Add the rt linux 4.1.3-rt3 as base
[kvmfornfv.git] / kernel / drivers / staging / rtl8188eu / hal / rtl8188e_cmd.c
1 /******************************************************************************
2  *
3  * Copyright(c) 2007 - 2011 Realtek Corporation. All rights reserved.
4  *
5  * This program is free software; you can redistribute it and/or modify it
6  * under the terms of version 2 of the GNU General Public License as
7  * published by the Free Software Foundation.
8  *
9  * This program is distributed in the hope that it will be useful, but WITHOUT
10  * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
11  * FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for
12  * more details.
13  *
14  * You should have received a copy of the GNU General Public License along with
15  * this program; if not, write to the Free Software Foundation, Inc.,
16  * 51 Franklin Street, Fifth Floor, Boston, MA 02110, USA
17  *
18  *
19  ******************************************************************************/
20 #define _RTL8188E_CMD_C_
21
22 #include <osdep_service.h>
23 #include <drv_types.h>
24 #include <recv_osdep.h>
25 #include <mlme_osdep.h>
26 #include <rtw_ioctl_set.h>
27
28 #include <rtl8188e_hal.h>
29
30 #define RTL88E_MAX_H2C_BOX_NUMS         4
31 #define RTL88E_MAX_CMD_LEN              7
32 #define RTL88E_MESSAGE_BOX_SIZE         4
33 #define RTL88E_EX_MESSAGE_BOX_SIZE      4
34
35 static u8 _is_fw_read_cmd_down(struct adapter *adapt, u8 msgbox_num)
36 {
37         u8 read_down = false;
38         int     retry_cnts = 100;
39
40         u8 valid;
41
42         do {
43                 valid = usb_read8(adapt, REG_HMETFR) & BIT(msgbox_num);
44                 if (0 == valid)
45                         read_down = true;
46         } while ((!read_down) && (retry_cnts--));
47
48         return read_down;
49 }
50
51 /*****************************************
52 * H2C Msg format :
53 * 0x1DF - 0x1D0
54 *| 31 - 8       | 7-5    4 - 0  |
55 *| h2c_msg      |Class_ID CMD_ID        |
56 *
57 * Extend 0x1FF - 0x1F0
58 *|31 - 0          |
59 *|ext_msg|
60 ******************************************/
61 static s32 FillH2CCmd_88E(struct adapter *adapt, u8 ElementID, u32 CmdLen, u8 *pCmdBuffer)
62 {
63         u8 bcmd_down = false;
64         s32 retry_cnts = 100;
65         u8 h2c_box_num;
66         u32 msgbox_addr;
67         u32 msgbox_ex_addr;
68         struct hal_data_8188e *haldata = GET_HAL_DATA(adapt);
69         u8 cmd_idx, ext_cmd_len;
70         u32 h2c_cmd = 0;
71         u32 h2c_cmd_ex = 0;
72         s32 ret = _FAIL;
73
74
75         if (!adapt->bFWReady) {
76                 DBG_88E("FillH2CCmd_88E(): return H2C cmd because fw is not ready\n");
77                 return ret;
78         }
79
80         if (!pCmdBuffer)
81                 goto exit;
82         if (CmdLen > RTL88E_MAX_CMD_LEN)
83                 goto exit;
84         if (adapt->bSurpriseRemoved)
85                 goto exit;
86
87         /* pay attention to if  race condition happened in  H2C cmd setting. */
88         do {
89                 h2c_box_num = haldata->LastHMEBoxNum;
90
91                 if (!_is_fw_read_cmd_down(adapt, h2c_box_num)) {
92                         DBG_88E(" fw read cmd failed...\n");
93                         goto exit;
94                 }
95
96                 *(u8 *)(&h2c_cmd) = ElementID;
97
98                 if (CmdLen <= 3) {
99                         memcpy((u8 *)(&h2c_cmd)+1, pCmdBuffer, CmdLen);
