git: iwm(4): mask closed_rb_num to the RX ring size

Aaron LI aly at crater.dragonflybsd.org
Thu Oct 22 07:23:35 PDT 2026


commit 5b1a42b685803956f042e2f3c440cb907d8fc162
Author: David Bidner <david at crap.solutions>
Date:   Thu Oct 15 13:21:07 2026 +0200

    iwm(4): mask closed_rb_num to the RX ring size
    
    The 9000-series firmware can report a closed_rb_num at or beyond the
    ring size (9000 step A0 wrap-around).  iwm_notif_intr() compares it
    against the local consumer index, which is always below the ring size,
    so the two would never become equal; the loop would cycle through stale
    ring entries and the write-pointer update would use a bogus index.
    
    See commits 5eae443eb5e2 in Linux and 3287dca4fa10 in OpenBSD.
    
    Bug: https://bugs.dragonflybsd.org/issues/3449

Summary of changes:
 sys/dev/netif/iwm/if_iwm.c | 1 +
 1 file changed, 1 insertion(+)

http://gitweb.dragonflybsd.org/dragonfly.git/commitdiff/5b1a42b685803956f042e2f3c440cb907d8fc162


-- 
DragonFly BSD source repository


More information about the Commits mailing list