drivers/staging/rtl8188eu/os_dep/ioctl_linux.c

   1 /******************************************************************************
   2  *
   3  * Copyright(c) 2007 - 2012 Realtek Corporation. All rights reserved.
   4  *
   5  * This program is free software; you can redistribute it and/or modify it
   6  * under the terms of version 2 of the GNU General Public License as
   7  * published by the Free Software Foundation.
   8  *
   9  * This program is distributed in the hope that it will be useful, but WITHOUT
  10  * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
  11  * FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for
  12  * more details.
  13  *
  14  * You should have received a copy of the GNU General Public License along with
  15  * this program; if not, write to the Free Software Foundation, Inc.,
  16  * 51 Franklin Street, Fifth Floor, Boston, MA 02110, USA
  17  *
  18  *
  19  ******************************************************************************/
  20 #define _IOCTL_LINUX_C_
  21
  22 #include <osdep_service.h>
  23 #include <drv_types.h>
  24 #include <wlan_bssdef.h>
  25 #include <rtw_debug.h>
  26 #include <wifi.h>
  27 #include <rtw_mlme.h>
  28 #include <rtw_mlme_ext.h>
  29 #include <rtw_ioctl.h>
  30 #include <rtw_ioctl_set.h>
  31 #include <rtw_mp_ioctl.h>
  32 #include <usb_ops.h>
  33 #include <rtw_version.h>
  34 #include <rtl8188e_hal.h>
  35
  36 #include <rtw_mp.h>
  37 #include <rtw_iol.h>
  38
  39 #define RTL_IOCTL_WPA_SUPPLICANT        (SIOCIWFIRSTPRIV + 30)
  40
  41 #define SCAN_ITEM_SIZE 768
  42 #define MAX_CUSTOM_LEN 64
  43 #define RATE_COUNT 4
  44
  45 /*  combo scan */
  46 #define WEXT_CSCAN_AMOUNT 9
  47 #define WEXT_CSCAN_BUF_LEN              360
  48 #define WEXT_CSCAN_HEADER               "CSCAN S\x01\x00\x00S\x00"
  49 #define WEXT_CSCAN_HEADER_SIZE          12
  50 #define WEXT_CSCAN_SSID_SECTION         'S'
  51 #define WEXT_CSCAN_CHANNEL_SECTION      'C'
  52 #define WEXT_CSCAN_NPROBE_SECTION       'N'
  53 #define WEXT_CSCAN_ACTV_DWELL_SECTION   'A'
  54 #define WEXT_CSCAN_PASV_DWELL_SECTION   'P'
  55 #define WEXT_CSCAN_HOME_DWELL_SECTION   'H'
  56 #define WEXT_CSCAN_TYPE_SECTION         'T'
  57
  58 static struct mp_ioctl_handler mp_ioctl_hdl[] = {
  59 /*0*/   GEN_HANDLER(sizeof(u32), rtl8188eu_oid_rt_pro_start_test_hdl, OID_RT_PRO_START_TEST)
  60         GEN_HANDLER(sizeof(u32), rtl8188eu_oid_rt_pro_stop_test_hdl, OID_RT_PRO_STOP_TEST)
  61
  62         GEN_HANDLER(sizeof(struct rwreg_param), rtl8188eu_oid_rt_pro_read_register_hdl, OID_RT_PRO_READ_REGISTER)
  63         GEN_HANDLER(sizeof(struct rwreg_param), rtl8188eu_oid_rt_pro_write_register_hdl, OID_RT_PRO_WRITE_REGISTER)
  64         GEN_HANDLER(sizeof(struct bb_reg_param), rtl8188eu_oid_rt_pro_read_bb_reg_hdl, OID_RT_PRO_READ_BB_REG)
  65 /*5*/   GEN_HANDLER(sizeof(struct bb_reg_param), rtl8188eu_oid_rt_pro_write_bb_reg_hdl, OID_RT_PRO_WRITE_BB_REG)
  66         GEN_HANDLER(sizeof(struct rf_reg_param), rtl8188eu_oid_rt_pro_read_rf_reg_hdl, OID_RT_PRO_RF_READ_REGISTRY)
  67         GEN_HANDLER(sizeof(struct rf_reg_param), rtl8188eu_oid_rt_pro_write_rf_reg_hdl, OID_RT_PRO_RF_WRITE_REGISTRY)
  68
  69         GEN_HANDLER(sizeof(u32), rtl8188eu_oid_rt_pro_set_channel_direct_call_hdl, OID_RT_PRO_SET_CHANNEL_DIRECT_CALL)
  70         GEN_HANDLER(sizeof(struct txpower_param), rtl8188eu_oid_rt_pro_set_tx_power_control_hdl, OID_RT_PRO_SET_TX_POWER_CONTROL)
  71 /*10*/  GEN_HANDLER(sizeof(u32), rtl8188eu_oid_rt_pro_set_data_rate_hdl, OID_RT_PRO_SET_DATA_RATE)
  72         GEN_HANDLER(sizeof(u32), rtl8188eu_oid_rt_set_bandwidth_hdl, OID_RT_SET_BANDWIDTH)
  73         GEN_HANDLER(sizeof(u32), rtl8188eu_oid_rt_pro_set_antenna_bb_hdl, OID_RT_PRO_SET_ANTENNA_BB)
  74
  75         GEN_HANDLER(sizeof(u32), rtl8188eu_oid_rt_pro_set_continuous_tx_hdl, OID_RT_PRO_SET_CONTINUOUS_TX)
  76         GEN_HANDLER(sizeof(u32), rtl8188eu_oid_rt_pro_set_single_carrier_tx_hdl, OID_RT_PRO_SET_SINGLE_CARRIER_TX)
  77 /*15*/  GEN_HANDLER(sizeof(u32), rtl8188eu_oid_rt_pro_set_carrier_suppression_tx_hdl, OID_RT_PRO_SET_CARRIER_SUPPRESSION_TX)
  78         GEN_HANDLER(sizeof(u32), rtl8188eu_oid_rt_pro_set_single_tone_tx_hdl, OID_RT_PRO_SET_SINGLE_TONE_TX)
  79
  80         EXT_MP_IOCTL_HANDLER(0, xmit_packet, 0)
  81
  82         GEN_HANDLER(sizeof(u32), rtl8188eu_oid_rt_set_rx_packet_type_hdl, OID_RT_SET_RX_PACKET_TYPE)
  83         GEN_HANDLER(0, rtl8188eu_oid_rt_reset_phy_rx_packet_count_hdl, OID_RT_RESET_PHY_RX_PACKET_COUNT)
  84 /*20*/  GEN_HANDLER(sizeof(u32), rtl8188eu_oid_rt_get_phy_rx_packet_received_hdl, OID_RT_GET_PHY_RX_PACKET_RECEIVED)
  85         GEN_HANDLER(sizeof(u32), rtl8188eu_oid_rt_get_phy_rx_packet_crc32_error_hdl, OID_RT_GET_PHY_RX_PACKET_CRC32_ERROR)
  86
  87         GEN_HANDLER(sizeof(struct eeprom_rw_param), NULL, 0)
  88         GEN_HANDLER(sizeof(struct eeprom_rw_param), NULL, 0)
  89         GEN_HANDLER(sizeof(struct efuse_access_struct), rtl8188eu_oid_rt_pro_efuse_hdl, OID_RT_PRO_EFUSE)
  90 /*25*/  GEN_HANDLER(0, rtl8188eu_oid_rt_pro_efuse_map_hdl, OID_RT_PRO_EFUSE_MAP)
  91         GEN_HANDLER(sizeof(u32), rtl8188eu_oid_rt_get_efuse_max_size_hdl, OID_RT_GET_EFUSE_MAX_SIZE)
  92         GEN_HANDLER(sizeof(u32), rtl8188eu_oid_rt_get_efuse_current_size_hdl, OID_RT_GET_EFUSE_CURRENT_SIZE)
  93
  94         GEN_HANDLER(sizeof(u32), rtl8188eu_oid_rt_get_thermal_meter_hdl, OID_RT_PRO_GET_THERMAL_METER)
  95         GEN_HANDLER(sizeof(u8), rtl8188eu_oid_rt_pro_set_power_tracking_hdl, OID_RT_PRO_SET_POWER_TRACKING)
  96 /*30*/  GEN_HANDLER(sizeof(u8), rtl8188eu_oid_rt_set_power_down_hdl, OID_RT_SET_POWER_DOWN)
  97 /*31*/  GEN_HANDLER(0, rtl8188eu_oid_rt_pro_trigger_gpio_hdl, 0)
  98 };
  99
 100 static u32 rtw_rates[] = {1000000, 2000000, 5500000, 11000000,
 101         6000000, 9000000, 12000000, 18000000, 24000000, 36000000,
 102         48000000, 54000000};
 103
 104 static const char * const iw_operation_mode[] = {
 105         "Auto", "Ad-Hoc", "Managed",  "Master", "Repeater",
 106         "Secondary", "Monitor"
 107 };
 108
 109 static int hex2num_i(char c)
 110 {
 111         if (c >= '0' && c <= '9')
 112                 return c - '0';
 113         if (c >= 'a' && c <= 'f')
 114                 return c - 'a' + 10;
 115         if (c >= 'A' && c <= 'F')
 116                 return c - 'A' + 10;
 117         return -1;
 118 }
 119
 120 /**
 121  * hwaddr_aton - Convert ASCII string to MAC address
 122  * @txt: MAC address as a string (e.g., "00:11:22:33:44:55")
 123  * @addr: Buffer for the MAC address (ETH_ALEN = 6 bytes)
 124  * Returns: 0 on success, -1 on failure (e.g., string not a MAC address)
 125  */
 126 static int hwaddr_aton_i(const char *txt, u8 *addr)
 127 {
 128         int i;
 129
 130         for (i = 0; i < 6; i++) {
 131                 int a, b;
 132
 133                 a = hex2num_i(*txt++);
 134                 if (a < 0)
 135                         return -1;
 136                 b = hex2num_i(*txt++);
 137                 if (b < 0)
 138                         return -1;
 139                 *addr++ = (a << 4) | b;
 140                 if (i < 5 && *txt++ != ':')
 141                         return -1;
 142         }
 143
 144         return 0;
 145 }
 146
 147 void indicate_wx_scan_complete_event(struct adapter *padapter)
 148 {
 149         union iwreq_data wrqu;
 150
 151         _rtw_memset(&wrqu, 0, sizeof(union iwreq_data));
 152         wireless_send_event(padapter->pnetdev, SIOCGIWSCAN, &wrqu, NULL);
 153 }
 154
 155 void rtw_indicate_wx_assoc_event(struct adapter *padapter)
 156 {
 157         union iwreq_data wrqu;
 158         struct  mlme_priv *pmlmepriv = &padapter->mlmepriv;
 159
 160         _rtw_memset(&wrqu, 0, sizeof(union iwreq_data));
 161
 162         wrqu.ap_addr.sa_family = ARPHRD_ETHER;
 163
 164         memcpy(wrqu.ap_addr.sa_data, pmlmepriv->cur_network.network.MacAddress, ETH_ALEN);
 165
 166         DBG_88E_LEVEL(_drv_always_, "assoc success\n");
 167         wireless_send_event(padapter->pnetdev, SIOCGIWAP, &wrqu, NULL);
 168 }
 169
 170 void rtw_indicate_wx_disassoc_event(struct adapter *padapter)
 171 {
 172         union iwreq_data wrqu;
 173
 174         _rtw_memset(&wrqu, 0, sizeof(union iwreq_data));
 175
 176         wrqu.ap_addr.sa_family = ARPHRD_ETHER;
 177         _rtw_memset(wrqu.ap_addr.sa_data, 0, ETH_ALEN);
 178
 179         DBG_88E_LEVEL(_drv_always_, "indicate disassoc\n");
 180         wireless_send_event(padapter->pnetdev, SIOCGIWAP, &wrqu, NULL);
 181 }
 182
 183 static char *translate_scan(struct adapter *padapter,
 184                             struct iw_request_info *info,
 185                             struct wlan_network *pnetwork,
 186                             char *start, char *stop)
 187 {
 188         struct mlme_priv *pmlmepriv = &(padapter->mlmepriv);
 189         struct iw_event iwe;
 190         u16 cap;
 191         __le16 le_tmp;
 192         u32 ht_ielen = 0;
 193         char custom[MAX_CUSTOM_LEN];
 194         char *p;
 195         u16 max_rate = 0, rate, ht_cap = false;
 196         u32 i = 0;
 197         u8 bw_40MHz = 0, short_GI = 0;
 198         u16 mcs_rate = 0;
 199         u8 ss, sq;
 200 #ifdef CONFIG_88EU_P2P
 201         struct wifidirect_info *pwdinfo = &padapter->wdinfo;
 202
 203         if (!rtw_p2p_chk_state(pwdinfo, P2P_STATE_NONE)) {
 204                 u32     blnGotP2PIE = false;
 205
 206                 /*      User is doing the P2P device discovery */
 207                 /*      The prefix of SSID should be "DIRECT-" and the IE should contains the P2P IE. */
 208                 /*      If not, the driver should ignore this AP and go to the next AP. */
 209
 210                 /*      Verifying the SSID */
 211                 if (!memcmp(pnetwork->network.Ssid.Ssid, pwdinfo->p2p_wildcard_ssid, P2P_WILDCARD_SSID_LEN)) {
 212                         u32     p2pielen = 0;
 213
 214                         if (pnetwork->network.Reserved[0] == 2) {/*  Probe Request */
 215                                 /*      Verifying the P2P IE */
 216                                 if (rtw_get_p2p_ie(pnetwork->network.IEs, pnetwork->network.IELength, NULL, &p2pielen))
 217                                         blnGotP2PIE = true;
 218                         } else {/*  Beacon or Probe Respones */
 219                                 /*      Verifying the P2P IE */
 220                                 if (rtw_get_p2p_ie(&pnetwork->network.IEs[12], pnetwork->network.IELength - 12, NULL, &p2pielen))
 221                                         blnGotP2PIE = true;
 222                         }
 223                 }
 224
 225                 if (!blnGotP2PIE)
 226                         return start;
 227         }
 228 #endif /* CONFIG_88EU_P2P */
 229
 230         /*  AP MAC address  */
 231         iwe.cmd = SIOCGIWAP;
 232         iwe.u.ap_addr.sa_family = ARPHRD_ETHER;
 233
 234         memcpy(iwe.u.ap_addr.sa_data, pnetwork->network.MacAddress, ETH_ALEN);
 235         start = iwe_stream_add_event(info, start, stop, &iwe, IW_EV_ADDR_LEN);
 236
 237         /* Add the ESSID */
 238         iwe.cmd = SIOCGIWESSID;
 239         iwe.u.data.flags = 1;
 240         iwe.u.data.length = min_t(u16, pnetwork->network.Ssid.SsidLength, 32);
 241         start = iwe_stream_add_point(info, start, stop, &iwe, pnetwork->network.Ssid.Ssid);
 242
 243         /* parsing HT_CAP_IE */
 244         p = rtw_get_ie(&pnetwork->network.IEs[12], _HT_CAPABILITY_IE_, &ht_ielen, pnetwork->network.IELength-12);
 245
 246         if (p && ht_ielen > 0) {
 247                 struct rtw_ieee80211_ht_cap *pht_capie;
 248                 ht_cap = true;
 249                 pht_capie = (struct rtw_ieee80211_ht_cap *)(p+2);
 250                 memcpy(&mcs_rate, pht_capie->supp_mcs_set, 2);
 251                 bw_40MHz = (pht_capie->cap_info&IEEE80211_HT_CAP_SUP_WIDTH) ? 1 : 0;
 252                 short_GI = (pht_capie->cap_info&(IEEE80211_HT_CAP_SGI_20|IEEE80211_HT_CAP_SGI_40)) ? 1 : 0;
 253         }
 254
 255         /* Add the protocol name */
 256         iwe.cmd = SIOCGIWNAME;
 257         if ((rtw_is_cckratesonly_included((u8 *)&pnetwork->network.SupportedRates))) {
 258                 if (ht_cap)
 259                         snprintf(iwe.u.name, IFNAMSIZ, "IEEE 802.11bn");
 260                 else
 261                 snprintf(iwe.u.name, IFNAMSIZ, "IEEE 802.11b");
 262         } else if ((rtw_is_cckrates_included((u8 *)&pnetwork->network.SupportedRates))) {
 263                 if (ht_cap)
 264                         snprintf(iwe.u.name, IFNAMSIZ, "IEEE 802.11bgn");
 265                 else
 266                         snprintf(iwe.u.name, IFNAMSIZ, "IEEE 802.11bg");
 267         } else {
 268                 if (pnetwork->network.Configuration.DSConfig > 14) {
 269                         if (ht_cap)
 270                                 snprintf(iwe.u.name, IFNAMSIZ, "IEEE 802.11an");
 271                         else
 272                                 snprintf(iwe.u.name, IFNAMSIZ, "IEEE 802.11a");
 273                 } else {
 274                         if (ht_cap)
 275                                 snprintf(iwe.u.name, IFNAMSIZ, "IEEE 802.11gn");
 276                         else
 277                                 snprintf(iwe.u.name, IFNAMSIZ, "IEEE 802.11g");
 278                 }
 279         }
 280
 281         start = iwe_stream_add_event(info, start, stop, &iwe, IW_EV_CHAR_LEN);
 282
 283           /* Add mode */
 284         iwe.cmd = SIOCGIWMODE;
 285         memcpy(&le_tmp, rtw_get_capability_from_ie(pnetwork->network.IEs), 2);
 286
 287         cap = le16_to_cpu(le_tmp);
 288
 289         if (cap & (WLAN_CAPABILITY_IBSS | WLAN_CAPABILITY_BSS)) {
 290                 if (cap & WLAN_CAPABILITY_BSS)
 291                         iwe.u.mode = IW_MODE_MASTER;
 292                 else
 293                         iwe.u.mode = IW_MODE_ADHOC;
 294
 295                 start = iwe_stream_add_event(info, start, stop, &iwe, IW_EV_UINT_LEN);
 296         }
 297
 298         if (pnetwork->network.Configuration.DSConfig < 1)
 299                 pnetwork->network.Configuration.DSConfig = 1;
 300
 301          /* Add frequency/channel */
 302         iwe.cmd = SIOCGIWFREQ;
 303         iwe.u.freq.m = rtw_ch2freq(pnetwork->network.Configuration.DSConfig) * 100000;
 304         iwe.u.freq.e = 1;
 305         iwe.u.freq.i = pnetwork->network.Configuration.DSConfig;
 306         start = iwe_stream_add_event(info, start, stop, &iwe, IW_EV_FREQ_LEN);
 307
 308         /* Add encryption capability */
 309         iwe.cmd = SIOCGIWENCODE;
 310         if (cap & WLAN_CAPABILITY_PRIVACY)
 311                 iwe.u.data.flags = IW_ENCODE_ENABLED | IW_ENCODE_NOKEY;
 312         else
 313                 iwe.u.data.flags = IW_ENCODE_DISABLED;
 314         iwe.u.data.length = 0;
 315         start = iwe_stream_add_point(info, start, stop, &iwe, pnetwork->network.Ssid.Ssid);
 316
 317         /*Add basic and extended rates */
 318         max_rate = 0;
 319         p = custom;
 320         p += snprintf(p, MAX_CUSTOM_LEN - (p - custom), " Rates (Mb/s): ");
 321         while (pnetwork->network.SupportedRates[i] != 0) {
 322                 rate = pnetwork->network.SupportedRates[i]&0x7F;
 323                 if (rate > max_rate)
 324                         max_rate = rate;
 325                 p += snprintf(p, MAX_CUSTOM_LEN - (p - custom),
 326                               "%d%s ", rate >> 1, (rate & 1) ? ".5" : "");
 327                 i++;
 328         }
 329
 330         if (ht_cap) {
 331                 if (mcs_rate&0x8000)/* MCS15 */
 332                         max_rate = (bw_40MHz) ? ((short_GI) ? 300 : 270) : ((short_GI) ? 144 : 130);
 333                 else if (mcs_rate&0x0080)/* MCS7 */
 334                         ;
 335                 else/* default MCS7 */
 336                         max_rate = (bw_40MHz) ? ((short_GI) ? 150 : 135) : ((short_GI) ? 72 : 65);
 337
 338                 max_rate = max_rate*2;/* Mbps/2; */
 339         }
 340
 341         iwe.cmd = SIOCGIWRATE;
 342         iwe.u.bitrate.fixed = 0;
 343         iwe.u.bitrate.disabled = 0;
 344         iwe.u.bitrate.value = max_rate * 500000;
 345         start = iwe_stream_add_event(info, start, stop, &iwe, IW_EV_PARAM_LEN);
 346
 347         /* parsing WPA/WPA2 IE */
 348         {
 349                 u8 buf[MAX_WPA_IE_LEN];
 350                 u8 wpa_ie[255], rsn_ie[255];
 351                 u16 wpa_len = 0, rsn_len = 0;
 352                 u8 *p;
 353
 354                 rtw_get_sec_ie(pnetwork->network.IEs, pnetwork->network.IELength, rsn_ie, &rsn_len, wpa_ie, &wpa_len);
 355                 RT_TRACE(_module_rtl871x_mlme_c_, _drv_info_, ("rtw_wx_get_scan: ssid =%s\n", pnetwork->network.Ssid.Ssid));
 356                 RT_TRACE(_module_rtl871x_mlme_c_, _drv_info_, ("rtw_wx_get_scan: wpa_len =%d rsn_len =%d\n", wpa_len, rsn_len));
 357
 358                 if (wpa_len > 0) {
 359                         p = buf;
 360                         _rtw_memset(buf, 0, MAX_WPA_IE_LEN);
 361                         p += sprintf(p, "wpa_ie =");
 362                         for (i = 0; i < wpa_len; i++)
 363                                 p += sprintf(p, "%02x", wpa_ie[i]);
 364
 365                         _rtw_memset(&iwe, 0, sizeof(iwe));
 366                         iwe.cmd = IWEVCUSTOM;
 367                         iwe.u.data.length = strlen(buf);
 368                         start = iwe_stream_add_point(info, start, stop, &iwe, buf);
 369
 370                         _rtw_memset(&iwe, 0, sizeof(iwe));
 371                         iwe.cmd = IWEVGENIE;
 372                         iwe.u.data.length = wpa_len;
 373                         start = iwe_stream_add_point(info, start, stop, &iwe, wpa_ie);
 374                 }
 375                 if (rsn_len > 0) {
 376                         p = buf;
 377                         _rtw_memset(buf, 0, MAX_WPA_IE_LEN);
 378                         p += sprintf(p, "rsn_ie =");
 379                         for (i = 0; i < rsn_len; i++)
 380                                 p += sprintf(p, "%02x", rsn_ie[i]);
 381                         _rtw_memset(&iwe, 0, sizeof(iwe));
 382                         iwe.cmd = IWEVCUSTOM;
 383                         iwe.u.data.length = strlen(buf);
 384                         start = iwe_stream_add_point(info, start, stop, &iwe, buf);
 385
 386                         _rtw_memset(&iwe, 0, sizeof(iwe));
 387                         iwe.cmd = IWEVGENIE;
 388                         iwe.u.data.length = rsn_len;
 389                         start = iwe_stream_add_point(info, start, stop, &iwe, rsn_ie);
 390                 }
 391         }
 392
 393         {/* parsing WPS IE */
 394                 uint cnt = 0, total_ielen;
 395                 u8 *wpsie_ptr = NULL;
 396                 uint wps_ielen = 0;
 397
 398                 u8 *ie_ptr = pnetwork->network.IEs + _FIXED_IE_LENGTH_;
 399                 total_ielen = pnetwork->network.IELength - _FIXED_IE_LENGTH_;
 400
 401                 while (cnt < total_ielen) {
 402                         if (rtw_is_wps_ie(&ie_ptr[cnt], &wps_ielen) && (wps_ielen > 2)) {
 403                                 wpsie_ptr = &ie_ptr[cnt];
 404                                 iwe.cmd = IWEVGENIE;
 405                                 iwe.u.data.length = (u16)wps_ielen;
 406                                 start = iwe_stream_add_point(info, start, stop, &iwe, wpsie_ptr);
 407                         }
 408                         cnt += ie_ptr[cnt+1]+2; /* goto next */
 409                 }
 410         }
 411
 412         /* Add quality statistics */
 413         iwe.cmd = IWEVQUAL;
 414         iwe.u.qual.updated = IW_QUAL_QUAL_UPDATED | IW_QUAL_LEVEL_UPDATED | IW_QUAL_NOISE_INVALID;
 415
 416         if (check_fwstate(pmlmepriv, _FW_LINKED) == true &&
 417             is_same_network(&pmlmepriv->cur_network.network, &pnetwork->network)) {
 418                 ss = padapter->recvpriv.signal_strength;
 419                 sq = padapter->recvpriv.signal_qual;
 420         } else {
 421                 ss = pnetwork->network.PhyInfo.SignalStrength;
 422                 sq = pnetwork->network.PhyInfo.SignalQuality;
 423         }
 424
 425         iwe.u.qual.level = (u8)ss;
 426         iwe.u.qual.qual = (u8)sq;   /*  signal quality */
 427         iwe.u.qual.noise = 0; /*  noise level */
 428         start = iwe_stream_add_event(info, start, stop, &iwe, IW_EV_QUAL_LEN);
 429         return start;
 430 }
 431
 432 static int wpa_set_auth_algs(struct net_device *dev, u32 value)
 433 {
 434         struct adapter *padapter = (struct adapter *)rtw_netdev_priv(dev);
 435         int ret = 0;
 436
 437         if ((value & AUTH_ALG_SHARED_KEY) && (value & AUTH_ALG_OPEN_SYSTEM)) {
 438                 DBG_88E("wpa_set_auth_algs, AUTH_ALG_SHARED_KEY and  AUTH_ALG_OPEN_SYSTEM [value:0x%x]\n", value);
 439                 padapter->securitypriv.ndisencryptstatus = Ndis802_11Encryption1Enabled;
 440                 padapter->securitypriv.ndisauthtype = Ndis802_11AuthModeAutoSwitch;
 441                 padapter->securitypriv.dot11AuthAlgrthm = dot11AuthAlgrthm_Auto;
 442         } else if (value & AUTH_ALG_SHARED_KEY) {
 443                 DBG_88E("wpa_set_auth_algs, AUTH_ALG_SHARED_KEY  [value:0x%x]\n", value);
 444                 padapter->securitypriv.ndisencryptstatus = Ndis802_11Encryption1Enabled;
 445
 446                 padapter->securitypriv.ndisauthtype = Ndis802_11AuthModeShared;
 447                 padapter->securitypriv.dot11AuthAlgrthm = dot11AuthAlgrthm_Shared;
 448         } else if (value & AUTH_ALG_OPEN_SYSTEM) {
 449                 DBG_88E("wpa_set_auth_algs, AUTH_ALG_OPEN_SYSTEM\n");
 450                 if (padapter->securitypriv.ndisauthtype < Ndis802_11AuthModeWPAPSK) {
 451                         padapter->securitypriv.ndisauthtype = Ndis802_11AuthModeOpen;
 452                         padapter->securitypriv.dot11AuthAlgrthm = dot11AuthAlgrthm_Open;
 453                 }
 454         } else if (value & AUTH_ALG_LEAP) {
 455                 DBG_88E("wpa_set_auth_algs, AUTH_ALG_LEAP\n");
 456         } else {
 457                 DBG_88E("wpa_set_auth_algs, error!\n");
 458                 ret = -EINVAL;
 459         }
 460         return ret;
 461 }
 462
 463 static int wpa_set_encryption(struct net_device *dev, struct ieee_param *param, u32 param_len)
 464 {
 465         int ret = 0;
 466         u32 wep_key_idx, wep_key_len, wep_total_len;
 467         struct ndis_802_11_wep   *pwep = NULL;
 468         struct adapter *padapter = (struct adapter *)rtw_netdev_priv(dev);
 469         struct mlme_priv        *pmlmepriv = &padapter->mlmepriv;
 470         struct security_priv *psecuritypriv = &padapter->securitypriv;
 471 #ifdef CONFIG_88EU_P2P
 472         struct wifidirect_info *pwdinfo = &padapter->wdinfo;
 473 #endif /* CONFIG_88EU_P2P */
 474
 475 _func_enter_;
 476
 477         param->u.crypt.err = 0;
 478         param->u.crypt.alg[IEEE_CRYPT_ALG_NAME_LEN - 1] = '\0';
 479
 480         if (param_len < (u32) ((u8 *)param->u.crypt.key - (u8 *)param) + param->u.crypt.key_len) {
 481                 ret =  -EINVAL;
 482                 goto exit;
 483         }
 484
 485         if (param->sta_addr[0] == 0xff && param->sta_addr[1] == 0xff &&
 486             param->sta_addr[2] == 0xff && param->sta_addr[3] == 0xff &&
 487             param->sta_addr[4] == 0xff && param->sta_addr[5] == 0xff) {
 488                 if (param->u.crypt.idx >= WEP_KEYS) {
 489                         ret = -EINVAL;
 490                         goto exit;
 491                 }
 492         } else {
 493                 ret = -EINVAL;
 494                 goto exit;
 495         }
 496
 497         if (strcmp(param->u.crypt.alg, "WEP") == 0) {
 498                 RT_TRACE(_module_rtl871x_ioctl_os_c, _drv_err_, ("wpa_set_encryption, crypt.alg = WEP\n"));
 499                 DBG_88E("wpa_set_encryption, crypt.alg = WEP\n");
 500
 501                 padapter->securitypriv.ndisencryptstatus = Ndis802_11Encryption1Enabled;
 502                 padapter->securitypriv.dot11PrivacyAlgrthm = _WEP40_;
 503                 padapter->securitypriv.dot118021XGrpPrivacy = _WEP40_;
 504
 505                 wep_key_idx = param->u.crypt.idx;
 506                 wep_key_len = param->u.crypt.key_len;
 507
 508                 RT_TRACE(_module_rtl871x_ioctl_os_c, _drv_info_, ("(1)wep_key_idx =%d\n", wep_key_idx));
 509                 DBG_88E("(1)wep_key_idx =%d\n", wep_key_idx);
 510
 511                 if (wep_key_idx > WEP_KEYS)
 512                         return -EINVAL;
 513
 514                 RT_TRACE(_module_rtl871x_ioctl_os_c, _drv_info_, ("(2)wep_key_idx =%d\n", wep_key_idx));
 515
 516                 if (wep_key_len > 0) {
 517                         wep_key_len = wep_key_len <= 5 ? 5 : 13;
 518                         wep_total_len = wep_key_len + FIELD_OFFSET(struct ndis_802_11_wep, KeyMaterial);
 519                         pwep = (struct ndis_802_11_wep *)rtw_malloc(wep_total_len);
 520                         if (pwep == NULL) {
 521                                 RT_TRACE(_module_rtl871x_ioctl_os_c, _drv_err_, (" wpa_set_encryption: pwep allocate fail !!!\n"));
 522                                 goto exit;
 523                         }
 524                         _rtw_memset(pwep, 0, wep_total_len);
 525                         pwep->KeyLength = wep_key_len;
 526                         pwep->Length = wep_total_len;
 527                         if (wep_key_len == 13) {
 528                                 padapter->securitypriv.dot11PrivacyAlgrthm = _WEP104_;
 529                                 padapter->securitypriv.dot118021XGrpPrivacy = _WEP104_;
 530                         }
 531                 } else {
 532                         ret = -EINVAL;
 533                         goto exit;
 534                 }
 535                 pwep->KeyIndex = wep_key_idx;
 536                 pwep->KeyIndex |= 0x80000000;
 537                 memcpy(pwep->KeyMaterial,  param->u.crypt.key, pwep->KeyLength);
 538                 if (param->u.crypt.set_tx) {
 539                         DBG_88E("wep, set_tx = 1\n");
 540                         if (rtw_set_802_11_add_wep(padapter, pwep) == (u8)_FAIL)
 541                                 ret = -EOPNOTSUPP;
 542                 } else {
 543                         DBG_88E("wep, set_tx = 0\n");
 544                         if (wep_key_idx >= WEP_KEYS) {
 545                                 ret = -EOPNOTSUPP;
 546                                 goto exit;
 547                         }
 548                       memcpy(&(psecuritypriv->dot11DefKey[wep_key_idx].skey[0]), pwep->KeyMaterial, pwep->KeyLength);
 549                         psecuritypriv->dot11DefKeylen[wep_key_idx] = pwep->KeyLength;
 550                         rtw_set_key(padapter, psecuritypriv, wep_key_idx, 0);
 551                 }
 552                 goto exit;
 553         }
 554
 555         if (padapter->securitypriv.dot11AuthAlgrthm == dot11AuthAlgrthm_8021X) { /*  802_1x */
 556                 struct sta_info *psta, *pbcmc_sta;
 557                 struct sta_priv *pstapriv = &padapter->stapriv;
 558
 559                 if (check_fwstate(pmlmepriv, WIFI_STATION_STATE | WIFI_MP_STATE)) { /* sta mode */
 560                         psta = rtw_get_stainfo(pstapriv, get_bssid(pmlmepriv));
 561                         if (psta == NULL) {
 562                                 ;
 563                         } else {
 564                                 if (strcmp(param->u.crypt.alg, "none") != 0)
 565                                         psta->ieee8021x_blocked = false;
 566
 567                                 if ((padapter->securitypriv.ndisencryptstatus == Ndis802_11Encryption2Enabled) ||
 568                                     (padapter->securitypriv.ndisencryptstatus ==  Ndis802_11Encryption3Enabled))
 569                                         psta->dot118021XPrivacy = padapter->securitypriv.dot11PrivacyAlgrthm;
 570
 571                                 if (param->u.crypt.set_tx == 1) { /* pairwise key */
 572                                         memcpy(psta->dot118021x_UncstKey.skey,  param->u.crypt.key, (param->u.crypt.key_len > 16 ? 16 : param->u.crypt.key_len));
 573
 574                                         if (strcmp(param->u.crypt.alg, "TKIP") == 0) { /* set mic key */
 575                                                 memcpy(psta->dot11tkiptxmickey.skey, &(param->u.crypt.key[16]), 8);
 576                                                 memcpy(psta->dot11tkiprxmickey.skey, &(param->u.crypt.key[24]), 8);
 577                                                 padapter->securitypriv.busetkipkey = false;
 578                                         }
 579
 580                                         DBG_88E(" ~~~~set sta key:unicastkey\n");
 581
 582                                         rtw_setstakey_cmd(padapter, (unsigned char *)psta, true);
 583                                 } else { /* group key */
 584                                         memcpy(padapter->securitypriv.dot118021XGrpKey[param->u.crypt.idx].skey,  param->u.crypt.key, (param->u.crypt.key_len > 16 ? 16 : param->u.crypt.key_len));
 585                                         memcpy(padapter->securitypriv.dot118021XGrptxmickey[param->u.crypt.idx].skey, &(param->u.crypt.key[16]), 8);
 586                                         memcpy(padapter->securitypriv.dot118021XGrprxmickey[param->u.crypt.idx].skey, &(param->u.crypt.key[24]), 8);
 587                                         padapter->securitypriv.binstallGrpkey = true;
 588                                         DBG_88E(" ~~~~set sta key:groupkey\n");
 589
 590                                         padapter->securitypriv.dot118021XGrpKeyid = param->u.crypt.idx;
 591
 592                                         rtw_set_key(padapter, &padapter->securitypriv, param->u.crypt.idx, 1);
 593 #ifdef CONFIG_88EU_P2P
 594                                         if (rtw_p2p_chk_state(pwdinfo, P2P_STATE_PROVISIONING_ING))
 595                                                 rtw_p2p_set_state(pwdinfo, P2P_STATE_PROVISIONING_DONE);
 596 #endif /* CONFIG_88EU_P2P */
 597                                 }
 598                         }
 599                         pbcmc_sta = rtw_get_bcmc_stainfo(padapter);
 600                         if (pbcmc_sta == NULL) {
 601                                 ;
 602                         } else {
 603                                 /* Jeff: don't disable ieee8021x_blocked while clearing key */
 604                                 if (strcmp(param->u.crypt.alg, "none") != 0)
 605                                         pbcmc_sta->ieee8021x_blocked = false;
 606
 607                                 if ((padapter->securitypriv.ndisencryptstatus == Ndis802_11Encryption2Enabled) ||
 608                                     (padapter->securitypriv.ndisencryptstatus ==  Ndis802_11Encryption3Enabled))
 609                                         pbcmc_sta->dot118021XPrivacy = padapter->securitypriv.dot11PrivacyAlgrthm;
 610                         }
 611                 }
 612         }
 613
 614 exit:
 615
 616         kfree(pwep);
 617
 618 _func_exit_;
 619
 620         return ret;
 621 }
 622
 623 static int rtw_set_wpa_ie(struct adapter *padapter, char *pie, unsigned short ielen)
 624 {
 625         u8 *buf = NULL;
 626         int group_cipher = 0, pairwise_cipher = 0;
 627         int ret = 0;
 628 #ifdef CONFIG_88EU_P2P
 629         struct wifidirect_info *pwdinfo = &padapter->wdinfo;
 630 #endif /* CONFIG_88EU_P2P */
 631
 632         if ((ielen > MAX_WPA_IE_LEN) || (pie == NULL)) {
 633                 _clr_fwstate_(&padapter->mlmepriv, WIFI_UNDER_WPS);
 634                 if (pie == NULL)
 635                         return ret;
 636                 else
 637                         return -EINVAL;
 638         }
 639
 640         if (ielen) {
 641                 buf = rtw_zmalloc(ielen);
 642                 if (buf == NULL) {
 643                         ret =  -ENOMEM;
 644                         goto exit;
 645                 }
 646
 647                 memcpy(buf, pie, ielen);
 648
 649                 /* dump */
 650                 {
 651                         int i;
 652                         DBG_88E("\n wpa_ie(length:%d):\n", ielen);
 653                         for (i = 0; i < ielen; i += 8)
 654                                 DBG_88E("0x%.2x 0x%.2x 0x%.2x 0x%.2x 0x%.2x 0x%.2x 0x%.2x 0x%.2x\n", buf[i], buf[i+1], buf[i+2], buf[i+3], buf[i+4], buf[i+5], buf[i+6], buf[i+7]);
 655                 }
 656
 657                 if (ielen < RSN_HEADER_LEN) {
 658                         RT_TRACE(_module_rtl871x_ioctl_os_c, _drv_err_, ("Ie len too short %d\n", ielen));
 659                         ret  = -1;
 660                         goto exit;
 661                 }
 662
 663                 if (rtw_parse_wpa_ie(buf, ielen, &group_cipher, &pairwise_cipher, NULL) == _SUCCESS) {
 664                         padapter->securitypriv.dot11AuthAlgrthm = dot11AuthAlgrthm_8021X;
 665                         padapter->securitypriv.ndisauthtype = Ndis802_11AuthModeWPAPSK;
 666                         memcpy(padapter->securitypriv.supplicant_ie, &buf[0], ielen);
 667                 }
 668
 669                 if (rtw_parse_wpa2_ie(buf, ielen, &group_cipher, &pairwise_cipher, NULL) == _SUCCESS) {
 670                         padapter->securitypriv.dot11AuthAlgrthm = dot11AuthAlgrthm_8021X;
 671                         padapter->securitypriv.ndisauthtype = Ndis802_11AuthModeWPA2PSK;
 672                         memcpy(padapter->securitypriv.supplicant_ie, &buf[0], ielen);
 673                 }
 674
 675                 switch (group_cipher) {
 676                 case WPA_CIPHER_NONE:
 677                         padapter->securitypriv.dot118021XGrpPrivacy = _NO_PRIVACY_;
 678                         padapter->securitypriv.ndisencryptstatus = Ndis802_11EncryptionDisabled;
 679                         break;
 680                 case WPA_CIPHER_WEP40:
 681                         padapter->securitypriv.dot118021XGrpPrivacy = _WEP40_;
 682                         padapter->securitypriv.ndisencryptstatus = Ndis802_11Encryption1Enabled;
 683                         break;
 684                 case WPA_CIPHER_TKIP:
 685                         padapter->securitypriv.dot118021XGrpPrivacy = _TKIP_;
 686                         padapter->securitypriv.ndisencryptstatus = Ndis802_11Encryption2Enabled;
 687                         break;
 688                 case WPA_CIPHER_CCMP:
 689                         padapter->securitypriv.dot118021XGrpPrivacy = _AES_;
 690                         padapter->securitypriv.ndisencryptstatus = Ndis802_11Encryption3Enabled;
 691                         break;
 692                 case WPA_CIPHER_WEP104:
 693                         padapter->securitypriv.dot118021XGrpPrivacy = _WEP104_;
 694                         padapter->securitypriv.ndisencryptstatus = Ndis802_11Encryption1Enabled;
 695                         break;
 696                 }
 697
 698                 switch (pairwise_cipher) {
 699                 case WPA_CIPHER_NONE:
 700                         padapter->securitypriv.dot11PrivacyAlgrthm = _NO_PRIVACY_;
 701                         padapter->securitypriv.ndisencryptstatus = Ndis802_11EncryptionDisabled;
 702                         break;
 703                 case WPA_CIPHER_WEP40:
 704                         padapter->securitypriv.dot11PrivacyAlgrthm = _WEP40_;
 705                         padapter->securitypriv.ndisencryptstatus = Ndis802_11Encryption1Enabled;
 706                         break;
 707                 case WPA_CIPHER_TKIP:
 708                         padapter->securitypriv.dot11PrivacyAlgrthm = _TKIP_;
 709                         padapter->securitypriv.ndisencryptstatus = Ndis802_11Encryption2Enabled;
 710                         break;
 711                 case WPA_CIPHER_CCMP:
 712                         padapter->securitypriv.dot11PrivacyAlgrthm = _AES_;
 713                         padapter->securitypriv.ndisencryptstatus = Ndis802_11Encryption3Enabled;
 714                         break;
 715                 case WPA_CIPHER_WEP104:
 716                         padapter->securitypriv.dot11PrivacyAlgrthm = _WEP104_;
 717                         padapter->securitypriv.ndisencryptstatus = Ndis802_11Encryption1Enabled;
 718                         break;
 719                 }
 720
 721                 _clr_fwstate_(&padapter->mlmepriv, WIFI_UNDER_WPS);
 722                 {/* set wps_ie */
 723                         u16 cnt = 0;
 724                         u8 eid, wps_oui[4] = {0x0, 0x50, 0xf2, 0x04};
 725
 726                         while (cnt < ielen) {
 727                                 eid = buf[cnt];
 728                                 if ((eid == _VENDOR_SPECIFIC_IE_) && (!memcmp(&buf[cnt+2], wps_oui, 4))) {
 729                                         DBG_88E("SET WPS_IE\n");
 730
 731                                         padapter->securitypriv.wps_ie_len = ((buf[cnt+1]+2) < (MAX_WPA_IE_LEN<<2)) ? (buf[cnt+1]+2) : (MAX_WPA_IE_LEN<<2);
 732
 733                                         memcpy(padapter->securitypriv.wps_ie, &buf[cnt], padapter->securitypriv.wps_ie_len);
 734
 735                                         set_fwstate(&padapter->mlmepriv, WIFI_UNDER_WPS);
 736 #ifdef CONFIG_88EU_P2P
 737                                         if (rtw_p2p_chk_state(pwdinfo, P2P_STATE_GONEGO_OK))
 738                                                 rtw_p2p_set_state(pwdinfo, P2P_STATE_PROVISIONING_ING);
 739 #endif /* CONFIG_88EU_P2P */
 740                                         cnt += buf[cnt+1]+2;
 741                                         break;
 742                                 } else {
 743                                         cnt += buf[cnt+1]+2; /* goto next */
 744                                 }
 745                         }
 746                 }
 747         }
 748
 749         RT_TRACE(_module_rtl871x_ioctl_os_c, _drv_info_,
 750                  ("rtw_set_wpa_ie: pairwise_cipher = 0x%08x padapter->securitypriv.ndisencryptstatus =%d padapter->securitypriv.ndisauthtype =%d\n",
 751                  pairwise_cipher, padapter->securitypriv.ndisencryptstatus, padapter->securitypriv.ndisauthtype));
 752 exit:
 753         kfree(buf);
 754         return ret;
 755 }
 756
 757 typedef unsigned char   NDIS_802_11_RATES_EX[NDIS_802_11_LENGTH_RATES_EX];
 758
 759 static int rtw_wx_get_name(struct net_device *dev,
 760                              struct iw_request_info *info,
 761                              union iwreq_data *wrqu, char *extra)
 762 {
 763         struct adapter *padapter = (struct adapter *)rtw_netdev_priv(dev);
 764         u32 ht_ielen = 0;
 765         char *p;
 766         u8 ht_cap = false;
 767         struct  mlme_priv       *pmlmepriv = &(padapter->mlmepriv);
 768         struct wlan_bssid_ex  *pcur_bss = &pmlmepriv->cur_network.network;
 769         NDIS_802_11_RATES_EX *prates = NULL;
 770
 771         RT_TRACE(_module_rtl871x_mlme_c_, _drv_info_, ("cmd_code =%x\n", info->cmd));
 772
 773         _func_enter_;
 774
 775         if (check_fwstate(pmlmepriv, _FW_LINKED|WIFI_ADHOC_MASTER_STATE) == true) {
 776                 /* parsing HT_CAP_IE */
 777                 p = rtw_get_ie(&pcur_bss->IEs[12], _HT_CAPABILITY_IE_, &ht_ielen, pcur_bss->IELength-12);
 778                 if (p && ht_ielen > 0)
 779                         ht_cap = true;
 780
 781                 prates = &pcur_bss->SupportedRates;
 782
 783                 if (rtw_is_cckratesonly_included((u8 *)prates) == true) {
 784                         if (ht_cap)
 785                                 snprintf(wrqu->name, IFNAMSIZ, "IEEE 802.11bn");
 786                         else
 787                                 snprintf(wrqu->name, IFNAMSIZ, "IEEE 802.11b");
 788                 } else if ((rtw_is_cckrates_included((u8 *)prates)) == true) {
 789                         if (ht_cap)
 790                                 snprintf(wrqu->name, IFNAMSIZ, "IEEE 802.11bgn");
 791                         else
 792                                 snprintf(wrqu->name, IFNAMSIZ, "IEEE 802.11bg");
 793                 } else {
 794                         if (pcur_bss->Configuration.DSConfig > 14) {
 795                                 if (ht_cap)
 796                                         snprintf(wrqu->name, IFNAMSIZ, "IEEE 802.11an");
 797                                 else
 798                                         snprintf(wrqu->name, IFNAMSIZ, "IEEE 802.11a");
 799                         } else {
 800                                 if (ht_cap)
 801                                         snprintf(wrqu->name, IFNAMSIZ, "IEEE 802.11gn");
 802                                 else
 803                                         snprintf(wrqu->name, IFNAMSIZ, "IEEE 802.11g");
 804                         }
 805                 }
 806         } else {
 807                 snprintf(wrqu->name, IFNAMSIZ, "unassociated");
 808         }
 809
 810         _func_exit_;
 811
 812         return 0;
 813 }
 814
 815 static int rtw_wx_set_freq(struct net_device *dev,
 816                              struct iw_request_info *info,
 817                              union iwreq_data *wrqu, char *extra)
 818 {
 819         _func_enter_;
 820
 821         RT_TRACE(_module_rtl871x_mlme_c_, _drv_notice_, ("+rtw_wx_set_freq\n"));
 822
 823         _func_exit_;
 824
 825         return 0;
 826 }
 827
 828 static int rtw_wx_get_freq(struct net_device *dev,
 829                              struct iw_request_info *info,
 830                              union iwreq_data *wrqu, char *extra)
 831 {
 832         struct adapter *padapter = (struct adapter *)rtw_netdev_priv(dev);
 833         struct  mlme_priv       *pmlmepriv = &(padapter->mlmepriv);
 834         struct wlan_bssid_ex  *pcur_bss = &pmlmepriv->cur_network.network;
 835
 836         if (check_fwstate(pmlmepriv, _FW_LINKED)) {
 837                 /* wrqu->freq.m = ieee80211_wlan_frequencies[pcur_bss->Configuration.DSConfig-1] * 100000; */
 838                 wrqu->freq.m = rtw_ch2freq(pcur_bss->Configuration.DSConfig) * 100000;
 839                 wrqu->freq.e = 1;
 840                 wrqu->freq.i = pcur_bss->Configuration.DSConfig;
 841         } else {
 842                 wrqu->freq.m = rtw_ch2freq(padapter->mlmeextpriv.cur_channel) * 100000;
 843                 wrqu->freq.e = 1;
 844                 wrqu->freq.i = padapter->mlmeextpriv.cur_channel;
 845         }
 846
 847         return 0;
 848 }
 849
 850 static int rtw_wx_set_mode(struct net_device *dev, struct iw_request_info *a,
 851                              union iwreq_data *wrqu, char *b)
 852 {
 853         struct adapter *padapter = (struct adapter *)rtw_netdev_priv(dev);
 854         enum ndis_802_11_network_infra networkType;
 855         int ret = 0;
 856
 857         _func_enter_;
 858
 859         if (_FAIL == rtw_pwr_wakeup(padapter)) {
 860                 ret = -EPERM;
 861                 goto exit;
 862         }
 863
 864         if (!padapter->hw_init_completed) {
 865                 ret = -EPERM;
 866                 goto exit;
 867         }
 868
 869         switch (wrqu->mode) {
 870         case IW_MODE_AUTO:
 871                 networkType = Ndis802_11AutoUnknown;
 872                 DBG_88E("set_mode = IW_MODE_AUTO\n");
 873                 break;
 874         case IW_MODE_ADHOC:
 875                 networkType = Ndis802_11IBSS;
 876                 DBG_88E("set_mode = IW_MODE_ADHOC\n");
 877                 break;
 878         case IW_MODE_MASTER:
 879                 networkType = Ndis802_11APMode;
 880                 DBG_88E("set_mode = IW_MODE_MASTER\n");
 881                 break;
 882         case IW_MODE_INFRA:
 883                 networkType = Ndis802_11Infrastructure;
 884                 DBG_88E("set_mode = IW_MODE_INFRA\n");
 885                 break;
 886         default:
 887                 ret = -EINVAL;
 888                 RT_TRACE(_module_rtl871x_ioctl_os_c, _drv_err_, ("\n Mode: %s is not supported\n", iw_operation_mode[wrqu->mode]));
 889                 goto exit;
 890         }
 891         if (rtw_set_802_11_infrastructure_mode(padapter, networkType) == false) {
 892                 ret = -EPERM;
 893                 goto exit;
 894         }
 895         rtw_setopmode_cmd(padapter, networkType);
 896 exit:
 897         _func_exit_;
 898         return ret;
 899 }
 900
 901 static int rtw_wx_get_mode(struct net_device *dev, struct iw_request_info *a,
 902                              union iwreq_data *wrqu, char *b)
 903 {
 904         struct adapter *padapter = (struct adapter *)rtw_netdev_priv(dev);
 905         struct  mlme_priv       *pmlmepriv = &(padapter->mlmepriv);
 906
 907         RT_TRACE(_module_rtl871x_mlme_c_, _drv_info_, (" rtw_wx_get_mode\n"));
 908
 909         _func_enter_;
 910
 911         if (check_fwstate(pmlmepriv, WIFI_STATION_STATE))
 912                 wrqu->mode = IW_MODE_INFRA;
 913         else if  ((check_fwstate(pmlmepriv, WIFI_ADHOC_MASTER_STATE)) ||
 914                   (check_fwstate(pmlmepriv, WIFI_ADHOC_STATE)))
 915                 wrqu->mode = IW_MODE_ADHOC;
 916         else if (check_fwstate(pmlmepriv, WIFI_AP_STATE))
 917                 wrqu->mode = IW_MODE_MASTER;
 918         else
 919                 wrqu->mode = IW_MODE_AUTO;
 920
 921         _func_exit_;
 922
 923         return 0;
 924 }
 925
 926 static int rtw_wx_set_pmkid(struct net_device *dev,
 927                             struct iw_request_info *a,
 928                             union iwreq_data *wrqu, char *extra)
 929 {
 930         struct adapter *padapter = (struct adapter *)rtw_netdev_priv(dev);
 931         u8   j, blInserted = false;
 932         int  ret = false;
 933         struct security_priv *psecuritypriv = &padapter->securitypriv;
 934         struct iw_pmksa *pPMK = (struct iw_pmksa *)extra;
 935         u8     strZeroMacAddress[ETH_ALEN] = {0x00};
 936         u8     strIssueBssid[ETH_ALEN] = {0x00};
 937
 938         memcpy(strIssueBssid, pPMK->bssid.sa_data, ETH_ALEN);
 939         if (pPMK->cmd == IW_PMKSA_ADD) {
 940                 DBG_88E("[rtw_wx_set_pmkid] IW_PMKSA_ADD!\n");
 941                 if (!memcmp(strIssueBssid, strZeroMacAddress, ETH_ALEN) == true)
 942                         return ret;
 943                 else
 944                         ret = true;
 945                 blInserted = false;
 946
 947                 /* overwrite PMKID */
 948                 for (j = 0; j < NUM_PMKID_CACHE; j++) {
 949                         if (!memcmp(psecuritypriv->PMKIDList[j].Bssid, strIssueBssid, ETH_ALEN)) {
 950                                 /*  BSSID is matched, the same AP => rewrite with new PMKID. */
 951                                 DBG_88E("[rtw_wx_set_pmkid] BSSID exists in the PMKList.\n");
 952                                 memcpy(psecuritypriv->PMKIDList[j].PMKID, pPMK->pmkid, IW_PMKID_LEN);
 953                                 psecuritypriv->PMKIDList[j].bUsed = true;
 954                                 psecuritypriv->PMKIDIndex = j+1;
 955                                 blInserted = true;
 956                                 break;
 957                         }
 958                 }
 959
 960                 if (!blInserted) {
 961                         /*  Find a new entry */
 962                         DBG_88E("[rtw_wx_set_pmkid] Use the new entry index = %d for this PMKID.\n",
 963                                 psecuritypriv->PMKIDIndex);
 964
 965                         memcpy(psecuritypriv->PMKIDList[psecuritypriv->PMKIDIndex].Bssid, strIssueBssid, ETH_ALEN);
 966                         memcpy(psecuritypriv->PMKIDList[psecuritypriv->PMKIDIndex].PMKID, pPMK->pmkid, IW_PMKID_LEN);
 967
 968                         psecuritypriv->PMKIDList[psecuritypriv->PMKIDIndex].bUsed = true;
 969                         psecuritypriv->PMKIDIndex++;
 970                         if (psecuritypriv->PMKIDIndex == 16)
 971                                 psecuritypriv->PMKIDIndex = 0;
 972                 }
 973         } else if (pPMK->cmd == IW_PMKSA_REMOVE) {
 974                 DBG_88E("[rtw_wx_set_pmkid] IW_PMKSA_REMOVE!\n");
 975                 ret = true;
 976                 for (j = 0; j < NUM_PMKID_CACHE; j++) {
 977                         if (!memcmp(psecuritypriv->PMKIDList[j].Bssid, strIssueBssid, ETH_ALEN)) {
 978                                 /*  BSSID is matched, the same AP => Remove this PMKID information and reset it. */
 979                                 _rtw_memset(psecuritypriv->PMKIDList[j].Bssid, 0x00, ETH_ALEN);
 980                                 psecuritypriv->PMKIDList[j].bUsed = false;
 981                                 break;
 982                         }
 983                }
 984         } else if (pPMK->cmd == IW_PMKSA_FLUSH) {
 985                 DBG_88E("[rtw_wx_set_pmkid] IW_PMKSA_FLUSH!\n");
 986                 _rtw_memset(&psecuritypriv->PMKIDList[0], 0x00, sizeof(struct rt_pmkid_list) * NUM_PMKID_CACHE);
 987                 psecuritypriv->PMKIDIndex = 0;
 988                 ret = true;
 989         }
 990         return ret;
 991 }
 992
 993 static int rtw_wx_get_sens(struct net_device *dev,
 994                              struct iw_request_info *info,
 995                              union iwreq_data *wrqu, char *extra)
 996 {
 997         wrqu->sens.value = 0;
 998         wrqu->sens.fixed = 0;   /* no auto select */
 999         wrqu->sens.disabled = 1;
1000         return 0;
1001 }
1002
1003 static int rtw_wx_get_range(struct net_device *dev,
1004                                 struct iw_request_info *info,
1005                                 union iwreq_data *wrqu, char *extra)
1006 {
1007         struct iw_range *range = (struct iw_range *)extra;
1008         struct adapter *padapter = (struct adapter *)rtw_netdev_priv(dev);
1009         struct mlme_ext_priv    *pmlmeext = &padapter->mlmeextpriv;
1010
1011         u16 val;
1012         int i;
1013
1014         _func_enter_;
1015
1016         RT_TRACE(_module_rtl871x_mlme_c_, _drv_info_, ("rtw_wx_get_range. cmd_code =%x\n", info->cmd));
1017
1018         wrqu->data.length = sizeof(*range);
1019         _rtw_memset(range, 0, sizeof(*range));
1020
1021         /* Let's try to keep this struct in the same order as in
1022          * linux/include/wireless.h
1023          */
1024
1025         /* TODO: See what values we can set, and remove the ones we can't
1026          * set, or fill them with some default data.
