wlan: Fixed SME queue stuck issue which is causing EBUSY scan failure
When issue happens, SME will make eSmeCommandRoam as active command and
is stuck processing this command forever.
The reason for this is inability to send mgt frames as RX frames have
consumed all BD's
Fix is when limSendDeauthMgmtFrame fails to send deauth frame then call
callback function limProcessDeauthAckTimeout which will eventually free
the SME active command.
Change-Id: I869e08a16dffc8be3204fe7a449d27449b548979
CR-Fixed: 423551
diff --git a/CORE/MAC/src/pe/lim/limP2P.c b/CORE/MAC/src/pe/lim/limP2P.c
index 4e23ede..b100bdc 100644
--- a/CORE/MAC/src/pe/lim/limP2P.c
+++ b/CORE/MAC/src/pe/lim/limP2P.c
@@ -408,6 +408,13 @@
// send the scan response back and do not even call insert NOA
limSendSmeScanRsp(pMac, sizeof(tSirSmeScanRsp), eSIR_SME_SCAN_FAILED, pMac->lim.gSmeSessionId, pMac->lim.gTransactionId);
+
+ if(pMac->lim.gpLimSmeScanReq != NULL)
+ {
+ palFreeMemory( pMac->hHdd, (tANI_U8 *) pMac->lim.gpLimSmeScanReq);
+ pMac->lim.gpLimSmeScanReq = NULL;
+ }
+
return;
}
diff --git a/CORE/MAC/src/pe/lim/limProcessMlmReqMessages.c b/CORE/MAC/src/pe/lim/limProcessMlmReqMessages.c
index 0970251..0422d1b 100644
--- a/CORE/MAC/src/pe/lim/limProcessMlmReqMessages.c
+++ b/CORE/MAC/src/pe/lim/limProcessMlmReqMessages.c
@@ -172,6 +172,8 @@
#endif
#ifdef WLAN_FEATURE_P2P
case SIR_LIM_REMAIN_CHN_TIMEOUT: limProcessRemainOnChnTimeout(pMac); break;
+ case SIR_LIM_INSERT_SINGLESHOT_NOA_TIMEOUT:
+ limProcessInsertSingleShotNOATimeout(pMac); break;
#endif
case SIR_LIM_DISASSOC_ACK_TIMEOUT: limProcessDisassocAckTimeout(pMac); break;
case SIR_LIM_DEAUTH_ACK_TIMEOUT: limProcessDeauthAckTimeout(pMac); break;
diff --git a/CORE/MAC/src/pe/lim/limSendManagementFrames.c b/CORE/MAC/src/pe/lim/limSendManagementFrames.c
index aa0e022..87ea5ed 100644
--- a/CORE/MAC/src/pe/lim/limSendManagementFrames.c
+++ b/CORE/MAC/src/pe/lim/limSendManagementFrames.c
@@ -4228,7 +4228,12 @@
limLog( pMac, LOGE, FL("Failed to send De-Authentication "
"(%X)!\n"),
nSirStatus );
- //Pkt will be freed up by the callback
+ //Pkt will be freed up by the callback limTxComplete
+
+ /*Call limProcessDeauthAckTimeout which will send
+ * DeauthCnf for this frame
+ */
+ limProcessDeauthAckTimeout(pMac);
return;
}
diff --git a/CORE/MAC/src/pe/lim/limTypes.h b/CORE/MAC/src/pe/lim/limTypes.h
index 5bc76ab..0b4aa0e 100644
--- a/CORE/MAC/src/pe/lim/limTypes.h
+++ b/CORE/MAC/src/pe/lim/limTypes.h
@@ -1125,6 +1125,7 @@
tANI_U8 *frame, tANI_U32 frameLen, tANI_U16 sessionId,
tANI_U32 rxChan, tpPESession psessionEntry);
void limProcessRemainOnChnTimeout(tpAniSirGlobal pMac);
+void limProcessInsertSingleShotNOATimeout(tpAniSirGlobal pMac);
void limSendP2PActionFrame(tpAniSirGlobal pMac, tpSirMsgQ pMsg);
void limAbortRemainOnChan(tpAniSirGlobal pMac);
tSirRetStatus __limProcessSmeNoAUpdate(tpAniSirGlobal pMac, tANI_U32 *pMsgBuf);
diff --git a/CORE/SME/src/csr/csrApiRoam.c b/CORE/SME/src/csr/csrApiRoam.c
index f89d75b..f73a6ac 100644
--- a/CORE/SME/src/csr/csrApiRoam.c
+++ b/CORE/SME/src/csr/csrApiRoam.c
@@ -5181,6 +5181,18 @@
eCSR_ROAM_RESULT_FAILURE);
}
}
+ else
+ {
+ /* bRefAssocStartCnt is not incremented when
+ * eRoamState == eCsrStopRoamingDueToConcurrency
+ * in csrRoamJoinNextBss API. so handle this in
+ * else case by sending assoc failure
+ */
+ csrRoamCallCallback(pMac, sessionId, NULL,
+ pCommand->u.scanCmd.roamId,
+ eCSR_ROAM_ASSOCIATION_FAILURE,
+ eCSR_ROAM_RESULT_FAILURE);
+ }
smsLog(pMac, LOG1, FL(" roam(reason %d) failed\n"), pCommand->u.roamCmd.roamReason);
#ifndef WLAN_MDM_CODE_REDUCTION_OPT
sme_QosCsrEventInd(pMac, (tANI_U8)sessionId, SME_QOS_CSR_DISCONNECT_IND, NULL);