Merge tag 'sound-5.13-rc3' of git://git.kernel.org/pub/scm/linux/kernel/git/tiwai...
[linux-2.6-microblaze.git] / drivers / staging / rtl8712 / rtl871x_cmd.c
1 // SPDX-License-Identifier: GPL-2.0
2 /******************************************************************************
3  * rtl871x_cmd.c
4  *
5  * Copyright(c) 2007 - 2010 Realtek Corporation. All rights reserved.
6  * Linux device driver for RTL8192SU
7  *
8  * Modifications for inclusion into the Linux staging tree are
9  * Copyright(c) 2010 Larry Finger. All rights reserved.
10  *
11  * Contact information:
12  * WLAN FAE <wlanfae@realtek.com>
13  * Larry Finger <Larry.Finger@lwfinger.net>
14  *
15  ******************************************************************************/
16
17 #define _RTL871X_CMD_C_
18
19 #include <linux/compiler.h>
20 #include <linux/kernel.h>
21 #include <linux/errno.h>
22 #include <linux/slab.h>
23 #include <linux/module.h>
24 #include <linux/kref.h>
25 #include <linux/netdevice.h>
26 #include <linux/skbuff.h>
27 #include <linux/usb.h>
28 #include <linux/usb/ch9.h>
29 #include <linux/circ_buf.h>
30 #include <linux/uaccess.h>
31 #include <asm/byteorder.h>
32 #include <linux/atomic.h>
33 #include <linux/semaphore.h>
34 #include <linux/rtnetlink.h>
35
36 #include "osdep_service.h"
37 #include "drv_types.h"
38 #include "recv_osdep.h"
39 #include "mlme_osdep.h"
40
41 /*
42  * Caller and the r8712_cmd_thread can protect cmd_q by spin_lock.
43  * No irqsave is necessary.
44  */
45
46 int r8712_init_cmd_priv(struct cmd_priv *pcmdpriv)
47 {
48         init_completion(&pcmdpriv->cmd_queue_comp);
49         init_completion(&pcmdpriv->terminate_cmdthread_comp);
50
51         _init_queue(&(pcmdpriv->cmd_queue));
52
53         /* allocate DMA-able/Non-Page memory for cmd_buf and rsp_buf */
54         pcmdpriv->cmd_seq = 1;
55         pcmdpriv->cmd_allocated_buf = kmalloc(MAX_CMDSZ + CMDBUFF_ALIGN_SZ,
56                                               GFP_ATOMIC);
57         if (!pcmdpriv->cmd_allocated_buf)
58                 return -ENOMEM;
59         pcmdpriv->cmd_buf = pcmdpriv->cmd_allocated_buf  +  CMDBUFF_ALIGN_SZ -
60                             ((addr_t)(pcmdpriv->cmd_allocated_buf) &
61                             (CMDBUFF_ALIGN_SZ - 1));
62         pcmdpriv->rsp_allocated_buf = kmalloc(MAX_RSPSZ + 4, GFP_ATOMIC);
63         if (!pcmdpriv->rsp_allocated_buf) {
64                 kfree(pcmdpriv->cmd_allocated_buf);
65                 pcmdpriv->cmd_allocated_buf = NULL;
66                 return -ENOMEM;
67         }
68         pcmdpriv->rsp_buf = pcmdpriv->rsp_allocated_buf  +  4 -
69                             ((addr_t)(pcmdpriv->rsp_allocated_buf) & 3);
70         pcmdpriv->cmd_issued_cnt = 0;
71         pcmdpriv->cmd_done_cnt = 0;
72         pcmdpriv->rsp_cnt = 0;
73         return 0;
74 }
75
76 int r8712_init_evt_priv(struct evt_priv *pevtpriv)
77 {
78         /* allocate DMA-able/Non-Page memory for cmd_buf and rsp_buf */
79         pevtpriv->event_seq = 0;
80         pevtpriv->evt_allocated_buf = kmalloc(MAX_EVTSZ + 4, GFP_ATOMIC);
81
82         if (!pevtpriv->evt_allocated_buf)
83                 return -ENOMEM;
84         pevtpriv->evt_buf = pevtpriv->evt_allocated_buf  +  4 -
85                             ((addr_t)(pevtpriv->evt_allocated_buf) & 3);
86         pevtpriv->evt_done_cnt = 0;
87         return 0;
88 }
89
90 void r8712_free_evt_priv(struct evt_priv *pevtpriv)
91 {
92         kfree(pevtpriv->evt_allocated_buf);
93 }
94
95 void r8712_free_cmd_priv(struct cmd_priv *pcmdpriv)
96 {
97         if (pcmdpriv) {
98                 kfree(pcmdpriv->cmd_allocated_buf);
99                 kfree(pcmdpriv->rsp_allocated_buf);
100         }
101 }
102
103 /*
104  * Calling Context:
105  *
106  * r8712_enqueue_cmd can only be called between kernel thread,
107  * since only spin_lock is used.
