1 // SPDX-License-Identifier: GPL-2.0
2 /******************************************************************************
3  *
4  * Copyright(c) 2007 - 2012 Realtek Corporation. All rights reserved.
5  *
6  ******************************************************************************/
7 #define _RTW_AP_C_
8 
9 #include <drv_types.h>
10 #include <rtw_debug.h>
11 #include <asm/unaligned.h>
12 
13 extern unsigned char RTW_WPA_OUI[];
14 extern unsigned char WMM_OUI[];
15 extern unsigned char WPS_OUI[];
16 extern unsigned char P2P_OUI[];
17 
18 void init_mlme_ap_info(struct adapter *padapter)
19 {
20 	struct mlme_priv *pmlmepriv = &padapter->mlmepriv;
21 	struct sta_priv *pstapriv = &padapter->stapriv;
22 	struct wlan_acl_pool *pacl_list = &pstapriv->acl_list;
23 
24 	spin_lock_init(&pmlmepriv->bcn_update_lock);
25 
26 	/* for ACL */
27 	_rtw_init_queue(&pacl_list->acl_node_q);
28 
29 	/* pmlmeext->bstart_bss = false; */
30 
31 	start_ap_mode(padapter);
32 }
33 
34 void free_mlme_ap_info(struct adapter *padapter)
35 {
36 	struct sta_info *psta = NULL;
37 	struct mlme_priv *pmlmepriv = &padapter->mlmepriv;
38 	struct mlme_ext_priv *pmlmeext = &padapter->mlmeextpriv;
39 	struct mlme_ext_info *pmlmeinfo = &pmlmeext->mlmext_info;
40 
41 	/* stop_ap_mode(padapter); */
42 
43 	pmlmepriv->update_bcn = false;
44 	pmlmeext->bstart_bss = false;
45 
46 	rtw_sta_flush(padapter);
47 
48 	pmlmeinfo->state = _HW_STATE_NOLINK_;
49 
50 	/* free_assoc_sta_resources */
51 	rtw_free_all_stainfo(padapter);
52 
53 	/* free bc/mc sta_info */
54 	psta = rtw_get_bcmc_stainfo(padapter);
55 	rtw_free_stainfo(padapter, psta);
56 }
57 
58 static void update_BCNTIM(struct adapter *padapter)
59 {
60 	struct sta_priv *pstapriv = &padapter->stapriv;
61 	struct mlme_ext_priv *pmlmeext = &padapter->mlmeextpriv;
62 	struct mlme_ext_info *pmlmeinfo = &pmlmeext->mlmext_info;
63 	struct wlan_bssid_ex *pnetwork_mlmeext = &pmlmeinfo->network;
64 	unsigned char *pie = pnetwork_mlmeext->IEs;
65 
66 	/* DBG_871X("%s\n", __func__); */
67 
68 	/* update TIM IE */
69 	/* if (pstapriv->tim_bitmap) */
70 	if (true) {
71 		u8 *p, *dst_ie, *premainder_ie = NULL, *pbackup_remainder_ie = NULL;
72 		__le16 tim_bitmap_le;
73 		uint offset, tmp_len, tim_ielen, tim_ie_offset, remainder_ielen;
74 
75 		tim_bitmap_le = cpu_to_le16(pstapriv->tim_bitmap);
76 
77 		p = rtw_get_ie(
78 			pie + _FIXED_IE_LENGTH_,
79 			WLAN_EID_TIM,
80 			&tim_ielen,
81 			pnetwork_mlmeext->IELength - _FIXED_IE_LENGTH_
82 		);
83 		if (p && tim_ielen > 0) {
84 			tim_ielen += 2;
85 
86 			premainder_ie = p + tim_ielen;
87 
88 			tim_ie_offset = (sint)(p - pie);
89 
90 			remainder_ielen = pnetwork_mlmeext->IELength - tim_ie_offset - tim_ielen;
91 
92 			/* append TIM IE from dst_ie offset */
93 			dst_ie = p;
94 		} else {
95 			tim_ielen = 0;
96 
97 			/* calculate head_len */
98 			offset = _FIXED_IE_LENGTH_;
99 
100 			/* get ssid_ie len */
101 			p = rtw_get_ie(
102 				pie + _BEACON_IE_OFFSET_,
103 				WLAN_EID_SSID,
104 				&tmp_len,
105 				(pnetwork_mlmeext->IELength - _BEACON_IE_OFFSET_)
106 			);
107 			if (p)
108 				offset += tmp_len + 2;
109 
110 			/*  get supported rates len */
111 			p = rtw_get_ie(
112 				pie + _BEACON_IE_OFFSET_,
113 				WLAN_EID_SUPP_RATES, &tmp_len,
114 				(pnetwork_mlmeext->IELength - _BEACON_IE_OFFSET_)
115 			);
116 			if (p)
117 				offset += tmp_len + 2;
118 
119 			/* DS Parameter Set IE, len =3 */
120 			offset += 3;
121 
122 			premainder_ie = pie + offset;
123 
124 			remainder_ielen = pnetwork_mlmeext->IELength - offset - tim_ielen;
125 
126 			/* append TIM IE from offset */
127 			dst_ie = pie + offset;
128 		}
129 
130 		if (remainder_ielen > 0) {
131 			pbackup_remainder_ie = rtw_malloc(remainder_ielen);
132 			if (pbackup_remainder_ie && premainder_ie)
133 				memcpy(pbackup_remainder_ie, premainder_ie, remainder_ielen);
134 		}
135 
136 		*dst_ie++ = WLAN_EID_TIM;
137 
138 		if ((pstapriv->tim_bitmap & 0xff00) && (pstapriv->tim_bitmap & 0x00fe))
139 			tim_ielen = 5;
140 		else
141 			tim_ielen = 4;
142 
143 		*dst_ie++ = tim_ielen;
144 
145 		*dst_ie++ = 0;/* DTIM count */
146 		*dst_ie++ = 1;/* DTIM period */
147 
148 		if (pstapriv->tim_bitmap & BIT(0))/* for bc/mc frames */
149 			*dst_ie++ = BIT(0);/* bitmap ctrl */
150 		else
151 			*dst_ie++ = 0;
152 
153 		if (tim_ielen == 4) {
154 			__le16 pvb;
155 
156 			if (pstapriv->tim_bitmap & 0xff00)
157 				pvb = cpu_to_le16(pstapriv->tim_bitmap >> 8);
158 			else
159 				pvb = tim_bitmap_le;
160 
161 			*dst_ie++ = le16_to_cpu(pvb);
162 
163 		} else if (tim_ielen == 5) {
164 			memcpy(dst_ie, &tim_bitmap_le, 2);
165 			dst_ie += 2;
166 		}
167 
168 		/* copy remainder IE */
169 		if (pbackup_remainder_ie) {
170 			memcpy(dst_ie, pbackup_remainder_ie, remainder_ielen);
171 
172 			kfree(pbackup_remainder_ie);
173 		}
174 
175 		offset =  (uint)(dst_ie - pie);
176 		pnetwork_mlmeext->IELength = offset + remainder_ielen;
177 	}
178 }
179 
180 u8 chk_sta_is_alive(struct sta_info *psta);
181 u8 chk_sta_is_alive(struct sta_info *psta)
182 {
183 	#ifdef DBG_EXPIRATION_CHK
184 	DBG_871X(
185 		"sta:%pM, rssi:%d, rx:"STA_PKTS_FMT", expire_to:%u, %s%ssq_len:%u\n"
186 		, MAC_ARG(psta->hwaddr)
187 		, psta->rssi_stat.UndecoratedSmoothedPWDB
188 		/*  STA_RX_PKTS_ARG(psta) */
189 		, STA_RX_PKTS_DIFF_ARG(psta)
190 		, psta->expire_to
191 		, psta->state & WIFI_SLEEP_STATE ? "PS, " : ""
192 		, psta->state & WIFI_STA_ALIVE_CHK_STATE ? "SAC, " : ""
193 		, psta->sleepq_len
194 	);
195 	#endif
196 
197 	sta_update_last_rx_pkts(psta);
198 
199 	return true;
200 }
201 
202 void expire_timeout_chk(struct adapter *padapter)
203 {
204 	struct list_head	*phead, *plist;
205 	u8 updated = false;
206 	struct sta_info *psta = NULL;
207 	struct sta_priv *pstapriv = &padapter->stapriv;
208 	u8 chk_alive_num = 0;
209 	char chk_alive_list[NUM_STA];
210 	int i;
211 
212 	spin_lock_bh(&pstapriv->auth_list_lock);
213 
214 	phead = &pstapriv->auth_list;
215 	plist = get_next(phead);
216 
217 	/* check auth_queue */
218 	#ifdef DBG_EXPIRATION_CHK
219 	if (phead != plist) {
220 		DBG_871X(FUNC_NDEV_FMT " auth_list, cnt:%u\n",
221 			 FUNC_NDEV_ARG(padapter->pnetdev),
222 			 pstapriv->auth_list_cnt);
223 	}
224 	#endif
225 	while (phead != plist) {
226 		psta = container_of(plist, struct sta_info, auth_list);
227 
228 		plist = get_next(plist);
229 
230 		if (psta->expire_to > 0) {
231 			psta->expire_to--;
232 			if (psta->expire_to == 0) {
233 				list_del_init(&psta->auth_list);
234 				pstapriv->auth_list_cnt--;
235 
236 				DBG_871X(
237 					"auth expire %02X%02X%02X%02X%02X%02X\n",
238 					psta->hwaddr[0],
239 					psta->hwaddr[1],
240 					psta->hwaddr[2],
241 					psta->hwaddr[3],
242 					psta->hwaddr[4],
243 					psta->hwaddr[5]
244 				);
245 
246 				spin_unlock_bh(&pstapriv->auth_list_lock);
247 
248 				rtw_free_stainfo(padapter, psta);
249 
250 				spin_lock_bh(&pstapriv->auth_list_lock);
251 			}
252 		}
253 	}
254 
255 	spin_unlock_bh(&pstapriv->auth_list_lock);
256 	psta = NULL;
257 
258 	spin_lock_bh(&pstapriv->asoc_list_lock);
259 
260 	phead = &pstapriv->asoc_list;
261 	plist = get_next(phead);
262 
263 	/* check asoc_queue */
264 	#ifdef DBG_EXPIRATION_CHK
265 	if (phead != plist) {
266 		DBG_871X(FUNC_NDEV_FMT" asoc_list, cnt:%u\n"
267 			, FUNC_NDEV_ARG(padapter->pnetdev), pstapriv->asoc_list_cnt);
268 	}
269 	#endif
270 	while (phead != plist) {
271 		psta = container_of(plist, struct sta_info, asoc_list);
272 		plist = get_next(plist);
273 #ifdef CONFIG_AUTO_AP_MODE
274 		if (psta->isrc)
275 			continue;
276 #endif
277 		if (chk_sta_is_alive(psta) || !psta->expire_to) {
278 			psta->expire_to = pstapriv->expire_to;
279 			psta->keep_alive_trycnt = 0;
280 			psta->under_exist_checking = 0;
281 		} else {
282 			if (psta->expire_to > 0)
283 				psta->expire_to--;
284 		}
285 
286 		if (psta->expire_to == 0) {
287 			struct mlme_ext_priv *pmlmeext = &padapter->mlmeextpriv;
288 
289 			if (padapter->registrypriv.wifi_spec == 1) {
290 				psta->expire_to = pstapriv->expire_to;
291 				continue;
292 			}
293 
294 			if (psta->state & WIFI_SLEEP_STATE) {
295 				if (!(psta->state & WIFI_STA_ALIVE_CHK_STATE)) {
296 					/* to check if alive by another methods if station is at ps mode. */
297 					psta->expire_to = pstapriv->expire_to;
298 					psta->state |= WIFI_STA_ALIVE_CHK_STATE;
299 
300 					/* DBG_871X("alive chk, sta:%pM is at ps mode!\n", MAC_ARG(psta->hwaddr)); */
301 
302 					/* to update bcn with tim_bitmap for this station */
303 					pstapriv->tim_bitmap |= BIT(psta->aid);
304 					update_beacon(padapter, WLAN_EID_TIM, NULL, true);
305 
306 					if (!pmlmeext->active_keep_alive_check)
307 						continue;
308 				}
309 			}
310 			if (pmlmeext->active_keep_alive_check) {
311 				int stainfo_offset;
312 
313 				stainfo_offset = rtw_stainfo_offset(pstapriv, psta);
314 				if (stainfo_offset_valid(stainfo_offset))
315 					chk_alive_list[chk_alive_num++] = stainfo_offset;
316 
317 				continue;
318 			}
319 			list_del_init(&psta->asoc_list);
320 			pstapriv->asoc_list_cnt--;
321 			DBG_871X(
322 				"asoc expire %pM, state = 0x%x\n",
323 				MAC_ARG(psta->hwaddr),
324 				psta->state
325 			);
326 			updated = ap_free_sta(padapter, psta, false, WLAN_REASON_DEAUTH_LEAVING);
327 		} else {
328 			/* TODO: Aging mechanism to digest frames in sleep_q to avoid running out of xmitframe */
329 			if (psta->sleepq_len > (NR_XMITFRAME / pstapriv->asoc_list_cnt)
