1 // SPDX-License-Identifier: GPL-2.0
2 /******************************************************************************
3  *
4  * Copyright(c) 2007 - 2012 Realtek Corporation. All rights reserved.
5  *
6  ******************************************************************************/
7 #define _RTW_WLAN_UTIL_C_
8 
9 #include <drv_types.h>
10 #include <rtw_debug.h>
11 #include <hal_com_h2c.h>
12 
13 #if defined(CONFIG_WOWLAN) || defined(CONFIG_AP_WOWLAN)
14 #include <linux/inetdevice.h>
15 #endif
16 
17 static unsigned char ARTHEROS_OUI1[] = {0x00, 0x03, 0x7f};
18 static unsigned char ARTHEROS_OUI2[] = {0x00, 0x13, 0x74};
19 
20 static unsigned char BROADCOM_OUI1[] = {0x00, 0x10, 0x18};
21 static unsigned char BROADCOM_OUI2[] = {0x00, 0x0a, 0xf7};
22 static unsigned char BROADCOM_OUI3[] = {0x00, 0x05, 0xb5};
23 
24 static unsigned char CISCO_OUI[] = {0x00, 0x40, 0x96};
25 static unsigned char MARVELL_OUI[] = {0x00, 0x50, 0x43};
26 static unsigned char RALINK_OUI[] = {0x00, 0x0c, 0x43};
27 static unsigned char REALTEK_OUI[] = {0x00, 0xe0, 0x4c};
28 static unsigned char AIRGOCAP_OUI[] = {0x00, 0x0a, 0xf5};
29 static unsigned char RSN_TKIP_CIPHER[4] = {0x00, 0x0f, 0xac, 0x02};
30 static unsigned char WPA_TKIP_CIPHER[4] = {0x00, 0x50, 0xf2, 0x02};
31 
32 extern unsigned char RTW_WPA_OUI[];
33 extern unsigned char WPA_TKIP_CIPHER[4];
34 
35 #define R2T_PHY_DELAY	(0)
36 
37 /* define WAIT_FOR_BCN_TO_MIN	(3000) */
38 #define WAIT_FOR_BCN_TO_MIN	(6000)
39 #define WAIT_FOR_BCN_TO_MAX	(20000)
40 
41 #define DISCONNECT_BY_CHK_BCN_FAIL_OBSERV_PERIOD_IN_MS 1000
42 #define DISCONNECT_BY_CHK_BCN_FAIL_THRESHOLD 3
43 
44 static u8 rtw_basic_rate_cck[4] = {
45 	IEEE80211_CCK_RATE_1MB | IEEE80211_BASIC_RATE_MASK,
46 	IEEE80211_CCK_RATE_2MB | IEEE80211_BASIC_RATE_MASK,
47 	IEEE80211_CCK_RATE_5MB | IEEE80211_BASIC_RATE_MASK,
48 	IEEE80211_CCK_RATE_11MB | IEEE80211_BASIC_RATE_MASK
49 };
50 
51 static u8 rtw_basic_rate_ofdm[3] = {
52 	IEEE80211_OFDM_RATE_6MB | IEEE80211_BASIC_RATE_MASK,
53 	IEEE80211_OFDM_RATE_12MB | IEEE80211_BASIC_RATE_MASK,
54 	IEEE80211_OFDM_RATE_24MB | IEEE80211_BASIC_RATE_MASK
55 };
56 
57 int cckrates_included(unsigned char *rate, int ratelen)
58 {
59 	int	i;
60 
61 	for (i = 0; i < ratelen; i++) {
62 		if  ((((rate[i]) & 0x7f) == 2)	|| (((rate[i]) & 0x7f) == 4) ||
63 		     (((rate[i]) & 0x7f) == 11)  || (((rate[i]) & 0x7f) == 22))
64 			return true;
65 	}
66 
67 	return false;
68 
69 }
70 
71 int cckratesonly_included(unsigned char *rate, int ratelen)
72 {
73 	int	i;
74 
75 	for (i = 0; i < ratelen; i++) {
76 		if  ((((rate[i]) & 0x7f) != 2) && (((rate[i]) & 0x7f) != 4) &&
77 		     (((rate[i]) & 0x7f) != 11)  && (((rate[i]) & 0x7f) != 22))
78 			return false;
79 	}
80 
81 	return true;
82 }
83 
84 u8 networktype_to_raid_ex(struct adapter *adapter, struct sta_info *psta)
85 {
86 	u8 raid, cur_rf_type, rf_type = RF_1T1R;
87 
88 	rtw_hal_get_hwreg(adapter, HW_VAR_RF_TYPE, (u8 *)(&cur_rf_type));
89 
90 	if (cur_rf_type == RF_1T1R) {
91 		rf_type = RF_1T1R;
92 	} else if (IsSupportedVHT(psta->wireless_mode)) {
93 		if (psta->ra_mask & 0xffc00000)
94 			rf_type = RF_2T2R;
95 	} else if (IsSupportedHT(psta->wireless_mode)) {
96 		if (psta->ra_mask & 0xfff00000)
97 			rf_type = RF_2T2R;
98 	}
99 
100 	switch (psta->wireless_mode) {
101 	case WIRELESS_11B:
102 		raid = RATEID_IDX_B;
103 		break;
104 	case WIRELESS_11A:
105 	case WIRELESS_11G:
106 		raid = RATEID_IDX_G;
107 		break;
108 	case WIRELESS_11BG:
109 		raid = RATEID_IDX_BG;
110 		break;
111 	case WIRELESS_11_24N:
112 	case WIRELESS_11_5N:
113 	case WIRELESS_11A_5N:
114 	case WIRELESS_11G_24N:
115 		if (rf_type == RF_2T2R)
116 			raid = RATEID_IDX_GN_N2SS;
117 		else
118 			raid = RATEID_IDX_GN_N1SS;
119 		break;
120 	case WIRELESS_11B_24N:
121 	case WIRELESS_11BG_24N:
122 		if (psta->bw_mode == CHANNEL_WIDTH_20) {
123 			if (rf_type == RF_2T2R)
124 				raid = RATEID_IDX_BGN_20M_2SS_BN;
125 			else
126 				raid = RATEID_IDX_BGN_20M_1SS_BN;
127 		} else {
128 			if (rf_type == RF_2T2R)
129 				raid = RATEID_IDX_BGN_40M_2SS;
130 			else
131 				raid = RATEID_IDX_BGN_40M_1SS;
132 		}
133 		break;
134 	default:
135 		raid = RATEID_IDX_BGN_40M_2SS;
136 		break;
137 
138 	}
139 	return raid;
140 
141 }
142 
143 unsigned char ratetbl_val_2wifirate(unsigned char rate);
144 unsigned char ratetbl_val_2wifirate(unsigned char rate)
145 {
146 	unsigned char val = 0;
147 
148 	switch (rate & 0x7f) {
149 	case 0:
150 		val = IEEE80211_CCK_RATE_1MB;
151 		break;
152 
153 	case 1:
154 		val = IEEE80211_CCK_RATE_2MB;
155 		break;
156 
157 	case 2:
158 		val = IEEE80211_CCK_RATE_5MB;
159 		break;
160 
161 	case 3:
162 		val = IEEE80211_CCK_RATE_11MB;
163 		break;
164 
165 	case 4:
166 		val = IEEE80211_OFDM_RATE_6MB;
167 		break;
168 
169 	case 5:
170 		val = IEEE80211_OFDM_RATE_9MB;
171 		break;
172 
173 	case 6:
174 		val = IEEE80211_OFDM_RATE_12MB;
175 		break;
176 
177 	case 7:
178 		val = IEEE80211_OFDM_RATE_18MB;
179 		break;
180 
181 	case 8:
182 		val = IEEE80211_OFDM_RATE_24MB;
183 		break;
184 
185 	case 9:
186 		val = IEEE80211_OFDM_RATE_36MB;
187 		break;
188 
189 	case 10:
190 		val = IEEE80211_OFDM_RATE_48MB;
191 		break;
192 
193 	case 11:
194 		val = IEEE80211_OFDM_RATE_54MB;
195 		break;
196 
197 	}
198 
199 	return val;
200 
201 }
202 
203 int is_basicrate(struct adapter *padapter, unsigned char rate);
204 int is_basicrate(struct adapter *padapter, unsigned char rate)
205 {
206 	int i;
207 	unsigned char val;
208 	struct mlme_ext_priv *pmlmeext = &padapter->mlmeextpriv;
209 
210 	for (i = 0; i < NumRates; i++) {
211 		val = pmlmeext->basicrate[i];
212 
213 		if ((val != 0xff) && (val != 0xfe))
214 			if (rate == ratetbl_val_2wifirate(val))
215 				return true;
216 	}
217 
218 	return false;
219 }
220 
221 unsigned int ratetbl2rateset(struct adapter *padapter, unsigned char *rateset);
222 unsigned int ratetbl2rateset(struct adapter *padapter, unsigned char *rateset)
223 {
224 	int i;
225 	unsigned char rate;
226 	unsigned int	len = 0;
227 	struct mlme_ext_priv *pmlmeext = &padapter->mlmeextpriv;
228 
229 	for (i = 0; i < NumRates; i++) {
230 		rate = pmlmeext->datarate[i];
231 
232 		switch (rate) {
233 		case 0xff:
234 			return len;
235 
236 		case 0xfe:
237 			continue;
238 
239 		default:
240 			rate = ratetbl_val_2wifirate(rate);
241 
242 			if (is_basicrate(padapter, rate) == true)
243 				rate |= IEEE80211_BASIC_RATE_MASK;
244 
245 			rateset[len] = rate;
246 			len++;
247 			break;
248 		}
249 	}
250 	return len;
251 }
252 
253 void get_rate_set(struct adapter *padapter, unsigned char *pbssrate, int *bssrate_len)
254 {
255 	unsigned char supportedrates[NumRates];
256 
257 	memset(supportedrates, 0, NumRates);
258 	*bssrate_len = ratetbl2rateset(padapter, supportedrates);
259 	memcpy(pbssrate, supportedrates, *bssrate_len);
260 }
261 
262 void set_mcs_rate_by_mask(u8 *mcs_set, u32 mask)
263 {
264 	u8 mcs_rate_1r = (u8)(mask&0xff);
265 	u8 mcs_rate_2r = (u8)((mask>>8)&0xff);
266 	u8 mcs_rate_3r = (u8)((mask>>16)&0xff);
267 	u8 mcs_rate_4r = (u8)((mask>>24)&0xff);
268 
269 	mcs_set[0] &= mcs_rate_1r;
270 	mcs_set[1] &= mcs_rate_2r;
271 	mcs_set[2] &= mcs_rate_3r;
272 	mcs_set[3] &= mcs_rate_4r;
273 }
274 
275 void UpdateBrateTbl(struct adapter *Adapter, u8 *mBratesOS)
276 {
277 	u8 i;
278 	u8 rate;
279 
280 	/*  1M, 2M, 5.5M, 11M, 6M, 12M, 24M are mandatory. */
281 	for (i = 0; i < NDIS_802_11_LENGTH_RATES_EX; i++) {
282 		rate = mBratesOS[i] & 0x7f;
283 		switch (rate) {
284 		case IEEE80211_CCK_RATE_1MB:
285 		case IEEE80211_CCK_RATE_2MB:
286 		case IEEE80211_CCK_RATE_5MB:
287 		case IEEE80211_CCK_RATE_11MB:
288 		case IEEE80211_OFDM_RATE_6MB:
289 		case IEEE80211_OFDM_RATE_12MB:
290 		case IEEE80211_OFDM_RATE_24MB:
291 			mBratesOS[i] |= IEEE80211_BASIC_RATE_MASK;
292 			break;
293 		}
294 	}
295 
296 }
297 
298 void UpdateBrateTblForSoftAP(u8 *bssrateset, u32 bssratelen)
299 {
300 	u8 i;
301 	u8 rate;
302 
303 	for (i = 0; i < bssratelen; i++) {
304 		rate = bssrateset[i] & 0x7f;
305 		switch (rate) {
306 		case IEEE80211_CCK_RATE_1MB:
307 		case IEEE80211_CCK_RATE_2MB:
308 		case IEEE80211_CCK_RATE_5MB:
309 		case IEEE80211_CCK_RATE_11MB:
310 			bssrateset[i] |= IEEE80211_BASIC_RATE_MASK;
311 			break;
312 		}
313 	}
314 
315 }
316 
317 void Save_DM_Func_Flag(struct adapter *padapter)
318 {
319 	u8 bSaveFlag = true;
320 	rtw_hal_set_hwreg(padapter, HW_VAR_DM_FUNC_OP, (u8 *)(&bSaveFlag));
321 }
322 
323 void Restore_DM_Func_Flag(struct adapter *padapter)
324 {
325 	u8 bSaveFlag = false;
326 	rtw_hal_set_hwreg(padapter, HW_VAR_DM_FUNC_OP, (u8 *)(&bSaveFlag));
327 }
328 
329 void Switch_DM_Func(struct adapter *padapter, u32 mode, u8 enable)
330 {
331 	if (enable == true)
332 		rtw_hal_set_hwreg(padapter, HW_VAR_DM_FUNC_SET, (u8 *)(&mode));
333 	else
334 		rtw_hal_set_hwreg(padapter, HW_VAR_DM_FUNC_CLR, (u8 *)(&mode));
335 }
336 
337 static void Set_NETYPE0_MSR(struct adapter *padapter, u8 type)
338 {
339 	rtw_hal_set_hwreg(padapter, HW_VAR_MEDIA_STATUS, (u8 *)(&type));
340 }
341 
342 void Set_MSR(struct adapter *padapter, u8 type)
343 {
344 	Set_NETYPE0_MSR(padapter, type);
345 }
346 
347 inline u8 rtw_get_oper_ch(struct adapter *adapter)
348 {
349 	return adapter_to_dvobj(adapter)->oper_channel;
350 }
351 
352 inline void rtw_set_oper_ch(struct adapter *adapter, u8 ch)
353 {
354 #ifdef DBG_CH_SWITCH
355 	const int len = 128;
356 	char msg[128] = {0};
357 	int cnt = 0;
358 	int i = 0;
