80073 Commits

Author SHA1 Message Date
Linux Build Service Account
26af457411 Merge "fw-api: CL 29472287 - update fw common interface files" 2025-06-16 06:36:12 -07:00
Linux Build Service Account
60e8a3dc85 Merge "fw-api: CL 29472280 - update fw common interface files" 2025-06-16 06:36:11 -07:00
spuligil
334c788a2c fw-api: CL 29499792 - update fw common interface files
Change-Id: I3efe2e954c3945c86bb6c4d8020bf97fbd66d5cb
CRs-Fixed: 3830439
2025-06-16 06:03:09 -07:00
Aman Kumar
e6e06b8be8 icnss2: Add lock in wpss unload to avoid race
This change adds mutex locks to avoid null pointer
dereference in case wpss unload is called
simultaneously from differenet threads.

Change-Id: I0d189d670976ffd6bffbbebb6ed37182d37d1fb3
CRs-Fixed: 4181357
2025-06-16 16:50:06 +05:30
QCTECMDR Service
f4d219a2b9 Merge "cnss2: Treat non-negative val returned by qmi_txn_wait as success" 2025-06-16 01:45:54 -07:00
Sanskar Omar
4b3ec8c656 msm: sde: disable ABC hardware during encoder disable
ABC block should be disabled when encoder is being disabled to avoid
display hang when all driver clients have been closed.
Change disables ABC hardware block when encoder is disabled.

Change-Id: Idb41f5162b629ab1c0bdd85d906d9faa41f587fa
Signed-off-by: Sanskar Omar <quic_sansomar@quicinc.com>
(cherry picked from commit c011cb9be3b8763df939a3390924ccaf5a6d7c0e)
2025-06-15 21:58:20 -07:00
Linux Build Service Account
af67485a43 Merge "fw-api: CL 29472274 - update fw common interface files" 2025-06-15 19:36:35 -07:00
Linux Build Service Account
d01c0e2dff Merge "fw-api: CL 29449928 - update fw common interface files" 2025-06-15 19:36:35 -07:00
Linux Build Service Account
28d97ad406 Merge "fw-api: CL 29449355 - update fw common interface files" 2025-06-15 19:36:35 -07:00
Yahui Wang
345ee0f7cb disp: msm: dp: use pbn_no_overhead for TU calculation
In the calculation method for TU, current code is using
pbn value which is after dsc overhead, correct it by
replacing with pbn_no_overhead.

Change-Id: I1158e32cacd04526aa69d2d2ec085548344f5b7f
Signed-off-by: Yahui Wang <quic_yahuiw@quicinc.com>
2025-06-15 18:34:35 -07:00
spuligil
1f9b672143 fw-api: CL 29498712 - update fw common interface files
Change-Id: Iec789f4373995dc0af8a306e3aa4886a93eec9d9
CRs-Fixed: 3830439
2025-06-15 06:04:15 -07:00
spuligil
e01662d785 fw-api: CL 29497269 - update fw common interface files
Change-Id: Ia490ff308a2f0f97e7cb0da156a5ee95c64923df
CRs-Fixed: 3830439
2025-06-15 06:02:53 -07:00
spuligil
4624e4efd2 fw-api: CL 29496038 - update fw common interface files
Change-Id: I955cc936adf959fd95327171b4a789c5261e15a1
CRs-Fixed: 3830439
2025-06-14 06:04:36 -07:00
spuligil
e7a6cd32d9 fw-api: CL 29495802 - update fw common interface files
Change-Id: I10441e94eb35209519448701ecb78027a6fd30b9
CRs-Fixed: 3830439
2025-06-14 06:02:53 -07:00
Ravindra Konda
b894559a88 Release 5.2.1.122L
Release 5.2.1.122L

Change-Id: I3de0590c69358207d7e0c6d082e2628ad2be8d37
CRs-Fixed: 774533
2025-06-13 09:47:20 -07:00
Dharmendra Tiwari
942a7e8205 Revert "qcacld-3.0: SMPS support is disabled in the assoc req IE"
This reverts commit Ic818b40563c610918f1e4e918f598cefc5c082b2.

