kernel/drivers/staging/rtl8188eu/core/rtw_mlme.c

   1 /******************************************************************************
   2  *
   3  * Copyright(c) 2007 - 2011 Realtek Corporation. All rights reserved.
   4  *
   5  * This program is free software; you can redistribute it and/or modify it
   6  * under the terms of version 2 of the GNU General Public License as
   7  * published by the Free Software Foundation.
   8  *
   9  * This program is distributed in the hope that it will be useful, but WITHOUT
  10  * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
  11  * FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for
  12  * more details.
  13  *
  14  * You should have received a copy of the GNU General Public License along with
  15  * this program; if not, write to the Free Software Foundation, Inc.,
  16  * 51 Franklin Street, Fifth Floor, Boston, MA 02110, USA
  17  *
  18  *
  19  ******************************************************************************/
  20 #define _RTW_MLME_C_
  21
  22 #include <linux/ieee80211.h>
  23
  24 #include <osdep_service.h>
  25 #include <drv_types.h>
  26 #include <recv_osdep.h>
  27 #include <xmit_osdep.h>
  28 #include <hal_intf.h>
  29 #include <mlme_osdep.h>
  30 #include <sta_info.h>
  31 #include <wifi.h>
  32 #include <wlan_bssdef.h>
  33 #include <rtw_ioctl_set.h>
  34 #include <linux/vmalloc.h>
  35
  36 extern unsigned char    MCS_rate_2R[16];
  37 extern unsigned char    MCS_rate_1R[16];
  38
  39 int rtw_init_mlme_priv(struct adapter *padapter)
  40 {
  41         int     i;
  42         u8      *pbuf;
  43         struct wlan_network     *pnetwork;
  44         struct mlme_priv                *pmlmepriv = &padapter->mlmepriv;
  45         int     res = _SUCCESS;
  46
  47         /*  We don't need to memset padapter->XXX to zero, because adapter is allocated by vzalloc(). */
  48
  49         pmlmepriv->nic_hdl = (u8 *)padapter;
  50
  51         pmlmepriv->pscanned = NULL;
  52         pmlmepriv->fw_state = 0;
  53         pmlmepriv->cur_network.network.InfrastructureMode = Ndis802_11AutoUnknown;
  54         pmlmepriv->scan_mode = SCAN_ACTIVE;/*  1: active, 0: pasive. Maybe someday we should rename this varable to "active_mode" (Jeff) */
  55
  56         spin_lock_init(&(pmlmepriv->lock));
  57         _rtw_init_queue(&(pmlmepriv->free_bss_pool));
  58         _rtw_init_queue(&(pmlmepriv->scanned_queue));
  59
  60         set_scanned_network_val(pmlmepriv, 0);
  61
  62         memset(&pmlmepriv->assoc_ssid, 0, sizeof(struct ndis_802_11_ssid));
  63
  64         pbuf = vzalloc(MAX_BSS_CNT * (sizeof(struct wlan_network)));
  65
  66         if (pbuf == NULL) {
  67                 res = _FAIL;
  68                 goto exit;
  69         }
  70         pmlmepriv->free_bss_buf = pbuf;
  71
  72         pnetwork = (struct wlan_network *)pbuf;
  73
  74         for (i = 0; i < MAX_BSS_CNT; i++) {
  75                 INIT_LIST_HEAD(&(pnetwork->list));
  76
  77                 list_add_tail(&(pnetwork->list), &(pmlmepriv->free_bss_pool.queue));
  78
  79                 pnetwork++;
  80         }
  81
  82         /* allocate DMA-able/Non-Page memory for cmd_buf and rsp_buf */
  83
  84         rtw_clear_scan_deny(padapter);
  85
  86         rtw_init_mlme_timer(padapter);
  87
  88 exit:
  89         return res;
  90 }
  91
  92 #if defined(CONFIG_88EU_AP_MODE)
  93 static void rtw_free_mlme_ie_data(u8 **ppie, u32 *plen)
  94 {
  95         kfree(*ppie);
  96         *plen = 0;
  97         *ppie = NULL;
  98 }
  99
 100 void rtw_free_mlme_priv_ie_data(struct mlme_priv *pmlmepriv)
 101 {
 102         rtw_buf_free(&pmlmepriv->assoc_req, &pmlmepriv->assoc_req_len);
 103         rtw_buf_free(&pmlmepriv->assoc_rsp, &pmlmepriv->assoc_rsp_len);
 104         rtw_free_mlme_ie_data(&pmlmepriv->wps_beacon_ie, &pmlmepriv->wps_beacon_ie_len);
 105         rtw_free_mlme_ie_data(&pmlmepriv->wps_probe_req_ie, &pmlmepriv->wps_probe_req_ie_len);
 106         rtw_free_mlme_ie_data(&pmlmepriv->wps_probe_resp_ie, &pmlmepriv->wps_probe_resp_ie_len);
 107         rtw_free_mlme_ie_data(&pmlmepriv->wps_assoc_resp_ie, &pmlmepriv->wps_assoc_resp_ie_len);
 108
 109         rtw_free_mlme_ie_data(&pmlmepriv->p2p_beacon_ie, &pmlmepriv->p2p_beacon_ie_len);
 110         rtw_free_mlme_ie_data(&pmlmepriv->p2p_probe_req_ie, &pmlmepriv->p2p_probe_req_ie_len);
 111         rtw_free_mlme_ie_data(&pmlmepriv->p2p_probe_resp_ie, &pmlmepriv->p2p_probe_resp_ie_len);
 112         rtw_free_mlme_ie_data(&pmlmepriv->p2p_go_probe_resp_ie, &pmlmepriv->p2p_go_probe_resp_ie_len);
 113         rtw_free_mlme_ie_data(&pmlmepriv->p2p_assoc_req_ie, &pmlmepriv->p2p_assoc_req_ie_len);
 114 }
 115 #else
 116 void rtw_free_mlme_priv_ie_data(struct mlme_priv *pmlmepriv)
 117 {
 118 }
 119 #endif
 120
 121 void rtw_free_mlme_priv(struct mlme_priv *pmlmepriv)
 122 {
 123         rtw_free_mlme_priv_ie_data(pmlmepriv);
 124
 125         if (pmlmepriv) {
 126                 if (pmlmepriv->free_bss_buf)
 127                         vfree(pmlmepriv->free_bss_buf);
 128         }
 129 }
 130
 131 struct  wlan_network *_rtw_alloc_network(struct mlme_priv *pmlmepriv)/* _queue *free_queue) */
 132 {
 133         struct  wlan_network    *pnetwork;
 134         struct __queue *free_queue = &pmlmepriv->free_bss_pool;
 135         struct list_head *plist = NULL;
 136
 137         spin_lock_bh(&free_queue->lock);
 138
 139         if (list_empty(&free_queue->queue)) {
 140                 pnetwork = NULL;
 141                 goto exit;
 142         }
 143         plist = free_queue->queue.next;
 144
 145         pnetwork = container_of(plist, struct wlan_network, list);
 146
 147         list_del_init(&pnetwork->list);
 148
 149         RT_TRACE(_module_rtl871x_mlme_c_, _drv_info_, ("_rtw_alloc_network: ptr=%p\n", plist));
 150         pnetwork->network_type = 0;
 151         pnetwork->fixed = false;
 152         pnetwork->last_scanned = jiffies;
 153         pnetwork->aid = 0;
 154         pnetwork->join_res = 0;
 155
 156         pmlmepriv->num_of_scanned++;
 157
 158 exit:
 159         spin_unlock_bh(&free_queue->lock);
 160
 161         return pnetwork;
 162 }
 163
 164 static void _rtw_free_network(struct mlme_priv *pmlmepriv, struct wlan_network *pnetwork, u8 isfreeall)
 165 {
 166         u32 curr_time, delta_time;
 167         u32 lifetime = SCANQUEUE_LIFETIME;
 168         struct __queue *free_queue = &(pmlmepriv->free_bss_pool);
 169
 170         if (pnetwork == NULL)
 171                 return;
 172
 173         if (pnetwork->fixed)
 174                 return;
 175         curr_time = jiffies;
 176         if ((check_fwstate(pmlmepriv, WIFI_ADHOC_MASTER_STATE)) ||
 177             (check_fwstate(pmlmepriv, WIFI_ADHOC_STATE)))
 178                 lifetime = 1;
 179         if (!isfreeall) {
 180                 delta_time = (curr_time - pnetwork->last_scanned)/HZ;
 181                 if (delta_time < lifetime)/*  unit:sec */
 182                         return;
 183         }
 184         spin_lock_bh(&free_queue->lock);
 185         list_del_init(&(pnetwork->list));
 186         list_add_tail(&(pnetwork->list), &(free_queue->queue));
 187         pmlmepriv->num_of_scanned--;
 188         spin_unlock_bh(&free_queue->lock);
 189 }
 190
 191 void _rtw_free_network_nolock(struct    mlme_priv *pmlmepriv, struct wlan_network *pnetwork)
 192 {
 193         struct __queue *free_queue = &(pmlmepriv->free_bss_pool);
 194
 195         if (pnetwork == NULL)
 196                 return;
 197         if (pnetwork->fixed)
 198                 return;
 199         list_del_init(&(pnetwork->list));
 200         list_add_tail(&(pnetwork->list), get_list_head(free_queue));
 201         pmlmepriv->num_of_scanned--;
 202 }
 203
 204 /*
 205         return the wlan_network with the matching addr
 206
 207         Shall be calle under atomic context... to avoid possible racing condition...
 208 */
 209 struct wlan_network *rtw_find_network(struct __queue *scanned_queue, u8 *addr)
 210 {
 211         struct list_head *phead, *plist;
 212         struct  wlan_network *pnetwork = NULL;
 213         u8 zero_addr[ETH_ALEN] = {0, 0, 0, 0, 0, 0};
 214
 215         if (!memcmp(zero_addr, addr, ETH_ALEN)) {
 216                 pnetwork = NULL;
 217                 goto exit;
 218         }
 219         phead = get_list_head(scanned_queue);
 220         plist = phead->next;
 221
 222         while (plist != phead) {
 223                 pnetwork = container_of(plist, struct wlan_network, list);
 224                 if (!memcmp(addr, pnetwork->network.MacAddress, ETH_ALEN))
 225                         break;
 226                 plist = plist->next;
 227         }
 228         if (plist == phead)
 229                 pnetwork = NULL;
 230 exit:
 231         return pnetwork;
 232 }
 233
 234
 235 void rtw_free_network_queue(struct adapter *padapter, u8 isfreeall)
 236 {
 237         struct list_head *phead, *plist;
 238         struct wlan_network *pnetwork;
 239         struct mlme_priv *pmlmepriv = &padapter->mlmepriv;
 240         struct __queue *scanned_queue = &pmlmepriv->scanned_queue;
 241
 242         spin_lock_bh(&scanned_queue->lock);
 243
 244         phead = get_list_head(scanned_queue);
 245         plist = phead->next;
 246
 247         while (phead != plist) {
 248                 pnetwork = container_of(plist, struct wlan_network, list);
 249
 250                 plist = plist->next;
 251
 252                 _rtw_free_network(pmlmepriv, pnetwork, isfreeall);
 253         }
 254         spin_unlock_bh(&scanned_queue->lock);
 255 }
 256
 257 int rtw_if_up(struct adapter *padapter)
 258 {
 259         int res;
 260
 261         if (padapter->bDriverStopped || padapter->bSurpriseRemoved ||
 262             (check_fwstate(&padapter->mlmepriv, _FW_LINKED) == false)) {
 263                 RT_TRACE(_module_rtl871x_mlme_c_, _drv_info_,
 264                          ("rtw_if_up:bDriverStopped(%d) OR bSurpriseRemoved(%d)",
 265                          padapter->bDriverStopped, padapter->bSurpriseRemoved));
 266                 res = false;
 267         } else {
 268                 res =  true;
 269         }
 270         return res;
 271 }
 272
 273 void rtw_generate_random_ibss(u8 *pibss)
 274 {
 275         u32     curtime = jiffies;
 276
 277         pibss[0] = 0x02;  /* in ad-hoc mode bit1 must set to 1 */
 278         pibss[1] = 0x11;
 279         pibss[2] = 0x87;
 280         pibss[3] = (u8)(curtime & 0xff);/* p[0]; */
 281         pibss[4] = (u8)((curtime>>8) & 0xff);/* p[1]; */
 282         pibss[5] = (u8)((curtime>>16) & 0xff);/* p[2]; */
 283         return;
 284 }
 285
 286 u8 *rtw_get_capability_from_ie(u8 *ie)
 287 {
 288         return ie + 8 + 2;
 289 }
 290
 291
 292 u16 rtw_get_capability(struct wlan_bssid_ex *bss)
