1 // SPDX-License-Identifier: GPL-2.0
2 /******************************************************************************
3  *
4  * Copyright(c) 2007 - 2012 Realtek Corporation. All rights reserved.
5  *
6  ******************************************************************************/
7 #define _RTW_WLAN_UTIL_C_
8 
9 #include <drv_types.h>
10 #include <rtw_debug.h>
11 #include <hal_com_h2c.h>
12 
13 static unsigned char ARTHEROS_OUI1[] = {0x00, 0x03, 0x7f};
14 static unsigned char ARTHEROS_OUI2[] = {0x00, 0x13, 0x74};
15 
16 static unsigned char BROADCOM_OUI1[] = {0x00, 0x10, 0x18};
17 static unsigned char BROADCOM_OUI2[] = {0x00, 0x0a, 0xf7};
18 static unsigned char BROADCOM_OUI3[] = {0x00, 0x05, 0xb5};
19 
20 static unsigned char CISCO_OUI[] = {0x00, 0x40, 0x96};
21 static unsigned char MARVELL_OUI[] = {0x00, 0x50, 0x43};
22 static unsigned char RALINK_OUI[] = {0x00, 0x0c, 0x43};
23 static unsigned char REALTEK_OUI[] = {0x00, 0xe0, 0x4c};
24 static unsigned char AIRGOCAP_OUI[] = {0x00, 0x0a, 0xf5};
25 static unsigned char RSN_TKIP_CIPHER[4] = {0x00, 0x0f, 0xac, 0x02};
26 static unsigned char WPA_TKIP_CIPHER[4] = {0x00, 0x50, 0xf2, 0x02};
27 
28 extern unsigned char RTW_WPA_OUI[];
29 extern unsigned char WPA_TKIP_CIPHER[4];
30 
31 #define R2T_PHY_DELAY	(0)
32 
33 /* define WAIT_FOR_BCN_TO_MIN	(3000) */
34 #define WAIT_FOR_BCN_TO_MIN	(6000)
35 #define WAIT_FOR_BCN_TO_MAX	(20000)
36 
37 #define DISCONNECT_BY_CHK_BCN_FAIL_OBSERV_PERIOD_IN_MS 1000
38 #define DISCONNECT_BY_CHK_BCN_FAIL_THRESHOLD 3
39 
40 static u8 rtw_basic_rate_cck[4] = {
41 	IEEE80211_CCK_RATE_1MB | IEEE80211_BASIC_RATE_MASK,
42 	IEEE80211_CCK_RATE_2MB | IEEE80211_BASIC_RATE_MASK,
43 	IEEE80211_CCK_RATE_5MB | IEEE80211_BASIC_RATE_MASK,
44 	IEEE80211_CCK_RATE_11MB | IEEE80211_BASIC_RATE_MASK
45 };
46 
47 static u8 rtw_basic_rate_ofdm[3] = {
48 	IEEE80211_OFDM_RATE_6MB | IEEE80211_BASIC_RATE_MASK,
49 	IEEE80211_OFDM_RATE_12MB | IEEE80211_BASIC_RATE_MASK,
50 	IEEE80211_OFDM_RATE_24MB | IEEE80211_BASIC_RATE_MASK
51 };
52 
53 u8 networktype_to_raid_ex(struct adapter *adapter, struct sta_info *psta)
54 {
55 	u8 raid, cur_rf_type, rf_type = RF_1T1R;
56 
57 	rtw_hal_get_hwreg(adapter, HW_VAR_RF_TYPE, (u8 *)(&cur_rf_type));
58 
59 	if (cur_rf_type == RF_1T1R) {
60 		rf_type = RF_1T1R;
61 	} else if (IsSupportedVHT(psta->wireless_mode)) {
62 		if (psta->ra_mask & 0xffc00000)
63 			rf_type = RF_2T2R;
64 	} else if (IsSupportedHT(psta->wireless_mode)) {
65 		if (psta->ra_mask & 0xfff00000)
66 			rf_type = RF_2T2R;
67 	}
68 
69 	switch (psta->wireless_mode) {
70 	case WIRELESS_11B:
71 		raid = RATEID_IDX_B;
72 		break;
73 	case WIRELESS_11A:
74 	case WIRELESS_11G:
75 		raid = RATEID_IDX_G;
76 		break;
77 	case WIRELESS_11BG:
78 		raid = RATEID_IDX_BG;
79 		break;
80 	case WIRELESS_11_24N:
81 	case WIRELESS_11_5N:
82 	case WIRELESS_11A_5N:
83 	case WIRELESS_11G_24N:
84 		if (rf_type == RF_2T2R)
85 			raid = RATEID_IDX_GN_N2SS;
86 		else
87 			raid = RATEID_IDX_GN_N1SS;
88 		break;
89 	case WIRELESS_11B_24N:
90 	case WIRELESS_11BG_24N:
91 		if (psta->bw_mode == CHANNEL_WIDTH_20) {
92 			if (rf_type == RF_2T2R)
93 				raid = RATEID_IDX_BGN_20M_2SS_BN;
94 			else
95 				raid = RATEID_IDX_BGN_20M_1SS_BN;
96 		} else {
97 			if (rf_type == RF_2T2R)
98 				raid = RATEID_IDX_BGN_40M_2SS;
99 			else
100 				raid = RATEID_IDX_BGN_40M_1SS;
101 		}
102 		break;
103 	default:
104 		raid = RATEID_IDX_BGN_40M_2SS;
105 		break;
106 	}
107 	return raid;
108 }
109 
110 unsigned char ratetbl_val_2wifirate(unsigned char rate);
111 unsigned char ratetbl_val_2wifirate(unsigned char rate)
112 {
113 	switch (rate & 0x7f) {
114 	case 0:
115 		return IEEE80211_CCK_RATE_1MB;
116 	case 1:
117 		return IEEE80211_CCK_RATE_2MB;
118 	case 2:
119 		return IEEE80211_CCK_RATE_5MB;
120 	case 3:
121 		return IEEE80211_CCK_RATE_11MB;
122 	case 4:
123 		return IEEE80211_OFDM_RATE_6MB;
124 	case 5:
125 		return IEEE80211_OFDM_RATE_9MB;
126 	case 6:
127 		return IEEE80211_OFDM_RATE_12MB;
128 	case 7:
129 		return IEEE80211_OFDM_RATE_18MB;
130 	case 8:
131 		return IEEE80211_OFDM_RATE_24MB;
132 	case 9:
133 		return IEEE80211_OFDM_RATE_36MB;
134 	case 10:
135 		return IEEE80211_OFDM_RATE_48MB;
136 	case 11:
137 		return IEEE80211_OFDM_RATE_54MB;
138 	default:
139 		return 0;
140 	}
141 }
142 
143 int is_basicrate(struct adapter *padapter, unsigned char rate);
144 int is_basicrate(struct adapter *padapter, unsigned char rate)
145 {
146 	int i;
147 	unsigned char val;
148 	struct mlme_ext_priv *pmlmeext = &padapter->mlmeextpriv;
149 
150 	for (i = 0; i < NumRates; i++) {
151 		val = pmlmeext->basicrate[i];
152 
153 		if ((val != 0xff) && (val != 0xfe))
154 			if (rate == ratetbl_val_2wifirate(val))
155 				return true;
156 	}
157 
158 	return false;
159 }
160 
161 unsigned int ratetbl2rateset(struct adapter *padapter, unsigned char *rateset);
162 unsigned int ratetbl2rateset(struct adapter *padapter, unsigned char *rateset)
163 {
164 	int i;
165 	unsigned char rate;
166 	unsigned int	len = 0;
167 	struct mlme_ext_priv *pmlmeext = &padapter->mlmeextpriv;
168 
169 	for (i = 0; i < NumRates; i++) {
170 		rate = pmlmeext->datarate[i];
171 
172 		switch (rate) {
173 		case 0xff:
174 			return len;
175 
176 		case 0xfe:
177 			continue;
178 
179 		default:
180 			rate = ratetbl_val_2wifirate(rate);
181 
182 			if (is_basicrate(padapter, rate) == true)
183 				rate |= IEEE80211_BASIC_RATE_MASK;
184 
185 			rateset[len] = rate;
186 			len++;
187 			break;
188 		}
189 	}
190 	return len;
191 }
192 
193 void get_rate_set(struct adapter *padapter, unsigned char *pbssrate, int *bssrate_len)
194 {
195 	unsigned char supportedrates[NumRates];
196 
197 	memset(supportedrates, 0, NumRates);
198 	*bssrate_len = ratetbl2rateset(padapter, supportedrates);
199 	memcpy(pbssrate, supportedrates, *bssrate_len);
200 }
201 
202 void set_mcs_rate_by_mask(u8 *mcs_set, u32 mask)
203 {
204 	u8 mcs_rate_1r = (u8)(mask&0xff);
205 	u8 mcs_rate_2r = (u8)((mask>>8)&0xff);
206 	u8 mcs_rate_3r = (u8)((mask>>16)&0xff);
207 	u8 mcs_rate_4r = (u8)((mask>>24)&0xff);
208 
209 	mcs_set[0] &= mcs_rate_1r;
210 	mcs_set[1] &= mcs_rate_2r;
211 	mcs_set[2] &= mcs_rate_3r;
212 	mcs_set[3] &= mcs_rate_4r;
213 }
214 
215 void UpdateBrateTbl(struct adapter *Adapter, u8 *mBratesOS)
216 {
217 	u8 i;
218 	u8 rate;
219 
220 	/*  1M, 2M, 5.5M, 11M, 6M, 12M, 24M are mandatory. */
221 	for (i = 0; i < NDIS_802_11_LENGTH_RATES_EX; i++) {
222 		rate = mBratesOS[i] & 0x7f;
223 		switch (rate) {
224 		case IEEE80211_CCK_RATE_1MB:
225 		case IEEE80211_CCK_RATE_2MB:
226 		case IEEE80211_CCK_RATE_5MB:
227 		case IEEE80211_CCK_RATE_11MB:
228 		case IEEE80211_OFDM_RATE_6MB:
229 		case IEEE80211_OFDM_RATE_12MB:
230 		case IEEE80211_OFDM_RATE_24MB:
231 			mBratesOS[i] |= IEEE80211_BASIC_RATE_MASK;
232 			break;
233 		}
234 	}
235 }
236 
237 void UpdateBrateTblForSoftAP(u8 *bssrateset, u32 bssratelen)
238 {
239 	u8 i;
240 	u8 rate;
241 
242 	for (i = 0; i < bssratelen; i++) {
243 		rate = bssrateset[i] & 0x7f;
244 		switch (rate) {
245 		case IEEE80211_CCK_RATE_1MB:
246 		case IEEE80211_CCK_RATE_2MB:
247 		case IEEE80211_CCK_RATE_5MB:
248 		case IEEE80211_CCK_RATE_11MB:
249 			bssrateset[i] |= IEEE80211_BASIC_RATE_MASK;
250 			break;
251 		}
252 	}
253 }
254 
255 void Save_DM_Func_Flag(struct adapter *padapter)
256 {
257 	u8 bSaveFlag = true;
258 
259 	rtw_hal_set_hwreg(padapter, HW_VAR_DM_FUNC_OP, (u8 *)(&bSaveFlag));
260 }
261 
262 void Restore_DM_Func_Flag(struct adapter *padapter)
263 {
264 	u8 bSaveFlag = false;
265 
266 	rtw_hal_set_hwreg(padapter, HW_VAR_DM_FUNC_OP, (u8 *)(&bSaveFlag));
267 }
268 
269 void Switch_DM_Func(struct adapter *padapter, u32 mode, u8 enable)
270 {
271 	if (enable == true)
272 		rtw_hal_set_hwreg(padapter, HW_VAR_DM_FUNC_SET, (u8 *)(&mode));
273 	else
274 		rtw_hal_set_hwreg(padapter, HW_VAR_DM_FUNC_CLR, (u8 *)(&mode));
275 }
276 
277 void Set_MSR(struct adapter *padapter, u8 type)
278 {
279 	rtw_hal_set_hwreg(padapter, HW_VAR_MEDIA_STATUS, (u8 *)(&type));
280 }
281 
282 inline u8 rtw_get_oper_ch(struct adapter *adapter)
283 {
284 	return adapter_to_dvobj(adapter)->oper_channel;
285 }
286 
