drivers/net/wireless/rockchip_wlan/rtl8188eu/os_dep/linux/ioctl_linux.c

   1 /******************************************************************************
   2  *
   3  * Copyright(c) 2007 - 2012 Realtek Corporation. All rights reserved.
   4  *
   5  * This program is free software; you can redistribute it and/or modify it
   6  * under the terms of version 2 of the GNU General Public License as
   7  * published by the Free Software Foundation.
   8  *
   9  * This program is distributed in the hope that it will be useful, but WITHOUT
  10  * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
  11  * FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for
  12  * more details.
  13  *
  14  * You should have received a copy of the GNU General Public License along with
  15  * this program; if not, write to the Free Software Foundation, Inc.,
  16  * 51 Franklin Street, Fifth Floor, Boston, MA 02110, USA
  17  *
  18  *
  19  ******************************************************************************/
  20 #define _IOCTL_LINUX_C_
  21
  22 #include <drv_types.h>
  23 #include <rtw_mp.h>
  24 #include <rtw_mp_ioctl.h>
  25 #include "../../hal/phydm/phydm_precomp.h"
  26
  27 #if (LINUX_VERSION_CODE < KERNEL_VERSION(2,6,27))
  28 #define  iwe_stream_add_event(a, b, c, d, e)  iwe_stream_add_event(b, c, d, e)
  29 #define  iwe_stream_add_point(a, b, c, d, e)  iwe_stream_add_point(b, c, d, e)
  30 #endif
  31
  32 #ifdef CONFIG_80211N_HT
  33 extern int rtw_ht_enable;
  34 #endif
  35
  36
  37 #define RTL_IOCTL_WPA_SUPPLICANT        SIOCIWFIRSTPRIV+30
  38
  39 #define SCAN_ITEM_SIZE 768
  40 #define MAX_CUSTOM_LEN 64
  41 #define RATE_COUNT 4
  42
  43 #ifdef CONFIG_GLOBAL_UI_PID
  44 extern int ui_pid[3];
  45 #endif
  46
  47 // combo scan
  48 #define WEXT_CSCAN_AMOUNT 9
  49 #define WEXT_CSCAN_BUF_LEN              360
  50 #define WEXT_CSCAN_HEADER               "CSCAN S\x01\x00\x00S\x00"
  51 #define WEXT_CSCAN_HEADER_SIZE          12
  52 #define WEXT_CSCAN_SSID_SECTION         'S'
  53 #define WEXT_CSCAN_CHANNEL_SECTION      'C'
  54 #define WEXT_CSCAN_NPROBE_SECTION       'N'
  55 #define WEXT_CSCAN_ACTV_DWELL_SECTION   'A'
  56 #define WEXT_CSCAN_PASV_DWELL_SECTION   'P'
  57 #define WEXT_CSCAN_HOME_DWELL_SECTION   'H'
  58 #define WEXT_CSCAN_TYPE_SECTION         'T'
  59
  60
  61 extern u8 key_2char2num(u8 hch, u8 lch);
  62 extern u8 str_2char2num(u8 hch, u8 lch);
  63 extern void macstr2num(u8 *dst, u8 *src);
  64 extern u8 convert_ip_addr(u8 hch, u8 mch, u8 lch);
  65
  66 u32 rtw_rates[] = {1000000,2000000,5500000,11000000,
  67         6000000,9000000,12000000,18000000,24000000,36000000,48000000,54000000};
  68
  69 static const char * const iw_operation_mode[] =
  70 {
  71         "Auto", "Ad-Hoc", "Managed",  "Master", "Repeater", "Secondary", "Monitor"
  72 };
  73
  74 static int hex2num_i(char c)
  75 {
  76         if (c >= '0' && c <= '9')
  77                 return c - '0';
  78         if (c >= 'a' && c <= 'f')
  79                 return c - 'a' + 10;
  80         if (c >= 'A' && c <= 'F')
  81                 return c - 'A' + 10;
  82         return -1;
  83 }
  84
  85 static int hex2byte_i(const char *hex)
  86 {
  87         int a, b;
  88         a = hex2num_i(*hex++);
  89         if (a < 0)
  90                 return -1;
  91         b = hex2num_i(*hex++);
  92         if (b < 0)
  93                 return -1;
  94         return (a << 4) | b;
  95 }
  96
  97 /**
  98  * hwaddr_aton - Convert ASCII string to MAC address
  99  * @txt: MAC address as a string (e.g., "00:11:22:33:44:55")
 100  * @addr: Buffer for the MAC address (ETH_ALEN = 6 bytes)
 101  * Returns: 0 on success, -1 on failure (e.g., string not a MAC address)
 102  */
 103 static int hwaddr_aton_i(const char *txt, u8 *addr)
 104 {
 105         int i;
 106
 107         for (i = 0; i < 6; i++) {
 108                 int a, b;
 109
 110                 a = hex2num_i(*txt++);
 111                 if (a < 0)
 112                         return -1;
 113                 b = hex2num_i(*txt++);
 114                 if (b < 0)
 115                         return -1;
 116                 *addr++ = (a << 4) | b;
 117                 if (i < 5 && *txt++ != ':')
 118                         return -1;
 119         }
 120
 121         return 0;
 122 }
 123
 124 static void indicate_wx_custom_event(_adapter *padapter, char *msg)
 125 {
 126         u8 *buff, *p;
 127         union iwreq_data wrqu;
 128
 129         if (strlen(msg) > IW_CUSTOM_MAX) {
 130                 DBG_871X("%s strlen(msg):%zu > IW_CUSTOM_MAX:%u\n", __FUNCTION__ , strlen(msg), IW_CUSTOM_MAX);
 131                 return;
 132         }
 133
 134         buff = rtw_zmalloc(IW_CUSTOM_MAX+1);
 135         if(!buff)
 136                 return;
 137
 138         _rtw_memcpy(buff, msg, strlen(msg));
 139
 140         _rtw_memset(&wrqu,0,sizeof(wrqu));
 141         wrqu.data.length = strlen(msg);
 142
 143         DBG_871X("%s %s\n", __FUNCTION__, buff);
 144 #ifndef CONFIG_IOCTL_CFG80211
 145         wireless_send_event(padapter->pnetdev, IWEVCUSTOM, &wrqu, buff);
 146 #endif
 147
 148         rtw_mfree(buff, IW_CUSTOM_MAX+1);
 149
 150 }
 151
 152
 153 static void request_wps_pbc_event(_adapter *padapter)
 154 {
 155         u8 *buff, *p;
 156         union iwreq_data wrqu;
 157
 158
 159         buff = rtw_malloc(IW_CUSTOM_MAX);
 160         if(!buff)
 161                 return;
 162
 163         _rtw_memset(buff, 0, IW_CUSTOM_MAX);
 164
 165         p=buff;
 166
 167         p+=sprintf(p, "WPS_PBC_START.request=TRUE");
 168
 169         _rtw_memset(&wrqu,0,sizeof(wrqu));
 170
 171         wrqu.data.length = p-buff;
 172
 173         wrqu.data.length = (wrqu.data.length<IW_CUSTOM_MAX) ? wrqu.data.length:IW_CUSTOM_MAX;
 174
 175         DBG_871X("%s\n", __FUNCTION__);
 176
 177 #ifndef CONFIG_IOCTL_CFG80211
 178         wireless_send_event(padapter->pnetdev, IWEVCUSTOM, &wrqu, buff);
 179 #endif
 180
 181         if(buff)
 182         {
 183                 rtw_mfree(buff, IW_CUSTOM_MAX);
 184         }
 185
 186 }
 187
 188 #ifdef CONFIG_SUPPORT_HW_WPS_PBC
 189 void rtw_request_wps_pbc_event(_adapter *padapter)
 190 {
 191 #ifdef RTK_DMP_PLATFORM
 192 #if (LINUX_VERSION_CODE > KERNEL_VERSION(2,6,12))
 193         kobject_uevent(&padapter->pnetdev->dev.kobj, KOBJ_NET_PBC);
 194 #else
 195         kobject_hotplug(&padapter->pnetdev->class_dev.kobj, KOBJ_NET_PBC);
 196 #endif
 197 #else
 198
 199         if ( padapter->pid[0] == 0 )
 200         {       //      0 is the default value and it means the application monitors the HW PBC doesn't privde its pid to driver.
 201                 return;
 202         }
 203
 204         rtw_signal_process(padapter->pid[0], SIGUSR1);
 205
 206 #endif
 207
 208         rtw_led_control(padapter, LED_CTL_START_WPS_BOTTON);
 209 }
 210 #endif//#ifdef CONFIG_SUPPORT_HW_WPS_PBC
 211
 212 void indicate_wx_scan_complete_event(_adapter *padapter)
 213 {
 214         union iwreq_data wrqu;
 215         struct  mlme_priv *pmlmepriv = &padapter->mlmepriv;
 216
 217         _rtw_memset(&wrqu, 0, sizeof(union iwreq_data));
 218
 219         //DBG_871X("+rtw_indicate_wx_scan_complete_event\n");
 220 #ifndef CONFIG_IOCTL_CFG80211
 221         wireless_send_event(padapter->pnetdev, SIOCGIWSCAN, &wrqu, NULL);
 222 #endif
 223 }
 224
 225
 226 void rtw_indicate_wx_assoc_event(_adapter *padapter)
 227 {
 228         union iwreq_data wrqu;
 229         struct  mlme_priv *pmlmepriv = &padapter->mlmepriv;
 230         struct mlme_ext_priv    *pmlmeext = &padapter->mlmeextpriv;
 231         struct mlme_ext_info    *pmlmeinfo = &(pmlmeext->mlmext_info);
 232         WLAN_BSSID_EX           *pnetwork = (WLAN_BSSID_EX*)(&(pmlmeinfo->network));
 233
 234         _rtw_memset(&wrqu, 0, sizeof(union iwreq_data));
 235
 236         wrqu.ap_addr.sa_family = ARPHRD_ETHER;
 237
 238         if(check_fwstate(pmlmepriv, WIFI_ADHOC_MASTER_STATE)==_TRUE )
 239                 _rtw_memcpy(wrqu.ap_addr.sa_data, pnetwork->MacAddress, ETH_ALEN);
 240         else
 241                 _rtw_memcpy(wrqu.ap_addr.sa_data, pmlmepriv->cur_network.network.MacAddress, ETH_ALEN);
 242
 243         DBG_871X_LEVEL(_drv_always_, "assoc success\n");
 244 #ifndef CONFIG_IOCTL_CFG80211
 245         wireless_send_event(padapter->pnetdev, SIOCGIWAP, &wrqu, NULL);
 246 #endif
 247 }
 248
 249 void rtw_indicate_wx_disassoc_event(_adapter *padapter)
 250 {
 251         union iwreq_data wrqu;
 252
 253         _rtw_memset(&wrqu, 0, sizeof(union iwreq_data));
 254
 255         wrqu.ap_addr.sa_family = ARPHRD_ETHER;
 256         _rtw_memset(wrqu.ap_addr.sa_data, 0, ETH_ALEN);
 257
 258 #ifndef CONFIG_IOCTL_CFG80211
 259         DBG_871X_LEVEL(_drv_always_, "indicate disassoc\n");
 260         wireless_send_event(padapter->pnetdev, SIOCGIWAP, &wrqu, NULL);
 261 #endif
 262 }
 263
 264 /*
 265 uint    rtw_is_cckrates_included(u8 *rate)
 266 {
 267                 u32     i = 0;
 268
 269                 while(rate[i]!=0)
 270                 {
 271                         if  (  (((rate[i]) & 0x7f) == 2)        || (((rate[i]) & 0x7f) == 4) ||
 272                         (((rate[i]) & 0x7f) == 11)  || (((rate[i]) & 0x7f) == 22) )
 273                         return _TRUE;
 274                         i++;
 275                 }
 276
 277                 return _FALSE;
 278 }
 279
 280 uint    rtw_is_cckratesonly_included(u8 *rate)
 281 {
 282         u32 i = 0;
 283
 284         while(rate[i]!=0)
 285         {
 286                         if  (  (((rate[i]) & 0x7f) != 2) && (((rate[i]) & 0x7f) != 4) &&
 287                                 (((rate[i]) & 0x7f) != 11)  && (((rate[i]) & 0x7f) != 22) )
 288                         return _FALSE;
 289                         i++;
 290         }
 291
 292         return _TRUE;
 293 }
 294 */
 295
 296 static int search_p2p_wfd_ie(_adapter *padapter,
 297                                 struct iw_request_info* info, struct wlan_network *pnetwork,
 298                                 char *start, char *stop)
 299 {
 300 #ifdef CONFIG_P2P
 301         struct wifidirect_info  *pwdinfo = &padapter->wdinfo;
 302 #ifdef CONFIG_WFD
 303         if ( SCAN_RESULT_ALL == pwdinfo->wfd_info->scan_result_type )
 304         {
 305
 306         }
 307         else if ( ( SCAN_RESULT_P2P_ONLY == pwdinfo->wfd_info->scan_result_type ) ||
 308                       ( SCAN_RESULT_WFD_TYPE == pwdinfo->wfd_info->scan_result_type ) )
 309 #endif // CONFIG_WFD
 310         {
 311                 if(!rtw_p2p_chk_state(pwdinfo, P2P_STATE_NONE))
 312                 {
 313                         u32     blnGotP2PIE = _FALSE;
 314
 315                         //      User is doing the P2P device discovery
 316                         //      The prefix of SSID should be "DIRECT-" and the IE should contains the P2P IE.
 317                         //      If not, the driver should ignore this AP and go to the next AP.
 318
 319                         //      Verifying the SSID
 320                         if ( _rtw_memcmp( pnetwork->network.Ssid.Ssid, pwdinfo->p2p_wildcard_ssid, P2P_WILDCARD_SSID_LEN ) )
 321                         {
 322                                 u32     p2pielen = 0;
 323
 324                                 //      Verifying the P2P IE
 325                                 if (rtw_bss_ex_get_p2p_ie(&pnetwork->network, NULL, &p2pielen))
 326                                         blnGotP2PIE = _TRUE;
 327                         }
 328
 329                         if ( blnGotP2PIE == _FALSE )
 330                         {
 331                                 return _FALSE;
 332                         }
 333
 334                 }
 335         }
 336
 337 #ifdef CONFIG_WFD
 338         if ( SCAN_RESULT_WFD_TYPE == pwdinfo->wfd_info->scan_result_type )
 339         {
 340                 u32     blnGotWFD = _FALSE;
 341                 u8 *wfd_ie;
 342                 uint wfd_ielen = 0;
 343
 344                 wfd_ie = rtw_bss_ex_get_wfd_ie(&pnetwork->network, NULL, &wfd_ielen);
 345                 if (wfd_ie) {
 346                         u8 *wfd_devinfo;
 347                         uint wfd_devlen;
 348
 349                         wfd_devinfo = rtw_get_wfd_attr_content(wfd_ie, wfd_ielen, WFD_ATTR_DEVICE_INFO, NULL, &wfd_devlen);
 350                         if (wfd_devinfo) {
 351                                 if ( pwdinfo->wfd_info->wfd_device_type == WFD_DEVINFO_PSINK )
 352                                 {
 353                                         //      the first two bits will indicate the WFD device type
 354                                         if ( ( wfd_devinfo[ 1 ] & 0x03 ) == WFD_DEVINFO_SOURCE )
 355                                         {
 356                                                 //      If this device is Miracast PSink device, the scan reuslt should just provide the Miracast source.
 357                                                 blnGotWFD = _TRUE;
 358                                         }
 359                                 }
 360                                 else if ( pwdinfo->wfd_info->wfd_device_type == WFD_DEVINFO_SOURCE )
 361                                 {
 362                                         //      the first two bits will indicate the WFD device type
 363                                         if ( ( wfd_devinfo[ 1 ] & 0x03 ) == WFD_DEVINFO_PSINK )
 364                                         {
 365                                                 //      If this device is Miracast source device, the scan reuslt should just provide the Miracast PSink.
 366                                                 //      Todo: How about the SSink?!
 367                                                 blnGotWFD = _TRUE;
 368                                         }
 369                                 }
 370                         }
 371                 }
 372
 373                 if ( blnGotWFD == _FALSE )
 374                 {
 375                         return _FALSE;
 376                 }
 377         }
 378 #endif // CONFIG_WFD
 379
 380 #endif //CONFIG_P2P
 381         return _TRUE;
 382 }
 383  static inline char *iwe_stream_mac_addr_proess(_adapter *padapter,
 384                                 struct iw_request_info* info, struct wlan_network *pnetwork,
 385                                 char *start, char *stop,struct iw_event *iwe)
 386 {
 387         /*  AP MAC address  */
 388         iwe->cmd = SIOCGIWAP;
 389         iwe->u.ap_addr.sa_family = ARPHRD_ETHER;
 390
 391         _rtw_memcpy(iwe->u.ap_addr.sa_data, pnetwork->network.MacAddress, ETH_ALEN);
 392         start = iwe_stream_add_event(info, start, stop, iwe, IW_EV_ADDR_LEN);
 393         return start;
 394 }
 395  static inline char * iwe_stream_essid_proess(_adapter *padapter,
 396                                 struct iw_request_info* info, struct wlan_network *pnetwork,
 397                                 char *start, char *stop,struct iw_event *iwe)
 398 {
 399
 400         /* Add the ESSID */
 401         iwe->cmd = SIOCGIWESSID;
 402         iwe->u.data.flags = 1;
 403         iwe->u.data.length = min((u16)pnetwork->network.Ssid.SsidLength, (u16)32);
 404         start = iwe_stream_add_point(info, start, stop, iwe, pnetwork->network.Ssid.Ssid);
 405         return start;
 406 }
 407
 408  static inline char * iwe_stream_chan_process(_adapter *padapter,
 409                                 struct iw_request_info* info, struct wlan_network *pnetwork,
 410                                 char *start, char *stop,struct iw_event *iwe)
 411 {
 412         if(pnetwork->network.Configuration.DSConfig<1 /*|| pnetwork->network.Configuration.DSConfig>14*/)
 413                 pnetwork->network.Configuration.DSConfig = 1;
 414
 415          /* Add frequency/channel */
 416         iwe->cmd = SIOCGIWFREQ;
 417         iwe->u.freq.m = rtw_ch2freq(pnetwork->network.Configuration.DSConfig) * 100000;
 418         iwe->u.freq.e = 1;
 419         iwe->u.freq.i = pnetwork->network.Configuration.DSConfig;
 420         start = iwe_stream_add_event(info, start, stop, iwe, IW_EV_FREQ_LEN);
 421         return start;
 422 }
 423  static inline char * iwe_stream_mode_process(_adapter *padapter,
 424                                 struct iw_request_info* info, struct wlan_network *pnetwork,
 425                                 char *start, char *stop,struct iw_event *iwe,u16 cap)
 426 {
 427         /* Add mode */
 428         if(cap & (WLAN_CAPABILITY_IBSS |WLAN_CAPABILITY_BSS)){
 429                 iwe->cmd = SIOCGIWMODE;
 430                 if (cap & WLAN_CAPABILITY_BSS)
 431                         iwe->u.mode = IW_MODE_MASTER;
 432                 else
 433                         iwe->u.mode = IW_MODE_ADHOC;
 434
 435                 start = iwe_stream_add_event(info, start, stop, iwe, IW_EV_UINT_LEN);
 436         }
 437         return start;
 438  }
 439  static inline char * iwe_stream_encryption_process(_adapter *padapter,
 440                                 struct iw_request_info* info, struct wlan_network *pnetwork,
 441                                 char *start, char *stop,struct iw_event *iwe,u16 cap)
 442 {
 443
 444         /* Add encryption capability */
 445         iwe->cmd = SIOCGIWENCODE;
 446         if (cap & WLAN_CAPABILITY_PRIVACY)
 447                 iwe->u.data.flags = IW_ENCODE_ENABLED | IW_ENCODE_NOKEY;
 448         else
 449                 iwe->u.data.flags = IW_ENCODE_DISABLED;
 450         iwe->u.data.length = 0;
 451         start = iwe_stream_add_point(info, start, stop, iwe, pnetwork->network.Ssid.Ssid);
 452         return start;
 453
 454 }
 455
 456  static inline char * iwe_stream_protocol_process(_adapter *padapter,
 457                                 struct iw_request_info* info, struct wlan_network *pnetwork,
 458                                 char *start, char *stop,struct iw_event *iwe)
 459  {
 460         u16 ht_cap=_FALSE,vht_cap = _FALSE;
 461         u32 ht_ielen = 0, vht_ielen = 0;
 462         char *p;
 463         u8 ie_offset = (pnetwork->network.Reserved[0] == 2? 0:12);// Probe Request
 464
 465         //parsing HT_CAP_IE
 466         p = rtw_get_ie(&pnetwork->network.IEs[ie_offset], _HT_CAPABILITY_IE_, &ht_ielen, pnetwork->network.IELength-ie_offset);
 467         if(p && ht_ielen>0)
 468                 ht_cap = _TRUE;
 469
 470         #ifdef CONFIG_80211AC_VHT
 471         //parsing VHT_CAP_IE
 472         p = rtw_get_ie(&pnetwork->network.IEs[ie_offset], EID_VHTCapability, &vht_ielen, pnetwork->network.IELength-ie_offset);
 473         if(p && vht_ielen>0)
 474                 vht_cap = _TRUE;
 475         #endif
 476          /* Add the protocol name */
 477         iwe->cmd = SIOCGIWNAME;
 478         if ((rtw_is_cckratesonly_included((u8*)&pnetwork->network.SupportedRates)) == _TRUE)
 479         {
 480                 if(ht_cap == _TRUE)
 481                         snprintf(iwe->u.name, IFNAMSIZ, "IEEE 802.11bn");
 482                 else
 483                         snprintf(iwe->u.name, IFNAMSIZ, "IEEE 802.11b");
 484         }
 485         else if ((rtw_is_cckrates_included((u8*)&pnetwork->network.SupportedRates)) == _TRUE)
 486         {
 487                 if(ht_cap == _TRUE)
 488                         snprintf(iwe->u.name, IFNAMSIZ, "IEEE 802.11bgn");
 489                 else
 490                         snprintf(iwe->u.name, IFNAMSIZ, "IEEE 802.11bg");
 491         }
 492         else
 493         {
 494                 if(pnetwork->network.Configuration.DSConfig > 14)
 495                 {
 496                         #ifdef CONFIG_80211AC_VHT
 497                         if(vht_cap == _TRUE){
 498                                 snprintf(iwe->u.name, IFNAMSIZ, "IEEE 802.11AC");
 499                         }
 500                         else
 501                         #endif
 502                         {
 503                                 if(ht_cap == _TRUE)
 504                                         snprintf(iwe->u.name, IFNAMSIZ, "IEEE 802.11an");
 505                                 else
 506                                         snprintf(iwe->u.name, IFNAMSIZ, "IEEE 802.11a");
 507                         }
 508                 }
 509                 else
 510                 {
 511                         if(ht_cap == _TRUE)
 512                                 snprintf(iwe->u.name, IFNAMSIZ, "IEEE 802.11gn");
 513                         else
 514                                 snprintf(iwe->u.name, IFNAMSIZ, "IEEE 802.11g");
 515                 }
 516         }
 517         start = iwe_stream_add_event(info, start, stop, iwe, IW_EV_CHAR_LEN);
 518         return start;
 519  }
 520
 521  static inline char * iwe_stream_rate_process(_adapter *padapter,
 522                                 struct iw_request_info* info, struct wlan_network *pnetwork,
 523                                 char *start, char *stop,struct iw_event *iwe)
 524 {
 525         u32 ht_ielen = 0, vht_ielen = 0;
 526         char *p;
 527         u16 max_rate=0, rate, ht_cap=_FALSE, vht_cap = _FALSE;
 528         u32 i = 0;
 529         u8 bw_40MHz=0, short_GI=0, bw_160MHz=0, vht_highest_rate = 0;
 530         u16 mcs_rate=0, vht_data_rate=0;
 531         char custom[MAX_CUSTOM_LEN]={0};
 532         u8 ie_offset = (pnetwork->network.Reserved[0] == 2? 0:12);// Probe Request
 533
 534         //parsing HT_CAP_IE
 535         p = rtw_get_ie(&pnetwork->network.IEs[ie_offset], _HT_CAPABILITY_IE_, &ht_ielen, pnetwork->network.IELength-ie_offset);
 536         if(p && ht_ielen>0)
 537         {
 538                 struct rtw_ieee80211_ht_cap *pht_capie;
 539                 ht_cap = _TRUE;
 540                 pht_capie = (struct rtw_ieee80211_ht_cap *)(p+2);
 541                 _rtw_memcpy(&mcs_rate , pht_capie->supp_mcs_set, 2);
 542                 bw_40MHz = (pht_capie->cap_info&IEEE80211_HT_CAP_SUP_WIDTH) ? 1:0;
 543                 short_GI = (pht_capie->cap_info&(IEEE80211_HT_CAP_SGI_20|IEEE80211_HT_CAP_SGI_40)) ? 1:0;
 544         }
 545
 546 #ifdef CONFIG_80211AC_VHT
 547         //parsing VHT_CAP_IE
 548         p = rtw_get_ie(&pnetwork->network.IEs[ie_offset], EID_VHTCapability, &vht_ielen, pnetwork->network.IELength-ie_offset);
 549         if(p && vht_ielen>0)
 550         {
 551                 u8      mcs_map[2];
 552
 553                 vht_cap = _TRUE;
 554                 bw_160MHz = GET_VHT_CAPABILITY_ELE_CHL_WIDTH(p+2);
 555                 if(bw_160MHz)
 556                         short_GI = GET_VHT_CAPABILITY_ELE_SHORT_GI160M(p+2);
 557                 else
 558                         short_GI = GET_VHT_CAPABILITY_ELE_SHORT_GI80M(p+2);
 559
 560                 _rtw_memcpy(mcs_map, GET_VHT_CAPABILITY_ELE_TX_MCS(p+2), 2);
 561
 562                 vht_highest_rate = rtw_get_vht_highest_rate(mcs_map);
 563                 vht_data_rate = rtw_vht_mcs_to_data_rate(CHANNEL_WIDTH_80, short_GI, vht_highest_rate);
 564         }
 565 #endif
 566
 567         /*Add basic and extended rates */
 568         p = custom;
 569         p += snprintf(p, MAX_CUSTOM_LEN - (p - custom), " Rates (Mb/s): ");
 570         while(pnetwork->network.SupportedRates[i]!=0)
 571         {
 572                 rate = pnetwork->network.SupportedRates[i]&0x7F;
 573                 if (rate > max_rate)
 574                         max_rate = rate;
 575                 p += snprintf(p, MAX_CUSTOM_LEN - (p - custom),
 576                               "%d%s ", rate >> 1, (rate & 1) ? ".5" : "");
 577                 i++;
 578         }
 579 #ifdef CONFIG_80211AC_VHT
 580         if(vht_cap == _TRUE) {
 581                 max_rate = vht_data_rate;
 582         }
 583         else
 584 #endif
 585         if(ht_cap == _TRUE)
 586         {
 587                 if(mcs_rate&0x8000)//MCS15
 588                 {
 589                         max_rate = (bw_40MHz) ? ((short_GI)?300:270):((short_GI)?144:130);
 590
 591                 }
 592                 else if(mcs_rate&0x0080)//MCS7
 593                 {
 594                         max_rate = (bw_40MHz) ? ((short_GI)?150:135):((short_GI)?72:65);
 595                 }
 596                 else//default MCS7
 597                 {
 598                         //DBG_871X("wx_get_scan, mcs_rate_bitmap=0x%x\n", mcs_rate);
 599                         max_rate = (bw_40MHz) ? ((short_GI)?150:135):((short_GI)?72:65);
 600                 }
 601
 602                 max_rate = max_rate*2;//Mbps/2;
 603         }
 604
 605         iwe->cmd = SIOCGIWRATE;
 606         iwe->u.bitrate.fixed = iwe->u.bitrate.disabled = 0;
 607         iwe->u.bitrate.value = max_rate * 500000;
 608         start =iwe_stream_add_event(info, start, stop, iwe, IW_EV_PARAM_LEN);
 609         return start ;
 610 }
 611
 612 static inline char * iwe_stream_wpa_wpa2_process(_adapter *padapter,
 613                                 struct iw_request_info* info, struct wlan_network *pnetwork,
 614                                 char *start, char *stop,struct iw_event *iwe)
 615 {
 616         int buf_size = MAX_WPA_IE_LEN*2;
 617         //u8 pbuf[buf_size]={0};
 618         u8 *pbuf = rtw_zmalloc(buf_size);
 619
 620         u8 wpa_ie[255]={0},rsn_ie[255]={0};
 621         u16 i, wpa_len=0,rsn_len=0;
 622         u8 *p;
 623         sint out_len=0;
 624
 625
 626         if(pbuf){
 627                 p=pbuf;
 628
 629                 //parsing WPA/WPA2 IE
 630                 if (pnetwork->network.Reserved[0] != 2) // Probe Request
 631                 {
 632                         out_len=rtw_get_sec_ie(pnetwork->network.IEs ,pnetwork->network.IELength,rsn_ie,&rsn_len,wpa_ie,&wpa_len);
 633                         RT_TRACE(_module_rtl871x_mlme_c_,_drv_info_,("rtw_wx_get_scan: ssid=%s\n",pnetwork->network.Ssid.Ssid));
 634                         RT_TRACE(_module_rtl871x_mlme_c_,_drv_info_,("rtw_wx_get_scan: wpa_len=%d rsn_len=%d\n",wpa_len,rsn_len));
 635
 636                         if (wpa_len > 0){
 637
 638                                 _rtw_memset(pbuf, 0, buf_size);
 639                                 p += sprintf(p, "wpa_ie=");
 640                                 for (i = 0; i < wpa_len; i++) {
 641                                         p += sprintf(p, "%02x", wpa_ie[i]);
 642                                 }
 643
 644                                 if (wpa_len > 100) {
 645                                         printk("-----------------Len %d----------------\n", wpa_len);
 646                                         for (i = 0; i < wpa_len; i++) {
 647                                                 printk("%02x ", wpa_ie[i]);
 648                                         }
 649                                         printk("\n");
 650                                         printk("-----------------Len %d----------------\n", wpa_len);
 651                                 }
 652
 653                                 _rtw_memset(iwe, 0, sizeof(*iwe));
 654                                 iwe->cmd = IWEVCUSTOM;
 655                                 iwe->u.data.length = strlen(pbuf);
 656                                 start = iwe_stream_add_point(info, start, stop, iwe,pbuf);
 657
 658                                 _rtw_memset(iwe, 0, sizeof(*iwe));
 659                                 iwe->cmd =IWEVGENIE;
 660                                 iwe->u.data.length = wpa_len;
 661                                 start = iwe_stream_add_point(info, start, stop, iwe, wpa_ie);
 662                         }
 663                         if (rsn_len > 0){
 664
 665                                 _rtw_memset(pbuf, 0, buf_size);
 666                                 p += sprintf(p, "rsn_ie=");
 667                                 for (i = 0; i < rsn_len; i++) {
 668                                         p += sprintf(p, "%02x", rsn_ie[i]);
 669                                 }
 670                                 _rtw_memset(iwe, 0, sizeof(*iwe));
 671                                 iwe->cmd = IWEVCUSTOM;
 672                                 iwe->u.data.length = strlen(pbuf);
 673                                 start = iwe_stream_add_point(info, start, stop, iwe,pbuf);
 674
 675                                 _rtw_memset(iwe, 0, sizeof(*iwe));
 676                                 iwe->cmd =IWEVGENIE;
 677                                 iwe->u.data.length = rsn_len;
 678                                 start = iwe_stream_add_point(info, start, stop, iwe, rsn_ie);
 679                         }
 680                 }
 681
 682                 rtw_mfree(pbuf, buf_size);
 683         }
 684         return start;
 685 }
 686
 687 static inline char * iwe_stream_wps_process(_adapter *padapter,
 688                                 struct iw_request_info* info, struct wlan_network *pnetwork,
 689                                 char *start, char *stop,struct iw_event *iwe)
 690 {
 691         //parsing WPS IE
 692         uint cnt = 0,total_ielen;
 693         u8 *wpsie_ptr=NULL;
 694         uint wps_ielen = 0;
 695         u8 ie_offset = (pnetwork->network.Reserved[0] == 2? 0:12);
 696
 697         u8 *ie_ptr = pnetwork->network.IEs + ie_offset;
 698         total_ielen= pnetwork->network.IELength - ie_offset;
 699
 700         if (pnetwork->network.Reserved[0] == 2) // Probe Request
 701         {
 702                 ie_ptr = pnetwork->network.IEs;
 703                 total_ielen = pnetwork->network.IELength;
 704         }
 705         else     // Beacon or Probe Respones
 706         {
 707                 ie_ptr = pnetwork->network.IEs + _FIXED_IE_LENGTH_;
 708                 total_ielen = pnetwork->network.IELength - _FIXED_IE_LENGTH_;
 709         }
 710         while(cnt < total_ielen)
 711         {
 712                 if(rtw_is_wps_ie(&ie_ptr[cnt], &wps_ielen) && (wps_ielen>2))
 713                 {
 714                         wpsie_ptr = &ie_ptr[cnt];
 715                         iwe->cmd =IWEVGENIE;
 716                         iwe->u.data.length = (u16)wps_ielen;
 717                         start = iwe_stream_add_point(info, start, stop,iwe, wpsie_ptr);
 718                 }
 719                 cnt+=ie_ptr[cnt+1]+2; //goto next
 720         }
 721         return start;
 722 }
 723
 724 static inline char * iwe_stream_wapi_process(_adapter *padapter,
 725                                 struct iw_request_info* info, struct wlan_network *pnetwork,
 726                                 char *start, char *stop,struct iw_event *iwe)
 727 {
 728 #ifdef CONFIG_WAPI_SUPPORT
 729         char *p;
 730
 731         if (pnetwork->network.Reserved[0] != 2) // Probe Request
 732         {
 733                 sint out_len_wapi=0;
 734                 /* here use static for stack size */
 735                 static u8 buf_wapi[MAX_WAPI_IE_LEN*2]={0};
 736                 static u8 wapi_ie[MAX_WAPI_IE_LEN]={0};
 737                 u16 wapi_len=0;
 738                 u16  i;
 739
 740                 out_len_wapi=rtw_get_wapi_ie(pnetwork->network.IEs ,pnetwork->network.IELength,wapi_ie,&wapi_len);
 741                 RT_TRACE(_module_rtl871x_mlme_c_,_drv_info_,("rtw_wx_get_scan: ssid=%s\n",pnetwork->network.Ssid.Ssid));
 742                 RT_TRACE(_module_rtl871x_mlme_c_,_drv_info_,("rtw_wx_get_scan: wapi_len=%d \n",wapi_len));
 743
 744                 DBG_871X("rtw_wx_get_scan: %s ",pnetwork->network.Ssid.Ssid);
 745                 DBG_871X("rtw_wx_get_scan: ssid = %d ",wapi_len);
 746
 747
 748                 if (wapi_len > 0)
 749                 {
 750                         p=buf_wapi;
 751                         //_rtw_memset(buf_wapi, 0, MAX_WAPI_IE_LEN*2);
 752                         p += sprintf(p, "wapi_ie=");
 753                         for (i = 0; i < wapi_len; i++) {
 754                                 p += sprintf(p, "%02x", wapi_ie[i]);
 755                         }
 756
 757                         _rtw_memset(iwe, 0, sizeof(*iwe));
 758                         iwe->cmd = IWEVCUSTOM;
 759                         iwe->u.data.length = strlen(buf_wapi);
 760                         start = iwe_stream_add_point(info, start, stop, iwe,buf_wapi);
 761
 762                         _rtw_memset(iwe, 0, sizeof(*iwe));
 763                         iwe->cmd =IWEVGENIE;
 764                         iwe->u.data.length = wapi_len;
 765                         start = iwe_stream_add_point(info, start, stop, iwe, wapi_ie);
 766                 }
 767         }
 768 #endif//#ifdef CONFIG_WAPI_SUPPORT
 769         return start;
 770 }
 771
 772 static inline char *  iwe_stream_rssi_process(_adapter *padapter,
 773                                 struct iw_request_info* info, struct wlan_network *pnetwork,
 774                                 char *start, char *stop,struct iw_event *iwe)
 775 {
 776         u8 ss, sq;
 777         struct mlme_priv *pmlmepriv = &(padapter->mlmepriv);
 778
 779         /* Add quality statistics */
 780         iwe->cmd = IWEVQUAL;
 781         iwe->u.qual.updated = IW_QUAL_QUAL_UPDATED | IW_QUAL_LEVEL_UPDATED
 782         #if defined(CONFIG_SIGNAL_DISPLAY_DBM) && defined(CONFIG_BACKGROUND_NOISE_MONITOR)
 783                 | IW_QUAL_NOISE_UPDATED
 784         #else
 785                 | IW_QUAL_NOISE_INVALID
 786         #endif
 787         #ifdef CONFIG_SIGNAL_DISPLAY_DBM
 788                 | IW_QUAL_DBM
 789         #endif
 790         ;
 791
 792         if ( check_fwstate(pmlmepriv, _FW_LINKED)== _TRUE &&
 793                 is_same_network(&pmlmepriv->cur_network.network, &pnetwork->network, 0)){
 794                 ss = padapter->recvpriv.signal_strength;
 795                 sq = padapter->recvpriv.signal_qual;
 796         } else {
 797                 ss = pnetwork->network.PhyInfo.SignalStrength;
 798                 sq = pnetwork->network.PhyInfo.SignalQuality;
 799         }
 800
 801
 802         #ifdef CONFIG_SIGNAL_DISPLAY_DBM
 803         iwe->u.qual.level = (u8) translate_percentage_to_dbm(ss); /* dbm */
 804         #else
 805         #ifdef CONFIG_SIGNAL_SCALE_MAPPING
 806         iwe->u.qual.level = (u8)ss; /* % */
 807         #else
 808         {
 809                 /* Do signal scale mapping when using percentage as the unit of signal strength, since the scale mapping is skipped in odm */
 810
 811                 HAL_DATA_TYPE *pHal = GET_HAL_DATA(padapter);
 812
 813                 iwe->u.qual.level = (u8)odm_SignalScaleMapping(&pHal->odmpriv, ss);
 814         }
 815         #endif
 816         #endif
 817
 818         iwe->u.qual.qual = (u8)sq;   // signal quality
 819
 820         #ifdef CONFIG_PLATFORM_ROCKCHIPS
 821         iwe->u.qual.noise = -100; // noise level suggest by zhf@rockchips
 822         #else
 823         #if defined(CONFIG_SIGNAL_DISPLAY_DBM) && defined(CONFIG_BACKGROUND_NOISE_MONITOR)
 824         {
 825                 s16 tmp_noise=0;
 826                 rtw_hal_get_odm_var(padapter, HAL_ODM_NOISE_MONITOR,&(pnetwork->network.Configuration.DSConfig), &(tmp_noise));
 827                 iwe->u.qual.noise = tmp_noise ;
 828         }
 829         #else
 830         iwe->u.qual.noise = 0; // noise level
 831         #endif
 832         #endif //CONFIG_PLATFORM_ROCKCHIPS
 833
 834         //DBG_871X("iqual=%d, ilevel=%d, inoise=%d, iupdated=%d\n", iwe.u.qual.qual, iwe.u.qual.level , iwe.u.qual.noise, iwe.u.qual.updated);
 835
 836         start = iwe_stream_add_event(info, start, stop, iwe, IW_EV_QUAL_LEN);
 837         return start;
 838 }
 839
 840 static inline char *  iwe_stream_net_rsv_process(_adapter *padapter,
 841                                 struct iw_request_info* info, struct wlan_network *pnetwork,
 842                                 char *start, char *stop,struct iw_event *iwe)
 843 {
 844         u8 buf[32] = {0};
 845         u8 * p,*pos;
 846         int len;
 847         p = buf;
 848         pos = pnetwork->network.Reserved;
 849
 850         p += sprintf(p, "fm=%02X%02X", pos[1], pos[0]);
 851         _rtw_memset(iwe, 0, sizeof(*iwe));
 852         iwe->cmd = IWEVCUSTOM;
 853         iwe->u.data.length = strlen(buf);
 854         start = iwe_stream_add_point(info, start, stop,iwe, buf);
 855         return start;
 856 }
 857
 858 #if 1
 859 static char *translate_scan(_adapter *padapter,
 860                                 struct iw_request_info* info, struct wlan_network *pnetwork,
 861                                 char *start, char *stop)
 862 {
 863         struct iw_event iwe;
 864         u16 cap = 0;
 865         _rtw_memset(&iwe, 0, sizeof(iwe));
 866
 867         if(_FALSE == search_p2p_wfd_ie(padapter,info,pnetwork,start,stop))
 868                 return start;
 869
 870         start = iwe_stream_mac_addr_proess(padapter,info,pnetwork,start,stop,&iwe);
 871         start = iwe_stream_essid_proess(padapter,info,pnetwork,start,stop,&iwe);
 872         start = iwe_stream_protocol_process(padapter,info,pnetwork,start,stop,&iwe);
 873         if (pnetwork->network.Reserved[0] == 2) // Probe Request
 874         {
 875                 cap = 0;
 876         }
 877         else
 878         {
 879                 _rtw_memcpy((u8 *)&cap, rtw_get_capability_from_ie(pnetwork->network.IEs), 2);
 880                 cap = le16_to_cpu(cap);
 881         }
 882
 883         start = iwe_stream_mode_process(padapter,info,pnetwork,start,stop,&iwe,cap);
 884         start = iwe_stream_chan_process(padapter,info,pnetwork,start,stop,&iwe);
 885         start = iwe_stream_encryption_process(padapter,info,pnetwork,start,stop,&iwe,cap);
 886         start = iwe_stream_rate_process(padapter,info,pnetwork,start,stop,&iwe);
 887         start = iwe_stream_wpa_wpa2_process(padapter,info,pnetwork,start,stop,&iwe);
 888         start = iwe_stream_wps_process(padapter,info,pnetwork,start,stop,&iwe);
 889         start = iwe_stream_wapi_process(padapter,info,pnetwork,start,stop,&iwe);
 890         start = iwe_stream_rssi_process(padapter,info,pnetwork,start,stop,&iwe);
 891         start = iwe_stream_net_rsv_process(padapter,info,pnetwork,start,stop,&iwe);
 892
 893         return start;
 894 }
 895 #else
 896 static char *translate_scan(_adapter *padapter,
 897                                 struct iw_request_info* info, struct wlan_network *pnetwork,
 898                                 char *start, char *stop)
 899 {
 900         struct iw_event iwe;
 901         u16 cap;
 902         u32 ht_ielen = 0, vht_ielen = 0;
 903         char custom[MAX_CUSTOM_LEN];
 904         char *p;
 905         u16 max_rate=0, rate, ht_cap=_FALSE, vht_cap = _FALSE;
 906         u32 i = 0;
 907         char    *current_val;
 908         long rssi;
 909         u8 bw_40MHz=0, short_GI=0, bw_160MHz=0, vht_highest_rate = 0;
 910         u16 mcs_rate=0, vht_data_rate=0;
 911         u8 ie_offset = (pnetwork->network.Reserved[0] == 2? 0:12);
 912         struct registry_priv *pregpriv = &padapter->registrypriv;
 913
 914         if(_FALSE == search_p2p_wfd_ie(padapter,info,pnetwork,start,stop))
 915                 return start;
 916
 917         /*  AP MAC address  */
 918         iwe.cmd = SIOCGIWAP;
 919         iwe.u.ap_addr.sa_family = ARPHRD_ETHER;
 920
 921         _rtw_memcpy(iwe.u.ap_addr.sa_data, pnetwork->network.MacAddress, ETH_ALEN);
 922         start = iwe_stream_add_event(info, start, stop, &iwe, IW_EV_ADDR_LEN);
 923
 924         /* Add the ESSID */
 925         iwe.cmd = SIOCGIWESSID;
 926         iwe.u.data.flags = 1;
 927         iwe.u.data.length = min((u16)pnetwork->network.Ssid.SsidLength, (u16)32);
 928         start = iwe_stream_add_point(info, start, stop, &iwe, pnetwork->network.Ssid.Ssid);
 929
 930         //parsing HT_CAP_IE
 931         if (pnetwork->network.Reserved[0] == 2) // Probe Request
 932         {
 933                 p = rtw_get_ie(&pnetwork->network.IEs[0], _HT_CAPABILITY_IE_, &ht_ielen, pnetwork->network.IELength);
 934         }
 935         else
 936         {
 937                 p = rtw_get_ie(&pnetwork->network.IEs[12], _HT_CAPABILITY_IE_, &ht_ielen, pnetwork->network.IELength-12);
 938         }
 939         if(p && ht_ielen>0)
 940         {
 941                 struct rtw_ieee80211_ht_cap *pht_capie;
 942                 ht_cap = _TRUE;
 943                 pht_capie = (struct rtw_ieee80211_ht_cap *)(p+2);
 944                 _rtw_memcpy(&mcs_rate , pht_capie->supp_mcs_set, 2);
 945                 bw_40MHz = (pht_capie->cap_info&IEEE80211_HT_CAP_SUP_WIDTH) ? 1:0;
 946                 short_GI = (pht_capie->cap_info&(IEEE80211_HT_CAP_SGI_20|IEEE80211_HT_CAP_SGI_40)) ? 1:0;
 947         }
 948
 949 #ifdef CONFIG_80211AC_VHT
 950         //parsing VHT_CAP_IE
 951         p = rtw_get_ie(&pnetwork->network.IEs[ie_offset], EID_VHTCapability, &vht_ielen, pnetwork->network.IELength-ie_offset);
 952         if(p && vht_ielen>0)
 953         {
 954                 u8      mcs_map[2];
 955
 956                 vht_cap = _TRUE;
 957                 bw_160MHz = GET_VHT_CAPABILITY_ELE_CHL_WIDTH(p+2);
 958                 if(bw_160MHz)
 959                         short_GI = GET_VHT_CAPABILITY_ELE_SHORT_GI160M(p+2);
 960                 else
 961                         short_GI = GET_VHT_CAPABILITY_ELE_SHORT_GI80M(p+2);
 962
 963                 _rtw_memcpy(mcs_map, GET_VHT_CAPABILITY_ELE_TX_MCS(p+2), 2);
 964
 965                 vht_highest_rate = rtw_get_vht_highest_rate(mcs_map);
 966                 vht_data_rate = rtw_vht_mcs_to_data_rate(CHANNEL_WIDTH_80, short_GI, vht_highest_rate);
 967         }
 968 #endif
 969
 970         /* Add the protocol name */
 971         iwe.cmd = SIOCGIWNAME;
 972         if ((rtw_is_cckratesonly_included((u8*)&pnetwork->network.SupportedRates)) == _TRUE)
 973         {
 974                 if(ht_cap == _TRUE)
 975                         snprintf(iwe.u.name, IFNAMSIZ, "IEEE 802.11bn");
 976                 else
 977                 snprintf(iwe.u.name, IFNAMSIZ, "IEEE 802.11b");
 978         }
 979         else if ((rtw_is_cckrates_included((u8*)&pnetwork->network.SupportedRates)) == _TRUE)
 980         {
 981                 if(ht_cap == _TRUE)
 982                         snprintf(iwe.u.name, IFNAMSIZ, "IEEE 802.11bgn");
 983                 else
 984                         snprintf(iwe.u.name, IFNAMSIZ, "IEEE 802.11bg");
 985         }
 986         else
 987         {
 988                 if(pnetwork->network.Configuration.DSConfig > 14)
 989                 {
 990                         if(vht_cap == _TRUE)
 991                                 snprintf(iwe.u.name, IFNAMSIZ, "IEEE 802.11AC");
 992                         else if(ht_cap == _TRUE)
 993                                 snprintf(iwe.u.name, IFNAMSIZ, "IEEE 802.11an");
 994                         else
 995                                 snprintf(iwe.u.name, IFNAMSIZ, "IEEE 802.11a");
 996                 }
 997                 else
 998                 {
 999                         if(ht_cap == _TRUE)
1000                                 snprintf(iwe.u.name, IFNAMSIZ, "IEEE 802.11gn");
1001                         else
1002                                 snprintf(iwe.u.name, IFNAMSIZ, "IEEE 802.11g");
1003                 }
1004         }
1005
1006         start = iwe_stream_add_event(info, start, stop, &iwe, IW_EV_CHAR_LEN);
1007
1008           /* Add mode */
1009         if (pnetwork->network.Reserved[0] == 2) // Probe Request
1010         {
1011                 cap = 0;
1012         }
1013         else
1014         {
1015         iwe.cmd = SIOCGIWMODE;
1016                 _rtw_memcpy((u8 *)&cap, rtw_get_capability_from_ie(pnetwork->network.IEs), 2);
1017                 cap = le16_to_cpu(cap);
1018         }
1019
1020         if(cap & (WLAN_CAPABILITY_IBSS |WLAN_CAPABILITY_BSS)){
1021                 if (cap & WLAN_CAPABILITY_BSS)
1022                         iwe.u.mode = IW_MODE_MASTER;
1023                 else
1024                         iwe.u.mode = IW_MODE_ADHOC;
1025
1026                 start = iwe_stream_add_event(info, start, stop, &iwe, IW_EV_UINT_LEN);
1027         }
1028
1029         if(pnetwork->network.Configuration.DSConfig<1 /*|| pnetwork->network.Configuration.DSConfig>14*/)
1030                 pnetwork->network.Configuration.DSConfig = 1;
1031
1032          /* Add frequency/channel */
1033         iwe.cmd = SIOCGIWFREQ;
1034         iwe.u.freq.m = rtw_ch2freq(pnetwork->network.Configuration.DSConfig) * 100000;
1035         iwe.u.freq.e = 1;
1036         iwe.u.freq.i = pnetwork->network.Configuration.DSConfig;
1037         start = iwe_stream_add_event(info, start, stop, &iwe, IW_EV_FREQ_LEN);
1038
1039         /* Add encryption capability */
1040         iwe.cmd = SIOCGIWENCODE;
1041         if (cap & WLAN_CAPABILITY_PRIVACY)
1042                 iwe.u.data.flags = IW_ENCODE_ENABLED | IW_ENCODE_NOKEY;
1043         else
1044                 iwe.u.data.flags = IW_ENCODE_DISABLED;
1045         iwe.u.data.length = 0;
1046         start = iwe_stream_add_point(info, start, stop, &iwe, pnetwork->network.Ssid.Ssid);
1047
1048         /*Add basic and extended rates */
1049         max_rate = 0;
1050         p = custom;
1051         p += snprintf(p, MAX_CUSTOM_LEN - (p - custom), " Rates (Mb/s): ");
1052         while(pnetwork->network.SupportedRates[i]!=0)
1053         {
1054                 rate = pnetwork->network.SupportedRates[i]&0x7F;
1055                 if (rate > max_rate)
1056                         max_rate = rate;
1057                 p += snprintf(p, MAX_CUSTOM_LEN - (p - custom),
1058                               "%d%s ", rate >> 1, (rate & 1) ? ".5" : "");
1059                 i++;
1060         }
1061
1062         if(vht_cap == _TRUE) {
1063                 max_rate = vht_data_rate;
1064         }
1065         else if(ht_cap == _TRUE)
1066         {
1067                 if(mcs_rate&0x8000)//MCS15
1068                 {
1069                         max_rate = (bw_40MHz) ? ((short_GI)?300:270):((short_GI)?144:130);
1070
1071                 }
1072                 else if(mcs_rate&0x0080)//MCS7
1073                 {
1074                         max_rate = (bw_40MHz) ? ((short_GI)?150:135):((short_GI)?72:65);
1075                 }
1076                 else//default MCS7
1077                 {
1078                         //DBG_871X("wx_get_scan, mcs_rate_bitmap=0x%x\n", mcs_rate);
1079                         max_rate = (bw_40MHz) ? ((short_GI)?150:135):((short_GI)?72:65);
1080                 }
1081
1082                 max_rate = max_rate*2;//Mbps/2;
1083         }
1084
1085         iwe.cmd = SIOCGIWRATE;
1086         iwe.u.bitrate.fixed = iwe.u.bitrate.disabled = 0;
1087         iwe.u.bitrate.value = max_rate * 500000;
1088         start = iwe_stream_add_event(info, start, stop, &iwe, IW_EV_PARAM_LEN);
1089
1090         //parsing WPA/WPA2 IE
1091         if (pnetwork->network.Reserved[0] != 2) // Probe Request
1092         {
1093                 u8 buf[MAX_WPA_IE_LEN*2];
1094                 u8 wpa_ie[255],rsn_ie[255];
1095                 u16 wpa_len=0,rsn_len=0;
1096                 u8 *p;
1097                 sint out_len=0;
1098                 out_len=rtw_get_sec_ie(pnetwork->network.IEs ,pnetwork->network.IELength,rsn_ie,&rsn_len,wpa_ie,&wpa_len);
1099                 RT_TRACE(_module_rtl871x_mlme_c_,_drv_info_,("rtw_wx_get_scan: ssid=%s\n",pnetwork->network.Ssid.Ssid));
1100                 RT_TRACE(_module_rtl871x_mlme_c_,_drv_info_,("rtw_wx_get_scan: wpa_len=%d rsn_len=%d\n",wpa_len,rsn_len));
1101
1102                 if (wpa_len > 0)
1103                 {
1104                         p=buf;
1105                         _rtw_memset(buf, 0, MAX_WPA_IE_LEN*2);
1106                         p += sprintf(p, "wpa_ie=");
1107                         for (i = 0; i < wpa_len; i++) {
1108                                 p += sprintf(p, "%02x", wpa_ie[i]);
1109                         }
1110
1111                         if (wpa_len > 100) {
1112                                 printk("-----------------Len %d----------------\n", wpa_len);
1113                                 for (i = 0; i < wpa_len; i++) {
1114                                         printk("%02x ", wpa_ie[i]);
1115                                 }
1116                                 printk("\n");
1117                                 printk("-----------------Len %d----------------\n", wpa_len);
1118                         }
1119
1120                         _rtw_memset(&iwe, 0, sizeof(iwe));
1121                         iwe.cmd = IWEVCUSTOM;
1122                         iwe.u.data.length = strlen(buf);
1123                         start = iwe_stream_add_point(info, start, stop, &iwe,buf);
1124
1125                         _rtw_memset(&iwe, 0, sizeof(iwe));
1126                         iwe.cmd =IWEVGENIE;
1127                         iwe.u.data.length = wpa_len;
1128                         start = iwe_stream_add_point(info, start, stop, &iwe, wpa_ie);
1129                 }
1130                 if (rsn_len > 0)
1131                 {
1132                         p = buf;
1133                         _rtw_memset(buf, 0, MAX_WPA_IE_LEN*2);
1134                         p += sprintf(p, "rsn_ie=");
1135                         for (i = 0; i < rsn_len; i++) {
1136                                 p += sprintf(p, "%02x", rsn_ie[i]);
1137                         }
1138                         _rtw_memset(&iwe, 0, sizeof(iwe));
1139                         iwe.cmd = IWEVCUSTOM;
1140                         iwe.u.data.length = strlen(buf);
1141                         start = iwe_stream_add_point(info, start, stop, &iwe,buf);
1142
1143                         _rtw_memset(&iwe, 0, sizeof(iwe));
1144                         iwe.cmd =IWEVGENIE;
1145                         iwe.u.data.length = rsn_len;
1146                         start = iwe_stream_add_point(info, start, stop, &iwe, rsn_ie);
1147                 }
1148         }
1149
1150         { //parsing WPS IE
1151                 uint cnt = 0,total_ielen;
1152                 u8 *wpsie_ptr=NULL;
1153                 uint wps_ielen = 0;
1154
1155                 u8 *ie_ptr = pnetwork->network.IEs + ie_offset;
1156                 total_ielen= pnetwork->network.IELength - ie_offset;
1157
1158                 if (pnetwork->network.Reserved[0] == 2) // Probe Request
1159                 {
1160                         ie_ptr = pnetwork->network.IEs;
1161                         total_ielen = pnetwork->network.IELength;
1162                 }
1163                 else     // Beacon or Probe Respones
1164                 {
1165                         ie_ptr = pnetwork->network.IEs + _FIXED_IE_LENGTH_;
1166                         total_ielen = pnetwork->network.IELength - _FIXED_IE_LENGTH_;
1167                 }
1168
1169                 while(cnt < total_ielen)
1170                 {
1171                         if(rtw_is_wps_ie(&ie_ptr[cnt], &wps_ielen) && (wps_ielen>2))
1172                         {
1173                                 wpsie_ptr = &ie_ptr[cnt];
1174                                 iwe.cmd =IWEVGENIE;
1175                                 iwe.u.data.length = (u16)wps_ielen;
1176                                 start = iwe_stream_add_point(info, start, stop, &iwe, wpsie_ptr);
1177                         }
1178                         cnt+=ie_ptr[cnt+1]+2; //goto next
1179                 }
1180         }
1181
1182 #ifdef CONFIG_WAPI_SUPPORT
1183         if (pnetwork->network.Reserved[0] != 2) // Probe Request
1184         {
1185                 sint out_len_wapi=0;
1186                 /* here use static for stack size */
1187                 static u8 buf_wapi[MAX_WAPI_IE_LEN*2];
1188                 static u8 wapi_ie[MAX_WAPI_IE_LEN];
1189                 u16 wapi_len=0;
1190                 u16  i;
1191
1192                 _rtw_memset(buf_wapi, 0, MAX_WAPI_IE_LEN);
1193                 _rtw_memset(wapi_ie, 0, MAX_WAPI_IE_LEN);
1194
1195                 out_len_wapi=rtw_get_wapi_ie(pnetwork->network.IEs ,pnetwork->network.IELength,wapi_ie,&wapi_len);
1196                 RT_TRACE(_module_rtl871x_mlme_c_,_drv_info_,("rtw_wx_get_scan: ssid=%s\n",pnetwork->network.Ssid.Ssid));
1197                 RT_TRACE(_module_rtl871x_mlme_c_,_drv_info_,("rtw_wx_get_scan: wapi_len=%d \n",wapi_len));
1198
1199                 DBG_871X("rtw_wx_get_scan: %s ",pnetwork->network.Ssid.Ssid);
1200                 DBG_871X("rtw_wx_get_scan: ssid = %d ",wapi_len);
1201
1202
1203                 if (wapi_len > 0)
1204                 {
1205                         p=buf_wapi;
1206                         _rtw_memset(buf_wapi, 0, MAX_WAPI_IE_LEN*2);
1207                         p += sprintf(p, "wapi_ie=");
1208                         for (i = 0; i < wapi_len; i++) {
1209                                 p += sprintf(p, "%02x", wapi_ie[i]);
1210                         }
1211
1212                         _rtw_memset(&iwe, 0, sizeof(iwe));
1213                         iwe.cmd = IWEVCUSTOM;
1214                         iwe.u.data.length = strlen(buf_wapi);
1215                         start = iwe_stream_add_point(info, start, stop, &iwe,buf_wapi);
1216
1217                         _rtw_memset(&iwe, 0, sizeof(iwe));
1218                         iwe.cmd =IWEVGENIE;
1219                         iwe.u.data.length = wapi_len;
1220                         start = iwe_stream_add_point(info, start, stop, &iwe, wapi_ie);
1221                 }
1222         }
1223 #endif
1224
1225 {
1226         struct mlme_priv *pmlmepriv = &(padapter->mlmepriv);
1227         u8 ss, sq;
1228
1229         /* Add quality statistics */
1230         iwe.cmd = IWEVQUAL;
1231         iwe.u.qual.updated = IW_QUAL_QUAL_UPDATED | IW_QUAL_LEVEL_UPDATED
1232         #if defined(CONFIG_SIGNAL_DISPLAY_DBM) && defined(CONFIG_BACKGROUND_NOISE_MONITOR)
1233                 | IW_QUAL_NOISE_UPDATED
1234         #else
1235                 | IW_QUAL_NOISE_INVALID
1236         #endif
1237         #ifdef CONFIG_SIGNAL_DISPLAY_DBM
1238                 | IW_QUAL_DBM
1239         #endif
1240         ;
1241
1242         if ( check_fwstate(pmlmepriv, _FW_LINKED)== _TRUE &&
1243                 is_same_network(&pmlmepriv->cur_network.network, &pnetwork->network, 0)){
1244                 ss = padapter->recvpriv.signal_strength;
1245                 sq = padapter->recvpriv.signal_qual;
1246         } else {
1247                 ss = pnetwork->network.PhyInfo.SignalStrength;
1248                 sq = pnetwork->network.PhyInfo.SignalQuality;
1249         }
1250
1251
1252         #ifdef CONFIG_SIGNAL_DISPLAY_DBM
1253         iwe.u.qual.level = (u8) translate_percentage_to_dbm(ss); /* dbm */
1254         #else
1255         #ifdef CONFIG_SIGNAL_SCALE_MAPPING
1256         iwe.u.qual.level = (u8)ss; /* % */
1257         #else
1258         {
1259                 /* Do signal scale mapping when using percentage as the unit of signal strength, since the scale mapping is skipped in odm */
1260
1261                 HAL_DATA_TYPE *pHal = GET_HAL_DATA(padapter);
1262
1263                 iwe.u.qual.level = (u8)odm_SignalScaleMapping(&pHal->odmpriv, ss);
1264         }
1265         #endif
1266         #endif
1267
1268         iwe.u.qual.qual = (u8)sq;   // signal quality
1269
1270         #ifdef CONFIG_PLATFORM_ROCKCHIPS
1271         iwe.u.qual.noise = -100; // noise level suggest by zhf@rockchips
1272         #else
1273         #if defined(CONFIG_SIGNAL_DISPLAY_DBM) && defined(CONFIG_BACKGROUND_NOISE_MONITOR)
1274         {
1275                 s16 tmp_noise=0;
1276                 rtw_hal_get_odm_var(padapter, HAL_ODM_NOISE_MONITOR,&(pnetwork->network.Configuration.DSConfig), &(tmp_noise));
1277                 iwe.u.qual.noise = tmp_noise ;
1278         }
1279         #else
1280         iwe.u.qual.noise = 0; // noise level
1281         #endif
1282         #endif //CONFIG_PLATFORM_ROCKCHIPS
1283
1284         //DBG_871X("iqual=%d, ilevel=%d, inoise=%d, iupdated=%d\n", iwe.u.qual.qual, iwe.u.qual.level , iwe.u.qual.noise, iwe.u.qual.updated);
1285
1286         start = iwe_stream_add_event(info, start, stop, &iwe, IW_EV_QUAL_LEN);
1287 }
1288
1289         {
1290                 u8 buf[MAX_WPA_IE_LEN];
1291                 u8 * p,*pos;
1292                 int len;
1293                 p = buf;
1294                 pos = pnetwork->network.Reserved;
1295                 _rtw_memset(buf, 0, MAX_WPA_IE_LEN);
1296                 p += sprintf(p, "fm=%02X%02X", pos[1], pos[0]);
1297                 _rtw_memset(&iwe, 0, sizeof(iwe));
1298                 iwe.cmd = IWEVCUSTOM;
1299                 iwe.u.data.length = strlen(buf);
1300                 start = iwe_stream_add_point(info, start, stop, &iwe, buf);
1301         }
1302
1303         return start;
1304 }
1305 #endif
1306
1307 static int wpa_set_auth_algs(struct net_device *dev, u32 value)
1308 {
1309         _adapter *padapter = (_adapter *) rtw_netdev_priv(dev);
1310         int ret = 0;
1311
1312         if ((value & AUTH_ALG_SHARED_KEY)&&(value & AUTH_ALG_OPEN_SYSTEM))
1313         {
1314                 DBG_871X("wpa_set_auth_algs, AUTH_ALG_SHARED_KEY and  AUTH_ALG_OPEN_SYSTEM [value:0x%x]\n",value);
1315                 padapter->securitypriv.ndisencryptstatus = Ndis802_11Encryption1Enabled;
1316                 padapter->securitypriv.ndisauthtype = Ndis802_11AuthModeAutoSwitch;
1317                 padapter->securitypriv.dot11AuthAlgrthm = dot11AuthAlgrthm_Auto;
1318         }
1319         else if (value & AUTH_ALG_SHARED_KEY)
1320         {
1321                 DBG_871X("wpa_set_auth_algs, AUTH_ALG_SHARED_KEY  [value:0x%x]\n",value);
1322                 padapter->securitypriv.ndisencryptstatus = Ndis802_11Encryption1Enabled;
1323
1324 #ifdef CONFIG_PLATFORM_MT53XX
1325                 padapter->securitypriv.ndisauthtype = Ndis802_11AuthModeAutoSwitch;
1326                 padapter->securitypriv.dot11AuthAlgrthm = dot11AuthAlgrthm_Auto;
1327 #else
1328                 padapter->securitypriv.ndisauthtype = Ndis802_11AuthModeShared;
1329                 padapter->securitypriv.dot11AuthAlgrthm = dot11AuthAlgrthm_Shared;
1330 #endif
1331         }
1332         else if(value & AUTH_ALG_OPEN_SYSTEM)
1333         {
1334                 DBG_871X("wpa_set_auth_algs, AUTH_ALG_OPEN_SYSTEM\n");
1335                 //padapter->securitypriv.ndisencryptstatus = Ndis802_11EncryptionDisabled;
1336                 if(padapter->securitypriv.ndisauthtype < Ndis802_11AuthModeWPAPSK)
1337                 {
1338 #ifdef CONFIG_PLATFORM_MT53XX
1339                         padapter->securitypriv.ndisauthtype = Ndis802_11AuthModeAutoSwitch;
1340                         padapter->securitypriv.dot11AuthAlgrthm = dot11AuthAlgrthm_Auto;
1341 #else
1342                         padapter->securitypriv.ndisauthtype = Ndis802_11AuthModeOpen;
1343                         padapter->securitypriv.dot11AuthAlgrthm = dot11AuthAlgrthm_Open;
1344 #endif
1345                 }
1346
1347         }
1348         else if(value & AUTH_ALG_LEAP)
1349         {
1350                 DBG_871X("wpa_set_auth_algs, AUTH_ALG_LEAP\n");
1351         }
1352         else
1353         {
1354                 DBG_871X("wpa_set_auth_algs, error!\n");
1355                 ret = -EINVAL;
1356         }
1357
1358         return ret;
1359
1360 }
1361
1362 static int wpa_set_encryption(struct net_device *dev, struct ieee_param *param, u32 param_len)
1363 {
1364         int ret = 0;
1365         u32 wep_key_idx, wep_key_len,wep_total_len;
1366         _adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
1367         struct mlme_priv        *pmlmepriv = &padapter->mlmepriv;
1368         struct security_priv *psecuritypriv = &padapter->securitypriv;
1369 #ifdef CONFIG_P2P
1370         struct wifidirect_info* pwdinfo = &padapter->wdinfo;
1371 #endif //CONFIG_P2P
1372
1373 _func_enter_;
1374
1375         param->u.crypt.err = 0;
1376         param->u.crypt.alg[IEEE_CRYPT_ALG_NAME_LEN - 1] = '\0';
1377
1378         if (param_len < (u32) ((u8 *) param->u.crypt.key - (u8 *) param) + param->u.crypt.key_len)
1379         {
1380                 ret =  -EINVAL;
1381                 goto exit;
1382         }
1383
1384         if (param->sta_addr[0] == 0xff && param->sta_addr[1] == 0xff &&
1385             param->sta_addr[2] == 0xff && param->sta_addr[3] == 0xff &&
1386             param->sta_addr[4] == 0xff && param->sta_addr[5] == 0xff)
1387         {
1388
1389                 if (param->u.crypt.idx >= WEP_KEYS
1390 #ifdef CONFIG_IEEE80211W
1391                         && param->u.crypt.idx > BIP_MAX_KEYID
1392 #endif //CONFIG_IEEE80211W
1393                         )
1394                 {
1395                         ret = -EINVAL;
1396                         goto exit;
1397                 }
1398         }
1399         else
1400         {
1401 #ifdef CONFIG_WAPI_SUPPORT
1402                 if (strcmp(param->u.crypt.alg, "SMS4"))
1403 #endif
1404                 {
1405                         ret = -EINVAL;
1406                         goto exit;
1407                 }
1408         }
1409
1410         if (strcmp(param->u.crypt.alg, "WEP") == 0)
1411         {
1412                 RT_TRACE(_module_rtl871x_ioctl_os_c,_drv_err_,("wpa_set_encryption, crypt.alg = WEP\n"));
1413                 DBG_871X("wpa_set_encryption, crypt.alg = WEP\n");
1414
1415                 wep_key_idx = param->u.crypt.idx;
1416                 wep_key_len = param->u.crypt.key_len;
1417
1418                 if ((wep_key_idx > WEP_KEYS) || (wep_key_len <= 0))
1419                 {
1420                         ret = -EINVAL;
1421                         goto exit;
1422                 }
1423
1424                 if (psecuritypriv->bWepDefaultKeyIdxSet == 0) {
1425                         /* wep default key has not been set, so use this key index as default key.*/
1426
1427                         wep_key_len = wep_key_len <= 5 ? 5 : 13;
1428
1429                         psecuritypriv->ndisencryptstatus = Ndis802_11Encryption1Enabled;
1430                         psecuritypriv->dot11PrivacyAlgrthm = _WEP40_;
1431                         psecuritypriv->dot118021XGrpPrivacy = _WEP40_;
1432
1433                         if (wep_key_len == 13)
1434                         {
1435                                 psecuritypriv->dot11PrivacyAlgrthm = _WEP104_;
1436                                 psecuritypriv->dot118021XGrpPrivacy = _WEP104_;
1437                         }
1438
1439                         psecuritypriv->dot11PrivacyKeyIndex = wep_key_idx;
1440                 }
1441
1442                 _rtw_memcpy(&(psecuritypriv->dot11DefKey[wep_key_idx].skey[0]), param->u.crypt.key, wep_key_len);
1443
1444                 psecuritypriv->dot11DefKeylen[wep_key_idx] = wep_key_len;
1445
1446                 psecuritypriv->key_mask |= BIT(wep_key_idx);
1447
1448                 goto exit;
1449         }
1450
1451         if(padapter->securitypriv.dot11AuthAlgrthm == dot11AuthAlgrthm_8021X) // 802_1x
1452         {
1453                 struct sta_info * psta,*pbcmc_sta;
1454                 struct sta_priv * pstapriv = &padapter->stapriv;
1455
1456                 if (check_fwstate(pmlmepriv, WIFI_STATION_STATE | WIFI_MP_STATE) == _TRUE) //sta mode
1457                 {
1458                         psta = rtw_get_stainfo(pstapriv, get_bssid(pmlmepriv));
1459                         if (psta == NULL) {
1460                                 //DEBUG_ERR( ("Set wpa_set_encryption: Obtain Sta_info fail \n"));
1461                         }
1462                         else
1463                         {
1464                                 //Jeff: don't disable ieee8021x_blocked while clearing key
1465                                 if (strcmp(param->u.crypt.alg, "none") != 0)
1466                                         psta->ieee8021x_blocked = _FALSE;
1467
1468                                 if((padapter->securitypriv.ndisencryptstatus == Ndis802_11Encryption2Enabled)||
1469                                                 (padapter->securitypriv.ndisencryptstatus ==  Ndis802_11Encryption3Enabled))
1470                                 {
1471                                         psta->dot118021XPrivacy = padapter->securitypriv.dot11PrivacyAlgrthm;
1472                                 }
1473
1474                                 if(param->u.crypt.set_tx ==1)//pairwise key
1475                                 {
1476                                         _rtw_memcpy(psta->dot118021x_UncstKey.skey,  param->u.crypt.key, (param->u.crypt.key_len>16 ?16:param->u.crypt.key_len));
1477
1478                                         if(strcmp(param->u.crypt.alg, "TKIP") == 0)//set mic key
1479                                         {
1480                                                 //DEBUG_ERR(("\nset key length :param->u.crypt.key_len=%d\n", param->u.crypt.key_len));
1481                                                 _rtw_memcpy(psta->dot11tkiptxmickey.skey, &(param->u.crypt.key[16]), 8);
1482                                                 _rtw_memcpy(psta->dot11tkiprxmickey.skey, &(param->u.crypt.key[24]), 8);
1483
1484                                                 padapter->securitypriv.busetkipkey=_FALSE;
1485                                                 //_set_timer(&padapter->securitypriv.tkip_timer, 50);
1486                                         }
1487
1488                                         //DEBUG_ERR((" param->u.crypt.key_len=%d\n",param->u.crypt.key_len));
1489                                         DBG_871X(" ~~~~set sta key:unicastkey\n");
1490
1491                                         rtw_setstakey_cmd(padapter, psta, UNICAST_KEY, _TRUE);
1492
1493                                         psta->bpairwise_key_installed = _TRUE;
1494
1495                                 }
1496                                 else//group key
1497                                 {
1498                                         if(strcmp(param->u.crypt.alg, "TKIP") == 0 || strcmp(param->u.crypt.alg, "CCMP") == 0)
1499                                         {
1500                                                 _rtw_memcpy(padapter->securitypriv.dot118021XGrpKey[param->u.crypt.idx].skey,  param->u.crypt.key,(param->u.crypt.key_len>16 ?16:param->u.crypt.key_len));
1501                                                 //only TKIP group key need to install this
1502                                                 if(param->u.crypt.key_len > 16)
1503                                                 {
1504                                                         _rtw_memcpy(padapter->securitypriv.dot118021XGrptxmickey[param->u.crypt.idx].skey,&(param->u.crypt.key[16]),8);
1505                                                         _rtw_memcpy(padapter->securitypriv.dot118021XGrprxmickey[param->u.crypt.idx].skey,&(param->u.crypt.key[24]),8);
1506                                                 }
1507                                                 padapter->securitypriv.binstallGrpkey = _TRUE;
1508                                                 //DEBUG_ERR((" param->u.crypt.key_len=%d\n", param->u.crypt.key_len));
1509                                                 DBG_871X(" ~~~~set sta key:groupkey\n");
1510
1511                                                 padapter->securitypriv.dot118021XGrpKeyid = param->u.crypt.idx;
1512
1513                                                 rtw_set_key(padapter,&padapter->securitypriv,param->u.crypt.idx, 1, _TRUE);
1514                                         }
1515 #ifdef CONFIG_IEEE80211W
1516                                         else if(strcmp(param->u.crypt.alg, "BIP") == 0)
1517                                         {
1518                                                 int no;
1519                                                 //printk("BIP key_len=%d , index=%d @@@@@@@@@@@@@@@@@@\n", param->u.crypt.key_len, param->u.crypt.idx);
1520                                                 //save the IGTK key, length 16 bytes
1521                                                 _rtw_memcpy(padapter->securitypriv.dot11wBIPKey[param->u.crypt.idx].skey,  param->u.crypt.key,(param->u.crypt.key_len>16 ?16:param->u.crypt.key_len));
1522                                                 /*printk("IGTK key below:\n");
1523                                                 for(no=0;no<16;no++)
1524                                                         printk(" %02x ", padapter->securitypriv.dot11wBIPKey[param->u.crypt.idx].skey[no]);
1525                                                 printk("\n");*/
1526                                                 padapter->securitypriv.dot11wBIPKeyid = param->u.crypt.idx;
1527                                                 padapter->securitypriv.binstallBIPkey = _TRUE;
1528                                                 DBG_871X(" ~~~~set sta key:IGKT\n");
1529                                         }
1530 #endif //CONFIG_IEEE80211W
1531
1532 #ifdef CONFIG_P2P
1533                                         if(rtw_p2p_chk_state(pwdinfo, P2P_STATE_PROVISIONING_ING))
1534                                         {
1535                                                 rtw_p2p_set_state(pwdinfo, P2P_STATE_PROVISIONING_DONE);
1536                                         }
1537 #endif //CONFIG_P2P
1538
1539                                 }
1540                         }
1541
1542                         pbcmc_sta=rtw_get_bcmc_stainfo(padapter);
1543                         if(pbcmc_sta==NULL)
1544                         {
1545                                 //DEBUG_ERR( ("Set OID_802_11_ADD_KEY: bcmc stainfo is null \n"));
1546                         }
1547                         else
1548                         {
1549                                 //Jeff: don't disable ieee8021x_blocked while clearing key
1550                                 if (strcmp(param->u.crypt.alg, "none") != 0)
1551                                         pbcmc_sta->ieee8021x_blocked = _FALSE;
1552
1553                                 if((padapter->securitypriv.ndisencryptstatus == Ndis802_11Encryption2Enabled)||
1554                                                 (padapter->securitypriv.ndisencryptstatus ==  Ndis802_11Encryption3Enabled))
1555                                 {
1556                                         pbcmc_sta->dot118021XPrivacy = padapter->securitypriv.dot11PrivacyAlgrthm;
1557                                 }
1558                         }
1559                 }
1560                 else if(check_fwstate(pmlmepriv, WIFI_ADHOC_STATE)) //adhoc mode
1561                 {
1562                 }
1563         }
1564
1565 #ifdef CONFIG_WAPI_SUPPORT
1566         if (strcmp(param->u.crypt.alg, "SMS4") == 0)
1567         {
1568                 PRT_WAPI_T                      pWapiInfo = &padapter->wapiInfo;
1569                 PRT_WAPI_STA_INFO       pWapiSta;
1570                 u8                                      WapiASUEPNInitialValueSrc[16] = {0x36,0x5C,0x36,0x5C,0x36,0x5C,0x36,0x5C,0x36,0x5C,0x36,0x5C,0x36,0x5C,0x36,0x5C} ;
1571                 u8                                      WapiAEPNInitialValueSrc[16] = {0x37,0x5C,0x36,0x5C,0x36,0x5C,0x36,0x5C,0x36,0x5C,0x36,0x5C,0x36,0x5C,0x36,0x5C} ;
1572                 u8                                      WapiAEMultiCastPNInitialValueSrc[16] = {0x36,0x5C,0x36,0x5C,0x36,0x5C,0x36,0x5C,0x36,0x5C,0x36,0x5C,0x36,0x5C,0x36,0x5C} ;
1573
1574                 if(param->u.crypt.set_tx == 1)
1575                 {
1576                         list_for_each_entry(pWapiSta, &pWapiInfo->wapiSTAUsedList, list) {
1577                                 if(_rtw_memcmp(pWapiSta->PeerMacAddr,param->sta_addr,6))
1578                                 {
1579                                         _rtw_memcpy(pWapiSta->lastTxUnicastPN,WapiASUEPNInitialValueSrc,16);
1580
1581                                         pWapiSta->wapiUsk.bSet = true;
1582                                         _rtw_memcpy(pWapiSta->wapiUsk.dataKey,param->u.crypt.key,16);
1583                                         _rtw_memcpy(pWapiSta->wapiUsk.micKey,param->u.crypt.key+16,16);
1584                                         pWapiSta->wapiUsk.keyId = param->u.crypt.idx ;
1585                                         pWapiSta->wapiUsk.bTxEnable = true;
1586
1587                                         _rtw_memcpy(pWapiSta->lastRxUnicastPNBEQueue,WapiAEPNInitialValueSrc,16);
1588                                         _rtw_memcpy(pWapiSta->lastRxUnicastPNBKQueue,WapiAEPNInitialValueSrc,16);
1589                                         _rtw_memcpy(pWapiSta->lastRxUnicastPNVIQueue,WapiAEPNInitialValueSrc,16);
1590                                         _rtw_memcpy(pWapiSta->lastRxUnicastPNVOQueue,WapiAEPNInitialValueSrc,16);
1591                                         _rtw_memcpy(pWapiSta->lastRxUnicastPN,WapiAEPNInitialValueSrc,16);
1592                                         pWapiSta->wapiUskUpdate.bTxEnable = false;
1593                                         pWapiSta->wapiUskUpdate.bSet = false;
1594
1595                                         if (psecuritypriv->sw_encrypt== false || psecuritypriv->sw_decrypt == false)
1596                                         {
1597                                                 //set unicast key for ASUE
1598                                                 rtw_wapi_set_key(padapter, &pWapiSta->wapiUsk, pWapiSta, false, false);
1599                                         }
1600                                 }
1601                         }
1602                 }
1603                 else
1604                 {
1605                         list_for_each_entry(pWapiSta, &pWapiInfo->wapiSTAUsedList, list) {
1606                                 if(_rtw_memcmp(pWapiSta->PeerMacAddr,get_bssid(pmlmepriv),6))
1607                                 {
1608                                         pWapiSta->wapiMsk.bSet = true;
1609                                         _rtw_memcpy(pWapiSta->wapiMsk.dataKey,param->u.crypt.key,16);
1610                                         _rtw_memcpy(pWapiSta->wapiMsk.micKey,param->u.crypt.key+16,16);
1611                                         pWapiSta->wapiMsk.keyId = param->u.crypt.idx ;
1612                                         pWapiSta->wapiMsk.bTxEnable = false;
1613                                         if(!pWapiSta->bSetkeyOk)
1614                                                 pWapiSta->bSetkeyOk = true;
1615                                         pWapiSta->bAuthenticateInProgress = false;
1616
1617                                         _rtw_memcpy(pWapiSta->lastRxMulticastPN, WapiAEMultiCastPNInitialValueSrc, 16);
1618
1619                                         if (psecuritypriv->sw_decrypt == false)
1620                                         {
1621                                                 //set rx broadcast key for ASUE
1622                                                 rtw_wapi_set_key(padapter, &pWapiSta->wapiMsk, pWapiSta, true, false);
1623                                         }
1624                                 }
1625
1626                         }
1627                 }
1628         }
1629 #endif
1630
1631 exit:
1632
1633 _func_exit_;
1634
1635         return ret;
1636 }
1637
1638 static int rtw_set_wpa_ie(_adapter *padapter, char *pie, unsigned short ielen)
1639 {
1640         u8 *buf=NULL, *pos=NULL;
1641         u32 left;
1642         int group_cipher = 0, pairwise_cipher = 0;
1643         int ret = 0;
1644         u8 null_addr[]= {0,0,0,0,0,0};
1645 #ifdef CONFIG_P2P
1646         struct wifidirect_info* pwdinfo = &padapter->wdinfo;
1647 #endif //CONFIG_P2P
1648
1649         if((ielen > MAX_WPA_IE_LEN) || (pie == NULL)){
1650                 _clr_fwstate_(&padapter->mlmepriv, WIFI_UNDER_WPS);
1651                 if(pie == NULL)
1652                         return ret;
1653                 else
1654                         return -EINVAL;
1655         }
1656
1657         if(ielen)
1658         {
1659                 buf = rtw_zmalloc(ielen);
1660                 if (buf == NULL){
1661                         ret =  -ENOMEM;
1662                         goto exit;
1663                 }
1664
1665                 _rtw_memcpy(buf, pie , ielen);
1666
1667                 //dump
1668                 {
1669                         int i;
1670                         DBG_871X("\n wpa_ie(length:%d):\n", ielen);
1671                         for(i=0;i<ielen;i=i+8)
1672                                 DBG_871X("0x%.2x 0x%.2x 0x%.2x 0x%.2x 0x%.2x 0x%.2x 0x%.2x 0x%.2x \n",buf[i],buf[i+1],buf[i+2],buf[i+3],buf[i+4],buf[i+5],buf[i+6],buf[i+7]);
1673                 }
1674
1675                 pos = buf;
1676                 if(ielen < RSN_HEADER_LEN){
1677                         RT_TRACE(_module_rtl871x_ioctl_os_c,_drv_err_,("Ie len too short %d\n", ielen));
1678                         ret  = -1;
1679                         goto exit;