359 #endif  /* DBG_CH_SWITCH */
360 	struct dvobj_priv *dvobj = adapter_to_dvobj(adapter);
361 
362 	if (dvobj->oper_channel != ch) {
363 		dvobj->on_oper_ch_time = jiffies;
364 
365 #ifdef DBG_CH_SWITCH
366 		cnt += snprintf(msg+cnt, len-cnt, "switch to ch %3u", ch);
367 
368 		for (i = 0; i < dvobj->iface_nums; i++) {
369 			struct adapter *iface = dvobj->padapters[i];
370 			cnt += snprintf(msg+cnt, len-cnt, " ["ADPT_FMT":", ADPT_ARG(iface));
371 			if (iface->mlmeextpriv.cur_channel == ch)
372 				cnt += snprintf(msg+cnt, len-cnt, "C");
373 			else
374 				cnt += snprintf(msg+cnt, len-cnt, "_");
375 			if (iface->wdinfo.listen_channel == ch && !rtw_p2p_chk_state(&iface->wdinfo, P2P_STATE_NONE))
376 				cnt += snprintf(msg+cnt, len-cnt, "L");
377 			else
378 				cnt += snprintf(msg+cnt, len-cnt, "_");
379 			cnt += snprintf(msg+cnt, len-cnt, "]");
380 		}
381 
382 		DBG_871X(FUNC_ADPT_FMT" %s\n", FUNC_ADPT_ARG(adapter), msg);
383 #endif /* DBG_CH_SWITCH */
384 	}
385 
386 	dvobj->oper_channel = ch;
387 }
388 
389 inline u8 rtw_get_oper_bw(struct adapter *adapter)
390 {
391 	return adapter_to_dvobj(adapter)->oper_bwmode;
392 }
393 
394 inline void rtw_set_oper_bw(struct adapter *adapter, u8 bw)
395 {
396 	adapter_to_dvobj(adapter)->oper_bwmode = bw;
397 }
398 
399 inline u8 rtw_get_oper_choffset(struct adapter *adapter)
400 {
401 	return adapter_to_dvobj(adapter)->oper_ch_offset;
402 }
403 
404 inline void rtw_set_oper_choffset(struct adapter *adapter, u8 offset)
405 {
406 	adapter_to_dvobj(adapter)->oper_ch_offset = offset;
407 }
408 
409 u8 rtw_get_center_ch(u8 channel, u8 chnl_bw, u8 chnl_offset)
410 {
411 	u8 center_ch = channel;
412 
413 	if (chnl_bw == CHANNEL_WIDTH_80) {
414 		if ((channel == 36) || (channel == 40) || (channel == 44) || (channel == 48))
415 			center_ch = 42;
416 		if ((channel == 52) || (channel == 56) || (channel == 60) || (channel == 64))
417 			center_ch = 58;
418 		if ((channel == 100) || (channel == 104) || (channel == 108) || (channel == 112))
419 			center_ch = 106;
420 		if ((channel == 116) || (channel == 120) || (channel == 124) || (channel == 128))
421 			center_ch = 122;
422 		if ((channel == 132) || (channel == 136) || (channel == 140) || (channel == 144))
423 			center_ch = 138;
424 		if ((channel == 149) || (channel == 153) || (channel == 157) || (channel == 161))
425 			center_ch = 155;
426 		else if (channel <= 14)
427 			center_ch = 7;
428 	} else if (chnl_bw == CHANNEL_WIDTH_40) {
429 		if (chnl_offset == HAL_PRIME_CHNL_OFFSET_LOWER)
430 			center_ch = channel + 2;
431 		else
432 			center_ch = channel - 2;
433 	}
434 
435 	return center_ch;
436 }
437 
438 inline unsigned long rtw_get_on_cur_ch_time(struct adapter *adapter)
439 {
440 	if (adapter->mlmeextpriv.cur_channel == adapter_to_dvobj(adapter)->oper_channel)
441 		return adapter_to_dvobj(adapter)->on_oper_ch_time;
442 	else
443 		return 0;
444 }
445 
446 void SelectChannel(struct adapter *padapter, unsigned char channel)
447 {
448 	if (mutex_lock_interruptible(&(adapter_to_dvobj(padapter)->setch_mutex)))
449 		return;
450 
451 	/* saved channel info */
452 	rtw_set_oper_ch(padapter, channel);
453 
454 	rtw_hal_set_chan(padapter, channel);
455 
456 	mutex_unlock(&(adapter_to_dvobj(padapter)->setch_mutex));
457 }
458 
459 void set_channel_bwmode(struct adapter *padapter, unsigned char channel, unsigned char channel_offset, unsigned short bwmode)
460 {
461 	u8 center_ch, chnl_offset80 = HAL_PRIME_CHNL_OFFSET_DONT_CARE;
462 
463 	if (padapter->bNotifyChannelChange)
464 		DBG_871X("[%s] ch = %d, offset = %d, bwmode = %d\n", __func__, channel, channel_offset, bwmode);
465 
466 	center_ch = rtw_get_center_ch(channel, bwmode, channel_offset);
467 
468 	if (bwmode == CHANNEL_WIDTH_80) {
469 		if (center_ch > channel)
470 			chnl_offset80 = HAL_PRIME_CHNL_OFFSET_LOWER;
471 		else if (center_ch < channel)
472 			chnl_offset80 = HAL_PRIME_CHNL_OFFSET_UPPER;
473 		else
474 			chnl_offset80 = HAL_PRIME_CHNL_OFFSET_DONT_CARE;
475 	}
476 
477 	/* set Channel */
478 	if (mutex_lock_interruptible(&(adapter_to_dvobj(padapter)->setch_mutex)))
479 		return;
480 
481 	/* saved channel/bw info */
482 	rtw_set_oper_ch(padapter, channel);
483 	rtw_set_oper_bw(padapter, bwmode);
484 	rtw_set_oper_choffset(padapter, channel_offset);
485 
486 	rtw_hal_set_chnl_bw(padapter, center_ch, bwmode, channel_offset, chnl_offset80); /*  set center channel */
487 
488 	mutex_unlock(&(adapter_to_dvobj(padapter)->setch_mutex));
489 }
490 
491 __inline u8 *get_my_bssid(struct wlan_bssid_ex *pnetwork)
492 {
493 	return pnetwork->MacAddress;
494 }
495 
496 u16 get_beacon_interval(struct wlan_bssid_ex *bss)
497 {
498 	__le16 val;
499 	memcpy((unsigned char *)&val, rtw_get_beacon_interval_from_ie(bss->IEs), 2);
500 
501 	return le16_to_cpu(val);
502 
503 }
504 
505 int is_client_associated_to_ap(struct adapter *padapter)
506 {
507 	struct mlme_ext_priv *pmlmeext;
508 	struct mlme_ext_info *pmlmeinfo;
509 
510 	if (!padapter)
511 		return _FAIL;
512 
513 	pmlmeext = &padapter->mlmeextpriv;
514 	pmlmeinfo = &(pmlmeext->mlmext_info);
515 
516 	if ((pmlmeinfo->state & WIFI_FW_ASSOC_SUCCESS) && ((pmlmeinfo->state&0x03) == WIFI_FW_STATION_STATE))
517 		return true;
518 	else
519 		return _FAIL;
520 }
521 
522 int is_client_associated_to_ibss(struct adapter *padapter)
523 {
524 	struct mlme_ext_priv *pmlmeext = &padapter->mlmeextpriv;
525 	struct mlme_ext_info *pmlmeinfo = &(pmlmeext->mlmext_info);
526 
527 	if ((pmlmeinfo->state & WIFI_FW_ASSOC_SUCCESS) && ((pmlmeinfo->state&0x03) == WIFI_FW_ADHOC_STATE))
528 		return true;
529 	else
530 		return _FAIL;
531 }
532 
533 int is_IBSS_empty(struct adapter *padapter)
534 {
535 	unsigned int i;
536 	struct mlme_ext_priv *pmlmeext = &padapter->mlmeextpriv;
537 	struct mlme_ext_info *pmlmeinfo = &(pmlmeext->mlmext_info);
538 
539 	for (i = IBSS_START_MAC_ID; i < NUM_STA; i++) {
540 		if (pmlmeinfo->FW_sta_info[i].status == 1)
541 			return _FAIL;
542 	}
543 
544 	return true;
545 
546 }
547 
548 unsigned int decide_wait_for_beacon_timeout(unsigned int bcn_interval)
549 {
550 	if ((bcn_interval << 2) < WAIT_FOR_BCN_TO_MIN)
551 		return WAIT_FOR_BCN_TO_MIN;
552 	else if ((bcn_interval << 2) > WAIT_FOR_BCN_TO_MAX)
553 		return WAIT_FOR_BCN_TO_MAX;
554 	else
555 		return ((bcn_interval << 2));
556 }
557 
558 void invalidate_cam_all(struct adapter *padapter)
559 {
560 	struct dvobj_priv *dvobj = adapter_to_dvobj(padapter);
561 	struct cam_ctl_t *cam_ctl = &dvobj->cam_ctl;
562 
563 	rtw_hal_set_hwreg(padapter, HW_VAR_CAM_INVALID_ALL, NULL);
564 
565 	spin_lock_bh(&cam_ctl->lock);
566 	cam_ctl->bitmap = 0;
567 	memset(dvobj->cam_cache, 0, sizeof(struct cam_entry_cache)*TOTAL_CAM_ENTRY);
568 	spin_unlock_bh(&cam_ctl->lock);
569 }
570 
571 static u32 _ReadCAM(struct adapter *padapter, u32 addr)
572 {
573 	u32 count = 0, cmd;
574 	cmd = CAM_POLLINIG | addr;
575 	rtw_write32(padapter, RWCAM, cmd);
576 
577 	do {
578 		if (0 == (rtw_read32(padapter, REG_CAMCMD) & CAM_POLLINIG))
579 			break;
580 	} while (count++ < 100);
581 
582 	return rtw_read32(padapter, REG_CAMREAD);
583 }
584 void read_cam(struct adapter *padapter, u8 entry, u8 *get_key)
585 {
586 	u32 j, addr, cmd;
587 	addr = entry << 3;
588 
589 	/* DBG_8192C("********* DUMP CAM Entry_#%02d***************\n", entry); */
590 	for (j = 0; j < 6; j++) {
591 		cmd = _ReadCAM(padapter, addr+j);
592 		/* DBG_8192C("offset:0x%02x => 0x%08x\n", addr+j, cmd); */
593 		if (j > 1) /* get key from cam */
594 			memcpy(get_key+(j-2)*4, &cmd, 4);
595 	}
596 	/* DBG_8192C("*********************************\n"); */
597 }
598 
599 void _write_cam(struct adapter *padapter, u8 entry, u16 ctrl, u8 *mac, u8 *key)
600 {
601 	unsigned int i, val, addr;
602 	int j;
603 	u32 cam_val[2];
604 
605 	addr = entry << 3;
606 
607 	for (j = 5; j >= 0; j--) {
608 		switch (j) {
609 		case 0:
610 			val = (ctrl | (mac[0] << 16) | (mac[1] << 24));
611 			break;
612 		case 1:
613 			val = (mac[2] | (mac[3] << 8) | (mac[4] << 16) | (mac[5] << 24));
614 			break;
615 		default:
616 			i = (j - 2) << 2;
617 			val = (key[i] | (key[i+1] << 8) | (key[i+2] << 16) | (key[i+3] << 24));
618 			break;
619 		}
620 
621 		cam_val[0] = val;
622 		cam_val[1] = addr + (unsigned int)j;
623 
624 		rtw_hal_set_hwreg(padapter, HW_VAR_CAM_WRITE, (u8 *)cam_val);
625 	}
626 }
627 
628 void _clear_cam_entry(struct adapter *padapter, u8 entry)
629 {
630 	unsigned char null_sta[] = {0x00, 0x00, 0x00, 0x00, 0x00, 0x00};
631 	unsigned char null_key[] = {0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00};
632 
633 	_write_cam(padapter, entry, 0, null_sta, null_key);
634 }
635 
636 inline void write_cam(struct adapter *adapter, u8 id, u16 ctrl, u8 *mac, u8 *key)
637 {
638 	_write_cam(adapter, id, ctrl, mac, key);
639 	write_cam_cache(adapter, id, ctrl, mac, key);
640 }
641 
642 inline void clear_cam_entry(struct adapter *adapter, u8 id)
643 {
644 	_clear_cam_entry(adapter, id);
645 	clear_cam_cache(adapter, id);
646 }
647 
648 inline void write_cam_from_cache(struct adapter *adapter, u8 id)
649 {
650 	struct dvobj_priv *dvobj = adapter_to_dvobj(adapter);
651 	struct cam_ctl_t *cam_ctl = &dvobj->cam_ctl;
652 	struct cam_entry_cache cache;
653 
654 	spin_lock_bh(&cam_ctl->lock);
655 	memcpy(&cache, &dvobj->cam_cache[id], sizeof(struct cam_entry_cache));
656 	spin_unlock_bh(&cam_ctl->lock);
657 
658 	_write_cam(adapter, id, cache.ctrl, cache.mac, cache.key);
659 }
660 
