Merge tag 'mac80211-next-for-davem-2015-10-05' of git://git.kernel.org/pub/scm/linux...
[linux-2.6-microblaze.git] / drivers / staging / rtl8712 / rtl871x_mlme.c
1 /******************************************************************************
2  * rtl871x_mlme.c
3  *
4  * Copyright(c) 2007 - 2010 Realtek Corporation. All rights reserved.
5  * Linux device driver for RTL8192SU
6  *
7  * This program is free software; you can redistribute it and/or modify it
8  * under the terms of version 2 of the GNU General Public License as
9  * published by the Free Software Foundation.
10  *
11  * This program is distributed in the hope that it will be useful, but WITHOUT
12  * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
13  * FITNESS FOR A PARTICULAR PURPOSE.  See the GNU General Public License for
14  * more details.
15  *
16  * You should have received a copy of the GNU General Public License along with
17  * this program; if not, write to the Free Software Foundation, Inc.,
18  * 51 Franklin Street, Fifth Floor, Boston, MA 02110, USA
19  *
20  * Modifications for inclusion into the Linux staging tree are
21  * Copyright(c) 2010 Larry Finger. All rights reserved.
22  *
23  * Contact information:
24  * WLAN FAE <wlanfae@realtek.com>
25  * Larry Finger <Larry.Finger@lwfinger.net>
26  *
27  ******************************************************************************/
28
29 #define _RTL871X_MLME_C_
30
31 #include <linux/etherdevice.h>
32
33 #include "osdep_service.h"
34 #include "drv_types.h"
35 #include "recv_osdep.h"
36 #include "xmit_osdep.h"
37 #include "mlme_osdep.h"
38 #include "sta_info.h"
39 #include "wifi.h"
40 #include "wlan_bssdef.h"
41
42 static void update_ht_cap(struct _adapter *padapter, u8 *pie, uint ie_len);
43
44 static sint _init_mlme_priv(struct _adapter *padapter)
45 {
46         sint    i;
47         u8      *pbuf;
48         struct wlan_network     *pnetwork;
49         struct  mlme_priv *pmlmepriv = &padapter->mlmepriv;
50
51         memset((u8 *)pmlmepriv, 0, sizeof(struct mlme_priv));
52         pmlmepriv->nic_hdl = (u8 *)padapter;
53         pmlmepriv->pscanned = NULL;
54         pmlmepriv->fw_state = 0;
55         pmlmepriv->cur_network.network.InfrastructureMode =
56                                  Ndis802_11AutoUnknown;
57         /* Maybe someday we should rename this variable to "active_mode"(Jeff)*/
58         pmlmepriv->passive_mode = 1; /* 1: active, 0: passive. */
59         spin_lock_init(&(pmlmepriv->lock));
60         spin_lock_init(&(pmlmepriv->lock2));
61         _init_queue(&(pmlmepriv->free_bss_pool));
62         _init_queue(&(pmlmepriv->scanned_queue));
63         set_scanned_network_val(pmlmepriv, 0);
64         memset(&pmlmepriv->assoc_ssid, 0, sizeof(struct ndis_802_11_ssid));
65         pbuf = kmalloc(MAX_BSS_CNT * (sizeof(struct wlan_network)),
66                        GFP_ATOMIC);
67         if (pbuf == NULL)
68                 return _FAIL;
69         pmlmepriv->free_bss_buf = pbuf;
70         pnetwork = (struct wlan_network *)pbuf;
71         for (i = 0; i < MAX_BSS_CNT; i++) {
72                 INIT_LIST_HEAD(&(pnetwork->list));
73                 list_add_tail(&(pnetwork->list),
74                                  &(pmlmepriv->free_bss_pool.queue));
75                 pnetwork++;
76         }
77         pmlmepriv->sitesurveyctrl.last_rx_pkts = 0;
78         pmlmepriv->sitesurveyctrl.last_tx_pkts = 0;
79         pmlmepriv->sitesurveyctrl.traffic_busy = false;
80         /* allocate DMA-able/Non-Page memory for cmd_buf and rsp_buf */
81         r8712_init_mlme_timer(padapter);
82         return _SUCCESS;
83 }
84
85 struct wlan_network *_r8712_alloc_network(struct mlme_priv *pmlmepriv)
86 {
87         unsigned long irqL;
88         struct wlan_network *pnetwork;
89         struct  __queue *free_queue = &pmlmepriv->free_bss_pool;
90         struct list_head *plist = NULL;
91
92         if (list_empty(&free_queue->queue))
93                 return NULL;
94         spin_lock_irqsave(&free_queue->lock, irqL);
95         plist = free_queue->queue.next;
96         pnetwork = LIST_CONTAINOR(plist, struct wlan_network, list);
97         list_del_init(&pnetwork->list);
98         pnetwork->last_scanned = jiffies;
99         pmlmepriv->num_of_scanned++;
100         spin_unlock_irqrestore(&free_queue->lock, irqL);
101         return pnetwork;
102 }
103
104 static void _free_network(struct mlme_priv *pmlmepriv,
105                           struct wlan_network *pnetwork)
106 {
107         u32 curr_time, delta_time;
108         unsigned long irqL;
109         struct  __queue *free_queue = &(pmlmepriv->free_bss_pool);
110
111         if (pnetwork == NULL)
112                 return;
113         if (pnetwork->fixed == true)
114                 return;
115         curr_time = jiffies;
116         delta_time = (curr_time - (u32)pnetwork->last_scanned) / HZ;
117         if (delta_time < SCANQUEUE_LIFETIME)
118                 return;
119         spin_lock_irqsave(&free_queue->lock, irqL);
120         list_del_init(&pnetwork->list);
121         list_add_tail(&pnetwork->list, &free_queue->queue);
122         pmlmepriv->num_of_scanned--;
123         spin_unlock_irqrestore(&free_queue->lock, irqL);
124 }
125
126 static void _free_network_nolock(struct mlme_priv *pmlmepriv,
127                           struct wlan_network *pnetwork)
128 {
129         struct  __queue *free_queue = &pmlmepriv->free_bss_pool;
130
131         if (pnetwork == NULL)
132                 return;
133         if (pnetwork->fixed == true)
134                 return;
135         list_del_init(&pnetwork->list);
136         list_add_tail(&pnetwork->list, &free_queue->queue);
137         pmlmepriv->num_of_scanned--;
138 }
139
140
141 /*
142         return the wlan_network with the matching addr
143         Shall be called under atomic context...
144         to avoid possible racing condition...
145 */
146 static struct wlan_network *_r8712_find_network(struct  __queue *scanned_queue,
147                                          u8 *addr)
148 {
149         unsigned long irqL;
150         struct list_head *phead, *plist;
151         struct wlan_network *pnetwork = NULL;
152
153         if (is_zero_ether_addr(addr))
154                 return NULL;
155         spin_lock_irqsave(&scanned_queue->lock, irqL);
156         phead = &scanned_queue->queue;
157         plist = phead->next;
158         while (plist != phead) {
159                 pnetwork = LIST_CONTAINOR(plist, struct wlan_network, list);
160                 plist = plist->next;
161                 if (!memcmp(addr, pnetwork->network.MacAddress, ETH_ALEN))
162                         break;
163         }
164         spin_unlock_irqrestore(&scanned_queue->lock, irqL);
165         return pnetwork;
166 }
167
168 static void _free_network_queue(struct _adapter *padapter)
169 {
170         unsigned long irqL;
171         struct list_head *phead, *plist;
172         struct wlan_network *pnetwork;
173         struct mlme_priv *pmlmepriv = &padapter->mlmepriv;
174         struct  __queue *scanned_queue = &pmlmepriv->scanned_queue;
175
176         spin_lock_irqsave(&scanned_queue->lock, irqL);
177         phead = &scanned_queue->queue;
178         plist = phead->next;
179         while (end_of_queue_search(phead, plist) == false) {
180                 pnetwork = LIST_CONTAINOR(plist, struct wlan_network, list);
181                 plist = plist->next;
182                 _free_network(pmlmepriv, pnetwork);
183         }
184         spin_unlock_irqrestore(&scanned_queue->lock, irqL);
185 }
186
187 sint r8712_if_up(struct _adapter *padapter)
188 {
189         sint res;
190
191         if (padapter->bDriverStopped || padapter->bSurpriseRemoved ||
192             (check_fwstate(&padapter->mlmepriv, _FW_LINKED) == false)) {
193                 res = false;
194         } else
195                 res = true;
196         return res;
197 }
198
199 void r8712_generate_random_ibss(u8 *pibss)
200 {
201         u32 curtime = jiffies;
202
203         pibss[0] = 0x02; /*in ad-hoc mode bit1 must set to 1 */
204         pibss[1] = 0x11;
205         pibss[2] = 0x87;
206         pibss[3] = (u8)(curtime & 0xff);
207         pibss[4] = (u8)((curtime>>8) & 0xff);
208         pibss[5] = (u8)((curtime>>16) & 0xff);
209 }
210
211 uint r8712_get_wlan_bssid_ex_sz(struct wlan_bssid_ex *bss)
212 {
213         return sizeof(*bss) + bss->IELength - MAX_IE_SZ;
214 }
215
216 u8 *r8712_get_capability_from_ie(u8 *ie)
217 {
218         return ie + 8 + 2;
219 }
220
221 int r8712_init_mlme_priv(struct _adapter *padapter)
222 {
223         return _init_mlme_priv(padapter);
224 }
225
226 void r8712_free_mlme_priv(struct mlme_priv *pmlmepriv)
227 {
228         kfree(pmlmepriv->free_bss_buf);
229 }
230
231 static struct   wlan_network *alloc_network(struct mlme_priv *pmlmepriv)
232 {
233         return _r8712_alloc_network(pmlmepriv);
234 }
235
236 static void free_network_nolock(struct mlme_priv *pmlmepriv,
237                          struct wlan_network *pnetwork)
238 {
239         _free_network_nolock(pmlmepriv, pnetwork);
240 }
241
242 void r8712_free_network_queue(struct _adapter *dev)
243 {
244         _free_network_queue(dev);
245 }
246
247 /*
248         return the wlan_network with the matching addr
249
250         Shall be called under atomic context...
251         to avoid possible racing condition...
