drivers/net/wireless/rockchip_wlan/rtl8189es/core/rtw_mlme.c

   1 /******************************************************************************
   2  *
   3  * Copyright(c) 2007 - 2011 Realtek Corporation. All rights reserved.
   4  *
   5  * This program is free software; you can redistribute it and/or modify it
   6  * under the terms of version 2 of the GNU General Public License as
   7  * published by the Free Software Foundation.
   8  *
   9  * This program is distributed in the hope that it will be useful, but WITHOUT
  10  * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
  11  * FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for
  12  * more details.
  13  *
  14  * You should have received a copy of the GNU General Public License along with
  15  * this program; if not, write to the Free Software Foundation, Inc.,
  16  * 51 Franklin Street, Fifth Floor, Boston, MA 02110, USA
  17  *
  18  *
  19  ******************************************************************************/
  20 #define _RTW_MLME_C_
  21
  22 #include <drv_types.h>
  23
  24
  25 extern void indicate_wx_scan_complete_event(_adapter *padapter);
  26 extern u8 rtw_do_join(_adapter * padapter);
  27
  28 #ifdef CONFIG_DISABLE_MCS13TO15
  29 extern unsigned char    MCS_rate_2R_MCS13TO15_OFF[16];
  30 extern unsigned char    MCS_rate_2R[16];
  31 #else //CONFIG_DISABLE_MCS13TO15
  32 extern unsigned char    MCS_rate_2R[16];
  33 #endif //CONFIG_DISABLE_MCS13TO15
  34 extern unsigned char    MCS_rate_1R[16];
  35
  36 sint    _rtw_init_mlme_priv (_adapter* padapter)
  37 {
  38         sint    i;
  39         u8      *pbuf;
  40         struct wlan_network     *pnetwork;
  41         struct mlme_priv                *pmlmepriv = &padapter->mlmepriv;
  42         sint    res = _SUCCESS;
  43
  44 _func_enter_;
  45
  46         // We don't need to memset padapter->XXX to zero, because adapter is allocated by rtw_zvmalloc().
  47         //_rtw_memset((u8 *)pmlmepriv, 0, sizeof(struct mlme_priv));
  48
  49         pmlmepriv->nic_hdl = (u8 *)padapter;
  50
  51         pmlmepriv->pscanned = NULL;
  52         pmlmepriv->fw_state = WIFI_STATION_STATE; // Must sync with rtw_wdev_alloc()
  53                                                   // wdev->iftype = NL80211_IFTYPE_STATION
  54         pmlmepriv->cur_network.network.InfrastructureMode = Ndis802_11AutoUnknown;
  55         pmlmepriv->scan_mode=SCAN_ACTIVE;// 1: active, 0: pasive. Maybe someday we should rename this varable to "active_mode" (Jeff)
  56
  57         _rtw_spinlock_init(&(pmlmepriv->lock));
  58         _rtw_init_queue(&(pmlmepriv->free_bss_pool));
  59         _rtw_init_queue(&(pmlmepriv->scanned_queue));
  60
  61         set_scanned_network_val(pmlmepriv, 0);
  62
  63         _rtw_memset(&pmlmepriv->assoc_ssid,0,sizeof(NDIS_802_11_SSID));
  64
  65         pbuf = rtw_zvmalloc(MAX_BSS_CNT * (sizeof(struct wlan_network)));
  66
  67         if (pbuf == NULL){
  68                 res=_FAIL;
  69                 goto exit;
  70         }
  71         pmlmepriv->free_bss_buf = pbuf;
  72
  73         pnetwork = (struct wlan_network *)pbuf;
  74
  75         for(i = 0; i < MAX_BSS_CNT; i++)
  76         {
  77                 _rtw_init_listhead(&(pnetwork->list));
  78
  79                 rtw_list_insert_tail(&(pnetwork->list), &(pmlmepriv->free_bss_pool.queue));
  80
  81                 pnetwork++;
  82         }
  83
  84         //allocate DMA-able/Non-Page memory for cmd_buf and rsp_buf
  85
  86         rtw_clear_scan_deny(padapter);
  87
  88 #ifdef CONFIG_LAYER2_ROAMING
  89         #define RTW_ROAM_SCAN_RESULT_EXP_MS 5*1000
  90         #define RTW_ROAM_RSSI_DIFF_TH 10
  91         #define RTW_ROAM_SCAN_INTERVAL_MS 10*1000
  92
  93         pmlmepriv->roam_flags = 0
  94                 | RTW_ROAM_ON_EXPIRED
  95                 #ifdef CONFIG_LAYER2_ROAMING_RESUME
  96                 | RTW_ROAM_ON_RESUME
  97                 #endif
  98                 #ifdef CONFIG_LAYER2_ROAMING_ACTIVE
  99                 | RTW_ROAM_ACTIVE
 100                 #endif
 101                 ;
 102
 103         pmlmepriv->roam_scanr_exp_ms = RTW_ROAM_SCAN_RESULT_EXP_MS;
 104         pmlmepriv->roam_rssi_diff_th = RTW_ROAM_RSSI_DIFF_TH;
 105         pmlmepriv->roam_scan_int_ms = RTW_ROAM_SCAN_INTERVAL_MS;
 106 #endif /* CONFIG_LAYER2_ROAMING */
 107
 108         rtw_init_mlme_timer(padapter);
 109
 110 exit:
 111
 112 _func_exit_;
 113
 114         return res;
 115 }
 116
 117 void rtw_mfree_mlme_priv_lock (struct mlme_priv *pmlmepriv);
 118 void rtw_mfree_mlme_priv_lock (struct mlme_priv *pmlmepriv)
 119 {
 120         _rtw_spinlock_free(&pmlmepriv->lock);
 121         _rtw_spinlock_free(&(pmlmepriv->free_bss_pool.lock));
 122         _rtw_spinlock_free(&(pmlmepriv->scanned_queue.lock));
 123 }
 124
 125 static void rtw_free_mlme_ie_data(u8 **ppie, u32 *plen)
 126 {
 127         if(*ppie)
 128         {
 129                 rtw_mfree(*ppie, *plen);
 130                 *plen = 0;
 131                 *ppie=NULL;
 132         }
 133 }
 134
 135 void rtw_free_mlme_priv_ie_data(struct mlme_priv *pmlmepriv)
 136 {
 137 #if defined (CONFIG_AP_MODE) && defined (CONFIG_NATIVEAP_MLME)
 138         rtw_buf_free(&pmlmepriv->assoc_req, &pmlmepriv->assoc_req_len);
 139         rtw_buf_free(&pmlmepriv->assoc_rsp, &pmlmepriv->assoc_rsp_len);
 140         rtw_free_mlme_ie_data(&pmlmepriv->wps_beacon_ie, &pmlmepriv->wps_beacon_ie_len);
 141         rtw_free_mlme_ie_data(&pmlmepriv->wps_probe_req_ie, &pmlmepriv->wps_probe_req_ie_len);
 142         rtw_free_mlme_ie_data(&pmlmepriv->wps_probe_resp_ie, &pmlmepriv->wps_probe_resp_ie_len);
 143         rtw_free_mlme_ie_data(&pmlmepriv->wps_assoc_resp_ie, &pmlmepriv->wps_assoc_resp_ie_len);
 144
 145         rtw_free_mlme_ie_data(&pmlmepriv->p2p_beacon_ie, &pmlmepriv->p2p_beacon_ie_len);
 146         rtw_free_mlme_ie_data(&pmlmepriv->p2p_probe_req_ie, &pmlmepriv->p2p_probe_req_ie_len);
 147         rtw_free_mlme_ie_data(&pmlmepriv->p2p_probe_resp_ie, &pmlmepriv->p2p_probe_resp_ie_len);
 148         rtw_free_mlme_ie_data(&pmlmepriv->p2p_go_probe_resp_ie, &pmlmepriv->p2p_go_probe_resp_ie_len);
 149         rtw_free_mlme_ie_data(&pmlmepriv->p2p_assoc_req_ie, &pmlmepriv->p2p_assoc_req_ie_len);
 150 #endif
 151
 152 #if defined(CONFIG_WFD) && defined(CONFIG_IOCTL_CFG80211)
 153         rtw_free_mlme_ie_data(&pmlmepriv->wfd_beacon_ie, &pmlmepriv->wfd_beacon_ie_len);
 154         rtw_free_mlme_ie_data(&pmlmepriv->wfd_probe_req_ie, &pmlmepriv->wfd_probe_req_ie_len);
 155         rtw_free_mlme_ie_data(&pmlmepriv->wfd_probe_resp_ie, &pmlmepriv->wfd_probe_resp_ie_len);
 156         rtw_free_mlme_ie_data(&pmlmepriv->wfd_go_probe_resp_ie, &pmlmepriv->wfd_go_probe_resp_ie_len);
 157         rtw_free_mlme_ie_data(&pmlmepriv->wfd_assoc_req_ie, &pmlmepriv->wfd_assoc_req_ie_len);
 158 #endif
 159
 160 }
 161
 162 void _rtw_free_mlme_priv (struct mlme_priv *pmlmepriv)
 163 {
 164 _func_enter_;
 165
 166         rtw_free_mlme_priv_ie_data(pmlmepriv);
 167
 168         if(pmlmepriv){
 169                 rtw_mfree_mlme_priv_lock (pmlmepriv);
 170
 171                 if (pmlmepriv->free_bss_buf) {
 172                         rtw_vmfree(pmlmepriv->free_bss_buf, MAX_BSS_CNT * sizeof(struct wlan_network));
 173                 }
 174         }
 175 _func_exit_;
 176 }
 177
 178 sint    _rtw_enqueue_network(_queue *queue, struct wlan_network *pnetwork)
 179 {
 180         _irqL irqL;
 181
 182 _func_enter_;
 183
 184         if (pnetwork == NULL)
 185                 goto exit;
 186
 187         _enter_critical_bh(&queue->lock, &irqL);
 188
 189         rtw_list_insert_tail(&pnetwork->list, &queue->queue);
 190
 191         _exit_critical_bh(&queue->lock, &irqL);
 192
 193 exit:
 194
 195 _func_exit_;
 196
 197         return _SUCCESS;
 198 }
 199
 200 /*
 201 struct  wlan_network *_rtw_dequeue_network(_queue *queue)
 202 {
 203         _irqL irqL;
 204
 205         struct wlan_network *pnetwork;
 206
 207 _func_enter_;
 208
 209         _enter_critical_bh(&queue->lock, &irqL);
 210
 211         if (_rtw_queue_empty(queue) == _TRUE)
 212
 213                 pnetwork = NULL;
 214
 215         else
 216         {
 217                 pnetwork = LIST_CONTAINOR(get_next(&queue->queue), struct wlan_network, list);
 218
 219                 rtw_list_delete(&(pnetwork->list));
 220         }
 221
 222         _exit_critical_bh(&queue->lock, &irqL);
 223
 224 _func_exit_;
 225
 226         return pnetwork;
 227 }
 228 */
 229
 230 struct  wlan_network *_rtw_alloc_network(struct mlme_priv *pmlmepriv )//(_queue *free_queue)
 231 {
 232         _irqL   irqL;
 233         struct  wlan_network    *pnetwork;
 234         _queue *free_queue = &pmlmepriv->free_bss_pool;
 235         _list* plist = NULL;
 236
 237 _func_enter_;
 238
 239         _enter_critical_bh(&free_queue->lock, &irqL);
 240
 241         if (_rtw_queue_empty(free_queue) == _TRUE) {
 242                 pnetwork=NULL;
 243                 goto exit;
 244         }
 245         plist = get_next(&(free_queue->queue));
 246
 247         pnetwork = LIST_CONTAINOR(plist , struct wlan_network, list);
 248
 249         rtw_list_delete(&pnetwork->list);
 250
 251         RT_TRACE(_module_rtl871x_mlme_c_, _drv_info_, ("_rtw_alloc_network: ptr=%p\n", plist));
 252         pnetwork->network_type = 0;
 253         pnetwork->fixed = _FALSE;
 254         pnetwork->last_scanned = rtw_get_current_time();
 255         pnetwork->aid=0;
 256         pnetwork->join_res=0;
 257
 258         pmlmepriv->num_of_scanned ++;
 259
 260 exit:
 261         _exit_critical_bh(&free_queue->lock, &irqL);
 262
 263 _func_exit_;
 264
 265         return pnetwork;
 266 }
 267
 268 void _rtw_free_network(struct   mlme_priv *pmlmepriv ,struct wlan_network *pnetwork, u8 isfreeall)
 269 {
 270         u32 delta_time;
 271         u32 lifetime = SCANQUEUE_LIFETIME;
 272         _irqL irqL;
 273         _queue *free_queue = &(pmlmepriv->free_bss_pool);
 274
 275 _func_enter_;
 276
 277         if (pnetwork == NULL)
 278                 goto exit;
 279
 280         if (pnetwork->fixed == _TRUE)
 281                 goto exit;
 282
 283         if ( (check_fwstate(pmlmepriv, WIFI_ADHOC_MASTER_STATE)==_TRUE ) ||
 284                 (check_fwstate(pmlmepriv, WIFI_ADHOC_STATE)==_TRUE ) )
 285                 lifetime = 1;
 286
 287         if(!isfreeall)
 288         {
 289                 delta_time = (u32) rtw_get_passing_time_ms(pnetwork->last_scanned);
 290                 if(delta_time < lifetime)// unit:msec
 291                         goto exit;
 292         }
 293
 294         _enter_critical_bh(&free_queue->lock, &irqL);
 295
 296         rtw_list_delete(&(pnetwork->list));
 297
 298         rtw_list_insert_tail(&(pnetwork->list),&(free_queue->queue));
 299
 300         pmlmepriv->num_of_scanned --;
 301
 302
 303         //DBG_871X("_rtw_free_network:SSID=%s\n", pnetwork->network.Ssid.Ssid);
 304
 305         _exit_critical_bh(&free_queue->lock, &irqL);
 306
 307 exit:
 308
 309 _func_exit_;
 310
 311 }
 312
 313 void _rtw_free_network_nolock(struct    mlme_priv *pmlmepriv, struct wlan_network *pnetwork)
 314 {
 315
 316         _queue *free_queue = &(pmlmepriv->free_bss_pool);
 317
 318 _func_enter_;
 319
 320         if (pnetwork == NULL)
 321                 goto exit;
 322
 323         if (pnetwork->fixed == _TRUE)
 324                 goto exit;
 325
 326         //_enter_critical(&free_queue->lock, &irqL);
 327
 328         rtw_list_delete(&(pnetwork->list));
 329
 330         rtw_list_insert_tail(&(pnetwork->list), get_list_head(free_queue));
 331
 332         pmlmepriv->num_of_scanned --;
 333
 334         //_exit_critical(&free_queue->lock, &irqL);
 335
 336 exit:
 337
 338 _func_exit_;
 339
 340 }
 341
 342
 343 /*
 344         return the wlan_network with the matching addr
 345
 346         Shall be calle under atomic context... to avoid possible racing condition...
 347 */
 348 struct wlan_network *_rtw_find_network(_queue *scanned_queue, u8 *addr)
 349 {
 350
 351         //_irqL irqL;
 352         _list   *phead, *plist;
 353         struct  wlan_network *pnetwork = NULL;
 354         u8 zero_addr[ETH_ALEN] = {0,0,0,0,0,0};
 355
 356 _func_enter_;
 357
 358         if(_rtw_memcmp(zero_addr, addr, ETH_ALEN)){
 359                 pnetwork=NULL;
 360                 goto exit;
 361         }
 362
 363         //_enter_critical_bh(&scanned_queue->lock, &irqL);
 364
 365         phead = get_list_head(scanned_queue);
 366         plist = get_next(phead);
 367
 368         while (plist != phead)
 369        {
 370                 pnetwork = LIST_CONTAINOR(plist, struct wlan_network ,list);
 371
 372                 if (_rtw_memcmp(addr, pnetwork->network.MacAddress, ETH_ALEN) == _TRUE)
 373                         break;
 374
 375                 plist = get_next(plist);
 376         }
 377
 378         if(plist == phead)
 379                 pnetwork = NULL;
 380
 381         //_exit_critical_bh(&scanned_queue->lock, &irqL);
 382
 383 exit:
 384
 385 _func_exit_;
 386
 387         return pnetwork;
 388
 389 }
 390
 391
 392 void _rtw_free_network_queue(_adapter *padapter, u8 isfreeall)
 393 {
 394         _irqL irqL;
 395         _list *phead, *plist;
 396         struct wlan_network *pnetwork;
 397         struct mlme_priv* pmlmepriv = &padapter->mlmepriv;
 398         _queue *scanned_queue = &pmlmepriv->scanned_queue;
 399
 400 _func_enter_;
 401
 402
 403         _enter_critical_bh(&scanned_queue->lock, &irqL);
 404
 405         phead = get_list_head(scanned_queue);
 406         plist = get_next(phead);
 407
 408         while (rtw_end_of_queue_search(phead, plist) == _FALSE)
 409         {
 410
 411                 pnetwork = LIST_CONTAINOR(plist, struct wlan_network, list);
 412
 413                 plist = get_next(plist);
 414
 415                 _rtw_free_network(pmlmepriv,pnetwork, isfreeall);
 416
 417         }
 418
 419         _exit_critical_bh(&scanned_queue->lock, &irqL);
 420
 421 _func_exit_;
 422
 423 }
 424
 425
 426
 427
 428 sint rtw_if_up(_adapter *padapter)      {
 429
 430         sint res;
 431 _func_enter_;
 432
 433         if( padapter->bDriverStopped || padapter->bSurpriseRemoved ||
 434                 (check_fwstate(&padapter->mlmepriv, _FW_LINKED)== _FALSE)){
 435                 RT_TRACE(_module_rtl871x_mlme_c_, _drv_info_, ("rtw_if_up:bDriverStopped(%d) OR bSurpriseRemoved(%d)", padapter->bDriverStopped, padapter->bSurpriseRemoved));
 436                 res=_FALSE;
 437         }
 438         else
 439                 res=  _TRUE;
 440
 441 _func_exit_;
 442         return res;
 443 }
 444
 445
 446 void rtw_generate_random_ibss(u8* pibss)
 447 {
 448         u32     curtime = rtw_get_current_time();
 449
 450 _func_enter_;
 451         pibss[0] = 0x02;  //in ad-hoc mode bit1 must set to 1
 452         pibss[1] = 0x11;
 453         pibss[2] = 0x87;
 454         pibss[3] = (u8)(curtime & 0xff) ;//p[0];
 455         pibss[4] = (u8)((curtime>>8) & 0xff) ;//p[1];
 456         pibss[5] = (u8)((curtime>>16) & 0xff) ;//p[2];
 457 _func_exit_;
 458         return;
 459 }
 460
 461 u8 *rtw_get_capability_from_ie(u8 *ie)
 462 {
 463         return (ie + 8 + 2);
 464 }
 465
 466
 467 u16 rtw_get_capability(WLAN_BSSID_EX *bss)
 468 {
 469         u16     val;
 470 _func_enter_;
 471
 472         _rtw_memcpy((u8 *)&val, rtw_get_capability_from_ie(bss->IEs), 2);
 473
 474 _func_exit_;
 475         return le16_to_cpu(val);
 476 }
 477
 478 u8 *rtw_get_timestampe_from_ie(u8 *ie)
 479 {
 480         return (ie + 0);
 481 }
 482
 483 u8 *rtw_get_beacon_interval_from_ie(u8 *ie)
 484 {
 485         return (ie + 8);
 486 }
 487
 488
 489 int     rtw_init_mlme_priv (_adapter *padapter)//(struct        mlme_priv *pmlmepriv)
 490 {
 491         int     res;
 492 _func_enter_;
 493         res = _rtw_init_mlme_priv(padapter);// (pmlmepriv);
 494 _func_exit_;
 495         return res;
 496 }
 497
 498 void rtw_free_mlme_priv (struct mlme_priv *pmlmepriv)
 499 {
 500 _func_enter_;
 501         RT_TRACE(_module_rtl871x_mlme_c_,_drv_err_,("rtw_free_mlme_priv\n"));
 502         _rtw_free_mlme_priv (pmlmepriv);
 503 _func_exit_;
 504 }
 505
 506 int     rtw_enqueue_network(_queue *queue, struct wlan_network *pnetwork);
 507 int     rtw_enqueue_network(_queue *queue, struct wlan_network *pnetwork)
 508 {
 509         int     res;
 510 _func_enter_;
 511         res = _rtw_enqueue_network(queue, pnetwork);
 512 _func_exit_;
 513         return res;
 514 }
 515
 516 /*
 517 static struct   wlan_network *rtw_dequeue_network(_queue *queue)
 518 {
 519         struct wlan_network *pnetwork;
 520 _func_enter_;
 521         pnetwork = _rtw_dequeue_network(queue);
 522 _func_exit_;
 523         return pnetwork;
 524 }
 525 */
 526
 527 struct  wlan_network *rtw_alloc_network(struct  mlme_priv *pmlmepriv );
 528 struct  wlan_network *rtw_alloc_network(struct  mlme_priv *pmlmepriv )//(_queue *free_queue)
 529 {
 530         struct  wlan_network    *pnetwork;
 531 _func_enter_;
 532         pnetwork = _rtw_alloc_network(pmlmepriv);
 533 _func_exit_;
 534         return pnetwork;
 535 }
 536
 537 void rtw_free_network(struct mlme_priv *pmlmepriv, struct       wlan_network *pnetwork, u8 is_freeall);
 538 void rtw_free_network(struct mlme_priv *pmlmepriv, struct       wlan_network *pnetwork, u8 is_freeall)//(struct wlan_network *pnetwork, _queue  *free_queue)
 539 {
 540 _func_enter_;
 541         RT_TRACE(_module_rtl871x_mlme_c_,_drv_err_,("rtw_free_network==> ssid = %s \n\n" , pnetwork->network.Ssid.Ssid));
 542         _rtw_free_network(pmlmepriv, pnetwork, is_freeall);
 543 _func_exit_;
 544 }
 545
 546 void rtw_free_network_nolock(_adapter * padapter, struct wlan_network *pnetwork );
 547 void rtw_free_network_nolock(_adapter * padapter, struct wlan_network *pnetwork )
 548 {
 549 _func_enter_;
 550         //RT_TRACE(_module_rtl871x_mlme_c_,_drv_err_,("rtw_free_network==> ssid = %s \n\n" , pnetwork->network.Ssid.Ssid));
 551         _rtw_free_network_nolock(&(padapter->mlmepriv), pnetwork);
 552 #ifdef CONFIG_IOCTL_CFG80211
 553         rtw_cfg80211_unlink_bss(padapter, pnetwork);
 554 #endif //CONFIG_IOCTL_CFG80211
 555 _func_exit_;
 556 }
 557
 558
 559 void rtw_free_network_queue(_adapter* dev, u8 isfreeall)
 560 {
 561 _func_enter_;
 562         _rtw_free_network_queue(dev, isfreeall);
 563 _func_exit_;