 293 {
 294         __le16  val;
 295
 296         memcpy((u8 *)&val, rtw_get_capability_from_ie(bss->IEs), 2);
 297
 298         return le16_to_cpu(val);
 299 }
 300
 301 u8 *rtw_get_beacon_interval_from_ie(u8 *ie)
 302 {
 303         return ie + 8;
 304 }
 305
 306 static struct wlan_network *rtw_alloc_network(struct mlme_priv *pmlmepriv)
 307 {
 308         return _rtw_alloc_network(pmlmepriv);
 309 }
 310
 311 static void rtw_free_network_nolock(struct mlme_priv *pmlmepriv,
 312                                     struct wlan_network *pnetwork)
 313 {
 314         _rtw_free_network_nolock(pmlmepriv, pnetwork);
 315 }
 316
 317 int rtw_is_same_ibss(struct adapter *adapter, struct wlan_network *pnetwork)
 318 {
 319         int ret = true;
 320         struct security_priv *psecuritypriv = &adapter->securitypriv;
 321
 322         if ((psecuritypriv->dot11PrivacyAlgrthm != _NO_PRIVACY_) &&
 323             (pnetwork->network.Privacy == 0))
 324                 ret = false;
 325         else if ((psecuritypriv->dot11PrivacyAlgrthm == _NO_PRIVACY_) &&
 326                  (pnetwork->network.Privacy == 1))
 327                 ret = false;
 328         else
 329                 ret = true;
 330         return ret;
 331 }
 332
 333 static int is_same_ess(struct wlan_bssid_ex *a, struct wlan_bssid_ex *b)
 334 {
 335         return (a->Ssid.SsidLength == b->Ssid.SsidLength) &&
 336                !memcmp(a->Ssid.Ssid, b->Ssid.Ssid, a->Ssid.SsidLength);
 337 }
 338
 339 int is_same_network(struct wlan_bssid_ex *src, struct wlan_bssid_ex *dst)
 340 {
 341          u16 s_cap, d_cap;
 342         __le16 le_scap, le_dcap;
 343
 344         memcpy((u8 *)&le_scap, rtw_get_capability_from_ie(src->IEs), 2);
 345         memcpy((u8 *)&le_dcap, rtw_get_capability_from_ie(dst->IEs), 2);
 346
 347
 348         s_cap = le16_to_cpu(le_scap);
 349         d_cap = le16_to_cpu(le_dcap);
 350
 351         return ((src->Ssid.SsidLength == dst->Ssid.SsidLength) &&
 352                 ((!memcmp(src->MacAddress, dst->MacAddress, ETH_ALEN)) == true) &&
 353                 ((!memcmp(src->Ssid.Ssid, dst->Ssid.Ssid, src->Ssid.SsidLength)) == true) &&
 354                 ((s_cap & WLAN_CAPABILITY_IBSS) ==
 355                 (d_cap & WLAN_CAPABILITY_IBSS)) &&
 356                 ((s_cap & WLAN_CAPABILITY_ESS) ==
 357                 (d_cap & WLAN_CAPABILITY_ESS)));
 358 }
 359
 360 struct  wlan_network    *rtw_get_oldest_wlan_network(struct __queue *scanned_queue)
 361 {
 362         struct list_head *plist, *phead;
 363         struct  wlan_network    *pwlan = NULL;
 364         struct  wlan_network    *oldest = NULL;
 365
 366         phead = get_list_head(scanned_queue);
 367
 368         plist = phead->next;
 369
 370         while (1) {
 371                 if (phead == plist)
 372                         break;
 373
 374                 pwlan = container_of(plist, struct wlan_network, list);
 375
 376                 if (!pwlan->fixed) {
 377                         if (oldest == NULL || time_after(oldest->last_scanned, pwlan->last_scanned))
 378                                 oldest = pwlan;
 379                 }
 380
 381                 plist = plist->next;
 382         }
 383         return oldest;
 384 }
 385
 386 void update_network(struct wlan_bssid_ex *dst, struct wlan_bssid_ex *src,
 387         struct adapter *padapter, bool update_ie)
 388 {
 389         long rssi_ori = dst->Rssi;
 390         u8 sq_smp = src->PhyInfo.SignalQuality;
 391         u8 ss_final;
 392         u8 sq_final;
 393         long rssi_final;
 394
 395         rtw_hal_antdiv_rssi_compared(padapter, dst, src); /* this will update src.Rssi, need consider again */
 396
 397         /* The rule below is 1/5 for sample value, 4/5 for history value */
 398         if (check_fwstate(&padapter->mlmepriv, _FW_LINKED) && is_same_network(&(padapter->mlmepriv.cur_network.network), src)) {
 399                 /* Take the recvpriv's value for the connected AP*/
 400                 ss_final = padapter->recvpriv.signal_strength;
 401                 sq_final = padapter->recvpriv.signal_qual;
 402                 /* the rssi value here is undecorated, and will be used for antenna diversity */
 403                 if (sq_smp != 101) /* from the right channel */
 404                         rssi_final = (src->Rssi+dst->Rssi*4)/5;
 405                 else
 406                         rssi_final = rssi_ori;
 407         } else {
 408                 if (sq_smp != 101) { /* from the right channel */
 409                         ss_final = ((u32)(src->PhyInfo.SignalStrength)+(u32)(dst->PhyInfo.SignalStrength)*4)/5;
 410                         sq_final = ((u32)(src->PhyInfo.SignalQuality)+(u32)(dst->PhyInfo.SignalQuality)*4)/5;
 411                         rssi_final = (src->Rssi+dst->Rssi*4)/5;
 412                 } else {
 413                         /* bss info not receiving from the right channel, use the original RX signal infos */
 414                         ss_final = dst->PhyInfo.SignalStrength;
 415                         sq_final = dst->PhyInfo.SignalQuality;
 416                         rssi_final = dst->Rssi;
 417                 }
 418         }
 419         if (update_ie)
 420                 memcpy((u8 *)dst, (u8 *)src, get_wlan_bssid_ex_sz(src));
 421         dst->PhyInfo.SignalStrength = ss_final;
 422         dst->PhyInfo.SignalQuality = sq_final;
 423         dst->Rssi = rssi_final;
 424
 425 }
 426
 427 static void update_current_network(struct adapter *adapter, struct wlan_bssid_ex *pnetwork)
 428 {
 429         struct  mlme_priv       *pmlmepriv = &(adapter->mlmepriv);
 430
 431         if ((check_fwstate(pmlmepriv, _FW_LINKED) == true) &&
 432             (is_same_network(&(pmlmepriv->cur_network.network), pnetwork))) {
 433                 update_network(&(pmlmepriv->cur_network.network), pnetwork, adapter, true);
 434                 rtw_update_protection(adapter, (pmlmepriv->cur_network.network.IEs) + sizeof(struct ndis_802_11_fixed_ie),
 435                                       pmlmepriv->cur_network.network.IELength);
 436         }
 437 }
 438
 439 /*
 440 Caller must hold pmlmepriv->lock first.
 441 */
 442 void rtw_update_scanned_network(struct adapter *adapter, struct wlan_bssid_ex *target)
 443 {
 444         struct list_head *plist, *phead;
 445         u32     bssid_ex_sz;
 446         struct mlme_priv        *pmlmepriv = &(adapter->mlmepriv);
 447         struct __queue *queue   = &(pmlmepriv->scanned_queue);
 448         struct wlan_network     *pnetwork = NULL;
 449         struct wlan_network     *oldest = NULL;
 450
 451         spin_lock_bh(&queue->lock);
 452         phead = get_list_head(queue);
 453         plist = phead->next;
 454
 455         while (phead != plist) {
 456                 pnetwork        = container_of(plist, struct wlan_network, list);
 457
 458                 if (is_same_network(&(pnetwork->network), target))
 459                         break;
 460                 if ((oldest == ((struct wlan_network *)0)) ||
 461                     time_after(oldest->last_scanned, pnetwork->last_scanned))
 462                         oldest = pnetwork;
 463                 plist = plist->next;
 464         }
 465         /* If we didn't find a match, then get a new network slot to initialize
 466          * with this beacon's information */
 467         if (phead == plist) {
 468                 if (list_empty(&(pmlmepriv->free_bss_pool.queue))) {
 469                         /* If there are no more slots, expire the oldest */
 470                         pnetwork = oldest;
 471
 472                         rtw_hal_get_def_var(adapter, HAL_DEF_CURRENT_ANTENNA, &(target->PhyInfo.Optimum_antenna));
 473                         memcpy(&(pnetwork->network), target,  get_wlan_bssid_ex_sz(target));
 474                         /*  variable initialize */
 475                         pnetwork->fixed = false;
 476                         pnetwork->last_scanned = jiffies;
 477
 478                         pnetwork->network_type = 0;
 479                         pnetwork->aid = 0;
 480                         pnetwork->join_res = 0;
 481
 482                         /* bss info not receiving from the right channel */
 483                         if (pnetwork->network.PhyInfo.SignalQuality == 101)
 484                                 pnetwork->network.PhyInfo.SignalQuality = 0;
 485                 } else {
 486                         /* Otherwise just pull from the free list */
 487
 488                         pnetwork = rtw_alloc_network(pmlmepriv); /*  will update scan_time */
 489
 490                         if (pnetwork == NULL) {
 491                                 RT_TRACE(_module_rtl871x_mlme_c_, _drv_err_, ("\n\n\nsomething wrong here\n\n\n"));
 492                                 goto exit;
 493                         }
 494
 495                         bssid_ex_sz = get_wlan_bssid_ex_sz(target);
 496                         target->Length = bssid_ex_sz;
 497                         rtw_hal_get_def_var(adapter, HAL_DEF_CURRENT_ANTENNA, &(target->PhyInfo.Optimum_antenna));
 498                         memcpy(&(pnetwork->network), target, bssid_ex_sz);
 499
 500                         pnetwork->last_scanned = jiffies;
 501
 502                         /* bss info not receiving from the right channel */
 503                         if (pnetwork->network.PhyInfo.SignalQuality == 101)
 504                                 pnetwork->network.PhyInfo.SignalQuality = 0;
 505                         list_add_tail(&(pnetwork->list), &(queue->queue));
 506                 }
 507         } else {
 508                 /* we have an entry and we are going to update it. But this entry may
 509                  * be already expired. In this case we do the same as we found a new
 510                  * net and call the new_net handler
 511                  */
 512                 bool update_ie = true;
 513
 514                 pnetwork->last_scanned = jiffies;
 515
 516                 /* target.Reserved[0]== 1, means that scanned network is a bcn frame. */
 517                 if ((pnetwork->network.IELength > target->IELength) && (target->Reserved[0] == 1))
 518                         update_ie = false;
 519
 520                 update_network(&(pnetwork->network), target, adapter, update_ie);
 521         }
 522
 523 exit:
 524         spin_unlock_bh(&queue->lock);
 525
 526 }
 527
 528 static void rtw_add_network(struct adapter *adapter,
 529                             struct wlan_bssid_ex *pnetwork)
 530 {
 531         update_current_network(adapter, pnetwork);
 532         rtw_update_scanned_network(adapter, pnetwork);
 533 }
 534
 535 /*
 536  * select the desired network based on the capability of the (i)bss.