1027          */
1028
1029         /* ~5 Mb/s real (802.11b) */
1030         range->throughput = 5 * 1000 * 1000;
1031
1032         /* signal level threshold range */
1033
1034         /* percent values between 0 and 100. */
1035         range->max_qual.qual = 100;
1036         range->max_qual.level = 100;
1037         range->max_qual.noise = 100;
1038         range->max_qual.updated = 7; /* Updated all three */
1039
1040         range->avg_qual.qual = 92; /* > 8% missed beacons is 'bad' */
1041         /* TODO: Find real 'good' to 'bad' threshol value for RSSI */
1042         range->avg_qual.level = 20 + -98;
1043         range->avg_qual.noise = 0;
1044         range->avg_qual.updated = 7; /* Updated all three */
1045
1046         range->num_bitrates = RATE_COUNT;
1047
1048         for (i = 0; i < RATE_COUNT && i < IW_MAX_BITRATES; i++)
1049                 range->bitrate[i] = rtw_rates[i];
1050
1051         range->min_frag = MIN_FRAG_THRESHOLD;
1052         range->max_frag = MAX_FRAG_THRESHOLD;
1053
1054         range->pm_capa = 0;
1055
1056         range->we_version_compiled = WIRELESS_EXT;
1057         range->we_version_source = 16;
1058
1059         for (i = 0, val = 0; i < MAX_CHANNEL_NUM; i++) {
1060                 /*  Include only legal frequencies for some countries */
1061                 if (pmlmeext->channel_set[i].ChannelNum != 0) {
1062                         range->freq[val].i = pmlmeext->channel_set[i].ChannelNum;
1063                         range->freq[val].m = rtw_ch2freq(pmlmeext->channel_set[i].ChannelNum) * 100000;
1064                         range->freq[val].e = 1;
1065                         val++;
1066                 }
1067
1068                 if (val == IW_MAX_FREQUENCIES)
1069                         break;
1070         }
1071
1072         range->num_channels = val;
1073         range->num_frequency = val;
1074
1075 /*  The following code will proivde the security capability to network manager. */
1076 /*  If the driver doesn't provide this capability to network manager, */
1077 /*  the WPA/WPA2 routers can't be choosen in the network manager. */
1078
1079 /*
1080 #define IW_SCAN_CAPA_NONE               0x00
1081 #define IW_SCAN_CAPA_ESSID              0x01
1082 #define IW_SCAN_CAPA_BSSID              0x02
1083 #define IW_SCAN_CAPA_CHANNEL            0x04
1084 #define IW_SCAN_CAPA_MODE               0x08
1085 #define IW_SCAN_CAPA_RATE               0x10
1086 #define IW_SCAN_CAPA_TYPE               0x20
1087 #define IW_SCAN_CAPA_TIME               0x40
1088 */
1089
1090         range->enc_capa = IW_ENC_CAPA_WPA | IW_ENC_CAPA_WPA2 |
1091                           IW_ENC_CAPA_CIPHER_TKIP | IW_ENC_CAPA_CIPHER_CCMP;
1092
1093         range->scan_capa = IW_SCAN_CAPA_ESSID | IW_SCAN_CAPA_TYPE |
1094                            IW_SCAN_CAPA_BSSID | IW_SCAN_CAPA_CHANNEL |
1095                            IW_SCAN_CAPA_MODE | IW_SCAN_CAPA_RATE;
1096         _func_exit_;
1097
1098         return 0;
1099 }
1100
1101 /* set bssid flow */
1102 /* s1. rtw_set_802_11_infrastructure_mode() */
1103 /* s2. rtw_set_802_11_authentication_mode() */
1104 /* s3. set_802_11_encryption_mode() */
1105 /* s4. rtw_set_802_11_bssid() */
1106 static int rtw_wx_set_wap(struct net_device *dev,
1107                          struct iw_request_info *info,
1108                          union iwreq_data *awrq,
1109                          char *extra)
1110 {
1111         unsigned long   irqL;
1112         uint ret = 0;
1113         struct adapter *padapter = (struct adapter *)rtw_netdev_priv(dev);
1114         struct sockaddr *temp = (struct sockaddr *)awrq;
1115         struct  mlme_priv       *pmlmepriv = &(padapter->mlmepriv);
1116         struct list_head *phead;
1117         u8 *dst_bssid, *src_bssid;
1118         struct __queue *queue   = &(pmlmepriv->scanned_queue);
1119         struct  wlan_network    *pnetwork = NULL;
1120         enum ndis_802_11_auth_mode      authmode;
1121
1122         _func_enter_;
1123
1124         if (_FAIL == rtw_pwr_wakeup(padapter)) {
1125                 ret = -1;
1126                 goto exit;
1127         }
1128
1129         if (!padapter->bup) {
1130                 ret = -1;
1131                 goto exit;
1132         }
1133
1134         if (temp->sa_family != ARPHRD_ETHER) {
1135                 ret = -EINVAL;
1136                 goto exit;
1137         }
1138
1139         authmode = padapter->securitypriv.ndisauthtype;
1140         _enter_critical_bh(&queue->lock, &irqL);
1141         phead = get_list_head(queue);
1142         pmlmepriv->pscanned = get_next(phead);
1143
1144         while (1) {
1145                 if ((rtw_end_of_queue_search(phead, pmlmepriv->pscanned)) == true)
1146                         break;
1147
1148                 pnetwork = LIST_CONTAINOR(pmlmepriv->pscanned, struct wlan_network, list);
1149
1150                 pmlmepriv->pscanned = get_next(pmlmepriv->pscanned);
1151
1152                 dst_bssid = pnetwork->network.MacAddress;
1153
1154                 src_bssid = temp->sa_data;
1155
1156                 if ((!memcmp(dst_bssid, src_bssid, ETH_ALEN))) {
1157                         if (!rtw_set_802_11_infrastructure_mode(padapter, pnetwork->network.InfrastructureMode)) {
1158                                 ret = -1;
1159                                 _exit_critical_bh(&queue->lock, &irqL);
1160                                 goto exit;
1161                         }
1162
1163                                 break;
1164                 }
1165         }
1166         _exit_critical_bh(&queue->lock, &irqL);
1167
1168         rtw_set_802_11_authentication_mode(padapter, authmode);
1169         /* set_802_11_encryption_mode(padapter, padapter->securitypriv.ndisencryptstatus); */
1170         if (rtw_set_802_11_bssid(padapter, temp->sa_data) == false) {
1171                 ret = -1;
1172                 goto exit;
1173         }
1174
1175 exit:
1176
1177         _func_exit_;
1178
1179         return ret;
1180 }
1181
1182 static int rtw_wx_get_wap(struct net_device *dev,
1183                             struct iw_request_info *info,
1184                             union iwreq_data *wrqu, char *extra)
1185 {
1186         struct adapter *padapter = (struct adapter *)rtw_netdev_priv(dev);
1187         struct  mlme_priv       *pmlmepriv = &(padapter->mlmepriv);
1188         struct wlan_bssid_ex  *pcur_bss = &pmlmepriv->cur_network.network;
1189
1190         wrqu->ap_addr.sa_family = ARPHRD_ETHER;
1191
1192         _rtw_memset(wrqu->ap_addr.sa_data, 0, ETH_ALEN);
1193
1194         RT_TRACE(_module_rtl871x_mlme_c_, _drv_info_, ("rtw_wx_get_wap\n"));
1195
1196         _func_enter_;
1197
1198         if (((check_fwstate(pmlmepriv, _FW_LINKED)) == true) ||
1199             ((check_fwstate(pmlmepriv, WIFI_ADHOC_MASTER_STATE)) == true) ||
1200             ((check_fwstate(pmlmepriv, WIFI_AP_STATE)) == true))
1201                 memcpy(wrqu->ap_addr.sa_data, pcur_bss->MacAddress, ETH_ALEN);
1202         else
1203                 _rtw_memset(wrqu->ap_addr.sa_data, 0, ETH_ALEN);
1204
1205         _func_exit_;
1206
1207         return 0;
1208 }
1209
1210 static int rtw_wx_set_mlme(struct net_device *dev,
1211                              struct iw_request_info *info,
1212                              union iwreq_data *wrqu, char *extra)
1213 {
1214         int ret = 0;
1215         u16 reason;
1216         struct adapter *padapter = (struct adapter *)rtw_netdev_priv(dev);
1217         struct iw_mlme *mlme = (struct iw_mlme *)extra;
1218
1219         if (mlme == NULL)
1220                 return -1;
1221
1222         DBG_88E("%s\n", __func__);
1223
1224         reason = mlme->reason_code;
1225
1226         DBG_88E("%s, cmd =%d, reason =%d\n", __func__, mlme->cmd, reason);
1227
1228         switch (mlme->cmd) {
1229         case IW_MLME_DEAUTH:
1230                 if (!rtw_set_802_11_disassociate(padapter))
1231                         ret = -1;
1232                 break;
1233         case IW_MLME_DISASSOC:
1234                 if (!rtw_set_802_11_disassociate(padapter))
1235                         ret = -1;
1236                 break;
1237         default:
1238                 return -EOPNOTSUPP;
1239         }
1240         return ret;
1241 }
1242
1243 static int rtw_wx_set_scan(struct net_device *dev, struct iw_request_info *a,
1244                              union iwreq_data *wrqu, char *extra)
1245 {
1246         u8 _status = false;
1247         int ret = 0;
1248         struct adapter *padapter = (struct adapter *)rtw_netdev_priv(dev);
1249         struct mlme_priv *pmlmepriv = &padapter->mlmepriv;
1250         struct ndis_802_11_ssid ssid[RTW_SSID_SCAN_AMOUNT];
1251         unsigned long   irqL;
1252 #ifdef CONFIG_88EU_P2P
1253         struct wifidirect_info *pwdinfo = &(padapter->wdinfo);
1254 #endif /* CONFIG_88EU_P2P */
1255         RT_TRACE(_module_rtl871x_mlme_c_, _drv_info_, ("rtw_wx_set_scan\n"));
1256
1257 _func_enter_;
1258         if (padapter->registrypriv.mp_mode == 1) {
1259                 if (check_fwstate(pmlmepriv, WIFI_MP_STATE)) {
1260                         ret = -1;
1261                         goto exit;
1262                 }
1263         }
1264         if (_FAIL == rtw_pwr_wakeup(padapter)) {
1265                 ret = -1;
1266                 goto exit;
1267         }
1268
1269         if (padapter->bDriverStopped) {
1270                 DBG_88E("bDriverStopped =%d\n", padapter->bDriverStopped);
1271                 ret = -1;
1272                 goto exit;
1273         }
1274
1275         if (!padapter->bup) {
1276                 ret = -1;
1277                 goto exit;
1278         }
1279
1280         if (!padapter->hw_init_completed) {
1281                 ret = -1;
1282                 goto exit;
1283         }
1284
1285         /*  When Busy Traffic, driver do not site survey. So driver return success. */
1286         /*  wpa_supplicant will not issue SIOCSIWSCAN cmd again after scan timeout. */
1287         /*  modify by thomas 2011-02-22. */
1288         if (pmlmepriv->LinkDetectInfo.bBusyTraffic) {
1289                 indicate_wx_scan_complete_event(padapter);
1290                 goto exit;
1291         }
1292
1293         if (check_fwstate(pmlmepriv, _FW_UNDER_SURVEY|_FW_UNDER_LINKING)) {
1294                 indicate_wx_scan_complete_event(padapter);
1295                 goto exit;
1296         }
1297
1298 /*      For the DMP WiFi Display project, the driver won't to scan because */
1299 /*      the pmlmepriv->scan_interval is always equal to 3. */
1300 /*      So, the wpa_supplicant won't find out the WPS SoftAP. */
1301
1302 #ifdef CONFIG_88EU_P2P
1303         if (pwdinfo->p2p_state != P2P_STATE_NONE) {
1304                 rtw_p2p_set_pre_state(pwdinfo, rtw_p2p_state(pwdinfo));
1305                 rtw_p2p_set_state(pwdinfo, P2P_STATE_FIND_PHASE_SEARCH);
1306                 rtw_p2p_findphase_ex_set(pwdinfo, P2P_FINDPHASE_EX_FULL);
1307                 rtw_free_network_queue(padapter, true);
1308         }
1309 #endif /* CONFIG_88EU_P2P */
1310
1311         _rtw_memset(ssid, 0, sizeof(struct ndis_802_11_ssid)*RTW_SSID_SCAN_AMOUNT);
1312
1313         if (wrqu->data.length == sizeof(struct iw_scan_req)) {
1314                 struct iw_scan_req *req = (struct iw_scan_req *)extra;
1315
1316                 if (wrqu->data.flags & IW_SCAN_THIS_ESSID) {
1317                         int len = min((int)req->essid_len, IW_ESSID_MAX_SIZE);
1318
1319                         memcpy(ssid[0].Ssid, req->essid, len);
1320                         ssid[0].SsidLength = len;
1321
1322                         DBG_88E("IW_SCAN_THIS_ESSID, ssid =%s, len =%d\n", req->essid, req->essid_len);
1323
1324                         _enter_critical_bh(&pmlmepriv->lock, &irqL);
1325
1326                         _status = rtw_sitesurvey_cmd(padapter, ssid, 1, NULL, 0);
1327
1328                         _exit_critical_bh(&pmlmepriv->lock, &irqL);
1329                 } else if (req->scan_type == IW_SCAN_TYPE_PASSIVE) {
1330                         DBG_88E("rtw_wx_set_scan, req->scan_type == IW_SCAN_TYPE_PASSIVE\n");
1331                 }
1332         } else {
1333                 if (wrqu->data.length >= WEXT_CSCAN_HEADER_SIZE &&
1334                     !memcmp(extra, WEXT_CSCAN_HEADER, WEXT_CSCAN_HEADER_SIZE)) {
1335                         int len = wrqu->data.length - WEXT_CSCAN_HEADER_SIZE;
1336                         char *pos = extra+WEXT_CSCAN_HEADER_SIZE;
1337                         char section;
1338                         char sec_len;
1339                         int ssid_index = 0;
1340
1341                         while (len >= 1) {
1342                                 section = *(pos++);
1343                                 len -= 1;
1344
1345                                 switch (section) {
1346                                 case WEXT_CSCAN_SSID_SECTION:
1347                                         if (len < 1) {
1348                                                 len = 0;
1349                                                 break;
1350                                         }
1351                                         sec_len = *(pos++); len -= 1;
1352                                         if (sec_len > 0 && sec_len <= len) {
1353                                                 ssid[ssid_index].SsidLength = sec_len;
1354                                                 memcpy(ssid[ssid_index].Ssid, pos, ssid[ssid_index].SsidLength);
1355                                                 ssid_index++;
1356                                         }
1357                                         pos += sec_len;
1358                                         len -= sec_len;
1359                                         break;
1360                                 case WEXT_CSCAN_TYPE_SECTION:
1361                                 case WEXT_CSCAN_CHANNEL_SECTION:
1362                                         pos += 1;
1363                                         len -= 1;
1364                                         break;
1365                                 case WEXT_CSCAN_PASV_DWELL_SECTION:
1366                                 case WEXT_CSCAN_HOME_DWELL_SECTION:
1367                                 case WEXT_CSCAN_ACTV_DWELL_SECTION:
1368                                         pos += 2;
1369                                         len -= 2;
1370                                         break;
1371                                 default:
1372                                         len = 0; /*  stop parsing */
1373                                 }
1374                         }
1375
1376                         /* it has still some scan paramater to parse, we only do this now... */
1377                         _status = rtw_set_802_11_bssid_list_scan(padapter, ssid, RTW_SSID_SCAN_AMOUNT);
1378                 } else {
1379                         _status = rtw_set_802_11_bssid_list_scan(padapter, NULL, 0);
1380                 }
1381         }
1382
1383         if (!_status)
1384                 ret = -1;
1385
1386 exit:
1387
1388 _func_exit_;
1389         return ret;
1390 }
1391
1392 static int rtw_wx_get_scan(struct net_device *dev, struct iw_request_info *a,
1393                              union iwreq_data *wrqu, char *extra)
1394 {
1395         unsigned long   irqL;
1396         struct list_head *plist, *phead;
1397         struct adapter *padapter = (struct adapter *)rtw_netdev_priv(dev);
1398         struct  mlme_priv       *pmlmepriv = &(padapter->mlmepriv);
1399         struct __queue *queue   = &(pmlmepriv->scanned_queue);
1400         struct  wlan_network    *pnetwork = NULL;
1401         char *ev = extra;
1402         char *stop = ev + wrqu->data.length;
1403         u32 ret = 0;
1404         u32 cnt = 0;
1405         u32 wait_for_surveydone;
1406         int wait_status;
1407 #ifdef CONFIG_88EU_P2P
1408         struct  wifidirect_info *pwdinfo = &padapter->wdinfo;
1409 #endif /* CONFIG_88EU_P2P */
1410         RT_TRACE(_module_rtl871x_mlme_c_, _drv_info_, ("rtw_wx_get_scan\n"));
1411         RT_TRACE(_module_rtl871x_ioctl_os_c, _drv_info_, (" Start of Query SIOCGIWSCAN .\n"));
1412
1413         _func_enter_;
1414
1415         if (padapter->pwrctrlpriv.brfoffbyhw && padapter->bDriverStopped) {
1416                 ret = -EINVAL;
1417                 goto exit;
1418         }
1419
1420 #ifdef CONFIG_88EU_P2P
1421         if (!rtw_p2p_chk_state(pwdinfo, P2P_STATE_NONE)) {
1422                 /*      P2P is enabled */
1423                 wait_for_surveydone = 200;
1424         } else {
1425                 /*      P2P is disabled */
1426                 wait_for_surveydone = 100;
1427         }
1428 #else
1429         {
1430                 wait_for_surveydone = 100;
1431         }
1432 #endif /* CONFIG_88EU_P2P */
1433
1434         wait_status = _FW_UNDER_SURVEY | _FW_UNDER_LINKING;
1435
1436         while (check_fwstate(pmlmepriv, wait_status)) {
1437                 rtw_msleep_os(30);
1438                 cnt++;
1439                 if (cnt > wait_for_surveydone)
1440                         break;
1441         }
1442
1443         _enter_critical_bh(&(pmlmepriv->scanned_queue.lock), &irqL);
1444
1445         phead = get_list_head(queue);
1446         plist = get_next(phead);
1447
1448         while (1) {
1449                 if (rtw_end_of_queue_search(phead, plist))
1450                         break;
1451
1452                 if ((stop - ev) < SCAN_ITEM_SIZE) {
1453                         ret = -E2BIG;
1454                         break;
1455                 }
1456
1457                 pnetwork = LIST_CONTAINOR(plist, struct wlan_network, list);
1458
1459                 /* report network only if the current channel set contains the channel to which this network belongs */
1460                 if (rtw_ch_set_search_ch(padapter->mlmeextpriv.channel_set, pnetwork->network.Configuration.DSConfig) >= 0)
1461                         ev = translate_scan(padapter, a, pnetwork, ev, stop);
1462
1463                 plist = get_next(plist);
1464         }
1465
1466         _exit_critical_bh(&(pmlmepriv->scanned_queue.lock), &irqL);
1467
1468         wrqu->data.length = ev-extra;
1469         wrqu->data.flags = 0;
1470
1471 exit:
1472         _func_exit_;
1473         return ret;
1474 }
1475
1476 /* set ssid flow */
1477 /* s1. rtw_set_802_11_infrastructure_mode() */
1478 /* s2. set_802_11_authenticaion_mode() */
1479 /* s3. set_802_11_encryption_mode() */
1480 /* s4. rtw_set_802_11_ssid() */
1481 static int rtw_wx_set_essid(struct net_device *dev,
1482                               struct iw_request_info *a,
1483                               union iwreq_data *wrqu, char *extra)
1484 {
1485         unsigned long irqL;
1486         struct adapter *padapter = (struct adapter *)rtw_netdev_priv(dev);
1487         struct mlme_priv *pmlmepriv = &padapter->mlmepriv;
1488         struct __queue *queue = &pmlmepriv->scanned_queue;
1489         struct list_head *phead;
1490         struct wlan_network *pnetwork = NULL;
1491         enum ndis_802_11_auth_mode authmode;
1492         struct ndis_802_11_ssid ndis_ssid;
1493         u8 *dst_ssid, *src_ssid;
1494
1495         uint ret = 0, len;
1496
1497         _func_enter_;
1498
1499         RT_TRACE(_module_rtl871x_ioctl_os_c, _drv_info_,
1500                  ("+rtw_wx_set_essid: fw_state = 0x%08x\n", get_fwstate(pmlmepriv)));
1501         if (_FAIL == rtw_pwr_wakeup(padapter)) {
1502                 ret = -1;
1503                 goto exit;
1504         }
1505
1506         if (!padapter->bup) {
1507                 ret = -1;
1508                 goto exit;
1509         }
1510
1511         if (wrqu->essid.length > IW_ESSID_MAX_SIZE) {
1512                 ret = -E2BIG;
1513                 goto exit;
1514         }
1515
1516         if (check_fwstate(pmlmepriv, WIFI_AP_STATE)) {
1517                 ret = -1;
1518                 goto exit;
1519         }
1520
1521         authmode = padapter->securitypriv.ndisauthtype;
1522         DBG_88E("=>%s\n", __func__);
1523         if (wrqu->essid.flags && wrqu->essid.length) {
1524                 len = (wrqu->essid.length < IW_ESSID_MAX_SIZE) ? wrqu->essid.length : IW_ESSID_MAX_SIZE;
1525
1526                 if (wrqu->essid.length != 33)
1527                         DBG_88E("ssid =%s, len =%d\n", extra, wrqu->essid.length);
1528
1529                 _rtw_memset(&ndis_ssid, 0, sizeof(struct ndis_802_11_ssid));
1530                 ndis_ssid.SsidLength = len;
1531                 memcpy(ndis_ssid.Ssid, extra, len);
1532                 src_ssid = ndis_ssid.Ssid;
1533
1534                 RT_TRACE(_module_rtl871x_ioctl_os_c, _drv_info_, ("rtw_wx_set_essid: ssid =[%s]\n", src_ssid));
1535                 _enter_critical_bh(&queue->lock, &irqL);
1536                phead = get_list_head(queue);
1537               pmlmepriv->pscanned = get_next(phead);
1538
1539                 while (1) {
1540                         if (rtw_end_of_queue_search(phead, pmlmepriv->pscanned) == true) {
1541                                 RT_TRACE(_module_rtl871x_ioctl_os_c, _drv_warning_,
1542                                          ("rtw_wx_set_essid: scan_q is empty, set ssid to check if scanning again!\n"));
1543
1544                                 break;
1545                         }
1546
1547                         pnetwork = LIST_CONTAINOR(pmlmepriv->pscanned, struct wlan_network, list);
1548
1549                         pmlmepriv->pscanned = get_next(pmlmepriv->pscanned);
1550
1551                         dst_ssid = pnetwork->network.Ssid.Ssid;
1552
1553                         RT_TRACE(_module_rtl871x_ioctl_os_c, _drv_info_,
1554                                  ("rtw_wx_set_essid: dst_ssid =%s\n",
1555                                   pnetwork->network.Ssid.Ssid));
1556
1557                         if ((!memcmp(dst_ssid, src_ssid, ndis_ssid.SsidLength)) &&
1558                             (pnetwork->network.Ssid.SsidLength == ndis_ssid.SsidLength)) {
1559                                 RT_TRACE(_module_rtl871x_ioctl_os_c, _drv_info_,
1560                                          ("rtw_wx_set_essid: find match, set infra mode\n"));
1561
1562                                 if (check_fwstate(pmlmepriv, WIFI_ADHOC_STATE) == true) {
1563                                         if (pnetwork->network.InfrastructureMode != pmlmepriv->cur_network.network.InfrastructureMode)
1564                                                 continue;
1565                                 }
1566
1567                                 if (!rtw_set_802_11_infrastructure_mode(padapter, pnetwork->network.InfrastructureMode)) {
1568                                         ret = -1;
1569                                         _exit_critical_bh(&queue->lock, &irqL);
1570                                         goto exit;
1571                                 }
1572
1573                                 break;
1574                         }
1575                 }
1576                 _exit_critical_bh(&queue->lock, &irqL);
1577                 RT_TRACE(_module_rtl871x_ioctl_os_c, _drv_info_,
1578                          ("set ssid: set_802_11_auth. mode =%d\n", authmode));
1579                 rtw_set_802_11_authentication_mode(padapter, authmode);
1580                 if (rtw_set_802_11_ssid(padapter, &ndis_ssid) == false) {
1581                         ret = -1;
1582                         goto exit;
1583                 }
1584         }
1585
1586 exit:
1587
1588         DBG_88E("<=%s, ret %d\n", __func__, ret);
1589
1590         _func_exit_;
1591
1592         return ret;
1593 }
1594
1595 static int rtw_wx_get_essid(struct net_device *dev,
1596                               struct iw_request_info *a,
1597                               union iwreq_data *wrqu, char *extra)
1598 {
1599         u32 len, ret = 0;
1600         struct adapter *padapter = (struct adapter *)rtw_netdev_priv(dev);
1601         struct  mlme_priv       *pmlmepriv = &(padapter->mlmepriv);
1602         struct wlan_bssid_ex  *pcur_bss = &pmlmepriv->cur_network.network;
1603
1604         RT_TRACE(_module_rtl871x_mlme_c_, _drv_info_, ("rtw_wx_get_essid\n"));
1605
1606         _func_enter_;
1607
1608         if ((check_fwstate(pmlmepriv, _FW_LINKED)) ||
1609             (check_fwstate(pmlmepriv, WIFI_ADHOC_MASTER_STATE))) {
1610                 len = pcur_bss->Ssid.SsidLength;
1611
1612                 wrqu->essid.length = len;
1613
1614                 memcpy(extra, pcur_bss->Ssid.Ssid, len);
1615
1616                 wrqu->essid.flags = 1;
1617         } else {
1618                 ret = -1;
1619                 goto exit;
1620         }
1621
1622 exit:
1623
1624         _func_exit_;
1625
1626         return ret;
1627 }
1628
1629 static int rtw_wx_set_rate(struct net_device *dev,
1630                               struct iw_request_info *a,
1631                               union iwreq_data *wrqu, char *extra)
1632 {
1633         int i, ret = 0;
1634         struct adapter *padapter = (struct adapter *)rtw_netdev_priv(dev);
1635         u8 datarates[NumRates];
1636         u32     target_rate = wrqu->bitrate.value;
1637         u32     fixed = wrqu->bitrate.fixed;
1638         u32     ratevalue = 0;
1639          u8 mpdatarate[NumRates] = {11, 10, 9, 8, 7, 6, 5, 4, 3, 2, 1, 0, 0xff};
1640
1641 _func_enter_;
1642
1643         RT_TRACE(_module_rtl871x_mlme_c_, _drv_info_, (" rtw_wx_set_rate\n"));
1644         RT_TRACE(_module_rtl871x_ioctl_os_c, _drv_info_, ("target_rate = %d, fixed = %d\n", target_rate, fixed));
1645
1646         if (target_rate == -1) {
1647                 ratevalue = 11;
1648                 goto set_rate;
1649         }
1650         target_rate = target_rate/100000;
1651
1652         switch (target_rate) {
1653         case 10:
1654                 ratevalue = 0;
1655                 break;
1656         case 20:
1657                 ratevalue = 1;
1658                 break;
1659         case 55:
1660                 ratevalue = 2;
1661                 break;
1662         case 60:
1663                 ratevalue = 3;
1664                 break;
1665         case 90:
1666                 ratevalue = 4;
1667                 break;
1668         case 110:
1669                 ratevalue = 5;
1670                 break;
1671         case 120:
1672                 ratevalue = 6;
1673                 break;
1674         case 180:
1675                 ratevalue = 7;
1676                 break;
1677         case 240:
1678                 ratevalue = 8;
1679                 break;
1680         case 360:
1681                 ratevalue = 9;
1682                 break;
1683         case 480:
1684                 ratevalue = 10;
1685                 break;
1686         case 540:
1687                 ratevalue = 11;
1688                 break;
1689         default:
1690                 ratevalue = 11;
1691                 break;
1692         }
1693
1694 set_rate:
1695
1696         for (i = 0; i < NumRates; i++) {
1697                 if (ratevalue == mpdatarate[i]) {
1698                         datarates[i] = mpdatarate[i];
1699                         if (fixed == 0)
1700                                 break;
1701                 } else {
1702                         datarates[i] = 0xff;
1703                 }
1704
1705                 RT_TRACE(_module_rtl871x_ioctl_os_c, _drv_info_, ("datarate_inx =%d\n", datarates[i]));
1706         }
1707
1708         if (rtw_setdatarate_cmd(padapter, datarates) != _SUCCESS) {
1709                 RT_TRACE(_module_rtl871x_ioctl_os_c, _drv_err_, ("rtw_wx_set_rate Fail!!!\n"));
1710                 ret = -1;
1711         }
1712
1713 _func_exit_;
1714
1715         return ret;
1716 }
1717
1718 static int rtw_wx_get_rate(struct net_device *dev,
1719                              struct iw_request_info *info,
1720                              union iwreq_data *wrqu, char *extra)
1721 {
1722         u16 max_rate = 0;
1723
1724         max_rate = rtw_get_cur_max_rate((struct adapter *)rtw_netdev_priv(dev));
1725
1726         if (max_rate == 0)
1727                 return -EPERM;
1728
1729         wrqu->bitrate.fixed = 0;        /* no auto select */
1730         wrqu->bitrate.value = max_rate * 100000;
1731
1732         return 0;
1733 }
1734
1735 static int rtw_wx_set_rts(struct net_device *dev,
1736                              struct iw_request_info *info,
1737                              union iwreq_data *wrqu, char *extra)
1738 {
1739         struct adapter *padapter = (struct adapter *)rtw_netdev_priv(dev);
1740
1741         _func_enter_;
1742
1743         if (wrqu->rts.disabled) {
1744                 padapter->registrypriv.rts_thresh = 2347;
1745         } else {
1746                 if (wrqu->rts.value < 0 ||
1747                     wrqu->rts.value > 2347)
1748                         return -EINVAL;
1749
1750                 padapter->registrypriv.rts_thresh = wrqu->rts.value;
1751         }
1752
1753         DBG_88E("%s, rts_thresh =%d\n", __func__, padapter->registrypriv.rts_thresh);
1754
1755         _func_exit_;
1756
1757         return 0;
1758 }
1759
1760 static int rtw_wx_get_rts(struct net_device *dev,
1761                              struct iw_request_info *info,
1762                              union iwreq_data *wrqu, char *extra)
1763 {
1764         struct adapter *padapter = (struct adapter *)rtw_netdev_priv(dev);
1765
1766         _func_enter_;
1767
1768         DBG_88E("%s, rts_thresh =%d\n", __func__, padapter->registrypriv.rts_thresh);
1769
1770         wrqu->rts.value = padapter->registrypriv.rts_thresh;
1771         wrqu->rts.fixed = 0;    /* no auto select */
1772         /* wrqu->rts.disabled = (wrqu->rts.value == DEFAULT_RTS_THRESHOLD); */
1773
1774         _func_exit_;
1775
1776         return 0;
1777 }
1778
1779 static int rtw_wx_set_frag(struct net_device *dev,
1780                              struct iw_request_info *info,
1781                              union iwreq_data *wrqu, char *extra)
1782 {
1783         struct adapter *padapter = (struct adapter *)rtw_netdev_priv(dev);
1784
1785         _func_enter_;
1786
1787         if (wrqu->frag.disabled) {
1788                 padapter->xmitpriv.frag_len = MAX_FRAG_THRESHOLD;
1789         } else {
1790                 if (wrqu->frag.value < MIN_FRAG_THRESHOLD ||
1791                     wrqu->frag.value > MAX_FRAG_THRESHOLD)
1792                         return -EINVAL;
1793
1794                 padapter->xmitpriv.frag_len = wrqu->frag.value & ~0x1;
1795         }
1796
1797         DBG_88E("%s, frag_len =%d\n", __func__, padapter->xmitpriv.frag_len);
1798
1799         _func_exit_;
1800
1801         return 0;
1802 }
1803
1804 static int rtw_wx_get_frag(struct net_device *dev,
1805                              struct iw_request_info *info,
1806                              union iwreq_data *wrqu, char *extra)
1807 {
1808         struct adapter *padapter = (struct adapter *)rtw_netdev_priv(dev);
1809
1810         _func_enter_;
1811
1812         DBG_88E("%s, frag_len =%d\n", __func__, padapter->xmitpriv.frag_len);
1813
1814         wrqu->frag.value = padapter->xmitpriv.frag_len;
1815         wrqu->frag.fixed = 0;   /* no auto select */
1816
1817         _func_exit_;
1818
1819         return 0;
1820 }
1821
1822 static int rtw_wx_get_retry(struct net_device *dev,
1823                              struct iw_request_info *info,
1824                              union iwreq_data *wrqu, char *extra)
1825 {
1826         wrqu->retry.value = 7;
1827         wrqu->retry.fixed = 0;  /* no auto select */
1828         wrqu->retry.disabled = 1;
1829
1830         return 0;
1831 }
1832
1833 static int rtw_wx_set_enc(struct net_device *dev,
1834                             struct iw_request_info *info,
1835                             union iwreq_data *wrqu, char *keybuf)
1836 {
1837         u32 key, ret = 0;
1838         u32 keyindex_provided;
1839         struct ndis_802_11_wep   wep;
1840         enum ndis_802_11_auth_mode authmode;
1841
1842         struct iw_point *erq = &(wrqu->encoding);
1843         struct adapter *padapter = (struct adapter *)rtw_netdev_priv(dev);
1844         struct pwrctrl_priv *pwrpriv = &padapter->pwrctrlpriv;
1845         DBG_88E("+rtw_wx_set_enc, flags = 0x%x\n", erq->flags);
1846
1847         _rtw_memset(&wep, 0, sizeof(struct ndis_802_11_wep));
1848
1849         key = erq->flags & IW_ENCODE_INDEX;
1850
1851         _func_enter_;
1852
1853         if (erq->flags & IW_ENCODE_DISABLED) {
1854                 DBG_88E("EncryptionDisabled\n");
1855                 padapter->securitypriv.ndisencryptstatus = Ndis802_11EncryptionDisabled;
1856                 padapter->securitypriv.dot11PrivacyAlgrthm = _NO_PRIVACY_;
1857                 padapter->securitypriv.dot118021XGrpPrivacy = _NO_PRIVACY_;
1858                 padapter->securitypriv.dot11AuthAlgrthm = dot11AuthAlgrthm_Open; /* open system */
1859                 authmode = Ndis802_11AuthModeOpen;
1860                 padapter->securitypriv.ndisauthtype = authmode;
1861
1862                 goto exit;
1863         }
1864
1865         if (key) {
1866                 if (key > WEP_KEYS)
1867                         return -EINVAL;
1868                 key--;
1869                 keyindex_provided = 1;
1870         } else {
1871                 keyindex_provided = 0;
1872                 key = padapter->securitypriv.dot11PrivacyKeyIndex;
1873                 DBG_88E("rtw_wx_set_enc, key =%d\n", key);
1874         }
1875
1876         /* set authentication mode */
1877         if (erq->flags & IW_ENCODE_OPEN) {
1878                 DBG_88E("rtw_wx_set_enc():IW_ENCODE_OPEN\n");
1879                 padapter->securitypriv.ndisencryptstatus = Ndis802_11Encryption1Enabled;/* Ndis802_11EncryptionDisabled; */
1880                 padapter->securitypriv.dot11AuthAlgrthm = dot11AuthAlgrthm_Open;
1881                 padapter->securitypriv.dot11PrivacyAlgrthm = _NO_PRIVACY_;
1882                 padapter->securitypriv.dot118021XGrpPrivacy = _NO_PRIVACY_;
1883                 authmode = Ndis802_11AuthModeOpen;
1884                 padapter->securitypriv.ndisauthtype = authmode;
1885         } else if (erq->flags & IW_ENCODE_RESTRICTED) {
1886                 DBG_88E("rtw_wx_set_enc():IW_ENCODE_RESTRICTED\n");
1887                 padapter->securitypriv.ndisencryptstatus = Ndis802_11Encryption1Enabled;
1888                 padapter->securitypriv.dot11AuthAlgrthm = dot11AuthAlgrthm_Shared;
1889                 padapter->securitypriv.dot11PrivacyAlgrthm = _WEP40_;
1890                 padapter->securitypriv.dot118021XGrpPrivacy = _WEP40_;
1891                 authmode = Ndis802_11AuthModeShared;
1892                 padapter->securitypriv.ndisauthtype = authmode;
1893         } else {
1894                 DBG_88E("rtw_wx_set_enc():erq->flags = 0x%x\n", erq->flags);
1895
1896                 padapter->securitypriv.ndisencryptstatus = Ndis802_11Encryption1Enabled;/* Ndis802_11EncryptionDisabled; */
1897                 padapter->securitypriv.dot11AuthAlgrthm = dot11AuthAlgrthm_Open; /* open system */
1898                 padapter->securitypriv.dot11PrivacyAlgrthm = _NO_PRIVACY_;
1899                 padapter->securitypriv.dot118021XGrpPrivacy = _NO_PRIVACY_;
1900                 authmode = Ndis802_11AuthModeOpen;
1901                 padapter->securitypriv.ndisauthtype = authmode;
1902         }
1903
1904         wep.KeyIndex = key;
1905         if (erq->length > 0) {
1906                 wep.KeyLength = erq->length <= 5 ? 5 : 13;
1907
1908                 wep.Length = wep.KeyLength + FIELD_OFFSET(struct ndis_802_11_wep, KeyMaterial);
1909         } else {
1910                 wep.KeyLength = 0;
1911
1912                 if (keyindex_provided == 1) {
1913                         /*  set key_id only, no given KeyMaterial(erq->length == 0). */
1914                         padapter->securitypriv.dot11PrivacyKeyIndex = key;
1915
1916                         DBG_88E("(keyindex_provided == 1), keyid =%d, key_len =%d\n", key, padapter->securitypriv.dot11DefKeylen[key]);
1917
1918                         switch (padapter->securitypriv.dot11DefKeylen[key]) {
1919                         case 5:
1920                                 padapter->securitypriv.dot11PrivacyAlgrthm = _WEP40_;
1921                                 break;
1922                         case 13:
1923                                 padapter->securitypriv.dot11PrivacyAlgrthm = _WEP104_;
1924                                 break;
1925                         default:
1926                                 padapter->securitypriv.dot11PrivacyAlgrthm = _NO_PRIVACY_;
1927                                 break;
1928                         }
1929
1930                         goto exit;
1931                 }
1932         }
1933
1934         wep.KeyIndex |= 0x80000000;
1935
1936         memcpy(wep.KeyMaterial, keybuf, wep.KeyLength);
1937
1938         if (rtw_set_802_11_add_wep(padapter, &wep) == false) {
1939                 if (rf_on == pwrpriv->rf_pwrstate)
1940                         ret = -EOPNOTSUPP;
1941                 goto exit;
1942         }
1943
1944 exit:
1945
1946         _func_exit_;
1947
1948         return ret;
1949 }
1950
1951 static int rtw_wx_get_enc(struct net_device *dev,
1952                             struct iw_request_info *info,
1953                             union iwreq_data *wrqu, char *keybuf)
1954 {
1955         uint key, ret = 0;
1956         struct adapter *padapter = (struct adapter *)rtw_netdev_priv(dev);
1957         struct iw_point *erq = &(wrqu->encoding);
1958         struct  mlme_priv       *pmlmepriv = &(padapter->mlmepriv);
1959
1960         _func_enter_;
1961
1962         if (check_fwstate(pmlmepriv, _FW_LINKED) != true) {
1963                 if (!check_fwstate(pmlmepriv, WIFI_ADHOC_MASTER_STATE)) {
1964                         erq->length = 0;
1965                         erq->flags |= IW_ENCODE_DISABLED;
1966                         return 0;
1967                 }
1968         }
1969
1970         key = erq->flags & IW_ENCODE_INDEX;
1971
1972         if (key) {
1973                 if (key > WEP_KEYS)
1974                         return -EINVAL;
1975                 key--;
1976         } else {
1977                 key = padapter->securitypriv.dot11PrivacyKeyIndex;
1978         }
1979
1980         erq->flags = key + 1;
1981
1982         switch (padapter->securitypriv.ndisencryptstatus) {
1983         case Ndis802_11EncryptionNotSupported:
1984         case Ndis802_11EncryptionDisabled:
1985                 erq->length = 0;
1986                 erq->flags |= IW_ENCODE_DISABLED;
1987                 break;
1988         case Ndis802_11Encryption1Enabled:
1989                 erq->length = padapter->securitypriv.dot11DefKeylen[key];
1990                 if (erq->length) {
1991                         memcpy(keybuf, padapter->securitypriv.dot11DefKey[key].skey, padapter->securitypriv.dot11DefKeylen[key]);
1992
1993                         erq->flags |= IW_ENCODE_ENABLED;
1994
1995                         if (padapter->securitypriv.ndisauthtype == Ndis802_11AuthModeOpen)
1996                                 erq->flags |= IW_ENCODE_OPEN;
1997                         else if (padapter->securitypriv.ndisauthtype == Ndis802_11AuthModeShared)
1998                                 erq->flags |= IW_ENCODE_RESTRICTED;
1999                 } else {
2000                         erq->length = 0;
2001                         erq->flags |= IW_ENCODE_DISABLED;
2002                 }
2003                 break;
2004         case Ndis802_11Encryption2Enabled:
2005         case Ndis802_11Encryption3Enabled:
2006                 erq->length = 16;
2007                 erq->flags |= (IW_ENCODE_ENABLED | IW_ENCODE_OPEN | IW_ENCODE_NOKEY);
2008                 break;
2009         default:
2010                 erq->length = 0;
2011                 erq->flags |= IW_ENCODE_DISABLED;
2012                 break;
2013         }
2014         _func_exit_;
2015
2016         return ret;
2017 }
2018
2019 static int rtw_wx_get_power(struct net_device *dev,
2020                              struct iw_request_info *info,
2021                              union iwreq_data *wrqu, char *extra)
2022 {
2023         wrqu->power.value = 0;
2024         wrqu->power.fixed = 0;  /* no auto select */
2025         wrqu->power.disabled = 1;
2026
2027         return 0;
2028 }
2029
2030 static int rtw_wx_set_gen_ie(struct net_device *dev,
2031                              struct iw_request_info *info,
2032                              union iwreq_data *wrqu, char *extra)
2033 {
2034         int ret;
2035         struct adapter *padapter = (struct adapter *)rtw_netdev_priv(dev);
2036
2037         ret = rtw_set_wpa_ie(padapter, extra, wrqu->data.length);
2038         return ret;
2039 }
2040
2041 static int rtw_wx_set_auth(struct net_device *dev,
2042                              struct iw_request_info *info,
2043                              union iwreq_data *wrqu, char *extra)
2044 {
2045         struct adapter *padapter = (struct adapter *)rtw_netdev_priv(dev);
2046         struct iw_param *param = (struct iw_param *)&(wrqu->param);
2047         int ret = 0;
2048
2049         switch (param->flags & IW_AUTH_INDEX) {
2050         case IW_AUTH_WPA_VERSION:
2051                 break;
2052         case IW_AUTH_CIPHER_PAIRWISE:
2053
2054                 break;
2055         case IW_AUTH_CIPHER_GROUP:
2056
2057                 break;
2058         case IW_AUTH_KEY_MGMT:
2059                 /*
2060                  *  ??? does not use these parameters
2061                  */
2062                 break;
2063         case IW_AUTH_TKIP_COUNTERMEASURES:
2064                 if (param->value) {
2065                         /*  wpa_supplicant is enabling the tkip countermeasure. */
2066                         padapter->securitypriv.btkip_countermeasure = true;
2067                 } else {
2068                         /*  wpa_supplicant is disabling the tkip countermeasure. */
2069                         padapter->securitypriv.btkip_countermeasure = false;
2070                 }
2071                 break;
2072         case IW_AUTH_DROP_UNENCRYPTED:
2073                 /* HACK:
2074                  *
2075                  * wpa_supplicant calls set_wpa_enabled when the driver
2076                  * is loaded and unloaded, regardless of if WPA is being
2077                  * used.  No other calls are made which can be used to
2078                  * determine if encryption will be used or not prior to
2079                  * association being expected.  If encryption is not being
2080                  * used, drop_unencrypted is set to false, else true -- we
2081                  * can use this to determine if the CAP_PRIVACY_ON bit should
2082                  * be set.
