Re: bf_next not NULL!

2016-08-02 Thread Andrew Stevenson

On 02 Aug 2016, at 22:53, Adrian Chadd  wrote:

> do this:


Thanks. I don’t want to speak too soon but the ping time are looking promising. 
I’ll let you know in a day or two how it goes.

For anyone following along at home the sysctl is "dev.ath.0.forcebstuck” (no 
underscore).

Thanks Adrian!

Andrew
___
freebsd-wireless@freebsd.org mailing list
https://lists.freebsd.org/mailman/listinfo/freebsd-wireless
To unsubscribe, send any mail to "freebsd-wireless-unsubscr...@freebsd.org"


[Bug 211511] panic while restarting network (iwm7260 wifi)

2016-08-02 Thread bugzilla-noreply
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=211511

Mark Linimon  changed:

   What|Removed |Added

   Assignee|freebsd-b...@freebsd.org|freebsd-wirel...@freebsd.or
   ||g
 CC|freebsd-am...@freebsd.org   |sbr...@freebsd.org

-- 
You are receiving this mail because:
You are the assignee for the bug.
___
freebsd-wireless@freebsd.org mailing list
https://lists.freebsd.org/mailman/listinfo/freebsd-wireless
To unsubscribe, send any mail to "freebsd-wireless-unsubscr...@freebsd.org"


Re: bf_next not NULL!

2016-08-02 Thread Adrian Chadd
hi,

do this:

sysctl dev.ath.0.hal.force_full_reset=1
while true; do
sysctl dev.ath.0.force_bstuck=1
sleep 300
done

.. see if that fixes things.


-adrian

..

On 2 August 2016 at 12:19, Andrew Stevenson  wrote:
>
> On 29 Jul 2016, at 23:07, Adrian Chadd  wrote:
>
>> Hi,
>>
>> Yeah, the problem is that the NF calibration will time out, and I
>> don't know if it's logging that by default.
>>
>> Do sysctl dev.ath.0.hal.debug=0x8 and then see what it lsogging when
>> things hang.
>
> Ironically, after doing that it stayed up for the longest period in a while. 
> It has now died again however. I don’t know when it stopped working exactly 
> but there is nothing logged for ath0 since 0830 this morning (12.5 hours 
> ago)...ath0: stuck beacon; resetting (bmiss count 4). wlan0 has logged, about 
> an hour later, wlan0: STA 00:21:e9:e7:a9:e7 IEEE 802.11: disassociated.
>
> I don’t see anything logged via syslog, or in dmesg, that is different than 
> before the sysctl change.
>
> Thanks,
>
> Andrew
___
freebsd-wireless@freebsd.org mailing list
https://lists.freebsd.org/mailman/listinfo/freebsd-wireless
To unsubscribe, send any mail to "freebsd-wireless-unsubscr...@freebsd.org"

[Bug 210992] Panic while sending/fetching files over WiFi/Internet

2016-08-02 Thread bugzilla-noreply
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=210992

Mark Linimon  changed:

   What|Removed |Added

   Assignee|freebsd-b...@freebsd.org|freebsd-wirel...@freebsd.or
   ||g

-- 
You are receiving this mail because:
You are the assignee for the bug.
___
freebsd-wireless@freebsd.org mailing list
https://lists.freebsd.org/mailman/listinfo/freebsd-wireless
To unsubscribe, send any mail to "freebsd-wireless-unsubscr...@freebsd.org"


Re: bf_next not NULL!

2016-08-02 Thread Andrew Stevenson

On 29 Jul 2016, at 23:07, Adrian Chadd  wrote:

> Hi,
> 
> Yeah, the problem is that the NF calibration will time out, and I
> don't know if it's logging that by default.
> 
> Do sysctl dev.ath.0.hal.debug=0x8 and then see what it lsogging when
> things hang.

Ironically, after doing that it stayed up for the longest period in a while. It 
has now died again however. I don’t know when it stopped working exactly but 
there is nothing logged for ath0 since 0830 this morning (12.5 hours 
ago)...ath0: stuck beacon; resetting (bmiss count 4). wlan0 has logged, about 
an hour later, wlan0: STA 00:21:e9:e7:a9:e7 IEEE 802.11: disassociated.

