1 // SPDX-License-Identifier: GPL-2.0
2 /******************************************************************************
3  *
4  * Copyright(c) 2007 - 2012 Realtek Corporation. All rights reserved.
5  *
6  ******************************************************************************/
7 #define _RTW_WLAN_UTIL_C_
8 
9 #include <drv_types.h>
10 #include <rtw_debug.h>
11 #include <hal_com_h2c.h>
12 
13 #if defined(CONFIG_WOWLAN) || defined(CONFIG_AP_WOWLAN)
14 #include <linux/inetdevice.h>
15 #endif
16 
17 static unsigned char ARTHEROS_OUI1[] = {0x00, 0x03, 0x7f};
18 static unsigned char ARTHEROS_OUI2[] = {0x00, 0x13, 0x74};
19 
20 static unsigned char BROADCOM_OUI1[] = {0x00, 0x10, 0x18};
21 static unsigned char BROADCOM_OUI2[] = {0x00, 0x0a, 0xf7};
22 static unsigned char BROADCOM_OUI3[] = {0x00, 0x05, 0xb5};
23 
24 static unsigned char CISCO_OUI[] = {0x00, 0x40, 0x96};
25 static unsigned char MARVELL_OUI[] = {0x00, 0x50, 0x43};
26 static unsigned char RALINK_OUI[] = {0x00, 0x0c, 0x43};
27 static unsigned char REALTEK_OUI[] = {0x00, 0xe0, 0x4c};
28 static unsigned char AIRGOCAP_OUI[] = {0x00, 0x0a, 0xf5};
29 static unsigned char RSN_TKIP_CIPHER[4] = {0x00, 0x0f, 0xac, 0x02};
30 static unsigned char WPA_TKIP_CIPHER[4] = {0x00, 0x50, 0xf2, 0x02};
31 
32 extern unsigned char RTW_WPA_OUI[];
33 extern unsigned char WPA_TKIP_CIPHER[4];
34 
35 #define R2T_PHY_DELAY	(0)
36 
37 /* define WAIT_FOR_BCN_TO_MIN	(3000) */
38 #define WAIT_FOR_BCN_TO_MIN	(6000)
39 #define WAIT_FOR_BCN_TO_MAX	(20000)
40 
41 #define DISCONNECT_BY_CHK_BCN_FAIL_OBSERV_PERIOD_IN_MS 1000
42 #define DISCONNECT_BY_CHK_BCN_FAIL_THRESHOLD 3
43 
44 static u8 rtw_basic_rate_cck[4] = {
45 	IEEE80211_CCK_RATE_1MB | IEEE80211_BASIC_RATE_MASK,
46 	IEEE80211_CCK_RATE_2MB | IEEE80211_BASIC_RATE_MASK,
47 	IEEE80211_CCK_RATE_5MB | IEEE80211_BASIC_RATE_MASK,
48 	IEEE80211_CCK_RATE_11MB | IEEE80211_BASIC_RATE_MASK
49 };
50 
51 static u8 rtw_basic_rate_ofdm[3] = {
52 	IEEE80211_OFDM_RATE_6MB | IEEE80211_BASIC_RATE_MASK,
53 	IEEE80211_OFDM_RATE_12MB | IEEE80211_BASIC_RATE_MASK,
54 	IEEE80211_OFDM_RATE_24MB | IEEE80211_BASIC_RATE_MASK
55 };
56 
57 int cckrates_included(unsigned char *rate, int ratelen)
58 {
59 	int	i;
60 
61 	for (i = 0; i < ratelen; i++) {
62 		if  ((((rate[i]) & 0x7f) == 2)	|| (((rate[i]) & 0x7f) == 4) ||
63 		     (((rate[i]) & 0x7f) == 11)  || (((rate[i]) & 0x7f) == 22))
64 			return true;
65 	}
66 
67 	return false;
68 }
69 
70 int cckratesonly_included(unsigned char *rate, int ratelen)
71 {
72 	int	i;
73 
74 	for (i = 0; i < ratelen; i++) {
75 		if  ((((rate[i]) & 0x7f) != 2) && (((rate[i]) & 0x7f) != 4) &&
76 		     (((rate[i]) & 0x7f) != 11)  && (((rate[i]) & 0x7f) != 22))
77 			return false;
78 	}
79 
80 	return true;
81 }
82 
83 u8 networktype_to_raid_ex(struct adapter *adapter, struct sta_info *psta)
84 {
85 	u8 raid, cur_rf_type, rf_type = RF_1T1R;
86 
87 	rtw_hal_get_hwreg(adapter, HW_VAR_RF_TYPE, (u8 *)(&cur_rf_type));
88 
89 	if (cur_rf_type == RF_1T1R) {
90 		rf_type = RF_1T1R;
91 	} else if (IsSupportedVHT(psta->wireless_mode)) {
92 		if (psta->ra_mask & 0xffc00000)
93 			rf_type = RF_2T2R;
94 	} else if (IsSupportedHT(psta->wireless_mode)) {
95 		if (psta->ra_mask & 0xfff00000)
96 			rf_type = RF_2T2R;
97 	}
98 
99 	switch (psta->wireless_mode) {
100 	case WIRELESS_11B:
101 		raid = RATEID_IDX_B;
102 		break;
103 	case WIRELESS_11A:
104 	case WIRELESS_11G:
105 		raid = RATEID_IDX_G;
106 		break;
107 	case WIRELESS_11BG:
108 		raid = RATEID_IDX_BG;
109 		break;
110 	case WIRELESS_11_24N:
111 	case WIRELESS_11_5N:
112 	case WIRELESS_11A_5N:
113 	case WIRELESS_11G_24N:
114 		if (rf_type == RF_2T2R)
115 			raid = RATEID_IDX_GN_N2SS;
116 		else
117 			raid = RATEID_IDX_GN_N1SS;
118 		break;
119 	case WIRELESS_11B_24N:
120 	case WIRELESS_11BG_24N:
121 		if (psta->bw_mode == CHANNEL_WIDTH_20) {
122 			if (rf_type == RF_2T2R)
123 				raid = RATEID_IDX_BGN_20M_2SS_BN;
124 			else
125 				raid = RATEID_IDX_BGN_20M_1SS_BN;
126 		} else {
127 			if (rf_type == RF_2T2R)
128 				raid = RATEID_IDX_BGN_40M_2SS;
129 			else
130 				raid = RATEID_IDX_BGN_40M_1SS;
131 		}
132 		break;
133 	default:
134 		raid = RATEID_IDX_BGN_40M_2SS;
135 		break;
136 	}
137 	return raid;
138 }
139 
140 unsigned char ratetbl_val_2wifirate(unsigned char rate);
141 unsigned char ratetbl_val_2wifirate(unsigned char rate)
142 {
143 	unsigned char val = 0;
144 
145 	switch (rate & 0x7f) {
146 	case 0:
147 		val = IEEE80211_CCK_RATE_1MB;
148 		break;
149 
150 	case 1:
151 		val = IEEE80211_CCK_RATE_2MB;
152 		break;
153 
154 	case 2:
155 		val = IEEE80211_CCK_RATE_5MB;
156 		break;
157 
158 	case 3:
159 		val = IEEE80211_CCK_RATE_11MB;
160 		break;
161 
162 	case 4:
163 		val = IEEE80211_OFDM_RATE_6MB;
164 		break;
165 
166 	case 5:
167 		val = IEEE80211_OFDM_RATE_9MB;
168 		break;
169 
170 	case 6:
171 		val = IEEE80211_OFDM_RATE_12MB;
172 		break;
173 
174 	case 7:
175 		val = IEEE80211_OFDM_RATE_18MB;
176 		break;
177 
178 	case 8:
179 		val = IEEE80211_OFDM_RATE_24MB;
180 		break;
181 
182 	case 9:
183 		val = IEEE80211_OFDM_RATE_36MB;
184 		break;
185 
186 	case 10:
187 		val = IEEE80211_OFDM_RATE_48MB;
188 		break;
189 
190 	case 11:
191 		val = IEEE80211_OFDM_RATE_54MB;
192 		break;
193 	}
194 
195 	return val;
196 }
197 
198 int is_basicrate(struct adapter *padapter, unsigned char rate);
199 int is_basicrate(struct adapter *padapter, unsigned char rate)
200 {
201 	int i;
202 	unsigned char val;
203 	struct mlme_ext_priv *pmlmeext = &padapter->mlmeextpriv;
204 
205 	for (i = 0; i < NumRates; i++) {
206 		val = pmlmeext->basicrate[i];
207 
208 		if ((val != 0xff) && (val != 0xfe))
209 			if (rate == ratetbl_val_2wifirate(val))
210 				return true;
211 	}
212 
213 	return false;
214 }
215 
216 unsigned int ratetbl2rateset(struct adapter *padapter, unsigned char *rateset);
217 unsigned int ratetbl2rateset(struct adapter *padapter, unsigned char *rateset)
218 {
219 	int i;
220 	unsigned char rate;
221 	unsigned int	len = 0;
222 	struct mlme_ext_priv *pmlmeext = &padapter->mlmeextpriv;
223 
224 	for (i = 0; i < NumRates; i++) {
225 		rate = pmlmeext->datarate[i];
226 
227 		switch (rate) {
228 		case 0xff:
229 			return len;
230 
231 		case 0xfe:
232 			continue;
233 
234 		default:
235 			rate = ratetbl_val_2wifirate(rate);
236 
237 			if (is_basicrate(padapter, rate) == true)
238 				rate |= IEEE80211_BASIC_RATE_MASK;
239 
240 			rateset[len] = rate;
241 			len++;
242 			break;
243 		}
244 	}
245 	return len;
246 }
247 
248 void get_rate_set(struct adapter *padapter, unsigned char *pbssrate, int *bssrate_len)
249 {
250 	unsigned char supportedrates[NumRates];
251 
252 	memset(supportedrates, 0, NumRates);
253 	*bssrate_len = ratetbl2rateset(padapter, supportedrates);
254 	memcpy(pbssrate, supportedrates, *bssrate_len);
255 }
256 
257 void set_mcs_rate_by_mask(u8 *mcs_set, u32 mask)
258 {
259 	u8 mcs_rate_1r = (u8)(mask&0xff);
260 	u8 mcs_rate_2r = (u8)((mask>>8)&0xff);
261 	u8 mcs_rate_3r = (u8)((mask>>16)&0xff);
262 	u8 mcs_rate_4r = (u8)((mask>>24)&0xff);
263 
264 	mcs_set[0] &= mcs_rate_1r;
265 	mcs_set[1] &= mcs_rate_2r;
266 	mcs_set[2] &= mcs_rate_3r;
267 	mcs_set[3] &= mcs_rate_4r;
268 }
269 
270 void UpdateBrateTbl(struct adapter *Adapter, u8 *mBratesOS)
271 {
272 	u8 i;
273 	u8 rate;
274 
275 	/*  1M, 2M, 5.5M, 11M, 6M, 12M, 24M are mandatory. */
276 	for (i = 0; i < NDIS_802_11_LENGTH_RATES_EX; i++) {
277 		rate = mBratesOS[i] & 0x7f;
278 		switch (rate) {
279 		case IEEE80211_CCK_RATE_1MB:
280 		case IEEE80211_CCK_RATE_2MB:
281 		case IEEE80211_CCK_RATE_5MB:
282 		case IEEE80211_CCK_RATE_11MB:
283 		case IEEE80211_OFDM_RATE_6MB:
284 		case IEEE80211_OFDM_RATE_12MB:
285 		case IEEE80211_OFDM_RATE_24MB:
286 			mBratesOS[i] |= IEEE80211_BASIC_RATE_MASK;
287 			break;
288 		}
289 	}
290 }
291 
292 void UpdateBrateTblForSoftAP(u8 *bssrateset, u32 bssratelen)
293 {
294 	u8 i;
295 	u8 rate;
296 
297 	for (i = 0; i < bssratelen; i++) {
298 		rate = bssrateset[i] & 0x7f;
299 		switch (rate) {
300 		case IEEE80211_CCK_RATE_1MB:
301 		case IEEE80211_CCK_RATE_2MB:
302 		case IEEE80211_CCK_RATE_5MB:
303 		case IEEE80211_CCK_RATE_11MB:
304 			bssrateset[i] |= IEEE80211_BASIC_RATE_MASK;
305 			break;
306 		}
307 	}
308 }
309 
310 void Save_DM_Func_Flag(struct adapter *padapter)
311 {
312 	u8 bSaveFlag = true;
313 	rtw_hal_set_hwreg(padapter, HW_VAR_DM_FUNC_OP, (u8 *)(&bSaveFlag));
314 }
315 
316 void Restore_DM_Func_Flag(struct adapter *padapter)
317 {
318 	u8 bSaveFlag = false;
319 	rtw_hal_set_hwreg(padapter, HW_VAR_DM_FUNC_OP, (u8 *)(&bSaveFlag));
320 }
321 
322 void Switch_DM_Func(struct adapter *padapter, u32 mode, u8 enable)
323 {
324 	if (enable == true)
325 		rtw_hal_set_hwreg(padapter, HW_VAR_DM_FUNC_SET, (u8 *)(&mode));
326 	else
327 		rtw_hal_set_hwreg(padapter, HW_VAR_DM_FUNC_CLR, (u8 *)(&mode));
328 }
329 
330 static void Set_NETYPE0_MSR(struct adapter *padapter, u8 type)
331 {
332 	rtw_hal_set_hwreg(padapter, HW_VAR_MEDIA_STATUS, (u8 *)(&type));
333 }
334 
335 void Set_MSR(struct adapter *padapter, u8 type)
336 {
337 	Set_NETYPE0_MSR(padapter, type);
338 }
339 
340 inline u8 rtw_get_oper_ch(struct adapter *adapter)
341 {
342 	return adapter_to_dvobj(adapter)->oper_channel;
343 }
344 
345 inline void rtw_set_oper_ch(struct adapter *adapter, u8 ch)
346 {
347 #ifdef DBG_CH_SWITCH
348 	const int len = 128;
349 	char msg[128] = {0};
350 	int cnt = 0;
351 	int i = 0;
352 #endif  /* DBG_CH_SWITCH */