287 inline void rtw_set_oper_ch(struct adapter *adapter, u8 ch)
288 {
289 #ifdef DBG_CH_SWITCH
290 	const int len = 128;
291 	char msg[128] = {0};
292 	int cnt = 0;
293 	int i = 0;
294 #endif  /* DBG_CH_SWITCH */
295 	struct dvobj_priv *dvobj = adapter_to_dvobj(adapter);
296 
297 	if (dvobj->oper_channel != ch) {
298 		dvobj->on_oper_ch_time = jiffies;
299 
300 #ifdef DBG_CH_SWITCH
301 		cnt += scnprintf(msg+cnt, len-cnt, "switch to ch %3u", ch);
302 
303 		for (i = 0; i < dvobj->iface_nums; i++) {
304 			struct adapter *iface = dvobj->padapters[i];
305 
306 			cnt += scnprintf(msg+cnt, len-cnt, " [%s:", ADPT_ARG(iface));
307 			if (iface->mlmeextpriv.cur_channel == ch)
308 				cnt += scnprintf(msg+cnt, len-cnt, "C");
309 			else
310 				cnt += scnprintf(msg+cnt, len-cnt, "_");
311 			if (iface->wdinfo.listen_channel == ch && !rtw_p2p_chk_state(&iface->wdinfo, P2P_STATE_NONE))
312 				cnt += scnprintf(msg+cnt, len-cnt, "L");
313 			else
314 				cnt += scnprintf(msg+cnt, len-cnt, "_");
315 			cnt += scnprintf(msg+cnt, len-cnt, "]");
316 		}
317 
318 		DBG_871X(FUNC_ADPT_FMT" %s\n", FUNC_ADPT_ARG(adapter), msg);
319 #endif /* DBG_CH_SWITCH */
320 	}
321 
322 	dvobj->oper_channel = ch;
323 }
324 
325 inline u8 rtw_get_oper_bw(struct adapter *adapter)
326 {
327 	return adapter_to_dvobj(adapter)->oper_bwmode;
328 }
329 
330 inline void rtw_set_oper_bw(struct adapter *adapter, u8 bw)
331 {
332 	adapter_to_dvobj(adapter)->oper_bwmode = bw;
333 }
334 
335 inline u8 rtw_get_oper_choffset(struct adapter *adapter)
336 {
337 	return adapter_to_dvobj(adapter)->oper_ch_offset;
338 }
339 
340 inline void rtw_set_oper_choffset(struct adapter *adapter, u8 offset)
341 {
342 	adapter_to_dvobj(adapter)->oper_ch_offset = offset;
343 }
344 
345 u8 rtw_get_center_ch(u8 channel, u8 chnl_bw, u8 chnl_offset)
346 {
347 	u8 center_ch = channel;
348 
349 	if (chnl_bw == CHANNEL_WIDTH_80) {
350 		center_ch = 7;
351 	} else if (chnl_bw == CHANNEL_WIDTH_40) {
352 		if (chnl_offset == HAL_PRIME_CHNL_OFFSET_LOWER)
353 			center_ch = channel + 2;
354 		else
355 			center_ch = channel - 2;
356 	}
357 
358 	return center_ch;
359 }
360 
361 inline unsigned long rtw_get_on_cur_ch_time(struct adapter *adapter)
362 {
363 	if (adapter->mlmeextpriv.cur_channel == adapter_to_dvobj(adapter)->oper_channel)
364 		return adapter_to_dvobj(adapter)->on_oper_ch_time;
365 	else
366 		return 0;
367 }
368 
369 void SelectChannel(struct adapter *padapter, unsigned char channel)
370 {
371 	if (mutex_lock_interruptible(&(adapter_to_dvobj(padapter)->setch_mutex)))
372 		return;
373 
374 	/* saved channel info */
375 	rtw_set_oper_ch(padapter, channel);
376 
377 	rtw_hal_set_chan(padapter, channel);
378 
379 	mutex_unlock(&(adapter_to_dvobj(padapter)->setch_mutex));
380 }
381 
382 void set_channel_bwmode(struct adapter *padapter, unsigned char channel, unsigned char channel_offset, unsigned short bwmode)
383 {
384 	u8 center_ch, chnl_offset80 = HAL_PRIME_CHNL_OFFSET_DONT_CARE;
385 
386 	if (padapter->bNotifyChannelChange)
387 		DBG_871X("[%s] ch = %d, offset = %d, bwmode = %d\n", __func__, channel, channel_offset, bwmode);
388 
389 	center_ch = rtw_get_center_ch(channel, bwmode, channel_offset);
390 
391 	if (bwmode == CHANNEL_WIDTH_80) {
392 		if (center_ch > channel)
393 			chnl_offset80 = HAL_PRIME_CHNL_OFFSET_LOWER;
394 		else if (center_ch < channel)
395 			chnl_offset80 = HAL_PRIME_CHNL_OFFSET_UPPER;
396 		else
397 			chnl_offset80 = HAL_PRIME_CHNL_OFFSET_DONT_CARE;
398 	}
399 
400 	/* set Channel */
401 	if (mutex_lock_interruptible(&(adapter_to_dvobj(padapter)->setch_mutex)))
402 		return;
403 
404 	/* saved channel/bw info */
405 	rtw_set_oper_ch(padapter, channel);
406 	rtw_set_oper_bw(padapter, bwmode);
407 	rtw_set_oper_choffset(padapter, channel_offset);
408 
409 	rtw_hal_set_chnl_bw(padapter, center_ch, bwmode, channel_offset, chnl_offset80); /*  set center channel */
410 
411 	mutex_unlock(&(adapter_to_dvobj(padapter)->setch_mutex));
412 }
413 
414 inline u8 *get_my_bssid(struct wlan_bssid_ex *pnetwork)
415 {
416 	return pnetwork->MacAddress;
417 }
418 
419 u16 get_beacon_interval(struct wlan_bssid_ex *bss)
420 {
421 	__le16 val;
422 
423 	memcpy((unsigned char *)&val, rtw_get_beacon_interval_from_ie(bss->IEs), 2);
424 
425 	return le16_to_cpu(val);
426 }
427 
428 int is_client_associated_to_ap(struct adapter *padapter)
429 {
430 	struct mlme_ext_priv *pmlmeext;
431 	struct mlme_ext_info *pmlmeinfo;
432 
433 	if (!padapter)
434 		return _FAIL;
435 
436 	pmlmeext = &padapter->mlmeextpriv;
437 	pmlmeinfo = &(pmlmeext->mlmext_info);
438 
439 	if ((pmlmeinfo->state & WIFI_FW_ASSOC_SUCCESS) && ((pmlmeinfo->state&0x03) == WIFI_FW_STATION_STATE))
440 		return true;
441 	else
442 		return _FAIL;
443 }
444 
445 int is_client_associated_to_ibss(struct adapter *padapter)
446 {
447 	struct mlme_ext_priv *pmlmeext = &padapter->mlmeextpriv;
448 	struct mlme_ext_info *pmlmeinfo = &(pmlmeext->mlmext_info);
449 
450 	if ((pmlmeinfo->state & WIFI_FW_ASSOC_SUCCESS) && ((pmlmeinfo->state&0x03) == WIFI_FW_ADHOC_STATE))
451 		return true;
452 	else
453 		return _FAIL;
454 }
455 
456 int is_IBSS_empty(struct adapter *padapter)
457 {
458 	unsigned int i;
459 	struct mlme_ext_priv *pmlmeext = &padapter->mlmeextpriv;
460 	struct mlme_ext_info *pmlmeinfo = &(pmlmeext->mlmext_info);
461 
462 	for (i = IBSS_START_MAC_ID; i < NUM_STA; i++) {
463 		if (pmlmeinfo->FW_sta_info[i].status == 1)
464 			return _FAIL;
465 	}
466 
467 	return true;
468 }
469 
470 unsigned int decide_wait_for_beacon_timeout(unsigned int bcn_interval)
471 {
472 	if ((bcn_interval << 2) < WAIT_FOR_BCN_TO_MIN)
473 		return WAIT_FOR_BCN_TO_MIN;
474 	else if ((bcn_interval << 2) > WAIT_FOR_BCN_TO_MAX)
475 		return WAIT_FOR_BCN_TO_MAX;
476 	else
477 		return bcn_interval << 2;
478 }
479 
480 void invalidate_cam_all(struct adapter *padapter)
481 {
482 	struct dvobj_priv *dvobj = adapter_to_dvobj(padapter);
483 	struct cam_ctl_t *cam_ctl = &dvobj->cam_ctl;
484 
485 	rtw_hal_set_hwreg(padapter, HW_VAR_CAM_INVALID_ALL, NULL);
486 
487 	spin_lock_bh(&cam_ctl->lock);
488 	cam_ctl->bitmap = 0;
489 	memset(dvobj->cam_cache, 0, sizeof(struct cam_entry_cache)*TOTAL_CAM_ENTRY);
490 	spin_unlock_bh(&cam_ctl->lock);
491 }
492 
493 static u32 _ReadCAM(struct adapter *padapter, u32 addr)
494 {
495 	u32 count = 0, cmd;
496 
497 	cmd = CAM_POLLINIG | addr;
498 	rtw_write32(padapter, RWCAM, cmd);
499 
500 	do {
501 		if (0 == (rtw_read32(padapter, REG_CAMCMD) & CAM_POLLINIG))
502 			break;
503 	} while (count++ < 100);
504 
505 	return rtw_read32(padapter, REG_CAMREAD);
506 }
507 
508 void read_cam(struct adapter *padapter, u8 entry, u8 *get_key)
509 {
510 	u32 j, addr, cmd;
511 
512 	addr = entry << 3;
513 
514 	/* DBG_8192C("********* DUMP CAM Entry_#%02d***************\n", entry); */
515 	for (j = 0; j < 6; j++) {
516 		cmd = _ReadCAM(padapter, addr+j);
517 		/* DBG_8192C("offset:0x%02x => 0x%08x\n", addr+j, cmd); */
518 		if (j > 1) /* get key from cam */
519 			memcpy(get_key+(j-2)*4, &cmd, 4);
520 	}
521 	/* DBG_8192C("*********************************\n"); */
522 }
523 
524 void _write_cam(struct adapter *padapter, u8 entry, u16 ctrl, u8 *mac, u8 *key)
525 {
526 	unsigned int i, val, addr;
527 	int j;
528 	u32 cam_val[2];
529 
530 	addr = entry << 3;
531 
532 	for (j = 5; j >= 0; j--) {
533 		switch (j) {
534 		case 0:
535 			val = (ctrl | (mac[0] << 16) | (mac[1] << 24));
536 			break;
537 		case 1:
538 			val = (mac[2] | (mac[3] << 8) | (mac[4] << 16) | (mac[5] << 24));
539 			break;
540 		default:
541 			i = (j - 2) << 2;
542 			val = (key[i] | (key[i+1] << 8) | (key[i+2] << 16) | (key[i+3] << 24));
543 			break;
544 		}
545 
546 		cam_val[0] = val;
547 		cam_val[1] = addr + (unsigned int)j;
548 
549 		rtw_hal_set_hwreg(padapter, HW_VAR_CAM_WRITE, (u8 *)cam_val);
550 	}
551 }
552 
553 void _clear_cam_entry(struct adapter *padapter, u8 entry)
554 {
555 	unsigned char null_sta[] = {0x00, 0x00, 0x00, 0x00, 0x00, 0x00};
556 	unsigned char null_key[] = {0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00};
557 
558 	_write_cam(padapter, entry, 0, null_sta, null_key);
559 }
560 