I don’t see anything logged via syslog, or in dmesg, that is different than 
before the sysctl change.

Thanks,

Andrew
___
freebsd-wireless@freebsd.org mailing list
https://lists.freebsd.org/mailman/listinfo/freebsd-wireless
To unsubscribe, send any mail to "freebsd-wireless-unsubscr...@freebsd.org"


Re: Fwd: New Defects reported by Coverity Scan for FreeBSD

2016-08-02 Thread Andriy Voskoboinyk

Some of them (1361062, 1361063) are fixed in
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=211519 attachment
(I will commit it after testing).


Hi all,

Coverity noticed a few issues in iwm(4) recently.  Adrian suggested I
forward them to this list.  I've trimmed it down to just the relevant
iwm(4) bits.  Hope it helps, anyway.

Cheers,
Conrad


-- Forwarded message --
From: 
Date: Tue, Aug 2, 2016 at 10:24 AM
Subject: New Defects reported by Coverity Scan for FreeBSD
To: c...@freebsd.org


Hi,

Please find the latest report on new defect(s) introduced to FreeBSD
found with Coverity Scan.

23 new defect(s) introduced to FreeBSD found with Coverity Scan. 11
defect(s), reported by Coverity Scan earlier, were marked fixed in the
recent build analyzed by Coverity Scan.

New defect(s) Reported-by: Coverity Scan Showing 20 of 23 defect(s)

...

__
* CID 1361062: (DEADCODE) /sys/dev/iwm/if_iwm_scan.c: 702 in
iwm_mvm_lmac_scan() 696 req->tx_cmd[1].rate_n_flags = 697
iwm_mvm_scan_rate_n_flags(sc, IEEE80211_CHAN_5GHZ, 1/*XXX*/); 698
req->tx_cmd[1].sta_id = sc->sc_aux_sta.sta_id; 699 700 /* Check if
we're doing an active directed scan. */ 701 if (ssid_len != 0) {

CID 1361062: (DEADCODE) Execution cannot reach this statement:
“req->direct_scan[0].id = IE…”.

702 req->direct_scan[0].id = IEEE80211_ELEMID_SSID; 703
req->direct_scan[0].len = ssid_len; 704
memcpy(req->direct_scan[0].ssid, ssid, ssid_len); 705 } 706 707
req->n_channels = iwm_mvm_lmac_scan_fill_channels(sc,
/sys/dev/iwm/if_iwm_scan.c: 674 in iwm_mvm_lmac_scan() 668
req->scan_flags = htole32(IWM_MVM_LMAC_SCAN_FLAG_PASS_ALL | 669
IWM_MVM_LMAC_SCAN_FLAG_ITER_COMPLETE | 670
IWM_MVM_LMAC_SCAN_FLAG_EXTENDED_DWELL); 671 if (ssid_len == 0) 672
req->scan_flags |= htole32(IWM_MVM_LMAC_SCAN_FLAG_PASSIVE); 673 else

CID 1361062: (DEADCODE) Execution cannot reach this statement:
“req->scan_flags |= 4U;”.

674 req->scan_flags |= 675
htole32(IWM_MVM_LMAC_SCAN_FLAG_PRE_CONNECTION); 676 if
(isset(sc->sc_enabled_capa, 677
IWM_UCODE_TLV_CAPA_DS_PARAM_SET_IE_SUPPORT)) 678 req->scan_flags |=
htole32(IWM_MVM_LMAC_SCAN_FLAGS_RRM_ENABLED); 679

** CID 1361063: Possible Control flow issues (DEADCODE)
/sys/dev/iwm/if_iwm_scan.c: 593 in iwm_mvm_umac_scan()

__
* CID 1361063: Possible Control flow issues (DEADCODE)
/sys/dev/iwm/if_iwm_scan.c: 593 in iwm_mvm_umac_scan() 587 tail =
(void )((char *)>data + 588 sizeof(struct
iwm_scan_channel_cfg_umac) * 589 sc->sc_capa_n_scan_channels); 590 591
/ Check if we're doing an active directed scan. */ 592 if (ssid_len !=
0) {

CID 1361063: Possible Control flow issues (DEADCODE) Execution cannot
reach this statement: “tail->direct_scan[0].id = I…”.