108  *
109  * ISR/Call-Back functions can't call this sub-function.
110  *
111  */
112
113 void r8712_enqueue_cmd(struct cmd_priv *pcmdpriv, struct cmd_obj *obj)
114 {
115         struct __queue *queue;
116         unsigned long irqL;
117
118         if (pcmdpriv->padapter->eeprompriv.bautoload_fail_flag)
119                 return;
120         if (!obj)
121                 return;
122         queue = &pcmdpriv->cmd_queue;
123         spin_lock_irqsave(&queue->lock, irqL);
124         list_add_tail(&obj->list, &queue->queue);
125         spin_unlock_irqrestore(&queue->lock, irqL);
126         complete(&pcmdpriv->cmd_queue_comp);
127 }
128
129 struct cmd_obj *r8712_dequeue_cmd(struct  __queue *queue)
130 {
131         unsigned long irqL;
132         struct cmd_obj *obj;
133
134         spin_lock_irqsave(&queue->lock, irqL);
135         obj = list_first_entry_or_null(&queue->queue,
136                                        struct cmd_obj, list);
137         if (obj)
138                 list_del_init(&obj->list);
139         spin_unlock_irqrestore(&queue->lock, irqL);
140         return obj;
141 }
142
143 void r8712_enqueue_cmd_ex(struct cmd_priv *pcmdpriv, struct cmd_obj *obj)
144 {
145         unsigned long irqL;
146         struct  __queue *queue;
147
148         if (!obj)
149                 return;
150         if (pcmdpriv->padapter->eeprompriv.bautoload_fail_flag)
151                 return;
152         queue = &pcmdpriv->cmd_queue;
153         spin_lock_irqsave(&queue->lock, irqL);
154         list_add_tail(&obj->list, &queue->queue);
155         spin_unlock_irqrestore(&queue->lock, irqL);
156         complete(&pcmdpriv->cmd_queue_comp);
157 }
158
159 void r8712_free_cmd_obj(struct cmd_obj *pcmd)
160 {
161         if ((pcmd->cmdcode != _JoinBss_CMD_) &&
162             (pcmd->cmdcode != _CreateBss_CMD_))
163                 kfree(pcmd->parmbuf);
164         if (pcmd->rsp) {
165                 if (pcmd->rspsz != 0)
166                         kfree(pcmd->rsp);
167         }
168         kfree(pcmd);
169 }
170
171 u8 r8712_sitesurvey_cmd(struct _adapter *padapter,
172                         struct ndis_802_11_ssid *pssid)
173         __must_hold(&padapter->mlmepriv.lock)
174 {
175         struct cmd_obj  *ph2c;
176         struct sitesurvey_parm  *psurveyPara;
177         struct cmd_priv *pcmdpriv = &padapter->cmdpriv;
178         struct mlme_priv *pmlmepriv = &padapter->mlmepriv;
179
180         ph2c = kmalloc(sizeof(*ph2c), GFP_ATOMIC);
181         if (!ph2c)
182                 return _FAIL;
183         psurveyPara = kmalloc(sizeof(*psurveyPara), GFP_ATOMIC);
184         if (!psurveyPara) {
185                 kfree(ph2c);
186                 return _FAIL;
187         }
188         init_h2fwcmd_w_parm_no_rsp(ph2c, psurveyPara,
189                                    GEN_CMD_CODE(_SiteSurvey));
190         psurveyPara->bsslimit = cpu_to_le32(48);
191         psurveyPara->passive_mode = cpu_to_le32(pmlmepriv->passive_mode);
192         psurveyPara->ss_ssidlen = 0;
193         memset(psurveyPara->ss_ssid, 0, IW_ESSID_MAX_SIZE + 1);
194         if (pssid && pssid->SsidLength) {
195                 int len = min_t(int, pssid->SsidLength, IW_ESSID_MAX_SIZE);
196
197                 memcpy(psurveyPara->ss_ssid, pssid->Ssid, len);
198                 psurveyPara->ss_ssidlen = cpu_to_le32(len);
199         }
200         set_fwstate(pmlmepriv, _FW_UNDER_SURVEY);
201         r8712_enqueue_cmd(pcmdpriv, ph2c);
202         mod_timer(&pmlmepriv->scan_to_timer,
203                   jiffies + msecs_to_jiffies(SCANNING_TIMEOUT));
204         padapter->ledpriv.LedControlHandler(padapter, LED_CTL_SITE_SURVEY);
205         padapter->blnEnableRxFF0Filter = 0;
206         return _SUCCESS;
207 }
208
209 int r8712_setdatarate_cmd(struct _adapter *padapter, u8 *rateset)
210 {
211         struct cmd_obj          *ph2c;
212         struct setdatarate_parm *pbsetdataratepara;
213         struct cmd_priv         *pcmdpriv = &padapter->cmdpriv;
214
215         ph2c = kmalloc(sizeof(*ph2c), GFP_ATOMIC);
216         if (!ph2c)
217                 return -ENOMEM;
218         pbsetdataratepara = kmalloc(sizeof(*pbsetdataratepara), GFP_ATOMIC);
219         if (!pbsetdataratepara) {
220                 kfree(ph2c);
