drivers/staging/vt6656/rxtx.c

   1 /*
   2  * Copyright (c) 1996, 2003 VIA Networking Technologies, Inc.
   3  * All rights reserved.
   4  *
   5  * This program is free software; you can redistribute it and/or modify
   6  * it under the terms of the GNU General Public License as published by
   7  * the Free Software Foundation; either version 2 of the License, or
   8  * (at your option) any later version.
   9  *
  10  * This program is distributed in the hope that it will be useful,
  11  * but WITHOUT ANY WARRANTY; without even the implied warranty of
  12  * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
  13  * GNU General Public License for more details.
  14  *
  15  * You should have received a copy of the GNU General Public License along
  16  * with this program; if not, write to the Free Software Foundation, Inc.,
  17  * 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301 USA.
  18  *
  19  * File: rxtx.c
  20  *
  21  * Purpose: handle WMAC/802.3/802.11 rx & tx functions
  22  *
  23  * Author: Lyndon Chen
  24  *
  25  * Date: May 20, 2003
  26  *
  27  * Functions:
  28  *      s_vGenerateTxParameter - Generate tx dma required parameter.
  29  *      s_vGenerateMACHeader - Translate 802.3 to 802.11 header
  30  *      csBeacon_xmit - beacon tx function
  31  *      csMgmt_xmit - management tx function
  32  *      s_uGetDataDuration - get tx data required duration
  33  *      s_uFillDataHead- fulfill tx data duration header
  34  *      s_uGetRTSCTSDuration- get rtx/cts required duration
  35  *      s_uGetRTSCTSRsvTime- get rts/cts reserved time
  36  *      s_uGetTxRsvTime- get frame reserved time
  37  *      s_vFillCTSHead- fulfill CTS ctl header
  38  *      s_vFillFragParameter- Set fragment ctl parameter.
  39  *      s_vFillRTSHead- fulfill RTS ctl header
  40  *      s_vFillTxKey- fulfill tx encrypt key
  41  *      s_vSWencryption- Software encrypt header
  42  *      vDMA0_tx_80211- tx 802.11 frame via dma0
  43  *      vGenerateFIFOHeader- Generate tx FIFO ctl header
  44  *
  45  * Revision History:
  46  *
  47  */
  48
  49 #include "device.h"
  50 #include "rxtx.h"
  51 #include "tether.h"
  52 #include "card.h"
  53 #include "bssdb.h"
  54 #include "mac.h"
  55 #include "michael.h"
  56 #include "tkip.h"
  57 #include "tcrc.h"
  58 #include "wctl.h"
  59 #include "hostap.h"
  60 #include "rf.h"
  61 #include "datarate.h"
  62 #include "usbpipe.h"
  63 #include "iocmd.h"
  64
  65 static int          msglevel                = MSG_LEVEL_INFO;
  66
  67 const u16 wTimeStampOff[2][MAX_RATE] = {
  68         {384, 288, 226, 209, 54, 43, 37, 31, 28, 25, 24, 23}, // Long Preamble
  69         {384, 192, 130, 113, 54, 43, 37, 31, 28, 25, 24, 23}, // Short Preamble
  70     };
  71
  72 const u16 wFB_Opt0[2][5] = {
  73         {RATE_12M, RATE_18M, RATE_24M, RATE_36M, RATE_48M}, // fallback_rate0
  74         {RATE_12M, RATE_12M, RATE_18M, RATE_24M, RATE_36M}, // fallback_rate1
  75     };
  76 const u16 wFB_Opt1[2][5] = {
  77         {RATE_12M, RATE_18M, RATE_24M, RATE_24M, RATE_36M}, // fallback_rate0
  78         {RATE_6M , RATE_6M,  RATE_12M, RATE_12M, RATE_18M}, // fallback_rate1
  79     };
  80
  81 #define RTSDUR_BB       0
  82 #define RTSDUR_BA       1
  83 #define RTSDUR_AA       2
  84 #define CTSDUR_BA       3
  85 #define RTSDUR_BA_F0    4
  86 #define RTSDUR_AA_F0    5
  87 #define RTSDUR_BA_F1    6
  88 #define RTSDUR_AA_F1    7
  89 #define CTSDUR_BA_F0    8
  90 #define CTSDUR_BA_F1    9
  91 #define DATADUR_B       10
  92 #define DATADUR_A       11
  93 #define DATADUR_A_F0    12
  94 #define DATADUR_A_F1    13
  95
  96 static void s_vSaveTxPktInfo(struct vnt_private *pDevice, u8 byPktNum,
  97         u8 *pbyDestAddr, u16 wPktLength, u16 wFIFOCtl);
  98
  99 static void *s_vGetFreeContext(struct vnt_private *pDevice);
 100
 101 static void s_vGenerateTxParameter(struct vnt_private *pDevice,
 102         u8 byPktType, u16 wCurrentRate, struct vnt_tx_buffer *tx_buffer,
 103         struct vnt_mic_hdr **mic_hdr, u32 need_mic, u32 cbFrameSize,
 104         int bNeedACK, u32 uDMAIdx, struct ethhdr *psEthHeader, bool need_rts);
 105
 106 static u32 s_uFillDataHead(struct vnt_private *pDevice,
 107         u8 byPktType, u16 wCurrentRate, void *pTxDataHead, u32 cbFrameLength,
 108         u32 uDMAIdx, int bNeedAck, u8 byFBOption);
 109
 110 static void s_vGenerateMACHeader(struct vnt_private *pDevice,
 111         u8 *pbyBufferAddr, u16 wDuration, struct ethhdr *psEthHeader,
 112         int bNeedEncrypt, u16 wFragType, u32 uDMAIdx, u32 uFragIdx);
 113
 114 static void s_vFillTxKey(struct vnt_private *pDevice, u8 *pbyBuf,
 115         u8 *pbyIVHead, PSKeyItem pTransmitKey, u8 *pbyHdrBuf, u16 wPayloadLen,
 116         struct vnt_mic_hdr *mic_hdr);
 117
 118 static void s_vSWencryption(struct vnt_private *pDevice,
 119         PSKeyItem pTransmitKey, u8 *pbyPayloadHead, u16 wPayloadSize);
 120
 121 static unsigned int s_uGetTxRsvTime(struct vnt_private *pDevice, u8 byPktType,
 122         u32 cbFrameLength, u16 wRate, int bNeedAck);
 123
 124 static u16 s_uGetRTSCTSRsvTime(struct vnt_private *pDevice, u8 byRTSRsvType,
 125         u8 byPktType, u32 cbFrameLength, u16 wCurrentRate);
 126
 127 static void s_vFillCTSHead(struct vnt_private *pDevice, u32 uDMAIdx,
 128         u8 byPktType, union vnt_tx_data_head *head, u32 cbFrameLength,
 129         int bNeedAck, u16 wCurrentRate, u8 byFBOption);
 130
 131 static void s_vFillRTSHead(struct vnt_private *pDevice, u8 byPktType,
 132         union vnt_tx_data_head *head, u32 cbFrameLength, int bNeedAck,
 133         struct ethhdr *psEthHeader, u16 wCurrentRate, u8 byFBOption);
 134
 135 static u16 s_uGetDataDuration(struct vnt_private *pDevice,
 136         u8 byPktType, int bNeedAck);
 137
 138 static u16 s_uGetRTSCTSDuration(struct vnt_private *pDevice,
 139         u8 byDurType, u32 cbFrameLength, u8 byPktType, u16 wRate,
 140         int bNeedAck, u8 byFBOption);
 141
 142 static void *s_vGetFreeContext(struct vnt_private *pDevice)
 143 {
 144         struct vnt_usb_send_context *pContext = NULL;
 145         struct vnt_usb_send_context *pReturnContext = NULL;
 146         int ii;
 147
 148     DBG_PRT(MSG_LEVEL_DEBUG, KERN_INFO"GetFreeContext()\n");
 149
 150     for (ii = 0; ii < pDevice->cbTD; ii++) {
 151         if (!pDevice->apTD[ii])
 152                 return NULL;
 153         pContext = pDevice->apTD[ii];
 154         if (pContext->bBoolInUse == false) {
 155             pContext->bBoolInUse = true;
 156                 memset(pContext->Data, 0, MAX_TOTAL_SIZE_WITH_ALL_HEADERS);
 157             pReturnContext = pContext;
 158             break;
 159         }
 160     }
 161     if ( ii == pDevice->cbTD ) {
 162         DBG_PRT(MSG_LEVEL_DEBUG, KERN_INFO"No Free Tx Context\n");
 163     }
 164     return (void *) pReturnContext;
 165 }
 166
 167 static void s_vSaveTxPktInfo(struct vnt_private *pDevice, u8 byPktNum,
 168         u8 *pbyDestAddr, u16 wPktLength, u16 wFIFOCtl)
 169 {
 170         PSStatCounter pStatistic = &pDevice->scStatistic;
 171
 172     if (is_broadcast_ether_addr(pbyDestAddr))
 173         pStatistic->abyTxPktInfo[byPktNum].byBroadMultiUni = TX_PKT_BROAD;
 174     else if (is_multicast_ether_addr(pbyDestAddr))
 175         pStatistic->abyTxPktInfo[byPktNum].byBroadMultiUni = TX_PKT_MULTI;
 176     else
 177         pStatistic->abyTxPktInfo[byPktNum].byBroadMultiUni = TX_PKT_UNI;
 178
 179     pStatistic->abyTxPktInfo[byPktNum].wLength = wPktLength;
 180     pStatistic->abyTxPktInfo[byPktNum].wFIFOCtl = wFIFOCtl;
 181     memcpy(pStatistic->abyTxPktInfo[byPktNum].abyDestAddr,
 182            pbyDestAddr,
 183            ETH_ALEN);
 184 }
 185
 186 static void s_vFillTxKey(struct vnt_private *pDevice, u8 *pbyBuf,
 187         u8 *pbyIVHead, PSKeyItem pTransmitKey, u8 *pbyHdrBuf,
 188         u16 wPayloadLen, struct vnt_mic_hdr *mic_hdr)
 189 {
 190         u32 *pdwIV = (u32 *)pbyIVHead;
 191         u32 *pdwExtIV = (u32 *)((u8 *)pbyIVHead + 4);
 192         struct ieee80211_hdr *pMACHeader = (struct ieee80211_hdr *)pbyHdrBuf;
 193         u32 dwRevIVCounter;
 194
 195         /* Fill TXKEY */
 196         if (pTransmitKey == NULL)
 197                 return;
 198
 199         dwRevIVCounter = cpu_to_le32(pDevice->dwIVCounter);
 200         *pdwIV = pDevice->dwIVCounter;
 201         pDevice->byKeyIndex = pTransmitKey->dwKeyIndex & 0xf;
 202
 203         switch (pTransmitKey->byCipherSuite) {
 204         case KEY_CTL_WEP:
 205                 if (pTransmitKey->uKeyLength == WLAN_WEP232_KEYLEN) {
 206                         memcpy(pDevice->abyPRNG, (u8 *)&dwRevIVCounter, 3);
 207                         memcpy(pDevice->abyPRNG + 3, pTransmitKey->abyKey,
 208                                                 pTransmitKey->uKeyLength);
 209                 } else {
 210                         memcpy(pbyBuf, (u8 *)&dwRevIVCounter, 3);
 211                         memcpy(pbyBuf + 3, pTransmitKey->abyKey,
 212                                                 pTransmitKey->uKeyLength);
 213                         if (pTransmitKey->uKeyLength == WLAN_WEP40_KEYLEN) {
 214                                 memcpy(pbyBuf+8, (u8 *)&dwRevIVCounter, 3);
 215                         memcpy(pbyBuf+11, pTransmitKey->abyKey,
 216                                                 pTransmitKey->uKeyLength);
 217                         }
 218
 219                         memcpy(pDevice->abyPRNG, pbyBuf, 16);
 220                 }
 221                 /* Append IV after Mac Header */
 222                 *pdwIV &= WEP_IV_MASK;
 223                 *pdwIV |= (u32)pDevice->byKeyIndex << 30;
 224                 *pdwIV = cpu_to_le32(*pdwIV);
 225
 226                 pDevice->dwIVCounter++;
 227                 if (pDevice->dwIVCounter > WEP_IV_MASK)
 228                         pDevice->dwIVCounter = 0;
 229
 230                 break;
 231         case KEY_CTL_TKIP:
 232                 pTransmitKey->wTSC15_0++;
 233                 if (pTransmitKey->wTSC15_0 == 0)
 234                         pTransmitKey->dwTSC47_16++;
 235
 236                 TKIPvMixKey(pTransmitKey->abyKey, pDevice->abyCurrentNetAddr,
 237                         pTransmitKey->wTSC15_0, pTransmitKey->dwTSC47_16,
 238                                                         pDevice->abyPRNG);
 239                 memcpy(pbyBuf, pDevice->abyPRNG, 16);
 240
 241                 /* Make IV */
 242                 memcpy(pdwIV, pDevice->abyPRNG, 3);
 243
 244                 *(pbyIVHead+3) = (u8)(((pDevice->byKeyIndex << 6) &
 245                                                         0xc0) | 0x20);
 246                 /*  Append IV&ExtIV after Mac Header */
 247                 *pdwExtIV = cpu_to_le32(pTransmitKey->dwTSC47_16);
 248
 249                 DBG_PRT(MSG_LEVEL_DEBUG, KERN_INFO
 250                         "vFillTxKey()---- pdwExtIV: %x\n", *pdwExtIV);
 251
 252                 break;
 253         case KEY_CTL_CCMP:
 254                 pTransmitKey->wTSC15_0++;
 255                 if (pTransmitKey->wTSC15_0 == 0)
 256                         pTransmitKey->dwTSC47_16++;
 257
 258                 memcpy(pbyBuf, pTransmitKey->abyKey, 16);
 259
 260                 /* Make IV */
 261                 *pdwIV = 0;
 262                 *(pbyIVHead+3) = (u8)(((pDevice->byKeyIndex << 6) &
 263                                                         0xc0) | 0x20);
 264
 265                 *pdwIV |= cpu_to_le16((u16)(pTransmitKey->wTSC15_0));
 266
 267                 /* Append IV&ExtIV after Mac Header */
 268                 *pdwExtIV = cpu_to_le32(pTransmitKey->dwTSC47_16);
 269
 270                 if (!mic_hdr)
 271                         return;
 272
 273                 /* MICHDR0 */
 274                 mic_hdr->id = 0x59;
 275                 mic_hdr->payload_len = cpu_to_be16(wPayloadLen);
 276                 memcpy(mic_hdr->mic_addr2, pMACHeader->addr2, ETH_ALEN);
 277
 278                 mic_hdr->tsc_47_16 = cpu_to_be32(pTransmitKey->dwTSC47_16);
 279                 mic_hdr->tsc_15_0 = cpu_to_be16(pTransmitKey->wTSC15_0);
 280
 281                 /* MICHDR1 */
 282                 if (pDevice->bLongHeader)
 283                         mic_hdr->hlen = cpu_to_be16(28);
 284                 else
 285                         mic_hdr->hlen = cpu_to_be16(22);
 286
 287                 memcpy(mic_hdr->addr1, pMACHeader->addr1, ETH_ALEN);
 288                 memcpy(mic_hdr->addr2, pMACHeader->addr2, ETH_ALEN);
 289
 290                 /* MICHDR2 */
 291                 memcpy(mic_hdr->addr3, pMACHeader->addr3, ETH_ALEN);
 292                 mic_hdr->frame_control = cpu_to_le16(pMACHeader->frame_control
 293                                                                 & 0xc78f);
 294                 mic_hdr->seq_ctrl = cpu_to_le16(pMACHeader->seq_ctrl & 0xf);
 295
 296                 if (pDevice->bLongHeader)
 297                         memcpy(mic_hdr->addr4, pMACHeader->addr4, ETH_ALEN);
 298         }
 299 }
 300
 301 static void s_vSWencryption(struct vnt_private *pDevice,
 302         PSKeyItem pTransmitKey, u8 *pbyPayloadHead, u16 wPayloadSize)
 303 {
 304         u32 cbICVlen = 4;
 305         u32 dwICV = 0xffffffff;
 306         u32 *pdwICV;
 307
 308     if (pTransmitKey == NULL)
 309         return;
 310
 311     if (pTransmitKey->byCipherSuite == KEY_CTL_WEP) {
 312         //=======================================================================
 313         // Append ICV after payload
 314         dwICV = CRCdwGetCrc32Ex(pbyPayloadHead, wPayloadSize, dwICV);//ICV(Payload)
 315         pdwICV = (u32 *)(pbyPayloadHead + wPayloadSize);
 316         // finally, we must invert dwCRC to get the correct answer
 317         *pdwICV = cpu_to_le32(~dwICV);
 318         // RC4 encryption
 319         rc4_init(&pDevice->SBox, pDevice->abyPRNG, pTransmitKey->uKeyLength + 3);
 320         rc4_encrypt(&pDevice->SBox, pbyPayloadHead, pbyPayloadHead, wPayloadSize+cbICVlen);
 321         //=======================================================================
 322     } else if (pTransmitKey->byCipherSuite == KEY_CTL_TKIP) {
 323         //=======================================================================
 324         //Append ICV after payload
 325         dwICV = CRCdwGetCrc32Ex(pbyPayloadHead, wPayloadSize, dwICV);//ICV(Payload)
 326         pdwICV = (u32 *)(pbyPayloadHead + wPayloadSize);
 327         // finally, we must invert dwCRC to get the correct answer
 328         *pdwICV = cpu_to_le32(~dwICV);
 329         // RC4 encryption
 330         rc4_init(&pDevice->SBox, pDevice->abyPRNG, TKIP_KEY_LEN);
 331         rc4_encrypt(&pDevice->SBox, pbyPayloadHead, pbyPayloadHead, wPayloadSize+cbICVlen);
 332         //=======================================================================
 333     }
 334 }
 335
 336 static u16 vnt_time_stamp_off(struct vnt_private *priv, u16 rate)
 337 {
 338         return cpu_to_le16(wTimeStampOff[priv->byPreambleType % 2]
 339                                                         [rate % MAX_RATE]);
 340 }
 341
 342 /*byPktType : PK_TYPE_11A     0
 343              PK_TYPE_11B     1
 344              PK_TYPE_11GB    2
 345              PK_TYPE_11GA    3
 346 */
 347 static u32 s_uGetTxRsvTime(struct vnt_private *pDevice, u8 byPktType,
 348         u32 cbFrameLength, u16 wRate, int bNeedAck)
 349 {
 350         u32 uDataTime, uAckTime;
 351
 352     uDataTime = BBuGetFrameTime(pDevice->byPreambleType, byPktType, cbFrameLength, wRate);
 353     if (byPktType == PK_TYPE_11B) {//llb,CCK mode
 354         uAckTime = BBuGetFrameTime(pDevice->byPreambleType, byPktType, 14, (u16)pDevice->byTopCCKBasicRate);
 355     } else {//11g 2.4G OFDM mode & 11a 5G OFDM mode