593 tail->direct_scan[0].id = IEEE80211_ELEMID_SSID; 594
tail->direct_scan[0].len = ssid_len; 595
memcpy(tail->direct_scan[0].ssid, ssid, ssid_len); 596
req->general_flags |= 597
htole32(IWM_UMAC_SCAN_GEN_FLAGS_PRE_CONNECT); 598 } else {

** CID 1361064: Null pointer dereferences (FORWARD_NULL)
/sys/dev/iwm/if_iwm.c: 4443 in iwm_send_update_mcc_cmd()

__
* CID 1361064: Null pointer dereferences (FORWARD_NULL)
/sys/dev/iwm/if_iwm.c: 4443 in iwm_send_update_mcc_cmd() 4437 if
(resp_v2) { 4438 mcc_resp = (void *)pkt->data; 4439 mcc =
mcc_resp->mcc; 4440 n_channels = le32toh(mcc_resp->n_channels); 4441 }
else { 4442 mcc_resp_v1 = (void *)pkt->data;

CID 1361064: Null pointer dereferences (FORWARD_NULL) Dereferencing
null pointer “mcc_resp_v1”.

4443 mcc = mcc_resp_v1->mcc;  n_channels =
le32toh(mcc_resp_v1->n_channels); 4445 } 4446 4447 /* W/A for a FW/NVM
issue – returns 0×00 for the world domain */ 4448 if (mcc == 0)

** CID 1361065: Null pointer dereferences (FORWARD_NULL)
/sys/dev/iwm/if_iwm.c: 4439 in iwm_send_update_mcc_cmd()

__
* CID 1361065: Null pointer dereferences (FORWARD_NULL)
/sys/dev/iwm/if_iwm.c: 4439 in iwm_send_update_mcc_cmd() 4433 #ifdef
IWM_DEBUG 4434 pkt = hcmd.resp_pkt; 4435 4436 /* Extract MCC response
*/ 4437 if (resp_v2) { 4438 mcc_resp = (void *)pkt->data;

CID 1361065: Null pointer dereferences (FORWARD_NULL) Dereferencing
null pointer “mcc_resp”.

4439 mcc = mcc_resp->mcc; 4440 n_channels =
le32toh(mcc_resp->n_channels); 4441 } else { 4442 mcc_resp_v1 = (void
*)pkt->data; 4443 mcc = mcc_resp_v1->mcc;  n_channels =
le32toh(mcc_resp_v1->n_channels);

...

** CID 1361068: Memory – corruptions (OVERRUN) /sys/dev/iwm/if_iwm.c:
749 in iwm_read_firmware()

__
* CID 1361068: Memory – corruptions (OVERRUN) /sys/dev/iwm/if_iwm.c:
749 in 

Fwd: New Defects reported by Coverity Scan for FreeBSD

2016-08-02 Thread Conrad Meyer
Hi all,

Coverity noticed a few issues in iwm(4) recently.  Adrian suggested I
forward them to this list.  I've trimmed it down to just the relevant
iwm(4) bits.  Hope it helps, anyway.

Cheers,
Conrad


-- Forwarded message --
From: 
Date: Tue, Aug 2, 2016 at 10:24 AM
Subject: New Defects reported by Coverity Scan for FreeBSD
To: c...@freebsd.org


Hi,

Please find the latest report on new defect(s) introduced to FreeBSD
found with Coverity Scan.

23 new defect(s) introduced to FreeBSD found with Coverity Scan. 11
defect(s), reported by Coverity Scan earlier, were marked fixed in the
recent build analyzed by Coverity Scan.

New defect(s) Reported-by: Coverity Scan Showing 20 of 23 defect(s)

...