2083                  */
2084
2085                 if (padapter->securitypriv.ndisencryptstatus == Ndis802_11Encryption1Enabled)
2086                         break;/* it means init value, or using wep, ndisencryptstatus = Ndis802_11Encryption1Enabled, */
2087                                         /*  then it needn't reset it; */
2088
2089                 if (param->value) {
2090                         padapter->securitypriv.ndisencryptstatus = Ndis802_11EncryptionDisabled;
2091                         padapter->securitypriv.dot11PrivacyAlgrthm = _NO_PRIVACY_;
2092                         padapter->securitypriv.dot118021XGrpPrivacy = _NO_PRIVACY_;
2093                         padapter->securitypriv.dot11AuthAlgrthm = dot11AuthAlgrthm_Open; /* open system */
2094                         padapter->securitypriv.ndisauthtype = Ndis802_11AuthModeOpen;
2095                 }
2096
2097                 break;
2098         case IW_AUTH_80211_AUTH_ALG:
2099                 /*
2100                  *  It's the starting point of a link layer connection using wpa_supplicant
2101                 */
2102                 if (check_fwstate(&padapter->mlmepriv, _FW_LINKED)) {
2103                         LeaveAllPowerSaveMode(padapter);
2104                         rtw_disassoc_cmd(padapter, 500, false);
2105                         DBG_88E("%s...call rtw_indicate_disconnect\n ", __func__);
2106                         rtw_indicate_disconnect(padapter);
2107                         rtw_free_assoc_resources(padapter, 1);
2108                 }
2109                 ret = wpa_set_auth_algs(dev, (u32)param->value);
2110                 break;
2111         case IW_AUTH_WPA_ENABLED:
2112                 break;
2113         case IW_AUTH_RX_UNENCRYPTED_EAPOL:
2114                 break;
2115         case IW_AUTH_PRIVACY_INVOKED:
2116                 break;
2117         default:
2118                 return -EOPNOTSUPP;
2119         }
2120
2121         return ret;
2122 }
2123
2124 static int rtw_wx_set_enc_ext(struct net_device *dev,
2125                              struct iw_request_info *info,
2126                              union iwreq_data *wrqu, char *extra)
2127 {
2128         char *alg_name;
2129         u32 param_len;
2130         struct ieee_param *param = NULL;
2131         struct iw_point *pencoding = &wrqu->encoding;
2132         struct iw_encode_ext *pext = (struct iw_encode_ext *)extra;
2133         int ret = 0;
2134
2135         param_len = sizeof(struct ieee_param) + pext->key_len;
2136         param = (struct ieee_param *)rtw_malloc(param_len);
2137         if (param == NULL)
2138                 return -1;
2139
2140         _rtw_memset(param, 0, param_len);
2141
2142         param->cmd = IEEE_CMD_SET_ENCRYPTION;
2143         _rtw_memset(param->sta_addr, 0xff, ETH_ALEN);
2144
2145         switch (pext->alg) {
2146         case IW_ENCODE_ALG_NONE:
2147                 /* todo: remove key */
2148                 /* remove = 1; */
2149                 alg_name = "none";
2150                 break;
2151         case IW_ENCODE_ALG_WEP:
2152                 alg_name = "WEP";
2153                 break;
2154         case IW_ENCODE_ALG_TKIP:
2155                 alg_name = "TKIP";
2156                 break;
2157         case IW_ENCODE_ALG_CCMP:
2158                 alg_name = "CCMP";
2159                 break;
2160         default:
2161                 return -1;
2162         }
2163
2164         strncpy((char *)param->u.crypt.alg, alg_name, IEEE_CRYPT_ALG_NAME_LEN);
2165
2166         if (pext->ext_flags & IW_ENCODE_EXT_SET_TX_KEY)
2167                 param->u.crypt.set_tx = 1;
2168
2169         /* cliW: WEP does not have group key
2170          * just not checking GROUP key setting
2171          */
2172         if ((pext->alg != IW_ENCODE_ALG_WEP) &&
2173             (pext->ext_flags & IW_ENCODE_EXT_GROUP_KEY))
2174                 param->u.crypt.set_tx = 0;
2175
2176         param->u.crypt.idx = (pencoding->flags&0x00FF) - 1;
2177
2178         if (pext->ext_flags & IW_ENCODE_EXT_RX_SEQ_VALID)
2179                 memcpy(param->u.crypt.seq, pext->rx_seq, 8);
2180
2181         if (pext->key_len) {
2182                 param->u.crypt.key_len = pext->key_len;
2183                 memcpy(param->u.crypt.key, pext + 1, pext->key_len);
2184         }
2185
2186         ret =  wpa_set_encryption(dev, param, param_len);
2187
2188         kfree(param);
2189         return ret;
2190 }
2191
2192 static int rtw_wx_get_nick(struct net_device *dev,
2193                            struct iw_request_info *info,
2194                            union iwreq_data *wrqu, char *extra)
2195 {
2196         if (extra) {
2197                 wrqu->data.length = 14;
2198                 wrqu->data.flags = 1;
2199                 memcpy(extra, "<WIFI@REALTEK>", 14);
2200         }
2201
2202         /* dump debug info here */
2203         return 0;
2204 }
2205
2206 static int rtw_wx_read32(struct net_device *dev,
2207                             struct iw_request_info *info,
2208                             union iwreq_data *wrqu, char *extra)
2209 {
2210         struct adapter *padapter;
2211         struct iw_point *p;
2212         u16 len;
2213         u32 addr;
2214         u32 data32;
2215         u32 bytes;
2216         u8 *ptmp;
2217
2218         padapter = (struct adapter *)rtw_netdev_priv(dev);
2219         p = &wrqu->data;
2220         len = p->length;
2221         ptmp = (u8 *)rtw_malloc(len);
2222         if (NULL == ptmp)
2223                 return -ENOMEM;
2224
2225         if (copy_from_user(ptmp, p->pointer, len)) {
2226                 kfree(ptmp);
2227                 return -EFAULT;
2228         }
2229
2230         bytes = 0;
2231         addr = 0;
2232         sscanf(ptmp, "%d,%x", &bytes, &addr);
2233
2234         switch (bytes) {
2235         case 1:
2236                 data32 = rtw_read8(padapter, addr);
2237                 sprintf(extra, "0x%02X", data32);
2238                 break;
2239         case 2:
2240                 data32 = rtw_read16(padapter, addr);
2241                 sprintf(extra, "0x%04X", data32);
2242                 break;
2243         case 4:
2244                 data32 = rtw_read32(padapter, addr);
2245                 sprintf(extra, "0x%08X", data32);
2246                 break;
2247         default:
2248                 DBG_88E(KERN_INFO "%s: usage> read [bytes],[address(hex)]\n", __func__);
2249                 return -EINVAL;
2250         }
2251         DBG_88E(KERN_INFO "%s: addr = 0x%08X data =%s\n", __func__, addr, extra);
2252
2253         kfree(ptmp);
2254         return 0;
2255 }
2256
2257 static int rtw_wx_write32(struct net_device *dev,
2258                             struct iw_request_info *info,
2259                             union iwreq_data *wrqu, char *extra)
2260 {
2261         struct adapter *padapter = (struct adapter *)rtw_netdev_priv(dev);
2262
2263         u32 addr;
2264         u32 data32;
2265         u32 bytes;
2266
2267         bytes = 0;
2268         addr = 0;
2269         data32 = 0;
2270         sscanf(extra, "%d,%x,%x", &bytes, &addr, &data32);
2271
2272         switch (bytes) {
2273         case 1:
2274                 rtw_write8(padapter, addr, (u8)data32);
2275                 DBG_88E(KERN_INFO "%s: addr = 0x%08X data = 0x%02X\n", __func__, addr, (u8)data32);
2276                 break;
2277         case 2:
2278                 rtw_write16(padapter, addr, (u16)data32);
2279                 DBG_88E(KERN_INFO "%s: addr = 0x%08X data = 0x%04X\n", __func__, addr, (u16)data32);
2280                 break;
2281         case 4:
2282                 rtw_write32(padapter, addr, data32);
2283                 DBG_88E(KERN_INFO "%s: addr = 0x%08X data = 0x%08X\n", __func__, addr, data32);
2284                 break;
2285         default:
2286                 DBG_88E(KERN_INFO "%s: usage> write [bytes],[address(hex)],[data(hex)]\n", __func__);
2287                 return -EINVAL;
2288         }
2289
2290         return 0;
2291 }
2292
2293 static int rtw_wx_read_rf(struct net_device *dev,
2294                             struct iw_request_info *info,
2295                             union iwreq_data *wrqu, char *extra)
2296 {
2297         struct adapter *padapter = (struct adapter *)rtw_netdev_priv(dev);
2298         u32 path, addr, data32;
2299
2300         path = *(u32 *)extra;
2301         addr = *((u32 *)extra + 1);
2302         data32 = rtw_hal_read_rfreg(padapter, path, addr, 0xFFFFF);
2303         /*
2304          * IMPORTANT!!
2305          * Only when wireless private ioctl is at odd order,
2306          * "extra" would be copied to user space.
2307          */
2308         sprintf(extra, "0x%05x", data32);
2309
2310         return 0;
2311 }
2312
2313 static int rtw_wx_write_rf(struct net_device *dev,
2314                             struct iw_request_info *info,
2315                             union iwreq_data *wrqu, char *extra)
2316 {
2317         struct adapter *padapter = (struct adapter *)rtw_netdev_priv(dev);
2318         u32 path, addr, data32;
2319
2320         path = *(u32 *)extra;
2321         addr = *((u32 *)extra + 1);
2322         data32 = *((u32 *)extra + 2);
2323         rtw_hal_write_rfreg(padapter, path, addr, 0xFFFFF, data32);
2324
2325         return 0;
2326 }
2327
2328 static int rtw_wx_priv_null(struct net_device *dev, struct iw_request_info *a,
2329                  union iwreq_data *wrqu, char *b)
2330 {
2331         return -1;
2332 }
2333
2334 static int dummy(struct net_device *dev, struct iw_request_info *a,
2335                  union iwreq_data *wrqu, char *b)
2336 {
2337         return -1;
2338 }
2339
2340 static int rtw_wx_set_channel_plan(struct net_device *dev,
2341                                struct iw_request_info *info,
2342                                union iwreq_data *wrqu, char *extra)
2343 {
2344         struct adapter *padapter = (struct adapter *)rtw_netdev_priv(dev);
2345         struct mlme_priv *pmlmepriv = &padapter->mlmepriv;
2346         u8 channel_plan_req = (u8) (*((int *)wrqu));
2347
2348         if (_SUCCESS == rtw_set_chplan_cmd(padapter, channel_plan_req, 1))
2349                 DBG_88E("%s set channel_plan = 0x%02X\n", __func__, pmlmepriv->ChannelPlan);
2350         else
2351                 return -EPERM;
2352
2353         return 0;
2354 }
2355
2356 static int rtw_wx_set_mtk_wps_probe_ie(struct net_device *dev,
2357                 struct iw_request_info *a,
2358                 union iwreq_data *wrqu, char *b)
2359 {
2360         return 0;
2361 }
2362
2363 static int rtw_wx_get_sensitivity(struct net_device *dev,
2364                                 struct iw_request_info *info,
2365                                 union iwreq_data *wrqu, char *buf)
2366 {
2367         return 0;
2368 }
2369
2370 static int rtw_wx_set_mtk_wps_ie(struct net_device *dev,
2371                                 struct iw_request_info *info,
2372                                 union iwreq_data *wrqu, char *extra)
2373 {
2374         return 0;
2375 }
2376
2377 /*
2378  *      For all data larger than 16 octets, we need to use a
2379  *      pointer to memory allocated in user space.
2380  */
2381 static  int rtw_drvext_hdl(struct net_device *dev, struct iw_request_info *info,
2382                                                 union iwreq_data *wrqu, char *extra)
2383 {
2384         return 0;
2385 }
2386
2387 static void rtw_dbg_mode_hdl(struct adapter *padapter, u32 id, u8 *pdata, u32 len)
2388 {
2389         struct mp_rw_reg *RegRWStruct;
2390         struct rf_reg_param *prfreg;
2391         u8 path;
2392         u8 offset;
2393         u32 value;
2394
2395         DBG_88E("%s\n", __func__);
2396
2397         switch (id) {
2398         case GEN_MP_IOCTL_SUBCODE(MP_START):
2399                 DBG_88E("871x_driver is only for normal mode, can't enter mp mode\n");
2400                 break;
2401         case GEN_MP_IOCTL_SUBCODE(READ_REG):
2402                 RegRWStruct = (struct mp_rw_reg *)pdata;
2403                 switch (RegRWStruct->width) {
2404                 case 1:
2405                         RegRWStruct->value = rtw_read8(padapter, RegRWStruct->offset);
2406                         break;
2407                 case 2:
2408                         RegRWStruct->value = rtw_read16(padapter, RegRWStruct->offset);
2409                         break;
2410                 case 4:
2411                         RegRWStruct->value = rtw_read32(padapter, RegRWStruct->offset);
2412                         break;
2413                 default:
2414                         break;
2415                 }
2416
2417                 break;
2418         case GEN_MP_IOCTL_SUBCODE(WRITE_REG):
2419                 RegRWStruct = (struct mp_rw_reg *)pdata;
2420                 switch (RegRWStruct->width) {
2421                 case 1:
2422                         rtw_write8(padapter, RegRWStruct->offset, (u8)RegRWStruct->value);
2423                         break;
2424                 case 2:
2425                         rtw_write16(padapter, RegRWStruct->offset, (u16)RegRWStruct->value);
2426                         break;
2427                 case 4:
2428                         rtw_write32(padapter, RegRWStruct->offset, (u32)RegRWStruct->value);
2429                         break;
2430                 default:
2431                         break;
2432                 }
2433
2434                 break;
2435         case GEN_MP_IOCTL_SUBCODE(READ_RF_REG):
2436
2437                 prfreg = (struct rf_reg_param *)pdata;
2438
2439                 path = (u8)prfreg->path;
2440                 offset = (u8)prfreg->offset;
2441
2442                 value = rtw_hal_read_rfreg(padapter, path, offset, 0xffffffff);
2443
2444                 prfreg->value = value;
2445
2446                 break;
2447         case GEN_MP_IOCTL_SUBCODE(WRITE_RF_REG):
2448
2449                 prfreg = (struct rf_reg_param *)pdata;
2450
2451                 path = (u8)prfreg->path;
2452                 offset = (u8)prfreg->offset;
2453                 value = prfreg->value;
2454
2455                 rtw_hal_write_rfreg(padapter, path, offset, 0xffffffff, value);
2456
2457                 break;
2458         case GEN_MP_IOCTL_SUBCODE(TRIGGER_GPIO):
2459                 DBG_88E("==> trigger gpio 0\n");
2460                 rtw_hal_set_hwreg(padapter, HW_VAR_TRIGGER_GPIO_0, NULL);
2461                 break;
2462         case GEN_MP_IOCTL_SUBCODE(GET_WIFI_STATUS):
2463                 *pdata = rtw_hal_sreset_get_wifi_status(padapter);
2464                 break;
2465         default:
2466                 break;
2467         }
2468 }
2469
2470 static int rtw_mp_ioctl_hdl(struct net_device *dev, struct iw_request_info *info,
2471                                                 union iwreq_data *wrqu, char *extra)
2472 {
2473         int ret = 0;
2474         u32 BytesRead, BytesWritten, BytesNeeded;
2475         struct oid_par_priv     oid_par;
2476         struct mp_ioctl_handler *phandler;
2477         struct mp_ioctl_param   *poidparam;
2478         uint status = 0;
2479         u16 len;
2480         u8 *pparmbuf = NULL, bset;
2481         struct adapter *padapter = (struct adapter *)rtw_netdev_priv(dev);
2482         struct iw_point *p = &wrqu->data;
2483
2484         if ((!p->length) || (!p->pointer)) {
2485                 ret = -EINVAL;
2486                 goto _rtw_mp_ioctl_hdl_exit;
2487         }
2488         pparmbuf = NULL;
2489         bset = (u8)(p->flags & 0xFFFF);
2490         len = p->length;
2491         pparmbuf = (u8 *)rtw_malloc(len);
2492         if (pparmbuf == NULL) {
2493                 ret = -ENOMEM;
2494                 goto _rtw_mp_ioctl_hdl_exit;
2495         }
2496
2497         if (copy_from_user(pparmbuf, p->pointer, len)) {
2498                 ret = -EFAULT;
2499                 goto _rtw_mp_ioctl_hdl_exit;
2500         }
2501
2502         poidparam = (struct mp_ioctl_param *)pparmbuf;
2503         RT_TRACE(_module_rtl871x_ioctl_os_c, _drv_info_,
2504                  ("rtw_mp_ioctl_hdl: subcode [%d], len[%d], buffer_len[%d]\r\n",
2505                   poidparam->subcode, poidparam->len, len));
2506
2507         if (poidparam->subcode >= MAX_MP_IOCTL_SUBCODE) {
2508                 RT_TRACE(_module_rtl871x_ioctl_os_c, _drv_err_, ("no matching drvext subcodes\r\n"));
2509                 ret = -EINVAL;
2510                 goto _rtw_mp_ioctl_hdl_exit;
2511         }
2512
2513         if (padapter->registrypriv.mp_mode == 1) {
2514                 phandler = mp_ioctl_hdl + poidparam->subcode;
2515
2516                 if ((phandler->paramsize != 0) && (poidparam->len < phandler->paramsize)) {
2517                         RT_TRACE(_module_rtl871x_ioctl_os_c, _drv_err_,
2518                                  ("no matching drvext param size %d vs %d\r\n",
2519                                   poidparam->len, phandler->paramsize));
2520                         ret = -EINVAL;
2521                         goto _rtw_mp_ioctl_hdl_exit;
2522                 }
2523
2524                 if (phandler->handler) {
2525                         oid_par.adapter_context = padapter;
2526                         oid_par.oid = phandler->oid;
2527                         oid_par.information_buf = poidparam->data;
2528                         oid_par.information_buf_len = poidparam->len;
2529                         oid_par.dbg = 0;
2530
2531                         BytesWritten = 0;
2532                         BytesNeeded = 0;
2533
2534                         if (bset) {
2535                                 oid_par.bytes_rw = &BytesRead;
2536                                 oid_par.bytes_needed = &BytesNeeded;
2537                                 oid_par.type_of_oid = SET_OID;
2538                         } else {
2539                                 oid_par.bytes_rw = &BytesWritten;
2540                                 oid_par.bytes_needed = &BytesNeeded;
2541                                 oid_par.type_of_oid = QUERY_OID;
2542                         }
2543
2544                         status = phandler->handler(&oid_par);
2545                 } else {
2546                         DBG_88E("rtw_mp_ioctl_hdl(): err!, subcode =%d, oid =%d, handler =%p\n",
2547                                 poidparam->subcode, phandler->oid, phandler->handler);
2548                         ret = -EFAULT;
2549                         goto _rtw_mp_ioctl_hdl_exit;
2550                 }
2551         } else {
2552                 rtw_dbg_mode_hdl(padapter, poidparam->subcode, poidparam->data, poidparam->len);
2553         }
2554
2555         if (bset == 0x00) {/* query info */
2556                 if (copy_to_user(p->pointer, pparmbuf, len))
2557                         ret = -EFAULT;
2558         }
2559
2560         if (status) {
2561                 ret = -EFAULT;
2562                 goto _rtw_mp_ioctl_hdl_exit;
2563         }
2564
2565 _rtw_mp_ioctl_hdl_exit:
2566
2567         kfree(pparmbuf);
2568         return ret;
2569 }
2570
2571 static int rtw_get_ap_info(struct net_device *dev,
2572                                struct iw_request_info *info,
2573                                union iwreq_data *wrqu, char *extra)
2574 {
2575         int ret = 0;
2576         u32 cnt = 0, wpa_ielen;
2577         unsigned long   irqL;
2578         struct list_head *plist, *phead;
2579         unsigned char *pbuf;
2580         u8 bssid[ETH_ALEN];
2581         char data[32];
2582         struct wlan_network *pnetwork = NULL;
2583         struct adapter *padapter = (struct adapter *)rtw_netdev_priv(dev);
2584         struct mlme_priv *pmlmepriv = &(padapter->mlmepriv);
2585         struct __queue *queue = &(pmlmepriv->scanned_queue);
2586         struct iw_point *pdata = &wrqu->data;
2587
2588         DBG_88E("+rtw_get_aplist_info\n");
2589
2590         if ((padapter->bDriverStopped) || (pdata == NULL)) {
2591                 ret = -EINVAL;
2592                 goto exit;
2593         }
2594
2595         while ((check_fwstate(pmlmepriv, (_FW_UNDER_SURVEY|_FW_UNDER_LINKING)))) {
2596                 rtw_msleep_os(30);
2597                 cnt++;
2598                 if (cnt > 100)
2599                         break;
2600         }
2601         pdata->flags = 0;
2602         if (pdata->length >= 32) {
2603                 if (copy_from_user(data, pdata->pointer, 32)) {
2604                         ret = -EINVAL;
2605                         goto exit;
2606                 }
2607         } else {
2608                 ret = -EINVAL;
2609                 goto exit;
2610         }
2611
2612         _enter_critical_bh(&(pmlmepriv->scanned_queue.lock), &irqL);
2613
2614         phead = get_list_head(queue);
2615         plist = get_next(phead);
2616
2617         while (1) {
2618                 if (rtw_end_of_queue_search(phead, plist) == true)
2619                         break;
2620
2621                 pnetwork = LIST_CONTAINOR(plist, struct wlan_network, list);
2622
2623                 if (hwaddr_aton_i(data, bssid)) {
2624                         DBG_88E("Invalid BSSID '%s'.\n", (u8 *)data);
2625                         _exit_critical_bh(&(pmlmepriv->scanned_queue.lock), &irqL);
2626                         return -EINVAL;
2627                 }
2628
2629                 if (!memcmp(bssid, pnetwork->network.MacAddress, ETH_ALEN) == true) {
2630                         /* BSSID match, then check if supporting wpa/wpa2 */
2631                         DBG_88E("BSSID:%pM\n", (bssid));
2632
2633                         pbuf = rtw_get_wpa_ie(&pnetwork->network.IEs[12], &wpa_ielen, pnetwork->network.IELength-12);
2634                         if (pbuf && (wpa_ielen > 0)) {
2635                                 pdata->flags = 1;
2636                                 break;
2637                         }
2638
2639                         pbuf = rtw_get_wpa2_ie(&pnetwork->network.IEs[12], &wpa_ielen, pnetwork->network.IELength-12);
2640                         if (pbuf && (wpa_ielen > 0)) {
2641                                 pdata->flags = 2;
2642                                 break;
2643                         }
2644                 }
2645
2646                 plist = get_next(plist);
2647         }
2648
2649         _exit_critical_bh(&(pmlmepriv->scanned_queue.lock), &irqL);
2650
2651         if (pdata->length >= 34) {
2652                 if (copy_to_user(pdata->pointer+32, (u8 *)&pdata->flags, 1)) {
2653                         ret = -EINVAL;
2654                         goto exit;
2655                 }
2656         }
2657
2658 exit:
2659
2660         return ret;
2661 }
2662
2663 static int rtw_set_pid(struct net_device *dev,
2664                                struct iw_request_info *info,
2665                                union iwreq_data *wrqu, char *extra)
2666 {
2667         int ret = 0;
2668         struct adapter *padapter = rtw_netdev_priv(dev);
2669         int *pdata = (int *)wrqu;
2670         int selector;
2671
2672         if ((padapter->bDriverStopped) || (pdata == NULL)) {
2673                 ret = -EINVAL;
2674                 goto exit;
2675         }
2676
2677         selector = *pdata;
2678         if (selector < 3 && selector >= 0) {
2679                 padapter->pid[selector] = *(pdata+1);
2680                 ui_pid[selector] = *(pdata+1);
2681                 DBG_88E("%s set pid[%d] =%d\n", __func__, selector, padapter->pid[selector]);
2682         } else {
2683                 DBG_88E("%s selector %d error\n", __func__, selector);
2684         }
2685 exit:
2686         return ret;
2687 }
2688
2689 static int rtw_wps_start(struct net_device *dev,
2690                          struct iw_request_info *info,
2691                          union iwreq_data *wrqu, char *extra)
2692 {
2693         int ret = 0;
2694         struct adapter *padapter = (struct adapter *)rtw_netdev_priv(dev);
2695         struct iw_point *pdata = &wrqu->data;
2696         u32   u32wps_start = 0;
2697
2698         ret = copy_from_user((void *)&u32wps_start, pdata->pointer, 4);
2699         if (ret) {
2700                 ret = -EINVAL;
2701                 goto exit;
2702         }
2703
2704         if ((padapter->bDriverStopped) || (pdata == NULL)) {
2705                 ret = -EINVAL;
2706                 goto exit;
2707         }
2708
2709         if (u32wps_start == 0)
2710                 u32wps_start = *extra;
2711
2712         DBG_88E("[%s] wps_start = %d\n", __func__, u32wps_start);
2713
2714         if (u32wps_start == 1) /*  WPS Start */
2715                 rtw_led_control(padapter, LED_CTL_START_WPS);
2716         else if (u32wps_start == 2) /*  WPS Stop because of wps success */
2717                 rtw_led_control(padapter, LED_CTL_STOP_WPS);
2718         else if (u32wps_start == 3) /*  WPS Stop because of wps fail */
2719                 rtw_led_control(padapter, LED_CTL_STOP_WPS_FAIL);
2720
2721 exit:
2722         return ret;
2723 }
2724
2725 #ifdef CONFIG_88EU_P2P
2726 static int rtw_wext_p2p_enable(struct net_device *dev,
2727                                struct iw_request_info *info,
2728                                union iwreq_data *wrqu, char *extra)
2729 {
2730         int ret = 0;
2731         struct adapter *padapter = (struct adapter *)rtw_netdev_priv(dev);
2732         struct wifidirect_info *pwdinfo = &(padapter->wdinfo);
2733         struct mlme_ext_priv    *pmlmeext = &padapter->mlmeextpriv;
2734         enum P2P_ROLE init_role = P2P_ROLE_DISABLE;
2735
2736         if (*extra == '0')
2737                 init_role = P2P_ROLE_DISABLE;
2738         else if (*extra == '1')
2739                 init_role = P2P_ROLE_DEVICE;
2740         else if (*extra == '2')
2741                 init_role = P2P_ROLE_CLIENT;
2742         else if (*extra == '3')
2743                 init_role = P2P_ROLE_GO;
2744
2745         if (_FAIL == rtw_p2p_enable(padapter, init_role)) {
2746                 ret = -EFAULT;
2747                 goto exit;
2748         }
2749
2750         /* set channel/bandwidth */
2751         if (init_role != P2P_ROLE_DISABLE) {
2752                 u8 channel, ch_offset;
2753                 u16 bwmode;
2754
2755                 if (rtw_p2p_chk_state(pwdinfo, P2P_STATE_LISTEN)) {
2756                         /*      Stay at the listen state and wait for discovery. */
2757                         channel = pwdinfo->listen_channel;
2758                         pwdinfo->operating_channel = pwdinfo->listen_channel;
2759                         ch_offset = HAL_PRIME_CHNL_OFFSET_DONT_CARE;
2760                         bwmode = HT_CHANNEL_WIDTH_20;
2761                 } else {
2762                         pwdinfo->operating_channel = pmlmeext->cur_channel;
2763
2764                         channel = pwdinfo->operating_channel;
2765                         ch_offset = pmlmeext->cur_ch_offset;
2766                         bwmode = pmlmeext->cur_bwmode;
2767                 }
2768
2769                 set_channel_bwmode(padapter, channel, ch_offset, bwmode);
2770         }
2771
2772 exit:
2773         return ret;
2774 }
2775
2776 static int rtw_p2p_set_go_nego_ssid(struct net_device *dev,
2777                                struct iw_request_info *info,
2778                                union iwreq_data *wrqu, char *extra)
2779 {
2780         int ret = 0;
2781         struct adapter *padapter = (struct adapter *)rtw_netdev_priv(dev);
2782         struct wifidirect_info *pwdinfo = &(padapter->wdinfo);
2783
2784         DBG_88E("[%s] ssid = %s, len = %zu\n", __func__, extra, strlen(extra));
2785         memcpy(pwdinfo->nego_ssid, extra, strlen(extra));
2786         pwdinfo->nego_ssidlen = strlen(extra);
2787
2788         return ret;
2789 }
2790
2791 static int rtw_p2p_set_intent(struct net_device *dev,
2792                               struct iw_request_info *info,
2793                               union iwreq_data *wrqu, char *extra)
2794 {
2795         int ret = 0;
2796         struct adapter *padapter = (struct adapter *)rtw_netdev_priv(dev);
2797         struct wifidirect_info *pwdinfo = &(padapter->wdinfo);
2798         u8 intent = pwdinfo->intent;
2799
2800         switch (wrqu->data.length) {
2801         case 1:
2802                 intent = extra[0] - '0';
2803                 break;
2804         case 2:
2805                 intent = str_2char2num(extra[0], extra[1]);
2806                 break;
2807         }
2808         if (intent <= 15)
2809                 pwdinfo->intent = intent;
2810         else
2811                 ret = -1;
2812         DBG_88E("[%s] intent = %d\n", __func__, intent);
2813         return ret;
2814 }
2815
2816 static int rtw_p2p_set_listen_ch(struct net_device *dev,
2817                                struct iw_request_info *info,
2818                                union iwreq_data *wrqu, char *extra)
2819 {
2820         int ret = 0;
2821         struct adapter *padapter = (struct adapter *)rtw_netdev_priv(dev);
2822         struct wifidirect_info *pwdinfo = &(padapter->wdinfo);
2823         u8 listen_ch = pwdinfo->listen_channel; /*      Listen channel number */
2824
2825         switch (wrqu->data.length) {
2826         case 1:
2827                 listen_ch = extra[0] - '0';
2828                 break;
2829         case 2:
2830                 listen_ch = str_2char2num(extra[0], extra[1]);
2831                 break;
2832         }
2833
2834         if ((listen_ch == 1) || (listen_ch == 6) || (listen_ch == 11)) {
2835                 pwdinfo->listen_channel = listen_ch;
2836                 set_channel_bwmode(padapter, pwdinfo->listen_channel, HAL_PRIME_CHNL_OFFSET_DONT_CARE, HT_CHANNEL_WIDTH_20);
2837         } else {
2838                 ret = -1;
2839         }
2840
2841         DBG_88E("[%s] listen_ch = %d\n", __func__, pwdinfo->listen_channel);
2842
2843         return ret;
2844 }
2845
2846 static int rtw_p2p_set_op_ch(struct net_device *dev,
2847                                struct iw_request_info *info,
2848                                union iwreq_data *wrqu, char *extra)
2849 {
2850 /*      Commented by Albert 20110524 */
2851 /*      This function is used to set the operating channel if the driver will become the group owner */
2852
2853         int ret = 0;
2854         struct adapter *padapter = (struct adapter *)rtw_netdev_priv(dev);
2855         struct wifidirect_info *pwdinfo = &(padapter->wdinfo);
2856         u8 op_ch = pwdinfo->operating_channel;  /*      Operating channel number */
2857
2858         switch (wrqu->data.length) {
2859         case 1:
2860                 op_ch = extra[0] - '0';
2861                 break;
2862         case 2:
2863                 op_ch = str_2char2num(extra[0], extra[1]);
2864                 break;
2865         }
2866
2867         if (op_ch > 0)
2868                 pwdinfo->operating_channel = op_ch;
2869         else
2870                 ret = -1;
2871
2872         DBG_88E("[%s] op_ch = %d\n", __func__, pwdinfo->operating_channel);
2873
2874         return ret;
2875 }
2876
2877 static int rtw_p2p_profilefound(struct net_device *dev,
2878                                struct iw_request_info *info,
2879                                union iwreq_data *wrqu, char *extra)
2880 {
2881         int ret = 0;
2882         struct adapter *padapter = (struct adapter *)rtw_netdev_priv(dev);
2883         struct wifidirect_info *pwdinfo = &(padapter->wdinfo);
2884
2885         /*      Comment by Albert 2010/10/13 */
2886         /*      Input data format: */
2887         /*      Ex:  0 */
2888         /*      Ex:  1XX:XX:XX:XX:XX:XXYYSSID */
2889         /*      0 => Reflush the profile record list. */
2890         /*      1 => Add the profile list */
2891         /*      XX:XX:XX:XX:XX:XX => peer's MAC Address (ex: 00:E0:4C:00:00:01) */
2892         /*      YY => SSID Length */
2893         /*      SSID => SSID for persistence group */
2894
2895         DBG_88E("[%s] In value = %s, len = %d\n", __func__, extra, wrqu->data.length - 1);
2896
2897         /*      The upper application should pass the SSID to driver by using this rtw_p2p_profilefound function. */
2898                 if (!rtw_p2p_chk_state(pwdinfo, P2P_STATE_NONE)) {
2899                         if (extra[0] == '0') {
2900                         /*      Remove all the profile information of wifidirect_info structure. */
2901                         _rtw_memset(&pwdinfo->profileinfo[0], 0x00, sizeof(struct profile_info) * P2P_MAX_PERSISTENT_GROUP_NUM);
2902                         pwdinfo->profileindex = 0;
2903                 } else {
2904                         if (pwdinfo->profileindex >= P2P_MAX_PERSISTENT_GROUP_NUM) {
2905                                 ret = -1;
2906                         } else {
2907                                 int jj, kk;
2908
2909                                 /*      Add this profile information into pwdinfo->profileinfo */
2910                                 /*      Ex:  1XX:XX:XX:XX:XX:XXYYSSID */
2911                                 for (jj = 0, kk = 1; jj < ETH_ALEN; jj++, kk += 3)
2912                                         pwdinfo->profileinfo[pwdinfo->profileindex].peermac[jj] = key_2char2num(extra[kk], extra[kk + 1]);
2913
2914                                 pwdinfo->profileinfo[pwdinfo->profileindex].ssidlen = (extra[18] - '0') * 10 + (extra[19] - '0');
2915                                 memcpy(pwdinfo->profileinfo[pwdinfo->profileindex].ssid, &extra[20], pwdinfo->profileinfo[pwdinfo->profileindex].ssidlen);
2916                                 pwdinfo->profileindex++;
2917                         }
2918                 }
2919         }
2920
2921         return ret;
2922 }
2923
2924 static int rtw_p2p_setDN(struct net_device *dev,
2925                                struct iw_request_info *info,
2926                                union iwreq_data *wrqu, char *extra)
2927 {
2928         int ret = 0;
2929         struct adapter *padapter = (struct adapter *)rtw_netdev_priv(dev);
2930         struct wifidirect_info *pwdinfo = &(padapter->wdinfo);
2931
2932         DBG_88E("[%s] %s %d\n", __func__, extra, wrqu->data.length - 1);
2933         _rtw_memset(pwdinfo->device_name, 0x00, WPS_MAX_DEVICE_NAME_LEN);
2934         memcpy(pwdinfo->device_name, extra, wrqu->data.length - 1);
2935         pwdinfo->device_name_len = wrqu->data.length - 1;
2936
2937         return ret;
2938 }
2939
2940 static int rtw_p2p_get_status(struct net_device *dev,
2941                                struct iw_request_info *info,
2942                                union iwreq_data *wrqu, char *extra)
2943 {
2944         int ret = 0;
2945         struct adapter *padapter = (struct adapter *)rtw_netdev_priv(dev);
2946         struct wifidirect_info *pwdinfo = &(padapter->wdinfo);
2947
2948         if (padapter->bShowGetP2PState)
2949                 DBG_88E("[%s] Role = %d, Status = %d, peer addr = %.2X:%.2X:%.2X:%.2X:%.2X:%.2X\n", __func__, rtw_p2p_role(pwdinfo), rtw_p2p_state(pwdinfo),
2950                         pwdinfo->p2p_peer_interface_addr[0], pwdinfo->p2p_peer_interface_addr[1], pwdinfo->p2p_peer_interface_addr[2],
2951                         pwdinfo->p2p_peer_interface_addr[3], pwdinfo->p2p_peer_interface_addr[4], pwdinfo->p2p_peer_interface_addr[5]);
2952
2953         /*      Commented by Albert 2010/10/12 */
2954         /*      Because of the output size limitation, I had removed the "Role" information. */
2955         /*      About the "Role" information, we will use the new private IOCTL to get the "Role" information. */
2956         sprintf(extra, "\n\nStatus =%.2d\n", rtw_p2p_state(pwdinfo));
2957         wrqu->data.length = strlen(extra);
2958
2959         return ret;
2960 }
2961
2962 /*      Commented by Albert 20110520 */
2963 /*      This function will return the config method description */
2964 /*      This config method description will show us which config method the remote P2P device is intented to use */
2965 /*      by sending the provisioning discovery request frame. */
2966
2967 static int rtw_p2p_get_req_cm(struct net_device *dev,
2968                                struct iw_request_info *info,
2969                                union iwreq_data *wrqu, char *extra)
2970 {
2971         int ret = 0;
2972         struct adapter *padapter = (struct adapter *)rtw_netdev_priv(dev);
2973         struct wifidirect_info *pwdinfo = &(padapter->wdinfo);
2974
2975         sprintf(extra, "\n\nCM =%s\n", pwdinfo->rx_prov_disc_info.strconfig_method_desc_of_prov_disc_req);
2976         wrqu->data.length = strlen(extra);
2977         return ret;
2978 }
2979
2980 static int rtw_p2p_get_role(struct net_device *dev,
2981                                struct iw_request_info *info,
2982                                union iwreq_data *wrqu, char *extra)
2983 {
2984         int ret = 0;
2985         struct adapter *padapter = (struct adapter *)rtw_netdev_priv(dev);
2986         struct wifidirect_info *pwdinfo = &(padapter->wdinfo);
2987
2988         DBG_88E("[%s] Role = %d, Status = %d, peer addr = %.2X:%.2X:%.2X:%.2X:%.2X:%.2X\n", __func__, rtw_p2p_role(pwdinfo), rtw_p2p_state(pwdinfo),
2989                         pwdinfo->p2p_peer_interface_addr[0], pwdinfo->p2p_peer_interface_addr[1], pwdinfo->p2p_peer_interface_addr[2],
2990                         pwdinfo->p2p_peer_interface_addr[3], pwdinfo->p2p_peer_interface_addr[4], pwdinfo->p2p_peer_interface_addr[5]);
2991
2992         sprintf(extra, "\n\nRole =%.2d\n", rtw_p2p_role(pwdinfo));
2993         wrqu->data.length = strlen(extra);
2994         return ret;
2995 }
2996
2997 static int rtw_p2p_get_peer_ifaddr(struct net_device *dev,
2998                                struct iw_request_info *info,
2999                                union iwreq_data *wrqu, char *extra)
3000 {
3001         int ret = 0;
3002         struct adapter *padapter = (struct adapter *)rtw_netdev_priv(dev);
3003         struct wifidirect_info *pwdinfo = &(padapter->wdinfo);
3004
3005         DBG_88E("[%s] Role = %d, Status = %d, peer addr = %pM\n", __func__,
3006                 rtw_p2p_role(pwdinfo), rtw_p2p_state(pwdinfo),
3007                 pwdinfo->p2p_peer_interface_addr);
3008         sprintf(extra, "\nMAC %pM",
3009                 pwdinfo->p2p_peer_interface_addr);
3010         wrqu->data.length = strlen(extra);
3011         return ret;
3012 }
3013
3014 static int rtw_p2p_get_peer_devaddr(struct net_device *dev,
3015                                struct iw_request_info *info,
3016                                union iwreq_data *wrqu, char *extra)
3017
3018 {
3019         int ret = 0;
3020         struct adapter *padapter = (struct adapter *)rtw_netdev_priv(dev);
3021         struct wifidirect_info *pwdinfo = &(padapter->wdinfo);
3022
3023         DBG_88E("[%s] Role = %d, Status = %d, peer addr = %pM\n", __func__,
3024                 rtw_p2p_role(pwdinfo), rtw_p2p_state(pwdinfo),
3025                 pwdinfo->rx_prov_disc_info.peerDevAddr);
3026         sprintf(extra, "\n%pM",
3027                 pwdinfo->rx_prov_disc_info.peerDevAddr);
3028         wrqu->data.length = strlen(extra);
3029         return ret;
3030 }
3031
3032 static int rtw_p2p_get_peer_devaddr_by_invitation(struct net_device *dev,
3033                                struct iw_request_info *info,
3034                                union iwreq_data *wrqu, char *extra)
3035
3036 {
3037         int ret = 0;
3038         struct adapter *padapter = (struct adapter *)rtw_netdev_priv(dev);
3039         struct wifidirect_info *pwdinfo = &(padapter->wdinfo);
3040
3041         DBG_88E("[%s] Role = %d, Status = %d, peer addr = %pM\n",
3042                 __func__, rtw_p2p_role(pwdinfo), rtw_p2p_state(pwdinfo),
3043                 pwdinfo->p2p_peer_device_addr);
3044         sprintf(extra, "\nMAC %pM",
3045                 pwdinfo->p2p_peer_device_addr);
3046         wrqu->data.length = strlen(extra);
3047         return ret;
3048 }
3049
3050 static int rtw_p2p_get_groupid(struct net_device *dev,
3051                                struct iw_request_info *info,
3052                                union iwreq_data *wrqu, char *extra)
3053
3054 {
3055         int ret = 0;
3056         struct adapter *padapter = (struct adapter *)rtw_netdev_priv(dev);
3057         struct wifidirect_info *pwdinfo = &(padapter->wdinfo);
3058
3059         sprintf(extra, "\n%.2X:%.2X:%.2X:%.2X:%.2X:%.2X %s",
3060                 pwdinfo->groupid_info.go_device_addr[0], pwdinfo->groupid_info.go_device_addr[1],
3061                 pwdinfo->groupid_info.go_device_addr[2], pwdinfo->groupid_info.go_device_addr[3],
3062                 pwdinfo->groupid_info.go_device_addr[4], pwdinfo->groupid_info.go_device_addr[5],
3063                 pwdinfo->groupid_info.ssid);
3064         wrqu->data.length = strlen(extra);
3065         return ret;
3066 }
3067
3068 static int rtw_p2p_get_op_ch(struct net_device *dev,
3069                                struct iw_request_info *info,
3070                                union iwreq_data *wrqu, char *extra)
3071
3072 {
3073         int ret = 0;
3074         struct adapter *padapter = (struct adapter *)rtw_netdev_priv(dev);
3075         struct wifidirect_info *pwdinfo = &(padapter->wdinfo);
3076
3077         DBG_88E("[%s] Op_ch = %02x\n", __func__, pwdinfo->operating_channel);
3078
3079         sprintf(extra, "\n\nOp_ch =%.2d\n", pwdinfo->operating_channel);
3080         wrqu->data.length = strlen(extra);
3081         return ret;
3082 }
3083
3084 static int rtw_p2p_get_wps_configmethod(struct net_device *dev,
3085                                struct iw_request_info *info,
3086                                union iwreq_data *wrqu, char *extra)
3087 {
3088         int ret = 0;
3089         struct adapter *padapter = (struct adapter *)rtw_netdev_priv(dev);
3090         u8 peerMAC[ETH_ALEN] = {0x00};
3091         int jj, kk;
3092         u8 peerMACStr[17] = {0x00};
3093         struct mlme_priv                *pmlmepriv = &padapter->mlmepriv;
3094         unsigned long                           irqL;
3095         struct list_head *plist, *phead;
3096         struct __queue *queue   = &(pmlmepriv->scanned_queue);
3097         struct  wlan_network    *pnetwork = NULL;
3098         u8 blnMatch = 0;
3099         u16     attr_content = 0;
3100         uint attr_contentlen = 0;
3101         /* 6 is the string "wpsCM =", 17 is the MAC addr, we have to clear it at wrqu->data.pointer */
3102         u8 attr_content_str[6 + 17] = {0x00};
3103
3104         /*      Commented by Albert 20110727 */
3105         /*      The input data is the MAC address which the application wants to know its WPS config method. */
3106         /*      After knowing its WPS config method, the application can decide the config method for provisioning discovery. */