100                 } else {
101                         memcpy((u8 *)(&h2c_cmd)+1, pCmdBuffer, 3);
102                         ext_cmd_len = CmdLen-3;
103                         memcpy((u8 *)(&h2c_cmd_ex), pCmdBuffer+3, ext_cmd_len);
104
105                         /* Write Ext command */
106                         msgbox_ex_addr = REG_HMEBOX_EXT_0 + (h2c_box_num * RTL88E_EX_MESSAGE_BOX_SIZE);
107                         for (cmd_idx = 0; cmd_idx < ext_cmd_len; cmd_idx++) {
108                                 usb_write8(adapt, msgbox_ex_addr+cmd_idx, *((u8 *)(&h2c_cmd_ex)+cmd_idx));
109                         }
110                 }
111                 /*  Write command */
112                 msgbox_addr = REG_HMEBOX_0 + (h2c_box_num * RTL88E_MESSAGE_BOX_SIZE);
113                 for (cmd_idx = 0; cmd_idx < RTL88E_MESSAGE_BOX_SIZE; cmd_idx++) {
114                         usb_write8(adapt, msgbox_addr+cmd_idx, *((u8 *)(&h2c_cmd)+cmd_idx));
115                 }
116                 bcmd_down = true;
117
118                 haldata->LastHMEBoxNum = (h2c_box_num+1) % RTL88E_MAX_H2C_BOX_NUMS;
119
120         } while ((!bcmd_down) && (retry_cnts--));
121
122         ret = _SUCCESS;
123
124 exit:
125
126
127         return ret;
128 }
129
130 u8 rtl8188e_set_raid_cmd(struct adapter *adapt, u32 mask)
131 {
132         u8 buf[3];
133         u8 res = _SUCCESS;
134         struct hal_data_8188e *haldata = GET_HAL_DATA(adapt);
135
136         if (haldata->fw_ractrl) {
137
138                 memset(buf, 0, 3);
139                 put_unaligned_le32(mask, buf);
140
141                 FillH2CCmd_88E(adapt, H2C_DM_MACID_CFG, 3, buf);
142         } else {
143                 DBG_88E("==>%s fw dont support RA\n", __func__);
144                 res = _FAIL;
145         }
146
147
148         return res;
149 }
150
151 /* bitmap[0:27] = tx_rate_bitmap */
152 /* bitmap[28:31]= Rate Adaptive id */
153 /* arg[0:4] = macid */
154 /* arg[5] = Short GI */
155 void rtl8188e_Add_RateATid(struct adapter *pAdapter, u32 bitmap, u8 arg, u8 rssi_level)
156 {
157         struct hal_data_8188e *haldata = GET_HAL_DATA(pAdapter);
158
159         u8 macid, init_rate, raid, shortGIrate = false;
160
161         macid = arg&0x1f;
162
163         raid = (bitmap>>28) & 0x0f;
164         bitmap &= 0x0fffffff;
165
166         if (rssi_level != DM_RATR_STA_INIT)
167                 bitmap = ODM_Get_Rate_Bitmap(&haldata->odmpriv, macid, bitmap, rssi_level);
168
169         bitmap |= ((raid<<28)&0xf0000000);
170
171         init_rate = get_highest_rate_idx(bitmap&0x0fffffff)&0x3f;
172
173         shortGIrate = (arg&BIT(5)) ? true : false;
174
175         if (shortGIrate)
176                 init_rate |= BIT(6);
177
178         raid = (bitmap>>28) & 0x0f;
179
180         bitmap &= 0x0fffffff;
181
182         DBG_88E("%s=> mac_id:%d, raid:%d, ra_bitmap=0x%x, shortGIrate=0x%02x\n",
183                 __func__, macid, raid, bitmap, shortGIrate);
184
185         ODM_RA_UpdateRateInfo_8188E(&(haldata->odmpriv), macid, raid, bitmap, shortGIrate);
186 }
187
188 void rtl8188e_set_FwPwrMode_cmd(struct adapter *adapt, u8 Mode)
189 {
190         struct setpwrmode_parm H2CSetPwrMode;
191         struct pwrctrl_priv *pwrpriv = &adapt->pwrctrlpriv;
192         u8 RLBM = 0; /*  0:Min, 1:Max, 2:User define */
193
194         DBG_88E("%s: Mode=%d SmartPS=%d UAPSD=%d\n", __func__,
195                 Mode, pwrpriv->smart_ps, adapt->registrypriv.uapsd_enable);
196