__
* CID 1361062: (DEADCODE) /sys/dev/iwm/if_iwm_scan.c: 702 in
iwm_mvm_lmac_scan() 696 req->tx_cmd[1].rate_n_flags = 697
iwm_mvm_scan_rate_n_flags(sc, IEEE80211_CHAN_5GHZ, 1/*XXX*/); 698
req->tx_cmd[1].sta_id = sc->sc_aux_sta.sta_id; 699 700 /* Check if
we're doing an active directed scan. */ 701 if (ssid_len != 0) {

CID 1361062: (DEADCODE) Execution cannot reach this statement:
“req->direct_scan[0].id = IE…”.

702 req->direct_scan[0].id = IEEE80211_ELEMID_SSID; 703
req->direct_scan[0].len = ssid_len; 704
memcpy(req->direct_scan[0].ssid, ssid, ssid_len); 705 } 706 707
req->n_channels = iwm_mvm_lmac_scan_fill_channels(sc,
/sys/dev/iwm/if_iwm_scan.c: 674 in iwm_mvm_lmac_scan() 668
req->scan_flags = htole32(IWM_MVM_LMAC_SCAN_FLAG_PASS_ALL | 669
IWM_MVM_LMAC_SCAN_FLAG_ITER_COMPLETE | 670
IWM_MVM_LMAC_SCAN_FLAG_EXTENDED_DWELL); 671 if (ssid_len == 0) 672
req->scan_flags |= htole32(IWM_MVM_LMAC_SCAN_FLAG_PASSIVE); 673 else

CID 1361062: (DEADCODE) Execution cannot reach this statement:
“req->scan_flags |= 4U;”.

674 req->scan_flags |= 675
htole32(IWM_MVM_LMAC_SCAN_FLAG_PRE_CONNECTION); 676 if
(isset(sc->sc_enabled_capa, 677
IWM_UCODE_TLV_CAPA_DS_PARAM_SET_IE_SUPPORT)) 678 req->scan_flags |=
htole32(IWM_MVM_LMAC_SCAN_FLAGS_RRM_ENABLED); 679

** CID 1361063: Possible Control flow issues (DEADCODE)
/sys/dev/iwm/if_iwm_scan.c: 593 in iwm_mvm_umac_scan()

__
* CID 1361063: Possible Control flow issues (DEADCODE)
/sys/dev/iwm/if_iwm_scan.c: 593 in iwm_mvm_umac_scan() 587 tail =
(void )((char *)>data + 588 sizeof(struct
iwm_scan_channel_cfg_umac) * 589 sc->sc_capa_n_scan_channels); 590 591
/ Check if we're doing an active directed scan. */ 592 if (ssid_len !=
0) {

CID 1361063: Possible Control flow issues (DEADCODE) Execution cannot
reach this statement: “tail->direct_scan[0].id = I…”.

593 tail->direct_scan[0].id = IEEE80211_ELEMID_SSID; 594
tail->direct_scan[0].len = ssid_len; 595
memcpy(tail->direct_scan[0].ssid, ssid, ssid_len); 596
req->general_flags |= 597
htole32(IWM_UMAC_SCAN_GEN_FLAGS_PRE_CONNECT); 598 } else {

** CID 1361064: Null pointer dereferences (FORWARD_NULL)
/sys/dev/iwm/if_iwm.c: 4443 in iwm_send_update_mcc_cmd()

__
* CID 1361064: Null pointer dereferences (FORWARD_NULL)
/sys/dev/iwm/if_iwm.c: 4443 in iwm_send_update_mcc_cmd() 4437 if
(resp_v2) { 4438 mcc_resp = (void *)pkt->data; 4439 mcc =
mcc_resp->mcc; 4440 n_channels = le32toh(mcc_resp->n_channels); 4441 }
else { 4442 mcc_resp_v1 = (void *)pkt->data;

CID 1361064: Null pointer dereferences (FORWARD_NULL) Dereferencing
null pointer “mcc_resp_v1”.

