net: wireless: rockchip_wlan: add rtl8723cs support
[firefly-linux-kernel-4.4.55.git] / drivers / net / wireless / rockchip_wlan / rtl8723cs / os_dep / linux / ioctl_linux.c
1 /******************************************************************************
2  *
3  * Copyright(c) 2007 - 2012 Realtek Corporation. All rights reserved.
4  *
5  * This program is free software; you can redistribute it and/or modify it
6  * under the terms of version 2 of the GNU General Public License as
7  * published by the Free Software Foundation.
8  *
9  * This program is distributed in the hope that it will be useful, but WITHOUT
10  * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
11  * FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for
12  * more details.
13  *
14  * You should have received a copy of the GNU General Public License along with
15  * this program; if not, write to the Free Software Foundation, Inc.,
16  * 51 Franklin Street, Fifth Floor, Boston, MA 02110, USA
17  *
18  *
19  ******************************************************************************/
20 #define _IOCTL_LINUX_C_
21
22 #include <drv_types.h>
23 #include <rtw_mp.h>
24 #include <rtw_mp_ioctl.h>
25 #include "../../hal/phydm/phydm_precomp.h"
26 #ifdef RTW_HALMAC
27 #include "../../hal/hal_halmac.h"
28 #endif
29
30 #if (LINUX_VERSION_CODE < KERNEL_VERSION(2, 6, 27))
31 #define  iwe_stream_add_event(a, b, c, d, e)  iwe_stream_add_event(b, c, d, e)
32 #define  iwe_stream_add_point(a, b, c, d, e)  iwe_stream_add_point(b, c, d, e)
33 #endif
34
35 #ifdef CONFIG_80211N_HT
36 extern int rtw_ht_enable;
37 #endif
38
39
40 #define RTL_IOCTL_WPA_SUPPLICANT        (SIOCIWFIRSTPRIV+30)
41
42 #define SCAN_ITEM_SIZE 768
43 #define MAX_CUSTOM_LEN 64
44 #define RATE_COUNT 4
45
46 #ifdef CONFIG_GLOBAL_UI_PID
47 extern int ui_pid[3];
48 #endif
49
50 /* combo scan */
51 #define WEXT_CSCAN_AMOUNT 9
52 #define WEXT_CSCAN_BUF_LEN              360
53 #define WEXT_CSCAN_HEADER               "CSCAN S\x01\x00\x00S\x00"
54 #define WEXT_CSCAN_HEADER_SIZE          12
55 #define WEXT_CSCAN_SSID_SECTION         'S'
56 #define WEXT_CSCAN_CHANNEL_SECTION      'C'
57 #define WEXT_CSCAN_NPROBE_SECTION       'N'
58 #define WEXT_CSCAN_ACTV_DWELL_SECTION   'A'
59 #define WEXT_CSCAN_PASV_DWELL_SECTION   'P'
60 #define WEXT_CSCAN_HOME_DWELL_SECTION   'H'
61 #define WEXT_CSCAN_TYPE_SECTION         'T'
62
63
64 extern u8 key_2char2num(u8 hch, u8 lch);
65 extern u8 str_2char2num(u8 hch, u8 lch);
66 extern void macstr2num(u8 *dst, u8 *src);
67 extern u8 convert_ip_addr(u8 hch, u8 mch, u8 lch);
68
69 u32 rtw_rates[] = {1000000, 2000000, 5500000, 11000000,
70         6000000, 9000000, 12000000, 18000000, 24000000, 36000000, 48000000, 54000000};
71
72 static const char *const iw_operation_mode[] = {
73         "Auto", "Ad-Hoc", "Managed",  "Master", "Repeater", "Secondary", "Monitor"
74 };
75
76 static int hex2num_i(char c)
77 {
78         if (c >= '0' && c <= '9')
79                 return c - '0';
80         if (c >= 'a' && c <= 'f')
81                 return c - 'a' + 10;
82         if (c >= 'A' && c <= 'F')
83                 return c - 'A' + 10;
84         return -1;
85 }
86
87 static int hex2byte_i(const char *hex)
88 {
89         int a, b;
90         a = hex2num_i(*hex++);
91         if (a < 0)
92                 return -1;
93         b = hex2num_i(*hex++);
94         if (b < 0)
95                 return -1;
96         return (a << 4) | b;
97 }
98
99 /**
100  * hwaddr_aton - Convert ASCII string to MAC address
101  * @txt: MAC address as a string (e.g., "00:11:22:33:44:55")
102  * @addr: Buffer for the MAC address (ETH_ALEN = 6 bytes)
103  * Returns: 0 on success, -1 on failure (e.g., string not a MAC address)
104  */
105 static int hwaddr_aton_i(const char *txt, u8 *addr)
106 {
107         int i;
108
109         for (i = 0; i < 6; i++) {
110                 int a, b;
111
112                 a = hex2num_i(*txt++);
113                 if (a < 0)
114                         return -1;
115                 b = hex2num_i(*txt++);
116                 if (b < 0)
117                         return -1;
118                 *addr++ = (a << 4) | b;
119                 if (i < 5 && *txt++ != ':')
120                         return -1;
121         }
122
123         return 0;
124 }
125
126 static void indicate_wx_custom_event(_adapter *padapter, char *msg)
127 {
128         u8 *buff, *p;
129         union iwreq_data wrqu;
130
131         if (strlen(msg) > IW_CUSTOM_MAX) {
132                 RTW_INFO("%s strlen(msg):%zu > IW_CUSTOM_MAX:%u\n", __FUNCTION__ , strlen(msg), IW_CUSTOM_MAX);
133                 return;
134         }
135
136         buff = rtw_zmalloc(IW_CUSTOM_MAX + 1);
137         if (!buff)
138                 return;
139
140         _rtw_memcpy(buff, msg, strlen(msg));
141
142         _rtw_memset(&wrqu, 0, sizeof(wrqu));
143         wrqu.data.length = strlen(msg);
144
145         RTW_INFO("%s %s\n", __FUNCTION__, buff);
146 #ifndef CONFIG_IOCTL_CFG80211
147         wireless_send_event(padapter->pnetdev, IWEVCUSTOM, &wrqu, buff);
148 #endif
149
150         rtw_mfree(buff, IW_CUSTOM_MAX + 1);
151
152 }
153
154
155 static void request_wps_pbc_event(_adapter *padapter)
156 {
157         u8 *buff, *p;
158         union iwreq_data wrqu;
159
160
161         buff = rtw_malloc(IW_CUSTOM_MAX);
162         if (!buff)
163                 return;
164
165         _rtw_memset(buff, 0, IW_CUSTOM_MAX);
166
167         p = buff;
168
169         p += sprintf(p, "WPS_PBC_START.request=TRUE");
170
171         _rtw_memset(&wrqu, 0, sizeof(wrqu));
172
173         wrqu.data.length = p - buff;
174
175         wrqu.data.length = (wrqu.data.length < IW_CUSTOM_MAX) ? wrqu.data.length : IW_CUSTOM_MAX;
176
177         RTW_INFO("%s\n", __FUNCTION__);
178
179 #ifndef CONFIG_IOCTL_CFG80211
180         wireless_send_event(padapter->pnetdev, IWEVCUSTOM, &wrqu, buff);
181 #endif
182
183         if (buff)
184                 rtw_mfree(buff, IW_CUSTOM_MAX);
185
186 }
187
188 #ifdef CONFIG_SUPPORT_HW_WPS_PBC
189 void rtw_request_wps_pbc_event(_adapter *padapter)
190 {
191 #ifdef RTK_DMP_PLATFORM
192 #if (LINUX_VERSION_CODE > KERNEL_VERSION(2, 6, 12))
193         kobject_uevent(&padapter->pnetdev->dev.kobj, KOBJ_NET_PBC);
194 #else
195         kobject_hotplug(&padapter->pnetdev->class_dev.kobj, KOBJ_NET_PBC);
196 #endif
197 #else
198
199         if (padapter->pid[0] == 0) {
200                 /*      0 is the default value and it means the application monitors the HW PBC doesn't privde its pid to driver. */
201                 return;
202         }
203
204         rtw_signal_process(padapter->pid[0], SIGUSR1);
205
206 #endif
207
208         rtw_led_control(padapter, LED_CTL_START_WPS_BOTTON);
209 }
210 #endif/* #ifdef CONFIG_SUPPORT_HW_WPS_PBC */
211
212 void indicate_wx_scan_complete_event(_adapter *padapter)
213 {
214         union iwreq_data wrqu;
215         struct  mlme_priv *pmlmepriv = &padapter->mlmepriv;
216
217         _rtw_memset(&wrqu, 0, sizeof(union iwreq_data));
218
219         /* RTW_INFO("+rtw_indicate_wx_scan_complete_event\n"); */
220 #ifndef CONFIG_IOCTL_CFG80211
221         wireless_send_event(padapter->pnetdev, SIOCGIWSCAN, &wrqu, NULL);
222 #endif
223 }
224
225
226 void rtw_indicate_wx_assoc_event(_adapter *padapter)
227 {
228         union iwreq_data wrqu;
229         struct  mlme_priv *pmlmepriv = &padapter->mlmepriv;
230         struct mlme_ext_priv    *pmlmeext = &padapter->mlmeextpriv;
231         struct mlme_ext_info    *pmlmeinfo = &(pmlmeext->mlmext_info);
232         WLAN_BSSID_EX           *pnetwork = (WLAN_BSSID_EX *)(&(pmlmeinfo->network));
233
234         _rtw_memset(&wrqu, 0, sizeof(union iwreq_data));
235
236         wrqu.ap_addr.sa_family = ARPHRD_ETHER;
237
238         if (check_fwstate(pmlmepriv, WIFI_ADHOC_MASTER_STATE) == _TRUE)
239                 _rtw_memcpy(wrqu.ap_addr.sa_data, pnetwork->MacAddress, ETH_ALEN);
240         else
241                 _rtw_memcpy(wrqu.ap_addr.sa_data, pmlmepriv->cur_network.network.MacAddress, ETH_ALEN);
242
243         RTW_PRINT("assoc success\n");
244 #ifndef CONFIG_IOCTL_CFG80211
245         wireless_send_event(padapter->pnetdev, SIOCGIWAP, &wrqu, NULL);
246 #endif
247 }
248
249 void rtw_indicate_wx_disassoc_event(_adapter *padapter)
250 {
251         union iwreq_data wrqu;
252
253         _rtw_memset(&wrqu, 0, sizeof(union iwreq_data));
254
255         wrqu.ap_addr.sa_family = ARPHRD_ETHER;
256         _rtw_memset(wrqu.ap_addr.sa_data, 0, ETH_ALEN);
257
258 #ifndef CONFIG_IOCTL_CFG80211
259         RTW_PRINT("indicate disassoc\n");
260         wireless_send_event(padapter->pnetdev, SIOCGIWAP, &wrqu, NULL);
261 #endif
262 }
263
264 /*
265 uint    rtw_is_cckrates_included(u8 *rate)
266 {
267                 u32     i = 0;
268
269                 while(rate[i]!=0)
270                 {
271                         if  (  (((rate[i]) & 0x7f) == 2)        || (((rate[i]) & 0x7f) == 4) ||
272                         (((rate[i]) & 0x7f) == 11)  || (((rate[i]) & 0x7f) == 22) )
273                         return _TRUE;
274                         i++;
275                 }
276
277                 return _FALSE;
278 }
279
280 uint    rtw_is_cckratesonly_included(u8 *rate)
281 {
282         u32 i = 0;
283
284         while(rate[i]!=0)
285         {
286                         if  (  (((rate[i]) & 0x7f) != 2) && (((rate[i]) & 0x7f) != 4) &&
287                                 (((rate[i]) & 0x7f) != 11)  && (((rate[i]) & 0x7f) != 22) )
288                         return _FALSE;
289                         i++;
290         }
291
292         return _TRUE;
293 }
294 */
295
296 static int search_p2p_wfd_ie(_adapter *padapter,
297                 struct iw_request_info *info, struct wlan_network *pnetwork,
298                 char *start, char *stop)
299 {
300 #ifdef CONFIG_P2P
301         struct wifidirect_info  *pwdinfo = &padapter->wdinfo;
302 #ifdef CONFIG_WFD
303         if (SCAN_RESULT_ALL == pwdinfo->wfd_info->scan_result_type) {
304
305         } else if ((SCAN_RESULT_P2P_ONLY == pwdinfo->wfd_info->scan_result_type) ||
306                 (SCAN_RESULT_WFD_TYPE == pwdinfo->wfd_info->scan_result_type))
307 #endif /* CONFIG_WFD */
308         {
309                 if (!rtw_p2p_chk_state(pwdinfo, P2P_STATE_NONE)) {
310                         u32     blnGotP2PIE = _FALSE;
311
312                         /*      User is doing the P2P device discovery */
313                         /*      The prefix of SSID should be "DIRECT-" and the IE should contains the P2P IE. */
314                         /*      If not, the driver should ignore this AP and go to the next AP. */
315
316                         /*      Verifying the SSID */
317                         if (_rtw_memcmp(pnetwork->network.Ssid.Ssid, pwdinfo->p2p_wildcard_ssid, P2P_WILDCARD_SSID_LEN)) {
318                                 u32     p2pielen = 0;
319
320                                 /*      Verifying the P2P IE */
321                                 if (rtw_bss_ex_get_p2p_ie(&pnetwork->network, NULL, &p2pielen))
322                                         blnGotP2PIE = _TRUE;
323                         }
324
325                         if (blnGotP2PIE == _FALSE)
326                                 return _FALSE;
327
328                 }
329         }
330
331 #ifdef CONFIG_WFD
332         if (SCAN_RESULT_WFD_TYPE == pwdinfo->wfd_info->scan_result_type) {
333                 u32     blnGotWFD = _FALSE;
334                 u8 *wfd_ie;
335                 uint wfd_ielen = 0;
336
337                 wfd_ie = rtw_bss_ex_get_wfd_ie(&pnetwork->network, NULL, &wfd_ielen);
338                 if (wfd_ie) {
339                         u8 *wfd_devinfo;
340                         uint wfd_devlen;
341
342                         wfd_devinfo = rtw_get_wfd_attr_content(wfd_ie, wfd_ielen, WFD_ATTR_DEVICE_INFO, NULL, &wfd_devlen);
343                         if (wfd_devinfo) {
344                                 if (pwdinfo->wfd_info->wfd_device_type == WFD_DEVINFO_PSINK) {
345                                         /*      the first two bits will indicate the WFD device type */
346                                         if ((wfd_devinfo[1] & 0x03) == WFD_DEVINFO_SOURCE) {
347                                                 /*      If this device is Miracast PSink device, the scan reuslt should just provide the Miracast source. */
348                                                 blnGotWFD = _TRUE;
349                                         }
350                                 } else if (pwdinfo->wfd_info->wfd_device_type == WFD_DEVINFO_SOURCE) {
351                                         /*      the first two bits will indicate the WFD device type */
352                                         if ((wfd_devinfo[1] & 0x03) == WFD_DEVINFO_PSINK) {
353                                                 /*      If this device is Miracast source device, the scan reuslt should just provide the Miracast PSink. */
354                                                 /*      Todo: How about the SSink?! */
355                                                 blnGotWFD = _TRUE;
356                                         }
357                                 }
358                         }
359                 }
360
361                 if (blnGotWFD == _FALSE)
362                         return _FALSE;
363         }
364 #endif /* CONFIG_WFD */
365
366 #endif /* CONFIG_P2P */
367         return _TRUE;
368 }
369 static inline char *iwe_stream_mac_addr_proess(_adapter *padapter,
370                 struct iw_request_info *info, struct wlan_network *pnetwork,
371                 char *start, char *stop, struct iw_event *iwe)
372 {
373         /*  AP MAC address */
374         iwe->cmd = SIOCGIWAP;
375         iwe->u.ap_addr.sa_family = ARPHRD_ETHER;
376
377         _rtw_memcpy(iwe->u.ap_addr.sa_data, pnetwork->network.MacAddress, ETH_ALEN);
378         start = iwe_stream_add_event(info, start, stop, iwe, IW_EV_ADDR_LEN);
379         return start;
380 }
381 static inline char *iwe_stream_essid_proess(_adapter *padapter,
382                 struct iw_request_info *info, struct wlan_network *pnetwork,
383                 char *start, char *stop, struct iw_event *iwe)
384 {
385
386         /* Add the ESSID */
387         iwe->cmd = SIOCGIWESSID;
388         iwe->u.data.flags = 1;
389         iwe->u.data.length = min((u16)pnetwork->network.Ssid.SsidLength, (u16)32);
390         start = iwe_stream_add_point(info, start, stop, iwe, pnetwork->network.Ssid.Ssid);
391         return start;
392 }
393
394 static inline char *iwe_stream_chan_process(_adapter *padapter,
395                 struct iw_request_info *info, struct wlan_network *pnetwork,
396                 char *start, char *stop, struct iw_event *iwe)
397 {
398         if (pnetwork->network.Configuration.DSConfig < 1 /*|| pnetwork->network.Configuration.DSConfig>14*/)
399                 pnetwork->network.Configuration.DSConfig = 1;
400
401         /* Add frequency/channel */
402         iwe->cmd = SIOCGIWFREQ;
403         iwe->u.freq.m = rtw_ch2freq(pnetwork->network.Configuration.DSConfig) * 100000;
404         iwe->u.freq.e = 1;
405         iwe->u.freq.i = pnetwork->network.Configuration.DSConfig;
406         start = iwe_stream_add_event(info, start, stop, iwe, IW_EV_FREQ_LEN);
407         return start;
408 }
409 static inline char *iwe_stream_mode_process(_adapter *padapter,
410                 struct iw_request_info *info, struct wlan_network *pnetwork,
411                 char *start, char *stop, struct iw_event *iwe, u16 cap)
412 {
413         /* Add mode */
414         if (cap & (WLAN_CAPABILITY_IBSS | WLAN_CAPABILITY_BSS)) {
415                 iwe->cmd = SIOCGIWMODE;
416                 if (cap & WLAN_CAPABILITY_BSS)
417                         iwe->u.mode = IW_MODE_MASTER;
418                 else
419                         iwe->u.mode = IW_MODE_ADHOC;
420
421                 start = iwe_stream_add_event(info, start, stop, iwe, IW_EV_UINT_LEN);
422         }
423         return start;
424 }
425 static inline char *iwe_stream_encryption_process(_adapter *padapter,
426                 struct iw_request_info *info, struct wlan_network *pnetwork,
427                 char *start, char *stop, struct iw_event *iwe, u16 cap)
428 {
429
430         /* Add encryption capability */
431         iwe->cmd = SIOCGIWENCODE;
432         if (cap & WLAN_CAPABILITY_PRIVACY)
433                 iwe->u.data.flags = IW_ENCODE_ENABLED | IW_ENCODE_NOKEY;
434         else
435                 iwe->u.data.flags = IW_ENCODE_DISABLED;
436         iwe->u.data.length = 0;
437         start = iwe_stream_add_point(info, start, stop, iwe, pnetwork->network.Ssid.Ssid);
438         return start;
439
440 }
441
442 static inline char *iwe_stream_protocol_process(_adapter *padapter,
443                 struct iw_request_info *info, struct wlan_network *pnetwork,
444                 char *start, char *stop, struct iw_event *iwe)
445 {
446         u16 ht_cap = _FALSE, vht_cap = _FALSE;
447         u32 ht_ielen = 0, vht_ielen = 0;
448         char *p;
449         u8 ie_offset = (pnetwork->network.Reserved[0] == 2 ? 0 : 12); /* Probe Request   */
450
451         /* parsing HT_CAP_IE     */
452         p = rtw_get_ie(&pnetwork->network.IEs[ie_offset], _HT_CAPABILITY_IE_, &ht_ielen, pnetwork->network.IELength - ie_offset);
453         if (p && ht_ielen > 0)
454                 ht_cap = _TRUE;
455
456 #ifdef CONFIG_80211AC_VHT
457         /* parsing VHT_CAP_IE */
458         p = rtw_get_ie(&pnetwork->network.IEs[ie_offset], EID_VHTCapability, &vht_ielen, pnetwork->network.IELength - ie_offset);
459         if (p && vht_ielen > 0)
460                 vht_cap = _TRUE;
461 #endif
462         /* Add the protocol name */
463         iwe->cmd = SIOCGIWNAME;
464         if ((rtw_is_cckratesonly_included((u8 *)&pnetwork->network.SupportedRates)) == _TRUE) {
465                 if (ht_cap == _TRUE)
466                         snprintf(iwe->u.name, IFNAMSIZ, "IEEE 802.11bn");
467                 else
468                         snprintf(iwe->u.name, IFNAMSIZ, "IEEE 802.11b");
469         } else if ((rtw_is_cckrates_included((u8 *)&pnetwork->network.SupportedRates)) == _TRUE) {
470                 if (ht_cap == _TRUE)
471                         snprintf(iwe->u.name, IFNAMSIZ, "IEEE 802.11bgn");
472                 else
473                         snprintf(iwe->u.name, IFNAMSIZ, "IEEE 802.11bg");
474         } else {
475                 if (pnetwork->network.Configuration.DSConfig > 14) {
476                         #ifdef CONFIG_80211AC_VHT
477                         if (vht_cap == _TRUE)
478                                 snprintf(iwe->u.name, IFNAMSIZ, "IEEE 802.11AC");
479                         else
480                         #endif
481                         {
482                                 if (ht_cap == _TRUE)
483                                         snprintf(iwe->u.name, IFNAMSIZ, "IEEE 802.11an");
484                                 else
485                                         snprintf(iwe->u.name, IFNAMSIZ, "IEEE 802.11a");
486                         }
487                 } else {
488                         if (ht_cap == _TRUE)
489                                 snprintf(iwe->u.name, IFNAMSIZ, "IEEE 802.11gn");
490                         else
491                                 snprintf(iwe->u.name, IFNAMSIZ, "IEEE 802.11g");
492                 }
493         }
494         start = iwe_stream_add_event(info, start, stop, iwe, IW_EV_CHAR_LEN);
495         return start;
496 }
497
498 static inline char *iwe_stream_rate_process(_adapter *padapter,
499                 struct iw_request_info *info, struct wlan_network *pnetwork,
500                 char *start, char *stop, struct iw_event *iwe)
501 {
502         u32 ht_ielen = 0, vht_ielen = 0;
503         char *p;
504         u16 max_rate = 0, rate, ht_cap = _FALSE, vht_cap = _FALSE;
505         u32 i = 0;
506         u8 bw_40MHz = 0, short_GI = 0, bw_160MHz = 0, vht_highest_rate = 0;
507         u16 mcs_rate = 0, vht_data_rate = 0;
508         char custom[MAX_CUSTOM_LEN] = {0};
509         u8 ie_offset = (pnetwork->network.Reserved[0] == 2 ? 0 : 12); /* Probe Request   */
510
511         /* parsing HT_CAP_IE     */
512         p = rtw_get_ie(&pnetwork->network.IEs[ie_offset], _HT_CAPABILITY_IE_, &ht_ielen, pnetwork->network.IELength - ie_offset);
513         if (p && ht_ielen > 0) {
514                 struct rtw_ieee80211_ht_cap *pht_capie;
515                 ht_cap = _TRUE;
516                 pht_capie = (struct rtw_ieee80211_ht_cap *)(p + 2);
517                 _rtw_memcpy(&mcs_rate , pht_capie->supp_mcs_set, 2);
518                 bw_40MHz = (pht_capie->cap_info & IEEE80211_HT_CAP_SUP_WIDTH) ? 1 : 0;
519                 short_GI = (pht_capie->cap_info & (IEEE80211_HT_CAP_SGI_20 | IEEE80211_HT_CAP_SGI_40)) ? 1 : 0;
520         }
521
522 #ifdef CONFIG_80211AC_VHT
523         /* parsing VHT_CAP_IE */
524         p = rtw_get_ie(&pnetwork->network.IEs[ie_offset], EID_VHTCapability, &vht_ielen, pnetwork->network.IELength - ie_offset);
525         if (p && vht_ielen > 0) {
526                 u8      mcs_map[2];
527
528                 vht_cap = _TRUE;
529                 bw_160MHz = GET_VHT_CAPABILITY_ELE_CHL_WIDTH(p + 2);
530                 if (bw_160MHz)
531                         short_GI = GET_VHT_CAPABILITY_ELE_SHORT_GI160M(p + 2);
532                 else
533                         short_GI = GET_VHT_CAPABILITY_ELE_SHORT_GI80M(p + 2);
534
535                 _rtw_memcpy(mcs_map, GET_VHT_CAPABILITY_ELE_TX_MCS(p + 2), 2);
536
537                 vht_highest_rate = rtw_get_vht_highest_rate(mcs_map);
538                 vht_data_rate = rtw_vht_mcs_to_data_rate(CHANNEL_WIDTH_80, short_GI, vht_highest_rate);
539         }
540 #endif
541
542         /*Add basic and extended rates */
543         p = custom;
544         p += snprintf(p, MAX_CUSTOM_LEN - (p - custom), " Rates (Mb/s): ");
545         while (pnetwork->network.SupportedRates[i] != 0) {
546                 rate = pnetwork->network.SupportedRates[i] & 0x7F;
547                 if (rate > max_rate)
548                         max_rate = rate;
549                 p += snprintf(p, MAX_CUSTOM_LEN - (p - custom),
550                               "%d%s ", rate >> 1, (rate & 1) ? ".5" : "");
551                 i++;
552         }
553 #ifdef CONFIG_80211AC_VHT
554         if (vht_cap == _TRUE)
555                 max_rate = vht_data_rate;
556         else
557 #endif
558                 if (ht_cap == _TRUE) {
559                         if (mcs_rate & 0x8000) /* MCS15 */
560                                 max_rate = (bw_40MHz) ? ((short_GI) ? 300 : 270) : ((short_GI) ? 144 : 130);
561
562                         else if (mcs_rate & 0x0080) /* MCS7 */
563                                 max_rate = (bw_40MHz) ? ((short_GI) ? 150 : 135) : ((short_GI) ? 72 : 65);
564                         else { /* default MCS7 */
565                                 /* RTW_INFO("wx_get_scan, mcs_rate_bitmap=0x%x\n", mcs_rate); */
566                                 max_rate = (bw_40MHz) ? ((short_GI) ? 150 : 135) : ((short_GI) ? 72 : 65);
567                         }
568
569                         max_rate = max_rate * 2; /* Mbps/2;              */
570                 }
571
572         iwe->cmd = SIOCGIWRATE;
573         iwe->u.bitrate.fixed = iwe->u.bitrate.disabled = 0;
574         iwe->u.bitrate.value = max_rate * 500000;
575         start = iwe_stream_add_event(info, start, stop, iwe, IW_EV_PARAM_LEN);
576         return start ;
577 }
578
579 static inline char *iwe_stream_wpa_wpa2_process(_adapter *padapter,
580                 struct iw_request_info *info, struct wlan_network *pnetwork,
581                 char *start, char *stop, struct iw_event *iwe)
582 {
583         int buf_size = MAX_WPA_IE_LEN * 2;
584         /* u8 pbuf[buf_size]={0};        */
585         u8 *pbuf = rtw_zmalloc(buf_size);
586
587         u8 wpa_ie[255] = {0}, rsn_ie[255] = {0};
588         u16 i, wpa_len = 0, rsn_len = 0;
589         u8 *p;
590         sint out_len = 0;
591
592
593         if (pbuf) {
594                 p = pbuf;
595
596                 /* parsing WPA/WPA2 IE */
597                 if (pnetwork->network.Reserved[0] != 2) { /* Probe Request */
598                         out_len = rtw_get_sec_ie(pnetwork->network.IEs , pnetwork->network.IELength, rsn_ie, &rsn_len, wpa_ie, &wpa_len);
599
600                         if (wpa_len > 0) {
601
602                                 _rtw_memset(pbuf, 0, buf_size);
603                                 p += sprintf(p, "wpa_ie=");
604                                 for (i = 0; i < wpa_len; i++)
605                                         p += sprintf(p, "%02x", wpa_ie[i]);
606
607                                 if (wpa_len > 100) {
608                                         printk("-----------------Len %d----------------\n", wpa_len);
609                                         for (i = 0; i < wpa_len; i++)
610                                                 printk("%02x ", wpa_ie[i]);
611                                         printk("\n");
612                                         printk("-----------------Len %d----------------\n", wpa_len);
613                                 }
614
615                                 _rtw_memset(iwe, 0, sizeof(*iwe));
616                                 iwe->cmd = IWEVCUSTOM;
617                                 iwe->u.data.length = strlen(pbuf);
618                                 start = iwe_stream_add_point(info, start, stop, iwe, pbuf);
619
620                                 _rtw_memset(iwe, 0, sizeof(*iwe));
621                                 iwe->cmd = IWEVGENIE;
622                                 iwe->u.data.length = wpa_len;
623                                 start = iwe_stream_add_point(info, start, stop, iwe, wpa_ie);
624                         }
625                         if (rsn_len > 0) {
626
627                                 _rtw_memset(pbuf, 0, buf_size);
628                                 p += sprintf(p, "rsn_ie=");
629                                 for (i = 0; i < rsn_len; i++)
630                                         p += sprintf(p, "%02x", rsn_ie[i]);
631                                 _rtw_memset(iwe, 0, sizeof(*iwe));
632                                 iwe->cmd = IWEVCUSTOM;
633                                 iwe->u.data.length = strlen(pbuf);
634                                 start = iwe_stream_add_point(info, start, stop, iwe, pbuf);
635
636                                 _rtw_memset(iwe, 0, sizeof(*iwe));
637                                 iwe->cmd = IWEVGENIE;
638                                 iwe->u.data.length = rsn_len;
639                                 start = iwe_stream_add_point(info, start, stop, iwe, rsn_ie);
640                         }
641                 }
642
643                 rtw_mfree(pbuf, buf_size);
644         }
645         return start;
646 }
647
648 static inline char *iwe_stream_wps_process(_adapter *padapter,
649                 struct iw_request_info *info, struct wlan_network *pnetwork,
650                 char *start, char *stop, struct iw_event *iwe)
651 {
652         /* parsing WPS IE */
653         uint cnt = 0, total_ielen;
654         u8 *wpsie_ptr = NULL;
655         uint wps_ielen = 0;
656         u8 ie_offset = (pnetwork->network.Reserved[0] == 2 ? 0 : 12);
657
658         u8 *ie_ptr = pnetwork->network.IEs + ie_offset;
659         total_ielen = pnetwork->network.IELength - ie_offset;
660
661         if (pnetwork->network.Reserved[0] == 2) { /* Probe Request */
662                 ie_ptr = pnetwork->network.IEs;
663                 total_ielen = pnetwork->network.IELength;
664         } else { /* Beacon or Probe Respones */
665                 ie_ptr = pnetwork->network.IEs + _FIXED_IE_LENGTH_;
666                 total_ielen = pnetwork->network.IELength - _FIXED_IE_LENGTH_;
667         }
668         while (cnt < total_ielen) {
669                 if (rtw_is_wps_ie(&ie_ptr[cnt], &wps_ielen) && (wps_ielen > 2)) {
670                         wpsie_ptr = &ie_ptr[cnt];
671                         iwe->cmd = IWEVGENIE;
672                         iwe->u.data.length = (u16)wps_ielen;
673                         start = iwe_stream_add_point(info, start, stop, iwe, wpsie_ptr);
674                 }
675                 cnt += ie_ptr[cnt + 1] + 2; /* goto next */
676         }
677         return start;
678 }
679
680 static inline char *iwe_stream_wapi_process(_adapter *padapter,
681                 struct iw_request_info *info, struct wlan_network *pnetwork,
682                 char *start, char *stop, struct iw_event *iwe)
683 {
684 #ifdef CONFIG_WAPI_SUPPORT
685         char *p;
686
687         if (pnetwork->network.Reserved[0] != 2) { /* Probe Request */
688                 sint out_len_wapi = 0;
689                 /* here use static for stack size */
690                 static u8 buf_wapi[MAX_WAPI_IE_LEN * 2] = {0};
691                 static u8 wapi_ie[MAX_WAPI_IE_LEN] = {0};
692                 u16 wapi_len = 0;
693                 u16  i;
694
695                 out_len_wapi = rtw_get_wapi_ie(pnetwork->network.IEs , pnetwork->network.IELength, wapi_ie, &wapi_len);
696
697                 RTW_INFO("rtw_wx_get_scan: %s ", pnetwork->network.Ssid.Ssid);
698                 RTW_INFO("rtw_wx_get_scan: ssid = %d ", wapi_len);
699
700
701                 if (wapi_len > 0) {
702                         p = buf_wapi;
703                         /* _rtw_memset(buf_wapi, 0, MAX_WAPI_IE_LEN*2); */
704                         p += sprintf(p, "wapi_ie=");
705                         for (i = 0; i < wapi_len; i++)
706                                 p += sprintf(p, "%02x", wapi_ie[i]);
707
708                         _rtw_memset(iwe, 0, sizeof(*iwe));
709                         iwe->cmd = IWEVCUSTOM;
710                         iwe->u.data.length = strlen(buf_wapi);
711                         start = iwe_stream_add_point(info, start, stop, iwe, buf_wapi);
712
713                         _rtw_memset(iwe, 0, sizeof(*iwe));
714                         iwe->cmd = IWEVGENIE;
715                         iwe->u.data.length = wapi_len;
716                         start = iwe_stream_add_point(info, start, stop, iwe, wapi_ie);
717                 }
718         }
719 #endif/* #ifdef CONFIG_WAPI_SUPPORT */
720         return start;
721 }
722
723 static inline char   *iwe_stream_rssi_process(_adapter *padapter,
724                 struct iw_request_info *info, struct wlan_network *pnetwork,
725                 char *start, char *stop, struct iw_event *iwe)
726 {
727         u8 ss, sq;
728         struct mlme_priv *pmlmepriv = &(padapter->mlmepriv);
729
730         /* Add quality statistics */
731         iwe->cmd = IWEVQUAL;
732         iwe->u.qual.updated = IW_QUAL_QUAL_UPDATED | IW_QUAL_LEVEL_UPDATED
733 #if defined(CONFIG_SIGNAL_DISPLAY_DBM) && defined(CONFIG_BACKGROUND_NOISE_MONITOR)
734                               | IW_QUAL_NOISE_UPDATED
735 #else
736                               | IW_QUAL_NOISE_INVALID
737 #endif
738 #ifdef CONFIG_SIGNAL_DISPLAY_DBM
739                               | IW_QUAL_DBM
740 #endif
741                               ;
742
743         if (check_fwstate(pmlmepriv, _FW_LINKED) == _TRUE &&
744             is_same_network(&pmlmepriv->cur_network.network, &pnetwork->network, 0)) {
745                 ss = padapter->recvpriv.signal_strength;
746                 sq = padapter->recvpriv.signal_qual;
747         } else {
748                 ss = pnetwork->network.PhyInfo.SignalStrength;
749                 sq = pnetwork->network.PhyInfo.SignalQuality;
750         }
751
752
753 #ifdef CONFIG_SIGNAL_DISPLAY_DBM
754         iwe->u.qual.level = (u8) translate_percentage_to_dbm(ss); /* dbm */
755 #else
756 #ifdef CONFIG_SIGNAL_SCALE_MAPPING
757         iwe->u.qual.level = (u8)ss; /* % */
758 #else
759         {
760                 /* Do signal scale mapping when using percentage as the unit of signal strength, since the scale mapping is skipped in odm */
761
762                 HAL_DATA_TYPE *pHal = GET_HAL_DATA(padapter);
763
764                 iwe->u.qual.level = (u8)odm_signal_scale_mapping(&pHal->odmpriv, ss);
765         }
766 #endif
767 #endif
768
769         iwe->u.qual.qual = (u8)sq;   /* signal quality */
770
771 #ifdef CONFIG_PLATFORM_ROCKCHIPS
772         iwe->u.qual.noise = -100; /* noise level suggest by zhf@rockchips */
773 #else
774 #if defined(CONFIG_SIGNAL_DISPLAY_DBM) && defined(CONFIG_BACKGROUND_NOISE_MONITOR)
775         {
776                 s16 tmp_noise = 0;
777                 rtw_hal_get_odm_var(padapter, HAL_ODM_NOISE_MONITOR, &(pnetwork->network.Configuration.DSConfig), &(tmp_noise));
778                 iwe->u.qual.noise = tmp_noise ;
779         }
780 #else
781         iwe->u.qual.noise = 0; /* noise level */
782 #endif
783 #endif /* CONFIG_PLATFORM_ROCKCHIPS */
784
785         /* RTW_INFO("iqual=%d, ilevel=%d, inoise=%d, iupdated=%d\n", iwe.u.qual.qual, iwe.u.qual.level , iwe.u.qual.noise, iwe.u.qual.updated); */
786
787         start = iwe_stream_add_event(info, start, stop, iwe, IW_EV_QUAL_LEN);
788         return start;
789 }
790
791 static inline char   *iwe_stream_net_rsv_process(_adapter *padapter,
792                 struct iw_request_info *info, struct wlan_network *pnetwork,
793                 char *start, char *stop, struct iw_event *iwe)
794 {
795         u8 buf[32] = {0};
796         u8 *p, *pos;
797         int len;
798         p = buf;
799         pos = pnetwork->network.Reserved;
800
801         p += sprintf(p, "fm=%02X%02X", pos[1], pos[0]);
802         _rtw_memset(iwe, 0, sizeof(*iwe));
803         iwe->cmd = IWEVCUSTOM;
804         iwe->u.data.length = strlen(buf);
805         start = iwe_stream_add_point(info, start, stop, iwe, buf);
806         return start;
807 }
808
809 #if 1
810 static char *translate_scan(_adapter *padapter,
811                 struct iw_request_info *info, struct wlan_network *pnetwork,
812                 char *start, char *stop)
813 {
814         struct iw_event iwe;
815         u16 cap = 0;
816         _rtw_memset(&iwe, 0, sizeof(iwe));
817
818         if (_FALSE == search_p2p_wfd_ie(padapter, info, pnetwork, start, stop))
819                 return start;
820
821         start = iwe_stream_mac_addr_proess(padapter, info, pnetwork, start, stop, &iwe);
822         start = iwe_stream_essid_proess(padapter, info, pnetwork, start, stop, &iwe);
823         start = iwe_stream_protocol_process(padapter, info, pnetwork, start, stop, &iwe);
824         if (pnetwork->network.Reserved[0] == 2) /* Probe Request */
825                 cap = 0;
826         else {
827                 _rtw_memcpy((u8 *)&cap, rtw_get_capability_from_ie(pnetwork->network.IEs), 2);
828                 cap = le16_to_cpu(cap);
829         }
830
831         start = iwe_stream_mode_process(padapter, info, pnetwork, start, stop, &iwe, cap);
832         start = iwe_stream_chan_process(padapter, info, pnetwork, start, stop, &iwe);
833         start = iwe_stream_encryption_process(padapter, info, pnetwork, start, stop, &iwe, cap);
834         start = iwe_stream_rate_process(padapter, info, pnetwork, start, stop, &iwe);
835         start = iwe_stream_wpa_wpa2_process(padapter, info, pnetwork, start, stop, &iwe);
836         start = iwe_stream_wps_process(padapter, info, pnetwork, start, stop, &iwe);
837         start = iwe_stream_wapi_process(padapter, info, pnetwork, start, stop, &iwe);
838         start = iwe_stream_rssi_process(padapter, info, pnetwork, start, stop, &iwe);
839         start = iwe_stream_net_rsv_process(padapter, info, pnetwork, start, stop, &iwe);
840
841         return start;
842 }
843 #else
844 static char *translate_scan(_adapter *padapter,
845                 struct iw_request_info *info, struct wlan_network *pnetwork,
846                 char *start, char *stop)
847 {
848         struct iw_event iwe;
849         u16 cap;
850         u32 ht_ielen = 0, vht_ielen = 0;
851         char custom[MAX_CUSTOM_LEN];
852         char *p;
853         u16 max_rate = 0, rate, ht_cap = _FALSE, vht_cap = _FALSE;
854         u32 i = 0;
855         char    *current_val;
856         long rssi;
857         u8 bw_40MHz = 0, short_GI = 0, bw_160MHz = 0, vht_highest_rate = 0;
858         u16 mcs_rate = 0, vht_data_rate = 0;
859         u8 ie_offset = (pnetwork->network.Reserved[0] == 2 ? 0 : 12);
860         struct registry_priv *pregpriv = &padapter->registrypriv;
861
862         if (_FALSE == search_p2p_wfd_ie(padapter, info, pnetwork, start, stop))
863                 return start;
864
865         /*  AP MAC address */
866         iwe.cmd = SIOCGIWAP;
867         iwe.u.ap_addr.sa_family = ARPHRD_ETHER;
868
869         _rtw_memcpy(iwe.u.ap_addr.sa_data, pnetwork->network.MacAddress, ETH_ALEN);
870         start = iwe_stream_add_event(info, start, stop, &iwe, IW_EV_ADDR_LEN);
871
872         /* Add the ESSID */
873         iwe.cmd = SIOCGIWESSID;
874         iwe.u.data.flags = 1;
875         iwe.u.data.length = min((u16)pnetwork->network.Ssid.SsidLength, (u16)32);
876         start = iwe_stream_add_point(info, start, stop, &iwe, pnetwork->network.Ssid.Ssid);
877
878         /* parsing HT_CAP_IE */
879         if (pnetwork->network.Reserved[0] == 2) /* Probe Request */
880                 p = rtw_get_ie(&pnetwork->network.IEs[0], _HT_CAPABILITY_IE_, &ht_ielen, pnetwork->network.IELength);
881         else
882                 p = rtw_get_ie(&pnetwork->network.IEs[12], _HT_CAPABILITY_IE_, &ht_ielen, pnetwork->network.IELength - 12);
883         if (p && ht_ielen > 0) {
884                 struct rtw_ieee80211_ht_cap *pht_capie;
885                 ht_cap = _TRUE;
886                 pht_capie = (struct rtw_ieee80211_ht_cap *)(p + 2);
887                 _rtw_memcpy(&mcs_rate , pht_capie->supp_mcs_set, 2);
888                 bw_40MHz = (pht_capie->cap_info & IEEE80211_HT_CAP_SUP_WIDTH) ? 1 : 0;
889                 short_GI = (pht_capie->cap_info & (IEEE80211_HT_CAP_SGI_20 | IEEE80211_HT_CAP_SGI_40)) ? 1 : 0;
890         }
891
892 #ifdef CONFIG_80211AC_VHT
893         /* parsing VHT_CAP_IE */
894         p = rtw_get_ie(&pnetwork->network.IEs[ie_offset], EID_VHTCapability, &vht_ielen, pnetwork->network.IELength - ie_offset);
895         if (p && vht_ielen > 0) {
896                 u8      mcs_map[2];
897
898                 vht_cap = _TRUE;
899                 bw_160MHz = GET_VHT_CAPABILITY_ELE_CHL_WIDTH(p + 2);
900                 if (bw_160MHz)
901                         short_GI = GET_VHT_CAPABILITY_ELE_SHORT_GI160M(p + 2);
902                 else
903                         short_GI = GET_VHT_CAPABILITY_ELE_SHORT_GI80M(p + 2);
904
905                 _rtw_memcpy(mcs_map, GET_VHT_CAPABILITY_ELE_TX_MCS(p + 2), 2);
906
907                 vht_highest_rate = rtw_get_vht_highest_rate(mcs_map);
908                 vht_data_rate = rtw_vht_mcs_to_data_rate(CHANNEL_WIDTH_80, short_GI, vht_highest_rate);
909         }
910 #endif
911
912         /* Add the protocol name */
913         iwe.cmd = SIOCGIWNAME;
914         if ((rtw_is_cckratesonly_included((u8 *)&pnetwork->network.SupportedRates)) == _TRUE) {
915                 if (ht_cap == _TRUE)
916                         snprintf(iwe.u.name, IFNAMSIZ, "IEEE 802.11bn");
917                 else
918                         snprintf(iwe.u.name, IFNAMSIZ, "IEEE 802.11b");
919         } else if ((rtw_is_cckrates_included((u8 *)&pnetwork->network.SupportedRates)) == _TRUE) {
920                 if (ht_cap == _TRUE)
921                         snprintf(iwe.u.name, IFNAMSIZ, "IEEE 802.11bgn");
922                 else
923                         snprintf(iwe.u.name, IFNAMSIZ, "IEEE 802.11bg");
924         } else {
925                 if (pnetwork->network.Configuration.DSConfig > 14) {
926                         if (vht_cap == _TRUE)
927                                 snprintf(iwe.u.name, IFNAMSIZ, "IEEE 802.11AC");
928                         else if (ht_cap == _TRUE)
929                                 snprintf(iwe.u.name, IFNAMSIZ, "IEEE 802.11an");
930                         else
931                                 snprintf(iwe.u.name, IFNAMSIZ, "IEEE 802.11a");
932                 } else {
933                         if (ht_cap == _TRUE)
934                                 snprintf(iwe.u.name, IFNAMSIZ, "IEEE 802.11gn");
935                         else
936                                 snprintf(iwe.u.name, IFNAMSIZ, "IEEE 802.11g");
937                 }
938         }
939
940         start = iwe_stream_add_event(info, start, stop, &iwe, IW_EV_CHAR_LEN);
941
942         /* Add mode */
943         if (pnetwork->network.Reserved[0] == 2) /* Probe Request */
944                 cap = 0;
945         else {
946                 iwe.cmd = SIOCGIWMODE;
947                 _rtw_memcpy((u8 *)&cap, rtw_get_capability_from_ie(pnetwork->network.IEs), 2);
948                 cap = le16_to_cpu(cap);
949         }
950
951         if (cap & (WLAN_CAPABILITY_IBSS | WLAN_CAPABILITY_BSS)) {
952                 if (cap & WLAN_CAPABILITY_BSS)
953                         iwe.u.mode = IW_MODE_MASTER;
954                 else
955                         iwe.u.mode = IW_MODE_ADHOC;
956
957                 start = iwe_stream_add_event(info, start, stop, &iwe, IW_EV_UINT_LEN);
958         }
959
960         if (pnetwork->network.Configuration.DSConfig < 1 /*|| pnetwork->network.Configuration.DSConfig>14*/)
961                 pnetwork->network.Configuration.DSConfig = 1;
962
963         /* Add frequency/channel */
964         iwe.cmd = SIOCGIWFREQ;
965         iwe.u.freq.m = rtw_ch2freq(pnetwork->network.Configuration.DSConfig) * 100000;
966         iwe.u.freq.e = 1;
967         iwe.u.freq.i = pnetwork->network.Configuration.DSConfig;
968         start = iwe_stream_add_event(info, start, stop, &iwe, IW_EV_FREQ_LEN);
969
970         /* Add encryption capability */
971         iwe.cmd = SIOCGIWENCODE;
972         if (cap & WLAN_CAPABILITY_PRIVACY)
973                 iwe.u.data.flags = IW_ENCODE_ENABLED | IW_ENCODE_NOKEY;
974         else
975                 iwe.u.data.flags = IW_ENCODE_DISABLED;
976         iwe.u.data.length = 0;
977         start = iwe_stream_add_point(info, start, stop, &iwe, pnetwork->network.Ssid.Ssid);
978
979         /*Add basic and extended rates */
980         max_rate = 0;
981         p = custom;
982         p += snprintf(p, MAX_CUSTOM_LEN - (p - custom), " Rates (Mb/s): ");
983         while (pnetwork->network.SupportedRates[i] != 0) {
984                 rate = pnetwork->network.SupportedRates[i] & 0x7F;
985                 if (rate > max_rate)
986                         max_rate = rate;
987                 p += snprintf(p, MAX_CUSTOM_LEN - (p - custom),
988                               "%d%s ", rate >> 1, (rate & 1) ? ".5" : "");
989                 i++;
990         }
991
992         if (vht_cap == _TRUE)
993                 max_rate = vht_data_rate;
994         else if (ht_cap == _TRUE) {
995                 if (mcs_rate & 0x8000) /* MCS15 */
996                         max_rate = (bw_40MHz) ? ((short_GI) ? 300 : 270) : ((short_GI) ? 144 : 130);
997
998                 else if (mcs_rate & 0x0080) /* MCS7 */
999                         max_rate = (bw_40MHz) ? ((short_GI) ? 150 : 135) : ((short_GI) ? 72 : 65);
1000                 else { /* default MCS7 */
1001                         /* RTW_INFO("wx_get_scan, mcs_rate_bitmap=0x%x\n", mcs_rate); */
1002                         max_rate = (bw_40MHz) ? ((short_GI) ? 150 : 135) : ((short_GI) ? 72 : 65);
1003                 }
1004
1005                 max_rate = max_rate * 2; /* Mbps/2;              */
1006         }
1007
1008         iwe.cmd = SIOCGIWRATE;
1009         iwe.u.bitrate.fixed = iwe.u.bitrate.disabled = 0;
1010         iwe.u.bitrate.value = max_rate * 500000;
1011         start = iwe_stream_add_event(info, start, stop, &iwe, IW_EV_PARAM_LEN);
1012
1013         /* parsing WPA/WPA2 IE */
1014         if (pnetwork->network.Reserved[0] != 2) { /* Probe Request */
1015                 u8 buf[MAX_WPA_IE_LEN * 2];
1016                 u8 wpa_ie[255], rsn_ie[255];
1017                 u16 wpa_len = 0, rsn_len = 0;
1018                 u8 *p;
1019                 sint out_len = 0;
1020                 out_len = rtw_get_sec_ie(pnetwork->network.IEs , pnetwork->network.IELength, rsn_ie, &rsn_len, wpa_ie, &wpa_len);
1021
1022                 if (wpa_len > 0) {
1023                         p = buf;
1024                         _rtw_memset(buf, 0, MAX_WPA_IE_LEN * 2);
1025                         p += sprintf(p, "wpa_ie=");
1026                         for (i = 0; i < wpa_len; i++)
1027                                 p += sprintf(p, "%02x", wpa_ie[i]);
1028
1029                         if (wpa_len > 100) {
1030                                 printk("-----------------Len %d----------------\n", wpa_len);
1031                                 for (i = 0; i < wpa_len; i++)
1032                                         printk("%02x ", wpa_ie[i]);
1033                                 printk("\n");
1034                                 printk("-----------------Len %d----------------\n", wpa_len);
1035                         }
1036
1037                         _rtw_memset(&iwe, 0, sizeof(iwe));
1038                         iwe.cmd = IWEVCUSTOM;
1039                         iwe.u.data.length = strlen(buf);
1040                         start = iwe_stream_add_point(info, start, stop, &iwe, buf);
1041
1042                         _rtw_memset(&iwe, 0, sizeof(iwe));
1043                         iwe.cmd = IWEVGENIE;
1044                         iwe.u.data.length = wpa_len;
1045                         start = iwe_stream_add_point(info, start, stop, &iwe, wpa_ie);
1046                 }
1047                 if (rsn_len > 0) {
1048                         p = buf;
1049                         _rtw_memset(buf, 0, MAX_WPA_IE_LEN * 2);
1050                         p += sprintf(p, "rsn_ie=");
1051                         for (i = 0; i < rsn_len; i++)
1052                                 p += sprintf(p, "%02x", rsn_ie[i]);
1053                         _rtw_memset(&iwe, 0, sizeof(iwe));
1054                         iwe.cmd = IWEVCUSTOM;
1055                         iwe.u.data.length = strlen(buf);
1056                         start = iwe_stream_add_point(info, start, stop, &iwe, buf);
1057
1058                         _rtw_memset(&iwe, 0, sizeof(iwe));
1059                         iwe.cmd = IWEVGENIE;
1060                         iwe.u.data.length = rsn_len;
1061                         start = iwe_stream_add_point(info, start, stop, &iwe, rsn_ie);
1062                 }
1063         }
1064
1065         { /* parsing WPS IE */
1066                 uint cnt = 0, total_ielen;
1067                 u8 *wpsie_ptr = NULL;
1068                 uint wps_ielen = 0;
1069
1070                 u8 *ie_ptr = pnetwork->network.IEs + ie_offset;
1071                 total_ielen = pnetwork->network.IELength - ie_offset;
1072
1073                 if (pnetwork->network.Reserved[0] == 2) { /* Probe Request */
1074                         ie_ptr = pnetwork->network.IEs;
1075                         total_ielen = pnetwork->network.IELength;
1076                 } else { /* Beacon or Probe Respones */
1077                         ie_ptr = pnetwork->network.IEs + _FIXED_IE_LENGTH_;
1078                         total_ielen = pnetwork->network.IELength - _FIXED_IE_LENGTH_;
1079                 }
1080
1081                 while (cnt < total_ielen) {
1082                         if (rtw_is_wps_ie(&ie_ptr[cnt], &wps_ielen) && (wps_ielen > 2)) {
1083                                 wpsie_ptr = &ie_ptr[cnt];
1084                                 iwe.cmd = IWEVGENIE;
1085                                 iwe.u.data.length = (u16)wps_ielen;
1086                                 start = iwe_stream_add_point(info, start, stop, &iwe, wpsie_ptr);
1087                         }
1088                         cnt += ie_ptr[cnt + 1] + 2; /* goto next */
1089                 }
1090         }
1091
1092 #ifdef CONFIG_WAPI_SUPPORT
1093         if (pnetwork->network.Reserved[0] != 2) { /* Probe Request */
1094                 sint out_len_wapi = 0;
1095                 /* here use static for stack size */
1096                 static u8 buf_wapi[MAX_WAPI_IE_LEN * 2];
1097                 static u8 wapi_ie[MAX_WAPI_IE_LEN];
1098                 u16 wapi_len = 0;
1099                 u16  i;
1100
1101                 _rtw_memset(buf_wapi, 0, MAX_WAPI_IE_LEN);
1102                 _rtw_memset(wapi_ie, 0, MAX_WAPI_IE_LEN);
1103
1104                 out_len_wapi = rtw_get_wapi_ie(pnetwork->network.IEs , pnetwork->network.IELength, wapi_ie, &wapi_len);
1105
1106                 RTW_INFO("rtw_wx_get_scan: %s ", pnetwork->network.Ssid.Ssid);
1107                 RTW_INFO("rtw_wx_get_scan: ssid = %d ", wapi_len);
1108
1109
1110                 if (wapi_len > 0) {
1111                         p = buf_wapi;
1112                         _rtw_memset(buf_wapi, 0, MAX_WAPI_IE_LEN * 2);
1113                         p += sprintf(p, "wapi_ie=");
1114                         for (i = 0; i < wapi_len; i++)
1115                                 p += sprintf(p, "%02x", wapi_ie[i]);
1116
1117                         _rtw_memset(&iwe, 0, sizeof(iwe));
1118                         iwe.cmd = IWEVCUSTOM;
1119                         iwe.u.data.length = strlen(buf_wapi);
1120                         start = iwe_stream_add_point(info, start, stop, &iwe, buf_wapi);
1121
1122                         _rtw_memset(&iwe, 0, sizeof(iwe));
1123                         iwe.cmd = IWEVGENIE;
1124                         iwe.u.data.length = wapi_len;
1125                         start = iwe_stream_add_point(info, start, stop, &iwe, wapi_ie);
1126                 }
1127         }
1128 #endif
1129
1130         {
1131                 struct mlme_priv *pmlmepriv = &(padapter->mlmepriv);
1132                 u8 ss, sq;
1133
1134                 /* Add quality statistics */
1135                 iwe.cmd = IWEVQUAL;
1136                 iwe.u.qual.updated = IW_QUAL_QUAL_UPDATED | IW_QUAL_LEVEL_UPDATED
1137 #if defined(CONFIG_SIGNAL_DISPLAY_DBM) && defined(CONFIG_BACKGROUND_NOISE_MONITOR)
1138                                      | IW_QUAL_NOISE_UPDATED
1139 #else
1140                                      | IW_QUAL_NOISE_INVALID
1141 #endif
1142 #ifdef CONFIG_SIGNAL_DISPLAY_DBM
1143                                      | IW_QUAL_DBM
1144 #endif
1145                                      ;
1146
1147                 if (check_fwstate(pmlmepriv, _FW_LINKED) == _TRUE &&
1148                     is_same_network(&pmlmepriv->cur_network.network, &pnetwork->network, 0)) {
1149                         ss = padapter->recvpriv.signal_strength;
1150                         sq = padapter->recvpriv.signal_qual;
1151                 } else {
1152                         ss = pnetwork->network.PhyInfo.SignalStrength;
1153                         sq = pnetwork->network.PhyInfo.SignalQuality;
1154                 }
1155
1156
1157 #ifdef CONFIG_SIGNAL_DISPLAY_DBM
1158                 iwe.u.qual.level = (u8) translate_percentage_to_dbm(ss); /* dbm */
1159 #else
1160 #ifdef CONFIG_SIGNAL_SCALE_MAPPING
1161                 iwe.u.qual.level = (u8)ss; /* % */
1162 #else
1163                 {
1164                         /* Do signal scale mapping when using percentage as the unit of signal strength, since the scale mapping is skipped in odm */
1165
1166                         HAL_DATA_TYPE *pHal = GET_HAL_DATA(padapter);
1167
1168                         iwe.u.qual.level = (u8)odm_signal_scale_mapping(&pHal->odmpriv, ss);
1169                 }
1170 #endif
1171 #endif
1172
1173                 iwe.u.qual.qual = (u8)sq;   /* signal quality */
1174
1175 #ifdef CONFIG_PLATFORM_ROCKCHIPS
1176                 iwe.u.qual.noise = -100; /* noise level suggest by zhf@rockchips */
1177 #else
1178 #if defined(CONFIG_SIGNAL_DISPLAY_DBM) && defined(CONFIG_BACKGROUND_NOISE_MONITOR)
1179                 {
1180                         s16 tmp_noise = 0;
1181                         rtw_hal_get_odm_var(padapter, HAL_ODM_NOISE_MONITOR, &(pnetwork->network.Configuration.DSConfig), &(tmp_noise));
1182                         iwe.u.qual.noise = tmp_noise ;
1183                 }
1184 #else
1185                 iwe.u.qual.noise = 0; /* noise level */
1186 #endif
1187 #endif /* CONFIG_PLATFORM_ROCKCHIPS */
1188
1189                 /* RTW_INFO("iqual=%d, ilevel=%d, inoise=%d, iupdated=%d\n", iwe.u.qual.qual, iwe.u.qual.level , iwe.u.qual.noise, iwe.u.qual.updated); */
1190
1191                 start = iwe_stream_add_event(info, start, stop, &iwe, IW_EV_QUAL_LEN);
1192         }
1193
1194         {
1195                 u8 buf[MAX_WPA_IE_LEN];
1196                 u8 *p, *pos;
1197                 int len;
1198                 p = buf;
1199                 pos = pnetwork->network.Reserved;
1200                 _rtw_memset(buf, 0, MAX_WPA_IE_LEN);
1201                 p += sprintf(p, "fm=%02X%02X", pos[1], pos[0]);
1202                 _rtw_memset(&iwe, 0, sizeof(iwe));
1203                 iwe.cmd = IWEVCUSTOM;
1204                 iwe.u.data.length = strlen(buf);
1205                 start = iwe_stream_add_point(info, start, stop, &iwe, buf);
1206         }
1207
1208         return start;
1209 }
1210 #endif
1211
1212 static int wpa_set_auth_algs(struct net_device *dev, u32 value)
1213 {
1214         _adapter *padapter = (_adapter *) rtw_netdev_priv(dev);
1215         int ret = 0;
1216
1217         if ((value & AUTH_ALG_SHARED_KEY) && (value & AUTH_ALG_OPEN_SYSTEM)) {
1218                 RTW_INFO("wpa_set_auth_algs, AUTH_ALG_SHARED_KEY and  AUTH_ALG_OPEN_SYSTEM [value:0x%x]\n", value);
1219                 padapter->securitypriv.ndisencryptstatus = Ndis802_11Encryption1Enabled;
1220                 padapter->securitypriv.ndisauthtype = Ndis802_11AuthModeAutoSwitch;
1221                 padapter->securitypriv.dot11AuthAlgrthm = dot11AuthAlgrthm_Auto;
1222         } else if (value & AUTH_ALG_SHARED_KEY) {
1223                 RTW_INFO("wpa_set_auth_algs, AUTH_ALG_SHARED_KEY  [value:0x%x]\n", value);
1224                 padapter->securitypriv.ndisencryptstatus = Ndis802_11Encryption1Enabled;
1225
1226 #ifdef CONFIG_PLATFORM_MT53XX
1227                 padapter->securitypriv.ndisauthtype = Ndis802_11AuthModeAutoSwitch;
1228                 padapter->securitypriv.dot11AuthAlgrthm = dot11AuthAlgrthm_Auto;
1229 #else
1230                 padapter->securitypriv.ndisauthtype = Ndis802_11AuthModeShared;
1231                 padapter->securitypriv.dot11AuthAlgrthm = dot11AuthAlgrthm_Shared;
1232 #endif
1233         } else if (value & AUTH_ALG_OPEN_SYSTEM) {
1234                 RTW_INFO("wpa_set_auth_algs, AUTH_ALG_OPEN_SYSTEM\n");
1235                 /* padapter->securitypriv.ndisencryptstatus = Ndis802_11EncryptionDisabled; */
1236                 if (padapter->securitypriv.ndisauthtype < Ndis802_11AuthModeWPAPSK) {
1237 #ifdef CONFIG_PLATFORM_MT53XX
1238                         padapter->securitypriv.ndisauthtype = Ndis802_11AuthModeAutoSwitch;
1239                         padapter->securitypriv.dot11AuthAlgrthm = dot11AuthAlgrthm_Auto;
1240 #else
1241                         padapter->securitypriv.ndisauthtype = Ndis802_11AuthModeOpen;
1242                         padapter->securitypriv.dot11AuthAlgrthm = dot11AuthAlgrthm_Open;
1243 #endif
1244                 }
1245
1246         } else if (value & AUTH_ALG_LEAP)
1247                 RTW_INFO("wpa_set_auth_algs, AUTH_ALG_LEAP\n");
1248         else {
1249                 RTW_INFO("wpa_set_auth_algs, error!\n");
1250                 ret = -EINVAL;
1251         }
1252
1253         return ret;
1254
1255 }
1256
1257 static int wpa_set_encryption(struct net_device *dev, struct ieee_param *param, u32 param_len)
1258 {
1259         int ret = 0;
1260         u32 wep_key_idx, wep_key_len, wep_total_len;
1261         _adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
1262         struct mlme_priv        *pmlmepriv = &padapter->mlmepriv;
1263         struct security_priv *psecuritypriv = &padapter->securitypriv;
1264 #ifdef CONFIG_P2P
1265         struct wifidirect_info *pwdinfo = &padapter->wdinfo;
1266 #endif /* CONFIG_P2P */
1267
1268
1269         param->u.crypt.err = 0;
1270         param->u.crypt.alg[IEEE_CRYPT_ALG_NAME_LEN - 1] = '\0';
1271
1272         if (param_len < (u32)((u8 *) param->u.crypt.key - (u8 *) param) + param->u.crypt.key_len) {