1680                 }
1681
1682 #if 0
1683                 pos += RSN_HEADER_LEN;
1684                 left  = ielen - RSN_HEADER_LEN;
1685
1686                 if (left >= RSN_SELECTOR_LEN){
1687                         pos += RSN_SELECTOR_LEN;
1688                         left -= RSN_SELECTOR_LEN;
1689                 }
1690                 else if (left > 0){
1691                         RT_TRACE(_module_rtl871x_ioctl_os_c,_drv_err_,("Ie length mismatch, %u too much \n", left));
1692                         ret =-1;
1693                         goto exit;
1694                 }
1695 #endif
1696
1697                 if(rtw_parse_wpa_ie(buf, ielen, &group_cipher, &pairwise_cipher, NULL) == _SUCCESS)
1698                 {
1699                         padapter->securitypriv.dot11AuthAlgrthm= dot11AuthAlgrthm_8021X;
1700                         padapter->securitypriv.ndisauthtype=Ndis802_11AuthModeWPAPSK;
1701                         _rtw_memcpy(padapter->securitypriv.supplicant_ie, &buf[0], ielen);
1702                 }
1703
1704                 if(rtw_parse_wpa2_ie(buf, ielen, &group_cipher, &pairwise_cipher, NULL) == _SUCCESS)
1705                 {
1706                         padapter->securitypriv.dot11AuthAlgrthm= dot11AuthAlgrthm_8021X;
1707                         padapter->securitypriv.ndisauthtype=Ndis802_11AuthModeWPA2PSK;
1708                         _rtw_memcpy(padapter->securitypriv.supplicant_ie, &buf[0], ielen);
1709                 }
1710
1711                 if (group_cipher == 0)
1712                 {
1713                         group_cipher = WPA_CIPHER_NONE;
1714                 }
1715                 if (pairwise_cipher == 0)
1716                 {
1717                         pairwise_cipher = WPA_CIPHER_NONE;
1718                 }
1719
1720                 switch(group_cipher)
1721                 {
1722                         case WPA_CIPHER_NONE:
1723                                 padapter->securitypriv.dot118021XGrpPrivacy=_NO_PRIVACY_;
1724                                 padapter->securitypriv.ndisencryptstatus=Ndis802_11EncryptionDisabled;
1725                                 break;
1726                         case WPA_CIPHER_WEP40:
1727                                 padapter->securitypriv.dot118021XGrpPrivacy=_WEP40_;
1728                                 padapter->securitypriv.ndisencryptstatus = Ndis802_11Encryption1Enabled;
1729                                 break;
1730                         case WPA_CIPHER_TKIP:
1731                                 padapter->securitypriv.dot118021XGrpPrivacy=_TKIP_;
1732                                 padapter->securitypriv.ndisencryptstatus = Ndis802_11Encryption2Enabled;
1733                                 break;
1734                         case WPA_CIPHER_CCMP:
1735                                 padapter->securitypriv.dot118021XGrpPrivacy=_AES_;
1736                                 padapter->securitypriv.ndisencryptstatus = Ndis802_11Encryption3Enabled;
1737                                 break;
1738                         case WPA_CIPHER_WEP104:
1739                                 padapter->securitypriv.dot118021XGrpPrivacy=_WEP104_;
1740                                 padapter->securitypriv.ndisencryptstatus = Ndis802_11Encryption1Enabled;
1741                                 break;
1742                 }
1743
1744                 switch(pairwise_cipher)
1745                 {
1746                         case WPA_CIPHER_NONE:
1747                                 padapter->securitypriv.dot11PrivacyAlgrthm=_NO_PRIVACY_;
1748                                 padapter->securitypriv.ndisencryptstatus=Ndis802_11EncryptionDisabled;
1749                                 break;
1750                         case WPA_CIPHER_WEP40:
1751                                 padapter->securitypriv.dot11PrivacyAlgrthm=_WEP40_;
1752                                 padapter->securitypriv.ndisencryptstatus = Ndis802_11Encryption1Enabled;
1753                                 break;
1754                         case WPA_CIPHER_TKIP:
1755                                 padapter->securitypriv.dot11PrivacyAlgrthm=_TKIP_;
1756                                 padapter->securitypriv.ndisencryptstatus = Ndis802_11Encryption2Enabled;
1757                                 break;
1758                         case WPA_CIPHER_CCMP:
1759                                 padapter->securitypriv.dot11PrivacyAlgrthm=_AES_;
1760                                 padapter->securitypriv.ndisencryptstatus = Ndis802_11Encryption3Enabled;
1761                                 break;
1762                         case WPA_CIPHER_WEP104:
1763                                 padapter->securitypriv.dot11PrivacyAlgrthm=_WEP104_;
1764                                 padapter->securitypriv.ndisencryptstatus = Ndis802_11Encryption1Enabled;
1765                                 break;
1766                 }
1767
1768                 _clr_fwstate_(&padapter->mlmepriv, WIFI_UNDER_WPS);
1769                 {//set wps_ie
1770                         u16 cnt = 0;
1771                         u8 eid, wps_oui[4]={0x0,0x50,0xf2,0x04};
1772
1773                         while( cnt < ielen )
1774                         {
1775                                 eid = buf[cnt];
1776
1777                                 if((eid==_VENDOR_SPECIFIC_IE_)&&(_rtw_memcmp(&buf[cnt+2], wps_oui, 4)==_TRUE))
1778                                 {
1779                                         DBG_871X("SET WPS_IE\n");
1780
1781                                         padapter->securitypriv.wps_ie_len = ((buf[cnt+1]+2) < MAX_WPS_IE_LEN) ? (buf[cnt+1]+2):MAX_WPS_IE_LEN;
1782
1783                                         _rtw_memcpy(padapter->securitypriv.wps_ie, &buf[cnt], padapter->securitypriv.wps_ie_len);
1784
1785                                         set_fwstate(&padapter->mlmepriv, WIFI_UNDER_WPS);
1786
1787 #ifdef CONFIG_P2P
1788                                         if(rtw_p2p_chk_state(pwdinfo, P2P_STATE_GONEGO_OK))
1789                                         {
1790                                                 rtw_p2p_set_state(pwdinfo, P2P_STATE_PROVISIONING_ING);
1791                                         }
1792 #endif //CONFIG_P2P
1793                                         cnt += buf[cnt+1]+2;
1794
1795                                         break;
1796                                 } else {
1797                                         cnt += buf[cnt+1]+2; //goto next
1798                                 }
1799                         }
1800                 }
1801         }
1802
1803         //TKIP and AES disallow multicast packets until installing group key
1804         if(padapter->securitypriv.dot11PrivacyAlgrthm == _TKIP_
1805                 || padapter->securitypriv.dot11PrivacyAlgrthm == _TKIP_WTMIC_
1806                 || padapter->securitypriv.dot11PrivacyAlgrthm == _AES_)
1807                 //WPS open need to enable multicast
1808                 //|| check_fwstate(&padapter->mlmepriv, WIFI_UNDER_WPS) == _TRUE)
1809                 rtw_hal_set_hwreg(padapter, HW_VAR_OFF_RCR_AM, null_addr);
1810
1811         RT_TRACE(_module_rtl871x_ioctl_os_c, _drv_info_,
1812                  ("rtw_set_wpa_ie: pairwise_cipher=0x%08x padapter->securitypriv.ndisencryptstatus=%d padapter->securitypriv.ndisauthtype=%d\n",
1813                   pairwise_cipher, padapter->securitypriv.ndisencryptstatus, padapter->securitypriv.ndisauthtype));
1814
1815 exit:
1816
1817         if (buf) rtw_mfree(buf, ielen);
1818
1819         return ret;
1820 }
1821
1822 static int rtw_wx_get_name(struct net_device *dev,
1823                              struct iw_request_info *info,
1824                              union iwreq_data *wrqu, char *extra)
1825 {
1826         _adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
1827         u16 cap;
1828         u32 ht_ielen = 0;
1829         char *p;
1830         u8 ht_cap=_FALSE, vht_cap=_FALSE;
1831         struct  mlme_priv       *pmlmepriv = &(padapter->mlmepriv);
1832         WLAN_BSSID_EX  *pcur_bss = &pmlmepriv->cur_network.network;
1833         NDIS_802_11_RATES_EX* prates = NULL;
1834
1835         RT_TRACE(_module_rtl871x_mlme_c_,_drv_info_,("cmd_code=%x\n", info->cmd));
1836
1837         _func_enter_;
1838
1839         if (check_fwstate(pmlmepriv, _FW_LINKED|WIFI_ADHOC_MASTER_STATE) == _TRUE)
1840         {
1841                 //parsing HT_CAP_IE
1842                 p = rtw_get_ie(&pcur_bss->IEs[12], _HT_CAPABILITY_IE_, &ht_ielen, pcur_bss->IELength-12);
1843                 if(p && ht_ielen>0)
1844                 {
1845                         ht_cap = _TRUE;
1846                 }
1847
1848 #ifdef CONFIG_80211AC_VHT
1849                 if(pmlmepriv->vhtpriv.vht_option == _TRUE)
1850                         vht_cap = _TRUE;
1851 #endif
1852
1853                 prates = &pcur_bss->SupportedRates;
1854
1855                 if (rtw_is_cckratesonly_included((u8*)prates) == _TRUE)
1856                 {
1857                         if(ht_cap == _TRUE)
1858                                 snprintf(wrqu->name, IFNAMSIZ, "IEEE 802.11bn");
1859                         else
1860                                 snprintf(wrqu->name, IFNAMSIZ, "IEEE 802.11b");
1861                 }
1862                 else if ((rtw_is_cckrates_included((u8*)prates)) == _TRUE)
1863                 {
1864                         if(ht_cap == _TRUE)
1865                                 snprintf(wrqu->name, IFNAMSIZ, "IEEE 802.11bgn");
1866                         else
1867                                 snprintf(wrqu->name, IFNAMSIZ, "IEEE 802.11bg");
1868                 }
1869                 else
1870                 {
1871                         if(pcur_bss->Configuration.DSConfig > 14)
1872                         {
1873                         #ifdef CONFIG_80211AC_VHT
1874                                 if(vht_cap == _TRUE){
1875                                         snprintf(wrqu->name, IFNAMSIZ, "IEEE 802.11AC");
1876                                 }
1877                                 else
1878                         #endif
1879                                 {
1880                                         if(ht_cap == _TRUE)
1881                                                 snprintf(wrqu->name, IFNAMSIZ, "IEEE 802.11an");
1882                                         else
1883                                                 snprintf(wrqu->name, IFNAMSIZ, "IEEE 802.11a");
1884                                 }
1885                         }
1886                         else
1887                         {
1888                                 if(ht_cap == _TRUE)
1889                                         snprintf(wrqu->name, IFNAMSIZ, "IEEE 802.11gn");
1890                                 else
1891                                         snprintf(wrqu->name, IFNAMSIZ, "IEEE 802.11g");
1892                         }
1893                 }
1894         }
1895         else
1896         {
1897                 //prates = &padapter->registrypriv.dev_network.SupportedRates;
1898                 //snprintf(wrqu->name, IFNAMSIZ, "IEEE 802.11g");
1899                 snprintf(wrqu->name, IFNAMSIZ, "unassociated");
1900         }
1901
1902         _func_exit_;
1903
1904         return 0;
1905 }
1906
1907 static int rtw_wx_set_freq(struct net_device *dev,
1908                              struct iw_request_info *info,
1909                              union iwreq_data *wrqu, char *extra)
1910 {
1911
1912         _adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
1913         HAL_DATA_TYPE *hal_data = GET_HAL_DATA(padapter);
1914         struct  mlme_priv       *pmlmepriv = &(padapter->mlmepriv);
1915         struct wlan_network  *cur_network = &(pmlmepriv->cur_network);
1916         int exp = 1, freq = 0, div = 0;
1917
1918         _func_enter_;
1919
1920         RT_TRACE(_module_rtl871x_mlme_c_, _drv_notice_, ("+rtw_wx_set_freq\n"));
1921
1922         if (wrqu->freq.m <= 1000) {
1923                 if (wrqu->freq.flags == IW_FREQ_AUTO) {
1924                         if (rtw_ch_set_search_ch(padapter->mlmeextpriv.channel_set, wrqu->freq.m) > 0) {
1925                                 padapter->mlmeextpriv.cur_channel = wrqu->freq.m;
1926                                 DBG_871X("%s: channel is auto, set to channel %d\n", __func__, wrqu->freq.m);
1927                         } else {
1928                                 padapter->mlmeextpriv.cur_channel = 1;
1929                                 DBG_871X("%s: channel is auto, Channel Plan don't match just set to channel 1\n", __func__);
1930                         }
1931                 } else {
1932                         padapter->mlmeextpriv.cur_channel = wrqu->freq.m;
1933                         DBG_871X("%s: set to channel %d\n", __func__, padapter->mlmeextpriv.cur_channel);
1934                 }
1935         } else {
1936                 while (wrqu->freq.e) {
1937                         exp *= 10;
1938                         wrqu->freq.e--;
1939                 }
1940
1941                 freq = wrqu->freq.m;
1942
1943                 while (!(freq%10)) {
1944                         freq /= 10;
1945                         exp *= 10;
1946                 }
1947
1948                 /* freq unit is MHz here */
1949                 div = 1000000/exp;
1950
1951                 if (div)
1952                         freq /= div;
1953                 else {
1954                         div = exp/1000000;
1955                         freq *= div;
1956                 }
1957
1958                 /* If freq is invalid, rtw_freq2ch() will return channel 1 */
1959                 padapter->mlmeextpriv.cur_channel = rtw_freq2ch(freq);
1960                 DBG_871X("%s: set to channel %d\n", __func__, padapter->mlmeextpriv.cur_channel);
1961         }
1962
1963         set_channel_bwmode(padapter, padapter->mlmeextpriv.cur_channel, HAL_PRIME_CHNL_OFFSET_DONT_CARE, CHANNEL_WIDTH_20);
1964
1965         _func_exit_;
1966
1967         return 0;
1968 }
1969
1970 static int rtw_wx_get_freq(struct net_device *dev,
1971                              struct iw_request_info *info,
1972                              union iwreq_data *wrqu, char *extra)
1973 {
1974         _adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
1975         struct  mlme_priv       *pmlmepriv = &(padapter->mlmepriv);
1976         WLAN_BSSID_EX  *pcur_bss = &pmlmepriv->cur_network.network;
1977
1978         if (check_fwstate(pmlmepriv, _FW_LINKED) == _TRUE && check_fwstate(pmlmepriv, WIFI_MONITOR_STATE) != _TRUE) {
1979
1980                 wrqu->freq.m = rtw_ch2freq(pcur_bss->Configuration.DSConfig) * 100000;
1981                 wrqu->freq.e = 1;
1982                 wrqu->freq.i = pcur_bss->Configuration.DSConfig;
1983
1984         } else {
1985                 wrqu->freq.m = rtw_ch2freq(padapter->mlmeextpriv.cur_channel) * 100000;
1986                 wrqu->freq.e = 1;
1987                 wrqu->freq.i = padapter->mlmeextpriv.cur_channel;
1988         }
1989
1990         return 0;
1991 }
1992
1993 static int rtw_wx_set_mode(struct net_device *dev, struct iw_request_info *a,
1994                              union iwreq_data *wrqu, char *b)
1995 {
1996         _adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
1997         struct  mlme_priv       *pmlmepriv = &(padapter->mlmepriv);
1998         NDIS_802_11_NETWORK_INFRASTRUCTURE networkType ;
1999         int ret = 0;
2000
2001         _func_enter_;
2002
2003         if(_FAIL == rtw_pwr_wakeup(padapter)) {
2004                 ret= -EPERM;
2005                 goto exit;
2006         }
2007
2008         if (!rtw_is_hw_init_completed(padapter)) {
2009                 ret = -EPERM;
2010                 goto exit;
2011         }
2012
2013         /* initial default type */
2014         dev->type = ARPHRD_ETHER;
2015
2016         switch(wrqu->mode)
2017         {
2018                 case IW_MODE_MONITOR:
2019                         networkType = Ndis802_11Monitor;
2020 #if 0
2021                         dev->type = ARPHRD_IEEE80211; /* IEEE 802.11 : 801 */
2022 #endif
2023                         dev->type = ARPHRD_IEEE80211_RADIOTAP; /* IEEE 802.11 + radiotap header : 803 */
2024                         DBG_871X("set_mode = IW_MODE_MONITOR\n");
2025                         break;
2026
2027                 case IW_MODE_AUTO:
2028                         networkType = Ndis802_11AutoUnknown;
2029                         DBG_871X("set_mode = IW_MODE_AUTO\n");
2030                         break;
2031                 case IW_MODE_ADHOC:
2032                         networkType = Ndis802_11IBSS;
2033                         DBG_871X("set_mode = IW_MODE_ADHOC\n");
2034                         break;
2035                 case IW_MODE_MASTER:
2036                         networkType = Ndis802_11APMode;
2037                         DBG_871X("set_mode = IW_MODE_MASTER\n");
2038                         //rtw_setopmode_cmd(padapter, networkType,_TRUE);
2039                         break;
2040                 case IW_MODE_INFRA:
2041                         networkType = Ndis802_11Infrastructure;
2042                         DBG_871X("set_mode = IW_MODE_INFRA\n");
2043                         break;
2044
2045                 default :
2046                         ret = -EINVAL;;
2047                         RT_TRACE(_module_rtl871x_ioctl_os_c,_drv_err_,("\n Mode: %s is not supported  \n", iw_operation_mode[wrqu->mode]));
2048                         goto exit;
2049         }
2050
2051 /*
2052         if(Ndis802_11APMode == networkType)
2053         {
2054                 rtw_setopmode_cmd(padapter, networkType,_TRUE);
2055         }
2056         else
2057         {
2058                 rtw_setopmode_cmd(padapter, Ndis802_11AutoUnknown,_TRUE);
2059         }
2060 */
2061
2062         if (rtw_set_802_11_infrastructure_mode(padapter, networkType) ==_FALSE){
2063
2064                 ret = -EPERM;
2065                 goto exit;
2066
2067         }
2068
2069         rtw_setopmode_cmd(padapter, networkType,_TRUE);
2070
2071         if (check_fwstate(pmlmepriv, WIFI_MONITOR_STATE) == _TRUE)
2072                 rtw_indicate_connect(padapter);
2073
2074 exit:
2075
2076         _func_exit_;
2077
2078         return ret;
2079
2080 }
2081
2082 static int rtw_wx_get_mode(struct net_device *dev, struct iw_request_info *a,
2083                              union iwreq_data *wrqu, char *b)
2084 {
2085         _adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
2086         struct  mlme_priv       *pmlmepriv = &(padapter->mlmepriv);
2087
2088         RT_TRACE(_module_rtl871x_mlme_c_,_drv_info_,(" rtw_wx_get_mode \n"));
2089
2090         _func_enter_;
2091
2092         if (check_fwstate(pmlmepriv, WIFI_STATION_STATE) == _TRUE)
2093         {
2094                 wrqu->mode = IW_MODE_INFRA;
2095         }
2096         else if  ((check_fwstate(pmlmepriv, WIFI_ADHOC_MASTER_STATE) == _TRUE) ||
2097                        (check_fwstate(pmlmepriv, WIFI_ADHOC_STATE) == _TRUE))
2098
2099         {
2100                 wrqu->mode = IW_MODE_ADHOC;
2101         }
2102         else if(check_fwstate(pmlmepriv, WIFI_AP_STATE) == _TRUE)
2103         {
2104                 wrqu->mode = IW_MODE_MASTER;
2105         } else if (check_fwstate(pmlmepriv, WIFI_MONITOR_STATE) == _TRUE)
2106                 wrqu->mode = IW_MODE_MONITOR;
2107         else
2108                 wrqu->mode = IW_MODE_AUTO;
2109
2110         _func_exit_;
2111
2112         return 0;
2113
2114 }
2115
2116
2117 static int rtw_wx_set_pmkid(struct net_device *dev,
2118                              struct iw_request_info *a,
2119                              union iwreq_data *wrqu, char *extra)
2120 {
2121         _adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
2122         u8          j,blInserted = _FALSE;
2123         int         intReturn = _FALSE;
2124         struct mlme_priv  *pmlmepriv = &padapter->mlmepriv;
2125         struct security_priv *psecuritypriv = &padapter->securitypriv;
2126         struct iw_pmksa*  pPMK = ( struct iw_pmksa* ) extra;
2127         u8     strZeroMacAddress[ ETH_ALEN ] = { 0x00 };
2128         u8     strIssueBssid[ ETH_ALEN ] = { 0x00 };
2129
2130 /*
2131         struct iw_pmksa
2132         {
2133             __u32   cmd;
2134             struct sockaddr bssid;
2135             __u8    pmkid[IW_PMKID_LEN];   //IW_PMKID_LEN=16
2136         }
2137         There are the BSSID information in the bssid.sa_data array.
2138         If cmd is IW_PMKSA_FLUSH, it means the wpa_suppplicant wants to clear all the PMKID information.
2139         If cmd is IW_PMKSA_ADD, it means the wpa_supplicant wants to add a PMKID/BSSID to driver.
2140         If cmd is IW_PMKSA_REMOVE, it means the wpa_supplicant wants to remove a PMKID/BSSID from driver.
2141         */
2142
2143         _rtw_memcpy( strIssueBssid, pPMK->bssid.sa_data, ETH_ALEN);
2144         if ( pPMK->cmd == IW_PMKSA_ADD )
2145         {
2146                 DBG_871X( "[rtw_wx_set_pmkid] IW_PMKSA_ADD!\n" );
2147                 if ( _rtw_memcmp( strIssueBssid, strZeroMacAddress, ETH_ALEN ) == _TRUE )
2148                 {
2149                     return( intReturn );
2150                 }
2151                 else
2152                 {
2153                     intReturn = _TRUE;
2154                 }
2155                 blInserted = _FALSE;
2156
2157                 //overwrite PMKID
2158                 for(j=0 ; j<NUM_PMKID_CACHE; j++)
2159                 {
2160                         if( _rtw_memcmp( psecuritypriv->PMKIDList[j].Bssid, strIssueBssid, ETH_ALEN) ==_TRUE )
2161                         { // BSSID is matched, the same AP => rewrite with new PMKID.
2162
2163                                 DBG_871X( "[rtw_wx_set_pmkid] BSSID exists in the PMKList.\n" );
2164
2165                                 _rtw_memcpy( psecuritypriv->PMKIDList[j].PMKID, pPMK->pmkid, IW_PMKID_LEN);
2166                                 psecuritypriv->PMKIDList[ j ].bUsed = _TRUE;
2167                                 psecuritypriv->PMKIDIndex = j+1;
2168                                 blInserted = _TRUE;
2169                                 break;
2170                         }
2171                 }
2172
2173                 if(!blInserted)
2174                 {
2175                     // Find a new entry
2176                     DBG_871X( "[rtw_wx_set_pmkid] Use the new entry index = %d for this PMKID.\n",
2177                             psecuritypriv->PMKIDIndex );
2178
2179                     _rtw_memcpy(psecuritypriv->PMKIDList[psecuritypriv->PMKIDIndex].Bssid, strIssueBssid, ETH_ALEN);
2180                     _rtw_memcpy(psecuritypriv->PMKIDList[psecuritypriv->PMKIDIndex].PMKID, pPMK->pmkid, IW_PMKID_LEN);
2181
2182                     psecuritypriv->PMKIDList[ psecuritypriv->PMKIDIndex ].bUsed = _TRUE;
2183                     psecuritypriv->PMKIDIndex++ ;
2184                     if(psecuritypriv->PMKIDIndex==16)
2185                     {
2186                         psecuritypriv->PMKIDIndex =0;
2187                     }
2188                 }
2189         }
2190         else if ( pPMK->cmd == IW_PMKSA_REMOVE )
2191         {
2192                 DBG_871X( "[rtw_wx_set_pmkid] IW_PMKSA_REMOVE!\n" );
2193                 intReturn = _TRUE;
2194                 for(j=0 ; j<NUM_PMKID_CACHE; j++)
2195                 {
2196                         if( _rtw_memcmp( psecuritypriv->PMKIDList[j].Bssid, strIssueBssid, ETH_ALEN) ==_TRUE )
2197                         { // BSSID is matched, the same AP => Remove this PMKID information and reset it.
2198                                 _rtw_memset( psecuritypriv->PMKIDList[ j ].Bssid, 0x00, ETH_ALEN );
2199                                 psecuritypriv->PMKIDList[ j ].bUsed = _FALSE;
2200                                 break;
2201                         }
2202                 }
2203         }
2204         else if ( pPMK->cmd == IW_PMKSA_FLUSH )
2205         {
2206             DBG_871X( "[rtw_wx_set_pmkid] IW_PMKSA_FLUSH!\n" );
2207             _rtw_memset( &psecuritypriv->PMKIDList[ 0 ], 0x00, sizeof( RT_PMKID_LIST ) * NUM_PMKID_CACHE );
2208             psecuritypriv->PMKIDIndex = 0;
2209             intReturn = _TRUE;
2210         }
2211     return( intReturn );
2212 }
2213
2214 static int rtw_wx_get_sens(struct net_device *dev,
2215                              struct iw_request_info *info,
2216                              union iwreq_data *wrqu, char *extra)
2217 {
2218         #ifdef CONFIG_PLATFORM_ROCKCHIPS
2219         _adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
2220         struct mlme_priv *pmlmepriv = &(padapter->mlmepriv);
2221
2222         /*
2223         *  20110311 Commented by Jeff
2224         *  For rockchip platform's wpa_driver_wext_get_rssi
2225         */
2226         if(check_fwstate(pmlmepriv, _FW_LINKED) == _TRUE) {
2227                 //wrqu->sens.value=-padapter->recvpriv.signal_strength;
2228                 wrqu->sens.value=-padapter->recvpriv.rssi;
2229                 //DBG_871X("%s: %d\n", __FUNCTION__, wrqu->sens.value);
2230                 wrqu->sens.fixed = 0; /* no auto select */
2231         } else
2232         #endif
2233         {
2234                 wrqu->sens.value = 0;
2235                 wrqu->sens.fixed = 0;   /* no auto select */
2236                 wrqu->sens.disabled = 1;
2237         }
2238         return 0;
2239 }
2240
2241 static int rtw_wx_get_range(struct net_device *dev,
2242                                 struct iw_request_info *info,
2243                                 union iwreq_data *wrqu, char *extra)
2244 {
2245         struct iw_range *range = (struct iw_range *)extra;
2246         _adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
2247         struct mlme_ext_priv    *pmlmeext = &padapter->mlmeextpriv;
2248
2249         u16 val;
2250         int i;
2251
2252         _func_enter_;
2253
2254         RT_TRACE(_module_rtl871x_mlme_c_,_drv_info_,("rtw_wx_get_range. cmd_code=%x\n", info->cmd));
2255
2256         wrqu->data.length = sizeof(*range);
2257         _rtw_memset(range, 0, sizeof(*range));
2258
2259         /* Let's try to keep this struct in the same order as in
2260          * linux/include/wireless.h
2261          */
2262
2263         /* TODO: See what values we can set, and remove the ones we can't
2264          * set, or fill them with some default data.
2265          */
2266
2267         /* ~5 Mb/s real (802.11b) */
2268         range->throughput = 5 * 1000 * 1000;
2269
2270         // TODO: Not used in 802.11b?
2271 //      range->min_nwid;        /* Minimal NWID we are able to set */
2272         // TODO: Not used in 802.11b?
2273 //      range->max_nwid;        /* Maximal NWID we are able to set */
2274
2275         /* Old Frequency (backward compat - moved lower ) */
2276 //      range->old_num_channels;
2277 //      range->old_num_frequency;
2278 //      range->old_freq[6]; /* Filler to keep "version" at the same offset */
2279
2280         /* signal level threshold range */
2281
2282         /* Quality of link & SNR stuff */
2283         /* Quality range (link, level, noise)
2284          * If the quality is absolute, it will be in the range [0 ; max_qual],
2285          * if the quality is dBm, it will be in the range [max_qual ; 0].
2286          * Don't forget that we use 8 bit arithmetics...
2287          *
2288          * If percentage range is 0~100
2289          * Signal strength dbm range logical is -100 ~ 0
2290          * but usually value is -90 ~ -20
2291          * When CONFIG_SIGNAL_SCALE_MAPPING is defined, dbm range is -95 ~ -45
2292          */
2293         range->max_qual.qual = 100;
2294 #ifdef CONFIG_SIGNAL_DISPLAY_DBM
2295         range->max_qual.level = (u8)-100;
2296         range->max_qual.noise = (u8)-100;
2297         range->max_qual.updated = IW_QUAL_ALL_UPDATED; /* Updated all three */
2298         range->max_qual.updated |= IW_QUAL_DBM;
2299 #else /* !CONFIG_SIGNAL_DISPLAY_DBM */
2300         //percent values between 0 and 100.
2301         range->max_qual.level = 100;
2302         range->max_qual.noise = 100;
2303         range->max_qual.updated = IW_QUAL_ALL_UPDATED; /* Updated all three */
2304 #endif /* !CONFIG_SIGNAL_DISPLAY_DBM */
2305
2306         /* This should contain the average/typical values of the quality
2307          * indicator. This should be the threshold between a "good" and
2308          * a "bad" link (example : monitor going from green to orange).
2309          * Currently, user space apps like quality monitors don't have any
2310          * way to calibrate the measurement. With this, they can split
2311          * the range between 0 and max_qual in different quality level
2312          * (using a geometric subdivision centered on the average).
2313          * I expect that people doing the user space apps will feedback
2314          * us on which value we need to put in each driver... */
2315         range->avg_qual.qual = 92; /* > 8% missed beacons is 'bad' */
2316 #ifdef CONFIG_SIGNAL_DISPLAY_DBM
2317         /* TODO: Find real 'good' to 'bad' threshold value for RSSI */
2318         range->avg_qual.level = (u8)-70;
2319         range->avg_qual.noise = 0;
2320         range->avg_qual.updated = IW_QUAL_ALL_UPDATED; /* Updated all three */
2321         range->avg_qual.updated |= IW_QUAL_DBM;
2322 #else /* !CONFIG_SIGNAL_DISPLAY_DBM */
2323         /* TODO: Find real 'good' to 'bad' threshol value for RSSI */
2324         range->avg_qual.level = 30;
2325         range->avg_qual.noise = 100;
2326         range->avg_qual.updated = IW_QUAL_ALL_UPDATED; /* Updated all three */
2327 #endif /* !CONFIG_SIGNAL_DISPLAY_DBM */
2328
2329         range->num_bitrates = RATE_COUNT;
2330
2331         for (i = 0; i < RATE_COUNT && i < IW_MAX_BITRATES; i++) {
2332                 range->bitrate[i] = rtw_rates[i];
2333         }
2334
2335         range->min_frag = MIN_FRAG_THRESHOLD;
2336         range->max_frag = MAX_FRAG_THRESHOLD;
2337
2338         range->pm_capa = 0;
2339
2340         range->we_version_compiled = WIRELESS_EXT;
2341         range->we_version_source = 16;
2342
2343 //      range->retry_capa;      /* What retry options are supported */
2344 //      range->retry_flags;     /* How to decode max/min retry limit */
2345 //      range->r_time_flags;    /* How to decode max/min retry life */
2346 //      range->min_retry;       /* Minimal number of retries */
2347 //      range->max_retry;       /* Maximal number of retries */
2348 //      range->min_r_time;      /* Minimal retry lifetime */
2349 //      range->max_r_time;      /* Maximal retry lifetime */
2350
2351         for (i = 0, val = 0; i < MAX_CHANNEL_NUM; i++) {
2352
2353                 // Include only legal frequencies for some countries
2354                 if(pmlmeext->channel_set[i].ChannelNum != 0)
2355                 {
2356                         range->freq[val].i = pmlmeext->channel_set[i].ChannelNum;
2357                         range->freq[val].m = rtw_ch2freq(pmlmeext->channel_set[i].ChannelNum) * 100000;
2358                         range->freq[val].e = 1;
2359                         val++;
2360                 }
2361
2362                 if (val == IW_MAX_FREQUENCIES)
2363                         break;
2364         }
2365
2366         range->num_channels = val;
2367         range->num_frequency = val;
2368
2369 // Commented by Albert 2009/10/13
2370 // The following code will proivde the security capability to network manager.
2371 // If the driver doesn't provide this capability to network manager,
2372 // the WPA/WPA2 routers can't be choosen in the network manager.
2373
2374 /*
2375 #define IW_SCAN_CAPA_NONE               0x00
2376 #define IW_SCAN_CAPA_ESSID              0x01
2377 #define IW_SCAN_CAPA_BSSID              0x02
2378 #define IW_SCAN_CAPA_CHANNEL    0x04
2379 #define IW_SCAN_CAPA_MODE               0x08
2380 #define IW_SCAN_CAPA_RATE               0x10
2381 #define IW_SCAN_CAPA_TYPE               0x20
2382 #define IW_SCAN_CAPA_TIME               0x40
2383 */
2384
2385 #if WIRELESS_EXT > 17
2386         range->enc_capa = IW_ENC_CAPA_WPA|IW_ENC_CAPA_WPA2|
2387                           IW_ENC_CAPA_CIPHER_TKIP|IW_ENC_CAPA_CIPHER_CCMP;
2388 #endif
2389
2390 #ifdef IW_SCAN_CAPA_ESSID //WIRELESS_EXT > 21
2391         range->scan_capa = IW_SCAN_CAPA_ESSID | IW_SCAN_CAPA_TYPE |IW_SCAN_CAPA_BSSID|
2392                                         IW_SCAN_CAPA_CHANNEL|IW_SCAN_CAPA_MODE|IW_SCAN_CAPA_RATE;
2393 #endif
2394
2395
2396         _func_exit_;
2397
2398         return 0;
2399
2400 }
2401
2402 //set bssid flow
2403 //s1. rtw_set_802_11_infrastructure_mode()
2404 //s2. rtw_set_802_11_authentication_mode()
2405 //s3. set_802_11_encryption_mode()
2406 //s4. rtw_set_802_11_bssid()
2407 static int rtw_wx_set_wap(struct net_device *dev,
2408                          struct iw_request_info *info,
2409                          union iwreq_data *awrq,
2410                          char *extra)
2411 {
2412         _irqL   irqL;
2413         uint ret = 0;
2414         _adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
2415         struct sockaddr *temp = (struct sockaddr *)awrq;
2416         struct  mlme_priv       *pmlmepriv = &(padapter->mlmepriv);
2417         _list   *phead;
2418         u8 *dst_bssid, *src_bssid;
2419         _queue  *queue  = &(pmlmepriv->scanned_queue);
2420         struct  wlan_network    *pnetwork = NULL;
2421         NDIS_802_11_AUTHENTICATION_MODE authmode;
2422
2423         _func_enter_;
2424 /*
2425 #ifdef CONFIG_CONCURRENT_MODE
2426         if(padapter->iface_type > PRIMARY_IFACE)
2427         {
2428                 ret = -EINVAL;
2429                 goto exit;
2430         }
2431 #endif
2432 */
2433
2434 #ifdef CONFIG_CONCURRENT_MODE
2435         if (check_buddy_fwstate(padapter, _FW_UNDER_SURVEY|_FW_UNDER_LINKING) == _TRUE)
2436         {
2437                 DBG_871X("set bssid, but buddy_intf is under scanning or linking\n");
2438
2439                 ret = -EINVAL;
2440
2441                 goto exit;
2442         }
2443 #endif
2444
2445         rtw_ps_deny(padapter, PS_DENY_JOIN);
2446         if(_FAIL == rtw_pwr_wakeup(padapter))
2447         {
2448                 ret= -1;
2449                 goto exit;
2450         }
2451
2452         if(!padapter->bup){
2453                 ret = -1;
2454                 goto exit;
2455         }
2456
2457
2458         if (temp->sa_family != ARPHRD_ETHER){
2459                 ret = -EINVAL;
2460                 goto exit;
2461         }
2462
2463         authmode = padapter->securitypriv.ndisauthtype;
2464         _enter_critical_bh(&queue->lock, &irqL);
2465        phead = get_list_head(queue);
2466        pmlmepriv->pscanned = get_next(phead);
2467
2468         while (1)
2469          {
2470
2471                 if ((rtw_end_of_queue_search(phead, pmlmepriv->pscanned)) == _TRUE)
2472                 {
2473 #if 0
2474                         ret = -EINVAL;
2475                         goto exit;
2476
2477                         if(check_fwstate(pmlmepriv, WIFI_ADHOC_STATE) == _TRUE)
2478                         {
2479                                 rtw_set_802_11_bssid(padapter, temp->sa_data);
2480                                 goto exit;
2481                         }
2482                         else
2483                         {
2484                                 ret = -EINVAL;
2485                                 goto exit;
2486                         }
2487 #endif
2488
2489                         break;
2490                 }
2491
2492                 pnetwork = LIST_CONTAINOR(pmlmepriv->pscanned, struct wlan_network, list);
2493
2494                 pmlmepriv->pscanned = get_next(pmlmepriv->pscanned);
2495
2496                 dst_bssid = pnetwork->network.MacAddress;
2497
2498                 src_bssid = temp->sa_data;
2499
2500                 if ((_rtw_memcmp(dst_bssid, src_bssid, ETH_ALEN)) == _TRUE)
2501                 {
2502                         if(!rtw_set_802_11_infrastructure_mode(padapter, pnetwork->network.InfrastructureMode))
2503                         {
2504                                 ret = -1;
2505                                 _exit_critical_bh(&queue->lock, &irqL);
2506                                 goto exit;
2507                         }
2508
2509                                 break;
2510                 }
2511
2512         }
2513         _exit_critical_bh(&queue->lock, &irqL);
2514
2515         rtw_set_802_11_authentication_mode(padapter, authmode);
2516         //set_802_11_encryption_mode(padapter, padapter->securitypriv.ndisencryptstatus);
2517         if (rtw_set_802_11_bssid(padapter, temp->sa_data) == _FALSE) {
2518                 ret = -1;
2519                 goto exit;
2520         }
2521
2522 exit:
2523
2524         rtw_ps_deny_cancel(padapter, PS_DENY_JOIN);
2525
2526         _func_exit_;
2527
2528         return ret;
2529 }
2530
2531 static int rtw_wx_get_wap(struct net_device *dev,
2532                             struct iw_request_info *info,
2533                             union iwreq_data *wrqu, char *extra)
2534 {
2535
2536         _adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
2537         struct  mlme_priv       *pmlmepriv = &(padapter->mlmepriv);
2538         WLAN_BSSID_EX  *pcur_bss = &pmlmepriv->cur_network.network;
2539
2540         wrqu->ap_addr.sa_family = ARPHRD_ETHER;
2541
2542         _rtw_memset(wrqu->ap_addr.sa_data, 0, ETH_ALEN);
2543
2544         RT_TRACE(_module_rtl871x_mlme_c_,_drv_info_,("rtw_wx_get_wap\n"));
2545
2546         _func_enter_;
2547
2548         if  ( ((check_fwstate(pmlmepriv, _FW_LINKED)) == _TRUE) ||
2549                         ((check_fwstate(pmlmepriv, WIFI_ADHOC_MASTER_STATE)) == _TRUE) ||
2550                         ((check_fwstate(pmlmepriv, WIFI_AP_STATE)) == _TRUE) )
2551         {
2552
2553                 _rtw_memcpy(wrqu->ap_addr.sa_data, pcur_bss->MacAddress, ETH_ALEN);
2554         }
2555         else
2556         {
2557                 _rtw_memset(wrqu->ap_addr.sa_data, 0, ETH_ALEN);
2558         }
2559
2560         _func_exit_;
2561
2562         return 0;
2563
2564 }
2565
2566 static int rtw_wx_set_mlme(struct net_device *dev,
2567                              struct iw_request_info *info,
2568                              union iwreq_data *wrqu, char *extra)
2569 {
2570 #if 0
2571 /* SIOCSIWMLME data */
2572 struct  iw_mlme
2573 {
2574         __u16           cmd; /* IW_MLME_* */
2575         __u16           reason_code;
2576         struct sockaddr addr;
2577 };
2578 #endif
2579
2580         int ret=0;
2581         u16 reason;
2582         _adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
2583         struct iw_mlme *mlme = (struct iw_mlme *) extra;
2584
2585
2586         if(mlme==NULL)
2587                 return -1;
2588
2589         DBG_871X("%s\n", __FUNCTION__);
2590
2591         reason = cpu_to_le16(mlme->reason_code);
2592
2593
2594         DBG_871X("%s, cmd=%d, reason=%d\n", __FUNCTION__, mlme->cmd, reason);
2595
2596
2597         switch (mlme->cmd)
2598         {
2599                 case IW_MLME_DEAUTH:
2600                                 if(!rtw_set_802_11_disassociate(padapter))
2601                                         ret = -1;
2602                                 break;
2603
2604                 case IW_MLME_DISASSOC:
2605                                 if(!rtw_set_802_11_disassociate(padapter))
2606                                         ret = -1;
2607
2608                                 break;
2609
2610                 default:
2611                         return -EOPNOTSUPP;
2612         }
2613
2614         return ret;
2615 }
2616
2617 static int rtw_wx_set_scan(struct net_device *dev, struct iw_request_info *a,
2618                              union iwreq_data *wrqu, char *extra)
2619 {
2620         u8 _status = _FALSE;
2621         int ret = 0;
2622         _adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
2623         struct mlme_priv *pmlmepriv= &padapter->mlmepriv;
2624         NDIS_802_11_SSID ssid[RTW_SSID_SCAN_AMOUNT];
2625         _irqL   irqL;
2626 #ifdef CONFIG_P2P
2627         struct wifidirect_info *pwdinfo= &(padapter->wdinfo);
2628 #endif //CONFIG_P2P
2629         RT_TRACE(_module_rtl871x_mlme_c_,_drv_info_,("rtw_wx_set_scan\n"));
2630
2631 _func_enter_;
2632
2633         #ifdef DBG_IOCTL
2634         DBG_871X("DBG_IOCTL %s:%d\n",__FUNCTION__, __LINE__);
2635         #endif
2636 /*
2637 #ifdef CONFIG_CONCURRENT_MODE
2638         if(padapter->iface_type > PRIMARY_IFACE)
2639         {
2640                 ret = -1;
2641                 goto exit;
2642         }
2643 #endif
2644 */
2645 #ifdef CONFIG_MP_INCLUDED
2646                 if (padapter->registrypriv.mp_mode == 1)
2647                 {
2648                                 DBG_871X(FUNC_ADPT_FMT ": MP mode block Scan request\n", FUNC_ADPT_ARG(padapter));
2649                                 ret = -1;
2650                                 goto exit;
2651                 }
2652 #ifdef CONFIG_CONCURRENT_MODE
2653                 if (padapter->pbuddy_adapter) {
2654                                 if (padapter->pbuddy_adapter->registrypriv.mp_mode == 1)
2655                                 {
2656                                         DBG_871X(FUNC_ADPT_FMT ": MP mode block Scan request\n", FUNC_ADPT_ARG(padapter->pbuddy_adapter));
2657                                         ret = -1;
2658                                         goto exit;
2659                                 }
2660                 }
2661 #endif //CONFIG_CONCURRENT_MODE
2662 #endif
2663
2664         rtw_ps_deny(padapter, PS_DENY_SCAN);
2665         if(_FAIL == rtw_pwr_wakeup(padapter))
2666         {
2667                 ret= -1;
2668                 goto exit;
2669         }
2670
2671         if (rtw_is_drv_stopped(padapter)) {
2672                 DBG_871X("%s bDriverStopped=_TRUE\n", __func__);
2673                 ret= -1;
2674                 goto exit;
2675         }
2676
2677         if(!padapter->bup){
2678                 ret = -1;
2679                 goto exit;
2680         }
2681
2682         if (!rtw_is_hw_init_completed(padapter)) {
2683                 ret = -1;
2684                 goto exit;
2685         }
2686
2687 #ifndef CONFIG_DOSCAN_IN_BUSYTRAFFIC
2688         // When Busy Traffic, driver do not site survey. So driver return success.
2689         // wpa_supplicant will not issue SIOCSIWSCAN cmd again after scan timeout.
2690         // modify by thomas 2011-02-22.
2691         if (pmlmepriv->LinkDetectInfo.bBusyTraffic == _TRUE
2692 #ifdef CONFIG_CONCURRENT_MODE
2693         || rtw_get_buddy_bBusyTraffic(padapter) == _TRUE
2694 #endif //CONFIG_CONCURRENT_MODE
2695         )
2696         {
2697                 indicate_wx_scan_complete_event(padapter);
2698                 goto exit;
2699         }
2700 #endif
2701
2702         if (check_fwstate(pmlmepriv, _FW_UNDER_SURVEY|_FW_UNDER_LINKING) == _TRUE)
2703         {
2704                 indicate_wx_scan_complete_event(padapter);
2705                 goto exit;
2706         }
2707
2708 #ifdef CONFIG_CONCURRENT_MODE
2709         if (check_buddy_fwstate(padapter,
2710                 _FW_UNDER_SURVEY|_FW_UNDER_LINKING|WIFI_UNDER_WPS) == _TRUE)
2711         {
2712                 indicate_wx_scan_complete_event(padapter);
2713                 goto exit;
2714         }
2715 #endif
2716
2717 #ifdef CONFIG_P2P
2718         if ( pwdinfo->p2p_state != P2P_STATE_NONE )
2719         {
2720                 rtw_p2p_set_pre_state( pwdinfo, rtw_p2p_state( pwdinfo ) );
2721                 rtw_p2p_set_state(pwdinfo, P2P_STATE_FIND_PHASE_SEARCH);
2722                 rtw_p2p_findphase_ex_set(pwdinfo, P2P_FINDPHASE_EX_FULL);
2723                 rtw_free_network_queue(padapter, _TRUE);
2724         }
2725 #endif //CONFIG_P2P
2726
2727         _rtw_memset(ssid, 0, sizeof(NDIS_802_11_SSID)*RTW_SSID_SCAN_AMOUNT);
2728
2729 #if WIRELESS_EXT >= 17
2730         if (wrqu->data.length == sizeof(struct iw_scan_req))
2731         {
2732                 struct iw_scan_req *req = (struct iw_scan_req *)extra;
2733
2734                 if (wrqu->data.flags & IW_SCAN_THIS_ESSID)
2735                 {
2736                         int len = min((int)req->essid_len, IW_ESSID_MAX_SIZE);
2737
2738                         _rtw_memcpy(ssid[0].Ssid, req->essid, len);
2739                         ssid[0].SsidLength = len;
2740
2741                         DBG_871X("IW_SCAN_THIS_ESSID, ssid=%s, len=%d\n", req->essid, req->essid_len);
2742
2743                         _enter_critical_bh(&pmlmepriv->lock, &irqL);
2744
2745                         _status = rtw_sitesurvey_cmd(padapter, ssid, 1, NULL, 0);
2746
2747                         _exit_critical_bh(&pmlmepriv->lock, &irqL);
2748
2749                 }
2750                 else if (req->scan_type == IW_SCAN_TYPE_PASSIVE)
2751                 {
2752                         DBG_871X("rtw_wx_set_scan, req->scan_type == IW_SCAN_TYPE_PASSIVE\n");
2753                 }
2754
2755         }
2756         else
2757 #endif
2758
2759         if(     wrqu->data.length >= WEXT_CSCAN_HEADER_SIZE
2760                 && _rtw_memcmp(extra, WEXT_CSCAN_HEADER, WEXT_CSCAN_HEADER_SIZE) == _TRUE
2761         )
2762         {
2763                 int len = wrqu->data.length -WEXT_CSCAN_HEADER_SIZE;
2764                 char *pos = extra+WEXT_CSCAN_HEADER_SIZE;
2765                 char section;
2766                 char sec_len;
2767                 int ssid_index = 0;
2768
2769                 //DBG_871X("%s COMBO_SCAN header is recognized\n", __FUNCTION__);
2770
2771                 while(len >= 1) {
2772                         section = *(pos++); len-=1;
2773
2774                         switch(section) {
2775                                 case WEXT_CSCAN_SSID_SECTION:
2776                                         //DBG_871X("WEXT_CSCAN_SSID_SECTION\n");
2777                                         if(len < 1) {
2778                                                 len = 0;
2779                                                 break;
2780                                         }
2781
2782                                         sec_len = *(pos++); len-=1;
2783
2784                                         if(sec_len>0 && sec_len<=len) {
2785                                                 ssid[ssid_index].SsidLength = sec_len;
2786                                                 _rtw_memcpy(ssid[ssid_index].Ssid, pos, ssid[ssid_index].SsidLength);
2787                                                 //DBG_871X("%s COMBO_SCAN with specific ssid:%s, %d\n", __FUNCTION__
2788                                                 //      , ssid[ssid_index].Ssid, ssid[ssid_index].SsidLength);
2789                                                 ssid_index++;
2790                                         }
2791
2792                                         pos+=sec_len; len-=sec_len;
2793                                         break;
2794
2795
2796                                 case WEXT_CSCAN_CHANNEL_SECTION:
2797                                         //DBG_871X("WEXT_CSCAN_CHANNEL_SECTION\n");
2798                                         pos+=1; len-=1;
2799                                         break;
2800                                 case WEXT_CSCAN_ACTV_DWELL_SECTION:
2801                                         //DBG_871X("WEXT_CSCAN_ACTV_DWELL_SECTION\n");
2802                                         pos+=2; len-=2;
2803                                         break;
2804                                 case WEXT_CSCAN_PASV_DWELL_SECTION:
2805                                         //DBG_871X("WEXT_CSCAN_PASV_DWELL_SECTION\n");
2806                                         pos+=2; len-=2;
2807                                         break;
2808                                 case WEXT_CSCAN_HOME_DWELL_SECTION:
2809                                         //DBG_871X("WEXT_CSCAN_HOME_DWELL_SECTION\n");
2810                                         pos+=2; len-=2;
2811                                         break;
2812                                 case WEXT_CSCAN_TYPE_SECTION:
2813                                         //DBG_871X("WEXT_CSCAN_TYPE_SECTION\n");
2814                                         pos+=1; len-=1;
2815                                         break;
2816                                 #if 0
2817                                 case WEXT_CSCAN_NPROBE_SECTION:
2818                                         DBG_871X("WEXT_CSCAN_NPROBE_SECTION\n");
2819                                         break;
2820                                 #endif
2821
2822                                 default:
2823                                         //DBG_871X("Unknown CSCAN section %c\n", section);
2824                                         len = 0; // stop parsing
2825                         }
2826                         //DBG_871X("len:%d\n", len);
2827
2828                 }
2829
2830                 //jeff: it has still some scan paramater to parse, we only do this now...
2831                 _status = rtw_set_802_11_bssid_list_scan(padapter, ssid, RTW_SSID_SCAN_AMOUNT);
2832
2833         } else
2834
2835         {
2836                 _status = rtw_set_802_11_bssid_list_scan(padapter, NULL, 0);
2837         }
2838
2839         if(_status == _FALSE)
2840                 ret = -1;
2841
2842 exit:
2843
2844         rtw_ps_deny_cancel(padapter, PS_DENY_SCAN);
2845
2846         #ifdef DBG_IOCTL
2847         DBG_871X("DBG_IOCTL %s:%d return %d\n",__FUNCTION__, __LINE__, ret);
2848         #endif
2849
2850 _func_exit_;
2851
2852         return ret;
2853 }
2854
2855 static int rtw_wx_get_scan(struct net_device *dev, struct iw_request_info *a,
2856                              union iwreq_data *wrqu, char *extra)
2857 {
2858         _irqL   irqL;
2859         _list                                   *plist, *phead;
2860         _adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
2861         struct  mlme_priv       *pmlmepriv = &(padapter->mlmepriv);
2862         _queue                          *queue  = &(pmlmepriv->scanned_queue);
2863         struct  wlan_network    *pnetwork = NULL;
2864         char *ev = extra;
2865         char *stop = ev + wrqu->data.length;
2866         u32 ret = 0;
2867         u32 cnt=0;
2868         u32 wait_for_surveydone;
2869         sint wait_status;
2870 #ifdef CONFIG_CONCURRENT_MODE
2871         //PADAPTER pbuddy_adapter = padapter->pbuddy_adapter;
2872         //struct mlme_priv *pbuddy_mlmepriv = &(pbuddy_adapter->mlmepriv);
2873 #endif
2874 #ifdef CONFIG_P2P
2875         struct  wifidirect_info*        pwdinfo = &padapter->wdinfo;
2876 #endif //CONFIG_P2P
2877         RT_TRACE(_module_rtl871x_mlme_c_,_drv_info_,("rtw_wx_get_scan\n"));
2878         RT_TRACE(_module_rtl871x_ioctl_os_c,_drv_info_, (" Start of Query SIOCGIWSCAN .\n"));
2879
2880         _func_enter_;
2881
2882         #ifdef DBG_IOCTL
2883         DBG_871X("DBG_IOCTL %s:%d\n",__FUNCTION__, __LINE__);
2884         #endif
2885 /*
2886 #ifdef CONFIG_CONCURRENT_MODE
2887         if(padapter->iface_type > PRIMARY_IFACE)
2888         {
2889                 ret = -EINVAL;
2890                 goto exit;
2891         }
2892 #endif
2893 */
2894         if (adapter_to_pwrctl(padapter)->brfoffbyhw && rtw_is_drv_stopped(padapter)) {
2895                 ret = -EINVAL;
2896                 goto exit;
2897         }
2898
2899 #ifdef CONFIG_P2P
2900         if(!rtw_p2p_chk_state(pwdinfo, P2P_STATE_NONE))
2901         {
2902                 wait_for_surveydone = 200;
2903         }
2904         else
2905         {
2906                 //      P2P is disabled
2907                 wait_for_surveydone = 100;
2908         }
2909 #else
2910         {
2911                 wait_for_surveydone = 100;
2912         }
2913 #endif //CONFIG_P2P
2914
2915 #if 1 // Wireless Extension use EAGAIN to try
2916         wait_status = _FW_UNDER_SURVEY
2917 #ifndef CONFIG_ANDROID
2918                 | _FW_UNDER_LINKING
2919 #endif
2920         ;
2921
2922         while (check_fwstate(pmlmepriv, wait_status) == _TRUE)
2923         {
2924                 return -EAGAIN;
2925         }
2926 #else
2927         wait_status = _FW_UNDER_SURVEY
2928                 #ifndef CONFIG_ANDROID
2929                 |_FW_UNDER_LINKING
2930                 #endif
2931         ;
2932
2933         while(check_fwstate(pmlmepriv, wait_status) == _TRUE)
2934         {
2935                 rtw_msleep_os(30);
2936                 cnt++;
2937                 if(cnt > wait_for_surveydone )
2938                         break;
2939         }
2940 #endif
2941         _enter_critical_bh(&(pmlmepriv->scanned_queue.lock), &irqL);
2942
2943         phead = get_list_head(queue);
2944         plist = get_next(phead);
2945
2946         while(1)
2947         {
2948                 if (rtw_end_of_queue_search(phead,plist)== _TRUE)
2949                         break;
2950
2951                 if((stop - ev) < SCAN_ITEM_SIZE) {
2952                         ret = -E2BIG;
2953                         break;
2954                 }
2955
2956                 pnetwork = LIST_CONTAINOR(plist, struct wlan_network, list);
2957
2958                 //report network only if the current channel set contains the channel to which this network belongs
2959                 if(rtw_ch_set_search_ch(padapter->mlmeextpriv.channel_set, pnetwork->network.Configuration.DSConfig) >= 0
2960                         && rtw_mlme_band_check(padapter, pnetwork->network.Configuration.DSConfig) == _TRUE
2961                         && _TRUE == rtw_validate_ssid(&(pnetwork->network.Ssid))
2962                 )
2963                 {
2964                         ev=translate_scan(padapter, a, pnetwork, ev, stop);
2965                 }
2966
2967                 plist = get_next(plist);
2968
2969         }
2970
2971         _exit_critical_bh(&(pmlmepriv->scanned_queue.lock), &irqL);
2972
2973        wrqu->data.length = ev-extra;
2974         wrqu->data.flags = 0;
2975
2976 exit:
2977
2978         _func_exit_;
2979
2980         #ifdef DBG_IOCTL
2981         DBG_871X("DBG_IOCTL %s:%d return %d\n",__FUNCTION__, __LINE__, ret);
2982         #endif
2983
2984         return ret ;
2985
2986 }
2987
2988 //set ssid flow
2989 //s1. rtw_set_802_11_infrastructure_mode()
2990 //s2. set_802_11_authenticaion_mode()
2991 //s3. set_802_11_encryption_mode()
2992 //s4. rtw_set_802_11_ssid()
2993 static int rtw_wx_set_essid(struct net_device *dev,
2994                               struct iw_request_info *a,
2995                               union iwreq_data *wrqu, char *extra)
2996 {
2997         _irqL irqL;
2998         _adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
2999         struct mlme_priv *pmlmepriv = &padapter->mlmepriv;
3000         _queue *queue = &pmlmepriv->scanned_queue;
3001         _list *phead;
3002         s8 status = _TRUE;
3003         struct wlan_network *pnetwork = NULL;
3004         NDIS_802_11_AUTHENTICATION_MODE authmode;
3005         NDIS_802_11_SSID ndis_ssid;
3006         u8 *dst_ssid, *src_ssid;
3007
3008         uint ret = 0, len;
3009
3010         _func_enter_;
3011
3012         #ifdef DBG_IOCTL
3013         DBG_871X("DBG_IOCTL %s:%d\n",__FUNCTION__, __LINE__);
3014         #endif
3015         #ifdef CONFIG_WEXT_DONT_JOIN_BYSSID
3016         DBG_871X("%s: CONFIG_WEXT_DONT_JOIN_BYSSID be defined!! only allow bssid joining\n", __func__);
3017         return -EPERM;
3018         #endif
3019 /*
3020 #ifdef CONFIG_CONCURRENT_MODE
3021         if(padapter->iface_type > PRIMARY_IFACE)
3022         {
3023                 ret = -EINVAL;
3024                 goto exit;
3025         }
3026 #endif
3027 */
3028
3029 #ifdef CONFIG_CONCURRENT_MODE
3030         if (check_buddy_fwstate(padapter, _FW_UNDER_SURVEY|_FW_UNDER_LINKING) == _TRUE)
3031         {
3032                 DBG_871X("set ssid, but buddy_intf is under scanning or linking\n");
3033
3034                 ret = -EINVAL;
3035
3036                 goto exit;
3037         }
3038 #endif
3039
3040         RT_TRACE(_module_rtl871x_ioctl_os_c, _drv_info_,
3041                  ("+rtw_wx_set_essid: fw_state=0x%08x\n", get_fwstate(pmlmepriv)));
3042
3043         rtw_ps_deny(padapter, PS_DENY_JOIN);
3044         if(_FAIL == rtw_pwr_wakeup(padapter))
3045         {
3046                 ret = -1;
3047                 goto exit;
3048         }
3049
3050         if(!padapter->bup){
3051                 ret = -1;
3052                 goto exit;
3053         }
3054
3055 #if WIRELESS_EXT <= 20
3056         if ((wrqu->essid.length-1) > IW_ESSID_MAX_SIZE){
3057 #else
3058         if (wrqu->essid.length > IW_ESSID_MAX_SIZE){
3059 #endif
3060                 ret= -E2BIG;
3061                 goto exit;
3062         }
3063
3064         if(check_fwstate(pmlmepriv, WIFI_AP_STATE)) {
3065                 ret = -1;
3066                 goto exit;
3067         }
3068
3069         authmode = padapter->securitypriv.ndisauthtype;
3070         DBG_871X("=>%s\n",__FUNCTION__);
3071         if (wrqu->essid.flags && wrqu->essid.length)
3072         {
3073                 // Commented by Albert 20100519
3074                 // We got the codes in "set_info" function of iwconfig source code.
3075                 //      =========================================
3076                 //      wrq.u.essid.length = strlen(essid) + 1;
3077                 //      if(we_kernel_version > 20)
3078                 //              wrq.u.essid.length--;
3079                 //      =========================================
3080                 //      That means, if the WIRELESS_EXT less than or equal to 20, the correct ssid len should subtract 1.
3081 #if WIRELESS_EXT <= 20
3082                 len = ((wrqu->essid.length-1) < IW_ESSID_MAX_SIZE) ? (wrqu->essid.length-1) : IW_ESSID_MAX_SIZE;
3083 #else
3084                 len = (wrqu->essid.length < IW_ESSID_MAX_SIZE) ? wrqu->essid.length : IW_ESSID_MAX_SIZE;
3085 #endif
3086
3087                 if( wrqu->essid.length != 33 )
3088                         DBG_871X("ssid=%s, len=%d\n", extra, wrqu->essid.length);
3089
3090                 _rtw_memset(&ndis_ssid, 0, sizeof(NDIS_802_11_SSID));
3091                 ndis_ssid.SsidLength = len;
3092                 _rtw_memcpy(ndis_ssid.Ssid, extra, len);
3093                 src_ssid = ndis_ssid.Ssid;
3094
3095                 RT_TRACE(_module_rtl871x_ioctl_os_c, _drv_info_, ("rtw_wx_set_essid: ssid=[%s]\n", src_ssid));
3096                 _enter_critical_bh(&queue->lock, &irqL);
3097                phead = get_list_head(queue);
3098               pmlmepriv->pscanned = get_next(phead);
3099
3100                 while (1)
3101                 {
3102                         if (rtw_end_of_queue_search(phead, pmlmepriv->pscanned) == _TRUE)
3103                         {
3104 #if 0
3105                                 if(check_fwstate(pmlmepriv, WIFI_ADHOC_STATE) == _TRUE)
3106                                 {
3107                                         rtw_set_802_11_ssid(padapter, &ndis_ssid);
3108
3109                                         goto exit;
3110                                 }
3111                                 else
3112                                 {
3113                                         RT_TRACE(_module_rtl871x_ioctl_os_c,_drv_info_,("rtw_wx_set_ssid(): scanned_queue is empty\n"));
3114                                         ret = -EINVAL;
3115                                         goto exit;
3116                                 }
3117 #endif
3118                                 RT_TRACE(_module_rtl871x_ioctl_os_c, _drv_warning_,
3119                                          ("rtw_wx_set_essid: scan_q is empty, set ssid to check if scanning again!\n"));
3120
3121                                 break;
3122                         }
3123
3124                         pnetwork = LIST_CONTAINOR(pmlmepriv->pscanned, struct wlan_network, list);
3125
3126                         pmlmepriv->pscanned = get_next(pmlmepriv->pscanned);
3127
3128                         dst_ssid = pnetwork->network.Ssid.Ssid;
3129
3130                         RT_TRACE(_module_rtl871x_ioctl_os_c, _drv_info_,
3131                                  ("rtw_wx_set_essid: dst_ssid=%s\n",
3132                                   pnetwork->network.Ssid.Ssid));
3133
3134                         if ((_rtw_memcmp(dst_ssid, src_ssid, ndis_ssid.SsidLength) == _TRUE) &&
3135                                 (pnetwork->network.Ssid.SsidLength==ndis_ssid.SsidLength))
3136                         {
3137                                 RT_TRACE(_module_rtl871x_ioctl_os_c, _drv_info_,
3138                                          ("rtw_wx_set_essid: find match, set infra mode\n"));
3139
3140                                 if(check_fwstate(pmlmepriv, WIFI_ADHOC_STATE) == _TRUE)
3141                                 {
3142                                         if(pnetwork->network.InfrastructureMode != pmlmepriv->cur_network.network.InfrastructureMode)
3143                                                 continue;
3144                                 }
3145
3146                                 if (rtw_set_802_11_infrastructure_mode(padapter, pnetwork->network.InfrastructureMode) == _FALSE)
3147                                 {
3148                                         ret = -1;
3149                                         _exit_critical_bh(&queue->lock, &irqL);
3150                                         goto exit;
3151                                 }
3152
3153                                 break;
3154                         }
3155                 }
3156                 _exit_critical_bh(&queue->lock, &irqL);
3157                 RT_TRACE(_module_rtl871x_ioctl_os_c, _drv_info_,
3158                          ("set ssid: set_802_11_auth. mode=%d\n", authmode));
3159                 rtw_set_802_11_authentication_mode(padapter, authmode);
3160                 //set_802_11_encryption_mode(padapter, padapter->securitypriv.ndisencryptstatus);
3161                 if (rtw_set_802_11_ssid(padapter, &ndis_ssid) == _FALSE) {
3162                         ret = -1;
3163                         goto exit;
3164                 }
3165         }
3166
3167 exit:
3168
3169         rtw_ps_deny_cancel(padapter, PS_DENY_JOIN);
3170
3171         DBG_871X("<=%s, ret %d\n",__FUNCTION__, ret);
3172
3173         #ifdef DBG_IOCTL
3174         DBG_871X("DBG_IOCTL %s:%d return %d\n",__FUNCTION__, __LINE__, ret);
3175         #endif
3176
3177         _func_exit_;
3178
3179         return ret;
3180 }
3181
3182 static int rtw_wx_get_essid(struct net_device *dev,
3183                               struct iw_request_info *a,
3184                               union iwreq_data *wrqu, char *extra)
3185 {
3186         u32 len,ret = 0;
3187         _adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
3188         struct  mlme_priv       *pmlmepriv = &(padapter->mlmepriv);
3189         WLAN_BSSID_EX  *pcur_bss = &pmlmepriv->cur_network.network;
3190
3191         RT_TRACE(_module_rtl871x_mlme_c_,_drv_info_,("rtw_wx_get_essid\n"));
3192
3193         _func_enter_;
3194
3195         if ( (check_fwstate(pmlmepriv, _FW_LINKED) == _TRUE) ||
3196               (check_fwstate(pmlmepriv, WIFI_ADHOC_MASTER_STATE) == _TRUE))
3197         {
3198                 len = pcur_bss->Ssid.SsidLength;
3199
3200                 wrqu->essid.length = len;
3201
3202                 _rtw_memcpy(extra, pcur_bss->Ssid.Ssid, len);
3203
3204                 wrqu->essid.flags = 1;
3205         }
3206         else
3207         {
3208                 ret = -1;
3209                 goto exit;
3210         }
3211
3212 exit:
3213
3214         _func_exit_;
3215
3216         return ret;
3217
3218 }
3219
3220 static int rtw_wx_set_rate(struct net_device *dev,
3221                               struct iw_request_info *a,
3222                               union iwreq_data *wrqu, char *extra)
3223 {
3224         int     i, ret = 0;
3225         _adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
3226         u8      datarates[NumRates];
3227         u32     target_rate = wrqu->bitrate.value;
3228         u32     fixed = wrqu->bitrate.fixed;
3229         u32     ratevalue = 0;
3230          u8 mpdatarate[NumRates]={11, 10, 9, 8, 7, 6, 5, 4, 3, 2, 1, 0, 0xff};
3231
3232 _func_enter_;
3233
3234         RT_TRACE(_module_rtl871x_mlme_c_,_drv_info_,(" rtw_wx_set_rate \n"));
3235         RT_TRACE(_module_rtl871x_ioctl_os_c,_drv_info_,("target_rate = %d, fixed = %d\n",target_rate,fixed));
3236
3237         if(target_rate == -1){
3238                 ratevalue = 11;
3239                 goto set_rate;
3240         }
3241         target_rate = target_rate/100000;
3242
3243         switch(target_rate){
3244                 case 10:
3245                         ratevalue = 0;
3246                         break;
3247                 case 20:
3248                         ratevalue = 1;
3249                         break;
3250                 case 55:
3251                         ratevalue = 2;
3252                         break;
3253                 case 60:
3254                         ratevalue = 3;
3255                         break;
3256                 case 90:
3257                         ratevalue = 4;
3258                         break;
3259                 case 110:
3260                         ratevalue = 5;
3261                         break;
3262                 case 120:
3263                         ratevalue = 6;
3264                         break;
3265                 case 180:
3266                         ratevalue = 7;
3267                         break;
3268                 case 240:
3269                         ratevalue = 8;
3270                         break;
3271                 case 360:
3272                         ratevalue = 9;
3273                         break;
3274                 case 480:
3275                         ratevalue = 10;
3276                         break;
3277                 case 540:
3278                         ratevalue = 11;
3279                         break;
3280                 default:
3281                         ratevalue = 11;
3282                         break;
3283         }
3284
3285 set_rate:
3286
3287         for(i=0; i<NumRates; i++)
3288         {
3289                 if(ratevalue==mpdatarate[i])
3290                 {
3291                         datarates[i] = mpdatarate[i];
3292                         if(fixed == 0)
3293                                 break;
3294                 }
3295                 else{
3296                         datarates[i] = 0xff;
3297                 }
3298
3299                 RT_TRACE(_module_rtl871x_ioctl_os_c,_drv_info_,("datarate_inx=%d\n",datarates[i]));
3300         }
3301
3302         if( rtw_setdatarate_cmd(padapter, datarates) !=_SUCCESS){
3303                 RT_TRACE(_module_rtl871x_ioctl_os_c,_drv_err_,("rtw_wx_set_rate Fail!!!\n"));
3304                 ret = -1;
3305         }
3306
3307 _func_exit_;
3308
3309         return ret;
3310 }
3311
3312 static int rtw_wx_get_rate(struct net_device *dev,
3313                              struct iw_request_info *info,
3314                              union iwreq_data *wrqu, char *extra)
3315 {
3316         u16 max_rate = 0;
3317
3318         max_rate = rtw_get_cur_max_rate((_adapter *)rtw_netdev_priv(dev));
3319
3320         if(max_rate == 0)
3321                 return -EPERM;
3322
3323         wrqu->bitrate.fixed = 0;        /* no auto select */
3324         wrqu->bitrate.value = max_rate * 100000;
3325
3326         return 0;
3327 }
3328
3329 static int rtw_wx_set_rts(struct net_device *dev,
3330                              struct iw_request_info *info,
3331                              union iwreq_data *wrqu, char *extra)
3332 {
3333         _adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
3334
3335         _func_enter_;
3336
3337         if (wrqu->rts.disabled)
3338                 padapter->registrypriv.rts_thresh = 2347;
3339         else {
3340                 if (wrqu->rts.value < 0 ||
3341                     wrqu->rts.value > 2347)
3342                         return -EINVAL;
3343
3344                 padapter->registrypriv.rts_thresh = wrqu->rts.value;
3345         }
3346
3347         DBG_871X("%s, rts_thresh=%d\n", __func__, padapter->registrypriv.rts_thresh);
3348
3349         _func_exit_;
3350
3351         return 0;
3352
3353 }
3354
3355 static int rtw_wx_get_rts(struct net_device *dev,
3356                              struct iw_request_info *info,
3357                              union iwreq_data *wrqu, char *extra)
3358 {
3359         _adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
3360
3361         _func_enter_;
3362
3363         DBG_871X("%s, rts_thresh=%d\n", __func__, padapter->registrypriv.rts_thresh);
3364
3365         wrqu->rts.value = padapter->registrypriv.rts_thresh;
3366         wrqu->rts.fixed = 0;    /* no auto select */
3367         //wrqu->rts.disabled = (wrqu->rts.value == DEFAULT_RTS_THRESHOLD);
3368
3369         _func_exit_;
3370
3371         return 0;
3372 }
3373
3374 static int rtw_wx_set_frag(struct net_device *dev,
3375                              struct iw_request_info *info,
3376                              union iwreq_data *wrqu, char *extra)
3377 {
3378         _adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
3379
3380         _func_enter_;
3381
3382         if (wrqu->frag.disabled)
3383                 padapter->xmitpriv.frag_len = MAX_FRAG_THRESHOLD;
3384         else {
3385                 if (wrqu->frag.value < MIN_FRAG_THRESHOLD ||
3386                     wrqu->frag.value > MAX_FRAG_THRESHOLD)
3387                         return -EINVAL;
3388
3389                 padapter->xmitpriv.frag_len = wrqu->frag.value & ~0x1;
3390         }
3391
3392         DBG_871X("%s, frag_len=%d\n", __func__, padapter->xmitpriv.frag_len);
3393
3394         _func_exit_;
3395
3396         return 0;
3397
3398 }
3399
3400 static int rtw_wx_get_frag(struct net_device *dev,
3401                              struct iw_request_info *info,
3402                              union iwreq_data *wrqu, char *extra)
3403 {
3404         _adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
3405
3406         _func_enter_;
3407
3408         DBG_871X("%s, frag_len=%d\n", __func__, padapter->xmitpriv.frag_len);
3409
3410         wrqu->frag.value = padapter->xmitpriv.frag_len;
3411         wrqu->frag.fixed = 0;   /* no auto select */
3412         //wrqu->frag.disabled = (wrqu->frag.value == DEFAULT_FRAG_THRESHOLD);
3413
3414         _func_exit_;
3415
3416         return 0;
3417 }
3418
3419 static int rtw_wx_get_retry(struct net_device *dev,
3420                              struct iw_request_info *info,
3421                              union iwreq_data *wrqu, char *extra)
3422 {
3423         //_adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
3424
3425
3426         wrqu->retry.value = 7;
3427         wrqu->retry.fixed = 0;  /* no auto select */
3428         wrqu->retry.disabled = 1;
3429
3430         return 0;
3431
3432 }
3433
3434 #if 0
3435 #define IW_ENCODE_INDEX         0x00FF  /* Token index (if needed) */
3436 #define IW_ENCODE_FLAGS         0xFF00  /* Flags defined below */
3437 #define IW_ENCODE_MODE          0xF000  /* Modes defined below */
3438 #define IW_ENCODE_DISABLED      0x8000  /* Encoding disabled */
3439 #define IW_ENCODE_ENABLED       0x0000  /* Encoding enabled */
3440 #define IW_ENCODE_RESTRICTED    0x4000  /* Refuse non-encoded packets */
3441 #define IW_ENCODE_OPEN          0x2000  /* Accept non-encoded packets */
3442 #define IW_ENCODE_NOKEY         0x0800  /* Key is write only, so not present */
3443 #define IW_ENCODE_TEMP          0x0400  /* Temporary key */
3444 /*
3445 iwconfig wlan0 key on -> flags = 0x6001 -> maybe it means auto
3446 iwconfig wlan0 key off -> flags = 0x8800
3447 iwconfig wlan0 key open -> flags = 0x2800
3448 iwconfig wlan0 key open 1234567890 -> flags = 0x2000
3449 iwconfig wlan0 key restricted -> flags = 0x4800
3450 iwconfig wlan0 key open [3] 1234567890 -> flags = 0x2003
3451 iwconfig wlan0 key restricted [2] 1234567890 -> flags = 0x4002
3452 iwconfig wlan0 key open [3] -> flags = 0x2803
3453 iwconfig wlan0 key restricted [2] -> flags = 0x4802
3454 */
3455 #endif
3456
3457 static int rtw_wx_set_enc(struct net_device *dev,
3458                             struct iw_request_info *info,
3459                             union iwreq_data *wrqu, char *keybuf)
3460 {
3461         u32 key, ret = 0;
3462         u32 keyindex_provided;
3463         NDIS_802_11_WEP  wep;
3464         NDIS_802_11_AUTHENTICATION_MODE authmode;
3465
3466         struct iw_point *erq = &(wrqu->encoding);
3467         _adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
3468         struct pwrctrl_priv *pwrpriv = adapter_to_pwrctl(padapter);
3469         DBG_871X("+rtw_wx_set_enc, flags=0x%x\n", erq->flags);
3470
3471         _rtw_memset(&wep, 0, sizeof(NDIS_802_11_WEP));
3472
3473         key = erq->flags & IW_ENCODE_INDEX;
3474
3475         _func_enter_;
3476
3477         if (erq->flags & IW_ENCODE_DISABLED)
3478         {
3479                 DBG_871X("EncryptionDisabled\n");
3480                 padapter->securitypriv.ndisencryptstatus = Ndis802_11EncryptionDisabled;
3481                 padapter->securitypriv.dot11PrivacyAlgrthm=_NO_PRIVACY_;
3482                 padapter->securitypriv.dot118021XGrpPrivacy=_NO_PRIVACY_;
3483                 padapter->securitypriv.dot11AuthAlgrthm= dot11AuthAlgrthm_Open; //open system
3484                 authmode = Ndis802_11AuthModeOpen;
3485                 padapter->securitypriv.ndisauthtype=authmode;
3486
3487                 goto exit;
3488         }
3489
3490         if (key) {
3491                 if (key > WEP_KEYS)
3492                         return -EINVAL;
3493                 key--;
3494                 keyindex_provided = 1;
3495         }
3496         else
3497         {
3498                 keyindex_provided = 0;
3499                 key = padapter->securitypriv.dot11PrivacyKeyIndex;
3500                 DBG_871X("rtw_wx_set_enc, key=%d\n", key);
3501         }
3502
3503         //set authentication mode
3504         if(erq->flags & IW_ENCODE_OPEN)
3505         {
3506                 DBG_871X("rtw_wx_set_enc():IW_ENCODE_OPEN\n");
3507                 padapter->securitypriv.ndisencryptstatus = Ndis802_11Encryption1Enabled;//Ndis802_11EncryptionDisabled;
3508
3509 #ifdef CONFIG_PLATFORM_MT53XX
3510                 padapter->securitypriv.dot11AuthAlgrthm = dot11AuthAlgrthm_Auto;
3511 #else
3512                 padapter->securitypriv.dot11AuthAlgrthm= dot11AuthAlgrthm_Open;
3513 #endif
3514
3515                 padapter->securitypriv.dot11PrivacyAlgrthm=_NO_PRIVACY_;
3516                 padapter->securitypriv.dot118021XGrpPrivacy=_NO_PRIVACY_;
3517                 authmode = Ndis802_11AuthModeOpen;
3518                 padapter->securitypriv.ndisauthtype=authmode;
3519         }
3520         else if(erq->flags & IW_ENCODE_RESTRICTED)
3521         {
3522                 DBG_871X("rtw_wx_set_enc():IW_ENCODE_RESTRICTED\n");
3523                 padapter->securitypriv.ndisencryptstatus = Ndis802_11Encryption1Enabled;
3524
3525 #ifdef CONFIG_PLATFORM_MT53XX
3526                 padapter->securitypriv.dot11AuthAlgrthm = dot11AuthAlgrthm_Auto;
3527 #else
3528                 padapter->securitypriv.dot11AuthAlgrthm= dot11AuthAlgrthm_Shared;
3529 #endif
3530
3531                 padapter->securitypriv.dot11PrivacyAlgrthm=_WEP40_;
3532                 padapter->securitypriv.dot118021XGrpPrivacy=_WEP40_;
3533                 authmode = Ndis802_11AuthModeShared;
3534                 padapter->securitypriv.ndisauthtype=authmode;
3535         }
3536         else
3537         {
3538                 DBG_871X("rtw_wx_set_enc():erq->flags=0x%x\n", erq->flags);
3539
3540                 padapter->securitypriv.ndisencryptstatus = Ndis802_11Encryption1Enabled;//Ndis802_11EncryptionDisabled;
3541                 padapter->securitypriv.dot11AuthAlgrthm= dot11AuthAlgrthm_Open; //open system
3542                 padapter->securitypriv.dot11PrivacyAlgrthm=_NO_PRIVACY_;
3543                 padapter->securitypriv.dot118021XGrpPrivacy=_NO_PRIVACY_;
3544                 authmode = Ndis802_11AuthModeOpen;
3545                 padapter->securitypriv.ndisauthtype=authmode;
3546         }
3547
3548         wep.KeyIndex = key;
3549         if (erq->length > 0)
3550         {
3551                 wep.KeyLength = erq->length <= 5 ? 5 : 13;
3552
3553                 wep.Length = wep.KeyLength + FIELD_OFFSET(NDIS_802_11_WEP, KeyMaterial);
3554         }
3555         else
3556         {
3557                 wep.KeyLength = 0 ;
3558
3559                 if(keyindex_provided == 1)// set key_id only, no given KeyMaterial(erq->length==0).