4443 mcc = mcc_resp_v1->mcc;  n_channels =
le32toh(mcc_resp_v1->n_channels); 4445 } 4446 4447 /* W/A for a FW/NVM
issue – returns 0×00 for the world domain */ 4448 if (mcc == 0)

** CID 1361065: Null pointer dereferences (FORWARD_NULL)
/sys/dev/iwm/if_iwm.c: 4439 in iwm_send_update_mcc_cmd()

__
* CID 1361065: Null pointer dereferences (FORWARD_NULL)
/sys/dev/iwm/if_iwm.c: 4439 in iwm_send_update_mcc_cmd() 4433 #ifdef
IWM_DEBUG 4434 pkt = hcmd.resp_pkt; 4435 4436 /* Extract MCC response
*/ 4437 if (resp_v2) { 4438 mcc_resp = (void *)pkt->data;

CID 1361065: Null pointer dereferences (FORWARD_NULL) Dereferencing
null pointer “mcc_resp”.

4439 mcc = mcc_resp->mcc; 4440 n_channels =
le32toh(mcc_resp->n_channels); 4441 } else { 4442 mcc_resp_v1 = (void
*)pkt->data; 4443 mcc = mcc_resp_v1->mcc;  n_channels =
le32toh(mcc_resp_v1->n_channels);

...

** CID 1361068: Memory – corruptions (OVERRUN) /sys/dev/iwm/if_iwm.c:
749 in iwm_read_firmware()

__
* CID 1361068: Memory – corruptions (OVERRUN) /sys/dev/iwm/if_iwm.c:
749 in iwm_read_firmware() 743 “unsupported API index %d\n”, idx); 744
goto parse_out; 745 } 746 for (i = 0; i < 32; i++) { 747 if
((le32toh(capa->api_capa) & 

[Bug 211519] iwm WiFi driver can't connect to hidden SSID

2016-08-02 Thread bugzilla-noreply
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=211519

Andriy Voskoboinyk  changed:

   What|Removed |Added

   Assignee|freebsd-wirel...@freebsd.or |a...@freebsd.org
   |g   |
 Status|New |In Progress
 CC||a...@freebsd.org

--- Comment #1 from Andriy Voskoboinyk  ---
Created attachment 173185
  --> https://bugs.freebsd.org/bugzilla/attachment.cgi?id=173185=edit
Setup SSIDs in scan command

Hi!

Try to apply attached patch and recompile / reinstall the kernel.

-- 
You are receiving this mail because:
You are the assignee for the bug.
___
freebsd-wireless@freebsd.org mailing list
https://lists.freebsd.org/mailman/listinfo/freebsd-wireless
To unsubscribe, send any mail to "freebsd-wireless-unsubscr...@freebsd.org"


[Bug 211520] iwn controller panic in 11.0-BETA3

2016-08-02 Thread bugzilla-noreply
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=211520

--- Comment #3 from Randy Westlund  ---
Sounds like a different thing; I can restart networking without trouble. It's
only frozen on me once, after several hours for working just fine.  I don't
know what triggered it.

-- 
You are receiving this mail because:
You are the assignee for the bug.
___
freebsd-wireless@freebsd.org mailing list
https://lists.freebsd.org/mailman/listinfo/freebsd-wireless
To unsubscribe, send any mail to "freebsd-wireless-unsubscr...@freebsd.org"


[Bug 211520] iwn controller panic in 11.0-BETA3

2016-08-02 Thread bugzilla-noreply
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=211520

Lars Engels  changed:

   What|Removed |Added

 CC||l...@freebsd.org

--- Comment #2 from Lars Engels  ---
Same here with iwn and em.

It's easy to reproduce. Just run "service netif restart" and you get an
insta-freeze. But I don't see the firmware error messages in /var/log/messages
Unfortunately nothing is shown on the console when the system freezes.

-- 
You are receiving this mail because:
You are the assignee for the bug.
___
freebsd-wireless@freebsd.org mailing list
https://lists.freebsd.org/mailman/listinfo/freebsd-wireless
To unsubscribe, send any mail to "freebsd-wireless-unsubscr...@freebsd.org"