353 	struct dvobj_priv *dvobj = adapter_to_dvobj(adapter);
354 
355 	if (dvobj->oper_channel != ch) {
356 		dvobj->on_oper_ch_time = jiffies;
357 
358 #ifdef DBG_CH_SWITCH
359 		cnt += snprintf(msg+cnt, len-cnt, "switch to ch %3u", ch);
360 
361 		for (i = 0; i < dvobj->iface_nums; i++) {
362 			struct adapter *iface = dvobj->padapters[i];
363 			cnt += snprintf(msg+cnt, len-cnt, " ["ADPT_FMT":", ADPT_ARG(iface));
364 			if (iface->mlmeextpriv.cur_channel == ch)
365 				cnt += snprintf(msg+cnt, len-cnt, "C");
366 			else
367 				cnt += snprintf(msg+cnt, len-cnt, "_");
368 			if (iface->wdinfo.listen_channel == ch && !rtw_p2p_chk_state(&iface->wdinfo, P2P_STATE_NONE))
369 				cnt += snprintf(msg+cnt, len-cnt, "L");
370 			else
371 				cnt += snprintf(msg+cnt, len-cnt, "_");
372 			cnt += snprintf(msg+cnt, len-cnt, "]");
373 		}
374 
375 		DBG_871X(FUNC_ADPT_FMT" %s\n", FUNC_ADPT_ARG(adapter), msg);
376 #endif /* DBG_CH_SWITCH */
377 	}
378 
379 	dvobj->oper_channel = ch;
380 }
381 
382 inline u8 rtw_get_oper_bw(struct adapter *adapter)
383 {
384 	return adapter_to_dvobj(adapter)->oper_bwmode;
385 }
386 
387 inline void rtw_set_oper_bw(struct adapter *adapter, u8 bw)
388 {
389 	adapter_to_dvobj(adapter)->oper_bwmode = bw;
390 }
391 
392 inline u8 rtw_get_oper_choffset(struct adapter *adapter)
393 {
394 	return adapter_to_dvobj(adapter)->oper_ch_offset;
395 }
396 
397 inline void rtw_set_oper_choffset(struct adapter *adapter, u8 offset)
398 {
399 	adapter_to_dvobj(adapter)->oper_ch_offset = offset;
400 }
401 
402 u8 rtw_get_center_ch(u8 channel, u8 chnl_bw, u8 chnl_offset)
403 {
404 	u8 center_ch = channel;
405 
406 	if (chnl_bw == CHANNEL_WIDTH_80) {
407 		if ((channel == 36) || (channel == 40) || (channel == 44) || (channel == 48))
408 			center_ch = 42;
409 		if ((channel == 52) || (channel == 56) || (channel == 60) || (channel == 64))
410 			center_ch = 58;
411 		if ((channel == 100) || (channel == 104) || (channel == 108) || (channel == 112))
412 			center_ch = 106;
413 		if ((channel == 116) || (channel == 120) || (channel == 124) || (channel == 128))
414 			center_ch = 122;
415 		if ((channel == 132) || (channel == 136) || (channel == 140) || (channel == 144))
416 			center_ch = 138;
417 		if ((channel == 149) || (channel == 153) || (channel == 157) || (channel == 161))
418 			center_ch = 155;
419 		else if (channel <= 14)
420 			center_ch = 7;
421 	} else if (chnl_bw == CHANNEL_WIDTH_40) {
422 		if (chnl_offset == HAL_PRIME_CHNL_OFFSET_LOWER)
423 			center_ch = channel + 2;
424 		else
425 			center_ch = channel - 2;
426 	}
427 
428 	return center_ch;
429 }
430 
431 inline unsigned long rtw_get_on_cur_ch_time(struct adapter *adapter)
432 {
433 	if (adapter->mlmeextpriv.cur_channel == adapter_to_dvobj(adapter)->oper_channel)
434 		return adapter_to_dvobj(adapter)->on_oper_ch_time;
435 	else
436 		return 0;
437 }
438 
439 void SelectChannel(struct adapter *padapter, unsigned char channel)
440 {
441 	if (mutex_lock_interruptible(&(adapter_to_dvobj(padapter)->setch_mutex)))
442 		return;
443 
444 	/* saved channel info */
445 	rtw_set_oper_ch(padapter, channel);
446 
447 	rtw_hal_set_chan(padapter, channel);
448 
449 	mutex_unlock(&(adapter_to_dvobj(padapter)->setch_mutex));
450 }
451 
452 void set_channel_bwmode(struct adapter *padapter, unsigned char channel, unsigned char channel_offset, unsigned short bwmode)
453 {
454 	u8 center_ch, chnl_offset80 = HAL_PRIME_CHNL_OFFSET_DONT_CARE;
455 
456 	if (padapter->bNotifyChannelChange)
457 		DBG_871X("[%s] ch = %d, offset = %d, bwmode = %d\n", __func__, channel, channel_offset, bwmode);
458 
459 	center_ch = rtw_get_center_ch(channel, bwmode, channel_offset);
460 
461 	if (bwmode == CHANNEL_WIDTH_80) {
462 		if (center_ch > channel)
463 			chnl_offset80 = HAL_PRIME_CHNL_OFFSET_LOWER;
464 		else if (center_ch < channel)
465 			chnl_offset80 = HAL_PRIME_CHNL_OFFSET_UPPER;
466 		else
467 			chnl_offset80 = HAL_PRIME_CHNL_OFFSET_DONT_CARE;
468 	}
469 
470 	/* set Channel */
471 	if (mutex_lock_interruptible(&(adapter_to_dvobj(padapter)->setch_mutex)))
472 		return;
473 
474 	/* saved channel/bw info */
475 	rtw_set_oper_ch(padapter, channel);
476 	rtw_set_oper_bw(padapter, bwmode);
477 	rtw_set_oper_choffset(padapter, channel_offset);
478 
479 	rtw_hal_set_chnl_bw(padapter, center_ch, bwmode, channel_offset, chnl_offset80); /*  set center channel */
480 
481 	mutex_unlock(&(adapter_to_dvobj(padapter)->setch_mutex));
482 }
483 
484 __inline u8 *get_my_bssid(struct wlan_bssid_ex *pnetwork)
485 {
486 	return pnetwork->MacAddress;
487 }
488 
489 u16 get_beacon_interval(struct wlan_bssid_ex *bss)
490 {
491 	__le16 val;
492 	memcpy((unsigned char *)&val, rtw_get_beacon_interval_from_ie(bss->IEs), 2);
493 
494 	return le16_to_cpu(val);
495 }
496 
497 int is_client_associated_to_ap(struct adapter *padapter)
498 {
499 	struct mlme_ext_priv *pmlmeext;
500 	struct mlme_ext_info *pmlmeinfo;
501 
502 	if (!padapter)
503 		return _FAIL;
504 
505 	pmlmeext = &padapter->mlmeextpriv;
506 	pmlmeinfo = &(pmlmeext->mlmext_info);
507 
508 	if ((pmlmeinfo->state & WIFI_FW_ASSOC_SUCCESS) && ((pmlmeinfo->state&0x03) == WIFI_FW_STATION_STATE))
509 		return true;
510 	else
511 		return _FAIL;
512 }
513 
514 int is_client_associated_to_ibss(struct adapter *padapter)
515 {
516 	struct mlme_ext_priv *pmlmeext = &padapter->mlmeextpriv;
517 	struct mlme_ext_info *pmlmeinfo = &(pmlmeext->mlmext_info);
518 
519 	if ((pmlmeinfo->state & WIFI_FW_ASSOC_SUCCESS) && ((pmlmeinfo->state&0x03) == WIFI_FW_ADHOC_STATE))
520 		return true;
521 	else
522 		return _FAIL;
523 }
524 
525 int is_IBSS_empty(struct adapter *padapter)
526 {
527 	unsigned int i;
528 	struct mlme_ext_priv *pmlmeext = &padapter->mlmeextpriv;
529 	struct mlme_ext_info *pmlmeinfo = &(pmlmeext->mlmext_info);
530 
531 	for (i = IBSS_START_MAC_ID; i < NUM_STA; i++) {
532 		if (pmlmeinfo->FW_sta_info[i].status == 1)
533 			return _FAIL;
534 	}
535 
536 	return true;
537 }
538 
539 unsigned int decide_wait_for_beacon_timeout(unsigned int bcn_interval)
540 {
541 	if ((bcn_interval << 2) < WAIT_FOR_BCN_TO_MIN)
542 		return WAIT_FOR_BCN_TO_MIN;
543 	else if ((bcn_interval << 2) > WAIT_FOR_BCN_TO_MAX)
544 		return WAIT_FOR_BCN_TO_MAX;
545 	else
546 		return ((bcn_interval << 2));
547 }
548 
549 void invalidate_cam_all(struct adapter *padapter)
550 {
551 	struct dvobj_priv *dvobj = adapter_to_dvobj(padapter);
552 	struct cam_ctl_t *cam_ctl = &dvobj->cam_ctl;
553 
554 	rtw_hal_set_hwreg(padapter, HW_VAR_CAM_INVALID_ALL, NULL);
555 
556 	spin_lock_bh(&cam_ctl->lock);
557 	cam_ctl->bitmap = 0;
558 	memset(dvobj->cam_cache, 0, sizeof(struct cam_entry_cache)*TOTAL_CAM_ENTRY);
559 	spin_unlock_bh(&cam_ctl->lock);
560 }
561 
562 static u32 _ReadCAM(struct adapter *padapter, u32 addr)
563 {
564 	u32 count = 0, cmd;
565 	cmd = CAM_POLLINIG | addr;
566 	rtw_write32(padapter, RWCAM, cmd);
567 
568 	do {
569 		if (0 == (rtw_read32(padapter, REG_CAMCMD) & CAM_POLLINIG))
570 			break;
571 	} while (count++ < 100);
572 
573 	return rtw_read32(padapter, REG_CAMREAD);
574 }
575 void read_cam(struct adapter *padapter, u8 entry, u8 *get_key)
576 {
577 	u32 j, addr, cmd;
578 	addr = entry << 3;
579 
580 	/* DBG_8192C("********* DUMP CAM Entry_#%02d***************\n", entry); */
581 	for (j = 0; j < 6; j++) {
582 		cmd = _ReadCAM(padapter, addr+j);
583 		/* DBG_8192C("offset:0x%02x => 0x%08x\n", addr+j, cmd); */
584 		if (j > 1) /* get key from cam */
585 			memcpy(get_key+(j-2)*4, &cmd, 4);
586 	}
587 	/* DBG_8192C("*********************************\n"); */
588 }
589 
590 void _write_cam(struct adapter *padapter, u8 entry, u16 ctrl, u8 *mac, u8 *key)
591 {
592 	unsigned int i, val, addr;
593 	int j;
594 	u32 cam_val[2];
595 
596 	addr = entry << 3;
597 
598 	for (j = 5; j >= 0; j--) {
599 		switch (j) {
600 		case 0:
601 			val = (ctrl | (mac[0] << 16) | (mac[1] << 24));
602 			break;
603 		case 1:
604 			val = (mac[2] | (mac[3] << 8) | (mac[4] << 16) | (mac[5] << 24));
605 			break;
606 		default:
607 			i = (j - 2) << 2;
608 			val = (key[i] | (key[i+1] << 8) | (key[i+2] << 16) | (key[i+3] << 24));
609 			break;
610 		}
611 
612 		cam_val[0] = val;
613 		cam_val[1] = addr + (unsigned int)j;
614 
615 		rtw_hal_set_hwreg(padapter, HW_VAR_CAM_WRITE, (u8 *)cam_val);
616 	}
617 }
618 
619 void _clear_cam_entry(struct adapter *padapter, u8 entry)
620 {
621 	unsigned char null_sta[] = {0x00, 0x00, 0x00, 0x00, 0x00, 0x00};
622 	unsigned char null_key[] = {0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00};
623 
624 	_write_cam(padapter, entry, 0, null_sta, null_key);
625 }
626 
627 inline void write_cam(struct adapter *adapter, u8 id, u16 ctrl, u8 *mac, u8 *key)
628 {
629 	_write_cam(adapter, id, ctrl, mac, key);
630 	write_cam_cache(adapter, id, ctrl, mac, key);
631 }
632 
633 inline void clear_cam_entry(struct adapter *adapter, u8 id)
634 {
635 	_clear_cam_entry(adapter, id);
636 	clear_cam_cache(adapter, id);
637 }
638 
639 inline void write_cam_from_cache(struct adapter *adapter, u8 id)
640 {
641 	struct dvobj_priv *dvobj = adapter_to_dvobj(adapter);
642 	struct cam_ctl_t *cam_ctl = &dvobj->cam_ctl;
643 	struct cam_entry_cache cache;
644 
645 	spin_lock_bh(&cam_ctl->lock);
646 	memcpy(&cache, &dvobj->cam_cache[id], sizeof(struct cam_entry_cache));
647 	spin_unlock_bh(&cam_ctl->lock);
648 
649 	_write_cam(adapter, id, cache.ctrl, cache.mac, cache.key);
650 }
651 
