drivers/staging/rtl8723bs/core/rtw_mlme.c

   1 // SPDX-License-Identifier: GPL-2.0
   2 /******************************************************************************
   3  *
   4  * Copyright(c) 2007 - 2011 Realtek Corporation. All rights reserved.
   5  *
   6  ******************************************************************************/
   7 #define _RTW_MLME_C_
   8
   9 #include <linux/etherdevice.h>
  10 #include <drv_types.h>
  11 #include <rtw_debug.h>
  12 #include <hal_btcoex.h>
  13 #include <linux/jiffies.h>
  14
  15 extern u8 rtw_do_join(struct adapter *padapter);
  16
  17 int     rtw_init_mlme_priv(struct adapter *padapter)
  18 {
  19         int     i;
  20         u8 *pbuf;
  21         struct wlan_network     *pnetwork;
  22         struct mlme_priv        *pmlmepriv = &padapter->mlmepriv;
  23         int     res = _SUCCESS;
  24
  25         pmlmepriv->nic_hdl = (u8 *)padapter;
  26
  27         pmlmepriv->pscanned = NULL;
  28         pmlmepriv->fw_state = WIFI_STATION_STATE; /*  Must sync with rtw_wdev_alloc() */
  29         /*  wdev->iftype = NL80211_IFTYPE_STATION */
  30         pmlmepriv->cur_network.network.InfrastructureMode = Ndis802_11AutoUnknown;
  31         pmlmepriv->scan_mode = SCAN_ACTIVE;/*  1: active, 0: pasive. Maybe someday we should rename this varable to "active_mode" (Jeff) */
  32
  33         spin_lock_init(&pmlmepriv->lock);
  34         _rtw_init_queue(&pmlmepriv->free_bss_pool);
  35         _rtw_init_queue(&pmlmepriv->scanned_queue);
  36
  37         set_scanned_network_val(pmlmepriv, 0);
  38
  39         memset(&pmlmepriv->assoc_ssid, 0, sizeof(struct ndis_802_11_ssid));
  40
  41         pbuf = vzalloc(array_size(MAX_BSS_CNT, sizeof(struct wlan_network)));
  42
  43         if (!pbuf) {
  44                 res = _FAIL;
  45                 goto exit;
  46         }
  47         pmlmepriv->free_bss_buf = pbuf;
  48
  49         pnetwork = (struct wlan_network *)pbuf;
  50
  51         for (i = 0; i < MAX_BSS_CNT; i++) {
  52                 INIT_LIST_HEAD(&pnetwork->list);
  53
  54                 list_add_tail(&pnetwork->list, &pmlmepriv->free_bss_pool.queue);
  55
  56                 pnetwork++;
  57         }
  58
  59         /* allocate DMA-able/Non-Page memory for cmd_buf and rsp_buf */
  60
  61         rtw_clear_scan_deny(padapter);
  62
  63         #define RTW_ROAM_SCAN_RESULT_EXP_MS 5000
  64         #define RTW_ROAM_RSSI_DIFF_TH 10
  65         #define RTW_ROAM_SCAN_INTERVAL_MS 10000
  66
  67         pmlmepriv->roam_flags = 0
  68                 | RTW_ROAM_ON_EXPIRED
  69                 | RTW_ROAM_ON_RESUME
  70                 #ifdef CONFIG_LAYER2_ROAMING_ACTIVE /* FIXME */
  71                 | RTW_ROAM_ACTIVE
  72                 #endif
  73                 ;
  74
  75         pmlmepriv->roam_scanr_exp_ms = RTW_ROAM_SCAN_RESULT_EXP_MS;
  76         pmlmepriv->roam_rssi_diff_th = RTW_ROAM_RSSI_DIFF_TH;
  77         pmlmepriv->roam_scan_int_ms = RTW_ROAM_SCAN_INTERVAL_MS;
  78
  79         rtw_init_mlme_timer(padapter);
  80
  81 exit:
  82
  83         return res;
  84 }
  85
  86 static void rtw_free_mlme_ie_data(u8 **ppie, u32 *plen)
  87 {
  88         if (*ppie) {
  89                 kfree(*ppie);
  90                 *plen = 0;
  91                 *ppie = NULL;
  92         }
  93 }
  94
  95 void rtw_free_mlme_priv_ie_data(struct mlme_priv *pmlmepriv)
  96 {
  97         rtw_buf_free(&pmlmepriv->assoc_req, &pmlmepriv->assoc_req_len);
  98         rtw_buf_free(&pmlmepriv->assoc_rsp, &pmlmepriv->assoc_rsp_len);
  99         rtw_free_mlme_ie_data(&pmlmepriv->wps_beacon_ie, &pmlmepriv->wps_beacon_ie_len);
 100         rtw_free_mlme_ie_data(&pmlmepriv->wps_probe_req_ie, &pmlmepriv->wps_probe_req_ie_len);
 101         rtw_free_mlme_ie_data(&pmlmepriv->wps_probe_resp_ie, &pmlmepriv->wps_probe_resp_ie_len);
 102         rtw_free_mlme_ie_data(&pmlmepriv->wps_assoc_resp_ie, &pmlmepriv->wps_assoc_resp_ie_len);
 103
 104         rtw_free_mlme_ie_data(&pmlmepriv->p2p_beacon_ie, &pmlmepriv->p2p_beacon_ie_len);
 105         rtw_free_mlme_ie_data(&pmlmepriv->p2p_probe_req_ie, &pmlmepriv->p2p_probe_req_ie_len);
 106         rtw_free_mlme_ie_data(&pmlmepriv->p2p_probe_resp_ie, &pmlmepriv->p2p_probe_resp_ie_len);
 107         rtw_free_mlme_ie_data(&pmlmepriv->p2p_go_probe_resp_ie, &pmlmepriv->p2p_go_probe_resp_ie_len);
 108         rtw_free_mlme_ie_data(&pmlmepriv->p2p_assoc_req_ie, &pmlmepriv->p2p_assoc_req_ie_len);
 109 }
 110
 111 void _rtw_free_mlme_priv(struct mlme_priv *pmlmepriv)
 112 {
 113         if (pmlmepriv) {
 114                 rtw_free_mlme_priv_ie_data(pmlmepriv);
 115                 if (pmlmepriv->free_bss_buf)
 116                         vfree(pmlmepriv->free_bss_buf);
 117         }
 118 }
 119
 120 /*
 121 struct  wlan_network *_rtw_dequeue_network(struct __queue *queue)
 122 {
 123         _irqL irqL;
 124
 125         struct wlan_network *pnetwork;
 126
 127         spin_lock_bh(&queue->lock);
 128
 129         if (list_empty(&queue->queue))
 130
 131                 pnetwork = NULL;
 132
 133         else
 134         {
 135                 pnetwork = LIST_CONTAINOR(get_next(&queue->queue), struct wlan_network, list);
 136
 137                 list_del_init(&(pnetwork->list));
 138         }
 139
 140         spin_unlock_bh(&queue->lock);
 141
 142         return pnetwork;
 143 }
 144 */
 145
 146 struct  wlan_network *rtw_alloc_network(struct  mlme_priv *pmlmepriv)
 147 {
 148         struct  wlan_network    *pnetwork;
 149         struct __queue *free_queue = &pmlmepriv->free_bss_pool;
 150         struct list_head *plist = NULL;
 151
 152         spin_lock_bh(&free_queue->lock);
 153
 154         if (list_empty(&free_queue->queue)) {
 155                 pnetwork = NULL;
 156                 goto exit;
 157         }
 158         plist = get_next(&(free_queue->queue));
 159
 160         pnetwork = LIST_CONTAINOR(plist, struct wlan_network, list);
 161
 162         list_del_init(&pnetwork->list);
 163
 164         RT_TRACE(_module_rtl871x_mlme_c_, _drv_info_,
 165                  ("rtw_alloc_network: ptr =%p\n", plist));
 166         pnetwork->network_type = 0;
 167         pnetwork->fixed = false;
 168         pnetwork->last_scanned = jiffies;
 169         pnetwork->aid = 0;
 170         pnetwork->join_res = 0;
 171
 172         pmlmepriv->num_of_scanned++;
 173
 174 exit:
 175         spin_unlock_bh(&free_queue->lock);
 176
 177         return pnetwork;
 178 }
 179
 180 void _rtw_free_network(struct   mlme_priv *pmlmepriv, struct wlan_network *pnetwork, u8 isfreeall)
 181 {
 182         unsigned int delta_time;
 183         u32 lifetime = SCANQUEUE_LIFETIME;
 184 /*      _irqL irqL; */
 185         struct __queue *free_queue = &(pmlmepriv->free_bss_pool);
 186
 187         if (!pnetwork)
 188                 return;
 189
 190         if (pnetwork->fixed)
 191                 return;
 192
 193         if ((check_fwstate(pmlmepriv, WIFI_ADHOC_MASTER_STATE) == true) ||
 194                 (check_fwstate(pmlmepriv, WIFI_ADHOC_STATE) == true))
 195                 lifetime = 1;
 196
 197         if (!isfreeall) {
 198                 delta_time = jiffies_to_msecs(jiffies - pnetwork->last_scanned);
 199                 if (delta_time < lifetime)/*  unit:msec */
 200                         return;
 201         }
 202
 203         spin_lock_bh(&free_queue->lock);
 204
 205         list_del_init(&(pnetwork->list));
 206
 207         list_add_tail(&(pnetwork->list), &(free_queue->queue));
 208
 209         pmlmepriv->num_of_scanned--;
 210
 211         /* DBG_871X("_rtw_free_network:SSID =%s\n", pnetwork->network.Ssid.Ssid); */
 212
 213         spin_unlock_bh(&free_queue->lock);
 214 }
 215
 216 void _rtw_free_network_nolock(struct    mlme_priv *pmlmepriv, struct wlan_network *pnetwork)
 217 {
 218
 219         struct __queue *free_queue = &(pmlmepriv->free_bss_pool);
 220
 221         if (!pnetwork)
 222                 return;
 223
 224         if (pnetwork->fixed)
 225                 return;
 226
 227         /* spin_lock_irqsave(&free_queue->lock, irqL); */
 228
 229         list_del_init(&(pnetwork->list));
 230
 231         list_add_tail(&(pnetwork->list), get_list_head(free_queue));
 232
 233         pmlmepriv->num_of_scanned--;
 234
 235         /* spin_unlock_irqrestore(&free_queue->lock, irqL); */
 236 }
 237
 238 /*
 239         return the wlan_network with the matching addr
 240
 241         Shall be called under atomic context... to avoid possible racing condition...
 242 */
 243 struct wlan_network *_rtw_find_network(struct __queue *scanned_queue, u8 *addr)
 244 {
 245         struct list_head        *phead, *plist;
 246         struct  wlan_network *pnetwork = NULL;
 247         u8 zero_addr[ETH_ALEN] = {0, 0, 0, 0, 0, 0};
 248
 249         if (!memcmp(zero_addr, addr, ETH_ALEN)) {
 250                 pnetwork = NULL;
 251                 goto exit;
 252         }
 253
 254         /* spin_lock_bh(&scanned_queue->lock); */
 255
 256         phead = get_list_head(scanned_queue);
 257         plist = get_next(phead);
 258
 259         while (plist != phead) {
 260                 pnetwork = LIST_CONTAINOR(plist, struct wlan_network, list);
 261
 262                 if (!memcmp(addr, pnetwork->network.MacAddress, ETH_ALEN))
 263                         break;
 264
 265                 plist = get_next(plist);
 266         }
 267
 268         if (plist == phead)
 269                 pnetwork = NULL;
 270
 271         /* spin_unlock_bh(&scanned_queue->lock); */
 272
 273 exit:
 274         return pnetwork;
 275 }
 276
 277 void rtw_free_network_queue(struct adapter *padapter, u8 isfreeall)
 278 {
 279         struct list_head *phead, *plist;
 280         struct wlan_network *pnetwork;
 281         struct mlme_priv *pmlmepriv = &padapter->mlmepriv;
 282         struct __queue *scanned_queue = &pmlmepriv->scanned_queue;
 283
 284         spin_lock_bh(&scanned_queue->lock);
 285
 286         phead = get_list_head(scanned_queue);
 287         plist = get_next(phead);
 288
 289         while (phead != plist) {
 290
 291                 pnetwork = LIST_CONTAINOR(plist, struct wlan_network, list);
 292
 293                 plist = get_next(plist);
 294
 295                 _rtw_free_network(pmlmepriv, pnetwork, isfreeall);
 296
 297         }
 298
 299         spin_unlock_bh(&scanned_queue->lock);
 300 }
 301
 302 sint rtw_if_up(struct adapter *padapter)
 303 {
 304         sint res;
 305
 306         if (padapter->bDriverStopped || padapter->bSurpriseRemoved ||
 307                 (check_fwstate(&padapter->mlmepriv, _FW_LINKED) == false)) {
 308                 RT_TRACE(_module_rtl871x_mlme_c_, _drv_info_, ("rtw_if_up:bDriverStopped(%d) OR bSurpriseRemoved(%d)", padapter->bDriverStopped, padapter->bSurpriseRemoved));
 309                 res = false;
 310         } else
 311                 res =  true;
 312         return res;
 313 }
 314
 315 void rtw_generate_random_ibss(u8 *pibss)
 316 {
 317         unsigned long curtime = jiffies;
 318
 319         pibss[0] = 0x02;  /* in ad-hoc mode bit1 must set to 1 */
 320         pibss[1] = 0x11;
 321         pibss[2] = 0x87;
 322         pibss[3] = (u8)(curtime & 0xff) ;/* p[0]; */
 323         pibss[4] = (u8)((curtime>>8) & 0xff) ;/* p[1]; */
 324         pibss[5] = (u8)((curtime>>16) & 0xff) ;/* p[2]; */
 325 }
 326
 327 u8 *rtw_get_capability_from_ie(u8 *ie)
 328 {
 329         return ie + 8 + 2;
 330 }
 331
 332 u16 rtw_get_capability(struct wlan_bssid_ex *bss)
 333 {
 334         __le16  val;
 335
 336         memcpy((u8 *)&val, rtw_get_capability_from_ie(bss->IEs), 2);
 337
 338         return le16_to_cpu(val);
 339 }
 340
 341 u8 *rtw_get_beacon_interval_from_ie(u8 *ie)
 342 {
 343         return ie + 8;
 344 }
 345
 346 void rtw_free_mlme_priv(struct mlme_priv *pmlmepriv)
 347 {
 348         RT_TRACE(_module_rtl871x_mlme_c_, _drv_err_, ("rtw_free_mlme_priv\n"));
 349         _rtw_free_mlme_priv(pmlmepriv);
 350 }
 351
 352 /*
 353 static struct   wlan_network *rtw_dequeue_network(struct __queue *queue)
 354 {
 355         struct wlan_network *pnetwork;
 356
 357         pnetwork = _rtw_dequeue_network(queue);
 358         return pnetwork;
 359 }
 360 */
 361
 362 void rtw_free_network_nolock(struct adapter *padapter, struct wlan_network *pnetwork);
 363 void rtw_free_network_nolock(struct adapter *padapter, struct wlan_network *pnetwork)
 364 {
 365         /* RT_TRACE(_module_rtl871x_mlme_c_, _drv_err_, ("rtw_free_network ==> ssid = %s\n\n" , pnetwork->network.Ssid.Ssid)); */
 366         _rtw_free_network_nolock(&(padapter->mlmepriv), pnetwork);
 367         rtw_cfg80211_unlink_bss(padapter, pnetwork);