 564 }
 565
 566 /*
 567         return the wlan_network with the matching addr
 568
 569         Shall be calle under atomic context... to avoid possible racing condition...
 570 */
 571 struct  wlan_network *rtw_find_network(_queue *scanned_queue, u8 *addr)
 572 {
 573         struct  wlan_network *pnetwork = _rtw_find_network(scanned_queue, addr);
 574
 575         return pnetwork;
 576 }
 577
 578 int rtw_is_same_ibss(_adapter *adapter, struct wlan_network *pnetwork)
 579 {
 580         int ret=_TRUE;
 581         struct security_priv *psecuritypriv = &adapter->securitypriv;
 582
 583         if ( (psecuritypriv->dot11PrivacyAlgrthm != _NO_PRIVACY_ ) &&
 584                     ( pnetwork->network.Privacy == 0 ) )
 585         {
 586                 ret=_FALSE;
 587         }
 588         else if((psecuritypriv->dot11PrivacyAlgrthm == _NO_PRIVACY_ ) &&
 589                  ( pnetwork->network.Privacy == 1 ) )
 590         {
 591                 ret=_FALSE;
 592         }
 593         else
 594         {
 595                 ret=_TRUE;
 596         }
 597
 598         return ret;
 599
 600 }
 601
 602 inline int is_same_ess(WLAN_BSSID_EX *a, WLAN_BSSID_EX *b)
 603 {
 604         //RT_TRACE(_module_rtl871x_mlme_c_,_drv_err_,("(%s,%d)(%s,%d)\n",
 605         //              a->Ssid.Ssid,a->Ssid.SsidLength,b->Ssid.Ssid,b->Ssid.SsidLength));
 606         return (a->Ssid.SsidLength == b->Ssid.SsidLength)
 607                 &&  _rtw_memcmp(a->Ssid.Ssid, b->Ssid.Ssid, a->Ssid.SsidLength)==_TRUE;
 608 }
 609
 610 int is_same_network(WLAN_BSSID_EX *src, WLAN_BSSID_EX *dst, u8 feature)
 611 {
 612          u16 s_cap, d_cap;
 613
 614 _func_enter_;
 615
 616         if(rtw_bug_check(dst, src, &s_cap, &d_cap)==_FALSE)
 617                         return _FALSE;
 618
 619         _rtw_memcpy((u8 *)&s_cap, rtw_get_capability_from_ie(src->IEs), 2);
 620         _rtw_memcpy((u8 *)&d_cap, rtw_get_capability_from_ie(dst->IEs), 2);
 621
 622
 623         s_cap = le16_to_cpu(s_cap);
 624         d_cap = le16_to_cpu(d_cap);
 625
 626 _func_exit_;
 627
 628 #ifdef CONFIG_P2P
 629         if ((feature == 1) && // 1: P2P supported
 630                 (_rtw_memcmp(src->MacAddress, dst->MacAddress, ETH_ALEN) == _TRUE)
 631                 ) {
 632                 return _TRUE;
 633         }
 634 #endif
 635
 636         return ((src->Ssid.SsidLength == dst->Ssid.SsidLength) &&
 637                 //      (src->Configuration.DSConfig == dst->Configuration.DSConfig) &&
 638                         ( (_rtw_memcmp(src->MacAddress, dst->MacAddress, ETH_ALEN)) == _TRUE) &&
 639                         ( (_rtw_memcmp(src->Ssid.Ssid, dst->Ssid.Ssid, src->Ssid.SsidLength)) == _TRUE) &&
 640                         ((s_cap & WLAN_CAPABILITY_IBSS) ==
 641                         (d_cap & WLAN_CAPABILITY_IBSS)) &&
 642                         ((s_cap & WLAN_CAPABILITY_BSS) ==
 643                         (d_cap & WLAN_CAPABILITY_BSS)));
 644
 645 }
 646
 647 struct wlan_network *_rtw_find_same_network(_queue *scanned_queue, struct wlan_network *network)
 648 {
 649         _list *phead, *plist;
 650         struct wlan_network *found = NULL;
 651
 652         phead = get_list_head(scanned_queue);
 653         plist = get_next(phead);
 654
 655         while (plist != phead) {
 656                 found = LIST_CONTAINOR(plist, struct wlan_network ,list);
 657
 658                 if (is_same_network(&network->network, &found->network,0))
 659                         break;
 660
 661                 plist = get_next(plist);
 662         }
 663
 664         if(plist == phead)
 665                 found = NULL;
 666 exit:
 667         return found;
 668 }
 669
 670 struct wlan_network *rtw_find_same_network(_queue *scanned_queue, struct wlan_network *network)
 671 {
 672         _irqL irqL;
 673         struct wlan_network *found = NULL;
 674
 675         if (scanned_queue == NULL || network == NULL)
 676                 goto exit;
 677
 678         _enter_critical_bh(&scanned_queue->lock, &irqL);
 679         found = _rtw_find_same_network(scanned_queue, network);
 680         _exit_critical_bh(&scanned_queue->lock, &irqL);
 681
 682 exit:
 683         return found;
 684 }
 685
 686 struct  wlan_network    * rtw_get_oldest_wlan_network(_queue *scanned_queue)
 687 {
 688         _list   *plist, *phead;
 689
 690
 691         struct  wlan_network    *pwlan = NULL;
 692         struct  wlan_network    *oldest = NULL;
 693 _func_enter_;
 694         phead = get_list_head(scanned_queue);
 695
 696         plist = get_next(phead);
 697
 698         while(1)
 699         {
 700
 701                 if (rtw_end_of_queue_search(phead,plist)== _TRUE)
 702                         break;
 703
 704                 pwlan= LIST_CONTAINOR(plist, struct wlan_network, list);
 705
 706                 if(pwlan->fixed!=_TRUE)
 707                 {
 708                         if (oldest == NULL ||time_after(oldest->last_scanned, pwlan->last_scanned))
 709                                 oldest = pwlan;
 710                 }
 711
 712                 plist = get_next(plist);
 713         }
 714 _func_exit_;
 715         return oldest;
 716
 717 }
 718
 719 void update_network(WLAN_BSSID_EX *dst, WLAN_BSSID_EX *src,
 720         _adapter * padapter, bool update_ie)
 721 {
 722         u8 ss_ori = dst->PhyInfo.SignalStrength;
 723         u8 sq_ori = dst->PhyInfo.SignalQuality;
 724         long rssi_ori = dst->Rssi;
 725
 726         u8 ss_smp = src->PhyInfo.SignalStrength;
 727         u8 sq_smp = src->PhyInfo.SignalQuality;
 728         long rssi_smp = src->Rssi;
 729
 730         u8 ss_final;
 731         u8 sq_final;
 732         long rssi_final;
 733
 734 _func_enter_;
 735
 736 #ifdef CONFIG_ANTENNA_DIVERSITY
 737         rtw_hal_antdiv_rssi_compared(padapter, dst, src); //this will update src.Rssi, need consider again
 738 #endif
 739
 740         #if defined(DBG_RX_SIGNAL_DISPLAY_SSID_MONITORED) && 1
 741         if(strcmp(dst->Ssid.Ssid, DBG_RX_SIGNAL_DISPLAY_SSID_MONITORED) == 0) {
 742                 DBG_871X(FUNC_ADPT_FMT" %s("MAC_FMT", ch%u) ss_ori:%3u, sq_ori:%3u, rssi_ori:%3ld, ss_smp:%3u, sq_smp:%3u, rssi_smp:%3ld\n"
 743                         , FUNC_ADPT_ARG(padapter)
 744                         , src->Ssid.Ssid, MAC_ARG(src->MacAddress), src->Configuration.DSConfig
 745                         ,ss_ori, sq_ori, rssi_ori
 746                         ,ss_smp, sq_smp, rssi_smp
 747                 );
 748         }
 749         #endif
 750
 751         /* The rule below is 1/5 for sample value, 4/5 for history value */
 752         if (check_fwstate(&padapter->mlmepriv, _FW_LINKED) && is_same_network(&(padapter->mlmepriv.cur_network.network), src, 0)) {
 753                 /* Take the recvpriv's value for the connected AP*/
 754                 ss_final = padapter->recvpriv.signal_strength;
 755                 sq_final = padapter->recvpriv.signal_qual;
 756                 /* the rssi value here is undecorated, and will be used for antenna diversity */
 757                 if(sq_smp != 101) /* from the right channel */
 758                         rssi_final = (src->Rssi+dst->Rssi*4)/5;
 759                 else
 760                         rssi_final = rssi_ori;
 761         }
 762         else {
 763                 if(sq_smp != 101) { /* from the right channel */
 764                         ss_final = ((u32)(src->PhyInfo.SignalStrength)+(u32)(dst->PhyInfo.SignalStrength)*4)/5;
 765                         sq_final = ((u32)(src->PhyInfo.SignalQuality)+(u32)(dst->PhyInfo.SignalQuality)*4)/5;
 766                         rssi_final = (src->Rssi+dst->Rssi*4)/5;
 767                 } else {
 768                         /* bss info not receving from the right channel, use the original RX signal infos */
 769                         ss_final = dst->PhyInfo.SignalStrength;
 770                         sq_final = dst->PhyInfo.SignalQuality;
 771                         rssi_final = dst->Rssi;
 772                 }
 773
 774         }
 775
 776         if (update_ie) {
 777                 dst->Reserved[0] = src->Reserved[0];
 778                 dst->Reserved[1] = src->Reserved[1];
 779                 _rtw_memcpy((u8 *)dst, (u8 *)src, get_WLAN_BSSID_EX_sz(src));
 780         }
 781
 782         dst->PhyInfo.SignalStrength = ss_final;
 783         dst->PhyInfo.SignalQuality = sq_final;
 784         dst->Rssi = rssi_final;
 785
 786         #if defined(DBG_RX_SIGNAL_DISPLAY_SSID_MONITORED) && 1
 787         if(strcmp(dst->Ssid.Ssid, DBG_RX_SIGNAL_DISPLAY_SSID_MONITORED) == 0) {
 788                 DBG_871X(FUNC_ADPT_FMT" %s("MAC_FMT"), SignalStrength:%u, SignalQuality:%u, RawRSSI:%ld\n"
 789                         , FUNC_ADPT_ARG(padapter)
 790                         , dst->Ssid.Ssid, MAC_ARG(dst->MacAddress), dst->PhyInfo.SignalStrength, dst->PhyInfo.SignalQuality, dst->Rssi);
 791         }
 792         #endif
 793
 794 #if 0 // old codes, may be useful one day...
 795 //      DBG_871X("update_network: rssi=0x%lx dst->Rssi=%d ,dst->Rssi=0x%lx , src->Rssi=0x%lx",(dst->Rssi+src->Rssi)/2,dst->Rssi,dst->Rssi,src->Rssi);
 796         if (check_fwstate(&padapter->mlmepriv, _FW_LINKED) && is_same_network(&(padapter->mlmepriv.cur_network.network), src))
 797         {
 798
 799                 //DBG_871X("b:ssid=%s update_network: src->rssi=0x%d padapter->recvpriv.ui_rssi=%d\n",src->Ssid.Ssid,src->Rssi,padapter->recvpriv.signal);
 800                 if(padapter->recvpriv.signal_qual_data.total_num++ >= PHY_LINKQUALITY_SLID_WIN_MAX)
 801                 {
 802                       padapter->recvpriv.signal_qual_data.total_num = PHY_LINKQUALITY_SLID_WIN_MAX;
 803                       last_evm = padapter->recvpriv.signal_qual_data.elements[padapter->recvpriv.signal_qual_data.index];
 804                       padapter->recvpriv.signal_qual_data.total_val -= last_evm;
 805                 }
 806                 padapter->recvpriv.signal_qual_data.total_val += query_rx_pwr_percentage(src->Rssi);
 807
 808                 padapter->recvpriv.signal_qual_data.elements[padapter->recvpriv.signal_qual_data.index++] = query_rx_pwr_percentage(src->Rssi);
 809                 if(padapter->recvpriv.signal_qual_data.index >= PHY_LINKQUALITY_SLID_WIN_MAX)
 810                        padapter->recvpriv.signal_qual_data.index = 0;
 811
 812                 //DBG_871X("Total SQ=%d  pattrib->signal_qual= %d\n", padapter->recvpriv.signal_qual_data.total_val, src->Rssi);
 813
 814                 // <1> Showed on UI for user,in percentage.
 815                 tmpVal = padapter->recvpriv.signal_qual_data.total_val/padapter->recvpriv.signal_qual_data.total_num;
 816                 padapter->recvpriv.signal=(u8)tmpVal;//Link quality
 817
 818                 src->Rssi= translate_percentage_to_dbm(padapter->recvpriv.signal) ;
 819         }
 820         else{
 821 //      DBG_871X("ELSE:ssid=%s update_network: src->rssi=0x%d dst->rssi=%d\n",src->Ssid.Ssid,src->Rssi,dst->Rssi);
 822                 src->Rssi=(src->Rssi +dst->Rssi)/2;//dBM
 823         }
 824
 825 //      DBG_871X("a:update_network: src->rssi=0x%d padapter->recvpriv.ui_rssi=%d\n",src->Rssi,padapter->recvpriv.signal);
 826
 827 #endif
 828
 829 _func_exit_;
 830 }
 831
 832 static void update_current_network(_adapter *adapter, WLAN_BSSID_EX *pnetwork)
 833 {
 834         struct  mlme_priv       *pmlmepriv = &(adapter->mlmepriv);
 835
 836 _func_enter_;
 837
 838         rtw_bug_check(&(pmlmepriv->cur_network.network),
 839                 &(pmlmepriv->cur_network.network),
 840                 &(pmlmepriv->cur_network.network),
 841                 &(pmlmepriv->cur_network.network));
 842
 843         if ( (check_fwstate(pmlmepriv, _FW_LINKED)== _TRUE) && (is_same_network(&(pmlmepriv->cur_network.network), pnetwork, 0)))
 844         {
 845                 //RT_TRACE(_module_rtl871x_mlme_c_,_drv_err_,"Same Network\n");
 846
 847                 //if(pmlmepriv->cur_network.network.IELength<= pnetwork->IELength)
 848                 {
 849                         update_network(&(pmlmepriv->cur_network.network), pnetwork,adapter, _TRUE);
 850                         rtw_update_protection(adapter, (pmlmepriv->cur_network.network.IEs) + sizeof (NDIS_802_11_FIXED_IEs),
 851                                                                         pmlmepriv->cur_network.network.IELength);
 852                 }
 853         }
 854
 855 _func_exit_;
 856
 857 }
 858
 859
 860 /*
 861
 862 Caller must hold pmlmepriv->lock first.
 863
 864
 865 */
 866 void rtw_update_scanned_network(_adapter *adapter, WLAN_BSSID_EX *target)
 867 {
 868         _irqL irqL;
 869         _list   *plist, *phead;
 870         ULONG   bssid_ex_sz;
 871         struct mlme_priv        *pmlmepriv = &(adapter->mlmepriv);
 872         struct mlme_ext_priv    *pmlmeext = &(adapter->mlmeextpriv);
 873         struct wifidirect_info *pwdinfo= &(adapter->wdinfo);
 874         _queue  *queue  = &(pmlmepriv->scanned_queue);
 875         struct wlan_network     *pnetwork = NULL;
 876         struct wlan_network     *oldest = NULL;
 877         int target_find = 0;
 878         u8 feature = 0;
 879
 880 _func_enter_;
 881
 882         _enter_critical_bh(&queue->lock, &irqL);
 883         phead = get_list_head(queue);
 884         plist = get_next(phead);
 885
 886 #ifdef CONFIG_P2P
 887         if (!rtw_p2p_chk_state(pwdinfo, P2P_STATE_NONE))
 888                 feature = 1; // p2p enable
 889 #endif
 890
 891         while(1)
 892         {
 893                 if (rtw_end_of_queue_search(phead,plist)== _TRUE)
 894                         break;
 895
 896                 pnetwork = LIST_CONTAINOR(plist, struct wlan_network, list);
 897
 898                 rtw_bug_check(pnetwork, pnetwork, pnetwork, pnetwork);
 899
 900 #ifdef CONFIG_P2P
 901                 if (!rtw_p2p_chk_state(&(adapter->wdinfo), P2P_STATE_NONE) &&
 902                         (_rtw_memcmp(pnetwork->network.MacAddress, target->MacAddress, ETH_ALEN) == _TRUE))
 903                 {
 904                         target_find = 1;
 905                         break;
 906                 }
 907 #endif
 908
 909                 if (is_same_network(&(pnetwork->network), target, feature))
 910                 {
 911                         target_find = 1;
 912                         break;
 913                 }
 914
 915                 if (rtw_roam_flags(adapter)) {
 916                         /* TODO: don't  select netowrk in the same ess as oldest if it's new enough*/
 917                 }
 918
 919                 if (oldest == NULL || time_after(oldest->last_scanned, pnetwork->last_scanned))
 920                         oldest = pnetwork;
 921
 922                 plist = get_next(plist);
 923
 924         }
 925
 926
 927         /* If we didn't find a match, then get a new network slot to initialize
 928          * with this beacon's information */
 929         //if (rtw_end_of_queue_search(phead,plist)== _TRUE) {
 930         if (!target_find) {
 931                 if (_rtw_queue_empty(&(pmlmepriv->free_bss_pool)) == _TRUE) {
 932                         /* If there are no more slots, expire the oldest */
 933                         //list_del_init(&oldest->list);
 934                         pnetwork = oldest;
 935                         if(pnetwork==NULL){
 936                                 RT_TRACE(_module_rtl871x_mlme_c_,_drv_err_,("\n\n\nsomething wrong here\n\n\n"));
 937                                 goto exit;
 938                         }
 939 #ifdef CONFIG_ANTENNA_DIVERSITY
 940                         //target->PhyInfo.Optimum_antenna = pHalData->CurAntenna;//optimum_antenna=>For antenna diversity
 941                         rtw_hal_get_def_var(adapter, HAL_DEF_CURRENT_ANTENNA, &(target->PhyInfo.Optimum_antenna));
 942 #endif
 943                         _rtw_memcpy(&(pnetwork->network), target,  get_WLAN_BSSID_EX_sz(target));
 944                         //pnetwork->last_scanned = rtw_get_current_time();
 945                         // variable initialize
 946                         pnetwork->fixed = _FALSE;
 947                         pnetwork->last_scanned = rtw_get_current_time();
 948
 949                         pnetwork->network_type = 0;
 950                         pnetwork->aid=0;
 951                         pnetwork->join_res=0;
 952
 953                         /* bss info not receving from the right channel */
 954                         if (pnetwork->network.PhyInfo.SignalQuality == 101)
 955                                 pnetwork->network.PhyInfo.SignalQuality = 0;
 956                 }
 957                 else {
 958                         /* Otherwise just pull from the free list */
 959
 960                         pnetwork = rtw_alloc_network(pmlmepriv); // will update scan_time
 961
 962                         if(pnetwork==NULL){
 963                                 RT_TRACE(_module_rtl871x_mlme_c_,_drv_err_,("\n\n\nsomething wrong here\n\n\n"));
 964                                 goto exit;
 965                         }
 966
 967                         bssid_ex_sz = get_WLAN_BSSID_EX_sz(target);
 968                         target->Length = bssid_ex_sz;
 969 #ifdef CONFIG_ANTENNA_DIVERSITY
 970                         //target->PhyInfo.Optimum_antenna = pHalData->CurAntenna;
 971                         rtw_hal_get_def_var(adapter, HAL_DEF_CURRENT_ANTENNA, &(target->PhyInfo.Optimum_antenna));
 972 #endif
 973                         _rtw_memcpy(&(pnetwork->network), target, bssid_ex_sz );
 974
 975                         pnetwork->last_scanned = rtw_get_current_time();
 976
 977                         /* bss info not receving from the right channel */
 978                         if (pnetwork->network.PhyInfo.SignalQuality == 101)
 979                                 pnetwork->network.PhyInfo.SignalQuality = 0;
 980
 981                         rtw_list_insert_tail(&(pnetwork->list),&(queue->queue));
 982
 983                 }
 984         }
 985         else {
 986                 /* we have an entry and we are going to update it. But this entry may
 987                  * be already expired. In this case we do the same as we found a new
 988                  * net and call the new_net handler
 989                  */
 990                 bool update_ie = _TRUE;
 991
 992                 pnetwork->last_scanned = rtw_get_current_time();
 993
 994                 //target.Reserved[0]==1, means that scaned network is a bcn frame.
 995                 if((pnetwork->network.IELength>target->IELength) && (target->Reserved[0]==1))
 996                         update_ie = _FALSE;
 997
 998                 // probe resp(3) > beacon(1) > probe req(2)
 999                 if ((target->Reserved[0] != 2) &&
1000                         (target->Reserved[0] >= pnetwork->network.Reserved[0])
1001                         ) {
1002                         update_ie = _TRUE;
1003                 }
1004                 else {
1005                         update_ie = _FALSE;
1006                 }
1007
1008                 update_network(&(pnetwork->network), target,adapter, update_ie);
1009         }
1010
1011 exit:
1012         _exit_critical_bh(&queue->lock, &irqL);
1013
1014 _func_exit_;
1015 }
1016
1017 void rtw_add_network(_adapter *adapter, WLAN_BSSID_EX *pnetwork);
1018 void rtw_add_network(_adapter *adapter, WLAN_BSSID_EX *pnetwork)
1019 {
1020         _irqL irqL;
1021         struct  mlme_priv       *pmlmepriv = &(((_adapter *)adapter)->mlmepriv);
1022         //_queue        *queue  = &(pmlmepriv->scanned_queue);
1023
1024 _func_enter_;
1025
1026         //_enter_critical_bh(&queue->lock, &irqL);
1027
1028         #if defined(CONFIG_P2P) && defined(CONFIG_P2P_REMOVE_GROUP_INFO)
1029         rtw_WLAN_BSSID_EX_remove_p2p_attr(pnetwork, P2P_ATTR_GROUP_INFO);
1030         #endif
1031
1032         update_current_network(adapter, pnetwork);
1033
1034         rtw_update_scanned_network(adapter, pnetwork);
1035
1036         //_exit_critical_bh(&queue->lock, &irqL);
1037
1038 _func_exit_;
1039 }
1040
1041 //select the desired network based on the capability of the (i)bss.
1042 // check items: (1) security
1043 //                         (2) network_type
1044 //                         (3) WMM
1045 //                         (4) HT
1046 //                     (5) others
1047 int rtw_is_desired_network(_adapter *adapter, struct wlan_network *pnetwork);
1048 int rtw_is_desired_network(_adapter *adapter, struct wlan_network *pnetwork)
1049 {
1050         struct security_priv *psecuritypriv = &adapter->securitypriv;
1051         struct mlme_priv *pmlmepriv = &adapter->mlmepriv;
1052         u32 desired_encmode;
1053         u32 privacy;
1054
1055         //u8 wps_ie[512];
1056         uint wps_ielen;
1057
1058         int bselected = _TRUE;
1059
1060         desired_encmode = psecuritypriv->ndisencryptstatus;
1061         privacy = pnetwork->network.Privacy;
1062
1063         if(check_fwstate(pmlmepriv, WIFI_UNDER_WPS))
1064         {
1065                 if(rtw_get_wps_ie(pnetwork->network.IEs+_FIXED_IE_LENGTH_, pnetwork->network.IELength-_FIXED_IE_LENGTH_, NULL, &wps_ielen)!=NULL)
1066                 {
1067                         return _TRUE;
1068                 }
1069                 else
1070                 {
1071                         return _FALSE;
1072                 }
1073         }
1074         if (adapter->registrypriv.wifi_spec == 1) //for  correct flow of 8021X  to do....