 537  * check items: (1) security
 538  *                      (2) network_type
 539  *                      (3) WMM
 540  *                      (4) HT
 541  *                      (5) others
 542  */
 543 static int rtw_is_desired_network(struct adapter *adapter, struct wlan_network *pnetwork)
 544 {
 545         struct security_priv *psecuritypriv = &adapter->securitypriv;
 546         struct mlme_priv *pmlmepriv = &adapter->mlmepriv;
 547         u32 desired_encmode;
 548         u32 privacy;
 549
 550         /* u8 wps_ie[512]; */
 551         uint wps_ielen;
 552
 553         int bselected = true;
 554
 555         desired_encmode = psecuritypriv->ndisencryptstatus;
 556         privacy = pnetwork->network.Privacy;
 557
 558         if (check_fwstate(pmlmepriv, WIFI_UNDER_WPS)) {
 559                 if (rtw_get_wps_ie(pnetwork->network.IEs+_FIXED_IE_LENGTH_, pnetwork->network.IELength-_FIXED_IE_LENGTH_, NULL, &wps_ielen) != NULL)
 560                         return true;
 561                 else
 562                         return false;
 563         }
 564         if (adapter->registrypriv.wifi_spec == 1) { /* for  correct flow of 8021X  to do.... */
 565                 if ((desired_encmode == Ndis802_11EncryptionDisabled) && (privacy != 0))
 566                         bselected = false;
 567         }
 568
 569
 570         if ((desired_encmode != Ndis802_11EncryptionDisabled) && (privacy == 0)) {
 571                 DBG_88E("desired_encmode: %d, privacy: %d\n", desired_encmode, privacy);
 572                 bselected = false;
 573         }
 574
 575         if (check_fwstate(pmlmepriv, WIFI_ADHOC_STATE) == true) {
 576                 if (pnetwork->network.InfrastructureMode != pmlmepriv->cur_network.network.InfrastructureMode)
 577                         bselected = false;
 578         }
 579
 580
 581         return bselected;
 582 }
 583
 584 /* TODO: Perry: For Power Management */
 585 void rtw_atimdone_event_callback(struct adapter *adapter, u8 *pbuf)
 586 {
 587         RT_TRACE(_module_rtl871x_mlme_c_, _drv_err_, ("receive atimdone_evet\n"));
 588         return;
 589 }
 590
 591
 592 void rtw_survey_event_callback(struct adapter   *adapter, u8 *pbuf)
 593 {
 594         u32 len;
 595         struct wlan_bssid_ex *pnetwork;
 596         struct  mlme_priv       *pmlmepriv = &(adapter->mlmepriv);
 597
 598         pnetwork = (struct wlan_bssid_ex *)pbuf;
 599
 600         RT_TRACE(_module_rtl871x_mlme_c_, _drv_info_, ("rtw_survey_event_callback, ssid=%s\n",  pnetwork->Ssid.Ssid));
 601
 602         len = get_wlan_bssid_ex_sz(pnetwork);
 603         if (len > (sizeof(struct wlan_bssid_ex))) {
 604                 RT_TRACE(_module_rtl871x_mlme_c_, _drv_err_, ("\n****rtw_survey_event_callback: return a wrong bss ***\n"));
 605                 return;
 606         }
 607         spin_lock_bh(&pmlmepriv->lock);
 608
 609         /*  update IBSS_network 's timestamp */
 610         if ((check_fwstate(pmlmepriv, WIFI_ADHOC_MASTER_STATE)) == true) {
 611                 if (!memcmp(&(pmlmepriv->cur_network.network.MacAddress), pnetwork->MacAddress, ETH_ALEN)) {
 612                         struct wlan_network *ibss_wlan = NULL;
 613
 614                         memcpy(pmlmepriv->cur_network.network.IEs, pnetwork->IEs, 8);
 615                         spin_lock_bh(&(pmlmepriv->scanned_queue.lock));
 616                         ibss_wlan = rtw_find_network(&pmlmepriv->scanned_queue,  pnetwork->MacAddress);
 617                         if (ibss_wlan) {
 618                                 memcpy(ibss_wlan->network.IEs, pnetwork->IEs, 8);
 619                                 spin_unlock_bh(&pmlmepriv->scanned_queue.lock);
 620                                 goto exit;
 621                         }
 622                         spin_unlock_bh(&pmlmepriv->scanned_queue.lock);
 623                 }
 624         }
 625
 626         /*  lock pmlmepriv->lock when you accessing network_q */
 627         if ((check_fwstate(pmlmepriv, _FW_UNDER_LINKING)) == false) {
 628                 if (pnetwork->Ssid.Ssid[0] == 0)
 629                         pnetwork->Ssid.SsidLength = 0;
 630                 rtw_add_network(adapter, pnetwork);
 631         }
 632
 633 exit:
 634
 635         spin_unlock_bh(&pmlmepriv->lock);
 636         return;
 637 }
 638
 639 void rtw_surveydone_event_callback(struct adapter       *adapter, u8 *pbuf)
 640 {
 641         struct  mlme_priv *pmlmepriv = &(adapter->mlmepriv);
 642
 643         spin_lock_bh(&pmlmepriv->lock);
 644
 645         if (pmlmepriv->wps_probe_req_ie) {
 646                 pmlmepriv->wps_probe_req_ie_len = 0;
 647                 kfree(pmlmepriv->wps_probe_req_ie);
 648                 pmlmepriv->wps_probe_req_ie = NULL;
 649         }
 650
 651         RT_TRACE(_module_rtl871x_mlme_c_, _drv_info_, ("rtw_surveydone_event_callback: fw_state:%x\n\n", get_fwstate(pmlmepriv)));
 652
 653         if (check_fwstate(pmlmepriv, _FW_UNDER_SURVEY)) {
 654                 del_timer_sync(&pmlmepriv->scan_to_timer);
 655                 _clr_fwstate_(pmlmepriv, _FW_UNDER_SURVEY);
 656         } else {
 657                 RT_TRACE(_module_rtl871x_mlme_c_, _drv_err_, ("nic status=%x, survey done event comes too late!\n", get_fwstate(pmlmepriv)));
 658         }
 659
 660         rtw_set_signal_stat_timer(&adapter->recvpriv);
 661
 662         if (pmlmepriv->to_join) {
 663                 if ((check_fwstate(pmlmepriv, WIFI_ADHOC_STATE) == true)) {
 664                         if (check_fwstate(pmlmepriv, _FW_LINKED) == false) {
 665                                 set_fwstate(pmlmepriv, _FW_UNDER_LINKING);
 666
 667                                 if (rtw_select_and_join_from_scanned_queue(pmlmepriv) == _SUCCESS) {
 668                                         mod_timer(&pmlmepriv->assoc_timer,
 669                                                   jiffies + msecs_to_jiffies(MAX_JOIN_TIMEOUT));
 670                                 } else {
 671                                         struct wlan_bssid_ex    *pdev_network = &(adapter->registrypriv.dev_network);
 672                                         u8 *pibss = adapter->registrypriv.dev_network.MacAddress;
 673
 674                                         _clr_fwstate_(pmlmepriv, _FW_UNDER_SURVEY);
 675
 676                                         RT_TRACE(_module_rtl871x_mlme_c_, _drv_err_, ("switching to adhoc master\n"));
 677
 678                                         memcpy(&pdev_network->Ssid, &pmlmepriv->assoc_ssid, sizeof(struct ndis_802_11_ssid));
 679
 680                                         rtw_update_registrypriv_dev_network(adapter);
 681                                         rtw_generate_random_ibss(pibss);
 682
 683                                         pmlmepriv->fw_state = WIFI_ADHOC_MASTER_STATE;
 684
 685                                         if (rtw_createbss_cmd(adapter) != _SUCCESS)
 686                                                 RT_TRACE(_module_rtl871x_mlme_c_, _drv_err_, ("Error=>rtw_createbss_cmd status FAIL\n"));
 687                                         pmlmepriv->to_join = false;
 688                                 }
 689                         }
 690                 } else {
 691                         int s_ret;
 692                         set_fwstate(pmlmepriv, _FW_UNDER_LINKING);
 693                         pmlmepriv->to_join = false;
 694                         s_ret = rtw_select_and_join_from_scanned_queue(pmlmepriv);
 695                         if (_SUCCESS == s_ret) {
 696                                 mod_timer(&pmlmepriv->assoc_timer,
 697                                         jiffies + msecs_to_jiffies(MAX_JOIN_TIMEOUT));
 698                         } else if (s_ret == 2) { /* there is no need to wait for join */
 699                                 _clr_fwstate_(pmlmepriv, _FW_UNDER_LINKING);
 700                                 rtw_indicate_connect(adapter);
 701                         } else {
 702                                 DBG_88E("try_to_join, but select scanning queue fail, to_roaming:%d\n", pmlmepriv->to_roaming);
 703                                 if (pmlmepriv->to_roaming != 0) {
 704                                         if (--pmlmepriv->to_roaming == 0 ||
 705                                             _SUCCESS != rtw_sitesurvey_cmd(adapter, &pmlmepriv->assoc_ssid, 1, NULL, 0)) {
 706                                                 pmlmepriv->to_roaming = 0;
 707                                                 rtw_free_assoc_resources(adapter);
 708                                                 rtw_indicate_disconnect(adapter);
 709                                         } else {
 710                                                 pmlmepriv->to_join = true;
 711                                         }
 712                                 }
 713                                 _clr_fwstate_(pmlmepriv, _FW_UNDER_LINKING);
 714                         }
 715                 }
 716         }
 717
 718         indicate_wx_scan_complete_event(adapter);
 719
 720         spin_unlock_bh(&pmlmepriv->lock);
 721
 722         rtw_os_xmit_schedule(adapter);
 723 }
 724
 725 void rtw_dummy_event_callback(struct adapter *adapter, u8 *pbuf)
 726 {
 727 }
 728
 729 void rtw_fwdbg_event_callback(struct adapter *adapter, u8 *pbuf)
 730 {
 731 }
 732
 733 static void free_scanqueue(struct       mlme_priv *pmlmepriv)
 734 {
 735         struct __queue *free_queue = &pmlmepriv->free_bss_pool;
 736         struct __queue *scan_queue = &pmlmepriv->scanned_queue;
 737         struct list_head *plist, *phead, *ptemp;
 738
 739         RT_TRACE(_module_rtl871x_mlme_c_, _drv_notice_, ("+free_scanqueue\n"));
 740         spin_lock_bh(&scan_queue->lock);
 741         spin_lock_bh(&free_queue->lock);
 742
 743         phead = get_list_head(scan_queue);
 744         plist = phead->next;
 745
 746         while (plist != phead) {
 747                 ptemp = plist->next;
 748                 list_del_init(plist);
 749                 list_add_tail(plist, &free_queue->queue);
 750                 plist = ptemp;
 751                 pmlmepriv->num_of_scanned--;
 752         }
 753
 754         spin_unlock_bh(&free_queue->lock);
 755         spin_unlock_bh(&scan_queue->lock);
 756 }
 757
 758 /*
 759 *rtw_free_assoc_resources: the caller has to lock pmlmepriv->lock
 760 */
 761 void rtw_free_assoc_resources(struct adapter *adapter)
 762 {
 763         struct  mlme_priv *pmlmepriv = &adapter->mlmepriv;
 764
 765         spin_lock_bh(&pmlmepriv->scanned_queue.lock);
 766         rtw_free_assoc_resources_locked(adapter);
 767         spin_unlock_bh(&pmlmepriv->scanned_queue.lock);
 768 }
 769
 770 /*
 771 *rtw_free_assoc_resources_locked: the caller has to lock pmlmepriv->lock
 772 */
 773 void rtw_free_assoc_resources_locked(struct adapter *adapter)
 774 {
 775         struct wlan_network *pwlan = NULL;
 776         struct  mlme_priv *pmlmepriv = &adapter->mlmepriv;
 777         struct  sta_priv *pstapriv = &adapter->stapriv;
 778         struct wlan_network *tgt_network = &pmlmepriv->cur_network;
 779
 780         RT_TRACE(_module_rtl871x_mlme_c_, _drv_notice_, ("+rtw_free_assoc_resources\n"));
 781         RT_TRACE(_module_rtl871x_mlme_c_, _drv_info_,
 782                  ("tgt_network->network.MacAddress=%pM ssid=%s\n",
 783                  tgt_network->network.MacAddress, tgt_network->network.Ssid.Ssid));
 784
 785         if (check_fwstate(pmlmepriv, WIFI_STATION_STATE | WIFI_AP_STATE)) {
 786                 struct sta_info *psta;
 787
 788                 psta = rtw_get_stainfo(&adapter->stapriv, tgt_network->network.MacAddress);
 789
 790                 spin_lock_bh(&(pstapriv->sta_hash_lock));
 791                 rtw_free_stainfo(adapter,  psta);
 792                 spin_unlock_bh(&pstapriv->sta_hash_lock);
 793         }
 794
 795         if (check_fwstate(pmlmepriv, WIFI_ADHOC_STATE | WIFI_ADHOC_MASTER_STATE | WIFI_AP_STATE)) {
 796                 struct sta_info *psta;
 797
 798                 rtw_free_all_stainfo(adapter);
 799
 800                 psta = rtw_get_bcmc_stainfo(adapter);
 801                 spin_lock_bh(&(pstapriv->sta_hash_lock));
 802                 rtw_free_stainfo(adapter, psta);
 803                 spin_unlock_bh(&pstapriv->sta_hash_lock);
 804
 805                 rtw_init_bcmc_stainfo(adapter);
 806         }
 807
 808
 809         pwlan = rtw_find_network(&pmlmepriv->scanned_queue, tgt_network->network.MacAddress);
 810         if (pwlan)
 811                 pwlan->fixed = false;
 812         else
 813                 RT_TRACE(_module_rtl871x_mlme_c_, _drv_err_, ("rtw_free_assoc_resources:pwlan==NULL\n\n"));
 814
 815         if ((check_fwstate(pmlmepriv, WIFI_ADHOC_MASTER_STATE) && (adapter->stapriv.asoc_sta_count == 1)))
 816                 rtw_free_network_nolock(pmlmepriv, pwlan);
 817
 818         pmlmepriv->key_mask = 0;
 819 }
 820
 821 /*
 822 *rtw_indicate_connect: the caller has to lock pmlmepriv->lock
 823 */
 824 void rtw_indicate_connect(struct adapter *padapter)
 825 {
 826         struct mlme_priv        *pmlmepriv = &padapter->mlmepriv;
 827
 828         RT_TRACE(_module_rtl871x_mlme_c_, _drv_err_, ("+rtw_indicate_connect\n"));
 829
 830         pmlmepriv->to_join = false;
 831
 832         if (!check_fwstate(&padapter->mlmepriv, _FW_LINKED)) {
 833                 set_fwstate(pmlmepriv, _FW_LINKED);
 834
 835                 rtw_led_control(padapter, LED_CTL_LINK);
 836
 837                 rtw_os_indicate_connect(padapter);
 838         }
 839
 840         pmlmepriv->to_roaming = 0;
 841
 842         rtw_set_scan_deny(padapter, 3000);
 843
 844         RT_TRACE(_module_rtl871x_mlme_c_, _drv_err_, ("-rtw_indicate_connect: fw_state=0x%08x\n", get_fwstate(pmlmepriv)));
 845 }
 846
 847 /*
 848 *rtw_indicate_disconnect: the caller has to lock pmlmepriv->lock
 849 */
 850 void rtw_indicate_disconnect(struct adapter *padapter)
 851 {
 852         struct  mlme_priv *pmlmepriv = &padapter->mlmepriv;
 853
 854         RT_TRACE(_module_rtl871x_mlme_c_, _drv_err_, ("+rtw_indicate_disconnect\n"));
 855
 856         _clr_fwstate_(pmlmepriv, _FW_UNDER_LINKING | WIFI_UNDER_WPS);
 857
 858
 859         if (pmlmepriv->to_roaming > 0)
 860                 _clr_fwstate_(pmlmepriv, _FW_LINKED);
 861
 862         if (check_fwstate(&padapter->mlmepriv, _FW_LINKED) ||
 863             (pmlmepriv->to_roaming <= 0)) {
 864                 rtw_os_indicate_disconnect(padapter);
 865
 866                 _clr_fwstate_(pmlmepriv, _FW_LINKED);
 867                 rtw_led_control(padapter, LED_CTL_NO_LINK);
 868                 rtw_clear_scan_deny(padapter);
 869         }
 870
 871         rtw_lps_ctrl_wk_cmd(padapter, LPS_CTRL_DISCONNECT, 1);
 872 }
 873
 874 inline void rtw_indicate_scan_done(struct adapter *padapter, bool aborted)
 875 {
 876         rtw_os_indicate_scan_done(padapter, aborted);
 877 }
 878
 879 void rtw_scan_abort(struct adapter *adapter)
 880 {
 881         u32 start;
 882         struct mlme_priv        *pmlmepriv = &(adapter->mlmepriv);
 883         struct mlme_ext_priv    *pmlmeext = &(adapter->mlmeextpriv);
 884
 885         start = jiffies;
 886         pmlmeext->scan_abort = true;
 887         while (check_fwstate(pmlmepriv, _FW_UNDER_SURVEY) &&
 888                rtw_get_passing_time_ms(start) <= 200) {
 889                 if (adapter->bDriverStopped || adapter->bSurpriseRemoved)
 890                         break;
 891                 DBG_88E(FUNC_NDEV_FMT"fw_state=_FW_UNDER_SURVEY!\n", FUNC_NDEV_ARG(adapter->pnetdev));
 892                 msleep(20);
 893         }
 894         if (check_fwstate(pmlmepriv, _FW_UNDER_SURVEY)) {
 895                 if (!adapter->bDriverStopped && !adapter->bSurpriseRemoved)
 896                         DBG_88E(FUNC_NDEV_FMT"waiting for scan_abort time out!\n", FUNC_NDEV_ARG(adapter->pnetdev));
 897                 rtw_indicate_scan_done(adapter, true);
 898         }
 899         pmlmeext->scan_abort = false;
 900 }
 901
 902 static struct sta_info *rtw_joinbss_update_stainfo(struct adapter *padapter, struct wlan_network *pnetwork)
 903 {
 904         int i;
 905         struct sta_info *bmc_sta, *psta = NULL;
 906         struct recv_reorder_ctrl *preorder_ctrl;
 907         struct sta_priv *pstapriv = &padapter->stapriv;
 908
 909         psta = rtw_get_stainfo(pstapriv, pnetwork->network.MacAddress);
 910         if (psta == NULL)
 911                 psta = rtw_alloc_stainfo(pstapriv, pnetwork->network.MacAddress);
 912
 913         if (psta) { /* update ptarget_sta */
 914                 DBG_88E("%s\n", __func__);
 915                 psta->aid  = pnetwork->join_res;
 916                         psta->mac_id = 0;
 917                 /* sta mode */
 918                 rtw_hal_set_odm_var(padapter, HAL_ODM_STA_INFO, psta, true);
 919                 /* security related */
 920                 if (padapter->securitypriv.dot11AuthAlgrthm == dot11AuthAlgrthm_8021X) {
 921                         padapter->securitypriv.binstallGrpkey = false;
 922                         padapter->securitypriv.busetkipkey = false;
 923                         padapter->securitypriv.bgrpkey_handshake = false;
 924                         psta->ieee8021x_blocked = true;
 925                         psta->dot118021XPrivacy = padapter->securitypriv.dot11PrivacyAlgrthm;
 926                         memset((u8 *)&psta->dot118021x_UncstKey, 0, sizeof(union Keytype));
 927                         memset((u8 *)&psta->dot11tkiprxmickey, 0, sizeof(union Keytype));
 928                         memset((u8 *)&psta->dot11tkiptxmickey, 0, sizeof(union Keytype));
 929                         memset((u8 *)&psta->dot11txpn, 0, sizeof(union pn48));
 930                         memset((u8 *)&psta->dot11rxpn, 0, sizeof(union pn48));
 931                 }
 932                 /*
 933                  * Commented by Albert 2012/07/21
 934                  * When doing the WPS, the wps_ie_len won't equal to 0
 935                  * And the Wi-Fi driver shouldn't allow the data
 936                  * packet to be tramsmitted.
