mirror of
https://mirrors.bfsu.edu.cn/git/linux.git
synced 2024-12-29 22:14:41 +08:00
ath6kl: Report unique remain-on-channel cookie values
Even though only a single concurrent remain-on-channel operation is supported, there may be two pending remain-on-channel events (one to indicate end of a canceled operation and another to indicate start of a new operation). User space won't be able to distinguish these events unless unique cookies are used. The previous behavior resulted in wpa_supplicant getting quite confused about the driver's offchannel state in various sequences and this made the P2P state machine behave incorrectly. Use of more than a single remain-on-channel cookie value fixes this. Signed-off-by: Jouni Malinen <jouni@qca.qualcomm.com> Signed-off-by: Kalle Valo <kvalo@qca.qualcomm.com>
This commit is contained in:
parent
f7830202c3
commit
1052261e4b
@ -1932,10 +1932,16 @@ static int ath6kl_remain_on_channel(struct wiphy *wiphy,
|
||||
{
|
||||
struct ath6kl *ar = ath6kl_priv(dev);
|
||||
struct ath6kl_vif *vif = netdev_priv(dev);
|
||||
u32 id;
|
||||
|
||||
/* TODO: if already pending or ongoing remain-on-channel,
|
||||
* return -EBUSY */
|
||||
*cookie = 1; /* only a single pending request is supported */
|
||||
id = ++vif->last_roc_id;
|
||||
if (id == 0) {
|
||||
/* Do not use 0 as the cookie value */
|
||||
id = ++vif->last_roc_id;
|
||||
}
|
||||
*cookie = id;
|
||||
|
||||
return ath6kl_wmi_remain_on_chnl_cmd(ar->wmi, vif->fw_vif_idx,
|
||||
chan->center_freq, duration);
|
||||
@ -1948,8 +1954,9 @@ static int ath6kl_cancel_remain_on_channel(struct wiphy *wiphy,
|
||||
struct ath6kl *ar = ath6kl_priv(dev);
|
||||
struct ath6kl_vif *vif = netdev_priv(dev);
|
||||
|
||||
if (cookie != 1)
|
||||
if (cookie != vif->last_roc_id)
|
||||
return -ENOENT;
|
||||
vif->last_cancel_roc_id = cookie;
|
||||
|
||||
return ath6kl_wmi_cancel_remain_on_chnl_cmd(ar->wmi, vif->fw_vif_idx);
|
||||
}
|
||||
|
@ -427,6 +427,8 @@ struct ath6kl_vif {
|
||||
struct cfg80211_scan_request *scan_req;
|
||||
enum sme_state sme_state;
|
||||
int reconnect_flag;
|
||||
u32 last_roc_id;
|
||||
u32 last_cancel_roc_id;
|
||||
u32 send_action_id;
|
||||
bool probe_req_report;
|
||||
u16 next_chan;
|
||||
|
@ -443,6 +443,7 @@ static int ath6kl_wmi_remain_on_chnl_event_rx(struct wmi *wmi, u8 *datap,
|
||||
u32 dur;
|
||||
struct ieee80211_channel *chan;
|
||||
struct ath6kl *ar = wmi->parent_dev;
|
||||
u32 id;
|
||||
|
||||
if (len < sizeof(*ev))
|
||||
return -EINVAL;
|
||||
@ -458,7 +459,8 @@ static int ath6kl_wmi_remain_on_chnl_event_rx(struct wmi *wmi, u8 *datap,
|
||||
"(freq=%u)\n", freq);
|
||||
return -EINVAL;
|
||||
}
|
||||
cfg80211_ready_on_channel(vif->ndev, 1, chan, NL80211_CHAN_NO_HT,
|
||||
id = vif->last_roc_id;
|
||||
cfg80211_ready_on_channel(vif->ndev, id, chan, NL80211_CHAN_NO_HT,
|
||||
dur, GFP_ATOMIC);
|
||||
|
||||
return 0;
|
||||
@ -473,6 +475,7 @@ static int ath6kl_wmi_cancel_remain_on_chnl_event_rx(struct wmi *wmi,
|
||||
u32 dur;
|
||||
struct ieee80211_channel *chan;
|
||||
struct ath6kl *ar = wmi->parent_dev;
|
||||
u32 id;
|
||||
|
||||
if (len < sizeof(*ev))
|
||||
return -EINVAL;
|
||||
@ -488,7 +491,13 @@ static int ath6kl_wmi_cancel_remain_on_chnl_event_rx(struct wmi *wmi,
|
||||
"channel (freq=%u)\n", freq);
|
||||
return -EINVAL;
|
||||
}
|
||||
cfg80211_remain_on_channel_expired(vif->ndev, 1, chan,
|
||||
if (vif->last_cancel_roc_id &&
|
||||
vif->last_cancel_roc_id + 1 == vif->last_roc_id)
|
||||
id = vif->last_cancel_roc_id; /* event for cancel command */
|
||||
else
|
||||
id = vif->last_roc_id; /* timeout on uncanceled r-o-c */
|
||||
vif->last_cancel_roc_id = 0;
|
||||
cfg80211_remain_on_channel_expired(vif->ndev, id, chan,
|
||||
NL80211_CHAN_NO_HT, GFP_ATOMIC);
|
||||
|
||||
return 0;
|
||||
|
Loading…
Reference in New Issue
Block a user