 356         uAckTime = BBuGetFrameTime(pDevice->byPreambleType, byPktType, 14, (u16)pDevice->byTopOFDMBasicRate);
 357     }
 358
 359     if (bNeedAck) {
 360         return (uDataTime + pDevice->uSIFS + uAckTime);
 361     }
 362     else {
 363         return uDataTime;
 364     }
 365 }
 366
 367 static u16 vnt_rxtx_rsvtime_le16(struct vnt_private *priv, u8 pkt_type,
 368         u32 frame_length, u16 rate, int need_ack)
 369 {
 370         return cpu_to_le16((u16)s_uGetTxRsvTime(priv, pkt_type,
 371                 frame_length, rate, need_ack));
 372 }
 373
 374 //byFreqType: 0=>5GHZ 1=>2.4GHZ
 375 static u16 s_uGetRTSCTSRsvTime(struct vnt_private *pDevice,
 376         u8 byRTSRsvType, u8 byPktType, u32 cbFrameLength, u16 wCurrentRate)
 377 {
 378         u32 uRrvTime, uRTSTime, uCTSTime, uAckTime, uDataTime;
 379
 380     uRrvTime = uRTSTime = uCTSTime = uAckTime = uDataTime = 0;
 381
 382     uDataTime = BBuGetFrameTime(pDevice->byPreambleType, byPktType, cbFrameLength, wCurrentRate);
 383     if (byRTSRsvType == 0) { //RTSTxRrvTime_bb
 384         uRTSTime = BBuGetFrameTime(pDevice->byPreambleType, byPktType, 20, pDevice->byTopCCKBasicRate);
 385         uCTSTime = uAckTime = BBuGetFrameTime(pDevice->byPreambleType, byPktType, 14, pDevice->byTopCCKBasicRate);
 386     }
 387     else if (byRTSRsvType == 1){ //RTSTxRrvTime_ba, only in 2.4GHZ
 388         uRTSTime = BBuGetFrameTime(pDevice->byPreambleType, byPktType, 20, pDevice->byTopCCKBasicRate);
 389         uCTSTime = BBuGetFrameTime(pDevice->byPreambleType, byPktType, 14, pDevice->byTopCCKBasicRate);
 390         uAckTime = BBuGetFrameTime(pDevice->byPreambleType, byPktType, 14, pDevice->byTopOFDMBasicRate);
 391     }
 392     else if (byRTSRsvType == 2) { //RTSTxRrvTime_aa
 393         uRTSTime = BBuGetFrameTime(pDevice->byPreambleType, byPktType, 20, pDevice->byTopOFDMBasicRate);
 394         uCTSTime = uAckTime = BBuGetFrameTime(pDevice->byPreambleType, byPktType, 14, pDevice->byTopOFDMBasicRate);
 395     }
 396     else if (byRTSRsvType == 3) { //CTSTxRrvTime_ba, only in 2.4GHZ
 397         uCTSTime = BBuGetFrameTime(pDevice->byPreambleType, byPktType, 14, pDevice->byTopCCKBasicRate);
 398         uAckTime = BBuGetFrameTime(pDevice->byPreambleType, byPktType, 14, pDevice->byTopOFDMBasicRate);
 399         uRrvTime = uCTSTime + uAckTime + uDataTime + 2*pDevice->uSIFS;
 400         return uRrvTime;
 401     }
 402
 403     //RTSRrvTime
 404     uRrvTime = uRTSTime + uCTSTime + uAckTime + uDataTime + 3*pDevice->uSIFS;
 405         return cpu_to_le16((u16)uRrvTime);
 406 }
 407
 408 //byFreqType 0: 5GHz, 1:2.4Ghz
 409 static u16 s_uGetDataDuration(struct vnt_private *pDevice,
 410                                         u8 byPktType, int bNeedAck)
 411 {
 412         u32 uAckTime = 0;
 413
 414         if (bNeedAck) {
 415                 if (byPktType == PK_TYPE_11B)
 416                         uAckTime = BBuGetFrameTime(pDevice->byPreambleType,
 417                                 byPktType, 14, pDevice->byTopCCKBasicRate);
 418                 else
 419                         uAckTime = BBuGetFrameTime(pDevice->byPreambleType,
 420                                 byPktType, 14, pDevice->byTopOFDMBasicRate);
 421                 return cpu_to_le16((u16)(pDevice->uSIFS + uAckTime));
 422         }
 423
 424         return 0;
 425 }
 426
 427 //byFreqType: 0=>5GHZ 1=>2.4GHZ
 428 static u16 s_uGetRTSCTSDuration(struct vnt_private *pDevice, u8 byDurType,
 429         u32 cbFrameLength, u8 byPktType, u16 wRate, int bNeedAck,
 430         u8 byFBOption)
 431 {
 432         u32 uCTSTime = 0, uDurTime = 0;
 433
 434     switch (byDurType) {
 435
 436     case RTSDUR_BB:    //RTSDuration_bb
 437         uCTSTime = BBuGetFrameTime(pDevice->byPreambleType, byPktType, 14, pDevice->byTopCCKBasicRate);
 438         uDurTime = uCTSTime + 2*pDevice->uSIFS + s_uGetTxRsvTime(pDevice, byPktType, cbFrameLength, wRate, bNeedAck);
 439         break;
 440
 441     case RTSDUR_BA:    //RTSDuration_ba
 442         uCTSTime = BBuGetFrameTime(pDevice->byPreambleType, byPktType, 14, pDevice->byTopCCKBasicRate);
 443         uDurTime = uCTSTime + 2*pDevice->uSIFS + s_uGetTxRsvTime(pDevice, byPktType, cbFrameLength, wRate, bNeedAck);
 444         break;
 445
 446     case RTSDUR_AA:    //RTSDuration_aa
 447         uCTSTime = BBuGetFrameTime(pDevice->byPreambleType, byPktType, 14, pDevice->byTopOFDMBasicRate);
 448         uDurTime = uCTSTime + 2*pDevice->uSIFS + s_uGetTxRsvTime(pDevice, byPktType, cbFrameLength, wRate, bNeedAck);
 449         break;
 450
 451     case CTSDUR_BA:    //CTSDuration_ba
 452         uDurTime = pDevice->uSIFS + s_uGetTxRsvTime(pDevice, byPktType, cbFrameLength, wRate, bNeedAck);
 453         break;
 454
 455     case RTSDUR_BA_F0: //RTSDuration_ba_f0
 456         uCTSTime = BBuGetFrameTime(pDevice->byPreambleType, byPktType, 14, pDevice->byTopCCKBasicRate);
 457         if ((byFBOption == AUTO_FB_0) && (wRate >= RATE_18M) && (wRate <=RATE_54M)) {
 458             uDurTime = uCTSTime + 2*pDevice->uSIFS + s_uGetTxRsvTime(pDevice, byPktType, cbFrameLength, wFB_Opt0[FB_RATE0][wRate-RATE_18M], bNeedAck);
 459         } else if ((byFBOption == AUTO_FB_1) && (wRate >= RATE_18M) && (wRate <=RATE_54M)) {
 460             uDurTime = uCTSTime + 2*pDevice->uSIFS + s_uGetTxRsvTime(pDevice, byPktType, cbFrameLength, wFB_Opt1[FB_RATE0][wRate-RATE_18M], bNeedAck);
 461         }
 462         break;
 463
 464     case RTSDUR_AA_F0: //RTSDuration_aa_f0
 465         uCTSTime = BBuGetFrameTime(pDevice->byPreambleType, byPktType, 14, pDevice->byTopOFDMBasicRate);
 466         if ((byFBOption == AUTO_FB_0) && (wRate >= RATE_18M) && (wRate <=RATE_54M)) {
 467             uDurTime = uCTSTime + 2*pDevice->uSIFS + s_uGetTxRsvTime(pDevice, byPktType, cbFrameLength, wFB_Opt0[FB_RATE0][wRate-RATE_18M], bNeedAck);
 468         } else if ((byFBOption == AUTO_FB_1) && (wRate >= RATE_18M) && (wRate <=RATE_54M)) {
 469             uDurTime = uCTSTime + 2*pDevice->uSIFS + s_uGetTxRsvTime(pDevice, byPktType, cbFrameLength, wFB_Opt1[FB_RATE0][wRate-RATE_18M], bNeedAck);
 470         }
 471         break;
 472
 473     case RTSDUR_BA_F1: //RTSDuration_ba_f1
 474         uCTSTime = BBuGetFrameTime(pDevice->byPreambleType, byPktType, 14, pDevice->byTopCCKBasicRate);
 475         if ((byFBOption == AUTO_FB_0) && (wRate >= RATE_18M) && (wRate <=RATE_54M)) {
 476             uDurTime = uCTSTime + 2*pDevice->uSIFS + s_uGetTxRsvTime(pDevice, byPktType, cbFrameLength, wFB_Opt0[FB_RATE1][wRate-RATE_18M], bNeedAck);
 477         } else if ((byFBOption == AUTO_FB_1) && (wRate >= RATE_18M) && (wRate <=RATE_54M)) {
 478             uDurTime = uCTSTime + 2*pDevice->uSIFS + s_uGetTxRsvTime(pDevice, byPktType, cbFrameLength, wFB_Opt1[FB_RATE1][wRate-RATE_18M], bNeedAck);
 479         }
 480         break;
 481
 482     case RTSDUR_AA_F1: //RTSDuration_aa_f1
 483         uCTSTime = BBuGetFrameTime(pDevice->byPreambleType, byPktType, 14, pDevice->byTopOFDMBasicRate);
 484         if ((byFBOption == AUTO_FB_0) && (wRate >= RATE_18M) && (wRate <=RATE_54M)) {
 485             uDurTime = uCTSTime + 2*pDevice->uSIFS + s_uGetTxRsvTime(pDevice, byPktType, cbFrameLength, wFB_Opt0[FB_RATE1][wRate-RATE_18M], bNeedAck);
 486         } else if ((byFBOption == AUTO_FB_1) && (wRate >= RATE_18M) && (wRate <=RATE_54M)) {
 487             uDurTime = uCTSTime + 2*pDevice->uSIFS + s_uGetTxRsvTime(pDevice, byPktType, cbFrameLength, wFB_Opt1[FB_RATE1][wRate-RATE_18M], bNeedAck);
 488         }
 489         break;
 490
 491     case CTSDUR_BA_F0: //CTSDuration_ba_f0
 492         if ((byFBOption == AUTO_FB_0) && (wRate >= RATE_18M) && (wRate <=RATE_54M)) {
 493             uDurTime = pDevice->uSIFS + s_uGetTxRsvTime(pDevice, byPktType, cbFrameLength, wFB_Opt0[FB_RATE0][wRate-RATE_18M], bNeedAck);
 494         } else if ((byFBOption == AUTO_FB_1) && (wRate >= RATE_18M) && (wRate <=RATE_54M)) {
 495             uDurTime = pDevice->uSIFS + s_uGetTxRsvTime(pDevice, byPktType, cbFrameLength, wFB_Opt1[FB_RATE0][wRate-RATE_18M], bNeedAck);
 496         }
 497         break;
 498
 499     case CTSDUR_BA_F1: //CTSDuration_ba_f1
 500         if ((byFBOption == AUTO_FB_0) && (wRate >= RATE_18M) && (wRate <=RATE_54M)) {
 501             uDurTime = pDevice->uSIFS + s_uGetTxRsvTime(pDevice, byPktType, cbFrameLength, wFB_Opt0[FB_RATE1][wRate-RATE_18M], bNeedAck);
 502         } else if ((byFBOption == AUTO_FB_1) && (wRate >= RATE_18M) && (wRate <=RATE_54M)) {
 503             uDurTime = pDevice->uSIFS + s_uGetTxRsvTime(pDevice, byPktType, cbFrameLength, wFB_Opt1[FB_RATE1][wRate-RATE_18M], bNeedAck);
 504         }
 505         break;
 506
 507     default:
 508         break;
 509     }
 510
 511         return cpu_to_le16((u16)uDurTime);
 512 }
 513
 514 static u32 s_uFillDataHead(struct vnt_private *pDevice,
 515         u8 byPktType, u16 wCurrentRate, void *pTxDataHead, u32 cbFrameLength,
 516         u32 uDMAIdx, int bNeedAck, u8 byFBOption)
 517 {
 518
 519     if (pTxDataHead == NULL) {
 520         return 0;
 521     }
 522
 523     if (byPktType == PK_TYPE_11GB || byPktType == PK_TYPE_11GA) {
 524             if (byFBOption == AUTO_FB_NONE) {
 525                 struct vnt_tx_datahead_g *pBuf =
 526                                 (struct vnt_tx_datahead_g *)pTxDataHead;
 527                 //Get SignalField,ServiceField,Length
 528                 BBvCalculateParameter(pDevice, cbFrameLength, wCurrentRate,
 529                         byPktType, &pBuf->a);
 530                 BBvCalculateParameter(pDevice, cbFrameLength,
 531                         pDevice->byTopCCKBasicRate, PK_TYPE_11B, &pBuf->b);
 532                 //Get Duration and TimeStamp
 533                 pBuf->wDuration_a = s_uGetDataDuration(pDevice,
 534                                                         byPktType, bNeedAck);
 535                 pBuf->wDuration_b = s_uGetDataDuration(pDevice,
 536                                                         PK_TYPE_11B, bNeedAck);
 537
 538                 pBuf->wTimeStampOff_a = vnt_time_stamp_off(pDevice,
 539                                                                 wCurrentRate);
 540                 pBuf->wTimeStampOff_b = vnt_time_stamp_off(pDevice,
 541                                                 pDevice->byTopCCKBasicRate);
 542                 return (pBuf->wDuration_a);
 543              } else {
 544                 // Auto Fallback
 545                 struct vnt_tx_datahead_g_fb *pBuf =
 546                         (struct vnt_tx_datahead_g_fb *)pTxDataHead;
 547                 //Get SignalField,ServiceField,Length
 548                 BBvCalculateParameter(pDevice, cbFrameLength, wCurrentRate,
 549                         byPktType, &pBuf->a);
 550                 BBvCalculateParameter(pDevice, cbFrameLength,
 551                         pDevice->byTopCCKBasicRate, PK_TYPE_11B, &pBuf->b);
 552                 //Get Duration and TimeStamp
 553                 pBuf->wDuration_a = s_uGetDataDuration(pDevice,
 554                                                         byPktType, bNeedAck);
 555                 pBuf->wDuration_b = s_uGetDataDuration(pDevice,
 556                                                         PK_TYPE_11B, bNeedAck);
 557                 pBuf->wDuration_a_f0 = s_uGetDataDuration(pDevice,
 558                                                         byPktType, bNeedAck);
 559                 pBuf->wDuration_a_f1 = s_uGetDataDuration(pDevice,
 560                                                         byPktType, bNeedAck);
 561                 pBuf->wTimeStampOff_a = vnt_time_stamp_off(pDevice,
 562                                                                 wCurrentRate);
 563                 pBuf->wTimeStampOff_b = vnt_time_stamp_off(pDevice,
 564                                                 pDevice->byTopCCKBasicRate);
 565                 return (pBuf->wDuration_a);
 566             } //if (byFBOption == AUTO_FB_NONE)
 567     }
 568     else if (byPktType == PK_TYPE_11A) {
 569         if (byFBOption != AUTO_FB_NONE) {
 570                 struct vnt_tx_datahead_a_fb *pBuf =
 571                         (struct vnt_tx_datahead_a_fb *)pTxDataHead;
 572             //Get SignalField,ServiceField,Length
 573                 BBvCalculateParameter(pDevice, cbFrameLength, wCurrentRate,
 574                         byPktType, &pBuf->a);
 575             //Get Duration and TimeStampOff
 576                 pBuf->wDuration = s_uGetDataDuration(pDevice,
 577                                         byPktType, bNeedAck);
 578                 pBuf->wDuration_f0 = s_uGetDataDuration(pDevice,
 579                                         byPktType, bNeedAck);
 580                 pBuf->wDuration_f1 = s_uGetDataDuration(pDevice,
 581                                                         byPktType, bNeedAck);
 582                 pBuf->wTimeStampOff = vnt_time_stamp_off(pDevice,
 583                                                                 wCurrentRate);
 584             return (pBuf->wDuration);
 585         } else {
 586                 struct vnt_tx_datahead_ab *pBuf =
 587                         (struct vnt_tx_datahead_ab *)pTxDataHead;
 588             //Get SignalField,ServiceField,Length
 589                 BBvCalculateParameter(pDevice, cbFrameLength, wCurrentRate,
 590                         byPktType, &pBuf->ab);
 591             //Get Duration and TimeStampOff
 592                 pBuf->wDuration = s_uGetDataDuration(pDevice,
 593                                 byPktType, bNeedAck);
 594                 pBuf->wTimeStampOff = vnt_time_stamp_off(pDevice,
 595                                                                 wCurrentRate);
 596             return (pBuf->wDuration);
 597         }
 598     }
 599     else if (byPktType == PK_TYPE_11B) {
 600                 struct vnt_tx_datahead_ab *pBuf =
 601                         (struct vnt_tx_datahead_ab *)pTxDataHead;
 602             //Get SignalField,ServiceField,Length
 603                 BBvCalculateParameter(pDevice, cbFrameLength, wCurrentRate,
 604                         byPktType, &pBuf->ab);
 605             //Get Duration and TimeStampOff
 606                 pBuf->wDuration = s_uGetDataDuration(pDevice,
 607                                 byPktType, bNeedAck);
 608                 pBuf->wTimeStampOff = vnt_time_stamp_off(pDevice,
 609                                                                 wCurrentRate);
 610             return (pBuf->wDuration);
 611     }
 612     return 0;
 613 }
 614
 615 static int vnt_fill_ieee80211_rts(struct vnt_private *priv,
 616         struct ieee80211_rts *rts, struct ethhdr *eth_hdr,
 617                 u16 duration)
 618 {
 619         rts->duration = duration;
 620         rts->frame_control = TYPE_CTL_RTS;
 621
 622         if (priv->eOPMode == OP_MODE_ADHOC || priv->eOPMode == OP_MODE_AP)
 623                 memcpy(rts->ra, eth_hdr->h_dest, ETH_ALEN);
 624         else
 625                 memcpy(rts->ra, priv->abyBSSID, ETH_ALEN);
 626
 627         if (priv->eOPMode == OP_MODE_AP)
 628                 memcpy(rts->ta, priv->abyBSSID, ETH_ALEN);
 629         else
 630                 memcpy(rts->ta, eth_hdr->h_source, ETH_ALEN);
 631
 632         return 0;
 633 }
 634
 635 static int vnt_rxtx_rts_g_head(struct vnt_private *priv,
 636         struct vnt_rts_g *buf, struct ethhdr *eth_hdr,
 637         u8 pkt_type, u32 frame_len, int need_ack,
 638         u16 current_rate, u8 fb_option)
 639 {
 640         u16 rts_frame_len = 20;
 641
 642         BBvCalculateParameter(priv, rts_frame_len, priv->byTopCCKBasicRate,
 643                 PK_TYPE_11B, &buf->b);
