linux/drivers/net/wireless/intel/iwlwifi/pcie
Sara Sharon d5d0689aef iwlwifi: pcie: fix access to scratch buffer
This fixes a pretty ancient bug that hasn't manifested itself
until now.
The scratchbuf for command queue is allocated only for 32 slots
but is accessed with the queue write pointer - which can be
up to 256.
Since the scratch buf size was 16 and there are up to 256 TFDs
we never passed a page boundary when accessing the scratch buffer,
but when attempting to increase the size of the scratch buffer a
panic was quick to follow when trying to access the address resulted
in a page boundary.

Signed-off-by: Sara Sharon <sara.sharon@intel.com>
Fixes: 38c0f334b3 ("iwlwifi: use coherent DMA memory for command header")
Signed-off-by: Luca Coelho <luciano.coelho@intel.com>
2016-07-06 09:40:33 +03:00
..
drv.c iwlwifi: Add a000 HW family support 2016-07-06 02:09:50 +03:00
internal.h iwlwifi: mvm: support dqa queue sharing 2016-07-06 00:47:41 +03:00
rx.c iwlwifi: pcie: poll RFH for RX DMA stop 2016-07-06 01:16:08 +03:00
trans.c iwlwifi: pcie: Enable MSI mode when using MSI interrupts 2016-07-06 09:39:16 +03:00
tx.c iwlwifi: pcie: fix access to scratch buffer 2016-07-06 09:40:33 +03:00