330 				&& padapter->xmitpriv.free_xmitframe_cnt < ((
331 					NR_XMITFRAME / pstapriv->asoc_list_cnt
332 				) / 2)
333 			) {
334 				DBG_871X(
335 					"%s sta:%pM, sleepq_len:%u, free_xmitframe_cnt:%u, asoc_list_cnt:%u, clear sleep_q\n",
336 					__func__,
337 					MAC_ARG(psta->hwaddr),
338 					psta->sleepq_len,
339 					padapter->xmitpriv.free_xmitframe_cnt,
340 					pstapriv->asoc_list_cnt
341 				);
342 				wakeup_sta_to_xmit(padapter, psta);
343 			}
344 		}
345 	}
346 
347 	spin_unlock_bh(&pstapriv->asoc_list_lock);
348 
349 	if (chk_alive_num) {
350 		u8 backup_oper_channel = 0;
351 		struct mlme_ext_priv *pmlmeext = &padapter->mlmeextpriv;
352 
353 		/* switch to correct channel of current network  before issue keep-alive frames */
354 		if (rtw_get_oper_ch(padapter) != pmlmeext->cur_channel) {
355 			backup_oper_channel = rtw_get_oper_ch(padapter);
356 			SelectChannel(padapter, pmlmeext->cur_channel);
357 		}
358 
359 		/* issue null data to check sta alive*/
360 		for (i = 0; i < chk_alive_num; i++) {
361 			int ret = _FAIL;
362 
363 			psta = rtw_get_stainfo_by_offset(pstapriv, chk_alive_list[i]);
364 			if (!(psta->state & _FW_LINKED))
365 				continue;
366 
367 			if (psta->state & WIFI_SLEEP_STATE)
368 				ret = issue_nulldata(padapter, psta->hwaddr, 0, 1, 50);
369 			else
370 				ret = issue_nulldata(padapter, psta->hwaddr, 0, 3, 50);
371 
372 			psta->keep_alive_trycnt++;
373 			if (ret == _SUCCESS) {
374 				DBG_871X(
375 					"asoc check, sta(%pM) is alive\n",
376 					MAC_ARG(psta->hwaddr)
377 					);
378 				psta->expire_to = pstapriv->expire_to;
379 				psta->keep_alive_trycnt = 0;
380 				continue;
381 			} else if (psta->keep_alive_trycnt <= 3) {
382 				DBG_871X(
383 					"ack check for asoc expire, keep_alive_trycnt =%d\n",
384 					psta->keep_alive_trycnt);
385 				psta->expire_to = 1;
386 				continue;
387 			}
388 
389 			psta->keep_alive_trycnt = 0;
390 			DBG_871X("asoc expire %pM, state = 0x%x\n", MAC_ARG(psta->hwaddr),
391 				 psta->state);
392 			spin_lock_bh(&pstapriv->asoc_list_lock);
393 			if (list_empty(&psta->asoc_list) == false) {
394 				list_del_init(&psta->asoc_list);
395 				pstapriv->asoc_list_cnt--;
396 				updated = ap_free_sta(padapter, psta, false, WLAN_REASON_DEAUTH_LEAVING);
397 			}
398 			spin_unlock_bh(&pstapriv->asoc_list_lock);
399 		}
400 
401 		if (backup_oper_channel > 0) /* back to the original operation channel */
402 			SelectChannel(padapter, backup_oper_channel);
403 	}
404 
405 	associated_clients_update(padapter, updated);
406 }
407 
408 void add_RATid(struct adapter *padapter, struct sta_info *psta, u8 rssi_level)
409 {
410 	unsigned char sta_band = 0, shortGIrate = false;
411 	unsigned int tx_ra_bitmap = 0;
412 	struct mlme_priv *pmlmepriv = &(padapter->mlmepriv);
413 	struct wlan_bssid_ex
414 		*pcur_network = (struct wlan_bssid_ex *)&pmlmepriv->cur_network.network;
415 
416 	if (!psta)
417 		return;
418 
419 	if (!(psta->state & _FW_LINKED))
420 		return;
421 
422 	rtw_hal_update_sta_rate_mask(padapter, psta);
423 	tx_ra_bitmap = psta->ra_mask;
424 
425 	shortGIrate = query_ra_short_GI(psta);
426 
427 	if (pcur_network->Configuration.DSConfig > 14) {
428 		if (tx_ra_bitmap & 0xffff000)
429 			sta_band |= WIRELESS_11_5N;
430 
431 		if (tx_ra_bitmap & 0xff0)
432 			sta_band |= WIRELESS_11A;
433 	} else {
434 		if (tx_ra_bitmap & 0xffff000)
435 			sta_band |= WIRELESS_11_24N;
436 
437 		if (tx_ra_bitmap & 0xff0)
438 			sta_band |= WIRELESS_11G;
439 
440 		if (tx_ra_bitmap & 0x0f)
441 			sta_band |= WIRELESS_11B;
442 	}
443 
444 	psta->wireless_mode = sta_band;
445 	psta->raid = networktype_to_raid_ex(padapter, psta);
446 
447 	if (psta->aid < NUM_STA) {
448 		u8 arg[4] = {0};
449 
450 		arg[0] = psta->mac_id;
451 		arg[1] = psta->raid;
452 		arg[2] = shortGIrate;
453 		arg[3] = psta->init_rate;
454 
455 		DBG_871X("%s => mac_id:%d , raid:%d , shortGIrate =%d, bitmap = 0x%x\n",
456 			__func__, psta->mac_id, psta->raid, shortGIrate, tx_ra_bitmap);
457 
458 		rtw_hal_add_ra_tid(padapter, tx_ra_bitmap, arg, rssi_level);
459 	} else {
460 		DBG_871X("station aid %d exceed the max number\n", psta->aid);
461 	}
462 }
463 
464 void update_bmc_sta(struct adapter *padapter)
465 {
466 	unsigned char network_type;
467 	int supportRateNum = 0;
468 	unsigned int tx_ra_bitmap = 0;
469 	struct mlme_priv *pmlmepriv = &(padapter->mlmepriv);
470 	struct mlme_ext_priv *pmlmeext = &(padapter->mlmeextpriv);
471 	struct mlme_ext_info *pmlmeinfo = &(pmlmeext->mlmext_info);
472 	struct wlan_bssid_ex
473 		*pcur_network = (struct wlan_bssid_ex *)&pmlmepriv->cur_network.network;
474 	struct sta_info *psta = rtw_get_bcmc_stainfo(padapter);
475 
476 	if (psta) {
477 		psta->aid = 0;/* default set to 0 */
478 		/* psta->mac_id = psta->aid+4; */
479 		psta->mac_id = psta->aid + 1;/* mac_id = 1 for bc/mc stainfo */
480 
481 		pmlmeinfo->FW_sta_info[psta->mac_id].psta = psta;
482 
483 		psta->qos_option = 0;
484 		psta->htpriv.ht_option = false;
485 
486 		psta->ieee8021x_blocked = 0;
487 
488 		memset((void *)&psta->sta_stats, 0, sizeof(struct stainfo_stats));
489 
490 		/* psta->dot118021XPrivacy = _NO_PRIVACY_;//!!! remove it, because it has been set before this. */
491 
492 		/* prepare for add_RATid */
493 		supportRateNum = rtw_get_rateset_len((u8 *)&pcur_network->SupportedRates);
494 		network_type = rtw_check_network_type(
495 			(u8 *)&pcur_network->SupportedRates,
496 			supportRateNum,
497 			pcur_network->Configuration.DSConfig
498 		);
499 		if (IsSupportedTxCCK(network_type)) {
500 			network_type = WIRELESS_11B;
501 		} else if (network_type == WIRELESS_INVALID) { /*  error handling */
502 
503 			if (pcur_network->Configuration.DSConfig > 14)
504 				network_type = WIRELESS_11A;
505 			else
506 				network_type = WIRELESS_11B;
507 		}
508 		update_sta_basic_rate(psta, network_type);
509 		psta->wireless_mode = network_type;
510 
511 		rtw_hal_update_sta_rate_mask(padapter, psta);
512 		tx_ra_bitmap = psta->ra_mask;
513 
514 		psta->raid = networktype_to_raid_ex(padapter, psta);
515 
516 		/* ap mode */
517 		rtw_hal_set_odm_var(padapter, HAL_ODM_STA_INFO, psta, true);
518 
519 		/* if (pHalData->fw_ractrl == true) */
520 		{
521 			u8 arg[4] = {0};
522 
523 			arg[0] = psta->mac_id;
524 			arg[1] = psta->raid;
525 			arg[2] = 0;
526 			arg[3] = psta->init_rate;
527 
528 			DBG_871X("%s => mac_id:%d , raid:%d , bitmap = 0x%x\n",
529 				__func__, psta->mac_id, psta->raid, tx_ra_bitmap);
530 
531 			rtw_hal_add_ra_tid(padapter, tx_ra_bitmap, arg, 0);
532 		}
533 
534 		rtw_sta_media_status_rpt(padapter, psta, 1);
535 
536 		spin_lock_bh(&psta->lock);
537 		psta->state = _FW_LINKED;
538 		spin_unlock_bh(&psta->lock);
539 
540 	} else {
541 		DBG_871X("add_RATid_bmc_sta error!\n");
542 	}
543 }
544 
545 /* notes: */
546 /* AID: 1~MAX for sta and 0 for bc/mc in ap/adhoc mode */
547 /* MAC_ID = AID+1 for sta in ap/adhoc mode */
548 /* MAC_ID = 1 for bc/mc for sta/ap/adhoc */
549 /* MAC_ID = 0 for bssid for sta/ap/adhoc */
550 /* CAM_ID = 0~3 for default key, cmd_id =macid + 3, macid =aid+1; */
551 
552 void update_sta_info_apmode(struct adapter *padapter, struct sta_info *psta)
553 {
554 	struct mlme_priv *pmlmepriv = &(padapter->mlmepriv);
555 	struct security_priv *psecuritypriv = &padapter->securitypriv;
556 	struct mlme_ext_priv *pmlmeext = &(padapter->mlmeextpriv);
557 	struct ht_priv *phtpriv_ap = &pmlmepriv->htpriv;
558 	struct ht_priv *phtpriv_sta = &psta->htpriv;
559 	u8 cur_ldpc_cap = 0, cur_stbc_cap = 0, cur_beamform_cap = 0;
560 	/* set intf_tag to if1 */
561 	/* psta->intf_tag = 0; */
562 
563 	DBG_871X("%s\n", __func__);
564 
565 	/* psta->mac_id = psta->aid+4; */
566 	/* psta->mac_id = psta->aid+1;//alloc macid when call rtw_alloc_stainfo(), */
567 	/* release macid when call rtw_free_stainfo() */
568 
569 	/* ap mode */
570 	rtw_hal_set_odm_var(padapter, HAL_ODM_STA_INFO, psta, true);
571 
572 	if (psecuritypriv->dot11AuthAlgrthm == dot11AuthAlgrthm_8021X)
573 		psta->ieee8021x_blocked = true;
574 	else
575 		psta->ieee8021x_blocked = false;
576 
577 	/* update sta's cap */
578 
579 	/* ERP */
580 	VCS_update(padapter, psta);
581 
582 	/* HT related cap */
583 	if (phtpriv_sta->ht_option) {
584 		/* check if sta supports rx ampdu */
585 		phtpriv_sta->ampdu_enable = phtpriv_ap->ampdu_enable;
586 
587 		phtpriv_sta->rx_ampdu_min_spacing = (
588 			phtpriv_sta->ht_cap.ampdu_params_info & IEEE80211_HT_CAP_AMPDU_DENSITY
589 		) >> 2;
590 
591 		/*  bwmode */
592 		if ((
593 			phtpriv_sta->ht_cap.cap_info & phtpriv_ap->ht_cap.cap_info
594 		) & cpu_to_le16(IEEE80211_HT_CAP_SUP_WIDTH))
595 			psta->bw_mode = CHANNEL_WIDTH_40;
596 		else
597 			psta->bw_mode = CHANNEL_WIDTH_20;
598 
599 		if (pmlmeext->cur_bwmode < psta->bw_mode)
600 			psta->bw_mode = pmlmeext->cur_bwmode;
601 
602 		phtpriv_sta->ch_offset = pmlmeext->cur_ch_offset;
603 
604 		/* check if sta support s Short GI 20M */
605 		if ((
606 			phtpriv_sta->ht_cap.cap_info & phtpriv_ap->ht_cap.cap_info
607 		) & cpu_to_le16(IEEE80211_HT_CAP_SGI_20))
608 			phtpriv_sta->sgi_20m = true;
609 
610 		/* check if sta support s Short GI 40M */
611 		if ((
612 			phtpriv_sta->ht_cap.cap_info & phtpriv_ap->ht_cap.cap_info
613 		) & cpu_to_le16(IEEE80211_HT_CAP_SGI_40)) {
614 			if (psta->bw_mode == CHANNEL_WIDTH_40) /* according to psta->bw_mode */
615 				phtpriv_sta->sgi_40m = true;
616 			else
617 				phtpriv_sta->sgi_40m = false;
618 		}
619 
620 		psta->qos_option = true;
621 