652 void write_cam_cache(struct adapter *adapter, u8 id, u16 ctrl, u8 *mac, u8 *key)
653 {
654 	struct dvobj_priv *dvobj = adapter_to_dvobj(adapter);
655 	struct cam_ctl_t *cam_ctl = &dvobj->cam_ctl;
656 
657 	spin_lock_bh(&cam_ctl->lock);
658 
659 	dvobj->cam_cache[id].ctrl = ctrl;
660 	memcpy(dvobj->cam_cache[id].mac, mac, ETH_ALEN);
661 	memcpy(dvobj->cam_cache[id].key, key, 16);
662 
663 	spin_unlock_bh(&cam_ctl->lock);
664 }
665 
666 void clear_cam_cache(struct adapter *adapter, u8 id)
667 {
668 	struct dvobj_priv *dvobj = adapter_to_dvobj(adapter);
669 	struct cam_ctl_t *cam_ctl = &dvobj->cam_ctl;
670 
671 	spin_lock_bh(&cam_ctl->lock);
672 
673 	memset(&(dvobj->cam_cache[id]), 0, sizeof(struct cam_entry_cache));
674 
675 	spin_unlock_bh(&cam_ctl->lock);
676 }
677 
678 static bool _rtw_camid_is_gk(struct adapter *adapter, u8 cam_id)
679 {
680 	struct dvobj_priv *dvobj = adapter_to_dvobj(adapter);
681 	struct cam_ctl_t *cam_ctl = &dvobj->cam_ctl;
682 	bool ret = false;
683 
684 	if (cam_id >= TOTAL_CAM_ENTRY)
685 		goto exit;
686 
687 	if (!(cam_ctl->bitmap & BIT(cam_id)))
688 		goto exit;
689 
690 	ret = (dvobj->cam_cache[cam_id].ctrl&BIT6)?true:false;
691 
692 exit:
693 	return ret;
694 }
695 
696 static s16 _rtw_camid_search(struct adapter *adapter, u8 *addr, s16 kid)
697 {
698 	struct dvobj_priv *dvobj = adapter_to_dvobj(adapter);
699 	int i;
700 	s16 cam_id = -1;
701 
702 	for (i = 0; i < TOTAL_CAM_ENTRY; i++) {
703 		if (addr && memcmp(dvobj->cam_cache[i].mac, addr, ETH_ALEN))
704 			continue;
705 		if (kid >= 0 && kid != (dvobj->cam_cache[i].ctrl&0x03))
706 			continue;
707 
708 		cam_id = i;
709 		break;
710 	}
711 
712 	if (addr)
713 		DBG_871X(FUNC_ADPT_FMT" addr:"MAC_FMT" kid:%d, return cam_id:%d\n"
714 			 , FUNC_ADPT_ARG(adapter), MAC_ARG(addr), kid, cam_id);
715 	else
716 		DBG_871X(FUNC_ADPT_FMT" addr:%p kid:%d, return cam_id:%d\n"
717 			 , FUNC_ADPT_ARG(adapter), addr, kid, cam_id);
718 
719 	return cam_id;
720 }
721 
722 s16 rtw_camid_search(struct adapter *adapter, u8 *addr, s16 kid)
723 {
724 	struct dvobj_priv *dvobj = adapter_to_dvobj(adapter);
725 	struct cam_ctl_t *cam_ctl = &dvobj->cam_ctl;
726 	s16 cam_id = -1;
727 
728 	spin_lock_bh(&cam_ctl->lock);
729 	cam_id = _rtw_camid_search(adapter, addr, kid);
730 	spin_unlock_bh(&cam_ctl->lock);
731 
732 	return cam_id;
733 }
734 
735 s16 rtw_camid_alloc(struct adapter *adapter, struct sta_info *sta, u8 kid)
736 {
737 	struct dvobj_priv *dvobj = adapter_to_dvobj(adapter);
738 	struct cam_ctl_t *cam_ctl = &dvobj->cam_ctl;
739 	s16 cam_id = -1;
740 	struct mlme_ext_info *mlmeinfo;
741 
742 	spin_lock_bh(&cam_ctl->lock);
743 
744 	mlmeinfo = &adapter->mlmeextpriv.mlmext_info;
745 
746 	if ((((mlmeinfo->state&0x03) == WIFI_FW_AP_STATE) || ((mlmeinfo->state&0x03) == WIFI_FW_ADHOC_STATE))
747 		&& !sta) {
748 		/* AP/Ad-hoc mode group key: static alloction to default key by key ID */
749 		if (kid > 3) {
750 			DBG_871X_LEVEL(_drv_always_, FUNC_ADPT_FMT" group key with invalid key id:%u\n"
751 				, FUNC_ADPT_ARG(adapter), kid);
752 			rtw_warn_on(1);
753 			goto bitmap_handle;
754 		}
755 
756 		cam_id = kid;
757 	} else {
758 		int i;
759 		u8 *addr = sta?sta->hwaddr:NULL;
760 
761 		if (!sta) {
762 			if (!(mlmeinfo->state & WIFI_FW_ASSOC_SUCCESS)) {
763 				/* bypass STA mode group key setting before connected(ex:WEP) because bssid is not ready */
764 				goto bitmap_handle;
765 			}
766 
767 			addr = get_bssid(&adapter->mlmepriv);
768 		}
769 
770 		i = _rtw_camid_search(adapter, addr, kid);
771 		if (i >= 0) {
772 			/* Fix issue that pairwise and group key have same key id. Pairwise key first, group key can overwirte group only(ex: rekey) */
773 			if (sta || _rtw_camid_is_gk(adapter, i) == true)
774 				cam_id = i;
775 			else
776 				DBG_871X_LEVEL(_drv_always_, FUNC_ADPT_FMT" group key id:%u the same key id as pairwise key\n"
777 					, FUNC_ADPT_ARG(adapter), kid);
778 			goto bitmap_handle;
779 		}
780 
781 		for (i = 4; i < TOTAL_CAM_ENTRY; i++)
782 			if (!(cam_ctl->bitmap & BIT(i)))
783 				break;
784 
785 		if (i == TOTAL_CAM_ENTRY) {
786 			if (sta)
787 				DBG_871X_LEVEL(_drv_always_, FUNC_ADPT_FMT" pairwise key with "MAC_FMT" id:%u no room\n"
788 				, FUNC_ADPT_ARG(adapter), MAC_ARG(sta->hwaddr), kid);
789 			else
790 				DBG_871X_LEVEL(_drv_always_, FUNC_ADPT_FMT" group key id:%u no room\n"
791 				, FUNC_ADPT_ARG(adapter), kid);
792 			rtw_warn_on(1);
793 			goto bitmap_handle;
794 		}
795 
796 		cam_id = i;
797 	}
798 
799 bitmap_handle:
800 	if (cam_id >= 0 && cam_id < 32)
801 		cam_ctl->bitmap |= BIT(cam_id);
802 
803 	spin_unlock_bh(&cam_ctl->lock);
804 
805 	return cam_id;
806 }
807 
808 void rtw_camid_free(struct adapter *adapter, u8 cam_id)
809 {
810 	struct dvobj_priv *dvobj = adapter_to_dvobj(adapter);
811 	struct cam_ctl_t *cam_ctl = &dvobj->cam_ctl;
812 
813 	spin_lock_bh(&cam_ctl->lock);
814 
815 	if (cam_id < TOTAL_CAM_ENTRY)
816 		cam_ctl->bitmap &= ~(BIT(cam_id));
817 
818 	spin_unlock_bh(&cam_ctl->lock);
819 }
820 
821 int allocate_fw_sta_entry(struct adapter *padapter)
822 {
823 	unsigned int mac_id;
824 	struct mlme_ext_priv *pmlmeext = &padapter->mlmeextpriv;
825 	struct mlme_ext_info *pmlmeinfo = &(pmlmeext->mlmext_info);
826 
827 	for (mac_id = IBSS_START_MAC_ID; mac_id < NUM_STA; mac_id++) {
828 		if (pmlmeinfo->FW_sta_info[mac_id].status == 0) {
829 			pmlmeinfo->FW_sta_info[mac_id].status = 1;
830 			pmlmeinfo->FW_sta_info[mac_id].retry = 0;
831 			break;
832 		}
833 	}
834 
835 	return mac_id;
836 }
837 
838 void flush_all_cam_entry(struct adapter *padapter)
839 {
840 	struct mlme_ext_priv *pmlmeext = &padapter->mlmeextpriv;
841 	struct mlme_ext_info *pmlmeinfo = &(pmlmeext->mlmext_info);
842 
843 	invalidate_cam_all(padapter);
844 	/* clear default key related key search setting */
845 	rtw_hal_set_hwreg(padapter, HW_VAR_SEC_DK_CFG, (u8 *)false);
846 
847 	memset((u8 *)(pmlmeinfo->FW_sta_info), 0, sizeof(pmlmeinfo->FW_sta_info));
848 }
849 
850 int WMM_param_handler(struct adapter *padapter, struct ndis_80211_var_ie *pIE)
851 {
852 	/* struct registry_priv *pregpriv = &padapter->registrypriv; */
853 	struct mlme_priv *pmlmepriv = &(padapter->mlmepriv);
854 	struct mlme_ext_priv *pmlmeext = &padapter->mlmeextpriv;
855 	struct mlme_ext_info *pmlmeinfo = &(pmlmeext->mlmext_info);
856 
857 	if (pmlmepriv->qospriv.qos_option == 0) {
858 		pmlmeinfo->WMM_enable = 0;
859 		return false;
860 	}
861 
862 	if (!memcmp(&(pmlmeinfo->WMM_param), (pIE->data + 6), sizeof(struct WMM_para_element)))
863 		return false;
864 	else
865 		memcpy(&(pmlmeinfo->WMM_param), (pIE->data + 6), sizeof(struct WMM_para_element));
866 
867 	pmlmeinfo->WMM_enable = 1;
868 	return true;
869 }
870 
871 void WMMOnAssocRsp(struct adapter *padapter)
872 {
873 	u8 ACI, ACM, AIFS, ECWMin, ECWMax, aSifsTime;
874 	u8 acm_mask;
875 	u16 TXOP;
876 	u32 acParm, i;
877 	u32 edca[4], inx[4];
878 	struct mlme_ext_priv *pmlmeext = &padapter->mlmeextpriv;
879 	struct mlme_ext_info *pmlmeinfo = &(pmlmeext->mlmext_info);
880 	struct xmit_priv 	*pxmitpriv = &padapter->xmitpriv;
881 	struct registry_priv *pregpriv = &padapter->registrypriv;
882 
883 	acm_mask = 0;
884 
885 	if (pmlmeext->cur_wireless_mode & WIRELESS_11_24N)
886 		aSifsTime = 16;
887 	else
888 		aSifsTime = 10;
889 
890 	if (pmlmeinfo->WMM_enable == 0) {
891 		padapter->mlmepriv.acm_mask = 0;
892 
893 		AIFS = aSifsTime + (2 * pmlmeinfo->slotTime);
894 
895 		if (pmlmeext->cur_wireless_mode & (WIRELESS_11G | WIRELESS_11A)) {
896 			ECWMin = 4;
897 			ECWMax = 10;
898 		} else if (pmlmeext->cur_wireless_mode & WIRELESS_11B) {
899 			ECWMin = 5;
900 			ECWMax = 10;
901 		} else {
902 			ECWMin = 4;
903 			ECWMax = 10;
904 		}
905 
906 		TXOP = 0;
907 		acParm = AIFS | (ECWMin << 8) | (ECWMax << 12) | (TXOP << 16);
908 		rtw_hal_set_hwreg(padapter, HW_VAR_AC_PARAM_BE, (u8 *)(&acParm));
909 		rtw_hal_set_hwreg(padapter, HW_VAR_AC_PARAM_BK, (u8 *)(&acParm));
910 		rtw_hal_set_hwreg(padapter, HW_VAR_AC_PARAM_VI, (u8 *)(&acParm));
911 
912 		ECWMin = 2;
913 		ECWMax = 3;
914 		TXOP = 0x2f;
915 		acParm = AIFS | (ECWMin << 8) | (ECWMax << 12) | (TXOP << 16);
916 		rtw_hal_set_hwreg(padapter, HW_VAR_AC_PARAM_VO, (u8 *)(&acParm));
917 	} else{
918 		edca[0] = edca[1] = edca[2] = edca[3] = 0;
919 
920 		for (i = 0; i < 4; i++) {
921 			ACI = (pmlmeinfo->WMM_param.ac_param[i].ACI_AIFSN >> 5) & 0x03;
922 			ACM = (pmlmeinfo->WMM_param.ac_param[i].ACI_AIFSN >> 4) & 0x01;
923 
924 			/* AIFS = AIFSN * slot time + SIFS - r2t phy delay */
925 			AIFS = (pmlmeinfo->WMM_param.ac_param[i].ACI_AIFSN & 0x0f) * pmlmeinfo->slotTime + aSifsTime;
926 
927 			ECWMin = (pmlmeinfo->WMM_param.ac_param[i].CW & 0x0f);
928 			ECWMax = (pmlmeinfo->WMM_param.ac_param[i].CW & 0xf0) >> 4;
929 			TXOP = le16_to_cpu(pmlmeinfo->WMM_param.ac_param[i].TXOP_limit);
930 
931 			acParm = AIFS | (ECWMin << 8) | (ECWMax << 12) | (TXOP << 16);
932 
933 			switch (ACI) {
934 			case 0x0:
935 				rtw_hal_set_hwreg(padapter, HW_VAR_AC_PARAM_BE, (u8 *)(&acParm));
936 				acm_mask |= (ACM ? BIT(1):0);
937 				edca[XMIT_BE_QUEUE] = acParm;
938 				break;
939 
940 			case 0x1:
941 				rtw_hal_set_hwreg(padapter, HW_VAR_AC_PARAM_BK, (u8 *)(&acParm));
942 				/* acm_mask |= (ACM? BIT(0):0); */
943 				edca[XMIT_BK_QUEUE] = acParm;
944 				break;
945 
946 			case 0x2:
947 				rtw_hal_set_hwreg(padapter, HW_VAR_AC_PARAM_VI, (u8 *)(&acParm));
948 				acm_mask |= (ACM ? BIT(2):0);
