Commit 55cf1048 authored by Avraham Stern's avatar Avraham Stern Committed by Johannes Berg
Browse files

iwlwifi: mei: clear the sap data header before sending 



The SAP data header has some fields that are marked as reserved
but are actually in use by CSME. Clear those fields before sending
the data to avoid having random values in those fields.

Cc: stable@vger.kernel.org
Signed-off-by: default avatarAvraham Stern <avraham.stern@intel.com>
Signed-off-by: default avatarGregory Greenman <gregory.greenman@intel.com>
Link: https://lore.kernel.org/r/20220517120045.8dd3423cf683.I02976028eaa6aab395cb2e701fa7127212762eb7@changeid


Signed-off-by: default avatarJohannes Berg <johannes.berg@intel.com>
parent 98c0de7b

drivers/net/wireless/intel/iwlwifi/mei/main.c

+1 −0
Original line number Diff line number Diff line
@@ -493,6 +493,7 @@ void iwl_mei_add_data_to_ring(struct sk_buff *skb, bool cb_tx) 
	if (cb_tx) {

		struct iwl_sap_cb_data *cb_hdr = skb_push(skb, sizeof(*cb_hdr));



		memset(cb_hdr, 0, sizeof(*cb_hdr));

		cb_hdr->hdr.type = cpu_to_le16(SAP_MSG_CB_DATA_PACKET);

		cb_hdr->hdr.len = cpu_to_le16(skb->len - sizeof(cb_hdr->hdr));

		cb_hdr->hdr.seq_num = cpu_to_le32(atomic_inc_return(&mei->sap_seq_no));