622 		/*  B0 Config LDPC Coding Capability */
623 		if (TEST_FLAG(phtpriv_ap->ldpc_cap, LDPC_HT_ENABLE_TX) &&
624 			GET_HT_CAPABILITY_ELE_LDPC_CAP((u8 *)(&phtpriv_sta->ht_cap))) {
625 			SET_FLAG(cur_ldpc_cap, (LDPC_HT_ENABLE_TX | LDPC_HT_CAP_TX));
626 			DBG_871X("Enable HT Tx LDPC for STA(%d)\n", psta->aid);
627 		}
628 
629 		/*  B7 B8 B9 Config STBC setting */
630 		if (TEST_FLAG(phtpriv_ap->stbc_cap, STBC_HT_ENABLE_TX) &&
631 			GET_HT_CAPABILITY_ELE_RX_STBC((u8 *)(&phtpriv_sta->ht_cap))) {
632 			SET_FLAG(cur_stbc_cap, (STBC_HT_ENABLE_TX | STBC_HT_CAP_TX));
633 			DBG_871X("Enable HT Tx STBC for STA(%d)\n", psta->aid);
634 		}
635 	} else {
636 		phtpriv_sta->ampdu_enable = false;
637 
638 		phtpriv_sta->sgi_20m = false;
639 		phtpriv_sta->sgi_40m = false;
640 		psta->bw_mode = CHANNEL_WIDTH_20;
641 		phtpriv_sta->ch_offset = HAL_PRIME_CHNL_OFFSET_DONT_CARE;
642 	}
643 
644 	phtpriv_sta->ldpc_cap = cur_ldpc_cap;
645 	phtpriv_sta->stbc_cap = cur_stbc_cap;
646 	phtpriv_sta->beamform_cap = cur_beamform_cap;
647 
648 	/* Rx AMPDU */
649 	send_delba(padapter, 0, psta->hwaddr);/*  recipient */
650 
651 	/* TX AMPDU */
652 	send_delba(padapter, 1, psta->hwaddr);/* originator */
653 	phtpriv_sta->agg_enable_bitmap = 0x0;/* reset */
654 	phtpriv_sta->candidate_tid_bitmap = 0x0;/* reset */
655 
656 	update_ldpc_stbc_cap(psta);
657 
658 	/* todo: init other variables */
659 
660 	memset((void *)&psta->sta_stats, 0, sizeof(struct stainfo_stats));
661 
662 	/* add ratid */
663 	/* add_RATid(padapter, psta);//move to ap_sta_info_defer_update() */
664 
665 	spin_lock_bh(&psta->lock);
666 	psta->state |= _FW_LINKED;
667 	spin_unlock_bh(&psta->lock);
668 }
669 
670 static void update_ap_info(struct adapter *padapter, struct sta_info *psta)
671 {
672 	struct mlme_priv *pmlmepriv = &(padapter->mlmepriv);
673 	struct wlan_bssid_ex
674 		*pnetwork = (struct wlan_bssid_ex *)&pmlmepriv->cur_network.network;
675 	struct mlme_ext_priv *pmlmeext = &(padapter->mlmeextpriv);
676 	struct ht_priv *phtpriv_ap = &pmlmepriv->htpriv;
677 
678 	psta->wireless_mode = pmlmeext->cur_wireless_mode;
679 
680 	psta->bssratelen = rtw_get_rateset_len(pnetwork->SupportedRates);
681 	memcpy(psta->bssrateset, pnetwork->SupportedRates, psta->bssratelen);
682 
683 	/* HT related cap */
684 	if (phtpriv_ap->ht_option) {
685 		/* check if sta supports rx ampdu */
686 		/* phtpriv_ap->ampdu_enable = phtpriv_ap->ampdu_enable; */
687 
688 		/* check if sta support s Short GI 20M */
689 		if ((phtpriv_ap->ht_cap.cap_info) & cpu_to_le16(IEEE80211_HT_CAP_SGI_20))
690 			phtpriv_ap->sgi_20m = true;
691 
692 		/* check if sta support s Short GI 40M */
693 		if ((phtpriv_ap->ht_cap.cap_info) & cpu_to_le16(IEEE80211_HT_CAP_SGI_40))
694 			phtpriv_ap->sgi_40m = true;
695 
696 		psta->qos_option = true;
697 	} else {
698 		phtpriv_ap->ampdu_enable = false;
699 
700 		phtpriv_ap->sgi_20m = false;
701 		phtpriv_ap->sgi_40m = false;
702 	}
703 
704 	psta->bw_mode = pmlmeext->cur_bwmode;
705 	phtpriv_ap->ch_offset = pmlmeext->cur_ch_offset;
706 
707 	phtpriv_ap->agg_enable_bitmap = 0x0;/* reset */
708 	phtpriv_ap->candidate_tid_bitmap = 0x0;/* reset */
709 
710 	memcpy(&psta->htpriv, &pmlmepriv->htpriv, sizeof(struct ht_priv));
711 }
712 
713 static void update_hw_ht_param(struct adapter *padapter)
714 {
715 	unsigned char max_AMPDU_len;
716 	unsigned char min_MPDU_spacing;
717 	struct mlme_ext_priv *pmlmeext = &padapter->mlmeextpriv;
718 	struct mlme_ext_info *pmlmeinfo = &(pmlmeext->mlmext_info);
719 
720 	DBG_871X("%s\n", __func__);
721 
722 	/* handle A-MPDU parameter field */
723 	/*
724 		AMPDU_para [1:0]:Max AMPDU Len => 0:8k , 1:16k, 2:32k, 3:64k
725 		AMPDU_para [4:2]:Min MPDU Start Spacing
726 	*/
727 	max_AMPDU_len = pmlmeinfo->HT_caps.u.HT_cap_element.AMPDU_para & 0x03;
728 
729 	min_MPDU_spacing = (
730 		pmlmeinfo->HT_caps.u.HT_cap_element.AMPDU_para & 0x1c
731 	) >> 2;
732 
733 	rtw_hal_set_hwreg(
734 		padapter,
735 		HW_VAR_AMPDU_MIN_SPACE,
736 		(u8 *)(&min_MPDU_spacing)
737 	);
738 
739 	rtw_hal_set_hwreg(padapter, HW_VAR_AMPDU_FACTOR, (u8 *)(&max_AMPDU_len));
740 
741 	/*  */
742 	/*  Config SM Power Save setting */
743 	/*  */
744 	pmlmeinfo->SM_PS = (le16_to_cpu(
745 		pmlmeinfo->HT_caps.u.HT_cap_element.HT_caps_info
746 	) & 0x0C) >> 2;
747 	if (pmlmeinfo->SM_PS == WLAN_HT_CAP_SM_PS_STATIC)
748 		DBG_871X("%s(): WLAN_HT_CAP_SM_PS_STATIC\n", __func__);
749 
750 	/*  */
751 	/*  Config current HT Protection mode. */
752 	/*  */
753 	/* pmlmeinfo->HT_protection = pmlmeinfo->HT_info.infos[1] & 0x3; */
754 }
755 
756 void start_bss_network(struct adapter *padapter, u8 *pbuf)
757 {
758 	u8 *p;
759 	u8 val8, cur_channel, cur_bwmode, cur_ch_offset;
760 	u16 bcn_interval;
761 	u32 acparm;
762 	int	ie_len;
763 	struct registry_priv  *pregpriv = &padapter->registrypriv;
764 	struct mlme_priv *pmlmepriv = &(padapter->mlmepriv);
765 	struct security_priv *psecuritypriv = &(padapter->securitypriv);
766 	struct wlan_bssid_ex
767 		*pnetwork = (struct wlan_bssid_ex *)&pmlmepriv->cur_network.network;
768 	struct mlme_ext_priv *pmlmeext = &(padapter->mlmeextpriv);
769 	struct mlme_ext_info *pmlmeinfo = &(pmlmeext->mlmext_info);
770 	struct wlan_bssid_ex *pnetwork_mlmeext = &(pmlmeinfo->network);
771 	struct HT_info_element *pht_info = NULL;
772 	u8 cbw40_enable = 0;
773 
774 	/* DBG_871X("%s\n", __func__); */
775 
776 	bcn_interval = (u16)pnetwork->Configuration.BeaconPeriod;
777 	cur_channel = pnetwork->Configuration.DSConfig;
778 	cur_bwmode = CHANNEL_WIDTH_20;
779 	cur_ch_offset = HAL_PRIME_CHNL_OFFSET_DONT_CARE;
780 
781 	/* check if there is wps ie, */
782 	/* if there is wpsie in beacon, the hostapd will update beacon twice when stating hostapd, */
783 	/* and at first time the security ie (RSN/WPA IE) will not include in beacon. */
784 	if (!rtw_get_wps_ie(pnetwork->IEs + _FIXED_IE_LENGTH_,
785 			    pnetwork->IELength - _FIXED_IE_LENGTH_, NULL, NULL))
786 		pmlmeext->bstart_bss = true;
787 
788 	/* todo: update wmm, ht cap */
789 	/* pmlmeinfo->WMM_enable; */
790 	/* pmlmeinfo->HT_enable; */
791 	if (pmlmepriv->qospriv.qos_option)
792 		pmlmeinfo->WMM_enable = true;
793 	if (pmlmepriv->htpriv.ht_option) {
794 		pmlmeinfo->WMM_enable = true;
795 		pmlmeinfo->HT_enable = true;
796 		/* pmlmeinfo->HT_info_enable = true; */
797 		/* pmlmeinfo->HT_caps_enable = true; */
798 
799 		update_hw_ht_param(padapter);
800 	}
801 
802 	if (!pmlmepriv->cur_network.join_res) { /* setting only at  first time */
803 
804 		/* WEP Key will be set before this function, do not clear CAM. */
805 		if (
806 			(psecuritypriv->dot11PrivacyAlgrthm != _WEP40_) &&
807 			(psecuritypriv->dot11PrivacyAlgrthm != _WEP104_)
808 		)
809 			flush_all_cam_entry(padapter);	/* clear CAM */
810 	}
811 
812 	/* set MSR to AP_Mode */
813 	Set_MSR(padapter, _HW_STATE_AP_);
814 
815 	/* Set BSSID REG */
816 	rtw_hal_set_hwreg(padapter, HW_VAR_BSSID, pnetwork->MacAddress);
817 
818 	/* Set EDCA param reg */
819 	acparm = 0x002F3217; /*  VO */
820 	rtw_hal_set_hwreg(padapter, HW_VAR_AC_PARAM_VO, (u8 *)(&acparm));
821 	acparm = 0x005E4317; /*  VI */
822 	rtw_hal_set_hwreg(padapter, HW_VAR_AC_PARAM_VI, (u8 *)(&acparm));
823 	/* acparm = 0x00105320; // BE */
824 	acparm = 0x005ea42b;
825 	rtw_hal_set_hwreg(padapter, HW_VAR_AC_PARAM_BE, (u8 *)(&acparm));
826 	acparm = 0x0000A444; /*  BK */
827 	rtw_hal_set_hwreg(padapter, HW_VAR_AC_PARAM_BK, (u8 *)(&acparm));
828 
829 	/* Set Security */
830 	val8 = (
831 		psecuritypriv->dot11AuthAlgrthm == dot11AuthAlgrthm_8021X
832 	) ? 0xcc : 0xcf;
833 	rtw_hal_set_hwreg(padapter, HW_VAR_SEC_CFG, (u8 *)(&val8));
834 
835 	/* Beacon Control related register */
836 	rtw_hal_set_hwreg(padapter, HW_VAR_BEACON_INTERVAL, (u8 *)(&bcn_interval));
837 
838 	rtw_hal_set_hwreg(padapter, HW_VAR_DO_IQK, NULL);
839 
840 	if (!pmlmepriv->cur_network.join_res) { /* setting only at  first time */
841 		/* u32 initialgain; */
842 
843 		/* initialgain = 0x1e; */
844 
845 		/* disable dynamic functions, such as high power, DIG */
846 		/* Save_DM_Func_Flag(padapter); */
847 		/* Switch_DM_Func(padapter, DYNAMIC_FUNC_DISABLE, false); */
848 
849 		/* turn on all dynamic functions */
850 		Switch_DM_Func(padapter, DYNAMIC_ALL_FUNC_ENABLE, true);
851 
852 		/* rtw_hal_set_hwreg(padapter, HW_VAR_INITIAL_GAIN, (u8 *)(&initialgain)); */
853 	}
854 
855 	/* set channel, bwmode */
856 	p = rtw_get_ie(
857 		(pnetwork->IEs + sizeof(struct ndis_802_11_fix_ie)),
858 		WLAN_EID_HT_OPERATION,
859 		&ie_len,
860 		(pnetwork->IELength - sizeof(struct ndis_802_11_fix_ie))
861 	);
862 	if (p && ie_len) {
863 		pht_info = (struct HT_info_element *)(p + 2);
864 
865 		if (cur_channel > 14) {
866 			if ((pregpriv->bw_mode & 0xf0) > 0)
867 				cbw40_enable = 1;
868 		} else {
869 			if ((pregpriv->bw_mode & 0x0f) > 0)
870 				cbw40_enable = 1;
871 		}
872 
873 		if ((cbw40_enable) &&	 (pht_info->infos[0] & BIT(2))) {
874 			/* switch to the 40M Hz mode */
875 			/* pmlmeext->cur_bwmode = CHANNEL_WIDTH_40; */
876 			cur_bwmode = CHANNEL_WIDTH_40;
877 			switch (pht_info->infos[0] & 0x3) {
878 			case 1:
879 				/* pmlmeext->cur_ch_offset = HAL_PRIME_CHNL_OFFSET_LOWER; */
880 				cur_ch_offset = HAL_PRIME_CHNL_OFFSET_LOWER;
881 				break;
882 
883 			case 3:
884 				/* pmlmeext->cur_ch_offset = HAL_PRIME_CHNL_OFFSET_UPPER; */
885 				cur_ch_offset = HAL_PRIME_CHNL_OFFSET_UPPER;
886 				break;
887 
888 			default:
889 				/* pmlmeext->cur_ch_offset = HAL_PRIME_CHNL_OFFSET_DONT_CARE; */