 937                  */
 938                 if (padapter->securitypriv.wps_ie_len != 0) {
 939                         psta->ieee8021x_blocked = true;
 940                         padapter->securitypriv.wps_ie_len = 0;
 941                 }
 942                 /* for A-MPDU Rx reordering buffer control for bmc_sta & sta_info */
 943                 /* if A-MPDU Rx is enabled, resetting  rx_ordering_ctrl wstart_b(indicate_seq) to default value = 0xffff */
 944                 /* todo: check if AP can send A-MPDU packets */
 945                 for (i = 0; i < 16; i++) {
 946                         /* preorder_ctrl = &precvpriv->recvreorder_ctrl[i]; */
 947                         preorder_ctrl = &psta->recvreorder_ctrl[i];
 948                         preorder_ctrl->enable = false;
 949                         preorder_ctrl->indicate_seq = 0xffff;
 950                         preorder_ctrl->wend_b = 0xffff;
 951                         preorder_ctrl->wsize_b = 64;/* max_ampdu_sz; ex. 32(kbytes) -> wsize_b = 32 */
 952                 }
 953                 bmc_sta = rtw_get_bcmc_stainfo(padapter);
 954                 if (bmc_sta) {
 955                         for (i = 0; i < 16; i++) {
 956                                 /* preorder_ctrl = &precvpriv->recvreorder_ctrl[i]; */
 957                                 preorder_ctrl = &bmc_sta->recvreorder_ctrl[i];
 958                                 preorder_ctrl->enable = false;
 959                                 preorder_ctrl->indicate_seq = 0xffff;
 960                                 preorder_ctrl->wend_b = 0xffff;
 961                                 preorder_ctrl->wsize_b = 64;/* max_ampdu_sz; ex. 32(kbytes) -> wsize_b = 32 */
 962                         }
 963                 }
 964                 /* misc. */
 965                 update_sta_info(padapter, psta);
 966         }
 967         return psta;
 968 }
 969
 970 /* pnetwork: returns from rtw_joinbss_event_callback */
 971 /* ptarget_wlan: found from scanned_queue */
 972 static void rtw_joinbss_update_network(struct adapter *padapter, struct wlan_network *ptarget_wlan, struct wlan_network  *pnetwork)
 973 {
 974         struct mlme_priv        *pmlmepriv = &(padapter->mlmepriv);
 975         struct wlan_network  *cur_network = &(pmlmepriv->cur_network);
 976
 977         DBG_88E("%s\n", __func__);
 978
 979         RT_TRACE(_module_rtl871x_mlme_c_, _drv_info_,
 980                  ("\nfw_state:%x, BSSID:%pM\n",
 981                  get_fwstate(pmlmepriv), pnetwork->network.MacAddress));
 982
 983
 984         /*  why not use ptarget_wlan?? */
 985         memcpy(&cur_network->network, &pnetwork->network, pnetwork->network.Length);
 986         /*  some IEs in pnetwork is wrong, so we should use ptarget_wlan IEs */
 987         cur_network->network.IELength = ptarget_wlan->network.IELength;
 988         memcpy(&cur_network->network.IEs[0], &ptarget_wlan->network.IEs[0], MAX_IE_SZ);
 989
 990         cur_network->aid = pnetwork->join_res;
 991
 992
 993         rtw_set_signal_stat_timer(&padapter->recvpriv);
 994         padapter->recvpriv.signal_strength = ptarget_wlan->network.PhyInfo.SignalStrength;
 995         padapter->recvpriv.signal_qual = ptarget_wlan->network.PhyInfo.SignalQuality;
 996         /* the ptarget_wlan->network.Rssi is raw data, we use ptarget_wlan->network.PhyInfo.SignalStrength instead (has scaled) */
 997         padapter->recvpriv.rssi = translate_percentage_to_dbm(ptarget_wlan->network.PhyInfo.SignalStrength);
 998         rtw_set_signal_stat_timer(&padapter->recvpriv);
 999
1000         /* update fw_state will clr _FW_UNDER_LINKING here indirectly */
1001         switch (pnetwork->network.InfrastructureMode) {
1002         case Ndis802_11Infrastructure:
1003                 if (pmlmepriv->fw_state&WIFI_UNDER_WPS)
1004                         pmlmepriv->fw_state = WIFI_STATION_STATE|WIFI_UNDER_WPS;
1005                 else
1006                         pmlmepriv->fw_state = WIFI_STATION_STATE;
1007                 break;
1008         case Ndis802_11IBSS:
1009                 pmlmepriv->fw_state = WIFI_ADHOC_STATE;
1010                 break;
1011         default:
1012                 pmlmepriv->fw_state = WIFI_NULL_STATE;
1013                 RT_TRACE(_module_rtl871x_mlme_c_, _drv_err_, ("Invalid network_mode\n"));
1014                 break;
1015         }
1016
1017         rtw_update_protection(padapter, (cur_network->network.IEs) +
1018                               sizeof(struct ndis_802_11_fixed_ie),
1019                               (cur_network->network.IELength));
1020         rtw_update_ht_cap(padapter, cur_network->network.IEs, cur_network->network.IELength);
1021 }
1022
1023 /* Notes: the function could be > passive_level (the same context as Rx tasklet) */
1024 /* pnetwork: returns from rtw_joinbss_event_callback */
1025 /* ptarget_wlan: found from scanned_queue */
1026 /* if join_res > 0, for (fw_state == WIFI_STATION_STATE), we check if  "ptarget_sta" & "ptarget_wlan" exist. */
1027 /* if join_res > 0, for (fw_state == WIFI_ADHOC_STATE), we only check if "ptarget_wlan" exist. */
1028 /* if join_res > 0, update "cur_network->network" from "pnetwork->network" if (ptarget_wlan != NULL). */
1029
1030 void rtw_joinbss_event_prehandle(struct adapter *adapter, u8 *pbuf)
1031 {
1032         struct sta_info *ptarget_sta = NULL, *pcur_sta = NULL;
1033         struct  sta_priv *pstapriv = &adapter->stapriv;
1034         struct  mlme_priv       *pmlmepriv = &(adapter->mlmepriv);
1035         struct wlan_network     *pnetwork       = (struct wlan_network *)pbuf;
1036         struct wlan_network     *cur_network = &(pmlmepriv->cur_network);
1037         struct wlan_network     *pcur_wlan = NULL, *ptarget_wlan = NULL;
1038         unsigned int            the_same_macaddr = false;
1039
1040         RT_TRACE(_module_rtl871x_mlme_c_, _drv_info_, ("joinbss event call back received with res=%d\n", pnetwork->join_res));
1041
1042         rtw_get_encrypt_decrypt_from_registrypriv(adapter);
1043
1044
1045         if (pmlmepriv->assoc_ssid.SsidLength == 0)
1046                 RT_TRACE(_module_rtl871x_mlme_c_, _drv_err_, ("@@@@@   joinbss event call back  for Any SSid\n"));
1047         else
1048                 RT_TRACE(_module_rtl871x_mlme_c_, _drv_err_, ("@@@@@   rtw_joinbss_event_callback for SSid:%s\n", pmlmepriv->assoc_ssid.Ssid));
1049
1050         the_same_macaddr = !memcmp(pnetwork->network.MacAddress, cur_network->network.MacAddress, ETH_ALEN);
1051
1052         pnetwork->network.Length = get_wlan_bssid_ex_sz(&pnetwork->network);
1053         if (pnetwork->network.Length > sizeof(struct wlan_bssid_ex)) {
1054                 RT_TRACE(_module_rtl871x_mlme_c_, _drv_err_, ("\n\n ***joinbss_evt_callback return a wrong bss ***\n\n"));
1055                 return;
1056         }
1057
1058         spin_lock_bh(&pmlmepriv->lock);
1059
1060         RT_TRACE(_module_rtl871x_mlme_c_, _drv_info_, ("\nrtw_joinbss_event_callback!! _enter_critical\n"));
1061
1062         if (pnetwork->join_res > 0) {
1063                 spin_lock_bh(&(pmlmepriv->scanned_queue.lock));
1064                 if (check_fwstate(pmlmepriv, _FW_UNDER_LINKING)) {
1065                         /* s1. find ptarget_wlan */
1066                         if (check_fwstate(pmlmepriv, _FW_LINKED)) {
1067                                 if (the_same_macaddr) {
1068                                         ptarget_wlan = rtw_find_network(&pmlmepriv->scanned_queue, cur_network->network.MacAddress);
1069                                 } else {
1070                                         pcur_wlan = rtw_find_network(&pmlmepriv->scanned_queue, cur_network->network.MacAddress);
1071                                         if (pcur_wlan)
1072                                                 pcur_wlan->fixed = false;
1073
1074                                         pcur_sta = rtw_get_stainfo(pstapriv, cur_network->network.MacAddress);
1075                                         if (pcur_sta) {
1076                                                 spin_lock_bh(&(pstapriv->sta_hash_lock));
1077                                                 rtw_free_stainfo(adapter,  pcur_sta);
1078                                                 spin_unlock_bh(&pstapriv->sta_hash_lock);
1079                                         }
1080
1081                                         ptarget_wlan = rtw_find_network(&pmlmepriv->scanned_queue, pnetwork->network.MacAddress);
1082                                         if (check_fwstate(pmlmepriv, WIFI_STATION_STATE) == true) {
1083                                                 if (ptarget_wlan)
1084                                                         ptarget_wlan->fixed = true;
1085                                         }
1086                                 }
1087                         } else {
1088                                 ptarget_wlan = rtw_find_network(&pmlmepriv->scanned_queue, pnetwork->network.MacAddress);
1089                                 if (check_fwstate(pmlmepriv, WIFI_STATION_STATE) == true) {
1090                                         if (ptarget_wlan)
1091                                                 ptarget_wlan->fixed = true;
1092                                 }
1093                         }
1094
1095                         /* s2. update cur_network */
1096                         if (ptarget_wlan) {
1097                                 rtw_joinbss_update_network(adapter, ptarget_wlan, pnetwork);
1098                         } else {
1099                                 RT_TRACE(_module_rtl871x_mlme_c_, _drv_err_, ("Can't find ptarget_wlan when joinbss_event callback\n"));
1100                                 spin_unlock_bh(&pmlmepriv->scanned_queue.lock);
1101                                 goto ignore_joinbss_callback;
1102                         }
1103
1104
1105                         /* s3. find ptarget_sta & update ptarget_sta after update cur_network only for station mode */
1106                         if (check_fwstate(pmlmepriv, WIFI_STATION_STATE) == true) {
1107                                 ptarget_sta = rtw_joinbss_update_stainfo(adapter, pnetwork);
1108                                 if (ptarget_sta == NULL) {
1109                                         RT_TRACE(_module_rtl871x_mlme_c_, _drv_err_, ("Can't update stainfo when joinbss_event callback\n"));
1110                                         spin_unlock_bh(&pmlmepriv->scanned_queue.lock);
1111                                         goto ignore_joinbss_callback;
1112                                 }
1113                         }
1114
1115                         /* s4. indicate connect */
1116                                 if (check_fwstate(pmlmepriv, WIFI_STATION_STATE) == true) {
1117                                         rtw_indicate_connect(adapter);
1118                                 } else {
1119                                         /* adhoc mode will rtw_indicate_connect when rtw_stassoc_event_callback */
1120                                         RT_TRACE(_module_rtl871x_mlme_c_, _drv_info_, ("adhoc mode, fw_state:%x", get_fwstate(pmlmepriv)));
1121                                 }
1122
1123                         /* s5. Cancle assoc_timer */
1124                         del_timer_sync(&pmlmepriv->assoc_timer);
1125
1126                         RT_TRACE(_module_rtl871x_mlme_c_, _drv_info_, ("Cancle assoc_timer\n"));
1127
1128                 } else {
1129                         RT_TRACE(_module_rtl871x_mlme_c_, _drv_err_, ("rtw_joinbss_event_callback err: fw_state:%x", get_fwstate(pmlmepriv)));
1130                         spin_unlock_bh(&pmlmepriv->scanned_queue.lock);
