Changes in 4.9.269 net: usb: ax88179_178a: initialize local variables before use iwlwifi: Fix softirq/hardirq disabling in iwl_pcie_enqueue_hcmd() ALSA: usb-audio: Add MIDI quirk for Vox ToneLab EX USB: Add LPM quirk for Lenovo ThinkPad USB-C Dock Gen2 Ethernet USB: Add reset-resume quirk for WD19's Realtek Hub platform/x86: thinkpad_acpi: Correct thermal sensor allocation s390/disassembler: increase ebpf disasm buffer size ACPI: custom_method: fix potential use-after-free issue ACPI: custom_method: fix a possible memory leak arm64: dts: mt8173: fix property typo of 'phys' in dsi node ecryptfs: fix kernel panic with null dev_name mmc: core: Do a power cycle when the CMD11 fails mmc: core: Set read only for SD cards with permanent write protect bit btrfs: fix metadata extent leak after failure to create subvolume fbdev: zero-fill colormap in fbcmap.c staging: wimax/i2400m: fix byte-order issue usb: gadget: uvc: add bInterval checking for HS mode usb: dwc3: gadget: Ignore EP queue requests during bus reset usb: xhci: Fix port minor revision PCI: PM: Do not read power state in pci_enable_device_flags() x86/build: Propagate $(CLANG_FLAGS) to $(REALMODE_FLAGS) spi: dln2: Fix reference leak to master spi: omap-100k: Fix reference leak to master intel_th: Consistency and off-by-one fix phy: phy-twl4030-usb: Fix possible use-after-free in twl4030_usb_remove() btrfs: convert logic BUG_ON()'s in replace_path to ASSERT()'s scsi: target: pscsi: Fix warning in pscsi_complete_cmd() media: ite-cir: check for receive overflow extcon: arizona: Fix some issues when HPDET IRQ fires after the jack has been unplugged media: media/saa7164: fix saa7164_encoder_register() memory leak bugs media: gspca/sq905.c: fix uninitialized variable power: supply: Use IRQF_ONESHOT scsi: qla2xxx: Always check the return value of qla24xx_get_isp_stats() scsi: scsi_dh_alua: Remove check for ASC 24h in alua_rtpg() media: em28xx: fix memory leak clk: socfpga: arria10: Fix memory leak of socfpga_clk on error return power: supply: generic-adc-battery: fix possible use-after-free in gab_remove() power: supply: s3c_adc_battery: fix possible use-after-free in s3c_adc_bat_remove() media: adv7604: fix possible use-after-free in adv76xx_remove() media: i2c: adv7511-v4l2: fix possible use-after-free in adv7511_remove() media: i2c: adv7842: fix possible use-after-free in adv7842_remove() media: dvb-usb: fix memory leak in dvb_usb_adapter_init media: gscpa/stv06xx: fix memory leak drm/msm/mdp5: Configure PP_SYNC_HEIGHT to double the vtotal drm/amdgpu: fix NULL pointer dereference scsi: lpfc: Fix crash when a REG_RPI mailbox fails triggering a LOGO response scsi: libfc: Fix a format specifier ALSA: emu8000: Fix a use after free in snd_emu8000_create_mixer ALSA: sb: Fix two use after free in snd_sb_qsound_build arm64/vdso: Discard .note.gnu.property sections in vDSO openvswitch: fix stack OOB read while fragmenting IPv4 packets NFSv4: Don't discard segments marked for return in _pnfs_return_layout() jffs2: Fix kasan slab-out-of-bounds problem powerpc/eeh: Fix EEH handling for hugepages in ioremap space. powerpc: fix EDEADLOCK redefinition error in uapi/asm/errno.h jffs2: check the validity of dstlen in jffs2_zlib_compress() Revert 337f13046ff0 ("futex: Allow FUTEX_CLOCK_REALTIME with FUTEX_WAIT op") ftrace: Handle commands when closing set_ftrace_filter file ext4: fix check to prevent false positive report of incorrect used inodes ext4: fix error code in ext4_commit_super media: dvbdev: Fix memory leak in dvb_media_device_free() usb: gadget: dummy_hcd: fix gpf in gadget_setup usb: gadget: Fix double free of device descriptor pointers usb: gadget/function/f_fs string table fix for multiple languages dm persistent data: packed struct should have an aligned() attribute too dm space map common: fix division bug in sm_ll_find_free_block() dm rq: fix double free of blk_mq_tag_set in dev remove after table load fails Bluetooth: verify AMP hci_chan before amp_destroy hsr: use netdev_err() instead of WARN_ONCE() bluetooth: eliminate the potential race condition when removing the HCI controller net/nfc: fix use-after-free llcp_sock_bind/connect FDDI: defxx: Bail out gracefully with unassigned PCI resource for CSR misc: lis3lv02d: Fix false-positive WARN on various HP models misc: vmw_vmci: explicitly initialize vmci_notify_bm_set_msg struct misc: vmw_vmci: explicitly initialize vmci_datagram payload tracing: Treat recording comm for idle task as a success tracing: Use strlcpy() instead of strcpy() in __trace_find_cmdline() tracing: Map all PIDs to command lines tracing: Restructure trace_clock_global() to never block md-cluster: fix use-after-free issue when removing rdev md: factor out a mddev_find_locked helper from mddev_find md: md_open returns -EBUSY when entering racing area ipw2x00: potential buffer overflow in libipw_wx_set_encodeext() cfg80211: scan: drop entry from hidden_list on overflow drm/radeon: fix copy of uninitialized variable back to userspace ALSA: hda/realtek: Re-order ALC882 Acer quirk table entries ALSA: hda/realtek: Re-order ALC882 Sony quirk table entries ALSA: hda/realtek: Re-order ALC269 Sony quirk table entries ALSA: hda/realtek: Re-order ALC269 Lenovo quirk table entries ALSA: hda/realtek: Remove redundant entry for ALC861 Haier/Uniwill devices usb: gadget: pch_udc: Revert d3cb25a12138 completely memory: gpmc: fix out of bounds read and dereference on gpmc_cs[] ARM: dts: exynos: correct PMIC interrupt trigger level on SMDK5250 ARM: dts: exynos: correct PMIC interrupt trigger level on Snow serial: stm32: fix incorrect characters on console usb: gadget: pch_udc: Replace cpu_to_le32() by lower_32_bits() usb: gadget: pch_udc: Check if driver is present before calling ->setup() usb: gadget: pch_udc: Check for DMA mapping error crypto: qat - don't release uninitialized resources crypto: qat - ADF_STATUS_PF_RUNNING should be set after adf_dev_init fotg210-udc: Fix DMA on EP0 for length > max packet size fotg210-udc: Fix EP0 IN requests bigger than two packets fotg210-udc: Remove a dubious condition leading to fotg210_done fotg210-udc: Mask GRP2 interrupts we don't handle fotg210-udc: Don't DMA more than the buffer can take fotg210-udc: Complete OUT requests on short packets mtd: require write permissions for locking and badblock ioctls bus: qcom: Put child node before return crypto: qat - fix error path in adf_isr_resource_alloc() mtd: rawnand: gpmi: Fix a double free in gpmi_nand_init staging: rtl8192u: Fix potential infinite loop staging: greybus: uart: fix unprivileged TIOCCSERIAL crypto: qat - Fix a double free in adf_create_ring usb: gadget: r8a66597: Add missing null check on return from platform_get_resource USB: cdc-acm: fix unprivileged TIOCCSERIAL tty: actually undefine superseded ASYNC flags tty: fix return value for unsupported ioctls firmware: qcom-scm: Fix QCOM_SCM configuration x86/platform/uv: Fix !KEXEC build failure Drivers: hv: vmbus: Increase wait time for VMbus unload ttyprintk: Add TTY hangup callback. media: vivid: fix assignment of dev->fbuf_out_flags media: omap4iss: return error code when omap4iss_get() failed media: m88rs6000t: avoid potential out-of-bounds reads on arrays pata_arasan_cf: fix IRQ check pata_ipx4xx_cf: fix IRQ check sata_mv: add IRQ checks ata: libahci_platform: fix IRQ check scsi: fcoe: Fix mismatched fcoe_wwn_from_mac declaration media: dvb-usb-remote: fix dvb_usb_nec_rc_key_to_event type mismatch clk: uniphier: Fix potential