197         switch (Mode) {
198         case PS_MODE_ACTIVE:
199                 H2CSetPwrMode.Mode = 0;
200                 break;
201         case PS_MODE_MIN:
202                 H2CSetPwrMode.Mode = 1;
203                 break;
204         case PS_MODE_MAX:
205                 RLBM = 1;
206                 H2CSetPwrMode.Mode = 1;
207                 break;
208         case PS_MODE_DTIM:
209                 RLBM = 2;
210                 H2CSetPwrMode.Mode = 1;
211                 break;
212         case PS_MODE_UAPSD_WMM:
213                 H2CSetPwrMode.Mode = 2;
214                 break;
215         default:
216                 H2CSetPwrMode.Mode = 0;
217                 break;
218         }
219
220         H2CSetPwrMode.SmartPS_RLBM = (((pwrpriv->smart_ps<<4)&0xf0) | (RLBM & 0x0f));
221
222         H2CSetPwrMode.AwakeInterval = 1;
223
224         H2CSetPwrMode.bAllQueueUAPSD = adapt->registrypriv.uapsd_enable;
225
226         if (Mode > 0)
227                 H2CSetPwrMode.PwrState = 0x00;/*  AllON(0x0C), RFON(0x04), RFOFF(0x00) */
228         else
229                 H2CSetPwrMode.PwrState = 0x0C;/*  AllON(0x0C), RFON(0x04), RFOFF(0x00) */
230
231         FillH2CCmd_88E(adapt, H2C_PS_PWR_MODE, sizeof(H2CSetPwrMode), (u8 *)&H2CSetPwrMode);
232
233 }
234
235 void rtl8188e_set_FwMediaStatus_cmd(struct adapter *adapt, __le16 mstatus_rpt)
236 {
237         u8 opmode, macid;
238         u16 mst_rpt = le16_to_cpu(mstatus_rpt);
239         opmode = (u8)mst_rpt;
240         macid = (u8)(mst_rpt >> 8);
241
242         DBG_88E("### %s: MStatus=%x MACID=%d\n", __func__, opmode, macid);
243         FillH2CCmd_88E(adapt, H2C_COM_MEDIA_STATUS_RPT, sizeof(mst_rpt), (u8 *)&mst_rpt);
244 }
245
246 static void ConstructBeacon(struct adapter *adapt, u8 *pframe, u32 *pLength)
247 {
248         struct rtw_ieee80211_hdr        *pwlanhdr;
249         __le16 *fctrl;
250         u32 rate_len, pktlen;
251         struct mlme_ext_priv *pmlmeext = &(adapt->mlmeextpriv);
252         struct mlme_ext_info    *pmlmeinfo = &(pmlmeext->mlmext_info);
253         struct wlan_bssid_ex            *cur_network = &(pmlmeinfo->network);
254         u8 bc_addr[] = {0xff, 0xff, 0xff, 0xff, 0xff, 0xff};
255
256         pwlanhdr = (struct rtw_ieee80211_hdr *)pframe;
257
258         fctrl = &(pwlanhdr->frame_ctl);
259         *(fctrl) = 0;
260
261         memcpy(pwlanhdr->addr1, bc_addr, ETH_ALEN);
262         memcpy(pwlanhdr->addr2, myid(&(adapt->eeprompriv)), ETH_ALEN);
263         memcpy(pwlanhdr->addr3, cur_network->MacAddress, ETH_ALEN);
264
265         SetSeqNum(pwlanhdr, 0/*pmlmeext->mgnt_seq*/);
266         SetFrameSubType(pframe, WIFI_BEACON);
267
268         pframe += sizeof(struct rtw_ieee80211_hdr_3addr);
269         pktlen = sizeof(struct rtw_ieee80211_hdr_3addr);
270
271         /* timestamp will be inserted by hardware */
272         pframe += 8;
273         pktlen += 8;
274
275         /*  beacon interval: 2 bytes */
276         memcpy(pframe, (unsigned char *)(rtw_get_beacon_interval_from_ie(cur_network->IEs)), 2);
277
278         pframe += 2;
279         pktlen += 2;
280
281         /*  capability info: 2 bytes */
282         memcpy(pframe, (unsigned char *)(rtw_get_capability_from_ie(cur_network->IEs)), 2);
283
284         pframe += 2;
285         pktlen += 2;
286
287         if ((pmlmeinfo->state&0x03) == WIFI_FW_AP_STATE) {
288                 pktlen += cur_network->IELength - sizeof(struct ndis_802_11_fixed_ie);