3107         /*      Format: iwpriv wlanx p2p_get_wpsCM 00:E0:4C:00:00:05 */
3108
3109         DBG_88E("[%s] data = %s\n", __func__, (char *)extra);
3110         if (copy_from_user(peerMACStr, wrqu->data.pointer + 6, 17))
3111                 return -EFAULT;
3112
3113         for (jj = 0, kk = 0; jj < ETH_ALEN; jj++, kk += 3)
3114                 peerMAC[jj] = key_2char2num(peerMACStr[kk], peerMACStr[kk + 1]);
3115
3116         _enter_critical_bh(&(pmlmepriv->scanned_queue.lock), &irqL);
3117
3118         phead = get_list_head(queue);
3119         plist = get_next(phead);
3120
3121         while (1) {
3122                 if (rtw_end_of_queue_search(phead, plist) == true)
3123                         break;
3124
3125                 pnetwork = LIST_CONTAINOR(plist, struct wlan_network, list);
3126                 if (!memcmp(pnetwork->network.MacAddress, peerMAC, ETH_ALEN)) {
3127                         u8 *wpsie;
3128                         uint wpsie_len = 0;
3129                         __be16 be_tmp;
3130
3131                         /*  The mac address is matched. */
3132                         wpsie = rtw_get_wps_ie(&pnetwork->network.IEs[12], pnetwork->network.IELength - 12, NULL, &wpsie_len);
3133                         if (wpsie) {
3134                                 rtw_get_wps_attr_content(wpsie, wpsie_len, WPS_ATTR_CONF_METHOD, (u8 *) &be_tmp, &attr_contentlen);
3135                                 if (attr_contentlen) {
3136                                         attr_content = be16_to_cpu(be_tmp);
3137                                         sprintf(attr_content_str, "\n\nM =%.4d", attr_content);
3138                                         blnMatch = 1;
3139                                 }
3140                         }
3141                         break;
3142                 }
3143                 plist = get_next(plist);
3144         }
3145
3146         _exit_critical_bh(&(pmlmepriv->scanned_queue.lock), &irqL);
3147
3148         if (!blnMatch)
3149                 sprintf(attr_content_str, "\n\nM = 0000");
3150
3151         if (copy_to_user(wrqu->data.pointer, attr_content_str, 6 + 17))
3152                 return -EFAULT;
3153         return ret;
3154 }
3155
3156 static int rtw_p2p_get_go_device_address(struct net_device *dev,
3157                                struct iw_request_info *info,
3158                                union iwreq_data *wrqu, char *extra)
3159 {
3160         int ret = 0;
3161         struct adapter *padapter = (struct adapter *)rtw_netdev_priv(dev);
3162         u8 peerMAC[ETH_ALEN] = {0x00};
3163         int jj, kk;
3164         u8 peerMACStr[17] = {0x00};
3165         struct mlme_priv                *pmlmepriv = &padapter->mlmepriv;
3166         unsigned long                           irqL;
3167         struct list_head *plist, *phead;
3168         struct __queue *queue   = &(pmlmepriv->scanned_queue);
3169         struct  wlan_network    *pnetwork = NULL;
3170         u8 blnMatch = 0;
3171         u8 *p2pie;
3172         uint p2pielen = 0, attr_contentlen = 0;
3173         u8 attr_content[100] = {0x00};
3174
3175         u8 go_devadd_str[17 + 10] = {0x00};
3176         /*  +10 is for the str "go_devadd =", we have to clear it at wrqu->data.pointer */
3177
3178         /*      Commented by Albert 20121209 */
3179         /*      The input data is the GO's interface address which the application wants to know its device address. */
3180         /*      Format: iwpriv wlanx p2p_get2 go_devadd = 00:E0:4C:00:00:05 */
3181
3182         DBG_88E("[%s] data = %s\n", __func__, (char *)extra);
3183         if (copy_from_user(peerMACStr, wrqu->data.pointer + 10, 17))
3184                 return -EFAULT;
3185
3186         for (jj = 0, kk = 0; jj < ETH_ALEN; jj++, kk += 3)
3187                 peerMAC[jj] = key_2char2num(peerMACStr[kk], peerMACStr[kk + 1]);
3188
3189         _enter_critical_bh(&(pmlmepriv->scanned_queue.lock), &irqL);
3190
3191         phead = get_list_head(queue);
3192         plist = get_next(phead);
3193
3194         while (1) {
3195                 if (rtw_end_of_queue_search(phead, plist) == true)
3196                         break;
3197
3198                 pnetwork = LIST_CONTAINOR(plist, struct wlan_network, list);
3199                 if (!memcmp(pnetwork->network.MacAddress, peerMAC, ETH_ALEN)) {
3200                         /*      Commented by Albert 2011/05/18 */
3201                         /*      Match the device address located in the P2P IE */
3202                         /*      This is for the case that the P2P device address is not the same as the P2P interface address. */
3203
3204                         p2pie = rtw_get_p2p_ie(&pnetwork->network.IEs[12], pnetwork->network.IELength - 12, NULL, &p2pielen);
3205                         if (p2pie) {
3206                                 while (p2pie) {
3207                                         /*      The P2P Device ID attribute is included in the Beacon frame. */
3208                                         /*      The P2P Device Info attribute is included in the probe response frame. */
3209
3210                                         _rtw_memset(attr_content, 0x00, 100);
3211                                         if (rtw_get_p2p_attr_content(p2pie, p2pielen, P2P_ATTR_DEVICE_ID, attr_content, &attr_contentlen)) {
3212                                                 /*      Handle the P2P Device ID attribute of Beacon first */
3213                                                 blnMatch = 1;
3214                                                 break;
3215                                         } else if (rtw_get_p2p_attr_content(p2pie, p2pielen, P2P_ATTR_DEVICE_INFO, attr_content, &attr_contentlen)) {
3216                                                 /*      Handle the P2P Device Info attribute of probe response */
3217                                                 blnMatch = 1;
3218                                                 break;
3219                                         }
3220
3221                                         /* Get the next P2P IE */
3222                                         p2pie = rtw_get_p2p_ie(p2pie+p2pielen, pnetwork->network.IELength - 12 - (p2pie - &pnetwork->network.IEs[12] + p2pielen), NULL, &p2pielen);
3223                                 }
3224                         }
3225              }
3226
3227                 plist = get_next(plist);
3228         }
3229
3230         _exit_critical_bh(&(pmlmepriv->scanned_queue.lock), &irqL);
3231
3232         if (!blnMatch)
3233                 sprintf(go_devadd_str, "\n\ndev_add = NULL");
3234         else
3235                 sprintf(go_devadd_str, "\n\ndev_add =%.2X:%.2X:%.2X:%.2X:%.2X:%.2X",
3236                         attr_content[0], attr_content[1], attr_content[2], attr_content[3], attr_content[4], attr_content[5]);
3237
3238         if (copy_to_user(wrqu->data.pointer, go_devadd_str, 10 + 17))
3239                 return -EFAULT;
3240         return ret;
3241 }
3242
3243 static int rtw_p2p_get_device_type(struct net_device *dev,
3244                                struct iw_request_info *info,
3245                                union iwreq_data *wrqu, char *extra)
3246 {
3247         int ret = 0;
3248         struct adapter *padapter = (struct adapter *)rtw_netdev_priv(dev);
3249         u8 peerMAC[ETH_ALEN] = {0x00};
3250         int jj, kk;
3251         u8 peerMACStr[17] = {0x00};
3252         struct mlme_priv                *pmlmepriv = &padapter->mlmepriv;
3253         unsigned long                           irqL;
3254         struct list_head *plist, *phead;
3255         struct __queue *queue   = &(pmlmepriv->scanned_queue);
3256         struct  wlan_network    *pnetwork = NULL;
3257         u8 blnMatch = 0;
3258         u8 dev_type[8] = {0x00};
3259         uint dev_type_len = 0;
3260         u8 dev_type_str[17 + 9] = {0x00};       /*  +9 is for the str "dev_type =", we have to clear it at wrqu->data.pointer */
3261
3262         /*      Commented by Albert 20121209 */
3263         /*      The input data is the MAC address which the application wants to know its device type. */
3264         /*      Such user interface could know the device type. */
3265         /*      Format: iwpriv wlanx p2p_get2 dev_type = 00:E0:4C:00:00:05 */
3266
3267         DBG_88E("[%s] data = %s\n", __func__, (char *)extra);
3268         if (copy_from_user(peerMACStr, wrqu->data.pointer + 9, 17))
3269                 return -EFAULT;
3270
3271         for (jj = 0, kk = 0; jj < ETH_ALEN; jj++, kk += 3)
3272                 peerMAC[jj] = key_2char2num(peerMACStr[kk], peerMACStr[kk + 1]);
3273
3274         _enter_critical_bh(&(pmlmepriv->scanned_queue.lock), &irqL);
3275
3276         phead = get_list_head(queue);
3277         plist = get_next(phead);
3278
3279         while (1) {
3280                 if (rtw_end_of_queue_search(phead, plist) == true)
3281                         break;
3282
3283                 pnetwork = LIST_CONTAINOR(plist, struct wlan_network, list);
3284                 if (!memcmp(pnetwork->network.MacAddress, peerMAC, ETH_ALEN)) {
3285                         u8 *wpsie;
3286                         uint wpsie_len = 0;
3287
3288                 /*      The mac address is matched. */
3289
3290                         wpsie = rtw_get_wps_ie(&pnetwork->network.IEs[12],
3291                                                pnetwork->network.IELength - 12,
3292                                                NULL, &wpsie_len);
3293                         if (wpsie) {
3294                                 rtw_get_wps_attr_content(wpsie, wpsie_len, WPS_ATTR_PRIMARY_DEV_TYPE, dev_type, &dev_type_len);
3295                                 if (dev_type_len) {
3296                                         u16     type = 0;
3297                                         __be16 be_tmp;
3298
3299                                         memcpy(&be_tmp, dev_type, 2);
3300                                         type = be16_to_cpu(be_tmp);
3301                                         sprintf(dev_type_str, "\n\nN =%.2d", type);
3302                                         blnMatch = 1;
3303                                 }
3304                         }
3305                         break;
3306              }
3307
3308                 plist = get_next(plist);
3309         }
3310
3311         _exit_critical_bh(&(pmlmepriv->scanned_queue.lock), &irqL);
3312
3313         if (!blnMatch)
3314                 sprintf(dev_type_str, "\n\nN = 00");
3315
3316         if (copy_to_user(wrqu->data.pointer, dev_type_str, 9 + 17)) {
3317                 return -EFAULT;
3318         }
3319
3320         return ret;
3321 }
3322
3323 static int rtw_p2p_get_device_name(struct net_device *dev,
3324                                struct iw_request_info *info,
3325                                union iwreq_data *wrqu, char *extra)
3326 {
3327         int ret = 0;
3328         struct adapter *padapter = (struct adapter *)rtw_netdev_priv(dev);
3329         u8 peerMAC[ETH_ALEN] = {0x00};
3330         int jj, kk;
3331         u8 peerMACStr[17] = {0x00};
3332         struct mlme_priv                *pmlmepriv = &padapter->mlmepriv;
3333         unsigned long                           irqL;
3334         struct list_head *plist, *phead;
3335         struct __queue *queue   = &(pmlmepriv->scanned_queue);
3336         struct  wlan_network    *pnetwork = NULL;
3337         u8 blnMatch = 0;
3338         u8 dev_name[WPS_MAX_DEVICE_NAME_LEN] = {0x00};
3339         uint dev_len = 0;
3340         u8 dev_name_str[WPS_MAX_DEVICE_NAME_LEN + 5] = {0x00};  /*  +5 is for the str "devN =", we have to clear it at wrqu->data.pointer */
3341
3342         /*      Commented by Albert 20121225 */
3343         /*      The input data is the MAC address which the application wants to know its device name. */
3344         /*      Such user interface could show peer device's device name instead of ssid. */
3345         /*      Format: iwpriv wlanx p2p_get2 devN = 00:E0:4C:00:00:05 */
3346
3347         DBG_88E("[%s] data = %s\n", __func__, (char *)extra);
3348         if (copy_from_user(peerMACStr, wrqu->data.pointer + 5, 17))
3349                 return -EFAULT;
3350
3351         for (jj = 0, kk = 0; jj < ETH_ALEN; jj++, kk += 3)
3352                 peerMAC[jj] = key_2char2num(peerMACStr[kk], peerMACStr[kk + 1]);
3353
3354         _enter_critical_bh(&(pmlmepriv->scanned_queue.lock), &irqL);
3355
3356         phead = get_list_head(queue);
3357         plist = get_next(phead);
3358
3359         while (1) {
3360                 if (rtw_end_of_queue_search(phead, plist) == true)
3361                         break;
3362
3363                 pnetwork = LIST_CONTAINOR(plist, struct wlan_network, list);
3364                 if (!memcmp(pnetwork->network.MacAddress, peerMAC, ETH_ALEN)) {
3365                         u8 *wpsie;
3366                         uint wpsie_len = 0;
3367
3368                         /*      The mac address is matched. */
3369                         wpsie = rtw_get_wps_ie(&pnetwork->network.IEs[12], pnetwork->network.IELength - 12, NULL, &wpsie_len);
3370                         if (wpsie) {
3371                                 rtw_get_wps_attr_content(wpsie, wpsie_len, WPS_ATTR_DEVICE_NAME, dev_name, &dev_len);
3372                                 if (dev_len) {
3373                                         sprintf(dev_name_str, "\n\nN =%s", dev_name);
3374                                         blnMatch = 1;
3375                                 }
3376                         }
3377                         break;
3378                 }
3379
3380                 plist = get_next(plist);
3381         }
3382
3383         _exit_critical_bh(&(pmlmepriv->scanned_queue.lock), &irqL);
3384
3385         if (!blnMatch)
3386                 sprintf(dev_name_str, "\n\nN = 0000");
3387
3388         if (copy_to_user(wrqu->data.pointer, dev_name_str, 5 + ((dev_len > 17) ? dev_len : 17)))
3389                 return -EFAULT;
3390         return ret;
3391 }
3392
3393 static int rtw_p2p_get_invitation_procedure(struct net_device *dev,
3394                                struct iw_request_info *info,
3395                                union iwreq_data *wrqu, char *extra)
3396 {
3397         int ret = 0;
3398         struct adapter *padapter = (struct adapter *)rtw_netdev_priv(dev);
3399         u8 peerMAC[ETH_ALEN] = {0x00};
3400         int jj, kk;
3401         u8 peerMACStr[17] = {0x00};
3402         struct mlme_priv                *pmlmepriv = &padapter->mlmepriv;
3403         unsigned long                           irqL;
3404         struct list_head *plist, *phead;
3405         struct __queue *queue   = &(pmlmepriv->scanned_queue);
3406         struct  wlan_network    *pnetwork = NULL;
3407         u8 blnMatch = 0;
3408         u8 *p2pie;
3409         uint p2pielen = 0, attr_contentlen = 0;
3410         u8 attr_content[2] = {0x00};
3411
3412         u8 inv_proc_str[17 + 8] = {0x00};
3413         /*  +8 is for the str "InvProc =", we have to clear it at wrqu->data.pointer */
3414
3415         /*      Commented by Ouden 20121226 */
3416         /*      The application wants to know P2P initation procedure is support or not. */
3417         /*      Format: iwpriv wlanx p2p_get2 InvProc = 00:E0:4C:00:00:05 */
3418
3419         DBG_88E("[%s] data = %s\n", __func__, (char *)extra);
3420         if (copy_from_user(peerMACStr, wrqu->data.pointer + 8, 17))
3421                 return -EFAULT;
3422
3423         for (jj = 0, kk = 0; jj < ETH_ALEN; jj++, kk += 3)
3424                 peerMAC[jj] = key_2char2num(peerMACStr[kk], peerMACStr[kk + 1]);
3425
3426         _enter_critical_bh(&(pmlmepriv->scanned_queue.lock), &irqL);
3427
3428         phead = get_list_head(queue);
3429         plist = get_next(phead);
3430
3431         while (1) {
3432                 if (rtw_end_of_queue_search(phead, plist) == true)
3433                         break;
3434
3435                 pnetwork = LIST_CONTAINOR(plist, struct wlan_network, list);
3436                 if (!memcmp(pnetwork->network.MacAddress, peerMAC, ETH_ALEN)) {
3437                         /*      Commented by Albert 20121226 */
3438                         /*      Match the device address located in the P2P IE */
3439                         /*      This is for the case that the P2P device address is not the same as the P2P interface address. */
3440
3441                         p2pie = rtw_get_p2p_ie(&pnetwork->network.IEs[12], pnetwork->network.IELength - 12, NULL, &p2pielen);
3442                         if (p2pie) {
3443                                 while (p2pie) {
3444                                         if (rtw_get_p2p_attr_content(p2pie, p2pielen, P2P_ATTR_CAPABILITY, attr_content, &attr_contentlen)) {
3445                                                 /*      Handle the P2P capability attribute */
3446                                                 blnMatch = 1;
3447                                                 break;
3448                                         }
3449
3450                                         /* Get the next P2P IE */
3451                                         p2pie = rtw_get_p2p_ie(p2pie+p2pielen, pnetwork->network.IELength - 12 - (p2pie - &pnetwork->network.IEs[12] + p2pielen), NULL, &p2pielen);
3452                                 }
3453                         }
3454                 }
3455                 plist = get_next(plist);
3456         }
3457
3458         _exit_critical_bh(&(pmlmepriv->scanned_queue.lock), &irqL);
3459
3460         if (!blnMatch) {
3461                 sprintf(inv_proc_str, "\nIP =-1");
3462         } else {
3463                 if (attr_content[0] & 0x20)
3464                         sprintf(inv_proc_str, "\nIP = 1");
3465                 else
3466                         sprintf(inv_proc_str, "\nIP = 0");
3467         }
3468         if (copy_to_user(wrqu->data.pointer, inv_proc_str, 8 + 17))
3469                 return -EFAULT;
3470         return ret;
3471 }
3472
3473 static int rtw_p2p_connect(struct net_device *dev,
3474                                struct iw_request_info *info,
3475                                union iwreq_data *wrqu, char *extra)
3476 {
3477         int ret = 0;
3478         struct adapter *padapter = (struct adapter *)rtw_netdev_priv(dev);
3479         struct wifidirect_info *pwdinfo = &(padapter->wdinfo);
3480         u8 peerMAC[ETH_ALEN] = {0x00};
3481         int jj, kk;
3482         struct mlme_priv                *pmlmepriv = &padapter->mlmepriv;
3483         unsigned long                           irqL;
3484         struct list_head *plist, *phead;
3485         struct __queue *queue   = &(pmlmepriv->scanned_queue);
3486         struct  wlan_network    *pnetwork = NULL;
3487         uint uintPeerChannel = 0;
3488
3489         /*      Commented by Albert 20110304 */
3490         /*      The input data contains two informations. */
3491         /*      1. First information is the MAC address which wants to formate with */
3492         /*      2. Second information is the WPS PINCode or "pbc" string for push button method */
3493         /*      Format: 00:E0:4C:00:00:05 */
3494         /*      Format: 00:E0:4C:00:00:05 */
3495
3496         DBG_88E("[%s] data = %s\n", __func__, extra);
3497
3498         if (pwdinfo->p2p_state == P2P_STATE_NONE) {
3499                 DBG_88E("[%s] WiFi Direct is disable!\n", __func__);
3500                 return ret;
3501         }
3502
3503         if (pwdinfo->ui_got_wps_info == P2P_NO_WPSINFO)
3504                 return -1;
3505
3506         for (jj = 0, kk = 0; jj < ETH_ALEN; jj++, kk += 3)
3507                 peerMAC[jj] = key_2char2num(extra[kk], extra[kk + 1]);
3508
3509         _enter_critical_bh(&(pmlmepriv->scanned_queue.lock), &irqL);
3510
3511         phead = get_list_head(queue);
3512         plist = get_next(phead);
3513
3514         while (1) {
3515                 if (rtw_end_of_queue_search(phead, plist) == true)
3516                         break;
3517
3518                 pnetwork = LIST_CONTAINOR(plist, struct wlan_network, list);
3519                 if (!memcmp(pnetwork->network.MacAddress, peerMAC, ETH_ALEN)) {
3520                         uintPeerChannel = pnetwork->network.Configuration.DSConfig;
3521                         break;
3522                 }
3523
3524                 plist = get_next(plist);
3525         }
3526
3527         _exit_critical_bh(&(pmlmepriv->scanned_queue.lock), &irqL);
3528
3529         if (uintPeerChannel) {
3530                 _rtw_memset(&pwdinfo->nego_req_info, 0x00, sizeof(struct tx_nego_req_info));
3531                 _rtw_memset(&pwdinfo->groupid_info, 0x00, sizeof(struct group_id_info));
3532
3533                 pwdinfo->nego_req_info.peer_channel_num[0] = uintPeerChannel;
3534                 memcpy(pwdinfo->nego_req_info.peerDevAddr, pnetwork->network.MacAddress, ETH_ALEN);
3535                 pwdinfo->nego_req_info.benable = true;
3536
3537                 _cancel_timer_ex(&pwdinfo->restore_p2p_state_timer);
3538                 if (rtw_p2p_state(pwdinfo) != P2P_STATE_GONEGO_OK) {
3539                         /*      Restore to the listen state if the current p2p state is not nego OK */
3540                         rtw_p2p_set_state(pwdinfo, P2P_STATE_LISTEN);
3541                 }
3542
3543                 rtw_p2p_set_pre_state(pwdinfo, rtw_p2p_state(pwdinfo));
3544                 rtw_p2p_set_state(pwdinfo, P2P_STATE_GONEGO_ING);
3545
3546                 DBG_88E("[%s] Start PreTx Procedure!\n", __func__);
3547                 _set_timer(&pwdinfo->pre_tx_scan_timer, P2P_TX_PRESCAN_TIMEOUT);
3548                 _set_timer(&pwdinfo->restore_p2p_state_timer, P2P_GO_NEGO_TIMEOUT);
3549         } else {
3550                 DBG_88E("[%s] Not Found in Scanning Queue~\n", __func__);
3551                 ret = -1;
3552         }
3553         return ret;
3554 }
3555
3556 static int rtw_p2p_invite_req(struct net_device *dev,
3557                               struct iw_request_info *info,
3558                               union iwreq_data *wrqu, char *extra)
3559 {
3560         int ret = 0;
3561         struct adapter *padapter = (struct adapter *)rtw_netdev_priv(dev);
3562         struct wifidirect_info *pwdinfo = &(padapter->wdinfo);
3563         int jj, kk;
3564         struct mlme_priv        *pmlmepriv = &padapter->mlmepriv;
3565         struct list_head *plist, *phead;
3566         struct __queue *queue   = &(pmlmepriv->scanned_queue);
3567         struct  wlan_network    *pnetwork = NULL;
3568         uint uintPeerChannel = 0;
3569         u8 attr_content[50] = {0x00};
3570         u8 *p2pie;
3571         uint p2pielen = 0, attr_contentlen = 0;
3572         unsigned long   irqL;
3573         struct tx_invite_req_info *pinvite_req_info = &pwdinfo->invitereq_info;
3574
3575         /*      The input data contains two informations. */
3576         /*      1. First information is the P2P device address which you want to send to. */
3577         /*      2. Second information is the group id which combines with GO's mac address, space and GO's ssid. */
3578         /*      Command line sample: iwpriv wlan0 p2p_set invite ="00:11:22:33:44:55 00:E0:4C:00:00:05 DIRECT-xy" */
3579         /*      Format: 00:11:22:33:44:55 00:E0:4C:00:00:05 DIRECT-xy */
3580
3581         DBG_88E("[%s] data = %s\n", __func__, extra);
3582
3583         if (wrqu->data.length <=  37) {
3584                 DBG_88E("[%s] Wrong format!\n", __func__);
3585                 return ret;
3586         }
3587
3588         if (rtw_p2p_chk_state(pwdinfo, P2P_STATE_NONE)) {
3589                 DBG_88E("[%s] WiFi Direct is disable!\n", __func__);
3590                 return ret;
3591         } else {
3592                 /*      Reset the content of struct tx_invite_req_info */
3593                 pinvite_req_info->benable = false;
3594                 _rtw_memset(pinvite_req_info->go_bssid, 0x00, ETH_ALEN);
3595                 _rtw_memset(pinvite_req_info->go_ssid, 0x00, WLAN_SSID_MAXLEN);
3596                 pinvite_req_info->ssidlen = 0x00;
3597                 pinvite_req_info->operating_ch = pwdinfo->operating_channel;
3598                 _rtw_memset(pinvite_req_info->peer_macaddr, 0x00, ETH_ALEN);
3599                 pinvite_req_info->token = 3;
3600         }
3601
3602         for (jj = 0, kk = 0; jj < ETH_ALEN; jj++, kk += 3)
3603                 pinvite_req_info->peer_macaddr[jj] = key_2char2num(extra[kk], extra[kk + 1]);
3604
3605         _enter_critical_bh(&(pmlmepriv->scanned_queue.lock), &irqL);
3606
3607         phead = get_list_head(queue);
3608         plist = get_next(phead);
3609
3610         while (1) {
3611                 if (rtw_end_of_queue_search(phead, plist) == true)
3612                         break;
3613
3614                 pnetwork = LIST_CONTAINOR(plist, struct wlan_network, list);
3615
3616                 /*      Commented by Albert 2011/05/18 */
3617                 /*      Match the device address located in the P2P IE */
3618                 /*      This is for the case that the P2P device address is not the same as the P2P interface address. */
3619
3620                 p2pie = rtw_get_p2p_ie(&pnetwork->network.IEs[12], pnetwork->network.IELength - 12, NULL, &p2pielen);
3621                 if (p2pie) {
3622                         /*      The P2P Device ID attribute is included in the Beacon frame. */
3623                         /*      The P2P Device Info attribute is included in the probe response frame. */
3624
3625                         if (rtw_get_p2p_attr_content(p2pie, p2pielen, P2P_ATTR_DEVICE_ID, attr_content, &attr_contentlen)) {
3626                                 /*      Handle the P2P Device ID attribute of Beacon first */
3627                                 if (!memcmp(attr_content, pinvite_req_info->peer_macaddr, ETH_ALEN)) {
3628                                         uintPeerChannel = pnetwork->network.Configuration.DSConfig;
3629                                         break;
3630                                 }
3631                         } else if (rtw_get_p2p_attr_content(p2pie, p2pielen, P2P_ATTR_DEVICE_INFO, attr_content, &attr_contentlen)) {
3632                                 /*      Handle the P2P Device Info attribute of probe response */
3633                                 if (!memcmp(attr_content, pinvite_req_info->peer_macaddr, ETH_ALEN)) {
3634                                         uintPeerChannel = pnetwork->network.Configuration.DSConfig;
3635                                         break;
3636                                 }
3637                         }
3638                 }
3639                 plist = get_next(plist);
3640         }
3641
3642         _exit_critical_bh(&(pmlmepriv->scanned_queue.lock), &irqL);
3643
3644         if (uintPeerChannel) {
3645                 /*      Store the GO's bssid */
3646                 for (jj = 0, kk = 18; jj < ETH_ALEN; jj++, kk += 3)
3647                         pinvite_req_info->go_bssid[jj] = key_2char2num(extra[kk], extra[kk + 1]);
3648
3649                 /*      Store the GO's ssid */
3650                 pinvite_req_info->ssidlen = wrqu->data.length - 36;
3651                 memcpy(pinvite_req_info->go_ssid, &extra[36], (u32) pinvite_req_info->ssidlen);
3652                 pinvite_req_info->benable = true;
3653                 pinvite_req_info->peer_ch = uintPeerChannel;
3654
3655                 rtw_p2p_set_pre_state(pwdinfo, rtw_p2p_state(pwdinfo));
3656                 rtw_p2p_set_state(pwdinfo, P2P_STATE_TX_INVITE_REQ);
3657
3658                 set_channel_bwmode(padapter, uintPeerChannel, HAL_PRIME_CHNL_OFFSET_DONT_CARE, HT_CHANNEL_WIDTH_20);
3659
3660                 _set_timer(&pwdinfo->pre_tx_scan_timer, P2P_TX_PRESCAN_TIMEOUT);
3661
3662                 _set_timer(&pwdinfo->restore_p2p_state_timer, P2P_INVITE_TIMEOUT);
3663         } else {
3664                 DBG_88E("[%s] NOT Found in the Scanning Queue!\n", __func__);
3665         }
3666         return ret;
3667 }
3668
3669 static int rtw_p2p_set_persistent(struct net_device *dev,
3670                                struct iw_request_info *info,
3671                                union iwreq_data *wrqu, char *extra)
3672 {
3673         int ret = 0;
3674         struct adapter *padapter = (struct adapter *)rtw_netdev_priv(dev);
3675         struct wifidirect_info *pwdinfo = &(padapter->wdinfo);
3676
3677         /*      The input data is 0 or 1 */
3678         /*      0: disable persistent group functionality */
3679         /*      1: enable persistent group founctionality */
3680
3681         DBG_88E("[%s] data = %s\n", __func__, extra);
3682
3683         if (rtw_p2p_chk_state(pwdinfo, P2P_STATE_NONE)) {
3684                 DBG_88E("[%s] WiFi Direct is disable!\n", __func__);
3685                 return ret;
3686         } else {
3687                 if (extra[0] == '0')    /*      Disable the persistent group function. */
3688                         pwdinfo->persistent_supported = false;
3689                 else if (extra[0] == '1')       /*      Enable the persistent group function. */
3690                         pwdinfo->persistent_supported = true;
3691                 else
3692                         pwdinfo->persistent_supported = false;
3693         }
3694         pr_info("[%s] persistent_supported = %d\n", __func__, pwdinfo->persistent_supported);
3695         return ret;
3696 }
3697
3698 static int rtw_p2p_prov_disc(struct net_device *dev,
3699                                struct iw_request_info *info,
3700                                union iwreq_data *wrqu, char *extra)
3701 {
3702         int ret = 0;
3703         struct adapter *padapter = (struct adapter *)rtw_netdev_priv(dev);
3704         struct wifidirect_info *pwdinfo = &(padapter->wdinfo);
3705         u8 peerMAC[ETH_ALEN] = {0x00};
3706         int jj, kk;
3707         struct mlme_priv                *pmlmepriv = &padapter->mlmepriv;
3708         struct list_head *plist, *phead;
3709         struct __queue *queue   = &(pmlmepriv->scanned_queue);
3710         struct  wlan_network    *pnetwork = NULL;
3711         uint uintPeerChannel = 0;
3712         u8 attr_content[100] = {0x00};
3713         u8 *p2pie;
3714         uint p2pielen = 0, attr_contentlen = 0;
3715         unsigned long                           irqL;
3716
3717         /*      The input data contains two informations. */
3718         /*      1. First information is the MAC address which wants to issue the provisioning discovery request frame. */
3719         /*      2. Second information is the WPS configuration method which wants to discovery */
3720         /*      Format: 00:E0:4C:00:00:05_display */
3721         /*      Format: 00:E0:4C:00:00:05_keypad */
3722         /*      Format: 00:E0:4C:00:00:05_pbc */
3723         /*      Format: 00:E0:4C:00:00:05_label */
3724
3725         DBG_88E("[%s] data = %s\n", __func__, extra);
3726
3727         if (pwdinfo->p2p_state == P2P_STATE_NONE) {
3728                 DBG_88E("[%s] WiFi Direct is disable!\n", __func__);
3729                 return ret;
3730         } else {
3731                 /*      Reset the content of struct tx_provdisc_req_info excluded the wps_config_method_request. */
3732                 _rtw_memset(pwdinfo->tx_prov_disc_info.peerDevAddr, 0x00, ETH_ALEN);
3733                 _rtw_memset(pwdinfo->tx_prov_disc_info.peerIFAddr, 0x00, ETH_ALEN);
3734                 _rtw_memset(&pwdinfo->tx_prov_disc_info.ssid, 0x00, sizeof(struct ndis_802_11_ssid));
3735                 pwdinfo->tx_prov_disc_info.peer_channel_num[0] = 0;
3736                 pwdinfo->tx_prov_disc_info.peer_channel_num[1] = 0;
3737                 pwdinfo->tx_prov_disc_info.benable = false;
3738         }
3739
3740         for (jj = 0, kk = 0; jj < ETH_ALEN; jj++, kk += 3)
3741                 peerMAC[jj] = key_2char2num(extra[kk], extra[kk + 1]);
3742
3743         if (!memcmp(&extra[18], "display", 7)) {
3744                 pwdinfo->tx_prov_disc_info.wps_config_method_request = WPS_CM_DISPLYA;
3745         } else if (!memcmp(&extra[18], "keypad", 7)) {
3746                 pwdinfo->tx_prov_disc_info.wps_config_method_request = WPS_CM_KEYPAD;
3747         } else if (!memcmp(&extra[18], "pbc", 3)) {
3748                 pwdinfo->tx_prov_disc_info.wps_config_method_request = WPS_CM_PUSH_BUTTON;
3749         } else if (!memcmp(&extra[18], "label", 5)) {
3750                 pwdinfo->tx_prov_disc_info.wps_config_method_request = WPS_CM_LABEL;
3751         } else {
3752                 DBG_88E("[%s] Unknown WPS config methodn", __func__);
3753                 return ret;
3754         }
3755
3756         _enter_critical_bh(&(pmlmepriv->scanned_queue.lock), &irqL);
3757
3758         phead = get_list_head(queue);
3759         plist = get_next(phead);
3760
3761         while (1) {
3762                 if (rtw_end_of_queue_search(phead, plist) == true)
3763                         break;
3764
3765                 if (uintPeerChannel != 0)
3766                         break;
3767
3768                 pnetwork = LIST_CONTAINOR(plist, struct wlan_network, list);
3769
3770                 /*      Commented by Albert 2011/05/18 */
3771                 /*      Match the device address located in the P2P IE */
3772                 /*      This is for the case that the P2P device address is not the same as the P2P interface address. */
3773
3774                 p2pie = rtw_get_p2p_ie(&pnetwork->network.IEs[12], pnetwork->network.IELength - 12, NULL, &p2pielen);
3775                 if (p2pie) {
3776                         while (p2pie) {
3777                                 /*      The P2P Device ID attribute is included in the Beacon frame. */
3778                                 /*      The P2P Device Info attribute is included in the probe response frame. */
3779
3780                                 if (rtw_get_p2p_attr_content(p2pie, p2pielen, P2P_ATTR_DEVICE_ID, attr_content, &attr_contentlen)) {
3781                                         /*      Handle the P2P Device ID attribute of Beacon first */
3782                                         if (!memcmp(attr_content, peerMAC, ETH_ALEN)) {
3783                                                 uintPeerChannel = pnetwork->network.Configuration.DSConfig;
3784                                                 break;
3785                                         }
3786                                 } else if (rtw_get_p2p_attr_content(p2pie, p2pielen, P2P_ATTR_DEVICE_INFO, attr_content, &attr_contentlen)) {
3787                                         /*      Handle the P2P Device Info attribute of probe response */
3788                                         if (!memcmp(attr_content, peerMAC, ETH_ALEN)) {
3789                                                 uintPeerChannel = pnetwork->network.Configuration.DSConfig;
3790                                                 break;
3791                                         }
3792                                 }
3793
3794                                 /* Get the next P2P IE */
3795                                 p2pie = rtw_get_p2p_ie(p2pie+p2pielen, pnetwork->network.IELength - 12 - (p2pie - &pnetwork->network.IEs[12] + p2pielen), NULL, &p2pielen);
3796                         }
3797                 }
3798
3799                 plist = get_next(plist);
3800         }
3801
3802         _exit_critical_bh(&(pmlmepriv->scanned_queue.lock), &irqL);
3803
3804         if (uintPeerChannel) {
3805                 DBG_88E("[%s] peer channel: %d!\n", __func__, uintPeerChannel);
3806                 memcpy(pwdinfo->tx_prov_disc_info.peerIFAddr, pnetwork->network.MacAddress, ETH_ALEN);
3807                 memcpy(pwdinfo->tx_prov_disc_info.peerDevAddr, peerMAC, ETH_ALEN);
3808                 pwdinfo->tx_prov_disc_info.peer_channel_num[0] = (u16) uintPeerChannel;
3809                 pwdinfo->tx_prov_disc_info.benable = true;
3810                 rtw_p2p_set_pre_state(pwdinfo, rtw_p2p_state(pwdinfo));
3811                 rtw_p2p_set_state(pwdinfo, P2P_STATE_TX_PROVISION_DIS_REQ);
3812
3813                 if (rtw_p2p_chk_role(pwdinfo, P2P_ROLE_CLIENT)) {
3814                         memcpy(&pwdinfo->tx_prov_disc_info.ssid, &pnetwork->network.Ssid, sizeof(struct ndis_802_11_ssid));
3815                 } else if (rtw_p2p_chk_role(pwdinfo, P2P_ROLE_DEVICE) || rtw_p2p_chk_role(pwdinfo, P2P_ROLE_GO)) {
3816                         memcpy(pwdinfo->tx_prov_disc_info.ssid.Ssid, pwdinfo->p2p_wildcard_ssid, P2P_WILDCARD_SSID_LEN);
3817                         pwdinfo->tx_prov_disc_info.ssid.SsidLength = P2P_WILDCARD_SSID_LEN;
3818                 }
3819
3820                 set_channel_bwmode(padapter, uintPeerChannel, HAL_PRIME_CHNL_OFFSET_DONT_CARE, HT_CHANNEL_WIDTH_20);
3821
3822                 _set_timer(&pwdinfo->pre_tx_scan_timer, P2P_TX_PRESCAN_TIMEOUT);
3823
3824                 _set_timer(&pwdinfo->restore_p2p_state_timer, P2P_PROVISION_TIMEOUT);
3825         } else {
3826                 DBG_88E("[%s] NOT Found in the Scanning Queue!\n", __func__);
3827         }
3828         return ret;
3829 }
3830
3831 /*      This function is used to inform the driver the user had specified the pin code value or pbc */
3832 /*      to application. */
3833
3834 static int rtw_p2p_got_wpsinfo(struct net_device *dev,
3835                                struct iw_request_info *info,
3836                                union iwreq_data *wrqu, char *extra)
3837 {
3838         int ret = 0;
3839         struct adapter *padapter = (struct adapter *)rtw_netdev_priv(dev);
3840         struct wifidirect_info *pwdinfo = &(padapter->wdinfo);
3841
3842         DBG_88E("[%s] data = %s\n", __func__, extra);
3843         /*      Added by Albert 20110328 */
3844         /*      if the input data is P2P_NO_WPSINFO -> reset the wpsinfo */
3845         /*      if the input data is P2P_GOT_WPSINFO_PEER_DISPLAY_PIN -> the utility just input the PIN code got from the peer P2P device. */
3846         /*      if the input data is P2P_GOT_WPSINFO_SELF_DISPLAY_PIN -> the utility just got the PIN code from itself. */
3847         /*      if the input data is P2P_GOT_WPSINFO_PBC -> the utility just determine to use the PBC */
3848
3849         if (*extra == '0')
3850                 pwdinfo->ui_got_wps_info = P2P_NO_WPSINFO;
3851         else if (*extra == '1')
3852                 pwdinfo->ui_got_wps_info = P2P_GOT_WPSINFO_PEER_DISPLAY_PIN;
3853         else if (*extra == '2')
3854                 pwdinfo->ui_got_wps_info = P2P_GOT_WPSINFO_SELF_DISPLAY_PIN;
3855         else if (*extra == '3')
3856                 pwdinfo->ui_got_wps_info = P2P_GOT_WPSINFO_PBC;
3857         else
3858                 pwdinfo->ui_got_wps_info = P2P_NO_WPSINFO;
3859         return ret;
3860 }
3861
3862 #endif /* CONFIG_88EU_P2P */
3863
3864 static int rtw_p2p_set(struct net_device *dev,
3865                                struct iw_request_info *info,
3866                                union iwreq_data *wrqu, char *extra)
3867 {
3868         int ret = 0;
3869
3870 #ifdef CONFIG_88EU_P2P
3871         DBG_88E("[%s] extra = %s\n", __func__, extra);
3872         if (!memcmp(extra, "enable =", 7)) {
3873                 rtw_wext_p2p_enable(dev, info, wrqu, &extra[7]);
3874         } else if (!memcmp(extra, "setDN =", 6)) {
3875                 wrqu->data.length -= 6;
3876                 rtw_p2p_setDN(dev, info, wrqu, &extra[6]);
3877         } else if (!memcmp(extra, "profilefound =", 13)) {
3878                 wrqu->data.length -= 13;
3879                 rtw_p2p_profilefound(dev, info, wrqu, &extra[13]);
3880         } else if (!memcmp(extra, "prov_disc =", 10)) {
3881                 wrqu->data.length -= 10;
3882                 rtw_p2p_prov_disc(dev, info, wrqu, &extra[10]);
3883         } else if (!memcmp(extra, "nego =", 5)) {
3884                 wrqu->data.length -= 5;
3885                 rtw_p2p_connect(dev, info, wrqu, &extra[5]);
3886         } else if (!memcmp(extra, "intent =", 7)) {
3887                 /*      Commented by Albert 2011/03/23 */
3888                 /*      The wrqu->data.length will include the null character */
3889                 /*      So, we will decrease 7 + 1 */
3890                 wrqu->data.length -= 8;
3891                 rtw_p2p_set_intent(dev, info, wrqu, &extra[7]);
3892         } else if (!memcmp(extra, "ssid =", 5)) {
3893                 wrqu->data.length -= 5;
3894                 rtw_p2p_set_go_nego_ssid(dev, info, wrqu, &extra[5]);
3895         } else if (!memcmp(extra, "got_wpsinfo =", 12)) {
3896                 wrqu->data.length -= 12;
3897                 rtw_p2p_got_wpsinfo(dev, info, wrqu, &extra[12]);
3898         } else if (!memcmp(extra, "listen_ch =", 10)) {
3899                 /*      Commented by Albert 2011/05/24 */
3900                 /*      The wrqu->data.length will include the null character */
3901                 /*      So, we will decrease (10 + 1) */
3902                 wrqu->data.length -= 11;
3903                 rtw_p2p_set_listen_ch(dev, info, wrqu, &extra[10]);
3904         } else if (!memcmp(extra, "op_ch =", 6)) {
3905                 /*      Commented by Albert 2011/05/24 */
3906                 /*      The wrqu->data.length will include the null character */
3907                 /*      So, we will decrease (6 + 1) */
3908                 wrqu->data.length -= 7;
3909                 rtw_p2p_set_op_ch(dev, info, wrqu, &extra[6]);
3910         } else if (!memcmp(extra, "invite =", 7)) {
3911                 wrqu->data.length -= 8;
3912                 rtw_p2p_invite_req(dev, info, wrqu, &extra[7]);
3913         } else if (!memcmp(extra, "persistent =", 11)) {
3914                 wrqu->data.length -= 11;
3915                 rtw_p2p_set_persistent(dev, info, wrqu, &extra[11]);
3916         }
3917 #endif /* CONFIG_88EU_P2P */
3918
3919         return ret;
3920 }
3921
3922 static int rtw_p2p_get(struct net_device *dev,
3923                                struct iw_request_info *info,
3924                                union iwreq_data *wrqu, char *extra)
3925 {
3926         int ret = 0;
3927
3928 #ifdef CONFIG_88EU_P2P
3929         struct adapter *padapter = (struct adapter *)rtw_netdev_priv(dev);
3930
3931         if (padapter->bShowGetP2PState)
3932                 DBG_88E("[%s] extra = %s\n", __func__, (char *)wrqu->data.pointer);
3933         if (!memcmp(wrqu->data.pointer, "status", 6)) {
3934                 rtw_p2p_get_status(dev, info, wrqu, extra);
3935         } else if (!memcmp(wrqu->data.pointer, "role", 4)) {
3936                 rtw_p2p_get_role(dev, info, wrqu, extra);
3937         } else if (!memcmp(wrqu->data.pointer, "peer_ifa", 8)) {