infinite loop scsi: jazz_esp: Add IRQ check scsi: sun3x_esp: Add IRQ check scsi: sni_53c710: Add IRQ check HSI: core: fix resource leaks in hsi_add_client_from_dt() x86/events/amd/iommu: Fix sysfs type mismatch HID: plantronics: Workaround for double volume key presses perf symbols: Fix dso__fprintf_symbols_by_name() to return the number of printed chars net: lapbether: Prevent racing when checking whether the netif is running powerpc/prom: Mark identical_pvr_fixup as __init ALSA: core: remove redundant spin_lock pair in snd_card_disconnect nfc: pn533: prevent potential memory corruption ALSA: usb-audio: Add error checks for usb_driver_claim_interface() calls liquidio: Fix unintented sign extension of a left shift of a u16 powerpc/perf: Fix PMU constraint check for EBB events powerpc: iommu: fix build when neither PCI or IBMVIO is set mac80211: bail out if cipher schemes are invalid mt7601u: fix always true expression net: thunderx: Fix unintentional sign extension issue i2c: cadence: add IRQ check i2c: emev2: add IRQ check i2c: jz4780: add IRQ check i2c: sh7760: add IRQ check MIPS: pci-legacy: stop using of_pci_range_to_resource powerpc/pseries: extract host bridge from pci_bus prior to bus removal i2c: sh7760: fix IRQ error path mwl8k: Fix a double Free in mwl8k_probe_hw vsock/vmci: log once the failed queue pair allocation RDMA/i40iw: Fix error unwinding when i40iw_hmc_sd_one fails net: davinci_emac: Fix incorrect masking of tx and rx error channel ath9k: Fix error check in ath9k_hw_read_revisions() for PCI devices powerpc/52xx: Fix an invalid ASM expression ('addi' used instead of 'add') net:emac/emac-mac: Fix a use after free in emac_mac_tx_buf_send net:nfc:digital: Fix a double free in digital_tg_recv_dep_req kfifo: fix ternary sign extension bugs Revert "net/sctp: fix race condition in sctp_destroy_sock" sctp: delay auto_asconf init until binding the first addr Revert "of/fdt: Make sure no-map does not remove already reserved regions" Revert "fdt: Properly handle "no-map" field in the memory region" fs: dlm: fix debugfs dump tipc: convert dest node's address to network order net: stmmac: Set FIFO sizes for ipq806x ALSA: hdsp: don't disable if not enabled ALSA: hdspm: don't disable if not enabled ALSA: rme9652: don't disable if not enabled Bluetooth: Set CONF_NOT_COMPLETE as l2cap_chan default Bluetooth: initialize skb_queue_head at l2cap_chan_create() ip6_vti: proper dev_{hold|put} in ndo_[un]init methods mac80211: clear the beacon's CRC after channel switch cuse: prevent clone selftests: Set CC to clang in lib.mk if LLVM is set kconfig: nconf: stop endless search loops sctp: Fix out-of-bounds warning in sctp_process_asconf_param() ASoC: rt286: Generalize support for ALC3263 codec samples/bpf: Fix broken tracex1 due to kprobe argument change powerpc/pseries: Stop calling printk in rtas_stop_self() wl3501_cs: Fix out-of-bounds warnings in wl3501_send_pkt wl3501_cs: Fix out-of-bounds warnings in wl3501_mgmt_join powerpc/iommu: Annotate nested lock for lockdep net: ethernet: mtk_eth_soc: fix RX VLAN offload ASoC: rt286: Make RT286_SET_GPIO_* readable and writable f2fs: fix a redundant call to f2fs_balance_fs if an error occurs PCI: Release OF node in pci_scan_device()'s error path ARM: 9064/1: hw_breakpoint: Do not directly check the event's overflow_handler hook NFSv4.2: Always flush out writes in nfs42_proc_fallocate() NFS: Deal correctly with attribute generation counter overflow pNFS/flexfiles: fix incorrect size check in decode_nfs_fh() NFSv4.2 fix handling of sr_eof in SEEK's reply sctp: fix a SCTP_MIB_CURRESTAB leak in sctp_sf_do_dupcook_b drm/radeon: Fix off-by-one power_state index heap overwrite khugepaged: fix wrong result value for