1 /******************************************************************************
2  * rtl871x_mlme.c
3  *
4  * Copyright(c) 2007 - 2010 Realtek Corporation. All rights reserved.
5  * Linux device driver for RTL8192SU
6  *
7  * This program is free software; you can redistribute it and/or modify it
8  * under the terms of version 2 of the GNU General Public License as
9  * published by the Free Software Foundation.
10  *
11  * This program is distributed in the hope that it will be useful, but WITHOUT
12  * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
13  * FITNESS FOR A PARTICULAR PURPOSE.  See the GNU General Public License for
14  * more details.
15  *
16  * You should have received a copy of the GNU General Public License along with
17  * this program; if not, write to the Free Software Foundation, Inc.,
18  * 51 Franklin Street, Fifth Floor, Boston, MA 02110, USA
19  *
20  * Modifications for inclusion into the Linux staging tree are
21  * Copyright(c) 2010 Larry Finger. All rights reserved.
22  *
23  * Contact information:
24  * WLAN FAE <wlanfae@realtek.com>
25  * Larry Finger <Larry.Finger@lwfinger.net>
26  *
27  ******************************************************************************/
28 
29 #define _RTL871X_MLME_C_
30 
31 #include <linux/etherdevice.h>
32 
33 #include "osdep_service.h"
34 #include "drv_types.h"
35 #include "recv_osdep.h"
36 #include "xmit_osdep.h"
37 #include "mlme_osdep.h"
38 #include "sta_info.h"
39 #include "wifi.h"
40 #include "wlan_bssdef.h"
41 
42 static void update_ht_cap(struct _adapter *padapter, u8 *pie, uint ie_len);
43 
44 static sint _init_mlme_priv(struct _adapter *padapter)
45 {
46 	sint	i;
47 	u8	*pbuf;
48 	struct wlan_network	*pnetwork;
49 	struct	mlme_priv *pmlmepriv = &padapter->mlmepriv;
50 
51 	memset((u8 *)pmlmepriv, 0, sizeof(struct mlme_priv));
52 	pmlmepriv->nic_hdl = (u8 *)padapter;
53 	pmlmepriv->pscanned = NULL;
54 	pmlmepriv->fw_state = 0;
55 	pmlmepriv->cur_network.network.InfrastructureMode =
56 				 Ndis802_11AutoUnknown;
57 	/* Maybe someday we should rename this variable to "active_mode"(Jeff)*/
58 	pmlmepriv->passive_mode = 1; /* 1: active, 0: passive. */
59 	spin_lock_init(&(pmlmepriv->lock));
60 	spin_lock_init(&(pmlmepriv->lock2));
61 	_init_queue(&(pmlmepriv->free_bss_pool));
62 	_init_queue(&(pmlmepriv->scanned_queue));
63 	set_scanned_network_val(pmlmepriv, 0);
64 	memset(&pmlmepriv->assoc_ssid, 0, sizeof(struct ndis_802_11_ssid));
65 	pbuf = kmalloc_array(MAX_BSS_CNT, sizeof(struct wlan_network),
66 			     GFP_ATOMIC);
67 	if (!pbuf)
68 		return _FAIL;
69 	pmlmepriv->free_bss_buf = pbuf;
70 	pnetwork = (struct wlan_network *)pbuf;
71 	for (i = 0; i < MAX_BSS_CNT; i++) {
72 		INIT_LIST_HEAD(&(pnetwork->list));
73 		list_add_tail(&(pnetwork->list),
74 				 &(pmlmepriv->free_bss_pool.queue));
75 		pnetwork++;
76 	}
77 	pmlmepriv->sitesurveyctrl.last_rx_pkts = 0;
78 	pmlmepriv->sitesurveyctrl.last_tx_pkts = 0;
79 	pmlmepriv->sitesurveyctrl.traffic_busy = false;
80 	/* allocate DMA-able/Non-Page memory for cmd_buf and rsp_buf */
81 	r8712_init_mlme_timer(padapter);
82 	return _SUCCESS;
83 }
84 
85 struct wlan_network *_r8712_alloc_network(struct mlme_priv *pmlmepriv)
86 {
87 	unsigned long irqL;
88 	struct wlan_network *pnetwork;
89 	struct  __queue *free_queue = &pmlmepriv->free_bss_pool;
90 
91 	spin_lock_irqsave(&free_queue->lock, irqL);
92 	pnetwork = list_first_entry_or_null(&free_queue->queue,
93 					    struct wlan_network, list);
94 	if (pnetwork) {
95 		list_del_init(&pnetwork->list);
96 		pnetwork->last_scanned = jiffies;
97 		pmlmepriv->num_of_scanned++;
98 	}
99 	spin_unlock_irqrestore(&free_queue->lock, irqL);
100 	return pnetwork;
101 }
102 
103 static void _free_network(struct mlme_priv *pmlmepriv,
104 			  struct wlan_network *pnetwork)
105 {
106 	u32 curr_time, delta_time;
107 	unsigned long irqL;
108 	struct  __queue *free_queue = &(pmlmepriv->free_bss_pool);
109 
110 	if (pnetwork == NULL)
111 		return;
112 	if (pnetwork->fixed)
113 		return;
114 	curr_time = jiffies;
115 	delta_time = (curr_time - (u32)pnetwork->last_scanned) / HZ;
116 	if (delta_time < SCANQUEUE_LIFETIME)
117 		return;
118 	spin_lock_irqsave(&free_queue->lock, irqL);
119 	list_del_init(&pnetwork->list);
120 	list_add_tail(&pnetwork->list, &free_queue->queue);
121 	pmlmepriv->num_of_scanned--;
122 	spin_unlock_irqrestore(&free_queue->lock, irqL);
123 }
124 
125 static void free_network_nolock(struct mlme_priv *pmlmepriv,
126 			  struct wlan_network *pnetwork)
127 {
128 	struct  __queue *free_queue = &pmlmepriv->free_bss_pool;
129 
130 	if (pnetwork == NULL)
131 		return;
132 	if (pnetwork->fixed)
133 		return;
134 	list_del_init(&pnetwork->list);
135 	list_add_tail(&pnetwork->list, &free_queue->queue);
136 	pmlmepriv->num_of_scanned--;
137 }
138 
139 
140 /*
141 	return the wlan_network with the matching addr
142 	Shall be called under atomic context...
143 	to avoid possible racing condition...
144 */
145 static struct wlan_network *_r8712_find_network(struct  __queue *scanned_queue,
146 					 u8 *addr)
147 {
148 	unsigned long irqL;
149 	struct list_head *phead, *plist;
150 	struct wlan_network *pnetwork = NULL;
151 
152 	if (is_zero_ether_addr(addr))
153 		return NULL;
154 	spin_lock_irqsave(&scanned_queue->lock, irqL);
155 	phead = &scanned_queue->queue;
156 	plist = phead->next;
157 	while (plist != phead) {
158 		pnetwork = container_of(plist, struct wlan_network, list);
159 		plist = plist->next;
160 		if (!memcmp(addr, pnetwork->network.MacAddress, ETH_ALEN))
161 			break;
162 	}
163 	spin_unlock_irqrestore(&scanned_queue->lock, irqL);
164 	return pnetwork;
165 }
166 
167 static void _free_network_queue(struct _adapter *padapter)
168 {
169 	unsigned long irqL;
170 	struct list_head *phead, *plist;
171 	struct wlan_network *pnetwork;
172 	struct mlme_priv *pmlmepriv = &padapter->mlmepriv;
173 	struct  __queue *scanned_queue = &pmlmepriv->scanned_queue;
174 
175 	spin_lock_irqsave(&scanned_queue->lock, irqL);
176 	phead = &scanned_queue->queue;
177 	plist = phead->next;
178 	while (!end_of_queue_search(phead, plist)) {
179 		pnetwork = container_of(plist, struct wlan_network, list);
180 		plist = plist->next;
181 		_free_network(pmlmepriv, pnetwork);
182 	}
183 	spin_unlock_irqrestore(&scanned_queue->lock, irqL);
184 }
185 
186 sint r8712_if_up(struct _adapter *padapter)
187 {
188 	sint res;
189 
190 	if (padapter->bDriverStopped || padapter->bSurpriseRemoved ||
191 	    !check_fwstate(&padapter->mlmepriv, _FW_LINKED)) {
192 		res = false;
193 	} else {
194 		res = true;
195 	}
196 	return res;
197 }
198 
199 void r8712_generate_random_ibss(u8 *pibss)
200 {
201 	u32 curtime = jiffies;
202 
203 	pibss[0] = 0x02; /*in ad-hoc mode bit1 must set to 1 */
204 	pibss[1] = 0x11;
205 	pibss[2] = 0x87;
206 	pibss[3] = (u8)(curtime & 0xff);
207 	pibss[4] = (u8)((curtime >> 8) & 0xff);
208 	pibss[5] = (u8)((curtime >> 16) & 0xff);
209 }
210 
211 uint r8712_get_wlan_bssid_ex_sz(struct wlan_bssid_ex *bss)
212 {
213 	return sizeof(*bss) + bss->IELength - MAX_IE_SZ;
214 }
215 
216 u8 *r8712_get_capability_from_ie(u8 *ie)
217 {
218 	return ie + 8 + 2;
219 }
220 
221 int r8712_init_mlme_priv(struct _adapter *padapter)
222 {
223 	return _init_mlme_priv(padapter);
224 }
225 
226 void r8712_free_mlme_priv(struct mlme_priv *pmlmepriv)
227 {
228 	kfree(pmlmepriv->free_bss_buf);
229 }
230 
231 static struct	wlan_network *alloc_network(struct mlme_priv *pmlmepriv)
232 {
233 	return _r8712_alloc_network(pmlmepriv);
234 }
235 
236 void r8712_free_network_queue(struct _adapter *dev)
237 {
238 	_free_network_queue(dev);
239 }
240 
241 /*
242 	return the wlan_network with the matching addr
243 
244 	Shall be called under atomic context...
245 	to avoid possible racing condition...