289                 memcpy(pframe, cur_network->IEs+sizeof(struct ndis_802_11_fixed_ie), pktlen);
290
291                 goto _ConstructBeacon;
292         }
293
294         /* below for ad-hoc mode */
295
296         /*  SSID */
297         pframe = rtw_set_ie(pframe, _SSID_IE_, cur_network->Ssid.SsidLength, cur_network->Ssid.Ssid, &pktlen);
298
299         /*  supported rates... */
300         rate_len = rtw_get_rateset_len(cur_network->SupportedRates);
301         pframe = rtw_set_ie(pframe, _SUPPORTEDRATES_IE_, ((rate_len > 8) ? 8 : rate_len), cur_network->SupportedRates, &pktlen);
302
303         /*  DS parameter set */
304         pframe = rtw_set_ie(pframe, _DSSET_IE_, 1, (unsigned char *)&(cur_network->Configuration.DSConfig), &pktlen);
305
306         if ((pmlmeinfo->state&0x03) == WIFI_FW_ADHOC_STATE) {
307                 u32 ATIMWindow;
308                 /*  IBSS Parameter Set... */
309                 ATIMWindow = 0;
310                 pframe = rtw_set_ie(pframe, _IBSS_PARA_IE_, 2, (unsigned char *)(&ATIMWindow), &pktlen);
311         }
312
313         /* todo: ERP IE */
314
315         /*  EXTERNDED SUPPORTED RATE */
316         if (rate_len > 8)
317                 pframe = rtw_set_ie(pframe, _EXT_SUPPORTEDRATES_IE_, (rate_len - 8), (cur_network->SupportedRates + 8), &pktlen);
318
319         /* todo:HT for adhoc */
320
321 _ConstructBeacon:
322
323         if ((pktlen + TXDESC_SIZE) > 512) {
324                 DBG_88E("beacon frame too large\n");
325                 return;
326         }
327
328         *pLength = pktlen;
329 }
330
331 static void ConstructPSPoll(struct adapter *adapt, u8 *pframe, u32 *pLength)
332 {
333         struct rtw_ieee80211_hdr        *pwlanhdr;
334         struct mlme_ext_priv *pmlmeext = &(adapt->mlmeextpriv);
335         struct mlme_ext_info    *pmlmeinfo = &(pmlmeext->mlmext_info);
336         __le16 *fctrl;
337         struct wlan_bssid_ex *pnetwork = &(pmlmeinfo->network);
338
339         pwlanhdr = (struct rtw_ieee80211_hdr *)pframe;
340
341         /*  Frame control. */
342         fctrl = &(pwlanhdr->frame_ctl);
343         *(fctrl) = 0;
344         SetPwrMgt(fctrl);
345         SetFrameSubType(pframe, WIFI_PSPOLL);
346
347         /*  AID. */
348         SetDuration(pframe, (pmlmeinfo->aid | 0xc000));
349
350         /*  BSSID. */
351         memcpy(pwlanhdr->addr1, pnetwork->MacAddress, ETH_ALEN);
352
353         /*  TA. */
354         memcpy(pwlanhdr->addr2, myid(&(adapt->eeprompriv)), ETH_ALEN);
355
356         *pLength = 16;
357 }
358
359 static void ConstructNullFunctionData(struct adapter *adapt, u8 *pframe,
360         u32 *pLength,
361         u8 *StaAddr,
362         u8 bQoS,
363         u8 AC,
364         u8 bEosp,
365         u8 bForcePowerSave)
366 {
367         struct rtw_ieee80211_hdr        *pwlanhdr;
368         __le16 *fctrl;
369         u32 pktlen;
370         struct mlme_priv *pmlmepriv = &adapt->mlmepriv;
371         struct wlan_network             *cur_network = &pmlmepriv->cur_network;
372         struct mlme_ext_priv *pmlmeext = &(adapt->mlmeextpriv);
373         struct mlme_ext_info    *pmlmeinfo = &(pmlmeext->mlmext_info);
374         struct wlan_bssid_ex *pnetwork = &(pmlmeinfo->network);
375
376         pwlanhdr = (struct rtw_ieee80211_hdr *)pframe;
377
378         fctrl = &pwlanhdr->frame_ctl;
379         *(fctrl) = 0;
380         if (bForcePowerSave)
381                 SetPwrMgt(fctrl);
382
383         switch (cur_network->network.InfrastructureMode) {