3938                 rtw_p2p_get_peer_ifaddr(dev, info, wrqu, extra);
3939         } else if (!memcmp(wrqu->data.pointer, "req_cm", 6)) {
3940                 rtw_p2p_get_req_cm(dev, info, wrqu, extra);
3941         } else if (!memcmp(wrqu->data.pointer, "peer_deva", 9)) {
3942                 /*      Get the P2P device address when receiving the provision discovery request frame. */
3943                 rtw_p2p_get_peer_devaddr(dev, info, wrqu, extra);
3944         } else if (!memcmp(wrqu->data.pointer, "group_id", 8)) {
3945                 rtw_p2p_get_groupid(dev, info, wrqu, extra);
3946         } else if (!memcmp(wrqu->data.pointer, "peer_deva_inv", 9)) {
3947                 /*      Get the P2P device address when receiving the P2P Invitation request frame. */
3948                 rtw_p2p_get_peer_devaddr_by_invitation(dev, info, wrqu, extra);
3949         } else if (!memcmp(wrqu->data.pointer, "op_ch", 5)) {
3950                 rtw_p2p_get_op_ch(dev, info, wrqu, extra);
3951         }
3952 #endif /* CONFIG_88EU_P2P */
3953         return ret;
3954 }
3955
3956 static int rtw_p2p_get2(struct net_device *dev,
3957                                struct iw_request_info *info,
3958                                union iwreq_data *wrqu, char *extra)
3959 {
3960         int ret = 0;
3961
3962 #ifdef CONFIG_88EU_P2P
3963         DBG_88E("[%s] extra = %s\n", __func__, (char *)wrqu->data.pointer);
3964         if (!memcmp(extra, "wpsCM =", 6)) {
3965                 wrqu->data.length -= 6;
3966                 rtw_p2p_get_wps_configmethod(dev, info, wrqu,  &extra[6]);
3967         } else if (!memcmp(extra, "devN =", 5)) {
3968                 wrqu->data.length -= 5;
3969                 rtw_p2p_get_device_name(dev, info, wrqu, &extra[5]);
3970         } else if (!memcmp(extra, "dev_type =", 9)) {
3971                 wrqu->data.length -= 9;
3972                 rtw_p2p_get_device_type(dev, info, wrqu, &extra[9]);
3973         } else if (!memcmp(extra, "go_devadd =", 10)) {
3974                 wrqu->data.length -= 10;
3975                 rtw_p2p_get_go_device_address(dev, info, wrqu, &extra[10]);
3976         } else if (!memcmp(extra, "InvProc =", 8)) {
3977                 wrqu->data.length -= 8;
3978                 rtw_p2p_get_invitation_procedure(dev, info, wrqu, &extra[8]);
3979         }
3980
3981 #endif /* CONFIG_88EU_P2P */
3982
3983         return ret;
3984 }
3985
3986 static int rtw_cta_test_start(struct net_device *dev,
3987                               struct iw_request_info *info,
3988                               union iwreq_data *wrqu, char *extra)
3989 {
3990         int ret = 0;
3991         struct adapter *padapter = (struct adapter *)rtw_netdev_priv(dev);
3992         DBG_88E("%s %s\n", __func__, extra);
3993         if (!strcmp(extra, "1"))
3994                 padapter->in_cta_test = 1;
3995         else
3996                 padapter->in_cta_test = 0;
3997
3998         if (padapter->in_cta_test) {
3999                 u32 v = rtw_read32(padapter, REG_RCR);
4000                 v &= ~(RCR_CBSSID_DATA | RCR_CBSSID_BCN);/*  RCR_ADF */
4001                 rtw_write32(padapter, REG_RCR, v);
4002                 DBG_88E("enable RCR_ADF\n");
4003         } else {
4004                 u32 v = rtw_read32(padapter, REG_RCR);
4005                 v |= RCR_CBSSID_DATA | RCR_CBSSID_BCN;/*  RCR_ADF */
4006                 rtw_write32(padapter, REG_RCR, v);
4007                 DBG_88E("disable RCR_ADF\n");
4008         }
4009         return ret;
4010 }
4011
4012 static int rtw_rereg_nd_name(struct net_device *dev,
4013                                struct iw_request_info *info,
4014                                union iwreq_data *wrqu, char *extra)
4015 {
4016         int ret = 0;
4017         struct adapter *padapter = rtw_netdev_priv(dev);
4018         struct rereg_nd_name_data *rereg_priv = &padapter->rereg_nd_name_priv;
4019         char new_ifname[IFNAMSIZ];
4020
4021         if (rereg_priv->old_ifname[0] == 0) {
4022                 char *reg_ifname;
4023                 reg_ifname = padapter->registrypriv.if2name;
4024
4025                 strncpy(rereg_priv->old_ifname, reg_ifname, IFNAMSIZ);
4026                 rereg_priv->old_ifname[IFNAMSIZ-1] = 0;
4027         }
4028
4029         if (wrqu->data.length > IFNAMSIZ)
4030                 return -EFAULT;
4031
4032         if (copy_from_user(new_ifname, wrqu->data.pointer, IFNAMSIZ))
4033                 return -EFAULT;
4034
4035         if (0 == strcmp(rereg_priv->old_ifname, new_ifname))
4036                 return ret;
4037
4038         DBG_88E("%s new_ifname:%s\n", __func__, new_ifname);
4039         ret = rtw_change_ifname(padapter, new_ifname);
4040         if (0 != ret)
4041                 goto exit;
4042
4043         if (!memcmp(rereg_priv->old_ifname, "disable%d", 9) == true) {
4044                 padapter->ledpriv.bRegUseLed = rereg_priv->old_bRegUseLed;
4045                 rtw_hal_sw_led_init(padapter);
4046                 rtw_ips_mode_req(&padapter->pwrctrlpriv, rereg_priv->old_ips_mode);
4047         }
4048
4049         strncpy(rereg_priv->old_ifname, new_ifname, IFNAMSIZ);
4050         rereg_priv->old_ifname[IFNAMSIZ-1] = 0;
4051
4052         if (!memcmp(new_ifname, "disable%d", 9) == true) {
4053                 DBG_88E("%s disable\n", __func__);
4054                 /*  free network queue for Android's timming issue */
4055                 rtw_free_network_queue(padapter, true);
4056
4057                 /*  close led */
4058                 rtw_led_control(padapter, LED_CTL_POWER_OFF);
4059                 rereg_priv->old_bRegUseLed = padapter->ledpriv.bRegUseLed;
4060                 padapter->ledpriv.bRegUseLed = false;
4061                 rtw_hal_sw_led_deinit(padapter);
4062
4063                 /*  the interface is being "disabled", we can do deeper IPS */
4064                 rereg_priv->old_ips_mode = rtw_get_ips_mode_req(&padapter->pwrctrlpriv);
4065                 rtw_ips_mode_req(&padapter->pwrctrlpriv, IPS_NORMAL);
4066         }
4067 exit:
4068         return ret;
4069 }
4070
4071 static void mac_reg_dump(struct adapter *padapter)
4072 {
4073         int i, j = 1;
4074         pr_info("\n ======= MAC REG =======\n");
4075         for (i = 0x0; i < 0x300; i += 4) {
4076                 if (j%4 == 1)
4077                         pr_info("0x%02x", i);
4078                 pr_info(" 0x%08x ", rtw_read32(padapter, i));
4079                 if ((j++)%4 == 0)
4080                         pr_info("\n");
4081         }
4082         for (i = 0x400; i < 0x800; i += 4) {
4083                 if (j%4 == 1)
4084                         pr_info("0x%02x", i);
4085                 pr_info(" 0x%08x ", rtw_read32(padapter, i));
4086                 if ((j++)%4 == 0)
4087                         pr_info("\n");
4088         }
4089 }
4090
4091 static void bb_reg_dump(struct adapter *padapter)
4092 {
4093         int i, j = 1;
4094         pr_info("\n ======= BB REG =======\n");
4095         for (i = 0x800; i < 0x1000; i += 4) {
4096                 if (j%4 == 1)
4097                         pr_info("0x%02x", i);
4098
4099                 pr_info(" 0x%08x ", rtw_read32(padapter, i));
4100                 if ((j++)%4 == 0)
4101                         pr_info("\n");
4102         }
4103 }
4104
4105 static void rf_reg_dump(struct adapter *padapter)
4106 {
4107         int i, j = 1, path;
4108         u32 value;
4109         u8 rf_type, path_nums = 0;
4110         rtw_hal_get_hwreg(padapter, HW_VAR_RF_TYPE, (u8 *)(&rf_type));
4111
4112         pr_info("\n ======= RF REG =======\n");
4113         if ((RF_1T2R == rf_type) || (RF_1T1R == rf_type))
4114                 path_nums = 1;
4115         else
4116                 path_nums = 2;
4117
4118         for (path = 0; path < path_nums; path++) {
4119                 pr_info("\nRF_Path(%x)\n", path);
4120                 for (i = 0; i < 0x100; i++) {
4121                         value = rtw_hal_read_rfreg(padapter, path, i, 0xffffffff);
4122                         if (j%4 == 1)
4123                                 pr_info("0x%02x ", i);
4124                         pr_info(" 0x%08x ", value);
4125                         if ((j++)%4 == 0)
4126                                 pr_info("\n");
4127                 }
4128         }
4129 }
4130
4131 static int rtw_dbg_port(struct net_device *dev,
4132                                struct iw_request_info *info,
4133                                union iwreq_data *wrqu, char *extra)
4134 {
4135         unsigned long irqL;
4136         int ret = 0;
4137         u8 major_cmd, minor_cmd;
4138         u16 arg;
4139         s32 extra_arg;
4140         u32 *pdata, val32;
4141         struct sta_info *psta;
4142         struct adapter *padapter = (struct adapter *)rtw_netdev_priv(dev);
4143         struct mlme_priv *pmlmepriv = &(padapter->mlmepriv);
4144         struct mlme_ext_priv    *pmlmeext = &padapter->mlmeextpriv;
4145         struct mlme_ext_info *pmlmeinfo = &(pmlmeext->mlmext_info);
4146         struct security_priv *psecuritypriv = &padapter->securitypriv;
4147         struct wlan_network *cur_network = &(pmlmepriv->cur_network);
4148         struct sta_priv *pstapriv = &padapter->stapriv;
4149
4150         pdata = (u32 *)&wrqu->data;
4151
4152         val32 = *pdata;
4153         arg = (u16)(val32 & 0x0000ffff);
4154         major_cmd = (u8)(val32 >> 24);
4155         minor_cmd = (u8)((val32 >> 16) & 0x00ff);
4156
4157         extra_arg = *(pdata+1);
4158
4159         switch (major_cmd) {
4160         case 0x70:/* read_reg */
4161                 switch (minor_cmd) {
4162                 case 1:
4163                         DBG_88E("rtw_read8(0x%x) = 0x%02x\n", arg, rtw_read8(padapter, arg));
4164                         break;
4165                 case 2:
4166                         DBG_88E("rtw_read16(0x%x) = 0x%04x\n", arg, rtw_read16(padapter, arg));
4167                         break;
4168                 case 4:
4169                         DBG_88E("rtw_read32(0x%x) = 0x%08x\n", arg, rtw_read32(padapter, arg));
4170                         break;
4171                 }
4172                 break;
4173         case 0x71:/* write_reg */
4174                 switch (minor_cmd) {
4175                 case 1:
4176                         rtw_write8(padapter, arg, extra_arg);
4177                         DBG_88E("rtw_write8(0x%x) = 0x%02x\n", arg, rtw_read8(padapter, arg));
4178                         break;
4179                 case 2:
4180                         rtw_write16(padapter, arg, extra_arg);
4181                         DBG_88E("rtw_write16(0x%x) = 0x%04x\n", arg, rtw_read16(padapter, arg));
4182                         break;
4183                 case 4:
4184                         rtw_write32(padapter, arg, extra_arg);
4185                         DBG_88E("rtw_write32(0x%x) = 0x%08x\n", arg, rtw_read32(padapter, arg));
4186                         break;
4187                 }
4188                 break;
4189         case 0x72:/* read_bb */
4190                 DBG_88E("read_bbreg(0x%x) = 0x%x\n", arg, rtw_hal_read_bbreg(padapter, arg, 0xffffffff));
4191                 break;
4192         case 0x73:/* write_bb */
4193                 rtw_hal_write_bbreg(padapter, arg, 0xffffffff, extra_arg);
4194                 DBG_88E("write_bbreg(0x%x) = 0x%x\n", arg, rtw_hal_read_bbreg(padapter, arg, 0xffffffff));
4195                 break;
4196         case 0x74:/* read_rf */
4197                 DBG_88E("read RF_reg path(0x%02x), offset(0x%x), value(0x%08x)\n", minor_cmd, arg, rtw_hal_read_rfreg(padapter, minor_cmd, arg, 0xffffffff));
4198                 break;
4199         case 0x75:/* write_rf */
4200                 rtw_hal_write_rfreg(padapter, minor_cmd, arg, 0xffffffff, extra_arg);
4201                 DBG_88E("write RF_reg path(0x%02x), offset(0x%x), value(0x%08x)\n", minor_cmd, arg, rtw_hal_read_rfreg(padapter, minor_cmd, arg, 0xffffffff));
4202                 break;
4203
4204         case 0x76:
4205                 switch (minor_cmd) {
4206                 case 0x00: /* normal mode, */
4207                         padapter->recvpriv.is_signal_dbg = 0;
4208                         break;
4209                 case 0x01: /* dbg mode */
4210                         padapter->recvpriv.is_signal_dbg = 1;
4211                         extra_arg = extra_arg > 100 ? 100 : extra_arg;
4212                         extra_arg = extra_arg < 0 ? 0 : extra_arg;
4213                         padapter->recvpriv.signal_strength_dbg = extra_arg;
4214                         break;
4215                 }
4216                 break;
4217         case 0x78: /* IOL test */
4218                 switch (minor_cmd) {
4219                 case 0x04: /* LLT table initialization test */
4220                 {
4221                         u8 page_boundary = 0xf9;
4222                         struct xmit_frame       *xmit_frame;
4223
4224                         xmit_frame = rtw_IOL_accquire_xmit_frame(padapter);
4225                         if (xmit_frame == NULL) {
4226                                 ret = -ENOMEM;
4227                                 break;
4228                         }
4229
4230                         rtw_IOL_append_LLT_cmd(xmit_frame, page_boundary);
4231
4232                         if (_SUCCESS != rtw_IOL_exec_cmds_sync(padapter, xmit_frame, 500, 0))
4233                                 ret = -EPERM;
4234                 }
4235                         break;
4236                 case 0x05: /* blink LED test */
4237                 {
4238                         u16 reg = 0x4c;
4239                         u32 blink_num = 50;
4240                         u32 blink_delay_ms = 200;
4241                         int i;
4242                         struct xmit_frame       *xmit_frame;
4243
4244                         xmit_frame = rtw_IOL_accquire_xmit_frame(padapter);
4245                         if (xmit_frame == NULL) {
4246                                 ret = -ENOMEM;
4247                                 break;
4248                         }
4249
4250                         for (i = 0; i < blink_num; i++) {
4251                                 rtw_IOL_append_WB_cmd(xmit_frame, reg, 0x00, 0xff);
4252                                 rtw_IOL_append_DELAY_MS_cmd(xmit_frame, blink_delay_ms);
4253                                 rtw_IOL_append_WB_cmd(xmit_frame, reg, 0x08, 0xff);
4254                                 rtw_IOL_append_DELAY_MS_cmd(xmit_frame, blink_delay_ms);
4255                         }
4256                         if (_SUCCESS != rtw_IOL_exec_cmds_sync(padapter, xmit_frame, (blink_delay_ms*blink_num*2)+200, 0))
4257                                 ret = -EPERM;
4258                 }
4259                         break;
4260
4261                 case 0x06: /* continuous write byte test */
4262                 {
4263                         u16 reg = arg;
4264                         u16 start_value = 0;
4265                         u32 write_num = extra_arg;
4266                         int i;
4267                         u8 final;
4268                         struct xmit_frame       *xmit_frame;
4269
4270                         xmit_frame = rtw_IOL_accquire_xmit_frame(padapter);
4271                         if (xmit_frame == NULL) {
4272                                 ret = -ENOMEM;
4273                                 break;
4274                         }
4275
4276                         for (i = 0; i < write_num; i++)
4277                                 rtw_IOL_append_WB_cmd(xmit_frame, reg, i+start_value, 0xFF);
4278                         if (_SUCCESS != rtw_IOL_exec_cmds_sync(padapter, xmit_frame, 5000, 0))
4279                                 ret = -EPERM;
4280
4281                         final = rtw_read8(padapter, reg);
4282                         if (start_value+write_num-1 == final)
4283                                 DBG_88E("continuous IOL_CMD_WB_REG to 0x%x %u times Success, start:%u, final:%u\n", reg, write_num, start_value, final);
4284                         else
4285                                 DBG_88E("continuous IOL_CMD_WB_REG to 0x%x %u times Fail, start:%u, final:%u\n", reg, write_num, start_value, final);
4286                 }
4287                         break;
4288
4289                 case 0x07: /* continuous write word test */
4290                 {
4291                         u16 reg = arg;
4292                         u16 start_value = 200;
4293                         u32 write_num = extra_arg;
4294
4295                         int i;
4296                         u16 final;
4297                         struct xmit_frame       *xmit_frame;
4298
4299                         xmit_frame = rtw_IOL_accquire_xmit_frame(padapter);
4300                         if (xmit_frame == NULL) {
4301                                 ret = -ENOMEM;
4302                                 break;
4303                         }
4304
4305                         for (i = 0; i < write_num; i++)
4306                                 rtw_IOL_append_WW_cmd(xmit_frame, reg, i+start_value, 0xFFFF);
4307                         if (_SUCCESS != rtw_IOL_exec_cmds_sync(padapter, xmit_frame, 5000, 0))
4308                                 ret = -EPERM;
4309
4310                         final = rtw_read16(padapter, reg);
4311                         if (start_value+write_num-1 == final)
4312                                 DBG_88E("continuous IOL_CMD_WW_REG to 0x%x %u times Success, start:%u, final:%u\n", reg, write_num, start_value, final);
4313                         else
4314                                 DBG_88E("continuous IOL_CMD_WW_REG to 0x%x %u times Fail, start:%u, final:%u\n", reg, write_num, start_value, final);
4315                 }
4316                         break;
4317                 case 0x08: /* continuous write dword test */
4318                 {
4319                         u16 reg = arg;
4320                         u32 start_value = 0x110000c7;
4321                         u32 write_num = extra_arg;
4322
4323                         int i;
4324                         u32 final;
4325                         struct xmit_frame       *xmit_frame;
4326
4327                         xmit_frame = rtw_IOL_accquire_xmit_frame(padapter);
4328                         if (xmit_frame == NULL) {
4329                                 ret = -ENOMEM;
4330                                 break;
4331                         }
4332
4333                         for (i = 0; i < write_num; i++)
4334                                 rtw_IOL_append_WD_cmd(xmit_frame, reg, i+start_value, 0xFFFFFFFF);
4335                         if (_SUCCESS != rtw_IOL_exec_cmds_sync(padapter, xmit_frame, 5000, 0))
4336                                 ret = -EPERM;
4337
4338                         final = rtw_read32(padapter, reg);
4339                         if (start_value+write_num-1 == final)
4340                                 DBG_88E("continuous IOL_CMD_WD_REG to 0x%x %u times Success, start:%u, final:%u\n",
4341                                         reg, write_num, start_value, final);
4342                         else
4343                                 DBG_88E("continuous IOL_CMD_WD_REG to 0x%x %u times Fail, start:%u, final:%u\n",
4344                                         reg, write_num, start_value, final);
4345                 }
4346                         break;
4347                 }
4348                 break;
4349         case 0x79:
4350                 {
4351                         /*
4352                         * dbg 0x79000000 [value], set RESP_TXAGC to + value, value:0~15
4353                         * dbg 0x79010000 [value], set RESP_TXAGC to - value, value:0~15
4354                         */
4355                         u8 value =  extra_arg & 0x0f;
4356                         u8 sign = minor_cmd;
4357                         u16 write_value = 0;
4358
4359                         DBG_88E("%s set RESP_TXAGC to %s %u\n", __func__, sign ? "minus" : "plus", value);
4360
4361                         if (sign)
4362                                 value = value | 0x10;
4363
4364                         write_value = value | (value << 5);
4365                         rtw_write16(padapter, 0x6d9, write_value);
4366                 }
4367                 break;
4368         case 0x7a:
4369                 receive_disconnect(padapter, pmlmeinfo->network.MacAddress
4370                         , WLAN_REASON_EXPIRATION_CHK);
4371                 break;
4372         case 0x7F:
4373                 switch (minor_cmd) {
4374                 case 0x0:
4375                         DBG_88E("fwstate = 0x%x\n", get_fwstate(pmlmepriv));
4376                         break;
4377                 case 0x01:
4378                         DBG_88E("auth_alg = 0x%x, enc_alg = 0x%x, auth_type = 0x%x, enc_type = 0x%x\n",
4379                                 psecuritypriv->dot11AuthAlgrthm, psecuritypriv->dot11PrivacyAlgrthm,
4380                                 psecuritypriv->ndisauthtype, psecuritypriv->ndisencryptstatus);
4381                         break;
4382                 case 0x02:
4383                         DBG_88E("pmlmeinfo->state = 0x%x\n", pmlmeinfo->state);
4384                         break;
4385                 case 0x03:
4386                         DBG_88E("qos_option =%d\n", pmlmepriv->qospriv.qos_option);
4387                         DBG_88E("ht_option =%d\n", pmlmepriv->htpriv.ht_option);
4388                         break;
4389                 case 0x04:
4390                         DBG_88E("cur_ch =%d\n", pmlmeext->cur_channel);
4391                         DBG_88E("cur_bw =%d\n", pmlmeext->cur_bwmode);
4392                         DBG_88E("cur_ch_off =%d\n", pmlmeext->cur_ch_offset);
4393                         break;
4394                 case 0x05:
4395                         psta = rtw_get_stainfo(pstapriv, cur_network->network.MacAddress);
4396                         if (psta) {
4397                                 int i;
4398                                 struct recv_reorder_ctrl *preorder_ctrl;
4399
4400                                 DBG_88E("SSID =%s\n", cur_network->network.Ssid.Ssid);
4401                                 DBG_88E("sta's macaddr: %pM\n", psta->hwaddr);
4402                                 DBG_88E("cur_channel =%d, cur_bwmode =%d, cur_ch_offset =%d\n", pmlmeext->cur_channel, pmlmeext->cur_bwmode, pmlmeext->cur_ch_offset);
4403                                 DBG_88E("rtsen =%d, cts2slef =%d\n", psta->rtsen, psta->cts2self);
4404                                 DBG_88E("state = 0x%x, aid =%d, macid =%d, raid =%d\n", psta->state, psta->aid, psta->mac_id, psta->raid);
4405                                 DBG_88E("qos_en =%d, ht_en =%d, init_rate =%d\n", psta->qos_option, psta->htpriv.ht_option, psta->init_rate);
4406                                 DBG_88E("bwmode =%d, ch_offset =%d, sgi =%d\n", psta->htpriv.bwmode, psta->htpriv.ch_offset, psta->htpriv.sgi);
4407                                 DBG_88E("ampdu_enable = %d\n", psta->htpriv.ampdu_enable);
4408                                 DBG_88E("agg_enable_bitmap =%x, candidate_tid_bitmap =%x\n", psta->htpriv.agg_enable_bitmap, psta->htpriv.candidate_tid_bitmap);
4409                                 for (i = 0; i < 16; i++) {
4410                                         preorder_ctrl = &psta->recvreorder_ctrl[i];
4411                                         if (preorder_ctrl->enable)
4412                                                 DBG_88E("tid =%d, indicate_seq =%d\n", i, preorder_ctrl->indicate_seq);
4413                                 }
4414                         } else {
4415                                 DBG_88E("can't get sta's macaddr, cur_network's macaddr:%pM\n", (cur_network->network.MacAddress));
4416                         }
4417                         break;
4418                 case 0x06:
4419                         {
4420                                 u32     ODMFlag;
4421                                 rtw_hal_get_hwreg(padapter, HW_VAR_DM_FLAG, (u8 *)(&ODMFlag));
4422                                 DBG_88E("(B)DMFlag = 0x%x, arg = 0x%x\n", ODMFlag, arg);
4423                                 ODMFlag = (u32)(0x0f&arg);
4424                                 DBG_88E("(A)DMFlag = 0x%x\n", ODMFlag);
4425                                 rtw_hal_set_hwreg(padapter, HW_VAR_DM_FLAG, (u8 *)(&ODMFlag));
4426                         }
4427                         break;
4428                 case 0x07:
4429                         DBG_88E("bSurpriseRemoved =%d, bDriverStopped =%d\n",
4430                                 padapter->bSurpriseRemoved, padapter->bDriverStopped);
4431                         break;
4432                 case 0x08:
4433                         {
4434                                 struct xmit_priv *pxmitpriv = &padapter->xmitpriv;
4435                                 struct recv_priv  *precvpriv = &padapter->recvpriv;
4436
4437                                 DBG_88E("free_xmitbuf_cnt =%d, free_xmitframe_cnt =%d, free_xmit_extbuf_cnt =%d\n",
4438                                         pxmitpriv->free_xmitbuf_cnt, pxmitpriv->free_xmitframe_cnt, pxmitpriv->free_xmit_extbuf_cnt);
4439                                 DBG_88E("rx_urb_pending_cn =%d\n", precvpriv->rx_pending_cnt);
4440                         }
4441                         break;
4442                 case 0x09:
4443                         {
4444                                 int i, j;
4445                                 struct list_head *plist, *phead;
4446                                 struct recv_reorder_ctrl *preorder_ctrl;
4447
4448 #ifdef CONFIG_88EU_AP_MODE
4449                                 DBG_88E("sta_dz_bitmap = 0x%x, tim_bitmap = 0x%x\n", pstapriv->sta_dz_bitmap, pstapriv->tim_bitmap);
4450 #endif
4451                                 _enter_critical_bh(&pstapriv->sta_hash_lock, &irqL);
4452
4453                                 for (i = 0; i < NUM_STA; i++) {
4454                                         phead = &(pstapriv->sta_hash[i]);
4455                                         plist = get_next(phead);
4456
4457                                         while ((rtw_end_of_queue_search(phead, plist)) == false) {
4458                                                 psta = LIST_CONTAINOR(plist, struct sta_info, hash_list);
4459
4460                                                 plist = get_next(plist);
4461
4462                                                 if (extra_arg == psta->aid) {
4463                                                         DBG_88E("sta's macaddr:%pM\n", (psta->hwaddr));
4464                                                         DBG_88E("rtsen =%d, cts2slef =%d\n", psta->rtsen, psta->cts2self);
4465                                                         DBG_88E("state = 0x%x, aid =%d, macid =%d, raid =%d\n", psta->state, psta->aid, psta->mac_id, psta->raid);
4466                                                         DBG_88E("qos_en =%d, ht_en =%d, init_rate =%d\n", psta->qos_option, psta->htpriv.ht_option, psta->init_rate);
4467                                                         DBG_88E("bwmode =%d, ch_offset =%d, sgi =%d\n", psta->htpriv.bwmode, psta->htpriv.ch_offset, psta->htpriv.sgi);
4468                                                         DBG_88E("ampdu_enable = %d\n", psta->htpriv.ampdu_enable);
4469                                                         DBG_88E("agg_enable_bitmap =%x, candidate_tid_bitmap =%x\n", psta->htpriv.agg_enable_bitmap, psta->htpriv.candidate_tid_bitmap);
4470
4471 #ifdef CONFIG_88EU_AP_MODE
4472                                                         DBG_88E("capability = 0x%x\n", psta->capability);
4473                                                         DBG_88E("flags = 0x%x\n", psta->flags);
4474                                                         DBG_88E("wpa_psk = 0x%x\n", psta->wpa_psk);
4475                                                         DBG_88E("wpa2_group_cipher = 0x%x\n", psta->wpa2_group_cipher);
4476                                                         DBG_88E("wpa2_pairwise_cipher = 0x%x\n", psta->wpa2_pairwise_cipher);
4477                                                         DBG_88E("qos_info = 0x%x\n", psta->qos_info);
4478 #endif
4479                                                         DBG_88E("dot118021XPrivacy = 0x%x\n", psta->dot118021XPrivacy);
4480
4481                                                         for (j = 0; j < 16; j++) {
4482                                                                 preorder_ctrl = &psta->recvreorder_ctrl[j];
4483                                                                 if (preorder_ctrl->enable)
4484                                                                         DBG_88E("tid =%d, indicate_seq =%d\n", j, preorder_ctrl->indicate_seq);
4485                                                         }
4486                                                 }
4487                                         }
4488                                 }
4489                                 _exit_critical_bh(&pstapriv->sta_hash_lock, &irqL);
4490                         }
4491                         break;
4492                 case 0x0c:/* dump rx/tx packet */
4493                         if (arg == 0) {
4494                                 DBG_88E("dump rx packet (%d)\n", extra_arg);
4495                                 rtw_hal_set_def_var(padapter, HAL_DEF_DBG_DUMP_RXPKT, &(extra_arg));
4496                         } else if (arg == 1) {
4497                                 DBG_88E("dump tx packet (%d)\n", extra_arg);
4498                                 rtw_hal_set_def_var(padapter, HAL_DEF_DBG_DUMP_TXPKT, &(extra_arg));
4499                         }
4500                         break;
4501                 case 0x0f:
4502                         if (extra_arg == 0) {
4503                                 DBG_88E("###### silent reset test.......#####\n");
4504                                 rtw_hal_sreset_reset(padapter);
4505                         }
4506                         break;
4507                 case 0x15:
4508                         {
4509                                 struct pwrctrl_priv *pwrpriv = &padapter->pwrctrlpriv;
4510                                 DBG_88E("==>silent resete cnts:%d\n", pwrpriv->ips_enter_cnts);
4511                         }
4512                         break;
4513                 case 0x10:/*  driver version display */
4514                         DBG_88E("rtw driver version =%s\n", DRIVERVERSION);
4515                         break;
4516                 case 0x11:
4517                         DBG_88E("turn %s Rx RSSI display function\n", (extra_arg == 1) ? "on" : "off");
4518                         padapter->bRxRSSIDisplay = extra_arg;
4519                         rtw_hal_set_def_var(padapter, HW_DEF_FA_CNT_DUMP, &extra_arg);
4520                         break;
4521                 case 0x12: /* set rx_stbc */
4522                 {
4523                         struct registry_priv    *pregpriv = &padapter->registrypriv;
4524                         /*  0: disable, bit(0):enable 2.4g, bit(1):enable 5g, 0x3: enable both 2.4g and 5g */
4525                         /* default is set to enable 2.4GHZ for IOT issue with bufflao's AP at 5GHZ */
4526                         if (pregpriv &&
4527                             (extra_arg == 0 ||
4528                              extra_arg == 1 ||
4529                              extra_arg == 2 ||
4530                              extra_arg == 3)) {
4531                                 pregpriv->rx_stbc = extra_arg;
4532                                 DBG_88E("set rx_stbc =%d\n", pregpriv->rx_stbc);
4533                         } else {
4534                                 DBG_88E("get rx_stbc =%d\n", pregpriv->rx_stbc);
4535                         }
4536                 }
4537                         break;
4538                 case 0x13: /* set ampdu_enable */
4539                 {
4540                         struct registry_priv    *pregpriv = &padapter->registrypriv;
4541                         /*  0: disable, 0x1:enable (but wifi_spec should be 0), 0x2: force enable (don't care wifi_spec) */
4542                         if (pregpriv && extra_arg >= 0 && extra_arg < 3) {
4543                                 pregpriv->ampdu_enable = extra_arg;
4544                                 DBG_88E("set ampdu_enable =%d\n", pregpriv->ampdu_enable);
4545                         } else {
4546                                 DBG_88E("get ampdu_enable =%d\n", pregpriv->ampdu_enable);
4547                         }
4548                 }
4549                         break;
4550                 case 0x14: /* get wifi_spec */
4551                 {
4552                         struct registry_priv    *pregpriv = &padapter->registrypriv;
4553                         DBG_88E("get wifi_spec =%d\n", pregpriv->wifi_spec);
4554                 }
4555                         break;
4556                 case 0x16:
4557                         if (arg == 0xff) {
4558                                 pr_info("ODM_COMP_DIG\t\tBIT0\n");
4559                                 pr_info("ODM_COMP_RA_MASK\t\tBIT1\n");
4560                                 pr_info("ODM_COMP_DYNAMIC_TXPWR\tBIT2\n");
4561                                 pr_info("ODM_COMP_FA_CNT\t\tBIT3\n");
4562                                 pr_info("ODM_COMP_RSSI_MONITOR\tBIT4\n");
4563                                 pr_info("ODM_COMP_CCK_PD\t\tBIT5\n");
4564                                 pr_info("ODM_COMP_ANT_DIV\t\tBIT6\n");
4565                                 pr_info("ODM_COMP_PWR_SAVE\t\tBIT7\n");
4566                                 pr_info("ODM_COMP_PWR_TRAIN\tBIT8\n");
4567                                 pr_info("ODM_COMP_RATE_ADAPTIVE\tBIT9\n");
4568                                 pr_info("ODM_COMP_PATH_DIV\t\tBIT10\n");
4569                                 pr_info("ODM_COMP_PSD   \tBIT11\n");
4570                                 pr_info("ODM_COMP_DYNAMIC_PRICCA\tBIT12\n");
4571                                 pr_info("ODM_COMP_RXHP\t\tBIT13\n");
4572                                 pr_info("ODM_COMP_EDCA_TURBO\tBIT16\n");
4573                                 pr_info("ODM_COMP_EARLY_MODE\tBIT17\n");
4574                                 pr_info("ODM_COMP_TX_PWR_TRACK\tBIT24\n");
4575                                 pr_info("ODM_COMP_RX_GAIN_TRACK\tBIT25\n");
4576                                 pr_info("ODM_COMP_CALIBRATION\tBIT26\n");
4577                                 rtw_hal_get_def_var(padapter, HW_DEF_ODM_DBG_FLAG, &extra_arg);
4578                         } else {
4579                                 rtw_hal_set_def_var(padapter, HW_DEF_ODM_DBG_FLAG, &extra_arg);
4580                         }
4581                         break;
4582                 case 0x23:
4583                         DBG_88E("turn %s the bNotifyChannelChange Variable\n", (extra_arg == 1) ? "on" : "off");
4584                         padapter->bNotifyChannelChange = extra_arg;
4585                         break;
4586                 case 0x24:
4587 #ifdef CONFIG_88EU_P2P
4588                         DBG_88E("turn %s the bShowGetP2PState Variable\n", (extra_arg == 1) ? "on" : "off");
4589                         padapter->bShowGetP2PState = extra_arg;
4590 #endif /*  CONFIG_88EU_P2P */
4591                         break;
4592                 case 0xaa:
4593                         if (extra_arg > 0x13)
4594                                 extra_arg = 0xFF;
4595                         DBG_88E("chang data rate to :0x%02x\n", extra_arg);
4596                         padapter->fix_rate = extra_arg;
4597                         break;
4598                 case 0xdd:/* registers dump, 0 for mac reg, 1 for bb reg, 2 for rf reg */
4599                         if (extra_arg == 0)
4600                                 mac_reg_dump(padapter);
4601                         else if (extra_arg == 1)
4602                                 bb_reg_dump(padapter);
4603                         else if (extra_arg == 2)
4604                                 rf_reg_dump(padapter);
4605                         break;
4606                 case 0xee:/* turn on/off dynamic funcs */
4607                         {
4608                                 u32 odm_flag;
4609
4610                                 if (0xf == extra_arg) {
4611                                         rtw_hal_get_def_var(padapter, HAL_DEF_DBG_DM_FUNC, &odm_flag);
4612                                         DBG_88E(" === DMFlag(0x%08x) ===\n", odm_flag);
4613                                         DBG_88E("extra_arg = 0  - disable all dynamic func\n");
4614                                         DBG_88E("extra_arg = 1  - disable DIG- BIT(0)\n");
4615                                         DBG_88E("extra_arg = 2  - disable High power - BIT(1)\n");
4616                                         DBG_88E("extra_arg = 3  - disable tx power tracking - BIT(2)\n");
4617                                         DBG_88E("extra_arg = 4  - disable BT coexistence - BIT(3)\n");
4618                                         DBG_88E("extra_arg = 5  - disable antenna diversity - BIT(4)\n");
4619                                         DBG_88E("extra_arg = 6  - enable all dynamic func\n");
4620                                 } else {
4621                                         /*      extra_arg = 0  - disable all dynamic func
4622                                                 extra_arg = 1  - disable DIG
4623                                                 extra_arg = 2  - disable tx power tracking
4624                                                 extra_arg = 3  - turn on all dynamic func
4625                                         */
4626                                         rtw_hal_set_def_var(padapter, HAL_DEF_DBG_DM_FUNC, &(extra_arg));
4627                                         rtw_hal_get_def_var(padapter, HAL_DEF_DBG_DM_FUNC, &odm_flag);
4628                                         DBG_88E(" === DMFlag(0x%08x) ===\n", odm_flag);
4629                                 }
4630                         }
4631                         break;
4632
4633                 case 0xfd:
4634                         rtw_write8(padapter, 0xc50, arg);
4635                         DBG_88E("wr(0xc50) = 0x%x\n", rtw_read8(padapter, 0xc50));
4636                         rtw_write8(padapter, 0xc58, arg);
4637                         DBG_88E("wr(0xc58) = 0x%x\n", rtw_read8(padapter, 0xc58));
4638                         break;
4639                 case 0xfe:
4640                         DBG_88E("rd(0xc50) = 0x%x\n", rtw_read8(padapter, 0xc50));
4641                         DBG_88E("rd(0xc58) = 0x%x\n", rtw_read8(padapter, 0xc58));
4642                         break;
4643                 case 0xff:
4644                         DBG_88E("dbg(0x210) = 0x%x\n", rtw_read32(padapter, 0x210));
4645                         DBG_88E("dbg(0x608) = 0x%x\n", rtw_read32(padapter, 0x608));
4646                         DBG_88E("dbg(0x280) = 0x%x\n", rtw_read32(padapter, 0x280));
4647                         DBG_88E("dbg(0x284) = 0x%x\n", rtw_read32(padapter, 0x284));
4648                         DBG_88E("dbg(0x288) = 0x%x\n", rtw_read32(padapter, 0x288));
4649
4650                         DBG_88E("dbg(0x664) = 0x%x\n", rtw_read32(padapter, 0x664));
4651
4652                         DBG_88E("\n");
4653
4654                         DBG_88E("dbg(0x430) = 0x%x\n", rtw_read32(padapter, 0x430));
4655                         DBG_88E("dbg(0x438) = 0x%x\n", rtw_read32(padapter, 0x438));
4656
4657                         DBG_88E("dbg(0x440) = 0x%x\n", rtw_read32(padapter, 0x440));
4658
4659                         DBG_88E("dbg(0x458) = 0x%x\n", rtw_read32(padapter, 0x458));
4660
4661                         DBG_88E("dbg(0x484) = 0x%x\n", rtw_read32(padapter, 0x484));
4662                         DBG_88E("dbg(0x488) = 0x%x\n", rtw_read32(padapter, 0x488));
4663
4664                         DBG_88E("dbg(0x444) = 0x%x\n", rtw_read32(padapter, 0x444));
4665                         DBG_88E("dbg(0x448) = 0x%x\n", rtw_read32(padapter, 0x448));
4666                         DBG_88E("dbg(0x44c) = 0x%x\n", rtw_read32(padapter, 0x44c));
4667                         DBG_88E("dbg(0x450) = 0x%x\n", rtw_read32(padapter, 0x450));
4668                         break;
4669                 }
4670                 break;
4671         default:
4672                 DBG_88E("error dbg cmd!\n");
4673                 break;
4674         }
4675         return ret;
4676 }
4677
4678 static int wpa_set_param(struct net_device *dev, u8 name, u32 value)
4679 {
4680         uint ret = 0;
4681         struct adapter *padapter = (struct adapter *)rtw_netdev_priv(dev);
4682
4683         switch (name) {
4684         case IEEE_PARAM_WPA_ENABLED:
4685                 padapter->securitypriv.dot11AuthAlgrthm = dot11AuthAlgrthm_8021X; /* 802.1x */
4686                 switch ((value)&0xff) {
4687                 case 1: /* WPA */
4688                         padapter->securitypriv.ndisauthtype = Ndis802_11AuthModeWPAPSK; /* WPA_PSK */
4689                         padapter->securitypriv.ndisencryptstatus = Ndis802_11Encryption2Enabled;
4690                         break;
4691                 case 2: /* WPA2 */
4692                         padapter->securitypriv.ndisauthtype = Ndis802_11AuthModeWPA2PSK; /* WPA2_PSK */
4693                         padapter->securitypriv.ndisencryptstatus = Ndis802_11Encryption3Enabled;
4694                         break;
4695                 }
4696                 RT_TRACE(_module_rtl871x_ioctl_os_c, _drv_info_,
4697                          ("wpa_set_param:padapter->securitypriv.ndisauthtype =%d\n", padapter->securitypriv.ndisauthtype));
4698                 break;
4699         case IEEE_PARAM_TKIP_COUNTERMEASURES:
4700                 break;
4701         case IEEE_PARAM_DROP_UNENCRYPTED: {
4702                 /* HACK:
4703                  *
4704                  * wpa_supplicant calls set_wpa_enabled when the driver
4705                  * is loaded and unloaded, regardless of if WPA is being
4706                  * used.  No other calls are made which can be used to
4707                  * determine if encryption will be used or not prior to
4708                  * association being expected.  If encryption is not being
4709                  * used, drop_unencrypted is set to false, else true -- we
4710                  * can use this to determine if the CAP_PRIVACY_ON bit should
4711                  * be set.
