drivers/staging/rt3070/sta/assoc.c

   1 /*
   2  *************************************************************************
   3  * Ralink Tech Inc.
   4  * 5F., No.36, Taiyuan St., Jhubei City,
   5  * Hsinchu County 302,
   6  * Taiwan, R.O.C.
   7  *
   8  * (c) Copyright 2002-2007, Ralink Technology, Inc.
   9  *
  10  * This program is free software; you can redistribute it and/or modify  *
  11  * it under the terms of the GNU General Public License as published by  *
  12  * the Free Software Foundation; either version 2 of the License, or     *
  13  * (at your option) any later version.                                   *
  14  *                                                                       *
  15  * This program is distributed in the hope that it will be useful,       *
  16  * but WITHOUT ANY WARRANTY; without even the implied warranty of        *
  17  * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the         *
  18  * GNU General Public License for more details.                          *
  19  *                                                                       *
  20  * You should have received a copy of the GNU General Public License     *
  21  * along with this program; if not, write to the                         *
  22  * Free Software Foundation, Inc.,                                       *
  23  * 59 Temple Place - Suite 330, Boston, MA  02111-1307, USA.             *
  24  *                                                                       *
  25  *************************************************************************
  26
  27         Module Name:
  28         assoc.c
  29
  30         Abstract:
  31
  32         Revision History:
  33         Who                     When                    What
  34         --------        ----------              ----------------------------------------------
  35         John            2004-9-3                porting from RT2500
  36 */
  37 #include "../rt_config.h"
  38
  39 UCHAR   CipherWpaTemplate[] = {
  40                 0xdd,                                   // WPA IE
  41                 0x16,                                   // Length
  42                 0x00, 0x50, 0xf2, 0x01, // oui
  43                 0x01, 0x00,                             // Version
  44                 0x00, 0x50, 0xf2, 0x02, // Multicast
  45                 0x01, 0x00,                             // Number of unicast
  46                 0x00, 0x50, 0xf2, 0x02, // unicast
  47                 0x01, 0x00,                             // number of authentication method
  48                 0x00, 0x50, 0xf2, 0x01  // authentication
  49                 };
  50
  51 UCHAR   CipherWpa2Template[] = {
  52                 0x30,                                   // RSN IE
  53                 0x14,                                   // Length
  54                 0x01, 0x00,                             // Version
  55                 0x00, 0x0f, 0xac, 0x02, // group cipher, TKIP
  56                 0x01, 0x00,                             // number of pairwise
  57                 0x00, 0x0f, 0xac, 0x02, // unicast
  58                 0x01, 0x00,                             // number of authentication method
  59                 0x00, 0x0f, 0xac, 0x02, // authentication
  60                 0x00, 0x00,                             // RSN capability
  61                 };
  62
  63 UCHAR   Ccx2IeInfo[] = { 0x00, 0x40, 0x96, 0x03, 0x02};
  64
  65 /*
  66         ==========================================================================
  67         Description:
  68                 association state machine init, including state transition and timer init
  69         Parameters:
  70                 S - pointer to the association state machine
  71
  72         IRQL = PASSIVE_LEVEL
  73
  74         ==========================================================================
  75  */
  76 VOID AssocStateMachineInit(
  77         IN      PRTMP_ADAPTER   pAd,
  78         IN  STATE_MACHINE *S,
  79         OUT STATE_MACHINE_FUNC Trans[])
  80 {
  81         StateMachineInit(S, Trans, MAX_ASSOC_STATE, MAX_ASSOC_MSG, (STATE_MACHINE_FUNC)Drop, ASSOC_IDLE, ASSOC_MACHINE_BASE);
  82
  83         // first column
  84         StateMachineSetAction(S, ASSOC_IDLE, MT2_MLME_ASSOC_REQ, (STATE_MACHINE_FUNC)MlmeAssocReqAction);
  85         StateMachineSetAction(S, ASSOC_IDLE, MT2_MLME_REASSOC_REQ, (STATE_MACHINE_FUNC)MlmeReassocReqAction);
  86         StateMachineSetAction(S, ASSOC_IDLE, MT2_MLME_DISASSOC_REQ, (STATE_MACHINE_FUNC)MlmeDisassocReqAction);
  87         StateMachineSetAction(S, ASSOC_IDLE, MT2_PEER_DISASSOC_REQ, (STATE_MACHINE_FUNC)PeerDisassocAction);
  88
  89         // second column
  90         StateMachineSetAction(S, ASSOC_WAIT_RSP, MT2_MLME_ASSOC_REQ, (STATE_MACHINE_FUNC)InvalidStateWhenAssoc);
  91         StateMachineSetAction(S, ASSOC_WAIT_RSP, MT2_MLME_REASSOC_REQ, (STATE_MACHINE_FUNC)InvalidStateWhenReassoc);
  92         StateMachineSetAction(S, ASSOC_WAIT_RSP, MT2_MLME_DISASSOC_REQ, (STATE_MACHINE_FUNC)InvalidStateWhenDisassociate);
  93         StateMachineSetAction(S, ASSOC_WAIT_RSP, MT2_PEER_DISASSOC_REQ, (STATE_MACHINE_FUNC)PeerDisassocAction);
  94         StateMachineSetAction(S, ASSOC_WAIT_RSP, MT2_PEER_ASSOC_RSP, (STATE_MACHINE_FUNC)PeerAssocRspAction);
  95         //
  96         // Patch 3Com AP MOde:3CRWE454G72
  97         // We send Assoc request frame to this AP, it always send Reassoc Rsp not Associate Rsp.
  98         //
  99         StateMachineSetAction(S, ASSOC_WAIT_RSP, MT2_PEER_REASSOC_RSP, (STATE_MACHINE_FUNC)PeerAssocRspAction);
 100         StateMachineSetAction(S, ASSOC_WAIT_RSP, MT2_ASSOC_TIMEOUT, (STATE_MACHINE_FUNC)AssocTimeoutAction);
 101
 102         // third column
 103         StateMachineSetAction(S, REASSOC_WAIT_RSP, MT2_MLME_ASSOC_REQ, (STATE_MACHINE_FUNC)InvalidStateWhenAssoc);
 104         StateMachineSetAction(S, REASSOC_WAIT_RSP, MT2_MLME_REASSOC_REQ, (STATE_MACHINE_FUNC)InvalidStateWhenReassoc);
 105         StateMachineSetAction(S, REASSOC_WAIT_RSP, MT2_MLME_DISASSOC_REQ, (STATE_MACHINE_FUNC)InvalidStateWhenDisassociate);
 106         StateMachineSetAction(S, REASSOC_WAIT_RSP, MT2_PEER_DISASSOC_REQ, (STATE_MACHINE_FUNC)PeerDisassocAction);
 107         StateMachineSetAction(S, REASSOC_WAIT_RSP, MT2_PEER_REASSOC_RSP, (STATE_MACHINE_FUNC)PeerReassocRspAction);
 108         //
 109         // Patch, AP doesn't send Reassociate Rsp frame to Station.
 110         //
 111         StateMachineSetAction(S, REASSOC_WAIT_RSP, MT2_PEER_ASSOC_RSP, (STATE_MACHINE_FUNC)PeerReassocRspAction);
 112         StateMachineSetAction(S, REASSOC_WAIT_RSP, MT2_REASSOC_TIMEOUT, (STATE_MACHINE_FUNC)ReassocTimeoutAction);
 113
 114         // fourth column
 115         StateMachineSetAction(S, DISASSOC_WAIT_RSP, MT2_MLME_ASSOC_REQ, (STATE_MACHINE_FUNC)InvalidStateWhenAssoc);
 116         StateMachineSetAction(S, DISASSOC_WAIT_RSP, MT2_MLME_REASSOC_REQ, (STATE_MACHINE_FUNC)InvalidStateWhenReassoc);
 117         StateMachineSetAction(S, DISASSOC_WAIT_RSP, MT2_MLME_DISASSOC_REQ, (STATE_MACHINE_FUNC)InvalidStateWhenDisassociate);
 118         StateMachineSetAction(S, DISASSOC_WAIT_RSP, MT2_PEER_DISASSOC_REQ, (STATE_MACHINE_FUNC)PeerDisassocAction);
 119         StateMachineSetAction(S, DISASSOC_WAIT_RSP, MT2_DISASSOC_TIMEOUT, (STATE_MACHINE_FUNC)DisassocTimeoutAction);
 120
 121         // initialize the timer
 122         RTMPInitTimer(pAd, &pAd->MlmeAux.AssocTimer, GET_TIMER_FUNCTION(AssocTimeout), pAd, FALSE);
 123         RTMPInitTimer(pAd, &pAd->MlmeAux.ReassocTimer, GET_TIMER_FUNCTION(ReassocTimeout), pAd, FALSE);
 124         RTMPInitTimer(pAd, &pAd->MlmeAux.DisassocTimer, GET_TIMER_FUNCTION(DisassocTimeout), pAd, FALSE);
 125 }
 126
 127 /*
 128         ==========================================================================
 129         Description:
 130                 Association timeout procedure. After association timeout, this function
 131                 will be called and it will put a message into the MLME queue
 132         Parameters:
 133                 Standard timer parameters
 134
 135         IRQL = DISPATCH_LEVEL
 136
 137         ==========================================================================
 138  */
 139 VOID AssocTimeout(IN PVOID SystemSpecific1,
 140                                  IN PVOID FunctionContext,
 141                                  IN PVOID SystemSpecific2,
 142                                  IN PVOID SystemSpecific3)
 143 {
 144         RTMP_ADAPTER *pAd = (RTMP_ADAPTER *)FunctionContext;
 145
 146         // Do nothing if the driver is starting halt state.
 147         // This might happen when timer already been fired before cancel timer with mlmehalt
 148         if (RTMP_TEST_FLAG(pAd, fRTMP_ADAPTER_HALT_IN_PROGRESS | fRTMP_ADAPTER_NIC_NOT_EXIST))
 149                 return;
 150
 151         MlmeEnqueue(pAd, ASSOC_STATE_MACHINE, MT2_ASSOC_TIMEOUT, 0, NULL);
 152         RT28XX_MLME_HANDLER(pAd);
 153 }
 154
 155 /*
 156         ==========================================================================
 157         Description:
 158                 Reassociation timeout procedure. After reassociation timeout, this
 159                 function will be called and put a message into the MLME queue
 160         Parameters:
 161                 Standard timer parameters
 162
 163         IRQL = DISPATCH_LEVEL
 164
 165         ==========================================================================
 166  */
 167 VOID ReassocTimeout(IN PVOID SystemSpecific1,
 168                                         IN PVOID FunctionContext,
 169                                         IN PVOID SystemSpecific2,
 170                                         IN PVOID SystemSpecific3)
 171 {
 172         RTMP_ADAPTER *pAd = (RTMP_ADAPTER *)FunctionContext;
 173
 174         // Do nothing if the driver is starting halt state.
 175         // This might happen when timer already been fired before cancel timer with mlmehalt
 176         if (RTMP_TEST_FLAG(pAd, fRTMP_ADAPTER_HALT_IN_PROGRESS | fRTMP_ADAPTER_NIC_NOT_EXIST))
 177                 return;
 178
 179         MlmeEnqueue(pAd, ASSOC_STATE_MACHINE, MT2_REASSOC_TIMEOUT, 0, NULL);
 180         RT28XX_MLME_HANDLER(pAd);
 181 }
 182
 183 /*
 184         ==========================================================================
 185         Description:
 186                 Disassociation timeout procedure. After disassociation timeout, this
 187                 function will be called and put a message into the MLME queue
 188         Parameters:
 189                 Standard timer parameters
 190
 191         IRQL = DISPATCH_LEVEL
 192
 193         ==========================================================================
 194  */
 195 VOID DisassocTimeout(IN PVOID SystemSpecific1,
 196                                         IN PVOID FunctionContext,
 197                                         IN PVOID SystemSpecific2,
 198                                         IN PVOID SystemSpecific3)
 199 {
 200         RTMP_ADAPTER *pAd = (RTMP_ADAPTER *)FunctionContext;
 201
 202         // Do nothing if the driver is starting halt state.