890 				cur_ch_offset = HAL_PRIME_CHNL_OFFSET_DONT_CARE;
891 				break;
892 			}
893 		}
894 	}
895 
896 	set_channel_bwmode(padapter, cur_channel, cur_ch_offset, cur_bwmode);
897 	DBG_871X(
898 		"CH =%d, BW =%d, offset =%d\n",
899 		cur_channel,
900 		cur_bwmode,
901 		cur_ch_offset
902 	);
903 	pmlmeext->cur_channel = cur_channel;
904 	pmlmeext->cur_bwmode = cur_bwmode;
905 	pmlmeext->cur_ch_offset = cur_ch_offset;
906 	pmlmeext->cur_wireless_mode = pmlmepriv->cur_network.network_type;
907 
908 	/* let pnetwork_mlmeext == pnetwork_mlme. */
909 	memcpy(pnetwork_mlmeext, pnetwork, pnetwork->Length);
910 
911 	/* update cur_wireless_mode */
912 	update_wireless_mode(padapter);
913 
914 	/* update RRSR after set channel and bandwidth */
915 	UpdateBrateTbl(padapter, pnetwork->SupportedRates);
916 	rtw_hal_set_hwreg(padapter, HW_VAR_BASIC_RATE, pnetwork->SupportedRates);
917 
918 	/* update capability after cur_wireless_mode updated */
919 	update_capinfo(
920 		padapter,
921 		rtw_get_capability((struct wlan_bssid_ex *)pnetwork)
922 	);
923 
924 	if (pmlmeext->bstart_bss) {
925 		update_beacon(padapter, WLAN_EID_TIM, NULL, true);
926 
927 #ifndef CONFIG_INTERRUPT_BASED_TXBCN /* other case will  tx beacon when bcn interrupt coming in. */
928 		/* issue beacon frame */
929 		if (send_beacon(padapter) == _FAIL)
930 			DBG_871X("issue_beacon, fail!\n");
931 
932 #endif /* CONFIG_INTERRUPT_BASED_TXBCN */
933 	}
934 
935 	/* update bc/mc sta_info */
936 	update_bmc_sta(padapter);
937 
938 	/* pmlmeext->bstart_bss = true; */
939 }
940 
941 int rtw_check_beacon_data(struct adapter *padapter, u8 *pbuf,  int len)
942 {
943 	int ret = _SUCCESS;
944 	u8 *p;
945 	u8 *pHT_caps_ie = NULL;
946 	u8 *pHT_info_ie = NULL;
947 	struct sta_info *psta = NULL;
948 	u16 cap, ht_cap = false;
949 	uint ie_len = 0;
950 	int group_cipher, pairwise_cipher;
951 	u8 channel, network_type, supportRate[NDIS_802_11_LENGTH_RATES_EX];
952 	int supportRateNum = 0;
953 	u8 OUI1[] = {0x00, 0x50, 0xf2, 0x01};
954 	u8 WMM_PARA_IE[] = {0x00, 0x50, 0xf2, 0x02, 0x01, 0x01};
955 	struct registry_priv *pregistrypriv = &padapter->registrypriv;
956 	struct security_priv *psecuritypriv = &padapter->securitypriv;
957 	struct mlme_priv *pmlmepriv = &(padapter->mlmepriv);
958 	struct wlan_bssid_ex
959 		*pbss_network = (struct wlan_bssid_ex *)&pmlmepriv->cur_network.network;
960 	u8 *ie = pbss_network->IEs;
961 
962 	/* SSID */
963 	/* Supported rates */
964 	/* DS Params */
965 	/* WLAN_EID_COUNTRY */
966 	/* ERP Information element */
967 	/* Extended supported rates */
968 	/* WPA/WPA2 */
969 	/* Wi-Fi Wireless Multimedia Extensions */
970 	/* ht_capab, ht_oper */
971 	/* WPS IE */
972 
973 	DBG_871X("%s, len =%d\n", __func__, len);
974 
975 	if (!check_fwstate(pmlmepriv, WIFI_AP_STATE))
976 		return _FAIL;
977 
978 	if (len < 0 || len > MAX_IE_SZ)
979 		return _FAIL;
980 
981 	pbss_network->IELength = len;
982 
983 	memset(ie, 0, MAX_IE_SZ);
984 
985 	memcpy(ie, pbuf, pbss_network->IELength);
986 
987 	if (pbss_network->InfrastructureMode != Ndis802_11APMode)
988 		return _FAIL;
989 
990 	pbss_network->Rssi = 0;
991 
992 	memcpy(pbss_network->MacAddress, myid(&(padapter->eeprompriv)), ETH_ALEN);
993 
994 	/* beacon interval */
995 	p = rtw_get_beacon_interval_from_ie(ie);/* ie + 8;	8: TimeStamp, 2: Beacon Interval 2:Capability */
996 	/* pbss_network->Configuration.BeaconPeriod = le16_to_cpu(*(unsigned short*)p); */
997 	pbss_network->Configuration.BeaconPeriod = get_unaligned_le16(p);
998 
999 	/* capability */
1000 	/* cap = *(unsigned short *)rtw_get_capability_from_ie(ie); */
1001 	/* cap = le16_to_cpu(cap); */
1002 	cap = get_unaligned_le16(ie);
1003 
1004 	/* SSID */
1005 	p = rtw_get_ie(
1006 		ie + _BEACON_IE_OFFSET_,
1007 		WLAN_EID_SSID,
1008 		&ie_len,
1009 		(pbss_network->IELength - _BEACON_IE_OFFSET_)
1010 	);
1011 	if (p && ie_len > 0) {
1012 		memset(&pbss_network->Ssid, 0, sizeof(struct ndis_802_11_ssid));
1013 		memcpy(pbss_network->Ssid.Ssid, (p + 2), ie_len);
1014 		pbss_network->Ssid.SsidLength = ie_len;
1015 	}
1016 
1017 	/* channel */
1018 	channel = 0;
1019 	pbss_network->Configuration.Length = 0;
1020 	p = rtw_get_ie(
1021 		ie + _BEACON_IE_OFFSET_,
1022 		WLAN_EID_DS_PARAMS, &ie_len,
1023 		(pbss_network->IELength - _BEACON_IE_OFFSET_)
1024 	);
1025 	if (p && ie_len > 0)
1026 		channel = *(p + 2);
1027 
1028 	pbss_network->Configuration.DSConfig = channel;
1029 
1030 	memset(supportRate, 0, NDIS_802_11_LENGTH_RATES_EX);
1031 	/*  get supported rates */
1032 	p = rtw_get_ie(
1033 		ie + _BEACON_IE_OFFSET_,
1034 		WLAN_EID_SUPP_RATES,
1035 		&ie_len,
1036 		(pbss_network->IELength - _BEACON_IE_OFFSET_)
1037 	);
1038 	if (p !=  NULL) {
1039 		memcpy(supportRate, p + 2, ie_len);
1040 		supportRateNum = ie_len;
1041 	}
1042 
1043 	/* get ext_supported rates */
1044 	p = rtw_get_ie(
1045 		ie + _BEACON_IE_OFFSET_,
1046 		WLAN_EID_EXT_SUPP_RATES,
1047 		&ie_len,
1048 		pbss_network->IELength - _BEACON_IE_OFFSET_
1049 	);
1050 	if (p !=  NULL) {
1051 		memcpy(supportRate + supportRateNum, p + 2, ie_len);
1052 		supportRateNum += ie_len;
1053 	}
1054 
1055 	network_type = rtw_check_network_type(supportRate, supportRateNum, channel);
1056 
1057 	rtw_set_supported_rate(pbss_network->SupportedRates, network_type);
1058 
1059 	/* parsing ERP_IE */
1060 	p = rtw_get_ie(
1061 		ie + _BEACON_IE_OFFSET_,
1062 		WLAN_EID_ERP_INFO,
1063 		&ie_len,
1064 		(pbss_network->IELength - _BEACON_IE_OFFSET_)
1065 	);
1066 	if (p && ie_len > 0)
1067 		ERP_IE_handler(padapter, (struct ndis_80211_var_ie *)p);
1068 
1069 	/* update privacy/security */
1070 	if (cap & BIT(4))
1071 		pbss_network->Privacy = 1;
1072 	else
1073 		pbss_network->Privacy = 0;
1074 
1075 	psecuritypriv->wpa_psk = 0;
1076 
1077 	/* wpa2 */
1078 	group_cipher = 0; pairwise_cipher = 0;
1079 	psecuritypriv->wpa2_group_cipher = _NO_PRIVACY_;
1080 	psecuritypriv->wpa2_pairwise_cipher = _NO_PRIVACY_;
1081 	p = rtw_get_ie(
1082 		ie + _BEACON_IE_OFFSET_,
1083 		WLAN_EID_RSN,
1084 		&ie_len,
1085 		(pbss_network->IELength - _BEACON_IE_OFFSET_)
1086 	);
1087 	if (p && ie_len > 0) {
1088 		if (rtw_parse_wpa2_ie(
1089 			p,
1090 			ie_len + 2,
1091 			&group_cipher,
1092 			&pairwise_cipher,
1093 			NULL
1094 		) == _SUCCESS) {
1095 			psecuritypriv->dot11AuthAlgrthm = dot11AuthAlgrthm_8021X;
1096 
1097 			psecuritypriv->dot8021xalg = 1;/* psk,  todo:802.1x */
1098 			psecuritypriv->wpa_psk |= BIT(1);
1099 
1100 			psecuritypriv->wpa2_group_cipher = group_cipher;
1101 			psecuritypriv->wpa2_pairwise_cipher = pairwise_cipher;
1102 		}
1103 	}
1104 
1105 	/* wpa */
1106 	ie_len = 0;
1107 	group_cipher = 0; pairwise_cipher = 0;
1108 	psecuritypriv->wpa_group_cipher = _NO_PRIVACY_;
1109 	psecuritypriv->wpa_pairwise_cipher = _NO_PRIVACY_;
1110 	for (p = ie + _BEACON_IE_OFFSET_; ; p += (ie_len + 2)) {
1111 		p = rtw_get_ie(
1112 			p,
1113 			WLAN_EID_VENDOR_SPECIFIC,
1114 			&ie_len,
1115 			(pbss_network->IELength - _BEACON_IE_OFFSET_ - (ie_len + 2))
1116 		);
1117 		if ((p) && (!memcmp(p + 2, OUI1, 4))) {
1118 			if (rtw_parse_wpa_ie(
1119 				p,
1120 				ie_len + 2,
1121 				&group_cipher,
1122 				&pairwise_cipher,
1123 				NULL
1124 			) == _SUCCESS) {
1125 				psecuritypriv->dot11AuthAlgrthm = dot11AuthAlgrthm_8021X;
1126 
1127 				psecuritypriv->dot8021xalg = 1;/* psk,  todo:802.1x */
1128 
1129 				psecuritypriv->wpa_psk |= BIT(0);
1130 
1131 				psecuritypriv->wpa_group_cipher = group_cipher;
1132 				psecuritypriv->wpa_pairwise_cipher = pairwise_cipher;
1133 			}
1134 
1135 			break;
1136 		}
1137 
1138 		if ((p == NULL) || (ie_len == 0))
1139 				break;
1140 	}
1141 
1142 	/* wmm */
1143 	ie_len = 0;
1144 	pmlmepriv->qospriv.qos_option = 0;
1145 	if (pregistrypriv->wmm_enable) {
1146 		for (p = ie + _BEACON_IE_OFFSET_; ; p += (ie_len + 2)) {
1147 			p = rtw_get_ie(
1148 				p,
1149 				WLAN_EID_VENDOR_SPECIFIC,
1150 				&ie_len,
1151 				(pbss_network->IELength - _BEACON_IE_OFFSET_ - (ie_len + 2))
1152 			);
1153 			if ((p) && !memcmp(p + 2, WMM_PARA_IE, 6)) {
1154 				pmlmepriv->qospriv.qos_option = 1;
1155 
1156 				*(p + 8) |= BIT(7);/* QoS Info, support U-APSD */
1157 
1158 				/* disable all ACM bits since the WMM admission control is not supported */
1159 				*(p + 10) &= ~BIT(4); /* BE */
1160 				*(p + 14) &= ~BIT(4); /* BK */
1161 				*(p + 18) &= ~BIT(4); /* VI */
1162 				*(p + 22) &= ~BIT(4); /* VO */
1163 
1164 				break;
1165 			}
1166 
1167 			if ((p == NULL) || (ie_len == 0))
1168 				break;
1169 		}
1170 	}
1171 
1172 	/* parsing HT_CAP_IE */
1173 	p = rtw_get_ie(
1174 		ie + _BEACON_IE_OFFSET_,
1175 		WLAN_EID_HT_CAPABILITY,
1176 		&ie_len,
1177 		(pbss_network->IELength - _BEACON_IE_OFFSET_)
1178 	);
1179 	if (p && ie_len > 0) {
1180 		u8 rf_type = 0;
1181 		u8 max_rx_ampdu_factor = 0;
1182 		struct ieee80211_ht_cap *pht_cap = (struct ieee80211_ht_cap *)(p + 2);
1183 
1184 		pHT_caps_ie = p;
1185 
1186 		ht_cap = true;
1187 		network_type |= WIRELESS_11_24N;
1188 
1189 		rtw_ht_use_default_setting(padapter);
1190 
1191 		if (pmlmepriv->htpriv.sgi_20m == false)
1192 			pht_cap->cap_info &= cpu_to_le16(~(IEEE80211_HT_CAP_SGI_20));
1193 
1194 		if (pmlmepriv->htpriv.sgi_40m == false)
1195 			pht_cap->cap_info &= cpu_to_le16(~(IEEE80211_HT_CAP_SGI_40));
1196 
1197 		if (!TEST_FLAG(pmlmepriv->htpriv.ldpc_cap, LDPC_HT_ENABLE_RX))
1198 			pht_cap->cap_info &= cpu_to_le16(~(IEEE80211_HT_CAP_LDPC_CODING));
1199 
1200 		if (!TEST_FLAG(pmlmepriv->htpriv.stbc_cap, STBC_HT_ENABLE_TX))