384         case Ndis802_11Infrastructure:
385                 SetToDs(fctrl);
386                 memcpy(pwlanhdr->addr1, pnetwork->MacAddress, ETH_ALEN);
387                 memcpy(pwlanhdr->addr2, myid(&(adapt->eeprompriv)), ETH_ALEN);
388                 memcpy(pwlanhdr->addr3, StaAddr, ETH_ALEN);
389                 break;
390         case Ndis802_11APMode:
391                 SetFrDs(fctrl);
392                 memcpy(pwlanhdr->addr1, StaAddr, ETH_ALEN);
393                 memcpy(pwlanhdr->addr2, pnetwork->MacAddress, ETH_ALEN);
394                 memcpy(pwlanhdr->addr3, myid(&(adapt->eeprompriv)), ETH_ALEN);
395                 break;
396         case Ndis802_11IBSS:
397         default:
398                 memcpy(pwlanhdr->addr1, StaAddr, ETH_ALEN);
399                 memcpy(pwlanhdr->addr2, myid(&(adapt->eeprompriv)), ETH_ALEN);
400                 memcpy(pwlanhdr->addr3, pnetwork->MacAddress, ETH_ALEN);
401                 break;
402         }
403
404         SetSeqNum(pwlanhdr, 0);
405
406         if (bQoS) {
407                 struct rtw_ieee80211_hdr_3addr_qos *pwlanqoshdr;
408
409                 SetFrameSubType(pframe, WIFI_QOS_DATA_NULL);
410
411                 pwlanqoshdr = (struct rtw_ieee80211_hdr_3addr_qos *)pframe;
412                 SetPriority(&pwlanqoshdr->qc, AC);
413                 SetEOSP(&pwlanqoshdr->qc, bEosp);
414
415                 pktlen = sizeof(struct rtw_ieee80211_hdr_3addr_qos);
416         } else {
417                 SetFrameSubType(pframe, WIFI_DATA_NULL);
418
419                 pktlen = sizeof(struct rtw_ieee80211_hdr_3addr);
420         }
421
422         *pLength = pktlen;
423 }
424
425 static void ConstructProbeRsp(struct adapter *adapt, u8 *pframe, u32 *pLength, u8 *StaAddr, bool bHideSSID)
426 {
427         struct rtw_ieee80211_hdr        *pwlanhdr;
428         __le16 *fctrl;
429         u8 *mac, *bssid;
430         u32 pktlen;
431         struct mlme_ext_priv *pmlmeext = &(adapt->mlmeextpriv);
432         struct mlme_ext_info    *pmlmeinfo = &(pmlmeext->mlmext_info);
433         struct wlan_bssid_ex    *cur_network = &(pmlmeinfo->network);
434
435         pwlanhdr = (struct rtw_ieee80211_hdr *)pframe;
436
437         mac = myid(&(adapt->eeprompriv));
438         bssid = cur_network->MacAddress;
439
440         fctrl = &(pwlanhdr->frame_ctl);
441         *(fctrl) = 0;
442         memcpy(pwlanhdr->addr1, StaAddr, ETH_ALEN);
443         memcpy(pwlanhdr->addr2, mac, ETH_ALEN);
444         memcpy(pwlanhdr->addr3, bssid, ETH_ALEN);
445
446         SetSeqNum(pwlanhdr, 0);
447         SetFrameSubType(fctrl, WIFI_PROBERSP);
448
449         pktlen = sizeof(struct rtw_ieee80211_hdr_3addr);
450         pframe += pktlen;
451
452         if (cur_network->IELength > MAX_IE_SZ)
453                 return;
454
455         memcpy(pframe, cur_network->IEs, cur_network->IELength);
456         pframe += cur_network->IELength;
457         pktlen += cur_network->IELength;
458
459         *pLength = pktlen;
460 }
461
462 /*  */
463 /*  Description: Fill the reserved packets that FW will use to RSVD page. */
464 /*                      Now we just send 4 types packet to rsvd page. */
465 /*                      (1)Beacon, (2)Ps-poll, (3)Null data, (4)ProbeRsp. */
466 /*      Input: */
467 /*          bDLFinished - false: At the first time we will send all the packets as a large packet to Hw, */
468 /*                                              so we need to set the packet length to total length. */