1131                         goto ignore_joinbss_callback;
1132                 }
1133
1134                 spin_unlock_bh(&pmlmepriv->scanned_queue.lock);
1135
1136         } else if (pnetwork->join_res == -4) {
1137                 rtw_reset_securitypriv(adapter);
1138                 mod_timer(&pmlmepriv->assoc_timer,
1139                           jiffies + msecs_to_jiffies(1));
1140
1141                 if ((check_fwstate(pmlmepriv, _FW_UNDER_LINKING)) == true) {
1142                         RT_TRACE(_module_rtl871x_mlme_c_, _drv_err_, ("fail! clear _FW_UNDER_LINKING ^^^fw_state=%x\n", get_fwstate(pmlmepriv)));
1143                         _clr_fwstate_(pmlmepriv, _FW_UNDER_LINKING);
1144                 }
1145         } else { /* if join_res < 0 (join fails), then try again */
1146                 mod_timer(&pmlmepriv->assoc_timer,
1147                           jiffies + msecs_to_jiffies(1));
1148                 _clr_fwstate_(pmlmepriv, _FW_UNDER_LINKING);
1149         }
1150
1151 ignore_joinbss_callback:
1152         spin_unlock_bh(&pmlmepriv->lock);
1153 }
1154
1155 void rtw_joinbss_event_callback(struct adapter *adapter, u8 *pbuf)
1156 {
1157         struct wlan_network     *pnetwork       = (struct wlan_network *)pbuf;
1158
1159         mlmeext_joinbss_event_callback(adapter, pnetwork->join_res);
1160
1161         rtw_os_xmit_schedule(adapter);
1162 }
1163
1164 static u8 search_max_mac_id(struct adapter *padapter)
1165 {
1166         u8 mac_id;
1167 #if defined(CONFIG_88EU_AP_MODE)
1168         u8 aid;
1169         struct mlme_priv *pmlmepriv = &(padapter->mlmepriv);
1170         struct sta_priv *pstapriv = &padapter->stapriv;
1171 #endif
1172         struct mlme_ext_priv *pmlmeext = &(padapter->mlmeextpriv);
1173         struct mlme_ext_info    *pmlmeinfo = &(pmlmeext->mlmext_info);
1174
1175 #if defined(CONFIG_88EU_AP_MODE)
1176         if (check_fwstate(pmlmepriv, WIFI_AP_STATE)) {
1177                 for (aid = (pstapriv->max_num_sta); aid > 0; aid--) {
1178                         if (pstapriv->sta_aid[aid-1] != NULL)
1179                                 break;
1180                 }
1181                 mac_id = aid + 1;
1182         } else
1183 #endif
1184         {/* adhoc  id =  31~2 */
1185                 for (mac_id = (NUM_STA-1); mac_id >= IBSS_START_MAC_ID; mac_id--) {
1186                         if (pmlmeinfo->FW_sta_info[mac_id].status == 1)
1187                                 break;
1188                 }
1189         }
1190         return mac_id;
1191 }
1192
1193 /* FOR AP , AD-HOC mode */
1194 void rtw_stassoc_hw_rpt(struct adapter *adapter, struct sta_info *psta)
1195 {
1196         u16 media_status;
1197         u8 macid;
1198
1199         if (psta == NULL)
1200                 return;
1201
1202         macid = search_max_mac_id(adapter);
1203         rtw_hal_set_hwreg(adapter, HW_VAR_TX_RPT_MAX_MACID, (u8 *)&macid);
1204         media_status = (psta->mac_id<<8)|1; /*   MACID|OPMODE:1 connect */
1205         rtw_hal_set_hwreg(adapter, HW_VAR_H2C_MEDIA_STATUS_RPT, (u8 *)&media_status);
1206 }
1207
1208 void rtw_stassoc_event_callback(struct adapter *adapter, u8 *pbuf)
1209 {
1210         struct sta_info *psta;
1211         struct mlme_priv *pmlmepriv = &(adapter->mlmepriv);
1212         struct stassoc_event    *pstassoc = (struct stassoc_event *)pbuf;
1213         struct wlan_network     *cur_network = &(pmlmepriv->cur_network);
1214         struct wlan_network     *ptarget_wlan = NULL;
1215
1216         if (rtw_access_ctrl(adapter, pstassoc->macaddr) == false)
1217                 return;
1218
1219 #if defined(CONFIG_88EU_AP_MODE)
1220         if (check_fwstate(pmlmepriv, WIFI_AP_STATE)) {
1221                 psta = rtw_get_stainfo(&adapter->stapriv, pstassoc->macaddr);
1222                 if (psta) {
1223                         ap_sta_info_defer_update(adapter, psta);
1224                         rtw_stassoc_hw_rpt(adapter, psta);
1225                 }
1226                 return;
1227         }
1228 #endif
1229         /* for AD-HOC mode */
1230         psta = rtw_get_stainfo(&adapter->stapriv, pstassoc->macaddr);
1231         if (psta != NULL) {
1232                 /* the sta have been in sta_info_queue => do nothing */
1233                 RT_TRACE(_module_rtl871x_mlme_c_, _drv_err_, ("Error: rtw_stassoc_event_callback: sta has been in sta_hash_queue\n"));
1234                 return; /* between drv has received this event before and  fw have not yet to set key to CAM_ENTRY) */
1235         }
1236         psta = rtw_alloc_stainfo(&adapter->stapriv, pstassoc->macaddr);
1237         if (psta == NULL) {
1238                 RT_TRACE(_module_rtl871x_mlme_c_, _drv_err_, ("Can't alloc sta_info when rtw_stassoc_event_callback\n"));
1239                 return;
1240         }
1241         /* to do: init sta_info variable */
1242         psta->qos_option = 0;
1243         psta->mac_id = (uint)pstassoc->cam_id;
1244         DBG_88E("%s\n", __func__);
1245         /* for ad-hoc mode */
1246         rtw_hal_set_odm_var(adapter, HAL_ODM_STA_INFO, psta, true);
1247         rtw_stassoc_hw_rpt(adapter, psta);
1248         if (adapter->securitypriv.dot11AuthAlgrthm == dot11AuthAlgrthm_8021X)
1249                 psta->dot118021XPrivacy = adapter->securitypriv.dot11PrivacyAlgrthm;
1250         psta->ieee8021x_blocked = false;
1251         spin_lock_bh(&pmlmepriv->lock);
1252         if ((check_fwstate(pmlmepriv, WIFI_ADHOC_MASTER_STATE)) ||
1253             (check_fwstate(pmlmepriv, WIFI_ADHOC_STATE))) {
1254                 if (adapter->stapriv.asoc_sta_count == 2) {
1255                         spin_lock_bh(&(pmlmepriv->scanned_queue.lock));
1256                         ptarget_wlan = rtw_find_network(&pmlmepriv->scanned_queue, cur_network->network.MacAddress);
1257                         if (ptarget_wlan)
1258                                 ptarget_wlan->fixed = true;
1259                         spin_unlock_bh(&pmlmepriv->scanned_queue.lock);
1260                         /*  a sta + bc/mc_stainfo (not Ibss_stainfo) */
1261                         rtw_indicate_connect(adapter);
1262                 }
1263         }
1264         spin_unlock_bh(&pmlmepriv->lock);
1265         mlmeext_sta_add_event_callback(adapter, psta);
1266 }
1267
1268 void rtw_stadel_event_callback(struct adapter *adapter, u8 *pbuf)
1269 {
1270         int mac_id = -1;
1271         struct sta_info *psta;
1272         struct wlan_network *pwlan = NULL;
1273         struct wlan_bssid_ex *pdev_network = NULL;
1274         u8 *pibss = NULL;
1275         struct  mlme_priv *pmlmepriv = &(adapter->mlmepriv);
1276         struct  stadel_event *pstadel = (struct stadel_event *)pbuf;
1277         struct  sta_priv *pstapriv = &adapter->stapriv;
1278         struct wlan_network *tgt_network = &(pmlmepriv->cur_network);
1279
1280         psta = rtw_get_stainfo(&adapter->stapriv, pstadel->macaddr);
1281         if (psta)
1282                 mac_id = psta->mac_id;
1283         else
1284                 mac_id = pstadel->mac_id;
1285
1286         DBG_88E("%s(mac_id=%d)=%pM\n", __func__, mac_id, pstadel->macaddr);
1287
1288         if (mac_id >= 0) {
1289                 u16 media_status;
1290                 media_status = (mac_id<<8)|0; /*   MACID|OPMODE:0 means disconnect */
1291                 /* for STA, AP, ADHOC mode, report disconnect stauts to FW */
1292                 rtw_hal_set_hwreg(adapter, HW_VAR_H2C_MEDIA_STATUS_RPT, (u8 *)&media_status);
1293         }
1294
1295         if (check_fwstate(pmlmepriv, WIFI_AP_STATE))
1296                 return;
1297
1298         mlmeext_sta_del_event_callback(adapter);
1299
1300         spin_lock_bh(&pmlmepriv->lock);
1301
1302         if (check_fwstate(pmlmepriv, WIFI_STATION_STATE)) {
1303                 if (pmlmepriv->to_roaming > 0)
1304                         pmlmepriv->to_roaming--; /*  this stadel_event is caused by roaming, decrease to_roaming */
1305                 else if (pmlmepriv->to_roaming == 0)
1306                         pmlmepriv->to_roaming = adapter->registrypriv.max_roaming_times;
1307
1308                 if (*((unsigned short *)(pstadel->rsvd)) != WLAN_REASON_EXPIRATION_CHK)
1309                         pmlmepriv->to_roaming = 0; /*  don't roam */
1310
1311                 rtw_free_uc_swdec_pending_queue(adapter);
1312
1313                 rtw_free_assoc_resources(adapter);
1314                 rtw_indicate_disconnect(adapter);
1315                 spin_lock_bh(&(pmlmepriv->scanned_queue.lock));
1316                 /*  remove the network entry in scanned_queue */
1317                 pwlan = rtw_find_network(&pmlmepriv->scanned_queue, tgt_network->network.MacAddress);
1318                 if (pwlan) {
1319                         pwlan->fixed = false;
1320                         rtw_free_network_nolock(pmlmepriv, pwlan);
1321                 }
1322                 spin_unlock_bh(&pmlmepriv->scanned_queue.lock);
1323                 _rtw_roaming(adapter, tgt_network);
1324         }
1325         if (check_fwstate(pmlmepriv, WIFI_ADHOC_MASTER_STATE) ||
1326             check_fwstate(pmlmepriv, WIFI_ADHOC_STATE)) {
1327                 spin_lock_bh(&(pstapriv->sta_hash_lock));
1328                 rtw_free_stainfo(adapter,  psta);
1329                 spin_unlock_bh(&pstapriv->sta_hash_lock);
1330
1331                 if (adapter->stapriv.asoc_sta_count == 1) { /* a sta + bc/mc_stainfo (not Ibss_stainfo) */
1332                         spin_lock_bh(&(pmlmepriv->scanned_queue.lock));
1333                         /* free old ibss network */
1334                         pwlan = rtw_find_network(&pmlmepriv->scanned_queue, tgt_network->network.MacAddress);
1335                         if (pwlan) {
1336                                 pwlan->fixed = false;
1337                                 rtw_free_network_nolock(pmlmepriv, pwlan);
1338                         }
1339                         spin_unlock_bh(&pmlmepriv->scanned_queue.lock);
1340                         /* re-create ibss */
1341                         pdev_network = &(adapter->registrypriv.dev_network);
1342                         pibss = adapter->registrypriv.dev_network.MacAddress;
1343
1344                         memcpy(pdev_network, &tgt_network->network, get_wlan_bssid_ex_sz(&tgt_network->network));
1345
1346                         memcpy(&pdev_network->Ssid, &pmlmepriv->assoc_ssid, sizeof(struct ndis_802_11_ssid));
1347
1348                         rtw_update_registrypriv_dev_network(adapter);
1349
1350                         rtw_generate_random_ibss(pibss);
1351
1352                         if (check_fwstate(pmlmepriv, WIFI_ADHOC_STATE)) {
1353                                 set_fwstate(pmlmepriv, WIFI_ADHOC_MASTER_STATE);
1354                                 _clr_fwstate_(pmlmepriv, WIFI_ADHOC_STATE);
1355                         }
1356
1357                         if (rtw_createbss_cmd(adapter) != _SUCCESS)
1358                                 RT_TRACE(_module_rtl871x_ioctl_set_c_, _drv_err_, ("***Error=>stadel_event_callback: rtw_createbss_cmd status FAIL***\n "));
1359                 }
1360         }
1361         spin_unlock_bh(&pmlmepriv->lock);
1362 }
1363
1364 void rtw_cpwm_event_callback(struct adapter *padapter, u8 *pbuf)
1365 {
1366         RT_TRACE(_module_rtl871x_mlme_c_, _drv_err_, ("+rtw_cpwm_event_callback !!!\n"));
1367 }
1368
1369 /*
1370 * _rtw_join_timeout_handler - Timeout/faliure handler for CMD JoinBss
1371 * @adapter: pointer to struct adapter structure
1372 */
1373 void _rtw_join_timeout_handler (unsigned long data)
1374 {
1375         struct adapter *adapter = (struct adapter *)data;
1376         struct  mlme_priv *pmlmepriv = &adapter->mlmepriv;
1377         int do_join_r;
1378
1379         DBG_88E("%s, fw_state=%x\n", __func__, get_fwstate(pmlmepriv));