1201 			pht_cap->cap_info &= cpu_to_le16(~(IEEE80211_HT_CAP_TX_STBC));
1202 
1203 		if (!TEST_FLAG(pmlmepriv->htpriv.stbc_cap, STBC_HT_ENABLE_RX))
1204 			pht_cap->cap_info &= cpu_to_le16(~(IEEE80211_HT_CAP_RX_STBC_3R));
1205 
1206 		pht_cap->ampdu_params_info &= ~(
1207 			IEEE80211_HT_CAP_AMPDU_FACTOR | IEEE80211_HT_CAP_AMPDU_DENSITY
1208 		);
1209 
1210 		if ((psecuritypriv->wpa_pairwise_cipher & WPA_CIPHER_CCMP) ||
1211 			(psecuritypriv->wpa2_pairwise_cipher & WPA_CIPHER_CCMP)) {
1212 			pht_cap->ampdu_params_info |= (IEEE80211_HT_CAP_AMPDU_DENSITY & (0x07 << 2));
1213 		} else {
1214 			pht_cap->ampdu_params_info |= (IEEE80211_HT_CAP_AMPDU_DENSITY & 0x00);
1215 		}
1216 
1217 		rtw_hal_get_def_var(
1218 			padapter,
1219 			HW_VAR_MAX_RX_AMPDU_FACTOR,
1220 			&max_rx_ampdu_factor
1221 		);
1222 		pht_cap->ampdu_params_info |= (
1223 			IEEE80211_HT_CAP_AMPDU_FACTOR & max_rx_ampdu_factor
1224 		); /* set  Max Rx AMPDU size  to 64K */
1225 
1226 		rtw_hal_get_hwreg(padapter, HW_VAR_RF_TYPE, (u8 *)(&rf_type));
1227 		if (rf_type == RF_1T1R) {
1228 			pht_cap->mcs.rx_mask[0] = 0xff;
1229 			pht_cap->mcs.rx_mask[1] = 0x0;
1230 		}
1231 
1232 		memcpy(&pmlmepriv->htpriv.ht_cap, p + 2, ie_len);
1233 	}
1234 
1235 	/* parsing HT_INFO_IE */
1236 	p = rtw_get_ie(
1237 		ie + _BEACON_IE_OFFSET_,
1238 		WLAN_EID_HT_OPERATION,
1239 		&ie_len,
1240 		(pbss_network->IELength - _BEACON_IE_OFFSET_)
1241 	);
1242 	if (p && ie_len > 0)
1243 		pHT_info_ie = p;
1244 
1245 	switch (network_type) {
1246 	case WIRELESS_11B:
1247 		pbss_network->NetworkTypeInUse = Ndis802_11DS;
1248 		break;
1249 	case WIRELESS_11G:
1250 	case WIRELESS_11BG:
1251 	case WIRELESS_11G_24N:
1252 	case WIRELESS_11BG_24N:
1253 		pbss_network->NetworkTypeInUse = Ndis802_11OFDM24;
1254 		break;
1255 	case WIRELESS_11A:
1256 		pbss_network->NetworkTypeInUse = Ndis802_11OFDM5;
1257 		break;
1258 	default:
1259 		pbss_network->NetworkTypeInUse = Ndis802_11OFDM24;
1260 		break;
1261 	}
1262 
1263 	pmlmepriv->cur_network.network_type = network_type;
1264 
1265 	pmlmepriv->htpriv.ht_option = false;
1266 
1267 	if ((psecuritypriv->wpa2_pairwise_cipher & WPA_CIPHER_TKIP) ||
1268 		      (psecuritypriv->wpa_pairwise_cipher & WPA_CIPHER_TKIP)) {
1269 		/* todo: */
1270 		/* ht_cap = false; */
1271 	}
1272 
1273 	/* ht_cap */
1274 	if (pregistrypriv->ht_enable && ht_cap) {
1275 		pmlmepriv->htpriv.ht_option = true;
1276 		pmlmepriv->qospriv.qos_option = 1;
1277 
1278 		if (pregistrypriv->ampdu_enable == 1)
1279 			pmlmepriv->htpriv.ampdu_enable = true;
1280 
1281 		HT_caps_handler(padapter, (struct ndis_80211_var_ie *)pHT_caps_ie);
1282 
1283 		HT_info_handler(padapter, (struct ndis_80211_var_ie *)pHT_info_ie);
1284 	}
1285 
1286 	pbss_network->Length = get_wlan_bssid_ex_sz(
1287 		(struct wlan_bssid_ex  *)pbss_network
1288 	);
1289 
1290 	/* issue beacon to start bss network */
1291 	/* start_bss_network(padapter, (u8 *)pbss_network); */
1292 	rtw_startbss_cmd(padapter, RTW_CMDF_WAIT_ACK);
1293 
1294 	/* alloc sta_info for ap itself */
1295 	psta = rtw_get_stainfo(&padapter->stapriv, pbss_network->MacAddress);
1296 	if (!psta) {
1297 		psta = rtw_alloc_stainfo(&padapter->stapriv, pbss_network->MacAddress);
1298 		if (psta == NULL)
1299 			return _FAIL;
1300 	}
1301 
1302 	/*  update AP's sta info */
1303 	update_ap_info(padapter, psta);
1304 
1305 	psta->state |= WIFI_AP_STATE;		/* Aries, add, fix bug of flush_cam_entry at STOP AP mode , 0724 */
1306 	rtw_indicate_connect(padapter);
1307 
1308 	pmlmepriv->cur_network.join_res = true;/* for check if already set beacon */
1309 
1310 	/* update bc/mc sta_info */
1311 	/* update_bmc_sta(padapter); */
1312 
1313 	return ret;
1314 }
1315 
1316 void rtw_set_macaddr_acl(struct adapter *padapter, int mode)
1317 {
1318 	struct sta_priv *pstapriv = &padapter->stapriv;
1319 	struct wlan_acl_pool *pacl_list = &pstapriv->acl_list;
1320 
1321 	DBG_871X("%s, mode =%d\n", __func__, mode);
1322 
1323 	pacl_list->mode = mode;
1324 }
1325 
1326 int rtw_acl_add_sta(struct adapter *padapter, u8 *addr)
1327 {
1328 	struct list_head	*plist, *phead;
1329 	u8 added = false;
1330 	int i, ret = 0;
1331 	struct rtw_wlan_acl_node *paclnode;
1332 	struct sta_priv *pstapriv = &padapter->stapriv;
1333 	struct wlan_acl_pool *pacl_list = &pstapriv->acl_list;
1334 	struct __queue	*pacl_node_q = &pacl_list->acl_node_q;
1335 
1336 	DBG_871X("%s(acl_num =%d) =%pM\n", __func__, pacl_list->num, MAC_ARG(addr));
1337 
1338 	if ((NUM_ACL - 1) < pacl_list->num)
1339 		return (-1);
1340 
1341 	spin_lock_bh(&(pacl_node_q->lock));
1342 
1343 	phead = get_list_head(pacl_node_q);
1344 	plist = get_next(phead);
1345 
1346 	while (phead != plist) {
1347 		paclnode = container_of(plist, struct rtw_wlan_acl_node, list);
1348 		plist = get_next(plist);
1349 
1350 		if (!memcmp(paclnode->addr, addr, ETH_ALEN)) {
1351 			if (paclnode->valid == true) {
1352 				added = true;
1353 				DBG_871X("%s, sta has been added\n", __func__);
1354 				break;
1355 			}
1356 		}
1357 	}
1358 
1359 	spin_unlock_bh(&(pacl_node_q->lock));
1360 
1361 	if (added)
1362 		return ret;
1363 
1364 	spin_lock_bh(&(pacl_node_q->lock));
1365 
1366 	for (i = 0; i < NUM_ACL; i++) {
1367 		paclnode = &pacl_list->aclnode[i];
1368 
1369 		if (!paclnode->valid) {
1370 			INIT_LIST_HEAD(&paclnode->list);
1371 
1372 			memcpy(paclnode->addr, addr, ETH_ALEN);
1373 
1374 			paclnode->valid = true;
1375 
1376 			list_add_tail(&paclnode->list, get_list_head(pacl_node_q));
1377 
1378 			pacl_list->num++;
1379 
1380 			break;
1381 		}
1382 	}
1383 
1384 	DBG_871X("%s, acl_num =%d\n", __func__, pacl_list->num);
1385 
1386 	spin_unlock_bh(&(pacl_node_q->lock));
1387 
1388 	return ret;
1389 }
1390 
1391 void rtw_acl_remove_sta(struct adapter *padapter, u8 *addr)
1392 {
1393 	struct list_head	*plist, *phead;
1394 	struct rtw_wlan_acl_node *paclnode;
1395 	struct sta_priv *pstapriv = &padapter->stapriv;
1396 	struct wlan_acl_pool *pacl_list = &pstapriv->acl_list;
1397 	struct __queue	*pacl_node_q = &pacl_list->acl_node_q;
1398 	u8 baddr[ETH_ALEN] = { 0xff, 0xff, 0xff, 0xff, 0xff, 0xff };	/* Baddr is used for clearing acl_list */
1399 
1400 	DBG_871X("%s(acl_num =%d) =%pM\n", __func__, pacl_list->num, MAC_ARG(addr));
1401 
1402 	spin_lock_bh(&(pacl_node_q->lock));
1403 
1404 	phead = get_list_head(pacl_node_q);
1405 	plist = get_next(phead);
1406 
1407 	while (phead != plist) {
1408 		paclnode = container_of(plist, struct rtw_wlan_acl_node, list);
1409 		plist = get_next(plist);
1410 
1411 		if (
1412 			!memcmp(paclnode->addr, addr, ETH_ALEN) ||
1413 			!memcmp(baddr, addr, ETH_ALEN)
1414 		) {
1415 			if (paclnode->valid) {
1416 				paclnode->valid = false;
1417 
1418 				list_del_init(&paclnode->list);
1419 
1420 				pacl_list->num--;
1421 			}
1422 		}
1423 	}
1424 
1425 	spin_unlock_bh(&(pacl_node_q->lock));
1426 
1427 	DBG_871X("%s, acl_num =%d\n", __func__, pacl_list->num);
1428 
1429 }
1430 
1431 u8 rtw_ap_set_pairwise_key(struct adapter *padapter, struct sta_info *psta)
1432 {
1433 	struct cmd_obj *ph2c;
1434 	struct set_stakey_parm	*psetstakey_para;
1435 	struct cmd_priv *pcmdpriv = &padapter->cmdpriv;
1436 	u8 res = _SUCCESS;
1437 
1438 	ph2c = rtw_zmalloc(sizeof(struct cmd_obj));
1439 	if (!ph2c) {
1440 		res = _FAIL;
1441 		goto exit;
1442 	}
1443 
1444 	psetstakey_para = rtw_zmalloc(sizeof(struct set_stakey_parm));
1445 	if (psetstakey_para == NULL) {
1446 		kfree(ph2c);
1447 		res = _FAIL;
1448 		goto exit;
1449 	}
1450 
1451 	init_h2fwcmd_w_parm_no_rsp(ph2c, psetstakey_para, _SetStaKey_CMD_);
1452 
1453 	psetstakey_para->algorithm = (u8)psta->dot118021XPrivacy;
1454 
1455 	memcpy(psetstakey_para->addr, psta->hwaddr, ETH_ALEN);
1456 
1457 	memcpy(psetstakey_para->key, &psta->dot118021x_UncstKey, 16);
1458 
1459 	res = rtw_enqueue_cmd(pcmdpriv, ph2c);
1460 
1461 exit:
1462 
1463 	return res;
1464 }
1465 
1466 static int rtw_ap_set_key(
1467 	struct adapter *padapter,
1468 	u8 *key,
1469 	u8 alg,
1470 	int keyid,
1471 	u8 set_tx
1472 )
1473 {
1474 	u8 keylen;
1475 	struct cmd_obj *pcmd;
1476 	struct setkey_parm *psetkeyparm;
1477 	struct cmd_priv *pcmdpriv = &(padapter->cmdpriv);
1478 	int res = _SUCCESS;
1479 
1480 	/* DBG_871X("%s\n", __func__); */
1481 
1482 	pcmd = rtw_zmalloc(sizeof(struct cmd_obj));
1483 	if (pcmd == NULL) {
1484 		res = _FAIL;
1485 		goto exit;
1486 	}
1487 	psetkeyparm = rtw_zmalloc(sizeof(struct setkey_parm));
1488 	if (psetkeyparm == NULL) {
1489 		kfree(pcmd);
1490 		res = _FAIL;
1491 		goto exit;
1492 	}
1493 
1494 	psetkeyparm->keyid = (u8)keyid;
1495 	if (is_wep_enc(alg))
1496 		padapter->securitypriv.key_mask |= BIT(psetkeyparm->keyid);
1497 
1498 	psetkeyparm->algorithm = alg;
1499 
1500 	psetkeyparm->set_tx = set_tx;
1501 
1502 	switch (alg) {
1503 	case _WEP40_:
1504 		keylen = 5;
1505 		break;
1506 	case _WEP104_:
1507 		keylen = 13;
1508 		break;
1509 	case _TKIP_:
1510 	case _TKIP_WTMIC_:
1511 	case _AES_:
1512 	default:
1513 		keylen = 16;
1514 	}
1515 
1516 	memcpy(&(psetkeyparm->key[0]), key, keylen);
1517 
1518 	pcmd->cmdcode = _SetKey_CMD_;
1519 	pcmd->parmbuf = (u8 *)psetkeyparm;
1520 	pcmd->cmdsz =  (sizeof(struct setkey_parm));
1521 	pcmd->rsp = NULL;
1522 	pcmd->rspsz = 0;
1523 
1524 	INIT_LIST_HEAD(&pcmd->list);
1525 
1526 	res = rtw_enqueue_cmd(pcmdpriv, pcmd);
1527 
1528 exit:
1529 
1530 	return res;
1531 }
1532 
1533 int rtw_ap_set_group_key(struct adapter *padapter, u8 *key, u8 alg, int keyid)
1534 {
1535 	DBG_871X("%s\n", __func__);
1536 