3560                 {
3561                         padapter->securitypriv.dot11PrivacyKeyIndex = key;
3562
3563                         DBG_871X("(keyindex_provided == 1), keyid=%d, key_len=%d\n", key, padapter->securitypriv.dot11DefKeylen[key]);
3564
3565                         switch(padapter->securitypriv.dot11DefKeylen[key])
3566                         {
3567                                 case 5:
3568                                         padapter->securitypriv.dot11PrivacyAlgrthm=_WEP40_;
3569                                         break;
3570                                 case 13:
3571                                         padapter->securitypriv.dot11PrivacyAlgrthm=_WEP104_;
3572                                         break;
3573                                 default:
3574                                         padapter->securitypriv.dot11PrivacyAlgrthm=_NO_PRIVACY_;
3575                                         break;
3576                         }
3577
3578                         goto exit;
3579
3580                 }
3581
3582         }
3583
3584         wep.KeyIndex |= 0x80000000;
3585
3586         _rtw_memcpy(wep.KeyMaterial, keybuf, wep.KeyLength);
3587
3588         if (rtw_set_802_11_add_wep(padapter, &wep) == _FALSE) {
3589                 if(rf_on == pwrpriv->rf_pwrstate )
3590                         ret = -EOPNOTSUPP;
3591                 goto exit;
3592         }
3593
3594 exit:
3595
3596         _func_exit_;
3597
3598         return ret;
3599
3600 }
3601
3602 static int rtw_wx_get_enc(struct net_device *dev,
3603                             struct iw_request_info *info,
3604                             union iwreq_data *wrqu, char *keybuf)
3605 {
3606         uint key, ret =0;
3607         _adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
3608         struct iw_point *erq = &(wrqu->encoding);
3609         struct  mlme_priv       *pmlmepriv = &(padapter->mlmepriv);
3610
3611         _func_enter_;
3612
3613         if(check_fwstate(pmlmepriv, _FW_LINKED) != _TRUE)
3614         {
3615                  if(check_fwstate(pmlmepriv, WIFI_ADHOC_MASTER_STATE) != _TRUE)
3616                  {
3617                 erq->length = 0;
3618                 erq->flags |= IW_ENCODE_DISABLED;
3619                 return 0;
3620         }
3621         }
3622
3623
3624         key = erq->flags & IW_ENCODE_INDEX;
3625
3626         if (key) {
3627                 if (key > WEP_KEYS)
3628                         return -EINVAL;
3629                 key--;
3630         } else
3631         {
3632                 key = padapter->securitypriv.dot11PrivacyKeyIndex;
3633         }
3634
3635         erq->flags = key + 1;
3636
3637         //if(padapter->securitypriv.ndisauthtype == Ndis802_11AuthModeOpen)
3638         //{
3639         //      erq->flags |= IW_ENCODE_OPEN;
3640         //}
3641
3642         switch(padapter->securitypriv.ndisencryptstatus)
3643         {
3644                 case Ndis802_11EncryptionNotSupported:
3645                 case Ndis802_11EncryptionDisabled:
3646
3647                 erq->length = 0;
3648                 erq->flags |= IW_ENCODE_DISABLED;
3649
3650                 break;
3651
3652                 case Ndis802_11Encryption1Enabled:
3653
3654                 erq->length = padapter->securitypriv.dot11DefKeylen[key];
3655
3656                 if(erq->length)
3657                 {
3658                         _rtw_memcpy(keybuf, padapter->securitypriv.dot11DefKey[key].skey, padapter->securitypriv.dot11DefKeylen[key]);
3659
3660                 erq->flags |= IW_ENCODE_ENABLED;
3661
3662                         if(padapter->securitypriv.ndisauthtype == Ndis802_11AuthModeOpen)
3663                         {
3664                                 erq->flags |= IW_ENCODE_OPEN;
3665                         }
3666                         else if(padapter->securitypriv.ndisauthtype == Ndis802_11AuthModeShared)
3667                         {
3668                 erq->flags |= IW_ENCODE_RESTRICTED;
3669                         }
3670                 }
3671                 else
3672                 {
3673                         erq->length = 0;
3674                         erq->flags |= IW_ENCODE_DISABLED;
3675                 }
3676
3677                 break;
3678
3679                 case Ndis802_11Encryption2Enabled:
3680                 case Ndis802_11Encryption3Enabled:
3681
3682                 erq->length = 16;
3683                 erq->flags |= (IW_ENCODE_ENABLED | IW_ENCODE_OPEN | IW_ENCODE_NOKEY);
3684
3685                 break;
3686
3687                 default:
3688                 erq->length = 0;
3689                 erq->flags |= IW_ENCODE_DISABLED;
3690
3691                 break;
3692
3693         }
3694
3695         _func_exit_;
3696
3697         return ret;
3698
3699 }
3700
3701 static int rtw_wx_get_power(struct net_device *dev,
3702                              struct iw_request_info *info,
3703                              union iwreq_data *wrqu, char *extra)
3704 {
3705         //_adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
3706
3707         wrqu->power.value = 0;
3708         wrqu->power.fixed = 0;  /* no auto select */
3709         wrqu->power.disabled = 1;
3710
3711         return 0;
3712
3713 }
3714
3715 static int rtw_wx_set_gen_ie(struct net_device *dev,
3716                              struct iw_request_info *info,
3717                              union iwreq_data *wrqu, char *extra)
3718 {
3719         int ret;
3720         _adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
3721
3722        ret = rtw_set_wpa_ie(padapter, extra, wrqu->data.length);
3723
3724         return ret;
3725 }
3726
3727 static int rtw_wx_set_auth(struct net_device *dev,
3728                              struct iw_request_info *info,
3729                              union iwreq_data *wrqu, char *extra)
3730 {
3731         _adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
3732         struct iw_param *param = (struct iw_param*)&(wrqu->param);
3733         struct mlme_priv        *pmlmepriv = &padapter->mlmepriv;
3734         struct security_priv *psecuritypriv = &padapter->securitypriv;
3735         struct mlme_ext_priv    *pmlmeext = &padapter->mlmeextpriv;
3736         struct mlme_ext_info    *pmlmeinfo = &(pmlmeext->mlmext_info);
3737         u32 value = param->value;
3738         int ret = 0;
3739
3740         switch (param->flags & IW_AUTH_INDEX) {
3741
3742         case IW_AUTH_WPA_VERSION:
3743 #ifdef CONFIG_WAPI_SUPPORT
3744 #ifndef CONFIG_IOCTL_CFG80211
3745                  padapter->wapiInfo.bWapiEnable = false;
3746                  if(value == IW_AUTH_WAPI_VERSION_1)
3747                  {
3748                         padapter->wapiInfo.bWapiEnable = true;
3749                         psecuritypriv->dot11PrivacyAlgrthm = _SMS4_;
3750                         psecuritypriv->dot118021XGrpPrivacy = _SMS4_;
3751                         psecuritypriv->dot11AuthAlgrthm = dot11AuthAlgrthm_WAPI;
3752                         pmlmeinfo->auth_algo = psecuritypriv->dot11AuthAlgrthm;
3753                         padapter->wapiInfo.extra_prefix_len = WAPI_EXT_LEN;
3754                         padapter->wapiInfo.extra_postfix_len = SMS4_MIC_LEN;
3755                 }
3756 #endif
3757 #endif
3758                 break;
3759         case IW_AUTH_CIPHER_PAIRWISE:
3760
3761                 break;
3762         case IW_AUTH_CIPHER_GROUP:
3763
3764                 break;
3765         case IW_AUTH_KEY_MGMT:
3766 #ifdef CONFIG_WAPI_SUPPORT
3767 #ifndef CONFIG_IOCTL_CFG80211
3768                 DBG_871X("rtw_wx_set_auth: IW_AUTH_KEY_MGMT case \n");
3769                 if(value == IW_AUTH_KEY_MGMT_WAPI_PSK)
3770                         padapter->wapiInfo.bWapiPSK = true;
3771                 else
3772                         padapter->wapiInfo.bWapiPSK = false;
3773                 DBG_871X("rtw_wx_set_auth: IW_AUTH_KEY_MGMT bwapipsk %d \n",padapter->wapiInfo.bWapiPSK);
3774 #endif
3775 #endif
3776                 /*
3777                  *  ??? does not use these parameters
3778                  */
3779                 break;
3780
3781         case IW_AUTH_TKIP_COUNTERMEASURES:
3782         {
3783             if ( param->value )
3784             {  // wpa_supplicant is enabling the tkip countermeasure.
3785                padapter->securitypriv.btkip_countermeasure = _TRUE;
3786             }
3787             else
3788             {  // wpa_supplicant is disabling the tkip countermeasure.
3789                padapter->securitypriv.btkip_countermeasure = _FALSE;
3790             }
3791                 break;
3792         }
3793         case IW_AUTH_DROP_UNENCRYPTED:
3794                 {
3795                         /* HACK:
3796                          *
3797                          * wpa_supplicant calls set_wpa_enabled when the driver
3798                          * is loaded and unloaded, regardless of if WPA is being
3799                          * used.  No other calls are made which can be used to
3800                          * determine if encryption will be used or not prior to
3801                          * association being expected.  If encryption is not being
3802                          * used, drop_unencrypted is set to false, else true -- we
3803                          * can use this to determine if the CAP_PRIVACY_ON bit should
3804                          * be set.
3805                          */
3806
3807                         if(padapter->securitypriv.ndisencryptstatus == Ndis802_11Encryption1Enabled)
3808                         {
3809                                 break;//it means init value, or using wep, ndisencryptstatus = Ndis802_11Encryption1Enabled,
3810                                                 // then it needn't reset it;
3811                         }
3812
3813                         if(param->value){
3814                                 padapter->securitypriv.ndisencryptstatus = Ndis802_11EncryptionDisabled;
3815                                 padapter->securitypriv.dot11PrivacyAlgrthm=_NO_PRIVACY_;
3816                                 padapter->securitypriv.dot118021XGrpPrivacy=_NO_PRIVACY_;
3817                                 padapter->securitypriv.dot11AuthAlgrthm= dot11AuthAlgrthm_Open; //open system
3818                                 padapter->securitypriv.ndisauthtype=Ndis802_11AuthModeOpen;
3819                         }
3820
3821                         break;
3822                 }
3823
3824         case IW_AUTH_80211_AUTH_ALG:
3825
3826                 #if defined(CONFIG_ANDROID) || 1
3827                 /*
3828                  *  It's the starting point of a link layer connection using wpa_supplicant
3829                 */
3830                 if(check_fwstate(&padapter->mlmepriv, _FW_LINKED)) {
3831                         LeaveAllPowerSaveMode(padapter);
3832                         rtw_disassoc_cmd(padapter, 500, _FALSE);
3833                         DBG_871X("%s...call rtw_indicate_disconnect\n ",__FUNCTION__);
3834                         rtw_indicate_disconnect(padapter);
3835                         rtw_free_assoc_resources(padapter, 1);
3836                 }
3837                 #endif
3838
3839
3840                 ret = wpa_set_auth_algs(dev, (u32)param->value);
3841
3842                 break;
3843
3844         case IW_AUTH_WPA_ENABLED:
3845
3846                 //if(param->value)
3847                 //      padapter->securitypriv.dot11AuthAlgrthm = dot11AuthAlgrthm_8021X; //802.1x
3848                 //else
3849                 //      padapter->securitypriv.dot11AuthAlgrthm = dot11AuthAlgrthm_Open;//open system
3850
3851                 //_disassociate(priv);
3852
3853                 break;
3854
3855         case IW_AUTH_RX_UNENCRYPTED_EAPOL:
3856                 //ieee->ieee802_1x = param->value;
3857                 break;
3858
3859         case IW_AUTH_PRIVACY_INVOKED:
3860                 //ieee->privacy_invoked = param->value;
3861                 break;
3862
3863 #ifdef CONFIG_WAPI_SUPPORT
3864 #ifndef CONFIG_IOCTL_CFG80211
3865         case IW_AUTH_WAPI_ENABLED:
3866                 break;
3867 #endif
3868 #endif
3869
3870         default:
3871                 return -EOPNOTSUPP;
3872
3873         }
3874
3875         return ret;
3876
3877 }
3878
3879 static int rtw_wx_set_enc_ext(struct net_device *dev,
3880                              struct iw_request_info *info,
3881                              union iwreq_data *wrqu, char *extra)
3882 {
3883         char *alg_name;
3884         u32 param_len;
3885         struct ieee_param *param = NULL;
3886         struct iw_point *pencoding = &wrqu->encoding;
3887         struct iw_encode_ext *pext = (struct iw_encode_ext *)extra;
3888         int ret=0;
3889
3890         param_len = sizeof(struct ieee_param) + pext->key_len;
3891         param = (struct ieee_param *)rtw_malloc(param_len);
3892         if (param == NULL)
3893                 return -1;
3894
3895         _rtw_memset(param, 0, param_len);
3896
3897         param->cmd = IEEE_CMD_SET_ENCRYPTION;
3898         _rtw_memset(param->sta_addr, 0xff, ETH_ALEN);
3899
3900
3901         switch (pext->alg) {
3902         case IW_ENCODE_ALG_NONE:
3903                 //todo: remove key
3904                 //remove = 1;
3905                 alg_name = "none";
3906                 break;
3907         case IW_ENCODE_ALG_WEP:
3908                 alg_name = "WEP";
3909                 break;
3910         case IW_ENCODE_ALG_TKIP:
3911                 alg_name = "TKIP";
3912                 break;
3913         case IW_ENCODE_ALG_CCMP:
3914                 alg_name = "CCMP";
3915                 break;
3916 #ifdef CONFIG_IEEE80211W
3917         case IW_ENCODE_ALG_AES_CMAC:
3918                 alg_name = "BIP";
3919                 break;
3920 #endif //CONFIG_IEEE80211W
3921 #ifdef CONFIG_WAPI_SUPPORT
3922 #ifndef CONFIG_IOCTL_CFG80211
3923         case IW_ENCODE_ALG_SM4:
3924                 alg_name= "SMS4";
3925                 _rtw_memcpy(param->sta_addr, pext->addr.sa_data, ETH_ALEN);
3926                 DBG_871X("rtw_wx_set_enc_ext: SMS4 case \n");
3927                 break;
3928 #endif
3929 #endif
3930         default:
3931                 ret = -1;
3932                 goto exit;
3933         }
3934
3935         strncpy((char *)param->u.crypt.alg, alg_name, IEEE_CRYPT_ALG_NAME_LEN);
3936
3937         if (pext->ext_flags & IW_ENCODE_EXT_SET_TX_KEY)
3938         {
3939                 param->u.crypt.set_tx = 1;
3940         }
3941
3942         /* cliW: WEP does not have group key
3943          * just not checking GROUP key setting
3944          */
3945         if ((pext->alg != IW_ENCODE_ALG_WEP) &&
3946                 ((pext->ext_flags & IW_ENCODE_EXT_GROUP_KEY)
3947 #ifdef CONFIG_IEEE80211W
3948                 || (pext->ext_flags & IW_ENCODE_ALG_AES_CMAC)
3949 #endif //CONFIG_IEEE80211W
3950         ))
3951         {
3952                 param->u.crypt.set_tx = 0;
3953         }
3954
3955         param->u.crypt.idx = (pencoding->flags&0x00FF) -1 ;
3956
3957         if (pext->ext_flags & IW_ENCODE_EXT_RX_SEQ_VALID)
3958         {
3959 #ifdef CONFIG_WAPI_SUPPORT
3960 #ifndef CONFIG_IOCTL_CFG80211
3961                 if(pext->alg == IW_ENCODE_ALG_SM4)
3962                         _rtw_memcpy(param->u.crypt.seq, pext->rx_seq, 16);
3963                 else
3964 #endif //CONFIG_IOCTL_CFG80211
3965 #endif //CONFIG_WAPI_SUPPORT
3966                 _rtw_memcpy(param->u.crypt.seq, pext->rx_seq, 8);
3967         }
3968
3969         if(pext->key_len)
3970         {
3971                 param->u.crypt.key_len = pext->key_len;
3972                 //_rtw_memcpy(param + 1, pext + 1, pext->key_len);
3973                 _rtw_memcpy(param->u.crypt.key, pext + 1, pext->key_len);
3974         }
3975
3976         if (pencoding->flags & IW_ENCODE_DISABLED)
3977         {
3978                 //todo: remove key
3979                 //remove = 1;
3980         }
3981
3982         ret =  wpa_set_encryption(dev, param, param_len);
3983
3984 exit:
3985         if(param)
3986         {
3987                 rtw_mfree((u8*)param, param_len);
3988         }
3989
3990         return ret;
3991 }
3992
3993
3994 static int rtw_wx_get_nick(struct net_device *dev,
3995                              struct iw_request_info *info,
3996                              union iwreq_data *wrqu, char *extra)
3997 {
3998         //_adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
3999          //struct mlme_priv *pmlmepriv = &(padapter->mlmepriv);
4000          //struct security_priv *psecuritypriv = &padapter->securitypriv;
4001
4002         if(extra)
4003         {
4004                 wrqu->data.length = 14;
4005                 wrqu->data.flags = 1;
4006                 _rtw_memcpy(extra, "<WIFI@REALTEK>", 14);
4007         }
4008
4009         //rtw_signal_process(pid, SIGUSR1); //for test
4010
4011         //dump debug info here
4012 /*
4013         u32 dot11AuthAlgrthm;           // 802.11 auth, could be open, shared, and 8021x
4014         u32 dot11PrivacyAlgrthm;        // This specify the privacy for shared auth. algorithm.
4015         u32 dot118021XGrpPrivacy;       // This specify the privacy algthm. used for Grp key
4016         u32 ndisauthtype;
4017         u32 ndisencryptstatus;
4018 */
4019
4020         //DBG_871X("auth_alg=0x%x, enc_alg=0x%x, auth_type=0x%x, enc_type=0x%x\n",
4021         //              psecuritypriv->dot11AuthAlgrthm, psecuritypriv->dot11PrivacyAlgrthm,
4022         //              psecuritypriv->ndisauthtype, psecuritypriv->ndisencryptstatus);
4023
4024         //DBG_871X("enc_alg=0x%x\n", psecuritypriv->dot11PrivacyAlgrthm);
4025         //DBG_871X("auth_type=0x%x\n", psecuritypriv->ndisauthtype);
4026         //DBG_871X("enc_type=0x%x\n", psecuritypriv->ndisencryptstatus);
4027
4028 #if 0
4029         DBG_871X("dbg(0x210)=0x%x\n", rtw_read32(padapter, 0x210));
4030         DBG_871X("dbg(0x608)=0x%x\n", rtw_read32(padapter, 0x608));
4031         DBG_871X("dbg(0x280)=0x%x\n", rtw_read32(padapter, 0x280));
4032         DBG_871X("dbg(0x284)=0x%x\n", rtw_read32(padapter, 0x284));
4033         DBG_871X("dbg(0x288)=0x%x\n", rtw_read32(padapter, 0x288));
4034
4035         DBG_871X("dbg(0x664)=0x%x\n", rtw_read32(padapter, 0x664));
4036
4037
4038         DBG_871X("\n");
4039
4040         DBG_871X("dbg(0x430)=0x%x\n", rtw_read32(padapter, 0x430));
4041         DBG_871X("dbg(0x438)=0x%x\n", rtw_read32(padapter, 0x438));
4042
4043         DBG_871X("dbg(0x440)=0x%x\n", rtw_read32(padapter, 0x440));
4044
4045         DBG_871X("dbg(0x458)=0x%x\n", rtw_read32(padapter, 0x458));
4046
4047         DBG_871X("dbg(0x484)=0x%x\n", rtw_read32(padapter, 0x484));
4048         DBG_871X("dbg(0x488)=0x%x\n", rtw_read32(padapter, 0x488));
4049
4050         DBG_871X("dbg(0x444)=0x%x\n", rtw_read32(padapter, 0x444));
4051         DBG_871X("dbg(0x448)=0x%x\n", rtw_read32(padapter, 0x448));
4052         DBG_871X("dbg(0x44c)=0x%x\n", rtw_read32(padapter, 0x44c));
4053         DBG_871X("dbg(0x450)=0x%x\n", rtw_read32(padapter, 0x450));
4054 #endif
4055
4056         return 0;
4057
4058 }
4059
4060 static int rtw_wx_read32(struct net_device *dev,
4061                             struct iw_request_info *info,
4062                             union iwreq_data *wrqu, char *extra)
4063 {
4064         PADAPTER padapter;
4065         struct iw_point *p;
4066         u16 len;
4067         u32 addr;
4068         u32 data32;
4069         u32 bytes;
4070         u8 *ptmp;
4071         int ret;
4072
4073
4074         ret = 0;
4075         padapter = (PADAPTER)rtw_netdev_priv(dev);
4076         p = &wrqu->data;
4077         len = p->length;
4078         if (0 == len)
4079                 return -EINVAL;
4080
4081         ptmp = (u8*)rtw_malloc(len);
4082         if (NULL == ptmp)
4083                 return -ENOMEM;
4084
4085         if (copy_from_user(ptmp, p->pointer, len)) {
4086                 ret = -EFAULT;
4087                 goto exit;
4088         }
4089
4090         bytes = 0;
4091         addr = 0;
4092         sscanf(ptmp, "%d,%x", &bytes, &addr);
4093
4094         switch (bytes) {
4095                 case 1:
4096                         data32 = rtw_read8(padapter, addr);
4097                         sprintf(extra, "0x%02X", data32);
4098                         break;
4099                 case 2:
4100                         data32 = rtw_read16(padapter, addr);
4101                         sprintf(extra, "0x%04X", data32);
4102                         break;
4103                 case 4:
4104                         data32 = rtw_read32(padapter, addr);
4105                         sprintf(extra, "0x%08X", data32);
4106                         break;
4107                 default:
4108                         DBG_871X(KERN_INFO "%s: usage> read [bytes],[address(hex)]\n", __func__);
4109                         ret = -EINVAL;
4110                         goto exit;
4111         }
4112         DBG_871X(KERN_INFO "%s: addr=0x%08X data=%s\n", __func__, addr, extra);
4113
4114 exit:
4115         rtw_mfree(ptmp, len);
4116
4117         return 0;
4118 }
4119
4120 static int rtw_wx_write32(struct net_device *dev,
4121                             struct iw_request_info *info,
4122                             union iwreq_data *wrqu, char *extra)
4123 {
4124         PADAPTER padapter = (PADAPTER)rtw_netdev_priv(dev);
4125
4126         u32 addr;
4127         u32 data32;
4128         u32 bytes;
4129
4130
4131         bytes = 0;
4132         addr = 0;
4133         data32 = 0;
4134         sscanf(extra, "%d,%x,%x", &bytes, &addr, &data32);
4135
4136         switch (bytes) {
4137                 case 1:
4138                         rtw_write8(padapter, addr, (u8)data32);
4139                         DBG_871X(KERN_INFO "%s: addr=0x%08X data=0x%02X\n", __func__, addr, (u8)data32);
4140                         break;
4141                 case 2:
4142                         rtw_write16(padapter, addr, (u16)data32);
4143                         DBG_871X(KERN_INFO "%s: addr=0x%08X data=0x%04X\n", __func__, addr, (u16)data32);
4144                         break;
4145                 case 4:
4146                         rtw_write32(padapter, addr, data32);
4147                         DBG_871X(KERN_INFO "%s: addr=0x%08X data=0x%08X\n", __func__, addr, data32);
4148                         break;
4149                 default:
4150                         DBG_871X(KERN_INFO "%s: usage> write [bytes],[address(hex)],[data(hex)]\n", __func__);
4151                         return -EINVAL;
4152         }
4153
4154         return 0;
4155 }
4156
4157 static int rtw_wx_read_rf(struct net_device *dev,
4158                             struct iw_request_info *info,
4159                             union iwreq_data *wrqu, char *extra)
4160 {
4161         _adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
4162         u32 path, addr, data32;
4163
4164
4165         path = *(u32*)extra;
4166         addr = *((u32*)extra + 1);
4167         data32 = rtw_hal_read_rfreg(padapter, path, addr, 0xFFFFF);
4168 //      DBG_871X("%s: path=%d addr=0x%02x data=0x%05x\n", __func__, path, addr, data32);
4169         /*
4170          * IMPORTANT!!
4171          * Only when wireless private ioctl is at odd order,
4172          * "extra" would be copied to user space.
4173          */
4174         sprintf(extra, "0x%05x", data32);
4175
4176         return 0;
4177 }
4178
4179 static int rtw_wx_write_rf(struct net_device *dev,
4180                             struct iw_request_info *info,
4181                             union iwreq_data *wrqu, char *extra)
4182 {
4183         _adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
4184         u32 path, addr, data32;
4185
4186
4187         path = *(u32*)extra;
4188         addr = *((u32*)extra + 1);
4189         data32 = *((u32*)extra + 2);
4190 //      DBG_871X("%s: path=%d addr=0x%02x data=0x%05x\n", __func__, path, addr, data32);
4191         rtw_hal_write_rfreg(padapter, path, addr, 0xFFFFF, data32);
4192
4193         return 0;
4194 }
4195
4196 static int rtw_wx_priv_null(struct net_device *dev, struct iw_request_info *a,
4197                  union iwreq_data *wrqu, char *b)
4198 {
4199         return -1;
4200 }
4201
4202 static int dummy(struct net_device *dev, struct iw_request_info *a,
4203                  union iwreq_data *wrqu, char *b)
4204 {
4205         //_adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
4206         //struct mlme_priv *pmlmepriv = &(padapter->mlmepriv);
4207
4208         //DBG_871X("cmd_code=%x, fwstate=0x%x\n", a->cmd, get_fwstate(pmlmepriv));
4209
4210         return -1;
4211
4212 }
4213
4214 static int rtw_wx_set_channel_plan(struct net_device *dev,
4215                                struct iw_request_info *info,
4216                                union iwreq_data *wrqu, char *extra)
4217 {
4218         _adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
4219         struct mlme_priv *pmlmepriv = &padapter->mlmepriv;
4220         u8 channel_plan_req = (u8) (*((int *)wrqu));
4221
4222         if (_SUCCESS != rtw_set_channel_plan(padapter, channel_plan_req))
4223                 return -EPERM;
4224
4225         return 0;
4226 }
4227
4228 static int rtw_wx_set_mtk_wps_probe_ie(struct net_device *dev,
4229                 struct iw_request_info *a,
4230                 union iwreq_data *wrqu, char *b)
4231 {
4232 #ifdef CONFIG_PLATFORM_MT53XX
4233         _adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
4234         struct mlme_priv *pmlmepriv = &padapter->mlmepriv;
4235
4236         RT_TRACE(_module_rtl871x_ioctl_os_c, _drv_notice_,
4237                  ("WLAN IOCTL: cmd_code=%x, fwstate=0x%x\n",
4238                   a->cmd, get_fwstate(pmlmepriv)));
4239 #endif
4240         return 0;
4241 }
4242
4243 static int rtw_wx_get_sensitivity(struct net_device *dev,
4244                                 struct iw_request_info *info,
4245                                 union iwreq_data *wrqu, char *buf)
4246 {
4247 #ifdef CONFIG_PLATFORM_MT53XX
4248         _adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
4249
4250         //      Modified by Albert 20110914
4251         //      This is in dbm format for MTK platform.
4252         wrqu->qual.level = padapter->recvpriv.rssi;
4253         DBG_871X(" level = %u\n",  wrqu->qual.level );
4254 #endif
4255         return 0;
4256 }
4257
4258 static int rtw_wx_set_mtk_wps_ie(struct net_device *dev,
4259                                 struct iw_request_info *info,
4260                                 union iwreq_data *wrqu, char *extra)
4261 {
4262 #ifdef CONFIG_PLATFORM_MT53XX
4263         _adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
4264
4265         return rtw_set_wpa_ie(padapter, wrqu->data.pointer, wrqu->data.length);
4266 #else
4267         return 0;
4268 #endif
4269 }
4270
4271 /*
4272 typedef int (*iw_handler)(struct net_device *dev, struct iw_request_info *info,
4273                           union iwreq_data *wrqu, char *extra);
4274 */
4275 /*
4276  *      For all data larger than 16 octets, we need to use a
4277  *      pointer to memory allocated in user space.
4278  */
4279 static  int rtw_drvext_hdl(struct net_device *dev, struct iw_request_info *info,
4280                                                 union iwreq_data *wrqu, char *extra)
4281 {
4282
4283  #if 0
4284 struct  iw_point
4285 {
4286   void __user   *pointer;       /* Pointer to the data  (in user space) */
4287   __u16         length;         /* number of fields or size in bytes */
4288   __u16         flags;          /* Optional params */
4289 };
4290  #endif
4291
4292 #ifdef CONFIG_DRVEXT_MODULE
4293         u8 res;
4294         struct drvext_handler *phandler;
4295         struct drvext_oidparam *poidparam;
4296         int ret;
4297         u16 len;
4298         u8 *pparmbuf, bset;
4299         _adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
4300         struct iw_point *p = &wrqu->data;
4301
4302         if( (!p->length) || (!p->pointer)){
4303                 ret = -EINVAL;
4304                 goto _rtw_drvext_hdl_exit;
4305         }
4306
4307
4308         bset = (u8)(p->flags&0xFFFF);
4309         len = p->length;
4310         pparmbuf = (u8*)rtw_malloc(len);
4311         if (pparmbuf == NULL){
4312                 ret = -ENOMEM;
4313                 goto _rtw_drvext_hdl_exit;
4314         }
4315
4316         if(bset)//set info
4317         {
4318                 if (copy_from_user(pparmbuf, p->pointer,len)) {
4319                         rtw_mfree(pparmbuf, len);
4320                         ret = -EFAULT;
4321                         goto _rtw_drvext_hdl_exit;
4322                 }
4323         }
4324         else//query info
4325         {
4326
4327         }
4328
4329
4330         //
4331         poidparam = (struct drvext_oidparam *)pparmbuf;
4332
4333         RT_TRACE(_module_rtl871x_ioctl_os_c,_drv_info_,("drvext set oid subcode [%d], len[%d], InformationBufferLength[%d]\r\n",
4334                                                  poidparam->subcode, poidparam->len, len));
4335
4336
4337         //check subcode
4338         if ( poidparam->subcode >= MAX_DRVEXT_HANDLERS)
4339         {
4340                 RT_TRACE(_module_rtl871x_ioctl_os_c,_drv_err_,("no matching drvext handlers\r\n"));
4341                 ret = -EINVAL;
4342                 goto _rtw_drvext_hdl_exit;
4343         }
4344
4345
4346         if ( poidparam->subcode >= MAX_DRVEXT_OID_SUBCODES)
4347         {
4348                 RT_TRACE(_module_rtl871x_ioctl_os_c,_drv_err_,("no matching drvext subcodes\r\n"));
4349                 ret = -EINVAL;
4350                 goto _rtw_drvext_hdl_exit;
4351         }
4352
4353
4354         phandler = drvextoidhandlers + poidparam->subcode;
4355
4356         if (poidparam->len != phandler->parmsize)
4357         {
4358                 RT_TRACE(_module_rtl871x_ioctl_os_c,_drv_err_,("no matching drvext param size %d vs %d\r\n",
4359                                                 poidparam->len , phandler->parmsize));
4360                 ret = -EINVAL;
4361                 goto _rtw_drvext_hdl_exit;
4362         }
4363
4364
4365         res = phandler->handler(&padapter->drvextpriv, bset, poidparam->data);
4366
4367         if(res==0)
4368         {
4369                 ret = 0;
4370
4371                 if (bset == 0x00) {//query info
4372                         //_rtw_memcpy(p->pointer, pparmbuf, len);
4373                         if (copy_to_user(p->pointer, pparmbuf, len))
4374                                 ret = -EFAULT;
4375                 }
4376         }
4377         else
4378                 ret = -EFAULT;
4379
4380
4381 _rtw_drvext_hdl_exit:
4382
4383         return ret;
4384
4385 #endif
4386
4387         return 0;
4388
4389 }
4390
4391 static void rtw_dbg_mode_hdl(_adapter *padapter, u32 id, u8 *pdata, u32 len)
4392 {
4393         pRW_Reg         RegRWStruct;
4394         struct rf_reg_param *prfreg;
4395         u8 path;
4396         u8 offset;
4397         u32 value;
4398
4399         DBG_871X("%s\n", __FUNCTION__);
4400
4401         switch(id)
4402         {
4403                 case GEN_MP_IOCTL_SUBCODE(MP_START):
4404                         DBG_871X("871x_driver is only for normal mode, can't enter mp mode\n");
4405                         break;
4406                 case GEN_MP_IOCTL_SUBCODE(READ_REG):
4407                         RegRWStruct = (pRW_Reg)pdata;
4408                         switch (RegRWStruct->width)
4409                         {
4410                                 case 1:
4411                                         RegRWStruct->value = rtw_read8(padapter, RegRWStruct->offset);
4412                                         break;
4413                                 case 2:
4414                                         RegRWStruct->value = rtw_read16(padapter, RegRWStruct->offset);
4415                                         break;
4416                                 case 4:
4417                                         RegRWStruct->value = rtw_read32(padapter, RegRWStruct->offset);
4418                                         break;
4419                                 default:
4420                                         break;
4421                         }
4422
4423                         break;
4424                 case GEN_MP_IOCTL_SUBCODE(WRITE_REG):
4425                         RegRWStruct = (pRW_Reg)pdata;
4426                         switch (RegRWStruct->width)
4427                         {
4428                                 case 1:
4429                                         rtw_write8(padapter, RegRWStruct->offset, (u8)RegRWStruct->value);
4430                                         break;
4431                                 case 2:
4432                                         rtw_write16(padapter, RegRWStruct->offset, (u16)RegRWStruct->value);
4433                                         break;
4434                                 case 4:
4435                                         rtw_write32(padapter, RegRWStruct->offset, (u32)RegRWStruct->value);
4436                                         break;
4437                                 default:
4438                                 break;
4439                         }
4440
4441                         break;
4442                 case GEN_MP_IOCTL_SUBCODE(READ_RF_REG):
4443
4444                         prfreg = (struct rf_reg_param *)pdata;
4445
4446                         path = (u8)prfreg->path;
4447                         offset = (u8)prfreg->offset;
4448
4449                         value = rtw_hal_read_rfreg(padapter, path, offset, 0xffffffff);
4450
4451                         prfreg->value = value;
4452
4453                         break;
4454                 case GEN_MP_IOCTL_SUBCODE(WRITE_RF_REG):
4455
4456                         prfreg = (struct rf_reg_param *)pdata;
4457
4458                         path = (u8)prfreg->path;
4459                         offset = (u8)prfreg->offset;
4460                         value = prfreg->value;
4461
4462                         rtw_hal_write_rfreg(padapter, path, offset, 0xffffffff, value);
4463
4464                         break;
4465                 case GEN_MP_IOCTL_SUBCODE(TRIGGER_GPIO):
4466                         DBG_871X("==> trigger gpio 0\n");
4467                         rtw_hal_set_hwreg(padapter, HW_VAR_TRIGGER_GPIO_0, 0);
4468                         break;
4469 #ifdef CONFIG_BT_COEXIST
4470                 case GEN_MP_IOCTL_SUBCODE(SET_DM_BT):
4471                         DBG_871X("==> set dm_bt_coexist:%x\n",*(u8 *)pdata);
4472                         rtw_hal_set_hwreg(padapter, HW_VAR_BT_SET_COEXIST, pdata);
4473                         break;
4474                 case GEN_MP_IOCTL_SUBCODE(DEL_BA):
4475                         DBG_871X("==> delete ba:%x\n",*(u8 *)pdata);
4476                         rtw_hal_set_hwreg(padapter, HW_VAR_BT_ISSUE_DELBA, pdata);
4477                         break;
4478 #endif
4479 #ifdef DBG_CONFIG_ERROR_DETECT
4480                 case GEN_MP_IOCTL_SUBCODE(GET_WIFI_STATUS):
4481                         *pdata = rtw_hal_sreset_get_wifi_status(padapter);
4482                         break;
4483 #endif
4484
4485                 default:
4486                         break;
4487         }
4488
4489 }
4490
4491 static int rtw_mp_ioctl_hdl(struct net_device *dev, struct iw_request_info *info,
4492                                                 union iwreq_data *wrqu, char *extra)
4493 {
4494         int ret = 0;
4495         u32 BytesRead, BytesWritten, BytesNeeded;
4496         struct oid_par_priv     oid_par;
4497         struct mp_ioctl_handler *phandler;
4498         struct mp_ioctl_param   *poidparam;
4499         uint status=0;
4500         u16 len;
4501         u8 *pparmbuf = NULL, bset;
4502         PADAPTER padapter = (PADAPTER)rtw_netdev_priv(dev);
4503         struct iw_point *p = &wrqu->data;
4504
4505         //DBG_871X("+rtw_mp_ioctl_hdl\n");
4506
4507         //mutex_lock(&ioctl_mutex);
4508
4509         if ((!p->length) || (!p->pointer)) {
4510                 ret = -EINVAL;
4511                 goto _rtw_mp_ioctl_hdl_exit;
4512         }
4513
4514         pparmbuf = NULL;
4515         bset = (u8)(p->flags & 0xFFFF);
4516         len = p->length;
4517         pparmbuf = (u8*)rtw_malloc(len);
4518         if (pparmbuf == NULL){
4519                 ret = -ENOMEM;
4520                 goto _rtw_mp_ioctl_hdl_exit;
4521         }
4522
4523         if (copy_from_user(pparmbuf, p->pointer, len)) {
4524                 ret = -EFAULT;
4525                 goto _rtw_mp_ioctl_hdl_exit;
4526         }
4527
4528         poidparam = (struct mp_ioctl_param *)pparmbuf;
4529         RT_TRACE(_module_rtl871x_ioctl_os_c, _drv_info_,
4530                  ("rtw_mp_ioctl_hdl: subcode [%d], len[%d], buffer_len[%d]\r\n",
4531                   poidparam->subcode, poidparam->len, len));
4532
4533         if (poidparam->subcode >= MAX_MP_IOCTL_SUBCODE) {
4534                 RT_TRACE(_module_rtl871x_ioctl_os_c, _drv_err_, ("no matching drvext subcodes\r\n"));
4535                 ret = -EINVAL;
4536                 goto _rtw_mp_ioctl_hdl_exit;
4537         }
4538
4539         //DBG_871X("%s: %d\n", __func__, poidparam->subcode);
4540 #ifdef CONFIG_MP_INCLUDED
4541 if (padapter->registrypriv.mp_mode == 1)
4542 {
4543         phandler = mp_ioctl_hdl + poidparam->subcode;
4544
4545         if ((phandler->paramsize != 0) && (poidparam->len < phandler->paramsize))
4546         {
4547                 RT_TRACE(_module_rtl871x_ioctl_os_c, _drv_err_,
4548                          ("no matching drvext param size %d vs %d\r\n",
4549                           poidparam->len, phandler->paramsize));
4550                 ret = -EINVAL;
4551                 goto _rtw_mp_ioctl_hdl_exit;
4552         }
4553
4554         if (phandler->handler)
4555         {
4556                 oid_par.adapter_context = padapter;
4557                 oid_par.oid = phandler->oid;
4558                 oid_par.information_buf = poidparam->data;
4559                 oid_par.information_buf_len = poidparam->len;
4560                 oid_par.dbg = 0;
4561
4562                 BytesWritten = 0;
4563                 BytesNeeded = 0;
4564
4565                 if (bset) {
4566                         oid_par.bytes_rw = &BytesRead;
4567                         oid_par.bytes_needed = &BytesNeeded;
4568                         oid_par.type_of_oid = SET_OID;
4569                 } else {
4570                         oid_par.bytes_rw = &BytesWritten;
4571                         oid_par.bytes_needed = &BytesNeeded;
4572                         oid_par.type_of_oid = QUERY_OID;
4573                 }
4574
4575                 status = phandler->handler(&oid_par);
4576
4577                 //todo:check status, BytesNeeded, etc.
4578         }
4579         else {
4580                 DBG_871X("rtw_mp_ioctl_hdl(): err!, subcode=%d, oid=%d, handler=%p\n",
4581                         poidparam->subcode, phandler->oid, phandler->handler);
4582                 ret = -EFAULT;
4583                 goto _rtw_mp_ioctl_hdl_exit;
4584         }
4585 }
4586 else
4587 #endif
4588 {
4589         rtw_dbg_mode_hdl(padapter, poidparam->subcode, poidparam->data, poidparam->len);
4590 }
4591
4592         if (bset == 0x00) {//query info
4593                 if (copy_to_user(p->pointer, pparmbuf, len))
4594                         ret = -EFAULT;
4595         }
4596
4597         if (status) {
4598                 ret = -EFAULT;
4599                 goto _rtw_mp_ioctl_hdl_exit;
4600         }
4601
4602 _rtw_mp_ioctl_hdl_exit:
4603
4604         if (pparmbuf)
4605                 rtw_mfree(pparmbuf, len);
4606
4607         //mutex_unlock(&ioctl_mutex);
4608
4609         return ret;
4610 }
4611
4612 static int rtw_get_ap_info(struct net_device *dev,
4613                                struct iw_request_info *info,
4614                                union iwreq_data *wrqu, char *extra)
4615 {
4616         int bssid_match, ret = 0;
4617         u32 cnt=0, wpa_ielen;
4618         _irqL   irqL;
4619         _list   *plist, *phead;
4620         unsigned char *pbuf;
4621         u8 bssid[ETH_ALEN];
4622         char data[32];
4623         struct wlan_network *pnetwork = NULL;
4624         _adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
4625         struct mlme_priv *pmlmepriv = &(padapter->mlmepriv);
4626         _queue *queue = &(pmlmepriv->scanned_queue);
4627         struct iw_point *pdata = &wrqu->data;
4628
4629         DBG_871X("+rtw_get_aplist_info\n");
4630
4631         if (rtw_is_drv_stopped(padapter) || (pdata == NULL)) {
4632                 ret= -EINVAL;
4633                 goto exit;
4634         }
4635
4636         while((check_fwstate(pmlmepriv, (_FW_UNDER_SURVEY|_FW_UNDER_LINKING))) == _TRUE)
4637         {
4638                 rtw_msleep_os(30);
4639                 cnt++;
4640                 if(cnt > 100)
4641                         break;
4642         }
4643
4644
4645         //pdata->length = 0;//?
4646         pdata->flags = 0;
4647         if(pdata->length>=32)
4648         {
4649                 if(copy_from_user(data, pdata->pointer, 32))
4650                 {
4651                         ret= -EINVAL;
4652                         goto exit;
4653                 }
4654         }
4655         else
4656         {
4657                 ret= -EINVAL;
4658                 goto exit;
4659         }
4660
4661         _enter_critical_bh(&(pmlmepriv->scanned_queue.lock), &irqL);
4662
4663         phead = get_list_head(queue);
4664         plist = get_next(phead);
4665
4666         while(1)
4667         {
4668                 if (rtw_end_of_queue_search(phead,plist)== _TRUE)
4669                         break;
4670
4671
4672                 pnetwork = LIST_CONTAINOR(plist, struct wlan_network, list);
4673
4674                 //if(hwaddr_aton_i(pdata->pointer, bssid))
4675                 if(hwaddr_aton_i(data, bssid))
4676                 {
4677                         DBG_871X("Invalid BSSID '%s'.\n", (u8*)data);
4678                         _exit_critical_bh(&(pmlmepriv->scanned_queue.lock), &irqL);
4679                         return -EINVAL;
4680                 }
4681
4682
4683                 if(_rtw_memcmp(bssid, pnetwork->network.MacAddress, ETH_ALEN) == _TRUE)//BSSID match, then check if supporting wpa/wpa2
4684                 {
4685                         DBG_871X("BSSID:" MAC_FMT "\n", MAC_ARG(bssid));
4686
4687                         pbuf = rtw_get_wpa_ie(&pnetwork->network.IEs[12], &wpa_ielen, pnetwork->network.IELength-12);
4688                         if(pbuf && (wpa_ielen>0))
4689                         {
4690                                 pdata->flags = 1;
4691                                 break;
4692                         }
4693
4694                         pbuf = rtw_get_wpa2_ie(&pnetwork->network.IEs[12], &wpa_ielen, pnetwork->network.IELength-12);
4695                         if(pbuf && (wpa_ielen>0))
4696                         {
4697                                 pdata->flags = 2;
4698                                 break;
4699                         }
4700
4701                 }
4702
4703                 plist = get_next(plist);
4704
4705         }
4706
4707         _exit_critical_bh(&(pmlmepriv->scanned_queue.lock), &irqL);
4708
4709         if(pdata->length>=34)
4710         {
4711                 if(copy_to_user((u8*)pdata->pointer+32, (u8*)&pdata->flags, 1))
4712                 {
4713                         ret= -EINVAL;
4714                         goto exit;
4715                 }
4716         }
4717
4718 exit:
4719
4720         return ret;
4721
4722 }
4723
4724 static int rtw_set_pid(struct net_device *dev,
4725                                struct iw_request_info *info,
4726                                union iwreq_data *wrqu, char *extra)
4727 {
4728
4729         int ret = 0;
4730         _adapter *padapter = rtw_netdev_priv(dev);
4731         int *pdata = (int *)wrqu;
4732         int selector;
4733
4734         if (rtw_is_drv_stopped(padapter) || (pdata == NULL)) {
4735                 ret= -EINVAL;
4736                 goto exit;
4737         }
4738
4739         selector = *pdata;
4740         if(selector < 3 && selector >=0) {
4741                 padapter->pid[selector] = *(pdata+1);
4742                 #ifdef CONFIG_GLOBAL_UI_PID
4743                 ui_pid[selector] = *(pdata+1);
4744                 #endif
4745                 DBG_871X("%s set pid[%d]=%d\n", __FUNCTION__, selector ,padapter->pid[selector]);
4746         }
4747         else
4748                 DBG_871X("%s selector %d error\n", __FUNCTION__, selector);
4749
4750 exit:
4751
4752         return ret;
4753
4754 }
4755
4756 static int rtw_wps_start(struct net_device *dev,
4757                                struct iw_request_info *info,
4758                                union iwreq_data *wrqu, char *extra)
4759 {
4760
4761         int ret = 0;
4762         _adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
4763         struct iw_point *pdata = &wrqu->data;
4764         u32   u32wps_start = 0;
4765         unsigned int uintRet = 0;
4766
4767         if (RTW_CANNOT_RUN(padapter) || (NULL == pdata)) {
4768                 ret= -EINVAL;
4769                 goto exit;
4770         }
4771
4772         uintRet = copy_from_user( ( void* ) &u32wps_start, pdata->pointer, 4 );
4773         if ( u32wps_start == 0 )
4774         {
4775                 u32wps_start = *extra;
4776         }
4777
4778         DBG_871X( "[%s] wps_start = %d\n", __FUNCTION__, u32wps_start );
4779
4780         if ( u32wps_start == 1 ) // WPS Start
4781         {
4782                 rtw_led_control(padapter, LED_CTL_START_WPS);
4783         }
4784         else if ( u32wps_start == 2 ) // WPS Stop because of wps success
4785         {
4786                 rtw_led_control(padapter, LED_CTL_STOP_WPS);
4787         }
4788         else if ( u32wps_start == 3 ) // WPS Stop because of wps fail
4789         {
4790                 rtw_led_control(padapter, LED_CTL_STOP_WPS_FAIL);
4791         }
4792
4793 #ifdef CONFIG_INTEL_WIDI
4794         process_intel_widi_wps_status(padapter, u32wps_start);
4795 #endif //CONFIG_INTEL_WIDI
4796
4797 exit:
4798
4799         return ret;
4800
4801 }
4802
4803 #ifdef CONFIG_P2P
4804 static int rtw_wext_p2p_enable(struct net_device *dev,
4805                                struct iw_request_info *info,
4806                                union iwreq_data *wrqu, char *extra)
4807 {
4808
4809         int ret = 0;
4810         _adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
4811         struct mlme_priv *pmlmepriv = &(padapter->mlmepriv);
4812         struct iw_point *pdata = &wrqu->data;
4813         struct wifidirect_info *pwdinfo= &(padapter->wdinfo);
4814         struct mlme_ext_priv    *pmlmeext = &padapter->mlmeextpriv;
4815         enum P2P_ROLE init_role = P2P_ROLE_DISABLE;
4816
4817         if(*extra == '0' )
4818                 init_role = P2P_ROLE_DISABLE;
4819         else if(*extra == '1')
4820                 init_role = P2P_ROLE_DEVICE;
4821         else if(*extra == '2')
4822                 init_role = P2P_ROLE_CLIENT;
4823         else if(*extra == '3')
4824                 init_role = P2P_ROLE_GO;
4825
4826         if(_FAIL == rtw_p2p_enable(padapter, init_role))
4827         {
4828                 ret = -EFAULT;
4829                 goto exit;
4830         }
4831
4832         //set channel/bandwidth
4833         if(init_role != P2P_ROLE_DISABLE)
4834         {
4835                 u8 channel, ch_offset;
4836                 u16 bwmode;
4837
4838                 if(rtw_p2p_chk_state(pwdinfo, P2P_STATE_LISTEN))
4839                 {
4840                         //      Stay at the listen state and wait for discovery.
4841                         channel = pwdinfo->listen_channel;
4842                         pwdinfo->operating_channel = pwdinfo->listen_channel;
4843                         ch_offset = HAL_PRIME_CHNL_OFFSET_DONT_CARE;
4844                         bwmode = CHANNEL_WIDTH_20;
4845                 }
4846 #ifdef CONFIG_CONCURRENT_MODE
4847                 else if(rtw_p2p_chk_state(pwdinfo, P2P_STATE_IDLE))
4848                 {
4849                         _adapter                                *pbuddy_adapter = padapter->pbuddy_adapter;
4850                         //struct wifidirect_info        *pbuddy_wdinfo = &pbuddy_adapter->wdinfo;
4851                         struct mlme_priv                *pbuddy_mlmepriv = &pbuddy_adapter->mlmepriv;
4852                         struct mlme_ext_priv    *pbuddy_mlmeext = &pbuddy_adapter->mlmeextpriv;
4853
4854                         _set_timer( &pwdinfo->ap_p2p_switch_timer, pwdinfo->ext_listen_interval );
4855                         if ( check_fwstate( pbuddy_mlmepriv, _FW_LINKED ) )
4856                         {
4857                                 pwdinfo->operating_channel = pbuddy_mlmeext->cur_channel;
4858                                 //      How about the ch_offset and bwmode ??
4859                         }
4860                         else
4861                         {
4862                                 pwdinfo->operating_channel = pwdinfo->listen_channel;
4863                         }
4864
4865                         channel = pbuddy_mlmeext->cur_channel;
4866                         ch_offset = pbuddy_mlmeext->cur_ch_offset;
4867                         bwmode = pbuddy_mlmeext->cur_bwmode;
4868                 }
4869 #endif
4870                 else
4871                 {
4872                         pwdinfo->operating_channel = pmlmeext->cur_channel;
4873
4874                         channel = pwdinfo->operating_channel;
4875                         ch_offset = pmlmeext->cur_ch_offset;
4876                         bwmode = pmlmeext->cur_bwmode;
4877                 }
4878
4879                 set_channel_bwmode(padapter, channel, ch_offset, bwmode);
4880         }
4881
4882 exit:
4883         return ret;
4884
4885 }
4886
4887 static int rtw_p2p_set_go_nego_ssid(struct net_device *dev,
4888                                struct iw_request_info *info,
4889                                union iwreq_data *wrqu, char *extra)
4890 {
4891
4892         int ret = 0;
4893         _adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
4894         struct mlme_priv *pmlmepriv = &(padapter->mlmepriv);
4895         struct iw_point *pdata = &wrqu->data;
4896         struct wifidirect_info *pwdinfo= &(padapter->wdinfo);
4897
4898         DBG_871X( "[%s] ssid = %s, len = %zu\n", __FUNCTION__, extra, strlen( extra ) );
4899         _rtw_memcpy( pwdinfo->nego_ssid, extra, strlen( extra ) );
4900         pwdinfo->nego_ssidlen = strlen( extra );
4901
4902         return ret;
4903
4904 }
4905
4906
4907 static int rtw_p2p_set_intent(struct net_device *dev,
4908                                struct iw_request_info *info,
4909                                union iwreq_data *wrqu, char *extra)
4910 {
4911         int                                                     ret = 0;
4912         _adapter                                                *padapter = (_adapter *)rtw_netdev_priv(dev);
4913         struct wifidirect_info                  *pwdinfo= &(padapter->wdinfo);
4914         u8                                                      intent = pwdinfo->intent;
4915
4916         extra[ wrqu->data.length ] = 0x00;
4917
4918         intent = rtw_atoi( extra );
4919
4920         if ( intent <= 15 )
4921         {
4922                 pwdinfo->intent= intent;
4923         }
4924         else
4925         {
4926                 ret = -1;
4927         }
4928
4929         DBG_871X( "[%s] intent = %d\n", __FUNCTION__, intent);
4930
4931         return ret;
4932
4933 }
4934
4935 static int rtw_p2p_set_listen_ch(struct net_device *dev,
4936                                struct iw_request_info *info,
4937                                union iwreq_data *wrqu, char *extra)
4938 {
4939
4940         int ret = 0;
4941         _adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
4942         struct wifidirect_info *pwdinfo= &(padapter->wdinfo);
4943         u8      listen_ch = pwdinfo->listen_channel;    //      Listen channel number
4944
4945         extra[ wrqu->data.length ] = 0x00;
4946         listen_ch = rtw_atoi( extra );
4947
4948         if ( ( listen_ch == 1 ) || ( listen_ch == 6 ) || ( listen_ch == 11 ) )
4949         {
4950                 pwdinfo->listen_channel = listen_ch;
4951                 set_channel_bwmode(padapter, pwdinfo->listen_channel, HAL_PRIME_CHNL_OFFSET_DONT_CARE, CHANNEL_WIDTH_20);
4952         }
4953         else
4954         {
4955                 ret = -1;
4956         }
4957
4958         DBG_871X( "[%s] listen_ch = %d\n", __FUNCTION__, pwdinfo->listen_channel );
4959
4960         return ret;
4961
4962 }
4963
4964 static int rtw_p2p_set_op_ch(struct net_device *dev,
4965                                struct iw_request_info *info,
4966                                union iwreq_data *wrqu, char *extra)
4967 {
4968 //      Commented by Albert 20110524
4969 //      This function is used to set the operating channel if the driver will become the group owner
4970
4971         int ret = 0;
4972         _adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
4973         struct wifidirect_info *pwdinfo= &(padapter->wdinfo);
4974         u8      op_ch = pwdinfo->operating_channel;     //      Operating channel number
4975
4976         extra[ wrqu->data.length ] = 0x00;
4977
4978         op_ch = ( u8 ) rtw_atoi( extra );
4979         if ( op_ch > 0 )
4980         {
4981                 pwdinfo->operating_channel = op_ch;
4982         }
4983         else
4984         {
4985                 ret = -1;
4986         }
4987
4988         DBG_871X( "[%s] op_ch = %d\n", __FUNCTION__, pwdinfo->operating_channel );
4989
4990         return ret;
4991
4992 }
4993
4994
4995 static int rtw_p2p_profilefound(struct net_device *dev,
4996                                struct iw_request_info *info,
4997                                union iwreq_data *wrqu, char *extra)
4998 {
4999
5000         int ret = 0;
5001         _adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
5002         struct wifidirect_info *pwdinfo= &(padapter->wdinfo);
5003
5004         //      Comment by Albert 2010/10/13
5005         //      Input data format:
5006         //      Ex:  0
5007         //      Ex:  1XX:XX:XX:XX:XX:XXYYSSID
5008         //      0 => Reflush the profile record list.
5009         //      1 => Add the profile list
5010         //      XX:XX:XX:XX:XX:XX => peer's MAC Address ( ex: 00:E0:4C:00:00:01 )
5011         //      YY => SSID Length
5012         //      SSID => SSID for persistence group
5013
5014         DBG_871X( "[%s] In value = %s, len = %d \n", __FUNCTION__, extra, wrqu->data.length -1);
5015
5016
5017         //      The upper application should pass the SSID to driver by using this rtw_p2p_profilefound function.
5018         if(!rtw_p2p_chk_state(pwdinfo, P2P_STATE_NONE))
5019         {
5020                 if ( extra[ 0 ] == '0' )
5021                 {
5022                         //      Remove all the profile information of wifidirect_info structure.
5023                         _rtw_memset( &pwdinfo->profileinfo[ 0 ], 0x00, sizeof( struct profile_info ) * P2P_MAX_PERSISTENT_GROUP_NUM );
5024                         pwdinfo->profileindex = 0;
5025                 }
5026                 else
5027                 {
5028                         if ( pwdinfo->profileindex >= P2P_MAX_PERSISTENT_GROUP_NUM )
5029                 {
5030                                 ret = -1;
5031                 }
5032                 else
5033                 {
5034                                 int jj, kk;
5035
5036                                 //      Add this profile information into pwdinfo->profileinfo
5037                                 //      Ex:  1XX:XX:XX:XX:XX:XXYYSSID
5038                                 for( jj = 0, kk = 1; jj < ETH_ALEN; jj++, kk += 3 )
5039                                 {
5040                                         pwdinfo->profileinfo[ pwdinfo->profileindex ].peermac[ jj ] = key_2char2num(extra[ kk ], extra[ kk+ 1 ]);
5041                                 }
5042
5043                                 //pwdinfo->profileinfo[ pwdinfo->profileindex ].ssidlen = ( extra[18] - '0' ) * 10 + ( extra[ 19 ] - '0' );
5044                                 //_rtw_memcpy( pwdinfo->profileinfo[ pwdinfo->profileindex ].ssid, &extra[ 20 ], pwdinfo->profileinfo[ pwdinfo->profileindex ].ssidlen );
5045                                 pwdinfo->profileindex++;
5046                         }
5047                 }
5048         }
5049
5050         return ret;
5051
5052 }
5053
5054 static int rtw_p2p_setDN(struct net_device *dev,
5055                                struct iw_request_info *info,
5056                                union iwreq_data *wrqu, char *extra)
5057 {
5058
5059         int ret = 0;
5060         _adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
5061         struct wifidirect_info *pwdinfo= &(padapter->wdinfo);
5062
5063
5064         DBG_871X( "[%s] %s %d\n", __FUNCTION__, extra, wrqu->data.length -1  );
5065         _rtw_memset( pwdinfo->device_name, 0x00, WPS_MAX_DEVICE_NAME_LEN );
5066         _rtw_memcpy( pwdinfo->device_name, extra, wrqu->data.length - 1 );
5067         pwdinfo->device_name_len = wrqu->data.length - 1;
5068
5069         return ret;
5070
5071 }
5072
5073
5074 static int rtw_p2p_get_status(struct net_device *dev,
5075                                struct iw_request_info *info,
5076                                union iwreq_data *wrqu, char *extra)
5077 {
5078
5079         int ret = 0;
5080         _adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
5081         struct iw_point *pdata = &wrqu->data;
5082         struct wifidirect_info  *pwdinfo = &( padapter->wdinfo );
5083 #ifdef CONFIG_CONCURRENT_MODE
5084         _adapter                                *pbuddy_adapter = padapter->pbuddy_adapter;
5085         struct wifidirect_info  *pbuddy_wdinfo = &pbuddy_adapter->wdinfo;
5086         struct mlme_priv                *pbuddy_mlmepriv = &pbuddy_adapter->mlmepriv;
5087         struct mlme_ext_priv    *pbuddy_mlmeext = &pbuddy_adapter->mlmeextpriv;
5088 #endif
5089
5090         if ( padapter->bShowGetP2PState )
5091         {
5092                 DBG_871X( "[%s] Role = %d, Status = %d, peer addr = %.2X:%.2X:%.2X:%.2X:%.2X:%.2X\n", __FUNCTION__, rtw_p2p_role(pwdinfo), rtw_p2p_state(pwdinfo),
5093                                 pwdinfo->p2p_peer_interface_addr[ 0 ], pwdinfo->p2p_peer_interface_addr[ 1 ], pwdinfo->p2p_peer_interface_addr[ 2 ],
5094                                 pwdinfo->p2p_peer_interface_addr[ 3 ], pwdinfo->p2p_peer_interface_addr[ 4 ], pwdinfo->p2p_peer_interface_addr[ 5 ]);
5095         }
5096
5097         //      Commented by Albert 2010/10/12
5098         //      Because of the output size limitation, I had removed the "Role" information.
5099         //      About the "Role" information, we will use the new private IOCTL to get the "Role" information.
5100         sprintf( extra, "\n\nStatus=%.2d\n", rtw_p2p_state(pwdinfo) );
5101         wrqu->data.length = strlen( extra );
5102
5103         return ret;
5104
5105 }
5106
5107 //      Commented by Albert 20110520
5108 //      This function will return the config method description
5109 //      This config method description will show us which config method the remote P2P device is intented to use
5110 //      by sending the provisioning discovery request frame.
5111
5112 static int rtw_p2p_get_req_cm(struct net_device *dev,
5113                                struct iw_request_info *info,
5114                                union iwreq_data *wrqu, char *extra)
5115 {
5116
5117         int ret = 0;
5118         _adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
5119         struct iw_point *pdata = &wrqu->data;
5120         struct wifidirect_info  *pwdinfo = &( padapter->wdinfo );
5121
5122         sprintf( extra, "\n\nCM=%s\n", pwdinfo->rx_prov_disc_info.strconfig_method_desc_of_prov_disc_req );
5123         wrqu->data.length = strlen( extra );
5124         return ret;
5125
5126 }
5127
5128
5129 static int rtw_p2p_get_role(struct net_device *dev,
5130                                struct iw_request_info *info,
5131                                union iwreq_data *wrqu, char *extra)
5132 {
5133
5134         int ret = 0;
5135         _adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
5136         struct iw_point *pdata = &wrqu->data;
5137         struct wifidirect_info  *pwdinfo = &( padapter->wdinfo );
5138
5139
5140         DBG_871X( "[%s] Role = %d, Status = %d, peer addr = %.2X:%.2X:%.2X:%.2X:%.2X:%.2X\n", __FUNCTION__, rtw_p2p_role(pwdinfo), rtw_p2p_state(pwdinfo),
5141                         pwdinfo->p2p_peer_interface_addr[ 0 ], pwdinfo->p2p_peer_interface_addr[ 1 ], pwdinfo->p2p_peer_interface_addr[ 2 ],
5142                         pwdinfo->p2p_peer_interface_addr[ 3 ], pwdinfo->p2p_peer_interface_addr[ 4 ], pwdinfo->p2p_peer_interface_addr[ 5 ]);
5143
5144         sprintf( extra, "\n\nRole=%.2d\n", rtw_p2p_role(pwdinfo) );
5145         wrqu->data.length = strlen( extra );
5146         return ret;
5147
5148 }
5149
5150
5151 static int rtw_p2p_get_peer_ifaddr(struct net_device *dev,
5152                                struct iw_request_info *info,
5153                                union iwreq_data *wrqu, char *extra)
5154 {
5155
5156         int ret = 0;
5157         _adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
5158         struct iw_point *pdata = &wrqu->data;
5159         struct wifidirect_info  *pwdinfo = &( padapter->wdinfo );
5160
5161
5162         DBG_871X( "[%s] Role = %d, Status = %d, peer addr = %.2X:%.2X:%.2X:%.2X:%.2X:%.2X\n", __FUNCTION__, rtw_p2p_role(pwdinfo), rtw_p2p_state(pwdinfo),
5163                         pwdinfo->p2p_peer_interface_addr[ 0 ], pwdinfo->p2p_peer_interface_addr[ 1 ], pwdinfo->p2p_peer_interface_addr[ 2 ],
5164                         pwdinfo->p2p_peer_interface_addr[ 3 ], pwdinfo->p2p_peer_interface_addr[ 4 ], pwdinfo->p2p_peer_interface_addr[ 5 ]);
5165
5166         sprintf( extra, "\nMAC %.2X:%.2X:%.2X:%.2X:%.2X:%.2X",
5167                         pwdinfo->p2p_peer_interface_addr[ 0 ], pwdinfo->p2p_peer_interface_addr[ 1 ], pwdinfo->p2p_peer_interface_addr[ 2 ],
5168                         pwdinfo->p2p_peer_interface_addr[ 3 ], pwdinfo->p2p_peer_interface_addr[ 4 ], pwdinfo->p2p_peer_interface_addr[ 5 ]);
5169         wrqu->data.length = strlen( extra );
5170         return ret;
5171
5172 }
5173
5174 static int rtw_p2p_get_peer_devaddr(struct net_device *dev,
5175                                struct iw_request_info *info,
5176                                union iwreq_data *wrqu, char *extra)
5177
5178 {
5179
5180         int ret = 0;
5181         _adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
5182         struct iw_point *pdata = &wrqu->data;
5183         struct wifidirect_info  *pwdinfo = &( padapter->wdinfo );
5184
5185         DBG_871X( "[%s] Role = %d, Status = %d, peer addr = %.2X:%.2X:%.2X:%.2X:%.2X:%.2X\n", __FUNCTION__, rtw_p2p_role(pwdinfo), rtw_p2p_state(pwdinfo),
5186                         pwdinfo->rx_prov_disc_info.peerDevAddr[ 0 ], pwdinfo->rx_prov_disc_info.peerDevAddr[ 1 ],
5187                         pwdinfo->rx_prov_disc_info.peerDevAddr[ 2 ], pwdinfo->rx_prov_disc_info.peerDevAddr[ 3 ],
5188                         pwdinfo->rx_prov_disc_info.peerDevAddr[ 4 ], pwdinfo->rx_prov_disc_info.peerDevAddr[ 5 ]);
5189         sprintf( extra, "\n%.2X%.2X%.2X%.2X%.2X%.2X",
5190                         pwdinfo->rx_prov_disc_info.peerDevAddr[ 0 ], pwdinfo->rx_prov_disc_info.peerDevAddr[ 1 ],
5191                         pwdinfo->rx_prov_disc_info.peerDevAddr[ 2 ], pwdinfo->rx_prov_disc_info.peerDevAddr[ 3 ],
5192                         pwdinfo->rx_prov_disc_info.peerDevAddr[ 4 ], pwdinfo->rx_prov_disc_info.peerDevAddr[ 5 ]);
5193         wrqu->data.length = strlen( extra );
5194         return ret;
5195
5196 }
5197
5198 static int rtw_p2p_get_peer_devaddr_by_invitation(struct net_device *dev,
5199                                struct iw_request_info *info,
5200                                union iwreq_data *wrqu, char *extra)
5201
5202 {
5203
5204         int ret = 0;
5205         _adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
5206         struct iw_point *pdata = &wrqu->data;
5207         struct wifidirect_info  *pwdinfo = &( padapter->wdinfo );
5208
5209         DBG_871X( "[%s] Role = %d, Status = %d, peer addr = %.2X:%.2X:%.2X:%.2X:%.2X:%.2X\n", __FUNCTION__, rtw_p2p_role(pwdinfo), rtw_p2p_state(pwdinfo),
5210                         pwdinfo->p2p_peer_device_addr[ 0 ], pwdinfo->p2p_peer_device_addr[ 1 ],
5211                         pwdinfo->p2p_peer_device_addr[ 2 ], pwdinfo->p2p_peer_device_addr[ 3 ],
5212                         pwdinfo->p2p_peer_device_addr[ 4 ], pwdinfo->p2p_peer_device_addr[ 5 ]);
5213         sprintf( extra, "\nMAC %.2X:%.2X:%.2X:%.2X:%.2X:%.2X",
5214                         pwdinfo->p2p_peer_device_addr[ 0 ], pwdinfo->p2p_peer_device_addr[ 1 ],
5215                         pwdinfo->p2p_peer_device_addr[ 2 ], pwdinfo->p2p_peer_device_addr[ 3 ],
5216                         pwdinfo->p2p_peer_device_addr[ 4 ], pwdinfo->p2p_peer_device_addr[ 5 ]);
5217         wrqu->data.length = strlen( extra );
5218         return ret;
5219
5220 }
5221
5222 static int rtw_p2p_get_groupid(struct net_device *dev,
5223                                struct iw_request_info *info,
5224                                union iwreq_data *wrqu, char *extra)
5225
5226 {
5227
5228         int ret = 0;
5229         _adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
5230         struct iw_point *pdata = &wrqu->data;
5231         struct wifidirect_info  *pwdinfo = &( padapter->wdinfo );
5232
5233         sprintf( extra, "\n%.2X:%.2X:%.2X:%.2X:%.2X:%.2X %s",
5234                         pwdinfo->groupid_info.go_device_addr[ 0 ], pwdinfo->groupid_info.go_device_addr[ 1 ],
5235                         pwdinfo->groupid_info.go_device_addr[ 2 ], pwdinfo->groupid_info.go_device_addr[ 3 ],
5236                         pwdinfo->groupid_info.go_device_addr[ 4 ], pwdinfo->groupid_info.go_device_addr[ 5 ],
5237                         pwdinfo->groupid_info.ssid);
5238         wrqu->data.length = strlen( extra );
5239         return ret;
5240
5241 }
5242
5243 static int rtw_p2p_get_op_ch(struct net_device *dev,
5244                                struct iw_request_info *info,
5245                                union iwreq_data *wrqu, char *extra)
5246
5247 {
5248
5249         int ret = 0;
5250         _adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
5251         struct iw_point *pdata = &wrqu->data;
5252         struct wifidirect_info  *pwdinfo = &( padapter->wdinfo );
5253
5254
5255         DBG_871X( "[%s] Op_ch = %02x\n", __FUNCTION__, pwdinfo->operating_channel);
5256
5257         sprintf( extra, "\n\nOp_ch=%.2d\n", pwdinfo->operating_channel );
5258         wrqu->data.length = strlen( extra );
5259         return ret;
5260
5261 }
5262
5263 static int rtw_p2p_get_wps_configmethod(struct net_device *dev,
5264                                                                                 struct iw_request_info *info,
5265                                                                                 union iwreq_data *wrqu, char *extra, char *subcmd)
5266 {
5267
5268         int ret = 0;
5269         _adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
5270         u8 peerMAC[ETH_ALEN] = { 0x00 };
5271         struct mlme_priv *pmlmepriv = &padapter->mlmepriv;
5272         _irqL irqL;
5273         _list * plist,*phead;
5274         _queue *queue = &(pmlmepriv->scanned_queue);
5275         struct wlan_network *pnetwork = NULL;
5276         u8 blnMatch = 0;
5277         u16     attr_content = 0;
5278         uint attr_contentlen = 0;
5279         u8      attr_content_str[P2P_PRIVATE_IOCTL_SET_LEN] = { 0x00 };
5280
5281         //      Commented by Albert 20110727
5282         //      The input data is the MAC address which the application wants to know its WPS config method.