 368 }
 369
 370 /*
 371         return the wlan_network with the matching addr
 372
 373         Shall be called under atomic context... to avoid possible racing condition...
 374 */
 375 struct  wlan_network *rtw_find_network(struct __queue *scanned_queue, u8 *addr)
 376 {
 377         struct  wlan_network *pnetwork = _rtw_find_network(scanned_queue, addr);
 378
 379         return pnetwork;
 380 }
 381
 382 int rtw_is_same_ibss(struct adapter *adapter, struct wlan_network *pnetwork)
 383 {
 384         int ret = true;
 385         struct security_priv *psecuritypriv = &adapter->securitypriv;
 386
 387         if ((psecuritypriv->dot11PrivacyAlgrthm != _NO_PRIVACY_) &&
 388                     (pnetwork->network.Privacy == 0))
 389                 ret = false;
 390         else if ((psecuritypriv->dot11PrivacyAlgrthm == _NO_PRIVACY_) &&
 391                  (pnetwork->network.Privacy == 1))
 392                 ret = false;
 393         else
 394                 ret = true;
 395
 396         return ret;
 397
 398 }
 399
 400 inline int is_same_ess(struct wlan_bssid_ex *a, struct wlan_bssid_ex *b)
 401 {
 402         /* RT_TRACE(_module_rtl871x_mlme_c_, _drv_err_, ("(%s,%d)(%s,%d)\n", */
 403         /*              a->Ssid.Ssid, a->Ssid.SsidLength, b->Ssid.Ssid, b->Ssid.SsidLength)); */
 404         return (a->Ssid.SsidLength == b->Ssid.SsidLength)
 405                 &&  !memcmp(a->Ssid.Ssid, b->Ssid.Ssid, a->Ssid.SsidLength);
 406 }
 407
 408 int is_same_network(struct wlan_bssid_ex *src, struct wlan_bssid_ex *dst, u8 feature)
 409 {
 410         u16 s_cap, d_cap;
 411         __le16 tmps, tmpd;
 412
 413         if (rtw_bug_check(dst, src, &s_cap, &d_cap) == false)
 414                         return false;
 415
 416         memcpy((u8 *)&tmps, rtw_get_capability_from_ie(src->IEs), 2);
 417         memcpy((u8 *)&tmpd, rtw_get_capability_from_ie(dst->IEs), 2);
 418
 419         s_cap = le16_to_cpu(tmps);
 420         d_cap = le16_to_cpu(tmpd);
 421
 422         return (src->Ssid.SsidLength == dst->Ssid.SsidLength) &&
 423                 /*      (src->Configuration.DSConfig == dst->Configuration.DSConfig) && */
 424                         ((!memcmp(src->MacAddress, dst->MacAddress, ETH_ALEN))) &&
 425                         ((!memcmp(src->Ssid.Ssid, dst->Ssid.Ssid, src->Ssid.SsidLength))) &&
 426                         ((s_cap & WLAN_CAPABILITY_IBSS) ==
 427                         (d_cap & WLAN_CAPABILITY_IBSS)) &&
 428                         ((s_cap & WLAN_CAPABILITY_BSS) ==
 429                         (d_cap & WLAN_CAPABILITY_BSS));
 430
 431 }
 432
 433 struct wlan_network *_rtw_find_same_network(struct __queue *scanned_queue, struct wlan_network *network)
 434 {
 435         struct list_head *phead, *plist;
 436         struct wlan_network *found = NULL;
 437
 438         phead = get_list_head(scanned_queue);
 439         plist = get_next(phead);
 440
 441         while (plist != phead) {
 442                 found = LIST_CONTAINOR(plist, struct wlan_network, list);
 443
 444                 if (is_same_network(&network->network, &found->network, 0))
 445                         break;
 446
 447                 plist = get_next(plist);
 448         }
 449
 450         if (plist == phead)
 451                 found = NULL;
 452
 453         return found;
 454 }
 455
 456 struct  wlan_network    *rtw_get_oldest_wlan_network(struct __queue *scanned_queue)
 457 {
 458         struct list_head        *plist, *phead;
 459
 460         struct  wlan_network    *pwlan = NULL;
 461         struct  wlan_network    *oldest = NULL;
 462
 463         phead = get_list_head(scanned_queue);
 464
 465         plist = get_next(phead);
 466
 467         while (1) {
 468
 469                 if (phead == plist)
 470                         break;
 471
 472                 pwlan = LIST_CONTAINOR(plist, struct wlan_network, list);
 473
 474                 if (!pwlan->fixed) {
 475                         if (oldest == NULL || time_after(oldest->last_scanned, pwlan->last_scanned))
 476                                 oldest = pwlan;
 477                 }
 478
 479                 plist = get_next(plist);
 480         }
 481         return oldest;
 482
 483 }
 484
 485 void update_network(struct wlan_bssid_ex *dst, struct wlan_bssid_ex *src,
 486         struct adapter *padapter, bool update_ie)
 487 {
 488         long rssi_ori = dst->Rssi;
 489
 490         u8 sq_smp = src->PhyInfo.SignalQuality;
 491
 492         u8 ss_final;
 493         u8 sq_final;
 494         long rssi_final;
 495
 496         #if defined(DBG_RX_SIGNAL_DISPLAY_SSID_MONITORED) && 1
 497         if (strcmp(dst->Ssid.Ssid, DBG_RX_SIGNAL_DISPLAY_SSID_MONITORED) == 0) {
 498                 DBG_871X(FUNC_ADPT_FMT" %s("MAC_FMT", ch%u) ss_ori:%3u, sq_ori:%3u, rssi_ori:%3ld, ss_smp:%3u, sq_smp:%3u, rssi_smp:%3ld\n"
 499                         , FUNC_ADPT_ARG(padapter)
 500                         , src->Ssid.Ssid, MAC_ARG(src->MacAddress), src->Configuration.DSConfig
 501                         , ss_ori, sq_ori, rssi_ori
 502                         , ss_smp, sq_smp, rssi_smp
 503                 );
 504         }
 505         #endif
 506
 507         /* The rule below is 1/5 for sample value, 4/5 for history value */
 508         if (check_fwstate(&padapter->mlmepriv, _FW_LINKED) && is_same_network(&(padapter->mlmepriv.cur_network.network), src, 0)) {
 509                 /* Take the recvpriv's value for the connected AP*/
 510                 ss_final = padapter->recvpriv.signal_strength;
 511                 sq_final = padapter->recvpriv.signal_qual;
 512                 /* the rssi value here is undecorated, and will be used for antenna diversity */
 513                 if (sq_smp != 101) /* from the right channel */
 514                         rssi_final = (src->Rssi+dst->Rssi*4)/5;
 515                 else
 516                         rssi_final = rssi_ori;
 517         } else {
 518                 if (sq_smp != 101) { /* from the right channel */
 519                         ss_final = ((u32)(src->PhyInfo.SignalStrength)+(u32)(dst->PhyInfo.SignalStrength)*4)/5;
 520                         sq_final = ((u32)(src->PhyInfo.SignalQuality)+(u32)(dst->PhyInfo.SignalQuality)*4)/5;
 521                         rssi_final = (src->Rssi+dst->Rssi*4)/5;
 522                 } else {
 523                         /* bss info not receiving from the right channel, use the original RX signal infos */
 524                         ss_final = dst->PhyInfo.SignalStrength;
 525                         sq_final = dst->PhyInfo.SignalQuality;
 526                         rssi_final = dst->Rssi;
 527                 }
 528
 529         }
 530
 531         if (update_ie) {
 532                 dst->Reserved[0] = src->Reserved[0];
 533                 dst->Reserved[1] = src->Reserved[1];
 534                 memcpy((u8 *)dst, (u8 *)src, get_wlan_bssid_ex_sz(src));
 535         }
 536
 537         dst->PhyInfo.SignalStrength = ss_final;
 538         dst->PhyInfo.SignalQuality = sq_final;
 539         dst->Rssi = rssi_final;
 540
 541         #if defined(DBG_RX_SIGNAL_DISPLAY_SSID_MONITORED) && 1
 542         if (strcmp(dst->Ssid.Ssid, DBG_RX_SIGNAL_DISPLAY_SSID_MONITORED) == 0) {
 543                 DBG_871X(FUNC_ADPT_FMT" %s("MAC_FMT"), SignalStrength:%u, SignalQuality:%u, RawRSSI:%ld\n"
 544                         , FUNC_ADPT_ARG(padapter)
 545                         , dst->Ssid.Ssid, MAC_ARG(dst->MacAddress), dst->PhyInfo.SignalStrength, dst->PhyInfo.SignalQuality, dst->Rssi);
 546         }
 547         #endif
 548 }
 549
 550 static void update_current_network(struct adapter *adapter, struct wlan_bssid_ex *pnetwork)
 551 {
 552         struct  mlme_priv *pmlmepriv = &(adapter->mlmepriv);
 553
 554         rtw_bug_check(&(pmlmepriv->cur_network.network),
 555                 &(pmlmepriv->cur_network.network),
 556                 &(pmlmepriv->cur_network.network),
 557                 &(pmlmepriv->cur_network.network));
 558
 559         if ((check_fwstate(pmlmepriv, _FW_LINKED) == true) && (is_same_network(&(pmlmepriv->cur_network.network), pnetwork, 0))) {
 560                 /* RT_TRACE(_module_rtl871x_mlme_c_, _drv_err_,"Same Network\n"); */
 561
 562                 /* if (pmlmepriv->cur_network.network.IELength<= pnetwork->IELength) */
 563                 {
 564                         update_network(&(pmlmepriv->cur_network.network), pnetwork, adapter, true);
 565                         rtw_update_protection(adapter, (pmlmepriv->cur_network.network.IEs) + sizeof(struct ndis_802_11_fix_ie),
 566                                                                         pmlmepriv->cur_network.network.IELength);
 567                 }
 568         }
 569 }
 570
 571 /*
 572 Caller must hold pmlmepriv->lock first.
 573 */
 574 void rtw_update_scanned_network(struct adapter *adapter, struct wlan_bssid_ex *target)
 575 {
 576         struct list_head        *plist, *phead;
 577         u32 bssid_ex_sz;
 578         struct mlme_priv *pmlmepriv = &(adapter->mlmepriv);
 579         struct __queue  *queue  = &(pmlmepriv->scanned_queue);
 580         struct wlan_network     *pnetwork = NULL;
 581         struct wlan_network     *oldest = NULL;
 582         int target_find = 0;
 583         u8 feature = 0;
 584
 585         spin_lock_bh(&queue->lock);
 586         phead = get_list_head(queue);
 587         plist = get_next(phead);
 588
 589         while (1) {
 590                 if (phead == plist)
 591                         break;
 592
 593                 pnetwork = LIST_CONTAINOR(plist, struct wlan_network, list);
 594
 595                 rtw_bug_check(pnetwork, pnetwork, pnetwork, pnetwork);
 596
 597                 if (is_same_network(&(pnetwork->network), target, feature)) {
 598                         target_find = 1;
 599                         break;
 600                 }
 601
 602                 if (rtw_roam_flags(adapter)) {
 603                         /* TODO: don't  select netowrk in the same ess as oldest if it's new enough*/
 604                 }
 605
 606                 if (oldest == NULL || time_after(oldest->last_scanned, pnetwork->last_scanned))
 607                         oldest = pnetwork;
 608
 609                 plist = get_next(plist);
 610
 611         }
 612
 613         /* If we didn't find a match, then get a new network slot to initialize
 614          * with this beacon's information */
 615         /* if (phead == plist) { */
 616         if (!target_find) {
 617                 if (list_empty(&pmlmepriv->free_bss_pool.queue)) {
 618                         /* If there are no more slots, expire the oldest */
 619                         /* list_del_init(&oldest->list); */
 620                         pnetwork = oldest;
 621                         if (!pnetwork) {
 622                                 RT_TRACE(_module_rtl871x_mlme_c_, _drv_err_, ("\n\n\nsomething wrong here\n\n\n"));
 623                                 goto exit;
 624                         }
 625                         memcpy(&(pnetwork->network), target,  get_wlan_bssid_ex_sz(target));
 626                         /*  variable initialize */
 627                         pnetwork->fixed = false;
 628                         pnetwork->last_scanned = jiffies;
 629
 630                         pnetwork->network_type = 0;
 631                         pnetwork->aid = 0;
 632                         pnetwork->join_res = 0;
 633
 634                         /* bss info not receiving from the right channel */
 635                         if (pnetwork->network.PhyInfo.SignalQuality == 101)
 636                                 pnetwork->network.PhyInfo.SignalQuality = 0;
 637                 } else {
 638                         /* Otherwise just pull from the free list */
 639
 640                         pnetwork = rtw_alloc_network(pmlmepriv); /*  will update scan_time */
 641
 642                         if (!pnetwork) {
 643                                 RT_TRACE(_module_rtl871x_mlme_c_, _drv_err_, ("\n\n\nsomething wrong here\n\n\n"));
 644                                 goto exit;
 645                         }
 646
 647                         bssid_ex_sz = get_wlan_bssid_ex_sz(target);
 648                         target->Length = bssid_ex_sz;
 649                         memcpy(&(pnetwork->network), target, bssid_ex_sz);
 650
 651                         pnetwork->last_scanned = jiffies;
 652
 653                         /* bss info not receiving from the right channel */
 654                         if (pnetwork->network.PhyInfo.SignalQuality == 101)
 655                                 pnetwork->network.PhyInfo.SignalQuality = 0;
 656
 657                         list_add_tail(&(pnetwork->list), &(queue->queue));
 658
 659                 }
 660         } else {
 661                 /* we have an entry and we are going to update it. But this entry may
 662                  * be already expired. In this case we do the same as we found a new
 663                  * net and call the new_net handler
 664                  */
 665                 bool update_ie = true;
 666
 667                 pnetwork->last_scanned = jiffies;
 668
 669                 /* target.Reserved[0]== 1, means that scanned network is a bcn frame. */
 670                 if ((pnetwork->network.IELength > target->IELength) && (target->Reserved[0] == 1))
 671                         update_ie = false;
 672
 673                 /*  probe resp(3) > beacon(1) > probe req(2) */
 674                 if ((target->Reserved[0] != 2) &&
 675                         (target->Reserved[0] >= pnetwork->network.Reserved[0])
 676                         ) {
 677                         update_ie = true;
 678                 } else {
 679                         update_ie = false;
 680                 }
 681
 682                 update_network(&(pnetwork->network), target, adapter, update_ie);
 683         }
 684
 685 exit:
 686         spin_unlock_bh(&queue->lock);
 687 }
 688
 689 void rtw_add_network(struct adapter *adapter, struct wlan_bssid_ex *pnetwork);
 690 void rtw_add_network(struct adapter *adapter, struct wlan_bssid_ex *pnetwork)
 691 {
 692         /* struct __queue       *queue  = &(pmlmepriv->scanned_queue); */
 693
 694         /* spin_lock_bh(&queue->lock); */
 695
 696         update_current_network(adapter, pnetwork);
 697
 698         rtw_update_scanned_network(adapter, pnetwork);
 699
 700         /* spin_unlock_bh(&queue->lock); */
 701 }
 702
 703 /* select the desired network based on the capability of the (i)bss. */
 704 /*  check items: (1) security */
 705 /*                         (2) network_type */
 706 /*                         (3) WMM */
 707 /*                         (4) HT */
 708 /*                      (5) others */
 709 int rtw_is_desired_network(struct adapter *adapter, struct wlan_network *pnetwork);
 710 int rtw_is_desired_network(struct adapter *adapter, struct wlan_network *pnetwork)
 711 {
 712         struct security_priv *psecuritypriv = &adapter->securitypriv;
 713         struct mlme_priv *pmlmepriv = &adapter->mlmepriv;
 714         u32 desired_encmode;
 715         u32 privacy;
 716
 717         /* u8 wps_ie[512]; */
 718         uint wps_ielen;
 719
 720         int bselected = true;
 721
 722         desired_encmode = psecuritypriv->ndisencryptstatus;
 723         privacy = pnetwork->network.Privacy;
 724
 725         if (check_fwstate(pmlmepriv, WIFI_UNDER_WPS)) {
 726                 if (rtw_get_wps_ie(pnetwork->network.IEs+_FIXED_IE_LENGTH_, pnetwork->network.IELength-_FIXED_IE_LENGTH_, NULL, &wps_ielen))
 727                         return true;
 728                 else
 729                         return false;
 730
 731         }
 732         if (adapter->registrypriv.wifi_spec == 1) { /* for  correct flow of 8021X  to do.... */
 733                 u8 *p = NULL;
 734                 uint ie_len = 0;
 735
 736                 if ((desired_encmode == Ndis802_11EncryptionDisabled) && (privacy != 0))
 737             bselected = false;
 738
 739                 if (psecuritypriv->ndisauthtype == Ndis802_11AuthModeWPA2PSK) {
 740                         p = rtw_get_ie(pnetwork->network.IEs + _BEACON_IE_OFFSET_, _RSN_IE_2_, &ie_len, (pnetwork->network.IELength - _BEACON_IE_OFFSET_));
 741                         if (p && ie_len > 0)
 742                                 bselected = true;
 743                         else
 744                                 bselected = false;
 745                 }
 746         }
 747
 748         if ((desired_encmode != Ndis802_11EncryptionDisabled) && (privacy == 0)) {
 749                 DBG_871X("desired_encmode: %d, privacy: %d\n", desired_encmode, privacy);
 750                 bselected = false;
 751         }
 752
 753         if (check_fwstate(pmlmepriv, WIFI_ADHOC_STATE) == true) {
 754                 if (pnetwork->network.InfrastructureMode != pmlmepriv->cur_network.network.InfrastructureMode)
 755                         bselected = false;
 756         }