1273                 ret =  -EINVAL;
1274                 goto exit;
1275         }
1276
1277         if (param->sta_addr[0] == 0xff && param->sta_addr[1] == 0xff &&
1278             param->sta_addr[2] == 0xff && param->sta_addr[3] == 0xff &&
1279             param->sta_addr[4] == 0xff && param->sta_addr[5] == 0xff) {
1280
1281                 if (param->u.crypt.idx >= WEP_KEYS
1282 #ifdef CONFIG_IEEE80211W
1283                     && param->u.crypt.idx > BIP_MAX_KEYID
1284 #endif /* CONFIG_IEEE80211W */
1285                    ) {
1286                         ret = -EINVAL;
1287                         goto exit;
1288                 }
1289         } else {
1290 #ifdef CONFIG_WAPI_SUPPORT
1291                 if (strcmp(param->u.crypt.alg, "SMS4"))
1292 #endif
1293                 {
1294                         ret = -EINVAL;
1295                         goto exit;
1296                 }
1297         }
1298
1299         if (strcmp(param->u.crypt.alg, "WEP") == 0) {
1300                 RTW_INFO("wpa_set_encryption, crypt.alg = WEP\n");
1301
1302                 wep_key_idx = param->u.crypt.idx;
1303                 wep_key_len = param->u.crypt.key_len;
1304
1305                 if ((wep_key_idx > WEP_KEYS) || (wep_key_len <= 0)) {
1306                         ret = -EINVAL;
1307                         goto exit;
1308                 }
1309
1310                 if (psecuritypriv->bWepDefaultKeyIdxSet == 0) {
1311                         /* wep default key has not been set, so use this key index as default key.*/
1312
1313                         wep_key_len = wep_key_len <= 5 ? 5 : 13;
1314
1315                         psecuritypriv->ndisencryptstatus = Ndis802_11Encryption1Enabled;
1316                         psecuritypriv->dot11PrivacyAlgrthm = _WEP40_;
1317                         psecuritypriv->dot118021XGrpPrivacy = _WEP40_;
1318
1319                         if (wep_key_len == 13) {
1320                                 psecuritypriv->dot11PrivacyAlgrthm = _WEP104_;
1321                                 psecuritypriv->dot118021XGrpPrivacy = _WEP104_;
1322                         }
1323
1324                         psecuritypriv->dot11PrivacyKeyIndex = wep_key_idx;
1325                 }
1326
1327                 _rtw_memcpy(&(psecuritypriv->dot11DefKey[wep_key_idx].skey[0]), param->u.crypt.key, wep_key_len);
1328
1329                 psecuritypriv->dot11DefKeylen[wep_key_idx] = wep_key_len;
1330
1331                 psecuritypriv->key_mask |= BIT(wep_key_idx);
1332
1333                 goto exit;
1334         }
1335
1336         if (padapter->securitypriv.dot11AuthAlgrthm == dot11AuthAlgrthm_8021X) { /* 802_1x */
1337                 struct sta_info *psta, *pbcmc_sta;
1338                 struct sta_priv *pstapriv = &padapter->stapriv;
1339
1340                 if (check_fwstate(pmlmepriv, WIFI_STATION_STATE | WIFI_MP_STATE) == _TRUE) { /* sta mode */
1341                         psta = rtw_get_stainfo(pstapriv, get_bssid(pmlmepriv));
1342                         if (psta == NULL) {
1343                                 /* DEBUG_ERR( ("Set wpa_set_encryption: Obtain Sta_info fail\n")); */
1344                         } else {
1345                                 /* Jeff: don't disable ieee8021x_blocked while clearing key */
1346                                 if (strcmp(param->u.crypt.alg, "none") != 0)
1347                                         psta->ieee8021x_blocked = _FALSE;
1348
1349                                 if ((padapter->securitypriv.ndisencryptstatus == Ndis802_11Encryption2Enabled) ||
1350                                     (padapter->securitypriv.ndisencryptstatus ==  Ndis802_11Encryption3Enabled))
1351                                         psta->dot118021XPrivacy = padapter->securitypriv.dot11PrivacyAlgrthm;
1352
1353                                 if (param->u.crypt.set_tx == 1) { /* pairwise key */
1354                                         _rtw_memcpy(psta->dot118021x_UncstKey.skey,  param->u.crypt.key, (param->u.crypt.key_len > 16 ? 16 : param->u.crypt.key_len));
1355
1356                                         if (strcmp(param->u.crypt.alg, "TKIP") == 0) { /* set mic key */
1357                                                 /* DEBUG_ERR(("\nset key length :param->u.crypt.key_len=%d\n", param->u.crypt.key_len)); */
1358                                                 _rtw_memcpy(psta->dot11tkiptxmickey.skey, &(param->u.crypt.key[16]), 8);
1359                                                 _rtw_memcpy(psta->dot11tkiprxmickey.skey, &(param->u.crypt.key[24]), 8);
1360
1361                                                 padapter->securitypriv.busetkipkey = _FALSE;
1362                                                 /* _set_timer(&padapter->securitypriv.tkip_timer, 50);                                           */
1363                                         }
1364
1365                                         /* DEBUG_ERR((" param->u.crypt.key_len=%d\n",param->u.crypt.key_len)); */
1366                                         RTW_INFO(" ~~~~set sta key:unicastkey\n");
1367
1368                                         rtw_setstakey_cmd(padapter, psta, UNICAST_KEY, _TRUE);
1369
1370                                         psta->bpairwise_key_installed = _TRUE;
1371
1372                                 } else { /* group key */
1373                                         if (strcmp(param->u.crypt.alg, "TKIP") == 0 || strcmp(param->u.crypt.alg, "CCMP") == 0) {
1374                                                 _rtw_memcpy(padapter->securitypriv.dot118021XGrpKey[param->u.crypt.idx].skey,  param->u.crypt.key,
1375                                                         (param->u.crypt.key_len > 16 ? 16 : param->u.crypt.key_len));
1376                                                 /* only TKIP group key need to install this */
1377                                                 if (param->u.crypt.key_len > 16) {
1378                                                         _rtw_memcpy(padapter->securitypriv.dot118021XGrptxmickey[param->u.crypt.idx].skey, &(param->u.crypt.key[16]), 8);
1379                                                         _rtw_memcpy(padapter->securitypriv.dot118021XGrprxmickey[param->u.crypt.idx].skey, &(param->u.crypt.key[24]), 8);
1380                                                 }
1381                                                 padapter->securitypriv.binstallGrpkey = _TRUE;
1382                                                 /* DEBUG_ERR((" param->u.crypt.key_len=%d\n", param->u.crypt.key_len)); */
1383                                                 RTW_INFO(" ~~~~set sta key:groupkey\n");
1384
1385                                                 padapter->securitypriv.dot118021XGrpKeyid = param->u.crypt.idx;
1386
1387                                                 rtw_set_key(padapter, &padapter->securitypriv, param->u.crypt.idx, 1, _TRUE);
1388                                         }
1389 #ifdef CONFIG_IEEE80211W
1390                                         else if (strcmp(param->u.crypt.alg, "BIP") == 0) {
1391                                                 int no;
1392                                                 /* printk("BIP key_len=%d , index=%d @@@@@@@@@@@@@@@@@@\n", param->u.crypt.key_len, param->u.crypt.idx); */
1393                                                 /* save the IGTK key, length 16 bytes */
1394                                                 _rtw_memcpy(padapter->securitypriv.dot11wBIPKey[param->u.crypt.idx].skey,  param->u.crypt.key,
1395                                                         (param->u.crypt.key_len > 16 ? 16 : param->u.crypt.key_len));
1396                                                 /*printk("IGTK key below:\n");
1397                                                 for(no=0;no<16;no++)
1398                                                         printk(" %02x ", padapter->securitypriv.dot11wBIPKey[param->u.crypt.idx].skey[no]);
1399                                                 printk("\n");*/
1400                                                 padapter->securitypriv.dot11wBIPKeyid = param->u.crypt.idx;
1401                                                 padapter->securitypriv.binstallBIPkey = _TRUE;
1402                                                 RTW_INFO(" ~~~~set sta key:IGKT\n");
1403                                         }
1404 #endif /* CONFIG_IEEE80211W */
1405
1406 #ifdef CONFIG_P2P
1407                                         if (rtw_p2p_chk_state(pwdinfo, P2P_STATE_PROVISIONING_ING))
1408                                                 rtw_p2p_set_state(pwdinfo, P2P_STATE_PROVISIONING_DONE);
1409 #endif /* CONFIG_P2P */
1410
1411                                 }
1412                         }
1413
1414                         pbcmc_sta = rtw_get_bcmc_stainfo(padapter);
1415                         if (pbcmc_sta == NULL) {
1416                                 /* DEBUG_ERR( ("Set OID_802_11_ADD_KEY: bcmc stainfo is null\n")); */
1417                         } else {
1418                                 /* Jeff: don't disable ieee8021x_blocked while clearing key */
1419                                 if (strcmp(param->u.crypt.alg, "none") != 0)
1420                                         pbcmc_sta->ieee8021x_blocked = _FALSE;
1421
1422                                 if ((padapter->securitypriv.ndisencryptstatus == Ndis802_11Encryption2Enabled) ||
1423                                     (padapter->securitypriv.ndisencryptstatus ==  Ndis802_11Encryption3Enabled))
1424                                         pbcmc_sta->dot118021XPrivacy = padapter->securitypriv.dot11PrivacyAlgrthm;
1425                         }
1426                 } else if (check_fwstate(pmlmepriv, WIFI_ADHOC_STATE)) { /* adhoc mode */
1427                 }
1428         }
1429
1430 #ifdef CONFIG_WAPI_SUPPORT
1431         if (strcmp(param->u.crypt.alg, "SMS4") == 0) {
1432                 PRT_WAPI_T                      pWapiInfo = &padapter->wapiInfo;
1433                 PRT_WAPI_STA_INFO       pWapiSta;
1434                 u8                                      WapiASUEPNInitialValueSrc[16] = {0x36, 0x5C, 0x36, 0x5C, 0x36, 0x5C, 0x36, 0x5C, 0x36, 0x5C, 0x36, 0x5C, 0x36, 0x5C, 0x36, 0x5C} ;
1435                 u8                                      WapiAEPNInitialValueSrc[16] = {0x37, 0x5C, 0x36, 0x5C, 0x36, 0x5C, 0x36, 0x5C, 0x36, 0x5C, 0x36, 0x5C, 0x36, 0x5C, 0x36, 0x5C} ;
1436                 u8                                      WapiAEMultiCastPNInitialValueSrc[16] = {0x36, 0x5C, 0x36, 0x5C, 0x36, 0x5C, 0x36, 0x5C, 0x36, 0x5C, 0x36, 0x5C, 0x36, 0x5C, 0x36, 0x5C} ;
1437
1438                 if (param->u.crypt.set_tx == 1) {
1439                         list_for_each_entry(pWapiSta, &pWapiInfo->wapiSTAUsedList, list) {
1440                                 if (_rtw_memcmp(pWapiSta->PeerMacAddr, param->sta_addr, 6)) {
1441                                         _rtw_memcpy(pWapiSta->lastTxUnicastPN, WapiASUEPNInitialValueSrc, 16);
1442
1443                                         pWapiSta->wapiUsk.bSet = true;
1444                                         _rtw_memcpy(pWapiSta->wapiUsk.dataKey, param->u.crypt.key, 16);
1445                                         _rtw_memcpy(pWapiSta->wapiUsk.micKey, param->u.crypt.key + 16, 16);
1446                                         pWapiSta->wapiUsk.keyId = param->u.crypt.idx ;
1447                                         pWapiSta->wapiUsk.bTxEnable = true;
1448
1449                                         _rtw_memcpy(pWapiSta->lastRxUnicastPNBEQueue, WapiAEPNInitialValueSrc, 16);
1450                                         _rtw_memcpy(pWapiSta->lastRxUnicastPNBKQueue, WapiAEPNInitialValueSrc, 16);
1451                                         _rtw_memcpy(pWapiSta->lastRxUnicastPNVIQueue, WapiAEPNInitialValueSrc, 16);
1452                                         _rtw_memcpy(pWapiSta->lastRxUnicastPNVOQueue, WapiAEPNInitialValueSrc, 16);
1453                                         _rtw_memcpy(pWapiSta->lastRxUnicastPN, WapiAEPNInitialValueSrc, 16);
1454                                         pWapiSta->wapiUskUpdate.bTxEnable = false;
1455                                         pWapiSta->wapiUskUpdate.bSet = false;
1456
1457                                         if (psecuritypriv->sw_encrypt == false || psecuritypriv->sw_decrypt == false) {
1458                                                 /* set unicast key for ASUE */
1459                                                 rtw_wapi_set_key(padapter, &pWapiSta->wapiUsk, pWapiSta, false, false);
1460                                         }
1461                                 }
1462                         }
1463                 } else {
1464                         list_for_each_entry(pWapiSta, &pWapiInfo->wapiSTAUsedList, list) {
1465                                 if (_rtw_memcmp(pWapiSta->PeerMacAddr, get_bssid(pmlmepriv), 6)) {
1466                                         pWapiSta->wapiMsk.bSet = true;
1467                                         _rtw_memcpy(pWapiSta->wapiMsk.dataKey, param->u.crypt.key, 16);
1468                                         _rtw_memcpy(pWapiSta->wapiMsk.micKey, param->u.crypt.key + 16, 16);
1469                                         pWapiSta->wapiMsk.keyId = param->u.crypt.idx ;
1470                                         pWapiSta->wapiMsk.bTxEnable = false;
1471                                         if (!pWapiSta->bSetkeyOk)
1472                                                 pWapiSta->bSetkeyOk = true;
1473                                         pWapiSta->bAuthenticateInProgress = false;
1474
1475                                         _rtw_memcpy(pWapiSta->lastRxMulticastPN, WapiAEMultiCastPNInitialValueSrc, 16);
1476
1477                                         if (psecuritypriv->sw_decrypt == false) {
1478                                                 /* set rx broadcast key for ASUE */
1479                                                 rtw_wapi_set_key(padapter, &pWapiSta->wapiMsk, pWapiSta, true, false);
1480                                         }
1481                                 }
1482
1483                         }
1484                 }
1485         }
1486 #endif
1487
1488 exit:
1489
1490
1491         return ret;
1492 }
1493
1494 static int rtw_set_wpa_ie(_adapter *padapter, char *pie, unsigned short ielen)
1495 {
1496         u8 *buf = NULL, *pos = NULL;
1497         u32 left;
1498         int group_cipher = 0, pairwise_cipher = 0;
1499         int ret = 0;
1500         u8 null_addr[] = {0, 0, 0, 0, 0, 0};
1501 #ifdef CONFIG_P2P
1502         struct wifidirect_info *pwdinfo = &padapter->wdinfo;
1503 #endif /* CONFIG_P2P */
1504
1505         if ((ielen > MAX_WPA_IE_LEN) || (pie == NULL)) {
1506                 _clr_fwstate_(&padapter->mlmepriv, WIFI_UNDER_WPS);
1507                 if (pie == NULL)
1508                         return ret;
1509                 else
1510                         return -EINVAL;
1511         }
1512
1513         if (ielen) {
1514                 buf = rtw_zmalloc(ielen);
1515                 if (buf == NULL) {
1516                         ret =  -ENOMEM;
1517                         goto exit;
1518                 }
1519
1520                 _rtw_memcpy(buf, pie , ielen);
1521
1522                 /* dump */
1523                 {
1524                         int i;
1525                         RTW_INFO("\n wpa_ie(length:%d):\n", ielen);
1526                         for (i = 0; i < ielen; i = i + 8)
1527                                 RTW_INFO("0x%.2x 0x%.2x 0x%.2x 0x%.2x 0x%.2x 0x%.2x 0x%.2x 0x%.2x\n", buf[i], buf[i + 1], buf[i + 2], buf[i + 3], buf[i + 4], buf[i + 5], buf[i + 6], buf[i + 7]);
1528                 }
1529
1530                 pos = buf;
1531                 if (ielen < RSN_HEADER_LEN) {
1532                         ret  = -1;
1533                         goto exit;
1534                 }
1535
1536 #if 0
1537                 pos += RSN_HEADER_LEN;
1538                 left  = ielen - RSN_HEADER_LEN;
1539
1540                 if (left >= RSN_SELECTOR_LEN) {
1541                         pos += RSN_SELECTOR_LEN;
1542                         left -= RSN_SELECTOR_LEN;
1543                 } else if (left > 0) {
1544                         ret = -1;
1545                         goto exit;
1546                 }
1547 #endif
1548
1549                 if (rtw_parse_wpa_ie(buf, ielen, &group_cipher, &pairwise_cipher, NULL) == _SUCCESS) {
1550                         padapter->securitypriv.dot11AuthAlgrthm = dot11AuthAlgrthm_8021X;
1551                         padapter->securitypriv.ndisauthtype = Ndis802_11AuthModeWPAPSK;
1552                         _rtw_memcpy(padapter->securitypriv.supplicant_ie, &buf[0], ielen);
1553                 }
1554
1555                 if (rtw_parse_wpa2_ie(buf, ielen, &group_cipher, &pairwise_cipher, NULL) == _SUCCESS) {
1556                         padapter->securitypriv.dot11AuthAlgrthm = dot11AuthAlgrthm_8021X;
1557                         padapter->securitypriv.ndisauthtype = Ndis802_11AuthModeWPA2PSK;
1558                         _rtw_memcpy(padapter->securitypriv.supplicant_ie, &buf[0], ielen);
1559                 }
1560
1561                 if (group_cipher == 0)
1562                         group_cipher = WPA_CIPHER_NONE;
1563                 if (pairwise_cipher == 0)
1564                         pairwise_cipher = WPA_CIPHER_NONE;
1565
1566                 switch (group_cipher) {
1567                 case WPA_CIPHER_NONE:
1568                         padapter->securitypriv.dot118021XGrpPrivacy = _NO_PRIVACY_;
1569                         padapter->securitypriv.ndisencryptstatus = Ndis802_11EncryptionDisabled;
1570                         break;
1571                 case WPA_CIPHER_WEP40:
1572                         padapter->securitypriv.dot118021XGrpPrivacy = _WEP40_;
1573                         padapter->securitypriv.ndisencryptstatus = Ndis802_11Encryption1Enabled;
1574                         break;
1575                 case WPA_CIPHER_TKIP:
1576                         padapter->securitypriv.dot118021XGrpPrivacy = _TKIP_;
1577                         padapter->securitypriv.ndisencryptstatus = Ndis802_11Encryption2Enabled;
1578                         break;
1579                 case WPA_CIPHER_CCMP:
1580                         padapter->securitypriv.dot118021XGrpPrivacy = _AES_;
1581                         padapter->securitypriv.ndisencryptstatus = Ndis802_11Encryption3Enabled;
1582                         break;
1583                 case WPA_CIPHER_WEP104:
1584                         padapter->securitypriv.dot118021XGrpPrivacy = _WEP104_;
1585                         padapter->securitypriv.ndisencryptstatus = Ndis802_11Encryption1Enabled;
1586                         break;
1587                 }
1588
1589                 switch (pairwise_cipher) {
1590                 case WPA_CIPHER_NONE:
1591                         padapter->securitypriv.dot11PrivacyAlgrthm = _NO_PRIVACY_;
1592                         padapter->securitypriv.ndisencryptstatus = Ndis802_11EncryptionDisabled;
1593                         break;
1594                 case WPA_CIPHER_WEP40:
1595                         padapter->securitypriv.dot11PrivacyAlgrthm = _WEP40_;
1596                         padapter->securitypriv.ndisencryptstatus = Ndis802_11Encryption1Enabled;
1597                         break;
1598                 case WPA_CIPHER_TKIP:
1599                         padapter->securitypriv.dot11PrivacyAlgrthm = _TKIP_;
1600                         padapter->securitypriv.ndisencryptstatus = Ndis802_11Encryption2Enabled;
1601                         break;
1602                 case WPA_CIPHER_CCMP:
1603                         padapter->securitypriv.dot11PrivacyAlgrthm = _AES_;
1604                         padapter->securitypriv.ndisencryptstatus = Ndis802_11Encryption3Enabled;
1605                         break;
1606                 case WPA_CIPHER_WEP104:
1607                         padapter->securitypriv.dot11PrivacyAlgrthm = _WEP104_;
1608                         padapter->securitypriv.ndisencryptstatus = Ndis802_11Encryption1Enabled;
1609                         break;
1610                 }
1611
1612                 _clr_fwstate_(&padapter->mlmepriv, WIFI_UNDER_WPS);
1613                 {/* set wps_ie   */
1614                         u16 cnt = 0;
1615                         u8 eid, wps_oui[4] = {0x0, 0x50, 0xf2, 0x04};
1616
1617                         while (cnt < ielen) {
1618                                 eid = buf[cnt];
1619
1620                                 if ((eid == _VENDOR_SPECIFIC_IE_) && (_rtw_memcmp(&buf[cnt + 2], wps_oui, 4) == _TRUE)) {
1621                                         RTW_INFO("SET WPS_IE\n");
1622
1623                                         padapter->securitypriv.wps_ie_len = ((buf[cnt + 1] + 2) < MAX_WPS_IE_LEN) ? (buf[cnt + 1] + 2) : MAX_WPS_IE_LEN;
1624
1625                                         _rtw_memcpy(padapter->securitypriv.wps_ie, &buf[cnt], padapter->securitypriv.wps_ie_len);
1626
1627                                         set_fwstate(&padapter->mlmepriv, WIFI_UNDER_WPS);
1628
1629 #ifdef CONFIG_P2P
1630                                         if (rtw_p2p_chk_state(pwdinfo, P2P_STATE_GONEGO_OK))
1631                                                 rtw_p2p_set_state(pwdinfo, P2P_STATE_PROVISIONING_ING);
1632 #endif /* CONFIG_P2P */
1633                                         cnt += buf[cnt + 1] + 2;
1634
1635                                         break;
1636                                 } else {
1637                                         cnt += buf[cnt + 1] + 2; /* goto next    */
1638                                 }
1639                         }
1640                 }
1641         }
1642
1643         /* TKIP and AES disallow multicast packets until installing group key */
1644         if (padapter->securitypriv.dot11PrivacyAlgrthm == _TKIP_
1645             || padapter->securitypriv.dot11PrivacyAlgrthm == _TKIP_WTMIC_
1646             || padapter->securitypriv.dot11PrivacyAlgrthm == _AES_)
1647                 /* WPS open need to enable multicast
1648                  * || check_fwstate(&padapter->mlmepriv, WIFI_UNDER_WPS) == _TRUE) */
1649                 rtw_hal_set_hwreg(padapter, HW_VAR_OFF_RCR_AM, null_addr);
1650
1651
1652 exit:
1653
1654         if (buf)
1655                 rtw_mfree(buf, ielen);
1656
1657         return ret;
1658 }
1659
1660 static int rtw_wx_get_name(struct net_device *dev,
1661                            struct iw_request_info *info,
1662                            union iwreq_data *wrqu, char *extra)
1663 {
1664         _adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
1665         u16 cap;
1666         u32 ht_ielen = 0;
1667         char *p;
1668         u8 ht_cap = _FALSE, vht_cap = _FALSE;
1669         struct  mlme_priv       *pmlmepriv = &(padapter->mlmepriv);
1670         WLAN_BSSID_EX  *pcur_bss = &pmlmepriv->cur_network.network;
1671         NDIS_802_11_RATES_EX *prates = NULL;
1672
1673
1674
1675         if (check_fwstate(pmlmepriv, _FW_LINKED | WIFI_ADHOC_MASTER_STATE) == _TRUE) {
1676                 /* parsing HT_CAP_IE */
1677                 p = rtw_get_ie(&pcur_bss->IEs[12], _HT_CAPABILITY_IE_, &ht_ielen, pcur_bss->IELength - 12);
1678                 if (p && ht_ielen > 0)
1679                         ht_cap = _TRUE;
1680
1681 #ifdef CONFIG_80211AC_VHT
1682                 if (pmlmepriv->vhtpriv.vht_option == _TRUE)
1683                         vht_cap = _TRUE;
1684 #endif
1685
1686                 prates = &pcur_bss->SupportedRates;
1687
1688                 if (rtw_is_cckratesonly_included((u8 *)prates) == _TRUE) {
1689                         if (ht_cap == _TRUE)
1690                                 snprintf(wrqu->name, IFNAMSIZ, "IEEE 802.11bn");
1691                         else
1692                                 snprintf(wrqu->name, IFNAMSIZ, "IEEE 802.11b");
1693                 } else if ((rtw_is_cckrates_included((u8 *)prates)) == _TRUE) {
1694                         if (ht_cap == _TRUE)
1695                                 snprintf(wrqu->name, IFNAMSIZ, "IEEE 802.11bgn");
1696                         else
1697                                 snprintf(wrqu->name, IFNAMSIZ, "IEEE 802.11bg");
1698                 } else {
1699                         if (pcur_bss->Configuration.DSConfig > 14) {
1700 #ifdef CONFIG_80211AC_VHT
1701                                 if (vht_cap == _TRUE)
1702                                         snprintf(wrqu->name, IFNAMSIZ, "IEEE 802.11AC");
1703                                 else
1704 #endif
1705                                 {
1706                                         if (ht_cap == _TRUE)
1707                                                 snprintf(wrqu->name, IFNAMSIZ, "IEEE 802.11an");
1708                                         else
1709                                                 snprintf(wrqu->name, IFNAMSIZ, "IEEE 802.11a");
1710                                 }
1711                         } else {
1712                                 if (ht_cap == _TRUE)
1713                                         snprintf(wrqu->name, IFNAMSIZ, "IEEE 802.11gn");
1714                                 else
1715                                         snprintf(wrqu->name, IFNAMSIZ, "IEEE 802.11g");
1716                         }
1717                 }
1718         } else {
1719                 /* prates = &padapter->registrypriv.dev_network.SupportedRates; */
1720                 /* snprintf(wrqu->name, IFNAMSIZ, "IEEE 802.11g"); */
1721                 snprintf(wrqu->name, IFNAMSIZ, "unassociated");
1722         }
1723
1724
1725         return 0;
1726 }
1727
1728 static int rtw_wx_set_freq(struct net_device *dev,
1729                            struct iw_request_info *info,
1730                            union iwreq_data *wrqu, char *extra)
1731 {
1732
1733         _adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
1734         HAL_DATA_TYPE *hal_data = GET_HAL_DATA(padapter);
1735         struct  mlme_priv       *pmlmepriv = &(padapter->mlmepriv);
1736         struct wlan_network  *cur_network = &(pmlmepriv->cur_network);
1737         int exp = 1, freq = 0, div = 0;
1738
1739
1740
1741         if (wrqu->freq.m <= 1000) {
1742                 if (wrqu->freq.flags == IW_FREQ_AUTO) {
1743                         if (rtw_ch_set_search_ch(padapter->mlmeextpriv.channel_set, wrqu->freq.m) > 0) {
1744                                 padapter->mlmeextpriv.cur_channel = wrqu->freq.m;
1745                                 RTW_INFO("%s: channel is auto, set to channel %d\n", __func__, wrqu->freq.m);
1746                         } else {
1747                                 padapter->mlmeextpriv.cur_channel = 1;
1748                                 RTW_INFO("%s: channel is auto, Channel Plan don't match just set to channel 1\n", __func__);
1749                         }
1750                 } else {
1751                         padapter->mlmeextpriv.cur_channel = wrqu->freq.m;
1752                         RTW_INFO("%s: set to channel %d\n", __func__, padapter->mlmeextpriv.cur_channel);
1753                 }
1754         } else {
1755                 while (wrqu->freq.e) {
1756                         exp *= 10;
1757                         wrqu->freq.e--;
1758                 }
1759
1760                 freq = wrqu->freq.m;
1761
1762                 while (!(freq % 10)) {
1763                         freq /= 10;
1764                         exp *= 10;
1765                 }
1766
1767                 /* freq unit is MHz here */
1768                 div = 1000000 / exp;
1769
1770                 if (div)
1771                         freq /= div;
1772                 else {
1773                         div = exp / 1000000;
1774                         freq *= div;
1775                 }
1776
1777                 /* If freq is invalid, rtw_freq2ch() will return channel 1 */
1778                 padapter->mlmeextpriv.cur_channel = rtw_freq2ch(freq);
1779                 RTW_INFO("%s: set to channel %d\n", __func__, padapter->mlmeextpriv.cur_channel);
1780         }
1781
1782         set_channel_bwmode(padapter, padapter->mlmeextpriv.cur_channel, HAL_PRIME_CHNL_OFFSET_DONT_CARE, CHANNEL_WIDTH_20);
1783
1784
1785         return 0;
1786 }
1787
1788 static int rtw_wx_get_freq(struct net_device *dev,
1789                            struct iw_request_info *info,
1790                            union iwreq_data *wrqu, char *extra)
1791 {
1792         _adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
1793         struct  mlme_priv       *pmlmepriv = &(padapter->mlmepriv);
1794         WLAN_BSSID_EX  *pcur_bss = &pmlmepriv->cur_network.network;
1795
1796         if (check_fwstate(pmlmepriv, _FW_LINKED) == _TRUE && check_fwstate(pmlmepriv, WIFI_MONITOR_STATE) != _TRUE) {
1797
1798                 wrqu->freq.m = rtw_ch2freq(pcur_bss->Configuration.DSConfig) * 100000;
1799                 wrqu->freq.e = 1;
1800                 wrqu->freq.i = pcur_bss->Configuration.DSConfig;
1801
1802         } else {
1803                 wrqu->freq.m = rtw_ch2freq(padapter->mlmeextpriv.cur_channel) * 100000;
1804                 wrqu->freq.e = 1;
1805                 wrqu->freq.i = padapter->mlmeextpriv.cur_channel;
1806         }
1807
1808         return 0;
1809 }
1810
1811 static int rtw_wx_set_mode(struct net_device *dev, struct iw_request_info *a,
1812                            union iwreq_data *wrqu, char *b)
1813 {
1814         _adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
1815         struct  mlme_priv       *pmlmepriv = &(padapter->mlmepriv);
1816         NDIS_802_11_NETWORK_INFRASTRUCTURE networkType ;
1817         int ret = 0;
1818
1819
1820         if (_FAIL == rtw_pwr_wakeup(padapter)) {
1821                 ret = -EPERM;
1822                 goto exit;
1823         }
1824
1825         if (!rtw_is_hw_init_completed(padapter)) {
1826                 ret = -EPERM;
1827                 goto exit;
1828         }
1829
1830         /* initial default type */
1831         dev->type = ARPHRD_ETHER;
1832
1833         if (wrqu->mode == IW_MODE_MONITOR) {
1834                 rtw_ps_deny(padapter, PS_DENY_MONITOR_MODE);
1835                 LeaveAllPowerSaveMode(padapter);
1836         } else {
1837                 rtw_ps_deny_cancel(padapter, PS_DENY_MONITOR_MODE);
1838         }
1839
1840         switch (wrqu->mode) {
1841         case IW_MODE_MONITOR:
1842                 networkType = Ndis802_11Monitor;
1843 #if 0
1844                 dev->type = ARPHRD_IEEE80211; /* IEEE 802.11 : 801 */
1845 #endif
1846
1847 #if (LINUX_VERSION_CODE >= KERNEL_VERSION(2, 6, 24))
1848                 dev->type = ARPHRD_IEEE80211_RADIOTAP; /* IEEE 802.11 + radiotap header : 803 */
1849                 RTW_INFO("set_mode = IW_MODE_MONITOR\n");
1850 #else
1851                 RTW_INFO("kernel version < 2.6.24 not support IW_MODE_MONITOR\n");
1852 #endif
1853                 break;
1854
1855         case IW_MODE_AUTO:
1856                 networkType = Ndis802_11AutoUnknown;
1857                 RTW_INFO("set_mode = IW_MODE_AUTO\n");
1858                 break;
1859         case IW_MODE_ADHOC:
1860                 networkType = Ndis802_11IBSS;
1861                 RTW_INFO("set_mode = IW_MODE_ADHOC\n");
1862                 break;
1863         case IW_MODE_MASTER:
1864                 networkType = Ndis802_11APMode;
1865                 RTW_INFO("set_mode = IW_MODE_MASTER\n");
1866                 /* rtw_setopmode_cmd(padapter, networkType,_TRUE);       */
1867                 break;
1868         case IW_MODE_INFRA:
1869                 networkType = Ndis802_11Infrastructure;
1870                 RTW_INFO("set_mode = IW_MODE_INFRA\n");
1871                 break;
1872
1873         default:
1874                 ret = -EINVAL;;
1875                 goto exit;
1876         }
1877
1878         /*
1879                 if(Ndis802_11APMode == networkType)
1880                 {
1881                         rtw_setopmode_cmd(padapter, networkType,_TRUE);
1882                 }
1883                 else
1884                 {
1885                         rtw_setopmode_cmd(padapter, Ndis802_11AutoUnknown,_TRUE);
1886                 }
1887         */
1888
1889         if (rtw_set_802_11_infrastructure_mode(padapter, networkType) == _FALSE) {
1890
1891                 ret = -EPERM;
1892                 goto exit;
1893
1894         }
1895
1896         rtw_setopmode_cmd(padapter, networkType, _TRUE);
1897
1898         if (check_fwstate(pmlmepriv, WIFI_MONITOR_STATE) == _TRUE)
1899                 rtw_indicate_connect(padapter);
1900
1901 exit:
1902
1903
1904         return ret;
1905
1906 }
1907
1908 static int rtw_wx_get_mode(struct net_device *dev, struct iw_request_info *a,
1909                            union iwreq_data *wrqu, char *b)
1910 {
1911         _adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
1912         struct  mlme_priv       *pmlmepriv = &(padapter->mlmepriv);
1913
1914
1915
1916         if (check_fwstate(pmlmepriv, WIFI_STATION_STATE) == _TRUE)
1917                 wrqu->mode = IW_MODE_INFRA;
1918         else if ((check_fwstate(pmlmepriv, WIFI_ADHOC_MASTER_STATE) == _TRUE) ||
1919                  (check_fwstate(pmlmepriv, WIFI_ADHOC_STATE) == _TRUE))
1920
1921                 wrqu->mode = IW_MODE_ADHOC;
1922         else if (check_fwstate(pmlmepriv, WIFI_AP_STATE) == _TRUE)
1923                 wrqu->mode = IW_MODE_MASTER;
1924         else if (check_fwstate(pmlmepriv, WIFI_MONITOR_STATE) == _TRUE)
1925                 wrqu->mode = IW_MODE_MONITOR;
1926         else
1927                 wrqu->mode = IW_MODE_AUTO;
1928
1929
1930         return 0;
1931
1932 }
1933
1934
1935 static int rtw_wx_set_pmkid(struct net_device *dev,
1936                             struct iw_request_info *a,
1937                             union iwreq_data *wrqu, char *extra)
1938 {
1939         _adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
1940         u8          j, blInserted = _FALSE;
1941         int         intReturn = _FALSE;
1942         struct mlme_priv  *pmlmepriv = &padapter->mlmepriv;
1943         struct security_priv *psecuritypriv = &padapter->securitypriv;
1944         struct iw_pmksa  *pPMK = (struct iw_pmksa *) extra;
1945         u8     strZeroMacAddress[ETH_ALEN] = { 0x00 };
1946         u8     strIssueBssid[ETH_ALEN] = { 0x00 };
1947
1948 #if 0
1949         struct iw_pmksa {
1950                 __u32   cmd;
1951                 struct sockaddr bssid;
1952                 __u8    pmkid[IW_PMKID_LEN];   /* IW_PMKID_LEN=16 */
1953         }
1954         There are the BSSID information in the bssid.sa_data array.
1955         If cmd is IW_PMKSA_FLUSH, it means the wpa_suppplicant wants to clear all the PMKID information.
1956         If cmd is IW_PMKSA_ADD, it means the wpa_supplicant wants to add a PMKID / BSSID to driver.
1957         If cmd is IW_PMKSA_REMOVE, it means the wpa_supplicant wants to remove a PMKID / BSSID from driver.
1958 #endif
1959
1960         _rtw_memcpy(strIssueBssid, pPMK->bssid.sa_data, ETH_ALEN);
1961         if (pPMK->cmd == IW_PMKSA_ADD) {
1962                 RTW_INFO("[rtw_wx_set_pmkid] IW_PMKSA_ADD!\n");
1963                 if (_rtw_memcmp(strIssueBssid, strZeroMacAddress, ETH_ALEN) == _TRUE)
1964                         return intReturn ;
1965                 else
1966                         intReturn = _TRUE;
1967                 blInserted = _FALSE;
1968
1969                 /* overwrite PMKID */
1970                 for (j = 0 ; j < NUM_PMKID_CACHE; j++) {
1971                         if (_rtw_memcmp(psecuritypriv->PMKIDList[j].Bssid, strIssueBssid, ETH_ALEN) == _TRUE) {
1972                                 /* BSSID is matched, the same AP => rewrite with new PMKID. */
1973
1974                                 RTW_INFO("[rtw_wx_set_pmkid] BSSID exists in the PMKList.\n");
1975
1976                                 _rtw_memcpy(psecuritypriv->PMKIDList[j].PMKID, pPMK->pmkid, IW_PMKID_LEN);
1977                                 psecuritypriv->PMKIDList[j].bUsed = _TRUE;
1978                                 psecuritypriv->PMKIDIndex = j + 1;
1979                                 blInserted = _TRUE;
1980                                 break;
1981                         }
1982                 }
1983
1984                 if (!blInserted) {
1985                         /* Find a new entry */
1986                         RTW_INFO("[rtw_wx_set_pmkid] Use the new entry index = %d for this PMKID.\n",
1987                                  psecuritypriv->PMKIDIndex);
1988
1989                         _rtw_memcpy(psecuritypriv->PMKIDList[psecuritypriv->PMKIDIndex].Bssid, strIssueBssid, ETH_ALEN);
1990                         _rtw_memcpy(psecuritypriv->PMKIDList[psecuritypriv->PMKIDIndex].PMKID, pPMK->pmkid, IW_PMKID_LEN);
1991
1992                         psecuritypriv->PMKIDList[psecuritypriv->PMKIDIndex].bUsed = _TRUE;
1993                         psecuritypriv->PMKIDIndex++ ;
1994                         if (psecuritypriv->PMKIDIndex == 16)
1995                                 psecuritypriv->PMKIDIndex = 0;
1996                 }
1997         } else if (pPMK->cmd == IW_PMKSA_REMOVE) {
1998                 RTW_INFO("[rtw_wx_set_pmkid] IW_PMKSA_REMOVE!\n");
1999                 intReturn = _TRUE;
2000                 for (j = 0 ; j < NUM_PMKID_CACHE; j++) {
2001                         if (_rtw_memcmp(psecuritypriv->PMKIDList[j].Bssid, strIssueBssid, ETH_ALEN) == _TRUE) {
2002                                 /* BSSID is matched, the same AP => Remove this PMKID information and reset it. */
2003                                 _rtw_memset(psecuritypriv->PMKIDList[j].Bssid, 0x00, ETH_ALEN);
2004                                 psecuritypriv->PMKIDList[j].bUsed = _FALSE;
2005                                 break;
2006                         }
2007                 }
2008         } else if (pPMK->cmd == IW_PMKSA_FLUSH) {
2009                 RTW_INFO("[rtw_wx_set_pmkid] IW_PMKSA_FLUSH!\n");
2010                 _rtw_memset(&psecuritypriv->PMKIDList[0], 0x00, sizeof(RT_PMKID_LIST) * NUM_PMKID_CACHE);
2011                 psecuritypriv->PMKIDIndex = 0;
2012                 intReturn = _TRUE;
2013         }
2014         return intReturn ;
2015 }
2016
2017 static int rtw_wx_get_sens(struct net_device *dev,
2018                            struct iw_request_info *info,
2019                            union iwreq_data *wrqu, char *extra)
2020 {
2021 #ifdef CONFIG_PLATFORM_ROCKCHIPS
2022         _adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
2023         struct mlme_priv *pmlmepriv = &(padapter->mlmepriv);
2024
2025         /*
2026         *  20110311 Commented by Jeff
2027         *  For rockchip platform's wpa_driver_wext_get_rssi
2028         */
2029         if (check_fwstate(pmlmepriv, _FW_LINKED) == _TRUE) {
2030                 /* wrqu->sens.value=-padapter->recvpriv.signal_strength; */
2031                 wrqu->sens.value = -padapter->recvpriv.rssi;
2032                 /* RTW_INFO("%s: %d\n", __FUNCTION__, wrqu->sens.value); */
2033                 wrqu->sens.fixed = 0; /* no auto select */
2034         } else
2035 #endif
2036         {
2037                 wrqu->sens.value = 0;
2038                 wrqu->sens.fixed = 0;   /* no auto select */
2039                 wrqu->sens.disabled = 1;
2040         }
2041         return 0;
2042 }
2043
2044 static int rtw_wx_get_range(struct net_device *dev,
2045                             struct iw_request_info *info,
2046                             union iwreq_data *wrqu, char *extra)
2047 {
2048         struct iw_range *range = (struct iw_range *)extra;
2049         _adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
2050         struct mlme_ext_priv    *pmlmeext = &padapter->mlmeextpriv;
2051
2052         u16 val;
2053         int i;
2054
2055
2056
2057         wrqu->data.length = sizeof(*range);
2058         _rtw_memset(range, 0, sizeof(*range));
2059
2060         /* Let's try to keep this struct in the same order as in
2061          * linux/include/wireless.h
2062          */
2063
2064         /* TODO: See what values we can set, and remove the ones we can't
2065          * set, or fill them with some default data.
2066          */
2067
2068         /* ~5 Mb/s real (802.11b) */
2069         range->throughput = 5 * 1000 * 1000;
2070
2071         /* TODO: Not used in 802.11b?
2072         *       range->min_nwid;         Minimal NWID we are able to set  */
2073         /* TODO: Not used in 802.11b?
2074         *       range->max_nwid;         Maximal NWID we are able to set  */
2075
2076         /* Old Frequency (backward compat - moved lower ) */
2077         /*      range->old_num_channels;
2078          *      range->old_num_frequency;
2079          *      range->old_freq[6];  Filler to keep "version" at the same offset  */
2080
2081         /* signal level threshold range */
2082
2083         /* Quality of link & SNR stuff */
2084         /* Quality range (link, level, noise)
2085          * If the quality is absolute, it will be in the range [0 ; max_qual],
2086          * if the quality is dBm, it will be in the range [max_qual ; 0].
2087          * Don't forget that we use 8 bit arithmetics...
2088          *
2089          * If percentage range is 0~100
2090          * Signal strength dbm range logical is -100 ~ 0
2091          * but usually value is -90 ~ -20
2092          * When CONFIG_SIGNAL_SCALE_MAPPING is defined, dbm range is -95 ~ -45
2093          */
2094         range->max_qual.qual = 100;
2095 #ifdef CONFIG_SIGNAL_DISPLAY_DBM
2096         range->max_qual.level = (u8)-100;
2097         range->max_qual.noise = (u8)-100;
2098         range->max_qual.updated = IW_QUAL_ALL_UPDATED; /* Updated all three */
2099         range->max_qual.updated |= IW_QUAL_DBM;
2100 #else /* !CONFIG_SIGNAL_DISPLAY_DBM */
2101         /* percent values between 0 and 100. */
2102         range->max_qual.level = 100;
2103         range->max_qual.noise = 100;
2104         range->max_qual.updated = IW_QUAL_ALL_UPDATED; /* Updated all three */
2105 #endif /* !CONFIG_SIGNAL_DISPLAY_DBM */
2106
2107         /* This should contain the average/typical values of the quality
2108          * indicator. This should be the threshold between a "good" and
2109          * a "bad" link (example : monitor going from green to orange).
2110          * Currently, user space apps like quality monitors don't have any
2111          * way to calibrate the measurement. With this, they can split
2112          * the range between 0 and max_qual in different quality level
2113          * (using a geometric subdivision centered on the average).
2114          * I expect that people doing the user space apps will feedback
2115          * us on which value we need to put in each driver... */
2116         range->avg_qual.qual = 92; /* > 8% missed beacons is 'bad' */
2117 #ifdef CONFIG_SIGNAL_DISPLAY_DBM
2118         /* TODO: Find real 'good' to 'bad' threshold value for RSSI */
2119         range->avg_qual.level = (u8)-70;
2120         range->avg_qual.noise = 0;
2121         range->avg_qual.updated = IW_QUAL_ALL_UPDATED; /* Updated all three */
2122         range->avg_qual.updated |= IW_QUAL_DBM;
2123 #else /* !CONFIG_SIGNAL_DISPLAY_DBM */
2124         /* TODO: Find real 'good' to 'bad' threshol value for RSSI */
2125         range->avg_qual.level = 30;
2126         range->avg_qual.noise = 100;
2127         range->avg_qual.updated = IW_QUAL_ALL_UPDATED; /* Updated all three */
2128 #endif /* !CONFIG_SIGNAL_DISPLAY_DBM */
2129
2130         range->num_bitrates = RATE_COUNT;
2131
2132         for (i = 0; i < RATE_COUNT && i < IW_MAX_BITRATES; i++)
2133                 range->bitrate[i] = rtw_rates[i];
2134
2135         range->min_frag = MIN_FRAG_THRESHOLD;
2136         range->max_frag = MAX_FRAG_THRESHOLD;
2137
2138         range->pm_capa = 0;
2139
2140         range->we_version_compiled = WIRELESS_EXT;
2141         range->we_version_source = 16;
2142
2143         /*      range->retry_capa;       What retry options are supported
2144          *      range->retry_flags;      How to decode max/min retry limit
2145          *      range->r_time_flags;     How to decode max/min retry life
2146          *      range->min_retry;        Minimal number of retries
2147          *      range->max_retry;        Maximal number of retries
2148          *      range->min_r_time;       Minimal retry lifetime
2149          *      range->max_r_time;       Maximal retry lifetime  */
2150
2151         for (i = 0, val = 0; i < MAX_CHANNEL_NUM; i++) {
2152
2153                 /* Include only legal frequencies for some countries */
2154                 if (pmlmeext->channel_set[i].ChannelNum != 0) {
2155                         range->freq[val].i = pmlmeext->channel_set[i].ChannelNum;
2156                         range->freq[val].m = rtw_ch2freq(pmlmeext->channel_set[i].ChannelNum) * 100000;
2157                         range->freq[val].e = 1;
2158                         val++;
2159                 }
2160
2161                 if (val == IW_MAX_FREQUENCIES)
2162                         break;
2163         }
2164
2165         range->num_channels = val;
2166         range->num_frequency = val;
2167
2168         /* Commented by Albert 2009/10/13
2169          * The following code will proivde the security capability to network manager.
2170          * If the driver doesn't provide this capability to network manager,
2171          * the WPA/WPA2 routers can't be choosen in the network manager. */
2172
2173         /*
2174         #define IW_SCAN_CAPA_NONE               0x00
2175         #define IW_SCAN_CAPA_ESSID              0x01
2176         #define IW_SCAN_CAPA_BSSID              0x02
2177         #define IW_SCAN_CAPA_CHANNEL    0x04
2178         #define IW_SCAN_CAPA_MODE               0x08
2179         #define IW_SCAN_CAPA_RATE               0x10
2180         #define IW_SCAN_CAPA_TYPE               0x20
2181         #define IW_SCAN_CAPA_TIME               0x40
2182         */
2183
2184 #if WIRELESS_EXT > 17
2185         range->enc_capa = IW_ENC_CAPA_WPA | IW_ENC_CAPA_WPA2 |
2186                           IW_ENC_CAPA_CIPHER_TKIP | IW_ENC_CAPA_CIPHER_CCMP;
2187 #endif
2188
2189 #ifdef IW_SCAN_CAPA_ESSID /* WIRELESS_EXT > 21 */
2190         range->scan_capa = IW_SCAN_CAPA_ESSID | IW_SCAN_CAPA_TYPE | IW_SCAN_CAPA_BSSID |
2191                    IW_SCAN_CAPA_CHANNEL | IW_SCAN_CAPA_MODE | IW_SCAN_CAPA_RATE;
2192 #endif
2193
2194
2195
2196         return 0;
2197
2198 }
2199
2200 /* set bssid flow
2201  * s1. rtw_set_802_11_infrastructure_mode()
2202  * s2. rtw_set_802_11_authentication_mode()
2203  * s3. set_802_11_encryption_mode()
2204  * s4. rtw_set_802_11_bssid() */
2205 static int rtw_wx_set_wap(struct net_device *dev,
2206                           struct iw_request_info *info,
2207                           union iwreq_data *awrq,
2208                           char *extra)
2209 {
2210         _irqL   irqL;
2211         uint ret = 0;
2212         _adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
2213         struct sockaddr *temp = (struct sockaddr *)awrq;
2214         struct  mlme_priv       *pmlmepriv = &(padapter->mlmepriv);
2215         _list   *phead;
2216         u8 *dst_bssid, *src_bssid;
2217         _queue  *queue  = &(pmlmepriv->scanned_queue);
2218         struct  wlan_network    *pnetwork = NULL;
2219         NDIS_802_11_AUTHENTICATION_MODE authmode;
2220
2221         /*
2222         #ifdef CONFIG_CONCURRENT_MODE
2223                 if(padapter->adapter_type > PRIMARY_IFACE)
2224                 {
2225                         ret = -EINVAL;
2226                         goto exit;
2227                 }
2228         #endif
2229         */
2230
2231 #ifdef CONFIG_CONCURRENT_MODE
2232         if (rtw_mi_buddy_check_fwstate(padapter, _FW_UNDER_SURVEY | _FW_UNDER_LINKING) == _TRUE) {
2233                 RTW_INFO("set bssid, but buddy_intf is under scanning or linking\n");
2234
2235                 ret = -EINVAL;
2236
2237                 goto exit;
2238         }
2239 #endif
2240
2241         rtw_ps_deny(padapter, PS_DENY_JOIN);
2242         if (_FAIL == rtw_pwr_wakeup(padapter)) {
2243                 ret = -1;
2244                 goto cancel_ps_deny;
2245         }
2246
2247         if (!padapter->bup) {
2248                 ret = -1;
2249                 goto cancel_ps_deny;
2250         }
2251
2252
2253         if (temp->sa_family != ARPHRD_ETHER) {
2254                 ret = -EINVAL;
2255                 goto cancel_ps_deny;
2256         }
2257
2258         authmode = padapter->securitypriv.ndisauthtype;
2259         _enter_critical_bh(&queue->lock, &irqL);
2260         phead = get_list_head(queue);
2261         pmlmepriv->pscanned = get_next(phead);
2262
2263         while (1) {
2264
2265                 if ((rtw_end_of_queue_search(phead, pmlmepriv->pscanned)) == _TRUE) {
2266 #if 0
2267                         ret = -EINVAL;
2268                         goto cancel_ps_deny;
2269
2270                         if (check_fwstate(pmlmepriv, WIFI_ADHOC_STATE) == _TRUE) {
2271                                 rtw_set_802_11_bssid(padapter, temp->sa_data);
2272                                 goto cancel_ps_deny;
2273                         } else {
2274                                 ret = -EINVAL;
2275                                 goto cancel_ps_deny;
2276                         }
2277 #endif
2278
2279                         break;
2280                 }
2281
2282                 pnetwork = LIST_CONTAINOR(pmlmepriv->pscanned, struct wlan_network, list);
2283
2284                 pmlmepriv->pscanned = get_next(pmlmepriv->pscanned);
2285
2286                 dst_bssid = pnetwork->network.MacAddress;
2287
2288                 src_bssid = temp->sa_data;
2289
2290                 if ((_rtw_memcmp(dst_bssid, src_bssid, ETH_ALEN)) == _TRUE) {
2291                         if (!rtw_set_802_11_infrastructure_mode(padapter, pnetwork->network.InfrastructureMode)) {
2292                                 ret = -1;
2293                                 _exit_critical_bh(&queue->lock, &irqL);
2294                                 goto cancel_ps_deny;
2295                         }
2296
2297                         break;
2298                 }
2299
2300         }
2301         _exit_critical_bh(&queue->lock, &irqL);
2302
2303         rtw_set_802_11_authentication_mode(padapter, authmode);
2304         /* set_802_11_encryption_mode(padapter, padapter->securitypriv.ndisencryptstatus); */
2305         if (rtw_set_802_11_bssid(padapter, temp->sa_data) == _FALSE) {
2306                 ret = -1;
2307                 goto cancel_ps_deny;
2308         }
2309
2310 cancel_ps_deny:
2311         rtw_ps_deny_cancel(padapter, PS_DENY_JOIN);
2312
2313 exit:
2314         return ret;
2315 }
2316
2317 static int rtw_wx_get_wap(struct net_device *dev,
2318                           struct iw_request_info *info,
2319                           union iwreq_data *wrqu, char *extra)
2320 {
2321
2322         _adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
2323         struct  mlme_priv       *pmlmepriv = &(padapter->mlmepriv);
2324         WLAN_BSSID_EX  *pcur_bss = &pmlmepriv->cur_network.network;
2325
2326         wrqu->ap_addr.sa_family = ARPHRD_ETHER;
2327
2328         _rtw_memset(wrqu->ap_addr.sa_data, 0, ETH_ALEN);
2329
2330
2331
2332         if (((check_fwstate(pmlmepriv, _FW_LINKED)) == _TRUE) ||
2333             ((check_fwstate(pmlmepriv, WIFI_ADHOC_MASTER_STATE)) == _TRUE) ||
2334             ((check_fwstate(pmlmepriv, WIFI_AP_STATE)) == _TRUE))
2335
2336                 _rtw_memcpy(wrqu->ap_addr.sa_data, pcur_bss->MacAddress, ETH_ALEN);
2337         else
2338                 _rtw_memset(wrqu->ap_addr.sa_data, 0, ETH_ALEN);
2339
2340
2341         return 0;
2342
2343 }
2344
2345 static int rtw_wx_set_mlme(struct net_device *dev,
2346                            struct iw_request_info *info,
2347                            union iwreq_data *wrqu, char *extra)
2348 {
2349 #if 0
2350         /* SIOCSIWMLME data */
2351         struct  iw_mlme {
2352                 __u16           cmd; /* IW_MLME_* */
2353                 __u16           reason_code;
2354                 struct sockaddr addr;
2355         };
2356 #endif
2357
2358         int ret = 0;
2359         u16 reason;
2360         _adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
2361         struct iw_mlme *mlme = (struct iw_mlme *) extra;
2362
2363
2364         if (mlme == NULL)
2365                 return -1;
2366
2367         RTW_INFO("%s\n", __FUNCTION__);
2368
2369         reason = cpu_to_le16(mlme->reason_code);
2370
2371
2372         RTW_INFO("%s, cmd=%d, reason=%d\n", __FUNCTION__, mlme->cmd, reason);
2373
2374
2375         switch (mlme->cmd) {
2376         case IW_MLME_DEAUTH:
2377                 if (!rtw_set_802_11_disassociate(padapter))
2378                         ret = -1;
2379                 break;
2380
2381         case IW_MLME_DISASSOC:
2382                 if (!rtw_set_802_11_disassociate(padapter))
2383                         ret = -1;
2384
2385                 break;
2386
2387         default:
2388                 return -EOPNOTSUPP;
2389         }
2390
2391         return ret;
2392 }
2393
2394 static int rtw_wx_set_scan(struct net_device *dev, struct iw_request_info *a,
2395                            union iwreq_data *wrqu, char *extra)
2396 {
2397         u8 _status = _FALSE;
2398         int ret = 0;
2399         _adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
2400         struct mlme_priv *pmlmepriv = &padapter->mlmepriv;
2401         NDIS_802_11_SSID ssid[RTW_SSID_SCAN_AMOUNT];
2402
2403 #ifdef CONFIG_P2P
2404         struct wifidirect_info *pwdinfo = &(padapter->wdinfo);
2405 #endif /* CONFIG_P2P */
2406
2407
2408 #ifdef DBG_IOCTL
2409         RTW_INFO("DBG_IOCTL %s:%d\n", __FUNCTION__, __LINE__);
2410 #endif
2411
2412 #ifdef CONFIG_MP_INCLUDED
2413         if (rtw_mi_mp_mode_check(padapter)) {
2414                 RTW_INFO("MP mode block Scan request\n");
2415                 ret = -EPERM;
2416                 goto exit;
2417         }
2418 #endif
2419         if (rtw_is_scan_deny(padapter)) {
2420                 indicate_wx_scan_complete_event(padapter);
2421                 goto exit;
2422         }
2423
2424         rtw_ps_deny(padapter, PS_DENY_SCAN);
2425         if (_FAIL == rtw_pwr_wakeup(padapter)) {
2426                 ret = -1;
2427                 goto cancel_ps_deny;
2428         }
2429
2430         if (!rtw_is_adapter_up(padapter)) {
2431                 ret = -1;
2432                 goto cancel_ps_deny;
2433         }
2434
2435 #ifndef CONFIG_DOSCAN_IN_BUSYTRAFFIC
2436         /* When Busy Traffic, driver do not site survey. So driver return success. */
2437         /* wpa_supplicant will not issue SIOCSIWSCAN cmd again after scan timeout. */
2438         /* modify by thomas 2011-02-22. */
2439         if (rtw_mi_busy_traffic_check(padapter, _FALSE)) {
2440                 indicate_wx_scan_complete_event(padapter);
2441                 goto cancel_ps_deny;
2442         }
2443 #endif
2444
2445         if (check_fwstate(pmlmepriv, WIFI_AP_STATE) && check_fwstate(pmlmepriv, WIFI_UNDER_WPS)) {
2446                 RTW_INFO("AP mode process WPS\n");
2447                 indicate_wx_scan_complete_event(padapter);
2448                 goto cancel_ps_deny;
2449         }
2450
2451         if (check_fwstate(pmlmepriv, _FW_UNDER_SURVEY | _FW_UNDER_LINKING) == _TRUE) {
2452                 indicate_wx_scan_complete_event(padapter);
2453                 goto cancel_ps_deny;
2454         }
2455
2456 #ifdef CONFIG_CONCURRENT_MODE
2457         if (rtw_mi_buddy_check_fwstate(padapter,
2458                        _FW_UNDER_SURVEY | _FW_UNDER_LINKING | WIFI_UNDER_WPS)) {
2459
2460                 indicate_wx_scan_complete_event(padapter);
2461                 goto cancel_ps_deny;
2462         }
2463 #endif
2464
2465 #ifdef CONFIG_P2P
2466         if (pwdinfo->p2p_state != P2P_STATE_NONE) {
2467                 rtw_p2p_set_pre_state(pwdinfo, rtw_p2p_state(pwdinfo));
2468                 rtw_p2p_set_state(pwdinfo, P2P_STATE_FIND_PHASE_SEARCH);
2469                 rtw_p2p_findphase_ex_set(pwdinfo, P2P_FINDPHASE_EX_FULL);