Reason for revert: Disable D-SMPS by default, it can be enabled via INI
when required, as was the case before.

Change-Id: Icafadc3ec82afad8971f70f17b05291646868047
CRs-Fixed: 4171036
2025-06-13 09:47:19 -07:00
spuligil
ae432b7677 fw-api: CL 29472287 - update fw common interface files
Change-Id: I4216587effd2b89f106fd2c25bd4a830da453cb2
CRs-Fixed: 3830439
2025-06-13 06:06:21 -07:00
spuligil
d752352447 fw-api: CL 29472280 - update fw common interface files
Change-Id: I3b466f9b5326dd43500d1712489423fb1536dd6d
CRs-Fixed: 3830439
2025-06-13 06:04:37 -07:00
spuligil
e860e2a02c fw-api: CL 29472274 - update fw common interface files
Change-Id: Ieae923eaa45f1fe4a1cd149e69f41497b3d34a25
CRs-Fixed: 3830439
2025-06-13 06:03:06 -07:00
Linux Build Service Account
f317378345 Merge "fw-api: CL 29412107 - update fw common interface files" 2025-06-13 00:06:30 -07:00
Abhilash Mahapatra
82fd5dba74 msm: camera: tpg: Proper cmd descriptor handling
Changes include proper validation of received
cmd_buffer_size wrt cmd_desc size.
Proper validation of cmd desc offset and cmd
header size. Also copied cmd_header locally to
avoid toctou vulnerability.

EDV: tpg
CRs-Fixed: 3834979
CRs-Fixed: 4071376
Change-Id: Ie7f09d48aec1bccc1a87a0ae6a1670b8fcaf6745
Signed-off-by: Abhilash Mahapatra <quic_abhmah@quicinc.com>
Signed-off-by: Naveen K <quic_knav@quicinc.com>
2025-06-12 06:10:40 -07:00
QCTECMDR Service
5bf8084ca4 Merge "cnss2: add debugfs action to collect BT FW dump over WLAN" 2025-06-12 01:51:27 -07:00
Yu Wang
1cca025110 cnss2: add quirk bit to prevent PCIe link resume
Add PREVENT_PCI_LINK_RESUME(bit 14) in quirks to prevent
link resume, which can be used to simulate unrecoverable
PCIe link down.
It's a one-time configuration that will be cleared after
WLAN chip power off.

Usage:
echo quirks 0x4000 > /d/cnss/control_params

Change-Id: Ie497bfb7bb9d0e686599948195141fa76fb29a56
CRs-Fixed: 4180692
2025-06-12 01:18:57 -07:00
Yu Wang
12f927b914 cnss2: Print xdump capabilities in a consistent format
To avoid confusion, print xdump capabilities in following format:
<indicated>: <wl_over_bt> - <bt_over_wlan>
indicated: 1 means the capability has been set explicitly, 0 otherwise
wl_over_bt: 1 means collecting WLAN dump over BT is enabled, 0 otherwise
bt_over_wl: 1 means collecting BT dump over WLAN is enabled, 0 otherwise

Change-Id: Ib0e8bfd95ecf82e84e39513fcce8dca36ea4a997
CRs-Fixed: 4180626
2025-06-12 00:39:26 -07:00
Aditya Kodukula
1a6e686870 cnss2: Update platform name with build type
Update the platform name if KASAN feature is enabled.