trace_mm_collapse_huge_page_isolate() mm/hugeltb: handle the error case in hugetlb_fix_reserve_counts() ksm: fix potential missing rmap_item for stable_node kernel: kexec_file: fix error return code of kexec_calculate_store_digests() ARC: entry: fix off-by-one error in syscall number validation powerpc/64s: Fix crashes when toggling entry flush barrier squashfs: fix divide error in calculate_skip() iio: proximity: pulsedlight: Fix rumtime PM imbalance on error usb: fotg210-hcd: Fix an error message ACPI: scan: Fix a memory leak in an error handling path usb: xhci: Increase timeout for HC halt usb: dwc2: Fix gadget DMA unmap direction usb: core: hub: fix race condition about TRSMRCY of resume KVM: x86: Cancel pvclock_gtod_work on module removal FDDI: defxx: Make MMIO the configuration default except for EISA MIPS: Reinstate platform `__div64_32' handler MIPS: Avoid DIVU in `__div64_32' is result would be zero MIPS: Avoid handcoded DIVU in `__div64_32' altogether thermal/core/fair share: Lock the thermal zone while looping over instances dm ioctl: fix out of bounds array access when no devices kobject_uevent: remove warning in init_uevent_argv() netfilter: conntrack: Make global sysctls readonly in non-init netns clk: exynos7: Mark aclk_fsys1_200 as critical x86/msr: Fix wr/rdmsr_safe_regs_on_cpu() prototypes extcon: adc-jack: Fix incompatible pointer type warning kgdb: fix gcc-11 warning on indentation usb: sl811-hcd: improve misleading indentation cxgb4: Fix the -Wmisleading-indentation warning isdn: capi: fix mismatched prototypes ACPI / hotplug / PCI: Fix reference count leak in enable_slot() Input: silead - add workaround for x86 BIOS-es which bring the chip up in a stuck state um: Mark all kernel symbols as local ceph: fix fscache invalidation ALSA: hda: generic: change the DAC ctl name for LO+SPK or LO+HP lib: stackdepot: turn depot_lock spinlock to raw_spinlock sit: proper dev_{hold|put} in ndo_[un]init methods ip6_tunnel: sit: proper dev_{hold|put} in ndo_[un]init methods xhci: Do not use GFP_KERNEL in (potentially) atomic context ipv6: remove extra dev_hold() for fallback tunnels Linux 4.9.269 Signed-off-by: Greg Kroah-Hartman <gregkh@google.com> Change-Id: Ib994aef2c6746afa8dcbb237d8c0645ba2c6f7e1
212 lines
6.4 KiB
C
212 lines
6.4 KiB
C
/*
|
|
* Intel Wireless WiMAX Connection 2400m
|
|
* Implement backend for the WiMAX stack rfkill support
|
|
*
|
|
*
|
|
* Copyright (C) 2007-2008 Intel Corporation <linux-wimax@intel.com>
|
|
* Inaky Perez-Gonzalez <inaky.perez-gonzalez@intel.com>
|
|
*
|
|
* This program is free software; you can redistribute it and/or
|
|
* modify it under the terms of the GNU General Public License version
|
|
* 2 as published by the Free Software Foundation.
|
|
*
|
|
* This program is distributed in the hope that it will be useful,
|
|
* but WITHOUT ANY WARRANTY; without even the implied warranty of
|
|
* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
|
|
* GNU General Public License for more details.
|
|
*
|
|
* You should have received a copy of the GNU General Public License
|
|
* along with this program; if not, write to the Free Software
|
|
* Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA
|
|
* 02110-1301, USA.
|
|
*
|
|
*
|
|
* The WiMAX kernel stack integrates into RF-Kill and keeps the
|
|
* switches's status. We just need to:
|
|
*
|
|
* - report changes in the HW RF Kill switch [with
|
|
* wimax_rfkill_{sw,hw}_report(), which happens when we detect those
|
|
* indications coming through hardware reports]. We also do it on
|
|
* initialization to let the stack know the initial HW state.
|
|
*
|
|
* - implement indications from the stack to change the SW RF Kill
|
|
* switch (coming from sysfs, the wimax stack or user space).