 203         // This might happen when timer already been fired before cancel timer with mlmehalt
 204         if (RTMP_TEST_FLAG(pAd, fRTMP_ADAPTER_HALT_IN_PROGRESS | fRTMP_ADAPTER_NIC_NOT_EXIST))
 205                 return;
 206
 207         MlmeEnqueue(pAd, ASSOC_STATE_MACHINE, MT2_DISASSOC_TIMEOUT, 0, NULL);
 208         RT28XX_MLME_HANDLER(pAd);
 209 }
 210
 211 /*
 212         ==========================================================================
 213         Description:
 214                 mlme assoc req handling procedure
 215         Parameters:
 216                 Adapter - Adapter pointer
 217                 Elem - MLME Queue Element
 218         Pre:
 219                 the station has been authenticated and the following information is stored in the config
 220                         -# SSID
 221                         -# supported rates and their length
 222                         -# listen interval (Adapter->StaCfg.default_listen_count)
 223                         -# Transmit power  (Adapter->StaCfg.tx_power)
 224         Post  :
 225                 -# An association request frame is generated and sent to the air
 226                 -# Association timer starts
 227                 -# Association state -> ASSOC_WAIT_RSP
 228
 229         IRQL = DISPATCH_LEVEL
 230
 231         ==========================================================================
 232  */
 233 VOID MlmeAssocReqAction(
 234         IN PRTMP_ADAPTER pAd,
 235         IN MLME_QUEUE_ELEM *Elem)
 236 {
 237         UCHAR                   ApAddr[6];
 238         HEADER_802_11   AssocHdr;
 239         UCHAR                   Ccx2Len = 5;
 240         UCHAR                   WmeIe[9] = {IE_VENDOR_SPECIFIC, 0x07, 0x00, 0x50, 0xf2, 0x02, 0x00, 0x01, 0x00};
 241         USHORT                  ListenIntv;
 242         ULONG                   Timeout;
 243         USHORT                  CapabilityInfo;
 244         BOOLEAN                 TimerCancelled;
 245         PUCHAR                  pOutBuffer = NULL;
 246         NDIS_STATUS             NStatus;
 247         ULONG                   FrameLen = 0;
 248         ULONG                   tmp;
 249         USHORT                  VarIesOffset;
 250         UCHAR                   CkipFlag;
 251         UCHAR                   CkipNegotiationBuffer[CKIP_NEGOTIATION_LENGTH];
 252         UCHAR                   AironetCkipIe = IE_AIRONET_CKIP;
 253         UCHAR                   AironetCkipLen = CKIP_NEGOTIATION_LENGTH;
 254         UCHAR                   AironetIPAddressIE = IE_AIRONET_IPADDRESS;
 255         UCHAR                   AironetIPAddressLen = AIRONET_IPADDRESS_LENGTH;
 256         UCHAR                   AironetIPAddressBuffer[AIRONET_IPADDRESS_LENGTH] = {0x00, 0x40, 0x96, 0x00, 0x00, 0x00, 0x00, 0x00, 0x02, 0x00};
 257         USHORT                  Status;
 258
 259         // Block all authentication request durning WPA block period
 260         if (pAd->StaCfg.bBlockAssoc == TRUE)
 261         {
 262                 DBGPRINT(RT_DEBUG_TRACE, ("ASSOC - Block Assoc request durning WPA block period!\n"));
 263                 pAd->Mlme.AssocMachine.CurrState = ASSOC_IDLE;
 264                 Status = MLME_STATE_MACHINE_REJECT;
 265                 MlmeEnqueue(pAd, MLME_CNTL_STATE_MACHINE, MT2_ASSOC_CONF, 2, &Status);
 266         }
 267         // check sanity first
 268         else if (MlmeAssocReqSanity(pAd, Elem->Msg, Elem->MsgLen, ApAddr, &CapabilityInfo, &Timeout, &ListenIntv))
 269         {
 270                 RTMPCancelTimer(&pAd->MlmeAux.AssocTimer, &TimerCancelled);
 271                 COPY_MAC_ADDR(pAd->MlmeAux.Bssid, ApAddr);
 272
 273                 // Get an unused nonpaged memory
 274                 NStatus = MlmeAllocateMemory(pAd, &pOutBuffer);
 275                 if (NStatus != NDIS_STATUS_SUCCESS)
 276                 {
 277                         DBGPRINT(RT_DEBUG_TRACE,("ASSOC - MlmeAssocReqAction() allocate memory failed \n"));
 278                         pAd->Mlme.AssocMachine.CurrState = ASSOC_IDLE;
 279                         Status = MLME_FAIL_NO_RESOURCE;
 280                         MlmeEnqueue(pAd, MLME_CNTL_STATE_MACHINE, MT2_ASSOC_CONF, 2, &Status);
 281                         return;
 282                 }
 283
 284                 // Add by James 03/06/27
 285                 pAd->StaCfg.AssocInfo.Length = sizeof(NDIS_802_11_ASSOCIATION_INFORMATION);
 286                 // Association don't need to report MAC address
 287                 pAd->StaCfg.AssocInfo.AvailableRequestFixedIEs =
 288                         NDIS_802_11_AI_REQFI_CAPABILITIES | NDIS_802_11_AI_REQFI_LISTENINTERVAL;
 289                 pAd->StaCfg.AssocInfo.RequestFixedIEs.Capabilities = CapabilityInfo;
 290                 pAd->StaCfg.AssocInfo.RequestFixedIEs.ListenInterval = ListenIntv;
 291                 // Only reassociate need this
 292                 //COPY_MAC_ADDR(pAd->StaCfg.AssocInfo.RequestFixedIEs.CurrentAPAddress, ApAddr);
 293                 pAd->StaCfg.AssocInfo.OffsetRequestIEs = sizeof(NDIS_802_11_ASSOCIATION_INFORMATION);
 294
 295         NdisZeroMemory(pAd->StaCfg.ReqVarIEs, MAX_VIE_LEN);
 296                 // First add SSID
 297                 VarIesOffset = 0;
 298                 NdisMoveMemory(pAd->StaCfg.ReqVarIEs + VarIesOffset, &SsidIe, 1);
 299                 VarIesOffset += 1;
 300                 NdisMoveMemory(pAd->StaCfg.ReqVarIEs + VarIesOffset, &pAd->MlmeAux.SsidLen, 1);
 301                 VarIesOffset += 1;
 302                 NdisMoveMemory(pAd->StaCfg.ReqVarIEs + VarIesOffset, pAd->MlmeAux.Ssid, pAd->MlmeAux.SsidLen);
 303                 VarIesOffset += pAd->MlmeAux.SsidLen;
 304
 305                 // Second add Supported rates
 306                 NdisMoveMemory(pAd->StaCfg.ReqVarIEs + VarIesOffset, &SupRateIe, 1);
 307                 VarIesOffset += 1;
 308                 NdisMoveMemory(pAd->StaCfg.ReqVarIEs + VarIesOffset, &pAd->MlmeAux.SupRateLen, 1);
 309                 VarIesOffset += 1;
 310                 NdisMoveMemory(pAd->StaCfg.ReqVarIEs + VarIesOffset, pAd->MlmeAux.SupRate, pAd->MlmeAux.SupRateLen);
 311                 VarIesOffset += pAd->MlmeAux.SupRateLen;
 312                 // End Add by James
 313
 314         if ((pAd->CommonCfg.Channel > 14) &&
 315             (pAd->CommonCfg.bIEEE80211H == TRUE))
 316             CapabilityInfo |= 0x0100;
 317
 318                 DBGPRINT(RT_DEBUG_TRACE, ("ASSOC - Send ASSOC request...\n"));
 319                 MgtMacHeaderInit(pAd, &AssocHdr, SUBTYPE_ASSOC_REQ, 0, ApAddr, ApAddr);
 320
 321                 // Build basic frame first
 322                 MakeOutgoingFrame(pOutBuffer,                           &FrameLen,
 323                                                   sizeof(HEADER_802_11),        &AssocHdr,
 324                                                   2,                                            &CapabilityInfo,
 325                                                   2,                                            &ListenIntv,
 326                                                   1,                                            &SsidIe,
 327                                                   1,                                            &pAd->MlmeAux.SsidLen,
 328                                                   pAd->MlmeAux.SsidLen,         pAd->MlmeAux.Ssid,
 329                                                   1,                                            &SupRateIe,
 330                                                   1,                                            &pAd->MlmeAux.SupRateLen,
 331                                                   pAd->MlmeAux.SupRateLen,  pAd->MlmeAux.SupRate,
 332                                                   END_OF_ARGS);
 333
 334                 if (pAd->MlmeAux.ExtRateLen != 0)
 335                 {
 336                         MakeOutgoingFrame(pOutBuffer + FrameLen,    &tmp,
 337                                                           1,                        &ExtRateIe,
 338                                                           1,                        &pAd->MlmeAux.ExtRateLen,
 339                                                           pAd->MlmeAux.ExtRateLen,  pAd->MlmeAux.ExtRate,
 340                                                           END_OF_ARGS);
 341                         FrameLen += tmp;
 342                 }
 343
 344                 // HT
 345                 if ((pAd->MlmeAux.HtCapabilityLen > 0) && (pAd->CommonCfg.PhyMode >= PHY_11ABGN_MIXED))
 346                 {
 347                         ULONG TmpLen;
 348                         UCHAR HtLen;
 349                         UCHAR BROADCOM[4] = {0x0, 0x90, 0x4c, 0x33};
 350                         if (pAd->StaActive.SupportedPhyInfo.bPreNHt == TRUE)
 351                         {
 352                                 HtLen = SIZE_HT_CAP_IE + 4;
 353                                 MakeOutgoingFrame(pOutBuffer + FrameLen,            &TmpLen,
 354                                                           1,                                &WpaIe,
 355                                                           1,                                &HtLen,
 356                                                           4,                                &BROADCOM[0],
 357                                                          pAd->MlmeAux.HtCapabilityLen,          &pAd->MlmeAux.HtCapability,
 358                                                           END_OF_ARGS);
 359                         }
 360                         else
 361                         {
 362                                 MakeOutgoingFrame(pOutBuffer + FrameLen,            &TmpLen,
 363                                                           1,                                &HtCapIe,
 364                                                           1,                                &pAd->MlmeAux.HtCapabilityLen,
 365                                                          pAd->MlmeAux.HtCapabilityLen,          &pAd->MlmeAux.HtCapability,
 366                                                           END_OF_ARGS);
 367                         }
 368                         FrameLen += TmpLen;
 369                 }
 370
 371                 // add Ralink proprietary IE to inform AP this STA is going to use AGGREGATION or PIGGY-BACK+AGGREGATION
 372                 // Case I: (Aggregation + Piggy-Back)
 373                 // 1. user enable aggregation, AND
 374                 // 2. Mac support piggy-back
 375                 // 3. AP annouces it's PIGGY-BACK+AGGREGATION-capable in BEACON
 376                 // Case II: (Aggregation)
 377                 // 1. user enable aggregation, AND
 378                 // 2. AP annouces it's AGGREGATION-capable in BEACON
 379                 if (pAd->CommonCfg.bAggregationCapable)
 380                 {
 381                         if ((pAd->CommonCfg.bPiggyBackCapable) && ((pAd->MlmeAux.APRalinkIe & 0x00000003) == 3))
 382                         {
 383                                 ULONG TmpLen;
 384                                 UCHAR RalinkIe[9] = {IE_VENDOR_SPECIFIC, 7, 0x00, 0x0c, 0x43, 0x03, 0x00, 0x00, 0x00};
 385                                 MakeOutgoingFrame(pOutBuffer+FrameLen,           &TmpLen,
 386                                                                   9,                             RalinkIe,
 387                                                                   END_OF_ARGS);
 388                                 FrameLen += TmpLen;
 389                         }
 390                         else if (pAd->MlmeAux.APRalinkIe & 0x00000001)
 391                         {
 392                                 ULONG TmpLen;
 393                                 UCHAR RalinkIe[9] = {IE_VENDOR_SPECIFIC, 7, 0x00, 0x0c, 0x43, 0x01, 0x00, 0x00, 0x00};
 394                                 MakeOutgoingFrame(pOutBuffer+FrameLen,           &TmpLen,
 395                                                                   9,                             RalinkIe,
 396                                                                   END_OF_ARGS);
 397                                 FrameLen += TmpLen;
 398                         }
 399                 }
 400                 else
 401                 {
 402                         ULONG TmpLen;
 403                         UCHAR RalinkIe[9] = {IE_VENDOR_SPECIFIC, 7, 0x00, 0x0c, 0x43, 0x06, 0x00, 0x00, 0x00};
 404                         MakeOutgoingFrame(pOutBuffer+FrameLen,           &TmpLen,
 405                                                           9,                                             RalinkIe,
 406                                                           END_OF_ARGS);
 407                         FrameLen += TmpLen;
 408                 }
 409
 410                 if (pAd->MlmeAux.APEdcaParm.bValid)
 411                 {
 412                         if (pAd->CommonCfg.bAPSDCapable && pAd->MlmeAux.APEdcaParm.bAPSDCapable)
 413                         {
 414                                 QBSS_STA_INFO_PARM QosInfo;
 415
 416                                 NdisZeroMemory(&QosInfo, sizeof(QBSS_STA_INFO_PARM));
 417                                 QosInfo.UAPSD_AC_BE = pAd->CommonCfg.bAPSDAC_BE;
 418                                 QosInfo.UAPSD_AC_BK = pAd->CommonCfg.bAPSDAC_BK;
 419                                 QosInfo.UAPSD_AC_VI = pAd->CommonCfg.bAPSDAC_VI;
 420                                 QosInfo.UAPSD_AC_VO = pAd->CommonCfg.bAPSDAC_VO;
 421                                 QosInfo.MaxSPLength = pAd->CommonCfg.MaxSPLength;
 422                                 WmeIe[8] |= *(PUCHAR)&QosInfo;
 423                         }
 424                         else
 425                         {
 426                 // The Parameter Set Count is set to ¡§0¡¨ in the association request frames
 427                 // WmeIe[8] |= (pAd->MlmeAux.APEdcaParm.EdcaUpdateCount & 0x0f);
 428                         }
 429
 430                         MakeOutgoingFrame(pOutBuffer + FrameLen,    &tmp,
 431                                                           9,                        &WmeIe[0],
 432                                                           END_OF_ARGS);
 433                         FrameLen += tmp;
 434                 }
 435
 436                 //
 437                 // Let WPA(#221) Element ID on the end of this association frame.