1380
1381         if (adapter->bDriverStopped || adapter->bSurpriseRemoved)
1382                 return;
1383
1384
1385         spin_lock_bh(&pmlmepriv->lock);
1386
1387         if (pmlmepriv->to_roaming > 0) { /*  join timeout caused by roaming */
1388                 while (1) {
1389                         pmlmepriv->to_roaming--;
1390                         if (pmlmepriv->to_roaming != 0) { /* try another , */
1391                                 DBG_88E("%s try another roaming\n", __func__);
1392                                 do_join_r = rtw_do_join(adapter);
1393                                 if (_SUCCESS != do_join_r) {
1394                                         DBG_88E("%s roaming do_join return %d\n", __func__, do_join_r);
1395                                         continue;
1396                                 }
1397                                 break;
1398                         } else {
1399                                 DBG_88E("%s We've try roaming but fail\n", __func__);
1400                                 rtw_indicate_disconnect(adapter);
1401                                 break;
1402                         }
1403                 }
1404         } else {
1405                 rtw_indicate_disconnect(adapter);
1406                 free_scanqueue(pmlmepriv);/*  */
1407         }
1408         spin_unlock_bh(&pmlmepriv->lock);
1409 }
1410
1411 /*
1412 * rtw_scan_timeout_handler - Timeout/Faliure handler for CMD SiteSurvey
1413 * @adapter: pointer to struct adapter structure
1414 */
1415 void rtw_scan_timeout_handler (unsigned long data)
1416 {
1417         struct adapter *adapter = (struct adapter *)data;
1418         struct  mlme_priv *pmlmepriv = &adapter->mlmepriv;
1419
1420         DBG_88E(FUNC_ADPT_FMT" fw_state=%x\n", FUNC_ADPT_ARG(adapter), get_fwstate(pmlmepriv));
1421         spin_lock_bh(&pmlmepriv->lock);
1422         _clr_fwstate_(pmlmepriv, _FW_UNDER_SURVEY);
1423         spin_unlock_bh(&pmlmepriv->lock);
1424         rtw_indicate_scan_done(adapter, true);
1425 }
1426
1427 static void rtw_auto_scan_handler(struct adapter *padapter)
1428 {
1429         struct mlme_priv *pmlmepriv = &padapter->mlmepriv;
1430
1431         /* auto site survey per 60sec */
1432         if (pmlmepriv->scan_interval > 0) {
1433                 pmlmepriv->scan_interval--;
1434                 if (pmlmepriv->scan_interval == 0) {
1435                         DBG_88E("%s\n", __func__);
1436                         rtw_set_802_11_bssid_list_scan(padapter, NULL, 0);
1437                         pmlmepriv->scan_interval = SCAN_INTERVAL;/*  30*2 sec = 60sec */
1438                 }
1439         }
1440 }
1441
1442 void rtw_dynamic_check_timer_handlder(unsigned long data)
1443 {
1444         struct adapter *adapter = (struct adapter *)data;
1445         struct registry_priv *pregistrypriv = &adapter->registrypriv;
1446
1447         if (!adapter)
1448                 return;
1449         if (!adapter->hw_init_completed)
1450                 goto exit;
1451         if ((adapter->bDriverStopped) || (adapter->bSurpriseRemoved))
1452                 goto exit;
1453         if (adapter->net_closed)
1454                 goto exit;
1455         rtw_dynamic_chk_wk_cmd(adapter);
1456
1457         if (pregistrypriv->wifi_spec == 1) {
1458                 /* auto site survey */
1459                 rtw_auto_scan_handler(adapter);
1460         }
1461 exit:
1462         mod_timer(&adapter->mlmepriv.dynamic_chk_timer,
1463                   jiffies + msecs_to_jiffies(2000));
1464 }
1465
1466 #define RTW_SCAN_RESULT_EXPIRE 2000
1467
1468 /*
1469 * Select a new join candidate from the original @param candidate and @param competitor
1470 * @return true: candidate is updated
1471 * @return false: candidate is not updated
1472 */
1473 static int rtw_check_join_candidate(struct mlme_priv *pmlmepriv
1474         , struct wlan_network **candidate, struct wlan_network *competitor)
1475 {
1476         int updated = false;
1477         struct adapter *adapter = container_of(pmlmepriv, struct adapter, mlmepriv);
1478
1479
1480         /* check bssid, if needed */
1481         if (pmlmepriv->assoc_by_bssid) {
1482                 if (memcmp(competitor->network.MacAddress, pmlmepriv->assoc_bssid, ETH_ALEN))
1483                         goto exit;
1484         }
1485
1486         /* check ssid, if needed */
1487         if (pmlmepriv->assoc_ssid.SsidLength) {
1488                 if (competitor->network.Ssid.SsidLength != pmlmepriv->assoc_ssid.SsidLength ||
1489                     !memcmp(competitor->network.Ssid.Ssid, pmlmepriv->assoc_ssid.Ssid, pmlmepriv->assoc_ssid.SsidLength) == false)
1490                         goto exit;
1491         }
1492
1493         if (rtw_is_desired_network(adapter, competitor)  == false)
1494                 goto exit;
1495
1496         if (pmlmepriv->to_roaming) {
1497                 if (rtw_get_passing_time_ms((u32)competitor->last_scanned) >= RTW_SCAN_RESULT_EXPIRE ||
1498                     is_same_ess(&competitor->network, &pmlmepriv->cur_network.network) == false)
1499                         goto exit;
1500         }
1501
1502         if (*candidate == NULL || (*candidate)->network.Rssi < competitor->network.Rssi) {
1503                 *candidate = competitor;
1504                 updated = true;
1505         }
1506         if (updated) {
1507                 DBG_88E("[by_bssid:%u][assoc_ssid:%s]new candidate: %s(%pM rssi:%d\n",
1508                         pmlmepriv->assoc_by_bssid,
1509                         pmlmepriv->assoc_ssid.Ssid,
1510                         (*candidate)->network.Ssid.Ssid,
1511                         (*candidate)->network.MacAddress,
1512                         (int)(*candidate)->network.Rssi);
1513                 DBG_88E("[to_roaming:%u]\n", pmlmepriv->to_roaming);
1514         }
1515
1516 exit:
1517         return updated;
1518 }
1519
1520 /*
1521 Calling context:
1522 The caller of the sub-routine will be in critical section...
1523 The caller must hold the following spinlock
1524 pmlmepriv->lock
1525 */
1526
1527 int rtw_select_and_join_from_scanned_queue(struct mlme_priv *pmlmepriv)
1528 {
1529         int ret;
1530         struct list_head *phead;
1531         struct adapter *adapter;
1532         struct __queue *queue   = &(pmlmepriv->scanned_queue);
1533         struct  wlan_network    *pnetwork = NULL;
1534         struct  wlan_network    *candidate = NULL;
1535         u8      supp_ant_div = false;
1536
1537         spin_lock_bh(&(pmlmepriv->scanned_queue.lock));
1538         phead = get_list_head(queue);
1539         adapter = (struct adapter *)pmlmepriv->nic_hdl;
1540         pmlmepriv->pscanned = phead->next;
1541         while (phead != pmlmepriv->pscanned) {
1542                 pnetwork = container_of(pmlmepriv->pscanned, struct wlan_network, list);
1543                 if (pnetwork == NULL) {
1544                         RT_TRACE(_module_rtl871x_mlme_c_, _drv_err_, ("%s return _FAIL:(pnetwork==NULL)\n", __func__));
1545                         ret = _FAIL;
1546                         goto exit;
1547                 }
1548                 pmlmepriv->pscanned = pmlmepriv->pscanned->next;
1549                 rtw_check_join_candidate(pmlmepriv, &candidate, pnetwork);
1550         }
1551         if (candidate == NULL) {
1552                 DBG_88E("%s: return _FAIL(candidate==NULL)\n", __func__);
1553                 ret = _FAIL;
1554                 goto exit;
1555         } else {
1556                 DBG_88E("%s: candidate: %s(%pM ch:%u)\n", __func__,
1557                         candidate->network.Ssid.Ssid, candidate->network.MacAddress,
1558                         candidate->network.Configuration.DSConfig);
1559         }
1560
1561
1562         /*  check for situation of  _FW_LINKED */
1563         if (check_fwstate(pmlmepriv, _FW_LINKED) == true) {
1564                 DBG_88E("%s: _FW_LINKED while ask_for_joinbss!!!\n", __func__);
1565
1566                 rtw_disassoc_cmd(adapter, 0, true);
1567                 rtw_indicate_disconnect(adapter);
1568                 rtw_free_assoc_resources_locked(adapter);
1569         }
1570
1571         rtw_hal_get_def_var(adapter, HAL_DEF_IS_SUPPORT_ANT_DIV, &(supp_ant_div));
1572         if (supp_ant_div) {
1573                 u8 cur_ant;
1574                 rtw_hal_get_def_var(adapter, HAL_DEF_CURRENT_ANTENNA, &(cur_ant));
1575                 DBG_88E("#### Opt_Ant_(%s), cur_Ant(%s)\n",
1576                         (2 == candidate->network.PhyInfo.Optimum_antenna) ? "A" : "B",
1577                         (2 == cur_ant) ? "A" : "B"
1578                 );
1579         }
1580
1581         ret = rtw_joinbss_cmd(adapter, candidate);
1582
1583 exit:
1584         spin_unlock_bh(&pmlmepriv->scanned_queue.lock);
1585         return ret;
1586 }
1587
1588 int rtw_set_auth(struct adapter *adapter, struct security_priv *psecuritypriv)
1589 {
1590         struct  cmd_obj *pcmd;
1591         struct  setauth_parm *psetauthparm;
1592         struct  cmd_priv *pcmdpriv = &(adapter->cmdpriv);
1593         int             res = _SUCCESS;
1594
1595         pcmd = kzalloc(sizeof(struct cmd_obj), GFP_KERNEL);
1596         if (pcmd == NULL) {
1597                 res = _FAIL;  /* try again */
1598                 goto exit;
1599         }
1600
1601         psetauthparm = kzalloc(sizeof(struct setauth_parm), GFP_KERNEL);
1602         if (psetauthparm == NULL) {
1603                 kfree(pcmd);
1604                 res = _FAIL;
1605                 goto exit;
1606         }
1607         memset(psetauthparm, 0, sizeof(struct setauth_parm));
1608         psetauthparm->mode = (unsigned char)psecuritypriv->dot11AuthAlgrthm;
1609         pcmd->cmdcode = _SetAuth_CMD_;
1610         pcmd->parmbuf = (unsigned char *)psetauthparm;
1611         pcmd->cmdsz =  (sizeof(struct setauth_parm));
1612         pcmd->rsp = NULL;
1613         pcmd->rspsz = 0;
1614         INIT_LIST_HEAD(&pcmd->list);
1615         RT_TRACE(_module_rtl871x_mlme_c_, _drv_err_,
1616                  ("after enqueue set_auth_cmd, auth_mode=%x\n",
1617                  psecuritypriv->dot11AuthAlgrthm));
1618         res = rtw_enqueue_cmd(pcmdpriv, pcmd);
1619 exit:
1620         return res;
1621 }
1622
1623 int rtw_set_key(struct adapter *adapter, struct security_priv *psecuritypriv, int keyid, u8 set_tx)
1624 {
1625         u8      keylen;
1626         struct cmd_obj          *pcmd;
1627         struct setkey_parm      *psetkeyparm;
1628         struct cmd_priv         *pcmdpriv = &(adapter->cmdpriv);
1629         struct mlme_priv                *pmlmepriv = &(adapter->mlmepriv);
1630         int     res = _SUCCESS;
1631
1632         pcmd = kzalloc(sizeof(struct cmd_obj), GFP_KERNEL);
1633         if (pcmd == NULL)
1634                 return _FAIL;  /* try again */
1635
1636         psetkeyparm = kzalloc(sizeof(struct setkey_parm), GFP_KERNEL);
1637         if (psetkeyparm == NULL) {
1638                 res = _FAIL;
1639                 goto err_free_cmd;
1640         }
1641
1642         memset(psetkeyparm, 0, sizeof(struct setkey_parm));
1643
1644         if (psecuritypriv->dot11AuthAlgrthm == dot11AuthAlgrthm_8021X) {
1645                 psetkeyparm->algorithm = (unsigned char)psecuritypriv->dot118021XGrpPrivacy;
1646                 RT_TRACE(_module_rtl871x_mlme_c_, _drv_err_,
1647                          ("\n rtw_set_key: psetkeyparm->algorithm=(unsigned char)psecuritypriv->dot118021XGrpPrivacy=%d\n",
1648                          psetkeyparm->algorithm));
1649         } else {
1650                 psetkeyparm->algorithm = (u8)psecuritypriv->dot11PrivacyAlgrthm;
1651                 RT_TRACE(_module_rtl871x_mlme_c_, _drv_err_,
