drivers/staging/rtl8188eu/core/rtw_mlme.c

   1 /******************************************************************************
   2  *
   3  * Copyright(c) 2007 - 2011 Realtek Corporation. All rights reserved.
   4  *
   5  * This program is free software; you can redistribute it and/or modify it
   6  * under the terms of version 2 of the GNU General Public License as
   7  * published by the Free Software Foundation.
   8  *
   9  * This program is distributed in the hope that it will be useful, but WITHOUT
  10  * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
  11  * FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for
  12  * more details.
  13  *
  14  * You should have received a copy of the GNU General Public License along with
  15  * this program; if not, write to the Free Software Foundation, Inc.,
  16  * 51 Franklin Street, Fifth Floor, Boston, MA 02110, USA
  17  *
  18  *
  19  ******************************************************************************/
  20 #define _RTW_MLME_C_
  21
  22
  23 #include <osdep_service.h>
  24 #include <drv_types.h>
  25 #include <recv_osdep.h>
  26 #include <xmit_osdep.h>
  27 #include <hal_intf.h>
  28 #include <mlme_osdep.h>
  29 #include <sta_info.h>
  30 #include <wifi.h>
  31 #include <wlan_bssdef.h>
  32 #include <rtw_ioctl_set.h>
  33 #include <usb_osintf.h>
  34
  35 extern unsigned char    MCS_rate_2R[16];
  36 extern unsigned char    MCS_rate_1R[16];
  37
  38 int     _rtw_init_mlme_priv (struct adapter *padapter)
  39 {
  40         int     i;
  41         u8      *pbuf;
  42         struct wlan_network     *pnetwork;
  43         struct mlme_priv                *pmlmepriv = &padapter->mlmepriv;
  44         int     res = _SUCCESS;
  45
  46 _func_enter_;
  47
  48         /*  We don't need to memset padapter->XXX to zero, because adapter is allocated by rtw_zvmalloc(). */
  49
  50         pmlmepriv->nic_hdl = (u8 *)padapter;
  51
  52         pmlmepriv->pscanned = NULL;
  53         pmlmepriv->fw_state = 0;
  54         pmlmepriv->cur_network.network.InfrastructureMode = Ndis802_11AutoUnknown;
  55         pmlmepriv->scan_mode = SCAN_ACTIVE;/*  1: active, 0: pasive. Maybe someday we should rename this varable to "active_mode" (Jeff) */
  56
  57         spin_lock_init(&(pmlmepriv->lock));
  58         _rtw_init_queue(&(pmlmepriv->free_bss_pool));
  59         _rtw_init_queue(&(pmlmepriv->scanned_queue));
  60
  61         set_scanned_network_val(pmlmepriv, 0);
  62
  63         _rtw_memset(&pmlmepriv->assoc_ssid, 0, sizeof(struct ndis_802_11_ssid));
  64
  65         pbuf = rtw_zvmalloc(MAX_BSS_CNT * (sizeof(struct wlan_network)));
  66
  67         if (pbuf == NULL) {
  68                 res = _FAIL;
  69                 goto exit;
  70         }
  71         pmlmepriv->free_bss_buf = pbuf;
  72
  73         pnetwork = (struct wlan_network *)pbuf;
  74
  75         for (i = 0; i < MAX_BSS_CNT; i++) {
  76                 _rtw_init_listhead(&(pnetwork->list));
  77
  78                 rtw_list_insert_tail(&(pnetwork->list), &(pmlmepriv->free_bss_pool.queue));
  79
  80                 pnetwork++;
  81         }
  82
  83         /* allocate DMA-able/Non-Page memory for cmd_buf and rsp_buf */
  84
  85         rtw_clear_scan_deny(padapter);
  86
  87         rtw_init_mlme_timer(padapter);
  88
  89 exit:
  90
  91 _func_exit_;
  92
  93         return res;
  94 }
  95
  96 #if defined (CONFIG_88EU_AP_MODE)
  97 static void rtw_free_mlme_ie_data(u8 **ppie, u32 *plen)
  98 {
  99         kfree(*ppie);
 100         *plen = 0;
 101         *ppie = NULL;
 102 }
 103
 104 void rtw_free_mlme_priv_ie_data(struct mlme_priv *pmlmepriv)
 105 {
 106         rtw_buf_free(&pmlmepriv->assoc_req, &pmlmepriv->assoc_req_len);
 107         rtw_buf_free(&pmlmepriv->assoc_rsp, &pmlmepriv->assoc_rsp_len);
 108         rtw_free_mlme_ie_data(&pmlmepriv->wps_beacon_ie, &pmlmepriv->wps_beacon_ie_len);
 109         rtw_free_mlme_ie_data(&pmlmepriv->wps_probe_req_ie, &pmlmepriv->wps_probe_req_ie_len);
 110         rtw_free_mlme_ie_data(&pmlmepriv->wps_probe_resp_ie, &pmlmepriv->wps_probe_resp_ie_len);
 111         rtw_free_mlme_ie_data(&pmlmepriv->wps_assoc_resp_ie, &pmlmepriv->wps_assoc_resp_ie_len);
 112
 113         rtw_free_mlme_ie_data(&pmlmepriv->p2p_beacon_ie, &pmlmepriv->p2p_beacon_ie_len);
 114         rtw_free_mlme_ie_data(&pmlmepriv->p2p_probe_req_ie, &pmlmepriv->p2p_probe_req_ie_len);
 115         rtw_free_mlme_ie_data(&pmlmepriv->p2p_probe_resp_ie, &pmlmepriv->p2p_probe_resp_ie_len);
 116         rtw_free_mlme_ie_data(&pmlmepriv->p2p_go_probe_resp_ie, &pmlmepriv->p2p_go_probe_resp_ie_len);
 117         rtw_free_mlme_ie_data(&pmlmepriv->p2p_assoc_req_ie, &pmlmepriv->p2p_assoc_req_ie_len);
 118 }
 119 #else
 120 void rtw_free_mlme_priv_ie_data(struct mlme_priv *pmlmepriv)
 121 {
 122 }
 123 #endif
 124
 125 void _rtw_free_mlme_priv (struct mlme_priv *pmlmepriv)
 126 {
 127 _func_enter_;
 128
 129         rtw_free_mlme_priv_ie_data(pmlmepriv);
 130
 131         if (pmlmepriv) {
 132                 if (pmlmepriv->free_bss_buf) {
 133                         rtw_vmfree(pmlmepriv->free_bss_buf, MAX_BSS_CNT * sizeof(struct wlan_network));
 134                 }
 135         }
 136 _func_exit_;
 137 }
 138
 139 int     _rtw_enqueue_network(struct __queue *queue, struct wlan_network *pnetwork)
 140 {
 141 _func_enter_;
 142
 143         if (pnetwork == NULL)
 144                 goto exit;
 145
 146         spin_lock_bh(&queue->lock);
 147
 148         rtw_list_insert_tail(&pnetwork->list, &queue->queue);
 149
 150         spin_unlock_bh(&queue->lock);
 151
 152 exit:
 153
 154 _func_exit_;
 155
 156         return _SUCCESS;
 157 }
 158
 159 struct  wlan_network *_rtw_dequeue_network(struct __queue *queue)
 160 {
 161         struct wlan_network *pnetwork;
 162
 163 _func_enter_;
 164
 165         spin_lock_bh(&queue->lock);
 166
 167         if (_rtw_queue_empty(queue)) {
 168                 pnetwork = NULL;
 169         } else {
 170                 pnetwork = LIST_CONTAINOR(get_next(&queue->queue), struct wlan_network, list);
 171
 172                 rtw_list_delete(&(pnetwork->list));
 173         }
 174
 175         spin_unlock_bh(&queue->lock);
 176
 177 _func_exit_;
 178
 179         return pnetwork;
 180 }
 181
 182 struct  wlan_network *_rtw_alloc_network(struct mlme_priv *pmlmepriv)/* _queue *free_queue) */
 183 {
 184         struct  wlan_network    *pnetwork;
 185         struct __queue *free_queue = &pmlmepriv->free_bss_pool;
 186         struct list_head *plist = NULL;
 187
 188 _func_enter_;
 189
 190         spin_lock_bh(&free_queue->lock);
 191
 192         if (_rtw_queue_empty(free_queue) == true) {
 193                 pnetwork = NULL;
 194                 goto exit;
 195         }
 196         plist = get_next(&(free_queue->queue));
 197
 198         pnetwork = LIST_CONTAINOR(plist , struct wlan_network, list);
 199
 200         rtw_list_delete(&pnetwork->list);
 201
 202         RT_TRACE(_module_rtl871x_mlme_c_, _drv_info_, ("_rtw_alloc_network: ptr=%p\n", plist));
 203         pnetwork->network_type = 0;
 204         pnetwork->fixed = false;
 205         pnetwork->last_scanned = jiffies;
 206         pnetwork->aid = 0;
 207         pnetwork->join_res = 0;
 208
 209         pmlmepriv->num_of_scanned++;
 210
 211 exit:
 212         spin_unlock_bh(&free_queue->lock);
 213
 214 _func_exit_;
 215
 216         return pnetwork;
 217 }
 218
 219 void _rtw_free_network(struct   mlme_priv *pmlmepriv , struct wlan_network *pnetwork, u8 isfreeall)
 220 {
 221         u32 curr_time, delta_time;
 222         u32 lifetime = SCANQUEUE_LIFETIME;
 223         struct __queue *free_queue = &(pmlmepriv->free_bss_pool);
 224
 225 _func_enter_;
 226
 227         if (pnetwork == NULL)
 228                 goto exit;
 229
 230         if (pnetwork->fixed)
 231                 goto exit;
 232         curr_time = jiffies;
 233         if ((check_fwstate(pmlmepriv, WIFI_ADHOC_MASTER_STATE)) ||
 234             (check_fwstate(pmlmepriv, WIFI_ADHOC_STATE)))
 235                 lifetime = 1;
 236         if (!isfreeall) {
 237                 delta_time = (curr_time - pnetwork->last_scanned)/HZ;
 238                 if (delta_time < lifetime)/*  unit:sec */
 239                         goto exit;
 240         }
 241         spin_lock_bh(&free_queue->lock);
 242         rtw_list_delete(&(pnetwork->list));
 243         rtw_list_insert_tail(&(pnetwork->list), &(free_queue->queue));
 244         pmlmepriv->num_of_scanned--;
 245         spin_unlock_bh(&free_queue->lock);
 246
 247 exit:
 248 _func_exit_;
 249 }
 250
 251 void _rtw_free_network_nolock(struct    mlme_priv *pmlmepriv, struct wlan_network *pnetwork)
 252 {
 253         struct __queue *free_queue = &(pmlmepriv->free_bss_pool);
 254
 255 _func_enter_;
 256         if (pnetwork == NULL)
 257                 goto exit;
 258         if (pnetwork->fixed)
 259                 goto exit;
 260         rtw_list_delete(&(pnetwork->list));
 261         rtw_list_insert_tail(&(pnetwork->list), get_list_head(free_queue));
 262         pmlmepriv->num_of_scanned--;
 263 exit:
 264
 265 _func_exit_;
 266 }
 267
 268 /*
 269         return the wlan_network with the matching addr
 270
 271         Shall be calle under atomic context... to avoid possible racing condition...
 272 */
 273 struct wlan_network *_rtw_find_network(struct __queue *scanned_queue, u8 *addr)
 274 {
 275         struct list_head *phead, *plist;
 276         struct  wlan_network *pnetwork = NULL;
 277         u8 zero_addr[ETH_ALEN] = {0, 0, 0, 0, 0, 0};
 278
 279 _func_enter_;
 280         if (_rtw_memcmp(zero_addr, addr, ETH_ALEN)) {
 281                 pnetwork = NULL;
 282                 goto exit;
 283         }
 284         phead = get_list_head(scanned_queue);
 285         plist = get_next(phead);
 286
 287         while (plist != phead) {
 288                 pnetwork = LIST_CONTAINOR(plist, struct wlan_network , list);
 289                 if (_rtw_memcmp(addr, pnetwork->network.MacAddress, ETH_ALEN) == true)
 290                         break;
 291                 plist = get_next(plist);
 292         }
 293         if (plist == phead)
 294                 pnetwork = NULL;
 295 exit:
 296 _func_exit_;
 297         return pnetwork;
 298 }
 299
 300
 301 void _rtw_free_network_queue(struct adapter *padapter, u8 isfreeall)
 302 {
 303         struct list_head *phead, *plist;
 304         struct wlan_network *pnetwork;
 305         struct mlme_priv *pmlmepriv = &padapter->mlmepriv;
 306         struct __queue *scanned_queue = &pmlmepriv->scanned_queue;
 307
 308 _func_enter_;
 309
 310
 311         spin_lock_bh(&scanned_queue->lock);
 312
 313         phead = get_list_head(scanned_queue);
 314         plist = get_next(phead);
 315
 316         while (rtw_end_of_queue_search(phead, plist) == false) {
 317                 pnetwork = LIST_CONTAINOR(plist, struct wlan_network, list);
 318
 319                 plist = get_next(plist);
 320
 321                 _rtw_free_network(pmlmepriv, pnetwork, isfreeall);
 322         }
 323         spin_unlock_bh(&scanned_queue->lock);
 324 _func_exit_;
 325 }
 326
 327 int rtw_if_up(struct adapter *padapter)
 328 {
 329         int res;
 330 _func_enter_;
 331
 332         if (padapter->bDriverStopped || padapter->bSurpriseRemoved ||
 333             (check_fwstate(&padapter->mlmepriv, _FW_LINKED) == false)) {
 334                 RT_TRACE(_module_rtl871x_mlme_c_, _drv_info_,
 335                          ("rtw_if_up:bDriverStopped(%d) OR bSurpriseRemoved(%d)",
 336                          padapter->bDriverStopped, padapter->bSurpriseRemoved));
 337                 res = false;
 338         } else {
 339                 res =  true;
 340         }
 341
 342 _func_exit_;
 343         return res;
 344 }
 345
 346 void rtw_generate_random_ibss(u8 *pibss)
 347 {
 348         u32     curtime = jiffies;
 349
 350 _func_enter_;
 351         pibss[0] = 0x02;  /* in ad-hoc mode bit1 must set to 1 */
 352         pibss[1] = 0x11;
 353         pibss[2] = 0x87;
 354         pibss[3] = (u8)(curtime & 0xff);/* p[0]; */
 355         pibss[4] = (u8)((curtime>>8) & 0xff);/* p[1]; */
 356         pibss[5] = (u8)((curtime>>16) & 0xff);/* p[2]; */
 357 _func_exit_;
 358         return;
 359 }
 360
 361 u8 *rtw_get_capability_from_ie(u8 *ie)
 362 {
 363         return ie + 8 + 2;
 364 }
 365
 366
 367 u16 rtw_get_capability(struct wlan_bssid_ex *bss)
 368 {
 369         __le16  val;
 370 _func_enter_;
 371
 372         memcpy((u8 *)&val, rtw_get_capability_from_ie(bss->IEs), 2);
 373
 374 _func_exit_;
 375         return le16_to_cpu(val);
 376 }
 377
 378 u8 *rtw_get_timestampe_from_ie(u8 *ie)
 379 {
 380         return ie + 0;
 381 }
 382
 383 u8 *rtw_get_beacon_interval_from_ie(u8 *ie)
 384 {
 385         return ie + 8;
 386 }
 387
 388 int     rtw_init_mlme_priv (struct adapter *padapter)/* struct  mlme_priv *pmlmepriv) */
 389 {
 390         int     res;
 391 _func_enter_;
 392         res = _rtw_init_mlme_priv(padapter);/*  (pmlmepriv); */
 393 _func_exit_;
 394         return res;
 395 }
 396
 397 void rtw_free_mlme_priv (struct mlme_priv *pmlmepriv)
 398 {
 399 _func_enter_;
 400         RT_TRACE(_module_rtl871x_mlme_c_, _drv_err_, ("rtw_free_mlme_priv\n"));
 401         _rtw_free_mlme_priv (pmlmepriv);
 402 _func_exit_;
 403 }
 404
 405 static struct wlan_network *rtw_alloc_network(struct mlme_priv *pmlmepriv)
 406 {
 407         struct  wlan_network    *pnetwork;
 408 _func_enter_;
 409         pnetwork = _rtw_alloc_network(pmlmepriv);
 410 _func_exit_;
 411         return pnetwork;
 412 }
 413
 414 static void rtw_free_network_nolock(struct mlme_priv *pmlmepriv,
 415                                     struct wlan_network *pnetwork)
 416 {
 417 _func_enter_;
 418         _rtw_free_network_nolock(pmlmepriv, pnetwork);
 419 _func_exit_;
 420 }
 421
 422
 423 void rtw_free_network_queue(struct adapter *dev, u8 isfreeall)
 424 {
 425 _func_enter_;
 426         _rtw_free_network_queue(dev, isfreeall);
 427 _func_exit_;
