wifi: iwlwifi: mld: avoid outdated reorder buffer head_sn

If no frames are received on a queue for a while, the reorder buffer
head_sn may be an old one. When the next frame that is received on
that queue and buffered is a subframe of an AMSDU but not the last
subframe, it will not update the buffer's head_sn. When the frame
release notification arrives, it will not release the buffered frame
because it will look like the notification's NSSN is lower than the
buffer's head_sn (because of a wraparound).
Fix it by updating the head_sn when the first frame is buffered.

Signed-off-by: Avraham Stern <avraham.stern@intel.com>
Signed-off-by: Miri Korenblit <miriam.rachel.korenblit@intel.com>
Link: https://patch.msgid.link/20250723094230.e1f62a9a603c.I7b57a481122074b1f40d39cd31db2e5262668eb2@changeid

diff --git a/drivers/net/wireless/intel/iwlwifi/mld/agg.c b/drivers/net/wireless/intel/iwlwifi/mld/agg.c
index 6b349270481d45dee07829f97bbc2181d89415c8..3bf36f8f687425f575abc437240ef1dc13ed04a8 100644 (file)
--- a/drivers/net/wireless/intel/iwlwifi/mld/agg.c
+++ b/drivers/net/wireless/intel/iwlwifi/mld/agg.c
@@ -305,10 +305,15 @@ iwl_mld_reorder(struct iwl_mld *mld, struct napi_struct *napi,
         * already ahead and it will be dropped.
         * If the last sub-frame is not on this queue - we will get frame
         * release notification with up to date NSSN.
+        * If this is the first frame that is stored in the buffer, the head_sn
+        * may be outdated. Update it based on the last NSSN to make sure it
+        * will be released when the frame release notification arrives.
         */
        if (!amsdu || last_subframe)
                iwl_mld_reorder_release_frames(mld, sta, napi, baid_data,
                                               buffer, nssn);
+       else if (buffer->num_stored == 1)
+               buffer->head_sn = nssn;
 
        return IWL_MLD_BUFFERED_SKB;
 }