561 inline void write_cam(struct adapter *adapter, u8 id, u16 ctrl, u8 *mac, u8 *key)
562 {
563 	_write_cam(adapter, id, ctrl, mac, key);
564 	write_cam_cache(adapter, id, ctrl, mac, key);
565 }
566 
567 inline void clear_cam_entry(struct adapter *adapter, u8 id)
568 {
569 	_clear_cam_entry(adapter, id);
570 	clear_cam_cache(adapter, id);
571 }
572 
573 void write_cam_cache(struct adapter *adapter, u8 id, u16 ctrl, u8 *mac, u8 *key)
574 {
575 	struct dvobj_priv *dvobj = adapter_to_dvobj(adapter);
576 	struct cam_ctl_t *cam_ctl = &dvobj->cam_ctl;
577 
578 	spin_lock_bh(&cam_ctl->lock);
579 
580 	dvobj->cam_cache[id].ctrl = ctrl;
581 	memcpy(dvobj->cam_cache[id].mac, mac, ETH_ALEN);
582 	memcpy(dvobj->cam_cache[id].key, key, 16);
583 
584 	spin_unlock_bh(&cam_ctl->lock);
585 }
586 
587 void clear_cam_cache(struct adapter *adapter, u8 id)
588 {
589 	struct dvobj_priv *dvobj = adapter_to_dvobj(adapter);
590 	struct cam_ctl_t *cam_ctl = &dvobj->cam_ctl;
591 
592 	spin_lock_bh(&cam_ctl->lock);
593 
594 	memset(&(dvobj->cam_cache[id]), 0, sizeof(struct cam_entry_cache));
595 
596 	spin_unlock_bh(&cam_ctl->lock);
597 }
598 
599 static bool _rtw_camid_is_gk(struct adapter *adapter, u8 cam_id)
600 {
601 	struct dvobj_priv *dvobj = adapter_to_dvobj(adapter);
602 	struct cam_ctl_t *cam_ctl = &dvobj->cam_ctl;
603 	bool ret = false;
604 
605 	if (cam_id >= TOTAL_CAM_ENTRY)
606 		goto exit;
607 
608 	if (!(cam_ctl->bitmap & BIT(cam_id)))
609 		goto exit;
610 
611 	ret = (dvobj->cam_cache[cam_id].ctrl&BIT6)?true:false;
612 
613 exit:
614 	return ret;
615 }
616 
617 static s16 _rtw_camid_search(struct adapter *adapter, u8 *addr, s16 kid)
618 {
619 	struct dvobj_priv *dvobj = adapter_to_dvobj(adapter);
620 	int i;
621 	s16 cam_id = -1;
622 
623 	for (i = 0; i < TOTAL_CAM_ENTRY; i++) {
624 		if (addr && memcmp(dvobj->cam_cache[i].mac, addr, ETH_ALEN))
625 			continue;
626 		if (kid >= 0 && kid != (dvobj->cam_cache[i].ctrl&0x03))
627 			continue;
628 
629 		cam_id = i;
630 		break;
631 	}
632 
633 	if (addr)
634 		DBG_871X(FUNC_ADPT_FMT" addr:%pM kid:%d, return cam_id:%d\n"
635 			 , FUNC_ADPT_ARG(adapter), MAC_ARG(addr), kid, cam_id);
636 	else
637 		DBG_871X(FUNC_ADPT_FMT" addr:%p kid:%d, return cam_id:%d\n"
638 			 , FUNC_ADPT_ARG(adapter), addr, kid, cam_id);
639 
640 	return cam_id;
641 }
642 
643 s16 rtw_camid_search(struct adapter *adapter, u8 *addr, s16 kid)
644 {
645 	struct dvobj_priv *dvobj = adapter_to_dvobj(adapter);
646 	struct cam_ctl_t *cam_ctl = &dvobj->cam_ctl;
647 	s16 cam_id = -1;
648 
649 	spin_lock_bh(&cam_ctl->lock);
650 	cam_id = _rtw_camid_search(adapter, addr, kid);
651 	spin_unlock_bh(&cam_ctl->lock);
652 
653 	return cam_id;
654 }
655 
656 s16 rtw_camid_alloc(struct adapter *adapter, struct sta_info *sta, u8 kid)
657 {
658 	struct dvobj_priv *dvobj = adapter_to_dvobj(adapter);
659 	struct cam_ctl_t *cam_ctl = &dvobj->cam_ctl;
660 	s16 cam_id = -1;
661 	struct mlme_ext_info *mlmeinfo;
662 
663 	spin_lock_bh(&cam_ctl->lock);
664 
665 	mlmeinfo = &adapter->mlmeextpriv.mlmext_info;
666 
667 	if ((((mlmeinfo->state&0x03) == WIFI_FW_AP_STATE) || ((mlmeinfo->state&0x03) == WIFI_FW_ADHOC_STATE))
668 		&& !sta) {
669 		/* AP/Ad-hoc mode group key: static alloction to default key by key ID */
670 		if (kid > 3) {
671 			DBG_871X_LEVEL(_drv_always_, FUNC_ADPT_FMT" group key with invalid key id:%u\n"
672 				, FUNC_ADPT_ARG(adapter), kid);
673 			rtw_warn_on(1);
674 			goto bitmap_handle;
675 		}
676 
677 		cam_id = kid;
678 	} else {
679 		int i;
680 		u8 *addr = sta?sta->hwaddr:NULL;
681 
682 		if (!sta) {
683 			if (!(mlmeinfo->state & WIFI_FW_ASSOC_SUCCESS)) {
684 				/* bypass STA mode group key setting before connected(ex:WEP) because bssid is not ready */
685 				goto bitmap_handle;
686 			}
687 
688 			addr = get_bssid(&adapter->mlmepriv);
689 		}
690 
691 		i = _rtw_camid_search(adapter, addr, kid);
692 		if (i >= 0) {
693 			/* Fix issue that pairwise and group key have same key id. Pairwise key first, group key can overwirte group only(ex: rekey) */
694 			if (sta || _rtw_camid_is_gk(adapter, i))
695 				cam_id = i;
696 			else
697 				DBG_871X_LEVEL(_drv_always_, FUNC_ADPT_FMT" group key id:%u the same key id as pairwise key\n"
698 					, FUNC_ADPT_ARG(adapter), kid);
699 			goto bitmap_handle;
700 		}
701 
702 		for (i = 4; i < TOTAL_CAM_ENTRY; i++)
703 			if (!(cam_ctl->bitmap & BIT(i)))
704 				break;
705 
706 		if (i == TOTAL_CAM_ENTRY) {
707 			if (sta)
708 				DBG_871X_LEVEL(_drv_always_, FUNC_ADPT_FMT" pairwise key with %pM id:%u no room\n"
709 				, FUNC_ADPT_ARG(adapter), MAC_ARG(sta->hwaddr), kid);
710 			else
711 				DBG_871X_LEVEL(_drv_always_, FUNC_ADPT_FMT" group key id:%u no room\n"
712 				, FUNC_ADPT_ARG(adapter), kid);
713 			rtw_warn_on(1);
714 			goto bitmap_handle;
715 		}
716 
717 		cam_id = i;
718 	}
719 
720 bitmap_handle:
721 	if (cam_id >= 0 && cam_id < 32)
722 		cam_ctl->bitmap |= BIT(cam_id);
723 
724 	spin_unlock_bh(&cam_ctl->lock);
725 
726 	return cam_id;
727 }
728 
729 void rtw_camid_free(struct adapter *adapter, u8 cam_id)
730 {
731 	struct dvobj_priv *dvobj = adapter_to_dvobj(adapter);
732 	struct cam_ctl_t *cam_ctl = &dvobj->cam_ctl;
733 
734 	spin_lock_bh(&cam_ctl->lock);
735 
736 	if (cam_id < TOTAL_CAM_ENTRY)
737 		cam_ctl->bitmap &= ~(BIT(cam_id));
738 
739 	spin_unlock_bh(&cam_ctl->lock);
740 }
741 
742 int allocate_fw_sta_entry(struct adapter *padapter)
743 {
744 	unsigned int mac_id;
745 	struct mlme_ext_priv *pmlmeext = &padapter->mlmeextpriv;
746 	struct mlme_ext_info *pmlmeinfo = &(pmlmeext->mlmext_info);
747 
748 	for (mac_id = IBSS_START_MAC_ID; mac_id < NUM_STA; mac_id++) {
749 		if (pmlmeinfo->FW_sta_info[mac_id].status == 0) {
750 			pmlmeinfo->FW_sta_info[mac_id].status = 1;
751 			pmlmeinfo->FW_sta_info[mac_id].retry = 0;
752 			break;
753 		}
754 	}
755 
756 	return mac_id;
757 }
758 
759 void flush_all_cam_entry(struct adapter *padapter)
760 {
761 	struct mlme_ext_priv *pmlmeext = &padapter->mlmeextpriv;
762 	struct mlme_ext_info *pmlmeinfo = &(pmlmeext->mlmext_info);
763 
764 	invalidate_cam_all(padapter);
765 	/* clear default key related key search setting */
766 	rtw_hal_set_hwreg(padapter, HW_VAR_SEC_DK_CFG, (u8 *)false);
767 
768 	memset((u8 *)(pmlmeinfo->FW_sta_info), 0, sizeof(pmlmeinfo->FW_sta_info));
769 }
770 
771 int WMM_param_handler(struct adapter *padapter, struct ndis_80211_var_ie *pIE)
772 {
773 	/* struct registry_priv *pregpriv = &padapter->registrypriv; */
774 	struct mlme_priv *pmlmepriv = &(padapter->mlmepriv);
775 	struct mlme_ext_priv *pmlmeext = &padapter->mlmeextpriv;
776 	struct mlme_ext_info *pmlmeinfo = &(pmlmeext->mlmext_info);
777 
778 	if (pmlmepriv->qospriv.qos_option == 0) {
779 		pmlmeinfo->WMM_enable = 0;
780 		return false;
781 	}
782 
783 	if (!memcmp(&(pmlmeinfo->WMM_param), (pIE->data + 6), sizeof(struct WMM_para_element)))
784 		return false;
785 	else
786 		memcpy(&(pmlmeinfo->WMM_param), (pIE->data + 6), sizeof(struct WMM_para_element));
787 
788 	pmlmeinfo->WMM_enable = 1;
789 	return true;
790 }
791 
792 void WMMOnAssocRsp(struct adapter *padapter)
793 {
794 	u8 ACI, ACM, AIFS, ECWMin, ECWMax, aSifsTime;
795 	u8 acm_mask;
796 	u16 TXOP;
797 	u32 acParm, i;
798 	u32 edca[4], inx[4];
799 	struct mlme_ext_priv *pmlmeext = &padapter->mlmeextpriv;
800 	struct mlme_ext_info *pmlmeinfo = &(pmlmeext->mlmext_info);
801 	struct xmit_priv *pxmitpriv = &padapter->xmitpriv;
802 	struct registry_priv *pregpriv = &padapter->registrypriv;
803 
804 	acm_mask = 0;
805 
806 	if (pmlmeext->cur_wireless_mode & WIRELESS_11_24N)
807 		aSifsTime = 16;
808 	else
809 		aSifsTime = 10;
810 
811 	if (pmlmeinfo->WMM_enable == 0) {
812 		padapter->mlmepriv.acm_mask = 0;
813 
814 		AIFS = aSifsTime + (2 * pmlmeinfo->slotTime);
815 
816 		if (pmlmeext->cur_wireless_mode & (WIRELESS_11G | WIRELESS_11A)) {
817 			ECWMin = 4;
818 			ECWMax = 10;
819 		} else if (pmlmeext->cur_wireless_mode & WIRELESS_11B) {
820 			ECWMin = 5;
821 			ECWMax = 10;
822 		} else {
823 			ECWMin = 4;
824 			ECWMax = 10;
825 		}
826 
827 		TXOP = 0;
828 		acParm = AIFS | (ECWMin << 8) | (ECWMax << 12) | (TXOP << 16);