5283         //      After knowing its WPS config method, the application can decide the config method for provisioning discovery.
5284         //      Format: iwpriv wlanx p2p_get_wpsCM 00:E0:4C:00:00:05
5285
5286         DBG_871X("[%s] data = %s\n", __FUNCTION__, subcmd);
5287
5288         macstr2num(peerMAC, subcmd);
5289
5290         _enter_critical_bh(&(pmlmepriv->scanned_queue.lock), &irqL);
5291
5292         phead = get_list_head(queue);
5293         plist = get_next(phead);
5294
5295         while (1)
5296         {
5297                 if (rtw_end_of_queue_search(phead, plist) == _TRUE) break;
5298
5299                 pnetwork = LIST_CONTAINOR(plist, struct wlan_network, list);
5300                 if (_rtw_memcmp(pnetwork->network.MacAddress, peerMAC, ETH_ALEN))
5301                 {
5302                         u8 *wpsie;
5303                         uint    wpsie_len = 0;
5304
5305                         //      The mac address is matched.
5306
5307                         if ( (wpsie=rtw_get_wps_ie_from_scan_queue( &pnetwork->network.IEs[0], pnetwork->network.IELength, NULL, &wpsie_len, pnetwork->network.Reserved[0])) )
5308                         {
5309                                 rtw_get_wps_attr_content(wpsie, wpsie_len, WPS_ATTR_CONF_METHOD, (u8 *)&attr_content, &attr_contentlen);
5310                                 if (attr_contentlen)
5311                                 {
5312                                         attr_content = be16_to_cpu(attr_content);
5313                                         sprintf(attr_content_str, "\n\nM=%.4d", attr_content);
5314                                         blnMatch = 1;
5315                                 }
5316                         }
5317
5318                         break;
5319                 }
5320
5321                 plist = get_next(plist);
5322
5323         }
5324
5325         _exit_critical_bh(&(pmlmepriv->scanned_queue.lock), &irqL);
5326
5327         if (!blnMatch)
5328         {
5329                 sprintf(attr_content_str, "\n\nM=0000");
5330         }
5331
5332         wrqu->data.length = strlen(attr_content_str);
5333         _rtw_memcpy(extra, attr_content_str, wrqu->data.length);
5334
5335         return ret;
5336
5337 }
5338
5339 #ifdef CONFIG_WFD
5340 static int rtw_p2p_get_peer_wfd_port(struct net_device *dev,
5341                                struct iw_request_info *info,
5342                                union iwreq_data *wrqu, char *extra)
5343 {
5344
5345         int ret = 0;
5346         _adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
5347         struct iw_point *pdata = &wrqu->data;
5348         struct wifidirect_info  *pwdinfo = &( padapter->wdinfo );
5349
5350         DBG_871X( "[%s] p2p_state = %d\n", __FUNCTION__, rtw_p2p_state(pwdinfo) );
5351
5352         sprintf( extra, "\n\nPort=%d\n", pwdinfo->wfd_info->peer_rtsp_ctrlport );
5353         DBG_871X( "[%s] remote port = %d\n", __FUNCTION__, pwdinfo->wfd_info->peer_rtsp_ctrlport );
5354
5355         wrqu->data.length = strlen( extra );
5356         return ret;
5357
5358 }
5359
5360 static int rtw_p2p_get_peer_wfd_preferred_connection(struct net_device *dev,
5361                                struct iw_request_info *info,
5362                                union iwreq_data *wrqu, char *extra)
5363 {
5364
5365         int ret = 0;
5366         _adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
5367         struct iw_point *pdata = &wrqu->data;
5368         struct wifidirect_info  *pwdinfo = &( padapter->wdinfo );
5369
5370         sprintf( extra, "\n\nwfd_pc=%d\n", pwdinfo->wfd_info->wfd_pc );
5371         DBG_871X( "[%s] wfd_pc = %d\n", __FUNCTION__, pwdinfo->wfd_info->wfd_pc );
5372
5373         wrqu->data.length = strlen( extra );
5374         pwdinfo->wfd_info->wfd_pc = _FALSE;     //      Reset the WFD preferred connection to P2P
5375         return ret;
5376
5377 }
5378
5379 static int rtw_p2p_get_peer_wfd_session_available(struct net_device *dev,
5380                                struct iw_request_info *info,
5381                                union iwreq_data *wrqu, char *extra)
5382 {
5383
5384         int ret = 0;
5385         _adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
5386         struct iw_point *pdata = &wrqu->data;
5387         struct wifidirect_info  *pwdinfo = &( padapter->wdinfo );
5388
5389         sprintf( extra, "\n\nwfd_sa=%d\n", pwdinfo->wfd_info->peer_session_avail );
5390         DBG_871X( "[%s] wfd_sa = %d\n", __FUNCTION__, pwdinfo->wfd_info->peer_session_avail );
5391
5392         wrqu->data.length = strlen( extra );
5393         pwdinfo->wfd_info->peer_session_avail = _TRUE;  //      Reset the WFD session available
5394         return ret;
5395
5396 }
5397 #endif /* CONFIG_WFD */
5398
5399 static int rtw_p2p_get_go_device_address(struct net_device *dev,
5400                                                                                  struct iw_request_info *info,
5401                                                                                  union iwreq_data *wrqu, char *extra, char *subcmd)
5402 {
5403
5404         int ret = 0;
5405         _adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
5406         u8 peerMAC[ETH_ALEN] = { 0x00 };
5407         struct mlme_priv *pmlmepriv = &padapter->mlmepriv;
5408         _irqL irqL;
5409         _list *plist, *phead;
5410         _queue *queue   = &(pmlmepriv->scanned_queue);
5411         struct wlan_network *pnetwork = NULL;
5412         u8 blnMatch = 0;
5413         u8 *p2pie;
5414         uint p2pielen = 0, attr_contentlen = 0;
5415         u8 attr_content[100] = { 0x00 };
5416         u8 go_devadd_str[P2P_PRIVATE_IOCTL_SET_LEN] = { 0x00 };
5417
5418         //      Commented by Albert 20121209
5419         //      The input data is the GO's interface address which the application wants to know its device address.
5420         //      Format: iwpriv wlanx p2p_get2 go_devadd=00:E0:4C:00:00:05
5421
5422         DBG_871X("[%s] data = %s\n", __FUNCTION__, subcmd);
5423
5424         macstr2num(peerMAC, subcmd);
5425
5426         _enter_critical_bh(&(pmlmepriv->scanned_queue.lock), &irqL);
5427
5428         phead = get_list_head(queue);
5429         plist = get_next(phead);
5430
5431         while (1)
5432         {
5433                 if (rtw_end_of_queue_search(phead, plist) == _TRUE) break;
5434
5435                 pnetwork = LIST_CONTAINOR(plist, struct wlan_network, list);
5436                 if (_rtw_memcmp(pnetwork->network.MacAddress, peerMAC, ETH_ALEN))
5437                 {
5438                         //      Commented by Albert 2011/05/18
5439                         //      Match the device address located in the P2P IE
5440                         //      This is for the case that the P2P device address is not the same as the P2P interface address.
5441
5442                         p2pie = rtw_bss_ex_get_p2p_ie(&pnetwork->network, NULL, &p2pielen);
5443                         if (p2pie) {
5444                                 while (p2pie)
5445                                 {
5446                                         //      The P2P Device ID attribute is included in the Beacon frame.
5447                                         //      The P2P Device Info attribute is included in the probe response frame.
5448
5449                                         _rtw_memset(attr_content, 0x00, 100);
5450                                         if (rtw_get_p2p_attr_content(p2pie, p2pielen, P2P_ATTR_DEVICE_ID, attr_content, &attr_contentlen))
5451                                         {
5452                                                 //      Handle the P2P Device ID attribute of Beacon first
5453                                                 blnMatch = 1;
5454                                                 break;
5455
5456                                         } else if (rtw_get_p2p_attr_content(p2pie, p2pielen, P2P_ATTR_DEVICE_INFO, attr_content, &attr_contentlen))
5457                                         {
5458                                                 //      Handle the P2P Device Info attribute of probe response
5459                                                 blnMatch = 1;
5460                                                 break;
5461                                         }
5462
5463                                         //Get the next P2P IE
5464                                         p2pie = rtw_get_p2p_ie(p2pie + p2pielen, BSS_EX_TLV_IES_LEN(&pnetwork->network) - (p2pie + p2pielen - BSS_EX_TLV_IES(&pnetwork->network)), NULL, &p2pielen);
5465                                 }
5466                         }
5467                 }
5468
5469                 plist = get_next(plist);
5470
5471         }
5472
5473         _exit_critical_bh(&(pmlmepriv->scanned_queue.lock), &irqL);
5474
5475         if (!blnMatch)
5476         {
5477                 sprintf(go_devadd_str, "\n\ndev_add=NULL");
5478         } else
5479         {
5480                 sprintf(go_devadd_str, "\n\ndev_add=%.2X:%.2X:%.2X:%.2X:%.2X:%.2X",
5481                                 attr_content[0], attr_content[1], attr_content[2], attr_content[3], attr_content[4], attr_content[5]);
5482         }
5483
5484         wrqu->data.length = strlen(go_devadd_str);
5485         _rtw_memcpy(extra, go_devadd_str, wrqu->data.length);
5486
5487         return ret;
5488
5489 }
5490
5491 static int rtw_p2p_get_device_type(struct net_device *dev,
5492                                                                    struct iw_request_info *info,
5493                                                                    union iwreq_data *wrqu, char *extra, char *subcmd)
5494 {
5495
5496         int ret = 0;
5497         _adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
5498         u8 peerMAC[ETH_ALEN] = { 0x00 };
5499         struct mlme_priv *pmlmepriv = &padapter->mlmepriv;
5500         _irqL irqL;
5501         _list *plist, *phead;
5502         _queue *queue = &(pmlmepriv->scanned_queue);
5503         struct wlan_network *pnetwork = NULL;
5504         u8 blnMatch = 0;
5505         u8 dev_type[8] = { 0x00 };
5506         uint dev_type_len = 0;
5507         u8 dev_type_str[P2P_PRIVATE_IOCTL_SET_LEN] = { 0x00 };    // +9 is for the str "dev_type=", we have to clear it at wrqu->data.pointer
5508
5509         //      Commented by Albert 20121209
5510         //      The input data is the MAC address which the application wants to know its device type.
5511         //      Such user interface could know the device type.
5512         //      Format: iwpriv wlanx p2p_get2 dev_type=00:E0:4C:00:00:05
5513
5514         DBG_871X("[%s] data = %s\n", __FUNCTION__, subcmd);
5515
5516         macstr2num(peerMAC, subcmd);
5517
5518         _enter_critical_bh(&(pmlmepriv->scanned_queue.lock), &irqL);
5519
5520         phead = get_list_head(queue);
5521         plist = get_next(phead);
5522
5523         while (1)
5524         {
5525                 if (rtw_end_of_queue_search(phead, plist) == _TRUE) break;
5526
5527                 pnetwork = LIST_CONTAINOR(plist, struct wlan_network, list);
5528                 if (_rtw_memcmp(pnetwork->network.MacAddress, peerMAC, ETH_ALEN))
5529                 {
5530                         u8 *wpsie;
5531                         uint    wpsie_len = 0;
5532
5533                         //      The mac address is matched.
5534
5535                         if ( (wpsie=rtw_get_wps_ie_from_scan_queue( &pnetwork->network.IEs[0], pnetwork->network.IELength, NULL, &wpsie_len, pnetwork->network.Reserved[0])) )
5536                         {
5537                                 rtw_get_wps_attr_content(wpsie, wpsie_len, WPS_ATTR_PRIMARY_DEV_TYPE, dev_type, &dev_type_len);
5538                                 if (dev_type_len)
5539                                 {
5540                                         u16     type = 0;
5541
5542                                         _rtw_memcpy(&type, dev_type, 2);
5543                                         type = be16_to_cpu(type);
5544                                         sprintf(dev_type_str, "\n\nN=%.2d", type);
5545                                         blnMatch = 1;
5546                                 }
5547                         }
5548                         break;
5549                 }
5550
5551                 plist = get_next(plist);
5552
5553         }
5554
5555         _exit_critical_bh(&(pmlmepriv->scanned_queue.lock), &irqL);
5556
5557         if (!blnMatch)
5558         {
5559                 sprintf(dev_type_str, "\n\nN=00");
5560         }
5561
5562         wrqu->data.length = strlen(dev_type_str);
5563         _rtw_memcpy(extra, dev_type_str, wrqu->data.length);
5564
5565         return ret;
5566
5567 }
5568
5569 static int rtw_p2p_get_device_name(struct net_device *dev,
5570                                                                    struct iw_request_info *info,
5571                                                                    union iwreq_data *wrqu, char *extra, char *subcmd)
5572 {
5573
5574         int ret = 0;
5575         _adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
5576         u8 peerMAC[ETH_ALEN] = { 0x00 };
5577         struct mlme_priv *pmlmepriv = &padapter->mlmepriv;
5578         _irqL irqL;
5579         _list *plist, *phead;
5580         _queue *queue = &(pmlmepriv->scanned_queue);
5581         struct wlan_network *pnetwork = NULL;
5582         u8 blnMatch = 0;
5583         u8 dev_name[WPS_MAX_DEVICE_NAME_LEN] = { 0x00 };
5584         uint dev_len = 0;
5585         u8 dev_name_str[P2P_PRIVATE_IOCTL_SET_LEN] = { 0x00 };
5586
5587         //      Commented by Albert 20121225
5588         //      The input data is the MAC address which the application wants to know its device name.
5589         //      Such user interface could show peer device's device name instead of ssid.
5590         //      Format: iwpriv wlanx p2p_get2 devN=00:E0:4C:00:00:05
5591
5592         DBG_871X("[%s] data = %s\n", __FUNCTION__, subcmd);
5593
5594         macstr2num(peerMAC, subcmd);
5595
5596         _enter_critical_bh(&(pmlmepriv->scanned_queue.lock), &irqL);
5597
5598         phead = get_list_head(queue);
5599         plist = get_next(phead);
5600
5601         while (1)
5602         {
5603                 if (rtw_end_of_queue_search(phead, plist) == _TRUE) break;
5604
5605                 pnetwork = LIST_CONTAINOR(plist, struct wlan_network, list);
5606                 if (_rtw_memcmp(pnetwork->network.MacAddress, peerMAC, ETH_ALEN))
5607                 {
5608                         u8 *wpsie;
5609                         uint    wpsie_len = 0;
5610
5611                         //      The mac address is matched.
5612
5613                         if ( (wpsie=rtw_get_wps_ie_from_scan_queue( &pnetwork->network.IEs[0], pnetwork->network.IELength, NULL, &wpsie_len, pnetwork->network.Reserved[0])) )
5614                         {
5615                                 rtw_get_wps_attr_content(wpsie, wpsie_len, WPS_ATTR_DEVICE_NAME, dev_name, &dev_len);
5616                                 if (dev_len)
5617                                 {
5618                                         sprintf(dev_name_str, "\n\nN=%s", dev_name);
5619                                         blnMatch = 1;
5620                                 }
5621                         }
5622                         break;
5623                 }
5624
5625                 plist = get_next(plist);
5626
5627         }
5628
5629         _exit_critical_bh(&(pmlmepriv->scanned_queue.lock), &irqL);
5630
5631         if (!blnMatch)
5632         {
5633                 sprintf(dev_name_str, "\n\nN=0000");
5634         }
5635
5636         wrqu->data.length = strlen(dev_name_str);
5637         _rtw_memcpy(extra, dev_name_str, wrqu->data.length);
5638
5639         return ret;
5640
5641 }
5642
5643 static int rtw_p2p_get_invitation_procedure(struct net_device *dev,
5644                                                                                         struct iw_request_info *info,
5645                                                                                         union iwreq_data *wrqu, char *extra, char *subcmd)
5646 {
5647
5648         int ret = 0;
5649         _adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
5650         u8 peerMAC[ETH_ALEN] = { 0x00 };
5651         struct mlme_priv *pmlmepriv = &padapter->mlmepriv;
5652         _irqL irqL;
5653         _list *plist, *phead;
5654         _queue *queue   = &(pmlmepriv->scanned_queue);
5655         struct wlan_network *pnetwork = NULL;
5656         u8 blnMatch = 0;
5657         u8 *p2pie;
5658         uint p2pielen = 0, attr_contentlen = 0;
5659         u8 attr_content[2] = { 0x00 };
5660         u8 inv_proc_str[P2P_PRIVATE_IOCTL_SET_LEN] = { 0x00 };
5661
5662         //      Commented by Ouden 20121226
5663         //      The application wants to know P2P initation procedure is support or not.
5664         //      Format: iwpriv wlanx p2p_get2 InvProc=00:E0:4C:00:00:05
5665
5666         DBG_871X("[%s] data = %s\n", __FUNCTION__, subcmd);
5667
5668         macstr2num(peerMAC, subcmd);
5669
5670         _enter_critical_bh(&(pmlmepriv->scanned_queue.lock), &irqL);
5671
5672         phead = get_list_head(queue);
5673         plist = get_next(phead);
5674
5675         while (1)
5676         {
5677                 if (rtw_end_of_queue_search(phead, plist) == _TRUE) break;
5678
5679                 pnetwork = LIST_CONTAINOR(plist, struct wlan_network, list);
5680                 if (_rtw_memcmp(pnetwork->network.MacAddress, peerMAC, ETH_ALEN))
5681                 {
5682                         //      Commented by Albert 20121226
5683                         //      Match the device address located in the P2P IE
5684                         //      This is for the case that the P2P device address is not the same as the P2P interface address.
5685
5686                         p2pie = rtw_bss_ex_get_p2p_ie(&pnetwork->network, NULL, &p2pielen);
5687                         if (p2pie) {
5688                                 while (p2pie)
5689                                 {
5690                                         //_rtw_memset( attr_content, 0x00, 2);
5691                                         if (rtw_get_p2p_attr_content(p2pie, p2pielen, P2P_ATTR_CAPABILITY, attr_content, &attr_contentlen))
5692                                         {
5693                                                 //      Handle the P2P capability attribute
5694                                                 blnMatch = 1;
5695                                                 break;
5696
5697                                         }
5698
5699                                         //Get the next P2P IE
5700                                         p2pie = rtw_get_p2p_ie(p2pie + p2pielen, BSS_EX_TLV_IES_LEN(&pnetwork->network) - (p2pie + p2pielen - BSS_EX_TLV_IES(&pnetwork->network)), NULL, &p2pielen);
5701                                 }
5702                         }
5703                 }
5704
5705                 plist = get_next(plist);
5706
5707         }
5708
5709         _exit_critical_bh(&(pmlmepriv->scanned_queue.lock), &irqL);
5710
5711         if (!blnMatch)
5712         {
5713                 sprintf(inv_proc_str, "\nIP=-1");
5714         } else
5715         {
5716                 if ((attr_content[0] & 0x20) == 0x20)
5717                         sprintf(inv_proc_str, "\nIP=1");
5718                 else
5719                         sprintf(inv_proc_str, "\nIP=0");
5720         }
5721
5722         wrqu->data.length = strlen(inv_proc_str);
5723         _rtw_memcpy(extra, inv_proc_str, wrqu->data.length);
5724
5725         return ret;
5726
5727 }
5728
5729 static int rtw_p2p_connect(struct net_device *dev,
5730                                struct iw_request_info *info,
5731                                union iwreq_data *wrqu, char *extra)
5732 {
5733
5734         int ret = 0;
5735         _adapter                                *padapter = (_adapter *)rtw_netdev_priv(dev);
5736         struct wifidirect_info  *pwdinfo = &( padapter->wdinfo );
5737         u8                                      peerMAC[ ETH_ALEN ] = { 0x00 };
5738         int                                     jj,kk;
5739         u8                                      peerMACStr[ ETH_ALEN * 2 ] = { 0x00 };
5740         struct mlme_priv                *pmlmepriv = &padapter->mlmepriv;
5741         _irqL                           irqL;
5742         _list                                   *plist, *phead;
5743         _queue                          *queue  = &(pmlmepriv->scanned_queue);
5744         struct  wlan_network    *pnetwork = NULL;
5745         uint                                    uintPeerChannel = 0;
5746 #ifdef CONFIG_CONCURRENT_MODE
5747         _adapter                                *pbuddy_adapter = padapter->pbuddy_adapter;
5748         struct mlme_priv                *pbuddy_mlmepriv = &pbuddy_adapter->mlmepriv;
5749         struct mlme_ext_priv    *pbuddy_mlmeext = &pbuddy_adapter->mlmeextpriv;
5750 #endif // CONFIG_CONCURRENT_MODE
5751
5752         //      Commented by Albert 20110304
5753         //      The input data contains two informations.
5754         //      1. First information is the MAC address which wants to formate with
5755         //      2. Second information is the WPS PINCode or "pbc" string for push button method
5756         //      Format: 00:E0:4C:00:00:05
5757         //      Format: 00:E0:4C:00:00:05
5758
5759         DBG_871X( "[%s] data = %s\n", __FUNCTION__, extra );
5760
5761         if ( pwdinfo->p2p_state == P2P_STATE_NONE )
5762         {
5763                 DBG_871X( "[%s] WiFi Direct is disable!\n", __FUNCTION__ );
5764                 return ret;
5765         }
5766
5767 #ifdef CONFIG_INTEL_WIDI
5768         if (check_fwstate(pmlmepriv, _FW_UNDER_SURVEY) == _TRUE) {
5769                 DBG_871X( "[%s] WiFi is under survey!\n", __FUNCTION__ );
5770                 return ret;
5771         }
5772 #endif //CONFIG_INTEL_WIDI
5773
5774         if ( pwdinfo->ui_got_wps_info == P2P_NO_WPSINFO )
5775         {
5776                 return -1;
5777         }
5778
5779         for( jj = 0, kk = 0; jj < ETH_ALEN; jj++, kk += 3 )
5780         {
5781                 peerMAC[ jj ] = key_2char2num( extra[kk], extra[kk+ 1] );
5782         }
5783
5784         _enter_critical_bh(&(pmlmepriv->scanned_queue.lock), &irqL);
5785
5786         phead = get_list_head(queue);
5787         plist = get_next(phead);
5788
5789         while(1)
5790         {
5791                 if (rtw_end_of_queue_search(phead,plist)== _TRUE)
5792                         break;
5793
5794                 pnetwork = LIST_CONTAINOR(plist, struct wlan_network, list);
5795                 if ( _rtw_memcmp( pnetwork->network.MacAddress, peerMAC, ETH_ALEN ) )
5796                 {
5797                         if (pnetwork->network.Configuration.DSConfig != 0)
5798                                 uintPeerChannel = pnetwork->network.Configuration.DSConfig;
5799                         else if (pwdinfo->nego_req_info.peer_ch != 0)
5800                                 uintPeerChannel = pnetwork->network.Configuration.DSConfig = pwdinfo->nego_req_info.peer_ch;
5801                         else{
5802                                 /* Unexpected case */
5803                                 uintPeerChannel = 0;
5804                                 DBG_871X("%s  uintPeerChannel = 0\n", __func__);
5805                         }
5806                         break;
5807                 }
5808
5809                 plist = get_next(plist);
5810
5811         }
5812
5813         _exit_critical_bh(&(pmlmepriv->scanned_queue.lock), &irqL);
5814
5815         if ( uintPeerChannel )
5816         {
5817 #ifdef CONFIG_CONCURRENT_MODE
5818                 if ( check_fwstate( pbuddy_mlmepriv, _FW_LINKED ) )
5819                 {
5820                         _cancel_timer_ex( &pwdinfo->ap_p2p_switch_timer );
5821                 }
5822 #endif // CONFIG_CONCURRENT_MODE
5823
5824                 _rtw_memset( &pwdinfo->nego_req_info, 0x00, sizeof( struct tx_nego_req_info ) );
5825                 _rtw_memset( &pwdinfo->groupid_info, 0x00, sizeof( struct group_id_info ) );
5826
5827                 pwdinfo->nego_req_info.peer_channel_num[ 0 ] = uintPeerChannel;
5828                 _rtw_memcpy( pwdinfo->nego_req_info.peerDevAddr, pnetwork->network.MacAddress, ETH_ALEN );
5829                 pwdinfo->nego_req_info.benable = _TRUE;
5830
5831                 _cancel_timer_ex( &pwdinfo->restore_p2p_state_timer );
5832                 if ( rtw_p2p_state(pwdinfo) != P2P_STATE_GONEGO_OK )
5833                 {
5834                         //      Restore to the listen state if the current p2p state is not nego OK
5835                         rtw_p2p_set_state(pwdinfo, P2P_STATE_LISTEN );
5836                 }
5837
5838                 rtw_p2p_set_pre_state(pwdinfo, rtw_p2p_state(pwdinfo));
5839                 rtw_p2p_set_state(pwdinfo, P2P_STATE_GONEGO_ING);
5840
5841 #ifdef CONFIG_CONCURRENT_MODE
5842                 if ( check_fwstate( pbuddy_mlmepriv, _FW_LINKED ) )
5843                 {
5844                         //      Have to enter the power saving with the AP
5845                         set_channel_bwmode(padapter, pbuddy_mlmeext->cur_channel, pbuddy_mlmeext->cur_ch_offset, pbuddy_mlmeext->cur_bwmode);
5846
5847                         issue_nulldata(pbuddy_adapter, NULL, 1, 3, 500);
5848                 }
5849 #endif // CONFIG_CONCURRENT_MODE
5850
5851                 DBG_871X( "[%s] Start PreTx Procedure!\n", __FUNCTION__ );
5852                 _set_timer( &pwdinfo->pre_tx_scan_timer, P2P_TX_PRESCAN_TIMEOUT );
5853 #ifdef CONFIG_CONCURRENT_MODE
5854                 if ( check_fwstate( pbuddy_mlmepriv, _FW_LINKED ) )
5855                 {
5856                         _set_timer( &pwdinfo->restore_p2p_state_timer, P2P_CONCURRENT_GO_NEGO_TIMEOUT );
5857                 }
5858                 else
5859                 {
5860                         _set_timer( &pwdinfo->restore_p2p_state_timer, P2P_GO_NEGO_TIMEOUT );
5861                 }
5862 #else
5863                 _set_timer( &pwdinfo->restore_p2p_state_timer, P2P_GO_NEGO_TIMEOUT );
5864 #endif // CONFIG_CONCURRENT_MODE
5865
5866         }
5867         else
5868         {
5869                 DBG_871X( "[%s] Not Found in Scanning Queue~\n", __FUNCTION__ );
5870 #ifdef CONFIG_INTEL_WIDI
5871                 _cancel_timer_ex( &pwdinfo->restore_p2p_state_timer );
5872                 rtw_p2p_set_state(pwdinfo, P2P_STATE_FIND_PHASE_SEARCH);
5873                 rtw_p2p_findphase_ex_set(pwdinfo, P2P_FINDPHASE_EX_NONE);
5874                 rtw_free_network_queue(padapter, _TRUE);
5875                 /**
5876                  * For WiDi, if we can't find candidate device in scanning queue,
5877                  * driver will do scanning itself
5878                  */
5879                 _enter_critical_bh(&pmlmepriv->lock, &irqL);
5880                 rtw_sitesurvey_cmd(padapter, NULL, 0, NULL, 0);
5881                 _exit_critical_bh(&pmlmepriv->lock, &irqL);
5882 #endif //CONFIG_INTEL_WIDI
5883                 ret = -1;
5884         }
5885 exit:
5886         return ret;
5887 }
5888
5889 static int rtw_p2p_invite_req(struct net_device *dev,
5890                                struct iw_request_info *info,
5891                                union iwreq_data *wrqu, char *extra)
5892 {
5893
5894         int ret = 0;
5895         _adapter                                        *padapter = (_adapter *)rtw_netdev_priv(dev);
5896         struct iw_point                         *pdata = &wrqu->data;
5897         struct wifidirect_info          *pwdinfo = &( padapter->wdinfo );
5898         int                                             jj,kk;
5899         u8                                              peerMACStr[ ETH_ALEN * 2 ] = { 0x00 };
5900         struct mlme_priv                        *pmlmepriv = &padapter->mlmepriv;
5901         _list                                           *plist, *phead;
5902         _queue                                  *queue  = &(pmlmepriv->scanned_queue);
5903         struct  wlan_network            *pnetwork = NULL;
5904         uint                                            uintPeerChannel = 0;
5905         u8                                              attr_content[50] = { 0x00 }, _status = 0;
5906         u8                                              *p2pie;
5907         uint                                            p2pielen = 0, attr_contentlen = 0;
5908         _irqL                                   irqL;
5909         struct tx_invite_req_info*      pinvite_req_info = &pwdinfo->invitereq_info;
5910 #ifdef CONFIG_CONCURRENT_MODE
5911         _adapter                                        *pbuddy_adapter = padapter->pbuddy_adapter;
5912         struct mlme_priv                        *pbuddy_mlmepriv = &pbuddy_adapter->mlmepriv;
5913         struct mlme_ext_priv            *pbuddy_mlmeext = &pbuddy_adapter->mlmeextpriv;
5914 #endif // CONFIG_CONCURRENT_MODE
5915
5916         //      Commented by Albert 20120321
5917         //      The input data contains two informations.
5918         //      1. First information is the P2P device address which you want to send to.
5919         //      2. Second information is the group id which combines with GO's mac address, space and GO's ssid.
5920         //      Command line sample: iwpriv wlan0 p2p_set invite="00:11:22:33:44:55 00:E0:4C:00:00:05 DIRECT-xy"
5921         //      Format: 00:11:22:33:44:55 00:E0:4C:00:00:05 DIRECT-xy
5922
5923         DBG_871X( "[%s] data = %s\n", __FUNCTION__, extra );
5924
5925         if ( wrqu->data.length <=  37 )
5926         {
5927                 DBG_871X( "[%s] Wrong format!\n", __FUNCTION__ );
5928                 return ret;
5929         }
5930
5931         if(rtw_p2p_chk_state(pwdinfo, P2P_STATE_NONE))
5932         {
5933                 DBG_871X( "[%s] WiFi Direct is disable!\n", __FUNCTION__ );
5934                 return ret;
5935         }
5936         else
5937         {
5938                 //      Reset the content of struct tx_invite_req_info
5939                 pinvite_req_info->benable = _FALSE;
5940                 _rtw_memset( pinvite_req_info->go_bssid, 0x00, ETH_ALEN );
5941                 _rtw_memset( pinvite_req_info->go_ssid, 0x00, WLAN_SSID_MAXLEN );
5942                 pinvite_req_info->ssidlen = 0x00;
5943                 pinvite_req_info->operating_ch = pwdinfo->operating_channel;
5944                 _rtw_memset( pinvite_req_info->peer_macaddr, 0x00, ETH_ALEN );
5945                 pinvite_req_info->token = 3;
5946         }
5947
5948         for( jj = 0, kk = 0; jj < ETH_ALEN; jj++, kk += 3 )
5949         {
5950                 pinvite_req_info->peer_macaddr[ jj ] = key_2char2num( extra[kk], extra[kk+ 1] );
5951         }
5952
5953         _enter_critical_bh(&(pmlmepriv->scanned_queue.lock), &irqL);
5954
5955         phead = get_list_head(queue);
5956         plist = get_next(phead);
5957
5958         while(1)
5959         {
5960                 if (rtw_end_of_queue_search(phead,plist)== _TRUE)
5961                         break;
5962
5963                 pnetwork = LIST_CONTAINOR(plist, struct wlan_network, list);
5964
5965                 //      Commented by Albert 2011/05/18
5966                 //      Match the device address located in the P2P IE
5967                 //      This is for the case that the P2P device address is not the same as the P2P interface address.
5968
5969                 p2pie = rtw_bss_ex_get_p2p_ie(&pnetwork->network, NULL, &p2pielen);
5970                 if (p2pie) {
5971                         //      The P2P Device ID attribute is included in the Beacon frame.
5972                         //      The P2P Device Info attribute is included in the probe response frame.
5973
5974                         if ( rtw_get_p2p_attr_content( p2pie, p2pielen, P2P_ATTR_DEVICE_ID, attr_content, &attr_contentlen) )
5975                         {
5976                                 //      Handle the P2P Device ID attribute of Beacon first
5977                                 if ( _rtw_memcmp( attr_content, pinvite_req_info->peer_macaddr, ETH_ALEN ) )
5978                                 {
5979                                         uintPeerChannel = pnetwork->network.Configuration.DSConfig;
5980                                         break;
5981                                 }
5982                         }
5983                         else if ( rtw_get_p2p_attr_content( p2pie, p2pielen, P2P_ATTR_DEVICE_INFO, attr_content, &attr_contentlen) )
5984                         {
5985                                 //      Handle the P2P Device Info attribute of probe response
5986                                 if ( _rtw_memcmp( attr_content, pinvite_req_info->peer_macaddr, ETH_ALEN ) )
5987                                 {
5988                                         uintPeerChannel = pnetwork->network.Configuration.DSConfig;
5989                                         break;
5990                                 }
5991                         }
5992
5993                 }
5994
5995                 plist = get_next(plist);
5996
5997         }
5998
5999         _exit_critical_bh(&(pmlmepriv->scanned_queue.lock), &irqL);
6000
6001 #ifdef CONFIG_WFD
6002         if (hal_chk_wl_func(padapter, WL_FUNC_MIRACAST) && uintPeerChannel) {
6003                 struct wifi_display_info *pwfd_info = pwdinfo->wfd_info;
6004                 u8 *wfd_ie;
6005                 uint wfd_ielen = 0;
6006
6007                 wfd_ie = rtw_bss_ex_get_wfd_ie(&pnetwork->network, NULL, &wfd_ielen);
6008                 if (wfd_ie) {
6009                         u8 *wfd_devinfo;
6010                         uint wfd_devlen;
6011
6012                         DBG_871X( "[%s] Found WFD IE!\n", __FUNCTION__ );
6013                         wfd_devinfo = rtw_get_wfd_attr_content(wfd_ie, wfd_ielen, WFD_ATTR_DEVICE_INFO, NULL, &wfd_devlen);
6014                         if (wfd_devinfo) {
6015                                 u16     wfd_devinfo_field = 0;
6016
6017                                 //      Commented by Albert 20120319
6018                                 //      The first two bytes are the WFD device information field of WFD device information subelement.
6019                                 //      In big endian format.
6020                                 wfd_devinfo_field = RTW_GET_BE16(wfd_devinfo);
6021                                 if ( wfd_devinfo_field & WFD_DEVINFO_SESSION_AVAIL )
6022                                 {
6023                                         pwfd_info->peer_session_avail = _TRUE;
6024                                 }
6025                                 else
6026                                 {
6027                                         pwfd_info->peer_session_avail = _FALSE;
6028                                 }
6029                         }
6030                 }
6031
6032                 if ( _FALSE == pwfd_info->peer_session_avail )
6033                 {
6034                         DBG_871X( "[%s] WFD Session not avaiable!\n", __FUNCTION__ );
6035                         goto exit;
6036                 }
6037         }
6038 #endif /* CONFIG_WFD */
6039
6040         if ( uintPeerChannel )
6041         {
6042 #ifdef CONFIG_CONCURRENT_MODE
6043                 if ( check_fwstate( pbuddy_mlmepriv, _FW_LINKED ) )
6044                 {
6045                         _cancel_timer_ex( &pwdinfo->ap_p2p_switch_timer );
6046                 }
6047 #endif // CONFIG_CONCURRENT_MODE
6048
6049                 //      Store the GO's bssid
6050                 for( jj = 0, kk = 18; jj < ETH_ALEN; jj++, kk += 3 )
6051                 {
6052                         pinvite_req_info->go_bssid[ jj ] = key_2char2num( extra[kk], extra[kk+ 1] );
6053                 }
6054
6055                 //      Store the GO's ssid
6056                 pinvite_req_info->ssidlen = wrqu->data.length - 36;
6057                 _rtw_memcpy( pinvite_req_info->go_ssid, &extra[ 36 ], (u32) pinvite_req_info->ssidlen );
6058                 pinvite_req_info->benable = _TRUE;
6059                 pinvite_req_info->peer_ch = uintPeerChannel;
6060
6061                 rtw_p2p_set_pre_state(pwdinfo, rtw_p2p_state(pwdinfo));
6062                 rtw_p2p_set_state(pwdinfo, P2P_STATE_TX_INVITE_REQ);
6063
6064 #ifdef CONFIG_CONCURRENT_MODE
6065                 if ( check_fwstate( pbuddy_mlmepriv, _FW_LINKED ) )
6066                 {
6067                         //      Have to enter the power saving with the AP
6068                         set_channel_bwmode(padapter, pbuddy_mlmeext->cur_channel, pbuddy_mlmeext->cur_ch_offset, pbuddy_mlmeext->cur_bwmode);
6069
6070                         issue_nulldata(pbuddy_adapter, NULL, 1, 3, 500);
6071                 }
6072                 else
6073                 {
6074                         set_channel_bwmode(padapter, uintPeerChannel, HAL_PRIME_CHNL_OFFSET_DONT_CARE, CHANNEL_WIDTH_20);
6075                 }
6076 #else
6077                 set_channel_bwmode(padapter, uintPeerChannel, HAL_PRIME_CHNL_OFFSET_DONT_CARE, CHANNEL_WIDTH_20);
6078 #endif
6079
6080                 _set_timer( &pwdinfo->pre_tx_scan_timer, P2P_TX_PRESCAN_TIMEOUT );
6081
6082 #ifdef CONFIG_CONCURRENT_MODE
6083                 if ( check_fwstate( pbuddy_mlmepriv, _FW_LINKED ) )
6084                 {
6085                         _set_timer( &pwdinfo->restore_p2p_state_timer, P2P_CONCURRENT_INVITE_TIMEOUT );
6086                 }
6087                 else
6088                 {
6089                         _set_timer( &pwdinfo->restore_p2p_state_timer, P2P_INVITE_TIMEOUT );
6090                 }
6091 #else
6092                 _set_timer( &pwdinfo->restore_p2p_state_timer, P2P_INVITE_TIMEOUT );
6093 #endif // CONFIG_CONCURRENT_MODE
6094
6095
6096         }
6097         else
6098         {
6099                 DBG_871X( "[%s] NOT Found in the Scanning Queue!\n", __FUNCTION__ );
6100         }
6101 exit:
6102
6103         return ret;
6104
6105 }
6106
6107 static int rtw_p2p_set_persistent(struct net_device *dev,
6108                                struct iw_request_info *info,
6109                                union iwreq_data *wrqu, char *extra)
6110 {
6111
6112         int ret = 0;
6113         _adapter                                        *padapter = (_adapter *)rtw_netdev_priv(dev);
6114         struct iw_point                         *pdata = &wrqu->data;
6115         struct wifidirect_info          *pwdinfo = &( padapter->wdinfo );
6116         int                                             jj,kk;
6117         u8                                              peerMACStr[ ETH_ALEN * 2 ] = { 0x00 };
6118         struct mlme_priv                        *pmlmepriv = &padapter->mlmepriv;
6119         _list                                           *plist, *phead;
6120         _queue                                  *queue  = &(pmlmepriv->scanned_queue);
6121         struct  wlan_network            *pnetwork = NULL;
6122         uint                                            uintPeerChannel = 0;
6123         u8                                              attr_content[50] = { 0x00 }, _status = 0;
6124         u8                                              *p2pie;
6125         uint                                            p2pielen = 0, attr_contentlen = 0;
6126         _irqL                                   irqL;
6127         struct tx_invite_req_info*      pinvite_req_info = &pwdinfo->invitereq_info;
6128 #ifdef CONFIG_CONCURRENT_MODE
6129         _adapter                                        *pbuddy_adapter = padapter->pbuddy_adapter;
6130         struct mlme_priv                        *pbuddy_mlmepriv = &pbuddy_adapter->mlmepriv;
6131         struct mlme_ext_priv            *pbuddy_mlmeext = &pbuddy_adapter->mlmeextpriv;
6132 #endif // CONFIG_CONCURRENT_MODE
6133
6134         //      Commented by Albert 20120328
6135         //      The input data is 0 or 1
6136         //      0: disable persistent group functionality
6137         //      1: enable persistent group founctionality
6138
6139         DBG_871X( "[%s] data = %s\n", __FUNCTION__, extra );
6140
6141         if(rtw_p2p_chk_state(pwdinfo, P2P_STATE_NONE))
6142         {
6143                 DBG_871X( "[%s] WiFi Direct is disable!\n", __FUNCTION__ );
6144                 return ret;
6145         }
6146         else
6147         {
6148                 if ( extra[ 0 ] == '0' )        //      Disable the persistent group function.
6149                 {
6150                         pwdinfo->persistent_supported = _FALSE;
6151                 }
6152                 else if ( extra[ 0 ] == '1' )   //      Enable the persistent group function.
6153                 {
6154                         pwdinfo->persistent_supported = _TRUE;
6155                 }
6156                 else
6157                 {
6158                         pwdinfo->persistent_supported = _FALSE;
6159                 }
6160         }
6161         printk( "[%s] persistent_supported = %d\n", __FUNCTION__, pwdinfo->persistent_supported );
6162
6163 exit:
6164
6165         return ret;
6166
6167 }
6168
6169 static int hexstr2bin(const char *hex, u8 *buf, size_t len)
6170 {
6171         size_t i;
6172         int a;
6173         const char *ipos = hex;
6174         u8 *opos = buf;
6175
6176         for (i = 0; i < len; i++) {
6177                 a = hex2byte_i(ipos);
6178                 if (a < 0)
6179                         return -1;
6180                 *opos++ = a;
6181                 ipos += 2;
6182         }
6183         return 0;
6184 }
6185
6186 static int uuid_str2bin(const char *str, u8 *bin)
6187 {
6188         const char *pos;
6189         u8 *opos;
6190
6191         pos = str;
6192         opos = bin;
6193
6194         if (hexstr2bin(pos, opos, 4))
6195                 return -1;
6196         pos += 8;
6197         opos += 4;
6198
6199         if (*pos++ != '-' || hexstr2bin(pos, opos, 2))
6200                 return -1;
6201         pos += 4;
6202         opos += 2;
6203
6204         if (*pos++ != '-' || hexstr2bin(pos, opos, 2))
6205                 return -1;
6206         pos += 4;
6207         opos += 2;
6208
6209         if (*pos++ != '-' || hexstr2bin(pos, opos, 2))
6210                 return -1;
6211         pos += 4;
6212         opos += 2;
6213
6214         if (*pos++ != '-' || hexstr2bin(pos, opos, 6))
6215                 return -1;
6216
6217         return 0;
6218 }
6219
6220 static int rtw_p2p_set_wps_uuid(struct net_device *dev,
6221         struct iw_request_info *info,
6222         union iwreq_data *wrqu, char *extra)
6223 {
6224
6225         int ret = 0;
6226         _adapter                                *padapter = (_adapter *)rtw_netdev_priv(dev);
6227         struct wifidirect_info                  *pwdinfo = &(padapter->wdinfo);
6228
6229         DBG_871X("[%s] data = %s\n", __FUNCTION__, extra);
6230
6231         if ((36 == strlen(extra)) && (uuid_str2bin(extra, pwdinfo->uuid) == 0))
6232         {
6233                 pwdinfo->external_uuid = 1;
6234         } else {
6235                 pwdinfo->external_uuid = 0;
6236                 ret = -EINVAL;
6237         }
6238
6239         return ret;
6240
6241 }
6242 #ifdef CONFIG_WFD
6243 static int rtw_p2p_set_pc(struct net_device *dev,
6244                                struct iw_request_info *info,
6245                                union iwreq_data *wrqu, char *extra)
6246 {
6247
6248         int ret = 0;
6249         _adapter                                *padapter = (_adapter *)rtw_netdev_priv(dev);
6250         struct iw_point                 *pdata = &wrqu->data;
6251         struct wifidirect_info  *pwdinfo = &( padapter->wdinfo );
6252         u8                                      peerMAC[ ETH_ALEN ] = { 0x00 };
6253         int                                     jj,kk;
6254         u8                                      peerMACStr[ ETH_ALEN * 2 ] = { 0x00 };
6255         struct mlme_priv                *pmlmepriv = &padapter->mlmepriv;
6256         _list                                   *plist, *phead;
6257         _queue                          *queue  = &(pmlmepriv->scanned_queue);
6258         struct  wlan_network    *pnetwork = NULL;
6259         u8                                      attr_content[50] = { 0x00 }, _status = 0;
6260         u8 *p2pie;
6261         uint                                    p2pielen = 0, attr_contentlen = 0;
6262         _irqL                           irqL;
6263         uint                                    uintPeerChannel = 0;
6264 #ifdef CONFIG_CONCURRENT_MODE
6265         _adapter                                *pbuddy_adapter = padapter->pbuddy_adapter;
6266         struct mlme_ext_priv    *pbuddy_mlmeext = &pbuddy_adapter->mlmeextpriv;
6267 #endif // CONFIG_CONCURRENT_MODE
6268
6269         struct wifi_display_info*       pwfd_info = pwdinfo->wfd_info;
6270
6271         //      Commented by Albert 20120512
6272         //      1. Input information is the MAC address which wants to know the Preferred Connection bit (PC bit)
6273         //      Format: 00:E0:4C:00:00:05
6274
6275         DBG_871X( "[%s] data = %s\n", __FUNCTION__, extra );
6276
6277         if(rtw_p2p_chk_state(pwdinfo, P2P_STATE_NONE))
6278         {
6279                 DBG_871X( "[%s] WiFi Direct is disable!\n", __FUNCTION__ );
6280                 return ret;
6281         }
6282
6283         for( jj = 0, kk = 0; jj < ETH_ALEN; jj++, kk += 3 )
6284         {
6285                 peerMAC[ jj ] = key_2char2num( extra[kk], extra[kk+ 1] );
6286         }
6287
6288         _enter_critical_bh(&(pmlmepriv->scanned_queue.lock), &irqL);
6289
6290         phead = get_list_head(queue);
6291         plist = get_next(phead);
6292
6293         while(1)
6294         {
6295                 if (rtw_end_of_queue_search(phead,plist)== _TRUE)
6296                         break;
6297
6298                 pnetwork = LIST_CONTAINOR(plist, struct wlan_network, list);
6299
6300                 //      Commented by Albert 2011/05/18
6301                 //      Match the device address located in the P2P IE
6302                 //      This is for the case that the P2P device address is not the same as the P2P interface address.
6303
6304                 p2pie = rtw_bss_ex_get_p2p_ie(&pnetwork->network, NULL, &p2pielen);
6305                 if (p2pie) {
6306                         //      The P2P Device ID attribute is included in the Beacon frame.
6307                         //      The P2P Device Info attribute is included in the probe response frame.
6308                         printk( "[%s] Got P2P IE\n", __FUNCTION__ );
6309                         if ( rtw_get_p2p_attr_content( p2pie, p2pielen, P2P_ATTR_DEVICE_ID, attr_content, &attr_contentlen) )
6310                         {
6311                                 //      Handle the P2P Device ID attribute of Beacon first
6312                                 printk( "[%s] P2P_ATTR_DEVICE_ID \n", __FUNCTION__ );
6313                                 if ( _rtw_memcmp( attr_content, peerMAC, ETH_ALEN ) )
6314                                 {
6315                                         uintPeerChannel = pnetwork->network.Configuration.DSConfig;
6316                                         break;
6317                                 }
6318                         }
6319                         else if ( rtw_get_p2p_attr_content( p2pie, p2pielen, P2P_ATTR_DEVICE_INFO, attr_content, &attr_contentlen) )
6320                         {
6321                                 //      Handle the P2P Device Info attribute of probe response
6322                                 printk( "[%s] P2P_ATTR_DEVICE_INFO \n", __FUNCTION__ );
6323                                 if ( _rtw_memcmp( attr_content, peerMAC, ETH_ALEN ) )
6324                                 {
6325                                         uintPeerChannel = pnetwork->network.Configuration.DSConfig;
6326                                         break;
6327                                 }
6328                         }
6329
6330                 }
6331
6332                 plist = get_next(plist);
6333
6334         }
6335
6336         _exit_critical_bh(&(pmlmepriv->scanned_queue.lock), &irqL);
6337         printk( "[%s] channel = %d\n", __FUNCTION__, uintPeerChannel );
6338
6339         if ( uintPeerChannel )
6340         {
6341                 u8 *wfd_ie;
6342                 uint wfd_ielen = 0;
6343
6344                 wfd_ie = rtw_bss_ex_get_wfd_ie(&pnetwork->network, NULL, &wfd_ielen);
6345                 if (wfd_ie) {
6346                         u8 *wfd_devinfo;
6347                         uint wfd_devlen;
6348
6349                         DBG_871X( "[%s] Found WFD IE!\n", __FUNCTION__ );
6350                         wfd_devinfo = rtw_get_wfd_attr_content(wfd_ie, wfd_ielen, WFD_ATTR_DEVICE_INFO, NULL, &wfd_devlen);
6351                         if (wfd_devinfo) {
6352                                 u16     wfd_devinfo_field = 0;
6353
6354                                 //      Commented by Albert 20120319
6355                                 //      The first two bytes are the WFD device information field of WFD device information subelement.
6356                                 //      In big endian format.
6357                                 wfd_devinfo_field = RTW_GET_BE16(wfd_devinfo);
6358                                 if ( wfd_devinfo_field & WFD_DEVINFO_PC_TDLS )
6359                                 {
6360                                         pwfd_info->wfd_pc = _TRUE;
6361                                 }
6362                                 else
6363                                 {
6364                                         pwfd_info->wfd_pc = _FALSE;
6365                                 }
6366                         }
6367                 }
6368         }
6369         else
6370         {
6371                 DBG_871X( "[%s] NOT Found in the Scanning Queue!\n", __FUNCTION__ );
6372         }
6373
6374 exit:
6375
6376         return ret;
6377
6378 }
6379
6380 static int rtw_p2p_set_wfd_device_type(struct net_device *dev,
6381                                struct iw_request_info *info,
6382                                union iwreq_data *wrqu, char *extra)
6383 {
6384
6385         int ret = 0;
6386         _adapter                                        *padapter = (_adapter *)rtw_netdev_priv(dev);
6387         struct iw_point                         *pdata = &wrqu->data;
6388         struct wifidirect_info          *pwdinfo = &( padapter->wdinfo );
6389         struct wifi_display_info                *pwfd_info = pwdinfo->wfd_info;
6390
6391         //      Commented by Albert 20120328
6392         //      The input data is 0 or 1
6393         //      0: specify to Miracast source device
6394         //      1 or others: specify to Miracast sink device (display device)
6395
6396         DBG_871X( "[%s] data = %s\n", __FUNCTION__, extra );
6397
6398         if ( extra[ 0 ] == '0' )        //      Set to Miracast source device.
6399         {
6400                 pwfd_info->wfd_device_type = WFD_DEVINFO_SOURCE;
6401         }
6402         else                                    //      Set to Miracast sink device.
6403         {
6404                 pwfd_info->wfd_device_type = WFD_DEVINFO_PSINK;
6405         }
6406
6407 exit:
6408
6409         return ret;
6410
6411 }
6412
6413 static int rtw_p2p_set_wfd_enable(struct net_device *dev,
6414                                struct iw_request_info *info,
6415                                union iwreq_data *wrqu, char *extra)
6416 {
6417 //      Commented by Kurt 20121206
6418 //      This function is used to set wfd enabled
6419
6420         int ret = 0;
6421         _adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
6422         struct wifidirect_info *pwdinfo= &(padapter->wdinfo);
6423
6424         if (*extra == '0')
6425                 rtw_wfd_enable(padapter, 0);
6426         else if (*extra == '1')
6427                 rtw_wfd_enable(padapter, 1);
6428
6429         DBG_871X( "[%s] wfd_enable = %d\n", __FUNCTION__, pwdinfo->wfd_info->wfd_enable );
6430
6431         return ret;
6432
6433 }
6434
6435 static int rtw_p2p_set_driver_iface(struct net_device *dev,
6436                                struct iw_request_info *info,
6437                                union iwreq_data *wrqu, char *extra)
6438 {
6439 //      Commented by Kurt 20121206
6440 //      This function is used to set driver iface is WEXT or CFG80211
6441         int ret = 0;
6442         _adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
6443         struct wifidirect_info *pwdinfo= &(padapter->wdinfo);
6444
6445         if(*extra == '1' )
6446         {
6447                 pwdinfo->driver_interface = DRIVER_WEXT;
6448                 DBG_871X( "[%s] driver_interface = WEXT\n", __FUNCTION__);
6449         }
6450         else if(*extra == '2')
6451         {
6452                 pwdinfo->driver_interface = DRIVER_CFG80211;
6453                 DBG_871X( "[%s] driver_interface = CFG80211\n", __FUNCTION__);
6454         }
6455
6456         return ret;
6457
6458 }
6459
6460 //      To set the WFD session available to enable or disable
6461 static int rtw_p2p_set_sa(struct net_device *dev,
6462                                struct iw_request_info *info,
6463                                union iwreq_data *wrqu, char *extra)
6464 {
6465
6466         int ret = 0;
6467         _adapter                                        *padapter = (_adapter *)rtw_netdev_priv(dev);
6468         struct iw_point                         *pdata = &wrqu->data;
6469         struct wifidirect_info          *pwdinfo = &( padapter->wdinfo );
6470         struct wifi_display_info                *pwfd_info = pwdinfo->wfd_info;
6471
6472         DBG_871X( "[%s] data = %s\n", __FUNCTION__, extra );
6473
6474         if( 0 )
6475         {
6476                 DBG_871X( "[%s] WiFi Direct is disable!\n", __FUNCTION__ );
6477                 return ret;
6478         }
6479         else
6480         {
6481                 if ( extra[ 0 ] == '0' )        //      Disable the session available.
6482                 {
6483                         pwdinfo->session_available = _FALSE;
6484                 }
6485                 else if ( extra[ 0 ] == '1' )   //      Enable the session available.
6486                 {
6487                         pwdinfo->session_available = _TRUE;
6488                 }
6489                 else
6490                 {
6491                         pwdinfo->session_available = _FALSE;
6492                 }
6493         }
6494         printk( "[%s] session available = %d\n", __FUNCTION__, pwdinfo->session_available );
6495
6496 exit:
6497
6498         return ret;
6499
6500 }
6501 #endif /* CONFIG_WFD */
6502
6503 static int rtw_p2p_prov_disc(struct net_device *dev,
6504                                struct iw_request_info *info,
6505                                union iwreq_data *wrqu, char *extra)
6506 {
6507         int ret = 0;
6508         _adapter                                *padapter = (_adapter *)rtw_netdev_priv(dev);
6509         struct wifidirect_info  *pwdinfo = &( padapter->wdinfo );
6510         u8                                      peerMAC[ ETH_ALEN ] = { 0x00 };
6511         int                                     jj,kk;
6512         u8                                      peerMACStr[ ETH_ALEN * 2 ] = { 0x00 };
6513         struct mlme_priv                *pmlmepriv = &padapter->mlmepriv;
6514         _list                                   *plist, *phead;
6515         _queue                          *queue  = &(pmlmepriv->scanned_queue);
6516         struct  wlan_network    *pnetwork = NULL;
6517         uint                                    uintPeerChannel = 0;
6518         u8                                      attr_content[100] = { 0x00 }, _status = 0;
6519         u8 *p2pie;
6520         uint                                    p2pielen = 0, attr_contentlen = 0;
6521         _irqL                           irqL;
6522 #ifdef CONFIG_CONCURRENT_MODE
6523         _adapter                                *pbuddy_adapter = padapter->pbuddy_adapter;
6524         struct mlme_priv                *pbuddy_mlmepriv = &pbuddy_adapter->mlmepriv;
6525         struct mlme_ext_priv    *pbuddy_mlmeext = &pbuddy_adapter->mlmeextpriv;
6526 #endif // CONFIG_CONCURRENT_MODE
6527
6528         //      Commented by Albert 20110301
6529         //      The input data contains two informations.
6530         //      1. First information is the MAC address which wants to issue the provisioning discovery request frame.
6531         //      2. Second information is the WPS configuration method which wants to discovery
6532         //      Format: 00:E0:4C:00:00:05_display
6533         //      Format: 00:E0:4C:00:00:05_keypad
6534         //      Format: 00:E0:4C:00:00:05_pbc
6535         //      Format: 00:E0:4C:00:00:05_label
6536
6537         DBG_871X( "[%s] data = %s\n", __FUNCTION__, extra );
6538
6539         if ( pwdinfo->p2p_state == P2P_STATE_NONE )
6540         {
6541                 DBG_871X( "[%s] WiFi Direct is disable!\n", __FUNCTION__ );
6542                 return ret;
6543         }
6544         else
6545         {
6546 #ifdef CONFIG_INTEL_WIDI
6547                 if (check_fwstate(pmlmepriv, _FW_UNDER_SURVEY) == _TRUE) {
6548                         DBG_871X( "[%s] WiFi is under survey!\n", __FUNCTION__ );
6549                         return ret;
6550                 }
6551 #endif //CONFIG_INTEL_WIDI
6552
6553                 //      Reset the content of struct tx_provdisc_req_info excluded the wps_config_method_request.
6554                 _rtw_memset( pwdinfo->tx_prov_disc_info.peerDevAddr, 0x00, ETH_ALEN );
6555                 _rtw_memset( pwdinfo->tx_prov_disc_info.peerIFAddr, 0x00, ETH_ALEN );
6556                 _rtw_memset( &pwdinfo->tx_prov_disc_info.ssid, 0x00, sizeof( NDIS_802_11_SSID ) );
6557                 pwdinfo->tx_prov_disc_info.peer_channel_num[ 0 ] = 0;
6558                 pwdinfo->tx_prov_disc_info.peer_channel_num[ 1 ] = 0;
6559                 pwdinfo->tx_prov_disc_info.benable = _FALSE;
6560         }
6561
6562         for( jj = 0, kk = 0; jj < ETH_ALEN; jj++, kk += 3 )
6563         {
6564                 peerMAC[ jj ] = key_2char2num( extra[kk], extra[kk+ 1] );
6565         }
6566
6567         if ( _rtw_memcmp( &extra[ 18 ], "display", 7 ) )
6568         {
6569                 pwdinfo->tx_prov_disc_info.wps_config_method_request = WPS_CM_DISPLYA;
6570         }
6571         else if ( _rtw_memcmp( &extra[ 18 ], "keypad", 7 ) )
6572         {
6573                 pwdinfo->tx_prov_disc_info.wps_config_method_request = WPS_CM_KEYPAD;
6574         }
6575         else if ( _rtw_memcmp( &extra[ 18 ], "pbc", 3 ) )
6576         {
6577                 pwdinfo->tx_prov_disc_info.wps_config_method_request = WPS_CM_PUSH_BUTTON;
6578         }
6579         else if ( _rtw_memcmp( &extra[ 18 ], "label", 5 ) )
6580         {
6581                 pwdinfo->tx_prov_disc_info.wps_config_method_request = WPS_CM_LABEL;
6582         }
6583         else
6584         {
6585                 DBG_871X( "[%s] Unknown WPS config methodn", __FUNCTION__ );
6586                 return( ret );
6587         }
6588
6589         _enter_critical_bh(&(pmlmepriv->scanned_queue.lock), &irqL);
6590
6591         phead = get_list_head(queue);
6592         plist = get_next(phead);
6593
6594         while(1)
6595         {
6596                 if (rtw_end_of_queue_search(phead,plist)== _TRUE)
6597                         break;
6598
6599                 if( uintPeerChannel != 0 )
6600                         break;
6601
6602                 pnetwork = LIST_CONTAINOR(plist, struct wlan_network, list);
6603
6604                 //      Commented by Albert 2011/05/18
6605                 //      Match the device address located in the P2P IE
6606                 //      This is for the case that the P2P device address is not the same as the P2P interface address.
6607
6608                 p2pie = rtw_bss_ex_get_p2p_ie(&pnetwork->network, NULL, &p2pielen);
6609                 if (p2pie) {
6610                         while ( p2pie )
6611                         {
6612                                 //      The P2P Device ID attribute is included in the Beacon frame.
6613                                 //      The P2P Device Info attribute is included in the probe response frame.
6614
6615                                 if ( rtw_get_p2p_attr_content( p2pie, p2pielen, P2P_ATTR_DEVICE_ID, attr_content, &attr_contentlen) )
6616                                 {
6617                                         //      Handle the P2P Device ID attribute of Beacon first
6618                                         if ( _rtw_memcmp( attr_content, peerMAC, ETH_ALEN ) )
6619                                         {
6620                                                 uintPeerChannel = pnetwork->network.Configuration.DSConfig;
6621                                                 break;
6622                                         }
6623                                 }
6624                                 else if ( rtw_get_p2p_attr_content( p2pie, p2pielen, P2P_ATTR_DEVICE_INFO, attr_content, &attr_contentlen) )
6625                                 {
6626                                         //      Handle the P2P Device Info attribute of probe response
6627                                         if ( _rtw_memcmp( attr_content, peerMAC, ETH_ALEN ) )
6628                                         {
6629                                                 uintPeerChannel = pnetwork->network.Configuration.DSConfig;
6630                                                 break;
6631                                         }
6632                                 }
6633
6634                                 //Get the next P2P IE
6635                                 p2pie = rtw_get_p2p_ie(p2pie + p2pielen, BSS_EX_TLV_IES_LEN(&pnetwork->network) - (p2pie + p2pielen - BSS_EX_TLV_IES(&pnetwork->network)), NULL, &p2pielen);
6636                         }
6637
6638                 }
6639
6640 #ifdef CONFIG_INTEL_WIDI
6641                 // Some Intel WiDi source may not provide P2P IE,
6642                 // so we could only compare mac addr by 802.11 Source Address
6643                 if( pmlmepriv->widi_state == INTEL_WIDI_STATE_WFD_CONNECTION
6644                         && uintPeerChannel == 0 )
6645                 {
6646                         if ( _rtw_memcmp( pnetwork->network.MacAddress, peerMAC, ETH_ALEN ) )
6647                         {
6648                                 uintPeerChannel = pnetwork->network.Configuration.DSConfig;
6649                                 break;
6650                         }
6651                 }
6652 #endif //CONFIG_INTEL_WIDI
6653
6654                 plist = get_next(plist);
6655
6656         }
6657
6658         _exit_critical_bh(&(pmlmepriv->scanned_queue.lock), &irqL);
6659
6660         if ( uintPeerChannel )
6661         {
6662                 #ifdef CONFIG_WFD
6663                 if (hal_chk_wl_func(padapter, WL_FUNC_MIRACAST)) {
6664                         struct wifi_display_info *pwfd_info = pwdinfo->wfd_info;
6665                         u8 *wfd_ie;
6666                         uint wfd_ielen = 0;
6667
6668                         wfd_ie = rtw_bss_ex_get_wfd_ie(&pnetwork->network, NULL, &wfd_ielen);
6669                         if (wfd_ie) {
6670                                 u8 *wfd_devinfo;
6671                                 uint wfd_devlen;
6672
6673                                 DBG_871X( "[%s] Found WFD IE!\n", __FUNCTION__ );
6674                                 wfd_devinfo = rtw_get_wfd_attr_content(wfd_ie, wfd_ielen, WFD_ATTR_DEVICE_INFO, NULL, &wfd_devlen);
6675                                 if (wfd_devinfo) {
6676                                         u16     wfd_devinfo_field = 0;
6677
6678                                         //      Commented by Albert 20120319
6679                                         //      The first two bytes are the WFD device information field of WFD device information subelement.
6680                                         //      In big endian format.
6681                                         wfd_devinfo_field = RTW_GET_BE16(wfd_devinfo);
6682                                         if ( wfd_devinfo_field & WFD_DEVINFO_SESSION_AVAIL )
6683                                         {
6684                                                 pwfd_info->peer_session_avail = _TRUE;
6685                                         }
6686                                         else
6687                                         {
6688                                                 pwfd_info->peer_session_avail = _FALSE;
6689                                         }
6690                                 }
6691                         }
6692
6693                         if ( _FALSE == pwfd_info->peer_session_avail )
6694                         {
6695                                 DBG_871X( "[%s] WFD Session not avaiable!\n", __FUNCTION__ );
6696                                 goto exit;
6697                         }
6698                 }
6699                 #endif /* CONFIG_WFD */
6700
6701                 DBG_871X( "[%s] peer channel: %d!\n", __FUNCTION__, uintPeerChannel );
6702 #ifdef CONFIG_CONCURRENT_MODE
6703                 if ( check_fwstate( pbuddy_mlmepriv, _FW_LINKED ) )
6704                 {
6705                         _cancel_timer_ex( &pwdinfo->ap_p2p_switch_timer );
6706                 }
6707 #endif // CONFIG_CONCURRENT_MODE
6708                 _rtw_memcpy( pwdinfo->tx_prov_disc_info.peerIFAddr, pnetwork->network.MacAddress, ETH_ALEN );
6709                 _rtw_memcpy( pwdinfo->tx_prov_disc_info.peerDevAddr, peerMAC, ETH_ALEN );
6710                 pwdinfo->tx_prov_disc_info.peer_channel_num[0] = ( u16 ) uintPeerChannel;
6711                 pwdinfo->tx_prov_disc_info.benable = _TRUE;
6712                 rtw_p2p_set_pre_state(pwdinfo, rtw_p2p_state(pwdinfo));
6713                 rtw_p2p_set_state(pwdinfo, P2P_STATE_TX_PROVISION_DIS_REQ);
6714
6715                 if(rtw_p2p_chk_role(pwdinfo, P2P_ROLE_CLIENT))
6716                 {
6717                         _rtw_memcpy( &pwdinfo->tx_prov_disc_info.ssid, &pnetwork->network.Ssid, sizeof( NDIS_802_11_SSID ) );
6718                 }
6719                 else if(rtw_p2p_chk_role(pwdinfo, P2P_ROLE_DEVICE) || rtw_p2p_chk_role(pwdinfo, P2P_ROLE_GO))
6720                 {
6721                         _rtw_memcpy( pwdinfo->tx_prov_disc_info.ssid.Ssid, pwdinfo->p2p_wildcard_ssid, P2P_WILDCARD_SSID_LEN );
6722                         pwdinfo->tx_prov_disc_info.ssid.SsidLength= P2P_WILDCARD_SSID_LEN;
6723                 }
6724
6725 #ifdef CONFIG_CONCURRENT_MODE
6726                 if ( check_fwstate( pbuddy_mlmepriv, _FW_LINKED ) )
6727                 {
6728                         //      Have to enter the power saving with the AP
6729                         set_channel_bwmode(padapter, pbuddy_mlmeext->cur_channel, pbuddy_mlmeext->cur_ch_offset, pbuddy_mlmeext->cur_bwmode);
6730
6731                         issue_nulldata(pbuddy_adapter, NULL, 1, 3, 500);
6732                 }
6733                 else
6734                 {
6735                         set_channel_bwmode(padapter, uintPeerChannel, HAL_PRIME_CHNL_OFFSET_DONT_CARE, CHANNEL_WIDTH_20);
6736                 }
6737 #else
6738                 set_channel_bwmode(padapter, uintPeerChannel, HAL_PRIME_CHNL_OFFSET_DONT_CARE, CHANNEL_WIDTH_20);
6739 #endif
6740
6741                 _set_timer( &pwdinfo->pre_tx_scan_timer, P2P_TX_PRESCAN_TIMEOUT );
6742
6743 #ifdef CONFIG_CONCURRENT_MODE
6744                 if ( check_fwstate( pbuddy_mlmepriv, _FW_LINKED ) )
6745                 {
6746                         _set_timer( &pwdinfo->restore_p2p_state_timer, P2P_CONCURRENT_PROVISION_TIMEOUT );
6747                 }
6748                 else
6749                 {
6750                         _set_timer( &pwdinfo->restore_p2p_state_timer, P2P_PROVISION_TIMEOUT );
6751                 }
6752 #else
6753                 _set_timer( &pwdinfo->restore_p2p_state_timer, P2P_PROVISION_TIMEOUT );
6754 #endif // CONFIG_CONCURRENT_MODE
6755
6756         }
6757         else
6758         {
6759                 DBG_871X( "[%s] NOT Found in the Scanning Queue!\n", __FUNCTION__ );
6760 #ifdef CONFIG_INTEL_WIDI
6761                 _cancel_timer_ex( &pwdinfo->restore_p2p_state_timer );
6762                 rtw_p2p_set_state(pwdinfo, P2P_STATE_FIND_PHASE_SEARCH);
6763                 rtw_p2p_findphase_ex_set(pwdinfo, P2P_FINDPHASE_EX_NONE);
6764                 rtw_free_network_queue(padapter, _TRUE);
6765                 _enter_critical_bh(&pmlmepriv->lock, &irqL);
6766                 rtw_sitesurvey_cmd(padapter, NULL, 0, NULL, 0);
6767                 _exit_critical_bh(&pmlmepriv->lock, &irqL);
6768 #endif //CONFIG_INTEL_WIDI
6769         }
6770 exit:
6771
6772         return ret;
6773
6774 }
6775
6776 //      Added by Albert 20110328
6777 //      This function is used to inform the driver the user had specified the pin code value or pbc
6778 //      to application.
6779
6780 static int rtw_p2p_got_wpsinfo(struct net_device *dev,
6781                                struct iw_request_info *info,
6782                                union iwreq_data *wrqu, char *extra)
6783 {
6784
6785         int ret = 0;
6786         _adapter                                *padapter = (_adapter *)rtw_netdev_priv(dev);
6787         struct wifidirect_info  *pwdinfo = &( padapter->wdinfo );
6788
6789
6790         DBG_871X( "[%s] data = %s\n", __FUNCTION__, extra );
6791         //      Added by Albert 20110328
6792         //      if the input data is P2P_NO_WPSINFO -> reset the wpsinfo
6793         //      if the input data is P2P_GOT_WPSINFO_PEER_DISPLAY_PIN -> the utility just input the PIN code got from the peer P2P device.
6794         //      if the input data is P2P_GOT_WPSINFO_SELF_DISPLAY_PIN -> the utility just got the PIN code from itself.
6795         //      if the input data is P2P_GOT_WPSINFO_PBC -> the utility just determine to use the PBC
6796
6797         if ( *extra == '0' )
6798         {
6799                 pwdinfo->ui_got_wps_info = P2P_NO_WPSINFO;
6800         }
6801         else if ( *extra == '1' )
6802         {
6803                 pwdinfo->ui_got_wps_info = P2P_GOT_WPSINFO_PEER_DISPLAY_PIN;
6804         }
6805         else if ( *extra == '2' )
6806         {
6807                 pwdinfo->ui_got_wps_info = P2P_GOT_WPSINFO_SELF_DISPLAY_PIN;
6808         }
6809         else if ( *extra == '3' )
6810         {
6811                 pwdinfo->ui_got_wps_info = P2P_GOT_WPSINFO_PBC;
6812         }
6813         else
6814         {
6815                 pwdinfo->ui_got_wps_info = P2P_NO_WPSINFO;
6816         }
6817
6818         return ret;
6819
6820 }
6821
6822 #endif //CONFIG_P2P
6823
6824 static int rtw_p2p_set(struct net_device *dev,
6825                                struct iw_request_info *info,
6826                                union iwreq_data *wrqu, char *extra)
6827 {
6828
6829         int ret = 0;
6830 #ifdef CONFIG_P2P
6831
6832         _adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
6833         struct mlme_priv *pmlmepriv = &(padapter->mlmepriv);
6834         struct iw_point *pdata = &wrqu->data;
6835         struct wifidirect_info *pwdinfo= &(padapter->wdinfo);
6836         struct mlme_ext_priv    *pmlmeext = &padapter->mlmeextpriv;
6837
6838         DBG_871X( "[%s] extra = %s\n", __FUNCTION__, extra );
6839
6840         if ( _rtw_memcmp( extra, "enable=", 7 ) )
6841         {
6842                 rtw_wext_p2p_enable( dev, info, wrqu, &extra[7] );
6843         }
6844         else if ( _rtw_memcmp( extra, "setDN=", 6 ) )
6845         {
6846                 wrqu->data.length -= 6;
6847                 rtw_p2p_setDN( dev, info, wrqu, &extra[6] );
6848         }
6849         else if ( _rtw_memcmp( extra, "profilefound=", 13 ) )
6850         {
6851                 wrqu->data.length -= 13;
6852                 rtw_p2p_profilefound( dev, info, wrqu, &extra[13] );
6853         }
6854         else if ( _rtw_memcmp( extra, "prov_disc=", 10 ) )
6855         {
6856                 wrqu->data.length -= 10;
6857                 rtw_p2p_prov_disc( dev, info, wrqu, &extra[10] );
6858         }
6859         else if ( _rtw_memcmp( extra, "nego=", 5 ) )
6860         {
6861                 wrqu->data.length -= 5;
6862                 rtw_p2p_connect( dev, info, wrqu, &extra[5] );
6863         }
6864         else if ( _rtw_memcmp( extra, "intent=", 7 ) )
6865         {
6866                 //      Commented by Albert 2011/03/23
6867                 //      The wrqu->data.length will include the null character
6868                 //      So, we will decrease 7 + 1
6869                 wrqu->data.length -= 8;
6870                 rtw_p2p_set_intent( dev, info, wrqu, &extra[7] );
6871         }
6872         else if ( _rtw_memcmp( extra, "ssid=", 5 ) )
6873         {
6874                 wrqu->data.length -= 5;
6875                 rtw_p2p_set_go_nego_ssid( dev, info, wrqu, &extra[5] );
6876         }
6877         else if ( _rtw_memcmp( extra, "got_wpsinfo=", 12 ) )
6878         {
6879                 wrqu->data.length -= 12;
6880                 rtw_p2p_got_wpsinfo( dev, info, wrqu, &extra[12] );
6881         }
6882         else if ( _rtw_memcmp( extra, "listen_ch=", 10 ) )
6883         {
6884                 //      Commented by Albert 2011/05/24
6885                 //      The wrqu->data.length will include the null character
6886                 //      So, we will decrease (10 + 1)
6887                 wrqu->data.length -= 11;
6888                 rtw_p2p_set_listen_ch( dev, info, wrqu, &extra[10] );
6889         }
6890         else if ( _rtw_memcmp( extra, "op_ch=", 6 ) )
6891         {
6892                 //      Commented by Albert 2011/05/24
6893                 //      The wrqu->data.length will include the null character
6894                 //      So, we will decrease (6 + 1)
6895                 wrqu->data.length -= 7;
6896                 rtw_p2p_set_op_ch( dev, info, wrqu, &extra[6] );
6897         }
6898         else if ( _rtw_memcmp( extra, "invite=", 7 ) )
6899         {
6900                 wrqu->data.length -= 8;
6901                 rtw_p2p_invite_req( dev, info, wrqu, &extra[7] );
6902         }
6903         else if ( _rtw_memcmp( extra, "persistent=", 11 ) )
6904         {
6905                 wrqu->data.length -= 11;
6906                 rtw_p2p_set_persistent( dev, info, wrqu, &extra[11] );
6907         }
6908         else if ( _rtw_memcmp ( extra, "uuid=", 5) )
6909         {
6910                 wrqu->data.length -= 5;
6911                 ret = rtw_p2p_set_wps_uuid( dev, info, wrqu, &extra[5] );
6912         }
6913
6914 #ifdef CONFIG_WFD
6915         if (hal_chk_wl_func(padapter, WL_FUNC_MIRACAST)) {
6916                 if (_rtw_memcmp(extra, "sa=", 3)) {
6917                         /* sa: WFD Session Available information */
6918                         wrqu->data.length -= 3;
6919                         rtw_p2p_set_sa(dev, info, wrqu, &extra[3]);
6920                 } else if (_rtw_memcmp(extra, "pc=", 3)) {
6921                         /* pc: WFD Preferred Connection */
6922                         wrqu->data.length -= 3;
6923                         rtw_p2p_set_pc(dev, info, wrqu, &extra[3]);
6924                 } else if (_rtw_memcmp(extra, "wfd_type=", 9)) {
6925                         wrqu->data.length -= 9;
6926                         rtw_p2p_set_wfd_device_type(dev, info, wrqu, &extra[9]);
6927                 } else if (_rtw_memcmp(extra, "wfd_enable=", 11)) {
6928                         wrqu->data.length -= 11;
6929                         rtw_p2p_set_wfd_enable(dev, info, wrqu, &extra[11]);
6930                 } else if (_rtw_memcmp(extra, "driver_iface=", 13)) {
6931                         wrqu->data.length -= 13;
6932                         rtw_p2p_set_driver_iface(dev, info, wrqu, &extra[13]);
6933                 }
6934         }
6935 #endif /* CONFIG_WFD */
6936
6937 #endif //CONFIG_P2P
6938
6939         return ret;
6940
6941 }
6942
6943 static int rtw_p2p_get(struct net_device *dev,
6944                                struct iw_request_info *info,
6945                                union iwreq_data *wrqu, char *extra)
6946 {
6947
6948         int ret = 0;
6949
6950 #ifdef CONFIG_P2P
6951
6952         _adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
6953         struct mlme_priv *pmlmepriv = &(padapter->mlmepriv);
6954         struct iw_point *pdata = &wrqu->data;
6955         struct wifidirect_info *pwdinfo= &(padapter->wdinfo);
6956         struct mlme_ext_priv    *pmlmeext = &padapter->mlmeextpriv;
6957
6958         if ( padapter->bShowGetP2PState )
6959         {
6960                 DBG_871X( "[%s] extra = %s\n", __FUNCTION__, (char*) wrqu->data.pointer );
6961         }
6962
6963         if ( _rtw_memcmp( wrqu->data.pointer, "status", 6 ) )
6964         {
6965                 rtw_p2p_get_status( dev, info, wrqu, extra );
6966         }
6967         else if ( _rtw_memcmp( wrqu->data.pointer, "role", 4 ) )
6968         {
6969                 rtw_p2p_get_role( dev, info, wrqu, extra);
6970         }
6971         else if ( _rtw_memcmp( wrqu->data.pointer, "peer_ifa", 8 ) )
6972         {
6973                 rtw_p2p_get_peer_ifaddr( dev, info, wrqu, extra);
6974         }
6975         else if ( _rtw_memcmp( wrqu->data.pointer, "req_cm", 6 ) )
6976         {
6977                 rtw_p2p_get_req_cm( dev, info, wrqu, extra);
6978         }
6979         else if ( _rtw_memcmp( wrqu->data.pointer, "peer_deva", 9 ) )
6980         {
6981                 //      Get the P2P device address when receiving the provision discovery request frame.