949 				edca[XMIT_VI_QUEUE] = acParm;
950 				break;
951 
952 			case 0x3:
953 				rtw_hal_set_hwreg(padapter, HW_VAR_AC_PARAM_VO, (u8 *)(&acParm));
954 				acm_mask |= (ACM ? BIT(3):0);
955 				edca[XMIT_VO_QUEUE] = acParm;
956 				break;
957 			}
958 
959 			DBG_871X("WMM(%x): %x, %x\n", ACI, ACM, acParm);
960 		}
961 
962 		if (padapter->registrypriv.acm_method == 1)
963 			rtw_hal_set_hwreg(padapter, HW_VAR_ACM_CTRL, (u8 *)(&acm_mask));
964 		else
965 			padapter->mlmepriv.acm_mask = acm_mask;
966 
967 		inx[0] = 0; inx[1] = 1; inx[2] = 2; inx[3] = 3;
968 
969 		if (pregpriv->wifi_spec == 1) {
970 			u32 j, tmp, change_inx = false;
971 
972 			/* entry indx: 0->vo, 1->vi, 2->be, 3->bk. */
973 			for (i = 0; i < 4; i++) {
974 				for (j = i+1; j < 4; j++) {
975 					/* compare CW and AIFS */
976 					if ((edca[j] & 0xFFFF) < (edca[i] & 0xFFFF)) {
977 						change_inx = true;
978 					} else if ((edca[j] & 0xFFFF) == (edca[i] & 0xFFFF)) {
979 						/* compare TXOP */
980 						if ((edca[j] >> 16) > (edca[i] >> 16))
981 							change_inx = true;
982 					}
983 
984 					if (change_inx) {
985 						tmp = edca[i];
986 						edca[i] = edca[j];
987 						edca[j] = tmp;
988 
989 						tmp = inx[i];
990 						inx[i] = inx[j];
991 						inx[j] = tmp;
992 
993 						change_inx = false;
994 					}
995 				}
996 			}
997 		}
998 
999 		for (i = 0; i < 4; i++) {
1000 			pxmitpriv->wmm_para_seq[i] = inx[i];
1001 			DBG_871X("wmm_para_seq(%d): %d\n", i, pxmitpriv->wmm_para_seq[i]);
1002 		}
1003 	}
1004 }
1005 
1006 static void bwmode_update_check(struct adapter *padapter, struct ndis_80211_var_ie *pIE)
1007 {
1008 	unsigned char  new_bwmode;
1009 	unsigned char  new_ch_offset;
1010 	struct HT_info_element	 *pHT_info;
1011 	struct mlme_priv *pmlmepriv = &(padapter->mlmepriv);
1012 	struct mlme_ext_priv *pmlmeext = &padapter->mlmeextpriv;
1013 	struct mlme_ext_info *pmlmeinfo = &(pmlmeext->mlmext_info);
1014 	struct registry_priv *pregistrypriv = &padapter->registrypriv;
1015 	struct ht_priv 		*phtpriv = &pmlmepriv->htpriv;
1016 	u8 cbw40_enable = 0;
1017 
1018 	if (!pIE)
1019 		return;
1020 
1021 	if (phtpriv->ht_option == false)
1022 		return;
1023 
1024 	if (pmlmeext->cur_bwmode >= CHANNEL_WIDTH_80)
1025 		return;
1026 
1027 	if (pIE->Length > sizeof(struct HT_info_element))
1028 		return;
1029 
1030 	pHT_info = (struct HT_info_element *)pIE->data;
1031 
1032 	if (pmlmeext->cur_channel > 14) {
1033 		if ((pregistrypriv->bw_mode & 0xf0) > 0)
1034 			cbw40_enable = 1;
1035 	} else
1036 		if ((pregistrypriv->bw_mode & 0x0f) > 0)
1037 			cbw40_enable = 1;
1038 
1039 	if ((pHT_info->infos[0] & BIT(2)) && cbw40_enable) {
1040 		new_bwmode = CHANNEL_WIDTH_40;
1041 
1042 		switch (pHT_info->infos[0] & 0x3) {
1043 		case 1:
1044 			new_ch_offset = HAL_PRIME_CHNL_OFFSET_LOWER;
1045 			break;
1046 
1047 		case 3:
1048 			new_ch_offset = HAL_PRIME_CHNL_OFFSET_UPPER;
1049 			break;
1050 
1051 		default:
1052 			new_bwmode = CHANNEL_WIDTH_20;
1053 			new_ch_offset = HAL_PRIME_CHNL_OFFSET_DONT_CARE;
1054 			break;
1055 		}
1056 	} else{
1057 		new_bwmode = CHANNEL_WIDTH_20;
1058 		new_ch_offset = HAL_PRIME_CHNL_OFFSET_DONT_CARE;
1059 	}
1060 
1061 	if ((new_bwmode != pmlmeext->cur_bwmode) || (new_ch_offset != pmlmeext->cur_ch_offset)) {
1062 		pmlmeinfo->bwmode_updated = true;
1063 
1064 		pmlmeext->cur_bwmode = new_bwmode;
1065 		pmlmeext->cur_ch_offset = new_ch_offset;
1066 
1067 		/* update HT info also */
1068 		HT_info_handler(padapter, pIE);
1069 	} else
1070 		pmlmeinfo->bwmode_updated = false;
1071 
1072 	if (true == pmlmeinfo->bwmode_updated) {
1073 		struct sta_info *psta;
1074 		struct wlan_bssid_ex	*cur_network = &(pmlmeinfo->network);
1075 		struct sta_priv *pstapriv = &padapter->stapriv;
1076 
1077 		/* set_channel_bwmode(padapter, pmlmeext->cur_channel, pmlmeext->cur_ch_offset, pmlmeext->cur_bwmode); */
1078 
1079 		/* update ap's stainfo */
1080 		psta = rtw_get_stainfo(pstapriv, cur_network->MacAddress);
1081 		if (psta) {
1082 			struct ht_priv *phtpriv_sta = &psta->htpriv;
1083 
1084 			if (phtpriv_sta->ht_option) {
1085 				/*  bwmode */
1086 				psta->bw_mode = pmlmeext->cur_bwmode;
1087 				phtpriv_sta->ch_offset = pmlmeext->cur_ch_offset;
1088 			} else{
1089 				psta->bw_mode = CHANNEL_WIDTH_20;
1090 				phtpriv_sta->ch_offset = HAL_PRIME_CHNL_OFFSET_DONT_CARE;
1091 			}
1092 
1093 			rtw_dm_ra_mask_wk_cmd(padapter, (u8 *)psta);
1094 		}
1095 	}
1096 }
1097 
1098 void HT_caps_handler(struct adapter *padapter, struct ndis_80211_var_ie *pIE)
1099 {
1100 	unsigned int	i;
1101 	u8 rf_type;
1102 	u8 max_AMPDU_len, min_MPDU_spacing;
1103 	u8 cur_ldpc_cap = 0, cur_stbc_cap = 0;
1104 	struct mlme_ext_priv *pmlmeext = &padapter->mlmeextpriv;
1105 	struct mlme_ext_info *pmlmeinfo = &(pmlmeext->mlmext_info);
1106 	struct mlme_priv 	*pmlmepriv = &padapter->mlmepriv;
1107 	struct ht_priv 		*phtpriv = &pmlmepriv->htpriv;
1108 
1109 	if (pIE == NULL)
1110 		return;
1111 
1112 	if (phtpriv->ht_option == false)
1113 		return;
1114 
1115 	pmlmeinfo->HT_caps_enable = 1;
1116 
1117 	for (i = 0; i < (pIE->Length); i++) {
1118 		if (i != 2) {
1119 			/* 	Commented by Albert 2010/07/12 */
1120 			/* 	Got the endian issue here. */
1121 			pmlmeinfo->HT_caps.u.HT_cap[i] &= (pIE->data[i]);
1122 		} else{
1123 			/* modify from  fw by Thomas 2010/11/17 */
1124 			if ((pmlmeinfo->HT_caps.u.HT_cap_element.AMPDU_para & 0x3) > (pIE->data[i] & 0x3))
1125 				max_AMPDU_len = (pIE->data[i] & 0x3);
1126 			else
1127 				max_AMPDU_len = (pmlmeinfo->HT_caps.u.HT_cap_element.AMPDU_para & 0x3);
1128 
1129 			if ((pmlmeinfo->HT_caps.u.HT_cap_element.AMPDU_para & 0x1c) > (pIE->data[i] & 0x1c))
1130 				min_MPDU_spacing = (pmlmeinfo->HT_caps.u.HT_cap_element.AMPDU_para & 0x1c);
1131 			else
1132 				min_MPDU_spacing = (pIE->data[i] & 0x1c);
1133 
1134 			pmlmeinfo->HT_caps.u.HT_cap_element.AMPDU_para = max_AMPDU_len | min_MPDU_spacing;
1135 		}
1136 	}
1137 	rtw_hal_get_hwreg(padapter, HW_VAR_RF_TYPE, (u8 *)(&rf_type));
1138 
1139 	/* update the MCS set */
1140 	for (i = 0; i < 16; i++)
1141 		pmlmeinfo->HT_caps.u.HT_cap_element.MCS_rate[i] &= pmlmeext->default_supported_mcs_set[i];
1142 
1143 	/* update the MCS rates */
1144 	switch (rf_type) {
1145 	case RF_1T1R:
1146 	case RF_1T2R:
1147 		set_mcs_rate_by_mask(pmlmeinfo->HT_caps.u.HT_cap_element.MCS_rate, MCS_RATE_1R);
1148 		break;
1149 	case RF_2T2R:
1150 	default:
1151 #ifdef CONFIG_DISABLE_MCS13TO15
1152 		if (pmlmeext->cur_bwmode == CHANNEL_WIDTH_40 && pregistrypriv->wifi_spec != 1)
1153 			set_mcs_rate_by_mask(pmlmeinfo->HT_caps.u.HT_cap_element.MCS_rate, MCS_RATE_2R_13TO15_OFF);
1154 		else
1155 			set_mcs_rate_by_mask(pmlmeinfo->HT_caps.u.HT_cap_element.MCS_rate, MCS_RATE_2R);
1156 #else /* CONFIG_DISABLE_MCS13TO15 */
1157 		set_mcs_rate_by_mask(pmlmeinfo->HT_caps.u.HT_cap_element.MCS_rate, MCS_RATE_2R);
1158 #endif /* CONFIG_DISABLE_MCS13TO15 */
1159 	}
1160 
1161 	if (check_fwstate(pmlmepriv, WIFI_AP_STATE)) {
1162 		/*  Config STBC setting */
1163 		if (TEST_FLAG(phtpriv->stbc_cap, STBC_HT_ENABLE_TX) && GET_HT_CAPABILITY_ELE_TX_STBC(pIE->data)) {
1164 			SET_FLAG(cur_stbc_cap, STBC_HT_ENABLE_TX);
1165 			DBG_871X("Enable HT Tx STBC !\n");
1166 		}
1167 		phtpriv->stbc_cap = cur_stbc_cap;
1168 	} else {
1169 		/*  Config LDPC Coding Capability */
1170 		if (TEST_FLAG(phtpriv->ldpc_cap, LDPC_HT_ENABLE_TX) && GET_HT_CAPABILITY_ELE_LDPC_CAP(pIE->data)) {
1171 			SET_FLAG(cur_ldpc_cap, (LDPC_HT_ENABLE_TX | LDPC_HT_CAP_TX));
1172 			DBG_871X("Enable HT Tx LDPC!\n");
1173 		}
1174 		phtpriv->ldpc_cap = cur_ldpc_cap;
1175 
1176 		/*  Config STBC setting */
1177 		if (TEST_FLAG(phtpriv->stbc_cap, STBC_HT_ENABLE_TX) && GET_HT_CAPABILITY_ELE_RX_STBC(pIE->data)) {
1178 			SET_FLAG(cur_stbc_cap, (STBC_HT_ENABLE_TX | STBC_HT_CAP_TX));
1179 			DBG_871X("Enable HT Tx STBC!\n");
1180 		}
1181 		phtpriv->stbc_cap = cur_stbc_cap;
1182 	}
1183 }
1184 
1185 void HT_info_handler(struct adapter *padapter, struct ndis_80211_var_ie *pIE)
1186 {
1187 	struct mlme_ext_priv *pmlmeext = &padapter->mlmeextpriv;
1188 	struct mlme_ext_info *pmlmeinfo = &(pmlmeext->mlmext_info);
1189 	struct mlme_priv 	*pmlmepriv = &padapter->mlmepriv;
1190 	struct ht_priv 		*phtpriv = &pmlmepriv->htpriv;
1191 
1192 	if (pIE == NULL)
1193 		return;
1194 
1195 	if (phtpriv->ht_option == false)
1196 		return;
1197 
1198 	if (pIE->Length > sizeof(struct HT_info_element))
1199 		return;
1200 
1201 	pmlmeinfo->HT_info_enable = 1;
1202 	memcpy(&(pmlmeinfo->HT_info), pIE->data, pIE->Length);
1203 
1204 	return;
1205 }
1206 
1207 void HTOnAssocRsp(struct adapter *padapter)
1208 {
1209 	unsigned char 	max_AMPDU_len;
1210 	unsigned char 	min_MPDU_spacing;
1211 	/* struct registry_priv  *pregpriv = &padapter->registrypriv; */
1212 	struct mlme_ext_priv *pmlmeext = &padapter->mlmeextpriv;
1213 	struct mlme_ext_info *pmlmeinfo = &(pmlmeext->mlmext_info);
1214 
1215 	DBG_871X("%s\n", __func__);
1216 
1217 	if ((pmlmeinfo->HT_info_enable) && (pmlmeinfo->HT_caps_enable)) {
1218 		pmlmeinfo->HT_enable = 1;
1219 	} else{
1220 		pmlmeinfo->HT_enable = 0;
1221 		/* set_channel_bwmode(padapter, pmlmeext->cur_channel, pmlmeext->cur_ch_offset, pmlmeext->cur_bwmode); */
1222 		return;
1223 	}
1224 
1225 	/* handle A-MPDU parameter field */
1226 	/*
1227 		AMPDU_para [1:0]:Max AMPDU Len => 0:8k , 1:16k, 2:32k, 3:64k
1228 		AMPDU_para [4:2]:Min MPDU Start Spacing
1229 	*/
