1 // SPDX-License-Identifier: GPL-2.0
2 /******************************************************************************
3  *
4  * Copyright(c) 2007 - 2012 Realtek Corporation. All rights reserved.
5  *
6  ******************************************************************************/
7 #define _RTW_WLAN_UTIL_C_
8 
9 #include <drv_types.h>
10 #include <rtw_debug.h>
11 #include <hal_com_h2c.h>
12 
13 static unsigned char ARTHEROS_OUI1[] = {0x00, 0x03, 0x7f};
14 static unsigned char ARTHEROS_OUI2[] = {0x00, 0x13, 0x74};
15 
16 static unsigned char BROADCOM_OUI1[] = {0x00, 0x10, 0x18};
17 static unsigned char BROADCOM_OUI2[] = {0x00, 0x0a, 0xf7};
18 static unsigned char BROADCOM_OUI3[] = {0x00, 0x05, 0xb5};
19 
20 static unsigned char CISCO_OUI[] = {0x00, 0x40, 0x96};
21 static unsigned char MARVELL_OUI[] = {0x00, 0x50, 0x43};
22 static unsigned char RALINK_OUI[] = {0x00, 0x0c, 0x43};
23 static unsigned char REALTEK_OUI[] = {0x00, 0xe0, 0x4c};
24 static unsigned char AIRGOCAP_OUI[] = {0x00, 0x0a, 0xf5};
25 static unsigned char RSN_TKIP_CIPHER[4] = {0x00, 0x0f, 0xac, 0x02};
26 static unsigned char WPA_TKIP_CIPHER[4] = {0x00, 0x50, 0xf2, 0x02};
27 
28 #define R2T_PHY_DELAY	(0)
29 
30 /* define WAIT_FOR_BCN_TO_MIN	(3000) */
31 #define WAIT_FOR_BCN_TO_MIN	(6000)
32 #define WAIT_FOR_BCN_TO_MAX	(20000)
33 
34 #define DISCONNECT_BY_CHK_BCN_FAIL_OBSERV_PERIOD_IN_MS 1000
35 #define DISCONNECT_BY_CHK_BCN_FAIL_THRESHOLD 3
36 
37 static u8 rtw_basic_rate_cck[4] = {
38 	IEEE80211_CCK_RATE_1MB | IEEE80211_BASIC_RATE_MASK,
39 	IEEE80211_CCK_RATE_2MB | IEEE80211_BASIC_RATE_MASK,
40 	IEEE80211_CCK_RATE_5MB | IEEE80211_BASIC_RATE_MASK,
41 	IEEE80211_CCK_RATE_11MB | IEEE80211_BASIC_RATE_MASK
42 };
43 
44 static u8 rtw_basic_rate_ofdm[3] = {
45 	IEEE80211_OFDM_RATE_6MB | IEEE80211_BASIC_RATE_MASK,
46 	IEEE80211_OFDM_RATE_12MB | IEEE80211_BASIC_RATE_MASK,
47 	IEEE80211_OFDM_RATE_24MB | IEEE80211_BASIC_RATE_MASK
48 };
49 
50 u8 networktype_to_raid_ex(struct adapter *adapter, struct sta_info *psta)
51 {
52 	u8 raid, cur_rf_type, rf_type = RF_1T1R;
53 
54 	rtw_hal_get_hwreg(adapter, HW_VAR_RF_TYPE, (u8 *)(&cur_rf_type));
55 
56 	if (cur_rf_type == RF_1T1R) {
57 		rf_type = RF_1T1R;
58 	} else if (IsSupportedVHT(psta->wireless_mode)) {
59 		if (psta->ra_mask & 0xffc00000)
60 			rf_type = RF_2T2R;
61 	} else if (IsSupportedHT(psta->wireless_mode)) {
62 		if (psta->ra_mask & 0xfff00000)
63 			rf_type = RF_2T2R;
64 	}
65 
66 	switch (psta->wireless_mode) {
67 	case WIRELESS_11B:
68 		raid = RATEID_IDX_B;
69 		break;
70 	case WIRELESS_11A:
71 	case WIRELESS_11G:
72 		raid = RATEID_IDX_G;
73 		break;
74 	case WIRELESS_11BG:
75 		raid = RATEID_IDX_BG;
76 		break;
77 	case WIRELESS_11_24N:
78 	case WIRELESS_11_5N:
79 	case WIRELESS_11A_5N:
80 	case WIRELESS_11G_24N:
81 		if (rf_type == RF_2T2R)
82 			raid = RATEID_IDX_GN_N2SS;
83 		else
84 			raid = RATEID_IDX_GN_N1SS;
85 		break;
86 	case WIRELESS_11B_24N:
87 	case WIRELESS_11BG_24N:
88 		if (psta->bw_mode == CHANNEL_WIDTH_20) {
89 			if (rf_type == RF_2T2R)
90 				raid = RATEID_IDX_BGN_20M_2SS_BN;
91 			else
92 				raid = RATEID_IDX_BGN_20M_1SS_BN;
93 		} else {
94 			if (rf_type == RF_2T2R)
95 				raid = RATEID_IDX_BGN_40M_2SS;
96 			else
97 				raid = RATEID_IDX_BGN_40M_1SS;
98 		}
99 		break;
100 	default:
101 		raid = RATEID_IDX_BGN_40M_2SS;
102 		break;
103 	}
104 	return raid;
105 }
106 
107 unsigned char ratetbl_val_2wifirate(unsigned char rate);
108 unsigned char ratetbl_val_2wifirate(unsigned char rate)
109 {
110 	switch (rate & 0x7f) {
111 	case 0:
112 		return IEEE80211_CCK_RATE_1MB;
113 	case 1:
114 		return IEEE80211_CCK_RATE_2MB;
115 	case 2:
116 		return IEEE80211_CCK_RATE_5MB;
117 	case 3:
118 		return IEEE80211_CCK_RATE_11MB;
119 	case 4:
120 		return IEEE80211_OFDM_RATE_6MB;
121 	case 5:
122 		return IEEE80211_OFDM_RATE_9MB;
123 	case 6:
124 		return IEEE80211_OFDM_RATE_12MB;
125 	case 7:
126 		return IEEE80211_OFDM_RATE_18MB;
127 	case 8:
128 		return IEEE80211_OFDM_RATE_24MB;
129 	case 9:
130 		return IEEE80211_OFDM_RATE_36MB;
131 	case 10:
132 		return IEEE80211_OFDM_RATE_48MB;
133 	case 11:
134 		return IEEE80211_OFDM_RATE_54MB;
135 	default:
136 		return 0;
137 	}
138 }
139 
140 int is_basicrate(struct adapter *padapter, unsigned char rate);
141 int is_basicrate(struct adapter *padapter, unsigned char rate)
142 {
143 	int i;
144 	unsigned char val;
145 	struct mlme_ext_priv *pmlmeext = &padapter->mlmeextpriv;
146 
147 	for (i = 0; i < NumRates; i++) {
148 		val = pmlmeext->basicrate[i];
149 
150 		if ((val != 0xff) && (val != 0xfe))
151 			if (rate == ratetbl_val_2wifirate(val))
152 				return true;
153 	}
154 
155 	return false;
156 }
157 
158 unsigned int ratetbl2rateset(struct adapter *padapter, unsigned char *rateset);
159 unsigned int ratetbl2rateset(struct adapter *padapter, unsigned char *rateset)
160 {
161 	int i;
162 	unsigned char rate;
163 	unsigned int	len = 0;
164 	struct mlme_ext_priv *pmlmeext = &padapter->mlmeextpriv;
165 
166 	for (i = 0; i < NumRates; i++) {
167 		rate = pmlmeext->datarate[i];
168 
169 		switch (rate) {
170 		case 0xff:
171 			return len;
172 
173 		case 0xfe:
174 			continue;
175 
176 		default:
177 			rate = ratetbl_val_2wifirate(rate);
178 
179 			if (is_basicrate(padapter, rate) == true)
180 				rate |= IEEE80211_BASIC_RATE_MASK;
181 
182 			rateset[len] = rate;
183 			len++;
184 			break;
185 		}
186 	}
187 	return len;
188 }
189 
190 void get_rate_set(struct adapter *padapter, unsigned char *pbssrate, int *bssrate_len)
191 {
192 	unsigned char supportedrates[NumRates];
193 
194 	memset(supportedrates, 0, NumRates);
195 	*bssrate_len = ratetbl2rateset(padapter, supportedrates);
196 	memcpy(pbssrate, supportedrates, *bssrate_len);
197 }
198 
199 void set_mcs_rate_by_mask(u8 *mcs_set, u32 mask)
200 {
201 	u8 mcs_rate_1r = (u8)(mask&0xff);
202 	u8 mcs_rate_2r = (u8)((mask>>8)&0xff);
203 	u8 mcs_rate_3r = (u8)((mask>>16)&0xff);
204 	u8 mcs_rate_4r = (u8)((mask>>24)&0xff);
205 
206 	mcs_set[0] &= mcs_rate_1r;
207 	mcs_set[1] &= mcs_rate_2r;
208 	mcs_set[2] &= mcs_rate_3r;
209 	mcs_set[3] &= mcs_rate_4r;
210 }
211 
212 void UpdateBrateTbl(struct adapter *Adapter, u8 *mBratesOS)
213 {
214 	u8 i;
215 	u8 rate;
216 
217 	/*  1M, 2M, 5.5M, 11M, 6M, 12M, 24M are mandatory. */
218 	for (i = 0; i < NDIS_802_11_LENGTH_RATES_EX; i++) {
219 		rate = mBratesOS[i] & 0x7f;
220 		switch (rate) {
221 		case IEEE80211_CCK_RATE_1MB:
222 		case IEEE80211_CCK_RATE_2MB:
223 		case IEEE80211_CCK_RATE_5MB:
224 		case IEEE80211_CCK_RATE_11MB:
225 		case IEEE80211_OFDM_RATE_6MB:
226 		case IEEE80211_OFDM_RATE_12MB:
227 		case IEEE80211_OFDM_RATE_24MB:
228 			mBratesOS[i] |= IEEE80211_BASIC_RATE_MASK;
229 			break;
230 		}
231 	}
232 }
233 
234 void UpdateBrateTblForSoftAP(u8 *bssrateset, u32 bssratelen)
235 {
236 	u8 i;
237 	u8 rate;
238 
239 	for (i = 0; i < bssratelen; i++) {
240 		rate = bssrateset[i] & 0x7f;
241 		switch (rate) {
242 		case IEEE80211_CCK_RATE_1MB:
243 		case IEEE80211_CCK_RATE_2MB:
244 		case IEEE80211_CCK_RATE_5MB:
245 		case IEEE80211_CCK_RATE_11MB:
246 			bssrateset[i] |= IEEE80211_BASIC_RATE_MASK;
247 			break;
248 		}
249 	}
250 }
251 
252 void Save_DM_Func_Flag(struct adapter *padapter)
253 {
254 	u8 bSaveFlag = true;
255 
256 	rtw_hal_set_hwreg(padapter, HW_VAR_DM_FUNC_OP, (u8 *)(&bSaveFlag));
257 }
258 
259 void Restore_DM_Func_Flag(struct adapter *padapter)
260 {
261 	u8 bSaveFlag = false;
262 
263 	rtw_hal_set_hwreg(padapter, HW_VAR_DM_FUNC_OP, (u8 *)(&bSaveFlag));
264 }
265 
266 void Switch_DM_Func(struct adapter *padapter, u32 mode, u8 enable)
267 {
268 	if (enable == true)
269 		rtw_hal_set_hwreg(padapter, HW_VAR_DM_FUNC_SET, (u8 *)(&mode));
270 	else
271 		rtw_hal_set_hwreg(padapter, HW_VAR_DM_FUNC_CLR, (u8 *)(&mode));
272 }
273 
274 void Set_MSR(struct adapter *padapter, u8 type)
275 {
276 	rtw_hal_set_hwreg(padapter, HW_VAR_MEDIA_STATUS, (u8 *)(&type));
277 }
278 
279 inline u8 rtw_get_oper_ch(struct adapter *adapter)
280 {
281 	return adapter_to_dvobj(adapter)->oper_channel;
282 }
283 
284 inline void rtw_set_oper_ch(struct adapter *adapter, u8 ch)
285 {
286 #ifdef DBG_CH_SWITCH
