ASoC: msm: qdsp6v2: Copy frame data based on frame length

Copying data based on count will result in copying
uninitialized data to userspace which can potentially
disclose sensitive data. Fix by copying data based on
frame instead.

CRs-Fixed: 552528, 552531
Change-Id: I307b285ef2aefe00b953cf650582e9ff7e03ceb1
Signed-off-by: Shiv Maliyappanahalli <smaliyap@codeaurora.org>
ASoC: msm: qdsp6v2: Fix buffer overflow in voice driver

Userspace registers calibration data with acdb driver
through ioctls. Voice driver registers the calibration
data with CVD by querying acdb data from acdb driver and
copies the calibration data in apr message.

The size of the calibration data can be controlled by userspace
and can result in buffer overflow if the calibration size is
greater than the destination buffer size.
Reject acdb data if the size is greater than the size of
destination buffer.

Change-Id: I1b495390d67907afc608ed8233bf916777d38e11
CRs-fixed: 548872
Signed-off-by: Shiv Maliyappanahalli <smaliyap@codeaurora.org>
wlan: Fix race condition for reliable delivery of action frames.

There is race between McThread and Linux netlink thread.
Expiration of remain on channel in driver and also extending
remain on channel to send an action frame are happening
at the same time. After extending remain on channel in HDD,
remain on channel context becomes NULL at a later point when
driver is about to call SME API to send action frame and
this fix will help to start a fresh remain on channel as the
remain on channel context was NULL.

CRs-Fixed: 538218
Change-Id: I010186432eb927f9a9a8e619814aec3d4118f977
wlan: Updating the Channel list based on 11d from Nv.bin.

Don't consider the channel list from AP as there may be some
rouge AP's which may advertise some unwanted channels or block
some wanted channels. Just trust NV.bin or REGDB or CRDA.

CRs-Fixed: 550247
Change-Id: Idffc17c2aa63d99b6158774367fd2af3fe8cf7ec
wlan: FTM second start crash fix.

New WIPHY API, with FTM mode, WIPHY registration does not happen.
So, cfg80211 does not have WIPHY instance.
But when unload driver, try to un-register WIPHY.
As a result, cfg80211 will crash with NULL pointer access.
If FTM mode, do not try to un-register WIPHY.

Change-Id: Ia8e2c10329cef8098981d7f2a72d57c0f2d636c4
CRs-fixed: 546549
wlan:Fix for BD rates in STA mode for probe request

In STA mode probe requests are sent at PEER STA Rates which
resulted in sending probe requests at 6Mbps in 2.4GHz mode.
Fix is to use BD rates instead of PEER STA for sending the probe
requests.

Change-Id: Ia9409e3f83eadd462df2da6c5cb0d6bce46beaeb
CRs-Fixed: 538112
wlan: Fix for the Multicast packet filter failure at P2P CLI interface

Check the sus_res_mcastbcast_filter value instead of
configuredMcastBcastFilter value so in STA & P2P CLI concurrency
case host will configure Multicast packet filter for both interface

Change-Id: Ifcf4290f6b1c16b5dbcf6cc47f9de9c2dc3c2e6b
CRs-Fixed: 564981
wlan:SAP:Configure SAP country code through the gAPCntryCode

Added functionality to configure the SAP Country code through
the user configurable parameter 'gAPCntryCode'

Change-Id: I162455a6de4ea5ba43a72d88e755c6749818bc3a
CRs-Fixed: 564664
wlan:Revision 3.2.6.127

Revision 3.2.6.127

Change-Id: I3d0510bd855bc5fe253c064089349b1f9b9c706f
Merge "wlan: Fix for the Multicast packet filter failure at P2P CLI interface"
Merge "ASoC: msm: qdsp6v2: Fix buffer overflow in voice driver"
Merge "ASoC: msm: qdsp6v2: Copy frame data based on frame length"
Merge "wlan: Updating the Channel list based on 11d from Nv.bin."
wlan:  Modify the debug log level to Info.

The requestBufLen for the PNO triggered by the framework is
always 0 and hence the debug message always gets logged in.
Hence move the error log level to info , to address this
redundant log.

Change-Id: I18b1959688a941b95a15c22729856056db84b6ef
CRs-fixed: 565386
wlan: Added ioctl to enable/disable Traffic Monitor Feature Dynamically

Added ioctl to enable/disable Traffic Monitor Feature Dynamically

Change-Id: I63f389295ca94b9b27c9b8df5cb1274fc616afbd
CRs-fixed: 567334
Merge "wlan: FTM second start crash fix."
Merge "wlan:Fix for BD rates in STA mode for probe request"
Merge "wlan:Revision 3.2.6.127"
Merge "wlan: Fix race condition for reliable delivery of action frames."
wlan:Revision 3.2.6.128

Revision 3.2.6.128

Change-Id: I2d0504d8eea30d0a805ae5edf7098e9949a80b6f