 757
 758         return bselected;
 759 }
 760
 761 /* TODO: Perry : For Power Management */
 762 void rtw_atimdone_event_callback(struct adapter *adapter, u8 *pbuf)
 763 {
 764         RT_TRACE(_module_rtl871x_mlme_c_, _drv_err_, ("receive atimdone_event\n"));
 765 }
 766
 767 void rtw_survey_event_callback(struct adapter   *adapter, u8 *pbuf)
 768 {
 769         u32 len;
 770         struct wlan_bssid_ex *pnetwork;
 771         struct  mlme_priv *pmlmepriv = &(adapter->mlmepriv);
 772
 773         pnetwork = (struct wlan_bssid_ex *)pbuf;
 774
 775         RT_TRACE(_module_rtl871x_mlme_c_, _drv_info_, ("rtw_survey_event_callback, ssid =%s\n",  pnetwork->Ssid.Ssid));
 776
 777         len = get_wlan_bssid_ex_sz(pnetwork);
 778         if (len > (sizeof(struct wlan_bssid_ex))) {
 779                 RT_TRACE(_module_rtl871x_mlme_c_, _drv_err_, ("\n ****rtw_survey_event_callback: return a wrong bss ***\n"));
 780                 return;
 781         }
 782
 783         spin_lock_bh(&pmlmepriv->lock);
 784
 785         /*  update IBSS_network 's timestamp */
 786         if ((check_fwstate(pmlmepriv, WIFI_ADHOC_MASTER_STATE)) == true) {
 787                 /* RT_TRACE(_module_rtl871x_mlme_c_, _drv_err_,"rtw_survey_event_callback : WIFI_ADHOC_MASTER_STATE\n\n"); */
 788                 if (!memcmp(&(pmlmepriv->cur_network.network.MacAddress), pnetwork->MacAddress, ETH_ALEN)) {
 789                         struct wlan_network *ibss_wlan = NULL;
 790
 791                         memcpy(pmlmepriv->cur_network.network.IEs, pnetwork->IEs, 8);
 792                         spin_lock_bh(&(pmlmepriv->scanned_queue.lock));
 793                         ibss_wlan = rtw_find_network(&pmlmepriv->scanned_queue,  pnetwork->MacAddress);
 794                         if (ibss_wlan) {
 795                                 memcpy(ibss_wlan->network.IEs, pnetwork->IEs, 8);
 796                                 spin_unlock_bh(&(pmlmepriv->scanned_queue.lock));
 797                                 goto exit;
 798                         }
 799                         spin_unlock_bh(&(pmlmepriv->scanned_queue.lock));
 800                 }
 801         }
 802
 803         /*  lock pmlmepriv->lock when you accessing network_q */
 804         if ((check_fwstate(pmlmepriv, _FW_UNDER_LINKING)) == false) {
 805                 if (pnetwork->Ssid.Ssid[0] == 0)
 806                         pnetwork->Ssid.SsidLength = 0;
 807                 rtw_add_network(adapter, pnetwork);
 808         }
 809
 810 exit:
 811
 812         spin_unlock_bh(&pmlmepriv->lock);
 813 }
 814
 815 void rtw_surveydone_event_callback(struct adapter       *adapter, u8 *pbuf)
 816 {
 817         u8 timer_cancelled = false;
 818         struct  mlme_priv *pmlmepriv = &(adapter->mlmepriv);
 819
 820         spin_lock_bh(&pmlmepriv->lock);
 821         if (pmlmepriv->wps_probe_req_ie) {
 822                 pmlmepriv->wps_probe_req_ie_len = 0;
 823                 kfree(pmlmepriv->wps_probe_req_ie);
 824                 pmlmepriv->wps_probe_req_ie = NULL;
 825         }
 826
 827         RT_TRACE(_module_rtl871x_mlme_c_, _drv_info_, ("rtw_surveydone_event_callback: fw_state:%x\n\n", get_fwstate(pmlmepriv)));
 828
 829         if (check_fwstate(pmlmepriv, _FW_UNDER_SURVEY)) {
 830                 /* u8 timer_cancelled; */
 831
 832                 timer_cancelled = true;
 833                 /* _cancel_timer(&pmlmepriv->scan_to_timer, &timer_cancelled); */
 834
 835                 _clr_fwstate_(pmlmepriv, _FW_UNDER_SURVEY);
 836         } else {
 837
 838                 RT_TRACE(_module_rtl871x_mlme_c_, _drv_err_, ("nic status =%x, survey done event comes too late!\n", get_fwstate(pmlmepriv)));
 839         }
 840         spin_unlock_bh(&pmlmepriv->lock);
 841
 842         if (timer_cancelled)
 843                 _cancel_timer(&pmlmepriv->scan_to_timer, &timer_cancelled);
 844
 845         spin_lock_bh(&pmlmepriv->lock);
 846
 847         rtw_set_signal_stat_timer(&adapter->recvpriv);
 848
 849         if (pmlmepriv->to_join) {
 850                 if ((check_fwstate(pmlmepriv, WIFI_ADHOC_STATE) == true)) {
 851                         if (check_fwstate(pmlmepriv, _FW_LINKED) == false) {
 852                                 set_fwstate(pmlmepriv, _FW_UNDER_LINKING);
 853
 854                                 if (rtw_select_and_join_from_scanned_queue(pmlmepriv) == _SUCCESS) {
 855                                         _set_timer(&pmlmepriv->assoc_timer, MAX_JOIN_TIMEOUT);
 856                                 } else {
 857                                         struct wlan_bssid_ex    *pdev_network = &(adapter->registrypriv.dev_network);
 858                                         u8 *pibss = adapter->registrypriv.dev_network.MacAddress;
 859
 860                                         /* pmlmepriv->fw_state ^= _FW_UNDER_SURVEY;because don't set assoc_timer */
 861                                         _clr_fwstate_(pmlmepriv, _FW_UNDER_SURVEY);
 862
 863                                         RT_TRACE(_module_rtl871x_mlme_c_, _drv_err_, ("switching to adhoc master\n"));
 864
 865                                         memcpy(&pdev_network->Ssid, &pmlmepriv->assoc_ssid, sizeof(struct ndis_802_11_ssid));
 866
 867                                         rtw_update_registrypriv_dev_network(adapter);
 868                                         rtw_generate_random_ibss(pibss);
 869
 870                                         pmlmepriv->fw_state = WIFI_ADHOC_MASTER_STATE;
 871
 872                                         if (rtw_createbss_cmd(adapter) != _SUCCESS)
 873                                                 RT_TRACE(_module_rtl871x_mlme_c_, _drv_err_, ("Error =>rtw_createbss_cmd status FAIL\n"));
 874
 875                                         pmlmepriv->to_join = false;
 876                                 }
 877                         }
 878                 } else {
 879                         int s_ret;
 880                         set_fwstate(pmlmepriv, _FW_UNDER_LINKING);
 881                         pmlmepriv->to_join = false;
 882                         s_ret = rtw_select_and_join_from_scanned_queue(pmlmepriv);
 883                         if (_SUCCESS == s_ret) {
 884                              _set_timer(&pmlmepriv->assoc_timer, MAX_JOIN_TIMEOUT);
 885                         } else if (s_ret == 2) {/* there is no need to wait for join */
 886                                 _clr_fwstate_(pmlmepriv, _FW_UNDER_LINKING);
 887                                 rtw_indicate_connect(adapter);
 888                         } else {
 889                                 DBG_871X("try_to_join, but select scanning queue fail, to_roam:%d\n", rtw_to_roam(adapter));
 890
 891                                 if (rtw_to_roam(adapter) != 0) {
 892                                         if (rtw_dec_to_roam(adapter) == 0
 893                                                 || _SUCCESS != rtw_sitesurvey_cmd(adapter, &pmlmepriv->assoc_ssid, 1, NULL, 0)
 894                                         ) {
 895                                                 rtw_set_to_roam(adapter, 0);
 896                                                 rtw_free_assoc_resources(adapter, 1);
 897                                                 rtw_indicate_disconnect(adapter);
 898                                         } else {
 899                                                 pmlmepriv->to_join = true;
 900                                         }
 901                                 } else
 902                                         rtw_indicate_disconnect(adapter);
 903
 904                                 _clr_fwstate_(pmlmepriv, _FW_UNDER_LINKING);
 905                         }
 906                 }
 907         } else {
 908                 if (rtw_chk_roam_flags(adapter, RTW_ROAM_ACTIVE)) {
 909                         if (check_fwstate(pmlmepriv, WIFI_STATION_STATE)
 910                                 && check_fwstate(pmlmepriv, _FW_LINKED)) {
 911                                 if (rtw_select_roaming_candidate(pmlmepriv) == _SUCCESS) {
 912                                         receive_disconnect(adapter, pmlmepriv->cur_network.network.MacAddress
 913                                                 , WLAN_REASON_ACTIVE_ROAM);
 914                                 }
 915                         }
 916                 }
 917         }
 918
 919         /* DBG_871X("scan complete in %dms\n", jiffies_to_msecs(jiffies - pmlmepriv->scan_start_time)); */
 920
 921         spin_unlock_bh(&pmlmepriv->lock);
 922
 923         rtw_os_xmit_schedule(adapter);
 924
 925         rtw_cfg80211_surveydone_event_callback(adapter);
 926
 927         rtw_indicate_scan_done(adapter, false);
 928 }
 929
 930 void rtw_dummy_event_callback(struct adapter *adapter, u8 *pbuf)
 931 {
 932 }
 933
 934 void rtw_fwdbg_event_callback(struct adapter *adapter, u8 *pbuf)
 935 {
 936 }
 937
 938 static void free_scanqueue(struct       mlme_priv *pmlmepriv)
 939 {
 940         struct __queue *free_queue = &pmlmepriv->free_bss_pool;
 941         struct __queue *scan_queue = &pmlmepriv->scanned_queue;
 942         struct list_head        *plist, *phead, *ptemp;
 943
 944         RT_TRACE(_module_rtl871x_mlme_c_, _drv_notice_, ("+free_scanqueue\n"));
 945         spin_lock_bh(&scan_queue->lock);
 946         spin_lock_bh(&free_queue->lock);
 947
 948         phead = get_list_head(scan_queue);
 949         plist = get_next(phead);
 950
 951         while (plist != phead) {
 952                 ptemp = get_next(plist);
 953                 list_del_init(plist);
 954                 list_add_tail(plist, &free_queue->queue);
 955                 plist = ptemp;
 956                 pmlmepriv->num_of_scanned--;
 957         }
 958
 959         spin_unlock_bh(&free_queue->lock);
 960         spin_unlock_bh(&scan_queue->lock);
 961 }
 962
 963 static void rtw_reset_rx_info(struct debug_priv *pdbgpriv)
 964 {
 965         pdbgpriv->dbg_rx_ampdu_drop_count = 0;
 966         pdbgpriv->dbg_rx_ampdu_forced_indicate_count = 0;
 967         pdbgpriv->dbg_rx_ampdu_loss_count = 0;
 968         pdbgpriv->dbg_rx_dup_mgt_frame_drop_count = 0;
 969         pdbgpriv->dbg_rx_ampdu_window_shift_cnt = 0;
 970 }
 971
 972 static void find_network(struct adapter *adapter)
 973 {
 974         struct wlan_network *pwlan = NULL;
 975         struct  mlme_priv *pmlmepriv = &adapter->mlmepriv;
 976         struct wlan_network *tgt_network = &pmlmepriv->cur_network;
 977
 978         pwlan = rtw_find_network(&pmlmepriv->scanned_queue, tgt_network->network.MacAddress);
 979         if (pwlan)
 980                 pwlan->fixed = false;
 981         else
 982                 RT_TRACE(_module_rtl871x_mlme_c_, _drv_err_, ("rtw_free_assoc_resources : pwlan == NULL\n\n"));
 983
 984         if (check_fwstate(pmlmepriv, WIFI_ADHOC_MASTER_STATE) &&
 985             (adapter->stapriv.asoc_sta_count == 1))
 986                 rtw_free_network_nolock(adapter, pwlan);
 987 }
 988
 989 /*
 990 *rtw_free_assoc_resources: the caller has to lock pmlmepriv->lock
 991 */
 992 void rtw_free_assoc_resources(struct adapter *adapter, int lock_scanned_queue)
 993 {
 994         struct  mlme_priv *pmlmepriv = &adapter->mlmepriv;
 995         struct wlan_network *tgt_network = &pmlmepriv->cur_network;
 996         struct  sta_priv *pstapriv = &adapter->stapriv;
 997         struct dvobj_priv *psdpriv = adapter->dvobj;
 998         struct debug_priv *pdbgpriv = &psdpriv->drv_dbg;
 999
1000         RT_TRACE(_module_rtl871x_mlme_c_, _drv_notice_, ("+rtw_free_assoc_resources\n"));
1001         RT_TRACE(_module_rtl871x_mlme_c_, _drv_info_, ("tgt_network->network.MacAddress ="MAC_FMT" ssid =%s\n",
1002                 MAC_ARG(tgt_network->network.MacAddress), tgt_network->network.Ssid.Ssid));
1003
1004         if (check_fwstate(pmlmepriv, WIFI_STATION_STATE|WIFI_AP_STATE)) {
1005                 struct sta_info *psta;
1006
1007                 psta = rtw_get_stainfo(&adapter->stapriv, tgt_network->network.MacAddress);
1008                 spin_lock_bh(&(pstapriv->sta_hash_lock));
1009                 rtw_free_stainfo(adapter,  psta);
1010
1011                 spin_unlock_bh(&(pstapriv->sta_hash_lock));
1012
1013         }
1014
1015         if (check_fwstate(pmlmepriv, WIFI_ADHOC_STATE|WIFI_ADHOC_MASTER_STATE|WIFI_AP_STATE)) {
1016                 struct sta_info *psta;
1017
1018                 rtw_free_all_stainfo(adapter);
1019
1020                 psta = rtw_get_bcmc_stainfo(adapter);
1021                 rtw_free_stainfo(adapter, psta);
1022
1023                 rtw_init_bcmc_stainfo(adapter);
1024         }
1025
1026         find_network(adapter);
1027
1028         if (lock_scanned_queue)
1029                 adapter->securitypriv.key_mask = 0;
1030
1031         rtw_reset_rx_info(pdbgpriv);
1032 }
1033
1034 /*
1035 *rtw_indicate_connect: the caller has to lock pmlmepriv->lock
1036 */
1037 void rtw_indicate_connect(struct adapter *padapter)
1038 {
1039         struct mlme_priv *pmlmepriv = &padapter->mlmepriv;
1040
1041         RT_TRACE(_module_rtl871x_mlme_c_, _drv_err_, ("+rtw_indicate_connect\n"));
1042
1043         pmlmepriv->to_join = false;
1044
1045         if (!check_fwstate(&padapter->mlmepriv, _FW_LINKED)) {
1046
1047                 set_fwstate(pmlmepriv, _FW_LINKED);
1048
1049                 rtw_os_indicate_connect(padapter);
1050         }
1051
1052         rtw_set_to_roam(padapter, 0);
1053         rtw_set_scan_deny(padapter, 3000);
1054
1055         RT_TRACE(_module_rtl871x_mlme_c_, _drv_err_, ("-rtw_indicate_connect: fw_state = 0x%08x\n", get_fwstate(pmlmepriv)));
1056 }
1057
1058 /*
1059 *rtw_indicate_disconnect: the caller has to lock pmlmepriv->lock
1060 */
1061 void rtw_indicate_disconnect(struct adapter *padapter)
1062 {
1063         struct  mlme_priv *pmlmepriv = &padapter->mlmepriv;
1064
1065         RT_TRACE(_module_rtl871x_mlme_c_, _drv_err_, ("+rtw_indicate_disconnect\n"));
1066
1067         _clr_fwstate_(pmlmepriv, _FW_UNDER_LINKING|WIFI_UNDER_WPS);
1068
1069         /* DBG_871X("clear wps when %s\n", __func__); */
1070
1071         if (rtw_to_roam(padapter) > 0)
1072                 _clr_fwstate_(pmlmepriv, _FW_LINKED);
1073
1074         if (check_fwstate(&padapter->mlmepriv, _FW_LINKED)
1075                 || (rtw_to_roam(padapter) <= 0)
1076         ) {
1077                 rtw_os_indicate_disconnect(padapter);
1078
1079                 /* set ips_deny_time to avoid enter IPS before LPS leave */
1080                 rtw_set_ips_deny(padapter, 3000);
1081
1082                 _clr_fwstate_(pmlmepriv, _FW_LINKED);
1083
1084                 rtw_clear_scan_deny(padapter);
1085         }
1086
1087         rtw_lps_ctrl_wk_cmd(padapter, LPS_CTRL_DISCONNECT, 1);
1088 }
1089
1090 inline void rtw_indicate_scan_done(struct adapter *padapter, bool aborted)
1091 {
1092         DBG_871X(FUNC_ADPT_FMT"\n", FUNC_ADPT_ARG(padapter));
1093
1094         rtw_os_indicate_scan_done(padapter, aborted);
1095
1096         if (is_primary_adapter(padapter) &&
1097             (!adapter_to_pwrctl(padapter)->bInSuspend) &&
1098             (!check_fwstate(&padapter->mlmepriv,
1099                             WIFI_ASOC_STATE|WIFI_UNDER_LINKING))) {
1100                 struct pwrctrl_priv *pwrpriv;
1101
1102                 pwrpriv = adapter_to_pwrctl(padapter);
1103                 rtw_set_ips_deny(padapter, 0);
1104                 _set_timer(&padapter->mlmepriv.dynamic_chk_timer, 1);
1105         }
1106 }
1107
1108 void rtw_scan_abort(struct adapter *adapter)
1109 {
1110         unsigned long start;
1111         struct mlme_priv *pmlmepriv = &(adapter->mlmepriv);
1112         struct mlme_ext_priv *pmlmeext = &(adapter->mlmeextpriv);
1113
1114         start = jiffies;
1115         pmlmeext->scan_abort = true;
1116         while (check_fwstate(pmlmepriv, _FW_UNDER_SURVEY)
1117                 && jiffies_to_msecs(start) <= 200) {
1118
1119                 if (adapter->bDriverStopped || adapter->bSurpriseRemoved)
1120                         break;
1121
1122                 DBG_871X(FUNC_NDEV_FMT"fw_state = _FW_UNDER_SURVEY!\n", FUNC_NDEV_ARG(adapter->pnetdev));
1123                 msleep(20);
1124         }
1125
1126         if (check_fwstate(pmlmepriv, _FW_UNDER_SURVEY)) {
1127                 if (!adapter->bDriverStopped && !adapter->bSurpriseRemoved)
1128                         DBG_871X(FUNC_NDEV_FMT"waiting for scan_abort time out!\n", FUNC_NDEV_ARG(adapter->pnetdev));
1129                 rtw_indicate_scan_done(adapter, true);
1130         }
1131         pmlmeext->scan_abort = false;
1132 }
1133
1134 static struct sta_info *rtw_joinbss_update_stainfo(struct adapter *padapter, struct wlan_network *pnetwork)
1135 {
1136         int i;
1137         struct sta_info *bmc_sta, *psta = NULL;
1138         struct recv_reorder_ctrl *preorder_ctrl;
1139         struct sta_priv *pstapriv = &padapter->stapriv;
1140         struct mlme_ext_priv *pmlmeext = &padapter->mlmeextpriv;
1141