829 		rtw_hal_set_hwreg(padapter, HW_VAR_AC_PARAM_BE, (u8 *)(&acParm));
830 		rtw_hal_set_hwreg(padapter, HW_VAR_AC_PARAM_BK, (u8 *)(&acParm));
831 		rtw_hal_set_hwreg(padapter, HW_VAR_AC_PARAM_VI, (u8 *)(&acParm));
832 
833 		ECWMin = 2;
834 		ECWMax = 3;
835 		TXOP = 0x2f;
836 		acParm = AIFS | (ECWMin << 8) | (ECWMax << 12) | (TXOP << 16);
837 		rtw_hal_set_hwreg(padapter, HW_VAR_AC_PARAM_VO, (u8 *)(&acParm));
838 	} else {
839 		edca[0] = edca[1] = edca[2] = edca[3] = 0;
840 
841 		for (i = 0; i < 4; i++) {
842 			ACI = (pmlmeinfo->WMM_param.ac_param[i].ACI_AIFSN >> 5) & 0x03;
843 			ACM = (pmlmeinfo->WMM_param.ac_param[i].ACI_AIFSN >> 4) & 0x01;
844 
845 			/* AIFS = AIFSN * slot time + SIFS - r2t phy delay */
846 			AIFS = (pmlmeinfo->WMM_param.ac_param[i].ACI_AIFSN & 0x0f) * pmlmeinfo->slotTime + aSifsTime;
847 
848 			ECWMin = (pmlmeinfo->WMM_param.ac_param[i].CW & 0x0f);
849 			ECWMax = (pmlmeinfo->WMM_param.ac_param[i].CW & 0xf0) >> 4;
850 			TXOP = le16_to_cpu(pmlmeinfo->WMM_param.ac_param[i].TXOP_limit);
851 
852 			acParm = AIFS | (ECWMin << 8) | (ECWMax << 12) | (TXOP << 16);
853 
854 			switch (ACI) {
855 			case 0x0:
856 				rtw_hal_set_hwreg(padapter, HW_VAR_AC_PARAM_BE, (u8 *)(&acParm));
857 				acm_mask |= (ACM ? BIT(1):0);
858 				edca[XMIT_BE_QUEUE] = acParm;
859 				break;
860 
861 			case 0x1:
862 				rtw_hal_set_hwreg(padapter, HW_VAR_AC_PARAM_BK, (u8 *)(&acParm));
863 				/* acm_mask |= (ACM? BIT(0):0); */
864 				edca[XMIT_BK_QUEUE] = acParm;
865 				break;
866 
867 			case 0x2:
868 				rtw_hal_set_hwreg(padapter, HW_VAR_AC_PARAM_VI, (u8 *)(&acParm));
869 				acm_mask |= (ACM ? BIT(2):0);
870 				edca[XMIT_VI_QUEUE] = acParm;
871 				break;
872 
873 			case 0x3:
874 				rtw_hal_set_hwreg(padapter, HW_VAR_AC_PARAM_VO, (u8 *)(&acParm));
875 				acm_mask |= (ACM ? BIT(3):0);
876 				edca[XMIT_VO_QUEUE] = acParm;
877 				break;
878 			}
879 
880 			DBG_871X("WMM(%x): %x, %x\n", ACI, ACM, acParm);
881 		}
882 
883 		if (padapter->registrypriv.acm_method == 1)
884 			rtw_hal_set_hwreg(padapter, HW_VAR_ACM_CTRL, (u8 *)(&acm_mask));
885 		else
886 			padapter->mlmepriv.acm_mask = acm_mask;
887 
888 		inx[0] = 0; inx[1] = 1; inx[2] = 2; inx[3] = 3;
889 
890 		if (pregpriv->wifi_spec == 1) {
891 			u32 j, tmp, change_inx = false;
892 
893 			/* entry indx: 0->vo, 1->vi, 2->be, 3->bk. */
894 			for (i = 0; i < 4; i++) {
895 				for (j = i+1; j < 4; j++) {
896 					/* compare CW and AIFS */
897 					if ((edca[j] & 0xFFFF) < (edca[i] & 0xFFFF)) {
898 						change_inx = true;
899 					} else if ((edca[j] & 0xFFFF) == (edca[i] & 0xFFFF)) {
900 						/* compare TXOP */
901 						if ((edca[j] >> 16) > (edca[i] >> 16))
902 							change_inx = true;
903 					}
904 
905 					if (change_inx) {
906 						tmp = edca[i];
907 						edca[i] = edca[j];
908 						edca[j] = tmp;
909 
910 						tmp = inx[i];
911 						inx[i] = inx[j];
912 						inx[j] = tmp;
913 
914 						change_inx = false;
915 					}
916 				}
917 			}
918 		}
919 
920 		for (i = 0; i < 4; i++) {
921 			pxmitpriv->wmm_para_seq[i] = inx[i];
922 			DBG_871X("wmm_para_seq(%d): %d\n", i, pxmitpriv->wmm_para_seq[i]);
923 		}
924 	}
925 }
926 
927 static void bwmode_update_check(struct adapter *padapter, struct ndis_80211_var_ie *pIE)
928 {
929 	unsigned char  new_bwmode;
930 	unsigned char  new_ch_offset;
931 	struct HT_info_element	 *pHT_info;
932 	struct mlme_priv *pmlmepriv = &(padapter->mlmepriv);
933 	struct mlme_ext_priv *pmlmeext = &padapter->mlmeextpriv;
934 	struct mlme_ext_info *pmlmeinfo = &(pmlmeext->mlmext_info);
935 	struct registry_priv *pregistrypriv = &padapter->registrypriv;
936 	struct ht_priv *phtpriv = &pmlmepriv->htpriv;
937 	u8 cbw40_enable = 0;
938 
939 	if (!pIE)
940 		return;
941 
942 	if (phtpriv->ht_option == false)
943 		return;
944 
945 	if (pmlmeext->cur_bwmode >= CHANNEL_WIDTH_80)
946 		return;
947 
948 	if (pIE->Length > sizeof(struct HT_info_element))
949 		return;
950 
951 	pHT_info = (struct HT_info_element *)pIE->data;
952 
953 	if (pmlmeext->cur_channel > 14) {
954 		if ((pregistrypriv->bw_mode & 0xf0) > 0)
955 			cbw40_enable = 1;
956 	} else {
957 		if ((pregistrypriv->bw_mode & 0x0f) > 0)
958 			cbw40_enable = 1;
959 	}
960 
961 	if ((pHT_info->infos[0] & BIT(2)) && cbw40_enable) {
962 		new_bwmode = CHANNEL_WIDTH_40;
963 
964 		switch (pHT_info->infos[0] & 0x3) {
965 		case 1:
966 			new_ch_offset = HAL_PRIME_CHNL_OFFSET_LOWER;
967 			break;
968 
969 		case 3:
970 			new_ch_offset = HAL_PRIME_CHNL_OFFSET_UPPER;
971 			break;
972 
973 		default:
974 			new_bwmode = CHANNEL_WIDTH_20;
975 			new_ch_offset = HAL_PRIME_CHNL_OFFSET_DONT_CARE;
976 			break;
977 		}
978 	} else {
979 		new_bwmode = CHANNEL_WIDTH_20;
980 		new_ch_offset = HAL_PRIME_CHNL_OFFSET_DONT_CARE;
981 	}
982 
983 	if ((new_bwmode != pmlmeext->cur_bwmode) || (new_ch_offset != pmlmeext->cur_ch_offset)) {
984 		pmlmeinfo->bwmode_updated = true;
985 
986 		pmlmeext->cur_bwmode = new_bwmode;
987 		pmlmeext->cur_ch_offset = new_ch_offset;
988 
989 		/* update HT info also */
990 		HT_info_handler(padapter, pIE);
991 	} else {
992 		pmlmeinfo->bwmode_updated = false;
993 	}
994 
995 	if (true == pmlmeinfo->bwmode_updated) {
996 		struct sta_info *psta;
997 		struct wlan_bssid_ex	*cur_network = &(pmlmeinfo->network);
998 		struct sta_priv *pstapriv = &padapter->stapriv;
999 
1000 		/* set_channel_bwmode(padapter, pmlmeext->cur_channel, pmlmeext->cur_ch_offset, pmlmeext->cur_bwmode); */
1001 
1002 		/* update ap's stainfo */
1003 		psta = rtw_get_stainfo(pstapriv, cur_network->MacAddress);
1004 		if (psta) {
1005 			struct ht_priv *phtpriv_sta = &psta->htpriv;
1006 
1007 			if (phtpriv_sta->ht_option) {
1008 				/*  bwmode */
1009 				psta->bw_mode = pmlmeext->cur_bwmode;
1010 				phtpriv_sta->ch_offset = pmlmeext->cur_ch_offset;
1011 			} else {
1012 				psta->bw_mode = CHANNEL_WIDTH_20;
1013 				phtpriv_sta->ch_offset = HAL_PRIME_CHNL_OFFSET_DONT_CARE;
1014 			}
1015 
1016 			rtw_dm_ra_mask_wk_cmd(padapter, (u8 *)psta);
1017 		}
1018 	}
1019 }
1020 
1021 void HT_caps_handler(struct adapter *padapter, struct ndis_80211_var_ie *pIE)
1022 {
1023 	unsigned int	i;
1024 	u8 rf_type;
1025 	u8 max_AMPDU_len, min_MPDU_spacing;
1026 	u8 cur_ldpc_cap = 0, cur_stbc_cap = 0;
1027 	struct mlme_ext_priv *pmlmeext = &padapter->mlmeextpriv;
1028 	struct mlme_ext_info *pmlmeinfo = &(pmlmeext->mlmext_info);
1029 	struct mlme_priv *pmlmepriv = &padapter->mlmepriv;
1030 	struct ht_priv *phtpriv = &pmlmepriv->htpriv;
1031 
1032 	if (!pIE)
1033 		return;
1034 
1035 	if (phtpriv->ht_option == false)
1036 		return;
1037 
1038 	pmlmeinfo->HT_caps_enable = 1;
1039 
1040 	for (i = 0; i < (pIE->Length); i++) {
1041 		if (i != 2) {
1042 			/* Commented by Albert 2010/07/12 */
1043 			/* Got the endian issue here. */
1044 			pmlmeinfo->HT_caps.u.HT_cap[i] &= (pIE->data[i]);
1045 		} else {
1046 			/* modify from  fw by Thomas 2010/11/17 */
1047 			if ((pmlmeinfo->HT_caps.u.HT_cap_element.AMPDU_para & 0x3) > (pIE->data[i] & 0x3))
1048 				max_AMPDU_len = (pIE->data[i] & 0x3);
1049 			else
1050 				max_AMPDU_len = (pmlmeinfo->HT_caps.u.HT_cap_element.AMPDU_para & 0x3);
1051 
1052 			if ((pmlmeinfo->HT_caps.u.HT_cap_element.AMPDU_para & 0x1c) > (pIE->data[i] & 0x1c))
1053 				min_MPDU_spacing = (pmlmeinfo->HT_caps.u.HT_cap_element.AMPDU_para & 0x1c);
1054 			else
1055 				min_MPDU_spacing = (pIE->data[i] & 0x1c);
1056 
1057 			pmlmeinfo->HT_caps.u.HT_cap_element.AMPDU_para = max_AMPDU_len | min_MPDU_spacing;
1058 		}
1059 	}
1060 	rtw_hal_get_hwreg(padapter, HW_VAR_RF_TYPE, (u8 *)(&rf_type));
1061 
1062 	/* update the MCS set */
1063 	for (i = 0; i < 16; i++)
1064 		pmlmeinfo->HT_caps.u.HT_cap_element.MCS_rate[i] &= pmlmeext->default_supported_mcs_set[i];
1065 
1066 	/* update the MCS rates */
1067 	switch (rf_type) {
1068 	case RF_1T1R:
1069 	case RF_1T2R:
1070 		set_mcs_rate_by_mask(pmlmeinfo->HT_caps.u.HT_cap_element.MCS_rate, MCS_RATE_1R);
1071 		break;
1072 	case RF_2T2R:
1073 	default:
1074 		set_mcs_rate_by_mask(pmlmeinfo->HT_caps.u.HT_cap_element.MCS_rate, MCS_RATE_2R);
1075 	}
1076 
1077 	if (check_fwstate(pmlmepriv, WIFI_AP_STATE)) {
1078 		/*  Config STBC setting */