6982                 rtw_p2p_get_peer_devaddr( dev, info, wrqu, extra);
6983         }
6984         else if ( _rtw_memcmp( wrqu->data.pointer, "group_id", 8 ) )
6985         {
6986                 rtw_p2p_get_groupid( dev, info, wrqu, extra);
6987         }
6988         else if ( _rtw_memcmp( wrqu->data.pointer, "inv_peer_deva", 13 ) )
6989         {
6990                 //      Get the P2P device address when receiving the P2P Invitation request frame.
6991                 rtw_p2p_get_peer_devaddr_by_invitation( dev, info, wrqu, extra);
6992         }
6993         else if ( _rtw_memcmp( wrqu->data.pointer, "op_ch", 5 ) )
6994         {
6995                 rtw_p2p_get_op_ch( dev, info, wrqu, extra);
6996         }
6997
6998 #ifdef CONFIG_WFD
6999         if (hal_chk_wl_func(padapter, WL_FUNC_MIRACAST)) {
7000                 if (_rtw_memcmp(wrqu->data.pointer, "peer_port", 9))
7001                         rtw_p2p_get_peer_wfd_port(dev, info, wrqu, extra);
7002                 else if (_rtw_memcmp(wrqu->data.pointer, "wfd_sa", 6))
7003                         rtw_p2p_get_peer_wfd_session_available(dev, info, wrqu, extra);
7004                 else if (_rtw_memcmp(wrqu->data.pointer, "wfd_pc", 6))
7005                         rtw_p2p_get_peer_wfd_preferred_connection(dev, info, wrqu, extra);
7006         }
7007 #endif /* CONFIG_WFD */
7008
7009 #endif //CONFIG_P2P
7010
7011         return ret;
7012
7013 }
7014
7015 static int rtw_p2p_get2(struct net_device *dev,
7016                                                 struct iw_request_info *info,
7017                                                 union iwreq_data *wrqu, char *extra)
7018 {
7019
7020         int ret = 0;
7021
7022 #ifdef CONFIG_P2P
7023
7024         int length = wrqu->data.length;
7025         char *buffer = (u8 *)rtw_malloc(length);
7026
7027         if (buffer == NULL)
7028         {
7029                 ret = -ENOMEM;
7030                 goto bad;
7031         }
7032
7033         if (copy_from_user(buffer, wrqu->data.pointer, wrqu->data.length))
7034         {
7035                 ret = -EFAULT;
7036                 goto bad;
7037         }
7038
7039         DBG_871X("[%s] buffer = %s\n", __FUNCTION__, buffer);
7040
7041         if (_rtw_memcmp(buffer, "wpsCM=", 6))
7042         {
7043                 ret = rtw_p2p_get_wps_configmethod(dev, info, wrqu, extra, &buffer[6]);
7044         } else if (_rtw_memcmp(buffer, "devN=", 5))
7045         {
7046                 ret = rtw_p2p_get_device_name(dev, info, wrqu, extra, &buffer[5]);
7047         } else if (_rtw_memcmp(buffer, "dev_type=", 9))
7048         {
7049                 ret = rtw_p2p_get_device_type(dev, info, wrqu, extra, &buffer[9]);
7050         } else if (_rtw_memcmp(buffer, "go_devadd=", 10))
7051         {
7052                 ret = rtw_p2p_get_go_device_address(dev, info, wrqu, extra, &buffer[10]);
7053         } else if (_rtw_memcmp(buffer, "InvProc=", 8))
7054         {
7055                 ret = rtw_p2p_get_invitation_procedure(dev, info, wrqu, extra, &buffer[8]);
7056         } else
7057         {
7058                 snprintf(extra, sizeof("Command not found."), "Command not found.");
7059                 wrqu->data.length = strlen(extra);
7060         }
7061
7062 bad:
7063         if (buffer)
7064         {
7065                 rtw_mfree(buffer, length);
7066         }
7067
7068 #endif //CONFIG_P2P
7069
7070         return ret;
7071
7072 }
7073
7074 static int rtw_cta_test_start(struct net_device *dev,
7075                                                            struct iw_request_info *info,
7076                                                            union iwreq_data *wrqu, char *extra)
7077 {
7078         int ret = 0;
7079         _adapter        *padapter = (_adapter *)rtw_netdev_priv(dev);
7080         DBG_871X("%s %s\n", __func__, extra);
7081         if (!strcmp(extra, "1"))
7082                 padapter->in_cta_test = 1;
7083         else
7084                 padapter->in_cta_test = 0;
7085
7086         if(padapter->in_cta_test)
7087         {
7088                 u32 v = rtw_read32(padapter, REG_RCR);
7089                 v &= ~(RCR_CBSSID_DATA | RCR_CBSSID_BCN );//| RCR_ADF
7090                 rtw_write32(padapter, REG_RCR, v);
7091                 DBG_871X("enable RCR_ADF\n");
7092         }
7093         else
7094         {
7095                 u32 v = rtw_read32(padapter, REG_RCR);
7096                 v |= RCR_CBSSID_DATA | RCR_CBSSID_BCN ;//| RCR_ADF
7097                 rtw_write32(padapter, REG_RCR, v);
7098                 DBG_871X("disable RCR_ADF\n");
7099         }
7100         return ret;
7101 }
7102
7103
7104 extern int rtw_change_ifname(_adapter *padapter, const char *ifname);
7105 static int rtw_rereg_nd_name(struct net_device *dev,
7106                                struct iw_request_info *info,
7107                                union iwreq_data *wrqu, char *extra)
7108 {
7109         int ret = 0;
7110         _adapter *padapter = rtw_netdev_priv(dev);
7111         struct rereg_nd_name_data *rereg_priv = &padapter->rereg_nd_name_priv;
7112         char new_ifname[IFNAMSIZ];
7113
7114         if(rereg_priv->old_ifname[0] == 0) {
7115                 char *reg_ifname;
7116 #ifdef CONFIG_CONCURRENT_MODE
7117                 if (padapter->isprimary)
7118                         reg_ifname = padapter->registrypriv.ifname;
7119                 else
7120 #endif
7121                 reg_ifname = padapter->registrypriv.if2name;
7122
7123                 strncpy(rereg_priv->old_ifname, reg_ifname, IFNAMSIZ);
7124                 rereg_priv->old_ifname[IFNAMSIZ-1] = 0;
7125         }
7126
7127         //DBG_871X("%s wrqu->data.length:%d\n", __FUNCTION__, wrqu->data.length);
7128         if(wrqu->data.length > IFNAMSIZ)
7129                 return -EFAULT;
7130
7131         if ( copy_from_user(new_ifname, wrqu->data.pointer, IFNAMSIZ) ) {
7132                 return -EFAULT;
7133         }
7134
7135         if( 0 == strcmp(rereg_priv->old_ifname, new_ifname) ) {
7136                 return ret;
7137         }
7138
7139         DBG_871X("%s new_ifname:%s\n", __FUNCTION__, new_ifname);
7140         if( 0 != (ret = rtw_change_ifname(padapter, new_ifname)) ) {
7141                 goto exit;
7142         }
7143
7144         if(_rtw_memcmp(rereg_priv->old_ifname, "disable%d", 9) == _TRUE) {
7145                 padapter->ledpriv.bRegUseLed= rereg_priv->old_bRegUseLed;
7146                 rtw_hal_sw_led_init(padapter);
7147                 //rtw_ips_mode_req(&padapter->pwrctrlpriv, rereg_priv->old_ips_mode);
7148         }
7149
7150         strncpy(rereg_priv->old_ifname, new_ifname, IFNAMSIZ);
7151         rereg_priv->old_ifname[IFNAMSIZ-1] = 0;
7152
7153         if(_rtw_memcmp(new_ifname, "disable%d", 9) == _TRUE) {
7154
7155                 DBG_871X("%s disable\n", __FUNCTION__);
7156                 // free network queue for Android's timming issue
7157                 rtw_free_network_queue(padapter, _TRUE);
7158
7159                 // close led
7160                 rtw_led_control(padapter, LED_CTL_POWER_OFF);
7161                 rereg_priv->old_bRegUseLed = padapter->ledpriv.bRegUseLed;
7162                 padapter->ledpriv.bRegUseLed= _FALSE;
7163                 rtw_hal_sw_led_deinit(padapter);
7164
7165                 // the interface is being "disabled", we can do deeper IPS
7166                 //rereg_priv->old_ips_mode = rtw_get_ips_mode_req(&padapter->pwrctrlpriv);
7167                 //rtw_ips_mode_req(&padapter->pwrctrlpriv, IPS_NORMAL);
7168         }
7169 exit:
7170         return ret;
7171
7172 }
7173
7174 #ifdef CONFIG_IOL
7175 #include <rtw_iol.h>
7176 #endif
7177
7178 #ifdef DBG_CMD_QUEUE
7179 u8 dump_cmd_id=0;
7180 #endif
7181 static int rtw_dbg_port(struct net_device *dev,
7182                                struct iw_request_info *info,
7183                                union iwreq_data *wrqu, char *extra)
7184 {
7185         _irqL irqL;
7186         int ret = 0;
7187         u8 major_cmd, minor_cmd;
7188         u16 arg;
7189         u32 extra_arg, *pdata, val32;
7190         struct sta_info *psta;
7191         _adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
7192         struct mlme_priv *pmlmepriv = &(padapter->mlmepriv);
7193         struct mlme_ext_priv    *pmlmeext = &padapter->mlmeextpriv;
7194         struct mlme_ext_info    *pmlmeinfo = &(pmlmeext->mlmext_info);
7195         struct security_priv *psecuritypriv = &padapter->securitypriv;
7196         struct wlan_network *cur_network = &(pmlmepriv->cur_network);
7197         struct sta_priv *pstapriv = &padapter->stapriv;
7198
7199
7200         pdata = (u32*)&wrqu->data;
7201
7202         val32 = *pdata;
7203         arg = (u16)(val32&0x0000ffff);
7204         major_cmd = (u8)(val32>>24);
7205         minor_cmd = (u8)((val32>>16)&0x00ff);
7206
7207         extra_arg = *(pdata+1);
7208
7209         switch(major_cmd)
7210         {
7211                 case 0x70://read_reg
7212                         switch(minor_cmd)
7213                         {
7214                                 case 1:
7215                                         DBG_871X("rtw_read8(0x%x)=0x%02x\n", arg, rtw_read8(padapter, arg));
7216                                         break;
7217                                 case 2:
7218                                         DBG_871X("rtw_read16(0x%x)=0x%04x\n", arg, rtw_read16(padapter, arg));
7219                                         break;
7220                                 case 4:
7221                                         DBG_871X("rtw_read32(0x%x)=0x%08x\n", arg, rtw_read32(padapter, arg));
7222                                         break;
7223                         }
7224                         break;
7225                 case 0x71://write_reg
7226                         switch(minor_cmd)
7227                         {
7228                                 case 1:
7229                                         rtw_write8(padapter, arg, extra_arg);
7230                                         DBG_871X("rtw_write8(0x%x)=0x%02x\n", arg, rtw_read8(padapter, arg));
7231                                         break;
7232                                 case 2:
7233                                         rtw_write16(padapter, arg, extra_arg);
7234                                         DBG_871X("rtw_write16(0x%x)=0x%04x\n", arg, rtw_read16(padapter, arg));
7235                                         break;
7236                                 case 4:
7237                                         rtw_write32(padapter, arg, extra_arg);
7238                                         DBG_871X("rtw_write32(0x%x)=0x%08x\n", arg, rtw_read32(padapter, arg));
7239                                         break;
7240                         }
7241                         break;
7242                 case 0x72://read_bb
7243                         DBG_871X("read_bbreg(0x%x)=0x%x\n", arg, rtw_hal_read_bbreg(padapter, arg, 0xffffffff));
7244                         break;
7245                 case 0x73://write_bb
7246                         rtw_hal_write_bbreg(padapter, arg, 0xffffffff, extra_arg);
7247                         DBG_871X("write_bbreg(0x%x)=0x%x\n", arg, rtw_hal_read_bbreg(padapter, arg, 0xffffffff));
7248                         break;
7249                 case 0x74://read_rf
7250                         DBG_871X("read RF_reg path(0x%02x),offset(0x%x),value(0x%08x)\n",minor_cmd,arg,rtw_hal_read_rfreg(padapter, minor_cmd, arg, 0xffffffff));
7251                         break;
7252                 case 0x75://write_rf
7253                         rtw_hal_write_rfreg(padapter, minor_cmd, arg, 0xffffffff, extra_arg);
7254                         DBG_871X("write RF_reg path(0x%02x),offset(0x%x),value(0x%08x)\n",minor_cmd,arg, rtw_hal_read_rfreg(padapter, minor_cmd, arg, 0xffffffff));
7255                         break;
7256
7257                 case 0x76:
7258                         switch(minor_cmd)
7259                         {
7260                                 case 0x00: //normal mode,
7261                                         padapter->recvpriv.is_signal_dbg = 0;
7262                                         break;
7263                                 case 0x01: //dbg mode
7264                                         padapter->recvpriv.is_signal_dbg = 1;
7265                                         extra_arg = extra_arg>100?100:extra_arg;
7266                                         padapter->recvpriv.signal_strength_dbg=extra_arg;
7267                                         break;
7268                         }
7269                         break;
7270                 case 0x78: //IOL test
7271                         switch(minor_cmd)
7272                         {
7273                                 #ifdef CONFIG_IOL
7274                                 case 0x04: //LLT table initialization test
7275                                 {
7276                                         u8 page_boundary = 0xf9;
7277                                         {
7278                                                 struct xmit_frame       *xmit_frame;
7279
7280                                                 if((xmit_frame=rtw_IOL_accquire_xmit_frame(padapter)) == NULL) {
7281                                                         ret = -ENOMEM;
7282                                                         break;
7283                                                 }
7284
7285                                                 rtw_IOL_append_LLT_cmd(xmit_frame, page_boundary);
7286
7287
7288                                                 if(_SUCCESS != rtw_IOL_exec_cmds_sync(padapter, xmit_frame, 500,0) )
7289                                                         ret = -EPERM;
7290                                         }
7291                                 }
7292                                         break;
7293                                 case 0x05: //blink LED test
7294                                 {
7295                                         u16 reg = 0x4c;
7296                                         u32 blink_num = 50;
7297                                         u32 blink_delay_ms = 200;
7298                                         int i;
7299
7300                                         {
7301                                                 struct xmit_frame       *xmit_frame;
7302
7303                                                 if((xmit_frame=rtw_IOL_accquire_xmit_frame(padapter)) == NULL) {
7304                                                         ret = -ENOMEM;
7305                                                         break;
7306                                                 }
7307
7308                                                 for(i=0;i<blink_num;i++){
7309                                                         #ifdef CONFIG_IOL_NEW_GENERATION
7310                                                         rtw_IOL_append_WB_cmd(xmit_frame, reg, 0x00,0xff);
7311                                                         rtw_IOL_append_DELAY_MS_cmd(xmit_frame, blink_delay_ms);
7312                                                         rtw_IOL_append_WB_cmd(xmit_frame, reg, 0x08,0xff);
7313                                                         rtw_IOL_append_DELAY_MS_cmd(xmit_frame, blink_delay_ms);
7314                                                         #else
7315                                                         rtw_IOL_append_WB_cmd(xmit_frame, reg, 0x00);
7316                                                         rtw_IOL_append_DELAY_MS_cmd(xmit_frame, blink_delay_ms);
7317                                                         rtw_IOL_append_WB_cmd(xmit_frame, reg, 0x08);
7318                                                         rtw_IOL_append_DELAY_MS_cmd(xmit_frame, blink_delay_ms);
7319                                                         #endif
7320                                                 }
7321                                                 if(_SUCCESS != rtw_IOL_exec_cmds_sync(padapter, xmit_frame, (blink_delay_ms*blink_num*2)+200,0) )
7322                                                         ret = -EPERM;
7323                                         }
7324                                 }
7325                                         break;
7326
7327                                 case 0x06: //continuous wirte byte test
7328                                 {
7329                                         u16 reg = arg;
7330                                         u16 start_value = 0;
7331                                         u32 write_num = extra_arg;
7332                                         int i;
7333                                         u8 final;
7334
7335                                         {
7336                                                 struct xmit_frame       *xmit_frame;
7337
7338                                                 if((xmit_frame=rtw_IOL_accquire_xmit_frame(padapter)) == NULL) {
7339                                                         ret = -ENOMEM;
7340                                                         break;
7341                                                 }
7342
7343                                                 for(i=0;i<write_num;i++){
7344                                                         #ifdef CONFIG_IOL_NEW_GENERATION
7345                                                         rtw_IOL_append_WB_cmd(xmit_frame, reg, i+start_value,0xFF);
7346                                                         #else
7347                                                         rtw_IOL_append_WB_cmd(xmit_frame, reg, i+start_value);
7348                                                         #endif
7349                                                 }
7350                                                 if(_SUCCESS != rtw_IOL_exec_cmds_sync(padapter, xmit_frame, 5000,0))
7351                                                         ret = -EPERM;
7352                                         }
7353
7354                                         if(start_value+write_num-1 == (final=rtw_read8(padapter, reg)) ) {
7355                                                 DBG_871X("continuous IOL_CMD_WB_REG to 0x%x %u times Success, start:%u, final:%u\n", reg, write_num, start_value, final);
7356                                         } else {
7357                                                 DBG_871X("continuous IOL_CMD_WB_REG to 0x%x %u times Fail, start:%u, final:%u\n", reg, write_num, start_value, final);
7358                                         }
7359                                 }
7360                                         break;
7361
7362                                 case 0x07: //continuous wirte word test
7363                                 {
7364                                         u16 reg = arg;
7365                                         u16 start_value = 200;
7366                                         u32 write_num = extra_arg;
7367
7368                                         int i;
7369                                         u16 final;
7370
7371                                         {
7372                                                 struct xmit_frame       *xmit_frame;
7373
7374                                                 if((xmit_frame=rtw_IOL_accquire_xmit_frame(padapter)) == NULL) {
7375                                                         ret = -ENOMEM;
7376                                                         break;
7377                                                 }
7378
7379                                                 for(i=0;i<write_num;i++){
7380                                                         #ifdef CONFIG_IOL_NEW_GENERATION
7381                                                         rtw_IOL_append_WW_cmd(xmit_frame, reg, i+start_value,0xFFFF);
7382                                                         #else
7383                                                         rtw_IOL_append_WW_cmd(xmit_frame, reg, i+start_value);
7384                                                         #endif
7385                                                 }
7386                                                 if(_SUCCESS !=rtw_IOL_exec_cmds_sync(padapter, xmit_frame, 5000,0))
7387                                                         ret = -EPERM;
7388                                         }
7389
7390                                         if(start_value+write_num-1 == (final=rtw_read16(padapter, reg)) ) {
7391                                                 DBG_871X("continuous IOL_CMD_WW_REG to 0x%x %u times Success, start:%u, final:%u\n", reg, write_num, start_value, final);
7392                                         } else {
7393                                                 DBG_871X("continuous IOL_CMD_WW_REG to 0x%x %u times Fail, start:%u, final:%u\n", reg, write_num, start_value, final);
7394                                         }
7395                                 }
7396                                         break;
7397
7398                                 case 0x08: //continuous wirte dword test
7399                                 {
7400                                         u16 reg = arg;
7401                                         u32 start_value = 0x110000c7;
7402                                         u32 write_num = extra_arg;
7403
7404                                         int i;
7405                                         u32 final;
7406
7407                                         {
7408                                                 struct xmit_frame       *xmit_frame;
7409
7410                                                 if((xmit_frame=rtw_IOL_accquire_xmit_frame(padapter)) == NULL) {
7411                                                         ret = -ENOMEM;
7412                                                         break;
7413                                                 }
7414
7415                                                 for(i=0;i<write_num;i++){
7416                                                         #ifdef CONFIG_IOL_NEW_GENERATION
7417                                                         rtw_IOL_append_WD_cmd(xmit_frame, reg, i+start_value,0xFFFFFFFF);
7418                                                         #else
7419                                                         rtw_IOL_append_WD_cmd(xmit_frame, reg, i+start_value);
7420                                                         #endif
7421                                                 }
7422                                                 if(_SUCCESS !=rtw_IOL_exec_cmds_sync(padapter, xmit_frame, 5000,0))
7423                                                         ret = -EPERM;
7424
7425                                         }
7426
7427                                         if(start_value+write_num-1 == (final=rtw_read32(padapter, reg)) ) {
7428                                                 DBG_871X("continuous IOL_CMD_WD_REG to 0x%x %u times Success, start:%u, final:%u\n", reg, write_num, start_value, final);
7429                                         } else {
7430                                                 DBG_871X("continuous IOL_CMD_WD_REG to 0x%x %u times Fail, start:%u, final:%u\n", reg, write_num, start_value, final);
7431                                         }
7432                                 }
7433                                         break;
7434                                 #endif //CONFIG_IOL
7435                         }
7436                         break;
7437                 case 0x79:
7438                         {
7439                                 /*
7440                                 * dbg 0x79000000 [value], set RESP_TXAGC to + value, value:0~15
7441                                 * dbg 0x79010000 [value], set RESP_TXAGC to - value, value:0~15
7442                                 */
7443                                 u8 value =  extra_arg & 0x0f;
7444                                 u8 sign = minor_cmd;
7445                                 u16 write_value = 0;
7446
7447                                 DBG_871X("%s set RESP_TXAGC to %s %u\n", __func__, sign?"minus":"plus", value);
7448
7449                                 if (sign)
7450                                         value = value | 0x10;
7451
7452                                 write_value = value | (value << 5);
7453                                 rtw_write16(padapter, 0x6d9, write_value);
7454                         }
7455                         break;
7456                 case 0x7a:
7457                         receive_disconnect(padapter, pmlmeinfo->network.MacAddress
7458                                 , WLAN_REASON_EXPIRATION_CHK);
7459                         break;
7460                 case 0x7F:
7461                         switch(minor_cmd)
7462                         {
7463                                 case 0x0:
7464                                         DBG_871X("fwstate=0x%x\n", get_fwstate(pmlmepriv));
7465                                         break;
7466                                 case 0x01:
7467                                         DBG_871X("auth_alg=0x%x, enc_alg=0x%x, auth_type=0x%x, enc_type=0x%x\n",
7468                                                 psecuritypriv->dot11AuthAlgrthm, psecuritypriv->dot11PrivacyAlgrthm,
7469                                                 psecuritypriv->ndisauthtype, psecuritypriv->ndisencryptstatus);
7470                                         break;
7471                                 case 0x02:
7472                                         DBG_871X("pmlmeinfo->state=0x%x\n", pmlmeinfo->state);
7473                                         DBG_871X("DrvBcnEarly=%d\n", pmlmeext->DrvBcnEarly);
7474                                         DBG_871X("DrvBcnTimeOut=%d\n", pmlmeext->DrvBcnTimeOut);
7475                                         break;
7476                                 case 0x03:
7477                                         DBG_871X("qos_option=%d\n", pmlmepriv->qospriv.qos_option);
7478 #ifdef CONFIG_80211N_HT
7479                                         DBG_871X("ht_option=%d\n", pmlmepriv->htpriv.ht_option);
7480 #endif //CONFIG_80211N_HT
7481                                         break;
7482                                 case 0x04:
7483                                         DBG_871X("cur_ch=%d\n", pmlmeext->cur_channel);
7484                                         DBG_871X("cur_bw=%d\n", pmlmeext->cur_bwmode);
7485                                         DBG_871X("cur_ch_off=%d\n", pmlmeext->cur_ch_offset);
7486
7487                                         DBG_871X("oper_ch=%d\n", rtw_get_oper_ch(padapter));
7488                                         DBG_871X("oper_bw=%d\n", rtw_get_oper_bw(padapter));
7489                                         DBG_871X("oper_ch_offet=%d\n", rtw_get_oper_choffset(padapter));
7490
7491                                         break;
7492                                 case 0x05:
7493                                         psta = rtw_get_stainfo(pstapriv, cur_network->network.MacAddress);
7494                                         if(psta)
7495                                         {
7496                                                 DBG_871X("SSID=%s\n", cur_network->network.Ssid.Ssid);
7497                                                 DBG_871X("sta's macaddr:" MAC_FMT "\n", MAC_ARG(psta->hwaddr));
7498                                                 DBG_871X("cur_channel=%d, cur_bwmode=%d, cur_ch_offset=%d\n", pmlmeext->cur_channel, pmlmeext->cur_bwmode, pmlmeext->cur_ch_offset);
7499                                                 DBG_871X("rtsen=%d, cts2slef=%d\n", psta->rtsen, psta->cts2self);
7500                                                 DBG_871X("state=0x%x, aid=%d, macid=%d, raid=%d\n", psta->state, psta->aid, psta->mac_id, psta->raid);
7501 #ifdef CONFIG_80211N_HT
7502                                                 DBG_871X("qos_en=%d, ht_en=%d, init_rate=%d\n", psta->qos_option, psta->htpriv.ht_option, psta->init_rate);
7503                                                 DBG_871X("bwmode=%d, ch_offset=%d, sgi_20m=%d,sgi_40m=%d\n", psta->bw_mode, psta->htpriv.ch_offset, psta->htpriv.sgi_20m, psta->htpriv.sgi_40m);
7504                                                 DBG_871X("ampdu_enable = %d\n", psta->htpriv.ampdu_enable);
7505                                                 DBG_871X("agg_enable_bitmap=%x, candidate_tid_bitmap=%x\n", psta->htpriv.agg_enable_bitmap, psta->htpriv.candidate_tid_bitmap);
7506 #endif //CONFIG_80211N_HT
7507
7508                                                 sta_rx_reorder_ctl_dump(RTW_DBGDUMP, psta);
7509                                         }
7510                                         else
7511                                         {
7512                                                 DBG_871X("can't get sta's macaddr, cur_network's macaddr:" MAC_FMT "\n", MAC_ARG(cur_network->network.MacAddress));
7513                                         }
7514                                         break;
7515                                 case 0x06:
7516                                         {
7517                                         }
7518                                         break;
7519                                 case 0x07:
7520                                         DBG_871X("bSurpriseRemoved=%s, bDriverStopped=%s\n"
7521                                                 , rtw_is_surprise_removed(padapter)?"True":"False"
7522                                                 , rtw_is_drv_stopped(padapter)?"True":"False");
7523                                         break;
7524                                 case 0x08:
7525                                         {
7526                                                 struct xmit_priv *pxmitpriv = &padapter->xmitpriv;
7527                                                 struct recv_priv  *precvpriv = &padapter->recvpriv;
7528
7529                                                 DBG_871X("free_xmitbuf_cnt=%d, free_xmitframe_cnt=%d"
7530                                                         ", free_xmit_extbuf_cnt=%d, free_xframe_ext_cnt=%d"
7531                                                         ", free_recvframe_cnt=%d\n",
7532                                                         pxmitpriv->free_xmitbuf_cnt, pxmitpriv->free_xmitframe_cnt,
7533                                                         pxmitpriv->free_xmit_extbuf_cnt, pxmitpriv->free_xframe_ext_cnt,
7534                                                         precvpriv->free_recvframe_cnt);
7535                                                 #ifdef CONFIG_USB_HCI
7536                                                 DBG_871X("rx_urb_pending_cn=%d\n", ATOMIC_READ(&(precvpriv->rx_pending_cnt)));
7537                                                 #endif
7538                                         }
7539                                         break;
7540                                 case 0x09:
7541                                         {
7542                                                 int i;
7543                                                 _list   *plist, *phead;
7544
7545 #ifdef CONFIG_AP_MODE
7546                                                 DBG_871X("sta_dz_bitmap=0x%x, tim_bitmap=0x%x\n", pstapriv->sta_dz_bitmap, pstapriv->tim_bitmap);
7547 #endif
7548                                                 _enter_critical_bh(&pstapriv->sta_hash_lock, &irqL);
7549
7550                                                 for(i=0; i< NUM_STA; i++)
7551                                                 {
7552                                                         phead = &(pstapriv->sta_hash[i]);
7553                                                         plist = get_next(phead);
7554
7555                                                         while ((rtw_end_of_queue_search(phead, plist)) == _FALSE)
7556                                                         {
7557                                                                 psta = LIST_CONTAINOR(plist, struct sta_info, hash_list);
7558
7559                                                                 plist = get_next(plist);
7560
7561                                                                 if(extra_arg == psta->aid)
7562                                                                 {
7563                                                                         DBG_871X("sta's macaddr:" MAC_FMT "\n", MAC_ARG(psta->hwaddr));
7564                                                                         DBG_871X("rtsen=%d, cts2slef=%d\n", psta->rtsen, psta->cts2self);
7565                                                                         DBG_871X("state=0x%x, aid=%d, macid=%d, raid=%d\n", psta->state, psta->aid, psta->mac_id, psta->raid);
7566 #ifdef CONFIG_80211N_HT
7567                                                                         DBG_871X("qos_en=%d, ht_en=%d, init_rate=%d\n", psta->qos_option, psta->htpriv.ht_option, psta->init_rate);
7568                                                                         DBG_871X("bwmode=%d, ch_offset=%d, sgi_20m=%d,sgi_40m=%d\n", psta->bw_mode, psta->htpriv.ch_offset, psta->htpriv.sgi_20m, psta->htpriv.sgi_40m);
7569                                                                         DBG_871X("ampdu_enable = %d\n", psta->htpriv.ampdu_enable);
7570                                                                         DBG_871X("agg_enable_bitmap=%x, candidate_tid_bitmap=%x\n", psta->htpriv.agg_enable_bitmap, psta->htpriv.candidate_tid_bitmap);
7571 #endif //CONFIG_80211N_HT
7572
7573 #ifdef CONFIG_AP_MODE
7574                                                                         DBG_871X("capability=0x%x\n", psta->capability);
7575                                                                         DBG_871X("flags=0x%x\n", psta->flags);
7576                                                                         DBG_871X("wpa_psk=0x%x\n", psta->wpa_psk);
7577                                                                         DBG_871X("wpa2_group_cipher=0x%x\n", psta->wpa2_group_cipher);
7578                                                                         DBG_871X("wpa2_pairwise_cipher=0x%x\n", psta->wpa2_pairwise_cipher);
7579                                                                         DBG_871X("qos_info=0x%x\n", psta->qos_info);
7580 #endif
7581                                                                         DBG_871X("dot118021XPrivacy=0x%x\n", psta->dot118021XPrivacy);
7582
7583                                                                         sta_rx_reorder_ctl_dump(RTW_DBGDUMP, psta);
7584                                                                 }
7585
7586                                                         }
7587                                                 }
7588
7589                                                 _exit_critical_bh(&pstapriv->sta_hash_lock, &irqL);
7590
7591                                         }
7592                                         break;
7593
7594                                 case 0x0b: //Enable=1, Disable=0 driver control vrtl_carrier_sense.
7595                                         {
7596                                                 //u8 driver_vcs_en; //Enable=1, Disable=0 driver control vrtl_carrier_sense.
7597                                                 //u8 driver_vcs_type;//force 0:disable VCS, 1:RTS-CTS, 2:CTS-to-self when vcs_en=1.
7598
7599                                                 if(arg == 0){
7600                                                         DBG_871X("disable driver ctrl vcs\n");
7601                                                         padapter->driver_vcs_en = 0;
7602                                                 }
7603                                                 else if(arg == 1){
7604                                                         DBG_871X("enable driver ctrl vcs = %d\n", extra_arg);
7605                                                         padapter->driver_vcs_en = 1;
7606
7607                                                         if(extra_arg>2)
7608                                                                 padapter->driver_vcs_type = 1;
7609                                                         else
7610                                                                 padapter->driver_vcs_type = extra_arg;
7611                                                 }
7612                                         }
7613                                         break;
7614                                 case 0x0c://dump rx/tx packet
7615                                         {
7616                                                 if(arg == 0){
7617                                                         DBG_871X("dump rx packet (%d)\n",extra_arg);
7618                                                         //pHalData->bDumpRxPkt =extra_arg;
7619                                                         rtw_hal_set_def_var(padapter, HAL_DEF_DBG_DUMP_RXPKT, &(extra_arg));
7620                                                 }
7621                                                 else if(arg==1){
7622                                                         DBG_871X("dump tx packet (%d)\n",extra_arg);
7623                                                         rtw_hal_set_def_var(padapter, HAL_DEF_DBG_DUMP_TXPKT, &(extra_arg));
7624                                                 }
7625                                         }
7626                                         break;
7627                                 case 0x0e:
7628                                         {
7629                                                 if(arg == 0){
7630                                                         DBG_871X("disable driver ctrl rx_ampdu_factor\n");
7631                                                         padapter->driver_rx_ampdu_factor = 0xFF;
7632                                                 }
7633                                                 else if(arg == 1){
7634
7635                                                         DBG_871X("enable driver ctrl rx_ampdu_factor = %d\n", extra_arg);
7636
7637                                                         if(extra_arg > 0x03)
7638                                                                 padapter->driver_rx_ampdu_factor = 0xFF;
7639                                                         else
7640                                                                 padapter->driver_rx_ampdu_factor = extra_arg;
7641                                                 }
7642                                         }
7643                                         break;
7644                 #ifdef DBG_CONFIG_ERROR_DETECT
7645                                 case 0x0f:
7646                                                 {
7647                                                         if(extra_arg == 0){
7648                                                                 DBG_871X("###### silent reset test.......#####\n");
7649                                                                 rtw_hal_sreset_reset(padapter);
7650                                                         } else {
7651                                                                 HAL_DATA_TYPE   *pHalData = GET_HAL_DATA(padapter);
7652                                                                 struct sreset_priv *psrtpriv = &pHalData->srestpriv;
7653                                                                 psrtpriv->dbg_trigger_point = extra_arg;
7654                                                         }
7655
7656                                                 }
7657                                         break;
7658                                 case 0x15:
7659                                         {
7660                                                 struct pwrctrl_priv *pwrpriv = adapter_to_pwrctl(padapter);
7661                                                 DBG_871X("==>silent resete cnts:%d\n",pwrpriv->ips_enter_cnts);
7662                                         }
7663                                         break;
7664
7665                 #endif
7666
7667                                 case 0x10:// driver version display
7668                                         dump_drv_version(RTW_DBGDUMP);
7669                                         break;
7670                                 case 0x11://dump linked status
7671                                         {
7672                                                 int pre_mode;
7673                                                 pre_mode=padapter->bLinkInfoDump;
7674                                                 // linked_info_dump(padapter,extra_arg);
7675                                                  if(extra_arg==1 || (extra_arg==0 && pre_mode==1) ) //not consider pwr_saving 0:
7676                                                 {
7677                                                         padapter->bLinkInfoDump = extra_arg;
7678
7679                                                 }
7680                                                 else if( (extra_arg==2 ) || (extra_arg==0 && pre_mode==2))//consider power_saving
7681                                                 {
7682                                                 //DBG_871X("linked_info_dump =%s \n", (padapter->bLinkInfoDump)?"enable":"disable")
7683                                                         linked_info_dump(padapter,extra_arg);
7684                                                 }
7685
7686
7687
7688                                         }
7689                                         break;
7690 #ifdef CONFIG_80211N_HT
7691                                 case 0x12: //set rx_stbc
7692                                 {
7693                                         struct registry_priv    *pregpriv = &padapter->registrypriv;
7694                                         // 0: disable, bit(0):enable 2.4g, bit(1):enable 5g, 0x3: enable both 2.4g and 5g
7695                                         //default is set to enable 2.4GHZ for IOT issue with bufflao's AP at 5GHZ
7696                                         if( pregpriv && (extra_arg == 0 || extra_arg == 1|| extra_arg == 2 || extra_arg == 3))
7697                                         {
7698                                                 pregpriv->rx_stbc= extra_arg;
7699                                                 DBG_871X("set rx_stbc=%d\n",pregpriv->rx_stbc);
7700                                         }
7701                                         else
7702                                                 DBG_871X("get rx_stbc=%d\n",pregpriv->rx_stbc);
7703
7704                                 }
7705                                 break;
7706                                 case 0x13: //set ampdu_enable
7707                                 {
7708                                         struct registry_priv    *pregpriv = &padapter->registrypriv;
7709                                         // 0: disable, 0x1:enable (but wifi_spec should be 0), 0x2: force enable (don't care wifi_spec)
7710                                         if( pregpriv && extra_arg < 3 )
7711                                         {
7712                                                 pregpriv->ampdu_enable= extra_arg;
7713                                                 DBG_871X("set ampdu_enable=%d\n",pregpriv->ampdu_enable);
7714                                         }
7715                                         else
7716                                                 DBG_871X("get ampdu_enable=%d\n",pregpriv->ampdu_enable);
7717
7718                                 }
7719                                 break;
7720 #endif
7721                                 case 0x14: //get wifi_spec
7722                                 {
7723                                         struct registry_priv    *pregpriv = &padapter->registrypriv;
7724                                         DBG_871X("get wifi_spec=%d\n",pregpriv->wifi_spec);
7725
7726                                 }
7727                                 break;
7728                                 case 0x16:
7729                                 {
7730                                         if(arg == 0xff){
7731                                                 rtw_odm_dbg_comp_msg(RTW_DBGDUMP,padapter);
7732                                         }
7733                                         else{
7734                                                 u64 dbg_comp = (u64)extra_arg;
7735                                                 rtw_odm_dbg_comp_set(padapter, dbg_comp);
7736                                         }
7737                                 }
7738                                         break;
7739 #ifdef DBG_FIXED_CHAN
7740                                 case 0x17:
7741                                         {
7742                                                 struct mlme_ext_priv    *pmlmeext = &(padapter->mlmeextpriv);
7743                                                 printk("===>  Fixed channel to %d \n",extra_arg);
7744                                                 pmlmeext->fixed_chan = extra_arg;
7745
7746                                         }
7747                                         break;
7748 #endif
7749                                 case 0x18:
7750                                         {
7751                                                 printk("===>  Switch USB Mode %d \n",extra_arg);
7752                                                 rtw_hal_set_hwreg(padapter, HW_VAR_USB_MODE, (u8 *)&extra_arg);
7753                                         }
7754                                         break;
7755 #ifdef CONFIG_80211N_HT
7756                                 case 0x19:
7757                                         {
7758                                                 struct registry_priv    *pregistrypriv = &padapter->registrypriv;
7759                                                 // extra_arg :
7760                                                 // BIT0: Enable VHT LDPC Rx, BIT1: Enable VHT LDPC Tx,
7761                                                 // BIT4: Enable HT LDPC Rx, BIT5: Enable HT LDPC Tx
7762                                                 if(arg == 0){
7763                                                         DBG_871X("driver disable LDPC\n");
7764                                                         pregistrypriv->ldpc_cap = 0x00;
7765                                                 }
7766                                                 else if(arg == 1){
7767                                                         DBG_871X("driver set LDPC cap = 0x%x\n", extra_arg);
7768                                                         pregistrypriv->ldpc_cap = (u8)(extra_arg&0x33);
7769                                                 }
7770                                         }
7771                                         break;
7772                                 case 0x1a:
7773                                         {
7774                                                 struct registry_priv    *pregistrypriv = &padapter->registrypriv;
7775                                                 // extra_arg :
7776                                                 // BIT0: Enable VHT STBC Rx, BIT1: Enable VHT STBC Tx,
7777                                                 // BIT4: Enable HT STBC Rx, BIT5: Enable HT STBC Tx
7778                                                 if(arg == 0){
7779                                                         DBG_871X("driver disable STBC\n");
7780                                                         pregistrypriv->stbc_cap = 0x00;
7781                                                 }
7782                                                 else if(arg == 1){
7783                                                         DBG_871X("driver set STBC cap = 0x%x\n", extra_arg);
7784                                                         pregistrypriv->stbc_cap = (u8)(extra_arg&0x33);
7785                                                 }
7786                                         }
7787                                         break;
7788 #endif //CONFIG_80211N_HT
7789                                 case 0x1b:
7790                                         {
7791                                                 struct registry_priv    *pregistrypriv = &padapter->registrypriv;
7792
7793                                                 if(arg == 0){
7794                                                         DBG_871X("disable driver ctrl max_rx_rate, reset to default_rate_set\n");
7795                                                         init_mlme_default_rate_set(padapter);
7796 #ifdef CONFIG_80211N_HT
7797                                                         pregistrypriv->ht_enable = (u8)rtw_ht_enable;
7798 #endif //CONFIG_80211N_HT
7799                                                 }
7800                                                 else if(arg == 1){
7801
7802                                                         int i;
7803                                                         u8 max_rx_rate;
7804
7805                                                         DBG_871X("enable driver ctrl max_rx_rate = 0x%x\n", extra_arg);
7806
7807                                                         max_rx_rate = (u8)extra_arg;
7808
7809                                                         if(max_rx_rate < 0xc) // max_rx_rate < MSC0 -> B or G -> disable HT
7810                                                         {
7811 #ifdef CONFIG_80211N_HT
7812                                                                 pregistrypriv->ht_enable = 0;
7813 #endif //CONFIG_80211N_HT
7814                                                                 for(i=0; i<NumRates; i++)
7815                                                                 {
7816                                                                         if(pmlmeext->datarate[i] > max_rx_rate)
7817                                                                                 pmlmeext->datarate[i] = 0xff;
7818                                                                 }
7819
7820                                                         }
7821 #ifdef CONFIG_80211N_HT
7822                                                         else if(max_rx_rate < 0x1c) // mcs0~mcs15
7823                                                         {
7824                                                                 u32 mcs_bitmap=0x0;
7825
7826                                                                 for(i=0; i<((max_rx_rate+1)-0xc); i++)
7827                                                                         mcs_bitmap |= BIT(i);
7828
7829                                                                 set_mcs_rate_by_mask(pmlmeext->default_supported_mcs_set, mcs_bitmap);
7830                                                         }
7831 #endif //CONFIG_80211N_HT
7832                                                 }
7833                                         }
7834                                         break;
7835                                 case 0x1c: //enable/disable driver control AMPDU Density for peer sta's rx
7836                                         {
7837                                                 if(arg == 0){
7838                                                         DBG_871X("disable driver ctrl ampdu density\n");
7839                                                         padapter->driver_ampdu_spacing = 0xFF;
7840                                                 }
7841                                                 else if(arg == 1){
7842
7843                                                         DBG_871X("enable driver ctrl ampdu density = %d\n", extra_arg);
7844
7845                                                         if(extra_arg > 0x07)
7846                                                                 padapter->driver_ampdu_spacing = 0xFF;
7847                                                         else
7848                                                                 padapter->driver_ampdu_spacing = extra_arg;
7849                                                 }
7850                                         }
7851                                         break;
7852 #ifdef CONFIG_BACKGROUND_NOISE_MONITOR
7853                                 case 0x1e:
7854                                         {
7855                                                 HAL_DATA_TYPE   *pHalData = GET_HAL_DATA(padapter);
7856                                                 PDM_ODM_T pDM_Odm = &pHalData->odmpriv;
7857                                                 u8 chan = rtw_get_oper_ch(padapter);
7858                                                 DBG_871X("===========================================\n");
7859                                                 ODM_InbandNoise_Monitor(pDM_Odm,_TRUE,0x1e,100);
7860                                                 DBG_871X("channel(%d),noise_a = %d, noise_b = %d , noise_all:%d \n",
7861                                                         chan,pDM_Odm->noise_level.noise[ODM_RF_PATH_A],
7862                                                         pDM_Odm->noise_level.noise[ODM_RF_PATH_B],
7863                                                         pDM_Odm->noise_level.noise_all);
7864                                                 DBG_871X("===========================================\n");
7865
7866                                         }
7867                                         break;
7868 #endif
7869                                 case 0x23:
7870                                         {
7871                                                 DBG_871X("turn %s the bNotifyChannelChange Variable\n",(extra_arg==1)?"on":"off");
7872                                                 padapter->bNotifyChannelChange = extra_arg;
7873                                                 break;
7874                                         }
7875                                 case 0x24:
7876                                         {
7877 #ifdef CONFIG_P2P
7878                                                 DBG_871X("turn %s the bShowGetP2PState Variable\n",(extra_arg==1)?"on":"off");
7879                                                 padapter->bShowGetP2PState = extra_arg;
7880 #endif // CONFIG_P2P
7881                                                 break;
7882                                         }
7883 #ifdef CONFIG_GPIO_API
7884                             case 0x25: //Get GPIO register
7885                                     {
7886                                             /*
7887                                             * dbg 0x7f250000 [gpio_num], Get gpio value, gpio_num:0~7
7888                                             */
7889
7890                                             u8 value;
7891                                             DBG_871X("Read GPIO Value  extra_arg = %d\n",extra_arg);
7892                                             value = rtw_hal_get_gpio(padapter,extra_arg);
7893                                             DBG_871X("Read GPIO Value = %d\n",value);
7894                                             break;
7895                                     }
7896                             case 0x26: //Set GPIO direction
7897                                     {
7898
7899                                             /* dbg 0x7f26000x [y], Set gpio direction,
7900                                             * x: gpio_num,4~7  y: indicate direction, 0~1
7901                                             */
7902
7903                                             int value;
7904                                             DBG_871X("Set GPIO Direction! arg = %d ,extra_arg=%d\n",arg ,extra_arg);
7905                                             value = rtw_hal_config_gpio(padapter, arg, extra_arg);
7906                                             DBG_871X("Set GPIO Direction %s \n",(value==-1)?"Fail!!!":"Success");
7907                                             break;
7908                                         }
7909                                 case 0x27: //Set GPIO output direction value
7910                                         {
7911                                                 /*
7912                                                 * dbg 0x7f27000x [y], Set gpio output direction value,
7913                                                 * x: gpio_num,4~7  y: indicate direction, 0~1
7914                                                 */
7915
7916                                                 int value;
7917                                                 DBG_871X("Set GPIO Value! arg = %d ,extra_arg=%d\n",arg ,extra_arg);
7918                                                 value = rtw_hal_set_gpio_output_value(padapter,arg,extra_arg);
7919                                                 DBG_871X("Set GPIO Value %s \n",(value==-1)?"Fail!!!":"Success");
7920                                                 break;
7921                                         }
7922 #endif
7923 #ifdef DBG_CMD_QUEUE
7924                                 case 0x28:
7925                                         {
7926                                                 dump_cmd_id = extra_arg;
7927                                                 DBG_871X("dump_cmd_id:%d\n",dump_cmd_id);
7928                                         }
7929                                         break;
7930 #endif //DBG_CMD_QUEUE
7931                                 case 0xaa:
7932                                         {
7933                                                 if((extra_arg & 0x7F)> 0x3F) extra_arg = 0xFF;
7934                                                 DBG_871X("chang data rate to :0x%02x\n",extra_arg);
7935                                                 padapter->fix_rate = extra_arg;
7936                                         }
7937                                         break;
7938                                 case 0xdd://registers dump , 0 for mac reg,1 for bb reg, 2 for rf reg
7939                                         {
7940                                                 if(extra_arg==0){
7941                                                         mac_reg_dump(RTW_DBGDUMP, padapter);
7942                                                 }
7943                                                 else if(extra_arg==1){
7944                                                         bb_reg_dump(RTW_DBGDUMP, padapter);
7945                                                 }
7946                                                 else if(extra_arg==2){
7947                                                         rf_reg_dump(RTW_DBGDUMP, padapter);
7948                                                 }
7949                                         }
7950                                         break;
7951
7952                                 case 0xee:
7953                                         {
7954                                                 DBG_871X(" === please control /proc  to trun on/off PHYDM func === \n");
7955                                         }
7956                                         break;
7957
7958                                 case 0xfd:
7959                                         rtw_write8(padapter, 0xc50, arg);
7960                                         DBG_871X("wr(0xc50)=0x%x\n", rtw_read8(padapter, 0xc50));
7961                                         rtw_write8(padapter, 0xc58, arg);
7962                                         DBG_871X("wr(0xc58)=0x%x\n", rtw_read8(padapter, 0xc58));
7963                                         break;
7964                                 case 0xfe:
7965                                         DBG_871X("rd(0xc50)=0x%x\n", rtw_read8(padapter, 0xc50));
7966                                         DBG_871X("rd(0xc58)=0x%x\n", rtw_read8(padapter, 0xc58));
7967                                         break;
7968                                 case 0xff:
7969                                         {
7970                                                 DBG_871X("dbg(0x210)=0x%x\n", rtw_read32(padapter, 0x210));
7971                                                 DBG_871X("dbg(0x608)=0x%x\n", rtw_read32(padapter, 0x608));
7972                                                 DBG_871X("dbg(0x280)=0x%x\n", rtw_read32(padapter, 0x280));
7973                                                 DBG_871X("dbg(0x284)=0x%x\n", rtw_read32(padapter, 0x284));
7974                                                 DBG_871X("dbg(0x288)=0x%x\n", rtw_read32(padapter, 0x288));
7975
7976                                                 DBG_871X("dbg(0x664)=0x%x\n", rtw_read32(padapter, 0x664));
7977
7978
7979                                                 DBG_871X("\n");
7980
7981                                                 DBG_871X("dbg(0x430)=0x%x\n", rtw_read32(padapter, 0x430));
7982                                                 DBG_871X("dbg(0x438)=0x%x\n", rtw_read32(padapter, 0x438));
7983
7984                                                 DBG_871X("dbg(0x440)=0x%x\n", rtw_read32(padapter, 0x440));
7985
7986                                                 DBG_871X("dbg(0x458)=0x%x\n", rtw_read32(padapter, 0x458));
7987
7988                                                 DBG_871X("dbg(0x484)=0x%x\n", rtw_read32(padapter, 0x484));
7989                                                 DBG_871X("dbg(0x488)=0x%x\n", rtw_read32(padapter, 0x488));
7990
7991                                                 DBG_871X("dbg(0x444)=0x%x\n", rtw_read32(padapter, 0x444));
7992                                                 DBG_871X("dbg(0x448)=0x%x\n", rtw_read32(padapter, 0x448));
7993                                                 DBG_871X("dbg(0x44c)=0x%x\n", rtw_read32(padapter, 0x44c));
7994                                                 DBG_871X("dbg(0x450)=0x%x\n", rtw_read32(padapter, 0x450));
7995                                         }
7996                                         break;
7997                         }
7998                         break;
7999                 default:
8000                         DBG_871X("error dbg cmd!\n");
8001                         break;
8002         }
8003
8004
8005         return ret;
8006
8007 }
8008
8009 static int wpa_set_param(struct net_device *dev, u8 name, u32 value)
8010 {
8011         uint ret=0;
8012         u32 flags;
8013         _adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
8014
8015         switch (name){
8016         case IEEE_PARAM_WPA_ENABLED:
8017
8018                 padapter->securitypriv.dot11AuthAlgrthm= dot11AuthAlgrthm_8021X; //802.1x
8019
8020                 //ret = ieee80211_wpa_enable(ieee, value);
8021
8022                 switch((value)&0xff)
8023                 {
8024                         case 1 : //WPA
8025                         padapter->securitypriv.ndisauthtype = Ndis802_11AuthModeWPAPSK; //WPA_PSK
8026                         padapter->securitypriv.ndisencryptstatus = Ndis802_11Encryption2Enabled;
8027                                 break;
8028                         case 2: //WPA2
8029                         padapter->securitypriv.ndisauthtype = Ndis802_11AuthModeWPA2PSK; //WPA2_PSK
8030                         padapter->securitypriv.ndisencryptstatus = Ndis802_11Encryption3Enabled;
8031                                 break;
8032                 }
8033
8034                 RT_TRACE(_module_rtl871x_ioctl_os_c,_drv_info_,("wpa_set_param:padapter->securitypriv.ndisauthtype=%d\n", padapter->securitypriv.ndisauthtype));
8035
8036                 break;
8037
8038         case IEEE_PARAM_TKIP_COUNTERMEASURES:
8039                 //ieee->tkip_countermeasures=value;
8040                 break;
8041
8042         case IEEE_PARAM_DROP_UNENCRYPTED:
8043         {
8044                 /* HACK:
8045                  *
8046                  * wpa_supplicant calls set_wpa_enabled when the driver
8047                  * is loaded and unloaded, regardless of if WPA is being
8048                  * used.  No other calls are made which can be used to
8049                  * determine if encryption will be used or not prior to
8050                  * association being expected.  If encryption is not being
8051                  * used, drop_unencrypted is set to false, else true -- we
8052                  * can use this to determine if the CAP_PRIVACY_ON bit should
8053                  * be set.
8054                  */
8055
8056 #if 0
8057                 struct ieee80211_security sec = {
8058                         .flags = SEC_ENABLED,
8059                         .enabled = value,
8060                 };
8061                 ieee->drop_unencrypted = value;
8062                 /* We only change SEC_LEVEL for open mode. Others
8063                  * are set by ipw_wpa_set_encryption.
8064                  */
8065                 if (!value) {
8066                         sec.flags |= SEC_LEVEL;
8067                         sec.level = SEC_LEVEL_0;
8068                 }
8069                 else {
8070                         sec.flags |= SEC_LEVEL;
8071                         sec.level = SEC_LEVEL_1;
8072                 }
8073                 if (ieee->set_security)
8074                         ieee->set_security(ieee->dev, &sec);
8075 #endif
8076                 break;
8077
8078         }
8079         case IEEE_PARAM_PRIVACY_INVOKED:
8080
8081                 //ieee->privacy_invoked=value;
8082
8083                 break;
8084
8085         case IEEE_PARAM_AUTH_ALGS:
8086
8087                 ret = wpa_set_auth_algs(dev, value);
8088
8089                 break;
8090
8091         case IEEE_PARAM_IEEE_802_1X:
8092
8093                 //ieee->ieee802_1x=value;
8094
8095                 break;
8096
8097         case IEEE_PARAM_WPAX_SELECT:
8098
8099                 // added for WPA2 mixed mode
8100                 //DBG_871X(KERN_WARNING "------------------------>wpax value = %x\n", value);
8101                 /*
8102                 spin_lock_irqsave(&ieee->wpax_suitlist_lock,flags);
8103                 ieee->wpax_type_set = 1;
8104                 ieee->wpax_type_notify = value;
8105                 spin_unlock_irqrestore(&ieee->wpax_suitlist_lock,flags);
8106                 */
8107
8108                 break;
8109
8110         default:
8111
8112
8113
8114                 ret = -EOPNOTSUPP;
8115
8116
8117                 break;
8118
8119         }
8120
8121         return ret;
8122
8123 }
8124
8125 static int wpa_mlme(struct net_device *dev, u32 command, u32 reason)
8126 {
8127         int ret = 0;
8128         _adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
8129
8130         switch (command)
8131         {
8132                 case IEEE_MLME_STA_DEAUTH:
8133
8134                         if(!rtw_set_802_11_disassociate(padapter))
8135                                 ret = -1;
8136
8137                         break;
8138
8139                 case IEEE_MLME_STA_DISASSOC:
8140
8141                         if(!rtw_set_802_11_disassociate(padapter))
8142                                 ret = -1;
8143
8144                         break;
8145
8146                 default:
8147                         ret = -EOPNOTSUPP;
8148                         break;
8149         }
8150
8151         return ret;
8152
8153 }
8154
8155 static int wpa_supplicant_ioctl(struct net_device *dev, struct iw_point *p)
8156 {
8157         struct ieee_param *param;
8158         uint ret=0;
8159
8160         //down(&ieee->wx_sem);
8161
8162         if (p->length < sizeof(struct ieee_param) || !p->pointer){
8163                 ret = -EINVAL;
8164                 goto out;
8165         }
8166
8167         param = (struct ieee_param *)rtw_malloc(p->length);
8168         if (param == NULL)
8169         {
8170                 ret = -ENOMEM;
8171                 goto out;
8172         }
8173
8174         if (copy_from_user(param, p->pointer, p->length))
8175         {
8176                 rtw_mfree((u8*)param, p->length);
8177                 ret = -EFAULT;
8178                 goto out;
8179         }
8180
8181         switch (param->cmd) {
8182
8183         case IEEE_CMD_SET_WPA_PARAM:
8184                 ret = wpa_set_param(dev, param->u.wpa_param.name, param->u.wpa_param.value);
8185                 break;
8186
8187         case IEEE_CMD_SET_WPA_IE:
8188                 //ret = wpa_set_wpa_ie(dev, param, p->length);
8189                 ret =  rtw_set_wpa_ie((_adapter *)rtw_netdev_priv(dev), (char*)param->u.wpa_ie.data, (u16)param->u.wpa_ie.len);
8190                 break;
8191
8192         case IEEE_CMD_SET_ENCRYPTION:
8193                 ret = wpa_set_encryption(dev, param, p->length);
8194                 break;
8195
8196         case IEEE_CMD_MLME:
8197                 ret = wpa_mlme(dev, param->u.mlme.command, param->u.mlme.reason_code);
8198                 break;
8199
8200         default:
8201                 DBG_871X("Unknown WPA supplicant request: %d\n", param->cmd);
8202                 ret = -EOPNOTSUPP;
8203                 break;
8204
8205         }
8206
8207         if (ret == 0 && copy_to_user(p->pointer, param, p->length))
8208                 ret = -EFAULT;
8209
8210         rtw_mfree((u8 *)param, p->length);
8211
8212 out:
8213
8214         //up(&ieee->wx_sem);
8215
8216         return ret;
8217
8218 }
8219
8220 #ifdef CONFIG_AP_MODE
8221 static int rtw_set_encryption(struct net_device *dev, struct ieee_param *param, u32 param_len)
8222 {
8223         int ret = 0;
8224         u32 wep_key_idx, wep_key_len,wep_total_len;
8225         NDIS_802_11_WEP  *pwep = NULL;
8226         struct sta_info *psta = NULL, *pbcmc_sta = NULL;
8227         _adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
8228         struct mlme_priv        *pmlmepriv = &padapter->mlmepriv;
8229         struct security_priv* psecuritypriv=&(padapter->securitypriv);
8230         struct sta_priv *pstapriv = &padapter->stapriv;
8231
8232         DBG_871X("%s\n", __FUNCTION__);
8233
8234         param->u.crypt.err = 0;
8235         param->u.crypt.alg[IEEE_CRYPT_ALG_NAME_LEN - 1] = '\0';
8236
8237         //sizeof(struct ieee_param) = 64 bytes;
8238         //if (param_len !=  (u32) ((u8 *) param->u.crypt.key - (u8 *) param) + param->u.crypt.key_len)
8239         if (param_len !=  sizeof(struct ieee_param) + param->u.crypt.key_len)
8240         {
8241                 ret =  -EINVAL;
8242                 goto exit;
8243         }
8244
8245         if (param->sta_addr[0] == 0xff && param->sta_addr[1] == 0xff &&
8246             param->sta_addr[2] == 0xff && param->sta_addr[3] == 0xff &&
8247             param->sta_addr[4] == 0xff && param->sta_addr[5] == 0xff)
8248         {
8249                 if (param->u.crypt.idx >= WEP_KEYS
8250 #ifdef CONFIG_IEEE80211W
8251                         && param->u.crypt.idx > BIP_MAX_KEYID
8252 #endif /* CONFIG_IEEE80211W */
8253                         )
8254                 {
8255                         ret = -EINVAL;
8256                         goto exit;
8257                 }
8258         }
8259         else
8260         {
8261                 psta = rtw_get_stainfo(pstapriv, param->sta_addr);
8262                 if(!psta)
8263                 {
8264                         //ret = -EINVAL;
8265                         DBG_871X("rtw_set_encryption(), sta has already been removed or never been added\n");
8266                         goto exit;
8267                 }
8268         }
8269
8270         if (strcmp(param->u.crypt.alg, "none") == 0 && (psta==NULL))
8271         {
8272                 //todo:clear default encryption keys
8273
8274                 psecuritypriv->dot11AuthAlgrthm = dot11AuthAlgrthm_Open;
8275                 psecuritypriv->ndisencryptstatus = Ndis802_11EncryptionDisabled;
8276                 psecuritypriv->dot11PrivacyAlgrthm = _NO_PRIVACY_;
8277                 psecuritypriv->dot118021XGrpPrivacy = _NO_PRIVACY_;
8278
8279                 DBG_871X("clear default encryption keys, keyid=%d\n", param->u.crypt.idx);
8280
8281                 goto exit;
8282         }
8283
8284
8285         if (strcmp(param->u.crypt.alg, "WEP") == 0 && (psta==NULL))
8286         {
8287                 DBG_871X("r871x_set_encryption, crypt.alg = WEP\n");
8288
8289                 wep_key_idx = param->u.crypt.idx;
8290                 wep_key_len = param->u.crypt.key_len;
8291
8292                 DBG_871X("r871x_set_encryption, wep_key_idx=%d, len=%d\n", wep_key_idx, wep_key_len);
8293
8294                 if((wep_key_idx >= WEP_KEYS) || (wep_key_len<=0))
8295                 {
8296                         ret = -EINVAL;
8297                         goto exit;
8298                 }
8299
8300
8301                 if (wep_key_len > 0)
8302                 {
8303                         wep_key_len = wep_key_len <= 5 ? 5 : 13;
8304                         wep_total_len = wep_key_len + FIELD_OFFSET(NDIS_802_11_WEP, KeyMaterial);
8305                         pwep =(NDIS_802_11_WEP *)rtw_malloc(wep_total_len);
8306                         if(pwep == NULL){
8307                                 DBG_871X(" r871x_set_encryption: pwep allocate fail !!!\n");
8308                                 goto exit;
8309                         }
8310
8311                         _rtw_memset(pwep, 0, wep_total_len);
8312
8313                         pwep->KeyLength = wep_key_len;
8314                         pwep->Length = wep_total_len;
8315
8316                 }
8317
8318                 pwep->KeyIndex = wep_key_idx;
8319
8320                 _rtw_memcpy(pwep->KeyMaterial,  param->u.crypt.key, pwep->KeyLength);
8321
8322                 if(param->u.crypt.set_tx)
8323                 {
8324                         DBG_871X("wep, set_tx=1\n");
8325
8326                         psecuritypriv->dot11AuthAlgrthm = dot11AuthAlgrthm_Auto;
8327                         psecuritypriv->ndisencryptstatus = Ndis802_11Encryption1Enabled;
8328                         psecuritypriv->dot11PrivacyAlgrthm=_WEP40_;
8329                         psecuritypriv->dot118021XGrpPrivacy=_WEP40_;
8330
8331                         if(pwep->KeyLength==13)
8332                         {
8333                                 psecuritypriv->dot11PrivacyAlgrthm=_WEP104_;
8334                                 psecuritypriv->dot118021XGrpPrivacy=_WEP104_;
8335                         }
8336
8337
8338                         psecuritypriv->dot11PrivacyKeyIndex = wep_key_idx;
8339
8340                         _rtw_memcpy(&(psecuritypriv->dot11DefKey[wep_key_idx].skey[0]), pwep->KeyMaterial, pwep->KeyLength);
8341
8342                         psecuritypriv->dot11DefKeylen[wep_key_idx]=pwep->KeyLength;
8343
8344                         rtw_ap_set_wep_key(padapter, pwep->KeyMaterial, pwep->KeyLength, wep_key_idx, 1);
8345                 }
8346                 else
8347                 {
8348                         DBG_871X("wep, set_tx=0\n");
8349
8350                         //don't update "psecuritypriv->dot11PrivacyAlgrthm" and
8351                         //"psecuritypriv->dot11PrivacyKeyIndex=keyid", but can rtw_set_key to cam
8352
8353                       _rtw_memcpy(&(psecuritypriv->dot11DefKey[wep_key_idx].skey[0]), pwep->KeyMaterial, pwep->KeyLength);
8354
8355                         psecuritypriv->dot11DefKeylen[wep_key_idx] = pwep->KeyLength;
8356
8357                         rtw_ap_set_wep_key(padapter, pwep->KeyMaterial, pwep->KeyLength, wep_key_idx, 0);
8358                 }
8359
8360                 goto exit;
8361
8362         }
8363
8364
8365         if(!psta && check_fwstate(pmlmepriv, WIFI_AP_STATE)) // //group key
8366         {
8367                 if(param->u.crypt.set_tx ==1)
8368                 {
8369                         if(strcmp(param->u.crypt.alg, "WEP") == 0)
8370                         {
8371                                 DBG_871X("%s, set group_key, WEP\n", __FUNCTION__);
8372
8373                                 _rtw_memcpy(psecuritypriv->dot118021XGrpKey[param->u.crypt.idx].skey,  param->u.crypt.key, (param->u.crypt.key_len>16 ?16:param->u.crypt.key_len));
8374
8375                                 psecuritypriv->dot118021XGrpPrivacy = _WEP40_;
8376                                 if(param->u.crypt.key_len==13)
8377                                 {
8378                                                 psecuritypriv->dot118021XGrpPrivacy = _WEP104_;
8379                                 }
8380
8381                         }
8382                         else if(strcmp(param->u.crypt.alg, "TKIP") == 0)
8383                         {
8384                                 DBG_871X("%s, set group_key, TKIP\n", __FUNCTION__);
8385
8386                                 psecuritypriv->dot118021XGrpPrivacy = _TKIP_;
8387
8388                                 _rtw_memcpy(psecuritypriv->dot118021XGrpKey[param->u.crypt.idx].skey,  param->u.crypt.key, (param->u.crypt.key_len>16 ?16:param->u.crypt.key_len));
8389
8390                                 //DEBUG_ERR("set key length :param->u.crypt.key_len=%d\n", param->u.crypt.key_len);
8391                                 //set mic key
8392                                 _rtw_memcpy(psecuritypriv->dot118021XGrptxmickey[param->u.crypt.idx].skey, &(param->u.crypt.key[16]), 8);
8393                                 _rtw_memcpy(psecuritypriv->dot118021XGrprxmickey[param->u.crypt.idx].skey, &(param->u.crypt.key[24]), 8);
8394
8395                                 psecuritypriv->busetkipkey = _TRUE;
8396
8397                         }
8398                         else if(strcmp(param->u.crypt.alg, "CCMP") == 0)
8399                         {
8400                                 DBG_871X("%s, set group_key, CCMP\n", __FUNCTION__);
8401
8402                                 psecuritypriv->dot118021XGrpPrivacy = _AES_;
8403
8404                                 _rtw_memcpy(psecuritypriv->dot118021XGrpKey[param->u.crypt.idx].skey,  param->u.crypt.key, (param->u.crypt.key_len>16 ?16:param->u.crypt.key_len));
8405                         }
8406 #ifdef CONFIG_IEEE80211W
8407                         else if (strcmp(param->u.crypt.alg, "BIP") == 0) {
8408                                 int no;
8409
8410                                 DBG_871X("BIP key_len=%d , index=%d\n", param->u.crypt.key_len, param->u.crypt.idx);
8411                                 /* save the IGTK key, length 16 bytes */
8412                                 _rtw_memcpy(padapter->securitypriv.dot11wBIPKey[param->u.crypt.idx].skey, param->u.crypt.key, (param->u.crypt.key_len > 16 ? 16:param->u.crypt.key_len));
8413                                 /* DBG_871X("IGTK key below:\n");
8414                                 for(no=0;no<16;no++)
8415                                         printk(" %02x ", padapter->securitypriv.dot11wBIPKey[param->u.crypt.idx].skey[no]);
8416                                 DBG_871X("\n"); */
8417                                 padapter->securitypriv.dot11wBIPKeyid = param->u.crypt.idx;
8418                                 padapter->securitypriv.binstallBIPkey = _TRUE;
8419                                 DBG_871X(" ~~~~set sta key:IGKT\n");
8420                                 goto exit;
8421                         }
8422 #endif /* CONFIG_IEEE80211W */
8423                         else
8424                         {
8425                                 DBG_871X("%s, set group_key, none\n", __FUNCTION__);
8426
8427                                 psecuritypriv->dot118021XGrpPrivacy = _NO_PRIVACY_;
8428                         }
8429
8430                         psecuritypriv->dot118021XGrpKeyid = param->u.crypt.idx;
8431
8432                         psecuritypriv->binstallGrpkey = _TRUE;
8433
8434                         psecuritypriv->dot11PrivacyAlgrthm = psecuritypriv->dot118021XGrpPrivacy;//!!!
8435
8436                         rtw_ap_set_group_key(padapter, param->u.crypt.key, psecuritypriv->dot118021XGrpPrivacy, param->u.crypt.idx);
8437
8438                         pbcmc_sta=rtw_get_bcmc_stainfo(padapter);
8439                         if(pbcmc_sta)
8440                         {
8441                                 pbcmc_sta->ieee8021x_blocked = _FALSE;
8442                                 pbcmc_sta->dot118021XPrivacy= psecuritypriv->dot118021XGrpPrivacy;//rx will use bmc_sta's dot118021XPrivacy
8443                         }
8444
8445                 }
8446
8447                 goto exit;
8448
8449         }
8450
8451         if(psecuritypriv->dot11AuthAlgrthm == dot11AuthAlgrthm_8021X && psta) // psk/802_1x
8452         {
8453                 if(check_fwstate(pmlmepriv, WIFI_AP_STATE))
8454                 {
8455                         if(param->u.crypt.set_tx ==1)
8456                         {
8457                                 _rtw_memcpy(psta->dot118021x_UncstKey.skey,  param->u.crypt.key, (param->u.crypt.key_len>16 ?16:param->u.crypt.key_len));
8458
8459                                 if(strcmp(param->u.crypt.alg, "WEP") == 0)
8460                                 {
8461                                         DBG_871X("%s, set pairwise key, WEP\n", __FUNCTION__);
8462
8463                                         psta->dot118021XPrivacy = _WEP40_;
8464                                         if(param->u.crypt.key_len==13)
8465                                         {
8466                                                 psta->dot118021XPrivacy = _WEP104_;
8467                                         }
8468                                 }
8469                                 else if(strcmp(param->u.crypt.alg, "TKIP") == 0)
8470                                 {
8471                                         DBG_871X("%s, set pairwise key, TKIP\n", __FUNCTION__);
8472
8473                                         psta->dot118021XPrivacy = _TKIP_;
8474
8475                                         //DEBUG_ERR("set key length :param->u.crypt.key_len=%d\n", param->u.crypt.key_len);
8476                                         //set mic key
8477                                         _rtw_memcpy(psta->dot11tkiptxmickey.skey, &(param->u.crypt.key[16]), 8);
8478                                         _rtw_memcpy(psta->dot11tkiprxmickey.skey, &(param->u.crypt.key[24]), 8);
8479
8480                                         psecuritypriv->busetkipkey = _TRUE;
8481
8482                                 }
8483                                 else if(strcmp(param->u.crypt.alg, "CCMP") == 0)
8484                                 {
8485
8486                                         DBG_871X("%s, set pairwise key, CCMP\n", __FUNCTION__);
8487
8488                                         psta->dot118021XPrivacy = _AES_;
8489                                 }
8490                                 else
8491                                 {
8492                                         DBG_871X("%s, set pairwise key, none\n", __FUNCTION__);
8493
8494                                         psta->dot118021XPrivacy = _NO_PRIVACY_;
8495                                 }
8496
8497                                 rtw_ap_set_pairwise_key(padapter, psta);
8498
8499                                 psta->ieee8021x_blocked = _FALSE;
8500
8501                                 psta->bpairwise_key_installed = _TRUE;
8502
8503                         }
8504                         else//group key???
8505                         {
8506                                 if(strcmp(param->u.crypt.alg, "WEP") == 0)
8507                                 {
8508                                         _rtw_memcpy(psecuritypriv->dot118021XGrpKey[param->u.crypt.idx].skey,  param->u.crypt.key, (param->u.crypt.key_len>16 ?16:param->u.crypt.key_len));
8509
8510                                         psecuritypriv->dot118021XGrpPrivacy = _WEP40_;
8511                                         if(param->u.crypt.key_len==13)
8512                                         {
8513                                                 psecuritypriv->dot118021XGrpPrivacy = _WEP104_;
8514                                         }
8515                                 }
8516                                 else if(strcmp(param->u.crypt.alg, "TKIP") == 0)
8517                                 {
8518                                         psecuritypriv->dot118021XGrpPrivacy = _TKIP_;
8519
8520                                         _rtw_memcpy(psecuritypriv->dot118021XGrpKey[param->u.crypt.idx].skey,  param->u.crypt.key, (param->u.crypt.key_len>16 ?16:param->u.crypt.key_len));
8521
8522                                         //DEBUG_ERR("set key length :param->u.crypt.key_len=%d\n", param->u.crypt.key_len);
8523                                         //set mic key
8524                                         _rtw_memcpy(psecuritypriv->dot118021XGrptxmickey[param->u.crypt.idx].skey, &(param->u.crypt.key[16]), 8);
8525                                         _rtw_memcpy(psecuritypriv->dot118021XGrprxmickey[param->u.crypt.idx].skey, &(param->u.crypt.key[24]), 8);
8526
8527                                         psecuritypriv->busetkipkey = _TRUE;
8528
8529                                 }
8530                                 else if(strcmp(param->u.crypt.alg, "CCMP") == 0)
8531                                 {
8532                                         psecuritypriv->dot118021XGrpPrivacy = _AES_;
8533
8534                                         _rtw_memcpy(psecuritypriv->dot118021XGrpKey[param->u.crypt.idx].skey,  param->u.crypt.key, (param->u.crypt.key_len>16 ?16:param->u.crypt.key_len));
8535                                 }
8536                                 else
8537                                 {
8538                                         psecuritypriv->dot118021XGrpPrivacy = _NO_PRIVACY_;
8539                                 }
8540
8541                                 psecuritypriv->dot118021XGrpKeyid = param->u.crypt.idx;
8542
8543                                 psecuritypriv->binstallGrpkey = _TRUE;
8544
8545                                 psecuritypriv->dot11PrivacyAlgrthm = psecuritypriv->dot118021XGrpPrivacy;//!!!
8546
8547                                 rtw_ap_set_group_key(padapter, param->u.crypt.key, psecuritypriv->dot118021XGrpPrivacy, param->u.crypt.idx);
8548
8549                                 pbcmc_sta=rtw_get_bcmc_stainfo(padapter);
8550                                 if(pbcmc_sta)
8551                                 {
8552                                         pbcmc_sta->ieee8021x_blocked = _FALSE;
8553                                         pbcmc_sta->dot118021XPrivacy= psecuritypriv->dot118021XGrpPrivacy;//rx will use bmc_sta's dot118021XPrivacy
8554                                 }
8555
8556                         }
8557
8558                 }
8559
8560         }
8561
8562 exit:
8563
8564         if(pwep)
8565         {
8566                 rtw_mfree((u8 *)pwep, wep_total_len);
8567         }
8568
8569         return ret;
8570
8571 }
8572
8573 static int rtw_set_beacon(struct net_device *dev, struct ieee_param *param, int len)
8574 {
8575         int ret=0;
8576         _adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
8577         struct mlme_priv *pmlmepriv = &(padapter->mlmepriv);
8578         struct sta_priv *pstapriv = &padapter->stapriv;
8579         unsigned char *pbuf = param->u.bcn_ie.buf;
8580
8581
8582         DBG_871X("%s, len=%d\n", __FUNCTION__, len);
8583
8584         if(check_fwstate(pmlmepriv, WIFI_AP_STATE) != _TRUE)
8585                 return -EINVAL;
8586
8587         _rtw_memcpy(&pstapriv->max_num_sta, param->u.bcn_ie.reserved, 2);
8588
8589         if((pstapriv->max_num_sta>NUM_STA) || (pstapriv->max_num_sta<=0))
8590                 pstapriv->max_num_sta = NUM_STA;
8591
8592
8593         if(rtw_check_beacon_data(padapter, pbuf,  (len-12-2)) == _SUCCESS)// 12 = param header, 2:no packed
8594                 ret = 0;
8595         else
8596                 ret = -EINVAL;
8597
8598
8599         return ret;
8600
8601 }
8602
8603 static int rtw_hostapd_sta_flush(struct net_device *dev)
8604 {
8605         //_irqL irqL;
8606         //_list *phead, *plist;
8607         int ret=0;
8608         //struct sta_info *psta = NULL;
8609         _adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
8610         //struct sta_priv *pstapriv = &padapter->stapriv;
8611
8612         DBG_871X("%s\n", __FUNCTION__);
8613
8614         flush_all_cam_entry(padapter);  //clear CAM
8615
8616         ret = rtw_sta_flush(padapter, _TRUE);
8617
8618         return ret;
8619
8620 }
8621
8622 static int rtw_add_sta(struct net_device *dev, struct ieee_param *param)
8623 {
8624         _irqL irqL;
8625         int ret=0;
8626         struct sta_info *psta = NULL;
8627         _adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
8628         struct mlme_priv *pmlmepriv = &(padapter->mlmepriv);
8629         struct sta_priv *pstapriv = &padapter->stapriv;
8630
8631         DBG_871X("rtw_add_sta(aid=%d)=" MAC_FMT "\n", param->u.add_sta.aid, MAC_ARG(param->sta_addr));
8632
8633         if(check_fwstate(pmlmepriv, (_FW_LINKED|WIFI_AP_STATE)) != _TRUE)
8634         {
8635                 return -EINVAL;
8636         }
8637
8638         if (param->sta_addr[0] == 0xff && param->sta_addr[1] == 0xff &&
8639             param->sta_addr[2] == 0xff && param->sta_addr[3] == 0xff &&
8640             param->sta_addr[4] == 0xff && param->sta_addr[5] == 0xff)
8641         {
8642                 return -EINVAL;
8643         }
8644
8645 /*
8646         psta = rtw_get_stainfo(pstapriv, param->sta_addr);
8647         if(psta)
8648         {
8649                 DBG_871X("rtw_add_sta(), free has been added psta=%p\n", psta);
8650                 //_enter_critical_bh(&(pstapriv->sta_hash_lock), &irqL);
8651                 rtw_free_stainfo(padapter,  psta);
8652                 //_exit_critical_bh(&(pstapriv->sta_hash_lock), &irqL);
8653
8654                 psta = NULL;
8655         }
8656 */
8657         //psta = rtw_alloc_stainfo(pstapriv, param->sta_addr);
8658         psta = rtw_get_stainfo(pstapriv, param->sta_addr);
8659         if(psta)
8660         {
8661                 int flags = param->u.add_sta.flags;
8662
8663                 //DBG_871X("rtw_add_sta(), init sta's variables, psta=%p\n", psta);
8664
8665                 psta->aid = param->u.add_sta.aid;//aid=1~2007
8666
8667                 _rtw_memcpy(psta->bssrateset, param->u.add_sta.tx_supp_rates, 16);
8668
8669
8670                 //check wmm cap.