246 */
247 static struct wlan_network *r8712_find_network(struct  __queue *scanned_queue,
248 					       u8 *addr)
249 {
250 	struct wlan_network *pnetwork = _r8712_find_network(scanned_queue,
251 							    addr);
252 
253 	return pnetwork;
254 }
255 
256 int r8712_is_same_ibss(struct _adapter *adapter, struct wlan_network *pnetwork)
257 {
258 	int ret = true;
259 	struct security_priv *psecuritypriv = &adapter->securitypriv;
260 
261 	if ((psecuritypriv->PrivacyAlgrthm != _NO_PRIVACY_) &&
262 		    (pnetwork->network.Privacy == 0))
263 		ret = false;
264 	else if ((psecuritypriv->PrivacyAlgrthm == _NO_PRIVACY_) &&
265 		 (pnetwork->network.Privacy == 1))
266 		ret = false;
267 	else
268 		ret = true;
269 	return ret;
270 
271 }
272 
273 static int is_same_network(struct wlan_bssid_ex *src,
274 			   struct wlan_bssid_ex *dst)
275 {
276 	 u16 s_cap, d_cap;
277 
278 	memcpy((u8 *)&s_cap, r8712_get_capability_from_ie(src->IEs), 2);
279 	memcpy((u8 *)&d_cap, r8712_get_capability_from_ie(dst->IEs), 2);
280 	return (src->Ssid.SsidLength == dst->Ssid.SsidLength) &&
281 			(src->Configuration.DSConfig ==
282 			dst->Configuration.DSConfig) &&
283 			((!memcmp(src->MacAddress, dst->MacAddress,
284 			ETH_ALEN))) &&
285 			((!memcmp(src->Ssid.Ssid,
286 			  dst->Ssid.Ssid,
287 			  src->Ssid.SsidLength))) &&
288 			((s_cap & WLAN_CAPABILITY_IBSS) ==
289 			(d_cap & WLAN_CAPABILITY_IBSS)) &&
290 			((s_cap & WLAN_CAPABILITY_BSS) ==
291 			(d_cap & WLAN_CAPABILITY_BSS));
292 
293 }
294 
295 struct	wlan_network *r8712_get_oldest_wlan_network(
296 				struct  __queue *scanned_queue)
297 {
298 	struct list_head *plist, *phead;
299 	struct	wlan_network	*pwlan = NULL;
300 	struct	wlan_network	*oldest = NULL;
301 
302 	phead = &scanned_queue->queue;
303 	plist = phead->next;
304 	while (1) {
305 		if (end_of_queue_search(phead, plist) ==  true)
306 			break;
307 		pwlan = container_of(plist, struct wlan_network, list);
308 		if (pwlan->fixed != true) {
309 			if (oldest == NULL ||
310 			    time_after((unsigned long)oldest->last_scanned,
311 			    (unsigned long)pwlan->last_scanned))
312 				oldest = pwlan;
313 		}
314 		plist = plist->next;
315 	}
316 	return oldest;
317 }
318 
319 static void update_network(struct wlan_bssid_ex *dst,
320 			   struct wlan_bssid_ex *src,
321 			   struct _adapter *padapter)
322 {
323 	u32 last_evm = 0, tmpVal;
324 
325 	if (check_fwstate(&padapter->mlmepriv, _FW_LINKED) &&
326 	    is_same_network(&(padapter->mlmepriv.cur_network.network), src)) {
327 		if (padapter->recvpriv.signal_qual_data.total_num++ >=
328 		    PHY_LINKQUALITY_SLID_WIN_MAX) {
329 			padapter->recvpriv.signal_qual_data.total_num =
330 				   PHY_LINKQUALITY_SLID_WIN_MAX;
331 			last_evm = padapter->recvpriv.signal_qual_data.
332 				   elements[padapter->recvpriv.
333 				   signal_qual_data.index];
334 			padapter->recvpriv.signal_qual_data.total_val -=
335 				 last_evm;
336 		}
337 		padapter->recvpriv.signal_qual_data.total_val += src->Rssi;
338 
339 		padapter->recvpriv.signal_qual_data.
340 			  elements[padapter->recvpriv.signal_qual_data.
341 			  index++] = src->Rssi;
342 		if (padapter->recvpriv.signal_qual_data.index >=
343 		    PHY_LINKQUALITY_SLID_WIN_MAX)
344 			padapter->recvpriv.signal_qual_data.index = 0;
345 		/* <1> Showed on UI for user, in percentage. */
346 		tmpVal = padapter->recvpriv.signal_qual_data.total_val /
347 			 padapter->recvpriv.signal_qual_data.total_num;
348 		padapter->recvpriv.signal = (u8)tmpVal;
349 
350 		src->Rssi = padapter->recvpriv.signal;
351 	} else {
352 		src->Rssi = (src->Rssi + dst->Rssi) / 2;
353 	}
354 	memcpy((u8 *)dst, (u8 *)src, r8712_get_wlan_bssid_ex_sz(src));
355 }
356 
357 static void update_current_network(struct _adapter *adapter,
358 				   struct wlan_bssid_ex *pnetwork)
359 {
360 	struct mlme_priv *pmlmepriv = &adapter->mlmepriv;
361 
362 	if (is_same_network(&(pmlmepriv->cur_network.network), pnetwork)) {
363 		update_network(&(pmlmepriv->cur_network.network),
364 			       pnetwork, adapter);
365 		r8712_update_protection(adapter,
366 			       (pmlmepriv->cur_network.network.IEs) +
367 			       sizeof(struct NDIS_802_11_FIXED_IEs),
368 			       pmlmepriv->cur_network.network.IELength);
369 	}
370 }
371 
372 /*
373 Caller must hold pmlmepriv->lock first.
374 */
375 static void update_scanned_network(struct _adapter *adapter,
376 			    struct wlan_bssid_ex *target)
377 {
378 	struct list_head *plist, *phead;
379 
380 	u32 bssid_ex_sz;
381 	struct mlme_priv *pmlmepriv = &adapter->mlmepriv;
382 	struct  __queue *queue = &pmlmepriv->scanned_queue;
383 	struct wlan_network *pnetwork = NULL;
384 	struct wlan_network *oldest = NULL;
385 
386 	phead = &queue->queue;
387 	plist = phead->next;
388 
389 	while (1) {
390 		if (end_of_queue_search(phead, plist))
391 			break;
392 
393 		pnetwork = container_of(plist, struct wlan_network, list);
394 		if (is_same_network(&pnetwork->network, target))
395 			break;
396 		if ((oldest == ((struct wlan_network *)0)) ||
397 		    time_after((unsigned long)oldest->last_scanned,
398 				(unsigned long)pnetwork->last_scanned))
399 			oldest = pnetwork;
400 
401 		plist = plist->next;
402 	}
403 
404 
405 	/* If we didn't find a match, then get a new network slot to initialize
406 	 * with this beacon's information */
407 	if (end_of_queue_search(phead, plist)) {
408 		if (list_empty(&pmlmepriv->free_bss_pool.queue)) {
409 			/* If there are no more slots, expire the oldest */
410 			pnetwork = oldest;
411 			target->Rssi = (pnetwork->network.Rssi +
412 					target->Rssi) / 2;
413 			memcpy(&pnetwork->network, target,
414 				r8712_get_wlan_bssid_ex_sz(target));
415 			pnetwork->last_scanned = jiffies;
416 		} else {
417 			/* Otherwise just pull from the free list */
418 			/* update scan_time */
419 			pnetwork = alloc_network(pmlmepriv);
420 			if (pnetwork == NULL)
421 				return;
422 			bssid_ex_sz = r8712_get_wlan_bssid_ex_sz(target);
423 			target->Length = bssid_ex_sz;
424 			memcpy(&pnetwork->network, target, bssid_ex_sz);
425 			list_add_tail(&pnetwork->list, &queue->queue);
426 		}
427 	} else {
428 		/* we have an entry and we are going to update it. But
429 		 * this entry may be already expired. In this case we
430 		 * do the same as we found a new net and call the new_net
431 		 * handler
432 		 */
433 		update_network(&pnetwork->network, target, adapter);
434 		pnetwork->last_scanned = jiffies;
435 	}
436 }
437 
438 static void rtl8711_add_network(struct _adapter *adapter,
439 			 struct wlan_bssid_ex *pnetwork)
440 {
441 	unsigned long irqL;
442 	struct mlme_priv *pmlmepriv = &(((struct _adapter *)adapter)->mlmepriv);
443 	struct  __queue *queue = &pmlmepriv->scanned_queue;
444 
445 	spin_lock_irqsave(&queue->lock, irqL);
446 	update_current_network(adapter, pnetwork);
447 	update_scanned_network(adapter, pnetwork);
448 	spin_unlock_irqrestore(&queue->lock, irqL);
449 }
450 
451 /*select the desired network based on the capability of the (i)bss.
452  * check items:		(1) security
453  *			(2) network_type
454  *			(3) WMM
455  *			(4) HT
456  *			(5) others
457  */
458 static int is_desired_network(struct _adapter *adapter,
459 				struct wlan_network *pnetwork)
460 {
461 	u8 wps_ie[512];
462 	uint wps_ielen;
463 	int bselected = true;
464 	struct	security_priv *psecuritypriv = &adapter->securitypriv;
465 
466 	if (psecuritypriv->wps_phase) {
467 		if (r8712_get_wps_ie(pnetwork->network.IEs,
468 		    pnetwork->network.IELength, wps_ie,
469 		    &wps_ielen))
470 			return true;
471 		return false;
472 	}
473 	if ((psecuritypriv->PrivacyAlgrthm != _NO_PRIVACY_) &&
474 		    (pnetwork->network.Privacy == 0))
475 		bselected = false;
476 	if (check_fwstate(&adapter->mlmepriv, WIFI_ADHOC_STATE)) {
477 		if (pnetwork->network.InfrastructureMode !=
478 			adapter->mlmepriv.cur_network.network.