Change-Id: I530b7538bb2f69614cde2d070347f2a8d4dfbdfe
CRs-Fixed: 4176610
2025-06-11 11:58:11 -07:00
spuligil
43a2892bd4 fw-api: CL 29449928 - update fw common interface files
Change-Id: Ifc6fc413409c84216fa58b18e31b9686aabf4d82
CRs-Fixed: 3830439
2025-06-11 06:04:34 -07:00
spuligil
e2fc0fc137 fw-api: CL 29449355 - update fw common interface files
Change-Id: Ic7352b94c01759b826b1ab9251207773abc53c07
CRs-Fixed: 3830439
2025-06-11 06:02:49 -07:00
Lin Bai
7f5e7ca3cd cnss2: Treat non-negative val returned by qmi_txn_wait as success
Return value of qmi_txn_wait() indicates the number of bytes
decoded from QMI response.
Its caller should recognize non-negative return value as
success.

Change-Id: I04ec59c9bdd66bd14eb74440153ab7bf788cfbbb
CRs-Fixed: 4177030
2025-06-11 14:05:22 +08:00
Yu Wang
ec472a7411 cnss2: add debugfs action to collect BT FW dump over WLAN
Introduce the action 'xdump_bt_over_wl' for the existing
debugfs entry 'dev_boot' to facilitate the collection of
Bluetooth firmware dumps over WLAN.

Usage:
echo xdump_bt_over_wl > <debugfs_path>/cnss/dev_boot

To successfully execute this action, you must first enable
the feature 'Collect BT dump over WLAN' using the following
command and ensure that Wi-Fi remains enabled:
echo 2 > <sysfs_path>/cnss/user_config

Change-Id: I2a610e5d78e36a26af3132d6ab4ec14282efa6fd
CRs-Fixed: 4178495
2025-06-10 20:52:21 -07:00
Linux Build Service Account
49aa3b7a1a Merge "dsp-kernel: Avoid overflow in ALIGN macro usage" into dsp-kernel.lnx.2.0.r1-rel 2025-06-10 20:27:45 -07:00
Ravindra Konda
d499c1a336 Release 5.2.1.122K
Release 5.2.1.122K

Change-Id: Ibc652a69d6813809c14076e1041f6e7918949041
CRs-Fixed: 774533
2025-06-10 16:16:42 -07:00
Gururaj Pandurangi
02d09dfa37 qcacld-3.0: Remove logic to offset power constraint from reg power
During TPC power calculation, if AP advertises power constraint IE via
beacons, STA stores it and offsets it from the regulatory power limit
for that channel. But as per 802.11, this value needs to be offset from
country IE power instead. This logic causes further reduction of tx
power, hence remove the logic to offset value from power constraint IE
with the regulatory power limit.

CRs-Fixed: 4139560
Change-Id: Ie2b4ff4fb59c79c80e189e652c58f391f37cd525
2025-06-10 16:16:41 -07:00
Aditya Kodukula
09a1591635 Revert "cnss2: Add support to build ETM driver variant"
This reverts commit I04ec59c9bdd66bd14eb74440153ab7bf788cfbba to
avoid compilation issues.

Change-Id: Id58f5a26d6dbc90ad5970fb04cf432a86eac29ca
CRs-Fixed: 4178204
2025-06-10 12:06:31 -07:00
Ravindra Konda
80b06b5325 Release 5.2.1.122J
Release 5.2.1.122J

Change-Id: I5aa4242f81b66ae9136e2be0ff38c1f66a952482
CRs-Fixed: 774533
2025-06-10 08:07:00 -07:00
Abhishek Singh
a4bcdfd7d7 qcacld-3.0: Do not update the bearer switch state in case of reject
In case host receive a bearer state switch request to non-WLAN
which is initiated by other modules, it moves the state to non-WLAN
without checking the status of the request.

If request was not accepted, then there is no need to change the
bearer state to non-WLAN.

Change-Id: I13f59fedab1d7de92a1c417f87cc9c94f726a8b8
CRs-Fixed: 4166198
2025-06-10 08:06:59 -07:00
Linux Build Service Account
9020897c6f Merge "qcacmn: Fix smmu iova address leak during tx completion" into wlan-cmn.driver.lnx.2.0.r153-rel 2025-06-10 04:58:23 -07:00
Manikanta Pubbisetty
2cc48186c9 qcacmn: Fix smmu iova address leak during tx completion
When RX page pool buffers are forwarded by the network back to the
driver for TX, driver DMA maps the TX buffer but unmap during the
completion is skipped because the packet is still a page pool buffer.
This is leaking the IOVA address space, eventually no room will be
left for other DMA operations which results in DMA map failures.