8671                 if(WLAN_STA_WME&flags)
8672                         psta->qos_option = 1;
8673                 else
8674                         psta->qos_option = 0;
8675
8676                 if(pmlmepriv->qospriv.qos_option == 0)
8677                         psta->qos_option = 0;
8678
8679
8680 #ifdef CONFIG_80211N_HT
8681                 //chec 802.11n ht cap.
8682                 if(WLAN_STA_HT&flags)
8683                 {
8684                         psta->htpriv.ht_option = _TRUE;
8685                         psta->qos_option = 1;
8686                         _rtw_memcpy((void*)&psta->htpriv.ht_cap, (void*)&param->u.add_sta.ht_cap, sizeof(struct rtw_ieee80211_ht_cap));
8687                 }
8688                 else
8689                 {
8690                         psta->htpriv.ht_option = _FALSE;
8691                 }
8692
8693                 if(pmlmepriv->htpriv.ht_option == _FALSE)
8694                         psta->htpriv.ht_option = _FALSE;
8695 #endif
8696
8697
8698                 update_sta_info_apmode(padapter, psta);
8699
8700
8701         }
8702         else
8703         {
8704                 ret = -ENOMEM;
8705         }
8706
8707         return ret;
8708
8709 }
8710
8711 static int rtw_del_sta(struct net_device *dev, struct ieee_param *param)
8712 {
8713         _irqL irqL;
8714         int ret=0;
8715         struct sta_info *psta = NULL;
8716         _adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
8717         struct mlme_priv *pmlmepriv = &(padapter->mlmepriv);
8718         struct sta_priv *pstapriv = &padapter->stapriv;
8719
8720         DBG_871X("rtw_del_sta=" MAC_FMT "\n", MAC_ARG(param->sta_addr));
8721
8722         if(check_fwstate(pmlmepriv, (_FW_LINKED|WIFI_AP_STATE)) != _TRUE)
8723         {
8724                 return -EINVAL;
8725         }
8726
8727         if (param->sta_addr[0] == 0xff && param->sta_addr[1] == 0xff &&
8728             param->sta_addr[2] == 0xff && param->sta_addr[3] == 0xff &&
8729             param->sta_addr[4] == 0xff && param->sta_addr[5] == 0xff)
8730         {
8731                 return -EINVAL;
8732         }
8733
8734         psta = rtw_get_stainfo(pstapriv, param->sta_addr);
8735         if(psta)
8736         {
8737                 u8 updated=_FALSE;
8738
8739                 //DBG_871X("free psta=%p, aid=%d\n", psta, psta->aid);
8740
8741                 _enter_critical_bh(&pstapriv->asoc_list_lock, &irqL);
8742                 if(rtw_is_list_empty(&psta->asoc_list)==_FALSE)
8743                 {
8744                         rtw_list_delete(&psta->asoc_list);
8745                         pstapriv->asoc_list_cnt--;
8746                         updated = ap_free_sta(padapter, psta, _TRUE, WLAN_REASON_DEAUTH_LEAVING, _TRUE);
8747
8748                 }
8749                 _exit_critical_bh(&pstapriv->asoc_list_lock, &irqL);
8750
8751                 associated_clients_update(padapter, updated, STA_INFO_UPDATE_ALL);
8752
8753                 psta = NULL;
8754
8755         }
8756         else
8757         {
8758                 DBG_871X("rtw_del_sta(), sta has already been removed or never been added\n");
8759
8760                 //ret = -1;
8761         }
8762
8763
8764         return ret;
8765
8766 }
8767
8768 static int rtw_ioctl_get_sta_data(struct net_device *dev, struct ieee_param *param, int len)
8769 {
8770         int ret=0;
8771         struct sta_info *psta = NULL;
8772         _adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
8773         struct mlme_priv *pmlmepriv = &(padapter->mlmepriv);
8774         struct sta_priv *pstapriv = &padapter->stapriv;
8775         struct ieee_param_ex *param_ex = (struct ieee_param_ex *)param;
8776         struct sta_data *psta_data = (struct sta_data *)param_ex->data;
8777
8778         DBG_871X("rtw_ioctl_get_sta_info, sta_addr: " MAC_FMT "\n", MAC_ARG(param_ex->sta_addr));
8779
8780         if(check_fwstate(pmlmepriv, (_FW_LINKED|WIFI_AP_STATE)) != _TRUE)
8781         {
8782                 return -EINVAL;
8783         }
8784
8785         if (param_ex->sta_addr[0] == 0xff && param_ex->sta_addr[1] == 0xff &&
8786             param_ex->sta_addr[2] == 0xff && param_ex->sta_addr[3] == 0xff &&
8787             param_ex->sta_addr[4] == 0xff && param_ex->sta_addr[5] == 0xff)
8788         {
8789                 return -EINVAL;
8790         }
8791
8792         psta = rtw_get_stainfo(pstapriv, param_ex->sta_addr);
8793         if(psta)
8794         {
8795 #if 0
8796                 struct {
8797                         u16 aid;
8798                         u16 capability;
8799                         int flags;
8800                         u32 sta_set;
8801                         u8 tx_supp_rates[16];
8802                         u32 tx_supp_rates_len;
8803                         struct rtw_ieee80211_ht_cap ht_cap;
8804                         u64     rx_pkts;
8805                         u64     rx_bytes;
8806                         u64     rx_drops;
8807                         u64     tx_pkts;
8808                         u64     tx_bytes;
8809                         u64     tx_drops;
8810                 } get_sta;
8811 #endif
8812                 psta_data->aid = (u16)psta->aid;
8813                 psta_data->capability = psta->capability;
8814                 psta_data->flags = psta->flags;
8815
8816 /*
8817                 nonerp_set : BIT(0)
8818                 no_short_slot_time_set : BIT(1)
8819                 no_short_preamble_set : BIT(2)
8820                 no_ht_gf_set : BIT(3)
8821                 no_ht_set : BIT(4)
8822                 ht_20mhz_set : BIT(5)
8823 */
8824
8825                 psta_data->sta_set =((psta->nonerp_set) |
8826                                                         (psta->no_short_slot_time_set <<1) |
8827                                                         (psta->no_short_preamble_set <<2) |
8828                                                         (psta->no_ht_gf_set <<3) |
8829                                                         (psta->no_ht_set <<4) |
8830                                                         (psta->ht_20mhz_set <<5));
8831
8832                 psta_data->tx_supp_rates_len =  psta->bssratelen;
8833                 _rtw_memcpy(psta_data->tx_supp_rates, psta->bssrateset, psta->bssratelen);
8834 #ifdef CONFIG_80211N_HT
8835                 _rtw_memcpy(&psta_data->ht_cap, &psta->htpriv.ht_cap, sizeof(struct rtw_ieee80211_ht_cap));
8836 #endif //CONFIG_80211N_HT
8837                 psta_data->rx_pkts = psta->sta_stats.rx_data_pkts;
8838                 psta_data->rx_bytes = psta->sta_stats.rx_bytes;
8839                 psta_data->rx_drops = psta->sta_stats.rx_drops;
8840
8841                 psta_data->tx_pkts = psta->sta_stats.tx_pkts;
8842                 psta_data->tx_bytes = psta->sta_stats.tx_bytes;
8843                 psta_data->tx_drops = psta->sta_stats.tx_drops;
8844
8845
8846         }
8847         else
8848         {
8849                 ret = -1;
8850         }
8851
8852         return ret;
8853
8854 }
8855
8856 static int rtw_get_sta_wpaie(struct net_device *dev, struct ieee_param *param)
8857 {
8858         int ret=0;
8859         struct sta_info *psta = NULL;
8860         _adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
8861         struct mlme_priv *pmlmepriv = &(padapter->mlmepriv);
8862         struct sta_priv *pstapriv = &padapter->stapriv;
8863
8864         DBG_871X("rtw_get_sta_wpaie, sta_addr: " MAC_FMT "\n", MAC_ARG(param->sta_addr));
8865
8866         if(check_fwstate(pmlmepriv, (_FW_LINKED|WIFI_AP_STATE)) != _TRUE)
8867         {
8868                 return -EINVAL;
8869         }
8870
8871         if (param->sta_addr[0] == 0xff && param->sta_addr[1] == 0xff &&
8872             param->sta_addr[2] == 0xff && param->sta_addr[3] == 0xff &&
8873             param->sta_addr[4] == 0xff && param->sta_addr[5] == 0xff)
8874         {
8875                 return -EINVAL;
8876         }
8877
8878         psta = rtw_get_stainfo(pstapriv, param->sta_addr);
8879         if(psta)
8880         {
8881                 if((psta->wpa_ie[0] == WLAN_EID_RSN) || (psta->wpa_ie[0] == WLAN_EID_GENERIC))
8882                 {
8883                         int wpa_ie_len;
8884                         int copy_len;
8885
8886                         wpa_ie_len = psta->wpa_ie[1];
8887
8888                         copy_len = ((wpa_ie_len+2) > sizeof(psta->wpa_ie)) ? (sizeof(psta->wpa_ie)):(wpa_ie_len+2);
8889
8890                         param->u.wpa_ie.len = copy_len;
8891
8892                         _rtw_memcpy(param->u.wpa_ie.reserved, psta->wpa_ie, copy_len);
8893                 }
8894                 else
8895                 {
8896                         //ret = -1;
8897                         DBG_871X("sta's wpa_ie is NONE\n");
8898                 }
8899         }
8900         else
8901         {
8902                 ret = -1;
8903         }
8904
8905         return ret;
8906
8907 }
8908
8909 static int rtw_set_wps_beacon(struct net_device *dev, struct ieee_param *param, int len)
8910 {
8911         int ret=0;
8912         unsigned char wps_oui[4]={0x0,0x50,0xf2,0x04};
8913         _adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
8914         struct mlme_priv *pmlmepriv = &(padapter->mlmepriv);
8915         struct mlme_ext_priv    *pmlmeext = &(padapter->mlmeextpriv);
8916         struct mlme_ext_info    *pmlmeinfo = &(pmlmeext->mlmext_info);
8917         int ie_len;
8918
8919         DBG_871X("%s, len=%d\n", __FUNCTION__, len);
8920
8921         if(check_fwstate(pmlmepriv, WIFI_AP_STATE) != _TRUE)
8922                 return -EINVAL;
8923
8924         ie_len = len-12-2;// 12 = param header, 2:no packed
8925
8926
8927         if(pmlmepriv->wps_beacon_ie)
8928         {
8929                 rtw_mfree(pmlmepriv->wps_beacon_ie, pmlmepriv->wps_beacon_ie_len);
8930                 pmlmepriv->wps_beacon_ie = NULL;
8931         }
8932
8933         if(ie_len>0)
8934         {
8935                 pmlmepriv->wps_beacon_ie = rtw_malloc(ie_len);
8936                 pmlmepriv->wps_beacon_ie_len = ie_len;
8937                 if ( pmlmepriv->wps_beacon_ie == NULL) {
8938                         DBG_871X("%s()-%d: rtw_malloc() ERROR!\n", __FUNCTION__, __LINE__);
8939                         return -EINVAL;
8940                 }
8941
8942                 _rtw_memcpy(pmlmepriv->wps_beacon_ie, param->u.bcn_ie.buf, ie_len);
8943
8944                 update_beacon(padapter, _VENDOR_SPECIFIC_IE_, wps_oui, _TRUE);
8945
8946                 pmlmeext->bstart_bss = _TRUE;
8947
8948         }
8949
8950
8951         return ret;
8952
8953 }
8954
8955 static int rtw_set_wps_probe_resp(struct net_device *dev, struct ieee_param *param, int len)
8956 {
8957         int ret=0;
8958         _adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
8959         struct mlme_priv *pmlmepriv = &(padapter->mlmepriv);
8960         int ie_len;
8961
8962         DBG_871X("%s, len=%d\n", __FUNCTION__, len);
8963
8964         if(check_fwstate(pmlmepriv, WIFI_AP_STATE) != _TRUE)
8965                 return -EINVAL;
8966
8967         ie_len = len-12-2;// 12 = param header, 2:no packed
8968
8969
8970         if(pmlmepriv->wps_probe_resp_ie)
8971         {
8972                 rtw_mfree(pmlmepriv->wps_probe_resp_ie, pmlmepriv->wps_probe_resp_ie_len);
8973                 pmlmepriv->wps_probe_resp_ie = NULL;
8974         }
8975
8976         if(ie_len>0)
8977         {
8978                 pmlmepriv->wps_probe_resp_ie = rtw_malloc(ie_len);
8979                 pmlmepriv->wps_probe_resp_ie_len = ie_len;
8980                 if ( pmlmepriv->wps_probe_resp_ie == NULL) {
8981                         DBG_871X("%s()-%d: rtw_malloc() ERROR!\n", __FUNCTION__, __LINE__);
8982                         return -EINVAL;
8983                 }
8984                 _rtw_memcpy(pmlmepriv->wps_probe_resp_ie, param->u.bcn_ie.buf, ie_len);
8985         }
8986
8987
8988         return ret;
8989
8990 }
8991
8992 static int rtw_set_wps_assoc_resp(struct net_device *dev, struct ieee_param *param, int len)
8993 {
8994         int ret=0;
8995         _adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
8996         struct mlme_priv *pmlmepriv = &(padapter->mlmepriv);
8997         int ie_len;
8998
8999         DBG_871X("%s, len=%d\n", __FUNCTION__, len);
9000
9001         if(check_fwstate(pmlmepriv, WIFI_AP_STATE) != _TRUE)
9002                 return -EINVAL;
9003
9004         ie_len = len-12-2;// 12 = param header, 2:no packed
9005
9006
9007         if(pmlmepriv->wps_assoc_resp_ie)
9008         {
9009                 rtw_mfree(pmlmepriv->wps_assoc_resp_ie, pmlmepriv->wps_assoc_resp_ie_len);
9010                 pmlmepriv->wps_assoc_resp_ie = NULL;
9011         }
9012
9013         if(ie_len>0)
9014         {
9015                 pmlmepriv->wps_assoc_resp_ie = rtw_malloc(ie_len);
9016                 pmlmepriv->wps_assoc_resp_ie_len = ie_len;
9017                 if ( pmlmepriv->wps_assoc_resp_ie == NULL) {
9018                         DBG_871X("%s()-%d: rtw_malloc() ERROR!\n", __FUNCTION__, __LINE__);
9019                         return -EINVAL;
9020                 }
9021
9022                 _rtw_memcpy(pmlmepriv->wps_assoc_resp_ie, param->u.bcn_ie.buf, ie_len);
9023         }
9024
9025
9026         return ret;
9027
9028 }
9029
9030 static int rtw_set_hidden_ssid(struct net_device *dev, struct ieee_param *param, int len)
9031 {
9032         int ret=0;
9033         _adapter *adapter = (_adapter *)rtw_netdev_priv(dev);
9034         struct mlme_priv *mlmepriv = &(adapter->mlmepriv);
9035         struct mlme_ext_priv    *mlmeext = &(adapter->mlmeextpriv);
9036         struct mlme_ext_info    *mlmeinfo = &(mlmeext->mlmext_info);
9037         int ie_len;
9038         u8 *ssid_ie;
9039         char ssid[NDIS_802_11_LENGTH_SSID + 1];
9040         sint ssid_len = 0;
9041         u8 ignore_broadcast_ssid;
9042
9043         if(check_fwstate(mlmepriv, WIFI_AP_STATE) != _TRUE)
9044                 return -EPERM;
9045
9046         if (param->u.bcn_ie.reserved[0] != 0xea)
9047                 return -EINVAL;
9048
9049         mlmeinfo->hidden_ssid_mode = ignore_broadcast_ssid = param->u.bcn_ie.reserved[1];
9050
9051         ie_len = len-12-2;// 12 = param header, 2:no packed
9052         ssid_ie = rtw_get_ie(param->u.bcn_ie.buf,  WLAN_EID_SSID, &ssid_len, ie_len);
9053
9054         if (ssid_ie && ssid_len > 0 && ssid_len <= NDIS_802_11_LENGTH_SSID) {
9055                 WLAN_BSSID_EX *pbss_network = &mlmepriv->cur_network.network;
9056                 WLAN_BSSID_EX *pbss_network_ext = &mlmeinfo->network;
9057
9058                 _rtw_memcpy(ssid, ssid_ie+2, ssid_len);
9059                 ssid[ssid_len] = 0x0;
9060
9061                 if(0)
9062                         DBG_871X(FUNC_ADPT_FMT" ssid:(%s,%d), from ie:(%s,%d), (%s,%d)\n", FUNC_ADPT_ARG(adapter),
9063                                 ssid, ssid_len,
9064                                 pbss_network->Ssid.Ssid, pbss_network->Ssid.SsidLength,
9065                                 pbss_network_ext->Ssid.Ssid, pbss_network_ext->Ssid.SsidLength);
9066
9067                 _rtw_memcpy(pbss_network->Ssid.Ssid, (void *)ssid, ssid_len);
9068                 pbss_network->Ssid.SsidLength = ssid_len;
9069                 _rtw_memcpy(pbss_network_ext->Ssid.Ssid, (void *)ssid, ssid_len);
9070                 pbss_network_ext->Ssid.SsidLength = ssid_len;
9071
9072                 if(0)
9073                         DBG_871X(FUNC_ADPT_FMT" after ssid:(%s,%d), (%s,%d)\n", FUNC_ADPT_ARG(adapter),
9074                                 pbss_network->Ssid.Ssid, pbss_network->Ssid.SsidLength,
9075                                 pbss_network_ext->Ssid.Ssid, pbss_network_ext->Ssid.SsidLength);
9076         }
9077
9078         DBG_871X(FUNC_ADPT_FMT" ignore_broadcast_ssid:%d, %s,%d\n", FUNC_ADPT_ARG(adapter),
9079                 ignore_broadcast_ssid, ssid, ssid_len);
9080
9081         return ret;
9082 }
9083
9084 static int rtw_ioctl_acl_remove_sta(struct net_device *dev, struct ieee_param *param, int len)
9085 {
9086         int ret=0;
9087         _adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
9088         struct mlme_priv *pmlmepriv = &(padapter->mlmepriv);
9089
9090         if(check_fwstate(pmlmepriv, WIFI_AP_STATE) != _TRUE)
9091                 return -EINVAL;
9092
9093         if (param->sta_addr[0] == 0xff && param->sta_addr[1] == 0xff &&
9094             param->sta_addr[2] == 0xff && param->sta_addr[3] == 0xff &&
9095             param->sta_addr[4] == 0xff && param->sta_addr[5] == 0xff)
9096         {
9097                 return -EINVAL;
9098         }
9099
9100         ret = rtw_acl_remove_sta(padapter, param->sta_addr);
9101
9102         return ret;
9103
9104 }
9105
9106 static int rtw_ioctl_acl_add_sta(struct net_device *dev, struct ieee_param *param, int len)
9107 {
9108         int ret=0;
9109         _adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
9110         struct mlme_priv *pmlmepriv = &(padapter->mlmepriv);
9111
9112         if(check_fwstate(pmlmepriv, WIFI_AP_STATE) != _TRUE)
9113                 return -EINVAL;
9114
9115         if (param->sta_addr[0] == 0xff && param->sta_addr[1] == 0xff &&
9116             param->sta_addr[2] == 0xff && param->sta_addr[3] == 0xff &&
9117             param->sta_addr[4] == 0xff && param->sta_addr[5] == 0xff)
9118         {
9119                 return -EINVAL;
9120         }
9121
9122         ret = rtw_acl_add_sta(padapter, param->sta_addr);
9123
9124         return ret;
9125
9126 }
9127
9128 static int rtw_ioctl_set_macaddr_acl(struct net_device *dev, struct ieee_param *param, int len)
9129 {
9130         int ret=0;
9131         _adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
9132         struct mlme_priv *pmlmepriv = &(padapter->mlmepriv);
9133
9134         if(check_fwstate(pmlmepriv, WIFI_AP_STATE) != _TRUE)
9135                 return -EINVAL;
9136
9137         rtw_set_macaddr_acl(padapter, param->u.mlme.command);
9138
9139         return ret;
9140 }
9141
9142 static int rtw_hostapd_ioctl(struct net_device *dev, struct iw_point *p)
9143 {
9144         struct ieee_param *param;
9145         int ret=0;
9146         _adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
9147
9148         //DBG_871X("%s\n", __FUNCTION__);
9149
9150         /*
9151         * this function is expect to call in master mode, which allows no power saving
9152         * so, we just check hw_init_completed
9153         */
9154
9155         if (!rtw_is_hw_init_completed(padapter)) {
9156                 ret = -EPERM;
9157                 goto out;
9158         }
9159
9160
9161         //if (p->length < sizeof(struct ieee_param) || !p->pointer){
9162         if(!p->pointer){
9163                 ret = -EINVAL;
9164                 goto out;
9165         }
9166
9167         param = (struct ieee_param *)rtw_malloc(p->length);
9168         if (param == NULL)
9169         {
9170                 ret = -ENOMEM;
9171                 goto out;
9172         }
9173
9174         if (copy_from_user(param, p->pointer, p->length))
9175         {
9176                 rtw_mfree((u8*)param, p->length);
9177                 ret = -EFAULT;
9178                 goto out;
9179         }
9180
9181         //DBG_871X("%s, cmd=%d\n", __FUNCTION__, param->cmd);
9182
9183         switch (param->cmd)
9184         {
9185                 case RTL871X_HOSTAPD_FLUSH:
9186
9187                         ret = rtw_hostapd_sta_flush(dev);
9188
9189                         break;
9190
9191                 case RTL871X_HOSTAPD_ADD_STA:
9192
9193                         ret = rtw_add_sta(dev, param);
9194
9195                         break;
9196
9197                 case RTL871X_HOSTAPD_REMOVE_STA:
9198
9199                         ret = rtw_del_sta(dev, param);
9200
9201                         break;
9202
9203                 case RTL871X_HOSTAPD_SET_BEACON:
9204
9205                         ret = rtw_set_beacon(dev, param, p->length);
9206
9207                         break;
9208
9209                 case RTL871X_SET_ENCRYPTION:
9210
9211                         ret = rtw_set_encryption(dev, param, p->length);
9212
9213                         break;
9214
9215                 case RTL871X_HOSTAPD_GET_WPAIE_STA:
9216
9217                         ret = rtw_get_sta_wpaie(dev, param);
9218
9219                         break;
9220
9221                 case RTL871X_HOSTAPD_SET_WPS_BEACON:
9222
9223                         ret = rtw_set_wps_beacon(dev, param, p->length);
9224
9225                         break;
9226
9227                 case RTL871X_HOSTAPD_SET_WPS_PROBE_RESP:
9228
9229                         ret = rtw_set_wps_probe_resp(dev, param, p->length);
9230
9231                         break;
9232
9233                 case RTL871X_HOSTAPD_SET_WPS_ASSOC_RESP:
9234
9235                         ret = rtw_set_wps_assoc_resp(dev, param, p->length);
9236
9237                         break;
9238
9239                 case RTL871X_HOSTAPD_SET_HIDDEN_SSID:
9240
9241                         ret = rtw_set_hidden_ssid(dev, param, p->length);
9242
9243                         break;
9244
9245                 case RTL871X_HOSTAPD_GET_INFO_STA:
9246
9247                         ret = rtw_ioctl_get_sta_data(dev, param, p->length);
9248
9249                         break;
9250
9251                 case RTL871X_HOSTAPD_SET_MACADDR_ACL:
9252
9253                         ret = rtw_ioctl_set_macaddr_acl(dev, param, p->length);
9254
9255                         break;
9256
9257                 case RTL871X_HOSTAPD_ACL_ADD_STA:
9258
9259                         ret = rtw_ioctl_acl_add_sta(dev, param, p->length);
9260
9261                         break;
9262
9263                 case RTL871X_HOSTAPD_ACL_REMOVE_STA:
9264
9265                         ret = rtw_ioctl_acl_remove_sta(dev, param, p->length);
9266
9267                         break;
9268
9269                 default:
9270                         DBG_871X("Unknown hostapd request: %d\n", param->cmd);
9271                         ret = -EOPNOTSUPP;
9272                         break;
9273
9274         }
9275
9276         if (ret == 0 && copy_to_user(p->pointer, param, p->length))
9277                 ret = -EFAULT;
9278
9279
9280         rtw_mfree((u8 *)param, p->length);
9281
9282 out:
9283
9284         return ret;
9285
9286 }
9287 #endif
9288
9289 static int rtw_wx_set_priv(struct net_device *dev,
9290                                 struct iw_request_info *info,
9291                                 union iwreq_data *awrq,
9292                                 char *extra)
9293 {
9294
9295 #ifdef CONFIG_DEBUG_RTW_WX_SET_PRIV
9296         char *ext_dbg;
9297 #endif
9298
9299         int ret = 0;
9300         int len = 0;
9301         char *ext;
9302         int i;
9303
9304         _adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
9305         struct iw_point *dwrq = (struct iw_point*)awrq;
9306
9307         //RT_TRACE(_module_rtl871x_ioctl_os_c, _drv_notice_, ("+rtw_wx_set_priv\n"));
9308         if(dwrq->length == 0)
9309                 return -EFAULT;
9310
9311         len = dwrq->length;
9312         if (!(ext = rtw_vmalloc(len)))
9313                 return -ENOMEM;
9314
9315         if (copy_from_user(ext, dwrq->pointer, len)) {
9316                 rtw_vmfree(ext, len);
9317                 return -EFAULT;
9318         }
9319
9320
9321         //RT_TRACE(_module_rtl871x_ioctl_os_c, _drv_notice_,
9322         //       ("rtw_wx_set_priv: %s req=%s\n",
9323         //        dev->name, ext));
9324
9325         #ifdef CONFIG_DEBUG_RTW_WX_SET_PRIV
9326         if (!(ext_dbg = rtw_vmalloc(len)))
9327         {
9328                 rtw_vmfree(ext, len);
9329                 return -ENOMEM;
9330         }
9331
9332         _rtw_memcpy(ext_dbg, ext, len);
9333         #endif
9334
9335         //added for wps2.0 @20110524
9336         if(dwrq->flags == 0x8766 && len > 8)
9337         {
9338                 u32 cp_sz;
9339                 struct mlme_priv *pmlmepriv = &(padapter->mlmepriv);
9340                 u8 *probereq_wpsie = ext;
9341                 int probereq_wpsie_len = len;
9342                 u8 wps_oui[4]={0x0,0x50,0xf2,0x04};
9343
9344                 if((_VENDOR_SPECIFIC_IE_ == probereq_wpsie[0]) &&
9345                         (_rtw_memcmp(&probereq_wpsie[2], wps_oui, 4) ==_TRUE))
9346                 {
9347                         cp_sz = probereq_wpsie_len>MAX_WPS_IE_LEN ? MAX_WPS_IE_LEN:probereq_wpsie_len;
9348
9349                         if(pmlmepriv->wps_probe_req_ie)
9350                         {
9351                                 u32 free_len = pmlmepriv->wps_probe_req_ie_len;
9352                                 pmlmepriv->wps_probe_req_ie_len = 0;
9353                                 rtw_mfree(pmlmepriv->wps_probe_req_ie, free_len);
9354                                 pmlmepriv->wps_probe_req_ie = NULL;
9355                         }
9356
9357                         pmlmepriv->wps_probe_req_ie = rtw_malloc(cp_sz);
9358                         if ( pmlmepriv->wps_probe_req_ie == NULL) {
9359                                 printk("%s()-%d: rtw_malloc() ERROR!\n", __FUNCTION__, __LINE__);
9360                                 ret =  -EINVAL;
9361                                 goto FREE_EXT;
9362
9363                         }
9364
9365                         _rtw_memcpy(pmlmepriv->wps_probe_req_ie, probereq_wpsie, cp_sz);
9366                         pmlmepriv->wps_probe_req_ie_len = cp_sz;
9367
9368                 }
9369
9370                 goto FREE_EXT;
9371
9372         }
9373
9374         if(     len >= WEXT_CSCAN_HEADER_SIZE
9375                 && _rtw_memcmp(ext, WEXT_CSCAN_HEADER, WEXT_CSCAN_HEADER_SIZE) == _TRUE
9376         ){
9377                 ret = rtw_wx_set_scan(dev, info, awrq, ext);
9378                 goto FREE_EXT;
9379         }
9380
9381 #ifdef CONFIG_ANDROID
9382         //DBG_871X("rtw_wx_set_priv: %s req=%s\n", dev->name, ext);
9383
9384         i = rtw_android_cmdstr_to_num(ext);
9385
9386         switch(i) {
9387                 case ANDROID_WIFI_CMD_START :
9388                         indicate_wx_custom_event(padapter, "START");
9389                         break;
9390                 case ANDROID_WIFI_CMD_STOP :
9391                         indicate_wx_custom_event(padapter, "STOP");
9392                         break;
9393                 case ANDROID_WIFI_CMD_RSSI :
9394                         {
9395                                 struct  mlme_priv       *pmlmepriv = &(padapter->mlmepriv);
9396                                 struct  wlan_network    *pcur_network = &pmlmepriv->cur_network;
9397
9398                                 if(check_fwstate(pmlmepriv, _FW_LINKED) == _TRUE) {
9399                                         sprintf(ext, "%s rssi %d", pcur_network->network.Ssid.Ssid, padapter->recvpriv.rssi);
9400                                 } else {
9401                                         sprintf(ext, "OK");
9402                                 }
9403                         }
9404                         break;
9405                 case ANDROID_WIFI_CMD_LINKSPEED :
9406                         {
9407                                 u16 mbps = rtw_get_cur_max_rate(padapter)/10;
9408                                 sprintf(ext, "LINKSPEED %d", mbps);
9409                         }
9410                         break;
9411                 case ANDROID_WIFI_CMD_MACADDR :
9412                         sprintf(ext, "MACADDR = " MAC_FMT, MAC_ARG(dev->dev_addr));
9413                         break;
9414                 case ANDROID_WIFI_CMD_SCAN_ACTIVE :
9415                         {
9416                                 //rtw_set_scan_mode(padapter, SCAN_ACTIVE);
9417                                 sprintf(ext, "OK");
9418                         }
9419                         break;
9420                 case ANDROID_WIFI_CMD_SCAN_PASSIVE :
9421                         {
9422                                 //rtw_set_scan_mode(padapter, SCAN_PASSIVE);
9423                                 sprintf(ext, "OK");
9424                         }
9425                         break;
9426
9427                 case ANDROID_WIFI_CMD_COUNTRY :
9428                         {
9429                                 char country_code[10];
9430                                 sscanf(ext, "%*s %s", country_code);
9431                                 rtw_set_country(padapter, country_code);
9432                                 sprintf(ext, "OK");
9433                         }
9434                         break;
9435                 default :
9436                         #ifdef  CONFIG_DEBUG_RTW_WX_SET_PRIV
9437                         DBG_871X("%s: %s unknowned req=%s\n", __FUNCTION__,
9438                                 dev->name, ext_dbg);
9439                         #endif
9440
9441                         sprintf(ext, "OK");
9442
9443         }
9444
9445         if (copy_to_user(dwrq->pointer, ext, min(dwrq->length, (u16)(strlen(ext)+1)) ) )
9446                 ret = -EFAULT;
9447
9448         #ifdef CONFIG_DEBUG_RTW_WX_SET_PRIV
9449         DBG_871X("%s: %s req=%s rep=%s dwrq->length=%d, strlen(ext)+1=%d\n", __FUNCTION__,
9450                 dev->name, ext_dbg ,ext, dwrq->length, (u16)(strlen(ext)+1));
9451         #endif
9452 #endif //end of CONFIG_ANDROID
9453
9454
9455 FREE_EXT:
9456
9457         rtw_vmfree(ext, len);
9458         #ifdef CONFIG_DEBUG_RTW_WX_SET_PRIV
9459         rtw_vmfree(ext_dbg, len);
9460         #endif
9461
9462         //DBG_871X("rtw_wx_set_priv: (SIOCSIWPRIV) %s ret=%d\n",
9463         //              dev->name, ret);
9464
9465         return ret;
9466
9467 }
9468 #ifdef CONFIG_WOWLAN
9469 static int rtw_wowlan_ctrl(struct net_device *dev,
9470                                                 struct iw_request_info *info,
9471                                                 union iwreq_data *wrqu, char *extra)
9472 {
9473         _adapter *padapter =  (_adapter *)rtw_netdev_priv(dev);
9474         struct wowlan_ioctl_param poidparam;
9475         struct pwrctrl_priv *pwrctrlpriv = adapter_to_pwrctl(padapter);
9476         struct mlme_priv *pmlmepriv = &padapter->mlmepriv;
9477         struct net_device *pnetdev = padapter->pnetdev;
9478 #ifdef CONFIG_CONCURRENT_MODE
9479         struct net_device *pbuddy_netdev = padapter->pbuddy_adapter->pnetdev;
9480 #endif
9481         struct sta_info *psta = NULL;
9482         int ret = 0;
9483         u32 start_time = rtw_get_current_time();
9484         poidparam.subcode = 0;
9485
9486         DBG_871X("+rtw_wowlan_ctrl: %s\n", extra);
9487
9488         if (!check_fwstate(pmlmepriv, _FW_LINKED) &&
9489                         check_fwstate(pmlmepriv, WIFI_STATION_STATE)) {
9490 #ifdef CONFIG_PNO_SUPPORT
9491                         pwrctrlpriv->wowlan_pno_enable = _TRUE;
9492 #else
9493                         DBG_871X("[%s] WARNING: Please Connect With AP First!!\n", __func__);
9494                         goto _rtw_wowlan_ctrl_exit_free;
9495 #endif //CONFIG_PNO_SUPPORT
9496         }
9497
9498         if (check_fwstate(pmlmepriv, _FW_UNDER_SURVEY))
9499                 rtw_scan_abort(padapter);
9500
9501         if (_rtw_memcmp(extra, "enable", 6)) {
9502
9503                 padapter->registrypriv.mp_mode = 1;
9504
9505                 rtw_suspend_common(padapter);
9506
9507         } else if (_rtw_memcmp(extra, "disable", 7)) {
9508 #ifdef CONFIG_USB_HCI
9509                 RTW_ENABLE_FUNC(padapter, DF_RX_BIT);
9510                 RTW_ENABLE_FUNC(padapter, DF_TX_BIT);
9511 #endif
9512                 rtw_resume_common(padapter);
9513
9514 #ifdef CONFIG_PNO_SUPPORT
9515                 pwrctrlpriv->wowlan_pno_enable = _FALSE;
9516 #endif //CONFIG_PNO_SUPPORT
9517
9518                 padapter->registrypriv.mp_mode = 0;
9519         } else {
9520                 DBG_871X("[%s] Invalid Parameter.\n", __func__);
9521                 goto _rtw_wowlan_ctrl_exit_free;
9522         }
9523         //mutex_lock(&ioctl_mutex);
9524 _rtw_wowlan_ctrl_exit_free:
9525         DBG_871X("-rtw_wowlan_ctrl( subcode = %d)\n", poidparam.subcode);
9526         DBG_871X_LEVEL(_drv_always_, "%s in %d ms\n", __func__,
9527                         rtw_get_passing_time_ms(start_time));
9528 _rtw_wowlan_ctrl_exit:
9529         return ret;
9530 }
9531
9532 static bool rtw_wowlan_parser_pattern_cmd(u8 *input, char *pattern,
9533                                           int *pattern_len, char *bit_mask)
9534 {
9535         char *cp = NULL, *end = NULL;
9536         size_t len = 0;
9537         int pos = 0, mask_pos = 0, res = 0;
9538         u8 member[2] = {0};
9539
9540         cp = strchr(input, '=');
9541         if (cp) {
9542                 *cp = 0;
9543                 cp++;
9544         }
9545
9546         input = cp;
9547
9548         while (1) {
9549                 cp = strchr(input, ':');
9550
9551                 if (cp) {
9552                         len = strlen(input) - strlen(cp);
9553                         *cp = 0;
9554                         cp++;
9555                 } else {
9556                         len = 2;
9557                 }
9558
9559                 if (bit_mask && (strcmp(input, "-") == 0 ||
9560                                  strcmp(input, "xx") == 0 ||
9561                                  strcmp(input, "--") == 0)) {
9562                         /* skip this byte and leave mask bit unset */
9563                 } else {
9564                         u8 hex;
9565                         strncpy(member, input, len);
9566                         if (!rtw_check_pattern_valid(member, sizeof(member))) {
9567                                 DBG_871X("%s:[ERROR] pattern is invalid!!\n",
9568                                          __func__);
9569                                 goto error;
9570                         }
9571
9572                         res = sscanf(member, "%02hhx", &hex);
9573                         pattern[pos] = hex;
9574                         mask_pos = pos / 8;
9575                         if (bit_mask)
9576                                 bit_mask[mask_pos] |= 1 << (pos % 8);
9577                 }
9578
9579                 pos++;
9580                 if (!cp)
9581                         break;
9582                 input = cp;
9583         }
9584
9585         (*pattern_len) = pos;
9586
9587         return _TRUE;
9588 error:
9589         return _FALSE;
9590 }
9591
9592 /*
9593  * IP filter This pattern if for a frame containing a ip packet:
9594  * AA:AA:AA:AA:AA:AA:BB:BB:BB:BB:BB:BB:CC:CC:DD:-:-:-:-:-:-:-:-:EE:-:-:FF:FF:FF:FF:GG:GG:GG:GG:HH:HH:II:II
9595  *
9596  * A: Ethernet destination address
9597  * B: Ethernet source address
9598  * C: Ethernet protocol type
9599  * D: IP header VER+Hlen, use: 0x45 (4 is for ver 4, 5 is for len 20)
9600  * E: IP protocol
9601  * F: IP source address ( 192.168.0.4: C0:A8:00:2C )
9602  * G: IP destination address ( 192.168.0.4: C0:A8:00:2C )
9603  * H: Source port (1024: 04:00)
9604  * I: Destination port (1024: 04:00)
9605  */
9606
9607 static int rtw_wowlan_set_pattern(struct net_device *dev,
9608                                   struct iw_request_info *info,
9609                                   union iwreq_data *wrqu, char *extra)
9610 {
9611         _adapter *padapter =  (_adapter *)rtw_netdev_priv(dev);
9612         struct pwrctrl_priv *pwrpriv = adapter_to_pwrctl(padapter);
9613         struct mlme_priv *pmlmepriv = &padapter->mlmepriv;
9614         struct wowlan_ioctl_param poidparam;
9615         int ret = 0, len = 0, i = 0;
9616         u32 start_time = rtw_get_current_time();
9617         u8 input[wrqu->data.length];
9618         u8 index = 0;
9619
9620         poidparam.subcode = 0;
9621
9622         if (!check_fwstate(pmlmepriv, _FW_LINKED) &&
9623                         check_fwstate(pmlmepriv, WIFI_STATION_STATE)) {
9624                 ret = -EFAULT;
9625                 DBG_871X("Please Connect With AP First!!\n");
9626                 goto _rtw_wowlan_set_pattern_exit;
9627         }
9628
9629         if (wrqu->data.length <= 0) {
9630                 ret = -EFAULT;
9631                 DBG_871X("ERROR: parameter length <= 0\n");
9632                 goto _rtw_wowlan_set_pattern_exit;
9633         } else {
9634                 /* set pattern */
9635                 if (copy_from_user(input,
9636                                    wrqu->data.pointer, wrqu->data.length))
9637                         return -EFAULT;
9638                 /* leave PS first */
9639                 rtw_ps_deny(padapter, PS_DENY_IOCTL);
9640                 LeaveAllPowerSaveModeDirect(padapter);
9641                 if (strncmp(input, "pattern=", 8) == 0) {
9642                         if (pwrpriv->wowlan_pattern_idx >= MAX_WKFM_NUM) {
9643                                 DBG_871X("WARNING: priv-pattern is full(%d)\n",
9644                                                 MAX_WKFM_NUM);
9645                                 DBG_871X("WARNING: please clean priv-pattern first\n");
9646                                 ret = -EINVAL;
9647                                 goto _rtw_wowlan_set_pattern_exit;
9648                         } else {
9649                                 index = pwrpriv->wowlan_pattern_idx;
9650
9651                                 ret = rtw_wowlan_parser_pattern_cmd(input,
9652                                         pwrpriv->patterns[index].content,
9653                                         &pwrpriv->patterns[index].len,
9654                                         pwrpriv->patterns[index].mask);
9655
9656                                 if (ret == _TRUE) {
9657                                         pwrpriv->wowlan_pattern_idx++;
9658                                         pwrpriv->wowlan_pattern = _TRUE;
9659                                 }
9660                         }
9661                 } else if (strncmp(input, "clean", 5) == 0) {
9662                         poidparam.subcode = WOWLAN_PATTERN_CLEAN;
9663                         rtw_hal_set_hwreg(padapter,
9664                                         HW_VAR_WOWLAN, (u8 *)&poidparam);
9665                         pwrpriv->wowlan_pattern = _FALSE;
9666                 } else if (strncmp(input, "show", 4) == 0) {
9667                         for (i = 0 ; i < MAX_WKFM_NUM ; i++) {
9668                                 DBG_871X("=======[%d]=======\n", i);
9669                                 rtw_read_from_frame_mask(padapter, i);
9670                         }
9671
9672                         DBG_871X("********[RTK priv-patterns]*********\n");
9673                         for (i = 0 ; i < MAX_WKFM_NUM ; i++)
9674                                 rtw_dump_priv_pattern(padapter, i);
9675                 } else {
9676                         DBG_871X("ERROR: incorrect parameter!\n");
9677                         ret = -EINVAL;
9678                 }
9679                 rtw_ps_deny_cancel(padapter, PS_DENY_IOCTL);
9680         }
9681 _rtw_wowlan_set_pattern_exit:
9682         return ret;
9683 }
9684 #endif //CONFIG_WOWLAN
9685
9686 #ifdef CONFIG_AP_WOWLAN
9687 static int rtw_ap_wowlan_ctrl(struct net_device *dev,
9688                                                 struct iw_request_info *info,
9689                                                 union iwreq_data *wrqu, char *extra)
9690 {
9691         _adapter *padapter =  (_adapter *)rtw_netdev_priv(dev);
9692         struct wowlan_ioctl_param poidparam;
9693         struct pwrctrl_priv *pwrctrlpriv = adapter_to_pwrctl(padapter);
9694         struct mlme_priv *pmlmepriv = &padapter->mlmepriv;
9695         struct sta_info *psta = NULL;
9696         int ret = 0;
9697         u32 start_time = rtw_get_current_time();
9698         poidparam.subcode = 0;
9699
9700         DBG_871X("+rtw_ap_wowlan_ctrl: %s\n", extra);
9701
9702         if (!check_fwstate(pmlmepriv, WIFI_AP_STATE)) {
9703                 DBG_871X("[%s] It is not AP mode!!\n", __func__);
9704                 goto _rtw_ap_wowlan_ctrl_exit_free;
9705         }
9706
9707         if (_rtw_memcmp(extra, "enable", 6)) {
9708
9709                 pwrctrlpriv->wowlan_ap_mode = _TRUE;
9710
9711                 rtw_suspend_common(padapter);
9712         } else if (_rtw_memcmp(extra, "disable", 7)) {
9713 #ifdef CONFIG_USB_HCI
9714                 RTW_ENABLE_FUNC(padapter, DF_RX_BIT);
9715                 RTW_ENABLE_FUNC(padapter, DF_TX_BIT);
9716 #endif
9717                 rtw_resume_common(padapter);
9718         } else {
9719                 DBG_871X("[%s] Invalid Parameter.\n", __func__);
9720                 goto _rtw_ap_wowlan_ctrl_exit_free;
9721         }
9722         //mutex_lock(&ioctl_mutex);
9723 _rtw_ap_wowlan_ctrl_exit_free:
9724         DBG_871X("-rtw_ap_wowlan_ctrl( subcode = %d)\n", poidparam.subcode);
9725         DBG_871X_LEVEL(_drv_always_, "%s in %d ms\n", __func__,
9726                         rtw_get_passing_time_ms(start_time));
9727 _rtw_ap_wowlan_ctrl_exit:
9728         return ret;
9729 }
9730 #endif //CONFIG_AP_WOWLAN
9731
9732 static int rtw_pm_set(struct net_device *dev,
9733                                struct iw_request_info *info,
9734                                union iwreq_data *wrqu, char *extra)
9735 {
9736         int ret = 0;
9737         unsigned        mode = 0;
9738         _adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
9739
9740         DBG_871X( "[%s] extra = %s\n", __FUNCTION__, extra );
9741
9742         if ( _rtw_memcmp( extra, "lps=", 4 ) )
9743         {
9744                 sscanf(extra+4, "%u", &mode);
9745                 ret = rtw_pm_set_lps(padapter,mode);
9746         }
9747         else if ( _rtw_memcmp( extra, "ips=", 4 ) )
9748         {
9749                 sscanf(extra+4, "%u", &mode);
9750                 ret = rtw_pm_set_ips(padapter,mode);
9751         }
9752         else{
9753                 ret = -EINVAL;
9754         }
9755
9756         return ret;
9757 }
9758
9759 static int rtw_mp_efuse_get(struct net_device *dev,
9760                         struct iw_request_info *info,
9761                         union iwreq_data *wdata, char *extra)
9762 {
9763         PADAPTER padapter = rtw_netdev_priv(dev);
9764         HAL_DATA_TYPE   *pHalData = GET_HAL_DATA(padapter);
9765
9766         PEFUSE_HAL pEfuseHal;
9767         struct iw_point *wrqu;
9768
9769         u8      *PROMContent = pHalData->efuse_eeprom_data;
9770         u8 ips_mode = IPS_NUM; // init invalid value
9771         u8 lps_mode = PS_MODE_NUM; // init invalid value
9772         struct pwrctrl_priv *pwrctrlpriv ;
9773         u8 *data = NULL;
9774         u8 *rawdata = NULL;
9775         char *pch, *ptmp, *token, *tmp[3]={0x00,0x00,0x00};
9776         u16 i=0, j=0, mapLen=0, addr=0, cnts=0;
9777         u16 max_available_len = 0, raw_cursize = 0, raw_maxsize = 0;
9778         int err;
9779         #ifdef CONFIG_IOL
9780         u8 org_fw_iol = padapter->registrypriv.fw_iol;// 0:Disable, 1:enable, 2:by usb speed
9781         #endif
9782
9783         wrqu = (struct iw_point*)wdata;
9784         pwrctrlpriv = adapter_to_pwrctl(padapter);
9785         pEfuseHal = &pHalData->EfuseHal;
9786
9787         err = 0;
9788         data = rtw_zmalloc(EFUSE_BT_MAX_MAP_LEN);
9789         if (data == NULL)
9790         {
9791                 err = -ENOMEM;
9792                 goto exit;
9793         }
9794         rawdata = rtw_zmalloc(EFUSE_BT_MAX_MAP_LEN);
9795         if (rawdata == NULL)
9796         {
9797                 err = -ENOMEM;
9798                 goto exit;
9799         }
9800
9801         if (copy_from_user(extra, wrqu->pointer, wrqu->length))
9802         {
9803                 err = -EFAULT;
9804                 goto exit;
9805         }
9806         #ifdef CONFIG_LPS
9807         lps_mode = pwrctrlpriv->power_mgnt;//keep org value
9808         rtw_pm_set_lps(padapter,PS_MODE_ACTIVE);
9809         #endif
9810
9811         #ifdef CONFIG_IPS
9812         ips_mode = pwrctrlpriv->ips_mode;//keep org value
9813         rtw_pm_set_ips(padapter,IPS_NONE);
9814         #endif
9815
9816         pch = extra;
9817         DBG_871X("%s: in=%s\n", __FUNCTION__, extra);
9818
9819         i = 0;
9820         //mac 16 "00e04c871200" rmap,00,2
9821         while ((token = strsep(&pch, ",")) != NULL)
9822         {
9823                 if (i > 2) break;
9824                 tmp[i] = token;
9825                 i++;
9826         }
9827         #ifdef CONFIG_IOL
9828         padapter->registrypriv.fw_iol = 0;// 0:Disable, 1:enable, 2:by usb speed
9829         #endif
9830
9831         if(strcmp(tmp[0], "status") == 0){
9832                 sprintf(extra, "Load File efuse=%s,Load File MAC=%s"
9833                         , pHalData->efuse_file_status == EFUSE_FILE_FAILED ? "FAIL" : "OK"
9834                         , pHalData->macaddr_file_status == MACADDR_FILE_FAILED ? "FAIL" : "OK"
9835                 );
9836                   goto exit;
9837         }
9838         else if (strcmp(tmp[0], "drvmap") == 0)
9839         {
9840                 mapLen = EFUSE_MAP_SIZE;
9841
9842                 sprintf(extra, "\n");
9843                 for (i = 0; i < EFUSE_MAP_SIZE; i += 16)
9844                 {
9845 //                      DBG_871X("0x%02x\t", i);
9846                         sprintf(extra, "%s0x%02x\t", extra, i);
9847                         for (j=0; j<8; j++) {
9848 //                              DBG_871X("%02X ", data[i+j]);
9849                                 sprintf(extra, "%s%02X ", extra, PROMContent[i+j]);
9850                         }
9851 //                      DBG_871X("\t");
9852                         sprintf(extra, "%s\t", extra);
9853                         for (; j<16; j++) {
9854 //                              DBG_871X("%02X ", data[i+j]);
9855                                 sprintf(extra, "%s%02X ", extra, PROMContent[i+j]);
9856                         }
9857 //                      DBG_871X("\n");
9858                         sprintf(extra,"%s\n",extra);
9859                 }
9860 //              DBG_871X("\n");
9861         }
9862         else if (strcmp(tmp[0], "realmap") == 0)
9863         {
9864                 mapLen = EFUSE_MAP_SIZE;
9865                 if (rtw_efuse_mask_map_read(padapter, EFUSE_WIFI , mapLen, pEfuseHal->fakeEfuseInitMap) == _FAIL)
9866                 {
9867                         DBG_871X("%s: read realmap Fail!!\n", __FUNCTION__);
9868                         err = -EFAULT;
9869                         goto exit;
9870                 }
9871
9872 //              DBG_871X("OFFSET\tVALUE(hex)\n");
9873                 sprintf(extra, "\n");
9874                 for (i = 0; i < EFUSE_MAP_SIZE; i += 16)
9875                 {
9876 //                      DBG_871X("0x%02x\t", i);
9877                         sprintf(extra, "%s0x%02x\t", extra, i);
9878                         for (j=0; j<8; j++) {
9879 //                              DBG_871X("%02X ", data[i+j]);
9880                                 sprintf(extra, "%s%02X ", extra, pEfuseHal->fakeEfuseInitMap[i+j]);
9881                         }
9882 //                      DBG_871X("\t");
9883                         sprintf(extra, "%s\t", extra);
9884                         for (; j<16; j++) {
9885 //                              DBG_871X("%02X ", data[i+j]);
9886                                 sprintf(extra, "%s%02X ", extra, pEfuseHal->fakeEfuseInitMap[i+j]);
9887                         }
9888 //                      DBG_871X("\n");
9889                         sprintf(extra,"%s\n",extra);
9890                 }
9891 //              DBG_871X("\n");
9892         }
9893         else if (strcmp(tmp[0], "rmap") == 0)
9894         {
9895                 if ((tmp[1]==NULL) || (tmp[2]==NULL))
9896                 {
9897                         DBG_871X("%s: rmap Fail!! Parameters error!\n", __FUNCTION__);
9898                         err = -EINVAL;
9899                         goto exit;
9900                 }
9901
9902                 // rmap addr cnts
9903                 addr = simple_strtoul(tmp[1], &ptmp, 16);
9904                 DBG_871X("%s: addr=%x\n", __FUNCTION__, addr);
9905
9906                 cnts = simple_strtoul(tmp[2], &ptmp, 10);
9907                 if (cnts == 0)
9908                 {
9909                         DBG_871X("%s: rmap Fail!! cnts error!\n", __FUNCTION__);
9910                         err = -EINVAL;
9911                         goto exit;
9912                 }
9913                 DBG_871X("%s: cnts=%d\n", __FUNCTION__, cnts);
9914
9915                 EFUSE_GetEfuseDefinition(padapter, EFUSE_WIFI, TYPE_EFUSE_MAP_LEN , (PVOID)&max_available_len, _FALSE);
9916                 if ((addr + cnts) > max_available_len)
9917                 {
9918                         DBG_871X("%s: addr(0x%X)+cnts(%d) parameter error!\n", __FUNCTION__, addr, cnts);
9919                         err = -EINVAL;
9920                         goto exit;
9921                 }
9922
9923                 if (rtw_efuse_mask_map_read(padapter, addr, cnts, data) == _FAIL)
9924                 {
9925                         DBG_871X("%s: rtw_efuse_mask_map_read error!\n", __func__);
9926                         err = -EFAULT;
9927                         goto exit;
9928                 }
9929
9930 //              DBG_871X("%s: data={", __FUNCTION__);
9931                 *extra = 0;
9932                 for (i=0; i<cnts; i++) {
9933 //                      DBG_871X("0x%02x ", data[i]);
9934                         sprintf(extra, "%s0x%02X ", extra, data[i]);
9935                 }
9936 //              DBG_871X("}\n");
9937         }
9938         else if (strcmp(tmp[0], "realraw") == 0)
9939         {
9940                 addr = 0;
9941                 mapLen = EFUSE_MAX_SIZE;
9942                 DBG_871X("EFUSE_MAX_SIZE = %d\n", EFUSE_MAX_SIZE);
9943
9944                 if (rtw_efuse_access(padapter, _FALSE, addr, mapLen, rawdata) == _FAIL) {
9945                         DBG_871X("%s: rtw_efuse_access Fail!!\n", __func__);
9946                         err = -EFAULT;
9947                         goto exit;
9948                 }
9949
9950                 if (mapLen >= 512)
9951                         mapLen = 512;
9952
9953                 _rtw_memset(extra,'\0',strlen(extra));
9954
9955                 sprintf(extra, "\n0x00\t");
9956
9957                 for (i = 0; i < mapLen ; i++) {
9958                         sprintf(extra, "%s%02X", extra, rawdata[i]);
9959                         if ((i & 0xF) == 0xF) {
9960                                 sprintf(extra, "%s\n", extra);
9961                                 sprintf(extra, "%s0x%02x\t", extra, i+1);
9962                         } else if ((i & 0x7) == 0x7) {
9963                                 sprintf(extra, "%s \t", extra);
9964                         } else {
9965                                 sprintf(extra, "%s ", extra);
9966                         }
9967                 }
9968
9969         } else if (strcmp(tmp[0], "realrawb") == 0) {
9970                 addr = 0;
9971                 mapLen = EFUSE_MAX_SIZE;
9972                 DBG_871X("EFUSE_MAX_SIZE =%d\n", EFUSE_MAX_SIZE);
9973                 if (rtw_efuse_access(padapter, _FALSE, addr, mapLen, rawdata) == _FAIL)
9974                 {
9975                         DBG_871X("%s: rtw_efuse_access Fail!!\n", __FUNCTION__);
9976                         err = -EFAULT;
9977                         goto exit;
9978                 }
9979                 _rtw_memset(extra,'\0',strlen(extra));
9980                 //              DBG_871X("%s: realraw={\n", __FUNCTION__);
9981                                 sprintf(extra, "\n0x00\t");
9982                                 for (i= 512; i< mapLen; i++)
9983                                 {
9984                 //                      DBG_871X("%02X", rawdata[i]);
9985                                         sprintf(extra, "%s%02X", extra, rawdata[i]);
9986                                         if ((i & 0xF) == 0xF) {
9987                 //                              DBG_871X("\n");
9988                                                 sprintf(extra, "%s\n", extra);
9989                                                 sprintf(extra, "%s0x%02x\t", extra, i+1);
9990                                         }
9991                                         else if ((i & 0x7) == 0x7){
9992                 //                              DBG_871X("\t");
9993                                                 sprintf(extra, "%s \t", extra);
9994                                         } else {
9995                 //                              DBG_871X(" ");
9996                                                 sprintf(extra, "%s ", extra);
9997                                         }
9998                                 }
9999                 //              DBG_871X("}\n");
10000         }
10001         else if (strcmp(tmp[0], "mac") == 0)
10002         {
10003                 if (hal_efuse_macaddr_offset(padapter) == -1) {
10004                         err = -EFAULT;
10005                         goto exit;
10006                 }
10007
10008                 addr = hal_efuse_macaddr_offset(padapter);
10009                 cnts = 6;
10010
10011                 EFUSE_GetEfuseDefinition(padapter, EFUSE_WIFI, TYPE_EFUSE_MAP_LEN, (PVOID)&max_available_len, _FALSE);
10012                 if ((addr + cnts) > max_available_len) {
10013                         DBG_871X("%s: addr(0x%02x)+cnts(%d) parameter error!\n", __FUNCTION__, addr, cnts);
10014                         err = -EFAULT;
10015                         goto exit;
10016                 }
10017
10018                 if (rtw_efuse_mask_map_read(padapter, addr, cnts, data) == _FAIL)
10019                 {
10020                         DBG_871X("%s: rtw_efuse_mask_map_read error!\n", __func__);
10021                         err = -EFAULT;
10022                         goto exit;
10023                 }
10024
10025 //              DBG_871X("%s: MAC address={", __FUNCTION__);
10026                 *extra = 0;
10027                 for (i=0; i<cnts; i++)
10028                 {
10029 //                      DBG_871X("%02X", data[i]);
10030                         sprintf(extra, "%s%02X", extra, data[i]);
10031                         if (i != (cnts-1))
10032                         {
10033 //                              DBG_871X(":");
10034                                 sprintf(extra,"%s:",extra);
10035                         }
10036                 }
10037 //              DBG_871X("}\n");
10038         }
10039         else if (strcmp(tmp[0], "vidpid") == 0)
10040         {
10041                 #ifdef CONFIG_RTL8188E
10042                         #ifdef CONFIG_USB_HCI
10043                         addr = EEPROM_VID_88EU;
10044                         #endif
10045                         #ifdef CONFIG_PCI_HCI
10046                         addr = EEPROM_VID_88EE;
10047                         #endif
10048                 #endif // CONFIG_RTL8188E
10049
10050                 #ifdef CONFIG_RTL8192E
10051                         #ifdef CONFIG_USB_HCI
10052                         addr = EEPROM_VID_8192EU;
10053                         #endif
10054                         #ifdef CONFIG_PCI_HCI
10055                         addr = EEPROM_VID_8192EE;
10056                         #endif
10057                 #endif // CONFIG_RTL8192E
10058                 #ifdef CONFIG_RTL8723B
10059                 addr = EEPROM_VID_8723BU;
10060                 #endif // CONFIG_RTL8192E
10061
10062                 #ifdef CONFIG_RTL8188F
10063                 addr = EEPROM_VID_8188FU;
10064                 #endif /* CONFIG_RTL8188F */
10065
10066                 #ifdef CONFIG_RTL8703B
10067                         #ifdef CONFIG_USB_HCI
10068                         addr = EEPROM_VID_8703BU;
10069                         #endif
10070                 #endif /* CONFIG_RTL8703B */
10071
10072                 cnts = 4;
10073
10074                 EFUSE_GetEfuseDefinition(padapter, EFUSE_WIFI, TYPE_EFUSE_MAP_LEN, (PVOID)&max_available_len, _FALSE);
10075                 if ((addr + cnts) > max_available_len) {
10076                         DBG_871X("%s: addr(0x%02x)+cnts(%d) parameter error!\n", __FUNCTION__, addr, cnts);
10077                         err = -EFAULT;
10078                         goto exit;
10079                 }
10080                 if (rtw_efuse_mask_map_read(padapter, addr, cnts, data) == _FAIL)
10081                 {
10082                         DBG_871X("%s: rtw_efuse_access error!!\n", __FUNCTION__);
10083                         err = -EFAULT;
10084                         goto exit;
10085                 }
10086
10087 //              DBG_871X("%s: {VID,PID}={", __FUNCTION__);
10088                 *extra = 0;
10089                 for (i=0; i<cnts; i++)
10090                 {
10091 //                      DBG_871X("0x%02x", data[i]);
10092                         sprintf(extra, "%s0x%02X", extra, data[i]);
10093                         if (i != (cnts-1))
10094                         {
10095 //                              DBG_871X(",");
10096                                 sprintf(extra,"%s,",extra);
10097                         }
10098                 }
10099 //              DBG_871X("}\n");
10100         } else if (strcmp(tmp[0], "ableraw") == 0) {
10101                         efuse_GetCurrentSize(padapter, &raw_cursize);
10102                         raw_maxsize = efuse_GetMaxSize(padapter);
10103                         sprintf(extra, "[available raw size]= %d bytes\n", raw_maxsize - raw_cursize);
10104         } else if (strcmp(tmp[0], "btableraw") == 0) {
10105                         efuse_bt_GetCurrentSize(padapter, &raw_cursize);
10106                         raw_maxsize = efuse_bt_GetMaxSize(padapter);
10107                         sprintf(extra, "[available raw size]= %d bytes\n", raw_maxsize - raw_cursize);
10108         } else if (strcmp(tmp[0], "btfmap") == 0) {
10109
10110                 BTEfuse_PowerSwitch(padapter,1,_TRUE);
10111
10112                 mapLen = EFUSE_BT_MAX_MAP_LEN;
10113                 if (rtw_BT_efuse_map_read(padapter, 0, mapLen, pEfuseHal->BTEfuseInitMap) == _FAIL)
10114                 {
10115                         DBG_871X("%s: rtw_BT_efuse_map_read Fail!!\n", __FUNCTION__);
10116                         err = -EFAULT;
10117                         goto exit;
10118                 }
10119
10120 //              DBG_871X("OFFSET\tVALUE(hex)\n");
10121                 sprintf(extra, "\n");
10122                 for (i=0; i<512; i+=16) // set 512 because the iwpriv's extra size have limit 0x7FF
10123                 {
10124 //                      DBG_871X("0x%03x\t", i);
10125                         sprintf(extra, "%s0x%03x\t", extra, i);
10126                         for (j=0; j<8; j++) {
10127 //                              DBG_871X("%02X ", pEfuseHal->BTEfuseInitMap[i+j]);
10128                                 sprintf(extra, "%s%02X ", extra, pEfuseHal->BTEfuseInitMap[i+j]);
10129                         }
10130 //                      DBG_871X("\t");
10131                         sprintf(extra,"%s\t",extra);
10132                         for (; j<16; j++) {
10133 //                              DBG_871X("%02X ", pEfuseHal->BTEfuseInitMap[i+j]);
10134                                 sprintf(extra, "%s%02X ", extra, pEfuseHal->BTEfuseInitMap[i+j]);
10135                         }
10136 //                      DBG_871X("\n");
10137                         sprintf(extra, "%s\n", extra);
10138                 }
10139 //              DBG_871X("\n");
10140         }
10141         else if (strcmp(tmp[0],"btbmap") == 0)
10142         {
10143                 BTEfuse_PowerSwitch(padapter,1,_TRUE);
10144
10145                 mapLen = EFUSE_BT_MAX_MAP_LEN;
10146                 if (rtw_BT_efuse_map_read(padapter, 0, mapLen, pEfuseHal->BTEfuseInitMap) == _FAIL)
10147                 {
10148                         DBG_871X("%s: rtw_BT_efuse_map_read Fail!!\n", __FUNCTION__);
10149                         err = -EFAULT;
10150                         goto exit;
10151                 }
10152
10153 //              DBG_871X("OFFSET\tVALUE(hex)\n");
10154                 sprintf(extra, "\n");
10155                 for (i=512; i<1024 ; i+=16)
10156                 {
10157 //                      DBG_871X("0x%03x\t", i);
10158                         sprintf(extra, "%s0x%03x\t", extra, i);
10159                         for (j=0; j<8; j++)
10160                         {
10161 //                              DBG_871X("%02X ", data[i+j]);
10162                                 sprintf(extra, "%s%02X ", extra, pEfuseHal->BTEfuseInitMap[i+j]);
10163                         }
10164 //                      DBG_871X("\t");
10165                         sprintf(extra,"%s\t",extra);
10166                         for (; j<16; j++) {
10167 //                              DBG_871X("%02X ", data[i+j]);
10168                                 sprintf(extra, "%s%02X ", extra, pEfuseHal->BTEfuseInitMap[i+j]);
10169                         }
10170 //                      DBG_871X("\n");
10171                         sprintf(extra, "%s\n", extra);
10172                 }
10173 //              DBG_871X("\n");
10174         }
10175         else if (strcmp(tmp[0],"btrmap") == 0)
10176         {
10177                 if ((tmp[1]==NULL) || (tmp[2]==NULL))
10178                 {
10179                         err = -EINVAL;
10180                         goto exit;
10181                 }
10182
10183                 BTEfuse_PowerSwitch(padapter,1,_TRUE);
10184
10185                 // rmap addr cnts
10186                 addr = simple_strtoul(tmp[1], &ptmp, 16);
10187                 DBG_871X("%s: addr=0x%X\n", __FUNCTION__, addr);
10188
10189                 cnts = simple_strtoul(tmp[2], &ptmp, 10);
10190                 if (cnts == 0)
10191                 {
10192                         DBG_871X("%s: btrmap Fail!! cnts error!\n", __FUNCTION__);
10193                         err = -EINVAL;
10194                         goto exit;
10195                 }
10196                 DBG_871X("%s: cnts=%d\n", __FUNCTION__, cnts);
10197
10198                 EFUSE_GetEfuseDefinition(padapter, EFUSE_BT, TYPE_EFUSE_MAP_LEN, (PVOID)&max_available_len, _FALSE);
10199                 if ((addr + cnts) > max_available_len) {
10200                         DBG_871X("%s: addr(0x%X)+cnts(%d) parameter error!\n", __FUNCTION__, addr, cnts);
10201                         err = -EFAULT;
10202                         goto exit;
10203                 }
10204
10205                 if (rtw_BT_efuse_map_read(padapter, addr, cnts, data) == _FAIL)
10206                 {
10207                         DBG_871X("%s: rtw_BT_efuse_map_read error!!\n", __FUNCTION__);
10208                         err = -EFAULT;
10209                         goto exit;
10210                 }
10211
10212                 *extra = 0;
10213 //              DBG_871X("%s: bt efuse data={", __FUNCTION__);
10214                 for (i=0; i<cnts; i++)
10215                 {
10216 //                      DBG_871X("0x%02x ", data[i]);
10217                         sprintf(extra, "%s 0x%02X ", extra, data[i]);
10218                 }
10219 //              DBG_871X("}\n");
10220                 DBG_871X(FUNC_ADPT_FMT ": BT MAC=[%s]\n", FUNC_ADPT_ARG(padapter), extra);
10221         }
10222         else if (strcmp(tmp[0], "btffake") == 0)
10223         {
10224 //              DBG_871X("OFFSET\tVALUE(hex)\n");
10225                 sprintf(extra, "\n");
10226                 for (i=0; i<512; i+=16)
10227                 {
10228 //                      DBG_871X("0x%03x\t", i);
10229                         sprintf(extra, "%s0x%03x\t", extra, i);
10230                         for (j=0; j<8; j++) {
10231 //                              DBG_871X("%02X ", pEfuseHal->fakeBTEfuseModifiedMap[i+j]);
10232                                 sprintf(extra, "%s%02X ", extra, pEfuseHal->fakeBTEfuseModifiedMap[i+j]);
10233                         }
10234 //                      DBG_871X("\t");
10235                         sprintf(extra, "%s\t", extra);
10236                         for (; j<16; j++) {
10237 //                              DBG_871X("%02X ", pEfuseHal->fakeBTEfuseModifiedMap[i+j]);
10238                                 sprintf(extra, "%s%02X ", extra, pEfuseHal->fakeBTEfuseModifiedMap[i+j]);
10239                         }
10240 //                      DBG_871X("\n");
10241                         sprintf(extra, "%s\n", extra);
10242                 }
10243 //              DBG_871X("\n");
10244         }
10245         else if (strcmp(tmp[0],"btbfake") == 0)
10246         {
10247 //              DBG_871X("OFFSET\tVALUE(hex)\n");
10248                 sprintf(extra, "\n");
10249                 for (i=512; i<1024; i+=16)
10250                 {
10251 //                      DBG_871X("0x%03x\t", i);
10252                         sprintf(extra, "%s0x%03x\t", extra, i);
10253                         for (j=0; j<8; j++) {
10254 //                              DBG_871X("%02X ", pEfuseHal->fakeBTEfuseModifiedMap[i+j]);
10255                                 sprintf(extra, "%s%02X ", extra, pEfuseHal->fakeBTEfuseModifiedMap[i+j]);
10256                         }
10257 //                      DBG_871X("\t");
10258                         sprintf(extra, "%s\t", extra);
10259                         for (; j<16; j++) {
10260 //                              DBG_871X("%02X ", pEfuseHal->fakeBTEfuseModifiedMap[i+j]);
10261                                 sprintf(extra, "%s%02X ", extra, pEfuseHal->fakeBTEfuseModifiedMap[i+j]);
10262                         }
10263 //                      DBG_871X("\n");
10264                         sprintf(extra, "%s\n", extra);
10265                 }
10266 //              DBG_871X("\n");
10267         }
10268         else if (strcmp(tmp[0],"wlrfkmap")== 0)
10269         {
10270 //              DBG_871X("OFFSET\tVALUE(hex)\n");
10271                 sprintf(extra, "\n");
10272                 for (i=0; i<EFUSE_MAP_SIZE; i+=16)
10273                 {
10274 //                      DBG_871X("\t0x%02x\t", i);
10275                         sprintf(extra, "%s0x%02x\t", extra, i);
10276                         for (j=0; j<8; j++) {
10277 //                              DBG_871X("%02X ", pEfuseHal->fakeEfuseModifiedMap[i+j]);
10278                                 sprintf(extra, "%s%02X ", extra, pEfuseHal->fakeEfuseModifiedMap[i+j]);
10279                         }
10280 //                      DBG_871X("\t");
10281                         sprintf(extra, "%s\t", extra);
10282                         for (; j<16; j++) {
10283 //                              DBG_871X("%02X ", pEfuseHal->fakeEfuseModifiedMap[i+j]);
10284                                 sprintf(extra, "%s %02X", extra, pEfuseHal->fakeEfuseModifiedMap[i+j]);
10285                         }
10286 //                      DBG_871X("\n");
10287                         sprintf(extra, "%s\n", extra);
10288                 }
10289 //              DBG_871X("\n");
10290
10291         }
10292         else if (strcmp(tmp[0],"wlrfkrmap")== 0)
10293         {
10294                 if ((tmp[1]==NULL) || (tmp[2]==NULL))
10295                                 {
10296                                         DBG_871X("%s: rmap Fail!! Parameters error!\n", __FUNCTION__);
10297                                         err = -EINVAL;
10298                                         goto exit;
10299                                 }
10300                                 // rmap addr cnts
10301                                 addr = simple_strtoul(tmp[1], &ptmp, 16);
10302                                 DBG_871X("%s: addr=%x\n", __FUNCTION__, addr);
10303
10304                                 cnts = simple_strtoul(tmp[2], &ptmp, 10);
10305                                 if (cnts == 0)
10306                                 {
10307                                         DBG_871X("%s: rmap Fail!! cnts error!\n", __FUNCTION__);
10308                                         err = -EINVAL;
10309                                         goto exit;
10310                                 }
10311                                 DBG_871X("%s: cnts=%d\n", __FUNCTION__, cnts);
10312
10313                 //              DBG_871X("%s: data={", __FUNCTION__);
10314                         *extra = 0;
10315                         for (i=0; i<cnts; i++) {
10316                                         DBG_871X("wlrfkrmap = 0x%02x \n", pEfuseHal->fakeEfuseModifiedMap[addr+i]);
10317                                         sprintf(extra, "%s0x%02X ", extra, pEfuseHal->fakeEfuseModifiedMap[addr+i]);
10318                         }
10319         }
10320         else if (strcmp(tmp[0],"btrfkrmap")== 0)
10321         {
10322                 if ((tmp[1]==NULL) || (tmp[2]==NULL))
10323                                 {
10324                                         DBG_871X("%s: rmap Fail!! Parameters error!\n", __FUNCTION__);
10325                                         err = -EINVAL;
10326                                         goto exit;
10327                                 }
10328                                 // rmap addr cnts
10329                                 addr = simple_strtoul(tmp[1], &ptmp, 16);
10330                                 DBG_871X("%s: addr=%x\n", __FUNCTION__, addr);
10331
10332                                 cnts = simple_strtoul(tmp[2], &ptmp, 10);
10333                                 if (cnts == 0)
10334                                 {
10335                                         DBG_871X("%s: rmap Fail!! cnts error!\n", __FUNCTION__);
10336                                         err = -EINVAL;
10337                                         goto exit;
10338                                 }
10339                                 DBG_871X("%s: cnts=%d\n", __FUNCTION__, cnts);
10340
10341                 //              DBG_871X("%s: data={", __FUNCTION__);
10342                         *extra = 0;
10343                         for (i=0; i<cnts; i++) {
10344                                         DBG_871X("wlrfkrmap = 0x%02x \n", pEfuseHal->fakeBTEfuseModifiedMap[addr+i]);
10345                                         sprintf(extra, "%s0x%02X ", extra, pEfuseHal->fakeBTEfuseModifiedMap[addr+i]);
10346                         }
10347         }
10348         else
10349         {
10350                  sprintf(extra, "Command not found!");
10351         }
10352
10353 exit:
10354         if (data)
10355                 rtw_mfree(data, EFUSE_BT_MAX_MAP_LEN);
10356         if (rawdata)
10357                 rtw_mfree(rawdata, EFUSE_BT_MAX_MAP_LEN);
10358         if (!err)
10359                 wrqu->length = strlen(extra);
10360
10361         if (padapter->registrypriv.mp_mode == 0)
10362         {
10363         #ifdef CONFIG_IPS
10364         rtw_pm_set_ips(padapter, ips_mode);
10365 #endif // CONFIG_IPS
10366
10367         #ifdef CONFIG_LPS
10368         rtw_pm_set_lps(padapter, lps_mode);
10369 #endif // CONFIG_LPS
10370         }
10371
10372         #ifdef CONFIG_IOL
10373         padapter->registrypriv.fw_iol = org_fw_iol;// 0:Disable, 1:enable, 2:by usb speed
10374         #endif
10375         return err;
10376 }
10377
10378 static int rtw_mp_efuse_set(struct net_device *dev,
10379                         struct iw_request_info *info,
10380                         union iwreq_data *wdata, char *extra)
10381 {
10382         struct iw_point *wrqu;
10383         PADAPTER padapter;
10384         struct pwrctrl_priv *pwrctrlpriv ;
10385         PHAL_DATA_TYPE pHalData;
10386         PEFUSE_HAL pEfuseHal;
10387
10388         u8 ips_mode = IPS_NUM; // init invalid value
10389         u8 lps_mode = PS_MODE_NUM; // init invalid value
10390         u32 i=0,j=0, jj, kk;
10391         u8 *setdata = NULL;
10392         u8 *ShadowMapBT = NULL;
10393         u8 *ShadowMapWiFi = NULL;
10394         u8 *setrawdata = NULL;
10395         char *pch, *ptmp, *token, *tmp[3]={0x00,0x00,0x00};
10396         u16 addr = 0xFF, cnts = 0, BTStatus = 0 , max_available_len = 0;
10397         int err;
10398
10399         wrqu = (struct iw_point*)wdata;
10400         padapter = rtw_netdev_priv(dev);
10401         pwrctrlpriv = adapter_to_pwrctl(padapter);
10402         pHalData = GET_HAL_DATA(padapter);
10403         pEfuseHal = &pHalData->EfuseHal;
10404         err = 0;
10405
10406         if (copy_from_user(extra, wrqu->pointer, wrqu->length))
10407                         return -EFAULT;
10408
10409         setdata = rtw_zmalloc(1024);
10410         if (setdata == NULL)
10411         {
10412                 err = -ENOMEM;
10413                 goto exit;
10414         }
10415         ShadowMapBT = rtw_malloc(EFUSE_BT_MAX_MAP_LEN);
10416         if (ShadowMapBT == NULL)
10417         {
10418                 err = -ENOMEM;
10419                 goto exit;
10420         }
10421         ShadowMapWiFi = rtw_malloc(EFUSE_MAP_SIZE);
10422         if (ShadowMapWiFi == NULL)
10423         {
10424                 err = -ENOMEM;
10425                 goto exit;
10426         }
10427         setrawdata = rtw_malloc(EFUSE_MAX_SIZE);
10428         if (setrawdata == NULL)
10429         {
10430                 err = -ENOMEM;
10431                 goto exit;
10432         }
10433
10434         #ifdef CONFIG_LPS
10435         lps_mode = pwrctrlpriv->power_mgnt;//keep org value
10436         rtw_pm_set_lps(padapter,PS_MODE_ACTIVE);
10437         #endif
10438
10439         #ifdef CONFIG_IPS
10440         ips_mode = pwrctrlpriv->ips_mode;//keep org value
10441         rtw_pm_set_ips(padapter,IPS_NONE);
10442         #endif
10443
10444         pch = extra;
10445         DBG_871X("%s: in=%s\n", __FUNCTION__, extra);
10446
10447         i = 0;
10448         while ((token = strsep(&pch, ",")) != NULL)
10449         {
10450                 if (i > 2) break;
10451                 tmp[i] = token;
10452                 i++;
10453         }
10454
10455         // tmp[0],[1],[2]
10456         // wmap,addr,00e04c871200
10457         if (strcmp(tmp[0], "wmap") == 0)
10458         {
10459                 if ((tmp[1]==NULL) || (tmp[2]==NULL))
10460                 {
10461                         err = -EINVAL;
10462                         goto exit;
10463                 }
10464
10465 #if 1
10466                 // unknown bug workaround, need to fix later
10467                 addr=0x1ff;
10468                 rtw_write8(padapter, EFUSE_CTRL+1, (addr & 0xff));
10469                 rtw_msleep_os(10);
10470                 rtw_write8(padapter, EFUSE_CTRL+2, ((addr >> 8) & 0x03));
10471                 rtw_msleep_os(10);
10472                 rtw_write8(padapter, EFUSE_CTRL+3, 0x72);
10473                 rtw_msleep_os(10);
10474                 rtw_read8(padapter, EFUSE_CTRL);
10475 #endif
10476
10477                 addr = simple_strtoul(tmp[1], &ptmp, 16);
10478                 addr &= 0xFFF;
10479
10480                 cnts = strlen(tmp[2]);
10481                 if (cnts%2)
10482                 {
10483                         err = -EINVAL;
10484                         goto exit;
10485                 }
10486                 cnts /= 2;
10487                 if (cnts == 0)
10488                 {
10489                         err = -EINVAL;
10490                         goto exit;
10491                 }
10492
10493                 DBG_871X("%s: addr=0x%X\n", __FUNCTION__, addr);
10494                 DBG_871X("%s: cnts=%d\n", __FUNCTION__, cnts);
10495                 DBG_871X("%s: map data=%s\n", __FUNCTION__, tmp[2]);
10496
10497                 for (jj=0, kk=0; jj<cnts; jj++, kk+=2)
10498                 {
10499                         setdata[jj] = key_2char2num(tmp[2][kk], tmp[2][kk+1]);
10500                 }
10501
10502                 EFUSE_GetEfuseDefinition(padapter, EFUSE_WIFI, TYPE_EFUSE_MAP_LEN, (PVOID)&max_available_len, _FALSE);
10503
10504                 if ((addr + cnts) > max_available_len) {
10505                         DBG_871X("%s: addr(0x%X)+cnts(%d) parameter error!\n", __FUNCTION__, addr, cnts);
10506                         err = -EFAULT;
10507                         goto exit;
10508                 }
10509
10510                 if (rtw_efuse_map_write(padapter, addr, cnts, setdata) == _FAIL)
10511                 {
10512                         DBG_871X("%s: rtw_efuse_map_write error!!\n", __FUNCTION__);
10513                         err = -EFAULT;
10514                         goto exit;
10515                 }
10516                 *extra = 0;
10517                 DBG_871X("%s: after rtw_efuse_map_write to _rtw_memcmp\n", __func__);
10518                 if (rtw_efuse_mask_map_read(padapter, addr, cnts, ShadowMapWiFi) == _SUCCESS)
10519                 {
10520                         if (_rtw_memcmp((void*)ShadowMapWiFi ,(void*)setdata,cnts))
10521                         {
10522                                 DBG_871X("%s: WiFi write map afterf compare success\n", __FUNCTION__);
10523                                 sprintf(extra, "WiFi write map compare OK\n");
10524                                 err = 0;
10525                                 goto exit;
10526                         }
10527                         else
10528                         {
10529                                 sprintf(extra, "WiFi write map compare FAIL\n");
10530                                 DBG_871X("%s: WiFi write map compare Fail\n", __FUNCTION__);
10531                                 err = 0;
10532                                 goto exit;
10533                         }
10534                 }
10535         }
10536         else if (strcmp(tmp[0], "wraw") == 0)
10537         {
10538                 if ((tmp[1]==NULL) || (tmp[2]==NULL))
10539                 {
10540                         err = -EINVAL;
10541                         goto exit;
10542                 }
10543
10544                 addr = simple_strtoul( tmp[1], &ptmp, 16 );
10545                 addr &= 0xFFF;
10546
10547                 cnts = strlen(tmp[2]);
10548                 if (cnts%2)
10549                 {
10550                         err = -EINVAL;
10551                         goto exit;
10552                 }
10553                 cnts /= 2;
10554                 if (cnts == 0)
10555                 {
10556                         err = -EINVAL;
10557                         goto exit;
10558                 }
10559
10560                 DBG_871X("%s: addr=0x%X\n", __FUNCTION__, addr);
10561                 DBG_871X("%s: cnts=%d\n", __FUNCTION__, cnts);
10562                 DBG_871X("%s: raw data=%s\n", __FUNCTION__, tmp[2]);
10563
10564                 for (jj=0, kk=0; jj<cnts; jj++, kk+=2)
10565                 {
10566                         setrawdata[jj] = key_2char2num(tmp[2][kk], tmp[2][kk+1]);
10567                 }
10568
10569                 if (rtw_efuse_access(padapter, _TRUE, addr, cnts, setrawdata) == _FAIL)
10570                 {
10571                         DBG_871X("%s: rtw_efuse_access error!!\n", __FUNCTION__);
10572                         err = -EFAULT;
10573                         goto exit;
10574                 }
10575         }
10576         else if (strcmp(tmp[0], "mac") == 0)
10577         {
10578                 if (tmp[1]==NULL)
10579                 {
10580                         err = -EINVAL;
10581                         goto exit;
10582                 }
10583
10584                 //mac,00e04c871200
10585
10586                 if (hal_efuse_macaddr_offset(padapter) == -1) {
10587                         err = -EFAULT;
10588                         goto exit;
10589                 }
10590
10591                 addr = hal_efuse_macaddr_offset(padapter);
10592                 cnts = strlen(tmp[1]);
10593                 if (cnts%2)
10594                 {
10595                         err = -EINVAL;
10596                         goto exit;
10597                 }
10598                 cnts /= 2;
10599                 if (cnts == 0)
10600                 {
10601                         err = -EINVAL;
10602                         goto exit;
10603                 }
10604                 if (cnts > 6)
10605                 {
10606                         DBG_871X("%s: error data for mac addr=\"%s\"\n", __FUNCTION__, tmp[1]);
10607                         err = -EFAULT;
10608                         goto exit;
10609                 }
10610
10611                 DBG_871X("%s: addr=0x%X\n", __FUNCTION__, addr);
10612                 DBG_871X("%s: cnts=%d\n", __FUNCTION__, cnts);
10613                 DBG_871X("%s: MAC address=%s\n", __FUNCTION__, tmp[1]);
10614
10615                 for (jj=0, kk=0; jj<cnts; jj++, kk+=2)
10616                 {
10617                         setdata[jj] = key_2char2num(tmp[1][kk], tmp[1][kk+1]);
10618                 }
10619
10620                 EFUSE_GetEfuseDefinition(padapter, EFUSE_WIFI, TYPE_EFUSE_MAP_LEN, (PVOID)&max_available_len, _FALSE);
10621
10622                 if ((addr + cnts) > max_available_len) {
10623                         DBG_871X("%s: addr(0x%X)+cnts(%d) parameter error!\n", __FUNCTION__, addr, cnts);
10624                         err = -EFAULT;
10625                         goto exit;
10626                 }
10627
10628                 if (rtw_efuse_map_write(padapter, addr, cnts, setdata) == _FAIL)
10629                 {
10630                         DBG_871X("%s: rtw_efuse_map_write error!!\n", __FUNCTION__);
10631                         err = -EFAULT;
10632                         goto exit;
10633                 }
10634         }
10635         else if (strcmp(tmp[0], "vidpid") == 0)
10636         {
10637                 if (tmp[1]==NULL)
10638                 {
10639                         err = -EINVAL;
10640                         goto exit;
10641                 }
10642
10643                 // pidvid,da0b7881
10644                 #ifdef CONFIG_RTL8188E
10645                         #ifdef CONFIG_USB_HCI
10646                         addr = EEPROM_VID_88EU;
10647                         #endif
10648                         #ifdef CONFIG_PCI_HCI
10649                         addr = EEPROM_VID_88EE;
10650                         #endif
10651                 #endif // CONFIG_RTL8188E
10652
10653                 #ifdef CONFIG_RTL8192E
10654                         #ifdef CONFIG_USB_HCI
10655                         addr = EEPROM_VID_8192EU;
10656                         #endif
10657                         #ifdef CONFIG_PCI_HCI
10658                         addr = EEPROM_VID_8192EE;
10659                         #endif
10660                 #endif // CONFIG_RTL8188E
10661
10662                 #ifdef CONFIG_RTL8723B
10663                 addr = EEPROM_VID_8723BU;
10664                 #endif
10665
10666                 #ifdef CONFIG_RTL8188F
10667                 addr = EEPROM_VID_8188FU;
10668                 #endif
10669
10670                 #ifdef CONFIG_RTL8703B
10671                         #ifdef CONFIG_USB_HCI
10672                         addr = EEPROM_VID_8703BU;
10673                         #endif /* CONFIG_USB_HCI */
10674                 #endif /* CONFIG_RTL8703B */
10675
10676                 cnts = strlen(tmp[1]);
10677                 if (cnts%2)
10678                 {
10679                         err = -EINVAL;
10680                         goto exit;
10681                 }
10682                 cnts /= 2;
10683                 if (cnts == 0)
10684                 {
10685                         err = -EINVAL;
10686                         goto exit;
10687                 }
10688
10689                 DBG_871X("%s: addr=0x%X\n", __FUNCTION__, addr);
10690                 DBG_871X("%s: cnts=%d\n", __FUNCTION__, cnts);
10691                 DBG_871X("%s: VID/PID=%s\n", __FUNCTION__, tmp[1]);
10692
10693                 for (jj=0, kk=0; jj<cnts; jj++, kk+=2)
10694                 {
10695                         setdata[jj] = key_2char2num(tmp[1][kk], tmp[1][kk+1]);
10696                 }
10697
10698                 EFUSE_GetEfuseDefinition(padapter, EFUSE_WIFI, TYPE_EFUSE_MAP_LEN, (PVOID)&max_available_len, _FALSE);
10699                 if ((addr + cnts) > max_available_len) {
10700                         DBG_871X("%s: addr(0x%X)+cnts(%d) parameter error!\n", __FUNCTION__, addr, cnts);
10701                         err = -EFAULT;
10702                         goto exit;
10703                 }
10704
10705                 if (rtw_efuse_map_write(padapter, addr, cnts, setdata) == _FAIL)
10706                 {
10707                         DBG_871X("%s: rtw_efuse_map_write error!!\n", __FUNCTION__);
10708                         err = -EFAULT;
10709                         goto exit;
10710                 }
10711         }
10712         else if (strcmp(tmp[0], "wldumpfake") == 0)
10713         {
10714                 if (rtw_efuse_mask_map_read(padapter, 0, EFUSE_MAP_SIZE, pEfuseHal->fakeEfuseModifiedMap) == _SUCCESS) {
10715                         DBG_871X("%s: WiFi hw efuse dump to Fake map success\n", __func__);
10716                 } else {
10717                         DBG_871X("%s: WiFi hw efuse dump to Fake map Fail\n", __func__);
10718                         err = -EFAULT;
10719                 }
10720         }
10721         else if (strcmp(tmp[0], "btwmap") == 0)
10722         {
10723                 rtw_write8(padapter, 0xa3, 0x05); //For 8723AB ,8821S ?
