samsung-sm8650/android_kernel_samsung_sm8650-modules
1
0
Fork 0
Koodi Ongelmat Pull-pyynnöt Actions Paketit Projektit Julkaisut Wiki Toiminta

qcacmn: Keep rx_refill_buf_ring using index pdev->lmac_id under MCL case

Selaa lähdekoodia 
Fix static analysis issue of rx_refill_buf_ring buffer overflow.
rx_refill_buf_ring length is different for WIN/MCL. For MCL length is 1,
WIN is 3. So rx_refill_buf_ring should always use index pdev->lmac_id to
replenish rx buffer for different MACs under MCL.

Change-Id: I00af069c09c01a81ae4aa54bad5beb79dc6fcff5
CRs-Fixed: 2703683
This commit is contained in:
Ben Wang
2020-06-03 20:37:49 +08:00
committed by nshrivas
vanhempi aab74f76ee
commit 909e4e1893
2 muutettua tiedostoa jossa 12 lisäystä ja 3 poistoa
Download Patch File Download Diff File Expand all files Collapse all files

5
dp/wifi3.0/dp_rx_err.c
Näytä tiedosto

@@ -2264,7 +2264,10 @@ dp_rxdma_err_process(struct dp_intr *int_ctx, struct dp_soc *soc,
dp_srng_access_end(int_ctx, soc, err_dst_srng);
if (rx_bufs_used) {
dp_rxdma_srng = &soc->rx_refill_buf_ring[mac_id];
if (wlan_cfg_per_pdev_lmac_ring(soc->wlan_cfg_ctx))
dp_rxdma_srng = &soc->rx_refill_buf_ring[mac_id];
else
dp_rxdma_srng = &soc->rx_refill_buf_ring[pdev->lmac_id];
rx_desc_pool = &soc->rx_desc_buf[mac_id];
dp_rx_buffers_replenish(soc, mac_id, dp_rxdma_srng,