android_kernel_lge_bullhead/drivers/net/wireless/iwlwifi
Sara Sharon 8d83a53854 iwlwifi: pcie: fix access to scratch buffer
commit d5d0689aefc59c6a5352ca25d7e6d47d03f543ce upstream.

This fixes a pretty ancient bug that hasn't manifested itself
until now.
The scratchbuf for command queue is allocated only for 32 slots
but is accessed with the queue write pointer - which can be
up to 256.
Since the scratch buf size was 16 and there are up to 256 TFDs
we never passed a page boundary when accessing the scratch buffer,
but when attempting to increase the size of the scratch buffer a
panic was quick to follow when trying to access the address resulted
in a page boundary.

Signed-off-by: Sara Sharon <sara.sharon@intel.com>
Fixes: 38c0f334b3 ("iwlwifi: use coherent DMA memory for command header")
Signed-off-by: Luca Coelho <luciano.coelho@intel.com>
Signed-off-by: Willy Tarreau <w@1wt.eu>
2017-02-10 11:03:49 +01:00
..
dvm iwlwifi: dvm: fix D3 firmware PN programming 2015-11-09 10:12:57 -08:00
mvm iwlwifi: mvm: fix D3 firmware PN programming 2015-11-09 10:12:58 -08:00
pcie iwlwifi: pcie: fix access to scratch buffer 2017-02-10 11:03:49 +01:00
Kconfig iwlwifi: export symbols only conditionally 2013-03-06 16:47:56 +01:00
Makefile iwlwifi: make device configuration bus agnostic 2013-03-06 16:47:54 +01:00
iwl-1000.c iwlwifi: make device configuration bus agnostic 2013-03-06 16:47:54 +01:00
iwl-2000.c iwlwifi: make device configuration bus agnostic 2013-03-06 16:47:54 +01:00
iwl-5000.c iwlwifi: make device configuration bus agnostic 2013-03-06 16:47:54 +01:00
iwl-6000.c iwlwifi: pcie: add SKUs for 6000, 6005 and 6235 series 2013-11-13 12:05:31 +09:00
iwl-7000.c iwlwifi: pcie: fix interrupt coalescing for 7260 / 3160 2014-02-06 11:08:17 -08:00
iwl-agn-hw.h iwlwifi: a few fixes in license 2013-03-06 16:46:59 +01:00
iwl-config.h iwlwifi: pcie: fix interrupt coalescing for 7260 / 3160 2014-02-06 11:08:17 -08:00
iwl-csr.h iwlwifi: pcie: fix interrupt coalescing for 7260 / 3160 2014-02-06 11:08:17 -08:00
iwl-debug.c iwlwifi: export symbols only conditionally 2013-03-06 16:47:56 +01:00
iwl-debug.h iwlwifi: add the MVM driver 2013-02-01 11:27:15 +01:00
iwl-devtrace.c iwlwifi: update copyright 2013-01-24 13:00:55 +01:00
iwl-devtrace.h iwlwifi: use __get_str in tracing 2013-03-06 16:47:27 +01:00
iwl-drv.c iwlwifi: disable TX AMPDU by default for iwldvm 2014-03-23 21:38:12 -07:00
iwl-drv.h iwlwifi: export symbols only conditionally 2013-03-06 16:47:56 +01:00
iwl-eeprom-parse.c iwlwifi: export symbols only conditionally 2013-03-06 16:47:56 +01:00
iwl-eeprom-parse.h iwlwifi: a few fixes in license 2013-03-06 16:46:59 +01:00
iwl-eeprom-read.c iwlwifi: export symbols only conditionally 2013-03-06 16:47:56 +01:00
iwl-eeprom-read.h iwlwifi: a few fixes in license 2013-03-06 16:46:59 +01:00
iwl-fh.h iwlwifi: a few fixes in license 2013-03-06 16:46:59 +01:00
iwl-fw-file.h iwlwifi: a few fixes in license 2013-03-06 16:46:59 +01:00
iwl-fw.h iwlwifi: mvm: take the valid_{rx,tx}_ant from the TLV 2013-03-20 14:17:12 +01:00
iwl-io.c iwlwifi: export symbols only conditionally 2013-03-06 16:47:56 +01:00
iwl-io.h iwlwifi: add iwl_set_bits_mask to transport API 2013-02-01 11:27:22 +01:00
iwl-modparams.h iwlwifi: disable TX AMPDU by default for iwldvm 2014-03-23 21:38:12 -07:00
iwl-notif-wait.c iwlwifi: export symbols only conditionally 2013-03-06 16:47:56 +01:00
iwl-notif-wait.h iwlwifi: a few fixes in license 2013-03-06 16:46:59 +01:00
iwl-nvm-parse.c iwlwifi: mvm: don't allow A band if SKU forbids it 2014-02-22 12:41:26 -08:00
iwl-nvm-parse.h iwlwifi: a few fixes in license 2013-03-06 16:46:59 +01:00
iwl-op-mode.h iwlwifi: a few fixes in license 2013-03-06 16:46:59 +01:00
iwl-phy-db.c iwlwifi: export symbols only conditionally 2013-03-06 16:47:56 +01:00
iwl-phy-db.h iwlwifi: a few fixes in license 2013-03-06 16:46:59 +01:00
iwl-prph.h iwlwifi: pcie: enable oscillator for L1 exit 2014-02-06 11:08:17 -08:00
iwl-test.c iwlwifi: use kmemdup instead of kmalloc+memcpy 2013-03-20 14:17:07 +01:00
iwl-test.h iwlwifi: a few fixes in license 2013-03-06 16:46:59 +01:00
iwl-testmode.h iwlwifi: a few fixes in license 2013-03-06 16:46:59 +01:00
iwl-trans.h iwlwifi: configure the LTR 2014-11-21 09:22:53 -08:00