git: iwm(4): mask closed_rb_num to the RX ring size
Aaron LI
aly at crater.dragonflybsd.org
Thu Oct 22 07:23:35 PDT 2026
commit 5b1a42b685803956f042e2f3c440cb907d8fc162
Author: David Bidner <david at crap.solutions>
Date: Thu Oct 15 13:21:07 2026 +0200
iwm(4): mask closed_rb_num to the RX ring size
The 9000-series firmware can report a closed_rb_num at or beyond the
ring size (9000 step A0 wrap-around). iwm_notif_intr() compares it
against the local consumer index, which is always below the ring size,
so the two would never become equal; the loop would cycle through stale
ring entries and the write-pointer update would use a bogus index.
See commits 5eae443eb5e2 in Linux and 3287dca4fa10 in OpenBSD.
Bug: https://bugs.dragonflybsd.org/issues/3449
Summary of changes:
sys/dev/netif/iwm/if_iwm.c | 1 +
1 file changed, 1 insertion(+)
http://gitweb.dragonflybsd.org/dragonfly.git/commitdiff/5b1a42b685803956f042e2f3c440cb907d8fc162
--
DragonFly BSD source repository
More information about the Commits
mailing list