2470                 rtw_free_network_queue(padapter, _TRUE);
2471         }
2472 #endif /* CONFIG_P2P */
2473
2474         _rtw_memset(ssid, 0, sizeof(NDIS_802_11_SSID) * RTW_SSID_SCAN_AMOUNT);
2475
2476 #if WIRELESS_EXT >= 17
2477         if (wrqu->data.length == sizeof(struct iw_scan_req)) {
2478                 struct iw_scan_req *req = (struct iw_scan_req *)extra;
2479
2480                 if (wrqu->data.flags & IW_SCAN_THIS_ESSID) {
2481                         int len = min((int)req->essid_len, IW_ESSID_MAX_SIZE);
2482
2483                         _rtw_memcpy(ssid[0].Ssid, req->essid, len);
2484                         ssid[0].SsidLength = len;
2485
2486                         RTW_INFO("IW_SCAN_THIS_ESSID, ssid=%s, len=%d\n", req->essid, req->essid_len);
2487
2488                         _status = rtw_set_802_11_bssid_list_scan(padapter, ssid, 1, NULL, 0);
2489
2490                 } else if (req->scan_type == IW_SCAN_TYPE_PASSIVE)
2491                         RTW_INFO("rtw_wx_set_scan, req->scan_type == IW_SCAN_TYPE_PASSIVE\n");
2492
2493         } else
2494 #endif
2495
2496                 if (wrqu->data.length >= WEXT_CSCAN_HEADER_SIZE
2497                     && _rtw_memcmp(extra, WEXT_CSCAN_HEADER, WEXT_CSCAN_HEADER_SIZE) == _TRUE
2498                    ) {
2499                         int len = wrqu->data.length - WEXT_CSCAN_HEADER_SIZE;
2500                         char *pos = extra + WEXT_CSCAN_HEADER_SIZE;
2501                         char section;
2502                         char sec_len;
2503                         int ssid_index = 0;
2504
2505                         /* RTW_INFO("%s COMBO_SCAN header is recognized\n", __FUNCTION__); */
2506
2507                         while (len >= 1) {
2508                                 section = *(pos++);
2509                                 len -= 1;
2510
2511                                 switch (section) {
2512                                 case WEXT_CSCAN_SSID_SECTION:
2513                                         /* RTW_INFO("WEXT_CSCAN_SSID_SECTION\n"); */
2514                                         if (len < 1) {
2515                                                 len = 0;
2516                                                 break;
2517                                         }
2518
2519                                         sec_len = *(pos++);
2520                                         len -= 1;
2521
2522                                         if (sec_len > 0 && sec_len <= len) {
2523                                                 ssid[ssid_index].SsidLength = sec_len;
2524                                                 _rtw_memcpy(ssid[ssid_index].Ssid, pos, ssid[ssid_index].SsidLength);
2525                                                 /* RTW_INFO("%s COMBO_SCAN with specific ssid:%s, %d\n", __FUNCTION__ */
2526                                                 /*      , ssid[ssid_index].Ssid, ssid[ssid_index].SsidLength); */
2527                                                 ssid_index++;
2528                                         }
2529
2530                                         pos += sec_len;
2531                                         len -= sec_len;
2532                                         break;
2533
2534
2535                                 case WEXT_CSCAN_CHANNEL_SECTION:
2536                                         /* RTW_INFO("WEXT_CSCAN_CHANNEL_SECTION\n"); */
2537                                         pos += 1;
2538                                         len -= 1;
2539                                         break;
2540                                 case WEXT_CSCAN_ACTV_DWELL_SECTION:
2541                                         /* RTW_INFO("WEXT_CSCAN_ACTV_DWELL_SECTION\n"); */
2542                                         pos += 2;
2543                                         len -= 2;
2544                                         break;
2545                                 case WEXT_CSCAN_PASV_DWELL_SECTION:
2546                                         /* RTW_INFO("WEXT_CSCAN_PASV_DWELL_SECTION\n"); */
2547                                         pos += 2;
2548                                         len -= 2;
2549                                         break;
2550                                 case WEXT_CSCAN_HOME_DWELL_SECTION:
2551                                         /* RTW_INFO("WEXT_CSCAN_HOME_DWELL_SECTION\n"); */
2552                                         pos += 2;
2553                                         len -= 2;
2554                                         break;
2555                                 case WEXT_CSCAN_TYPE_SECTION:
2556                                         /* RTW_INFO("WEXT_CSCAN_TYPE_SECTION\n"); */
2557                                         pos += 1;
2558                                         len -= 1;
2559                                         break;
2560 #if 0
2561                                 case WEXT_CSCAN_NPROBE_SECTION:
2562                                         RTW_INFO("WEXT_CSCAN_NPROBE_SECTION\n");
2563                                         break;
2564 #endif
2565
2566                                 default:
2567                                         /* RTW_INFO("Unknown CSCAN section %c\n", section); */
2568                                         len = 0; /* stop parsing */
2569                                 }
2570                                 /* RTW_INFO("len:%d\n", len); */
2571
2572                         }
2573
2574                         /* jeff: it has still some scan paramater to parse, we only do this now... */
2575                         _status = rtw_set_802_11_bssid_list_scan(padapter, ssid, RTW_SSID_SCAN_AMOUNT, NULL, 0);
2576
2577                 } else
2578
2579                         _status = rtw_set_802_11_bssid_list_scan(padapter, NULL, 0, NULL, 0);
2580
2581         if (_status == _FALSE)
2582                 ret = -1;
2583
2584 cancel_ps_deny:
2585         rtw_ps_deny_cancel(padapter, PS_DENY_SCAN);
2586
2587 exit:
2588 #ifdef DBG_IOCTL
2589         RTW_INFO("DBG_IOCTL %s:%d return %d\n", __FUNCTION__, __LINE__, ret);
2590 #endif
2591
2592         return ret;
2593 }
2594
2595 static int rtw_wx_get_scan(struct net_device *dev, struct iw_request_info *a,
2596                            union iwreq_data *wrqu, char *extra)
2597 {
2598         _irqL   irqL;
2599         _list                                   *plist, *phead;
2600         _adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
2601         struct  mlme_priv       *pmlmepriv = &(padapter->mlmepriv);
2602         _queue                          *queue  = &(pmlmepriv->scanned_queue);
2603         struct  wlan_network    *pnetwork = NULL;
2604         char *ev = extra;
2605         char *stop = ev + wrqu->data.length;
2606         u32 ret = 0;
2607         u32 cnt = 0;
2608         u32 wait_for_surveydone;
2609         sint wait_status;
2610
2611 #ifdef CONFIG_P2P
2612         struct  wifidirect_info *pwdinfo = &padapter->wdinfo;
2613 #endif /* CONFIG_P2P */
2614
2615
2616 #ifdef DBG_IOCTL
2617         RTW_INFO("DBG_IOCTL %s:%d\n", __FUNCTION__, __LINE__);
2618 #endif
2619
2620         if (adapter_to_pwrctl(padapter)->brfoffbyhw && rtw_is_drv_stopped(padapter)) {
2621                 ret = -EINVAL;
2622                 goto exit;
2623         }
2624
2625 #ifdef CONFIG_P2P
2626         if (!rtw_p2p_chk_state(pwdinfo, P2P_STATE_NONE))
2627                 wait_for_surveydone = 200;
2628         else {
2629                 /*      P2P is disabled */
2630                 wait_for_surveydone = 100;
2631         }
2632 #else
2633         {
2634                 wait_for_surveydone = 100;
2635         }
2636 #endif /* CONFIG_P2P */
2637
2638 #if 1 /* Wireless Extension use EAGAIN to try */
2639         wait_status = _FW_UNDER_SURVEY
2640 #ifndef CONFIG_ANDROID
2641                       | _FW_UNDER_LINKING
2642 #endif
2643                       ;
2644
2645         while (check_fwstate(pmlmepriv, wait_status) == _TRUE)
2646                 return -EAGAIN;
2647 #else
2648         wait_status = _FW_UNDER_SURVEY
2649 #ifndef CONFIG_ANDROID
2650                       | _FW_UNDER_LINKING
2651 #endif
2652                       ;
2653
2654         while (check_fwstate(pmlmepriv, wait_status) == _TRUE) {
2655                 rtw_msleep_os(30);
2656                 cnt++;
2657                 if (cnt > wait_for_surveydone)
2658                         break;
2659         }
2660 #endif
2661         _enter_critical_bh(&(pmlmepriv->scanned_queue.lock), &irqL);
2662
2663         phead = get_list_head(queue);
2664         plist = get_next(phead);
2665
2666         while (1) {
2667                 if (rtw_end_of_queue_search(phead, plist) == _TRUE)
2668                         break;
2669
2670                 if ((stop - ev) < SCAN_ITEM_SIZE) {
2671                         ret = -E2BIG;
2672                         break;
2673                 }
2674
2675                 pnetwork = LIST_CONTAINOR(plist, struct wlan_network, list);
2676
2677                 /* report network only if the current channel set contains the channel to which this network belongs */
2678                 if (rtw_ch_set_search_ch(padapter->mlmeextpriv.channel_set, pnetwork->network.Configuration.DSConfig) >= 0
2679                     && rtw_mlme_band_check(padapter, pnetwork->network.Configuration.DSConfig) == _TRUE
2680                     && _TRUE == rtw_validate_ssid(&(pnetwork->network.Ssid))
2681                    )
2682                         ev = translate_scan(padapter, a, pnetwork, ev, stop);
2683
2684                 plist = get_next(plist);
2685
2686         }
2687
2688         _exit_critical_bh(&(pmlmepriv->scanned_queue.lock), &irqL);
2689
2690         wrqu->data.length = ev - extra;
2691         wrqu->data.flags = 0;
2692
2693 exit:
2694
2695
2696 #ifdef DBG_IOCTL
2697         RTW_INFO("DBG_IOCTL %s:%d return %d\n", __FUNCTION__, __LINE__, ret);
2698 #endif
2699
2700         return ret ;
2701
2702 }
2703
2704 /* set ssid flow
2705  * s1. rtw_set_802_11_infrastructure_mode()
2706  * s2. set_802_11_authenticaion_mode()
2707  * s3. set_802_11_encryption_mode()
2708  * s4. rtw_set_802_11_ssid() */
2709 static int rtw_wx_set_essid(struct net_device *dev,
2710                             struct iw_request_info *a,
2711                             union iwreq_data *wrqu, char *extra)
2712 {
2713         _irqL irqL;
2714         _adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
2715         struct mlme_priv *pmlmepriv = &padapter->mlmepriv;
2716         _queue *queue = &pmlmepriv->scanned_queue;
2717         _list *phead;
2718         s8 status = _TRUE;
2719         struct wlan_network *pnetwork = NULL;
2720         NDIS_802_11_AUTHENTICATION_MODE authmode;
2721         NDIS_802_11_SSID ndis_ssid;
2722         u8 *dst_ssid, *src_ssid;
2723
2724         uint ret = 0, len;
2725
2726
2727 #ifdef DBG_IOCTL
2728         RTW_INFO("DBG_IOCTL %s:%d\n", __FUNCTION__, __LINE__);
2729 #endif
2730 #ifdef CONFIG_WEXT_DONT_JOIN_BYSSID
2731         RTW_INFO("%s: CONFIG_WEXT_DONT_JOIN_BYSSID be defined!! only allow bssid joining\n", __func__);
2732         return -EPERM;
2733 #endif
2734
2735 #if WIRELESS_EXT <= 20
2736         if ((wrqu->essid.length - 1) > IW_ESSID_MAX_SIZE) {
2737 #else
2738         if (wrqu->essid.length > IW_ESSID_MAX_SIZE) {
2739 #endif
2740                 ret = -E2BIG;
2741                 goto exit;
2742         }
2743
2744
2745
2746         rtw_ps_deny(padapter, PS_DENY_JOIN);
2747         if (_FAIL == rtw_pwr_wakeup(padapter)) {
2748                 ret = -1;
2749                 goto cancel_ps_deny;
2750         }
2751
2752         if (!padapter->bup) {
2753                 ret = -1;
2754                 goto cancel_ps_deny;
2755         }
2756
2757         if (check_fwstate(pmlmepriv, WIFI_AP_STATE)) {
2758                 ret = -1;
2759                 goto cancel_ps_deny;
2760         }
2761
2762 #ifdef CONFIG_CONCURRENT_MODE
2763         if (rtw_mi_buddy_check_fwstate(padapter, _FW_UNDER_SURVEY | _FW_UNDER_LINKING)) {
2764                 RTW_INFO("set ssid, but buddy_intf is under scanning or linking\n");
2765                 ret = -EINVAL;
2766                 goto cancel_ps_deny;
2767         }
2768 #endif
2769         authmode = padapter->securitypriv.ndisauthtype;
2770         RTW_INFO("=>%s\n", __FUNCTION__);
2771         if (wrqu->essid.flags && wrqu->essid.length) {
2772                 /* Commented by Albert 20100519 */
2773                 /* We got the codes in "set_info" function of iwconfig source code. */
2774                 /*      ========================================= */
2775                 /*      wrq.u.essid.length = strlen(essid) + 1; */
2776                 /*      if(we_kernel_version > 20) */
2777                 /*              wrq.u.essid.length--; */
2778                 /*      ========================================= */
2779                 /*      That means, if the WIRELESS_EXT less than or equal to 20, the correct ssid len should subtract 1. */
2780 #if WIRELESS_EXT <= 20
2781                 len = ((wrqu->essid.length - 1) < IW_ESSID_MAX_SIZE) ? (wrqu->essid.length - 1) : IW_ESSID_MAX_SIZE;
2782 #else
2783                 len = (wrqu->essid.length < IW_ESSID_MAX_SIZE) ? wrqu->essid.length : IW_ESSID_MAX_SIZE;
2784 #endif
2785
2786                 if (wrqu->essid.length != 33)
2787                         RTW_INFO("ssid=%s, len=%d\n", extra, wrqu->essid.length);
2788
2789                 _rtw_memset(&ndis_ssid, 0, sizeof(NDIS_802_11_SSID));
2790                 ndis_ssid.SsidLength = len;
2791                 _rtw_memcpy(ndis_ssid.Ssid, extra, len);
2792                 src_ssid = ndis_ssid.Ssid;
2793
2794                 _enter_critical_bh(&queue->lock, &irqL);
2795                 phead = get_list_head(queue);
2796                 pmlmepriv->pscanned = get_next(phead);
2797
2798                 while (1) {
2799                         if (rtw_end_of_queue_search(phead, pmlmepriv->pscanned) == _TRUE) {
2800 #if 0
2801                                 if (check_fwstate(pmlmepriv, WIFI_ADHOC_STATE) == _TRUE) {
2802                                         rtw_set_802_11_ssid(padapter, &ndis_ssid);
2803
2804                                         goto cancel_ps_deny;
2805                                 } else {
2806                                         ret = -EINVAL;
2807                                         goto cancel_ps_deny;
2808                                 }
2809 #endif
2810
2811                                 break;
2812                         }
2813
2814                         pnetwork = LIST_CONTAINOR(pmlmepriv->pscanned, struct wlan_network, list);
2815
2816                         pmlmepriv->pscanned = get_next(pmlmepriv->pscanned);
2817
2818                         dst_ssid = pnetwork->network.Ssid.Ssid;
2819
2820
2821                         if ((_rtw_memcmp(dst_ssid, src_ssid, ndis_ssid.SsidLength) == _TRUE) &&
2822                             (pnetwork->network.Ssid.SsidLength == ndis_ssid.SsidLength)) {
2823
2824                                 if (check_fwstate(pmlmepriv, WIFI_ADHOC_STATE) == _TRUE) {
2825                                         if (pnetwork->network.InfrastructureMode != pmlmepriv->cur_network.network.InfrastructureMode)
2826                                                 continue;
2827                                 }
2828
2829                                 if (rtw_set_802_11_infrastructure_mode(padapter, pnetwork->network.InfrastructureMode) == _FALSE) {
2830                                         ret = -1;
2831                                         _exit_critical_bh(&queue->lock, &irqL);
2832                                         goto cancel_ps_deny;
2833                                 }
2834
2835                                 break;
2836                         }
2837                 }
2838                 _exit_critical_bh(&queue->lock, &irqL);
2839                 rtw_set_802_11_authentication_mode(padapter, authmode);
2840                 /* set_802_11_encryption_mode(padapter, padapter->securitypriv.ndisencryptstatus); */
2841                 if (rtw_set_802_11_ssid(padapter, &ndis_ssid) == _FALSE) {
2842                         ret = -1;
2843                         goto cancel_ps_deny;
2844                 }
2845         }
2846
2847 cancel_ps_deny:
2848         rtw_ps_deny_cancel(padapter, PS_DENY_JOIN);
2849
2850 exit:
2851         RTW_INFO("<=%s, ret %d\n", __FUNCTION__, ret);
2852
2853 #ifdef DBG_IOCTL
2854         RTW_INFO("DBG_IOCTL %s:%d return %d\n", __FUNCTION__, __LINE__, ret);
2855 #endif
2856
2857
2858         return ret;
2859 }
2860
2861 static int rtw_wx_get_essid(struct net_device *dev,
2862                             struct iw_request_info *a,
2863                             union iwreq_data *wrqu, char *extra)
2864 {
2865         u32 len, ret = 0;
2866         _adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
2867         struct  mlme_priv       *pmlmepriv = &(padapter->mlmepriv);
2868         WLAN_BSSID_EX  *pcur_bss = &pmlmepriv->cur_network.network;
2869
2870
2871
2872         if ((check_fwstate(pmlmepriv, _FW_LINKED) == _TRUE) ||
2873             (check_fwstate(pmlmepriv, WIFI_ADHOC_MASTER_STATE) == _TRUE)) {
2874                 len = pcur_bss->Ssid.SsidLength;
2875
2876                 wrqu->essid.length = len;
2877
2878                 _rtw_memcpy(extra, pcur_bss->Ssid.Ssid, len);
2879
2880                 wrqu->essid.flags = 1;
2881         } else {
2882                 ret = -1;
2883                 goto exit;
2884         }
2885
2886 exit:
2887
2888
2889         return ret;
2890
2891 }
2892
2893 static int rtw_wx_set_rate(struct net_device *dev,
2894                            struct iw_request_info *a,
2895                            union iwreq_data *wrqu, char *extra)
2896 {
2897         int     i, ret = 0;
2898         _adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
2899         u8      datarates[NumRates];
2900         u32     target_rate = wrqu->bitrate.value;
2901         u32     fixed = wrqu->bitrate.fixed;
2902         u32     ratevalue = 0;
2903         u8 mpdatarate[NumRates] = {11, 10, 9, 8, 7, 6, 5, 4, 3, 2, 1, 0, 0xff};
2904
2905
2906
2907         if (target_rate == -1) {
2908                 ratevalue = 11;
2909                 goto set_rate;
2910         }
2911         target_rate = target_rate / 100000;
2912
2913         switch (target_rate) {
2914         case 10:
2915                 ratevalue = 0;
2916                 break;
2917         case 20:
2918                 ratevalue = 1;
2919                 break;
2920         case 55:
2921                 ratevalue = 2;
2922                 break;
2923         case 60:
2924                 ratevalue = 3;
2925                 break;
2926         case 90:
2927                 ratevalue = 4;
2928                 break;
2929         case 110:
2930                 ratevalue = 5;
2931                 break;
2932         case 120:
2933                 ratevalue = 6;
2934                 break;
2935         case 180:
2936                 ratevalue = 7;
2937                 break;
2938         case 240:
2939                 ratevalue = 8;
2940                 break;
2941         case 360:
2942                 ratevalue = 9;
2943                 break;
2944         case 480:
2945                 ratevalue = 10;
2946                 break;
2947         case 540:
2948                 ratevalue = 11;
2949                 break;
2950         default:
2951                 ratevalue = 11;
2952                 break;
2953         }
2954
2955 set_rate:
2956
2957         for (i = 0; i < NumRates; i++) {
2958                 if (ratevalue == mpdatarate[i]) {
2959                         datarates[i] = mpdatarate[i];
2960                         if (fixed == 0)
2961                                 break;
2962                 } else
2963                         datarates[i] = 0xff;
2964
2965         }
2966
2967         if (rtw_setdatarate_cmd(padapter, datarates) != _SUCCESS) {
2968                 ret = -1;
2969         }
2970
2971
2972         return ret;
2973 }
2974
2975 static int rtw_wx_get_rate(struct net_device *dev,
2976                            struct iw_request_info *info,
2977                            union iwreq_data *wrqu, char *extra)
2978 {
2979         u16 max_rate = 0;
2980
2981         max_rate = rtw_get_cur_max_rate((_adapter *)rtw_netdev_priv(dev));
2982
2983         if (max_rate == 0)
2984                 return -EPERM;
2985
2986         wrqu->bitrate.fixed = 0;        /* no auto select */
2987         wrqu->bitrate.value = max_rate * 100000;
2988
2989         return 0;
2990 }
2991
2992 static int rtw_wx_set_rts(struct net_device *dev,
2993                           struct iw_request_info *info,
2994                           union iwreq_data *wrqu, char *extra)
2995 {
2996         _adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
2997
2998
2999         if (wrqu->rts.disabled)
3000                 padapter->registrypriv.rts_thresh = 2347;
3001         else {
3002                 if (wrqu->rts.value < 0 ||
3003                     wrqu->rts.value > 2347)
3004                         return -EINVAL;
3005
3006                 padapter->registrypriv.rts_thresh = wrqu->rts.value;
3007         }
3008
3009         RTW_INFO("%s, rts_thresh=%d\n", __func__, padapter->registrypriv.rts_thresh);
3010
3011
3012         return 0;
3013
3014 }
3015
3016 static int rtw_wx_get_rts(struct net_device *dev,
3017                           struct iw_request_info *info,
3018                           union iwreq_data *wrqu, char *extra)
3019 {
3020         _adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
3021
3022
3023         RTW_INFO("%s, rts_thresh=%d\n", __func__, padapter->registrypriv.rts_thresh);
3024
3025         wrqu->rts.value = padapter->registrypriv.rts_thresh;
3026         wrqu->rts.fixed = 0;    /* no auto select */
3027         /* wrqu->rts.disabled = (wrqu->rts.value == DEFAULT_RTS_THRESHOLD); */
3028
3029
3030         return 0;
3031 }
3032
3033 static int rtw_wx_set_frag(struct net_device *dev,
3034                            struct iw_request_info *info,
3035                            union iwreq_data *wrqu, char *extra)
3036 {
3037         _adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
3038
3039
3040         if (wrqu->frag.disabled)
3041                 padapter->xmitpriv.frag_len = MAX_FRAG_THRESHOLD;
3042         else {
3043                 if (wrqu->frag.value < MIN_FRAG_THRESHOLD ||
3044                     wrqu->frag.value > MAX_FRAG_THRESHOLD)
3045                         return -EINVAL;
3046
3047                 padapter->xmitpriv.frag_len = wrqu->frag.value & ~0x1;
3048         }
3049
3050         RTW_INFO("%s, frag_len=%d\n", __func__, padapter->xmitpriv.frag_len);
3051
3052
3053         return 0;
3054
3055 }
3056
3057 static int rtw_wx_get_frag(struct net_device *dev,
3058                            struct iw_request_info *info,
3059                            union iwreq_data *wrqu, char *extra)
3060 {
3061         _adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
3062
3063
3064         RTW_INFO("%s, frag_len=%d\n", __func__, padapter->xmitpriv.frag_len);
3065
3066         wrqu->frag.value = padapter->xmitpriv.frag_len;
3067         wrqu->frag.fixed = 0;   /* no auto select */
3068         /* wrqu->frag.disabled = (wrqu->frag.value == DEFAULT_FRAG_THRESHOLD); */
3069
3070
3071         return 0;
3072 }
3073
3074 static int rtw_wx_get_retry(struct net_device *dev,
3075                             struct iw_request_info *info,
3076                             union iwreq_data *wrqu, char *extra)
3077 {
3078         /* _adapter *padapter = (_adapter *)rtw_netdev_priv(dev); */
3079
3080
3081         wrqu->retry.value = 7;
3082         wrqu->retry.fixed = 0;  /* no auto select */
3083         wrqu->retry.disabled = 1;
3084
3085         return 0;
3086
3087 }
3088
3089 #if 0
3090         #define IW_ENCODE_INDEX         0x00FF  /* Token index (if needed) */
3091         #define IW_ENCODE_FLAGS         0xFF00  /* Flags defined below */
3092         #define IW_ENCODE_MODE          0xF000  /* Modes defined below */
3093         #define IW_ENCODE_DISABLED      0x8000  /* Encoding disabled */
3094         #define IW_ENCODE_ENABLED       0x0000  /* Encoding enabled */
3095         #define IW_ENCODE_RESTRICTED    0x4000  /* Refuse non-encoded packets */
3096         #define IW_ENCODE_OPEN          0x2000  /* Accept non-encoded packets */
3097         #define IW_ENCODE_NOKEY         0x0800  /* Key is write only, so not present */
3098         #define IW_ENCODE_TEMP          0x0400  /* Temporary key */
3099         /*
3100         iwconfig wlan0 key on->flags = 0x6001->maybe it means auto
3101         iwconfig wlan0 key off->flags = 0x8800
3102         iwconfig wlan0 key open->flags = 0x2800
3103         iwconfig wlan0 key open 1234567890->flags = 0x2000
3104         iwconfig wlan0 key restricted->flags = 0x4800
3105         iwconfig wlan0 key open [3] 1234567890->flags = 0x2003
3106         iwconfig wlan0 key restricted [2] 1234567890->flags = 0x4002
3107         iwconfig wlan0 key open [3] -> flags = 0x2803
3108         iwconfig wlan0 key restricted [2] -> flags = 0x4802
3109         */
3110 #endif
3111
3112 static int rtw_wx_set_enc(struct net_device *dev,
3113                           struct iw_request_info *info,
3114                           union iwreq_data *wrqu, char *keybuf)
3115 {
3116         u32 key, ret = 0;
3117         u32 keyindex_provided;
3118         NDIS_802_11_WEP  wep;
3119         NDIS_802_11_AUTHENTICATION_MODE authmode;
3120
3121         struct iw_point *erq = &(wrqu->encoding);
3122         _adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
3123         struct pwrctrl_priv *pwrpriv = adapter_to_pwrctl(padapter);
3124         RTW_INFO("+rtw_wx_set_enc, flags=0x%x\n", erq->flags);
3125
3126         _rtw_memset(&wep, 0, sizeof(NDIS_802_11_WEP));
3127
3128         key = erq->flags & IW_ENCODE_INDEX;
3129
3130
3131         if (erq->flags & IW_ENCODE_DISABLED) {
3132                 RTW_INFO("EncryptionDisabled\n");
3133                 padapter->securitypriv.ndisencryptstatus = Ndis802_11EncryptionDisabled;
3134                 padapter->securitypriv.dot11PrivacyAlgrthm = _NO_PRIVACY_;
3135                 padapter->securitypriv.dot118021XGrpPrivacy = _NO_PRIVACY_;
3136                 padapter->securitypriv.dot11AuthAlgrthm = dot11AuthAlgrthm_Open; /* open system */
3137                 authmode = Ndis802_11AuthModeOpen;
3138                 padapter->securitypriv.ndisauthtype = authmode;
3139
3140                 goto exit;
3141         }
3142
3143         if (key) {
3144                 if (key > WEP_KEYS)
3145                         return -EINVAL;
3146                 key--;
3147                 keyindex_provided = 1;
3148         } else {
3149                 keyindex_provided = 0;
3150                 key = padapter->securitypriv.dot11PrivacyKeyIndex;
3151                 RTW_INFO("rtw_wx_set_enc, key=%d\n", key);
3152         }
3153
3154         /* set authentication mode       */
3155         if (erq->flags & IW_ENCODE_OPEN) {
3156                 RTW_INFO("rtw_wx_set_enc():IW_ENCODE_OPEN\n");
3157                 padapter->securitypriv.ndisencryptstatus = Ndis802_11Encryption1Enabled;/* Ndis802_11EncryptionDisabled; */
3158
3159 #ifdef CONFIG_PLATFORM_MT53XX
3160                 padapter->securitypriv.dot11AuthAlgrthm = dot11AuthAlgrthm_Auto;
3161 #else
3162                 padapter->securitypriv.dot11AuthAlgrthm = dot11AuthAlgrthm_Open;
3163 #endif
3164
3165                 padapter->securitypriv.dot11PrivacyAlgrthm = _NO_PRIVACY_;
3166                 padapter->securitypriv.dot118021XGrpPrivacy = _NO_PRIVACY_;
3167                 authmode = Ndis802_11AuthModeOpen;
3168                 padapter->securitypriv.ndisauthtype = authmode;
3169         } else if (erq->flags & IW_ENCODE_RESTRICTED) {
3170                 RTW_INFO("rtw_wx_set_enc():IW_ENCODE_RESTRICTED\n");
3171                 padapter->securitypriv.ndisencryptstatus = Ndis802_11Encryption1Enabled;
3172
3173 #ifdef CONFIG_PLATFORM_MT53XX
3174                 padapter->securitypriv.dot11AuthAlgrthm = dot11AuthAlgrthm_Auto;
3175 #else
3176                 padapter->securitypriv.dot11AuthAlgrthm = dot11AuthAlgrthm_Shared;
3177 #endif
3178
3179                 padapter->securitypriv.dot11PrivacyAlgrthm = _WEP40_;
3180                 padapter->securitypriv.dot118021XGrpPrivacy = _WEP40_;
3181                 authmode = Ndis802_11AuthModeShared;
3182                 padapter->securitypriv.ndisauthtype = authmode;
3183         } else {
3184                 RTW_INFO("rtw_wx_set_enc():erq->flags=0x%x\n", erq->flags);
3185
3186                 padapter->securitypriv.ndisencryptstatus = Ndis802_11Encryption1Enabled;/* Ndis802_11EncryptionDisabled; */
3187                 padapter->securitypriv.dot11AuthAlgrthm = dot11AuthAlgrthm_Open; /* open system */
3188                 padapter->securitypriv.dot11PrivacyAlgrthm = _NO_PRIVACY_;
3189                 padapter->securitypriv.dot118021XGrpPrivacy = _NO_PRIVACY_;
3190                 authmode = Ndis802_11AuthModeOpen;
3191                 padapter->securitypriv.ndisauthtype = authmode;
3192         }
3193
3194         wep.KeyIndex = key;
3195         if (erq->length > 0) {
3196                 wep.KeyLength = erq->length <= 5 ? 5 : 13;
3197
3198                 wep.Length = wep.KeyLength + FIELD_OFFSET(NDIS_802_11_WEP, KeyMaterial);
3199         } else {
3200                 wep.KeyLength = 0 ;
3201
3202                 if (keyindex_provided == 1) { /* set key_id only, no given KeyMaterial(erq->length==0). */
3203                         padapter->securitypriv.dot11PrivacyKeyIndex = key;
3204
3205                         RTW_INFO("(keyindex_provided == 1), keyid=%d, key_len=%d\n", key, padapter->securitypriv.dot11DefKeylen[key]);
3206
3207                         switch (padapter->securitypriv.dot11DefKeylen[key]) {
3208                         case 5:
3209                                 padapter->securitypriv.dot11PrivacyAlgrthm = _WEP40_;
3210                                 break;
3211                         case 13:
3212                                 padapter->securitypriv.dot11PrivacyAlgrthm = _WEP104_;
3213                                 break;
3214                         default:
3215                                 padapter->securitypriv.dot11PrivacyAlgrthm = _NO_PRIVACY_;
3216                                 break;
3217                         }
3218
3219                         goto exit;
3220
3221                 }
3222
3223         }
3224
3225         wep.KeyIndex |= 0x80000000;
3226
3227         _rtw_memcpy(wep.KeyMaterial, keybuf, wep.KeyLength);
3228
3229         if (rtw_set_802_11_add_wep(padapter, &wep) == _FALSE) {
3230                 if (rf_on == pwrpriv->rf_pwrstate)
3231                         ret = -EOPNOTSUPP;
3232                 goto exit;
3233         }
3234
3235 exit:
3236
3237
3238         return ret;
3239
3240 }
3241
3242 static int rtw_wx_get_enc(struct net_device *dev,
3243                           struct iw_request_info *info,
3244                           union iwreq_data *wrqu, char *keybuf)
3245 {
3246         uint key, ret = 0;
3247         _adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
3248         struct iw_point *erq = &(wrqu->encoding);
3249         struct  mlme_priv       *pmlmepriv = &(padapter->mlmepriv);
3250
3251
3252         if (check_fwstate(pmlmepriv, _FW_LINKED) != _TRUE) {
3253                 if (check_fwstate(pmlmepriv, WIFI_ADHOC_MASTER_STATE) != _TRUE) {
3254                         erq->length = 0;
3255                         erq->flags |= IW_ENCODE_DISABLED;
3256                         return 0;
3257                 }
3258         }
3259
3260
3261         key = erq->flags & IW_ENCODE_INDEX;
3262
3263         if (key) {
3264                 if (key > WEP_KEYS)
3265                         return -EINVAL;
3266                 key--;
3267         } else
3268                 key = padapter->securitypriv.dot11PrivacyKeyIndex;
3269
3270         erq->flags = key + 1;
3271
3272         /* if(padapter->securitypriv.ndisauthtype == Ndis802_11AuthModeOpen) */
3273         /* { */
3274         /* erq->flags |= IW_ENCODE_OPEN; */
3275         /* }      */
3276
3277         switch (padapter->securitypriv.ndisencryptstatus) {
3278         case Ndis802_11EncryptionNotSupported:
3279         case Ndis802_11EncryptionDisabled:
3280
3281                 erq->length = 0;
3282                 erq->flags |= IW_ENCODE_DISABLED;
3283
3284                 break;
3285
3286         case Ndis802_11Encryption1Enabled:
3287
3288                 erq->length = padapter->securitypriv.dot11DefKeylen[key];
3289
3290                 if (erq->length) {
3291                         _rtw_memcpy(keybuf, padapter->securitypriv.dot11DefKey[key].skey, padapter->securitypriv.dot11DefKeylen[key]);
3292
3293                         erq->flags |= IW_ENCODE_ENABLED;
3294
3295                         if (padapter->securitypriv.ndisauthtype == Ndis802_11AuthModeOpen)
3296                                 erq->flags |= IW_ENCODE_OPEN;
3297                         else if (padapter->securitypriv.ndisauthtype == Ndis802_11AuthModeShared)
3298                                 erq->flags |= IW_ENCODE_RESTRICTED;
3299                 } else {
3300                         erq->length = 0;
3301                         erq->flags |= IW_ENCODE_DISABLED;
3302                 }
3303
3304                 break;
3305
3306         case Ndis802_11Encryption2Enabled:
3307         case Ndis802_11Encryption3Enabled:
3308
3309                 erq->length = 16;
3310                 erq->flags |= (IW_ENCODE_ENABLED | IW_ENCODE_OPEN | IW_ENCODE_NOKEY);
3311
3312                 break;
3313
3314         default:
3315                 erq->length = 0;
3316                 erq->flags |= IW_ENCODE_DISABLED;
3317
3318                 break;
3319
3320         }
3321
3322
3323         return ret;
3324
3325 }
3326
3327 static int rtw_wx_get_power(struct net_device *dev,
3328                             struct iw_request_info *info,
3329                             union iwreq_data *wrqu, char *extra)
3330 {
3331         /* _adapter *padapter = (_adapter *)rtw_netdev_priv(dev); */
3332
3333         wrqu->power.value = 0;
3334         wrqu->power.fixed = 0;  /* no auto select */
3335         wrqu->power.disabled = 1;
3336
3337         return 0;
3338
3339 }
3340
3341 static int rtw_wx_set_gen_ie(struct net_device *dev,
3342                              struct iw_request_info *info,
3343                              union iwreq_data *wrqu, char *extra)
3344 {
3345         int ret;
3346         _adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
3347
3348         ret = rtw_set_wpa_ie(padapter, extra, wrqu->data.length);
3349
3350         return ret;
3351 }
3352
3353 static int rtw_wx_set_auth(struct net_device *dev,
3354                            struct iw_request_info *info,
3355                            union iwreq_data *wrqu, char *extra)
3356 {
3357         _adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
3358         struct iw_param *param = (struct iw_param *)&(wrqu->param);
3359         struct mlme_priv        *pmlmepriv = &padapter->mlmepriv;
3360         struct security_priv *psecuritypriv = &padapter->securitypriv;
3361         struct mlme_ext_priv    *pmlmeext = &padapter->mlmeextpriv;
3362         struct mlme_ext_info    *pmlmeinfo = &(pmlmeext->mlmext_info);
3363         u32 value = param->value;
3364         int ret = 0;
3365
3366         switch (param->flags & IW_AUTH_INDEX) {
3367
3368         case IW_AUTH_WPA_VERSION:
3369 #ifdef CONFIG_WAPI_SUPPORT
3370 #ifndef CONFIG_IOCTL_CFG80211
3371                 padapter->wapiInfo.bWapiEnable = false;
3372                 if (value == IW_AUTH_WAPI_VERSION_1) {
3373                         padapter->wapiInfo.bWapiEnable = true;
3374                         psecuritypriv->dot11PrivacyAlgrthm = _SMS4_;
3375                         psecuritypriv->dot118021XGrpPrivacy = _SMS4_;
3376                         psecuritypriv->dot11AuthAlgrthm = dot11AuthAlgrthm_WAPI;
3377                         pmlmeinfo->auth_algo = psecuritypriv->dot11AuthAlgrthm;
3378                         padapter->wapiInfo.extra_prefix_len = WAPI_EXT_LEN;
3379                         padapter->wapiInfo.extra_postfix_len = SMS4_MIC_LEN;
3380                 }
3381 #endif
3382 #endif
3383                 break;
3384         case IW_AUTH_CIPHER_PAIRWISE:
3385
3386                 break;
3387         case IW_AUTH_CIPHER_GROUP:
3388
3389                 break;
3390         case IW_AUTH_KEY_MGMT:
3391 #ifdef CONFIG_WAPI_SUPPORT
3392 #ifndef CONFIG_IOCTL_CFG80211
3393                 RTW_INFO("rtw_wx_set_auth: IW_AUTH_KEY_MGMT case\n");
3394                 if (value == IW_AUTH_KEY_MGMT_WAPI_PSK)
3395                         padapter->wapiInfo.bWapiPSK = true;
3396                 else
3397                         padapter->wapiInfo.bWapiPSK = false;
3398                 RTW_INFO("rtw_wx_set_auth: IW_AUTH_KEY_MGMT bwapipsk %d\n", padapter->wapiInfo.bWapiPSK);
3399 #endif
3400 #endif
3401                 /*
3402                  *  ??? does not use these parameters
3403                  */
3404                 break;
3405
3406         case IW_AUTH_TKIP_COUNTERMEASURES: {
3407                 if (param->value) {
3408                         /* wpa_supplicant is enabling the tkip countermeasure. */
3409                         padapter->securitypriv.btkip_countermeasure = _TRUE;
3410                 } else {
3411                         /* wpa_supplicant is disabling the tkip countermeasure. */
3412                         padapter->securitypriv.btkip_countermeasure = _FALSE;
3413                 }
3414                 break;
3415         }
3416         case IW_AUTH_DROP_UNENCRYPTED: {
3417                 /* HACK:
3418                  *
3419                  * wpa_supplicant calls set_wpa_enabled when the driver
3420                  * is loaded and unloaded, regardless of if WPA is being
3421                  * used.  No other calls are made which can be used to
3422                  * determine if encryption will be used or not prior to
3423                  * association being expected.  If encryption is not being
3424                  * used, drop_unencrypted is set to false, else true -- we
3425                  * can use this to determine if the CAP_PRIVACY_ON bit should
3426                  * be set.
3427                  */
3428
3429                 if (padapter->securitypriv.ndisencryptstatus == Ndis802_11Encryption1Enabled) {
3430                         break;/* it means init value, or using wep, ndisencryptstatus = Ndis802_11Encryption1Enabled, */
3431                         /* then it needn't reset it; */
3432                 }
3433
3434                 if (param->value) {
3435                         padapter->securitypriv.ndisencryptstatus = Ndis802_11EncryptionDisabled;
3436                         padapter->securitypriv.dot11PrivacyAlgrthm = _NO_PRIVACY_;
3437                         padapter->securitypriv.dot118021XGrpPrivacy = _NO_PRIVACY_;
3438                         padapter->securitypriv.dot11AuthAlgrthm = dot11AuthAlgrthm_Open; /* open system */
3439                         padapter->securitypriv.ndisauthtype = Ndis802_11AuthModeOpen;
3440                 }
3441
3442                 break;
3443         }
3444
3445         case IW_AUTH_80211_AUTH_ALG:
3446
3447 #if defined(CONFIG_ANDROID) || 1
3448                 /*
3449                  *  It's the starting point of a link layer connection using wpa_supplicant
3450                 */
3451                 if (check_fwstate(&padapter->mlmepriv, _FW_LINKED)) {
3452                         LeaveAllPowerSaveMode(padapter);
3453                         rtw_disassoc_cmd(padapter, 500, RTW_CMDF_DIRECTLY);
3454                         RTW_INFO("%s...call rtw_indicate_disconnect\n ", __FUNCTION__);
3455                         rtw_indicate_disconnect(padapter, 0, _FALSE);
3456                         rtw_free_assoc_resources(padapter, 1);
3457                 }
3458 #endif
3459
3460
3461                 ret = wpa_set_auth_algs(dev, (u32)param->value);
3462
3463                 break;
3464
3465         case IW_AUTH_WPA_ENABLED:
3466
3467                 /* if(param->value) */
3468                 /* padapter->securitypriv.dot11AuthAlgrthm = dot11AuthAlgrthm_8021X; */ /* 802.1x */
3469                 /* else */
3470                 /* padapter->securitypriv.dot11AuthAlgrthm = dot11AuthAlgrthm_Open; */ /* open system */
3471
3472                 /* _disassociate(priv); */
3473
3474                 break;
3475
3476         case IW_AUTH_RX_UNENCRYPTED_EAPOL:
3477                 /* ieee->ieee802_1x = param->value; */
3478                 break;
3479
3480         case IW_AUTH_PRIVACY_INVOKED:
3481                 /* ieee->privacy_invoked = param->value; */
3482                 break;
3483
3484 #ifdef CONFIG_WAPI_SUPPORT
3485 #ifndef CONFIG_IOCTL_CFG80211
3486         case IW_AUTH_WAPI_ENABLED:
3487                 break;
3488 #endif
3489 #endif
3490
3491         default:
3492                 return -EOPNOTSUPP;
3493
3494         }
3495
3496         return ret;
3497
3498 }
3499
3500 static int rtw_wx_set_enc_ext(struct net_device *dev,
3501                               struct iw_request_info *info,
3502                               union iwreq_data *wrqu, char *extra)
3503 {
3504         char *alg_name;
3505         u32 param_len;
3506         struct ieee_param *param = NULL;
3507         struct iw_point *pencoding = &wrqu->encoding;
3508         struct iw_encode_ext *pext = (struct iw_encode_ext *)extra;
3509         int ret = 0;
3510
3511         param_len = sizeof(struct ieee_param) + pext->key_len;
3512         param = (struct ieee_param *)rtw_malloc(param_len);
3513         if (param == NULL)
3514                 return -1;
3515
3516         _rtw_memset(param, 0, param_len);
3517
3518         param->cmd = IEEE_CMD_SET_ENCRYPTION;
3519         _rtw_memset(param->sta_addr, 0xff, ETH_ALEN);
3520
3521
3522         switch (pext->alg) {
3523         case IW_ENCODE_ALG_NONE:
3524                 /* todo: remove key */
3525                 /* remove = 1;   */
3526                 alg_name = "none";
3527                 break;
3528         case IW_ENCODE_ALG_WEP:
3529                 alg_name = "WEP";
3530                 break;
3531         case IW_ENCODE_ALG_TKIP:
3532                 alg_name = "TKIP";
3533                 break;
3534         case IW_ENCODE_ALG_CCMP:
3535                 alg_name = "CCMP";
3536                 break;
3537 #ifdef CONFIG_IEEE80211W
3538         case IW_ENCODE_ALG_AES_CMAC:
3539                 alg_name = "BIP";
3540                 break;
3541 #endif /* CONFIG_IEEE80211W */
3542 #ifdef CONFIG_WAPI_SUPPORT
3543 #ifndef CONFIG_IOCTL_CFG80211
3544         case IW_ENCODE_ALG_SM4:
3545                 alg_name = "SMS4";
3546                 _rtw_memcpy(param->sta_addr, pext->addr.sa_data, ETH_ALEN);
3547                 RTW_INFO("rtw_wx_set_enc_ext: SMS4 case\n");
3548                 break;
3549 #endif
3550 #endif
3551         default:
3552                 ret = -1;
3553                 goto exit;
3554         }
3555
3556         strncpy((char *)param->u.crypt.alg, alg_name, IEEE_CRYPT_ALG_NAME_LEN);
3557
3558         if (pext->ext_flags & IW_ENCODE_EXT_SET_TX_KEY)
3559                 param->u.crypt.set_tx = 1;
3560
3561         /* cliW: WEP does not have group key
3562          * just not checking GROUP key setting
3563          */
3564         if ((pext->alg != IW_ENCODE_ALG_WEP) &&
3565             ((pext->ext_flags & IW_ENCODE_EXT_GROUP_KEY)
3566 #ifdef CONFIG_IEEE80211W
3567              || (pext->ext_flags & IW_ENCODE_ALG_AES_CMAC)
3568 #endif /* CONFIG_IEEE80211W */
3569             ))
3570                 param->u.crypt.set_tx = 0;
3571
3572         param->u.crypt.idx = (pencoding->flags & 0x00FF) - 1 ;
3573
3574         if (pext->ext_flags & IW_ENCODE_EXT_RX_SEQ_VALID) {
3575 #ifdef CONFIG_WAPI_SUPPORT
3576 #ifndef CONFIG_IOCTL_CFG80211
3577                 if (pext->alg == IW_ENCODE_ALG_SM4)
3578                         _rtw_memcpy(param->u.crypt.seq, pext->rx_seq, 16);
3579                 else
3580 #endif /* CONFIG_IOCTL_CFG80211 */
3581 #endif /* CONFIG_WAPI_SUPPORT */
3582                         _rtw_memcpy(param->u.crypt.seq, pext->rx_seq, 8);
3583         }
3584
3585         if (pext->key_len) {
3586                 param->u.crypt.key_len = pext->key_len;
3587                 /* _rtw_memcpy(param + 1, pext + 1, pext->key_len); */
3588                 _rtw_memcpy(param->u.crypt.key, pext + 1, pext->key_len);
3589         }
3590
3591         if (pencoding->flags & IW_ENCODE_DISABLED) {
3592                 /* todo: remove key */
3593                 /* remove = 1; */
3594         }
3595
3596         ret =  wpa_set_encryption(dev, param, param_len);
3597
3598 exit:
3599         if (param)
3600                 rtw_mfree((u8 *)param, param_len);
3601
3602         return ret;
3603 }
3604
3605
3606 static int rtw_wx_get_nick(struct net_device *dev,
3607                            struct iw_request_info *info,
3608                            union iwreq_data *wrqu, char *extra)
3609 {
3610         /* _adapter *padapter = (_adapter *)rtw_netdev_priv(dev); */
3611         /* struct mlme_priv *pmlmepriv = &(padapter->mlmepriv); */
3612         /* struct security_priv *psecuritypriv = &padapter->securitypriv; */
3613
3614         if (extra) {
3615                 wrqu->data.length = 14;
3616                 wrqu->data.flags = 1;
3617                 _rtw_memcpy(extra, "<WIFI@REALTEK>", 14);
3618         }
3619
3620         /* rtw_signal_process(pid, SIGUSR1); */ /* for test */
3621
3622         /* dump debug info here  */
3623 #if 0
3624         u32 dot11AuthAlgrthm;           /*  802.11 auth, could be open, shared, and 8021x */
3625         u32 dot11PrivacyAlgrthm;        /*  This specify the privacy for shared auth. algorithm. */
3626         u32 dot118021XGrpPrivacy;       /*  This specify the privacy algthm. used for Grp key */
3627         u32 ndisauthtype;
3628         u32 ndisencryptstatus;
3629 #endif
3630
3631         /* RTW_INFO("auth_alg=0x%x, enc_alg=0x%x, auth_type=0x%x, enc_type=0x%x\n",  */
3632         /*              psecuritypriv->dot11AuthAlgrthm, psecuritypriv->dot11PrivacyAlgrthm, */
3633         /*              psecuritypriv->ndisauthtype, psecuritypriv->ndisencryptstatus); */
3634
3635         /* RTW_INFO("enc_alg=0x%x\n", psecuritypriv->dot11PrivacyAlgrthm); */
3636         /* RTW_INFO("auth_type=0x%x\n", psecuritypriv->ndisauthtype); */
3637         /* RTW_INFO("enc_type=0x%x\n", psecuritypriv->ndisencryptstatus); */
3638
3639 #if 0
3640         RTW_INFO("dbg(0x210)=0x%x\n", rtw_read32(padapter, 0x210));
3641         RTW_INFO("dbg(0x608)=0x%x\n", rtw_read32(padapter, 0x608));
3642         RTW_INFO("dbg(0x280)=0x%x\n", rtw_read32(padapter, 0x280));
3643         RTW_INFO("dbg(0x284)=0x%x\n", rtw_read32(padapter, 0x284));
3644         RTW_INFO("dbg(0x288)=0x%x\n", rtw_read32(padapter, 0x288));
3645
3646         RTW_INFO("dbg(0x664)=0x%x\n", rtw_read32(padapter, 0x664));
3647
3648
3649         RTW_INFO("\n");
3650
3651         RTW_INFO("dbg(0x430)=0x%x\n", rtw_read32(padapter, 0x430));
3652         RTW_INFO("dbg(0x438)=0x%x\n", rtw_read32(padapter, 0x438));
3653
3654         RTW_INFO("dbg(0x440)=0x%x\n", rtw_read32(padapter, 0x440));
3655
3656         RTW_INFO("dbg(0x458)=0x%x\n", rtw_read32(padapter, 0x458));
3657
3658         RTW_INFO("dbg(0x484)=0x%x\n", rtw_read32(padapter, 0x484));
3659         RTW_INFO("dbg(0x488)=0x%x\n", rtw_read32(padapter, 0x488));
3660
3661         RTW_INFO("dbg(0x444)=0x%x\n", rtw_read32(padapter, 0x444));
3662         RTW_INFO("dbg(0x448)=0x%x\n", rtw_read32(padapter, 0x448));
3663         RTW_INFO("dbg(0x44c)=0x%x\n", rtw_read32(padapter, 0x44c));
3664         RTW_INFO("dbg(0x450)=0x%x\n", rtw_read32(padapter, 0x450));
3665 #endif
3666
3667         return 0;
3668
3669 }
3670
3671 static int rtw_wx_read32(struct net_device *dev,
3672                          struct iw_request_info *info,
3673                          union iwreq_data *wrqu, char *extra)
3674 {
3675         PADAPTER padapter;
3676         struct iw_point *p;
3677         u16 len;
3678         u32 addr;
3679         u32 data32;
3680         u32 bytes;
3681         u8 *ptmp;
3682         int ret;
3683
3684
3685         ret = 0;
3686         padapter = (PADAPTER)rtw_netdev_priv(dev);
3687         p = &wrqu->data;
3688         len = p->length;
3689         if (0 == len)
3690                 return -EINVAL;
3691
3692         ptmp = (u8 *)rtw_malloc(len);
3693         if (NULL == ptmp)
3694                 return -ENOMEM;
3695
3696         if (copy_from_user(ptmp, p->pointer, len)) {
3697                 ret = -EFAULT;
3698                 goto exit;
3699         }
3700
3701         bytes = 0;
3702         addr = 0;
3703         sscanf(ptmp, "%d,%x", &bytes, &addr);
3704
3705         switch (bytes) {
3706         case 1:
3707                 data32 = rtw_read8(padapter, addr);
3708                 sprintf(extra, "0x%02X", data32);
3709                 break;
3710         case 2:
3711                 data32 = rtw_read16(padapter, addr);
3712                 sprintf(extra, "0x%04X", data32);
3713                 break;
3714         case 4:
3715                 data32 = rtw_read32(padapter, addr);
3716                 sprintf(extra, "0x%08X", data32);
3717                 break;
3718
3719         #if defined(CONFIG_SDIO_HCI) && defined(CONFIG_SDIO_INDIRECT_ACCESS) && defined(DBG_SDIO_INDIRECT_ACCESS)
3720         case 11:
3721                 data32 = rtw_sd_iread8(padapter, addr);
3722                 sprintf(extra, "0x%02X", data32);
3723                 break;
3724         case 12:
3725                 data32 = rtw_sd_iread16(padapter, addr);
3726                 sprintf(extra, "0x%04X", data32);
3727                 break;
3728         case 14:
3729                 data32 = rtw_sd_iread32(padapter, addr);
3730                 sprintf(extra, "0x%08X", data32);
3731                 break;
3732         #endif
3733         default:
3734                 RTW_INFO("%s: usage> read [bytes],[address(hex)]\n", __func__);
3735                 ret = -EINVAL;
3736                 goto exit;
3737         }
3738         RTW_INFO("%s: addr=0x%08X data=%s\n", __func__, addr, extra);
3739
3740 exit:
3741         rtw_mfree(ptmp, len);
3742
3743         return 0;
3744 }
3745
3746 static int rtw_wx_write32(struct net_device *dev,
3747                           struct iw_request_info *info,
3748                           union iwreq_data *wrqu, char *extra)
3749 {
3750         PADAPTER padapter = (PADAPTER)rtw_netdev_priv(dev);
3751
3752         u32 addr;
3753         u32 data32;
3754         u32 bytes;
3755
3756
3757         bytes = 0;
3758         addr = 0;
3759         data32 = 0;
3760         sscanf(extra, "%d,%x,%x", &bytes, &addr, &data32);
3761
3762         switch (bytes) {
3763         case 1:
3764                 rtw_write8(padapter, addr, (u8)data32);
3765                 RTW_INFO("%s: addr=0x%08X data=0x%02X\n", __func__, addr, (u8)data32);
3766                 break;
3767         case 2:
3768                 rtw_write16(padapter, addr, (u16)data32);
3769                 RTW_INFO("%s: addr=0x%08X data=0x%04X\n", __func__, addr, (u16)data32);
3770                 break;
3771         case 4:
3772                 rtw_write32(padapter, addr, data32);
3773                 RTW_INFO("%s: addr=0x%08X data=0x%08X\n", __func__, addr, data32);
3774                 break;
3775         default:
3776                 RTW_INFO("%s: usage> write [bytes],[address(hex)],[data(hex)]\n", __func__);
3777                 return -EINVAL;
3778         }
3779
3780         return 0;
3781 }
3782
3783 static int rtw_wx_read_rf(struct net_device *dev,
3784                           struct iw_request_info *info,
3785                           union iwreq_data *wrqu, char *extra)
3786 {
3787         _adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
3788         u32 path, addr, data32;
3789
3790
3791         path = *(u32 *)extra;
3792         addr = *((u32 *)extra + 1);
3793         data32 = rtw_hal_read_rfreg(padapter, path, addr, 0xFFFFF);
3794         /*      RTW_INFO("%s: path=%d addr=0x%02x data=0x%05x\n", __func__, path, addr, data32); */
3795         /*
3796          * IMPORTANT!!
3797          * Only when wireless private ioctl is at odd order,
3798          * "extra" would be copied to user space.
3799          */
3800         sprintf(extra, "0x%05x", data32);
3801
3802         return 0;
3803 }
3804
3805 static int rtw_wx_write_rf(struct net_device *dev,
3806                            struct iw_request_info *info,
3807                            union iwreq_data *wrqu, char *extra)
3808 {
3809         _adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
3810         u32 path, addr, data32;
3811
3812
3813         path = *(u32 *)extra;
3814         addr = *((u32 *)extra + 1);
3815         data32 = *((u32 *)extra + 2);
3816         /*      RTW_INFO("%s: path=%d addr=0x%02x data=0x%05x\n", __func__, path, addr, data32); */
3817         rtw_hal_write_rfreg(padapter, path, addr, 0xFFFFF, data32);
3818
3819         return 0;
3820 }
3821
3822 static int rtw_wx_priv_null(struct net_device *dev, struct iw_request_info *a,
3823                             union iwreq_data *wrqu, char *b)
3824 {
3825         return -1;
3826 }
3827
3828 static int dummy(struct net_device *dev, struct iw_request_info *a,
3829                  union iwreq_data *wrqu, char *b)
3830 {
3831         /* _adapter *padapter = (_adapter *)rtw_netdev_priv(dev);        */
3832         /* struct mlme_priv *pmlmepriv = &(padapter->mlmepriv); */
3833
3834         /* RTW_INFO("cmd_code=%x, fwstate=0x%x\n", a->cmd, get_fwstate(pmlmepriv)); */
3835
3836         return -1;
3837
3838 }
3839
3840 static int rtw_wx_set_channel_plan(struct net_device *dev,
3841                                    struct iw_request_info *info,
3842                                    union iwreq_data *wrqu, char *extra)
3843 {
3844         _adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
3845         struct mlme_priv *pmlmepriv = &padapter->mlmepriv;
3846         u8 channel_plan_req = (u8)(*((int *)wrqu));
3847
3848         if (_SUCCESS != rtw_set_channel_plan(padapter, channel_plan_req))
3849                 return -EPERM;
3850
3851         return 0;
3852 }
3853
3854 static int rtw_wx_set_mtk_wps_probe_ie(struct net_device *dev,
3855                                        struct iw_request_info *a,
3856                                        union iwreq_data *wrqu, char *b)
3857 {
3858 #ifdef CONFIG_PLATFORM_MT53XX
3859         _adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
3860         struct mlme_priv *pmlmepriv = &padapter->mlmepriv;
3861
3862 #endif
3863         return 0;
3864 }
3865
3866 static int rtw_wx_get_sensitivity(struct net_device *dev,
3867                                   struct iw_request_info *info,
3868                                   union iwreq_data *wrqu, char *buf)
3869 {
3870 #ifdef CONFIG_PLATFORM_MT53XX
3871         _adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
3872
3873         /*      Modified by Albert 20110914 */
3874         /*      This is in dbm format for MTK platform. */
3875         wrqu->qual.level = padapter->recvpriv.rssi;
3876         RTW_INFO(" level = %u\n",  wrqu->qual.level);
3877 #endif
3878         return 0;
3879 }
3880
3881 static int rtw_wx_set_mtk_wps_ie(struct net_device *dev,
3882                                  struct iw_request_info *info,
3883                                  union iwreq_data *wrqu, char *extra)
3884 {
3885 #ifdef CONFIG_PLATFORM_MT53XX
3886         _adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
3887
3888         return rtw_set_wpa_ie(padapter, wrqu->data.pointer, wrqu->data.length);
3889 #else
3890         return 0;
3891 #endif
3892 }
3893
3894 /*
3895 typedef int (*iw_handler)(struct net_device *dev, struct iw_request_info *info,
3896                           union iwreq_data *wrqu, char *extra);
3897 */
3898 /*
3899  *      For all data larger than 16 octets, we need to use a
3900  *      pointer to memory allocated in user space.