 428 }
 429
 430 /*
 431         return the wlan_network with the matching addr
 432
 433         Shall be calle under atomic context... to avoid possible racing condition...
 434 */
 435 struct  wlan_network *rtw_find_network(struct __queue *scanned_queue, u8 *addr)
 436 {
 437         struct  wlan_network *pnetwork = _rtw_find_network(scanned_queue, addr);
 438
 439         return pnetwork;
 440 }
 441
 442 int rtw_is_same_ibss(struct adapter *adapter, struct wlan_network *pnetwork)
 443 {
 444         int ret = true;
 445         struct security_priv *psecuritypriv = &adapter->securitypriv;
 446
 447         if ((psecuritypriv->dot11PrivacyAlgrthm != _NO_PRIVACY_) &&
 448             (pnetwork->network.Privacy == 0))
 449                 ret = false;
 450         else if ((psecuritypriv->dot11PrivacyAlgrthm == _NO_PRIVACY_) &&
 451                  (pnetwork->network.Privacy == 1))
 452                 ret = false;
 453         else
 454                 ret = true;
 455         return ret;
 456 }
 457
 458 static int is_same_ess(struct wlan_bssid_ex *a, struct wlan_bssid_ex *b)
 459 {
 460         return (a->Ssid.SsidLength == b->Ssid.SsidLength) &&
 461                _rtw_memcmp(a->Ssid.Ssid, b->Ssid.Ssid, a->Ssid.SsidLength);
 462 }
 463
 464 int is_same_network(struct wlan_bssid_ex *src, struct wlan_bssid_ex *dst)
 465 {
 466          u16 s_cap, d_cap;
 467         __le16 le_scap, le_dcap;
 468
 469 _func_enter_;
 470         memcpy((u8 *)&le_scap, rtw_get_capability_from_ie(src->IEs), 2);
 471         memcpy((u8 *)&le_dcap, rtw_get_capability_from_ie(dst->IEs), 2);
 472
 473
 474         s_cap = le16_to_cpu(le_scap);
 475         d_cap = le16_to_cpu(le_dcap);
 476
 477 _func_exit_;
 478
 479         return ((src->Ssid.SsidLength == dst->Ssid.SsidLength) &&
 480                 ((_rtw_memcmp(src->MacAddress, dst->MacAddress, ETH_ALEN)) == true) &&
 481                 ((_rtw_memcmp(src->Ssid.Ssid, dst->Ssid.Ssid, src->Ssid.SsidLength)) == true) &&
 482                 ((s_cap & WLAN_CAPABILITY_IBSS) ==
 483                 (d_cap & WLAN_CAPABILITY_IBSS)) &&
 484                 ((s_cap & WLAN_CAPABILITY_BSS) ==
 485                 (d_cap & WLAN_CAPABILITY_BSS)));
 486 }
 487
 488 struct  wlan_network    *rtw_get_oldest_wlan_network(struct __queue *scanned_queue)
 489 {
 490         struct list_head *plist, *phead;
 491         struct  wlan_network    *pwlan = NULL;
 492         struct  wlan_network    *oldest = NULL;
 493
 494 _func_enter_;
 495         phead = get_list_head(scanned_queue);
 496
 497         plist = get_next(phead);
 498
 499         while (1) {
 500                 if (rtw_end_of_queue_search(phead, plist) == true)
 501                         break;
 502
 503                 pwlan = LIST_CONTAINOR(plist, struct wlan_network, list);
 504
 505                 if (!pwlan->fixed) {
 506                         if (oldest == NULL || time_after(oldest->last_scanned, pwlan->last_scanned))
 507                                 oldest = pwlan;
 508                 }
 509
 510                 plist = get_next(plist);
 511         }
 512 _func_exit_;
 513         return oldest;
 514 }
 515
 516 void update_network(struct wlan_bssid_ex *dst, struct wlan_bssid_ex *src,
 517         struct adapter *padapter, bool update_ie)
 518 {
 519         long rssi_ori = dst->Rssi;
 520         u8 sq_smp = src->PhyInfo.SignalQuality;
 521         u8 ss_final;
 522         u8 sq_final;
 523         long rssi_final;
 524
 525 _func_enter_;
 526         rtw_hal_antdiv_rssi_compared(padapter, dst, src); /* this will update src.Rssi, need consider again */
 527
 528         /* The rule below is 1/5 for sample value, 4/5 for history value */
 529         if (check_fwstate(&padapter->mlmepriv, _FW_LINKED) && is_same_network(&(padapter->mlmepriv.cur_network.network), src)) {
 530                 /* Take the recvpriv's value for the connected AP*/
 531                 ss_final = padapter->recvpriv.signal_strength;
 532                 sq_final = padapter->recvpriv.signal_qual;
 533                 /* the rssi value here is undecorated, and will be used for antenna diversity */
 534                 if (sq_smp != 101) /* from the right channel */
 535                         rssi_final = (src->Rssi+dst->Rssi*4)/5;
 536                 else
 537                         rssi_final = rssi_ori;
 538         } else {
 539                 if (sq_smp != 101) { /* from the right channel */
 540                         ss_final = ((u32)(src->PhyInfo.SignalStrength)+(u32)(dst->PhyInfo.SignalStrength)*4)/5;
 541                         sq_final = ((u32)(src->PhyInfo.SignalQuality)+(u32)(dst->PhyInfo.SignalQuality)*4)/5;
 542                         rssi_final = (src->Rssi+dst->Rssi*4)/5;
 543                 } else {
 544                         /* bss info not receiving from the right channel, use the original RX signal infos */
 545                         ss_final = dst->PhyInfo.SignalStrength;
 546                         sq_final = dst->PhyInfo.SignalQuality;
 547                         rssi_final = dst->Rssi;
 548                 }
 549         }
 550         if (update_ie)
 551                 memcpy((u8 *)dst, (u8 *)src, get_wlan_bssid_ex_sz(src));
 552         dst->PhyInfo.SignalStrength = ss_final;
 553         dst->PhyInfo.SignalQuality = sq_final;
 554         dst->Rssi = rssi_final;
 555
 556 _func_exit_;
 557 }
 558
 559 static void update_current_network(struct adapter *adapter, struct wlan_bssid_ex *pnetwork)
 560 {
 561         struct  mlme_priv       *pmlmepriv = &(adapter->mlmepriv);
 562
 563 _func_enter_;
 564
 565         if ((check_fwstate(pmlmepriv, _FW_LINKED) == true) &&
 566             (is_same_network(&(pmlmepriv->cur_network.network), pnetwork))) {
 567                 update_network(&(pmlmepriv->cur_network.network), pnetwork, adapter, true);
 568                 rtw_update_protection(adapter, (pmlmepriv->cur_network.network.IEs) + sizeof(struct ndis_802_11_fixed_ie),
 569                                       pmlmepriv->cur_network.network.IELength);
 570         }
 571 _func_exit_;
 572 }
 573
 574 /*
 575 Caller must hold pmlmepriv->lock first.
 576 */
 577 void rtw_update_scanned_network(struct adapter *adapter, struct wlan_bssid_ex *target)
 578 {
 579         struct list_head *plist, *phead;
 580         u32     bssid_ex_sz;
 581         struct mlme_priv        *pmlmepriv = &(adapter->mlmepriv);
 582         struct __queue *queue   = &(pmlmepriv->scanned_queue);
 583         struct wlan_network     *pnetwork = NULL;
 584         struct wlan_network     *oldest = NULL;
 585
 586 _func_enter_;
 587
 588         spin_lock_bh(&queue->lock);
 589         phead = get_list_head(queue);
 590         plist = get_next(phead);
 591
 592         while (1) {
 593                 if (rtw_end_of_queue_search(phead, plist) == true)
 594                         break;
 595
 596                 pnetwork        = LIST_CONTAINOR(plist, struct wlan_network, list);
 597
 598                 if (is_same_network(&(pnetwork->network), target))
 599                         break;
 600                 if ((oldest == ((struct wlan_network *)0)) ||
 601                     time_after(oldest->last_scanned, pnetwork->last_scanned))
 602                         oldest = pnetwork;
 603                 plist = get_next(plist);
 604         }
 605         /* If we didn't find a match, then get a new network slot to initialize
 606          * with this beacon's information */
 607         if (rtw_end_of_queue_search(phead, plist) == true) {
 608                 if (_rtw_queue_empty(&(pmlmepriv->free_bss_pool)) == true) {
 609                         /* If there are no more slots, expire the oldest */
 610                         pnetwork = oldest;
 611
 612                         rtw_hal_get_def_var(adapter, HAL_DEF_CURRENT_ANTENNA, &(target->PhyInfo.Optimum_antenna));
 613                         memcpy(&(pnetwork->network), target,  get_wlan_bssid_ex_sz(target));
 614                         /*  variable initialize */
 615                         pnetwork->fixed = false;
 616                         pnetwork->last_scanned = jiffies;
 617
 618                         pnetwork->network_type = 0;
 619                         pnetwork->aid = 0;
 620                         pnetwork->join_res = 0;
 621
 622                         /* bss info not receiving from the right channel */
 623                         if (pnetwork->network.PhyInfo.SignalQuality == 101)
 624                                 pnetwork->network.PhyInfo.SignalQuality = 0;
 625                 } else {
 626                         /* Otherwise just pull from the free list */
 627
 628                         pnetwork = rtw_alloc_network(pmlmepriv); /*  will update scan_time */
 629
 630                         if (pnetwork == NULL) {
 631                                 RT_TRACE(_module_rtl871x_mlme_c_, _drv_err_, ("\n\n\nsomething wrong here\n\n\n"));
 632                                 goto exit;
 633                         }
 634
 635                         bssid_ex_sz = get_wlan_bssid_ex_sz(target);
 636                         target->Length = bssid_ex_sz;
 637                         rtw_hal_get_def_var(adapter, HAL_DEF_CURRENT_ANTENNA, &(target->PhyInfo.Optimum_antenna));
 638                         memcpy(&(pnetwork->network), target, bssid_ex_sz);
 639
 640                         pnetwork->last_scanned = jiffies;
 641
 642                         /* bss info not receiving from the right channel */
 643                         if (pnetwork->network.PhyInfo.SignalQuality == 101)
 644                                 pnetwork->network.PhyInfo.SignalQuality = 0;
 645                         rtw_list_insert_tail(&(pnetwork->list), &(queue->queue));
 646                 }
 647         } else {
 648                 /* we have an entry and we are going to update it. But this entry may
 649                  * be already expired. In this case we do the same as we found a new
 650                  * net and call the new_net handler
 651                  */
 652                 bool update_ie = true;
 653
 654                 pnetwork->last_scanned = jiffies;
 655
 656                 /* target.Reserved[0]== 1, means that scanned network is a bcn frame. */
 657                 if ((pnetwork->network.IELength > target->IELength) && (target->Reserved[0] == 1))
 658                         update_ie = false;
 659
 660                 update_network(&(pnetwork->network), target, adapter, update_ie);
 661         }
 662
 663 exit:
 664         spin_unlock_bh(&queue->lock);
 665
 666 _func_exit_;
 667 }
 668
 669 static void rtw_add_network(struct adapter *adapter,
 670                             struct wlan_bssid_ex *pnetwork)
 671 {
 672 _func_enter_;
 673 #if defined(CONFIG_88EU_P2P)
 674         rtw_wlan_bssid_ex_remove_p2p_attr(pnetwork, P2P_ATTR_GROUP_INFO);
 675 #endif
 676         update_current_network(adapter, pnetwork);
 677         rtw_update_scanned_network(adapter, pnetwork);
 678 _func_exit_;
 679 }
 680
 681 /* select the desired network based on the capability of the (i)bss. */
 682 /*  check items:        (1) security */
 683 /*                      (2) network_type */
 684 /*                      (3) WMM */
 685 /*                      (4) HT */
 686 /*                      (5) others */
 687 static int rtw_is_desired_network(struct adapter *adapter, struct wlan_network *pnetwork)
 688 {
 689         struct security_priv *psecuritypriv = &adapter->securitypriv;
 690         struct mlme_priv *pmlmepriv = &adapter->mlmepriv;
 691         u32 desired_encmode;
 692         u32 privacy;
 693
 694         /* u8 wps_ie[512]; */
 695         uint wps_ielen;
 696
 697         int bselected = true;
 698
 699         desired_encmode = psecuritypriv->ndisencryptstatus;
 700         privacy = pnetwork->network.Privacy;
 701
 702         if (check_fwstate(pmlmepriv, WIFI_UNDER_WPS)) {
 703                 if (rtw_get_wps_ie(pnetwork->network.IEs+_FIXED_IE_LENGTH_, pnetwork->network.IELength-_FIXED_IE_LENGTH_, NULL, &wps_ielen) != NULL)
 704                         return true;
 705                 else
 706                         return false;
 707         }
 708         if (adapter->registrypriv.wifi_spec == 1) { /* for  correct flow of 8021X  to do.... */
 709                 if ((desired_encmode == Ndis802_11EncryptionDisabled) && (privacy != 0))
 710                         bselected = false;
 711         }
 712
 713
 714         if ((desired_encmode != Ndis802_11EncryptionDisabled) && (privacy == 0)) {
 715                 DBG_88E("desired_encmode: %d, privacy: %d\n", desired_encmode, privacy);
 716                 bselected = false;
 717         }
 718
 719         if (check_fwstate(pmlmepriv, WIFI_ADHOC_STATE) == true) {
 720                 if (pnetwork->network.InfrastructureMode != pmlmepriv->cur_network.network.InfrastructureMode)