1537 	return rtw_ap_set_key(padapter, key, alg, keyid, 1);
1538 }
1539 
1540 int rtw_ap_set_wep_key(
1541 	struct adapter *padapter,
1542 	u8 *key,
1543 	u8 keylen,
1544 	int keyid,
1545 	u8 set_tx
1546 )
1547 {
1548 	u8 alg;
1549 
1550 	switch (keylen) {
1551 	case 5:
1552 		alg = _WEP40_;
1553 		break;
1554 	case 13:
1555 		alg = _WEP104_;
1556 		break;
1557 	default:
1558 		alg = _NO_PRIVACY_;
1559 	}
1560 
1561 	DBG_871X("%s\n", __func__);
1562 
1563 	return rtw_ap_set_key(padapter, key, alg, keyid, set_tx);
1564 }
1565 
1566 static void update_bcn_fixed_ie(struct adapter *padapter)
1567 {
1568 	DBG_871X("%s\n", __func__);
1569 }
1570 
1571 static void update_bcn_erpinfo_ie(struct adapter *padapter)
1572 {
1573 	struct mlme_priv *pmlmepriv = &(padapter->mlmepriv);
1574 	struct mlme_ext_priv *pmlmeext = &(padapter->mlmeextpriv);
1575 	struct mlme_ext_info *pmlmeinfo = &(pmlmeext->mlmext_info);
1576 	struct wlan_bssid_ex *pnetwork = &(pmlmeinfo->network);
1577 	unsigned char *p, *ie = pnetwork->IEs;
1578 	u32 len = 0;
1579 
1580 	DBG_871X("%s, ERP_enable =%d\n", __func__, pmlmeinfo->ERP_enable);
1581 
1582 	if (!pmlmeinfo->ERP_enable)
1583 		return;
1584 
1585 	/* parsing ERP_IE */
1586 	p = rtw_get_ie(
1587 		ie + _BEACON_IE_OFFSET_,
1588 		WLAN_EID_ERP_INFO,
1589 		&len,
1590 		(pnetwork->IELength - _BEACON_IE_OFFSET_)
1591 	);
1592 	if (p && len > 0) {
1593 		struct ndis_80211_var_ie *pIE = (struct ndis_80211_var_ie *)p;
1594 
1595 		if (pmlmepriv->num_sta_non_erp == 1)
1596 			pIE->data[0] |= RTW_ERP_INFO_NON_ERP_PRESENT | RTW_ERP_INFO_USE_PROTECTION;
1597 		else
1598 			pIE->data[0] &= ~(
1599 				RTW_ERP_INFO_NON_ERP_PRESENT | RTW_ERP_INFO_USE_PROTECTION
1600 			);
1601 
1602 		if (pmlmepriv->num_sta_no_short_preamble > 0)
1603 			pIE->data[0] |= RTW_ERP_INFO_BARKER_PREAMBLE_MODE;
1604 		else
1605 			pIE->data[0] &= ~(RTW_ERP_INFO_BARKER_PREAMBLE_MODE);
1606 
1607 		ERP_IE_handler(padapter, pIE);
1608 	}
1609 }
1610 
1611 static void update_bcn_htcap_ie(struct adapter *padapter)
1612 {
1613 	DBG_871X("%s\n", __func__);
1614 }
1615 
1616 static void update_bcn_htinfo_ie(struct adapter *padapter)
1617 {
1618 	DBG_871X("%s\n", __func__);
1619 }
1620 
1621 static void update_bcn_rsn_ie(struct adapter *padapter)
1622 {
1623 	DBG_871X("%s\n", __func__);
1624 }
1625 
1626 static void update_bcn_wpa_ie(struct adapter *padapter)
1627 {
1628 	DBG_871X("%s\n", __func__);
1629 }
1630 
1631 static void update_bcn_wmm_ie(struct adapter *padapter)
1632 {
1633 	DBG_871X("%s\n", __func__);
1634 }
1635 
1636 static void update_bcn_wps_ie(struct adapter *padapter)
1637 {
1638 	u8 *pwps_ie = NULL;
1639 	u8 *pwps_ie_src;
1640 	u8 *premainder_ie;
1641 	u8 *pbackup_remainder_ie = NULL;
1642 
1643 	uint wps_ielen = 0, wps_offset, remainder_ielen;
1644 	struct mlme_priv *pmlmepriv = &(padapter->mlmepriv);
1645 	struct mlme_ext_priv *pmlmeext = &(padapter->mlmeextpriv);
1646 	struct mlme_ext_info *pmlmeinfo = &(pmlmeext->mlmext_info);
1647 	struct wlan_bssid_ex *pnetwork = &(pmlmeinfo->network);
1648 	unsigned char *ie = pnetwork->IEs;
1649 	u32 ielen = pnetwork->IELength;
1650 
1651 	DBG_871X("%s\n", __func__);
1652 
1653 	pwps_ie = rtw_get_wps_ie(
1654 		ie + _FIXED_IE_LENGTH_,
1655 		ielen - _FIXED_IE_LENGTH_,
1656 		NULL,
1657 		&wps_ielen
1658 	);
1659 
1660 	if (pwps_ie == NULL || wps_ielen == 0)
1661 		return;
1662 
1663 	pwps_ie_src = pmlmepriv->wps_beacon_ie;
1664 	if (pwps_ie_src == NULL)
1665 		return;
1666 
1667 	wps_offset = (uint)(pwps_ie - ie);
1668 
1669 	premainder_ie = pwps_ie + wps_ielen;
1670 
1671 	remainder_ielen = ielen - wps_offset - wps_ielen;
1672 
1673 	if (remainder_ielen > 0) {
1674 		pbackup_remainder_ie = rtw_malloc(remainder_ielen);
1675 		if (pbackup_remainder_ie)
1676 			memcpy(pbackup_remainder_ie, premainder_ie, remainder_ielen);
1677 	}
1678 
1679 	wps_ielen = (uint)pwps_ie_src[1];/* to get ie data len */
1680 	if ((wps_offset + wps_ielen + 2 + remainder_ielen) <= MAX_IE_SZ) {
1681 		memcpy(pwps_ie, pwps_ie_src, wps_ielen + 2);
1682 		pwps_ie += (wps_ielen+2);
1683 
1684 		if (pbackup_remainder_ie)
1685 			memcpy(pwps_ie, pbackup_remainder_ie, remainder_ielen);
1686 
1687 		/* update IELength */
1688 		pnetwork->IELength = wps_offset + (wps_ielen + 2) + remainder_ielen;
1689 	}
1690 
1691 	kfree(pbackup_remainder_ie);
1692 
1693 	/*  deal with the case without set_tx_beacon_cmd() in update_beacon() */
1694 #if defined(CONFIG_INTERRUPT_BASED_TXBCN)
1695 	if ((pmlmeinfo->state & 0x03) == WIFI_FW_AP_STATE) {
1696 		u8 sr = 0;
1697 
1698 		rtw_get_wps_attr_content(
1699 			pwps_ie_src,
1700 			wps_ielen,
1701 			WPS_ATTR_SELECTED_REGISTRAR,
1702 			(u8 *)(&sr),
1703 			NULL
1704 		);
1705 
1706 		if (sr) {
1707 			set_fwstate(pmlmepriv, WIFI_UNDER_WPS);
1708 			DBG_871X("%s, set WIFI_UNDER_WPS\n", __func__);
1709 		}
1710 	}
1711 #endif
1712 }
1713 
1714 static void update_bcn_p2p_ie(struct adapter *padapter)
1715 {
1716 }
1717 
1718 static void update_bcn_vendor_spec_ie(struct adapter *padapter, u8 *oui)
1719 {
1720 	DBG_871X("%s\n", __func__);
1721 
1722 	if (!memcmp(RTW_WPA_OUI, oui, 4))
1723 		update_bcn_wpa_ie(padapter);
1724 
1725 	else if (!memcmp(WMM_OUI, oui, 4))
1726 		update_bcn_wmm_ie(padapter);
1727 
1728 	else if (!memcmp(WPS_OUI, oui, 4))
1729 		update_bcn_wps_ie(padapter);
1730 
1731 	else if (!memcmp(P2P_OUI, oui, 4))
1732 		update_bcn_p2p_ie(padapter);
1733 
1734 	else
1735 		DBG_871X("unknown OUI type!\n");
1736 }
1737 
1738 void update_beacon(struct adapter *padapter, u8 ie_id, u8 *oui, u8 tx)
1739 {
1740 	struct mlme_priv *pmlmepriv;
1741 	struct mlme_ext_priv *pmlmeext;
1742 	/* struct mlme_ext_info *pmlmeinfo; */
1743 
1744 	/* DBG_871X("%s\n", __func__); */
1745 
1746 	if (!padapter)
1747 		return;
1748 
1749 	pmlmepriv = &(padapter->mlmepriv);
1750 	pmlmeext = &(padapter->mlmeextpriv);
1751 	/* pmlmeinfo = &(pmlmeext->mlmext_info); */
1752 
1753 	if (!pmlmeext->bstart_bss)
1754 		return;
1755 
1756 	spin_lock_bh(&pmlmepriv->bcn_update_lock);
1757 
1758 	switch (ie_id) {
1759 	case 0xFF:
1760 
1761 		update_bcn_fixed_ie(padapter);/* 8: TimeStamp, 2: Beacon Interval 2:Capability */
1762 
1763 		break;
1764 
1765 	case WLAN_EID_TIM:
1766 
1767 		update_BCNTIM(padapter);
1768 
1769 		break;
1770 
1771 	case WLAN_EID_ERP_INFO:
1772 
1773 		update_bcn_erpinfo_ie(padapter);
1774 
1775 		break;
1776 
1777 	case WLAN_EID_HT_CAPABILITY:
1778 
1779 		update_bcn_htcap_ie(padapter);
1780 
1781 		break;
1782 
1783 	case WLAN_EID_RSN:
1784 
1785 		update_bcn_rsn_ie(padapter);
1786 
1787 		break;
1788 
1789 	case WLAN_EID_HT_OPERATION:
1790 
1791 		update_bcn_htinfo_ie(padapter);
1792 
1793 		break;
1794 
1795 	case WLAN_EID_VENDOR_SPECIFIC:
1796 
1797 		update_bcn_vendor_spec_ie(padapter, oui);
1798 
1799 		break;
1800 
1801 	default:
1802 		break;
1803 	}
1804 
1805 	pmlmepriv->update_bcn = true;
1806 
1807 	spin_unlock_bh(&pmlmepriv->bcn_update_lock);
1808 
1809 #ifndef CONFIG_INTERRUPT_BASED_TXBCN
1810 	if (tx) {
1811 		/* send_beacon(padapter);//send_beacon must execute on TSR level */
1812 		set_tx_beacon_cmd(padapter);
1813 	}
1814 #endif /* CONFIG_INTERRUPT_BASED_TXBCN */
1815 }
1816 
1817 /*
1818 op_mode
1819 Set to 0 (HT pure) under the following conditions
1820 	- all STAs in the BSS are 20/40 MHz HT in 20/40 MHz BSS or
1821 	- all STAs in the BSS are 20 MHz HT in 20 MHz BSS
1822 Set to 1 (HT non-member protection) if there may be non-HT STAs
1823 	in both the primary and the secondary channel
1824 Set to 2 if only HT STAs are associated in BSS,
1825 	however and at least one 20 MHz HT STA is associated
1826 Set to 3 (HT mixed mode) when one or more non-HT STAs are associated
1827 	(currently non-GF HT station is considered as non-HT STA also)
1828 */
1829 static int rtw_ht_operation_update(struct adapter *padapter)
1830 {
1831 	u16 cur_op_mode, new_op_mode;
1832 	int op_mode_changes = 0;
1833 	struct mlme_priv *pmlmepriv = &(padapter->mlmepriv);
1834 	struct ht_priv *phtpriv_ap = &pmlmepriv->htpriv;
1835 
1836 	if (pmlmepriv->htpriv.ht_option)
1837 		return 0;
1838 
1839 	/* if (!iface->conf->ieee80211n || iface->conf->ht_op_mode_fixed) */
1840 	/*  return 0; */
1841 
1842 	DBG_871X("%s current operation mode = 0x%X\n",
1843 		   __func__, pmlmepriv->ht_op_mode);
1844 
1845 	if (!(pmlmepriv->ht_op_mode & IEEE80211_HT_OP_MODE_NON_GF_STA_PRSNT)
1846 	    && pmlmepriv->num_sta_ht_no_gf) {
1847 		pmlmepriv->ht_op_mode |=
1848 			IEEE80211_HT_OP_MODE_NON_GF_STA_PRSNT;
1849 		op_mode_changes++;
1850 	} else if ((pmlmepriv->ht_op_mode &
1851 		    IEEE80211_HT_OP_MODE_NON_GF_STA_PRSNT) &&
1852 		   pmlmepriv->num_sta_ht_no_gf == 0) {
1853 		pmlmepriv->ht_op_mode &=
1854 			~IEEE80211_HT_OP_MODE_NON_GF_STA_PRSNT;
1855 		op_mode_changes++;
1856 	}
1857 
1858 	if (!(pmlmepriv->ht_op_mode & IEEE80211_HT_OP_MODE_NON_HT_STA_PRSNT) &&
1859 	    (pmlmepriv->num_sta_no_ht || pmlmepriv->olbc_ht)) {
1860 		pmlmepriv->ht_op_mode |= IEEE80211_HT_OP_MODE_NON_HT_STA_PRSNT;
1861 		op_mode_changes++;
1862 	} else if ((pmlmepriv->ht_op_mode &
1863 		    IEEE80211_HT_OP_MODE_NON_HT_STA_PRSNT) &&
1864 		   (pmlmepriv->num_sta_no_ht == 0 && !pmlmepriv->olbc_ht)) {
1865 		pmlmepriv->ht_op_mode &=
1866 			~IEEE80211_HT_OP_MODE_NON_HT_STA_PRSNT;
1867 		op_mode_changes++;
1868 	}
1869 
1870 	/* Note: currently we switch to the MIXED op mode if HT non-greenfield
1871 	 * station is associated. Probably it's a theoretical case, since
1872 	 * it looks like all known HT STAs support greenfield.