221                 return -ENOMEM;
222         }
223         init_h2fwcmd_w_parm_no_rsp(ph2c, pbsetdataratepara,
224                                    GEN_CMD_CODE(_SetDataRate));
225         pbsetdataratepara->mac_id = 5;
226         memcpy(pbsetdataratepara->datarates, rateset, NumRates);
227         r8712_enqueue_cmd(pcmdpriv, ph2c);
228         return 0;
229 }
230
231 void r8712_set_chplan_cmd(struct _adapter *padapter, int chplan)
232 {
233         struct cmd_obj *ph2c;
234         struct SetChannelPlan_param *psetchplanpara;
235         struct cmd_priv *pcmdpriv = &padapter->cmdpriv;
236
237         ph2c = kmalloc(sizeof(*ph2c), GFP_ATOMIC);
238         if (!ph2c)
239                 return;
240         psetchplanpara = kmalloc(sizeof(*psetchplanpara), GFP_ATOMIC);
241         if (!psetchplanpara) {
242                 kfree(ph2c);
243                 return;
244         }
245         init_h2fwcmd_w_parm_no_rsp(ph2c, psetchplanpara,
246                                 GEN_CMD_CODE(_SetChannelPlan));
247         psetchplanpara->ChannelPlan = chplan;
248         r8712_enqueue_cmd(pcmdpriv, ph2c);
249 }
250
251 int r8712_setrfreg_cmd(struct _adapter  *padapter, u8 offset, u32 val)
252 {
253         struct cmd_obj *ph2c;
254         struct writeRF_parm *pwriterfparm;
255         struct cmd_priv *pcmdpriv = &padapter->cmdpriv;
256
257         ph2c = kmalloc(sizeof(*ph2c), GFP_ATOMIC);
258         if (!ph2c)
259                 return -ENOMEM;
260         pwriterfparm = kmalloc(sizeof(*pwriterfparm), GFP_ATOMIC);
261         if (!pwriterfparm) {
262                 kfree(ph2c);
263                 return -ENOMEM;
264         }
265         init_h2fwcmd_w_parm_no_rsp(ph2c, pwriterfparm, GEN_CMD_CODE(_SetRFReg));
266         pwriterfparm->offset = offset;
267         pwriterfparm->value = val;
268         r8712_enqueue_cmd(pcmdpriv, ph2c);
269         return 0;
270 }
271
272 int r8712_getrfreg_cmd(struct _adapter *padapter, u8 offset, u8 *pval)
273 {
274         struct cmd_obj *ph2c;
275         struct readRF_parm *prdrfparm;
276         struct cmd_priv *pcmdpriv = &padapter->cmdpriv;
277
278         ph2c = kmalloc(sizeof(*ph2c), GFP_ATOMIC);
279         if (!ph2c)
280                 return -ENOMEM;
281         prdrfparm = kmalloc(sizeof(*prdrfparm), GFP_ATOMIC);
282         if (!prdrfparm) {
283                 kfree(ph2c);
284                 return -ENOMEM;
285         }
286         INIT_LIST_HEAD(&ph2c->list);
287         ph2c->cmdcode = GEN_CMD_CODE(_GetRFReg);
288         ph2c->parmbuf = (unsigned char *)prdrfparm;
289         ph2c->cmdsz =  sizeof(struct readRF_parm);
290         ph2c->rsp = pval;
291         ph2c->rspsz = sizeof(struct readRF_rsp);
292         prdrfparm->offset = offset;
293         r8712_enqueue_cmd(pcmdpriv, ph2c);
294         return 0;
295 }
296
297 void r8712_getbbrfreg_cmdrsp_callback(struct _adapter *padapter,
298                                       struct cmd_obj *pcmd)
299 {
300         kfree(pcmd->parmbuf);
301         kfree(pcmd);
302         padapter->mppriv.workparam.bcompleted = true;
303 }
304
305 void r8712_readtssi_cmdrsp_callback(struct _adapter *padapter,
306                                 struct cmd_obj *pcmd)
307 {
308         kfree(pcmd->parmbuf);
309         kfree(pcmd);
310
311         padapter->mppriv.workparam.bcompleted = true;
312 }
313
314 int r8712_createbss_cmd(struct _adapter *padapter)
315 {
316         struct cmd_obj *pcmd;
317         struct cmd_priv *pcmdpriv = &padapter->cmdpriv;
318         struct wlan_bssid_ex *pdev_network =
319                                  &padapter->registrypriv.dev_network;
320
321         padapter->ledpriv.LedControlHandler(padapter, LED_CTL_START_TO_LINK);
322         pcmd = kmalloc(sizeof(*pcmd), GFP_ATOMIC);
323         if (!pcmd)
324                 return -ENOMEM;
325         INIT_LIST_HEAD(&pcmd->list);
326         pcmd->cmdcode = _CreateBss_CMD_;
327         pcmd->parmbuf = (unsigned char *)pdev_network;
328         pcmd->cmdsz = r8712_get_wlan_bssid_ex_sz(pdev_network);
329         pcmd->rsp = NULL;
330         pcmd->rspsz = 0;
331         /* notes: translate IELength & Length after assign to cmdsz; */
332         pdev_network->Length = pcmd->cmdsz;