1079 		if (TEST_FLAG(phtpriv->stbc_cap, STBC_HT_ENABLE_TX) && GET_HT_CAPABILITY_ELE_TX_STBC(pIE->data)) {
1080 			SET_FLAG(cur_stbc_cap, STBC_HT_ENABLE_TX);
1081 			DBG_871X("Enable HT Tx STBC !\n");
1082 		}
1083 		phtpriv->stbc_cap = cur_stbc_cap;
1084 	} else {
1085 		/*  Config LDPC Coding Capability */
1086 		if (TEST_FLAG(phtpriv->ldpc_cap, LDPC_HT_ENABLE_TX) && GET_HT_CAPABILITY_ELE_LDPC_CAP(pIE->data)) {
1087 			SET_FLAG(cur_ldpc_cap, (LDPC_HT_ENABLE_TX | LDPC_HT_CAP_TX));
1088 			DBG_871X("Enable HT Tx LDPC!\n");
1089 		}
1090 		phtpriv->ldpc_cap = cur_ldpc_cap;
1091 
1092 		/*  Config STBC setting */
1093 		if (TEST_FLAG(phtpriv->stbc_cap, STBC_HT_ENABLE_TX) && GET_HT_CAPABILITY_ELE_RX_STBC(pIE->data)) {
1094 			SET_FLAG(cur_stbc_cap, (STBC_HT_ENABLE_TX | STBC_HT_CAP_TX));
1095 			DBG_871X("Enable HT Tx STBC!\n");
1096 		}
1097 		phtpriv->stbc_cap = cur_stbc_cap;
1098 	}
1099 }
1100 
1101 void HT_info_handler(struct adapter *padapter, struct ndis_80211_var_ie *pIE)
1102 {
1103 	struct mlme_ext_priv *pmlmeext = &padapter->mlmeextpriv;
1104 	struct mlme_ext_info *pmlmeinfo = &(pmlmeext->mlmext_info);
1105 	struct mlme_priv *pmlmepriv = &padapter->mlmepriv;
1106 	struct ht_priv *phtpriv = &pmlmepriv->htpriv;
1107 
1108 	if (!pIE)
1109 		return;
1110 
1111 	if (phtpriv->ht_option == false)
1112 		return;
1113 
1114 	if (pIE->Length > sizeof(struct HT_info_element))
1115 		return;
1116 
1117 	pmlmeinfo->HT_info_enable = 1;
1118 	memcpy(&(pmlmeinfo->HT_info), pIE->data, pIE->Length);
1119 }
1120 
1121 void HTOnAssocRsp(struct adapter *padapter)
1122 {
1123 	unsigned char max_AMPDU_len;
1124 	unsigned char min_MPDU_spacing;
1125 	/* struct registry_priv  *pregpriv = &padapter->registrypriv; */
1126 	struct mlme_ext_priv *pmlmeext = &padapter->mlmeextpriv;
1127 	struct mlme_ext_info *pmlmeinfo = &(pmlmeext->mlmext_info);
1128 
1129 	DBG_871X("%s\n", __func__);
1130 
1131 	if ((pmlmeinfo->HT_info_enable) && (pmlmeinfo->HT_caps_enable)) {
1132 		pmlmeinfo->HT_enable = 1;
1133 	} else {
1134 		pmlmeinfo->HT_enable = 0;
1135 		/* set_channel_bwmode(padapter, pmlmeext->cur_channel, pmlmeext->cur_ch_offset, pmlmeext->cur_bwmode); */
1136 		return;
1137 	}
1138 
1139 	/* handle A-MPDU parameter field */
1140 	/*
1141 		AMPDU_para [1:0]:Max AMPDU Len => 0:8k , 1:16k, 2:32k, 3:64k
1142 		AMPDU_para [4:2]:Min MPDU Start Spacing
1143 	*/
1144 	max_AMPDU_len = pmlmeinfo->HT_caps.u.HT_cap_element.AMPDU_para & 0x03;
1145 
1146 	min_MPDU_spacing = (pmlmeinfo->HT_caps.u.HT_cap_element.AMPDU_para & 0x1c) >> 2;
1147 
1148 	rtw_hal_set_hwreg(padapter, HW_VAR_AMPDU_MIN_SPACE, (u8 *)(&min_MPDU_spacing));
1149 
1150 	rtw_hal_set_hwreg(padapter, HW_VAR_AMPDU_FACTOR, (u8 *)(&max_AMPDU_len));
1151 }
1152 
1153 void ERP_IE_handler(struct adapter *padapter, struct ndis_80211_var_ie *pIE)
1154 {
1155 	struct mlme_ext_priv *pmlmeext = &padapter->mlmeextpriv;
1156 	struct mlme_ext_info *pmlmeinfo = &(pmlmeext->mlmext_info);
1157 
1158 	if (pIE->Length > 1)
1159 		return;
1160 
1161 	pmlmeinfo->ERP_enable = 1;
1162 	memcpy(&(pmlmeinfo->ERP_IE), pIE->data, pIE->Length);
1163 }
1164 
1165 void VCS_update(struct adapter *padapter, struct sta_info *psta)
1166 {
1167 	struct registry_priv  *pregpriv = &padapter->registrypriv;
1168 	struct mlme_ext_priv *pmlmeext = &padapter->mlmeextpriv;
1169 	struct mlme_ext_info *pmlmeinfo = &(pmlmeext->mlmext_info);
1170 
1171 	switch (pregpriv->vrtl_carrier_sense) {/* 0:off 1:on 2:auto */
1172 	case 0: /* off */
1173 		psta->rtsen = 0;
1174 		psta->cts2self = 0;
1175 		break;
1176 
1177 	case 1: /* on */
1178 		if (pregpriv->vcs_type == 1) { /* 1:RTS/CTS 2:CTS to self */
1179 			psta->rtsen = 1;
1180 			psta->cts2self = 0;
1181 		} else {
1182 			psta->rtsen = 0;
1183 			psta->cts2self = 1;
1184 		}
1185 		break;
1186 
1187 	case 2: /* auto */
1188 	default:
1189 		if ((pmlmeinfo->ERP_enable) && (pmlmeinfo->ERP_IE & BIT(1))) {
1190 			if (pregpriv->vcs_type == 1) {
1191 				psta->rtsen = 1;
1192 				psta->cts2self = 0;
1193 			} else {
1194 				psta->rtsen = 0;
1195 				psta->cts2self = 1;
1196 			}
1197 		} else {
1198 			psta->rtsen = 0;
1199 			psta->cts2self = 0;
1200 		}
1201 		break;
1202 	}
1203 }
1204 
1205 void update_ldpc_stbc_cap(struct sta_info *psta)
1206 {
1207 	if (psta->htpriv.ht_option) {
1208 		if (TEST_FLAG(psta->htpriv.ldpc_cap, LDPC_HT_ENABLE_TX))
1209 			psta->ldpc = 1;
1210 
1211 		if (TEST_FLAG(psta->htpriv.stbc_cap, STBC_HT_ENABLE_TX))
1212 			psta->stbc = 1;
1213 	} else {
1214 		psta->ldpc = 0;
1215 		psta->stbc = 0;
1216 	}
1217 }
1218 
1219 int rtw_check_bcn_info(struct adapter *Adapter, u8 *pframe, u32 packet_len)
1220 {
1221 	unsigned int len;
1222 	unsigned char *p;
1223 	unsigned short	val16, subtype;
1224 	struct wlan_network *cur_network = &(Adapter->mlmepriv.cur_network);
1225 	/* u8 wpa_ie[255], rsn_ie[255]; */
1226 	u16 wpa_len = 0, rsn_len = 0;
1227 	u8 encryp_protocol = 0;
1228 	struct wlan_bssid_ex *bssid;
1229 	int group_cipher = 0, pairwise_cipher = 0, is_8021x = 0;
1230 	unsigned char *pbuf;
1231 	u32 wpa_ielen = 0;
1232 	u8 *pbssid = GetAddr3Ptr(pframe);
1233 	struct HT_info_element *pht_info = NULL;
1234 	struct ieee80211_ht_cap *pht_cap = NULL;
1235 	u32 bcn_channel;
1236 	unsigned short	ht_cap_info;
1237 	unsigned char ht_info_infos_0;
1238 	struct mlme_priv *pmlmepriv = &Adapter->mlmepriv;
1239 	int ssid_len;
1240 
1241 	if (is_client_associated_to_ap(Adapter) == false)
1242 		return true;
1243 
1244 	len = packet_len - sizeof(struct ieee80211_hdr_3addr);
1245 
1246 	if (len > MAX_IE_SZ) {
1247 		DBG_871X("%s IE too long for survey event\n", __func__);
1248 		return _FAIL;
1249 	}
1250 
1251 	if (memcmp(cur_network->network.MacAddress, pbssid, 6)) {
1252 		DBG_871X("Oops: rtw_check_network_encrypt linked but recv other bssid bcn %pM %pM\n",
1253 				MAC_ARG(pbssid), MAC_ARG(cur_network->network.MacAddress));
1254 		return true;
1255 	}
1256 
1257 	bssid = rtw_zmalloc(sizeof(struct wlan_bssid_ex));
1258 	if (!bssid) {
1259 		DBG_871X("%s rtw_zmalloc fail !!!\n", __func__);
1260 		return true;
1261 	}
1262 
1263 	if ((pmlmepriv->timeBcnInfoChkStart != 0) && (jiffies_to_msecs(jiffies - pmlmepriv->timeBcnInfoChkStart) > DISCONNECT_BY_CHK_BCN_FAIL_OBSERV_PERIOD_IN_MS)) {
1264 		pmlmepriv->timeBcnInfoChkStart = 0;
1265 		pmlmepriv->NumOfBcnInfoChkFail = 0;
1266 	}
1267 
1268 	subtype = GetFrameSubType(pframe) >> 4;
1269 
1270 	if (subtype == WIFI_BEACON)
1271 		bssid->Reserved[0] = 1;
1272 
1273 	bssid->Length = sizeof(struct wlan_bssid_ex) - MAX_IE_SZ + len;
1274 
1275 	/* below is to copy the information element */
1276 	bssid->IELength = len;
1277 	memcpy(bssid->IEs, (pframe + sizeof(struct ieee80211_hdr_3addr)), bssid->IELength);
1278 
1279 	/* check bw and channel offset */
1280 	/* parsing HT_CAP_IE */
1281 	p = rtw_get_ie(bssid->IEs + _FIXED_IE_LENGTH_, WLAN_EID_HT_CAPABILITY, &len, bssid->IELength - _FIXED_IE_LENGTH_);
1282 	if (p && len > 0) {
1283 			pht_cap = (struct ieee80211_ht_cap *)(p + 2);
1284 			ht_cap_info = le16_to_cpu(pht_cap->cap_info);
1285 	} else {
1286 			ht_cap_info = 0;
1287 	}
1288 	/* parsing HT_INFO_IE */
1289 	p = rtw_get_ie(bssid->IEs + _FIXED_IE_LENGTH_, WLAN_EID_HT_OPERATION, &len, bssid->IELength - _FIXED_IE_LENGTH_);
1290 	if (p && len > 0) {
1291 			pht_info = (struct HT_info_element *)(p + 2);
1292 			ht_info_infos_0 = pht_info->infos[0];
1293 	} else {
1294 			ht_info_infos_0 = 0;
1295 	}
1296 	if (ht_cap_info != cur_network->BcnInfo.ht_cap_info ||
1297 		((ht_info_infos_0&0x03) != (cur_network->BcnInfo.ht_info_infos_0&0x03))) {
1298 			DBG_871X("%s bcn now: ht_cap_info:%x ht_info_infos_0:%x\n", __func__,
1299 							ht_cap_info, ht_info_infos_0);
1300 			DBG_871X("%s bcn link: ht_cap_info:%x ht_info_infos_0:%x\n", __func__,
1301 							cur_network->BcnInfo.ht_cap_info, cur_network->BcnInfo.ht_info_infos_0);
1302 			DBG_871X("%s bw mode change\n", __func__);
1303 			{
1304 				/* bcn_info_update */
1305 				cur_network->BcnInfo.ht_cap_info = ht_cap_info;
1306 				cur_network->BcnInfo.ht_info_infos_0 = ht_info_infos_0;
1307 				/* to do : need to check that whether modify related register of BB or not */