1142         psta = rtw_get_stainfo(pstapriv, pnetwork->network.MacAddress);
1143         if (!psta)
1144                 psta = rtw_alloc_stainfo(pstapriv, pnetwork->network.MacAddress);
1145
1146         if (psta) { /* update ptarget_sta */
1147
1148                 DBG_871X("%s\n", __func__);
1149
1150                 psta->aid  = pnetwork->join_res;
1151
1152                 update_sta_info(padapter, psta);
1153
1154                 /* update station supportRate */
1155                 psta->bssratelen = rtw_get_rateset_len(pnetwork->network.SupportedRates);
1156                 memcpy(psta->bssrateset, pnetwork->network.SupportedRates, psta->bssratelen);
1157                 rtw_hal_update_sta_rate_mask(padapter, psta);
1158
1159                 psta->wireless_mode = pmlmeext->cur_wireless_mode;
1160                 psta->raid = networktype_to_raid_ex(padapter, psta);
1161
1162                 /* sta mode */
1163                 rtw_hal_set_odm_var(padapter, HAL_ODM_STA_INFO, psta, true);
1164
1165                 /* security related */
1166                 if (padapter->securitypriv.dot11AuthAlgrthm == dot11AuthAlgrthm_8021X) {
1167                         padapter->securitypriv.binstallGrpkey = false;
1168                         padapter->securitypriv.busetkipkey = false;
1169                         padapter->securitypriv.bgrpkey_handshake = false;
1170
1171                         psta->ieee8021x_blocked = true;
1172                         psta->dot118021XPrivacy = padapter->securitypriv.dot11PrivacyAlgrthm;
1173
1174                         memset((u8 *)&psta->dot118021x_UncstKey, 0, sizeof(union Keytype));
1175
1176                         memset((u8 *)&psta->dot11tkiprxmickey, 0, sizeof(union Keytype));
1177                         memset((u8 *)&psta->dot11tkiptxmickey, 0, sizeof(union Keytype));
1178
1179                         memset((u8 *)&psta->dot11txpn, 0, sizeof(union pn48));
1180                         psta->dot11txpn.val = psta->dot11txpn.val + 1;
1181                         memset((u8 *)&psta->dot11wtxpn, 0, sizeof(union pn48));
1182                         memset((u8 *)&psta->dot11rxpn, 0, sizeof(union pn48));
1183                 }
1184
1185                 /*      Commented by Albert 2012/07/21 */
1186                 /*      When doing the WPS, the wps_ie_len won't equal to 0 */
1187                 /*      And the Wi-Fi driver shouldn't allow the data packet to be transmitted. */
1188                 if (padapter->securitypriv.wps_ie_len != 0) {
1189                         psta->ieee8021x_blocked = true;
1190                         padapter->securitypriv.wps_ie_len = 0;
1191                 }
1192
1193                 /* for A-MPDU Rx reordering buffer control for bmc_sta & sta_info */
1194                 /* if A-MPDU Rx is enabled, resetting  rx_ordering_ctrl wstart_b(indicate_seq) to default value = 0xffff */
1195                 /* todo: check if AP can send A-MPDU packets */
1196                 for (i = 0; i < 16 ; i++) {
1197                         /* preorder_ctrl = &precvpriv->recvreorder_ctrl[i]; */
1198                         preorder_ctrl = &psta->recvreorder_ctrl[i];
1199                         preorder_ctrl->enable = false;
1200                         preorder_ctrl->indicate_seq = 0xffff;
1201                         #ifdef DBG_RX_SEQ
1202                         DBG_871X("DBG_RX_SEQ %s:%d indicate_seq:%u\n", __func__, __LINE__,
1203                                 preorder_ctrl->indicate_seq);
1204                         #endif
1205                         preorder_ctrl->wend_b = 0xffff;
1206                         preorder_ctrl->wsize_b = 64;/* max_ampdu_sz;ex. 32(kbytes) -> wsize_b =32 */
1207                 }
1208
1209                 bmc_sta = rtw_get_bcmc_stainfo(padapter);
1210                 if (bmc_sta) {
1211                         for (i = 0; i < 16 ; i++) {
1212                                 /* preorder_ctrl = &precvpriv->recvreorder_ctrl[i]; */
1213                                 preorder_ctrl = &bmc_sta->recvreorder_ctrl[i];
1214                                 preorder_ctrl->enable = false;
1215                                 preorder_ctrl->indicate_seq = 0xffff;
1216                                 #ifdef DBG_RX_SEQ
1217                                 DBG_871X("DBG_RX_SEQ %s:%d indicate_seq:%u\n", __func__, __LINE__,
1218                                         preorder_ctrl->indicate_seq);
1219                                 #endif
1220                                 preorder_ctrl->wend_b = 0xffff;
1221                                 preorder_ctrl->wsize_b = 64;/* max_ampdu_sz;ex. 32(kbytes) -> wsize_b =32 */
1222                         }
1223                 }
1224         }
1225
1226         return psta;
1227
1228 }
1229
1230 /* pnetwork : returns from rtw_joinbss_event_callback */
1231 /* ptarget_wlan: found from scanned_queue */
1232 static void rtw_joinbss_update_network(struct adapter *padapter, struct wlan_network *ptarget_wlan, struct wlan_network  *pnetwork)
1233 {
1234         struct mlme_priv *pmlmepriv = &(padapter->mlmepriv);
1235         struct wlan_network  *cur_network = &(pmlmepriv->cur_network);
1236
1237         DBG_871X("%s\n", __func__);
1238
1239         RT_TRACE(_module_rtl871x_mlme_c_, _drv_info_, ("\nfw_state:%x, BSSID:"MAC_FMT"\n"
1240                 , get_fwstate(pmlmepriv), MAC_ARG(pnetwork->network.MacAddress)));
1241
1242         /*  why not use ptarget_wlan?? */
1243         memcpy(&cur_network->network, &pnetwork->network, pnetwork->network.Length);
1244         /*  some IEs in pnetwork is wrong, so we should use ptarget_wlan IEs */
1245         cur_network->network.IELength = ptarget_wlan->network.IELength;
1246         memcpy(&cur_network->network.IEs[0], &ptarget_wlan->network.IEs[0], MAX_IE_SZ);
1247
1248         cur_network->aid = pnetwork->join_res;
1249
1250         rtw_set_signal_stat_timer(&padapter->recvpriv);
1251
1252         padapter->recvpriv.signal_strength = ptarget_wlan->network.PhyInfo.SignalStrength;
1253         padapter->recvpriv.signal_qual = ptarget_wlan->network.PhyInfo.SignalQuality;
1254         /* the ptarget_wlan->network.Rssi is raw data, we use ptarget_wlan->network.PhyInfo.SignalStrength instead (has scaled) */
1255         padapter->recvpriv.rssi = translate_percentage_to_dbm(ptarget_wlan->network.PhyInfo.SignalStrength);
1256         #if defined(DBG_RX_SIGNAL_DISPLAY_PROCESSING) && 1
1257                 DBG_871X(FUNC_ADPT_FMT" signal_strength:%3u, rssi:%3d, signal_qual:%3u"
1258                         "\n"
1259                         , FUNC_ADPT_ARG(padapter)
1260                         , padapter->recvpriv.signal_strength
1261                         , padapter->recvpriv.rssi
1262                         , padapter->recvpriv.signal_qual
1263         );
1264         #endif
1265
1266         rtw_set_signal_stat_timer(&padapter->recvpriv);
1267
1268         /* update fw_state will clr _FW_UNDER_LINKING here indirectly */
1269         switch (pnetwork->network.InfrastructureMode) {
1270         case Ndis802_11Infrastructure:
1271
1272                         if (pmlmepriv->fw_state&WIFI_UNDER_WPS)
1273                                 pmlmepriv->fw_state = WIFI_STATION_STATE|WIFI_UNDER_WPS;
1274                         else
1275                                 pmlmepriv->fw_state = WIFI_STATION_STATE;
1276
1277                         break;
1278         case Ndis802_11IBSS:
1279                         pmlmepriv->fw_state = WIFI_ADHOC_STATE;
1280                         break;
1281         default:
1282                         pmlmepriv->fw_state = WIFI_NULL_STATE;
1283                         RT_TRACE(_module_rtl871x_mlme_c_, _drv_err_, ("Invalid network_mode\n"));
1284                         break;
1285         }
1286
1287         rtw_update_protection(padapter, (cur_network->network.IEs) + sizeof(struct ndis_802_11_fix_ie),
1288                                                                         (cur_network->network.IELength));
1289
1290         rtw_update_ht_cap(padapter, cur_network->network.IEs, cur_network->network.IELength, (u8) cur_network->network.Configuration.DSConfig);
1291 }
1292
1293 /* Notes: the function could be > passive_level (the same context as Rx tasklet) */
1294 /* pnetwork : returns from rtw_joinbss_event_callback */
1295 /* ptarget_wlan: found from scanned_queue */
1296 /* if join_res > 0, for (fw_state ==WIFI_STATION_STATE), we check if  "ptarget_sta" & "ptarget_wlan" exist. */
1297 /* if join_res > 0, for (fw_state ==WIFI_ADHOC_STATE), we only check if "ptarget_wlan" exist. */
1298 /* if join_res > 0, update "cur_network->network" from "pnetwork->network" if (ptarget_wlan != NULL). */
1299 /*  */
1300 /* define REJOIN */
1301 void rtw_joinbss_event_prehandle(struct adapter *adapter, u8 *pbuf)
1302 {
1303         static u8 retry;
1304         u8 timer_cancelled;
1305         struct sta_info *ptarget_sta = NULL, *pcur_sta = NULL;
1306         struct  sta_priv *pstapriv = &adapter->stapriv;
1307         struct  mlme_priv *pmlmepriv = &(adapter->mlmepriv);
1308         struct wlan_network     *pnetwork       = (struct wlan_network *)pbuf;
1309         struct wlan_network     *cur_network = &(pmlmepriv->cur_network);
1310         struct wlan_network     *pcur_wlan = NULL, *ptarget_wlan = NULL;
1311         unsigned int            the_same_macaddr = false;
1312
1313         RT_TRACE(_module_rtl871x_mlme_c_, _drv_info_, ("joinbss event call back received with res =%d\n", pnetwork->join_res));
1314
1315         rtw_get_encrypt_decrypt_from_registrypriv(adapter);
1316
1317         if (pmlmepriv->assoc_ssid.SsidLength == 0)
1318                 RT_TRACE(_module_rtl871x_mlme_c_, _drv_err_, ("@@@@@   joinbss event call back  for Any SSid\n"));
1319         else
1320                 RT_TRACE(_module_rtl871x_mlme_c_, _drv_err_, ("@@@@@   rtw_joinbss_event_callback for SSid:%s\n", pmlmepriv->assoc_ssid.Ssid));
1321
1322         the_same_macaddr = !memcmp(pnetwork->network.MacAddress, cur_network->network.MacAddress, ETH_ALEN);
1323
1324         pnetwork->network.Length = get_wlan_bssid_ex_sz(&pnetwork->network);
1325         if (pnetwork->network.Length > sizeof(struct wlan_bssid_ex)) {
1326                 RT_TRACE(_module_rtl871x_mlme_c_, _drv_err_, ("\n\n ***joinbss_evt_callback return a wrong bss ***\n\n"));
1327                 return;
1328         }
1329
1330         spin_lock_bh(&pmlmepriv->lock);
1331
1332         pmlmepriv->LinkDetectInfo.TrafficTransitionCount = 0;
1333         pmlmepriv->LinkDetectInfo.LowPowerTransitionCount = 0;
1334
1335         RT_TRACE(_module_rtl871x_mlme_c_, _drv_info_, ("\n rtw_joinbss_event_callback !! spin_lock_irqsave\n"));
1336
1337         if (pnetwork->join_res > 0) {
1338                 spin_lock_bh(&(pmlmepriv->scanned_queue.lock));
1339                 retry = 0;
1340                 if (check_fwstate(pmlmepriv, _FW_UNDER_LINKING)) {
1341                         /* s1. find ptarget_wlan */
1342                         if (check_fwstate(pmlmepriv, _FW_LINKED)) {
1343                                 if (the_same_macaddr) {
1344                                         ptarget_wlan = rtw_find_network(&pmlmepriv->scanned_queue, cur_network->network.MacAddress);
1345                                 } else {
1346                                         pcur_wlan = rtw_find_network(&pmlmepriv->scanned_queue, cur_network->network.MacAddress);
1347                                         if (pcur_wlan)
1348                                                 pcur_wlan->fixed = false;
1349
1350                                         pcur_sta = rtw_get_stainfo(pstapriv, cur_network->network.MacAddress);
1351                                         if (pcur_sta)
1352                                                 rtw_free_stainfo(adapter,  pcur_sta);
1353
1354                                         ptarget_wlan = rtw_find_network(&pmlmepriv->scanned_queue, pnetwork->network.MacAddress);
1355                                         if (check_fwstate(pmlmepriv, WIFI_STATION_STATE) == true) {
1356                                                 if (ptarget_wlan)
1357                                                         ptarget_wlan->fixed = true;
1358                                         }
1359                                 }
1360
1361                         } else {
1362                                 ptarget_wlan = _rtw_find_same_network(&pmlmepriv->scanned_queue, pnetwork);
1363                                 if (check_fwstate(pmlmepriv, WIFI_STATION_STATE) == true) {
1364                                         if (ptarget_wlan)
1365                                                 ptarget_wlan->fixed = true;
1366                                 }
1367                         }
1368
1369                         /* s2. update cur_network */
1370                         if (ptarget_wlan) {
1371                                 rtw_joinbss_update_network(adapter, ptarget_wlan, pnetwork);
1372                         } else {
1373                                 DBG_871X_LEVEL(_drv_always_, "Can't find ptarget_wlan when joinbss_event callback\n");
1374                                 spin_unlock_bh(&(pmlmepriv->scanned_queue.lock));
1375                                 goto ignore_joinbss_callback;
1376                         }
1377
1378                         /* s3. find ptarget_sta & update ptarget_sta after update cur_network only for station mode */
1379                         if (check_fwstate(pmlmepriv, WIFI_STATION_STATE) == true) {
1380                                 ptarget_sta = rtw_joinbss_update_stainfo(adapter, pnetwork);
1381                                 if (!ptarget_sta) {
1382                                         RT_TRACE(_module_rtl871x_mlme_c_, _drv_err_, ("Can't update stainfo when joinbss_event callback\n"));
1383                                         spin_unlock_bh(&(pmlmepriv->scanned_queue.lock));
1384                                         goto ignore_joinbss_callback;
1385                                 }
1386                         }
1387
1388                         /* s4. indicate connect */
1389                         if (check_fwstate(pmlmepriv, WIFI_STATION_STATE) == true) {
1390                                 pmlmepriv->cur_network_scanned = ptarget_wlan;
1391                                 rtw_indicate_connect(adapter);
1392                         } else {
1393                                 /* adhoc mode will rtw_indicate_connect when rtw_stassoc_event_callback */
1394                                 RT_TRACE(_module_rtl871x_mlme_c_, _drv_info_, ("adhoc mode, fw_state:%x", get_fwstate(pmlmepriv)));
1395                         }
1396
1397                         /* s5. Cancel assoc_timer */
1398                         _cancel_timer(&pmlmepriv->assoc_timer, &timer_cancelled);
1399
1400                         RT_TRACE(_module_rtl871x_mlme_c_, _drv_info_, ("Cancel assoc_timer\n"));
1401
1402                 } else {
1403                         RT_TRACE(_module_rtl871x_mlme_c_, _drv_err_, ("rtw_joinbss_event_callback err: fw_state:%x", get_fwstate(pmlmepriv)));
1404                         spin_unlock_bh(&(pmlmepriv->scanned_queue.lock));
1405                         goto ignore_joinbss_callback;
1406                 }
1407
1408                 spin_unlock_bh(&(pmlmepriv->scanned_queue.lock));
1409
1410         } else if (pnetwork->join_res == -4) {
1411                 rtw_reset_securitypriv(adapter);
1412                 _set_timer(&pmlmepriv->assoc_timer, 1);
1413
1414                 /* rtw_free_assoc_resources(adapter, 1); */
1415
1416                 if ((check_fwstate(pmlmepriv, _FW_UNDER_LINKING)) == true) {
1417                         RT_TRACE(_module_rtl871x_mlme_c_, _drv_err_, ("fail! clear _FW_UNDER_LINKING ^^^fw_state =%x\n", get_fwstate(pmlmepriv)));
1418                         _clr_fwstate_(pmlmepriv, _FW_UNDER_LINKING);
1419                 }
1420
1421         } else {/* if join_res < 0 (join fails), then try again */
1422
1423                 #ifdef REJOIN
1424                 res = _FAIL;
1425                 if (retry < 2) {
1426                         res = rtw_select_and_join_from_scanned_queue(pmlmepriv);
1427                         RT_TRACE(_module_rtl871x_mlme_c_, _drv_err_, ("rtw_select_and_join_from_scanned_queue again! res:%d\n", res));
1428                 }
1429
1430                 if (res == _SUCCESS) {
1431                         /* extend time of assoc_timer */
1432                         _set_timer(&pmlmepriv->assoc_timer, MAX_JOIN_TIMEOUT);
1433                         retry++;
1434                 } else if (res == 2) {/* there is no need to wait for join */
1435                         _clr_fwstate_(pmlmepriv, _FW_UNDER_LINKING);
1436                         rtw_indicate_connect(adapter);
1437                 } else {
1438                         RT_TRACE(_module_rtl871x_mlme_c_, _drv_err_, ("Set Assoc_Timer = 1; can't find match ssid in scanned_q\n"));
1439                 #endif
1440