252 */
253 static struct wlan_network *r8712_find_network(struct  __queue *scanned_queue,
254                                                u8 *addr)
255 {
256         struct wlan_network *pnetwork = _r8712_find_network(scanned_queue,
257                                                             addr);
258
259         return pnetwork;
260 }
261
262 int r8712_is_same_ibss(struct _adapter *adapter, struct wlan_network *pnetwork)
263 {
264         int ret = true;
265         struct security_priv *psecuritypriv = &adapter->securitypriv;
266
267         if ((psecuritypriv->PrivacyAlgrthm != _NO_PRIVACY_) &&
268                     (pnetwork->network.Privacy == 0))
269                 ret = false;
270         else if ((psecuritypriv->PrivacyAlgrthm == _NO_PRIVACY_) &&
271                  (pnetwork->network.Privacy == 1))
272                 ret = false;
273         else
274                 ret = true;
275         return ret;
276
277 }
278
279 static int is_same_network(struct wlan_bssid_ex *src,
280                            struct wlan_bssid_ex *dst)
281 {
282          u16 s_cap, d_cap;
283
284         memcpy((u8 *)&s_cap, r8712_get_capability_from_ie(src->IEs), 2);
285         memcpy((u8 *)&d_cap, r8712_get_capability_from_ie(dst->IEs), 2);
286         return (src->Ssid.SsidLength == dst->Ssid.SsidLength) &&
287                         (src->Configuration.DSConfig ==
288                         dst->Configuration.DSConfig) &&
289                         ((!memcmp(src->MacAddress, dst->MacAddress,
290                         ETH_ALEN))) &&
291                         ((!memcmp(src->Ssid.Ssid,
292                           dst->Ssid.Ssid,
293                           src->Ssid.SsidLength))) &&
294                         ((s_cap & WLAN_CAPABILITY_IBSS) ==
295                         (d_cap & WLAN_CAPABILITY_IBSS)) &&
296                         ((s_cap & WLAN_CAPABILITY_BSS) ==
297                         (d_cap & WLAN_CAPABILITY_BSS));
298
299 }
300
301 struct  wlan_network *r8712_get_oldest_wlan_network(
302                                 struct  __queue *scanned_queue)
303 {
304         struct list_head *plist, *phead;
305         struct  wlan_network    *pwlan = NULL;
306         struct  wlan_network    *oldest = NULL;
307
308         phead = &scanned_queue->queue;
309         plist = phead->next;
310         while (1) {
311                 if (end_of_queue_search(phead, plist) ==  true)
312                         break;
313                 pwlan = LIST_CONTAINOR(plist, struct wlan_network, list);
314                 if (pwlan->fixed != true) {
315                         if (oldest == NULL ||
316                             time_after((unsigned long)oldest->last_scanned,
317                             (unsigned long)pwlan->last_scanned))
318                                 oldest = pwlan;
319                 }
320                 plist = plist->next;
321         }
322         return oldest;
323 }
324
325 static void update_network(struct wlan_bssid_ex *dst,
326                            struct wlan_bssid_ex *src,
327                            struct _adapter *padapter)
328 {
329         u32 last_evm = 0, tmpVal;
330
331         if (check_fwstate(&padapter->mlmepriv, _FW_LINKED) &&
332             is_same_network(&(padapter->mlmepriv.cur_network.network), src)) {
333                 if (padapter->recvpriv.signal_qual_data.total_num++ >=
334                     PHY_LINKQUALITY_SLID_WIN_MAX) {
335                         padapter->recvpriv.signal_qual_data.total_num =
336                                    PHY_LINKQUALITY_SLID_WIN_MAX;
337                         last_evm = padapter->recvpriv.signal_qual_data.
338                                    elements[padapter->recvpriv.
339                                    signal_qual_data.index];
340                         padapter->recvpriv.signal_qual_data.total_val -=
341                                  last_evm;
342                 }
343                 padapter->recvpriv.signal_qual_data.total_val += src->Rssi;
344
345                 padapter->recvpriv.signal_qual_data.
346                           elements[padapter->recvpriv.signal_qual_data.
347                           index++] = src->Rssi;
348                 if (padapter->recvpriv.signal_qual_data.index >=
349                     PHY_LINKQUALITY_SLID_WIN_MAX)
350                         padapter->recvpriv.signal_qual_data.index = 0;
351                 /* <1> Showed on UI for user, in percentage. */
352                 tmpVal = padapter->recvpriv.signal_qual_data.total_val /
353                          padapter->recvpriv.signal_qual_data.total_num;
354                 padapter->recvpriv.signal = (u8)tmpVal;
355
356                 src->Rssi = padapter->recvpriv.signal;
357         } else
358                 src->Rssi = (src->Rssi + dst->Rssi) / 2;
359         memcpy((u8 *)dst, (u8 *)src, r8712_get_wlan_bssid_ex_sz(src));
360 }
361
362 static void update_current_network(struct _adapter *adapter,
363                                    struct wlan_bssid_ex *pnetwork)
364 {
365         struct mlme_priv *pmlmepriv = &adapter->mlmepriv;
366
367         if (is_same_network(&(pmlmepriv->cur_network.network), pnetwork)) {
368                 update_network(&(pmlmepriv->cur_network.network),
369                                pnetwork, adapter);
370                 r8712_update_protection(adapter,
371                                (pmlmepriv->cur_network.network.IEs) +
372                                sizeof(struct NDIS_802_11_FIXED_IEs),
373                                pmlmepriv->cur_network.network.IELength);
374         }
375 }
376
377 /*
378 Caller must hold pmlmepriv->lock first.
379 */
380 static void update_scanned_network(struct _adapter *adapter,
381                             struct wlan_bssid_ex *target)
382 {
383         struct list_head *plist, *phead;
384
385         u32 bssid_ex_sz;
386         struct mlme_priv *pmlmepriv = &adapter->mlmepriv;
387         struct  __queue *queue = &pmlmepriv->scanned_queue;
388         struct wlan_network *pnetwork = NULL;
389         struct wlan_network *oldest = NULL;
390
391         phead = &queue->queue;
392         plist = phead->next;
393
394         while (1) {
395                 if (end_of_queue_search(phead, plist) == true)
396                         break;
397
398                 pnetwork = LIST_CONTAINOR(plist, struct wlan_network, list);
399                 if (is_same_network(&pnetwork->network, target))
400                         break;
401                 if ((oldest == ((struct wlan_network *)0)) ||
402                     time_after((unsigned long)oldest->last_scanned,
403                                 (unsigned long)pnetwork->last_scanned))
404                         oldest = pnetwork;
405
406                 plist = plist->next;
407         }
408
409
410         /* If we didn't find a match, then get a new network slot to initialize
411          * with this beacon's information */
412         if (end_of_queue_search(phead, plist) == true) {
413                 if (list_empty(&pmlmepriv->free_bss_pool.queue)) {
414                         /* If there are no more slots, expire the oldest */
415                         pnetwork = oldest;
416                         target->Rssi = (pnetwork->network.Rssi +
417                                         target->Rssi) / 2;
418                         memcpy(&pnetwork->network, target,
419                                 r8712_get_wlan_bssid_ex_sz(target));
420                         pnetwork->last_scanned = jiffies;
421                 } else {
422                         /* Otherwise just pull from the free list */
423                         /* update scan_time */
424                         pnetwork = alloc_network(pmlmepriv);
425                         if (pnetwork == NULL)
426                                 return;
427                         bssid_ex_sz = r8712_get_wlan_bssid_ex_sz(target);
428                         target->Length = bssid_ex_sz;
429                         memcpy(&pnetwork->network, target, bssid_ex_sz);
430                         list_add_tail(&pnetwork->list, &queue->queue);
431                 }
432         } else {
433                 /* we have an entry and we are going to update it. But
434                  * this entry may be already expired. In this case we
435                  * do the same as we found a new net and call the new_net
436                  * handler
437                  */
438                 update_network(&pnetwork->network, target, adapter);
439                 pnetwork->last_scanned = jiffies;
440         }
441 }
442
443 static void rtl8711_add_network(struct _adapter *adapter,
444                          struct wlan_bssid_ex *pnetwork)
445 {
446         unsigned long irqL;
447         struct mlme_priv *pmlmepriv = &(((struct _adapter *)adapter)->mlmepriv);
448         struct  __queue *queue = &pmlmepriv->scanned_queue;
449
450         spin_lock_irqsave(&queue->lock, irqL);
451         update_current_network(adapter, pnetwork);
452         update_scanned_network(adapter, pnetwork);
453         spin_unlock_irqrestore(&queue->lock, irqL);
454 }
455
456 /*select the desired network based on the capability of the (i)bss.
457  * check items:         (1) security
458  *                      (2) network_type
459  *                      (3) WMM
460  *                      (4) HT
461  *                      (5) others
462  */
463 static int is_desired_network(struct _adapter *adapter,
464                                 struct wlan_network *pnetwork)
465 {
466         u8 wps_ie[512];
467         uint wps_ielen;
468         int bselected = true;
469         struct  security_priv *psecuritypriv = &adapter->securitypriv;
470
471         if (psecuritypriv->wps_phase == true) {
472                 if (r8712_get_wps_ie(pnetwork->network.IEs,
473                     pnetwork->network.IELength, wps_ie,
474                     &wps_ielen) == true)
475                         return true;
476                 else
477                         return false;
478         }
479         if ((psecuritypriv->PrivacyAlgrthm != _NO_PRIVACY_) &&
480                     (pnetwork->network.Privacy == 0))
481                 bselected = false;
482         if (check_fwstate(&adapter->mlmepriv, WIFI_ADHOC_STATE) == true) {
483                 if (pnetwork->network.InfrastructureMode !=
484                         adapter->mlmepriv.cur_network.network.