1075         {
1076                 u8 *p=NULL;
1077                 uint ie_len=0;
1078
1079                 if ((desired_encmode == Ndis802_11EncryptionDisabled) && (privacy != 0))
1080                     bselected = _FALSE;
1081
1082                 if ( psecuritypriv->ndisauthtype == Ndis802_11AuthModeWPA2PSK) {
1083                         p = rtw_get_ie(pnetwork->network.IEs + _BEACON_IE_OFFSET_, _RSN_IE_2_, &ie_len, (pnetwork->network.IELength - _BEACON_IE_OFFSET_));
1084                         if (p && ie_len>0) {
1085                                 bselected = _TRUE;
1086                         } else {
1087                                 bselected = _FALSE;
1088                         }
1089                 }
1090         }
1091
1092
1093         if ((desired_encmode != Ndis802_11EncryptionDisabled) && (privacy == 0)) {
1094                 DBG_871X("desired_encmode: %d, privacy: %d\n", desired_encmode, privacy);
1095                 bselected = _FALSE;
1096         }
1097
1098         if(check_fwstate(pmlmepriv, WIFI_ADHOC_STATE) == _TRUE)
1099         {
1100                 if(pnetwork->network.InfrastructureMode != pmlmepriv->cur_network.network.InfrastructureMode)
1101                         bselected = _FALSE;
1102         }
1103
1104
1105         return bselected;
1106 }
1107
1108 /* TODO: Perry : For Power Management */
1109 void rtw_atimdone_event_callback(_adapter       *adapter , u8 *pbuf)
1110 {
1111
1112 _func_enter_;
1113         RT_TRACE(_module_rtl871x_mlme_c_,_drv_err_,("receive atimdone_evet\n"));
1114 _func_exit_;
1115         return;
1116 }
1117
1118
1119 void rtw_survey_event_callback(_adapter *adapter, u8 *pbuf)
1120 {
1121         _irqL  irqL;
1122         u32 len;
1123         WLAN_BSSID_EX *pnetwork;
1124         struct  mlme_priv       *pmlmepriv = &(adapter->mlmepriv);
1125
1126 _func_enter_;
1127
1128         pnetwork = (WLAN_BSSID_EX *)pbuf;
1129
1130         RT_TRACE(_module_rtl871x_mlme_c_,_drv_info_,("rtw_survey_event_callback, ssid=%s\n",  pnetwork->Ssid.Ssid));
1131
1132 #ifdef CONFIG_RTL8712
1133         //endian_convert
1134         pnetwork->Length = le32_to_cpu(pnetwork->Length);
1135         pnetwork->Ssid.SsidLength = le32_to_cpu(pnetwork->Ssid.SsidLength);
1136         pnetwork->Privacy =le32_to_cpu( pnetwork->Privacy);
1137         pnetwork->Rssi = le32_to_cpu(pnetwork->Rssi);
1138         pnetwork->NetworkTypeInUse =le32_to_cpu(pnetwork->NetworkTypeInUse);
1139         pnetwork->Configuration.ATIMWindow = le32_to_cpu(pnetwork->Configuration.ATIMWindow);
1140         pnetwork->Configuration.BeaconPeriod = le32_to_cpu(pnetwork->Configuration.BeaconPeriod);
1141         pnetwork->Configuration.DSConfig =le32_to_cpu(pnetwork->Configuration.DSConfig);
1142         pnetwork->Configuration.FHConfig.DwellTime=le32_to_cpu(pnetwork->Configuration.FHConfig.DwellTime);
1143         pnetwork->Configuration.FHConfig.HopPattern=le32_to_cpu(pnetwork->Configuration.FHConfig.HopPattern);
1144         pnetwork->Configuration.FHConfig.HopSet=le32_to_cpu(pnetwork->Configuration.FHConfig.HopSet);
1145         pnetwork->Configuration.FHConfig.Length=le32_to_cpu(pnetwork->Configuration.FHConfig.Length);
1146         pnetwork->Configuration.Length = le32_to_cpu(pnetwork->Configuration.Length);
1147         pnetwork->InfrastructureMode = le32_to_cpu(pnetwork->InfrastructureMode);
1148         pnetwork->IELength = le32_to_cpu(pnetwork->IELength);
1149 #endif
1150
1151         len = get_WLAN_BSSID_EX_sz(pnetwork);
1152         if(len > (sizeof(WLAN_BSSID_EX)))
1153         {
1154                 RT_TRACE(_module_rtl871x_mlme_c_,_drv_err_,("\n ****rtw_survey_event_callback: return a wrong bss ***\n"));
1155                 return;
1156         }
1157
1158
1159         _enter_critical_bh(&pmlmepriv->lock, &irqL);
1160
1161         // update IBSS_network 's timestamp
1162         if ((check_fwstate(pmlmepriv, WIFI_ADHOC_MASTER_STATE)) == _TRUE)
1163         {
1164                 //RT_TRACE(_module_rtl871x_mlme_c_,_drv_err_,"rtw_survey_event_callback : WIFI_ADHOC_MASTER_STATE \n\n");
1165                 if(_rtw_memcmp(&(pmlmepriv->cur_network.network.MacAddress), pnetwork->MacAddress, ETH_ALEN))
1166                 {
1167                         struct wlan_network* ibss_wlan = NULL;
1168                         _irqL   irqL;
1169
1170                         _rtw_memcpy(pmlmepriv->cur_network.network.IEs, pnetwork->IEs, 8);
1171                         _enter_critical_bh(&(pmlmepriv->scanned_queue.lock), &irqL);
1172                         ibss_wlan = rtw_find_network(&pmlmepriv->scanned_queue,  pnetwork->MacAddress);
1173                         if(ibss_wlan)
1174                         {
1175                                 _rtw_memcpy(ibss_wlan->network.IEs , pnetwork->IEs, 8);
1176                                 _exit_critical_bh(&(pmlmepriv->scanned_queue.lock), &irqL);
1177                                 goto exit;
1178                         }
1179                         _exit_critical_bh(&(pmlmepriv->scanned_queue.lock), &irqL);
1180                 }
1181         }
1182
1183         // lock pmlmepriv->lock when you accessing network_q
1184         if ((check_fwstate(pmlmepriv, _FW_UNDER_LINKING)) == _FALSE)
1185         {
1186                 if( pnetwork->Ssid.Ssid[0] == 0 )
1187                 {
1188                         pnetwork->Ssid.SsidLength = 0;
1189                 }
1190                 rtw_add_network(adapter, pnetwork);
1191         }
1192
1193 exit:
1194
1195         _exit_critical_bh(&pmlmepriv->lock, &irqL);
1196
1197 _func_exit_;
1198
1199         return;
1200 }
1201
1202
1203
1204 void rtw_surveydone_event_callback(_adapter     *adapter, u8 *pbuf)
1205 {
1206         _irqL  irqL;
1207         u8 timer_cancelled = _FALSE;
1208         struct  mlme_priv       *pmlmepriv = &(adapter->mlmepriv);
1209
1210 #ifdef CONFIG_MLME_EXT
1211
1212         mlmeext_surveydone_event_callback(adapter);
1213
1214 #endif
1215
1216 _func_enter_;
1217
1218         _enter_critical_bh(&pmlmepriv->lock, &irqL);
1219         if(pmlmepriv->wps_probe_req_ie)
1220         {
1221                 u32 free_len = pmlmepriv->wps_probe_req_ie_len;
1222                 pmlmepriv->wps_probe_req_ie_len = 0;
1223                 rtw_mfree(pmlmepriv->wps_probe_req_ie, free_len);
1224                 pmlmepriv->wps_probe_req_ie = NULL;
1225         }
1226
1227         RT_TRACE(_module_rtl871x_mlme_c_,_drv_info_,("rtw_surveydone_event_callback: fw_state:%x\n\n", get_fwstate(pmlmepriv)));
1228
1229         if (check_fwstate(pmlmepriv,_FW_UNDER_SURVEY))
1230         {
1231                 //u8 timer_cancelled;
1232
1233                 timer_cancelled = _TRUE;
1234                 //_cancel_timer(&pmlmepriv->scan_to_timer, &timer_cancelled);
1235
1236                 _clr_fwstate_(pmlmepriv, _FW_UNDER_SURVEY);
1237         }
1238         else {
1239
1240                 RT_TRACE(_module_rtl871x_mlme_c_,_drv_err_,("nic status =%x, survey done event comes too late!\n", get_fwstate(pmlmepriv)));
1241         }
1242         _exit_critical_bh(&pmlmepriv->lock, &irqL);
1243
1244         if(timer_cancelled)
1245                 _cancel_timer(&pmlmepriv->scan_to_timer, &timer_cancelled);
1246
1247
1248         _enter_critical_bh(&pmlmepriv->lock, &irqL);
1249
1250         #ifdef CONFIG_NEW_SIGNAL_STAT_PROCESS
1251         rtw_set_signal_stat_timer(&adapter->recvpriv);
1252         #endif
1253
1254         if(pmlmepriv->to_join == _TRUE)
1255         {
1256                 if((check_fwstate(pmlmepriv, WIFI_ADHOC_STATE)==_TRUE) )
1257                 {
1258                         if(check_fwstate(pmlmepriv, _FW_LINKED)==_FALSE)
1259                         {
1260                                 set_fwstate(pmlmepriv, _FW_UNDER_LINKING);
1261
1262                                 if(rtw_select_and_join_from_scanned_queue(pmlmepriv)==_SUCCESS)
1263                                 {
1264                                         _set_timer(&pmlmepriv->assoc_timer, MAX_JOIN_TIMEOUT );
1265                                 }
1266                                 else
1267                                 {
1268                                         WLAN_BSSID_EX    *pdev_network = &(adapter->registrypriv.dev_network);
1269                                         u8 *pibss = adapter->registrypriv.dev_network.MacAddress;
1270
1271                                         //pmlmepriv->fw_state ^= _FW_UNDER_SURVEY;//because don't set assoc_timer
1272                                         _clr_fwstate_(pmlmepriv, _FW_UNDER_SURVEY);
1273
1274                                         RT_TRACE(_module_rtl871x_mlme_c_,_drv_err_,("switching to adhoc master\n"));
1275
1276                                         _rtw_memset(&pdev_network->Ssid, 0, sizeof(NDIS_802_11_SSID));
1277                                         _rtw_memcpy(&pdev_network->Ssid, &pmlmepriv->assoc_ssid, sizeof(NDIS_802_11_SSID));
1278
1279                                         rtw_update_registrypriv_dev_network(adapter);
1280                                         rtw_generate_random_ibss(pibss);
1281
1282                                         pmlmepriv->fw_state = WIFI_ADHOC_MASTER_STATE;
1283
1284                                         if(rtw_createbss_cmd(adapter)!=_SUCCESS)
1285                                         {
1286                                         RT_TRACE(_module_rtl871x_mlme_c_,_drv_err_,("Error=>rtw_createbss_cmd status FAIL\n"));
1287                                         }
1288
1289                                         pmlmepriv->to_join = _FALSE;
1290                                 }
1291                         }
1292                 }
1293                 else
1294                 {
1295                         int s_ret;
1296                         set_fwstate(pmlmepriv, _FW_UNDER_LINKING);
1297                         pmlmepriv->to_join = _FALSE;
1298                         if(_SUCCESS == (s_ret=rtw_select_and_join_from_scanned_queue(pmlmepriv)))
1299                         {
1300                              _set_timer(&pmlmepriv->assoc_timer, MAX_JOIN_TIMEOUT);
1301                         }
1302                         else if(s_ret == 2)//there is no need to wait for join
1303                         {
1304                                 _clr_fwstate_(pmlmepriv, _FW_UNDER_LINKING);
1305                                 rtw_indicate_connect(adapter);
1306                         }
1307                         else
1308                         {
1309                                 DBG_871X("try_to_join, but select scanning queue fail, to_roam:%d\n", rtw_to_roam(adapter));
1310
1311                                 if (rtw_to_roam(adapter) != 0) {
1312                                         if(rtw_dec_to_roam(adapter) == 0
1313                                                 || _SUCCESS != rtw_sitesurvey_cmd(adapter, &pmlmepriv->assoc_ssid, 1, NULL, 0)
1314                                         ) {
1315                                                 rtw_set_to_roam(adapter, 0);
1316 #ifdef CONFIG_INTEL_WIDI
1317                                                 if(adapter->mlmepriv.widi_state == INTEL_WIDI_STATE_ROAMING)
1318                                                 {
1319                                                         _rtw_memset(pmlmepriv->sa_ext, 0x00, L2SDTA_SERVICE_VE_LEN);
1320                                                         intel_widi_wk_cmd(adapter, INTEL_WIDI_LISTEN_WK, NULL, 0);
1321                                                         DBG_871X("change to widi listen\n");
1322                                                 }
1323 #endif // CONFIG_INTEL_WIDI
1324                                                 rtw_free_assoc_resources(adapter, 1);
1325                                                 rtw_indicate_disconnect(adapter);
1326                                         } else {
1327                                                 pmlmepriv->to_join = _TRUE;
1328                                         }
1329                                 }
1330                                 else
1331                                 {
1332                                         rtw_indicate_disconnect(adapter);
1333                                 }
1334                                 _clr_fwstate_(pmlmepriv, _FW_UNDER_LINKING);
1335                         }
1336                 }
1337         } else {
1338                 if (rtw_chk_roam_flags(adapter, RTW_ROAM_ACTIVE)) {
1339                         if (check_fwstate(pmlmepriv, WIFI_STATION_STATE)
1340                                 && check_fwstate(pmlmepriv, _FW_LINKED))
1341                         {
1342                                 if (rtw_select_roaming_candidate(pmlmepriv) == _SUCCESS) {
1343                                         receive_disconnect(adapter, pmlmepriv->cur_network.network.MacAddress
1344                                                 , WLAN_REASON_ACTIVE_ROAM);
1345                                 }
1346                         }
1347                 }
1348         }
1349
1350         //DBG_871X("scan complete in %dms\n",rtw_get_passing_time_ms(pmlmepriv->scan_start_time));
1351
1352         _exit_critical_bh(&pmlmepriv->lock, &irqL);
1353
1354 #ifdef CONFIG_P2P_PS
1355         if (check_fwstate(pmlmepriv, _FW_LINKED) == _TRUE) {
1356                 p2p_ps_wk_cmd(adapter, P2P_PS_SCAN_DONE, 0);
1357         }
1358 #endif // CONFIG_P2P_PS
1359
1360         rtw_os_xmit_schedule(adapter);
1361 #ifdef CONFIG_CONCURRENT_MODE
1362         rtw_os_xmit_schedule(adapter->pbuddy_adapter);
1363 #endif
1364 #ifdef CONFIG_DUALMAC_CONCURRENT
1365         dc_resume_xmit(adapter);
1366 #endif
1367
1368 #ifdef CONFIG_DRVEXT_MODULE_WSC
1369         drvext_surveydone_callback(&adapter->drvextpriv);
1370 #endif
1371
1372 #ifdef DBG_CONFIG_ERROR_DETECT
1373         {
1374                 struct mlme_ext_priv *pmlmeext = &adapter->mlmeextpriv;
1375                 if(pmlmeext->sitesurvey_res.bss_cnt == 0){
1376                         //rtw_hal_sreset_reset(adapter);
1377                 }
1378         }
1379 #endif
1380
1381 #ifdef CONFIG_IOCTL_CFG80211
1382         rtw_cfg80211_surveydone_event_callback(adapter);
1383 #endif //CONFIG_IOCTL_CFG80211
1384
1385         rtw_indicate_scan_done(adapter, _FALSE);
1386
1387 #if defined(CONFIG_CONCURRENT_MODE) && defined(CONFIG_IOCTL_CFG80211)
1388         if (adapter->pbuddy_adapter) {
1389                 _adapter *buddy_adapter = adapter->pbuddy_adapter;
1390                 struct mlme_priv *buddy_mlme = &(buddy_adapter->mlmepriv);
1391                 struct rtw_wdev_priv *buddy_wdev_priv = adapter_wdev_data(buddy_adapter);
1392                 bool indicate_buddy_scan = _FALSE;
1393
1394                 _enter_critical_bh(&buddy_wdev_priv->scan_req_lock, &irqL);
1395                 if (buddy_wdev_priv->scan_request && buddy_mlme->scanning_via_buddy_intf == _TRUE) {
1396                         buddy_mlme->scanning_via_buddy_intf = _FALSE;
1397                         clr_fwstate(buddy_mlme, _FW_UNDER_SURVEY);
1398                         indicate_buddy_scan = _TRUE;
1399                 }
1400                 _exit_critical_bh(&buddy_wdev_priv->scan_req_lock, &irqL);
1401
1402                 if (indicate_buddy_scan == _TRUE) {
1403                         #ifdef CONFIG_IOCTL_CFG80211
1404                         rtw_cfg80211_surveydone_event_callback(buddy_adapter);
1405                         #endif
1406                         rtw_indicate_scan_done(buddy_adapter, _FALSE);
1407                 }
1408         }
1409 #endif /* CONFIG_CONCURRENT_MODE */
1410
1411 _func_exit_;
1412
1413 }
1414
1415 void rtw_dummy_event_callback(_adapter *adapter , u8 *pbuf)
1416 {
1417
1418 }
1419
1420 void rtw_fwdbg_event_callback(_adapter *adapter , u8 *pbuf)
1421 {
1422
1423 }
1424
1425 static void free_scanqueue(struct       mlme_priv *pmlmepriv)
1426 {
1427         _irqL irqL, irqL0;
1428         _queue *free_queue = &pmlmepriv->free_bss_pool;
1429         _queue *scan_queue = &pmlmepriv->scanned_queue;
1430         _list   *plist, *phead, *ptemp;
1431
1432 _func_enter_;
1433
1434         RT_TRACE(_module_rtl871x_mlme_c_, _drv_notice_, ("+free_scanqueue\n"));
1435         _enter_critical_bh(&scan_queue->lock, &irqL0);
1436         _enter_critical_bh(&free_queue->lock, &irqL);
1437
1438         phead = get_list_head(scan_queue);
1439         plist = get_next(phead);
1440
1441         while (plist != phead)
1442        {
1443                 ptemp = get_next(plist);
1444                 rtw_list_delete(plist);
1445                 rtw_list_insert_tail(plist, &free_queue->queue);
1446                 plist =ptemp;
1447                 pmlmepriv->num_of_scanned --;
1448         }
1449
1450         _exit_critical_bh(&free_queue->lock, &irqL);
1451         _exit_critical_bh(&scan_queue->lock, &irqL0);
1452
1453 _func_exit_;
1454 }
1455
1456 /*
1457 *rtw_free_assoc_resources: the caller has to lock pmlmepriv->lock
1458 */
1459 void rtw_free_assoc_resources(_adapter *adapter, int lock_scanned_queue)
1460 {
1461         _irqL irqL;
1462         struct wlan_network* pwlan = NULL;
1463         struct  mlme_priv *pmlmepriv = &adapter->mlmepriv;
1464         struct  sta_priv *pstapriv = &adapter->stapriv;
1465         struct wlan_network *tgt_network = &pmlmepriv->cur_network;
1466
1467 #ifdef CONFIG_TDLS
1468         struct tdls_info *ptdlsinfo = &adapter->tdlsinfo;
1469 #endif //CONFIG_TDLS
1470 _func_enter_;
1471
1472         RT_TRACE(_module_rtl871x_mlme_c_, _drv_notice_, ("+rtw_free_assoc_resources\n"));
1473         RT_TRACE(_module_rtl871x_mlme_c_, _drv_info_, ("tgt_network->network.MacAddress="MAC_FMT" ssid=%s\n",
1474                 MAC_ARG(tgt_network->network.MacAddress), tgt_network->network.Ssid.Ssid));
1475
1476         if(check_fwstate( pmlmepriv, WIFI_STATION_STATE|WIFI_AP_STATE))
1477         {
1478                 struct sta_info* psta;
1479
1480                 psta = rtw_get_stainfo(&adapter->stapriv, tgt_network->network.MacAddress);
1481
1482 #ifdef CONFIG_TDLS
1483                 if(ptdlsinfo->link_established == _TRUE)
1484                 {
1485                         rtw_tdls_cmd(adapter, myid(&(adapter->eeprompriv)), TDLS_RS_RCR);
1486                         rtw_reset_tdls_info(adapter);
1487                         rtw_free_all_stainfo(adapter);
1488                         _enter_critical_bh(&(pstapriv->sta_hash_lock), &irqL);
1489                 }
1490                 else
1491 #endif //CONFIG_TDLS
1492                 {
1493                         _enter_critical_bh(&(pstapriv->sta_hash_lock), &irqL);
1494                         rtw_free_stainfo(adapter,  psta);
1495                 }
1496
1497                 _exit_critical_bh(&(pstapriv->sta_hash_lock), &irqL);
1498
1499         }
1500
1501         if(check_fwstate( pmlmepriv, WIFI_ADHOC_STATE|WIFI_ADHOC_MASTER_STATE|WIFI_AP_STATE))
1502         {
1503                 struct sta_info* psta;
1504
1505                 rtw_free_all_stainfo(adapter);
1506
1507                 psta = rtw_get_bcmc_stainfo(adapter);
1508                 _enter_critical_bh(&(pstapriv->sta_hash_lock), &irqL);
1509                 rtw_free_stainfo(adapter, psta);
1510                 _exit_critical_bh(&(pstapriv->sta_hash_lock), &irqL);
1511
1512                 rtw_init_bcmc_stainfo(adapter);
1513         }
1514
1515         if(lock_scanned_queue)
1516                 _enter_critical_bh(&(pmlmepriv->scanned_queue.lock), &irqL);
1517
1518         pwlan = rtw_find_network(&pmlmepriv->scanned_queue, tgt_network->network.MacAddress);
1519         if(pwlan)
1520         {
1521                 pwlan->fixed = _FALSE;
1522 #ifdef CONFIG_P2P
1523                 if(!rtw_p2p_chk_state(&adapter->wdinfo, P2P_STATE_NONE))
1524                 {
1525                         u32 p2p_ielen=0;
1526                         u8  *p2p_ie;
1527                         //u16 capability;
1528                         u8 *pcap = NULL;
1529                         u32 capability_len=0;
1530
1531                         //DBG_871X("free disconnecting network\n");
1532                         //rtw_free_network_nolock(pmlmepriv, pwlan);
1533
1534                         if((p2p_ie=rtw_get_p2p_ie(pwlan->network.IEs+_FIXED_IE_LENGTH_, pwlan->network.IELength-_FIXED_IE_LENGTH_, NULL, &p2p_ielen)))
1535                         {
1536                                 pcap = rtw_get_p2p_attr_content(p2p_ie, p2p_ielen, P2P_ATTR_CAPABILITY, NULL, &capability_len);
1537                                 if(pcap && capability_len==2)
1538                                 {
1539                                         u16 cap = *(u16*)pcap ;
1540                                         *(u16*)pcap = cap&0x00ff;//clear group capability when free this network
1541                                 }
1542
1543         }
1544
1545                         rtw_set_scan_deny(adapter, 2000);
1546                         //rtw_clear_scan_deny(adapter);
1547
1548                 }
1549 #endif //CONFIG_P2P
1550         }
1551         else
1552         {
1553                 RT_TRACE(_module_rtl871x_mlme_c_,_drv_err_,("rtw_free_assoc_resources : pwlan== NULL \n\n"));
1554         }
1555
1556
1557         if((check_fwstate(pmlmepriv, WIFI_ADHOC_MASTER_STATE) && (adapter->stapriv.asoc_sta_count== 1))
1558                 /*||check_fwstate(pmlmepriv, WIFI_STATION_STATE)*/)
1559         {
1560                 rtw_free_network_nolock(adapter, pwlan);
1561         }
1562
1563         if(lock_scanned_queue)
1564                 _exit_critical_bh(&(pmlmepriv->scanned_queue.lock), &irqL);
1565
1566         adapter->securitypriv.key_mask = 0;
1567
1568 _func_exit_;
1569
1570 }
1571
1572 /*
1573 *rtw_indicate_connect: the caller has to lock pmlmepriv->lock
1574 */
1575 void rtw_indicate_connect(_adapter *padapter)
1576 {
1577         struct mlme_priv        *pmlmepriv = &padapter->mlmepriv;
1578         struct xmit_priv        *pxmitpriv = &padapter->xmitpriv;
1579
1580 _func_enter_;
1581
1582         RT_TRACE(_module_rtl871x_mlme_c_, _drv_err_, ("+rtw_indicate_connect\n"));
1583
1584         pmlmepriv->to_join = _FALSE;
1585
1586         if(!check_fwstate(&padapter->mlmepriv, _FW_LINKED))
1587         {
1588
1589 #ifdef CONFIG_SW_ANTENNA_DIVERSITY
1590                 rtw_hal_set_hwreg(padapter, HW_VAR_ANTENNA_DIVERSITY_LINK, 0);
1591 #endif
1592
1593                 set_fwstate(pmlmepriv, _FW_LINKED);
1594
1595                 rtw_led_control(padapter, LED_CTL_LINK);
1596
1597
1598 #ifdef CONFIG_DRVEXT_MODULE
1599                 if(padapter->drvextpriv.enable_wpa)
1600                 {
1601                         indicate_l2_connect(padapter);
1602                 }
1603                 else
1604 #endif
1605                 {
1606                         rtw_os_indicate_connect(padapter);
1607                 }
1608
1609         }
1610
1611         rtw_set_to_roam(padapter, 0);
1612 #ifdef CONFIG_INTEL_WIDI
1613         if(padapter->mlmepriv.widi_state == INTEL_WIDI_STATE_ROAMING)
1614         {
1615                 _rtw_memset(pmlmepriv->sa_ext, 0x00, L2SDTA_SERVICE_VE_LEN);
1616                 intel_widi_wk_cmd(padapter, INTEL_WIDI_LISTEN_WK, NULL, 0);
1617                 DBG_871X("change to widi listen\n");
1618         }
1619 #endif // CONFIG_INTEL_WIDI
1620
1621         rtw_set_scan_deny(padapter, 3000);
1622
1623         RT_TRACE(_module_rtl871x_mlme_c_, _drv_err_, ("-rtw_indicate_connect: fw_state=0x%08x\n", get_fwstate(pmlmepriv)));
1624
1625 _func_exit_;
1626
1627 }
1628
1629
1630 /*
1631 *rtw_indicate_disconnect: the caller has to lock pmlmepriv->lock
1632 */
1633 void rtw_indicate_disconnect( _adapter *padapter )
1634 {
1635         struct  mlme_priv *pmlmepriv = &padapter->mlmepriv;
1636         struct mlme_ext_priv *pmlmeext = &(padapter->mlmeextpriv);
1637         struct mlme_ext_info *pmlmeinfo = &(pmlmeext->mlmext_info);
1638         WLAN_BSSID_EX   *cur_network = &(pmlmeinfo->network);
1639         struct sta_info *psta;
1640         struct sta_priv *pstapriv = &padapter->stapriv;
1641
1642 _func_enter_;
1643
1644         RT_TRACE(_module_rtl871x_mlme_c_, _drv_err_, ("+rtw_indicate_disconnect\n"));
1645
1646         _clr_fwstate_(pmlmepriv, _FW_UNDER_LINKING|WIFI_UNDER_WPS);
1647
1648         //DBG_871X("clear wps when %s\n", __func__);
1649
1650         if(rtw_to_roam(padapter) > 0)
1651                 _clr_fwstate_(pmlmepriv, _FW_LINKED);
1652
1653 #ifdef CONFIG_WAPI_SUPPORT
1654         psta = rtw_get_stainfo(pstapriv,cur_network->MacAddress);
1655         if (check_fwstate(pmlmepriv, WIFI_STATION_STATE))
1656         {
1657                 rtw_wapi_return_one_sta_info(padapter, psta->hwaddr);
1658         }
1659         else if (check_fwstate(pmlmepriv, WIFI_ADHOC_STATE) ||
1660                 check_fwstate(pmlmepriv, WIFI_ADHOC_MASTER_STATE))
1661         {
1662                 rtw_wapi_return_all_sta_info(padapter);
1663         }
1664 #endif
1665
1666         if(check_fwstate(&padapter->mlmepriv, _FW_LINKED)
1667                 || (rtw_to_roam(padapter) <= 0)
1668         )
1669         {
1670                 rtw_os_indicate_disconnect(padapter);
1671
1672                 //set ips_deny_time to avoid enter IPS before LPS leave
1673                 rtw_set_ips_deny(padapter, 3000);
1674
1675               _clr_fwstate_(pmlmepriv, _FW_LINKED);
1676
1677                 rtw_led_control(padapter, LED_CTL_NO_LINK);
1678
1679                 rtw_clear_scan_deny(padapter);
1680         }
1681
1682 #ifdef CONFIG_P2P_PS
1683         p2p_ps_wk_cmd(padapter, P2P_PS_DISABLE, 1);
1684 #endif // CONFIG_P2P_PS
1685
1686 #ifdef CONFIG_LPS
1687         rtw_lps_ctrl_wk_cmd(padapter, LPS_CTRL_DISCONNECT, 1);
1688 #endif
1689
1690 #ifdef CONFIG_BEAMFORMING
1691         beamforming_wk_cmd(padapter, BEAMFORMING_CTRL_LEAVE, cur_network->MacAddress, ETH_ALEN, 1);
1692 #endif
1693
1694 _func_exit_;
1695 }
1696
1697 inline void rtw_indicate_scan_done( _adapter *padapter, bool aborted)
1698 {
1699         DBG_871X(FUNC_ADPT_FMT"\n", FUNC_ADPT_ARG(padapter));
1700
1701         rtw_os_indicate_scan_done(padapter, aborted);
1702
1703 #ifdef CONFIG_IPS
1704         if (is_primary_adapter(padapter)
1705                 && (_FALSE == adapter_to_pwrctl(padapter)->bInSuspend)
1706                 && (check_fwstate(&padapter->mlmepriv, WIFI_ASOC_STATE|WIFI_UNDER_LINKING) == _FALSE))
1707         {
1708                 struct pwrctrl_priv *pwrpriv;
1709
1710                 pwrpriv = adapter_to_pwrctl(padapter);
1711                 rtw_set_ips_deny(padapter, 0);
1712 #ifdef CONFIG_IPS_CHECK_IN_WD
1713                 _set_timer(&padapter->mlmepriv.dynamic_chk_timer, 1);
1714 #else // !CONFIG_IPS_CHECK_IN_WD
1715                 _rtw_set_pwr_state_check_timer(pwrpriv, 1);
1716 #endif // !CONFIG_IPS_CHECK_IN_WD
1717         }
1718 #endif // CONFIG_IPS
1719 }
1720
1721 void rtw_scan_abort(_adapter *adapter)
1722 {
1723         u32 cnt=0;
1724         u32 start;
1725         struct mlme_priv        *pmlmepriv = &(adapter->mlmepriv);
1726         struct mlme_ext_priv    *pmlmeext = &(adapter->mlmeextpriv);
1727
1728         start = rtw_get_current_time();
1729         pmlmeext->scan_abort = _TRUE;
1730         while (check_fwstate(pmlmepriv, _FW_UNDER_SURVEY)
1731                 && rtw_get_passing_time_ms(start) <= 200) {
1732
1733                 if (adapter->bDriverStopped || adapter->bSurpriseRemoved)
1734                         break;
1735
1736                 DBG_871X(FUNC_NDEV_FMT"fw_state=_FW_UNDER_SURVEY!\n", FUNC_NDEV_ARG(adapter->pnetdev));
1737                 rtw_msleep_os(20);
1738         }
1739
1740         if (check_fwstate(pmlmepriv, _FW_UNDER_SURVEY)) {
1741                 if (!adapter->bDriverStopped && !adapter->bSurpriseRemoved)
1742                         DBG_871X(FUNC_NDEV_FMT"waiting for scan_abort time out!\n", FUNC_NDEV_ARG(adapter->pnetdev));
1743                 #ifdef CONFIG_PLATFORM_MSTAR
1744                 //_clr_fwstate_(pmlmepriv, _FW_UNDER_SURVEY);
1745                 set_survey_timer(pmlmeext, 0);
1746                 _set_timer(&pmlmepriv->scan_to_timer, 50);
1747                 #endif
1748                 rtw_indicate_scan_done(adapter, _TRUE);
1749         }
1750         pmlmeext->scan_abort = _FALSE;
1751 }
1752
1753 static struct sta_info *rtw_joinbss_update_stainfo(_adapter *padapter, struct wlan_network *pnetwork)
1754 {
1755         int i;
1756         struct sta_info *bmc_sta, *psta=NULL;
1757         struct recv_reorder_ctrl *preorder_ctrl;
1758         struct sta_priv *pstapriv = &padapter->stapriv;
1759         struct mlme_ext_priv    *pmlmeext = &padapter->mlmeextpriv;
1760
1761         psta = rtw_get_stainfo(pstapriv, pnetwork->network.MacAddress);
1762         if(psta==NULL) {
1763                 psta = rtw_alloc_stainfo(pstapriv, pnetwork->network.MacAddress);
1764         }
1765
1766         if(psta) //update ptarget_sta
1767         {
1768                 DBG_871X("%s\n", __FUNCTION__);
1769
1770                 psta->aid  = pnetwork->join_res;
1771
1772 #if 0 //alloc macid when call rtw_alloc_stainfo(), and release macid when call rtw_free_stainfo()
1773 #ifdef CONFIG_CONCURRENT_MODE
1774
1775                 if(PRIMARY_ADAPTER == padapter->adapter_type)
1776                         psta->mac_id=0;
1777                 else
1778                         psta->mac_id=2;
1779 #else
1780                 psta->mac_id=0;
1781 #endif
1782 #endif //removed
1783
1784                 update_sta_info(padapter, psta);
1785
1786                 //update station supportRate
1787                 psta->bssratelen = rtw_get_rateset_len(pnetwork->network.SupportedRates);
1788                 _rtw_memcpy(psta->bssrateset, pnetwork->network.SupportedRates, psta->bssratelen);
1789                 rtw_hal_update_sta_rate_mask(padapter, psta);
1790
1791                 psta->wireless_mode = pmlmeext->cur_wireless_mode;
1792                 psta->raid = rtw_hal_networktype_to_raid(padapter,psta);
1793
1794
1795                 //sta mode
1796                 rtw_hal_set_odm_var(padapter,HAL_ODM_STA_INFO,psta,_TRUE);
1797
1798                 //security related
1799                 if(padapter->securitypriv.dot11AuthAlgrthm== dot11AuthAlgrthm_8021X)
1800                 {
1801                         padapter->securitypriv.binstallGrpkey=_FALSE;
1802                         padapter->securitypriv.busetkipkey=_FALSE;
1803                         padapter->securitypriv.bgrpkey_handshake=_FALSE;
1804
1805                         psta->ieee8021x_blocked=_TRUE;
1806                         psta->dot118021XPrivacy=padapter->securitypriv.dot11PrivacyAlgrthm;
1807
1808                         _rtw_memset((u8 *)&psta->dot118021x_UncstKey, 0, sizeof (union Keytype));
1809
1810                         _rtw_memset((u8 *)&psta->dot11tkiprxmickey, 0, sizeof (union Keytype));
1811                         _rtw_memset((u8 *)&psta->dot11tkiptxmickey, 0, sizeof (union Keytype));
1812
1813                         _rtw_memset((u8 *)&psta->dot11txpn, 0, sizeof (union pn48));
1814                         psta->dot11txpn.val = psta->dot11txpn.val + 1;
1815 #ifdef CONFIG_IEEE80211W
1816                         _rtw_memset((u8 *)&psta->dot11wtxpn, 0, sizeof (union pn48));
1817 #endif //CONFIG_IEEE80211W
1818                         _rtw_memset((u8 *)&psta->dot11rxpn, 0, sizeof (union pn48));
1819                 }
1820
1821                 //      Commented by Albert 2012/07/21
1822                 //      When doing the WPS, the wps_ie_len won't equal to 0
1823                 //      And the Wi-Fi driver shouldn't allow the data packet to be tramsmitted.