Fix SMMU IOVA address leak in the TX completion path because of
page pool buffers.

CRs-Fixed: 4153855
Change-Id: I73468b3add2887f0093f770b1621dcc9c6054cd0
2025-06-10 16:24:29 +05:30
Manikanta Pubbisetty
3f111f2fae qcacmn: Fix null dma address mapping for page pool buffers
Currently in a case where only RX page pool is enabled, when RX page
pool buffers are forwarded by the network stack to the driver for
TX due to IP forwarding, it is resulting in a NULL DMA address mapping.
Since the RX page pool NBUFs have struct sk_buff::pp_recycle flag set,
driver will end up calling dma_sync_single_for_device() for taking
care of the cache ops in the transmit direction. When TX page pool
feature is not enabled, NULL DMA address will be passed to the
dma_sync_single_for_device() API resulting in assert.

Check the status of TX page pool feature before invoking
dma_sync_single_for_device() to fix this issue.

CRs-Fixed: 4145181
Change-Id: I8ddb8f020d9a9d9fe6d8d969a58ecbcad7b52062
(cherry picked from commit cb44c3edd5)
2025-06-10 16:23:35 +05:30
Ravindra Konda
2d00c68611 Release 5.2.1.122I
Release 5.2.1.122I

Change-Id: I839cb21991fb65e978277d1a3790b088b36b012b
CRs-Fixed: 774533
2025-06-10 03:24:20 -07:00
Aasir Rasheed
f451e6fe65 qcacld-3.0: Use pe session channel width for peer assoc
Use PE session channel width for peer association.
Validate and update any invalid channel width to
the maximum supported value.

Change-Id: Iac2b8368a0c51d2847786252a94212a08d6f7191
CRs-Fixed: 4161351
2025-06-10 03:24:19 -07:00
Anandu Krishnan E
52356c2e3f dsp-kernel: Avoid overflow in ALIGN macro usage
Check for potential overflow before using the ALIGN macro,
as it is not overflow-safe.

Change-Id: Iffa1b7a01a9e072fb748c93f6625d0f1a163d0f8
Signed-off-by: Anandu Krishnan E <quic_anane@quicinc.com>
(cherry picked from commit 96a6c4a8768f73ba9041c15511f0d5888507c8f4)
(cherry picked from commit 3a674559cd2e1ec5e04de8510d5bb3c60d8f9ad5)
2025-06-10 03:08:06 -07:00
Kaival Prajapati
ec243be9d0 dsp-kernel: UAF occurs if take_ref is false in fastrpc_create_maps.
Thread1 initiates fastrpc_req_mem_map and creates a map with a
reference count of 1. Meanwhile, Thread2 calls fastrpc_get_args,
and if take_ref is false, and it finds the same map with a
same reference count of 1. Subsequently, Thread1 encounters a failure
and triggering fastrpc_map_put, which decreases the reference count
and frees the map. However, Thread2 continues to use the map, leading
to issues because the map is already freed.

Change-Id: Ie7f58852d9e2d6b3655cf4a6ab45e8701aa46f87
Signed-off-by: Kaival Prajapati <quic_kaivpraj@quicinc.com>
(cherry picked from commit 92ac13b0ae)
2025-06-10 03:07:45 -07:00
Prasad Kumpatla
6da7380f2b ASoC: codec: wcd939x: fix out-of-bounds access in xtalk_put/get()
Add range validation in wcd939x_xtalk_put() and wcd939x_xtalk_get()
to prevent out-of-bounds array access. The functions now return an
error if the provide index is outside the valid range.