10724                 BTStatus=rtw_read8(padapter, 0xa0);
10725                 DBG_871X("%s: btwmap before read 0xa0 BT Status =0x%x \n", __FUNCTION__,BTStatus);
10726                 if (BTStatus != 0x04)
10727                 {
10728                         sprintf(extra, "BT Status not Active Write FAIL\n");
10729                         goto exit;
10730                 }
10731
10732                 if ((tmp[1]==NULL) || (tmp[2]==NULL))
10733                 {
10734                         err = -EINVAL;
10735                         goto exit;
10736                 }
10737                 BTEfuse_PowerSwitch(padapter,1,_TRUE);
10738
10739                 addr=0x1ff;
10740                 rtw_write8(padapter, EFUSE_CTRL+1, (addr & 0xff));
10741                 rtw_msleep_os(10);
10742                 rtw_write8(padapter, EFUSE_CTRL+2, ((addr >> 8) & 0x03));
10743                 rtw_msleep_os(10);
10744                 rtw_write8(padapter, EFUSE_CTRL+3, 0x72);
10745                 rtw_msleep_os(10);
10746                 rtw_read8(padapter, EFUSE_CTRL);
10747
10748                 addr = simple_strtoul(tmp[1], &ptmp, 16);
10749                 addr &= 0xFFF;
10750
10751                 cnts = strlen(tmp[2]);
10752                 if (cnts%2)
10753                 {
10754                         err = -EINVAL;
10755                         goto exit;
10756                 }
10757                 cnts /= 2;
10758                 if (cnts == 0)
10759                 {
10760                         err = -EINVAL;
10761                         goto exit;
10762                 }
10763
10764                 DBG_871X("%s: addr=0x%X\n", __FUNCTION__, addr);
10765                 DBG_871X("%s: cnts=%d\n", __FUNCTION__, cnts);
10766                 DBG_871X("%s: BT data=%s\n", __FUNCTION__, tmp[2]);
10767
10768                 for (jj=0, kk=0; jj<cnts; jj++, kk+=2)
10769                 {
10770                         setdata[jj] = key_2char2num(tmp[2][kk], tmp[2][kk+1]);
10771                 }
10772
10773                 EFUSE_GetEfuseDefinition(padapter, EFUSE_BT, TYPE_EFUSE_MAP_LEN, (PVOID)&max_available_len, _FALSE);
10774                 if ((addr + cnts) > max_available_len) {
10775                         DBG_871X("%s: addr(0x%X)+cnts(%d) parameter error!\n", __FUNCTION__, addr, cnts);
10776                         err = -EFAULT;
10777                         goto exit;
10778                 }
10779
10780                 if (rtw_BT_efuse_map_write(padapter, addr, cnts, setdata) == _FAIL)
10781                 {
10782                         DBG_871X("%s: rtw_BT_efuse_map_write error!!\n", __FUNCTION__);
10783                         err = -EFAULT;
10784                         goto exit;
10785                 }
10786                 *extra = 0;
10787                 DBG_871X("%s: after rtw_BT_efuse_map_write to _rtw_memcmp \n", __FUNCTION__);
10788                 if ( (rtw_BT_efuse_map_read(padapter, addr, cnts, ShadowMapBT ) == _SUCCESS ) )
10789                 {
10790                         if (_rtw_memcmp((void*)ShadowMapBT ,(void*)setdata,cnts))
10791                         {
10792                                 DBG_871X("%s: BT write map compare OK BTStatus=0x%x\n", __FUNCTION__,BTStatus);
10793                                 sprintf(extra, "BT write map compare OK");
10794                                 err = 0;
10795                                 goto exit;
10796                         }
10797                         else
10798                         {
10799                                 sprintf(extra, "BT write map compare FAIL");
10800                                 DBG_871X("%s: BT write map compare FAIL BTStatus=0x%x\n", __FUNCTION__,BTStatus);
10801                                 err = 0;
10802                                 goto exit;
10803                         }
10804                 }
10805         }
10806         else if (strcmp(tmp[0], "btwfake") == 0)
10807         {
10808                 if ((tmp[1]==NULL) || (tmp[2]==NULL))
10809                 {
10810                         err = -EINVAL;
10811                         goto exit;
10812                 }
10813
10814                 addr = simple_strtoul(tmp[1], &ptmp, 16);
10815                 addr &= 0xFFF;
10816
10817                 cnts = strlen(tmp[2]);
10818                 if (cnts%2)
10819                 {
10820                         err = -EINVAL;
10821                         goto exit;
10822                 }
10823                 cnts /= 2;
10824                 if (cnts == 0)
10825                 {
10826                         err = -EINVAL;
10827                         goto exit;
10828                 }
10829
10830                 DBG_871X("%s: addr=0x%X\n", __FUNCTION__, addr);
10831                 DBG_871X("%s: cnts=%d\n", __FUNCTION__, cnts);
10832                 DBG_871X("%s: BT tmp data=%s\n", __FUNCTION__, tmp[2]);
10833
10834                 for (jj=0, kk=0; jj<cnts; jj++, kk+=2)
10835                 {
10836                         pEfuseHal->fakeBTEfuseModifiedMap[addr+jj] = key_2char2num(tmp[2][kk], tmp[2][kk+1]);
10837                 }
10838         }
10839         else if (strcmp(tmp[0], "btdumpfake") == 0)
10840         {
10841                 if (rtw_BT_efuse_map_read(padapter, 0, EFUSE_BT_MAX_MAP_LEN, pEfuseHal->fakeBTEfuseModifiedMap) == _SUCCESS) {
10842                         DBG_871X("%s: BT read all map success\n", __FUNCTION__);
10843                 } else {
10844                         DBG_871X("%s: BT read all map Fail!\n", __FUNCTION__);
10845                         err = -EFAULT;
10846                 }
10847         }
10848         else if (strcmp(tmp[0], "btfk2map") == 0)
10849         {
10850                 rtw_write8(padapter, 0xa3, 0x05);
10851                 BTStatus=rtw_read8(padapter, 0xa0);
10852                 DBG_871X("%s: btwmap before read 0xa0 BT Status =0x%x \n", __FUNCTION__,BTStatus);
10853                 if (BTStatus != 0x04)
10854                 {
10855                         sprintf(extra, "BT Status not Active Write FAIL\n");
10856                         goto exit;
10857                 }
10858
10859                 BTEfuse_PowerSwitch(padapter,1,_TRUE);
10860
10861                 addr=0x1ff;
10862                 rtw_write8(padapter, EFUSE_CTRL+1, (addr & 0xff));
10863                 rtw_msleep_os(10);
10864                 rtw_write8(padapter, EFUSE_CTRL+2, ((addr >> 8) & 0x03));
10865                 rtw_msleep_os(10);
10866                 rtw_write8(padapter, EFUSE_CTRL+3, 0x72);
10867                 rtw_msleep_os(10);
10868                 rtw_read8(padapter, EFUSE_CTRL);
10869
10870                 _rtw_memcpy(pEfuseHal->BTEfuseModifiedMap, pEfuseHal->fakeBTEfuseModifiedMap, EFUSE_BT_MAX_MAP_LEN);
10871
10872                 if (rtw_BT_efuse_map_write(padapter, 0x00, EFUSE_BT_MAX_MAP_LEN, pEfuseHal->fakeBTEfuseModifiedMap) == _FAIL)
10873                 {
10874                         DBG_871X("%s: rtw_BT_efuse_map_write error!\n", __FUNCTION__);
10875                         err = -EFAULT;
10876                         goto exit;
10877                 }
10878
10879                 DBG_871X("pEfuseHal->fakeBTEfuseModifiedMap OFFSET\tVALUE(hex)\n");
10880                 for (i = 0; i < EFUSE_BT_MAX_MAP_LEN; i += 16)
10881                 {
10882                         printk("0x%02x\t", i);
10883                         for (j=0; j<8; j++) {
10884                                 printk("%02X ", pEfuseHal->fakeBTEfuseModifiedMap[i+j]);
10885                         }
10886                         printk("\t");
10887
10888                         for (; j<16; j++) {
10889                                 printk("%02X ", pEfuseHal->fakeBTEfuseModifiedMap[i+j]);
10890                         }
10891                         printk("\n");
10892                 }
10893                 printk("\n");
10894 #if 1
10895                 err = -EFAULT;
10896                 DBG_871X("%s: rtw_BT_efuse_map_read _rtw_memcmp \n", __FUNCTION__);
10897                 if ( (rtw_BT_efuse_map_read(padapter, 0x00, EFUSE_BT_MAX_MAP_LEN, pEfuseHal->fakeBTEfuseInitMap) == _SUCCESS ) )
10898                 {
10899                         if (_rtw_memcmp((void*)pEfuseHal->fakeBTEfuseModifiedMap,(void*)pEfuseHal->fakeBTEfuseInitMap,EFUSE_BT_MAX_MAP_LEN))
10900                         {
10901                                 sprintf(extra, "BT write map compare OK");
10902                                 DBG_871X("%s: BT write map afterf compare success BTStatus=0x%x \n", __FUNCTION__,BTStatus);
10903                                 err = 0;
10904                                 goto exit;
10905                         }
10906                         else
10907                         {
10908                                 sprintf(extra, "BT write map compare FAIL");
10909                                 if (rtw_BT_efuse_map_write(padapter, 0x00, EFUSE_BT_MAX_MAP_LEN, pEfuseHal->fakeBTEfuseModifiedMap) == _FAIL)
10910                                 {
10911                                         DBG_871X("%s: rtw_BT_efuse_map_write compare error,retry = %d!\n", __FUNCTION__,i);
10912                                 }
10913
10914                                 if (rtw_BT_efuse_map_read(padapter, EFUSE_BT, EFUSE_BT_MAX_MAP_LEN, pEfuseHal->fakeBTEfuseInitMap) == _SUCCESS)
10915                                 {
10916                                         DBG_871X("pEfuseHal->fakeBTEfuseInitMap OFFSET\tVALUE(hex)\n");
10917
10918                                         for (i = 0; i < EFUSE_BT_MAX_MAP_LEN; i += 16)
10919                                         {
10920                                                 printk("0x%02x\t", i);
10921                                                 for (j=0; j<8; j++) {
10922                                                         printk("%02X ", pEfuseHal->fakeBTEfuseInitMap[i+j]);
10923                                                 }
10924                                                 printk("\t");
10925                                                 for (; j<16; j++) {
10926                                                         printk("%02X ", pEfuseHal->fakeBTEfuseInitMap[i+j]);
10927                                                 }
10928                                                 printk("\n");
10929                                         }
10930                                         printk("\n");
10931                                 }
10932                                 DBG_871X("%s: BT write map afterf compare not match to write efuse try write Map again , BTStatus=0x%x\n", __FUNCTION__,BTStatus);
10933                                 goto exit;
10934                         }
10935                 }
10936 #endif
10937
10938         }
10939         else if (strcmp(tmp[0], "wlfk2map") == 0)
10940         {
10941                 if (rtw_efuse_map_write(padapter, 0x00, EFUSE_MAP_SIZE, pEfuseHal->fakeEfuseModifiedMap) == _FAIL)
10942                 {
10943                         DBG_871X("%s: rtw_efuse_map_write fakeEfuseModifiedMap error!\n", __FUNCTION__);
10944                         err = -EFAULT;
10945                         goto exit;
10946                 }
10947                 *extra = 0;
10948                 DBG_871X("%s: after rtw_BT_efuse_map_write to _rtw_memcmp\n", __func__);
10949                 if (rtw_efuse_mask_map_read(padapter, 0x00, EFUSE_MAP_SIZE, ShadowMapWiFi) == _SUCCESS)
10950                 {
10951                         if (_rtw_memcmp((void*)ShadowMapWiFi ,(void*)setdata,cnts))
10952                         {
10953                                 DBG_871X("%s: WiFi write map afterf compare OK\n", __FUNCTION__);
10954                                 sprintf(extra, "WiFi write map compare OK\n");
10955                                 err = 0;
10956                                 goto exit;
10957                         }
10958                         else
10959                         {
10960                                 sprintf(extra, "WiFi write map compare FAIL\n");
10961                                 DBG_871X("%s: WiFi write map compare Fail\n", __FUNCTION__);
10962                                 err = 0;
10963                                 goto exit;
10964                         }
10965                 }
10966         }
10967         else if (strcmp(tmp[0], "wlwfake") == 0)
10968         {
10969                 if ((tmp[1]==NULL) || (tmp[2]==NULL))
10970                 {
10971                         err = -EINVAL;
10972                         goto exit;
10973                 }
10974
10975                 addr = simple_strtoul(tmp[1], &ptmp, 16);
10976                 addr &= 0xFFF;
10977
10978                 cnts = strlen(tmp[2]);
10979                 if (cnts%2)
10980                 {
10981                         err = -EINVAL;
10982                         goto exit;
10983                 }
10984                 cnts /= 2;
10985                 if (cnts == 0)
10986                 {
10987                         err = -EINVAL;
10988                         goto exit;
10989                 }
10990
10991                 DBG_871X("%s: addr=0x%X\n", __FUNCTION__, addr);
10992                 DBG_871X("%s: cnts=%d\n", __FUNCTION__, cnts);
10993                 DBG_871X("%s: map tmp data=%s\n", __FUNCTION__, tmp[2]);
10994
10995                 for (jj=0, kk=0; jj<cnts; jj++, kk+=2)
10996                 {
10997                         pEfuseHal->fakeEfuseModifiedMap[addr+jj] = key_2char2num(tmp[2][kk], tmp[2][kk+1]);
10998                 }
10999                 _rtw_memset(extra, '\0', strlen(extra));
11000                 sprintf(extra, "wlwfake OK\n");
11001         }
11002
11003 exit:
11004         if (setdata)
11005                 rtw_mfree(setdata, 1024);
11006         if (ShadowMapBT)
11007                 rtw_mfree(ShadowMapBT, EFUSE_BT_MAX_MAP_LEN);
11008         if (ShadowMapWiFi)
11009                 rtw_mfree(ShadowMapWiFi, EFUSE_MAP_SIZE);
11010         if (setrawdata)
11011                 rtw_mfree(setrawdata, EFUSE_MAX_SIZE);
11012
11013         wrqu->length = strlen(extra);
11014
11015         if (padapter->registrypriv.mp_mode == 0)
11016         {
11017         #ifdef CONFIG_IPS
11018         rtw_pm_set_ips(padapter, ips_mode);
11019         #endif // CONFIG_IPS
11020
11021         #ifdef CONFIG_LPS
11022         rtw_pm_set_lps(padapter, lps_mode);
11023         #endif // CONFIG_LPS
11024         }
11025
11026         return err;
11027 }
11028
11029
11030 #ifdef CONFIG_MP_INCLUDED
11031
11032 #ifdef CONFIG_SDIO_INDIRECT_ACCESS
11033 #define DBG_MP_SDIO_INDIRECT_ACCESS 1
11034 static int rtw_mp_sd_iread(struct net_device *dev
11035         , struct iw_request_info *info
11036         , struct iw_point *wrqu
11037         , char *extra)
11038 {
11039         char input[16];
11040         u8 width;
11041         unsigned long addr;
11042         u32 ret = 0;
11043         PADAPTER padapter = rtw_netdev_priv(dev);
11044
11045         if (wrqu->length > 16) {
11046                 DBG_871X(FUNC_ADPT_FMT" wrqu->length:%d\n", FUNC_ADPT_ARG(padapter), wrqu->length);
11047                 ret = -EINVAL;
11048                 goto exit;
11049         }
11050
11051         if (copy_from_user(input, wrqu->pointer, wrqu->length)) {
11052                 DBG_871X(FUNC_ADPT_FMT" copy_from_user fail\n", FUNC_ADPT_ARG(padapter));
11053                 ret = -EFAULT;
11054                 goto exit;
11055         }
11056
11057         _rtw_memset(extra, 0, wrqu->length);
11058
11059         if (sscanf(input, "%hhu,%lx", &width, &addr) != 2) {
11060                 DBG_871X(FUNC_ADPT_FMT" sscanf fail\n", FUNC_ADPT_ARG(padapter));
11061                 ret = -EINVAL;
11062                 goto exit;
11063         }
11064
11065         if (addr > 0x3FFF) {
11066                 DBG_871X(FUNC_ADPT_FMT" addr:0x%lx\n", FUNC_ADPT_ARG(padapter), addr);
11067                 ret = -EINVAL;
11068                 goto exit;
11069         }
11070
11071         if (DBG_MP_SDIO_INDIRECT_ACCESS)
11072                 DBG_871X(FUNC_ADPT_FMT" width:%u, addr:0x%lx\n", FUNC_ADPT_ARG(padapter), width, addr);
11073
11074         switch (width) {
11075         case 1:
11076                 sprintf(extra, "0x%02x", rtw_sd_iread8(padapter, addr));
11077                 wrqu->length = strlen(extra);
11078                 break;
11079         case 2:
11080                 sprintf(extra, "0x%04x", rtw_sd_iread16(padapter, addr));
11081                 wrqu->length = strlen(extra);
11082                 break;
11083         case 4:
11084                 sprintf(extra, "0x%08x", rtw_sd_iread32(padapter, addr));
11085                 wrqu->length = strlen(extra);
11086                 break;
11087         default:
11088                 wrqu->length = 0;
11089                 ret = -EINVAL;
11090                 break;
11091         }
11092
11093 exit:
11094         return ret;
11095 }
11096
11097 static int rtw_mp_sd_iwrite(struct net_device *dev
11098         , struct iw_request_info *info
11099         , struct iw_point *wrqu
11100         , char *extra)
11101 {
11102         char width;
11103         unsigned long addr, data;
11104         int ret = 0;
11105         PADAPTER padapter = rtw_netdev_priv(dev);
11106         char input[32];
11107
11108         if (wrqu->length > 32) {
11109                 DBG_871X(FUNC_ADPT_FMT" wrqu->length:%d\n", FUNC_ADPT_ARG(padapter), wrqu->length);
11110                 ret = -EINVAL;
11111                 goto exit;
11112         }
11113
11114         if (copy_from_user(input, wrqu->pointer, wrqu->length)) {
11115                 DBG_871X(FUNC_ADPT_FMT" copy_from_user fail\n", FUNC_ADPT_ARG(padapter));
11116                 ret = -EFAULT;
11117                 goto exit;
11118         }
11119
11120         _rtw_memset(extra, 0, wrqu->length);
11121
11122         if (sscanf(input, "%hhu,%lx,%lx", &width, &addr, &data) != 3) {
11123                 DBG_871X(FUNC_ADPT_FMT" sscanf fail\n", FUNC_ADPT_ARG(padapter));
11124                 ret = -EINVAL;
11125                 goto exit;
11126         }
11127
11128         if (addr > 0x3FFF) {
11129                 DBG_871X(FUNC_ADPT_FMT" addr:0x%lx\n", FUNC_ADPT_ARG(padapter), addr);
11130                 ret = -EINVAL;
11131                 goto exit;
11132         }
11133
11134         if (DBG_MP_SDIO_INDIRECT_ACCESS)
11135                 DBG_871X(FUNC_ADPT_FMT" width:%u, addr:0x%lx, data:0x%lx\n", FUNC_ADPT_ARG(padapter), width, addr, data);
11136
11137         switch (width) {
11138         case 1:
11139                 if (data > 0xFF) {
11140                         ret = -EINVAL;
11141                         break;
11142                 }
11143                 rtw_sd_iwrite8(padapter, addr, data);
11144                 break;
11145         case 2:
11146                 if (data > 0xFFFF) {
11147                         ret = -EINVAL;
11148                         break;
11149                 }
11150                 rtw_sd_iwrite16(padapter, addr, data);
11151                 break;
11152         case 4:
11153                 rtw_sd_iwrite32(padapter, addr, data);
11154                 break;
11155         default:
11156                 wrqu->length = 0;
11157                 ret = -EINVAL;
11158                 break;
11159         }
11160
11161 exit:
11162         return ret;
11163 }
11164 #endif /* CONFIG_SDIO_INDIRECT_ACCESS */
11165
11166 static int rtw_mp_set(struct net_device *dev,
11167                         struct iw_request_info *info,
11168                         union iwreq_data *wdata, char *extra)
11169 {
11170         struct iw_point *wrqu = (struct iw_point *)wdata;
11171         u32 subcmd = wrqu->flags;
11172         PADAPTER padapter = rtw_netdev_priv(dev);
11173
11174         if (padapter == NULL)
11175         {
11176                 return -ENETDOWN;
11177         }
11178
11179         if((padapter->bup == _FALSE ))
11180         {
11181                 DBG_871X(" %s fail =>(padapter->bup == _FALSE )\n",__FUNCTION__);
11182                 return -ENETDOWN;
11183         }
11184
11185         if (RTW_CANNOT_RUN(padapter)) {
11186                 DBG_871X("%s fail =>(bSurpriseRemoved == _TRUE) || ( bDriverStopped == _TRUE)\n", __func__);
11187                 return -ENETDOWN;
11188        }
11189
11190
11191         //_rtw_memset(extra, 0x00, IW_PRIV_SIZE_MASK);
11192
11193         if (extra == NULL)
11194         {
11195                 wrqu->length = 0;
11196                 return -EIO;
11197         }
11198
11199         switch(subcmd)
11200         {
11201         case MP_START:
11202                         DBG_871X("set case mp_start \n");
11203                         rtw_mp_start (dev,info,wrqu,extra);
11204                          break;
11205
11206         case MP_STOP:
11207                         DBG_871X("set case mp_stop \n");
11208                         rtw_mp_stop (dev,info,wrqu,extra);
11209                          break;
11210
11211         case MP_BANDWIDTH:
11212                         DBG_871X("set case mp_bandwidth \n");
11213                         rtw_mp_bandwidth (dev,info,wrqu,extra);
11214                         break;
11215
11216         case MP_RESET_STATS:
11217                         DBG_871X("set case MP_RESET_STATS \n");
11218                         rtw_mp_reset_stats      (dev,info,wrqu,extra);
11219                         break;
11220         case MP_SetRFPathSwh:
11221                         DBG_871X("set MP_SetRFPathSwitch \n");
11222                         rtw_mp_SetRFPath  (dev,info,wdata,extra);
11223                         break;
11224         case CTA_TEST:
11225                         DBG_871X("set CTA_TEST\n");
11226                         rtw_cta_test_start (dev, info, wdata, extra);
11227                         break;
11228         case MP_DISABLE_BT_COEXIST:
11229                         DBG_871X("set case MP_DISABLE_BT_COEXIST \n");
11230                         rtw_mp_disable_bt_coexist(dev, info, wdata, extra);
11231                 break;
11232 #ifdef CONFIG_WOWLAN
11233         case MP_WOW_ENABLE:
11234                         DBG_871X("set case MP_WOW_ENABLE: %s\n", extra);
11235
11236                         rtw_wowlan_ctrl(dev, info, wdata, extra);
11237         break;
11238         case MP_WOW_SET_PATTERN:
11239                         DBG_871X("set case MP_WOW_SET_PATTERN: %s\n", extra);
11240                         rtw_wowlan_set_pattern(dev, info, wdata, extra);
11241         break;
11242 #endif
11243 #ifdef CONFIG_AP_WOWLAN
11244         case MP_AP_WOW_ENABLE:
11245                         DBG_871X("set case MP_AP_WOW_ENABLE: %s\n", extra);
11246                         rtw_ap_wowlan_ctrl(dev, info, wdata, extra);
11247         break;
11248 #endif
11249         }
11250
11251
11252         return 0;
11253 }
11254
11255
11256 static int rtw_mp_get(struct net_device *dev,
11257                         struct iw_request_info *info,
11258                         union iwreq_data *wdata, char *extra)
11259 {
11260         struct iw_point *wrqu = (struct iw_point *)wdata;
11261         u32 subcmd = wrqu->flags;
11262         PADAPTER padapter = rtw_netdev_priv(dev);
11263
11264         //DBG_871X("in mp_get extra= %s \n",extra);
11265
11266         if (padapter == NULL)
11267         {
11268                 return -ENETDOWN;
11269         }
11270         if((padapter->bup == _FALSE ))
11271         {
11272                 DBG_871X(" %s fail =>(padapter->bup == _FALSE )\n",__FUNCTION__);
11273                 return -ENETDOWN;
11274         }
11275
11276         if (RTW_CANNOT_RUN(padapter)) {
11277                 DBG_871X("%s fail =>(padapter->bSurpriseRemoved == _TRUE) || ( padapter->bDriverStopped == _TRUE)\n", __func__);
11278                 return -ENETDOWN;
11279        }
11280
11281         if (extra == NULL) {
11282                 wrqu->length = 0;
11283                 return -EIO;
11284         }
11285
11286         switch (subcmd) {
11287         case WRITE_REG:
11288                         rtw_mp_write_reg(dev, info, wrqu, extra);
11289                          break;
11290
11291         case WRITE_RF:
11292                         rtw_mp_write_rf(dev, info, wrqu, extra);
11293                          break;
11294
11295         case MP_PHYPARA:
11296                         DBG_871X("mp_get  MP_PHYPARA\n");
11297                         rtw_mp_phypara(dev, info, wrqu, extra);
11298                         break;
11299
11300         case MP_CHANNEL:
11301                         DBG_871X("set case mp_channel\n");
11302                         rtw_mp_channel(dev , info, wrqu, extra);
11303                         break;
11304
11305         case READ_REG:
11306                         DBG_871X("mp_get  READ_REG\n");
11307                         rtw_mp_read_reg(dev, info, wrqu, extra);
11308                          break;
11309         case READ_RF:
11310                         DBG_871X("mp_get  READ_RF\n");
11311                         rtw_mp_read_rf(dev, info, wrqu, extra);
11312                         break;
11313
11314         case MP_RATE:
11315                         DBG_871X("set case mp_rate\n");
11316                         rtw_mp_rate(dev, info, wrqu, extra);
11317                         break;
11318
11319         case MP_TXPOWER:
11320                         DBG_871X("set case MP_TXPOWER\n");
11321                         rtw_mp_txpower(dev, info, wrqu, extra);
11322                         break;
11323
11324         case MP_ANT_TX:
11325                         DBG_871X("set case MP_ANT_TX\n");
11326                         rtw_mp_ant_tx(dev, info, wrqu, extra);
11327                         break;
11328
11329         case MP_ANT_RX:
11330                         DBG_871X("set case MP_ANT_RX\n");
11331                         rtw_mp_ant_rx(dev, info, wrqu, extra);
11332                         break;
11333
11334         case MP_QUERY:
11335                         rtw_mp_trx_query(dev, info, wrqu, extra);
11336                         break;
11337
11338         case MP_CTX:
11339                         DBG_871X("set case MP_CTX\n");
11340                         rtw_mp_ctx(dev, info, wrqu, extra);
11341                         break;
11342
11343         case MP_ARX:
11344                         DBG_871X("set case MP_ARX\n");
11345                         rtw_mp_arx(dev, info, wrqu, extra);
11346                         break;
11347
11348         case EFUSE_GET:
11349                         DBG_871X("efuse get EFUSE_GET\n");
11350                         rtw_mp_efuse_get(dev, info, wdata, extra);
11351                  break;
11352
11353         case MP_DUMP:
11354                         DBG_871X("set case MP_DUMP\n");
11355                         rtw_mp_dump(dev, info, wrqu, extra);
11356                  break;
11357         case MP_PSD:
11358                         DBG_871X("set case MP_PSD\n");
11359                         rtw_mp_psd(dev, info, wrqu, extra);
11360                  break;
11361         case MP_THER:
11362                         DBG_871X("set case MP_THER\n");
11363                         rtw_mp_thermal(dev, info, wrqu, extra);
11364                 break;
11365         case MP_PwrCtlDM:
11366                         DBG_871X("set MP_PwrCtlDM\n");
11367                         rtw_mp_PwrCtlDM(dev, info, wrqu, extra);
11368                 break;
11369         case MP_QueryDrvStats:
11370                         DBG_871X("mp_get MP_QueryDrvStats\n");
11371                         rtw_mp_QueryDrv(dev, info, wdata, extra);
11372                         break;
11373         case MP_PWRTRK:
11374                         DBG_871X("set case MP_PWRTRK\n");
11375                         rtw_mp_pwrtrk(dev, info, wrqu, extra);
11376                         break;
11377         case EFUSE_SET:
11378                         DBG_871X("set case efuse set\n");
11379                         rtw_mp_efuse_set(dev, info, wdata, extra);
11380                         break;
11381         case MP_GET_TXPOWER_INX:
11382                         DBG_871X("mp_get MP_GET_TXPOWER_INX\n");
11383                         rtw_mp_txpower_index(dev, info, wrqu, extra);
11384                         break;
11385         case MP_GETVER:
11386                         DBG_871X("mp_get MP_GETVER\n");
11387                         rtw_mp_getver(dev, info, wdata, extra);
11388                         break;
11389         case MP_MON:
11390                         DBG_871X("mp_get MP_MON\n");
11391                         rtw_mp_mon(dev, info, wdata, extra);
11392                         break;
11393         case EFUSE_MASK:
11394                         DBG_871X("mp_get EFUSE_MASK\n");
11395                         rtw_efuse_mask_file(dev, info, wdata, extra);
11396                         break;
11397         case  EFUSE_FILE:
11398                         DBG_871X("mp_get EFUSE_FILE\n");
11399                         rtw_efuse_file_map(dev, info, wdata, extra);
11400                         break;
11401         case  MP_TX:
11402                         DBG_871X("mp_get MP_TX\n");
11403                         rtw_mp_tx(dev, info, wdata, extra);
11404                         break;
11405         case  MP_RX:
11406                         DBG_871X("mp_get MP_RX\n");
11407                         rtw_mp_rx(dev, info, wdata, extra);
11408                         break;
11409         case MP_HW_TX_MODE:
11410                         DBG_871X("mp_get MP_HW_TX_MODE\n");
11411                         rtw_mp_hwtx(dev, info, wdata, extra);
11412                         break;
11413 #if defined(CONFIG_RTL8723B)
11414         case MP_SetBT:
11415                         DBG_871X("set MP_SetBT\n");
11416                         rtw_mp_SetBT(dev, info, wdata, extra);
11417                         break;
11418 #endif
11419 #ifdef CONFIG_SDIO_INDIRECT_ACCESS
11420         case MP_SD_IREAD:
11421                 rtw_mp_sd_iread(dev, info, wrqu, extra);
11422                 break;
11423         case MP_SD_IWRITE:
11424                 rtw_mp_sd_iwrite(dev, info, wrqu, extra);
11425                 break;
11426 #endif
11427         }
11428
11429         rtw_msleep_os(10); //delay 5ms for sending pkt before exit adb shell operation
11430 return 0;
11431 }
11432
11433 #endif /*#if defined(CONFIG_MP_INCLUDED)*/
11434
11435 static int rtw_wx_tdls_wfd_enable(struct net_device *dev,
11436                                 struct iw_request_info *info,
11437                                 union iwreq_data *wrqu, char *extra)
11438 {
11439         int ret = 0;
11440
11441 #ifdef CONFIG_TDLS
11442 #ifdef CONFIG_WFD
11443
11444         _adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
11445
11446         DBG_871X( "[%s] %s %d\n", __FUNCTION__, extra, wrqu->data.length -1  );
11447
11448         if ( extra[ 0 ] == '0' )
11449                 rtw_tdls_wfd_enable(padapter, 0);
11450         else
11451                 rtw_tdls_wfd_enable(padapter, 1);
11452
11453 #endif /* CONFIG_WFD */
11454 #endif /* CONFIG_TDLS */
11455
11456         return ret;
11457 }
11458
11459 static int rtw_tdls_weaksec(struct net_device *dev,
11460                                 struct iw_request_info *info,
11461                                 union iwreq_data *wrqu, char *extra)
11462 {
11463         int ret = 0;
11464
11465 #ifdef CONFIG_TDLS
11466
11467         u8 i, j;
11468         _adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
11469
11470         DBG_871X( "[%s] %s %d\n", __FUNCTION__, extra, wrqu->data.length -1  );
11471
11472         if ( extra[ 0 ] == '0' )
11473                 padapter->wdinfo.wfd_tdls_weaksec = 0;
11474         else
11475                 padapter->wdinfo.wfd_tdls_weaksec = 1;
11476
11477 #endif /* CONFIG_TDLS */
11478
11479         return ret;
11480 }
11481
11482
11483 static int rtw_tdls_enable(struct net_device *dev,
11484                                 struct iw_request_info *info,
11485                                 union iwreq_data *wrqu, char *extra)
11486 {
11487         int ret = 0;
11488
11489 #ifdef CONFIG_TDLS
11490
11491         _adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
11492         struct tdls_info        *ptdlsinfo = &padapter->tdlsinfo;
11493         _irqL    irqL;
11494         _list   *plist, *phead;
11495         s32     index;
11496         struct sta_info *psta = NULL;
11497         struct  sta_priv *pstapriv = &padapter->stapriv;
11498         u8 tdls_sta[NUM_STA][ETH_ALEN];
11499         u8 empty_hwaddr[ETH_ALEN] = { 0x00 };
11500         struct tdls_txmgmt txmgmt;
11501
11502         DBG_871X( "[%s] %s %d\n", __FUNCTION__, extra, wrqu->data.length -1  );
11503
11504         _rtw_memset(tdls_sta, 0x00, sizeof(tdls_sta));
11505         _rtw_memset(&txmgmt, 0x00, sizeof(struct tdls_txmgmt));
11506
11507         if (extra[ 0 ] == '0') {
11508                 ptdlsinfo->tdls_enable = 0;
11509
11510                 if(pstapriv->asoc_sta_count==1)
11511                         return ret;
11512
11513                 _enter_critical_bh(&pstapriv->sta_hash_lock, &irqL);
11514                 for (index=0; index< NUM_STA; index++) {
11515                         phead = &(pstapriv->sta_hash[index]);
11516                         plist = get_next(phead);
11517
11518                         while (rtw_end_of_queue_search(phead, plist) == _FALSE) {
11519                                 psta = LIST_CONTAINOR(plist, struct sta_info ,hash_list);
11520
11521                                 plist = get_next(plist);
11522
11523                                 if (psta->tdls_sta_state != TDLS_STATE_NONE) {
11524                                         _rtw_memcpy(tdls_sta[index], psta->hwaddr, ETH_ALEN);
11525                                 }
11526                         }
11527                 }
11528                 _exit_critical_bh(&pstapriv->sta_hash_lock, &irqL);
11529
11530                 for (index=0; index< NUM_STA; index++) {
11531                         if (!_rtw_memcmp(tdls_sta[index], empty_hwaddr, ETH_ALEN)) {
11532                                 DBG_871X("issue tear down to "MAC_FMT"\n", MAC_ARG(tdls_sta[index]));
11533                                 txmgmt.status_code = _RSON_TDLS_TEAR_UN_RSN_;
11534                                 _rtw_memcpy(txmgmt.peer, tdls_sta[index], ETH_ALEN);
11535                                 issue_tdls_teardown(padapter, &txmgmt, _TRUE);
11536                         }
11537                 }
11538                 rtw_tdls_cmd(padapter, NULL, TDLS_RS_RCR);
11539                 rtw_reset_tdls_info(padapter);
11540         }       else if (extra[0] == '1') {
11541                 ptdlsinfo->tdls_enable = 1;
11542         }
11543 #endif /* CONFIG_TDLS */
11544
11545         return ret;
11546 }
11547
11548 static int rtw_tdls_setup(struct net_device *dev,
11549                                 struct iw_request_info *info,
11550                                 union iwreq_data *wrqu, char *extra)
11551 {
11552         int ret = 0;
11553 #ifdef CONFIG_TDLS
11554         u8 i, j;
11555         _adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
11556         struct tdls_txmgmt txmgmt;
11557 #ifdef CONFIG_WFD
11558         struct wifidirect_info *pwdinfo= &(padapter->wdinfo);
11559 #endif /* CONFIG_WFD */
11560
11561         DBG_871X("[%s] %s %d\n", __FUNCTION__, extra, wrqu->data.length -1);
11562
11563         if (wrqu->data.length - 1 != 17) {
11564                 DBG_871X("[%s] length:%d != 17\n", __FUNCTION__, (wrqu->data.length -1));
11565                 return ret;
11566         }
11567
11568         _rtw_memset(&txmgmt, 0x00, sizeof(struct tdls_txmgmt));
11569         for( i=0, j=0 ; i < ETH_ALEN; i++, j+=3 ){
11570                 txmgmt.peer[i]=key_2char2num(*(extra+j), *(extra+j+1));
11571         }
11572
11573 #ifdef CONFIG_WFD
11574         if (_AES_ != padapter->securitypriv.dot11PrivacyAlgrthm) {
11575                 /* Weak Security situation with AP. */
11576                 if (0 == pwdinfo->wfd_tdls_weaksec)     {
11577                         /* Can't send the tdls setup request out!! */
11578                         DBG_871X("[%s] Current link is not AES, "
11579                                 "SKIP sending the tdls setup request!!\n", __FUNCTION__);
11580                 } else {
11581                         issue_tdls_setup_req(padapter, &txmgmt, _TRUE);
11582                 }
11583         } else
11584 #endif /* CONFIG_WFD */
11585         {
11586                 issue_tdls_setup_req(padapter, &txmgmt, _TRUE);
11587         }
11588 #endif /* CONFIG_TDLS */
11589
11590         return ret;
11591 }
11592
11593 static int rtw_tdls_teardown(struct net_device *dev,
11594                                 struct iw_request_info *info,
11595                                 union iwreq_data *wrqu, char *extra)
11596 {
11597         int ret = 0;
11598
11599 #ifdef CONFIG_TDLS
11600
11601         u8 i,j;
11602         _adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
11603         struct sta_info *ptdls_sta = NULL;
11604         struct tdls_txmgmt txmgmt;
11605
11606         DBG_871X( "[%s] %s %d\n", __FUNCTION__, extra, wrqu->data.length -1  );
11607
11608         if (wrqu->data.length - 1 != 17 && wrqu->data.length - 1 != 19) {
11609                 DBG_871X("[%s] length:%d != 17 or 19\n",
11610                         __FUNCTION__, (wrqu->data.length -1));
11611                 return ret;
11612         }
11613
11614         _rtw_memset(&txmgmt, 0x00, sizeof(struct tdls_txmgmt));
11615         for (i=0, j=0; i < ETH_ALEN; i++, j+=3)
11616                 txmgmt.peer[i]=key_2char2num(*(extra+j), *(extra+j+1));
11617
11618         ptdls_sta = rtw_get_stainfo( &(padapter->stapriv), txmgmt.peer);
11619
11620         if (ptdls_sta != NULL) {
11621                 txmgmt.status_code = _RSON_TDLS_TEAR_UN_RSN_;
11622                 if (wrqu->data.length - 1 == 19)
11623                         issue_tdls_teardown(padapter, &txmgmt, _FALSE);
11624                 else
11625                         issue_tdls_teardown(padapter, &txmgmt, _TRUE);
11626         } else {
11627                 DBG_871X( "TDLS peer not found\n");
11628         }
11629 #endif /* CONFIG_TDLS */
11630
11631         return ret;
11632 }
11633
11634 static int rtw_tdls_discovery(struct net_device *dev,
11635                                 struct iw_request_info *info,
11636                                 union iwreq_data *wrqu, char *extra)
11637 {
11638         int ret = 0;
11639
11640 #ifdef CONFIG_TDLS
11641
11642         _adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
11643         struct tdls_txmgmt      txmgmt;
11644         int i = 0, j=0;
11645
11646         DBG_871X( "[%s] %s %d\n", __FUNCTION__, extra, wrqu->data.length -1  );
11647
11648         _rtw_memset(&txmgmt, 0x00, sizeof(struct tdls_txmgmt));
11649         for( i=0, j=0 ; i < ETH_ALEN; i++, j+=3 ){
11650                 txmgmt.peer[i]=key_2char2num(*(extra+j), *(extra+j+1));
11651         }
11652
11653         issue_tdls_dis_req(padapter, &txmgmt);
11654
11655 #endif /* CONFIG_TDLS */
11656
11657         return ret;
11658 }
11659
11660 static int rtw_tdls_ch_switch(struct net_device *dev,
11661                                 struct iw_request_info *info,
11662                                 union iwreq_data *wrqu, char *extra)
11663 {
11664         int ret = 0;
11665         u8 tmp;
11666
11667 #ifdef CONFIG_TDLS
11668 #ifdef CONFIG_TDLS_CH_SW
11669         _adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
11670         struct tdls_ch_switch *pchsw_info = &padapter->tdlsinfo.chsw_info;
11671         u8 i, j;
11672         struct sta_info *ptdls_sta = NULL;
11673         u8 take_care_iqk;
11674
11675         DBG_8192C( "[%s] %s %d\n", __FUNCTION__, extra, wrqu->data.length -1  );
11676
11677         if (rtw_tdls_is_chsw_allowed(padapter) == _FALSE)
11678         {
11679                 DBG_871X("TDLS channel switch is not allowed\n");
11680                 return ret;
11681         }
11682
11683         for( i=0, j=0 ; i < ETH_ALEN; i++, j+=3 ){
11684                 pchsw_info->addr[i] = key_2char2num(*(extra+j), *(extra+j+1));
11685         }
11686
11687         ptdls_sta = rtw_get_stainfo(&padapter->stapriv, pchsw_info->addr);
11688         if( ptdls_sta == NULL )
11689                 return ret;
11690
11691         pchsw_info->ch_sw_state |= TDLS_CH_SW_INITIATOR_STATE;
11692
11693         if (ptdls_sta != NULL) {
11694                 if (pchsw_info->off_ch_num == 0)
11695                         pchsw_info->off_ch_num = 11;
11696         }else {
11697                 DBG_871X( "TDLS peer not found\n");
11698         }
11699
11700         rtw_pm_set_lps(padapter, PS_MODE_ACTIVE);
11701
11702         rtw_hal_get_hwreg(padapter, HW_VAR_CH_SW_NEED_TO_TAKE_CARE_IQK_INFO, &take_care_iqk);
11703         if (take_care_iqk == _TRUE) {
11704                 u8 central_chnl;
11705                 u8 bw_mode;
11706
11707                 bw_mode = (pchsw_info->ch_offset) ? CHANNEL_WIDTH_40 : CHANNEL_WIDTH_20;
11708                 central_chnl = rtw_get_center_ch(pchsw_info->off_ch_num, bw_mode, pchsw_info->ch_offset);
11709                 if (rtw_hal_ch_sw_iqk_info_search(padapter, central_chnl, bw_mode) >= 0)
11710                         rtw_tdls_cmd(padapter, ptdls_sta->hwaddr, TDLS_CH_SW_START);
11711                 else
11712                         rtw_tdls_cmd(padapter, ptdls_sta->hwaddr, TDLS_CH_SW_PREPARE);
11713         }
11714         else
11715                 rtw_tdls_cmd(padapter, ptdls_sta->hwaddr, TDLS_CH_SW_START);
11716
11717         //issue_tdls_ch_switch_req(padapter, ptdls_sta);
11718         /* DBG_871X("issue tdls ch switch req\n"); */
11719
11720 #endif /* CONFIG_TDLS_CH_SW */
11721 #endif /* CONFIG_TDLS */
11722
11723         return ret;
11724 }
11725
11726 static int rtw_tdls_ch_switch_off(struct net_device *dev,
11727                                 struct iw_request_info *info,
11728                                 union iwreq_data *wrqu, char *extra)
11729 {
11730         int ret = 0;
11731
11732 #ifdef CONFIG_TDLS
11733 #ifdef CONFIG_TDLS_CH_SW
11734
11735         _adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
11736         struct tdls_ch_switch *pchsw_info = &padapter->tdlsinfo.chsw_info;
11737         u8 i, j, mac_addr[ETH_ALEN];
11738         struct sta_info *ptdls_sta = NULL;
11739         struct tdls_txmgmt txmgmt;
11740
11741         _rtw_memset(&txmgmt, 0x00, sizeof(struct tdls_txmgmt));
11742
11743         DBG_871X( "[%s] %s %d\n", __FUNCTION__, extra, wrqu->data.length -1  );
11744
11745         if (rtw_tdls_is_chsw_allowed(padapter) == _FALSE)
11746         {
11747                 DBG_871X("TDLS channel switch is not allowed\n");
11748                 return ret;
11749         }
11750
11751         if (wrqu->data.length >= 17) {
11752                 for (i=0, j=0 ; i < ETH_ALEN; i++, j+=3)
11753                 mac_addr[i]=key_2char2num(*(extra+j), *(extra+j+1));
11754                         ptdls_sta = rtw_get_stainfo(&padapter->stapriv, mac_addr);
11755         }
11756
11757         if (ptdls_sta == NULL)
11758                 return ret;
11759
11760         rtw_tdls_cmd(padapter, ptdls_sta->hwaddr, TDLS_CH_SW_END_TO_BASE_CHNL);
11761
11762         pchsw_info->ch_sw_state &= ~(TDLS_CH_SW_INITIATOR_STATE |
11763                                                                 TDLS_CH_SWITCH_ON_STATE |
11764                                                                 TDLS_PEER_AT_OFF_STATE);
11765         _rtw_memset(pchsw_info->addr, 0x00, ETH_ALEN);
11766
11767         ptdls_sta->ch_switch_time = 0;
11768         ptdls_sta->ch_switch_timeout = 0;
11769         _cancel_timer_ex(&ptdls_sta->ch_sw_timer);
11770         _cancel_timer_ex(&ptdls_sta->delay_timer);
11771         _cancel_timer_ex(&ptdls_sta->stay_on_base_chnl_timer);
11772         _cancel_timer_ex(&ptdls_sta->ch_sw_monitor_timer);
11773
11774         rtw_pm_set_lps(padapter, PS_MODE_MAX);
11775 #endif /* CONFIG_TDLS_CH_SW */
11776 #endif /* CONFIG_TDLS */
11777
11778         return ret;
11779 }
11780
11781 static int rtw_tdls_dump_ch(struct net_device *dev,
11782                                 struct iw_request_info *info,
11783                                 union iwreq_data *wrqu, char *extra)
11784 {
11785         int ret = 0;
11786
11787 #ifdef CONFIG_TDLS
11788 #ifdef CONFIG_TDLS_CH_SW
11789         _adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
11790         struct tdls_info *ptdlsinfo = &padapter->tdlsinfo;
11791
11792         DBG_8192C("[%s] dump_stack:%s\n", __FUNCTION__, extra);
11793
11794         extra[ wrqu->data.length ] = 0x00;
11795         ptdlsinfo->chsw_info.dump_stack = rtw_atoi( extra );
11796
11797         return ret;
11798
11799 #endif
11800 #endif /* CONFIG_TDLS */
11801
11802         return ret;
11803 }
11804
11805 static int rtw_tdls_off_ch_num(struct net_device *dev,
11806                                 struct iw_request_info *info,
11807                                 union iwreq_data *wrqu, char *extra)
11808 {
11809         int ret = 0;
11810
11811 #ifdef CONFIG_TDLS
11812 #ifdef CONFIG_TDLS_CH_SW
11813         _adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
11814         struct tdls_info *ptdlsinfo = &padapter->tdlsinfo;
11815
11816         DBG_8192C("[%s] off_ch_num:%s\n", __FUNCTION__, extra);
11817
11818         extra[ wrqu->data.length ] = 0x00;
11819         ptdlsinfo->chsw_info.off_ch_num = rtw_atoi(extra);
11820
11821         return ret;
11822
11823 #endif
11824 #endif /* CONFIG_TDLS */
11825
11826         return ret;
11827 }
11828
11829 static int rtw_tdls_ch_offset(struct net_device *dev,
11830                                 struct iw_request_info *info,
11831                                 union iwreq_data *wrqu, char *extra)
11832 {
11833         int ret = 0;
11834
11835 #ifdef CONFIG_TDLS
11836 #ifdef CONFIG_TDLS_CH_SW
11837         _adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
11838         struct tdls_info *ptdlsinfo = &padapter->tdlsinfo;
11839
11840         DBG_8192C("[%s] ch_offset:%s\n", __FUNCTION__, extra);
11841
11842         extra[ wrqu->data.length ] = 0x00;
11843         switch (rtw_atoi(extra))
11844         {
11845         case SCA:
11846                 ptdlsinfo->chsw_info.ch_offset = HAL_PRIME_CHNL_OFFSET_LOWER;
11847                 break;
11848
11849         case SCB:
11850                 ptdlsinfo->chsw_info.ch_offset = HAL_PRIME_CHNL_OFFSET_UPPER;
11851                 break;
11852
11853         default:
11854                 ptdlsinfo->chsw_info.ch_offset = HAL_PRIME_CHNL_OFFSET_DONT_CARE;
11855                 break;
11856         }
11857
11858         return ret;
11859
11860 #endif
11861 #endif /* CONFIG_TDLS */
11862
11863                 return ret;
11864 }
11865
11866 static int rtw_tdls_pson(struct net_device *dev,
11867                                 struct iw_request_info *info,
11868                                 union iwreq_data *wrqu, char *extra)
11869 {
11870         int ret = 0;
11871
11872 #ifdef CONFIG_TDLS
11873
11874         _adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
11875         u8 i, j, mac_addr[ETH_ALEN];
11876         struct sta_info *ptdls_sta = NULL;
11877
11878         DBG_871X( "[%s] %s %d\n", __FUNCTION__, extra, wrqu->data.length -1  );
11879
11880         for (i=0, j=0; i < ETH_ALEN; i++, j+=3)
11881                 mac_addr[i]=key_2char2num(*(extra+j), *(extra+j+1));
11882
11883         ptdls_sta = rtw_get_stainfo(&padapter->stapriv, mac_addr);
11884
11885         issue_nulldata_to_TDLS_peer_STA(padapter, ptdls_sta->hwaddr, 1, 3, 500);
11886
11887 #endif /* CONFIG_TDLS */
11888
11889                 return ret;
11890 }
11891
11892 static int rtw_tdls_psoff(struct net_device *dev,
11893                                 struct iw_request_info *info,
11894                                 union iwreq_data *wrqu, char *extra)
11895 {
11896         int ret = 0;
11897
11898 #ifdef CONFIG_TDLS
11899
11900         _adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
11901         u8 i, j, mac_addr[ETH_ALEN];
11902         struct sta_info *ptdls_sta = NULL;
11903
11904         DBG_8192C( "[%s] %s %d\n", __FUNCTION__, extra, wrqu->data.length -1  );
11905
11906         for (i=0, j=0; i < ETH_ALEN; i++, j+=3)
11907                 mac_addr[i]=key_2char2num(*(extra+j), *(extra+j+1));
11908
11909         ptdls_sta = rtw_get_stainfo(&padapter->stapriv, mac_addr);
11910
11911         if(ptdls_sta)
11912                 issue_nulldata_to_TDLS_peer_STA(padapter, ptdls_sta->hwaddr, 0, 3, 500);
11913
11914 #endif /* CONFIG_TDLS */
11915
11916         return ret;
11917 }
11918
11919 static int rtw_tdls_setip(struct net_device *dev,
11920                                 struct iw_request_info *info,
11921                                 union iwreq_data *wrqu, char *extra)
11922 {
11923         int ret = 0;
11924
11925 #ifdef CONFIG_TDLS
11926 #ifdef CONFIG_WFD
11927
11928         _adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
11929         struct tdls_info *ptdlsinfo = &padapter->tdlsinfo;
11930         struct wifi_display_info *pwfd_info = ptdlsinfo->wfd_info;
11931         u8 i=0, j=0, k=0, tag=0;
11932
11933         DBG_871X("[%s] %s %d\n", __FUNCTION__, extra, wrqu->data.length - 1);
11934
11935         while (i < 4) {
11936                 for (j=0; j < 4; j++) {
11937                         if (*( extra + j + tag ) == '.' || *( extra + j + tag ) == '\0') {
11938                                 if( j == 1 )
11939                                         pwfd_info->ip_address[i]=convert_ip_addr( '0', '0', *(extra+(j-1)+tag));
11940                                 if( j == 2 )
11941                                         pwfd_info->ip_address[i]=convert_ip_addr( '0', *(extra+(j-2)+tag), *(extra+(j-1)+tag));
11942                                 if( j == 3 )
11943                                         pwfd_info->ip_address[i]=convert_ip_addr( *(extra+(j-3)+tag), *(extra+(j-2)+tag), *(extra+(j-1)+tag));
11944
11945                                 tag += j + 1;
11946                                 break;
11947                         }
11948                 }
11949                 i++;
11950         }
11951
11952         DBG_871X( "[%s] Set IP = %u.%u.%u.%u \n", __FUNCTION__,
11953                 ptdlsinfo->wfd_info->ip_address[0],
11954                 ptdlsinfo->wfd_info->ip_address[1],
11955                 ptdlsinfo->wfd_info->ip_address[2],
11956                 ptdlsinfo->wfd_info->ip_address[3]);
11957
11958 #endif /* CONFIG_WFD */
11959 #endif /* CONFIG_TDLS */
11960
11961         return ret;
11962 }
11963
11964 static int rtw_tdls_getip(struct net_device *dev,
11965                                 struct iw_request_info *info,
11966                                 union iwreq_data *wrqu, char *extra)
11967 {
11968         int ret = 0;
11969
11970 #ifdef CONFIG_TDLS
11971 #ifdef CONFIG_WFD
11972
11973         _adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
11974         struct tdls_info *ptdlsinfo = &padapter->tdlsinfo;
11975         struct wifi_display_info *pwfd_info = ptdlsinfo->wfd_info;
11976
11977         DBG_871X( "[%s]\n", __FUNCTION__);
11978
11979         sprintf( extra, "\n\n%u.%u.%u.%u\n",
11980                 pwfd_info->peer_ip_address[0], pwfd_info->peer_ip_address[1],
11981                 pwfd_info->peer_ip_address[2], pwfd_info->peer_ip_address[3]);
11982
11983         DBG_871X( "[%s] IP=%u.%u.%u.%u\n", __FUNCTION__,
11984                 pwfd_info->peer_ip_address[0], pwfd_info->peer_ip_address[1],
11985                 pwfd_info->peer_ip_address[2], pwfd_info->peer_ip_address[3]);
11986
11987         wrqu->data.length = strlen( extra );
11988
11989 #endif /* CONFIG_WFD */
11990 #endif /* CONFIG_TDLS */
11991
11992         return ret;
11993 }
11994
11995 static int rtw_tdls_getport(struct net_device *dev,
11996                                struct iw_request_info *info,
11997                                union iwreq_data *wrqu, char *extra)
11998 {
11999
12000         int ret = 0;
12001
12002 #ifdef CONFIG_TDLS
12003 #ifdef CONFIG_WFD
12004
12005         _adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
12006         struct tdls_info *ptdlsinfo = &padapter->tdlsinfo;
12007         struct wifi_display_info *pwfd_info = ptdlsinfo->wfd_info;
12008
12009         DBG_871X( "[%s]\n", __FUNCTION__);
12010
12011         sprintf( extra, "\n\n%d\n", pwfd_info->peer_rtsp_ctrlport );
12012         DBG_871X( "[%s] remote port = %d\n",
12013                 __FUNCTION__, pwfd_info->peer_rtsp_ctrlport );
12014
12015         wrqu->data.length = strlen( extra );
12016
12017 #endif /* CONFIG_WFD */
12018 #endif /* CONFIG_TDLS */
12019
12020         return ret;
12021
12022 }
12023
12024 /* WFDTDLS, for sigma test */
12025 static int rtw_tdls_dis_result(struct net_device *dev,
12026                                struct iw_request_info *info,
12027                                union iwreq_data *wrqu, char *extra)
12028 {
12029
12030         int ret = 0;
12031
12032 #ifdef CONFIG_TDLS
12033 #ifdef CONFIG_WFD
12034
12035         _adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
12036         struct tdls_info *ptdlsinfo = &padapter->tdlsinfo;
12037
12038         DBG_871X( "[%s]\n", __FUNCTION__);
12039
12040         if (ptdlsinfo->dev_discovered == _TRUE) {
12041                 sprintf( extra, "\n\nDis=1\n" );
12042                 ptdlsinfo->dev_discovered = _FALSE;
12043         }
12044
12045         wrqu->data.length = strlen( extra );
12046
12047 #endif /* CONFIG_WFD */
12048 #endif /* CONFIG_TDLS */
12049
12050         return ret;
12051
12052 }
12053
12054 /* WFDTDLS, for sigma test */
12055 static int rtw_wfd_tdls_status(struct net_device *dev,
12056                                struct iw_request_info *info,
12057                                union iwreq_data *wrqu, char *extra)
12058 {
12059
12060         int ret = 0;
12061
12062 #ifdef CONFIG_TDLS
12063
12064         _adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
12065         struct tdls_info *ptdlsinfo = &padapter->tdlsinfo;
12066
12067         DBG_871X("[%s]\n", __FUNCTION__);
12068
12069         sprintf( extra, "\nlink_established:%d \n"
12070                 "sta_cnt:%d \n"
12071                 "sta_maximum:%d \n"
12072                 "cur_channel:%d \n"
12073                 "tdls_enable:%d"
12074 #ifdef CONFIG_TDLS_CH_SW
12075                 "ch_sw_state:%08x\n"
12076                 "chsw_on:%d\n"
12077                 "off_ch_num:%d\n"
12078                 "cur_time:%d\n"
12079                 "ch_offset:%d\n"
12080                 "delay_swtich_back:%d"
12081 #endif
12082                 ,
12083                 ptdlsinfo->link_established, ptdlsinfo->sta_cnt,
12084                 ptdlsinfo->sta_maximum, ptdlsinfo->cur_channel,
12085                 ptdlsinfo->tdls_enable
12086 #ifdef CONFIG_TDLS_CH_SW
12087 ,
12088                 ptdlsinfo->chsw_info.ch_sw_state,
12089                 ATOMIC_READ(&padapter->tdlsinfo.chsw_info.chsw_on),
12090                 ptdlsinfo->chsw_info.off_ch_num,
12091                 ptdlsinfo->chsw_info.cur_time,
12092                 ptdlsinfo->chsw_info.ch_offset,
12093                 ptdlsinfo->chsw_info.delay_switch_back
12094 #endif
12095 );
12096
12097         wrqu->data.length = strlen( extra );
12098
12099 #endif /* CONFIG_TDLS */
12100
12101         return ret;
12102
12103         }
12104
12105 static int rtw_tdls_getsta(struct net_device *dev,
12106                                struct iw_request_info *info,
12107                                union iwreq_data *wrqu, char *extra)
12108         {
12109
12110         int ret = 0;
12111 #ifdef CONFIG_TDLS
12112         u8 i, j;
12113         _adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
12114         u8 addr[ETH_ALEN] = {0};
12115         char charmac[17];
12116         struct sta_info *ptdls_sta = NULL;
12117
12118         DBG_871X("[%s] %s %d\n", __FUNCTION__,
12119                 (char *)wrqu->data.pointer, wrqu->data.length -1);
12120
12121         if(copy_from_user(charmac, wrqu->data.pointer+9, 17)){
12122                 ret = -EFAULT;
12123                 goto exit;
12124         }
12125
12126         DBG_871X("[%s] %d, charmac:%s\n", __FUNCTION__, __LINE__, charmac);
12127         for (i=0, j=0 ; i < ETH_ALEN; i++, j+=3)
12128                 addr[i]=key_2char2num(*(charmac+j), *(charmac+j+1));
12129
12130         DBG_871X("[%s] %d, charmac:%s, addr:"MAC_FMT"\n",
12131                 __FUNCTION__, __LINE__, charmac, MAC_ARG(addr));
12132         ptdls_sta = rtw_get_stainfo(&padapter->stapriv, addr);
12133         if(ptdls_sta) {
12134                 sprintf(extra, "\n\ntdls_sta_state=0x%08x\n", ptdls_sta->tdls_sta_state);
12135                 DBG_871X("\n\ntdls_sta_state=%d\n", ptdls_sta->tdls_sta_state);
12136         } else {
12137                 sprintf(extra, "\n\nNot found this sta\n");
12138                 DBG_871X("\n\nNot found this sta\n");
12139         }
12140         wrqu->data.length = strlen( extra );
12141
12142 #endif /* CONFIG_TDLS */
12143 exit:
12144         return ret;
12145
12146 }
12147
12148 static int rtw_tdls_get_best_ch(struct net_device *dev,
12149                                 struct iw_request_info *info,
12150                                 union iwreq_data *wrqu, char *extra)
12151 {
12152 #ifdef CONFIG_FIND_BEST_CHANNEL
12153         _adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
12154         struct mlme_ext_priv *pmlmeext = &padapter->mlmeextpriv;
12155         u32 i, best_channel_24G = 1, best_channel_5G = 36, index_24G = 0, index_5G = 0;
12156
12157         for (i=0; pmlmeext->channel_set[i].ChannelNum !=0; i++) {
12158                 if (pmlmeext->channel_set[i].ChannelNum == 1)
12159                         index_24G = i;
12160                 if (pmlmeext->channel_set[i].ChannelNum == 36)
12161                         index_5G = i;
12162         }
12163
12164         for (i=0; pmlmeext->channel_set[i].ChannelNum !=0; i++) {
12165                 /* 2.4G */
12166                 if (pmlmeext->channel_set[i].ChannelNum == 6 || pmlmeext->channel_set[i].ChannelNum == 11) {
12167                         if (pmlmeext->channel_set[i].rx_count < pmlmeext->channel_set[index_24G].rx_count) {
12168                                 index_24G = i;
12169                                 best_channel_24G = pmlmeext->channel_set[i].ChannelNum;
12170                         }
12171                 }
12172
12173                 /* 5G */
12174                 if (pmlmeext->channel_set[i].ChannelNum >= 36
12175                         && pmlmeext->channel_set[i].ChannelNum < 140) {
12176                          /* Find primary channel */
12177                         if (((pmlmeext->channel_set[i].ChannelNum - 36) % 8 == 0)
12178                                 && (pmlmeext->channel_set[i].rx_count < pmlmeext->channel_set[index_5G].rx_count)) {
12179                                 index_5G = i;
12180                                 best_channel_5G = pmlmeext->channel_set[i].ChannelNum;
12181                         }
12182                 }
12183
12184                 if (pmlmeext->channel_set[i].ChannelNum >= 149
12185                         && pmlmeext->channel_set[i].ChannelNum < 165) {
12186                          /* Find primary channel */
12187                         if (((pmlmeext->channel_set[i].ChannelNum - 149) % 8 == 0)
12188                                 && (pmlmeext->channel_set[i].rx_count < pmlmeext->channel_set[index_5G].rx_count)) {
12189                                 index_5G = i;
12190                                 best_channel_5G = pmlmeext->channel_set[i].ChannelNum;
12191                         }
12192                 }
12193 #if 1 /* debug */
12194                 DBG_871X("The rx cnt of channel %3d = %d\n",
12195                                         pmlmeext->channel_set[i].ChannelNum,
12196                                         pmlmeext->channel_set[i].rx_count);
12197 #endif
12198         }
12199
12200         sprintf( extra, "\nbest_channel_24G = %d\n", best_channel_24G );
12201         DBG_871X("best_channel_24G = %d\n", best_channel_24G);
12202
12203         if (index_5G != 0) {
12204                 sprintf(extra, "best_channel_5G = %d\n", best_channel_5G);
12205                 DBG_871X("best_channel_5G = %d\n", best_channel_5G);
12206         }
12207
12208         wrqu->data.length = strlen( extra );
12209
12210 #endif
12211
12212         return 0;
12213
12214 }
12215
12216 static int rtw_tdls(struct net_device *dev,
12217                                 struct iw_request_info *info,
12218                                 union iwreq_data *wrqu, char *extra)
12219 {
12220         int ret = 0;
12221
12222 #ifdef CONFIG_TDLS
12223
12224         _adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
12225
12226         DBG_871X( "[%s] extra = %s\n", __FUNCTION__, extra );
12227
12228         if (hal_chk_wl_func(padapter, WL_FUNC_TDLS) == _FALSE) {
12229                 DBG_871X("Discard tdls oper since hal doesn't support tdls\n");
12230                 return 0;
12231         }
12232
12233         if (padapter->tdlsinfo.tdls_enable == 0) {
12234                 DBG_871X("tdls haven't enabled\n");
12235                 return 0;
12236         }
12237
12238         /* WFD Sigma will use the tdls enable command to let the driver know we want to test the tdls now! */
12239
12240         if (hal_chk_wl_func(padapter, WL_FUNC_MIRACAST)) {
12241                 if (_rtw_memcmp(extra, "wfdenable=", 10)) {
12242                         wrqu->data.length -= 10;
12243                         rtw_wx_tdls_wfd_enable(dev, info, wrqu, &extra[10]);
12244                         return ret;
12245                 }
12246         }
12247
12248         if (_rtw_memcmp(extra, "weaksec=", 8)) {
12249                 wrqu->data.length -=8;
12250                 rtw_tdls_weaksec( dev, info, wrqu, &extra[8] );
12251                 return ret;
12252         } else if (_rtw_memcmp( extra, "tdlsenable=", 11)) {
12253                 wrqu->data.length -=11;
12254                 rtw_tdls_enable( dev, info, wrqu, &extra[11] );
12255                 return ret;
12256         }
12257
12258         if (_rtw_memcmp(extra, "setup=", 6)) {
12259                 wrqu->data.length -=6;
12260                 rtw_tdls_setup( dev, info, wrqu, &extra[6] );
12261         } else if (_rtw_memcmp(extra, "tear=", 5)) {
12262                 wrqu->data.length -= 5;
12263                 rtw_tdls_teardown( dev, info, wrqu, &extra[5] );
12264         } else if (_rtw_memcmp(extra, "dis=", 4)) {
12265                 wrqu->data.length -= 4;
12266                 rtw_tdls_discovery( dev, info, wrqu, &extra[4] );
12267         } else if (_rtw_memcmp(extra, "swoff=", 6)) {
12268                 wrqu->data.length -= 6;
12269                 rtw_tdls_ch_switch_off(dev, info, wrqu, &extra[6]);
12270         } else if (_rtw_memcmp(extra, "sw=", 3)) {
12271                 wrqu->data.length -= 3;
12272                 rtw_tdls_ch_switch( dev, info, wrqu, &extra[3] );
12273         } else if (_rtw_memcmp(extra, "dumpstack=", 10)) {
12274                 wrqu->data.length -= 10;
12275                 rtw_tdls_dump_ch(dev, info, wrqu, &extra[10]);
12276         } else if (_rtw_memcmp(extra, "offchnum=", 9)) {
12277                 wrqu->data.length -= 9;
12278                 rtw_tdls_off_ch_num(dev, info, wrqu, &extra[9]);
12279         } else if (_rtw_memcmp(extra, "choffset=", 9)) {
12280                 wrqu->data.length -= 9;
12281                 rtw_tdls_ch_offset(dev, info, wrqu, &extra[9]);
12282         } else if (_rtw_memcmp(extra, "pson=", 5)) {
12283                 wrqu->data.length -= 5;
12284                 rtw_tdls_pson( dev, info, wrqu, &extra[5] );
12285         } else if (_rtw_memcmp(extra, "psoff=", 6)) {
12286                 wrqu->data.length -= 6;
12287                 rtw_tdls_psoff( dev, info, wrqu, &extra[6] );
12288         }
12289
12290 #ifdef CONFIG_WFD
12291         if (hal_chk_wl_func(padapter, WL_FUNC_MIRACAST)) {
12292                 if (_rtw_memcmp(extra, "setip=", 6)) {
12293                         wrqu->data.length -= 6;
12294                         rtw_tdls_setip(dev, info, wrqu, &extra[6]);
12295                 } else if (_rtw_memcmp(extra, "tprobe=", 6)) {
12296                         issue_tunneled_probe_req((_adapter *)rtw_netdev_priv(dev));
12297                 }
12298         }
12299 #endif /* CONFIG_WFD */
12300
12301 #endif /* CONFIG_TDLS */
12302
12303         return ret;
12304 }
12305
12306
12307 static int rtw_tdls_get(struct net_device *dev,
12308                                 struct iw_request_info *info,
12309                                 union iwreq_data *wrqu, char *extra)
12310 {
12311         int ret = 0;
12312
12313 #ifdef CONFIG_TDLS
12314
12315         DBG_871X( "[%s] extra = %s\n", __FUNCTION__, (char*) wrqu->data.pointer );
12316
12317         if ( _rtw_memcmp( wrqu->data.pointer, "ip", 2 ) )
12318                 rtw_tdls_getip( dev, info, wrqu, extra );
12319         else if (_rtw_memcmp(wrqu->data.pointer, "port", 4))
12320                 rtw_tdls_getport( dev, info, wrqu, extra );
12321         /* WFDTDLS, for sigma test */
12322         else if ( _rtw_memcmp(wrqu->data.pointer, "dis", 3))
12323                 rtw_tdls_dis_result( dev, info, wrqu, extra );
12324         else if ( _rtw_memcmp(wrqu->data.pointer, "status", 6))
12325                 rtw_wfd_tdls_status( dev, info, wrqu, extra );
12326         else if ( _rtw_memcmp(wrqu->data.pointer, "tdls_sta=", 9))
12327                 rtw_tdls_getsta( dev, info, wrqu, extra );
12328         else if (_rtw_memcmp(wrqu->data.pointer, "best_ch", 7))
12329                 rtw_tdls_get_best_ch(dev, info, wrqu, extra);
12330 #endif /* CONFIG_TDLS */
12331
12332         return ret;
12333 }
12334
12335
12336
12337
12338
12339 #ifdef CONFIG_INTEL_WIDI
12340 static int rtw_widi_set(struct net_device *dev,
12341                                struct iw_request_info *info,
12342                                union iwreq_data *wrqu, char *extra)
12343 {
12344         int ret = 0;
12345         _adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
12346
12347         process_intel_widi_cmd(padapter, extra);
12348
12349         return ret;
12350 }
12351
12352 static int rtw_widi_set_probe_request(struct net_device *dev,
12353                                struct iw_request_info *info,
12354                                union iwreq_data *wrqu, char *extra)