287 	const int len = 128;
288 	char msg[128] = {0};
289 	int cnt = 0;
290 	int i = 0;
291 #endif  /* DBG_CH_SWITCH */
292 	struct dvobj_priv *dvobj = adapter_to_dvobj(adapter);
293 
294 	if (dvobj->oper_channel != ch) {
295 		dvobj->on_oper_ch_time = jiffies;
296 
297 #ifdef DBG_CH_SWITCH
298 		cnt += scnprintf(msg+cnt, len-cnt, "switch to ch %3u", ch);
299 
300 		for (i = 0; i < dvobj->iface_nums; i++) {
301 			struct adapter *iface = dvobj->padapters[i];
302 
303 			cnt += scnprintf(msg+cnt, len-cnt, " [%s:", ADPT_ARG(iface));
304 			if (iface->mlmeextpriv.cur_channel == ch)
305 				cnt += scnprintf(msg+cnt, len-cnt, "C");
306 			else
307 				cnt += scnprintf(msg+cnt, len-cnt, "_");
308 			if (iface->wdinfo.listen_channel == ch && !rtw_p2p_chk_state(&iface->wdinfo, P2P_STATE_NONE))
309 				cnt += scnprintf(msg+cnt, len-cnt, "L");
310 			else
311 				cnt += scnprintf(msg+cnt, len-cnt, "_");
312 			cnt += scnprintf(msg+cnt, len-cnt, "]");
313 		}
314 
315 		DBG_871X(FUNC_ADPT_FMT" %s\n", FUNC_ADPT_ARG(adapter), msg);
316 #endif /* DBG_CH_SWITCH */
317 	}
318 
319 	dvobj->oper_channel = ch;
320 }
321 
322 inline u8 rtw_get_oper_bw(struct adapter *adapter)
323 {
324 	return adapter_to_dvobj(adapter)->oper_bwmode;
325 }
326 
327 inline void rtw_set_oper_bw(struct adapter *adapter, u8 bw)
328 {
329 	adapter_to_dvobj(adapter)->oper_bwmode = bw;
330 }
331 
332 inline u8 rtw_get_oper_choffset(struct adapter *adapter)
333 {
334 	return adapter_to_dvobj(adapter)->oper_ch_offset;
335 }
336 
337 inline void rtw_set_oper_choffset(struct adapter *adapter, u8 offset)
338 {
339 	adapter_to_dvobj(adapter)->oper_ch_offset = offset;
340 }
341 
342 u8 rtw_get_center_ch(u8 channel, u8 chnl_bw, u8 chnl_offset)
343 {
344 	u8 center_ch = channel;
345 
346 	if (chnl_bw == CHANNEL_WIDTH_80) {
347 		center_ch = 7;
348 	} else if (chnl_bw == CHANNEL_WIDTH_40) {
349 		if (chnl_offset == HAL_PRIME_CHNL_OFFSET_LOWER)
350 			center_ch = channel + 2;
351 		else
352 			center_ch = channel - 2;
353 	}
354 
355 	return center_ch;
356 }
357 
358 inline unsigned long rtw_get_on_cur_ch_time(struct adapter *adapter)
359 {
360 	if (adapter->mlmeextpriv.cur_channel == adapter_to_dvobj(adapter)->oper_channel)
361 		return adapter_to_dvobj(adapter)->on_oper_ch_time;
362 	else
363 		return 0;
364 }
365 
366 void SelectChannel(struct adapter *padapter, unsigned char channel)
367 {
368 	if (mutex_lock_interruptible(&(adapter_to_dvobj(padapter)->setch_mutex)))
369 		return;
370 
371 	/* saved channel info */
372 	rtw_set_oper_ch(padapter, channel);
373 
374 	rtw_hal_set_chan(padapter, channel);
375 
376 	mutex_unlock(&(adapter_to_dvobj(padapter)->setch_mutex));
377 }
378 
379 void set_channel_bwmode(struct adapter *padapter, unsigned char channel, unsigned char channel_offset, unsigned short bwmode)
380 {
381 	u8 center_ch, chnl_offset80 = HAL_PRIME_CHNL_OFFSET_DONT_CARE;
382 
383 	if (padapter->bNotifyChannelChange)
384 		DBG_871X("[%s] ch = %d, offset = %d, bwmode = %d\n", __func__, channel, channel_offset, bwmode);
385 
386 	center_ch = rtw_get_center_ch(channel, bwmode, channel_offset);
387 
388 	if (bwmode == CHANNEL_WIDTH_80) {
389 		if (center_ch > channel)
390 			chnl_offset80 = HAL_PRIME_CHNL_OFFSET_LOWER;
391 		else if (center_ch < channel)
392 			chnl_offset80 = HAL_PRIME_CHNL_OFFSET_UPPER;
393 		else
394 			chnl_offset80 = HAL_PRIME_CHNL_OFFSET_DONT_CARE;
395 	}
396 
397 	/* set Channel */
398 	if (mutex_lock_interruptible(&(adapter_to_dvobj(padapter)->setch_mutex)))
399 		return;
400 
401 	/* saved channel/bw info */
402 	rtw_set_oper_ch(padapter, channel);
403 	rtw_set_oper_bw(padapter, bwmode);
404 	rtw_set_oper_choffset(padapter, channel_offset);
405 
406 	rtw_hal_set_chnl_bw(padapter, center_ch, bwmode, channel_offset, chnl_offset80); /*  set center channel */
407 
408 	mutex_unlock(&(adapter_to_dvobj(padapter)->setch_mutex));
409 }
410 
411 inline u8 *get_my_bssid(struct wlan_bssid_ex *pnetwork)
412 {
413 	return pnetwork->MacAddress;
414 }
415 
416 u16 get_beacon_interval(struct wlan_bssid_ex *bss)
417 {
418 	__le16 val;
419 
420 	memcpy((unsigned char *)&val, rtw_get_beacon_interval_from_ie(bss->IEs), 2);
421 
422 	return le16_to_cpu(val);
423 }
424 
425 int is_client_associated_to_ap(struct adapter *padapter)
426 {
427 	struct mlme_ext_priv *pmlmeext;
428 	struct mlme_ext_info *pmlmeinfo;
429 
430 	if (!padapter)
431 		return _FAIL;
432 
433 	pmlmeext = &padapter->mlmeextpriv;
434 	pmlmeinfo = &(pmlmeext->mlmext_info);
435 
436 	if ((pmlmeinfo->state & WIFI_FW_ASSOC_SUCCESS) && ((pmlmeinfo->state&0x03) == WIFI_FW_STATION_STATE))
437 		return true;
438 	else
439 		return _FAIL;
440 }
441 
442 int is_client_associated_to_ibss(struct adapter *padapter)
443 {
444 	struct mlme_ext_priv *pmlmeext = &padapter->mlmeextpriv;
445 	struct mlme_ext_info *pmlmeinfo = &(pmlmeext->mlmext_info);
446 
447 	if ((pmlmeinfo->state & WIFI_FW_ASSOC_SUCCESS) && ((pmlmeinfo->state&0x03) == WIFI_FW_ADHOC_STATE))
448 		return true;
449 	else
450 		return _FAIL;
451 }
452 
453 int is_IBSS_empty(struct adapter *padapter)
454 {
455 	unsigned int i;
456 	struct mlme_ext_priv *pmlmeext = &padapter->mlmeextpriv;
457 	struct mlme_ext_info *pmlmeinfo = &(pmlmeext->mlmext_info);
458 
459 	for (i = IBSS_START_MAC_ID; i < NUM_STA; i++) {
460 		if (pmlmeinfo->FW_sta_info[i].status == 1)
461 			return _FAIL;
462 	}
463 
464 	return true;
465 }
466 
467 unsigned int decide_wait_for_beacon_timeout(unsigned int bcn_interval)
468 {
469 	if ((bcn_interval << 2) < WAIT_FOR_BCN_TO_MIN)
470 		return WAIT_FOR_BCN_TO_MIN;
471 	else if ((bcn_interval << 2) > WAIT_FOR_BCN_TO_MAX)
472 		return WAIT_FOR_BCN_TO_MAX;
473 	else
474 		return bcn_interval << 2;
475 }
476 
477 void invalidate_cam_all(struct adapter *padapter)
478 {
479 	struct dvobj_priv *dvobj = adapter_to_dvobj(padapter);
480 	struct cam_ctl_t *cam_ctl = &dvobj->cam_ctl;
481 
482 	rtw_hal_set_hwreg(padapter, HW_VAR_CAM_INVALID_ALL, NULL);
483 
484 	spin_lock_bh(&cam_ctl->lock);
485 	cam_ctl->bitmap = 0;
486 	memset(dvobj->cam_cache, 0, sizeof(struct cam_entry_cache)*TOTAL_CAM_ENTRY);
487 	spin_unlock_bh(&cam_ctl->lock);
488 }
489 
490 static u32 _ReadCAM(struct adapter *padapter, u32 addr)
491 {
492 	u32 count = 0, cmd;
493 
494 	cmd = CAM_POLLINIG | addr;
495 	rtw_write32(padapter, RWCAM, cmd);
496 
497 	do {
498 		if (0 == (rtw_read32(padapter, REG_CAMCMD) & CAM_POLLINIG))
499 			break;
500 	} while (count++ < 100);
501 
502 	return rtw_read32(padapter, REG_CAMREAD);
503 }
504 
505 void read_cam(struct adapter *padapter, u8 entry, u8 *get_key)
506 {
507 	u32 j, addr, cmd;
508 
509 	addr = entry << 3;
510 
511 	/* DBG_8192C("********* DUMP CAM Entry_#%02d***************\n", entry); */
512 	for (j = 0; j < 6; j++) {
513 		cmd = _ReadCAM(padapter, addr+j);
514 		/* DBG_8192C("offset:0x%02x => 0x%08x\n", addr+j, cmd); */
515 		if (j > 1) /* get key from cam */
516 			memcpy(get_key+(j-2)*4, &cmd, 4);
517 	}
518 	/* DBG_8192C("*********************************\n"); */
519 }
520 
521 void _write_cam(struct adapter *padapter, u8 entry, u16 ctrl, u8 *mac, u8 *key)
522 {
523 	unsigned int i, val, addr;
524 	int j;
525 	u32 cam_val[2];
526 
527 	addr = entry << 3;
528 
529 	for (j = 5; j >= 0; j--) {
530 		switch (j) {
531 		case 0:
532 			val = (ctrl | (mac[0] << 16) | (mac[1] << 24));
533 			break;
534 		case 1:
535 			val = (mac[2] | (mac[3] << 8) | (mac[4] << 16) | (mac[5] << 24));
536 			break;
537 		default:
538 			i = (j - 2) << 2;
539 			val = (key[i] | (key[i+1] << 8) | (key[i+2] << 16) | (key[i+3] << 24));
540 			break;
541 		}
542 
543 		cam_val[0] = val;
544 		cam_val[1] = addr + (unsigned int)j;
545 
546 		rtw_hal_set_hwreg(padapter, HW_VAR_CAM_WRITE, (u8 *)cam_val);
547 	}
548 }
549 
550 void _clear_cam_entry(struct adapter *padapter, u8 entry)
551 {
552 	unsigned char null_sta[] = {0x00, 0x00, 0x00, 0x00, 0x00, 0x00};
553 	unsigned char null_key[] = {0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00};
554 
555 	_write_cam(padapter, entry, 0, null_sta, null_key);
556 }
557 
558 inline void write_cam(struct adapter *adapter, u8 id, u16 ctrl, u8 *mac, u8 *key)