479 			InfrastructureMode)
480 			bselected = false;
481 	}
482 	return bselected;
483 }
484 
485 /* TODO: Perry : For Power Management */
486 void r8712_atimdone_event_callback(struct _adapter *adapter, u8 *pbuf)
487 {
488 }
489 
490 void r8712_survey_event_callback(struct _adapter *adapter, u8 *pbuf)
491 {
492 	unsigned long flags;
493 	u32 len;
494 	struct wlan_bssid_ex *pnetwork;
495 	struct mlme_priv *pmlmepriv = &adapter->mlmepriv;
496 
497 	pnetwork = (struct wlan_bssid_ex *)pbuf;
498 #ifdef __BIG_ENDIAN
499 	/* endian_convert */
500 	pnetwork->Length = le32_to_cpu(pnetwork->Length);
501 	pnetwork->Ssid.SsidLength = le32_to_cpu(pnetwork->Ssid.SsidLength);
502 	pnetwork->Privacy = le32_to_cpu(pnetwork->Privacy);
503 	pnetwork->Rssi = le32_to_cpu(pnetwork->Rssi);
504 	pnetwork->NetworkTypeInUse = le32_to_cpu(pnetwork->NetworkTypeInUse);
505 	pnetwork->Configuration.ATIMWindow =
506 		 le32_to_cpu(pnetwork->Configuration.ATIMWindow);
507 	pnetwork->Configuration.BeaconPeriod =
508 		 le32_to_cpu(pnetwork->Configuration.BeaconPeriod);
509 	pnetwork->Configuration.DSConfig =
510 		 le32_to_cpu(pnetwork->Configuration.DSConfig);
511 	pnetwork->Configuration.FHConfig.DwellTime =
512 		 le32_to_cpu(pnetwork->Configuration.FHConfig.DwellTime);
513 	pnetwork->Configuration.FHConfig.HopPattern =
514 		 le32_to_cpu(pnetwork->Configuration.FHConfig.HopPattern);
515 	pnetwork->Configuration.FHConfig.HopSet =
516 		 le32_to_cpu(pnetwork->Configuration.FHConfig.HopSet);
517 	pnetwork->Configuration.FHConfig.Length =
518 		 le32_to_cpu(pnetwork->Configuration.FHConfig.Length);
519 	pnetwork->Configuration.Length =
520 		 le32_to_cpu(pnetwork->Configuration.Length);
521 	pnetwork->InfrastructureMode =
522 		 le32_to_cpu(pnetwork->InfrastructureMode);
523 	pnetwork->IELength = le32_to_cpu(pnetwork->IELength);
524 #endif
525 	len = r8712_get_wlan_bssid_ex_sz(pnetwork);
526 	if (len > sizeof(struct wlan_bssid_ex))
527 		return;
528 	spin_lock_irqsave(&pmlmepriv->lock2, flags);
529 	/* update IBSS_network 's timestamp */
530 	if (check_fwstate(pmlmepriv, WIFI_ADHOC_MASTER_STATE)) {
531 		if (!memcmp(&(pmlmepriv->cur_network.network.MacAddress),
532 		    pnetwork->MacAddress, ETH_ALEN)) {
533 			struct wlan_network *ibss_wlan = NULL;
534 
535 			memcpy(pmlmepriv->cur_network.network.IEs,
536 				pnetwork->IEs, 8);
537 			ibss_wlan = r8712_find_network(
538 						&pmlmepriv->scanned_queue,
539 						pnetwork->MacAddress);
540 			if (ibss_wlan) {
541 				memcpy(ibss_wlan->network.IEs,
542 					pnetwork->IEs, 8);
543 				goto exit;
544 			}
545 		}
546 	}
547 	/* lock pmlmepriv->lock when you accessing network_q */
548 	if (!check_fwstate(pmlmepriv, _FW_UNDER_LINKING)) {
549 		if (pnetwork->Ssid.Ssid[0] != 0) {
550 			rtl8711_add_network(adapter, pnetwork);
551 		} else {
552 			pnetwork->Ssid.SsidLength = 8;
553 			memcpy(pnetwork->Ssid.Ssid, "<hidden>", 8);
554 			rtl8711_add_network(adapter, pnetwork);
555 		}
556 	}
557 exit:
558 	spin_unlock_irqrestore(&pmlmepriv->lock2, flags);
559 }
560 
561 void r8712_surveydone_event_callback(struct _adapter *adapter, u8 *pbuf)
562 {
563 	unsigned long irqL;
564 	struct mlme_priv *pmlmepriv = &adapter->mlmepriv;
565 
566 	spin_lock_irqsave(&pmlmepriv->lock, irqL);
567 
568 	if (check_fwstate(pmlmepriv, _FW_UNDER_SURVEY)) {
569 		del_timer(&pmlmepriv->scan_to_timer);
570 
571 		_clr_fwstate_(pmlmepriv, _FW_UNDER_SURVEY);
572 	}
573 
574 	if (pmlmepriv->to_join) {
575 		if (check_fwstate(pmlmepriv, WIFI_ADHOC_STATE)) {
576 			if (!check_fwstate(pmlmepriv, _FW_LINKED)) {
577 				set_fwstate(pmlmepriv, _FW_UNDER_LINKING);
578 
579 				if (r8712_select_and_join_from_scan(pmlmepriv)
580 				    == _SUCCESS)
581 					mod_timer(&pmlmepriv->assoc_timer, jiffies +
582 						  msecs_to_jiffies(MAX_JOIN_TIMEOUT));
583 				else {
584 					struct wlan_bssid_ex *pdev_network =
585 					  &(adapter->registrypriv.dev_network);
586 					u8 *pibss =
587 						 adapter->registrypriv.
588 							dev_network.MacAddress;
589 					pmlmepriv->fw_state ^= _FW_UNDER_SURVEY;
590 					memcpy(&pdev_network->Ssid,
591 						&pmlmepriv->assoc_ssid,
592 						sizeof(struct
593 							 ndis_802_11_ssid));
594 					r8712_update_registrypriv_dev_network
595 						(adapter);
596 					r8712_generate_random_ibss(pibss);
597 					pmlmepriv->fw_state =
598 						 WIFI_ADHOC_MASTER_STATE;
599 					pmlmepriv->to_join = false;
600 				}
601 			}
602 		} else {
603 			pmlmepriv->to_join = false;
604 			set_fwstate(pmlmepriv, _FW_UNDER_LINKING);
605 			if (r8712_select_and_join_from_scan(pmlmepriv) ==
606 			    _SUCCESS)
607 				mod_timer(&pmlmepriv->assoc_timer, jiffies +
608 					  msecs_to_jiffies(MAX_JOIN_TIMEOUT));
609 			else
610 				_clr_fwstate_(pmlmepriv, _FW_UNDER_LINKING);
611 		}
612 	}
613 	spin_unlock_irqrestore(&pmlmepriv->lock, irqL);
614 }
615 
616 /*
617  *r8712_free_assoc_resources: the caller has to lock pmlmepriv->lock
618  */
619 void r8712_free_assoc_resources(struct _adapter *adapter)
620 {
621 	unsigned long irqL;
622 	struct wlan_network *pwlan = NULL;
623 	struct mlme_priv *pmlmepriv = &adapter->mlmepriv;
624 	struct sta_priv *pstapriv = &adapter->stapriv;
625 	struct wlan_network *tgt_network = &pmlmepriv->cur_network;
626 
627 	pwlan = r8712_find_network(&pmlmepriv->scanned_queue,
628 				   tgt_network->network.MacAddress);
629 
630 	if (check_fwstate(pmlmepriv, WIFI_STATION_STATE | WIFI_AP_STATE)) {
631 		struct sta_info *psta;
632 
633 		psta = r8712_get_stainfo(&adapter->stapriv,
634 					 tgt_network->network.MacAddress);
635 
636 		spin_lock_irqsave(&pstapriv->sta_hash_lock, irqL);
637 		r8712_free_stainfo(adapter,  psta);
638 		spin_unlock_irqrestore(&pstapriv->sta_hash_lock, irqL);
639 	}
640 
641 	if (check_fwstate(pmlmepriv,
642 	    WIFI_ADHOC_STATE | WIFI_ADHOC_MASTER_STATE | WIFI_AP_STATE))
643 		r8712_free_all_stainfo(adapter);
644 	if (pwlan)
645 		pwlan->fixed = false;
646 
647 	if (((check_fwstate(pmlmepriv, WIFI_ADHOC_MASTER_STATE)) &&
648 	     (adapter->stapriv.asoc_sta_count == 1)))
649 		free_network_nolock(pmlmepriv, pwlan);
650 }
651 
652 /*
653 *r8712_indicate_connect: the caller has to lock pmlmepriv->lock
654 */
655 void r8712_indicate_connect(struct _adapter *padapter)
656 {
657 	struct mlme_priv *pmlmepriv = &padapter->mlmepriv;
658 
659 	pmlmepriv->to_join = false;
660 	set_fwstate(pmlmepriv, _FW_LINKED);
661 	padapter->ledpriv.LedControlHandler(padapter, LED_CTL_LINK);
662 	r8712_os_indicate_connect(padapter);
663 	if (padapter->registrypriv.power_mgnt > PS_MODE_ACTIVE)
664 		mod_timer(&pmlmepriv->dhcp_timer,
665 			  jiffies + msecs_to_jiffies(60000));
666 }
667 
668 
669 /*
670 *r8712_ind_disconnect: the caller has to lock pmlmepriv->lock
671 */
672 void r8712_ind_disconnect(struct _adapter *padapter)
673 {
674 	struct mlme_priv *pmlmepriv = &padapter->mlmepriv;
675 
676 	if (check_fwstate(pmlmepriv, _FW_LINKED)) {
677 		_clr_fwstate_(pmlmepriv, _FW_LINKED);
678 		padapter->ledpriv.LedControlHandler(padapter, LED_CTL_NO_LINK);
679 		r8712_os_indicate_disconnect(padapter);
680 	}
681 	if (padapter->pwrctrlpriv.pwr_mode !=
682 	    padapter->registrypriv.power_mgnt) {
683 		del_timer(&pmlmepriv->dhcp_timer);
684 		r8712_set_ps_mode(padapter, padapter->registrypriv.power_mgnt,
685 				  padapter->registrypriv.smart_ps);
686 	}
687 }
688 
689 /*Notes:
690  *pnetwork : returns from r8712_joinbss_event_callback
691  *ptarget_wlan: found from scanned_queue
692  *if join_res > 0, for (fw_state==WIFI_STATION_STATE), we check if
693  *  "ptarget_sta" & "ptarget_wlan" exist.
694  *if join_res > 0, for (fw_state==WIFI_ADHOC_STATE), we only check
695  * if "ptarget_wlan" exist.
696  *if join_res > 0, update "cur_network->network" from
697  * "pnetwork->network" if (ptarget_wlan !=NULL).
