summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
-rw-r--r--package/mac80211/patches/550-ath9k_no_multi_desc_frames.patch24
1 files changed, 24 insertions, 0 deletions
diff --git a/package/mac80211/patches/550-ath9k_no_multi_desc_frames.patch b/package/mac80211/patches/550-ath9k_no_multi_desc_frames.patch
new file mode 100644
index 0000000000..3bc730e32e
--- /dev/null
+++ b/package/mac80211/patches/550-ath9k_no_multi_desc_frames.patch
@@ -0,0 +1,24 @@
+--- a/drivers/net/wireless/ath/ath9k/common.c
++++ b/drivers/net/wireless/ath/ath9k/common.c
+@@ -57,13 +57,19 @@ static bool ath9k_rx_accept(struct ath_c
+ * rs_more indicates chained descriptors which can be used
+ * to link buffers together for a sort of scatter-gather
+ * operation.
+- *
++ * reject the frame, we don't support scatter-gather yet and
++ * the frame is probably corrupt anyway
++ */
++ if (rx_stats->rs_more)
++ return false;
++
++ /*
+ * The rx_stats->rs_status will not be set until the end of the
+ * chained descriptors so it can be ignored if rs_more is set. The
+ * rs_more will be false at the last element of the chained
+ * descriptors.
+ */
+- if (!rx_stats->rs_more && rx_stats->rs_status != 0) {
++ if (rx_stats->rs_status != 0) {
+ if (rx_stats->rs_status & ATH9K_RXERR_CRC)
+ rxs->flag |= RX_FLAG_FAILED_FCS_CRC;
+ if (rx_stats->rs_status & ATH9K_RXERR_PHY)