661 void write_cam_cache(struct adapter *adapter, u8 id, u16 ctrl, u8 *mac, u8 *key)
662 {
663 	struct dvobj_priv *dvobj = adapter_to_dvobj(adapter);
664 	struct cam_ctl_t *cam_ctl = &dvobj->cam_ctl;
665 
666 	spin_lock_bh(&cam_ctl->lock);
667 
668 	dvobj->cam_cache[id].ctrl = ctrl;
669 	memcpy(dvobj->cam_cache[id].mac, mac, ETH_ALEN);
670 	memcpy(dvobj->cam_cache[id].key, key, 16);
671 
672 	spin_unlock_bh(&cam_ctl->lock);
673 }
674 
675 void clear_cam_cache(struct adapter *adapter, u8 id)
676 {
677 	struct dvobj_priv *dvobj = adapter_to_dvobj(adapter);
678 	struct cam_ctl_t *cam_ctl = &dvobj->cam_ctl;
679 
680 	spin_lock_bh(&cam_ctl->lock);
681 
682 	memset(&(dvobj->cam_cache[id]), 0, sizeof(struct cam_entry_cache));
683 
684 	spin_unlock_bh(&cam_ctl->lock);
685 }
686 
687 static bool _rtw_camid_is_gk(struct adapter *adapter, u8 cam_id)
688 {
689 	struct dvobj_priv *dvobj = adapter_to_dvobj(adapter);
690 	struct cam_ctl_t *cam_ctl = &dvobj->cam_ctl;
691 	bool ret = false;
692 
693 	if (cam_id >= TOTAL_CAM_ENTRY)
694 		goto exit;
695 
696 	if (!(cam_ctl->bitmap & BIT(cam_id)))
697 		goto exit;
698 
699 	ret = (dvobj->cam_cache[cam_id].ctrl&BIT6)?true:false;
700 
701 exit:
702 	return ret;
703 }
704 
705 static s16 _rtw_camid_search(struct adapter *adapter, u8 *addr, s16 kid)
706 {
707 	struct dvobj_priv *dvobj = adapter_to_dvobj(adapter);
708 	int i;
709 	s16 cam_id = -1;
710 
711 	for (i = 0; i < TOTAL_CAM_ENTRY; i++) {
712 		if (addr && memcmp(dvobj->cam_cache[i].mac, addr, ETH_ALEN))
713 			continue;
714 		if (kid >= 0 && kid != (dvobj->cam_cache[i].ctrl&0x03))
715 			continue;
716 
717 		cam_id = i;
718 		break;
719 	}
720 
721 	if (addr)
722 		DBG_871X(FUNC_ADPT_FMT" addr:"MAC_FMT" kid:%d, return cam_id:%d\n"
723 			 , FUNC_ADPT_ARG(adapter), MAC_ARG(addr), kid, cam_id);
724 	else
725 		DBG_871X(FUNC_ADPT_FMT" addr:%p kid:%d, return cam_id:%d\n"
726 			 , FUNC_ADPT_ARG(adapter), addr, kid, cam_id);
727 
728 	return cam_id;
729 }
730 
731 s16 rtw_camid_search(struct adapter *adapter, u8 *addr, s16 kid)
732 {
733 	struct dvobj_priv *dvobj = adapter_to_dvobj(adapter);
734 	struct cam_ctl_t *cam_ctl = &dvobj->cam_ctl;
735 	s16 cam_id = -1;
736 
737 	spin_lock_bh(&cam_ctl->lock);
738 	cam_id = _rtw_camid_search(adapter, addr, kid);
739 	spin_unlock_bh(&cam_ctl->lock);
740 
741 	return cam_id;
742 }
743 
744 s16 rtw_camid_alloc(struct adapter *adapter, struct sta_info *sta, u8 kid)
745 {
746 	struct dvobj_priv *dvobj = adapter_to_dvobj(adapter);
747 	struct cam_ctl_t *cam_ctl = &dvobj->cam_ctl;
748 	s16 cam_id = -1;
749 	struct mlme_ext_info *mlmeinfo;
750 
751 	spin_lock_bh(&cam_ctl->lock);
752 
753 	mlmeinfo = &adapter->mlmeextpriv.mlmext_info;
754 
755 	if ((((mlmeinfo->state&0x03) == WIFI_FW_AP_STATE) || ((mlmeinfo->state&0x03) == WIFI_FW_ADHOC_STATE))
756 		&& !sta) {
757 		/* AP/Ad-hoc mode group key: static alloction to default key by key ID */
758 		if (kid > 3) {
759 			DBG_871X_LEVEL(_drv_always_, FUNC_ADPT_FMT" group key with invalid key id:%u\n"
760 				, FUNC_ADPT_ARG(adapter), kid);
761 			rtw_warn_on(1);
762 			goto bitmap_handle;
763 		}
764 
765 		cam_id = kid;
766 	} else {
767 		int i;
768 		u8 *addr = sta?sta->hwaddr:NULL;
769 
770 		if (!sta) {
771 			if (!(mlmeinfo->state & WIFI_FW_ASSOC_SUCCESS)) {
772 				/* bypass STA mode group key setting before connected(ex:WEP) because bssid is not ready */
773 				goto bitmap_handle;
774 			}
775 
776 			addr = get_bssid(&adapter->mlmepriv);
777 		}
778 
779 		i = _rtw_camid_search(adapter, addr, kid);
780 		if (i >= 0) {
781 			/* Fix issue that pairwise and group key have same key id. Pairwise key first, group key can overwirte group only(ex: rekey) */
782 			if (sta || _rtw_camid_is_gk(adapter, i) == true)
783 				cam_id = i;
784 			else
785 				DBG_871X_LEVEL(_drv_always_, FUNC_ADPT_FMT" group key id:%u the same key id as pairwise key\n"
786 					, FUNC_ADPT_ARG(adapter), kid);
787 			goto bitmap_handle;
788 		}
789 
790 		for (i = 4; i < TOTAL_CAM_ENTRY; i++)
791 			if (!(cam_ctl->bitmap & BIT(i)))
792 				break;
793 
794 		if (i == TOTAL_CAM_ENTRY) {
795 			if (sta)
796 				DBG_871X_LEVEL(_drv_always_, FUNC_ADPT_FMT" pairwise key with "MAC_FMT" id:%u no room\n"
797 				, FUNC_ADPT_ARG(adapter), MAC_ARG(sta->hwaddr), kid);
798 			else
799 				DBG_871X_LEVEL(_drv_always_, FUNC_ADPT_FMT" group key id:%u no room\n"
800 				, FUNC_ADPT_ARG(adapter), kid);
801 			rtw_warn_on(1);
802 			goto bitmap_handle;
803 		}
804 
805 		cam_id = i;
806 	}
807 
808 bitmap_handle:
809 	if (cam_id >= 0 && cam_id < 32)
810 		cam_ctl->bitmap |= BIT(cam_id);
811 
812 	spin_unlock_bh(&cam_ctl->lock);
813 
814 	return cam_id;
815 }
816 
817 void rtw_camid_free(struct adapter *adapter, u8 cam_id)
818 {
819 	struct dvobj_priv *dvobj = adapter_to_dvobj(adapter);
820 	struct cam_ctl_t *cam_ctl = &dvobj->cam_ctl;
821 
822 	spin_lock_bh(&cam_ctl->lock);
823 
824 	if (cam_id < TOTAL_CAM_ENTRY)
825 		cam_ctl->bitmap &= ~(BIT(cam_id));
826 
827 	spin_unlock_bh(&cam_ctl->lock);
828 }
829 
830 int allocate_fw_sta_entry(struct adapter *padapter)
831 {
832 	unsigned int mac_id;
833 	struct mlme_ext_priv *pmlmeext = &padapter->mlmeextpriv;
834 	struct mlme_ext_info *pmlmeinfo = &(pmlmeext->mlmext_info);
835 
836 	for (mac_id = IBSS_START_MAC_ID; mac_id < NUM_STA; mac_id++) {
837 		if (pmlmeinfo->FW_sta_info[mac_id].status == 0) {
838 			pmlmeinfo->FW_sta_info[mac_id].status = 1;
839 			pmlmeinfo->FW_sta_info[mac_id].retry = 0;
840 			break;
841 		}
842 	}
843 
844 	return mac_id;
845 }
846 
847 void flush_all_cam_entry(struct adapter *padapter)
848 {
849 	struct mlme_ext_priv *pmlmeext = &padapter->mlmeextpriv;
850 	struct mlme_ext_info *pmlmeinfo = &(pmlmeext->mlmext_info);
851 
852 	invalidate_cam_all(padapter);
853 	/* clear default key related key search setting */
854 	rtw_hal_set_hwreg(padapter, HW_VAR_SEC_DK_CFG, (u8 *)false);
855 
856 	memset((u8 *)(pmlmeinfo->FW_sta_info), 0, sizeof(pmlmeinfo->FW_sta_info));
857 
858 }
859 
860 int WMM_param_handler(struct adapter *padapter, struct ndis_80211_var_ie *pIE)
861 {
862 	/* struct registry_priv *pregpriv = &padapter->registrypriv; */
863 	struct mlme_priv *pmlmepriv = &(padapter->mlmepriv);
864 	struct mlme_ext_priv *pmlmeext = &padapter->mlmeextpriv;
865 	struct mlme_ext_info *pmlmeinfo = &(pmlmeext->mlmext_info);
866 
867 	if (pmlmepriv->qospriv.qos_option == 0) {
868 		pmlmeinfo->WMM_enable = 0;
869 		return false;
870 	}
871 
872 	if (!memcmp(&(pmlmeinfo->WMM_param), (pIE->data + 6), sizeof(struct WMM_para_element)))
873 		return false;
874 	else
875 		memcpy(&(pmlmeinfo->WMM_param), (pIE->data + 6), sizeof(struct WMM_para_element));
876 
877 	pmlmeinfo->WMM_enable = 1;
878 	return true;
879 }
880 
881 void WMMOnAssocRsp(struct adapter *padapter)
882 {
883 	u8 ACI, ACM, AIFS, ECWMin, ECWMax, aSifsTime;
884 	u8 acm_mask;
885 	u16 TXOP;
886 	u32 acParm, i;
887 	u32 edca[4], inx[4];
888 	struct mlme_ext_priv *pmlmeext = &padapter->mlmeextpriv;
889 	struct mlme_ext_info *pmlmeinfo = &(pmlmeext->mlmext_info);
890 	struct xmit_priv 	*pxmitpriv = &padapter->xmitpriv;
891 	struct registry_priv *pregpriv = &padapter->registrypriv;
892 
893 	acm_mask = 0;
894 
895 	if (pmlmeext->cur_wireless_mode & WIRELESS_11_24N)
896 		aSifsTime = 16;
897 	else
898 		aSifsTime = 10;
899 
900 	if (pmlmeinfo->WMM_enable == 0) {
901 		padapter->mlmepriv.acm_mask = 0;
902 
903 		AIFS = aSifsTime + (2 * pmlmeinfo->slotTime);
904 
905 		if (pmlmeext->cur_wireless_mode & (WIRELESS_11G | WIRELESS_11A)) {
906 			ECWMin = 4;
907 			ECWMax = 10;
908 		} else if (pmlmeext->cur_wireless_mode & WIRELESS_11B) {
909 			ECWMin = 5;
910 			ECWMax = 10;
911 		} else {
912 			ECWMin = 4;
913 			ECWMax = 10;
914 		}
915 
916 		TXOP = 0;
917 		acParm = AIFS | (ECWMin << 8) | (ECWMax << 12) | (TXOP << 16);
918 		rtw_hal_set_hwreg(padapter, HW_VAR_AC_PARAM_BE, (u8 *)(&acParm));
919 		rtw_hal_set_hwreg(padapter, HW_VAR_AC_PARAM_BK, (u8 *)(&acParm));
920 		rtw_hal_set_hwreg(padapter, HW_VAR_AC_PARAM_VI, (u8 *)(&acParm));
921 
922 		ECWMin = 2;
923 		ECWMax = 3;
924 		TXOP = 0x2f;
925 		acParm = AIFS | (ECWMin << 8) | (ECWMax << 12) | (TXOP << 16);
926 		rtw_hal_set_hwreg(padapter, HW_VAR_AC_PARAM_VO, (u8 *)(&acParm));
927 	} else{
928 		edca[0] = edca[1] = edca[2] = edca[3] = 0;
929 
930 		for (i = 0; i < 4; i++) {
931 			ACI = (pmlmeinfo->WMM_param.ac_param[i].ACI_AIFSN >> 5) & 0x03;
932 			ACM = (pmlmeinfo->WMM_param.ac_param[i].ACI_AIFSN >> 4) & 0x01;
933 
934 			/* AIFS = AIFSN * slot time + SIFS - r2t phy delay */
935 			AIFS = (pmlmeinfo->WMM_param.ac_param[i].ACI_AIFSN & 0x0f) * pmlmeinfo->slotTime + aSifsTime;
936 
937 			ECWMin = (pmlmeinfo->WMM_param.ac_param[i].CW & 0x0f);
938 			ECWMax = (pmlmeinfo->WMM_param.ac_param[i].CW & 0xf0) >> 4;
939 			TXOP = le16_to_cpu(pmlmeinfo->WMM_param.ac_param[i].TXOP_limit);
940 
941 			acParm = AIFS | (ECWMin << 8) | (ECWMax << 12) | (TXOP << 16);
942 
943 			switch (ACI) {
944 			case 0x0:
945 				rtw_hal_set_hwreg(padapter, HW_VAR_AC_PARAM_BE, (u8 *)(&acParm));
946 				acm_mask |= (ACM ? BIT(1):0);
947 				edca[XMIT_BE_QUEUE] = acParm;
948 				break;
949 
950 			case 0x1:
951 				rtw_hal_set_hwreg(padapter, HW_VAR_AC_PARAM_BK, (u8 *)(&acParm));
952 				/* acm_mask |= (ACM? BIT(0):0); */
953 				edca[XMIT_BK_QUEUE] = acParm;
954 				break;
955 
956 			case 0x2:
957 				rtw_hal_set_hwreg(padapter, HW_VAR_AC_PARAM_VI, (u8 *)(&acParm));
958 				acm_mask |= (ACM ? BIT(2):0);
959 				edca[XMIT_VI_QUEUE] = acParm;