4712                  */
4713
4714                 break;
4715         }
4716         case IEEE_PARAM_PRIVACY_INVOKED:
4717                 break;
4718
4719         case IEEE_PARAM_AUTH_ALGS:
4720                 ret = wpa_set_auth_algs(dev, value);
4721                 break;
4722         case IEEE_PARAM_IEEE_802_1X:
4723                 break;
4724         case IEEE_PARAM_WPAX_SELECT:
4725                 break;
4726         default:
4727                 ret = -EOPNOTSUPP;
4728                 break;
4729         }
4730         return ret;
4731 }
4732
4733 static int wpa_mlme(struct net_device *dev, u32 command, u32 reason)
4734 {
4735         int ret = 0;
4736         struct adapter *padapter = (struct adapter *)rtw_netdev_priv(dev);
4737
4738         switch (command) {
4739         case IEEE_MLME_STA_DEAUTH:
4740                 if (!rtw_set_802_11_disassociate(padapter))
4741                         ret = -1;
4742                 break;
4743         case IEEE_MLME_STA_DISASSOC:
4744                 if (!rtw_set_802_11_disassociate(padapter))
4745                         ret = -1;
4746                 break;
4747         default:
4748                 ret = -EOPNOTSUPP;
4749                 break;
4750         }
4751
4752         return ret;
4753 }
4754
4755 static int wpa_supplicant_ioctl(struct net_device *dev, struct iw_point *p)
4756 {
4757         struct ieee_param *param;
4758         uint ret = 0;
4759
4760         if (p->length < sizeof(struct ieee_param) || !p->pointer) {
4761                 ret = -EINVAL;
4762                 goto out;
4763         }
4764
4765         param = (struct ieee_param *)rtw_malloc(p->length);
4766         if (param == NULL) {
4767                 ret = -ENOMEM;
4768                 goto out;
4769         }
4770
4771         if (copy_from_user(param, p->pointer, p->length)) {
4772                 kfree(param);
4773                 ret = -EFAULT;
4774                 goto out;
4775         }
4776
4777         switch (param->cmd) {
4778         case IEEE_CMD_SET_WPA_PARAM:
4779                 ret = wpa_set_param(dev, param->u.wpa_param.name, param->u.wpa_param.value);
4780                 break;
4781
4782         case IEEE_CMD_SET_WPA_IE:
4783                 ret =  rtw_set_wpa_ie((struct adapter *)rtw_netdev_priv(dev),
4784                                       (char *)param->u.wpa_ie.data, (u16)param->u.wpa_ie.len);
4785                 break;
4786
4787         case IEEE_CMD_SET_ENCRYPTION:
4788                 ret = wpa_set_encryption(dev, param, p->length);
4789                 break;
4790
4791         case IEEE_CMD_MLME:
4792                 ret = wpa_mlme(dev, param->u.mlme.command, param->u.mlme.reason_code);
4793                 break;
4794
4795         default:
4796                 DBG_88E("Unknown WPA supplicant request: %d\n", param->cmd);
4797                 ret = -EOPNOTSUPP;
4798                 break;
4799         }
4800
4801         if (ret == 0 && copy_to_user(p->pointer, param, p->length))
4802                 ret = -EFAULT;
4803
4804         kfree(param);
4805
4806 out:
4807
4808         return ret;
4809 }
4810
4811 #ifdef CONFIG_88EU_AP_MODE
4812 static u8 set_pairwise_key(struct adapter *padapter, struct sta_info *psta)
4813 {
4814         struct cmd_obj *ph2c;
4815         struct set_stakey_parm  *psetstakey_para;
4816         struct cmd_priv *pcmdpriv = &padapter->cmdpriv;
4817         u8 res = _SUCCESS;
4818
4819         ph2c = (struct cmd_obj *)rtw_zmalloc(sizeof(struct cmd_obj));
4820         if (ph2c == NULL) {
4821                 res = _FAIL;
4822                 goto exit;
4823         }
4824
4825         psetstakey_para = (struct set_stakey_parm *)rtw_zmalloc(sizeof(struct set_stakey_parm));
4826         if (psetstakey_para == NULL) {
4827                 kfree(ph2c);
4828                 res = _FAIL;
4829                 goto exit;
4830         }
4831
4832         init_h2fwcmd_w_parm_no_rsp(ph2c, psetstakey_para, _SetStaKey_CMD_);
4833
4834         psetstakey_para->algorithm = (u8)psta->dot118021XPrivacy;
4835
4836         memcpy(psetstakey_para->addr, psta->hwaddr, ETH_ALEN);
4837
4838         memcpy(psetstakey_para->key, &psta->dot118021x_UncstKey, 16);
4839
4840         res = rtw_enqueue_cmd(pcmdpriv, ph2c);
4841
4842 exit:
4843
4844         return res;
4845 }
4846
4847 static int set_group_key(struct adapter *padapter, u8 *key, u8 alg, int keyid)
4848 {
4849         u8 keylen;
4850         struct cmd_obj *pcmd;
4851         struct setkey_parm *psetkeyparm;
4852         struct cmd_priv *pcmdpriv = &(padapter->cmdpriv);
4853         int res = _SUCCESS;
4854
4855         DBG_88E("%s\n", __func__);
4856
4857         pcmd = (struct cmd_obj *)rtw_zmalloc(sizeof(struct      cmd_obj));
4858         if (pcmd == NULL) {
4859                 res = _FAIL;
4860                 goto exit;
4861         }
4862         psetkeyparm = (struct setkey_parm *)rtw_zmalloc(sizeof(struct setkey_parm));
4863         if (psetkeyparm == NULL) {
4864                 kfree(pcmd);
4865                 res = _FAIL;
4866                 goto exit;
4867         }
4868
4869         _rtw_memset(psetkeyparm, 0, sizeof(struct setkey_parm));
4870
4871         psetkeyparm->keyid = (u8)keyid;
4872
4873         psetkeyparm->algorithm = alg;
4874
4875         psetkeyparm->set_tx = 1;
4876
4877         switch (alg) {
4878         case _WEP40_:
4879                 keylen = 5;
4880                 break;
4881         case _WEP104_:
4882                 keylen = 13;
4883                 break;
4884         case _TKIP_:
4885         case _TKIP_WTMIC_:
4886         case _AES_:
4887                 keylen = 16;
4888         default:
4889                 keylen = 16;
4890         }
4891
4892         memcpy(&(psetkeyparm->key[0]), key, keylen);
4893
4894         pcmd->cmdcode = _SetKey_CMD_;
4895         pcmd->parmbuf = (u8 *)psetkeyparm;
4896         pcmd->cmdsz =  (sizeof(struct setkey_parm));
4897         pcmd->rsp = NULL;
4898         pcmd->rspsz = 0;
4899
4900         _rtw_init_listhead(&pcmd->list);
4901
4902         res = rtw_enqueue_cmd(pcmdpriv, pcmd);
4903
4904 exit:
4905
4906         return res;
4907 }
4908
4909 static int set_wep_key(struct adapter *padapter, u8 *key, u8 keylen, int keyid)
4910 {
4911         u8 alg;
4912
4913         switch (keylen) {
4914         case 5:
4915                 alg = _WEP40_;
4916                 break;
4917         case 13:
4918                 alg = _WEP104_;
4919                 break;
4920         default:
4921                 alg = _NO_PRIVACY_;
4922         }
4923
4924         return set_group_key(padapter, key, alg, keyid);
4925 }
4926
4927 static int rtw_set_encryption(struct net_device *dev, struct ieee_param *param, u32 param_len)
4928 {
4929         int ret = 0;
4930         u32 wep_key_idx, wep_key_len, wep_total_len;
4931         struct ndis_802_11_wep   *pwep = NULL;
4932         struct sta_info *psta = NULL, *pbcmc_sta = NULL;
4933         struct adapter *padapter = (struct adapter *)rtw_netdev_priv(dev);
4934         struct mlme_priv        *pmlmepriv = &padapter->mlmepriv;
4935         struct security_priv *psecuritypriv = &(padapter->securitypriv);
4936         struct sta_priv *pstapriv = &padapter->stapriv;
4937
4938         DBG_88E("%s\n", __func__);
4939         param->u.crypt.err = 0;
4940         param->u.crypt.alg[IEEE_CRYPT_ALG_NAME_LEN - 1] = '\0';
4941         if (param_len !=  sizeof(struct ieee_param) + param->u.crypt.key_len) {
4942                 ret =  -EINVAL;
4943                 goto exit;
4944         }
4945         if (param->sta_addr[0] == 0xff && param->sta_addr[1] == 0xff &&
4946             param->sta_addr[2] == 0xff && param->sta_addr[3] == 0xff &&
4947             param->sta_addr[4] == 0xff && param->sta_addr[5] == 0xff) {
4948                 if (param->u.crypt.idx >= WEP_KEYS) {
4949                         ret = -EINVAL;
4950                         goto exit;
4951                 }
4952         } else {
4953                 psta = rtw_get_stainfo(pstapriv, param->sta_addr);
4954                 if (!psta) {
4955                         DBG_88E("rtw_set_encryption(), sta has already been removed or never been added\n");
4956                         goto exit;
4957                 }
4958         }
4959
4960         if (strcmp(param->u.crypt.alg, "none") == 0 && (psta == NULL)) {
4961                 /* todo:clear default encryption keys */
4962
4963                 DBG_88E("clear default encryption keys, keyid =%d\n", param->u.crypt.idx);
4964                 goto exit;
4965         }
4966         if (strcmp(param->u.crypt.alg, "WEP") == 0 && (psta == NULL)) {
4967                 DBG_88E("r871x_set_encryption, crypt.alg = WEP\n");
4968                 wep_key_idx = param->u.crypt.idx;
4969                 wep_key_len = param->u.crypt.key_len;
4970                 DBG_88E("r871x_set_encryption, wep_key_idx=%d, len=%d\n", wep_key_idx, wep_key_len);
4971                 if ((wep_key_idx >= WEP_KEYS) || (wep_key_len <= 0)) {
4972                         ret = -EINVAL;
4973                         goto exit;
4974                 }
4975
4976                 if (wep_key_len > 0) {
4977                         wep_key_len = wep_key_len <= 5 ? 5 : 13;
4978                         wep_total_len = wep_key_len + FIELD_OFFSET(struct ndis_802_11_wep, KeyMaterial);
4979                         pwep = (struct ndis_802_11_wep *)rtw_malloc(wep_total_len);
4980                         if (pwep == NULL) {
4981                                 DBG_88E(" r871x_set_encryption: pwep allocate fail !!!\n");
4982                                 goto exit;
4983                         }
4984
4985                         _rtw_memset(pwep, 0, wep_total_len);
4986
4987                         pwep->KeyLength = wep_key_len;
4988                         pwep->Length = wep_total_len;
4989                 }
4990
4991                 pwep->KeyIndex = wep_key_idx;
4992
4993                 memcpy(pwep->KeyMaterial,  param->u.crypt.key, pwep->KeyLength);
4994
4995                 if (param->u.crypt.set_tx) {
4996                         DBG_88E("wep, set_tx = 1\n");
4997
4998                         psecuritypriv->ndisencryptstatus = Ndis802_11Encryption1Enabled;
4999                         psecuritypriv->dot11PrivacyAlgrthm = _WEP40_;
5000                         psecuritypriv->dot118021XGrpPrivacy = _WEP40_;
5001
5002                         if (pwep->KeyLength == 13) {
5003                                 psecuritypriv->dot11PrivacyAlgrthm = _WEP104_;
5004                                 psecuritypriv->dot118021XGrpPrivacy = _WEP104_;
5005                         }
5006
5007                         psecuritypriv->dot11PrivacyKeyIndex = wep_key_idx;
5008
5009                         memcpy(&(psecuritypriv->dot11DefKey[wep_key_idx].skey[0]), pwep->KeyMaterial, pwep->KeyLength);
5010
5011                         psecuritypriv->dot11DefKeylen[wep_key_idx] = pwep->KeyLength;
5012
5013                         set_wep_key(padapter, pwep->KeyMaterial, pwep->KeyLength, wep_key_idx);
5014                 } else {
5015                         DBG_88E("wep, set_tx = 0\n");
5016
5017                         /* don't update "psecuritypriv->dot11PrivacyAlgrthm" and */
5018                         /* psecuritypriv->dot11PrivacyKeyIndex = keyid", but can rtw_set_key to cam */
5019
5020                       memcpy(&(psecuritypriv->dot11DefKey[wep_key_idx].skey[0]), pwep->KeyMaterial, pwep->KeyLength);
5021
5022                         psecuritypriv->dot11DefKeylen[wep_key_idx] = pwep->KeyLength;
5023
5024                         set_wep_key(padapter, pwep->KeyMaterial, pwep->KeyLength, wep_key_idx);
5025                 }
5026
5027                 goto exit;
5028         }
5029
5030         if (!psta && check_fwstate(pmlmepriv, WIFI_AP_STATE)) { /*  group key */
5031                 if (param->u.crypt.set_tx == 1) {
5032                         if (strcmp(param->u.crypt.alg, "WEP") == 0) {
5033                                 DBG_88E("%s, set group_key, WEP\n", __func__);
5034
5035                                 memcpy(psecuritypriv->dot118021XGrpKey[param->u.crypt.idx].skey,
5036                                             param->u.crypt.key, (param->u.crypt.key_len > 16 ? 16 : param->u.crypt.key_len));
5037
5038                                 psecuritypriv->dot118021XGrpPrivacy = _WEP40_;
5039                                 if (param->u.crypt.key_len == 13)
5040                                                 psecuritypriv->dot118021XGrpPrivacy = _WEP104_;
5041                         } else if (strcmp(param->u.crypt.alg, "TKIP") == 0) {
5042                                 DBG_88E("%s, set group_key, TKIP\n", __func__);
5043                                 psecuritypriv->dot118021XGrpPrivacy = _TKIP_;
5044                                 memcpy(psecuritypriv->dot118021XGrpKey[param->u.crypt.idx].skey,
5045                                             param->u.crypt.key, (param->u.crypt.key_len > 16 ? 16 : param->u.crypt.key_len));
5046                                 /* set mic key */
5047                                 memcpy(psecuritypriv->dot118021XGrptxmickey[param->u.crypt.idx].skey, &(param->u.crypt.key[16]), 8);
5048                                 memcpy(psecuritypriv->dot118021XGrprxmickey[param->u.crypt.idx].skey, &(param->u.crypt.key[24]), 8);
5049
5050                                 psecuritypriv->busetkipkey = true;
5051                         } else if (strcmp(param->u.crypt.alg, "CCMP") == 0) {
5052                                 DBG_88E("%s, set group_key, CCMP\n", __func__);
5053                                 psecuritypriv->dot118021XGrpPrivacy = _AES_;
5054                                 memcpy(psecuritypriv->dot118021XGrpKey[param->u.crypt.idx].skey,
5055                                             param->u.crypt.key, (param->u.crypt.key_len > 16 ? 16 : param->u.crypt.key_len));
5056                         } else {
5057                                 DBG_88E("%s, set group_key, none\n", __func__);
5058                                 psecuritypriv->dot118021XGrpPrivacy = _NO_PRIVACY_;
5059                         }
5060                         psecuritypriv->dot118021XGrpKeyid = param->u.crypt.idx;
5061                         psecuritypriv->binstallGrpkey = true;
5062                         psecuritypriv->dot11PrivacyAlgrthm = psecuritypriv->dot118021XGrpPrivacy;/*  */
5063                         set_group_key(padapter, param->u.crypt.key, psecuritypriv->dot118021XGrpPrivacy, param->u.crypt.idx);
5064                         pbcmc_sta = rtw_get_bcmc_stainfo(padapter);
5065                         if (pbcmc_sta) {
5066                                 pbcmc_sta->ieee8021x_blocked = false;
5067                                 pbcmc_sta->dot118021XPrivacy = psecuritypriv->dot118021XGrpPrivacy;/* rx will use bmc_sta's dot118021XPrivacy */
5068                         }
5069                 }
5070                 goto exit;
5071         }
5072
5073         if (psecuritypriv->dot11AuthAlgrthm == dot11AuthAlgrthm_8021X && psta) { /*  psk/802_1x */
5074                 if (check_fwstate(pmlmepriv, WIFI_AP_STATE)) {
5075                         if (param->u.crypt.set_tx == 1) {
5076                                 memcpy(psta->dot118021x_UncstKey.skey,  param->u.crypt.key, (param->u.crypt.key_len > 16 ? 16 : param->u.crypt.key_len));
5077
5078                                 if (strcmp(param->u.crypt.alg, "WEP") == 0) {
5079                                         DBG_88E("%s, set pairwise key, WEP\n", __func__);
5080
5081                                         psta->dot118021XPrivacy = _WEP40_;
5082                                         if (param->u.crypt.key_len == 13)
5083                                                 psta->dot118021XPrivacy = _WEP104_;
5084                                 } else if (strcmp(param->u.crypt.alg, "TKIP") == 0) {
5085                                         DBG_88E("%s, set pairwise key, TKIP\n", __func__);
5086
5087                                         psta->dot118021XPrivacy = _TKIP_;
5088
5089                                         /* set mic key */
5090                                         memcpy(psta->dot11tkiptxmickey.skey, &(param->u.crypt.key[16]), 8);
5091                                         memcpy(psta->dot11tkiprxmickey.skey, &(param->u.crypt.key[24]), 8);
5092
5093                                         psecuritypriv->busetkipkey = true;
5094                                 } else if (strcmp(param->u.crypt.alg, "CCMP") == 0) {
5095                                         DBG_88E("%s, set pairwise key, CCMP\n", __func__);
5096
5097                                         psta->dot118021XPrivacy = _AES_;
5098                                 } else {
5099                                         DBG_88E("%s, set pairwise key, none\n", __func__);
5100
5101                                         psta->dot118021XPrivacy = _NO_PRIVACY_;
5102                                 }
5103
5104                                 set_pairwise_key(padapter, psta);
5105
5106                                 psta->ieee8021x_blocked = false;
5107                         } else { /* group key??? */
5108                                 if (strcmp(param->u.crypt.alg, "WEP") == 0) {
5109                                         memcpy(psecuritypriv->dot118021XGrpKey[param->u.crypt.idx].skey,
5110                                                     param->u.crypt.key, (param->u.crypt.key_len > 16 ? 16 : param->u.crypt.key_len));
5111                                         psecuritypriv->dot118021XGrpPrivacy = _WEP40_;
5112                                         if (param->u.crypt.key_len == 13)
5113                                                 psecuritypriv->dot118021XGrpPrivacy = _WEP104_;
5114                                 } else if (strcmp(param->u.crypt.alg, "TKIP") == 0) {
5115                                         psecuritypriv->dot118021XGrpPrivacy = _TKIP_;
5116
5117                                         memcpy(psecuritypriv->dot118021XGrpKey[param->u.crypt.idx].skey,
5118                                                     param->u.crypt.key, (param->u.crypt.key_len > 16 ? 16 : param->u.crypt.key_len));
5119
5120                                         /* set mic key */
5121                                         memcpy(psecuritypriv->dot118021XGrptxmickey[param->u.crypt.idx].skey, &(param->u.crypt.key[16]), 8);
5122                                         memcpy(psecuritypriv->dot118021XGrprxmickey[param->u.crypt.idx].skey, &(param->u.crypt.key[24]), 8);
5123
5124                                         psecuritypriv->busetkipkey = true;
5125                                 } else if (strcmp(param->u.crypt.alg, "CCMP") == 0) {
5126                                         psecuritypriv->dot118021XGrpPrivacy = _AES_;
5127
5128                                         memcpy(psecuritypriv->dot118021XGrpKey[param->u.crypt.idx].skey,
5129                                                     param->u.crypt.key, (param->u.crypt.key_len > 16 ? 16 : param->u.crypt.key_len));
5130                                 } else {
5131                                         psecuritypriv->dot118021XGrpPrivacy = _NO_PRIVACY_;
5132                                 }
5133
5134                                 psecuritypriv->dot118021XGrpKeyid = param->u.crypt.idx;
5135
5136                                 psecuritypriv->binstallGrpkey = true;
5137
5138                                 psecuritypriv->dot11PrivacyAlgrthm = psecuritypriv->dot118021XGrpPrivacy;/*  */
5139
5140                                 set_group_key(padapter, param->u.crypt.key, psecuritypriv->dot118021XGrpPrivacy, param->u.crypt.idx);
5141
5142                                 pbcmc_sta = rtw_get_bcmc_stainfo(padapter);
5143                                 if (pbcmc_sta) {
5144                                         pbcmc_sta->ieee8021x_blocked = false;
5145                                         pbcmc_sta->dot118021XPrivacy = psecuritypriv->dot118021XGrpPrivacy;/* rx will use bmc_sta's dot118021XPrivacy */
5146                                 }
5147                         }
5148                 }
5149         }
5150
5151 exit:
5152
5153         kfree(pwep);
5154
5155         return ret;
5156 }
5157
5158 static int rtw_set_beacon(struct net_device *dev, struct ieee_param *param, int len)
5159 {
5160         int ret = 0;
5161         struct adapter *padapter = (struct adapter *)rtw_netdev_priv(dev);
5162         struct mlme_priv *pmlmepriv = &(padapter->mlmepriv);
5163         struct sta_priv *pstapriv = &padapter->stapriv;
5164         unsigned char *pbuf = param->u.bcn_ie.buf;
5165
5166         DBG_88E("%s, len =%d\n", __func__, len);
5167
5168         if (check_fwstate(pmlmepriv, WIFI_AP_STATE) != true)
5169                 return -EINVAL;
5170
5171         memcpy(&pstapriv->max_num_sta, param->u.bcn_ie.reserved, 2);
5172
5173         if ((pstapriv->max_num_sta > NUM_STA) || (pstapriv->max_num_sta <= 0))
5174                 pstapriv->max_num_sta = NUM_STA;
5175
5176         if (rtw_check_beacon_data(padapter, pbuf,  (len-12-2)) == _SUCCESS)/*  12 = param header, 2:no packed */
5177                 ret = 0;
5178         else
5179                 ret = -EINVAL;
5180
5181         return ret;
5182 }
5183
5184 static int rtw_hostapd_sta_flush(struct net_device *dev)
5185 {
5186         int ret = 0;
5187         struct adapter *padapter = (struct adapter *)rtw_netdev_priv(dev);
5188
5189         DBG_88E("%s\n", __func__);
5190
5191         flush_all_cam_entry(padapter);  /* clear CAM */
5192
5193         ret = rtw_sta_flush(padapter);
5194
5195         return ret;
5196 }
5197
5198 static int rtw_add_sta(struct net_device *dev, struct ieee_param *param)
5199 {
5200         int ret = 0;
5201         struct sta_info *psta = NULL;
5202         struct adapter *padapter = (struct adapter *)rtw_netdev_priv(dev);
5203         struct mlme_priv *pmlmepriv = &(padapter->mlmepriv);
5204         struct sta_priv *pstapriv = &padapter->stapriv;
5205
5206         DBG_88E("rtw_add_sta(aid =%d) =%pM\n", param->u.add_sta.aid, (param->sta_addr));
5207
5208         if (!check_fwstate(pmlmepriv, (_FW_LINKED|WIFI_AP_STATE)))
5209                 return -EINVAL;
5210
5211         if (param->sta_addr[0] == 0xff && param->sta_addr[1] == 0xff &&
5212             param->sta_addr[2] == 0xff && param->sta_addr[3] == 0xff &&
5213             param->sta_addr[4] == 0xff && param->sta_addr[5] == 0xff)
5214                 return -EINVAL;
5215
5216         psta = rtw_get_stainfo(pstapriv, param->sta_addr);
5217         if (psta) {
5218                 int flags = param->u.add_sta.flags;
5219
5220                 psta->aid = param->u.add_sta.aid;/* aid = 1~2007 */
5221
5222                 memcpy(psta->bssrateset, param->u.add_sta.tx_supp_rates, 16);
5223
5224                 /* check wmm cap. */
5225                 if (WLAN_STA_WME&flags)
5226                         psta->qos_option = 1;
5227                 else
5228                         psta->qos_option = 0;
5229
5230                 if (pmlmepriv->qospriv.qos_option == 0)
5231                         psta->qos_option = 0;
5232
5233                 /* chec 802.11n ht cap. */
5234                 if (WLAN_STA_HT&flags) {
5235                         psta->htpriv.ht_option = true;
5236                         psta->qos_option = 1;
5237                         memcpy((void *)&psta->htpriv.ht_cap, (void *)&param->u.add_sta.ht_cap, sizeof(struct rtw_ieee80211_ht_cap));
5238                 } else {
5239                         psta->htpriv.ht_option = false;
5240                 }
5241
5242                 if (pmlmepriv->htpriv.ht_option == false)
5243                         psta->htpriv.ht_option = false;
5244
5245                 update_sta_info_apmode(padapter, psta);
5246         } else {
5247                 ret = -ENOMEM;
5248         }
5249
5250         return ret;
5251 }
5252
5253 static int rtw_del_sta(struct net_device *dev, struct ieee_param *param)
5254 {
5255         unsigned long irqL;
5256         int ret = 0;
5257         struct sta_info *psta = NULL;
5258         struct adapter *padapter = (struct adapter *)rtw_netdev_priv(dev);
5259         struct mlme_priv *pmlmepriv = &(padapter->mlmepriv);
5260         struct sta_priv *pstapriv = &padapter->stapriv;
5261         int updated = 0;
5262
5263         DBG_88E("rtw_del_sta =%pM\n", (param->sta_addr));
5264
5265         if (check_fwstate(pmlmepriv, (_FW_LINKED|WIFI_AP_STATE)) != true)
5266                 return -EINVAL;
5267
5268         if (param->sta_addr[0] == 0xff && param->sta_addr[1] == 0xff &&
5269             param->sta_addr[2] == 0xff && param->sta_addr[3] == 0xff &&
5270             param->sta_addr[4] == 0xff && param->sta_addr[5] == 0xff)
5271                 return -EINVAL;
5272
5273         psta = rtw_get_stainfo(pstapriv, param->sta_addr);
5274         if (psta) {
5275                 _enter_critical_bh(&pstapriv->asoc_list_lock, &irqL);
5276                 if (!rtw_is_list_empty(&psta->asoc_list)) {
5277                         rtw_list_delete(&psta->asoc_list);
5278                         pstapriv->asoc_list_cnt--;
5279                         updated = ap_free_sta(padapter, psta, true, WLAN_REASON_DEAUTH_LEAVING);
5280                 }
5281                 _exit_critical_bh(&pstapriv->asoc_list_lock, &irqL);
5282                 associated_clients_update(padapter, updated);
5283                 psta = NULL;
5284         } else {
5285                 DBG_88E("rtw_del_sta(), sta has already been removed or never been added\n");
5286         }
5287
5288         return ret;
5289 }
5290
5291 static int rtw_ioctl_get_sta_data(struct net_device *dev, struct ieee_param *param, int len)
5292 {
5293         int ret = 0;
5294         struct sta_info *psta = NULL;
5295         struct adapter *padapter = (struct adapter *)rtw_netdev_priv(dev);
5296         struct mlme_priv *pmlmepriv = &(padapter->mlmepriv);
5297         struct sta_priv *pstapriv = &padapter->stapriv;
5298         struct ieee_param_ex *param_ex = (struct ieee_param_ex *)param;
5299         struct sta_data *psta_data = (struct sta_data *)param_ex->data;
5300
5301         DBG_88E("rtw_ioctl_get_sta_info, sta_addr: %pM\n", (param_ex->sta_addr));
5302
5303         if (check_fwstate(pmlmepriv, (_FW_LINKED|WIFI_AP_STATE)) != true)
5304                 return -EINVAL;
5305
5306         if (param_ex->sta_addr[0] == 0xff && param_ex->sta_addr[1] == 0xff &&
5307             param_ex->sta_addr[2] == 0xff && param_ex->sta_addr[3] == 0xff &&
5308             param_ex->sta_addr[4] == 0xff && param_ex->sta_addr[5] == 0xff)
5309                 return -EINVAL;
5310
5311         psta = rtw_get_stainfo(pstapriv, param_ex->sta_addr);
5312         if (psta) {
5313                 psta_data->aid = (u16)psta->aid;
5314                 psta_data->capability = psta->capability;
5315                 psta_data->flags = psta->flags;
5316
5317 /*
5318                 nonerp_set : BIT(0)
5319                 no_short_slot_time_set : BIT(1)
5320                 no_short_preamble_set : BIT(2)
5321                 no_ht_gf_set : BIT(3)
5322                 no_ht_set : BIT(4)
5323                 ht_20mhz_set : BIT(5)
5324 */
5325
5326                 psta_data->sta_set = ((psta->nonerp_set) |
5327                                       (psta->no_short_slot_time_set << 1) |
5328                                       (psta->no_short_preamble_set << 2) |
5329                                       (psta->no_ht_gf_set << 3) |
5330                                       (psta->no_ht_set << 4) |
5331                                       (psta->ht_20mhz_set << 5));
5332                 psta_data->tx_supp_rates_len =  psta->bssratelen;
5333                 memcpy(psta_data->tx_supp_rates, psta->bssrateset, psta->bssratelen);
5334                 memcpy(&psta_data->ht_cap, &psta->htpriv.ht_cap, sizeof(struct rtw_ieee80211_ht_cap));
5335                 psta_data->rx_pkts = psta->sta_stats.rx_data_pkts;
5336                 psta_data->rx_bytes = psta->sta_stats.rx_bytes;
5337                 psta_data->rx_drops = psta->sta_stats.rx_drops;
5338                 psta_data->tx_pkts = psta->sta_stats.tx_pkts;
5339                 psta_data->tx_bytes = psta->sta_stats.tx_bytes;
5340                 psta_data->tx_drops = psta->sta_stats.tx_drops;
5341         } else {
5342                 ret = -1;
5343         }
5344
5345         return ret;
5346 }
5347
5348 static int rtw_get_sta_wpaie(struct net_device *dev, struct ieee_param *param)
5349 {
5350         int ret = 0;
5351         struct sta_info *psta = NULL;
5352         struct adapter *padapter = (struct adapter *)rtw_netdev_priv(dev);
5353         struct mlme_priv *pmlmepriv = &(padapter->mlmepriv);
5354         struct sta_priv *pstapriv = &padapter->stapriv;
5355
5356         DBG_88E("rtw_get_sta_wpaie, sta_addr: %pM\n", (param->sta_addr));
5357
5358         if (check_fwstate(pmlmepriv, (_FW_LINKED|WIFI_AP_STATE)) != true)
5359                 return -EINVAL;
5360
5361         if (param->sta_addr[0] == 0xff && param->sta_addr[1] == 0xff &&
5362             param->sta_addr[2] == 0xff && param->sta_addr[3] == 0xff &&
5363             param->sta_addr[4] == 0xff && param->sta_addr[5] == 0xff)
5364                 return -EINVAL;
5365
5366         psta = rtw_get_stainfo(pstapriv, param->sta_addr);
5367         if (psta) {
5368                 if ((psta->wpa_ie[0] == WLAN_EID_RSN) || (psta->wpa_ie[0] == WLAN_EID_GENERIC)) {
5369                         int wpa_ie_len;
5370                         int copy_len;
5371
5372                         wpa_ie_len = psta->wpa_ie[1];
5373                         copy_len = ((wpa_ie_len+2) > sizeof(psta->wpa_ie)) ? (sizeof(psta->wpa_ie)) : (wpa_ie_len+2);
5374                         param->u.wpa_ie.len = copy_len;
5375                         memcpy(param->u.wpa_ie.reserved, psta->wpa_ie, copy_len);
5376                 } else {
5377                         DBG_88E("sta's wpa_ie is NONE\n");
5378                 }
5379         } else {
5380                 ret = -1;
5381         }
5382
5383         return ret;
5384 }
5385
5386 static int rtw_set_wps_beacon(struct net_device *dev, struct ieee_param *param, int len)
5387 {
5388         int ret = 0;
5389         unsigned char wps_oui[4] = {0x0, 0x50, 0xf2, 0x04};
5390         struct adapter *padapter = (struct adapter *)rtw_netdev_priv(dev);
5391         struct mlme_priv *pmlmepriv = &(padapter->mlmepriv);
5392         struct mlme_ext_priv    *pmlmeext = &(padapter->mlmeextpriv);
5393         int ie_len;
5394
5395         DBG_88E("%s, len =%d\n", __func__, len);
5396
5397         if (check_fwstate(pmlmepriv, WIFI_AP_STATE) != true)
5398                 return -EINVAL;
5399
5400         ie_len = len-12-2;/*  12 = param header, 2:no packed */
5401
5402         if (pmlmepriv->wps_beacon_ie) {
5403                 kfree(pmlmepriv->wps_beacon_ie);
5404                 pmlmepriv->wps_beacon_ie = NULL;
5405         }
5406
5407         if (ie_len > 0) {
5408                 pmlmepriv->wps_beacon_ie = rtw_malloc(ie_len);
5409                 pmlmepriv->wps_beacon_ie_len = ie_len;
5410                 if (pmlmepriv->wps_beacon_ie == NULL) {
5411                         DBG_88E("%s()-%d: rtw_malloc() ERROR!\n", __func__, __LINE__);
5412                         return -EINVAL;
5413                 }
5414
5415                 memcpy(pmlmepriv->wps_beacon_ie, param->u.bcn_ie.buf, ie_len);
5416
5417                 update_beacon(padapter, _VENDOR_SPECIFIC_IE_, wps_oui, true);
5418
5419                 pmlmeext->bstart_bss = true;
5420         }
5421
5422         return ret;
5423 }
5424
5425 static int rtw_set_wps_probe_resp(struct net_device *dev, struct ieee_param *param, int len)
5426 {
5427         int ret = 0;
5428         struct adapter *padapter = (struct adapter *)rtw_netdev_priv(dev);
5429         struct mlme_priv *pmlmepriv = &(padapter->mlmepriv);
5430         int ie_len;
5431
5432         DBG_88E("%s, len =%d\n", __func__, len);
5433
5434         if (check_fwstate(pmlmepriv, WIFI_AP_STATE) != true)
5435                 return -EINVAL;
5436
5437         ie_len = len-12-2;/*  12 = param header, 2:no packed */
5438
5439         if (pmlmepriv->wps_probe_resp_ie) {
5440                 kfree(pmlmepriv->wps_probe_resp_ie);
5441                 pmlmepriv->wps_probe_resp_ie = NULL;
5442         }
5443
5444         if (ie_len > 0) {
5445                 pmlmepriv->wps_probe_resp_ie = rtw_malloc(ie_len);
5446                 pmlmepriv->wps_probe_resp_ie_len = ie_len;
5447                 if (pmlmepriv->wps_probe_resp_ie == NULL) {
5448                         DBG_88E("%s()-%d: rtw_malloc() ERROR!\n", __func__, __LINE__);
5449                         return -EINVAL;
5450                 }
5451                 memcpy(pmlmepriv->wps_probe_resp_ie, param->u.bcn_ie.buf, ie_len);
5452         }
5453
5454         return ret;
5455 }
5456
5457 static int rtw_set_wps_assoc_resp(struct net_device *dev, struct ieee_param *param, int len)
5458 {
5459         int ret = 0;
5460         struct adapter *padapter = (struct adapter *)rtw_netdev_priv(dev);
5461         struct mlme_priv *pmlmepriv = &(padapter->mlmepriv);
5462         int ie_len;
5463
5464         DBG_88E("%s, len =%d\n", __func__, len);
5465
5466         if (check_fwstate(pmlmepriv, WIFI_AP_STATE) != true)
5467                 return -EINVAL;
5468
5469         ie_len = len-12-2;/*  12 = param header, 2:no packed */
5470
5471         if (pmlmepriv->wps_assoc_resp_ie) {
5472                 kfree(pmlmepriv->wps_assoc_resp_ie);
5473                 pmlmepriv->wps_assoc_resp_ie = NULL;
5474         }
5475
5476         if (ie_len > 0) {
5477                 pmlmepriv->wps_assoc_resp_ie = rtw_malloc(ie_len);
5478                 pmlmepriv->wps_assoc_resp_ie_len = ie_len;
5479                 if (pmlmepriv->wps_assoc_resp_ie == NULL) {
5480                         DBG_88E("%s()-%d: rtw_malloc() ERROR!\n", __func__, __LINE__);
5481                         return -EINVAL;
5482                 }
5483
5484                 memcpy(pmlmepriv->wps_assoc_resp_ie, param->u.bcn_ie.buf, ie_len);
5485         }
5486
5487         return ret;
5488 }
5489
5490 static int rtw_set_hidden_ssid(struct net_device *dev, struct ieee_param *param, int len)
5491 {
5492         int ret = 0;
5493         struct adapter *padapter = (struct adapter *)rtw_netdev_priv(dev);
5494         struct mlme_priv *pmlmepriv = &(padapter->mlmepriv);
5495         struct mlme_ext_priv    *pmlmeext = &(padapter->mlmeextpriv);
5496         struct mlme_ext_info *pmlmeinfo = &(pmlmeext->mlmext_info);
5497
5498         u8 value;
5499
5500         if (check_fwstate(pmlmepriv, WIFI_AP_STATE) != true)
5501                 return -EINVAL;
5502
5503         if (param->u.wpa_param.name != 0) /* dummy test... */
5504                 DBG_88E("%s name(%u) != 0\n", __func__, param->u.wpa_param.name);
5505         value = param->u.wpa_param.value;
5506
5507         /* use the same definition of hostapd's ignore_broadcast_ssid */
5508         if (value != 1 && value != 2)
5509                 value = 0;
5510         DBG_88E("%s value(%u)\n", __func__, value);
5511         pmlmeinfo->hidden_ssid_mode = value;
5512         return ret;
5513 }
5514
5515 static int rtw_ioctl_acl_remove_sta(struct net_device *dev, struct ieee_param *param, int len)
5516 {
5517         int ret = 0;
5518         struct adapter *padapter = (struct adapter *)rtw_netdev_priv(dev);
5519         struct mlme_priv *pmlmepriv = &(padapter->mlmepriv);
5520
5521         if (check_fwstate(pmlmepriv, WIFI_AP_STATE) != true)
5522                 return -EINVAL;
5523
5524         if (param->sta_addr[0] == 0xff && param->sta_addr[1] == 0xff &&
5525             param->sta_addr[2] == 0xff && param->sta_addr[3] == 0xff &&
5526             param->sta_addr[4] == 0xff && param->sta_addr[5] == 0xff)
5527                 return -EINVAL;
5528         ret = rtw_acl_remove_sta(padapter, param->sta_addr);
5529         return ret;
5530 }
5531
5532 static int rtw_ioctl_acl_add_sta(struct net_device *dev, struct ieee_param *param, int len)
5533 {
5534         int ret = 0;
5535         struct adapter *padapter = (struct adapter *)rtw_netdev_priv(dev);
5536         struct mlme_priv *pmlmepriv = &(padapter->mlmepriv);
5537
5538         if (check_fwstate(pmlmepriv, WIFI_AP_STATE) != true)
5539                 return -EINVAL;
5540
5541         if (param->sta_addr[0] == 0xff && param->sta_addr[1] == 0xff &&
5542             param->sta_addr[2] == 0xff && param->sta_addr[3] == 0xff &&
5543             param->sta_addr[4] == 0xff && param->sta_addr[5] == 0xff)
5544                 return -EINVAL;
5545         ret = rtw_acl_add_sta(padapter, param->sta_addr);
5546         return ret;
5547 }
5548
5549 static int rtw_ioctl_set_macaddr_acl(struct net_device *dev, struct ieee_param *param, int len)
5550 {
5551         int ret = 0;
5552         struct adapter *padapter = (struct adapter *)rtw_netdev_priv(dev);
5553         struct mlme_priv *pmlmepriv = &(padapter->mlmepriv);
5554
5555         if (check_fwstate(pmlmepriv, WIFI_AP_STATE) != true)
5556                 return -EINVAL;
5557
5558         rtw_set_macaddr_acl(padapter, param->u.mlme.command);
5559
5560         return ret;
5561 }
5562
5563 static int rtw_hostapd_ioctl(struct net_device *dev, struct iw_point *p)
5564 {
5565         struct ieee_param *param;
5566         int ret = 0;
5567         struct adapter *padapter = (struct adapter *)rtw_netdev_priv(dev);
5568
5569         /*
5570         * this function is expect to call in master mode, which allows no power saving
5571         * so, we just check hw_init_completed
5572         */
5573
5574         if (!padapter->hw_init_completed) {
5575                 ret = -EPERM;
5576                 goto out;
5577         }
5578
5579         if (!p->pointer) {
5580                 ret = -EINVAL;
5581                 goto out;
5582         }
5583
5584         param = (struct ieee_param *)rtw_malloc(p->length);
5585         if (param == NULL) {
5586                 ret = -ENOMEM;
5587                 goto out;
5588         }
5589
5590         if (copy_from_user(param, p->pointer, p->length)) {
5591                 kfree(param);
5592                 ret = -EFAULT;
5593                 goto out;
5594         }
5595
5596         switch (param->cmd) {
5597         case RTL871X_HOSTAPD_FLUSH:
5598                 ret = rtw_hostapd_sta_flush(dev);
5599                 break;
5600         case RTL871X_HOSTAPD_ADD_STA:
5601                 ret = rtw_add_sta(dev, param);
5602                 break;
5603         case RTL871X_HOSTAPD_REMOVE_STA:
5604                 ret = rtw_del_sta(dev, param);
5605                 break;
5606         case RTL871X_HOSTAPD_SET_BEACON:
5607                 ret = rtw_set_beacon(dev, param, p->length);
5608                 break;
5609         case RTL871X_SET_ENCRYPTION:
5610                 ret = rtw_set_encryption(dev, param, p->length);
5611                 break;
5612         case RTL871X_HOSTAPD_GET_WPAIE_STA:
5613                 ret = rtw_get_sta_wpaie(dev, param);
5614                 break;
5615         case RTL871X_HOSTAPD_SET_WPS_BEACON:
5616                 ret = rtw_set_wps_beacon(dev, param, p->length);
5617                 break;
5618         case RTL871X_HOSTAPD_SET_WPS_PROBE_RESP:
5619                 ret = rtw_set_wps_probe_resp(dev, param, p->length);
5620                 break;
5621         case RTL871X_HOSTAPD_SET_WPS_ASSOC_RESP:
5622                 ret = rtw_set_wps_assoc_resp(dev, param, p->length);
5623                 break;
5624         case RTL871X_HOSTAPD_SET_HIDDEN_SSID:
5625                 ret = rtw_set_hidden_ssid(dev, param, p->length);
5626                 break;
5627         case RTL871X_HOSTAPD_GET_INFO_STA:
5628                 ret = rtw_ioctl_get_sta_data(dev, param, p->length);
5629                 break;
5630         case RTL871X_HOSTAPD_SET_MACADDR_ACL:
5631                 ret = rtw_ioctl_set_macaddr_acl(dev, param, p->length);
5632                 break;
5633         case RTL871X_HOSTAPD_ACL_ADD_STA:
5634                 ret = rtw_ioctl_acl_add_sta(dev, param, p->length);
5635                 break;
5636         case RTL871X_HOSTAPD_ACL_REMOVE_STA:
5637                 ret = rtw_ioctl_acl_remove_sta(dev, param, p->length);
5638                 break;
5639         default:
5640                 DBG_88E("Unknown hostapd request: %d\n", param->cmd);
5641                 ret = -EOPNOTSUPP;
5642                 break;
5643         }
5644
5645         if (ret == 0 && copy_to_user(p->pointer, param, p->length))
5646                 ret = -EFAULT;
5647         kfree(param);
5648 out:
5649         return ret;
5650 }
5651 #endif
5652
5653 #include <rtw_android.h>
5654 static int rtw_wx_set_priv(struct net_device *dev,
5655                                 struct iw_request_info *info,
5656                                 union iwreq_data *awrq,
5657                                 char *extra)
5658 {
5659         int ret = 0;
5660         int len = 0;
5661         char *ext;
5662         struct adapter *padapter = (struct adapter *)rtw_netdev_priv(dev);
5663         struct iw_point *dwrq = (struct iw_point *)awrq;
5664
5665         if (dwrq->length == 0)
5666                 return -EFAULT;
5667
5668         len = dwrq->length;
5669         ext = rtw_vmalloc(len);
5670         if (!ext)
5671                 return -ENOMEM;
5672
5673         if (copy_from_user(ext, dwrq->pointer, len)) {
5674                 rtw_vmfree(ext, len);
5675                 return -EFAULT;
5676         }
5677
5678         /* added for wps2.0 @20110524 */
5679         if (dwrq->flags == 0x8766 && len > 8) {
5680                 u32 cp_sz;
5681                 struct mlme_priv *pmlmepriv = &(padapter->mlmepriv);
5682                 u8 *probereq_wpsie = ext;
5683                 int probereq_wpsie_len = len;
5684                 u8 wps_oui[4] = {0x0, 0x50, 0xf2, 0x04};
5685
5686                 if ((_VENDOR_SPECIFIC_IE_ == probereq_wpsie[0]) &&
5687                     (!memcmp(&probereq_wpsie[2], wps_oui, 4))) {
5688                         cp_sz = probereq_wpsie_len > MAX_WPS_IE_LEN ? MAX_WPS_IE_LEN : probereq_wpsie_len;
5689
5690                         pmlmepriv->wps_probe_req_ie_len = 0;
5691                         kfree(pmlmepriv->wps_probe_req_ie);
5692                         pmlmepriv->wps_probe_req_ie = NULL;
5693
5694                         pmlmepriv->wps_probe_req_ie = rtw_malloc(cp_sz);
5695                         if (pmlmepriv->wps_probe_req_ie == NULL) {
5696                                 pr_info("%s()-%d: rtw_malloc() ERROR!\n", __func__, __LINE__);
5697                                 ret =  -EINVAL;
5698                                 goto FREE_EXT;
5699                         }
5700                         memcpy(pmlmepriv->wps_probe_req_ie, probereq_wpsie, cp_sz);
5701                         pmlmepriv->wps_probe_req_ie_len = cp_sz;
5702                 }
5703                 goto FREE_EXT;
5704         }
5705
5706         if (len >= WEXT_CSCAN_HEADER_SIZE &&
5707             !memcmp(ext, WEXT_CSCAN_HEADER, WEXT_CSCAN_HEADER_SIZE)) {
5708                 ret = rtw_wx_set_scan(dev, info, awrq, ext);
5709                 goto FREE_EXT;
5710         }
5711
5712 FREE_EXT:
5713
5714         rtw_vmfree(ext, len);
5715
5716         return ret;
5717 }
5718
5719 static int rtw_pm_set(struct net_device *dev,
5720                                struct iw_request_info *info,
5721                                union iwreq_data *wrqu, char *extra)
5722 {
5723         int ret = 0;
5724         unsigned        mode = 0;
5725         struct adapter *padapter = (struct adapter *)rtw_netdev_priv(dev);
5726
5727         DBG_88E("[%s] extra = %s\n", __func__, extra);
5728
5729         if (!memcmp(extra, "lps =", 4)) {
5730                 sscanf(extra+4, "%u", &mode);
5731                 ret = rtw_pm_set_lps(padapter, mode);
5732         } else if (!memcmp(extra, "ips =", 4)) {
5733                 sscanf(extra+4, "%u", &mode);
5734                 ret = rtw_pm_set_ips(padapter, mode);
5735         } else {
5736                 ret = -EINVAL;
5737         }
5738
5739         return ret;
5740 }
5741
5742 static int rtw_mp_efuse_get(struct net_device *dev,
5743                         struct iw_request_info *info,
5744                         union iwreq_data *wdata, char *extra)
5745 {
5746         struct adapter *padapter = rtw_netdev_priv(dev);
5747         struct eeprom_priv *pEEPROM = GET_EEPROM_EFUSE_PRIV(padapter);
5748         struct hal_data_8188e *haldata = GET_HAL_DATA(padapter);
5749         struct efuse_hal *pEfuseHal;
5750         struct iw_point *wrqu;
5751
5752         u8 *PROMContent = pEEPROM->efuse_eeprom_data;
5753         u8 ips_mode = 0, lps_mode = 0;
5754         struct pwrctrl_priv *pwrctrlpriv;
5755         u8 *data = NULL;
5756         u8 *rawdata = NULL;
5757         char *pch, *ptmp, *token, *tmp[3] = {NULL, NULL, NULL};
5758         u16 i = 0, j = 0, mapLen = 0, addr = 0, cnts = 0;
5759         u16 max_available_size = 0, raw_cursize = 0, raw_maxsize = 0;
5760         int err;
5761         u8 org_fw_iol = padapter->registrypriv.fw_iol;/*  0:Disable, 1:enable, 2:by usb speed */
5762
5763         wrqu = (struct iw_point *)wdata;
5764         pwrctrlpriv = &padapter->pwrctrlpriv;
5765         pEfuseHal = &haldata->EfuseHal;
5766
5767         err = 0;
5768         data = _rtw_zmalloc(EFUSE_BT_MAX_MAP_LEN);
5769         if (data == NULL) {
5770                 err = -ENOMEM;
5771                 goto exit;
5772         }
5773         rawdata = _rtw_zmalloc(EFUSE_BT_MAX_MAP_LEN);
5774         if (rawdata == NULL) {
5775                 err = -ENOMEM;
5776                 goto exit;
5777         }
5778
5779         if (copy_from_user(extra, wrqu->pointer, wrqu->length)) {
5780                 err = -EFAULT;
5781                 goto exit;
5782         }
5783         lps_mode = pwrctrlpriv->power_mgnt;/* keep org value */
5784         rtw_pm_set_lps(padapter, PS_MODE_ACTIVE);
5785
5786         ips_mode = pwrctrlpriv->ips_mode;/* keep org value */
5787         rtw_pm_set_ips(padapter, IPS_NONE);
5788
5789         pch = extra;
5790         DBG_88E("%s: in =%s\n", __func__, extra);
5791
5792         i = 0;
5793         /* mac 16 "00e04c871200" rmap, 00, 2 */
5794         while ((token = strsep(&pch, ",")) != NULL) {
5795                 if (i > 2)
5796                         break;
5797                 tmp[i] = token;
5798                 i++;
5799         }
5800         padapter->registrypriv.fw_iol = 0;/*  0:Disable, 1:enable, 2:by usb speed */
5801
5802         if (strcmp(tmp[0], "status") == 0) {
5803                 sprintf(extra, "Load File efuse =%s, Load File MAC =%s", (pEEPROM->bloadfile_fail_flag ? "FAIL" : "OK"), (pEEPROM->bloadmac_fail_flag ? "FAIL" : "OK"));
5804
5805                   goto exit;
5806         } else if (strcmp(tmp[0], "filemap") == 0) {
5807                 mapLen = EFUSE_MAP_SIZE;
5808
5809                 sprintf(extra, "\n");
5810                 for (i = 0; i < EFUSE_MAP_SIZE; i += 16) {
5811                         sprintf(extra, "%s0x%02x\t", extra, i);
5812                         for (j = 0; j < 8; j++)
5813                                 sprintf(extra, "%s%02X ", extra, PROMContent[i+j]);
5814                         sprintf(extra, "%s\t", extra);
5815                         for (; j < 16; j++)
5816                                 sprintf(extra, "%s%02X ", extra, PROMContent[i+j]);
5817                         sprintf(extra, "%s\n", extra);
5818                 }
5819         } else if (strcmp(tmp[0], "realmap") == 0) {
5820                 mapLen = EFUSE_MAP_SIZE;
5821                 if (rtw_efuse_map_read(padapter, 0, mapLen, pEfuseHal->fakeEfuseInitMap) == _FAIL) {
5822                         DBG_88E("%s: read realmap Fail!!\n", __func__);
5823                         err = -EFAULT;
5824                         goto exit;
5825                 }
5826
5827                 sprintf(extra, "\n");
5828                 for (i = 0; i < EFUSE_MAP_SIZE; i += 16) {
5829                         sprintf(extra, "%s0x%02x\t", extra, i);
5830                         for (j = 0; j < 8; j++)
5831                                 sprintf(extra, "%s%02X ", extra, pEfuseHal->fakeEfuseInitMap[i+j]);
5832                         sprintf(extra, "%s\t", extra);
5833                         for (; j < 16; j++)
5834                                 sprintf(extra, "%s%02X ", extra, pEfuseHal->fakeEfuseInitMap[i+j]);
5835                         sprintf(extra, "%s\n", extra);
5836                 }
5837         } else if (strcmp(tmp[0], "rmap") == 0) {
5838                 if ((tmp[1] == NULL) || (tmp[2] == NULL)) {
5839                         DBG_88E("%s: rmap Fail!! Parameters error!\n", __func__);
5840                         err = -EINVAL;
5841                         goto exit;
5842                 }
5843
5844                 /*  rmap addr cnts */
5845                 addr = simple_strtoul(tmp[1], &ptmp, 16);
5846                 DBG_88E("%s: addr =%x\n", __func__, addr);
5847
5848                 cnts = simple_strtoul(tmp[2], &ptmp, 10);
5849                 if (cnts == 0) {
5850                         DBG_88E("%s: rmap Fail!! cnts error!\n", __func__);
5851                         err = -EINVAL;
5852                         goto exit;
5853                 }
5854                 DBG_88E("%s: cnts =%d\n", __func__, cnts);
5855
5856                 EFUSE_GetEfuseDefinition(padapter, EFUSE_WIFI, TYPE_AVAILABLE_EFUSE_BYTES_TOTAL, (void *)&max_available_size, false);
5857                 if ((addr + cnts) > max_available_size) {
5858                         DBG_88E("%s: addr(0x%X)+cnts(%d) parameter error!\n", __func__, addr, cnts);
5859                         err = -EINVAL;
5860                         goto exit;
5861                 }
5862
5863                 if (rtw_efuse_map_read(padapter, addr, cnts, data) == _FAIL) {