1230 	max_AMPDU_len = pmlmeinfo->HT_caps.u.HT_cap_element.AMPDU_para & 0x03;
1231 
1232 	min_MPDU_spacing = (pmlmeinfo->HT_caps.u.HT_cap_element.AMPDU_para & 0x1c) >> 2;
1233 
1234 	rtw_hal_set_hwreg(padapter, HW_VAR_AMPDU_MIN_SPACE, (u8 *)(&min_MPDU_spacing));
1235 
1236 	rtw_hal_set_hwreg(padapter, HW_VAR_AMPDU_FACTOR, (u8 *)(&max_AMPDU_len));
1237 }
1238 
1239 void ERP_IE_handler(struct adapter *padapter, struct ndis_80211_var_ie *pIE)
1240 {
1241 	struct mlme_ext_priv *pmlmeext = &padapter->mlmeextpriv;
1242 	struct mlme_ext_info *pmlmeinfo = &(pmlmeext->mlmext_info);
1243 
1244 	if (pIE->Length > 1)
1245 		return;
1246 
1247 	pmlmeinfo->ERP_enable = 1;
1248 	memcpy(&(pmlmeinfo->ERP_IE), pIE->data, pIE->Length);
1249 }
1250 
1251 void VCS_update(struct adapter *padapter, struct sta_info *psta)
1252 {
1253 	struct registry_priv  *pregpriv = &padapter->registrypriv;
1254 	struct mlme_ext_priv *pmlmeext = &padapter->mlmeextpriv;
1255 	struct mlme_ext_info *pmlmeinfo = &(pmlmeext->mlmext_info);
1256 
1257 	switch (pregpriv->vrtl_carrier_sense) {/* 0:off 1:on 2:auto */
1258 	case 0: /* off */
1259 		psta->rtsen = 0;
1260 		psta->cts2self = 0;
1261 		break;
1262 
1263 	case 1: /* on */
1264 		if (pregpriv->vcs_type == 1) { /* 1:RTS/CTS 2:CTS to self */
1265 			psta->rtsen = 1;
1266 			psta->cts2self = 0;
1267 		} else{
1268 			psta->rtsen = 0;
1269 			psta->cts2self = 1;
1270 		}
1271 		break;
1272 
1273 	case 2: /* auto */
1274 	default:
1275 		if ((pmlmeinfo->ERP_enable) && (pmlmeinfo->ERP_IE & BIT(1))) {
1276 			if (pregpriv->vcs_type == 1) {
1277 				psta->rtsen = 1;
1278 				psta->cts2self = 0;
1279 			} else{
1280 				psta->rtsen = 0;
1281 				psta->cts2self = 1;
1282 			}
1283 		} else{
1284 			psta->rtsen = 0;
1285 			psta->cts2self = 0;
1286 		}
1287 		break;
1288 	}
1289 }
1290 
1291 void update_ldpc_stbc_cap(struct sta_info *psta)
1292 {
1293 	if (psta->htpriv.ht_option) {
1294 		if (TEST_FLAG(psta->htpriv.ldpc_cap, LDPC_HT_ENABLE_TX))
1295 			psta->ldpc = 1;
1296 
1297 		if (TEST_FLAG(psta->htpriv.stbc_cap, STBC_HT_ENABLE_TX))
1298 			psta->stbc = 1;
1299 	} else {
1300 		psta->ldpc = 0;
1301 		psta->stbc = 0;
1302 	}
1303 }
1304 
1305 int rtw_check_bcn_info(struct adapter *Adapter, u8 *pframe, u32 packet_len)
1306 {
1307 	unsigned int		len;
1308 	unsigned char 	*p;
1309 	unsigned short	val16, subtype;
1310 	struct wlan_network *cur_network = &(Adapter->mlmepriv.cur_network);
1311 	/* u8 wpa_ie[255], rsn_ie[255]; */
1312 	u16 wpa_len = 0, rsn_len = 0;
1313 	u8 encryp_protocol = 0;
1314 	struct wlan_bssid_ex *bssid;
1315 	int group_cipher = 0, pairwise_cipher = 0, is_8021x = 0;
1316 	unsigned char *pbuf;
1317 	u32 wpa_ielen = 0;
1318 	u8 *pbssid = GetAddr3Ptr(pframe);
1319 	u32 hidden_ssid = 0;
1320 	struct HT_info_element *pht_info = NULL;
1321 	struct rtw_ieee80211_ht_cap *pht_cap = NULL;
1322 	u32 bcn_channel;
1323 	unsigned short	ht_cap_info;
1324 	unsigned char ht_info_infos_0;
1325 	struct mlme_priv *pmlmepriv = &Adapter->mlmepriv;
1326 
1327 	if (is_client_associated_to_ap(Adapter) == false)
1328 		return true;
1329 
1330 	len = packet_len - sizeof(struct ieee80211_hdr_3addr);
1331 
1332 	if (len > MAX_IE_SZ) {
1333 		DBG_871X("%s IE too long for survey event\n", __func__);
1334 		return _FAIL;
1335 	}
1336 
1337 	if (memcmp(cur_network->network.MacAddress, pbssid, 6)) {
1338 		DBG_871X("Oops: rtw_check_network_encrypt linked but recv other bssid bcn\n" MAC_FMT MAC_FMT,
1339 				MAC_ARG(pbssid), MAC_ARG(cur_network->network.MacAddress));
1340 		return true;
1341 	}
1342 
1343 	bssid = rtw_zmalloc(sizeof(struct wlan_bssid_ex));
1344 	if (bssid == NULL) {
1345 		DBG_871X("%s rtw_zmalloc fail !!!\n", __func__);
1346 		return true;
1347 	}
1348 
1349 	if ((pmlmepriv->timeBcnInfoChkStart != 0) && (jiffies_to_msecs(jiffies - pmlmepriv->timeBcnInfoChkStart) > DISCONNECT_BY_CHK_BCN_FAIL_OBSERV_PERIOD_IN_MS)) {
1350 		pmlmepriv->timeBcnInfoChkStart = 0;
1351 		pmlmepriv->NumOfBcnInfoChkFail = 0;
1352 	}
1353 
1354 	subtype = GetFrameSubType(pframe) >> 4;
1355 
1356 	if (subtype == WIFI_BEACON)
1357 		bssid->Reserved[0] = 1;
1358 
1359 	bssid->Length = sizeof(struct wlan_bssid_ex) - MAX_IE_SZ + len;
1360 
1361 	/* below is to copy the information element */
1362 	bssid->IELength = len;
1363 	memcpy(bssid->IEs, (pframe + sizeof(struct ieee80211_hdr_3addr)), bssid->IELength);
1364 
1365 	/* check bw and channel offset */
1366 	/* parsing HT_CAP_IE */
1367 	p = rtw_get_ie(bssid->IEs + _FIXED_IE_LENGTH_, _HT_CAPABILITY_IE_, &len, bssid->IELength - _FIXED_IE_LENGTH_);
1368 	if (p && len > 0) {
1369 			pht_cap = (struct rtw_ieee80211_ht_cap *)(p + 2);
1370 			ht_cap_info = le16_to_cpu(pht_cap->cap_info);
1371 	} else {
1372 			ht_cap_info = 0;
1373 	}
1374 	/* parsing HT_INFO_IE */
1375 	p = rtw_get_ie(bssid->IEs + _FIXED_IE_LENGTH_, _HT_ADD_INFO_IE_, &len, bssid->IELength - _FIXED_IE_LENGTH_);
1376 	if (p && len > 0) {
1377 			pht_info = (struct HT_info_element *)(p + 2);
1378 			ht_info_infos_0 = pht_info->infos[0];
1379 	} else {
1380 			ht_info_infos_0 = 0;
1381 	}
1382 	if (ht_cap_info != cur_network->BcnInfo.ht_cap_info ||
1383 		((ht_info_infos_0&0x03) != (cur_network->BcnInfo.ht_info_infos_0&0x03))) {
1384 			DBG_871X("%s bcn now: ht_cap_info:%x ht_info_infos_0:%x\n", __func__,
1385 							ht_cap_info, ht_info_infos_0);
1386 			DBG_871X("%s bcn link: ht_cap_info:%x ht_info_infos_0:%x\n", __func__,
1387 							cur_network->BcnInfo.ht_cap_info, cur_network->BcnInfo.ht_info_infos_0);
1388 			DBG_871X("%s bw mode change\n", __func__);
1389 			{
1390 				/* bcn_info_update */
1391 				cur_network->BcnInfo.ht_cap_info = ht_cap_info;
1392 				cur_network->BcnInfo.ht_info_infos_0 = ht_info_infos_0;
1393 				/* to do : need to check that whether modify related register of BB or not */
1394 			}
1395 			/* goto _mismatch; */
1396 	}
1397 
1398 	/* Checking for channel */
1399 	p = rtw_get_ie(bssid->IEs + _FIXED_IE_LENGTH_, _DSSET_IE_, &len, bssid->IELength - _FIXED_IE_LENGTH_);
1400 	if (p) {
1401 			bcn_channel = *(p + 2);
1402 	} else {/* In 5G, some ap do not have DSSET IE checking HT info for channel */
1403 			rtw_get_ie(bssid->IEs + _FIXED_IE_LENGTH_, _HT_ADD_INFO_IE_, &len, bssid->IELength - _FIXED_IE_LENGTH_);
1404 			if (pht_info) {
1405 					bcn_channel = pht_info->primary_channel;
1406 			} else { /* we don't find channel IE, so don't check it */
1407 					/* DBG_871X("Oops: %s we don't find channel IE, so don't check it\n", __func__); */
1408 					bcn_channel = Adapter->mlmeextpriv.cur_channel;
1409 			}
1410 	}
1411 	if (bcn_channel != Adapter->mlmeextpriv.cur_channel) {
1412 			DBG_871X("%s beacon channel:%d cur channel:%d disconnect\n", __func__,
1413 						   bcn_channel, Adapter->mlmeextpriv.cur_channel);
1414 			goto _mismatch;
1415 	}
1416 
1417 	/* checking SSID */
1418 	p = rtw_get_ie(bssid->IEs + _FIXED_IE_LENGTH_, _SSID_IE_, &len, bssid->IELength - _FIXED_IE_LENGTH_);
1419 	if (p == NULL) {
1420 		DBG_871X("%s marc: cannot find SSID for survey event\n", __func__);
1421 		hidden_ssid = true;
1422 	} else {
1423 		hidden_ssid = false;
1424 	}
1425 
1426 	if ((NULL != p) && (false == hidden_ssid && (*(p + 1)))) {
1427 		memcpy(bssid->Ssid.Ssid, (p + 2), *(p + 1));
1428 		bssid->Ssid.SsidLength = *(p + 1);
1429 	} else {
1430 		bssid->Ssid.SsidLength = 0;
1431 		bssid->Ssid.Ssid[0] = '\0';
1432 	}
1433 
1434 	RT_TRACE(_module_rtl871x_mlme_c_, _drv_info_, ("%s bssid.Ssid.Ssid:%s bssid.Ssid.SsidLength:%d "
1435 				"cur_network->network.Ssid.Ssid:%s len:%d\n", __func__, bssid->Ssid.Ssid,
1436 				bssid->Ssid.SsidLength, cur_network->network.Ssid.Ssid,
1437 				cur_network->network.Ssid.SsidLength));
1438 
1439 	if (memcmp(bssid->Ssid.Ssid, cur_network->network.Ssid.Ssid, 32) ||
1440 			bssid->Ssid.SsidLength != cur_network->network.Ssid.SsidLength) {
1441 		if (bssid->Ssid.Ssid[0] != '\0' && bssid->Ssid.SsidLength != 0) { /* not hidden ssid */
1442 			DBG_871X("%s(), SSID is not match\n", __func__);
1443 			goto _mismatch;
1444 		}
1445 	}
1446 
1447 	/* check encryption info */
1448 	val16 = rtw_get_capability((struct wlan_bssid_ex *)bssid);
1449 
1450 	if (val16 & BIT(4))
1451 		bssid->Privacy = 1;
1452 	else
1453 		bssid->Privacy = 0;
1454 
1455 	RT_TRACE(_module_rtl871x_mlme_c_, _drv_info_,
1456 			("%s(): cur_network->network.Privacy is %d, bssid.Privacy is %d\n",
1457 			 __func__, cur_network->network.Privacy, bssid->Privacy));
1458 	if (cur_network->network.Privacy != bssid->Privacy) {
1459 		DBG_871X("%s(), privacy is not match\n", __func__);
1460 		goto _mismatch;
1461 	}
1462 
1463 	rtw_get_sec_ie(bssid->IEs, bssid->IELength, NULL, &rsn_len, NULL, &wpa_len);
1464 
1465 	if (rsn_len > 0) {
1466 		encryp_protocol = ENCRYP_PROTOCOL_WPA2;
1467 	} else if (wpa_len > 0) {
1468 		encryp_protocol = ENCRYP_PROTOCOL_WPA;
1469 	} else {
1470 		if (bssid->Privacy)
1471 			encryp_protocol = ENCRYP_PROTOCOL_WEP;
1472 	}
1473 
1474 	if (cur_network->BcnInfo.encryp_protocol != encryp_protocol) {
1475 		DBG_871X("%s(): enctyp is not match\n", __func__);
1476 		goto _mismatch;
1477 	}
1478 
1479 	if (encryp_protocol == ENCRYP_PROTOCOL_WPA || encryp_protocol == ENCRYP_PROTOCOL_WPA2) {
1480 		pbuf = rtw_get_wpa_ie(&bssid->IEs[12], &wpa_ielen, bssid->IELength-12);
1481 		if (pbuf && (wpa_ielen > 0)) {
1482 			if (_SUCCESS == rtw_parse_wpa_ie(pbuf, wpa_ielen+2, &group_cipher, &pairwise_cipher, &is_8021x)) {
1483 				RT_TRACE(_module_rtl871x_mlme_c_, _drv_info_,