485                         InfrastructureMode)
486                         bselected = false;
487         }
488         return bselected;
489 }
490
491 /* TODO: Perry : For Power Management */
492 void r8712_atimdone_event_callback(struct _adapter *adapter, u8 *pbuf)
493 {
494 }
495
496 void r8712_survey_event_callback(struct _adapter *adapter, u8 *pbuf)
497 {
498         unsigned long flags;
499         u32 len;
500         struct wlan_bssid_ex *pnetwork;
501         struct mlme_priv *pmlmepriv = &adapter->mlmepriv;
502
503         pnetwork = (struct wlan_bssid_ex *)pbuf;
504 #ifdef __BIG_ENDIAN
505         /* endian_convert */
506         pnetwork->Length = le32_to_cpu(pnetwork->Length);
507         pnetwork->Ssid.SsidLength = le32_to_cpu(pnetwork->Ssid.SsidLength);
508         pnetwork->Privacy = le32_to_cpu(pnetwork->Privacy);
509         pnetwork->Rssi = le32_to_cpu(pnetwork->Rssi);
510         pnetwork->NetworkTypeInUse = le32_to_cpu(pnetwork->NetworkTypeInUse);
511         pnetwork->Configuration.ATIMWindow =
512                  le32_to_cpu(pnetwork->Configuration.ATIMWindow);
513         pnetwork->Configuration.BeaconPeriod =
514                  le32_to_cpu(pnetwork->Configuration.BeaconPeriod);
515         pnetwork->Configuration.DSConfig =
516                  le32_to_cpu(pnetwork->Configuration.DSConfig);
517         pnetwork->Configuration.FHConfig.DwellTime =
518                  le32_to_cpu(pnetwork->Configuration.FHConfig.DwellTime);
519         pnetwork->Configuration.FHConfig.HopPattern =
520                  le32_to_cpu(pnetwork->Configuration.FHConfig.HopPattern);
521         pnetwork->Configuration.FHConfig.HopSet =
522                  le32_to_cpu(pnetwork->Configuration.FHConfig.HopSet);
523         pnetwork->Configuration.FHConfig.Length =
524                  le32_to_cpu(pnetwork->Configuration.FHConfig.Length);
525         pnetwork->Configuration.Length =
526                  le32_to_cpu(pnetwork->Configuration.Length);
527         pnetwork->InfrastructureMode =
528                  le32_to_cpu(pnetwork->InfrastructureMode);
529         pnetwork->IELength = le32_to_cpu(pnetwork->IELength);
530 #endif
531         len = r8712_get_wlan_bssid_ex_sz(pnetwork);
532         if (len > sizeof(struct wlan_bssid_ex))
533                 return;
534         spin_lock_irqsave(&pmlmepriv->lock2, flags);
535         /* update IBSS_network 's timestamp */
536         if (check_fwstate(pmlmepriv, WIFI_ADHOC_MASTER_STATE) == true) {
537                 if (!memcmp(&(pmlmepriv->cur_network.network.MacAddress),
538                     pnetwork->MacAddress, ETH_ALEN)) {
539                         struct wlan_network *ibss_wlan = NULL;
540
541                         memcpy(pmlmepriv->cur_network.network.IEs,
542                                 pnetwork->IEs, 8);
543                         ibss_wlan = r8712_find_network(
544                                                 &pmlmepriv->scanned_queue,
545                                                 pnetwork->MacAddress);
546                         if (ibss_wlan) {
547                                 memcpy(ibss_wlan->network.IEs,
548                                         pnetwork->IEs, 8);
549                                 goto exit;
550                         }
551                 }
552         }
553         /* lock pmlmepriv->lock when you accessing network_q */
554         if (check_fwstate(pmlmepriv, _FW_UNDER_LINKING) == false) {
555                 if (pnetwork->Ssid.Ssid[0] != 0)
556                         rtl8711_add_network(adapter, pnetwork);
557                 else {
558                         pnetwork->Ssid.SsidLength = 8;
559                         memcpy(pnetwork->Ssid.Ssid, "<hidden>", 8);
560                         rtl8711_add_network(adapter, pnetwork);
561                 }
562         }
563 exit:
564         spin_unlock_irqrestore(&pmlmepriv->lock2, flags);
565 }
566
567 void r8712_surveydone_event_callback(struct _adapter *adapter, u8 *pbuf)
568 {
569         unsigned long irqL;
570         struct mlme_priv *pmlmepriv = &adapter->mlmepriv;
571
572         spin_lock_irqsave(&pmlmepriv->lock, irqL);
573
574         if (check_fwstate(pmlmepriv, _FW_UNDER_SURVEY) == true) {
575                 del_timer(&pmlmepriv->scan_to_timer);
576
577                 _clr_fwstate_(pmlmepriv, _FW_UNDER_SURVEY);
578         }
579
580         if (pmlmepriv->to_join == true) {
581                 if (check_fwstate(pmlmepriv, WIFI_ADHOC_STATE) == true) {
582                         if (check_fwstate(pmlmepriv, _FW_LINKED) == false) {
583                                 set_fwstate(pmlmepriv, _FW_UNDER_LINKING);
584
585                                 if (r8712_select_and_join_from_scan(pmlmepriv)
586                                     == _SUCCESS)
587                                         mod_timer(&pmlmepriv->assoc_timer, jiffies +
588                                                   msecs_to_jiffies(MAX_JOIN_TIMEOUT));
589                                 else {
590                                         struct wlan_bssid_ex *pdev_network =
591                                           &(adapter->registrypriv.dev_network);
592                                         u8 *pibss =
593                                                  adapter->registrypriv.
594                                                         dev_network.MacAddress;
595                                         pmlmepriv->fw_state ^= _FW_UNDER_SURVEY;
596                                         memcpy(&pdev_network->Ssid,
597                                                 &pmlmepriv->assoc_ssid,
598                                                 sizeof(struct
599                                                          ndis_802_11_ssid));
600                                         r8712_update_registrypriv_dev_network
601                                                 (adapter);
602                                         r8712_generate_random_ibss(pibss);
603                                         pmlmepriv->fw_state =
604                                                  WIFI_ADHOC_MASTER_STATE;
605                                         pmlmepriv->to_join = false;
606                                 }
607                         }
608                 } else {
609                         pmlmepriv->to_join = false;
610                         set_fwstate(pmlmepriv, _FW_UNDER_LINKING);
611                         if (r8712_select_and_join_from_scan(pmlmepriv) ==
612                             _SUCCESS)
613                                 mod_timer(&pmlmepriv->assoc_timer, jiffies +
614                                           msecs_to_jiffies(MAX_JOIN_TIMEOUT));
615                         else
616                                 _clr_fwstate_(pmlmepriv, _FW_UNDER_LINKING);
617                 }
618         }
619         spin_unlock_irqrestore(&pmlmepriv->lock, irqL);
620 }
621
622 /*
623  *r8712_free_assoc_resources: the caller has to lock pmlmepriv->lock
624  */
625 void r8712_free_assoc_resources(struct _adapter *adapter)
626 {
627         unsigned long irqL;
628         struct wlan_network *pwlan = NULL;
629         struct mlme_priv *pmlmepriv = &adapter->mlmepriv;
630         struct sta_priv *pstapriv = &adapter->stapriv;
631         struct wlan_network *tgt_network = &pmlmepriv->cur_network;
632
633         pwlan = r8712_find_network(&pmlmepriv->scanned_queue,
634                                    tgt_network->network.MacAddress);
635
636         if (check_fwstate(pmlmepriv, WIFI_STATION_STATE|WIFI_AP_STATE)) {
637                 struct sta_info *psta;
638
639                 psta = r8712_get_stainfo(&adapter->stapriv,
640                                          tgt_network->network.MacAddress);
641
642                 spin_lock_irqsave(&pstapriv->sta_hash_lock, irqL);
643                 r8712_free_stainfo(adapter,  psta);
644                 spin_unlock_irqrestore(&pstapriv->sta_hash_lock, irqL);
645         }
646
647         if (check_fwstate(pmlmepriv,
648             WIFI_ADHOC_STATE|WIFI_ADHOC_MASTER_STATE|WIFI_AP_STATE))
649                 r8712_free_all_stainfo(adapter);
650         if (pwlan)
651                 pwlan->fixed = false;
652
653         if (((check_fwstate(pmlmepriv, WIFI_ADHOC_MASTER_STATE)) &&
654              (adapter->stapriv.asoc_sta_count == 1)))
655                 free_network_nolock(pmlmepriv, pwlan);
656 }
657
658 /*
659 *r8712_indicate_connect: the caller has to lock pmlmepriv->lock
660 */
661 void r8712_indicate_connect(struct _adapter *padapter)
662 {
663         struct mlme_priv *pmlmepriv = &padapter->mlmepriv;
664
665         pmlmepriv->to_join = false;
666         set_fwstate(pmlmepriv, _FW_LINKED);
667         padapter->ledpriv.LedControlHandler(padapter, LED_CTL_LINK);
668         r8712_os_indicate_connect(padapter);
669         if (padapter->registrypriv.power_mgnt > PS_MODE_ACTIVE)
670                 mod_timer(&pmlmepriv->dhcp_timer,
671                           jiffies + msecs_to_jiffies(60000));
672 }
673
674
675 /*
676 *r8712_ind_disconnect: the caller has to lock pmlmepriv->lock
677 */
678 void r8712_ind_disconnect(struct _adapter *padapter)
679 {
680         struct mlme_priv *pmlmepriv = &padapter->mlmepriv;
681
682         if (check_fwstate(pmlmepriv, _FW_LINKED) == true) {
683                 _clr_fwstate_(pmlmepriv, _FW_LINKED);
684                 padapter->ledpriv.LedControlHandler(padapter, LED_CTL_NO_LINK);
685                 r8712_os_indicate_disconnect(padapter);
686         }
687         if (padapter->pwrctrlpriv.pwr_mode !=
688             padapter->registrypriv.power_mgnt) {
689                 del_timer(&pmlmepriv->dhcp_timer);
690                 r8712_set_ps_mode(padapter, padapter->registrypriv.power_mgnt,
691                                   padapter->registrypriv.smart_ps);
692         }
693 }
694
695 /*Notes:
696  *pnetwork : returns from r8712_joinbss_event_callback
697  *ptarget_wlan: found from scanned_queue
698  *if join_res > 0, for (fw_state==WIFI_STATION_STATE), we check if
699  *  "ptarget_sta" & "ptarget_wlan" exist.
700  *if join_res > 0, for (fw_state==WIFI_ADHOC_STATE), we only check
701  * if "ptarget_wlan" exist.
702  *if join_res > 0, update "cur_network->network" from
703  * "pnetwork->network" if (ptarget_wlan !=NULL).