1824                 if ( padapter->securitypriv.wps_ie_len != 0 )
1825                 {
1826                         psta->ieee8021x_blocked=_TRUE;
1827                         padapter->securitypriv.wps_ie_len = 0;
1828                 }
1829
1830
1831                 //for A-MPDU Rx reordering buffer control for bmc_sta & sta_info
1832                 //if A-MPDU Rx is enabled, reseting  rx_ordering_ctrl wstart_b(indicate_seq) to default value=0xffff
1833                 //todo: check if AP can send A-MPDU packets
1834                 for(i=0; i < 16 ; i++)
1835                 {
1836                         //preorder_ctrl = &precvpriv->recvreorder_ctrl[i];
1837                         preorder_ctrl = &psta->recvreorder_ctrl[i];
1838                         preorder_ctrl->enable = _FALSE;
1839                         preorder_ctrl->indicate_seq = 0xffff;
1840                         #ifdef DBG_RX_SEQ
1841                         DBG_871X("DBG_RX_SEQ %s:%d indicate_seq:%u \n", __FUNCTION__, __LINE__,
1842                                 preorder_ctrl->indicate_seq);
1843                         #endif
1844                         preorder_ctrl->wend_b= 0xffff;
1845                         preorder_ctrl->wsize_b = 64;//max_ampdu_sz;//ex. 32(kbytes) -> wsize_b=32
1846                 }
1847
1848
1849                 bmc_sta = rtw_get_bcmc_stainfo(padapter);
1850                 if(bmc_sta)
1851                 {
1852                         for(i=0; i < 16 ; i++)
1853                         {
1854                                 //preorder_ctrl = &precvpriv->recvreorder_ctrl[i];
1855                                 preorder_ctrl = &bmc_sta->recvreorder_ctrl[i];
1856                                 preorder_ctrl->enable = _FALSE;
1857                                 preorder_ctrl->indicate_seq = 0xffff;
1858                                 #ifdef DBG_RX_SEQ
1859                                 DBG_871X("DBG_RX_SEQ %s:%d indicate_seq:%u \n", __FUNCTION__, __LINE__,
1860                                         preorder_ctrl->indicate_seq);
1861                                 #endif
1862                                 preorder_ctrl->wend_b= 0xffff;
1863                                 preorder_ctrl->wsize_b = 64;//max_ampdu_sz;//ex. 32(kbytes) -> wsize_b=32
1864                         }
1865                 }
1866         }
1867
1868         return psta;
1869
1870 }
1871
1872 //pnetwork : returns from rtw_joinbss_event_callback
1873 //ptarget_wlan: found from scanned_queue
1874 static void rtw_joinbss_update_network(_adapter *padapter, struct wlan_network *ptarget_wlan, struct wlan_network  *pnetwork)
1875 {
1876         struct mlme_priv        *pmlmepriv = &(padapter->mlmepriv);
1877         struct wlan_network  *cur_network = &(pmlmepriv->cur_network);
1878
1879         DBG_871X("%s\n", __FUNCTION__);
1880
1881         RT_TRACE(_module_rtl871x_mlme_c_,_drv_info_,("\nfw_state:%x, BSSID:"MAC_FMT"\n"
1882                 ,get_fwstate(pmlmepriv), MAC_ARG(pnetwork->network.MacAddress)));
1883
1884
1885         // why not use ptarget_wlan??
1886         _rtw_memcpy(&cur_network->network, &pnetwork->network, pnetwork->network.Length);
1887         // some IEs in pnetwork is wrong, so we should use ptarget_wlan IEs
1888         cur_network->network.IELength = ptarget_wlan->network.IELength;
1889         _rtw_memcpy(&cur_network->network.IEs[0], &ptarget_wlan->network.IEs[0], MAX_IE_SZ);
1890
1891         cur_network->aid = pnetwork->join_res;
1892
1893
1894 #ifdef CONFIG_NEW_SIGNAL_STAT_PROCESS
1895         rtw_set_signal_stat_timer(&padapter->recvpriv);
1896 #endif
1897         padapter->recvpriv.signal_strength = ptarget_wlan->network.PhyInfo.SignalStrength;
1898         padapter->recvpriv.signal_qual = ptarget_wlan->network.PhyInfo.SignalQuality;
1899         //the ptarget_wlan->network.Rssi is raw data, we use ptarget_wlan->network.PhyInfo.SignalStrength instead (has scaled)
1900         padapter->recvpriv.rssi = translate_percentage_to_dbm(ptarget_wlan->network.PhyInfo.SignalStrength);
1901         #if defined(DBG_RX_SIGNAL_DISPLAY_PROCESSING) && 1
1902                 DBG_871X(FUNC_ADPT_FMT" signal_strength:%3u, rssi:%3d, signal_qual:%3u"
1903                         "\n"
1904                         , FUNC_ADPT_ARG(padapter)
1905                         , padapter->recvpriv.signal_strength
1906                         , padapter->recvpriv.rssi
1907                         , padapter->recvpriv.signal_qual
1908         );
1909         #endif
1910 #ifdef CONFIG_NEW_SIGNAL_STAT_PROCESS
1911         rtw_set_signal_stat_timer(&padapter->recvpriv);
1912 #endif
1913
1914         //update fw_state //will clr _FW_UNDER_LINKING here indirectly
1915         switch(pnetwork->network.InfrastructureMode)
1916         {
1917                 case Ndis802_11Infrastructure:
1918
1919                                 if(pmlmepriv->fw_state&WIFI_UNDER_WPS)
1920                                         pmlmepriv->fw_state = WIFI_STATION_STATE|WIFI_UNDER_WPS;
1921                                 else
1922                                         pmlmepriv->fw_state = WIFI_STATION_STATE;
1923
1924                                 break;
1925                 case Ndis802_11IBSS:
1926                                 pmlmepriv->fw_state = WIFI_ADHOC_STATE;
1927                                 break;
1928                 default:
1929                                 pmlmepriv->fw_state = WIFI_NULL_STATE;
1930                                 RT_TRACE(_module_rtl871x_mlme_c_,_drv_err_,("Invalid network_mode\n"));
1931                                 break;
1932         }
1933
1934         rtw_update_protection(padapter, (cur_network->network.IEs) + sizeof (NDIS_802_11_FIXED_IEs),
1935                                                                         (cur_network->network.IELength));
1936
1937 #ifdef CONFIG_80211N_HT
1938         rtw_update_ht_cap(padapter, cur_network->network.IEs, cur_network->network.IELength, (u8) cur_network->network.Configuration.DSConfig);
1939 #endif
1940 }
1941
1942 //Notes: the fucntion could be > passive_level (the same context as Rx tasklet)
1943 //pnetwork : returns from rtw_joinbss_event_callback
1944 //ptarget_wlan: found from scanned_queue
1945 //if join_res > 0, for (fw_state==WIFI_STATION_STATE), we check if  "ptarget_sta" & "ptarget_wlan" exist.
1946 //if join_res > 0, for (fw_state==WIFI_ADHOC_STATE), we only check if "ptarget_wlan" exist.
1947 //if join_res > 0, update "cur_network->network" from "pnetwork->network" if (ptarget_wlan !=NULL).
1948 //
1949 //#define REJOIN
1950 void rtw_joinbss_event_prehandle(_adapter *adapter, u8 *pbuf)
1951 {
1952         _irqL irqL,irqL2;
1953         static u8 retry=0;
1954         u8 timer_cancelled;
1955         struct sta_info *ptarget_sta= NULL, *pcur_sta = NULL;
1956         struct  sta_priv *pstapriv = &adapter->stapriv;
1957         struct  mlme_priv       *pmlmepriv = &(adapter->mlmepriv);
1958         struct wlan_network     *pnetwork       = (struct wlan_network *)pbuf;
1959         struct wlan_network     *cur_network = &(pmlmepriv->cur_network);
1960         struct wlan_network     *pcur_wlan = NULL, *ptarget_wlan = NULL;
1961         unsigned int            the_same_macaddr = _FALSE;
1962
1963 _func_enter_;
1964
1965 #ifdef CONFIG_RTL8712
1966        //endian_convert
1967         pnetwork->join_res = le32_to_cpu(pnetwork->join_res);
1968         pnetwork->network_type = le32_to_cpu(pnetwork->network_type);
1969         pnetwork->network.Length = le32_to_cpu(pnetwork->network.Length);
1970         pnetwork->network.Ssid.SsidLength = le32_to_cpu(pnetwork->network.Ssid.SsidLength);
1971         pnetwork->network.Privacy =le32_to_cpu( pnetwork->network.Privacy);
1972         pnetwork->network.Rssi = le32_to_cpu(pnetwork->network.Rssi);
1973         pnetwork->network.NetworkTypeInUse =le32_to_cpu(pnetwork->network.NetworkTypeInUse) ;
1974         pnetwork->network.Configuration.ATIMWindow = le32_to_cpu(pnetwork->network.Configuration.ATIMWindow);
1975         pnetwork->network.Configuration.BeaconPeriod = le32_to_cpu(pnetwork->network.Configuration.BeaconPeriod);
1976         pnetwork->network.Configuration.DSConfig = le32_to_cpu(pnetwork->network.Configuration.DSConfig);
1977         pnetwork->network.Configuration.FHConfig.DwellTime=le32_to_cpu(pnetwork->network.Configuration.FHConfig.DwellTime);
1978         pnetwork->network.Configuration.FHConfig.HopPattern=le32_to_cpu(pnetwork->network.Configuration.FHConfig.HopPattern);
1979         pnetwork->network.Configuration.FHConfig.HopSet=le32_to_cpu(pnetwork->network.Configuration.FHConfig.HopSet);
1980         pnetwork->network.Configuration.FHConfig.Length=le32_to_cpu(pnetwork->network.Configuration.FHConfig.Length);
1981         pnetwork->network.Configuration.Length = le32_to_cpu(pnetwork->network.Configuration.Length);
1982         pnetwork->network.InfrastructureMode = le32_to_cpu(pnetwork->network.InfrastructureMode);
1983         pnetwork->network.IELength = le32_to_cpu(pnetwork->network.IELength );
1984 #endif
1985
1986         RT_TRACE(_module_rtl871x_mlme_c_,_drv_info_,("joinbss event call back received with res=%d\n", pnetwork->join_res));
1987
1988         rtw_get_encrypt_decrypt_from_registrypriv(adapter);
1989
1990
1991         if (pmlmepriv->assoc_ssid.SsidLength == 0)
1992         {
1993                 RT_TRACE(_module_rtl871x_mlme_c_,_drv_err_,("@@@@@   joinbss event call back  for Any SSid\n"));
1994         }
1995         else
1996         {
1997                 RT_TRACE(_module_rtl871x_mlme_c_,_drv_err_,("@@@@@   rtw_joinbss_event_callback for SSid:%s\n", pmlmepriv->assoc_ssid.Ssid));
1998         }
1999
2000         the_same_macaddr = _rtw_memcmp(pnetwork->network.MacAddress, cur_network->network.MacAddress, ETH_ALEN);
2001
2002         pnetwork->network.Length = get_WLAN_BSSID_EX_sz(&pnetwork->network);
2003         if(pnetwork->network.Length > sizeof(WLAN_BSSID_EX))
2004         {
2005                 RT_TRACE(_module_rtl871x_mlme_c_,_drv_err_,("\n\n ***joinbss_evt_callback return a wrong bss ***\n\n"));
2006                 goto ignore_joinbss_callback;
2007         }
2008
2009         _enter_critical_bh(&pmlmepriv->lock, &irqL);
2010
2011         pmlmepriv->LinkDetectInfo.TrafficTransitionCount = 0;
2012         pmlmepriv->LinkDetectInfo.LowPowerTransitionCount = 0;
2013
2014         RT_TRACE(_module_rtl871x_mlme_c_,_drv_info_,("\n rtw_joinbss_event_callback !! _enter_critical \n"));
2015
2016         if(pnetwork->join_res > 0)
2017         {
2018                 _enter_critical_bh(&(pmlmepriv->scanned_queue.lock), &irqL);
2019                 retry = 0;
2020                 if (check_fwstate(pmlmepriv,_FW_UNDER_LINKING) )
2021                 {
2022                         //s1. find ptarget_wlan
2023                         if(check_fwstate(pmlmepriv, _FW_LINKED) )
2024                         {
2025                                 if(the_same_macaddr == _TRUE)
2026                                 {
2027                                         ptarget_wlan = rtw_find_network(&pmlmepriv->scanned_queue, cur_network->network.MacAddress);
2028                                 }
2029                                 else
2030                                 {
2031                                         pcur_wlan = rtw_find_network(&pmlmepriv->scanned_queue, cur_network->network.MacAddress);
2032                                         if(pcur_wlan)   pcur_wlan->fixed = _FALSE;
2033
2034                                         pcur_sta = rtw_get_stainfo(pstapriv, cur_network->network.MacAddress);
2035                                         if(pcur_sta){
2036                                                 _enter_critical_bh(&(pstapriv->sta_hash_lock), &irqL2);
2037                                                 rtw_free_stainfo(adapter,  pcur_sta);
2038                                                 _exit_critical_bh(&(pstapriv->sta_hash_lock), &irqL2);
2039                                         }
2040
2041                                         ptarget_wlan = rtw_find_network(&pmlmepriv->scanned_queue, pnetwork->network.MacAddress);
2042                                         if(check_fwstate(pmlmepriv, WIFI_STATION_STATE) == _TRUE){
2043                                                 if(ptarget_wlan)        ptarget_wlan->fixed = _TRUE;
2044                                         }
2045                                 }
2046
2047                         }
2048                         else
2049                         {
2050                                 ptarget_wlan = _rtw_find_same_network(&pmlmepriv->scanned_queue, pnetwork);
2051                                 if(check_fwstate(pmlmepriv, WIFI_STATION_STATE) == _TRUE){
2052                                         if(ptarget_wlan)        ptarget_wlan->fixed = _TRUE;
2053                                 }
2054                         }
2055
2056                         //s2. update cur_network
2057                         if(ptarget_wlan)
2058                         {
2059                                 rtw_joinbss_update_network(adapter, ptarget_wlan, pnetwork);
2060                         }
2061                         else
2062                         {
2063                                 DBG_871X_LEVEL(_drv_always_, "Can't find ptarget_wlan when joinbss_event callback\n");
2064                                 _exit_critical_bh(&(pmlmepriv->scanned_queue.lock), &irqL);
2065                                 goto ignore_joinbss_callback;
2066                         }
2067
2068
2069                         //s3. find ptarget_sta & update ptarget_sta after update cur_network only for station mode
2070                         if(check_fwstate(pmlmepriv, WIFI_STATION_STATE) == _TRUE)
2071                         {
2072                                 ptarget_sta = rtw_joinbss_update_stainfo(adapter, pnetwork);
2073                                 if(ptarget_sta==NULL)
2074                                 {
2075                                         RT_TRACE(_module_rtl871x_mlme_c_,_drv_err_,("Can't update stainfo when joinbss_event callback\n"));
2076                                         _exit_critical_bh(&(pmlmepriv->scanned_queue.lock), &irqL);
2077                                         goto ignore_joinbss_callback;
2078                                 }
2079                         }
2080
2081                         //s4. indicate connect
2082                         if(check_fwstate(pmlmepriv, WIFI_STATION_STATE) == _TRUE)
2083                         {
2084                                 pmlmepriv->cur_network_scanned = ptarget_wlan;
2085                                 rtw_indicate_connect(adapter);
2086                         }
2087                         else
2088                         {
2089                                 //adhoc mode will rtw_indicate_connect when rtw_stassoc_event_callback
2090                                 RT_TRACE(_module_rtl871x_mlme_c_,_drv_info_,("adhoc mode, fw_state:%x", get_fwstate(pmlmepriv)));
2091                         }
2092
2093
2094                         //s5. Cancle assoc_timer
2095                         _cancel_timer(&pmlmepriv->assoc_timer, &timer_cancelled);
2096
2097                         RT_TRACE(_module_rtl871x_mlme_c_,_drv_info_,("Cancle assoc_timer \n"));
2098
2099                 }
2100                 else
2101                 {
2102                         RT_TRACE(_module_rtl871x_mlme_c_,_drv_err_,("rtw_joinbss_event_callback err: fw_state:%x", get_fwstate(pmlmepriv)));
2103                         _exit_critical_bh(&(pmlmepriv->scanned_queue.lock), &irqL);
2104                         goto ignore_joinbss_callback;
2105                 }
2106
2107                 _exit_critical_bh(&(pmlmepriv->scanned_queue.lock), &irqL);
2108
2109         }
2110         else if(pnetwork->join_res == -4)
2111         {
2112                 rtw_reset_securitypriv(adapter);
2113                 _set_timer(&pmlmepriv->assoc_timer, 1);
2114
2115                 //rtw_free_assoc_resources(adapter, 1);
2116
2117                 if((check_fwstate(pmlmepriv, _FW_UNDER_LINKING)) == _TRUE)
2118                 {
2119                         RT_TRACE(_module_rtl871x_mlme_c_,_drv_err_,("fail! clear _FW_UNDER_LINKING ^^^fw_state=%x\n", get_fwstate(pmlmepriv)));
2120                         _clr_fwstate_(pmlmepriv, _FW_UNDER_LINKING);
2121                 }
2122
2123         }
2124         else //if join_res < 0 (join fails), then try again
2125         {
2126
2127                 #ifdef REJOIN
2128                 res = _FAIL;
2129                 if(retry < 2) {
2130                         res = rtw_select_and_join_from_scanned_queue(pmlmepriv);
2131                         RT_TRACE(_module_rtl871x_mlme_c_,_drv_err_,("rtw_select_and_join_from_scanned_queue again! res:%d\n",res));
2132                 }
2133
2134                  if(res == _SUCCESS)
2135                 {
2136                         //extend time of assoc_timer
2137                         _set_timer(&pmlmepriv->assoc_timer, MAX_JOIN_TIMEOUT);
2138                         retry++;
2139                 }
2140                 else if(res == 2)//there is no need to wait for join
2141                 {
2142                         _clr_fwstate_(pmlmepriv, _FW_UNDER_LINKING);
2143                         rtw_indicate_connect(adapter);
2144                 }
2145                 else
2146                 {
2147                         RT_TRACE(_module_rtl871x_mlme_c_,_drv_err_,("Set Assoc_Timer = 1; can't find match ssid in scanned_q \n"));
2148                 #endif
2149
2150                         _set_timer(&pmlmepriv->assoc_timer, 1);
2151                         //rtw_free_assoc_resources(adapter, 1);
2152                         _clr_fwstate_(pmlmepriv, _FW_UNDER_LINKING);
2153
2154                 #ifdef REJOIN
2155                         retry = 0;
2156                 }
2157                 #endif
2158         }
2159
2160 ignore_joinbss_callback:
2161
2162         _exit_critical_bh(&pmlmepriv->lock, &irqL);
2163         _func_exit_;
2164 }
2165
2166 void rtw_joinbss_event_callback(_adapter *adapter, u8 *pbuf)
2167 {
2168         struct wlan_network     *pnetwork       = (struct wlan_network *)pbuf;
2169
2170 _func_enter_;
2171
2172         mlmeext_joinbss_event_callback(adapter, pnetwork->join_res);
2173
2174         rtw_os_xmit_schedule(adapter);
2175
2176 #ifdef CONFIG_CONCURRENT_MODE
2177         rtw_os_xmit_schedule(adapter->pbuddy_adapter);
2178 #endif
2179
2180 #ifdef CONFIG_DUALMAC_CONCURRENT
2181         dc_resume_xmit(adapter);
2182 #endif
2183
2184 _func_exit_;
2185 }
2186
2187 #if 0
2188 //#if (RATE_ADAPTIVE_SUPPORT==1)        //for 88E RA
2189 u8 search_max_mac_id(_adapter *padapter)
2190 {
2191         u8 mac_id, aid;
2192         struct mlme_priv *pmlmepriv = &(padapter->mlmepriv);
2193         struct mlme_ext_priv *pmlmeext = &(padapter->mlmeextpriv);
2194         struct mlme_ext_info    *pmlmeinfo = &(pmlmeext->mlmext_info);
2195         struct sta_priv *pstapriv = &padapter->stapriv;
2196
2197 #if defined (CONFIG_AP_MODE) && defined (CONFIG_NATIVEAP_MLME)