 721                         bselected = false;
 722         }
 723
 724
 725         return bselected;
 726 }
 727
 728 /* TODO: Perry: For Power Management */
 729 void rtw_atimdone_event_callback(struct adapter *adapter , u8 *pbuf)
 730 {
 731 _func_enter_;
 732         RT_TRACE(_module_rtl871x_mlme_c_, _drv_err_, ("receive atimdone_evet\n"));
 733 _func_exit_;
 734         return;
 735 }
 736
 737
 738 void rtw_survey_event_callback(struct adapter   *adapter, u8 *pbuf)
 739 {
 740         u32 len;
 741         struct wlan_bssid_ex *pnetwork;
 742         struct  mlme_priv       *pmlmepriv = &(adapter->mlmepriv);
 743
 744 _func_enter_;
 745
 746         pnetwork = (struct wlan_bssid_ex *)pbuf;
 747
 748         RT_TRACE(_module_rtl871x_mlme_c_, _drv_info_, ("rtw_survey_event_callback, ssid=%s\n",  pnetwork->Ssid.Ssid));
 749
 750         len = get_wlan_bssid_ex_sz(pnetwork);
 751         if (len > (sizeof(struct wlan_bssid_ex))) {
 752                 RT_TRACE(_module_rtl871x_mlme_c_, _drv_err_, ("\n****rtw_survey_event_callback: return a wrong bss ***\n"));
 753                 return;
 754         }
 755         spin_lock_bh(&pmlmepriv->lock);
 756
 757         /*  update IBSS_network 's timestamp */
 758         if ((check_fwstate(pmlmepriv, WIFI_ADHOC_MASTER_STATE)) == true) {
 759                 if (_rtw_memcmp(&(pmlmepriv->cur_network.network.MacAddress), pnetwork->MacAddress, ETH_ALEN)) {
 760                         struct wlan_network *ibss_wlan = NULL;
 761
 762                         memcpy(pmlmepriv->cur_network.network.IEs, pnetwork->IEs, 8);
 763                         spin_lock_bh(&(pmlmepriv->scanned_queue.lock));
 764                         ibss_wlan = rtw_find_network(&pmlmepriv->scanned_queue,  pnetwork->MacAddress);
 765                         if (ibss_wlan) {
 766                                 memcpy(ibss_wlan->network.IEs , pnetwork->IEs, 8);
 767                                 spin_unlock_bh(&pmlmepriv->scanned_queue.lock);
 768                                 goto exit;
 769                         }
 770                         spin_unlock_bh(&pmlmepriv->scanned_queue.lock);
 771                 }
 772         }
 773
 774         /*  lock pmlmepriv->lock when you accessing network_q */
 775         if ((check_fwstate(pmlmepriv, _FW_UNDER_LINKING)) == false) {
 776                 if (pnetwork->Ssid.Ssid[0] == 0)
 777                         pnetwork->Ssid.SsidLength = 0;
 778                 rtw_add_network(adapter, pnetwork);
 779         }
 780
 781 exit:
 782
 783         spin_unlock_bh(&pmlmepriv->lock);
 784
 785 _func_exit_;
 786
 787         return;
 788 }
 789
 790
 791
 792 void rtw_surveydone_event_callback(struct adapter       *adapter, u8 *pbuf)
 793 {
 794         struct  mlme_priv *pmlmepriv = &(adapter->mlmepriv);
 795         struct mlme_ext_priv *pmlmeext;
 796
 797 _func_enter_;
 798         spin_lock_bh(&pmlmepriv->lock);
 799
 800         if (pmlmepriv->wps_probe_req_ie) {
 801                 pmlmepriv->wps_probe_req_ie_len = 0;
 802                 kfree(pmlmepriv->wps_probe_req_ie);
 803                 pmlmepriv->wps_probe_req_ie = NULL;
 804         }
 805
 806         RT_TRACE(_module_rtl871x_mlme_c_, _drv_info_, ("rtw_surveydone_event_callback: fw_state:%x\n\n", get_fwstate(pmlmepriv)));
 807
 808         if (check_fwstate(pmlmepriv, _FW_UNDER_SURVEY)) {
 809                 u8 timer_cancelled;
 810
 811                 _cancel_timer(&pmlmepriv->scan_to_timer, &timer_cancelled);
 812
 813                 _clr_fwstate_(pmlmepriv, _FW_UNDER_SURVEY);
 814         } else {
 815                 RT_TRACE(_module_rtl871x_mlme_c_, _drv_err_, ("nic status=%x, survey done event comes too late!\n", get_fwstate(pmlmepriv)));
 816         }
 817
 818         rtw_set_signal_stat_timer(&adapter->recvpriv);
 819
 820         if (pmlmepriv->to_join) {
 821                 if ((check_fwstate(pmlmepriv, WIFI_ADHOC_STATE) == true)) {
 822                         if (check_fwstate(pmlmepriv, _FW_LINKED) == false) {
 823                                 set_fwstate(pmlmepriv, _FW_UNDER_LINKING);
 824
 825                                 if (rtw_select_and_join_from_scanned_queue(pmlmepriv) == _SUCCESS) {
 826                                         _set_timer(&pmlmepriv->assoc_timer, MAX_JOIN_TIMEOUT);
 827                                 } else {
 828                                         struct wlan_bssid_ex    *pdev_network = &(adapter->registrypriv.dev_network);
 829                                         u8 *pibss = adapter->registrypriv.dev_network.MacAddress;
 830
 831                                         _clr_fwstate_(pmlmepriv, _FW_UNDER_SURVEY);
 832
 833                                         RT_TRACE(_module_rtl871x_mlme_c_, _drv_err_, ("switching to adhoc master\n"));
 834
 835                                         _rtw_memset(&pdev_network->Ssid, 0, sizeof(struct ndis_802_11_ssid));
 836                                         memcpy(&pdev_network->Ssid, &pmlmepriv->assoc_ssid, sizeof(struct ndis_802_11_ssid));
 837
 838                                         rtw_update_registrypriv_dev_network(adapter);
 839                                         rtw_generate_random_ibss(pibss);
 840
 841                                         pmlmepriv->fw_state = WIFI_ADHOC_MASTER_STATE;
 842
 843                                         if (rtw_createbss_cmd(adapter) != _SUCCESS)
 844                                                 RT_TRACE(_module_rtl871x_mlme_c_, _drv_err_, ("Error=>rtw_createbss_cmd status FAIL\n"));
 845                                         pmlmepriv->to_join = false;
 846                                 }
 847                         }
 848                 } else {
 849                         int s_ret;
 850                         set_fwstate(pmlmepriv, _FW_UNDER_LINKING);
 851                         pmlmepriv->to_join = false;
 852                         s_ret = rtw_select_and_join_from_scanned_queue(pmlmepriv);
 853                         if (_SUCCESS == s_ret) {
 854                              _set_timer(&pmlmepriv->assoc_timer, MAX_JOIN_TIMEOUT);
 855                         } else if (s_ret == 2) { /* there is no need to wait for join */
 856                                 _clr_fwstate_(pmlmepriv, _FW_UNDER_LINKING);
 857                                 rtw_indicate_connect(adapter);
 858                         } else {
 859                                 DBG_88E("try_to_join, but select scanning queue fail, to_roaming:%d\n", pmlmepriv->to_roaming);
 860                                 if (pmlmepriv->to_roaming != 0) {
 861                                         if (--pmlmepriv->to_roaming == 0 ||
 862                                             _SUCCESS != rtw_sitesurvey_cmd(adapter, &pmlmepriv->assoc_ssid, 1, NULL, 0)) {
 863                                                 pmlmepriv->to_roaming = 0;
 864                                                 rtw_free_assoc_resources(adapter, 1);
 865                                                 rtw_indicate_disconnect(adapter);
 866                                         } else {
 867                                                 pmlmepriv->to_join = true;
 868                                         }
 869                                 }
 870                                 _clr_fwstate_(pmlmepriv, _FW_UNDER_LINKING);
 871                         }
 872                 }
 873         }
 874
 875         indicate_wx_scan_complete_event(adapter);
 876
 877         spin_unlock_bh(&pmlmepriv->lock);
 878
 879         if (check_fwstate(pmlmepriv, _FW_LINKED) == true)
 880                 p2p_ps_wk_cmd(adapter, P2P_PS_SCAN_DONE, 0);
 881
 882         rtw_os_xmit_schedule(adapter);
 883
 884         pmlmeext = &adapter->mlmeextpriv;
 885         if (pmlmeext->sitesurvey_res.bss_cnt == 0)
 886                 rtw_hal_sreset_reset(adapter);
 887 _func_exit_;
 888 }
 889
 890 void rtw_dummy_event_callback(struct adapter *adapter , u8 *pbuf)
 891 {
 892 }
 893
 894 void rtw_fwdbg_event_callback(struct adapter *adapter , u8 *pbuf)
 895 {
 896 }
 897
 898 static void free_scanqueue(struct       mlme_priv *pmlmepriv)
 899 {
 900         struct __queue *free_queue = &pmlmepriv->free_bss_pool;
 901         struct __queue *scan_queue = &pmlmepriv->scanned_queue;
 902         struct list_head *plist, *phead, *ptemp;
 903
 904 _func_enter_;
 905
 906         RT_TRACE(_module_rtl871x_mlme_c_, _drv_notice_, ("+free_scanqueue\n"));
 907         spin_lock_bh(&scan_queue->lock);
 908         spin_lock_bh(&free_queue->lock);
 909
 910         phead = get_list_head(scan_queue);
 911         plist = get_next(phead);
 912
 913         while (plist != phead) {
 914                 ptemp = get_next(plist);
 915                 rtw_list_delete(plist);
 916                 rtw_list_insert_tail(plist, &free_queue->queue);
 917                 plist = ptemp;
 918                 pmlmepriv->num_of_scanned--;
 919         }
 920
 921         spin_unlock_bh(&free_queue->lock);
 922         spin_unlock_bh(&scan_queue->lock);
 923
 924 _func_exit_;
 925 }
 926
 927 /*
 928 *rtw_free_assoc_resources: the caller has to lock pmlmepriv->lock
 929 */
 930 void rtw_free_assoc_resources(struct adapter *adapter, int lock_scanned_queue)
 931 {
 932         struct wlan_network *pwlan = NULL;
 933         struct  mlme_priv *pmlmepriv = &adapter->mlmepriv;
 934         struct  sta_priv *pstapriv = &adapter->stapriv;
 935         struct wlan_network *tgt_network = &pmlmepriv->cur_network;
 936
 937 _func_enter_;
 938
 939         RT_TRACE(_module_rtl871x_mlme_c_, _drv_notice_, ("+rtw_free_assoc_resources\n"));
 940         RT_TRACE(_module_rtl871x_mlme_c_, _drv_info_,
 941                  ("tgt_network->network.MacAddress=%pM ssid=%s\n",
 942                  tgt_network->network.MacAddress, tgt_network->network.Ssid.Ssid));
 943
 944         if (check_fwstate(pmlmepriv, WIFI_STATION_STATE | WIFI_AP_STATE)) {
 945                 struct sta_info *psta;
 946
 947                 psta = rtw_get_stainfo(&adapter->stapriv, tgt_network->network.MacAddress);
 948
 949                 spin_lock_bh(&(pstapriv->sta_hash_lock));
 950                 rtw_free_stainfo(adapter,  psta);
 951                 spin_unlock_bh(&pstapriv->sta_hash_lock);
 952         }
 953
 954         if (check_fwstate(pmlmepriv, WIFI_ADHOC_STATE | WIFI_ADHOC_MASTER_STATE | WIFI_AP_STATE)) {
 955                 struct sta_info *psta;
 956
 957                 rtw_free_all_stainfo(adapter);
 958
 959                 psta = rtw_get_bcmc_stainfo(adapter);
 960                 spin_lock_bh(&(pstapriv->sta_hash_lock));
 961                 rtw_free_stainfo(adapter, psta);
 962                 spin_unlock_bh(&pstapriv->sta_hash_lock);
 963
 964                 rtw_init_bcmc_stainfo(adapter);
 965         }
 966
 967         if (lock_scanned_queue)
 968                 spin_lock_bh(&(pmlmepriv->scanned_queue.lock));
 969
 970         pwlan = rtw_find_network(&pmlmepriv->scanned_queue, tgt_network->network.MacAddress);
 971         if (pwlan)
 972                 pwlan->fixed = false;
 973         else
 974                 RT_TRACE(_module_rtl871x_mlme_c_, _drv_err_, ("rtw_free_assoc_resources:pwlan==NULL\n\n"));
 975
 976         if ((check_fwstate(pmlmepriv, WIFI_ADHOC_MASTER_STATE) && (adapter->stapriv.asoc_sta_count == 1)))
 977                 rtw_free_network_nolock(pmlmepriv, pwlan);
 978
 979         if (lock_scanned_queue)
 980                 spin_unlock_bh(&pmlmepriv->scanned_queue.lock);
 981         pmlmepriv->key_mask = 0;
 982 _func_exit_;
 983 }
 984
 985 /*
 986 *rtw_indicate_connect: the caller has to lock pmlmepriv->lock
 987 */
 988 void rtw_indicate_connect(struct adapter *padapter)
 989 {
 990         struct mlme_priv        *pmlmepriv = &padapter->mlmepriv;
 991
 992 _func_enter_;
 993
 994         RT_TRACE(_module_rtl871x_mlme_c_, _drv_err_, ("+rtw_indicate_connect\n"));
 995
 996         pmlmepriv->to_join = false;
 997
 998         if (!check_fwstate(&padapter->mlmepriv, _FW_LINKED)) {
 999                 set_fwstate(pmlmepriv, _FW_LINKED);
1000
1001                 rtw_led_control(padapter, LED_CTL_LINK);
1002
1003                 rtw_os_indicate_connect(padapter);
1004         }
1005
1006         pmlmepriv->to_roaming = 0;
1007
1008         rtw_set_scan_deny(padapter, 3000);
1009
1010         RT_TRACE(_module_rtl871x_mlme_c_, _drv_err_, ("-rtw_indicate_connect: fw_state=0x%08x\n", get_fwstate(pmlmepriv)));
1011 _func_exit_;
1012 }
1013
1014 /*
1015 *rtw_indicate_disconnect: the caller has to lock pmlmepriv->lock
1016 */
1017 void rtw_indicate_disconnect(struct adapter *padapter)
1018 {
1019         struct  mlme_priv *pmlmepriv = &padapter->mlmepriv;
1020
1021 _func_enter_;
1022         RT_TRACE(_module_rtl871x_mlme_c_, _drv_err_, ("+rtw_indicate_disconnect\n"));
1023
1024         _clr_fwstate_(pmlmepriv, _FW_UNDER_LINKING | WIFI_UNDER_WPS);