1441                         _set_timer(&pmlmepriv->assoc_timer, 1);
1442                         /* rtw_free_assoc_resources(adapter, 1); */
1443                         _clr_fwstate_(pmlmepriv, _FW_UNDER_LINKING);
1444
1445                 #ifdef REJOIN
1446                         retry = 0;
1447                 }
1448                 #endif
1449         }
1450
1451 ignore_joinbss_callback:
1452
1453         spin_unlock_bh(&pmlmepriv->lock);
1454 }
1455
1456 void rtw_joinbss_event_callback(struct adapter *adapter, u8 *pbuf)
1457 {
1458         struct wlan_network     *pnetwork       = (struct wlan_network *)pbuf;
1459
1460         mlmeext_joinbss_event_callback(adapter, pnetwork->join_res);
1461
1462         rtw_os_xmit_schedule(adapter);
1463 }
1464
1465 /* FOR STA, AP , AD-HOC mode */
1466 void rtw_sta_media_status_rpt(struct adapter *adapter, struct sta_info *psta, u32 mstatus)
1467 {
1468         u16 media_status_rpt;
1469
1470         if (!psta)
1471                 return;
1472
1473         media_status_rpt = (u16)((psta->mac_id<<8)|mstatus); /*   MACID|OPMODE:1 connect */
1474         rtw_hal_set_hwreg(adapter, HW_VAR_H2C_MEDIA_STATUS_RPT, (u8 *)&media_status_rpt);
1475 }
1476
1477 void rtw_stassoc_event_callback(struct adapter *adapter, u8 *pbuf)
1478 {
1479         struct sta_info *psta;
1480         struct mlme_priv *pmlmepriv = &(adapter->mlmepriv);
1481         struct stassoc_event    *pstassoc       = (struct stassoc_event *)pbuf;
1482         struct wlan_network     *cur_network = &(pmlmepriv->cur_network);
1483         struct wlan_network     *ptarget_wlan = NULL;
1484
1485         if (rtw_access_ctrl(adapter, pstassoc->macaddr) == false)
1486                 return;
1487
1488         if (check_fwstate(pmlmepriv, WIFI_AP_STATE)) {
1489                 psta = rtw_get_stainfo(&adapter->stapriv, pstassoc->macaddr);
1490                 if (psta) {
1491                         u8 *passoc_req = NULL;
1492                         u32 assoc_req_len = 0;
1493
1494                         rtw_sta_media_status_rpt(adapter, psta, 1);
1495
1496 #ifndef CONFIG_AUTO_AP_MODE
1497
1498                         ap_sta_info_defer_update(adapter, psta);
1499
1500                         /* report to upper layer */
1501                         DBG_871X("indicate_sta_assoc_event to upper layer - hostapd\n");
1502                         spin_lock_bh(&psta->lock);
1503                         if (psta->passoc_req && psta->assoc_req_len > 0) {
1504                                 passoc_req = rtw_zmalloc(psta->assoc_req_len);
1505                                 if (passoc_req) {
1506                                         assoc_req_len = psta->assoc_req_len;
1507                                         memcpy(passoc_req, psta->passoc_req, assoc_req_len);
1508
1509                                         kfree(psta->passoc_req);
1510                                         psta->passoc_req = NULL;
1511                                         psta->assoc_req_len = 0;
1512                                 }
1513                         }
1514                         spin_unlock_bh(&psta->lock);
1515
1516                         if (passoc_req && assoc_req_len > 0) {
1517                                 rtw_cfg80211_indicate_sta_assoc(adapter, passoc_req, assoc_req_len);
1518
1519                                 kfree(passoc_req);
1520                         }
1521 #endif /* CONFIG_AUTO_AP_MODE */
1522                 }
1523                 return;
1524         }
1525
1526         /* for AD-HOC mode */
1527         psta = rtw_get_stainfo(&adapter->stapriv, pstassoc->macaddr);
1528         if (psta) {
1529                 /* the sta have been in sta_info_queue => do nothing */
1530
1531                 RT_TRACE(_module_rtl871x_mlme_c_, _drv_err_, ("Error: rtw_stassoc_event_callback: sta has been in sta_hash_queue\n"));
1532
1533                 return; /* between drv has received this event before and  fw have not yet to set key to CAM_ENTRY) */
1534         }
1535
1536         psta = rtw_alloc_stainfo(&adapter->stapriv, pstassoc->macaddr);
1537         if (!psta) {
1538                 RT_TRACE(_module_rtl871x_mlme_c_, _drv_err_, ("Can't alloc sta_info when rtw_stassoc_event_callback\n"));
1539                 return;
1540         }
1541
1542         /* to do : init sta_info variable */
1543         psta->qos_option = 0;
1544         psta->mac_id = (uint)pstassoc->cam_id;
1545         /* psta->aid = (uint)pstassoc->cam_id; */
1546         DBG_871X("%s\n", __func__);
1547         /* for ad-hoc mode */
1548         rtw_hal_set_odm_var(adapter, HAL_ODM_STA_INFO, psta, true);
1549
1550         rtw_sta_media_status_rpt(adapter, psta, 1);
1551
1552         if (adapter->securitypriv.dot11AuthAlgrthm == dot11AuthAlgrthm_8021X)
1553                 psta->dot118021XPrivacy = adapter->securitypriv.dot11PrivacyAlgrthm;
1554
1555         psta->ieee8021x_blocked = false;
1556
1557         spin_lock_bh(&pmlmepriv->lock);
1558
1559         if ((check_fwstate(pmlmepriv, WIFI_ADHOC_MASTER_STATE) == true) ||
1560                 (check_fwstate(pmlmepriv, WIFI_ADHOC_STATE) == true)) {
1561                 if (adapter->stapriv.asoc_sta_count == 2) {
1562                         spin_lock_bh(&(pmlmepriv->scanned_queue.lock));
1563                         ptarget_wlan = rtw_find_network(&pmlmepriv->scanned_queue, cur_network->network.MacAddress);
1564                         pmlmepriv->cur_network_scanned = ptarget_wlan;
1565                         if (ptarget_wlan)
1566                                 ptarget_wlan->fixed = true;
1567                         spin_unlock_bh(&(pmlmepriv->scanned_queue.lock));
1568                         /*  a sta + bc/mc_stainfo (not Ibss_stainfo) */
1569                         rtw_indicate_connect(adapter);
1570                 }
1571         }
1572
1573         spin_unlock_bh(&pmlmepriv->lock);
1574
1575         mlmeext_sta_add_event_callback(adapter, psta);
1576 }
1577
1578 void rtw_stadel_event_callback(struct adapter *adapter, u8 *pbuf)
1579 {
1580         int mac_id = (-1);
1581         struct sta_info *psta;
1582         struct wlan_network *pwlan = NULL;
1583         struct wlan_bssid_ex    *pdev_network = NULL;
1584         u8 *pibss = NULL;
1585         struct  mlme_priv *pmlmepriv = &(adapter->mlmepriv);
1586         struct  stadel_event *pstadel   = (struct stadel_event *)pbuf;
1587         struct wlan_network *tgt_network = &(pmlmepriv->cur_network);
1588         struct mlme_ext_priv *pmlmeext = &adapter->mlmeextpriv;
1589         struct mlme_ext_info *pmlmeinfo = &(pmlmeext->mlmext_info);
1590
1591         psta = rtw_get_stainfo(&adapter->stapriv, pstadel->macaddr);
1592         if (psta)
1593                 mac_id = psta->mac_id;
1594         else
1595                 mac_id = pstadel->mac_id;
1596
1597         DBG_871X("%s(mac_id =%d) =" MAC_FMT "\n", __func__, mac_id, MAC_ARG(pstadel->macaddr));
1598
1599         if (mac_id >= 0) {
1600                 u16 media_status;
1601                 media_status = (mac_id<<8)|0; /*   MACID|OPMODE:0 means disconnect */
1602                 /* for STA, AP, ADHOC mode, report disconnect stauts to FW */
1603                 rtw_hal_set_hwreg(adapter, HW_VAR_H2C_MEDIA_STATUS_RPT, (u8 *)&media_status);
1604         }
1605
1606         /* if (check_fwstate(pmlmepriv, WIFI_AP_STATE)) */
1607         if ((pmlmeinfo->state&0x03) == WIFI_FW_AP_STATE)
1608                 return;
1609
1610         mlmeext_sta_del_event_callback(adapter);
1611
1612         spin_lock_bh(&pmlmepriv->lock);
1613
1614         if (check_fwstate(pmlmepriv, WIFI_STATION_STATE)) {
1615                 u16 reason = *((unsigned short *)(pstadel->rsvd));
1616                 bool roam = false;
1617                 struct wlan_network *roam_target = NULL;
1618
1619                 if (adapter->registrypriv.wifi_spec == 1) {
1620                         roam = false;
1621                 } else if (reason == WLAN_REASON_EXPIRATION_CHK && rtw_chk_roam_flags(adapter, RTW_ROAM_ON_EXPIRED)) {
1622                         roam = true;
1623                 } else if (reason == WLAN_REASON_ACTIVE_ROAM && rtw_chk_roam_flags(adapter, RTW_ROAM_ACTIVE)) {
1624                         roam = true;
1625                         roam_target = pmlmepriv->roam_network;
1626                 }
1627
1628                 if (roam) {
1629                         if (rtw_to_roam(adapter) > 0)
1630                                 rtw_dec_to_roam(adapter); /* this stadel_event is caused by roaming, decrease to_roam */
1631                         else if (rtw_to_roam(adapter) == 0)
1632                                 rtw_set_to_roam(adapter, adapter->registrypriv.max_roaming_times);
1633                 } else {
1634                         rtw_set_to_roam(adapter, 0);
1635                 }
1636
1637                 rtw_free_uc_swdec_pending_queue(adapter);
1638
1639                 rtw_free_assoc_resources(adapter, 1);
1640                 rtw_indicate_disconnect(adapter);
1641
1642                 spin_lock_bh(&(pmlmepriv->scanned_queue.lock));
1643                 /*  remove the network entry in scanned_queue */
1644                 pwlan = rtw_find_network(&pmlmepriv->scanned_queue, tgt_network->network.MacAddress);
1645                 if (pwlan) {
1646                         pwlan->fixed = false;
1647                         rtw_free_network_nolock(adapter, pwlan);
1648                 }
1649                 spin_unlock_bh(&(pmlmepriv->scanned_queue.lock));
1650
1651                 _rtw_roaming(adapter, roam_target);
1652         }
1653
1654         if (check_fwstate(pmlmepriv, WIFI_ADHOC_MASTER_STATE) ||
1655               check_fwstate(pmlmepriv, WIFI_ADHOC_STATE)) {
1656
1657                 rtw_free_stainfo(adapter,  psta);
1658
1659                 if (adapter->stapriv.asoc_sta_count == 1) {/* a sta + bc/mc_stainfo (not Ibss_stainfo) */
1660                         /* rtw_indicate_disconnect(adapter);removed@20091105 */
1661                         spin_lock_bh(&(pmlmepriv->scanned_queue.lock));
1662                         /* free old ibss network */
1663                         /* pwlan = rtw_find_network(&pmlmepriv->scanned_queue, pstadel->macaddr); */
1664                         pwlan = rtw_find_network(&pmlmepriv->scanned_queue, tgt_network->network.MacAddress);
1665                         if (pwlan) {
1666                                 pwlan->fixed = false;
1667                                 rtw_free_network_nolock(adapter, pwlan);
1668                         }
1669                         spin_unlock_bh(&(pmlmepriv->scanned_queue.lock));
1670                         /* re-create ibss */
1671                         pdev_network = &(adapter->registrypriv.dev_network);
1672                         pibss = adapter->registrypriv.dev_network.MacAddress;
1673
1674                         memcpy(pdev_network, &tgt_network->network, get_wlan_bssid_ex_sz(&tgt_network->network));
1675
1676                         memcpy(&pdev_network->Ssid, &pmlmepriv->assoc_ssid, sizeof(struct ndis_802_11_ssid));
1677
1678                         rtw_update_registrypriv_dev_network(adapter);
1679
1680                         rtw_generate_random_ibss(pibss);
1681
1682                         if (check_fwstate(pmlmepriv, WIFI_ADHOC_STATE)) {
1683                                 set_fwstate(pmlmepriv, WIFI_ADHOC_MASTER_STATE);
1684                                 _clr_fwstate_(pmlmepriv, WIFI_ADHOC_STATE);
1685                         }
1686
1687                         if (rtw_createbss_cmd(adapter) != _SUCCESS)
1688                                 RT_TRACE(_module_rtl871x_ioctl_set_c_, _drv_err_, ("***Error =>stadel_event_callback: rtw_createbss_cmd status FAIL***\n "));
1689                 }
1690
1691         }
1692
1693         spin_unlock_bh(&pmlmepriv->lock);
1694 }
1695
1696 void rtw_cpwm_event_callback(struct adapter *padapter, u8 *pbuf)
1697 {
1698         struct reportpwrstate_parm *preportpwrstate;
1699
1700         RT_TRACE(_module_rtl871x_mlme_c_, _drv_err_, ("+rtw_cpwm_event_callback !!!\n"));
1701         preportpwrstate = (struct reportpwrstate_parm *)pbuf;
1702         preportpwrstate->state |= (u8)(adapter_to_pwrctl(padapter)->cpwm_tog + 0x80);
1703         cpwm_int_hdl(padapter, preportpwrstate);
1704 }
1705
1706 void rtw_wmm_event_callback(struct adapter *padapter, u8 *pbuf)
1707 {
1708         WMMOnAssocRsp(padapter);
1709 }
1710
1711 /*
1712 * _rtw_join_timeout_handler - Timeout/failure handler for CMD JoinBss
1713 * @adapter: pointer to struct adapter structure
1714 */
1715 void _rtw_join_timeout_handler(struct timer_list *t)
1716 {
1717         struct adapter *adapter = from_timer(adapter, t,
1718                                                   mlmepriv.assoc_timer);
1719         struct  mlme_priv *pmlmepriv = &adapter->mlmepriv;
1720
1721         DBG_871X("%s, fw_state =%x\n", __func__, get_fwstate(pmlmepriv));
1722
1723         if (adapter->bDriverStopped || adapter->bSurpriseRemoved)
1724                 return;
1725
1726         spin_lock_bh(&pmlmepriv->lock);
1727
1728         if (rtw_to_roam(adapter) > 0) { /* join timeout caused by roaming */
1729                 while (1) {
1730                         rtw_dec_to_roam(adapter);
1731                         if (rtw_to_roam(adapter) != 0) { /* try another */
1732                                 int do_join_r;
1733                                 DBG_871X("%s try another roaming\n", __func__);
1734                                 do_join_r = rtw_do_join(adapter);
1735                                 if (_SUCCESS != do_join_r) {
1736                                         DBG_871X("%s roaming do_join return %d\n", __func__, do_join_r);
1737                                         continue;
1738                                 }
1739                                 break;
1740                         } else {
1741                                 DBG_871X("%s We've try roaming but fail\n", __func__);
1742                                 rtw_indicate_disconnect(adapter);
1743                                 break;
1744                         }
1745                 }
1746
1747         } else {
1748                 rtw_indicate_disconnect(adapter);
1749                 free_scanqueue(pmlmepriv);/*  */
1750
1751                 /* indicate disconnect for the case that join_timeout and check_fwstate != FW_LINKED */
1752                 rtw_cfg80211_indicate_disconnect(adapter);
1753
1754         }
1755
1756         spin_unlock_bh(&pmlmepriv->lock);
1757 }
1758
1759 /*
1760 * rtw_scan_timeout_handler - Timeout/Failure handler for CMD SiteSurvey
1761 * @adapter: pointer to struct adapter structure
1762 */
1763 void rtw_scan_timeout_handler(struct timer_list *t)
1764 {
1765         struct adapter *adapter = from_timer(adapter, t,
1766                                                   mlmepriv.scan_to_timer);
1767         struct  mlme_priv *pmlmepriv = &adapter->mlmepriv;
1768
1769         DBG_871X(FUNC_ADPT_FMT" fw_state =%x\n", FUNC_ADPT_ARG(adapter), get_fwstate(pmlmepriv));
1770
1771         spin_lock_bh(&pmlmepriv->lock);
1772
1773         _clr_fwstate_(pmlmepriv, _FW_UNDER_SURVEY);
1774
1775         spin_unlock_bh(&pmlmepriv->lock);
1776
1777         rtw_indicate_scan_done(adapter, true);
1778 }
1779
1780 void rtw_mlme_reset_auto_scan_int(struct adapter *adapter)
1781 {
1782         struct mlme_priv *mlme = &adapter->mlmepriv;
1783         struct mlme_ext_priv *pmlmeext = &adapter->mlmeextpriv;
1784         struct mlme_ext_info *pmlmeinfo = &(pmlmeext->mlmext_info);
1785
1786         if (pmlmeinfo->VHT_enable) /* disable auto scan when connect to 11AC AP */
1787                 mlme->auto_scan_int_ms = 0;
1788         else if (adapter->registrypriv.wifi_spec && is_client_associated_to_ap(adapter) == true)
1789                 mlme->auto_scan_int_ms = 60*1000;
1790         else if (rtw_chk_roam_flags(adapter, RTW_ROAM_ACTIVE)) {
1791                 if (check_fwstate(mlme, WIFI_STATION_STATE) && check_fwstate(mlme, _FW_LINKED))
1792                         mlme->auto_scan_int_ms = mlme->roam_scan_int_ms;
1793         } else
1794                 mlme->auto_scan_int_ms = 0; /* disabled */
1795 }
1796
1797 static void rtw_auto_scan_handler(struct adapter *padapter)
1798 {
1799         struct mlme_priv *pmlmepriv = &padapter->mlmepriv;
1800
1801         rtw_mlme_reset_auto_scan_int(padapter);
1802
1803         if (pmlmepriv->auto_scan_int_ms != 0
1804                 && jiffies_to_msecs(jiffies - pmlmepriv->scan_start_time) > pmlmepriv->auto_scan_int_ms) {
1805
1806                 if (!padapter->registrypriv.wifi_spec) {
1807                         if (check_fwstate(pmlmepriv, _FW_UNDER_SURVEY|_FW_UNDER_LINKING) == true) {
1808                                 DBG_871X(FUNC_ADPT_FMT" _FW_UNDER_SURVEY|_FW_UNDER_LINKING\n", FUNC_ADPT_ARG(padapter));
1809                                 goto exit;
1810                         }
1811
1812                         if (pmlmepriv->LinkDetectInfo.bBusyTraffic) {