3901  */
3902 static  int rtw_drvext_hdl(struct net_device *dev, struct iw_request_info *info,
3903                            union iwreq_data *wrqu, char *extra)
3904 {
3905
3906 #if 0
3907         struct  iw_point {
3908                 void __user     *pointer;       /* Pointer to the data  (in user space) */
3909                 __u16           length;         /* number of fields or size in bytes */
3910                 __u16           flags;          /* Optional params */
3911         };
3912 #endif
3913
3914 #ifdef CONFIG_DRVEXT_MODULE
3915         u8 res;
3916         struct drvext_handler *phandler;
3917         struct drvext_oidparam *poidparam;
3918         int ret;
3919         u16 len;
3920         u8 *pparmbuf, bset;
3921         _adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
3922         struct iw_point *p = &wrqu->data;
3923
3924         if ((!p->length) || (!p->pointer)) {
3925                 ret = -EINVAL;
3926                 goto _rtw_drvext_hdl_exit;
3927         }
3928
3929
3930         bset = (u8)(p->flags & 0xFFFF);
3931         len = p->length;
3932         pparmbuf = (u8 *)rtw_malloc(len);
3933         if (pparmbuf == NULL) {
3934                 ret = -ENOMEM;
3935                 goto _rtw_drvext_hdl_exit;
3936         }
3937
3938         if (bset) { /* set info */
3939                 if (copy_from_user(pparmbuf, p->pointer, len)) {
3940                         rtw_mfree(pparmbuf, len);
3941                         ret = -EFAULT;
3942                         goto _rtw_drvext_hdl_exit;
3943                 }
3944         } else { /* query info */
3945
3946         }
3947
3948
3949         /*  */
3950         poidparam = (struct drvext_oidparam *)pparmbuf;
3951
3952
3953
3954         /* check subcode         */
3955         if (poidparam->subcode >= MAX_DRVEXT_HANDLERS) {
3956                 ret = -EINVAL;
3957                 goto _rtw_drvext_hdl_exit;
3958         }
3959
3960
3961         if (poidparam->subcode >= MAX_DRVEXT_OID_SUBCODES) {
3962                 ret = -EINVAL;
3963                 goto _rtw_drvext_hdl_exit;
3964         }
3965
3966
3967         phandler = drvextoidhandlers + poidparam->subcode;
3968
3969         if (poidparam->len != phandler->parmsize) {
3970                 ret = -EINVAL;
3971                 goto _rtw_drvext_hdl_exit;
3972         }
3973
3974
3975         res = phandler->handler(&padapter->drvextpriv, bset, poidparam->data);
3976
3977         if (res == 0) {
3978                 ret = 0;
3979
3980                 if (bset == 0x00) {/* query info */
3981                         /* _rtw_memcpy(p->pointer, pparmbuf, len); */
3982                         if (copy_to_user(p->pointer, pparmbuf, len))
3983                                 ret = -EFAULT;
3984                 }
3985         } else
3986                 ret = -EFAULT;
3987
3988
3989 _rtw_drvext_hdl_exit:
3990
3991         return ret;
3992
3993 #endif
3994
3995         return 0;
3996
3997 }
3998
3999 static void rtw_dbg_mode_hdl(_adapter *padapter, u32 id, u8 *pdata, u32 len)
4000 {
4001         pRW_Reg RegRWStruct;
4002         struct rf_reg_param *prfreg;
4003         u8 path;
4004         u8 offset;
4005         u32 value;
4006
4007         RTW_INFO("%s\n", __FUNCTION__);
4008
4009         switch (id) {
4010         case GEN_MP_IOCTL_SUBCODE(MP_START):
4011                 RTW_INFO("871x_driver is only for normal mode, can't enter mp mode\n");
4012                 break;
4013         case GEN_MP_IOCTL_SUBCODE(READ_REG):
4014                 RegRWStruct = (pRW_Reg)pdata;
4015                 switch (RegRWStruct->width) {
4016                 case 1:
4017                         RegRWStruct->value = rtw_read8(padapter, RegRWStruct->offset);
4018                         break;
4019                 case 2:
4020                         RegRWStruct->value = rtw_read16(padapter, RegRWStruct->offset);
4021                         break;
4022                 case 4:
4023                         RegRWStruct->value = rtw_read32(padapter, RegRWStruct->offset);
4024                         break;
4025                 default:
4026                         break;
4027                 }
4028
4029                 break;
4030         case GEN_MP_IOCTL_SUBCODE(WRITE_REG):
4031                 RegRWStruct = (pRW_Reg)pdata;
4032                 switch (RegRWStruct->width) {
4033                 case 1:
4034                         rtw_write8(padapter, RegRWStruct->offset, (u8)RegRWStruct->value);
4035                         break;
4036                 case 2:
4037                         rtw_write16(padapter, RegRWStruct->offset, (u16)RegRWStruct->value);
4038                         break;
4039                 case 4:
4040                         rtw_write32(padapter, RegRWStruct->offset, (u32)RegRWStruct->value);
4041                         break;
4042                 default:
4043                         break;
4044                 }
4045
4046                 break;
4047         case GEN_MP_IOCTL_SUBCODE(READ_RF_REG):
4048
4049                 prfreg = (struct rf_reg_param *)pdata;
4050
4051                 path = (u8)prfreg->path;
4052                 offset = (u8)prfreg->offset;
4053
4054                 value = rtw_hal_read_rfreg(padapter, path, offset, 0xffffffff);
4055
4056                 prfreg->value = value;
4057
4058                 break;
4059         case GEN_MP_IOCTL_SUBCODE(WRITE_RF_REG):
4060
4061                 prfreg = (struct rf_reg_param *)pdata;
4062
4063                 path = (u8)prfreg->path;
4064                 offset = (u8)prfreg->offset;
4065                 value = prfreg->value;
4066
4067                 rtw_hal_write_rfreg(padapter, path, offset, 0xffffffff, value);
4068
4069                 break;
4070         case GEN_MP_IOCTL_SUBCODE(TRIGGER_GPIO):
4071                 RTW_INFO("==> trigger gpio 0\n");
4072                 rtw_hal_set_hwreg(padapter, HW_VAR_TRIGGER_GPIO_0, 0);
4073                 break;
4074 #ifdef CONFIG_BT_COEXIST
4075         case GEN_MP_IOCTL_SUBCODE(SET_DM_BT):
4076                 RTW_INFO("==> set dm_bt_coexist:%x\n", *(u8 *)pdata);
4077                 rtw_hal_set_hwreg(padapter, HW_VAR_BT_SET_COEXIST, pdata);
4078                 break;
4079         case GEN_MP_IOCTL_SUBCODE(DEL_BA):
4080                 RTW_INFO("==> delete ba:%x\n", *(u8 *)pdata);
4081                 rtw_hal_set_hwreg(padapter, HW_VAR_BT_ISSUE_DELBA, pdata);
4082                 break;
4083 #endif
4084 #ifdef DBG_CONFIG_ERROR_DETECT
4085         case GEN_MP_IOCTL_SUBCODE(GET_WIFI_STATUS):
4086                 *pdata = rtw_hal_sreset_get_wifi_status(padapter);
4087                 break;
4088 #endif
4089
4090         default:
4091                 break;
4092         }
4093
4094 }
4095 #ifdef MP_IOCTL_HDL
4096 static int rtw_mp_ioctl_hdl(struct net_device *dev, struct iw_request_info *info,
4097                             union iwreq_data *wrqu, char *extra)
4098 {
4099         int ret = 0;
4100         u32 BytesRead, BytesWritten, BytesNeeded;
4101         struct oid_par_priv     oid_par;
4102         struct mp_ioctl_handler *phandler;
4103         struct mp_ioctl_param   *poidparam;
4104         uint status = 0;
4105         u16 len;
4106         u8 *pparmbuf = NULL, bset;
4107         PADAPTER padapter = (PADAPTER)rtw_netdev_priv(dev);
4108         struct iw_point *p = &wrqu->data;
4109
4110         /* RTW_INFO("+rtw_mp_ioctl_hdl\n"); */
4111
4112         /* mutex_lock(&ioctl_mutex); */
4113
4114         if ((!p->length) || (!p->pointer)) {
4115                 ret = -EINVAL;
4116                 goto _rtw_mp_ioctl_hdl_exit;
4117         }
4118
4119         pparmbuf = NULL;
4120         bset = (u8)(p->flags & 0xFFFF);
4121         len = p->length;
4122         pparmbuf = (u8 *)rtw_malloc(len);
4123         if (pparmbuf == NULL) {
4124                 ret = -ENOMEM;
4125                 goto _rtw_mp_ioctl_hdl_exit;
4126         }
4127
4128         if (copy_from_user(pparmbuf, p->pointer, len)) {
4129                 ret = -EFAULT;
4130                 goto _rtw_mp_ioctl_hdl_exit;
4131         }
4132
4133         poidparam = (struct mp_ioctl_param *)pparmbuf;
4134
4135         if (poidparam->subcode >= MAX_MP_IOCTL_SUBCODE) {
4136                 ret = -EINVAL;
4137                 goto _rtw_mp_ioctl_hdl_exit;
4138         }
4139
4140         /* RTW_INFO("%s: %d\n", __func__, poidparam->subcode); */
4141 #ifdef CONFIG_MP_INCLUDED
4142         if (padapter->registrypriv.mp_mode == 1) {
4143                 phandler = mp_ioctl_hdl + poidparam->subcode;
4144
4145                 if ((phandler->paramsize != 0) && (poidparam->len < phandler->paramsize)) {
4146                         ret = -EINVAL;
4147                         goto _rtw_mp_ioctl_hdl_exit;
4148                 }
4149
4150                 if (phandler->handler) {
4151                         oid_par.adapter_context = padapter;
4152                         oid_par.oid = phandler->oid;
4153                         oid_par.information_buf = poidparam->data;
4154                         oid_par.information_buf_len = poidparam->len;
4155                         oid_par.dbg = 0;
4156
4157                         BytesWritten = 0;
4158                         BytesNeeded = 0;
4159
4160                         if (bset) {
4161                                 oid_par.bytes_rw = &BytesRead;
4162                                 oid_par.bytes_needed = &BytesNeeded;
4163                                 oid_par.type_of_oid = SET_OID;
4164                         } else {
4165                                 oid_par.bytes_rw = &BytesWritten;
4166                                 oid_par.bytes_needed = &BytesNeeded;
4167                                 oid_par.type_of_oid = QUERY_OID;
4168                         }
4169
4170                         status = phandler->handler(&oid_par);
4171
4172                         /* todo:check status, BytesNeeded, etc. */
4173                 } else {
4174                         RTW_INFO("rtw_mp_ioctl_hdl(): err!, subcode=%d, oid=%d, handler=%p\n",
4175                                 poidparam->subcode, phandler->oid, phandler->handler);
4176                         ret = -EFAULT;
4177                         goto _rtw_mp_ioctl_hdl_exit;
4178                 }
4179         } else
4180 #endif
4181         {
4182                 rtw_dbg_mode_hdl(padapter, poidparam->subcode, poidparam->data, poidparam->len);
4183         }
4184
4185         if (bset == 0x00) {/* query info */
4186                 if (copy_to_user(p->pointer, pparmbuf, len))
4187                         ret = -EFAULT;
4188         }
4189
4190         if (status) {
4191                 ret = -EFAULT;
4192                 goto _rtw_mp_ioctl_hdl_exit;
4193         }
4194
4195 _rtw_mp_ioctl_hdl_exit:
4196
4197         if (pparmbuf)
4198                 rtw_mfree(pparmbuf, len);
4199
4200         /* mutex_unlock(&ioctl_mutex); */
4201
4202         return ret;
4203 }
4204 #endif
4205 static int rtw_get_ap_info(struct net_device *dev,
4206                            struct iw_request_info *info,
4207                            union iwreq_data *wrqu, char *extra)
4208 {
4209         int bssid_match, ret = 0;
4210         u32 cnt = 0, wpa_ielen;
4211         _irqL   irqL;
4212         _list   *plist, *phead;
4213         unsigned char *pbuf;
4214         u8 bssid[ETH_ALEN];
4215         char data[32];
4216         struct wlan_network *pnetwork = NULL;
4217         _adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
4218         struct mlme_priv *pmlmepriv = &(padapter->mlmepriv);
4219         _queue *queue = &(pmlmepriv->scanned_queue);
4220         struct iw_point *pdata = &wrqu->data;
4221
4222         RTW_INFO("+rtw_get_aplist_info\n");
4223
4224         if (rtw_is_drv_stopped(padapter) || (pdata == NULL)) {
4225                 ret = -EINVAL;
4226                 goto exit;
4227         }
4228
4229         while ((check_fwstate(pmlmepriv, (_FW_UNDER_SURVEY | _FW_UNDER_LINKING))) == _TRUE) {
4230                 rtw_msleep_os(30);
4231                 cnt++;
4232                 if (cnt > 100)
4233                         break;
4234         }
4235
4236
4237         /* pdata->length = 0; */ /* ?    */
4238         pdata->flags = 0;
4239         if (pdata->length >= 32) {
4240                 if (copy_from_user(data, pdata->pointer, 32)) {
4241                         ret = -EINVAL;
4242                         goto exit;
4243                 }
4244         } else {
4245                 ret = -EINVAL;
4246                 goto exit;
4247         }
4248
4249         _enter_critical_bh(&(pmlmepriv->scanned_queue.lock), &irqL);
4250
4251         phead = get_list_head(queue);
4252         plist = get_next(phead);
4253
4254         while (1) {
4255                 if (rtw_end_of_queue_search(phead, plist) == _TRUE)
4256                         break;
4257
4258
4259                 pnetwork = LIST_CONTAINOR(plist, struct wlan_network, list);
4260
4261                 /* if(hwaddr_aton_i(pdata->pointer, bssid)) */
4262                 if (hwaddr_aton_i(data, bssid)) {
4263                         RTW_INFO("Invalid BSSID '%s'.\n", (u8 *)data);
4264                         _exit_critical_bh(&(pmlmepriv->scanned_queue.lock), &irqL);
4265                         return -EINVAL;
4266                 }
4267
4268
4269                 if (_rtw_memcmp(bssid, pnetwork->network.MacAddress, ETH_ALEN) == _TRUE) { /* BSSID match, then check if supporting wpa/wpa2 */
4270                         RTW_INFO("BSSID:" MAC_FMT "\n", MAC_ARG(bssid));
4271
4272                         pbuf = rtw_get_wpa_ie(&pnetwork->network.IEs[12], &wpa_ielen, pnetwork->network.IELength - 12);
4273                         if (pbuf && (wpa_ielen > 0)) {
4274                                 pdata->flags = 1;
4275                                 break;
4276                         }
4277
4278                         pbuf = rtw_get_wpa2_ie(&pnetwork->network.IEs[12], &wpa_ielen, pnetwork->network.IELength - 12);
4279                         if (pbuf && (wpa_ielen > 0)) {
4280                                 pdata->flags = 2;
4281                                 break;
4282                         }
4283
4284                 }
4285
4286                 plist = get_next(plist);
4287
4288         }
4289
4290         _exit_critical_bh(&(pmlmepriv->scanned_queue.lock), &irqL);
4291
4292         if (pdata->length >= 34) {
4293                 if (copy_to_user((u8 *)pdata->pointer + 32, (u8 *)&pdata->flags, 1)) {
4294                         ret = -EINVAL;
4295                         goto exit;
4296                 }
4297         }
4298
4299 exit:
4300
4301         return ret;
4302
4303 }
4304
4305 static int rtw_set_pid(struct net_device *dev,
4306                        struct iw_request_info *info,
4307                        union iwreq_data *wrqu, char *extra)
4308 {
4309
4310         int ret = 0;
4311         _adapter *padapter = rtw_netdev_priv(dev);
4312         int *pdata = (int *)wrqu;
4313         int selector;
4314
4315         if (rtw_is_drv_stopped(padapter) || (pdata == NULL)) {
4316                 ret = -EINVAL;
4317                 goto exit;
4318         }
4319
4320         selector = *pdata;
4321         if (selector < 3 && selector >= 0) {
4322                 padapter->pid[selector] = *(pdata + 1);
4323 #ifdef CONFIG_GLOBAL_UI_PID
4324                 ui_pid[selector] = *(pdata + 1);
4325 #endif
4326                 RTW_INFO("%s set pid[%d]=%d\n", __FUNCTION__, selector , padapter->pid[selector]);
4327         } else
4328                 RTW_INFO("%s selector %d error\n", __FUNCTION__, selector);
4329
4330 exit:
4331
4332         return ret;
4333
4334 }
4335
4336 static int rtw_wps_start(struct net_device *dev,
4337                          struct iw_request_info *info,
4338                          union iwreq_data *wrqu, char *extra)
4339 {
4340
4341         int ret = 0;
4342         _adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
4343         struct iw_point *pdata = &wrqu->data;
4344         u32   u32wps_start = 0;
4345         unsigned int uintRet = 0;
4346
4347         if (RTW_CANNOT_RUN(padapter) || (NULL == pdata)) {
4348                 ret = -EINVAL;
4349                 goto exit;
4350         }
4351
4352         uintRet = copy_from_user((void *) &u32wps_start, pdata->pointer, 4);
4353         if (u32wps_start == 0)
4354                 u32wps_start = *extra;
4355
4356         RTW_INFO("[%s] wps_start = %d\n", __FUNCTION__, u32wps_start);
4357
4358         if (u32wps_start == 1)   /* WPS Start */
4359                 rtw_led_control(padapter, LED_CTL_START_WPS);
4360         else if (u32wps_start == 2)   /* WPS Stop because of wps success */
4361                 rtw_led_control(padapter, LED_CTL_STOP_WPS);
4362         else if (u32wps_start == 3)   /* WPS Stop because of wps fail */
4363                 rtw_led_control(padapter, LED_CTL_STOP_WPS_FAIL);
4364
4365 #ifdef CONFIG_INTEL_WIDI
4366         process_intel_widi_wps_status(padapter, u32wps_start);
4367 #endif /* CONFIG_INTEL_WIDI */
4368
4369 exit:
4370
4371         return ret;
4372
4373 }
4374
4375 #ifdef CONFIG_P2P
4376 static int rtw_wext_p2p_enable(struct net_device *dev,
4377                                struct iw_request_info *info,
4378                                union iwreq_data *wrqu, char *extra)
4379 {
4380
4381         int ret = 0;
4382         _adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
4383         struct mlme_priv *pmlmepriv = &(padapter->mlmepriv);
4384         struct iw_point *pdata = &wrqu->data;
4385         struct wifidirect_info *pwdinfo = &(padapter->wdinfo);
4386         struct mlme_ext_priv    *pmlmeext = &padapter->mlmeextpriv;
4387         enum P2P_ROLE init_role = P2P_ROLE_DISABLE;
4388
4389         if (*extra == '0')
4390                 init_role = P2P_ROLE_DISABLE;
4391         else if (*extra == '1')
4392                 init_role = P2P_ROLE_DEVICE;
4393         else if (*extra == '2')
4394                 init_role = P2P_ROLE_CLIENT;
4395         else if (*extra == '3')
4396                 init_role = P2P_ROLE_GO;
4397
4398         if (_FAIL == rtw_p2p_enable(padapter, init_role)) {
4399                 ret = -EFAULT;
4400                 goto exit;
4401         }
4402
4403         /* set channel/bandwidth */
4404         if (init_role != P2P_ROLE_DISABLE) {
4405                 u8 channel, ch_offset;
4406                 u16 bwmode;
4407
4408                 if (rtw_p2p_chk_state(pwdinfo, P2P_STATE_LISTEN)) {
4409                         /*      Stay at the listen state and wait for discovery. */
4410                         channel = pwdinfo->listen_channel;
4411                         pwdinfo->operating_channel = pwdinfo->listen_channel;
4412                         ch_offset = HAL_PRIME_CHNL_OFFSET_DONT_CARE;
4413                         bwmode = CHANNEL_WIDTH_20;
4414                 }
4415 #ifdef CONFIG_CONCURRENT_MODE
4416                 else if (rtw_p2p_chk_state(pwdinfo, P2P_STATE_IDLE)) {
4417
4418                         _set_timer(&pwdinfo->ap_p2p_switch_timer, pwdinfo->ext_listen_interval);
4419
4420                         channel = rtw_mi_get_union_chan(padapter);
4421                         ch_offset = rtw_mi_get_union_offset(padapter);
4422                         bwmode = rtw_mi_get_union_bw(padapter);
4423
4424                         pwdinfo->operating_channel = channel;
4425                 }
4426 #endif
4427                 else {
4428                         pwdinfo->operating_channel = pmlmeext->cur_channel;
4429
4430                         channel = pwdinfo->operating_channel;
4431                         ch_offset = pmlmeext->cur_ch_offset;
4432                         bwmode = pmlmeext->cur_bwmode;
4433                 }
4434
4435                 set_channel_bwmode(padapter, channel, ch_offset, bwmode);
4436         }
4437
4438 exit:
4439         return ret;
4440
4441 }
4442
4443 static int rtw_p2p_set_go_nego_ssid(struct net_device *dev,
4444                                     struct iw_request_info *info,
4445                                     union iwreq_data *wrqu, char *extra)
4446 {
4447
4448         int ret = 0;
4449         _adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
4450         struct mlme_priv *pmlmepriv = &(padapter->mlmepriv);
4451         struct iw_point *pdata = &wrqu->data;
4452         struct wifidirect_info *pwdinfo = &(padapter->wdinfo);
4453
4454         RTW_INFO("[%s] ssid = %s, len = %zu\n", __FUNCTION__, extra, strlen(extra));
4455         _rtw_memcpy(pwdinfo->nego_ssid, extra, strlen(extra));
4456         pwdinfo->nego_ssidlen = strlen(extra);
4457
4458         return ret;
4459
4460 }
4461
4462
4463 static int rtw_p2p_set_intent(struct net_device *dev,
4464                               struct iw_request_info *info,
4465                               union iwreq_data *wrqu, char *extra)
4466 {
4467         int                                                     ret = 0;
4468         _adapter                                                *padapter = (_adapter *)rtw_netdev_priv(dev);
4469         struct wifidirect_info                  *pwdinfo = &(padapter->wdinfo);
4470         u8                                                      intent = pwdinfo->intent;
4471
4472         extra[wrqu->data.length] = 0x00;
4473
4474         intent = rtw_atoi(extra);
4475
4476         if (intent <= 15)
4477                 pwdinfo->intent = intent;
4478         else
4479                 ret = -1;
4480
4481         RTW_INFO("[%s] intent = %d\n", __FUNCTION__, intent);
4482
4483         return ret;
4484
4485 }
4486
4487 static int rtw_p2p_set_listen_ch(struct net_device *dev,
4488                                  struct iw_request_info *info,
4489                                  union iwreq_data *wrqu, char *extra)
4490 {
4491
4492         int ret = 0;
4493         _adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
4494         struct wifidirect_info *pwdinfo = &(padapter->wdinfo);
4495         u8      listen_ch = pwdinfo->listen_channel;    /*      Listen channel number */
4496
4497         extra[wrqu->data.length] = 0x00;
4498         listen_ch = rtw_atoi(extra);
4499
4500         if ((listen_ch == 1) || (listen_ch == 6) || (listen_ch == 11)) {
4501                 pwdinfo->listen_channel = listen_ch;
4502                 set_channel_bwmode(padapter, pwdinfo->listen_channel, HAL_PRIME_CHNL_OFFSET_DONT_CARE, CHANNEL_WIDTH_20);
4503         } else
4504                 ret = -1;
4505
4506         RTW_INFO("[%s] listen_ch = %d\n", __FUNCTION__, pwdinfo->listen_channel);
4507
4508         return ret;
4509
4510 }
4511
4512 static int rtw_p2p_set_op_ch(struct net_device *dev,
4513                              struct iw_request_info *info,
4514                              union iwreq_data *wrqu, char *extra)
4515 {
4516         /*      Commented by Albert 20110524
4517          *      This function is used to set the operating channel if the driver will become the group owner */
4518
4519         int ret = 0;
4520         _adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
4521         struct wifidirect_info *pwdinfo = &(padapter->wdinfo);
4522         u8      op_ch = pwdinfo->operating_channel;     /*      Operating channel number */
4523
4524         extra[wrqu->data.length] = 0x00;
4525
4526         op_ch = (u8) rtw_atoi(extra);
4527         if (op_ch > 0)
4528                 pwdinfo->operating_channel = op_ch;
4529         else
4530                 ret = -1;
4531
4532         RTW_INFO("[%s] op_ch = %d\n", __FUNCTION__, pwdinfo->operating_channel);
4533
4534         return ret;
4535
4536 }
4537
4538
4539 static int rtw_p2p_profilefound(struct net_device *dev,
4540                                 struct iw_request_info *info,
4541                                 union iwreq_data *wrqu, char *extra)
4542 {
4543
4544         int ret = 0;
4545         _adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
4546         struct wifidirect_info *pwdinfo = &(padapter->wdinfo);
4547
4548         /*      Comment by Albert 2010/10/13 */
4549         /*      Input data format: */
4550         /*      Ex:  0 */
4551         /*      Ex:  1XX:XX:XX:XX:XX:XXYYSSID */
4552         /*      0 => Reflush the profile record list. */
4553         /*      1 => Add the profile list */
4554         /*      XX:XX:XX:XX:XX:XX => peer's MAC Address ( ex: 00:E0:4C:00:00:01 ) */
4555         /*      YY => SSID Length */
4556         /*      SSID => SSID for persistence group */
4557
4558         RTW_INFO("[%s] In value = %s, len = %d\n", __FUNCTION__, extra, wrqu->data.length - 1);
4559
4560
4561         /*      The upper application should pass the SSID to driver by using this rtw_p2p_profilefound function. */
4562         if (!rtw_p2p_chk_state(pwdinfo, P2P_STATE_NONE)) {
4563                 if (extra[0] == '0') {
4564                         /*      Remove all the profile information of wifidirect_info structure. */
4565                         _rtw_memset(&pwdinfo->profileinfo[0], 0x00, sizeof(struct profile_info) * P2P_MAX_PERSISTENT_GROUP_NUM);
4566                         pwdinfo->profileindex = 0;
4567                 } else {
4568                         if (pwdinfo->profileindex >= P2P_MAX_PERSISTENT_GROUP_NUM)
4569                                 ret = -1;
4570                         else {
4571                                 int jj, kk;
4572
4573                                 /*      Add this profile information into pwdinfo->profileinfo */
4574                                 /*      Ex:  1XX:XX:XX:XX:XX:XXYYSSID */
4575                                 for (jj = 0, kk = 1; jj < ETH_ALEN; jj++, kk += 3)
4576                                         pwdinfo->profileinfo[pwdinfo->profileindex].peermac[jj] = key_2char2num(extra[kk], extra[kk + 1]);
4577
4578                                 /* pwdinfo->profileinfo[pwdinfo->profileindex].ssidlen = ( extra[18] - '0' ) * 10 + ( extra[19] - '0' ); */
4579                                 /* _rtw_memcpy( pwdinfo->profileinfo[pwdinfo->profileindex].ssid, &extra[20], pwdinfo->profileinfo[pwdinfo->profileindex].ssidlen ); */
4580                                 pwdinfo->profileindex++;
4581                         }
4582                 }
4583         }
4584
4585         return ret;
4586
4587 }
4588
4589 static int rtw_p2p_setDN(struct net_device *dev,
4590                          struct iw_request_info *info,
4591                          union iwreq_data *wrqu, char *extra)
4592 {
4593
4594         int ret = 0;
4595         _adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
4596         struct wifidirect_info *pwdinfo = &(padapter->wdinfo);
4597
4598
4599         RTW_INFO("[%s] %s %d\n", __FUNCTION__, extra, wrqu->data.length - 1);
4600         _rtw_memset(pwdinfo->device_name, 0x00, WPS_MAX_DEVICE_NAME_LEN);
4601         _rtw_memcpy(pwdinfo->device_name, extra, wrqu->data.length - 1);
4602         pwdinfo->device_name_len = wrqu->data.length - 1;
4603
4604         return ret;
4605
4606 }
4607
4608
4609 static int rtw_p2p_get_status(struct net_device *dev,
4610                               struct iw_request_info *info,
4611                               union iwreq_data *wrqu, char *extra)
4612 {
4613
4614         int ret = 0;
4615         _adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
4616         struct iw_point *pdata = &wrqu->data;
4617         struct wifidirect_info  *pwdinfo = &(padapter->wdinfo);
4618
4619         if (padapter->bShowGetP2PState) {
4620                 RTW_INFO("[%s] Role = %d, Status = %d, peer addr = %.2X:%.2X:%.2X:%.2X:%.2X:%.2X\n", __FUNCTION__, rtw_p2p_role(pwdinfo), rtw_p2p_state(pwdinfo),
4621                         pwdinfo->p2p_peer_interface_addr[0], pwdinfo->p2p_peer_interface_addr[1], pwdinfo->p2p_peer_interface_addr[2],
4622                         pwdinfo->p2p_peer_interface_addr[3], pwdinfo->p2p_peer_interface_addr[4], pwdinfo->p2p_peer_interface_addr[5]);
4623         }
4624
4625         /*      Commented by Albert 2010/10/12 */
4626         /*      Because of the output size limitation, I had removed the "Role" information. */
4627         /*      About the "Role" information, we will use the new private IOCTL to get the "Role" information. */
4628         sprintf(extra, "\n\nStatus=%.2d\n", rtw_p2p_state(pwdinfo));
4629         wrqu->data.length = strlen(extra);
4630
4631         return ret;
4632
4633 }
4634
4635 /*      Commented by Albert 20110520
4636  *      This function will return the config method description
4637  *      This config method description will show us which config method the remote P2P device is intented to use
4638  *      by sending the provisioning discovery request frame. */
4639
4640 static int rtw_p2p_get_req_cm(struct net_device *dev,
4641                               struct iw_request_info *info,
4642                               union iwreq_data *wrqu, char *extra)
4643 {
4644
4645         int ret = 0;
4646         _adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
4647         struct iw_point *pdata = &wrqu->data;
4648         struct wifidirect_info  *pwdinfo = &(padapter->wdinfo);
4649
4650         sprintf(extra, "\n\nCM=%s\n", pwdinfo->rx_prov_disc_info.strconfig_method_desc_of_prov_disc_req);
4651         wrqu->data.length = strlen(extra);
4652         return ret;
4653
4654 }
4655
4656
4657 static int rtw_p2p_get_role(struct net_device *dev,
4658                             struct iw_request_info *info,
4659                             union iwreq_data *wrqu, char *extra)
4660 {
4661
4662         int ret = 0;
4663         _adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
4664         struct iw_point *pdata = &wrqu->data;
4665         struct wifidirect_info  *pwdinfo = &(padapter->wdinfo);
4666
4667
4668         RTW_INFO("[%s] Role = %d, Status = %d, peer addr = %.2X:%.2X:%.2X:%.2X:%.2X:%.2X\n", __FUNCTION__, rtw_p2p_role(pwdinfo), rtw_p2p_state(pwdinfo),
4669                 pwdinfo->p2p_peer_interface_addr[0], pwdinfo->p2p_peer_interface_addr[1], pwdinfo->p2p_peer_interface_addr[2],
4670                 pwdinfo->p2p_peer_interface_addr[3], pwdinfo->p2p_peer_interface_addr[4], pwdinfo->p2p_peer_interface_addr[5]);
4671
4672         sprintf(extra, "\n\nRole=%.2d\n", rtw_p2p_role(pwdinfo));
4673         wrqu->data.length = strlen(extra);
4674         return ret;
4675
4676 }
4677
4678
4679 static int rtw_p2p_get_peer_ifaddr(struct net_device *dev,
4680                                    struct iw_request_info *info,
4681                                    union iwreq_data *wrqu, char *extra)
4682 {
4683
4684         int ret = 0;
4685         _adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
4686         struct iw_point *pdata = &wrqu->data;
4687         struct wifidirect_info  *pwdinfo = &(padapter->wdinfo);
4688
4689
4690         RTW_INFO("[%s] Role = %d, Status = %d, peer addr = %.2X:%.2X:%.2X:%.2X:%.2X:%.2X\n", __FUNCTION__, rtw_p2p_role(pwdinfo), rtw_p2p_state(pwdinfo),
4691                 pwdinfo->p2p_peer_interface_addr[0], pwdinfo->p2p_peer_interface_addr[1], pwdinfo->p2p_peer_interface_addr[2],
4692                 pwdinfo->p2p_peer_interface_addr[3], pwdinfo->p2p_peer_interface_addr[4], pwdinfo->p2p_peer_interface_addr[5]);
4693
4694         sprintf(extra, "\nMAC %.2X:%.2X:%.2X:%.2X:%.2X:%.2X",
4695                 pwdinfo->p2p_peer_interface_addr[0], pwdinfo->p2p_peer_interface_addr[1], pwdinfo->p2p_peer_interface_addr[2],
4696                 pwdinfo->p2p_peer_interface_addr[3], pwdinfo->p2p_peer_interface_addr[4], pwdinfo->p2p_peer_interface_addr[5]);
4697         wrqu->data.length = strlen(extra);
4698         return ret;
4699
4700 }
4701
4702 static int rtw_p2p_get_peer_devaddr(struct net_device *dev,
4703                                     struct iw_request_info *info,
4704                                     union iwreq_data *wrqu, char *extra)
4705
4706 {
4707
4708         int ret = 0;
4709         _adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
4710         struct iw_point *pdata = &wrqu->data;
4711         struct wifidirect_info  *pwdinfo = &(padapter->wdinfo);
4712
4713         RTW_INFO("[%s] Role = %d, Status = %d, peer addr = %.2X:%.2X:%.2X:%.2X:%.2X:%.2X\n", __FUNCTION__, rtw_p2p_role(pwdinfo), rtw_p2p_state(pwdinfo),
4714                 pwdinfo->rx_prov_disc_info.peerDevAddr[0], pwdinfo->rx_prov_disc_info.peerDevAddr[1],
4715                 pwdinfo->rx_prov_disc_info.peerDevAddr[2], pwdinfo->rx_prov_disc_info.peerDevAddr[3],
4716                 pwdinfo->rx_prov_disc_info.peerDevAddr[4], pwdinfo->rx_prov_disc_info.peerDevAddr[5]);
4717         sprintf(extra, "\n%.2X%.2X%.2X%.2X%.2X%.2X",
4718                 pwdinfo->rx_prov_disc_info.peerDevAddr[0], pwdinfo->rx_prov_disc_info.peerDevAddr[1],
4719                 pwdinfo->rx_prov_disc_info.peerDevAddr[2], pwdinfo->rx_prov_disc_info.peerDevAddr[3],
4720                 pwdinfo->rx_prov_disc_info.peerDevAddr[4], pwdinfo->rx_prov_disc_info.peerDevAddr[5]);
4721         wrqu->data.length = strlen(extra);
4722         return ret;
4723
4724 }
4725
4726 static int rtw_p2p_get_peer_devaddr_by_invitation(struct net_device *dev,
4727                 struct iw_request_info *info,
4728                 union iwreq_data *wrqu, char *extra)
4729
4730 {
4731
4732         int ret = 0;
4733         _adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
4734         struct iw_point *pdata = &wrqu->data;
4735         struct wifidirect_info  *pwdinfo = &(padapter->wdinfo);
4736
4737         RTW_INFO("[%s] Role = %d, Status = %d, peer addr = %.2X:%.2X:%.2X:%.2X:%.2X:%.2X\n", __FUNCTION__, rtw_p2p_role(pwdinfo), rtw_p2p_state(pwdinfo),
4738                 pwdinfo->p2p_peer_device_addr[0], pwdinfo->p2p_peer_device_addr[1],
4739                 pwdinfo->p2p_peer_device_addr[2], pwdinfo->p2p_peer_device_addr[3],
4740                 pwdinfo->p2p_peer_device_addr[4], pwdinfo->p2p_peer_device_addr[5]);
4741         sprintf(extra, "\nMAC %.2X:%.2X:%.2X:%.2X:%.2X:%.2X",
4742                 pwdinfo->p2p_peer_device_addr[0], pwdinfo->p2p_peer_device_addr[1],
4743                 pwdinfo->p2p_peer_device_addr[2], pwdinfo->p2p_peer_device_addr[3],
4744                 pwdinfo->p2p_peer_device_addr[4], pwdinfo->p2p_peer_device_addr[5]);
4745         wrqu->data.length = strlen(extra);
4746         return ret;
4747
4748 }
4749
4750 static int rtw_p2p_get_groupid(struct net_device *dev,
4751                                struct iw_request_info *info,
4752                                union iwreq_data *wrqu, char *extra)
4753
4754 {
4755
4756         int ret = 0;
4757         _adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
4758         struct iw_point *pdata = &wrqu->data;
4759         struct wifidirect_info  *pwdinfo = &(padapter->wdinfo);
4760
4761         sprintf(extra, "\n%.2X:%.2X:%.2X:%.2X:%.2X:%.2X %s",
4762                 pwdinfo->groupid_info.go_device_addr[0], pwdinfo->groupid_info.go_device_addr[1],
4763                 pwdinfo->groupid_info.go_device_addr[2], pwdinfo->groupid_info.go_device_addr[3],
4764                 pwdinfo->groupid_info.go_device_addr[4], pwdinfo->groupid_info.go_device_addr[5],
4765                 pwdinfo->groupid_info.ssid);
4766         wrqu->data.length = strlen(extra);
4767         return ret;
4768
4769 }
4770
4771 static int rtw_p2p_get_op_ch(struct net_device *dev,
4772                              struct iw_request_info *info,
4773                              union iwreq_data *wrqu, char *extra)
4774
4775 {
4776
4777         int ret = 0;
4778         _adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
4779         struct iw_point *pdata = &wrqu->data;
4780         struct wifidirect_info  *pwdinfo = &(padapter->wdinfo);
4781
4782
4783         RTW_INFO("[%s] Op_ch = %02x\n", __FUNCTION__, pwdinfo->operating_channel);
4784
4785         sprintf(extra, "\n\nOp_ch=%.2d\n", pwdinfo->operating_channel);
4786         wrqu->data.length = strlen(extra);
4787         return ret;
4788
4789 }
4790
4791 static int rtw_p2p_get_wps_configmethod(struct net_device *dev,
4792                                         struct iw_request_info *info,
4793                         union iwreq_data *wrqu, char *extra, char *subcmd)
4794 {
4795
4796         int ret = 0;
4797         _adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
4798         u8 peerMAC[ETH_ALEN] = { 0x00 };
4799         struct mlme_priv *pmlmepriv = &padapter->mlmepriv;
4800         _irqL irqL;
4801         _list *plist, *phead;
4802         _queue *queue = &(pmlmepriv->scanned_queue);
4803         struct wlan_network *pnetwork = NULL;
4804         u8 blnMatch = 0;
4805         u16     attr_content = 0;
4806         uint attr_contentlen = 0;
4807         u8      attr_content_str[P2P_PRIVATE_IOCTL_SET_LEN] = { 0x00 };
4808
4809         /*      Commented by Albert 20110727 */
4810         /*      The input data is the MAC address which the application wants to know its WPS config method. */
4811         /*      After knowing its WPS config method, the application can decide the config method for provisioning discovery. */
4812         /*      Format: iwpriv wlanx p2p_get_wpsCM 00:E0:4C:00:00:05 */
4813
4814         RTW_INFO("[%s] data = %s\n", __FUNCTION__, subcmd);
4815
4816         macstr2num(peerMAC, subcmd);
4817
4818         _enter_critical_bh(&(pmlmepriv->scanned_queue.lock), &irqL);
4819
4820         phead = get_list_head(queue);
4821         plist = get_next(phead);
4822
4823         while (1) {
4824                 if (rtw_end_of_queue_search(phead, plist) == _TRUE)
4825                         break;
4826
4827                 pnetwork = LIST_CONTAINOR(plist, struct wlan_network, list);
4828                 if (_rtw_memcmp(pnetwork->network.MacAddress, peerMAC, ETH_ALEN)) {
4829                         u8 *wpsie;
4830                         uint    wpsie_len = 0;
4831
4832                         /*      The mac address is matched. */
4833
4834                         wpsie = rtw_get_wps_ie_from_scan_queue(&pnetwork->network.IEs[0], pnetwork->network.IELength, NULL, &wpsie_len, pnetwork->network.Reserved[0]);
4835                         if (wpsie) {
4836                                 rtw_get_wps_attr_content(wpsie, wpsie_len, WPS_ATTR_CONF_METHOD, (u8 *)&attr_content, &attr_contentlen);
4837                                 if (attr_contentlen) {
4838                                         attr_content = be16_to_cpu(attr_content);
4839                                         sprintf(attr_content_str, "\n\nM=%.4d", attr_content);
4840                                         blnMatch = 1;
4841                                 }
4842                         }
4843
4844                         break;
4845                 }
4846
4847                 plist = get_next(plist);
4848
4849         }
4850
4851         _exit_critical_bh(&(pmlmepriv->scanned_queue.lock), &irqL);
4852
4853         if (!blnMatch)
4854                 sprintf(attr_content_str, "\n\nM=0000");
4855
4856         wrqu->data.length = strlen(attr_content_str);
4857         _rtw_memcpy(extra, attr_content_str, wrqu->data.length);
4858
4859         return ret;
4860
4861 }
4862
4863 #ifdef CONFIG_WFD
4864 static int rtw_p2p_get_peer_wfd_port(struct net_device *dev,
4865                                      struct iw_request_info *info,
4866                                      union iwreq_data *wrqu, char *extra)
4867 {
4868
4869         int ret = 0;
4870         _adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
4871         struct iw_point *pdata = &wrqu->data;
4872         struct wifidirect_info  *pwdinfo = &(padapter->wdinfo);
4873
4874         RTW_INFO("[%s] p2p_state = %d\n", __FUNCTION__, rtw_p2p_state(pwdinfo));
4875
4876         sprintf(extra, "\n\nPort=%d\n", pwdinfo->wfd_info->peer_rtsp_ctrlport);
4877         RTW_INFO("[%s] remote port = %d\n", __FUNCTION__, pwdinfo->wfd_info->peer_rtsp_ctrlport);
4878
4879         wrqu->data.length = strlen(extra);
4880         return ret;
4881
4882 }
4883
4884 static int rtw_p2p_get_peer_wfd_preferred_connection(struct net_device *dev,
4885                 struct iw_request_info *info,
4886                 union iwreq_data *wrqu, char *extra)
4887 {
4888
4889         int ret = 0;
4890         _adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
4891         struct iw_point *pdata = &wrqu->data;
4892         struct wifidirect_info  *pwdinfo = &(padapter->wdinfo);
4893
4894         sprintf(extra, "\n\nwfd_pc=%d\n", pwdinfo->wfd_info->wfd_pc);
4895         RTW_INFO("[%s] wfd_pc = %d\n", __FUNCTION__, pwdinfo->wfd_info->wfd_pc);
4896
4897         wrqu->data.length = strlen(extra);
4898         pwdinfo->wfd_info->wfd_pc = _FALSE;     /*      Reset the WFD preferred connection to P2P */
4899         return ret;
4900
4901 }
4902
4903 static int rtw_p2p_get_peer_wfd_session_available(struct net_device *dev,
4904                 struct iw_request_info *info,
4905                 union iwreq_data *wrqu, char *extra)
4906 {
4907
4908         int ret = 0;
4909         _adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
4910         struct iw_point *pdata = &wrqu->data;
4911         struct wifidirect_info  *pwdinfo = &(padapter->wdinfo);
4912
4913         sprintf(extra, "\n\nwfd_sa=%d\n", pwdinfo->wfd_info->peer_session_avail);
4914         RTW_INFO("[%s] wfd_sa = %d\n", __FUNCTION__, pwdinfo->wfd_info->peer_session_avail);
4915
4916         wrqu->data.length = strlen(extra);
4917         pwdinfo->wfd_info->peer_session_avail = _TRUE;  /*      Reset the WFD session available */
4918         return ret;
4919
4920 }
4921 #endif /* CONFIG_WFD */
4922
4923 static int rtw_p2p_get_go_device_address(struct net_device *dev,
4924                 struct iw_request_info *info,
4925                 union iwreq_data *wrqu, char *extra, char *subcmd)
4926 {
4927
4928         int ret = 0;
4929         _adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
4930         u8 peerMAC[ETH_ALEN] = { 0x00 };
4931         struct mlme_priv *pmlmepriv = &padapter->mlmepriv;
4932         _irqL irqL;
4933         _list *plist, *phead;
4934         _queue *queue   = &(pmlmepriv->scanned_queue);
4935         struct wlan_network *pnetwork = NULL;
4936         u8 blnMatch = 0;
4937         u8 *p2pie;
4938         uint p2pielen = 0, attr_contentlen = 0;
4939         u8 attr_content[100] = { 0x00 };
4940         u8 go_devadd_str[P2P_PRIVATE_IOCTL_SET_LEN] = { 0x00 };
4941
4942         /*      Commented by Albert 20121209 */
4943         /*      The input data is the GO's interface address which the application wants to know its device address. */
4944         /*      Format: iwpriv wlanx p2p_get2 go_devadd=00:E0:4C:00:00:05 */
4945
4946         RTW_INFO("[%s] data = %s\n", __FUNCTION__, subcmd);
4947
4948         macstr2num(peerMAC, subcmd);
4949
4950         _enter_critical_bh(&(pmlmepriv->scanned_queue.lock), &irqL);
4951
4952         phead = get_list_head(queue);
4953         plist = get_next(phead);
4954
4955         while (1) {
4956                 if (rtw_end_of_queue_search(phead, plist) == _TRUE)
4957                         break;
4958
4959                 pnetwork = LIST_CONTAINOR(plist, struct wlan_network, list);
4960                 if (_rtw_memcmp(pnetwork->network.MacAddress, peerMAC, ETH_ALEN)) {
4961                         /*      Commented by Albert 2011/05/18 */
4962                         /*      Match the device address located in the P2P IE */
4963                         /*      This is for the case that the P2P device address is not the same as the P2P interface address. */
4964
4965                         p2pie = rtw_bss_ex_get_p2p_ie(&pnetwork->network, NULL, &p2pielen);
4966                         if (p2pie) {
4967                                 while (p2pie) {
4968                                         /*      The P2P Device ID attribute is included in the Beacon frame. */
4969                                         /*      The P2P Device Info attribute is included in the probe response frame. */
4970
4971                                         _rtw_memset(attr_content, 0x00, 100);
4972                                         if (rtw_get_p2p_attr_content(p2pie, p2pielen, P2P_ATTR_DEVICE_ID, attr_content, &attr_contentlen)) {
4973                                                 /*      Handle the P2P Device ID attribute of Beacon first */
4974                                                 blnMatch = 1;
4975                                                 break;
4976
4977                                         } else if (rtw_get_p2p_attr_content(p2pie, p2pielen, P2P_ATTR_DEVICE_INFO, attr_content, &attr_contentlen)) {
4978                                                 /*      Handle the P2P Device Info attribute of probe response */
4979                                                 blnMatch = 1;
4980                                                 break;
4981                                         }
4982
4983                                         /* Get the next P2P IE */
4984                                         p2pie = rtw_get_p2p_ie(p2pie + p2pielen, BSS_EX_TLV_IES_LEN(&pnetwork->network) - (p2pie + p2pielen - BSS_EX_TLV_IES(&pnetwork->network)), NULL, &p2pielen);
4985                                 }
4986                         }
4987                 }
4988
4989                 plist = get_next(plist);
4990
4991         }
4992
4993         _exit_critical_bh(&(pmlmepriv->scanned_queue.lock), &irqL);
4994
4995         if (!blnMatch)
4996                 sprintf(go_devadd_str, "\n\ndev_add=NULL");
4997         else {
4998                 sprintf(go_devadd_str, "\n\ndev_add=%.2X:%.2X:%.2X:%.2X:%.2X:%.2X",
4999                         attr_content[0], attr_content[1], attr_content[2], attr_content[3], attr_content[4], attr_content[5]);
5000         }
5001
5002         wrqu->data.length = strlen(go_devadd_str);
5003         _rtw_memcpy(extra, go_devadd_str, wrqu->data.length);
5004
5005         return ret;
5006
5007 }
5008
5009 static int rtw_p2p_get_device_type(struct net_device *dev,
5010                                    struct iw_request_info *info,
5011                            union iwreq_data *wrqu, char *extra, char *subcmd)
5012 {
5013
5014         int ret = 0;
5015         _adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
5016         u8 peerMAC[ETH_ALEN] = { 0x00 };
5017         struct mlme_priv *pmlmepriv = &padapter->mlmepriv;
5018         _irqL irqL;
5019         _list *plist, *phead;
5020         _queue *queue = &(pmlmepriv->scanned_queue);
5021         struct wlan_network *pnetwork = NULL;
5022         u8 blnMatch = 0;
5023         u8 dev_type[8] = { 0x00 };
5024         uint dev_type_len = 0;
5025         u8 dev_type_str[P2P_PRIVATE_IOCTL_SET_LEN] = { 0x00 };    /* +9 is for the str "dev_type=", we have to clear it at wrqu->data.pointer */
5026
5027         /*      Commented by Albert 20121209 */
5028         /*      The input data is the MAC address which the application wants to know its device type. */
5029         /*      Such user interface could know the device type. */
5030         /*      Format: iwpriv wlanx p2p_get2 dev_type=00:E0:4C:00:00:05 */
5031
5032         RTW_INFO("[%s] data = %s\n", __FUNCTION__, subcmd);
5033
5034         macstr2num(peerMAC, subcmd);
5035
5036         _enter_critical_bh(&(pmlmepriv->scanned_queue.lock), &irqL);
5037
5038         phead = get_list_head(queue);
5039         plist = get_next(phead);
5040
5041         while (1) {
5042                 if (rtw_end_of_queue_search(phead, plist) == _TRUE)
5043                         break;
5044
5045                 pnetwork = LIST_CONTAINOR(plist, struct wlan_network, list);
5046                 if (_rtw_memcmp(pnetwork->network.MacAddress, peerMAC, ETH_ALEN)) {
5047                         u8 *wpsie;
5048                         uint    wpsie_len = 0;
5049
5050                         /*      The mac address is matched. */
5051
5052                         wpsie = rtw_get_wps_ie_from_scan_queue(&pnetwork->network.IEs[0], pnetwork->network.IELength, NULL, &wpsie_len, pnetwork->network.Reserved[0]);
5053                         if (wpsie) {
5054                                 rtw_get_wps_attr_content(wpsie, wpsie_len, WPS_ATTR_PRIMARY_DEV_TYPE, dev_type, &dev_type_len);
5055                                 if (dev_type_len) {
5056                                         u16     type = 0;
5057
5058                                         _rtw_memcpy(&type, dev_type, 2);
5059                                         type = be16_to_cpu(type);
5060                                         sprintf(dev_type_str, "\n\nN=%.2d", type);
5061                                         blnMatch = 1;
5062                                 }
5063                         }
5064                         break;
5065                 }
5066
5067                 plist = get_next(plist);
5068
5069         }
5070
5071         _exit_critical_bh(&(pmlmepriv->scanned_queue.lock), &irqL);
5072
5073         if (!blnMatch)
5074                 sprintf(dev_type_str, "\n\nN=00");
5075
5076         wrqu->data.length = strlen(dev_type_str);
5077         _rtw_memcpy(extra, dev_type_str, wrqu->data.length);
5078
5079         return ret;
5080
5081 }
5082
5083 static int rtw_p2p_get_device_name(struct net_device *dev,
5084                                    struct iw_request_info *info,
5085                            union iwreq_data *wrqu, char *extra, char *subcmd)
5086 {
5087
5088         int ret = 0;
5089         _adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
5090         u8 peerMAC[ETH_ALEN] = { 0x00 };
5091         struct mlme_priv *pmlmepriv = &padapter->mlmepriv;
5092         _irqL irqL;
5093         _list *plist, *phead;
5094         _queue *queue = &(pmlmepriv->scanned_queue);
5095         struct wlan_network *pnetwork = NULL;
5096         u8 blnMatch = 0;
5097         u8 dev_name[WPS_MAX_DEVICE_NAME_LEN] = { 0x00 };
5098         uint dev_len = 0;
5099         u8 dev_name_str[P2P_PRIVATE_IOCTL_SET_LEN] = { 0x00 };
5100
5101         /*      Commented by Albert 20121225 */
5102         /*      The input data is the MAC address which the application wants to know its device name. */
5103         /*      Such user interface could show peer device's device name instead of ssid. */
5104         /*      Format: iwpriv wlanx p2p_get2 devN=00:E0:4C:00:00:05 */
5105
5106         RTW_INFO("[%s] data = %s\n", __FUNCTION__, subcmd);
5107
5108         macstr2num(peerMAC, subcmd);
5109
5110         _enter_critical_bh(&(pmlmepriv->scanned_queue.lock), &irqL);
5111
5112         phead = get_list_head(queue);
5113         plist = get_next(phead);
5114
5115         while (1) {
5116                 if (rtw_end_of_queue_search(phead, plist) == _TRUE)
5117                         break;
5118
5119                 pnetwork = LIST_CONTAINOR(plist, struct wlan_network, list);
5120                 if (_rtw_memcmp(pnetwork->network.MacAddress, peerMAC, ETH_ALEN)) {
5121                         u8 *wpsie;
5122                         uint    wpsie_len = 0;
5123
5124                         /*      The mac address is matched. */
5125
5126                         wpsie = rtw_get_wps_ie_from_scan_queue(&pnetwork->network.IEs[0], pnetwork->network.IELength, NULL, &wpsie_len, pnetwork->network.Reserved[0]);
5127                         if (wpsie) {
5128                                 rtw_get_wps_attr_content(wpsie, wpsie_len, WPS_ATTR_DEVICE_NAME, dev_name, &dev_len);
5129                                 if (dev_len) {
5130                                         sprintf(dev_name_str, "\n\nN=%s", dev_name);
5131                                         blnMatch = 1;
5132                                 }
5133                         }
5134                         break;
5135                 }
5136
5137                 plist = get_next(plist);
5138
5139         }
5140
5141         _exit_critical_bh(&(pmlmepriv->scanned_queue.lock), &irqL);
5142
5143         if (!blnMatch)
5144                 sprintf(dev_name_str, "\n\nN=0000");
5145
5146         wrqu->data.length = strlen(dev_name_str);
5147         _rtw_memcpy(extra, dev_name_str, wrqu->data.length);
5148
5149         return ret;
5150
5151 }
5152
5153 static int rtw_p2p_get_invitation_procedure(struct net_device *dev,
5154                 struct iw_request_info *info,
5155                 union iwreq_data *wrqu, char *extra, char *subcmd)
5156 {
5157
5158         int ret = 0;
5159         _adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
5160         u8 peerMAC[ETH_ALEN] = { 0x00 };
5161         struct mlme_priv *pmlmepriv = &padapter->mlmepriv;
5162         _irqL irqL;
5163         _list *plist, *phead;
5164         _queue *queue   = &(pmlmepriv->scanned_queue);
5165         struct wlan_network *pnetwork = NULL;
5166         u8 blnMatch = 0;
5167         u8 *p2pie;
5168         uint p2pielen = 0, attr_contentlen = 0;
5169         u8 attr_content[2] = { 0x00 };
5170         u8 inv_proc_str[P2P_PRIVATE_IOCTL_SET_LEN] = { 0x00 };
5171
5172         /*      Commented by Ouden 20121226 */
5173         /*      The application wants to know P2P initation procedure is support or not. */
5174         /*      Format: iwpriv wlanx p2p_get2 InvProc=00:E0:4C:00:00:05 */
5175
5176         RTW_INFO("[%s] data = %s\n", __FUNCTION__, subcmd);
5177
5178         macstr2num(peerMAC, subcmd);
5179
5180         _enter_critical_bh(&(pmlmepriv->scanned_queue.lock), &irqL);
5181
5182         phead = get_list_head(queue);
5183         plist = get_next(phead);
5184
5185         while (1) {
5186                 if (rtw_end_of_queue_search(phead, plist) == _TRUE)
5187                         break;
5188
5189                 pnetwork = LIST_CONTAINOR(plist, struct wlan_network, list);
5190                 if (_rtw_memcmp(pnetwork->network.MacAddress, peerMAC, ETH_ALEN)) {
5191                         /*      Commented by Albert 20121226 */
5192                         /*      Match the device address located in the P2P IE */
5193                         /*      This is for the case that the P2P device address is not the same as the P2P interface address. */
5194
5195                         p2pie = rtw_bss_ex_get_p2p_ie(&pnetwork->network, NULL, &p2pielen);
5196                         if (p2pie) {
5197                                 while (p2pie) {
5198                                         /* _rtw_memset( attr_content, 0x00, 2); */
5199                                         if (rtw_get_p2p_attr_content(p2pie, p2pielen, P2P_ATTR_CAPABILITY, attr_content, &attr_contentlen)) {
5200                                                 /*      Handle the P2P capability attribute */
5201                                                 blnMatch = 1;
5202                                                 break;
5203
5204                                         }
5205
5206                                         /* Get the next P2P IE */
5207                                         p2pie = rtw_get_p2p_ie(p2pie + p2pielen, BSS_EX_TLV_IES_LEN(&pnetwork->network) - (p2pie + p2pielen - BSS_EX_TLV_IES(&pnetwork->network)), NULL, &p2pielen);
5208                                 }
5209                         }
5210                 }
5211
5212                 plist = get_next(plist);
5213
5214         }
5215
5216         _exit_critical_bh(&(pmlmepriv->scanned_queue.lock), &irqL);
5217
5218         if (!blnMatch)
5219                 sprintf(inv_proc_str, "\nIP=-1");
5220         else {
5221                 if ((attr_content[0] & 0x20) == 0x20)
5222                         sprintf(inv_proc_str, "\nIP=1");
5223                 else
5224                         sprintf(inv_proc_str, "\nIP=0");
5225         }
5226
5227         wrqu->data.length = strlen(inv_proc_str);
5228         _rtw_memcpy(extra, inv_proc_str, wrqu->data.length);
5229
5230         return ret;
5231
5232 }
5233
5234 static int rtw_p2p_connect(struct net_device *dev,
5235                            struct iw_request_info *info,
5236                            union iwreq_data *wrqu, char *extra)
5237 {
5238
5239         int ret = 0;
5240         _adapter                                *padapter = (_adapter *)rtw_netdev_priv(dev);
5241         struct wifidirect_info  *pwdinfo = &(padapter->wdinfo);
5242         u8                                      peerMAC[ETH_ALEN] = { 0x00 };
5243         int                                     jj, kk;
5244         u8                                      peerMACStr[ETH_ALEN * 2] = { 0x00 };
5245         struct mlme_priv                *pmlmepriv = &padapter->mlmepriv;
5246         _irqL                           irqL;
5247         _list                                   *plist, *phead;
5248         _queue                          *queue  = &(pmlmepriv->scanned_queue);
5249         struct  wlan_network    *pnetwork = NULL;
5250         uint                                    uintPeerChannel = 0;
5251
5252         /*      Commented by Albert 20110304 */
5253         /*      The input data contains two informations. */
5254         /*      1. First information is the MAC address which wants to formate with */
5255         /*      2. Second information is the WPS PINCode or "pbc" string for push button method */
5256         /*      Format: 00:E0:4C:00:00:05 */
5257         /*      Format: 00:E0:4C:00:00:05 */
5258
5259         RTW_INFO("[%s] data = %s\n", __FUNCTION__, extra);
5260
5261         if (pwdinfo->p2p_state == P2P_STATE_NONE) {
5262                 RTW_INFO("[%s] WiFi Direct is disable!\n", __FUNCTION__);
5263                 return ret;
5264         }
5265
5266 #ifdef CONFIG_INTEL_WIDI
5267         if (check_fwstate(pmlmepriv, _FW_UNDER_SURVEY) == _TRUE) {
5268                 RTW_INFO("[%s] WiFi is under survey!\n", __FUNCTION__);
5269                 return ret;
5270         }
5271 #endif /* CONFIG_INTEL_WIDI      */
5272
5273         if (pwdinfo->ui_got_wps_info == P2P_NO_WPSINFO)
5274                 return -1;
5275
5276         for (jj = 0, kk = 0; jj < ETH_ALEN; jj++, kk += 3)
5277                 peerMAC[jj] = key_2char2num(extra[kk], extra[kk + 1]);
5278
5279         _enter_critical_bh(&(pmlmepriv->scanned_queue.lock), &irqL);
5280
5281         phead = get_list_head(queue);
5282         plist = get_next(phead);
5283
5284         while (1) {
5285                 if (rtw_end_of_queue_search(phead, plist) == _TRUE)
5286                         break;
5287
5288                 pnetwork = LIST_CONTAINOR(plist, struct wlan_network, list);
5289                 if (_rtw_memcmp(pnetwork->network.MacAddress, peerMAC, ETH_ALEN)) {
5290                         if (pnetwork->network.Configuration.DSConfig != 0)
5291                                 uintPeerChannel = pnetwork->network.Configuration.DSConfig;
5292                         else if (pwdinfo->nego_req_info.peer_ch != 0)
5293                                 uintPeerChannel = pnetwork->network.Configuration.DSConfig = pwdinfo->nego_req_info.peer_ch;
5294                         else {
5295                                 /* Unexpected case */
5296                                 uintPeerChannel = 0;
5297                                 RTW_INFO("%s  uintPeerChannel = 0\n", __func__);
5298                         }
5299                         break;
5300                 }
5301
5302                 plist = get_next(plist);
5303
5304         }
5305
5306         _exit_critical_bh(&(pmlmepriv->scanned_queue.lock), &irqL);
5307
5308         if (uintPeerChannel) {
5309 #ifdef CONFIG_CONCURRENT_MODE
5310                 if (rtw_mi_check_status(padapter, MI_LINKED))
5311                         _cancel_timer_ex(&pwdinfo->ap_p2p_switch_timer);
5312 #endif /* CONFIG_CONCURRENT_MODE */
5313
5314                 _rtw_memset(&pwdinfo->nego_req_info, 0x00, sizeof(struct tx_nego_req_info));
5315                 _rtw_memset(&pwdinfo->groupid_info, 0x00, sizeof(struct group_id_info));
5316
5317                 pwdinfo->nego_req_info.peer_channel_num[0] = uintPeerChannel;
5318                 _rtw_memcpy(pwdinfo->nego_req_info.peerDevAddr, pnetwork->network.MacAddress, ETH_ALEN);
5319                 pwdinfo->nego_req_info.benable = _TRUE;
5320
5321                 _cancel_timer_ex(&pwdinfo->restore_p2p_state_timer);
5322                 if (rtw_p2p_state(pwdinfo) != P2P_STATE_GONEGO_OK) {
5323                         /*      Restore to the listen state if the current p2p state is not nego OK */
5324                         rtw_p2p_set_state(pwdinfo, P2P_STATE_LISTEN);
5325                 }
5326
5327                 rtw_p2p_set_pre_state(pwdinfo, rtw_p2p_state(pwdinfo));
5328                 rtw_p2p_set_state(pwdinfo, P2P_STATE_GONEGO_ING);
5329
5330 #ifdef CONFIG_CONCURRENT_MODE
5331                 if (rtw_mi_check_status(padapter, MI_LINKED)) {
5332                         u8 union_ch = rtw_mi_get_union_chan(padapter);
5333                         u8 union_bw = rtw_mi_get_union_bw(padapter);
5334                         u8 union_offset = rtw_mi_get_union_offset(padapter);
5335                         /*      Have to enter the power saving with the AP */
5336                         set_channel_bwmode(padapter, union_ch, union_offset, union_bw);
5337
5338                         rtw_mi_buddy_issue_nulldata(padapter, NULL, 1, 3, 500);
5339                 }
5340 #endif /* CONFIG_CONCURRENT_MODE */
5341
5342                 RTW_INFO("[%s] Start PreTx Procedure!\n", __FUNCTION__);
5343                 _set_timer(&pwdinfo->pre_tx_scan_timer, P2P_TX_PRESCAN_TIMEOUT);
5344 #ifdef CONFIG_CONCURRENT_MODE
5345                 if (rtw_mi_check_status(padapter, MI_LINKED))
5346                         _set_timer(&pwdinfo->restore_p2p_state_timer, P2P_CONCURRENT_GO_NEGO_TIMEOUT);
5347                 else
5348                         _set_timer(&pwdinfo->restore_p2p_state_timer, P2P_GO_NEGO_TIMEOUT);
5349 #else
5350                 _set_timer(&pwdinfo->restore_p2p_state_timer, P2P_GO_NEGO_TIMEOUT);
5351 #endif /* CONFIG_CONCURRENT_MODE                 */
5352
5353         } else {
5354                 RTW_INFO("[%s] Not Found in Scanning Queue~\n", __FUNCTION__);
5355 #ifdef CONFIG_INTEL_WIDI
5356                 _cancel_timer_ex(&pwdinfo->restore_p2p_state_timer);
5357                 rtw_p2p_set_state(pwdinfo, P2P_STATE_FIND_PHASE_SEARCH);
5358                 rtw_p2p_findphase_ex_set(pwdinfo, P2P_FINDPHASE_EX_NONE);
5359                 rtw_free_network_queue(padapter, _TRUE);
5360                 /**
5361                  * For WiDi, if we can't find candidate device in scanning queue,
5362                  * driver will do scanning itself
5363                  */
5364                 _enter_critical_bh(&pmlmepriv->lock, &irqL);
5365                 rtw_sitesurvey_cmd(padapter, NULL, 0, NULL, 0);
5366                 _exit_critical_bh(&pmlmepriv->lock, &irqL);
5367 #endif /* CONFIG_INTEL_WIDI */
5368                 ret = -1;
5369         }
5370 exit:
5371         return ret;
5372 }
5373
5374 static int rtw_p2p_invite_req(struct net_device *dev,
5375                               struct iw_request_info *info,
5376                               union iwreq_data *wrqu, char *extra)
5377 {
5378
5379         int ret = 0;
5380         _adapter                                        *padapter = (_adapter *)rtw_netdev_priv(dev);
5381         struct iw_point                 *pdata = &wrqu->data;
5382         struct wifidirect_info          *pwdinfo = &(padapter->wdinfo);
5383         int                                             jj, kk;
5384         u8                                              peerMACStr[ETH_ALEN * 2] = { 0x00 };
5385         struct mlme_priv                        *pmlmepriv = &padapter->mlmepriv;
5386         _list                                           *plist, *phead;
5387         _queue                                  *queue  = &(pmlmepriv->scanned_queue);
5388         struct  wlan_network            *pnetwork = NULL;
5389         uint                                            uintPeerChannel = 0;
5390         u8                                              attr_content[50] = { 0x00 }, _status = 0;
5391         u8                                              *p2pie;
5392         uint                                            p2pielen = 0, attr_contentlen = 0;
5393         _irqL                                   irqL;
5394         struct tx_invite_req_info       *pinvite_req_info = &pwdinfo->invitereq_info;
5395
5396         /*      Commented by Albert 20120321 */
5397         /*      The input data contains two informations. */
5398         /*      1. First information is the P2P device address which you want to send to.        */
5399         /*      2. Second information is the group id which combines with GO's mac address, space and GO's ssid. */
5400         /*      Command line sample: iwpriv wlan0 p2p_set invite="00:11:22:33:44:55 00:E0:4C:00:00:05 DIRECT-xy" */
5401         /*      Format: 00:11:22:33:44:55 00:E0:4C:00:00:05 DIRECT-xy */
5402
5403         RTW_INFO("[%s] data = %s\n", __FUNCTION__, extra);
5404
5405         if (wrqu->data.length <=  37) {
5406                 RTW_INFO("[%s] Wrong format!\n", __FUNCTION__);
5407                 return ret;
5408         }
5409
5410         if (rtw_p2p_chk_state(pwdinfo, P2P_STATE_NONE)) {
5411                 RTW_INFO("[%s] WiFi Direct is disable!\n", __FUNCTION__);
5412                 return ret;
5413         } else {
5414                 /*      Reset the content of struct tx_invite_req_info */
5415                 pinvite_req_info->benable = _FALSE;
5416                 _rtw_memset(pinvite_req_info->go_bssid, 0x00, ETH_ALEN);
5417                 _rtw_memset(pinvite_req_info->go_ssid, 0x00, WLAN_SSID_MAXLEN);
5418                 pinvite_req_info->ssidlen = 0x00;
5419                 pinvite_req_info->operating_ch = pwdinfo->operating_channel;
5420                 _rtw_memset(pinvite_req_info->peer_macaddr, 0x00, ETH_ALEN);