559 {
560 	_write_cam(adapter, id, ctrl, mac, key);
561 	write_cam_cache(adapter, id, ctrl, mac, key);
562 }
563 
564 inline void clear_cam_entry(struct adapter *adapter, u8 id)
565 {
566 	_clear_cam_entry(adapter, id);
567 	clear_cam_cache(adapter, id);
568 }
569 
570 void write_cam_cache(struct adapter *adapter, u8 id, u16 ctrl, u8 *mac, u8 *key)
571 {
572 	struct dvobj_priv *dvobj = adapter_to_dvobj(adapter);
573 	struct cam_ctl_t *cam_ctl = &dvobj->cam_ctl;
574 
575 	spin_lock_bh(&cam_ctl->lock);
576 
577 	dvobj->cam_cache[id].ctrl = ctrl;
578 	memcpy(dvobj->cam_cache[id].mac, mac, ETH_ALEN);
579 	memcpy(dvobj->cam_cache[id].key, key, 16);
580 
581 	spin_unlock_bh(&cam_ctl->lock);
582 }
583 
584 void clear_cam_cache(struct adapter *adapter, u8 id)
585 {
586 	struct dvobj_priv *dvobj = adapter_to_dvobj(adapter);
587 	struct cam_ctl_t *cam_ctl = &dvobj->cam_ctl;
588 
589 	spin_lock_bh(&cam_ctl->lock);
590 
591 	memset(&(dvobj->cam_cache[id]), 0, sizeof(struct cam_entry_cache));
592 
593 	spin_unlock_bh(&cam_ctl->lock);
594 }
595 
596 static bool _rtw_camid_is_gk(struct adapter *adapter, u8 cam_id)
597 {
598 	struct dvobj_priv *dvobj = adapter_to_dvobj(adapter);
599 	struct cam_ctl_t *cam_ctl = &dvobj->cam_ctl;
600 	bool ret = false;
601 
602 	if (cam_id >= TOTAL_CAM_ENTRY)
603 		goto exit;
604 
605 	if (!(cam_ctl->bitmap & BIT(cam_id)))
606 		goto exit;
607 
608 	ret = (dvobj->cam_cache[cam_id].ctrl&BIT6)?true:false;
609 
610 exit:
611 	return ret;
612 }
613 
614 static s16 _rtw_camid_search(struct adapter *adapter, u8 *addr, s16 kid)
615 {
616 	struct dvobj_priv *dvobj = adapter_to_dvobj(adapter);
617 	int i;
618 	s16 cam_id = -1;
619 
620 	for (i = 0; i < TOTAL_CAM_ENTRY; i++) {
621 		if (addr && memcmp(dvobj->cam_cache[i].mac, addr, ETH_ALEN))
622 			continue;
623 		if (kid >= 0 && kid != (dvobj->cam_cache[i].ctrl&0x03))
624 			continue;
625 
626 		cam_id = i;
627 		break;
628 	}
629 
630 	if (addr)
631 		DBG_871X(FUNC_ADPT_FMT" addr:%pM kid:%d, return cam_id:%d\n"
632 			 , FUNC_ADPT_ARG(adapter), MAC_ARG(addr), kid, cam_id);
633 	else
634 		DBG_871X(FUNC_ADPT_FMT" addr:%p kid:%d, return cam_id:%d\n"
635 			 , FUNC_ADPT_ARG(adapter), addr, kid, cam_id);
636 
637 	return cam_id;
638 }
639 
640 s16 rtw_camid_search(struct adapter *adapter, u8 *addr, s16 kid)
641 {
642 	struct dvobj_priv *dvobj = adapter_to_dvobj(adapter);
643 	struct cam_ctl_t *cam_ctl = &dvobj->cam_ctl;
644 	s16 cam_id = -1;
645 
646 	spin_lock_bh(&cam_ctl->lock);
647 	cam_id = _rtw_camid_search(adapter, addr, kid);
648 	spin_unlock_bh(&cam_ctl->lock);
649 
650 	return cam_id;
651 }
652 
653 s16 rtw_camid_alloc(struct adapter *adapter, struct sta_info *sta, u8 kid)
654 {
655 	struct dvobj_priv *dvobj = adapter_to_dvobj(adapter);
656 	struct cam_ctl_t *cam_ctl = &dvobj->cam_ctl;
657 	s16 cam_id = -1;
658 	struct mlme_ext_info *mlmeinfo;
659 
660 	spin_lock_bh(&cam_ctl->lock);
661 
662 	mlmeinfo = &adapter->mlmeextpriv.mlmext_info;
663 
664 	if ((((mlmeinfo->state&0x03) == WIFI_FW_AP_STATE) || ((mlmeinfo->state&0x03) == WIFI_FW_ADHOC_STATE))
665 		&& !sta) {
666 		/* AP/Ad-hoc mode group key: static alloction to default key by key ID */
667 		if (kid > 3) {
668 			DBG_871X_LEVEL(_drv_always_, FUNC_ADPT_FMT" group key with invalid key id:%u\n"
669 				, FUNC_ADPT_ARG(adapter), kid);
670 			rtw_warn_on(1);
671 			goto bitmap_handle;
672 		}
673 
674 		cam_id = kid;
675 	} else {
676 		int i;
677 		u8 *addr = sta?sta->hwaddr:NULL;
678 
679 		if (!sta) {
680 			if (!(mlmeinfo->state & WIFI_FW_ASSOC_SUCCESS)) {
681 				/* bypass STA mode group key setting before connected(ex:WEP) because bssid is not ready */
682 				goto bitmap_handle;
683 			}
684 
685 			addr = get_bssid(&adapter->mlmepriv);
686 		}
687 
688 		i = _rtw_camid_search(adapter, addr, kid);
689 		if (i >= 0) {
690 			/* Fix issue that pairwise and group key have same key id. Pairwise key first, group key can overwirte group only(ex: rekey) */
691 			if (sta || _rtw_camid_is_gk(adapter, i))
692 				cam_id = i;
693 			else
694 				DBG_871X_LEVEL(_drv_always_, FUNC_ADPT_FMT" group key id:%u the same key id as pairwise key\n"
695 					, FUNC_ADPT_ARG(adapter), kid);
696 			goto bitmap_handle;
697 		}
698 
699 		for (i = 4; i < TOTAL_CAM_ENTRY; i++)
700 			if (!(cam_ctl->bitmap & BIT(i)))
701 				break;
702 
703 		if (i == TOTAL_CAM_ENTRY) {
704 			if (sta)
705 				DBG_871X_LEVEL(_drv_always_, FUNC_ADPT_FMT" pairwise key with %pM id:%u no room\n"
706 				, FUNC_ADPT_ARG(adapter), MAC_ARG(sta->hwaddr), kid);
707 			else
708 				DBG_871X_LEVEL(_drv_always_, FUNC_ADPT_FMT" group key id:%u no room\n"
709 				, FUNC_ADPT_ARG(adapter), kid);
710 			rtw_warn_on(1);
711 			goto bitmap_handle;
712 		}
713 
714 		cam_id = i;
715 	}
716 
717 bitmap_handle:
718 	if (cam_id >= 0 && cam_id < 32)
719 		cam_ctl->bitmap |= BIT(cam_id);
720 
721 	spin_unlock_bh(&cam_ctl->lock);
722 
723 	return cam_id;
724 }
725 
726 void rtw_camid_free(struct adapter *adapter, u8 cam_id)
727 {
728 	struct dvobj_priv *dvobj = adapter_to_dvobj(adapter);
729 	struct cam_ctl_t *cam_ctl = &dvobj->cam_ctl;
730 
731 	spin_lock_bh(&cam_ctl->lock);
732 
733 	if (cam_id < TOTAL_CAM_ENTRY)
734 		cam_ctl->bitmap &= ~(BIT(cam_id));
735 
736 	spin_unlock_bh(&cam_ctl->lock);
737 }
738 
739 int allocate_fw_sta_entry(struct adapter *padapter)
740 {
741 	unsigned int mac_id;
742 	struct mlme_ext_priv *pmlmeext = &padapter->mlmeextpriv;
743 	struct mlme_ext_info *pmlmeinfo = &(pmlmeext->mlmext_info);
744 
745 	for (mac_id = IBSS_START_MAC_ID; mac_id < NUM_STA; mac_id++) {
746 		if (pmlmeinfo->FW_sta_info[mac_id].status == 0) {
747 			pmlmeinfo->FW_sta_info[mac_id].status = 1;
748 			pmlmeinfo->FW_sta_info[mac_id].retry = 0;
749 			break;
750 		}
751 	}
752 
753 	return mac_id;
754 }
755 
756 void flush_all_cam_entry(struct adapter *padapter)
757 {
758 	struct mlme_ext_priv *pmlmeext = &padapter->mlmeextpriv;
759 	struct mlme_ext_info *pmlmeinfo = &(pmlmeext->mlmext_info);
760 
761 	invalidate_cam_all(padapter);
762 	/* clear default key related key search setting */
763 	rtw_hal_set_hwreg(padapter, HW_VAR_SEC_DK_CFG, (u8 *)false);
764 
765 	memset((u8 *)(pmlmeinfo->FW_sta_info), 0, sizeof(pmlmeinfo->FW_sta_info));
766 }
767 
768 int WMM_param_handler(struct adapter *padapter, struct ndis_80211_var_ie *pIE)
769 {
770 	/* struct registry_priv *pregpriv = &padapter->registrypriv; */
771 	struct mlme_priv *pmlmepriv = &(padapter->mlmepriv);
772 	struct mlme_ext_priv *pmlmeext = &padapter->mlmeextpriv;
773 	struct mlme_ext_info *pmlmeinfo = &(pmlmeext->mlmext_info);
774 
775 	if (pmlmepriv->qospriv.qos_option == 0) {
776 		pmlmeinfo->WMM_enable = 0;
777 		return false;
778 	}
779 
780 	if (!memcmp(&(pmlmeinfo->WMM_param), (pIE->data + 6), sizeof(struct WMM_para_element)))
781 		return false;
782 	else
783 		memcpy(&(pmlmeinfo->WMM_param), (pIE->data + 6), sizeof(struct WMM_para_element));
784 
785 	pmlmeinfo->WMM_enable = 1;
786 	return true;
787 }
788 
789 void WMMOnAssocRsp(struct adapter *padapter)
790 {
791 	u8 ACI, ACM, AIFS, ECWMin, ECWMax, aSifsTime;
792 	u8 acm_mask;
793 	u16 TXOP;
794 	u32 acParm, i;
795 	u32 edca[4], inx[4];
796 	struct mlme_ext_priv *pmlmeext = &padapter->mlmeextpriv;
797 	struct mlme_ext_info *pmlmeinfo = &(pmlmeext->mlmext_info);
798 	struct xmit_priv *pxmitpriv = &padapter->xmitpriv;
799 	struct registry_priv *pregpriv = &padapter->registrypriv;
800 
801 	acm_mask = 0;
802 
803 	if (pmlmeext->cur_wireless_mode & WIRELESS_11_24N)
804 		aSifsTime = 16;
805 	else
806 		aSifsTime = 10;
807 
808 	if (pmlmeinfo->WMM_enable == 0) {
809 		padapter->mlmepriv.acm_mask = 0;
810 
811 		AIFS = aSifsTime + (2 * pmlmeinfo->slotTime);
812 
813 		if (pmlmeext->cur_wireless_mode & (WIRELESS_11G | WIRELESS_11A)) {
814 			ECWMin = 4;
815 			ECWMax = 10;
816 		} else if (pmlmeext->cur_wireless_mode & WIRELESS_11B) {
817 			ECWMin = 5;
818 			ECWMax = 10;
819 		} else {
820 			ECWMin = 4;
821 			ECWMax = 10;
822 		}
823 
824 		TXOP = 0;
825 		acParm = AIFS | (ECWMin << 8) | (ECWMax << 12) | (TXOP << 16);
826 		rtw_hal_set_hwreg(padapter, HW_VAR_AC_PARAM_BE, (u8 *)(&acParm));
