeof(nbuf_copy->cb));
dp_classify_critical_pkts(soc, ta_peer->vdev, nbuf_copy); dp_classify_critical_pkts(soc, ta_peer->vdev, nbuf_copy);
dp_rx_nbuf_queue_mapping_set(nbuf_copy, ring_id); dp_rx_nbuf_queue_mapping_set(nbuf_copy, qdf_get_cpu());
if (soc->arch_ops.dp_rx_intrabss_handle_nawds(soc, ta_peer, nbuf_copy, if (soc->arch_ops.dp_rx_intrabss_handle_nawds(soc, ta_peer, nbuf_copy,
tid_stats)) tid_stats))
return false; return false;
@@ -927,7 +926,6 @@ bool dp_rx_intrabss_ucast_fwd(struct dp_soc *soc, struct dp_txrx_peer *ta_peer,
struct cdp_tid_rx_stats *tid_stats) struct cdp_tid_rx_stats *tid_stats)
{ {
uint16_t len; uint16_t len;
uint8_t ring_id = QDF_NBUF_CB_RX_CTX_ID(nbuf);
len = QDF_NBUF_CB_RX_PKT_LEN(nbuf); len = QDF_NBUF_CB_RX_PKT_LEN(nbuf);
@@ -956,7 +954,7 @@ bool dp_rx_intrabss_ucast_fwd(struct dp_soc *soc, struct dp_txrx_peer *ta_peer,
qdf_mem_set(nbuf->cb, 0x0, sizeof(nbuf->cb)); qdf_mem_set(nbuf->cb, 0x0, sizeof(nbuf->cb));
dp_classify_critical_pkts(soc, ta_peer->vdev, nbuf); dp_classify_critical_pkts(soc, ta_peer->vdev, nbuf);
dp_rx_nbuf_queue_mapping_set(nbuf, ring_id); dp_rx_nbuf_queue_mapping_set(nbuf, qdf_get_cpu());
if (!dp_tx_send((struct cdp_soc_t *)soc, if (!dp_tx_send((struct cdp_soc_t *)soc,
tx_vdev_id, nbuf)) { tx_vdev_id, nbuf)) {
DP_PEER_PER_PKT_STATS_INC_PKT(ta_peer, rx.intra_bss.pkts, 1, DP_PEER_PER_PKT_STATS_INC_PKT(ta_peer, rx.intra_bss.pkts, 1,