704  */
705 void r8712_joinbss_event_callback(struct _adapter *adapter, u8 *pbuf)
706 {
707         unsigned long irqL = 0, irqL2;
708         struct sta_info *ptarget_sta = NULL, *pcur_sta = NULL;
709         struct sta_priv *pstapriv = &adapter->stapriv;
710         struct mlme_priv        *pmlmepriv = &adapter->mlmepriv;
711         struct wlan_network     *cur_network = &pmlmepriv->cur_network;
712         struct wlan_network     *pcur_wlan = NULL, *ptarget_wlan = NULL;
713         unsigned int            the_same_macaddr = false;
714         struct wlan_network *pnetwork;
715
716         if (sizeof(struct list_head) == 4 * sizeof(u32)) {
717                 pnetwork = kmalloc(sizeof(struct wlan_network), GFP_ATOMIC);
718                 if (!pnetwork)
719                         return;
720                 memcpy((u8 *)pnetwork+16, (u8 *)pbuf + 8,
721                         sizeof(struct wlan_network) - 16);
722         } else
723                 pnetwork = (struct wlan_network *)pbuf;
724
725 #ifdef __BIG_ENDIAN
726         /* endian_convert */
727         pnetwork->join_res = le32_to_cpu(pnetwork->join_res);
728         pnetwork->network_type = le32_to_cpu(pnetwork->network_type);
729         pnetwork->network.Length = le32_to_cpu(pnetwork->network.Length);
730         pnetwork->network.Ssid.SsidLength =
731                  le32_to_cpu(pnetwork->network.Ssid.SsidLength);
732         pnetwork->network.Privacy = le32_to_cpu(pnetwork->network.Privacy);
733         pnetwork->network.Rssi = le32_to_cpu(pnetwork->network.Rssi);
734         pnetwork->network.NetworkTypeInUse =
735                  le32_to_cpu(pnetwork->network.NetworkTypeInUse);
736         pnetwork->network.Configuration.ATIMWindow =
737                  le32_to_cpu(pnetwork->network.Configuration.ATIMWindow);
738         pnetwork->network.Configuration.BeaconPeriod =
739                  le32_to_cpu(pnetwork->network.Configuration.BeaconPeriod);
740         pnetwork->network.Configuration.DSConfig =
741                  le32_to_cpu(pnetwork->network.Configuration.DSConfig);
742         pnetwork->network.Configuration.FHConfig.DwellTime =
743                  le32_to_cpu(pnetwork->network.Configuration.FHConfig.
744                              DwellTime);
745         pnetwork->network.Configuration.FHConfig.HopPattern =
746                  le32_to_cpu(pnetwork->network.Configuration.
747                              FHConfig.HopPattern);
748         pnetwork->network.Configuration.FHConfig.HopSet =
749                  le32_to_cpu(pnetwork->network.Configuration.FHConfig.HopSet);
750         pnetwork->network.Configuration.FHConfig.Length =
751                  le32_to_cpu(pnetwork->network.Configuration.FHConfig.Length);
752         pnetwork->network.Configuration.Length =
753                  le32_to_cpu(pnetwork->network.Configuration.Length);
754         pnetwork->network.InfrastructureMode =
755                  le32_to_cpu(pnetwork->network.InfrastructureMode);
756         pnetwork->network.IELength = le32_to_cpu(pnetwork->network.IELength);
757 #endif
758
759         the_same_macaddr = !memcmp(pnetwork->network.MacAddress,
760                                    cur_network->network.MacAddress, ETH_ALEN);
761         pnetwork->network.Length =
762                  r8712_get_wlan_bssid_ex_sz(&pnetwork->network);
763         spin_lock_irqsave(&pmlmepriv->lock, irqL);
764         if (pnetwork->network.Length > sizeof(struct wlan_bssid_ex))
765                 goto ignore_joinbss_callback;
766         if (pnetwork->join_res > 0) {
767                 if (check_fwstate(pmlmepriv, _FW_UNDER_LINKING) == true) {
768                         /*s1. find ptarget_wlan*/
769                         if (check_fwstate(pmlmepriv, _FW_LINKED) == true) {
770                                 if (the_same_macaddr == true)
771                                         ptarget_wlan =
772                                             r8712_find_network(&pmlmepriv->
773                                             scanned_queue,
774                                             cur_network->network.MacAddress);
775                                 else {
776                                         pcur_wlan =
777                                              r8712_find_network(&pmlmepriv->
778                                              scanned_queue,
779                                              cur_network->network.MacAddress);
780                                         pcur_wlan->fixed = false;
781
782                                         pcur_sta = r8712_get_stainfo(pstapriv,
783                                              cur_network->network.MacAddress);
784                                         spin_lock_irqsave(&pstapriv->
785                                                 sta_hash_lock, irqL2);
786                                         r8712_free_stainfo(adapter, pcur_sta);
787                                         spin_unlock_irqrestore(&(pstapriv->
788                                                 sta_hash_lock), irqL2);
789
790                                         ptarget_wlan =
791                                                  r8712_find_network(&pmlmepriv->
792                                                  scanned_queue,
793                                                  pnetwork->network.
794                                                  MacAddress);
795                                         if (ptarget_wlan)
796                                                 ptarget_wlan->fixed = true;
797                                 }
798                         } else {
799                                 ptarget_wlan = r8712_find_network(&pmlmepriv->
800                                                 scanned_queue,
801                                                 pnetwork->network.MacAddress);
802                                 if (ptarget_wlan)
803                                         ptarget_wlan->fixed = true;
804                         }
805
806                         if (ptarget_wlan == NULL) {
807                                 if (check_fwstate(pmlmepriv,
808                                         _FW_UNDER_LINKING))
809                                         pmlmepriv->fw_state ^=
810                                                  _FW_UNDER_LINKING;
811                                 goto ignore_joinbss_callback;
812                         }
813
814                         /*s2. find ptarget_sta & update ptarget_sta*/
815                         if (check_fwstate(pmlmepriv, WIFI_STATION_STATE)) {
816                                 if (the_same_macaddr == true) {
817                                         ptarget_sta =
818                                                  r8712_get_stainfo(pstapriv,
819                                                  pnetwork->network.MacAddress);
820                                         if (ptarget_sta == NULL)
821                                                 ptarget_sta =
822                                                  r8712_alloc_stainfo(pstapriv,
823                                                  pnetwork->network.MacAddress);
824                                 } else
825                                         ptarget_sta =
826                                                  r8712_alloc_stainfo(pstapriv,
827                                                  pnetwork->network.MacAddress);
828                                 if (ptarget_sta) /*update ptarget_sta*/ {
829                                         ptarget_sta->aid = pnetwork->join_res;
830                                         ptarget_sta->qos_option = 1;
831                                         ptarget_sta->mac_id = 5;
832                                         if (adapter->securitypriv.
833                                             AuthAlgrthm == 2) {
834                                                 adapter->securitypriv.
835                                                         binstallGrpkey =
836                                                          false;
837                                                 adapter->securitypriv.
838                                                         busetkipkey =
839                                                          false;
840                                                 adapter->securitypriv.
841                                                         bgrpkey_handshake =
842                                                          false;
843                                                 ptarget_sta->ieee8021x_blocked
844                                                          = true;
845                                                 ptarget_sta->XPrivacy =
846                                                          adapter->securitypriv.
847                                                          PrivacyAlgrthm;
848                                                 memset((u8 *)&ptarget_sta->
849                                                          x_UncstKey,
850                                                          0,
851                                                          sizeof(union Keytype));
852                                                 memset((u8 *)&ptarget_sta->
853                                                          tkiprxmickey,
854                                                          0,
855                                                          sizeof(union Keytype));
856                                                 memset((u8 *)&ptarget_sta->
857                                                          tkiptxmickey,
858                                                          0,
859                                                          sizeof(union Keytype));
860                                                 memset((u8 *)&ptarget_sta->
861                                                          txpn, 0,
862                                                          sizeof(union pn48));
863                                                 memset((u8 *)&ptarget_sta->
864                                                          rxpn, 0,
865                                                          sizeof(union pn48));
866                                         }
867                                 } else {
868                                         if (check_fwstate(pmlmepriv,
869                                             _FW_UNDER_LINKING))
870                                                 pmlmepriv->fw_state ^=
871                                                          _FW_UNDER_LINKING;
872                                         goto ignore_joinbss_callback;
873                                 }
874                         }
