linux/drivers/net/wireless
Felix Fietkau 4fdec031b9 ath9k: fix BUG_ON triggered by PAE frames
When I initially stumbled upon sequence number problems with PAE frames
in ath9k, I submitted a patch to remove all special cases for PAE
frames and let them go through the normal transmit path.
Out of concern about crypto incompatibility issues, this change was
merged instead:

commit 6c8afef551
Author: Sujith <Sujith.Manoharan@atheros.com>
Date:   Tue Feb 9 10:07:00 2010 +0530

    ath9k: Fix sequence numbers for PAE frames

After a lot of testing, I'm able to reliably trigger a driver crash on
rekeying with current versions with this change in place.
It seems that the driver does not support sending out regular MPDUs with
the same TID while an A-MPDU session is active.
This leads to duplicate entries in the TID Tx buffer, which hits the
following BUG_ON in ath_tx_addto_baw():

    index  = ATH_BA_INDEX(tid->seq_start, bf->bf_seqno);
    cindex = (tid->baw_head + index) & (ATH_TID_MAX_BUFS - 1);

    BUG_ON(tid->tx_buf[cindex] != NULL);

I believe until we actually have a reproducible case of an
incompatibility with another AP using no PAE special cases, we should
simply get rid of this mess.

This patch completely fixes my crash issues in STA mode and makes it
stay connected without throughput drops or connectivity issues even
when the AP is configured to a very short group rekey interval.

Signed-off-by: Felix Fietkau <nbd@openwrt.org>
Cc: stable@kernel.org
Signed-off-by: John W. Linville <linville@tuxdriver.com>
2010-03-16 15:20:41 -04:00
..
ath ath9k: fix BUG_ON triggered by PAE frames 2010-03-16 15:20:41 -04:00
b43 Merge branch 'master' of git://git.kernel.org/pub/scm/linux/kernel/git/linville/wireless-next-2.6 2010-02-27 02:05:54 -08:00
b43legacy Merge branch 'master' of git://git.kernel.org/pub/scm/linux/kernel/git/linville/wireless-next-2.6 2010-02-25 23:26:21 -08:00
hostap Merge branch 'master' of git://git.kernel.org/pub/scm/linux/kernel/git/linville/wireless-next-2.6 2010-02-25 23:26:21 -08:00
ipw2x00 ipw2200: use kmalloc for large local variables 2010-03-10 16:29:02 -05:00
iwlwifi Revert "iwlwifi: Send broadcast probe request only when asked to" 2010-03-09 16:16:04 -08:00
iwmc3200wifi Merge branch 'master' of git://git.kernel.org/pub/scm/linux/kernel/git/linville/wireless-2.6 2010-02-26 16:54:45 -05:00
libertas wireless: convert to use netdev_for_each_mc_addr 2010-02-28 01:44:01 -08:00
libertas_tf Add Station and AdHoc mode support to libertas_tf 2010-02-10 16:36:50 -05:00
orinoco wireless: convert to use netdev_for_each_mc_addr 2010-02-28 01:44:01 -08:00
p54 Merge branch 'master' of git://git.kernel.org/pub/scm/linux/kernel/git/linville/wireless-next-2.6 2010-02-25 23:26:21 -08:00
prism54
rt2x00 rt2x00: remove KSEG1ADDR define from rt2x00soc.h 2010-03-10 16:16:53 -05:00
rtl818x Merge branch 'master' of git://git.kernel.org/pub/scm/linux/kernel/git/linville/wireless-2.6 2010-02-26 16:54:45 -05:00
wl12xx wl1251: fix potential crash 2010-03-16 15:20:25 -04:00
zd1211rw zd1211rw: fix potential array underflow 2010-03-02 14:28:49 -05:00
adm8211.c Merge branch 'master' of ssh://master.kernel.org/pub/scm/linux/kernel/git/linville/wireless-next-2.6 2010-02-14 17:45:59 -08:00
adm8211.h
airo.c airo: return from set_wep_key() when key length is zero 2010-03-02 14:28:48 -05:00
airo.h
airo_cs.c
at76c50x-usb.c
at76c50x-usb.h
atmel.c
atmel.h
atmel_cs.c
atmel_pci.c
Kconfig wireless: airo_cs build fixes 2010-02-15 16:12:52 -05:00
mac80211_hwsim.c mac80211_hwsim: convert to new station add/remove callbacks 2010-02-19 15:52:52 -05:00
Makefile
mwl8k.c mwl8k: convert to new station add/remove callbacks 2010-02-22 11:21:43 -05:00
ray_cs.c wireless: convert to use netdev_for_each_mc_addr 2010-02-28 01:44:01 -08:00
ray_cs.h
rayctl.h
rndis_wlan.c rndis_wlan: correct multicast_list handling V3 2010-03-04 03:32:16 -08:00
wl3501.h
wl3501_cs.c
zd1201.c wireless: convert to use netdev_for_each_mc_addr 2010-02-28 01:44:01 -08:00
zd1201.h