960 				break;
961 
962 			case 0x3:
963 				rtw_hal_set_hwreg(padapter, HW_VAR_AC_PARAM_VO, (u8 *)(&acParm));
964 				acm_mask |= (ACM ? BIT(3):0);
965 				edca[XMIT_VO_QUEUE] = acParm;
966 				break;
967 			}
968 
969 			DBG_871X("WMM(%x): %x, %x\n", ACI, ACM, acParm);
970 		}
971 
972 		if (padapter->registrypriv.acm_method == 1)
973 			rtw_hal_set_hwreg(padapter, HW_VAR_ACM_CTRL, (u8 *)(&acm_mask));
974 		else
975 			padapter->mlmepriv.acm_mask = acm_mask;
976 
977 		inx[0] = 0; inx[1] = 1; inx[2] = 2; inx[3] = 3;
978 
979 		if (pregpriv->wifi_spec == 1) {
980 			u32 j, tmp, change_inx = false;
981 
982 			/* entry indx: 0->vo, 1->vi, 2->be, 3->bk. */
983 			for (i = 0; i < 4; i++) {
984 				for (j = i+1; j < 4; j++) {
985 					/* compare CW and AIFS */
986 					if ((edca[j] & 0xFFFF) < (edca[i] & 0xFFFF)) {
987 						change_inx = true;
988 					} else if ((edca[j] & 0xFFFF) == (edca[i] & 0xFFFF)) {
989 						/* compare TXOP */
990 						if ((edca[j] >> 16) > (edca[i] >> 16))
991 							change_inx = true;
992 					}
993 
994 					if (change_inx) {
995 						tmp = edca[i];
996 						edca[i] = edca[j];
997 						edca[j] = tmp;
998 
999 						tmp = inx[i];
1000 						inx[i] = inx[j];
1001 						inx[j] = tmp;
1002 
1003 						change_inx = false;
1004 					}
1005 				}
1006 			}
1007 		}
1008 
1009 		for (i = 0; i < 4; i++) {
1010 			pxmitpriv->wmm_para_seq[i] = inx[i];
1011 			DBG_871X("wmm_para_seq(%d): %d\n", i, pxmitpriv->wmm_para_seq[i]);
1012 		}
1013 	}
1014 }
1015 
1016 static void bwmode_update_check(struct adapter *padapter, struct ndis_80211_var_ie *pIE)
1017 {
1018 	unsigned char  new_bwmode;
1019 	unsigned char  new_ch_offset;
1020 	struct HT_info_element	 *pHT_info;
1021 	struct mlme_priv *pmlmepriv = &(padapter->mlmepriv);
1022 	struct mlme_ext_priv *pmlmeext = &padapter->mlmeextpriv;
1023 	struct mlme_ext_info *pmlmeinfo = &(pmlmeext->mlmext_info);
1024 	struct registry_priv *pregistrypriv = &padapter->registrypriv;
1025 	struct ht_priv 		*phtpriv = &pmlmepriv->htpriv;
1026 	u8 cbw40_enable = 0;
1027 
1028 	if (!pIE)
1029 		return;
1030 
1031 	if (phtpriv->ht_option == false)
1032 		return;
1033 
1034 	if (pmlmeext->cur_bwmode >= CHANNEL_WIDTH_80)
1035 		return;
1036 
1037 	if (pIE->Length > sizeof(struct HT_info_element))
1038 		return;
1039 
1040 	pHT_info = (struct HT_info_element *)pIE->data;
1041 
1042 	if (pmlmeext->cur_channel > 14) {
1043 		if ((pregistrypriv->bw_mode & 0xf0) > 0)
1044 			cbw40_enable = 1;
1045 	} else
1046 		if ((pregistrypriv->bw_mode & 0x0f) > 0)
1047 			cbw40_enable = 1;
1048 
1049 	if ((pHT_info->infos[0] & BIT(2)) && cbw40_enable) {
1050 		new_bwmode = CHANNEL_WIDTH_40;
1051 
1052 		switch (pHT_info->infos[0] & 0x3) {
1053 		case 1:
1054 			new_ch_offset = HAL_PRIME_CHNL_OFFSET_LOWER;
1055 			break;
1056 
1057 		case 3:
1058 			new_ch_offset = HAL_PRIME_CHNL_OFFSET_UPPER;
1059 			break;
1060 
1061 		default:
1062 			new_bwmode = CHANNEL_WIDTH_20;
1063 			new_ch_offset = HAL_PRIME_CHNL_OFFSET_DONT_CARE;
1064 			break;
1065 		}
1066 	} else{
1067 		new_bwmode = CHANNEL_WIDTH_20;
1068 		new_ch_offset = HAL_PRIME_CHNL_OFFSET_DONT_CARE;
1069 	}
1070 
1071 
1072 	if ((new_bwmode != pmlmeext->cur_bwmode) || (new_ch_offset != pmlmeext->cur_ch_offset)) {
1073 		pmlmeinfo->bwmode_updated = true;
1074 
1075 		pmlmeext->cur_bwmode = new_bwmode;
1076 		pmlmeext->cur_ch_offset = new_ch_offset;
1077 
1078 		/* update HT info also */
1079 		HT_info_handler(padapter, pIE);
1080 	} else
1081 		pmlmeinfo->bwmode_updated = false;
1082 
1083 
1084 	if (true == pmlmeinfo->bwmode_updated) {
1085 		struct sta_info *psta;
1086 		struct wlan_bssid_ex	*cur_network = &(pmlmeinfo->network);
1087 		struct sta_priv *pstapriv = &padapter->stapriv;
1088 
1089 		/* set_channel_bwmode(padapter, pmlmeext->cur_channel, pmlmeext->cur_ch_offset, pmlmeext->cur_bwmode); */
1090 
1091 
1092 		/* update ap's stainfo */
1093 		psta = rtw_get_stainfo(pstapriv, cur_network->MacAddress);
1094 		if (psta) {
1095 			struct ht_priv *phtpriv_sta = &psta->htpriv;
1096 
1097 			if (phtpriv_sta->ht_option) {
1098 				/*  bwmode */
1099 				psta->bw_mode = pmlmeext->cur_bwmode;
1100 				phtpriv_sta->ch_offset = pmlmeext->cur_ch_offset;
1101 			} else{
1102 				psta->bw_mode = CHANNEL_WIDTH_20;
1103 				phtpriv_sta->ch_offset = HAL_PRIME_CHNL_OFFSET_DONT_CARE;
1104 			}
1105 
1106 			rtw_dm_ra_mask_wk_cmd(padapter, (u8 *)psta);
1107 		}
1108 	}
1109 }
1110 
1111 void HT_caps_handler(struct adapter *padapter, struct ndis_80211_var_ie *pIE)
1112 {
1113 	unsigned int	i;
1114 	u8 rf_type;
1115 	u8 max_AMPDU_len, min_MPDU_spacing;
1116 	u8 cur_ldpc_cap = 0, cur_stbc_cap = 0;
1117 	struct mlme_ext_priv *pmlmeext = &padapter->mlmeextpriv;
1118 	struct mlme_ext_info *pmlmeinfo = &(pmlmeext->mlmext_info);
1119 	struct mlme_priv 	*pmlmepriv = &padapter->mlmepriv;
1120 	struct ht_priv 		*phtpriv = &pmlmepriv->htpriv;
1121 
1122 	if (pIE == NULL)
1123 		return;
1124 
1125 	if (phtpriv->ht_option == false)
1126 		return;
1127 
1128 	pmlmeinfo->HT_caps_enable = 1;
1129 
1130 	for (i = 0; i < (pIE->Length); i++) {
1131 		if (i != 2) {
1132 			/* 	Commented by Albert 2010/07/12 */
1133 			/* 	Got the endian issue here. */
1134 			pmlmeinfo->HT_caps.u.HT_cap[i] &= (pIE->data[i]);
1135 		} else{
1136 			/* modify from  fw by Thomas 2010/11/17 */
1137 			if ((pmlmeinfo->HT_caps.u.HT_cap_element.AMPDU_para & 0x3) > (pIE->data[i] & 0x3))
1138 				max_AMPDU_len = (pIE->data[i] & 0x3);
1139 			else
1140 				max_AMPDU_len = (pmlmeinfo->HT_caps.u.HT_cap_element.AMPDU_para & 0x3);
1141 
1142 			if ((pmlmeinfo->HT_caps.u.HT_cap_element.AMPDU_para & 0x1c) > (pIE->data[i] & 0x1c))
1143 				min_MPDU_spacing = (pmlmeinfo->HT_caps.u.HT_cap_element.AMPDU_para & 0x1c);
1144 			else
1145 				min_MPDU_spacing = (pIE->data[i] & 0x1c);
1146 
1147 			pmlmeinfo->HT_caps.u.HT_cap_element.AMPDU_para = max_AMPDU_len | min_MPDU_spacing;
1148 		}
1149 	}
1150 	rtw_hal_get_hwreg(padapter, HW_VAR_RF_TYPE, (u8 *)(&rf_type));
1151 
1152 	/* update the MCS set */
1153 	for (i = 0; i < 16; i++)
1154 		pmlmeinfo->HT_caps.u.HT_cap_element.MCS_rate[i] &= pmlmeext->default_supported_mcs_set[i];
1155 
1156 	/* update the MCS rates */
1157 	switch (rf_type) {
1158 	case RF_1T1R:
1159 	case RF_1T2R:
1160 		set_mcs_rate_by_mask(pmlmeinfo->HT_caps.u.HT_cap_element.MCS_rate, MCS_RATE_1R);
1161 		break;
1162 	case RF_2T2R:
1163 	default:
1164 #ifdef CONFIG_DISABLE_MCS13TO15
1165 		if (pmlmeext->cur_bwmode == CHANNEL_WIDTH_40 && pregistrypriv->wifi_spec != 1)
1166 			set_mcs_rate_by_mask(pmlmeinfo->HT_caps.u.HT_cap_element.MCS_rate, MCS_RATE_2R_13TO15_OFF);
1167 		else
1168 			set_mcs_rate_by_mask(pmlmeinfo->HT_caps.u.HT_cap_element.MCS_rate, MCS_RATE_2R);
1169 #else /* CONFIG_DISABLE_MCS13TO15 */
1170 		set_mcs_rate_by_mask(pmlmeinfo->HT_caps.u.HT_cap_element.MCS_rate, MCS_RATE_2R);
1171 #endif /* CONFIG_DISABLE_MCS13TO15 */
1172 	}
1173 
1174 	if (check_fwstate(pmlmepriv, WIFI_AP_STATE)) {
1175 		/*  Config STBC setting */
1176 		if (TEST_FLAG(phtpriv->stbc_cap, STBC_HT_ENABLE_TX) && GET_HT_CAPABILITY_ELE_TX_STBC(pIE->data)) {
1177 			SET_FLAG(cur_stbc_cap, STBC_HT_ENABLE_TX);
1178 			DBG_871X("Enable HT Tx STBC !\n");
1179 		}
1180 		phtpriv->stbc_cap = cur_stbc_cap;
1181 	} else {
1182 		/*  Config LDPC Coding Capability */
1183 		if (TEST_FLAG(phtpriv->ldpc_cap, LDPC_HT_ENABLE_TX) && GET_HT_CAPABILITY_ELE_LDPC_CAP(pIE->data)) {
1184 			SET_FLAG(cur_ldpc_cap, (LDPC_HT_ENABLE_TX | LDPC_HT_CAP_TX));
1185 			DBG_871X("Enable HT Tx LDPC!\n");
1186 		}
1187 		phtpriv->ldpc_cap = cur_ldpc_cap;
1188 
1189 		/*  Config STBC setting */
1190 		if (TEST_FLAG(phtpriv->stbc_cap, STBC_HT_ENABLE_TX) && GET_HT_CAPABILITY_ELE_RX_STBC(pIE->data)) {
1191 			SET_FLAG(cur_stbc_cap, (STBC_HT_ENABLE_TX | STBC_HT_CAP_TX));
1192 			DBG_871X("Enable HT Tx STBC!\n");
1193 		}
1194 		phtpriv->stbc_cap = cur_stbc_cap;
1195 	}
1196 }
1197 
1198 void HT_info_handler(struct adapter *padapter, struct ndis_80211_var_ie *pIE)
1199 {
1200 	struct mlme_ext_priv *pmlmeext = &padapter->mlmeextpriv;
1201 	struct mlme_ext_info *pmlmeinfo = &(pmlmeext->mlmext_info);
1202 	struct mlme_priv 	*pmlmepriv = &padapter->mlmepriv;
1203 	struct ht_priv 		*phtpriv = &pmlmepriv->htpriv;
1204 
1205 	if (pIE == NULL)
1206 		return;
1207 
1208 	if (phtpriv->ht_option == false)
1209 		return;
1210 
1211 
1212 	if (pIE->Length > sizeof(struct HT_info_element))
1213 		return;
1214 
1215 	pmlmeinfo->HT_info_enable = 1;
1216 	memcpy(&(pmlmeinfo->HT_info), pIE->data, pIE->Length);
1217 
1218 	return;
1219 }
1220 
1221 void HTOnAssocRsp(struct adapter *padapter)
1222 {
1223 	unsigned char 	max_AMPDU_len;
1224 	unsigned char 	min_MPDU_spacing;
1225 	/* struct registry_priv  *pregpriv = &padapter->registrypriv; */
1226 	struct mlme_ext_priv *pmlmeext = &padapter->mlmeextpriv;
1227 	struct mlme_ext_info *pmlmeinfo = &(pmlmeext->mlmext_info);
1228 
1229 	DBG_871X("%s\n", __func__);
1230 
1231 	if ((pmlmeinfo->HT_info_enable) && (pmlmeinfo->HT_caps_enable)) {
1232 		pmlmeinfo->HT_enable = 1;
1233 	} else{
1234 		pmlmeinfo->HT_enable = 0;
1235 		/* set_channel_bwmode(padapter, pmlmeext->cur_channel, pmlmeext->cur_ch_offset, pmlmeext->cur_bwmode); */
1236 		return;
1237 	}
1238 
1239 	/* handle A-MPDU parameter field */
1240 	/*
1241 		AMPDU_para [1:0]:Max AMPDU Len => 0:8k , 1:16k, 2:32k, 3:64k
1242 		AMPDU_para [4:2]:Min MPDU Start Spacing
1243 	*/