1025
1026
1027         if (pmlmepriv->to_roaming > 0)
1028                 _clr_fwstate_(pmlmepriv, _FW_LINKED);
1029
1030         if (check_fwstate(&padapter->mlmepriv, _FW_LINKED) ||
1031             (pmlmepriv->to_roaming <= 0)) {
1032                 rtw_os_indicate_disconnect(padapter);
1033
1034                 _clr_fwstate_(pmlmepriv, _FW_LINKED);
1035                 rtw_led_control(padapter, LED_CTL_NO_LINK);
1036                 rtw_clear_scan_deny(padapter);
1037         }
1038         p2p_ps_wk_cmd(padapter, P2P_PS_DISABLE, 1);
1039
1040         rtw_lps_ctrl_wk_cmd(padapter, LPS_CTRL_DISCONNECT, 1);
1041
1042 _func_exit_;
1043 }
1044
1045 inline void rtw_indicate_scan_done(struct adapter *padapter, bool aborted)
1046 {
1047         rtw_os_indicate_scan_done(padapter, aborted);
1048 }
1049
1050 void rtw_scan_abort(struct adapter *adapter)
1051 {
1052         u32 start;
1053         struct mlme_priv        *pmlmepriv = &(adapter->mlmepriv);
1054         struct mlme_ext_priv    *pmlmeext = &(adapter->mlmeextpriv);
1055
1056         start = jiffies;
1057         pmlmeext->scan_abort = true;
1058         while (check_fwstate(pmlmepriv, _FW_UNDER_SURVEY) &&
1059                rtw_get_passing_time_ms(start) <= 200) {
1060                 if (adapter->bDriverStopped || adapter->bSurpriseRemoved)
1061                         break;
1062                 DBG_88E(FUNC_NDEV_FMT"fw_state=_FW_UNDER_SURVEY!\n", FUNC_NDEV_ARG(adapter->pnetdev));
1063                 msleep(20);
1064         }
1065         if (check_fwstate(pmlmepriv, _FW_UNDER_SURVEY)) {
1066                 if (!adapter->bDriverStopped && !adapter->bSurpriseRemoved)
1067                         DBG_88E(FUNC_NDEV_FMT"waiting for scan_abort time out!\n", FUNC_NDEV_ARG(adapter->pnetdev));
1068                 rtw_indicate_scan_done(adapter, true);
1069         }
1070         pmlmeext->scan_abort = false;
1071 }
1072
1073 static struct sta_info *rtw_joinbss_update_stainfo(struct adapter *padapter, struct wlan_network *pnetwork)
1074 {
1075         int i;
1076         struct sta_info *bmc_sta, *psta = NULL;
1077         struct recv_reorder_ctrl *preorder_ctrl;
1078         struct sta_priv *pstapriv = &padapter->stapriv;
1079
1080         psta = rtw_get_stainfo(pstapriv, pnetwork->network.MacAddress);
1081         if (psta == NULL)
1082                 psta = rtw_alloc_stainfo(pstapriv, pnetwork->network.MacAddress);
1083
1084         if (psta) { /* update ptarget_sta */
1085                 DBG_88E("%s\n", __func__);
1086                 psta->aid  = pnetwork->join_res;
1087                         psta->mac_id = 0;
1088                 /* sta mode */
1089                 rtw_hal_set_odm_var(padapter, HAL_ODM_STA_INFO, psta, true);
1090                 /* security related */
1091                 if (padapter->securitypriv.dot11AuthAlgrthm == dot11AuthAlgrthm_8021X) {
1092                         padapter->securitypriv.binstallGrpkey = false;
1093                         padapter->securitypriv.busetkipkey = false;
1094                         padapter->securitypriv.bgrpkey_handshake = false;
1095                         psta->ieee8021x_blocked = true;
1096                         psta->dot118021XPrivacy = padapter->securitypriv.dot11PrivacyAlgrthm;
1097                         _rtw_memset((u8 *)&psta->dot118021x_UncstKey, 0, sizeof(union Keytype));
1098                         _rtw_memset((u8 *)&psta->dot11tkiprxmickey, 0, sizeof(union Keytype));
1099                         _rtw_memset((u8 *)&psta->dot11tkiptxmickey, 0, sizeof(union Keytype));
1100                         _rtw_memset((u8 *)&psta->dot11txpn, 0, sizeof(union pn48));
1101                         _rtw_memset((u8 *)&psta->dot11rxpn, 0, sizeof(union pn48));
1102                 }
1103                 /*      Commented by Albert 2012/07/21 */
1104                 /*      When doing the WPS, the wps_ie_len won't equal to 0 */
1105                 /*      And the Wi-Fi driver shouldn't allow the data packet to be tramsmitted. */
1106                 if (padapter->securitypriv.wps_ie_len != 0) {
1107                         psta->ieee8021x_blocked = true;
1108                         padapter->securitypriv.wps_ie_len = 0;
1109                 }
1110                 /* for A-MPDU Rx reordering buffer control for bmc_sta & sta_info */
1111                 /* if A-MPDU Rx is enabled, resetting  rx_ordering_ctrl wstart_b(indicate_seq) to default value = 0xffff */
1112                 /* todo: check if AP can send A-MPDU packets */
1113                 for (i = 0; i < 16; i++) {
1114                         /* preorder_ctrl = &precvpriv->recvreorder_ctrl[i]; */
1115                         preorder_ctrl = &psta->recvreorder_ctrl[i];
1116                         preorder_ctrl->enable = false;
1117                         preorder_ctrl->indicate_seq = 0xffff;
1118                         preorder_ctrl->wend_b = 0xffff;
1119                         preorder_ctrl->wsize_b = 64;/* max_ampdu_sz; ex. 32(kbytes) -> wsize_b = 32 */
1120                 }
1121                 bmc_sta = rtw_get_bcmc_stainfo(padapter);
1122                 if (bmc_sta) {
1123                         for (i = 0; i < 16; i++) {
1124                                 /* preorder_ctrl = &precvpriv->recvreorder_ctrl[i]; */
1125                                 preorder_ctrl = &bmc_sta->recvreorder_ctrl[i];
1126                                 preorder_ctrl->enable = false;
1127                                 preorder_ctrl->indicate_seq = 0xffff;
1128                                 preorder_ctrl->wend_b = 0xffff;
1129                                 preorder_ctrl->wsize_b = 64;/* max_ampdu_sz; ex. 32(kbytes) -> wsize_b = 32 */
1130                         }
1131                 }
1132                 /* misc. */
1133                 update_sta_info(padapter, psta);
1134         }
1135         return psta;
1136 }
1137
1138 /* pnetwork: returns from rtw_joinbss_event_callback */
1139 /* ptarget_wlan: found from scanned_queue */
1140 static void rtw_joinbss_update_network(struct adapter *padapter, struct wlan_network *ptarget_wlan, struct wlan_network  *pnetwork)
1141 {
1142         struct mlme_priv        *pmlmepriv = &(padapter->mlmepriv);
1143         struct wlan_network  *cur_network = &(pmlmepriv->cur_network);
1144
1145         DBG_88E("%s\n", __func__);
1146
1147         RT_TRACE(_module_rtl871x_mlme_c_, _drv_info_,
1148                  ("\nfw_state:%x, BSSID:%pM\n",
1149                  get_fwstate(pmlmepriv), pnetwork->network.MacAddress));
1150
1151
1152         /*  why not use ptarget_wlan?? */
1153         memcpy(&cur_network->network, &pnetwork->network, pnetwork->network.Length);
1154         /*  some IEs in pnetwork is wrong, so we should use ptarget_wlan IEs */
1155         cur_network->network.IELength = ptarget_wlan->network.IELength;
1156         memcpy(&cur_network->network.IEs[0], &ptarget_wlan->network.IEs[0], MAX_IE_SZ);
1157
1158         cur_network->aid = pnetwork->join_res;
1159
1160
1161         rtw_set_signal_stat_timer(&padapter->recvpriv);
1162         padapter->recvpriv.signal_strength = ptarget_wlan->network.PhyInfo.SignalStrength;
1163         padapter->recvpriv.signal_qual = ptarget_wlan->network.PhyInfo.SignalQuality;
1164         /* the ptarget_wlan->network.Rssi is raw data, we use ptarget_wlan->network.PhyInfo.SignalStrength instead (has scaled) */
1165         padapter->recvpriv.rssi = translate_percentage_to_dbm(ptarget_wlan->network.PhyInfo.SignalStrength);
1166         rtw_set_signal_stat_timer(&padapter->recvpriv);
1167
1168         /* update fw_state will clr _FW_UNDER_LINKING here indirectly */
1169         switch (pnetwork->network.InfrastructureMode) {
1170         case Ndis802_11Infrastructure:
1171                 if (pmlmepriv->fw_state&WIFI_UNDER_WPS)
1172                         pmlmepriv->fw_state = WIFI_STATION_STATE|WIFI_UNDER_WPS;
1173                 else
1174                         pmlmepriv->fw_state = WIFI_STATION_STATE;
1175                 break;
1176         case Ndis802_11IBSS:
1177                 pmlmepriv->fw_state = WIFI_ADHOC_STATE;
1178                 break;
1179         default:
1180                 pmlmepriv->fw_state = WIFI_NULL_STATE;
1181                 RT_TRACE(_module_rtl871x_mlme_c_, _drv_err_, ("Invalid network_mode\n"));
1182                 break;
1183         }
1184
1185         rtw_update_protection(padapter, (cur_network->network.IEs) +
1186                               sizeof(struct ndis_802_11_fixed_ie),
1187                               (cur_network->network.IELength));
1188         rtw_update_ht_cap(padapter, cur_network->network.IEs, cur_network->network.IELength);
1189 }
1190
1191 /* Notes: the function could be > passive_level (the same context as Rx tasklet) */
1192 /* pnetwork: returns from rtw_joinbss_event_callback */
1193 /* ptarget_wlan: found from scanned_queue */
1194 /* if join_res > 0, for (fw_state == WIFI_STATION_STATE), we check if  "ptarget_sta" & "ptarget_wlan" exist. */
1195 /* if join_res > 0, for (fw_state == WIFI_ADHOC_STATE), we only check if "ptarget_wlan" exist. */
1196 /* if join_res > 0, update "cur_network->network" from "pnetwork->network" if (ptarget_wlan != NULL). */
1197
1198 void rtw_joinbss_event_prehandle(struct adapter *adapter, u8 *pbuf)
1199 {
1200         u8 timer_cancelled;
1201         struct sta_info *ptarget_sta = NULL, *pcur_sta = NULL;
1202         struct  sta_priv *pstapriv = &adapter->stapriv;
1203         struct  mlme_priv       *pmlmepriv = &(adapter->mlmepriv);
1204         struct wlan_network     *pnetwork       = (struct wlan_network *)pbuf;
1205         struct wlan_network     *cur_network = &(pmlmepriv->cur_network);
1206         struct wlan_network     *pcur_wlan = NULL, *ptarget_wlan = NULL;
1207         unsigned int            the_same_macaddr = false;
1208
1209 _func_enter_;
1210
1211         RT_TRACE(_module_rtl871x_mlme_c_, _drv_info_, ("joinbss event call back received with res=%d\n", pnetwork->join_res));
1212
1213         rtw_get_encrypt_decrypt_from_registrypriv(adapter);
1214
1215
1216         if (pmlmepriv->assoc_ssid.SsidLength == 0)
1217                 RT_TRACE(_module_rtl871x_mlme_c_, _drv_err_, ("@@@@@   joinbss event call back  for Any SSid\n"));
1218         else
1219                 RT_TRACE(_module_rtl871x_mlme_c_, _drv_err_, ("@@@@@   rtw_joinbss_event_callback for SSid:%s\n", pmlmepriv->assoc_ssid.Ssid));
1220
1221         the_same_macaddr = _rtw_memcmp(pnetwork->network.MacAddress, cur_network->network.MacAddress, ETH_ALEN);
1222
1223         pnetwork->network.Length = get_wlan_bssid_ex_sz(&pnetwork->network);
1224         if (pnetwork->network.Length > sizeof(struct wlan_bssid_ex)) {
1225                 RT_TRACE(_module_rtl871x_mlme_c_, _drv_err_, ("\n\n ***joinbss_evt_callback return a wrong bss ***\n\n"));
1226                 goto ignore_nolock;
1227         }
1228
1229         spin_lock_bh(&pmlmepriv->lock);
1230
1231         RT_TRACE(_module_rtl871x_mlme_c_, _drv_info_, ("\nrtw_joinbss_event_callback!! _enter_critical\n"));
1232
1233         if (pnetwork->join_res > 0) {
1234                 spin_lock_bh(&(pmlmepriv->scanned_queue.lock));
1235                 if (check_fwstate(pmlmepriv, _FW_UNDER_LINKING)) {
1236                         /* s1. find ptarget_wlan */
1237                         if (check_fwstate(pmlmepriv, _FW_LINKED)) {
1238                                 if (the_same_macaddr) {
1239                                         ptarget_wlan = rtw_find_network(&pmlmepriv->scanned_queue, cur_network->network.MacAddress);
1240                                 } else {
1241                                         pcur_wlan = rtw_find_network(&pmlmepriv->scanned_queue, cur_network->network.MacAddress);
1242                                         if (pcur_wlan)
1243                                                 pcur_wlan->fixed = false;
1244
1245                                         pcur_sta = rtw_get_stainfo(pstapriv, cur_network->network.MacAddress);
1246                                         if (pcur_sta) {
1247                                                 spin_lock_bh(&(pstapriv->sta_hash_lock));
1248                                                 rtw_free_stainfo(adapter,  pcur_sta);
1249                                                 spin_unlock_bh(&pstapriv->sta_hash_lock);
1250                                         }
1251
1252                                         ptarget_wlan = rtw_find_network(&pmlmepriv->scanned_queue, pnetwork->network.MacAddress);
1253                                         if (check_fwstate(pmlmepriv, WIFI_STATION_STATE) == true) {
1254                                                 if (ptarget_wlan)
1255                                                         ptarget_wlan->fixed = true;
1256                                         }
1257                                 }