5421                 pinvite_req_info->token = 3;
5422         }
5423
5424         for (jj = 0, kk = 0; jj < ETH_ALEN; jj++, kk += 3)
5425                 pinvite_req_info->peer_macaddr[jj] = key_2char2num(extra[kk], extra[kk + 1]);
5426
5427         _enter_critical_bh(&(pmlmepriv->scanned_queue.lock), &irqL);
5428
5429         phead = get_list_head(queue);
5430         plist = get_next(phead);
5431
5432         while (1) {
5433                 if (rtw_end_of_queue_search(phead, plist) == _TRUE)
5434                         break;
5435
5436                 pnetwork = LIST_CONTAINOR(plist, struct wlan_network, list);
5437
5438                 /*      Commented by Albert 2011/05/18 */
5439                 /*      Match the device address located in the P2P IE */
5440                 /*      This is for the case that the P2P device address is not the same as the P2P interface address. */
5441
5442                 p2pie = rtw_bss_ex_get_p2p_ie(&pnetwork->network, NULL, &p2pielen);
5443                 if (p2pie) {
5444                         /*      The P2P Device ID attribute is included in the Beacon frame. */
5445                         /*      The P2P Device Info attribute is included in the probe response frame. */
5446
5447                         if (rtw_get_p2p_attr_content(p2pie, p2pielen, P2P_ATTR_DEVICE_ID, attr_content, &attr_contentlen)) {
5448                                 /*      Handle the P2P Device ID attribute of Beacon first */
5449                                 if (_rtw_memcmp(attr_content, pinvite_req_info->peer_macaddr, ETH_ALEN)) {
5450                                         uintPeerChannel = pnetwork->network.Configuration.DSConfig;
5451                                         break;
5452                                 }
5453                         } else if (rtw_get_p2p_attr_content(p2pie, p2pielen, P2P_ATTR_DEVICE_INFO, attr_content, &attr_contentlen)) {
5454                                 /*      Handle the P2P Device Info attribute of probe response */
5455                                 if (_rtw_memcmp(attr_content, pinvite_req_info->peer_macaddr, ETH_ALEN)) {
5456                                         uintPeerChannel = pnetwork->network.Configuration.DSConfig;
5457                                         break;
5458                                 }
5459                         }
5460
5461                 }
5462
5463                 plist = get_next(plist);
5464
5465         }
5466
5467         _exit_critical_bh(&(pmlmepriv->scanned_queue.lock), &irqL);
5468
5469 #ifdef CONFIG_WFD
5470         if (hal_chk_wl_func(padapter, WL_FUNC_MIRACAST) && uintPeerChannel) {
5471                 struct wifi_display_info *pwfd_info = pwdinfo->wfd_info;
5472                 u8 *wfd_ie;
5473                 uint wfd_ielen = 0;
5474
5475                 wfd_ie = rtw_bss_ex_get_wfd_ie(&pnetwork->network, NULL, &wfd_ielen);
5476                 if (wfd_ie) {
5477                         u8 *wfd_devinfo;
5478                         uint wfd_devlen;
5479
5480                         RTW_INFO("[%s] Found WFD IE!\n", __FUNCTION__);
5481                         wfd_devinfo = rtw_get_wfd_attr_content(wfd_ie, wfd_ielen, WFD_ATTR_DEVICE_INFO, NULL, &wfd_devlen);
5482                         if (wfd_devinfo) {
5483                                 u16     wfd_devinfo_field = 0;
5484
5485                                 /*      Commented by Albert 20120319 */
5486                                 /*      The first two bytes are the WFD device information field of WFD device information subelement. */
5487                                 /*      In big endian format. */
5488                                 wfd_devinfo_field = RTW_GET_BE16(wfd_devinfo);
5489                                 if (wfd_devinfo_field & WFD_DEVINFO_SESSION_AVAIL)
5490                                         pwfd_info->peer_session_avail = _TRUE;
5491                                 else
5492                                         pwfd_info->peer_session_avail = _FALSE;
5493                         }
5494                 }
5495
5496                 if (_FALSE == pwfd_info->peer_session_avail) {
5497                         RTW_INFO("[%s] WFD Session not avaiable!\n", __FUNCTION__);
5498                         goto exit;
5499                 }
5500         }
5501 #endif /* CONFIG_WFD */
5502
5503         if (uintPeerChannel) {
5504 #ifdef CONFIG_CONCURRENT_MODE
5505                 if (rtw_mi_check_status(padapter, MI_LINKED))
5506                         _cancel_timer_ex(&pwdinfo->ap_p2p_switch_timer);
5507 #endif /* CONFIG_CONCURRENT_MODE */
5508
5509                 /*      Store the GO's bssid */
5510                 for (jj = 0, kk = 18; jj < ETH_ALEN; jj++, kk += 3)
5511                         pinvite_req_info->go_bssid[jj] = key_2char2num(extra[kk], extra[kk + 1]);
5512
5513                 /*      Store the GO's ssid */
5514                 pinvite_req_info->ssidlen = wrqu->data.length - 36;
5515                 _rtw_memcpy(pinvite_req_info->go_ssid, &extra[36], (u32) pinvite_req_info->ssidlen);
5516                 pinvite_req_info->benable = _TRUE;
5517                 pinvite_req_info->peer_ch = uintPeerChannel;
5518
5519                 rtw_p2p_set_pre_state(pwdinfo, rtw_p2p_state(pwdinfo));
5520                 rtw_p2p_set_state(pwdinfo, P2P_STATE_TX_INVITE_REQ);
5521
5522 #ifdef CONFIG_CONCURRENT_MODE
5523                 if (rtw_mi_check_status(padapter, MI_LINKED)) {
5524                         u8 union_ch = rtw_mi_get_union_chan(padapter);
5525                         u8 union_bw = rtw_mi_get_union_bw(padapter);
5526                         u8 union_offset = rtw_mi_get_union_offset(padapter);
5527                         /*      Have to enter the power saving with the AP */
5528                         set_channel_bwmode(padapter, union_ch, union_offset, union_bw);
5529
5530                         rtw_mi_buddy_issue_nulldata(padapter, NULL, 1, 3, 500);
5531                 } else
5532                         set_channel_bwmode(padapter, uintPeerChannel, HAL_PRIME_CHNL_OFFSET_DONT_CARE, CHANNEL_WIDTH_20);
5533 #else
5534                 set_channel_bwmode(padapter, uintPeerChannel, HAL_PRIME_CHNL_OFFSET_DONT_CARE, CHANNEL_WIDTH_20);
5535 #endif
5536
5537                 _set_timer(&pwdinfo->pre_tx_scan_timer, P2P_TX_PRESCAN_TIMEOUT);
5538
5539 #ifdef CONFIG_CONCURRENT_MODE
5540                 if (rtw_mi_check_status(padapter, MI_LINKED))
5541                         _set_timer(&pwdinfo->restore_p2p_state_timer, P2P_CONCURRENT_INVITE_TIMEOUT);
5542                 else
5543                         _set_timer(&pwdinfo->restore_p2p_state_timer, P2P_INVITE_TIMEOUT);
5544 #else
5545                 _set_timer(&pwdinfo->restore_p2p_state_timer, P2P_INVITE_TIMEOUT);
5546 #endif /* CONFIG_CONCURRENT_MODE                 */
5547
5548
5549         } else
5550                 RTW_INFO("[%s] NOT Found in the Scanning Queue!\n", __FUNCTION__);
5551 exit:
5552
5553         return ret;
5554
5555 }
5556
5557 static int rtw_p2p_set_persistent(struct net_device *dev,
5558                                   struct iw_request_info *info,
5559                                   union iwreq_data *wrqu, char *extra)
5560 {
5561
5562         int ret = 0;
5563         _adapter                                        *padapter = (_adapter *)rtw_netdev_priv(dev);
5564         struct iw_point                 *pdata = &wrqu->data;
5565         struct wifidirect_info          *pwdinfo = &(padapter->wdinfo);
5566         int                                             jj, kk;
5567         u8                                              peerMACStr[ETH_ALEN * 2] = { 0x00 };
5568         struct mlme_priv                        *pmlmepriv = &padapter->mlmepriv;
5569         _list                                           *plist, *phead;
5570         _queue                                  *queue  = &(pmlmepriv->scanned_queue);
5571         struct  wlan_network            *pnetwork = NULL;
5572         uint                                            uintPeerChannel = 0;
5573         u8                                              attr_content[50] = { 0x00 }, _status = 0;
5574         u8                                              *p2pie;
5575         uint                                            p2pielen = 0, attr_contentlen = 0;
5576         _irqL                                   irqL;
5577         struct tx_invite_req_info       *pinvite_req_info = &pwdinfo->invitereq_info;
5578
5579         /*      Commented by Albert 20120328 */
5580         /*      The input data is 0 or 1 */
5581         /*      0: disable persistent group functionality */
5582         /*      1: enable persistent group founctionality */
5583
5584         RTW_INFO("[%s] data = %s\n", __FUNCTION__, extra);
5585
5586         if (rtw_p2p_chk_state(pwdinfo, P2P_STATE_NONE)) {
5587                 RTW_INFO("[%s] WiFi Direct is disable!\n", __FUNCTION__);
5588                 return ret;
5589         } else {
5590                 if (extra[0] == '0')    /*      Disable the persistent group function. */
5591                         pwdinfo->persistent_supported = _FALSE;
5592                 else if (extra[0] == '1')       /*      Enable the persistent group function. */
5593                         pwdinfo->persistent_supported = _TRUE;
5594                 else
5595                         pwdinfo->persistent_supported = _FALSE;
5596         }
5597         printk("[%s] persistent_supported = %d\n", __FUNCTION__, pwdinfo->persistent_supported);
5598
5599 exit:
5600
5601         return ret;
5602
5603 }
5604
5605 static int hexstr2bin(const char *hex, u8 *buf, size_t len)
5606 {
5607         size_t i;
5608         int a;
5609         const char *ipos = hex;
5610         u8 *opos = buf;
5611
5612         for (i = 0; i < len; i++) {
5613                 a = hex2byte_i(ipos);
5614                 if (a < 0)
5615                         return -1;
5616                 *opos++ = a;
5617                 ipos += 2;
5618         }
5619         return 0;
5620 }
5621
5622 static int uuid_str2bin(const char *str, u8 *bin)
5623 {
5624         const char *pos;
5625         u8 *opos;
5626
5627         pos = str;
5628         opos = bin;
5629
5630         if (hexstr2bin(pos, opos, 4))
5631                 return -1;
5632         pos += 8;
5633         opos += 4;
5634
5635         if (*pos++ != '-' || hexstr2bin(pos, opos, 2))
5636                 return -1;
5637         pos += 4;
5638         opos += 2;
5639
5640         if (*pos++ != '-' || hexstr2bin(pos, opos, 2))
5641                 return -1;
5642         pos += 4;
5643         opos += 2;
5644
5645         if (*pos++ != '-' || hexstr2bin(pos, opos, 2))
5646                 return -1;
5647         pos += 4;
5648         opos += 2;
5649
5650         if (*pos++ != '-' || hexstr2bin(pos, opos, 6))
5651                 return -1;
5652
5653         return 0;
5654 }
5655
5656 static int rtw_p2p_set_wps_uuid(struct net_device *dev,
5657                                 struct iw_request_info *info,
5658                                 union iwreq_data *wrqu, char *extra)
5659 {
5660
5661         int ret = 0;
5662         _adapter                                *padapter = (_adapter *)rtw_netdev_priv(dev);
5663         struct wifidirect_info                  *pwdinfo = &(padapter->wdinfo);
5664
5665         RTW_INFO("[%s] data = %s\n", __FUNCTION__, extra);
5666
5667         if ((36 == strlen(extra)) && (uuid_str2bin(extra, pwdinfo->uuid) == 0))
5668                 pwdinfo->external_uuid = 1;
5669         else {
5670                 pwdinfo->external_uuid = 0;
5671                 ret = -EINVAL;
5672         }
5673
5674         return ret;
5675
5676 }
5677 #ifdef CONFIG_WFD
5678 static int rtw_p2p_set_pc(struct net_device *dev,
5679                           struct iw_request_info *info,
5680                           union iwreq_data *wrqu, char *extra)
5681 {
5682
5683         int ret = 0;
5684         _adapter                                *padapter = (_adapter *)rtw_netdev_priv(dev);
5685         struct iw_point         *pdata = &wrqu->data;
5686         struct wifidirect_info  *pwdinfo = &(padapter->wdinfo);
5687         u8                                      peerMAC[ETH_ALEN] = { 0x00 };
5688         int                                     jj, kk;
5689         u8                                      peerMACStr[ETH_ALEN * 2] = { 0x00 };
5690         struct mlme_priv                *pmlmepriv = &padapter->mlmepriv;
5691         _list                                   *plist, *phead;
5692         _queue                          *queue  = &(pmlmepriv->scanned_queue);
5693         struct  wlan_network    *pnetwork = NULL;
5694         u8                                      attr_content[50] = { 0x00 }, _status = 0;
5695         u8 *p2pie;
5696         uint                                    p2pielen = 0, attr_contentlen = 0;
5697         _irqL                           irqL;
5698         uint                                    uintPeerChannel = 0;
5699
5700         struct wifi_display_info        *pwfd_info = pwdinfo->wfd_info;
5701
5702         /*      Commented by Albert 20120512 */
5703         /*      1. Input information is the MAC address which wants to know the Preferred Connection bit (PC bit) */
5704         /*      Format: 00:E0:4C:00:00:05 */
5705
5706         RTW_INFO("[%s] data = %s\n", __FUNCTION__, extra);
5707
5708         if (rtw_p2p_chk_state(pwdinfo, P2P_STATE_NONE)) {
5709                 RTW_INFO("[%s] WiFi Direct is disable!\n", __FUNCTION__);
5710                 return ret;
5711         }
5712
5713         for (jj = 0, kk = 0; jj < ETH_ALEN; jj++, kk += 3)
5714                 peerMAC[jj] = key_2char2num(extra[kk], extra[kk + 1]);
5715
5716         _enter_critical_bh(&(pmlmepriv->scanned_queue.lock), &irqL);
5717
5718         phead = get_list_head(queue);
5719         plist = get_next(phead);
5720
5721         while (1) {
5722                 if (rtw_end_of_queue_search(phead, plist) == _TRUE)
5723                         break;
5724
5725                 pnetwork = LIST_CONTAINOR(plist, struct wlan_network, list);
5726
5727                 /*      Commented by Albert 2011/05/18 */
5728                 /*      Match the device address located in the P2P IE */
5729                 /*      This is for the case that the P2P device address is not the same as the P2P interface address. */
5730
5731                 p2pie = rtw_bss_ex_get_p2p_ie(&pnetwork->network, NULL, &p2pielen);
5732                 if (p2pie) {
5733                         /*      The P2P Device ID attribute is included in the Beacon frame. */
5734                         /*      The P2P Device Info attribute is included in the probe response frame. */
5735                         printk("[%s] Got P2P IE\n", __FUNCTION__);
5736                         if (rtw_get_p2p_attr_content(p2pie, p2pielen, P2P_ATTR_DEVICE_ID, attr_content, &attr_contentlen)) {
5737                                 /*      Handle the P2P Device ID attribute of Beacon first */
5738                                 printk("[%s] P2P_ATTR_DEVICE_ID\n", __FUNCTION__);
5739                                 if (_rtw_memcmp(attr_content, peerMAC, ETH_ALEN)) {
5740                                         uintPeerChannel = pnetwork->network.Configuration.DSConfig;
5741                                         break;
5742                                 }
5743                         } else if (rtw_get_p2p_attr_content(p2pie, p2pielen, P2P_ATTR_DEVICE_INFO, attr_content, &attr_contentlen)) {
5744                                 /*      Handle the P2P Device Info attribute of probe response */
5745                                 printk("[%s] P2P_ATTR_DEVICE_INFO\n", __FUNCTION__);
5746                                 if (_rtw_memcmp(attr_content, peerMAC, ETH_ALEN)) {
5747                                         uintPeerChannel = pnetwork->network.Configuration.DSConfig;
5748                                         break;
5749                                 }
5750                         }
5751
5752                 }
5753
5754                 plist = get_next(plist);
5755
5756         }
5757
5758         _exit_critical_bh(&(pmlmepriv->scanned_queue.lock), &irqL);
5759         printk("[%s] channel = %d\n", __FUNCTION__, uintPeerChannel);
5760
5761         if (uintPeerChannel) {
5762                 u8 *wfd_ie;
5763                 uint wfd_ielen = 0;
5764
5765                 wfd_ie = rtw_bss_ex_get_wfd_ie(&pnetwork->network, NULL, &wfd_ielen);
5766                 if (wfd_ie) {
5767                         u8 *wfd_devinfo;
5768                         uint wfd_devlen;
5769
5770                         RTW_INFO("[%s] Found WFD IE!\n", __FUNCTION__);
5771                         wfd_devinfo = rtw_get_wfd_attr_content(wfd_ie, wfd_ielen, WFD_ATTR_DEVICE_INFO, NULL, &wfd_devlen);
5772                         if (wfd_devinfo) {
5773                                 u16     wfd_devinfo_field = 0;
5774
5775                                 /*      Commented by Albert 20120319 */
5776                                 /*      The first two bytes are the WFD device information field of WFD device information subelement. */
5777                                 /*      In big endian format. */
5778                                 wfd_devinfo_field = RTW_GET_BE16(wfd_devinfo);
5779                                 if (wfd_devinfo_field & WFD_DEVINFO_PC_TDLS)
5780                                         pwfd_info->wfd_pc = _TRUE;
5781                                 else
5782                                         pwfd_info->wfd_pc = _FALSE;
5783                         }
5784                 }
5785         } else
5786                 RTW_INFO("[%s] NOT Found in the Scanning Queue!\n", __FUNCTION__);
5787
5788 exit:
5789
5790         return ret;
5791
5792 }
5793
5794 static int rtw_p2p_set_wfd_device_type(struct net_device *dev,
5795                                        struct iw_request_info *info,
5796                                        union iwreq_data *wrqu, char *extra)
5797 {
5798
5799         int ret = 0;
5800         _adapter                                        *padapter = (_adapter *)rtw_netdev_priv(dev);
5801         struct iw_point                 *pdata = &wrqu->data;
5802         struct wifidirect_info          *pwdinfo = &(padapter->wdinfo);
5803         struct wifi_display_info                *pwfd_info = pwdinfo->wfd_info;
5804
5805         /*      Commented by Albert 20120328 */
5806         /*      The input data is 0 or 1 */
5807         /*      0: specify to Miracast source device */
5808         /*      1 or others: specify to Miracast sink device (display device) */
5809
5810         RTW_INFO("[%s] data = %s\n", __FUNCTION__, extra);
5811
5812         if (extra[0] == '0')    /*      Set to Miracast source device. */
5813                 pwfd_info->wfd_device_type = WFD_DEVINFO_SOURCE;
5814         else                                    /*      Set to Miracast sink device. */
5815                 pwfd_info->wfd_device_type = WFD_DEVINFO_PSINK;
5816
5817 exit:
5818
5819         return ret;
5820
5821 }
5822
5823 static int rtw_p2p_set_wfd_enable(struct net_device *dev,
5824                                   struct iw_request_info *info,
5825                                   union iwreq_data *wrqu, char *extra)
5826 {
5827         /*      Commented by Kurt 20121206
5828          *      This function is used to set wfd enabled */
5829
5830         int ret = 0;
5831         _adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
5832         struct wifidirect_info *pwdinfo = &(padapter->wdinfo);
5833
5834         if (*extra == '0')
5835                 rtw_wfd_enable(padapter, 0);
5836         else if (*extra == '1')
5837                 rtw_wfd_enable(padapter, 1);
5838
5839         RTW_INFO("[%s] wfd_enable = %d\n", __FUNCTION__, pwdinfo->wfd_info->wfd_enable);
5840
5841         return ret;
5842
5843 }
5844
5845 static int rtw_p2p_set_driver_iface(struct net_device *dev,
5846                                     struct iw_request_info *info,
5847                                     union iwreq_data *wrqu, char *extra)
5848 {
5849         /*      Commented by Kurt 20121206
5850          *      This function is used to set driver iface is WEXT or CFG80211 */
5851         int ret = 0;
5852         _adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
5853         struct wifidirect_info *pwdinfo = &(padapter->wdinfo);
5854
5855         if (*extra == '1') {
5856                 pwdinfo->driver_interface = DRIVER_WEXT;
5857                 RTW_INFO("[%s] driver_interface = WEXT\n", __FUNCTION__);
5858         } else if (*extra == '2') {
5859                 pwdinfo->driver_interface = DRIVER_CFG80211;
5860                 RTW_INFO("[%s] driver_interface = CFG80211\n", __FUNCTION__);
5861         }
5862
5863         return ret;
5864
5865 }
5866
5867 /*      To set the WFD session available to enable or disable */
5868 static int rtw_p2p_set_sa(struct net_device *dev,
5869                           struct iw_request_info *info,
5870                           union iwreq_data *wrqu, char *extra)
5871 {
5872
5873         int ret = 0;
5874         _adapter                                        *padapter = (_adapter *)rtw_netdev_priv(dev);
5875         struct iw_point                 *pdata = &wrqu->data;
5876         struct wifidirect_info          *pwdinfo = &(padapter->wdinfo);
5877         struct wifi_display_info                *pwfd_info = pwdinfo->wfd_info;
5878
5879         RTW_INFO("[%s] data = %s\n", __FUNCTION__, extra);
5880
5881         if (0) {
5882                 RTW_INFO("[%s] WiFi Direct is disable!\n", __FUNCTION__);
5883                 return ret;
5884         } else {
5885                 if (extra[0] == '0')    /*      Disable the session available. */
5886                         pwdinfo->session_available = _FALSE;
5887                 else if (extra[0] == '1')       /*      Enable the session available. */
5888                         pwdinfo->session_available = _TRUE;
5889                 else
5890                         pwdinfo->session_available = _FALSE;
5891         }
5892         printk("[%s] session available = %d\n", __FUNCTION__, pwdinfo->session_available);
5893
5894 exit:
5895
5896         return ret;
5897
5898 }
5899 #endif /* CONFIG_WFD */
5900
5901 static int rtw_p2p_prov_disc(struct net_device *dev,
5902                              struct iw_request_info *info,
5903                              union iwreq_data *wrqu, char *extra)
5904 {
5905         int ret = 0;
5906         _adapter                                *padapter = (_adapter *)rtw_netdev_priv(dev);
5907         struct wifidirect_info  *pwdinfo = &(padapter->wdinfo);
5908         u8                                      peerMAC[ETH_ALEN] = { 0x00 };
5909         int                                     jj, kk;
5910         u8                                      peerMACStr[ETH_ALEN * 2] = { 0x00 };
5911         struct mlme_priv                *pmlmepriv = &padapter->mlmepriv;
5912         _list                                   *plist, *phead;
5913         _queue                          *queue  = &(pmlmepriv->scanned_queue);
5914         struct  wlan_network    *pnetwork = NULL;
5915         uint                                    uintPeerChannel = 0;
5916         u8                                      attr_content[100] = { 0x00 }, _status = 0;
5917         u8 *p2pie;
5918         uint                                    p2pielen = 0, attr_contentlen = 0;
5919         _irqL                           irqL;
5920
5921         /*      Commented by Albert 20110301 */
5922         /*      The input data contains two informations. */
5923         /*      1. First information is the MAC address which wants to issue the provisioning discovery request frame. */
5924         /*      2. Second information is the WPS configuration method which wants to discovery */
5925         /*      Format: 00:E0:4C:00:00:05_display */
5926         /*      Format: 00:E0:4C:00:00:05_keypad */
5927         /*      Format: 00:E0:4C:00:00:05_pbc */
5928         /*      Format: 00:E0:4C:00:00:05_label */
5929
5930         RTW_INFO("[%s] data = %s\n", __FUNCTION__, extra);
5931
5932         if (pwdinfo->p2p_state == P2P_STATE_NONE) {
5933                 RTW_INFO("[%s] WiFi Direct is disable!\n", __FUNCTION__);
5934                 return ret;
5935         } else {
5936 #ifdef CONFIG_INTEL_WIDI
5937                 if (check_fwstate(pmlmepriv, _FW_UNDER_SURVEY) == _TRUE) {
5938                         RTW_INFO("[%s] WiFi is under survey!\n", __FUNCTION__);
5939                         return ret;
5940                 }
5941 #endif /* CONFIG_INTEL_WIDI */
5942
5943                 /*      Reset the content of struct tx_provdisc_req_info excluded the wps_config_method_request. */
5944                 _rtw_memset(pwdinfo->tx_prov_disc_info.peerDevAddr, 0x00, ETH_ALEN);
5945                 _rtw_memset(pwdinfo->tx_prov_disc_info.peerIFAddr, 0x00, ETH_ALEN);
5946                 _rtw_memset(&pwdinfo->tx_prov_disc_info.ssid, 0x00, sizeof(NDIS_802_11_SSID));
5947                 pwdinfo->tx_prov_disc_info.peer_channel_num[0] = 0;
5948                 pwdinfo->tx_prov_disc_info.peer_channel_num[1] = 0;
5949                 pwdinfo->tx_prov_disc_info.benable = _FALSE;
5950         }
5951
5952         for (jj = 0, kk = 0; jj < ETH_ALEN; jj++, kk += 3)
5953                 peerMAC[jj] = key_2char2num(extra[kk], extra[kk + 1]);
5954
5955         if (_rtw_memcmp(&extra[18], "display", 7))
5956                 pwdinfo->tx_prov_disc_info.wps_config_method_request = WPS_CM_DISPLYA;
5957         else if (_rtw_memcmp(&extra[18], "keypad", 7))
5958                 pwdinfo->tx_prov_disc_info.wps_config_method_request = WPS_CM_KEYPAD;
5959         else if (_rtw_memcmp(&extra[18], "pbc", 3))
5960                 pwdinfo->tx_prov_disc_info.wps_config_method_request = WPS_CM_PUSH_BUTTON;
5961         else if (_rtw_memcmp(&extra[18], "label", 5))
5962                 pwdinfo->tx_prov_disc_info.wps_config_method_request = WPS_CM_LABEL;
5963         else {
5964                 RTW_INFO("[%s] Unknown WPS config methodn", __FUNCTION__);
5965                 return ret ;
5966         }
5967
5968         _enter_critical_bh(&(pmlmepriv->scanned_queue.lock), &irqL);
5969
5970         phead = get_list_head(queue);
5971         plist = get_next(phead);
5972
5973         while (1) {
5974                 if (rtw_end_of_queue_search(phead, plist) == _TRUE)
5975                         break;
5976
5977                 if (uintPeerChannel != 0)
5978                         break;
5979
5980                 pnetwork = LIST_CONTAINOR(plist, struct wlan_network, list);
5981
5982                 /*      Commented by Albert 2011/05/18 */
5983                 /*      Match the device address located in the P2P IE */
5984                 /*      This is for the case that the P2P device address is not the same as the P2P interface address. */
5985
5986                 p2pie = rtw_bss_ex_get_p2p_ie(&pnetwork->network, NULL, &p2pielen);
5987                 if (p2pie) {
5988                         while (p2pie) {
5989                                 /*      The P2P Device ID attribute is included in the Beacon frame. */
5990                                 /*      The P2P Device Info attribute is included in the probe response frame. */
5991
5992                                 if (rtw_get_p2p_attr_content(p2pie, p2pielen, P2P_ATTR_DEVICE_ID, attr_content, &attr_contentlen)) {
5993                                         /*      Handle the P2P Device ID attribute of Beacon first */
5994                                         if (_rtw_memcmp(attr_content, peerMAC, ETH_ALEN)) {
5995                                                 uintPeerChannel = pnetwork->network.Configuration.DSConfig;
5996                                                 break;
5997                                         }
5998                                 } else if (rtw_get_p2p_attr_content(p2pie, p2pielen, P2P_ATTR_DEVICE_INFO, attr_content, &attr_contentlen)) {
5999                                         /*      Handle the P2P Device Info attribute of probe response */
6000                                         if (_rtw_memcmp(attr_content, peerMAC, ETH_ALEN)) {
6001                                                 uintPeerChannel = pnetwork->network.Configuration.DSConfig;
6002                                                 break;
6003                                         }
6004                                 }
6005
6006                                 /* Get the next P2P IE */
6007                                 p2pie = rtw_get_p2p_ie(p2pie + p2pielen, BSS_EX_TLV_IES_LEN(&pnetwork->network) - (p2pie + p2pielen - BSS_EX_TLV_IES(&pnetwork->network)), NULL, &p2pielen);
6008                         }
6009
6010                 }
6011
6012 #ifdef CONFIG_INTEL_WIDI
6013                 /* Some Intel WiDi source may not provide P2P IE, */
6014                 /* so we could only compare mac addr by 802.11 Source Address */
6015                 if (pmlmepriv->widi_state == INTEL_WIDI_STATE_WFD_CONNECTION
6016                     && uintPeerChannel == 0) {
6017                         if (_rtw_memcmp(pnetwork->network.MacAddress, peerMAC, ETH_ALEN)) {
6018                                 uintPeerChannel = pnetwork->network.Configuration.DSConfig;
6019                                 break;
6020                         }
6021                 }
6022 #endif /* CONFIG_INTEL_WIDI */
6023
6024                 plist = get_next(plist);
6025
6026         }
6027
6028         _exit_critical_bh(&(pmlmepriv->scanned_queue.lock), &irqL);
6029
6030         if (uintPeerChannel) {
6031 #ifdef CONFIG_WFD
6032                 if (hal_chk_wl_func(padapter, WL_FUNC_MIRACAST)) {
6033                         struct wifi_display_info *pwfd_info = pwdinfo->wfd_info;
6034                         u8 *wfd_ie;
6035                         uint wfd_ielen = 0;
6036
6037                         wfd_ie = rtw_bss_ex_get_wfd_ie(&pnetwork->network, NULL, &wfd_ielen);
6038                         if (wfd_ie) {
6039                                 u8 *wfd_devinfo;
6040                                 uint wfd_devlen;
6041
6042                                 RTW_INFO("[%s] Found WFD IE!\n", __FUNCTION__);
6043                                 wfd_devinfo = rtw_get_wfd_attr_content(wfd_ie, wfd_ielen, WFD_ATTR_DEVICE_INFO, NULL, &wfd_devlen);
6044                                 if (wfd_devinfo) {
6045                                         u16     wfd_devinfo_field = 0;
6046
6047                                         /*      Commented by Albert 20120319 */
6048                                         /*      The first two bytes are the WFD device information field of WFD device information subelement. */
6049                                         /*      In big endian format. */
6050                                         wfd_devinfo_field = RTW_GET_BE16(wfd_devinfo);
6051                                         if (wfd_devinfo_field & WFD_DEVINFO_SESSION_AVAIL)
6052                                                 pwfd_info->peer_session_avail = _TRUE;
6053                                         else
6054                                                 pwfd_info->peer_session_avail = _FALSE;
6055                                 }
6056                         }
6057
6058                         if (_FALSE == pwfd_info->peer_session_avail) {
6059                                 RTW_INFO("[%s] WFD Session not avaiable!\n", __FUNCTION__);
6060                                 goto exit;
6061                         }
6062                 }
6063 #endif /* CONFIG_WFD */
6064
6065                 RTW_INFO("[%s] peer channel: %d!\n", __FUNCTION__, uintPeerChannel);
6066 #ifdef CONFIG_CONCURRENT_MODE
6067                 if (rtw_mi_check_status(padapter, MI_LINKED))
6068                         _cancel_timer_ex(&pwdinfo->ap_p2p_switch_timer);
6069 #endif /* CONFIG_CONCURRENT_MODE */
6070                 _rtw_memcpy(pwdinfo->tx_prov_disc_info.peerIFAddr, pnetwork->network.MacAddress, ETH_ALEN);
6071                 _rtw_memcpy(pwdinfo->tx_prov_disc_info.peerDevAddr, peerMAC, ETH_ALEN);
6072                 pwdinfo->tx_prov_disc_info.peer_channel_num[0] = (u16) uintPeerChannel;
6073                 pwdinfo->tx_prov_disc_info.benable = _TRUE;
6074                 rtw_p2p_set_pre_state(pwdinfo, rtw_p2p_state(pwdinfo));
6075                 rtw_p2p_set_state(pwdinfo, P2P_STATE_TX_PROVISION_DIS_REQ);
6076
6077                 if (rtw_p2p_chk_role(pwdinfo, P2P_ROLE_CLIENT))
6078                         _rtw_memcpy(&pwdinfo->tx_prov_disc_info.ssid, &pnetwork->network.Ssid, sizeof(NDIS_802_11_SSID));
6079                 else if (rtw_p2p_chk_role(pwdinfo, P2P_ROLE_DEVICE) || rtw_p2p_chk_role(pwdinfo, P2P_ROLE_GO)) {
6080                         _rtw_memcpy(pwdinfo->tx_prov_disc_info.ssid.Ssid, pwdinfo->p2p_wildcard_ssid, P2P_WILDCARD_SSID_LEN);
6081                         pwdinfo->tx_prov_disc_info.ssid.SsidLength = P2P_WILDCARD_SSID_LEN;
6082                 }
6083
6084 #ifdef CONFIG_CONCURRENT_MODE
6085                 if (rtw_mi_check_status(padapter, MI_LINKED)) {
6086                         u8 union_ch = rtw_mi_get_union_chan(padapter);
6087                         u8 union_bw = rtw_mi_get_union_bw(padapter);
6088                         u8 union_offset = rtw_mi_get_union_offset(padapter);
6089
6090                         /*      Have to enter the power saving with the AP */
6091                         set_channel_bwmode(padapter, union_ch, union_offset, union_bw);
6092
6093                         rtw_mi_buddy_issue_nulldata(padapter, NULL, 1, 3, 500);
6094                 } else
6095                         set_channel_bwmode(padapter, uintPeerChannel, HAL_PRIME_CHNL_OFFSET_DONT_CARE, CHANNEL_WIDTH_20);
6096 #else
6097                 set_channel_bwmode(padapter, uintPeerChannel, HAL_PRIME_CHNL_OFFSET_DONT_CARE, CHANNEL_WIDTH_20);
6098 #endif
6099
6100                 _set_timer(&pwdinfo->pre_tx_scan_timer, P2P_TX_PRESCAN_TIMEOUT);
6101
6102 #ifdef CONFIG_CONCURRENT_MODE
6103                 if (rtw_mi_check_status(padapter, MI_LINKED))
6104                         _set_timer(&pwdinfo->restore_p2p_state_timer, P2P_CONCURRENT_PROVISION_TIMEOUT);
6105                 else
6106                         _set_timer(&pwdinfo->restore_p2p_state_timer, P2P_PROVISION_TIMEOUT);
6107 #else
6108                 _set_timer(&pwdinfo->restore_p2p_state_timer, P2P_PROVISION_TIMEOUT);
6109 #endif /* CONFIG_CONCURRENT_MODE                 */
6110
6111         } else {
6112                 RTW_INFO("[%s] NOT Found in the Scanning Queue!\n", __FUNCTION__);
6113 #ifdef CONFIG_INTEL_WIDI
6114                 _cancel_timer_ex(&pwdinfo->restore_p2p_state_timer);
6115                 rtw_p2p_set_state(pwdinfo, P2P_STATE_FIND_PHASE_SEARCH);
6116                 rtw_p2p_findphase_ex_set(pwdinfo, P2P_FINDPHASE_EX_NONE);
6117                 rtw_free_network_queue(padapter, _TRUE);
6118                 _enter_critical_bh(&pmlmepriv->lock, &irqL);
6119                 rtw_sitesurvey_cmd(padapter, NULL, 0, NULL, 0);
6120                 _exit_critical_bh(&pmlmepriv->lock, &irqL);
6121 #endif /* CONFIG_INTEL_WIDI */
6122         }
6123 exit:
6124
6125         return ret;
6126
6127 }
6128
6129 /*      Added by Albert 20110328
6130  *      This function is used to inform the driver the user had specified the pin code value or pbc
6131  *      to application. */
6132
6133 static int rtw_p2p_got_wpsinfo(struct net_device *dev,
6134                                struct iw_request_info *info,
6135                                union iwreq_data *wrqu, char *extra)
6136 {
6137
6138         int ret = 0;
6139         _adapter                                *padapter = (_adapter *)rtw_netdev_priv(dev);
6140         struct wifidirect_info  *pwdinfo = &(padapter->wdinfo);
6141
6142
6143         RTW_INFO("[%s] data = %s\n", __FUNCTION__, extra);
6144         /*      Added by Albert 20110328 */
6145         /*      if the input data is P2P_NO_WPSINFO -> reset the wpsinfo */
6146         /*      if the input data is P2P_GOT_WPSINFO_PEER_DISPLAY_PIN -> the utility just input the PIN code got from the peer P2P device. */
6147         /*      if the input data is P2P_GOT_WPSINFO_SELF_DISPLAY_PIN -> the utility just got the PIN code from itself. */
6148         /*      if the input data is P2P_GOT_WPSINFO_PBC -> the utility just determine to use the PBC */
6149
6150         if (*extra == '0')
6151                 pwdinfo->ui_got_wps_info = P2P_NO_WPSINFO;
6152         else if (*extra == '1')
6153                 pwdinfo->ui_got_wps_info = P2P_GOT_WPSINFO_PEER_DISPLAY_PIN;
6154         else if (*extra == '2')
6155                 pwdinfo->ui_got_wps_info = P2P_GOT_WPSINFO_SELF_DISPLAY_PIN;
6156         else if (*extra == '3')
6157                 pwdinfo->ui_got_wps_info = P2P_GOT_WPSINFO_PBC;
6158         else
6159                 pwdinfo->ui_got_wps_info = P2P_NO_WPSINFO;
6160
6161         return ret;
6162
6163 }
6164
6165 #endif /* CONFIG_P2P */
6166
6167 static int rtw_p2p_set(struct net_device *dev,
6168                        struct iw_request_info *info,
6169                        union iwreq_data *wrqu, char *extra)
6170 {
6171
6172         int ret = 0;
6173 #ifdef CONFIG_P2P
6174
6175         _adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
6176         struct mlme_priv *pmlmepriv = &(padapter->mlmepriv);
6177         struct iw_point *pdata = &wrqu->data;
6178         struct wifidirect_info *pwdinfo = &(padapter->wdinfo);
6179         struct mlme_ext_priv    *pmlmeext = &padapter->mlmeextpriv;
6180
6181         RTW_INFO("[%s] extra = %s\n", __FUNCTION__, extra);
6182
6183         if (_rtw_memcmp(extra, "enable=", 7))
6184                 rtw_wext_p2p_enable(dev, info, wrqu, &extra[7]);
6185         else if (_rtw_memcmp(extra, "setDN=", 6)) {
6186                 wrqu->data.length -= 6;
6187                 rtw_p2p_setDN(dev, info, wrqu, &extra[6]);
6188         } else if (_rtw_memcmp(extra, "profilefound=", 13)) {
6189                 wrqu->data.length -= 13;
6190                 rtw_p2p_profilefound(dev, info, wrqu, &extra[13]);
6191         } else if (_rtw_memcmp(extra, "prov_disc=", 10)) {
6192                 wrqu->data.length -= 10;
6193                 rtw_p2p_prov_disc(dev, info, wrqu, &extra[10]);
6194         } else if (_rtw_memcmp(extra, "nego=", 5)) {
6195                 wrqu->data.length -= 5;
6196                 rtw_p2p_connect(dev, info, wrqu, &extra[5]);
6197         } else if (_rtw_memcmp(extra, "intent=", 7)) {
6198                 /*      Commented by Albert 2011/03/23 */
6199                 /*      The wrqu->data.length will include the null character */
6200                 /*      So, we will decrease 7 + 1 */
6201                 wrqu->data.length -= 8;
6202                 rtw_p2p_set_intent(dev, info, wrqu, &extra[7]);
6203         } else if (_rtw_memcmp(extra, "ssid=", 5)) {
6204                 wrqu->data.length -= 5;
6205                 rtw_p2p_set_go_nego_ssid(dev, info, wrqu, &extra[5]);
6206         } else if (_rtw_memcmp(extra, "got_wpsinfo=", 12)) {
6207                 wrqu->data.length -= 12;
6208                 rtw_p2p_got_wpsinfo(dev, info, wrqu, &extra[12]);
6209         } else if (_rtw_memcmp(extra, "listen_ch=", 10)) {
6210                 /*      Commented by Albert 2011/05/24 */
6211                 /*      The wrqu->data.length will include the null character */
6212                 /*      So, we will decrease (10 + 1)    */
6213                 wrqu->data.length -= 11;
6214                 rtw_p2p_set_listen_ch(dev, info, wrqu, &extra[10]);
6215         } else if (_rtw_memcmp(extra, "op_ch=", 6)) {
6216                 /*      Commented by Albert 2011/05/24 */
6217                 /*      The wrqu->data.length will include the null character */
6218                 /*      So, we will decrease (6 + 1)     */
6219                 wrqu->data.length -= 7;
6220                 rtw_p2p_set_op_ch(dev, info, wrqu, &extra[6]);
6221         } else if (_rtw_memcmp(extra, "invite=", 7)) {
6222                 wrqu->data.length -= 8;
6223                 rtw_p2p_invite_req(dev, info, wrqu, &extra[7]);
6224         } else if (_rtw_memcmp(extra, "persistent=", 11)) {
6225                 wrqu->data.length -= 11;
6226                 rtw_p2p_set_persistent(dev, info, wrqu, &extra[11]);
6227         } else if (_rtw_memcmp(extra, "uuid=", 5)) {
6228                 wrqu->data.length -= 5;
6229                 ret = rtw_p2p_set_wps_uuid(dev, info, wrqu, &extra[5]);
6230         }
6231
6232 #ifdef CONFIG_WFD
6233         if (hal_chk_wl_func(padapter, WL_FUNC_MIRACAST)) {
6234                 if (_rtw_memcmp(extra, "sa=", 3)) {
6235                         /* sa: WFD Session Available information */
6236                         wrqu->data.length -= 3;
6237                         rtw_p2p_set_sa(dev, info, wrqu, &extra[3]);
6238                 } else if (_rtw_memcmp(extra, "pc=", 3)) {
6239                         /* pc: WFD Preferred Connection */
6240                         wrqu->data.length -= 3;
6241                         rtw_p2p_set_pc(dev, info, wrqu, &extra[3]);
6242                 } else if (_rtw_memcmp(extra, "wfd_type=", 9)) {
6243                         wrqu->data.length -= 9;
6244                         rtw_p2p_set_wfd_device_type(dev, info, wrqu, &extra[9]);
6245                 } else if (_rtw_memcmp(extra, "wfd_enable=", 11)) {
6246                         wrqu->data.length -= 11;
6247                         rtw_p2p_set_wfd_enable(dev, info, wrqu, &extra[11]);
6248                 } else if (_rtw_memcmp(extra, "driver_iface=", 13)) {
6249                         wrqu->data.length -= 13;
6250                         rtw_p2p_set_driver_iface(dev, info, wrqu, &extra[13]);
6251                 }
6252         }
6253 #endif /* CONFIG_WFD */
6254
6255 #endif /* CONFIG_P2P */
6256
6257         return ret;
6258
6259 }
6260
6261 static int rtw_p2p_get(struct net_device *dev,
6262                        struct iw_request_info *info,
6263                        union iwreq_data *wrqu, char *extra)
6264 {
6265
6266         int ret = 0;
6267
6268 #ifdef CONFIG_P2P
6269
6270         _adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
6271         struct mlme_priv *pmlmepriv = &(padapter->mlmepriv);
6272         struct iw_point *pdata = &wrqu->data;
6273         struct wifidirect_info *pwdinfo = &(padapter->wdinfo);
6274         struct mlme_ext_priv    *pmlmeext = &padapter->mlmeextpriv;
6275
6276         if (padapter->bShowGetP2PState)
6277                 RTW_INFO("[%s] extra = %s\n", __FUNCTION__, (char *) wrqu->data.pointer);
6278
6279         if (_rtw_memcmp(wrqu->data.pointer, "status", 6))
6280                 rtw_p2p_get_status(dev, info, wrqu, extra);
6281         else if (_rtw_memcmp(wrqu->data.pointer, "role", 4))
6282                 rtw_p2p_get_role(dev, info, wrqu, extra);
6283         else if (_rtw_memcmp(wrqu->data.pointer, "peer_ifa", 8))
6284                 rtw_p2p_get_peer_ifaddr(dev, info, wrqu, extra);
6285         else if (_rtw_memcmp(wrqu->data.pointer, "req_cm", 6))
6286                 rtw_p2p_get_req_cm(dev, info, wrqu, extra);
6287         else if (_rtw_memcmp(wrqu->data.pointer, "peer_deva", 9)) {
6288                 /*      Get the P2P device address when receiving the provision discovery request frame. */
6289                 rtw_p2p_get_peer_devaddr(dev, info, wrqu, extra);
6290         } else if (_rtw_memcmp(wrqu->data.pointer, "group_id", 8))
6291                 rtw_p2p_get_groupid(dev, info, wrqu, extra);
6292         else if (_rtw_memcmp(wrqu->data.pointer, "inv_peer_deva", 13)) {
6293                 /*      Get the P2P device address when receiving the P2P Invitation request frame. */
6294                 rtw_p2p_get_peer_devaddr_by_invitation(dev, info, wrqu, extra);
6295         } else if (_rtw_memcmp(wrqu->data.pointer, "op_ch", 5))
6296                 rtw_p2p_get_op_ch(dev, info, wrqu, extra);
6297
6298 #ifdef CONFIG_WFD
6299         if (hal_chk_wl_func(padapter, WL_FUNC_MIRACAST)) {
6300                 if (_rtw_memcmp(wrqu->data.pointer, "peer_port", 9))
6301                         rtw_p2p_get_peer_wfd_port(dev, info, wrqu, extra);
6302                 else if (_rtw_memcmp(wrqu->data.pointer, "wfd_sa", 6))
6303                         rtw_p2p_get_peer_wfd_session_available(dev, info, wrqu, extra);
6304                 else if (_rtw_memcmp(wrqu->data.pointer, "wfd_pc", 6))
6305                         rtw_p2p_get_peer_wfd_preferred_connection(dev, info, wrqu, extra);
6306         }
6307 #endif /* CONFIG_WFD */
6308
6309 #endif /* CONFIG_P2P */
6310
6311         return ret;
6312
6313 }
6314
6315 static int rtw_p2p_get2(struct net_device *dev,
6316                         struct iw_request_info *info,
6317                         union iwreq_data *wrqu, char *extra)
6318 {
6319
6320         int ret = 0;
6321
6322 #ifdef CONFIG_P2P
6323
6324         int length = wrqu->data.length;
6325         char *buffer = (u8 *)rtw_malloc(length);
6326
6327         if (buffer == NULL) {
6328                 ret = -ENOMEM;
6329                 goto bad;
6330         }
6331
6332         if (copy_from_user(buffer, wrqu->data.pointer, wrqu->data.length)) {
6333                 ret = -EFAULT;
6334                 goto bad;
6335         }
6336
6337         RTW_INFO("[%s] buffer = %s\n", __FUNCTION__, buffer);
6338
6339         if (_rtw_memcmp(buffer, "wpsCM=", 6))
6340                 ret = rtw_p2p_get_wps_configmethod(dev, info, wrqu, extra, &buffer[6]);
6341         else if (_rtw_memcmp(buffer, "devN=", 5))
6342                 ret = rtw_p2p_get_device_name(dev, info, wrqu, extra, &buffer[5]);
6343         else if (_rtw_memcmp(buffer, "dev_type=", 9))
6344                 ret = rtw_p2p_get_device_type(dev, info, wrqu, extra, &buffer[9]);
6345         else if (_rtw_memcmp(buffer, "go_devadd=", 10))
6346                 ret = rtw_p2p_get_go_device_address(dev, info, wrqu, extra, &buffer[10]);
6347         else if (_rtw_memcmp(buffer, "InvProc=", 8))
6348                 ret = rtw_p2p_get_invitation_procedure(dev, info, wrqu, extra, &buffer[8]);
6349         else {
6350                 snprintf(extra, sizeof("Command not found."), "Command not found.");
6351                 wrqu->data.length = strlen(extra);
6352         }
6353
6354 bad:
6355         if (buffer)
6356                 rtw_mfree(buffer, length);
6357
6358 #endif /* CONFIG_P2P */
6359
6360         return ret;
6361
6362 }
6363
6364 static int rtw_cta_test_start(struct net_device *dev,
6365                               struct iw_request_info *info,
6366                               union iwreq_data *wrqu, char *extra)
6367 {
6368         int ret = 0;
6369         _adapter        *padapter = (_adapter *)rtw_netdev_priv(dev);
6370         RTW_INFO("%s %s\n", __func__, extra);
6371         if (!strcmp(extra, "1"))
6372                 padapter->in_cta_test = 1;
6373         else
6374                 padapter->in_cta_test = 0;
6375
6376         if (padapter->in_cta_test) {
6377                 u32 v = rtw_read32(padapter, REG_RCR);
6378                 v &= ~(RCR_CBSSID_DATA | RCR_CBSSID_BCN); /* | RCR_ADF */
6379                 rtw_write32(padapter, REG_RCR, v);
6380                 RTW_INFO("enable RCR_ADF\n");
6381         } else {
6382                 u32 v = rtw_read32(padapter, REG_RCR);
6383                 v |= RCR_CBSSID_DATA | RCR_CBSSID_BCN ;/* | RCR_ADF */
6384                 rtw_write32(padapter, REG_RCR, v);
6385                 RTW_INFO("disable RCR_ADF\n");
6386         }
6387         return ret;
6388 }
6389
6390
6391 extern int rtw_change_ifname(_adapter *padapter, const char *ifname);
6392 static int rtw_rereg_nd_name(struct net_device *dev,
6393                              struct iw_request_info *info,
6394                              union iwreq_data *wrqu, char *extra)
6395 {
6396         int ret = 0;
6397         _adapter *padapter = rtw_netdev_priv(dev);
6398         struct rereg_nd_name_data *rereg_priv = &padapter->rereg_nd_name_priv;
6399         char new_ifname[IFNAMSIZ];
6400
6401         if (rereg_priv->old_ifname[0] == 0) {
6402                 char *reg_ifname;
6403 #ifdef CONFIG_CONCURRENT_MODE
6404                 if (padapter->isprimary)
6405                         reg_ifname = padapter->registrypriv.ifname;
6406                 else
6407 #endif
6408                         reg_ifname = padapter->registrypriv.if2name;
6409
6410                 strncpy(rereg_priv->old_ifname, reg_ifname, IFNAMSIZ);
6411                 rereg_priv->old_ifname[IFNAMSIZ - 1] = 0;
6412         }
6413
6414         /* RTW_INFO("%s wrqu->data.length:%d\n", __FUNCTION__, wrqu->data.length); */
6415         if (wrqu->data.length > IFNAMSIZ)
6416                 return -EFAULT;
6417
6418         if (copy_from_user(new_ifname, wrqu->data.pointer, IFNAMSIZ))
6419                 return -EFAULT;
6420
6421         if (0 == strcmp(rereg_priv->old_ifname, new_ifname))
6422                 return ret;
6423
6424         RTW_INFO("%s new_ifname:%s\n", __FUNCTION__, new_ifname);
6425         ret = rtw_change_ifname(padapter, new_ifname);
6426         if (0 != ret)
6427                 goto exit;
6428
6429         if (_rtw_memcmp(rereg_priv->old_ifname, "disable%d", 9) == _TRUE) {
6430                 padapter->ledpriv.bRegUseLed = rereg_priv->old_bRegUseLed;
6431                 rtw_hal_sw_led_init(padapter);
6432                 /* rtw_ips_mode_req(&padapter->pwrctrlpriv, rereg_priv->old_ips_mode); */
6433         }
6434
6435         strncpy(rereg_priv->old_ifname, new_ifname, IFNAMSIZ);
6436         rereg_priv->old_ifname[IFNAMSIZ - 1] = 0;
6437
6438         if (_rtw_memcmp(new_ifname, "disable%d", 9) == _TRUE) {
6439
6440                 RTW_INFO("%s disable\n", __FUNCTION__);
6441                 /* free network queue for Android's timming issue */
6442                 rtw_free_network_queue(padapter, _TRUE);
6443
6444                 /* close led */
6445                 rtw_led_control(padapter, LED_CTL_POWER_OFF);
6446                 rereg_priv->old_bRegUseLed = padapter->ledpriv.bRegUseLed;
6447                 padapter->ledpriv.bRegUseLed = _FALSE;
6448                 rtw_hal_sw_led_deinit(padapter);
6449
6450                 /* the interface is being "disabled", we can do deeper IPS */
6451                 /* rereg_priv->old_ips_mode = rtw_get_ips_mode_req(&padapter->pwrctrlpriv); */
6452                 /* rtw_ips_mode_req(&padapter->pwrctrlpriv, IPS_NORMAL); */
6453         }
6454 exit:
6455         return ret;
6456
6457 }
6458
6459 #ifdef CONFIG_IOL
6460 #include <rtw_iol.h>
6461 #endif
6462
6463 #ifdef DBG_CMD_QUEUE
6464 u8 dump_cmd_id = 0;
6465 #endif
6466 static int rtw_dbg_port(struct net_device *dev,
6467                         struct iw_request_info *info,
6468                         union iwreq_data *wrqu, char *extra)
6469 {
6470         _irqL irqL;
6471         int ret = 0;
6472         u8 major_cmd, minor_cmd;
6473         u16 arg;
6474         u32 extra_arg, *pdata, val32;
6475         struct sta_info *psta;
6476         _adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
6477         struct mlme_priv *pmlmepriv = &(padapter->mlmepriv);
6478         struct mlme_ext_priv    *pmlmeext = &padapter->mlmeextpriv;
6479         struct mlme_ext_info    *pmlmeinfo = &(pmlmeext->mlmext_info);
6480         struct security_priv *psecuritypriv = &padapter->securitypriv;
6481         struct wlan_network *cur_network = &(pmlmepriv->cur_network);
6482         struct sta_priv *pstapriv = &padapter->stapriv;
6483
6484
6485         pdata = (u32 *)&wrqu->data;
6486
6487         val32 = *pdata;
6488         arg = (u16)(val32 & 0x0000ffff);
6489         major_cmd = (u8)(val32 >> 24);
6490         minor_cmd = (u8)((val32 >> 16) & 0x00ff);
6491
6492         extra_arg = *(pdata + 1);
6493
6494         switch (major_cmd) {
6495         case 0x70: /* read_reg */
6496                 switch (minor_cmd) {
6497                 case 1:
6498                         RTW_INFO("rtw_read8(0x%x)=0x%02x\n", arg, rtw_read8(padapter, arg));
6499                         break;
6500                 case 2:
6501                         RTW_INFO("rtw_read16(0x%x)=0x%04x\n", arg, rtw_read16(padapter, arg));
6502                         break;
6503                 case 4:
6504                         RTW_INFO("rtw_read32(0x%x)=0x%08x\n", arg, rtw_read32(padapter, arg));
6505                         break;
6506                 }
6507                 break;
6508         case 0x71: /* write_reg */
6509                 switch (minor_cmd) {
6510                 case 1:
6511                         rtw_write8(padapter, arg, extra_arg);
6512                         RTW_INFO("rtw_write8(0x%x)=0x%02x\n", arg, rtw_read8(padapter, arg));
6513                         break;
6514                 case 2:
6515                         rtw_write16(padapter, arg, extra_arg);
6516                         RTW_INFO("rtw_write16(0x%x)=0x%04x\n", arg, rtw_read16(padapter, arg));
6517                         break;
6518                 case 4:
6519                         rtw_write32(padapter, arg, extra_arg);
6520                         RTW_INFO("rtw_write32(0x%x)=0x%08x\n", arg, rtw_read32(padapter, arg));
6521                         break;
6522                 }
6523                 break;
6524         case 0x72: /* read_bb */
6525                 RTW_INFO("read_bbreg(0x%x)=0x%x\n", arg, rtw_hal_read_bbreg(padapter, arg, 0xffffffff));
6526                 break;
6527         case 0x73: /* write_bb */
6528                 rtw_hal_write_bbreg(padapter, arg, 0xffffffff, extra_arg);
6529                 RTW_INFO("write_bbreg(0x%x)=0x%x\n", arg, rtw_hal_read_bbreg(padapter, arg, 0xffffffff));
6530                 break;
6531         case 0x74: /* read_rf */
6532                 RTW_INFO("read RF_reg path(0x%02x),offset(0x%x),value(0x%08x)\n", minor_cmd, arg, rtw_hal_read_rfreg(padapter, minor_cmd, arg, 0xffffffff));
6533                 break;
6534         case 0x75: /* write_rf */
6535                 rtw_hal_write_rfreg(padapter, minor_cmd, arg, 0xffffffff, extra_arg);
6536                 RTW_INFO("write RF_reg path(0x%02x),offset(0x%x),value(0x%08x)\n", minor_cmd, arg, rtw_hal_read_rfreg(padapter, minor_cmd, arg, 0xffffffff));
6537                 break;
6538
6539         case 0x76:
6540                 switch (minor_cmd) {
6541                 case 0x00: /* normal mode, */
6542                         padapter->recvpriv.is_signal_dbg = 0;
6543                         break;
6544                 case 0x01: /* dbg mode */
6545                         padapter->recvpriv.is_signal_dbg = 1;
6546                         extra_arg = extra_arg > 100 ? 100 : extra_arg;
6547                         padapter->recvpriv.signal_strength_dbg = extra_arg;
6548                         break;
6549                 }
6550                 break;
6551         case 0x78: /* IOL test */
6552                 switch (minor_cmd) {
6553                 #ifdef CONFIG_IOL
6554                 case 0x04: { /* LLT table initialization test */
6555                         u8 page_boundary = 0xf9;
6556                         {
6557                                 struct xmit_frame       *xmit_frame;
6558
6559                                 xmit_frame = rtw_IOL_accquire_xmit_frame(padapter);
6560                                 if (xmit_frame == NULL) {
6561                                         ret = -ENOMEM;
6562                                         break;
6563                                 }
6564
6565                                 rtw_IOL_append_LLT_cmd(xmit_frame, page_boundary);
6566
6567
6568                                 if (_SUCCESS != rtw_IOL_exec_cmds_sync(padapter, xmit_frame, 500, 0))
6569                                         ret = -EPERM;
6570                         }
6571                 }
6572                         break;
6573                 case 0x05: { /* blink LED test */
6574                         u16 reg = 0x4c;
6575                         u32 blink_num = 50;
6576                         u32 blink_delay_ms = 200;
6577                         int i;
6578
6579                         {
6580                                 struct xmit_frame       *xmit_frame;
6581
6582                                 xmit_frame = rtw_IOL_accquire_xmit_frame(padapter);
6583                                 if (xmit_frame == NULL) {
6584                                         ret = -ENOMEM;
6585                                         break;
6586                                 }
6587
6588                                 for (i = 0; i < blink_num; i++) {
6589                                         #ifdef CONFIG_IOL_NEW_GENERATION
6590                                         rtw_IOL_append_WB_cmd(xmit_frame, reg, 0x00, 0xff);
6591                                         rtw_IOL_append_DELAY_MS_cmd(xmit_frame, blink_delay_ms);
6592                                         rtw_IOL_append_WB_cmd(xmit_frame, reg, 0x08, 0xff);
6593                                         rtw_IOL_append_DELAY_MS_cmd(xmit_frame, blink_delay_ms);
6594                                         #else
6595                                         rtw_IOL_append_WB_cmd(xmit_frame, reg, 0x00);
6596                                         rtw_IOL_append_DELAY_MS_cmd(xmit_frame, blink_delay_ms);
6597                                         rtw_IOL_append_WB_cmd(xmit_frame, reg, 0x08);
6598                                         rtw_IOL_append_DELAY_MS_cmd(xmit_frame, blink_delay_ms);
6599                                         #endif
6600                                 }
6601                                 if (_SUCCESS != rtw_IOL_exec_cmds_sync(padapter, xmit_frame, (blink_delay_ms * blink_num * 2) + 200, 0))
6602                                         ret = -EPERM;
6603                         }
6604                 }
6605                         break;
6606
6607                 case 0x06: { /* continuous wirte byte test */
6608                         u16 reg = arg;
6609                         u16 start_value = 0;
6610                         u32 write_num = extra_arg;
6611                         int i;
6612                         u8 final;
6613
6614                         {
6615                                 struct xmit_frame       *xmit_frame;
6616
6617                                 xmit_frame = rtw_IOL_accquire_xmit_frame(padapter);
6618                                 if (xmit_frame == NULL) {
6619                                         ret = -ENOMEM;
6620                                         break;
6621                                 }
6622
6623                                 for (i = 0; i < write_num; i++) {
6624                                         #ifdef CONFIG_IOL_NEW_GENERATION
6625                                         rtw_IOL_append_WB_cmd(xmit_frame, reg, i + start_value, 0xFF);
6626                                         #else
6627                                         rtw_IOL_append_WB_cmd(xmit_frame, reg, i + start_value);
6628                                         #endif
6629                                 }
6630                                 if (_SUCCESS != rtw_IOL_exec_cmds_sync(padapter, xmit_frame, 5000, 0))
6631                                         ret = -EPERM;
6632                         }
6633
6634                         final = rtw_read8(padapter, reg);
6635                         if (start_value + write_num - 1 == final)
6636                                 RTW_INFO("continuous IOL_CMD_WB_REG to 0x%x %u times Success, start:%u, final:%u\n", reg, write_num, start_value, final);
6637                         else
6638                                 RTW_INFO("continuous IOL_CMD_WB_REG to 0x%x %u times Fail, start:%u, final:%u\n", reg, write_num, start_value, final);
6639                 }
6640                         break;
6641
6642                 case 0x07: { /* continuous wirte word test */
6643                         u16 reg = arg;
6644                         u16 start_value = 200;
6645                         u32 write_num = extra_arg;
6646
6647                         int i;
6648                         u16 final;
6649
6650                         {
6651                                 struct xmit_frame       *xmit_frame;
6652
6653                                 xmit_frame = rtw_IOL_accquire_xmit_frame(padapter);
6654                                 if (xmit_frame == NULL) {
6655                                         ret = -ENOMEM;
6656                                         break;
6657                                 }
6658
6659                                 for (i = 0; i < write_num; i++) {
6660                                         #ifdef CONFIG_IOL_NEW_GENERATION
6661                                         rtw_IOL_append_WW_cmd(xmit_frame, reg, i + start_value, 0xFFFF);
6662                                         #else
6663                                         rtw_IOL_append_WW_cmd(xmit_frame, reg, i + start_value);
6664                                         #endif
6665                                 }
6666                                 if (_SUCCESS != rtw_IOL_exec_cmds_sync(padapter, xmit_frame, 5000, 0))
6667                                         ret = -EPERM;
6668                         }
6669
6670                         final = rtw_read16(padapter, reg);
6671                         if (start_value + write_num - 1 == final)
6672                                 RTW_INFO("continuous IOL_CMD_WW_REG to 0x%x %u times Success, start:%u, final:%u\n", reg, write_num, start_value, final);
6673                         else
6674                                 RTW_INFO("continuous IOL_CMD_WW_REG to 0x%x %u times Fail, start:%u, final:%u\n", reg, write_num, start_value, final);
6675                 }
6676                         break;
6677
6678                 case 0x08: { /* continuous wirte dword test */
6679                         u16 reg = arg;
6680                         u32 start_value = 0x110000c7;
6681                         u32 write_num = extra_arg;
6682
6683                         int i;
6684                         u32 final;
6685
6686                         {
6687                                 struct xmit_frame       *xmit_frame;
6688
6689                                 xmit_frame = rtw_IOL_accquire_xmit_frame(padapter);
6690                                 if (xmit_frame == NULL) {
6691                                         ret = -ENOMEM;
6692                                         break;
6693                                 }
6694
6695                                 for (i = 0; i < write_num; i++) {
6696                                         #ifdef CONFIG_IOL_NEW_GENERATION
6697                                         rtw_IOL_append_WD_cmd(xmit_frame, reg, i + start_value, 0xFFFFFFFF);
6698                                         #else
6699                                         rtw_IOL_append_WD_cmd(xmit_frame, reg, i + start_value);
6700                                         #endif
6701                                 }
6702                                 if (_SUCCESS != rtw_IOL_exec_cmds_sync(padapter, xmit_frame, 5000, 0))
6703                                         ret = -EPERM;
6704
6705                         }
6706
6707                         final = rtw_read32(padapter, reg);
6708                         if (start_value + write_num - 1 == final)
6709                                 RTW_INFO("continuous IOL_CMD_WD_REG to 0x%x %u times Success, start:%u, final:%u\n", reg, write_num, start_value, final);
6710                         else
6711                                 RTW_INFO("continuous IOL_CMD_WD_REG to 0x%x %u times Fail, start:%u, final:%u\n", reg, write_num, start_value, final);
6712                 }
6713                         break;
6714                 #endif /* CONFIG_IOL */
6715                 }
6716                 break;
6717         case 0x79: {
6718                 /*
6719                 * dbg 0x79000000 [value], set RESP_TXAGC to + value, value:0~15
6720                 * dbg 0x79010000 [value], set RESP_TXAGC to - value, value:0~15
6721                 */
6722                 u8 value =  extra_arg & 0x0f;
6723                 u8 sign = minor_cmd;
6724                 u16 write_value = 0;
6725
6726                 RTW_INFO("%s set RESP_TXAGC to %s %u\n", __func__, sign ? "minus" : "plus", value);
6727
6728                 if (sign)
6729                         value = value | 0x10;
6730
6731                 write_value = value | (value << 5);
6732                 rtw_write16(padapter, 0x6d9, write_value);
6733         }
6734                 break;
6735         case 0x7a:
6736                 receive_disconnect(padapter, pmlmeinfo->network.MacAddress
6737                                    , WLAN_REASON_EXPIRATION_CHK, _FALSE);
6738                 break;
6739         case 0x7F:
6740                 switch (minor_cmd) {
6741                 case 0x0:
6742                         RTW_INFO("fwstate=0x%x\n", get_fwstate(pmlmepriv));
6743                         break;
6744                 case 0x01:
6745                         RTW_INFO("auth_alg=0x%x, enc_alg=0x%x, auth_type=0x%x, enc_type=0x%x\n",
6746                                 psecuritypriv->dot11AuthAlgrthm, psecuritypriv->dot11PrivacyAlgrthm,
6747                                 psecuritypriv->ndisauthtype, psecuritypriv->ndisencryptstatus);
6748                         break;
6749                 case 0x02:
6750                         RTW_INFO("pmlmeinfo->state=0x%x\n", pmlmeinfo->state);