2198         if(check_fwstate(pmlmepriv, WIFI_AP_STATE)){
2199
2200 #if 1
2201                 _irqL irqL;
2202                 struct dvobj_priv *pdvobj = adapter_to_dvobj(padapter);
2203
2204                 _enter_critical_bh(&pdvobj->lock, &irqL);
2205                 for(mac_id=(NUM_STA-1); mac_id>0; mac_id--)
2206                         if(pdvobj->macid[mac_id] == _TRUE)
2207                                 break;
2208                 _exit_critical_bh(&pdvobj->lock, &irqL);
2209
2210 #else
2211                 for (aid = (pstapriv->max_num_sta); aid > 0; aid--)
2212                 {
2213                         if (pstapriv->sta_aid[aid-1] != NULL)
2214                         {
2215                                 psta = pstapriv->sta_aid[aid-1];
2216                                 break;
2217                         }
2218                 }
2219 /*
2220                 for (mac_id = (pstapriv->max_num_sta-1); mac_id >= 0; mac_id--)
2221                 {
2222                         if (pstapriv->sta_aid[mac_id] != NULL)
2223                                 break;
2224                 }
2225 */
2226                 mac_id = aid + 1;
2227 #endif
2228         }
2229         else
2230 #endif
2231         {//adhoc  id =  31~2
2232                 for (mac_id = (NUM_STA-1); mac_id >= IBSS_START_MAC_ID ; mac_id--)
2233                 {
2234                         if (pmlmeinfo->FW_sta_info[mac_id].status == 1)
2235                         {
2236                                 break;
2237                         }
2238                 }
2239         }
2240
2241         DBG_871X("max mac_id=%d\n", mac_id);
2242
2243         return mac_id;
2244
2245 }
2246 #endif
2247
2248 //FOR STA, AP ,AD-HOC mode
2249 void rtw_sta_media_status_rpt(_adapter *adapter,struct sta_info *psta, u32 mstatus)
2250 {
2251         u16 media_status_rpt;
2252
2253         if(psta==NULL)  return;
2254
2255         #if (RATE_ADAPTIVE_SUPPORT==1)  //for 88E RA
2256         {
2257                 u8 macid = rtw_search_max_mac_id(adapter);
2258                 rtw_hal_set_hwreg(adapter,HW_VAR_TX_RPT_MAX_MACID, (u8*)&macid);
2259         }
2260         #endif
2261         media_status_rpt = (u16)((psta->mac_id<<8)|mstatus); //  MACID|OPMODE:1 connect
2262         rtw_hal_set_hwreg(adapter,HW_VAR_H2C_MEDIA_STATUS_RPT,(u8 *)&media_status_rpt);
2263 }
2264
2265 void rtw_stassoc_event_callback(_adapter *adapter, u8 *pbuf)
2266 {
2267         _irqL irqL;
2268         struct sta_info *psta;
2269         struct mlme_priv *pmlmepriv = &(adapter->mlmepriv);
2270         struct stassoc_event    *pstassoc       = (struct stassoc_event*)pbuf;
2271         struct wlan_network     *cur_network = &(pmlmepriv->cur_network);
2272         struct wlan_network     *ptarget_wlan = NULL;
2273
2274 _func_enter_;
2275
2276         if(rtw_access_ctrl(adapter, pstassoc->macaddr) == _FALSE)
2277                 return;
2278
2279 #if defined (CONFIG_AP_MODE) && defined (CONFIG_NATIVEAP_MLME)
2280         if(check_fwstate(pmlmepriv, WIFI_AP_STATE))
2281         {
2282                 psta = rtw_get_stainfo(&adapter->stapriv, pstassoc->macaddr);
2283                 if(psta)
2284                 {
2285                         u8 *passoc_req = NULL;
2286                         u32 assoc_req_len = 0;
2287
2288                         rtw_sta_media_status_rpt(adapter, psta, 1);
2289
2290 #ifndef CONFIG_AUTO_AP_MODE
2291
2292                         ap_sta_info_defer_update(adapter, psta);
2293
2294                         //report to upper layer
2295                         DBG_871X("indicate_sta_assoc_event to upper layer - hostapd\n");
2296 #ifdef CONFIG_IOCTL_CFG80211
2297                         _enter_critical_bh(&psta->lock, &irqL);
2298                         if(psta->passoc_req && psta->assoc_req_len>0)
2299                         {
2300                                 passoc_req = rtw_zmalloc(psta->assoc_req_len);
2301                                 if(passoc_req)
2302                                 {
2303                                         assoc_req_len = psta->assoc_req_len;
2304                                         _rtw_memcpy(passoc_req, psta->passoc_req, assoc_req_len);
2305
2306                                         rtw_mfree(psta->passoc_req , psta->assoc_req_len);
2307                                         psta->passoc_req = NULL;
2308                                         psta->assoc_req_len = 0;
2309                                 }
2310                         }
2311                         _exit_critical_bh(&psta->lock, &irqL);
2312
2313                         if(passoc_req && assoc_req_len>0)
2314                         {
2315                                 rtw_cfg80211_indicate_sta_assoc(adapter, passoc_req, assoc_req_len);
2316
2317                                 rtw_mfree(passoc_req, assoc_req_len);
2318                         }
2319 #else //!CONFIG_IOCTL_CFG80211
2320                         rtw_indicate_sta_assoc_event(adapter, psta);
2321 #endif //!CONFIG_IOCTL_CFG80211
2322 #endif //!CONFIG_AUTO_AP_MODE
2323                 }
2324                 if (adapter->stapriv.asoc_sta_count > 1) {
2325                         DBG_871X("%s asoc_sta_count: %d\n", __func__,
2326                                         adapter->stapriv.asoc_sta_count);
2327                         rtw_ap_connection_lock_suspend();
2328                 }
2329                 goto exit;
2330         }
2331 #endif //defined (CONFIG_AP_MODE) && defined (CONFIG_NATIVEAP_MLME)
2332
2333         //for AD-HOC mode
2334         psta = rtw_get_stainfo(&adapter->stapriv, pstassoc->macaddr);
2335         if( psta != NULL)
2336         {
2337                 //the sta have been in sta_info_queue => do nothing
2338
2339                 RT_TRACE(_module_rtl871x_mlme_c_,_drv_err_,("Error: rtw_stassoc_event_callback: sta has been in sta_hash_queue \n"));
2340
2341                 goto exit; //(between drv has received this event before and  fw have not yet to set key to CAM_ENTRY)
2342         }
2343
2344         psta = rtw_alloc_stainfo(&adapter->stapriv, pstassoc->macaddr);
2345         if (psta == NULL) {
2346                 RT_TRACE(_module_rtl871x_mlme_c_,_drv_err_,("Can't alloc sta_info when rtw_stassoc_event_callback\n"));
2347                 goto exit;
2348         }
2349
2350         //to do : init sta_info variable
2351         psta->qos_option = 0;
2352         psta->mac_id = (uint)pstassoc->cam_id;
2353         //psta->aid = (uint)pstassoc->cam_id;
2354         DBG_871X("%s\n",__FUNCTION__);
2355         //for ad-hoc mode
2356         rtw_hal_set_odm_var(adapter,HAL_ODM_STA_INFO,psta,_TRUE);
2357
2358         rtw_sta_media_status_rpt(adapter, psta, 1);
2359
2360         if(adapter->securitypriv.dot11AuthAlgrthm==dot11AuthAlgrthm_8021X)
2361                 psta->dot118021XPrivacy = adapter->securitypriv.dot11PrivacyAlgrthm;
2362
2363
2364         psta->ieee8021x_blocked = _FALSE;
2365
2366         _enter_critical_bh(&pmlmepriv->lock, &irqL);
2367
2368         if ( (check_fwstate(pmlmepriv, WIFI_ADHOC_MASTER_STATE)==_TRUE ) ||
2369                 (check_fwstate(pmlmepriv, WIFI_ADHOC_STATE)==_TRUE ) )
2370         {
2371                 if(adapter->stapriv.asoc_sta_count== 2)
2372                 {
2373                         _enter_critical_bh(&(pmlmepriv->scanned_queue.lock), &irqL);
2374                         ptarget_wlan = rtw_find_network(&pmlmepriv->scanned_queue, cur_network->network.MacAddress);
2375                         pmlmepriv->cur_network_scanned = ptarget_wlan;
2376                         if(ptarget_wlan)        ptarget_wlan->fixed = _TRUE;
2377                         _exit_critical_bh(&(pmlmepriv->scanned_queue.lock), &irqL);
2378                         // a sta + bc/mc_stainfo (not Ibss_stainfo)
2379                         rtw_indicate_connect(adapter);
2380                 }
2381         }
2382
2383         _exit_critical_bh(&pmlmepriv->lock, &irqL);
2384
2385
2386         mlmeext_sta_add_event_callback(adapter, psta);
2387
2388 #ifdef CONFIG_RTL8711
2389         //submit SetStaKey_cmd to tell fw, fw will allocate an CAM entry for this sta
2390         rtw_setstakey_cmd(adapter, psta, _FALSE, _TRUE);
2391 #endif
2392
2393 exit:
2394
2395 _func_exit_;
2396
2397 }
2398
2399 void rtw_stadel_event_callback(_adapter *adapter, u8 *pbuf)
2400 {
2401         _irqL irqL,irqL2;
2402         int mac_id = (-1);
2403         struct sta_info *psta;
2404         struct wlan_network* pwlan = NULL;
2405         WLAN_BSSID_EX    *pdev_network=NULL;
2406         u8* pibss = NULL;
2407         struct  mlme_priv       *pmlmepriv = &(adapter->mlmepriv);
2408         struct  stadel_event *pstadel   = (struct stadel_event*)pbuf;
2409         struct  sta_priv *pstapriv = &adapter->stapriv;
2410         struct wlan_network *tgt_network = &(pmlmepriv->cur_network);
2411         struct mlme_ext_priv    *pmlmeext = &adapter->mlmeextpriv;
2412         struct mlme_ext_info    *pmlmeinfo = &(pmlmeext->mlmext_info);
2413
2414 _func_enter_;
2415
2416         psta = rtw_get_stainfo(&adapter->stapriv, pstadel->macaddr);
2417         if(psta)
2418                 mac_id = psta->mac_id;
2419         else
2420                 mac_id = pstadel->mac_id;
2421
2422         DBG_871X("%s(mac_id=%d)=" MAC_FMT "\n", __func__, mac_id, MAC_ARG(pstadel->macaddr));
2423
2424         if(mac_id>=0){
2425                 u16 media_status;
2426                 media_status = (mac_id<<8)|0; //  MACID|OPMODE:0 means disconnect
2427                 //for STA,AP,ADHOC mode, report disconnect stauts to FW
2428                 rtw_hal_set_hwreg(adapter, HW_VAR_H2C_MEDIA_STATUS_RPT, (u8 *)&media_status);
2429         }
2430
2431         //if(check_fwstate(pmlmepriv, WIFI_AP_STATE))
2432         if((pmlmeinfo->state&0x03) == WIFI_FW_AP_STATE)
2433         {
2434 #ifdef CONFIG_IOCTL_CFG80211
2435                 #ifdef COMPAT_KERNEL_RELEASE
2436
2437                 #elif (LINUX_VERSION_CODE < KERNEL_VERSION(2,6,37)) || defined(CONFIG_CFG80211_FORCE_COMPATIBLE_2_6_37_UNDER)
2438                 rtw_cfg80211_indicate_sta_disassoc(adapter, pstadel->macaddr, *(u16*)pstadel->rsvd);
2439                 #endif //(LINUX_VERSION_CODE < KERNEL_VERSION(2,6,37)) || defined(CONFIG_CFG80211_FORCE_COMPATIBLE_2_6_37_UNDER)
2440 #endif //CONFIG_IOCTL_CFG80211
2441                 DBG_871X("%s asoc_sta_count: %d\n", __func__,
2442                                 adapter->stapriv.asoc_sta_count);
2443                 if (adapter->stapriv.asoc_sta_count == 2) {
2444                         rtw_ap_connection_unlock_suspend();
2445                 }
2446
2447                 return;
2448         }
2449
2450
2451         mlmeext_sta_del_event_callback(adapter);
2452
2453         _enter_critical_bh(&pmlmepriv->lock, &irqL2);
2454
2455         if(check_fwstate(pmlmepriv, WIFI_STATION_STATE) )
2456         {
2457                 u16 reason = *((unsigned short *)(pstadel->rsvd));
2458                 bool roam = _FALSE;
2459                 struct wlan_network *roam_target = NULL;
2460
2461                 #ifdef CONFIG_LAYER2_ROAMING
2462                 if(adapter->registrypriv.wifi_spec==1) {
2463                         roam = _FALSE;
2464                 } else if (reason == WLAN_REASON_EXPIRATION_CHK && rtw_chk_roam_flags(adapter, RTW_ROAM_ON_EXPIRED)) {
2465                         roam = _TRUE;
2466                 } else if (reason == WLAN_REASON_ACTIVE_ROAM && rtw_chk_roam_flags(adapter, RTW_ROAM_ACTIVE)) {
2467                         roam = _TRUE;
2468                         roam_target = pmlmepriv->roam_network;
2469                 }
2470 #ifdef CONFIG_INTEL_WIDI
2471                 else if (adapter->mlmepriv.widi_state == INTEL_WIDI_STATE_CONNECTED) {
2472                         roam = _TRUE;
2473                 }
2474 #endif // CONFIG_INTEL_WIDI
2475
2476                 if (roam == _TRUE) {
2477                         if (rtw_to_roam(adapter) > 0)
2478                                 rtw_dec_to_roam(adapter); /* this stadel_event is caused by roaming, decrease to_roam */
2479                         else if (rtw_to_roam(adapter) == 0)
2480                                 rtw_set_to_roam(adapter, adapter->registrypriv.max_roaming_times);
2481                 } else {
2482                         rtw_set_to_roam(adapter, 0);
2483                 }
2484                 #endif /* CONFIG_LAYER2_ROAMING */
2485
2486                 rtw_free_uc_swdec_pending_queue(adapter);
2487
2488                 rtw_free_assoc_resources(adapter, 1);
2489                 rtw_indicate_disconnect(adapter);
2490
2491                 _enter_critical_bh(&(pmlmepriv->scanned_queue.lock), &irqL);
2492                 // remove the network entry in scanned_queue
2493                 pwlan = rtw_find_network(&pmlmepriv->scanned_queue, tgt_network->network.MacAddress);
2494                 if (pwlan) {
2495                         pwlan->fixed = _FALSE;
2496                         rtw_free_network_nolock(adapter, pwlan);
2497                 }
2498                 _exit_critical_bh(&(pmlmepriv->scanned_queue.lock), &irqL);
2499
2500 #ifdef CONFIG_INTEL_WIDI
2501                 if (!rtw_to_roam(adapter))
2502                         process_intel_widi_disconnect(adapter, 1);
2503 #endif // CONFIG_INTEL_WIDI
2504
2505                 _rtw_roaming(adapter, roam_target);
2506         }
2507
2508         if ( check_fwstate(pmlmepriv,WIFI_ADHOC_MASTER_STATE) ||
2509               check_fwstate(pmlmepriv,WIFI_ADHOC_STATE))
2510         {
2511
2512                 _enter_critical_bh(&(pstapriv->sta_hash_lock), &irqL);
2513                 rtw_free_stainfo(adapter,  psta);
2514                 _exit_critical_bh(&(pstapriv->sta_hash_lock), &irqL);
2515
2516                 if(adapter->stapriv.asoc_sta_count== 1) //a sta + bc/mc_stainfo (not Ibss_stainfo)
2517                 {
2518                         //rtw_indicate_disconnect(adapter);//removed@20091105
2519                         _enter_critical_bh(&(pmlmepriv->scanned_queue.lock), &irqL);
2520                         //free old ibss network
2521                         //pwlan = rtw_find_network(&pmlmepriv->scanned_queue, pstadel->macaddr);
2522                         pwlan = rtw_find_network(&pmlmepriv->scanned_queue, tgt_network->network.MacAddress);
2523                         if(pwlan)
2524                         {
2525                                 pwlan->fixed = _FALSE;
2526                                 rtw_free_network_nolock(adapter, pwlan);
2527                         }
2528                         _exit_critical_bh(&(pmlmepriv->scanned_queue.lock), &irqL);
2529                         //re-create ibss
2530                         pdev_network = &(adapter->registrypriv.dev_network);
2531                         pibss = adapter->registrypriv.dev_network.MacAddress;
2532
2533                         _rtw_memcpy(pdev_network, &tgt_network->network, get_WLAN_BSSID_EX_sz(&tgt_network->network));
2534
2535                         _rtw_memset(&pdev_network->Ssid, 0, sizeof(NDIS_802_11_SSID));
2536                         _rtw_memcpy(&pdev_network->Ssid, &pmlmepriv->assoc_ssid, sizeof(NDIS_802_11_SSID));
2537
2538                         rtw_update_registrypriv_dev_network(adapter);
2539
2540                         rtw_generate_random_ibss(pibss);
2541
2542                         if(check_fwstate(pmlmepriv,WIFI_ADHOC_STATE))
2543                         {
2544                                 set_fwstate(pmlmepriv, WIFI_ADHOC_MASTER_STATE);
2545                                 _clr_fwstate_(pmlmepriv, WIFI_ADHOC_STATE);
2546                         }
2547
2548                         if(rtw_createbss_cmd(adapter)!=_SUCCESS)
2549                         {
2550
2551                                 RT_TRACE(_module_rtl871x_ioctl_set_c_,_drv_err_,("***Error=>stadel_event_callback: rtw_createbss_cmd status FAIL*** \n "));
2552
2553                         }
2554
2555
2556                 }
2557
2558         }
2559
2560         _exit_critical_bh(&pmlmepriv->lock, &irqL2);
2561
2562 _func_exit_;
2563
2564 }
2565
2566
2567 void rtw_cpwm_event_callback(PADAPTER padapter, u8 *pbuf)
2568 {
2569 #ifdef CONFIG_LPS_LCLK
2570         struct reportpwrstate_parm *preportpwrstate;
2571 #endif
2572
2573 _func_enter_;
2574
2575         RT_TRACE(_module_rtl871x_mlme_c_,_drv_err_,("+rtw_cpwm_event_callback !!!\n"));
2576 #ifdef CONFIG_LPS_LCLK
2577         preportpwrstate = (struct reportpwrstate_parm*)pbuf;
2578         preportpwrstate->state |= (u8)(adapter_to_pwrctl(padapter)->cpwm_tog + 0x80);
2579         cpwm_int_hdl(padapter, preportpwrstate);
2580 #endif
2581
2582 _func_exit_;
2583
2584 }
2585
2586 /*
2587 * _rtw_join_timeout_handler - Timeout/faliure handler for CMD JoinBss
2588 * @adapter: pointer to _adapter structure
2589 */
2590 void _rtw_join_timeout_handler (_adapter *adapter)
2591 {
2592         _irqL irqL;
2593         struct  mlme_priv *pmlmepriv = &adapter->mlmepriv;
2594
2595 #if 0
2596         if (adapter->bDriverStopped == _TRUE){
2597                 _rtw_up_sema(&pmlmepriv->assoc_terminate);
2598                 return;
2599         }
2600 #endif
2601
2602 _func_enter_;
2603
2604
2605         DBG_871X("%s, fw_state=%x\n", __FUNCTION__, get_fwstate(pmlmepriv));
2606
2607         if(adapter->bDriverStopped ||adapter->bSurpriseRemoved)
2608                 return;
2609
2610
2611         _enter_critical_bh(&pmlmepriv->lock, &irqL);
2612
2613         #ifdef CONFIG_LAYER2_ROAMING
2614         if (rtw_to_roam(adapter) > 0) { /* join timeout caused by roaming */
2615                 while(1) {
2616                         rtw_dec_to_roam(adapter);
2617                         if (rtw_to_roam(adapter) != 0) { /* try another */
2618                                 int do_join_r;
2619                                 DBG_871X("%s try another roaming\n", __FUNCTION__);
2620                                 if( _SUCCESS!=(do_join_r=rtw_do_join(adapter)) ) {
2621                                         DBG_871X("%s roaming do_join return %d\n", __FUNCTION__ ,do_join_r);
2622                                         continue;
2623                                 }
2624                                 break;
2625                         } else {
2626 #ifdef CONFIG_INTEL_WIDI
2627                                 if(adapter->mlmepriv.widi_state == INTEL_WIDI_STATE_ROAMING)
2628                                 {
2629                                         _rtw_memset(pmlmepriv->sa_ext, 0x00, L2SDTA_SERVICE_VE_LEN);
2630                                         intel_widi_wk_cmd(adapter, INTEL_WIDI_LISTEN_WK, NULL, 0);
2631                                         DBG_871X("change to widi listen\n");
2632                                 }
2633 #endif // CONFIG_INTEL_WIDI
2634                                 DBG_871X("%s We've try roaming but fail\n", __FUNCTION__);
2635                                 rtw_indicate_disconnect(adapter);
2636                                 break;
2637                         }
2638                 }
2639
2640         } else
2641         #endif
2642         {
2643                 rtw_indicate_disconnect(adapter);
2644                 free_scanqueue(pmlmepriv);//???