1258                         } else {
1259                                 ptarget_wlan = rtw_find_network(&pmlmepriv->scanned_queue, pnetwork->network.MacAddress);
1260                                 if (check_fwstate(pmlmepriv, WIFI_STATION_STATE) == true) {
1261                                         if (ptarget_wlan)
1262                                                 ptarget_wlan->fixed = true;
1263                                 }
1264                         }
1265
1266                         /* s2. update cur_network */
1267                         if (ptarget_wlan) {
1268                                 rtw_joinbss_update_network(adapter, ptarget_wlan, pnetwork);
1269                         } else {
1270                                 RT_TRACE(_module_rtl871x_mlme_c_, _drv_err_, ("Can't find ptarget_wlan when joinbss_event callback\n"));
1271                                 spin_unlock_bh(&pmlmepriv->scanned_queue.lock);
1272                                 goto ignore_joinbss_callback;
1273                         }
1274
1275
1276                         /* s3. find ptarget_sta & update ptarget_sta after update cur_network only for station mode */
1277                         if (check_fwstate(pmlmepriv, WIFI_STATION_STATE) == true) {
1278                                 ptarget_sta = rtw_joinbss_update_stainfo(adapter, pnetwork);
1279                                 if (ptarget_sta == NULL) {
1280                                         RT_TRACE(_module_rtl871x_mlme_c_, _drv_err_, ("Can't update stainfo when joinbss_event callback\n"));
1281                                         spin_unlock_bh(&pmlmepriv->scanned_queue.lock);
1282                                         goto ignore_joinbss_callback;
1283                                 }
1284                         }
1285
1286                         /* s4. indicate connect */
1287                                 if (check_fwstate(pmlmepriv, WIFI_STATION_STATE) == true) {
1288                                         rtw_indicate_connect(adapter);
1289                                 } else {
1290                                         /* adhoc mode will rtw_indicate_connect when rtw_stassoc_event_callback */
1291                                         RT_TRACE(_module_rtl871x_mlme_c_, _drv_info_, ("adhoc mode, fw_state:%x", get_fwstate(pmlmepriv)));
1292                                 }
1293
1294                         /* s5. Cancle assoc_timer */
1295                         _cancel_timer(&pmlmepriv->assoc_timer, &timer_cancelled);
1296
1297                         RT_TRACE(_module_rtl871x_mlme_c_, _drv_info_, ("Cancle assoc_timer\n"));
1298
1299                 } else {
1300                         RT_TRACE(_module_rtl871x_mlme_c_, _drv_err_, ("rtw_joinbss_event_callback err: fw_state:%x", get_fwstate(pmlmepriv)));
1301                         spin_unlock_bh(&pmlmepriv->scanned_queue.lock);
1302                         goto ignore_joinbss_callback;
1303                 }
1304
1305                 spin_unlock_bh(&pmlmepriv->scanned_queue.lock);
1306
1307         } else if (pnetwork->join_res == -4) {
1308                 rtw_reset_securitypriv(adapter);
1309                 _set_timer(&pmlmepriv->assoc_timer, 1);
1310
1311                 if ((check_fwstate(pmlmepriv, _FW_UNDER_LINKING)) == true) {
1312                         RT_TRACE(_module_rtl871x_mlme_c_, _drv_err_, ("fail! clear _FW_UNDER_LINKING ^^^fw_state=%x\n", get_fwstate(pmlmepriv)));
1313                         _clr_fwstate_(pmlmepriv, _FW_UNDER_LINKING);
1314                 }
1315         } else { /* if join_res < 0 (join fails), then try again */
1316                 _set_timer(&pmlmepriv->assoc_timer, 1);
1317                 _clr_fwstate_(pmlmepriv, _FW_UNDER_LINKING);
1318         }
1319
1320 ignore_joinbss_callback:
1321         spin_unlock_bh(&pmlmepriv->lock);
1322 ignore_nolock:
1323 _func_exit_;
1324 }
1325
1326 void rtw_joinbss_event_callback(struct adapter *adapter, u8 *pbuf)
1327 {
1328         struct wlan_network     *pnetwork       = (struct wlan_network *)pbuf;
1329
1330 _func_enter_;
1331
1332         mlmeext_joinbss_event_callback(adapter, pnetwork->join_res);
1333
1334         rtw_os_xmit_schedule(adapter);
1335
1336 _func_exit_;
1337 }
1338
1339 static u8 search_max_mac_id(struct adapter *padapter)
1340 {
1341         u8 mac_id;
1342 #if defined (CONFIG_88EU_AP_MODE)
1343         u8 aid;
1344         struct mlme_priv *pmlmepriv = &(padapter->mlmepriv);
1345         struct sta_priv *pstapriv = &padapter->stapriv;
1346 #endif
1347         struct mlme_ext_priv *pmlmeext = &(padapter->mlmeextpriv);
1348         struct mlme_ext_info    *pmlmeinfo = &(pmlmeext->mlmext_info);
1349
1350 #if defined (CONFIG_88EU_AP_MODE)
1351         if (check_fwstate(pmlmepriv, WIFI_AP_STATE)) {
1352                 for (aid = (pstapriv->max_num_sta); aid > 0; aid--) {
1353                         if (pstapriv->sta_aid[aid-1] != NULL)
1354                                 break;
1355                 }
1356                 mac_id = aid + 1;
1357         } else
1358 #endif
1359         {/* adhoc  id =  31~2 */
1360                 for (mac_id = (NUM_STA-1); mac_id >= IBSS_START_MAC_ID; mac_id--) {
1361                         if (pmlmeinfo->FW_sta_info[mac_id].status == 1)
1362                                 break;
1363                 }
1364         }
1365         return mac_id;
1366 }
1367
1368 /* FOR AP , AD-HOC mode */
1369 void rtw_stassoc_hw_rpt(struct adapter *adapter, struct sta_info *psta)
1370 {
1371         u16 media_status;
1372         u8 macid;
1373
1374         if (psta == NULL)
1375                 return;
1376
1377         macid = search_max_mac_id(adapter);
1378         rtw_hal_set_hwreg(adapter, HW_VAR_TX_RPT_MAX_MACID, (u8 *)&macid);
1379         media_status = (psta->mac_id<<8)|1; /*   MACID|OPMODE:1 connect */
1380         rtw_hal_set_hwreg(adapter, HW_VAR_H2C_MEDIA_STATUS_RPT, (u8 *)&media_status);
1381 }
1382
1383 void rtw_stassoc_event_callback(struct adapter *adapter, u8 *pbuf)
1384 {
1385         struct sta_info *psta;
1386         struct mlme_priv *pmlmepriv = &(adapter->mlmepriv);
1387         struct stassoc_event    *pstassoc = (struct stassoc_event *)pbuf;
1388         struct wlan_network     *cur_network = &(pmlmepriv->cur_network);
1389         struct wlan_network     *ptarget_wlan = NULL;
1390
1391 _func_enter_;
1392
1393         if (rtw_access_ctrl(adapter, pstassoc->macaddr) == false)
1394                 return;
1395
1396 #if defined (CONFIG_88EU_AP_MODE)
1397         if (check_fwstate(pmlmepriv, WIFI_AP_STATE)) {
1398                 psta = rtw_get_stainfo(&adapter->stapriv, pstassoc->macaddr);
1399                 if (psta) {
1400                         ap_sta_info_defer_update(adapter, psta);
1401                         rtw_stassoc_hw_rpt(adapter, psta);
1402                 }
1403                 goto exit;
1404         }
1405 #endif
1406         /* for AD-HOC mode */
1407         psta = rtw_get_stainfo(&adapter->stapriv, pstassoc->macaddr);
1408         if (psta != NULL) {
1409                 /* the sta have been in sta_info_queue => do nothing */
1410                 RT_TRACE(_module_rtl871x_mlme_c_, _drv_err_, ("Error: rtw_stassoc_event_callback: sta has been in sta_hash_queue\n"));
1411                 goto exit; /* between drv has received this event before and  fw have not yet to set key to CAM_ENTRY) */
1412         }
1413         psta = rtw_alloc_stainfo(&adapter->stapriv, pstassoc->macaddr);
1414         if (psta == NULL) {
1415                 RT_TRACE(_module_rtl871x_mlme_c_, _drv_err_, ("Can't alloc sta_info when rtw_stassoc_event_callback\n"));
1416                 goto exit;
1417         }
1418         /* to do: init sta_info variable */
1419         psta->qos_option = 0;
1420         psta->mac_id = (uint)pstassoc->cam_id;
1421         DBG_88E("%s\n", __func__);
1422         /* for ad-hoc mode */
1423         rtw_hal_set_odm_var(adapter, HAL_ODM_STA_INFO, psta, true);
1424         rtw_stassoc_hw_rpt(adapter, psta);
1425         if (adapter->securitypriv.dot11AuthAlgrthm == dot11AuthAlgrthm_8021X)
1426                 psta->dot118021XPrivacy = adapter->securitypriv.dot11PrivacyAlgrthm;
1427         psta->ieee8021x_blocked = false;
1428         spin_lock_bh(&pmlmepriv->lock);
1429         if ((check_fwstate(pmlmepriv, WIFI_ADHOC_MASTER_STATE)) ||
1430             (check_fwstate(pmlmepriv, WIFI_ADHOC_STATE))) {
1431                 if (adapter->stapriv.asoc_sta_count == 2) {
1432                         spin_lock_bh(&(pmlmepriv->scanned_queue.lock));
1433                         ptarget_wlan = rtw_find_network(&pmlmepriv->scanned_queue, cur_network->network.MacAddress);
1434                         if (ptarget_wlan)
1435                                 ptarget_wlan->fixed = true;
1436                         spin_unlock_bh(&pmlmepriv->scanned_queue.lock);
1437                         /*  a sta + bc/mc_stainfo (not Ibss_stainfo) */
1438                         rtw_indicate_connect(adapter);
1439                 }
1440         }
1441         spin_unlock_bh(&pmlmepriv->lock);
1442         mlmeext_sta_add_event_callback(adapter, psta);
1443 exit:
1444 _func_exit_;
1445 }
1446
1447 void rtw_stadel_event_callback(struct adapter *adapter, u8 *pbuf)
1448 {
1449         int mac_id = -1;
1450         struct sta_info *psta;
1451         struct wlan_network *pwlan = NULL;
1452         struct wlan_bssid_ex *pdev_network = NULL;
1453         u8 *pibss = NULL;
1454         struct  mlme_priv *pmlmepriv = &(adapter->mlmepriv);
1455         struct  stadel_event *pstadel = (struct stadel_event *)pbuf;
1456         struct  sta_priv *pstapriv = &adapter->stapriv;
1457         struct wlan_network *tgt_network = &(pmlmepriv->cur_network);
1458
1459 _func_enter_;
1460
1461         psta = rtw_get_stainfo(&adapter->stapriv, pstadel->macaddr);
1462         if (psta)
1463                 mac_id = psta->mac_id;
1464         else
1465                 mac_id = pstadel->mac_id;
1466
1467         DBG_88E("%s(mac_id=%d)=%pM\n", __func__, mac_id, pstadel->macaddr);
1468
1469         if (mac_id >= 0) {
1470                 u16 media_status;
1471                 media_status = (mac_id<<8)|0; /*   MACID|OPMODE:0 means disconnect */
1472                 /* for STA, AP, ADHOC mode, report disconnect stauts to FW */
1473                 rtw_hal_set_hwreg(adapter, HW_VAR_H2C_MEDIA_STATUS_RPT, (u8 *)&media_status);
1474         }
1475
1476         if (check_fwstate(pmlmepriv, WIFI_AP_STATE))
1477                 return;
1478
1479         mlmeext_sta_del_event_callback(adapter);
1480
1481         spin_lock_bh(&pmlmepriv->lock);
1482
1483         if (check_fwstate(pmlmepriv, WIFI_STATION_STATE)) {
1484                 if (pmlmepriv->to_roaming > 0)
1485                         pmlmepriv->to_roaming--; /*  this stadel_event is caused by roaming, decrease to_roaming */
1486                 else if (pmlmepriv->to_roaming == 0)
1487                         pmlmepriv->to_roaming = adapter->registrypriv.max_roaming_times;
1488
1489                 if (*((unsigned short *)(pstadel->rsvd)) != WLAN_REASON_EXPIRATION_CHK)
1490                         pmlmepriv->to_roaming = 0; /*  don't roam */
1491
1492                 rtw_free_uc_swdec_pending_queue(adapter);
1493
1494                 rtw_free_assoc_resources(adapter, 1);
1495                 rtw_indicate_disconnect(adapter);
1496                 spin_lock_bh(&(pmlmepriv->scanned_queue.lock));
1497                 /*  remove the network entry in scanned_queue */
1498                 pwlan = rtw_find_network(&pmlmepriv->scanned_queue, tgt_network->network.MacAddress);
1499                 if (pwlan) {
1500                         pwlan->fixed = false;
1501                         rtw_free_network_nolock(pmlmepriv, pwlan);
1502                 }
1503                 spin_unlock_bh(&pmlmepriv->scanned_queue.lock);
1504                 _rtw_roaming(adapter, tgt_network);
1505         }
1506         if (check_fwstate(pmlmepriv, WIFI_ADHOC_MASTER_STATE) ||
1507             check_fwstate(pmlmepriv, WIFI_ADHOC_STATE)) {
1508                 spin_lock_bh(&(pstapriv->sta_hash_lock));
1509                 rtw_free_stainfo(adapter,  psta);
1510                 spin_unlock_bh(&pstapriv->sta_hash_lock);
1511
1512                 if (adapter->stapriv.asoc_sta_count == 1) { /* a sta + bc/mc_stainfo (not Ibss_stainfo) */
1513                         spin_lock_bh(&(pmlmepriv->scanned_queue.lock));
1514                         /* free old ibss network */
1515                         pwlan = rtw_find_network(&pmlmepriv->scanned_queue, tgt_network->network.MacAddress);
1516                         if (pwlan) {
1517                                 pwlan->fixed = false;
1518                                 rtw_free_network_nolock(pmlmepriv, pwlan);
1519                         }