1652                          ("\n rtw_set_key: psetkeyparm->algorithm=(u8)psecuritypriv->dot11PrivacyAlgrthm=%d\n",
1653                          psetkeyparm->algorithm));
1654         }
1655         psetkeyparm->keyid = (u8)keyid;/* 0~3 */
1656         psetkeyparm->set_tx = set_tx;
1657         pmlmepriv->key_mask |= BIT(psetkeyparm->keyid);
1658         DBG_88E("==> rtw_set_key algorithm(%x), keyid(%x), key_mask(%x)\n",
1659                 psetkeyparm->algorithm, psetkeyparm->keyid, pmlmepriv->key_mask);
1660         RT_TRACE(_module_rtl871x_mlme_c_, _drv_err_,
1661                  ("\n rtw_set_key: psetkeyparm->algorithm=%d psetkeyparm->keyid=(u8)keyid=%d\n",
1662                  psetkeyparm->algorithm, keyid));
1663
1664         switch (psetkeyparm->algorithm) {
1665         case _WEP40_:
1666                 keylen = 5;
1667                 memcpy(&(psetkeyparm->key[0]), &(psecuritypriv->dot11DefKey[keyid].skey[0]), keylen);
1668                 break;
1669         case _WEP104_:
1670                 keylen = 13;
1671                 memcpy(&(psetkeyparm->key[0]), &(psecuritypriv->dot11DefKey[keyid].skey[0]), keylen);
1672                 break;
1673         case _TKIP_:
1674                 keylen = 16;
1675                 memcpy(&psetkeyparm->key, &psecuritypriv->dot118021XGrpKey[keyid], keylen);
1676                 psetkeyparm->grpkey = 1;
1677                 break;
1678         case _AES_:
1679                 keylen = 16;
1680                 memcpy(&psetkeyparm->key, &psecuritypriv->dot118021XGrpKey[keyid], keylen);
1681                 psetkeyparm->grpkey = 1;
1682                 break;
1683         default:
1684                 RT_TRACE(_module_rtl871x_mlme_c_, _drv_err_,
1685                          ("\n rtw_set_key:psecuritypriv->dot11PrivacyAlgrthm=%x (must be 1 or 2 or 4 or 5)\n",
1686                          psecuritypriv->dot11PrivacyAlgrthm));
1687                 res = _FAIL;
1688                 goto err_free_parm;
1689         }
1690         pcmd->cmdcode = _SetKey_CMD_;
1691         pcmd->parmbuf = (u8 *)psetkeyparm;
1692         pcmd->cmdsz =  (sizeof(struct setkey_parm));
1693         pcmd->rsp = NULL;
1694         pcmd->rspsz = 0;
1695         INIT_LIST_HEAD(&pcmd->list);
1696         res = rtw_enqueue_cmd(pcmdpriv, pcmd);
1697         return res;
1698
1699 err_free_parm:
1700         kfree(psetkeyparm);
1701 err_free_cmd:
1702         kfree(pcmd);
1703         return res;
1704 }
1705
1706 /* adjust IEs for rtw_joinbss_cmd in WMM */
1707 int rtw_restruct_wmm_ie(struct adapter *adapter, u8 *in_ie, u8 *out_ie, uint in_len, uint initial_out_len)
1708 {
1709         unsigned        int ielength = 0;
1710         unsigned int i, j;
1711
1712         /* i = 12; after the fixed IE */
1713         for (i = 12; i < in_len; i += (in_ie[i + 1] + 2) /* to the next IE element */) {
1714                 ielength = initial_out_len;
1715
1716                 if (in_ie[i] == 0xDD && in_ie[i+2] == 0x00 && in_ie[i+3] == 0x50  && in_ie[i+4] == 0xF2 && in_ie[i+5] == 0x02 && i+5 < in_len) {
1717                         /* WMM element ID and OUI */
1718                         /* Append WMM IE to the last index of out_ie */
1719
1720                         for (j = i; j < i + 9; j++) {
1721                                 out_ie[ielength] = in_ie[j];
1722                                 ielength++;
1723                         }
1724                         out_ie[initial_out_len + 1] = 0x07;
1725                         out_ie[initial_out_len + 6] = 0x00;
1726                         out_ie[initial_out_len + 8] = 0x00;
1727                         break;
1728                 }
1729         }
1730         return ielength;
1731 }
1732
1733 /*
1734  * Ported from 8185: IsInPreAuthKeyList().
1735  * (Renamed from SecIsInPreAuthKeyList(), 2006-10-13.)
1736  * Added by Annie, 2006-05-07.
1737  * Search by BSSID,
1738  * Return Value:
1739  *              -1      :if there is no pre-auth key in the table
1740  *              >= 0    :if there is pre-auth key, and return the entry id
1741  */
1742 static int SecIsInPMKIDList(struct adapter *Adapter, u8 *bssid)
1743 {
1744         struct security_priv *psecuritypriv = &Adapter->securitypriv;
1745         int i = 0;
1746
1747         do {
1748                 if ((psecuritypriv->PMKIDList[i].bUsed) &&
1749                     (!memcmp(psecuritypriv->PMKIDList[i].Bssid, bssid, ETH_ALEN))) {
1750                         break;
1751                 } else {
1752                         i++;
1753                         /* continue; */
1754                 }
1755
1756         } while (i < NUM_PMKID_CACHE);
1757
1758         if (i == NUM_PMKID_CACHE)
1759                 i = -1;/*  Could not find. */
1760
1761         return i;
1762 }
1763
1764 /*  */
1765 /*  Check the RSN IE length */
1766 /*  If the RSN IE length <= 20, the RSN IE didn't include the PMKID information */
1767 /*  0-11th element in the array are the fixed IE */
1768 /*  12th element in the array is the IE */
1769 /*  13th element in the array is the IE length */
1770 /*  */
1771
1772 static int rtw_append_pmkid(struct adapter *Adapter, int iEntry, u8 *ie, uint ie_len)
1773 {
1774         struct security_priv *psecuritypriv = &Adapter->securitypriv;
1775
1776         if (ie[13] <= 20) {
1777                 /*  The RSN IE didn't include the PMK ID, append the PMK information */
1778                 ie[ie_len] = 1;
1779                 ie_len++;
1780                 ie[ie_len] = 0; /* PMKID count = 0x0100 */
1781                 ie_len++;
1782                 memcpy(&ie[ie_len], &psecuritypriv->PMKIDList[iEntry].PMKID, 16);
1783
1784                 ie_len += 16;
1785                 ie[13] += 18;/* PMKID length = 2+16 */
1786         }
1787         return ie_len;
1788 }
1789
1790 int rtw_restruct_sec_ie(struct adapter *adapter, u8 *in_ie, u8 *out_ie, uint in_len)
1791 {
1792         u8 authmode;
1793         uint    ielength;
1794         int iEntry;
1795
1796         struct mlme_priv *pmlmepriv = &adapter->mlmepriv;
1797         struct security_priv *psecuritypriv = &adapter->securitypriv;
1798         uint    ndisauthmode = psecuritypriv->ndisauthtype;
1799         uint ndissecuritytype = psecuritypriv->ndisencryptstatus;
1800
1801         RT_TRACE(_module_rtl871x_mlme_c_, _drv_notice_,
1802                  ("+rtw_restruct_sec_ie: ndisauthmode=%d ndissecuritytype=%d\n",
1803                   ndisauthmode, ndissecuritytype));
1804
1805         /* copy fixed ie only */
1806         memcpy(out_ie, in_ie, 12);
1807         ielength = 12;
1808         if ((ndisauthmode == Ndis802_11AuthModeWPA) ||
1809             (ndisauthmode == Ndis802_11AuthModeWPAPSK))
1810                         authmode = _WPA_IE_ID_;
1811         if ((ndisauthmode == Ndis802_11AuthModeWPA2) ||
1812             (ndisauthmode == Ndis802_11AuthModeWPA2PSK))
1813                 authmode = _WPA2_IE_ID_;
1814
1815         if (check_fwstate(pmlmepriv, WIFI_UNDER_WPS)) {
1816                 memcpy(out_ie+ielength, psecuritypriv->wps_ie, psecuritypriv->wps_ie_len);
1817
1818                 ielength += psecuritypriv->wps_ie_len;
1819         } else if ((authmode == _WPA_IE_ID_) || (authmode == _WPA2_IE_ID_)) {
1820                 /* copy RSN or SSN */
1821                 memcpy(&out_ie[ielength], &psecuritypriv->supplicant_ie[0], psecuritypriv->supplicant_ie[1]+2);
1822                 ielength += psecuritypriv->supplicant_ie[1]+2;
1823                 rtw_report_sec_ie(adapter, authmode, psecuritypriv->supplicant_ie);
1824         }
1825
1826         iEntry = SecIsInPMKIDList(adapter, pmlmepriv->assoc_bssid);
1827         if (iEntry < 0) {
1828                 return ielength;
1829         } else {
1830                 if (authmode == _WPA2_IE_ID_)
1831                         ielength = rtw_append_pmkid(adapter, iEntry, out_ie, ielength);
1832         }
1833         return ielength;
1834 }
1835
1836 void rtw_init_registrypriv_dev_network(struct adapter *adapter)
1837 {
1838         struct registry_priv *pregistrypriv = &adapter->registrypriv;
1839         struct eeprom_priv *peepriv = &adapter->eeprompriv;
1840         struct wlan_bssid_ex    *pdev_network = &pregistrypriv->dev_network;
1841         u8 *myhwaddr = myid(peepriv);
1842
1843         memcpy(pdev_network->MacAddress, myhwaddr, ETH_ALEN);
1844
1845         memcpy(&pdev_network->Ssid, &pregistrypriv->ssid, sizeof(struct ndis_802_11_ssid));
1846
1847         pdev_network->Configuration.Length = sizeof(struct ndis_802_11_config);
1848         pdev_network->Configuration.BeaconPeriod = 100;
1849         pdev_network->Configuration.FHConfig.Length = 0;
1850         pdev_network->Configuration.FHConfig.HopPattern = 0;
1851         pdev_network->Configuration.FHConfig.HopSet = 0;
1852         pdev_network->Configuration.FHConfig.DwellTime = 0;
1853 }
1854
1855 void rtw_update_registrypriv_dev_network(struct adapter *adapter)
1856 {
1857         int sz = 0;
1858         struct registry_priv *pregistrypriv = &adapter->registrypriv;
1859         struct wlan_bssid_ex    *pdev_network = &pregistrypriv->dev_network;
1860         struct  security_priv *psecuritypriv = &adapter->securitypriv;
1861         struct  wlan_network    *cur_network = &adapter->mlmepriv.cur_network;
1862
1863         pdev_network->Privacy = (psecuritypriv->dot11PrivacyAlgrthm > 0 ? 1 : 0); /*  adhoc no 802.1x */
1864
1865         pdev_network->Rssi = 0;
1866
1867         switch (pregistrypriv->wireless_mode) {
1868         case WIRELESS_11B:
1869                 pdev_network->NetworkTypeInUse = (Ndis802_11DS);
1870                 break;
1871         case WIRELESS_11G:
1872         case WIRELESS_11BG:
1873         case WIRELESS_11_24N:
1874         case WIRELESS_11G_24N:
1875         case WIRELESS_11BG_24N:
1876                 pdev_network->NetworkTypeInUse = (Ndis802_11OFDM24);
1877                 break;
1878         case WIRELESS_11A:
1879         case WIRELESS_11A_5N:
1880                 pdev_network->NetworkTypeInUse = (Ndis802_11OFDM5);
1881                 break;
1882         case WIRELESS_11ABGN:
1883                 if (pregistrypriv->channel > 14)
1884                         pdev_network->NetworkTypeInUse = (Ndis802_11OFDM5);
1885                 else
1886                         pdev_network->NetworkTypeInUse = (Ndis802_11OFDM24);
1887                 break;
1888         default:
1889                 /*  TODO */
1890                 break;
1891         }
1892
1893         pdev_network->Configuration.DSConfig = (pregistrypriv->channel);
1894         RT_TRACE(_module_rtl871x_mlme_c_, _drv_info_,
1895                  ("pregistrypriv->channel=%d, pdev_network->Configuration.DSConfig=0x%x\n",
1896                  pregistrypriv->channel, pdev_network->Configuration.DSConfig));
1897
1898         if (cur_network->network.InfrastructureMode == Ndis802_11IBSS)
1899                 pdev_network->Configuration.ATIMWindow = (0);
1900
1901         pdev_network->InfrastructureMode = (cur_network->network.InfrastructureMode);
1902
1903         /*  1. Supported rates */
1904         /*  2. IE */
1905
1906         sz = rtw_generate_ie(pregistrypriv);
1907         pdev_network->IELength = sz;
1908         pdev_network->Length = get_wlan_bssid_ex_sz((struct wlan_bssid_ex  *)pdev_network);
1909
1910         /* notes: translate IELength & Length after assign the Length to cmdsz in createbss_cmd(); */
1911         /* pdev_network->IELength = cpu_to_le32(sz); */
1912 }
1913
1914 void rtw_get_encrypt_decrypt_from_registrypriv(struct adapter *adapter)
1915 {
1916 }
1917
1918 /* the function is at passive_level */
1919 void rtw_joinbss_reset(struct adapter *padapter)
1920 {
1921         u8      threshold;
1922         struct mlme_priv        *pmlmepriv = &padapter->mlmepriv;