2645
2646 #ifdef CONFIG_IOCTL_CFG80211
2647                 //indicate disconnect for the case that join_timeout and check_fwstate != FW_LINKED
2648                 rtw_cfg80211_indicate_disconnect(adapter);
2649 #endif //CONFIG_IOCTL_CFG80211
2650
2651         }
2652
2653         _exit_critical_bh(&pmlmepriv->lock, &irqL);
2654
2655
2656 #ifdef CONFIG_DRVEXT_MODULE_WSC
2657         drvext_assoc_fail_indicate(&adapter->drvextpriv);
2658 #endif
2659
2660
2661 _func_exit_;
2662
2663 }
2664
2665 /*
2666 * rtw_scan_timeout_handler - Timeout/Faliure handler for CMD SiteSurvey
2667 * @adapter: pointer to _adapter structure
2668 */
2669 void rtw_scan_timeout_handler (_adapter *adapter)
2670 {
2671         _irqL irqL;
2672         struct  mlme_priv *pmlmepriv = &adapter->mlmepriv;
2673
2674         DBG_871X(FUNC_ADPT_FMT" fw_state=%x\n", FUNC_ADPT_ARG(adapter), get_fwstate(pmlmepriv));
2675
2676         _enter_critical_bh(&pmlmepriv->lock, &irqL);
2677
2678         _clr_fwstate_(pmlmepriv, _FW_UNDER_SURVEY);
2679
2680         _exit_critical_bh(&pmlmepriv->lock, &irqL);
2681
2682         rtw_indicate_scan_done(adapter, _TRUE);
2683
2684 #if defined(CONFIG_CONCURRENT_MODE) && defined(CONFIG_IOCTL_CFG80211)
2685         if (adapter->pbuddy_adapter) {
2686                 _adapter *buddy_adapter = adapter->pbuddy_adapter;
2687                 struct mlme_priv *buddy_mlme = &(buddy_adapter->mlmepriv);
2688                 struct rtw_wdev_priv *buddy_wdev_priv = adapter_wdev_data(buddy_adapter);
2689                 bool indicate_buddy_scan = _FALSE;
2690
2691                 _enter_critical_bh(&buddy_wdev_priv->scan_req_lock, &irqL);
2692                 if (buddy_wdev_priv->scan_request && buddy_mlme->scanning_via_buddy_intf == _TRUE) {
2693                         buddy_mlme->scanning_via_buddy_intf = _FALSE;
2694                         clr_fwstate(buddy_mlme, _FW_UNDER_SURVEY);
2695                         indicate_buddy_scan = _TRUE;
2696                 }
2697                 _exit_critical_bh(&buddy_wdev_priv->scan_req_lock, &irqL);
2698
2699                 if (indicate_buddy_scan == _TRUE) {
2700                         rtw_indicate_scan_done(buddy_adapter, _TRUE);
2701                 }
2702         }
2703 #endif /* CONFIG_CONCURRENT_MODE */
2704 }
2705
2706 void rtw_mlme_reset_auto_scan_int(_adapter *adapter)
2707 {
2708         struct mlme_priv *mlme = &adapter->mlmepriv;
2709
2710 #ifdef CONFIG_P2P
2711         if(!rtw_p2p_chk_state(&adapter->wdinfo, P2P_STATE_NONE)) {
2712                 mlme->auto_scan_int_ms = 0; /* disabled */
2713                 goto exit;
2714         }
2715 #endif
2716
2717         if(adapter->registrypriv.wifi_spec) {
2718                 mlme->auto_scan_int_ms = 60*1000;
2719 #ifdef CONFIG_LAYER2_ROAMING
2720         } else if(rtw_chk_roam_flags(adapter, RTW_ROAM_ACTIVE)) {
2721                 if (check_fwstate(mlme, WIFI_STATION_STATE) && check_fwstate(mlme, _FW_LINKED))
2722                         mlme->auto_scan_int_ms = mlme->roam_scan_int_ms;
2723 #endif
2724         } else {
2725                 mlme->auto_scan_int_ms = 0; /* disabled */
2726         }
2727 exit:
2728         return;
2729 }
2730
2731 static void rtw_auto_scan_handler(_adapter *padapter)
2732 {
2733         struct mlme_priv *pmlmepriv = &padapter->mlmepriv;
2734
2735         rtw_mlme_reset_auto_scan_int(padapter);
2736
2737         if (pmlmepriv->auto_scan_int_ms != 0
2738                 && rtw_get_passing_time_ms(pmlmepriv->scan_start_time) > pmlmepriv->auto_scan_int_ms) {
2739
2740                 if (!padapter->registrypriv.wifi_spec) {
2741                         if (check_fwstate(pmlmepriv, _FW_UNDER_SURVEY|_FW_UNDER_LINKING) == _TRUE)
2742                         {
2743                                 DBG_871X(FUNC_ADPT_FMT" _FW_UNDER_SURVEY|_FW_UNDER_LINKING\n", FUNC_ADPT_ARG(padapter));
2744                                 goto exit;
2745                         }
2746
2747                         if(pmlmepriv->LinkDetectInfo.bBusyTraffic == _TRUE)
2748                         {
2749                                 DBG_871X(FUNC_ADPT_FMT" exit BusyTraffic\n", FUNC_ADPT_ARG(padapter));
2750                                 goto exit;
2751                         }
2752                 }
2753
2754 #ifdef CONFIG_CONCURRENT_MODE
2755                 if (rtw_buddy_adapter_up(padapter))
2756                 {
2757                         if ((check_buddy_fwstate(padapter, _FW_UNDER_SURVEY|_FW_UNDER_LINKING) == _TRUE) ||
2758                                 (padapter->pbuddy_adapter->mlmepriv.LinkDetectInfo.bBusyTraffic == _TRUE))
2759                         {
2760                                 DBG_871X(FUNC_ADPT_FMT", but buddy_intf is under scanning or linking or BusyTraffic\n"
2761                                         , FUNC_ADPT_ARG(padapter));
2762                                 goto exit;
2763                         }
2764                 }
2765 #endif
2766
2767                 DBG_871X(FUNC_ADPT_FMT"\n", FUNC_ADPT_ARG(padapter));
2768
2769                 rtw_set_802_11_bssid_list_scan(padapter, NULL, 0);
2770         }
2771
2772 exit:
2773         return;
2774 }
2775
2776 void rtw_dynamic_check_timer_handlder(_adapter *adapter)
2777 {
2778 #ifdef CONFIG_AP_MODE
2779         struct mlme_priv *pmlmepriv = &adapter->mlmepriv;
2780 #endif //CONFIG_AP_MODE
2781         struct registry_priv *pregistrypriv = &adapter->registrypriv;
2782 #ifdef CONFIG_CONCURRENT_MODE
2783         PADAPTER pbuddy_adapter = adapter->pbuddy_adapter;
2784 #endif
2785
2786         if(!adapter)
2787                 return;
2788
2789         if(adapter->hw_init_completed == _FALSE)
2790                 return;
2791
2792         if ((adapter->bDriverStopped == _TRUE)||(adapter->bSurpriseRemoved== _TRUE))
2793                 return;
2794
2795
2796 #ifdef CONFIG_CONCURRENT_MODE
2797         if(pbuddy_adapter)
2798         {
2799                 if(adapter->net_closed == _TRUE && pbuddy_adapter->net_closed == _TRUE)
2800                 {
2801                         return;
2802                 }
2803         }
2804         else
2805 #endif //CONFIG_CONCURRENT_MODE
2806         if(adapter->net_closed == _TRUE)
2807         {
2808                 return;
2809         }
2810
2811 #ifdef CONFIG_BT_COEXIST
2812         if(is_primary_adapter(adapter))
2813                 DBG_871X("IsBtDisabled=%d, IsBtControlLps=%d\n", rtw_btcoex_IsBtDisabled(adapter), rtw_btcoex_IsBtControlLps(adapter));
2814 #endif
2815
2816 #ifdef CONFIG_LPS_LCLK_WD_TIMER
2817         if ((adapter_to_pwrctl(adapter)->bFwCurrentInPSMode ==_TRUE )
2818 #ifdef CONFIG_BT_COEXIST
2819                 && (rtw_btcoex_IsBtControlLps(adapter) == _FALSE)
2820 #endif
2821                 )
2822         {
2823                 u8 bEnterPS;
2824
2825                 linked_status_chk(adapter);
2826
2827                 bEnterPS = traffic_status_watchdog(adapter, 1);
2828                 if(bEnterPS)
2829                 {
2830                         //rtw_lps_ctrl_wk_cmd(adapter, LPS_CTRL_ENTER, 1);
2831                         rtw_hal_dm_watchdog_in_lps(adapter);
2832                 }
2833                 else
2834                 {
2835                         //call rtw_lps_ctrl_wk_cmd(padapter, LPS_CTRL_LEAVE, 1) in traffic_status_watchdog()
2836                 }
2837
2838         }
2839         else
2840 #endif //CONFIG_LPS_LCLK_WD_TIMER
2841         {
2842                 if(is_primary_adapter(adapter))
2843                 {
2844                         rtw_dynamic_chk_wk_cmd(adapter);
2845                 }
2846         }
2847
2848         /* auto site survey */
2849         rtw_auto_scan_handler(adapter);
2850
2851 #ifndef CONFIG_ACTIVE_KEEP_ALIVE_CHECK
2852 #ifdef CONFIG_AP_MODE
2853         if(check_fwstate(pmlmepriv, WIFI_AP_STATE) == _TRUE)
2854         {
2855                 expire_timeout_chk(adapter);
2856         }
2857 #endif
2858 #endif //!CONFIG_ACTIVE_KEEP_ALIVE_CHECK
2859
2860 #ifdef CONFIG_BR_EXT
2861
2862 #if (LINUX_VERSION_CODE > KERNEL_VERSION(2, 6, 35))
2863         rcu_read_lock();
2864 #endif  // (LINUX_VERSION_CODE > KERNEL_VERSION(2, 6, 35))
2865
2866 #if (LINUX_VERSION_CODE <= KERNEL_VERSION(2, 6, 35))
2867         if( adapter->pnetdev->br_port
2868 #else   // (LINUX_VERSION_CODE <= KERNEL_VERSION(2, 6, 35))
2869         if( rcu_dereference(adapter->pnetdev->rx_handler_data)
2870 #endif  // (LINUX_VERSION_CODE <= KERNEL_VERSION(2, 6, 35))
2871                 && (check_fwstate(pmlmepriv, WIFI_STATION_STATE|WIFI_ADHOC_STATE) == _TRUE) )
2872         {
2873                 // expire NAT2.5 entry
2874                 void nat25_db_expire(_adapter *priv);
2875                 nat25_db_expire(adapter);
2876
2877                 if (adapter->pppoe_connection_in_progress > 0) {
2878                         adapter->pppoe_connection_in_progress--;
2879                 }
2880
2881                 // due to rtw_dynamic_check_timer_handlder() is called every 2 seconds
2882                 if (adapter->pppoe_connection_in_progress > 0) {
2883                         adapter->pppoe_connection_in_progress--;
2884                 }
2885         }
2886
2887 #if (LINUX_VERSION_CODE > KERNEL_VERSION(2, 6, 35))
2888         rcu_read_unlock();
2889 #endif  // (LINUX_VERSION_CODE > KERNEL_VERSION(2, 6, 35))
2890
2891 #endif  // CONFIG_BR_EXT
2892
2893 }
2894
2895
2896 #ifdef CONFIG_SET_SCAN_DENY_TIMER
2897 inline bool rtw_is_scan_deny(_adapter *adapter)
2898 {
2899         struct mlme_priv *mlmepriv = &adapter->mlmepriv;
2900         return (ATOMIC_READ(&mlmepriv->set_scan_deny) != 0) ? _TRUE : _FALSE;
2901 }
2902
2903 inline void rtw_clear_scan_deny(_adapter *adapter)
2904 {
2905         struct mlme_priv *mlmepriv = &adapter->mlmepriv;
2906         ATOMIC_SET(&mlmepriv->set_scan_deny, 0);
2907         if (0)
2908         DBG_871X(FUNC_ADPT_FMT"\n", FUNC_ADPT_ARG(adapter));
2909 }
2910
2911 void rtw_set_scan_deny_timer_hdl(_adapter *adapter)
2912 {
2913         rtw_clear_scan_deny(adapter);
2914 }
2915
2916 void rtw_set_scan_deny(_adapter *adapter, u32 ms)
2917 {
2918         struct mlme_priv *mlmepriv = &adapter->mlmepriv;
2919 #ifdef CONFIG_CONCURRENT_MODE
2920         struct mlme_priv *b_mlmepriv;
2921 #endif
2922
2923         if (0)
2924         DBG_871X(FUNC_ADPT_FMT"\n", FUNC_ADPT_ARG(adapter));
2925         ATOMIC_SET(&mlmepriv->set_scan_deny, 1);
2926         _set_timer(&mlmepriv->set_scan_deny_timer, ms);
2927
2928 #ifdef CONFIG_CONCURRENT_MODE
2929         if (!adapter->pbuddy_adapter)
2930                 return;
2931
2932         if (0)
2933         DBG_871X(FUNC_ADPT_FMT"\n", FUNC_ADPT_ARG(adapter->pbuddy_adapter));
2934         b_mlmepriv = &adapter->pbuddy_adapter->mlmepriv;
2935         ATOMIC_SET(&b_mlmepriv->set_scan_deny, 1);
2936         _set_timer(&b_mlmepriv->set_scan_deny_timer, ms);
2937 #endif
2938
2939 }
2940 #endif
2941
2942 #ifdef CONFIG_LAYER2_ROAMING
2943 /*
2944 * Select a new roaming candidate from the original @param candidate and @param competitor
2945 * @return _TRUE: candidate is updated
2946 * @return _FALSE: candidate is not updated
2947 */
2948 static int rtw_check_roaming_candidate(struct mlme_priv *mlme
2949         , struct wlan_network **candidate, struct wlan_network *competitor)
2950 {
2951         int updated = _FALSE;
2952         _adapter *adapter = container_of(mlme, _adapter, mlmepriv);
2953
2954         if(is_same_ess(&competitor->network, &mlme->cur_network.network) == _FALSE)
2955                 goto exit;
2956
2957         if(rtw_is_desired_network(adapter, competitor) == _FALSE)
2958                 goto exit;
2959
2960         DBG_871X("roam candidate:%s %s("MAC_FMT", ch%3u) rssi:%d, age:%5d\n",
2961                 (competitor == mlme->cur_network_scanned)?"*":" " ,
2962                 competitor->network.Ssid.Ssid,
2963                 MAC_ARG(competitor->network.MacAddress),
2964                 competitor->network.Configuration.DSConfig,
2965                 (int)competitor->network.Rssi,
2966                 rtw_get_passing_time_ms(competitor->last_scanned)
2967         );
2968
2969         /* got specific addr to roam */
2970         if (!is_zero_mac_addr(mlme->roam_tgt_addr)) {
2971                 if(_rtw_memcmp(mlme->roam_tgt_addr, competitor->network.MacAddress, ETH_ALEN) == _TRUE)
2972                         goto update;
2973                 else
2974                         goto exit;
2975         }
2976         #if 1
2977         if(rtw_get_passing_time_ms((u32)competitor->last_scanned) >= mlme->roam_scanr_exp_ms)
2978                 goto exit;
2979
2980         if (competitor->network.Rssi - mlme->cur_network_scanned->network.Rssi < mlme->roam_rssi_diff_th)
2981                 goto exit;
2982
2983         if(*candidate != NULL && (*candidate)->network.Rssi>=competitor->network.Rssi)
2984                 goto exit;
2985         #else
2986         goto exit;
2987         #endif
2988
2989 update:
2990         *candidate = competitor;
2991         updated = _TRUE;
2992
2993 exit:
2994         return updated;
2995 }
2996
2997 int rtw_select_roaming_candidate(struct mlme_priv *mlme)
2998 {
2999         _irqL   irqL;
3000         int ret = _FAIL;
3001         _list   *phead;
3002         _adapter *adapter;
3003         _queue  *queue  = &(mlme->scanned_queue);
3004         struct  wlan_network    *pnetwork = NULL;
3005         struct  wlan_network    *candidate = NULL;
3006         u8              bSupportAntDiv = _FALSE;
3007
3008 _func_enter_;
3009
3010         if (mlme->cur_network_scanned == NULL) {
3011                 rtw_warn_on(1);
3012                 goto exit;
3013         }
3014
3015         _enter_critical_bh(&(mlme->scanned_queue.lock), &irqL);
3016         phead = get_list_head(queue);
3017         adapter = (_adapter *)mlme->nic_hdl;
3018
3019         mlme->pscanned = get_next(phead);
3020
3021         while (!rtw_end_of_queue_search(phead, mlme->pscanned)) {
3022
3023                 pnetwork = LIST_CONTAINOR(mlme->pscanned, struct wlan_network, list);
3024                 if(pnetwork==NULL){
3025                         RT_TRACE(_module_rtl871x_mlme_c_,_drv_err_,("%s return _FAIL:(pnetwork==NULL)\n", __FUNCTION__));
3026                         ret = _FAIL;
3027                         goto exit;
3028                 }
3029
3030                 mlme->pscanned = get_next(mlme->pscanned);
3031
3032                 if (0)
3033                 DBG_871X("%s("MAC_FMT", ch%u) rssi:%d\n"
3034                         , pnetwork->network.Ssid.Ssid
3035                         , MAC_ARG(pnetwork->network.MacAddress)
3036                         , pnetwork->network.Configuration.DSConfig
3037                         , (int)pnetwork->network.Rssi);
3038
3039                 rtw_check_roaming_candidate(mlme, &candidate, pnetwork);
3040
3041         }
3042
3043         if(candidate == NULL) {
3044                 DBG_871X("%s: return _FAIL(candidate == NULL)\n", __FUNCTION__);
3045                 ret = _FAIL;
3046                 goto exit;
3047         } else {
3048                 DBG_871X("%s: candidate: %s("MAC_FMT", ch:%u)\n", __FUNCTION__,
3049                         candidate->network.Ssid.Ssid, MAC_ARG(candidate->network.MacAddress),
3050                         candidate->network.Configuration.DSConfig);
3051
3052                 mlme->roam_network = candidate;
3053
3054                 if (_rtw_memcmp(candidate->network.MacAddress, mlme->roam_tgt_addr, ETH_ALEN) == _TRUE)
3055                         _rtw_memset(mlme->roam_tgt_addr,0, ETH_ALEN);
3056         }
3057
3058         ret = _SUCCESS;
3059 exit:
3060         _exit_critical_bh(&(mlme->scanned_queue.lock), &irqL);
3061
3062         return ret;
3063 }
3064 #endif /* CONFIG_LAYER2_ROAMING */
3065
3066 /*
3067 * Select a new join candidate from the original @param candidate and @param competitor
3068 * @return _TRUE: candidate is updated
3069 * @return _FALSE: candidate is not updated
3070 */
3071 static int rtw_check_join_candidate(struct mlme_priv *mlme
3072         , struct wlan_network **candidate, struct wlan_network *competitor)
3073 {
3074         int updated = _FALSE;
3075         _adapter *adapter = container_of(mlme, _adapter, mlmepriv);
3076
3077
3078         //check bssid, if needed
3079         if(mlme->assoc_by_bssid==_TRUE) {
3080                 if(_rtw_memcmp(competitor->network.MacAddress, mlme->assoc_bssid, ETH_ALEN) ==_FALSE)
3081                         goto exit;
3082         }
3083
3084         //check ssid, if needed
3085         if(mlme->assoc_ssid.Ssid[0] && mlme->assoc_ssid.SsidLength) {
3086                 if(     competitor->network.Ssid.SsidLength != mlme->assoc_ssid.SsidLength
3087                         || _rtw_memcmp(competitor->network.Ssid.Ssid, mlme->assoc_ssid.Ssid, mlme->assoc_ssid.SsidLength) == _FALSE
3088                 )
3089                         goto exit;
3090         }
3091
3092         if(rtw_is_desired_network(adapter, competitor)  == _FALSE)
3093                 goto exit;
3094
3095 #ifdef  CONFIG_LAYER2_ROAMING
3096         if(rtw_to_roam(adapter) > 0) {
3097                 if(     rtw_get_passing_time_ms((u32)competitor->last_scanned) >= mlme->roam_scanr_exp_ms
3098                         || is_same_ess(&competitor->network, &mlme->cur_network.network) == _FALSE
3099                 )
3100                         goto exit;
3101         }
3102 #endif
3103
3104         if(*candidate == NULL ||(*candidate)->network.Rssi<competitor->network.Rssi )
3105         {
3106                 *candidate = competitor;
3107                 updated = _TRUE;
3108         }
3109
3110         if(updated){
3111                 DBG_871X("[by_bssid:%u][assoc_ssid:%s]"
3112                         #ifdef  CONFIG_LAYER2_ROAMING
3113                         "[to_roam:%u] "
3114                         #endif
3115                         "new candidate: %s("MAC_FMT", ch%u) rssi:%d\n",
3116                         mlme->assoc_by_bssid,
3117                         mlme->assoc_ssid.Ssid,
3118                         #ifdef  CONFIG_LAYER2_ROAMING
3119                         rtw_to_roam(adapter),
3120                         #endif
3121                         (*candidate)->network.Ssid.Ssid,
3122                         MAC_ARG((*candidate)->network.MacAddress),
3123                         (*candidate)->network.Configuration.DSConfig,
3124                         (int)(*candidate)->network.Rssi
3125                 );
3126         }
3127
3128 exit:
3129         return updated;
3130 }
3131
3132 /*
3133 Calling context:
3134 The caller of the sub-routine will be in critical section...
3135
3136 The caller must hold the following spinlock
3137
3138 pmlmepriv->lock
3139
3140
3141 */
3142
3143 int rtw_select_and_join_from_scanned_queue(struct mlme_priv *pmlmepriv )
3144 {
3145         _irqL   irqL;
3146         int ret;
3147         _list   *phead;
3148         _adapter *adapter;
3149         _queue  *queue  = &(pmlmepriv->scanned_queue);
3150         struct  wlan_network    *pnetwork = NULL;
3151         struct  wlan_network    *candidate = NULL;
3152         u8              bSupportAntDiv = _FALSE;
3153
3154 _func_enter_;
3155
3156         adapter = (_adapter *)pmlmepriv->nic_hdl;
3157
3158         _enter_critical_bh(&(pmlmepriv->scanned_queue.lock), &irqL);
3159
3160         #ifdef CONFIG_LAYER2_ROAMING
3161         if (pmlmepriv->roam_network) {
3162                 candidate = pmlmepriv->roam_network;
3163                 pmlmepriv->roam_network = NULL;
3164                 goto candidate_exist;
3165         }
3166         #endif
3167
3168         phead = get_list_head(queue);
3169         pmlmepriv->pscanned = get_next(phead);
3170
3171         while (!rtw_end_of_queue_search(phead, pmlmepriv->pscanned)) {
3172
3173                 pnetwork = LIST_CONTAINOR(pmlmepriv->pscanned, struct wlan_network, list);
3174                 if(pnetwork==NULL){
3175                         RT_TRACE(_module_rtl871x_mlme_c_,_drv_err_,("%s return _FAIL:(pnetwork==NULL)\n", __FUNCTION__));
3176                         ret = _FAIL;
3177                         goto exit;
3178                 }
3179
3180                 pmlmepriv->pscanned = get_next(pmlmepriv->pscanned);
3181
3182                 if (0)
3183                 DBG_871X("%s("MAC_FMT", ch%u) rssi:%d\n"
3184                         , pnetwork->network.Ssid.Ssid
3185                         , MAC_ARG(pnetwork->network.MacAddress)
3186                         , pnetwork->network.Configuration.DSConfig
3187                         , (int)pnetwork->network.Rssi);
3188
3189                 rtw_check_join_candidate(pmlmepriv, &candidate, pnetwork);
3190
3191         }
3192
3193         if(candidate == NULL) {
3194                 DBG_871X("%s: return _FAIL(candidate == NULL)\n", __FUNCTION__);
3195 #ifdef CONFIG_WOWLAN
3196                 _clr_fwstate_(pmlmepriv, _FW_LINKED|_FW_UNDER_LINKING);
3197 #endif
3198                 ret = _FAIL;
3199                 goto exit;
3200         } else {
3201                 DBG_871X("%s: candidate: %s("MAC_FMT", ch:%u)\n", __FUNCTION__,
3202                         candidate->network.Ssid.Ssid, MAC_ARG(candidate->network.MacAddress),
3203                         candidate->network.Configuration.DSConfig);
3204                 goto candidate_exist;
3205         }
3206
3207 candidate_exist:
3208
3209         // check for situation of  _FW_LINKED
3210         if (check_fwstate(pmlmepriv, _FW_LINKED) == _TRUE)
3211         {
3212                 DBG_871X("%s: _FW_LINKED while ask_for_joinbss!!!\n", __FUNCTION__);
3213
3214                 #if 0 // for WPA/WPA2 authentication, wpa_supplicant will expect authentication from AP, it is needed to reconnect AP...
3215                 if(is_same_network(&pmlmepriv->cur_network.network, &candidate->network))
3216                 {
3217                         DBG_871X("%s: _FW_LINKED and is same network, it needn't join again\n", __FUNCTION__);
3218
3219                         rtw_indicate_connect(adapter);//rtw_indicate_connect again
3220
3221                         ret = 2;
3222                         goto exit;
3223                 }
3224                 else
3225                 #endif
3226                 {
3227                         rtw_disassoc_cmd(adapter, 0, _TRUE);
3228                         rtw_indicate_disconnect(adapter);
3229                         rtw_free_assoc_resources(adapter, 0);
3230                 }
3231         }
3232
3233         #ifdef CONFIG_ANTENNA_DIVERSITY
3234         rtw_hal_get_def_var(adapter, HAL_DEF_IS_SUPPORT_ANT_DIV, &(bSupportAntDiv));
3235         if(_TRUE == bSupportAntDiv)
3236         {
3237                 u8 CurrentAntenna;
3238                 rtw_hal_get_def_var(adapter, HAL_DEF_CURRENT_ANTENNA, &(CurrentAntenna));
3239                 DBG_871X("#### Opt_Ant_(%s) , cur_Ant(%s)\n",
3240                         (2==candidate->network.PhyInfo.Optimum_antenna)?"A":"B",
3241                         (2==CurrentAntenna)?"A":"B"
3242                 );
3243         }
3244         #endif
3245         set_fwstate(pmlmepriv, _FW_UNDER_LINKING);
3246         ret = rtw_joinbss_cmd(adapter, candidate);
3247
3248 exit:
3249         _exit_critical_bh(&(pmlmepriv->scanned_queue.lock), &irqL);
3250
3251 _func_exit_;
3252
3253         return ret;
3254 }
3255
3256 sint rtw_set_auth(_adapter * adapter,struct security_priv *psecuritypriv)
3257 {
3258         struct  cmd_obj* pcmd;
3259         struct  setauth_parm *psetauthparm;
3260         struct  cmd_priv        *pcmdpriv=&(adapter->cmdpriv);
3261         sint            res=_SUCCESS;
3262
3263 _func_enter_;
3264
3265         pcmd = (struct  cmd_obj*)rtw_zmalloc(sizeof(struct      cmd_obj));
3266         if(pcmd==NULL){
3267                 res= _FAIL;  //try again
3268                 goto exit;
3269         }
3270
3271         psetauthparm=(struct setauth_parm*)rtw_zmalloc(sizeof(struct setauth_parm));
3272         if(psetauthparm==NULL){
3273                 rtw_mfree((unsigned char *)pcmd, sizeof(struct  cmd_obj));
3274                 res= _FAIL;
3275                 goto exit;
3276         }
3277
3278         _rtw_memset(psetauthparm, 0, sizeof(struct setauth_parm));
3279         psetauthparm->mode=(unsigned char)psecuritypriv->dot11AuthAlgrthm;
3280
3281         pcmd->cmdcode = _SetAuth_CMD_;
3282         pcmd->parmbuf = (unsigned char *)psetauthparm;
3283         pcmd->cmdsz =  (sizeof(struct setauth_parm));
3284         pcmd->rsp = NULL;
3285         pcmd->rspsz = 0;
3286
3287
3288         _rtw_init_listhead(&pcmd->list);
3289
3290         RT_TRACE(_module_rtl871x_mlme_c_,_drv_err_,("after enqueue set_auth_cmd, auth_mode=%x\n", psecuritypriv->dot11AuthAlgrthm));
3291
3292         res = rtw_enqueue_cmd(pcmdpriv, pcmd);
3293
3294 exit:
3295
3296 _func_exit_;
3297
3298         return res;
3299
3300 }
3301
3302
3303 sint rtw_set_key(_adapter * adapter,struct security_priv *psecuritypriv,sint keyid, u8 set_tx, bool enqueue)
3304 {
3305         u8      keylen;
3306         struct cmd_obj          *pcmd;
3307         struct setkey_parm      *psetkeyparm;
3308         struct cmd_priv         *pcmdpriv = &(adapter->cmdpriv);
3309         struct mlme_priv                *pmlmepriv = &(adapter->mlmepriv);
3310         sint    res=_SUCCESS;
3311
3312 _func_enter_;
3313
3314         psetkeyparm=(struct setkey_parm*)rtw_zmalloc(sizeof(struct setkey_parm));
3315         if(psetkeyparm==NULL){
3316                 res= _FAIL;
3317                 goto exit;
3318         }
3319         _rtw_memset(psetkeyparm, 0, sizeof(struct setkey_parm));
3320
3321         if(psecuritypriv->dot11AuthAlgrthm ==dot11AuthAlgrthm_8021X){
3322                 psetkeyparm->algorithm=(unsigned char)psecuritypriv->dot118021XGrpPrivacy;
3323                 RT_TRACE(_module_rtl871x_mlme_c_,_drv_err_,("\n rtw_set_key: psetkeyparm->algorithm=(unsigned char)psecuritypriv->dot118021XGrpPrivacy=%d \n", psetkeyparm->algorithm));
3324         }
3325         else{
3326                 psetkeyparm->algorithm=(u8)psecuritypriv->dot11PrivacyAlgrthm;
3327                 RT_TRACE(_module_rtl871x_mlme_c_,_drv_err_,("\n rtw_set_key: psetkeyparm->algorithm=(u8)psecuritypriv->dot11PrivacyAlgrthm=%d \n", psetkeyparm->algorithm));
3328
3329         }
3330         psetkeyparm->keyid = (u8)keyid;//0~3
3331         psetkeyparm->set_tx = set_tx;
3332         if (is_wep_enc(psetkeyparm->algorithm))
3333                 adapter->securitypriv.key_mask |= BIT(psetkeyparm->keyid);
3334
3335         DBG_871X("==> rtw_set_key algorithm(%x),keyid(%x),key_mask(%x)\n",psetkeyparm->algorithm,psetkeyparm->keyid, adapter->securitypriv.key_mask);
3336         RT_TRACE(_module_rtl871x_mlme_c_,_drv_err_,("\n rtw_set_key: psetkeyparm->algorithm=%d psetkeyparm->keyid=(u8)keyid=%d \n",psetkeyparm->algorithm, keyid));
3337
3338         switch(psetkeyparm->algorithm){
3339
3340                 case _WEP40_:
3341                         keylen=5;
3342                         _rtw_memcpy(&(psetkeyparm->key[0]), &(psecuritypriv->dot11DefKey[keyid].skey[0]), keylen);
3343                         break;
3344                 case _WEP104_:
3345                         keylen=13;
3346                         _rtw_memcpy(&(psetkeyparm->key[0]), &(psecuritypriv->dot11DefKey[keyid].skey[0]), keylen);
3347                         break;
3348                 case _TKIP_:
3349                         keylen=16;
3350                         _rtw_memcpy(&psetkeyparm->key, &psecuritypriv->dot118021XGrpKey[keyid], keylen);
3351                         psetkeyparm->grpkey=1;
3352                         break;
3353                 case _AES_:
3354                         keylen=16;
3355                         _rtw_memcpy(&psetkeyparm->key, &psecuritypriv->dot118021XGrpKey[keyid], keylen);
3356                         psetkeyparm->grpkey=1;
3357                         break;
3358                 default:
3359                         RT_TRACE(_module_rtl871x_mlme_c_,_drv_err_,("\n rtw_set_key:psecuritypriv->dot11PrivacyAlgrthm = %x (must be 1 or 2 or 4 or 5)\n",psecuritypriv->dot11PrivacyAlgrthm));
3360                         res= _FAIL;
3361                         rtw_mfree((unsigned char *)psetkeyparm, sizeof(struct setkey_parm));
3362                         goto exit;
3363         }
3364
3365
3366         if(enqueue){
3367                 pcmd = (struct  cmd_obj*)rtw_zmalloc(sizeof(struct      cmd_obj));
3368                 if(pcmd==NULL){
3369                         rtw_mfree((unsigned char *)psetkeyparm, sizeof(struct setkey_parm));
3370                         res= _FAIL;  //try again
3371                         goto exit;
3372                 }
3373
3374                 pcmd->cmdcode = _SetKey_CMD_;
3375                 pcmd->parmbuf = (u8 *)psetkeyparm;
3376                 pcmd->cmdsz =  (sizeof(struct setkey_parm));
3377                 pcmd->rsp = NULL;
3378                 pcmd->rspsz = 0;
3379
3380                 _rtw_init_listhead(&pcmd->list);
3381
3382                 //_rtw_init_sema(&(pcmd->cmd_sem), 0);
3383
3384                 res = rtw_enqueue_cmd(pcmdpriv, pcmd);
3385         }
3386         else{
3387                 setkey_hdl(adapter, (u8 *)psetkeyparm);
3388                 rtw_mfree((u8 *) psetkeyparm, sizeof(struct setkey_parm));
3389         }
3390 exit:
3391 _func_exit_;
3392         return res;
3393
3394 }
3395
3396
3397 //adjust IEs for rtw_joinbss_cmd in WMM
3398 int rtw_restruct_wmm_ie(_adapter *adapter, u8 *in_ie, u8 *out_ie, uint in_len, uint initial_out_len)
3399 {
3400         unsigned        int ielength=0;
3401         unsigned int i, j;
3402
3403         i = 12; //after the fixed IE
3404         while(i<in_len)
3405         {
3406                 ielength = initial_out_len;
3407
3408                 if(in_ie[i] == 0xDD && in_ie[i+2] == 0x00 && in_ie[i+3] == 0x50  && in_ie[i+4] == 0xF2 && in_ie[i+5] == 0x02 && i+5 < in_len) //WMM element ID and OUI
3409                 {
3410
3411                         //Append WMM IE to the last index of out_ie
3412                         /*
3413                         for(j=i; j< i+(in_ie[i+1]+2); j++)
3414                         {
3415                                 out_ie[ielength] = in_ie[j];
3416                                 ielength++;
3417                         }
3418                         out_ie[initial_out_len+8] = 0x00; //force the QoS Info Field to be zero
3419                         */
3420
3421                         for ( j = i; j < i + 9; j++ )
3422                         {
3423                             out_ie[ ielength] = in_ie[ j ];
3424                             ielength++;
3425                         }
3426                         out_ie[ initial_out_len + 1 ] = 0x07;
3427                         out_ie[ initial_out_len + 6 ] = 0x00;
3428                         out_ie[ initial_out_len + 8 ] = 0x00;
3429
3430                         break;
3431                 }
3432
3433                 i+=(in_ie[i+1]+2); // to the next IE element
3434         }
3435
3436         return ielength;
3437
3438 }
3439
3440
3441 //
3442 // Ported from 8185: IsInPreAuthKeyList(). (Renamed from SecIsInPreAuthKeyList(), 2006-10-13.)