1308 			}
1309 			/* goto _mismatch; */
1310 	}
1311 
1312 	/* Checking for channel */
1313 	p = rtw_get_ie(bssid->IEs + _FIXED_IE_LENGTH_, WLAN_EID_DS_PARAMS, &len, bssid->IELength - _FIXED_IE_LENGTH_);
1314 	if (p) {
1315 			bcn_channel = *(p + 2);
1316 	} else {/* In 5G, some ap do not have DSSET IE checking HT info for channel */
1317 			rtw_get_ie(bssid->IEs + _FIXED_IE_LENGTH_, WLAN_EID_HT_OPERATION, &len, bssid->IELength - _FIXED_IE_LENGTH_);
1318 			if (pht_info) {
1319 					bcn_channel = pht_info->primary_channel;
1320 			} else { /* we don't find channel IE, so don't check it */
1321 					/* DBG_871X("Oops: %s we don't find channel IE, so don't check it\n", __func__); */
1322 					bcn_channel = Adapter->mlmeextpriv.cur_channel;
1323 			}
1324 	}
1325 	if (bcn_channel != Adapter->mlmeextpriv.cur_channel) {
1326 			DBG_871X("%s beacon channel:%d cur channel:%d disconnect\n", __func__,
1327 						   bcn_channel, Adapter->mlmeextpriv.cur_channel);
1328 			goto _mismatch;
1329 	}
1330 
1331 	/* checking SSID */
1332 	ssid_len = 0;
1333 	p = rtw_get_ie(bssid->IEs + _FIXED_IE_LENGTH_, WLAN_EID_SSID, &len, bssid->IELength - _FIXED_IE_LENGTH_);
1334 	if (p) {
1335 		ssid_len = *(p + 1);
1336 		if (ssid_len > NDIS_802_11_LENGTH_SSID)
1337 			ssid_len = 0;
1338 	}
1339 	memcpy(bssid->Ssid.Ssid, (p + 2), ssid_len);
1340 	bssid->Ssid.SsidLength = ssid_len;
1341 
1342 	RT_TRACE(_module_rtl871x_mlme_c_, _drv_info_, ("%s bssid.Ssid.Ssid:%s bssid.Ssid.SsidLength:%d "
1343 				"cur_network->network.Ssid.Ssid:%s len:%d\n", __func__, bssid->Ssid.Ssid,
1344 				bssid->Ssid.SsidLength, cur_network->network.Ssid.Ssid,
1345 				cur_network->network.Ssid.SsidLength));
1346 
1347 	if (memcmp(bssid->Ssid.Ssid, cur_network->network.Ssid.Ssid, 32) ||
1348 			bssid->Ssid.SsidLength != cur_network->network.Ssid.SsidLength) {
1349 		if (bssid->Ssid.Ssid[0] != '\0' && bssid->Ssid.SsidLength != 0) { /* not hidden ssid */
1350 			DBG_871X("%s(), SSID is not match\n", __func__);
1351 			goto _mismatch;
1352 		}
1353 	}
1354 
1355 	/* check encryption info */
1356 	val16 = rtw_get_capability((struct wlan_bssid_ex *)bssid);
1357 
1358 	if (val16 & BIT(4))
1359 		bssid->Privacy = 1;
1360 	else
1361 		bssid->Privacy = 0;
1362 
1363 	RT_TRACE(_module_rtl871x_mlme_c_, _drv_info_,
1364 			("%s(): cur_network->network.Privacy is %d, bssid.Privacy is %d\n",
1365 			 __func__, cur_network->network.Privacy, bssid->Privacy));
1366 	if (cur_network->network.Privacy != bssid->Privacy) {
1367 		DBG_871X("%s(), privacy is not match\n", __func__);
1368 		goto _mismatch;
1369 	}
1370 
1371 	rtw_get_sec_ie(bssid->IEs, bssid->IELength, NULL, &rsn_len, NULL, &wpa_len);
1372 
1373 	if (rsn_len > 0) {
1374 		encryp_protocol = ENCRYP_PROTOCOL_WPA2;
1375 	} else if (wpa_len > 0) {
1376 		encryp_protocol = ENCRYP_PROTOCOL_WPA;
1377 	} else {
1378 		if (bssid->Privacy)
1379 			encryp_protocol = ENCRYP_PROTOCOL_WEP;
1380 	}
1381 
1382 	if (cur_network->BcnInfo.encryp_protocol != encryp_protocol) {
1383 		DBG_871X("%s(): enctyp is not match\n", __func__);
1384 		goto _mismatch;
1385 	}
1386 
1387 	if (encryp_protocol == ENCRYP_PROTOCOL_WPA || encryp_protocol == ENCRYP_PROTOCOL_WPA2) {
1388 		pbuf = rtw_get_wpa_ie(&bssid->IEs[12], &wpa_ielen, bssid->IELength-12);
1389 		if (pbuf && (wpa_ielen > 0)) {
1390 			if (_SUCCESS == rtw_parse_wpa_ie(pbuf, wpa_ielen+2, &group_cipher, &pairwise_cipher, &is_8021x)) {
1391 				RT_TRACE(_module_rtl871x_mlme_c_, _drv_info_,
1392 						("%s pnetwork->pairwise_cipher: %d, group_cipher is %d, is_8021x is %d\n", __func__,
1393 						 pairwise_cipher, group_cipher, is_8021x));
1394 			}
1395 		} else {
1396 			pbuf = rtw_get_wpa2_ie(&bssid->IEs[12], &wpa_ielen, bssid->IELength-12);
1397 
1398 			if (pbuf && (wpa_ielen > 0)) {
1399 				if (_SUCCESS == rtw_parse_wpa2_ie(pbuf, wpa_ielen+2, &group_cipher, &pairwise_cipher, &is_8021x)) {
1400 					RT_TRACE(_module_rtl871x_mlme_c_, _drv_info_,
1401 							("%s pnetwork->pairwise_cipher: %d, pnetwork->group_cipher is %d, is_802x is %d\n",
1402 							 __func__, pairwise_cipher, group_cipher, is_8021x));
1403 				}
1404 			}
1405 		}
1406 
1407 		RT_TRACE(_module_rtl871x_mlme_c_, _drv_err_,
1408 				("%s cur_network->group_cipher is %d: %d\n", __func__, cur_network->BcnInfo.group_cipher, group_cipher));
1409 		if (pairwise_cipher != cur_network->BcnInfo.pairwise_cipher || group_cipher != cur_network->BcnInfo.group_cipher) {
1410 			DBG_871X("%s pairwise_cipher(%x:%x) or group_cipher(%x:%x) is not match\n", __func__,
1411 					pairwise_cipher, cur_network->BcnInfo.pairwise_cipher,
1412 					group_cipher, cur_network->BcnInfo.group_cipher);
1413 			goto _mismatch;
1414 		}
1415 
1416 		if (is_8021x != cur_network->BcnInfo.is_8021x) {
1417 			DBG_871X("%s authentication is not match\n", __func__);
1418 			goto _mismatch;
1419 		}
1420 	}
1421 
1422 	kfree(bssid);
1423 	return _SUCCESS;
1424 
1425 _mismatch:
1426 	kfree(bssid);
1427 
1428 	if (pmlmepriv->NumOfBcnInfoChkFail == 0)
1429 		pmlmepriv->timeBcnInfoChkStart = jiffies;
1430 
1431 	pmlmepriv->NumOfBcnInfoChkFail++;
1432 	DBG_871X("%s by %s - NumOfChkFail = %d (SeqNum of this Beacon frame = %d).\n", __func__, ADPT_ARG(Adapter), pmlmepriv->NumOfBcnInfoChkFail, GetSequence(pframe));
1433 
1434 	if ((pmlmepriv->timeBcnInfoChkStart != 0) && (jiffies_to_msecs(jiffies - pmlmepriv->timeBcnInfoChkStart) <= DISCONNECT_BY_CHK_BCN_FAIL_OBSERV_PERIOD_IN_MS)
1435 		&& (pmlmepriv->NumOfBcnInfoChkFail >= DISCONNECT_BY_CHK_BCN_FAIL_THRESHOLD)) {
1436 		DBG_871X("%s by %s - NumOfChkFail = %d >= threshold : %d (in %d ms), return FAIL.\n", __func__, ADPT_ARG(Adapter), pmlmepriv->NumOfBcnInfoChkFail,
1437 			DISCONNECT_BY_CHK_BCN_FAIL_THRESHOLD, jiffies_to_msecs(jiffies - pmlmepriv->timeBcnInfoChkStart));
1438 		pmlmepriv->timeBcnInfoChkStart = 0;
1439 		pmlmepriv->NumOfBcnInfoChkFail = 0;
1440 		return _FAIL;
1441 	}
1442 
1443 	return _SUCCESS;
1444 }
1445 
1446 void update_beacon_info(struct adapter *padapter, u8 *pframe, uint pkt_len, struct sta_info *psta)
1447 {
1448 	unsigned int i;
1449 	unsigned int len;
1450 	struct ndis_80211_var_ie *pIE;
1451 
1452 	len = pkt_len - (_BEACON_IE_OFFSET_ + WLAN_HDR_A3_LEN);
1453 
1454 	for (i = 0; i < len;) {
1455 		pIE = (struct ndis_80211_var_ie *)(pframe + (_BEACON_IE_OFFSET_ + WLAN_HDR_A3_LEN) + i);
1456 
1457 		switch (pIE->ElementID) {
1458 		case WLAN_EID_VENDOR_SPECIFIC:
1459 			/* to update WMM parameter set while receiving beacon */
1460 			if (!memcmp(pIE->data, WMM_PARA_OUI, 6) && pIE->Length == WLAN_WMM_LEN)	/* WMM */
1461 				if (WMM_param_handler(padapter, pIE))
1462 					report_wmm_edca_update(padapter);
1463 
1464 			break;
1465 
1466 		case WLAN_EID_HT_OPERATION:	/* HT info */
1467 			/* HT_info_handler(padapter, pIE); */
1468 			bwmode_update_check(padapter, pIE);
1469 			break;
1470 
1471 		case WLAN_EID_ERP_INFO:
1472 			ERP_IE_handler(padapter, pIE);
1473 			VCS_update(padapter, psta);
1474 			break;
1475 
1476 		default:
1477 			break;
1478 		}
1479 
1480 		i += (pIE->Length + 2);
1481 	}
1482 }
1483 
1484 unsigned int is_ap_in_tkip(struct adapter *padapter)
1485 {
1486 	u32 i;
1487 	struct ndis_80211_var_ie *pIE;
1488 	struct mlme_ext_priv *pmlmeext = &padapter->mlmeextpriv;
1489 	struct mlme_ext_info *pmlmeinfo = &(pmlmeext->mlmext_info);
1490 	struct wlan_bssid_ex		*cur_network = &(pmlmeinfo->network);
1491 
1492 	if (rtw_get_capability((struct wlan_bssid_ex *)cur_network) & WLAN_CAPABILITY_PRIVACY) {
1493 		for (i = sizeof(struct ndis_802_11_fix_ie); i < pmlmeinfo->network.IELength;) {
1494 			pIE = (struct ndis_80211_var_ie *)(pmlmeinfo->network.IEs + i);
1495 
1496 			switch (pIE->ElementID) {
1497 			case WLAN_EID_VENDOR_SPECIFIC:
1498 				if ((!memcmp(pIE->data, RTW_WPA_OUI, 4)) && (!memcmp((pIE->data + 12), WPA_TKIP_CIPHER, 4)))
1499 					return true;
1500 
1501 				break;
1502 
1503 			case WLAN_EID_RSN:
1504 				if (!memcmp((pIE->data + 8), RSN_TKIP_CIPHER, 4))
1505 					return true;
1506 				break;
1507 
1508 			default:
1509 				break;
1510 			}
1511 
1512 			i += (pIE->Length + 2);
1513 		}
1514 
1515 		return false;
1516 	} else {