333         pdev_network->IELength = pdev_network->IELength;
334         pdev_network->Ssid.SsidLength = pdev_network->Ssid.SsidLength;
335         r8712_enqueue_cmd(pcmdpriv, pcmd);
336         return 0;
337 }
338
339 int r8712_joinbss_cmd(struct _adapter  *padapter, struct wlan_network *pnetwork)
340 {
341         struct wlan_bssid_ex *psecnetwork;
342         struct cmd_obj          *pcmd;
343         struct cmd_priv         *pcmdpriv = &padapter->cmdpriv;
344         struct mlme_priv        *pmlmepriv = &padapter->mlmepriv;
345         struct qos_priv         *pqospriv = &pmlmepriv->qospriv;
346         struct security_priv    *psecuritypriv = &padapter->securitypriv;
347         struct registry_priv    *pregistrypriv = &padapter->registrypriv;
348         enum NDIS_802_11_NETWORK_INFRASTRUCTURE ndis_network_mode =
349                 pnetwork->network.InfrastructureMode;
350
351         padapter->ledpriv.LedControlHandler(padapter, LED_CTL_START_TO_LINK);
352         pcmd = kmalloc(sizeof(*pcmd), GFP_ATOMIC);
353         if (!pcmd)
354                 return -ENOMEM;
355
356         /* for hidden ap to set fw_state here */
357         if (check_fwstate(pmlmepriv, WIFI_STATION_STATE | WIFI_ADHOC_STATE) !=
358             true) {
359                 switch (ndis_network_mode) {
360                 case Ndis802_11IBSS:
361                         pmlmepriv->fw_state |= WIFI_ADHOC_STATE;
362                         break;
363                 case Ndis802_11Infrastructure:
364                         pmlmepriv->fw_state |= WIFI_STATION_STATE;
365                         break;
366                 case Ndis802_11APMode:
367                 case Ndis802_11AutoUnknown:
368                 case Ndis802_11InfrastructureMax:
369                         break;
370                 }
371         }
372         psecnetwork = &psecuritypriv->sec_bss;
373         memcpy(psecnetwork, &pnetwork->network, sizeof(*psecnetwork));
374         psecuritypriv->authenticator_ie[0] = (unsigned char)
375                                              psecnetwork->IELength;
376         if ((psecnetwork->IELength - 12) < (256 - 1))
377                 memcpy(&psecuritypriv->authenticator_ie[1],
378                         &psecnetwork->IEs[12], psecnetwork->IELength - 12);
379         else
380                 memcpy(&psecuritypriv->authenticator_ie[1],
381                         &psecnetwork->IEs[12], (256 - 1));
382         psecnetwork->IELength = 0;
383         /*
384          * If the driver wants to use the bssid to create the connection.
385          * If not, we copy the connecting AP's MAC address to it so that
386          * the driver just has the bssid information for PMKIDList searching.
387          */
388         if (!pmlmepriv->assoc_by_bssid)
389                 ether_addr_copy(&pmlmepriv->assoc_bssid[0],
390                                 &pnetwork->network.MacAddress[0]);
391         psecnetwork->IELength = r8712_restruct_sec_ie(padapter,
392                                                 &pnetwork->network.IEs[0],
393                                                 &psecnetwork->IEs[0],
394                                                 pnetwork->network.IELength);
395         pqospriv->qos_option = 0;
396         if (pregistrypriv->wmm_enable) {
397                 u32 tmp_len;
398
399                 tmp_len = r8712_restruct_wmm_ie(padapter,
400                                           &pnetwork->network.IEs[0],
401                                           &psecnetwork->IEs[0],
402                                           pnetwork->network.IELength,
403                                           psecnetwork->IELength);
404                 if (psecnetwork->IELength != tmp_len) {
405                         psecnetwork->IELength = tmp_len;
406                         pqospriv->qos_option = 1; /* WMM IE in beacon */
407                 } else {
408                         pqospriv->qos_option = 0; /* no WMM IE in beacon */
409                 }
410         }
411         if (pregistrypriv->ht_enable) {
412                 /*
413                  * For WEP mode, we will use the bg mode to do the connection
414                  * to avoid some IOT issues, especially for Realtek 8192u
415                  * SoftAP.