1244 	max_AMPDU_len = pmlmeinfo->HT_caps.u.HT_cap_element.AMPDU_para & 0x03;
1245 
1246 	min_MPDU_spacing = (pmlmeinfo->HT_caps.u.HT_cap_element.AMPDU_para & 0x1c) >> 2;
1247 
1248 	rtw_hal_set_hwreg(padapter, HW_VAR_AMPDU_MIN_SPACE, (u8 *)(&min_MPDU_spacing));
1249 
1250 	rtw_hal_set_hwreg(padapter, HW_VAR_AMPDU_FACTOR, (u8 *)(&max_AMPDU_len));
1251 }
1252 
1253 void ERP_IE_handler(struct adapter *padapter, struct ndis_80211_var_ie *pIE)
1254 {
1255 	struct mlme_ext_priv *pmlmeext = &padapter->mlmeextpriv;
1256 	struct mlme_ext_info *pmlmeinfo = &(pmlmeext->mlmext_info);
1257 
1258 	if (pIE->Length > 1)
1259 		return;
1260 
1261 	pmlmeinfo->ERP_enable = 1;
1262 	memcpy(&(pmlmeinfo->ERP_IE), pIE->data, pIE->Length);
1263 }
1264 
1265 void VCS_update(struct adapter *padapter, struct sta_info *psta)
1266 {
1267 	struct registry_priv  *pregpriv = &padapter->registrypriv;
1268 	struct mlme_ext_priv *pmlmeext = &padapter->mlmeextpriv;
1269 	struct mlme_ext_info *pmlmeinfo = &(pmlmeext->mlmext_info);
1270 
1271 	switch (pregpriv->vrtl_carrier_sense) {/* 0:off 1:on 2:auto */
1272 	case 0: /* off */
1273 		psta->rtsen = 0;
1274 		psta->cts2self = 0;
1275 		break;
1276 
1277 	case 1: /* on */
1278 		if (pregpriv->vcs_type == 1) { /* 1:RTS/CTS 2:CTS to self */
1279 			psta->rtsen = 1;
1280 			psta->cts2self = 0;
1281 		} else{
1282 			psta->rtsen = 0;
1283 			psta->cts2self = 1;
1284 		}
1285 		break;
1286 
1287 	case 2: /* auto */
1288 	default:
1289 		if ((pmlmeinfo->ERP_enable) && (pmlmeinfo->ERP_IE & BIT(1))) {
1290 			if (pregpriv->vcs_type == 1) {
1291 				psta->rtsen = 1;
1292 				psta->cts2self = 0;
1293 			} else{
1294 				psta->rtsen = 0;
1295 				psta->cts2self = 1;
1296 			}
1297 		} else{
1298 			psta->rtsen = 0;
1299 			psta->cts2self = 0;
1300 		}
1301 		break;
1302 	}
1303 }
1304 
1305 void update_ldpc_stbc_cap(struct sta_info *psta)
1306 {
1307 	if (psta->htpriv.ht_option) {
1308 		if (TEST_FLAG(psta->htpriv.ldpc_cap, LDPC_HT_ENABLE_TX))
1309 			psta->ldpc = 1;
1310 
1311 		if (TEST_FLAG(psta->htpriv.stbc_cap, STBC_HT_ENABLE_TX))
1312 			psta->stbc = 1;
1313 	} else {
1314 		psta->ldpc = 0;
1315 		psta->stbc = 0;
1316 	}
1317 }
1318 
1319 int rtw_check_bcn_info(struct adapter *Adapter, u8 *pframe, u32 packet_len)
1320 {
1321 	unsigned int		len;
1322 	unsigned char 	*p;
1323 	unsigned short	val16, subtype;
1324 	struct wlan_network *cur_network = &(Adapter->mlmepriv.cur_network);
1325 	/* u8 wpa_ie[255], rsn_ie[255]; */
1326 	u16 wpa_len = 0, rsn_len = 0;
1327 	u8 encryp_protocol = 0;
1328 	struct wlan_bssid_ex *bssid;
1329 	int group_cipher = 0, pairwise_cipher = 0, is_8021x = 0;
1330 	unsigned char *pbuf;
1331 	u32 wpa_ielen = 0;
1332 	u8 *pbssid = GetAddr3Ptr(pframe);
1333 	u32 hidden_ssid = 0;
1334 	struct HT_info_element *pht_info = NULL;
1335 	struct rtw_ieee80211_ht_cap *pht_cap = NULL;
1336 	u32 bcn_channel;
1337 	unsigned short	ht_cap_info;
1338 	unsigned char ht_info_infos_0;
1339 	struct mlme_priv *pmlmepriv = &Adapter->mlmepriv;
1340 
1341 	if (is_client_associated_to_ap(Adapter) == false)
1342 		return true;
1343 
1344 	len = packet_len - sizeof(struct ieee80211_hdr_3addr);
1345 
1346 	if (len > MAX_IE_SZ) {
1347 		DBG_871X("%s IE too long for survey event\n", __func__);
1348 		return _FAIL;
1349 	}
1350 
1351 	if (memcmp(cur_network->network.MacAddress, pbssid, 6)) {
1352 		DBG_871X("Oops: rtw_check_network_encrypt linked but recv other bssid bcn\n" MAC_FMT MAC_FMT,
1353 				MAC_ARG(pbssid), MAC_ARG(cur_network->network.MacAddress));
1354 		return true;
1355 	}
1356 
1357 	bssid = rtw_zmalloc(sizeof(struct wlan_bssid_ex));
1358 	if (bssid == NULL) {
1359 		DBG_871X("%s rtw_zmalloc fail !!!\n", __func__);
1360 		return true;
1361 	}
1362 
1363 	if ((pmlmepriv->timeBcnInfoChkStart != 0) && (jiffies_to_msecs(jiffies - pmlmepriv->timeBcnInfoChkStart) > DISCONNECT_BY_CHK_BCN_FAIL_OBSERV_PERIOD_IN_MS)) {
1364 		pmlmepriv->timeBcnInfoChkStart = 0;
1365 		pmlmepriv->NumOfBcnInfoChkFail = 0;
1366 	}
1367 
1368 	subtype = GetFrameSubType(pframe) >> 4;
1369 
1370 	if (subtype == WIFI_BEACON)
1371 		bssid->Reserved[0] = 1;
1372 
1373 	bssid->Length = sizeof(struct wlan_bssid_ex) - MAX_IE_SZ + len;
1374 
1375 	/* below is to copy the information element */
1376 	bssid->IELength = len;
1377 	memcpy(bssid->IEs, (pframe + sizeof(struct ieee80211_hdr_3addr)), bssid->IELength);
1378 
1379 	/* check bw and channel offset */
1380 	/* parsing HT_CAP_IE */
1381 	p = rtw_get_ie(bssid->IEs + _FIXED_IE_LENGTH_, _HT_CAPABILITY_IE_, &len, bssid->IELength - _FIXED_IE_LENGTH_);
1382 	if (p && len > 0) {
1383 			pht_cap = (struct rtw_ieee80211_ht_cap *)(p + 2);
1384 			ht_cap_info = le16_to_cpu(pht_cap->cap_info);
1385 	} else {
1386 			ht_cap_info = 0;
1387 	}
1388 	/* parsing HT_INFO_IE */
1389 	p = rtw_get_ie(bssid->IEs + _FIXED_IE_LENGTH_, _HT_ADD_INFO_IE_, &len, bssid->IELength - _FIXED_IE_LENGTH_);
1390 	if (p && len > 0) {
1391 			pht_info = (struct HT_info_element *)(p + 2);
1392 			ht_info_infos_0 = pht_info->infos[0];
1393 	} else {
1394 			ht_info_infos_0 = 0;
1395 	}
1396 	if (ht_cap_info != cur_network->BcnInfo.ht_cap_info ||
1397 		((ht_info_infos_0&0x03) != (cur_network->BcnInfo.ht_info_infos_0&0x03))) {
1398 			DBG_871X("%s bcn now: ht_cap_info:%x ht_info_infos_0:%x\n", __func__,
1399 							ht_cap_info, ht_info_infos_0);
1400 			DBG_871X("%s bcn link: ht_cap_info:%x ht_info_infos_0:%x\n", __func__,
1401 							cur_network->BcnInfo.ht_cap_info, cur_network->BcnInfo.ht_info_infos_0);
1402 			DBG_871X("%s bw mode change\n", __func__);
1403 			{
1404 				/* bcn_info_update */
1405 				cur_network->BcnInfo.ht_cap_info = ht_cap_info;
1406 				cur_network->BcnInfo.ht_info_infos_0 = ht_info_infos_0;
1407 				/* to do : need to check that whether modify related register of BB or not */
1408 			}
1409 			/* goto _mismatch; */
1410 	}
1411 
1412 	/* Checking for channel */
1413 	p = rtw_get_ie(bssid->IEs + _FIXED_IE_LENGTH_, _DSSET_IE_, &len, bssid->IELength - _FIXED_IE_LENGTH_);
1414 	if (p) {
1415 			bcn_channel = *(p + 2);
1416 	} else {/* In 5G, some ap do not have DSSET IE checking HT info for channel */
1417 			rtw_get_ie(bssid->IEs + _FIXED_IE_LENGTH_, _HT_ADD_INFO_IE_, &len, bssid->IELength - _FIXED_IE_LENGTH_);
1418 			if (pht_info) {
1419 					bcn_channel = pht_info->primary_channel;
1420 			} else { /* we don't find channel IE, so don't check it */
1421 					/* DBG_871X("Oops: %s we don't find channel IE, so don't check it\n", __func__); */
1422 					bcn_channel = Adapter->mlmeextpriv.cur_channel;
1423 			}
1424 	}
1425 	if (bcn_channel != Adapter->mlmeextpriv.cur_channel) {
1426 			DBG_871X("%s beacon channel:%d cur channel:%d disconnect\n", __func__,
1427 						   bcn_channel, Adapter->mlmeextpriv.cur_channel);
1428 			goto _mismatch;
1429 	}
1430 
1431 	/* checking SSID */
1432 	p = rtw_get_ie(bssid->IEs + _FIXED_IE_LENGTH_, _SSID_IE_, &len, bssid->IELength - _FIXED_IE_LENGTH_);
1433 	if (p == NULL) {
1434 		DBG_871X("%s marc: cannot find SSID for survey event\n", __func__);
1435 		hidden_ssid = true;
1436 	} else {
1437 		hidden_ssid = false;
1438 	}
1439 
1440 	if ((NULL != p) && (false == hidden_ssid && (*(p + 1)))) {
1441 		memcpy(bssid->Ssid.Ssid, (p + 2), *(p + 1));
1442 		bssid->Ssid.SsidLength = *(p + 1);
1443 	} else {
1444 		bssid->Ssid.SsidLength = 0;
1445 		bssid->Ssid.Ssid[0] = '\0';
1446 	}
1447 
1448 	RT_TRACE(_module_rtl871x_mlme_c_, _drv_info_, ("%s bssid.Ssid.Ssid:%s bssid.Ssid.SsidLength:%d "
1449 				"cur_network->network.Ssid.Ssid:%s len:%d\n", __func__, bssid->Ssid.Ssid,
1450 				bssid->Ssid.SsidLength, cur_network->network.Ssid.Ssid,
1451 				cur_network->network.Ssid.SsidLength));
1452 
1453 	if (memcmp(bssid->Ssid.Ssid, cur_network->network.Ssid.Ssid, 32) ||
1454 			bssid->Ssid.SsidLength != cur_network->network.Ssid.SsidLength) {
1455 		if (bssid->Ssid.Ssid[0] != '\0' && bssid->Ssid.SsidLength != 0) { /* not hidden ssid */
1456 			DBG_871X("%s(), SSID is not match\n", __func__);
1457 			goto _mismatch;
1458 		}
1459 	}
1460 
1461 	/* check encryption info */
1462 	val16 = rtw_get_capability((struct wlan_bssid_ex *)bssid);
1463 
1464 	if (val16 & BIT(4))
1465 		bssid->Privacy = 1;
1466 	else
1467 		bssid->Privacy = 0;
1468 
1469 	RT_TRACE(_module_rtl871x_mlme_c_, _drv_info_,
1470 			("%s(): cur_network->network.Privacy is %d, bssid.Privacy is %d\n",
1471 			 __func__, cur_network->network.Privacy, bssid->Privacy));
1472 	if (cur_network->network.Privacy != bssid->Privacy) {
1473 		DBG_871X("%s(), privacy is not match\n", __func__);
1474 		goto _mismatch;
1475 	}
1476 
1477 	rtw_get_sec_ie(bssid->IEs, bssid->IELength, NULL, &rsn_len, NULL, &wpa_len);
1478 
1479 	if (rsn_len > 0) {
1480 		encryp_protocol = ENCRYP_PROTOCOL_WPA2;
1481 	} else if (wpa_len > 0) {
1482 		encryp_protocol = ENCRYP_PROTOCOL_WPA;
1483 	} else {
1484 		if (bssid->Privacy)
1485 			encryp_protocol = ENCRYP_PROTOCOL_WEP;
1486 	}
1487 
1488 	if (cur_network->BcnInfo.encryp_protocol != encryp_protocol) {
1489 		DBG_871X("%s(): enctyp is not match\n", __func__);
1490 		goto _mismatch;
1491 	}
1492 
1493 	if (encryp_protocol == ENCRYP_PROTOCOL_WPA || encryp_protocol == ENCRYP_PROTOCOL_WPA2) {
1494 		pbuf = rtw_get_wpa_ie(&bssid->IEs[12], &wpa_ielen, bssid->IELength-12);
1495 		if (pbuf && (wpa_ielen > 0)) {
1496 			if (_SUCCESS == rtw_parse_wpa_ie(pbuf, wpa_ielen+2, &group_cipher, &pairwise_cipher, &is_8021x)) {
1497 				RT_TRACE(_module_rtl871x_mlme_c_, _drv_info_,
