diff options
Diffstat (limited to 'drivers')
| -rw-r--r-- | drivers/net/wireless/brcm80211/brcmfmac/msgbuf.c | 12 |
1 files changed, 5 insertions, 7 deletions
diff --git a/drivers/net/wireless/brcm80211/brcmfmac/msgbuf.c b/drivers/net/wireless/brcm80211/brcmfmac/msgbuf.c index 4ec9811f49c8..65efb1468988 100644 --- a/drivers/net/wireless/brcm80211/brcmfmac/msgbuf.c +++ b/drivers/net/wireless/brcm80211/brcmfmac/msgbuf.c | |||
| @@ -511,11 +511,9 @@ static int brcmf_msgbuf_query_dcmd(struct brcmf_pub *drvr, int ifidx, | |||
| 511 | msgbuf->rx_pktids, | 511 | msgbuf->rx_pktids, |
| 512 | msgbuf->ioctl_resp_pktid); | 512 | msgbuf->ioctl_resp_pktid); |
| 513 | if (msgbuf->ioctl_resp_ret_len != 0) { | 513 | if (msgbuf->ioctl_resp_ret_len != 0) { |
| 514 | if (!skb) { | 514 | if (!skb) |
| 515 | brcmf_err("Invalid packet id idx recv'd %d\n", | ||
| 516 | msgbuf->ioctl_resp_pktid); | ||
| 517 | return -EBADF; | 515 | return -EBADF; |
| 518 | } | 516 | |
| 519 | memcpy(buf, skb->data, (len < msgbuf->ioctl_resp_ret_len) ? | 517 | memcpy(buf, skb->data, (len < msgbuf->ioctl_resp_ret_len) ? |
| 520 | len : msgbuf->ioctl_resp_ret_len); | 518 | len : msgbuf->ioctl_resp_ret_len); |
| 521 | } | 519 | } |
| @@ -874,10 +872,8 @@ brcmf_msgbuf_process_txstatus(struct brcmf_msgbuf *msgbuf, void *buf) | |||
| 874 | flowid -= BRCMF_NROF_H2D_COMMON_MSGRINGS; | 872 | flowid -= BRCMF_NROF_H2D_COMMON_MSGRINGS; |
| 875 | skb = brcmf_msgbuf_get_pktid(msgbuf->drvr->bus_if->dev, | 873 | skb = brcmf_msgbuf_get_pktid(msgbuf->drvr->bus_if->dev, |
| 876 | msgbuf->tx_pktids, idx); | 874 | msgbuf->tx_pktids, idx); |
| 877 | if (!skb) { | 875 | if (!skb) |
| 878 | brcmf_err("Invalid packet id idx recv'd %d\n", idx); | ||
| 879 | return; | 876 | return; |
| 880 | } | ||
| 881 | 877 | ||
| 882 | set_bit(flowid, msgbuf->txstatus_done_map); | 878 | set_bit(flowid, msgbuf->txstatus_done_map); |
| 883 | commonring = msgbuf->flowrings[flowid]; | 879 | commonring = msgbuf->flowrings[flowid]; |
| @@ -1156,6 +1152,8 @@ brcmf_msgbuf_process_rx_complete(struct brcmf_msgbuf *msgbuf, void *buf) | |||
| 1156 | 1152 | ||
| 1157 | skb = brcmf_msgbuf_get_pktid(msgbuf->drvr->bus_if->dev, | 1153 | skb = brcmf_msgbuf_get_pktid(msgbuf->drvr->bus_if->dev, |
| 1158 | msgbuf->rx_pktids, idx); | 1154 | msgbuf->rx_pktids, idx); |
| 1155 | if (!skb) | ||
| 1156 | return; | ||
| 1159 | 1157 | ||
| 1160 | if (data_offset) | 1158 | if (data_offset) |
| 1161 | skb_pull(skb, data_offset); | 1159 | skb_pull(skb, data_offset); |