 438                 // Otherwise some AP will fail on parsing Element ID and set status fail on Assoc Rsp.
 439                 // For example: Put Vendor Specific IE on the front of WPA IE.
 440                 // This happens on AP (Model No:Linksys WRK54G)
 441                 //
 442                 if (((pAd->StaCfg.AuthMode == Ndis802_11AuthModeWPAPSK) ||
 443             (pAd->StaCfg.AuthMode == Ndis802_11AuthModeWPA2PSK) ||
 444             (pAd->StaCfg.AuthMode == Ndis802_11AuthModeWPA) ||
 445             (pAd->StaCfg.AuthMode == Ndis802_11AuthModeWPA2)
 446                         )
 447             )
 448                 {
 449                         UCHAR RSNIe = IE_WPA;
 450
 451                         if ((pAd->StaCfg.AuthMode == Ndis802_11AuthModeWPA2PSK) ||
 452                 (pAd->StaCfg.AuthMode == Ndis802_11AuthModeWPA2))
 453                         {
 454                                 RSNIe = IE_WPA2;
 455                         }
 456
 457 #ifdef SIOCSIWGENIE
 458                         if (pAd->StaCfg.WpaSupplicantUP != 1)
 459 #endif // SIOCSIWGENIE //
 460                 RTMPMakeRSNIE(pAd, pAd->StaCfg.AuthMode, pAd->StaCfg.WepStatus, BSS0);
 461
 462             // Check for WPA PMK cache list
 463                         if (pAd->StaCfg.AuthMode == Ndis802_11AuthModeWPA2)
 464                         {
 465                             INT     idx;
 466                 BOOLEAN FoundPMK = FALSE;
 467                                 // Search chched PMKID, append it if existed
 468                                 for (idx = 0; idx < PMKID_NO; idx++)
 469                                 {
 470                                         if (NdisEqualMemory(ApAddr, &pAd->StaCfg.SavedPMK[idx].BSSID, 6))
 471                                         {
 472                                                 FoundPMK = TRUE;
 473                                                 break;
 474                                         }
 475                                 }
 476
 477                                 if (FoundPMK)
 478                                 {
 479                                         // Set PMK number
 480                                         *(PUSHORT) &pAd->StaCfg.RSN_IE[pAd->StaCfg.RSNIE_Len] = 1;
 481                                         NdisMoveMemory(&pAd->StaCfg.RSN_IE[pAd->StaCfg.RSNIE_Len + 2], &pAd->StaCfg.SavedPMK[idx].PMKID, 16);
 482                     pAd->StaCfg.RSNIE_Len += 18;
 483                                 }
 484                         }
 485
 486 #ifdef SIOCSIWGENIE
 487                         if (pAd->StaCfg.WpaSupplicantUP == 1)
 488                         {
 489                                 MakeOutgoingFrame(pOutBuffer + FrameLen,                &tmp,
 490                                                 pAd->StaCfg.RSNIE_Len,                  pAd->StaCfg.RSN_IE,
 491                                                 END_OF_ARGS);
 492                         }
 493                         else
 494 #endif
 495                         {
 496                                 MakeOutgoingFrame(pOutBuffer + FrameLen,                &tmp,
 497                                                         1,                              &RSNIe,
 498                                                 1,                              &pAd->StaCfg.RSNIE_Len,
 499                                                 pAd->StaCfg.RSNIE_Len,                  pAd->StaCfg.RSN_IE,
 500                                                 END_OF_ARGS);
 501                         }
 502
 503                         FrameLen += tmp;
 504
 505 #ifdef SIOCSIWGENIE
 506                         if (pAd->StaCfg.WpaSupplicantUP != 1)
 507 #endif
 508                         {
 509                     // Append Variable IE
 510                     NdisMoveMemory(pAd->StaCfg.ReqVarIEs + VarIesOffset, &RSNIe, 1);
 511                     VarIesOffset += 1;
 512                     NdisMoveMemory(pAd->StaCfg.ReqVarIEs + VarIesOffset, &pAd->StaCfg.RSNIE_Len, 1);
 513                     VarIesOffset += 1;
 514                         }
 515                         NdisMoveMemory(pAd->StaCfg.ReqVarIEs + VarIesOffset, pAd->StaCfg.RSN_IE, pAd->StaCfg.RSNIE_Len);
 516                         VarIesOffset += pAd->StaCfg.RSNIE_Len;
 517
 518                         // Set Variable IEs Length
 519                         pAd->StaCfg.ReqVarIELen = VarIesOffset;
 520                 }
 521
 522                 // We have update that at PeerBeaconAtJoinRequest()
 523                 CkipFlag = pAd->StaCfg.CkipFlag;
 524                 if (CkipFlag != 0)
 525                 {
 526                         NdisZeroMemory(CkipNegotiationBuffer, CKIP_NEGOTIATION_LENGTH);
 527                         CkipNegotiationBuffer[2] = 0x66;
 528                         // Make it try KP & MIC, since we have to follow the result from AssocRsp
 529                         CkipNegotiationBuffer[8] = 0x18;
 530                         CkipNegotiationBuffer[CKIP_NEGOTIATION_LENGTH - 1] = 0x22;
 531                         CkipFlag = 0x18;
 532
 533                         MakeOutgoingFrame(pOutBuffer + FrameLen,        &tmp,
 534                                                 1,                                                              &AironetCkipIe,
 535                                                 1,                                                              &AironetCkipLen,
 536                                                 AironetCkipLen,                                 CkipNegotiationBuffer,
 537                                                 END_OF_ARGS);
 538                         FrameLen += tmp;
 539                 }
 540
 541                 // Add CCX v2 request if CCX2 admin state is on
 542                 if (pAd->StaCfg.CCXControl.field.Enable == 1)
 543                 {
 544
 545                         //
 546                         // Add AironetIPAddressIE for Cisco CCX 2.X
 547                         // Add CCX Version
 548                         //
 549                         MakeOutgoingFrame(pOutBuffer + FrameLen, &tmp,
 550                                                 1,                                                      &AironetIPAddressIE,
 551                                                 1,                                                      &AironetIPAddressLen,
 552                                                 AironetIPAddressLen,            AironetIPAddressBuffer,
 553                                                 1,                                                      &Ccx2Ie,
 554                                                 1,                                                      &Ccx2Len,
 555                                                 Ccx2Len,                                    Ccx2IeInfo,
 556                                                 END_OF_ARGS);
 557                         FrameLen += tmp;
 558
 559                         // Add by James 03/06/27
 560                         // Set Variable IEs Length
 561                         pAd->StaCfg.ReqVarIELen = VarIesOffset;
 562                         pAd->StaCfg.AssocInfo.RequestIELength = VarIesOffset;
 563
 564                         // OffsetResponseIEs follow ReqVarIE
 565                         pAd->StaCfg.AssocInfo.OffsetResponseIEs = sizeof(NDIS_802_11_ASSOCIATION_INFORMATION) + pAd->StaCfg.ReqVarIELen;
 566                         // End Add by James
 567                 }
 568
 569
 570                 MiniportMMRequest(pAd, 0, pOutBuffer, FrameLen);
 571                 MlmeFreeMemory(pAd, pOutBuffer);
 572
 573                 RTMPSetTimer(&pAd->MlmeAux.AssocTimer, Timeout);
 574                 pAd->Mlme.AssocMachine.CurrState = ASSOC_WAIT_RSP;
 575         }
 576         else
 577         {
 578                 DBGPRINT(RT_DEBUG_TRACE,("ASSOC - MlmeAssocReqAction() sanity check failed. BUG!!!!!! \n"));
 579                 pAd->Mlme.AssocMachine.CurrState = ASSOC_IDLE;
 580                 Status = MLME_INVALID_FORMAT;
 581                 MlmeEnqueue(pAd, MLME_CNTL_STATE_MACHINE, MT2_ASSOC_CONF, 2, &Status);
 582         }
 583
 584 }
 585
 586 /*
 587         ==========================================================================
 588         Description:
 589                 mlme reassoc req handling procedure
 590         Parameters:
 591                 Elem -
 592         Pre:
 593                 -# SSID  (Adapter->StaCfg.ssid[])
 594                 -# BSSID (AP address, Adapter->StaCfg.bssid)
 595                 -# Supported rates (Adapter->StaCfg.supported_rates[])
 596                 -# Supported rates length (Adapter->StaCfg.supported_rates_len)
 597                 -# Tx power (Adapter->StaCfg.tx_power)
 598
 599         IRQL = DISPATCH_LEVEL
 600
 601         ==========================================================================
 602  */
 603 VOID MlmeReassocReqAction(
 604         IN PRTMP_ADAPTER pAd,
 605         IN MLME_QUEUE_ELEM *Elem)
 606 {
 607         UCHAR                   ApAddr[6];
 608         HEADER_802_11   ReassocHdr;
 609         UCHAR                   Ccx2Len = 5;
 610         UCHAR                   WmeIe[9] = {IE_VENDOR_SPECIFIC, 0x07, 0x00, 0x50, 0xf2, 0x02, 0x00, 0x01, 0x00};
 611         USHORT                  CapabilityInfo, ListenIntv;
 612         ULONG                   Timeout;
 613         ULONG                   FrameLen = 0;
 614         BOOLEAN                 TimerCancelled;
 615         NDIS_STATUS             NStatus;
 616         ULONG                   tmp;
 617         PUCHAR                  pOutBuffer = NULL;
 618         USHORT                  Status;
 619
 620         // Block all authentication request durning WPA block period
 621         if (pAd->StaCfg.bBlockAssoc == TRUE)
 622         {
 623                 DBGPRINT(RT_DEBUG_TRACE, ("ASSOC - Block ReAssoc request durning WPA block period!\n"));
 624                 pAd->Mlme.AssocMachine.CurrState = ASSOC_IDLE;
 625                 Status = MLME_STATE_MACHINE_REJECT;
 626                 MlmeEnqueue(pAd, MLME_CNTL_STATE_MACHINE, MT2_REASSOC_CONF, 2, &Status);
 627         }
 628         // the parameters are the same as the association
 629         else if(MlmeAssocReqSanity(pAd, Elem->Msg, Elem->MsgLen, ApAddr, &CapabilityInfo, &Timeout, &ListenIntv))
 630         {
 631                 RTMPCancelTimer(&pAd->MlmeAux.ReassocTimer, &TimerCancelled);
 632
 633                 NStatus = MlmeAllocateMemory(pAd, &pOutBuffer);  //Get an unused nonpaged memory
 634                 if(NStatus != NDIS_STATUS_SUCCESS)
 635                 {
 636                         DBGPRINT(RT_DEBUG_TRACE,("ASSOC - MlmeReassocReqAction() allocate memory failed \n"));
 637                         pAd->Mlme.AssocMachine.CurrState = ASSOC_IDLE;
 638                         Status = MLME_FAIL_NO_RESOURCE;
 639                         MlmeEnqueue(pAd, MLME_CNTL_STATE_MACHINE, MT2_REASSOC_CONF, 2, &Status);
 640                         return;
 641                 }
 642
 643                 COPY_MAC_ADDR(pAd->MlmeAux.Bssid, ApAddr);
 644
 645                 // make frame, use bssid as the AP address??
