samsung-sm8650/android_kernel_samsung_sm8650-modules
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

qcacmn: Get the correct MSDU length in the RX path

Browse Source 
Skb under panic issue is seen when a packet comes via RX err path,
MSDU length read by SW is coming as 0 and leaving no space for skb_push
in buffer, data is moving beyond the head and causing the issue.
MSDU length is read by generic API which is architecture-independent,
hence the struct size for one architecture is different from another
architecture.

FIX is to get the MSDU length by architecture-specific API.

Change-Id: I5a6259034e5e06ae9ce7ba6b135b44f2849f2fd9
CRs-Fixed: 3235636
This commit is contained in:
Devender Kumar
2022-07-04 20:39:59 +05:30
committed by Madan Koyyalamudi
parent 81d963fc50
commit e198badbe6
5 changed files with 105 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

21
hal/wifi3.0/qca5018/hal_5018.c
View File

@@ -150,6 +150,25 @@ static uint32_t hal_rx_msdu_start_nss_get_5018(uint8_t *buf)
return qdf_get_hweight8(mimo_ss_bitmap);
}
/**
* hal_rx_msdu_start_get_len_5018(): API to get the MSDU length
* from rx_msdu_start TLV
*
* @ buf: pointer to the start of RX PKT TLV headers
* Return: (uint32_t)msdu length
*/
static uint32_t hal_rx_msdu_start_get_len_5018(uint8_t *buf)
{
struct rx_pkt_tlvs *pkt_tlvs = (struct rx_pkt_tlvs *)buf;
struct rx_msdu_start *msdu_start =
&pkt_tlvs->msdu_start_tlv.rx_msdu_start;
uint32_t msdu_len;
msdu_len = HAL_RX_MSDU_START_MSDU_LEN_GET(msdu_start);
return msdu_len;
}
/**
* hal_rx_mon_hw_desc_get_mpdu_status_5018(): Retrieve MPDU status
*
@@ -1842,6 +1861,8 @@ static void hal_hw_txrx_ops_attach_qca5018(struct hal_soc *hal_soc)
hal_soc->ops->hal_setup_link_idle_list =
hal_setup_link_idle_list_generic_li;
hal_soc->ops->hal_compute_reo_remap_ix0 = NULL;
hal_soc->ops->hal_rx_tlv_msdu_len_get =
hal_rx_msdu_start_get_len_5018;
};
struct hal_hw_srng_config hw_srng_table_5018[] = {