From nobody Sun May 10 20:32:11 2026 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org Received: from vger.kernel.org (vger.kernel.org [23.128.96.18]) by smtp.lore.kernel.org (Postfix) with ESMTP id EE23FC433EF for ; Mon, 25 Apr 2022 01:17:20 +0000 (UTC) Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S240083AbiDYBUU (ORCPT ); Sun, 24 Apr 2022 21:20:20 -0400 Received: from lindbergh.monkeyblade.net ([23.128.96.19]:42826 "EHLO lindbergh.monkeyblade.net" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S240021AbiDYBUS (ORCPT ); Sun, 24 Apr 2022 21:20:18 -0400 Received: from mail-pl1-x62b.google.com (mail-pl1-x62b.google.com [IPv6:2607:f8b0:4864:20::62b]) by lindbergh.monkeyblade.net (Postfix) with ESMTPS id 380034AE36 for ; Sun, 24 Apr 2022 18:17:16 -0700 (PDT) Received: by mail-pl1-x62b.google.com with SMTP id j8so23582939pll.11 for ; Sun, 24 Apr 2022 18:17:16 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20210112; h=from:to:cc:subject:date:message-id:mime-version :content-transfer-encoding; bh=nKwdqQyjnMhqftxM2oKP4i7/tuAP8z5KGRd+4yndHbw=; b=nxoo7akq3NDc1RUVWXRaU7OiBQLkD2/ZFBtEnFCkf4pByetxg8Gr14CYvD5mBwsQWj akWZcvT4zWS/S0aSgqAskm6LTZufhtA/9iVLCpqoW1FI7u2R6LbILTH+4dHGYe75RAhg jIKlunWj94rqLVicCXnZiFDrNCR9/SXv7HwexEnxGx6m0rL7G74w7nncZqeFy4GZBEoY OtBmBKYOG2v6lJzzFMLf8LS5PJAP9t6je5yjcsN12FHk8c/zwARKnFKwFa2Rth3OV7uU bMeznW67Bb5lPsb51h5WSw00QMlcllyngofWnR8vwRj5B0kJNtlXONFwPQv9hhKj73PA Ms7Q== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20210112; h=x-gm-message-state:from:to:cc:subject:date:message-id:mime-version :content-transfer-encoding; bh=nKwdqQyjnMhqftxM2oKP4i7/tuAP8z5KGRd+4yndHbw=; b=AiR+o36QpL6+rVfguvL2F7B3HxSEHqYCz8XPlFH5EUBb5VXlujqErSG4ScOEJB/kOS 6XX9WXuQUh7E8SF+bKqjarBi1v1bWHxJBjCgbxkfZeUk1YFB6L9jyUY0gux1NJRAUWDG lLzUUMlK3P4qETN58MGptKl5f+socETyrbjfy6kWUmTRcuVyjJKlHASm0h7X16hitsqL xefdj9yoZO+VJBfdO4Gr8IgAh8qcO+1ZguNpkh6n1P1a+D2grNWqQknuWqz14se2nBZf 1HDKEpe7NLX385ljDKjFHVUL6s/r2nvqsDpcfsT2zsaHiDFvr6XJ/pX74LdWYRq0i3nB /flg== X-Gm-Message-State: AOAM530YTlfBJL4x+Re2UX6pa980RMOrDaJtIrvKf9ivdygXecgZN6Vq xXRMkQajUeru5lPZDEBkE+s= X-Google-Smtp-Source: ABdhPJzylLkQi745qRrz0LCmvS+M9S7NJK1wd3F4z6ec8E2TgmWZAdj+uRyXFeq19J0DPkaR2lj18g== X-Received: by 2002:a17:902:d044:b0:15c:eec0:2bc with SMTP id l4-20020a170902d04400b0015ceec002bcmr7883217pll.28.1650849435175; Sun, 24 Apr 2022 18:17:15 -0700 (PDT) Received: from localhost.localdomain ([14.100.36.163]) by smtp.gmail.com with ESMTPSA id x19-20020a17090a789300b001cd4989ff69sm8697699pjk.48.2022.04.24.18.17.13 (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Sun, 24 Apr 2022 