12355 {
12356         int     ret = 0;
12357         u8      *pbuf = NULL;
12358         _adapter        *padapter = (_adapter *)rtw_netdev_priv(dev);
12359
12360         pbuf = rtw_malloc(sizeof(l2_msg_t));
12361         if(pbuf)
12362         {
12363                 if ( copy_from_user(pbuf, wrqu->data.pointer, wrqu->data.length) )
12364                         ret = -EFAULT;
12365                 //_rtw_memcpy(pbuf, wrqu->data.pointer, wrqu->data.length);
12366
12367                 if( wrqu->data.flags == 0 )
12368                         intel_widi_wk_cmd(padapter, INTEL_WIDI_ISSUE_PROB_WK, pbuf, sizeof(l2_msg_t));
12369                 else if( wrqu->data.flags == 1 )
12370                         rtw_set_wfd_rds_sink_info( padapter, (l2_msg_t *)pbuf );
12371         }
12372         return ret;
12373 }
12374 #endif // CONFIG_INTEL_WIDI
12375
12376 #ifdef CONFIG_MAC_LOOPBACK_DRIVER
12377
12378 #if defined(CONFIG_RTL8188E)
12379 #include <rtl8188e_hal.h>
12380 extern void rtl8188e_cal_txdesc_chksum(struct tx_desc *ptxdesc);
12381 #define cal_txdesc_chksum rtl8188e_cal_txdesc_chksum
12382 #ifdef CONFIG_SDIO_HCI || defined(CONFIG_GSPI_HCI)
12383 extern void rtl8188es_fill_default_txdesc(struct xmit_frame *pxmitframe, u8 *pbuf);
12384 #define fill_default_txdesc rtl8188es_fill_default_txdesc
12385 #endif // CONFIG_SDIO_HCI
12386 #endif // CONFIG_RTL8188E
12387 #if defined(CONFIG_RTL8723B)
12388 extern void rtl8723b_cal_txdesc_chksum(struct tx_desc *ptxdesc);
12389 #define cal_txdesc_chksum rtl8723b_cal_txdesc_chksum
12390 extern void rtl8723b_fill_default_txdesc(struct xmit_frame *pxmitframe, u8 *pbuf);
12391 #define fill_default_txdesc rtl8723b_fill_default_txdesc
12392 #endif // CONFIG_RTL8723B
12393
12394 #if defined(CONFIG_RTL8703B)
12395 /* extern void rtl8703b_cal_txdesc_chksum(struct tx_desc *ptxdesc); */
12396 #define cal_txdesc_chksum rtl8703b_cal_txdesc_chksum
12397 /* extern void rtl8703b_fill_default_txdesc(struct xmit_frame *pxmitframe, u8 *pbuf); */
12398 #define fill_default_txdesc rtl8703b_fill_default_txdesc
12399 #endif /* CONFIG_RTL8703B */
12400
12401 #if defined(CONFIG_RTL8192E)
12402 extern void rtl8192e_cal_txdesc_chksum(struct tx_desc *ptxdesc);
12403 #define cal_txdesc_chksum rtl8192e_cal_txdesc_chksum
12404 #ifdef CONFIG_SDIO_HCI || defined(CONFIG_GSPI_HCI)
12405 extern void rtl8192es_fill_default_txdesc(struct xmit_frame *pxmitframe, u8 *pbuf);
12406 #define fill_default_txdesc rtl8192es_fill_default_txdesc
12407 #endif // CONFIG_SDIO_HCI
12408 #endif //CONFIG_RTL8192E
12409
12410 static s32 initLoopback(PADAPTER padapter)
12411 {
12412         PLOOPBACKDATA ploopback;
12413
12414
12415         if (padapter->ploopback == NULL) {
12416                 ploopback = (PLOOPBACKDATA)rtw_zmalloc(sizeof(LOOPBACKDATA));
12417                 if (ploopback == NULL) return -ENOMEM;
12418
12419                 _rtw_init_sema(&ploopback->sema, 0);
12420                 ploopback->bstop = _TRUE;
12421                 ploopback->cnt = 0;
12422                 ploopback->size = 300;
12423                 _rtw_memset(ploopback->msg, 0, sizeof(ploopback->msg));
12424
12425                 padapter->ploopback = ploopback;
12426         }
12427
12428         return 0;
12429 }
12430
12431 static void freeLoopback(PADAPTER padapter)
12432 {
12433         PLOOPBACKDATA ploopback;
12434
12435
12436         ploopback = padapter->ploopback;
12437         if (ploopback) {
12438                 rtw_mfree((u8*)ploopback, sizeof(LOOPBACKDATA));
12439                 padapter->ploopback = NULL;
12440         }
12441 }
12442
12443 static s32 initpseudoadhoc(PADAPTER padapter)
12444 {
12445         NDIS_802_11_NETWORK_INFRASTRUCTURE networkType;
12446         s32 err;
12447
12448         networkType = Ndis802_11IBSS;
12449         err = rtw_set_802_11_infrastructure_mode(padapter, networkType);
12450         if (err == _FALSE) return _FAIL;
12451
12452         err = rtw_setopmode_cmd(padapter, networkType,_TRUE);
12453         if (err == _FAIL) return _FAIL;
12454
12455         return _SUCCESS;
12456 }
12457
12458 static s32 createpseudoadhoc(PADAPTER padapter)
12459 {
12460         NDIS_802_11_AUTHENTICATION_MODE authmode;
12461         struct mlme_priv *pmlmepriv;
12462         NDIS_802_11_SSID *passoc_ssid;
12463         WLAN_BSSID_EX *pdev_network;
12464         u8 *pibss;
12465         u8 ssid[] = "pseduo_ad-hoc";
12466         s32 err;
12467         _irqL irqL;
12468
12469
12470         pmlmepriv = &padapter->mlmepriv;
12471
12472         authmode = Ndis802_11AuthModeOpen;
12473         err = rtw_set_802_11_authentication_mode(padapter, authmode);
12474         if (err == _FALSE) return _FAIL;
12475
12476         passoc_ssid = &pmlmepriv->assoc_ssid;
12477         _rtw_memset(passoc_ssid, 0, sizeof(NDIS_802_11_SSID));
12478         passoc_ssid->SsidLength = sizeof(ssid) - 1;
12479         _rtw_memcpy(passoc_ssid->Ssid, ssid, passoc_ssid->SsidLength);
12480
12481         pdev_network = &padapter->registrypriv.dev_network;
12482         pibss = padapter->registrypriv.dev_network.MacAddress;
12483         _rtw_memcpy(&pdev_network->Ssid, passoc_ssid, sizeof(NDIS_802_11_SSID));
12484
12485         rtw_update_registrypriv_dev_network(padapter);
12486         rtw_generate_random_ibss(pibss);
12487
12488         _enter_critical_bh(&pmlmepriv->lock, &irqL);
12489         pmlmepriv->fw_state = WIFI_ADHOC_MASTER_STATE;
12490         _exit_critical_bh(&pmlmepriv->lock, &irqL);
12491
12492 #if 0
12493         err = rtw_create_ibss_cmd(padapter, 0);
12494         if (err == _FAIL) return _FAIL;
12495 #else
12496 {
12497         struct wlan_network *pcur_network;
12498         struct sta_info *psta;
12499
12500         //3  create a new psta
12501         pcur_network = &pmlmepriv->cur_network;
12502
12503         //clear psta in the cur_network, if any
12504         psta = rtw_get_stainfo(&padapter->stapriv, pcur_network->network.MacAddress);
12505         if (psta) rtw_free_stainfo(padapter, psta);
12506
12507         psta = rtw_alloc_stainfo(&padapter->stapriv, pibss);
12508         if (psta == NULL) return _FAIL;
12509
12510         //3  join psudo AdHoc
12511         pcur_network->join_res = 1;
12512         pcur_network->aid = psta->aid = 1;
12513         _rtw_memcpy(&pcur_network->network, pdev_network, get_WLAN_BSSID_EX_sz(pdev_network));
12514
12515         // set msr to WIFI_FW_ADHOC_STATE
12516 #if 0
12517         Set_NETYPE0_MSR(padapter, WIFI_FW_ADHOC_STATE);
12518 #else
12519         {
12520                 u8 val8;
12521
12522                 val8 = rtw_read8(padapter, MSR);
12523                 val8 &= 0xFC; // clear NETYPE0
12524                 val8 |= WIFI_FW_ADHOC_STATE & 0x3;
12525                 rtw_write8(padapter, MSR, val8);
12526         }
12527 #endif
12528 }
12529 #endif
12530
12531         return _SUCCESS;
12532 }
12533
12534 static struct xmit_frame* createloopbackpkt(PADAPTER padapter, u32 size)
12535 {
12536         struct xmit_priv *pxmitpriv;
12537         struct xmit_frame *pframe;
12538         struct xmit_buf *pxmitbuf;
12539         struct pkt_attrib *pattrib;
12540         struct tx_desc *desc;
12541         u8 *pkt_start, *pkt_end, *ptr;
12542         struct rtw_ieee80211_hdr *hdr;
12543         s32 bmcast;
12544         _irqL irqL;
12545
12546
12547         if ((TXDESC_SIZE + WLANHDR_OFFSET + size) > MAX_XMITBUF_SZ) return NULL;
12548
12549         pxmitpriv = &padapter->xmitpriv;
12550         pframe = NULL;
12551
12552         //2 1. allocate xmit frame
12553         pframe = rtw_alloc_xmitframe(pxmitpriv);
12554         if (pframe == NULL) return NULL;
12555         pframe->padapter = padapter;
12556
12557         //2 2. allocate xmit buffer
12558         _enter_critical_bh(&pxmitpriv->lock, &irqL);
12559         pxmitbuf = rtw_alloc_xmitbuf(pxmitpriv);
12560         _exit_critical_bh(&pxmitpriv->lock, &irqL);
12561         if (pxmitbuf == NULL) {
12562                 rtw_free_xmitframe(pxmitpriv, pframe);
12563                 return NULL;
12564         }
12565
12566         pframe->pxmitbuf = pxmitbuf;
12567         pframe->buf_addr = pxmitbuf->pbuf;
12568         pxmitbuf->priv_data = pframe;
12569
12570         //2 3. update_attrib()
12571         pattrib = &pframe->attrib;
12572
12573         // init xmitframe attribute
12574         _rtw_memset(pattrib, 0, sizeof(struct pkt_attrib));
12575
12576         pattrib->ether_type = 0x8723;
12577         _rtw_memcpy(pattrib->src, adapter_mac_addr(padapter), ETH_ALEN);
12578         _rtw_memcpy(pattrib->ta, pattrib->src, ETH_ALEN);
12579         _rtw_memset(pattrib->dst, 0xFF, ETH_ALEN);
12580         _rtw_memcpy(pattrib->ra, pattrib->dst, ETH_ALEN);
12581
12582 //      pattrib->dhcp_pkt = 0;
12583 //      pattrib->pktlen = 0;
12584         pattrib->ack_policy = 0;
12585 //      pattrib->pkt_hdrlen = ETH_HLEN;
12586         pattrib->hdrlen = WLAN_HDR_A3_LEN;
12587         pattrib->subtype = WIFI_DATA;
12588         pattrib->priority = 0;
12589         pattrib->qsel = pattrib->priority;
12590 //      do_queue_select(padapter, pattrib);
12591         pattrib->nr_frags = 1;
12592         pattrib->encrypt = 0;
12593         pattrib->bswenc = _FALSE;
12594         pattrib->qos_en = _FALSE;
12595
12596         bmcast = IS_MCAST(pattrib->ra);
12597         if (bmcast) {
12598                 pattrib->mac_id = 1;
12599                 pattrib->psta = rtw_get_bcmc_stainfo(padapter);
12600         } else {
12601                 pattrib->mac_id = 0;
12602                 pattrib->psta = rtw_get_stainfo(&padapter->stapriv, get_bssid(&padapter->mlmepriv));
12603         }
12604
12605         pattrib->pktlen = size;
12606         pattrib->last_txcmdsz = pattrib->hdrlen + pattrib->pktlen;
12607
12608         //2 4. fill TX descriptor
12609         desc = (struct tx_desc*)pframe->buf_addr;
12610         _rtw_memset(desc, 0, TXDESC_SIZE);
12611
12612         fill_default_txdesc(pframe, (u8*)desc);
12613
12614         // Hw set sequence number
12615         ((PTXDESC)desc)->hwseq_en = 0; // HWSEQ_EN, 0:disable, 1:enable
12616 //      ((PTXDESC)desc)->hwseq_sel = 0; // HWSEQ_SEL
12617
12618         ((PTXDESC)desc)->disdatafb = 1;
12619
12620         // convert to little endian
12621         desc->txdw0 = cpu_to_le32(desc->txdw0);
12622         desc->txdw1 = cpu_to_le32(desc->txdw1);
12623         desc->txdw2 = cpu_to_le32(desc->txdw2);
12624         desc->txdw3 = cpu_to_le32(desc->txdw3);
12625         desc->txdw4 = cpu_to_le32(desc->txdw4);
12626         desc->txdw5 = cpu_to_le32(desc->txdw5);
12627         desc->txdw6 = cpu_to_le32(desc->txdw6);
12628         desc->txdw7 = cpu_to_le32(desc->txdw7);
12629 #ifdef CONFIG_PCI_HCI
12630         desc->txdw8 = cpu_to_le32(desc->txdw8);
12631         desc->txdw9 = cpu_to_le32(desc->txdw9);
12632         desc->txdw10 = cpu_to_le32(desc->txdw10);
12633         desc->txdw11 = cpu_to_le32(desc->txdw11);
12634         desc->txdw12 = cpu_to_le32(desc->txdw12);
12635         desc->txdw13 = cpu_to_le32(desc->txdw13);
12636         desc->txdw14 = cpu_to_le32(desc->txdw14);
12637         desc->txdw15 = cpu_to_le32(desc->txdw15);
12638 #endif
12639
12640         cal_txdesc_chksum(desc);
12641
12642         //2 5. coalesce
12643         pkt_start = pframe->buf_addr + TXDESC_SIZE;
12644         pkt_end = pkt_start + pattrib->last_txcmdsz;
12645
12646         //3 5.1. make wlan header, make_wlanhdr()
12647         hdr = (struct rtw_ieee80211_hdr *)pkt_start;
12648         SetFrameSubType(&hdr->frame_ctl, pattrib->subtype);
12649         _rtw_memcpy(hdr->addr1, pattrib->dst, ETH_ALEN); // DA
12650         _rtw_memcpy(hdr->addr2, pattrib->src, ETH_ALEN); // SA
12651         _rtw_memcpy(hdr->addr3, get_bssid(&padapter->mlmepriv), ETH_ALEN); // RA, BSSID
12652
12653         //3 5.2. make payload
12654         ptr = pkt_start + pattrib->hdrlen;
12655         get_random_bytes(ptr, pkt_end - ptr);
12656
12657         pxmitbuf->len = TXDESC_SIZE + pattrib->last_txcmdsz;
12658         pxmitbuf->ptail += pxmitbuf->len;
12659
12660         return pframe;
12661 }
12662
12663 static void freeloopbackpkt(PADAPTER padapter, struct xmit_frame *pframe)
12664 {
12665         struct xmit_priv *pxmitpriv;
12666         struct xmit_buf *pxmitbuf;
12667
12668
12669         pxmitpriv = &padapter->xmitpriv;
12670         pxmitbuf = pframe->pxmitbuf;
12671
12672         rtw_free_xmitframe(pxmitpriv, pframe);
12673         rtw_free_xmitbuf(pxmitpriv, pxmitbuf);
12674 }
12675
12676 static void printdata(u8 *pbuf, u32 len)
12677 {
12678         u32 i, val;
12679
12680
12681         for (i = 0; (i+4) <= len; i+=4) {
12682                 printk("%08X", *(u32*)(pbuf + i));
12683                 if ((i+4) & 0x1F) printk(" ");
12684                 else printk("\n");
12685         }
12686
12687         if (i < len)
12688         {
12689 #ifdef CONFIG_BIG_ENDIAN
12690                 for (; i < len, i++)
12691                         printk("%02X", pbuf+i);
12692 #else // CONFIG_LITTLE_ENDIAN
12693 #if 0
12694                 val = 0;
12695                 _rtw_memcpy(&val, pbuf + i, len - i);
12696                 printk("%8X", val);
12697 #else
12698                 u8 str[9];
12699                 u8 n;
12700                 val = 0;
12701                 n = len - i;
12702                 _rtw_memcpy(&val, pbuf+i, n);
12703                 sprintf(str, "%08X", val);
12704                 n = (4 - n) * 2;
12705                 printk("%8s", str+n);
12706 #endif
12707 #endif // CONFIG_LITTLE_ENDIAN
12708         }
12709         printk("\n");
12710 }
12711
12712 static u8 pktcmp(PADAPTER padapter, u8 *txbuf, u32 txsz, u8 *rxbuf, u32 rxsz)
12713 {
12714         PHAL_DATA_TYPE phal;
12715         struct recv_stat *prxstat;
12716         struct recv_stat report;
12717         PRXREPORT prxreport;
12718         u32 drvinfosize;
12719         u32 rxpktsize;
12720         u8 fcssize;
12721         u8 ret = _FALSE;
12722
12723         prxstat = (struct recv_stat*)rxbuf;
12724         report.rxdw0 = le32_to_cpu(prxstat->rxdw0);
12725         report.rxdw1 = le32_to_cpu(prxstat->rxdw1);
12726         report.rxdw2 = le32_to_cpu(prxstat->rxdw2);
12727         report.rxdw3 = le32_to_cpu(prxstat->rxdw3);
12728         report.rxdw4 = le32_to_cpu(prxstat->rxdw4);
12729         report.rxdw5 = le32_to_cpu(prxstat->rxdw5);
12730
12731         prxreport = (PRXREPORT)&report;
12732         drvinfosize = prxreport->drvinfosize << 3;
12733         rxpktsize = prxreport->pktlen;
12734
12735         phal = GET_HAL_DATA(padapter);
12736         if (phal->ReceiveConfig & RCR_APPFCS) fcssize = IEEE80211_FCS_LEN;
12737         else fcssize = 0;
12738
12739         if ((txsz - TXDESC_SIZE) != (rxpktsize - fcssize)) {
12740                 DBG_8192C("%s: ERROR! size not match tx/rx=%d/%d !\n",
12741                         __func__, txsz - TXDESC_SIZE, rxpktsize - fcssize);
12742                 ret = _FALSE;
12743         } else {
12744                 ret = _rtw_memcmp(txbuf + TXDESC_SIZE,\
12745                                                   rxbuf + RXDESC_SIZE + drvinfosize,\
12746                                                   txsz - TXDESC_SIZE);
12747                 if (ret == _FALSE) {
12748                         DBG_8192C("%s: ERROR! pkt content mismatch!\n", __func__);
12749                 }
12750         }
12751
12752         if (ret == _FALSE)
12753         {
12754                 DBG_8192C("\n%s: TX PKT total=%d, desc=%d, content=%d\n",
12755                         __func__, txsz, TXDESC_SIZE, txsz - TXDESC_SIZE);
12756                 DBG_8192C("%s: TX DESC size=%d\n", __func__, TXDESC_SIZE);
12757                 printdata(txbuf, TXDESC_SIZE);
12758                 DBG_8192C("%s: TX content size=%d\n", __func__, txsz - TXDESC_SIZE);
12759                 printdata(txbuf + TXDESC_SIZE, txsz - TXDESC_SIZE);
12760
12761                 DBG_8192C("\n%s: RX PKT read=%d offset=%d(%d,%d) content=%d\n",
12762                         __func__, rxsz, RXDESC_SIZE + drvinfosize, RXDESC_SIZE, drvinfosize, rxpktsize);
12763                 if (rxpktsize != 0)
12764                 {
12765                         DBG_8192C("%s: RX DESC size=%d\n", __func__, RXDESC_SIZE);
12766                         printdata(rxbuf, RXDESC_SIZE);
12767                         DBG_8192C("%s: RX drvinfo size=%d\n", __func__, drvinfosize);
12768                         printdata(rxbuf + RXDESC_SIZE, drvinfosize);
12769                         DBG_8192C("%s: RX content size=%d\n", __func__, rxpktsize);
12770                         printdata(rxbuf + RXDESC_SIZE + drvinfosize, rxpktsize);
12771                 } else {
12772                         DBG_8192C("%s: RX data size=%d\n", __func__, rxsz);
12773                         printdata(rxbuf, rxsz);
12774                 }
12775         }
12776
12777         return ret;
12778 }
12779
12780 thread_return lbk_thread(thread_context context)
12781 {
12782         s32 err;
12783         PADAPTER padapter;
12784         PLOOPBACKDATA ploopback;
12785         struct xmit_frame *pxmitframe;
12786         u32 cnt, ok, fail, headerlen;
12787         u32 pktsize;
12788         u32 ff_hwaddr;
12789
12790
12791         padapter = (PADAPTER)context;
12792         ploopback = padapter->ploopback;
12793         if (ploopback == NULL) return -1;
12794         cnt = 0;
12795         ok = 0;
12796         fail = 0;
12797
12798         daemonize("%s", "RTW_LBK_THREAD");
12799         allow_signal(SIGTERM);
12800
12801         do {
12802                 if (ploopback->size == 0) {
12803                         get_random_bytes(&pktsize, 4);
12804                         pktsize = (pktsize % 1535) + 1; // 1~1535
12805                 } else
12806                         pktsize = ploopback->size;
12807
12808                 pxmitframe = createloopbackpkt(padapter, pktsize);
12809                 if (pxmitframe == NULL) {
12810                         sprintf(ploopback->msg, "loopback FAIL! 3. create Packet FAIL!");
12811                         break;
12812                 }
12813
12814                 ploopback->txsize = TXDESC_SIZE + pxmitframe->attrib.last_txcmdsz;
12815                 _rtw_memcpy(ploopback->txbuf, pxmitframe->buf_addr, ploopback->txsize);
12816                 ff_hwaddr = rtw_get_ff_hwaddr(pxmitframe);
12817                 cnt++;
12818                 DBG_8192C("%s: wirte port cnt=%d size=%d\n", __func__, cnt, ploopback->txsize);
12819                 pxmitframe->pxmitbuf->pdata = ploopback->txbuf;
12820                 rtw_write_port(padapter, ff_hwaddr, ploopback->txsize, (u8 *)pxmitframe->pxmitbuf);
12821
12822                 // wait for rx pkt
12823                 _rtw_down_sema(&ploopback->sema);
12824
12825                 err = pktcmp(padapter, ploopback->txbuf, ploopback->txsize, ploopback->rxbuf, ploopback->rxsize);
12826                 if (err == _TRUE)
12827                         ok++;
12828                 else
12829                         fail++;
12830
12831                 ploopback->txsize = 0;
12832                 _rtw_memset(ploopback->txbuf, 0, 0x8000);
12833                 ploopback->rxsize = 0;
12834                 _rtw_memset(ploopback->rxbuf, 0, 0x8000);
12835
12836                 freeloopbackpkt(padapter, pxmitframe);
12837                 pxmitframe = NULL;
12838
12839                 if (signal_pending(current)) {
12840                         flush_signals(current);
12841                 }
12842
12843                 if ((ploopback->bstop == _TRUE) ||
12844                         ((ploopback->cnt != 0) && (ploopback->cnt == cnt)))
12845                 {
12846                         u32 ok_rate, fail_rate, all;
12847                         all = cnt;
12848                         ok_rate = (ok*100)/all;
12849                         fail_rate = (fail*100)/all;
12850                         sprintf(ploopback->msg,\
12851                                         "loopback result: ok=%d%%(%d/%d),error=%d%%(%d/%d)",\
12852                                         ok_rate, ok, all, fail_rate, fail, all);
12853                         break;
12854                 }
12855         } while (1);
12856
12857         ploopback->bstop = _TRUE;
12858
12859         thread_exit();
12860 }
12861
12862 static void loopbackTest(PADAPTER padapter, u32 cnt, u32 size, u8* pmsg)
12863 {
12864         PLOOPBACKDATA ploopback;
12865         u32 len;
12866         s32 err;
12867
12868
12869         ploopback = padapter->ploopback;
12870
12871         if (ploopback)
12872         {
12873                 if (ploopback->bstop == _FALSE) {
12874                         ploopback->bstop = _TRUE;
12875                         _rtw_up_sema(&ploopback->sema);
12876                 }
12877                 len = 0;
12878                 do {
12879                         len = strlen(ploopback->msg);
12880                         if (len) break;
12881                         rtw_msleep_os(1);
12882                 } while (1);
12883                 _rtw_memcpy(pmsg, ploopback->msg, len+1);
12884                 freeLoopback(padapter);
12885
12886                 return;
12887         }
12888
12889         // disable dynamic algorithm
12890         rtw_phydm_ability_backup(padapter);
12891         rtw_phydm_func_disable_all(padapter);
12892
12893         // create pseudo ad-hoc connection
12894         err = initpseudoadhoc(padapter);
12895         if (err == _FAIL) {
12896                 sprintf(pmsg, "loopback FAIL! 1.1 init ad-hoc FAIL!");
12897                 return;
12898         }
12899
12900         err = createpseudoadhoc(padapter);
12901         if (err == _FAIL) {
12902                 sprintf(pmsg, "loopback FAIL! 1.2 create ad-hoc master FAIL!");
12903                 return;
12904         }
12905
12906         err = initLoopback(padapter);
12907         if (err) {
12908                 sprintf(pmsg, "loopback FAIL! 2. init FAIL! error code=%d", err);
12909                 return;
12910         }
12911
12912         ploopback = padapter->ploopback;
12913
12914         ploopback->bstop = _FALSE;
12915         ploopback->cnt = cnt;
12916         ploopback->size = size;
12917         ploopback->lbkthread = kthread_run(lbk_thread, padapter, "RTW_LBK_THREAD");
12918         if (IS_ERR(padapter->lbkthread))
12919         {
12920                 freeLoopback(padapter);
12921                 sprintf(pmsg, "loopback start FAIL! cnt=%d", cnt);
12922                 return;
12923         }
12924
12925         sprintf(pmsg, "loopback start! cnt=%d", cnt);
12926 }
12927 #endif // CONFIG_MAC_LOOPBACK_DRIVER
12928
12929 static int rtw_test(
12930         struct net_device *dev,
12931         struct iw_request_info *info,
12932         union iwreq_data *wrqu, char *extra)
12933 {
12934         u32 len;
12935         u8 *pbuf, *pch;
12936         char *ptmp;
12937         u8 *delim = ",";
12938         PADAPTER padapter = rtw_netdev_priv(dev);
12939
12940
12941         DBG_871X("+%s\n", __func__);
12942         len = wrqu->data.length;
12943
12944         pbuf = (u8*)rtw_zmalloc(len);
12945         if (pbuf == NULL) {
12946                 DBG_871X("%s: no memory!\n", __func__);
12947                 return -ENOMEM;
12948         }
12949
12950         if (copy_from_user(pbuf, wrqu->data.pointer, len)) {
12951                 rtw_mfree(pbuf, len);
12952                 DBG_871X("%s: copy from user fail!\n", __func__);
12953                 return -EFAULT;
12954         }
12955         DBG_871X("%s: string=\"%s\"\n", __func__, pbuf);
12956
12957         ptmp = (char*)pbuf;
12958         pch = strsep(&ptmp, delim);
12959         if ((pch == NULL) || (strlen(pch) == 0)) {
12960                 rtw_mfree(pbuf, len);
12961                 DBG_871X("%s: parameter error(level 1)!\n", __func__);
12962                 return -EFAULT;
12963         }
12964
12965 #ifdef CONFIG_MAC_LOOPBACK_DRIVER
12966         if (strcmp(pch, "loopback") == 0)
12967         {
12968                 s32 cnt = 0;
12969                 u32 size = 64;
12970
12971                 pch = strsep(&ptmp, delim);
12972                 if ((pch == NULL) || (strlen(pch) == 0)) {
12973                         rtw_mfree(pbuf, len);
12974                         DBG_871X("%s: parameter error(level 2)!\n", __func__);
12975                         return -EFAULT;
12976                 }
12977
12978                 sscanf(pch, "%d", &cnt);
12979                 DBG_871X("%s: loopback cnt=%d\n", __func__, cnt);
12980
12981                 pch = strsep(&ptmp, delim);
12982                 if ((pch == NULL) || (strlen(pch) == 0)) {
12983                         rtw_mfree(pbuf, len);
12984                         DBG_871X("%s: parameter error(level 2)!\n", __func__);
12985                         return -EFAULT;
12986                 }
12987
12988                 sscanf(pch, "%d", &size);
12989                 DBG_871X("%s: loopback size=%d\n", __func__, size);
12990
12991                 loopbackTest(padapter, cnt, size, extra);
12992                 wrqu->data.length = strlen(extra) + 1;
12993
12994                 goto free_buf;
12995         }
12996 #endif
12997
12998
12999 #ifdef CONFIG_BT_COEXIST
13000         if (strcmp(pch, "bton") == 0) {
13001                 rtw_btcoex_SetManualControl(padapter, _FALSE);
13002                 goto free_buf;
13003         } else if (strcmp(pch, "btoff") == 0) {
13004                 rtw_btcoex_SetManualControl(padapter, _TRUE);
13005                 goto free_buf;
13006         }
13007 #endif
13008
13009         if (strcmp(pch, "h2c") == 0) {
13010                 u8 param[8];
13011                 u8 count = 0;
13012                 u32 tmp;
13013                 u8 i;
13014                 u32 pos;
13015                 s32 ret;
13016
13017                 do {
13018                         pch = strsep(&ptmp, delim);
13019                         if ((pch == NULL) || (strlen(pch) == 0))
13020                                 break;
13021
13022                         sscanf(pch, "%x", &tmp);
13023                         param[count++] = (u8)tmp;
13024                 } while (count < 8);
13025
13026                 if (count == 0) {
13027                         rtw_mfree(pbuf, len);
13028                         DBG_871X("%s: parameter error(level 2)!\n", __func__);
13029                         return -EFAULT;
13030                 }
13031
13032                 ret = rtw_hal_fill_h2c_cmd(padapter, param[0], count-1, &param[1]);
13033
13034                 pos = sprintf(extra, "H2C ID=0x%02x content=", param[0]);
13035                 for (i=1; i<count; i++) {
13036                         pos += sprintf(extra+pos, "%02x,", param[i]);
13037                 }
13038                 extra[pos] = 0;
13039                 pos--;
13040                 pos += sprintf(extra+pos, " %s", ret==_FAIL?"FAIL":"OK");
13041
13042                 wrqu->data.length = strlen(extra) + 1;
13043
13044                 goto free_buf;
13045         }
13046
13047 free_buf:
13048         rtw_mfree(pbuf, len);
13049         return 0;
13050 }
13051
13052 static iw_handler rtw_handlers[] =
13053 {
13054         NULL,                                   /* SIOCSIWCOMMIT */
13055         rtw_wx_get_name,                /* SIOCGIWNAME */
13056         dummy,                                  /* SIOCSIWNWID */
13057         dummy,                                  /* SIOCGIWNWID */
13058         rtw_wx_set_freq,                /* SIOCSIWFREQ */
13059         rtw_wx_get_freq,                /* SIOCGIWFREQ */
13060         rtw_wx_set_mode,                /* SIOCSIWMODE */
13061         rtw_wx_get_mode,                /* SIOCGIWMODE */
13062         dummy,                                  /* SIOCSIWSENS */
13063         rtw_wx_get_sens,                /* SIOCGIWSENS */
13064         NULL,                                   /* SIOCSIWRANGE */
13065         rtw_wx_get_range,               /* SIOCGIWRANGE */
13066         rtw_wx_set_priv,                /* SIOCSIWPRIV */
13067         NULL,                                   /* SIOCGIWPRIV */
13068         NULL,                                   /* SIOCSIWSTATS */
13069         NULL,                                   /* SIOCGIWSTATS */
13070         dummy,                                  /* SIOCSIWSPY */
13071         dummy,                                  /* SIOCGIWSPY */
13072         NULL,                                   /* SIOCGIWTHRSPY */
13073         NULL,                                   /* SIOCWIWTHRSPY */
13074         rtw_wx_set_wap,         /* SIOCSIWAP */
13075         rtw_wx_get_wap,         /* SIOCGIWAP */
13076         rtw_wx_set_mlme,                /* request MLME operation; uses struct iw_mlme */
13077         dummy,                                  /* SIOCGIWAPLIST -- depricated */
13078         rtw_wx_set_scan,                /* SIOCSIWSCAN */
13079         rtw_wx_get_scan,                /* SIOCGIWSCAN */
13080         rtw_wx_set_essid,               /* SIOCSIWESSID */
13081         rtw_wx_get_essid,               /* SIOCGIWESSID */
13082         dummy,                                  /* SIOCSIWNICKN */
13083         rtw_wx_get_nick,                /* SIOCGIWNICKN */
13084         NULL,                                   /* -- hole -- */
13085         NULL,                                   /* -- hole -- */
13086         rtw_wx_set_rate,                /* SIOCSIWRATE */
13087         rtw_wx_get_rate,                /* SIOCGIWRATE */
13088         rtw_wx_set_rts,                 /* SIOCSIWRTS */
13089         rtw_wx_get_rts,                 /* SIOCGIWRTS */
13090         rtw_wx_set_frag,                /* SIOCSIWFRAG */
13091         rtw_wx_get_frag,                /* SIOCGIWFRAG */
13092         dummy,                                  /* SIOCSIWTXPOW */
13093         dummy,                                  /* SIOCGIWTXPOW */
13094         dummy,                                  /* SIOCSIWRETRY */
13095         rtw_wx_get_retry,               /* SIOCGIWRETRY */
13096         rtw_wx_set_enc,                 /* SIOCSIWENCODE */
13097         rtw_wx_get_enc,                 /* SIOCGIWENCODE */
13098         dummy,                                  /* SIOCSIWPOWER */
13099         rtw_wx_get_power,               /* SIOCGIWPOWER */
13100         NULL,                                   /*---hole---*/
13101         NULL,                                   /*---hole---*/
13102         rtw_wx_set_gen_ie,              /* SIOCSIWGENIE */
13103         NULL,                                   /* SIOCGWGENIE */
13104         rtw_wx_set_auth,                /* SIOCSIWAUTH */
13105         NULL,                                   /* SIOCGIWAUTH */
13106         rtw_wx_set_enc_ext,             /* SIOCSIWENCODEEXT */
13107         NULL,                                   /* SIOCGIWENCODEEXT */
13108         rtw_wx_set_pmkid,               /* SIOCSIWPMKSA */
13109         NULL,                                   /*---hole---*/
13110 };
13111
13112
13113 static const struct iw_priv_args rtw_private_args[] = {
13114         {
13115                 SIOCIWFIRSTPRIV + 0x0,
13116                 IW_PRIV_TYPE_CHAR | 0x7FF, 0, "write"
13117         },
13118         {
13119                 SIOCIWFIRSTPRIV + 0x1,
13120                 IW_PRIV_TYPE_CHAR | 0x7FF,
13121                 IW_PRIV_TYPE_CHAR | IW_PRIV_SIZE_FIXED | IFNAMSIZ, "read"
13122         },
13123         {
13124                 SIOCIWFIRSTPRIV + 0x2, 0, 0, "driver_ext"
13125         },
13126         {
13127                 SIOCIWFIRSTPRIV + 0x3, 0, 0, "mp_ioctl"
13128         },
13129         {
13130                 SIOCIWFIRSTPRIV + 0x4,
13131                 IW_PRIV_TYPE_INT | IW_PRIV_SIZE_FIXED | 1, 0, "apinfo"
13132         },
13133         {
13134                 SIOCIWFIRSTPRIV + 0x5,
13135                 IW_PRIV_TYPE_INT | IW_PRIV_SIZE_FIXED | 2, 0, "setpid"
13136         },
13137         {
13138                 SIOCIWFIRSTPRIV + 0x6,
13139                 IW_PRIV_TYPE_INT | IW_PRIV_SIZE_FIXED | 1, 0, "wps_start"
13140         },
13141 //for PLATFORM_MT53XX
13142         {
13143                 SIOCIWFIRSTPRIV + 0x7,
13144                 IW_PRIV_TYPE_INT | IW_PRIV_SIZE_FIXED | 1, 0, "get_sensitivity"
13145         },
13146         {
13147                 SIOCIWFIRSTPRIV + 0x8,
13148                 IW_PRIV_TYPE_INT | IW_PRIV_SIZE_FIXED | 1, 0, "wps_prob_req_ie"
13149         },
13150         {
13151                 SIOCIWFIRSTPRIV + 0x9,
13152                 IW_PRIV_TYPE_INT | IW_PRIV_SIZE_FIXED | 1, 0, "wps_assoc_req_ie"
13153         },
13154
13155 //for RTK_DMP_PLATFORM
13156         {
13157                 SIOCIWFIRSTPRIV + 0xA,
13158                 IW_PRIV_TYPE_INT | IW_PRIV_SIZE_FIXED | 1, 0, "channel_plan"
13159         },
13160
13161         {
13162                 SIOCIWFIRSTPRIV + 0xB,
13163                 IW_PRIV_TYPE_INT | IW_PRIV_SIZE_FIXED | 2, 0, "dbg"
13164         },
13165         {
13166                 SIOCIWFIRSTPRIV + 0xC,
13167                 IW_PRIV_TYPE_INT | IW_PRIV_SIZE_FIXED | 3, 0, "rfw"
13168         },
13169         {
13170                 SIOCIWFIRSTPRIV + 0xD,
13171                 IW_PRIV_TYPE_INT | IW_PRIV_SIZE_FIXED | 2, IW_PRIV_TYPE_CHAR | IW_PRIV_SIZE_FIXED | IFNAMSIZ, "rfr"
13172         },
13173 #if 0
13174         {
13175                 SIOCIWFIRSTPRIV + 0xE,0,0, "wowlan_ctrl"
13176         },
13177 #endif
13178         {
13179                 SIOCIWFIRSTPRIV + 0x10,
13180                 IW_PRIV_TYPE_CHAR | 1024, 0, "p2p_set"
13181         },
13182         {
13183                 SIOCIWFIRSTPRIV + 0x11,
13184                 IW_PRIV_TYPE_CHAR | 1024, IW_PRIV_TYPE_CHAR | IW_PRIV_SIZE_MASK , "p2p_get"
13185         },
13186         {
13187                 SIOCIWFIRSTPRIV + 0x12, 0, 0, "NULL"
13188         },
13189         {
13190                 SIOCIWFIRSTPRIV + 0x13,
13191                 IW_PRIV_TYPE_CHAR | 64, IW_PRIV_TYPE_CHAR | 64 , "p2p_get2"
13192         },
13193         {
13194                 SIOCIWFIRSTPRIV + 0x14,
13195                 IW_PRIV_TYPE_CHAR  | 64, 0, "tdls"
13196         },
13197         {
13198                 SIOCIWFIRSTPRIV + 0x15,
13199                 IW_PRIV_TYPE_CHAR | 1024, IW_PRIV_TYPE_CHAR | 1024 , "tdls_get"
13200         },
13201         {
13202                 SIOCIWFIRSTPRIV + 0x16,
13203                 IW_PRIV_TYPE_CHAR | 64, 0, "pm_set"
13204         },
13205
13206         {SIOCIWFIRSTPRIV + 0x18, IW_PRIV_TYPE_CHAR | IFNAMSIZ , 0 , "rereg_nd_name"},
13207 #ifdef CONFIG_MP_INCLUDED
13208         {SIOCIWFIRSTPRIV + 0x1A, IW_PRIV_TYPE_CHAR | 1024, 0,  "NULL"},
13209         {SIOCIWFIRSTPRIV + 0x1B, IW_PRIV_TYPE_CHAR | 128, IW_PRIV_TYPE_CHAR | IW_PRIV_SIZE_MASK, "NULL"},
13210 #else
13211         {SIOCIWFIRSTPRIV + 0x1A, IW_PRIV_TYPE_CHAR | 1024, 0, "efuse_set"},
13212         {SIOCIWFIRSTPRIV + 0x1B, IW_PRIV_TYPE_CHAR | 128, IW_PRIV_TYPE_CHAR | IW_PRIV_SIZE_MASK, "efuse_get"},
13213 #endif
13214         {
13215                 SIOCIWFIRSTPRIV + 0x1D,
13216                 IW_PRIV_TYPE_CHAR | 40, IW_PRIV_TYPE_CHAR | 0x7FF, "test"
13217         },
13218
13219 #ifdef CONFIG_INTEL_WIDI
13220         {
13221                 SIOCIWFIRSTPRIV + 0x1E,
13222                 IW_PRIV_TYPE_CHAR | 1024, 0, "widi_set"
13223         },
13224         {
13225                 SIOCIWFIRSTPRIV + 0x1F,
13226                 IW_PRIV_TYPE_CHAR | 128, 0, "widi_prob_req"
13227         },
13228 #endif // CONFIG_INTEL_WIDI
13229
13230 #ifdef CONFIG_MP_INCLUDED
13231         { SIOCIWFIRSTPRIV + 0x0E, IW_PRIV_TYPE_CHAR | 1024, 0 , ""},  //set
13232         { SIOCIWFIRSTPRIV + 0x0F, IW_PRIV_TYPE_CHAR | 1024, IW_PRIV_TYPE_CHAR | IW_PRIV_SIZE_MASK , ""},//get
13233 /* --- sub-ioctls definitions --- */
13234                 { MP_START , IW_PRIV_TYPE_CHAR | 1024, 0, "mp_start" }, //set
13235                 { MP_PHYPARA, IW_PRIV_TYPE_CHAR | 1024, IW_PRIV_TYPE_CHAR | IW_PRIV_SIZE_MASK, "mp_phypara" },//get
13236                 { MP_STOP , IW_PRIV_TYPE_CHAR | 1024, 0, "mp_stop" }, //set
13237                 { MP_CHANNEL , IW_PRIV_TYPE_CHAR | 1024 , IW_PRIV_TYPE_CHAR | IW_PRIV_SIZE_MASK, "mp_channel" },//get
13238                 { MP_BANDWIDTH , IW_PRIV_TYPE_CHAR | 1024, 0, "mp_bandwidth"}, //set
13239                 { MP_RATE , IW_PRIV_TYPE_CHAR | 1024, IW_PRIV_TYPE_CHAR | IW_PRIV_SIZE_MASK, "mp_rate" },//get
13240                 { MP_RESET_STATS , IW_PRIV_TYPE_CHAR | 1024, 0, "mp_reset_stats"},
13241                 { MP_QUERY , IW_PRIV_TYPE_CHAR | 1024, IW_PRIV_TYPE_CHAR | IW_PRIV_SIZE_MASK , "mp_query"}, //get
13242                 { READ_REG , IW_PRIV_TYPE_CHAR | 1024, IW_PRIV_TYPE_CHAR | IW_PRIV_SIZE_MASK, "read_reg" },
13243                 { MP_RATE , IW_PRIV_TYPE_CHAR | 1024, IW_PRIV_TYPE_CHAR | IW_PRIV_SIZE_MASK, "mp_rate" },
13244                 { READ_RF , IW_PRIV_TYPE_CHAR | 1024, IW_PRIV_TYPE_CHAR | IW_PRIV_SIZE_MASK, "read_rf" },
13245                 { MP_PSD , IW_PRIV_TYPE_CHAR | 1024, IW_PRIV_TYPE_CHAR | IW_PRIV_SIZE_MASK, "mp_psd"},
13246                 { MP_DUMP, IW_PRIV_TYPE_CHAR | 1024, IW_PRIV_TYPE_CHAR | IW_PRIV_SIZE_MASK, "mp_dump" },
13247                 { MP_TXPOWER , IW_PRIV_TYPE_CHAR | 1024, IW_PRIV_TYPE_CHAR | IW_PRIV_SIZE_MASK, "mp_txpower"},
13248                 { MP_ANT_TX , IW_PRIV_TYPE_CHAR | 1024,  IW_PRIV_TYPE_CHAR | IW_PRIV_SIZE_MASK, "mp_ant_tx"},
13249                 { MP_ANT_RX , IW_PRIV_TYPE_CHAR | 1024, IW_PRIV_TYPE_CHAR | IW_PRIV_SIZE_MASK, "mp_ant_rx"},
13250                 { WRITE_REG , IW_PRIV_TYPE_CHAR | 1024, IW_PRIV_TYPE_CHAR | IW_PRIV_SIZE_MASK, "write_reg" },
13251                 { WRITE_RF , IW_PRIV_TYPE_CHAR | 1024, IW_PRIV_TYPE_CHAR | IW_PRIV_SIZE_MASK, "write_rf" },
13252                 { MP_CTX , IW_PRIV_TYPE_CHAR | 1024, IW_PRIV_TYPE_CHAR | IW_PRIV_SIZE_MASK, "mp_ctx"},
13253                 { MP_ARX , IW_PRIV_TYPE_CHAR | 1024, IW_PRIV_TYPE_CHAR | IW_PRIV_SIZE_MASK, "mp_arx"},
13254                 { MP_THER , IW_PRIV_TYPE_CHAR | 1024, IW_PRIV_TYPE_CHAR | IW_PRIV_SIZE_MASK, "mp_ther"},
13255                 { EFUSE_SET, IW_PRIV_TYPE_CHAR | 1024, IW_PRIV_TYPE_CHAR | IW_PRIV_SIZE_MASK, "efuse_set" },
13256                 { EFUSE_GET, IW_PRIV_TYPE_CHAR | 1024, IW_PRIV_TYPE_CHAR | IW_PRIV_SIZE_MASK, "efuse_get" },
13257                 { MP_PWRTRK , IW_PRIV_TYPE_CHAR | 1024, 0, "mp_pwrtrk"},
13258                 { MP_QueryDrvStats, IW_PRIV_TYPE_CHAR | 1024, IW_PRIV_TYPE_CHAR | IW_PRIV_SIZE_MASK, "mp_drvquery" },
13259                 { MP_IOCTL, IW_PRIV_TYPE_CHAR | 1024, 0, "mp_ioctl"}, // mp_ioctl
13260                 { MP_SetRFPathSwh, IW_PRIV_TYPE_CHAR | 1024, 0, "mp_setrfpath" },
13261                 { MP_PwrCtlDM, IW_PRIV_TYPE_CHAR | 1024, IW_PRIV_TYPE_CHAR | IW_PRIV_SIZE_MASK, "mp_pwrctldm" },
13262                 { MP_GET_TXPOWER_INX, IW_PRIV_TYPE_CHAR | 1024, IW_PRIV_TYPE_CHAR | IW_PRIV_SIZE_MASK, "mp_get_txpower" },
13263                 { MP_GETVER, IW_PRIV_TYPE_CHAR | 1024, IW_PRIV_TYPE_CHAR | IW_PRIV_SIZE_MASK, "mp_priv_ver" },
13264                 { MP_MON, IW_PRIV_TYPE_CHAR | 1024, IW_PRIV_TYPE_CHAR | IW_PRIV_SIZE_MASK, "mp_mon" },
13265                 { EFUSE_MASK, IW_PRIV_TYPE_CHAR | 1024, IW_PRIV_TYPE_CHAR | IW_PRIV_SIZE_MASK, "efuse_mask" },
13266                 { EFUSE_FILE, IW_PRIV_TYPE_CHAR | 1024, IW_PRIV_TYPE_CHAR | IW_PRIV_SIZE_MASK, "efuse_file" },
13267                 { MP_TX, IW_PRIV_TYPE_CHAR | 1024, IW_PRIV_TYPE_CHAR | IW_PRIV_SIZE_MASK, "mp_tx" },
13268                 { MP_RX, IW_PRIV_TYPE_CHAR | 1024, IW_PRIV_TYPE_CHAR | IW_PRIV_SIZE_MASK, "mp_rx" },
13269                 { MP_HW_TX_MODE, IW_PRIV_TYPE_CHAR | 1024, IW_PRIV_TYPE_CHAR | IW_PRIV_SIZE_MASK, "mp_hxtx" },
13270 #if defined(CONFIG_RTL8723B)
13271                 { MP_SetBT, IW_PRIV_TYPE_CHAR | 1024, IW_PRIV_TYPE_CHAR | IW_PRIV_SIZE_MASK, "mp_setbt" },
13272         { MP_DISABLE_BT_COEXIST, IW_PRIV_TYPE_CHAR | 1024, 0, "mp_disa_btcoex"},
13273 #endif
13274                 { CTA_TEST, IW_PRIV_TYPE_CHAR | 1024, 0, "cta_test"},
13275 #endif
13276 #ifdef CONFIG_WOWLAN
13277                 { MP_WOW_ENABLE , IW_PRIV_TYPE_CHAR | 1024, 0, "wow_mode" },
13278                 { MP_WOW_SET_PATTERN , IW_PRIV_TYPE_CHAR | 1024, 0, "wow_set_pattern" },
13279 #endif
13280 #ifdef CONFIG_AP_WOWLAN
13281                 { MP_AP_WOW_ENABLE , IW_PRIV_TYPE_CHAR | 1024, 0, "ap_wow_mode" }, //set
13282 #endif
13283 #ifdef CONFIG_SDIO_INDIRECT_ACCESS
13284                 { MP_SD_IREAD, IW_PRIV_TYPE_CHAR | 1024, IW_PRIV_TYPE_CHAR | IW_PRIV_SIZE_MASK, "sd_iread" },
13285                 { MP_SD_IWRITE, IW_PRIV_TYPE_CHAR | 1024, IW_PRIV_TYPE_CHAR | IW_PRIV_SIZE_MASK, "sd_iwrite" },
13286 #endif
13287 };
13288
13289 static iw_handler rtw_private_handler[] =
13290 {
13291         rtw_wx_write32,                                 //0x00
13292         rtw_wx_read32,                                  //0x01
13293         rtw_drvext_hdl,                                 //0x02
13294         rtw_mp_ioctl_hdl,                               //0x03
13295
13296 // for MM DTV platform
13297         rtw_get_ap_info,                                        //0x04
13298
13299         rtw_set_pid,                                            //0x05
13300         rtw_wps_start,                                  //0x06
13301
13302 // for PLATFORM_MT53XX
13303         rtw_wx_get_sensitivity,                 //0x07
13304         rtw_wx_set_mtk_wps_probe_ie,    //0x08
13305         rtw_wx_set_mtk_wps_ie,                  //0x09
13306
13307 // for RTK_DMP_PLATFORM
13308 // Set Channel depend on the country code
13309         rtw_wx_set_channel_plan,                //0x0A
13310
13311         rtw_dbg_port,                                   //0x0B
13312         rtw_wx_write_rf,                                        //0x0C
13313         rtw_wx_read_rf,                                 //0x0D
13314 #ifdef CONFIG_MP_INCLUDED
13315         rtw_mp_set,                                     //0x0E
13316         rtw_mp_get,                                     //0x0F
13317 #else
13318         rtw_wx_priv_null,                               //0x0E
13319         rtw_wx_priv_null,                               //0x0F
13320 #endif
13321         rtw_p2p_set,                                    //0x10
13322         rtw_p2p_get,                                    //0x11
13323         NULL,                                                   //0x12
13324         rtw_p2p_get2,                                   //0x13
13325
13326         rtw_tdls,                                               //0x14
13327         rtw_tdls_get,                                   //0x15
13328
13329         rtw_pm_set,                                             //0x16
13330         rtw_wx_priv_null,                               //0x17
13331         rtw_rereg_nd_name,                              //0x18
13332         rtw_wx_priv_null,                               //0x19
13333 #ifdef CONFIG_MP_INCLUDED
13334         rtw_wx_priv_null,                               //0x1A
13335         rtw_wx_priv_null,                               //0x1B
13336 #else
13337         rtw_mp_efuse_set,                               //0x1A
13338         rtw_mp_efuse_get,                               //0x1B
13339 #endif
13340         NULL,                                                   // 0x1C is reserved for hostapd
13341         rtw_test,                                               // 0x1D
13342 #ifdef CONFIG_INTEL_WIDI
13343         rtw_widi_set,                                   //0x1E
13344         rtw_widi_set_probe_request,             //0x1F
13345 #endif // CONFIG_INTEL_WIDI
13346 };
13347
13348
13349 #if WIRELESS_EXT >= 17
13350 static struct iw_statistics *rtw_get_wireless_stats(struct net_device *dev)
13351 {
13352        _adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
13353            struct iw_statistics *piwstats=&padapter->iwstats;
13354         int tmp_level = 0;
13355         int tmp_qual = 0;
13356         int tmp_noise = 0;
13357
13358         if (check_fwstate(&padapter->mlmepriv, _FW_LINKED) != _TRUE)
13359         {
13360                 piwstats->qual.qual = 0;
13361                 piwstats->qual.level = 0;
13362                 piwstats->qual.noise = 0;
13363                 //DBG_871X("No link  level:%d, qual:%d, noise:%d\n", tmp_level, tmp_qual, tmp_noise);
13364         }
13365         else{
13366                 #ifdef CONFIG_SIGNAL_DISPLAY_DBM
13367                 tmp_level = translate_percentage_to_dbm(padapter->recvpriv.signal_strength);
13368                 #else
13369                 #ifdef CONFIG_SIGNAL_SCALE_MAPPING
13370                 tmp_level = padapter->recvpriv.signal_strength;
13371                 #else
13372                 {
13373                         /* Do signal scale mapping when using percentage as the unit of signal strength, since the scale mapping is skipped in odm */
13374
13375                         HAL_DATA_TYPE *pHal = GET_HAL_DATA(padapter);
13376
13377                         tmp_level = (u8)odm_SignalScaleMapping(&pHal->odmpriv, padapter->recvpriv.signal_strength);
13378                 }
13379                 #endif
13380                 #endif
13381
13382                 tmp_qual = padapter->recvpriv.signal_qual;
13383                 rtw_get_noise(padapter);
13384                 tmp_noise = padapter->recvpriv.noise;
13385                 //DBG_871X("level:%d, qual:%d, noise:%d, rssi (%d)\n", tmp_level, tmp_qual, tmp_noise,padapter->recvpriv.rssi);
13386
13387                 piwstats->qual.level = tmp_level;
13388                 piwstats->qual.qual = tmp_qual;
13389                 piwstats->qual.noise = tmp_noise;
13390         }
13391 #if (LINUX_VERSION_CODE >= KERNEL_VERSION(2,6,14))
13392         piwstats->qual.updated = IW_QUAL_ALL_UPDATED ;//|IW_QUAL_DBM;
13393 #else
13394 #ifdef RTK_DMP_PLATFORM
13395         //IW_QUAL_DBM= 0x8, if driver use this flag, wireless extension will show value of dbm.
13396         //remove this flag for show percentage 0~100
13397         piwstats->qual.updated = 0x07;
13398 #else
13399         piwstats->qual.updated = 0x0f;
13400 #endif
13401 #endif
13402
13403         #ifdef CONFIG_SIGNAL_DISPLAY_DBM
13404         piwstats->qual.updated = piwstats->qual.updated | IW_QUAL_DBM;
13405         #endif
13406
13407         return &padapter->iwstats;
13408 }
13409 #endif
13410
13411 #ifdef CONFIG_WIRELESS_EXT
13412 struct iw_handler_def rtw_handlers_def =
13413 {
13414         .standard = rtw_handlers,
13415         .num_standard = sizeof(rtw_handlers) / sizeof(iw_handler),
13416 #if (LINUX_VERSION_CODE < KERNEL_VERSION(2,6,33)) || defined(CONFIG_WEXT_PRIV)
13417         .private = rtw_private_handler,
13418         .private_args = (struct iw_priv_args *)rtw_private_args,
13419         .num_private = sizeof(rtw_private_handler) / sizeof(iw_handler),
13420         .num_private_args = sizeof(rtw_private_args) / sizeof(struct iw_priv_args),
13421 #endif
13422 #if WIRELESS_EXT >= 17
13423         .get_wireless_stats = rtw_get_wireless_stats,
13424 #endif
13425 };
13426 #endif
13427
13428 // copy from net/wireless/wext.c start
13429 /* ---------------------------------------------------------------- */
13430 /*
13431  * Calculate size of private arguments
13432  */
13433 static const char iw_priv_type_size[] = {
13434         0,                              /* IW_PRIV_TYPE_NONE */
13435         1,                              /* IW_PRIV_TYPE_BYTE */
13436         1,                              /* IW_PRIV_TYPE_CHAR */
13437         0,                              /* Not defined */
13438         sizeof(__u32),                  /* IW_PRIV_TYPE_INT */
13439         sizeof(struct iw_freq),         /* IW_PRIV_TYPE_FLOAT */
13440         sizeof(struct sockaddr),        /* IW_PRIV_TYPE_ADDR */
13441         0,                              /* Not defined */
13442 };
13443
13444 static int get_priv_size(__u16 args)
13445 {
13446         int num = args & IW_PRIV_SIZE_MASK;
13447         int type = (args & IW_PRIV_TYPE_MASK) >> 12;
13448
13449         return num * iw_priv_type_size[type];
13450 }
13451 // copy from net/wireless/wext.c end
13452
13453
13454 static int _rtw_ioctl_wext_private(struct net_device *dev, union iwreq_data *wrq_data)
13455 {
13456         int err = 0;
13457         u8 *input = NULL;
13458         u32 input_len = 0;
13459         const char delim[] = " ";
13460         u8 *output = NULL;
13461         u32 output_len = 0;
13462         u32 count = 0;
13463         u8 *buffer= NULL;
13464         u32 buffer_len = 0;
13465         char *ptr = NULL;
13466         u8 cmdname[17] = {0}; // IFNAMSIZ+1
13467         u32 cmdlen;
13468         s32 len;
13469         u8 *extra = NULL;
13470         u32 extra_size = 0;
13471
13472         s32 k;
13473         const iw_handler *priv;         /* Private ioctl */
13474         const struct iw_priv_args *priv_args;   /* Private ioctl description */
13475         u32 num_priv;                           /* Number of ioctl */
13476         u32 num_priv_args;                      /* Number of descriptions */
13477         iw_handler handler;
13478         int temp;
13479         int subcmd = 0;                         /* sub-ioctl index */
13480         int offset = 0;                         /* Space for sub-ioctl index */
13481
13482         union iwreq_data wdata;
13483
13484         _rtw_memcpy(&wdata, wrq_data, sizeof(wdata));
13485
13486         input_len = wdata.data.length;
13487         input = rtw_zmalloc(input_len);
13488         if (NULL == input || input_len == 0)
13489                 return -ENOMEM;
13490         if (copy_from_user(input, wdata.data.pointer, input_len)) {
13491                 err = -EFAULT;
13492                 goto exit;
13493         }
13494         input[input_len - 1] = '\0';
13495         ptr = input;
13496         len = input_len;
13497
13498         if (ptr == NULL) {
13499                 err = -EOPNOTSUPP;
13500                 goto exit;
13501         }
13502
13503         sscanf(ptr, "%16s", cmdname);
13504         cmdlen = strlen(cmdname);
13505         DBG_871X("%s: cmd=%s\n", __func__, cmdname);
13506
13507         // skip command string
13508         if (cmdlen > 0)
13509                 cmdlen += 1; // skip one space
13510         ptr += cmdlen;
13511         len -= cmdlen;
13512         DBG_871X("%s: parameters=%s\n", __func__, ptr);
13513
13514         priv = rtw_private_handler;
13515         priv_args = rtw_private_args;
13516         num_priv = sizeof(rtw_private_handler) / sizeof(iw_handler);
13517         num_priv_args = sizeof(rtw_private_args) / sizeof(struct iw_priv_args);
13518
13519         if (num_priv_args == 0) {
13520                 err = -EOPNOTSUPP;
13521                 goto exit;
13522         }
13523
13524         /* Search the correct ioctl */
13525         k = -1;
13526         while((++k < num_priv_args) && strcmp(priv_args[k].name, cmdname));
13527
13528         /* If not found... */
13529         if (k == num_priv_args) {
13530                 err = -EOPNOTSUPP;
13531                 goto exit;
13532         }
13533
13534         /* Watch out for sub-ioctls ! */
13535         if (priv_args[k].cmd < SIOCDEVPRIVATE)
13536         {
13537                 int j = -1;
13538
13539                 /* Find the matching *real* ioctl */
13540                 while ((++j < num_priv_args) && ((priv_args[j].name[0] != '\0') ||
13541                         (priv_args[j].set_args != priv_args[k].set_args) ||
13542                         (priv_args[j].get_args != priv_args[k].get_args)));
13543
13544                 /* If not found... */
13545                 if (j == num_priv_args) {
13546                         err = -EINVAL;
13547                         goto exit;
13548                 }
13549
13550                 /* Save sub-ioctl number */
13551                 subcmd = priv_args[k].cmd;
13552                 /* Reserve one int (simplify alignment issues) */
13553                 offset = sizeof(__u32);
13554                 /* Use real ioctl definition from now on */
13555                 k = j;
13556         }
13557
13558         buffer = rtw_zmalloc(4096);
13559         if (NULL == buffer) {
13560                 err = -ENOMEM;
13561                 goto exit;
13562         }
13563
13564         /* If we have to set some data */
13565         if ((priv_args[k].set_args & IW_PRIV_TYPE_MASK) &&
13566                 (priv_args[k].set_args & IW_PRIV_SIZE_MASK))
13567         {
13568                 u8 *str;
13569
13570                 switch (priv_args[k].set_args & IW_PRIV_TYPE_MASK)
13571                 {
13572                         case IW_PRIV_TYPE_BYTE:
13573                                 /* Fetch args */
13574                                 count = 0;
13575                                 do {
13576                                         str = strsep(&ptr, delim);
13577                                         if (NULL == str) break;
13578                                         sscanf(str, "%i", &temp);
13579                                         buffer[count++] = (u8)temp;
13580                                 } while (1);
13581                                 buffer_len = count;
13582
13583                                 /* Number of args to fetch */
13584                                 wdata.data.length = count;
13585                                 if (wdata.data.length > (priv_args[k].set_args & IW_PRIV_SIZE_MASK))
13586                                         wdata.data.length = priv_args[k].set_args & IW_PRIV_SIZE_MASK;
13587
13588                                 break;
13589
13590                         case IW_PRIV_TYPE_INT:
13591                                 /* Fetch args */
13592                                 count = 0;
13593                                 do {
13594                                         str = strsep(&ptr, delim);
13595                                         if (NULL == str) break;
13596                                         sscanf(str, "%i", &temp);
13597                                         ((s32*)buffer)[count++] = (s32)temp;
13598                                 } while (1);
13599                                 buffer_len = count * sizeof(s32);
13600
13601                                 /* Number of args to fetch */
13602                                 wdata.data.length = count;
13603                                 if (wdata.data.length > (priv_args[k].set_args & IW_PRIV_SIZE_MASK))
13604                                         wdata.data.length = priv_args[k].set_args & IW_PRIV_SIZE_MASK;
13605
13606                                 break;
13607
13608                         case IW_PRIV_TYPE_CHAR:
13609                                 if (len > 0)
13610                                 {
13611                                         /* Size of the string to fetch */
13612                                         wdata.data.length = len;
13613                                         if (wdata.data.length > (priv_args[k].set_args & IW_PRIV_SIZE_MASK))
13614                                                 wdata.data.length = priv_args[k].set_args & IW_PRIV_SIZE_MASK;
13615
13616                                         /* Fetch string */
13617                                         _rtw_memcpy(buffer, ptr, wdata.data.length);
13618                                 }
13619                                 else
13620                                 {
13621                                         wdata.data.length = 1;
13622                                         buffer[0] = '\0';
13623                                 }
13624                                 buffer_len = wdata.data.length;
13625                                 break;
13626
13627                         default:
13628                                 DBG_8192C("%s: Not yet implemented...\n", __func__);
13629                                 err = -1;
13630                                 goto exit;
13631                 }
13632
13633                 if ((priv_args[k].set_args & IW_PRIV_SIZE_FIXED) &&
13634                         (wdata.data.length != (priv_args[k].set_args & IW_PRIV_SIZE_MASK)))
13635                 {
13636                         DBG_8192C("%s: The command %s needs exactly %d argument(s)...\n",
13637                                         __func__, cmdname, priv_args[k].set_args & IW_PRIV_SIZE_MASK);
13638                         err = -EINVAL;
13639                         goto exit;
13640                 }
13641         }   /* if args to set */
13642         else
13643         {
13644                 wdata.data.length = 0L;
13645         }
13646
13647         /* Those two tests are important. They define how the driver
13648         * will have to handle the data */
13649         if ((priv_args[k].set_args & IW_PRIV_SIZE_FIXED) &&
13650                 ((get_priv_size(priv_args[k].set_args) + offset) <= IFNAMSIZ))
13651         {
13652                 /* First case : all SET args fit within wrq */
13653                 if (offset)
13654                         wdata.mode = subcmd;
13655                 _rtw_memcpy(wdata.name + offset, buffer, IFNAMSIZ - offset);
13656         }
13657         else
13658         {
13659                 if ((priv_args[k].set_args == 0) &&
13660                         (priv_args[k].get_args & IW_PRIV_SIZE_FIXED) &&
13661                         (get_priv_size(priv_args[k].get_args) <= IFNAMSIZ))
13662                 {
13663                         /* Second case : no SET args, GET args fit within wrq */
13664                         if (offset)
13665                                 wdata.mode = subcmd;
13666                 }
13667                 else
13668                 {
13669                         /* Third case : args won't fit in wrq, or variable number of args */
13670                         if (copy_to_user(wdata.data.pointer, buffer, buffer_len)) {
13671                                 err = -EFAULT;
13672                                 goto exit;
13673                         }
13674                         wdata.data.flags = subcmd;
13675                 }
13676         }
13677
13678         rtw_mfree(input, input_len);
13679         input = NULL;
13680
13681         extra_size = 0;
13682         if (IW_IS_SET(priv_args[k].cmd))
13683         {
13684                 /* Size of set arguments */
13685                 extra_size = get_priv_size(priv_args[k].set_args);
13686
13687                 /* Does it fits in iwr ? */
13688                 if ((priv_args[k].set_args & IW_PRIV_SIZE_FIXED) &&
13689                         ((extra_size + offset) <= IFNAMSIZ))
13690                         extra_size = 0;
13691         } else {
13692                 /* Size of get arguments */
13693                 extra_size = get_priv_size(priv_args[k].get_args);
13694
13695                 /* Does it fits in iwr ? */
13696                 if ((priv_args[k].get_args & IW_PRIV_SIZE_FIXED) &&
13697                         (extra_size <= IFNAMSIZ))
13698                         extra_size = 0;
13699         }
13700
13701         if (extra_size == 0) {
13702                 extra = (u8*)&wdata;
13703                 rtw_mfree(buffer, 4096);
13704                 buffer = NULL;
13705         } else
13706                 extra = buffer;
13707
13708         handler = priv[priv_args[k].cmd - SIOCIWFIRSTPRIV];
13709         err = handler(dev, NULL, &wdata, extra);
13710
13711         /* If we have to get some data */
13712         if ((priv_args[k].get_args & IW_PRIV_TYPE_MASK) &&
13713                 (priv_args[k].get_args & IW_PRIV_SIZE_MASK))
13714         {
13715                 int j;
13716                 int n = 0;      /* number of args */
13717                 u8 str[20] = {0};
13718
13719                 /* Check where is the returned data */
13720                 if ((priv_args[k].get_args & IW_PRIV_SIZE_FIXED) &&
13721                         (get_priv_size(priv_args[k].get_args) <= IFNAMSIZ))
13722                         n = priv_args[k].get_args & IW_PRIV_SIZE_MASK;
13723                 else
13724                         n = wdata.data.length;
13725
13726                 output = rtw_zmalloc(4096);
13727                 if (NULL == output) {
13728                         err =  -ENOMEM;
13729                         goto exit;
13730                 }
13731
13732                 switch (priv_args[k].get_args & IW_PRIV_TYPE_MASK)
13733                 {
13734                         case IW_PRIV_TYPE_BYTE:
13735                                 /* Display args */
13736                                 for (j = 0; j < n; j++)
13737                                 {
13738                                         sprintf(str, "%d  ", extra[j]);
13739                                         len = strlen(str);
13740                                         output_len = strlen(output);
13741                                         if ((output_len + len + 1) > 4096) {
13742                                                 err = -E2BIG;
13743                                                 goto exit;
13744                                         }
13745                                         _rtw_memcpy(output+output_len, str, len);
13746                                 }
13747                                 break;
13748
13749                         case IW_PRIV_TYPE_INT:
13750                                 /* Display args */
13751                                 for (j = 0; j < n; j++)
13752                                 {
13753                                         sprintf(str, "%d  ", ((__s32*)extra)[j]);
13754                                         len = strlen(str);
13755                                         output_len = strlen(output);
13756                                         if ((output_len + len + 1) > 4096) {
13757                                                 err = -E2BIG;
13758                                                 goto exit;
13759                                         }
13760                                         _rtw_memcpy(output+output_len, str, len);
13761                                 }
13762                                 break;
13763
13764                         case IW_PRIV_TYPE_CHAR:
13765                                 /* Display args */
13766                                 _rtw_memcpy(output, extra, n);
13767                                 break;
13768
13769                         default:
13770                                 DBG_8192C("%s: Not yet implemented...\n", __func__);
13771                                 err = -1;
13772                                 goto exit;
13773                 }
13774
13775                 output_len = strlen(output) + 1;
13776                 wrq_data->data.length = output_len;
13777                 if (copy_to_user(wrq_data->data.pointer, output, output_len)) {
13778                         err = -EFAULT;
13779                         goto exit;
13780                 }
13781         }   /* if args to set */
13782         else
13783         {
13784                 wrq_data->data.length = 0;
13785         }
13786
13787 exit:
13788         if (input)
13789                 rtw_mfree(input, input_len);
13790         if (buffer)
13791                 rtw_mfree(buffer, 4096);
13792         if (output)
13793                 rtw_mfree(output, 4096);
13794
13795         return err;
13796 }
13797
13798 #ifdef CONFIG_COMPAT
13799 static int rtw_ioctl_compat_wext_private(struct net_device *dev, struct ifreq *rq)
13800 {
13801         struct compat_iw_point iwp_compat;
13802         union iwreq_data wrq_data;
13803         int err = 0;
13804         DBG_871X("%s:...\n", __func__);
13805         if (copy_from_user(&iwp_compat, rq->ifr_ifru.ifru_data, sizeof(struct compat_iw_point)))
13806                         return -EFAULT;
13807
13808         wrq_data.data.pointer = compat_ptr(iwp_compat.pointer);
13809         wrq_data.data.length = iwp_compat.length;
13810         wrq_data.data.flags = iwp_compat.flags;
13811
13812         err = _rtw_ioctl_wext_private(dev, &wrq_data);
13813
13814         iwp_compat.pointer = ptr_to_compat(wrq_data.data.pointer);
13815         iwp_compat.length = wrq_data.data.length;
13816         iwp_compat.flags = wrq_data.data.flags;
13817         if (copy_to_user(rq->ifr_ifru.ifru_data, &iwp_compat, sizeof(struct compat_iw_point)))
13818                         return -EFAULT;
13819
13820         return err;
13821 }
13822 #endif // CONFIG_COMPAT
13823
13824 static int rtw_ioctl_standard_wext_private(struct net_device *dev, struct ifreq *rq)
13825 {
13826         struct iw_point *iwp;
13827         struct ifreq ifrq;
13828         union iwreq_data wrq_data;
13829         int err = 0;
13830         iwp = &wrq_data.data;
13831         DBG_871X("%s:...\n", __func__);
13832         if (copy_from_user(iwp, rq->ifr_ifru.ifru_data, sizeof(struct iw_point)))
13833                 return -EFAULT;
13834
13835         err = _rtw_ioctl_wext_private(dev, &wrq_data);
13836
13837         if (copy_to_user(rq->ifr_ifru.ifru_data, iwp, sizeof(struct iw_point)))
13838                 return -EFAULT;
13839
13840         return err;
13841 }
13842
13843 static int rtw_ioctl_wext_private(struct net_device *dev, struct ifreq *rq)
13844 {
13845 #ifdef CONFIG_COMPAT
13846         if(is_compat_task())
13847                 return rtw_ioctl_compat_wext_private( dev, rq );
13848         else
13849 #endif // CONFIG_COMPAT
13850                 return rtw_ioctl_standard_wext_private( dev, rq );
13851 }
13852
13853 int rtw_ioctl(struct net_device *dev, struct ifreq *rq, int cmd)
13854 {
13855         struct iwreq *wrq = (struct iwreq *)rq;
13856         int ret=0;
13857
13858         switch (cmd)
13859         {
13860                 case RTL_IOCTL_WPA_SUPPLICANT:
13861                         ret = wpa_supplicant_ioctl(dev, &wrq->u.data);
13862                         break;
13863 #ifdef CONFIG_AP_MODE
13864                 case RTL_IOCTL_HOSTAPD:
13865                         ret = rtw_hostapd_ioctl(dev, &wrq->u.data);
13866                         break;
13867 #ifdef CONFIG_WIRELESS_EXT
13868                 case SIOCSIWMODE:
13869                         ret = rtw_wx_set_mode(dev, NULL, &wrq->u, NULL);
13870                         break;
13871 #endif
13872 #endif // CONFIG_AP_MODE
13873                 case SIOCDEVPRIVATE:
13874                          ret = rtw_ioctl_wext_private(dev, rq);
13875                         break;
13876                 case (SIOCDEVPRIVATE+1):
13877                         ret = rtw_android_priv_cmd(dev, rq, cmd);
13878                         break;
13879                 default:
13880                         ret = -EOPNOTSUPP;
13881                         break;
13882         }
13883
13884         return ret;
13885 }
13886
13887