827 		rtw_hal_set_hwreg(padapter, HW_VAR_AC_PARAM_BK, (u8 *)(&acParm));
828 		rtw_hal_set_hwreg(padapter, HW_VAR_AC_PARAM_VI, (u8 *)(&acParm));
829 
830 		ECWMin = 2;
831 		ECWMax = 3;
832 		TXOP = 0x2f;
833 		acParm = AIFS | (ECWMin << 8) | (ECWMax << 12) | (TXOP << 16);
834 		rtw_hal_set_hwreg(padapter, HW_VAR_AC_PARAM_VO, (u8 *)(&acParm));
835 	} else {
836 		edca[0] = edca[1] = edca[2] = edca[3] = 0;
837 
838 		for (i = 0; i < 4; i++) {
839 			ACI = (pmlmeinfo->WMM_param.ac_param[i].ACI_AIFSN >> 5) & 0x03;
840 			ACM = (pmlmeinfo->WMM_param.ac_param[i].ACI_AIFSN >> 4) & 0x01;
841 
842 			/* AIFS = AIFSN * slot time + SIFS - r2t phy delay */
843 			AIFS = (pmlmeinfo->WMM_param.ac_param[i].ACI_AIFSN & 0x0f) * pmlmeinfo->slotTime + aSifsTime;
844 
845 			ECWMin = (pmlmeinfo->WMM_param.ac_param[i].CW & 0x0f);
846 			ECWMax = (pmlmeinfo->WMM_param.ac_param[i].CW & 0xf0) >> 4;
847 			TXOP = le16_to_cpu(pmlmeinfo->WMM_param.ac_param[i].TXOP_limit);
848 
849 			acParm = AIFS | (ECWMin << 8) | (ECWMax << 12) | (TXOP << 16);
850 
851 			switch (ACI) {
852 			case 0x0:
853 				rtw_hal_set_hwreg(padapter, HW_VAR_AC_PARAM_BE, (u8 *)(&acParm));
854 				acm_mask |= (ACM ? BIT(1):0);
855 				edca[XMIT_BE_QUEUE] = acParm;
856 				break;
857 
858 			case 0x1:
859 				rtw_hal_set_hwreg(padapter, HW_VAR_AC_PARAM_BK, (u8 *)(&acParm));
860 				/* acm_mask |= (ACM? BIT(0):0); */
861 				edca[XMIT_BK_QUEUE] = acParm;
862 				break;
863 
864 			case 0x2:
865 				rtw_hal_set_hwreg(padapter, HW_VAR_AC_PARAM_VI, (u8 *)(&acParm));
866 				acm_mask |= (ACM ? BIT(2):0);
867 				edca[XMIT_VI_QUEUE] = acParm;
868 				break;
869 
870 			case 0x3:
871 				rtw_hal_set_hwreg(padapter, HW_VAR_AC_PARAM_VO, (u8 *)(&acParm));
872 				acm_mask |= (ACM ? BIT(3):0);
873 				edca[XMIT_VO_QUEUE] = acParm;
874 				break;
875 			}
876 
877 			DBG_871X("WMM(%x): %x, %x\n", ACI, ACM, acParm);
878 		}
879 
880 		if (padapter->registrypriv.acm_method == 1)
881 			rtw_hal_set_hwreg(padapter, HW_VAR_ACM_CTRL, (u8 *)(&acm_mask));
882 		else
883 			padapter->mlmepriv.acm_mask = acm_mask;
884 
885 		inx[0] = 0; inx[1] = 1; inx[2] = 2; inx[3] = 3;
886 
887 		if (pregpriv->wifi_spec == 1) {
888 			u32 j, tmp, change_inx = false;
889 
890 			/* entry indx: 0->vo, 1->vi, 2->be, 3->bk. */
891 			for (i = 0; i < 4; i++) {
892 				for (j = i+1; j < 4; j++) {
893 					/* compare CW and AIFS */
894 					if ((edca[j] & 0xFFFF) < (edca[i] & 0xFFFF)) {
895 						change_inx = true;
896 					} else if ((edca[j] & 0xFFFF) == (edca[i] & 0xFFFF)) {
897 						/* compare TXOP */
898 						if ((edca[j] >> 16) > (edca[i] >> 16))
899 							change_inx = true;
900 					}
901 
902 					if (change_inx) {
903 						tmp = edca[i];
904 						edca[i] = edca[j];
905 						edca[j] = tmp;
906 
907 						tmp = inx[i];
908 						inx[i] = inx[j];
909 						inx[j] = tmp;
910 
911 						change_inx = false;
912 					}
913 				}
914 			}
915 		}
916 
917 		for (i = 0; i < 4; i++) {
918 			pxmitpriv->wmm_para_seq[i] = inx[i];
919 			DBG_871X("wmm_para_seq(%d): %d\n", i, pxmitpriv->wmm_para_seq[i]);
920 		}
921 	}
922 }
923 
924 static void bwmode_update_check(struct adapter *padapter, struct ndis_80211_var_ie *pIE)
925 {
926 	unsigned char  new_bwmode;
927 	unsigned char  new_ch_offset;
928 	struct HT_info_element	 *pHT_info;
929 	struct mlme_priv *pmlmepriv = &(padapter->mlmepriv);
930 	struct mlme_ext_priv *pmlmeext = &padapter->mlmeextpriv;
931 	struct mlme_ext_info *pmlmeinfo = &(pmlmeext->mlmext_info);
932 	struct registry_priv *pregistrypriv = &padapter->registrypriv;
933 	struct ht_priv *phtpriv = &pmlmepriv->htpriv;
934 	u8 cbw40_enable = 0;
935 
936 	if (!pIE)
937 		return;
938 
939 	if (phtpriv->ht_option == false)
940 		return;
941 
942 	if (pmlmeext->cur_bwmode >= CHANNEL_WIDTH_80)
943 		return;
944 
945 	if (pIE->Length > sizeof(struct HT_info_element))
946 		return;
947 
948 	pHT_info = (struct HT_info_element *)pIE->data;
949 
950 	if (pmlmeext->cur_channel > 14) {
951 		if ((pregistrypriv->bw_mode & 0xf0) > 0)
952 			cbw40_enable = 1;
953 	} else {
954 		if ((pregistrypriv->bw_mode & 0x0f) > 0)
955 			cbw40_enable = 1;
956 	}
957 
958 	if ((pHT_info->infos[0] & BIT(2)) && cbw40_enable) {
959 		new_bwmode = CHANNEL_WIDTH_40;
960 
961 		switch (pHT_info->infos[0] & 0x3) {
962 		case 1:
963 			new_ch_offset = HAL_PRIME_CHNL_OFFSET_LOWER;
964 			break;
965 
966 		case 3:
967 			new_ch_offset = HAL_PRIME_CHNL_OFFSET_UPPER;
968 			break;
969 
970 		default:
971 			new_bwmode = CHANNEL_WIDTH_20;
972 			new_ch_offset = HAL_PRIME_CHNL_OFFSET_DONT_CARE;
973 			break;
974 		}
975 	} else {
976 		new_bwmode = CHANNEL_WIDTH_20;
977 		new_ch_offset = HAL_PRIME_CHNL_OFFSET_DONT_CARE;
978 	}
979 
980 	if ((new_bwmode != pmlmeext->cur_bwmode) || (new_ch_offset != pmlmeext->cur_ch_offset)) {
981 		pmlmeinfo->bwmode_updated = true;
982 
983 		pmlmeext->cur_bwmode = new_bwmode;
984 		pmlmeext->cur_ch_offset = new_ch_offset;
985 
986 		/* update HT info also */
987 		HT_info_handler(padapter, pIE);
988 	} else {
989 		pmlmeinfo->bwmode_updated = false;
990 	}
991 
992 	if (true == pmlmeinfo->bwmode_updated) {
993 		struct sta_info *psta;
994 		struct wlan_bssid_ex	*cur_network = &(pmlmeinfo->network);
995 		struct sta_priv *pstapriv = &padapter->stapriv;
996 
997 		/* set_channel_bwmode(padapter, pmlmeext->cur_channel, pmlmeext->cur_ch_offset, pmlmeext->cur_bwmode); */
998 
999 		/* update ap's stainfo */
1000 		psta = rtw_get_stainfo(pstapriv, cur_network->MacAddress);
1001 		if (psta) {
1002 			struct ht_priv *phtpriv_sta = &psta->htpriv;
1003 
1004 			if (phtpriv_sta->ht_option) {
1005 				/*  bwmode */
1006 				psta->bw_mode = pmlmeext->cur_bwmode;
1007 				phtpriv_sta->ch_offset = pmlmeext->cur_ch_offset;
1008 			} else {
1009 				psta->bw_mode = CHANNEL_WIDTH_20;
1010 				phtpriv_sta->ch_offset = HAL_PRIME_CHNL_OFFSET_DONT_CARE;
1011 			}
1012 
1013 			rtw_dm_ra_mask_wk_cmd(padapter, (u8 *)psta);
1014 		}
1015 	}
1016 }
1017 
1018 void HT_caps_handler(struct adapter *padapter, struct ndis_80211_var_ie *pIE)
1019 {
1020 	unsigned int	i;
1021 	u8 rf_type;
1022 	u8 max_AMPDU_len, min_MPDU_spacing;
1023 	u8 cur_ldpc_cap = 0, cur_stbc_cap = 0;
1024 	struct mlme_ext_priv *pmlmeext = &padapter->mlmeextpriv;
1025 	struct mlme_ext_info *pmlmeinfo = &(pmlmeext->mlmext_info);
1026 	struct mlme_priv *pmlmepriv = &padapter->mlmepriv;
1027 	struct ht_priv *phtpriv = &pmlmepriv->htpriv;
1028 
1029 	if (!pIE)
1030 		return;
1031 
1032 	if (phtpriv->ht_option == false)
1033 		return;
1034 
1035 	pmlmeinfo->HT_caps_enable = 1;
1036 
1037 	for (i = 0; i < (pIE->Length); i++) {
1038 		if (i != 2) {
1039 			/* Commented by Albert 2010/07/12 */
1040 			/* Got the endian issue here. */
1041 			pmlmeinfo->HT_caps.u.HT_cap[i] &= (pIE->data[i]);
1042 		} else {
1043 			/* modify from  fw by Thomas 2010/11/17 */
1044 			if ((pmlmeinfo->HT_caps.u.HT_cap_element.AMPDU_para & 0x3) > (pIE->data[i] & 0x3))
1045 				max_AMPDU_len = (pIE->data[i] & 0x3);
1046 			else
1047 				max_AMPDU_len = (pmlmeinfo->HT_caps.u.HT_cap_element.AMPDU_para & 0x3);
1048 
1049 			if ((pmlmeinfo->HT_caps.u.HT_cap_element.AMPDU_para & 0x1c) > (pIE->data[i] & 0x1c))
1050 				min_MPDU_spacing = (pmlmeinfo->HT_caps.u.HT_cap_element.AMPDU_para & 0x1c);
1051 			else
1052 				min_MPDU_spacing = (pIE->data[i] & 0x1c);
1053 
1054 			pmlmeinfo->HT_caps.u.HT_cap_element.AMPDU_para = max_AMPDU_len | min_MPDU_spacing;
1055 		}
1056 	}
1057 	rtw_hal_get_hwreg(padapter, HW_VAR_RF_TYPE, (u8 *)(&rf_type));
1058 
1059 	/* update the MCS set */
1060 	for (i = 0; i < 16; i++)
1061 		pmlmeinfo->HT_caps.u.HT_cap_element.MCS_rate[i] &= pmlmeext->default_supported_mcs_set[i];
1062 
1063 	/* update the MCS rates */
1064 	switch (rf_type) {
1065 	case RF_1T1R:
1066 	case RF_1T2R:
1067 		set_mcs_rate_by_mask(pmlmeinfo->HT_caps.u.HT_cap_element.MCS_rate, MCS_RATE_1R);
1068 		break;
1069 	case RF_2T2R:
1070 	default:
1071 		set_mcs_rate_by_mask(pmlmeinfo->HT_caps.u.HT_cap_element.MCS_rate, MCS_RATE_2R);
1072 	}
1073 
1074 	if (check_fwstate(pmlmepriv, WIFI_AP_STATE)) {
1075 		/*  Config STBC setting */