3443 // Added by Annie, 2006-05-07.
3444 //
3445 // Search by BSSID,
3446 // Return Value:
3447 //              -1              :if there is no pre-auth key in the  table
3448 //              >=0             :if there is pre-auth key, and   return the entry id
3449 //
3450 //
3451
3452 static int SecIsInPMKIDList(_adapter *Adapter, u8 *bssid)
3453 {
3454         struct security_priv *psecuritypriv=&Adapter->securitypriv;
3455         int i=0;
3456
3457         do
3458         {
3459                 if( ( psecuritypriv->PMKIDList[i].bUsed ) &&
3460                     (  _rtw_memcmp( psecuritypriv->PMKIDList[i].Bssid, bssid, ETH_ALEN ) == _TRUE ) )
3461                 {
3462                         break;
3463                 }
3464                 else
3465                 {
3466                         i++;
3467                         //continue;
3468                 }
3469
3470         }while(i<NUM_PMKID_CACHE);
3471
3472         if( i == NUM_PMKID_CACHE )
3473         {
3474                 i = -1;// Could not find.
3475         }
3476         else
3477         {
3478                 // There is one Pre-Authentication Key for the specific BSSID.
3479         }
3480
3481         return (i);
3482
3483 }
3484
3485 //
3486 // Check the RSN IE length
3487 // If the RSN IE length <= 20, the RSN IE didn't include the PMKID information
3488 // 0-11th element in the array are the fixed IE
3489 // 12th element in the array is the IE
3490 // 13th element in the array is the IE length
3491 //
3492
3493 static int rtw_append_pmkid(_adapter *Adapter,int iEntry, u8 *ie, uint ie_len)
3494 {
3495         struct security_priv *psecuritypriv=&Adapter->securitypriv;
3496
3497         if(ie[13]<=20){
3498                 // The RSN IE didn't include the PMK ID, append the PMK information
3499                         ie[ie_len]=1;
3500                         ie_len++;
3501                         ie[ie_len]=0;   //PMKID count = 0x0100
3502                         ie_len++;
3503                         _rtw_memcpy(    &ie[ie_len], &psecuritypriv->PMKIDList[iEntry].PMKID, 16);
3504
3505                         ie_len+=16;
3506                         ie[13]+=18;//PMKID length = 2+16
3507
3508         }
3509         return (ie_len);
3510 }
3511
3512 sint rtw_restruct_sec_ie(_adapter *adapter,u8 *in_ie, u8 *out_ie, uint in_len)
3513 {
3514         u8 authmode=0x0, securitytype, match;
3515         u8 sec_ie[255], uncst_oui[4], bkup_ie[255];
3516         u8 wpa_oui[4]={0x0, 0x50, 0xf2, 0x01};
3517         uint    ielength, cnt, remove_cnt;
3518         int iEntry;
3519
3520         struct mlme_priv *pmlmepriv = &adapter->mlmepriv;
3521         struct security_priv *psecuritypriv=&adapter->securitypriv;
3522         uint    ndisauthmode=psecuritypriv->ndisauthtype;
3523         uint ndissecuritytype = psecuritypriv->ndisencryptstatus;
3524
3525 _func_enter_;
3526
3527         RT_TRACE(_module_rtl871x_mlme_c_, _drv_notice_,
3528                  ("+rtw_restruct_sec_ie: ndisauthmode=%d ndissecuritytype=%d\n",
3529                   ndisauthmode, ndissecuritytype));
3530
3531         //copy fixed ie only
3532         _rtw_memcpy(out_ie, in_ie,12);
3533         ielength=12;
3534         if((ndisauthmode==Ndis802_11AuthModeWPA)||(ndisauthmode==Ndis802_11AuthModeWPAPSK))
3535                         authmode=_WPA_IE_ID_;
3536         if((ndisauthmode==Ndis802_11AuthModeWPA2)||(ndisauthmode==Ndis802_11AuthModeWPA2PSK))
3537                         authmode=_WPA2_IE_ID_;
3538
3539         if(check_fwstate(pmlmepriv, WIFI_UNDER_WPS))
3540         {
3541                 _rtw_memcpy(out_ie+ielength, psecuritypriv->wps_ie, psecuritypriv->wps_ie_len);
3542
3543                 ielength += psecuritypriv->wps_ie_len;
3544         }
3545         else if((authmode==_WPA_IE_ID_)||(authmode==_WPA2_IE_ID_))
3546         {
3547                 //copy RSN or SSN
3548                 _rtw_memcpy(&out_ie[ielength], &psecuritypriv->supplicant_ie[0], psecuritypriv->supplicant_ie[1]+2);
3549                 /* debug for CONFIG_IEEE80211W
3550                 {
3551                         int jj;
3552                         printk("supplicant_ie_length=%d &&&&&&&&&&&&&&&&&&&\n", psecuritypriv->supplicant_ie[1]+2);
3553                         for(jj=0; jj < psecuritypriv->supplicant_ie[1]+2; jj++)
3554                                 printk(" %02x ", psecuritypriv->supplicant_ie[jj]);
3555                         printk("\n");
3556                 }*/
3557                 ielength+=psecuritypriv->supplicant_ie[1]+2;
3558                 rtw_report_sec_ie(adapter, authmode, psecuritypriv->supplicant_ie);
3559
3560 #ifdef CONFIG_DRVEXT_MODULE
3561                 drvext_report_sec_ie(&adapter->drvextpriv, authmode, sec_ie);
3562 #endif
3563         }
3564
3565         iEntry = SecIsInPMKIDList(adapter, pmlmepriv->assoc_bssid);
3566         if(iEntry<0)
3567         {
3568                 return ielength;
3569         }
3570         else
3571         {
3572                 if(authmode == _WPA2_IE_ID_)
3573                 {
3574                         ielength=rtw_append_pmkid(adapter, iEntry, out_ie, ielength);
3575                 }
3576         }
3577
3578 _func_exit_;
3579
3580         return ielength;
3581 }
3582
3583 void rtw_init_registrypriv_dev_network( _adapter* adapter)
3584 {
3585         struct registry_priv* pregistrypriv = &adapter->registrypriv;
3586         struct eeprom_priv* peepriv = &adapter->eeprompriv;
3587         WLAN_BSSID_EX    *pdev_network = &pregistrypriv->dev_network;
3588         u8 *myhwaddr = myid(peepriv);
3589
3590 _func_enter_;
3591
3592         _rtw_memcpy(pdev_network->MacAddress, myhwaddr, ETH_ALEN);
3593
3594         _rtw_memcpy(&pdev_network->Ssid, &pregistrypriv->ssid, sizeof(NDIS_802_11_SSID));
3595
3596         pdev_network->Configuration.Length=sizeof(NDIS_802_11_CONFIGURATION);
3597         pdev_network->Configuration.BeaconPeriod = 100;
3598         pdev_network->Configuration.FHConfig.Length = 0;
3599         pdev_network->Configuration.FHConfig.HopPattern = 0;
3600         pdev_network->Configuration.FHConfig.HopSet = 0;
3601         pdev_network->Configuration.FHConfig.DwellTime = 0;
3602
3603
3604 _func_exit_;
3605
3606 }
3607
3608 void rtw_update_registrypriv_dev_network(_adapter* adapter)
3609 {
3610         int sz=0;
3611         struct registry_priv* pregistrypriv = &adapter->registrypriv;
3612         WLAN_BSSID_EX    *pdev_network = &pregistrypriv->dev_network;
3613         struct  security_priv*  psecuritypriv = &adapter->securitypriv;
3614         struct  wlan_network    *cur_network = &adapter->mlmepriv.cur_network;
3615         //struct        xmit_priv       *pxmitpriv = &adapter->xmitpriv;
3616
3617 _func_enter_;
3618
3619 #if 0
3620         pxmitpriv->vcs_setting = pregistrypriv->vrtl_carrier_sense;
3621         pxmitpriv->vcs = pregistrypriv->vcs_type;
3622         pxmitpriv->vcs_type = pregistrypriv->vcs_type;
3623         //pxmitpriv->rts_thresh = pregistrypriv->rts_thresh;
3624         pxmitpriv->frag_len = pregistrypriv->frag_thresh;
3625
3626         adapter->qospriv.qos_option = pregistrypriv->wmm_enable;
3627 #endif
3628
3629         pdev_network->Privacy = (psecuritypriv->dot11PrivacyAlgrthm > 0 ? 1 : 0) ; // adhoc no 802.1x
3630
3631         pdev_network->Rssi = 0;
3632
3633         switch(pregistrypriv->wireless_mode)
3634         {
3635                 case WIRELESS_11B:
3636                         pdev_network->NetworkTypeInUse = (Ndis802_11DS);
3637                         break;
3638                 case WIRELESS_11G:
3639                 case WIRELESS_11BG:
3640                 case WIRELESS_11_24N:
3641                 case WIRELESS_11G_24N:
3642                 case WIRELESS_11BG_24N:
3643                         pdev_network->NetworkTypeInUse = (Ndis802_11OFDM24);
3644                         break;
3645                 case WIRELESS_11A:
3646                 case WIRELESS_11A_5N:
3647                         pdev_network->NetworkTypeInUse = (Ndis802_11OFDM5);
3648                         break;
3649                 case WIRELESS_11ABGN:
3650                         if(pregistrypriv->channel > 14)
3651                                 pdev_network->NetworkTypeInUse = (Ndis802_11OFDM5);
3652                         else
3653                                 pdev_network->NetworkTypeInUse = (Ndis802_11OFDM24);
3654                         break;
3655                 default :
3656                         // TODO
3657                         break;
3658         }
3659
3660         pdev_network->Configuration.DSConfig = (pregistrypriv->channel);
3661         RT_TRACE(_module_rtl871x_mlme_c_,_drv_info_,("pregistrypriv->channel=%d, pdev_network->Configuration.DSConfig=0x%x\n", pregistrypriv->channel, pdev_network->Configuration.DSConfig));
3662
3663         if(cur_network->network.InfrastructureMode == Ndis802_11IBSS)
3664                 pdev_network->Configuration.ATIMWindow = (0);
3665
3666         pdev_network->InfrastructureMode = (cur_network->network.InfrastructureMode);
3667
3668         // 1. Supported rates
3669         // 2. IE
3670
3671         //rtw_set_supported_rate(pdev_network->SupportedRates, pregistrypriv->wireless_mode) ; // will be called in rtw_generate_ie
3672         sz = rtw_generate_ie(pregistrypriv);
3673
3674         pdev_network->IELength = sz;
3675
3676         pdev_network->Length = get_WLAN_BSSID_EX_sz((WLAN_BSSID_EX  *)pdev_network);
3677
3678         //notes: translate IELength & Length after assign the Length to cmdsz in createbss_cmd();
3679         //pdev_network->IELength = cpu_to_le32(sz);
3680
3681 _func_exit_;
3682
3683 }
3684
3685 void rtw_get_encrypt_decrypt_from_registrypriv(_adapter* adapter)
3686 {
3687 _func_enter_;
3688
3689
3690 _func_exit_;
3691
3692 }
3693
3694 //the fucntion is at passive_level
3695 void rtw_joinbss_reset(_adapter *padapter)
3696 {
3697         u8      threshold;
3698         struct mlme_priv        *pmlmepriv = &padapter->mlmepriv;
3699
3700 #ifdef CONFIG_80211N_HT
3701         struct ht_priv          *phtpriv = &pmlmepriv->htpriv;
3702 #endif
3703
3704         //todo: if you want to do something io/reg/hw setting before join_bss, please add code here
3705
3706
3707
3708
3709 #ifdef CONFIG_80211N_HT
3710
3711         pmlmepriv->num_FortyMHzIntolerant = 0;
3712
3713         pmlmepriv->num_sta_no_ht = 0;
3714
3715         phtpriv->ampdu_enable = _FALSE;//reset to disabled
3716
3717 #if defined( CONFIG_USB_HCI) || defined (CONFIG_SDIO_HCI)
3718         // TH=1 => means that invalidate usb rx aggregation
3719         // TH=0 => means that validate usb rx aggregation, use init value.
3720         if(phtpriv->ht_option)
3721         {
3722                 if(padapter->registrypriv.wifi_spec==1)
3723                         threshold = 1;
3724                 else
3725                         threshold = 0;
3726                 rtw_hal_set_hwreg(padapter, HW_VAR_RXDMA_AGG_PG_TH, (u8 *)(&threshold));
3727         }
3728         else
3729         {
3730                 threshold = 1;
3731                 rtw_hal_set_hwreg(padapter, HW_VAR_RXDMA_AGG_PG_TH, (u8 *)(&threshold));
3732         }
3733 #endif
3734
3735 #endif
3736
3737 }
3738
3739
3740 #ifdef CONFIG_80211N_HT
3741 void    rtw_ht_use_default_setting(_adapter *padapter)
3742 {
3743         struct mlme_priv                *pmlmepriv = &padapter->mlmepriv;
3744         struct ht_priv          *phtpriv = &pmlmepriv->htpriv;
3745         struct registry_priv    *pregistrypriv = &padapter->registrypriv;
3746         BOOLEAN         bHwLDPCSupport = _FALSE, bHwSTBCSupport = _FALSE;
3747         BOOLEAN         bHwSupportBeamformer = _FALSE, bHwSupportBeamformee = _FALSE;
3748
3749         if (pregistrypriv->wifi_spec)
3750                 phtpriv->bss_coexist = 1;
3751         else
3752                 phtpriv->bss_coexist = 0;
3753
3754         phtpriv->sgi_40m = TEST_FLAG(pregistrypriv->short_gi, BIT1) ? _TRUE : _FALSE;
3755         phtpriv->sgi_20m = TEST_FLAG(pregistrypriv->short_gi, BIT0) ? _TRUE : _FALSE;
3756
3757         // LDPC support
3758         rtw_hal_get_def_var(padapter, HAL_DEF_RX_LDPC, (u8 *)&bHwLDPCSupport);
3759         CLEAR_FLAGS(phtpriv->ldpc_cap);
3760         if(bHwLDPCSupport)
3761         {
3762                 if(TEST_FLAG(pregistrypriv->ldpc_cap, BIT4))
3763                         SET_FLAG(phtpriv->ldpc_cap, LDPC_HT_ENABLE_RX);
3764         }
3765         rtw_hal_get_def_var(padapter, HAL_DEF_TX_LDPC, (u8 *)&bHwLDPCSupport);
3766         if(bHwLDPCSupport)
3767         {
3768                 if(TEST_FLAG(pregistrypriv->ldpc_cap, BIT5))
3769                         SET_FLAG(phtpriv->ldpc_cap, LDPC_HT_ENABLE_TX);
3770         }
3771         if (phtpriv->ldpc_cap)
3772                 DBG_871X("[HT] Support LDPC = 0x%02X\n", phtpriv->ldpc_cap);
3773
3774         // STBC
3775         rtw_hal_get_def_var(padapter, HAL_DEF_TX_STBC, (u8 *)&bHwSTBCSupport);
3776         CLEAR_FLAGS(phtpriv->stbc_cap);
3777         if(bHwSTBCSupport)
3778         {
3779                 if(TEST_FLAG(pregistrypriv->stbc_cap, BIT5))
3780                         SET_FLAG(phtpriv->stbc_cap, STBC_HT_ENABLE_TX);
3781         }
3782         rtw_hal_get_def_var(padapter, HAL_DEF_RX_STBC, (u8 *)&bHwSTBCSupport);
3783         if(bHwSTBCSupport)
3784         {
3785                 if(TEST_FLAG(pregistrypriv->stbc_cap, BIT4))
3786                         SET_FLAG(phtpriv->stbc_cap, STBC_HT_ENABLE_RX);
3787         }
3788         if (phtpriv->stbc_cap)
3789                 DBG_871X("[HT] Support STBC = 0x%02X\n", phtpriv->stbc_cap);
3790
3791         // Beamforming setting
3792         rtw_hal_get_def_var(padapter, HAL_DEF_EXPLICIT_BEAMFORMER, (u8 *)&bHwSupportBeamformer);
3793         rtw_hal_get_def_var(padapter, HAL_DEF_EXPLICIT_BEAMFORMEE, (u8 *)&bHwSupportBeamformee);
3794         CLEAR_FLAGS(phtpriv->beamform_cap);
3795         if(TEST_FLAG(pregistrypriv->beamform_cap, BIT4) && bHwSupportBeamformer)
3796         {
3797                 SET_FLAG(phtpriv->beamform_cap, BEAMFORMING_HT_BEAMFORMER_ENABLE);
3798                 DBG_871X("[HT] Support Beamformer\n");
3799         }
3800         if(TEST_FLAG(pregistrypriv->beamform_cap, BIT5) && bHwSupportBeamformee)
3801         {
3802                 SET_FLAG(phtpriv->beamform_cap, BEAMFORMING_HT_BEAMFORMEE_ENABLE);
3803                 DBG_871X("[HT] Support Beamformee\n");
3804         }
3805 }
3806
3807 void rtw_build_wmm_ie_ht(_adapter *padapter, u8 *out_ie, uint *pout_len)
3808 {
3809         unsigned char WMM_IE[] = {0x00, 0x50, 0xf2, 0x02, 0x00, 0x01, 0x00};
3810         int out_len;
3811         u8 *pframe;
3812
3813         if(padapter->mlmepriv.qospriv.qos_option == 0)
3814         {
3815                 out_len = *pout_len;
3816                 pframe = rtw_set_ie(out_ie+out_len, _VENDOR_SPECIFIC_IE_,
3817                                                         _WMM_IE_Length_, WMM_IE, pout_len);
3818
3819                 padapter->mlmepriv.qospriv.qos_option = 1;
3820         }
3821 }
3822
3823 /* the fucntion is >= passive_level */
3824 unsigned int rtw_restructure_ht_ie(_adapter *padapter, u8 *in_ie, u8 *out_ie, uint in_len, uint *pout_len, u8 channel)
3825 {
3826         u32 ielen, out_len;
3827         HT_CAP_AMPDU_FACTOR max_rx_ampdu_factor;
3828         unsigned char *p, *pframe;
3829         struct rtw_ieee80211_ht_cap ht_capie;
3830         u8      cbw40_enable = 0, stbc_rx_enable = 0, rf_type = 0, operation_bw=0;
3831         struct registry_priv *pregistrypriv = &padapter->registrypriv;
3832         struct mlme_priv        *pmlmepriv = &padapter->mlmepriv;
3833         struct ht_priv          *phtpriv = &pmlmepriv->htpriv;
3834
3835         phtpriv->ht_option = _FALSE;
3836
3837         out_len = *pout_len;
3838
3839         _rtw_memset(&ht_capie, 0, sizeof(struct rtw_ieee80211_ht_cap));
3840
3841         ht_capie.cap_info = IEEE80211_HT_CAP_DSSSCCK40;
3842
3843         if (phtpriv->sgi_20m)
3844                 ht_capie.cap_info |= IEEE80211_HT_CAP_SGI_20;
3845
3846         /* Get HT BW */
3847         if (in_ie == NULL) {
3848                 /* TDLS: TODO 20/40 issue */
3849                 if (check_fwstate(pmlmepriv, WIFI_STATION_STATE)) {
3850                         operation_bw = padapter->mlmeextpriv.cur_bwmode;
3851                         if (operation_bw > CHANNEL_WIDTH_40)
3852                                 operation_bw = CHANNEL_WIDTH_40;
3853                 } else
3854                         /* TDLS: TODO 40? */
3855                         operation_bw = CHANNEL_WIDTH_40;
3856         } else {
3857                 p = rtw_get_ie(in_ie, _HT_ADD_INFO_IE_, &ielen, in_len);
3858                 if (p && (ielen == sizeof(struct ieee80211_ht_addt_info))) {
3859                         struct HT_info_element *pht_info = (struct HT_info_element *)(p+2);
3860                         if (pht_info->infos[0] & BIT(2)) {
3861                                 switch (pht_info->infos[0] & 0x3) {
3862                                 case 1:
3863                                 case 3:
3864                                         operation_bw = CHANNEL_WIDTH_40;
3865                                         break;
3866                                 default:
3867                                         operation_bw = CHANNEL_WIDTH_20;
3868                                         break;
3869                                 }
3870                         } else {
3871                                 operation_bw = CHANNEL_WIDTH_20;
3872                         }
3873                 }
3874         }
3875
3876         /* to disable 40M Hz support while gd_bw_40MHz_en = 0 */
3877         if (channel > 14) {
3878                 if ((pregistrypriv->bw_mode & 0xf0) > 0)
3879                         cbw40_enable = 1;
3880         } else {
3881                 if ((pregistrypriv->bw_mode & 0x0f) > 0)
3882                         cbw40_enable = 1;
3883         }
3884
3885         if ((cbw40_enable == 1) && (operation_bw == CHANNEL_WIDTH_40)) {
3886                 ht_capie.cap_info |= IEEE80211_HT_CAP_SUP_WIDTH;
3887                 if (phtpriv->sgi_40m)
3888                         ht_capie.cap_info |= IEEE80211_HT_CAP_SGI_40;
3889         }
3890
3891         if (TEST_FLAG(phtpriv->stbc_cap, STBC_HT_ENABLE_TX))
3892                 ht_capie.cap_info |= IEEE80211_HT_CAP_TX_STBC;
3893
3894         /* todo: disable SM power save mode */
3895         ht_capie.cap_info |= IEEE80211_HT_CAP_SM_PS;
3896
3897         if (TEST_FLAG(phtpriv->stbc_cap, STBC_HT_ENABLE_RX)) {
3898                 if((pregistrypriv->rx_stbc == 0x3) ||                                                   /* enable for 2.4/5 GHz */
3899                         ((channel <= 14) && (pregistrypriv->rx_stbc == 0x1)) || /* enable for 2.4GHz */
3900                         ((channel > 14) && (pregistrypriv->rx_stbc == 0x2)) ||          /* enable for 5GHz */
3901                         (pregistrypriv->wifi_spec == 1)) {
3902                         stbc_rx_enable = 1;
3903                         DBG_871X("declare supporting RX STBC\n");
3904                 }
3905         }
3906
3907         rtw_hal_get_hwreg(padapter, HW_VAR_RF_TYPE, (u8 *)(&rf_type));
3908 #ifdef RTL8192C_RECONFIG_TO_1T1R
3909         rf_type = RF_1T1R;
3910 #endif
3911         switch (rf_type) {
3912         case RF_1T1R:
3913                 if (stbc_rx_enable)
3914                         ht_capie.cap_info |= IEEE80211_HT_CAP_RX_STBC_1R;//RX STBC One spatial stream
3915
3916                 _rtw_memcpy(ht_capie.supp_mcs_set, MCS_rate_1R, 16);
3917                 break;
3918
3919         case RF_2T2R:
3920         case RF_1T2R:
3921         default:
3922
3923                 if (stbc_rx_enable)
3924                         ht_capie.cap_info |= IEEE80211_HT_CAP_RX_STBC_2R;//RX STBC two spatial stream
3925
3926                 #ifdef CONFIG_DISABLE_MCS13TO15
3927                 if(((cbw40_enable == 1) && (operation_bw == CHANNEL_WIDTH_40)) && (pregistrypriv->wifi_spec!=1))
3928                         _rtw_memcpy(ht_capie.supp_mcs_set, MCS_rate_2R_MCS13TO15_OFF, 16);
3929                 else
3930                         _rtw_memcpy(ht_capie.supp_mcs_set, MCS_rate_2R, 16);
3931                 #else //CONFIG_DISABLE_MCS13TO15
3932                 _rtw_memcpy(ht_capie.supp_mcs_set, MCS_rate_2R, 16);
3933                 #endif //CONFIG_DISABLE_MCS13TO15
3934                 break;
3935         }
3936
3937         {
3938                 u32 rx_packet_offset, max_recvbuf_sz;
3939                 rtw_hal_get_def_var(padapter, HAL_DEF_RX_PACKET_OFFSET, &rx_packet_offset);
3940                 rtw_hal_get_def_var(padapter, HAL_DEF_MAX_RECVBUF_SZ, &max_recvbuf_sz);
3941                 //if(max_recvbuf_sz-rx_packet_offset>(8191-256)) {
3942                 //      DBG_871X("%s IEEE80211_HT_CAP_MAX_AMSDU is set\n", __FUNCTION__);
3943                 //      ht_capie.cap_info = ht_capie.cap_info |IEEE80211_HT_CAP_MAX_AMSDU;
3944                 //}
3945         }
3946         /*
3947         AMPDU_para [1:0]:Max AMPDU Len => 0:8k , 1:16k, 2:32k, 3:64k
3948         AMPDU_para [4:2]:Min MPDU Start Spacing
3949         */
3950
3951         /*
3952         #if defined(CONFIG_RTL8188E )&& defined (CONFIG_SDIO_HCI)
3953         ht_capie.ampdu_params_info = 2;
3954         #else
3955         ht_capie.ampdu_params_info = (IEEE80211_HT_CAP_AMPDU_FACTOR&0x03);
3956         #endif
3957         */
3958
3959         rtw_hal_get_def_var(padapter, HW_VAR_MAX_RX_AMPDU_FACTOR, &max_rx_ampdu_factor);
3960         ht_capie.ampdu_params_info = (max_rx_ampdu_factor&0x03);
3961
3962         if(padapter->securitypriv.dot11PrivacyAlgrthm == _AES_ )
3963                 ht_capie.ampdu_params_info |= (IEEE80211_HT_CAP_AMPDU_DENSITY&(0x07<<2));
3964         else
3965                 ht_capie.ampdu_params_info |= (IEEE80211_HT_CAP_AMPDU_DENSITY&0x00);
3966
3967 #ifdef CONFIG_BEAMFORMING
3968         ht_capie.tx_BF_cap_info = 0;
3969
3970         // HT Beamformer
3971         if(TEST_FLAG(phtpriv->beamform_cap, BEAMFORMING_HT_BEAMFORMER_ENABLE))
3972         {
3973                 // Transmit NDP Capable
3974                 SET_HT_CAP_TXBF_TRANSMIT_NDP_CAP(&ht_capie, 1);
3975                 // Explicit Compressed Steering Capable
3976                 SET_HT_CAP_TXBF_EXPLICIT_COMP_STEERING_CAP(&ht_capie, 1);
3977                 // Compressed Steering Number Antennas
3978                 SET_HT_CAP_TXBF_COMP_STEERING_NUM_ANTENNAS(&ht_capie, 1);
3979         }
3980
3981         // HT Beamformee
3982         if(TEST_FLAG(phtpriv->beamform_cap, BEAMFORMING_HT_BEAMFORMEE_ENABLE))
3983         {
3984                 // Receive NDP Capable
3985                 SET_HT_CAP_TXBF_RECEIVE_NDP_CAP(&ht_capie, 1);
3986                 // Explicit Compressed Beamforming Feedback Capable
3987                 SET_HT_CAP_TXBF_EXPLICIT_COMP_FEEDBACK_CAP(&ht_capie, 2);
3988         }
3989 #endif
3990
3991         pframe = rtw_set_ie(out_ie+out_len, _HT_CAPABILITY_IE_,
3992                                                 sizeof(struct rtw_ieee80211_ht_cap), (unsigned char*)&ht_capie, pout_len);
3993
3994         phtpriv->ht_option = _TRUE;
3995
3996         if(in_ie!=NULL)
3997         {
3998                 p = rtw_get_ie(in_ie, _HT_ADD_INFO_IE_, &ielen, in_len);
3999                 if(p && (ielen==sizeof(struct ieee80211_ht_addt_info)))
4000                 {
4001                         out_len = *pout_len;
4002                         pframe = rtw_set_ie(out_ie+out_len, _HT_ADD_INFO_IE_, ielen, p+2 , pout_len);
4003                 }
4004         }
4005
4006         return (phtpriv->ht_option);
4007
4008 }
4009
4010 //the fucntion is > passive_level (in critical_section)
4011 void rtw_update_ht_cap(_adapter *padapter, u8 *pie, uint ie_len, u8 channel)
4012 {
4013         u8 *p, max_ampdu_sz;
4014         int len;
4015         //struct sta_info *bmc_sta, *psta;
4016         struct rtw_ieee80211_ht_cap *pht_capie;
4017         struct ieee80211_ht_addt_info *pht_addtinfo;
4018         //struct recv_reorder_ctrl *preorder_ctrl;
4019         struct mlme_priv        *pmlmepriv = &padapter->mlmepriv;
4020         struct ht_priv          *phtpriv = &pmlmepriv->htpriv;
4021         //struct recv_priv *precvpriv = &padapter->recvpriv;
4022         struct registry_priv *pregistrypriv = &padapter->registrypriv;
4023         //struct wlan_network *pcur_network = &(pmlmepriv->cur_network);;
4024         struct mlme_ext_priv    *pmlmeext = &padapter->mlmeextpriv;
4025         struct mlme_ext_info    *pmlmeinfo = &(pmlmeext->mlmext_info);
4026         u8 cbw40_enable=0;
4027
4028
4029         if(!phtpriv->ht_option)
4030                 return;
4031
4032         if ((!pmlmeinfo->HT_info_enable) || (!pmlmeinfo->HT_caps_enable))
4033                 return;
4034
4035         DBG_871X("+rtw_update_ht_cap()\n");
4036
4037         //maybe needs check if ap supports rx ampdu.