1873 	 */
1874 	new_op_mode = 0;
1875 	if (pmlmepriv->num_sta_no_ht ||
1876 	    (pmlmepriv->ht_op_mode & IEEE80211_HT_OP_MODE_NON_GF_STA_PRSNT))
1877 		new_op_mode = IEEE80211_HT_OP_MODE_PROTECTION_NONHT_MIXED;
1878 	else if (
1879 		(le16_to_cpu(phtpriv_ap->ht_cap.cap_info) & IEEE80211_HT_CAP_SUP_WIDTH)
1880 		&& pmlmepriv->num_sta_ht_20mhz)
1881 		new_op_mode = IEEE80211_HT_OP_MODE_PROTECTION_20MHZ;
1882 	else if (pmlmepriv->olbc_ht)
1883 		new_op_mode = IEEE80211_HT_OP_MODE_PROTECTION_NONMEMBER;
1884 	else
1885 		new_op_mode = IEEE80211_HT_OP_MODE_PROTECTION_NONE;
1886 
1887 	cur_op_mode = pmlmepriv->ht_op_mode & IEEE80211_HT_OP_MODE_PROTECTION;
1888 	if (cur_op_mode != new_op_mode) {
1889 		pmlmepriv->ht_op_mode &= ~IEEE80211_HT_OP_MODE_PROTECTION;
1890 		pmlmepriv->ht_op_mode |= new_op_mode;
1891 		op_mode_changes++;
1892 	}
1893 
1894 	DBG_871X("%s new operation mode = 0x%X changes =%d\n",
1895 		   __func__, pmlmepriv->ht_op_mode, op_mode_changes);
1896 
1897 	return op_mode_changes;
1898 }
1899 
1900 void associated_clients_update(struct adapter *padapter, u8 updated)
1901 {
1902 	/* update associated stations cap. */
1903 	if (updated) {
1904 		struct list_head	*phead, *plist;
1905 		struct sta_info *psta = NULL;
1906 		struct sta_priv *pstapriv = &padapter->stapriv;
1907 
1908 		spin_lock_bh(&pstapriv->asoc_list_lock);
1909 
1910 		phead = &pstapriv->asoc_list;
1911 		plist = get_next(phead);
1912 
1913 		/* check asoc_queue */
1914 		while (phead != plist) {
1915 			psta = container_of(plist, struct sta_info, asoc_list);
1916 
1917 			plist = get_next(plist);
1918 
1919 			VCS_update(padapter, psta);
1920 		}
1921 
1922 		spin_unlock_bh(&pstapriv->asoc_list_lock);
1923 	}
1924 }
1925 
1926 /* called > TSR LEVEL for USB or SDIO Interface*/
1927 void bss_cap_update_on_sta_join(struct adapter *padapter, struct sta_info *psta)
1928 {
1929 	u8 beacon_updated = false;
1930 	struct mlme_priv *pmlmepriv = &(padapter->mlmepriv);
1931 	struct mlme_ext_priv *pmlmeext = &(padapter->mlmeextpriv);
1932 
1933 	if (!(psta->flags & WLAN_STA_SHORT_PREAMBLE)) {
1934 		if (!psta->no_short_preamble_set) {
1935 			psta->no_short_preamble_set = 1;
1936 
1937 			pmlmepriv->num_sta_no_short_preamble++;
1938 
1939 			if ((pmlmeext->cur_wireless_mode > WIRELESS_11B) &&
1940 				(pmlmepriv->num_sta_no_short_preamble == 1)) {
1941 				beacon_updated = true;
1942 				update_beacon(padapter, 0xFF, NULL, true);
1943 			}
1944 		}
1945 	} else {
1946 		if (psta->no_short_preamble_set) {
1947 			psta->no_short_preamble_set = 0;
1948 
1949 			pmlmepriv->num_sta_no_short_preamble--;
1950 
1951 			if ((pmlmeext->cur_wireless_mode > WIRELESS_11B) &&
1952 				(pmlmepriv->num_sta_no_short_preamble == 0)) {
1953 				beacon_updated = true;
1954 				update_beacon(padapter, 0xFF, NULL, true);
1955 			}
1956 		}
1957 	}
1958 
1959 	if (psta->flags & WLAN_STA_NONERP) {
1960 		if (!psta->nonerp_set) {
1961 			psta->nonerp_set = 1;
1962 
1963 			pmlmepriv->num_sta_non_erp++;
1964 
1965 			if (pmlmepriv->num_sta_non_erp == 1) {
1966 				beacon_updated = true;
1967 				update_beacon(padapter, WLAN_EID_ERP_INFO, NULL, true);
1968 			}
1969 		}
1970 	} else {
1971 		if (psta->nonerp_set) {
1972 			psta->nonerp_set = 0;
1973 
1974 			pmlmepriv->num_sta_non_erp--;
1975 
1976 			if (pmlmepriv->num_sta_non_erp == 0) {
1977 				beacon_updated = true;
1978 				update_beacon(padapter, WLAN_EID_ERP_INFO, NULL, true);
1979 			}
1980 		}
1981 	}
1982 
1983 	if (!(psta->capability & WLAN_CAPABILITY_SHORT_SLOT_TIME)) {
1984 		if (!psta->no_short_slot_time_set) {
1985 			psta->no_short_slot_time_set = 1;
1986 
1987 			pmlmepriv->num_sta_no_short_slot_time++;
1988 
1989 			if ((pmlmeext->cur_wireless_mode > WIRELESS_11B) &&
1990 				 (pmlmepriv->num_sta_no_short_slot_time == 1)) {
1991 				beacon_updated = true;
1992 				update_beacon(padapter, 0xFF, NULL, true);
1993 			}
1994 		}
1995 	} else {
1996 		if (psta->no_short_slot_time_set) {
1997 			psta->no_short_slot_time_set = 0;
1998 
1999 			pmlmepriv->num_sta_no_short_slot_time--;
2000 
2001 			if ((pmlmeext->cur_wireless_mode > WIRELESS_11B) &&
2002 				 (pmlmepriv->num_sta_no_short_slot_time == 0)) {
2003 				beacon_updated = true;
2004 				update_beacon(padapter, 0xFF, NULL, true);
2005 			}
2006 		}
2007 	}
2008 
2009 	if (psta->flags & WLAN_STA_HT) {
2010 		u16 ht_capab = le16_to_cpu(psta->htpriv.ht_cap.cap_info);
2011 
2012 		DBG_871X("HT: STA %pM HT Capabilities "
2013 			   "Info: 0x%04x\n", MAC_ARG(psta->hwaddr), ht_capab);
2014 
2015 		if (psta->no_ht_set) {
2016 			psta->no_ht_set = 0;
2017 			pmlmepriv->num_sta_no_ht--;
2018 		}
2019 
2020 		if ((ht_capab & IEEE80211_HT_CAP_GRN_FLD) == 0) {
2021 			if (!psta->no_ht_gf_set) {
2022 				psta->no_ht_gf_set = 1;
2023 				pmlmepriv->num_sta_ht_no_gf++;
2024 			}
2025 			DBG_871X("%s STA %pM - no "
2026 				   "greenfield, num of non-gf stations %d\n",
2027 				   __func__, MAC_ARG(psta->hwaddr),
2028 				   pmlmepriv->num_sta_ht_no_gf);
2029 		}
2030 
2031 		if ((ht_capab & IEEE80211_HT_CAP_SUP_WIDTH) == 0) {
2032 			if (!psta->ht_20mhz_set) {
2033 				psta->ht_20mhz_set = 1;
2034 				pmlmepriv->num_sta_ht_20mhz++;
2035 			}
2036 			DBG_871X("%s STA %pM - 20 MHz HT, "
2037 				   "num of 20MHz HT STAs %d\n",
2038 				   __func__, MAC_ARG(psta->hwaddr),
2039 				   pmlmepriv->num_sta_ht_20mhz);
2040 		}
2041 
2042 	} else {
2043 		if (!psta->no_ht_set) {
2044 			psta->no_ht_set = 1;
2045 			pmlmepriv->num_sta_no_ht++;
2046 		}
2047 		if (pmlmepriv->htpriv.ht_option == true) {
2048 			DBG_871X("%s STA %pM - no HT, num of non-HT stations %d\n",
2049 				   __func__, MAC_ARG(psta->hwaddr),
2050 				   pmlmepriv->num_sta_no_ht);
2051 		}
2052 	}
2053 
2054 	if (rtw_ht_operation_update(padapter) > 0) {
2055 		update_beacon(padapter, WLAN_EID_HT_CAPABILITY, NULL, false);
2056 		update_beacon(padapter, WLAN_EID_HT_OPERATION, NULL, true);
2057 	}
2058 
2059 	/* update associated stations cap. */
2060 	associated_clients_update(padapter,  beacon_updated);
2061 
2062 	DBG_871X("%s, updated =%d\n", __func__, beacon_updated);
2063 }
2064 
2065 u8 bss_cap_update_on_sta_leave(struct adapter *padapter, struct sta_info *psta)
2066 {
2067 	u8 beacon_updated = false;
2068 	struct mlme_priv *pmlmepriv = &(padapter->mlmepriv);
2069 	struct mlme_ext_priv *pmlmeext = &(padapter->mlmeextpriv);
2070 
2071 	if (!psta)
2072 		return beacon_updated;
2073 
2074 	if (psta->no_short_preamble_set) {
2075 		psta->no_short_preamble_set = 0;
2076 		pmlmepriv->num_sta_no_short_preamble--;
2077 		if (pmlmeext->cur_wireless_mode > WIRELESS_11B
2078 		    && pmlmepriv->num_sta_no_short_preamble == 0){
2079 			beacon_updated = true;
2080 			update_beacon(padapter, 0xFF, NULL, true);
2081 		}
2082 	}
2083 
2084 	if (psta->nonerp_set) {
2085 		psta->nonerp_set = 0;
2086 		pmlmepriv->num_sta_non_erp--;
2087 		if (pmlmepriv->num_sta_non_erp == 0) {
2088 			beacon_updated = true;
2089 			update_beacon(padapter, WLAN_EID_ERP_INFO, NULL, true);
2090 		}
2091 	}
2092 
2093 	if (psta->no_short_slot_time_set) {
2094 		psta->no_short_slot_time_set = 0;
2095 		pmlmepriv->num_sta_no_short_slot_time--;
2096 		if (pmlmeext->cur_wireless_mode > WIRELESS_11B
2097 		    && pmlmepriv->num_sta_no_short_slot_time == 0){
2098 			beacon_updated = true;
2099 			update_beacon(padapter, 0xFF, NULL, true);
2100 		}
2101 	}
2102 
2103 	if (psta->no_ht_gf_set) {
2104 		psta->no_ht_gf_set = 0;
2105 		pmlmepriv->num_sta_ht_no_gf--;
2106 	}
2107 
2108 	if (psta->no_ht_set) {
2109 		psta->no_ht_set = 0;
2110 		pmlmepriv->num_sta_no_ht--;
2111 	}
2112 
2113 	if (psta->ht_20mhz_set) {
2114 		psta->ht_20mhz_set = 0;
2115 		pmlmepriv->num_sta_ht_20mhz--;
2116 	}
2117 
2118 	if (rtw_ht_operation_update(padapter) > 0) {
2119 		update_beacon(padapter, WLAN_EID_HT_CAPABILITY, NULL, false);
2120 		update_beacon(padapter, WLAN_EID_HT_OPERATION, NULL, true);
2121 	}
2122 
2123 	/* update associated stations cap. */
2124 	/* associated_clients_update(padapter,  beacon_updated); //move it to avoid deadlock */
2125 
2126 	DBG_871X("%s, updated =%d\n", __func__, beacon_updated);
2127 
2128 	return beacon_updated;
2129 }
2130 
2131 u8 ap_free_sta(
2132 	struct adapter *padapter,
2133 	struct sta_info *psta,
2134 	bool active,
2135 	u16 reason
2136 )
2137 {
2138 	u8 beacon_updated = false;
2139 
2140 	if (!psta)
2141 		return beacon_updated;
2142 
2143 	if (active) {
2144 		/* tear down Rx AMPDU */
2145 		send_delba(padapter, 0, psta->hwaddr);/*  recipient */
2146 
2147 		/* tear down TX AMPDU */
2148 		send_delba(padapter, 1, psta->hwaddr);/*  // originator */
2149 
2150 		issue_deauth(padapter, psta->hwaddr, reason);
2151 	}
2152 
2153 	psta->htpriv.agg_enable_bitmap = 0x0;/* reset */
2154 	psta->htpriv.candidate_tid_bitmap = 0x0;/* reset */