1520                         spin_unlock_bh(&pmlmepriv->scanned_queue.lock);
1521                         /* re-create ibss */
1522                         pdev_network = &(adapter->registrypriv.dev_network);
1523                         pibss = adapter->registrypriv.dev_network.MacAddress;
1524
1525                         memcpy(pdev_network, &tgt_network->network, get_wlan_bssid_ex_sz(&tgt_network->network));
1526
1527                         _rtw_memset(&pdev_network->Ssid, 0, sizeof(struct ndis_802_11_ssid));
1528                         memcpy(&pdev_network->Ssid, &pmlmepriv->assoc_ssid, sizeof(struct ndis_802_11_ssid));
1529
1530                         rtw_update_registrypriv_dev_network(adapter);
1531
1532                         rtw_generate_random_ibss(pibss);
1533
1534                         if (check_fwstate(pmlmepriv, WIFI_ADHOC_STATE)) {
1535                                 set_fwstate(pmlmepriv, WIFI_ADHOC_MASTER_STATE);
1536                                 _clr_fwstate_(pmlmepriv, WIFI_ADHOC_STATE);
1537                         }
1538
1539                         if (rtw_createbss_cmd(adapter) != _SUCCESS)
1540                                 RT_TRACE(_module_rtl871x_ioctl_set_c_, _drv_err_, ("***Error=>stadel_event_callback: rtw_createbss_cmd status FAIL***\n "));
1541                 }
1542         }
1543         spin_unlock_bh(&pmlmepriv->lock);
1544 _func_exit_;
1545 }
1546
1547 void rtw_cpwm_event_callback(struct adapter *padapter, u8 *pbuf)
1548 {
1549 _func_enter_;
1550         RT_TRACE(_module_rtl871x_mlme_c_, _drv_err_, ("+rtw_cpwm_event_callback !!!\n"));
1551 _func_exit_;
1552 }
1553
1554 /*
1555 * _rtw_join_timeout_handler - Timeout/faliure handler for CMD JoinBss
1556 * @adapter: pointer to struct adapter structure
1557 */
1558 void _rtw_join_timeout_handler (struct adapter *adapter)
1559 {
1560         struct  mlme_priv *pmlmepriv = &adapter->mlmepriv;
1561         int do_join_r;
1562
1563 _func_enter_;
1564
1565         DBG_88E("%s, fw_state=%x\n", __func__, get_fwstate(pmlmepriv));
1566
1567         if (adapter->bDriverStopped || adapter->bSurpriseRemoved)
1568                 return;
1569
1570
1571         spin_lock_bh(&pmlmepriv->lock);
1572
1573         if (pmlmepriv->to_roaming > 0) { /*  join timeout caused by roaming */
1574                 while (1) {
1575                         pmlmepriv->to_roaming--;
1576                         if (pmlmepriv->to_roaming != 0) { /* try another , */
1577                                 DBG_88E("%s try another roaming\n", __func__);
1578                                 do_join_r = rtw_do_join(adapter);
1579                                 if (_SUCCESS != do_join_r) {
1580                                         DBG_88E("%s roaming do_join return %d\n", __func__ , do_join_r);
1581                                         continue;
1582                                 }
1583                                 break;
1584                         } else {
1585                                 DBG_88E("%s We've try roaming but fail\n", __func__);
1586                                 rtw_indicate_disconnect(adapter);
1587                                 break;
1588                         }
1589                 }
1590         } else {
1591                 rtw_indicate_disconnect(adapter);
1592                 free_scanqueue(pmlmepriv);/*  */
1593         }
1594         spin_unlock_bh(&pmlmepriv->lock);
1595 _func_exit_;
1596 }
1597
1598 /*
1599 * rtw_scan_timeout_handler - Timeout/Faliure handler for CMD SiteSurvey
1600 * @adapter: pointer to struct adapter structure
1601 */
1602 void rtw_scan_timeout_handler (struct adapter *adapter)
1603 {
1604         struct  mlme_priv *pmlmepriv = &adapter->mlmepriv;
1605
1606         DBG_88E(FUNC_ADPT_FMT" fw_state=%x\n", FUNC_ADPT_ARG(adapter), get_fwstate(pmlmepriv));
1607         spin_lock_bh(&pmlmepriv->lock);
1608         _clr_fwstate_(pmlmepriv, _FW_UNDER_SURVEY);
1609         spin_unlock_bh(&pmlmepriv->lock);
1610         rtw_indicate_scan_done(adapter, true);
1611 }
1612
1613 static void rtw_auto_scan_handler(struct adapter *padapter)
1614 {
1615         struct mlme_priv *pmlmepriv = &padapter->mlmepriv;
1616
1617         /* auto site survey per 60sec */
1618         if (pmlmepriv->scan_interval > 0) {
1619                 pmlmepriv->scan_interval--;
1620                 if (pmlmepriv->scan_interval == 0) {
1621                         DBG_88E("%s\n", __func__);
1622                         rtw_set_802_11_bssid_list_scan(padapter, NULL, 0);
1623                         pmlmepriv->scan_interval = SCAN_INTERVAL;/*  30*2 sec = 60sec */
1624                 }
1625         }
1626 }
1627
1628 void rtw_dynamic_check_timer_handlder(struct adapter *adapter)
1629 {
1630         struct mlme_priv *pmlmepriv = &adapter->mlmepriv;
1631         struct registry_priv *pregistrypriv = &adapter->registrypriv;
1632
1633         if (!adapter)
1634                 return;
1635         if (!adapter->hw_init_completed)
1636                 return;
1637         if ((adapter->bDriverStopped) || (adapter->bSurpriseRemoved))
1638                 return;
1639         if (adapter->net_closed)
1640                 return;
1641         rtw_dynamic_chk_wk_cmd(adapter);
1642
1643         if (pregistrypriv->wifi_spec == 1) {
1644 #ifdef CONFIG_88EU_P2P
1645                 struct wifidirect_info *pwdinfo = &adapter->wdinfo;
1646                 if (rtw_p2p_chk_state(pwdinfo, P2P_STATE_NONE))
1647 #endif
1648                 {
1649                         /* auto site survey */
1650                         rtw_auto_scan_handler(adapter);
1651                 }
1652         }
1653
1654         rcu_read_lock();
1655
1656         if (rcu_dereference(adapter->pnetdev->rx_handler_data) &&
1657             (check_fwstate(pmlmepriv, WIFI_STATION_STATE|WIFI_ADHOC_STATE) == true)) {
1658                 /*  expire NAT2.5 entry */
1659                 nat25_db_expire(adapter);
1660
1661                 if (adapter->pppoe_connection_in_progress > 0) {
1662                         adapter->pppoe_connection_in_progress--;
1663                 }
1664
1665                 /*  due to rtw_dynamic_check_timer_handlder() is called every 2 seconds */
1666                 if (adapter->pppoe_connection_in_progress > 0) {
1667                         adapter->pppoe_connection_in_progress--;
1668                 }
1669         }
1670
1671         rcu_read_unlock();
1672 }
1673
1674 #define RTW_SCAN_RESULT_EXPIRE 2000
1675
1676 /*
1677 * Select a new join candidate from the original @param candidate and @param competitor
1678 * @return true: candidate is updated
1679 * @return false: candidate is not updated
1680 */
1681 static int rtw_check_join_candidate(struct mlme_priv *pmlmepriv
1682         , struct wlan_network **candidate, struct wlan_network *competitor)
1683 {
1684         int updated = false;
1685         struct adapter *adapter = container_of(pmlmepriv, struct adapter, mlmepriv);
1686
1687
1688         /* check bssid, if needed */
1689         if (pmlmepriv->assoc_by_bssid) {
1690                 if (!_rtw_memcmp(competitor->network.MacAddress, pmlmepriv->assoc_bssid, ETH_ALEN))
1691                         goto exit;
1692         }
1693
1694         /* check ssid, if needed */
1695         if (pmlmepriv->assoc_ssid.Ssid && pmlmepriv->assoc_ssid.SsidLength) {
1696                 if (competitor->network.Ssid.SsidLength != pmlmepriv->assoc_ssid.SsidLength ||
1697                     _rtw_memcmp(competitor->network.Ssid.Ssid, pmlmepriv->assoc_ssid.Ssid, pmlmepriv->assoc_ssid.SsidLength) == false)
1698                         goto exit;
1699         }
1700
1701         if (rtw_is_desired_network(adapter, competitor)  == false)
1702                 goto exit;
1703
1704         if (pmlmepriv->to_roaming) {
1705                 if (rtw_get_passing_time_ms((u32)competitor->last_scanned) >= RTW_SCAN_RESULT_EXPIRE ||
1706                     is_same_ess(&competitor->network, &pmlmepriv->cur_network.network) == false)
1707                         goto exit;
1708         }
1709
1710         if (*candidate == NULL || (*candidate)->network.Rssi < competitor->network.Rssi) {
1711                 *candidate = competitor;
1712                 updated = true;
1713         }
1714         if (updated) {
1715                 DBG_88E("[by_bssid:%u][assoc_ssid:%s]new candidate: %s(%pM rssi:%d\n",
1716                         pmlmepriv->assoc_by_bssid,
1717                         pmlmepriv->assoc_ssid.Ssid,
1718                         (*candidate)->network.Ssid.Ssid,
1719                         (*candidate)->network.MacAddress,
1720                         (int)(*candidate)->network.Rssi);
1721                 DBG_88E("[to_roaming:%u]\n", pmlmepriv->to_roaming);
1722         }
1723
1724 exit:
1725         return updated;
1726 }
1727
1728 /*
1729 Calling context:
1730 The caller of the sub-routine will be in critical section...
1731 The caller must hold the following spinlock
1732 pmlmepriv->lock
1733 */
1734
1735 int rtw_select_and_join_from_scanned_queue(struct mlme_priv *pmlmepriv)
1736 {
1737         int ret;
1738         struct list_head *phead;
1739         struct adapter *adapter;
1740         struct __queue *queue   = &(pmlmepriv->scanned_queue);
1741         struct  wlan_network    *pnetwork = NULL;
1742         struct  wlan_network    *candidate = NULL;
1743         u8      supp_ant_div = false;
1744
1745 _func_enter_;
1746
1747         spin_lock_bh(&(pmlmepriv->scanned_queue.lock));
1748         phead = get_list_head(queue);
1749         adapter = (struct adapter *)pmlmepriv->nic_hdl;
1750         pmlmepriv->pscanned = get_next(phead);
1751         while (!rtw_end_of_queue_search(phead, pmlmepriv->pscanned)) {
1752                 pnetwork = LIST_CONTAINOR(pmlmepriv->pscanned, struct wlan_network, list);
1753                 if (pnetwork == NULL) {
1754                         RT_TRACE(_module_rtl871x_mlme_c_, _drv_err_, ("%s return _FAIL:(pnetwork==NULL)\n", __func__));
1755                         ret = _FAIL;
1756                         goto exit;
1757                 }
1758                 pmlmepriv->pscanned = get_next(pmlmepriv->pscanned);
1759                 rtw_check_join_candidate(pmlmepriv, &candidate, pnetwork);
1760         }
1761         if (candidate == NULL) {
1762                 DBG_88E("%s: return _FAIL(candidate==NULL)\n", __func__);
1763                 ret = _FAIL;
1764                 goto exit;
1765         } else {
1766                 DBG_88E("%s: candidate: %s(%pM ch:%u)\n", __func__,
1767                         candidate->network.Ssid.Ssid, candidate->network.MacAddress,
1768                         candidate->network.Configuration.DSConfig);
1769         }
1770
1771
1772         /*  check for situation of  _FW_LINKED */
1773         if (check_fwstate(pmlmepriv, _FW_LINKED) == true) {
1774                 DBG_88E("%s: _FW_LINKED while ask_for_joinbss!!!\n", __func__);
1775
1776                 rtw_disassoc_cmd(adapter, 0, true);
1777                 rtw_indicate_disconnect(adapter);
1778                 rtw_free_assoc_resources(adapter, 0);
1779         }
1780
1781         rtw_hal_get_def_var(adapter, HAL_DEF_IS_SUPPORT_ANT_DIV, &(supp_ant_div));
1782         if (supp_ant_div) {
1783                 u8 cur_ant;
1784                 rtw_hal_get_def_var(adapter, HAL_DEF_CURRENT_ANTENNA, &(cur_ant));
1785                 DBG_88E("#### Opt_Ant_(%s), cur_Ant(%s)\n",
1786                         (2 == candidate->network.PhyInfo.Optimum_antenna) ? "A" : "B",
1787                         (2 == cur_ant) ? "A" : "B"
1788                 );
1789         }
1790
1791         ret = rtw_joinbss_cmd(adapter, candidate);
1792
1793 exit:
1794         spin_unlock_bh(&pmlmepriv->scanned_queue.lock);
1795
1796 _func_exit_;
1797
1798         return ret;
1799 }
1800
1801 int rtw_set_auth(struct adapter *adapter, struct security_priv *psecuritypriv)
1802 {
1803         struct  cmd_obj *pcmd;
1804         struct  setauth_parm *psetauthparm;
1805         struct  cmd_priv *pcmdpriv = &(adapter->cmdpriv);
1806         int             res = _SUCCESS;
1807
1808 _func_enter_;
1809
1810         pcmd = (struct  cmd_obj *)rtw_zmalloc(sizeof(struct cmd_obj));
1811         if (pcmd == NULL) {
1812                 res = _FAIL;  /* try again */
1813                 goto exit;
1814         }
1815
1816         psetauthparm = (struct setauth_parm *)rtw_zmalloc(sizeof(struct setauth_parm));
1817         if (psetauthparm == NULL) {
1818                 kfree(pcmd);
1819                 res = _FAIL;
1820                 goto exit;
1821         }
1822         _rtw_memset(psetauthparm, 0, sizeof(struct setauth_parm));
1823         psetauthparm->mode = (unsigned char)psecuritypriv->dot11AuthAlgrthm;
1824         pcmd->cmdcode = _SetAuth_CMD_;
1825         pcmd->parmbuf = (unsigned char *)psetauthparm;
1826         pcmd->cmdsz =  (sizeof(struct setauth_parm));
1827         pcmd->rsp = NULL;