4038         if((phtpriv->ampdu_enable==_FALSE) &&(pregistrypriv->ampdu_enable==1))
4039         {
4040                 if(pregistrypriv->wifi_spec==1)
4041                 {
4042                         phtpriv->ampdu_enable = _FALSE;
4043                 }
4044                 else
4045                 {
4046                         phtpriv->ampdu_enable = _TRUE;
4047                 }
4048         }
4049         else if(pregistrypriv->ampdu_enable==2)
4050         {
4051                 phtpriv->ampdu_enable = _TRUE;
4052         }
4053
4054
4055         //check Max Rx A-MPDU Size
4056         len = 0;
4057         p = rtw_get_ie(pie+sizeof (NDIS_802_11_FIXED_IEs), _HT_CAPABILITY_IE_, &len, ie_len-sizeof (NDIS_802_11_FIXED_IEs));
4058         if(p && len>0)
4059         {
4060                 pht_capie = (struct rtw_ieee80211_ht_cap *)(p+2);
4061                 max_ampdu_sz = (pht_capie->ampdu_params_info & IEEE80211_HT_CAP_AMPDU_FACTOR);
4062                 max_ampdu_sz = 1 << (max_ampdu_sz+3); // max_ampdu_sz (kbytes);
4063
4064                 //DBG_871X("rtw_update_ht_cap(): max_ampdu_sz=%d\n", max_ampdu_sz);
4065                 phtpriv->rx_ampdu_maxlen = max_ampdu_sz;
4066
4067         }
4068
4069
4070         len=0;
4071         p = rtw_get_ie(pie+sizeof (NDIS_802_11_FIXED_IEs), _HT_ADD_INFO_IE_, &len, ie_len-sizeof (NDIS_802_11_FIXED_IEs));
4072         if(p && len>0)
4073         {
4074                 pht_addtinfo = (struct ieee80211_ht_addt_info *)(p+2);
4075                 //todo:
4076         }
4077
4078         if (channel > 14) {
4079                 if ((pregistrypriv->bw_mode & 0xf0) > 0)
4080                         cbw40_enable = 1;
4081         } else {
4082                 if ((pregistrypriv->bw_mode & 0x0f) > 0)
4083                         cbw40_enable = 1;
4084         }
4085
4086         //update cur_bwmode & cur_ch_offset
4087         if ((cbw40_enable) &&
4088                 (pmlmeinfo->HT_caps.u.HT_cap_element.HT_caps_info & BIT(1)) &&
4089                 (pmlmeinfo->HT_info.infos[0] & BIT(2)))
4090         {
4091                 int i;
4092                 u8      rf_type;
4093
4094                 padapter->HalFunc.GetHwRegHandler(padapter, HW_VAR_RF_TYPE, (u8 *)(&rf_type));
4095
4096                 //update the MCS rates
4097                 for (i = 0; i < 16; i++)
4098                 {
4099                         if((rf_type == RF_1T1R) || (rf_type == RF_1T2R))
4100                         {
4101                                 pmlmeinfo->HT_caps.u.HT_cap_element.MCS_rate[i] &= MCS_rate_1R[i];
4102                         }
4103                         else
4104                         {
4105                                 #ifdef CONFIG_DISABLE_MCS13TO15
4106                                 if(pmlmeext->cur_bwmode == CHANNEL_WIDTH_40 && pregistrypriv->wifi_spec != 1 )
4107                                 {
4108                                         pmlmeinfo->HT_caps.u.HT_cap_element.MCS_rate[i] &= MCS_rate_2R_MCS13TO15_OFF[i];
4109                                 }
4110                                 else
4111                                         pmlmeinfo->HT_caps.u.HT_cap_element.MCS_rate[i] &= MCS_rate_2R[i];
4112                                 #else
4113                                 pmlmeinfo->HT_caps.u.HT_cap_element.MCS_rate[i] &= MCS_rate_2R[i];
4114                                 #endif //CONFIG_DISABLE_MCS13TO15
4115                         }
4116                         #ifdef RTL8192C_RECONFIG_TO_1T1R
4117                         {
4118                                 pmlmeinfo->HT_caps.HT_cap_element.MCS_rate[i] &= MCS_rate_1R[i];
4119                         }
4120                         #endif
4121                 }
4122                 //switch to the 40M Hz mode accoring to the AP
4123                 //pmlmeext->cur_bwmode = CHANNEL_WIDTH_40;
4124                 switch ((pmlmeinfo->HT_info.infos[0] & 0x3))
4125                 {
4126                         case EXTCHNL_OFFSET_UPPER:
4127                                 pmlmeext->cur_ch_offset = HAL_PRIME_CHNL_OFFSET_LOWER;
4128                                 break;
4129
4130                         case EXTCHNL_OFFSET_LOWER:
4131                                 pmlmeext->cur_ch_offset = HAL_PRIME_CHNL_OFFSET_UPPER;
4132                                 break;
4133
4134                         default:
4135                                 pmlmeext->cur_ch_offset = HAL_PRIME_CHNL_OFFSET_DONT_CARE;
4136                                 break;
4137                 }
4138         }
4139
4140         //
4141         // Config SM Power Save setting
4142         //
4143         pmlmeinfo->SM_PS = (pmlmeinfo->HT_caps.u.HT_cap_element.HT_caps_info & 0x0C) >> 2;
4144         if(pmlmeinfo->SM_PS == WLAN_HT_CAP_SM_PS_STATIC)
4145         {
4146                 /*u8 i;
4147                 //update the MCS rates
4148                 for (i = 0; i < 16; i++)
4149                 {
4150                         pmlmeinfo->HT_caps.HT_cap_element.MCS_rate[i] &= MCS_rate_1R[i];
4151                 }*/
4152                 DBG_871X("%s(): WLAN_HT_CAP_SM_PS_STATIC\n",__FUNCTION__);
4153         }
4154
4155         //
4156         // Config current HT Protection mode.
4157         //
4158         pmlmeinfo->HT_protection = pmlmeinfo->HT_info.infos[1] & 0x3;
4159
4160
4161
4162 #if 0 //move to rtw_update_sta_info_client()
4163         //for A-MPDU Rx reordering buffer control for bmc_sta & sta_info
4164         //if A-MPDU Rx is enabled, reseting  rx_ordering_ctrl wstart_b(indicate_seq) to default value=0xffff
4165         //todo: check if AP can send A-MPDU packets
4166         bmc_sta = rtw_get_bcmc_stainfo(padapter);
4167         if(bmc_sta)
4168         {
4169                 for(i=0; i < 16 ; i++)
4170                 {
4171                         //preorder_ctrl = &precvpriv->recvreorder_ctrl[i];
4172                         preorder_ctrl = &bmc_sta->recvreorder_ctrl[i];
4173                         preorder_ctrl->enable = _FALSE;
4174                         preorder_ctrl->indicate_seq = 0xffff;
4175                         #ifdef DBG_RX_SEQ
4176                         DBG_871X("DBG_RX_SEQ %s:%d indicate_seq:%u \n", __FUNCTION__, __LINE__,
4177                                 preorder_ctrl->indicate_seq);
4178                         #endif
4179                         preorder_ctrl->wend_b= 0xffff;
4180                         preorder_ctrl->wsize_b = 64;//max_ampdu_sz;//ex. 32(kbytes) -> wsize_b=32
4181                 }
4182         }
4183
4184         psta = rtw_get_stainfo(&padapter->stapriv, pcur_network->network.MacAddress);
4185         if(psta)
4186         {
4187                 for(i=0; i < 16 ; i++)
4188                 {
4189                         //preorder_ctrl = &precvpriv->recvreorder_ctrl[i];
4190                         preorder_ctrl = &psta->recvreorder_ctrl[i];
4191                         preorder_ctrl->enable = _FALSE;
4192                         preorder_ctrl->indicate_seq = 0xffff;
4193                         #ifdef DBG_RX_SEQ
4194                         DBG_871X("DBG_RX_SEQ %s:%d indicate_seq:%u \n", __FUNCTION__, __LINE__,
4195                                 preorder_ctrl->indicate_seq);
4196                         #endif
4197                         preorder_ctrl->wend_b= 0xffff;
4198                         preorder_ctrl->wsize_b = 64;//max_ampdu_sz;//ex. 32(kbytes) -> wsize_b=32
4199                 }
4200         }
4201 #endif
4202
4203 }
4204
4205 #ifdef CONFIG_TDLS
4206 void rtw_issue_addbareq_cmd_tdls(_adapter *padapter, struct xmit_frame *pxmitframe)
4207 {
4208         struct pkt_attrib *pattrib =&pxmitframe->attrib;
4209         struct sta_info *ptdls_sta = NULL;
4210         u8 issued;
4211         int priority;
4212         struct ht_priv  *phtpriv;
4213
4214         priority = pattrib->priority;
4215
4216         if(pattrib->direct_link == _TRUE)
4217         {
4218                 ptdls_sta = rtw_get_stainfo(&padapter->stapriv, pattrib->dst);
4219                 if((ptdls_sta != NULL) && (ptdls_sta->tdls_sta_state & TDLS_ESTABLISHED))
4220                 {
4221                         phtpriv = &ptdls_sta->htpriv;
4222
4223                         if((phtpriv->ht_option==_TRUE) && (phtpriv->ampdu_enable==_TRUE))
4224                         {
4225                                 issued = (phtpriv->agg_enable_bitmap>>priority)&0x1;
4226                                 issued |= (phtpriv->candidate_tid_bitmap>>priority)&0x1;
4227
4228                                 if(0==issued)
4229                                 {
4230                                         DBG_871X("rtw_issue_addbareq_cmd, p=%d\n", priority);
4231                                         ptdls_sta->htpriv.candidate_tid_bitmap |= BIT((u8)priority);
4232                                         rtw_addbareq_cmd(padapter,(u8)priority, pattrib->dst);
4233                                 }
4234                         }
4235                 }
4236         }
4237 }
4238 #endif //CONFIG_TDLS
4239
4240 void rtw_issue_addbareq_cmd(_adapter *padapter, struct xmit_frame *pxmitframe)
4241 {
4242         u8 issued;
4243         int priority;
4244         struct sta_info *psta=NULL;
4245         struct ht_priv  *phtpriv;
4246         struct pkt_attrib *pattrib =&pxmitframe->attrib;
4247         s32 bmcst = IS_MCAST(pattrib->ra);
4248
4249         //if(bmcst || (padapter->mlmepriv.LinkDetectInfo.bTxBusyTraffic == _FALSE))
4250         if(bmcst || (padapter->mlmepriv.LinkDetectInfo.NumTxOkInPeriod<100))
4251                 return;
4252
4253         priority = pattrib->priority;
4254
4255 #ifdef CONFIG_TDLS
4256         rtw_issue_addbareq_cmd_tdls(padapter, pxmitframe);
4257 #endif //CONFIG_TDLS
4258
4259         psta = rtw_get_stainfo(&padapter->stapriv, pattrib->ra);
4260         if(pattrib->psta != psta)
4261         {
4262                 DBG_871X("%s, pattrib->psta(%p) != psta(%p)\n", __func__, pattrib->psta, psta);
4263                 return;
4264         }
4265
4266         if(psta==NULL)
4267         {
4268                 DBG_871X("%s, psta==NUL\n", __func__);
4269                 return;
4270         }
4271
4272         if(!(psta->state &_FW_LINKED))
4273         {
4274                 DBG_871X("%s, psta->state(0x%x) != _FW_LINKED\n", __func__, psta->state);
4275                 return;
4276         }
4277
4278
4279         phtpriv = &psta->htpriv;
4280
4281         if((phtpriv->ht_option==_TRUE) && (phtpriv->ampdu_enable==_TRUE))
4282         {
4283                 issued = (phtpriv->agg_enable_bitmap>>priority)&0x1;
4284                 issued |= (phtpriv->candidate_tid_bitmap>>priority)&0x1;
4285
4286                 if(0==issued)
4287                 {
4288                         DBG_871X("rtw_issue_addbareq_cmd, p=%d\n", priority);
4289                         psta->htpriv.candidate_tid_bitmap |= BIT((u8)priority);
4290                         rtw_addbareq_cmd(padapter,(u8) priority, pattrib->ra);
4291                 }
4292         }
4293
4294 }
4295
4296 void rtw_append_exented_cap(_adapter *padapter, u8 *out_ie, uint *pout_len)
4297 {
4298         struct mlme_priv        *pmlmepriv = &padapter->mlmepriv;
4299         struct ht_priv          *phtpriv = &pmlmepriv->htpriv;
4300 #ifdef CONFIG_80211AC_VHT
4301         struct vht_priv *pvhtpriv = &pmlmepriv->vhtpriv;
4302 #endif //CONFIG_80211AC_VHT
4303         u8      cap_content[8] = {0};
4304         u8      *pframe;
4305
4306
4307         if (phtpriv->bss_coexist) {
4308                 SET_EXT_CAPABILITY_ELE_BSS_COEXIST(cap_content, 1);
4309         }
4310
4311 #ifdef CONFIG_80211AC_VHT
4312         if (pvhtpriv->vht_option) {
4313                 SET_EXT_CAPABILITY_ELE_OP_MODE_NOTIF(cap_content, 1);
4314         }
4315 #endif //CONFIG_80211AC_VHT
4316
4317         pframe = rtw_set_ie(out_ie+*pout_len, EID_EXTCapability, 8, cap_content , pout_len);
4318 }
4319 #endif
4320
4321 #ifdef CONFIG_LAYER2_ROAMING
4322 inline void rtw_set_to_roam(_adapter *adapter, u8 to_roam)
4323 {
4324         if (to_roam == 0)
4325                 adapter->mlmepriv.to_join = _FALSE;
4326         adapter->mlmepriv.to_roam = to_roam;
4327 }
4328
4329 inline u8 rtw_dec_to_roam(_adapter *adapter)
4330 {
4331         adapter->mlmepriv.to_roam--;
4332         return adapter->mlmepriv.to_roam;
4333 }
4334
4335 inline u8 rtw_to_roam(_adapter *adapter)
4336 {
4337         return adapter->mlmepriv.to_roam;
4338 }
4339
4340 void rtw_roaming(_adapter *padapter, struct wlan_network *tgt_network)
4341 {
4342         _irqL irqL;
4343         struct mlme_priv        *pmlmepriv = &padapter->mlmepriv;
4344
4345         _enter_critical_bh(&pmlmepriv->lock, &irqL);
4346         _rtw_roaming(padapter, tgt_network);
4347         _exit_critical_bh(&pmlmepriv->lock, &irqL);
4348 }
4349 void _rtw_roaming(_adapter *padapter, struct wlan_network *tgt_network)
4350 {
4351         struct mlme_priv        *pmlmepriv = &padapter->mlmepriv;
4352         struct wlan_network *cur_network = &pmlmepriv->cur_network;
4353         int do_join_r;
4354
4355         if(0 < rtw_to_roam(padapter)) {
4356                 DBG_871X("roaming from %s("MAC_FMT"), length:%d\n",
4357                                 cur_network->network.Ssid.Ssid, MAC_ARG(cur_network->network.MacAddress),
4358                                 cur_network->network.Ssid.SsidLength);
4359                 _rtw_memcpy(&pmlmepriv->assoc_ssid, &cur_network->network.Ssid, sizeof(NDIS_802_11_SSID));
4360
4361                 pmlmepriv->assoc_by_bssid = _FALSE;
4362
4363 #ifdef CONFIG_WAPI_SUPPORT
4364                 rtw_wapi_return_all_sta_info(padapter);
4365 #endif
4366
4367                 while(1) {
4368                         if( _SUCCESS==(do_join_r=rtw_do_join(padapter)) ) {
4369                                 break;
4370                         } else {
4371                                 DBG_871X("roaming do_join return %d\n", do_join_r);
4372                                 rtw_dec_to_roam(padapter);
4373
4374                                 if(rtw_to_roam(padapter) > 0) {
4375                                         continue;
4376                                 } else {
4377                                         DBG_871X("%s(%d) -to roaming fail, indicate_disconnect\n", __FUNCTION__,__LINE__);
4378                                         rtw_indicate_disconnect(padapter);
4379                                         break;
4380                                 }
4381                         }
4382                 }
4383         }
4384
4385 }
4386 #endif /* CONFIG_LAYER2_ROAMING */
4387
4388 sint rtw_linked_check(_adapter *padapter)
4389 {
4390         if(     (check_fwstate(&padapter->mlmepriv, WIFI_AP_STATE) == _TRUE) ||
4391                         (check_fwstate(&padapter->mlmepriv, WIFI_ADHOC_STATE|WIFI_ADHOC_MASTER_STATE) == _TRUE))
4392         {
4393                 if(padapter->stapriv.asoc_sta_count > 2)
4394                         return _TRUE;
4395         }
4396         else
4397         {       //Station mode
4398                 if(check_fwstate(&padapter->mlmepriv, _FW_LINKED)== _TRUE)
4399                         return _TRUE;
4400         }
4401         return _FALSE;
4402 }
4403
4404 #ifdef CONFIG_CONCURRENT_MODE
4405 sint rtw_buddy_adapter_up(_adapter *padapter)
4406 {
4407         sint res = _FALSE;
4408
4409         if(padapter == NULL)
4410                 return res;
4411
4412
4413         if(padapter->pbuddy_adapter == NULL)
4414         {
4415                 res = _FALSE;
4416         }
4417         else if( (padapter->pbuddy_adapter->bDriverStopped) || (padapter->pbuddy_adapter->bSurpriseRemoved) ||
4418                 (padapter->pbuddy_adapter->bup == _FALSE) || (padapter->pbuddy_adapter->hw_init_completed == _FALSE))
4419         {
4420                 res = _FALSE;
4421         }
4422         else
4423         {
4424                 res = _TRUE;
4425         }
4426
4427         return res;
4428
4429 }
4430
4431 sint check_buddy_fwstate(_adapter *padapter, sint state)
4432 {
4433         if(padapter == NULL)
4434                 return _FALSE;
4435
4436         if(padapter->pbuddy_adapter == NULL)
4437                 return _FALSE;
4438
4439         if ((state == WIFI_FW_NULL_STATE) &&
4440                 (padapter->pbuddy_adapter->mlmepriv.fw_state == WIFI_FW_NULL_STATE))
4441                 return _TRUE;
4442
4443         if (padapter->pbuddy_adapter->mlmepriv.fw_state & state)
4444                 return _TRUE;
4445
4446         return _FALSE;
4447 }
4448
4449 u8 rtw_get_buddy_bBusyTraffic(_adapter *padapter)
4450 {
4451         if(padapter == NULL)
4452                 return _FALSE;
4453
4454         if(padapter->pbuddy_adapter == NULL)
4455                 return _FALSE;
4456
4457         return padapter->pbuddy_adapter->mlmepriv.LinkDetectInfo.bBusyTraffic;
4458 }
4459
4460 #endif //CONFIG_CONCURRENT_MODE