wlan: RX Packet invalid length problem fix

RX allocated frame size should be always same.
Whatever reason this length is not matched with default length
Kernel DMA mapping or RX frame itself will have problem.
So, when alloc frame allocator will detect weird length
and discard this frame.
Transport RX module will try later to allocate again.

Change-Id: I3a06ae42e7e0c0028545140fec718880ebd29300
CRs-fixed: 458016
Debug prints for SAP/STA Concurrency

Some debug logs on basis of static code analysis
for STA/SAP Concurrency.

CRs-Fixed: 460985
Change-Id: I2bc73811dcd650ab0ca0d08c12562cbc6883a996
wlan: Release 3.2.3.95
wlan: avoid NULL pointer dereference in hdd_wmm_sme_callback()

Static source code analysis identified a CCX-enabled code path in
hdd_wmm_sme_callback() where a NULL pointer could be dereferenced.
Add logic to NULL check the pointer before the dereference.

Change-Id: I02c6d22abbdcd4a93109ed5bc367ccbd68b7ff51
CRs-fixed: 470188
wlan: Fix multiple issues in sme_RrmSendBeaconReportXmitInd()

Static source code analysis identified several issues in
sme_RrmSendBeaconReportXmitInd() including a potential NULL pointer
dereference and a use after free, so fix these issues.

Change-Id: I4b00eee7962b9c32574584f6bd42a01ed1d20e33
CRs-fixed: 470188
wlan: Fix uninitialized variable reference in WLANTL_STARxAuth()

Static source code analysis identified WAPI feature code in function
WLANTL_STARxAuth() which is accessing an uninitialized variable.
Modify the code to initialize the variable before it is used.

Change-Id: I09d6e11cbb19e1b6dc07c9be6af3dadff7f306cf
CRs-fixed: 470188
wlan: Fix uninitialized variable in __limProcessSmeChangeBI()

Static source code analysis identified a case where
__limProcessSmeChangeBI() is reading an uninitialized struct field.
Modify the code to properly initialize the field.

Change-Id: Ia4efd1cce70c5e95c0c77fc461a8c3867af1c061
CRs-fixed: 470188
wlan: Fix memory leak in WDA_WniCfgDnld()

Static source code analysis identified an error path in
WDA_WniCfgDnld() which could leak memory.  Update the code so that the
allocated config file buffer is always freed.

Change-Id: I186250d2a7f00f389e75bdc9e791ead065996502
CRs-fixed: 470188
wlan: Fix potential skb leak in send_btc_nlink_msg()

Static source code analysis identified an error path in
send_btc_nlink_msg() which could potentially leak an skb.
Modify send_btc_nlink_msg() so that the skb is freed.

Change-Id: Ib14c09a3a81298db370d5f62b8a8e3cef3135d47
CRs-fixed: 470188
wlan: Fix memory leaks in limPostMlmAddBAReq()

Many of the error paths in limPostMlmAddBAReq() leak the allocated
pMlmAddBAReq buffer.  Update the error handling to free the buffer.

Change-Id: Icdfc803af53ba577786d7a0f5720f1fcd4ccd487
CRs-fixed: 470188
wlan: Fix memory leak in limSendRemoveStaKeyReq()

An error path in limSendRemoveStaKeyReq() can leak the allocated
pRemoveStaKeyParams buffer.  Free the buffer if the error occurs.

Change-Id: Ife41d7cae598d9cdd8c559d31aa0f11d203ae1c3
CRs-fixed: 470188
wlan: Fix memory leak in limSendMlmAssocInd()

Static source code analysis identified an error path in
limSendMlmAssocInd() which will leak an allocated buffer.  Fix
limSendMlmAssocInd() so that it frees the buffer before returning.

Change-Id: Ic3f75099bc82799770a6d8caac28abde678c373f
CRs-fixed: 470188
wlan: Fix memory leaks in limProcessMlmFTReassocReq()

Most of the error paths in limProcessMlmFTReassocReq() do not free the
allocated message buffer.  Update the code to free the buffer before
returning.

Change-Id: I8bc0645bd6203fa060a3bf6367b101f7d02e68e1
CRs-fixed: 470188
wlan: Fix NULL pointer dereference in csrRoamIssueSetKeyCommand()

Static source code analysis identified a potential NULL pointer
dereference which could occur in csrRoamIssueSetKeyCommand() when
FEATURE_WLAN_CCX is enabled due to the order of operations.  Update
the code so that csrReleaseCommandSetKey() can only be called if
pCommand is not NULL.

Change-Id: Id7e822f2be02bcbefd5d6e6d502b0c7d3b4496ae
CRs-fixed: 470188
wlan: Fix use of uninitialized variable in iw_get_range()

Static source code analysis identified two instances where
iw_get_range() is invoking ccmCfgGetStr() with the in/out length
parameter uninitialized.  Modify the code to initialize the parameter
prior to invoking ccmCfgGetStr().

Change-Id: I6aca769602de12c0a95878112dd6806e4cdc9b22
CRs-fixed: 470188
wlan: Out of scope object reference in hdd_hostapd_SAPEventCB()

Static source code analysis identified an issue where a pointer to
"struct iw_michaelmicfailure msg" was being referenced outside its
scope.  Relocate the definition so that it will still be in scope
when the pointer to it is referenced.

Change-Id: I7ff80ce2e0934ecf0ebd1a4f492e8761d4b0f5d8
CRs-fixed: 470188
wlan: avoid buffer overflow in hdd_parse_channellist()

Static source code analysis identified multiple buffer overflow issues
in hdd_parse_channellist().  Some, but not all, were addressed in a
recent change.  Address the other outstanding buffer overflow issues.

Change-Id: I25d073a3e32f557ae3217fe9348dad9a04d79331
CRs-fixed: 470188
wlan: FW power down delay fix

If DXE TX CH has low resource condition,
health monitor will be started. Health monitor feature toggles
SMSM to ensure HW wake up. SMSM toggle is empty->non-empty ring set.
This non-empty ring toggle will prevent FW power down.
SMSM toggle sequnce will be changed as empty->non-empty->empty.
Then HW will wake up and TX chain also will be kicked.
Power down sequence will not be blocked.

Change-Id: Icd96fe576ff143a87c7a99fa6feafbdffc0ef922
CRs-fixed: 464243
wlan: Enabling quarky for reading memory

Enabling quarky for reading BD and CMEM descriptors

CR-Fixed: 471132
Change-Id: I82706b26f7fe606218e3cb5dc18acdc805ce67ca
wlan: Fix memory leak in sme_RrmProcessNeighborReport()

Static source code analysis identified an error path in which an
allocated buffer can be leaked by sme_RrmProcessNeighborReport().
Update the code to free the buffer when the error occurs.

Change-Id: I31a7354cb5c840e74f83a49a520053b389a7fe21
CRs-fixed: 470188