698  */
699 void r8712_joinbss_event_callback(struct _adapter *adapter, u8 *pbuf)
700 {
701 	unsigned long irqL = 0, irqL2;
702 	struct sta_info	*ptarget_sta = NULL, *pcur_sta = NULL;
703 	struct sta_priv	*pstapriv = &adapter->stapriv;
704 	struct mlme_priv	*pmlmepriv = &adapter->mlmepriv;
705 	struct wlan_network	*cur_network = &pmlmepriv->cur_network;
706 	struct wlan_network	*pcur_wlan = NULL, *ptarget_wlan = NULL;
707 	unsigned int		the_same_macaddr = false;
708 	struct wlan_network *pnetwork;
709 
710 	if (sizeof(struct list_head) == 4 * sizeof(u32)) {
711 		pnetwork = kmalloc(sizeof(struct wlan_network), GFP_ATOMIC);
712 		if (!pnetwork)
713 			return;
714 		memcpy((u8 *)pnetwork + 16, (u8 *)pbuf + 8,
715 		       sizeof(struct wlan_network) - 16);
716 	} else {
717 		pnetwork = (struct wlan_network *)pbuf;
718 	}
719 
720 #ifdef __BIG_ENDIAN
721 	/* endian_convert */
722 	pnetwork->join_res = le32_to_cpu(pnetwork->join_res);
723 	pnetwork->network_type = le32_to_cpu(pnetwork->network_type);
724 	pnetwork->network.Length = le32_to_cpu(pnetwork->network.Length);
725 	pnetwork->network.Ssid.SsidLength =
726 		 le32_to_cpu(pnetwork->network.Ssid.SsidLength);
727 	pnetwork->network.Privacy = le32_to_cpu(pnetwork->network.Privacy);
728 	pnetwork->network.Rssi = le32_to_cpu(pnetwork->network.Rssi);
729 	pnetwork->network.NetworkTypeInUse =
730 		 le32_to_cpu(pnetwork->network.NetworkTypeInUse);
731 	pnetwork->network.Configuration.ATIMWindow =
732 		 le32_to_cpu(pnetwork->network.Configuration.ATIMWindow);
733 	pnetwork->network.Configuration.BeaconPeriod =
734 		 le32_to_cpu(pnetwork->network.Configuration.BeaconPeriod);
735 	pnetwork->network.Configuration.DSConfig =
736 		 le32_to_cpu(pnetwork->network.Configuration.DSConfig);
737 	pnetwork->network.Configuration.FHConfig.DwellTime =
738 		 le32_to_cpu(pnetwork->network.Configuration.FHConfig.
739 			     DwellTime);
740 	pnetwork->network.Configuration.FHConfig.HopPattern =
741 		 le32_to_cpu(pnetwork->network.Configuration.
742 			     FHConfig.HopPattern);
743 	pnetwork->network.Configuration.FHConfig.HopSet =
744 		 le32_to_cpu(pnetwork->network.Configuration.FHConfig.HopSet);
745 	pnetwork->network.Configuration.FHConfig.Length =
746 		 le32_to_cpu(pnetwork->network.Configuration.FHConfig.Length);
747 	pnetwork->network.Configuration.Length =
748 		 le32_to_cpu(pnetwork->network.Configuration.Length);
749 	pnetwork->network.InfrastructureMode =
750 		 le32_to_cpu(pnetwork->network.InfrastructureMode);
751 	pnetwork->network.IELength = le32_to_cpu(pnetwork->network.IELength);
752 #endif
753 
754 	the_same_macaddr = !memcmp(pnetwork->network.MacAddress,
755 				   cur_network->network.MacAddress, ETH_ALEN);
756 	pnetwork->network.Length =
757 		 r8712_get_wlan_bssid_ex_sz(&pnetwork->network);
758 	spin_lock_irqsave(&pmlmepriv->lock, irqL);
759 	if (pnetwork->network.Length > sizeof(struct wlan_bssid_ex))
760 		goto ignore_joinbss_callback;
761 	if (pnetwork->join_res > 0) {
762 		if (check_fwstate(pmlmepriv, _FW_UNDER_LINKING)) {
763 			/*s1. find ptarget_wlan*/
764 			if (check_fwstate(pmlmepriv, _FW_LINKED)) {
765 				if (the_same_macaddr) {
766 					ptarget_wlan =
767 					    r8712_find_network(&pmlmepriv->
768 					    scanned_queue,
769 					    cur_network->network.MacAddress);
770 				} else {
771 					pcur_wlan =
772 					     r8712_find_network(&pmlmepriv->
773 					     scanned_queue,
774 					     cur_network->network.MacAddress);
775 					pcur_wlan->fixed = false;
776 
777 					pcur_sta = r8712_get_stainfo(pstapriv,
778 					     cur_network->network.MacAddress);
779 					spin_lock_irqsave(&pstapriv->
780 						sta_hash_lock, irqL2);
781 					r8712_free_stainfo(adapter, pcur_sta);
782 					spin_unlock_irqrestore(&(pstapriv->
783 						sta_hash_lock), irqL2);
784 
785 					ptarget_wlan =
786 						 r8712_find_network(&pmlmepriv->
787 						 scanned_queue,
788 						 pnetwork->network.
789 						 MacAddress);
790 					if (ptarget_wlan)
791 						ptarget_wlan->fixed = true;
792 				}
793 			} else {
794 				ptarget_wlan = r8712_find_network(&pmlmepriv->
795 						scanned_queue,
796 						pnetwork->network.MacAddress);
797 				if (ptarget_wlan)
798 					ptarget_wlan->fixed = true;
799 			}
800 
801 			if (ptarget_wlan == NULL) {
802 				if (check_fwstate(pmlmepriv,
803 					_FW_UNDER_LINKING))
804 					pmlmepriv->fw_state ^=
805 						 _FW_UNDER_LINKING;
806 				goto ignore_joinbss_callback;
807 			}
808 
809 			/*s2. find ptarget_sta & update ptarget_sta*/
810 			if (check_fwstate(pmlmepriv, WIFI_STATION_STATE)) {
811 				if (the_same_macaddr) {
812 					ptarget_sta =
813 						 r8712_get_stainfo(pstapriv,
814 						 pnetwork->network.MacAddress);
815 					if (ptarget_sta == NULL)
816 						ptarget_sta =
817 						 r8712_alloc_stainfo(pstapriv,
818 						 pnetwork->network.MacAddress);
819 				} else {
820 					ptarget_sta =
821 						 r8712_alloc_stainfo(pstapriv,
822 						 pnetwork->network.MacAddress);
823 				}
824 				if (ptarget_sta) /*update ptarget_sta*/ {
825 					ptarget_sta->aid = pnetwork->join_res;
826 					ptarget_sta->qos_option = 1;
827 					ptarget_sta->mac_id = 5;
828 					if (adapter->securitypriv.
829 					    AuthAlgrthm == 2) {
830 						adapter->securitypriv.
831 							binstallGrpkey =
832 							 false;
833 						adapter->securitypriv.
834 							busetkipkey =
835 							 false;
836 						adapter->securitypriv.
837 							bgrpkey_handshake =
838 							 false;
839 						ptarget_sta->ieee8021x_blocked
840 							 = true;
841 						ptarget_sta->XPrivacy =
842 							 adapter->securitypriv.
843 							 PrivacyAlgrthm;
844 						memset((u8 *)&ptarget_sta->
845 							 x_UncstKey,
846 							 0,
847 							 sizeof(union Keytype));
848 						memset((u8 *)&ptarget_sta->
849 							 tkiprxmickey,
850 							 0,
851 							 sizeof(union Keytype));
852 						memset((u8 *)&ptarget_sta->
853 							 tkiptxmickey,
854 							 0,
855 							 sizeof(union Keytype));
856 						memset((u8 *)&ptarget_sta->
857 							 txpn, 0,
858 							 sizeof(union pn48));
859 						memset((u8 *)&ptarget_sta->
860 							 rxpn, 0,
861 							 sizeof(union pn48));
862 					}
863 				} else {
864 					if (check_fwstate(pmlmepriv,
865 					    _FW_UNDER_LINKING))
866 						pmlmepriv->fw_state ^=
867 							 _FW_UNDER_LINKING;
868 					goto ignore_joinbss_callback;
869 				}
870 			}
871 
872 			/*s3. update cur_network & indicate connect*/
873 			memcpy(&cur_network->network, &pnetwork->network,
874 				pnetwork->network.Length);
875 			cur_network->aid = pnetwork->join_res;
876 			/*update fw_state will clr _FW_UNDER_LINKING*/
877 			switch (pnetwork->network.InfrastructureMode) {
878 			case Ndis802_11Infrastructure:
879 				pmlmepriv->fw_state = WIFI_STATION_STATE;
880 				break;
881 			case Ndis802_11IBSS:
882 				pmlmepriv->fw_state = WIFI_ADHOC_STATE;
883 				break;
884 			default:
885 				pmlmepriv->fw_state = WIFI_NULL_STATE;
886 				break;
887 			}
888 			r8712_update_protection(adapter,
889 					  (cur_network->network.IEs) +
890 					  sizeof(struct NDIS_802_11_FIXED_IEs),
891 					  (cur_network->network.IELength));
892 			/*TODO: update HT_Capability*/
893 			update_ht_cap(adapter, cur_network->network.IEs,
894 				      cur_network->network.IELength);
895 			/*indicate connect*/
896 			if (check_fwstate(pmlmepriv, WIFI_STATION_STATE))
897 				r8712_indicate_connect(adapter);
898 			del_timer(&pmlmepriv->assoc_timer);
899 		} else {
900 			goto ignore_joinbss_callback;