416                  */
417                 if ((padapter->securitypriv.PrivacyAlgrthm != _WEP40_) &&
418                     (padapter->securitypriv.PrivacyAlgrthm != _WEP104_)) {
419                         /* restructure_ht_ie */
420                         r8712_restructure_ht_ie(padapter,
421                                                 &pnetwork->network.IEs[0],
422                                                 &psecnetwork->IEs[0],
423                                                 pnetwork->network.IELength,
424                                                 &psecnetwork->IELength);
425                 }
426         }
427         psecuritypriv->supplicant_ie[0] = (u8)psecnetwork->IELength;
428         if (psecnetwork->IELength < 255)
429                 memcpy(&psecuritypriv->supplicant_ie[1], &psecnetwork->IEs[0],
430                         psecnetwork->IELength);
431         else
432                 memcpy(&psecuritypriv->supplicant_ie[1], &psecnetwork->IEs[0],
433                         255);
434         /* get cmdsz before endian conversion */
435         pcmd->cmdsz = r8712_get_wlan_bssid_ex_sz(psecnetwork);
436 #ifdef __BIG_ENDIAN
437         /* wlan_network endian conversion */
438         psecnetwork->Length = cpu_to_le32(psecnetwork->Length);
439         psecnetwork->Ssid.SsidLength = cpu_to_le32(
440                                        psecnetwork->Ssid.SsidLength);
441         psecnetwork->Privacy = cpu_to_le32(psecnetwork->Privacy);
442         psecnetwork->Rssi = cpu_to_le32(psecnetwork->Rssi);
443         psecnetwork->NetworkTypeInUse = cpu_to_le32(
444                                         psecnetwork->NetworkTypeInUse);
445         psecnetwork->Configuration.ATIMWindow = cpu_to_le32(
446                                 psecnetwork->Configuration.ATIMWindow);
447         psecnetwork->Configuration.BeaconPeriod = cpu_to_le32(
448                                  psecnetwork->Configuration.BeaconPeriod);
449         psecnetwork->Configuration.DSConfig = cpu_to_le32(
450                                 psecnetwork->Configuration.DSConfig);
451         psecnetwork->Configuration.FHConfig.DwellTime = cpu_to_le32(
452                                 psecnetwork->Configuration.FHConfig.DwellTime);
453         psecnetwork->Configuration.FHConfig.HopPattern = cpu_to_le32(
454                                 psecnetwork->Configuration.FHConfig.HopPattern);
455         psecnetwork->Configuration.FHConfig.HopSet = cpu_to_le32(
456                                 psecnetwork->Configuration.FHConfig.HopSet);
457         psecnetwork->Configuration.FHConfig.Length = cpu_to_le32(
458                                 psecnetwork->Configuration.FHConfig.Length);
459         psecnetwork->Configuration.Length = cpu_to_le32(
460                                 psecnetwork->Configuration.Length);
461         psecnetwork->InfrastructureMode = cpu_to_le32(
462                                 psecnetwork->InfrastructureMode);
463         psecnetwork->IELength = cpu_to_le32(psecnetwork->IELength);
464 #endif
465         INIT_LIST_HEAD(&pcmd->list);
466         pcmd->cmdcode = _JoinBss_CMD_;
467         pcmd->parmbuf = (unsigned char *)psecnetwork;
468         pcmd->rsp = NULL;
469         pcmd->rspsz = 0;
470         r8712_enqueue_cmd(pcmdpriv, pcmd);
471         return 0;
472 }
473
474 void r8712_disassoc_cmd(struct _adapter *padapter) /* for sta_mode */
475 {
476         struct cmd_obj *pdisconnect_cmd;
477         struct disconnect_parm *pdisconnect;
478         struct cmd_priv *pcmdpriv = &padapter->cmdpriv;
479
480         pdisconnect_cmd = kmalloc(sizeof(*pdisconnect_cmd), GFP_ATOMIC);
481         if (!pdisconnect_cmd)
482                 return;
483         pdisconnect = kmalloc(sizeof(*pdisconnect), GFP_ATOMIC);
484         if (!pdisconnect) {
485                 kfree(pdisconnect_cmd);
486                 return;
487         }
488         init_h2fwcmd_w_parm_no_rsp(pdisconnect_cmd, pdisconnect,
489                                    _DisConnect_CMD_);
490         r8712_enqueue_cmd(pcmdpriv, pdisconnect_cmd);
491 }
492
493 void r8712_setopmode_cmd(struct _adapter *padapter,
494                  enum NDIS_802_11_NETWORK_INFRASTRUCTURE networktype)
495 {
496         struct cmd_obj *ph2c;
497         struct setopmode_parm *psetop;
498