1923         struct ht_priv          *phtpriv = &pmlmepriv->htpriv;
1924
1925         /* todo: if you want to do something io/reg/hw setting before join_bss, please add code here */
1926         pmlmepriv->num_FortyMHzIntolerant = 0;
1927
1928         pmlmepriv->num_sta_no_ht = 0;
1929
1930         phtpriv->ampdu_enable = false;/* reset to disabled */
1931
1932         /*  TH = 1 => means that invalidate usb rx aggregation */
1933         /*  TH = 0 => means that validate usb rx aggregation, use init value. */
1934         if (phtpriv->ht_option) {
1935                 if (padapter->registrypriv.wifi_spec == 1)
1936                         threshold = 1;
1937                 else
1938                         threshold = 0;
1939                 rtw_hal_set_hwreg(padapter, HW_VAR_RXDMA_AGG_PG_TH, (u8 *)(&threshold));
1940         } else {
1941                 threshold = 1;
1942                 rtw_hal_set_hwreg(padapter, HW_VAR_RXDMA_AGG_PG_TH, (u8 *)(&threshold));
1943         }
1944 }
1945
1946 /* the function is >= passive_level */
1947 unsigned int rtw_restructure_ht_ie(struct adapter *padapter, u8 *in_ie, u8 *out_ie, uint in_len, uint *pout_len)
1948 {
1949         u32 ielen, out_len;
1950         enum ht_cap_ampdu_factor max_rx_ampdu_factor;
1951         unsigned char *p;
1952         struct rtw_ieee80211_ht_cap ht_capie;
1953         unsigned char WMM_IE[] = {0x00, 0x50, 0xf2, 0x02, 0x00, 0x01, 0x00};
1954         struct mlme_priv        *pmlmepriv = &padapter->mlmepriv;
1955         struct qos_priv         *pqospriv = &pmlmepriv->qospriv;
1956         struct ht_priv          *phtpriv = &pmlmepriv->htpriv;
1957         u32 rx_packet_offset, max_recvbuf_sz;
1958
1959
1960         phtpriv->ht_option = false;
1961
1962         p = rtw_get_ie(in_ie+12, _HT_CAPABILITY_IE_, &ielen, in_len-12);
1963
1964         if (p && ielen > 0) {
1965                 if (pqospriv->qos_option == 0) {
1966                         out_len = *pout_len;
1967                         rtw_set_ie(out_ie+out_len, _VENDOR_SPECIFIC_IE_,
1968                                    _WMM_IE_Length_, WMM_IE, pout_len);
1969
1970                         pqospriv->qos_option = 1;
1971                 }
1972
1973                 out_len = *pout_len;
1974
1975                 memset(&ht_capie, 0, sizeof(struct rtw_ieee80211_ht_cap));
1976
1977                 ht_capie.cap_info = IEEE80211_HT_CAP_SUP_WIDTH |
1978                                     IEEE80211_HT_CAP_SGI_20 |
1979                                     IEEE80211_HT_CAP_SGI_40 |
1980                                     IEEE80211_HT_CAP_TX_STBC |
1981                                     IEEE80211_HT_CAP_DSSSCCK40;
1982
1983                 rtw_hal_get_def_var(padapter, HAL_DEF_RX_PACKET_OFFSET, &rx_packet_offset);
1984                 rtw_hal_get_def_var(padapter, HAL_DEF_MAX_RECVBUF_SZ, &max_recvbuf_sz);
1985
1986                 /*
1987                 AMPDU_para [1:0]:Max AMPDU Len => 0:8k , 1:16k, 2:32k, 3:64k
1988                 AMPDU_para [4:2]:Min MPDU Start Spacing
1989                 */
1990
1991                 rtw_hal_get_def_var(padapter, HW_VAR_MAX_RX_AMPDU_FACTOR, &max_rx_ampdu_factor);
1992                 ht_capie.ampdu_params_info = (max_rx_ampdu_factor&0x03);
1993
1994                 if (padapter->securitypriv.dot11PrivacyAlgrthm == _AES_)
1995                         ht_capie.ampdu_params_info |= (IEEE80211_HT_CAP_AMPDU_DENSITY&(0x07<<2));
1996                 else
1997                         ht_capie.ampdu_params_info |= (IEEE80211_HT_CAP_AMPDU_DENSITY&0x00);
1998
1999
2000                 rtw_set_ie(out_ie+out_len, _HT_CAPABILITY_IE_,
2001                            sizeof(struct rtw_ieee80211_ht_cap), (unsigned char *)&ht_capie, pout_len);
2002
2003                 phtpriv->ht_option = true;
2004
2005                 p = rtw_get_ie(in_ie+12, _HT_ADD_INFO_IE_, &ielen, in_len-12);
2006                 if (p && (ielen == sizeof(struct ieee80211_ht_addt_info))) {
2007                         out_len = *pout_len;
2008                         rtw_set_ie(out_ie+out_len, _HT_ADD_INFO_IE_, ielen, p+2, pout_len);
2009                 }
2010         }
2011         return phtpriv->ht_option;
2012 }
2013
2014 /* the function is > passive_level (in critical_section) */
2015 void rtw_update_ht_cap(struct adapter *padapter, u8 *pie, uint ie_len)
2016 {
2017         u8 *p, max_ampdu_sz;
2018         int len;
2019         struct rtw_ieee80211_ht_cap *pht_capie;
2020         struct mlme_priv        *pmlmepriv = &padapter->mlmepriv;
2021         struct ht_priv          *phtpriv = &pmlmepriv->htpriv;
2022         struct registry_priv *pregistrypriv = &padapter->registrypriv;
2023         struct mlme_ext_priv    *pmlmeext = &padapter->mlmeextpriv;
2024         struct mlme_ext_info    *pmlmeinfo = &(pmlmeext->mlmext_info);
2025
2026         if (!phtpriv->ht_option)
2027                 return;
2028
2029         if ((!pmlmeinfo->HT_info_enable) || (!pmlmeinfo->HT_caps_enable))
2030                 return;
2031
2032         DBG_88E("+rtw_update_ht_cap()\n");
2033
2034         /* maybe needs check if ap supports rx ampdu. */
2035         if ((!phtpriv->ampdu_enable) && (pregistrypriv->ampdu_enable == 1)) {
2036                 if (pregistrypriv->wifi_spec == 1)
2037                         phtpriv->ampdu_enable = false;
2038                 else
2039                         phtpriv->ampdu_enable = true;
2040         } else if (pregistrypriv->ampdu_enable == 2) {
2041                 phtpriv->ampdu_enable = true;
2042         }
2043
2044
2045         /* check Max Rx A-MPDU Size */
2046         len = 0;
2047         p = rtw_get_ie(pie+sizeof(struct ndis_802_11_fixed_ie), _HT_CAPABILITY_IE_, &len, ie_len-sizeof(struct ndis_802_11_fixed_ie));
2048         if (p && len > 0) {
2049                 pht_capie = (struct rtw_ieee80211_ht_cap *)(p+2);
2050                 max_ampdu_sz = pht_capie->ampdu_params_info & IEEE80211_HT_CAP_AMPDU_FACTOR;
2051                 max_ampdu_sz = 1 << (max_ampdu_sz+3); /*  max_ampdu_sz (kbytes); */
2052                 phtpriv->rx_ampdu_maxlen = max_ampdu_sz;
2053         }
2054         len = 0;
2055         p = rtw_get_ie(pie+sizeof(struct ndis_802_11_fixed_ie), _HT_ADD_INFO_IE_, &len, ie_len-sizeof(struct ndis_802_11_fixed_ie));
2056
2057         /* update cur_bwmode & cur_ch_offset */
2058         if ((pregistrypriv->cbw40_enable) &&
2059             (le16_to_cpu(pmlmeinfo->HT_caps.u.HT_cap_element.HT_caps_info) & BIT(1)) &&
2060             (pmlmeinfo->HT_info.infos[0] & BIT(2))) {
2061                 int i;
2062                 u8      rf_type;
2063
2064                 padapter->HalFunc.GetHwRegHandler(padapter, HW_VAR_RF_TYPE, (u8 *)(&rf_type));
2065
2066                 /* update the MCS rates */
2067                 for (i = 0; i < 16; i++) {
2068                         if ((rf_type == RF_1T1R) || (rf_type == RF_1T2R))
2069                                 pmlmeinfo->HT_caps.u.HT_cap_element.MCS_rate[i] &= MCS_rate_1R[i];
2070                         else
2071                                 pmlmeinfo->HT_caps.u.HT_cap_element.MCS_rate[i] &= MCS_rate_2R[i];
2072                 }
2073                 /* switch to the 40M Hz mode according to the AP */
2074                 pmlmeext->cur_bwmode = HT_CHANNEL_WIDTH_40;
2075                 switch ((pmlmeinfo->HT_info.infos[0] & 0x3)) {
2076                 case HT_EXTCHNL_OFFSET_UPPER:
2077                         pmlmeext->cur_ch_offset = HAL_PRIME_CHNL_OFFSET_LOWER;
2078                         break;
2079                 case HT_EXTCHNL_OFFSET_LOWER:
2080                         pmlmeext->cur_ch_offset = HAL_PRIME_CHNL_OFFSET_UPPER;
2081                         break;
2082                 default:
2083                         pmlmeext->cur_ch_offset = HAL_PRIME_CHNL_OFFSET_DONT_CARE;
2084                         break;
2085                 }
2086         }
2087
2088         /*  Config SM Power Save setting */
2089         pmlmeinfo->SM_PS = (le16_to_cpu(pmlmeinfo->HT_caps.u.HT_cap_element.HT_caps_info) & 0x0C) >> 2;
2090         if (pmlmeinfo->SM_PS == WLAN_HT_CAP_SM_PS_STATIC)
2091                 DBG_88E("%s(): WLAN_HT_CAP_SM_PS_STATIC\n", __func__);
2092
2093         /*  Config current HT Protection mode. */
2094         pmlmeinfo->HT_protection = pmlmeinfo->HT_info.infos[1] & 0x3;
2095 }
2096
2097 void rtw_issue_addbareq_cmd(struct adapter *padapter, struct xmit_frame *pxmitframe)
2098 {
2099         u8 issued;
2100         int priority;
2101         struct sta_info *psta = NULL;
2102         struct ht_priv  *phtpriv;
2103         struct pkt_attrib *pattrib = &pxmitframe->attrib;
2104         s32 bmcst = IS_MCAST(pattrib->ra);
2105
2106         if (bmcst || (padapter->mlmepriv.LinkDetectInfo.NumTxOkInPeriod < 100))
2107                 return;
2108
2109         priority = pattrib->priority;
2110
2111         if (pattrib->psta)
2112                 psta = pattrib->psta;
2113         else
2114                 psta = rtw_get_stainfo(&padapter->stapriv, pattrib->ra);
2115
2116         if (psta == NULL)
2117                 return;
2118
2119         phtpriv = &psta->htpriv;
2120
2121         if ((phtpriv->ht_option) && (phtpriv->ampdu_enable)) {
2122                 issued = (phtpriv->agg_enable_bitmap>>priority)&0x1;
2123                 issued |= (phtpriv->candidate_tid_bitmap>>priority)&0x1;
2124
2125                 if (0 == issued) {
2126                         DBG_88E("rtw_issue_addbareq_cmd, p=%d\n", priority);
2127                         psta->htpriv.candidate_tid_bitmap |= BIT((u8)priority);
2128                         rtw_addbareq_cmd(padapter, (u8)priority, pattrib->ra);
2129                 }
2130         }
2131 }
2132
2133 void rtw_roaming(struct adapter *padapter, struct wlan_network *tgt_network)
2134 {
2135         struct mlme_priv        *pmlmepriv = &padapter->mlmepriv;
2136
2137         spin_lock_bh(&pmlmepriv->lock);
2138         _rtw_roaming(padapter, tgt_network);
2139         spin_unlock_bh(&pmlmepriv->lock);
2140 }
2141 void _rtw_roaming(struct adapter *padapter, struct wlan_network *tgt_network)
2142 {
2143         struct mlme_priv        *pmlmepriv = &padapter->mlmepriv;
2144         int do_join_r;
2145
2146         struct wlan_network *pnetwork;
2147
2148         if (tgt_network != NULL)
2149                 pnetwork = tgt_network;
2150         else
2151                 pnetwork = &pmlmepriv->cur_network;
2152
2153         if (0 < pmlmepriv->to_roaming) {
2154                 DBG_88E("roaming from %s(%pM length:%d\n",
2155                         pnetwork->network.Ssid.Ssid, pnetwork->network.MacAddress,
2156                         pnetwork->network.Ssid.SsidLength);
2157                 memcpy(&pmlmepriv->assoc_ssid, &pnetwork->network.Ssid, sizeof(struct ndis_802_11_ssid));
2158
2159                 pmlmepriv->assoc_by_bssid = false;
2160
2161                 while (1) {
2162                         do_join_r = rtw_do_join(padapter);
2163                         if (_SUCCESS == do_join_r) {
2164                                 break;
2165                         } else {
2166                                 DBG_88E("roaming do_join return %d\n", do_join_r);
2167                                 pmlmepriv->to_roaming--;
2168
2169                                 if (0 < pmlmepriv->to_roaming) {
2170                                         continue;
2171                                 } else {
2172                                         DBG_88E("%s(%d) -to roaming fail, indicate_disconnect\n", __func__, __LINE__);
2173                                         rtw_indicate_disconnect(padapter);
2174                                         break;
2175                                 }
2176                         }
2177                 }
2178         }
2179 }