1498 						("%s pnetwork->pairwise_cipher: %d, group_cipher is %d, is_8021x is %d\n", __func__,
1499 						 pairwise_cipher, group_cipher, is_8021x));
1500 			}
1501 		} else {
1502 			pbuf = rtw_get_wpa2_ie(&bssid->IEs[12], &wpa_ielen, bssid->IELength-12);
1503 
1504 			if (pbuf && (wpa_ielen > 0)) {
1505 				if (_SUCCESS == rtw_parse_wpa2_ie(pbuf, wpa_ielen+2, &group_cipher, &pairwise_cipher, &is_8021x)) {
1506 					RT_TRACE(_module_rtl871x_mlme_c_, _drv_info_,
1507 							("%s pnetwork->pairwise_cipher: %d, pnetwork->group_cipher is %d, is_802x is %d\n",
1508 							 __func__, pairwise_cipher, group_cipher, is_8021x));
1509 				}
1510 			}
1511 		}
1512 
1513 		RT_TRACE(_module_rtl871x_mlme_c_, _drv_err_,
1514 				("%s cur_network->group_cipher is %d: %d\n", __func__, cur_network->BcnInfo.group_cipher, group_cipher));
1515 		if (pairwise_cipher != cur_network->BcnInfo.pairwise_cipher || group_cipher != cur_network->BcnInfo.group_cipher) {
1516 			DBG_871X("%s pairwise_cipher(%x:%x) or group_cipher(%x:%x) is not match\n", __func__,
1517 					pairwise_cipher, cur_network->BcnInfo.pairwise_cipher,
1518 					group_cipher, cur_network->BcnInfo.group_cipher);
1519 			goto _mismatch;
1520 		}
1521 
1522 		if (is_8021x != cur_network->BcnInfo.is_8021x) {
1523 			DBG_871X("%s authentication is not match\n", __func__);
1524 			goto _mismatch;
1525 		}
1526 	}
1527 
1528 	kfree((u8 *)bssid);
1529 	return _SUCCESS;
1530 
1531 _mismatch:
1532 	kfree((u8 *)bssid);
1533 
1534 	if (pmlmepriv->NumOfBcnInfoChkFail == 0)
1535 		pmlmepriv->timeBcnInfoChkStart = jiffies;
1536 
1537 	pmlmepriv->NumOfBcnInfoChkFail++;
1538 	DBG_871X("%s by "ADPT_FMT" - NumOfChkFail = %d (SeqNum of this Beacon frame = %d).\n", __func__, ADPT_ARG(Adapter), pmlmepriv->NumOfBcnInfoChkFail, GetSequence(pframe));
1539 
1540 	if ((pmlmepriv->timeBcnInfoChkStart != 0) && (jiffies_to_msecs(jiffies - pmlmepriv->timeBcnInfoChkStart) <= DISCONNECT_BY_CHK_BCN_FAIL_OBSERV_PERIOD_IN_MS)
1541 		&& (pmlmepriv->NumOfBcnInfoChkFail >= DISCONNECT_BY_CHK_BCN_FAIL_THRESHOLD)) {
1542 		DBG_871X("%s by "ADPT_FMT" - NumOfChkFail = %d >= threshold : %d (in %d ms), return FAIL.\n", __func__, ADPT_ARG(Adapter), pmlmepriv->NumOfBcnInfoChkFail,
1543 			DISCONNECT_BY_CHK_BCN_FAIL_THRESHOLD, jiffies_to_msecs(jiffies - pmlmepriv->timeBcnInfoChkStart));
1544 		pmlmepriv->timeBcnInfoChkStart = 0;
1545 		pmlmepriv->NumOfBcnInfoChkFail = 0;
1546 		return _FAIL;
1547 	}
1548 
1549 	return _SUCCESS;
1550 }
1551 
1552 void update_beacon_info(struct adapter *padapter, u8 *pframe, uint pkt_len, struct sta_info *psta)
1553 {
1554 	unsigned int i;
1555 	unsigned int len;
1556 	struct ndis_80211_var_ie *pIE;
1557 
1558 	len = pkt_len - (_BEACON_IE_OFFSET_ + WLAN_HDR_A3_LEN);
1559 
1560 	for (i = 0; i < len;) {
1561 		pIE = (struct ndis_80211_var_ie *)(pframe + (_BEACON_IE_OFFSET_ + WLAN_HDR_A3_LEN) + i);
1562 
1563 		switch (pIE->ElementID) {
1564 		case _VENDOR_SPECIFIC_IE_:
1565 			/* to update WMM paramter set while receiving beacon */
1566 			if (!memcmp(pIE->data, WMM_PARA_OUI, 6) && pIE->Length == WLAN_WMM_LEN)	/* WMM */
1567 				if (WMM_param_handler(padapter, pIE))
1568 					report_wmm_edca_update(padapter);
1569 
1570 			break;
1571 
1572 		case _HT_EXTRA_INFO_IE_:	/* HT info */
1573 			/* HT_info_handler(padapter, pIE); */
1574 			bwmode_update_check(padapter, pIE);
1575 			break;
1576 
1577 		case _ERPINFO_IE_:
1578 			ERP_IE_handler(padapter, pIE);
1579 			VCS_update(padapter, psta);
1580 			break;
1581 
1582 		default:
1583 			break;
1584 		}
1585 
1586 		i += (pIE->Length + 2);
1587 	}
1588 }
1589 
1590 unsigned int is_ap_in_tkip(struct adapter *padapter)
1591 {
1592 	u32 i;
1593 	struct ndis_80211_var_ie *pIE;
1594 	struct mlme_ext_priv *pmlmeext = &padapter->mlmeextpriv;
1595 	struct mlme_ext_info *pmlmeinfo = &(pmlmeext->mlmext_info);
1596 	struct wlan_bssid_ex		*cur_network = &(pmlmeinfo->network);
1597 
1598 	if (rtw_get_capability((struct wlan_bssid_ex *)cur_network) & WLAN_CAPABILITY_PRIVACY) {
1599 		for (i = sizeof(struct ndis_802_11_fix_ie); i < pmlmeinfo->network.IELength;) {
1600 			pIE = (struct ndis_80211_var_ie *)(pmlmeinfo->network.IEs + i);
1601 
1602 			switch (pIE->ElementID) {
1603 			case _VENDOR_SPECIFIC_IE_:
1604 				if ((!memcmp(pIE->data, RTW_WPA_OUI, 4)) && (!memcmp((pIE->data + 12), WPA_TKIP_CIPHER, 4)))
1605 					return true;
1606 
1607 				break;
1608 
1609 			case _RSN_IE_2_:
1610 				if (!memcmp((pIE->data + 8), RSN_TKIP_CIPHER, 4))
1611 					return true;
1612 
1613 			default:
1614 				break;
1615 			}
1616 
1617 			i += (pIE->Length + 2);
1618 		}
1619 
1620 		return false;
1621 	} else
1622 		return false;
1623 
1624 }
1625 
1626 int support_short_GI(struct adapter *padapter, struct HT_caps_element *pHT_caps, u8 bwmode)
1627 {
1628 	unsigned char 				bit_offset;
1629 	struct mlme_ext_priv *pmlmeext = &padapter->mlmeextpriv;
1630 	struct mlme_ext_info *pmlmeinfo = &(pmlmeext->mlmext_info);
1631 
1632 	if (!(pmlmeinfo->HT_enable))
1633 		return _FAIL;
1634 
1635 	bit_offset = (bwmode & CHANNEL_WIDTH_40) ? 6 : 5;
1636 
1637 	if (le16_to_cpu(pHT_caps->u.HT_cap_element.HT_caps_info) & (0x1 << bit_offset))
1638 		return _SUCCESS;
1639 	else
1640 		return _FAIL;
1641 }
1642 
1643 unsigned char get_highest_rate_idx(u32 mask)
1644 {
1645 	int i;
1646 	unsigned char rate_idx = 0;
1647 
1648 	for (i = 31; i >= 0; i--) {
1649 		if (mask & BIT(i)) {
1650 			rate_idx = i;
1651 			break;
1652 		}
1653 	}
1654 
1655 	return rate_idx;
1656 }
1657 
1658 void Update_RA_Entry(struct adapter *padapter, struct sta_info *psta)
1659 {
1660 	rtw_hal_update_ra_mask(psta, 0);
1661 }
1662 
1663 void enable_rate_adaptive(struct adapter *padapter, struct sta_info *psta);
1664 void enable_rate_adaptive(struct adapter *padapter, struct sta_info *psta)
1665 {
1666 	Update_RA_Entry(padapter, psta);
1667 }
1668 
1669 void set_sta_rate(struct adapter *padapter, struct sta_info *psta)
1670 {
1671 	/* rate adaptive */
1672 	enable_rate_adaptive(padapter, psta);
1673 }
1674 
1675 unsigned char check_assoc_AP(u8 *pframe, uint len)
1676 {
1677 	unsigned int	i;
1678 	struct ndis_80211_var_ie *pIE;
1679 
1680 	for (i = sizeof(struct ndis_802_11_fix_ie); i < len;) {
1681 		pIE = (struct ndis_80211_var_ie *)(pframe + i);
1682 
1683 		switch (pIE->ElementID) {
1684 		case _VENDOR_SPECIFIC_IE_:
1685 			if ((!memcmp(pIE->data, ARTHEROS_OUI1, 3)) || (!memcmp(pIE->data, ARTHEROS_OUI2, 3))) {
1686 				DBG_871X("link to Artheros AP\n");
1687 				return HT_IOT_PEER_ATHEROS;
1688 			} else if ((!memcmp(pIE->data, BROADCOM_OUI1, 3))
1689 						|| (!memcmp(pIE->data, BROADCOM_OUI2, 3))
1690 						|| (!memcmp(pIE->data, BROADCOM_OUI3, 3))) {
1691 				DBG_871X("link to Broadcom AP\n");
1692 				return HT_IOT_PEER_BROADCOM;
1693 			} else if (!memcmp(pIE->data, MARVELL_OUI, 3)) {
1694 				DBG_871X("link to Marvell AP\n");
1695 				return HT_IOT_PEER_MARVELL;
1696 			} else if (!memcmp(pIE->data, RALINK_OUI, 3)) {
1697 				DBG_871X("link to Ralink AP\n");
1698 				return HT_IOT_PEER_RALINK;
1699 			} else if (!memcmp(pIE->data, CISCO_OUI, 3)) {
1700 				DBG_871X("link to Cisco AP\n");
1701 				return HT_IOT_PEER_CISCO;
1702 			} else if (!memcmp(pIE->data, REALTEK_OUI, 3)) {
1703 				u32 Vender = HT_IOT_PEER_REALTEK;
1704 
1705 				if (pIE->Length >= 5) {
1706 					if (pIE->data[4] == 1)
1707 						/* if (pIE->data[5] & RT_HT_CAP_USE_LONG_PREAMBLE) */
1708 						/* 	bssDesc->BssHT.RT2RT_HT_Mode |= RT_HT_CAP_USE_LONG_PREAMBLE; */
1709 						if (pIE->data[5] & RT_HT_CAP_USE_92SE)
1710 							/* bssDesc->BssHT.RT2RT_HT_Mode |= RT_HT_CAP_USE_92SE; */
1711 							Vender = HT_IOT_PEER_REALTEK_92SE;
1712 
1713 					if (pIE->data[5] & RT_HT_CAP_USE_SOFTAP)
1714 						Vender = HT_IOT_PEER_REALTEK_SOFTAP;
1715 
1716 					if (pIE->data[4] == 2) {
1717 						if (pIE->data[6] & RT_HT_CAP_USE_JAGUAR_BCUT) {
1718 							Vender = HT_IOT_PEER_REALTEK_JAGUAR_BCUTAP;
1719 							DBG_871X("link to Realtek JAGUAR_BCUTAP\n");
1720 						}
1721 						if (pIE->data[6] & RT_HT_CAP_USE_JAGUAR_CCUT) {
1722 							Vender = HT_IOT_PEER_REALTEK_JAGUAR_CCUTAP;
1723 							DBG_871X("link to Realtek JAGUAR_CCUTAP\n");
1724 						}
1725 					}
1726 				}
1727 
1728 				DBG_871X("link to Realtek AP\n");
1729 				return Vender;
1730 			} else if (!memcmp(pIE->data, AIRGOCAP_OUI, 3)) {
1731 				DBG_871X("link to Airgo Cap\n");
1732 				return HT_IOT_PEER_AIRGO;
1733 			} else
1734 				break;
1735 
1736 		default:
1737 			break;
1738 		}
1739 
1740 		i += (pIE->Length + 2);
1741 	}
1742 
1743 	DBG_871X("link to new AP\n");
1744 	return HT_IOT_PEER_UNKNOWN;
1745 }
1746 
1747 void update_IOT_info(struct adapter *padapter)
1748 {
1749 	struct mlme_ext_priv *pmlmeext = &padapter->mlmeextpriv;
1750 	struct mlme_ext_info *pmlmeinfo = &(pmlmeext->mlmext_info);
1751 
1752 	switch (pmlmeinfo->assoc_AP_vendor) {
1753 	case HT_IOT_PEER_MARVELL:
1754 		pmlmeinfo->turboMode_cts2self = 1;
1755 		pmlmeinfo->turboMode_rtsen = 0;
1756 		break;
1757 
1758 	case HT_IOT_PEER_RALINK:
1759 		pmlmeinfo->turboMode_cts2self = 0;
1760 		pmlmeinfo->turboMode_rtsen = 1;
1761 		/* disable high power */
1762 		Switch_DM_Func(padapter, (~DYNAMIC_BB_DYNAMIC_TXPWR), false);
1763 		break;
1764 	case HT_IOT_PEER_REALTEK:
1765 		/* rtw_write16(padapter, 0x4cc, 0xffff); */
1766 		/* rtw_write16(padapter, 0x546, 0x01c0); */
1767 		/* disable high power */
1768 		Switch_DM_Func(padapter, (~DYNAMIC_BB_DYNAMIC_TXPWR), false);
1769 		break;