Change-Id: I3975a6af8cddd73f7b1a9a6bd8bc1b3328977735
Signed-off-by: Prasad Kumpatla <quic_pkumpatl@quicinc.com>
2025-06-10 15:26:16 +05:30
Ravindra Konda
9c57f9108f Release 5.2.1.122H
Release 5.2.1.122H

Change-Id: I5928e64cb89de0f3867db2533c5ebc6a6fecb14d
CRs-Fixed: 774533
2025-06-10 01:28:01 -07:00
Jianmin Zhu
c2070b1415 qcacld-3.0: STA connect fail during SAP CSA from DFS freq
During SAP CSA from DFS freq to Non-DFS freq, STA connect happens,
will try to move SAP out of DFS freq too, return failed for channel
switch in progress.

To void it, if found DFS SAP in channel switch in progress state,
wait for channel switch finished.

Change-Id: Icd6abf35a8243ec518dd1fb9d7b24198e262b73a
CRs-Fixed: 4170205
2025-06-10 01:28:00 -07:00
Asutosh Mohapatra
7097ab0926 qcacmn: Handling Dummy Netdev Allocation in Kernel 6.13+
With the introduction of kernel version 6.13, the init_dummy_netdev
symbol has been made static and is no longer exported. Consequently,
drivers must now utilize alloc_netdev_dummy() to allocate and
initialize dummy network devices.

The current implementation defines the net_device structure as a
static instance within the driver. However, since alloc_netdev_dummy()
dynamically allocates and initializes the dummy netdev, assigning its
return value to a statically defined structure is incorrect and leads
to undefined behavior.

To address this, a pointer to a net_device structure should be added to
the host context. The driver should store the pointer returned by
alloc_netdev_dummy() in this new member. Additionally, appropriate
cleanup logic must be implemented to free the allocated dummy netdev
during driver teardown.

Change-Id: I1d234d003e3ba99e0d91727a09c228ec1a3822c4
CRs-Fixed: 4158403
2025-06-09 23:07:39 -07:00
Ravindra Konda
eff6b3349a Release 5.2.1.122G
Release 5.2.1.122G

Change-Id: Ie1d9871689754873232094f646a950f50ca11335
CRs-Fixed: 774533
2025-06-09 23:06:41 -07:00
Asutosh Mohapatra
35eae45f4e qcacld-3.0: Handling Dummy Netdev Allocation in Kernel 6.13+
With the introduction of kernel version 6.13, the init_dummy_netdev
symbol has been made static and is no longer exported. Consequently,
drivers must now utilize alloc_netdev_dummy() to allocate and
initialize dummy network devices.

The current implementation defines the net_device structure as a
static instance within the driver. However, since alloc_netdev_dummy()
dynamically allocates and initializes the dummy netdev, assigning its
return value to a statically defined structure is incorrect and leads
to undefined behavior.

To address this, a pointer to a net_device structure should be added to
the host context. The driver should store the pointer returned by
alloc_netdev_dummy() in this new member. Additionally, appropriate
cleanup logic must be implemented to free the allocated dummy netdev
during driver teardown.

Change-Id: I8eda57fd3ece411579f2d3eb2f1249c2905bbeac
CRs-Fixed: 4158431
2025-06-09 23:06:40 -07:00
Ravindra Konda
ceceb1952b Release 5.2.1.122F
Release 5.2.1.122F

Change-Id: Iaa7c59e03e630c76ac34031f7c364adac6d919b0
CRs-Fixed: 774533
2025-06-09 21:11:51 -07:00
Zhiwei Yang
c9ac14de2c qcacld-3.0: Fix NAN+SAP SCC failure issue
In non-DBS HW, starting SAP on the same channel as NAN will fail.

To fix this, When checking the availability of the channel used to
start SAP, NDI and NAN Discovery should not be considered as home
channel, they do not interfere with SAP startup.

Change-Id: If14018a3519443e807de37e74a86bb3c25b3589c
CRs-Fixed: 4123320
2025-06-09 21:11:50 -07:00