469 /*                            true: At the second time, we should send the first packet (default:beacon) */
470 /*                                              to Hw again and set the length in descriptor to the real beacon length. */
471 /*  2009.10.15 by tynli. */
472 static void SetFwRsvdPagePkt(struct adapter *adapt, bool bDLFinished)
473 {
474         struct hal_data_8188e *haldata;
475         struct xmit_frame       *pmgntframe;
476         struct pkt_attrib       *pattrib;
477         struct xmit_priv *pxmitpriv;
478         struct mlme_ext_priv *pmlmeext;
479         struct mlme_ext_info    *pmlmeinfo;
480         u32 BeaconLength = 0, ProbeRspLength = 0, PSPollLength;
481         u32 NullDataLength, QosNullLength;
482         u8 *ReservedPagePacket;
483         u8 PageNum, PageNeed, TxDescLen;
484         u16 BufIndex;
485         u32 TotalPacketLen;
486         struct rsvdpage_loc RsvdPageLoc;
487         struct wlan_bssid_ex *pnetwork;
488
489         DBG_88E("%s\n", __func__);
490         ReservedPagePacket = kzalloc(1000, GFP_KERNEL);
491         if (ReservedPagePacket == NULL) {
492                 DBG_88E("%s: alloc ReservedPagePacket fail!\n", __func__);
493                 return;
494         }
495
496         haldata = GET_HAL_DATA(adapt);
497         pxmitpriv = &adapt->xmitpriv;
498         pmlmeext = &adapt->mlmeextpriv;
499         pmlmeinfo = &pmlmeext->mlmext_info;
500         pnetwork = &(pmlmeinfo->network);
501
502         TxDescLen = TXDESC_SIZE;
503         PageNum = 0;
504
505         /* 3 (1) beacon * 2 pages */
506         BufIndex = TXDESC_OFFSET;
507         ConstructBeacon(adapt, &ReservedPagePacket[BufIndex], &BeaconLength);
508
509         /*  When we count the first page size, we need to reserve description size for the RSVD */
510         /*  packet, it will be filled in front of the packet in TXPKTBUF. */
511         PageNeed = (u8)PageNum_128(TxDescLen + BeaconLength);
512         /*  To reserved 2 pages for beacon buffer. 2010.06.24. */
513         if (PageNeed == 1)
514                 PageNeed += 1;
515         PageNum += PageNeed;
516         haldata->FwRsvdPageStartOffset = PageNum;
517
518         BufIndex += PageNeed*128;
519
520         /* 3 (2) ps-poll *1 page */
521         RsvdPageLoc.LocPsPoll = PageNum;
522         ConstructPSPoll(adapt, &ReservedPagePacket[BufIndex], &PSPollLength);
523         rtl8188e_fill_fake_txdesc(adapt, &ReservedPagePacket[BufIndex-TxDescLen], PSPollLength, true, false);
524
525         PageNeed = (u8)PageNum_128(TxDescLen + PSPollLength);
526         PageNum += PageNeed;
527
528         BufIndex += PageNeed*128;
529
530         /* 3 (3) null data * 1 page */
531         RsvdPageLoc.LocNullData = PageNum;
532         ConstructNullFunctionData(adapt, &ReservedPagePacket[BufIndex], &NullDataLength, pnetwork->MacAddress, false, 0, 0, false);
533         rtl8188e_fill_fake_txdesc(adapt, &ReservedPagePacket[BufIndex-TxDescLen], NullDataLength, false, false);
534
535         PageNeed = (u8)PageNum_128(TxDescLen + NullDataLength);
536         PageNum += PageNeed;
537
538         BufIndex += PageNeed*128;
539
540         /* 3 (4) probe response * 1page */
541         RsvdPageLoc.LocProbeRsp = PageNum;
542         ConstructProbeRsp(adapt, &ReservedPagePacket[BufIndex], &ProbeRspLength, pnetwork->MacAddress, false);
543         rtl8188e_fill_fake_txdesc(adapt, &ReservedPagePacket[BufIndex-TxDescLen], ProbeRspLength, false, false);