1517 		return false;
1518 	}
1519 }
1520 
1521 int support_short_GI(struct adapter *padapter, struct HT_caps_element *pHT_caps, u8 bwmode)
1522 {
1523 	unsigned char bit_offset;
1524 	struct mlme_ext_priv *pmlmeext = &padapter->mlmeextpriv;
1525 	struct mlme_ext_info *pmlmeinfo = &(pmlmeext->mlmext_info);
1526 
1527 	if (!(pmlmeinfo->HT_enable))
1528 		return _FAIL;
1529 
1530 	bit_offset = (bwmode & CHANNEL_WIDTH_40) ? 6 : 5;
1531 
1532 	if (le16_to_cpu(pHT_caps->u.HT_cap_element.HT_caps_info) & (0x1 << bit_offset))
1533 		return _SUCCESS;
1534 	else
1535 		return _FAIL;
1536 }
1537 
1538 unsigned char get_highest_rate_idx(u32 mask)
1539 {
1540 	int i;
1541 	unsigned char rate_idx = 0;
1542 
1543 	for (i = 31; i >= 0; i--) {
1544 		if (mask & BIT(i)) {
1545 			rate_idx = i;
1546 			break;
1547 		}
1548 	}
1549 
1550 	return rate_idx;
1551 }
1552 
1553 void Update_RA_Entry(struct adapter *padapter, struct sta_info *psta)
1554 {
1555 	rtw_hal_update_ra_mask(psta, 0);
1556 }
1557 
1558 void set_sta_rate(struct adapter *padapter, struct sta_info *psta)
1559 {
1560 	/* rate adaptive */
1561 	Update_RA_Entry(padapter, psta);
1562 }
1563 
1564 unsigned char check_assoc_AP(u8 *pframe, uint len)
1565 {
1566 	unsigned int	i;
1567 	struct ndis_80211_var_ie *pIE;
1568 
1569 	for (i = sizeof(struct ndis_802_11_fix_ie); i < len;) {
1570 		pIE = (struct ndis_80211_var_ie *)(pframe + i);
1571 
1572 		switch (pIE->ElementID) {
1573 		case WLAN_EID_VENDOR_SPECIFIC:
1574 			if ((!memcmp(pIE->data, ARTHEROS_OUI1, 3)) || (!memcmp(pIE->data, ARTHEROS_OUI2, 3))) {
1575 				DBG_871X("link to Artheros AP\n");
1576 				return HT_IOT_PEER_ATHEROS;
1577 			} else if ((!memcmp(pIE->data, BROADCOM_OUI1, 3)) ||
1578 				   (!memcmp(pIE->data, BROADCOM_OUI2, 3)) ||
1579 				   (!memcmp(pIE->data, BROADCOM_OUI3, 3))) {
1580 				DBG_871X("link to Broadcom AP\n");
1581 				return HT_IOT_PEER_BROADCOM;
1582 			} else if (!memcmp(pIE->data, MARVELL_OUI, 3)) {
1583 				DBG_871X("link to Marvell AP\n");
1584 				return HT_IOT_PEER_MARVELL;
1585 			} else if (!memcmp(pIE->data, RALINK_OUI, 3)) {
1586 				DBG_871X("link to Ralink AP\n");
1587 				return HT_IOT_PEER_RALINK;
1588 			} else if (!memcmp(pIE->data, CISCO_OUI, 3)) {
1589 				DBG_871X("link to Cisco AP\n");
1590 				return HT_IOT_PEER_CISCO;
1591 			} else if (!memcmp(pIE->data, REALTEK_OUI, 3)) {
1592 				u32 Vender = HT_IOT_PEER_REALTEK;
1593 
1594 				if (pIE->Length >= 5) {
1595 					if (pIE->data[4] == 1)
1596 						/* if (pIE->data[5] & RT_HT_CAP_USE_LONG_PREAMBLE) */
1597 						/* bssDesc->BssHT.RT2RT_HT_Mode |= RT_HT_CAP_USE_LONG_PREAMBLE; */
1598 						if (pIE->data[5] & RT_HT_CAP_USE_92SE)
1599 							/* bssDesc->BssHT.RT2RT_HT_Mode |= RT_HT_CAP_USE_92SE; */
1600 							Vender = HT_IOT_PEER_REALTEK_92SE;
1601 
1602 					if (pIE->data[5] & RT_HT_CAP_USE_SOFTAP)
1603 						Vender = HT_IOT_PEER_REALTEK_SOFTAP;
1604 
1605 					if (pIE->data[4] == 2) {
1606 						if (pIE->data[6] & RT_HT_CAP_USE_JAGUAR_BCUT) {
1607 							Vender = HT_IOT_PEER_REALTEK_JAGUAR_BCUTAP;
1608 							DBG_871X("link to Realtek JAGUAR_BCUTAP\n");
1609 						}
1610 						if (pIE->data[6] & RT_HT_CAP_USE_JAGUAR_CCUT) {
1611 							Vender = HT_IOT_PEER_REALTEK_JAGUAR_CCUTAP;
1612 							DBG_871X("link to Realtek JAGUAR_CCUTAP\n");
1613 						}
1614 					}
1615 				}
1616 
1617 				DBG_871X("link to Realtek AP\n");
1618 				return Vender;
1619 			} else if (!memcmp(pIE->data, AIRGOCAP_OUI, 3)) {
1620 				DBG_871X("link to Airgo Cap\n");
1621 				return HT_IOT_PEER_AIRGO;
1622 			} else {
1623 				break;
1624 			}
1625 
1626 		default:
1627 			break;
1628 		}
1629 
1630 		i += (pIE->Length + 2);
1631 	}
1632 
1633 	DBG_871X("link to new AP\n");
1634 	return HT_IOT_PEER_UNKNOWN;
1635 }
1636 
1637 void update_IOT_info(struct adapter *padapter)
1638 {
1639 	struct mlme_ext_priv *pmlmeext = &padapter->mlmeextpriv;
1640 	struct mlme_ext_info *pmlmeinfo = &(pmlmeext->mlmext_info);
1641 
1642 	switch (pmlmeinfo->assoc_AP_vendor) {
1643 	case HT_IOT_PEER_MARVELL:
1644 		pmlmeinfo->turboMode_cts2self = 1;
1645 		pmlmeinfo->turboMode_rtsen = 0;
1646 		break;
1647 
1648 	case HT_IOT_PEER_RALINK:
1649 		pmlmeinfo->turboMode_cts2self = 0;
1650 		pmlmeinfo->turboMode_rtsen = 1;
1651 		/* disable high power */
1652 		Switch_DM_Func(padapter, (~DYNAMIC_BB_DYNAMIC_TXPWR), false);
1653 		break;
1654 	case HT_IOT_PEER_REALTEK:
1655 		/* rtw_write16(padapter, 0x4cc, 0xffff); */
1656 		/* rtw_write16(padapter, 0x546, 0x01c0); */
1657 		/* disable high power */
1658 		Switch_DM_Func(padapter, (~DYNAMIC_BB_DYNAMIC_TXPWR), false);
1659 		break;
1660 	default:
1661 		pmlmeinfo->turboMode_cts2self = 0;
1662 		pmlmeinfo->turboMode_rtsen = 1;
1663 		break;
1664 	}
1665 }
1666 
1667 void update_capinfo(struct adapter *Adapter, u16 updateCap)
1668 {
1669 	struct mlme_ext_priv *pmlmeext = &Adapter->mlmeextpriv;
1670 	struct mlme_ext_info *pmlmeinfo = &(pmlmeext->mlmext_info);
1671 	bool		ShortPreamble;
1672 
1673 	/*  Check preamble mode, 2005.01.06, by rcnjko. */
1674 	/*  Mark to update preamble value forever, 2008.03.18 by lanhsin */
1675 	/* if (pMgntInfo->RegPreambleMode == PREAMBLE_AUTO) */
1676 	{
1677 		if (updateCap & cShortPreamble) {
1678 			/*  Short Preamble */
1679 			if (pmlmeinfo->preamble_mode != PREAMBLE_SHORT) { /*  PREAMBLE_LONG or PREAMBLE_AUTO */
1680 				ShortPreamble = true;
1681 				pmlmeinfo->preamble_mode = PREAMBLE_SHORT;
1682 				rtw_hal_set_hwreg(Adapter, HW_VAR_ACK_PREAMBLE, (u8 *)&ShortPreamble);
1683 			}
1684 		} else {
1685 			/*  Long Preamble */
1686 			if (pmlmeinfo->preamble_mode != PREAMBLE_LONG) { /*  PREAMBLE_SHORT or PREAMBLE_AUTO */
1687 				ShortPreamble = false;
1688 				pmlmeinfo->preamble_mode = PREAMBLE_LONG;
1689 				rtw_hal_set_hwreg(Adapter, HW_VAR_ACK_PREAMBLE, (u8 *)&ShortPreamble);
1690 			}
1691 		}
1692 	}
1693 
1694 	if (updateCap & cIBSS) {
1695 		/* Filen: See 802.11-2007 p.91 */
1696 		pmlmeinfo->slotTime = NON_SHORT_SLOT_TIME;
1697 	} else {
1698 		/* Filen: See 802.11-2007 p.90 */
1699 		if (pmlmeext->cur_wireless_mode & (WIRELESS_11_24N | WIRELESS_11A | WIRELESS_11_5N | WIRELESS_11AC)) {
1700 			pmlmeinfo->slotTime = SHORT_SLOT_TIME;
1701 		} else if (pmlmeext->cur_wireless_mode & (WIRELESS_11G)) {
1702 			if ((updateCap & cShortSlotTime) /* && (!(pMgntInfo->pHTInfo->RT2RT_HT_Mode & RT_HT_CAP_USE_LONG_PREAMBLE)) */)
1703 				/*  Short Slot Time */
1704 				pmlmeinfo->slotTime = SHORT_SLOT_TIME;
1705 			else
1706 				/*  Long Slot Time */
1707 				pmlmeinfo->slotTime = NON_SHORT_SLOT_TIME;
1708 		} else {
1709 			/* B Mode */
1710 			pmlmeinfo->slotTime = NON_SHORT_SLOT_TIME;
1711 		}
1712 	}
1713 
1714 	rtw_hal_set_hwreg(Adapter, HW_VAR_SLOT_TIME, &pmlmeinfo->slotTime);
1715 }
1716 
1717 void update_wireless_mode(struct adapter *padapter)
1718 {
1719 	int network_type = 0;
1720 	u32 SIFS_Timer;
1721 	struct mlme_ext_priv *pmlmeext = &padapter->mlmeextpriv;
1722 	struct mlme_ext_info *pmlmeinfo = &(pmlmeext->mlmext_info);
1723 	struct wlan_bssid_ex *cur_network = &(pmlmeinfo->network);
1724 	unsigned char *rate = cur_network->SupportedRates;
1725 
1726 	if ((pmlmeinfo->HT_info_enable) && (pmlmeinfo->HT_caps_enable))
1727 		pmlmeinfo->HT_enable = 1;
1728 
1729 	if (pmlmeinfo->VHT_enable)
1730 		network_type = WIRELESS_11AC;
1731 	else if (pmlmeinfo->HT_enable)
1732 		network_type = WIRELESS_11_24N;
1733 
1734 	if (rtw_is_cckratesonly_included(rate))
1735 		network_type |= WIRELESS_11B;
1736 	else if (rtw_is_cckrates_included(rate))
1737 		network_type |= WIRELESS_11BG;
1738 	else
1739 		network_type |= WIRELESS_11G;
1740 
1741 	pmlmeext->cur_wireless_mode = network_type & padapter->registrypriv.wireless_mode;
1742 
1743 	SIFS_Timer = 0x0a0a0808; /* 0x0808 -> for CCK, 0x0a0a -> for OFDM */
1744 													/* change this value if having IOT issues. */
1745 
1746 	padapter->HalFunc.SetHwRegHandler(padapter, HW_VAR_RESP_SIFS,  (u8 *)&SIFS_Timer);
1747 
1748 	padapter->HalFunc.SetHwRegHandler(padapter, HW_VAR_WIRELESS_MODE,  (u8 *)&(pmlmeext->cur_wireless_mode));
1749 
1750 	if (pmlmeext->cur_wireless_mode & WIRELESS_11B)
1751 		update_mgnt_tx_rate(padapter, IEEE80211_CCK_RATE_1MB);