 646                 DBGPRINT(RT_DEBUG_TRACE, ("ASSOC - Send RE-ASSOC request...\n"));
 647                 MgtMacHeaderInit(pAd, &ReassocHdr, SUBTYPE_REASSOC_REQ, 0, ApAddr, ApAddr);
 648                 MakeOutgoingFrame(pOutBuffer,               &FrameLen,
 649                                                   sizeof(HEADER_802_11),    &ReassocHdr,
 650                                                   2,                        &CapabilityInfo,
 651                                                   2,                        &ListenIntv,
 652                                                   MAC_ADDR_LEN,             ApAddr,
 653                                                   1,                        &SsidIe,
 654                                                   1,                        &pAd->MlmeAux.SsidLen,
 655                                                   pAd->MlmeAux.SsidLen,     pAd->MlmeAux.Ssid,
 656                                                   1,                        &SupRateIe,
 657                                                   1,                                            &pAd->MlmeAux.SupRateLen,
 658                                                   pAd->MlmeAux.SupRateLen,  pAd->MlmeAux.SupRate,
 659                                                   END_OF_ARGS);
 660
 661                 if (pAd->MlmeAux.ExtRateLen != 0)
 662                 {
 663                         MakeOutgoingFrame(pOutBuffer + FrameLen,        &tmp,
 664                                                           1,                            &ExtRateIe,
 665                                                           1,                            &pAd->MlmeAux.ExtRateLen,
 666                                                           pAd->MlmeAux.ExtRateLen,          pAd->MlmeAux.ExtRate,
 667                                                           END_OF_ARGS);
 668                         FrameLen += tmp;
 669                 }
 670
 671                 if (pAd->MlmeAux.APEdcaParm.bValid)
 672                 {
 673                         if (pAd->CommonCfg.bAPSDCapable && pAd->MlmeAux.APEdcaParm.bAPSDCapable)
 674                         {
 675                                 QBSS_STA_INFO_PARM QosInfo;
 676
 677                                 NdisZeroMemory(&QosInfo, sizeof(QBSS_STA_INFO_PARM));
 678                                 QosInfo.UAPSD_AC_BE = pAd->CommonCfg.bAPSDAC_BE;
 679                                 QosInfo.UAPSD_AC_BK = pAd->CommonCfg.bAPSDAC_BK;
 680                                 QosInfo.UAPSD_AC_VI = pAd->CommonCfg.bAPSDAC_VI;
 681                                 QosInfo.UAPSD_AC_VO = pAd->CommonCfg.bAPSDAC_VO;
 682                                 QosInfo.MaxSPLength = pAd->CommonCfg.MaxSPLength;
 683                                 WmeIe[8] |= *(PUCHAR)&QosInfo;
 684                         }
 685
 686                         MakeOutgoingFrame(pOutBuffer + FrameLen,    &tmp,
 687                                                           9,                        &WmeIe[0],
 688                                                           END_OF_ARGS);
 689                         FrameLen += tmp;
 690                 }
 691
 692                 // HT
 693                 if ((pAd->MlmeAux.HtCapabilityLen > 0) && (pAd->CommonCfg.PhyMode >= PHY_11ABGN_MIXED))
 694                 {
 695                         ULONG TmpLen;
 696                         UCHAR HtLen;
 697                         UCHAR BROADCOM[4] = {0x0, 0x90, 0x4c, 0x33};
 698                         if (pAd->StaActive.SupportedPhyInfo.bPreNHt == TRUE)
 699                         {
 700                                 HtLen = SIZE_HT_CAP_IE + 4;
 701                                 MakeOutgoingFrame(pOutBuffer + FrameLen,            &TmpLen,
 702                                                           1,                                &WpaIe,
 703                                                           1,                                &HtLen,
 704                                                           4,                                &BROADCOM[0],
 705                                                          pAd->MlmeAux.HtCapabilityLen,          &pAd->MlmeAux.HtCapability,
 706                                                           END_OF_ARGS);
 707                         }
 708                         else
 709                         {
 710                                 MakeOutgoingFrame(pOutBuffer + FrameLen,            &TmpLen,
 711                                                           1,                                &HtCapIe,
 712                                                           1,                                &pAd->MlmeAux.HtCapabilityLen,
 713                                                          pAd->MlmeAux.HtCapabilityLen,          &pAd->MlmeAux.HtCapability,
 714                                                           END_OF_ARGS);
 715                         }
 716                         FrameLen += TmpLen;
 717                 }
 718
 719                 // add Ralink proprietary IE to inform AP this STA is going to use AGGREGATION or PIGGY-BACK+AGGREGATION
 720                 // Case I: (Aggregation + Piggy-Back)
 721                 // 1. user enable aggregation, AND
 722                 // 2. Mac support piggy-back
 723                 // 3. AP annouces it's PIGGY-BACK+AGGREGATION-capable in BEACON
 724                 // Case II: (Aggregation)
 725                 // 1. user enable aggregation, AND
 726                 // 2. AP annouces it's AGGREGATION-capable in BEACON
 727                 if (pAd->CommonCfg.bAggregationCapable)
 728                 {
 729                         if ((pAd->CommonCfg.bPiggyBackCapable) && ((pAd->MlmeAux.APRalinkIe & 0x00000003) == 3))
 730                         {
 731                                 ULONG TmpLen;
 732                                 UCHAR RalinkIe[9] = {IE_VENDOR_SPECIFIC, 7, 0x00, 0x0c, 0x43, 0x03, 0x00, 0x00, 0x00};
 733                                 MakeOutgoingFrame(pOutBuffer+FrameLen,           &TmpLen,
 734                                                                   9,                             RalinkIe,
 735                                                                   END_OF_ARGS);
 736                                 FrameLen += TmpLen;
 737                         }
 738                         else if (pAd->MlmeAux.APRalinkIe & 0x00000001)
 739                         {
 740                                 ULONG TmpLen;
 741                                 UCHAR RalinkIe[9] = {IE_VENDOR_SPECIFIC, 7, 0x00, 0x0c, 0x43, 0x01, 0x00, 0x00, 0x00};
 742                                 MakeOutgoingFrame(pOutBuffer+FrameLen,           &TmpLen,
 743                                                                   9,                             RalinkIe,
 744                                                                   END_OF_ARGS);
 745                                 FrameLen += TmpLen;
 746                         }
 747                 }
 748                 else
 749                 {
 750                         ULONG TmpLen;
 751                         UCHAR RalinkIe[9] = {IE_VENDOR_SPECIFIC, 7, 0x00, 0x0c, 0x43, 0x04, 0x00, 0x00, 0x00};
 752                         MakeOutgoingFrame(pOutBuffer+FrameLen,           &TmpLen,
 753                                                           9,                                             RalinkIe,
 754                                                           END_OF_ARGS);
 755                         FrameLen += TmpLen;
 756                 }
 757
 758                 // Add CCX v2 request if CCX2 admin state is on
 759                 if (pAd->StaCfg.CCXControl.field.Enable == 1)
 760                 {
 761                         //
 762                         // Add CCX Version
 763                         //
 764                         MakeOutgoingFrame(pOutBuffer + FrameLen, &tmp,
 765                                                 1,                                                      &Ccx2Ie,
 766                                                 1,                                                      &Ccx2Len,
 767                                                 Ccx2Len,                                    Ccx2IeInfo,
 768                                                 END_OF_ARGS);
 769                         FrameLen += tmp;
 770                 }
 771
 772                 MiniportMMRequest(pAd, 0, pOutBuffer, FrameLen);
 773                 MlmeFreeMemory(pAd, pOutBuffer);
 774
 775                 RTMPSetTimer(&pAd->MlmeAux.ReassocTimer, Timeout); /* in mSec */
 776                 pAd->Mlme.AssocMachine.CurrState = REASSOC_WAIT_RSP;
 777         }
 778         else
 779         {
 780                 DBGPRINT(RT_DEBUG_TRACE,("ASSOC - MlmeReassocReqAction() sanity check failed. BUG!!!! \n"));
 781                 pAd->Mlme.AssocMachine.CurrState = ASSOC_IDLE;
 782                 Status = MLME_INVALID_FORMAT;
 783                 MlmeEnqueue(pAd, MLME_CNTL_STATE_MACHINE, MT2_REASSOC_CONF, 2, &Status);
 784         }
 785 }
 786
 787 /*
 788         ==========================================================================
 789         Description:
 790                 Upper layer issues disassoc request
 791         Parameters:
 792                 Elem -
 793
 794         IRQL = PASSIVE_LEVEL
 795
 796         ==========================================================================
 797  */
 798 VOID MlmeDisassocReqAction(
 799         IN PRTMP_ADAPTER pAd,
 800         IN MLME_QUEUE_ELEM *Elem)
 801 {
 802         PMLME_DISASSOC_REQ_STRUCT pDisassocReq;
 803         HEADER_802_11         DisassocHdr;
 804         PHEADER_802_11        pDisassocHdr;
 805         PUCHAR                pOutBuffer = NULL;
 806         ULONG                 FrameLen = 0;
 807         NDIS_STATUS           NStatus;
 808         BOOLEAN               TimerCancelled;
 809         ULONG                 Timeout = 0;
 810         USHORT                Status;
 811
 812         // skip sanity check
 813         pDisassocReq = (PMLME_DISASSOC_REQ_STRUCT)(Elem->Msg);
 814
 815         NStatus = MlmeAllocateMemory(pAd, &pOutBuffer);  //Get an unused nonpaged memory
 816         if (NStatus != NDIS_STATUS_SUCCESS)
 817         {
 818                 DBGPRINT(RT_DEBUG_TRACE, ("ASSOC - MlmeDisassocReqAction() allocate memory failed\n"));
 819                 pAd->Mlme.AssocMachine.CurrState = ASSOC_IDLE;
 820                 Status = MLME_FAIL_NO_RESOURCE;
 821                 MlmeEnqueue(pAd, MLME_CNTL_STATE_MACHINE, MT2_DISASSOC_CONF, 2, &Status);
 822                 return;
 823         }
 824
 825
 826
 827         RTMPCancelTimer(&pAd->MlmeAux.DisassocTimer, &TimerCancelled);
 828
 829         DBGPRINT(RT_DEBUG_TRACE, ("ASSOC - Send DISASSOC request[BSSID::%02x:%02x:%02x:%02x:%02x:%02x (Reason=%d)\n",
 830                                 pDisassocReq->Addr[0], pDisassocReq->Addr[1], pDisassocReq->Addr[2],
 831                                 pDisassocReq->Addr[3], pDisassocReq->Addr[4], pDisassocReq->Addr[5], pDisassocReq->Reason));
 832         MgtMacHeaderInit(pAd, &DisassocHdr, SUBTYPE_DISASSOC, 0, pDisassocReq->Addr, pDisassocReq->Addr);       // patch peap ttls switching issue
 833         MakeOutgoingFrame(pOutBuffer,           &FrameLen,
 834                                           sizeof(HEADER_802_11),&DisassocHdr,
 835                                           2,                    &pDisassocReq->Reason,
 836                                           END_OF_ARGS);
 837         MiniportMMRequest(pAd, 0, pOutBuffer, FrameLen);
 838
 839         // To patch Instance and Buffalo(N) AP
 840         // Driver has to send deauth to Instance AP, but Buffalo(N) needs to send disassoc to reset Authenticator's state machine
 841         // Therefore, we send both of them.