875
876                         /*s3. update cur_network & indicate connect*/
877                         memcpy(&cur_network->network, &pnetwork->network,
878                                 pnetwork->network.Length);
879                         cur_network->aid = pnetwork->join_res;
880                         /*update fw_state will clr _FW_UNDER_LINKING*/
881                         switch (pnetwork->network.InfrastructureMode) {
882                         case Ndis802_11Infrastructure:
883                                 pmlmepriv->fw_state = WIFI_STATION_STATE;
884                                 break;
885                         case Ndis802_11IBSS:
886                                 pmlmepriv->fw_state = WIFI_ADHOC_STATE;
887                                 break;
888                         default:
889                                 pmlmepriv->fw_state = WIFI_NULL_STATE;
890                                 break;
891                         }
892                         r8712_update_protection(adapter,
893                                           (cur_network->network.IEs) +
894                                           sizeof(struct NDIS_802_11_FIXED_IEs),
895                                           (cur_network->network.IELength));
896                         /*TODO: update HT_Capability*/
897                         update_ht_cap(adapter, cur_network->network.IEs,
898                                       cur_network->network.IELength);
899                         /*indicate connect*/
900                         if (check_fwstate(pmlmepriv, WIFI_STATION_STATE)
901                                 == true)
902                                 r8712_indicate_connect(adapter);
903                         del_timer(&pmlmepriv->assoc_timer);
904                 } else
905                         goto ignore_joinbss_callback;
906         } else {
907                 if (check_fwstate(pmlmepriv, _FW_UNDER_LINKING) == true) {
908                         mod_timer(&pmlmepriv->assoc_timer,
909                                   jiffies + msecs_to_jiffies(1));
910                         _clr_fwstate_(pmlmepriv, _FW_UNDER_LINKING);
911                 }
912         }
913 ignore_joinbss_callback:
914         spin_unlock_irqrestore(&pmlmepriv->lock, irqL);
915         if (sizeof(struct list_head) == 4 * sizeof(u32))
916                 kfree(pnetwork);
917 }
918
919 void r8712_stassoc_event_callback(struct _adapter *adapter, u8 *pbuf)
920 {
921         unsigned long irqL;
922         struct sta_info *psta;
923         struct mlme_priv *pmlmepriv = &(adapter->mlmepriv);
924         struct stassoc_event *pstassoc  = (struct stassoc_event *)pbuf;
925
926         /* to do: */
927         if (r8712_access_ctrl(&adapter->acl_list, pstassoc->macaddr) == false)
928                 return;
929         psta = r8712_get_stainfo(&adapter->stapriv, pstassoc->macaddr);
930         if (psta != NULL) {
931                 /*the sta have been in sta_info_queue => do nothing
932                  *(between drv has received this event before and
933                  *  fw have not yet to set key to CAM_ENTRY) */
934                 return;
935         }
936
937         psta = r8712_alloc_stainfo(&adapter->stapriv, pstassoc->macaddr);
938         if (psta == NULL)
939                 return;
940         /* to do : init sta_info variable */
941         psta->qos_option = 0;
942         psta->mac_id = le32_to_cpu((uint)pstassoc->cam_id);
943         /* psta->aid = (uint)pstassoc->cam_id; */
944
945         if (adapter->securitypriv.AuthAlgrthm == 2)
946                 psta->XPrivacy = adapter->securitypriv.PrivacyAlgrthm;
947         psta->ieee8021x_blocked = false;
948         spin_lock_irqsave(&pmlmepriv->lock, irqL);
949         if ((check_fwstate(pmlmepriv, WIFI_ADHOC_MASTER_STATE) == true) ||
950             (check_fwstate(pmlmepriv, WIFI_ADHOC_STATE) == true)) {
951                 if (adapter->stapriv.asoc_sta_count == 2) {
952                         /* a sta + bc/mc_stainfo (not Ibss_stainfo) */
953                         r8712_indicate_connect(adapter);
954                 }
955         }
956         spin_unlock_irqrestore(&pmlmepriv->lock, irqL);
957 }
958
959 void r8712_stadel_event_callback(struct _adapter *adapter, u8 *pbuf)
960 {
961         unsigned long irqL, irqL2;
962         struct sta_info *psta;
963         struct wlan_network *pwlan = NULL;
964         struct wlan_bssid_ex *pdev_network = NULL;
965         u8 *pibss = NULL;
966         struct mlme_priv *pmlmepriv = &adapter->mlmepriv;
967         struct stadel_event *pstadel = (struct stadel_event *)pbuf;
968         struct sta_priv *pstapriv = &adapter->stapriv;
969         struct wlan_network *tgt_network = &pmlmepriv->cur_network;
970
971         spin_lock_irqsave(&pmlmepriv->lock, irqL2);
972         if (check_fwstate(pmlmepriv, WIFI_STATION_STATE) == true) {
973                 r8712_ind_disconnect(adapter);
974                 r8712_free_assoc_resources(adapter);
975         }
976         if (check_fwstate(pmlmepriv, WIFI_ADHOC_MASTER_STATE |
977             WIFI_ADHOC_STATE)) {
978                 psta = r8712_get_stainfo(&adapter->stapriv, pstadel->macaddr);
979                 spin_lock_irqsave(&pstapriv->sta_hash_lock, irqL);
980                 r8712_free_stainfo(adapter, psta);
981                 spin_unlock_irqrestore(&pstapriv->sta_hash_lock, irqL);
982                 if (adapter->stapriv.asoc_sta_count == 1) {
983                         /*a sta + bc/mc_stainfo (not Ibss_stainfo) */
984                         pwlan = r8712_find_network(&pmlmepriv->scanned_queue,
985                                 tgt_network->network.MacAddress);
986                         if (pwlan) {
987                                 pwlan->fixed = false;
988                                 free_network_nolock(pmlmepriv, pwlan);
989                         }
990                         /*re-create ibss*/
991                         pdev_network = &(adapter->registrypriv.dev_network);
992                         pibss = adapter->registrypriv.dev_network.MacAddress;
993                         memcpy(pdev_network, &tgt_network->network,
994                                 r8712_get_wlan_bssid_ex_sz(&tgt_network->
995                                                         network));
996                         memcpy(&pdev_network->Ssid,
997                                 &pmlmepriv->assoc_ssid,
998                                 sizeof(struct ndis_802_11_ssid));
999                         r8712_update_registrypriv_dev_network(adapter);
1000                         r8712_generate_random_ibss(pibss);
1001                         if (check_fwstate(pmlmepriv, WIFI_ADHOC_STATE)) {
1002                                 _clr_fwstate_(pmlmepriv, WIFI_ADHOC_STATE);
1003                                 set_fwstate(pmlmepriv, WIFI_ADHOC_MASTER_STATE);
1004                         }
1005                 }
1006         }
1007         spin_unlock_irqrestore(&pmlmepriv->lock, irqL2);
1008 }
1009
1010 void r8712_cpwm_event_callback(struct _adapter *adapter, u8 *pbuf)
1011 {
1012         struct reportpwrstate_parm *preportpwrstate =
1013                          (struct reportpwrstate_parm *)pbuf;
1014
1015         preportpwrstate->state |= (u8)(adapter->pwrctrlpriv.cpwm_tog + 0x80);
1016         r8712_cpwm_int_hdl(adapter, preportpwrstate);
1017 }
1018
1019 /*      When the Netgear 3500 AP is with WPA2PSK-AES mode, it will send
1020  *       the ADDBA req frame with start seq control = 0 to wifi client after
1021  *       the WPA handshake and the seqence number of following data packet
1022  *      will be 0. In this case, the Rx reorder sequence is not longer than 0
1023  *       and the WiFi client will drop the data with seq number 0.
1024  *      So, the 8712 firmware has to inform driver with receiving the
1025  *       ADDBA-Req frame so that the driver can reset the
1026  *      sequence value of Rx reorder control.
1027  */
1028 void r8712_got_addbareq_event_callback(struct _adapter *adapter, u8 *pbuf)
1029 {
1030         struct  ADDBA_Req_Report_parm *pAddbareq_pram =
1031                          (struct ADDBA_Req_Report_parm *)pbuf;
1032         struct  sta_info *psta;
1033         struct  sta_priv *pstapriv = &adapter->stapriv;
1034         struct  recv_reorder_ctrl *precvreorder_ctrl = NULL;
1035
1036         psta = r8712_get_stainfo(pstapriv, pAddbareq_pram->MacAddress);
1037         if (psta) {
1038                 precvreorder_ctrl =
1039                          &psta->recvreorder_ctrl[pAddbareq_pram->tid];
1040                 /* set the indicate_seq to 0xffff so that the rx reorder
1041                  * can store any following data packet.
1042                  */
1043                 precvreorder_ctrl->indicate_seq = 0xffff;
1044         }
1045 }
1046
1047 void r8712_wpspbc_event_callback(struct _adapter *adapter, u8 *pbuf)
1048 {
1049         if (adapter->securitypriv.wps_hw_pbc_pressed == false)
1050                 adapter->securitypriv.wps_hw_pbc_pressed = true;
1051 }
1052
1053 void _r8712_sitesurvey_ctrl_handler(struct _adapter *adapter)
1054 {
1055         struct mlme_priv *pmlmepriv = &adapter->mlmepriv;
1056         struct sitesurvey_ctrl  *psitesurveyctrl = &pmlmepriv->sitesurveyctrl;
1057         struct registry_priv    *pregistrypriv = &adapter->registrypriv;
1058         u64 current_tx_pkts;
1059         uint current_rx_pkts;
1060
1061         current_tx_pkts = (adapter->xmitpriv.tx_pkts) -
1062                           (psitesurveyctrl->last_tx_pkts);
1063         current_rx_pkts = (adapter->recvpriv.rx_pkts) -
1064                           (psitesurveyctrl->last_rx_pkts);
1065         psitesurveyctrl->last_tx_pkts = adapter->xmitpriv.tx_pkts;
1066         psitesurveyctrl->last_rx_pkts = adapter->recvpriv.rx_pkts;
1067         if ((current_tx_pkts > pregistrypriv->busy_thresh) ||
1068             (current_rx_pkts > pregistrypriv->busy_thresh))
1069                 psitesurveyctrl->traffic_busy = true;
1070         else
1071                 psitesurveyctrl->traffic_busy = false;
1072 }
1073
1074 void _r8712_join_timeout_handler(struct _adapter *adapter)
1075 {
1076         unsigned long irqL;
1077         struct mlme_priv *pmlmepriv = &adapter->mlmepriv;
1078
1079         if (adapter->bDriverStopped || adapter->bSurpriseRemoved)
1080                 return;
1081         spin_lock_irqsave(&pmlmepriv->lock, irqL);
1082         _clr_fwstate_(pmlmepriv, _FW_UNDER_LINKING);
1083         pmlmepriv->to_join = false;
1084         if (check_fwstate(pmlmepriv, _FW_LINKED) == true) {
1085                 r8712_os_indicate_disconnect(adapter);
1086                 _clr_fwstate_(pmlmepriv, _FW_LINKED);
1087         }
1088         if (adapter->pwrctrlpriv.pwr_mode != adapter->registrypriv.power_mgnt) {
