Merge 26188a68462085aa2306a8e303f0d5f6ff5722c9 on remote branch
Change-Id: I87ac29fab64c2b3207c9dd3386d2c0103e15a386
diff --git a/dp/wifi3.0/dp_rx.c b/dp/wifi3.0/dp_rx.c
index afdfd8e..b410709 100644
--- a/dp/wifi3.0/dp_rx.c
+++ b/dp/wifi3.0/dp_rx.c
@@ -2408,8 +2408,15 @@
}
/* Get TID from struct cb->tid_val, save to tid */
- if (qdf_nbuf_is_rx_chfrag_start(nbuf))
+ if (qdf_nbuf_is_rx_chfrag_start(nbuf)) {
tid = qdf_nbuf_get_tid_val(nbuf);
+ if (tid >= CDP_MAX_DATA_TIDS) {
+ DP_STATS_INC(soc, rx.err.rx_invalid_tid_err, 1);
+ qdf_nbuf_free(nbuf);
+ nbuf = next;
+ continue;
+ }
+ }
peer_id = QDF_NBUF_CB_RX_PEER_ID(nbuf);
diff --git a/dp/wifi3.0/dp_stats.c b/dp/wifi3.0/dp_stats.c
index 9f83b15..094e121 100644
--- a/dp/wifi3.0/dp_stats.c
+++ b/dp/wifi3.0/dp_stats.c
@@ -6133,6 +6133,8 @@
soc->stats.rx.err.reo_cmd_send_fail);
DP_PRINT_STATS("Rx BAR frames:%d", soc->stats.rx.bar_frame);
+ DP_PRINT_STATS("Rx invalid TID count:%d",
+ soc->stats.rx.err.rx_invalid_tid_err);
}
#ifdef FEATURE_TSO_STATS
diff --git a/dp/wifi3.0/dp_types.h b/dp/wifi3.0/dp_types.h
index 87ebc7d..cefa475 100644
--- a/dp/wifi3.0/dp_types.h
+++ b/dp/wifi3.0/dp_types.h
@@ -875,6 +875,8 @@
uint32_t peer_unauth_rx_pkt_drop;
/* MSDU len err count */
uint32_t msdu_len_err;
+ /* Rx invalid tid count */
+ uint32_t rx_invalid_tid_err;
} err;
/* packet count per core - per ring */