ath11k: Change max no of active probe SSID and BSSID to fw capability
authorKarthikeyan Kathirvel <quic_kathirve@quicinc.com>
Fri, 1 Apr 2022 11:53:09 +0000 (14:53 +0300)
committerKalle Valo <quic_kvalo@quicinc.com>
Tue, 5 Apr 2022 08:08:48 +0000 (11:08 +0300)
commit50dc9ce9f80554a88e33b73c30851acf2be36ed3
tree6ed383de9238398c80949e2550e9c62f53c37c65
parent5b32b6dd966338005671780c1df02327582c4be4
ath11k: Change max no of active probe SSID and BSSID to fw capability

The maximum number of SSIDs in a for active probe requests is currently
reported as 16 (WLAN_SCAN_PARAMS_MAX_SSID) when registering the driver.
The scan_req_params structure only has the capacity to hold 10 SSIDs.
This leads to a buffer overflow which can be triggered from
wpa_supplicant in userspace. When copying the SSIDs into the
scan_req_params structure in the ath11k_mac_op_hw_scan route, it can
overwrite the extraie pointer.

Firmware supports 16 ssid * 4 bssid, for each ssid 4 bssid combo probe
request will be sent, so totally 64 probe requests supported. So
set both max ssid and bssid to 16 and 4 respectively. Remove the
redundant macros of ssid and bssid.

Tested-on: IPQ8074 hw2.0 AHB WLAN.HK.2.7.0.1-01300-QCAHKSWPL_SILICONZ-1

Signed-off-by: Karthikeyan Kathirvel <quic_kathirve@quicinc.com>
Signed-off-by: Kalle Valo <quic_kvalo@quicinc.com>
Link: https://lore.kernel.org/r/20220329150221.21907-1-quic_kathirve@quicinc.com
drivers/net/wireless/ath/ath11k/wmi.h