2155 
2156 	/* report_del_sta_event(padapter, psta->hwaddr, reason); */
2157 
2158 	/* clear cam entry / key */
2159 	rtw_clearstakey_cmd(padapter, psta, true);
2160 
2161 	spin_lock_bh(&psta->lock);
2162 	psta->state &= ~_FW_LINKED;
2163 	spin_unlock_bh(&psta->lock);
2164 
2165 	rtw_cfg80211_indicate_sta_disassoc(padapter, psta->hwaddr, reason);
2166 
2167 	report_del_sta_event(padapter, psta->hwaddr, reason);
2168 
2169 	beacon_updated = bss_cap_update_on_sta_leave(padapter, psta);
2170 
2171 	rtw_free_stainfo(padapter, psta);
2172 
2173 	return beacon_updated;
2174 }
2175 
2176 void rtw_sta_flush(struct adapter *padapter)
2177 {
2178 	struct list_head	*phead, *plist;
2179 	struct sta_info *psta = NULL;
2180 	struct sta_priv *pstapriv = &padapter->stapriv;
2181 	struct mlme_ext_priv *pmlmeext = &padapter->mlmeextpriv;
2182 	struct mlme_ext_info *pmlmeinfo = &(pmlmeext->mlmext_info);
2183 	u8 bc_addr[ETH_ALEN] = {0xff, 0xff, 0xff, 0xff, 0xff, 0xff};
2184 
2185 	DBG_871X(FUNC_NDEV_FMT"\n", FUNC_NDEV_ARG(padapter->pnetdev));
2186 
2187 	if ((pmlmeinfo->state & 0x03) != WIFI_FW_AP_STATE)
2188 		return;
2189 
2190 	spin_lock_bh(&pstapriv->asoc_list_lock);
2191 	phead = &pstapriv->asoc_list;
2192 	plist = get_next(phead);
2193 
2194 	/* free sta asoc_queue */
2195 	while (phead != plist) {
2196 		psta = container_of(plist, struct sta_info, asoc_list);
2197 
2198 		plist = get_next(plist);
2199 
2200 		list_del_init(&psta->asoc_list);
2201 		pstapriv->asoc_list_cnt--;
2202 
2203 		/* spin_unlock_bh(&pstapriv->asoc_list_lock); */
2204 		ap_free_sta(padapter, psta, true, WLAN_REASON_DEAUTH_LEAVING);
2205 		/* spin_lock_bh(&pstapriv->asoc_list_lock); */
2206 	}
2207 	spin_unlock_bh(&pstapriv->asoc_list_lock);
2208 
2209 	issue_deauth(padapter, bc_addr, WLAN_REASON_DEAUTH_LEAVING);
2210 
2211 	associated_clients_update(padapter, true);
2212 }
2213 
2214 /* called > TSR LEVEL for USB or SDIO Interface*/
2215 void sta_info_update(struct adapter *padapter, struct sta_info *psta)
2216 {
2217 	int flags = psta->flags;
2218 	struct mlme_priv *pmlmepriv = &(padapter->mlmepriv);
2219 
2220 	/* update wmm cap. */
2221 	if (WLAN_STA_WME & flags)
2222 		psta->qos_option = 1;
2223 	else
2224 		psta->qos_option = 0;
2225 
2226 	if (pmlmepriv->qospriv.qos_option == 0)
2227 		psta->qos_option = 0;
2228 
2229 	/* update 802.11n ht cap. */
2230 	if (WLAN_STA_HT & flags) {
2231 		psta->htpriv.ht_option = true;
2232 		psta->qos_option = 1;
2233 	} else {
2234 		psta->htpriv.ht_option = false;
2235 	}
2236 
2237 	if (!pmlmepriv->htpriv.ht_option)
2238 		psta->htpriv.ht_option = false;
2239 
2240 	update_sta_info_apmode(padapter, psta);
2241 }
2242 
2243 /* called >= TSR LEVEL for USB or SDIO Interface*/
2244 void ap_sta_info_defer_update(struct adapter *padapter, struct sta_info *psta)
2245 {
2246 	struct mlme_ext_priv *pmlmeext = &padapter->mlmeextpriv;
2247 	struct mlme_ext_info *pmlmeinfo = &(pmlmeext->mlmext_info);
2248 
2249 	if (psta->state & _FW_LINKED) {
2250 		pmlmeinfo->FW_sta_info[psta->mac_id].psta = psta;
2251 
2252 		/* add ratid */
2253 		add_RATid(padapter, psta, 0);/* DM_RATR_STA_INIT */
2254 	}
2255 }
2256 /* restore hw setting from sw data structures */
2257 void rtw_ap_restore_network(struct adapter *padapter)
2258 {
2259 	struct mlme_priv *mlmepriv = &padapter->mlmepriv;
2260 	struct mlme_ext_priv *pmlmeext = &padapter->mlmeextpriv;
2261 	struct sta_priv *pstapriv = &padapter->stapriv;
2262 	struct sta_info *psta;
2263 	struct security_priv *psecuritypriv = &(padapter->securitypriv);
2264 	struct list_head	*phead, *plist;
2265 	u8 chk_alive_num = 0;
2266 	char chk_alive_list[NUM_STA];
2267 	int i;
2268 
2269 	rtw_setopmode_cmd(padapter, Ndis802_11APMode, false);
2270 
2271 	set_channel_bwmode(
2272 		padapter,
2273 		pmlmeext->cur_channel,
2274 		pmlmeext->cur_ch_offset,
2275 		pmlmeext->cur_bwmode
2276 	);
2277 
2278 	start_bss_network(padapter, (u8 *)&mlmepriv->cur_network.network);
2279 
2280 	if ((padapter->securitypriv.dot11PrivacyAlgrthm == _TKIP_) ||
2281 		(padapter->securitypriv.dot11PrivacyAlgrthm == _AES_)) {
2282 		/* restore group key, WEP keys is restored in ips_leave() */
2283 		rtw_set_key(
2284 			padapter,
2285 			psecuritypriv,
2286 			psecuritypriv->dot118021XGrpKeyid,
2287 			0,
2288 			false
2289 		);
2290 	}
2291 
2292 	spin_lock_bh(&pstapriv->asoc_list_lock);
2293 
2294 	phead = &pstapriv->asoc_list;
2295 	plist = get_next(phead);
2296 
2297 	while (phead != plist) {
2298 		int stainfo_offset;
2299 
2300 		psta = container_of(plist, struct sta_info, asoc_list);
2301 		plist = get_next(plist);
2302 
2303 		stainfo_offset = rtw_stainfo_offset(pstapriv, psta);
2304 		if (stainfo_offset_valid(stainfo_offset))
2305 			chk_alive_list[chk_alive_num++] = stainfo_offset;
2306 	}
2307 
2308 	spin_unlock_bh(&pstapriv->asoc_list_lock);
2309 
2310 	for (i = 0; i < chk_alive_num; i++) {
2311 		psta = rtw_get_stainfo_by_offset(pstapriv, chk_alive_list[i]);
2312 
2313 		if (psta == NULL) {
2314 			DBG_871X(FUNC_ADPT_FMT" sta_info is null\n", FUNC_ADPT_ARG(padapter));
2315 		} else if (psta->state & _FW_LINKED) {
2316 			rtw_sta_media_status_rpt(padapter, psta, 1);
2317 			Update_RA_Entry(padapter, psta);
2318 			/* pairwise key */
2319 			/* per sta pairwise key and settings */
2320 			if ((psecuritypriv->dot11PrivacyAlgrthm == _TKIP_) ||
2321 				(psecuritypriv->dot11PrivacyAlgrthm == _AES_)) {
2322 				rtw_setstakey_cmd(padapter, psta, true, false);
2323 			}
2324 		}
2325 	}
2326 }
2327 
2328 void start_ap_mode(struct adapter *padapter)
2329 {
2330 	int i;
2331 	struct mlme_priv *pmlmepriv = &(padapter->mlmepriv);
2332 	struct sta_priv *pstapriv = &padapter->stapriv;
2333 	struct mlme_ext_priv *pmlmeext = &padapter->mlmeextpriv;
2334 	struct wlan_acl_pool *pacl_list = &pstapriv->acl_list;
2335 
2336 	pmlmepriv->update_bcn = false;
2337 
2338 	/* init_mlme_ap_info(padapter); */
2339 	pmlmeext->bstart_bss = false;
2340 
2341 	pmlmepriv->num_sta_non_erp = 0;
2342 
2343 	pmlmepriv->num_sta_no_short_slot_time = 0;
2344 
2345 	pmlmepriv->num_sta_no_short_preamble = 0;
2346 
2347 	pmlmepriv->num_sta_ht_no_gf = 0;
2348 	pmlmepriv->num_sta_no_ht = 0;
2349 	pmlmepriv->num_sta_ht_20mhz = 0;
2350 
2351 	pmlmepriv->olbc = false;
2352 
2353 	pmlmepriv->olbc_ht = false;
2354 
2355 	pmlmepriv->ht_op_mode = 0;
2356 
2357 	for (i = 0; i < NUM_STA; i++)
2358 		pstapriv->sta_aid[i] = NULL;
2359 
2360 	pmlmepriv->wps_beacon_ie = NULL;
2361 	pmlmepriv->wps_probe_resp_ie = NULL;
2362 	pmlmepriv->wps_assoc_resp_ie = NULL;
2363 
2364 	pmlmepriv->p2p_beacon_ie = NULL;
2365 	pmlmepriv->p2p_probe_resp_ie = NULL;
2366 
2367 	/* for ACL */
2368 	INIT_LIST_HEAD(&(pacl_list->acl_node_q.queue));
2369 	pacl_list->num = 0;
2370 	pacl_list->mode = 0;
2371 	for (i = 0; i < NUM_ACL; i++) {
2372 		INIT_LIST_HEAD(&pacl_list->aclnode[i].list);
2373 		pacl_list->aclnode[i].valid = false;
2374 	}
2375 }
2376 
2377 void stop_ap_mode(struct adapter *padapter)
2378 {
2379 	struct list_head	*phead, *plist;
2380 	struct rtw_wlan_acl_node *paclnode;
2381 	struct sta_info *psta = NULL;
2382 	struct sta_priv *pstapriv = &padapter->stapriv;
2383 	struct mlme_priv *pmlmepriv = &(padapter->mlmepriv);
2384 	struct mlme_ext_priv *pmlmeext = &padapter->mlmeextpriv;
2385 	struct wlan_acl_pool *pacl_list = &pstapriv->acl_list;
2386 	struct __queue	*pacl_node_q = &pacl_list->acl_node_q;
2387 
2388 	pmlmepriv->update_bcn = false;
2389 	pmlmeext->bstart_bss = false;
2390 
2391 	/* reset and init security priv , this can refine with rtw_reset_securitypriv */
2392 	memset(
2393 		(unsigned char *)&padapter->securitypriv,
2394 		0,
2395 		sizeof(struct security_priv)
2396 	);
2397 	padapter->securitypriv.ndisauthtype = Ndis802_11AuthModeOpen;
2398 	padapter->securitypriv.ndisencryptstatus = Ndis802_11WEPDisabled;
2399 
2400 	/* for ACL */
2401 	spin_lock_bh(&(pacl_node_q->lock));
2402 	phead = get_list_head(pacl_node_q);
2403 	plist = get_next(phead);
2404 	while (phead != plist) {
2405 		paclnode = container_of(plist, struct rtw_wlan_acl_node, list);
2406 		plist = get_next(plist);
2407 
2408 		if (paclnode->valid) {
2409 			paclnode->valid = false;
2410 
2411 			list_del_init(&paclnode->list);
2412 
2413 			pacl_list->num--;
2414 		}
2415 	}
2416 	spin_unlock_bh(&(pacl_node_q->lock));
2417 
2418 	DBG_871X("%s, free acl_node_queue, num =%d\n", __func__, pacl_list->num);
2419 
2420 	rtw_sta_flush(padapter);
2421 
2422 	/* free_assoc_sta_resources */
2423 	rtw_free_all_stainfo(padapter);
2424 
2425 	psta = rtw_get_bcmc_stainfo(padapter);
2426 	rtw_free_stainfo(padapter, psta);
2427 
2428 	rtw_init_bcmc_stainfo(padapter);
2429 
2430 	rtw_free_mlme_priv_ie_data(pmlmepriv);
2431 
2432 	rtw_btcoex_MediaStatusNotify(padapter, 0); /* disconnect */
2433 }
2434