18:17:14 -0700 (PDT) From: Solomon Tan To: gregkh@linuxfoundation.org Cc: linux-staging@lists.linux.dev, linux-kernel@vger.kernel.org, straube.linux@gmail.com Subject: [PATCH v2] Revert "staging: r8188eu: use in-kernel ieee channel" Date: Mon, 25 Apr 2022 09:16:13 +0800 Message-Id: <20220425011612.113664-1-wjsota@gmail.com> X-Mailer: git-send-email 2.36.0 MIME-Version: 1.0 Content-Transfer-Encoding: quoted-printable Precedence: bulk List-ID: X-Mailing-List: linux-kernel@vger.kernel.org Content-Type: text/plain; charset="utf-8" This reverts commit 0afaa121813ed602bd203759c339cb639493f8c2 as changing rtw_ieee80211_channel to ieee80211_channel causes a memcpy bug as reported in https://lore.kernel.org/linux-staging/67e2d10b-7f0f-9c5a-ce31-376b83ffba9e@= gmail.com/ due to their size differences. Signed-off-by: Solomon Tan --- V1 -> V2: Fix spelling error in commit message. --- drivers/staging/r8188eu/core/rtw_cmd.c | 6 ++-- drivers/staging/r8188eu/core/rtw_mlme_ext.c | 18 +++++----- drivers/staging/r8188eu/include/ieee80211.h | 34 ++++++++++++++++++- drivers/staging/r8188eu/include/rtw_cmd.h | 4 +-- .../staging/r8188eu/include/rtw_mlme_ext.h | 2 +- 5 files changed, 48 insertions(+), 16 deletions(-) diff --git a/drivers/staging/r8188eu/core/rtw_cmd.c b/drivers/staging/r8188= eu/core/rtw_cmd.c index ebe2479d1402..f036a980ec1a 100644 --- a/drivers/staging/r8188eu/core/rtw_cmd.c +++ b/drivers/staging/r8188eu/core/rtw_cmd.c @@ -320,7 +320,7 @@ int rtw_cmd_thread(void *context) * MUST TAKE CARE THAT BEFORE CALLING THIS FUNC, YOU SHOULD HAVE LOCKED pm= lmepriv->lock */ u8 rtw_sitesurvey_cmd(struct adapter *padapter, struct ndis_802_11_ssid *= ssid, int ssid_num, - struct ieee80211_channel *ch, int ch_num) + struct rtw_ieee80211_channel *ch, int ch_num) { u8 res =3D _FAIL; struct cmd_obj *ph2c; @@ -366,8 +366,8 @@ u8 rtw_sitesurvey_cmd(struct adapter *padapter, struct= ndis_802_11_ssid *ssid, if (ch) { int i; for (i =3D 0; i < ch_num && i < RTW_CHANNEL_SCAN_AMOUNT; i++) { - if (ch[i].hw_value && !(ch[i].flags & IEEE80211_CHAN_DISABLED)) { - memcpy(&psurveyPara->ch[i], &ch[i], sizeof(struct ieee80211_channel)); + if (ch[i].hw_value && !(ch[i].flags & RTW_IEEE80211_CHAN_DISABLED)) { + memcpy(&psurveyPara->ch[i], &ch[i], sizeof(struct rtw_ieee80211_channe= l)); psurveyPara->ch_num++; } } diff --git a/drivers/staging/r8188eu/core/rtw_mlme_ext.c b/drivers/staging/= r8188eu/core/rtw_mlme_ext.c index 7739a0bde1e0..839b0b85993e 100644 --- a/drivers/staging/r8188eu/core/rtw_mlme_ext.c +++ b/drivers/staging/r8188eu/core/rtw_mlme_ext.c @@ -5749,11 +5749,11 @@ void