1076 		if (TEST_FLAG(phtpriv->stbc_cap, STBC_HT_ENABLE_TX) && GET_HT_CAPABILITY_ELE_TX_STBC(pIE->data)) {
1077 			SET_FLAG(cur_stbc_cap, STBC_HT_ENABLE_TX);
1078 			DBG_871X("Enable HT Tx STBC !\n");
1079 		}
1080 		phtpriv->stbc_cap = cur_stbc_cap;
1081 	} else {
1082 		/*  Config LDPC Coding Capability */
1083 		if (TEST_FLAG(phtpriv->ldpc_cap, LDPC_HT_ENABLE_TX) && GET_HT_CAPABILITY_ELE_LDPC_CAP(pIE->data)) {
1084 			SET_FLAG(cur_ldpc_cap, (LDPC_HT_ENABLE_TX | LDPC_HT_CAP_TX));
1085 			DBG_871X("Enable HT Tx LDPC!\n");
1086 		}
1087 		phtpriv->ldpc_cap = cur_ldpc_cap;
1088 
1089 		/*  Config STBC setting */
1090 		if (TEST_FLAG(phtpriv->stbc_cap, STBC_HT_ENABLE_TX) && GET_HT_CAPABILITY_ELE_RX_STBC(pIE->data)) {
1091 			SET_FLAG(cur_stbc_cap, (STBC_HT_ENABLE_TX | STBC_HT_CAP_TX));
1092 			DBG_871X("Enable HT Tx STBC!\n");
1093 		}
1094 		phtpriv->stbc_cap = cur_stbc_cap;
1095 	}
1096 }
1097 
1098 void HT_info_handler(struct adapter *padapter, struct ndis_80211_var_ie *pIE)
1099 {
1100 	struct mlme_ext_priv *pmlmeext = &padapter->mlmeextpriv;
1101 	struct mlme_ext_info *pmlmeinfo = &(pmlmeext->mlmext_info);
1102 	struct mlme_priv *pmlmepriv = &padapter->mlmepriv;
1103 	struct ht_priv *phtpriv = &pmlmepriv->htpriv;
1104 
1105 	if (!pIE)
1106 		return;
1107 
1108 	if (phtpriv->ht_option == false)
1109 		return;
1110 
1111 	if (pIE->Length > sizeof(struct HT_info_element))
1112 		return;
1113 
1114 	pmlmeinfo->HT_info_enable = 1;
1115 	memcpy(&(pmlmeinfo->HT_info), pIE->data, pIE->Length);
1116 }
1117 
1118 void HTOnAssocRsp(struct adapter *padapter)
1119 {
1120 	unsigned char max_AMPDU_len;
1121 	unsigned char min_MPDU_spacing;
1122 	/* struct registry_priv  *pregpriv = &padapter->registrypriv; */
1123 	struct mlme_ext_priv *pmlmeext = &padapter->mlmeextpriv;
1124 	struct mlme_ext_info *pmlmeinfo = &(pmlmeext->mlmext_info);
1125 
1126 	if ((pmlmeinfo->HT_info_enable) && (pmlmeinfo->HT_caps_enable)) {
1127 		pmlmeinfo->HT_enable = 1;
1128 	} else {
1129 		pmlmeinfo->HT_enable = 0;
1130 		/* set_channel_bwmode(padapter, pmlmeext->cur_channel, pmlmeext->cur_ch_offset, pmlmeext->cur_bwmode); */
1131 		return;
1132 	}
1133 
1134 	/* handle A-MPDU parameter field */
1135 	/*
1136 		AMPDU_para [1:0]:Max AMPDU Len => 0:8k , 1:16k, 2:32k, 3:64k
1137 		AMPDU_para [4:2]:Min MPDU Start Spacing
1138 	*/
1139 	max_AMPDU_len = pmlmeinfo->HT_caps.u.HT_cap_element.AMPDU_para & 0x03;
1140 
1141 	min_MPDU_spacing = (pmlmeinfo->HT_caps.u.HT_cap_element.AMPDU_para & 0x1c) >> 2;
1142 
1143 	rtw_hal_set_hwreg(padapter, HW_VAR_AMPDU_MIN_SPACE, (u8 *)(&min_MPDU_spacing));
1144 
1145 	rtw_hal_set_hwreg(padapter, HW_VAR_AMPDU_FACTOR, (u8 *)(&max_AMPDU_len));
1146 }
1147 
1148 void ERP_IE_handler(struct adapter *padapter, struct ndis_80211_var_ie *pIE)
1149 {
1150 	struct mlme_ext_priv *pmlmeext = &padapter->mlmeextpriv;
1151 	struct mlme_ext_info *pmlmeinfo = &(pmlmeext->mlmext_info);
1152 
1153 	if (pIE->Length > 1)
1154 		return;
1155 
1156 	pmlmeinfo->ERP_enable = 1;
1157 	memcpy(&(pmlmeinfo->ERP_IE), pIE->data, pIE->Length);
1158 }
1159 
1160 void VCS_update(struct adapter *padapter, struct sta_info *psta)
1161 {
1162 	struct registry_priv  *pregpriv = &padapter->registrypriv;
1163 	struct mlme_ext_priv *pmlmeext = &padapter->mlmeextpriv;
1164 	struct mlme_ext_info *pmlmeinfo = &(pmlmeext->mlmext_info);
1165 
1166 	switch (pregpriv->vrtl_carrier_sense) {/* 0:off 1:on 2:auto */
1167 	case 0: /* off */
1168 		psta->rtsen = 0;
1169 		psta->cts2self = 0;
1170 		break;
1171 
1172 	case 1: /* on */
1173 		if (pregpriv->vcs_type == 1) { /* 1:RTS/CTS 2:CTS to self */
1174 			psta->rtsen = 1;
1175 			psta->cts2self = 0;
1176 		} else {
1177 			psta->rtsen = 0;
1178 			psta->cts2self = 1;
1179 		}
1180 		break;
1181 
1182 	case 2: /* auto */
1183 	default:
1184 		if ((pmlmeinfo->ERP_enable) && (pmlmeinfo->ERP_IE & BIT(1))) {
1185 			if (pregpriv->vcs_type == 1) {
1186 				psta->rtsen = 1;
1187 				psta->cts2self = 0;
1188 			} else {
1189 				psta->rtsen = 0;
1190 				psta->cts2self = 1;
1191 			}
1192 		} else {
1193 			psta->rtsen = 0;
1194 			psta->cts2self = 0;
1195 		}
1196 		break;
1197 	}
1198 }
1199 
1200 void update_ldpc_stbc_cap(struct sta_info *psta)
1201 {
1202 	if (psta->htpriv.ht_option) {
1203 		if (TEST_FLAG(psta->htpriv.ldpc_cap, LDPC_HT_ENABLE_TX))
1204 			psta->ldpc = 1;
1205 
1206 		if (TEST_FLAG(psta->htpriv.stbc_cap, STBC_HT_ENABLE_TX))
1207 			psta->stbc = 1;
1208 	} else {
1209 		psta->ldpc = 0;
1210 		psta->stbc = 0;
1211 	}
1212 }
1213 
1214 int rtw_check_bcn_info(struct adapter *Adapter, u8 *pframe, u32 packet_len)
1215 {
1216 	unsigned int len;
1217 	unsigned char *p;
1218 	unsigned short	val16, subtype;
1219 	struct wlan_network *cur_network = &(Adapter->mlmepriv.cur_network);
1220 	/* u8 wpa_ie[255], rsn_ie[255]; */
1221 	u16 wpa_len = 0, rsn_len = 0;
1222 	u8 encryp_protocol = 0;
1223 	struct wlan_bssid_ex *bssid;
1224 	int group_cipher = 0, pairwise_cipher = 0, is_8021x = 0;
1225 	unsigned char *pbuf;
1226 	u32 wpa_ielen = 0;
1227 	u8 *pbssid = GetAddr3Ptr(pframe);
1228 	struct HT_info_element *pht_info = NULL;
1229 	struct ieee80211_ht_cap *pht_cap = NULL;
1230 	u32 bcn_channel;
1231 	unsigned short	ht_cap_info;
1232 	unsigned char ht_info_infos_0;
1233 	struct mlme_priv *pmlmepriv = &Adapter->mlmepriv;
1234 	int ssid_len;
1235 
1236 	if (is_client_associated_to_ap(Adapter) == false)
1237 		return true;
1238 
1239 	len = packet_len - sizeof(struct ieee80211_hdr_3addr);
1240 
1241 	if (len > MAX_IE_SZ) {
1242 		DBG_871X("%s IE too long for survey event\n", __func__);
1243 		return _FAIL;
1244 	}
1245 
1246 	if (memcmp(cur_network->network.MacAddress, pbssid, 6)) {
1247 		DBG_871X("Oops: rtw_check_network_encrypt linked but recv other bssid bcn %pM %pM\n",
1248 				MAC_ARG(pbssid), MAC_ARG(cur_network->network.MacAddress));
1249 		return true;
1250 	}
1251 
1252 	bssid = rtw_zmalloc(sizeof(struct wlan_bssid_ex));
1253 	if (!bssid) {
1254 		DBG_871X("%s rtw_zmalloc fail !!!\n", __func__);
1255 		return true;
1256 	}
1257 
1258 	if ((pmlmepriv->timeBcnInfoChkStart != 0) && (jiffies_to_msecs(jiffies - pmlmepriv->timeBcnInfoChkStart) > DISCONNECT_BY_CHK_BCN_FAIL_OBSERV_PERIOD_IN_MS)) {
1259 		pmlmepriv->timeBcnInfoChkStart = 0;
1260 		pmlmepriv->NumOfBcnInfoChkFail = 0;
1261 	}
1262 
1263 	subtype = GetFrameSubType(pframe) >> 4;
1264 
1265 	if (subtype == WIFI_BEACON)
1266 		bssid->Reserved[0] = 1;
1267 
1268 	bssid->Length = sizeof(struct wlan_bssid_ex) - MAX_IE_SZ + len;
1269 
1270 	/* below is to copy the information element */
1271 	bssid->IELength = len;
1272 	memcpy(bssid->IEs, (pframe + sizeof(struct ieee80211_hdr_3addr)), bssid->IELength);
1273 
1274 	/* check bw and channel offset */
1275 	/* parsing HT_CAP_IE */
1276 	p = rtw_get_ie(bssid->IEs + _FIXED_IE_LENGTH_, WLAN_EID_HT_CAPABILITY, &len, bssid->IELength - _FIXED_IE_LENGTH_);
1277 	if (p && len > 0) {
1278 			pht_cap = (struct ieee80211_ht_cap *)(p + 2);
1279 			ht_cap_info = le16_to_cpu(pht_cap->cap_info);
1280 	} else {
1281 			ht_cap_info = 0;
1282 	}
1283 	/* parsing HT_INFO_IE */
1284 	p = rtw_get_ie(bssid->IEs + _FIXED_IE_LENGTH_, WLAN_EID_HT_OPERATION, &len, bssid->IELength - _FIXED_IE_LENGTH_);
1285 	if (p && len > 0) {
1286 			pht_info = (struct HT_info_element *)(p + 2);
1287 			ht_info_infos_0 = pht_info->infos[0];
1288 	} else {
1289 			ht_info_infos_0 = 0;
1290 	}
1291 	if (ht_cap_info != cur_network->BcnInfo.ht_cap_info ||
1292 		((ht_info_infos_0&0x03) != (cur_network->BcnInfo.ht_info_infos_0&0x03))) {
1293 			DBG_871X("%s bcn now: ht_cap_info:%x ht_info_infos_0:%x\n", __func__,
1294 							ht_cap_info, ht_info_infos_0);
1295 			DBG_871X("%s bcn link: ht_cap_info:%x ht_info_infos_0:%x\n", __func__,
1296 							cur_network->BcnInfo.ht_cap_info, cur_network->BcnInfo.ht_info_infos_0);
1297 			DBG_871X("%s bw mode change\n", __func__);
1298 			{
1299 				/* bcn_info_update */
1300 				cur_network->BcnInfo.ht_cap_info = ht_cap_info;
1301 				cur_network->BcnInfo.ht_info_infos_0 = ht_info_infos_0;
1302 				/* to do : need to check that whether modify related register of BB or not */
1303 			}
1304 			/* goto _mismatch; */