1770 	default:
1771 		pmlmeinfo->turboMode_cts2self = 0;
1772 		pmlmeinfo->turboMode_rtsen = 1;
1773 		break;
1774 	}
1775 
1776 }
1777 
1778 void update_capinfo(struct adapter *Adapter, u16 updateCap)
1779 {
1780 	struct mlme_ext_priv *pmlmeext = &Adapter->mlmeextpriv;
1781 	struct mlme_ext_info *pmlmeinfo = &(pmlmeext->mlmext_info);
1782 	bool		ShortPreamble;
1783 
1784 	/*  Check preamble mode, 2005.01.06, by rcnjko. */
1785 	/*  Mark to update preamble value forever, 2008.03.18 by lanhsin */
1786 	/* if (pMgntInfo->RegPreambleMode == PREAMBLE_AUTO) */
1787 	{
1788 
1789 		if (updateCap & cShortPreamble) {
1790 			/*  Short Preamble */
1791 			if (pmlmeinfo->preamble_mode != PREAMBLE_SHORT) { /*  PREAMBLE_LONG or PREAMBLE_AUTO */
1792 				ShortPreamble = true;
1793 				pmlmeinfo->preamble_mode = PREAMBLE_SHORT;
1794 				rtw_hal_set_hwreg(Adapter, HW_VAR_ACK_PREAMBLE, (u8 *)&ShortPreamble);
1795 			}
1796 		} else{
1797 			/*  Long Preamble */
1798 			if (pmlmeinfo->preamble_mode != PREAMBLE_LONG) { /*  PREAMBLE_SHORT or PREAMBLE_AUTO */
1799 				ShortPreamble = false;
1800 				pmlmeinfo->preamble_mode = PREAMBLE_LONG;
1801 				rtw_hal_set_hwreg(Adapter, HW_VAR_ACK_PREAMBLE, (u8 *)&ShortPreamble);
1802 			}
1803 		}
1804 	}
1805 
1806 	if (updateCap & cIBSS)
1807 		/* Filen: See 802.11-2007 p.91 */
1808 		pmlmeinfo->slotTime = NON_SHORT_SLOT_TIME;
1809 	else {
1810 		/* Filen: See 802.11-2007 p.90 */
1811 		if (pmlmeext->cur_wireless_mode & (WIRELESS_11_24N | WIRELESS_11A | WIRELESS_11_5N | WIRELESS_11AC))
1812 			pmlmeinfo->slotTime = SHORT_SLOT_TIME;
1813 		else if (pmlmeext->cur_wireless_mode & (WIRELESS_11G)) {
1814 			if ((updateCap & cShortSlotTime) /* && (!(pMgntInfo->pHTInfo->RT2RT_HT_Mode & RT_HT_CAP_USE_LONG_PREAMBLE)) */)
1815 				/*  Short Slot Time */
1816 				pmlmeinfo->slotTime = SHORT_SLOT_TIME;
1817 			else
1818 				/*  Long Slot Time */
1819 				pmlmeinfo->slotTime = NON_SHORT_SLOT_TIME;
1820 		} else
1821 			/* B Mode */
1822 			pmlmeinfo->slotTime = NON_SHORT_SLOT_TIME;
1823 	}
1824 
1825 	rtw_hal_set_hwreg(Adapter, HW_VAR_SLOT_TIME, &pmlmeinfo->slotTime);
1826 
1827 }
1828 
1829 void update_wireless_mode(struct adapter *padapter)
1830 {
1831 	int ratelen, network_type = 0;
1832 	u32 SIFS_Timer;
1833 	struct mlme_ext_priv *pmlmeext = &padapter->mlmeextpriv;
1834 	struct mlme_ext_info *pmlmeinfo = &(pmlmeext->mlmext_info);
1835 	struct wlan_bssid_ex		*cur_network = &(pmlmeinfo->network);
1836 	unsigned char 		*rate = cur_network->SupportedRates;
1837 
1838 	ratelen = rtw_get_rateset_len(cur_network->SupportedRates);
1839 
1840 	if ((pmlmeinfo->HT_info_enable) && (pmlmeinfo->HT_caps_enable))
1841 		pmlmeinfo->HT_enable = 1;
1842 
1843 	if (pmlmeext->cur_channel > 14) {
1844 		if (pmlmeinfo->VHT_enable)
1845 			network_type = WIRELESS_11AC;
1846 		else if (pmlmeinfo->HT_enable)
1847 			network_type = WIRELESS_11_5N;
1848 
1849 		network_type |= WIRELESS_11A;
1850 	} else{
1851 		if (pmlmeinfo->VHT_enable)
1852 			network_type = WIRELESS_11AC;
1853 		else if (pmlmeinfo->HT_enable)
1854 			network_type = WIRELESS_11_24N;
1855 
1856 		if ((cckratesonly_included(rate, ratelen)) == true)
1857 			network_type |= WIRELESS_11B;
1858 		else if ((cckrates_included(rate, ratelen)) == true)
1859 			network_type |= WIRELESS_11BG;
1860 		else
1861 			network_type |= WIRELESS_11G;
1862 	}
1863 
1864 	pmlmeext->cur_wireless_mode = network_type & padapter->registrypriv.wireless_mode;
1865 
1866 	SIFS_Timer = 0x0a0a0808; /* 0x0808 -> for CCK, 0x0a0a -> for OFDM */
1867 													/* change this value if having IOT issues. */
1868 
1869 	padapter->HalFunc.SetHwRegHandler(padapter, HW_VAR_RESP_SIFS,  (u8 *)&SIFS_Timer);
1870 
1871 	padapter->HalFunc.SetHwRegHandler(padapter, HW_VAR_WIRELESS_MODE,  (u8 *)&(pmlmeext->cur_wireless_mode));
1872 
1873 	if (pmlmeext->cur_wireless_mode & WIRELESS_11B)
1874 		update_mgnt_tx_rate(padapter, IEEE80211_CCK_RATE_1MB);
1875 	 else
1876 		update_mgnt_tx_rate(padapter, IEEE80211_OFDM_RATE_6MB);
1877 }
1878 
1879 void update_sta_basic_rate(struct sta_info *psta, u8 wireless_mode)
1880 {
1881 	if (IsSupportedTxCCK(wireless_mode)) {
1882 		/*  Only B, B/G, and B/G/N AP could use CCK rate */
1883 		memcpy(psta->bssrateset, rtw_basic_rate_cck, 4);
1884 		psta->bssratelen = 4;
1885 	} else{
1886 		memcpy(psta->bssrateset, rtw_basic_rate_ofdm, 3);
1887 		psta->bssratelen = 3;
1888 	}
1889 }
1890 
1891 int update_sta_support_rate(struct adapter *padapter, u8 *pvar_ie, uint var_ie_len, int cam_idx)
1892 {
1893 	unsigned int	ie_len;
1894 	struct ndis_80211_var_ie *pIE;
1895 	int	supportRateNum = 0;
1896 	struct mlme_ext_priv *pmlmeext = &(padapter->mlmeextpriv);
1897 	struct mlme_ext_info *pmlmeinfo = &(pmlmeext->mlmext_info);
1898 
1899 	pIE = (struct ndis_80211_var_ie *)rtw_get_ie(pvar_ie, _SUPPORTEDRATES_IE_, &ie_len, var_ie_len);
1900 	if (pIE == NULL)
1901 		return _FAIL;
1902 
1903 	memcpy(pmlmeinfo->FW_sta_info[cam_idx].SupportedRates, pIE->data, ie_len);
1904 	supportRateNum = ie_len;
1905 
1906 	pIE = (struct ndis_80211_var_ie *)rtw_get_ie(pvar_ie, _EXT_SUPPORTEDRATES_IE_, &ie_len, var_ie_len);
1907 	if (pIE)
1908 		memcpy((pmlmeinfo->FW_sta_info[cam_idx].SupportedRates + supportRateNum), pIE->data, ie_len);
1909 
1910 	return _SUCCESS;
1911 
1912 }
1913 
1914 void process_addba_req(struct adapter *padapter, u8 *paddba_req, u8 *addr)
1915 {
1916 	struct sta_info *psta;
1917 	u16 tid, start_seq, param;
1918 	struct recv_reorder_ctrl *preorder_ctrl;
1919 	struct sta_priv *pstapriv = &padapter->stapriv;
1920 	struct ADDBA_request *preq = (struct ADDBA_request *)paddba_req;
1921 	struct mlme_ext_priv *pmlmeext = &padapter->mlmeextpriv;
1922 	struct mlme_ext_info *pmlmeinfo = &(pmlmeext->mlmext_info);
1923 
1924 	psta = rtw_get_stainfo(pstapriv, addr);
1925 
1926 	if (psta) {
1927 		start_seq = le16_to_cpu(preq->BA_starting_seqctrl) >> 4;
1928 
1929 		param = le16_to_cpu(preq->BA_para_set);
1930 		tid = (param>>2)&0x0f;
1931 
1932 		preorder_ctrl = &psta->recvreorder_ctrl[tid];
1933 
1934 		#ifdef CONFIG_UPDATE_INDICATE_SEQ_WHILE_PROCESS_ADDBA_REQ
1935 		preorder_ctrl->indicate_seq = start_seq;
1936 		#ifdef DBG_RX_SEQ
1937 		DBG_871X("DBG_RX_SEQ %s:%d IndicateSeq: %d, start_seq: %d\n", __func__, __LINE__,
1938 			preorder_ctrl->indicate_seq, start_seq);
1939 		#endif
1940 		#else
1941 		preorder_ctrl->indicate_seq = 0xffff;
1942 		#endif
1943 
1944 		preorder_ctrl->enable = pmlmeinfo->accept_addba_req;
1945 	}
1946 
1947 }
1948 
1949 void update_TSF(struct mlme_ext_priv *pmlmeext, u8 *pframe, uint len)
1950 {
1951 	u8 *pIE;
1952 	__le32 *pbuf;
1953 
1954 	pIE = pframe + sizeof(struct ieee80211_hdr_3addr);
1955 	pbuf = (__le32 *)pIE;
1956 
1957 	pmlmeext->TSFValue = le32_to_cpu(*(pbuf+1));
1958 
1959 	pmlmeext->TSFValue = pmlmeext->TSFValue << 32;
1960 
1961 	pmlmeext->TSFValue |= le32_to_cpu(*pbuf);
1962 }
1963 
1964 void correct_TSF(struct adapter *padapter, struct mlme_ext_priv *pmlmeext)
1965 {
1966 	rtw_hal_set_hwreg(padapter, HW_VAR_CORRECT_TSF, NULL);
1967 }
1968 
1969 void adaptive_early_32k(struct mlme_ext_priv *pmlmeext, u8 *pframe, uint len)
1970 {
1971 	int i;
1972 	u8 *pIE;
1973 	__le32 *pbuf;
1974 	u64 tsf = 0;
1975 	u32 delay_ms;
1976 	struct mlme_ext_info *pmlmeinfo = &(pmlmeext->mlmext_info);
1977 
1978 
1979 	pmlmeext->bcn_cnt++;
1980 
1981 	pIE = pframe + sizeof(struct ieee80211_hdr_3addr);
1982 	pbuf = (__le32 *)pIE;
1983 
1984 	tsf = le32_to_cpu(*(pbuf+1));
1985 	tsf = tsf << 32;
1986 	tsf |= le32_to_cpu(*pbuf);
1987 
1988 	/* DBG_871X("%s(): tsf_upper = 0x%08x, tsf_lower = 0x%08x\n", __func__, (u32)(tsf>>32), (u32)tsf); */
1989 
1990 	/* delay = (timestamp mod 1024*100)/1000 (unit: ms) */
1991 	/* delay_ms = do_div(tsf, (pmlmeinfo->bcn_interval*1024))/1000; */
1992 	delay_ms = rtw_modular64(tsf, (pmlmeinfo->bcn_interval*1024));
1993 	delay_ms = delay_ms/1000;
1994 
1995 	if (delay_ms >= 8)
1996 		pmlmeext->bcn_delay_cnt[8]++;
1997 		/* pmlmeext->bcn_delay_ratio[8] = (pmlmeext->bcn_delay_cnt[8] * 100) /pmlmeext->bcn_cnt; */
1998 	else
1999 		pmlmeext->bcn_delay_cnt[delay_ms]++;
2000 		/* pmlmeext->bcn_delay_ratio[delay_ms] = (pmlmeext->bcn_delay_cnt[delay_ms] * 100) /pmlmeext->bcn_cnt; */
2001 
2002 /*
2003 	DBG_871X("%s(): (a)bcn_cnt = %d\n", __func__, pmlmeext->bcn_cnt);
2004 
2005 
2006 	for (i = 0; i<9; i++)
2007 	{
2008 		DBG_871X("%s():bcn_delay_cnt[%d]=%d,  bcn_delay_ratio[%d]=%d\n", __func__, i,
2009 			pmlmeext->bcn_delay_cnt[i] , i, pmlmeext->bcn_delay_ratio[i]);
2010 	}
2011 */
2012 
2013 	/* dump for  adaptive_early_32k */
2014 	if (pmlmeext->bcn_cnt > 100 && (pmlmeext->adaptive_tsf_done == true)) {
2015 		u8 ratio_20_delay, ratio_80_delay;
2016 		u8 DrvBcnEarly, DrvBcnTimeOut;
2017 
2018 		ratio_20_delay = 0;
2019 		ratio_80_delay = 0;
2020 		DrvBcnEarly = 0xff;
2021 		DrvBcnTimeOut = 0xff;
2022 
2023 		DBG_871X("%s(): bcn_cnt = %d\n", __func__, pmlmeext->bcn_cnt);
2024 
2025 		for (i = 0; i < 9; i++) {
2026 			pmlmeext->bcn_delay_ratio[i] = (pmlmeext->bcn_delay_cnt[i] * 100) / pmlmeext->bcn_cnt;
2027 
2028 
2029 			DBG_871X("%s():bcn_delay_cnt[%d]=%d,  bcn_delay_ratio[%d]=%d\n", __func__, i,
2030 				pmlmeext->bcn_delay_cnt[i], i, pmlmeext->bcn_delay_ratio[i]);
2031 
2032 			ratio_20_delay += pmlmeext->bcn_delay_ratio[i];
2033 			ratio_80_delay += pmlmeext->bcn_delay_ratio[i];
2034 
2035 			if (ratio_20_delay > 20 && DrvBcnEarly == 0xff) {
2036 				DrvBcnEarly = i;