 644         BBvCalculateParameter(priv, rts_frame_len,
 645                 priv->byTopOFDMBasicRate, pkt_type, &buf->a);
 646
 647         buf->wDuration_bb = s_uGetRTSCTSDuration(priv, RTSDUR_BB, frame_len,
 648                 PK_TYPE_11B, priv->byTopCCKBasicRate, need_ack, fb_option);
 649         buf->wDuration_aa = s_uGetRTSCTSDuration(priv, RTSDUR_AA, frame_len,
 650                 pkt_type, current_rate, need_ack, fb_option);
 651         buf->wDuration_ba = s_uGetRTSCTSDuration(priv, RTSDUR_BA, frame_len,
 652                 pkt_type, current_rate, need_ack, fb_option);
 653
 654         vnt_fill_ieee80211_rts(priv, &buf->data, eth_hdr, buf->wDuration_aa);
 655
 656         return 0;
 657 }
 658
 659 static int vnt_rxtx_rts_g_fb_head(struct vnt_private *priv,
 660         struct vnt_rts_g_fb *buf, struct ethhdr *eth_hdr,
 661         u8 pkt_type, u32 frame_len, int need_ack,
 662         u16 current_rate, u8 fb_option)
 663 {
 664         u16 rts_frame_len = 20;
 665
 666         BBvCalculateParameter(priv, rts_frame_len, priv->byTopCCKBasicRate,
 667                 PK_TYPE_11B, &buf->b);
 668         BBvCalculateParameter(priv, rts_frame_len,
 669                 priv->byTopOFDMBasicRate, pkt_type, &buf->a);
 670
 671
 672         buf->wDuration_bb = s_uGetRTSCTSDuration(priv, RTSDUR_BB, frame_len,
 673                 PK_TYPE_11B, priv->byTopCCKBasicRate, need_ack, fb_option);
 674         buf->wDuration_aa = s_uGetRTSCTSDuration(priv, RTSDUR_AA, frame_len,
 675                 pkt_type, current_rate, need_ack, fb_option);
 676         buf->wDuration_ba = s_uGetRTSCTSDuration(priv, RTSDUR_BA, frame_len,
 677                 pkt_type, current_rate, need_ack, fb_option);
 678
 679
 680         buf->wRTSDuration_ba_f0 = s_uGetRTSCTSDuration(priv, RTSDUR_BA_F0,
 681                 frame_len, pkt_type, current_rate, need_ack, fb_option);
 682         buf->wRTSDuration_aa_f0 = s_uGetRTSCTSDuration(priv, RTSDUR_AA_F0,
 683                 frame_len, pkt_type, current_rate, need_ack, fb_option);
 684         buf->wRTSDuration_ba_f1 = s_uGetRTSCTSDuration(priv, RTSDUR_BA_F1,
 685                 frame_len, pkt_type, current_rate, need_ack, fb_option);
 686         buf->wRTSDuration_aa_f1 = s_uGetRTSCTSDuration(priv, RTSDUR_AA_F1,
 687                 frame_len, pkt_type, current_rate, need_ack, fb_option);
 688
 689         vnt_fill_ieee80211_rts(priv, &buf->data, eth_hdr, buf->wDuration_aa);
 690
 691         return 0;
 692 }
 693
 694 static int vnt_rxtx_rts_ab_head(struct vnt_private *priv,
 695         struct vnt_rts_ab *buf, struct ethhdr *eth_hdr,
 696         u8 pkt_type, u32 frame_len, int need_ack,
 697         u16 current_rate, u8 fb_option)
 698 {
 699         u16 rts_frame_len = 20;
 700
 701         BBvCalculateParameter(priv, rts_frame_len,
 702                 priv->byTopOFDMBasicRate, pkt_type, &buf->ab);
 703
 704         buf->wDuration = s_uGetRTSCTSDuration(priv, RTSDUR_AA, frame_len,
 705                 pkt_type, current_rate, need_ack, fb_option);
 706
 707         vnt_fill_ieee80211_rts(priv, &buf->data, eth_hdr, buf->wDuration);
 708
 709         return 0;
 710 }
 711
 712 static int vnt_rxtx_rts_a_fb_head(struct vnt_private *priv,
 713         struct vnt_rts_a_fb *buf, struct ethhdr *eth_hdr,
 714         u8 pkt_type, u32 frame_len, int need_ack,
 715         u16 current_rate, u8 fb_option)
 716 {
 717         u16 rts_frame_len = 20;
 718
 719         BBvCalculateParameter(priv, rts_frame_len,
 720                 priv->byTopOFDMBasicRate, pkt_type, &buf->a);
 721
 722         buf->wDuration = s_uGetRTSCTSDuration(priv, RTSDUR_AA, frame_len,
 723                 pkt_type, current_rate, need_ack, fb_option);
 724
 725         buf->wRTSDuration_f0 = s_uGetRTSCTSDuration(priv, RTSDUR_AA_F0,
 726                 frame_len, pkt_type, current_rate, need_ack, fb_option);
 727
 728         buf->wRTSDuration_f1 = s_uGetRTSCTSDuration(priv, RTSDUR_AA_F1,
 729                 frame_len, pkt_type, current_rate, need_ack, fb_option);
 730
 731         vnt_fill_ieee80211_rts(priv, &buf->data, eth_hdr, buf->wDuration);
 732
 733         return 0;
 734 }
 735
 736 static void s_vFillRTSHead(struct vnt_private *pDevice, u8 byPktType,
 737         union vnt_tx_data_head *head, u32 cbFrameLength, int bNeedAck,
 738         struct ethhdr *psEthHeader, u16 wCurrentRate, u8 byFBOption)
 739 {
 740
 741         if (!head)
 742                 return;
 743
 744         /* Note: So far RTSHead doesn't appear in ATIM
 745         *       & Beacom DMA, so we don't need to take them
 746         *       into account.
 747         *       Otherwise, we need to modified codes for them.
 748         */
 749         switch (byPktType) {
 750         case PK_TYPE_11GB:
 751         case PK_TYPE_11GA:
 752                 if (byFBOption == AUTO_FB_NONE)
 753                         vnt_rxtx_rts_g_head(pDevice, &head->rts_g,
 754                                 psEthHeader, byPktType, cbFrameLength,
 755                                 bNeedAck, wCurrentRate, byFBOption);
 756                 else
 757                         vnt_rxtx_rts_g_fb_head(pDevice, &head->rts_g_fb,
 758                                 psEthHeader, byPktType, cbFrameLength,
 759                                 bNeedAck, wCurrentRate, byFBOption);
 760                 break;
 761         case PK_TYPE_11A:
 762                 if (byFBOption) {
 763                         vnt_rxtx_rts_a_fb_head(pDevice, &head->rts_a_fb,
 764                                 psEthHeader, byPktType, cbFrameLength,
 765                                 bNeedAck, wCurrentRate, byFBOption);
 766                         break;
 767                 }
 768         case PK_TYPE_11B:
 769                 vnt_rxtx_rts_ab_head(pDevice, &head->rts_ab,
 770                         psEthHeader, byPktType, cbFrameLength,
 771                         bNeedAck, wCurrentRate, byFBOption);
 772         }
 773 }
 774
 775 static void s_vFillCTSHead(struct vnt_private *pDevice, u32 uDMAIdx,
 776         u8 byPktType, union vnt_tx_data_head *head, u32 cbFrameLength,
 777         int bNeedAck, u16 wCurrentRate, u8 byFBOption)
 778 {
 779         u32 uCTSFrameLen = 14;
 780
 781         if (!head)
 782                 return;
 783
 784         if (byFBOption != AUTO_FB_NONE) {
 785                 /* Auto Fall back */
 786                 struct vnt_cts_fb *pBuf = &head->cts_g_fb;
 787                 /* Get SignalField,ServiceField,Length */
 788                 BBvCalculateParameter(pDevice, uCTSFrameLen,
 789                         pDevice->byTopCCKBasicRate, PK_TYPE_11B, &pBuf->b);
 790                 pBuf->wDuration_ba = s_uGetRTSCTSDuration(pDevice, CTSDUR_BA,
 791                         cbFrameLength, byPktType,
 792                         wCurrentRate, bNeedAck, byFBOption);
 793                 /* Get CTSDuration_ba_f0 */
 794                 pBuf->wCTSDuration_ba_f0 = s_uGetRTSCTSDuration(pDevice,
 795                         CTSDUR_BA_F0, cbFrameLength, byPktType, wCurrentRate,
 796                         bNeedAck, byFBOption);
 797                 /* Get CTSDuration_ba_f1 */
 798                 pBuf->wCTSDuration_ba_f1 = s_uGetRTSCTSDuration(pDevice,
 799                         CTSDUR_BA_F1, cbFrameLength, byPktType, wCurrentRate,
 800                         bNeedAck, byFBOption);
 801                 /* Get CTS Frame body */
 802                 pBuf->data.duration = pBuf->wDuration_ba;
 803                 pBuf->data.frame_control = TYPE_CTL_CTS;
 804                 memcpy(pBuf->data.ra, pDevice->abyCurrentNetAddr, ETH_ALEN);
 805         } else {
 806                 struct vnt_cts *pBuf = &head->cts_g;
 807                 /* Get SignalField,ServiceField,Length */
 808                 BBvCalculateParameter(pDevice, uCTSFrameLen,
 809                         pDevice->byTopCCKBasicRate, PK_TYPE_11B, &pBuf->b);
 810                 /* Get CTSDuration_ba */
 811                 pBuf->wDuration_ba = s_uGetRTSCTSDuration(pDevice,
 812                         CTSDUR_BA, cbFrameLength, byPktType,
 813                         wCurrentRate, bNeedAck, byFBOption);
 814                 /*Get CTS Frame body*/
 815                 pBuf->data.duration = pBuf->wDuration_ba;
 816                 pBuf->data.frame_control = TYPE_CTL_CTS;
 817                 memcpy(pBuf->data.ra, pDevice->abyCurrentNetAddr, ETH_ALEN);
 818         }
 819 }
 820
 821 /*+
 822  *
 823  * Description:
 824  *      Generate FIFO control for MAC & Baseband controller
 825  *
 826  * Parameters:
 827  *  In:
 828  *      pDevice         - Pointer to adpater
 829  *      pTxDataHead     - Transmit Data Buffer
 830  *      pTxBufHead      - pTxBufHead
 831  *      pvRrvTime        - pvRrvTime
 832  *      pvRTS            - RTS Buffer
 833  *      pCTS            - CTS Buffer
 834  *      cbFrameSize     - Transmit Data Length (Hdr+Payload+FCS)
 835  *      bNeedACK        - If need ACK
 836  *      uDMAIdx         - DMA Index
 837  *  Out:
 838  *      none
 839  *
 840  * Return Value: none
 841  *
 842 -*/
 843
 844 static void s_vGenerateTxParameter(struct vnt_private *pDevice,
 845         u8 byPktType, u16 wCurrentRate, struct vnt_tx_buffer *tx_buffer,
 846         struct vnt_mic_hdr **mic_hdr, u32 need_mic, u32 cbFrameSize,
 847         int bNeedACK, u32 uDMAIdx, struct ethhdr *psEthHeader, bool need_rts)
 848 {
 849         struct vnt_tx_fifo_head *pFifoHead = &tx_buffer->fifo_head;
 850         union vnt_tx_data_head *head = NULL;
 851         u32 cbMACHdLen = WLAN_HDR_ADDR3_LEN; /* 24 */
 852         u16 wFifoCtl;
 853         u8 byFBOption = AUTO_FB_NONE;
 854
 855     //DBG_PRT(MSG_LEVEL_DEBUG, KERN_INFO"s_vGenerateTxParameter...\n");
 856     pFifoHead->wReserved = wCurrentRate;
 857     wFifoCtl = pFifoHead->wFIFOCtl;
 858
 859     if (wFifoCtl & FIFOCTL_AUTO_FB_0) {
 860         byFBOption = AUTO_FB_0;
 861     }
 862     else if (wFifoCtl & FIFOCTL_AUTO_FB_1) {
 863         byFBOption = AUTO_FB_1;
 864     }
 865
 866         if (!pFifoHead)
 867                 return;
 868
 869     if (pDevice->bLongHeader)
 870         cbMACHdLen = WLAN_HDR_ADDR3_LEN + 6;
 871
 872     if (byPktType == PK_TYPE_11GB || byPktType == PK_TYPE_11GA) {
 873         if (need_rts) {
 874             //Fill RsvTime
 875                 struct vnt_rrv_time_rts *pBuf = &tx_buffer->tx_head.tx_rts.rts;
 876
 877                 pBuf->wRTSTxRrvTime_aa = s_uGetRTSCTSRsvTime(pDevice, 2,
 878                                 byPktType, cbFrameSize, wCurrentRate);
 879                 pBuf->wRTSTxRrvTime_ba = s_uGetRTSCTSRsvTime(pDevice, 1,
 880                                 byPktType, cbFrameSize, wCurrentRate);
 881                 pBuf->wRTSTxRrvTime_bb = s_uGetRTSCTSRsvTime(pDevice, 0,
 882                                 byPktType, cbFrameSize, wCurrentRate);
 883                 pBuf->wTxRrvTime_a = vnt_rxtx_rsvtime_le16(pDevice,
 884                         byPktType, cbFrameSize, wCurrentRate, bNeedACK);
 885                 pBuf->wTxRrvTime_b = vnt_rxtx_rsvtime_le16(pDevice,
 886                         PK_TYPE_11B, cbFrameSize, pDevice->byTopCCKBasicRate,
 887                                 bNeedACK);
 888
 889                 if (need_mic) {
 890                         *mic_hdr = &tx_buffer->tx_head.tx_rts.tx.mic.hdr;
 891                         head = &tx_buffer->tx_head.tx_rts.tx.mic.head;
 892                 } else {
 893                         head = &tx_buffer->tx_head.tx_rts.tx.head;
 894                 }
 895
 896                 /* Fill RTS */
 897                 s_vFillRTSHead(pDevice, byPktType, head, cbFrameSize,
 898                         bNeedACK, psEthHeader, wCurrentRate, byFBOption);
 899         }
 900         else {//RTS_needless, PCF mode
 901             //Fill RsvTime
 902                 struct vnt_rrv_time_cts *pBuf = &tx_buffer->tx_head.tx_cts.cts;
 903
 904                 pBuf->wTxRrvTime_a = vnt_rxtx_rsvtime_le16(pDevice, byPktType,
 905                         cbFrameSize, wCurrentRate, bNeedACK);
 906                 pBuf->wTxRrvTime_b = vnt_rxtx_rsvtime_le16(pDevice,
 907                         PK_TYPE_11B, cbFrameSize,
 908                         pDevice->byTopCCKBasicRate, bNeedACK);
 909                 pBuf->wCTSTxRrvTime_ba = s_uGetRTSCTSRsvTime(pDevice, 3,
 910                                 byPktType, cbFrameSize, wCurrentRate);
 911
 912                 if (need_mic) {
 913                         *mic_hdr = &tx_buffer->tx_head.tx_cts.tx.mic.hdr;
 914                         head = &tx_buffer->tx_head.tx_cts.tx.mic.head;
 915                 } else {
 916                         head = &tx_buffer->tx_head.tx_cts.tx.head;
 917                 }
 918
 919                 /* Fill CTS */
 920                 s_vFillCTSHead(pDevice, uDMAIdx, byPktType, head,
 921                         cbFrameSize, bNeedACK, wCurrentRate, byFBOption);
 922         }
 923     }
 924     else if (byPktType == PK_TYPE_11A) {
 925         if (need_rts) {
 926             //Fill RsvTime
 927                 struct vnt_rrv_time_ab *pBuf = &tx_buffer->tx_head.tx_ab.ab;
 928
 929                 pBuf->wRTSTxRrvTime = s_uGetRTSCTSRsvTime(pDevice, 2,
 930                                 byPktType, cbFrameSize, wCurrentRate);
 931                 pBuf->wTxRrvTime = vnt_rxtx_rsvtime_le16(pDevice, byPktType,
 932                                 cbFrameSize, wCurrentRate, bNeedACK);
 933
 934                 if (need_mic) {
 935                         *mic_hdr = &tx_buffer->tx_head.tx_ab.tx.mic.hdr;
 936                         head = &tx_buffer->tx_head.tx_ab.tx.mic.head;
 937                 } else {
 938                         head = &tx_buffer->tx_head.tx_ab.tx.head;
 939                 }
 940
 941                 /* Fill RTS */
 942                 s_vFillRTSHead(pDevice, byPktType, head, cbFrameSize,
 943                         bNeedACK, psEthHeader, wCurrentRate, byFBOption);
 944         } else {
 945             //Fill RsvTime
 946                 struct vnt_rrv_time_ab *pBuf = &tx_buffer->tx_head.tx_ab.ab;
 947
 948                 if (need_mic)
 949                         *mic_hdr = &tx_buffer->tx_head.tx_ab.tx.mic.hdr;
 950
 951                 pBuf->wTxRrvTime = vnt_rxtx_rsvtime_le16(pDevice, PK_TYPE_11A,
 952                         cbFrameSize, wCurrentRate, bNeedACK);
 953         }
 954     }
 955     else if (byPktType == PK_TYPE_11B) {
 956         if (need_rts) {
 957             //Fill RsvTime
 958                 struct vnt_rrv_time_ab *pBuf = &tx_buffer->tx_head.tx_ab.ab;
 959
 960                 pBuf->wRTSTxRrvTime = s_uGetRTSCTSRsvTime(pDevice, 0,
 961                                 byPktType, cbFrameSize, wCurrentRate);
 962                 pBuf->wTxRrvTime = vnt_rxtx_rsvtime_le16(pDevice, PK_TYPE_11B,
 963                                 cbFrameSize, wCurrentRate, bNeedACK);
 964
 965                 if (need_mic) {
 966                         *mic_hdr = &tx_buffer->tx_head.tx_ab.tx.mic.hdr;
 967                         head = &tx_buffer->tx_head.tx_ab.tx.mic.head;
 968                 } else {
 969                         head = &tx_buffer->tx_head.tx_ab.tx.head;
 970                 }
 971
 972                 /* Fill RTS */
 973                 s_vFillRTSHead(pDevice, byPktType, head, cbFrameSize,
 974                         bNeedACK, psEthHeader, wCurrentRate, byFBOption);
 975         }
 976         else { //RTS_needless, non PCF mode
 977             //Fill RsvTime
 978                 struct vnt_rrv_time_ab *pBuf = &tx_buffer->tx_head.tx_ab.ab;
 979
 980                 if (need_mic)
 981                         *mic_hdr = &tx_buffer->tx_head.tx_ab.tx.mic.hdr;
 982
 983                 pBuf->wTxRrvTime = vnt_rxtx_rsvtime_le16(pDevice, PK_TYPE_11B,