499         struct cmd_priv *pcmdpriv = &padapter->cmdpriv;
500
501         ph2c = kmalloc(sizeof(*ph2c), GFP_ATOMIC);
502         if (!ph2c)
503                 return;
504         psetop = kmalloc(sizeof(*psetop), GFP_ATOMIC);
505         if (!psetop) {
506                 kfree(ph2c);
507                 return;
508         }
509         init_h2fwcmd_w_parm_no_rsp(ph2c, psetop, _SetOpMode_CMD_);
510         psetop->mode = (u8)networktype;
511         r8712_enqueue_cmd(pcmdpriv, ph2c);
512 }
513
514 void r8712_setstakey_cmd(struct _adapter *padapter, u8 *psta, u8 unicast_key)
515 {
516         struct cmd_obj *ph2c;
517         struct set_stakey_parm *psetstakey_para;
518         struct cmd_priv *pcmdpriv = &padapter->cmdpriv;
519         struct set_stakey_rsp *psetstakey_rsp = NULL;
520         struct mlme_priv *pmlmepriv = &padapter->mlmepriv;
521         struct security_priv *psecuritypriv = &padapter->securitypriv;
522         struct sta_info *sta = (struct sta_info *)psta;
523
524         ph2c = kmalloc(sizeof(*ph2c), GFP_ATOMIC);
525         if (!ph2c)
526                 return;
527         psetstakey_para = kmalloc(sizeof(*psetstakey_para), GFP_ATOMIC);
528         if (!psetstakey_para) {
529                 kfree(ph2c);
530                 return;
531         }
532         psetstakey_rsp = kmalloc(sizeof(*psetstakey_rsp), GFP_ATOMIC);
533         if (!psetstakey_rsp) {
534                 kfree(ph2c);
535                 kfree(psetstakey_para);
536                 return;
537         }
538         init_h2fwcmd_w_parm_no_rsp(ph2c, psetstakey_para, _SetStaKey_CMD_);
539         ph2c->rsp = (u8 *) psetstakey_rsp;
540         ph2c->rspsz = sizeof(struct set_stakey_rsp);
541         ether_addr_copy(psetstakey_para->addr, sta->hwaddr);
542         if (check_fwstate(pmlmepriv, WIFI_STATION_STATE))
543                 psetstakey_para->algorithm = (unsigned char)
544                                             psecuritypriv->PrivacyAlgrthm;
545         else
546                 GET_ENCRY_ALGO(psecuritypriv, sta,
547                                psetstakey_para->algorithm, false);
548         if (unicast_key)
549                 memcpy(&psetstakey_para->key, &sta->x_UncstKey, 16);
550         else
551                 memcpy(&psetstakey_para->key,
552                         &psecuritypriv->XGrpKey[
553                         psecuritypriv->XGrpKeyid - 1]. skey, 16);
554         r8712_enqueue_cmd(pcmdpriv, ph2c);
555 }
556
557 void r8712_setMacAddr_cmd(struct _adapter *padapter, u8 *mac_addr)
558 {
559         struct cmd_priv *pcmdpriv = &padapter->cmdpriv;
560         struct cmd_obj *ph2c;
561         struct SetMacAddr_param *psetMacAddr_para;
562
563         ph2c = kmalloc(sizeof(*ph2c), GFP_ATOMIC);
564         if (!ph2c)
565                 return;
566         psetMacAddr_para = kmalloc(sizeof(*psetMacAddr_para), GFP_ATOMIC);
567         if (!psetMacAddr_para) {
568                 kfree(ph2c);
569                 return;
570         }
571         init_h2fwcmd_w_parm_no_rsp(ph2c, psetMacAddr_para,
572                                    _SetMacAddress_CMD_);
573         ether_addr_copy(psetMacAddr_para->MacAddr, mac_addr);
574         r8712_enqueue_cmd(pcmdpriv, ph2c);
575 }
576
577 void r8712_addbareq_cmd(struct _adapter *padapter, u8 tid)
578 {
579         struct cmd_priv         *pcmdpriv = &padapter->cmdpriv;
580         struct cmd_obj          *ph2c;
581         struct addBaReq_parm    *paddbareq_parm;
582
583         ph2c = kmalloc(sizeof(*ph2c), GFP_ATOMIC);
584         if (!ph2c)
585                 return;
586         paddbareq_parm = kmalloc(sizeof(*paddbareq_parm), GFP_ATOMIC);
587         if (!paddbareq_parm) {
588                 kfree(ph2c);
589                 return;
590         }
591         paddbareq_parm->tid = tid;
592         init_h2fwcmd_w_parm_no_rsp(ph2c, paddbareq_parm,
593                                    GEN_CMD_CODE(_AddBAReq));
594         r8712_enqueue_cmd_ex(pcmdpriv, ph2c);
595 }
596
597 void r8712_wdg_wk_cmd(struct _adapter *padapter)
598 {
599         struct cmd_obj *ph2c;
600         struct drvint_cmd_parm  *pdrvintcmd_param;
601         struct cmd_priv *pcmdpriv = &padapter->cmdpriv;
602
603         ph2c = kmalloc(sizeof(*ph2c), GFP_ATOMIC);
604         if (!ph2c)
605                 return;