901 		}
902 	} else {
903 		if (check_fwstate(pmlmepriv, _FW_UNDER_LINKING)) {
904 			mod_timer(&pmlmepriv->assoc_timer,
905 				  jiffies + msecs_to_jiffies(1));
906 			_clr_fwstate_(pmlmepriv, _FW_UNDER_LINKING);
907 		}
908 	}
909 ignore_joinbss_callback:
910 	spin_unlock_irqrestore(&pmlmepriv->lock, irqL);
911 	if (sizeof(struct list_head) == 4 * sizeof(u32))
912 		kfree(pnetwork);
913 }
914 
915 void r8712_stassoc_event_callback(struct _adapter *adapter, u8 *pbuf)
916 {
917 	unsigned long irqL;
918 	struct sta_info *psta;
919 	struct mlme_priv *pmlmepriv = &(adapter->mlmepriv);
920 	struct stassoc_event *pstassoc	= (struct stassoc_event *)pbuf;
921 
922 	/* to do: */
923 	if (!r8712_access_ctrl(&adapter->acl_list, pstassoc->macaddr))
924 		return;
925 	psta = r8712_get_stainfo(&adapter->stapriv, pstassoc->macaddr);
926 	if (psta != NULL) {
927 		/*the sta have been in sta_info_queue => do nothing
928 		 *(between drv has received this event before and
929 		 *  fw have not yet to set key to CAM_ENTRY) */
930 		return;
931 	}
932 
933 	psta = r8712_alloc_stainfo(&adapter->stapriv, pstassoc->macaddr);
934 	if (psta == NULL)
935 		return;
936 	/* to do : init sta_info variable */
937 	psta->qos_option = 0;
938 	psta->mac_id = le32_to_cpu((uint)pstassoc->cam_id);
939 	/* psta->aid = (uint)pstassoc->cam_id; */
940 
941 	if (adapter->securitypriv.AuthAlgrthm == 2)
942 		psta->XPrivacy = adapter->securitypriv.PrivacyAlgrthm;
943 	psta->ieee8021x_blocked = false;
944 	spin_lock_irqsave(&pmlmepriv->lock, irqL);
945 	if (check_fwstate(pmlmepriv, WIFI_ADHOC_MASTER_STATE) ||
946 	    check_fwstate(pmlmepriv, WIFI_ADHOC_STATE)) {
947 		if (adapter->stapriv.asoc_sta_count == 2) {
948 			/* a sta + bc/mc_stainfo (not Ibss_stainfo) */
949 			r8712_indicate_connect(adapter);
950 		}
951 	}
952 	spin_unlock_irqrestore(&pmlmepriv->lock, irqL);
953 }
954 
955 void r8712_stadel_event_callback(struct _adapter *adapter, u8 *pbuf)
956 {
957 	unsigned long irqL, irqL2;
958 	struct sta_info *psta;
959 	struct wlan_network *pwlan = NULL;
960 	struct wlan_bssid_ex *pdev_network = NULL;
961 	u8 *pibss = NULL;
962 	struct mlme_priv *pmlmepriv = &adapter->mlmepriv;
963 	struct stadel_event *pstadel = (struct stadel_event *)pbuf;
964 	struct sta_priv *pstapriv = &adapter->stapriv;
965 	struct wlan_network *tgt_network = &pmlmepriv->cur_network;
966 
967 	spin_lock_irqsave(&pmlmepriv->lock, irqL2);
968 	if (check_fwstate(pmlmepriv, WIFI_STATION_STATE)) {
969 		r8712_ind_disconnect(adapter);
970 		r8712_free_assoc_resources(adapter);
971 	}
972 	if (check_fwstate(pmlmepriv, WIFI_ADHOC_MASTER_STATE |
973 	    WIFI_ADHOC_STATE)) {
974 		psta = r8712_get_stainfo(&adapter->stapriv, pstadel->macaddr);
975 		spin_lock_irqsave(&pstapriv->sta_hash_lock, irqL);
976 		r8712_free_stainfo(adapter, psta);
977 		spin_unlock_irqrestore(&pstapriv->sta_hash_lock, irqL);
978 		if (adapter->stapriv.asoc_sta_count == 1) {
979 			/*a sta + bc/mc_stainfo (not Ibss_stainfo) */
980 			pwlan = r8712_find_network(&pmlmepriv->scanned_queue,
981 				tgt_network->network.MacAddress);
982 			if (pwlan) {
983 				pwlan->fixed = false;
984 				free_network_nolock(pmlmepriv, pwlan);
985 			}
986 			/*re-create ibss*/
987 			pdev_network = &(adapter->registrypriv.dev_network);
988 			pibss = adapter->registrypriv.dev_network.MacAddress;
989 			memcpy(pdev_network, &tgt_network->network,
990 				r8712_get_wlan_bssid_ex_sz(&tgt_network->
991 							network));
992 			memcpy(&pdev_network->Ssid,
993 				&pmlmepriv->assoc_ssid,
994 				sizeof(struct ndis_802_11_ssid));
995 			r8712_update_registrypriv_dev_network(adapter);
996 			r8712_generate_random_ibss(pibss);
997 			if (check_fwstate(pmlmepriv, WIFI_ADHOC_STATE)) {
998 				_clr_fwstate_(pmlmepriv, WIFI_ADHOC_STATE);
999 				set_fwstate(pmlmepriv, WIFI_ADHOC_MASTER_STATE);
1000 			}
1001 		}
1002 	}
1003 	spin_unlock_irqrestore(&pmlmepriv->lock, irqL2);
1004 }
1005 
1006 void r8712_cpwm_event_callback(struct _adapter *adapter, u8 *pbuf)
1007 {
1008 	struct reportpwrstate_parm *preportpwrstate =
1009 			 (struct reportpwrstate_parm *)pbuf;
1010 
1011 	preportpwrstate->state |= (u8)(adapter->pwrctrlpriv.cpwm_tog + 0x80);
1012 	r8712_cpwm_int_hdl(adapter, preportpwrstate);
1013 }
1014 
1015 /*	When the Netgear 3500 AP is with WPA2PSK-AES mode, it will send
1016  *	 the ADDBA req frame with start seq control = 0 to wifi client after
1017  *	 the WPA handshake and the seqence number of following data packet
1018  *	will be 0. In this case, the Rx reorder sequence is not longer than 0
1019  *	 and the WiFi client will drop the data with seq number 0.
1020  *	So, the 8712 firmware has to inform driver with receiving the
1021  *	 ADDBA-Req frame so that the driver can reset the
1022  *	sequence value of Rx reorder control.
1023  */
1024 void r8712_got_addbareq_event_callback(struct _adapter *adapter, u8 *pbuf)
1025 {
1026 	struct	ADDBA_Req_Report_parm *pAddbareq_pram =
1027 			 (struct ADDBA_Req_Report_parm *)pbuf;
1028 	struct	sta_info *psta;
1029 	struct	sta_priv *pstapriv = &adapter->stapriv;
1030 	struct	recv_reorder_ctrl *precvreorder_ctrl = NULL;
1031 
1032 	psta = r8712_get_stainfo(pstapriv, pAddbareq_pram->MacAddress);
1033 	if (psta) {
1034 		precvreorder_ctrl =
1035 			 &psta->recvreorder_ctrl[pAddbareq_pram->tid];
1036 		/* set the indicate_seq to 0xffff so that the rx reorder
1037 		 * can store any following data packet.
1038 		 */
1039 		precvreorder_ctrl->indicate_seq = 0xffff;
1040 	}
1041 }
1042 
1043 void r8712_wpspbc_event_callback(struct _adapter *adapter, u8 *pbuf)
1044 {
1045 	if (!adapter->securitypriv.wps_hw_pbc_pressed)
1046 		adapter->securitypriv.wps_hw_pbc_pressed = true;
1047 }
1048 
1049 void _r8712_sitesurvey_ctrl_handler(struct _adapter *adapter)
1050 {
1051 	struct mlme_priv *pmlmepriv = &adapter->mlmepriv;
1052 	struct sitesurvey_ctrl	*psitesurveyctrl = &pmlmepriv->sitesurveyctrl;
1053 	struct registry_priv	*pregistrypriv = &adapter->registrypriv;
1054 	u64 current_tx_pkts;
1055 	uint current_rx_pkts;
1056 
1057 	current_tx_pkts = (adapter->xmitpriv.tx_pkts) -
1058 			  (psitesurveyctrl->last_tx_pkts);
1059 	current_rx_pkts = (adapter->recvpriv.rx_pkts) -
1060 			  (psitesurveyctrl->last_rx_pkts);
1061 	psitesurveyctrl->last_tx_pkts = adapter->xmitpriv.tx_pkts;
1062 	psitesurveyctrl->last_rx_pkts = adapter->recvpriv.rx_pkts;
1063 	if ((current_tx_pkts > pregistrypriv->busy_thresh) ||
1064 	    (current_rx_pkts > pregistrypriv->busy_thresh))
1065 		psitesurveyctrl->traffic_busy = true;
1066 	else
1067 		psitesurveyctrl->traffic_busy = false;
1068 }
1069 
1070 void _r8712_join_timeout_handler(struct _adapter *adapter)
1071 {
1072 	unsigned long irqL;
1073 	struct mlme_priv *pmlmepriv = &adapter->mlmepriv;
1074 
1075 	if (adapter->bDriverStopped || adapter->bSurpriseRemoved)
1076 		return;
1077 	spin_lock_irqsave(&pmlmepriv->lock, irqL);
1078 	_clr_fwstate_(pmlmepriv, _FW_UNDER_LINKING);
1079 	pmlmepriv->to_join = false;
1080 	if (check_fwstate(pmlmepriv, _FW_LINKED)) {
1081 		r8712_os_indicate_disconnect(adapter);
1082 		_clr_fwstate_(pmlmepriv, _FW_LINKED);
1083 	}
1084 	if (adapter->pwrctrlpriv.pwr_mode != adapter->registrypriv.power_mgnt) {
1085 		r8712_set_ps_mode(adapter, adapter->registrypriv.power_mgnt,
1086 				  adapter->registrypriv.smart_ps);
1087 	}
1088 	spin_unlock_irqrestore(&pmlmepriv->lock, irqL);
1089 }
1090 
1091 void r8712_scan_timeout_handler (struct _adapter *adapter)
1092 {
1093 	unsigned long irqL;