 984                         cbFrameSize, wCurrentRate, bNeedACK);
 985         }
 986     }
 987     //DBG_PRT(MSG_LEVEL_DEBUG, KERN_INFO"s_vGenerateTxParameter END.\n");
 988 }
 989 /*
 990     u8 * pbyBuffer,//point to pTxBufHead
 991     u16  wFragType,//00:Non-Frag, 01:Start, 02:Mid, 03:Last
 992     unsigned int  cbFragmentSize,//Hdr+payoad+FCS
 993 */
 994
 995 static int s_bPacketToWirelessUsb(struct vnt_private *pDevice, u8 byPktType,
 996         struct vnt_tx_buffer *tx_buffer, int bNeedEncryption,
 997         u32 uSkbPacketLen, u32 uDMAIdx, struct ethhdr *psEthHeader,
 998         u8 *pPacket, PSKeyItem pTransmitKey, u32 uNodeIndex, u16 wCurrentRate,
 999         u32 *pcbHeaderLen, u32 *pcbTotalLen)
1000 {
1001         struct vnt_tx_fifo_head *pTxBufHead = &tx_buffer->fifo_head;
1002         struct vnt_manager *pMgmt = &pDevice->vnt_mgmt;
1003         u32 cbFrameSize, cbFrameBodySize;
1004         u32 cb802_1_H_len;
1005         u32 cbIVlen = 0, cbICVlen = 0, cbMIClen = 0, cbMACHdLen = 0;
1006         u32 cbFCSlen = 4, cbMICHDR = 0;
1007         int bNeedACK;
1008         bool bRTS = false;
1009         u8 *pbyType, *pbyMacHdr, *pbyIVHead, *pbyPayloadHead, *pbyTxBufferAddr;
1010         u8 abySNAP_RFC1042[ETH_ALEN] = {0xAA, 0xAA, 0x03, 0x00, 0x00, 0x00};
1011         u8 abySNAP_Bridgetunnel[ETH_ALEN]
1012                 = {0xAA, 0xAA, 0x03, 0x00, 0x00, 0xF8};
1013         u32 uDuration;
1014         u32 cbHeaderLength = 0, uPadding = 0;
1015         struct vnt_mic_hdr *pMICHDR;
1016         void *pvTxDataHd;
1017         u8 byFBOption = AUTO_FB_NONE, byFragType;
1018         u16 wTxBufSize;
1019         u32 dwMICKey0, dwMICKey1, dwMIC_Priority;
1020         u32 *pdwMIC_L, *pdwMIC_R;
1021         int bSoftWEP = false;
1022
1023         pMICHDR = pvTxDataHd = NULL;
1024
1025         if (bNeedEncryption && pTransmitKey->pvKeyTable) {
1026                 if (((PSKeyTable)pTransmitKey->pvKeyTable)->bSoftWEP == true)
1027                         bSoftWEP = true; /* WEP 256 */
1028         }
1029
1030     // Get pkt type
1031     if (ntohs(psEthHeader->h_proto) > ETH_DATA_LEN) {
1032         if (pDevice->dwDiagRefCount == 0) {
1033             cb802_1_H_len = 8;
1034         } else {
1035             cb802_1_H_len = 2;
1036         }
1037     } else {
1038         cb802_1_H_len = 0;
1039     }
1040
1041     cbFrameBodySize = uSkbPacketLen - ETH_HLEN + cb802_1_H_len;
1042
1043     //Set packet type
1044     pTxBufHead->wFIFOCtl |= (u16)(byPktType<<8);
1045
1046     if (pDevice->dwDiagRefCount != 0) {
1047         bNeedACK = false;
1048         pTxBufHead->wFIFOCtl = pTxBufHead->wFIFOCtl & (~FIFOCTL_NEEDACK);
1049     } else { //if (pDevice->dwDiagRefCount != 0) {
1050         if ((pDevice->eOPMode == OP_MODE_ADHOC) ||
1051             (pDevice->eOPMode == OP_MODE_AP)) {
1052                 if (is_multicast_ether_addr(psEthHeader->h_dest)) {
1053                         bNeedACK = false;
1054                         pTxBufHead->wFIFOCtl =
1055                                 pTxBufHead->wFIFOCtl & (~FIFOCTL_NEEDACK);
1056                 } else {
1057                         bNeedACK = true;
1058                         pTxBufHead->wFIFOCtl |= FIFOCTL_NEEDACK;
1059                 }
1060         }
1061         else {
1062             // MSDUs in Infra mode always need ACK
1063             bNeedACK = true;
1064             pTxBufHead->wFIFOCtl |= FIFOCTL_NEEDACK;
1065         }
1066     } //if (pDevice->dwDiagRefCount != 0) {
1067
1068     pTxBufHead->wTimeStamp = DEFAULT_MSDU_LIFETIME_RES_64us;
1069
1070     //Set FIFOCTL_LHEAD
1071     if (pDevice->bLongHeader)
1072         pTxBufHead->wFIFOCtl |= FIFOCTL_LHEAD;
1073
1074     //Set FRAGCTL_MACHDCNT
1075     if (pDevice->bLongHeader) {
1076         cbMACHdLen = WLAN_HDR_ADDR3_LEN + 6;
1077     } else {
1078         cbMACHdLen = WLAN_HDR_ADDR3_LEN;
1079     }
1080     pTxBufHead->wFragCtl |= (u16)(cbMACHdLen << 10);
1081
1082     //Set FIFOCTL_GrpAckPolicy
1083     if (pDevice->bGrpAckPolicy == true) {//0000 0100 0000 0000
1084         pTxBufHead->wFIFOCtl |= FIFOCTL_GRPACK;
1085     }
1086
1087     //Set Auto Fallback Ctl
1088     if (wCurrentRate >= RATE_18M) {
1089         if (pDevice->byAutoFBCtrl == AUTO_FB_0) {
1090             pTxBufHead->wFIFOCtl |= FIFOCTL_AUTO_FB_0;
1091             byFBOption = AUTO_FB_0;
1092         } else if (pDevice->byAutoFBCtrl == AUTO_FB_1) {
1093             pTxBufHead->wFIFOCtl |= FIFOCTL_AUTO_FB_1;
1094             byFBOption = AUTO_FB_1;
1095         }
1096     }
1097
1098     if (bSoftWEP != true) {
1099         if ((bNeedEncryption) && (pTransmitKey != NULL))  { //WEP enabled
1100             if (pTransmitKey->byCipherSuite == KEY_CTL_WEP) { //WEP40 or WEP104
1101                 pTxBufHead->wFragCtl |= FRAGCTL_LEGACY;
1102             }
1103             if (pTransmitKey->byCipherSuite == KEY_CTL_TKIP) {
1104                 DBG_PRT(MSG_LEVEL_DEBUG, KERN_INFO"Tx Set wFragCtl == FRAGCTL_TKIP\n");
1105                 pTxBufHead->wFragCtl |= FRAGCTL_TKIP;
1106             }
1107             else if (pTransmitKey->byCipherSuite == KEY_CTL_CCMP) { //CCMP
1108                 pTxBufHead->wFragCtl |= FRAGCTL_AES;
1109             }
1110         }
1111     }
1112
1113     if ((bNeedEncryption) && (pTransmitKey != NULL))  {
1114         if (pTransmitKey->byCipherSuite == KEY_CTL_WEP) {
1115             cbIVlen = 4;
1116             cbICVlen = 4;
1117         }
1118         else if (pTransmitKey->byCipherSuite == KEY_CTL_TKIP) {
1119             cbIVlen = 8;//IV+ExtIV
1120             cbMIClen = 8;
1121             cbICVlen = 4;
1122         }
1123         if (pTransmitKey->byCipherSuite == KEY_CTL_CCMP) {
1124             cbIVlen = 8;//RSN Header
1125             cbICVlen = 8;//MIC
1126             cbMICHDR = sizeof(struct vnt_mic_hdr);
1127         }
1128         if (bSoftWEP == false) {
1129             //MAC Header should be padding 0 to DW alignment.
1130             uPadding = 4 - (cbMACHdLen%4);
1131             uPadding %= 4;
1132         }
1133     }
1134
1135     cbFrameSize = cbMACHdLen + cbIVlen + (cbFrameBodySize + cbMIClen) + cbICVlen + cbFCSlen;
1136
1137     if ( (bNeedACK == false) ||(cbFrameSize < pDevice->wRTSThreshold) ) {
1138         bRTS = false;
1139     } else {
1140         bRTS = true;
1141         pTxBufHead->wFIFOCtl |= (FIFOCTL_RTS | FIFOCTL_LRETRY);
1142     }
1143
1144     pbyTxBufferAddr = (u8 *) &(pTxBufHead->adwTxKey[0]);
1145         wTxBufSize = sizeof(struct vnt_tx_fifo_head);
1146
1147     if (byPktType == PK_TYPE_11GB || byPktType == PK_TYPE_11GA) {//802.11g packet
1148         if (byFBOption == AUTO_FB_NONE) {
1149             if (bRTS == true) {//RTS_need
1150                 pvTxDataHd = (struct vnt_tx_datahead_g *) (pbyTxBufferAddr +
1151                         wTxBufSize + sizeof(struct vnt_rrv_time_rts) +
1152                                 cbMICHDR + sizeof(struct vnt_rts_g));
1153                 cbHeaderLength = wTxBufSize + sizeof(struct vnt_rrv_time_rts) +
1154                         cbMICHDR + sizeof(struct vnt_rts_g) +
1155                                 sizeof(struct vnt_tx_datahead_g);
1156             }
1157             else { //RTS_needless
1158                 pvTxDataHd = (struct vnt_tx_datahead_g *)(pbyTxBufferAddr +
1159                         wTxBufSize + sizeof(struct vnt_rrv_time_cts) +
1160                                 cbMICHDR + sizeof(struct vnt_cts));
1161                 cbHeaderLength = wTxBufSize + sizeof(struct vnt_rrv_time_cts) +
1162                         cbMICHDR + sizeof(struct vnt_cts) +
1163                                 sizeof(struct vnt_tx_datahead_g);
1164             }
1165         } else {
1166             // Auto Fall Back
1167             if (bRTS == true) {//RTS_need
1168                 pvTxDataHd = (struct vnt_tx_datahead_g_fb *) (pbyTxBufferAddr +
1169                         wTxBufSize + sizeof(struct vnt_rrv_time_rts) +
1170                                 cbMICHDR + sizeof(struct vnt_rts_g_fb));
1171                 cbHeaderLength = wTxBufSize + sizeof(struct vnt_rrv_time_rts) +
1172                         cbMICHDR + sizeof(struct vnt_rts_g_fb) +
1173                                 sizeof(struct vnt_tx_datahead_g_fb);
1174             }
1175             else if (bRTS == false) { //RTS_needless
1176                 pvTxDataHd = (struct vnt_tx_datahead_g_fb *) (pbyTxBufferAddr +
1177                         wTxBufSize + sizeof(struct vnt_rrv_time_cts) +
1178                                 cbMICHDR + sizeof(struct vnt_cts_fb));
1179                 cbHeaderLength = wTxBufSize + sizeof(struct vnt_rrv_time_cts) +
1180                                 cbMICHDR + sizeof(struct vnt_cts_fb) +
1181                                         sizeof(struct vnt_tx_datahead_g_fb);
1182             }
1183         } // Auto Fall Back
1184     }
1185     else {//802.11a/b packet
1186         if (byFBOption == AUTO_FB_NONE) {
1187             if (bRTS == true) {//RTS_need
1188                 pvTxDataHd = (struct vnt_tx_datahead_ab *)(pbyTxBufferAddr +
1189                         wTxBufSize + sizeof(struct vnt_rrv_time_ab) + cbMICHDR +
1190                                                 sizeof(struct vnt_rts_ab));
1191                 cbHeaderLength = wTxBufSize + sizeof(struct vnt_rrv_time_ab) +
1192                         cbMICHDR + sizeof(struct vnt_rts_ab) +
1193                                 sizeof(struct vnt_tx_datahead_ab);
1194             }
1195             else if (bRTS == false) { //RTS_needless, no MICHDR
1196                 pvTxDataHd = (struct vnt_tx_datahead_ab *)(pbyTxBufferAddr +
1197                         wTxBufSize + sizeof(struct vnt_rrv_time_ab) + cbMICHDR);
1198                 cbHeaderLength = wTxBufSize + sizeof(struct vnt_rrv_time_ab) +
1199                                 cbMICHDR + sizeof(struct vnt_tx_datahead_ab);
1200             }
1201         } else {
1202             // Auto Fall Back
1203             if (bRTS == true) {//RTS_need
1204                 pvTxDataHd = (struct vnt_tx_datahead_a_fb *)(pbyTxBufferAddr +
1205                         wTxBufSize + sizeof(struct vnt_rrv_time_ab) + cbMICHDR +
1206                                         sizeof(struct vnt_rts_a_fb));
1207                 cbHeaderLength = wTxBufSize + sizeof(struct vnt_rrv_time_ab) +
1208                         cbMICHDR + sizeof(struct vnt_rts_a_fb) +
1209                                         sizeof(struct vnt_tx_datahead_a_fb);
1210             }
1211             else if (bRTS == false) { //RTS_needless
1212                 pvTxDataHd = (struct vnt_tx_datahead_a_fb *)(pbyTxBufferAddr +
1213                         wTxBufSize + sizeof(struct vnt_rrv_time_ab) + cbMICHDR);
1214                 cbHeaderLength = wTxBufSize + sizeof(struct vnt_rrv_time_ab) +
1215                         cbMICHDR + sizeof(struct vnt_tx_datahead_a_fb);
1216             }
1217         } // Auto Fall Back
1218     }
1219
1220     pbyMacHdr = (u8 *)(pbyTxBufferAddr + cbHeaderLength);
1221     pbyIVHead = (u8 *)(pbyMacHdr + cbMACHdLen + uPadding);
1222     pbyPayloadHead = (u8 *)(pbyMacHdr + cbMACHdLen + uPadding + cbIVlen);
1223
1224     //=========================
1225     //    No Fragmentation
1226     //=========================
1227     DBG_PRT(MSG_LEVEL_DEBUG, KERN_INFO"No Fragmentation...\n");
1228     byFragType = FRAGCTL_NONFRAG;
1229     //uDMAIdx = TYPE_AC0DMA;
1230     //pTxBufHead = (PSTxBufHead) &(pTxBufHead->adwTxKey[0]);
1231
1232     //Fill FIFO,RrvTime,RTS,and CTS
1233     s_vGenerateTxParameter(pDevice, byPktType, wCurrentRate,
1234                 tx_buffer, &pMICHDR, cbMICHDR,
1235                 cbFrameSize, bNeedACK, uDMAIdx, psEthHeader, bRTS);
1236     //Fill DataHead
1237     uDuration = s_uFillDataHead(pDevice, byPktType, wCurrentRate, pvTxDataHd, cbFrameSize, uDMAIdx, bNeedACK,
1238                                 byFBOption);
1239     // Generate TX MAC Header
1240     s_vGenerateMACHeader(pDevice, pbyMacHdr, (u16)uDuration, psEthHeader, bNeedEncryption,
1241                            byFragType, uDMAIdx, 0);
1242
1243     if (bNeedEncryption == true) {
1244         //Fill TXKEY
1245         s_vFillTxKey(pDevice, (u8 *)(pTxBufHead->adwTxKey), pbyIVHead, pTransmitKey,
1246                 pbyMacHdr, (u16)cbFrameBodySize, pMICHDR);
1247
1248         if (pDevice->bEnableHostWEP) {
1249             pMgmt->sNodeDBTable[uNodeIndex].dwTSC47_16 = pTransmitKey->dwTSC47_16;
1250             pMgmt->sNodeDBTable[uNodeIndex].wTSC15_0 = pTransmitKey->wTSC15_0;
1251         }
1252     }
1253
1254     // 802.1H
1255     if (ntohs(psEthHeader->h_proto) > ETH_DATA_LEN) {
1256         if (pDevice->dwDiagRefCount == 0) {
1257                 if ((psEthHeader->h_proto == cpu_to_be16(ETH_P_IPX)) ||
1258                     (psEthHeader->h_proto == cpu_to_le16(0xF380))) {
1259                         memcpy((u8 *) (pbyPayloadHead),
1260                                abySNAP_Bridgetunnel, 6);
1261             } else {
1262                 memcpy((u8 *) (pbyPayloadHead), &abySNAP_RFC1042[0], 6);
1263             }
1264             pbyType = (u8 *) (pbyPayloadHead + 6);
1265             memcpy(pbyType, &(psEthHeader->h_proto), sizeof(u16));
1266         } else {
1267             memcpy((u8 *) (pbyPayloadHead), &(psEthHeader->h_proto), sizeof(u16));
1268
1269         }
1270
1271     }
1272
1273     if (pPacket != NULL) {
1274         // Copy the Packet into a tx Buffer
1275         memcpy((pbyPayloadHead + cb802_1_H_len),
1276                  (pPacket + ETH_HLEN),
1277                  uSkbPacketLen - ETH_HLEN
1278                  );
1279
1280     } else {
1281         // while bRelayPacketSend psEthHeader is point to header+payload
1282         memcpy((pbyPayloadHead + cb802_1_H_len), ((u8 *)psEthHeader) + ETH_HLEN, uSkbPacketLen - ETH_HLEN);
1283     }
1284
1285     if ((bNeedEncryption == true) && (pTransmitKey != NULL) && (pTransmitKey->byCipherSuite == KEY_CTL_TKIP)) {
1286
1287         ///////////////////////////////////////////////////////////////////
1288
1289         if (pDevice->vnt_mgmt.eAuthenMode == WMAC_AUTH_WPANONE) {
1290                 dwMICKey0 = *(u32 *)(&pTransmitKey->abyKey[16]);
1291                 dwMICKey1 = *(u32 *)(&pTransmitKey->abyKey[20]);
1292         }
1293         else if ((pTransmitKey->dwKeyIndex & AUTHENTICATOR_KEY) != 0) {
1294             dwMICKey0 = *(u32 *)(&pTransmitKey->abyKey[16]);
1295             dwMICKey1 = *(u32 *)(&pTransmitKey->abyKey[20]);
1296         }
1297         else {
1298             dwMICKey0 = *(u32 *)(&pTransmitKey->abyKey[24]);
1299             dwMICKey1 = *(u32 *)(&pTransmitKey->abyKey[28]);
1300         }
1301         // DO Software Michael
1302         MIC_vInit(dwMICKey0, dwMICKey1);
1303         MIC_vAppend((u8 *)&(psEthHeader->h_dest[0]), 12);
1304         dwMIC_Priority = 0;
1305         MIC_vAppend((u8 *)&dwMIC_Priority, 4);
1306         DBG_PRT(MSG_LEVEL_DEBUG, KERN_INFO"MIC KEY: %X, %X\n",
1307                 dwMICKey0, dwMICKey1);
1308
1309         ///////////////////////////////////////////////////////////////////
1310
1311         //DBG_PRN_GRP12(("Length:%d, %d\n", cbFrameBodySize, uFromHDtoPLDLength));
1312         //for (ii = 0; ii < cbFrameBodySize; ii++) {
1313         //    DBG_PRN_GRP12(("%02x ", *((u8 *)((pbyPayloadHead + cb802_1_H_len) + ii))));
1314         //}
1315         //DBG_PRN_GRP12(("\n\n\n"));
1316
1317         MIC_vAppend(pbyPayloadHead, cbFrameBodySize);
1318
1319         pdwMIC_L = (u32 *)(pbyPayloadHead + cbFrameBodySize);
1320         pdwMIC_R = (u32 *)(pbyPayloadHead + cbFrameBodySize + 4);
1321
1322         MIC_vGetMIC(pdwMIC_L, pdwMIC_R);
1323         MIC_vUnInit();
1324