|
|
*/
|
|
#include "i2400m.h"
|
|
#include <linux/wimax/i2400m.h>
|
|
#include <linux/slab.h>
|
|
|
|
|
|
|
|
#define D_SUBMODULE rfkill
|
|
#include "debug-levels.h"
|
|
|
|
/*
|
|
* Return true if the i2400m radio is in the requested wimax_rf_state state
|
|
*
|
|
*/
|
|
static
|
|
int i2400m_radio_is(struct i2400m *i2400m, enum wimax_rf_state state)
|
|
{
|
|
if (state == WIMAX_RF_OFF)
|
|
return i2400m->state == I2400M_SS_RF_OFF
|
|
|| i2400m->state == I2400M_SS_RF_SHUTDOWN;
|
|
else if (state == WIMAX_RF_ON)
|
|
/* state == WIMAX_RF_ON */
|
|
return i2400m->state != I2400M_SS_RF_OFF
|
|
&& i2400m->state != I2400M_SS_RF_SHUTDOWN;
|
|
else {
|
|
BUG();
|
|
return -EINVAL; /* shut gcc warnings on certain arches */
|
|
}
|
|
}
|
|
|
|
|
|
/*
|
|
* WiMAX stack operation: implement SW RFKill toggling
|
|
*
|
|
* @wimax_dev: device descriptor
|
|
* @skb: skb where the message has been received; skb->data is
|
|
* expected to point to the message payload.
|
|
* @genl_info: passed by the generic netlink layer
|
|
*
|
|
* Generic Netlink will call this function when a message is sent from
|
|
* userspace to change the software RF-Kill switch status.
|
|
*
|
|
* This function will set the device's software RF-Kill switch state to
|
|
* match what is requested.
|
|
*
|
|
* NOTE: the i2400m has a strict state machine; we can only set the
|
|
* RF-Kill switch when it is on, the HW RF-Kill is on and the
|
|
* device is initialized. So we ignore errors steaming from not
|
|
* being in the right state (-EILSEQ).
|
|
*/
|
|
int i2400m_op_rfkill_sw_toggle(struct wimax_dev *wimax_dev,
|
|
enum wimax_rf_state state)
|
|
{
|
|
int result;
|
|
struct i2400m *i2400m = wimax_dev_to_i2400m(wimax_dev);
|
|
struct device *dev = i2400m_dev(i2400m);
|
|
struct sk_buff *ack_skb;
|
|
struct {
|
|
struct i2400m_l3l4_hdr hdr;
|
|
struct i2400m_tlv_rf_operation sw_rf;
|
|
} __packed *cmd;
|
|
char strerr[32];
|
|
|
|
d_fnstart(4, dev, "(wimax_dev %p state %d)\n", wimax_dev, state);
|
|
|
|
result = -ENOMEM;
|
|
cmd = kzalloc(sizeof(*cmd), GFP_KERNEL);
|
|
if (cmd == NULL)
|
|
goto error_alloc;
|
|
cmd->hdr.type = cpu_to_le16(I2400M_MT_CMD_RF_CONTROL);
|
|
cmd->hdr.length = cpu_to_le16(sizeof(cmd->sw_rf));
|
|
cmd->hdr.version = cpu_to_le16(I2400M_L3L4_VERSION);
|
|
cmd->sw_rf.hdr.type = cpu_to_le16(I2400M_TLV_RF_OPERATION);
|
|
cmd->sw_rf.hdr.length = cpu_to_le16(sizeof(cmd->sw_rf.status));
|
|
switch (state) {
|
|
case WIMAX_RF_OFF: /* RFKILL ON, radio OFF */
|
|
cmd->sw_rf.status = cpu_to_le32(2);
|
|
break;
|
|
case WIMAX_RF_ON: /* RFKILL OFF, radio ON */
|
|
cmd->sw_rf.status = cpu_to_le32(1);
|
|
break;
|
|
default:
|
|
BUG();
|
|
}
|
|
|
|
ack_skb = i2400m_msg_to_dev(i2400m, cmd, sizeof(*cmd));
|
|
result = PTR_ERR(ack_skb);
|
|
if (IS_ERR(ack_skb)) {
|
|