1752 	else
1753 		update_mgnt_tx_rate(padapter, IEEE80211_OFDM_RATE_6MB);
1754 }
1755 
1756 void update_sta_basic_rate(struct sta_info *psta, u8 wireless_mode)
1757 {
1758 	if (IsSupportedTxCCK(wireless_mode)) {
1759 		/*  Only B, B/G, and B/G/N AP could use CCK rate */
1760 		memcpy(psta->bssrateset, rtw_basic_rate_cck, 4);
1761 		psta->bssratelen = 4;
1762 	} else {
1763 		memcpy(psta->bssrateset, rtw_basic_rate_ofdm, 3);
1764 		psta->bssratelen = 3;
1765 	}
1766 }
1767 
1768 int update_sta_support_rate(struct adapter *padapter, u8 *pvar_ie, uint var_ie_len, int cam_idx)
1769 {
1770 	unsigned int	ie_len;
1771 	struct ndis_80211_var_ie *pIE;
1772 	int	supportRateNum = 0;
1773 	struct mlme_ext_priv *pmlmeext = &(padapter->mlmeextpriv);
1774 	struct mlme_ext_info *pmlmeinfo = &(pmlmeext->mlmext_info);
1775 
1776 	pIE = (struct ndis_80211_var_ie *)rtw_get_ie(pvar_ie, WLAN_EID_SUPP_RATES, &ie_len, var_ie_len);
1777 	if (!pIE)
1778 		return _FAIL;
1779 	if (ie_len > sizeof(pmlmeinfo->FW_sta_info[cam_idx].SupportedRates))
1780 		return _FAIL;
1781 
1782 	memcpy(pmlmeinfo->FW_sta_info[cam_idx].SupportedRates, pIE->data, ie_len);
1783 	supportRateNum = ie_len;
1784 
1785 	pIE = (struct ndis_80211_var_ie *)rtw_get_ie(pvar_ie, WLAN_EID_EXT_SUPP_RATES, &ie_len, var_ie_len);
1786 	if (pIE && (ie_len <= sizeof(pmlmeinfo->FW_sta_info[cam_idx].SupportedRates) - supportRateNum))
1787 		memcpy((pmlmeinfo->FW_sta_info[cam_idx].SupportedRates + supportRateNum), pIE->data, ie_len);
1788 
1789 	return _SUCCESS;
1790 }
1791 
1792 void process_addba_req(struct adapter *padapter, u8 *paddba_req, u8 *addr)
1793 {
1794 	struct sta_info *psta;
1795 	u16 tid, start_seq, param;
1796 	struct recv_reorder_ctrl *preorder_ctrl;
1797 	struct sta_priv *pstapriv = &padapter->stapriv;
1798 	struct ADDBA_request *preq = (struct ADDBA_request *)paddba_req;
1799 	struct mlme_ext_priv *pmlmeext = &padapter->mlmeextpriv;
1800 	struct mlme_ext_info *pmlmeinfo = &(pmlmeext->mlmext_info);
1801 
1802 	psta = rtw_get_stainfo(pstapriv, addr);
1803 
1804 	if (psta) {
1805 		start_seq = le16_to_cpu(preq->BA_starting_seqctrl) >> 4;
1806 
1807 		param = le16_to_cpu(preq->BA_para_set);
1808 		tid = (param>>2)&0x0f;
1809 
1810 		preorder_ctrl = &psta->recvreorder_ctrl[tid];
1811 
1812 		preorder_ctrl->indicate_seq = 0xffff;
1813 
1814 		preorder_ctrl->enable = pmlmeinfo->accept_addba_req;
1815 	}
1816 }
1817 
1818 void update_TSF(struct mlme_ext_priv *pmlmeext, u8 *pframe, uint len)
1819 {
1820 	u8 *pIE;
1821 	__le32 *pbuf;
1822 
1823 	pIE = pframe + sizeof(struct ieee80211_hdr_3addr);
1824 	pbuf = (__le32 *)pIE;
1825 
1826 	pmlmeext->TSFValue = le32_to_cpu(*(pbuf+1));
1827 
1828 	pmlmeext->TSFValue = pmlmeext->TSFValue << 32;
1829 
1830 	pmlmeext->TSFValue |= le32_to_cpu(*pbuf);
1831 }
1832 
1833 void correct_TSF(struct adapter *padapter, struct mlme_ext_priv *pmlmeext)
1834 {
1835 	rtw_hal_set_hwreg(padapter, HW_VAR_CORRECT_TSF, NULL);
1836 }
1837 
1838 void adaptive_early_32k(struct mlme_ext_priv *pmlmeext, u8 *pframe, uint len)
1839 {
1840 	int i;
1841 	u8 *pIE;
1842 	__le32 *pbuf;
1843 	u64 tsf = 0;
1844 	u32 delay_ms;
1845 	struct mlme_ext_info *pmlmeinfo = &(pmlmeext->mlmext_info);
1846 
1847 	pmlmeext->bcn_cnt++;
1848 
1849 	pIE = pframe + sizeof(struct ieee80211_hdr_3addr);
1850 	pbuf = (__le32 *)pIE;
1851 
1852 	tsf = le32_to_cpu(*(pbuf+1));
1853 	tsf = tsf << 32;
1854 	tsf |= le32_to_cpu(*pbuf);
1855 
1856 	/* DBG_871X("%s(): tsf_upper = 0x%08x, tsf_lower = 0x%08x\n", __func__, (u32)(tsf>>32), (u32)tsf); */
1857 
1858 	/* delay = (timestamp mod 1024*100)/1000 (unit: ms) */
1859 	/* delay_ms = do_div(tsf, (pmlmeinfo->bcn_interval*1024))/1000; */
1860 	delay_ms = do_div(tsf, (pmlmeinfo->bcn_interval*1024));
1861 	delay_ms = delay_ms/1000;
1862 
1863 	if (delay_ms >= 8)
1864 		pmlmeext->bcn_delay_cnt[8]++;
1865 		/* pmlmeext->bcn_delay_ratio[8] = (pmlmeext->bcn_delay_cnt[8] * 100) /pmlmeext->bcn_cnt; */
1866 	else
1867 		pmlmeext->bcn_delay_cnt[delay_ms]++;
1868 		/* pmlmeext->bcn_delay_ratio[delay_ms] = (pmlmeext->bcn_delay_cnt[delay_ms] * 100) /pmlmeext->bcn_cnt; */
1869 
1870 /*
1871 	DBG_871X("%s(): (a)bcn_cnt = %d\n", __func__, pmlmeext->bcn_cnt);
1872 
1873 	for (i = 0; i<9; i++)
1874 	{
1875 		DBG_871X("%s():bcn_delay_cnt[%d]=%d,  bcn_delay_ratio[%d]=%d\n", __func__, i,
1876 			pmlmeext->bcn_delay_cnt[i] , i, pmlmeext->bcn_delay_ratio[i]);
1877 	}
1878 */
1879 
1880 	/* dump for  adaptive_early_32k */
1881 	if (pmlmeext->bcn_cnt > 100 && (pmlmeext->adaptive_tsf_done == true)) {
1882 		u8 ratio_20_delay, ratio_80_delay;
1883 		u8 DrvBcnEarly, DrvBcnTimeOut;
1884 
1885 		ratio_20_delay = 0;
1886 		ratio_80_delay = 0;
1887 		DrvBcnEarly = 0xff;
1888 		DrvBcnTimeOut = 0xff;
1889 
1890 		DBG_871X("%s(): bcn_cnt = %d\n", __func__, pmlmeext->bcn_cnt);
1891 
1892 		for (i = 0; i < 9; i++) {
1893 			pmlmeext->bcn_delay_ratio[i] = (pmlmeext->bcn_delay_cnt[i] * 100) / pmlmeext->bcn_cnt;
1894 
1895 			DBG_871X("%s():bcn_delay_cnt[%d]=%d,  bcn_delay_ratio[%d]=%d\n", __func__, i,
1896 				pmlmeext->bcn_delay_cnt[i], i, pmlmeext->bcn_delay_ratio[i]);
1897 
1898 			ratio_20_delay += pmlmeext->bcn_delay_ratio[i];
1899 			ratio_80_delay += pmlmeext->bcn_delay_ratio[i];
1900 
1901 			if (ratio_20_delay > 20 && DrvBcnEarly == 0xff) {
1902 				DrvBcnEarly = i;
1903 				DBG_871X("%s(): DrvBcnEarly = %d\n", __func__, DrvBcnEarly);
1904 			}
1905 
1906 			if (ratio_80_delay > 80 && DrvBcnTimeOut == 0xff) {
1907 				DrvBcnTimeOut = i;
1908 				DBG_871X("%s(): DrvBcnTimeOut = %d\n", __func__, DrvBcnTimeOut);
1909 			}
1910 
1911 			/* reset adaptive_early_32k cnt */
1912 			pmlmeext->bcn_delay_cnt[i] = 0;
1913 			pmlmeext->bcn_delay_ratio[i] = 0;
1914 		}
1915 
1916 		pmlmeext->DrvBcnEarly = DrvBcnEarly;
1917 		pmlmeext->DrvBcnTimeOut = DrvBcnTimeOut;
1918 
1919 		pmlmeext->bcn_cnt = 0;
1920 	}
1921 }
1922 
1923 void rtw_alloc_macid(struct adapter *padapter, struct sta_info *psta)
1924 {
1925 	int i;
1926 	u8 bc_addr[ETH_ALEN] = {0xff, 0xff, 0xff, 0xff, 0xff, 0xff};
1927 	struct dvobj_priv *pdvobj = adapter_to_dvobj(padapter);
1928 
1929 	if (!memcmp(psta->hwaddr, bc_addr, ETH_ALEN))
1930 		return;
1931 
1932 	if (!memcmp(psta->hwaddr, myid(&padapter->eeprompriv), ETH_ALEN)) {
1933 		psta->mac_id = NUM_STA;
1934 		return;
1935 	}
1936 
1937 	spin_lock_bh(&pdvobj->lock);
1938 	for (i = 0; i < NUM_STA; i++) {
1939 		if (pdvobj->macid[i] == false) {
1940 			pdvobj->macid[i]  = true;
1941 			break;
1942 		}
1943 	}
1944 	spin_unlock_bh(&pdvobj->lock);
1945 
1946 	if (i > (NUM_STA-1)) {
1947 		psta->mac_id = NUM_STA;
1948 		DBG_871X("  no room for more MACIDs\n");
1949 	} else {
1950 		psta->mac_id = i;
1951 		DBG_871X("%s = %d\n", __func__, psta->mac_id);
1952 	}
1953 }
1954 
1955 void rtw_release_macid(struct adapter *padapter, struct sta_info *psta)
1956 {
1957 	u8 bc_addr[ETH_ALEN] = {0xff, 0xff, 0xff, 0xff, 0xff, 0xff};
1958 	struct dvobj_priv *pdvobj = adapter_to_dvobj(padapter);
1959 
1960 	if (!memcmp(psta->hwaddr, bc_addr, ETH_ALEN))
1961 		return;
1962 
1963 	if (!memcmp(psta->hwaddr, myid(&padapter->eeprompriv), ETH_ALEN))
1964 		return;
1965 
1966 	spin_lock_bh(&pdvobj->lock);
1967 	if (psta->mac_id < NUM_STA && psta->mac_id != 1) {
1968 		if (pdvobj->macid[psta->mac_id] == true) {
1969 			DBG_871X("%s = %d\n", __func__, psta->mac_id);
1970 			pdvobj->macid[psta->mac_id] = false;
1971 			psta->mac_id = NUM_STA;
1972 		}
1973 	}
1974 	spin_unlock_bh(&pdvobj->lock);
1975 }
1976 
1977 /* For 8188E RA */
1978 u8 rtw_search_max_mac_id(struct adapter *padapter)
1979 {
1980 	u8 max_mac_id = 0;
1981 	struct dvobj_priv *pdvobj = adapter_to_dvobj(padapter);
1982 	int i;
1983 
1984 	spin_lock_bh(&pdvobj->lock);
1985 	for (i = (NUM_STA-1); i >= 0 ; i--) {
1986 		if (pdvobj->macid[i] == true)
1987 			break;
1988 	}
1989 	max_mac_id = i;
1990 	spin_unlock_bh(&pdvobj->lock);
1991 
1992 	return max_mac_id;
1993 }
1994 
1995 struct adapter *dvobj_get_port0_adapter(struct dvobj_priv *dvobj)
1996 {
1997 	if (get_iface_type(dvobj->padapters[i]) != IFACE_PORT0)
1998 		return NULL;
1999 
2000 	return dvobj->padapters;
2001 }
2002