1813                                 DBG_871X(FUNC_ADPT_FMT" exit BusyTraffic\n", FUNC_ADPT_ARG(padapter));
1814                                 goto exit;
1815                         }
1816                 }
1817
1818                 DBG_871X(FUNC_ADPT_FMT"\n", FUNC_ADPT_ARG(padapter));
1819
1820                 rtw_set_802_11_bssid_list_scan(padapter, NULL, 0);
1821         }
1822
1823 exit:
1824         return;
1825 }
1826
1827 void rtw_dynamic_check_timer_handler(struct adapter *adapter)
1828 {
1829         if (!adapter)
1830                 return;
1831
1832         if (!adapter->hw_init_completed)
1833                 return;
1834
1835         if (adapter->bDriverStopped || adapter->bSurpriseRemoved)
1836                 return;
1837
1838         if (adapter->net_closed)
1839                 return;
1840
1841         if (is_primary_adapter(adapter))
1842                 DBG_871X("IsBtDisabled =%d, IsBtControlLps =%d\n", hal_btcoex_IsBtDisabled(adapter), hal_btcoex_IsBtControlLps(adapter));
1843
1844         if ((adapter_to_pwrctl(adapter)->bFwCurrentInPSMode)
1845                 && !(hal_btcoex_IsBtControlLps(adapter))
1846                 ) {
1847                 u8 bEnterPS;
1848
1849                 linked_status_chk(adapter);
1850
1851                 bEnterPS = traffic_status_watchdog(adapter, 1);
1852                 if (bEnterPS) {
1853                         /* rtw_lps_ctrl_wk_cmd(adapter, LPS_CTRL_ENTER, 1); */
1854                         rtw_hal_dm_watchdog_in_lps(adapter);
1855                 } else {
1856                         /* call rtw_lps_ctrl_wk_cmd(padapter, LPS_CTRL_LEAVE, 1) in traffic_status_watchdog() */
1857                 }
1858
1859         } else {
1860                 if (is_primary_adapter(adapter))
1861                         rtw_dynamic_chk_wk_cmd(adapter);
1862         }
1863
1864         /* auto site survey */
1865         rtw_auto_scan_handler(adapter);
1866 }
1867
1868 inline bool rtw_is_scan_deny(struct adapter *adapter)
1869 {
1870         struct mlme_priv *mlmepriv = &adapter->mlmepriv;
1871         return (atomic_read(&mlmepriv->set_scan_deny) != 0) ? true : false;
1872 }
1873
1874 inline void rtw_clear_scan_deny(struct adapter *adapter)
1875 {
1876         struct mlme_priv *mlmepriv = &adapter->mlmepriv;
1877         atomic_set(&mlmepriv->set_scan_deny, 0);
1878
1879         DBG_871X(FUNC_ADPT_FMT"\n", FUNC_ADPT_ARG(adapter));
1880 }
1881
1882 void rtw_set_scan_deny(struct adapter *adapter, u32 ms)
1883 {
1884         struct mlme_priv *mlmepriv = &adapter->mlmepriv;
1885
1886         DBG_871X(FUNC_ADPT_FMT"\n", FUNC_ADPT_ARG(adapter));
1887         atomic_set(&mlmepriv->set_scan_deny, 1);
1888         _set_timer(&mlmepriv->set_scan_deny_timer, ms);
1889 }
1890
1891 /*
1892 * Select a new roaming candidate from the original @param candidate and @param competitor
1893 * @return true: candidate is updated
1894 * @return false: candidate is not updated
1895 */
1896 static int rtw_check_roaming_candidate(struct mlme_priv *mlme
1897         , struct wlan_network **candidate, struct wlan_network *competitor)
1898 {
1899         int updated = false;
1900         struct adapter *adapter = container_of(mlme, struct adapter, mlmepriv);
1901
1902         if (is_same_ess(&competitor->network, &mlme->cur_network.network) == false)
1903                 goto exit;
1904
1905         if (rtw_is_desired_network(adapter, competitor) == false)
1906                 goto exit;
1907
1908         DBG_871X("roam candidate:%s %s("MAC_FMT", ch%3u) rssi:%d, age:%5d\n",
1909                 (competitor == mlme->cur_network_scanned)?"*":" ",
1910                 competitor->network.Ssid.Ssid,
1911                 MAC_ARG(competitor->network.MacAddress),
1912                 competitor->network.Configuration.DSConfig,
1913                 (int)competitor->network.Rssi,
1914                 jiffies_to_msecs(jiffies - competitor->last_scanned)
1915         );
1916
1917         /* got specific addr to roam */
1918         if (!is_zero_mac_addr(mlme->roam_tgt_addr)) {
1919                 if (!memcmp(mlme->roam_tgt_addr, competitor->network.MacAddress, ETH_ALEN))
1920                         goto update;
1921                 else
1922                         goto exit;
1923         }
1924         if (jiffies_to_msecs(jiffies - competitor->last_scanned) >= mlme->roam_scanr_exp_ms)
1925                 goto exit;
1926
1927         if (competitor->network.Rssi - mlme->cur_network_scanned->network.Rssi < mlme->roam_rssi_diff_th)
1928                 goto exit;
1929
1930         if (*candidate != NULL && (*candidate)->network.Rssi >= competitor->network.Rssi)
1931                 goto exit;
1932
1933 update:
1934         *candidate = competitor;
1935         updated = true;
1936
1937 exit:
1938         return updated;
1939 }
1940
1941 int rtw_select_roaming_candidate(struct mlme_priv *mlme)
1942 {
1943         int ret = _FAIL;
1944         struct list_head        *phead;
1945         struct __queue  *queue  = &(mlme->scanned_queue);
1946         struct  wlan_network    *pnetwork = NULL;
1947         struct  wlan_network    *candidate = NULL;
1948
1949         if (!mlme->cur_network_scanned) {
1950                 rtw_warn_on(1);
1951                 return ret;
1952         }
1953
1954         spin_lock_bh(&(mlme->scanned_queue.lock));
1955         phead = get_list_head(queue);
1956
1957         mlme->pscanned = get_next(phead);
1958
1959         while (phead != mlme->pscanned) {
1960
1961                 pnetwork = LIST_CONTAINOR(mlme->pscanned, struct wlan_network, list);
1962                 if (!pnetwork) {
1963                         RT_TRACE(_module_rtl871x_mlme_c_, _drv_err_, ("%s return _FAIL:(pnetwork == NULL)\n", __func__));
1964                         ret = _FAIL;
1965                         goto exit;
1966                 }
1967
1968                 mlme->pscanned = get_next(mlme->pscanned);
1969
1970                 DBG_871X("%s("MAC_FMT", ch%u) rssi:%d\n"
1971                         , pnetwork->network.Ssid.Ssid
1972                         , MAC_ARG(pnetwork->network.MacAddress)
1973                         , pnetwork->network.Configuration.DSConfig
1974                         , (int)pnetwork->network.Rssi);
1975
1976                 rtw_check_roaming_candidate(mlme, &candidate, pnetwork);
1977
1978         }
1979
1980         if (!candidate) {
1981                 DBG_871X("%s: return _FAIL(candidate == NULL)\n", __func__);
1982                 ret = _FAIL;
1983                 goto exit;
1984         } else {
1985                 DBG_871X("%s: candidate: %s("MAC_FMT", ch:%u)\n", __func__,
1986                         candidate->network.Ssid.Ssid, MAC_ARG(candidate->network.MacAddress),
1987                         candidate->network.Configuration.DSConfig);
1988
1989                 mlme->roam_network = candidate;
1990
1991                 if (!memcmp(candidate->network.MacAddress, mlme->roam_tgt_addr, ETH_ALEN))
1992                         eth_zero_addr(mlme->roam_tgt_addr);
1993         }
1994
1995         ret = _SUCCESS;
1996 exit:
1997         spin_unlock_bh(&(mlme->scanned_queue.lock));
1998
1999         return ret;
2000 }
2001
2002 /*
2003 * Select a new join candidate from the original @param candidate and @param competitor
2004 * @return true: candidate is updated
2005 * @return false: candidate is not updated
2006 */
2007 static int rtw_check_join_candidate(struct mlme_priv *mlme
2008         , struct wlan_network **candidate, struct wlan_network *competitor)
2009 {
2010         int updated = false;
2011         struct adapter *adapter = container_of(mlme, struct adapter, mlmepriv);
2012
2013         /* check bssid, if needed */
2014         if (mlme->assoc_by_bssid) {
2015                 if (memcmp(competitor->network.MacAddress, mlme->assoc_bssid, ETH_ALEN))
2016                         goto exit;
2017         }
2018
2019         /* check ssid, if needed */
2020         if (mlme->assoc_ssid.Ssid[0] && mlme->assoc_ssid.SsidLength) {
2021                 if (competitor->network.Ssid.SsidLength != mlme->assoc_ssid.SsidLength
2022                         || memcmp(competitor->network.Ssid.Ssid, mlme->assoc_ssid.Ssid, mlme->assoc_ssid.SsidLength)
2023                 )
2024                         goto exit;
2025         }
2026
2027         if (rtw_is_desired_network(adapter, competitor)  == false)
2028                 goto exit;
2029
2030         if (rtw_to_roam(adapter) > 0) {
2031                 if (jiffies_to_msecs(jiffies - competitor->last_scanned) >= mlme->roam_scanr_exp_ms
2032                         || is_same_ess(&competitor->network, &mlme->cur_network.network) == false
2033                 )
2034                         goto exit;
2035         }
2036
2037         if (*candidate == NULL || (*candidate)->network.Rssi < competitor->network.Rssi) {
2038                 *candidate = competitor;
2039                 updated = true;
2040         }
2041
2042         if (updated) {
2043                 DBG_871X("[by_bssid:%u][assoc_ssid:%s]"
2044                         "[to_roam:%u] "
2045                         "new candidate: %s("MAC_FMT", ch%u) rssi:%d\n",
2046                         mlme->assoc_by_bssid,
2047                         mlme->assoc_ssid.Ssid,
2048                         rtw_to_roam(adapter),
2049                         (*candidate)->network.Ssid.Ssid,
2050                         MAC_ARG((*candidate)->network.MacAddress),
2051                         (*candidate)->network.Configuration.DSConfig,
2052                         (int)(*candidate)->network.Rssi
2053                 );
2054         }
2055
2056 exit:
2057         return updated;
2058 }
2059
2060 /*
2061 Calling context:
2062 The caller of the sub-routine will be in critical section...
2063 The caller must hold the following spinlock
2064 pmlmepriv->lock
2065 */
2066
2067 int rtw_select_and_join_from_scanned_queue(struct mlme_priv *pmlmepriv)
2068 {
2069         int ret;
2070         struct list_head        *phead;
2071         struct adapter *adapter;
2072         struct __queue  *queue  = &(pmlmepriv->scanned_queue);
2073         struct  wlan_network    *pnetwork = NULL;
2074         struct  wlan_network    *candidate = NULL;
2075
2076         adapter = (struct adapter *)pmlmepriv->nic_hdl;
2077
2078         spin_lock_bh(&(pmlmepriv->scanned_queue.lock));
2079
2080         if (pmlmepriv->roam_network) {
2081                 candidate = pmlmepriv->roam_network;
2082                 pmlmepriv->roam_network = NULL;
2083                 goto candidate_exist;
2084         }
2085
2086         phead = get_list_head(queue);
2087         pmlmepriv->pscanned = get_next(phead);
2088
2089         while (phead != pmlmepriv->pscanned) {
2090
2091                 pnetwork = LIST_CONTAINOR(pmlmepriv->pscanned, struct wlan_network, list);
2092                 if (!pnetwork) {
2093                         RT_TRACE(_module_rtl871x_mlme_c_, _drv_err_, ("%s return _FAIL:(pnetwork == NULL)\n", __func__));
2094                         ret = _FAIL;
2095                         goto exit;
2096                 }
2097
2098                 pmlmepriv->pscanned = get_next(pmlmepriv->pscanned);
2099
2100                 DBG_871X("%s("MAC_FMT", ch%u) rssi:%d\n"
2101                         , pnetwork->network.Ssid.Ssid
2102                         , MAC_ARG(pnetwork->network.MacAddress)
2103                         , pnetwork->network.Configuration.DSConfig
2104                         , (int)pnetwork->network.Rssi);
2105
2106                 rtw_check_join_candidate(pmlmepriv, &candidate, pnetwork);
2107
2108         }
2109
2110         if (!candidate) {
2111                 DBG_871X("%s: return _FAIL(candidate == NULL)\n", __func__);
2112 #ifdef CONFIG_WOWLAN
2113                 _clr_fwstate_(pmlmepriv, _FW_LINKED|_FW_UNDER_LINKING);
2114 #endif
2115                 ret = _FAIL;
2116                 goto exit;
2117         } else {
2118                 DBG_871X("%s: candidate: %s("MAC_FMT", ch:%u)\n", __func__,
2119                         candidate->network.Ssid.Ssid, MAC_ARG(candidate->network.MacAddress),
2120                         candidate->network.Configuration.DSConfig);
2121                 goto candidate_exist;
2122         }
2123
2124 candidate_exist:
2125
2126         /*  check for situation of  _FW_LINKED */
2127         if (check_fwstate(pmlmepriv, _FW_LINKED) == true) {
2128                 DBG_871X("%s: _FW_LINKED while ask_for_joinbss!!!\n", __func__);
2129
2130                 rtw_disassoc_cmd(adapter, 0, true);
2131                 rtw_indicate_disconnect(adapter);
2132                 rtw_free_assoc_resources(adapter, 0);
2133         }
2134
2135         set_fwstate(pmlmepriv, _FW_UNDER_LINKING);
2136         ret = rtw_joinbss_cmd(adapter, candidate);
2137
2138 exit:
2139         spin_unlock_bh(&(pmlmepriv->scanned_queue.lock));
2140         return ret;
2141 }
2142
2143 sint rtw_set_auth(struct adapter *adapter, struct security_priv *psecuritypriv)
2144 {
2145         struct  cmd_obj *pcmd;
2146         struct  setauth_parm *psetauthparm;
2147         struct  cmd_priv *pcmdpriv = &(adapter->cmdpriv);
2148         sint            res = _SUCCESS;
2149
2150         pcmd = rtw_zmalloc(sizeof(struct cmd_obj));
2151         if (!pcmd) {
2152                 res = _FAIL;  /* try again */
2153                 goto exit;
2154         }
2155
2156         psetauthparm = rtw_zmalloc(sizeof(struct setauth_parm));
2157         if (!psetauthparm) {
2158                 kfree(pcmd);
2159                 res = _FAIL;
2160                 goto exit;
2161         }
2162
2163         psetauthparm->mode = (unsigned char)psecuritypriv->dot11AuthAlgrthm;
2164
2165         pcmd->cmdcode = _SetAuth_CMD_;
2166         pcmd->parmbuf = (unsigned char *)psetauthparm;
2167         pcmd->cmdsz =  (sizeof(struct setauth_parm));
2168         pcmd->rsp = NULL;
2169         pcmd->rspsz = 0;
2170
2171         INIT_LIST_HEAD(&pcmd->list);
2172
2173         RT_TRACE(_module_rtl871x_mlme_c_, _drv_err_, ("after enqueue set_auth_cmd, auth_mode =%x\n", psecuritypriv->dot11AuthAlgrthm));
2174
2175         res = rtw_enqueue_cmd(pcmdpriv, pcmd);
2176
2177 exit:
2178         return res;
2179 }
2180
2181 sint rtw_set_key(struct adapter *adapter, struct security_priv *psecuritypriv, sint keyid, u8 set_tx, bool enqueue)
2182 {
2183         u8 keylen;
2184         struct cmd_obj          *pcmd;
2185         struct setkey_parm      *psetkeyparm;
2186         struct cmd_priv         *pcmdpriv = &(adapter->cmdpriv);
2187         sint    res = _SUCCESS;
2188
2189         psetkeyparm = rtw_zmalloc(sizeof(struct setkey_parm));
2190         if (!psetkeyparm) {
2191                 res = _FAIL;
2192                 goto exit;
2193         }
2194
2195         if (psecuritypriv->dot11AuthAlgrthm == dot11AuthAlgrthm_8021X) {
2196                 psetkeyparm->algorithm = (unsigned char)psecuritypriv->dot118021XGrpPrivacy;
2197                 RT_TRACE(_module_rtl871x_mlme_c_, _drv_err_, ("\n rtw_set_key: psetkeyparm->algorithm =(unsigned char)psecuritypriv->dot118021XGrpPrivacy =%d\n", psetkeyparm->algorithm));
2198         } else {
2199                 psetkeyparm->algorithm = (u8)psecuritypriv->dot11PrivacyAlgrthm;
2200                 RT_TRACE(_module_rtl871x_mlme_c_, _drv_err_, ("\n rtw_set_key: psetkeyparm->algorithm =(u8)psecuritypriv->dot11PrivacyAlgrthm =%d\n", psetkeyparm->algorithm));
2201
2202         }
2203         psetkeyparm->keyid = (u8)keyid;/* 0~3 */
2204         psetkeyparm->set_tx = set_tx;
2205         if (is_wep_enc(psetkeyparm->algorithm))
2206                 adapter->securitypriv.key_mask |= BIT(psetkeyparm->keyid);
2207
2208         DBG_871X("==> rtw_set_key algorithm(%x), keyid(%x), key_mask(%x)\n", psetkeyparm->algorithm, psetkeyparm->keyid, adapter->securitypriv.key_mask);
2209         RT_TRACE(_module_rtl871x_mlme_c_, _drv_err_, ("\n rtw_set_key: psetkeyparm->algorithm =%d psetkeyparm->keyid =(u8)keyid =%d\n", psetkeyparm->algorithm, keyid));
2210
2211         switch (psetkeyparm->algorithm) {
2212
2213         case _WEP40_:
2214                 keylen = 5;
2215                 memcpy(&(psetkeyparm->key[0]), &(psecuritypriv->dot11DefKey[keyid].skey[0]), keylen);
2216                 break;
2217         case _WEP104_:
2218                 keylen = 13;
2219                 memcpy(&(psetkeyparm->key[0]), &(psecuritypriv->dot11DefKey[keyid].skey[0]), keylen);
2220                 break;
2221         case _TKIP_:
2222                 keylen = 16;
2223                 memcpy(&psetkeyparm->key, &psecuritypriv->dot118021XGrpKey[keyid], keylen);
2224                 psetkeyparm->grpkey = 1;
2225                 break;
2226         case _AES_:
2227                 keylen = 16;
2228                 memcpy(&psetkeyparm->key, &psecuritypriv->dot118021XGrpKey[keyid], keylen);
2229                 psetkeyparm->grpkey = 1;
2230                 break;
2231         default:
2232                 RT_TRACE(_module_rtl871x_mlme_c_, _drv_err_, ("\n rtw_set_key:psecuritypriv->dot11PrivacyAlgrthm = %x (must be 1 or 2 or 4 or 5)\n", psecuritypriv->dot11PrivacyAlgrthm));