1828         pcmd->rspsz = 0;
1829         _rtw_init_listhead(&pcmd->list);
1830         RT_TRACE(_module_rtl871x_mlme_c_, _drv_err_,
1831                  ("after enqueue set_auth_cmd, auth_mode=%x\n",
1832                  psecuritypriv->dot11AuthAlgrthm));
1833         res = rtw_enqueue_cmd(pcmdpriv, pcmd);
1834 exit:
1835 _func_exit_;
1836         return res;
1837 }
1838
1839 int rtw_set_key(struct adapter *adapter, struct security_priv *psecuritypriv, int keyid, u8 set_tx)
1840 {
1841         u8      keylen;
1842         struct cmd_obj          *pcmd;
1843         struct setkey_parm      *psetkeyparm;
1844         struct cmd_priv         *pcmdpriv = &(adapter->cmdpriv);
1845         struct mlme_priv                *pmlmepriv = &(adapter->mlmepriv);
1846         int     res = _SUCCESS;
1847
1848 _func_enter_;
1849         pcmd = (struct  cmd_obj *)rtw_zmalloc(sizeof(struct     cmd_obj));
1850         if (pcmd == NULL) {
1851                 res = _FAIL;  /* try again */
1852                 goto exit;
1853         }
1854         psetkeyparm = (struct setkey_parm *)rtw_zmalloc(sizeof(struct setkey_parm));
1855         if (psetkeyparm == NULL) {
1856                 kfree(pcmd);
1857                 res = _FAIL;
1858                 goto exit;
1859         }
1860
1861         _rtw_memset(psetkeyparm, 0, sizeof(struct setkey_parm));
1862
1863         if (psecuritypriv->dot11AuthAlgrthm == dot11AuthAlgrthm_8021X) {
1864                 psetkeyparm->algorithm = (unsigned char)psecuritypriv->dot118021XGrpPrivacy;
1865                 RT_TRACE(_module_rtl871x_mlme_c_, _drv_err_,
1866                          ("\n rtw_set_key: psetkeyparm->algorithm=(unsigned char)psecuritypriv->dot118021XGrpPrivacy=%d\n",
1867                          psetkeyparm->algorithm));
1868         } else {
1869                 psetkeyparm->algorithm = (u8)psecuritypriv->dot11PrivacyAlgrthm;
1870                 RT_TRACE(_module_rtl871x_mlme_c_, _drv_err_,
1871                          ("\n rtw_set_key: psetkeyparm->algorithm=(u8)psecuritypriv->dot11PrivacyAlgrthm=%d\n",
1872                          psetkeyparm->algorithm));
1873         }
1874         psetkeyparm->keyid = (u8)keyid;/* 0~3 */
1875         psetkeyparm->set_tx = set_tx;
1876         pmlmepriv->key_mask |= BIT(psetkeyparm->keyid);
1877         DBG_88E("==> rtw_set_key algorithm(%x), keyid(%x), key_mask(%x)\n",
1878                 psetkeyparm->algorithm, psetkeyparm->keyid, pmlmepriv->key_mask);
1879         RT_TRACE(_module_rtl871x_mlme_c_, _drv_err_,
1880                  ("\n rtw_set_key: psetkeyparm->algorithm=%d psetkeyparm->keyid=(u8)keyid=%d\n",
1881                  psetkeyparm->algorithm, keyid));
1882
1883         switch (psetkeyparm->algorithm) {
1884         case _WEP40_:
1885                 keylen = 5;
1886                 memcpy(&(psetkeyparm->key[0]), &(psecuritypriv->dot11DefKey[keyid].skey[0]), keylen);
1887                 break;
1888         case _WEP104_:
1889                 keylen = 13;
1890                 memcpy(&(psetkeyparm->key[0]), &(psecuritypriv->dot11DefKey[keyid].skey[0]), keylen);
1891                 break;
1892         case _TKIP_:
1893                 keylen = 16;
1894                 memcpy(&psetkeyparm->key, &psecuritypriv->dot118021XGrpKey[keyid], keylen);
1895                 psetkeyparm->grpkey = 1;
1896                 break;
1897         case _AES_:
1898                 keylen = 16;
1899                 memcpy(&psetkeyparm->key, &psecuritypriv->dot118021XGrpKey[keyid], keylen);
1900                 psetkeyparm->grpkey = 1;
1901                 break;
1902         default:
1903                 RT_TRACE(_module_rtl871x_mlme_c_, _drv_err_,
1904                          ("\n rtw_set_key:psecuritypriv->dot11PrivacyAlgrthm=%x (must be 1 or 2 or 4 or 5)\n",
1905                          psecuritypriv->dot11PrivacyAlgrthm));
1906                 res = _FAIL;
1907                 goto exit;
1908         }
1909         pcmd->cmdcode = _SetKey_CMD_;
1910         pcmd->parmbuf = (u8 *)psetkeyparm;
1911         pcmd->cmdsz =  (sizeof(struct setkey_parm));
1912         pcmd->rsp = NULL;
1913         pcmd->rspsz = 0;
1914         _rtw_init_listhead(&pcmd->list);
1915         res = rtw_enqueue_cmd(pcmdpriv, pcmd);
1916 exit:
1917 _func_exit_;
1918         return res;
1919 }
1920
1921 /* adjust IEs for rtw_joinbss_cmd in WMM */
1922 int rtw_restruct_wmm_ie(struct adapter *adapter, u8 *in_ie, u8 *out_ie, uint in_len, uint initial_out_len)
1923 {
1924         unsigned        int ielength = 0;
1925         unsigned int i, j;
1926
1927         i = 12; /* after the fixed IE */
1928         while (i < in_len) {
1929                 ielength = initial_out_len;
1930
1931                 if (in_ie[i] == 0xDD && in_ie[i+2] == 0x00 && in_ie[i+3] == 0x50  && in_ie[i+4] == 0xF2 && in_ie[i+5] == 0x02 && i+5 < in_len) {
1932                         /* WMM element ID and OUI */
1933                         /* Append WMM IE to the last index of out_ie */
1934
1935                         for (j = i; j < i + 9; j++) {
1936                                 out_ie[ielength] = in_ie[j];
1937                                 ielength++;
1938                         }
1939                         out_ie[initial_out_len + 1] = 0x07;
1940                         out_ie[initial_out_len + 6] = 0x00;
1941                         out_ie[initial_out_len + 8] = 0x00;
1942                         break;
1943                 }
1944                 i += (in_ie[i+1]+2); /*  to the next IE element */
1945         }
1946         return ielength;
1947 }
1948
1949 /*  */
1950 /*  Ported from 8185: IsInPreAuthKeyList(). (Renamed from SecIsInPreAuthKeyList(), 2006-10-13.) */
1951 /*  Added by Annie, 2006-05-07. */
1952 /*  */
1953 /*  Search by BSSID, */
1954 /*  Return Value: */
1955 /*              -1              :if there is no pre-auth key in the  table */
1956 /*              >= 0            :if there is pre-auth key, and   return the entry id */
1957 /*  */
1958 /*  */
1959
1960 static int SecIsInPMKIDList(struct adapter *Adapter, u8 *bssid)
1961 {
1962         struct security_priv *psecuritypriv = &Adapter->securitypriv;
1963         int i = 0;
1964
1965         do {
1966                 if ((psecuritypriv->PMKIDList[i].bUsed) &&
1967                     (_rtw_memcmp(psecuritypriv->PMKIDList[i].Bssid, bssid, ETH_ALEN) == true)) {
1968                         break;
1969                 } else {
1970                         i++;
1971                         /* continue; */
1972                 }
1973
1974         } while (i < NUM_PMKID_CACHE);
1975
1976         if (i == NUM_PMKID_CACHE) {
1977                 i = -1;/*  Could not find. */
1978         } else {
1979                 /*  There is one Pre-Authentication Key for the specific BSSID. */
1980         }
1981         return i;
1982 }
1983
1984 /*  */
1985 /*  Check the RSN IE length */
1986 /*  If the RSN IE length <= 20, the RSN IE didn't include the PMKID information */
1987 /*  0-11th element in the array are the fixed IE */
1988 /*  12th element in the array is the IE */
1989 /*  13th element in the array is the IE length */
1990 /*  */
1991
1992 static int rtw_append_pmkid(struct adapter *Adapter, int iEntry, u8 *ie, uint ie_len)
1993 {
1994         struct security_priv *psecuritypriv = &Adapter->securitypriv;
1995
1996         if (ie[13] <= 20) {
1997                 /*  The RSN IE didn't include the PMK ID, append the PMK information */
1998                 ie[ie_len] = 1;
1999                 ie_len++;
2000                 ie[ie_len] = 0; /* PMKID count = 0x0100 */
2001                 ie_len++;
2002                 memcpy(&ie[ie_len], &psecuritypriv->PMKIDList[iEntry].PMKID, 16);
2003
2004                 ie_len += 16;
2005                 ie[13] += 18;/* PMKID length = 2+16 */
2006         }
2007         return ie_len;
2008 }
2009
2010 int rtw_restruct_sec_ie(struct adapter *adapter, u8 *in_ie, u8 *out_ie, uint in_len)
2011 {
2012         u8 authmode;
2013         uint    ielength;
2014         int iEntry;
2015
2016         struct mlme_priv *pmlmepriv = &adapter->mlmepriv;
2017         struct security_priv *psecuritypriv = &adapter->securitypriv;
2018         uint    ndisauthmode = psecuritypriv->ndisauthtype;
2019         uint ndissecuritytype = psecuritypriv->ndisencryptstatus;
2020
2021 _func_enter_;
2022
2023         RT_TRACE(_module_rtl871x_mlme_c_, _drv_notice_,
2024                  ("+rtw_restruct_sec_ie: ndisauthmode=%d ndissecuritytype=%d\n",
2025                   ndisauthmode, ndissecuritytype));
2026
2027         /* copy fixed ie only */
2028         memcpy(out_ie, in_ie, 12);
2029         ielength = 12;
2030         if ((ndisauthmode == Ndis802_11AuthModeWPA) ||
2031             (ndisauthmode == Ndis802_11AuthModeWPAPSK))
2032                         authmode = _WPA_IE_ID_;
2033         if ((ndisauthmode == Ndis802_11AuthModeWPA2) ||
2034             (ndisauthmode == Ndis802_11AuthModeWPA2PSK))
2035                 authmode = _WPA2_IE_ID_;
2036
2037         if (check_fwstate(pmlmepriv, WIFI_UNDER_WPS)) {
2038                 memcpy(out_ie+ielength, psecuritypriv->wps_ie, psecuritypriv->wps_ie_len);
2039
2040                 ielength += psecuritypriv->wps_ie_len;
2041         } else if ((authmode == _WPA_IE_ID_) || (authmode == _WPA2_IE_ID_)) {
2042                 /* copy RSN or SSN */
2043                 memcpy(&out_ie[ielength], &psecuritypriv->supplicant_ie[0], psecuritypriv->supplicant_ie[1]+2);
2044                 ielength += psecuritypriv->supplicant_ie[1]+2;
2045                 rtw_report_sec_ie(adapter, authmode, psecuritypriv->supplicant_ie);
2046         }
2047
2048         iEntry = SecIsInPMKIDList(adapter, pmlmepriv->assoc_bssid);
2049         if (iEntry < 0) {
2050                 return ielength;
2051         } else {
2052                 if (authmode == _WPA2_IE_ID_)
2053                         ielength = rtw_append_pmkid(adapter, iEntry, out_ie, ielength);
2054         }
2055
2056 _func_exit_;
2057
2058         return ielength;
2059 }
2060
2061 void rtw_init_registrypriv_dev_network(struct adapter *adapter)
2062 {
2063         struct registry_priv *pregistrypriv = &adapter->registrypriv;
2064         struct eeprom_priv *peepriv = &adapter->eeprompriv;
2065         struct wlan_bssid_ex    *pdev_network = &pregistrypriv->dev_network;
2066         u8 *myhwaddr = myid(peepriv);
2067
2068 _func_enter_;
2069
2070         memcpy(pdev_network->MacAddress, myhwaddr, ETH_ALEN);
2071
2072         memcpy(&pdev_network->Ssid, &pregistrypriv->ssid, sizeof(struct ndis_802_11_ssid));
2073
2074         pdev_network->Configuration.Length = sizeof(struct ndis_802_11_config);
2075         pdev_network->Configuration.BeaconPeriod = 100;
2076         pdev_network->Configuration.FHConfig.Length = 0;
2077         pdev_network->Configuration.FHConfig.HopPattern = 0;
2078         pdev_network->Configuration.FHConfig.HopSet = 0;
2079         pdev_network->Configuration.FHConfig.DwellTime = 0;
2080
2081 _func_exit_;
2082 }
2083
2084 void rtw_update_registrypriv_dev_network(struct adapter *adapter)
2085 {
2086         int sz = 0;
2087         struct registry_priv *pregistrypriv = &adapter->registrypriv;
2088         struct wlan_bssid_ex    *pdev_network = &pregistrypriv->dev_network;
2089         struct  security_priv *psecuritypriv = &adapter->securitypriv;
2090         struct  wlan_network    *cur_network = &adapter->mlmepriv.cur_network;
2091
2092 _func_enter_;
2093
2094         pdev_network->Privacy = (psecuritypriv->dot11PrivacyAlgrthm > 0 ? 1 : 0); /*  adhoc no 802.1x */
2095
2096         pdev_network->Rssi = 0;
2097
2098         switch (pregistrypriv->wireless_mode) {
2099         case WIRELESS_11B:
2100                 pdev_network->NetworkTypeInUse = (Ndis802_11DS);
2101                 break;
2102         case WIRELESS_11G:
2103         case WIRELESS_11BG:
2104         case WIRELESS_11_24N:
2105         case WIRELESS_11G_24N:
2106         case WIRELESS_11BG_24N:
2107                 pdev_network->NetworkTypeInUse = (Ndis802_11OFDM24);
2108                 break;
2109         case WIRELESS_11A:
2110         case WIRELESS_11A_5N:
2111                 pdev_network->NetworkTypeInUse = (Ndis802_11OFDM5);
2112                 break;
2113         case WIRELESS_11ABGN:
2114                 if (pregistrypriv->channel > 14)
2115                         pdev_network->NetworkTypeInUse = (Ndis802_11OFDM5);
2116                 else
2117                         pdev_network->NetworkTypeInUse = (Ndis802_11OFDM24);
2118                 break;
2119         default:
2120                 /*  TODO */
2121                 break;
2122         }
2123
2124         pdev_network->Configuration.DSConfig = (pregistrypriv->channel);
2125         RT_TRACE(_module_rtl871x_mlme_c_, _drv_info_,
2126                  ("pregistrypriv->channel=%d, pdev_network->Configuration.DSConfig=0x%x\n",
