fcdcc1005f
Skbs allocated for CE1 ring are of size 2048 bytes. On receiving PPDU stats HTT message, skb is pulled for 8 bytes corresponding to the HTC header length. As part of dp_ppdu_stats_ind_handler, skb len is set to HTT_MAX_MSG_SIZE. In the case where skb allocation is exactly of 2048 bytes, including HTC header length, the aforementioned set_len causes the skb to be expanded due to lack of tailroom. This causes the skb data pointer to be changed which results in invalid memory access. Fix is to remove the qdf_nbuf_set_pktlen as skb len is appropriately set by HTC layer. Change-Id: Ied68c30456dc0e263ccfd03102962233a0e43d9f CRs-Fixed: 2777516
This is CNSS WLAN Host Driver for products starting from iHelium