1305 	}
1306 
1307 	/* Checking for channel */
1308 	p = rtw_get_ie(bssid->IEs + _FIXED_IE_LENGTH_, WLAN_EID_DS_PARAMS, &len, bssid->IELength - _FIXED_IE_LENGTH_);
1309 	if (p) {
1310 			bcn_channel = *(p + 2);
1311 	} else {/* In 5G, some ap do not have DSSET IE checking HT info for channel */
1312 			rtw_get_ie(bssid->IEs + _FIXED_IE_LENGTH_, WLAN_EID_HT_OPERATION, &len, bssid->IELength - _FIXED_IE_LENGTH_);
1313 			if (pht_info) {
1314 					bcn_channel = pht_info->primary_channel;
1315 			} else { /* we don't find channel IE, so don't check it */
1316 					/* DBG_871X("Oops: %s we don't find channel IE, so don't check it\n", __func__); */
1317 					bcn_channel = Adapter->mlmeextpriv.cur_channel;
1318 			}
1319 	}
1320 	if (bcn_channel != Adapter->mlmeextpriv.cur_channel) {
1321 			DBG_871X("%s beacon channel:%d cur channel:%d disconnect\n", __func__,
1322 						   bcn_channel, Adapter->mlmeextpriv.cur_channel);
1323 			goto _mismatch;
1324 	}
1325 
1326 	/* checking SSID */
1327 	ssid_len = 0;
1328 	p = rtw_get_ie(bssid->IEs + _FIXED_IE_LENGTH_, WLAN_EID_SSID, &len, bssid->IELength - _FIXED_IE_LENGTH_);
1329 	if (p) {
1330 		ssid_len = *(p + 1);
1331 		if (ssid_len > NDIS_802_11_LENGTH_SSID)
1332 			ssid_len = 0;
1333 	}
1334 	memcpy(bssid->Ssid.Ssid, (p + 2), ssid_len);
1335 	bssid->Ssid.SsidLength = ssid_len;
1336 
1337 	RT_TRACE(_module_rtl871x_mlme_c_, _drv_info_, ("%s bssid.Ssid.Ssid:%s bssid.Ssid.SsidLength:%d "
1338 				"cur_network->network.Ssid.Ssid:%s len:%d\n", __func__, bssid->Ssid.Ssid,
1339 				bssid->Ssid.SsidLength, cur_network->network.Ssid.Ssid,
1340 				cur_network->network.Ssid.SsidLength));
1341 
1342 	if (memcmp(bssid->Ssid.Ssid, cur_network->network.Ssid.Ssid, 32) ||
1343 			bssid->Ssid.SsidLength != cur_network->network.Ssid.SsidLength) {
1344 		if (bssid->Ssid.Ssid[0] != '\0' && bssid->Ssid.SsidLength != 0) { /* not hidden ssid */
1345 			DBG_871X("%s(), SSID is not match\n", __func__);
1346 			goto _mismatch;
1347 		}
1348 	}
1349 
1350 	/* check encryption info */
1351 	val16 = rtw_get_capability((struct wlan_bssid_ex *)bssid);
1352 
1353 	if (val16 & BIT(4))
1354 		bssid->Privacy = 1;
1355 	else
1356 		bssid->Privacy = 0;
1357 
1358 	RT_TRACE(_module_rtl871x_mlme_c_, _drv_info_,
1359 			("%s(): cur_network->network.Privacy is %d, bssid.Privacy is %d\n",
1360 			 __func__, cur_network->network.Privacy, bssid->Privacy));
1361 	if (cur_network->network.Privacy != bssid->Privacy) {
1362 		DBG_871X("%s(), privacy is not match\n", __func__);
1363 		goto _mismatch;
1364 	}
1365 
1366 	rtw_get_sec_ie(bssid->IEs, bssid->IELength, NULL, &rsn_len, NULL, &wpa_len);
1367 
1368 	if (rsn_len > 0) {
1369 		encryp_protocol = ENCRYP_PROTOCOL_WPA2;
1370 	} else if (wpa_len > 0) {
1371 		encryp_protocol = ENCRYP_PROTOCOL_WPA;
1372 	} else {
1373 		if (bssid->Privacy)
1374 			encryp_protocol = ENCRYP_PROTOCOL_WEP;
1375 	}
1376 
1377 	if (cur_network->BcnInfo.encryp_protocol != encryp_protocol) {
1378 		DBG_871X("%s(): enctyp is not match\n", __func__);
1379 		goto _mismatch;
1380 	}
1381 
1382 	if (encryp_protocol == ENCRYP_PROTOCOL_WPA || encryp_protocol == ENCRYP_PROTOCOL_WPA2) {
1383 		pbuf = rtw_get_wpa_ie(&bssid->IEs[12], &wpa_ielen, bssid->IELength-12);
1384 		if (pbuf && (wpa_ielen > 0)) {
1385 			if (_SUCCESS == rtw_parse_wpa_ie(pbuf, wpa_ielen+2, &group_cipher, &pairwise_cipher, &is_8021x)) {
1386 				RT_TRACE(_module_rtl871x_mlme_c_, _drv_info_,
1387 						("%s pnetwork->pairwise_cipher: %d, group_cipher is %d, is_8021x is %d\n", __func__,
1388 						 pairwise_cipher, group_cipher, is_8021x));
1389 			}
1390 		} else {
1391 			pbuf = rtw_get_wpa2_ie(&bssid->IEs[12], &wpa_ielen, bssid->IELength-12);
1392 
1393 			if (pbuf && (wpa_ielen > 0)) {
1394 				if (_SUCCESS == rtw_parse_wpa2_ie(pbuf, wpa_ielen+2, &group_cipher, &pairwise_cipher, &is_8021x)) {
1395 					RT_TRACE(_module_rtl871x_mlme_c_, _drv_info_,
1396 							("%s pnetwork->pairwise_cipher: %d, pnetwork->group_cipher is %d, is_802x is %d\n",
1397 							 __func__, pairwise_cipher, group_cipher, is_8021x));
1398 				}
1399 			}
1400 		}
1401 
1402 		RT_TRACE(_module_rtl871x_mlme_c_, _drv_err_,
1403 				("%s cur_network->group_cipher is %d: %d\n", __func__, cur_network->BcnInfo.group_cipher, group_cipher));
1404 		if (pairwise_cipher != cur_network->BcnInfo.pairwise_cipher || group_cipher != cur_network->BcnInfo.group_cipher) {
1405 			DBG_871X("%s pairwise_cipher(%x:%x) or group_cipher(%x:%x) is not match\n", __func__,
1406 					pairwise_cipher, cur_network->BcnInfo.pairwise_cipher,
1407 					group_cipher, cur_network->BcnInfo.group_cipher);
1408 			goto _mismatch;
1409 		}
1410 
1411 		if (is_8021x != cur_network->BcnInfo.is_8021x) {
1412 			DBG_871X("%s authentication is not match\n", __func__);
1413 			goto _mismatch;
1414 		}
1415 	}
1416 
1417 	kfree(bssid);
1418 	return _SUCCESS;
1419 
1420 _mismatch:
1421 	kfree(bssid);
1422 
1423 	if (pmlmepriv->NumOfBcnInfoChkFail == 0)
1424 		pmlmepriv->timeBcnInfoChkStart = jiffies;
1425 
1426 	pmlmepriv->NumOfBcnInfoChkFail++;
1427 	DBG_871X("%s by %s - NumOfChkFail = %d (SeqNum of this Beacon frame = %d).\n", __func__, ADPT_ARG(Adapter), pmlmepriv->NumOfBcnInfoChkFail, GetSequence(pframe));
1428 
1429 	if ((pmlmepriv->timeBcnInfoChkStart != 0) && (jiffies_to_msecs(jiffies - pmlmepriv->timeBcnInfoChkStart) <= DISCONNECT_BY_CHK_BCN_FAIL_OBSERV_PERIOD_IN_MS)
1430 		&& (pmlmepriv->NumOfBcnInfoChkFail >= DISCONNECT_BY_CHK_BCN_FAIL_THRESHOLD)) {
1431 		DBG_871X("%s by %s - NumOfChkFail = %d >= threshold : %d (in %d ms), return FAIL.\n", __func__, ADPT_ARG(Adapter), pmlmepriv->NumOfBcnInfoChkFail,
1432 			DISCONNECT_BY_CHK_BCN_FAIL_THRESHOLD, jiffies_to_msecs(jiffies - pmlmepriv->timeBcnInfoChkStart));
1433 		pmlmepriv->timeBcnInfoChkStart = 0;
1434 		pmlmepriv->NumOfBcnInfoChkFail = 0;
1435 		return _FAIL;
1436 	}
1437 
1438 	return _SUCCESS;
1439 }
1440 
1441 void update_beacon_info(struct adapter *padapter, u8 *pframe, uint pkt_len, struct sta_info *psta)
1442 {
1443 	unsigned int i;
1444 	unsigned int len;
1445 	struct ndis_80211_var_ie *pIE;
1446 
1447 	len = pkt_len - (_BEACON_IE_OFFSET_ + WLAN_HDR_A3_LEN);
1448 
1449 	for (i = 0; i < len;) {
1450 		pIE = (struct ndis_80211_var_ie *)(pframe + (_BEACON_IE_OFFSET_ + WLAN_HDR_A3_LEN) + i);
1451 
1452 		switch (pIE->ElementID) {
1453 		case WLAN_EID_VENDOR_SPECIFIC:
1454 			/* to update WMM parameter set while receiving beacon */
1455 			if (!memcmp(pIE->data, WMM_PARA_OUI, 6) && pIE->Length == WLAN_WMM_LEN)	/* WMM */
1456 				if (WMM_param_handler(padapter, pIE))
1457 					report_wmm_edca_update(padapter);
1458 
1459 			break;
1460 
1461 		case WLAN_EID_HT_OPERATION:	/* HT info */
1462 			/* HT_info_handler(padapter, pIE); */
1463 			bwmode_update_check(padapter, pIE);
1464 			break;
1465 
1466 		case WLAN_EID_ERP_INFO:
1467 			ERP_IE_handler(padapter, pIE);
1468 			VCS_update(padapter, psta);
1469 			break;
1470 
1471 		default:
1472 			break;
1473 		}
1474 
1475 		i += (pIE->Length + 2);
1476 	}
1477 }
1478 
1479 unsigned int is_ap_in_tkip(struct adapter *padapter)
1480 {
1481 	u32 i;
1482 	struct ndis_80211_var_ie *pIE;
1483 	struct mlme_ext_priv *pmlmeext = &padapter->mlmeextpriv;
1484 	struct mlme_ext_info *pmlmeinfo = &(pmlmeext->mlmext_info);
1485 	struct wlan_bssid_ex		*cur_network = &(pmlmeinfo->network);
1486 
1487 	if (rtw_get_capability((struct wlan_bssid_ex *)cur_network) & WLAN_CAPABILITY_PRIVACY) {
1488 		for (i = sizeof(struct ndis_802_11_fix_ie); i < pmlmeinfo->network.IELength;) {
1489 			pIE = (struct ndis_80211_var_ie *)(pmlmeinfo->network.IEs + i);
1490 
1491 			switch (pIE->ElementID) {
1492 			case WLAN_EID_VENDOR_SPECIFIC:
1493 				if ((!memcmp(pIE->data, RTW_WPA_OUI, 4)) && (!memcmp((pIE->data + 12), WPA_TKIP_CIPHER, 4)))
1494 					return true;
1495 
1496 				break;
1497 
1498 			case WLAN_EID_RSN:
1499 				if (!memcmp((pIE->data + 8), RSN_TKIP_CIPHER, 4))
1500 					return true;
1501 				break;
1502 
1503 			default:
1504 				break;
1505 			}
1506 
1507 			i += (pIE->Length + 2);
1508 		}
1509 
1510 		return false;
1511 	} else {
1512 		return false;
1513 	}
1514 }
1515 
