linux.git/drivers/net/wireless/broadcom, branch v4.14-rc4

brcmfmac: setup passive scan if requested by user-space

2017-09-20T04:46:30+00:00

The driver was not properly configuring firmware with regard to the
type of scan. It always performed an active scan even when user-space
was requesting for passive scan, ie. the scan request was done without
any SSIDs specified.

Cc: stable@vger.kernel.org # v4.0.x
Reported-by: Huang, Jiangyang 
Reviewed-by: Hante Meuleman 
Reviewed-by: Pieter-Paul Giesberts 
Reviewed-by: Franky Lin 
Signed-off-by: Arend van Spriel 
Signed-off-by: Kalle Valo

brcmfmac: add length check in brcmf_cfg80211_escan_handler()

2017-09-20T04:46:29+00:00

Upon handling the firmware notification for scans the length was
checked properly and may result in corrupting kernel heap memory
due to buffer overruns. This fix addresses CVE-2017-0786.

Cc: stable@vger.kernel.org # v4.0.x
Cc: Kevin Cernekee 
Reviewed-by: Hante Meuleman 
Reviewed-by: Pieter-Paul Giesberts 
Reviewed-by: Franky Lin 
Signed-off-by: Arend van Spriel 
Signed-off-by: Kalle Valo

brcmfmac: feature check for multi-scheduled scan fails on bcm4345 devices

2017-09-08T09:25:24+00:00

The firmware feature check introduced for multi-scheduled scan is also
failing for bcm4345 devices resulting in a firmware crash.
The reason for this crash has not yet been root cause so this patch avoids
the feature check for those device as a short-term fix.

Fixes: 9fe929aaace6 ("brcmfmac: add firmware feature detection for gscan feature")
Cc:  # v4.13
Signed-off-by: Ian W MORRISON 
Acked-by: Arend van Spriel 
Signed-off-by: Kalle Valo

brcmfmac: Log chip id and revision

2017-08-31T12:58:39+00:00

For debugging some problems, it is useful to know the chip revision
add a brcmf_info message logging this.

Signed-off-by: Hans de Goede 
Acked-by: Arend van Spriel 
Signed-off-by: Kalle Valo

Merge git://git.kernel.org/pub/scm/linux/kernel/git/kvalo/wireless-drivers.git

2017-08-24T11:47:42+00:00

Stephen Rothwell reported quite a few conflicts in iwlwifi between
wireless-drivers and wireless-drivers-next. To avoid any problems later in
other trees merge w-d to w-d-next to fix those conflicts early.

brcmfmac: feature check for multi-scheduled scan fails on bcm4343x devices

2017-08-14T08:09:30+00:00

The firmware feature check introduced for multi-scheduled scan turned out
to be failing for bcm4343{0,1,8} devices resulting in a firmware crash.
The reason for this crash has not yet been root cause so this patch avoids
the feature check for those device as a short-term fix.

Reported-by: Stefan Wahren 
Reported-by: Ian Molton 
Fixes: 9fe929aaace6 ("brcmfmac: add firmware feature detection for gscan feature")
Signed-off-by: Arend van Spriel 
Signed-off-by: Kalle Valo

brcm80211: constify usb_device_id

2017-08-11T13:53:41+00:00

usb_device_id are not supposed to change at runtime. All functions
working with usb_device_id provided by  work with
const usb_device_id. So mark the non-const structs as const.

Signed-off-by: Arvind Yadav 
Signed-off-by: Kalle Valo

brcmfmac: add setting carrier state ON for successful roaming

2017-08-08T11:52:04+00:00

After association, ping is not working when sweeping the channel at the
AP side. It is caused by having incorrect carrier state (OFF) for the STA
in successful roaming. This patch sets the carrier state ON for the case.

Signed-off-by: Chung-Hsien Hsu 
Acked-by: Arend van Spriel 
Signed-off-by: Kalle Valo

brcmfmac: fix wrong num_different_channels when mchan feature enabled

2017-08-08T11:51:22+00:00

When the device/firmware supports multi-channel, it can have P2P
connection and regular connection with AP simultaneous. In this case,
the num_different_channels in wiphy info was not correct when firmware
supports multi-channel (The iw wiphy# info showed "#channels <= 1" in
interface combinations). It caused association failed and error message
"CTRL-EVENT-FREQ-CONFLICT error" in wpa_supplicant when P2P GO interface
was running at the same time.
The root cause is that the num_different_channels was always overridden
to 1 in brcmf_setup_ifmodes even multi-channel was enabled.
We correct the logic by moving num_different_channels setting forward.

Signed-off-by: Wright Feng 
Acked-by: Arend van Spriel 
Signed-off-by: Kalle Valo

brcmfmac: Add support for CYW4373 SDIO/USB chipset

2017-08-08T11:51:12+00:00

Add support for CYW4373 SDIO/USB chipset.
CYW4373 is a 1x1 dual-band 11ac chipset with 20/40/80Mhz channel support.
It's a WiFi/BT combo device.

Signed-off-by: Chi-Hsien Lin 
Reviewed-by: Arend van Spriel 
Signed-off-by: Kalle Valo