1484 						("%s pnetwork->pairwise_cipher: %d, group_cipher is %d, is_8021x is %d\n", __func__,
1485 						 pairwise_cipher, group_cipher, is_8021x));
1486 			}
1487 		} else {
1488 			pbuf = rtw_get_wpa2_ie(&bssid->IEs[12], &wpa_ielen, bssid->IELength-12);
1489 
1490 			if (pbuf && (wpa_ielen > 0)) {
1491 				if (_SUCCESS == rtw_parse_wpa2_ie(pbuf, wpa_ielen+2, &group_cipher, &pairwise_cipher, &is_8021x)) {
1492 					RT_TRACE(_module_rtl871x_mlme_c_, _drv_info_,
1493 							("%s pnetwork->pairwise_cipher: %d, pnetwork->group_cipher is %d, is_802x is %d\n",
1494 							 __func__, pairwise_cipher, group_cipher, is_8021x));
1495 				}
1496 			}
1497 		}
1498 
1499 		RT_TRACE(_module_rtl871x_mlme_c_, _drv_err_,
1500 				("%s cur_network->group_cipher is %d: %d\n", __func__, cur_network->BcnInfo.group_cipher, group_cipher));
1501 		if (pairwise_cipher != cur_network->BcnInfo.pairwise_cipher || group_cipher != cur_network->BcnInfo.group_cipher) {
1502 			DBG_871X("%s pairwise_cipher(%x:%x) or group_cipher(%x:%x) is not match\n", __func__,
1503 					pairwise_cipher, cur_network->BcnInfo.pairwise_cipher,
1504 					group_cipher, cur_network->BcnInfo.group_cipher);
1505 			goto _mismatch;
1506 		}
1507 
1508 		if (is_8021x != cur_network->BcnInfo.is_8021x) {
1509 			DBG_871X("%s authentication is not match\n", __func__);
1510 			goto _mismatch;
1511 		}
1512 	}
1513 
1514 	kfree((u8 *)bssid);
1515 	return _SUCCESS;
1516 
1517 _mismatch:
1518 	kfree((u8 *)bssid);
1519 
1520 	if (pmlmepriv->NumOfBcnInfoChkFail == 0)
1521 		pmlmepriv->timeBcnInfoChkStart = jiffies;
1522 
1523 	pmlmepriv->NumOfBcnInfoChkFail++;
1524 	DBG_871X("%s by "ADPT_FMT" - NumOfChkFail = %d (SeqNum of this Beacon frame = %d).\n", __func__, ADPT_ARG(Adapter), pmlmepriv->NumOfBcnInfoChkFail, GetSequence(pframe));
1525 
1526 	if ((pmlmepriv->timeBcnInfoChkStart != 0) && (jiffies_to_msecs(jiffies - pmlmepriv->timeBcnInfoChkStart) <= DISCONNECT_BY_CHK_BCN_FAIL_OBSERV_PERIOD_IN_MS)
1527 		&& (pmlmepriv->NumOfBcnInfoChkFail >= DISCONNECT_BY_CHK_BCN_FAIL_THRESHOLD)) {
1528 		DBG_871X("%s by "ADPT_FMT" - NumOfChkFail = %d >= threshold : %d (in %d ms), return FAIL.\n", __func__, ADPT_ARG(Adapter), pmlmepriv->NumOfBcnInfoChkFail,
1529 			DISCONNECT_BY_CHK_BCN_FAIL_THRESHOLD, jiffies_to_msecs(jiffies - pmlmepriv->timeBcnInfoChkStart));
1530 		pmlmepriv->timeBcnInfoChkStart = 0;
1531 		pmlmepriv->NumOfBcnInfoChkFail = 0;
1532 		return _FAIL;
1533 	}
1534 
1535 	return _SUCCESS;
1536 }
1537 
1538 void update_beacon_info(struct adapter *padapter, u8 *pframe, uint pkt_len, struct sta_info *psta)
1539 {
1540 	unsigned int i;
1541 	unsigned int len;
1542 	struct ndis_80211_var_ie *pIE;
1543 
1544 	len = pkt_len - (_BEACON_IE_OFFSET_ + WLAN_HDR_A3_LEN);
1545 
1546 	for (i = 0; i < len;) {
1547 		pIE = (struct ndis_80211_var_ie *)(pframe + (_BEACON_IE_OFFSET_ + WLAN_HDR_A3_LEN) + i);
1548 
1549 		switch (pIE->ElementID) {
1550 		case _VENDOR_SPECIFIC_IE_:
1551 			/* to update WMM paramter set while receiving beacon */
1552 			if (!memcmp(pIE->data, WMM_PARA_OUI, 6) && pIE->Length == WLAN_WMM_LEN)	/* WMM */
1553 				if (WMM_param_handler(padapter, pIE))
1554 					report_wmm_edca_update(padapter);
1555 
1556 			break;
1557 
1558 		case _HT_EXTRA_INFO_IE_:	/* HT info */
1559 			/* HT_info_handler(padapter, pIE); */
1560 			bwmode_update_check(padapter, pIE);
1561 			break;
1562 
1563 		case _ERPINFO_IE_:
1564 			ERP_IE_handler(padapter, pIE);
1565 			VCS_update(padapter, psta);
1566 			break;
1567 
1568 		default:
1569 			break;
1570 		}
1571 
1572 		i += (pIE->Length + 2);
1573 	}
1574 }
1575 
1576 unsigned int is_ap_in_tkip(struct adapter *padapter)
1577 {
1578 	u32 i;
1579 	struct ndis_80211_var_ie *pIE;
1580 	struct mlme_ext_priv *pmlmeext = &padapter->mlmeextpriv;
1581 	struct mlme_ext_info *pmlmeinfo = &(pmlmeext->mlmext_info);
1582 	struct wlan_bssid_ex		*cur_network = &(pmlmeinfo->network);
1583 
1584 	if (rtw_get_capability((struct wlan_bssid_ex *)cur_network) & WLAN_CAPABILITY_PRIVACY) {
1585 		for (i = sizeof(struct ndis_802_11_fix_ie); i < pmlmeinfo->network.IELength;) {
1586 			pIE = (struct ndis_80211_var_ie *)(pmlmeinfo->network.IEs + i);
1587 
1588 			switch (pIE->ElementID) {
1589 			case _VENDOR_SPECIFIC_IE_:
1590 				if ((!memcmp(pIE->data, RTW_WPA_OUI, 4)) && (!memcmp((pIE->data + 12), WPA_TKIP_CIPHER, 4)))
1591 					return true;
1592 
1593 				break;
1594 
1595 			case _RSN_IE_2_:
1596 				if (!memcmp((pIE->data + 8), RSN_TKIP_CIPHER, 4))
1597 					return true;
1598 
1599 			default:
1600 				break;
1601 			}
1602 
1603 			i += (pIE->Length + 2);
1604 		}
1605 
1606 		return false;
1607 	} else
1608 		return false;
1609 }
1610 
1611 int support_short_GI(struct adapter *padapter, struct HT_caps_element *pHT_caps, u8 bwmode)
1612 {
1613 	unsigned char 				bit_offset;
1614 	struct mlme_ext_priv *pmlmeext = &padapter->mlmeextpriv;
1615 	struct mlme_ext_info *pmlmeinfo = &(pmlmeext->mlmext_info);
1616 
1617 	if (!(pmlmeinfo->HT_enable))
1618 		return _FAIL;
1619 
1620 	bit_offset = (bwmode & CHANNEL_WIDTH_40) ? 6 : 5;
1621 
1622 	if (le16_to_cpu(pHT_caps->u.HT_cap_element.HT_caps_info) & (0x1 << bit_offset))
1623 		return _SUCCESS;
1624 	else
1625 		return _FAIL;
1626 }
1627 
1628 unsigned char get_highest_rate_idx(u32 mask)
1629 {
1630 	int i;
1631 	unsigned char rate_idx = 0;
1632 
1633 	for (i = 31; i >= 0; i--) {
1634 		if (mask & BIT(i)) {
1635 			rate_idx = i;
1636 			break;
1637 		}
1638 	}
1639 
1640 	return rate_idx;
1641 }
1642 
1643 void Update_RA_Entry(struct adapter *padapter, struct sta_info *psta)
1644 {
1645 	rtw_hal_update_ra_mask(psta, 0);
1646 }
1647 
1648 void enable_rate_adaptive(struct adapter *padapter, struct sta_info *psta);
1649 void enable_rate_adaptive(struct adapter *padapter, struct sta_info *psta)
1650 {
1651 	Update_RA_Entry(padapter, psta);
1652 }
1653 
1654 void set_sta_rate(struct adapter *padapter, struct sta_info *psta)
1655 {
1656 	/* rate adaptive */
1657 	enable_rate_adaptive(padapter, psta);
1658 }
1659 
1660 unsigned char check_assoc_AP(u8 *pframe, uint len)
1661 {
1662 	unsigned int	i;
1663 	struct ndis_80211_var_ie *pIE;
1664 
1665 	for (i = sizeof(struct ndis_802_11_fix_ie); i < len;) {
1666 		pIE = (struct ndis_80211_var_ie *)(pframe + i);
1667 
1668 		switch (pIE->ElementID) {
1669 		case _VENDOR_SPECIFIC_IE_:
1670 			if ((!memcmp(pIE->data, ARTHEROS_OUI1, 3)) || (!memcmp(pIE->data, ARTHEROS_OUI2, 3))) {
1671 				DBG_871X("link to Artheros AP\n");
1672 				return HT_IOT_PEER_ATHEROS;
1673 			} else if ((!memcmp(pIE->data, BROADCOM_OUI1, 3))
1674 						|| (!memcmp(pIE->data, BROADCOM_OUI2, 3))
1675 						|| (!memcmp(pIE->data, BROADCOM_OUI3, 3))) {
1676 				DBG_871X("link to Broadcom AP\n");
1677 				return HT_IOT_PEER_BROADCOM;
1678 			} else if (!memcmp(pIE->data, MARVELL_OUI, 3)) {
1679 				DBG_871X("link to Marvell AP\n");
1680 				return HT_IOT_PEER_MARVELL;
1681 			} else if (!memcmp(pIE->data, RALINK_OUI, 3)) {
1682 				DBG_871X("link to Ralink AP\n");
1683 				return HT_IOT_PEER_RALINK;
1684 			} else if (!memcmp(pIE->data, CISCO_OUI, 3)) {
1685 				DBG_871X("link to Cisco AP\n");
1686 				return HT_IOT_PEER_CISCO;
1687 			} else if (!memcmp(pIE->data, REALTEK_OUI, 3)) {
1688 				u32 Vender = HT_IOT_PEER_REALTEK;
1689 
1690 				if (pIE->Length >= 5) {
1691 					if (pIE->data[4] == 1)
1692 						/* if (pIE->data[5] & RT_HT_CAP_USE_LONG_PREAMBLE) */
1693 						/* 	bssDesc->BssHT.RT2RT_HT_Mode |= RT_HT_CAP_USE_LONG_PREAMBLE; */
1694 						if (pIE->data[5] & RT_HT_CAP_USE_92SE)
1695 							/* bssDesc->BssHT.RT2RT_HT_Mode |= RT_HT_CAP_USE_92SE; */
1696 							Vender = HT_IOT_PEER_REALTEK_92SE;
1697 
1698 					if (pIE->data[5] & RT_HT_CAP_USE_SOFTAP)
1699 						Vender = HT_IOT_PEER_REALTEK_SOFTAP;
1700 
1701 					if (pIE->data[4] == 2) {
1702 						if (pIE->data[6] & RT_HT_CAP_USE_JAGUAR_BCUT) {
1703 							Vender = HT_IOT_PEER_REALTEK_JAGUAR_BCUTAP;
1704 							DBG_871X("link to Realtek JAGUAR_BCUTAP\n");
1705 						}
1706 						if (pIE->data[6] & RT_HT_CAP_USE_JAGUAR_CCUT) {
1707 							Vender = HT_IOT_PEER_REALTEK_JAGUAR_CCUTAP;
1708 							DBG_871X("link to Realtek JAGUAR_CCUTAP\n");
1709 						}
1710 					}
1711 				}
1712 
1713 				DBG_871X("link to Realtek AP\n");
1714 				return Vender;
1715 			} else if (!memcmp(pIE->data, AIRGOCAP_OUI, 3)) {
1716 				DBG_871X("link to Airgo Cap\n");
1717 				return HT_IOT_PEER_AIRGO;
1718 			} else
1719 				break;
1720 
1721 		default:
1722 			break;
1723 		}
1724 
1725 		i += (pIE->Length + 2);
1726 	}
1727 
1728 	DBG_871X("link to new AP\n");
1729 	return HT_IOT_PEER_UNKNOWN;
1730 }
1731 
1732 void update_IOT_info(struct adapter *padapter)
1733 {
1734 	struct mlme_ext_priv *pmlmeext = &padapter->mlmeextpriv;
1735 	struct mlme_ext_info *pmlmeinfo = &(pmlmeext->mlmext_info);
1736 
1737 	switch (pmlmeinfo->assoc_AP_vendor) {
1738 	case HT_IOT_PEER_MARVELL:
1739 		pmlmeinfo->turboMode_cts2self = 1;
1740 		pmlmeinfo->turboMode_rtsen = 0;
1741 		break;
1742 
1743 	case HT_IOT_PEER_RALINK:
1744 		pmlmeinfo->turboMode_cts2self = 0;
1745 		pmlmeinfo->turboMode_rtsen = 1;
1746 		/* disable high power */
1747 		Switch_DM_Func(padapter, (~DYNAMIC_BB_DYNAMIC_TXPWR), false);
1748 		break;
1749 	case HT_IOT_PEER_REALTEK:
1750 		/* rtw_write16(padapter, 0x4cc, 0xffff); */
1751 		/* rtw_write16(padapter, 0x546, 0x01c0); */
1752 		/* disable high power */
1753 		Switch_DM_Func(padapter, (~DYNAMIC_BB_DYNAMIC_TXPWR), false);