1516 int support_short_GI(struct adapter *padapter, struct HT_caps_element *pHT_caps, u8 bwmode)
1517 {
1518 	unsigned char bit_offset;
1519 	struct mlme_ext_priv *pmlmeext = &padapter->mlmeextpriv;
1520 	struct mlme_ext_info *pmlmeinfo = &(pmlmeext->mlmext_info);
1521 
1522 	if (!(pmlmeinfo->HT_enable))
1523 		return _FAIL;
1524 
1525 	bit_offset = (bwmode & CHANNEL_WIDTH_40) ? 6 : 5;
1526 
1527 	if (le16_to_cpu(pHT_caps->u.HT_cap_element.HT_caps_info) & (0x1 << bit_offset))
1528 		return _SUCCESS;
1529 	else
1530 		return _FAIL;
1531 }
1532 
1533 unsigned char get_highest_rate_idx(u32 mask)
1534 {
1535 	int i;
1536 	unsigned char rate_idx = 0;
1537 
1538 	for (i = 31; i >= 0; i--) {
1539 		if (mask & BIT(i)) {
1540 			rate_idx = i;
1541 			break;
1542 		}
1543 	}
1544 
1545 	return rate_idx;
1546 }
1547 
1548 void Update_RA_Entry(struct adapter *padapter, struct sta_info *psta)
1549 {
1550 	rtw_hal_update_ra_mask(psta, 0);
1551 }
1552 
1553 void set_sta_rate(struct adapter *padapter, struct sta_info *psta)
1554 {
1555 	/* rate adaptive */
1556 	Update_RA_Entry(padapter, psta);
1557 }
1558 
1559 unsigned char check_assoc_AP(u8 *pframe, uint len)
1560 {
1561 	unsigned int	i;
1562 	struct ndis_80211_var_ie *pIE;
1563 
1564 	for (i = sizeof(struct ndis_802_11_fix_ie); i < len;) {
1565 		pIE = (struct ndis_80211_var_ie *)(pframe + i);
1566 
1567 		switch (pIE->ElementID) {
1568 		case WLAN_EID_VENDOR_SPECIFIC:
1569 			if ((!memcmp(pIE->data, ARTHEROS_OUI1, 3)) || (!memcmp(pIE->data, ARTHEROS_OUI2, 3))) {
1570 				DBG_871X("link to Artheros AP\n");
1571 				return HT_IOT_PEER_ATHEROS;
1572 			} else if ((!memcmp(pIE->data, BROADCOM_OUI1, 3)) ||
1573 				   (!memcmp(pIE->data, BROADCOM_OUI2, 3)) ||
1574 				   (!memcmp(pIE->data, BROADCOM_OUI3, 3))) {
1575 				DBG_871X("link to Broadcom AP\n");
1576 				return HT_IOT_PEER_BROADCOM;
1577 			} else if (!memcmp(pIE->data, MARVELL_OUI, 3)) {
1578 				DBG_871X("link to Marvell AP\n");
1579 				return HT_IOT_PEER_MARVELL;
1580 			} else if (!memcmp(pIE->data, RALINK_OUI, 3)) {
1581 				DBG_871X("link to Ralink AP\n");
1582 				return HT_IOT_PEER_RALINK;
1583 			} else if (!memcmp(pIE->data, CISCO_OUI, 3)) {
1584 				DBG_871X("link to Cisco AP\n");
1585 				return HT_IOT_PEER_CISCO;
1586 			} else if (!memcmp(pIE->data, REALTEK_OUI, 3)) {
1587 				u32 Vender = HT_IOT_PEER_REALTEK;
1588 
1589 				if (pIE->Length >= 5) {
1590 					if (pIE->data[4] == 1)
1591 						/* if (pIE->data[5] & RT_HT_CAP_USE_LONG_PREAMBLE) */
1592 						/* bssDesc->BssHT.RT2RT_HT_Mode |= RT_HT_CAP_USE_LONG_PREAMBLE; */
1593 						if (pIE->data[5] & RT_HT_CAP_USE_92SE)
1594 							/* bssDesc->BssHT.RT2RT_HT_Mode |= RT_HT_CAP_USE_92SE; */
1595 							Vender = HT_IOT_PEER_REALTEK_92SE;
1596 
1597 					if (pIE->data[5] & RT_HT_CAP_USE_SOFTAP)
1598 						Vender = HT_IOT_PEER_REALTEK_SOFTAP;
1599 
1600 					if (pIE->data[4] == 2) {
1601 						if (pIE->data[6] & RT_HT_CAP_USE_JAGUAR_BCUT) {
1602 							Vender = HT_IOT_PEER_REALTEK_JAGUAR_BCUTAP;
1603 							DBG_871X("link to Realtek JAGUAR_BCUTAP\n");
1604 						}
1605 						if (pIE->data[6] & RT_HT_CAP_USE_JAGUAR_CCUT) {
1606 							Vender = HT_IOT_PEER_REALTEK_JAGUAR_CCUTAP;
1607 							DBG_871X("link to Realtek JAGUAR_CCUTAP\n");
1608 						}
1609 					}
1610 				}
1611 
1612 				DBG_871X("link to Realtek AP\n");
1613 				return Vender;
1614 			} else if (!memcmp(pIE->data, AIRGOCAP_OUI, 3)) {
1615 				DBG_871X("link to Airgo Cap\n");
1616 				return HT_IOT_PEER_AIRGO;
1617 			} else {
1618 				break;
1619 			}
1620 
1621 		default:
1622 			break;
1623 		}
1624 
1625 		i += (pIE->Length + 2);
1626 	}
1627 
1628 	DBG_871X("link to new AP\n");
1629 	return HT_IOT_PEER_UNKNOWN;
1630 }
1631 
1632 void update_IOT_info(struct adapter *padapter)
1633 {
1634 	struct mlme_ext_priv *pmlmeext = &padapter->mlmeextpriv;
1635 	struct mlme_ext_info *pmlmeinfo = &(pmlmeext->mlmext_info);
1636 
1637 	switch (pmlmeinfo->assoc_AP_vendor) {
1638 	case HT_IOT_PEER_MARVELL:
1639 		pmlmeinfo->turboMode_cts2self = 1;
1640 		pmlmeinfo->turboMode_rtsen = 0;
1641 		break;
1642 
1643 	case HT_IOT_PEER_RALINK:
1644 		pmlmeinfo->turboMode_cts2self = 0;
1645 		pmlmeinfo->turboMode_rtsen = 1;
1646 		/* disable high power */
1647 		Switch_DM_Func(padapter, (~DYNAMIC_BB_DYNAMIC_TXPWR), false);
1648 		break;
1649 	case HT_IOT_PEER_REALTEK:
1650 		/* rtw_write16(padapter, 0x4cc, 0xffff); */
1651 		/* rtw_write16(padapter, 0x546, 0x01c0); */
1652 		/* disable high power */
1653 		Switch_DM_Func(padapter, (~DYNAMIC_BB_DYNAMIC_TXPWR), false);
1654 		break;
1655 	default:
1656 		pmlmeinfo->turboMode_cts2self = 0;
1657 		pmlmeinfo->turboMode_rtsen = 1;
1658 		break;
1659 	}
1660 }
1661 
1662 void update_capinfo(struct adapter *Adapter, u16 updateCap)
1663 {
1664 	struct mlme_ext_priv *pmlmeext = &Adapter->mlmeextpriv;
1665 	struct mlme_ext_info *pmlmeinfo = &(pmlmeext->mlmext_info);
1666 	bool		ShortPreamble;
1667 
1668 	/*  Check preamble mode, 2005.01.06, by rcnjko. */
1669 	/*  Mark to update preamble value forever, 2008.03.18 by lanhsin */
1670 	/* if (pMgntInfo->RegPreambleMode == PREAMBLE_AUTO) */
1671 	{
1672 		if (updateCap & cShortPreamble) {
1673 			/*  Short Preamble */
1674 			if (pmlmeinfo->preamble_mode != PREAMBLE_SHORT) { /*  PREAMBLE_LONG or PREAMBLE_AUTO */
1675 				ShortPreamble = true;
1676 				pmlmeinfo->preamble_mode = PREAMBLE_SHORT;
1677 				rtw_hal_set_hwreg(Adapter, HW_VAR_ACK_PREAMBLE, (u8 *)&ShortPreamble);
1678 			}
1679 		} else {
1680 			/*  Long Preamble */
1681 			if (pmlmeinfo->preamble_mode != PREAMBLE_LONG) { /*  PREAMBLE_SHORT or PREAMBLE_AUTO */
1682 				ShortPreamble = false;
1683 				pmlmeinfo->preamble_mode = PREAMBLE_LONG;
1684 				rtw_hal_set_hwreg(Adapter, HW_VAR_ACK_PREAMBLE, (u8 *)&ShortPreamble);
1685 			}
1686 		}
1687 	}
1688 
1689 	if (updateCap & cIBSS) {
1690 		/* Filen: See 802.11-2007 p.91 */
1691 		pmlmeinfo->slotTime = NON_SHORT_SLOT_TIME;
1692 	} else {
1693 		/* Filen: See 802.11-2007 p.90 */
1694 		if (pmlmeext->cur_wireless_mode & (WIRELESS_11_24N | WIRELESS_11A | WIRELESS_11_5N | WIRELESS_11AC)) {
1695 			pmlmeinfo->slotTime = SHORT_SLOT_TIME;
1696 		} else if (pmlmeext->cur_wireless_mode & (WIRELESS_11G)) {
1697 			if ((updateCap & cShortSlotTime) /* && (!(pMgntInfo->pHTInfo->RT2RT_HT_Mode & RT_HT_CAP_USE_LONG_PREAMBLE)) */)
1698 				/*  Short Slot Time */
1699 				pmlmeinfo->slotTime = SHORT_SLOT_TIME;
1700 			else
1701 				/*  Long Slot Time */
1702 				pmlmeinfo->slotTime = NON_SHORT_SLOT_TIME;
1703 		} else {
1704 			/* B Mode */
1705 			pmlmeinfo->slotTime = NON_SHORT_SLOT_TIME;
1706 		}
1707 	}
1708 
1709 	rtw_hal_set_hwreg(Adapter, HW_VAR_SLOT_TIME, &pmlmeinfo->slotTime);
1710 }
1711 
1712 void update_wireless_mode(struct adapter *padapter)
1713 {
1714 	int network_type = 0;
1715 	u32 SIFS_Timer;
1716 	struct mlme_ext_priv *pmlmeext = &padapter->mlmeextpriv;
1717 	struct mlme_ext_info *pmlmeinfo = &(pmlmeext->mlmext_info);
1718 	struct wlan_bssid_ex *cur_network = &(pmlmeinfo->network);
1719 	unsigned char *rate = cur_network->SupportedRates;
1720 
1721 	if ((pmlmeinfo->HT_info_enable) && (pmlmeinfo->HT_caps_enable))
1722 		pmlmeinfo->HT_enable = 1;
1723 
1724 	if (pmlmeinfo->VHT_enable)
1725 		network_type = WIRELESS_11AC;
1726 	else if (pmlmeinfo->HT_enable)
1727 		network_type = WIRELESS_11_24N;
1728 
1729 	if (rtw_is_cckratesonly_included(rate))
1730 		network_type |= WIRELESS_11B;
1731 	else if (rtw_is_cckrates_included(rate))
1732 		network_type |= WIRELESS_11BG;
1733 	else
1734 		network_type |= WIRELESS_11G;
1735 
1736 	pmlmeext->cur_wireless_mode = network_type & padapter->registrypriv.wireless_mode;
1737 
1738 	SIFS_Timer = 0x0a0a0808; /* 0x0808 -> for CCK, 0x0a0a -> for OFDM */
1739 													/* change this value if having IOT issues. */
1740 
1741 	padapter->HalFunc.SetHwRegHandler(padapter, HW_VAR_RESP_SIFS,  (u8 *)&SIFS_Timer);
1742 
1743 	padapter->HalFunc.SetHwRegHandler(padapter, HW_VAR_WIRELESS_MODE,  (u8 *)&(pmlmeext->cur_wireless_mode));
1744 
1745 	if (pmlmeext->cur_wireless_mode & WIRELESS_11B)
1746 		update_mgnt_tx_rate(padapter, IEEE80211_CCK_RATE_1MB);