1094 	struct mlme_priv *pmlmepriv = &adapter->mlmepriv;
1095 
1096 	spin_lock_irqsave(&pmlmepriv->lock, irqL);
1097 	_clr_fwstate_(pmlmepriv, _FW_UNDER_SURVEY);
1098 	pmlmepriv->to_join = false;	/* scan fail, so clear to_join flag */
1099 	spin_unlock_irqrestore(&pmlmepriv->lock, irqL);
1100 }
1101 
1102 void _r8712_dhcp_timeout_handler (struct _adapter *adapter)
1103 {
1104 	if (adapter->bDriverStopped || adapter->bSurpriseRemoved)
1105 		return;
1106 	if (adapter->pwrctrlpriv.pwr_mode != adapter->registrypriv.power_mgnt)
1107 		r8712_set_ps_mode(adapter, adapter->registrypriv.power_mgnt,
1108 			    adapter->registrypriv.smart_ps);
1109 }
1110 
1111 void _r8712_wdg_timeout_handler(struct _adapter *adapter)
1112 {
1113 	r8712_wdg_wk_cmd(adapter);
1114 }
1115 
1116 int r8712_select_and_join_from_scan(struct mlme_priv *pmlmepriv)
1117 {
1118 	struct list_head *phead;
1119 	unsigned char *dst_ssid, *src_ssid;
1120 	struct _adapter *adapter;
1121 	struct  __queue *queue = NULL;
1122 	struct wlan_network *pnetwork = NULL;
1123 	struct wlan_network *pnetwork_max_rssi = NULL;
1124 
1125 	adapter = (struct _adapter *)pmlmepriv->nic_hdl;
1126 	queue = &pmlmepriv->scanned_queue;
1127 	phead = &queue->queue;
1128 	pmlmepriv->pscanned = phead->next;
1129 	while (1) {
1130 		if (end_of_queue_search(phead, pmlmepriv->pscanned)) {
1131 			if ((pmlmepriv->assoc_by_rssi) &&
1132 			    (pnetwork_max_rssi != NULL)) {
1133 				pnetwork = pnetwork_max_rssi;
1134 				goto ask_for_joinbss;
1135 			}
1136 			return _FAIL;
1137 		}
1138 		pnetwork = container_of(pmlmepriv->pscanned,
1139 					struct wlan_network, list);
1140 		if (pnetwork == NULL)
1141 			return _FAIL;
1142 		pmlmepriv->pscanned = pmlmepriv->pscanned->next;
1143 		if (pmlmepriv->assoc_by_bssid) {
1144 			dst_ssid = pnetwork->network.MacAddress;
1145 			src_ssid = pmlmepriv->assoc_bssid;
1146 			if (!memcmp(dst_ssid, src_ssid, ETH_ALEN)) {
1147 				if (check_fwstate(pmlmepriv, _FW_LINKED)) {
1148 					if (is_same_network(&pmlmepriv->
1149 					    cur_network.network,
1150 					    &pnetwork->network)) {
1151 						_clr_fwstate_(pmlmepriv,
1152 							_FW_UNDER_LINKING);
1153 						/*r8712_indicate_connect again*/
1154 						r8712_indicate_connect(adapter);
1155 						return 2;
1156 					}
1157 					r8712_disassoc_cmd(adapter);
1158 					r8712_ind_disconnect(adapter);
1159 					r8712_free_assoc_resources(adapter);
1160 				}
1161 				goto ask_for_joinbss;
1162 			}
1163 		} else if (pmlmepriv->assoc_ssid.SsidLength == 0) {
1164 			goto ask_for_joinbss;
1165 		}
1166 		dst_ssid = pnetwork->network.Ssid.Ssid;
1167 		src_ssid = pmlmepriv->assoc_ssid.Ssid;
1168 		if ((pnetwork->network.Ssid.SsidLength ==
1169 		    pmlmepriv->assoc_ssid.SsidLength) &&
1170 		    (!memcmp(dst_ssid, src_ssid,
1171 		     pmlmepriv->assoc_ssid.SsidLength))) {
1172 			if (pmlmepriv->assoc_by_rssi) {
1173 				/* if the ssid is the same, select the bss
1174 				 *  which has the max rssi*/
1175 				if (pnetwork_max_rssi) {
1176 					if (pnetwork->network.Rssi >
1177 					    pnetwork_max_rssi->network.Rssi)
1178 						pnetwork_max_rssi = pnetwork;
1179 				} else {
1180 					pnetwork_max_rssi = pnetwork;
1181 				}
1182 			} else if (is_desired_network(adapter, pnetwork)) {
1183 				if (check_fwstate(pmlmepriv, _FW_LINKED)) {
1184 					r8712_disassoc_cmd(adapter);
1185 					r8712_free_assoc_resources(adapter);
1186 				}
1187 				goto ask_for_joinbss;
1188 			}
1189 		}
1190 	}
1191 
1192 ask_for_joinbss:
1193 	return r8712_joinbss_cmd(adapter, pnetwork);
1194 }
1195 
1196 sint r8712_set_auth(struct _adapter *adapter,
1197 		    struct security_priv *psecuritypriv)
1198 {
1199 	struct cmd_priv	*pcmdpriv = &adapter->cmdpriv;
1200 	struct cmd_obj *pcmd;
1201 	struct setauth_parm *psetauthparm;
1202 
1203 	pcmd = kmalloc(sizeof(*pcmd), GFP_ATOMIC);
1204 	if (!pcmd)
1205 		return _FAIL;
1206 
1207 	psetauthparm = kzalloc(sizeof(*psetauthparm), GFP_ATOMIC);
1208 	if (!psetauthparm) {
1209 		kfree(pcmd);
1210 		return _FAIL;
1211 	}
1212 	psetauthparm->mode = (u8)psecuritypriv->AuthAlgrthm;
1213 	pcmd->cmdcode = _SetAuth_CMD_;
1214 	pcmd->parmbuf = (unsigned char *)psetauthparm;
1215 	pcmd->cmdsz = sizeof(struct setauth_parm);
1216 	pcmd->rsp = NULL;
1217 	pcmd->rspsz = 0;
1218 	INIT_LIST_HEAD(&pcmd->list);
1219 	r8712_enqueue_cmd(pcmdpriv, pcmd);
1220 	return _SUCCESS;
1221 }
1222 
1223 sint r8712_set_key(struct _adapter *adapter,
1224 		   struct security_priv *psecuritypriv,
1225 	     sint keyid)
1226 {
1227 	struct cmd_priv *pcmdpriv = &adapter->cmdpriv;
1228 	struct cmd_obj *pcmd;
1229 	struct setkey_parm *psetkeyparm;
1230 	u8 keylen;
1231 	sint ret = _SUCCESS;
1232 
1233 	pcmd = kmalloc(sizeof(*pcmd), GFP_ATOMIC);
1234 	if (!pcmd)
1235 		return _FAIL;
1236 	psetkeyparm = kzalloc(sizeof(*psetkeyparm), GFP_ATOMIC);
1237 	if (!psetkeyparm) {
1238 		ret = _FAIL;
1239 		goto err_free_cmd;
1240 	}
1241 	if (psecuritypriv->AuthAlgrthm == 2) { /* 802.1X */
1242 		psetkeyparm->algorithm =
1243 			 (u8)psecuritypriv->XGrpPrivacy;
1244 	} else { /* WEP */
1245 		psetkeyparm->algorithm =
1246 			 (u8)psecuritypriv->PrivacyAlgrthm;
1247 	}
1248 	psetkeyparm->keyid = (u8)keyid;
1249 
1250 	switch (psetkeyparm->algorithm) {
1251 	case _WEP40_:
1252 		keylen = 5;
1253 		memcpy(psetkeyparm->key,
1254 			psecuritypriv->DefKey[keyid].skey, keylen);
1255 		break;
1256 	case _WEP104_:
1257 		keylen = 13;
1258 		memcpy(psetkeyparm->key,
1259 			psecuritypriv->DefKey[keyid].skey, keylen);
1260 		break;
1261 	case _TKIP_:
1262 		if (keyid < 1 || keyid > 2) {
1263 			ret = _FAIL;
1264 			goto err_free_parm;
1265 		}
1266 		keylen = 16;
1267 		memcpy(psetkeyparm->key,
1268 			&psecuritypriv->XGrpKey[keyid - 1], keylen);
1269 		psetkeyparm->grpkey = 1;
1270 		break;
1271 	case _AES_:
1272 		if (keyid < 1 || keyid > 2) {
1273 			ret = _FAIL;
1274 			goto err_free_parm;
1275 		}
1276 		keylen = 16;
1277 		memcpy(psetkeyparm->key,
1278 			&psecuritypriv->XGrpKey[keyid - 1], keylen);
1279 		psetkeyparm->grpkey = 1;
1280 		break;
1281 	default:
1282 		ret = _FAIL;
1283 		goto err_free_parm;
1284 	}
1285 	pcmd->cmdcode = _SetKey_CMD_;
1286 	pcmd->parmbuf = (u8 *)psetkeyparm;
1287 	pcmd->cmdsz =  (sizeof(struct setkey_parm));
1288 	pcmd->rsp = NULL;
1289 	pcmd->rspsz = 0;
1290 	INIT_LIST_HEAD(&pcmd->list);
1291 	r8712_enqueue_cmd(pcmdpriv, pcmd);
1292 	return ret;
1293 
1294 err_free_parm:
1295 	kfree(psetkeyparm);
1296 err_free_cmd:
1297 	kfree(pcmd);
1298 	return ret;
1299 }
1300 
1301 /* adjust IEs for r8712_joinbss_cmd in WMM */
1302 int r8712_restruct_wmm_ie(struct _adapter *adapter, u8 *in_ie, u8 *out_ie,
1303 		    uint in_len, uint initial_out_len)
1304 {
1305 	unsigned int ielength = 0;
1306 	unsigned int i, j;
1307 
1308 	i = 12; /* after the fixed IE */
1309 	while (i < in_len) {
1310 		ielength = initial_out_len;
1311 		if (in_ie[i] == 0xDD && in_ie[i + 2] == 0x00 &&
1312 		    in_ie[i + 3] == 0x50 && in_ie[i + 4] == 0xF2 &&
1313 		    in_ie[i + 5] == 0x02 && i + 5 < in_len) {
1314 			/*WMM element ID and OUI*/
1315 			for (j = i; j < i + 9; j++) {
1316 				out_ie[ielength] = in_ie[j];
1317 				ielength++;
1318 			}
1319 			out_ie[initial_out_len + 1] = 0x07;
1320 			out_ie[initial_out_len + 6] = 0x00;
1321 			out_ie[initial_out_len + 8] = 0x00;
1322 			break;
1323 		}
1324 		i += (in_ie[i + 1] + 2); /* to the next IE element */
1325 	}
1326 	return ielength;
1327 }
1328 
1329 /*
1330  * Ported from 8185: IsInPreAuthKeyList().