1325         if (pDevice->bTxMICFail == true) {
1326             *pdwMIC_L = 0;
1327             *pdwMIC_R = 0;
1328             pDevice->bTxMICFail = false;
1329         }
1330         //DBG_PRT(MSG_LEVEL_DEBUG, KERN_INFO"uLength: %d, %d\n", uLength, cbFrameBodySize);
1331         //DBG_PRT(MSG_LEVEL_DEBUG, KERN_INFO"cbReqCount:%d, %d, %d, %d\n", cbReqCount, cbHeaderLength, uPadding, cbIVlen);
1332         //DBG_PRT(MSG_LEVEL_DEBUG, KERN_INFO"MIC:%lX, %lX\n", *pdwMIC_L, *pdwMIC_R);
1333     }
1334
1335     if (bSoftWEP == true) {
1336
1337         s_vSWencryption(pDevice, pTransmitKey, (pbyPayloadHead), (u16)(cbFrameBodySize + cbMIClen));
1338
1339     } else if (  ((pDevice->eEncryptionStatus == Ndis802_11Encryption1Enabled) && (bNeedEncryption == true))  ||
1340           ((pDevice->eEncryptionStatus == Ndis802_11Encryption2Enabled) && (bNeedEncryption == true))   ||
1341           ((pDevice->eEncryptionStatus == Ndis802_11Encryption3Enabled) && (bNeedEncryption == true))      ) {
1342         cbFrameSize -= cbICVlen;
1343     }
1344
1345         cbFrameSize -= cbFCSlen;
1346
1347     *pcbHeaderLen = cbHeaderLength;
1348     *pcbTotalLen = cbHeaderLength + cbFrameSize ;
1349
1350     //Set FragCtl in TxBufferHead
1351     pTxBufHead->wFragCtl |= (u16)byFragType;
1352
1353     return true;
1354
1355 }
1356
1357 /*+
1358  *
1359  * Description:
1360  *      Translate 802.3 to 802.11 header
1361  *
1362  * Parameters:
1363  *  In:
1364  *      pDevice         - Pointer to adapter
1365  *      dwTxBufferAddr  - Transmit Buffer
1366  *      pPacket         - Packet from upper layer
1367  *      cbPacketSize    - Transmit Data Length
1368  *  Out:
1369  *      pcbHeadSize         - Header size of MAC&Baseband control and 802.11 Header
1370  *      pcbAppendPayload    - size of append payload for 802.1H translation
1371  *
1372  * Return Value: none
1373  *
1374 -*/
1375
1376 static void s_vGenerateMACHeader(struct vnt_private *pDevice,
1377         u8 *pbyBufferAddr, u16 wDuration, struct ethhdr *psEthHeader,
1378         int bNeedEncrypt, u16 wFragType, u32 uDMAIdx, u32 uFragIdx)
1379 {
1380         struct ieee80211_hdr *pMACHeader = (struct ieee80211_hdr *)pbyBufferAddr;
1381
1382         pMACHeader->frame_control = TYPE_802_11_DATA;
1383
1384     if (pDevice->eOPMode == OP_MODE_AP) {
1385         memcpy(&(pMACHeader->addr1[0]),
1386                &(psEthHeader->h_dest[0]),
1387                ETH_ALEN);
1388         memcpy(&(pMACHeader->addr2[0]), &(pDevice->abyBSSID[0]), ETH_ALEN);
1389         memcpy(&(pMACHeader->addr3[0]),
1390                &(psEthHeader->h_source[0]),
1391                ETH_ALEN);
1392         pMACHeader->frame_control |= FC_FROMDS;
1393     } else {
1394         if (pDevice->eOPMode == OP_MODE_ADHOC) {
1395                 memcpy(&(pMACHeader->addr1[0]),
1396                        &(psEthHeader->h_dest[0]),
1397                        ETH_ALEN);
1398                 memcpy(&(pMACHeader->addr2[0]),
1399                        &(psEthHeader->h_source[0]),
1400                        ETH_ALEN);
1401                 memcpy(&(pMACHeader->addr3[0]),
1402                        &(pDevice->abyBSSID[0]),
1403                        ETH_ALEN);
1404         } else {
1405                 memcpy(&(pMACHeader->addr3[0]),
1406                        &(psEthHeader->h_dest[0]),
1407                        ETH_ALEN);
1408                 memcpy(&(pMACHeader->addr2[0]),
1409                        &(psEthHeader->h_source[0]),
1410                        ETH_ALEN);
1411                 memcpy(&(pMACHeader->addr1[0]),
1412                        &(pDevice->abyBSSID[0]),
1413                        ETH_ALEN);
1414             pMACHeader->frame_control |= FC_TODS;
1415         }
1416     }
1417
1418     if (bNeedEncrypt)
1419         pMACHeader->frame_control |= cpu_to_le16((u16)WLAN_SET_FC_ISWEP(1));
1420
1421     pMACHeader->duration_id = cpu_to_le16(wDuration);
1422
1423     if (pDevice->bLongHeader) {
1424         PWLAN_80211HDR_A4 pMACA4Header  = (PWLAN_80211HDR_A4) pbyBufferAddr;
1425         pMACHeader->frame_control |= (FC_TODS | FC_FROMDS);
1426         memcpy(pMACA4Header->abyAddr4, pDevice->abyBSSID, WLAN_ADDR_LEN);
1427     }
1428     pMACHeader->seq_ctrl = cpu_to_le16(pDevice->wSeqCounter << 4);
1429
1430     //Set FragNumber in Sequence Control
1431     pMACHeader->seq_ctrl |= cpu_to_le16((u16)uFragIdx);
1432
1433     if ((wFragType == FRAGCTL_ENDFRAG) || (wFragType == FRAGCTL_NONFRAG)) {
1434         pDevice->wSeqCounter++;
1435         if (pDevice->wSeqCounter > 0x0fff)
1436             pDevice->wSeqCounter = 0;
1437     }
1438
1439     if ((wFragType == FRAGCTL_STAFRAG) || (wFragType == FRAGCTL_MIDFRAG)) { //StartFrag or MidFrag
1440         pMACHeader->frame_control |= FC_MOREFRAG;
1441     }
1442 }
1443
1444 /*+
1445  *
1446  * Description:
1447  *      Request instructs a MAC to transmit a 802.11 management packet through
1448  *      the adapter onto the medium.
1449  *
1450  * Parameters:
1451  *  In:
1452  *      hDeviceContext  - Pointer to the adapter
1453  *      pPacket         - A pointer to a descriptor for the packet to transmit
1454  *  Out:
1455  *      none
1456  *
1457  * Return Value: CMD_STATUS_PENDING if MAC Tx resource available; otherwise false
1458  *
1459 -*/
1460
1461 CMD_STATUS csMgmt_xmit(struct vnt_private *pDevice,
1462         struct vnt_tx_mgmt *pPacket)
1463 {
1464         struct vnt_manager *pMgmt = &pDevice->vnt_mgmt;
1465         struct vnt_tx_buffer *pTX_Buffer;
1466         struct vnt_usb_send_context *pContext;
1467         struct vnt_tx_fifo_head *pTxBufHead;
1468         struct ieee80211_hdr *pMACHeader;
1469         struct ethhdr sEthHeader;
1470         u8 byPktType, *pbyTxBufferAddr;
1471         void *pvTxDataHd;
1472         struct vnt_mic_hdr *pMICHDR = NULL;
1473         u32 uDuration, cbReqCount, cbHeaderSize, cbFrameBodySize, cbFrameSize;
1474         int bNeedACK, bIsPSPOLL = false;
1475         u32 cbIVlen = 0, cbICVlen = 0, cbMIClen = 0, cbFCSlen = 4;
1476         u32 uPadding = 0;
1477         u16 wTxBufSize;
1478         u32 cbMacHdLen;
1479         u16 wCurrentRate = RATE_1M;
1480
1481         pContext = (struct vnt_usb_send_context *)s_vGetFreeContext(pDevice);
1482
1483     if (NULL == pContext) {
1484         DBG_PRT(MSG_LEVEL_DEBUG, KERN_INFO"ManagementSend TX...NO CONTEXT!\n");
1485         return CMD_STATUS_RESOURCES;
1486     }
1487
1488         pTX_Buffer = (struct vnt_tx_buffer *)&pContext->Data[0];
1489     cbFrameBodySize = pPacket->cbPayloadLen;
1490         pTxBufHead = &pTX_Buffer->fifo_head;
1491         pbyTxBufferAddr = (u8 *)&pTxBufHead->adwTxKey[0];
1492         wTxBufSize = sizeof(struct vnt_tx_fifo_head);
1493
1494     if (pDevice->byBBType == BB_TYPE_11A) {
1495         wCurrentRate = RATE_6M;
1496         byPktType = PK_TYPE_11A;
1497     } else {
1498         wCurrentRate = RATE_1M;
1499         byPktType = PK_TYPE_11B;
1500     }
1501
1502     // SetPower will cause error power TX state for OFDM Date packet in TX buffer.
1503     // 2004.11.11 Kyle -- Using OFDM power to tx MngPkt will decrease the connection capability.
1504     //                    And cmd timer will wait data pkt TX finish before scanning so it's OK
1505     //                    to set power here.
1506     if (pMgmt->eScanState != WMAC_NO_SCANNING) {
1507         RFbSetPower(pDevice, wCurrentRate, pDevice->byCurrentCh);
1508     } else {
1509         RFbSetPower(pDevice, wCurrentRate, pMgmt->uCurrChannel);
1510     }
1511     pDevice->wCurrentRate = wCurrentRate;
1512
1513     //Set packet type
1514     if (byPktType == PK_TYPE_11A) {//0000 0000 0000 0000
1515         pTxBufHead->wFIFOCtl = 0;
1516     }
1517     else if (byPktType == PK_TYPE_11B) {//0000 0001 0000 0000
1518         pTxBufHead->wFIFOCtl |= FIFOCTL_11B;
1519     }
1520     else if (byPktType == PK_TYPE_11GB) {//0000 0010 0000 0000
1521         pTxBufHead->wFIFOCtl |= FIFOCTL_11GB;
1522     }
1523     else if (byPktType == PK_TYPE_11GA) {//0000 0011 0000 0000
1524         pTxBufHead->wFIFOCtl |= FIFOCTL_11GA;
1525     }
1526
1527     pTxBufHead->wFIFOCtl |= FIFOCTL_TMOEN;
1528     pTxBufHead->wTimeStamp = cpu_to_le16(DEFAULT_MGN_LIFETIME_RES_64us);
1529
1530     if (is_multicast_ether_addr(pPacket->p80211Header->sA3.abyAddr1)) {
1531         bNeedACK = false;
1532     }
1533     else {
1534         bNeedACK = true;
1535         pTxBufHead->wFIFOCtl |= FIFOCTL_NEEDACK;
1536     };
1537
1538     if ((pMgmt->eCurrMode == WMAC_MODE_ESS_AP) ||
1539         (pMgmt->eCurrMode == WMAC_MODE_IBSS_STA) ) {
1540
1541         pTxBufHead->wFIFOCtl |= FIFOCTL_LRETRY;
1542         //Set Preamble type always long
1543         //pDevice->byPreambleType = PREAMBLE_LONG;
1544         // probe-response don't retry
1545         //if ((pPacket->p80211Header->sA4.wFrameCtl & TYPE_SUBTYPE_MASK) == TYPE_MGMT_PROBE_RSP) {
1546         //     bNeedACK = false;
1547         //     pTxBufHead->wFIFOCtl  &= (~FIFOCTL_NEEDACK);
1548         //}
1549     }
1550
1551     pTxBufHead->wFIFOCtl |= (FIFOCTL_GENINT | FIFOCTL_ISDMA0);
1552
1553     if ((pPacket->p80211Header->sA4.wFrameCtl & TYPE_SUBTYPE_MASK) == TYPE_CTL_PSPOLL) {
1554         bIsPSPOLL = true;
1555         cbMacHdLen = WLAN_HDR_ADDR2_LEN;
1556     } else {
1557         cbMacHdLen = WLAN_HDR_ADDR3_LEN;
1558     }
1559
1560     //Set FRAGCTL_MACHDCNT
1561     pTxBufHead->wFragCtl |= cpu_to_le16((u16)(cbMacHdLen << 10));
1562
1563     // Notes:
1564     // Although spec says MMPDU can be fragmented; In most case,
1565     // no one will send a MMPDU under fragmentation. With RTS may occur.
1566     pDevice->bAES = false;  //Set FRAGCTL_WEPTYP
1567
1568     if (WLAN_GET_FC_ISWEP(pPacket->p80211Header->sA4.wFrameCtl) != 0) {
1569         if (pDevice->eEncryptionStatus == Ndis802_11Encryption1Enabled) {
1570             cbIVlen = 4;
1571             cbICVlen = 4;
1572             pTxBufHead->wFragCtl |= FRAGCTL_LEGACY;
1573         }
1574         else if (pDevice->eEncryptionStatus == Ndis802_11Encryption2Enabled) {
1575             cbIVlen = 8;//IV+ExtIV
1576             cbMIClen = 8;
1577             cbICVlen = 4;
1578             pTxBufHead->wFragCtl |= FRAGCTL_TKIP;
1579             //We need to get seed here for filling TxKey entry.
1580             //TKIPvMixKey(pTransmitKey->abyKey, pDevice->abyCurrentNetAddr,
1581             //            pTransmitKey->wTSC15_0, pTransmitKey->dwTSC47_16, pDevice->abyPRNG);
1582         }
1583         else if (pDevice->eEncryptionStatus == Ndis802_11Encryption3Enabled) {
1584             cbIVlen = 8;//RSN Header
1585             cbICVlen = 8;//MIC
1586             pTxBufHead->wFragCtl |= FRAGCTL_AES;
1587             pDevice->bAES = true;
1588         }
1589         //MAC Header should be padding 0 to DW alignment.
1590         uPadding = 4 - (cbMacHdLen%4);
1591         uPadding %= 4;
1592     }
1593
1594     cbFrameSize = cbMacHdLen + cbFrameBodySize + cbIVlen + cbMIClen + cbICVlen + cbFCSlen;
1595
1596     //Set FIFOCTL_GrpAckPolicy
1597     if (pDevice->bGrpAckPolicy == true) {//0000 0100 0000 0000
1598         pTxBufHead->wFIFOCtl |= FIFOCTL_GRPACK;
1599     }
1600     //the rest of pTxBufHead->wFragCtl:FragTyp will be set later in s_vFillFragParameter()
1601
1602     //Set RrvTime/RTS/CTS Buffer
1603     if (byPktType == PK_TYPE_11GB || byPktType == PK_TYPE_11GA) {//802.11g packet
1604         pvTxDataHd = (struct vnt_tx_datahead_g *)(pbyTxBufferAddr + wTxBufSize +
1605                 sizeof(struct vnt_rrv_time_cts) + sizeof(struct vnt_cts));
1606         cbHeaderSize = wTxBufSize + sizeof(struct vnt_rrv_time_cts) +
1607                 sizeof(struct vnt_cts) + sizeof(struct vnt_tx_datahead_g);
1608     }
1609     else { // 802.11a/b packet
1610         pvTxDataHd = (struct vnt_tx_datahead_ab *) (pbyTxBufferAddr +
1611                 wTxBufSize + sizeof(struct vnt_rrv_time_ab));
1612         cbHeaderSize = wTxBufSize + sizeof(struct vnt_rrv_time_ab) +
1613                 sizeof(struct vnt_tx_datahead_ab);
1614     }
1615
1616     memcpy(&(sEthHeader.h_dest[0]),
1617            &(pPacket->p80211Header->sA3.abyAddr1[0]),
1618            ETH_ALEN);
1619     memcpy(&(sEthHeader.h_source[0]),
1620            &(pPacket->p80211Header->sA3.abyAddr2[0]),
1621            ETH_ALEN);
1622     //=========================
1623     //    No Fragmentation
1624     //=========================
1625     pTxBufHead->wFragCtl |= (u16)FRAGCTL_NONFRAG;
1626
1627         /* Fill FIFO,RrvTime,RTS,and CTS */
1628         s_vGenerateTxParameter(pDevice, byPktType, wCurrentRate,
1629                 pTX_Buffer, &pMICHDR, 0,
1630                 cbFrameSize, bNeedACK, TYPE_TXDMA0, &sEthHeader, false);
1631
1632     //Fill DataHead
1633     uDuration = s_uFillDataHead(pDevice, byPktType, wCurrentRate, pvTxDataHd, cbFrameSize, TYPE_TXDMA0, bNeedACK,
1634                                 AUTO_FB_NONE);
1635
1636     pMACHeader = (struct ieee80211_hdr *) (pbyTxBufferAddr + cbHeaderSize);
1637
1638     cbReqCount = cbHeaderSize + cbMacHdLen + uPadding + cbIVlen + cbFrameBodySize;
1639
1640     if (WLAN_GET_FC_ISWEP(pPacket->p80211Header->sA4.wFrameCtl) != 0) {
1641         u8 *           pbyIVHead;
1642         u8 *           pbyPayloadHead;
1643         u8 *           pbyBSSID;
1644         PSKeyItem       pTransmitKey = NULL;
1645
1646         pbyIVHead = (u8 *)(pbyTxBufferAddr + cbHeaderSize + cbMacHdLen + uPadding);
1647         pbyPayloadHead = (u8 *)(pbyTxBufferAddr + cbHeaderSize + cbMacHdLen + uPadding + cbIVlen);
1648         do {
1649             if ((pDevice->eOPMode == OP_MODE_INFRASTRUCTURE) &&
1650                 (pDevice->bLinkPass == true)) {
1651                 pbyBSSID = pDevice->abyBSSID;
1652                 // get pairwise key
1653                 if (KeybGetTransmitKey(&(pDevice->sKey), pbyBSSID, PAIRWISE_KEY, &pTransmitKey) == false) {
1654                     // get group key
1655                     if(KeybGetTransmitKey(&(pDevice->sKey), pbyBSSID, GROUP_KEY, &pTransmitKey) == true) {
1656                         DBG_PRT(MSG_LEVEL_DEBUG, KERN_INFO"Get GTK.\n");
1657                         break;
1658                     }
1659                 } else {
1660                     DBG_PRT(MSG_LEVEL_DEBUG, KERN_INFO"Get PTK.\n");
1661                     break;
1662                 }
1663             }
1664             // get group key
1665             pbyBSSID = pDevice->abyBroadcastAddr;
1666             if(KeybGetTransmitKey(&(pDevice->sKey), pbyBSSID, GROUP_KEY, &pTransmitKey) == false) {
1667                 pTransmitKey = NULL;
1668                 DBG_PRT(MSG_LEVEL_DEBUG, KERN_INFO"KEY is NULL. OP Mode[%d]\n", pDevice->eOPMode);
1669             } else {
1670                 DBG_PRT(MSG_LEVEL_DEBUG, KERN_INFO"Get GTK.\n");
1671             }
1672         } while(false);
1673         //Fill TXKEY
1674         s_vFillTxKey(pDevice, (u8 *)(pTxBufHead->adwTxKey), pbyIVHead, pTransmitKey,
1675                      (u8 *)pMACHeader, (u16)cbFrameBodySize, NULL);
1676
1677         memcpy(pMACHeader, pPacket->p80211Header, cbMacHdLen);
1678         memcpy(pbyPayloadHead, ((u8 *)(pPacket->p80211Header) + cbMacHdLen),
1679                  cbFrameBodySize);
1680     }
1681     else {
1682         // Copy the Packet into a tx Buffer
1683         memcpy(pMACHeader, pPacket->p80211Header, pPacket->cbMPDULen);
1684     }
1685
1686     pMACHeader->seq_ctrl = cpu_to_le16(pDevice->wSeqCounter << 4);
1687     pDevice->wSeqCounter++ ;
1688     if (pDevice->wSeqCounter > 0x0fff)
1689         pDevice->wSeqCounter = 0;
1690
1691     if (bIsPSPOLL) {
1692         // The MAC will automatically replace the Duration-field of MAC header by Duration-field
1693         // of FIFO control header.