2233                 res = _FAIL;
2234                 kfree(psetkeyparm);
2235                 goto exit;
2236         }
2237
2238         if (enqueue) {
2239                 pcmd = rtw_zmalloc(sizeof(struct cmd_obj));
2240                 if (!pcmd) {
2241                         kfree(psetkeyparm);
2242                         res = _FAIL;  /* try again */
2243                         goto exit;
2244                 }
2245
2246                 pcmd->cmdcode = _SetKey_CMD_;
2247                 pcmd->parmbuf = (u8 *)psetkeyparm;
2248                 pcmd->cmdsz =  (sizeof(struct setkey_parm));
2249                 pcmd->rsp = NULL;
2250                 pcmd->rspsz = 0;
2251
2252                 INIT_LIST_HEAD(&pcmd->list);
2253
2254                 res = rtw_enqueue_cmd(pcmdpriv, pcmd);
2255         } else {
2256                 setkey_hdl(adapter, (u8 *)psetkeyparm);
2257                 kfree(psetkeyparm);
2258         }
2259 exit:
2260         return res;
2261 }
2262
2263 /* adjust IEs for rtw_joinbss_cmd in WMM */
2264 int rtw_restruct_wmm_ie(struct adapter *adapter, u8 *in_ie, u8 *out_ie, uint in_len, uint initial_out_len)
2265 {
2266         unsigned        int ielength = 0;
2267         unsigned int i, j;
2268
2269         i = 12; /* after the fixed IE */
2270         while (i < in_len) {
2271                 ielength = initial_out_len;
2272
2273                 if (in_ie[i] == 0xDD && in_ie[i+2] == 0x00 && in_ie[i+3] == 0x50  && in_ie[i+4] == 0xF2 && in_ie[i+5] == 0x02 && i+5 < in_len) { /* WMM element ID and OUI */
2274                         for (j = i; j < i + 9; j++) {
2275                                         out_ie[ielength] = in_ie[j];
2276                                         ielength++;
2277                         }
2278                         out_ie[initial_out_len + 1] = 0x07;
2279                         out_ie[initial_out_len + 6] = 0x00;
2280                         out_ie[initial_out_len + 8] = 0x00;
2281
2282                         break;
2283                 }
2284
2285                 i += (in_ie[i+1]+2); /*  to the next IE element */
2286         }
2287
2288         return ielength;
2289
2290 }
2291
2292 /*  */
2293 /*  Ported from 8185: IsInPreAuthKeyList(). (Renamed from SecIsInPreAuthKeyList(), 2006-10-13.) */
2294 /*  Added by Annie, 2006-05-07. */
2295 /*  */
2296 /*  Search by BSSID, */
2297 /*  Return Value: */
2298 /*              -1              :if there is no pre-auth key in the  table */
2299 /*              >= 0            :if there is pre-auth key, and   return the entry id */
2300 /*  */
2301 /*  */
2302
2303 static int SecIsInPMKIDList(struct adapter *Adapter, u8 *bssid)
2304 {
2305         struct security_priv *psecuritypriv = &Adapter->securitypriv;
2306         int i = 0;
2307
2308         do {
2309                 if ((psecuritypriv->PMKIDList[i].bUsed) &&
2310                                 (!memcmp(psecuritypriv->PMKIDList[i].Bssid, bssid, ETH_ALEN))) {
2311                         break;
2312                 } else {
2313                         i++;
2314                         /* continue; */
2315                 }
2316
2317         } while (i < NUM_PMKID_CACHE);
2318
2319         if (i == NUM_PMKID_CACHE) {
2320                 i = -1;/*  Could not find. */
2321         } else {
2322                 /*  There is one Pre-Authentication Key for the specific BSSID. */
2323         }
2324
2325         return i;
2326
2327 }
2328
2329 /*  */
2330 /*  Check the RSN IE length */
2331 /*  If the RSN IE length <= 20, the RSN IE didn't include the PMKID information */
2332 /*  0-11th element in the array are the fixed IE */
2333 /*  12th element in the array is the IE */
2334 /*  13th element in the array is the IE length */
2335 /*  */
2336
2337 static int rtw_append_pmkid(struct adapter *Adapter, int iEntry, u8 *ie, uint ie_len)
2338 {
2339         struct security_priv *psecuritypriv = &Adapter->securitypriv;
2340
2341         if (ie[13] <= 20) {
2342                 /*  The RSN IE didn't include the PMK ID, append the PMK information */
2343                         ie[ie_len] = 1;
2344                         ie_len++;
2345                         ie[ie_len] = 0; /* PMKID count = 0x0100 */
2346                         ie_len++;
2347                         memcpy(&ie[ie_len], &psecuritypriv->PMKIDList[iEntry].PMKID, 16);
2348
2349                         ie_len += 16;
2350                         ie[13] += 18;/* PMKID length = 2+16 */
2351
2352         }
2353         return ie_len;
2354 }
2355
2356 sint rtw_restruct_sec_ie(struct adapter *adapter, u8 *in_ie, u8 *out_ie, uint in_len)
2357 {
2358         u8 authmode = 0x0;
2359         uint    ielength;
2360         int iEntry;
2361
2362         struct mlme_priv *pmlmepriv = &adapter->mlmepriv;
2363         struct security_priv *psecuritypriv = &adapter->securitypriv;
2364         uint    ndisauthmode = psecuritypriv->ndisauthtype;
2365
2366         RT_TRACE(_module_rtl871x_mlme_c_, _drv_notice_,
2367                  ("+rtw_restruct_sec_ie: ndisauthmode =%d\n", ndisauthmode));
2368
2369         /* copy fixed ie only */
2370         memcpy(out_ie, in_ie, 12);
2371         ielength = 12;
2372         if ((ndisauthmode == Ndis802_11AuthModeWPA) || (ndisauthmode == Ndis802_11AuthModeWPAPSK))
2373                         authmode = _WPA_IE_ID_;
2374         if ((ndisauthmode == Ndis802_11AuthModeWPA2) || (ndisauthmode == Ndis802_11AuthModeWPA2PSK))
2375                         authmode = _WPA2_IE_ID_;
2376
2377         if (check_fwstate(pmlmepriv, WIFI_UNDER_WPS)) {
2378                 memcpy(out_ie+ielength, psecuritypriv->wps_ie, psecuritypriv->wps_ie_len);
2379
2380                 ielength += psecuritypriv->wps_ie_len;
2381         } else if ((authmode == _WPA_IE_ID_) || (authmode == _WPA2_IE_ID_)) {
2382                 /* copy RSN or SSN */
2383                 memcpy(&out_ie[ielength], &psecuritypriv->supplicant_ie[0], psecuritypriv->supplicant_ie[1]+2);
2384                 /* debug for CONFIG_IEEE80211W
2385                 {
2386                         int jj;
2387                         printk("supplicant_ie_length =%d &&&&&&&&&&&&&&&&&&&\n", psecuritypriv->supplicant_ie[1]+2);
2388                         for (jj = 0; jj < psecuritypriv->supplicant_ie[1]+2; jj++)
2389                                 printk(" %02x ", psecuritypriv->supplicant_ie[jj]);
2390                         printk("\n");
2391                 }*/
2392                 ielength += psecuritypriv->supplicant_ie[1]+2;
2393                 rtw_report_sec_ie(adapter, authmode, psecuritypriv->supplicant_ie);
2394         }
2395
2396         iEntry = SecIsInPMKIDList(adapter, pmlmepriv->assoc_bssid);
2397         if (iEntry < 0) {
2398                 return ielength;
2399         } else {
2400                 if (authmode == _WPA2_IE_ID_)
2401                         ielength = rtw_append_pmkid(adapter, iEntry, out_ie, ielength);
2402         }
2403         return ielength;
2404 }
2405
2406 void rtw_init_registrypriv_dev_network(struct adapter *adapter)
2407 {
2408         struct registry_priv *pregistrypriv = &adapter->registrypriv;
2409         struct eeprom_priv *peepriv = &adapter->eeprompriv;
2410         struct wlan_bssid_ex    *pdev_network = &pregistrypriv->dev_network;
2411         u8 *myhwaddr = myid(peepriv);
2412
2413         memcpy(pdev_network->MacAddress, myhwaddr, ETH_ALEN);
2414
2415         memcpy(&pdev_network->Ssid, &pregistrypriv->ssid, sizeof(struct ndis_802_11_ssid));
2416
2417         pdev_network->Configuration.Length = sizeof(struct ndis_802_11_conf);
2418         pdev_network->Configuration.BeaconPeriod = 100;
2419         pdev_network->Configuration.FHConfig.Length = 0;
2420         pdev_network->Configuration.FHConfig.HopPattern = 0;
2421         pdev_network->Configuration.FHConfig.HopSet = 0;
2422         pdev_network->Configuration.FHConfig.DwellTime = 0;
2423 }
2424
2425 void rtw_update_registrypriv_dev_network(struct adapter *adapter)
2426 {
2427         int sz = 0;
2428         struct registry_priv *pregistrypriv = &adapter->registrypriv;
2429         struct wlan_bssid_ex    *pdev_network = &pregistrypriv->dev_network;
2430         struct  security_priv *psecuritypriv = &adapter->securitypriv;
2431         struct  wlan_network    *cur_network = &adapter->mlmepriv.cur_network;
2432         /* struct       xmit_priv *pxmitpriv = &adapter->xmitpriv; */
2433
2434         pdev_network->Privacy = (psecuritypriv->dot11PrivacyAlgrthm > 0 ? 1 : 0) ; /*  adhoc no 802.1x */
2435
2436         pdev_network->Rssi = 0;
2437
2438         switch (pregistrypriv->wireless_mode) {
2439         case WIRELESS_11B:
2440                 pdev_network->NetworkTypeInUse = (Ndis802_11DS);
2441                 break;
2442         case WIRELESS_11G:
2443         case WIRELESS_11BG:
2444         case WIRELESS_11_24N:
2445         case WIRELESS_11G_24N:
2446         case WIRELESS_11BG_24N:
2447                 pdev_network->NetworkTypeInUse = (Ndis802_11OFDM24);
2448                 break;
2449         case WIRELESS_11A:
2450         case WIRELESS_11A_5N:
2451                 pdev_network->NetworkTypeInUse = (Ndis802_11OFDM5);
2452                 break;
2453         case WIRELESS_11ABGN:
2454                 if (pregistrypriv->channel > 14)
2455                         pdev_network->NetworkTypeInUse = (Ndis802_11OFDM5);
2456                 else
2457                         pdev_network->NetworkTypeInUse = (Ndis802_11OFDM24);
2458                 break;
2459         default:
2460                 /*  TODO */
2461                 break;
2462         }
2463
2464         pdev_network->Configuration.DSConfig = (pregistrypriv->channel);
2465         RT_TRACE(_module_rtl871x_mlme_c_, _drv_info_, ("pregistrypriv->channel =%d, pdev_network->Configuration.DSConfig = 0x%x\n", pregistrypriv->channel, pdev_network->Configuration.DSConfig));
2466
2467         if (cur_network->network.InfrastructureMode == Ndis802_11IBSS)
2468                 pdev_network->Configuration.ATIMWindow = (0);
2469
2470         pdev_network->InfrastructureMode = (cur_network->network.InfrastructureMode);
2471
2472         /*  1. Supported rates */
2473         /*  2. IE */
2474
2475         /* rtw_set_supported_rate(pdev_network->SupportedRates, pregistrypriv->wireless_mode) ;  will be called in rtw_generate_ie */
2476         sz = rtw_generate_ie(pregistrypriv);
2477
2478         pdev_network->IELength = sz;
2479
2480         pdev_network->Length = get_wlan_bssid_ex_sz((struct wlan_bssid_ex  *)pdev_network);
2481
2482         /* notes: translate IELength & Length after assign the Length to cmdsz in createbss_cmd(); */
2483         /* pdev_network->IELength = cpu_to_le32(sz); */
2484 }
2485
2486 void rtw_get_encrypt_decrypt_from_registrypriv(struct adapter *adapter)
2487 {
2488 }
2489
2490 /* the function is at passive_level */
2491 void rtw_joinbss_reset(struct adapter *padapter)
2492 {
2493         u8 threshold;
2494         struct mlme_priv *pmlmepriv = &padapter->mlmepriv;
2495
2496         struct ht_priv  *phtpriv = &pmlmepriv->htpriv;
2497
2498         /* todo: if you want to do something io/reg/hw setting before join_bss, please add code here */
2499
2500         pmlmepriv->num_FortyMHzIntolerant = 0;
2501
2502         pmlmepriv->num_sta_no_ht = 0;
2503
2504         phtpriv->ampdu_enable = false;/* reset to disabled */
2505
2506         /*  TH = 1 => means that invalidate usb rx aggregation */
2507         /*  TH = 0 => means that validate usb rx aggregation, use init value. */
2508         if (phtpriv->ht_option) {
2509                 if (padapter->registrypriv.wifi_spec == 1)
2510                         threshold = 1;
2511                 else
2512                         threshold = 0;
2513                 rtw_hal_set_hwreg(padapter, HW_VAR_RXDMA_AGG_PG_TH, (u8 *)(&threshold));
2514         } else {
2515                 threshold = 1;
2516                 rtw_hal_set_hwreg(padapter, HW_VAR_RXDMA_AGG_PG_TH, (u8 *)(&threshold));
2517         }
2518 }
2519
2520 void rtw_ht_use_default_setting(struct adapter *padapter)
2521 {
2522         struct mlme_priv        *pmlmepriv = &padapter->mlmepriv;
2523         struct ht_priv  *phtpriv = &pmlmepriv->htpriv;
2524         struct registry_priv *pregistrypriv = &padapter->registrypriv;
2525         bool            bHwLDPCSupport = false, bHwSTBCSupport = false;
2526         bool            bHwSupportBeamformer = false, bHwSupportBeamformee = false;
2527
2528         if (pregistrypriv->wifi_spec)
2529                 phtpriv->bss_coexist = 1;
2530         else
2531                 phtpriv->bss_coexist = 0;
2532
2533         phtpriv->sgi_40m = TEST_FLAG(pregistrypriv->short_gi, BIT1) ? true : false;
2534         phtpriv->sgi_20m = TEST_FLAG(pregistrypriv->short_gi, BIT0) ? true : false;
2535
2536         /*  LDPC support */
2537         rtw_hal_get_def_var(padapter, HAL_DEF_RX_LDPC, (u8 *)&bHwLDPCSupport);
2538         CLEAR_FLAGS(phtpriv->ldpc_cap);
2539         if (bHwLDPCSupport) {
2540                 if (TEST_FLAG(pregistrypriv->ldpc_cap, BIT4))
2541                         SET_FLAG(phtpriv->ldpc_cap, LDPC_HT_ENABLE_RX);
2542         }
2543         rtw_hal_get_def_var(padapter, HAL_DEF_TX_LDPC, (u8 *)&bHwLDPCSupport);
2544         if (bHwLDPCSupport) {
2545                 if (TEST_FLAG(pregistrypriv->ldpc_cap, BIT5))
2546                         SET_FLAG(phtpriv->ldpc_cap, LDPC_HT_ENABLE_TX);
2547         }
2548         if (phtpriv->ldpc_cap)
2549                 DBG_871X("[HT] Support LDPC = 0x%02X\n", phtpriv->ldpc_cap);
2550
2551         /*  STBC */
2552         rtw_hal_get_def_var(padapter, HAL_DEF_TX_STBC, (u8 *)&bHwSTBCSupport);
2553         CLEAR_FLAGS(phtpriv->stbc_cap);
2554         if (bHwSTBCSupport) {
2555                 if (TEST_FLAG(pregistrypriv->stbc_cap, BIT5))
2556                         SET_FLAG(phtpriv->stbc_cap, STBC_HT_ENABLE_TX);
2557         }
2558         rtw_hal_get_def_var(padapter, HAL_DEF_RX_STBC, (u8 *)&bHwSTBCSupport);
2559         if (bHwSTBCSupport) {
2560                 if (TEST_FLAG(pregistrypriv->stbc_cap, BIT4))
2561                         SET_FLAG(phtpriv->stbc_cap, STBC_HT_ENABLE_RX);
2562         }
2563         if (phtpriv->stbc_cap)
2564                 DBG_871X("[HT] Support STBC = 0x%02X\n", phtpriv->stbc_cap);
2565
2566         /*  Beamforming setting */
2567         rtw_hal_get_def_var(padapter, HAL_DEF_EXPLICIT_BEAMFORMER, (u8 *)&bHwSupportBeamformer);
2568         rtw_hal_get_def_var(padapter, HAL_DEF_EXPLICIT_BEAMFORMEE, (u8 *)&bHwSupportBeamformee);
2569         CLEAR_FLAGS(phtpriv->beamform_cap);
2570         if (TEST_FLAG(pregistrypriv->beamform_cap, BIT4) && bHwSupportBeamformer) {
2571                 SET_FLAG(phtpriv->beamform_cap, BEAMFORMING_HT_BEAMFORMER_ENABLE);
2572                 DBG_871X("[HT] Support Beamformer\n");
2573         }
2574         if (TEST_FLAG(pregistrypriv->beamform_cap, BIT5) && bHwSupportBeamformee) {
2575                 SET_FLAG(phtpriv->beamform_cap, BEAMFORMING_HT_BEAMFORMEE_ENABLE);
2576                 DBG_871X("[HT] Support Beamformee\n");
2577         }
2578 }
2579
2580 void rtw_build_wmm_ie_ht(struct adapter *padapter, u8 *out_ie, uint *pout_len)
2581 {
2582         unsigned char WMM_IE[] = {0x00, 0x50, 0xf2, 0x02, 0x00, 0x01, 0x00};
2583         int out_len;
2584         u8 *pframe;
2585
2586         if (padapter->mlmepriv.qospriv.qos_option == 0) {
2587                 out_len = *pout_len;
2588                 pframe = rtw_set_ie(out_ie+out_len, _VENDOR_SPECIFIC_IE_,
2589                                                         _WMM_IE_Length_, WMM_IE, pout_len);
2590
2591                 padapter->mlmepriv.qospriv.qos_option = 1;
2592         }
2593 }
2594
2595 /* the function is >= passive_level */
2596 unsigned int rtw_restructure_ht_ie(struct adapter *padapter, u8 *in_ie, u8 *out_ie, uint in_len, uint *pout_len, u8 channel)
2597 {
2598         u32 ielen, out_len;
2599         enum HT_CAP_AMPDU_FACTOR max_rx_ampdu_factor;
2600         unsigned char *p, *pframe;
2601         struct rtw_ieee80211_ht_cap ht_capie;
2602         u8 cbw40_enable = 0, stbc_rx_enable = 0, rf_type = 0, operation_bw = 0;
2603         struct registry_priv *pregistrypriv = &padapter->registrypriv;
2604         struct mlme_priv *pmlmepriv = &padapter->mlmepriv;
2605         struct ht_priv  *phtpriv = &pmlmepriv->htpriv;
2606         struct mlme_ext_priv *pmlmeext = &padapter->mlmeextpriv;
2607
2608         phtpriv->ht_option = false;
2609
2610         out_len = *pout_len;
2611
2612         memset(&ht_capie, 0, sizeof(struct rtw_ieee80211_ht_cap));
2613
2614         ht_capie.cap_info = cpu_to_le16(IEEE80211_HT_CAP_DSSSCCK40);
2615
2616         if (phtpriv->sgi_20m)
2617                 ht_capie.cap_info |= cpu_to_le16(IEEE80211_HT_CAP_SGI_20);
2618
2619         /* Get HT BW */
2620         if (!in_ie) {
2621                 /* TDLS: TODO 20/40 issue */
2622                 if (check_fwstate(pmlmepriv, WIFI_STATION_STATE)) {