1331  *
1332  * Search by BSSID,
1333  * Return Value:
1334  *	-1		:if there is no pre-auth key in the  table
1335  *	>=0		:if there is pre-auth key, and   return the entry id
1336  */
1337 static int SecIsInPMKIDList(struct _adapter *Adapter, u8 *bssid)
1338 {
1339 	struct security_priv *psecuritypriv = &Adapter->securitypriv;
1340 	int i = 0;
1341 
1342 	do {
1343 		if (psecuritypriv->PMKIDList[i].bUsed &&
1344 		   (!memcmp(psecuritypriv->PMKIDList[i].Bssid,
1345 			    bssid, ETH_ALEN)))
1346 			break;
1347 		else
1348 			i++;
1349 	} while (i < NUM_PMKID_CACHE);
1350 
1351 	if (i == NUM_PMKID_CACHE) {
1352 		i = -1; /* Could not find. */
1353 	} else {
1354 		; /* There is one Pre-Authentication Key for the
1355 		   * specific BSSID. */
1356 	}
1357 	return i;
1358 }
1359 
1360 sint r8712_restruct_sec_ie(struct _adapter *adapter, u8 *in_ie,
1361 		     u8 *out_ie, uint in_len)
1362 {
1363 	u8 authmode = 0, match;
1364 	u8 sec_ie[255], uncst_oui[4], bkup_ie[255];
1365 	u8 wpa_oui[4] = {0x0, 0x50, 0xf2, 0x01};
1366 	uint ielength, cnt, remove_cnt;
1367 	int iEntry;
1368 	struct mlme_priv *pmlmepriv = &adapter->mlmepriv;
1369 	struct security_priv *psecuritypriv = &adapter->securitypriv;
1370 	uint ndisauthmode = psecuritypriv->ndisauthtype;
1371 	uint ndissecuritytype = psecuritypriv->ndisencryptstatus;
1372 
1373 	if ((ndisauthmode == Ndis802_11AuthModeWPA) ||
1374 	    (ndisauthmode == Ndis802_11AuthModeWPAPSK)) {
1375 		authmode = _WPA_IE_ID_;
1376 		uncst_oui[0] = 0x0;
1377 		uncst_oui[1] = 0x50;
1378 		uncst_oui[2] = 0xf2;
1379 	}
1380 	if ((ndisauthmode == Ndis802_11AuthModeWPA2) ||
1381 	    (ndisauthmode == Ndis802_11AuthModeWPA2PSK)) {
1382 		authmode = _WPA2_IE_ID_;
1383 		uncst_oui[0] = 0x0;
1384 		uncst_oui[1] = 0x0f;
1385 		uncst_oui[2] = 0xac;
1386 	}
1387 	switch (ndissecuritytype) {
1388 	case Ndis802_11Encryption1Enabled:
1389 	case Ndis802_11Encryption1KeyAbsent:
1390 		uncst_oui[3] = 0x1;
1391 		break;
1392 	case Ndis802_11Encryption2Enabled:
1393 	case Ndis802_11Encryption2KeyAbsent:
1394 		uncst_oui[3] = 0x2;
1395 		break;
1396 	case Ndis802_11Encryption3Enabled:
1397 	case Ndis802_11Encryption3KeyAbsent:
1398 		uncst_oui[3] = 0x4;
1399 		break;
1400 	default:
1401 		break;
1402 	}
1403 	/*Search required WPA or WPA2 IE and copy to sec_ie[] */
1404 	cnt = 12;
1405 	match = false;
1406 	while (cnt < in_len) {
1407 		if (in_ie[cnt] == authmode) {
1408 			if ((authmode == _WPA_IE_ID_) &&
1409 			    (!memcmp(&in_ie[cnt + 2], &wpa_oui[0], 4))) {
1410 				memcpy(&sec_ie[0], &in_ie[cnt],
1411 					in_ie[cnt + 1] + 2);
1412 				match = true;
1413 				break;
1414 			}
1415 			if (authmode == _WPA2_IE_ID_) {
1416 				memcpy(&sec_ie[0], &in_ie[cnt],
1417 					in_ie[cnt + 1] + 2);
1418 				match = true;
1419 				break;
1420 			}
1421 			if (((authmode == _WPA_IE_ID_) &&
1422 			     (!memcmp(&in_ie[cnt + 2], &wpa_oui[0], 4))) ||
1423 			     (authmode == _WPA2_IE_ID_))
1424 				memcpy(&bkup_ie[0], &in_ie[cnt],
1425 					in_ie[cnt + 1] + 2);
1426 		}
1427 		cnt += in_ie[cnt + 1] + 2; /*get next*/
1428 	}
1429 	/*restruct WPA IE or WPA2 IE in sec_ie[] */
1430 	if (match) {
1431 		if (sec_ie[0] == _WPA_IE_ID_) {
1432 			/* parsing SSN IE to select required encryption
1433 			 * algorithm, and set the bc/mc encryption algorithm */
1434 			while (true) {
1435 				/*check wpa_oui tag*/
1436 				if (memcmp(&sec_ie[2], &wpa_oui[0], 4)) {
1437 					match = false;
1438 					break;
1439 				}
1440 				if ((sec_ie[6] != 0x01) || (sec_ie[7] != 0x0)) {
1441 					/*IE Ver error*/
1442 					match = false;
1443 					break;
1444 				}
1445 				if (!memcmp(&sec_ie[8], &wpa_oui[0], 3)) {
1446 					/* get bc/mc encryption type (group
1447 					 * key type)*/
1448 					switch (sec_ie[11]) {
1449 					case 0x0: /*none*/
1450 						psecuritypriv->XGrpPrivacy =
1451 								_NO_PRIVACY_;
1452 						break;
1453 					case 0x1: /*WEP_40*/
1454 						psecuritypriv->XGrpPrivacy =
1455 								_WEP40_;
1456 						break;
1457 					case 0x2: /*TKIP*/
1458 						psecuritypriv->XGrpPrivacy =
1459 								_TKIP_;
1460 						break;
1461 					case 0x3: /*AESCCMP*/
1462 					case 0x4:
1463 						psecuritypriv->XGrpPrivacy =
1464 								_AES_;
1465 						break;
1466 					case 0x5: /*WEP_104*/
1467 						psecuritypriv->XGrpPrivacy =
1468 								_WEP104_;
1469 						break;
1470 					}
1471 				} else {
1472 					match = false;
1473 					break;
1474 				}
1475 				if (sec_ie[12] == 0x01) {
1476 					/*check the unicast encryption type*/
1477 					if (memcmp(&sec_ie[14],
1478 					    &uncst_oui[0], 4)) {
1479 						match = false;
1480 						break;
1481 
1482 					} /*else the uncst_oui is match*/
1483 				} else { /*mixed mode, unicast_enc_type > 1*/
1484 					/*select the uncst_oui and remove
1485 					 * the other uncst_oui*/
1486 					cnt = sec_ie[12];
1487 					remove_cnt = (cnt - 1) * 4;
1488 					sec_ie[12] = 0x01;
1489 					memcpy(&sec_ie[14], &uncst_oui[0], 4);
1490 					/*remove the other unicast suit*/
1491 					memcpy(&sec_ie[18],
1492 						&sec_ie[18 + remove_cnt],
1493 						sec_ie[1] - 18 + 2 -
1494 						remove_cnt);
1495 					sec_ie[1] = sec_ie[1] - remove_cnt;
1496 				}
1497 				break;
1498 			}
1499 		}
1500 		if (authmode == _WPA2_IE_ID_) {
1501 			/* parsing RSN IE to select required encryption
1502 			 * algorithm, and set the bc/mc encryption algorithm */
1503 			while (true) {
1504 				if ((sec_ie[2] != 0x01) || (sec_ie[3] != 0x0)) {
1505 					/*IE Ver error*/
1506 					match = false;
1507 					break;
1508 				}
1509 				if (!memcmp(&sec_ie[4], &uncst_oui[0], 3)) {
1510 					/*get bc/mc encryption type*/
1511 					switch (sec_ie[7]) {
1512 					case 0x1: /*WEP_40*/
1513 						psecuritypriv->XGrpPrivacy =
1514 								_WEP40_;
1515 						break;
1516 					case 0x2: /*TKIP*/
1517 						psecuritypriv->XGrpPrivacy =
1518 								_TKIP_;
1519 						break;
1520 					case 0x4: /*AESWRAP*/
1521 						psecuritypriv->XGrpPrivacy =
1522 								_AES_;
1523 						break;
1524 					case 0x5: /*WEP_104*/
1525 						psecuritypriv->XGrpPrivacy =
1526 								_WEP104_;
1527 						break;
1528 					default: /*one*/
1529 						psecuritypriv->XGrpPrivacy =
1530 								_NO_PRIVACY_;
1531 						break;
1532 					}
1533 				} else {
1534 					match = false;
1535 					break;
1536 				}
1537 				if (sec_ie[8] == 0x01) {
1538 					/*check the unicast encryption type*/
1539 					if (memcmp(&sec_ie[10],
1540 						     &uncst_oui[0], 4)) {
1541 						match = false;
1542 						break;
1543 					} /*else the uncst_oui is match*/
1544 				} else { /*mixed mode, unicast_enc_type > 1*/
1545 					/*select the uncst_oui and remove the
1546 					 * other uncst_oui*/
1547 					cnt = sec_ie[8];
1548 					remove_cnt = (cnt - 1) * 4;
1549 					sec_ie[8] = 0x01;
1550 					memcpy(&sec_ie[10], &uncst_oui[0], 4);
1551 					/*remove the other unicast suit*/
1552 					memcpy(&sec_ie[14],
1553 						&sec_ie[14 + remove_cnt],
1554 						(sec_ie[1] - 14 + 2 -
1555 						remove_cnt));
1556 					sec_ie[1] = sec_ie[1] - remove_cnt;
1557 				}
1558 				break;
1559 			}
1560 		}
1561 	}
1562 	if ((authmode == _WPA_IE_ID_) || (authmode == _WPA2_IE_ID_)) {
1563 		/*copy fixed ie*/
1564 		memcpy(out_ie, in_ie, 12);
1565 		ielength = 12;
1566 		/*copy RSN or SSN*/
1567 		if (match) {
1568 			memcpy(&out_ie[ielength], &sec_ie[0], sec_ie[1] + 2);
1569 			ielength += sec_ie[1] + 2;
1570 			if (authmode == _WPA2_IE_ID_) {
1571 				/*the Pre-Authentication bit should be zero*/
1572 				out_ie[ielength - 1] = 0;
1573 				out_ie[ielength - 2] = 0;
1574 			}
1575 			r8712_report_sec_ie(adapter, authmode, sec_ie);
1576 		}
1577 	} else {
1578 		/*copy fixed ie only*/
1579 		memcpy(out_ie, in_ie, 12);
1580 		ielength = 12;
1581 		if (psecuritypriv->wps_phase) {
1582 			memcpy(out_ie + ielength, psecuritypriv->wps_ie,
1583 			       psecuritypriv->wps_ie_len);
1584 			ielength += psecuritypriv->wps_ie_len;
1585 		}
1586 	}
1587 	iEntry = SecIsInPMKIDList(adapter, pmlmepriv->assoc_bssid);
1588 	if (iEntry < 0)