 842         pDisassocHdr = (PHEADER_802_11)pOutBuffer;
 843         pDisassocHdr->FC.SubType = SUBTYPE_DEAUTH;
 844         MiniportMMRequest(pAd, 0, pOutBuffer, FrameLen);
 845
 846         MlmeFreeMemory(pAd, pOutBuffer);
 847
 848         pAd->StaCfg.DisassocReason = REASON_DISASSOC_STA_LEAVING;
 849         COPY_MAC_ADDR(pAd->StaCfg.DisassocSta, pDisassocReq->Addr);
 850
 851         RTMPSetTimer(&pAd->MlmeAux.DisassocTimer, Timeout); /* in mSec */
 852         pAd->Mlme.AssocMachine.CurrState = DISASSOC_WAIT_RSP;
 853
 854     {
 855         union iwreq_data    wrqu;
 856         memset(wrqu.ap_addr.sa_data, 0, MAC_ADDR_LEN);
 857         wireless_send_event(pAd->net_dev, SIOCGIWAP, &wrqu, NULL);
 858     }
 859 }
 860
 861 /*
 862         ==========================================================================
 863         Description:
 864                 peer sends assoc rsp back
 865         Parameters:
 866                 Elme - MLME message containing the received frame
 867
 868         IRQL = DISPATCH_LEVEL
 869
 870         ==========================================================================
 871  */
 872 VOID PeerAssocRspAction(
 873         IN PRTMP_ADAPTER pAd,
 874         IN MLME_QUEUE_ELEM *Elem)
 875 {
 876         USHORT        CapabilityInfo, Status, Aid;
 877         UCHAR         SupRate[MAX_LEN_OF_SUPPORTED_RATES], SupRateLen;
 878         UCHAR         ExtRate[MAX_LEN_OF_SUPPORTED_RATES], ExtRateLen;
 879         UCHAR         Addr2[MAC_ADDR_LEN];
 880         BOOLEAN       TimerCancelled;
 881         UCHAR         CkipFlag;
 882         EDCA_PARM     EdcaParm;
 883         HT_CAPABILITY_IE                HtCapability;
 884         ADD_HT_INFO_IE          AddHtInfo;      // AP might use this additional ht info IE
 885         UCHAR                   HtCapabilityLen;
 886         UCHAR                   AddHtInfoLen;
 887         UCHAR                   NewExtChannelOffset = 0xff;
 888
 889         if (PeerAssocRspSanity(pAd, Elem->Msg, Elem->MsgLen, Addr2, &CapabilityInfo, &Status, &Aid, SupRate, &SupRateLen, ExtRate, &ExtRateLen,
 890                 &HtCapability,&AddHtInfo, &HtCapabilityLen,&AddHtInfoLen,&NewExtChannelOffset, &EdcaParm, &CkipFlag))
 891         {
 892                 // The frame is for me ?
 893                 if(MAC_ADDR_EQUAL(Addr2, pAd->MlmeAux.Bssid))
 894                 {
 895                         DBGPRINT(RT_DEBUG_TRACE, ("PeerAssocRspAction():ASSOC - receive ASSOC_RSP to me (status=%d)\n", Status));
 896                         DBGPRINT(RT_DEBUG_TRACE, ("PeerAssocRspAction():MacTable [%d].AMsduSize = %d. ClientStatusFlags = 0x%lx \n",Elem->Wcid, pAd->MacTab.Content[BSSID_WCID].AMsduSize, pAd->MacTab.Content[BSSID_WCID].ClientStatusFlags));
 897                         RTMPCancelTimer(&pAd->MlmeAux.AssocTimer, &TimerCancelled);
 898                         if(Status == MLME_SUCCESS)
 899                         {
 900                                 UCHAR                   MaxSupportedRateIn500Kbps = 0;
 901                                 UCHAR                   idx;
 902
 903                                 // supported rates array may not be sorted. sort it and find the maximum rate
 904                             for (idx=0; idx<SupRateLen; idx++)
 905                 {
 906                                 if (MaxSupportedRateIn500Kbps < (SupRate[idx] & 0x7f))
 907                                     MaxSupportedRateIn500Kbps = SupRate[idx] & 0x7f;
 908                 }
 909
 910                                 for (idx=0; idx<ExtRateLen; idx++)
 911                 {
 912                                 if (MaxSupportedRateIn500Kbps < (ExtRate[idx] & 0x7f))
 913                                     MaxSupportedRateIn500Kbps = ExtRate[idx] & 0x7f;
 914                 }
 915                                 // go to procedure listed on page 376
 916                                 AssocPostProc(pAd, Addr2, CapabilityInfo, Aid, SupRate, SupRateLen, ExtRate, ExtRateLen,
 917                                         &EdcaParm, &HtCapability, HtCapabilityLen, &AddHtInfo);
 918
 919                                 StaAddMacTableEntry(pAd, &pAd->MacTab.Content[BSSID_WCID], MaxSupportedRateIn500Kbps, &HtCapability, HtCapabilityLen, CapabilityInfo);
 920
 921                                 pAd->StaCfg.CkipFlag = CkipFlag;
 922                                 if (CkipFlag & 0x18)
 923                                 {
 924                                         NdisZeroMemory(pAd->StaCfg.TxSEQ, 4);
 925                                         NdisZeroMemory(pAd->StaCfg.RxSEQ, 4);
 926                                         NdisZeroMemory(pAd->StaCfg.CKIPMIC, 4);
 927                                         pAd->StaCfg.GIV[0] = RandomByte(pAd);
 928                                         pAd->StaCfg.GIV[1] = RandomByte(pAd);
 929                                         pAd->StaCfg.GIV[2] = RandomByte(pAd);
 930                                         pAd->StaCfg.bCkipOn = TRUE;
 931                                         DBGPRINT(RT_DEBUG_TRACE, ("<CCX> pAd->StaCfg.CkipFlag = 0x%02x\n", pAd->StaCfg.CkipFlag));
 932                                 }
 933                         }
 934                         else
 935                         {
 936                         }
 937                         pAd->Mlme.AssocMachine.CurrState = ASSOC_IDLE;
 938                         MlmeEnqueue(pAd, MLME_CNTL_STATE_MACHINE, MT2_ASSOC_CONF, 2, &Status);
 939                 }
 940         }
 941         else
 942         {
 943                 DBGPRINT(RT_DEBUG_TRACE, ("ASSOC - PeerAssocRspAction() sanity check fail\n"));
 944         }
 945 }
 946
 947 /*
 948         ==========================================================================
 949         Description:
 950                 peer sends reassoc rsp
 951         Parametrs:
 952                 Elem - MLME message cntaining the received frame
 953
 954         IRQL = DISPATCH_LEVEL
 955
 956         ==========================================================================
 957  */
 958 VOID PeerReassocRspAction(
 959         IN PRTMP_ADAPTER pAd,
 960         IN MLME_QUEUE_ELEM *Elem)
 961 {
 962         USHORT      CapabilityInfo;
 963         USHORT      Status;
 964         USHORT      Aid;
 965         UCHAR       SupRate[MAX_LEN_OF_SUPPORTED_RATES], SupRateLen;
 966         UCHAR       ExtRate[MAX_LEN_OF_SUPPORTED_RATES], ExtRateLen;
 967         UCHAR       Addr2[MAC_ADDR_LEN];
 968         UCHAR       CkipFlag;
 969         BOOLEAN     TimerCancelled;
 970         EDCA_PARM   EdcaParm;
 971         HT_CAPABILITY_IE                HtCapability;
 972         ADD_HT_INFO_IE          AddHtInfo;      // AP might use this additional ht info IE
 973         UCHAR                   HtCapabilityLen;
 974         UCHAR                   AddHtInfoLen;
 975         UCHAR                   NewExtChannelOffset = 0xff;
 976
 977         if(PeerAssocRspSanity(pAd, Elem->Msg, Elem->MsgLen, Addr2, &CapabilityInfo, &Status, &Aid, SupRate, &SupRateLen, ExtRate, &ExtRateLen,
 978                                                                 &HtCapability,  &AddHtInfo, &HtCapabilityLen, &AddHtInfoLen,&NewExtChannelOffset, &EdcaParm, &CkipFlag))
 979         {
 980                 if(MAC_ADDR_EQUAL(Addr2, pAd->MlmeAux.Bssid)) // The frame is for me ?
 981                 {
 982                         DBGPRINT(RT_DEBUG_TRACE, ("ASSOC - receive REASSOC_RSP to me (status=%d)\n", Status));
 983                         RTMPCancelTimer(&pAd->MlmeAux.ReassocTimer, &TimerCancelled);
 984
 985                         if(Status == MLME_SUCCESS)
 986                         {
 987                                 // go to procedure listed on page 376
 988                                 AssocPostProc(pAd, Addr2, CapabilityInfo, Aid, SupRate, SupRateLen, ExtRate, ExtRateLen,
 989                                          &EdcaParm, &HtCapability, HtCapabilityLen, &AddHtInfo);
 990
 991                 {
 992                     union iwreq_data    wrqu;
 993                     wext_notify_event_assoc(pAd);
 994
 995                     memset(wrqu.ap_addr.sa_data, 0, MAC_ADDR_LEN);
 996                     memcpy(wrqu.ap_addr.sa_data, pAd->MlmeAux.Bssid, MAC_ADDR_LEN);
 997                     wireless_send_event(pAd->net_dev, SIOCGIWAP, &wrqu, NULL);
 998
 999                 }
1000
1001                         }
1002
1003                         {
1004                                 // CkipFlag is no use for reassociate
1005                                 pAd->Mlme.AssocMachine.CurrState = ASSOC_IDLE;
1006                                 MlmeEnqueue(pAd, MLME_CNTL_STATE_MACHINE, MT2_REASSOC_CONF, 2, &Status);
1007                         }
1008                 }
1009         }
1010         else
1011         {
1012                 DBGPRINT(RT_DEBUG_TRACE, ("ASSOC - PeerReassocRspAction() sanity check fail\n"));
1013         }
1014
1015 }
1016
1017 /*
1018         ==========================================================================
1019         Description:
1020                 procedures on IEEE 802.11/1999 p.376
1021         Parametrs:
1022
1023         IRQL = DISPATCH_LEVEL
1024
1025         ==========================================================================
1026  */
1027 VOID AssocPostProc(
1028         IN PRTMP_ADAPTER pAd,
1029         IN PUCHAR pAddr2,
1030         IN USHORT CapabilityInfo,
1031         IN USHORT Aid,
1032         IN UCHAR SupRate[],
1033         IN UCHAR SupRateLen,
1034         IN UCHAR ExtRate[],
1035         IN UCHAR ExtRateLen,
1036         IN PEDCA_PARM pEdcaParm,
1037         IN HT_CAPABILITY_IE             *pHtCapability,
1038         IN UCHAR HtCapabilityLen,
1039         IN ADD_HT_INFO_IE               *pAddHtInfo)    // AP might use this additional ht info IE
1040 {
1041         ULONG Idx;
1042
1043         pAd->MlmeAux.BssType = BSS_INFRA;
1044         COPY_MAC_ADDR(pAd->MlmeAux.Bssid, pAddr2);
1045         pAd->MlmeAux.Aid = Aid;
1046         pAd->MlmeAux.CapabilityInfo = CapabilityInfo & SUPPORTED_CAPABILITY_INFO;
1047
1048         // Some HT AP might lost WMM IE. We add WMM ourselves. beacuase HT requires QoS on.