5864                         DBG_88E("%s: rtw_efuse_map_read error!\n", __func__);
5865                         err = -EFAULT;
5866                         goto exit;
5867                 }
5868
5869                 *extra = 0;
5870                 for (i = 0; i < cnts; i++)
5871                         sprintf(extra, "%s0x%02X ", extra, data[i]);
5872         } else if (strcmp(tmp[0], "realraw") == 0) {
5873                 addr = 0;
5874                 mapLen = EFUSE_MAX_SIZE;
5875                 if (rtw_efuse_access(padapter, false, addr, mapLen, rawdata) == _FAIL) {
5876                         DBG_88E("%s: rtw_efuse_access Fail!!\n", __func__);
5877                         err = -EFAULT;
5878                         goto exit;
5879                 }
5880
5881                 sprintf(extra, "\n");
5882                 for (i = 0; i < mapLen; i++) {
5883                         sprintf(extra, "%s%02X", extra, rawdata[i]);
5884
5885                         if ((i & 0xF) == 0xF)
5886                                 sprintf(extra, "%s\n", extra);
5887                         else if ((i & 0x7) == 0x7)
5888                                 sprintf(extra, "%s\t", extra);
5889                         else
5890                                 sprintf(extra, "%s ", extra);
5891                 }
5892         } else if (strcmp(tmp[0], "mac") == 0) {
5893                 cnts = 6;
5894
5895                 EFUSE_GetEfuseDefinition(padapter, EFUSE_WIFI, TYPE_AVAILABLE_EFUSE_BYTES_TOTAL, (void *)&max_available_size, false);
5896                 if ((addr + cnts) > max_available_size) {
5897                         DBG_88E("%s: addr(0x%02x)+cnts(%d) parameter error!\n", __func__, addr, cnts);
5898                         err = -EFAULT;
5899                         goto exit;
5900                 }
5901
5902                 if (rtw_efuse_map_read(padapter, addr, cnts, data) == _FAIL) {
5903                         DBG_88E("%s: rtw_efuse_map_read error!\n", __func__);
5904                         err = -EFAULT;
5905                         goto exit;
5906                 }
5907
5908                 *extra = 0;
5909                 for (i = 0; i < cnts; i++) {
5910                         sprintf(extra, "%s%02X", extra, data[i]);
5911                         if (i != (cnts-1))
5912                                 sprintf(extra, "%s:", extra);
5913                 }
5914         } else if (strcmp(tmp[0], "vidpid") == 0) {
5915                 cnts = 4;
5916
5917                 EFUSE_GetEfuseDefinition(padapter, EFUSE_WIFI, TYPE_AVAILABLE_EFUSE_BYTES_TOTAL, (void *)&max_available_size, false);
5918                 if ((addr + cnts) > max_available_size) {
5919                         DBG_88E("%s: addr(0x%02x)+cnts(%d) parameter error!\n", __func__, addr, cnts);
5920                         err = -EFAULT;
5921                         goto exit;
5922                 }
5923                 if (rtw_efuse_map_read(padapter, addr, cnts, data) == _FAIL) {
5924                         DBG_88E("%s: rtw_efuse_access error!!\n", __func__);
5925                         err = -EFAULT;
5926                         goto exit;
5927                 }
5928
5929                 *extra = 0;
5930                 for (i = 0; i < cnts; i++) {
5931                         sprintf(extra, "%s0x%02X", extra, data[i]);
5932                         if (i != (cnts-1))
5933                                 sprintf(extra, "%s,", extra);
5934                 }
5935         } else if (strcmp(tmp[0], "ableraw") == 0) {
5936                 efuse_GetCurrentSize(padapter, &raw_cursize);
5937                 raw_maxsize = efuse_GetMaxSize(padapter);
5938                 sprintf(extra, "[available raw size] = %d bytes", raw_maxsize-raw_cursize);
5939         } else if (strcmp(tmp[0], "btfmap") == 0) {
5940                 mapLen = EFUSE_BT_MAX_MAP_LEN;
5941                 if (rtw_BT_efuse_map_read(padapter, 0, mapLen, pEfuseHal->BTEfuseInitMap) == _FAIL) {
5942                         DBG_88E("%s: rtw_BT_efuse_map_read Fail!!\n", __func__);
5943                         err = -EFAULT;
5944                         goto exit;
5945                 }
5946
5947                 sprintf(extra, "\n");
5948                 for (i = 0; i < 512; i += 16) {
5949                         /*  set 512 because the iwpriv's extra size have limit 0x7FF */
5950                         sprintf(extra, "%s0x%03x\t", extra, i);
5951                         for (j = 0; j < 8; j++)
5952                                 sprintf(extra, "%s%02X ", extra, pEfuseHal->BTEfuseInitMap[i+j]);
5953                         sprintf(extra, "%s\t", extra);
5954                         for (; j < 16; j++)
5955                                 sprintf(extra, "%s%02X ", extra, pEfuseHal->BTEfuseInitMap[i+j]);
5956                         sprintf(extra, "%s\n", extra);
5957                 }
5958         } else if (strcmp(tmp[0], "btbmap") == 0) {
5959                 mapLen = EFUSE_BT_MAX_MAP_LEN;
5960                 if (rtw_BT_efuse_map_read(padapter, 0, mapLen, pEfuseHal->BTEfuseInitMap) == _FAIL) {
5961                         DBG_88E("%s: rtw_BT_efuse_map_read Fail!!\n", __func__);
5962                         err = -EFAULT;
5963                         goto exit;
5964                 }
5965
5966                 sprintf(extra, "\n");
5967                 for (i = 512; i < 1024; i += 16) {
5968                         sprintf(extra, "%s0x%03x\t", extra, i);
5969                         for (j = 0; j < 8; j++)
5970                                 sprintf(extra, "%s%02X ", extra, pEfuseHal->BTEfuseInitMap[i+j]);
5971                         sprintf(extra, "%s\t", extra);
5972                         for (; j < 16; j++)
5973                                 sprintf(extra, "%s%02X ", extra, pEfuseHal->BTEfuseInitMap[i+j]);
5974                         sprintf(extra, "%s\n", extra);
5975                 }
5976         } else if (strcmp(tmp[0], "btrmap") == 0) {
5977                 if ((tmp[1] == NULL) || (tmp[2] == NULL)) {
5978                         err = -EINVAL;
5979                         goto exit;
5980                 }
5981
5982                 /*  rmap addr cnts */
5983                 addr = simple_strtoul(tmp[1], &ptmp, 16);
5984                 DBG_88E("%s: addr = 0x%X\n", __func__, addr);
5985
5986                 cnts = simple_strtoul(tmp[2], &ptmp, 10);
5987                 if (cnts == 0) {
5988                         DBG_88E("%s: btrmap Fail!! cnts error!\n", __func__);
5989                         err = -EINVAL;
5990                         goto exit;
5991                 }
5992                 DBG_88E("%s: cnts =%d\n", __func__, cnts);
5993
5994                 EFUSE_GetEfuseDefinition(padapter, EFUSE_BT, TYPE_AVAILABLE_EFUSE_BYTES_TOTAL, (void *)&max_available_size, false);
5995                 if ((addr + cnts) > max_available_size) {
5996                         DBG_88E("%s: addr(0x%X)+cnts(%d) parameter error!\n", __func__, addr, cnts);
5997                         err = -EFAULT;
5998                         goto exit;
5999                 }
6000
6001                 if (rtw_BT_efuse_map_read(padapter, addr, cnts, data) == _FAIL) {
6002                         DBG_88E("%s: rtw_BT_efuse_map_read error!!\n", __func__);
6003                         err = -EFAULT;
6004                         goto exit;
6005                 }
6006
6007                 *extra = 0;
6008                 for (i = 0; i < cnts; i++)
6009                         sprintf(extra, "%s 0x%02X ", extra, data[i]);
6010         } else if (strcmp(tmp[0], "btffake") == 0) {
6011                 sprintf(extra, "\n");
6012                 for (i = 0; i < 512; i += 16) {
6013                         sprintf(extra, "%s0x%03x\t", extra, i);
6014                         for (j = 0; j < 8; j++)
6015                                 sprintf(extra, "%s%02X ", extra, pEfuseHal->fakeBTEfuseModifiedMap[i+j]);
6016                         sprintf(extra, "%s\t", extra);
6017                         for (; j < 16; j++)
6018                                 sprintf(extra, "%s%02X ", extra, pEfuseHal->fakeBTEfuseModifiedMap[i+j]);
6019                         sprintf(extra, "%s\n", extra);
6020                 }
6021         } else if (strcmp(tmp[0], "btbfake") == 0) {
6022                 sprintf(extra, "\n");
6023                 for (i = 512; i < 1024; i += 16) {
6024                         sprintf(extra, "%s0x%03x\t", extra, i);
6025                         for (j = 0; j < 8; j++)
6026                                 sprintf(extra, "%s%02X ", extra, pEfuseHal->fakeBTEfuseModifiedMap[i+j]);
6027                         sprintf(extra, "%s\t", extra);
6028                         for (; j < 16; j++)
6029                                 sprintf(extra, "%s%02X ", extra, pEfuseHal->fakeBTEfuseModifiedMap[i+j]);
6030                         sprintf(extra, "%s\n", extra);
6031                 }
6032         } else if (strcmp(tmp[0], "wlrfkmap") == 0) {
6033                 sprintf(extra, "\n");
6034                 for (i = 0; i < EFUSE_MAP_SIZE; i += 16) {
6035                         sprintf(extra, "%s0x%02x\t", extra, i);
6036                         for (j = 0; j < 8; j++)
6037                                 sprintf(extra, "%s%02X ", extra, pEfuseHal->fakeEfuseModifiedMap[i+j]);
6038                         sprintf(extra, "%s\t", extra);
6039                         for (; j < 16; j++)
6040                                 sprintf(extra, "%s %02X", extra, pEfuseHal->fakeEfuseModifiedMap[i+j]);
6041                         sprintf(extra, "%s\n", extra);
6042                 }
6043         } else {
6044                  sprintf(extra, "Command not found!");
6045         }
6046
6047 exit:
6048         kfree(data);
6049         kfree(rawdata);
6050         if (!err)
6051                 wrqu->length = strlen(extra);
6052
6053         rtw_pm_set_ips(padapter, ips_mode);
6054         rtw_pm_set_lps(padapter, lps_mode);
6055         padapter->registrypriv.fw_iol = org_fw_iol;/*  0:Disable, 1:enable, 2:by usb speed */
6056         return err;
6057 }
6058
6059 static int rtw_mp_efuse_set(struct net_device *dev,
6060                         struct iw_request_info *info,
6061                         union iwreq_data *wdata, char *extra)
6062 {
6063         struct adapter *padapter;
6064         struct pwrctrl_priv *pwrctrlpriv;
6065         struct hal_data_8188e *haldata;
6066         struct efuse_hal *pEfuseHal;
6067
6068         u8 ips_mode = 0, lps_mode = 0;
6069         u32 i, jj, kk;
6070         u8 *setdata = NULL;
6071         u8 *ShadowMapBT = NULL;
6072         u8 *ShadowMapWiFi = NULL;
6073         u8 *setrawdata = NULL;
6074         char *pch, *ptmp, *token, *tmp[3] = {NULL, NULL, NULL};
6075         u16 addr = 0, cnts = 0, max_available_size = 0;
6076         int err;
6077
6078         padapter = rtw_netdev_priv(dev);
6079         pwrctrlpriv = &padapter->pwrctrlpriv;
6080         haldata = GET_HAL_DATA(padapter);
6081         pEfuseHal = &haldata->EfuseHal;
6082         err = 0;
6083         setdata = _rtw_zmalloc(1024);
6084         if (setdata == NULL) {
6085                 err = -ENOMEM;
6086                 goto exit;
6087         }
6088         ShadowMapBT = _rtw_malloc(EFUSE_BT_MAX_MAP_LEN);
6089         if (ShadowMapBT == NULL) {
6090                 err = -ENOMEM;
6091                 goto exit;
6092         }
6093         ShadowMapWiFi = _rtw_malloc(EFUSE_MAP_SIZE);
6094         if (ShadowMapWiFi == NULL) {
6095                 err = -ENOMEM;
6096                 goto exit;
6097         }
6098         setrawdata = _rtw_malloc(EFUSE_MAX_SIZE);
6099         if (setrawdata == NULL) {
6100                 err = -ENOMEM;
6101                 goto exit;
6102         }
6103
6104         lps_mode = pwrctrlpriv->power_mgnt;/* keep org value */
6105         rtw_pm_set_lps(padapter, PS_MODE_ACTIVE);
6106
6107         ips_mode = pwrctrlpriv->ips_mode;/* keep org value */
6108         rtw_pm_set_ips(padapter, IPS_NONE);
6109
6110         pch = extra;
6111         DBG_88E("%s: in =%s\n", __func__, extra);
6112
6113         i = 0;
6114         while ((token = strsep(&pch, ",")) != NULL) {
6115                 if (i > 2)
6116                         break;
6117                 tmp[i] = token;
6118                 i++;
6119         }
6120
6121         /*  tmp[0],[1],[2] */
6122         /*  wmap, addr, 00e04c871200 */
6123         if (strcmp(tmp[0], "wmap") == 0) {
6124                 if ((tmp[1] == NULL) || (tmp[2] == NULL)) {
6125                         err = -EINVAL;
6126                         goto exit;
6127                 }
6128
6129                 addr = simple_strtoul(tmp[1], &ptmp, 16);
6130                 addr &= 0xFFF;
6131
6132                 cnts = strlen(tmp[2]);
6133                 if (cnts%2) {
6134                         err = -EINVAL;
6135                         goto exit;
6136                 }
6137                 cnts /= 2;
6138                 if (cnts == 0) {
6139                         err = -EINVAL;
6140                         goto exit;
6141                 }
6142
6143                 DBG_88E("%s: addr = 0x%X\n", __func__, addr);
6144                 DBG_88E("%s: cnts =%d\n", __func__, cnts);
6145                 DBG_88E("%s: map data =%s\n", __func__, tmp[2]);
6146
6147                 for (jj = 0, kk = 0; jj < cnts; jj++, kk += 2)
6148                         setdata[jj] = key_2char2num(tmp[2][kk], tmp[2][kk + 1]);
6149                 /* Change to check TYPE_EFUSE_MAP_LEN, beacuse 8188E raw 256, logic map over 256. */
6150                 EFUSE_GetEfuseDefinition(padapter, EFUSE_WIFI, TYPE_EFUSE_MAP_LEN, (void *)&max_available_size, false);
6151                 if ((addr+cnts) > max_available_size) {
6152                         DBG_88E("%s: addr(0x%X)+cnts(%d) parameter error!\n", __func__, addr, cnts);
6153                         err = -EFAULT;
6154                         goto exit;
6155                 }
6156
6157                 if (rtw_efuse_map_write(padapter, addr, cnts, setdata) == _FAIL) {
6158                         DBG_88E("%s: rtw_efuse_map_write error!!\n", __func__);
6159                         err = -EFAULT;
6160                         goto exit;
6161                 }
6162         } else if (strcmp(tmp[0], "wraw") == 0) {
6163                 if ((tmp[1] == NULL) || (tmp[2] == NULL)) {
6164                         err = -EINVAL;
6165                         goto exit;
6166                 }
6167
6168                 addr = simple_strtoul(tmp[1], &ptmp, 16);
6169                 addr &= 0xFFF;
6170
6171                 cnts = strlen(tmp[2]);
6172                 if (cnts%2) {
6173                         err = -EINVAL;
6174                         goto exit;
6175                 }
6176                 cnts /= 2;
6177                 if (cnts == 0) {
6178                         err = -EINVAL;
6179                         goto exit;
6180                 }
6181
6182                 DBG_88E("%s: addr = 0x%X\n", __func__, addr);
6183                 DBG_88E("%s: cnts =%d\n", __func__, cnts);
6184                 DBG_88E("%s: raw data =%s\n", __func__, tmp[2]);
6185
6186                 for (jj = 0, kk = 0; jj < cnts; jj++, kk += 2)
6187                         setrawdata[jj] = key_2char2num(tmp[2][kk], tmp[2][kk + 1]);
6188
6189                 if (rtw_efuse_access(padapter, true, addr, cnts, setrawdata) == _FAIL) {
6190                         DBG_88E("%s: rtw_efuse_access error!!\n", __func__);
6191                         err = -EFAULT;
6192                         goto exit;
6193                 }
6194         } else if (strcmp(tmp[0], "mac") == 0) {
6195                 if (tmp[1] == NULL) {
6196                         err = -EINVAL;
6197                         goto exit;
6198                 }
6199
6200                 /* mac, 00e04c871200 */
6201                 addr = EEPROM_MAC_ADDR_88EU;
6202                 cnts = strlen(tmp[1]);
6203                 if (cnts%2) {
6204                         err = -EINVAL;
6205                         goto exit;
6206                 }
6207                 cnts /= 2;
6208                 if (cnts == 0) {
6209                         err = -EINVAL;
6210                         goto exit;
6211                 }
6212                 if (cnts > 6) {
6213                         DBG_88E("%s: error data for mac addr =\"%s\"\n", __func__, tmp[1]);
6214                         err = -EFAULT;
6215                         goto exit;
6216                 }
6217
6218                 DBG_88E("%s: addr = 0x%X\n", __func__, addr);
6219                 DBG_88E("%s: cnts =%d\n", __func__, cnts);
6220                 DBG_88E("%s: MAC address =%s\n", __func__, tmp[1]);
6221
6222                 for (jj = 0, kk = 0; jj < cnts; jj++, kk += 2)
6223                         setdata[jj] = key_2char2num(tmp[1][kk], tmp[1][kk + 1]);
6224                 /* Change to check TYPE_EFUSE_MAP_LEN, beacuse 8188E raw 256, logic map over 256. */
6225                 EFUSE_GetEfuseDefinition(padapter, EFUSE_WIFI, TYPE_EFUSE_MAP_LEN, (void *)&max_available_size, false);
6226                 if ((addr+cnts) > max_available_size) {
6227                         DBG_88E("%s: addr(0x%X)+cnts(%d) parameter error!\n", __func__, addr, cnts);
6228                         err = -EFAULT;
6229                         goto exit;
6230                 }
6231
6232                 if (rtw_efuse_map_write(padapter, addr, cnts, setdata) == _FAIL) {
6233                         DBG_88E("%s: rtw_efuse_map_write error!!\n", __func__);
6234                         err = -EFAULT;
6235                         goto exit;
6236                 }
6237         } else if (strcmp(tmp[0], "vidpid") == 0) {
6238                 if (tmp[1] == NULL) {
6239                         err = -EINVAL;
6240                         goto exit;
6241                 }
6242
6243                 /*  pidvid, da0b7881 */
6244                 addr = EEPROM_VID_88EE;
6245                 cnts = strlen(tmp[1]);
6246                 if (cnts%2) {
6247                         err = -EINVAL;
6248                         goto exit;
6249                 }
6250                 cnts /= 2;
6251                 if (cnts == 0) {
6252                         err = -EINVAL;
6253                         goto exit;
6254                 }
6255
6256                 DBG_88E("%s: addr = 0x%X\n", __func__, addr);
6257                 DBG_88E("%s: cnts =%d\n", __func__, cnts);
6258                 DBG_88E("%s: VID/PID =%s\n", __func__, tmp[1]);
6259
6260                 for (jj = 0, kk = 0; jj < cnts; jj++, kk += 2)
6261                         setdata[jj] = key_2char2num(tmp[1][kk], tmp[1][kk + 1]);
6262
6263                 EFUSE_GetEfuseDefinition(padapter, EFUSE_WIFI, TYPE_AVAILABLE_EFUSE_BYTES_TOTAL, (void *)&max_available_size, false);
6264                 if ((addr+cnts) > max_available_size) {
6265                         DBG_88E("%s: addr(0x%X)+cnts(%d) parameter error!\n", __func__, addr, cnts);
6266                         err = -EFAULT;
6267                         goto exit;
6268                 }
6269
6270                 if (rtw_efuse_map_write(padapter, addr, cnts, setdata) == _FAIL) {
6271                         DBG_88E("%s: rtw_efuse_map_write error!!\n", __func__);
6272                         err = -EFAULT;
6273                         goto exit;
6274                 }
6275         } else if (strcmp(tmp[0], "btwmap") == 0) {
6276                 if ((tmp[1] == NULL) || (tmp[2] == NULL)) {
6277                         err = -EINVAL;
6278                         goto exit;
6279                 }
6280
6281                 addr = simple_strtoul(tmp[1], &ptmp, 16);
6282                 addr &= 0xFFF;
6283
6284                 cnts = strlen(tmp[2]);
6285                 if (cnts%2) {
6286                         err = -EINVAL;
6287                         goto exit;
6288                 }
6289                 cnts /= 2;
6290                 if (cnts == 0) {
6291                         err = -EINVAL;
6292                         goto exit;
6293                 }
6294
6295                 DBG_88E("%s: addr = 0x%X\n", __func__, addr);
6296                 DBG_88E("%s: cnts =%d\n", __func__, cnts);
6297                 DBG_88E("%s: BT data =%s\n", __func__, tmp[2]);
6298
6299                 for (jj = 0, kk = 0; jj < cnts; jj++, kk += 2)
6300                         setdata[jj] = key_2char2num(tmp[2][kk], tmp[2][kk + 1]);
6301
6302                 EFUSE_GetEfuseDefinition(padapter, EFUSE_BT, TYPE_AVAILABLE_EFUSE_BYTES_TOTAL, (void *)&max_available_size, false);
6303                 if ((addr+cnts) > max_available_size) {
6304                         DBG_88E("%s: addr(0x%X)+cnts(%d) parameter error!\n", __func__, addr, cnts);
6305                         err = -EFAULT;
6306                         goto exit;
6307                 }
6308
6309                 if (rtw_BT_efuse_map_write(padapter, addr, cnts, setdata) == _FAIL) {
6310                         DBG_88E("%s: rtw_BT_efuse_map_write error!!\n", __func__);
6311                         err = -EFAULT;
6312                         goto exit;
6313                 }
6314         } else if (strcmp(tmp[0], "btwfake") == 0) {
6315                 if ((tmp[1] == NULL) || (tmp[2] == NULL)) {
6316                         err = -EINVAL;
6317                         goto exit;
6318                 }
6319
6320                 addr = simple_strtoul(tmp[1], &ptmp, 16);
6321                 addr &= 0xFFF;
6322
6323                 cnts = strlen(tmp[2]);
6324                 if (cnts%2) {
6325                         err = -EINVAL;
6326                         goto exit;
6327                 }
6328                 cnts /= 2;
6329                 if (cnts == 0) {
6330                         err = -EINVAL;
6331                         goto exit;
6332                 }
6333
6334                 DBG_88E("%s: addr = 0x%X\n", __func__, addr);
6335                 DBG_88E("%s: cnts =%d\n", __func__, cnts);
6336                 DBG_88E("%s: BT tmp data =%s\n", __func__, tmp[2]);
6337
6338                 for (jj = 0, kk = 0; jj < cnts; jj++, kk += 2)
6339                         pEfuseHal->fakeBTEfuseModifiedMap[addr+jj] = key_2char2num(tmp[2][kk], tmp[2][kk + 1]);
6340         } else if (strcmp(tmp[0], "btdumpfake") == 0) {
6341                 if (rtw_BT_efuse_map_read(padapter, 0, EFUSE_BT_MAX_MAP_LEN, pEfuseHal->fakeBTEfuseModifiedMap) == _SUCCESS) {
6342                         DBG_88E("%s: BT read all map success\n", __func__);
6343                 } else {
6344                         DBG_88E("%s: BT read all map Fail!\n", __func__);
6345                         err = -EFAULT;
6346                 }
6347         } else if (strcmp(tmp[0], "wldumpfake") == 0) {
6348                 if (rtw_efuse_map_read(padapter, 0, EFUSE_BT_MAX_MAP_LEN,  pEfuseHal->fakeEfuseModifiedMap) == _SUCCESS) {
6349                         DBG_88E("%s: BT read all map success\n", __func__);
6350                 } else {
6351                         DBG_88E("%s: BT read all map  Fail\n", __func__);
6352                         err = -EFAULT;
6353                 }
6354         } else if (strcmp(tmp[0], "btfk2map") == 0) {
6355                 memcpy(pEfuseHal->BTEfuseModifiedMap, pEfuseHal->fakeBTEfuseModifiedMap, EFUSE_BT_MAX_MAP_LEN);
6356
6357                 EFUSE_GetEfuseDefinition(padapter, EFUSE_BT, TYPE_AVAILABLE_EFUSE_BYTES_TOTAL, (void *)&max_available_size, false);
6358                 if (max_available_size < 1) {
6359                         err = -EFAULT;
6360                         goto exit;
6361                 }
6362
6363                 if (rtw_BT_efuse_map_write(padapter, 0x00, EFUSE_BT_MAX_MAP_LEN, pEfuseHal->fakeBTEfuseModifiedMap) == _FAIL) {
6364                         DBG_88E("%s: rtw_BT_efuse_map_write error!\n", __func__);
6365                         err = -EFAULT;
6366                         goto exit;
6367                 }
6368         } else if (strcmp(tmp[0], "wlfk2map") == 0) {
6369                 EFUSE_GetEfuseDefinition(padapter, EFUSE_WIFI, TYPE_AVAILABLE_EFUSE_BYTES_TOTAL, (void *)&max_available_size, false);
6370                 if (max_available_size < 1) {
6371                         err = -EFAULT;
6372                         goto exit;
6373                 }
6374
6375                 if (rtw_efuse_map_write(padapter, 0x00, EFUSE_MAX_MAP_LEN, pEfuseHal->fakeEfuseModifiedMap) == _FAIL) {
6376                         DBG_88E("%s: rtw_efuse_map_write error!\n", __func__);
6377                         err = -EFAULT;
6378                         goto exit;
6379                 }
6380         } else if (strcmp(tmp[0], "wlwfake") == 0) {
6381                 if ((tmp[1] == NULL) || (tmp[2] == NULL)) {
6382                         err = -EINVAL;
6383                         goto exit;
6384                 }
6385
6386                 addr = simple_strtoul(tmp[1], &ptmp, 16);
6387                 addr &= 0xFFF;
6388
6389                 cnts = strlen(tmp[2]);
6390                 if (cnts%2) {
6391                         err = -EINVAL;
6392                         goto exit;
6393                 }
6394                 cnts /= 2;
6395                 if (cnts == 0) {
6396                         err = -EINVAL;
6397                         goto exit;
6398                 }
6399
6400                 DBG_88E("%s: addr = 0x%X\n", __func__, addr);
6401                 DBG_88E("%s: cnts =%d\n", __func__, cnts);
6402                 DBG_88E("%s: map tmp data =%s\n", __func__, tmp[2]);
6403
6404                 for (jj = 0, kk = 0; jj < cnts; jj++, kk += 2)
6405                         pEfuseHal->fakeEfuseModifiedMap[addr+jj] = key_2char2num(tmp[2][kk], tmp[2][kk + 1]);
6406         }
6407
6408 exit:
6409         kfree(setdata);
6410         kfree(ShadowMapBT);
6411         kfree(ShadowMapWiFi);
6412         kfree(setrawdata);
6413
6414         rtw_pm_set_ips(padapter, ips_mode);
6415         rtw_pm_set_lps(padapter, lps_mode);
6416
6417         return err;
6418 }
6419
6420 /*
6421  * Input Format: %s,%d,%d
6422  *      %s is width, could be
6423  *              "b" for 1 byte
6424  *              "w" for WORD (2 bytes)
6425  *              "dw" for DWORD (4 bytes)
6426  *      1st %d is address(offset)
6427  *      2st %d is data to write
6428  */
6429 static int rtw_mp_write_reg(struct net_device *dev,
6430                         struct iw_request_info *info,
6431                         struct iw_point *wrqu, char *extra)
6432 {
6433         char *pch, *pnext, *ptmp;
6434         char *width_str;
6435         char width;
6436         u32 addr, data;
6437         int ret;
6438         struct adapter *padapter = rtw_netdev_priv(dev);
6439
6440         pch = extra;
6441         pnext = strpbrk(pch, ",.-");
6442         if (pnext == NULL)
6443                 return -EINVAL;
6444         *pnext = 0;
6445         width_str = pch;
6446
6447         pch = pnext + 1;
6448         pnext = strpbrk(pch, ",.-");
6449         if (pnext == NULL)
6450                 return -EINVAL;
6451         *pnext = 0;
6452         addr = simple_strtoul(pch, &ptmp, 16);
6453         if (addr > 0x3FFF)
6454                 return -EINVAL;
6455
6456         pch = pnext + 1;
6457         if ((pch - extra) >= wrqu->length)
6458                 return -EINVAL;
6459         data = simple_strtoul(pch, &ptmp, 16);
6460
6461         ret = 0;
6462         width = width_str[0];
6463         switch (width) {
6464         case 'b':
6465                 /*  1 byte */
6466                 if (data > 0xFF) {
6467                         ret = -EINVAL;
6468                         break;
6469                 }
6470                 rtw_write8(padapter, addr, data);
6471                 break;
6472         case 'w':
6473                 /*  2 bytes */
6474                 if (data > 0xFFFF) {
6475                         ret = -EINVAL;
6476                         break;
6477                 }
6478                 rtw_write16(padapter, addr, data);
6479                 break;
6480         case 'd':
6481                 /*  4 bytes */
6482                 rtw_write32(padapter, addr, data);
6483                 break;
6484         default:
6485                 ret = -EINVAL;
6486                 break;
6487         }
6488
6489         return ret;
6490 }
6491
6492 /*
6493  * Input Format: %s,%d
6494  *      %s is width, could be
6495  *              "b" for 1 byte
6496  *              "w" for WORD (2 bytes)
6497  *              "dw" for DWORD (4 bytes)
6498  *      %d is address(offset)
6499  *
6500  * Return:
6501  *      %d for data readed
6502  */
6503 static int rtw_mp_read_reg(struct net_device *dev,
6504                         struct iw_request_info *info,
6505                         struct iw_point *wrqu, char *extra)
6506 {
6507         struct adapter *padapter = rtw_netdev_priv(dev);
6508         char    *input = kmalloc(wrqu->length, GFP_KERNEL);
6509         char *pch, *pnext, *ptmp;
6510         char *width_str;
6511         char width;
6512         char data[20], tmp[20];
6513         u32 addr;
6514         u32 ret, i = 0, j = 0, strtout = 0;
6515
6516         if (!input)
6517                 return -ENOMEM;
6518         if (copy_from_user(input, wrqu->pointer, wrqu->length)) {
6519                 kfree(input);
6520                 return -EFAULT;
6521         }
6522         _rtw_memset(data, 0, 20);
6523         _rtw_memset(tmp, 0, 20);
6524         _rtw_memset(extra, 0, wrqu->length);
6525
6526         pch = input;
6527         pnext = strpbrk(pch, ",.-");
6528         if (pnext == NULL) {
6529                 kfree(input);
6530                 return -EINVAL;
6531         }
6532         *pnext = 0;
6533         width_str = pch;
6534
6535         pch = pnext + 1;
6536         if ((pch - input) >= wrqu->length) {
6537                 kfree(input);
6538                 return -EINVAL;
6539         }
6540         kfree(input);
6541         addr = simple_strtoul(pch, &ptmp, 16);
6542         if (addr > 0x3FFF)
6543                 return -EINVAL;
6544
6545         ret = 0;
6546         width = width_str[0];
6547         switch (width) {
6548         case 'b':
6549                 /*  1 byte */
6550                 sprintf(extra, "%d\n",  rtw_read8(padapter, addr));
6551                 wrqu->length = strlen(extra);
6552                 break;
6553         case 'w':
6554                 /*  2 bytes */
6555                 sprintf(data, "%04x\n", rtw_read16(padapter, addr));
6556                 for (i = 0; i <= strlen(data); i++) {
6557                         if (i%2 == 0) {
6558                                 tmp[j] = ' ';
6559                                 j++;
6560                         }
6561                         if (data[i] != '\0')
6562                                 tmp[j] = data[i];
6563                         j++;
6564                 }
6565                 pch = tmp;
6566                 DBG_88E("pch =%s", pch);
6567
6568                 while (*pch != '\0') {
6569                         pnext = strpbrk(pch, " ");
6570                         if (!pnext)
6571                                 break;
6572
6573                         pnext++;
6574                         if (*pnext != '\0') {
6575                                   strtout = simple_strtoul(pnext, &ptmp, 16);
6576                                   sprintf(extra, "%s %d", extra, strtout);
6577                         } else {
6578                                   break;
6579                         }
6580                         pch = pnext;
6581                 }
6582                 wrqu->length = 6;
6583                 break;
6584         case 'd':
6585                 /*  4 bytes */
6586                 sprintf(data, "%08x", rtw_read32(padapter, addr));
6587                 /* add read data format blank */
6588                 for (i = 0; i <= strlen(data); i++) {
6589                         if (i%2 == 0) {
6590                                 tmp[j] = ' ';
6591                                 j++;
6592                         }
6593                         if (data[i] != '\0')
6594                                 tmp[j] = data[i];
6595
6596                         j++;
6597                 }
6598                 pch = tmp;
6599                 DBG_88E("pch =%s", pch);
6600
6601                 while (*pch != '\0') {
6602                         pnext = strpbrk(pch, " ");
6603                         if (!pnext)
6604                                 break;
6605                         pnext++;
6606                         if (*pnext != '\0') {
6607                                 strtout = simple_strtoul(pnext, &ptmp, 16);
6608                                 sprintf(extra, "%s %d", extra, strtout);
6609                         } else {
6610                                 break;
6611                         }
6612                         pch = pnext;
6613                 }
6614                 wrqu->length = strlen(extra);
6615                 break;
6616         default:
6617                 wrqu->length = 0;
6618                 ret = -EINVAL;
6619                 break;
6620         }
6621
6622         return ret;
6623 }
6624
6625 /*
6626  * Input Format: %d,%x,%x
6627  *      %d is RF path, should be smaller than MAX_RF_PATH_NUMS
6628  *      1st %x is address(offset)
6629  *      2st %x is data to write
6630  */
6631  static int rtw_mp_write_rf(struct net_device *dev,
6632                             struct iw_request_info *info,
6633                             struct iw_point *wrqu, char *extra)
6634 {
6635         u32 path, addr, data;
6636         int ret;
6637         struct adapter *padapter = rtw_netdev_priv(dev);
6638
6639         ret = sscanf(extra, "%d,%x,%x", &path, &addr, &data);
6640         if (ret < 3)
6641                 return -EINVAL;
6642
6643         if (path >= MAX_RF_PATH_NUMS)
6644                 return -EINVAL;
6645         if (addr > 0xFF)
6646                 return -EINVAL;
6647         if (data > 0xFFFFF)
6648                 return -EINVAL;
6649
6650         _rtw_memset(extra, 0, wrqu->length);
6651
6652         write_rfreg(padapter, path, addr, data);
6653
6654         sprintf(extra, "write_rf completed\n");
6655         wrqu->length = strlen(extra);
6656
6657         return 0;
6658 }
6659
6660 /*
6661  * Input Format: %d,%x
6662  *      %d is RF path, should be smaller than MAX_RF_PATH_NUMS
6663  *      %x is address(offset)
6664  *
6665  * Return:
6666  *      %d for data readed
6667  */
6668 static int rtw_mp_read_rf(struct net_device *dev,
6669                         struct iw_request_info *info,
6670                         struct iw_point *wrqu, char *extra)
6671 {
6672         char    *input = kmalloc(wrqu->length, GFP_KERNEL);
6673         char *pch, *pnext, *ptmp;
6674         char data[20], tmp[20];
6675         u32 path, addr;
6676         u32 ret, i = 0, j = 0, strtou = 0;
6677         struct adapter *padapter = rtw_netdev_priv(dev);
6678
6679         if (!input)
6680                 return -ENOMEM;
6681         if (copy_from_user(input, wrqu->pointer, wrqu->length)) {
6682                 kfree(input);
6683                 return -EFAULT;
6684         }
6685         ret = sscanf(input, "%d,%x", &path, &addr);
6686         kfree(input);
6687         if (ret < 2)
6688                 return -EINVAL;
6689
6690         if (path >= MAX_RF_PATH_NUMS)
6691                 return -EINVAL;
6692         if (addr > 0xFF)
6693                 return -EINVAL;
6694
6695         _rtw_memset(extra, 0, wrqu->length);
6696
6697         sprintf(data, "%08x", read_rfreg(padapter, path, addr));
6698         /* add read data format blank */
6699         for (i = 0; i <= strlen(data); i++) {
6700                 if (i%2 == 0) {
6701                         tmp[j] = ' ';
6702                         j++;
6703                 }
6704                 tmp[j] = data[i];
6705                 j++;
6706         }
6707         pch = tmp;
6708         DBG_88E("pch =%s", pch);
6709
6710         while (*pch != '\0') {
6711                 pnext = strpbrk(pch, " ");
6712                 pnext++;
6713                 if (*pnext != '\0') {
6714                           strtou = simple_strtoul(pnext, &ptmp, 16);
6715                           sprintf(extra, "%s %d", extra, strtou);
6716                 } else {
6717                           break;
6718                 }
6719                 pch = pnext;
6720         }
6721         wrqu->length = strlen(extra);
6722         return 0;
6723 }
6724
6725 static int rtw_mp_start(struct net_device *dev,
6726                         struct iw_request_info *info,
6727                         struct iw_point *wrqu, char *extra)
6728 {
6729         struct adapter *padapter = rtw_netdev_priv(dev);
6730
6731         if (padapter->registrypriv.mp_mode == 0) {
6732                 padapter->registrypriv.mp_mode = 1;
6733
6734                 rtw_pm_set_ips(padapter, IPS_NONE);
6735                 LeaveAllPowerSaveMode(padapter);
6736
6737                 MPT_InitializeAdapter(padapter, 1);
6738         }
6739         if (padapter->registrypriv.mp_mode == 0)
6740                 return -EPERM;
6741         if (padapter->mppriv.mode == MP_OFF) {
6742                 if (mp_start_test(padapter) == _FAIL)
6743                         return -EPERM;
6744                 padapter->mppriv.mode = MP_ON;
6745         }
6746         return 0;
6747 }
6748
6749 static int rtw_mp_stop(struct net_device *dev,
6750                         struct iw_request_info *info,
6751                         struct iw_point *wrqu, char *extra)
6752 {
6753         struct adapter *padapter = rtw_netdev_priv(dev);
6754
6755         if (padapter->registrypriv.mp_mode == 1) {
6756                 MPT_DeInitAdapter(padapter);
6757                 padapter->registrypriv.mp_mode = 0;
6758         }
6759
6760         if (padapter->mppriv.mode != MP_OFF) {
6761                 mp_stop_test(padapter);
6762                 padapter->mppriv.mode = MP_OFF;
6763         }
6764
6765         return 0;
6766 }
6767
6768 extern int wifirate2_ratetbl_inx(unsigned char rate);
6769
6770 static int rtw_mp_rate(struct net_device *dev,
6771                         struct iw_request_info *info,
6772                         struct iw_point *wrqu, char *extra)
6773 {
6774         u32 rate = MPT_RATE_1M;
6775         char    *input = kmalloc(wrqu->length, GFP_KERNEL);
6776         struct adapter *padapter = rtw_netdev_priv(dev);
6777
6778         if (!input)
6779                 return -ENOMEM;
6780         if (copy_from_user(input, wrqu->pointer, wrqu->length)) {
6781                 kfree(input);
6782                 return -EFAULT;
6783         }
6784         rate = rtw_atoi(input);
6785         sprintf(extra, "Set data rate to %d", rate);
6786         kfree(input);
6787         if (rate <= 0x7f)
6788                 rate = wifirate2_ratetbl_inx((u8)rate);
6789         else
6790                 rate = (rate-0x80+MPT_RATE_MCS0);
6791
6792         if (rate >= MPT_RATE_LAST)
6793                 return -EINVAL;
6794
6795         padapter->mppriv.rateidx = rate;
6796         Hal_SetDataRate(padapter);
6797
6798         wrqu->length = strlen(extra) + 1;
6799         return 0;
6800 }
6801
6802 static int rtw_mp_channel(struct net_device *dev,
6803                         struct iw_request_info *info,
6804                         struct iw_point *wrqu, char *extra)
6805 {
6806         struct adapter *padapter = rtw_netdev_priv(dev);
6807         char    *input = kmalloc(wrqu->length, GFP_KERNEL);
6808         u32     channel = 1;
6809
6810         if (!input)
6811                 return -ENOMEM;
6812         if (copy_from_user(input, wrqu->pointer, wrqu->length)) {
6813                 kfree(input);
6814                 return -EFAULT;
6815         }
6816         channel = rtw_atoi(input);
6817         sprintf(extra, "Change channel %d to channel %d", padapter->mppriv.channel, channel);
6818
6819         padapter->mppriv.channel = channel;
6820         Hal_SetChannel(padapter);
6821
6822         wrqu->length = strlen(extra) + 1;
6823         kfree(input);
6824         return 0;
6825 }
6826
6827 static int rtw_mp_bandwidth(struct net_device *dev,
6828                         struct iw_request_info *info,
6829                         struct iw_point *wrqu, char *extra)
6830 {
6831         u32 bandwidth = 0, sg = 0;
6832         struct adapter *padapter = rtw_netdev_priv(dev);
6833
6834         sscanf(extra, "40M =%d, shortGI =%d", &bandwidth, &sg);
6835
6836         if (bandwidth != HT_CHANNEL_WIDTH_40)
6837                 bandwidth = HT_CHANNEL_WIDTH_20;
6838
6839         padapter->mppriv.bandwidth = (u8)bandwidth;
6840         padapter->mppriv.preamble = sg;
6841
6842         SetBandwidth(padapter);
6843
6844         return 0;
6845 }
6846
6847 static int rtw_mp_txpower(struct net_device *dev,
6848                         struct iw_request_info *info,
6849                         struct iw_point *wrqu, char *extra)
6850 {
6851         u32             idx_a = 0, idx_b = 0;
6852         char    *input = kmalloc(wrqu->length, GFP_KERNEL);
6853         struct adapter *padapter = rtw_netdev_priv(dev);
6854
6855         if (!input)
6856                 return -ENOMEM;
6857         if (copy_from_user(input, wrqu->pointer, wrqu->length)) {
6858                 kfree(input);
6859                 return -EFAULT;
6860         }
6861         sscanf(input, "patha =%d, pathb =%d", &idx_a, &idx_b);
6862
6863         sprintf(extra, "Set power level path_A:%d path_B:%d", idx_a, idx_b);
6864         padapter->mppriv.txpoweridx = (u8)idx_a;
6865         padapter->mppriv.txpoweridx_b = (u8)idx_b;
6866         padapter->mppriv.bSetTxPower = 1;
6867         Hal_SetAntennaPathPower(padapter);
6868
6869         wrqu->length = strlen(extra) + 1;
6870         kfree(input);
6871         return 0;
6872 }
6873
6874 static int rtw_mp_ant_tx(struct net_device *dev,
6875                         struct iw_request_info *info,
6876                         struct iw_point *wrqu, char *extra)
6877 {
6878         u8 i;
6879         char    *input = kmalloc(wrqu->length, GFP_KERNEL);
6880         u16 antenna = 0;
6881         struct adapter *padapter = rtw_netdev_priv(dev);
6882
6883         if (!input)
6884                 return -ENOMEM;
6885         if (copy_from_user(input, wrqu->pointer, wrqu->length)) {
6886                 kfree(input);
6887                 return -EFAULT;
6888         }
6889
6890         sprintf(extra, "switch Tx antenna to %s", input);
6891
6892         for (i = 0; i < strlen(input); i++) {
6893                 switch (input[i]) {
6894                 case 'a':
6895                         antenna |= ANTENNA_A;
6896                         break;
6897                 case 'b':
6898                         antenna |= ANTENNA_B;
6899                         break;
6900                 }
6901         }
6902         padapter->mppriv.antenna_tx = antenna;
6903
6904         Hal_SetAntenna(padapter);
6905
6906         wrqu->length = strlen(extra) + 1;
6907         kfree(input);
6908         return 0;
6909 }
6910
6911 static int rtw_mp_ant_rx(struct net_device *dev,
6912                         struct iw_request_info *info,
6913                         struct iw_point *wrqu, char *extra)
6914 {
6915         u8 i;
6916         u16 antenna = 0;
6917         char    *input = kmalloc(wrqu->length, GFP_KERNEL);
6918         struct adapter *padapter = rtw_netdev_priv(dev);
6919
6920         if (!input)
6921                 return -ENOMEM;
6922         if (copy_from_user(input, wrqu->pointer, wrqu->length)) {
6923                 kfree(input);
6924                 return -EFAULT;
6925         }
6926         _rtw_memset(extra, 0, wrqu->length);
6927
6928         sprintf(extra, "switch Rx antenna to %s", input);
6929
6930         for (i = 0; i < strlen(input); i++) {
6931                 switch (input[i]) {
6932                 case 'a':
6933                         antenna |= ANTENNA_A;
6934                         break;
6935                 case 'b':
6936                         antenna |= ANTENNA_B;
6937                         break;
6938                 }
6939         }
6940
6941         padapter->mppriv.antenna_rx = antenna;
6942         Hal_SetAntenna(padapter);
6943         wrqu->length = strlen(extra);
6944         kfree(input);
6945         return 0;
6946 }
6947
6948 static int rtw_mp_ctx(struct net_device *dev,
6949                         struct iw_request_info *info,
6950                         struct iw_point *wrqu, char *extra)
6951 {
6952         u32 pkTx = 1, countPkTx = 1, cotuTx = 1, CarrSprTx = 1, scTx = 1, sgleTx = 1, stop = 1;
6953         u32 bStartTest = 1;
6954         u32 count = 0;
6955         struct mp_priv *pmp_priv;
6956         struct pkt_attrib *pattrib;
6957
6958         struct adapter *padapter = rtw_netdev_priv(dev);
6959
6960         pmp_priv = &padapter->mppriv;
6961
6962         if (copy_from_user(extra, wrqu->pointer, wrqu->length))
6963                         return -EFAULT;
6964
6965         DBG_88E("%s: in =%s\n", __func__, extra);
6966
6967         countPkTx = strncmp(extra, "count =", 5); /*  strncmp true is 0 */
6968         cotuTx = strncmp(extra, "background", 20);
6969         CarrSprTx = strncmp(extra, "background, cs", 20);
6970         scTx = strncmp(extra, "background, sc", 20);
6971         sgleTx = strncmp(extra, "background, stone", 20);
6972         pkTx = strncmp(extra, "background, pkt", 20);
6973         stop = strncmp(extra, "stop", 4);
6974         sscanf(extra, "count =%d, pkt", &count);
6975
6976         _rtw_memset(extra, '\0', sizeof(*extra));
6977
6978         if (stop == 0) {
6979                 bStartTest = 0; /*  To set Stop */
6980                 pmp_priv->tx.stop = 1;
6981                 sprintf(extra, "Stop continuous Tx");
6982         } else {
6983                 bStartTest = 1;
6984                 if (pmp_priv->mode != MP_ON) {
6985                         if (pmp_priv->tx.stop != 1) {
6986                                 DBG_88E("%s: MP_MODE != ON %d\n", __func__, pmp_priv->mode);
6987                                 return  -EFAULT;
6988                         }
6989                 }
6990         }
6991
6992         if (pkTx == 0 || countPkTx == 0)
6993                 pmp_priv->mode = MP_PACKET_TX;
6994         if (sgleTx == 0)
6995                 pmp_priv->mode = MP_SINGLE_TONE_TX;
6996         if (cotuTx == 0)
6997                 pmp_priv->mode = MP_CONTINUOUS_TX;
6998         if (CarrSprTx == 0)
6999                 pmp_priv->mode = MP_CARRIER_SUPPRISSION_TX;
7000         if (scTx == 0)
7001                 pmp_priv->mode = MP_SINGLE_CARRIER_TX;
7002
7003         switch (pmp_priv->mode) {
7004         case MP_PACKET_TX:
7005                 if (bStartTest == 0) {
7006                         pmp_priv->tx.stop = 1;
7007                         pmp_priv->mode = MP_ON;
7008                         sprintf(extra, "Stop continuous Tx");
7009                 } else if (pmp_priv->tx.stop == 1) {
7010                         sprintf(extra, "Start continuous DA = ffffffffffff len = 1500 count =%u,\n", count);
7011                         pmp_priv->tx.stop = 0;
7012                         pmp_priv->tx.count = count;
7013                         pmp_priv->tx.payload = 2;
7014                         pattrib = &pmp_priv->tx.attrib;
7015                         pattrib->pktlen = 1500;
7016                         _rtw_memset(pattrib->dst, 0xFF, ETH_ALEN);
7017                         SetPacketTx(padapter);
7018                 } else {
7019                         return -EFAULT;
7020                 }
7021                         wrqu->length = strlen(extra);
7022                         return 0;
7023         case MP_SINGLE_TONE_TX:
7024                 if (bStartTest != 0)
7025                         sprintf(extra, "Start continuous DA = ffffffffffff len = 1500\n infinite = yes.");
7026                 Hal_SetSingleToneTx(padapter, (u8)bStartTest);
7027                 break;
7028         case MP_CONTINUOUS_TX:
7029                 if (bStartTest != 0)
7030                         sprintf(extra, "Start continuous DA = ffffffffffff len = 1500\n infinite = yes.");
7031                 Hal_SetContinuousTx(padapter, (u8)bStartTest);
7032                 break;
7033         case MP_CARRIER_SUPPRISSION_TX:
7034                 if (bStartTest != 0) {
7035                         if (pmp_priv->rateidx <= MPT_RATE_11M) {
7036                                 sprintf(extra, "Start continuous DA = ffffffffffff len = 1500\n infinite = yes.");
7037                                 Hal_SetCarrierSuppressionTx(padapter, (u8)bStartTest);
7038                         } else {
7039                                 sprintf(extra, "Specify carrier suppression but not CCK rate");
7040                         }
7041                 }
7042                 break;
7043         case MP_SINGLE_CARRIER_TX:
7044                 if (bStartTest != 0)
7045                         sprintf(extra, "Start continuous DA = ffffffffffff len = 1500\n infinite = yes.");
7046                 Hal_SetSingleCarrierTx(padapter, (u8)bStartTest);
7047                 break;
7048         default:
7049                 sprintf(extra, "Error! Continuous-Tx is not on-going.");
7050                 return -EFAULT;
7051         }
7052
7053         if (bStartTest == 1 && pmp_priv->mode != MP_ON) {
7054                 struct mp_priv *pmp_priv = &padapter->mppriv;
7055                 if (pmp_priv->tx.stop == 0) {
7056                         pmp_priv->tx.stop = 1;
7057                         rtw_msleep_os(5);
7058                 }
7059                 pmp_priv->tx.stop = 0;
7060                 pmp_priv->tx.count = 1;
7061                 SetPacketTx(padapter);
7062         } else {
7063                 pmp_priv->mode = MP_ON;
7064         }
7065
7066         wrqu->length = strlen(extra);
7067         return 0;
7068 }
7069
7070 static int rtw_mp_arx(struct net_device *dev,
7071                         struct iw_request_info *info,
7072                         struct iw_point *wrqu, char *extra)
7073 {
7074         u8 bStartRx = 0, bStopRx = 0, bQueryPhy;