dev_err(dev, "Failed to issue 'RF Control' command: %d\n",
|
|
result);
|
|
goto error_msg_to_dev;
|
|
}
|
|
result = i2400m_msg_check_status(wimax_msg_data(ack_skb),
|
|
strerr, sizeof(strerr));
|
|
if (result < 0) {
|
|
dev_err(dev, "'RF Control' (0x%04x) command failed: %d - %s\n",
|
|
I2400M_MT_CMD_RF_CONTROL, result, strerr);
|
|
goto error_cmd;
|
|
}
|
|
|
|
/* Now we wait for the state to change to RADIO_OFF or RADIO_ON */
|
|
result = wait_event_timeout(
|
|
i2400m->state_wq, i2400m_radio_is(i2400m, state),
|
|
5 * HZ);
|
|
if (result == 0)
|
|
result = -ETIMEDOUT;
|
|
if (result < 0)
|
|
dev_err(dev, "Error waiting for device to toggle RF state: "
|
|
"%d\n", result);
|
|
result = 0;
|
|
error_cmd:
|
|
kfree_skb(ack_skb);
|
|
error_msg_to_dev:
|
|
error_alloc:
|
|
d_fnend(4, dev, "(wimax_dev %p state %d) = %d\n",
|
|
wimax_dev, state, result);
|
|
kfree(cmd);
|
|
return result;
|
|
}
|
|
|
|
|
|
/*
|
|
* Inform the WiMAX stack of changes in the RF Kill switches reported
|
|
* by the device
|
|
*
|
|
* @i2400m: device descriptor
|
|
* @rfss: TLV for RF Switches status; already validated
|
|
*
|
|
* NOTE: the reports on RF switch status cannot be trusted
|
|
* or used until the device is in a state of RADIO_OFF
|
|
* or greater.
|
|
*/
|
|
void i2400m_report_tlv_rf_switches_status(
|
|
struct i2400m *i2400m,
|
|
const struct i2400m_tlv_rf_switches_status *rfss)
|
|
{
|
|
struct device *dev = i2400m_dev(i2400m);
|
|
enum i2400m_rf_switch_status hw, sw;
|
|
enum wimax_st wimax_state;
|
|
|
|
sw = le32_to_cpu(rfss->sw_rf_switch);
|
|
hw = le32_to_cpu(rfss->hw_rf_switch);
|
|
|
|
d_fnstart(3, dev, "(i2400m %p rfss %p [hw %u sw %u])\n",
|
|
i2400m, rfss, hw, sw);
|
|
/* We only process rw switch evens when the device has been
|
|
* fully initialized */
|
|
wimax_state = wimax_state_get(&i2400m->wimax_dev);
|
|
if (wimax_state < WIMAX_ST_RADIO_OFF) {
|
|
d_printf(3, dev, "ignoring RF switches report, state %u\n",
|
|
wimax_state);
|
|
goto out;
|
|
}
|
|
switch (sw) {
|
|
case I2400M_RF_SWITCH_ON: /* RF Kill disabled (radio on) */
|
|
wimax_report_rfkill_sw(&i2400m->wimax_dev, WIMAX_RF_ON);
|
|
break;
|
|
case I2400M_RF_SWITCH_OFF: /* RF Kill enabled (radio off) */
|
|
wimax_report_rfkill_sw(&i2400m->wimax_dev, WIMAX_RF_OFF);
|
|
break;
|
|
default:
|
|
dev_err(dev, "HW BUG? Unknown RF SW state 0x%x\n", sw);
|
|
}
|
|
|
|
switch (hw) {
|
|
case I2400M_RF_SWITCH_ON: /* RF Kill disabled (radio on) */
|
|
wimax_report_rfkill_hw(&i2400m->wimax_dev, WIMAX_RF_ON);
|
|
break;
|
|
case I2400M_RF_SWITCH_OFF: /* RF Kill enabled (radio off) */
|
|
wimax_report_rfkill_hw(&i2400m->wimax_dev, WIMAX_RF_OFF);
|
|
break;
|
|
default:
|
|
dev_err(dev, "HW BUG? Unknown RF HW state 0x%x\n", hw);
|
|
}
|
|
out:
|
|
d_fnend(3, dev, "(i2400m %p rfss %p [hw %u sw %u]) = void\n",
|
|
i2400m, rfss, hw, sw);
|
|
}
|