1694         // This will cause AID-field of PS-POLL packet be incorrect (Because PS-POLL's AID field is
1695         // in the same place of other packet's Duration-field).
1696         // And it will cause Cisco-AP to issue Disassociation-packet
1697         if (byPktType == PK_TYPE_11GB || byPktType == PK_TYPE_11GA) {
1698                 ((struct vnt_tx_datahead_g *)pvTxDataHd)->wDuration_a =
1699                         cpu_to_le16(pPacket->p80211Header->sA2.wDurationID);
1700                 ((struct vnt_tx_datahead_g *)pvTxDataHd)->wDuration_b =
1701                         cpu_to_le16(pPacket->p80211Header->sA2.wDurationID);
1702         } else {
1703                 ((struct vnt_tx_datahead_ab *)pvTxDataHd)->wDuration =
1704                         cpu_to_le16(pPacket->p80211Header->sA2.wDurationID);
1705         }
1706     }
1707
1708     pTX_Buffer->wTxByteCount = cpu_to_le16((u16)(cbReqCount));
1709     pTX_Buffer->byPKTNO = (u8) (((wCurrentRate<<4) &0x00F0) | ((pDevice->wSeqCounter - 1) & 0x000F));
1710     pTX_Buffer->byType = 0x00;
1711
1712     pContext->pPacket = NULL;
1713     pContext->Type = CONTEXT_MGMT_PACKET;
1714     pContext->uBufLen = (u16)cbReqCount + 4;  //USB header
1715
1716     if (WLAN_GET_FC_TODS(pMACHeader->frame_control) == 0) {
1717         s_vSaveTxPktInfo(pDevice, (u8)(pTX_Buffer->byPKTNO & 0x0F),
1718                         &pMACHeader->addr1[0], (u16)cbFrameSize,
1719                         pTxBufHead->wFIFOCtl);
1720     }
1721     else {
1722         s_vSaveTxPktInfo(pDevice, (u8)(pTX_Buffer->byPKTNO & 0x0F),
1723                         &pMACHeader->addr3[0], (u16)cbFrameSize,
1724                         pTxBufHead->wFIFOCtl);
1725     }
1726
1727     PIPEnsSendBulkOut(pDevice,pContext);
1728     return CMD_STATUS_PENDING;
1729 }
1730
1731 CMD_STATUS csBeacon_xmit(struct vnt_private *pDevice,
1732         struct vnt_tx_mgmt *pPacket)
1733 {
1734         struct vnt_beacon_buffer *pTX_Buffer;
1735         u32 cbFrameSize = pPacket->cbMPDULen + WLAN_FCS_LEN;
1736         u32 cbHeaderSize = 0;
1737         u16 wTxBufSize = sizeof(STxShortBufHead);
1738         PSTxShortBufHead pTxBufHead;
1739         struct ieee80211_hdr *pMACHeader;
1740         struct vnt_tx_datahead_ab *pTxDataHead;
1741         u16 wCurrentRate;
1742         u32 cbFrameBodySize;
1743         u32 cbReqCount;
1744         u8 *pbyTxBufferAddr;
1745         struct vnt_usb_send_context *pContext;
1746         CMD_STATUS status;
1747
1748         pContext = (struct vnt_usb_send_context *)s_vGetFreeContext(pDevice);
1749     if (NULL == pContext) {
1750         status = CMD_STATUS_RESOURCES;
1751         DBG_PRT(MSG_LEVEL_DEBUG, KERN_INFO"ManagementSend TX...NO CONTEXT!\n");
1752         return status ;
1753     }
1754
1755         pTX_Buffer = (struct vnt_beacon_buffer *)&pContext->Data[0];
1756     pbyTxBufferAddr = (u8 *)&(pTX_Buffer->wFIFOCtl);
1757
1758     cbFrameBodySize = pPacket->cbPayloadLen;
1759
1760     pTxBufHead = (PSTxShortBufHead) pbyTxBufferAddr;
1761     wTxBufSize = sizeof(STxShortBufHead);
1762
1763     if (pDevice->byBBType == BB_TYPE_11A) {
1764         wCurrentRate = RATE_6M;
1765         pTxDataHead = (struct vnt_tx_datahead_ab *)
1766                         (pbyTxBufferAddr + wTxBufSize);
1767         //Get SignalField,ServiceField,Length
1768         BBvCalculateParameter(pDevice, cbFrameSize, wCurrentRate, PK_TYPE_11A,
1769                                                         &pTxDataHead->ab);
1770         //Get Duration and TimeStampOff
1771         pTxDataHead->wDuration = s_uGetDataDuration(pDevice,
1772                                                 PK_TYPE_11A, false);
1773         pTxDataHead->wTimeStampOff = vnt_time_stamp_off(pDevice, wCurrentRate);
1774         cbHeaderSize = wTxBufSize + sizeof(struct vnt_tx_datahead_ab);
1775     } else {
1776         wCurrentRate = RATE_1M;
1777         pTxBufHead->wFIFOCtl |= FIFOCTL_11B;
1778         pTxDataHead = (struct vnt_tx_datahead_ab *)
1779                                 (pbyTxBufferAddr + wTxBufSize);
1780         //Get SignalField,ServiceField,Length
1781         BBvCalculateParameter(pDevice, cbFrameSize, wCurrentRate, PK_TYPE_11B,
1782                                                         &pTxDataHead->ab);
1783         //Get Duration and TimeStampOff
1784         pTxDataHead->wDuration = s_uGetDataDuration(pDevice,
1785                                                 PK_TYPE_11B, false);
1786         pTxDataHead->wTimeStampOff = vnt_time_stamp_off(pDevice, wCurrentRate);
1787         cbHeaderSize = wTxBufSize + sizeof(struct vnt_tx_datahead_ab);
1788     }
1789
1790     //Generate Beacon Header
1791     pMACHeader = (struct ieee80211_hdr *)(pbyTxBufferAddr + cbHeaderSize);
1792     memcpy(pMACHeader, pPacket->p80211Header, pPacket->cbMPDULen);
1793
1794     pMACHeader->duration_id = 0;
1795     pMACHeader->seq_ctrl = cpu_to_le16(pDevice->wSeqCounter << 4);
1796     pDevice->wSeqCounter++ ;
1797     if (pDevice->wSeqCounter > 0x0fff)
1798         pDevice->wSeqCounter = 0;
1799
1800     cbReqCount = cbHeaderSize + WLAN_HDR_ADDR3_LEN + cbFrameBodySize;
1801
1802     pTX_Buffer->wTxByteCount = (u16)cbReqCount;
1803     pTX_Buffer->byPKTNO = (u8) (((wCurrentRate<<4) &0x00F0) | ((pDevice->wSeqCounter - 1) & 0x000F));
1804     pTX_Buffer->byType = 0x01;
1805
1806     pContext->pPacket = NULL;
1807     pContext->Type = CONTEXT_MGMT_PACKET;
1808     pContext->uBufLen = (u16)cbReqCount + 4;  //USB header
1809
1810     PIPEnsSendBulkOut(pDevice,pContext);
1811     return CMD_STATUS_PENDING;
1812
1813 }
1814
1815 void vDMA0_tx_80211(struct vnt_private *pDevice, struct sk_buff *skb)
1816 {
1817         struct vnt_manager *pMgmt = &pDevice->vnt_mgmt;
1818         struct vnt_tx_buffer *pTX_Buffer;
1819         struct vnt_tx_fifo_head *pTxBufHead;
1820         u8 byPktType;
1821         u8 *pbyTxBufferAddr;
1822         void *pvTxDataHd;
1823         u32 uDuration, cbReqCount;
1824         struct ieee80211_hdr *pMACHeader;
1825         u32 cbHeaderSize, cbFrameBodySize;
1826         int bNeedACK, bIsPSPOLL = false;
1827         u32 cbFrameSize;
1828         u32 cbIVlen = 0, cbICVlen = 0, cbMIClen = 0, cbFCSlen = 4;
1829         u32 uPadding = 0;
1830         u32 cbMICHDR = 0, uLength = 0;
1831         u32 dwMICKey0, dwMICKey1;
1832         u32 dwMIC_Priority;
1833         u32 *pdwMIC_L, *pdwMIC_R;
1834         u16 wTxBufSize;
1835         u32 cbMacHdLen;
1836         struct ethhdr sEthHeader;
1837         struct vnt_mic_hdr *pMICHDR;
1838         u32 wCurrentRate = RATE_1M;
1839         PUWLAN_80211HDR  p80211Header;
1840         u32 uNodeIndex = 0;
1841         int bNodeExist = false;
1842         SKeyItem STempKey;
1843         PSKeyItem pTransmitKey = NULL;
1844         u8 *pbyIVHead, *pbyPayloadHead, *pbyMacHdr;
1845         u32 cbExtSuppRate = 0;
1846         struct vnt_usb_send_context *pContext;
1847
1848         pMICHDR = pvTxDataHd = NULL;
1849
1850     if(skb->len <= WLAN_HDR_ADDR3_LEN) {
1851        cbFrameBodySize = 0;
1852     }
1853     else {
1854        cbFrameBodySize = skb->len - WLAN_HDR_ADDR3_LEN;
1855     }
1856     p80211Header = (PUWLAN_80211HDR)skb->data;
1857
1858         pContext = (struct vnt_usb_send_context *)s_vGetFreeContext(pDevice);
1859
1860     if (NULL == pContext) {
1861         DBG_PRT(MSG_LEVEL_DEBUG, KERN_INFO"DMA0 TX...NO CONTEXT!\n");
1862         dev_kfree_skb_irq(skb);
1863         return ;
1864     }
1865
1866         pTX_Buffer = (struct vnt_tx_buffer *)&pContext->Data[0];
1867         pTxBufHead = &pTX_Buffer->fifo_head;
1868         pbyTxBufferAddr = (u8 *)&pTxBufHead->adwTxKey[0];
1869         wTxBufSize = sizeof(struct vnt_tx_fifo_head);
1870
1871     if (pDevice->byBBType == BB_TYPE_11A) {
1872         wCurrentRate = RATE_6M;
1873         byPktType = PK_TYPE_11A;
1874     } else {
1875         wCurrentRate = RATE_1M;
1876         byPktType = PK_TYPE_11B;
1877     }
1878
1879     // SetPower will cause error power TX state for OFDM Date packet in TX buffer.
1880     // 2004.11.11 Kyle -- Using OFDM power to tx MngPkt will decrease the connection capability.
1881     //                    And cmd timer will wait data pkt TX finish before scanning so it's OK
1882     //                    to set power here.
1883     if (pMgmt->eScanState != WMAC_NO_SCANNING) {
1884         RFbSetPower(pDevice, wCurrentRate, pDevice->byCurrentCh);
1885     } else {
1886         RFbSetPower(pDevice, wCurrentRate, pMgmt->uCurrChannel);
1887     }
1888
1889     DBG_PRT(MSG_LEVEL_DEBUG, KERN_INFO"vDMA0_tx_80211: p80211Header->sA3.wFrameCtl = %x \n", p80211Header->sA3.wFrameCtl);
1890
1891     //Set packet type
1892     if (byPktType == PK_TYPE_11A) {//0000 0000 0000 0000
1893         pTxBufHead->wFIFOCtl = 0;
1894     }
1895     else if (byPktType == PK_TYPE_11B) {//0000 0001 0000 0000
1896         pTxBufHead->wFIFOCtl |= FIFOCTL_11B;
1897     }
1898     else if (byPktType == PK_TYPE_11GB) {//0000 0010 0000 0000
1899         pTxBufHead->wFIFOCtl |= FIFOCTL_11GB;
1900     }
1901     else if (byPktType == PK_TYPE_11GA) {//0000 0011 0000 0000
1902         pTxBufHead->wFIFOCtl |= FIFOCTL_11GA;
1903     }
1904
1905     pTxBufHead->wFIFOCtl |= FIFOCTL_TMOEN;
1906     pTxBufHead->wTimeStamp = cpu_to_le16(DEFAULT_MGN_LIFETIME_RES_64us);
1907
1908     if (is_multicast_ether_addr(p80211Header->sA3.abyAddr1)) {
1909         bNeedACK = false;
1910         if (pDevice->bEnableHostWEP) {
1911             uNodeIndex = 0;
1912             bNodeExist = true;
1913         }
1914     }
1915     else {
1916         if (pDevice->bEnableHostWEP) {
1917             if (BSSbIsSTAInNodeDB(pDevice, (u8 *)(p80211Header->sA3.abyAddr1), &uNodeIndex))
1918                 bNodeExist = true;
1919         }
1920         bNeedACK = true;
1921         pTxBufHead->wFIFOCtl |= FIFOCTL_NEEDACK;
1922     };
1923
1924     if ((pMgmt->eCurrMode == WMAC_MODE_ESS_AP) ||
1925         (pMgmt->eCurrMode == WMAC_MODE_IBSS_STA) ) {
1926
1927         pTxBufHead->wFIFOCtl |= FIFOCTL_LRETRY;
1928         //Set Preamble type always long
1929         //pDevice->byPreambleType = PREAMBLE_LONG;
1930
1931         // probe-response don't retry
1932         //if ((p80211Header->sA4.wFrameCtl & TYPE_SUBTYPE_MASK) == TYPE_MGMT_PROBE_RSP) {
1933         //     bNeedACK = false;
1934         //     pTxBufHead->wFIFOCtl  &= (~FIFOCTL_NEEDACK);
1935         //}
1936     }
1937
1938     pTxBufHead->wFIFOCtl |= (FIFOCTL_GENINT | FIFOCTL_ISDMA0);
1939
1940     if ((p80211Header->sA4.wFrameCtl & TYPE_SUBTYPE_MASK) == TYPE_CTL_PSPOLL) {
1941         bIsPSPOLL = true;
1942         cbMacHdLen = WLAN_HDR_ADDR2_LEN;
1943     } else {
1944         cbMacHdLen = WLAN_HDR_ADDR3_LEN;
1945     }
1946
1947     // hostapd daemon ext support rate patch
1948     if (WLAN_GET_FC_FSTYPE(p80211Header->sA4.wFrameCtl) == WLAN_FSTYPE_ASSOCRESP) {
1949
1950         if (((PWLAN_IE_SUPP_RATES)pMgmt->abyCurrSuppRates)->len != 0) {
1951             cbExtSuppRate += ((PWLAN_IE_SUPP_RATES)pMgmt->abyCurrSuppRates)->len + WLAN_IEHDR_LEN;
1952          }
1953
1954         if (((PWLAN_IE_SUPP_RATES)pMgmt->abyCurrExtSuppRates)->len != 0) {
1955             cbExtSuppRate += ((PWLAN_IE_SUPP_RATES)pMgmt->abyCurrExtSuppRates)->len + WLAN_IEHDR_LEN;
1956          }
1957
1958          if (cbExtSuppRate >0) {
1959             cbFrameBodySize = WLAN_ASSOCRESP_OFF_SUPP_RATES;
1960          }
1961     }
1962
1963     //Set FRAGCTL_MACHDCNT
1964     pTxBufHead->wFragCtl |= cpu_to_le16((u16)cbMacHdLen << 10);
1965
1966     // Notes:
1967     // Although spec says MMPDU can be fragmented; In most case,
1968     // no one will send a MMPDU under fragmentation. With RTS may occur.
1969     pDevice->bAES = false;  //Set FRAGCTL_WEPTYP
1970
1971     if (WLAN_GET_FC_ISWEP(p80211Header->sA4.wFrameCtl) != 0) {
1972         if (pDevice->eEncryptionStatus == Ndis802_11Encryption1Enabled) {
1973             cbIVlen = 4;
1974             cbICVlen = 4;
1975             pTxBufHead->wFragCtl |= FRAGCTL_LEGACY;
1976         }
1977         else if (pDevice->eEncryptionStatus == Ndis802_11Encryption2Enabled) {
1978             cbIVlen = 8;//IV+ExtIV
1979             cbMIClen = 8;
1980             cbICVlen = 4;
1981             pTxBufHead->wFragCtl |= FRAGCTL_TKIP;
1982             //We need to get seed here for filling TxKey entry.
1983             //TKIPvMixKey(pTransmitKey->abyKey, pDevice->abyCurrentNetAddr,
1984             //            pTransmitKey->wTSC15_0, pTransmitKey->dwTSC47_16, pDevice->abyPRNG);
1985         }
1986         else if (pDevice->eEncryptionStatus == Ndis802_11Encryption3Enabled) {
1987             cbIVlen = 8;//RSN Header
1988             cbICVlen = 8;//MIC
1989             cbMICHDR = sizeof(struct vnt_mic_hdr);
1990             pTxBufHead->wFragCtl |= FRAGCTL_AES;
1991             pDevice->bAES = true;
1992         }
1993         //MAC Header should be padding 0 to DW alignment.