7075         u32 cckok = 0, cckcrc = 0, ofdmok = 0, ofdmcrc = 0, htok = 0, htcrc = 0, OFDM_FA = 0, CCK_FA = 0;
7076         char    *input = kmalloc(wrqu->length, GFP_KERNEL);
7077         struct adapter *padapter = rtw_netdev_priv(dev);
7078
7079         if (!input)
7080                 return -ENOMEM;
7081
7082         if (copy_from_user(input, wrqu->pointer, wrqu->length)) {
7083                 kfree(input);
7084                 return -EFAULT;
7085         }
7086         DBG_88E("%s: %s\n", __func__, input);
7087
7088         bStartRx = (strncmp(input, "start", 5) == 0) ? 1 : 0; /*  strncmp true is 0 */
7089         bStopRx = (strncmp(input, "stop", 5) == 0) ? 1 : 0; /*  strncmp true is 0 */
7090         bQueryPhy = (strncmp(input, "phy", 3) == 0) ? 1 : 0; /*  strncmp true is 0 */
7091
7092         if (bStartRx) {
7093                 sprintf(extra, "start");
7094                 SetPacketRx(padapter, bStartRx);
7095         } else if (bStopRx) {
7096                 SetPacketRx(padapter, 0);
7097                 sprintf(extra, "Received packet OK:%d CRC error:%d", padapter->mppriv.rx_pktcount, padapter->mppriv.rx_crcerrpktcount);
7098         } else if (bQueryPhy) {
7099                 /*
7100                 OFDM FA
7101                 RegCF0[15:0]
7102                 RegCF2[31:16]
7103                 RegDA0[31:16]
7104                 RegDA4[15:0]
7105                 RegDA4[31:16]
7106                 RegDA8[15:0]
7107                 CCK FA
7108                 (RegA5B<<8) | RegA5C
7109                 */
7110                 cckok = read_bbreg(padapter, 0xf88, 0xffffffff);
7111                 cckcrc = read_bbreg(padapter, 0xf84, 0xffffffff);
7112                 ofdmok = read_bbreg(padapter, 0xf94, 0x0000FFFF);
7113                 ofdmcrc = read_bbreg(padapter, 0xf94, 0xFFFF0000);
7114                 htok = read_bbreg(padapter, 0xf90, 0x0000FFFF);
7115                 htcrc = read_bbreg(padapter, 0xf90, 0xFFFF0000);
7116
7117                 OFDM_FA = read_bbreg(padapter, 0xcf0, 0x0000FFFF);
7118                 OFDM_FA = read_bbreg(padapter, 0xcf2, 0xFFFF0000);
7119                 OFDM_FA = read_bbreg(padapter, 0xda0, 0xFFFF0000);
7120                 OFDM_FA = read_bbreg(padapter, 0xda4, 0x0000FFFF);
7121                 OFDM_FA = read_bbreg(padapter, 0xda4, 0xFFFF0000);
7122                 OFDM_FA = read_bbreg(padapter, 0xda8, 0x0000FFFF);
7123                 CCK_FA = (rtw_read8(padapter, 0xa5b)<<8) | (rtw_read8(padapter, 0xa5c));
7124
7125                 sprintf(extra, "Phy Received packet OK:%d CRC error:%d FA Counter: %d", cckok+ofdmok+htok, cckcrc+ofdmcrc+htcrc, OFDM_FA+CCK_FA);
7126         }
7127         wrqu->length = strlen(extra) + 1;
7128         kfree(input);
7129         return 0;
7130 }
7131
7132 static int rtw_mp_trx_query(struct net_device *dev,
7133                         struct iw_request_info *info,
7134                         struct iw_point *wrqu, char *extra)
7135 {
7136         u32 txok, txfail, rxok, rxfail;
7137         struct adapter *padapter = rtw_netdev_priv(dev);
7138
7139         txok = padapter->mppriv.tx.sended;
7140         txfail = 0;
7141         rxok = padapter->mppriv.rx_pktcount;
7142         rxfail = padapter->mppriv.rx_crcerrpktcount;
7143
7144         _rtw_memset(extra, '\0', 128);
7145
7146         sprintf(extra, "Tx OK:%d, Tx Fail:%d, Rx OK:%d, CRC error:%d ", txok, txfail, rxok, rxfail);
7147
7148         wrqu->length = strlen(extra)+1;
7149
7150         return 0;
7151 }
7152
7153 static int rtw_mp_pwrtrk(struct net_device *dev,
7154                         struct iw_request_info *info,
7155                         struct iw_point *wrqu, char *extra)
7156 {
7157         u8 enable;
7158         u32 thermal;
7159         s32 ret;
7160         struct adapter *padapter = rtw_netdev_priv(dev);
7161         char    *input = kmalloc(wrqu->length, GFP_KERNEL);
7162
7163         if (!input)
7164                 return -ENOMEM;
7165         if (copy_from_user(input, wrqu->pointer, wrqu->length)) {
7166                 kfree(input);
7167                 return -EFAULT;
7168         }
7169         _rtw_memset(extra, 0, wrqu->length);
7170
7171         enable = 1;
7172         if (wrqu->length > 1) {/*  not empty string */
7173                 if (strncmp(input, "stop", 4) == 0) {
7174                         enable = 0;
7175                         sprintf(extra, "mp tx power tracking stop");
7176                 } else if (sscanf(input, "ther =%d", &thermal)) {
7177                                 ret = Hal_SetThermalMeter(padapter, (u8)thermal);
7178                                 if (ret == _FAIL)
7179                                         return -EPERM;
7180                                 sprintf(extra, "mp tx power tracking start, target value =%d ok ", thermal);
7181                 } else {
7182                         kfree(input);
7183                         return -EINVAL;
7184                 }
7185         }
7186
7187         kfree(input);
7188         ret = Hal_SetPowerTracking(padapter, enable);
7189         if (ret == _FAIL)
7190                 return -EPERM;
7191
7192         wrqu->length = strlen(extra);
7193         return 0;
7194 }
7195
7196 static int rtw_mp_psd(struct net_device *dev,
7197                         struct iw_request_info *info,
7198                         struct iw_point *wrqu, char *extra)
7199 {
7200         struct adapter *padapter = rtw_netdev_priv(dev);
7201         char    *input = kmalloc(wrqu->length, GFP_KERNEL);
7202
7203         if (!input)
7204                 return -ENOMEM;
7205         if (copy_from_user(input, wrqu->pointer, wrqu->length)) {
7206                 kfree(input);
7207                 return -EFAULT;
7208         }
7209
7210         strcpy(extra, input);
7211
7212         wrqu->length = mp_query_psd(padapter, extra);
7213         kfree(input);
7214         return 0;
7215 }
7216
7217 static int rtw_mp_thermal(struct net_device *dev,
7218                           struct iw_request_info *info,
7219                           struct iw_point *wrqu, char *extra)
7220 {
7221         u8 val;
7222         u16 bwrite = 1;
7223         u16 addr = EEPROM_THERMAL_METER_88E;
7224
7225         u16 cnt = 1;
7226         u16 max_available_size = 0;
7227         struct adapter *padapter = rtw_netdev_priv(dev);
7228
7229         if (copy_from_user(extra, wrqu->pointer, wrqu->length))
7230                 return -EFAULT;
7231
7232          bwrite = strncmp(extra, "write", 6); /*  strncmp true is 0 */
7233
7234          Hal_GetThermalMeter(padapter, &val);
7235
7236          if (bwrite == 0) {
7237                         EFUSE_GetEfuseDefinition(padapter, EFUSE_WIFI, TYPE_AVAILABLE_EFUSE_BYTES_TOTAL, (void *)&max_available_size, false);
7238                         if (2 > max_available_size) {
7239                                 DBG_88E("no available efuse!\n");
7240                                 return -EFAULT;
7241                         }
7242                         if (rtw_efuse_map_write(padapter, addr, cnt, &val) == _FAIL) {
7243                                 DBG_88E("rtw_efuse_map_write error\n");
7244                                 return -EFAULT;
7245                         } else {
7246                                  sprintf(extra, " efuse write ok :%d", val);
7247                         }
7248          } else {
7249                          sprintf(extra, "%d", val);
7250          }
7251         wrqu->length = strlen(extra);
7252
7253         return 0;
7254 }
7255
7256 static int rtw_mp_reset_stats(struct net_device *dev,
7257                         struct iw_request_info *info,
7258                         struct iw_point *wrqu, char *extra)
7259 {
7260         struct mp_priv *pmp_priv;
7261         struct adapter *padapter = rtw_netdev_priv(dev);
7262
7263         pmp_priv = &padapter->mppriv;
7264
7265         pmp_priv->tx.sended = 0;
7266         pmp_priv->tx_pktcount = 0;
7267         pmp_priv->rx_pktcount = 0;
7268         pmp_priv->rx_crcerrpktcount = 0;
7269
7270         /* reset phy counter */
7271         write_bbreg(padapter, 0xf14, BIT16, 0x1);
7272         rtw_msleep_os(10);
7273         write_bbreg(padapter, 0xf14, BIT16, 0x0);
7274
7275         return 0;
7276 }
7277
7278 static int rtw_mp_dump(struct net_device *dev,
7279                        struct iw_request_info *info,
7280                        struct iw_point *wrqu, char *extra)
7281 {
7282         u32 value;
7283         u8 rf_type, path_nums = 0;
7284         u32 i, j = 1, path;
7285         struct adapter *padapter = rtw_netdev_priv(dev);
7286
7287         if (strncmp(extra, "all", 4) == 0) {
7288                 DBG_88E("\n ======= MAC REG =======\n");
7289                 for (i = 0x0; i < 0x300; i += 4) {
7290                         if (j%4 == 1)
7291                                 DBG_88E("0x%02x", i);
7292                         DBG_88E(" 0x%08x ", rtw_read32(padapter, i));
7293                         if ((j++)%4 == 0)
7294                                 DBG_88E("\n");
7295                 }
7296                 for (i = 0x400; i < 0x1000; i += 4) {
7297                         if (j%4 == 1)
7298                                 DBG_88E("0x%02x", i);
7299                         DBG_88E(" 0x%08x ", rtw_read32(padapter, i));
7300                         if ((j++)%4 == 0)
7301                                 DBG_88E("\n");
7302                 }
7303
7304                 j = 1;
7305                 rtw_hal_get_hwreg(padapter, HW_VAR_RF_TYPE, (u8 *)(&rf_type));
7306
7307                 DBG_88E("\n ======= RF REG =======\n");
7308                 if ((RF_1T2R == rf_type) || (RF_1T1R == rf_type))
7309                         path_nums = 1;
7310                 else
7311                         path_nums = 2;
7312
7313                 for (path = 0; path < path_nums; path++) {
7314                         for (i = 0; i < 0x34; i++) {
7315                                 value = rtw_hal_read_rfreg(padapter, path, i, 0xffffffff);
7316                                 if (j%4 == 1)
7317                                         DBG_88E("0x%02x ", i);
7318                                 DBG_88E(" 0x%08x ", value);
7319                                 if ((j++)%4 == 0)
7320                                         DBG_88E("\n");
7321                         }
7322                 }
7323         }
7324         return 0;
7325 }
7326
7327 static int rtw_mp_phypara(struct net_device *dev,
7328                         struct iw_request_info *info,
7329                         struct iw_point *wrqu, char *extra)
7330 {
7331         char    *input = kmalloc(wrqu->length, GFP_KERNEL);
7332         u32             valxcap;
7333
7334         if (!input)
7335                 return -ENOMEM;
7336         if (copy_from_user(input, wrqu->pointer, wrqu->length)) {
7337                 kfree(input);
7338                 return -EFAULT;
7339         }
7340
7341         DBG_88E("%s:iwpriv in =%s\n", __func__, input);
7342
7343         sscanf(input, "xcap =%d", &valxcap);
7344
7345         kfree(input);
7346         return 0;
7347 }
7348
7349 static int rtw_mp_SetRFPath(struct net_device *dev,
7350                         struct iw_request_info *info,
7351                         union iwreq_data *wrqu, char *extra)
7352 {
7353         struct adapter *padapter = rtw_netdev_priv(dev);
7354         char    *input = kmalloc(wrqu->data.length, GFP_KERNEL);
7355         u8 bMain = 1, bTurnoff = 1;
7356
7357         if (!input)
7358                 return -ENOMEM;
7359         if (copy_from_user(input, wrqu->data.pointer, wrqu->data.length))
7360                         return -EFAULT;
7361         DBG_88E("%s:iwpriv in =%s\n", __func__, input);
7362
7363         bMain = strncmp(input, "1", 2); /*  strncmp true is 0 */
7364         bTurnoff = strncmp(input, "0", 3); /*  strncmp true is 0 */
7365
7366         if (bMain == 0) {
7367                 MP_PHY_SetRFPathSwitch(padapter, true);
7368                 DBG_88E("%s:PHY_SetRFPathSwitch = true\n", __func__);
7369         } else if (bTurnoff == 0) {
7370                 MP_PHY_SetRFPathSwitch(padapter, false);
7371                 DBG_88E("%s:PHY_SetRFPathSwitch = false\n", __func__);
7372         }
7373         kfree(input);
7374         return 0;
7375 }
7376
7377 static int rtw_mp_QueryDrv(struct net_device *dev,
7378                         struct iw_request_info *info,
7379                         union iwreq_data *wrqu, char *extra)
7380 {
7381         struct adapter *padapter = rtw_netdev_priv(dev);
7382         char    *input = kmalloc(wrqu->data.length, GFP_KERNEL);
7383         u8 qAutoLoad = 1;
7384         struct eeprom_priv *pEEPROM = GET_EEPROM_EFUSE_PRIV(padapter);
7385
7386         if (!input)
7387                 return -ENOMEM;
7388
7389         if (copy_from_user(input, wrqu->data.pointer, wrqu->data.length))
7390                         return -EFAULT;
7391         DBG_88E("%s:iwpriv in =%s\n", __func__, input);
7392
7393         qAutoLoad = strncmp(input, "autoload", 8); /*  strncmp true is 0 */
7394
7395         if (qAutoLoad == 0) {
7396                 DBG_88E("%s:qAutoLoad\n", __func__);
7397
7398                 if (pEEPROM->bautoload_fail_flag)
7399                         sprintf(extra, "fail");
7400                 else
7401                 sprintf(extra, "ok");
7402         }
7403         wrqu->data.length = strlen(extra) + 1;
7404         kfree(input);
7405         return 0;
7406 }
7407
7408 static int rtw_mp_set(struct net_device *dev,
7409                       struct iw_request_info *info,
7410                       union iwreq_data *wdata, char *extra)
7411 {
7412         struct iw_point *wrqu = (struct iw_point *)wdata;
7413         u32 subcmd = wrqu->flags;
7414         struct adapter *padapter = rtw_netdev_priv(dev);
7415
7416         if (padapter == NULL)
7417                 return -ENETDOWN;
7418
7419         if (extra == NULL) {
7420                 wrqu->length = 0;
7421                 return -EIO;
7422         }
7423
7424         switch (subcmd) {
7425         case MP_START:
7426                 DBG_88E("set case mp_start\n");
7427                 rtw_mp_start(dev, info, wrqu, extra);
7428                  break;
7429         case MP_STOP:
7430                 DBG_88E("set case mp_stop\n");
7431                 rtw_mp_stop(dev, info, wrqu, extra);
7432                  break;
7433         case MP_BANDWIDTH:
7434                 DBG_88E("set case mp_bandwidth\n");
7435                 rtw_mp_bandwidth(dev, info, wrqu, extra);
7436                 break;
7437         case MP_RESET_STATS:
7438                 DBG_88E("set case MP_RESET_STATS\n");
7439                 rtw_mp_reset_stats(dev, info, wrqu, extra);
7440                 break;
7441         case MP_SetRFPathSwh:
7442                 DBG_88E("set MP_SetRFPathSwitch\n");
7443                 rtw_mp_SetRFPath(dev, info, wdata, extra);
7444                 break;
7445         case CTA_TEST:
7446                 DBG_88E("set CTA_TEST\n");
7447                 rtw_cta_test_start(dev, info, wdata, extra);
7448                 break;
7449         }
7450
7451         return 0;
7452 }
7453
7454 static int rtw_mp_get(struct net_device *dev,
7455                         struct iw_request_info *info,
7456                         union iwreq_data *wdata, char *extra)
7457 {
7458         struct iw_point *wrqu = (struct iw_point *)wdata;
7459         u32 subcmd = wrqu->flags;
7460         struct adapter *padapter = rtw_netdev_priv(dev);
7461
7462         if (padapter == NULL)
7463                 return -ENETDOWN;
7464         if (extra == NULL) {
7465                 wrqu->length = 0;
7466                 return -EIO;
7467         }
7468
7469         switch (subcmd) {
7470         case WRITE_REG:
7471                 rtw_mp_write_reg(dev, info, wrqu, extra);
7472                  break;
7473         case WRITE_RF:
7474                 rtw_mp_write_rf(dev, info, wrqu, extra);
7475                  break;
7476         case MP_PHYPARA:
7477                 DBG_88E("mp_get  MP_PHYPARA\n");
7478                 rtw_mp_phypara(dev, info, wrqu, extra);
7479                 break;
7480         case MP_CHANNEL:
7481                 DBG_88E("set case mp_channel\n");
7482                 rtw_mp_channel(dev, info, wrqu, extra);
7483                 break;
7484         case READ_REG:
7485                 DBG_88E("mp_get  READ_REG\n");
7486                 rtw_mp_read_reg(dev, info, wrqu, extra);
7487                  break;
7488         case READ_RF:
7489                 DBG_88E("mp_get  READ_RF\n");
7490                 rtw_mp_read_rf(dev, info, wrqu, extra);
7491                 break;
7492         case MP_RATE:
7493                 DBG_88E("set case mp_rate\n");
7494                 rtw_mp_rate(dev, info, wrqu, extra);
7495                 break;
7496         case MP_TXPOWER:
7497                 DBG_88E("set case MP_TXPOWER\n");
7498                 rtw_mp_txpower(dev, info, wrqu, extra);
7499                 break;
7500         case MP_ANT_TX:
7501                 DBG_88E("set case MP_ANT_TX\n");
7502                 rtw_mp_ant_tx(dev, info, wrqu, extra);
7503                 break;
7504         case MP_ANT_RX:
7505                 DBG_88E("set case MP_ANT_RX\n");
7506                 rtw_mp_ant_rx(dev, info, wrqu, extra);
7507                 break;
7508         case MP_QUERY:
7509                 rtw_mp_trx_query(dev, info, wrqu, extra);
7510                 break;
7511         case MP_CTX:
7512                 DBG_88E("set case MP_CTX\n");
7513                 rtw_mp_ctx(dev, info, wrqu, extra);
7514                 break;
7515         case MP_ARX:
7516                 DBG_88E("set case MP_ARX\n");
7517                 rtw_mp_arx(dev, info, wrqu, extra);
7518                 break;
7519         case EFUSE_GET:
7520                 DBG_88E("efuse get EFUSE_GET\n");
7521                 rtw_mp_efuse_get(dev, info, wdata, extra);
7522                  break;
7523         case MP_DUMP:
7524                 DBG_88E("set case MP_DUMP\n");
7525                 rtw_mp_dump(dev, info, wrqu, extra);
7526                  break;
7527         case MP_PSD:
7528                 DBG_88E("set case MP_PSD\n");
7529                 rtw_mp_psd(dev, info, wrqu, extra);
7530                 break;
7531         case MP_THER:
7532                 DBG_88E("set case MP_THER\n");
7533                 rtw_mp_thermal(dev, info, wrqu, extra);
7534                 break;
7535         case MP_QueryDrvStats:
7536                 DBG_88E("mp_get MP_QueryDrvStats\n");
7537                 rtw_mp_QueryDrv (dev, info, wdata, extra);
7538                 break;
7539         case MP_PWRTRK:
7540                 DBG_88E("set case MP_PWRTRK\n");
7541                 rtw_mp_pwrtrk(dev, info, wrqu, extra);
7542                 break;
7543         case EFUSE_SET:
7544                 DBG_88E("set case efuse set\n");
7545                 rtw_mp_efuse_set(dev, info, wdata, extra);
7546                 break;
7547         }
7548
7549         rtw_msleep_os(10); /* delay 5ms for sending pkt before exit adb shell operation */
7550         return 0;
7551 }
7552
7553 static int rtw_tdls(struct net_device *dev,
7554                     struct iw_request_info *info,
7555                     union iwreq_data *wrqu, char *extra)
7556 {
7557         return 0;
7558 }
7559
7560 static int rtw_tdls_get(struct net_device *dev,
7561                                 struct iw_request_info *info,
7562                                 union iwreq_data *wrqu, char *extra)
7563 {
7564         return 0;
7565 }
7566
7567 static int rtw_test(
7568         struct net_device *dev,
7569         struct iw_request_info *info,
7570         union iwreq_data *wrqu, char *extra)
7571 {
7572         u32 len;
7573         u8 *pbuf, *pch;
7574         char *ptmp;
7575         u8 *delim = ",";
7576
7577         DBG_88E("+%s\n", __func__);
7578         len = wrqu->data.length;
7579
7580         pbuf = (u8 *)rtw_zmalloc(len);
7581         if (pbuf == NULL) {
7582                 DBG_88E("%s: no memory!\n", __func__);
7583                 return -ENOMEM;
7584         }
7585
7586         if (copy_from_user(pbuf, wrqu->data.pointer, len)) {
7587                 kfree(pbuf);
7588                 DBG_88E("%s: copy from user fail!\n", __func__);
7589                 return -EFAULT;
7590         }
7591         DBG_88E("%s: string =\"%s\"\n", __func__, pbuf);
7592
7593         ptmp = (char *)pbuf;
7594         pch = strsep(&ptmp, delim);
7595         if ((pch == NULL) || (strlen(pch) == 0)) {
7596                 kfree(pbuf);
7597                 DBG_88E("%s: parameter error(level 1)!\n", __func__);
7598                 return -EFAULT;
7599         }
7600         kfree(pbuf);
7601         return 0;
7602 }
7603
7604 static iw_handler rtw_handlers[] = {
7605         NULL,                                   /* SIOCSIWCOMMIT */
7606         rtw_wx_get_name,                /* SIOCGIWNAME */
7607         dummy,                                  /* SIOCSIWNWID */
7608         dummy,                                  /* SIOCGIWNWID */
7609         rtw_wx_set_freq,                /* SIOCSIWFREQ */
7610         rtw_wx_get_freq,                /* SIOCGIWFREQ */
7611         rtw_wx_set_mode,                /* SIOCSIWMODE */
7612         rtw_wx_get_mode,                /* SIOCGIWMODE */
7613         dummy,                                  /* SIOCSIWSENS */
7614         rtw_wx_get_sens,                /* SIOCGIWSENS */
7615         NULL,                                   /* SIOCSIWRANGE */
7616         rtw_wx_get_range,               /* SIOCGIWRANGE */
7617         rtw_wx_set_priv,                /* SIOCSIWPRIV */
7618         NULL,                                   /* SIOCGIWPRIV */
7619         NULL,                                   /* SIOCSIWSTATS */
7620         NULL,                                   /* SIOCGIWSTATS */
7621         dummy,                                  /* SIOCSIWSPY */
7622         dummy,                                  /* SIOCGIWSPY */
7623         NULL,                                   /* SIOCGIWTHRSPY */
7624         NULL,                                   /* SIOCWIWTHRSPY */
7625         rtw_wx_set_wap,         /* SIOCSIWAP */
7626         rtw_wx_get_wap,         /* SIOCGIWAP */
7627         rtw_wx_set_mlme,                /* request MLME operation; uses struct iw_mlme */
7628         dummy,                                  /* SIOCGIWAPLIST -- depricated */
7629         rtw_wx_set_scan,                /* SIOCSIWSCAN */
7630         rtw_wx_get_scan,                /* SIOCGIWSCAN */
7631         rtw_wx_set_essid,               /* SIOCSIWESSID */
7632         rtw_wx_get_essid,               /* SIOCGIWESSID */
7633         dummy,                                  /* SIOCSIWNICKN */
7634         rtw_wx_get_nick,                /* SIOCGIWNICKN */
7635         NULL,                                   /* -- hole -- */
7636         NULL,                                   /* -- hole -- */
7637         rtw_wx_set_rate,                /* SIOCSIWRATE */
7638         rtw_wx_get_rate,                /* SIOCGIWRATE */
7639         rtw_wx_set_rts,                 /* SIOCSIWRTS */
7640         rtw_wx_get_rts,                 /* SIOCGIWRTS */
7641         rtw_wx_set_frag,                /* SIOCSIWFRAG */
7642         rtw_wx_get_frag,                /* SIOCGIWFRAG */
7643         dummy,                                  /* SIOCSIWTXPOW */
7644         dummy,                                  /* SIOCGIWTXPOW */
7645         dummy,                                  /* SIOCSIWRETRY */
7646         rtw_wx_get_retry,               /* SIOCGIWRETRY */
7647         rtw_wx_set_enc,                 /* SIOCSIWENCODE */
7648         rtw_wx_get_enc,                 /* SIOCGIWENCODE */
7649         dummy,                                  /* SIOCSIWPOWER */
7650         rtw_wx_get_power,               /* SIOCGIWPOWER */
7651         NULL,                                   /*---hole---*/
7652         NULL,                                   /*---hole---*/
7653         rtw_wx_set_gen_ie,              /* SIOCSIWGENIE */
7654         NULL,                                   /* SIOCGWGENIE */
7655         rtw_wx_set_auth,                /* SIOCSIWAUTH */
7656         NULL,                                   /* SIOCGIWAUTH */
7657         rtw_wx_set_enc_ext,             /* SIOCSIWENCODEEXT */
7658         NULL,                                   /* SIOCGIWENCODEEXT */
7659         rtw_wx_set_pmkid,               /* SIOCSIWPMKSA */
7660         NULL,                                   /*---hole---*/
7661 };
7662
7663 static const struct iw_priv_args rtw_private_args[] = {
7664         {
7665                 SIOCIWFIRSTPRIV + 0x0,
7666                 IW_PRIV_TYPE_CHAR | 0x7FF, 0, "write"
7667         },
7668         {
7669                 SIOCIWFIRSTPRIV + 0x1,
7670                 IW_PRIV_TYPE_CHAR | 0x7FF,
7671                 IW_PRIV_TYPE_CHAR | IW_PRIV_SIZE_FIXED | IFNAMSIZ, "read"
7672         },
7673         {
7674                 SIOCIWFIRSTPRIV + 0x2, 0, 0, "driver_ext"
7675         },
7676         {
7677                 SIOCIWFIRSTPRIV + 0x3, 0, 0, "mp_ioctl"
7678         },
7679         {
7680                 SIOCIWFIRSTPRIV + 0x4,
7681                 IW_PRIV_TYPE_INT | IW_PRIV_SIZE_FIXED | 1, 0, "apinfo"
7682         },
7683         {
7684                 SIOCIWFIRSTPRIV + 0x5,
7685                 IW_PRIV_TYPE_INT | IW_PRIV_SIZE_FIXED | 2, 0, "setpid"
7686         },
7687         {
7688                 SIOCIWFIRSTPRIV + 0x6,
7689                 IW_PRIV_TYPE_INT | IW_PRIV_SIZE_FIXED | 1, 0, "wps_start"
7690         },
7691         {
7692                 SIOCIWFIRSTPRIV + 0x7,
7693                 IW_PRIV_TYPE_INT | IW_PRIV_SIZE_FIXED | 1, 0, "get_sensitivity"
7694         },
7695         {
7696                 SIOCIWFIRSTPRIV + 0x8,
7697                 IW_PRIV_TYPE_INT | IW_PRIV_SIZE_FIXED | 1, 0, "wps_prob_req_ie"
7698         },
7699         {
7700                 SIOCIWFIRSTPRIV + 0x9,
7701                 IW_PRIV_TYPE_INT | IW_PRIV_SIZE_FIXED | 1, 0, "wps_assoc_req_ie"
7702         },
7703
7704         {
7705                 SIOCIWFIRSTPRIV + 0xA,
7706                 IW_PRIV_TYPE_INT | IW_PRIV_SIZE_FIXED | 1, 0, "channel_plan"
7707         },
7708
7709         {
7710                 SIOCIWFIRSTPRIV + 0xB,
7711                 IW_PRIV_TYPE_INT | IW_PRIV_SIZE_FIXED | 2, 0, "dbg"
7712         },
7713         {
7714                 SIOCIWFIRSTPRIV + 0xC,
7715                 IW_PRIV_TYPE_INT | IW_PRIV_SIZE_FIXED | 3, 0, "rfw"
7716         },
7717         {
7718                 SIOCIWFIRSTPRIV + 0xD,
7719                 IW_PRIV_TYPE_INT | IW_PRIV_SIZE_FIXED | 2, IW_PRIV_TYPE_CHAR | IW_PRIV_SIZE_FIXED | IFNAMSIZ, "rfr"
7720         },
7721         {
7722                 SIOCIWFIRSTPRIV + 0x10,
7723                 IW_PRIV_TYPE_CHAR | P2P_PRIVATE_IOCTL_SET_LEN, 0, "p2p_set"
7724         },
7725         {
7726                 SIOCIWFIRSTPRIV + 0x11,
7727                 IW_PRIV_TYPE_CHAR | P2P_PRIVATE_IOCTL_SET_LEN, IW_PRIV_TYPE_CHAR | IW_PRIV_SIZE_FIXED | P2P_PRIVATE_IOCTL_SET_LEN, "p2p_get"
7728         },
7729         {
7730                 SIOCIWFIRSTPRIV + 0x12,
7731                 IW_PRIV_TYPE_CHAR | P2P_PRIVATE_IOCTL_SET_LEN, IW_PRIV_TYPE_CHAR | IFNAMSIZ, "p2p_get2"
7732         },
7733         {SIOCIWFIRSTPRIV + 0x13, IW_PRIV_TYPE_CHAR | 128, 0, "NULL"},
7734         {
7735                 SIOCIWFIRSTPRIV + 0x14,
7736                 IW_PRIV_TYPE_CHAR  | 64, 0, "tdls"
7737         },
7738         {
7739                 SIOCIWFIRSTPRIV + 0x15,
7740                 IW_PRIV_TYPE_CHAR | P2P_PRIVATE_IOCTL_SET_LEN, IW_PRIV_TYPE_CHAR | IW_PRIV_SIZE_FIXED | P2P_PRIVATE_IOCTL_SET_LEN, "tdls_get"
7741         },
7742         {
7743                 SIOCIWFIRSTPRIV + 0x16,
7744                 IW_PRIV_TYPE_CHAR | 64, 0, "pm_set"
7745         },
7746
7747         {SIOCIWFIRSTPRIV + 0x18, IW_PRIV_TYPE_CHAR | IFNAMSIZ, 0, "rereg_nd_name"},
7748
7749         {SIOCIWFIRSTPRIV + 0x1A, IW_PRIV_TYPE_CHAR | 1024, 0, "efuse_set"},
7750         {SIOCIWFIRSTPRIV + 0x1B, IW_PRIV_TYPE_CHAR | 128, IW_PRIV_TYPE_CHAR | IW_PRIV_SIZE_MASK, "efuse_get"},
7751         {SIOCIWFIRSTPRIV + 0x1D, IW_PRIV_TYPE_CHAR | 40, IW_PRIV_TYPE_CHAR | 0x7FF, "test"
7752         },
7753
7754         {SIOCIWFIRSTPRIV + 0x0E, IW_PRIV_TYPE_CHAR | 1024, 0, ""},  /* set */
7755         {SIOCIWFIRSTPRIV + 0x0F, IW_PRIV_TYPE_CHAR | 1024, IW_PRIV_TYPE_CHAR | IW_PRIV_SIZE_MASK, ""},/* get */
7756 /* --- sub-ioctls definitions --- */
7757
7758         {MP_START, IW_PRIV_TYPE_CHAR | 1024, 0, "mp_start"}, /* set */
7759         {MP_PHYPARA, IW_PRIV_TYPE_CHAR | 1024, IW_PRIV_TYPE_CHAR | IW_PRIV_SIZE_MASK, "mp_phypara"},/* get */
7760         {MP_STOP, IW_PRIV_TYPE_CHAR | 1024, 0, "mp_stop"}, /* set */
7761         {MP_CHANNEL, IW_PRIV_TYPE_CHAR | 1024, IW_PRIV_TYPE_CHAR | IW_PRIV_SIZE_MASK, "mp_channel"},/* get */
7762         {MP_BANDWIDTH, IW_PRIV_TYPE_CHAR | 1024, 0, "mp_bandwidth"}, /* set */
7763         {MP_RATE, IW_PRIV_TYPE_CHAR | 1024, IW_PRIV_TYPE_CHAR | IW_PRIV_SIZE_MASK, "mp_rate"},/* get */
7764         {MP_RESET_STATS, IW_PRIV_TYPE_CHAR | 1024, 0, "mp_reset_stats"},
7765         {MP_QUERY, IW_PRIV_TYPE_CHAR | 1024, IW_PRIV_TYPE_CHAR | IW_PRIV_SIZE_MASK, "mp_query"}, /* get */
7766         {READ_REG, IW_PRIV_TYPE_CHAR | 1024, IW_PRIV_TYPE_CHAR | IW_PRIV_SIZE_MASK, "read_reg"},
7767         {MP_RATE, IW_PRIV_TYPE_CHAR | 1024, IW_PRIV_TYPE_CHAR | IW_PRIV_SIZE_MASK, "mp_rate"},
7768         {READ_RF, IW_PRIV_TYPE_CHAR | 1024, IW_PRIV_TYPE_CHAR | IW_PRIV_SIZE_MASK, "read_rf"},
7769         {MP_PSD, IW_PRIV_TYPE_CHAR | 1024, IW_PRIV_TYPE_CHAR | IW_PRIV_SIZE_MASK, "mp_psd"},
7770         {MP_DUMP, IW_PRIV_TYPE_CHAR | 1024, IW_PRIV_TYPE_CHAR | IW_PRIV_SIZE_MASK, "mp_dump"},
7771         {MP_TXPOWER, IW_PRIV_TYPE_CHAR | 1024, IW_PRIV_TYPE_CHAR | IW_PRIV_SIZE_MASK, "mp_txpower"},
7772         {MP_ANT_TX, IW_PRIV_TYPE_CHAR | 1024,  IW_PRIV_TYPE_CHAR | IW_PRIV_SIZE_MASK, "mp_ant_tx"},
7773         {MP_ANT_RX, IW_PRIV_TYPE_CHAR | 1024, IW_PRIV_TYPE_CHAR | IW_PRIV_SIZE_MASK, "mp_ant_rx"},
7774         {WRITE_REG, IW_PRIV_TYPE_CHAR | 1024, IW_PRIV_TYPE_CHAR | IW_PRIV_SIZE_MASK, "write_reg"},
7775         {WRITE_RF, IW_PRIV_TYPE_CHAR | 1024, IW_PRIV_TYPE_CHAR | IW_PRIV_SIZE_MASK, "write_rf"},
7776         {MP_CTX, IW_PRIV_TYPE_CHAR | 1024, IW_PRIV_TYPE_CHAR | IW_PRIV_SIZE_MASK, "mp_ctx"},
7777         {MP_ARX, IW_PRIV_TYPE_CHAR | 1024, IW_PRIV_TYPE_CHAR | IW_PRIV_SIZE_MASK, "mp_arx"},
7778         {MP_THER, IW_PRIV_TYPE_CHAR | 1024, IW_PRIV_TYPE_CHAR | IW_PRIV_SIZE_MASK, "mp_ther"},
7779         {EFUSE_SET, IW_PRIV_TYPE_CHAR | 1024, IW_PRIV_TYPE_CHAR | IW_PRIV_SIZE_MASK, "efuse_set"},
7780         {EFUSE_GET, IW_PRIV_TYPE_CHAR | 1024, IW_PRIV_TYPE_CHAR | IW_PRIV_SIZE_MASK, "efuse_get"},
7781         {MP_PWRTRK, IW_PRIV_TYPE_CHAR | 1024, 0, "mp_pwrtrk"},
7782         {MP_QueryDrvStats, IW_PRIV_TYPE_CHAR | 1024, IW_PRIV_TYPE_CHAR | IW_PRIV_SIZE_MASK, "mp_drvquery"},
7783         {MP_IOCTL, IW_PRIV_TYPE_CHAR | 1024, 0, "mp_ioctl"}, /*  mp_ioctl */
7784         {MP_SetRFPathSwh, IW_PRIV_TYPE_CHAR | 1024, 0, "mp_setrfpath"},
7785         {CTA_TEST, IW_PRIV_TYPE_CHAR | 1024, 0, "cta_test"},
7786 };
7787
7788 static iw_handler rtw_private_handler[] = {
7789 rtw_wx_write32,                         /* 0x00 */
7790 rtw_wx_read32,                          /* 0x01 */
7791 rtw_drvext_hdl,                         /* 0x02 */
7792 rtw_mp_ioctl_hdl,                       /* 0x03 */
7793
7794 /*  for MM DTV platform */
7795         rtw_get_ap_info,                /* 0x04 */
7796
7797         rtw_set_pid,                    /* 0x05 */
7798         rtw_wps_start,                  /* 0x06 */
7799
7800         rtw_wx_get_sensitivity,         /* 0x07 */
7801         rtw_wx_set_mtk_wps_probe_ie,    /* 0x08 */
7802         rtw_wx_set_mtk_wps_ie,          /* 0x09 */
7803
7804 /*  Set Channel depend on the country code */
7805         rtw_wx_set_channel_plan,        /* 0x0A */
7806
7807         rtw_dbg_port,                   /* 0x0B */
7808         rtw_wx_write_rf,                /* 0x0C */
7809         rtw_wx_read_rf,                 /* 0x0D */
7810
7811         rtw_mp_set,                     /* 0x0E */
7812         rtw_mp_get,                     /* 0x0F */
7813         rtw_p2p_set,                    /* 0x10 */
7814         rtw_p2p_get,                    /* 0x11 */
7815         rtw_p2p_get2,                   /* 0x12 */
7816
7817         NULL,                           /* 0x13 */
7818         rtw_tdls,                       /* 0x14 */
7819         rtw_tdls_get,                   /* 0x15 */
7820
7821         rtw_pm_set,                     /* 0x16 */
7822         rtw_wx_priv_null,               /* 0x17 */
7823         rtw_rereg_nd_name,              /* 0x18 */
7824         rtw_wx_priv_null,               /* 0x19 */
7825
7826         rtw_mp_efuse_set,               /* 0x1A */
7827         rtw_mp_efuse_get,               /* 0x1B */
7828         NULL,                           /*  0x1C is reserved for hostapd */
7829         rtw_test,                       /*  0x1D */
7830 };
7831
7832 static struct iw_statistics *rtw_get_wireless_stats(struct net_device *dev)
7833 {
7834         struct adapter *padapter = (struct adapter *)rtw_netdev_priv(dev);
7835         struct iw_statistics *piwstats = &padapter->iwstats;
7836         int tmp_level = 0;
7837         int tmp_qual = 0;
7838         int tmp_noise = 0;
7839
7840         if (!check_fwstate(&padapter->mlmepriv, _FW_LINKED)) {
7841                 piwstats->qual.qual = 0;
7842                 piwstats->qual.level = 0;
7843                 piwstats->qual.noise = 0;
7844         } else {
7845                 tmp_level = padapter->recvpriv.signal_strength;
7846                 tmp_qual = padapter->recvpriv.signal_qual;
7847                 tmp_noise = padapter->recvpriv.noise;
7848
7849                 piwstats->qual.level = tmp_level;
7850                 piwstats->qual.qual = tmp_qual;
7851                 piwstats->qual.noise = tmp_noise;
7852         }
7853         piwstats->qual.updated = IW_QUAL_ALL_UPDATED;/* IW_QUAL_DBM; */
7854         return &padapter->iwstats;
7855 }
7856
7857 struct iw_handler_def rtw_handlers_def = {
7858         .standard = rtw_handlers,
7859         .num_standard = sizeof(rtw_handlers) / sizeof(iw_handler),
7860         .private = rtw_private_handler,
7861         .private_args = (struct iw_priv_args *)rtw_private_args,
7862         .num_private = sizeof(rtw_private_handler) / sizeof(iw_handler),
7863         .num_private_args = sizeof(rtw_private_args) / sizeof(struct iw_priv_args),
7864         .get_wireless_stats = rtw_get_wireless_stats,
7865 };
7866
7867 /*  copy from net/wireless/wext.c start */
7868 /* ---------------------------------------------------------------- */
7869 /*
7870  * Calculate size of private arguments
7871  */
7872 static const char iw_priv_type_size[] = {
7873         0,                            /* IW_PRIV_TYPE_NONE */
7874         1,                            /* IW_PRIV_TYPE_BYTE */
7875         1,                            /* IW_PRIV_TYPE_CHAR */
7876         0,                            /* Not defined */
7877         sizeof(__u32),            /* IW_PRIV_TYPE_INT */
7878         sizeof(struct iw_freq),  /* IW_PRIV_TYPE_FLOAT */
7879         sizeof(struct sockaddr),        /* IW_PRIV_TYPE_ADDR */
7880         0,                            /* Not defined */
7881 };
7882
7883 static int get_priv_size(__u16 args)
7884 {
7885         int num = args & IW_PRIV_SIZE_MASK;
7886         int type = (args & IW_PRIV_TYPE_MASK) >> 12;
7887
7888         return num * iw_priv_type_size[type];
7889 }
7890 /*  copy from net/wireless/wext.c end */
7891
7892 static int rtw_ioctl_wext_private(struct net_device *dev, union iwreq_data *wrq_data)
7893 {
7894         int err = 0;
7895         u8 *input = NULL;
7896         u32 input_len = 0;
7897         const char delim[] = " ";
7898         u8 *output = NULL;
7899         u32 output_len = 0;
7900         u32 count = 0;
7901         u8 *buffer = NULL;
7902         u32 buffer_len = 0;
7903         char *ptr = NULL;
7904         u8 cmdname[17] = {0}; /*  IFNAMSIZ+1 */
7905         u32 cmdlen;
7906         s32 len;
7907         u8 *extra = NULL;
7908         u32 extra_size = 0;
7909
7910         s32 k;
7911         const iw_handler *priv;         /* Private ioctl */
7912         const struct iw_priv_args *priv_args;   /* Private ioctl description */
7913         u32 num_priv_args;                      /* Number of descriptions */
7914         iw_handler handler;
7915         int temp;
7916         int subcmd = 0;                         /* sub-ioctl index */
7917         int offset = 0;                         /* Space for sub-ioctl index */
7918
7919         union iwreq_data wdata;
7920
7921         memcpy(&wdata, wrq_data, sizeof(wdata));
7922
7923         input_len = wdata.data.length;
7924         input = rtw_zmalloc(input_len);
7925         if (NULL == input)
7926                 return -ENOMEM;
7927         if (copy_from_user(input, wdata.data.pointer, input_len)) {
7928                 err = -EFAULT;
7929                 goto exit;
7930         }
7931         ptr = input;
7932         len = input_len;
7933
7934         sscanf(ptr, "%16s", cmdname);
7935         cmdlen = strlen(cmdname);
7936         DBG_88E("%s: cmd =%s\n", __func__, cmdname);
7937
7938         /*  skip command string */
7939         if (cmdlen > 0)
7940                 cmdlen += 1; /*  skip one space */
7941         ptr += cmdlen;
7942         len -= cmdlen;
7943         DBG_88E("%s: parameters =%s\n", __func__, ptr);
7944
7945         priv = rtw_private_handler;
7946         priv_args = rtw_private_args;
7947         num_priv_args = sizeof(rtw_private_args) / sizeof(struct iw_priv_args);
7948
7949         if (num_priv_args == 0) {
7950                 err = -EOPNOTSUPP;
7951                 goto exit;
7952         }
7953
7954         /* Search the correct ioctl */
7955         k = -1;
7956         while ((++k < num_priv_args) && strcmp(priv_args[k].name, cmdname));
7957
7958         /* If not found... */
7959         if (k == num_priv_args) {
7960                 err = -EOPNOTSUPP;
7961                 goto exit;
7962         }
7963
7964         /* Watch out for sub-ioctls ! */
7965         if (priv_args[k].cmd < SIOCDEVPRIVATE) {
7966                 int j = -1;
7967
7968                 /* Find the matching *real* ioctl */
7969                 while ((++j < num_priv_args) && ((priv_args[j].name[0] != '\0') ||
7970                         (priv_args[j].set_args != priv_args[k].set_args) ||
7971                         (priv_args[j].get_args != priv_args[k].get_args)));
7972
7973                 /* If not found... */
7974                 if (j == num_priv_args) {
7975                         err = -EINVAL;
7976                         goto exit;
7977                 }
7978
7979                 /* Save sub-ioctl number */
7980                 subcmd = priv_args[k].cmd;
7981                 /* Reserve one int (simplify alignment issues) */
7982                 offset = sizeof(__u32);
7983                 /* Use real ioctl definition from now on */
7984                 k = j;
7985         }
7986
7987         buffer = rtw_zmalloc(4096);
7988         if (NULL == buffer) {
7989                 err = -ENOMEM;
7990                 goto exit;
7991         }
7992
7993         /* If we have to set some data */
7994         if ((priv_args[k].set_args & IW_PRIV_TYPE_MASK) &&
7995             (priv_args[k].set_args & IW_PRIV_SIZE_MASK)) {
7996                 u8 *str;
7997
7998                 switch (priv_args[k].set_args & IW_PRIV_TYPE_MASK) {
7999                 case IW_PRIV_TYPE_BYTE:
8000                         /* Fetch args */
8001                         count = 0;
8002                         do {
8003                                 str = strsep(&ptr, delim);
8004                                 if (NULL == str)
8005                                         break;
8006                                 sscanf(str, "%i", &temp);
8007                                 buffer[count++] = (u8)temp;
8008                         } while (1);
8009                         buffer_len = count;
8010                         /* Number of args to fetch */
8011                         wdata.data.length = count;
8012                         if (wdata.data.length > (priv_args[k].set_args & IW_PRIV_SIZE_MASK))
8013                                 wdata.data.length = priv_args[k].set_args & IW_PRIV_SIZE_MASK;
8014                         break;
8015                 case IW_PRIV_TYPE_INT:
8016                         /* Fetch args */
8017                         count = 0;
8018                         do {
8019                                 str = strsep(&ptr, delim);
8020                                 if (NULL == str)
8021                                         break;
8022                                 sscanf(str, "%i", &temp);
8023                                 ((s32 *)buffer)[count++] = (s32)temp;
8024                         } while (1);
8025                         buffer_len = count * sizeof(s32);
8026                         /* Number of args to fetch */
8027                         wdata.data.length = count;
8028                         if (wdata.data.length > (priv_args[k].set_args & IW_PRIV_SIZE_MASK))
8029                                 wdata.data.length = priv_args[k].set_args & IW_PRIV_SIZE_MASK;
8030                         break;
8031                 case IW_PRIV_TYPE_CHAR:
8032                         if (len > 0) {
8033                                 /* Size of the string to fetch */
8034                                 wdata.data.length = len;
8035                                 if (wdata.data.length > (priv_args[k].set_args & IW_PRIV_SIZE_MASK))
8036                                         wdata.data.length = priv_args[k].set_args & IW_PRIV_SIZE_MASK;
8037
8038                                 /* Fetch string */
8039                                 memcpy(buffer, ptr, wdata.data.length);
8040                         } else {
8041                                 wdata.data.length = 1;
8042                                 buffer[0] = '\0';
8043                         }
8044                         buffer_len = wdata.data.length;
8045                         break;
8046                 default:
8047                         DBG_88E("%s: Not yet implemented...\n", __func__);
8048                         err = -1;
8049                         goto exit;
8050                 }
8051
8052                 if ((priv_args[k].set_args & IW_PRIV_SIZE_FIXED) &&
8053                     (wdata.data.length != (priv_args[k].set_args & IW_PRIV_SIZE_MASK))) {
8054                         DBG_88E("%s: The command %s needs exactly %d argument(s)...\n",
8055                                 __func__, cmdname, priv_args[k].set_args & IW_PRIV_SIZE_MASK);
8056                         err = -EINVAL;
8057                         goto exit;
8058                 }
8059         } else {
8060                 /* if args to set */
8061                 wdata.data.length = 0L;
8062         }
8063
8064         /* Those two tests are important. They define how the driver
8065         * will have to handle the data */
8066         if ((priv_args[k].set_args & IW_PRIV_SIZE_FIXED) &&
8067             ((get_priv_size(priv_args[k].set_args) + offset) <= IFNAMSIZ)) {
8068                 /* First case : all SET args fit within wrq */
8069                 if (offset)
8070                         wdata.mode = subcmd;
8071                 memcpy(wdata.name + offset, buffer, IFNAMSIZ - offset);
8072         } else {
8073                 if ((priv_args[k].set_args == 0) &&
8074                     (priv_args[k].get_args & IW_PRIV_SIZE_FIXED) &&
8075                     (get_priv_size(priv_args[k].get_args) <= IFNAMSIZ)) {
8076                         /* Second case : no SET args, GET args fit within wrq */
8077                         if (offset)
8078                                 wdata.mode = subcmd;
8079                 } else {
8080                         /* Third case : args won't fit in wrq, or variable number of args */
8081                         if (copy_to_user(wdata.data.pointer, buffer, buffer_len)) {
8082                                 err = -EFAULT;
8083                                 goto exit;
8084                         }
8085                         wdata.data.flags = subcmd;
8086                 }
8087         }
8088
8089         kfree(input);
8090         input = NULL;
8091
8092         extra_size = 0;
8093         if (IW_IS_SET(priv_args[k].cmd)) {
8094                 /* Size of set arguments */
8095                 extra_size = get_priv_size(priv_args[k].set_args);
8096
8097                 /* Does it fits in iwr ? */
8098                 if ((priv_args[k].set_args & IW_PRIV_SIZE_FIXED) &&
8099                     ((extra_size + offset) <= IFNAMSIZ))
8100                         extra_size = 0;
8101         } else {
8102                 /* Size of get arguments */
8103                 extra_size = get_priv_size(priv_args[k].get_args);
8104
8105                 /* Does it fits in iwr ? */
8106                 if ((priv_args[k].get_args & IW_PRIV_SIZE_FIXED) &&
8107                     (extra_size <= IFNAMSIZ))
8108                         extra_size = 0;
8109         }
8110
8111         if (extra_size == 0) {
8112                 extra = (u8 *)&wdata;
8113                 kfree(buffer);
8114                 buffer = NULL;
8115         } else {
8116                 extra = buffer;
8117         }
8118
8119         handler = priv[priv_args[k].cmd - SIOCIWFIRSTPRIV];
8120         err = handler(dev, NULL, &wdata, extra);
8121
8122         /* If we have to get some data */
8123         if ((priv_args[k].get_args & IW_PRIV_TYPE_MASK) &&
8124             (priv_args[k].get_args & IW_PRIV_SIZE_MASK)) {
8125                 int j;
8126                 int n = 0;      /* number of args */
8127                 u8 str[20] = {0};
8128
8129                 /* Check where is the returned data */
8130                 if ((priv_args[k].get_args & IW_PRIV_SIZE_FIXED) &&
8131                     (get_priv_size(priv_args[k].get_args) <= IFNAMSIZ))
8132                         n = priv_args[k].get_args & IW_PRIV_SIZE_MASK;
8133                 else
8134                         n = wdata.data.length;
8135
8136                 output = rtw_zmalloc(4096);
8137                 if (NULL == output) {
8138                         err =  -ENOMEM;
8139                         goto exit;
8140                 }
8141                 switch (priv_args[k].get_args & IW_PRIV_TYPE_MASK) {
8142                 case IW_PRIV_TYPE_BYTE:
8143                         /* Display args */
8144                         for (j = 0; j < n; j++) {
8145                                 sprintf(str, "%d  ", extra[j]);
8146                                 len = strlen(str);
8147                                 output_len = strlen(output);
8148                                 if ((output_len + len + 1) > 4096) {
8149                                         err = -E2BIG;
8150                                         goto exit;
8151                                 }
8152                                 memcpy(output+output_len, str, len);
8153                         }
8154                         break;
8155                 case IW_PRIV_TYPE_INT:
8156                         /* Display args */
8157                         for (j = 0; j < n; j++) {
8158                                 sprintf(str, "%d  ", ((__s32 *)extra)[j]);
8159                                 len = strlen(str);
8160                                 output_len = strlen(output);
8161                                 if ((output_len + len + 1) > 4096) {
8162                                         err = -E2BIG;
8163                                         goto exit;
8164                                 }
8165                                 memcpy(output+output_len, str, len);
8166                         }
8167                         break;
8168                 case IW_PRIV_TYPE_CHAR:
8169                         /* Display args */
8170                         memcpy(output, extra, n);
8171                         break;
8172                 default:
8173                         DBG_88E("%s: Not yet implemented...\n", __func__);
8174                         err = -1;
8175                         goto exit;
8176                 }
8177
8178                 output_len = strlen(output) + 1;
8179                 wrq_data->data.length = output_len;
8180                 if (copy_to_user(wrq_data->data.pointer, output, output_len)) {
8181                         err = -EFAULT;
8182                         goto exit;
8183                 }
8184         } else {
8185                 /* if args to set */
8186                 wrq_data->data.length = 0;
8187         }
8188
8189 exit:
8190         kfree(input);
8191         kfree(buffer);
8192         kfree(output);
8193         return err;
8194 }
8195
8196 #include <rtw_android.h>
8197 int rtw_ioctl(struct net_device *dev, struct ifreq *rq, int cmd)
8198 {
8199         struct iwreq *wrq = (struct iwreq *)rq;
8200         int ret = 0;
8201
8202         switch (cmd) {
8203         case RTL_IOCTL_WPA_SUPPLICANT:
8204                 ret = wpa_supplicant_ioctl(dev, &wrq->u.data);
8205                 break;
8206 #ifdef CONFIG_88EU_AP_MODE
8207         case RTL_IOCTL_HOSTAPD:
8208                 ret = rtw_hostapd_ioctl(dev, &wrq->u.data);
8209                 break;
8210 #endif /*  CONFIG_88EU_AP_MODE */
8211         case SIOCDEVPRIVATE:
8212                 ret = rtw_ioctl_wext_private(dev, &wrq->u);
8213                 break;
8214         case (SIOCDEVPRIVATE+1):
8215                 ret = rtw_android_priv_cmd(dev, rq, cmd);
8216                 break;
8217         default:
8218                 ret = -EOPNOTSUPP;
8219                 break;
8220         }
8221         return ret;
8222 }