1754 		break;
1755 	default:
1756 		pmlmeinfo->turboMode_cts2self = 0;
1757 		pmlmeinfo->turboMode_rtsen = 1;
1758 		break;
1759 	}
1760 }
1761 
1762 void update_capinfo(struct adapter *Adapter, u16 updateCap)
1763 {
1764 	struct mlme_ext_priv *pmlmeext = &Adapter->mlmeextpriv;
1765 	struct mlme_ext_info *pmlmeinfo = &(pmlmeext->mlmext_info);
1766 	bool		ShortPreamble;
1767 
1768 	/*  Check preamble mode, 2005.01.06, by rcnjko. */
1769 	/*  Mark to update preamble value forever, 2008.03.18 by lanhsin */
1770 	/* if (pMgntInfo->RegPreambleMode == PREAMBLE_AUTO) */
1771 	{
1772 		if (updateCap & cShortPreamble) {
1773 			/*  Short Preamble */
1774 			if (pmlmeinfo->preamble_mode != PREAMBLE_SHORT) { /*  PREAMBLE_LONG or PREAMBLE_AUTO */
1775 				ShortPreamble = true;
1776 				pmlmeinfo->preamble_mode = PREAMBLE_SHORT;
1777 				rtw_hal_set_hwreg(Adapter, HW_VAR_ACK_PREAMBLE, (u8 *)&ShortPreamble);
1778 			}
1779 		} else{
1780 			/*  Long Preamble */
1781 			if (pmlmeinfo->preamble_mode != PREAMBLE_LONG) { /*  PREAMBLE_SHORT or PREAMBLE_AUTO */
1782 				ShortPreamble = false;
1783 				pmlmeinfo->preamble_mode = PREAMBLE_LONG;
1784 				rtw_hal_set_hwreg(Adapter, HW_VAR_ACK_PREAMBLE, (u8 *)&ShortPreamble);
1785 			}
1786 		}
1787 	}
1788 
1789 	if (updateCap & cIBSS)
1790 		/* Filen: See 802.11-2007 p.91 */
1791 		pmlmeinfo->slotTime = NON_SHORT_SLOT_TIME;
1792 	else {
1793 		/* Filen: See 802.11-2007 p.90 */
1794 		if (pmlmeext->cur_wireless_mode & (WIRELESS_11_24N | WIRELESS_11A | WIRELESS_11_5N | WIRELESS_11AC))
1795 			pmlmeinfo->slotTime = SHORT_SLOT_TIME;
1796 		else if (pmlmeext->cur_wireless_mode & (WIRELESS_11G)) {
1797 			if ((updateCap & cShortSlotTime) /* && (!(pMgntInfo->pHTInfo->RT2RT_HT_Mode & RT_HT_CAP_USE_LONG_PREAMBLE)) */)
1798 				/*  Short Slot Time */
1799 				pmlmeinfo->slotTime = SHORT_SLOT_TIME;
1800 			else
1801 				/*  Long Slot Time */
1802 				pmlmeinfo->slotTime = NON_SHORT_SLOT_TIME;
1803 		} else
1804 			/* B Mode */
1805 			pmlmeinfo->slotTime = NON_SHORT_SLOT_TIME;
1806 	}
1807 
1808 	rtw_hal_set_hwreg(Adapter, HW_VAR_SLOT_TIME, &pmlmeinfo->slotTime);
1809 }
1810 
1811 void update_wireless_mode(struct adapter *padapter)
1812 {
1813 	int ratelen, network_type = 0;
1814 	u32 SIFS_Timer;
1815 	struct mlme_ext_priv *pmlmeext = &padapter->mlmeextpriv;
1816 	struct mlme_ext_info *pmlmeinfo = &(pmlmeext->mlmext_info);
1817 	struct wlan_bssid_ex		*cur_network = &(pmlmeinfo->network);
1818 	unsigned char 		*rate = cur_network->SupportedRates;
1819 
1820 	ratelen = rtw_get_rateset_len(cur_network->SupportedRates);
1821 
1822 	if ((pmlmeinfo->HT_info_enable) && (pmlmeinfo->HT_caps_enable))
1823 		pmlmeinfo->HT_enable = 1;
1824 
1825 	if (pmlmeext->cur_channel > 14) {
1826 		if (pmlmeinfo->VHT_enable)
1827 			network_type = WIRELESS_11AC;
1828 		else if (pmlmeinfo->HT_enable)
1829 			network_type = WIRELESS_11_5N;
1830 
1831 		network_type |= WIRELESS_11A;
1832 	} else{
1833 		if (pmlmeinfo->VHT_enable)
1834 			network_type = WIRELESS_11AC;
1835 		else if (pmlmeinfo->HT_enable)
1836 			network_type = WIRELESS_11_24N;
1837 
1838 		if ((cckratesonly_included(rate, ratelen)) == true)
1839 			network_type |= WIRELESS_11B;
1840 		else if ((cckrates_included(rate, ratelen)) == true)
1841 			network_type |= WIRELESS_11BG;
1842 		else
1843 			network_type |= WIRELESS_11G;
1844 	}
1845 
1846 	pmlmeext->cur_wireless_mode = network_type & padapter->registrypriv.wireless_mode;
1847 
1848 	SIFS_Timer = 0x0a0a0808; /* 0x0808 -> for CCK, 0x0a0a -> for OFDM */
1849 													/* change this value if having IOT issues. */
1850 
1851 	padapter->HalFunc.SetHwRegHandler(padapter, HW_VAR_RESP_SIFS,  (u8 *)&SIFS_Timer);
1852 
1853 	padapter->HalFunc.SetHwRegHandler(padapter, HW_VAR_WIRELESS_MODE,  (u8 *)&(pmlmeext->cur_wireless_mode));
1854 
1855 	if (pmlmeext->cur_wireless_mode & WIRELESS_11B)
1856 		update_mgnt_tx_rate(padapter, IEEE80211_CCK_RATE_1MB);
1857 	 else
1858 		update_mgnt_tx_rate(padapter, IEEE80211_OFDM_RATE_6MB);
1859 }
1860 
1861 void update_sta_basic_rate(struct sta_info *psta, u8 wireless_mode)
1862 {
1863 	if (IsSupportedTxCCK(wireless_mode)) {
1864 		/*  Only B, B/G, and B/G/N AP could use CCK rate */
1865 		memcpy(psta->bssrateset, rtw_basic_rate_cck, 4);
1866 		psta->bssratelen = 4;
1867 	} else{
1868 		memcpy(psta->bssrateset, rtw_basic_rate_ofdm, 3);
1869 		psta->bssratelen = 3;
1870 	}
1871 }
1872 
1873 int update_sta_support_rate(struct adapter *padapter, u8 *pvar_ie, uint var_ie_len, int cam_idx)
1874 {
1875 	unsigned int	ie_len;
1876 	struct ndis_80211_var_ie *pIE;
1877 	int	supportRateNum = 0;
1878 	struct mlme_ext_priv *pmlmeext = &(padapter->mlmeextpriv);
1879 	struct mlme_ext_info *pmlmeinfo = &(pmlmeext->mlmext_info);
1880 
1881 	pIE = (struct ndis_80211_var_ie *)rtw_get_ie(pvar_ie, _SUPPORTEDRATES_IE_, &ie_len, var_ie_len);
1882 	if (pIE == NULL)
1883 		return _FAIL;
1884 
1885 	memcpy(pmlmeinfo->FW_sta_info[cam_idx].SupportedRates, pIE->data, ie_len);
1886 	supportRateNum = ie_len;
1887 
1888 	pIE = (struct ndis_80211_var_ie *)rtw_get_ie(pvar_ie, _EXT_SUPPORTEDRATES_IE_, &ie_len, var_ie_len);
1889 	if (pIE)
1890 		memcpy((pmlmeinfo->FW_sta_info[cam_idx].SupportedRates + supportRateNum), pIE->data, ie_len);
1891 
1892 	return _SUCCESS;
1893 }
1894 
1895 void process_addba_req(struct adapter *padapter, u8 *paddba_req, u8 *addr)
1896 {
1897 	struct sta_info *psta;
1898 	u16 tid, start_seq, param;
1899 	struct recv_reorder_ctrl *preorder_ctrl;
1900 	struct sta_priv *pstapriv = &padapter->stapriv;
1901 	struct ADDBA_request *preq = (struct ADDBA_request *)paddba_req;
1902 	struct mlme_ext_priv *pmlmeext = &padapter->mlmeextpriv;
1903 	struct mlme_ext_info *pmlmeinfo = &(pmlmeext->mlmext_info);
1904 
1905 	psta = rtw_get_stainfo(pstapriv, addr);
1906 
1907 	if (psta) {
1908 		start_seq = le16_to_cpu(preq->BA_starting_seqctrl) >> 4;
1909 
1910 		param = le16_to_cpu(preq->BA_para_set);
1911 		tid = (param>>2)&0x0f;
1912 
1913 		preorder_ctrl = &psta->recvreorder_ctrl[tid];
1914 
1915 		#ifdef CONFIG_UPDATE_INDICATE_SEQ_WHILE_PROCESS_ADDBA_REQ
1916 		preorder_ctrl->indicate_seq = start_seq;
1917 		#ifdef DBG_RX_SEQ
1918 		DBG_871X("DBG_RX_SEQ %s:%d IndicateSeq: %d, start_seq: %d\n", __func__, __LINE__,
1919 			preorder_ctrl->indicate_seq, start_seq);
1920 		#endif
1921 		#else
1922 		preorder_ctrl->indicate_seq = 0xffff;
1923 		#endif
1924 
1925 		preorder_ctrl->enable = pmlmeinfo->accept_addba_req;
1926 	}
1927 }
1928 
1929 void update_TSF(struct mlme_ext_priv *pmlmeext, u8 *pframe, uint len)
1930 {
1931 	u8 *pIE;
1932 	__le32 *pbuf;
1933 
1934 	pIE = pframe + sizeof(struct ieee80211_hdr_3addr);
1935 	pbuf = (__le32 *)pIE;
1936 
1937 	pmlmeext->TSFValue = le32_to_cpu(*(pbuf+1));
1938 
1939 	pmlmeext->TSFValue = pmlmeext->TSFValue << 32;
1940 
1941 	pmlmeext->TSFValue |= le32_to_cpu(*pbuf);
1942 }
1943 
1944 void correct_TSF(struct adapter *padapter, struct mlme_ext_priv *pmlmeext)
1945 {
1946 	rtw_hal_set_hwreg(padapter, HW_VAR_CORRECT_TSF, NULL);
1947 }
1948 
1949 void adaptive_early_32k(struct mlme_ext_priv *pmlmeext, u8 *pframe, uint len)
1950 {
1951 	int i;
1952 	u8 *pIE;
1953 	__le32 *pbuf;
1954 	u64 tsf = 0;
1955 	u32 delay_ms;
1956 	struct mlme_ext_info *pmlmeinfo = &(pmlmeext->mlmext_info);
1957 
1958 	pmlmeext->bcn_cnt++;
1959 
1960 	pIE = pframe + sizeof(struct ieee80211_hdr_3addr);
1961 	pbuf = (__le32 *)pIE;
1962 
1963 	tsf = le32_to_cpu(*(pbuf+1));
1964 	tsf = tsf << 32;
1965 	tsf |= le32_to_cpu(*pbuf);
1966 
1967 	/* DBG_871X("%s(): tsf_upper = 0x%08x, tsf_lower = 0x%08x\n", __func__, (u32)(tsf>>32), (u32)tsf); */
1968 
1969 	/* delay = (timestamp mod 1024*100)/1000 (unit: ms) */
1970 	/* delay_ms = do_div(tsf, (pmlmeinfo->bcn_interval*1024))/1000; */
1971 	delay_ms = rtw_modular64(tsf, (pmlmeinfo->bcn_interval*1024));
1972 	delay_ms = delay_ms/1000;
1973 
1974 	if (delay_ms >= 8)
1975 		pmlmeext->bcn_delay_cnt[8]++;
1976 		/* pmlmeext->bcn_delay_ratio[8] = (pmlmeext->bcn_delay_cnt[8] * 100) /pmlmeext->bcn_cnt; */
1977 	else
1978 		pmlmeext->bcn_delay_cnt[delay_ms]++;
1979 		/* pmlmeext->bcn_delay_ratio[delay_ms] = (pmlmeext->bcn_delay_cnt[delay_ms] * 100) /pmlmeext->bcn_cnt; */
1980 
1981 /*
1982 	DBG_871X("%s(): (a)bcn_cnt = %d\n", __func__, pmlmeext->bcn_cnt);
1983 
1984 
1985 	for (i = 0; i<9; i++)
1986 	{
1987 		DBG_871X("%s():bcn_delay_cnt[%d]=%d,  bcn_delay_ratio[%d]=%d\n", __func__, i,
1988 			pmlmeext->bcn_delay_cnt[i] , i, pmlmeext->bcn_delay_ratio[i]);
1989 	}
1990 */
1991 
1992 	/* dump for  adaptive_early_32k */
1993 	if (pmlmeext->bcn_cnt > 100 && (pmlmeext->adaptive_tsf_done == true)) {
1994 		u8 ratio_20_delay, ratio_80_delay;
1995 		u8 DrvBcnEarly, DrvBcnTimeOut;
1996 
1997 		ratio_20_delay = 0;
1998 		ratio_80_delay = 0;
1999 		DrvBcnEarly = 0xff;
2000 		DrvBcnTimeOut = 0xff;
2001 
2002 		DBG_871X("%s(): bcn_cnt = %d\n", __func__, pmlmeext->bcn_cnt);
2003 
2004 		for (i = 0; i < 9; i++) {
2005 			pmlmeext->bcn_delay_ratio[i] = (pmlmeext->bcn_delay_cnt[i] * 100) / pmlmeext->bcn_cnt;
2006 
2007 			DBG_871X("%s():bcn_delay_cnt[%d]=%d,  bcn_delay_ratio[%d]=%d\n", __func__, i,
2008 				pmlmeext->bcn_delay_cnt[i], i, pmlmeext->bcn_delay_ratio[i]);
2009 
2010 			ratio_20_delay += pmlmeext->bcn_delay_ratio[i];
2011 			ratio_80_delay += pmlmeext->bcn_delay_ratio[i];
2012 
2013 			if (ratio_20_delay > 20 && DrvBcnEarly == 0xff) {
2014 				DrvBcnEarly = i;