1089                 r8712_set_ps_mode(adapter, adapter->registrypriv.power_mgnt,
1090                                   adapter->registrypriv.smart_ps);
1091         }
1092         spin_unlock_irqrestore(&pmlmepriv->lock, irqL);
1093 }
1094
1095 void r8712_scan_timeout_handler (struct _adapter *adapter)
1096 {
1097         unsigned long irqL;
1098         struct mlme_priv *pmlmepriv = &adapter->mlmepriv;
1099
1100         spin_lock_irqsave(&pmlmepriv->lock, irqL);
1101         _clr_fwstate_(pmlmepriv, _FW_UNDER_SURVEY);
1102         pmlmepriv->to_join = false;     /* scan fail, so clear to_join flag */
1103         spin_unlock_irqrestore(&pmlmepriv->lock, irqL);
1104 }
1105
1106 void _r8712_dhcp_timeout_handler (struct _adapter *adapter)
1107 {
1108         if (adapter->bDriverStopped || adapter->bSurpriseRemoved)
1109                 return;
1110         if (adapter->pwrctrlpriv.pwr_mode != adapter->registrypriv.power_mgnt)
1111                 r8712_set_ps_mode(adapter, adapter->registrypriv.power_mgnt,
1112                             adapter->registrypriv.smart_ps);
1113 }
1114
1115 void _r8712_wdg_timeout_handler(struct _adapter *adapter)
1116 {
1117         r8712_wdg_wk_cmd(adapter);
1118 }
1119
1120 int r8712_select_and_join_from_scan(struct mlme_priv *pmlmepriv)
1121 {
1122         struct list_head *phead;
1123         unsigned char *dst_ssid, *src_ssid;
1124         struct _adapter *adapter;
1125         struct  __queue *queue = NULL;
1126         struct wlan_network *pnetwork = NULL;
1127         struct wlan_network *pnetwork_max_rssi = NULL;
1128
1129         adapter = (struct _adapter *)pmlmepriv->nic_hdl;
1130         queue = &pmlmepriv->scanned_queue;
1131         phead = &queue->queue;
1132         pmlmepriv->pscanned = phead->next;
1133         while (1) {
1134                 if (end_of_queue_search(phead, pmlmepriv->pscanned) == true) {
1135                         if ((pmlmepriv->assoc_by_rssi == true) &&
1136                             (pnetwork_max_rssi != NULL)) {
1137                                 pnetwork = pnetwork_max_rssi;
1138                                 goto ask_for_joinbss;
1139                         }
1140                         return _FAIL;
1141                 }
1142                 pnetwork = LIST_CONTAINOR(pmlmepriv->pscanned,
1143                                           struct wlan_network, list);
1144                 if (pnetwork == NULL)
1145                         return _FAIL;
1146                 pmlmepriv->pscanned = pmlmepriv->pscanned->next;
1147                 if (pmlmepriv->assoc_by_bssid == true) {
1148                         dst_ssid = pnetwork->network.MacAddress;
1149                         src_ssid = pmlmepriv->assoc_bssid;
1150                         if (!memcmp(dst_ssid, src_ssid, ETH_ALEN)) {
1151                                 if (check_fwstate(pmlmepriv, _FW_LINKED)) {
1152                                         if (is_same_network(&pmlmepriv->
1153                                             cur_network.network,
1154                                             &pnetwork->network)) {
1155                                                 _clr_fwstate_(pmlmepriv,
1156                                                         _FW_UNDER_LINKING);
1157                                                 /*r8712_indicate_connect again*/
1158                                                 r8712_indicate_connect(adapter);
1159                                                 return 2;
1160                                         }
1161                                         r8712_disassoc_cmd(adapter);
1162                                         r8712_ind_disconnect(adapter);
1163                                         r8712_free_assoc_resources(adapter);
1164                                 }
1165                                 goto ask_for_joinbss;
1166                         }
1167                 } else if (pmlmepriv->assoc_ssid.SsidLength == 0)
1168                         goto ask_for_joinbss;
1169                 dst_ssid = pnetwork->network.Ssid.Ssid;
1170                 src_ssid = pmlmepriv->assoc_ssid.Ssid;
1171                 if ((pnetwork->network.Ssid.SsidLength ==
1172                     pmlmepriv->assoc_ssid.SsidLength) &&
1173                     (!memcmp(dst_ssid, src_ssid,
1174                      pmlmepriv->assoc_ssid.SsidLength))) {
1175                         if (pmlmepriv->assoc_by_rssi == true) {
1176                                 /* if the ssid is the same, select the bss
1177                                  *  which has the max rssi*/
1178                                 if (pnetwork_max_rssi) {
1179                                         if (pnetwork->network.Rssi >
1180                                             pnetwork_max_rssi->network.Rssi)
1181                                                 pnetwork_max_rssi = pnetwork;
1182                                 } else
1183                                         pnetwork_max_rssi = pnetwork;
1184                         } else if (is_desired_network(adapter, pnetwork)) {
1185                                 if (check_fwstate(pmlmepriv, _FW_LINKED)) {
1186                                         r8712_disassoc_cmd(adapter);
1187                                         r8712_free_assoc_resources(adapter);
1188                                 }
1189                                 goto ask_for_joinbss;
1190                         }
1191                 }
1192         }
1193         return _FAIL;
1194 ask_for_joinbss:
1195         return r8712_joinbss_cmd(adapter, pnetwork);
1196 }
1197
1198 sint r8712_set_auth(struct _adapter *adapter,
1199                     struct security_priv *psecuritypriv)
1200 {
1201         struct cmd_priv *pcmdpriv = &adapter->cmdpriv;
1202         struct cmd_obj *pcmd;
1203         struct setauth_parm *psetauthparm;
1204
1205         pcmd = kmalloc(sizeof(*pcmd), GFP_ATOMIC);
1206         if (pcmd == NULL)
1207                 return _FAIL;
1208
1209         psetauthparm = kzalloc(sizeof(*psetauthparm), GFP_ATOMIC);
1210         if (psetauthparm == NULL) {
1211                 kfree(pcmd);
1212                 return _FAIL;
1213         }
1214         psetauthparm->mode = (u8)psecuritypriv->AuthAlgrthm;
1215         pcmd->cmdcode = _SetAuth_CMD_;
1216         pcmd->parmbuf = (unsigned char *)psetauthparm;
1217         pcmd->cmdsz = sizeof(struct setauth_parm);
1218         pcmd->rsp = NULL;
1219         pcmd->rspsz = 0;
1220         INIT_LIST_HEAD(&pcmd->list);
1221         r8712_enqueue_cmd(pcmdpriv, pcmd);
1222         return _SUCCESS;
1223 }
1224
1225 sint r8712_set_key(struct _adapter *adapter,
1226                    struct security_priv *psecuritypriv,
1227              sint keyid)
1228 {
1229         struct cmd_priv *pcmdpriv = &adapter->cmdpriv;
1230         struct cmd_obj *pcmd;
1231         struct setkey_parm *psetkeyparm;
1232         u8 keylen;
1233         sint ret = _SUCCESS;
1234
1235         pcmd = kmalloc(sizeof(*pcmd), GFP_ATOMIC);
1236         if (pcmd == NULL)
1237                 return _FAIL;
1238         psetkeyparm = kzalloc(sizeof(*psetkeyparm), GFP_ATOMIC);
1239         if (psetkeyparm == NULL) {
1240                 ret = _FAIL;
1241                 goto err_free_cmd;
1242         }
1243         if (psecuritypriv->AuthAlgrthm == 2) { /* 802.1X */
1244                 psetkeyparm->algorithm =
1245                          (u8)psecuritypriv->XGrpPrivacy;
1246         } else { /* WEP */
1247                 psetkeyparm->algorithm =
1248                          (u8)psecuritypriv->PrivacyAlgrthm;
1249         }
1250         psetkeyparm->keyid = (u8)keyid;
1251
1252         switch (psetkeyparm->algorithm) {
1253         case _WEP40_:
1254                 keylen = 5;
1255                 memcpy(psetkeyparm->key,
1256                         psecuritypriv->DefKey[keyid].skey, keylen);
1257                 break;
1258         case _WEP104_:
1259                 keylen = 13;
1260                 memcpy(psetkeyparm->key,
1261                         psecuritypriv->DefKey[keyid].skey, keylen);
1262                 break;
1263         case _TKIP_:
1264                 if (keyid < 1 || keyid > 2) {
1265                         ret = _FAIL;
1266                         goto err_free_parm;
1267                 }
1268                 keylen = 16;
1269                 memcpy(psetkeyparm->key,
1270                         &psecuritypriv->XGrpKey[keyid - 1], keylen);
1271                 psetkeyparm->grpkey = 1;
1272                 break;
1273         case _AES_:
1274                 if (keyid < 1 || keyid > 2) {
1275                         ret = _FAIL;
1276                         goto err_free_parm;
1277                 }
1278                 keylen = 16;
1279                 memcpy(psetkeyparm->key,
1280                         &psecuritypriv->XGrpKey[keyid - 1], keylen);
1281                 psetkeyparm->grpkey = 1;
1282                 break;
1283         default:
1284                 ret = _FAIL;
1285                 goto err_free_parm;
1286         }
1287         pcmd->cmdcode = _SetKey_CMD_;
1288         pcmd->parmbuf = (u8 *)psetkeyparm;
1289         pcmd->cmdsz =  (sizeof(struct setkey_parm));
1290         pcmd->rsp = NULL;
1291         pcmd->rspsz = 0;
1292         INIT_LIST_HEAD(&pcmd->list);
1293         r8712_enqueue_cmd(pcmdpriv, pcmd);
1294         return ret;
1295
1296 err_free_parm:
1297         kfree(psetkeyparm);
1298 err_free_cmd:
1299         kfree(pcmd);
1300         return ret;
1301 }
1302
1303 /* adjust IEs for r8712_joinbss_cmd in WMM */
1304 int r8712_restruct_wmm_ie(struct _adapter *adapter, u8 *in_ie, u8 *out_ie,
1305                     uint in_len, uint initial_out_len)
1306 {
1307         unsigned int ielength = 0;
1308         unsigned int i, j;
1309
1310         i = 12; /* after the fixed IE */
1311         while (i < in_len) {
1312                 ielength = initial_out_len;
1313                 if (in_ie[i] == 0xDD && in_ie[i + 2] == 0x00 &&
1314                     in_ie[i + 3] == 0x50 && in_ie[i + 4] == 0xF2 &&
1315                     in_ie[i + 5] == 0x02 && i + 5 < in_len) {
1316                         /*WMM element ID and OUI*/
1317                         for (j = i; j < i + 9; j++) {
1318                                 out_ie[ielength] = in_ie[j];
1319                                 ielength++;
1320                         }
1321                         out_ie[initial_out_len + 1] = 0x07;
1322                         out_ie[initial_out_len + 6] = 0x00;
1323                         out_ie[initial_out_len + 8] = 0x00;
1324                         break;
1325                 }
1326                 i += (in_ie[i + 1] + 2); /* to the next IE element */
1327         }
1328         return ielength;
1329 }
1330
1331 /*
1332  * Ported from 8185: IsInPreAuthKeyList().