1049         if ((HtCapabilityLen > 0) && (pEdcaParm->bValid == FALSE))
1050         {
1051                 pEdcaParm->bValid = TRUE;
1052                 pEdcaParm->Aifsn[0] = 3;
1053                 pEdcaParm->Aifsn[1] = 7;
1054                 pEdcaParm->Aifsn[2] = 2;
1055                 pEdcaParm->Aifsn[3] = 2;
1056
1057                 pEdcaParm->Cwmin[0] = 4;
1058                 pEdcaParm->Cwmin[1] = 4;
1059                 pEdcaParm->Cwmin[2] = 3;
1060                 pEdcaParm->Cwmin[3] = 2;
1061
1062                 pEdcaParm->Cwmax[0] = 10;
1063                 pEdcaParm->Cwmax[1] = 10;
1064                 pEdcaParm->Cwmax[2] = 4;
1065                 pEdcaParm->Cwmax[3] = 3;
1066
1067                 pEdcaParm->Txop[0]  = 0;
1068                 pEdcaParm->Txop[1]  = 0;
1069                 pEdcaParm->Txop[2]  = 96;
1070                 pEdcaParm->Txop[3]  = 48;
1071
1072         }
1073
1074         NdisMoveMemory(&pAd->MlmeAux.APEdcaParm, pEdcaParm, sizeof(EDCA_PARM));
1075
1076         // filter out un-supported rates
1077         pAd->MlmeAux.SupRateLen = SupRateLen;
1078         NdisMoveMemory(pAd->MlmeAux.SupRate, SupRate, SupRateLen);
1079         RTMPCheckRates(pAd, pAd->MlmeAux.SupRate, &pAd->MlmeAux.SupRateLen);
1080
1081         // filter out un-supported rates
1082         pAd->MlmeAux.ExtRateLen = ExtRateLen;
1083         NdisMoveMemory(pAd->MlmeAux.ExtRate, ExtRate, ExtRateLen);
1084         RTMPCheckRates(pAd, pAd->MlmeAux.ExtRate, &pAd->MlmeAux.ExtRateLen);
1085
1086         if (HtCapabilityLen > 0)
1087         {
1088                 RTMPCheckHt(pAd, BSSID_WCID, pHtCapability, pAddHtInfo);
1089         }
1090         DBGPRINT(RT_DEBUG_TRACE, ("AssocPostProc===>  AP.AMsduSize = %d. ClientStatusFlags = 0x%lx \n", pAd->MacTab.Content[BSSID_WCID].AMsduSize, pAd->MacTab.Content[BSSID_WCID].ClientStatusFlags));
1091
1092         DBGPRINT(RT_DEBUG_TRACE, ("AssocPostProc===>    (Mmps=%d, AmsduSize=%d, )\n",
1093                 pAd->MacTab.Content[BSSID_WCID].MmpsMode, pAd->MacTab.Content[BSSID_WCID].AMsduSize));
1094
1095         // Set New WPA information
1096         Idx = BssTableSearch(&pAd->ScanTab, pAddr2, pAd->MlmeAux.Channel);
1097         if (Idx == BSS_NOT_FOUND)
1098         {
1099                 DBGPRINT_ERR(("ASSOC - Can't find BSS after receiving Assoc response\n"));
1100         }
1101         else
1102         {
1103                 // Init variable
1104                 pAd->MacTab.Content[BSSID_WCID].RSNIE_Len = 0;
1105                 NdisZeroMemory(pAd->MacTab.Content[BSSID_WCID].RSN_IE, MAX_LEN_OF_RSNIE);
1106
1107                 // Store appropriate RSN_IE for WPA SM negotiation later
1108                 if ((pAd->StaCfg.AuthMode >= Ndis802_11AuthModeWPA) && (pAd->ScanTab.BssEntry[Idx].VarIELen != 0))
1109                 {
1110                         PUCHAR              pVIE;
1111                         USHORT              len;
1112                         PEID_STRUCT         pEid;
1113
1114                         pVIE = pAd->ScanTab.BssEntry[Idx].VarIEs;
1115                         len      = pAd->ScanTab.BssEntry[Idx].VarIELen;
1116
1117                         while (len > 0)
1118                         {
1119                                 pEid = (PEID_STRUCT) pVIE;
1120                                 // For WPA/WPAPSK
1121                                 if ((pEid->Eid == IE_WPA) && (NdisEqualMemory(pEid->Octet, WPA_OUI, 4))
1122                                         && (pAd->StaCfg.AuthMode == Ndis802_11AuthModeWPA || pAd->StaCfg.AuthMode == Ndis802_11AuthModeWPAPSK))
1123                                 {
1124                                         NdisMoveMemory(pAd->MacTab.Content[BSSID_WCID].RSN_IE, pVIE, (pEid->Len + 2));
1125                                         pAd->MacTab.Content[BSSID_WCID].RSNIE_Len = (pEid->Len + 2);
1126                                         DBGPRINT(RT_DEBUG_TRACE, ("AssocPostProc===> Store RSN_IE for WPA SM negotiation \n"));
1127                                 }
1128                                 // For WPA2/WPA2PSK
1129                                 else if ((pEid->Eid == IE_RSN) && (NdisEqualMemory(pEid->Octet + 2, RSN_OUI, 3))
1130                                         && (pAd->StaCfg.AuthMode == Ndis802_11AuthModeWPA2 || pAd->StaCfg.AuthMode == Ndis802_11AuthModeWPA2PSK))
1131                                 {
1132                                         NdisMoveMemory(pAd->MacTab.Content[BSSID_WCID].RSN_IE, pVIE, (pEid->Len + 2));
1133                                         pAd->MacTab.Content[BSSID_WCID].RSNIE_Len = (pEid->Len + 2);
1134                                         DBGPRINT(RT_DEBUG_TRACE, ("AssocPostProc===> Store RSN_IE for WPA2 SM negotiation \n"));
1135                                 }
1136
1137                                 pVIE += (pEid->Len + 2);
1138                                 len  -= (pEid->Len + 2);
1139                         }
1140                 }
1141
1142                 if (pAd->MacTab.Content[BSSID_WCID].RSNIE_Len == 0)
1143                 {
1144                         DBGPRINT(RT_DEBUG_TRACE, ("AssocPostProc===> no RSN_IE \n"));
1145                 }
1146                 else
1147                 {
1148                         hex_dump("RSN_IE", pAd->MacTab.Content[BSSID_WCID].RSN_IE, pAd->MacTab.Content[BSSID_WCID].RSNIE_Len);
1149                 }
1150         }
1151 }
1152
1153 /*
1154         ==========================================================================
1155         Description:
1156                 left part of IEEE 802.11/1999 p.374
1157         Parameters:
1158                 Elem - MLME message containing the received frame
1159
1160         IRQL = DISPATCH_LEVEL
1161
1162         ==========================================================================
1163  */
1164 VOID PeerDisassocAction(
1165         IN PRTMP_ADAPTER pAd,
1166         IN MLME_QUEUE_ELEM *Elem)
1167 {
1168         UCHAR         Addr2[MAC_ADDR_LEN];
1169         USHORT        Reason;
1170
1171         DBGPRINT(RT_DEBUG_TRACE, ("ASSOC - PeerDisassocAction()\n"));
1172         if(PeerDisassocSanity(pAd, Elem->Msg, Elem->MsgLen, Addr2, &Reason))
1173         {
1174                 DBGPRINT(RT_DEBUG_TRACE, ("ASSOC - PeerDisassocAction() Reason = %d\n", Reason));
1175                 if (INFRA_ON(pAd) && MAC_ADDR_EQUAL(pAd->CommonCfg.Bssid, Addr2))
1176                 {
1177
1178                         if (pAd->CommonCfg.bWirelessEvent)
1179                         {
1180                                 RTMPSendWirelessEvent(pAd, IW_DISASSOC_EVENT_FLAG, pAd->MacTab.Content[BSSID_WCID].Addr, BSS0, 0);
1181                         }
1182
1183                         //
1184                         // Get Current System time and Turn on AdjacentAPReport
1185                         //
1186                         NdisGetSystemUpTime(&pAd->StaCfg.CCXAdjacentAPLinkDownTime);
1187                         pAd->StaCfg.CCXAdjacentAPReportFlag = TRUE;
1188                         LinkDown(pAd, TRUE);
1189                         pAd->Mlme.AssocMachine.CurrState = ASSOC_IDLE;
1190
1191             {
1192                 union iwreq_data    wrqu;
1193                 memset(wrqu.ap_addr.sa_data, 0, MAC_ADDR_LEN);
1194                 wireless_send_event(pAd->net_dev, SIOCGIWAP, &wrqu, NULL);
1195             }
1196                 }
1197         }
1198         else
1199         {
1200                 DBGPRINT(RT_DEBUG_TRACE, ("ASSOC - PeerDisassocAction() sanity check fail\n"));
1201         }
1202
1203 }
1204
1205 /*
1206         ==========================================================================
1207         Description:
1208                 what the state machine will do after assoc timeout
1209         Parameters:
1210                 Elme -
1211
1212         IRQL = DISPATCH_LEVEL
1213
1214         ==========================================================================
1215  */
1216 VOID AssocTimeoutAction(
1217         IN PRTMP_ADAPTER pAd,
1218         IN MLME_QUEUE_ELEM *Elem)
1219 {
1220         USHORT  Status;
1221         DBGPRINT(RT_DEBUG_TRACE, ("ASSOC - AssocTimeoutAction\n"));
1222         pAd->Mlme.AssocMachine.CurrState = ASSOC_IDLE;
1223         Status = MLME_REJ_TIMEOUT;
1224         MlmeEnqueue(pAd, MLME_CNTL_STATE_MACHINE, MT2_ASSOC_CONF, 2, &Status);
1225 }
1226
1227 /*
1228         ==========================================================================
1229         Description:
1230                 what the state machine will do after reassoc timeout
1231
1232         IRQL = DISPATCH_LEVEL
1233
1234         ==========================================================================
1235  */
1236 VOID ReassocTimeoutAction(
1237         IN PRTMP_ADAPTER pAd,
1238         IN MLME_QUEUE_ELEM *Elem)
1239 {
1240         USHORT  Status;
1241         DBGPRINT(RT_DEBUG_TRACE, ("ASSOC - ReassocTimeoutAction\n"));
1242         pAd->Mlme.AssocMachine.CurrState = ASSOC_IDLE;
1243         Status = MLME_REJ_TIMEOUT;
1244         MlmeEnqueue(pAd, MLME_CNTL_STATE_MACHINE, MT2_REASSOC_CONF, 2, &Status);
1245 }
1246
1247 /*
1248         ==========================================================================
1249         Description:
1250                 what the state machine will do after disassoc timeout
1251
1252         IRQL = DISPATCH_LEVEL
1253
1254         ==========================================================================
1255  */
1256 VOID DisassocTimeoutAction(
1257         IN PRTMP_ADAPTER pAd,
1258         IN MLME_QUEUE_ELEM *Elem)
1259 {
1260         USHORT  Status;
1261         DBGPRINT(RT_DEBUG_TRACE, ("ASSOC - DisassocTimeoutAction\n"));
1262         pAd->Mlme.AssocMachine.CurrState = ASSOC_IDLE;
1263         Status = MLME_SUCCESS;
1264         MlmeEnqueue(pAd, MLME_CNTL_STATE_MACHINE, MT2_DISASSOC_CONF, 2, &Status);
1265 }
1266
1267 VOID InvalidStateWhenAssoc(
1268         IN PRTMP_ADAPTER pAd,
1269         IN MLME_QUEUE_ELEM *Elem)
1270 {
1271         USHORT  Status;
1272         DBGPRINT(RT_DEBUG_TRACE, ("ASSOC - InvalidStateWhenAssoc(state=%ld), reset ASSOC state machine\n",
1273                 pAd->Mlme.AssocMachine.CurrState));
1274         pAd->Mlme.AssocMachine.CurrState = ASSOC_IDLE;
1275         Status = MLME_STATE_MACHINE_REJECT;
1276         MlmeEnqueue(pAd, MLME_CNTL_STATE_MACHINE, MT2_ASSOC_CONF, 2, &Status);
1277 }
1278
1279 VOID InvalidStateWhenReassoc(
1280         IN PRTMP_ADAPTER pAd,
1281         IN MLME_QUEUE_ELEM *Elem)
1282 {
1283         USHORT Status;
1284         DBGPRINT(RT_DEBUG_TRACE, ("ASSOC - InvalidStateWhenReassoc(state=%ld), reset ASSOC state machine\n",
1285                 pAd->Mlme.AssocMachine.CurrState));
1286         pAd->Mlme.AssocMachine.CurrState = ASSOC_IDLE;
1287         Status = MLME_STATE_MACHINE_REJECT;
1288         MlmeEnqueue(pAd, MLME_CNTL_STATE_MACHINE, MT2_REASSOC_CONF, 2, &Status);
1289 }
1290
1291 VOID InvalidStateWhenDisassociate(
1292         IN PRTMP_ADAPTER pAd,
1293         IN MLME_QUEUE_ELEM *Elem)
1294 {
1295         USHORT Status;
1296         DBGPRINT(RT_DEBUG_TRACE, ("ASSOC - InvalidStateWhenDisassoc(state=%ld), reset ASSOC state machine\n",
1297                 pAd->Mlme.AssocMachine.CurrState));
1298         pAd->Mlme.AssocMachine.CurrState = ASSOC_IDLE;
1299         Status = MLME_STATE_MACHINE_REJECT;
1300         MlmeEnqueue(pAd, MLME_CNTL_STATE_MACHINE, MT2_DISASSOC_CONF, 2, &Status);
1301 }
1302
1303 /*
1304         ==========================================================================
1305         Description:
1306                 right part of IEEE 802.11/1999 page 374
1307         Note:
1308                 This event should never cause ASSOC state machine perform state
1309                 transition, and has no relationship with CNTL machine. So we separate
1310                 this routine as a service outside of ASSOC state transition table.