544
545         PageNeed = (u8)PageNum_128(TxDescLen + ProbeRspLength);
546         PageNum += PageNeed;
547
548         BufIndex += PageNeed*128;
549
550         /* 3 (5) Qos null data */
551         RsvdPageLoc.LocQosNull = PageNum;
552         ConstructNullFunctionData(adapt, &ReservedPagePacket[BufIndex],
553                                   &QosNullLength, pnetwork->MacAddress, true, 0, 0, false);
554         rtl8188e_fill_fake_txdesc(adapt, &ReservedPagePacket[BufIndex-TxDescLen], QosNullLength, false, false);
555
556         PageNeed = (u8)PageNum_128(TxDescLen + QosNullLength);
557         PageNum += PageNeed;
558
559         TotalPacketLen = BufIndex + QosNullLength;
560         pmgntframe = alloc_mgtxmitframe(pxmitpriv);
561         if (pmgntframe == NULL)
562                 goto exit;
563
564         /*  update attribute */
565         pattrib = &pmgntframe->attrib;
566         update_mgntframe_attrib(adapt, pattrib);
567         pattrib->qsel = 0x10;
568         pattrib->last_txcmdsz = TotalPacketLen - TXDESC_OFFSET;
569         pattrib->pktlen = pattrib->last_txcmdsz;
570         memcpy(pmgntframe->buf_addr, ReservedPagePacket, TotalPacketLen);
571
572         rtw_hal_mgnt_xmit(adapt, pmgntframe);
573
574         DBG_88E("%s: Set RSVD page location to Fw\n", __func__);
575         FillH2CCmd_88E(adapt, H2C_COM_RSVD_PAGE, sizeof(RsvdPageLoc), (u8 *)&RsvdPageLoc);
576
577 exit:
578         kfree(ReservedPagePacket);
579 }
580
581 void rtl8188e_set_FwJoinBssReport_cmd(struct adapter *adapt, u8 mstatus)
582 {
583         struct hal_data_8188e *haldata = GET_HAL_DATA(adapt);
584         struct mlme_ext_priv *pmlmeext = &(adapt->mlmeextpriv);
585         struct mlme_ext_info    *pmlmeinfo = &(pmlmeext->mlmext_info);
586         bool    bSendBeacon = false;
587         bool    bcn_valid = false;
588         u8 DLBcnCount = 0;
589         u32 poll = 0;
590
591
592         DBG_88E("%s mstatus(%x)\n", __func__, mstatus);
593
594         if (mstatus == 1) {
595                 /*  We should set AID, correct TSF, HW seq enable before set JoinBssReport to Fw in 88/92C. */
596                 /*  Suggested by filen. Added by tynli. */
597                 usb_write16(adapt, REG_BCN_PSR_RPT, (0xC000|pmlmeinfo->aid));
598                 /*  Do not set TSF again here or vWiFi beacon DMA INT will not work. */
599
600                 /* Set REG_CR bit 8. DMA beacon by SW. */
601                 haldata->RegCR_1 |= BIT0;
602                 usb_write8(adapt,  REG_CR+1, haldata->RegCR_1);
603
604                 /*  Disable Hw protection for a time which revserd for Hw sending beacon. */
605                 /*  Fix download reserved page packet fail that access collision with the protection time. */
606                 /*  2010.05.11. Added by tynli. */
607                 usb_write8(adapt, REG_BCN_CTRL, usb_read8(adapt, REG_BCN_CTRL)&(~BIT(3)));
608                 usb_write8(adapt, REG_BCN_CTRL, usb_read8(adapt, REG_BCN_CTRL)|BIT(4));
609
610                 if (haldata->RegFwHwTxQCtrl&BIT6) {
611                         DBG_88E("HalDownloadRSVDPage(): There is an Adapter is sending beacon.\n");
612                         bSendBeacon = true;
613                 }
614
615                 /*  Set FWHW_TXQ_CTRL 0x422[6]=0 to tell Hw the packet is not a real beacon frame. */
616                 usb_write8(adapt, REG_FWHW_TXQ_CTRL+2, (haldata->RegFwHwTxQCtrl&(~BIT6)));