2015 				DBG_871X("%s(): DrvBcnEarly = %d\n", __func__, DrvBcnEarly);
2016 			}
2017 
2018 			if (ratio_80_delay > 80 && DrvBcnTimeOut == 0xff) {
2019 				DrvBcnTimeOut = i;
2020 				DBG_871X("%s(): DrvBcnTimeOut = %d\n", __func__, DrvBcnTimeOut);
2021 			}
2022 
2023 			/* reset adaptive_early_32k cnt */
2024 			pmlmeext->bcn_delay_cnt[i] = 0;
2025 			pmlmeext->bcn_delay_ratio[i] = 0;
2026 		}
2027 
2028 		pmlmeext->DrvBcnEarly = DrvBcnEarly;
2029 		pmlmeext->DrvBcnTimeOut = DrvBcnTimeOut;
2030 
2031 		pmlmeext->bcn_cnt = 0;
2032 	}
2033 }
2034 
2035 void beacon_timing_control(struct adapter *padapter)
2036 {
2037 	rtw_hal_bcn_related_reg_setting(padapter);
2038 }
2039 
2040 void rtw_alloc_macid(struct adapter *padapter, struct sta_info *psta)
2041 {
2042 	int i;
2043 	u8 bc_addr[ETH_ALEN] = {0xff, 0xff, 0xff, 0xff, 0xff, 0xff};
2044 	struct dvobj_priv *pdvobj = adapter_to_dvobj(padapter);
2045 
2046 	if (!memcmp(psta->hwaddr, bc_addr, ETH_ALEN))
2047 		return;
2048 
2049 	if (!memcmp(psta->hwaddr, myid(&padapter->eeprompriv), ETH_ALEN)) {
2050 		psta->mac_id = NUM_STA;
2051 		return;
2052 	}
2053 
2054 	spin_lock_bh(&pdvobj->lock);
2055 	for (i = 0; i < NUM_STA; i++) {
2056 		if (pdvobj->macid[i] == false) {
2057 			pdvobj->macid[i]  = true;
2058 			break;
2059 		}
2060 	}
2061 	spin_unlock_bh(&pdvobj->lock);
2062 
2063 	if (i > (NUM_STA-1)) {
2064 		psta->mac_id = NUM_STA;
2065 		DBG_871X("  no room for more MACIDs\n");
2066 	} else{
2067 		psta->mac_id = i;
2068 		DBG_871X("%s = %d\n", __func__, psta->mac_id);
2069 	}
2070 }
2071 
2072 void rtw_release_macid(struct adapter *padapter, struct sta_info *psta)
2073 {
2074 	u8 bc_addr[ETH_ALEN] = {0xff, 0xff, 0xff, 0xff, 0xff, 0xff};
2075 	struct dvobj_priv *pdvobj = adapter_to_dvobj(padapter);
2076 
2077 	if (!memcmp(psta->hwaddr, bc_addr, ETH_ALEN))
2078 		return;
2079 
2080 	if (!memcmp(psta->hwaddr, myid(&padapter->eeprompriv), ETH_ALEN))
2081 		return;
2082 
2083 	spin_lock_bh(&pdvobj->lock);
2084 	if (psta->mac_id < NUM_STA && psta->mac_id != 1) {
2085 		if (pdvobj->macid[psta->mac_id] == true) {
2086 			DBG_871X("%s = %d\n", __func__, psta->mac_id);
2087 			pdvobj->macid[psta->mac_id] = false;
2088 			psta->mac_id = NUM_STA;
2089 		}
2090 	}
2091 	spin_unlock_bh(&pdvobj->lock);
2092 }
2093 /* For 8188E RA */
2094 u8 rtw_search_max_mac_id(struct adapter *padapter)
2095 {
2096 	u8 max_mac_id = 0;
2097 	struct dvobj_priv *pdvobj = adapter_to_dvobj(padapter);
2098 	int i;
2099 	spin_lock_bh(&pdvobj->lock);
2100 	for (i = (NUM_STA-1); i >= 0 ; i--) {
2101 		if (pdvobj->macid[i] == true)
2102 			break;
2103 	}
2104 	max_mac_id = i;
2105 	spin_unlock_bh(&pdvobj->lock);
2106 
2107 	return max_mac_id;
2108 }
2109 
2110 struct adapter *dvobj_get_port0_adapter(struct dvobj_priv *dvobj)
2111 {
2112 	if (get_iface_type(dvobj->padapters[i]) != IFACE_PORT0)
2113 		return NULL;
2114 
2115 	return dvobj->padapters;
2116 }
2117 
2118 #ifdef CONFIG_GPIO_API
2119 int rtw_get_gpio(struct net_device *netdev, int gpio_num)
2120 {
2121 	u8 value;
2122 	u8 direction;
2123 	struct adapter *adapter = (struct adapter *)rtw_netdev_priv(netdev);
2124 	struct pwrctrl_priv *pwrpriv = adapter_to_pwrctl(adapter);
2125 
2126 	rtw_ps_deny(adapter, PS_DENY_IOCTL);
2127 
2128 	DBG_871X("rf_pwrstate = 0x%02x\n", pwrpriv->rf_pwrstate);
2129 	LeaveAllPowerSaveModeDirect(adapter);
2130 
2131 	/* Read GPIO Direction */
2132 	direction = (rtw_read8(adapter, REG_GPIO_PIN_CTRL + 2) & BIT(gpio_num)) >> gpio_num;
2133 
2134 	/* According the direction to read register value */
2135 	if (direction)
2136 		value = (rtw_read8(adapter, REG_GPIO_PIN_CTRL + 1) & BIT(gpio_num)) >> gpio_num;
2137 	else
2138 		value = (rtw_read8(adapter, REG_GPIO_PIN_CTRL) & BIT(gpio_num)) >> gpio_num;
2139 
2140 	rtw_ps_deny_cancel(adapter, PS_DENY_IOCTL);
2141 	DBG_871X("%s direction =%d value =%d\n", __func__, direction, value);
2142 
2143 	return value;
2144 }
2145 EXPORT_SYMBOL(rtw_get_gpio);
2146 
2147 int  rtw_set_gpio_output_value(struct net_device *netdev, int gpio_num, bool isHigh)
2148 {
2149 	u8 direction = 0;
2150 	u8 res = -1;
2151 	struct adapter *adapter = (struct adapter *)rtw_netdev_priv(netdev);
2152 
2153 	/* Check GPIO is 4~7 */
2154 	if (gpio_num > 7 || gpio_num < 4) {
2155 		DBG_871X("%s The gpio number does not included 4~7.\n", __func__);
2156 		return -1;
2157 	}
2158 
2159 	rtw_ps_deny(adapter, PS_DENY_IOCTL);
2160 
2161 	LeaveAllPowerSaveModeDirect(adapter);
2162 
2163 	/* Read GPIO direction */
2164 	direction = (rtw_read8(adapter, REG_GPIO_PIN_CTRL + 2) & BIT(gpio_num)) >> gpio_num;
2165 
2166 	/* If GPIO is output direction, setting value. */
2167 	if (direction) {
2168 		if (isHigh)
2169 			rtw_write8(adapter, REG_GPIO_PIN_CTRL + 1, rtw_read8(adapter, REG_GPIO_PIN_CTRL + 1) | BIT(gpio_num));
2170 		else
2171 			rtw_write8(adapter, REG_GPIO_PIN_CTRL + 1, rtw_read8(adapter, REG_GPIO_PIN_CTRL + 1) & ~BIT(gpio_num));
2172 
2173 		DBG_871X("%s Set gpio %x[%d]=%d\n", __func__, REG_GPIO_PIN_CTRL+1, gpio_num, isHigh);
2174 		res = 0;
2175 	} else{
2176 		DBG_871X("%s The gpio is input, not be set!\n", __func__);
2177 		res = -1;
2178 	}
2179 
2180 	rtw_ps_deny_cancel(adapter, PS_DENY_IOCTL);
2181 	return res;
2182 }
2183 EXPORT_SYMBOL(rtw_set_gpio_output_value);
2184 
2185 int rtw_config_gpio(struct net_device *netdev, int gpio_num, bool isOutput)
2186 {
2187 	struct adapter *adapter = (struct adapter *)rtw_netdev_priv(netdev);
2188 
2189 	if (gpio_num > 7 || gpio_num < 4) {
2190 		DBG_871X("%s The gpio number does not included 4~7.\n", __func__);
2191 		return -1;
2192 	}
2193 
2194 	DBG_871X("%s gpio_num =%d direction =%d\n", __func__, gpio_num, isOutput);
2195 
2196 	rtw_ps_deny(adapter, PS_DENY_IOCTL);
2197 
2198 	LeaveAllPowerSaveModeDirect(adapter);
2199 
2200 	if (isOutput)
2201 		rtw_write8(adapter, REG_GPIO_PIN_CTRL + 2, rtw_read8(adapter, REG_GPIO_PIN_CTRL + 2) | BIT(gpio_num));
2202 	else
2203 		rtw_write8(adapter, REG_GPIO_PIN_CTRL + 2, rtw_read8(adapter, REG_GPIO_PIN_CTRL + 2) & ~BIT(gpio_num));
2204 
2205 	rtw_ps_deny_cancel(adapter, PS_DENY_IOCTL);
2206 
2207 	return 0;
2208 }
2209 EXPORT_SYMBOL(rtw_config_gpio);
2210 #endif
2211 
2212 #if defined(CONFIG_WOWLAN) || defined(CONFIG_AP_WOWLAN)
2213 void rtw_get_current_ip_address(struct adapter *padapter, u8 *pcurrentip)
2214 {
2215 	struct mlme_ext_priv *pmlmeext = &padapter->mlmeextpriv;
2216 	struct mlme_ext_info *pmlmeinfo = &(pmlmeext->mlmext_info);
2217 	struct in_device *my_ip_ptr = padapter->pnetdev->ip_ptr;
2218 	u8 ipaddress[4];
2219 
2220 	if ((pmlmeinfo->state & WIFI_FW_LINKING_STATE) ||
2221 			pmlmeinfo->state & WIFI_FW_AP_STATE) {
2222 		if (my_ip_ptr != NULL) {
2223 			struct in_ifaddr *my_ifa_list = my_ip_ptr->ifa_list;
2224 			if (my_ifa_list != NULL) {
2225 				ipaddress[0] = my_ifa_list->ifa_address & 0xFF;
2226 				ipaddress[1] = (my_ifa_list->ifa_address >> 8) & 0xFF;
2227 				ipaddress[2] = (my_ifa_list->ifa_address >> 16) & 0xFF;
2228 				ipaddress[3] = my_ifa_list->ifa_address >> 24;
2229 				DBG_871X("%s: %d.%d.%d.%d ==========\n", __func__,
2230 						ipaddress[0], ipaddress[1], ipaddress[2], ipaddress[3]);
2231 				memcpy(pcurrentip, ipaddress, 4);
2232 			}
2233 		}
2234 	}
2235 }
2236 #endif
2237 #ifdef CONFIG_WOWLAN
2238 void rtw_get_sec_iv(struct adapter *padapter, u8 *pcur_dot11txpn, u8 *StaAddr)
2239 {
2240 	struct sta_info 	*psta;
2241 	struct security_priv *psecpriv = &padapter->securitypriv;
2242 
2243 	memset(pcur_dot11txpn, 0, 8);
2244 	if (NULL == StaAddr)
2245 		return;
2246 	psta = rtw_get_stainfo(&padapter->stapriv, StaAddr);
2247 	DBG_871X("%s(): StaAddr: %02x %02x %02x %02x %02x %02x\n",
2248 		__func__, StaAddr[0], StaAddr[1], StaAddr[2],
2249 		StaAddr[3], StaAddr[4], StaAddr[5]);
2250 
2251 	if (psta) {
2252 		if (psecpriv->dot11PrivacyAlgrthm != _NO_PRIVACY_ && psta->dot11txpn.val > 0)
2253 			psta->dot11txpn.val--;
2254 		AES_IV(pcur_dot11txpn, psta->dot11txpn, 0);
2255 
2256 		DBG_871X("%s(): CurrentIV: %02x %02x %02x %02x %02x %02x %02x %02x\n"
2257 		, __func__, pcur_dot11txpn[0], pcur_dot11txpn[1],
2258 		pcur_dot11txpn[2], pcur_dot11txpn[3], pcur_dot11txpn[4],
2259 		pcur_dot11txpn[5], pcur_dot11txpn[6], pcur_dot11txpn[7]);
2260 	}
2261 }
2262 void rtw_set_sec_pn(struct adapter *padapter)
2263 {
2264 		struct sta_info         *psta;
2265 		struct mlme_ext_priv    *pmlmeext = &(padapter->mlmeextpriv);
2266 		struct mlme_ext_info    *pmlmeinfo = &(pmlmeext->mlmext_info);
2267 		struct pwrctrl_priv *pwrpriv = adapter_to_pwrctl(padapter);
2268 		struct security_priv *psecpriv = &padapter->securitypriv;
2269 
2270 		psta = rtw_get_stainfo(&padapter->stapriv,
2271 		get_my_bssid(&pmlmeinfo->network));
2272 
2273 		if (psta) {
2274 			if (pwrpriv->wowlan_fw_iv > psta->dot11txpn.val) {
2275 				if (psecpriv->dot11PrivacyAlgrthm != _NO_PRIVACY_)
2276 					psta->dot11txpn.val = pwrpriv->wowlan_fw_iv + 2;
2277 			} else {
2278 				DBG_871X("%s(): FW IV is smaller than driver\n", __func__);
2279 				psta->dot11txpn.val += 2;
2280 			}
2281 			DBG_871X("%s: dot11txpn: 0x%016llx\n", __func__, psta->dot11txpn.val);
2282 		}
2283 }
2284 #endif /* CONFIG_WOWLAN */
2285 
2286 #ifdef CONFIG_PNO_SUPPORT
2287 #define	CSCAN_TLV_TYPE_SSID_IE	'S'
2288 #define CIPHER_IE "key_mgmt ="
2289 #define CIPHER_NONE "NONE"
2290 #define CIPHER_WPA_PSK "WPA-PSK"
2291 #define CIPHER_WPA_EAP "WPA-EAP IEEE8021X"
2292 
2293 #endif /* CONFIG_PNO_SUPPORT */
2294