1747 	else
1748 		update_mgnt_tx_rate(padapter, IEEE80211_OFDM_RATE_6MB);
1749 }
1750 
1751 void update_sta_basic_rate(struct sta_info *psta, u8 wireless_mode)
1752 {
1753 	if (IsSupportedTxCCK(wireless_mode)) {
1754 		/*  Only B, B/G, and B/G/N AP could use CCK rate */
1755 		memcpy(psta->bssrateset, rtw_basic_rate_cck, 4);
1756 		psta->bssratelen = 4;
1757 	} else {
1758 		memcpy(psta->bssrateset, rtw_basic_rate_ofdm, 3);
1759 		psta->bssratelen = 3;
1760 	}
1761 }
1762 
1763 int update_sta_support_rate(struct adapter *padapter, u8 *pvar_ie, uint var_ie_len, int cam_idx)
1764 {
1765 	unsigned int	ie_len;
1766 	struct ndis_80211_var_ie *pIE;
1767 	int	supportRateNum = 0;
1768 	struct mlme_ext_priv *pmlmeext = &(padapter->mlmeextpriv);
1769 	struct mlme_ext_info *pmlmeinfo = &(pmlmeext->mlmext_info);
1770 
1771 	pIE = (struct ndis_80211_var_ie *)rtw_get_ie(pvar_ie, WLAN_EID_SUPP_RATES, &ie_len, var_ie_len);
1772 	if (!pIE)
1773 		return _FAIL;
1774 	if (ie_len > sizeof(pmlmeinfo->FW_sta_info[cam_idx].SupportedRates))
1775 		return _FAIL;
1776 
1777 	memcpy(pmlmeinfo->FW_sta_info[cam_idx].SupportedRates, pIE->data, ie_len);
1778 	supportRateNum = ie_len;
1779 
1780 	pIE = (struct ndis_80211_var_ie *)rtw_get_ie(pvar_ie, WLAN_EID_EXT_SUPP_RATES, &ie_len, var_ie_len);
1781 	if (pIE && (ie_len <= sizeof(pmlmeinfo->FW_sta_info[cam_idx].SupportedRates) - supportRateNum))
1782 		memcpy((pmlmeinfo->FW_sta_info[cam_idx].SupportedRates + supportRateNum), pIE->data, ie_len);
1783 
1784 	return _SUCCESS;
1785 }
1786 
1787 void process_addba_req(struct adapter *padapter, u8 *paddba_req, u8 *addr)
1788 {
1789 	struct sta_info *psta;
1790 	u16 tid, start_seq, param;
1791 	struct recv_reorder_ctrl *preorder_ctrl;
1792 	struct sta_priv *pstapriv = &padapter->stapriv;
1793 	struct ADDBA_request *preq = (struct ADDBA_request *)paddba_req;
1794 	struct mlme_ext_priv *pmlmeext = &padapter->mlmeextpriv;
1795 	struct mlme_ext_info *pmlmeinfo = &(pmlmeext->mlmext_info);
1796 
1797 	psta = rtw_get_stainfo(pstapriv, addr);
1798 
1799 	if (psta) {
1800 		start_seq = le16_to_cpu(preq->BA_starting_seqctrl) >> 4;
1801 
1802 		param = le16_to_cpu(preq->BA_para_set);
1803 		tid = (param>>2)&0x0f;
1804 
1805 		preorder_ctrl = &psta->recvreorder_ctrl[tid];
1806 
1807 		preorder_ctrl->indicate_seq = 0xffff;
1808 
1809 		preorder_ctrl->enable = pmlmeinfo->accept_addba_req;
1810 	}
1811 }
1812 
1813 void update_TSF(struct mlme_ext_priv *pmlmeext, u8 *pframe, uint len)
1814 {
1815 	u8 *pIE;
1816 	__le32 *pbuf;
1817 
1818 	pIE = pframe + sizeof(struct ieee80211_hdr_3addr);
1819 	pbuf = (__le32 *)pIE;
1820 
1821 	pmlmeext->TSFValue = le32_to_cpu(*(pbuf+1));
1822 
1823 	pmlmeext->TSFValue = pmlmeext->TSFValue << 32;
1824 
1825 	pmlmeext->TSFValue |= le32_to_cpu(*pbuf);
1826 }
1827 
1828 void correct_TSF(struct adapter *padapter, struct mlme_ext_priv *pmlmeext)
1829 {
1830 	rtw_hal_set_hwreg(padapter, HW_VAR_CORRECT_TSF, NULL);
1831 }
1832 
1833 void adaptive_early_32k(struct mlme_ext_priv *pmlmeext, u8 *pframe, uint len)
1834 {
1835 	int i;
1836 	u8 *pIE;
1837 	__le32 *pbuf;
1838 	u64 tsf = 0;
1839 	u32 delay_ms;
1840 	struct mlme_ext_info *pmlmeinfo = &(pmlmeext->mlmext_info);
1841 
1842 	pmlmeext->bcn_cnt++;
1843 
1844 	pIE = pframe + sizeof(struct ieee80211_hdr_3addr);
1845 	pbuf = (__le32 *)pIE;
1846 
1847 	tsf = le32_to_cpu(*(pbuf+1));
1848 	tsf = tsf << 32;
1849 	tsf |= le32_to_cpu(*pbuf);
1850 
1851 	/* DBG_871X("%s(): tsf_upper = 0x%08x, tsf_lower = 0x%08x\n", __func__, (u32)(tsf>>32), (u32)tsf); */
1852 
1853 	/* delay = (timestamp mod 1024*100)/1000 (unit: ms) */
1854 	/* delay_ms = do_div(tsf, (pmlmeinfo->bcn_interval*1024))/1000; */
1855 	delay_ms = do_div(tsf, (pmlmeinfo->bcn_interval*1024));
1856 	delay_ms = delay_ms/1000;
1857 
1858 	if (delay_ms >= 8)
1859 		pmlmeext->bcn_delay_cnt[8]++;
1860 		/* pmlmeext->bcn_delay_ratio[8] = (pmlmeext->bcn_delay_cnt[8] * 100) /pmlmeext->bcn_cnt; */
1861 	else
1862 		pmlmeext->bcn_delay_cnt[delay_ms]++;
1863 		/* pmlmeext->bcn_delay_ratio[delay_ms] = (pmlmeext->bcn_delay_cnt[delay_ms] * 100) /pmlmeext->bcn_cnt; */
1864 
1865 /*
1866 	DBG_871X("%s(): (a)bcn_cnt = %d\n", __func__, pmlmeext->bcn_cnt);
1867 
1868 	for (i = 0; i<9; i++)
1869 	{
1870 		DBG_871X("%s():bcn_delay_cnt[%d]=%d,  bcn_delay_ratio[%d]=%d\n", __func__, i,
1871 			pmlmeext->bcn_delay_cnt[i] , i, pmlmeext->bcn_delay_ratio[i]);
1872 	}
1873 */
1874 
1875 	/* dump for  adaptive_early_32k */
1876 	if (pmlmeext->bcn_cnt > 100 && (pmlmeext->adaptive_tsf_done == true)) {
1877 		u8 ratio_20_delay, ratio_80_delay;
1878 		u8 DrvBcnEarly, DrvBcnTimeOut;
1879 
1880 		ratio_20_delay = 0;
1881 		ratio_80_delay = 0;
1882 		DrvBcnEarly = 0xff;
1883 		DrvBcnTimeOut = 0xff;
1884 
1885 		DBG_871X("%s(): bcn_cnt = %d\n", __func__, pmlmeext->bcn_cnt);
1886 
1887 		for (i = 0; i < 9; i++) {
1888 			pmlmeext->bcn_delay_ratio[i] = (pmlmeext->bcn_delay_cnt[i] * 100) / pmlmeext->bcn_cnt;
1889 
1890 			DBG_871X("%s():bcn_delay_cnt[%d]=%d,  bcn_delay_ratio[%d]=%d\n", __func__, i,
1891 				pmlmeext->bcn_delay_cnt[i], i, pmlmeext->bcn_delay_ratio[i]);
1892 
1893 			ratio_20_delay += pmlmeext->bcn_delay_ratio[i];
1894 			ratio_80_delay += pmlmeext->bcn_delay_ratio[i];
1895 
1896 			if (ratio_20_delay > 20 && DrvBcnEarly == 0xff) {
1897 				DrvBcnEarly = i;
1898 				DBG_871X("%s(): DrvBcnEarly = %d\n", __func__, DrvBcnEarly);
1899 			}
1900 
1901 			if (ratio_80_delay > 80 && DrvBcnTimeOut == 0xff) {
1902 				DrvBcnTimeOut = i;
1903 				DBG_871X("%s(): DrvBcnTimeOut = %d\n", __func__, DrvBcnTimeOut);
1904 			}
1905 
1906 			/* reset adaptive_early_32k cnt */
1907 			pmlmeext->bcn_delay_cnt[i] = 0;
1908 			pmlmeext->bcn_delay_ratio[i] = 0;
1909 		}
1910 
1911 		pmlmeext->DrvBcnEarly = DrvBcnEarly;
1912 		pmlmeext->DrvBcnTimeOut = DrvBcnTimeOut;
1913 
1914 		pmlmeext->bcn_cnt = 0;
1915 	}
1916 }
1917 
1918 void rtw_alloc_macid(struct adapter *padapter, struct sta_info *psta)
1919 {
1920 	int i;
1921 	u8 bc_addr[ETH_ALEN] = {0xff, 0xff, 0xff, 0xff, 0xff, 0xff};
1922 	struct dvobj_priv *pdvobj = adapter_to_dvobj(padapter);
1923 
1924 	if (!memcmp(psta->hwaddr, bc_addr, ETH_ALEN))
1925 		return;
1926 
1927 	if (!memcmp(psta->hwaddr, myid(&padapter->eeprompriv), ETH_ALEN)) {
1928 		psta->mac_id = NUM_STA;
1929 		return;
1930 	}
1931 
1932 	spin_lock_bh(&pdvobj->lock);
1933 	for (i = 0; i < NUM_STA; i++) {
1934 		if (pdvobj->macid[i] == false) {
1935 			pdvobj->macid[i]  = true;
1936 			break;
1937 		}
1938 	}
1939 	spin_unlock_bh(&pdvobj->lock);
1940 
1941 	if (i > (NUM_STA-1)) {
1942 		psta->mac_id = NUM_STA;
1943 		DBG_871X("  no room for more MACIDs\n");
1944 	} else {
1945 		psta->mac_id = i;
1946 		DBG_871X("%s = %d\n", __func__, psta->mac_id);
1947 	}
1948 }
1949 
1950 void rtw_release_macid(struct adapter *padapter, struct sta_info *psta)
1951 {
1952 	u8 bc_addr[ETH_ALEN] = {0xff, 0xff, 0xff, 0xff, 0xff, 0xff};
1953 	struct dvobj_priv *pdvobj = adapter_to_dvobj(padapter);
1954 
1955 	if (!memcmp(psta->hwaddr, bc_addr, ETH_ALEN))
1956 		return;
1957 
1958 	if (!memcmp(psta->hwaddr, myid(&padapter->eeprompriv), ETH_ALEN))
1959 		return;
1960 
1961 	spin_lock_bh(&pdvobj->lock);
1962 	if (psta->mac_id < NUM_STA && psta->mac_id != 1) {
1963 		if (pdvobj->macid[psta->mac_id] == true) {
1964 			DBG_871X("%s = %d\n", __func__, psta->mac_id);
1965 			pdvobj->macid[psta->mac_id] = false;
1966 			psta->mac_id = NUM_STA;
1967 		}
1968 	}
1969 	spin_unlock_bh(&pdvobj->lock);
1970 }
1971 
1972 /* For 8188E RA */
1973 u8 rtw_search_max_mac_id(struct adapter *padapter)
1974 {
1975 	u8 max_mac_id = 0;
1976 	struct dvobj_priv *pdvobj = adapter_to_dvobj(padapter);
1977 	int i;
1978 
1979 	spin_lock_bh(&pdvobj->lock);
1980 	for (i = (NUM_STA-1); i >= 0 ; i--) {
1981 		if (pdvobj->macid[i] == true)
1982 			break;
1983 	}
1984 	max_mac_id = i;
1985 	spin_unlock_bh(&pdvobj->lock);
1986 
1987 	return max_mac_id;
1988 }
1989 
1990 struct adapter *dvobj_get_port0_adapter(struct dvobj_priv *dvobj)
1991 {
1992 	if (get_iface_type(dvobj->padapters[i]) != IFACE_PORT0)
1993 		return NULL;
1994 
1995 	return dvobj->padapters;
1996 }
1997