1994         uPadding = 4 - (cbMacHdLen%4);
1995         uPadding %= 4;
1996     }
1997
1998     cbFrameSize = cbMacHdLen + cbFrameBodySize + cbIVlen + cbMIClen + cbICVlen + cbFCSlen + cbExtSuppRate;
1999
2000     //Set FIFOCTL_GrpAckPolicy
2001     if (pDevice->bGrpAckPolicy == true) {//0000 0100 0000 0000
2002         pTxBufHead->wFIFOCtl |= FIFOCTL_GRPACK;
2003     }
2004     //the rest of pTxBufHead->wFragCtl:FragTyp will be set later in s_vFillFragParameter()
2005
2006     if (byPktType == PK_TYPE_11GB || byPktType == PK_TYPE_11GA) {//802.11g packet
2007         pvTxDataHd = (struct vnt_tx_datahead_g *) (pbyTxBufferAddr +
2008                 wTxBufSize + sizeof(struct vnt_rrv_time_cts) + cbMICHDR +
2009                                         sizeof(struct vnt_cts));
2010         cbHeaderSize = wTxBufSize + sizeof(struct vnt_rrv_time_cts) + cbMICHDR +
2011                 sizeof(struct vnt_cts) + sizeof(struct vnt_tx_datahead_g);
2012
2013     }
2014     else {//802.11a/b packet
2015         pvTxDataHd = (struct vnt_tx_datahead_ab *)(pbyTxBufferAddr +
2016                 wTxBufSize + sizeof(struct vnt_rrv_time_ab) + cbMICHDR);
2017         cbHeaderSize = wTxBufSize + sizeof(struct vnt_rrv_time_ab) + cbMICHDR +
2018                                         sizeof(struct vnt_tx_datahead_ab);
2019     }
2020     memcpy(&(sEthHeader.h_dest[0]),
2021            &(p80211Header->sA3.abyAddr1[0]),
2022            ETH_ALEN);
2023     memcpy(&(sEthHeader.h_source[0]),
2024            &(p80211Header->sA3.abyAddr2[0]),
2025            ETH_ALEN);
2026     //=========================
2027     //    No Fragmentation
2028     //=========================
2029     pTxBufHead->wFragCtl |= (u16)FRAGCTL_NONFRAG;
2030
2031         /* Fill FIFO,RrvTime,RTS,and CTS */
2032         s_vGenerateTxParameter(pDevice, byPktType, wCurrentRate,
2033                 pTX_Buffer, &pMICHDR, cbMICHDR,
2034                 cbFrameSize, bNeedACK, TYPE_TXDMA0, &sEthHeader, false);
2035
2036     //Fill DataHead
2037     uDuration = s_uFillDataHead(pDevice, byPktType, wCurrentRate, pvTxDataHd, cbFrameSize, TYPE_TXDMA0, bNeedACK,
2038                                 AUTO_FB_NONE);
2039
2040     pMACHeader = (struct ieee80211_hdr *) (pbyTxBufferAddr + cbHeaderSize);
2041
2042     cbReqCount = cbHeaderSize + cbMacHdLen + uPadding + cbIVlen + (cbFrameBodySize + cbMIClen) + cbExtSuppRate;
2043
2044     pbyMacHdr = (u8 *)(pbyTxBufferAddr + cbHeaderSize);
2045     pbyPayloadHead = (u8 *)(pbyMacHdr + cbMacHdLen + uPadding + cbIVlen);
2046     pbyIVHead = (u8 *)(pbyMacHdr + cbMacHdLen + uPadding);
2047
2048     // Copy the Packet into a tx Buffer
2049     memcpy(pbyMacHdr, skb->data, cbMacHdLen);
2050
2051     // version set to 0, patch for hostapd deamon
2052     pMACHeader->frame_control &= cpu_to_le16(0xfffc);
2053     memcpy(pbyPayloadHead, (skb->data + cbMacHdLen), cbFrameBodySize);
2054
2055     // replace support rate, patch for hostapd daemon( only support 11M)
2056     if (WLAN_GET_FC_FSTYPE(p80211Header->sA4.wFrameCtl) == WLAN_FSTYPE_ASSOCRESP) {
2057         if (cbExtSuppRate != 0) {
2058             if (((PWLAN_IE_SUPP_RATES)pMgmt->abyCurrSuppRates)->len != 0)
2059                 memcpy((pbyPayloadHead + cbFrameBodySize),
2060                         pMgmt->abyCurrSuppRates,
2061                         ((PWLAN_IE_SUPP_RATES)pMgmt->abyCurrSuppRates)->len + WLAN_IEHDR_LEN
2062                        );
2063              if (((PWLAN_IE_SUPP_RATES)pMgmt->abyCurrExtSuppRates)->len != 0)
2064                 memcpy((pbyPayloadHead + cbFrameBodySize) + ((PWLAN_IE_SUPP_RATES)pMgmt->abyCurrSuppRates)->len + WLAN_IEHDR_LEN,
2065                         pMgmt->abyCurrExtSuppRates,
2066                         ((PWLAN_IE_SUPP_RATES)pMgmt->abyCurrExtSuppRates)->len + WLAN_IEHDR_LEN
2067                        );
2068          }
2069     }
2070
2071     // Set wep
2072     if (WLAN_GET_FC_ISWEP(p80211Header->sA4.wFrameCtl) != 0) {
2073
2074         if (pDevice->bEnableHostWEP) {
2075             pTransmitKey = &STempKey;
2076             pTransmitKey->byCipherSuite = pMgmt->sNodeDBTable[uNodeIndex].byCipherSuite;
2077             pTransmitKey->dwKeyIndex = pMgmt->sNodeDBTable[uNodeIndex].dwKeyIndex;
2078             pTransmitKey->uKeyLength = pMgmt->sNodeDBTable[uNodeIndex].uWepKeyLength;
2079             pTransmitKey->dwTSC47_16 = pMgmt->sNodeDBTable[uNodeIndex].dwTSC47_16;
2080             pTransmitKey->wTSC15_0 = pMgmt->sNodeDBTable[uNodeIndex].wTSC15_0;
2081             memcpy(pTransmitKey->abyKey,
2082                 &pMgmt->sNodeDBTable[uNodeIndex].abyWepKey[0],
2083                 pTransmitKey->uKeyLength
2084                 );
2085         }
2086
2087         if ((pTransmitKey != NULL) && (pTransmitKey->byCipherSuite == KEY_CTL_TKIP)) {
2088
2089             dwMICKey0 = *(u32 *)(&pTransmitKey->abyKey[16]);
2090             dwMICKey1 = *(u32 *)(&pTransmitKey->abyKey[20]);
2091
2092             // DO Software Michael
2093             MIC_vInit(dwMICKey0, dwMICKey1);
2094             MIC_vAppend((u8 *)&(sEthHeader.h_dest[0]), 12);
2095             dwMIC_Priority = 0;
2096             MIC_vAppend((u8 *)&dwMIC_Priority, 4);
2097                 DBG_PRT(MSG_LEVEL_DEBUG, KERN_INFO"DMA0_tx_8021:MIC KEY:"\
2098                         " %X, %X\n", dwMICKey0, dwMICKey1);
2099
2100             uLength = cbHeaderSize + cbMacHdLen + uPadding + cbIVlen;
2101
2102             MIC_vAppend((pbyTxBufferAddr + uLength), cbFrameBodySize);
2103
2104             pdwMIC_L = (u32 *)(pbyTxBufferAddr + uLength + cbFrameBodySize);
2105             pdwMIC_R = (u32 *)(pbyTxBufferAddr + uLength + cbFrameBodySize + 4);
2106
2107             MIC_vGetMIC(pdwMIC_L, pdwMIC_R);
2108             MIC_vUnInit();
2109
2110             if (pDevice->bTxMICFail == true) {
2111                 *pdwMIC_L = 0;
2112                 *pdwMIC_R = 0;
2113                 pDevice->bTxMICFail = false;
2114             }
2115
2116             DBG_PRT(MSG_LEVEL_DEBUG, KERN_INFO"uLength: %d, %d\n", uLength, cbFrameBodySize);
2117             DBG_PRT(MSG_LEVEL_DEBUG, KERN_INFO"cbReqCount:%d, %d, %d, %d\n", cbReqCount, cbHeaderSize, uPadding, cbIVlen);
2118                 DBG_PRT(MSG_LEVEL_DEBUG, KERN_INFO"MIC:%x, %x\n",
2119                         *pdwMIC_L, *pdwMIC_R);
2120
2121         }
2122
2123         s_vFillTxKey(pDevice, (u8 *)(pTxBufHead->adwTxKey), pbyIVHead, pTransmitKey,
2124                 pbyMacHdr, (u16)cbFrameBodySize, pMICHDR);
2125
2126         if (pDevice->bEnableHostWEP) {
2127             pMgmt->sNodeDBTable[uNodeIndex].dwTSC47_16 = pTransmitKey->dwTSC47_16;
2128             pMgmt->sNodeDBTable[uNodeIndex].wTSC15_0 = pTransmitKey->wTSC15_0;
2129         }
2130
2131         if ((pDevice->byLocalID <= REV_ID_VT3253_A1)) {
2132             s_vSWencryption(pDevice, pTransmitKey, pbyPayloadHead, (u16)(cbFrameBodySize + cbMIClen));
2133         }
2134     }
2135
2136     pMACHeader->seq_ctrl = cpu_to_le16(pDevice->wSeqCounter << 4);
2137     pDevice->wSeqCounter++ ;
2138     if (pDevice->wSeqCounter > 0x0fff)
2139         pDevice->wSeqCounter = 0;
2140
2141     if (bIsPSPOLL) {
2142         // The MAC will automatically replace the Duration-field of MAC header by Duration-field
2143         // of  FIFO control header.
2144         // This will cause AID-field of PS-POLL packet be incorrect (Because PS-POLL's AID field is
2145         // in the same place of other packet's Duration-field).
2146         // And it will cause Cisco-AP to issue Disassociation-packet
2147         if (byPktType == PK_TYPE_11GB || byPktType == PK_TYPE_11GA) {
2148                 ((struct vnt_tx_datahead_g *)pvTxDataHd)->wDuration_a =
2149                         cpu_to_le16(p80211Header->sA2.wDurationID);
2150                 ((struct vnt_tx_datahead_g *)pvTxDataHd)->wDuration_b =
2151                         cpu_to_le16(p80211Header->sA2.wDurationID);
2152         } else {
2153                 ((struct vnt_tx_datahead_ab *)pvTxDataHd)->wDuration =
2154                         cpu_to_le16(p80211Header->sA2.wDurationID);
2155         }
2156     }
2157
2158     pTX_Buffer->wTxByteCount = cpu_to_le16((u16)(cbReqCount));
2159     pTX_Buffer->byPKTNO = (u8) (((wCurrentRate<<4) &0x00F0) | ((pDevice->wSeqCounter - 1) & 0x000F));
2160     pTX_Buffer->byType = 0x00;
2161
2162     pContext->pPacket = skb;
2163     pContext->Type = CONTEXT_MGMT_PACKET;
2164     pContext->uBufLen = (u16)cbReqCount + 4;  //USB header
2165
2166     if (WLAN_GET_FC_TODS(pMACHeader->frame_control) == 0) {
2167         s_vSaveTxPktInfo(pDevice, (u8)(pTX_Buffer->byPKTNO & 0x0F),
2168                         &pMACHeader->addr1[0], (u16)cbFrameSize,
2169                         pTxBufHead->wFIFOCtl);
2170     }
2171     else {
2172         s_vSaveTxPktInfo(pDevice, (u8)(pTX_Buffer->byPKTNO & 0x0F),
2173                         &pMACHeader->addr3[0], (u16)cbFrameSize,
2174                         pTxBufHead->wFIFOCtl);
2175     }
2176     PIPEnsSendBulkOut(pDevice,pContext);
2177     return ;
2178
2179 }
2180
2181 //TYPE_AC0DMA data tx
2182 /*
2183  * Description:
2184  *      Tx packet via AC0DMA(DMA1)
2185  *
2186  * Parameters:
2187  *  In:
2188  *      pDevice         - Pointer to the adapter
2189  *      skb             - Pointer to tx skb packet
2190  *  Out:
2191  *      void
2192  *
2193  * Return Value: NULL
2194  */
2195
2196 int nsDMA_tx_packet(struct vnt_private *pDevice,
2197         u32 uDMAIdx, struct sk_buff *skb)
2198 {
2199         struct net_device_stats *pStats = &pDevice->stats;
2200         struct vnt_manager *pMgmt = &pDevice->vnt_mgmt;
2201         struct vnt_tx_buffer *pTX_Buffer;
2202         u32 BytesToWrite = 0, uHeaderLen = 0;
2203         u32 uNodeIndex = 0;
2204         u8 byMask[8] = {1, 2, 4, 8, 0x10, 0x20, 0x40, 0x80};
2205         u16 wAID;
2206         u8 byPktType;
2207         int bNeedEncryption = false;
2208         PSKeyItem pTransmitKey = NULL;
2209         SKeyItem STempKey;
2210         int ii;
2211         int bTKIP_UseGTK = false;
2212         int bNeedDeAuth = false;
2213         u8 *pbyBSSID;
2214         int bNodeExist = false;
2215         struct vnt_usb_send_context *pContext;
2216         bool fConvertedPacket;
2217         u32 status;
2218         u16 wKeepRate = pDevice->wCurrentRate;
2219         int bTxeapol_key = false;
2220
2221     if (pMgmt->eCurrMode == WMAC_MODE_ESS_AP) {
2222
2223         if (pDevice->uAssocCount == 0) {
2224             dev_kfree_skb_irq(skb);
2225             return 0;
2226         }
2227
2228         if (is_multicast_ether_addr((u8 *)(skb->data))) {
2229             uNodeIndex = 0;
2230             bNodeExist = true;
2231             if (pMgmt->sNodeDBTable[0].bPSEnable) {
2232
2233                 skb_queue_tail(&(pMgmt->sNodeDBTable[0].sTxPSQueue), skb);
2234                 pMgmt->sNodeDBTable[0].wEnQueueCnt++;
2235                 // set tx map
2236                 pMgmt->abyPSTxMap[0] |= byMask[0];
2237                 return 0;
2238             }
2239             // multicast/broadcast data rate
2240
2241             if (pDevice->byBBType != BB_TYPE_11A)
2242                 pDevice->wCurrentRate = RATE_2M;
2243             else
2244                 pDevice->wCurrentRate = RATE_24M;
2245             // long preamble type
2246             pDevice->byPreambleType = PREAMBLE_SHORT;
2247
2248         }else {
2249
2250             if (BSSbIsSTAInNodeDB(pDevice, (u8 *)(skb->data), &uNodeIndex)) {
2251
2252                 if (pMgmt->sNodeDBTable[uNodeIndex].bPSEnable) {
2253
2254                     skb_queue_tail(&pMgmt->sNodeDBTable[uNodeIndex].sTxPSQueue, skb);
2255
2256                     pMgmt->sNodeDBTable[uNodeIndex].wEnQueueCnt++;
2257                     // set tx map
2258                     wAID = pMgmt->sNodeDBTable[uNodeIndex].wAID;
2259                     pMgmt->abyPSTxMap[wAID >> 3] |=  byMask[wAID & 7];
2260                     DBG_PRT(MSG_LEVEL_DEBUG, KERN_INFO "Set:pMgmt->abyPSTxMap[%d]= %d\n",
2261                              (wAID >> 3), pMgmt->abyPSTxMap[wAID >> 3]);
2262
2263                     return 0;
2264                 }
2265                 // AP rate decided from node
2266                 pDevice->wCurrentRate = pMgmt->sNodeDBTable[uNodeIndex].wTxDataRate;
2267                 // tx preamble decided from node
2268
2269                 if (pMgmt->sNodeDBTable[uNodeIndex].bShortPreamble) {
2270                     pDevice->byPreambleType = pDevice->byShortPreamble;
2271
2272                 }else {
2273                     pDevice->byPreambleType = PREAMBLE_LONG;
2274                 }
2275                 bNodeExist = true;
2276             }
2277         }
2278
2279         if (bNodeExist == false) {
2280             DBG_PRT(MSG_LEVEL_DEBUG, KERN_DEBUG"Unknown STA not found in node DB \n");
2281             dev_kfree_skb_irq(skb);
2282             return 0;
2283         }
2284     }
2285
2286         pContext = (struct vnt_usb_send_context *)s_vGetFreeContext(pDevice);
2287
2288     if (pContext == NULL) {
2289         DBG_PRT(MSG_LEVEL_DEBUG, KERN_DEBUG" pContext == NULL\n");
2290         dev_kfree_skb_irq(skb);
2291         return STATUS_RESOURCES;
2292     }
2293
2294     memcpy(pDevice->sTxEthHeader.h_dest, (u8 *)(skb->data), ETH_HLEN);
2295
2296 //mike add:station mode check eapol-key challenge--->
2297 {
2298     u8  Protocol_Version;    //802.1x Authentication
2299     u8  Packet_Type;           //802.1x Authentication
2300     u8  Descriptor_type;
2301     u16 Key_info;
2302
2303     Protocol_Version = skb->data[ETH_HLEN];
2304     Packet_Type = skb->data[ETH_HLEN+1];
2305     Descriptor_type = skb->data[ETH_HLEN+1+1+2];
2306     Key_info = (skb->data[ETH_HLEN+1+1+2+1] << 8)|(skb->data[ETH_HLEN+1+1+2+2]);
2307         if (pDevice->sTxEthHeader.h_proto == cpu_to_be16(ETH_P_PAE)) {
2308                 /* 802.1x OR eapol-key challenge frame transfer */
2309                 if (((Protocol_Version == 1) || (Protocol_Version == 2)) &&
2310                         (Packet_Type == 3)) {
2311                         bTxeapol_key = true;
2312                        if(!(Key_info & BIT3) &&  //WPA or RSN group-key challenge
2313                            (Key_info & BIT8) && (Key_info & BIT9)) {    //send 2/2 key
2314                           if(Descriptor_type==254) {
2315                                pDevice->fWPA_Authened = true;
2316                              PRINT_K("WPA ");
2317                           }
2318                           else {
2319                                pDevice->fWPA_Authened = true;
2320                              PRINT_K("WPA2(re-keying) ");
2321                           }
2322                           PRINT_K("Authentication completed!!\n");
2323                         }
2324                     else if((Key_info & BIT3) && (Descriptor_type==2) &&  //RSN pairwise-key challenge
2325                                (Key_info & BIT8) && (Key_info & BIT9)) {
2326                           pDevice->fWPA_Authened = true;
2327                             PRINT_K("WPA2 Authentication completed!!\n");
2328                      }
2329              }
2330    }
2331 }
2332 //mike add:station mode check eapol-key challenge<---
2333
2334     if (pDevice->bEncryptionEnable == true) {
2335         bNeedEncryption = true;
2336         // get Transmit key
2337         do {
2338             if ((pMgmt->eCurrMode == WMAC_MODE_ESS_STA) &&
2339                 (pMgmt->eCurrState == WMAC_STATE_ASSOC)) {
2340                 pbyBSSID = pDevice->abyBSSID;
2341                 // get pairwise key
2342                 if (KeybGetTransmitKey(&(pDevice->sKey), pbyBSSID, PAIRWISE_KEY, &pTransmitKey) == false) {
2343                     // get group key
2344                     if(KeybGetTransmitKey(&(pDevice->sKey), pbyBSSID, GROUP_KEY, &pTransmitKey) == true) {
2345                         bTKIP_UseGTK = true;
2346                         DBG_PRT(MSG_LEVEL_DEBUG, KERN_DEBUG"Get GTK.\n");
2347                         break;
