QCA6174 firmware crash

[Michael Ney]

Hello,

I ran into a crash with the QCA6174 firmware and I was hoping someone knew a solution to it or could pass it on to Qualcomm Atheros to be resolved.

The hardware version is QCA6174 HW 2.1

The firmware version I am using is SW_RM.1.1.1-00157-QCARMSWPZ-1 (the same version available for download from Kalle Valo's git for QCA6174 HW 2.1).

The crash occurs when receiving certain frame types. 


Reproduction:

1. Place QCA6174 into monitor mode.

2. Use another card (such as an ath9k) to send an Null Data or QOS Null Data with CF-ACK or CF-Poll (frame type 2, frame subtypes 5, 6, 7, D, E, or F). The DA of the frame must not be the MAC of the QCA6174 (the crash does not happen if the DA is the MAC).

3. Firmware immediately crashes.


The crash's Firmware register dump is:

[00] 0x05010000 0x00000000 0x00000000 0x00000000
[04] 0x00000000 0x00000000 0x00000000 0x00000000
[..]
[16] 0x00000000 0x00000000 0x00000000 0x00000000
[20] 0x00000000 0x004019F0 0x00000000 0x00000000
[24] 0x00000000 0x00000000 0x00000000 0x00000000
[..]
[56] 0x00000000 0x00000000 0x00000000 0x00000000



Thanks for any help,

Michael