1311
1312         IRQL = DISPATCH_LEVEL
1313
1314         ==========================================================================
1315  */
1316 VOID Cls3errAction(
1317         IN PRTMP_ADAPTER pAd,
1318         IN PUCHAR        pAddr)
1319 {
1320         HEADER_802_11         DisassocHdr;
1321         PHEADER_802_11        pDisassocHdr;
1322         PUCHAR                pOutBuffer = NULL;
1323         ULONG                 FrameLen = 0;
1324         NDIS_STATUS           NStatus;
1325         USHORT                Reason = REASON_CLS3ERR;
1326
1327         NStatus = MlmeAllocateMemory(pAd, &pOutBuffer);  //Get an unused nonpaged memory
1328         if (NStatus != NDIS_STATUS_SUCCESS)
1329                 return;
1330
1331         DBGPRINT(RT_DEBUG_TRACE, ("ASSOC - Class 3 Error, Send DISASSOC frame\n"));
1332         MgtMacHeaderInit(pAd, &DisassocHdr, SUBTYPE_DISASSOC, 0, pAddr, pAd->CommonCfg.Bssid);  // patch peap ttls switching issue
1333         MakeOutgoingFrame(pOutBuffer,           &FrameLen,
1334                                           sizeof(HEADER_802_11),&DisassocHdr,
1335                                           2,                    &Reason,
1336                                           END_OF_ARGS);
1337         MiniportMMRequest(pAd, 0, pOutBuffer, FrameLen);
1338
1339         // To patch Instance and Buffalo(N) AP
1340         // Driver has to send deauth to Instance AP, but Buffalo(N) needs to send disassoc to reset Authenticator's state machine
1341         // Therefore, we send both of them.
1342         pDisassocHdr = (PHEADER_802_11)pOutBuffer;
1343         pDisassocHdr->FC.SubType = SUBTYPE_DEAUTH;
1344         MiniportMMRequest(pAd, 0, pOutBuffer, FrameLen);
1345
1346         MlmeFreeMemory(pAd, pOutBuffer);
1347
1348         pAd->StaCfg.DisassocReason = REASON_CLS3ERR;
1349         COPY_MAC_ADDR(pAd->StaCfg.DisassocSta, pAddr);
1350 }
1351
1352  /*
1353          ==========================================================================
1354          Description:
1355                  Switch between WEP and CKIP upon new association up.
1356          Parameters:
1357
1358          IRQL = DISPATCH_LEVEL
1359
1360          ==========================================================================
1361   */
1362 VOID SwitchBetweenWepAndCkip(
1363         IN PRTMP_ADAPTER pAd)
1364 {
1365         int            i;
1366         SHAREDKEY_MODE_STRUC  csr1;
1367
1368         // if KP is required. change the CipherAlg in hardware shard key table from WEP
1369         // to CKIP. else remain as WEP
1370         if (pAd->StaCfg.bCkipOn && (pAd->StaCfg.CkipFlag & 0x10))
1371         {
1372                 // modify hardware key table so that MAC use correct algorithm to decrypt RX
1373                 RTMP_IO_READ32(pAd, SHARED_KEY_MODE_BASE, &csr1.word);
1374                 if (csr1.field.Bss0Key0CipherAlg == CIPHER_WEP64)
1375                         csr1.field.Bss0Key0CipherAlg = CIPHER_CKIP64;
1376                 else if (csr1.field.Bss0Key0CipherAlg == CIPHER_WEP128)
1377                         csr1.field.Bss0Key0CipherAlg = CIPHER_CKIP128;
1378
1379                 if (csr1.field.Bss0Key1CipherAlg == CIPHER_WEP64)
1380                         csr1.field.Bss0Key1CipherAlg = CIPHER_CKIP64;
1381                 else if (csr1.field.Bss0Key1CipherAlg == CIPHER_WEP128)
1382                         csr1.field.Bss0Key1CipherAlg = CIPHER_CKIP128;
1383
1384                 if (csr1.field.Bss0Key2CipherAlg == CIPHER_WEP64)
1385                         csr1.field.Bss0Key2CipherAlg = CIPHER_CKIP64;
1386                 else if (csr1.field.Bss0Key2CipherAlg == CIPHER_WEP128)
1387                         csr1.field.Bss0Key2CipherAlg = CIPHER_CKIP128;
1388
1389                 if (csr1.field.Bss0Key3CipherAlg == CIPHER_WEP64)
1390                         csr1.field.Bss0Key3CipherAlg = CIPHER_CKIP64;
1391                 else if (csr1.field.Bss0Key3CipherAlg == CIPHER_WEP128)
1392                         csr1.field.Bss0Key3CipherAlg = CIPHER_CKIP128;
1393                 RTMP_IO_WRITE32(pAd, SHARED_KEY_MODE_BASE, csr1.word);
1394                 DBGPRINT(RT_DEBUG_TRACE, ("SwitchBetweenWepAndCkip: modify BSS0 cipher to %s\n", CipherName[csr1.field.Bss0Key0CipherAlg]));
1395
1396                 // modify software key table so that driver can specify correct algorithm in TXD upon TX
1397                 for (i=0; i<SHARE_KEY_NUM; i++)
1398                 {
1399                         if (pAd->SharedKey[BSS0][i].CipherAlg == CIPHER_WEP64)
1400                                 pAd->SharedKey[BSS0][i].CipherAlg = CIPHER_CKIP64;
1401                         else if (pAd->SharedKey[BSS0][i].CipherAlg == CIPHER_WEP128)
1402                                 pAd->SharedKey[BSS0][i].CipherAlg = CIPHER_CKIP128;
1403                 }
1404         }
1405
1406         // else if KP NOT inused. change the CipherAlg in hardware shard key table from CKIP
1407         // to WEP.
1408         else
1409         {
1410                 // modify hardware key table so that MAC use correct algorithm to decrypt RX
1411                 RTMP_IO_READ32(pAd, SHARED_KEY_MODE_BASE, &csr1.word);
1412                 if (csr1.field.Bss0Key0CipherAlg == CIPHER_CKIP64)
1413                         csr1.field.Bss0Key0CipherAlg = CIPHER_WEP64;
1414                 else if (csr1.field.Bss0Key0CipherAlg == CIPHER_CKIP128)
1415                         csr1.field.Bss0Key0CipherAlg = CIPHER_WEP128;
1416
1417                 if (csr1.field.Bss0Key1CipherAlg == CIPHER_CKIP64)
1418                         csr1.field.Bss0Key1CipherAlg = CIPHER_WEP64;
1419                 else if (csr1.field.Bss0Key1CipherAlg == CIPHER_CKIP128)
1420                         csr1.field.Bss0Key1CipherAlg = CIPHER_WEP128;
1421
1422                 if (csr1.field.Bss0Key2CipherAlg == CIPHER_CKIP64)
1423                         csr1.field.Bss0Key2CipherAlg = CIPHER_WEP64;
1424                 else if (csr1.field.Bss0Key2CipherAlg == CIPHER_CKIP128)
1425                         csr1.field.Bss0Key2CipherAlg = CIPHER_WEP128;
1426
1427                 if (csr1.field.Bss0Key3CipherAlg == CIPHER_CKIP64)
1428                         csr1.field.Bss0Key3CipherAlg = CIPHER_WEP64;
1429                 else if (csr1.field.Bss0Key3CipherAlg == CIPHER_CKIP128)
1430                         csr1.field.Bss0Key3CipherAlg = CIPHER_WEP128;
1431
1432                 // modify software key table so that driver can specify correct algorithm in TXD upon TX
1433                 for (i=0; i<SHARE_KEY_NUM; i++)
1434                 {
1435                         if (pAd->SharedKey[BSS0][i].CipherAlg == CIPHER_CKIP64)
1436                                 pAd->SharedKey[BSS0][i].CipherAlg = CIPHER_WEP64;
1437                         else if (pAd->SharedKey[BSS0][i].CipherAlg == CIPHER_CKIP128)
1438                                 pAd->SharedKey[BSS0][i].CipherAlg = CIPHER_WEP128;
1439                 }
1440
1441                 //
1442                 // On WPA-NONE, must update CipherAlg.
1443                 // Because the OID_802_11_WEP_STATUS was been set after OID_802_11_ADD_KEY
1444                 // and CipherAlg will be CIPHER_NONE by Windows ZeroConfig.
1445                 // So we need to update CipherAlg after connect.
1446                 //
1447                 if (pAd->StaCfg.AuthMode == Ndis802_11AuthModeWPANone)
1448                 {
1449                         for (i = 0; i < SHARE_KEY_NUM; i++)
1450                         {
1451                                 if (pAd->SharedKey[BSS0][i].KeyLen != 0)
1452                                 {
1453                                         if (pAd->StaCfg.WepStatus == Ndis802_11Encryption2Enabled)
1454                                         {
1455                                                 pAd->SharedKey[BSS0][i].CipherAlg = CIPHER_TKIP;
1456                                         }
1457                                         else if (pAd->StaCfg.WepStatus == Ndis802_11Encryption3Enabled)
1458                                         {
1459                                                 pAd->SharedKey[BSS0][i].CipherAlg = CIPHER_AES;
1460                                         }
1461                                 }
1462                                 else
1463                                 {
1464                                         pAd->SharedKey[BSS0][i].CipherAlg = CIPHER_NONE;
1465                                 }
1466                         }
1467
1468                         csr1.field.Bss0Key0CipherAlg = pAd->SharedKey[BSS0][0].CipherAlg;
1469                         csr1.field.Bss0Key1CipherAlg = pAd->SharedKey[BSS0][1].CipherAlg;
1470                         csr1.field.Bss0Key2CipherAlg = pAd->SharedKey[BSS0][2].CipherAlg;
1471                         csr1.field.Bss0Key3CipherAlg = pAd->SharedKey[BSS0][3].CipherAlg;
1472                 }
1473                 RTMP_IO_WRITE32(pAd, SHARED_KEY_MODE_BASE, csr1.word);
1474                 DBGPRINT(RT_DEBUG_TRACE, ("SwitchBetweenWepAndCkip: modify BSS0 cipher to %s\n", CipherName[csr1.field.Bss0Key0CipherAlg]));
1475         }
1476 }
1477
1478 int wext_notify_event_assoc(
1479         IN  RTMP_ADAPTER *pAd)
1480 {
1481     union iwreq_data    wrqu;
1482     char custom[IW_CUSTOM_MAX] = {0};
1483
1484 #if WIRELESS_EXT > 17
1485     if (pAd->StaCfg.ReqVarIELen <= IW_CUSTOM_MAX)
1486     {
1487         wrqu.data.length = pAd->StaCfg.ReqVarIELen;
1488         memcpy(custom, pAd->StaCfg.ReqVarIEs, pAd->StaCfg.ReqVarIELen);
1489         wireless_send_event(pAd->net_dev, IWEVASSOCREQIE, &wrqu, custom);
1490     }
1491     else
1492         DBGPRINT(RT_DEBUG_TRACE, ("pAd->StaCfg.ReqVarIELen > MAX_CUSTOM_LEN\n"));
1493 #else
1494     if (((pAd->StaCfg.ReqVarIELen*2) + 17) <= IW_CUSTOM_MAX)
1495     {
1496         UCHAR   idx;
1497         wrqu.data.length = (pAd->StaCfg.ReqVarIELen*2) + 17;
1498         sprintf(custom, "ASSOCINFO(ReqIEs=");
1499         for (idx=0; idx<pAd->StaCfg.ReqVarIELen; idx++)
1500                 sprintf(custom, "%s%02x", custom, pAd->StaCfg.ReqVarIEs[idx]);
1501         wireless_send_event(pAd->net_dev, IWEVCUSTOM, &wrqu, custom);
1502     }
1503     else
1504         DBGPRINT(RT_DEBUG_TRACE, ("(pAd->StaCfg.ReqVarIELen*2) + 17 > MAX_CUSTOM_LEN\n"));
1505 #endif
1506
1507         return 0;
1508
1509 }
1510
1511 BOOLEAN StaAddMacTableEntry(
1512         IN  PRTMP_ADAPTER               pAd,
1513         IN  PMAC_TABLE_ENTRY    pEntry,
1514         IN  UCHAR                               MaxSupportedRateIn500Kbps,
1515         IN  HT_CAPABILITY_IE    *pHtCapability,
1516         IN  UCHAR                               HtCapabilityLen,
1517         IN  USHORT                      CapabilityInfo)
1518 {
1519         UCHAR            MaxSupportedRate = RATE_11;
1520
1521         if (ADHOC_ON(pAd))
1522                 CLIENT_STATUS_CLEAR_FLAG(pEntry, fCLIENT_STATUS_WMM_CAPABLE);
1523
1524         switch (MaxSupportedRateIn500Kbps)
1525     {
1526         case 108: MaxSupportedRate = RATE_54;   break;
1527         case 96:  MaxSupportedRate = RATE_48;   break;
1528         case 72:  MaxSupportedRate = RATE_36;   break;
1529         case 48:  MaxSupportedRate = RATE_24;   break;
1530         case 36:  MaxSupportedRate = RATE_18;   break;
1531         case 24:  MaxSupportedRate = RATE_12;   break;
1532         case 18:  MaxSupportedRate = RATE_9;    break;
1533         case 12:  MaxSupportedRate = RATE_6;    break;
1534         case 22:  MaxSupportedRate = RATE_11;   break;
1535         case 11:  MaxSupportedRate = RATE_5_5;  break;
1536         case 4:   MaxSupportedRate = RATE_2;    break;
1537         case 2:   MaxSupportedRate = RATE_1;    break;
1538         default:  MaxSupportedRate = RATE_11;   break;
1539     }
1540
1541     if ((pAd->CommonCfg.PhyMode == PHY_11G) && (MaxSupportedRate < RATE_FIRST_OFDM_RATE))
1542         return FALSE;
1543
1544         // 11n only
1545         if (((pAd->CommonCfg.PhyMode == PHY_11N_2_4G) || (pAd->CommonCfg.PhyMode == PHY_11N_5G))&& (HtCapabilityLen == 0))
1546                 return FALSE;
1547
1548         if (!pEntry)
1549         return FALSE;
1550
1551         NdisAcquireSpinLock(&pAd->MacTabLock);
1552         if (pEntry)
1553         {
1554                 pEntry->PortSecured = WPA_802_1X_PORT_SECURED;
1555                 if ((MaxSupportedRate < RATE_FIRST_OFDM_RATE) ||
1556                         (pAd->CommonCfg.PhyMode == PHY_11B))
1557                 {
1558                         pEntry->RateLen = 4;
1559                         if (MaxSupportedRate >= RATE_FIRST_OFDM_RATE)
1560                                 MaxSupportedRate = RATE_11;
1561                 }
1562                 else
1563                         pEntry->RateLen = 12;
1564
1565                 pEntry->MaxHTPhyMode.word = 0;
1566                 pEntry->MinHTPhyMode.word = 0;
1567                 pEntry->HTPhyMode.word = 0;
1568                 pEntry->MaxSupportedRate = MaxSupportedRate;
1569                 if (pEntry->MaxSupportedRate < RATE_FIRST_OFDM_RATE)
1570                 {
1571                         pEntry->MaxHTPhyMode.field.MODE = MODE_CCK;
1572                         pEntry->MaxHTPhyMode.field.MCS = pEntry->MaxSupportedRate;
1573                         pEntry->MinHTPhyMode.field.MODE = MODE_CCK;
1574                         pEntry->MinHTPhyMode.field.MCS = pEntry->MaxSupportedRate;
1575                         pEntry->HTPhyMode.field.MODE = MODE_CCK;
1576                         pEntry->HTPhyMode.field.MCS = pEntry->MaxSupportedRate;
1577                 }
1578                 else
1579                 {
1580                         pEntry->MaxHTPhyMode.field.MODE = MODE_OFDM;
1581                         pEntry->MaxHTPhyMode.field.MCS = OfdmRateToRxwiMCS[pEntry->MaxSupportedRate];
1582                         pEntry->MinHTPhyMode.field.MODE = MODE_OFDM;
1583                         pEntry->MinHTPhyMode.field.MCS = OfdmRateToRxwiMCS[pEntry->MaxSupportedRate];
1584                         pEntry->HTPhyMode.field.MODE = MODE_OFDM;
1585                         pEntry->HTPhyMode.field.MCS = OfdmRateToRxwiMCS[pEntry->MaxSupportedRate];
1586                 }
1587                 pEntry->CapabilityInfo = CapabilityInfo;
1588                 CLIENT_STATUS_CLEAR_FLAG(pEntry, fCLIENT_STATUS_AGGREGATION_CAPABLE);
1589                 CLIENT_STATUS_CLEAR_FLAG(pEntry, fCLIENT_STATUS_PIGGYBACK_CAPABLE);
1590         }
1591
1592         // If this Entry supports 802.11n, upgrade to HT rate.
