wifi: rtw89: TX nulldata 0 after scan complete

HW scan leak to TX nulldata 0 to AP after scan completed, which allowed
AP start to TX packet to us. Therefore, driver TX nulldata 0 after scan
completed.

Signed-off-by: Chih-Kang Chang <gary.chang@realtek.com>
Signed-off-by: Ping-Ke Shih <pkshih@realtek.com>
Link: https://patch.msgid.link/20250610130034.14692-7-pkshih@realtek.com
This commit is contained in:
Chih-Kang Chang 2025-06-10 21:00:28 +08:00 committed by Ping-Ke Shih
parent 182c7ff8b8
commit 47a498b84f
2 changed files with 11 additions and 0 deletions

View File

@ -5205,6 +5205,7 @@ void rtw89_core_scan_complete(struct rtw89_dev *rtwdev,
{
struct ieee80211_bss_conf *bss_conf;
struct rtw89_bb_ctx *bb;
int ret;
if (!rtwvif_link)
return;
@ -5224,6 +5225,14 @@ void rtw89_core_scan_complete(struct rtw89_dev *rtwdev,
rtw89_phy_config_edcca(rtwdev, bb, false);
rtw89_tas_scan(rtwdev, false);
if (hw_scan) {
ret = rtw89_core_send_nullfunc(rtwdev, rtwvif_link, false, false,
RTW89_SCAN_NULL_TIMEOUT);
if (ret)
rtw89_debug(rtwdev, RTW89_DBG_TXRX,
"scan send null-0 failed: %d\n", ret);
}
rtwdev->scanning = false;
rtw89_for_each_active_bb(rtwdev, bb)
bb->dig.bypass_dig = true;

View File

@ -3440,6 +3440,8 @@ struct rtw89_tx_skb_data {
u8 hci_priv[];
};
#define RTW89_SCAN_NULL_TIMEOUT 30
#define RTW89_ROC_IDLE_TIMEOUT 500
#define RTW89_ROC_TX_TIMEOUT 30
enum rtw89_roc_state {