606         pdrvintcmd_param = kmalloc(sizeof(*pdrvintcmd_param), GFP_ATOMIC);
607         if (!pdrvintcmd_param) {
608                 kfree(ph2c);
609                 return;
610         }
611         pdrvintcmd_param->i_cid = WDG_WK_CID;
612         pdrvintcmd_param->sz = 0;
613         pdrvintcmd_param->pbuf = NULL;
614         init_h2fwcmd_w_parm_no_rsp(ph2c, pdrvintcmd_param, _DRV_INT_CMD_);
615         r8712_enqueue_cmd_ex(pcmdpriv, ph2c);
616 }
617
618 void r8712_survey_cmd_callback(struct _adapter *padapter, struct cmd_obj *pcmd)
619 {
620         struct  mlme_priv *pmlmepriv = &padapter->mlmepriv;
621
622         if (pcmd->res != H2C_SUCCESS)
623                 clr_fwstate(pmlmepriv, _FW_UNDER_SURVEY);
624         r8712_free_cmd_obj(pcmd);
625 }
626
627 void r8712_disassoc_cmd_callback(struct _adapter *padapter,
628                                  struct cmd_obj *pcmd)
629 {
630         unsigned long irqL;
631         struct mlme_priv *pmlmepriv = &padapter->mlmepriv;
632
633         if (pcmd->res != H2C_SUCCESS) {
634                 spin_lock_irqsave(&pmlmepriv->lock, irqL);
635                 set_fwstate(pmlmepriv, _FW_LINKED);
636                 spin_unlock_irqrestore(&pmlmepriv->lock, irqL);
637                 return;
638         }
639         r8712_free_cmd_obj(pcmd);
640 }
641
642 void r8712_joinbss_cmd_callback(struct _adapter *padapter, struct cmd_obj *pcmd)
643 {
644         struct mlme_priv *pmlmepriv = &padapter->mlmepriv;
645
646         if (pcmd->res != H2C_SUCCESS)
647                 mod_timer(&pmlmepriv->assoc_timer,
648                           jiffies + msecs_to_jiffies(1));
649         r8712_free_cmd_obj(pcmd);
650 }
651
652 void r8712_createbss_cmd_callback(struct _adapter *padapter,
653                                   struct cmd_obj *pcmd)
654 {
655         unsigned long irqL;
656         struct sta_info *psta = NULL;
657         struct wlan_network *pwlan = NULL;
658         struct  mlme_priv *pmlmepriv = &padapter->mlmepriv;
659         struct wlan_bssid_ex *pnetwork = (struct wlan_bssid_ex *)pcmd->parmbuf;
660         struct wlan_network *tgt_network = &(pmlmepriv->cur_network);
661
662         if (pcmd->res != H2C_SUCCESS)
663                 mod_timer(&pmlmepriv->assoc_timer,
664                           jiffies + msecs_to_jiffies(1));
665         del_timer(&pmlmepriv->assoc_timer);
666 #ifdef __BIG_ENDIAN
667         /* endian_convert */
668         pnetwork->Length = le32_to_cpu(pnetwork->Length);
669         pnetwork->Ssid.SsidLength = le32_to_cpu(pnetwork->Ssid.SsidLength);
670         pnetwork->Privacy = le32_to_cpu(pnetwork->Privacy);
671         pnetwork->Rssi = le32_to_cpu(pnetwork->Rssi);
672         pnetwork->NetworkTypeInUse = le32_to_cpu(pnetwork->NetworkTypeInUse);
673         pnetwork->Configuration.ATIMWindow =
674                 le32_to_cpu(pnetwork->Configuration.ATIMWindow);
675         pnetwork->Configuration.DSConfig =
676                 le32_to_cpu(pnetwork->Configuration.DSConfig);
677         pnetwork->Configuration.FHConfig.DwellTime =
678                 le32_to_cpu(pnetwork->Configuration.FHConfig.DwellTime);
679         pnetwork->Configuration.FHConfig.HopPattern =
680                 le32_to_cpu(pnetwork->Configuration.FHConfig.HopPattern);
681         pnetwork->Configuration.FHConfig.HopSet =
682                 le32_to_cpu(pnetwork->Configuration.FHConfig.HopSet);
683         pnetwork->Configuration.FHConfig.Length =
684                 le32_to_cpu(pnetwork->Configuration.FHConfig.Length);
685         pnetwork->Configuration.Length =
686                 le32_to_cpu(pnetwork->Configuration.Length);
687         pnetwork->InfrastructureMode =
688                 le32_to_cpu(pnetwork->InfrastructureMode);
689         pnetwork->IELength = le32_to_cpu(pnetwork->IELength);
690 #endif
691         spin_lock_irqsave(&pmlmepriv->lock, irqL);
692         if ((pmlmepriv->fw_state) & WIFI_AP_STATE) {
693                 psta = r8712_get_stainfo(&padapter->stapriv,
694                                          pnetwork->MacAddress);
695                 if (!psta) {
696                         psta = r8712_alloc_stainfo(&padapter->stapriv,
697                                                    pnetwork->MacAddress);
698                         if (!psta)
699                                 goto createbss_cmd_fail;
700                 }