2623                         operation_bw = padapter->mlmeextpriv.cur_bwmode;
2624                         if (operation_bw > CHANNEL_WIDTH_40)
2625                                 operation_bw = CHANNEL_WIDTH_40;
2626                 } else
2627                         /* TDLS: TODO 40? */
2628                         operation_bw = CHANNEL_WIDTH_40;
2629         } else {
2630                 p = rtw_get_ie(in_ie, _HT_ADD_INFO_IE_, &ielen, in_len);
2631                 if (p && (ielen == sizeof(struct ieee80211_ht_addt_info))) {
2632                         struct HT_info_element *pht_info = (struct HT_info_element *)(p+2);
2633                         if (pht_info->infos[0] & BIT(2)) {
2634                                 switch (pht_info->infos[0] & 0x3) {
2635                                 case 1:
2636                                 case 3:
2637                                         operation_bw = CHANNEL_WIDTH_40;
2638                                         break;
2639                                 default:
2640                                         operation_bw = CHANNEL_WIDTH_20;
2641                                         break;
2642                                 }
2643                         } else {
2644                                 operation_bw = CHANNEL_WIDTH_20;
2645                         }
2646                 }
2647         }
2648
2649         /* to disable 40M Hz support while gd_bw_40MHz_en = 0 */
2650         if (channel > 14) {
2651                 if ((pregistrypriv->bw_mode & 0xf0) > 0)
2652                         cbw40_enable = 1;
2653         } else {
2654                 if ((pregistrypriv->bw_mode & 0x0f) > 0)
2655                         cbw40_enable = 1;
2656         }
2657
2658         if ((cbw40_enable == 1) && (operation_bw == CHANNEL_WIDTH_40)) {
2659                 ht_capie.cap_info |= cpu_to_le16(IEEE80211_HT_CAP_SUP_WIDTH);
2660                 if (phtpriv->sgi_40m)
2661                         ht_capie.cap_info |= cpu_to_le16(IEEE80211_HT_CAP_SGI_40);
2662         }
2663
2664         if (TEST_FLAG(phtpriv->stbc_cap, STBC_HT_ENABLE_TX))
2665                 ht_capie.cap_info |= cpu_to_le16(IEEE80211_HT_CAP_TX_STBC);
2666
2667         /* todo: disable SM power save mode */
2668         ht_capie.cap_info |= cpu_to_le16(IEEE80211_HT_CAP_SM_PS);
2669
2670         if (TEST_FLAG(phtpriv->stbc_cap, STBC_HT_ENABLE_RX)) {
2671                 if ((channel <= 14 && pregistrypriv->rx_stbc == 0x1) || /* enable for 2.4GHz */
2672                         (pregistrypriv->wifi_spec == 1)) {
2673                         stbc_rx_enable = 1;
2674                         DBG_871X("declare supporting RX STBC\n");
2675                 }
2676         }
2677
2678         /* fill default supported_mcs_set */
2679         memcpy(ht_capie.supp_mcs_set, pmlmeext->default_supported_mcs_set, 16);
2680
2681         /* update default supported_mcs_set */
2682         rtw_hal_get_hwreg(padapter, HW_VAR_RF_TYPE, (u8 *)(&rf_type));
2683
2684         switch (rf_type) {
2685         case RF_1T1R:
2686                 if (stbc_rx_enable)
2687                         ht_capie.cap_info |= cpu_to_le16(IEEE80211_HT_CAP_RX_STBC_1R);/* RX STBC One spatial stream */
2688
2689                 set_mcs_rate_by_mask(ht_capie.supp_mcs_set, MCS_RATE_1R);
2690                 break;
2691
2692         case RF_2T2R:
2693         case RF_1T2R:
2694         default:
2695                 if (stbc_rx_enable)
2696                         ht_capie.cap_info |= cpu_to_le16(IEEE80211_HT_CAP_RX_STBC_2R);/* RX STBC two spatial stream */
2697
2698                 #ifdef CONFIG_DISABLE_MCS13TO15
2699                 if (((cbw40_enable == 1) && (operation_bw == CHANNEL_WIDTH_40)) && (pregistrypriv->wifi_spec != 1))
2700                                 set_mcs_rate_by_mask(ht_capie.supp_mcs_set, MCS_RATE_2R_13TO15_OFF);
2701                 else
2702                                 set_mcs_rate_by_mask(ht_capie.supp_mcs_set, MCS_RATE_2R);
2703                 #else /* CONFIG_DISABLE_MCS13TO15 */
2704                         set_mcs_rate_by_mask(ht_capie.supp_mcs_set, MCS_RATE_2R);
2705                 #endif /* CONFIG_DISABLE_MCS13TO15 */
2706                 break;
2707         }
2708
2709         {
2710                 u32 rx_packet_offset, max_recvbuf_sz;
2711                 rtw_hal_get_def_var(padapter, HAL_DEF_RX_PACKET_OFFSET, &rx_packet_offset);
2712                 rtw_hal_get_def_var(padapter, HAL_DEF_MAX_RECVBUF_SZ, &max_recvbuf_sz);
2713         }
2714
2715         if (padapter->driver_rx_ampdu_factor != 0xFF)
2716                 max_rx_ampdu_factor =
2717                   (enum HT_CAP_AMPDU_FACTOR)padapter->driver_rx_ampdu_factor;
2718         else
2719                 rtw_hal_get_def_var(padapter, HW_VAR_MAX_RX_AMPDU_FACTOR,
2720                                     &max_rx_ampdu_factor);
2721
2722         /* rtw_hal_get_def_var(padapter, HW_VAR_MAX_RX_AMPDU_FACTOR, &max_rx_ampdu_factor); */
2723         ht_capie.ampdu_params_info = (max_rx_ampdu_factor&0x03);
2724
2725         if (padapter->securitypriv.dot11PrivacyAlgrthm == _AES_)
2726                 ht_capie.ampdu_params_info |= (IEEE80211_HT_CAP_AMPDU_DENSITY&(0x07<<2));
2727         else
2728                 ht_capie.ampdu_params_info |= (IEEE80211_HT_CAP_AMPDU_DENSITY&0x00);
2729
2730         pframe = rtw_set_ie(out_ie+out_len, _HT_CAPABILITY_IE_,
2731                                                 sizeof(struct rtw_ieee80211_ht_cap), (unsigned char *)&ht_capie, pout_len);
2732
2733         phtpriv->ht_option = true;
2734
2735         if (in_ie) {
2736                 p = rtw_get_ie(in_ie, _HT_ADD_INFO_IE_, &ielen, in_len);
2737                 if (p && (ielen == sizeof(struct ieee80211_ht_addt_info))) {
2738                         out_len = *pout_len;
2739                         pframe = rtw_set_ie(out_ie+out_len, _HT_ADD_INFO_IE_, ielen, p+2, pout_len);
2740                 }
2741         }
2742
2743         return phtpriv->ht_option;
2744
2745 }
2746
2747 /* the function is > passive_level (in critical_section) */
2748 void rtw_update_ht_cap(struct adapter *padapter, u8 *pie, uint ie_len, u8 channel)
2749 {
2750         u8 *p, max_ampdu_sz;
2751         int len;
2752         /* struct sta_info *bmc_sta, *psta; */
2753         struct rtw_ieee80211_ht_cap *pht_capie;
2754         struct ieee80211_ht_addt_info *pht_addtinfo;
2755         /* struct recv_reorder_ctrl *preorder_ctrl; */
2756         struct mlme_priv *pmlmepriv = &padapter->mlmepriv;
2757         struct ht_priv  *phtpriv = &pmlmepriv->htpriv;
2758         /* struct recv_priv *precvpriv = &padapter->recvpriv; */
2759         struct registry_priv *pregistrypriv = &padapter->registrypriv;
2760         /* struct wlan_network *pcur_network = &(pmlmepriv->cur_network);; */
2761         struct mlme_ext_priv *pmlmeext = &padapter->mlmeextpriv;
2762         struct mlme_ext_info *pmlmeinfo = &(pmlmeext->mlmext_info);
2763         u8 cbw40_enable = 0;
2764
2765         if (!phtpriv->ht_option)
2766                 return;
2767
2768         if ((!pmlmeinfo->HT_info_enable) || (!pmlmeinfo->HT_caps_enable))
2769                 return;
2770
2771         DBG_871X("+rtw_update_ht_cap()\n");
2772
2773         /* maybe needs check if ap supports rx ampdu. */
2774         if (!(phtpriv->ampdu_enable) && pregistrypriv->ampdu_enable == 1) {
2775                 phtpriv->ampdu_enable = true;
2776         }
2777
2778         /* check Max Rx A-MPDU Size */
2779         len = 0;
2780         p = rtw_get_ie(pie+sizeof(struct ndis_802_11_fix_ie), _HT_CAPABILITY_IE_, &len, ie_len-sizeof(struct ndis_802_11_fix_ie));
2781         if (p && len > 0) {
2782                 pht_capie = (struct rtw_ieee80211_ht_cap *)(p+2);
2783                 max_ampdu_sz = (pht_capie->ampdu_params_info & IEEE80211_HT_CAP_AMPDU_FACTOR);
2784                 max_ampdu_sz = 1 << (max_ampdu_sz+3); /*  max_ampdu_sz (kbytes); */
2785
2786                 /* DBG_871X("rtw_update_ht_cap(): max_ampdu_sz =%d\n", max_ampdu_sz); */
2787                 phtpriv->rx_ampdu_maxlen = max_ampdu_sz;
2788
2789         }
2790
2791         len = 0;
2792         p = rtw_get_ie(pie+sizeof(struct ndis_802_11_fix_ie), _HT_ADD_INFO_IE_, &len, ie_len-sizeof(struct ndis_802_11_fix_ie));
2793         if (p && len > 0) {
2794                 pht_addtinfo = (struct ieee80211_ht_addt_info *)(p+2);
2795                 /* todo: */
2796         }
2797
2798         if (channel > 14) {
2799                 if ((pregistrypriv->bw_mode & 0xf0) > 0)
2800                         cbw40_enable = 1;
2801         } else {
2802                 if ((pregistrypriv->bw_mode & 0x0f) > 0)
2803                         cbw40_enable = 1;
2804         }
2805
2806         /* update cur_bwmode & cur_ch_offset */
2807         if ((cbw40_enable) &&
2808             (le16_to_cpu(pmlmeinfo->HT_caps.u.HT_cap_element.HT_caps_info) &
2809               BIT(1)) && (pmlmeinfo->HT_info.infos[0] & BIT(2))) {
2810                 int i;
2811                 u8 rf_type;
2812
2813                 rtw_hal_get_hwreg(padapter, HW_VAR_RF_TYPE, (u8 *)(&rf_type));
2814
2815                 /* update the MCS set */
2816                 for (i = 0; i < 16; i++)
2817                         pmlmeinfo->HT_caps.u.HT_cap_element.MCS_rate[i] &= pmlmeext->default_supported_mcs_set[i];
2818
2819                 /* update the MCS rates */
2820                 switch (rf_type) {
2821                 case RF_1T1R:
2822                 case RF_1T2R:
2823                         set_mcs_rate_by_mask(pmlmeinfo->HT_caps.u.HT_cap_element.MCS_rate, MCS_RATE_1R);
2824                         break;
2825                 case RF_2T2R:
2826                 default:
2827 #ifdef CONFIG_DISABLE_MCS13TO15
2828                         if (pmlmeext->cur_bwmode == CHANNEL_WIDTH_40 && pregistrypriv->wifi_spec != 1)
2829                                 set_mcs_rate_by_mask(pmlmeinfo->HT_caps.u.HT_cap_element.MCS_rate, MCS_RATE_2R_13TO15_OFF);
2830                         else
2831                                 set_mcs_rate_by_mask(pmlmeinfo->HT_caps.u.HT_cap_element.MCS_rate, MCS_RATE_2R);
2832 #else /* CONFIG_DISABLE_MCS13TO15 */
2833                         set_mcs_rate_by_mask(pmlmeinfo->HT_caps.u.HT_cap_element.MCS_rate, MCS_RATE_2R);
2834 #endif /* CONFIG_DISABLE_MCS13TO15 */
2835                 }
2836
2837                 /* switch to the 40M Hz mode according to the AP */
2838                 /* pmlmeext->cur_bwmode = CHANNEL_WIDTH_40; */
2839                 switch ((pmlmeinfo->HT_info.infos[0] & 0x3)) {
2840                 case EXTCHNL_OFFSET_UPPER:
2841                         pmlmeext->cur_ch_offset = HAL_PRIME_CHNL_OFFSET_LOWER;
2842                         break;
2843
2844                 case EXTCHNL_OFFSET_LOWER:
2845                         pmlmeext->cur_ch_offset = HAL_PRIME_CHNL_OFFSET_UPPER;
2846                         break;
2847
2848                 default:
2849                         pmlmeext->cur_ch_offset = HAL_PRIME_CHNL_OFFSET_DONT_CARE;
2850                         break;
2851                 }
2852         }
2853
2854         /*  */
2855         /*  Config SM Power Save setting */
2856         /*  */
2857         pmlmeinfo->SM_PS =
2858                 (le16_to_cpu(pmlmeinfo->HT_caps.u.HT_cap_element.HT_caps_info) &
2859                  0x0C) >> 2;
2860         if (pmlmeinfo->SM_PS == WLAN_HT_CAP_SM_PS_STATIC)
2861                 DBG_871X("%s(): WLAN_HT_CAP_SM_PS_STATIC\n", __func__);
2862
2863         /*  */
2864         /*  Config current HT Protection mode. */
2865         /*  */
2866         pmlmeinfo->HT_protection = pmlmeinfo->HT_info.infos[1] & 0x3;
2867 }
2868
2869 void rtw_issue_addbareq_cmd(struct adapter *padapter, struct xmit_frame *pxmitframe)
2870 {
2871         u8 issued;
2872         int priority;
2873         struct sta_info *psta = NULL;
2874         struct ht_priv *phtpriv;
2875         struct pkt_attrib *pattrib = &pxmitframe->attrib;
2876         s32 bmcst = IS_MCAST(pattrib->ra);
2877
2878         /* if (bmcst || (padapter->mlmepriv.LinkDetectInfo.bTxBusyTraffic == false)) */
2879         if (bmcst || (padapter->mlmepriv.LinkDetectInfo.NumTxOkInPeriod < 100))
2880                 return;
2881
2882         priority = pattrib->priority;
2883
2884         psta = rtw_get_stainfo(&padapter->stapriv, pattrib->ra);
2885         if (pattrib->psta != psta) {
2886                 DBG_871X("%s, pattrib->psta(%p) != psta(%p)\n", __func__, pattrib->psta, psta);
2887                 return;
2888         }
2889
2890         if (!psta) {
2891                 DBG_871X("%s, psta ==NUL\n", __func__);
2892                 return;
2893         }
2894
2895         if (!(psta->state & _FW_LINKED)) {
2896                 DBG_871X("%s, psta->state(0x%x) != _FW_LINKED\n", __func__, psta->state);
2897                 return;
2898         }
2899
2900         phtpriv = &psta->htpriv;
2901
2902         if (phtpriv->ht_option && phtpriv->ampdu_enable) {
2903                 issued = (phtpriv->agg_enable_bitmap>>priority)&0x1;
2904                 issued |= (phtpriv->candidate_tid_bitmap>>priority)&0x1;
2905
2906                 if (0 == issued) {
2907                         DBG_871X("rtw_issue_addbareq_cmd, p =%d\n", priority);
2908                         psta->htpriv.candidate_tid_bitmap |= BIT((u8)priority);
2909                         rtw_addbareq_cmd(padapter, (u8) priority, pattrib->ra);
2910                 }
2911         }
2912
2913 }
2914
2915 void rtw_append_exented_cap(struct adapter *padapter, u8 *out_ie, uint *pout_len)
2916 {
2917         struct mlme_priv *pmlmepriv = &padapter->mlmepriv;
2918         struct ht_priv  *phtpriv = &pmlmepriv->htpriv;
2919         u8 cap_content[8] = {0};
2920         u8 *pframe;
2921
2922         if (phtpriv->bss_coexist)
2923                 SET_EXT_CAPABILITY_ELE_BSS_COEXIST(cap_content, 1);
2924
2925         pframe = rtw_set_ie(out_ie + *pout_len, EID_EXTCapability, 8, cap_content, pout_len);
2926 }
2927
2928 inline void rtw_set_to_roam(struct adapter *adapter, u8 to_roam)
2929 {
2930         if (to_roam == 0)
2931                 adapter->mlmepriv.to_join = false;
2932         adapter->mlmepriv.to_roam = to_roam;
2933 }
2934
2935 inline u8 rtw_dec_to_roam(struct adapter *adapter)
2936 {
2937         adapter->mlmepriv.to_roam--;
2938         return adapter->mlmepriv.to_roam;
2939 }
2940
2941 inline u8 rtw_to_roam(struct adapter *adapter)
2942 {
2943         return adapter->mlmepriv.to_roam;
2944 }
2945
2946 void rtw_roaming(struct adapter *padapter, struct wlan_network *tgt_network)
2947 {
2948         struct mlme_priv *pmlmepriv = &padapter->mlmepriv;
2949
2950         spin_lock_bh(&pmlmepriv->lock);
2951         _rtw_roaming(padapter, tgt_network);
2952         spin_unlock_bh(&pmlmepriv->lock);
2953 }
2954 void _rtw_roaming(struct adapter *padapter, struct wlan_network *tgt_network)
2955 {
2956         struct mlme_priv *pmlmepriv = &padapter->mlmepriv;
2957         struct wlan_network *cur_network = &pmlmepriv->cur_network;
2958         int do_join_r;
2959
2960         if (0 < rtw_to_roam(padapter)) {
2961                 DBG_871X("roaming from %s("MAC_FMT"), length:%d\n",
2962                                 cur_network->network.Ssid.Ssid, MAC_ARG(cur_network->network.MacAddress),
2963                                 cur_network->network.Ssid.SsidLength);
2964                 memcpy(&pmlmepriv->assoc_ssid, &cur_network->network.Ssid, sizeof(struct ndis_802_11_ssid));
2965
2966                 pmlmepriv->assoc_by_bssid = false;
2967
2968                 while (1) {
2969                         do_join_r = rtw_do_join(padapter);
2970                         if (_SUCCESS == do_join_r) {
2971                                 break;
2972                         } else {
2973                                 DBG_871X("roaming do_join return %d\n", do_join_r);
2974                                 rtw_dec_to_roam(padapter);
2975
2976                                 if (rtw_to_roam(padapter) > 0) {
2977                                         continue;
2978                                 } else {
2979                                         DBG_871X("%s(%d) -to roaming fail, indicate_disconnect\n", __func__, __LINE__);
2980                                         rtw_indicate_disconnect(padapter);
2981                                         break;
2982                                 }
2983                         }
2984                 }
2985         }
2986
2987 }
2988
2989 sint rtw_linked_check(struct adapter *padapter)
2990 {
2991         if ((check_fwstate(&padapter->mlmepriv, WIFI_AP_STATE) == true) ||
2992                         (check_fwstate(&padapter->mlmepriv, WIFI_ADHOC_STATE|WIFI_ADHOC_MASTER_STATE) == true)) {
2993                 if (padapter->stapriv.asoc_sta_count > 2)
2994                         return true;
2995         } else {        /* Station mode */
2996                 if (check_fwstate(&padapter->mlmepriv, _FW_LINKED) == true)
2997                         return true;
2998         }
2999         return false;
3000 }