1589 		return ielength;
1590 	if (authmode == _WPA2_IE_ID_) {
1591 		out_ie[ielength] = 1;
1592 		ielength++;
1593 		out_ie[ielength] = 0;	/*PMKID count = 0x0100*/
1594 		ielength++;
1595 		memcpy(&out_ie[ielength],
1596 			&psecuritypriv->PMKIDList[iEntry].PMKID, 16);
1597 		ielength += 16;
1598 		out_ie[13] += 18;/*PMKID length = 2+16*/
1599 	}
1600 	return ielength;
1601 }
1602 
1603 void r8712_init_registrypriv_dev_network(struct _adapter *adapter)
1604 {
1605 	struct registry_priv *pregistrypriv = &adapter->registrypriv;
1606 	struct eeprom_priv *peepriv = &adapter->eeprompriv;
1607 	struct wlan_bssid_ex *pdev_network = &pregistrypriv->dev_network;
1608 	u8 *myhwaddr = myid(peepriv);
1609 
1610 	memcpy(pdev_network->MacAddress, myhwaddr, ETH_ALEN);
1611 	memcpy(&pdev_network->Ssid, &pregistrypriv->ssid,
1612 		sizeof(struct ndis_802_11_ssid));
1613 	pdev_network->Configuration.Length =
1614 			 sizeof(struct NDIS_802_11_CONFIGURATION);
1615 	pdev_network->Configuration.BeaconPeriod = 100;
1616 	pdev_network->Configuration.FHConfig.Length = 0;
1617 	pdev_network->Configuration.FHConfig.HopPattern = 0;
1618 	pdev_network->Configuration.FHConfig.HopSet = 0;
1619 	pdev_network->Configuration.FHConfig.DwellTime = 0;
1620 }
1621 
1622 void r8712_update_registrypriv_dev_network(struct _adapter *adapter)
1623 {
1624 	int sz = 0;
1625 	struct registry_priv	*pregistrypriv = &adapter->registrypriv;
1626 	struct wlan_bssid_ex	*pdev_network = &pregistrypriv->dev_network;
1627 	struct security_priv	*psecuritypriv = &adapter->securitypriv;
1628 	struct wlan_network	*cur_network = &adapter->mlmepriv.cur_network;
1629 
1630 	pdev_network->Privacy = cpu_to_le32(psecuritypriv->PrivacyAlgrthm
1631 					    > 0 ? 1 : 0); /* adhoc no 802.1x */
1632 	pdev_network->Rssi = 0;
1633 	switch (pregistrypriv->wireless_mode) {
1634 	case WIRELESS_11B:
1635 		pdev_network->NetworkTypeInUse = cpu_to_le32(Ndis802_11DS);
1636 		break;
1637 	case WIRELESS_11G:
1638 	case WIRELESS_11BG:
1639 		pdev_network->NetworkTypeInUse = cpu_to_le32(Ndis802_11OFDM24);
1640 		break;
1641 	case WIRELESS_11A:
1642 		pdev_network->NetworkTypeInUse = cpu_to_le32(Ndis802_11OFDM5);
1643 		break;
1644 	default:
1645 		/* TODO */
1646 		break;
1647 	}
1648 	pdev_network->Configuration.DSConfig = cpu_to_le32(
1649 					       pregistrypriv->channel);
1650 	if (cur_network->network.InfrastructureMode == Ndis802_11IBSS)
1651 		pdev_network->Configuration.ATIMWindow = cpu_to_le32(3);
1652 	pdev_network->InfrastructureMode = cpu_to_le32(
1653 				cur_network->network.InfrastructureMode);
1654 	/* 1. Supported rates
1655 	 * 2. IE
1656 	 */
1657 	sz = r8712_generate_ie(pregistrypriv);
1658 	pdev_network->IELength = sz;
1659 	pdev_network->Length = r8712_get_wlan_bssid_ex_sz(pdev_network);
1660 }
1661 
1662 /*the function is at passive_level*/
1663 void r8712_joinbss_reset(struct _adapter *padapter)
1664 {
1665 	int i;
1666 	struct mlme_priv	*pmlmepriv = &padapter->mlmepriv;
1667 	struct ht_priv		*phtpriv = &pmlmepriv->htpriv;
1668 
1669 	/* todo: if you want to do something io/reg/hw setting before join_bss,
1670 	 * please add code here */
1671 	phtpriv->ampdu_enable = false;/*reset to disabled*/
1672 	for (i = 0; i < 16; i++)
1673 		phtpriv->baddbareq_issued[i] = false;/*reset it*/
1674 	if (phtpriv->ht_option) {
1675 		/* validate  usb rx aggregation */
1676 		r8712_write8(padapter, 0x102500D9, 48);/*TH = 48 pages, 6k*/
1677 	} else {
1678 		/* invalidate  usb rx aggregation */
1679 		/* TH=1 => means that invalidate usb rx aggregation */
1680 		r8712_write8(padapter, 0x102500D9, 1);
1681 	}
1682 }
1683 
1684 /*the function is >= passive_level*/
1685 unsigned int r8712_restructure_ht_ie(struct _adapter *padapter, u8 *in_ie,
1686 				     u8 *out_ie, uint in_len, uint *pout_len)
1687 {
1688 	u32 ielen, out_len;
1689 	unsigned char *p;
1690 	struct ieee80211_ht_cap ht_capie;
1691 	unsigned char WMM_IE[] = {0x00, 0x50, 0xf2, 0x02, 0x00, 0x01, 0x00};
1692 	struct mlme_priv *pmlmepriv = &padapter->mlmepriv;
1693 	struct qos_priv *pqospriv = &pmlmepriv->qospriv;
1694 	struct ht_priv *phtpriv = &pmlmepriv->htpriv;
1695 
1696 	phtpriv->ht_option = 0;
1697 	p = r8712_get_ie(in_ie + 12, _HT_CAPABILITY_IE_, &ielen, in_len - 12);
1698 	if (p && (ielen > 0)) {
1699 		if (pqospriv->qos_option == 0) {
1700 			out_len = *pout_len;
1701 			r8712_set_ie(out_ie + out_len, _VENDOR_SPECIFIC_IE_,
1702 				     _WMM_IE_Length_, WMM_IE, pout_len);
1703 			pqospriv->qos_option = 1;
1704 		}
1705 		out_len = *pout_len;
1706 		memset(&ht_capie, 0, sizeof(struct ieee80211_ht_cap));
1707 		ht_capie.cap_info = IEEE80211_HT_CAP_SUP_WIDTH |
1708 				    IEEE80211_HT_CAP_SGI_20 |
1709 				    IEEE80211_HT_CAP_SGI_40 |
1710 				    IEEE80211_HT_CAP_TX_STBC |
1711 				    IEEE80211_HT_CAP_MAX_AMSDU |
1712 				    IEEE80211_HT_CAP_DSSSCCK40;
1713 		ht_capie.ampdu_params_info = (IEEE80211_HT_CAP_AMPDU_FACTOR &
1714 				0x03) | (IEEE80211_HT_CAP_AMPDU_DENSITY & 0x00);
1715 		r8712_set_ie(out_ie + out_len, _HT_CAPABILITY_IE_,
1716 			     sizeof(struct ieee80211_ht_cap),
1717 			     (unsigned char *)&ht_capie, pout_len);
1718 		phtpriv->ht_option = 1;
1719 	}
1720 	return phtpriv->ht_option;
1721 }
1722 
1723 /* the function is > passive_level (in critical_section) */
1724 static void update_ht_cap(struct _adapter *padapter, u8 *pie, uint ie_len)
1725 {
1726 	u8 *p, max_ampdu_sz;
1727 	int i, len;
1728 	struct sta_info *bmc_sta, *psta;
1729 	struct ieee80211_ht_cap *pht_capie;
1730 	struct recv_reorder_ctrl *preorder_ctrl;
1731 	struct mlme_priv *pmlmepriv = &padapter->mlmepriv;
1732 	struct ht_priv *phtpriv = &pmlmepriv->htpriv;
1733 	struct registry_priv *pregistrypriv = &padapter->registrypriv;
1734 	struct wlan_network *pcur_network = &(pmlmepriv->cur_network);
1735 
1736 	if (!phtpriv->ht_option)
1737 		return;
1738 	/* maybe needs check if ap supports rx ampdu. */
1739 	if (!phtpriv->ampdu_enable &&
1740 	    (pregistrypriv->ampdu_enable == 1))
1741 		phtpriv->ampdu_enable = true;
1742 	/*check Max Rx A-MPDU Size*/
1743 	len = 0;
1744 	p = r8712_get_ie(pie + sizeof(struct NDIS_802_11_FIXED_IEs),
1745 				_HT_CAPABILITY_IE_,
1746 				&len, ie_len -
1747 				sizeof(struct NDIS_802_11_FIXED_IEs));
1748 	if (p && len > 0) {
1749 		pht_capie = (struct ieee80211_ht_cap *)(p + 2);
1750 		max_ampdu_sz = (pht_capie->ampdu_params_info &
1751 				IEEE80211_HT_CAP_AMPDU_FACTOR);
1752 		/* max_ampdu_sz (kbytes); */
1753 		max_ampdu_sz = 1 << (max_ampdu_sz + 3);
1754 		phtpriv->rx_ampdu_maxlen = max_ampdu_sz;
1755 	}
1756 	/* for A-MPDU Rx reordering buffer control for bmc_sta & sta_info
1757 	 * if A-MPDU Rx is enabled, resetting rx_ordering_ctrl
1758 	 * wstart_b(indicate_seq) to default value=0xffff
1759 	 * todo: check if AP can send A-MPDU packets
1760 	 */
1761 	bmc_sta = r8712_get_bcmc_stainfo(padapter);
1762 	if (bmc_sta) {
1763 		for (i = 0; i < 16; i++) {
1764 			preorder_ctrl = &bmc_sta->recvreorder_ctrl[i];
1765 			preorder_ctrl->indicate_seq = 0xffff;
1766 			preorder_ctrl->wend_b = 0xffff;
1767 		}
1768 	}
1769 	psta = r8712_get_stainfo(&padapter->stapriv,
1770 				 pcur_network->network.MacAddress);
1771 	if (psta) {
1772 		for (i = 0; i < 16; i++) {
1773 			preorder_ctrl = &psta->recvreorder_ctrl[i];
1774 			preorder_ctrl->indicate_seq = 0xffff;
1775 			preorder_ctrl->wend_b = 0xffff;
1776 		}
1777 	}
1778 	len = 0;
1779 	p = r8712_get_ie(pie + sizeof(struct NDIS_802_11_FIXED_IEs),
1780 		   _HT_ADD_INFO_IE_, &len,
1781 		   ie_len - sizeof(struct NDIS_802_11_FIXED_IEs));
1782 }
1783 
1784 void r8712_issue_addbareq_cmd(struct _adapter *padapter, int priority)
1785 {
1786 	struct mlme_priv *pmlmepriv = &padapter->mlmepriv;
1787 	struct ht_priv	 *phtpriv = &pmlmepriv->htpriv;
1788 
1789 	if ((phtpriv->ht_option == 1) && (phtpriv->ampdu_enable)) {
1790 		if (!phtpriv->baddbareq_issued[priority]) {
1791 			r8712_addbareq_cmd(padapter, (u8)priority);
1792 			phtpriv->baddbareq_issued[priority] = true;
1793 		}
1794 	}
1795 }
1796