2037 				DBG_871X("%s(): DrvBcnEarly = %d\n", __func__, DrvBcnEarly);
2038 			}
2039 
2040 			if (ratio_80_delay > 80 && DrvBcnTimeOut == 0xff) {
2041 				DrvBcnTimeOut = i;
2042 				DBG_871X("%s(): DrvBcnTimeOut = %d\n", __func__, DrvBcnTimeOut);
2043 			}
2044 
2045 			/* reset adaptive_early_32k cnt */
2046 			pmlmeext->bcn_delay_cnt[i] = 0;
2047 			pmlmeext->bcn_delay_ratio[i] = 0;
2048 		}
2049 
2050 		pmlmeext->DrvBcnEarly = DrvBcnEarly;
2051 		pmlmeext->DrvBcnTimeOut = DrvBcnTimeOut;
2052 
2053 		pmlmeext->bcn_cnt = 0;
2054 	}
2055 
2056 }
2057 
2058 
2059 void beacon_timing_control(struct adapter *padapter)
2060 {
2061 	rtw_hal_bcn_related_reg_setting(padapter);
2062 }
2063 
2064 void rtw_alloc_macid(struct adapter *padapter, struct sta_info *psta)
2065 {
2066 	int i;
2067 	u8 bc_addr[ETH_ALEN] = {0xff, 0xff, 0xff, 0xff, 0xff, 0xff};
2068 	struct dvobj_priv *pdvobj = adapter_to_dvobj(padapter);
2069 
2070 
2071 	if (!memcmp(psta->hwaddr, bc_addr, ETH_ALEN))
2072 		return;
2073 
2074 	if (!memcmp(psta->hwaddr, myid(&padapter->eeprompriv), ETH_ALEN)) {
2075 		psta->mac_id = NUM_STA;
2076 		return;
2077 	}
2078 
2079 	spin_lock_bh(&pdvobj->lock);
2080 	for (i = 0; i < NUM_STA; i++) {
2081 		if (pdvobj->macid[i] == false) {
2082 			pdvobj->macid[i]  = true;
2083 			break;
2084 		}
2085 	}
2086 	spin_unlock_bh(&pdvobj->lock);
2087 
2088 	if (i > (NUM_STA-1)) {
2089 		psta->mac_id = NUM_STA;
2090 		DBG_871X("  no room for more MACIDs\n");
2091 	} else{
2092 		psta->mac_id = i;
2093 		DBG_871X("%s = %d\n", __func__, psta->mac_id);
2094 	}
2095 
2096 }
2097 
2098 void rtw_release_macid(struct adapter *padapter, struct sta_info *psta)
2099 {
2100 	u8 bc_addr[ETH_ALEN] = {0xff, 0xff, 0xff, 0xff, 0xff, 0xff};
2101 	struct dvobj_priv *pdvobj = adapter_to_dvobj(padapter);
2102 
2103 
2104 	if (!memcmp(psta->hwaddr, bc_addr, ETH_ALEN))
2105 		return;
2106 
2107 	if (!memcmp(psta->hwaddr, myid(&padapter->eeprompriv), ETH_ALEN))
2108 		return;
2109 
2110 	spin_lock_bh(&pdvobj->lock);
2111 	if (psta->mac_id < NUM_STA && psta->mac_id != 1) {
2112 		if (pdvobj->macid[psta->mac_id] == true) {
2113 			DBG_871X("%s = %d\n", __func__, psta->mac_id);
2114 			pdvobj->macid[psta->mac_id] = false;
2115 			psta->mac_id = NUM_STA;
2116 		}
2117 
2118 	}
2119 	spin_unlock_bh(&pdvobj->lock);
2120 
2121 }
2122 /* For 8188E RA */
2123 u8 rtw_search_max_mac_id(struct adapter *padapter)
2124 {
2125 	u8 max_mac_id = 0;
2126 	struct dvobj_priv *pdvobj = adapter_to_dvobj(padapter);
2127 	int i;
2128 	spin_lock_bh(&pdvobj->lock);
2129 	for (i = (NUM_STA-1); i >= 0 ; i--) {
2130 		if (pdvobj->macid[i] == true)
2131 			break;
2132 	}
2133 	max_mac_id = i;
2134 	spin_unlock_bh(&pdvobj->lock);
2135 
2136 	return max_mac_id;
2137 
2138 }
2139 
2140 struct adapter *dvobj_get_port0_adapter(struct dvobj_priv *dvobj)
2141 {
2142 	if (get_iface_type(dvobj->padapters[i]) != IFACE_PORT0)
2143 		return NULL;
2144 
2145 	return dvobj->padapters;
2146 }
2147 
2148 #ifdef CONFIG_GPIO_API
2149 int rtw_get_gpio(struct net_device *netdev, int gpio_num)
2150 {
2151 	u8 value;
2152 	u8 direction;
2153 	struct adapter *adapter = (struct adapter *)rtw_netdev_priv(netdev);
2154 	struct pwrctrl_priv *pwrpriv = adapter_to_pwrctl(adapter);
2155 
2156 	rtw_ps_deny(adapter, PS_DENY_IOCTL);
2157 
2158 	DBG_871X("rf_pwrstate = 0x%02x\n", pwrpriv->rf_pwrstate);
2159 	LeaveAllPowerSaveModeDirect(adapter);
2160 
2161 	/* Read GPIO Direction */
2162 	direction = (rtw_read8(adapter, REG_GPIO_PIN_CTRL + 2) & BIT(gpio_num)) >> gpio_num;
2163 
2164 	/* According the direction to read register value */
2165 	if (direction)
2166 		value = (rtw_read8(adapter, REG_GPIO_PIN_CTRL + 1) & BIT(gpio_num)) >> gpio_num;
2167 	else
2168 		value = (rtw_read8(adapter, REG_GPIO_PIN_CTRL) & BIT(gpio_num)) >> gpio_num;
2169 
2170 	rtw_ps_deny_cancel(adapter, PS_DENY_IOCTL);
2171 	DBG_871X("%s direction =%d value =%d\n", __func__, direction, value);
2172 
2173 	return value;
2174 }
2175 EXPORT_SYMBOL(rtw_get_gpio);
2176 
2177 int  rtw_set_gpio_output_value(struct net_device *netdev, int gpio_num, bool isHigh)
2178 {
2179 	u8 direction = 0;
2180 	u8 res = -1;
2181 	struct adapter *adapter = (struct adapter *)rtw_netdev_priv(netdev);
2182 
2183 	/* Check GPIO is 4~7 */
2184 	if (gpio_num > 7 || gpio_num < 4) {
2185 		DBG_871X("%s The gpio number does not included 4~7.\n", __func__);
2186 		return -1;
2187 	}
2188 
2189 	rtw_ps_deny(adapter, PS_DENY_IOCTL);
2190 
2191 	LeaveAllPowerSaveModeDirect(adapter);
2192 
2193 	/* Read GPIO direction */
2194 	direction = (rtw_read8(adapter, REG_GPIO_PIN_CTRL + 2) & BIT(gpio_num)) >> gpio_num;
2195 
2196 	/* If GPIO is output direction, setting value. */
2197 	if (direction) {
2198 		if (isHigh)
2199 			rtw_write8(adapter, REG_GPIO_PIN_CTRL + 1, rtw_read8(adapter, REG_GPIO_PIN_CTRL + 1) | BIT(gpio_num));
2200 		else
2201 			rtw_write8(adapter, REG_GPIO_PIN_CTRL + 1, rtw_read8(adapter, REG_GPIO_PIN_CTRL + 1) & ~BIT(gpio_num));
2202 
2203 		DBG_871X("%s Set gpio %x[%d]=%d\n", __func__, REG_GPIO_PIN_CTRL+1, gpio_num, isHigh);
2204 		res = 0;
2205 	} else{
2206 		DBG_871X("%s The gpio is input, not be set!\n", __func__);
2207 		res = -1;
2208 	}
2209 
2210 	rtw_ps_deny_cancel(adapter, PS_DENY_IOCTL);
2211 	return res;
2212 }
2213 EXPORT_SYMBOL(rtw_set_gpio_output_value);
2214 
2215 int rtw_config_gpio(struct net_device *netdev, int gpio_num, bool isOutput)
2216 {
2217 	struct adapter *adapter = (struct adapter *)rtw_netdev_priv(netdev);
2218 
2219 	if (gpio_num > 7 || gpio_num < 4) {
2220 		DBG_871X("%s The gpio number does not included 4~7.\n", __func__);
2221 		return -1;
2222 	}
2223 
2224 	DBG_871X("%s gpio_num =%d direction =%d\n", __func__, gpio_num, isOutput);
2225 
2226 	rtw_ps_deny(adapter, PS_DENY_IOCTL);
2227 
2228 	LeaveAllPowerSaveModeDirect(adapter);
2229 
2230 	if (isOutput)
2231 		rtw_write8(adapter, REG_GPIO_PIN_CTRL + 2, rtw_read8(adapter, REG_GPIO_PIN_CTRL + 2) | BIT(gpio_num));
2232 	else
2233 		rtw_write8(adapter, REG_GPIO_PIN_CTRL + 2, rtw_read8(adapter, REG_GPIO_PIN_CTRL + 2) & ~BIT(gpio_num));
2234 
2235 	rtw_ps_deny_cancel(adapter, PS_DENY_IOCTL);
2236 
2237 	return 0;
2238 }
2239 EXPORT_SYMBOL(rtw_config_gpio);
2240 #endif
2241 
2242 #if defined(CONFIG_WOWLAN) || defined(CONFIG_AP_WOWLAN)
2243 void rtw_get_current_ip_address(struct adapter *padapter, u8 *pcurrentip)
2244 {
2245 	struct mlme_ext_priv *pmlmeext = &padapter->mlmeextpriv;
2246 	struct mlme_ext_info *pmlmeinfo = &(pmlmeext->mlmext_info);
2247 	struct in_device *my_ip_ptr = padapter->pnetdev->ip_ptr;
2248 	u8 ipaddress[4];
2249 
2250 	if ((pmlmeinfo->state & WIFI_FW_LINKING_STATE) ||
2251 			pmlmeinfo->state & WIFI_FW_AP_STATE) {
2252 		if (my_ip_ptr != NULL) {
2253 			struct in_ifaddr *my_ifa_list = my_ip_ptr->ifa_list;
2254 			if (my_ifa_list != NULL) {
2255 				ipaddress[0] = my_ifa_list->ifa_address & 0xFF;
2256 				ipaddress[1] = (my_ifa_list->ifa_address >> 8) & 0xFF;
2257 				ipaddress[2] = (my_ifa_list->ifa_address >> 16) & 0xFF;
2258 				ipaddress[3] = my_ifa_list->ifa_address >> 24;
2259 				DBG_871X("%s: %d.%d.%d.%d ==========\n", __func__,
2260 						ipaddress[0], ipaddress[1], ipaddress[2], ipaddress[3]);
2261 				memcpy(pcurrentip, ipaddress, 4);
2262 			}
2263 		}
2264 	}
2265 }
2266 #endif
2267 #ifdef CONFIG_WOWLAN
2268 void rtw_get_sec_iv(struct adapter *padapter, u8 *pcur_dot11txpn, u8 *StaAddr)
2269 {
2270 	struct sta_info 	*psta;
2271 	struct security_priv *psecpriv = &padapter->securitypriv;
2272 
2273 	memset(pcur_dot11txpn, 0, 8);
2274 	if (NULL == StaAddr)
2275 		return;
2276 	psta = rtw_get_stainfo(&padapter->stapriv, StaAddr);
2277 	DBG_871X("%s(): StaAddr: %02x %02x %02x %02x %02x %02x\n",
2278 		__func__, StaAddr[0], StaAddr[1], StaAddr[2],
2279 		StaAddr[3], StaAddr[4], StaAddr[5]);
2280 
2281 	if (psta) {
2282 		if (psecpriv->dot11PrivacyAlgrthm != _NO_PRIVACY_ && psta->dot11txpn.val > 0)
2283 			psta->dot11txpn.val--;
2284 		AES_IV(pcur_dot11txpn, psta->dot11txpn, 0);
2285 
2286 		DBG_871X("%s(): CurrentIV: %02x %02x %02x %02x %02x %02x %02x %02x\n"
2287 		, __func__, pcur_dot11txpn[0], pcur_dot11txpn[1],
2288 		pcur_dot11txpn[2], pcur_dot11txpn[3], pcur_dot11txpn[4],
2289 		pcur_dot11txpn[5], pcur_dot11txpn[6], pcur_dot11txpn[7]);
2290 	}
2291 }
2292 void rtw_set_sec_pn(struct adapter *padapter)
2293 {
2294 		struct sta_info         *psta;
2295 		struct mlme_ext_priv    *pmlmeext = &(padapter->mlmeextpriv);
2296 		struct mlme_ext_info    *pmlmeinfo = &(pmlmeext->mlmext_info);
2297 		struct pwrctrl_priv *pwrpriv = adapter_to_pwrctl(padapter);
2298 		struct security_priv *psecpriv = &padapter->securitypriv;
2299 
2300 		psta = rtw_get_stainfo(&padapter->stapriv,
2301 		get_my_bssid(&pmlmeinfo->network));
2302 
2303 		if (psta) {
2304 			if (pwrpriv->wowlan_fw_iv > psta->dot11txpn.val) {
2305 				if (psecpriv->dot11PrivacyAlgrthm != _NO_PRIVACY_)
2306 					psta->dot11txpn.val = pwrpriv->wowlan_fw_iv + 2;
2307 			} else {
2308 				DBG_871X("%s(): FW IV is smaller than driver\n", __func__);
2309 				psta->dot11txpn.val += 2;
2310 			}
2311 			DBG_871X("%s: dot11txpn: 0x%016llx\n", __func__, psta->dot11txpn.val);
2312 		}
2313 }
2314 #endif /* CONFIG_WOWLAN */
2315 
2316 #ifdef CONFIG_PNO_SUPPORT
2317 #define	CSCAN_TLV_TYPE_SSID_IE	'S'
2318 #define CIPHER_IE "key_mgmt ="
2319 #define CIPHER_NONE "NONE"
2320 #define CIPHER_WPA_PSK "WPA-PSK"
2321 #define CIPHER_WPA_EAP "WPA-EAP IEEE8021X"
2322 
2323 #endif /* CONFIG_PNO_SUPPORT */
2324