1333  *
1334  * Search by BSSID,
1335  * Return Value:
1336  *      -1              :if there is no pre-auth key in the  table
1337  *      >=0             :if there is pre-auth key, and   return the entry id
1338  */
1339 static int SecIsInPMKIDList(struct _adapter *Adapter, u8 *bssid)
1340 {
1341         struct security_priv *psecuritypriv = &Adapter->securitypriv;
1342         int i = 0;
1343
1344         do {
1345                 if (psecuritypriv->PMKIDList[i].bUsed &&
1346                    (!memcmp(psecuritypriv->PMKIDList[i].Bssid,
1347                             bssid, ETH_ALEN)))
1348                         break;
1349                 else
1350                         i++;
1351         } while (i < NUM_PMKID_CACHE);
1352
1353         if (i == NUM_PMKID_CACHE) {
1354                 i = -1; /* Could not find. */
1355         } else {
1356                 ; /* There is one Pre-Authentication Key for the
1357                    * specific BSSID. */
1358         }
1359         return i;
1360 }
1361
1362 sint r8712_restruct_sec_ie(struct _adapter *adapter, u8 *in_ie,
1363                      u8 *out_ie, uint in_len)
1364 {
1365         u8 authmode = 0, match;
1366         u8 sec_ie[255], uncst_oui[4], bkup_ie[255];
1367         u8 wpa_oui[4] = {0x0, 0x50, 0xf2, 0x01};
1368         uint ielength, cnt, remove_cnt;
1369         int iEntry;
1370         struct mlme_priv *pmlmepriv = &adapter->mlmepriv;
1371         struct security_priv *psecuritypriv = &adapter->securitypriv;
1372         uint ndisauthmode = psecuritypriv->ndisauthtype;
1373         uint ndissecuritytype = psecuritypriv->ndisencryptstatus;
1374
1375         if ((ndisauthmode == Ndis802_11AuthModeWPA) ||
1376             (ndisauthmode == Ndis802_11AuthModeWPAPSK)) {
1377                 authmode = _WPA_IE_ID_;
1378                 uncst_oui[0] = 0x0;
1379                 uncst_oui[1] = 0x50;
1380                 uncst_oui[2] = 0xf2;
1381         }
1382         if ((ndisauthmode == Ndis802_11AuthModeWPA2) ||
1383             (ndisauthmode == Ndis802_11AuthModeWPA2PSK)) {
1384                 authmode = _WPA2_IE_ID_;
1385                 uncst_oui[0] = 0x0;
1386                 uncst_oui[1] = 0x0f;
1387                 uncst_oui[2] = 0xac;
1388         }
1389         switch (ndissecuritytype) {
1390         case Ndis802_11Encryption1Enabled:
1391         case Ndis802_11Encryption1KeyAbsent:
1392                 uncst_oui[3] = 0x1;
1393                 break;
1394         case Ndis802_11Encryption2Enabled:
1395         case Ndis802_11Encryption2KeyAbsent:
1396                 uncst_oui[3] = 0x2;
1397                 break;
1398         case Ndis802_11Encryption3Enabled:
1399         case Ndis802_11Encryption3KeyAbsent:
1400                 uncst_oui[3] = 0x4;
1401                 break;
1402         default:
1403                 break;
1404         }
1405         /*Search required WPA or WPA2 IE and copy to sec_ie[] */
1406         cnt = 12;
1407         match = false;
1408         while (cnt < in_len) {
1409                 if (in_ie[cnt] == authmode) {
1410                         if ((authmode == _WPA_IE_ID_) &&
1411                             (!memcmp(&in_ie[cnt+2], &wpa_oui[0], 4))) {
1412                                 memcpy(&sec_ie[0], &in_ie[cnt],
1413                                         in_ie[cnt + 1] + 2);
1414                                 match = true;
1415                                 break;
1416                         }
1417                         if (authmode == _WPA2_IE_ID_) {
1418                                 memcpy(&sec_ie[0], &in_ie[cnt],
1419                                         in_ie[cnt + 1] + 2);
1420                                 match = true;
1421                                 break;
1422                         }
1423                         if (((authmode == _WPA_IE_ID_) &&
1424                              (!memcmp(&in_ie[cnt + 2], &wpa_oui[0], 4))) ||
1425                              (authmode == _WPA2_IE_ID_))
1426                                 memcpy(&bkup_ie[0], &in_ie[cnt],
1427                                         in_ie[cnt + 1] + 2);
1428                 }
1429                 cnt += in_ie[cnt+1] + 2; /*get next*/
1430         }
1431         /*restruct WPA IE or WPA2 IE in sec_ie[] */
1432         if (match == true) {
1433                 if (sec_ie[0] == _WPA_IE_ID_) {
1434                         /* parsing SSN IE to select required encryption
1435                          * algorithm, and set the bc/mc encryption algorithm */
1436                         while (true) {
1437                                 /*check wpa_oui tag*/
1438                                 if (memcmp(&sec_ie[2], &wpa_oui[0], 4)) {
1439                                         match = false;
1440                                         break;
1441                                 }
1442                                 if ((sec_ie[6] != 0x01) || (sec_ie[7] != 0x0)) {
1443                                         /*IE Ver error*/
1444                                         match = false;
1445                                         break;
1446                                 }
1447                                 if (!memcmp(&sec_ie[8], &wpa_oui[0], 3)) {
1448                                         /* get bc/mc encryption type (group
1449                                          * key type)*/
1450                                         switch (sec_ie[11]) {
1451                                         case 0x0: /*none*/
1452                                                 psecuritypriv->XGrpPrivacy =
1453                                                                 _NO_PRIVACY_;
1454                                                 break;
1455                                         case 0x1: /*WEP_40*/
1456                                                 psecuritypriv->XGrpPrivacy =
1457                                                                 _WEP40_;
1458                                                 break;
1459                                         case 0x2: /*TKIP*/
1460                                                 psecuritypriv->XGrpPrivacy =
1461                                                                 _TKIP_;
1462                                                 break;
1463                                         case 0x3: /*AESCCMP*/
1464                                         case 0x4:
1465                                                 psecuritypriv->XGrpPrivacy =
1466                                                                 _AES_;
1467                                                 break;
1468                                         case 0x5: /*WEP_104*/
1469                                                 psecuritypriv->XGrpPrivacy =
1470                                                                 _WEP104_;
1471                                                 break;
1472                                         }
1473                                 } else {
1474                                         match = false;
1475                                         break;
1476                                 }
1477                                 if (sec_ie[12] == 0x01) {
1478                                         /*check the unicast encryption type*/
1479                                         if (memcmp(&sec_ie[14],
1480                                             &uncst_oui[0], 4)) {
1481                                                 match = false;
1482                                                 break;
1483
1484                                         } /*else the uncst_oui is match*/
1485                                 } else { /*mixed mode, unicast_enc_type > 1*/
1486                                         /*select the uncst_oui and remove
1487                                          * the other uncst_oui*/
1488                                         cnt = sec_ie[12];
1489                                         remove_cnt = (cnt-1) * 4;
1490                                         sec_ie[12] = 0x01;
1491                                         memcpy(&sec_ie[14], &uncst_oui[0], 4);
1492                                         /*remove the other unicast suit*/
1493                                         memcpy(&sec_ie[18],
1494                                                 &sec_ie[18 + remove_cnt],
1495                                                 sec_ie[1] - 18 + 2 -
1496                                                 remove_cnt);
1497                                         sec_ie[1] = sec_ie[1] - remove_cnt;
1498                                 }
1499                                 break;
1500                         }
1501                 }
1502                 if (authmode == _WPA2_IE_ID_) {
1503                         /* parsing RSN IE to select required encryption
1504                          * algorithm, and set the bc/mc encryption algorithm */
1505                         while (true) {
1506                                 if ((sec_ie[2] != 0x01) || (sec_ie[3] != 0x0)) {
1507                                         /*IE Ver error*/
1508                                         match = false;
1509                                         break;
1510                                 }
1511                                 if (!memcmp(&sec_ie[4], &uncst_oui[0], 3)) {
1512                                         /*get bc/mc encryption type*/
1513                                         switch (sec_ie[7]) {
1514                                         case 0x1: /*WEP_40*/
1515                                                 psecuritypriv->XGrpPrivacy =
1516                                                                 _WEP40_;
1517                                                 break;
1518                                         case 0x2: /*TKIP*/
1519                                                 psecuritypriv->XGrpPrivacy =
1520                                                                 _TKIP_;
1521                                                 break;
1522                                         case 0x4: /*AESWRAP*/
1523                                                 psecuritypriv->XGrpPrivacy =
1524                                                                 _AES_;
1525                                                 break;
1526                                         case 0x5: /*WEP_104*/
1527                                                 psecuritypriv->XGrpPrivacy =
1528                                                                 _WEP104_;
1529                                                 break;
1530                                         default: /*one*/
1531                                                 psecuritypriv->XGrpPrivacy =
1532                                                                 _NO_PRIVACY_;
1533                                                 break;
1534                                         }
1535                                 } else {
1536                                         match = false;
1537                                         break;
1538                                 }
1539                                 if (sec_ie[8] == 0x01) {
1540                                         /*check the unicast encryption type*/
1541                                         if (memcmp(&sec_ie[10],
1542                                                      &uncst_oui[0], 4)) {
1543                                                 match = false;
1544                                                 break;
1545                                         } /*else the uncst_oui is match*/
1546                                 } else { /*mixed mode, unicast_enc_type > 1*/
1547                                         /*select the uncst_oui and remove the
1548                                          * other uncst_oui*/
1549                                         cnt = sec_ie[8];
1550                                         remove_cnt = (cnt-1)*4;
1551                                         sec_ie[8] = 0x01;