6751                         RTW_INFO("DrvBcnEarly=%d\n", pmlmeext->DrvBcnEarly);
6752                         RTW_INFO("DrvBcnTimeOut=%d\n", pmlmeext->DrvBcnTimeOut);
6753                         break;
6754                 case 0x03:
6755                         RTW_INFO("qos_option=%d\n", pmlmepriv->qospriv.qos_option);
6756 #ifdef CONFIG_80211N_HT
6757                         RTW_INFO("ht_option=%d\n", pmlmepriv->htpriv.ht_option);
6758 #endif /* CONFIG_80211N_HT */
6759                         break;
6760                 case 0x04:
6761                         RTW_INFO("cur_ch=%d\n", pmlmeext->cur_channel);
6762                         RTW_INFO("cur_bw=%d\n", pmlmeext->cur_bwmode);
6763                         RTW_INFO("cur_ch_off=%d\n", pmlmeext->cur_ch_offset);
6764
6765                         RTW_INFO("oper_ch=%d\n", rtw_get_oper_ch(padapter));
6766                         RTW_INFO("oper_bw=%d\n", rtw_get_oper_bw(padapter));
6767                         RTW_INFO("oper_ch_offet=%d\n", rtw_get_oper_choffset(padapter));
6768
6769                         break;
6770                 case 0x05:
6771                         psta = rtw_get_stainfo(pstapriv, cur_network->network.MacAddress);
6772                         if (psta) {
6773                                 RTW_INFO("SSID=%s\n", cur_network->network.Ssid.Ssid);
6774                                 RTW_INFO("sta's macaddr:" MAC_FMT "\n", MAC_ARG(psta->hwaddr));
6775                                 RTW_INFO("cur_channel=%d, cur_bwmode=%d, cur_ch_offset=%d\n", pmlmeext->cur_channel, pmlmeext->cur_bwmode, pmlmeext->cur_ch_offset);
6776                                 RTW_INFO("rtsen=%d, cts2slef=%d\n", psta->rtsen, psta->cts2self);
6777                                 RTW_INFO("state=0x%x, aid=%d, macid=%d, raid=%d\n", psta->state, psta->aid, psta->mac_id, psta->raid);
6778 #ifdef CONFIG_80211N_HT
6779                                 RTW_INFO("qos_en=%d, ht_en=%d, init_rate=%d\n", psta->qos_option, psta->htpriv.ht_option, psta->init_rate);
6780                                 RTW_INFO("bwmode=%d, ch_offset=%d, sgi_20m=%d,sgi_40m=%d\n", psta->bw_mode, psta->htpriv.ch_offset, psta->htpriv.sgi_20m, psta->htpriv.sgi_40m);
6781                                 RTW_INFO("ampdu_enable = %d\n", psta->htpriv.ampdu_enable);
6782                                 RTW_INFO("agg_enable_bitmap=%x, candidate_tid_bitmap=%x\n", psta->htpriv.agg_enable_bitmap, psta->htpriv.candidate_tid_bitmap);
6783 #endif /* CONFIG_80211N_HT */
6784
6785                                 sta_rx_reorder_ctl_dump(RTW_DBGDUMP, psta);
6786                         } else
6787                                 RTW_INFO("can't get sta's macaddr, cur_network's macaddr:" MAC_FMT "\n", MAC_ARG(cur_network->network.MacAddress));
6788                         break;
6789                 case 0x06: {
6790                 }
6791                         break;
6792                 case 0x07:
6793                         RTW_INFO("bSurpriseRemoved=%s, bDriverStopped=%s\n"
6794                                 , rtw_is_surprise_removed(padapter) ? "True" : "False"
6795                                 , rtw_is_drv_stopped(padapter) ? "True" : "False");
6796                         break;
6797                 case 0x08: {
6798                         struct xmit_priv *pxmitpriv = &padapter->xmitpriv;
6799                         struct recv_priv  *precvpriv = &padapter->recvpriv;
6800
6801                         RTW_INFO("free_xmitbuf_cnt=%d, free_xmitframe_cnt=%d"
6802                                 ", free_xmit_extbuf_cnt=%d, free_xframe_ext_cnt=%d"
6803                                  ", free_recvframe_cnt=%d\n",
6804                                 pxmitpriv->free_xmitbuf_cnt, pxmitpriv->free_xmitframe_cnt,
6805                                 pxmitpriv->free_xmit_extbuf_cnt, pxmitpriv->free_xframe_ext_cnt,
6806                                  precvpriv->free_recvframe_cnt);
6807 #ifdef CONFIG_USB_HCI
6808                         RTW_INFO("rx_urb_pending_cn=%d\n", ATOMIC_READ(&(precvpriv->rx_pending_cnt)));
6809 #endif
6810                 }
6811                         break;
6812                 case 0x09: {
6813                         int i;
6814                         _list   *plist, *phead;
6815
6816 #ifdef CONFIG_AP_MODE
6817                         RTW_INFO("sta_dz_bitmap=0x%x, tim_bitmap=0x%x\n", pstapriv->sta_dz_bitmap, pstapriv->tim_bitmap);
6818 #endif
6819                         _enter_critical_bh(&pstapriv->sta_hash_lock, &irqL);
6820
6821                         for (i = 0; i < NUM_STA; i++) {
6822                                 phead = &(pstapriv->sta_hash[i]);
6823                                 plist = get_next(phead);
6824
6825                                 while ((rtw_end_of_queue_search(phead, plist)) == _FALSE) {
6826                                         psta = LIST_CONTAINOR(plist, struct sta_info, hash_list);
6827
6828                                         plist = get_next(plist);
6829
6830                                         if (extra_arg == psta->aid) {
6831                                                 RTW_INFO("sta's macaddr:" MAC_FMT "\n", MAC_ARG(psta->hwaddr));
6832                                                 RTW_INFO("rtsen=%d, cts2slef=%d\n", psta->rtsen, psta->cts2self);
6833                                                 RTW_INFO("state=0x%x, aid=%d, macid=%d, raid=%d\n", psta->state, psta->aid, psta->mac_id, psta->raid);
6834 #ifdef CONFIG_80211N_HT
6835                                                 RTW_INFO("qos_en=%d, ht_en=%d, init_rate=%d\n", psta->qos_option, psta->htpriv.ht_option, psta->init_rate);
6836                                                 RTW_INFO("bwmode=%d, ch_offset=%d, sgi_20m=%d,sgi_40m=%d\n", psta->bw_mode, psta->htpriv.ch_offset, psta->htpriv.sgi_20m,
6837                                                         psta->htpriv.sgi_40m);
6838                                                 RTW_INFO("ampdu_enable = %d\n", psta->htpriv.ampdu_enable);
6839                                                 RTW_INFO("agg_enable_bitmap=%x, candidate_tid_bitmap=%x\n", psta->htpriv.agg_enable_bitmap, psta->htpriv.candidate_tid_bitmap);
6840 #endif /* CONFIG_80211N_HT */
6841
6842 #ifdef CONFIG_AP_MODE
6843                                                 RTW_INFO("capability=0x%x\n", psta->capability);
6844                                                 RTW_INFO("flags=0x%x\n", psta->flags);
6845                                                 RTW_INFO("wpa_psk=0x%x\n", psta->wpa_psk);
6846                                                 RTW_INFO("wpa2_group_cipher=0x%x\n", psta->wpa2_group_cipher);
6847                                                 RTW_INFO("wpa2_pairwise_cipher=0x%x\n", psta->wpa2_pairwise_cipher);
6848                                                 RTW_INFO("qos_info=0x%x\n", psta->qos_info);
6849 #endif
6850                                                 RTW_INFO("dot118021XPrivacy=0x%x\n", psta->dot118021XPrivacy);
6851
6852                                                 sta_rx_reorder_ctl_dump(RTW_DBGDUMP, psta);
6853                                         }
6854
6855                                 }
6856                         }
6857
6858                         _exit_critical_bh(&pstapriv->sta_hash_lock, &irqL);
6859
6860                 }
6861                         break;
6862
6863                 case 0x0b: { /* Enable=1, Disable=0 driver control vrtl_carrier_sense. */
6864                         /* u8 driver_vcs_en; */ /* Enable=1, Disable=0 driver control vrtl_carrier_sense. */
6865                         /* u8 driver_vcs_type; */ /* force 0:disable VCS, 1:RTS-CTS, 2:CTS-to-self when vcs_en=1. */
6866
6867                         if (arg == 0) {
6868                                 RTW_INFO("disable driver ctrl vcs\n");
6869                                 padapter->driver_vcs_en = 0;
6870                         } else if (arg == 1) {
6871                                 RTW_INFO("enable driver ctrl vcs = %d\n", extra_arg);
6872                                 padapter->driver_vcs_en = 1;
6873
6874                                 if (extra_arg > 2)
6875                                         padapter->driver_vcs_type = 1;
6876                                 else
6877                                         padapter->driver_vcs_type = extra_arg;
6878                         }
6879                 }
6880                         break;
6881                 case 0x0c: { /* dump rx/tx packet */
6882                         if (arg == 0) {
6883                                 RTW_INFO("dump rx packet (%d)\n", extra_arg);
6884                                 /* pHalData->bDumpRxPkt =extra_arg;                                              */
6885                                 rtw_hal_set_def_var(padapter, HAL_DEF_DBG_DUMP_RXPKT, &(extra_arg));
6886                         } else if (arg == 1) {
6887                                 RTW_INFO("dump tx packet (%d)\n", extra_arg);
6888                                 rtw_hal_set_def_var(padapter, HAL_DEF_DBG_DUMP_TXPKT, &(extra_arg));
6889                         }
6890                 }
6891                         break;
6892                 case 0x0e: {
6893                         if (arg == 0) {
6894                                 RTW_INFO("disable driver ctrl rx_ampdu_factor\n");
6895                                 padapter->driver_rx_ampdu_factor = 0xFF;
6896                         } else if (arg == 1) {
6897
6898                                 RTW_INFO("enable driver ctrl rx_ampdu_factor = %d\n", extra_arg);
6899
6900                                 if (extra_arg > 0x03)
6901                                         padapter->driver_rx_ampdu_factor = 0xFF;
6902                                 else
6903                                         padapter->driver_rx_ampdu_factor = extra_arg;
6904                         }
6905                 }
6906                         break;
6907                 #ifdef DBG_CONFIG_ERROR_DETECT
6908                 case 0x0f: {
6909                         if (extra_arg == 0) {
6910                                 RTW_INFO("###### silent reset test.......#####\n");
6911                                 rtw_hal_sreset_reset(padapter);
6912                         } else {
6913                                 HAL_DATA_TYPE   *pHalData = GET_HAL_DATA(padapter);
6914                                 struct sreset_priv *psrtpriv = &pHalData->srestpriv;
6915                                 psrtpriv->dbg_trigger_point = extra_arg;
6916                         }
6917
6918                 }
6919                         break;
6920                 case 0x15: {
6921                         struct pwrctrl_priv *pwrpriv = adapter_to_pwrctl(padapter);
6922                         RTW_INFO("==>silent resete cnts:%d\n", pwrpriv->ips_enter_cnts);
6923                 }
6924                         break;
6925
6926                 #endif
6927
6928                 case 0x10: /* driver version display */
6929                         dump_drv_version(RTW_DBGDUMP);
6930                         break;
6931                 case 0x11: { /* dump linked status */
6932                         int pre_mode;
6933                         pre_mode = padapter->bLinkInfoDump;
6934                         /* linked_info_dump(padapter,extra_arg); */
6935                         if (extra_arg == 1 || (extra_arg == 0 && pre_mode == 1)) /* not consider pwr_saving 0: */
6936                                 padapter->bLinkInfoDump = extra_arg;
6937
6938                         else if ((extra_arg == 2) || (extra_arg == 0 && pre_mode == 2)) { /* consider power_saving */
6939                                 /* RTW_INFO("linked_info_dump =%s\n", (padapter->bLinkInfoDump)?"enable":"disable") */
6940                                 linked_info_dump(padapter, extra_arg);
6941                         }
6942
6943
6944
6945                 }
6946                         break;
6947 #ifdef CONFIG_80211N_HT
6948                 case 0x12: { /* set rx_stbc */
6949                         struct registry_priv    *pregpriv = &padapter->registrypriv;
6950                         /* 0: disable, bit(0):enable 2.4g, bit(1):enable 5g, 0x3: enable both 2.4g and 5g */
6951                         /* default is set to enable 2.4GHZ for IOT issue with bufflao's AP at 5GHZ */
6952                         if (pregpriv && (extra_arg == 0 || extra_arg == 1 || extra_arg == 2 || extra_arg == 3)) {
6953                                 pregpriv->rx_stbc = extra_arg;
6954                                 RTW_INFO("set rx_stbc=%d\n", pregpriv->rx_stbc);
6955                         } else
6956                                 RTW_INFO("get rx_stbc=%d\n", pregpriv->rx_stbc);
6957
6958                 }
6959                         break;
6960                 case 0x13: { /* set ampdu_enable */
6961                         struct registry_priv    *pregpriv = &padapter->registrypriv;
6962                         /* 0: disable, 0x1:enable */
6963                         if (pregpriv && extra_arg < 2) {
6964                                 pregpriv->ampdu_enable = extra_arg;
6965                                 RTW_INFO("set ampdu_enable=%d\n", pregpriv->ampdu_enable);
6966                         } else
6967                                 RTW_INFO("get ampdu_enable=%d\n", pregpriv->ampdu_enable);
6968
6969                 }
6970                         break;
6971 #endif
6972                 case 0x14: { /* get wifi_spec */
6973                         struct registry_priv    *pregpriv = &padapter->registrypriv;
6974                         RTW_INFO("get wifi_spec=%d\n", pregpriv->wifi_spec);
6975
6976                 }
6977                         break;
6978
6979 #ifdef DBG_FIXED_CHAN
6980                 case 0x17: {
6981                         struct mlme_ext_priv    *pmlmeext = &(padapter->mlmeextpriv);
6982                         printk("===>  Fixed channel to %d\n", extra_arg);
6983                         pmlmeext->fixed_chan = extra_arg;
6984
6985                 }
6986                         break;
6987 #endif
6988 #ifdef CONFIG_80211N_HT
6989                 case 0x19: {
6990                         struct registry_priv    *pregistrypriv = &padapter->registrypriv;
6991                         /* extra_arg : */
6992                         /* BIT0: Enable VHT LDPC Rx, BIT1: Enable VHT LDPC Tx, */
6993                         /* BIT4: Enable HT LDPC Rx, BIT5: Enable HT LDPC Tx */
6994                         if (arg == 0) {
6995                                 RTW_INFO("driver disable LDPC\n");
6996                                 pregistrypriv->ldpc_cap = 0x00;
6997                         } else if (arg == 1) {
6998                                 RTW_INFO("driver set LDPC cap = 0x%x\n", extra_arg);
6999                                 pregistrypriv->ldpc_cap = (u8)(extra_arg & 0x33);
7000                         }
7001                 }
7002                         break;
7003                 case 0x1a: {
7004                         struct registry_priv    *pregistrypriv = &padapter->registrypriv;
7005                         /* extra_arg : */
7006                         /* BIT0: Enable VHT STBC Rx, BIT1: Enable VHT STBC Tx, */
7007                         /* BIT4: Enable HT STBC Rx, BIT5: Enable HT STBC Tx */
7008                         if (arg == 0) {
7009                                 RTW_INFO("driver disable STBC\n");
7010                                 pregistrypriv->stbc_cap = 0x00;
7011                         } else if (arg == 1) {
7012                                 RTW_INFO("driver set STBC cap = 0x%x\n", extra_arg);
7013                                 pregistrypriv->stbc_cap = (u8)(extra_arg & 0x33);
7014                         }
7015                 }
7016                         break;
7017 #endif /* CONFIG_80211N_HT */
7018                 case 0x1b: {
7019                         struct registry_priv    *pregistrypriv = &padapter->registrypriv;
7020
7021                         if (arg == 0) {
7022                                 RTW_INFO("disable driver ctrl max_rx_rate, reset to default_rate_set\n");
7023                                 init_mlme_default_rate_set(padapter);
7024 #ifdef CONFIG_80211N_HT
7025                                 pregistrypriv->ht_enable = (u8)rtw_ht_enable;
7026 #endif /* CONFIG_80211N_HT */
7027                         } else if (arg == 1) {
7028
7029                                 int i;
7030                                 u8 max_rx_rate;
7031
7032                                 RTW_INFO("enable driver ctrl max_rx_rate = 0x%x\n", extra_arg);
7033
7034                                 max_rx_rate = (u8)extra_arg;
7035
7036                                 if (max_rx_rate < 0xc) { /* max_rx_rate < MSC0->B or G -> disable HT */
7037 #ifdef CONFIG_80211N_HT
7038                                         pregistrypriv->ht_enable = 0;
7039 #endif /* CONFIG_80211N_HT */
7040                                         for (i = 0; i < NumRates; i++) {
7041                                                 if (pmlmeext->datarate[i] > max_rx_rate)
7042                                                         pmlmeext->datarate[i] = 0xff;
7043                                         }
7044
7045                                 }
7046 #ifdef CONFIG_80211N_HT
7047                                 else if (max_rx_rate < 0x1c) { /* mcs0~mcs15 */
7048                                         u32 mcs_bitmap = 0x0;
7049
7050                                         for (i = 0; i < ((max_rx_rate + 1) - 0xc); i++)
7051                                                 mcs_bitmap |= BIT(i);
7052
7053                                         set_mcs_rate_by_mask(pmlmeext->default_supported_mcs_set, mcs_bitmap);
7054                                 }
7055 #endif /* CONFIG_80211N_HT                                                       */
7056                         }
7057                 }
7058                         break;
7059                 case 0x1c: { /* enable/disable driver control AMPDU Density for peer sta's rx */
7060                         if (arg == 0) {
7061                                 RTW_INFO("disable driver ctrl ampdu density\n");
7062                                 padapter->driver_ampdu_spacing = 0xFF;
7063                         } else if (arg == 1) {
7064
7065                                 RTW_INFO("enable driver ctrl ampdu density = %d\n", extra_arg);
7066
7067                                 if (extra_arg > 0x07)
7068                                         padapter->driver_ampdu_spacing = 0xFF;
7069                                 else
7070                                         padapter->driver_ampdu_spacing = extra_arg;
7071                         }
7072                 }
7073                         break;
7074 #ifdef CONFIG_BACKGROUND_NOISE_MONITOR
7075                 case 0x1e: {
7076                         HAL_DATA_TYPE   *pHalData = GET_HAL_DATA(padapter);
7077                         struct PHY_DM_STRUCT *pDM_Odm = &pHalData->odmpriv;
7078                         u8 chan = rtw_get_oper_ch(padapter);
7079                         RTW_INFO("===========================================\n");
7080                         odm_inband_noise_monitor(pDM_Odm, _TRUE, 0x1e, 100);
7081                         RTW_INFO("channel(%d),noise_a = %d, noise_b = %d , noise_all:%d\n",
7082                                 chan, pDM_Odm->noise_level.noise[ODM_RF_PATH_A],
7083                                 pDM_Odm->noise_level.noise[ODM_RF_PATH_B],
7084                                  pDM_Odm->noise_level.noise_all);
7085                         RTW_INFO("===========================================\n");
7086
7087                 }
7088                         break;
7089 #endif
7090
7091
7092 #if defined(CONFIG_SDIO_HCI) && defined(CONFIG_SDIO_INDIRECT_ACCESS) && defined(DBG_SDIO_INDIRECT_ACCESS)
7093                 case 0x1f:
7094                         {
7095                                 int i, j = 0, test_cnts = 0;
7096                                 static u8 test_code = 0x5A;
7097                                 static u32 data_misatch_cnt = 0, d_acc_err_cnt = 0;
7098
7099                                 u32 d_data, i_data;
7100                                 u32 imr;
7101
7102                                 test_cnts = extra_arg;
7103                                 for (i = 0; i < test_cnts; i++) {
7104                                         if (RTW_CANNOT_IO(padapter))
7105                                                 break;
7106
7107                                         rtw_write8(padapter, 0x07, test_code);
7108
7109                                         d_data = rtw_read32(padapter, 0x04);
7110                                         imr =  rtw_read32(padapter, 0x10250014);
7111                                         rtw_write32(padapter, 0x10250014, 0);
7112                                         rtw_msleep_os(50);
7113
7114                                         i_data = rtw_sd_iread32(padapter, 0x04);
7115
7116                                         rtw_write32(padapter, 0x10250014, imr);
7117
7118                                         if (d_data != i_data) {
7119                                                 data_misatch_cnt++;
7120                                                 RTW_ERR("d_data :0x%08x, i_data : 0x%08x\n", d_data, i_data);
7121                                         }
7122
7123                                         if (test_code != (i_data >> 24)) {
7124                                                 d_acc_err_cnt++;
7125                                                 rtw_write8(padapter, 0x07, 0xAA);
7126                                                 RTW_ERR("test_code :0x%02x, i_data : 0x%08x\n", test_code, i_data);
7127                                         }
7128                                         if ((j++) == 100) {
7129                                                 rtw_msleep_os(2000);
7130                                                 RTW_INFO(" Indirect access testing..........%d/%d\n", i, test_cnts);
7131                                                 j = 0;
7132                                         }
7133
7134                                         test_code = ~test_code;
7135                                         rtw_msleep_os(50);
7136                                 }
7137                                 RTW_INFO("========Indirect access test=========\n");
7138                                 RTW_INFO(" test_cnts = %d\n", test_cnts);
7139                                 RTW_INFO(" direct & indirect read32 data missatch cnts = %d\n", data_misatch_cnt);
7140                                 RTW_INFO(" indirect rdata is not equal to wdata cnts = %d\n", d_acc_err_cnt);
7141                                 RTW_INFO("========Indirect access test=========\n\n");
7142                                 data_misatch_cnt = d_acc_err_cnt = 0;
7143
7144                         }
7145                         break;
7146 #endif
7147                 case 0x20:
7148                         {
7149                                 if (arg == 0xAA) {
7150                                         u8 page_offset, page_num;
7151                                         u32 page_size = 0;
7152                                         u8 *buffer = NULL;
7153                                         u32 buf_size = 0;
7154
7155                                         page_offset = (u8)(extra_arg >> 16);
7156                                         page_num = (u8)(extra_arg & 0xFF);
7157                                         rtw_dump_rsvd_page(RTW_DBGDUMP, padapter, page_offset, page_num);
7158                                 }
7159 #ifdef CONFIG_SUPPORT_FIFO_DUMP
7160                                 else {
7161                                         u8 fifo_sel;
7162                                         u32 addr, size;
7163                                         u8 *buffer = NULL;
7164
7165                                         fifo_sel = (u8)(arg & 0x0F);
7166                                         addr = (extra_arg >> 16) & 0xFFFF;
7167                                         size = extra_arg & 0xFFFF;
7168
7169                                         RTW_INFO("fifo_sel:%d, start_addr:0x%04x, size:%d\n", fifo_sel, addr, size);
7170                                         if (size) {
7171                                                 size = RND4(size);
7172                                                 buffer = rtw_zvmalloc(size);
7173                                                 if (NULL == buffer)
7174                                                         size = 0;
7175                                         }
7176                                         rtw_halmac_dump_fifo(adapter_to_dvobj(padapter), fifo_sel, addr, size, buffer);
7177                                         if (buffer)
7178                                                 rtw_vmfree(buffer, size);
7179                                 }
7180 #endif
7181                         }
7182                         break;
7183
7184                 case 0x23: {
7185                         RTW_INFO("turn %s the bNotifyChannelChange Variable\n", (extra_arg == 1) ? "on" : "off");
7186                         padapter->bNotifyChannelChange = extra_arg;
7187                         break;
7188                 }
7189                 case 0x24: {
7190 #ifdef CONFIG_P2P
7191                         RTW_INFO("turn %s the bShowGetP2PState Variable\n", (extra_arg == 1) ? "on" : "off");
7192                         padapter->bShowGetP2PState = extra_arg;
7193 #endif /* CONFIG_P2P */
7194                         break;
7195                 }
7196 #ifdef CONFIG_GPIO_API
7197                 case 0x25: { /* Get GPIO register */
7198                         /*
7199                         * dbg 0x7f250000 [gpio_num], Get gpio value, gpio_num:0~7
7200                         */
7201
7202                         u8 value;
7203                         RTW_INFO("Read GPIO Value  extra_arg = %d\n", extra_arg);
7204                         value = rtw_hal_get_gpio(padapter, extra_arg);
7205                         RTW_INFO("Read GPIO Value = %d\n", value);
7206                         break;
7207                 }
7208                 case 0x26: { /* Set GPIO direction */
7209
7210                         /* dbg 0x7f26000x [y], Set gpio direction,
7211                         * x: gpio_num,4~7  y: indicate direction, 0~1
7212                         */
7213
7214                         int value;
7215                         RTW_INFO("Set GPIO Direction! arg = %d ,extra_arg=%d\n", arg , extra_arg);
7216                         value = rtw_hal_config_gpio(padapter, arg, extra_arg);
7217                         RTW_INFO("Set GPIO Direction %s\n", (value == -1) ? "Fail!!!" : "Success");
7218                         break;
7219                 }
7220                 case 0x27: { /* Set GPIO output direction value */
7221                         /*
7222                         * dbg 0x7f27000x [y], Set gpio output direction value,
7223                         * x: gpio_num,4~7  y: indicate direction, 0~1
7224                         */
7225
7226                         int value;
7227                         RTW_INFO("Set GPIO Value! arg = %d ,extra_arg=%d\n", arg , extra_arg);
7228                         value = rtw_hal_set_gpio_output_value(padapter, arg, extra_arg);
7229                         RTW_INFO("Set GPIO Value %s\n", (value == -1) ? "Fail!!!" : "Success");
7230                         break;
7231                 }
7232 #endif
7233 #ifdef DBG_CMD_QUEUE
7234                 case 0x28: {
7235                         dump_cmd_id = extra_arg;
7236                         RTW_INFO("dump_cmd_id:%d\n", dump_cmd_id);
7237                 }
7238                         break;
7239 #endif /* DBG_CMD_QUEUE */
7240                 case 0xaa: {
7241                         if ((extra_arg & 0x7F) > 0x3F)
7242                                 extra_arg = 0xFF;
7243                         RTW_INFO("chang data rate to :0x%02x\n", extra_arg);
7244                         padapter->fix_rate = extra_arg;
7245                 }
7246                         break;
7247                 case 0xdd: { /* registers dump , 0 for mac reg,1 for bb reg, 2 for rf reg */
7248                         if (extra_arg == 0)
7249                                 mac_reg_dump(RTW_DBGDUMP, padapter);
7250                         else if (extra_arg == 1)
7251                                 bb_reg_dump(RTW_DBGDUMP, padapter);
7252                         else if (extra_arg == 2)
7253                                 rf_reg_dump(RTW_DBGDUMP, padapter);
7254                         else if (extra_arg == 11)
7255                                 bb_reg_dump_ex(RTW_DBGDUMP, padapter);
7256                 }
7257                         break;
7258
7259                 case 0xee: {
7260                         RTW_INFO(" === please control /proc  to trun on/off PHYDM func ===\n");
7261                 }
7262                         break;
7263
7264                 case 0xfd:
7265                         rtw_write8(padapter, 0xc50, arg);
7266                         RTW_INFO("wr(0xc50)=0x%x\n", rtw_read8(padapter, 0xc50));
7267                         rtw_write8(padapter, 0xc58, arg);
7268                         RTW_INFO("wr(0xc58)=0x%x\n", rtw_read8(padapter, 0xc58));
7269                         break;
7270                 case 0xfe:
7271                         RTW_INFO("rd(0xc50)=0x%x\n", rtw_read8(padapter, 0xc50));
7272                         RTW_INFO("rd(0xc58)=0x%x\n", rtw_read8(padapter, 0xc58));
7273                         break;
7274                 case 0xff: {
7275                         RTW_INFO("dbg(0x210)=0x%x\n", rtw_read32(padapter, 0x210));
7276                         RTW_INFO("dbg(0x608)=0x%x\n", rtw_read32(padapter, 0x608));
7277                         RTW_INFO("dbg(0x280)=0x%x\n", rtw_read32(padapter, 0x280));
7278                         RTW_INFO("dbg(0x284)=0x%x\n", rtw_read32(padapter, 0x284));
7279                         RTW_INFO("dbg(0x288)=0x%x\n", rtw_read32(padapter, 0x288));
7280
7281                         RTW_INFO("dbg(0x664)=0x%x\n", rtw_read32(padapter, 0x664));
7282
7283
7284                         RTW_INFO("\n");
7285
7286                         RTW_INFO("dbg(0x430)=0x%x\n", rtw_read32(padapter, 0x430));
7287                         RTW_INFO("dbg(0x438)=0x%x\n", rtw_read32(padapter, 0x438));
7288
7289                         RTW_INFO("dbg(0x440)=0x%x\n", rtw_read32(padapter, 0x440));
7290
7291                         RTW_INFO("dbg(0x458)=0x%x\n", rtw_read32(padapter, 0x458));
7292
7293                         RTW_INFO("dbg(0x484)=0x%x\n", rtw_read32(padapter, 0x484));
7294                         RTW_INFO("dbg(0x488)=0x%x\n", rtw_read32(padapter, 0x488));
7295
7296                         RTW_INFO("dbg(0x444)=0x%x\n", rtw_read32(padapter, 0x444));
7297                         RTW_INFO("dbg(0x448)=0x%x\n", rtw_read32(padapter, 0x448));
7298                         RTW_INFO("dbg(0x44c)=0x%x\n", rtw_read32(padapter, 0x44c));
7299                         RTW_INFO("dbg(0x450)=0x%x\n", rtw_read32(padapter, 0x450));
7300                 }
7301                         break;
7302                 }
7303                 break;
7304         default:
7305                 RTW_INFO("error dbg cmd!\n");
7306                 break;
7307         }
7308
7309
7310         return ret;
7311
7312 }
7313
7314 static int wpa_set_param(struct net_device *dev, u8 name, u32 value)
7315 {
7316         uint ret = 0;
7317         u32 flags;
7318         _adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
7319
7320         switch (name) {
7321         case IEEE_PARAM_WPA_ENABLED:
7322
7323                 padapter->securitypriv.dot11AuthAlgrthm = dot11AuthAlgrthm_8021X; /* 802.1x */
7324
7325                 /* ret = ieee80211_wpa_enable(ieee, value); */
7326
7327                 switch ((value) & 0xff) {
7328                 case 1: /* WPA */
7329                         padapter->securitypriv.ndisauthtype = Ndis802_11AuthModeWPAPSK; /* WPA_PSK */
7330                         padapter->securitypriv.ndisencryptstatus = Ndis802_11Encryption2Enabled;
7331                         break;
7332                 case 2: /* WPA2 */
7333                         padapter->securitypriv.ndisauthtype = Ndis802_11AuthModeWPA2PSK; /* WPA2_PSK */
7334                         padapter->securitypriv.ndisencryptstatus = Ndis802_11Encryption3Enabled;
7335                         break;
7336                 }
7337
7338
7339                 break;
7340
7341         case IEEE_PARAM_TKIP_COUNTERMEASURES:
7342                 /* ieee->tkip_countermeasures=value; */
7343                 break;
7344
7345         case IEEE_PARAM_DROP_UNENCRYPTED: {
7346                 /* HACK:
7347                  *
7348                  * wpa_supplicant calls set_wpa_enabled when the driver
7349                  * is loaded and unloaded, regardless of if WPA is being
7350                  * used.  No other calls are made which can be used to
7351                  * determine if encryption will be used or not prior to
7352                  * association being expected.  If encryption is not being
7353                  * used, drop_unencrypted is set to false, else true -- we
7354                  * can use this to determine if the CAP_PRIVACY_ON bit should
7355                  * be set.
7356                  */
7357
7358 #if 0
7359                 struct ieee80211_security sec = {
7360                         .flags = SEC_ENABLED,
7361                         .enabled = value,
7362                 };
7363                 ieee->drop_unencrypted = value;
7364                 /* We only change SEC_LEVEL for open mode. Others
7365                  * are set by ipw_wpa_set_encryption.
7366                  */
7367                 if (!value) {
7368                         sec.flags |= SEC_LEVEL;
7369                         sec.level = SEC_LEVEL_0;
7370                 } else {
7371                         sec.flags |= SEC_LEVEL;
7372                         sec.level = SEC_LEVEL_1;
7373                 }
7374                 if (ieee->set_security)
7375                         ieee->set_security(ieee->dev, &sec);
7376 #endif
7377                 break;
7378
7379         }
7380         case IEEE_PARAM_PRIVACY_INVOKED:
7381
7382                 /* ieee->privacy_invoked=value; */
7383
7384                 break;
7385
7386         case IEEE_PARAM_AUTH_ALGS:
7387
7388                 ret = wpa_set_auth_algs(dev, value);
7389
7390                 break;
7391
7392         case IEEE_PARAM_IEEE_802_1X:
7393
7394                 /* ieee->ieee802_1x=value;               */
7395
7396                 break;
7397
7398         case IEEE_PARAM_WPAX_SELECT:
7399
7400                 /* added for WPA2 mixed mode */
7401                 /*RTW_WARN("------------------------>wpax value = %x\n", value);*/
7402                 /*
7403                 spin_lock_irqsave(&ieee->wpax_suitlist_lock,flags);
7404                 ieee->wpax_type_set = 1;
7405                 ieee->wpax_type_notify = value;
7406                 spin_unlock_irqrestore(&ieee->wpax_suitlist_lock,flags);
7407                 */
7408
7409                 break;
7410
7411         default:
7412
7413
7414
7415                 ret = -EOPNOTSUPP;
7416
7417
7418                 break;
7419
7420         }
7421
7422         return ret;
7423
7424 }
7425
7426 static int wpa_mlme(struct net_device *dev, u32 command, u32 reason)
7427 {
7428         int ret = 0;
7429         _adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
7430
7431         switch (command) {
7432         case IEEE_MLME_STA_DEAUTH:
7433
7434                 if (!rtw_set_802_11_disassociate(padapter))
7435                         ret = -1;
7436
7437                 break;
7438
7439         case IEEE_MLME_STA_DISASSOC:
7440
7441                 if (!rtw_set_802_11_disassociate(padapter))
7442                         ret = -1;
7443
7444                 break;
7445
7446         default:
7447                 ret = -EOPNOTSUPP;
7448                 break;
7449         }
7450
7451         return ret;
7452
7453 }
7454
7455 static int wpa_supplicant_ioctl(struct net_device *dev, struct iw_point *p)
7456 {
7457         struct ieee_param *param;
7458         uint ret = 0;
7459
7460         /* down(&ieee->wx_sem);  */
7461
7462         if (p->length < sizeof(struct ieee_param) || !p->pointer) {
7463                 ret = -EINVAL;
7464                 goto out;
7465         }
7466
7467         param = (struct ieee_param *)rtw_malloc(p->length);
7468         if (param == NULL) {
7469                 ret = -ENOMEM;
7470                 goto out;
7471         }
7472
7473         if (copy_from_user(param, p->pointer, p->length)) {
7474                 rtw_mfree((u8 *)param, p->length);
7475                 ret = -EFAULT;
7476                 goto out;
7477         }
7478
7479         switch (param->cmd) {
7480
7481         case IEEE_CMD_SET_WPA_PARAM:
7482                 ret = wpa_set_param(dev, param->u.wpa_param.name, param->u.wpa_param.value);
7483                 break;
7484
7485         case IEEE_CMD_SET_WPA_IE:
7486                 /* ret = wpa_set_wpa_ie(dev, param, p->length); */
7487                 ret =  rtw_set_wpa_ie((_adapter *)rtw_netdev_priv(dev), (char *)param->u.wpa_ie.data, (u16)param->u.wpa_ie.len);
7488                 break;
7489
7490         case IEEE_CMD_SET_ENCRYPTION:
7491                 ret = wpa_set_encryption(dev, param, p->length);
7492                 break;
7493
7494         case IEEE_CMD_MLME:
7495                 ret = wpa_mlme(dev, param->u.mlme.command, param->u.mlme.reason_code);
7496                 break;
7497
7498         default:
7499                 RTW_INFO("Unknown WPA supplicant request: %d\n", param->cmd);
7500                 ret = -EOPNOTSUPP;
7501                 break;
7502
7503         }
7504
7505         if (ret == 0 && copy_to_user(p->pointer, param, p->length))
7506                 ret = -EFAULT;
7507
7508         rtw_mfree((u8 *)param, p->length);
7509
7510 out:
7511
7512         /* up(&ieee->wx_sem); */
7513
7514         return ret;
7515
7516 }
7517
7518 #ifdef CONFIG_AP_MODE
7519 static int rtw_set_encryption(struct net_device *dev, struct ieee_param *param, u32 param_len)
7520 {
7521         int ret = 0;
7522         u32 wep_key_idx, wep_key_len, wep_total_len;
7523         NDIS_802_11_WEP *pwep = NULL;
7524         struct sta_info *psta = NULL, *pbcmc_sta = NULL;
7525         _adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
7526         struct mlme_priv        *pmlmepriv = &padapter->mlmepriv;
7527         struct security_priv *psecuritypriv = &(padapter->securitypriv);
7528         struct sta_priv *pstapriv = &padapter->stapriv;
7529
7530         RTW_INFO("%s\n", __FUNCTION__);
7531
7532         param->u.crypt.err = 0;
7533         param->u.crypt.alg[IEEE_CRYPT_ALG_NAME_LEN - 1] = '\0';
7534
7535         /* sizeof(struct ieee_param) = 64 bytes; */
7536         /* if (param_len !=  (u32) ((u8 *) param->u.crypt.key - (u8 *) param) + param->u.crypt.key_len) */
7537         if (param_len !=  sizeof(struct ieee_param) + param->u.crypt.key_len) {
7538                 ret =  -EINVAL;
7539                 goto exit;
7540         }
7541
7542         if (param->sta_addr[0] == 0xff && param->sta_addr[1] == 0xff &&
7543             param->sta_addr[2] == 0xff && param->sta_addr[3] == 0xff &&
7544             param->sta_addr[4] == 0xff && param->sta_addr[5] == 0xff) {
7545                 if (param->u.crypt.idx >= WEP_KEYS
7546 #ifdef CONFIG_IEEE80211W
7547                     && param->u.crypt.idx > BIP_MAX_KEYID
7548 #endif /* CONFIG_IEEE80211W */
7549                    ) {
7550                         ret = -EINVAL;
7551                         goto exit;
7552                 }
7553         } else {
7554                 psta = rtw_get_stainfo(pstapriv, param->sta_addr);
7555                 if (!psta) {
7556                         /* ret = -EINVAL; */
7557                         RTW_INFO("rtw_set_encryption(), sta has already been removed or never been added\n");
7558                         goto exit;
7559                 }
7560         }
7561
7562         if (strcmp(param->u.crypt.alg, "none") == 0 && (psta == NULL)) {
7563                 /* todo:clear default encryption keys */
7564
7565                 psecuritypriv->dot11AuthAlgrthm = dot11AuthAlgrthm_Open;
7566                 psecuritypriv->ndisencryptstatus = Ndis802_11EncryptionDisabled;
7567                 psecuritypriv->dot11PrivacyAlgrthm = _NO_PRIVACY_;
7568                 psecuritypriv->dot118021XGrpPrivacy = _NO_PRIVACY_;
7569
7570                 RTW_INFO("clear default encryption keys, keyid=%d\n", param->u.crypt.idx);
7571
7572                 goto exit;
7573         }
7574
7575
7576         if (strcmp(param->u.crypt.alg, "WEP") == 0 && (psta == NULL)) {
7577                 RTW_INFO("r871x_set_encryption, crypt.alg = WEP\n");
7578
7579                 wep_key_idx = param->u.crypt.idx;
7580                 wep_key_len = param->u.crypt.key_len;
7581
7582                 RTW_INFO("r871x_set_encryption, wep_key_idx=%d, len=%d\n", wep_key_idx, wep_key_len);
7583
7584                 if ((wep_key_idx >= WEP_KEYS) || (wep_key_len <= 0)) {
7585                         ret = -EINVAL;
7586                         goto exit;
7587                 }
7588
7589
7590                 if (wep_key_len > 0) {
7591                         wep_key_len = wep_key_len <= 5 ? 5 : 13;
7592                         wep_total_len = wep_key_len + FIELD_OFFSET(NDIS_802_11_WEP, KeyMaterial);
7593                         pwep = (NDIS_802_11_WEP *)rtw_malloc(wep_total_len);
7594                         if (pwep == NULL) {
7595                                 RTW_INFO(" r871x_set_encryption: pwep allocate fail !!!\n");
7596                                 goto exit;
7597                         }
7598
7599                         _rtw_memset(pwep, 0, wep_total_len);
7600
7601                         pwep->KeyLength = wep_key_len;
7602                         pwep->Length = wep_total_len;
7603
7604                 }
7605
7606                 pwep->KeyIndex = wep_key_idx;
7607
7608                 _rtw_memcpy(pwep->KeyMaterial,  param->u.crypt.key, pwep->KeyLength);
7609
7610                 if (param->u.crypt.set_tx) {
7611                         RTW_INFO("wep, set_tx=1\n");
7612
7613                         psecuritypriv->dot11AuthAlgrthm = dot11AuthAlgrthm_Auto;
7614                         psecuritypriv->ndisencryptstatus = Ndis802_11Encryption1Enabled;
7615                         psecuritypriv->dot11PrivacyAlgrthm = _WEP40_;
7616                         psecuritypriv->dot118021XGrpPrivacy = _WEP40_;
7617
7618                         if (pwep->KeyLength == 13) {
7619                                 psecuritypriv->dot11PrivacyAlgrthm = _WEP104_;
7620                                 psecuritypriv->dot118021XGrpPrivacy = _WEP104_;
7621                         }
7622
7623
7624                         psecuritypriv->dot11PrivacyKeyIndex = wep_key_idx;
7625
7626                         _rtw_memcpy(&(psecuritypriv->dot11DefKey[wep_key_idx].skey[0]), pwep->KeyMaterial, pwep->KeyLength);
7627
7628                         psecuritypriv->dot11DefKeylen[wep_key_idx] = pwep->KeyLength;
7629
7630                         rtw_ap_set_wep_key(padapter, pwep->KeyMaterial, pwep->KeyLength, wep_key_idx, 1);
7631                 } else {
7632                         RTW_INFO("wep, set_tx=0\n");
7633
7634                         /* don't update "psecuritypriv->dot11PrivacyAlgrthm" and  */
7635                         /* "psecuritypriv->dot11PrivacyKeyIndex=keyid", but can rtw_set_key to cam */
7636
7637                         _rtw_memcpy(&(psecuritypriv->dot11DefKey[wep_key_idx].skey[0]), pwep->KeyMaterial, pwep->KeyLength);
7638
7639                         psecuritypriv->dot11DefKeylen[wep_key_idx] = pwep->KeyLength;
7640
7641                         rtw_ap_set_wep_key(padapter, pwep->KeyMaterial, pwep->KeyLength, wep_key_idx, 0);
7642                 }
7643
7644                 goto exit;
7645
7646         }
7647
7648
7649         if (!psta && check_fwstate(pmlmepriv, WIFI_AP_STATE)) /*  */ { /* group key */
7650                 if (param->u.crypt.set_tx == 1) {
7651                         if (strcmp(param->u.crypt.alg, "WEP") == 0) {
7652                                 RTW_INFO("%s, set group_key, WEP\n", __FUNCTION__);
7653
7654                                 _rtw_memcpy(psecuritypriv->dot118021XGrpKey[param->u.crypt.idx].skey,  param->u.crypt.key, (param->u.crypt.key_len > 16 ? 16 : param->u.crypt.key_len));
7655
7656                                 psecuritypriv->dot118021XGrpPrivacy = _WEP40_;
7657                                 if (param->u.crypt.key_len == 13)
7658                                         psecuritypriv->dot118021XGrpPrivacy = _WEP104_;
7659
7660                         } else if (strcmp(param->u.crypt.alg, "TKIP") == 0) {
7661                                 RTW_INFO("%s, set group_key, TKIP\n", __FUNCTION__);
7662
7663                                 psecuritypriv->dot118021XGrpPrivacy = _TKIP_;
7664
7665                                 _rtw_memcpy(psecuritypriv->dot118021XGrpKey[param->u.crypt.idx].skey,  param->u.crypt.key, (param->u.crypt.key_len > 16 ? 16 : param->u.crypt.key_len));
7666
7667                                 /* DEBUG_ERR("set key length :param->u.crypt.key_len=%d\n", param->u.crypt.key_len); */
7668                                 /* set mic key */
7669                                 _rtw_memcpy(psecuritypriv->dot118021XGrptxmickey[param->u.crypt.idx].skey, &(param->u.crypt.key[16]), 8);
7670                                 _rtw_memcpy(psecuritypriv->dot118021XGrprxmickey[param->u.crypt.idx].skey, &(param->u.crypt.key[24]), 8);
7671
7672                                 psecuritypriv->busetkipkey = _TRUE;
7673
7674                         } else if (strcmp(param->u.crypt.alg, "CCMP") == 0) {
7675                                 RTW_INFO("%s, set group_key, CCMP\n", __FUNCTION__);
7676
7677                                 psecuritypriv->dot118021XGrpPrivacy = _AES_;
7678
7679                                 _rtw_memcpy(psecuritypriv->dot118021XGrpKey[param->u.crypt.idx].skey,  param->u.crypt.key, (param->u.crypt.key_len > 16 ? 16 : param->u.crypt.key_len));
7680                         }
7681 #ifdef CONFIG_IEEE80211W
7682                         else if (strcmp(param->u.crypt.alg, "BIP") == 0) {
7683                                 int no;
7684
7685                                 RTW_INFO("BIP key_len=%d , index=%d\n", param->u.crypt.key_len, param->u.crypt.idx);
7686                                 /* save the IGTK key, length 16 bytes */
7687                                 _rtw_memcpy(padapter->securitypriv.dot11wBIPKey[param->u.crypt.idx].skey, param->u.crypt.key, (param->u.crypt.key_len > 16 ? 16 : param->u.crypt.key_len));
7688                                 /* RTW_INFO("IGTK key below:\n");
7689                                 for(no=0;no<16;no++)
7690                                         printk(" %02x ", padapter->securitypriv.dot11wBIPKey[param->u.crypt.idx].skey[no]);
7691                                 RTW_INFO("\n"); */
7692                                 padapter->securitypriv.dot11wBIPKeyid = param->u.crypt.idx;
7693                                 padapter->securitypriv.binstallBIPkey = _TRUE;
7694                                 RTW_INFO(" ~~~~set sta key:IGKT\n");
7695                                 goto exit;
7696                         }
7697 #endif /* CONFIG_IEEE80211W */
7698                         else {
7699                                 RTW_INFO("%s, set group_key, none\n", __FUNCTION__);
7700
7701                                 psecuritypriv->dot118021XGrpPrivacy = _NO_PRIVACY_;
7702                         }
7703
7704                         psecuritypriv->dot118021XGrpKeyid = param->u.crypt.idx;
7705
7706                         psecuritypriv->binstallGrpkey = _TRUE;
7707
7708                         psecuritypriv->dot11PrivacyAlgrthm = psecuritypriv->dot118021XGrpPrivacy;/* !!! */
7709
7710                         rtw_ap_set_group_key(padapter, param->u.crypt.key, psecuritypriv->dot118021XGrpPrivacy, param->u.crypt.idx);
7711
7712                         pbcmc_sta = rtw_get_bcmc_stainfo(padapter);
7713                         if (pbcmc_sta) {
7714                                 pbcmc_sta->ieee8021x_blocked = _FALSE;
7715                                 pbcmc_sta->dot118021XPrivacy = psecuritypriv->dot118021XGrpPrivacy; /* rx will use bmc_sta's dot118021XPrivacy                   */
7716                         }
7717
7718                 }
7719
7720                 goto exit;
7721
7722         }
7723
7724         if (psecuritypriv->dot11AuthAlgrthm == dot11AuthAlgrthm_8021X && psta) { /* psk/802_1x */
7725                 if (check_fwstate(pmlmepriv, WIFI_AP_STATE)) {
7726                         if (param->u.crypt.set_tx == 1) {
7727                                 _rtw_memcpy(psta->dot118021x_UncstKey.skey,  param->u.crypt.key, (param->u.crypt.key_len > 16 ? 16 : param->u.crypt.key_len));
7728
7729                                 if (strcmp(param->u.crypt.alg, "WEP") == 0) {
7730                                         RTW_INFO("%s, set pairwise key, WEP\n", __FUNCTION__);
7731
7732                                         psta->dot118021XPrivacy = _WEP40_;
7733                                         if (param->u.crypt.key_len == 13)
7734                                                 psta->dot118021XPrivacy = _WEP104_;
7735                                 } else if (strcmp(param->u.crypt.alg, "TKIP") == 0) {
7736                                         RTW_INFO("%s, set pairwise key, TKIP\n", __FUNCTION__);
7737
7738                                         psta->dot118021XPrivacy = _TKIP_;
7739
7740                                         /* DEBUG_ERR("set key length :param->u.crypt.key_len=%d\n", param->u.crypt.key_len); */
7741                                         /* set mic key */
7742                                         _rtw_memcpy(psta->dot11tkiptxmickey.skey, &(param->u.crypt.key[16]), 8);
7743                                         _rtw_memcpy(psta->dot11tkiprxmickey.skey, &(param->u.crypt.key[24]), 8);
7744
7745                                         psecuritypriv->busetkipkey = _TRUE;
7746
7747                                 } else if (strcmp(param->u.crypt.alg, "CCMP") == 0) {
7748
7749                                         RTW_INFO("%s, set pairwise key, CCMP\n", __FUNCTION__);
7750
7751                                         psta->dot118021XPrivacy = _AES_;
7752                                 } else {
7753                                         RTW_INFO("%s, set pairwise key, none\n", __FUNCTION__);
7754
7755                                         psta->dot118021XPrivacy = _NO_PRIVACY_;
7756                                 }
7757
7758                                 rtw_ap_set_pairwise_key(padapter, psta);
7759
7760                                 psta->ieee8021x_blocked = _FALSE;
7761
7762                                 psta->bpairwise_key_installed = _TRUE;
7763
7764                         } else { /* group key??? */
7765                                 if (strcmp(param->u.crypt.alg, "WEP") == 0) {
7766                                         _rtw_memcpy(psecuritypriv->dot118021XGrpKey[param->u.crypt.idx].skey,  param->u.crypt.key, (param->u.crypt.key_len > 16 ? 16 : param->u.crypt.key_len));
7767
7768                                         psecuritypriv->dot118021XGrpPrivacy = _WEP40_;
7769                                         if (param->u.crypt.key_len == 13)
7770                                                 psecuritypriv->dot118021XGrpPrivacy = _WEP104_;
7771                                 } else if (strcmp(param->u.crypt.alg, "TKIP") == 0) {
7772                                         psecuritypriv->dot118021XGrpPrivacy = _TKIP_;
7773
7774                                         _rtw_memcpy(psecuritypriv->dot118021XGrpKey[param->u.crypt.idx].skey,  param->u.crypt.key, (param->u.crypt.key_len > 16 ? 16 : param->u.crypt.key_len));
7775
7776                                         /* DEBUG_ERR("set key length :param->u.crypt.key_len=%d\n", param->u.crypt.key_len); */
7777                                         /* set mic key */
7778                                         _rtw_memcpy(psecuritypriv->dot118021XGrptxmickey[param->u.crypt.idx].skey, &(param->u.crypt.key[16]), 8);
7779                                         _rtw_memcpy(psecuritypriv->dot118021XGrprxmickey[param->u.crypt.idx].skey, &(param->u.crypt.key[24]), 8);
7780
7781                                         psecuritypriv->busetkipkey = _TRUE;
7782
7783                                 } else if (strcmp(param->u.crypt.alg, "CCMP") == 0) {
7784                                         psecuritypriv->dot118021XGrpPrivacy = _AES_;
7785
7786                                         _rtw_memcpy(psecuritypriv->dot118021XGrpKey[param->u.crypt.idx].skey,  param->u.crypt.key, (param->u.crypt.key_len > 16 ? 16 : param->u.crypt.key_len));
7787                                 } else
7788                                         psecuritypriv->dot118021XGrpPrivacy = _NO_PRIVACY_;
7789
7790                                 psecuritypriv->dot118021XGrpKeyid = param->u.crypt.idx;
7791
7792                                 psecuritypriv->binstallGrpkey = _TRUE;
7793
7794                                 psecuritypriv->dot11PrivacyAlgrthm = psecuritypriv->dot118021XGrpPrivacy;/* !!! */
7795
7796                                 rtw_ap_set_group_key(padapter, param->u.crypt.key, psecuritypriv->dot118021XGrpPrivacy, param->u.crypt.idx);
7797
7798                                 pbcmc_sta = rtw_get_bcmc_stainfo(padapter);
7799                                 if (pbcmc_sta) {
7800                                         pbcmc_sta->ieee8021x_blocked = _FALSE;
7801                                         pbcmc_sta->dot118021XPrivacy = psecuritypriv->dot118021XGrpPrivacy; /* rx will use bmc_sta's dot118021XPrivacy                   */
7802                                 }
7803
7804                         }
7805
7806                 }
7807
7808         }
7809
7810 exit:
7811
7812         if (pwep)
7813                 rtw_mfree((u8 *)pwep, wep_total_len);
7814
7815         return ret;
7816
7817 }
7818
7819 static int rtw_set_beacon(struct net_device *dev, struct ieee_param *param, int len)
7820 {
7821         int ret = 0;
7822         _adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
7823         struct mlme_priv *pmlmepriv = &(padapter->mlmepriv);
7824         struct sta_priv *pstapriv = &padapter->stapriv;
7825         unsigned char *pbuf = param->u.bcn_ie.buf;
7826
7827
7828         RTW_INFO("%s, len=%d\n", __FUNCTION__, len);
7829
7830         if (check_fwstate(pmlmepriv, WIFI_AP_STATE) != _TRUE)
7831                 return -EINVAL;
7832
7833         _rtw_memcpy(&pstapriv->max_num_sta, param->u.bcn_ie.reserved, 2);
7834
7835         if ((pstapriv->max_num_sta > NUM_STA) || (pstapriv->max_num_sta <= 0))
7836                 pstapriv->max_num_sta = NUM_STA;
7837
7838
7839         if (rtw_check_beacon_data(padapter, pbuf, (len - 12 - 2)) == _SUCCESS) /* 12 = param header, 2:no packed */
7840                 ret = 0;
7841         else
7842                 ret = -EINVAL;
7843
7844
7845         return ret;
7846
7847 }
7848
7849 static int rtw_hostapd_sta_flush(struct net_device *dev)
7850 {
7851         /* _irqL irqL; */
7852         /* _list        *phead, *plist; */
7853         int ret = 0;
7854         /* struct sta_info *psta = NULL; */
7855         _adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
7856         /* struct sta_priv *pstapriv = &padapter->stapriv; */
7857
7858         RTW_INFO("%s\n", __FUNCTION__);
7859
7860         flush_all_cam_entry(padapter);  /* clear CAM */
7861
7862         ret = rtw_sta_flush(padapter, _TRUE);
7863
7864         return ret;
7865
7866 }
7867
7868 static int rtw_add_sta(struct net_device *dev, struct ieee_param *param)
7869 {
7870         _irqL irqL;
7871         int ret = 0;
7872         struct sta_info *psta = NULL;
7873         _adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
7874         struct mlme_priv *pmlmepriv = &(padapter->mlmepriv);
7875         struct sta_priv *pstapriv = &padapter->stapriv;
7876
7877         RTW_INFO("rtw_add_sta(aid=%d)=" MAC_FMT "\n", param->u.add_sta.aid, MAC_ARG(param->sta_addr));
7878
7879         if (check_fwstate(pmlmepriv, (_FW_LINKED | WIFI_AP_STATE)) != _TRUE)
7880                 return -EINVAL;
7881
7882         if (param->sta_addr[0] == 0xff && param->sta_addr[1] == 0xff &&
7883             param->sta_addr[2] == 0xff && param->sta_addr[3] == 0xff &&
7884             param->sta_addr[4] == 0xff && param->sta_addr[5] == 0xff)
7885                 return -EINVAL;
7886
7887 #if 0
7888         psta = rtw_get_stainfo(pstapriv, param->sta_addr);
7889         if (psta) {
7890                 RTW_INFO("rtw_add_sta(), free has been added psta=%p\n", psta);
7891                 /* _enter_critical_bh(&(pstapriv->sta_hash_lock), &irqL);                */
7892                 rtw_free_stainfo(padapter,  psta);
7893                 /* _exit_critical_bh(&(pstapriv->sta_hash_lock), &irqL); */
7894
7895                 psta = NULL;
7896         }
7897 #endif
7898         /* psta = rtw_alloc_stainfo(pstapriv, param->sta_addr); */
7899         psta = rtw_get_stainfo(pstapriv, param->sta_addr);
7900         if (psta) {
7901                 int flags = param->u.add_sta.flags;
7902
7903                 /* RTW_INFO("rtw_add_sta(), init sta's variables, psta=%p\n", psta); */
7904
7905                 psta->aid = param->u.add_sta.aid;/* aid=1~2007 */
7906
7907                 _rtw_memcpy(psta->bssrateset, param->u.add_sta.tx_supp_rates, 16);
7908
7909
7910                 /* check wmm cap. */
7911                 if (WLAN_STA_WME & flags)
7912                         psta->qos_option = 1;
7913                 else
7914                         psta->qos_option = 0;
7915
7916                 if (pmlmepriv->qospriv.qos_option == 0)
7917                         psta->qos_option = 0;
7918
7919
7920 #ifdef CONFIG_80211N_HT
7921                 /* chec 802.11n ht cap. */
7922                 if (WLAN_STA_HT & flags) {
7923                         psta->htpriv.ht_option = _TRUE;
7924                         psta->qos_option = 1;
7925                         _rtw_memcpy((void *)&psta->htpriv.ht_cap, (void *)&param->u.add_sta.ht_cap, sizeof(struct rtw_ieee80211_ht_cap));
7926                 } else
7927                         psta->htpriv.ht_option = _FALSE;
7928
7929                 if (pmlmepriv->htpriv.ht_option == _FALSE)
7930                         psta->htpriv.ht_option = _FALSE;
7931 #endif
7932
7933
7934                 update_sta_info_apmode(padapter, psta);
7935
7936
7937         } else
7938                 ret = -ENOMEM;
7939
7940         return ret;
7941
7942 }
7943
7944 static int rtw_del_sta(struct net_device *dev, struct ieee_param *param)
7945 {
7946         _irqL irqL;
7947         int ret = 0;
7948         struct sta_info *psta = NULL;
7949         _adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
7950         struct mlme_priv *pmlmepriv = &(padapter->mlmepriv);
7951         struct sta_priv *pstapriv = &padapter->stapriv;
7952
7953         RTW_INFO("rtw_del_sta=" MAC_FMT "\n", MAC_ARG(param->sta_addr));
7954
7955         if (check_fwstate(pmlmepriv, (_FW_LINKED | WIFI_AP_STATE)) != _TRUE)
7956                 return -EINVAL;
7957
7958         if (param->sta_addr[0] == 0xff && param->sta_addr[1] == 0xff &&
7959             param->sta_addr[2] == 0xff && param->sta_addr[3] == 0xff &&
7960             param->sta_addr[4] == 0xff && param->sta_addr[5] == 0xff)
7961                 return -EINVAL;
7962
7963         psta = rtw_get_stainfo(pstapriv, param->sta_addr);
7964         if (psta) {
7965                 u8 updated = _FALSE;
7966
7967                 /* RTW_INFO("free psta=%p, aid=%d\n", psta, psta->aid); */
7968
7969                 _enter_critical_bh(&pstapriv->asoc_list_lock, &irqL);
7970                 if (rtw_is_list_empty(&psta->asoc_list) == _FALSE) {
7971                         rtw_list_delete(&psta->asoc_list);
7972                         pstapriv->asoc_list_cnt--;
7973                         updated = ap_free_sta(padapter, psta, _TRUE, WLAN_REASON_DEAUTH_LEAVING, _TRUE);
7974
7975                 }
7976                 _exit_critical_bh(&pstapriv->asoc_list_lock, &irqL);
7977
7978                 associated_clients_update(padapter, updated, STA_INFO_UPDATE_ALL);
7979
7980                 psta = NULL;
7981
7982         } else {
7983                 RTW_INFO("rtw_del_sta(), sta has already been removed or never been added\n");
7984
7985                 /* ret = -1; */
7986         }
7987
7988
7989         return ret;
7990
7991 }
7992
7993 static int rtw_ioctl_get_sta_data(struct net_device *dev, struct ieee_param *param, int len)
7994 {
7995         int ret = 0;
7996         struct sta_info *psta = NULL;
7997         _adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
7998         struct mlme_priv *pmlmepriv = &(padapter->mlmepriv);
7999         struct sta_priv *pstapriv = &padapter->stapriv;
8000         struct ieee_param_ex *param_ex = (struct ieee_param_ex *)param;
8001         struct sta_data *psta_data = (struct sta_data *)param_ex->data;
8002
8003         RTW_INFO("rtw_ioctl_get_sta_info, sta_addr: " MAC_FMT "\n", MAC_ARG(param_ex->sta_addr));
8004
8005         if (check_fwstate(pmlmepriv, (_FW_LINKED | WIFI_AP_STATE)) != _TRUE)
8006                 return -EINVAL;
8007
8008         if (param_ex->sta_addr[0] == 0xff && param_ex->sta_addr[1] == 0xff &&
8009             param_ex->sta_addr[2] == 0xff && param_ex->sta_addr[3] == 0xff &&
8010             param_ex->sta_addr[4] == 0xff && param_ex->sta_addr[5] == 0xff)
8011                 return -EINVAL;
8012
8013         psta = rtw_get_stainfo(pstapriv, param_ex->sta_addr);
8014         if (psta) {
8015 #if 0
8016                 struct {
8017                         u16 aid;
8018                         u16 capability;
8019                         int flags;
8020                         u32 sta_set;
8021                         u8 tx_supp_rates[16];
8022                         u32 tx_supp_rates_len;
8023                         struct rtw_ieee80211_ht_cap ht_cap;
8024                         u64     rx_pkts;
8025                         u64     rx_bytes;
8026                         u64     rx_drops;
8027                         u64     tx_pkts;
8028                         u64     tx_bytes;
8029                         u64     tx_drops;
8030                 } get_sta;
8031 #endif
8032                 psta_data->aid = (u16)psta->aid;
8033                 psta_data->capability = psta->capability;
8034                 psta_data->flags = psta->flags;
8035
8036                 /*
8037                                 nonerp_set : BIT(0)
8038                                 no_short_slot_time_set : BIT(1)
8039                                 no_short_preamble_set : BIT(2)
8040                                 no_ht_gf_set : BIT(3)
8041                                 no_ht_set : BIT(4)
8042                                 ht_20mhz_set : BIT(5)
8043                 */
8044
8045                 psta_data->sta_set = ((psta->nonerp_set) |
8046                                       (psta->no_short_slot_time_set << 1) |
8047                                       (psta->no_short_preamble_set << 2) |
8048                                       (psta->no_ht_gf_set << 3) |
8049                                       (psta->no_ht_set << 4) |
8050                                       (psta->ht_20mhz_set << 5));
8051
8052                 psta_data->tx_supp_rates_len =  psta->bssratelen;
8053                 _rtw_memcpy(psta_data->tx_supp_rates, psta->bssrateset, psta->bssratelen);
8054 #ifdef CONFIG_80211N_HT
8055                 _rtw_memcpy(&psta_data->ht_cap, &psta->htpriv.ht_cap, sizeof(struct rtw_ieee80211_ht_cap));
8056 #endif /* CONFIG_80211N_HT */
8057                 psta_data->rx_pkts = psta->sta_stats.rx_data_pkts;
8058                 psta_data->rx_bytes = psta->sta_stats.rx_bytes;
8059                 psta_data->rx_drops = psta->sta_stats.rx_drops;
8060
8061                 psta_data->tx_pkts = psta->sta_stats.tx_pkts;
8062                 psta_data->tx_bytes = psta->sta_stats.tx_bytes;
8063                 psta_data->tx_drops = psta->sta_stats.tx_drops;
8064
8065
8066         } else
8067                 ret = -1;
8068
8069         return ret;
8070
8071 }
8072
8073 static int rtw_get_sta_wpaie(struct net_device *dev, struct ieee_param *param)
8074 {
8075         int ret = 0;
8076         struct sta_info *psta = NULL;
8077         _adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
8078         struct mlme_priv *pmlmepriv = &(padapter->mlmepriv);
8079         struct sta_priv *pstapriv = &padapter->stapriv;
8080
8081         RTW_INFO("rtw_get_sta_wpaie, sta_addr: " MAC_FMT "\n", MAC_ARG(param->sta_addr));
8082
8083         if (check_fwstate(pmlmepriv, (_FW_LINKED | WIFI_AP_STATE)) != _TRUE)
8084                 return -EINVAL;
8085
8086         if (param->sta_addr[0] == 0xff && param->sta_addr[1] == 0xff &&
8087             param->sta_addr[2] == 0xff && param->sta_addr[3] == 0xff &&
8088             param->sta_addr[4] == 0xff && param->sta_addr[5] == 0xff)