617                 haldata->RegFwHwTxQCtrl &= (~BIT6);
618
619                 /*  Clear beacon valid check bit. */
620                 rtw_hal_set_hwreg(adapt, HW_VAR_BCN_VALID, NULL);
621                 DLBcnCount = 0;
622                 poll = 0;
623                 do {
624                         /*  download rsvd page. */
625                         SetFwRsvdPagePkt(adapt, false);
626                         DLBcnCount++;
627                         do {
628                                 yield();
629                                 /* mdelay(10); */
630                                 /*  check rsvd page download OK. */
631                                 rtw_hal_get_hwreg(adapt, HW_VAR_BCN_VALID, (u8 *)(&bcn_valid));
632                                 poll++;
633                         } while (!bcn_valid && (poll%10) != 0 && !adapt->bSurpriseRemoved && !adapt->bDriverStopped);
634                 } while (!bcn_valid && DLBcnCount <= 100 && !adapt->bSurpriseRemoved && !adapt->bDriverStopped);
635
636                 if (adapt->bSurpriseRemoved || adapt->bDriverStopped)
637                         ;
638                 else if (!bcn_valid)
639                         DBG_88E("%s: 1 Download RSVD page failed! DLBcnCount:%u, poll:%u\n", __func__, DLBcnCount, poll);
640                 else
641                         DBG_88E("%s: 1 Download RSVD success! DLBcnCount:%u, poll:%u\n", __func__, DLBcnCount, poll);
642                 /*  */
643                 /*  We just can send the reserved page twice during the time that Tx thread is stopped (e.g. pnpsetpower) */
644                 /*  because we need to free the Tx BCN Desc which is used by the first reserved page packet. */
645                 /*  At run time, we cannot get the Tx Desc until it is released in TxHandleInterrupt() so we will return */
646                 /*  the beacon TCB in the following code. 2011.11.23. by tynli. */
647                 /*  */
648
649                 /*  Enable Bcn */
650                 usb_write8(adapt, REG_BCN_CTRL, usb_read8(adapt, REG_BCN_CTRL)|BIT(3));
651                 usb_write8(adapt, REG_BCN_CTRL, usb_read8(adapt, REG_BCN_CTRL)&(~BIT(4)));
652
653                 /*  To make sure that if there exists an adapter which would like to send beacon. */
654                 /*  If exists, the origianl value of 0x422[6] will be 1, we should check this to */
655                 /*  prevent from setting 0x422[6] to 0 after download reserved page, or it will cause */
656                 /*  the beacon cannot be sent by HW. */
657                 /*  2010.06.23. Added by tynli. */
658                 if (bSendBeacon) {
659                         usb_write8(adapt, REG_FWHW_TXQ_CTRL+2, (haldata->RegFwHwTxQCtrl|BIT6));
660                         haldata->RegFwHwTxQCtrl |= BIT6;
661                 }
662
663                 /*  Update RSVD page location H2C to Fw. */
664                 if (bcn_valid) {
665                         rtw_hal_set_hwreg(adapt, HW_VAR_BCN_VALID, NULL);
666                         DBG_88E("Set RSVD page location to Fw.\n");
667                 }
668
669                 /*  Do not enable HW DMA BCN or it will cause Pcie interface hang by timing issue. 2011.11.24. by tynli. */
670                 /*  Clear CR[8] or beacon packet will not be send to TxBuf anymore. */
671                 haldata->RegCR_1 &= (~BIT0);
672                 usb_write8(adapt,  REG_CR+1, haldata->RegCR_1);
673         }
674 }