site_survey(struct adapter *padapter) else ScanType =3D SCAN_ACTIVE; } else { - struct ieee80211_channel *ch; + struct rtw_ieee80211_channel *ch; if (pmlmeext->sitesurvey_res.channel_idx < pmlmeext->sitesurvey_res.ch_n= um) { ch =3D &pmlmeext->sitesurvey_res.ch[pmlmeext->sitesurvey_res.channel_id= x]; survey_channel =3D ch->hw_value; - ScanType =3D (ch->flags & IEEE80211_CHAN_NO_IR) ? SCAN_PASSIVE : SCAN_A= CTIVE; + ScanType =3D (ch->flags & RTW_IEEE80211_CHAN_PASSIVE_SCAN) ? SCAN_PASSI= VE : SCAN_ACTIVE; } } =20 @@ -7280,26 +7280,26 @@ u8 disconnect_hdl(struct adapter *padapter, unsigne= d char *pbuf) return H2C_SUCCESS; } =20 -static int rtw_scan_ch_decision(struct adapter *padapter, struct ieee80211= _channel *out, - u32 out_num, struct ieee80211_channel *in, u32 in_num) +static int rtw_scan_ch_decision(struct adapter *padapter, struct rtw_ieee8= 0211_channel *out, + u32 out_num, struct rtw_ieee80211_channel *in, u32 in_num) { int i, j; int set_idx; struct mlme_ext_priv *pmlmeext =3D &padapter->mlmeextpriv; =20 /* clear out first */ - memset(out, 0, sizeof(struct ieee80211_channel) * out_num); + memset(out, 0, sizeof(struct rtw_ieee80211_channel) * out_num); =20 /* acquire channels from in */ j =3D 0; for (i =3D 0; i < in_num; i++) { set_idx =3D rtw_ch_set_search_ch(pmlmeext->channel_set, in[i].hw_value); - if (in[i].hw_value && !(in[i].flags & IEEE80211_CHAN_DISABLED) && + if (in[i].hw_value && !(in[i].flags & RTW_IEEE80211_CHAN_DISABLED) && set_idx >=3D 0) { - memcpy(&out[j], &in[i], sizeof(struct ieee80211_channel)); + memcpy(&out[j], &in[i], sizeof(struct rtw_ieee80211_channel)); =20 if (pmlmeext->channel_set[set_idx].ScanType =3D=3D SCAN_PASSIVE) - out[j].flags &=3D IEEE80211_CHAN_NO_IR; + out[j].flags &=3D RTW_IEEE80211_CHAN_PASSIVE_SCAN; =20 j++; } @@ -7313,7 +7313,7 @@ static int rtw_scan_ch_decision(struct adapter *padap= ter, struct ieee80211_chann out[i].hw_value =3D pmlmeext->channel_set[i].ChannelNum; =20 if (pmlmeext->channel_set[i].ScanType =3D=3D SCAN_PASSIVE) - out[i].flags &=3D IEEE80211_CHAN_NO_IR; + out[i].flags &=3D RTW_IEEE80211_CHAN_PASSIVE_SCAN; =20 j++; } diff --git a/drivers/staging/r8188eu/include/ieee80211.h b/drivers/staging/= r8188eu/include/ieee80211.h index 788c9873d7b6..fe2dc2a0a802 100644 --- a/drivers/staging/r8188eu/include/ieee80211.h +++ b/drivers/staging/r8188eu/include/ieee80211.h @@ -8,7 +8,6 @@ #include "drv_types.h" #include "wifi.h" #include -#include =20 #define MGMT_QUEUE_NUM 5 =20 @@ -666,6 +665,39 @@ enum rtw_ieee80211_back_actioncode { =20 #define VENDOR_HT_CAPAB_OUI_TYPE 0x33 /* 00-90-4c:0x33 */ =20 +/** + * enum rtw_ieee80211_channel_flags - channel flags + * + * Channel flags set by the regulatory control code. + * + * @RTW_IEEE80211_CHAN_DISABLED: This channel is disabled. + * @RTW_IEEE80211_CHAN_PASSIVE_SCAN: Only passive scanning is permitted + * on this channel. + * @RTW_IEEE80211_CHAN_NO_IBSS: IBSS is not allowed on this channel. + * @RTW_IEEE80211_CHAN_RADAR: Radar detection is required on this channel. + * @RTW_IEEE80211_CHAN_NO_HT40PLUS: extension channel above this channel + * is not permitted. + * @RTW_IEEE80211_CHAN_NO_HT40MINUS: extension channel below this channel + * is not permitted. + */ +enum rtw_ieee80211_channel_flags { + RTW_IEEE80211_CHAN_DISABLED =3D 1<<0, + RTW_IEEE80211_CHAN_PASSIVE_SCAN =3D 1<<1, + RTW_IEEE80211_CHAN_NO_IBSS =3D 1<<2, + RTW_IEEE80211_CHAN_RADAR =3D 1<<3, + RTW_IEEE80211_CHAN_NO_HT40PLUS =3D 1<<4, + RTW_IEEE80211_CHAN_NO_HT40MINUS =3D 1<<5, +}; + +#define RTW_IEEE80211_CHAN_NO_HT40 \ + (RTW_IEEE80211_CHAN_NO_HT40PLUS | RTW_IEEE80211_CHAN_NO_HT40MINUS) + +/* Represent channel details, subset of ieee80211_channel */ +struct rtw_ieee80211_channel { + u16 hw_value; + u32 flags; +}; + #define CHAN_FMT \ "hw_value:%u, " \ "flags:0x%08x" \ diff --git a/drivers/staging/r8188eu/include/rtw_cmd.h b/drivers/staging/r8= 188eu/include/rtw_cmd.h index ee15f93a5477..6b6d560d7143 100644 --- a/drivers/staging/r8188eu/include/rtw_cmd.h +++ b/drivers/staging/r8188eu/include/rtw_cmd.h @@ -187,7 +187,7 @@ struct sitesurvey_parm { u8 ssid_num; u8 ch_num; struct ndis_802_11_ssid ssid[RTW_SSID_SCAN_AMOUNT]; - struct ieee80211_channel ch[RTW_CHANNEL_SCAN_AMOUNT]; + struct rtw_ieee80211_channel ch[RTW_CHANNEL_SCAN_AMOUNT]; }; =20 /* @@ -731,7 +731,7 @@ struct TDLSoption_param #define H2C_RESERVED 0x07 =20 u8 rtw_sitesurvey_cmd(struct adapter *padapter, struct ndis_802_11_ssid *= ssid, - int ssid_num, struct ieee80211_channel *ch, + int ssid_num, struct rtw_ieee80211_channel *ch, int ch_num); u8 rtw_createbss_cmd(struct adapter *padapter); u8 rtw_setstakey_cmd(struct adapter *padapter, u8 *psta, u8 unicast_key); diff --git a/drivers/staging/r8188eu/include/rtw_mlme_ext.h b/drivers/stagi= ng/r8188eu/include/rtw_mlme_ext.h index fed8e77e512b..dcf91e7894a5 100644 --- a/drivers/staging/r8188eu/include/rtw_mlme_ext.h +++ b/drivers/staging/r8188eu/include/rtw_mlme_ext.h @@ -200,7 +200,7 @@ struct ss_res { u8 ssid_num; u8 ch_num; struct ndis_802_11_ssid ssid[RTW_SSID_SCAN_AMOUNT]; - struct ieee80211_channel ch[RTW_CHANNEL_SCAN_AMOUNT]; + struct rtw_ieee80211_channel ch[RTW_CHANNEL_SCAN_AMOUNT]; }; =20 /* define AP_MODE 0x0C */ --=20 2.36.0