8089                 return -EINVAL;
8090
8091         psta = rtw_get_stainfo(pstapriv, param->sta_addr);
8092         if (psta) {
8093                 if ((psta->wpa_ie[0] == WLAN_EID_RSN) || (psta->wpa_ie[0] == WLAN_EID_GENERIC)) {
8094                         int wpa_ie_len;
8095                         int copy_len;
8096
8097                         wpa_ie_len = psta->wpa_ie[1];
8098
8099                         copy_len = ((wpa_ie_len + 2) > sizeof(psta->wpa_ie)) ? (sizeof(psta->wpa_ie)) : (wpa_ie_len + 2);
8100
8101                         param->u.wpa_ie.len = copy_len;
8102
8103                         _rtw_memcpy(param->u.wpa_ie.reserved, psta->wpa_ie, copy_len);
8104                 } else {
8105                         /* ret = -1; */
8106                         RTW_INFO("sta's wpa_ie is NONE\n");
8107                 }
8108         } else
8109                 ret = -1;
8110
8111         return ret;
8112
8113 }
8114
8115 static int rtw_set_wps_beacon(struct net_device *dev, struct ieee_param *param, int len)
8116 {
8117         int ret = 0;
8118         unsigned char wps_oui[4] = {0x0, 0x50, 0xf2, 0x04};
8119         _adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
8120         struct mlme_priv *pmlmepriv = &(padapter->mlmepriv);
8121         struct mlme_ext_priv    *pmlmeext = &(padapter->mlmeextpriv);
8122         struct mlme_ext_info    *pmlmeinfo = &(pmlmeext->mlmext_info);
8123         int ie_len;
8124
8125         RTW_INFO("%s, len=%d\n", __FUNCTION__, len);
8126
8127         if (check_fwstate(pmlmepriv, WIFI_AP_STATE) != _TRUE)
8128                 return -EINVAL;
8129
8130         ie_len = len - 12 - 2; /* 12 = param header, 2:no packed */
8131
8132
8133         if (pmlmepriv->wps_beacon_ie) {
8134                 rtw_mfree(pmlmepriv->wps_beacon_ie, pmlmepriv->wps_beacon_ie_len);
8135                 pmlmepriv->wps_beacon_ie = NULL;
8136         }
8137
8138         if (ie_len > 0) {
8139                 pmlmepriv->wps_beacon_ie = rtw_malloc(ie_len);
8140                 pmlmepriv->wps_beacon_ie_len = ie_len;
8141                 if (pmlmepriv->wps_beacon_ie == NULL) {
8142                         RTW_INFO("%s()-%d: rtw_malloc() ERROR!\n", __FUNCTION__, __LINE__);
8143                         return -EINVAL;
8144                 }
8145
8146                 _rtw_memcpy(pmlmepriv->wps_beacon_ie, param->u.bcn_ie.buf, ie_len);
8147
8148                 update_beacon(padapter, _VENDOR_SPECIFIC_IE_, wps_oui, _TRUE);
8149
8150                 pmlmeext->bstart_bss = _TRUE;
8151
8152         }
8153
8154
8155         return ret;
8156
8157 }
8158
8159 static int rtw_set_wps_probe_resp(struct net_device *dev, struct ieee_param *param, int len)
8160 {
8161         int ret = 0;
8162         _adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
8163         struct mlme_priv *pmlmepriv = &(padapter->mlmepriv);
8164         int ie_len;
8165
8166         RTW_INFO("%s, len=%d\n", __FUNCTION__, len);
8167
8168         if (check_fwstate(pmlmepriv, WIFI_AP_STATE) != _TRUE)
8169                 return -EINVAL;
8170
8171         ie_len = len - 12 - 2; /* 12 = param header, 2:no packed */
8172
8173
8174         if (pmlmepriv->wps_probe_resp_ie) {
8175                 rtw_mfree(pmlmepriv->wps_probe_resp_ie, pmlmepriv->wps_probe_resp_ie_len);
8176                 pmlmepriv->wps_probe_resp_ie = NULL;
8177         }
8178
8179         if (ie_len > 0) {
8180                 pmlmepriv->wps_probe_resp_ie = rtw_malloc(ie_len);
8181                 pmlmepriv->wps_probe_resp_ie_len = ie_len;
8182                 if (pmlmepriv->wps_probe_resp_ie == NULL) {
8183                         RTW_INFO("%s()-%d: rtw_malloc() ERROR!\n", __FUNCTION__, __LINE__);
8184                         return -EINVAL;
8185                 }
8186                 _rtw_memcpy(pmlmepriv->wps_probe_resp_ie, param->u.bcn_ie.buf, ie_len);
8187         }
8188
8189
8190         return ret;
8191
8192 }
8193
8194 static int rtw_set_wps_assoc_resp(struct net_device *dev, struct ieee_param *param, int len)
8195 {
8196         int ret = 0;
8197         _adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
8198         struct mlme_priv *pmlmepriv = &(padapter->mlmepriv);
8199         int ie_len;
8200
8201         RTW_INFO("%s, len=%d\n", __FUNCTION__, len);
8202
8203         if (check_fwstate(pmlmepriv, WIFI_AP_STATE) != _TRUE)
8204                 return -EINVAL;
8205
8206         ie_len = len - 12 - 2; /* 12 = param header, 2:no packed */
8207
8208
8209         if (pmlmepriv->wps_assoc_resp_ie) {
8210                 rtw_mfree(pmlmepriv->wps_assoc_resp_ie, pmlmepriv->wps_assoc_resp_ie_len);
8211                 pmlmepriv->wps_assoc_resp_ie = NULL;
8212         }
8213
8214         if (ie_len > 0) {
8215                 pmlmepriv->wps_assoc_resp_ie = rtw_malloc(ie_len);
8216                 pmlmepriv->wps_assoc_resp_ie_len = ie_len;
8217                 if (pmlmepriv->wps_assoc_resp_ie == NULL) {
8218                         RTW_INFO("%s()-%d: rtw_malloc() ERROR!\n", __FUNCTION__, __LINE__);
8219                         return -EINVAL;
8220                 }
8221
8222                 _rtw_memcpy(pmlmepriv->wps_assoc_resp_ie, param->u.bcn_ie.buf, ie_len);
8223         }
8224
8225
8226         return ret;
8227
8228 }
8229
8230 static int rtw_set_hidden_ssid(struct net_device *dev, struct ieee_param *param, int len)
8231 {
8232         int ret = 0;
8233         _adapter *adapter = (_adapter *)rtw_netdev_priv(dev);
8234         struct mlme_priv *mlmepriv = &(adapter->mlmepriv);
8235         struct mlme_ext_priv    *mlmeext = &(adapter->mlmeextpriv);
8236         struct mlme_ext_info    *mlmeinfo = &(mlmeext->mlmext_info);
8237         int ie_len;
8238         u8 *ssid_ie;
8239         char ssid[NDIS_802_11_LENGTH_SSID + 1];
8240         sint ssid_len = 0;
8241         u8 ignore_broadcast_ssid;
8242
8243         if (check_fwstate(mlmepriv, WIFI_AP_STATE) != _TRUE)
8244                 return -EPERM;
8245
8246         if (param->u.bcn_ie.reserved[0] != 0xea)
8247                 return -EINVAL;
8248
8249         mlmeinfo->hidden_ssid_mode = ignore_broadcast_ssid = param->u.bcn_ie.reserved[1];
8250
8251         ie_len = len - 12 - 2; /* 12 = param header, 2:no packed */
8252         ssid_ie = rtw_get_ie(param->u.bcn_ie.buf,  WLAN_EID_SSID, &ssid_len, ie_len);
8253
8254         if (ssid_ie && ssid_len > 0 && ssid_len <= NDIS_802_11_LENGTH_SSID) {
8255                 WLAN_BSSID_EX *pbss_network = &mlmepriv->cur_network.network;
8256                 WLAN_BSSID_EX *pbss_network_ext = &mlmeinfo->network;
8257
8258                 _rtw_memcpy(ssid, ssid_ie + 2, ssid_len);
8259                 ssid[ssid_len] = 0x0;
8260
8261                 if (0)
8262                         RTW_INFO(FUNC_ADPT_FMT" ssid:(%s,%d), from ie:(%s,%d), (%s,%d)\n", FUNC_ADPT_ARG(adapter),
8263                                 ssid, ssid_len,
8264                                 pbss_network->Ssid.Ssid, pbss_network->Ssid.SsidLength,
8265                                 pbss_network_ext->Ssid.Ssid, pbss_network_ext->Ssid.SsidLength);
8266
8267                 _rtw_memcpy(pbss_network->Ssid.Ssid, (void *)ssid, ssid_len);
8268                 pbss_network->Ssid.SsidLength = ssid_len;
8269                 _rtw_memcpy(pbss_network_ext->Ssid.Ssid, (void *)ssid, ssid_len);
8270                 pbss_network_ext->Ssid.SsidLength = ssid_len;
8271
8272                 if (0)
8273                         RTW_INFO(FUNC_ADPT_FMT" after ssid:(%s,%d), (%s,%d)\n", FUNC_ADPT_ARG(adapter),
8274                                 pbss_network->Ssid.Ssid, pbss_network->Ssid.SsidLength,
8275                                 pbss_network_ext->Ssid.Ssid, pbss_network_ext->Ssid.SsidLength);
8276         }
8277
8278         RTW_INFO(FUNC_ADPT_FMT" ignore_broadcast_ssid:%d, %s,%d\n", FUNC_ADPT_ARG(adapter),
8279                 ignore_broadcast_ssid, ssid, ssid_len);
8280
8281         return ret;
8282 }
8283
8284 #if CONFIG_RTW_MACADDR_ACL
8285 static int rtw_ioctl_acl_remove_sta(struct net_device *dev, struct ieee_param *param, int len)
8286 {
8287         int ret = 0;
8288         _adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
8289         struct mlme_priv *pmlmepriv = &(padapter->mlmepriv);
8290
8291         if (check_fwstate(pmlmepriv, WIFI_AP_STATE) != _TRUE)
8292                 return -EINVAL;
8293
8294         if (param->sta_addr[0] == 0xff && param->sta_addr[1] == 0xff &&
8295             param->sta_addr[2] == 0xff && param->sta_addr[3] == 0xff &&
8296             param->sta_addr[4] == 0xff && param->sta_addr[5] == 0xff)
8297                 return -EINVAL;
8298
8299         ret = rtw_acl_remove_sta(padapter, param->sta_addr);
8300
8301         return ret;
8302
8303 }
8304
8305 static int rtw_ioctl_acl_add_sta(struct net_device *dev, struct ieee_param *param, int len)
8306 {
8307         int ret = 0;
8308         _adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
8309         struct mlme_priv *pmlmepriv = &(padapter->mlmepriv);
8310
8311         if (check_fwstate(pmlmepriv, WIFI_AP_STATE) != _TRUE)
8312                 return -EINVAL;
8313
8314         if (param->sta_addr[0] == 0xff && param->sta_addr[1] == 0xff &&
8315             param->sta_addr[2] == 0xff && param->sta_addr[3] == 0xff &&
8316             param->sta_addr[4] == 0xff && param->sta_addr[5] == 0xff)
8317                 return -EINVAL;
8318
8319         ret = rtw_acl_add_sta(padapter, param->sta_addr);
8320
8321         return ret;
8322
8323 }
8324
8325 static int rtw_ioctl_set_macaddr_acl(struct net_device *dev, struct ieee_param *param, int len)
8326 {
8327         int ret = 0;
8328         _adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
8329         struct mlme_priv *pmlmepriv = &(padapter->mlmepriv);
8330
8331         if (check_fwstate(pmlmepriv, WIFI_AP_STATE) != _TRUE)
8332                 return -EINVAL;
8333
8334         rtw_set_macaddr_acl(padapter, param->u.mlme.command);
8335
8336         return ret;
8337 }
8338 #endif /* CONFIG_RTW_MACADDR_ACL */
8339
8340 static int rtw_hostapd_ioctl(struct net_device *dev, struct iw_point *p)
8341 {
8342         struct ieee_param *param;
8343         int ret = 0;
8344         _adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
8345
8346         /* RTW_INFO("%s\n", __FUNCTION__); */
8347
8348         /*
8349         * this function is expect to call in master mode, which allows no power saving
8350         * so, we just check hw_init_completed
8351         */
8352
8353         if (!rtw_is_hw_init_completed(padapter)) {
8354                 ret = -EPERM;
8355                 goto out;
8356         }
8357
8358
8359         /* if (p->length < sizeof(struct ieee_param) || !p->pointer){ */
8360         if (!p->pointer) {
8361                 ret = -EINVAL;
8362                 goto out;
8363         }
8364
8365         param = (struct ieee_param *)rtw_malloc(p->length);
8366         if (param == NULL) {
8367                 ret = -ENOMEM;
8368                 goto out;
8369         }
8370
8371         if (copy_from_user(param, p->pointer, p->length)) {
8372                 rtw_mfree((u8 *)param, p->length);
8373                 ret = -EFAULT;
8374                 goto out;
8375         }
8376
8377         /* RTW_INFO("%s, cmd=%d\n", __FUNCTION__, param->cmd); */
8378
8379         switch (param->cmd) {
8380         case RTL871X_HOSTAPD_FLUSH:
8381
8382                 ret = rtw_hostapd_sta_flush(dev);
8383
8384                 break;
8385
8386         case RTL871X_HOSTAPD_ADD_STA:
8387
8388                 ret = rtw_add_sta(dev, param);
8389
8390                 break;
8391
8392         case RTL871X_HOSTAPD_REMOVE_STA:
8393
8394                 ret = rtw_del_sta(dev, param);
8395
8396                 break;
8397
8398         case RTL871X_HOSTAPD_SET_BEACON:
8399
8400                 ret = rtw_set_beacon(dev, param, p->length);
8401
8402                 break;
8403
8404         case RTL871X_SET_ENCRYPTION:
8405
8406                 ret = rtw_set_encryption(dev, param, p->length);
8407
8408                 break;
8409
8410         case RTL871X_HOSTAPD_GET_WPAIE_STA:
8411
8412                 ret = rtw_get_sta_wpaie(dev, param);
8413
8414                 break;
8415
8416         case RTL871X_HOSTAPD_SET_WPS_BEACON:
8417
8418                 ret = rtw_set_wps_beacon(dev, param, p->length);
8419
8420                 break;
8421
8422         case RTL871X_HOSTAPD_SET_WPS_PROBE_RESP:
8423
8424                 ret = rtw_set_wps_probe_resp(dev, param, p->length);
8425
8426                 break;
8427
8428         case RTL871X_HOSTAPD_SET_WPS_ASSOC_RESP:
8429
8430                 ret = rtw_set_wps_assoc_resp(dev, param, p->length);
8431
8432                 break;
8433
8434         case RTL871X_HOSTAPD_SET_HIDDEN_SSID:
8435
8436                 ret = rtw_set_hidden_ssid(dev, param, p->length);
8437
8438                 break;
8439
8440         case RTL871X_HOSTAPD_GET_INFO_STA:
8441
8442                 ret = rtw_ioctl_get_sta_data(dev, param, p->length);
8443
8444                 break;
8445
8446 #if CONFIG_RTW_MACADDR_ACL
8447         case RTL871X_HOSTAPD_SET_MACADDR_ACL:
8448                 ret = rtw_ioctl_set_macaddr_acl(dev, param, p->length);
8449                 break;
8450         case RTL871X_HOSTAPD_ACL_ADD_STA:
8451                 ret = rtw_ioctl_acl_add_sta(dev, param, p->length);
8452                 break;
8453         case RTL871X_HOSTAPD_ACL_REMOVE_STA:
8454                 ret = rtw_ioctl_acl_remove_sta(dev, param, p->length);
8455                 break;
8456 #endif /* CONFIG_RTW_MACADDR_ACL */
8457
8458         default:
8459                 RTW_INFO("Unknown hostapd request: %d\n", param->cmd);
8460                 ret = -EOPNOTSUPP;
8461                 break;
8462
8463         }
8464
8465         if (ret == 0 && copy_to_user(p->pointer, param, p->length))
8466                 ret = -EFAULT;
8467
8468
8469         rtw_mfree((u8 *)param, p->length);
8470
8471 out:
8472
8473         return ret;
8474
8475 }
8476 #endif
8477
8478 static int rtw_wx_set_priv(struct net_device *dev,
8479                            struct iw_request_info *info,
8480                            union iwreq_data *awrq,
8481                            char *extra)
8482 {
8483
8484 #ifdef CONFIG_DEBUG_RTW_WX_SET_PRIV
8485         char *ext_dbg;
8486 #endif
8487
8488         int ret = 0;
8489         int len = 0;
8490         char *ext;
8491         int i;
8492
8493         _adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
8494         struct iw_point *dwrq = (struct iw_point *)awrq;
8495
8496         if (dwrq->length == 0)
8497                 return -EFAULT;
8498
8499         len = dwrq->length;
8500         ext = rtw_vmalloc(len);
8501         if (!ext)
8502                 return -ENOMEM;
8503
8504         if (copy_from_user(ext, dwrq->pointer, len)) {
8505                 rtw_vmfree(ext, len);
8506                 return -EFAULT;
8507         }
8508
8509
8510
8511 #ifdef CONFIG_DEBUG_RTW_WX_SET_PRIV
8512         ext_dbg = rtw_vmalloc(len);
8513         if (!ext_dbg) {
8514                 rtw_vmfree(ext, len);
8515                 return -ENOMEM;
8516         }
8517
8518         _rtw_memcpy(ext_dbg, ext, len);
8519 #endif
8520
8521         /* added for wps2.0 @20110524 */
8522         if (dwrq->flags == 0x8766 && len > 8) {
8523                 u32 cp_sz;
8524                 struct mlme_priv *pmlmepriv = &(padapter->mlmepriv);
8525                 u8 *probereq_wpsie = ext;
8526                 int probereq_wpsie_len = len;
8527                 u8 wps_oui[4] = {0x0, 0x50, 0xf2, 0x04};
8528
8529                 if ((_VENDOR_SPECIFIC_IE_ == probereq_wpsie[0]) &&
8530                     (_rtw_memcmp(&probereq_wpsie[2], wps_oui, 4) == _TRUE)) {
8531                         cp_sz = probereq_wpsie_len > MAX_WPS_IE_LEN ? MAX_WPS_IE_LEN : probereq_wpsie_len;
8532
8533                         if (pmlmepriv->wps_probe_req_ie) {
8534                                 u32 free_len = pmlmepriv->wps_probe_req_ie_len;
8535                                 pmlmepriv->wps_probe_req_ie_len = 0;
8536                                 rtw_mfree(pmlmepriv->wps_probe_req_ie, free_len);
8537                                 pmlmepriv->wps_probe_req_ie = NULL;
8538                         }
8539
8540                         pmlmepriv->wps_probe_req_ie = rtw_malloc(cp_sz);
8541                         if (pmlmepriv->wps_probe_req_ie == NULL) {
8542                                 printk("%s()-%d: rtw_malloc() ERROR!\n", __FUNCTION__, __LINE__);
8543                                 ret =  -EINVAL;
8544                                 goto FREE_EXT;
8545
8546                         }
8547
8548                         _rtw_memcpy(pmlmepriv->wps_probe_req_ie, probereq_wpsie, cp_sz);
8549                         pmlmepriv->wps_probe_req_ie_len = cp_sz;
8550
8551                 }
8552
8553                 goto FREE_EXT;
8554
8555         }
8556
8557         if (len >= WEXT_CSCAN_HEADER_SIZE
8558                 && _rtw_memcmp(ext, WEXT_CSCAN_HEADER, WEXT_CSCAN_HEADER_SIZE) == _TRUE
8559         ) {
8560                 ret = rtw_wx_set_scan(dev, info, awrq, ext);
8561                 goto FREE_EXT;
8562         }
8563
8564 #ifdef CONFIG_ANDROID
8565         /* RTW_INFO("rtw_wx_set_priv: %s req=%s\n", dev->name, ext); */
8566
8567         i = rtw_android_cmdstr_to_num(ext);
8568
8569         switch (i) {
8570         case ANDROID_WIFI_CMD_START:
8571                 indicate_wx_custom_event(padapter, "START");
8572                 break;
8573         case ANDROID_WIFI_CMD_STOP:
8574                 indicate_wx_custom_event(padapter, "STOP");
8575                 break;
8576         case ANDROID_WIFI_CMD_RSSI: {
8577                 struct  mlme_priv       *pmlmepriv = &(padapter->mlmepriv);
8578                 struct  wlan_network    *pcur_network = &pmlmepriv->cur_network;
8579
8580                 if (check_fwstate(pmlmepriv, _FW_LINKED) == _TRUE)
8581                         sprintf(ext, "%s rssi %d", pcur_network->network.Ssid.Ssid, padapter->recvpriv.rssi);
8582                 else
8583                         sprintf(ext, "OK");
8584         }
8585                 break;
8586         case ANDROID_WIFI_CMD_LINKSPEED: {
8587                 u16 mbps = rtw_get_cur_max_rate(padapter) / 10;
8588                 sprintf(ext, "LINKSPEED %d", mbps);
8589         }
8590                 break;
8591         case ANDROID_WIFI_CMD_MACADDR:
8592                 sprintf(ext, "MACADDR = " MAC_FMT, MAC_ARG(dev->dev_addr));
8593                 break;
8594         case ANDROID_WIFI_CMD_SCAN_ACTIVE: {
8595                 /* rtw_set_scan_mode(padapter, SCAN_ACTIVE); */
8596                 sprintf(ext, "OK");
8597         }
8598                 break;
8599         case ANDROID_WIFI_CMD_SCAN_PASSIVE: {
8600                 /* rtw_set_scan_mode(padapter, SCAN_PASSIVE); */
8601                 sprintf(ext, "OK");
8602         }
8603                 break;
8604
8605         case ANDROID_WIFI_CMD_COUNTRY: {
8606                 char country_code[10];
8607                 sscanf(ext, "%*s %s", country_code);
8608                 rtw_set_country(padapter, country_code);
8609                 sprintf(ext, "OK");
8610         }
8611                 break;
8612         default:
8613                 #ifdef CONFIG_DEBUG_RTW_WX_SET_PRIV
8614                 RTW_INFO("%s: %s unknowned req=%s\n", __FUNCTION__,
8615                         dev->name, ext_dbg);
8616                 #endif
8617
8618                 sprintf(ext, "OK");
8619
8620         }
8621
8622         if (copy_to_user(dwrq->pointer, ext, min(dwrq->length, (u16)(strlen(ext) + 1))))
8623                 ret = -EFAULT;
8624
8625 #ifdef CONFIG_DEBUG_RTW_WX_SET_PRIV
8626         RTW_INFO("%s: %s req=%s rep=%s dwrq->length=%d, strlen(ext)+1=%d\n", __FUNCTION__,
8627                 dev->name, ext_dbg , ext, dwrq->length, (u16)(strlen(ext) + 1));
8628 #endif
8629 #endif /* end of CONFIG_ANDROID */
8630
8631
8632 FREE_EXT:
8633
8634         rtw_vmfree(ext, len);
8635         #ifdef CONFIG_DEBUG_RTW_WX_SET_PRIV
8636         rtw_vmfree(ext_dbg, len);
8637         #endif
8638
8639         /* RTW_INFO("rtw_wx_set_priv: (SIOCSIWPRIV) %s ret=%d\n",  */
8640         /*              dev->name, ret); */
8641
8642         return ret;
8643
8644 }
8645 #ifdef CONFIG_WOWLAN
8646 static int rtw_wowlan_ctrl(struct net_device *dev,
8647                            struct iw_request_info *info,
8648                            union iwreq_data *wrqu, char *extra)
8649 {
8650         _adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
8651         struct wowlan_ioctl_param poidparam;
8652         struct pwrctrl_priv *pwrctrlpriv = adapter_to_pwrctl(padapter);
8653         struct mlme_priv *pmlmepriv = &padapter->mlmepriv;
8654         struct sta_info *psta = NULL;
8655         int ret = 0;
8656         u32 start_time = rtw_get_current_time();
8657         poidparam.subcode = 0;
8658
8659         RTW_INFO("+rtw_wowlan_ctrl: %s\n", extra);
8660
8661         if (!check_fwstate(pmlmepriv, _FW_LINKED) &&
8662             check_fwstate(pmlmepriv, WIFI_STATION_STATE)) {
8663 #ifdef CONFIG_PNO_SUPPORT
8664                 pwrctrlpriv->wowlan_pno_enable = _TRUE;
8665 #else
8666                 RTW_INFO("[%s] WARNING: Please Connect With AP First!!\n", __func__);
8667                 goto _rtw_wowlan_ctrl_exit_free;
8668 #endif /* CONFIG_PNO_SUPPORT */
8669         }
8670
8671         if (check_fwstate(pmlmepriv, _FW_UNDER_SURVEY))
8672                 rtw_scan_abort(padapter);
8673
8674         if (_rtw_memcmp(extra, "enable", 6))
8675
8676
8677                 rtw_suspend_common(padapter);
8678
8679         else if (_rtw_memcmp(extra, "disable", 7)) {
8680 #ifdef CONFIG_USB_HCI
8681                 RTW_ENABLE_FUNC(padapter, DF_RX_BIT);
8682                 RTW_ENABLE_FUNC(padapter, DF_TX_BIT);
8683 #endif
8684                 rtw_resume_common(padapter);
8685
8686 #ifdef CONFIG_PNO_SUPPORT
8687                 pwrctrlpriv->wowlan_pno_enable = _FALSE;
8688 #endif /* CONFIG_PNO_SUPPORT */
8689
8690         } else {
8691                 RTW_INFO("[%s] Invalid Parameter.\n", __func__);
8692                 goto _rtw_wowlan_ctrl_exit_free;
8693         }
8694         /* mutex_lock(&ioctl_mutex); */
8695 _rtw_wowlan_ctrl_exit_free:
8696         RTW_INFO("-rtw_wowlan_ctrl( subcode = %d)\n", poidparam.subcode);
8697         RTW_PRINT("%s in %d ms\n", __func__,
8698                   rtw_get_passing_time_ms(start_time));
8699 _rtw_wowlan_ctrl_exit:
8700         return ret;
8701 }
8702
8703 /*
8704  * IP filter This pattern if for a frame containing a ip packet:
8705  * AA:AA:AA:AA:AA:AA:BB:BB:BB:BB:BB:BB:CC:CC:DD:-:-:-:-:-:-:-:-:EE:-:-:FF:FF:FF:FF:GG:GG:GG:GG:HH:HH:II:II
8706  *
8707  * A: Ethernet destination address
8708  * B: Ethernet source address
8709  * C: Ethernet protocol type
8710  * D: IP header VER+Hlen, use: 0x45 (4 is for ver 4, 5 is for len 20)
8711  * E: IP protocol
8712  * F: IP source address ( 192.168.0.4: C0:A8:00:2C )
8713  * G: IP destination address ( 192.168.0.4: C0:A8:00:2C )
8714  * H: Source port (1024: 04:00)
8715  * I: Destination port (1024: 04:00)
8716  */
8717
8718 static int rtw_wowlan_set_pattern(struct net_device *dev,
8719                                   struct iw_request_info *info,
8720                                   union iwreq_data *wrqu, char *extra)
8721 {
8722         _adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
8723         struct pwrctrl_priv *pwrpriv = adapter_to_pwrctl(padapter);
8724         struct mlme_priv *pmlmepriv = &padapter->mlmepriv;
8725         struct wowlan_ioctl_param poidparam;
8726         int ret = 0, len = 0, i = 0;
8727         u32 start_time = rtw_get_current_time();
8728         u8 input[wrqu->data.length];
8729         u8 index = 0;
8730
8731         poidparam.subcode = 0;
8732
8733         if (!check_fwstate(pmlmepriv, _FW_LINKED) &&
8734             check_fwstate(pmlmepriv, WIFI_STATION_STATE)) {
8735                 ret = -EFAULT;
8736                 RTW_INFO("Please Connect With AP First!!\n");
8737                 goto _rtw_wowlan_set_pattern_exit;
8738         }
8739
8740         if (wrqu->data.length <= 0) {
8741                 ret = -EFAULT;
8742                 RTW_INFO("ERROR: parameter length <= 0\n");
8743                 goto _rtw_wowlan_set_pattern_exit;
8744         } else {
8745                 /* set pattern */
8746                 if (copy_from_user(input,
8747                                    wrqu->data.pointer, wrqu->data.length))
8748                         return -EFAULT;
8749                 /* leave PS first */
8750                 rtw_ps_deny(padapter, PS_DENY_IOCTL);
8751                 LeaveAllPowerSaveModeDirect(padapter);
8752                 if (strncmp(input, "pattern=", 8) == 0) {
8753                         if (pwrpriv->wowlan_pattern_idx >= MAX_WKFM_CAM_NUM) {
8754                                 RTW_INFO("WARNING: priv-pattern is full(idx: %d)\n",
8755                                          pwrpriv->wowlan_pattern_idx);
8756                                 RTW_INFO("WARNING: please clean priv-pattern first\n");
8757                                 ret = -EINVAL;
8758                                 goto _rtw_wowlan_set_pattern_exit;
8759                         } else {
8760                                 index = pwrpriv->wowlan_pattern_idx;
8761                                 ret = rtw_wowlan_parser_pattern_cmd(input,
8762                                             pwrpriv->patterns[index].content,
8763                                             &pwrpriv->patterns[index].len,
8764                                             pwrpriv->patterns[index].mask);
8765
8766                                 if (ret == _TRUE)
8767                                         pwrpriv->wowlan_pattern_idx++;
8768                         }
8769                 } else if (strncmp(input, "clean", 5) == 0) {
8770                         poidparam.subcode = WOWLAN_PATTERN_CLEAN;
8771                         rtw_hal_set_hwreg(padapter,
8772                                           HW_VAR_WOWLAN, (u8 *)&poidparam);
8773                 } else if (strncmp(input, "show", 4) == 0) {
8774                         rtw_wow_pattern_cam_dump(padapter);
8775                         rtw_wow_pattern_sw_dump(padapter);
8776                 } else {
8777                         RTW_INFO("ERROR: incorrect parameter!\n");
8778                         ret = -EINVAL;
8779                 }
8780                 rtw_ps_deny_cancel(padapter, PS_DENY_IOCTL);
8781         }
8782 _rtw_wowlan_set_pattern_exit:
8783         return ret;
8784 }
8785 #endif /* CONFIG_WOWLAN */
8786
8787 #ifdef CONFIG_AP_WOWLAN
8788 static int rtw_ap_wowlan_ctrl(struct net_device *dev,
8789                               struct iw_request_info *info,
8790                               union iwreq_data *wrqu, char *extra)
8791 {
8792         _adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
8793         struct wowlan_ioctl_param poidparam;
8794         struct pwrctrl_priv *pwrctrlpriv = adapter_to_pwrctl(padapter);
8795         struct mlme_priv *pmlmepriv = &padapter->mlmepriv;
8796         struct sta_info *psta = NULL;
8797         int ret = 0;
8798         u32 start_time = rtw_get_current_time();
8799         poidparam.subcode = 0;
8800
8801         RTW_INFO("+rtw_ap_wowlan_ctrl: %s\n", extra);
8802
8803         if (!check_fwstate(pmlmepriv, WIFI_AP_STATE)) {
8804                 RTW_INFO("[%s] It is not AP mode!!\n", __func__);
8805                 goto _rtw_ap_wowlan_ctrl_exit_free;
8806         }
8807
8808         if (_rtw_memcmp(extra, "enable", 6)) {
8809
8810                 pwrctrlpriv->wowlan_ap_mode = _TRUE;
8811
8812                 rtw_suspend_common(padapter);
8813         } else if (_rtw_memcmp(extra, "disable", 7)) {
8814 #ifdef CONFIG_USB_HCI
8815                 RTW_ENABLE_FUNC(padapter, DF_RX_BIT);
8816                 RTW_ENABLE_FUNC(padapter, DF_TX_BIT);
8817 #endif
8818                 rtw_resume_common(padapter);
8819         } else {
8820                 RTW_INFO("[%s] Invalid Parameter.\n", __func__);
8821                 goto _rtw_ap_wowlan_ctrl_exit_free;
8822         }
8823         /* mutex_lock(&ioctl_mutex); */
8824 _rtw_ap_wowlan_ctrl_exit_free:
8825         RTW_INFO("-rtw_ap_wowlan_ctrl( subcode = %d)\n", poidparam.subcode);
8826         RTW_PRINT("%s in %d ms\n", __func__,
8827                   rtw_get_passing_time_ms(start_time));
8828 _rtw_ap_wowlan_ctrl_exit:
8829         return ret;
8830 }
8831 #endif /* CONFIG_AP_WOWLAN */
8832
8833 static int rtw_pm_set(struct net_device *dev,
8834                       struct iw_request_info *info,
8835                       union iwreq_data *wrqu, char *extra)
8836 {
8837         int ret = 0;
8838         unsigned        mode = 0;
8839         _adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
8840
8841         RTW_INFO("[%s] extra = %s\n", __FUNCTION__, extra);
8842
8843         if (_rtw_memcmp(extra, "lps=", 4)) {
8844                 sscanf(extra + 4, "%u", &mode);
8845                 ret = rtw_pm_set_lps(padapter, mode);
8846         } else if (_rtw_memcmp(extra, "ips=", 4)) {
8847                 sscanf(extra + 4, "%u", &mode);
8848                 ret = rtw_pm_set_ips(padapter, mode);
8849         } else
8850                 ret = -EINVAL;
8851
8852         return ret;
8853 }
8854 #ifdef CONFIG_APPEND_VENDOR_IE_ENABLE
8855
8856 int rtw_vendor_ie_get_data(struct net_device *dev, int vendor_ie_num, char *extra)
8857 {
8858         int j;
8859         char *pstring;
8860         _adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
8861         struct mlme_priv *pmlmepriv = &(padapter->mlmepriv);
8862         u32 vendor_ie_mask = 0;
8863         __u16 length = 0;
8864
8865         vendor_ie_mask = pmlmepriv->vendor_ie_mask[vendor_ie_num];
8866         pstring = extra;
8867         pstring += sprintf(pstring , "\nVendor IE num %d , Mask:%x " , vendor_ie_num , vendor_ie_mask);
8868
8869         if (vendor_ie_mask & WIFI_BEACON_VENDOR_IE_BIT)
8870                 pstring += sprintf(pstring , "[Beacon]");
8871         if (vendor_ie_mask & WIFI_PROBEREQ_VENDOR_IE_BIT)
8872                 pstring += sprintf(pstring , "[Probe Req]");
8873         if (vendor_ie_mask & WIFI_PROBERESP_VENDOR_IE_BIT)
8874                 pstring += sprintf(pstring , "[Probe Resp]");
8875         if (vendor_ie_mask & WIFI_ASSOCREQ_VENDOR_IE_BIT)
8876                 pstring += sprintf(pstring , "[Assoc Req]");
8877         if (vendor_ie_mask & WIFI_ASSOCRESP_VENDOR_IE_BIT)
8878                 pstring += sprintf(pstring , "[Assoc Resp]");
8879
8880         pstring += sprintf(pstring , "\nVendor IE:\n");
8881         for (j = 0 ; j < pmlmepriv->vendor_ielen[vendor_ie_num]  ; j++)
8882                 pstring += sprintf(pstring , "%02x" , pmlmepriv->vendor_ie[vendor_ie_num][j]);
8883
8884         length = pstring - extra;
8885         return length;
8886
8887 }
8888
8889 int rtw_vendor_ie_get(struct net_device *dev, struct iw_request_info *info, union iwreq_data *wrqu, char *extra)
8890 {
8891         int ret = 0, vendor_ie_num = 0, cmdlen;
8892         struct iw_point *p;
8893         u8 *ptmp;
8894
8895         p = &wrqu->data;
8896         cmdlen = p->length;
8897         if (0 == cmdlen)
8898                 return -EINVAL;
8899
8900         ptmp = (u8 *)rtw_malloc(cmdlen);
8901         if (NULL == ptmp)
8902                 return -ENOMEM;
8903
8904         if (copy_from_user(ptmp, p->pointer, cmdlen)) {
8905                 ret = -EFAULT;
8906                 goto exit;
8907         }
8908         ret = sscanf(ptmp , "%d", &vendor_ie_num);
8909         if (vendor_ie_num > WLAN_MAX_VENDOR_IE_NUM - 1) {
8910                 ret = -EFAULT;
8911                 goto exit;
8912         }
8913
8914         wrqu->data.length = rtw_vendor_ie_get_data(dev, vendor_ie_num, extra);
8915
8916 exit:
8917         rtw_mfree(ptmp, cmdlen);
8918
8919         return 0;
8920 }
8921
8922 int rtw_vendor_ie_set(struct net_device *dev, struct iw_request_info *info, union iwreq_data *wrqu, char *extra)
8923 {
8924         int ret = 0, i , len = 0 , totoal_ie_len = 0 , total_ie_len_byte = 0;
8925         _adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
8926         struct mlme_priv *pmlmepriv = &(padapter->mlmepriv);
8927         u32 vendor_ie_mask = 0;
8928         u32 vendor_ie_num = 0;
8929         u32 id, elen;
8930
8931         ret = sscanf(extra, "%d,%x,%*s", &vendor_ie_num , &vendor_ie_mask);
8932         if (strrchr(extra , ','))
8933                 extra = strrchr(extra , ',') + 1;
8934         else
8935                 return -EINVAL;
8936         totoal_ie_len = strlen(extra);
8937         RTW_INFO("[%s] vendor_ie_num = %d , vendor_ie_mask = %x , vendor_ie = %s , len = %d\n", __func__ , vendor_ie_num , vendor_ie_mask , extra  , totoal_ie_len);
8938
8939         if (vendor_ie_num  > WLAN_MAX_VENDOR_IE_NUM - 1) {
8940                 RTW_INFO("[%s] only support %d vendor ie\n", __func__ , WLAN_MAX_VENDOR_IE_NUM);
8941                 return -EFAULT;
8942         }
8943
8944         if (totoal_ie_len > WLAN_MAX_VENDOR_IE_LEN) {
8945                 RTW_INFO("[%s] Fail , not support ie length extend %d\n", __func__ , WLAN_MAX_VENDOR_IE_LEN);
8946                 return -EFAULT;
8947         }
8948
8949         if (vendor_ie_mask == 0) {
8950                 RTW_INFO("[%s] Clear vendor_ie_num %d group\n", __func__ , vendor_ie_num);
8951                 goto _clear_path;
8952         }
8953
8954         if (totoal_ie_len % 2 != 0) {
8955                 RTW_INFO("[%s]  Fail , IE length = %zu is odd\n" , __func__ , strlen(extra));
8956                 return -EFAULT;
8957         }
8958
8959         if (totoal_ie_len > 0) {
8960                 for (i = 0  ; i < strlen(extra) ; i += 2) {
8961                         pmlmepriv->vendor_ie[vendor_ie_num][len] = key_2char2num(extra[i] , extra[i + 1]);
8962                         if (len == 0) {
8963                                 id = pmlmepriv->vendor_ie[vendor_ie_num][len];
8964                                 if (id != WLAN_EID_VENDOR_SPECIFIC) {
8965                                         RTW_INFO("[%s] Fail , VENDOR SPECIFIC IE ID \"%x\" was not correct\n", __func__ , id);
8966                                         goto _clear_path;
8967                                 }
8968                         } else if (len == 1) {
8969                                 total_ie_len_byte = (totoal_ie_len / 2) - 2;
8970                                 elen = pmlmepriv->vendor_ie[vendor_ie_num][len];
8971                                 if (elen != total_ie_len_byte) {
8972                                         RTW_INFO("[%s] Fail , Input IE length = \"%d\"(hex:%x) bytes , not match input total IE context length \"%d\" bytes\n", __func__ , elen , elen ,
8973                                                  total_ie_len_byte);
8974                                         goto _clear_path;
8975                                 }
8976                         }
8977                         len++;
8978                 }
8979                 pmlmepriv->vendor_ielen[vendor_ie_num] = len;
8980         } else
8981                 pmlmepriv->vendor_ielen[vendor_ie_num] = 0;
8982
8983
8984
8985         if (vendor_ie_mask & WIFI_BEACON_VENDOR_IE_BIT)
8986                 RTW_INFO("[%s] Beacon append vendor ie\n", __func__);
8987         if (vendor_ie_mask & WIFI_PROBEREQ_VENDOR_IE_BIT)
8988                 RTW_INFO("[%s] Probe Req append vendor ie\n", __func__);
8989         if (vendor_ie_mask & WIFI_PROBERESP_VENDOR_IE_BIT)
8990                 RTW_INFO("[%s] Probe Resp  append vendor ie\n", __func__);
8991         if (vendor_ie_mask & WIFI_ASSOCREQ_VENDOR_IE_BIT)
8992                 RTW_INFO("[%s] Assoc Req append vendor ie\n", __func__);
8993         if (vendor_ie_mask & WIFI_ASSOCRESP_VENDOR_IE_BIT)
8994                 RTW_INFO("[%s] Assoc Resp append vendor ie\n", __func__);
8995
8996         pmlmepriv->vendor_ie_mask[vendor_ie_num] = vendor_ie_mask;
8997
8998         return ret;
8999
9000 _clear_path:
9001         _rtw_memset(pmlmepriv->vendor_ie[vendor_ie_num] , 0 , sizeof(u32) * WLAN_MAX_VENDOR_IE_LEN);
9002         pmlmepriv->vendor_ielen[vendor_ie_num] = 0;
9003         pmlmepriv->vendor_ie_mask[vendor_ie_num] = 0;
9004         return -EFAULT;
9005 }
9006 #endif
9007
9008 static int rtw_mp_efuse_get(struct net_device *dev,
9009                             struct iw_request_info *info,
9010                             union iwreq_data *wdata, char *extra)
9011 {
9012         PADAPTER padapter = rtw_netdev_priv(dev);
9013         HAL_DATA_TYPE   *pHalData = GET_HAL_DATA(padapter);
9014
9015         PEFUSE_HAL pEfuseHal;
9016         struct iw_point *wrqu;
9017
9018         u8      *PROMContent = pHalData->efuse_eeprom_data;
9019         u8 ips_mode = IPS_NUM; /* init invalid value */
9020         u8 lps_mode = PS_MODE_NUM; /* init invalid value */
9021         struct pwrctrl_priv *pwrctrlpriv ;
9022         u8 *data = NULL;
9023         u8 *rawdata = NULL;
9024         char *pch, *ptmp, *token, *tmp[3] = {0x00, 0x00, 0x00};
9025         u16 i = 0, j = 0, mapLen = 0, addr = 0, cnts = 0;
9026         u16 max_available_len = 0, raw_cursize = 0, raw_maxsize = 0;
9027         u16 mask_len;
9028         u8 mask_buf[64] = "";
9029         int err;
9030 #ifdef CONFIG_IOL
9031         u8 org_fw_iol = padapter->registrypriv.fw_iol;/* 0:Disable, 1:enable, 2:by usb speed */
9032 #endif
9033
9034         wrqu = (struct iw_point *)wdata;
9035         pwrctrlpriv = adapter_to_pwrctl(padapter);
9036         pEfuseHal = &pHalData->EfuseHal;
9037
9038         err = 0;
9039         data = rtw_zmalloc(EFUSE_BT_MAX_MAP_LEN);
9040         if (data == NULL) {
9041                 err = -ENOMEM;
9042                 goto exit;
9043         }
9044         rawdata = rtw_zmalloc(EFUSE_BT_MAX_MAP_LEN);
9045         if (rawdata == NULL) {
9046                 err = -ENOMEM;
9047                 goto exit;
9048         }
9049
9050         if (copy_from_user(extra, wrqu->pointer, wrqu->length)) {
9051                 err = -EFAULT;
9052                 goto exit;
9053         }
9054 #ifdef CONFIG_LPS
9055         lps_mode = pwrctrlpriv->power_mgnt;/* keep org value */
9056         rtw_pm_set_lps(padapter, PS_MODE_ACTIVE);
9057 #endif
9058
9059 #ifdef CONFIG_IPS
9060         ips_mode = pwrctrlpriv->ips_mode;/* keep org value */
9061         rtw_pm_set_ips(padapter, IPS_NONE);
9062 #endif
9063
9064         pch = extra;
9065         RTW_INFO("%s: in=%s\n", __FUNCTION__, extra);
9066
9067         i = 0;
9068         /* mac 16 "00e04c871200" rmap,00,2 */
9069         while ((token = strsep(&pch, ",")) != NULL) {
9070                 if (i > 2)
9071                         break;
9072                 tmp[i] = token;
9073                 i++;
9074         }
9075 #ifdef CONFIG_IOL
9076         padapter->registrypriv.fw_iol = 0;/* 0:Disable, 1:enable, 2:by usb speed */
9077 #endif
9078
9079         if (strcmp(tmp[0], "status") == 0) {
9080                 sprintf(extra, "Load File efuse=%s,Load File MAC=%s"
9081                         , pHalData->efuse_file_status == EFUSE_FILE_FAILED ? "FAIL" : "OK"
9082                         , pHalData->macaddr_file_status == MACADDR_FILE_FAILED ? "FAIL" : "OK"
9083                        );
9084                 goto exit;
9085         } else if (strcmp(tmp[0], "drvmap") == 0) {
9086                 static u8 drvmaporder = 0;
9087                 u8 *efuse;
9088                 u32 shift, cnt;
9089                 u32 blksz = 0x200; /* The size of one time show, default 512 */
9090                 EFUSE_GetEfuseDefinition(padapter, EFUSE_WIFI, TYPE_EFUSE_MAP_LEN, (void *)&mapLen, _FALSE);
9091
9092                 efuse = pHalData->efuse_eeprom_data;
9093
9094                 shift = blksz * drvmaporder;
9095                 efuse += shift;
9096                 cnt = mapLen - shift;
9097
9098                 if (cnt > blksz) {
9099                         cnt = blksz;
9100                         drvmaporder++;
9101                 } else
9102                         drvmaporder = 0;
9103
9104                 sprintf(extra, "\n");
9105                 for (i = 0; i < cnt; i += 16) {
9106                         sprintf(extra, "%s0x%02x\t", extra, shift + i);
9107                         for (j = 0; j < 8; j++)
9108                                 sprintf(extra, "%s%02X ", extra, efuse[i + j]);
9109                         sprintf(extra, "%s\t", extra);
9110                         for (; j < 16; j++)
9111                                 sprintf(extra, "%s%02X ", extra, efuse[i + j]);
9112                         sprintf(extra, "%s\n", extra);
9113                 }
9114                 if ((shift + cnt) < mapLen)
9115                         sprintf(extra, "%s\t...more (left:%d/%d)\n", extra, mapLen-(shift + cnt), mapLen);
9116
9117         } else if (strcmp(tmp[0], "realmap") == 0) {
9118                 static u8 order = 0;
9119                 u8 *efuse;
9120                 u32 shift, cnt;
9121                 u32 blksz = 0x200; /* The size of one time show, default 512 */
9122
9123                 EFUSE_GetEfuseDefinition(padapter, EFUSE_WIFI, TYPE_EFUSE_MAP_LEN , (void *)&mapLen, _FALSE);
9124                 efuse = pEfuseHal->fakeEfuseInitMap;
9125                 if (rtw_efuse_mask_map_read(padapter, 0, mapLen, efuse) == _FAIL) {
9126                         RTW_INFO("%s: read realmap Fail!!\n", __FUNCTION__);
9127                         err = -EFAULT;
9128                         goto exit;
9129                 }
9130
9131 #if 0
9132                 RTW_INFO("OFFSET\tVALUE(hex)\n");
9133                 for (i = 0; i < mapLen; i += 16) {
9134                         RTW_INFO("0x%02x\t", i);
9135                         for (j = 0; j < 8; j++)
9136                                 RTW_INFO("%02X ", efuse[i + j]);
9137                         RTW_INFO("\t");
9138                         for (; j < 16; j++)
9139                                 RTW_INFO("%02X ", efuse[i + j]);
9140                         RTW_INFO("\n");
9141                 }
9142                 RTW_INFO("\n");
9143 #endif
9144
9145                 shift = blksz * order;
9146                 efuse += shift;
9147                 cnt = mapLen - shift;
9148                 if (cnt > blksz) {
9149                         cnt = blksz;
9150                         order++;
9151                 } else
9152                         order = 0;
9153
9154                 sprintf(extra, "\n");
9155                 for (i = 0; i < cnt; i += 16) {
9156                         sprintf(extra, "%s0x%02x\t", extra, shift + i);
9157                         for (j = 0; j < 8; j++)
9158                                 sprintf(extra, "%s%02X ", extra, efuse[i + j]);
9159                         sprintf(extra, "%s\t", extra);
9160                         for (; j < 16; j++)
9161                                 sprintf(extra, "%s%02X ", extra, efuse[i + j]);
9162                         sprintf(extra, "%s\n", extra);
9163                 }
9164                 if ((shift + cnt) < mapLen)
9165                         sprintf(extra, "%s\t...more (left:%d/%d)\n", extra, mapLen-(shift + cnt), mapLen);
9166         } else if (strcmp(tmp[0], "rmap") == 0) {
9167                 if ((tmp[1] == NULL) || (tmp[2] == NULL)) {
9168                         RTW_INFO("%s: rmap Fail!! Parameters error!\n", __FUNCTION__);
9169                         err = -EINVAL;
9170                         goto exit;
9171                 }
9172
9173                 /* rmap addr cnts */
9174                 addr = simple_strtoul(tmp[1], &ptmp, 16);
9175                 RTW_INFO("%s: addr=%x\n", __FUNCTION__, addr);
9176
9177                 cnts = simple_strtoul(tmp[2], &ptmp, 10);
9178                 if (cnts == 0) {
9179                         RTW_INFO("%s: rmap Fail!! cnts error!\n", __FUNCTION__);
9180                         err = -EINVAL;
9181                         goto exit;
9182                 }
9183                 RTW_INFO("%s: cnts=%d\n", __FUNCTION__, cnts);
9184
9185                 EFUSE_GetEfuseDefinition(padapter, EFUSE_WIFI, TYPE_EFUSE_MAP_LEN , (PVOID)&max_available_len, _FALSE);
9186                 if ((addr + cnts) > max_available_len) {
9187                         RTW_INFO("%s: addr(0x%X)+cnts(%d) parameter error!\n", __FUNCTION__, addr, cnts);
9188                         err = -EINVAL;
9189                         goto exit;
9190                 }
9191
9192                 if (rtw_efuse_mask_map_read(padapter, addr, cnts, data) == _FAIL) {
9193                         RTW_INFO("%s: rtw_efuse_mask_map_read error!\n", __func__);
9194                         err = -EFAULT;
9195                         goto exit;
9196                 }
9197
9198                 /*              RTW_INFO("%s: data={", __FUNCTION__); */
9199                 *extra = 0;
9200                 for (i = 0; i < cnts; i++) {
9201                         /*                      RTW_INFO("0x%02x ", data[i]); */
9202                         sprintf(extra, "%s0x%02X ", extra, data[i]);
9203                 }
9204                 /*              RTW_INFO("}\n"); */
9205         } else if (strcmp(tmp[0], "realraw") == 0) {
9206                 static u8 raw_order = 0;
9207                 u32 shift, cnt;
9208                 u32 blksz = 0x200; /* The size of one time show, default 512 */
9209
9210                 addr = 0;
9211                 EFUSE_GetEfuseDefinition(padapter, EFUSE_WIFI, TYPE_EFUSE_REAL_CONTENT_LEN , (PVOID)&mapLen, _FALSE);
9212                 RTW_INFO("Real content len = %d\n",mapLen );
9213
9214                 if (rtw_efuse_access(padapter, _FALSE, addr, mapLen, rawdata) == _FAIL) {
9215                         RTW_INFO("%s: rtw_efuse_access Fail!!\n", __func__);
9216                         err = -EFAULT;
9217                         goto exit;
9218                 }
9219
9220                 _rtw_memset(extra, '\0', strlen(extra));
9221
9222                 shift = blksz * raw_order;
9223                 rawdata += shift;
9224                 cnt = mapLen - shift;
9225                 if (cnt > blksz) {
9226                         cnt = blksz;
9227                         raw_order++;
9228                 } else
9229                         raw_order = 0;
9230
9231                 sprintf(extra, "\n");
9232                 for (i = 0; i < cnt; i += 16) {
9233                         sprintf(extra, "%s0x%02x\t", extra, shift + i);
9234                         for (j = 0; j < 8; j++)
9235                                 sprintf(extra, "%s%02X ", extra, rawdata[i + j]);
9236                         sprintf(extra, "%s\t", extra);
9237                         for (; j < 16; j++)
9238                                 sprintf(extra, "%s%02X ", extra, rawdata[i + j]);
9239                         sprintf(extra, "%s\n", extra);
9240                 }
9241                 if ((shift + cnt) < mapLen)
9242                         sprintf(extra, "%s\t...more (left:%d/%d)\n", extra, mapLen-(shift + cnt), mapLen);
9243
9244         } else if (strcmp(tmp[0], "btrealraw") == 0) {
9245                 static u8 bt_raw_order = 0;
9246                 u32 shift, cnt;
9247                 u32 blksz = 0x200; /* The size of one time show, default 512 */
9248
9249                 addr = 0;
9250                 EFUSE_GetEfuseDefinition(padapter, EFUSE_BT, TYPE_EFUSE_REAL_CONTENT_LEN, (PVOID)&mapLen, _FALSE);
9251                 RTW_INFO("Real content len = %d\n", mapLen);
9252 #ifdef RTW_HALMAC
9253                 if (rtw_efuse_bt_access(padapter, _FALSE, 0, mapLen, rawdata) == _FAIL) {
9254                         RTW_INFO("%s: rtw_efuse_access Fail!!\n", __func__);
9255                         err = -EFAULT;
9256                         goto exit;
9257                 }
9258 #else
9259                 rtw_write8(padapter, 0x35, 0x1);
9260
9261                 if (rtw_efuse_access(padapter, _FALSE, addr, mapLen, rawdata) == _FAIL) {
9262                         RTW_INFO("%s: rtw_efuse_access Fail!!\n", __func__);
9263                         err = -EFAULT;
9264                         goto exit;
9265                 }
9266 #endif
9267                 _rtw_memset(extra, '\0', strlen(extra));
9268
9269                 shift = blksz * bt_raw_order;
9270                 rawdata += shift;
9271                 cnt = mapLen - shift;
9272                 if (cnt > blksz) {
9273                         cnt = blksz;
9274                         bt_raw_order++;
9275                 } else
9276                         bt_raw_order = 0;
9277
9278                 sprintf(extra, "\n");
9279                 for (i = 0; i < cnt; i += 16) {
9280                         sprintf(extra, "%s0x%02x\t", extra, shift + i);
9281                         for (j = 0; j < 8; j++)
9282                                 sprintf(extra, "%s%02X ", extra, rawdata[i + j]);
9283                         sprintf(extra, "%s\t", extra);
9284                         for (; j < 16; j++)
9285                                 sprintf(extra, "%s%02X ", extra, rawdata[i + j]);
9286                         sprintf(extra, "%s\n", extra);
9287                 }
9288                 if ((shift + cnt) < mapLen)
9289                         sprintf(extra, "%s\t...more (left:%d/%d)\n", extra, mapLen-(shift + cnt), mapLen);
9290
9291         } else if (strcmp(tmp[0], "mac") == 0) {
9292                 if (hal_efuse_macaddr_offset(padapter) == -1) {
9293                         err = -EFAULT;
9294                         goto exit;
9295                 }
9296
9297                 addr = hal_efuse_macaddr_offset(padapter);
9298                 cnts = 6;
9299
9300                 EFUSE_GetEfuseDefinition(padapter, EFUSE_WIFI, TYPE_EFUSE_MAP_LEN, (PVOID)&max_available_len, _FALSE);
9301                 if ((addr + cnts) > max_available_len) {
9302                         RTW_INFO("%s: addr(0x%02x)+cnts(%d) parameter error!\n", __FUNCTION__, addr, cnts);
9303                         err = -EFAULT;
9304                         goto exit;
9305                 }
9306
9307                 if (rtw_efuse_mask_map_read(padapter, addr, cnts, data) == _FAIL) {
9308                         RTW_INFO("%s: rtw_efuse_mask_map_read error!\n", __func__);
9309                         err = -EFAULT;
9310                         goto exit;
9311                 }
9312
9313                 /*              RTW_INFO("%s: MAC address={", __FUNCTION__); */
9314                 *extra = 0;
9315                 for (i = 0; i < cnts; i++) {
9316                         /*                      RTW_INFO("%02X", data[i]); */
9317                         sprintf(extra, "%s%02X", extra, data[i]);
9318                         if (i != (cnts - 1)) {
9319                                 /*                              RTW_INFO(":"); */
9320                                 sprintf(extra, "%s:", extra);
9321                         }
9322                 }
9323                 /*              RTW_INFO("}\n"); */
9324         } else if (strcmp(tmp[0], "vidpid") == 0) {
9325 #ifdef CONFIG_RTL8188E
9326 #ifdef CONFIG_USB_HCI
9327                 addr = EEPROM_VID_88EU;
9328 #endif
9329 #ifdef CONFIG_PCI_HCI
9330                 addr = EEPROM_VID_88EE;
9331 #endif
9332 #endif /* CONFIG_RTL8188E */
9333
9334 #ifdef CONFIG_RTL8192E
9335 #ifdef CONFIG_USB_HCI
9336                 addr = EEPROM_VID_8192EU;
9337 #endif
9338 #ifdef CONFIG_PCI_HCI
9339                 addr = EEPROM_VID_8192EE;
9340 #endif
9341 #endif /* CONFIG_RTL8192E */
9342 #ifdef CONFIG_RTL8723B
9343                 addr = EEPROM_VID_8723BU;
9344 #endif /* CONFIG_RTL8192E */
9345
9346 #ifdef CONFIG_RTL8188F
9347                 addr = EEPROM_VID_8188FU;
9348 #endif /* CONFIG_RTL8188F */
9349
9350 #ifdef CONFIG_RTL8703B
9351 #ifdef CONFIG_USB_HCI
9352                 addr = EEPROM_VID_8703BU;
9353 #endif
9354 #endif /* CONFIG_RTL8703B */
9355
9356 #ifdef CONFIG_RTL8723D
9357 #ifdef CONFIG_USB_HCI
9358                 addr = EEPROM_VID_8723DU;
9359 #endif /* CONFIG_USB_HCI */
9360 #endif /* CONFIG_RTL8723D */
9361
9362                 cnts = 4;
9363
9364                 EFUSE_GetEfuseDefinition(padapter, EFUSE_WIFI, TYPE_EFUSE_MAP_LEN, (PVOID)&max_available_len, _FALSE);
9365                 if ((addr + cnts) > max_available_len) {
9366                         RTW_INFO("%s: addr(0x%02x)+cnts(%d) parameter error!\n", __FUNCTION__, addr, cnts);
9367                         err = -EFAULT;
9368                         goto exit;
9369                 }
9370                 if (rtw_efuse_mask_map_read(padapter, addr, cnts, data) == _FAIL) {
9371                         RTW_INFO("%s: rtw_efuse_access error!!\n", __FUNCTION__);
9372                         err = -EFAULT;
9373                         goto exit;
9374                 }
9375
9376                 /*              RTW_INFO("%s: {VID,PID}={", __FUNCTION__); */
9377                 *extra = 0;
9378                 for (i = 0; i < cnts; i++) {
9379                         /*                      RTW_INFO("0x%02x", data[i]); */
9380                         sprintf(extra, "%s0x%02X", extra, data[i]);
9381                         if (i != (cnts - 1)) {
9382                                 /*                              RTW_INFO(","); */
9383                                 sprintf(extra, "%s,", extra);
9384                         }
9385                 }
9386                 /*              RTW_INFO("}\n"); */
9387         } else if (strcmp(tmp[0], "ableraw") == 0) {
9388 #ifdef RTW_HALMAC
9389                 raw_maxsize = efuse_GetavailableSize(padapter);
9390 #else
9391                 efuse_GetCurrentSize(padapter, &raw_cursize);
9392                 raw_maxsize = efuse_GetMaxSize(padapter);
9393 #endif
9394                 sprintf(extra, "[available raw size]= %d bytes\n", raw_maxsize - raw_cursize);
9395         } else if (strcmp(tmp[0], "btableraw") == 0) {
9396                 efuse_bt_GetCurrentSize(padapter, &raw_cursize);
9397                 raw_maxsize = efuse_bt_GetMaxSize(padapter);
9398                 sprintf(extra, "[available raw size]= %d bytes\n", raw_maxsize - raw_cursize);
9399         } else if (strcmp(tmp[0], "btfmap") == 0) {
9400
9401                 BTEfuse_PowerSwitch(padapter, 1, _TRUE);
9402
9403                 mapLen = EFUSE_BT_MAX_MAP_LEN;
9404                 if (rtw_BT_efuse_map_read(padapter, 0, mapLen, pEfuseHal->BTEfuseInitMap) == _FAIL) {
9405                         RTW_INFO("%s: rtw_BT_efuse_map_read Fail!!\n", __FUNCTION__);
9406                         err = -EFAULT;
9407                         goto exit;
9408                 }
9409
9410                 /*              RTW_INFO("OFFSET\tVALUE(hex)\n"); */
9411                 sprintf(extra, "\n");
9412                 for (i = 0; i < 512; i += 16) { /* set 512 because the iwpriv's extra size have limit 0x7FF */
9413                         /*                      RTW_INFO("0x%03x\t", i); */
9414                         sprintf(extra, "%s0x%03x\t", extra, i);
9415                         for (j = 0; j < 8; j++) {
9416                                 /*                              RTW_INFO("%02X ", pEfuseHal->BTEfuseInitMap[i+j]); */
9417                                 sprintf(extra, "%s%02X ", extra, pEfuseHal->BTEfuseInitMap[i + j]);
9418                         }
9419                         /*                      RTW_INFO("\t"); */
9420                         sprintf(extra, "%s\t", extra);
9421                         for (; j < 16; j++) {
9422                                 /*                              RTW_INFO("%02X ", pEfuseHal->BTEfuseInitMap[i+j]); */
9423                                 sprintf(extra, "%s%02X ", extra, pEfuseHal->BTEfuseInitMap[i + j]);
9424                         }
9425                         /*                      RTW_INFO("\n"); */
9426                         sprintf(extra, "%s\n", extra);
9427                 }
9428                 /*              RTW_INFO("\n"); */
9429         } else if (strcmp(tmp[0], "btbmap") == 0) {
9430                 BTEfuse_PowerSwitch(padapter, 1, _TRUE);
9431
9432                 mapLen = EFUSE_BT_MAX_MAP_LEN;
9433                 if (rtw_BT_efuse_map_read(padapter, 0, mapLen, pEfuseHal->BTEfuseInitMap) == _FAIL) {
9434                         RTW_INFO("%s: rtw_BT_efuse_map_read Fail!!\n", __FUNCTION__);
9435                         err = -EFAULT;
9436                         goto exit;
9437                 }
9438
9439                 /*              RTW_INFO("OFFSET\tVALUE(hex)\n"); */
9440                 sprintf(extra, "\n");
9441                 for (i = 512; i < 1024 ; i += 16) {
9442                         /*                      RTW_INFO("0x%03x\t", i); */
9443                         sprintf(extra, "%s0x%03x\t", extra, i);
9444                         for (j = 0; j < 8; j++) {
9445                                 /*                              RTW_INFO("%02X ", data[i+j]); */
9446                                 sprintf(extra, "%s%02X ", extra, pEfuseHal->BTEfuseInitMap[i + j]);
9447                         }
9448                         /*                      RTW_INFO("\t"); */
9449                         sprintf(extra, "%s\t", extra);
9450                         for (; j < 16; j++) {
9451                                 /*                              RTW_INFO("%02X ", data[i+j]); */
9452                                 sprintf(extra, "%s%02X ", extra, pEfuseHal->BTEfuseInitMap[i + j]);
9453                         }
9454                         /*                      RTW_INFO("\n"); */
9455                         sprintf(extra, "%s\n", extra);
9456                 }
9457                 /*              RTW_INFO("\n"); */
9458         } else if (strcmp(tmp[0], "btrmap") == 0) {
9459                 u8 BTStatus;
9460
9461                 rtw_write8(padapter, 0xa3, 0x05); /* For 8723AB ,8821S ? */
9462                 BTStatus = rtw_read8(padapter, 0xa0);
9463
9464                 RTW_INFO("%s: Check 0xa0 BT Status =0x%x\n", __FUNCTION__, BTStatus);
9465                 if (BTStatus != 0x04) {
9466                         sprintf(extra, "BT Status not Active ,can't to read BT eFuse\n");
9467                         goto exit;
9468                 }
9469
9470                 if ((tmp[1] == NULL) || (tmp[2] == NULL)) {
9471                         err = -EINVAL;
9472                         goto exit;
9473                 }
9474
9475                 BTEfuse_PowerSwitch(padapter, 1, _TRUE);
9476
9477                 /* rmap addr cnts */
9478                 addr = simple_strtoul(tmp[1], &ptmp, 16);
9479                 RTW_INFO("%s: addr=0x%X\n", __FUNCTION__, addr);
9480
9481                 cnts = simple_strtoul(tmp[2], &ptmp, 10);
9482                 if (cnts == 0) {
9483                         RTW_INFO("%s: btrmap Fail!! cnts error!\n", __FUNCTION__);
9484                         err = -EINVAL;
9485                         goto exit;
9486                 }
9487                 RTW_INFO("%s: cnts=%d\n", __FUNCTION__, cnts);
9488 #ifndef RTW_HALMAC
9489                 EFUSE_GetEfuseDefinition(padapter, EFUSE_BT, TYPE_EFUSE_MAP_LEN, (PVOID)&max_available_len, _FALSE);
9490                 if ((addr + cnts) > max_available_len) {
9491                         RTW_INFO("%s: addr(0x%X)+cnts(%d) parameter error!\n", __FUNCTION__, addr, cnts);
9492                         err = -EFAULT;
9493                         goto exit;
9494                 }
9495 #endif
9496                 if (rtw_BT_efuse_map_read(padapter, addr, cnts, data) == _FAIL) {
9497                         RTW_INFO("%s: rtw_BT_efuse_map_read error!!\n", __FUNCTION__);
9498                         err = -EFAULT;
9499                         goto exit;
9500                 }
9501
9502                 *extra = 0;
9503                 /*              RTW_INFO("%s: bt efuse data={", __FUNCTION__); */
9504                 for (i = 0; i < cnts; i++) {
9505                         /*                      RTW_INFO("0x%02x ", data[i]); */
9506                         sprintf(extra, "%s 0x%02X ", extra, data[i]);
9507                 }
9508                 /*              RTW_INFO("}\n"); */
9509                 RTW_INFO(FUNC_ADPT_FMT ": BT MAC=[%s]\n", FUNC_ADPT_ARG(padapter), extra);
9510         } else if (strcmp(tmp[0], "btffake") == 0) {
9511                 /*              RTW_INFO("OFFSET\tVALUE(hex)\n"); */
9512                 sprintf(extra, "\n");
9513                 for (i = 0; i < 512; i += 16) {
9514                         /*                      RTW_INFO("0x%03x\t", i); */
9515                         sprintf(extra, "%s0x%03x\t", extra, i);
9516                         for (j = 0; j < 8; j++) {
9517                                 /*                              RTW_INFO("%02X ", pEfuseHal->fakeBTEfuseModifiedMap[i+j]); */
9518                                 sprintf(extra, "%s%02X ", extra, pEfuseHal->fakeBTEfuseModifiedMap[i + j]);
9519                         }
9520                         /*                      RTW_INFO("\t"); */
9521                         sprintf(extra, "%s\t", extra);
9522                         for (; j < 16; j++) {
9523                                 /*                              RTW_INFO("%02X ", pEfuseHal->fakeBTEfuseModifiedMap[i+j]); */
9524                                 sprintf(extra, "%s%02X ", extra, pEfuseHal->fakeBTEfuseModifiedMap[i + j]);
9525                         }
9526                         /*                      RTW_INFO("\n"); */
9527                         sprintf(extra, "%s\n", extra);
9528                 }
9529                 /*              RTW_INFO("\n"); */
9530         } else if (strcmp(tmp[0], "btbfake") == 0) {
9531                 /*              RTW_INFO("OFFSET\tVALUE(hex)\n"); */
9532                 sprintf(extra, "\n");
9533                 for (i = 512; i < 1024; i += 16) {
9534                         /*                      RTW_INFO("0x%03x\t", i); */
9535                         sprintf(extra, "%s0x%03x\t", extra, i);
9536                         for (j = 0; j < 8; j++) {
9537                                 /*                              RTW_INFO("%02X ", pEfuseHal->fakeBTEfuseModifiedMap[i+j]); */
9538                                 sprintf(extra, "%s%02X ", extra, pEfuseHal->fakeBTEfuseModifiedMap[i + j]);
9539                         }
9540                         /*                      RTW_INFO("\t"); */
9541                         sprintf(extra, "%s\t", extra);
9542                         for (; j < 16; j++) {
9543                                 /*                              RTW_INFO("%02X ", pEfuseHal->fakeBTEfuseModifiedMap[i+j]); */
9544                                 sprintf(extra, "%s%02X ", extra, pEfuseHal->fakeBTEfuseModifiedMap[i + j]);
9545                         }
9546                         /*                      RTW_INFO("\n"); */
9547                         sprintf(extra, "%s\n", extra);
9548                 }
9549                 /*              RTW_INFO("\n"); */
9550         } else if (strcmp(tmp[0], "wlrfkmap") == 0) {
9551                 static u8 fk_order = 0;
9552                 u8 *efuse;
9553                 u32 shift, cnt;
9554                 u32 blksz = 0x200; /* The size of one time show, default 512 */
9555
9556                 EFUSE_GetEfuseDefinition(padapter, EFUSE_WIFI, TYPE_EFUSE_MAP_LEN , (void *)&mapLen, _FALSE);
9557                 efuse = pEfuseHal->fakeEfuseModifiedMap;
9558
9559                 shift = blksz * fk_order;
9560                 efuse += shift;
9561                 cnt = mapLen - shift;
9562                 if (cnt > blksz) {
9563                         cnt = blksz;
9564                         fk_order++;
9565                 } else
9566                         fk_order = 0;
9567
9568                 sprintf(extra, "\n");
9569                 for (i = 0; i < cnt; i += 16) {
9570                         sprintf(extra, "%s0x%02x\t", extra, shift + i);
9571                         for (j = 0; j < 8; j++)
9572                                 sprintf(extra, "%s%02X ", extra, efuse[i + j]);
9573                         sprintf(extra, "%s\t", extra);
9574                         for (; j < 16; j++)
9575                                 sprintf(extra, "%s%02X ", extra, efuse[i + j]);
9576                         sprintf(extra, "%s\n", extra);
9577                 }
9578                 if ((shift + cnt) < mapLen)
9579                         sprintf(extra, "%s\t...more\n", extra);
9580
9581         } else if (strcmp(tmp[0], "wlrfkrmap") == 0) {
9582                 if ((tmp[1] == NULL) || (tmp[2] == NULL)) {
9583                         RTW_INFO("%s: rmap Fail!! Parameters error!\n", __FUNCTION__);
9584                         err = -EINVAL;
9585                         goto exit;
9586                 }
9587                 /* rmap addr cnts */
9588                 addr = simple_strtoul(tmp[1], &ptmp, 16);
9589                 RTW_INFO("%s: addr=%x\n", __FUNCTION__, addr);
9590
9591                 cnts = simple_strtoul(tmp[2], &ptmp, 10);
9592                 if (cnts == 0) {
9593                         RTW_INFO("%s: rmap Fail!! cnts error!\n", __FUNCTION__);
9594                         err = -EINVAL;
9595                         goto exit;
9596                 }
9597                 RTW_INFO("%s: cnts=%d\n", __FUNCTION__, cnts);
9598
9599                 /*              RTW_INFO("%s: data={", __FUNCTION__); */
9600                 *extra = 0;
9601                 for (i = 0; i < cnts; i++) {
9602                         RTW_INFO("wlrfkrmap = 0x%02x\n", pEfuseHal->fakeEfuseModifiedMap[addr + i]);
9603                         sprintf(extra, "%s0x%02X ", extra, pEfuseHal->fakeEfuseModifiedMap[addr + i]);
