commit e7864c74fb32d9f258805019c2e818393b9aa927
author Sravan Kumar Kairam <sgoud@codeaurora.org> Fri Jun 01 16:43:34 2018 +0530
committer Gerrit - the friendly Code Review server <code-review@localhost> Tue Jun 05 00:03:06 2018 -0700
tree 55c4ac74dfd71b4e528f57a5bfe266aedf5f1832
parent c0662b5684f478f3b4e9b26faba547507c95a67d

wlan: Drop frames if FC bit is set in BD header

Sometimes host receives frames with incorrect MPDU length and
FC bit set in it's BD header. Processing this frame leads to
invalid access as the frame skb length is invalid due to
incorrect MPDU length. So drop this frame and return it to
the free rx packet list.

Change-Id: I828cdb669b8b73ee1a57ea8799fcb71b28c42859
CRs-Fixed: 2253221

CORE/WDI/TRP/DTS/src/wlan_qct_wdi_dts.c

diff --git a/CORE/WDI/TRP/DTS/src/wlan_qct_wdi_dts.c b/CORE/WDI/TRP/DTS/src/wlan_qct_wdi_dts.c
index bc18282..24b4dec 100644
--- a/CORE/WDI/TRP/DTS/src/wlan_qct_wdi_dts.c
+++ b/CORE/WDI/TRP/DTS/src/wlan_qct_wdi_dts.c
@@ -1002,16 +1002,10 @@
   }
   else
   {
-      wpalPacketSetRxLength(pFrame, usMPDULen+ucMPDUHOffset);
-      wpalPacketRawTrimHead(pFrame, ucMPDUHOffset);
-
-      /* flow control related */
-      pRxMetadata->fc = isFcBd;
-      pRxMetadata->mclkRxTimestamp = WDI_RX_BD_GET_TIMESTAMP(pBDHeader);
-      pRxMetadata->fcStaTxDisabledBitmap = WDI_RX_FC_BD_GET_STA_TX_DISABLED_BITMAP(pBDHeader);
-      pRxMetadata->fcSTAValidMask = WDI_RX_FC_BD_GET_STA_VALID_MASK(pBDHeader);
-      /* Invoke Rx complete callback */
-      pClientData->receiveFrameCB(pClientData->pCallbackContext, pFrame);  
+      /* Discard the frame as FC BD not supoorted any more */
+      DTI_TRACE(DTI_TRACE_LEVEL_ERROR, "FC bit is set in BD");
+      wpalPacketFree(pFrame);
+      return eWLAN_PAL_STATUS_SUCCESS;
   }
 
   /* Log the RX Stats */