qca-wifi: Tx capture stability fixes
1) Avoid removing wrong nbuf from queue
In corner case, the current flow can remove first nbuf instead of
actual nbuf from queue, this can lead to having the actual pointer
stored at two array indexs.
2) tsf wraparound handling for mgmt frame
3) Mpdu tried is higher than ba_sisze
mpdus[] is allocated with ba_size, it is observed that mpdu_tried
is higher than ba_size, which can lead to buffer overlow.
Added the check of ba_size along with mpdu_tried.
To avoid it, copied nbuf in the corner case, and left the actual nbuf
in the xretries queue.
Change-Id: Ifa57eaf62cf50aa2c356a6d1f41ef4b7283be52e
CRs-Fixed: 2643848
1 file changed