1552                                         memcpy(&sec_ie[10], &uncst_oui[0], 4);
1553                                         /*remove the other unicast suit*/
1554                                         memcpy(&sec_ie[14],
1555                                                 &sec_ie[14 + remove_cnt],
1556                                                 (sec_ie[1] - 14 + 2 -
1557                                                 remove_cnt));
1558                                         sec_ie[1] = sec_ie[1]-remove_cnt;
1559                                 }
1560                                 break;
1561                         }
1562                 }
1563         }
1564         if ((authmode == _WPA_IE_ID_) || (authmode == _WPA2_IE_ID_)) {
1565                 /*copy fixed ie*/
1566                 memcpy(out_ie, in_ie, 12);
1567                 ielength = 12;
1568                 /*copy RSN or SSN*/
1569                 if (match == true) {
1570                         memcpy(&out_ie[ielength], &sec_ie[0], sec_ie[1]+2);
1571                         ielength += sec_ie[1] + 2;
1572                         if (authmode == _WPA2_IE_ID_) {
1573                                 /*the Pre-Authentication bit should be zero*/
1574                                 out_ie[ielength - 1] = 0;
1575                                 out_ie[ielength - 2] = 0;
1576                         }
1577                         r8712_report_sec_ie(adapter, authmode, sec_ie);
1578                 }
1579         } else {
1580                 /*copy fixed ie only*/
1581                 memcpy(out_ie, in_ie, 12);
1582                 ielength = 12;
1583                 if (psecuritypriv->wps_phase == true) {
1584                         memcpy(out_ie+ielength, psecuritypriv->wps_ie,
1585                                 psecuritypriv->wps_ie_len);
1586                         ielength += psecuritypriv->wps_ie_len;
1587                 }
1588         }
1589         iEntry = SecIsInPMKIDList(adapter, pmlmepriv->assoc_bssid);
1590         if (iEntry < 0)
1591                 return ielength;
1592         if (authmode == _WPA2_IE_ID_) {
1593                 out_ie[ielength] = 1;
1594                 ielength++;
1595                 out_ie[ielength] = 0;   /*PMKID count = 0x0100*/
1596                 ielength++;
1597                 memcpy(&out_ie[ielength],
1598                         &psecuritypriv->PMKIDList[iEntry].PMKID, 16);
1599                 ielength += 16;
1600                 out_ie[13] += 18;/*PMKID length = 2+16*/
1601         }
1602         return ielength;
1603 }
1604
1605 void r8712_init_registrypriv_dev_network(struct _adapter *adapter)
1606 {
1607         struct registry_priv *pregistrypriv = &adapter->registrypriv;
1608         struct eeprom_priv *peepriv = &adapter->eeprompriv;
1609         struct wlan_bssid_ex *pdev_network = &pregistrypriv->dev_network;
1610         u8 *myhwaddr = myid(peepriv);
1611
1612         memcpy(pdev_network->MacAddress, myhwaddr, ETH_ALEN);
1613         memcpy(&pdev_network->Ssid, &pregistrypriv->ssid,
1614                 sizeof(struct ndis_802_11_ssid));
1615         pdev_network->Configuration.Length =
1616                          sizeof(struct NDIS_802_11_CONFIGURATION);
1617         pdev_network->Configuration.BeaconPeriod = 100;
1618         pdev_network->Configuration.FHConfig.Length = 0;
1619         pdev_network->Configuration.FHConfig.HopPattern = 0;
1620         pdev_network->Configuration.FHConfig.HopSet = 0;
1621         pdev_network->Configuration.FHConfig.DwellTime = 0;
1622 }
1623
1624 void r8712_update_registrypriv_dev_network(struct _adapter *adapter)
1625 {
1626         int sz = 0;
1627         struct registry_priv    *pregistrypriv = &adapter->registrypriv;
1628         struct wlan_bssid_ex    *pdev_network = &pregistrypriv->dev_network;
1629         struct security_priv    *psecuritypriv = &adapter->securitypriv;
1630         struct wlan_network     *cur_network = &adapter->mlmepriv.cur_network;
1631
1632         pdev_network->Privacy = cpu_to_le32(psecuritypriv->PrivacyAlgrthm
1633                                             > 0 ? 1 : 0); /* adhoc no 802.1x */
1634         pdev_network->Rssi = 0;
1635         switch (pregistrypriv->wireless_mode) {
1636         case WIRELESS_11B:
1637                 pdev_network->NetworkTypeInUse = cpu_to_le32(Ndis802_11DS);
1638                 break;
1639         case WIRELESS_11G:
1640         case WIRELESS_11BG:
1641                 pdev_network->NetworkTypeInUse = cpu_to_le32(Ndis802_11OFDM24);
1642                 break;
1643         case WIRELESS_11A:
1644                 pdev_network->NetworkTypeInUse = cpu_to_le32(Ndis802_11OFDM5);
1645                 break;
1646         default:
1647                 /* TODO */
1648                 break;
1649         }
1650         pdev_network->Configuration.DSConfig = cpu_to_le32(
1651                                                pregistrypriv->channel);
1652         if (cur_network->network.InfrastructureMode == Ndis802_11IBSS)
1653                 pdev_network->Configuration.ATIMWindow = cpu_to_le32(3);
1654         pdev_network->InfrastructureMode = cpu_to_le32(
1655                                 cur_network->network.InfrastructureMode);
1656         /* 1. Supported rates
1657          * 2. IE
1658          */
1659         sz = r8712_generate_ie(pregistrypriv);
1660         pdev_network->IELength = sz;
1661         pdev_network->Length = r8712_get_wlan_bssid_ex_sz(pdev_network);
1662 }
1663
1664 /*the function is at passive_level*/
1665 void r8712_joinbss_reset(struct _adapter *padapter)
1666 {
1667         int i;
1668         struct mlme_priv        *pmlmepriv = &padapter->mlmepriv;
1669         struct ht_priv          *phtpriv = &pmlmepriv->htpriv;
1670
1671         /* todo: if you want to do something io/reg/hw setting before join_bss,
1672          * please add code here */
1673         phtpriv->ampdu_enable = false;/*reset to disabled*/
1674         for (i = 0; i < 16; i++)
1675                 phtpriv->baddbareq_issued[i] = false;/*reset it*/
1676         if (phtpriv->ht_option) {
1677                 /* validate  usb rx aggregation */
1678                 r8712_write8(padapter, 0x102500D9, 48);/*TH = 48 pages, 6k*/
1679         } else {
1680                 /* invalidate  usb rx aggregation */
1681                 /* TH=1 => means that invalidate usb rx aggregation */
1682                 r8712_write8(padapter, 0x102500D9, 1);
1683         }
1684 }
1685
1686 /*the function is >= passive_level*/
1687 unsigned int r8712_restructure_ht_ie(struct _adapter *padapter, u8 *in_ie,
1688                                      u8 *out_ie, uint in_len, uint *pout_len)
1689 {
1690         u32 ielen, out_len;
1691         unsigned char *p;
1692         struct ieee80211_ht_cap ht_capie;
1693         unsigned char WMM_IE[] = {0x00, 0x50, 0xf2, 0x02, 0x00, 0x01, 0x00};
1694         struct mlme_priv *pmlmepriv = &padapter->mlmepriv;
1695         struct qos_priv *pqospriv = &pmlmepriv->qospriv;
1696         struct ht_priv *phtpriv = &pmlmepriv->htpriv;
1697
1698         phtpriv->ht_option = 0;
1699         p = r8712_get_ie(in_ie+12, _HT_CAPABILITY_IE_, &ielen, in_len-12);
1700         if (p && (ielen > 0)) {
1701                 if (pqospriv->qos_option == 0) {
1702                         out_len = *pout_len;
1703                         r8712_set_ie(out_ie+out_len, _VENDOR_SPECIFIC_IE_,
1704                                      _WMM_IE_Length_, WMM_IE, pout_len);
1705                         pqospriv->qos_option = 1;
1706                 }
1707                 out_len = *pout_len;
1708                 memset(&ht_capie, 0, sizeof(struct ieee80211_ht_cap));
1709                 ht_capie.cap_info = IEEE80211_HT_CAP_SUP_WIDTH |
1710                                     IEEE80211_HT_CAP_SGI_20 |
1711                                     IEEE80211_HT_CAP_SGI_40 |
1712                                     IEEE80211_HT_CAP_TX_STBC |
1713                                     IEEE80211_HT_CAP_MAX_AMSDU |
1714                                     IEEE80211_HT_CAP_DSSSCCK40;
1715                 ht_capie.ampdu_params_info = (IEEE80211_HT_CAP_AMPDU_FACTOR &
1716                                 0x03) | (IEEE80211_HT_CAP_AMPDU_DENSITY & 0x00);
1717                 r8712_set_ie(out_ie+out_len, _HT_CAPABILITY_IE_,
1718                              sizeof(struct ieee80211_ht_cap),
1719                              (unsigned char *)&ht_capie, pout_len);
1720                 phtpriv->ht_option = 1;
1721         }
1722         return phtpriv->ht_option;
1723 }
1724
1725 /* the function is > passive_level (in critical_section) */
1726 static void update_ht_cap(struct _adapter *padapter, u8 *pie, uint ie_len)
1727 {
1728         u8 *p, max_ampdu_sz;
1729         int i, len;
1730         struct sta_info *bmc_sta, *psta;
1731         struct ieee80211_ht_cap *pht_capie;
1732         struct recv_reorder_ctrl *preorder_ctrl;
1733         struct mlme_priv *pmlmepriv = &padapter->mlmepriv;
1734         struct ht_priv *phtpriv = &pmlmepriv->htpriv;
1735         struct registry_priv *pregistrypriv = &padapter->registrypriv;
1736         struct wlan_network *pcur_network = &(pmlmepriv->cur_network);
1737
1738         if (!phtpriv->ht_option)
1739                 return;
1740         /* maybe needs check if ap supports rx ampdu. */
1741         if ((phtpriv->ampdu_enable == false) &&
1742             (pregistrypriv->ampdu_enable == 1))
1743                 phtpriv->ampdu_enable = true;
1744         /*check Max Rx A-MPDU Size*/
1745         len = 0;
1746         p = r8712_get_ie(pie + sizeof(struct NDIS_802_11_FIXED_IEs),
1747                                 _HT_CAPABILITY_IE_,
1748                                 &len, ie_len -
1749                                 sizeof(struct NDIS_802_11_FIXED_IEs));
1750         if (p && len > 0) {
1751                 pht_capie = (struct ieee80211_ht_cap *)(p+2);
1752                 max_ampdu_sz = (pht_capie->ampdu_params_info &
1753                                 IEEE80211_HT_CAP_AMPDU_FACTOR);
1754                 /* max_ampdu_sz (kbytes); */
1755                 max_ampdu_sz = 1 << (max_ampdu_sz+3);
1756                 phtpriv->rx_ampdu_maxlen = max_ampdu_sz;
1757         }
1758         /* for A-MPDU Rx reordering buffer control for bmc_sta & sta_info
1759          * if A-MPDU Rx is enabled, resetting rx_ordering_ctrl
1760          * wstart_b(indicate_seq) to default value=0xffff
1761          * todo: check if AP can send A-MPDU packets
1762          */
1763         bmc_sta = r8712_get_bcmc_stainfo(padapter);
1764         if (bmc_sta) {
1765                 for (i = 0; i < 16; i++) {
1766                         preorder_ctrl = &bmc_sta->recvreorder_ctrl[i];
1767                         preorder_ctrl->indicate_seq = 0xffff;
1768                         preorder_ctrl->wend_b = 0xffff;
1769                 }
1770         }
1771         psta = r8712_get_stainfo(&padapter->stapriv,
1772                                  pcur_network->network.MacAddress);
1773         if (psta) {
1774                 for (i = 0; i < 16; i++) {
1775                         preorder_ctrl = &psta->recvreorder_ctrl[i];
1776                         preorder_ctrl->indicate_seq = 0xffff;
1777                         preorder_ctrl->wend_b = 0xffff;
1778                 }
1779         }
1780         len = 0;
1781         p = r8712_get_ie(pie + sizeof(struct NDIS_802_11_FIXED_IEs),
1782                    _HT_ADD_INFO_IE_, &len,
1783                    ie_len-sizeof(struct NDIS_802_11_FIXED_IEs));
1784 }
1785
1786 void r8712_issue_addbareq_cmd(struct _adapter *padapter, int priority)
1787 {
1788         struct mlme_priv *pmlmepriv = &padapter->mlmepriv;
1789         struct ht_priv   *phtpriv = &pmlmepriv->htpriv;
1790
1791         if ((phtpriv->ht_option == 1) && (phtpriv->ampdu_enable == true)) {
1792                 if (phtpriv->baddbareq_issued[priority] == false) {
1793                         r8712_addbareq_cmd(padapter, (u8)priority);
1794                         phtpriv->baddbareq_issued[priority] = true;
1795                 }
1796         }
1797 }