1593         if ((HtCapabilityLen != 0) && (pAd->CommonCfg.PhyMode >= PHY_11ABGN_MIXED))
1594         {
1595                 UCHAR   j, bitmask; //k,bitmask;
1596                 CHAR    i;
1597
1598                 if (ADHOC_ON(pAd))
1599                         CLIENT_STATUS_SET_FLAG(pEntry, fCLIENT_STATUS_WMM_CAPABLE);
1600                 if ((pHtCapability->HtCapInfo.GF) && (pAd->CommonCfg.DesiredHtPhy.GF))
1601                 {
1602                         pEntry->MaxHTPhyMode.field.MODE = MODE_HTGREENFIELD;
1603                 }
1604                 else
1605                 {
1606                         pEntry->MaxHTPhyMode.field.MODE = MODE_HTMIX;
1607                         pAd->MacTab.fAnyStationNonGF = TRUE;
1608                         pAd->CommonCfg.AddHTInfo.AddHtInfo2.NonGfPresent = 1;
1609                 }
1610
1611                 if ((pHtCapability->HtCapInfo.ChannelWidth) && (pAd->CommonCfg.DesiredHtPhy.ChannelWidth))
1612                 {
1613                         pEntry->MaxHTPhyMode.field.BW= BW_40;
1614                         pEntry->MaxHTPhyMode.field.ShortGI = ((pAd->CommonCfg.DesiredHtPhy.ShortGIfor40)&(pHtCapability->HtCapInfo.ShortGIfor40));
1615                 }
1616                 else
1617                 {
1618                         pEntry->MaxHTPhyMode.field.BW = BW_20;
1619                         pEntry->MaxHTPhyMode.field.ShortGI = ((pAd->CommonCfg.DesiredHtPhy.ShortGIfor20)&(pHtCapability->HtCapInfo.ShortGIfor20));
1620                         pAd->MacTab.fAnyStation20Only = TRUE;
1621                 }
1622
1623                 // 3*3
1624                 if (pAd->MACVersion >= RALINK_2883_VERSION && pAd->MACVersion < RALINK_3070_VERSION)
1625                         pEntry->MaxHTPhyMode.field.TxBF = pAd->CommonCfg.RegTransmitSetting.field.TxBF;
1626
1627                 // find max fixed rate
1628                 for (i=23; i>=0; i--) // 3*3
1629                 {
1630                         j = i/8;
1631                         bitmask = (1<<(i-(j*8)));
1632                         if ((pAd->StaCfg.DesiredHtPhyInfo.MCSSet[j] & bitmask) && (pHtCapability->MCSSet[j] & bitmask))
1633                         {
1634                                 pEntry->MaxHTPhyMode.field.MCS = i;
1635                                 break;
1636                         }
1637                         if (i==0)
1638                                 break;
1639                 }
1640
1641
1642                 if (pAd->StaCfg.DesiredTransmitSetting.field.MCS != MCS_AUTO)
1643                 {
1644                         if (pAd->StaCfg.DesiredTransmitSetting.field.MCS == 32)
1645                         {
1646                                 // Fix MCS as HT Duplicated Mode
1647                                 pEntry->MaxHTPhyMode.field.BW = 1;
1648                                 pEntry->MaxHTPhyMode.field.MODE = MODE_HTMIX;
1649                                 pEntry->MaxHTPhyMode.field.STBC = 0;
1650                                 pEntry->MaxHTPhyMode.field.ShortGI = 0;
1651                                 pEntry->MaxHTPhyMode.field.MCS = 32;
1652                         }
1653                         else if (pEntry->MaxHTPhyMode.field.MCS > pAd->StaCfg.HTPhyMode.field.MCS)
1654                         {
1655                                 // STA supports fixed MCS
1656                                 pEntry->MaxHTPhyMode.field.MCS = pAd->StaCfg.HTPhyMode.field.MCS;
1657                         }
1658                 }
1659
1660                 pEntry->MaxHTPhyMode.field.STBC = (pHtCapability->HtCapInfo.RxSTBC & (pAd->CommonCfg.DesiredHtPhy.TxSTBC));
1661                 pEntry->MpduDensity = pHtCapability->HtCapParm.MpduDensity;
1662                 pEntry->MaxRAmpduFactor = pHtCapability->HtCapParm.MaxRAmpduFactor;
1663                 pEntry->MmpsMode = (UCHAR)pHtCapability->HtCapInfo.MimoPs;
1664                 pEntry->AMsduSize = (UCHAR)pHtCapability->HtCapInfo.AMsduSize;
1665                 pEntry->HTPhyMode.word = pEntry->MaxHTPhyMode.word;
1666
1667                 if (pAd->CommonCfg.DesiredHtPhy.AmsduEnable && (pAd->CommonCfg.REGBACapability.field.AutoBA == FALSE))
1668                         CLIENT_STATUS_SET_FLAG(pEntry, fCLIENT_STATUS_AMSDU_INUSED);
1669                 if (pHtCapability->HtCapInfo.ShortGIfor20)
1670                         CLIENT_STATUS_SET_FLAG(pEntry, fCLIENT_STATUS_SGI20_CAPABLE);
1671                 if (pHtCapability->HtCapInfo.ShortGIfor40)
1672                         CLIENT_STATUS_SET_FLAG(pEntry, fCLIENT_STATUS_SGI40_CAPABLE);
1673                 if (pHtCapability->HtCapInfo.TxSTBC)
1674                         CLIENT_STATUS_SET_FLAG(pEntry, fCLIENT_STATUS_TxSTBC_CAPABLE);
1675                 if (pHtCapability->HtCapInfo.RxSTBC)
1676                         CLIENT_STATUS_SET_FLAG(pEntry, fCLIENT_STATUS_RxSTBC_CAPABLE);
1677                 if (pHtCapability->ExtHtCapInfo.PlusHTC)
1678                         CLIENT_STATUS_SET_FLAG(pEntry, fCLIENT_STATUS_HTC_CAPABLE);
1679                 if (pAd->CommonCfg.bRdg && pHtCapability->ExtHtCapInfo.RDGSupport)
1680                         CLIENT_STATUS_SET_FLAG(pEntry, fCLIENT_STATUS_RDG_CAPABLE);
1681                 if (pHtCapability->ExtHtCapInfo.MCSFeedback == 0x03)
1682                         CLIENT_STATUS_SET_FLAG(pEntry, fCLIENT_STATUS_MCSFEEDBACK_CAPABLE);
1683         }
1684         else
1685         {
1686                 pAd->MacTab.fAnyStationIsLegacy = TRUE;
1687         }
1688
1689         NdisMoveMemory(&pEntry->HTCapability, pHtCapability, sizeof(HT_CAPABILITY_IE));
1690
1691         pEntry->HTPhyMode.word = pEntry->MaxHTPhyMode.word;
1692         pEntry->CurrTxRate = pEntry->MaxSupportedRate;
1693
1694         // Set asic auto fall back
1695         if (pAd->StaCfg.bAutoTxRateSwitch == TRUE)
1696         {
1697                 PUCHAR                                  pTable;
1698                 UCHAR                                   TableSize = 0;
1699
1700                 MlmeSelectTxRateTable(pAd, pEntry, &pTable, &TableSize, &pEntry->CurrTxRateIndex);
1701                 pEntry->bAutoTxRateSwitch = TRUE;
1702         }
1703         else
1704         {
1705                 pEntry->HTPhyMode.field.MODE    = pAd->StaCfg.HTPhyMode.field.MODE;
1706                 pEntry->HTPhyMode.field.MCS     = pAd->StaCfg.HTPhyMode.field.MCS;
1707                 pEntry->bAutoTxRateSwitch = FALSE;
1708
1709                 // If the legacy mode is set, overwrite the transmit setting of this entry.
1710                 RTMPUpdateLegacyTxSetting((UCHAR)pAd->StaCfg.DesiredTransmitSetting.field.FixedTxMode, pEntry);
1711         }
1712
1713         pEntry->PortSecured = WPA_802_1X_PORT_SECURED;
1714         pEntry->Sst = SST_ASSOC;
1715         pEntry->AuthState = AS_AUTH_OPEN;
1716         pEntry->AuthMode = pAd->StaCfg.AuthMode;
1717         pEntry->WepStatus = pAd->StaCfg.WepStatus;
1718
1719         NdisReleaseSpinLock(&pAd->MacTabLock);
1720
1721     {
1722         union iwreq_data    wrqu;
1723         wext_notify_event_assoc(pAd);
1724
1725         memset(wrqu.ap_addr.sa_data, 0, MAC_ADDR_LEN);
1726         memcpy(wrqu.ap_addr.sa_data, pAd->MlmeAux.Bssid, MAC_ADDR_LEN);
1727         wireless_send_event(pAd->net_dev, SIOCGIWAP, &wrqu, NULL);
1728
1729     }
1730         return TRUE;
1731 }
1732
1733