2127                  pregistrypriv->channel, pdev_network->Configuration.DSConfig));
2128
2129         if (cur_network->network.InfrastructureMode == Ndis802_11IBSS)
2130                 pdev_network->Configuration.ATIMWindow = (0);
2131
2132         pdev_network->InfrastructureMode = (cur_network->network.InfrastructureMode);
2133
2134         /*  1. Supported rates */
2135         /*  2. IE */
2136
2137         sz = rtw_generate_ie(pregistrypriv);
2138         pdev_network->IELength = sz;
2139         pdev_network->Length = get_wlan_bssid_ex_sz((struct wlan_bssid_ex  *)pdev_network);
2140
2141         /* notes: translate IELength & Length after assign the Length to cmdsz in createbss_cmd(); */
2142         /* pdev_network->IELength = cpu_to_le32(sz); */
2143 _func_exit_;
2144 }
2145
2146 void rtw_get_encrypt_decrypt_from_registrypriv(struct adapter *adapter)
2147 {
2148 _func_enter_;
2149 _func_exit_;
2150 }
2151
2152 /* the function is at passive_level */
2153 void rtw_joinbss_reset(struct adapter *padapter)
2154 {
2155         u8      threshold;
2156         struct mlme_priv        *pmlmepriv = &padapter->mlmepriv;
2157         struct ht_priv          *phtpriv = &pmlmepriv->htpriv;
2158
2159         /* todo: if you want to do something io/reg/hw setting before join_bss, please add code here */
2160         pmlmepriv->num_FortyMHzIntolerant = 0;
2161
2162         pmlmepriv->num_sta_no_ht = 0;
2163
2164         phtpriv->ampdu_enable = false;/* reset to disabled */
2165
2166         /*  TH = 1 => means that invalidate usb rx aggregation */
2167         /*  TH = 0 => means that validate usb rx aggregation, use init value. */
2168         if (phtpriv->ht_option) {
2169                 if (padapter->registrypriv.wifi_spec == 1)
2170                         threshold = 1;
2171                 else
2172                         threshold = 0;
2173                 rtw_hal_set_hwreg(padapter, HW_VAR_RXDMA_AGG_PG_TH, (u8 *)(&threshold));
2174         } else {
2175                 threshold = 1;
2176                 rtw_hal_set_hwreg(padapter, HW_VAR_RXDMA_AGG_PG_TH, (u8 *)(&threshold));
2177         }
2178 }
2179
2180 /* the function is >= passive_level */
2181 unsigned int rtw_restructure_ht_ie(struct adapter *padapter, u8 *in_ie, u8 *out_ie, uint in_len, uint *pout_len)
2182 {
2183         u32 ielen, out_len;
2184         enum ht_cap_ampdu_factor max_rx_ampdu_factor;
2185         unsigned char *p;
2186         struct rtw_ieee80211_ht_cap ht_capie;
2187         unsigned char WMM_IE[] = {0x00, 0x50, 0xf2, 0x02, 0x00, 0x01, 0x00};
2188         struct mlme_priv        *pmlmepriv = &padapter->mlmepriv;
2189         struct qos_priv         *pqospriv = &pmlmepriv->qospriv;
2190         struct ht_priv          *phtpriv = &pmlmepriv->htpriv;
2191         u32 rx_packet_offset, max_recvbuf_sz;
2192
2193
2194         phtpriv->ht_option = false;
2195
2196         p = rtw_get_ie(in_ie+12, _HT_CAPABILITY_IE_, &ielen, in_len-12);
2197
2198         if (p && ielen > 0) {
2199                 if (pqospriv->qos_option == 0) {
2200                         out_len = *pout_len;
2201                         rtw_set_ie(out_ie+out_len, _VENDOR_SPECIFIC_IE_,
2202                                    _WMM_IE_Length_, WMM_IE, pout_len);
2203
2204                         pqospriv->qos_option = 1;
2205                 }
2206
2207                 out_len = *pout_len;
2208
2209                 _rtw_memset(&ht_capie, 0, sizeof(struct rtw_ieee80211_ht_cap));
2210
2211                 ht_capie.cap_info = IEEE80211_HT_CAP_SUP_WIDTH |
2212                                     IEEE80211_HT_CAP_SGI_20 |
2213                                     IEEE80211_HT_CAP_SGI_40 |
2214                                     IEEE80211_HT_CAP_TX_STBC |
2215                                     IEEE80211_HT_CAP_DSSSCCK40;
2216
2217                 rtw_hal_get_def_var(padapter, HAL_DEF_RX_PACKET_OFFSET, &rx_packet_offset);
2218                 rtw_hal_get_def_var(padapter, HAL_DEF_MAX_RECVBUF_SZ, &max_recvbuf_sz);
2219
2220                 /*
2221                 AMPDU_para [1:0]:Max AMPDU Len => 0:8k , 1:16k, 2:32k, 3:64k
2222                 AMPDU_para [4:2]:Min MPDU Start Spacing
2223                 */
2224
2225                 rtw_hal_get_def_var(padapter, HW_VAR_MAX_RX_AMPDU_FACTOR, &max_rx_ampdu_factor);
2226                 ht_capie.ampdu_params_info = (max_rx_ampdu_factor&0x03);
2227
2228                 if (padapter->securitypriv.dot11PrivacyAlgrthm == _AES_)
2229                         ht_capie.ampdu_params_info |= (IEEE80211_HT_CAP_AMPDU_DENSITY&(0x07<<2));
2230                 else
2231                         ht_capie.ampdu_params_info |= (IEEE80211_HT_CAP_AMPDU_DENSITY&0x00);
2232
2233
2234                 rtw_set_ie(out_ie+out_len, _HT_CAPABILITY_IE_,
2235                            sizeof(struct rtw_ieee80211_ht_cap), (unsigned char *)&ht_capie, pout_len);
2236
2237                 phtpriv->ht_option = true;
2238
2239                 p = rtw_get_ie(in_ie+12, _HT_ADD_INFO_IE_, &ielen, in_len-12);
2240                 if (p && (ielen == sizeof(struct ieee80211_ht_addt_info))) {
2241                         out_len = *pout_len;
2242                         rtw_set_ie(out_ie+out_len, _HT_ADD_INFO_IE_, ielen, p+2 , pout_len);
2243                 }
2244         }
2245         return phtpriv->ht_option;
2246 }
2247
2248 /* the function is > passive_level (in critical_section) */
2249 void rtw_update_ht_cap(struct adapter *padapter, u8 *pie, uint ie_len)
2250 {
2251         u8 *p, max_ampdu_sz;
2252         int len;
2253         struct rtw_ieee80211_ht_cap *pht_capie;
2254         struct mlme_priv        *pmlmepriv = &padapter->mlmepriv;
2255         struct ht_priv          *phtpriv = &pmlmepriv->htpriv;
2256         struct registry_priv *pregistrypriv = &padapter->registrypriv;
2257         struct mlme_ext_priv    *pmlmeext = &padapter->mlmeextpriv;
2258         struct mlme_ext_info    *pmlmeinfo = &(pmlmeext->mlmext_info);
2259
2260         if (!phtpriv->ht_option)
2261                 return;
2262
2263         if ((!pmlmeinfo->HT_info_enable) || (!pmlmeinfo->HT_caps_enable))
2264                 return;
2265
2266         DBG_88E("+rtw_update_ht_cap()\n");
2267
2268         /* maybe needs check if ap supports rx ampdu. */
2269         if ((!phtpriv->ampdu_enable) && (pregistrypriv->ampdu_enable == 1)) {
2270                 if (pregistrypriv->wifi_spec == 1)
2271                         phtpriv->ampdu_enable = false;
2272                 else
2273                         phtpriv->ampdu_enable = true;
2274         } else if (pregistrypriv->ampdu_enable == 2) {
2275                 phtpriv->ampdu_enable = true;
2276         }
2277
2278
2279         /* check Max Rx A-MPDU Size */
2280         len = 0;
2281         p = rtw_get_ie(pie+sizeof(struct ndis_802_11_fixed_ie), _HT_CAPABILITY_IE_, &len, ie_len-sizeof(struct ndis_802_11_fixed_ie));
2282         if (p && len > 0) {
2283                 pht_capie = (struct rtw_ieee80211_ht_cap *)(p+2);
2284                 max_ampdu_sz = (pht_capie->ampdu_params_info & IEEE80211_HT_CAP_AMPDU_FACTOR);
2285                 max_ampdu_sz = 1 << (max_ampdu_sz+3); /*  max_ampdu_sz (kbytes); */
2286                 phtpriv->rx_ampdu_maxlen = max_ampdu_sz;
2287         }
2288         len = 0;
2289         p = rtw_get_ie(pie+sizeof(struct ndis_802_11_fixed_ie), _HT_ADD_INFO_IE_, &len, ie_len-sizeof(struct ndis_802_11_fixed_ie));
2290
2291         /* update cur_bwmode & cur_ch_offset */
2292         if ((pregistrypriv->cbw40_enable) &&
2293             (le16_to_cpu(pmlmeinfo->HT_caps.u.HT_cap_element.HT_caps_info) & BIT(1)) &&
2294             (pmlmeinfo->HT_info.infos[0] & BIT(2))) {
2295                 int i;
2296                 u8      rf_type;
2297
2298                 padapter->HalFunc.GetHwRegHandler(padapter, HW_VAR_RF_TYPE, (u8 *)(&rf_type));
2299
2300                 /* update the MCS rates */
2301                 for (i = 0; i < 16; i++) {
2302                         if ((rf_type == RF_1T1R) || (rf_type == RF_1T2R))
2303                                 pmlmeinfo->HT_caps.u.HT_cap_element.MCS_rate[i] &= MCS_rate_1R[i];
2304                         else
2305                                 pmlmeinfo->HT_caps.u.HT_cap_element.MCS_rate[i] &= MCS_rate_2R[i];
2306                 }
2307                 /* switch to the 40M Hz mode according to the AP */
2308                 pmlmeext->cur_bwmode = HT_CHANNEL_WIDTH_40;
2309                 switch ((pmlmeinfo->HT_info.infos[0] & 0x3)) {
2310                 case HT_EXTCHNL_OFFSET_UPPER:
2311                         pmlmeext->cur_ch_offset = HAL_PRIME_CHNL_OFFSET_LOWER;
2312                         break;
2313                 case HT_EXTCHNL_OFFSET_LOWER:
2314                         pmlmeext->cur_ch_offset = HAL_PRIME_CHNL_OFFSET_UPPER;
2315                         break;
2316                 default:
2317                         pmlmeext->cur_ch_offset = HAL_PRIME_CHNL_OFFSET_DONT_CARE;
2318                         break;
2319                 }
2320         }
2321
2322         /*  Config SM Power Save setting */
2323         pmlmeinfo->SM_PS = (le16_to_cpu(pmlmeinfo->HT_caps.u.HT_cap_element.HT_caps_info) & 0x0C) >> 2;
2324         if (pmlmeinfo->SM_PS == WLAN_HT_CAP_SM_PS_STATIC)
2325                 DBG_88E("%s(): WLAN_HT_CAP_SM_PS_STATIC\n", __func__);
2326
2327         /*  Config current HT Protection mode. */
2328         pmlmeinfo->HT_protection = pmlmeinfo->HT_info.infos[1] & 0x3;
2329 }
2330
2331 void rtw_issue_addbareq_cmd(struct adapter *padapter, struct xmit_frame *pxmitframe)
2332 {
2333         u8 issued;
2334         int priority;
2335         struct sta_info *psta = NULL;
2336         struct ht_priv  *phtpriv;
2337         struct pkt_attrib *pattrib = &pxmitframe->attrib;
2338         s32 bmcst = IS_MCAST(pattrib->ra);
2339
2340         if (bmcst || (padapter->mlmepriv.LinkDetectInfo.NumTxOkInPeriod < 100))
2341                 return;
2342
2343         priority = pattrib->priority;
2344
2345         if (pattrib->psta)
2346                 psta = pattrib->psta;
2347         else
2348                 psta = rtw_get_stainfo(&padapter->stapriv, pattrib->ra);
2349
2350         if (psta == NULL)
2351                 return;
2352
2353         phtpriv = &psta->htpriv;
2354
2355         if ((phtpriv->ht_option) && (phtpriv->ampdu_enable)) {
2356                 issued = (phtpriv->agg_enable_bitmap>>priority)&0x1;
2357                 issued |= (phtpriv->candidate_tid_bitmap>>priority)&0x1;
2358
2359                 if (0 == issued) {
2360                         DBG_88E("rtw_issue_addbareq_cmd, p=%d\n", priority);
2361                         psta->htpriv.candidate_tid_bitmap |= BIT((u8)priority);
2362                         rtw_addbareq_cmd(padapter, (u8) priority, pattrib->ra);
2363                 }
2364         }
2365 }
2366
2367 void rtw_roaming(struct adapter *padapter, struct wlan_network *tgt_network)
2368 {
2369         struct mlme_priv        *pmlmepriv = &padapter->mlmepriv;
2370
2371         spin_lock_bh(&pmlmepriv->lock);
2372         _rtw_roaming(padapter, tgt_network);
2373         spin_unlock_bh(&pmlmepriv->lock);
2374 }
2375 void _rtw_roaming(struct adapter *padapter, struct wlan_network *tgt_network)
2376 {
2377         struct mlme_priv        *pmlmepriv = &padapter->mlmepriv;
2378         int do_join_r;
2379
2380         struct wlan_network *pnetwork;
2381
2382         if (tgt_network != NULL)
2383                 pnetwork = tgt_network;
2384         else
2385                 pnetwork = &pmlmepriv->cur_network;
2386
2387         if (0 < pmlmepriv->to_roaming) {
2388                 DBG_88E("roaming from %s(%pM length:%d\n",
2389                         pnetwork->network.Ssid.Ssid, pnetwork->network.MacAddress,
2390                         pnetwork->network.Ssid.SsidLength);
2391                 memcpy(&pmlmepriv->assoc_ssid, &pnetwork->network.Ssid, sizeof(struct ndis_802_11_ssid));
2392
2393                 pmlmepriv->assoc_by_bssid = false;
2394
2395                 while (1) {
2396                         do_join_r = rtw_do_join(padapter);
2397                         if (_SUCCESS == do_join_r) {
2398                                 break;
2399                         } else {
2400                                 DBG_88E("roaming do_join return %d\n", do_join_r);
2401                                 pmlmepriv->to_roaming--;
2402
2403                                 if (0 < pmlmepriv->to_roaming) {
2404                                         continue;
2405                                 } else {
2406                                         DBG_88E("%s(%d) -to roaming fail, indicate_disconnect\n", __func__, __LINE__);
2407                                         rtw_indicate_disconnect(padapter);
2408                                         break;
2409                                 }
2410                         }
2411                 }
2412         }
2413 }