2348                     }
2349                 } else {
2350                     DBG_PRT(MSG_LEVEL_DEBUG, KERN_DEBUG"Get PTK.\n");
2351                     break;
2352                 }
2353             }else if (pMgmt->eCurrMode == WMAC_MODE_IBSS_STA) {
2354               /* TO_DS = 0 and FROM_DS = 0 --> 802.11 MAC Address1 */
2355                 pbyBSSID = pDevice->sTxEthHeader.h_dest;
2356                 DBG_PRT(MSG_LEVEL_DEBUG, KERN_DEBUG"IBSS Serach Key: \n");
2357                 for (ii = 0; ii< 6; ii++)
2358                     DBG_PRT(MSG_LEVEL_DEBUG, KERN_DEBUG"%x \n", *(pbyBSSID+ii));
2359                 DBG_PRT(MSG_LEVEL_DEBUG, KERN_DEBUG"\n");
2360
2361                 // get pairwise key
2362                 if(KeybGetTransmitKey(&(pDevice->sKey), pbyBSSID, PAIRWISE_KEY, &pTransmitKey) == true)
2363                     break;
2364             }
2365             // get group key
2366             pbyBSSID = pDevice->abyBroadcastAddr;
2367             if(KeybGetTransmitKey(&(pDevice->sKey), pbyBSSID, GROUP_KEY, &pTransmitKey) == false) {
2368                 pTransmitKey = NULL;
2369                 if (pMgmt->eCurrMode == WMAC_MODE_IBSS_STA) {
2370                     DBG_PRT(MSG_LEVEL_DEBUG, KERN_DEBUG"IBSS and KEY is NULL. [%d]\n", pMgmt->eCurrMode);
2371                 }
2372                 else
2373                     DBG_PRT(MSG_LEVEL_DEBUG, KERN_DEBUG"NOT IBSS and KEY is NULL. [%d]\n", pMgmt->eCurrMode);
2374             } else {
2375                 bTKIP_UseGTK = true;
2376                 DBG_PRT(MSG_LEVEL_DEBUG, KERN_DEBUG"Get GTK.\n");
2377             }
2378         } while(false);
2379     }
2380
2381     if (pDevice->bEnableHostWEP) {
2382         DBG_PRT(MSG_LEVEL_DEBUG, KERN_DEBUG"acdma0: STA index %d\n", uNodeIndex);
2383         if (pDevice->bEncryptionEnable == true) {
2384             pTransmitKey = &STempKey;
2385             pTransmitKey->byCipherSuite = pMgmt->sNodeDBTable[uNodeIndex].byCipherSuite;
2386             pTransmitKey->dwKeyIndex = pMgmt->sNodeDBTable[uNodeIndex].dwKeyIndex;
2387             pTransmitKey->uKeyLength = pMgmt->sNodeDBTable[uNodeIndex].uWepKeyLength;
2388             pTransmitKey->dwTSC47_16 = pMgmt->sNodeDBTable[uNodeIndex].dwTSC47_16;
2389             pTransmitKey->wTSC15_0 = pMgmt->sNodeDBTable[uNodeIndex].wTSC15_0;
2390             memcpy(pTransmitKey->abyKey,
2391                 &pMgmt->sNodeDBTable[uNodeIndex].abyWepKey[0],
2392                 pTransmitKey->uKeyLength
2393                 );
2394          }
2395     }
2396
2397     byPktType = (u8)pDevice->byPacketType;
2398
2399     if (pDevice->bFixRate) {
2400         if (pDevice->byBBType == BB_TYPE_11B) {
2401             if (pDevice->uConnectionRate >= RATE_11M) {
2402                 pDevice->wCurrentRate = RATE_11M;
2403             } else {
2404                 pDevice->wCurrentRate = (u16)pDevice->uConnectionRate;
2405             }
2406         } else {
2407             if ((pDevice->byBBType == BB_TYPE_11A) &&
2408                 (pDevice->uConnectionRate <= RATE_6M)) {
2409                 pDevice->wCurrentRate = RATE_6M;
2410             } else {
2411                 if (pDevice->uConnectionRate >= RATE_54M)
2412                     pDevice->wCurrentRate = RATE_54M;
2413                 else
2414                     pDevice->wCurrentRate = (u16)pDevice->uConnectionRate;
2415             }
2416         }
2417     }
2418     else {
2419         if (pDevice->eOPMode == OP_MODE_ADHOC) {
2420             // Adhoc Tx rate decided from node DB
2421             if (is_multicast_ether_addr(pDevice->sTxEthHeader.h_dest)) {
2422                 // Multicast use highest data rate
2423                 pDevice->wCurrentRate = pMgmt->sNodeDBTable[0].wTxDataRate;
2424                 // preamble type
2425                 pDevice->byPreambleType = pDevice->byShortPreamble;
2426             }
2427             else {
2428                 if (BSSbIsSTAInNodeDB(pDevice, &(pDevice->sTxEthHeader.h_dest[0]), &uNodeIndex)) {
2429                     pDevice->wCurrentRate = pMgmt->sNodeDBTable[uNodeIndex].wTxDataRate;
2430                     if (pMgmt->sNodeDBTable[uNodeIndex].bShortPreamble) {
2431                         pDevice->byPreambleType = pDevice->byShortPreamble;
2432
2433                     }
2434                     else {
2435                         pDevice->byPreambleType = PREAMBLE_LONG;
2436                     }
2437                     DBG_PRT(MSG_LEVEL_DEBUG, KERN_INFO"Found Node Index is [%d]  Tx Data Rate:[%d]\n",uNodeIndex, pDevice->wCurrentRate);
2438                 }
2439                 else {
2440                     if (pDevice->byBBType != BB_TYPE_11A)
2441                        pDevice->wCurrentRate = RATE_2M;
2442                     else
2443                        pDevice->wCurrentRate = RATE_24M; // refer to vMgrCreateOwnIBSS()'s
2444                                                          // abyCurrExtSuppRates[]
2445                     pDevice->byPreambleType = PREAMBLE_SHORT;
2446                     DBG_PRT(MSG_LEVEL_DEBUG, KERN_INFO"Not Found Node use highest basic Rate.....\n");
2447                 }
2448             }
2449         }
2450         if (pDevice->eOPMode == OP_MODE_INFRASTRUCTURE) {
2451             // Infra STA rate decided from AP Node, index = 0
2452             pDevice->wCurrentRate = pMgmt->sNodeDBTable[0].wTxDataRate;
2453         }
2454     }
2455
2456         if (pDevice->sTxEthHeader.h_proto == cpu_to_be16(ETH_P_PAE)) {
2457                 if (pDevice->byBBType != BB_TYPE_11A) {
2458                         pDevice->wCurrentRate = RATE_1M;
2459                         pDevice->byACKRate = RATE_1M;
2460                         pDevice->byTopCCKBasicRate = RATE_1M;
2461                         pDevice->byTopOFDMBasicRate = RATE_6M;
2462                 } else {
2463                         pDevice->wCurrentRate = RATE_6M;
2464                         pDevice->byACKRate = RATE_6M;
2465                         pDevice->byTopCCKBasicRate = RATE_1M;
2466                         pDevice->byTopOFDMBasicRate = RATE_6M;
2467                 }
2468         }
2469
2470     DBG_PRT(MSG_LEVEL_DEBUG,
2471             KERN_INFO "dma_tx: pDevice->wCurrentRate = %d\n",
2472             pDevice->wCurrentRate);
2473
2474     if (wKeepRate != pDevice->wCurrentRate) {
2475         bScheduleCommand((void *) pDevice, WLAN_CMD_SETPOWER, NULL);
2476     }
2477
2478     if (pDevice->wCurrentRate <= RATE_11M) {
2479         byPktType = PK_TYPE_11B;
2480     }
2481
2482     if (bNeedEncryption == true) {
2483         DBG_PRT(MSG_LEVEL_DEBUG, KERN_INFO"ntohs Pkt Type=%04x\n", ntohs(pDevice->sTxEthHeader.h_proto));
2484         if ((pDevice->sTxEthHeader.h_proto) == cpu_to_be16(ETH_P_PAE)) {
2485                 bNeedEncryption = false;
2486             DBG_PRT(MSG_LEVEL_DEBUG, KERN_INFO"Pkt Type=%04x\n", (pDevice->sTxEthHeader.h_proto));
2487             if ((pMgmt->eCurrMode == WMAC_MODE_ESS_STA) && (pMgmt->eCurrState == WMAC_STATE_ASSOC)) {
2488                 if (pTransmitKey == NULL) {
2489                     DBG_PRT(MSG_LEVEL_DEBUG, KERN_INFO"Don't Find TX KEY\n");
2490                 }
2491                 else {
2492                     if (bTKIP_UseGTK == true) {
2493                         DBG_PRT(MSG_LEVEL_DEBUG, KERN_INFO"error: KEY is GTK!!~~\n");
2494                     }
2495                     else {
2496                         DBG_PRT(MSG_LEVEL_DEBUG, KERN_INFO"Find PTK [%X]\n",
2497                                 pTransmitKey->dwKeyIndex);
2498                         bNeedEncryption = true;
2499                     }
2500                 }
2501             }
2502
2503             if (pDevice->bEnableHostWEP) {
2504                 if ((uNodeIndex != 0) &&
2505                     (pMgmt->sNodeDBTable[uNodeIndex].dwKeyIndex & PAIRWISE_KEY)) {
2506                         DBG_PRT(MSG_LEVEL_DEBUG, KERN_INFO"Find PTK [%X]\n",
2507                                 pTransmitKey->dwKeyIndex);
2508                     bNeedEncryption = true;
2509                  }
2510              }
2511         }
2512         else {
2513
2514             if (pTransmitKey == NULL) {
2515                 DBG_PRT(MSG_LEVEL_DEBUG, KERN_INFO"return no tx key\n");
2516                 pContext->bBoolInUse = false;
2517                 dev_kfree_skb_irq(skb);
2518                 pStats->tx_dropped++;
2519                 return STATUS_FAILURE;
2520             }
2521         }
2522     }
2523
2524         pTX_Buffer = (struct vnt_tx_buffer *)&pContext->Data[0];
2525
2526     fConvertedPacket = s_bPacketToWirelessUsb(pDevice, byPktType,
2527                         pTX_Buffer, bNeedEncryption,
2528                         skb->len, uDMAIdx, &pDevice->sTxEthHeader,
2529                         (u8 *)skb->data, pTransmitKey, uNodeIndex,
2530                         pDevice->wCurrentRate,
2531                         &uHeaderLen, &BytesToWrite
2532                        );
2533
2534     if (fConvertedPacket == false) {
2535         pContext->bBoolInUse = false;
2536         dev_kfree_skb_irq(skb);
2537         return STATUS_FAILURE;
2538     }
2539
2540     if ( pDevice->bEnablePSMode == true ) {
2541         if ( !pDevice->bPSModeTxBurst ) {
2542                 bScheduleCommand((void *) pDevice,
2543                                  WLAN_CMD_MAC_DISPOWERSAVING,
2544                                  NULL);
2545             pDevice->bPSModeTxBurst = true;
2546         }
2547     }
2548
2549     pTX_Buffer->byPKTNO = (u8) (((pDevice->wCurrentRate<<4) &0x00F0) | ((pDevice->wSeqCounter - 1) & 0x000F));
2550     pTX_Buffer->wTxByteCount = (u16)BytesToWrite;
2551
2552     pContext->pPacket = skb;
2553     pContext->Type = CONTEXT_DATA_PACKET;
2554     pContext->uBufLen = (u16)BytesToWrite + 4 ; //USB header
2555
2556     s_vSaveTxPktInfo(pDevice, (u8)(pTX_Buffer->byPKTNO & 0x0F),
2557                         &pContext->sEthHeader.h_dest[0],
2558                         (u16)(BytesToWrite-uHeaderLen),
2559                         pTX_Buffer->fifo_head.wFIFOCtl);
2560
2561     status = PIPEnsSendBulkOut(pDevice,pContext);
2562
2563     if (bNeedDeAuth == true) {
2564         u16 wReason = WLAN_MGMT_REASON_MIC_FAILURE;
2565
2566         bScheduleCommand((void *) pDevice, WLAN_CMD_DEAUTH, (u8 *) &wReason);
2567     }
2568
2569   if(status!=STATUS_PENDING) {
2570      pContext->bBoolInUse = false;
2571     dev_kfree_skb_irq(skb);
2572     return STATUS_FAILURE;
2573   }
2574   else
2575     return 0;
2576
2577 }
2578
2579 /*
2580  * Description:
2581  *      Relay packet send (AC1DMA) from rx dpc.
2582  *
2583  * Parameters:
2584  *  In:
2585  *      pDevice         - Pointer to the adapter
2586  *      pPacket         - Pointer to rx packet
2587  *      cbPacketSize    - rx ethernet frame size
2588  *  Out:
2589  *      TURE, false
2590  *
2591  * Return Value: Return true if packet is copy to dma1; otherwise false
2592  */
2593
2594 int bRelayPacketSend(struct vnt_private *pDevice, u8 *pbySkbData, u32 uDataLen,
2595         u32 uNodeIndex)
2596 {
2597         struct vnt_manager *pMgmt = &pDevice->vnt_mgmt;
2598         struct vnt_tx_buffer *pTX_Buffer;
2599         u32 BytesToWrite = 0, uHeaderLen = 0;
2600         u8 byPktType = PK_TYPE_11B;
2601         int bNeedEncryption = false;
2602         SKeyItem STempKey;
2603         PSKeyItem pTransmitKey = NULL;
2604         u8 *pbyBSSID;
2605         struct vnt_usb_send_context *pContext;
2606         u8 byPktTyp;
2607         int fConvertedPacket;
2608         u32 status;
2609         u16 wKeepRate = pDevice->wCurrentRate;
2610
2611         pContext = (struct vnt_usb_send_context *)s_vGetFreeContext(pDevice);
2612
2613     if (NULL == pContext) {
2614         return false;
2615     }
2616
2617     memcpy(pDevice->sTxEthHeader.h_dest, (u8 *)pbySkbData, ETH_HLEN);
2618
2619     if (pDevice->bEncryptionEnable == true) {
2620         bNeedEncryption = true;
2621         // get group key
2622         pbyBSSID = pDevice->abyBroadcastAddr;
2623         if(KeybGetTransmitKey(&(pDevice->sKey), pbyBSSID, GROUP_KEY, &pTransmitKey) == false) {
2624             pTransmitKey = NULL;
2625             DBG_PRT(MSG_LEVEL_DEBUG, KERN_DEBUG"KEY is NULL. [%d]\n", pMgmt->eCurrMode);
2626         } else {
2627             DBG_PRT(MSG_LEVEL_DEBUG, KERN_DEBUG"Get GTK.\n");
2628         }
2629     }
2630
2631     if (pDevice->bEnableHostWEP) {
2632         if (uNodeIndex < MAX_NODE_NUM + 1) {
2633             pTransmitKey = &STempKey;
2634             pTransmitKey->byCipherSuite = pMgmt->sNodeDBTable[uNodeIndex].byCipherSuite;
2635             pTransmitKey->dwKeyIndex = pMgmt->sNodeDBTable[uNodeIndex].dwKeyIndex;
2636             pTransmitKey->uKeyLength = pMgmt->sNodeDBTable[uNodeIndex].uWepKeyLength;
2637             pTransmitKey->dwTSC47_16 = pMgmt->sNodeDBTable[uNodeIndex].dwTSC47_16;
2638             pTransmitKey->wTSC15_0 = pMgmt->sNodeDBTable[uNodeIndex].wTSC15_0;
2639             memcpy(pTransmitKey->abyKey,
2640                     &pMgmt->sNodeDBTable[uNodeIndex].abyWepKey[0],
2641                     pTransmitKey->uKeyLength
2642                   );
2643         }
2644     }
2645
2646     if ( bNeedEncryption && (pTransmitKey == NULL) ) {
2647         pContext->bBoolInUse = false;
2648         return false;
2649     }
2650
2651     byPktTyp = (u8)pDevice->byPacketType;
2652
2653     if (pDevice->bFixRate) {
2654         if (pDevice->byBBType == BB_TYPE_11B) {
2655             if (pDevice->uConnectionRate >= RATE_11M) {
2656                 pDevice->wCurrentRate = RATE_11M;
2657             } else {
2658                 pDevice->wCurrentRate = (u16)pDevice->uConnectionRate;
2659             }
2660         } else {
2661             if ((pDevice->byBBType == BB_TYPE_11A) &&
2662                 (pDevice->uConnectionRate <= RATE_6M)) {
2663                 pDevice->wCurrentRate = RATE_6M;
2664             } else {
2665                 if (pDevice->uConnectionRate >= RATE_54M)
2666                     pDevice->wCurrentRate = RATE_54M;
2667                 else
2668                     pDevice->wCurrentRate = (u16)pDevice->uConnectionRate;
2669             }
2670         }
2671     }
2672     else {
2673         pDevice->wCurrentRate = pMgmt->sNodeDBTable[uNodeIndex].wTxDataRate;
2674     }
2675
2676     if (wKeepRate != pDevice->wCurrentRate) {
2677         bScheduleCommand((void *) pDevice, WLAN_CMD_SETPOWER, NULL);
2678     }
2679
2680     if (pDevice->wCurrentRate <= RATE_11M)
2681         byPktType = PK_TYPE_11B;
2682
2683     BytesToWrite = uDataLen + ETH_FCS_LEN;
2684
2685     // Convert the packet to an usb frame and copy into our buffer
2686     // and send the irp.
2687
2688         pTX_Buffer = (struct vnt_tx_buffer *)&pContext->Data[0];
2689
2690     fConvertedPacket = s_bPacketToWirelessUsb(pDevice, byPktType,
2691                         pTX_Buffer, bNeedEncryption,
2692                          uDataLen, TYPE_AC0DMA, &pDevice->sTxEthHeader,
2693                          pbySkbData, pTransmitKey, uNodeIndex,
2694                          pDevice->wCurrentRate,
2695                          &uHeaderLen, &BytesToWrite
2696                         );
2697
2698     if (fConvertedPacket == false) {
2699         pContext->bBoolInUse = false;
2700         return false;
2701     }
2702
2703     pTX_Buffer->byPKTNO = (u8) (((pDevice->wCurrentRate<<4) &0x00F0) | ((pDevice->wSeqCounter - 1) & 0x000F));
2704     pTX_Buffer->wTxByteCount = (u16)BytesToWrite;
2705
2706     pContext->pPacket = NULL;
2707     pContext->Type = CONTEXT_DATA_PACKET;
2708     pContext->uBufLen = (u16)BytesToWrite + 4 ; //USB header
2709
2710     s_vSaveTxPktInfo(pDevice, (u8)(pTX_Buffer->byPKTNO & 0x0F),
2711                 &pContext->sEthHeader.h_dest[0],
2712                 (u16)(BytesToWrite - uHeaderLen),
2713                 pTX_Buffer->fifo_head.wFIFOCtl);
2714
2715     status = PIPEnsSendBulkOut(pDevice,pContext);
2716
2717     return true;
2718 }
2719