701                 r8712_indicate_connect(padapter);
702         } else {
703                 pwlan = _r8712_alloc_network(pmlmepriv);
704                 if (!pwlan) {
705                         pwlan = r8712_get_oldest_wlan_network(
706                                 &pmlmepriv->scanned_queue);
707                         if (!pwlan)
708                                 goto createbss_cmd_fail;
709                         pwlan->last_scanned = jiffies;
710                 } else {
711                         list_add_tail(&(pwlan->list),
712                                          &pmlmepriv->scanned_queue.queue);
713                 }
714                 pnetwork->Length = r8712_get_wlan_bssid_ex_sz(pnetwork);
715                 memcpy(&(pwlan->network), pnetwork, pnetwork->Length);
716                 pwlan->fixed = true;
717                 memcpy(&tgt_network->network, pnetwork,
718                         (r8712_get_wlan_bssid_ex_sz(pnetwork)));
719                 if (pmlmepriv->fw_state & _FW_UNDER_LINKING)
720                         pmlmepriv->fw_state ^= _FW_UNDER_LINKING;
721                 /*
722                  * we will set _FW_LINKED when there is one more sat to
723                  * join us (stassoc_event_callback)
724                  */
725         }
726 createbss_cmd_fail:
727         spin_unlock_irqrestore(&pmlmepriv->lock, irqL);
728         r8712_free_cmd_obj(pcmd);
729 }
730
731 void r8712_setstaKey_cmdrsp_callback(struct _adapter *padapter,
732                                      struct cmd_obj *pcmd)
733 {
734         struct sta_priv *pstapriv = &padapter->stapriv;
735         struct set_stakey_rsp *psetstakey_rsp = (struct set_stakey_rsp *)
736                                                 (pcmd->rsp);
737         struct sta_info *psta = r8712_get_stainfo(pstapriv,
738                                                   psetstakey_rsp->addr);
739
740         if (!psta)
741                 goto exit;
742         psta->aid = psta->mac_id = psetstakey_rsp->keyid; /*CAM_ID(CAM_ENTRY)*/
743 exit:
744         r8712_free_cmd_obj(pcmd);
745 }
746
747 void r8712_setassocsta_cmdrsp_callback(struct _adapter *padapter,
748                                        struct cmd_obj *pcmd)
749 {
750         unsigned long   irqL;
751         struct sta_priv *pstapriv = &padapter->stapriv;
752         struct mlme_priv *pmlmepriv = &padapter->mlmepriv;
753         struct set_assocsta_parm *passocsta_parm =
754                                 (struct set_assocsta_parm *)(pcmd->parmbuf);
755         struct set_assocsta_rsp *passocsta_rsp =
756                                 (struct set_assocsta_rsp *) (pcmd->rsp);
757         struct sta_info *psta = r8712_get_stainfo(pstapriv,
758                                                   passocsta_parm->addr);
759
760         if (!psta)
761                 return;
762         psta->aid = psta->mac_id = passocsta_rsp->cam_id;
763         spin_lock_irqsave(&pmlmepriv->lock, irqL);
764         if ((check_fwstate(pmlmepriv, WIFI_MP_STATE)) &&
765             (check_fwstate(pmlmepriv, _FW_UNDER_LINKING)))
766                 pmlmepriv->fw_state ^= _FW_UNDER_LINKING;
767         set_fwstate(pmlmepriv, _FW_LINKED);
768         spin_unlock_irqrestore(&pmlmepriv->lock, irqL);
769         r8712_free_cmd_obj(pcmd);
770 }
771
772 void r8712_disconnectCtrlEx_cmd(struct _adapter *adapter, u32 enableDrvCtrl,
773                         u32 tryPktCnt, u32 tryPktInterval, u32 firstStageTO)
774 {
775         struct cmd_obj *ph2c;
776         struct DisconnectCtrlEx_param *param;
777         struct cmd_priv *pcmdpriv = &adapter->cmdpriv;
778
779         ph2c = kmalloc(sizeof(*ph2c), GFP_ATOMIC);
780         if (!ph2c)
781                 return;
782         param = kzalloc(sizeof(*param), GFP_ATOMIC);
783         if (!param) {
784                 kfree(ph2c);
785                 return;
786         }
787
788         param->EnableDrvCtrl = (unsigned char)enableDrvCtrl;
789         param->TryPktCnt = (unsigned char)tryPktCnt;
790         param->TryPktInterval = (unsigned char)tryPktInterval;
791         param->FirstStageTO = (unsigned int)firstStageTO;
792
793         init_h2fwcmd_w_parm_no_rsp(ph2c, param,
794                                 GEN_CMD_CODE(_DisconnectCtrlEx));
795         r8712_enqueue_cmd(pcmdpriv, ph2c);
796 }