9604                 }
9605         } else if (strcmp(tmp[0], "btrfkrmap") == 0) {
9606                 if ((tmp[1] == NULL) || (tmp[2] == NULL)) {
9607                         RTW_INFO("%s: rmap Fail!! Parameters error!\n", __FUNCTION__);
9608                         err = -EINVAL;
9609                         goto exit;
9610                 }
9611                 /* rmap addr cnts */
9612                 addr = simple_strtoul(tmp[1], &ptmp, 16);
9613                 RTW_INFO("%s: addr=%x\n", __FUNCTION__, addr);
9614
9615                 cnts = simple_strtoul(tmp[2], &ptmp, 10);
9616                 if (cnts == 0) {
9617                         RTW_INFO("%s: rmap Fail!! cnts error!\n", __FUNCTION__);
9618                         err = -EINVAL;
9619                         goto exit;
9620                 }
9621                 RTW_INFO("%s: cnts=%d\n", __FUNCTION__, cnts);
9622
9623                 /*              RTW_INFO("%s: data={", __FUNCTION__); */
9624                 *extra = 0;
9625                 for (i = 0; i < cnts; i++) {
9626                         RTW_INFO("wlrfkrmap = 0x%02x\n", pEfuseHal->fakeBTEfuseModifiedMap[addr + i]);
9627                         sprintf(extra, "%s0x%02X ", extra, pEfuseHal->fakeBTEfuseModifiedMap[addr + i]);
9628                 }
9629         } else if (strcmp(tmp[0], "mask") == 0) {
9630                 *extra = 0;
9631                 mask_len = sizeof(u8) * rtw_get_efuse_mask_arraylen(padapter);
9632                 rtw_efuse_mask_array(padapter, mask_buf);
9633
9634                 if (padapter->registrypriv.bFileMaskEfuse == _TRUE)
9635                         _rtw_memcpy(mask_buf, maskfileBuffer, mask_len);
9636
9637                 sprintf(extra, "\n");
9638                 for (i = 0; i < mask_len; i++)
9639                         sprintf(extra, "%s0x%02X\n", extra, mask_buf[i]);
9640
9641         } else
9642                 sprintf(extra, "Command not found!");
9643
9644 exit:
9645         if (data)
9646                 rtw_mfree(data, EFUSE_BT_MAX_MAP_LEN);
9647         if (rawdata)
9648                 rtw_mfree(rawdata, EFUSE_BT_MAX_MAP_LEN);
9649         if (!err)
9650                 wrqu->length = strlen(extra);
9651
9652         if (padapter->registrypriv.mp_mode == 0) {
9653 #ifdef CONFIG_IPS
9654                 rtw_pm_set_ips(padapter, ips_mode);
9655 #endif /* CONFIG_IPS */
9656
9657 #ifdef CONFIG_LPS
9658                 rtw_pm_set_lps(padapter, lps_mode);
9659 #endif /* CONFIG_LPS */
9660         }
9661
9662 #ifdef CONFIG_IOL
9663         padapter->registrypriv.fw_iol = org_fw_iol;/* 0:Disable, 1:enable, 2:by usb speed */
9664 #endif
9665         return err;
9666 }
9667
9668 static int rtw_mp_efuse_set(struct net_device *dev,
9669                             struct iw_request_info *info,
9670                             union iwreq_data *wdata, char *extra)
9671 {
9672         struct iw_point *wrqu;
9673         PADAPTER padapter;
9674         struct pwrctrl_priv *pwrctrlpriv ;
9675         PHAL_DATA_TYPE pHalData;
9676         PEFUSE_HAL pEfuseHal;
9677         struct hal_ops *pHalFunc;
9678         struct mp_priv *pmp_priv;
9679
9680         u8 ips_mode = IPS_NUM; /* init invalid value */
9681         u8 lps_mode = PS_MODE_NUM; /* init invalid value */
9682         u32 i = 0, j = 0, jj, kk;
9683         u8 *setdata = NULL;
9684         u8 *ShadowMapBT = NULL;
9685         u8 *ShadowMapWiFi = NULL;
9686         u8 *setrawdata = NULL;
9687         char *pch, *ptmp, *token, *tmp[3] = {0x00, 0x00, 0x00};
9688         u16 addr = 0xFF, cnts = 0, BTStatus = 0 , max_available_len = 0;
9689         u16 wifimaplen;
9690         int err;
9691
9692         wrqu = (struct iw_point *)wdata;
9693         padapter = rtw_netdev_priv(dev);
9694         pwrctrlpriv = adapter_to_pwrctl(padapter);
9695         pHalData = GET_HAL_DATA(padapter);
9696         pEfuseHal = &pHalData->EfuseHal;
9697         pHalFunc = &padapter->hal_func;
9698         pmp_priv = &padapter->mppriv;
9699
9700         err = 0;
9701
9702         if (copy_from_user(extra, wrqu->pointer, wrqu->length))
9703                 return -EFAULT;
9704
9705         EFUSE_GetEfuseDefinition(padapter, EFUSE_WIFI, TYPE_EFUSE_MAP_LEN , (void *)&wifimaplen, _FALSE);
9706
9707         setdata = rtw_zmalloc(1024);
9708         if (setdata == NULL) {
9709                 err = -ENOMEM;
9710                 goto exit;
9711         }
9712         ShadowMapBT = rtw_malloc(EFUSE_BT_MAX_MAP_LEN);
9713         if (ShadowMapBT == NULL) {
9714                 err = -ENOMEM;
9715                 goto exit;
9716         }
9717         ShadowMapWiFi = rtw_malloc(wifimaplen);
9718         if (ShadowMapWiFi == NULL) {
9719                 err = -ENOMEM;
9720                 goto exit;
9721         }
9722         setrawdata = rtw_malloc(EFUSE_MAX_SIZE);
9723         if (setrawdata == NULL) {
9724                 err = -ENOMEM;
9725                 goto exit;
9726         }
9727
9728 #ifdef CONFIG_LPS
9729         lps_mode = pwrctrlpriv->power_mgnt;/* keep org value */
9730         rtw_pm_set_lps(padapter, PS_MODE_ACTIVE);
9731 #endif
9732
9733 #ifdef CONFIG_IPS
9734         ips_mode = pwrctrlpriv->ips_mode;/* keep org value */
9735         rtw_pm_set_ips(padapter, IPS_NONE);
9736 #endif
9737
9738         pch = extra;
9739         RTW_INFO("%s: in=%s\n", __FUNCTION__, extra);
9740
9741         i = 0;
9742         while ((token = strsep(&pch, ",")) != NULL) {
9743                 if (i > 2)
9744                         break;
9745                 tmp[i] = token;
9746                 i++;
9747         }
9748
9749         /* tmp[0],[1],[2] */
9750         /* wmap,addr,00e04c871200 */
9751         if (strcmp(tmp[0], "wmap") == 0) {
9752                 if ((tmp[1] == NULL) || (tmp[2] == NULL)) {
9753                         err = -EINVAL;
9754                         goto exit;
9755                 }
9756
9757 #ifndef RTW_HALMAC
9758                 /* unknown bug workaround, need to fix later */
9759                 addr = 0x1ff;
9760                 rtw_write8(padapter, EFUSE_CTRL + 1, (addr & 0xff));
9761                 rtw_msleep_os(10);
9762                 rtw_write8(padapter, EFUSE_CTRL + 2, ((addr >> 8) & 0x03));
9763                 rtw_msleep_os(10);
9764                 rtw_write8(padapter, EFUSE_CTRL + 3, 0x72);
9765                 rtw_msleep_os(10);
9766                 rtw_read8(padapter, EFUSE_CTRL);
9767 #endif /* RTW_HALMAC */
9768
9769                 addr = simple_strtoul(tmp[1], &ptmp, 16);
9770                 addr &= 0xFFF;
9771
9772                 cnts = strlen(tmp[2]);
9773                 if (cnts % 2) {
9774                         err = -EINVAL;
9775                         goto exit;
9776                 }
9777                 cnts /= 2;
9778                 if (cnts == 0) {
9779                         err = -EINVAL;
9780                         goto exit;
9781                 }
9782
9783                 RTW_INFO("%s: addr=0x%X\n", __FUNCTION__, addr);
9784                 RTW_INFO("%s: cnts=%d\n", __FUNCTION__, cnts);
9785                 RTW_INFO("%s: map data=%s\n", __FUNCTION__, tmp[2]);
9786
9787                 for (jj = 0, kk = 0; jj < cnts; jj++, kk += 2)
9788                         setdata[jj] = key_2char2num(tmp[2][kk], tmp[2][kk + 1]);
9789
9790                 EFUSE_GetEfuseDefinition(padapter, EFUSE_WIFI, TYPE_EFUSE_MAP_LEN, (PVOID)&max_available_len, _FALSE);
9791
9792                 if ((addr + cnts) > max_available_len) {
9793                         RTW_INFO("%s: addr(0x%X)+cnts(%d) parameter error!\n", __FUNCTION__, addr, cnts);
9794                         err = -EFAULT;
9795                         goto exit;
9796                 }
9797
9798                 if (rtw_efuse_map_write(padapter, addr, cnts, setdata) == _FAIL) {
9799                         RTW_INFO("%s: rtw_efuse_map_write error!!\n", __FUNCTION__);
9800                         err = -EFAULT;
9801                         goto exit;
9802                 }
9803                 *extra = 0;
9804                 RTW_INFO("%s: after rtw_efuse_map_write to _rtw_memcmp\n", __func__);
9805                 if (rtw_efuse_mask_map_read(padapter, addr, cnts, ShadowMapWiFi) == _SUCCESS) {
9806                         if (_rtw_memcmp((void *)ShadowMapWiFi , (void *)setdata, cnts)) {
9807                                 RTW_INFO("%s: WiFi write map afterf compare success\n", __FUNCTION__);
9808                                 sprintf(extra, "WiFi write map compare OK\n");
9809                                 err = 0;
9810                                 goto exit;
9811                         } else {
9812                                 sprintf(extra, "WiFi write map compare FAIL\n");
9813                                 RTW_INFO("%s: WiFi write map compare Fail\n", __FUNCTION__);
9814                                 err = 0;
9815                                 goto exit;
9816                         }
9817                 }
9818         } else if (strcmp(tmp[0], "wraw") == 0) {
9819                 if ((tmp[1] == NULL) || (tmp[2] == NULL)) {
9820                         err = -EINVAL;
9821                         goto exit;
9822                 }
9823
9824                 addr = simple_strtoul(tmp[1], &ptmp, 16);
9825                 addr &= 0xFFF;
9826
9827                 cnts = strlen(tmp[2]);
9828                 if (cnts % 2) {
9829                         err = -EINVAL;
9830                         goto exit;
9831                 }
9832                 cnts /= 2;
9833                 if (cnts == 0) {
9834                         err = -EINVAL;
9835                         goto exit;
9836                 }
9837
9838                 RTW_INFO("%s: addr=0x%X\n", __FUNCTION__, addr);
9839                 RTW_INFO("%s: cnts=%d\n", __FUNCTION__, cnts);
9840                 RTW_INFO("%s: raw data=%s\n", __FUNCTION__, tmp[2]);
9841
9842                 for (jj = 0, kk = 0; jj < cnts; jj++, kk += 2)
9843                         setrawdata[jj] = key_2char2num(tmp[2][kk], tmp[2][kk + 1]);
9844
9845                 if (rtw_efuse_access(padapter, _TRUE, addr, cnts, setrawdata) == _FAIL) {
9846                         RTW_INFO("%s: rtw_efuse_access error!!\n", __FUNCTION__);
9847                         err = -EFAULT;
9848                         goto exit;
9849                 }
9850         } else if (strcmp(tmp[0], "btwraw") == 0) {
9851                 if ((tmp[1] == NULL) || (tmp[2] == NULL)) {
9852                         err = -EINVAL;
9853                         goto exit;
9854                 }
9855
9856                 addr = simple_strtoul(tmp[1], &ptmp, 16);
9857                 addr &= 0xFFF;
9858
9859                 cnts = strlen(tmp[2]);
9860                 if (cnts % 2) {
9861                         err = -EINVAL;
9862                         goto exit;
9863                 }
9864                 cnts /= 2;
9865                 if (cnts == 0) {
9866                         err = -EINVAL;
9867                         goto exit;
9868                 }
9869
9870                 RTW_INFO("%s: addr=0x%X\n", __FUNCTION__, addr);
9871                 RTW_INFO("%s: cnts=%d\n", __FUNCTION__, cnts);
9872                 RTW_INFO("%s: raw data=%s\n", __FUNCTION__, tmp[2]);
9873
9874                 for (jj = 0, kk = 0; jj < cnts; jj++, kk += 2)
9875                         setrawdata[jj] = key_2char2num(tmp[2][kk], tmp[2][kk + 1]);
9876 #ifdef RTW_HALMAC
9877                 if (rtw_efuse_bt_access(padapter, _TRUE, addr, cnts, setrawdata) == _FAIL) {
9878                         RTW_INFO("%s: rtw_efuse_access error!!\n", __FUNCTION__);
9879                         err = -EFAULT;
9880                         goto exit;
9881                 }
9882 #else
9883                 rtw_write8(padapter, 0x35, 1); /* switch bank 1 (BT)*/
9884                 if (rtw_efuse_access(padapter, _TRUE, addr, cnts, setrawdata) == _FAIL) {
9885                         RTW_INFO("%s: rtw_efuse_access error!!\n", __FUNCTION__);
9886                         rtw_write8(padapter, 0x35, 0); /* switch bank 0 (WiFi)*/
9887                         err = -EFAULT;
9888                         goto exit;
9889                 }
9890                 rtw_write8(padapter, 0x35, 0); /* switch bank 0 (WiFi)*/
9891 #endif
9892         } else if (strcmp(tmp[0], "mac") == 0) {
9893                 if (tmp[1] == NULL) {
9894                         err = -EINVAL;
9895                         goto exit;
9896                 }
9897
9898                 /* mac,00e04c871200 */
9899
9900                 if (hal_efuse_macaddr_offset(padapter) == -1) {
9901                         err = -EFAULT;
9902                         goto exit;
9903                 }
9904
9905                 addr = hal_efuse_macaddr_offset(padapter);
9906                 cnts = strlen(tmp[1]);
9907                 if (cnts % 2) {
9908                         err = -EINVAL;
9909                         goto exit;
9910                 }
9911                 cnts /= 2;
9912                 if (cnts == 0) {
9913                         err = -EINVAL;
9914                         goto exit;
9915                 }
9916                 if (cnts > 6) {
9917                         RTW_INFO("%s: error data for mac addr=\"%s\"\n", __FUNCTION__, tmp[1]);
9918                         err = -EFAULT;
9919                         goto exit;
9920                 }
9921
9922                 RTW_INFO("%s: addr=0x%X\n", __FUNCTION__, addr);
9923                 RTW_INFO("%s: cnts=%d\n", __FUNCTION__, cnts);
9924                 RTW_INFO("%s: MAC address=%s\n", __FUNCTION__, tmp[1]);
9925
9926                 for (jj = 0, kk = 0; jj < cnts; jj++, kk += 2)
9927                         setdata[jj] = key_2char2num(tmp[1][kk], tmp[1][kk + 1]);
9928
9929                 EFUSE_GetEfuseDefinition(padapter, EFUSE_WIFI, TYPE_EFUSE_MAP_LEN, (PVOID)&max_available_len, _FALSE);
9930
9931                 if ((addr + cnts) > max_available_len) {
9932                         RTW_INFO("%s: addr(0x%X)+cnts(%d) parameter error!\n", __FUNCTION__, addr, cnts);
9933                         err = -EFAULT;
9934                         goto exit;
9935                 }
9936
9937                 if (rtw_efuse_map_write(padapter, addr, cnts, setdata) == _FAIL) {
9938                         RTW_INFO("%s: rtw_efuse_map_write error!!\n", __FUNCTION__);
9939                         err = -EFAULT;
9940                         goto exit;
9941                 }
9942         } else if (strcmp(tmp[0], "vidpid") == 0) {
9943                 if (tmp[1] == NULL) {
9944                         err = -EINVAL;
9945                         goto exit;
9946                 }
9947
9948                 /* pidvid,da0b7881               */
9949 #ifdef CONFIG_RTL8188E
9950 #ifdef CONFIG_USB_HCI
9951                 addr = EEPROM_VID_88EU;
9952 #endif
9953 #ifdef CONFIG_PCI_HCI
9954                 addr = EEPROM_VID_88EE;
9955 #endif
9956 #endif /* CONFIG_RTL8188E */
9957
9958 #ifdef CONFIG_RTL8192E
9959 #ifdef CONFIG_USB_HCI
9960                 addr = EEPROM_VID_8192EU;
9961 #endif
9962 #ifdef CONFIG_PCI_HCI
9963                 addr = EEPROM_VID_8192EE;
9964 #endif
9965 #endif /* CONFIG_RTL8188E */
9966
9967 #ifdef CONFIG_RTL8723B
9968                 addr = EEPROM_VID_8723BU;
9969 #endif
9970
9971 #ifdef CONFIG_RTL8188F
9972                 addr = EEPROM_VID_8188FU;
9973 #endif
9974
9975 #ifdef CONFIG_RTL8703B
9976 #ifdef CONFIG_USB_HCI
9977                 addr = EEPROM_VID_8703BU;
9978 #endif /* CONFIG_USB_HCI */
9979 #endif /* CONFIG_RTL8703B */
9980
9981 #ifdef CONFIG_RTL8723D
9982 #ifdef CONFIG_USB_HCI
9983                 addr = EEPROM_VID_8723DU;
9984 #endif /* CONFIG_USB_HCI */
9985 #endif /* CONFIG_RTL8723D */
9986
9987                 cnts = strlen(tmp[1]);
9988                 if (cnts % 2) {
9989                         err = -EINVAL;
9990                         goto exit;
9991                 }
9992                 cnts /= 2;
9993                 if (cnts == 0) {
9994                         err = -EINVAL;
9995                         goto exit;
9996                 }
9997
9998                 RTW_INFO("%s: addr=0x%X\n", __FUNCTION__, addr);
9999                 RTW_INFO("%s: cnts=%d\n", __FUNCTION__, cnts);
10000                 RTW_INFO("%s: VID/PID=%s\n", __FUNCTION__, tmp[1]);
10001
10002                 for (jj = 0, kk = 0; jj < cnts; jj++, kk += 2)
10003                         setdata[jj] = key_2char2num(tmp[1][kk], tmp[1][kk + 1]);
10004
10005                 EFUSE_GetEfuseDefinition(padapter, EFUSE_WIFI, TYPE_EFUSE_MAP_LEN, (PVOID)&max_available_len, _FALSE);
10006                 if ((addr + cnts) > max_available_len) {
10007                         RTW_INFO("%s: addr(0x%X)+cnts(%d) parameter error!\n", __FUNCTION__, addr, cnts);
10008                         err = -EFAULT;
10009                         goto exit;
10010                 }
10011
10012                 if (rtw_efuse_map_write(padapter, addr, cnts, setdata) == _FAIL) {
10013                         RTW_INFO("%s: rtw_efuse_map_write error!!\n", __FUNCTION__);
10014                         err = -EFAULT;
10015                         goto exit;
10016                 }
10017         } else if (strcmp(tmp[0], "wldumpfake") == 0) {
10018                 if (wifimaplen > EFUSE_MAX_MAP_LEN)
10019                         cnts = EFUSE_MAX_MAP_LEN;
10020                 else
10021                         cnts = wifimaplen;
10022                 if (rtw_efuse_mask_map_read(padapter, 0, cnts, pEfuseHal->fakeEfuseModifiedMap) == _SUCCESS)
10023                         RTW_INFO("%s: WiFi hw efuse dump to Fake map success\n", __func__);
10024                 else {
10025                         RTW_INFO("%s: WiFi hw efuse dump to Fake map Fail\n", __func__);
10026                         err = -EFAULT;
10027                 }
10028         } else if (strcmp(tmp[0], "btwmap") == 0) {
10029                 rtw_write8(padapter, 0xa3, 0x05); /* For 8723AB ,8821S ? */
10030                 BTStatus = rtw_read8(padapter, 0xa0);
10031                 RTW_INFO("%s: btwmap before read 0xa0 BT Status =0x%x\n", __FUNCTION__, BTStatus);
10032                 if (BTStatus != 0x04) {
10033                         sprintf(extra, "BT Status not Active ,can't do Write\n");
10034                         goto exit;
10035                 }
10036
10037                 if ((tmp[1] == NULL) || (tmp[2] == NULL)) {
10038                         err = -EINVAL;
10039                         goto exit;
10040                 }
10041
10042 #ifndef RTW_HALMAC
10043                 BTEfuse_PowerSwitch(padapter, 1, _TRUE);
10044                 addr = 0x1ff;
10045                 rtw_write8(padapter, EFUSE_CTRL + 1, (addr & 0xff));
10046                 rtw_msleep_os(10);
10047                 rtw_write8(padapter, EFUSE_CTRL + 2, ((addr >> 8) & 0x03));
10048                 rtw_msleep_os(10);
10049                 rtw_write8(padapter, EFUSE_CTRL + 3, 0x72);
10050                 rtw_msleep_os(10);
10051                 rtw_read8(padapter, EFUSE_CTRL);
10052                 BTEfuse_PowerSwitch(padapter, 1, _FALSE);
10053 #endif /* RTW_HALMAC */
10054
10055                 addr = simple_strtoul(tmp[1], &ptmp, 16);
10056                 addr &= 0xFFF;
10057
10058                 cnts = strlen(tmp[2]);
10059                 if (cnts % 2) {
10060                         err = -EINVAL;
10061                         goto exit;
10062                 }
10063                 cnts /= 2;
10064                 if (cnts == 0) {
10065                         err = -EINVAL;
10066                         goto exit;
10067                 }
10068
10069                 RTW_INFO("%s: addr=0x%X\n", __FUNCTION__, addr);
10070                 RTW_INFO("%s: cnts=%d\n", __FUNCTION__, cnts);
10071                 RTW_INFO("%s: BT data=%s\n", __FUNCTION__, tmp[2]);
10072
10073                 for (jj = 0, kk = 0; jj < cnts; jj++, kk += 2)
10074                         setdata[jj] = key_2char2num(tmp[2][kk], tmp[2][kk + 1]);
10075 #ifndef RTW_HALMAC
10076                 EFUSE_GetEfuseDefinition(padapter, EFUSE_BT, TYPE_EFUSE_MAP_LEN, (PVOID)&max_available_len, _FALSE);
10077                 if ((addr + cnts) > max_available_len) {
10078                         RTW_INFO("%s: addr(0x%X)+cnts(%d) parameter error!\n", __FUNCTION__, addr, cnts);
10079                         err = -EFAULT;
10080                         goto exit;
10081                 }
10082 #endif
10083                 if (rtw_BT_efuse_map_write(padapter, addr, cnts, setdata) == _FAIL) {
10084                         RTW_INFO("%s: rtw_BT_efuse_map_write error!!\n", __FUNCTION__);
10085                         err = -EFAULT;
10086                         goto exit;
10087                 }
10088                 *extra = 0;
10089                 RTW_INFO("%s: after rtw_BT_efuse_map_write to _rtw_memcmp\n", __FUNCTION__);
10090                 if ((rtw_BT_efuse_map_read(padapter, addr, cnts, ShadowMapBT) == _SUCCESS)) {
10091                         if (_rtw_memcmp((void *)ShadowMapBT , (void *)setdata, cnts)) {
10092                                 RTW_INFO("%s: BT write map compare OK BTStatus=0x%x\n", __FUNCTION__, BTStatus);
10093                                 sprintf(extra, "BT write map compare OK");
10094                                 err = 0;
10095                                 goto exit;
10096                         } else {
10097                                 sprintf(extra, "BT write map compare FAIL");
10098                                 RTW_INFO("%s: BT write map compare FAIL BTStatus=0x%x\n", __FUNCTION__, BTStatus);
10099                                 err = 0;
10100                                 goto exit;
10101                         }
10102                 }
10103         } else if (strcmp(tmp[0], "btwfake") == 0) {
10104                 if ((tmp[1] == NULL) || (tmp[2] == NULL)) {
10105                         err = -EINVAL;
10106                         goto exit;
10107                 }
10108
10109                 addr = simple_strtoul(tmp[1], &ptmp, 16);
10110                 addr &= 0xFFF;
10111
10112                 cnts = strlen(tmp[2]);
10113                 if (cnts % 2) {
10114                         err = -EINVAL;
10115                         goto exit;
10116                 }
10117                 cnts /= 2;
10118                 if (cnts == 0) {
10119                         err = -EINVAL;
10120                         goto exit;
10121                 }
10122
10123                 RTW_INFO("%s: addr=0x%X\n", __FUNCTION__, addr);
10124                 RTW_INFO("%s: cnts=%d\n", __FUNCTION__, cnts);
10125                 RTW_INFO("%s: BT tmp data=%s\n", __FUNCTION__, tmp[2]);
10126
10127                 for (jj = 0, kk = 0; jj < cnts; jj++, kk += 2)
10128                         pEfuseHal->fakeBTEfuseModifiedMap[addr + jj] = key_2char2num(tmp[2][kk], tmp[2][kk + 1]);
10129         } else if (strcmp(tmp[0], "btdumpfake") == 0) {
10130                 if (rtw_BT_efuse_map_read(padapter, 0, EFUSE_BT_MAX_MAP_LEN, pEfuseHal->fakeBTEfuseModifiedMap) == _SUCCESS)
10131                         RTW_INFO("%s: BT read all map success\n", __FUNCTION__);
10132                 else {
10133                         RTW_INFO("%s: BT read all map Fail!\n", __FUNCTION__);
10134                         err = -EFAULT;
10135                 }
10136         } else if (strcmp(tmp[0], "btfk2map") == 0) {
10137                 rtw_write8(padapter, 0xa3, 0x05);
10138                 BTStatus = rtw_read8(padapter, 0xa0);
10139                 RTW_INFO("%s: btwmap before read 0xa0 BT Status =0x%x\n", __FUNCTION__, BTStatus);
10140                 if (BTStatus != 0x04) {
10141                         sprintf(extra, "BT Status not Active Write FAIL\n");
10142                         goto exit;
10143                 }
10144 #ifndef RTW_HALMAC
10145                 BTEfuse_PowerSwitch(padapter, 1, _TRUE);
10146                 addr = 0x1ff;
10147                 rtw_write8(padapter, EFUSE_CTRL + 1, (addr & 0xff));
10148                 rtw_msleep_os(10);
10149                 rtw_write8(padapter, EFUSE_CTRL + 2, ((addr >> 8) & 0x03));
10150                 rtw_msleep_os(10);
10151                 rtw_write8(padapter, EFUSE_CTRL + 3, 0x72);
10152                 rtw_msleep_os(10);
10153                 rtw_read8(padapter, EFUSE_CTRL);
10154                 BTEfuse_PowerSwitch(padapter, 1, _FALSE);
10155 #endif /* RTW_HALMAC */
10156                 _rtw_memcpy(pEfuseHal->BTEfuseModifiedMap, pEfuseHal->fakeBTEfuseModifiedMap, EFUSE_BT_MAX_MAP_LEN);
10157
10158                 if (rtw_BT_efuse_map_write(padapter, 0x00, EFUSE_BT_MAX_MAP_LEN, pEfuseHal->fakeBTEfuseModifiedMap) == _FAIL) {
10159                         RTW_INFO("%s: rtw_BT_efuse_map_write error!\n", __FUNCTION__);
10160                         err = -EFAULT;
10161                         goto exit;
10162                 }
10163
10164                 RTW_INFO("pEfuseHal->fakeBTEfuseModifiedMap OFFSET\tVALUE(hex)\n");
10165                 for (i = 0; i < EFUSE_BT_MAX_MAP_LEN; i += 16) {
10166                         printk("0x%02x\t", i);
10167                         for (j = 0; j < 8; j++)
10168                                 printk("%02X ", pEfuseHal->fakeBTEfuseModifiedMap[i + j]);
10169                         printk("\t");
10170
10171                         for (; j < 16; j++)
10172                                 printk("%02X ", pEfuseHal->fakeBTEfuseModifiedMap[i + j]);
10173                         printk("\n");
10174                 }
10175                 printk("\n");
10176 #if 1
10177                 err = -EFAULT;
10178                 RTW_INFO("%s: rtw_BT_efuse_map_read _rtw_memcmp\n", __FUNCTION__);
10179                 if ((rtw_BT_efuse_map_read(padapter, 0x00, EFUSE_BT_MAX_MAP_LEN, pEfuseHal->fakeBTEfuseInitMap) == _SUCCESS)) {
10180                         if (_rtw_memcmp((void *)pEfuseHal->fakeBTEfuseModifiedMap, (void *)pEfuseHal->fakeBTEfuseInitMap, EFUSE_BT_MAX_MAP_LEN)) {
10181                                 sprintf(extra, "BT write map compare OK");
10182                                 RTW_INFO("%s: BT write map afterf compare success BTStatus=0x%x\n", __FUNCTION__, BTStatus);
10183                                 err = 0;
10184                                 goto exit;
10185                         } else {
10186                                 sprintf(extra, "BT write map compare FAIL");
10187                                 if (rtw_BT_efuse_map_write(padapter, 0x00, EFUSE_BT_MAX_MAP_LEN, pEfuseHal->fakeBTEfuseModifiedMap) == _FAIL)
10188                                         RTW_INFO("%s: rtw_BT_efuse_map_write compare error,retry = %d!\n", __FUNCTION__, i);
10189
10190                                 if (rtw_BT_efuse_map_read(padapter, EFUSE_BT, EFUSE_BT_MAX_MAP_LEN, pEfuseHal->fakeBTEfuseInitMap) == _SUCCESS) {
10191                                         RTW_INFO("pEfuseHal->fakeBTEfuseInitMap OFFSET\tVALUE(hex)\n");
10192
10193                                         for (i = 0; i < EFUSE_BT_MAX_MAP_LEN; i += 16) {
10194                                                 printk("0x%02x\t", i);
10195                                                 for (j = 0; j < 8; j++)
10196                                                         printk("%02X ", pEfuseHal->fakeBTEfuseInitMap[i + j]);
10197                                                 printk("\t");
10198                                                 for (; j < 16; j++)
10199                                                         printk("%02X ", pEfuseHal->fakeBTEfuseInitMap[i + j]);
10200                                                 printk("\n");
10201                                         }
10202                                         printk("\n");
10203                                 }
10204                                 RTW_INFO("%s: BT write map afterf compare not match to write efuse try write Map again , BTStatus=0x%x\n", __FUNCTION__, BTStatus);
10205                                 goto exit;
10206                         }
10207                 }
10208 #endif
10209
10210         } else if (strcmp(tmp[0], "wlfk2map") == 0) {
10211                 *extra = 0;
10212
10213                 if (padapter->registrypriv.bFileMaskEfuse != _TRUE && pmp_priv->bloadefusemap == _TRUE) {
10214                         RTW_INFO("%s: File eFuse mask file not to be loaded\n", __FUNCTION__);
10215                         sprintf(extra, "Not load eFuse mask file yet, Please use the efuse_mask CMD.\n");
10216                         err = 0;
10217                         goto exit;
10218                 }
10219
10220                 if (wifimaplen > EFUSE_MAX_MAP_LEN)
10221                         cnts = EFUSE_MAX_MAP_LEN;
10222                 else
10223                         cnts = wifimaplen;
10224                 if (rtw_efuse_map_write(padapter, 0x00, cnts, pEfuseHal->fakeEfuseModifiedMap) == _FAIL) {
10225                         RTW_INFO("%s: rtw_efuse_map_write fakeEfuseModifiedMap error!\n", __FUNCTION__);
10226                         err = -EFAULT;
10227                         goto exit;
10228                 }
10229
10230                 if (rtw_efuse_mask_map_read(padapter, 0x00, wifimaplen, ShadowMapWiFi) == _SUCCESS) {
10231                         if (_rtw_memcmp((void *)ShadowMapWiFi , (void *)pEfuseHal->fakeEfuseModifiedMap, cnts)) {
10232                                 RTW_INFO("%s: WiFi write map afterf compare OK\n", __FUNCTION__);
10233                                 sprintf(extra, "WiFi write map compare OK\n");
10234                                 err = 0;
10235                                 goto exit;
10236                         } else {
10237                                 sprintf(extra, "WiFi write map compare FAIL\n");
10238                                 RTW_INFO("%s: WiFi write map compare Fail\n", __FUNCTION__);
10239                                 err = 0;
10240                                 goto exit;
10241                         }
10242                 }
10243         } else if (strcmp(tmp[0], "wlwfake") == 0) {
10244                 if ((tmp[1] == NULL) || (tmp[2] == NULL)) {
10245                         err = -EINVAL;
10246                         goto exit;
10247                 }
10248
10249                 addr = simple_strtoul(tmp[1], &ptmp, 16);
10250                 addr &= 0xFFF;
10251
10252                 cnts = strlen(tmp[2]);
10253                 if (cnts % 2) {
10254                         err = -EINVAL;
10255                         goto exit;
10256                 }
10257                 cnts /= 2;
10258                 if (cnts == 0) {
10259                         err = -EINVAL;
10260                         goto exit;
10261                 }
10262
10263                 RTW_INFO("%s: addr=0x%X\n", __FUNCTION__, addr);
10264                 RTW_INFO("%s: cnts=%d\n", __FUNCTION__, cnts);
10265                 RTW_INFO("%s: map tmp data=%s\n", __FUNCTION__, tmp[2]);
10266
10267                 for (jj = 0, kk = 0; jj < cnts; jj++, kk += 2)
10268                         pEfuseHal->fakeEfuseModifiedMap[addr + jj] = key_2char2num(tmp[2][kk], tmp[2][kk + 1]);
10269                 _rtw_memset(extra, '\0', strlen(extra));
10270                 sprintf(extra, "wlwfake OK\n");
10271
10272         }
10273         else if (strcmp(tmp[0], "wfakemac") == 0) {
10274                 if (tmp[1] == NULL) {
10275                         err = -EINVAL;
10276                         goto exit;
10277                 }
10278                 /* wfakemac,00e04c871200 */
10279                 if (hal_efuse_macaddr_offset(padapter) == -1) {
10280                         err = -EFAULT;
10281                         goto exit;
10282                 }
10283
10284                 addr = hal_efuse_macaddr_offset(padapter);
10285                 cnts = strlen(tmp[1]);
10286                 if (cnts % 2) {
10287                         err = -EINVAL;
10288                         goto exit;
10289                 }
10290                 cnts /= 2;
10291                 if (cnts == 0) {
10292                         err = -EINVAL;
10293                         goto exit;
10294                 }
10295                 if (cnts > 6) {
10296                         RTW_INFO("%s: error data for mac addr=\"%s\"\n", __FUNCTION__, tmp[1]);
10297                         err = -EFAULT;
10298                         goto exit;
10299                 }
10300
10301                 RTW_INFO("%s: addr=0x%X\n", __FUNCTION__, addr);
10302                 RTW_INFO("%s: cnts=%d\n", __FUNCTION__, cnts);
10303                 RTW_INFO("%s: MAC address=%s\n", __FUNCTION__, tmp[1]);
10304
10305                 for (jj = 0, kk = 0; jj < cnts; jj++, kk += 2)
10306                         pEfuseHal->fakeEfuseModifiedMap[addr + jj] = key_2char2num(tmp[1][kk], tmp[1][kk + 1]);
10307
10308                 _rtw_memset(extra, '\0', strlen(extra));
10309                 sprintf(extra, "write mac addr to fake map OK\n");
10310         } else if(strcmp(tmp[0], "update") == 0) {
10311                 RTW_INFO("To Use new eFuse map\n");
10312                 /*step read efuse/eeprom data and get mac_addr*/
10313                 rtw_hal_read_chip_info(padapter);
10314                 /* set mac addr*/
10315                 rtw_macaddr_cfg(adapter_mac_addr(padapter), get_hal_mac_addr(padapter));
10316                 _rtw_memcpy(padapter->pnetdev->dev_addr, get_hal_mac_addr(padapter), ETH_ALEN); /* set mac addr to net_device */
10317
10318 #ifdef CONFIG_P2P
10319                 rtw_init_wifidirect_addrs(padapter, adapter_mac_addr(padapter), adapter_mac_addr(padapter));
10320 #endif
10321 #ifdef CONFIG_MI_WITH_MBSSID_CAM
10322                 rtw_hal_change_macaddr_mbid(padapter, adapter_mac_addr(padapter));
10323 #else
10324                 rtw_hal_set_hwreg(padapter, HW_VAR_MAC_ADDR, adapter_mac_addr(padapter)); /* set mac addr to mac register */
10325 #endif
10326                 /*pHalFunc->hal_deinit(padapter);*/
10327                 if (pHalFunc->hal_init(padapter) == _FAIL) {
10328                         err = -EINVAL;
10329                         goto exit;
10330                 }
10331                 _rtw_memset(extra, '\0', strlen(extra));
10332                 sprintf(extra, "eFuse Update OK\n");
10333         }
10334
10335 exit:
10336         if (setdata)
10337                 rtw_mfree(setdata, 1024);
10338         if (ShadowMapBT)
10339                 rtw_mfree(ShadowMapBT, EFUSE_BT_MAX_MAP_LEN);
10340         if (ShadowMapWiFi)
10341                 rtw_mfree(ShadowMapWiFi, wifimaplen);
10342         if (setrawdata)
10343                 rtw_mfree(setrawdata, EFUSE_MAX_SIZE);
10344
10345         wrqu->length = strlen(extra);
10346
10347         if (padapter->registrypriv.mp_mode == 0) {
10348 #ifdef CONFIG_IPS
10349                 rtw_pm_set_ips(padapter, ips_mode);
10350 #endif /* CONFIG_IPS */
10351
10352 #ifdef CONFIG_LPS
10353                 rtw_pm_set_lps(padapter, lps_mode);
10354 #endif /* CONFIG_LPS */
10355         }
10356
10357         return err;
10358 }
10359
10360 #ifdef CONFIG_MP_INCLUDED
10361
10362 #ifdef CONFIG_RTW_CUSTOMER_STR
10363 static int rtw_mp_customer_str(
10364         struct net_device *dev,
10365         struct iw_request_info *info,
10366         union iwreq_data *wrqu, char *extra)
10367 {
10368         _adapter *adapter = rtw_netdev_priv(dev);
10369         u32 len;
10370         u8 *pbuf = NULL, *pch;
10371         char *ptmp;
10372         u8 param[RTW_CUSTOMER_STR_LEN];
10373         u8 count = 0;
10374         u8 tmp;
10375         u8 i;
10376         u32 pos;
10377         u8 ret;
10378         u8 read = 0;
10379
10380         if (adapter->registrypriv.mp_mode != 1
10381                 || !adapter->registrypriv.mp_customer_str)
10382                 return -EFAULT;
10383
10384         len = wrqu->data.length;
10385
10386         pbuf = (u8 *)rtw_zmalloc(len);
10387         if (pbuf == NULL) {
10388                 RTW_WARN("%s: no memory!\n", __func__);
10389                 return -ENOMEM;
10390         }
10391
10392         if (copy_from_user(pbuf, wrqu->data.pointer, len)) {
10393                 rtw_mfree(pbuf, len);
10394                 RTW_WARN("%s: copy from user fail!\n", __func__);
10395                 return -EFAULT;
10396         }
10397         RTW_INFO("%s: string=\"%s\"\n", __func__, pbuf);
10398
10399         ptmp = (char *)pbuf;
10400         pch = strsep(&ptmp, ",");
10401         if ((pch == NULL) || (strlen(pch) == 0)) {
10402                 rtw_mfree(pbuf, len);
10403                 RTW_INFO("%s: parameter error(no cmd)!\n", __func__);
10404                 return -EFAULT;
10405         }
10406
10407         _rtw_memset(param, 0xFF, RTW_CUSTOMER_STR_LEN);
10408
10409         if (strcmp(pch, "read") == 0) {
10410                 read = 1;
10411                 ret = rtw_hal_customer_str_read(adapter, param);
10412
10413         } else if (strcmp(pch, "write") == 0) {
10414                 do {
10415                         pch = strsep(&ptmp, ":");
10416                         if ((pch == NULL) || (strlen(pch) == 0))
10417                                 break;
10418                         if (strlen(pch) != 2
10419                                 || IsHexDigit(*pch) == _FALSE
10420                                 || IsHexDigit(*(pch + 1)) == _FALSE
10421                                 || sscanf(pch, "%hhx", &tmp) != 1
10422                         ) {
10423                                 RTW_WARN("%s: invalid 8-bit hex!\n", __func__);
10424                                 rtw_mfree(pbuf, len);
10425                                 return -EFAULT;
10426                         }
10427
10428                         param[count++] = tmp;
10429
10430                 } while (count < RTW_CUSTOMER_STR_LEN);
10431
10432                 if (count == 0) {
10433                         rtw_mfree(pbuf, len);
10434                         RTW_WARN("%s: no input!\n", __func__);
10435                         return -EFAULT;
10436                 }
10437                 ret = rtw_hal_customer_str_write(adapter, param);
10438         } else {
10439                 rtw_mfree(pbuf, len);
10440                 RTW_INFO("%s: parameter error(unknown cmd)!\n", __func__);
10441                 return -EFAULT;
10442         }
10443
10444         pos = sprintf(extra, "%s: ", read ? "read" : "write");
10445         if (read == 0 || ret == _SUCCESS) {
10446                 for (i = 0; i < RTW_CUSTOMER_STR_LEN; i++)
10447                         pos += sprintf(extra + pos, "%02x:", param[i]);
10448                 extra[pos] = 0;
10449                 pos--;
10450         }
10451         pos += sprintf(extra + pos, " %s", ret == _SUCCESS ? "OK" : "FAIL");
10452
10453         wrqu->data.length = strlen(extra) + 1;
10454
10455 free_buf:
10456         rtw_mfree(pbuf, len);
10457         return 0;
10458 }
10459 #endif /* CONFIG_RTW_CUSTOMER_STR */
10460
10461 static int rtw_priv_mp_set(struct net_device *dev,
10462                            struct iw_request_info *info,
10463                            union iwreq_data *wdata, char *extra)
10464 {
10465
10466         struct iw_point *wrqu = (struct iw_point *)wdata;
10467         u32 subcmd = wrqu->flags;
10468
10469         switch (subcmd) {
10470         case CTA_TEST:
10471                 RTW_INFO("set CTA_TEST\n");
10472                 rtw_cta_test_start(dev, info, wdata, extra);
10473                 break;
10474         case MP_DISABLE_BT_COEXIST:
10475                 RTW_INFO("set case MP_DISABLE_BT_COEXIST\n");
10476                 rtw_mp_disable_bt_coexist(dev, info, wdata, extra);
10477                 break;
10478         case MP_IQK:
10479                 RTW_INFO("set MP_IQK\n");
10480                 rtw_mp_iqk(dev, info, wrqu, extra);
10481                 break;
10482         case MP_LCK:
10483                 RTW_INFO("set MP_LCK\n");
10484                 rtw_mp_lck(dev, info, wrqu, extra);
10485         break;
10486
10487         default:
10488                 return -EIO;
10489         }
10490
10491         return 0;
10492 }
10493
10494 static int rtw_priv_mp_get(struct net_device *dev,
10495                            struct iw_request_info *info,
10496                            union iwreq_data *wdata, char *extra)
10497 {
10498
10499         struct iw_point *wrqu = (struct iw_point *)wdata;
10500         u32 subcmd = wrqu->flags;
10501
10502         switch (subcmd) {
10503         case MP_START:
10504                 RTW_INFO("set case mp_start\n");
10505                 rtw_mp_start(dev, info, wrqu, extra);
10506                 break;
10507         case MP_STOP:
10508                 RTW_INFO("set case mp_stop\n");
10509                 rtw_mp_stop(dev, info, wrqu, extra);
10510                 break;
10511         case MP_BANDWIDTH:
10512                 RTW_INFO("set case mp_bandwidth\n");
10513                 rtw_mp_bandwidth(dev, info, wrqu, extra);
10514                 break;
10515         case MP_RESET_STATS:
10516                 RTW_INFO("set case MP_RESET_STATS\n");
10517                 rtw_mp_reset_stats(dev, info, wrqu, extra);
10518                 break;
10519         case MP_SetRFPathSwh:
10520                 RTW_INFO("set MP_SetRFPathSwitch\n");
10521                 rtw_mp_SetRFPath(dev, info, wrqu, extra);
10522                 break;
10523         case WRITE_REG:
10524                 rtw_mp_write_reg(dev, info, wrqu, extra);
10525                 break;
10526         case WRITE_RF:
10527                 rtw_mp_write_rf(dev, info, wrqu, extra);
10528                 break;
10529         case MP_PHYPARA:
10530                 RTW_INFO("mp_get  MP_PHYPARA\n");
10531                 rtw_mp_phypara(dev, info, wrqu, extra);
10532                 break;
10533         case MP_CHANNEL:
10534                 RTW_INFO("set case mp_channel\n");
10535                 rtw_mp_channel(dev , info, wrqu, extra);
10536                 break;
10537         case READ_REG:
10538                 RTW_INFO("mp_get  READ_REG\n");
10539                 rtw_mp_read_reg(dev, info, wrqu, extra);
10540                 break;
10541         case READ_RF:
10542                 RTW_INFO("mp_get  READ_RF\n");
10543                 rtw_mp_read_rf(dev, info, wrqu, extra);
10544                 break;
10545         case MP_RATE:
10546                 RTW_INFO("set case mp_rate\n");
10547                 rtw_mp_rate(dev, info, wrqu, extra);
10548                 break;
10549         case MP_TXPOWER:
10550                 RTW_INFO("set case MP_TXPOWER\n");
10551                 rtw_mp_txpower(dev, info, wrqu, extra);
10552                 break;
10553         case MP_ANT_TX:
10554                 RTW_INFO("set case MP_ANT_TX\n");
10555                 rtw_mp_ant_tx(dev, info, wrqu, extra);
10556                 break;
10557         case MP_ANT_RX:
10558                 RTW_INFO("set case MP_ANT_RX\n");
10559                 rtw_mp_ant_rx(dev, info, wrqu, extra);
10560                 break;
10561         case MP_QUERY:
10562                 rtw_mp_trx_query(dev, info, wrqu, extra);
10563                 break;
10564         case MP_CTX:
10565                 RTW_INFO("set case MP_CTX\n");
10566                 rtw_mp_ctx(dev, info, wrqu, extra);
10567                 break;
10568         case MP_ARX:
10569                 RTW_INFO("set case MP_ARX\n");
10570                 rtw_mp_arx(dev, info, wrqu, extra);
10571                 break;
10572         case MP_DUMP:
10573                 RTW_INFO("set case MP_DUMP\n");
10574                 rtw_mp_dump(dev, info, wrqu, extra);
10575                 break;
10576         case MP_PSD:
10577                 RTW_INFO("set case MP_PSD\n");
10578                 rtw_mp_psd(dev, info, wrqu, extra);
10579                 break;
10580         case MP_THER:
10581                 RTW_INFO("set case MP_THER\n");
10582                 rtw_mp_thermal(dev, info, wrqu, extra);
10583                 break;
10584         case MP_PwrCtlDM:
10585                 RTW_INFO("set MP_PwrCtlDM\n");
10586                 rtw_mp_PwrCtlDM(dev, info, wrqu, extra);
10587                 break;
10588         case MP_QueryDrvStats:
10589                 RTW_INFO("mp_get MP_QueryDrvStats\n");
10590                 rtw_mp_QueryDrv(dev, info, wdata, extra);
10591                 break;
10592         case MP_PWRTRK:
10593                 RTW_INFO("set case MP_PWRTRK\n");
10594                 rtw_mp_pwrtrk(dev, info, wrqu, extra);
10595                 break;
10596         case EFUSE_SET:
10597                 RTW_INFO("set case efuse set\n");
10598                 rtw_mp_efuse_set(dev, info, wdata, extra);
10599                 break;
10600         case EFUSE_GET:
10601                 RTW_INFO("efuse get EFUSE_GET\n");
10602                 rtw_mp_efuse_get(dev, info, wdata, extra);
10603                 break;
10604         case MP_GET_TXPOWER_INX:
10605                 RTW_INFO("mp_get MP_GET_TXPOWER_INX\n");
10606                 rtw_mp_txpower_index(dev, info, wrqu, extra);
10607                 break;
10608         case MP_GETVER:
10609                 RTW_INFO("mp_get MP_GETVER\n");
10610                 rtw_mp_getver(dev, info, wdata, extra);
10611                 break;
10612         case MP_MON:
10613                 RTW_INFO("mp_get MP_MON\n");
10614                 rtw_mp_mon(dev, info, wdata, extra);
10615                 break;
10616         case EFUSE_MASK:
10617                 RTW_INFO("mp_get EFUSE_MASK\n");
10618                 rtw_efuse_mask_file(dev, info, wdata, extra);
10619                 break;
10620         case  EFUSE_FILE:
10621                 RTW_INFO("mp_get EFUSE_FILE\n");
10622                 rtw_efuse_file_map(dev, info, wdata, extra);
10623                 break;
10624         case  MP_TX:
10625                 RTW_INFO("mp_get MP_TX\n");
10626                 rtw_mp_tx(dev, info, wdata, extra);
10627                 break;
10628         case  MP_RX:
10629                 RTW_INFO("mp_get MP_RX\n");
10630                 rtw_mp_rx(dev, info, wdata, extra);
10631                 break;
10632         case MP_HW_TX_MODE:
10633                 RTW_INFO("mp_get MP_HW_TX_MODE\n");
10634                 rtw_mp_hwtx(dev, info, wdata, extra);
10635                 break;
10636 #ifdef CONFIG_RTW_CUSTOMER_STR
10637         case MP_CUSTOMER_STR:
10638                 RTW_INFO("customer str\n");
10639                 rtw_mp_customer_str(dev, info, wdata, extra);
10640                 break;
10641 #endif
10642         default:
10643                 return -EIO;
10644         }
10645
10646         return 0;
10647 }
10648 #endif /*#if defined(CONFIG_MP_INCLUDED)*/
10649
10650
10651 #ifdef CONFIG_SDIO_INDIRECT_ACCESS
10652 #define DBG_MP_SDIO_INDIRECT_ACCESS 1
10653 static int rtw_mp_sd_iread(struct net_device *dev
10654                            , struct iw_request_info *info
10655                            , struct iw_point *wrqu
10656                            , char *extra)
10657 {
10658         char input[16];
10659         u8 width;
10660         unsigned long addr;
10661         u32 ret = 0;
10662         PADAPTER padapter = rtw_netdev_priv(dev);
10663
10664         if (wrqu->length > 16) {
10665                 RTW_INFO(FUNC_ADPT_FMT" wrqu->length:%d\n", FUNC_ADPT_ARG(padapter), wrqu->length);
10666                 ret = -EINVAL;
10667                 goto exit;
10668         }
10669
10670         if (copy_from_user(input, wrqu->pointer, wrqu->length)) {
10671                 RTW_INFO(FUNC_ADPT_FMT" copy_from_user fail\n", FUNC_ADPT_ARG(padapter));
10672                 ret = -EFAULT;
10673                 goto exit;
10674         }
10675
10676         _rtw_memset(extra, 0, wrqu->length);
10677
10678         if (sscanf(input, "%hhu,%lx", &width, &addr) != 2) {
10679                 RTW_INFO(FUNC_ADPT_FMT" sscanf fail\n", FUNC_ADPT_ARG(padapter));
10680                 ret = -EINVAL;
10681                 goto exit;
10682         }
10683
10684         if (addr > 0x3FFF) {
10685                 RTW_INFO(FUNC_ADPT_FMT" addr:0x%lx\n", FUNC_ADPT_ARG(padapter), addr);
10686                 ret = -EINVAL;
10687                 goto exit;
10688         }
10689
10690         if (DBG_MP_SDIO_INDIRECT_ACCESS)
10691                 RTW_INFO(FUNC_ADPT_FMT" width:%u, addr:0x%lx\n", FUNC_ADPT_ARG(padapter), width, addr);
10692
10693         switch (width) {
10694         case 1:
10695                 sprintf(extra, "0x%02x", rtw_sd_iread8(padapter, addr));
10696                 wrqu->length = strlen(extra);
10697                 break;
10698         case 2:
10699                 sprintf(extra, "0x%04x", rtw_sd_iread16(padapter, addr));
10700                 wrqu->length = strlen(extra);
10701                 break;
10702         case 4:
10703                 sprintf(extra, "0x%08x", rtw_sd_iread32(padapter, addr));
10704                 wrqu->length = strlen(extra);
10705                 break;
10706         default:
10707                 wrqu->length = 0;
10708                 ret = -EINVAL;
10709                 break;
10710         }
10711
10712 exit:
10713         return ret;
10714 }
10715
10716 static int rtw_mp_sd_iwrite(struct net_device *dev
10717                             , struct iw_request_info *info
10718                             , struct iw_point *wrqu
10719                             , char *extra)
10720 {
10721         char width;
10722         unsigned long addr, data;
10723         int ret = 0;
10724         PADAPTER padapter = rtw_netdev_priv(dev);
10725         char input[32];
10726
10727         if (wrqu->length > 32) {
10728                 RTW_INFO(FUNC_ADPT_FMT" wrqu->length:%d\n", FUNC_ADPT_ARG(padapter), wrqu->length);
10729                 ret = -EINVAL;
10730                 goto exit;
10731         }
10732
10733         if (copy_from_user(input, wrqu->pointer, wrqu->length)) {
10734                 RTW_INFO(FUNC_ADPT_FMT" copy_from_user fail\n", FUNC_ADPT_ARG(padapter));
10735                 ret = -EFAULT;
10736                 goto exit;
10737         }
10738
10739         _rtw_memset(extra, 0, wrqu->length);
10740
10741         if (sscanf(input, "%hhu,%lx,%lx", &width, &addr, &data) != 3) {
10742                 RTW_INFO(FUNC_ADPT_FMT" sscanf fail\n", FUNC_ADPT_ARG(padapter));
10743                 ret = -EINVAL;
10744                 goto exit;
10745         }
10746
10747         if (addr > 0x3FFF) {
10748                 RTW_INFO(FUNC_ADPT_FMT" addr:0x%lx\n", FUNC_ADPT_ARG(padapter), addr);
10749                 ret = -EINVAL;
10750                 goto exit;
10751         }
10752
10753         if (DBG_MP_SDIO_INDIRECT_ACCESS)
10754                 RTW_INFO(FUNC_ADPT_FMT" width:%u, addr:0x%lx, data:0x%lx\n", FUNC_ADPT_ARG(padapter), width, addr, data);
10755
10756         switch (width) {
10757         case 1:
10758                 if (data > 0xFF) {
10759                         ret = -EINVAL;
10760                         break;
10761                 }
10762                 rtw_sd_iwrite8(padapter, addr, data);
10763                 break;
10764         case 2:
10765                 if (data > 0xFFFF) {
10766                         ret = -EINVAL;
10767                         break;
10768                 }
10769                 rtw_sd_iwrite16(padapter, addr, data);
10770                 break;
10771         case 4:
10772                 rtw_sd_iwrite32(padapter, addr, data);
10773                 break;
10774         default:
10775                 wrqu->length = 0;
10776                 ret = -EINVAL;
10777                 break;
10778         }
10779
10780 exit:
10781         return ret;
10782 }
10783 #endif /* CONFIG_SDIO_INDIRECT_ACCESS */
10784
10785 static int rtw_priv_set(struct net_device *dev,
10786                         struct iw_request_info *info,
10787                         union iwreq_data *wdata, char *extra)
10788 {
10789         struct iw_point *wrqu = (struct iw_point *)wdata;
10790         u32 subcmd = wrqu->flags;
10791         PADAPTER padapter = rtw_netdev_priv(dev);
10792
10793         if (padapter == NULL)
10794                 return -ENETDOWN;
10795
10796         if (padapter->bup == _FALSE) {
10797                 RTW_INFO(" %s fail =>(padapter->bup == _FALSE )\n", __FUNCTION__);
10798                 return -ENETDOWN;
10799         }
10800
10801         if (RTW_CANNOT_RUN(padapter)) {
10802                 RTW_INFO("%s fail =>(bSurpriseRemoved == _TRUE) || ( bDriverStopped == _TRUE)\n", __func__);
10803                 return -ENETDOWN;
10804         }
10805
10806         if (extra == NULL) {
10807                 wrqu->length = 0;
10808                 return -EIO;
10809         }
10810
10811         if (subcmd < MP_NULL) {
10812 #ifdef CONFIG_MP_INCLUDED
10813                 rtw_priv_mp_set(dev, info, wdata, extra);
10814 #endif
10815                 return 0;
10816         }
10817
10818         switch (subcmd) {
10819 #ifdef CONFIG_WOWLAN
10820         case MP_WOW_ENABLE:
10821                 RTW_INFO("set case MP_WOW_ENABLE: %s\n", extra);
10822
10823                 rtw_wowlan_ctrl(dev, info, wdata, extra);
10824                 break;
10825         case MP_WOW_SET_PATTERN:
10826                 RTW_INFO("set case MP_WOW_SET_PATTERN: %s\n", extra);
10827                 rtw_wowlan_set_pattern(dev, info, wdata, extra);
10828                 break;
10829 #endif
10830 #ifdef CONFIG_AP_WOWLAN
10831         case MP_AP_WOW_ENABLE:
10832                 RTW_INFO("set case MP_AP_WOW_ENABLE: %s\n", extra);
10833                 rtw_ap_wowlan_ctrl(dev, info, wdata, extra);
10834                 break;
10835 #endif
10836 #ifdef CONFIG_APPEND_VENDOR_IE_ENABLE
10837         case VENDOR_IE_SET:
10838                 RTW_INFO("set case VENDOR_IE_SET\n");
10839                 rtw_vendor_ie_set(dev , info , wdata , extra);
10840                 break;
10841 #endif
10842         default:
10843                 return -EIO;
10844         }
10845
10846         return 0;
10847 }
10848
10849
10850 static int rtw_priv_get(struct net_device *dev,
10851                         struct iw_request_info *info,
10852                         union iwreq_data *wdata, char *extra)
10853 {
10854         struct iw_point *wrqu = (struct iw_point *)wdata;
10855         u32 subcmd = wrqu->flags;
10856         PADAPTER padapter = rtw_netdev_priv(dev);
10857
10858
10859         if (padapter == NULL)
10860                 return -ENETDOWN;
10861
10862         if (padapter->bup == _FALSE) {
10863                 RTW_INFO(" %s fail =>(padapter->bup == _FALSE )\n", __FUNCTION__);
10864                 return -ENETDOWN;
10865         }
10866
10867         if (RTW_CANNOT_RUN(padapter)) {
10868                 RTW_INFO("%s fail =>(padapter->bSurpriseRemoved == _TRUE) || ( padapter->bDriverStopped == _TRUE)\n", __func__);
10869                 return -ENETDOWN;
10870         }
10871
10872         if (extra == NULL) {
10873                 wrqu->length = 0;
10874                 return -EIO;
10875         }
10876
10877         if (subcmd < MP_NULL) {
10878 #ifdef CONFIG_MP_INCLUDED
10879                 rtw_priv_mp_get(dev, info, wdata, extra);
10880 #endif          
10881                 return 0;
10882         }
10883
10884         switch (subcmd) {
10885 #if defined(CONFIG_RTL8723B)
10886         case MP_SetBT:
10887                 RTW_INFO("set MP_SetBT\n");
10888                 rtw_mp_SetBT(dev, info, wdata, extra);
10889                 break;
10890 #endif
10891 #ifdef CONFIG_SDIO_INDIRECT_ACCESS
10892         case MP_SD_IREAD:
10893                 rtw_mp_sd_iread(dev, info, wrqu, extra);
10894                 break;
10895         case MP_SD_IWRITE:
10896                 rtw_mp_sd_iwrite(dev, info, wrqu, extra);
10897                 break;
10898 #endif
10899 #ifdef CONFIG_APPEND_VENDOR_IE_ENABLE
10900         case VENDOR_IE_GET:
10901                 RTW_INFO("get case VENDOR_IE_GET\n");
10902                 rtw_vendor_ie_get(dev , info , wdata , extra);
10903                 break;
10904 #endif
10905         default:
10906                 return -EIO;
10907         }
10908
10909         rtw_msleep_os(10); /* delay 5ms for sending pkt before exit adb shell operation */
10910         return 0;
10911 }
10912
10913
10914
10915 static int rtw_wx_tdls_wfd_enable(struct net_device *dev,
10916                                   struct iw_request_info *info,
10917                                   union iwreq_data *wrqu, char *extra)
10918 {
10919         int ret = 0;
10920
10921 #ifdef CONFIG_TDLS
10922 #ifdef CONFIG_WFD
10923
10924         _adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
10925
10926         RTW_INFO("[%s] %s %d\n", __FUNCTION__, extra, wrqu->data.length - 1);
10927
10928         if (extra[0] == '0')
10929                 rtw_tdls_wfd_enable(padapter, 0);
10930         else
10931                 rtw_tdls_wfd_enable(padapter, 1);
10932
10933 #endif /* CONFIG_WFD */
10934 #endif /* CONFIG_TDLS */
10935
10936         return ret;
10937 }
10938
10939 static int rtw_tdls_weaksec(struct net_device *dev,
10940                             struct iw_request_info *info,
10941                             union iwreq_data *wrqu, char *extra)
10942 {
10943         int ret = 0;
10944
10945 #ifdef CONFIG_TDLS
10946
10947         u8 i, j;
10948         _adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
10949
10950         RTW_INFO("[%s] %s %d\n", __FUNCTION__, extra, wrqu->data.length - 1);
10951
10952         if (extra[0] == '0')
10953                 padapter->wdinfo.wfd_tdls_weaksec = 0;
10954         else
10955                 padapter->wdinfo.wfd_tdls_weaksec = 1;
10956
10957 #endif /* CONFIG_TDLS */
10958
10959         return ret;
10960 }
10961
10962
10963 static int rtw_tdls_enable(struct net_device *dev,
10964                            struct iw_request_info *info,
10965                            union iwreq_data *wrqu, char *extra)
10966 {
10967         int ret = 0;
10968
10969 #ifdef CONFIG_TDLS
10970
10971         _adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
10972         struct tdls_info        *ptdlsinfo = &padapter->tdlsinfo;
10973         _irqL    irqL;
10974         _list   *plist, *phead;
10975         s32     index;
10976         struct sta_info *psta = NULL;
10977         struct  sta_priv *pstapriv = &padapter->stapriv;
10978         u8 tdls_sta[NUM_STA][ETH_ALEN];
10979         u8 empty_hwaddr[ETH_ALEN] = { 0x00 };
10980         struct tdls_txmgmt txmgmt;
10981
10982         RTW_INFO("[%s] %s %d\n", __FUNCTION__, extra, wrqu->data.length - 1);
10983
10984         _rtw_memset(tdls_sta, 0x00, sizeof(tdls_sta));
10985         _rtw_memset(&txmgmt, 0x00, sizeof(struct tdls_txmgmt));
10986
10987         if (extra[0] == '0') {
10988                 ptdlsinfo->tdls_enable = 0;
10989
10990                 if (pstapriv->asoc_sta_count == 1)
10991                         return ret;
10992
10993                 _enter_critical_bh(&pstapriv->sta_hash_lock, &irqL);
10994                 for (index = 0; index < NUM_STA; index++) {
10995                         phead = &(pstapriv->sta_hash[index]);
10996                         plist = get_next(phead);
10997
10998                         while (rtw_end_of_queue_search(phead, plist) == _FALSE) {
10999                                 psta = LIST_CONTAINOR(plist, struct sta_info , hash_list);
11000
11001                                 plist = get_next(plist);
11002
11003                                 if (psta->tdls_sta_state != TDLS_STATE_NONE)
11004                                         _rtw_memcpy(tdls_sta[index], psta->hwaddr, ETH_ALEN);
11005                         }
11006                 }
11007                 _exit_critical_bh(&pstapriv->sta_hash_lock, &irqL);
11008
11009                 for (index = 0; index < NUM_STA; index++) {
11010                         if (!_rtw_memcmp(tdls_sta[index], empty_hwaddr, ETH_ALEN)) {
11011                                 RTW_INFO("issue tear down to "MAC_FMT"\n", MAC_ARG(tdls_sta[index]));
11012                                 txmgmt.status_code = _RSON_TDLS_TEAR_UN_RSN_;
11013                                 _rtw_memcpy(txmgmt.peer, tdls_sta[index], ETH_ALEN);
11014                                 issue_tdls_teardown(padapter, &txmgmt, _TRUE);
11015                         }
11016                 }
11017                 rtw_tdls_cmd(padapter, NULL, TDLS_RS_RCR);
11018                 rtw_reset_tdls_info(padapter);
11019         }       else if (extra[0] == '1')
11020                 ptdlsinfo->tdls_enable = 1;
11021 #endif /* CONFIG_TDLS */
11022
11023         return ret;
11024 }
11025
11026 static int rtw_tdls_setup(struct net_device *dev,
11027                           struct iw_request_info *info,
11028                           union iwreq_data *wrqu, char *extra)
11029 {
11030         int ret = 0;
11031 #ifdef CONFIG_TDLS
11032         u8 i, j;
11033         _adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
11034         struct tdls_txmgmt txmgmt;
11035 #ifdef CONFIG_WFD
11036         struct wifidirect_info *pwdinfo = &(padapter->wdinfo);
11037 #endif /* CONFIG_WFD */
11038
11039         RTW_INFO("[%s] %s %d\n", __FUNCTION__, extra, wrqu->data.length - 1);
11040
11041         if (wrqu->data.length - 1 != 17) {
11042                 RTW_INFO("[%s] length:%d != 17\n", __FUNCTION__, (wrqu->data.length - 1));
11043                 return ret;
11044         }
11045
11046         _rtw_memset(&txmgmt, 0x00, sizeof(struct tdls_txmgmt));
11047         for (i = 0, j = 0 ; i < ETH_ALEN; i++, j += 3)
11048                 txmgmt.peer[i] = key_2char2num(*(extra + j), *(extra + j + 1));
11049
11050 #ifdef CONFIG_WFD
11051         if (_AES_ != padapter->securitypriv.dot11PrivacyAlgrthm) {
11052                 /* Weak Security situation with AP. */
11053                 if (0 == pwdinfo->wfd_tdls_weaksec)     {
11054                         /* Can't send the tdls setup request out!! */
11055                         RTW_INFO("[%s] Current link is not AES, "
11056                                 "SKIP sending the tdls setup request!!\n", __FUNCTION__);
11057                 } else
11058                         issue_tdls_setup_req(padapter, &txmgmt, _TRUE);
11059         } else
11060 #endif /* CONFIG_WFD */
11061         {
11062                 issue_tdls_setup_req(padapter, &txmgmt, _TRUE);
11063         }
11064 #endif /* CONFIG_TDLS */
11065
11066         return ret;
11067 }
11068
11069 static int rtw_tdls_teardown(struct net_device *dev,
11070                              struct iw_request_info *info,
11071                              union iwreq_data *wrqu, char *extra)
11072 {
11073         int ret = 0;
11074
11075 #ifdef CONFIG_TDLS
11076
11077         u8 i, j;
11078         _adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
11079         struct sta_info *ptdls_sta = NULL;
11080         struct tdls_txmgmt txmgmt;
11081
11082         RTW_INFO("[%s] %s %d\n", __FUNCTION__, extra, wrqu->data.length - 1);
11083
11084         if (wrqu->data.length - 1 != 17 && wrqu->data.length - 1 != 19) {
11085                 RTW_INFO("[%s] length:%d != 17 or 19\n",
11086                          __FUNCTION__, (wrqu->data.length - 1));
11087                 return ret;
11088         }
11089
11090         _rtw_memset(&txmgmt, 0x00, sizeof(struct tdls_txmgmt));
11091         for (i = 0, j = 0; i < ETH_ALEN; i++, j += 3)
11092                 txmgmt.peer[i] = key_2char2num(*(extra + j), *(extra + j + 1));
11093
11094         ptdls_sta = rtw_get_stainfo(&(padapter->stapriv), txmgmt.peer);
11095
11096         if (ptdls_sta != NULL) {
11097                 txmgmt.status_code = _RSON_TDLS_TEAR_UN_RSN_;
11098                 if (wrqu->data.length - 1 == 19)
11099                         issue_tdls_teardown(padapter, &txmgmt, _FALSE);
11100                 else
11101                         issue_tdls_teardown(padapter, &txmgmt, _TRUE);
11102         } else
11103                 RTW_INFO("TDLS peer not found\n");
11104 #endif /* CONFIG_TDLS */
11105
11106         return ret;
11107 }
11108
11109 static int rtw_tdls_discovery(struct net_device *dev,
11110                               struct iw_request_info *info,
11111                               union iwreq_data *wrqu, char *extra)
11112 {
11113         int ret = 0;
11114
11115 #ifdef CONFIG_TDLS
11116
11117         _adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
11118         struct tdls_txmgmt      txmgmt;
11119         int i = 0, j = 0;
11120
11121         RTW_INFO("[%s] %s %d\n", __FUNCTION__, extra, wrqu->data.length - 1);
11122
11123         _rtw_memset(&txmgmt, 0x00, sizeof(struct tdls_txmgmt));
11124         for (i = 0, j = 0 ; i < ETH_ALEN; i++, j += 3)
11125                 txmgmt.peer[i] = key_2char2num(*(extra + j), *(extra + j + 1));
11126
11127         issue_tdls_dis_req(padapter, &txmgmt);
11128
11129 #endif /* CONFIG_TDLS */
11130
11131         return ret;
11132 }
11133
11134 static int rtw_tdls_ch_switch(struct net_device *dev,
11135                               struct iw_request_info *info,
11136                               union iwreq_data *wrqu, char *extra)
11137 {
11138         int ret = 0;
11139
11140 #ifdef CONFIG_TDLS
11141 #ifdef CONFIG_TDLS_CH_SW
11142         _adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
11143         struct tdls_ch_switch *pchsw_info = &padapter->tdlsinfo.chsw_info;
11144         u8 i, j;
11145         struct sta_info *ptdls_sta = NULL;
11146         u8 take_care_iqk;
11147
11148         RTW_INFO("[%s] %s %d\n", __FUNCTION__, extra, wrqu->data.length - 1);
11149
11150         if (rtw_tdls_is_chsw_allowed(padapter) == _FALSE) {
11151                 RTW_INFO("TDLS channel switch is not allowed\n");
11152                 return ret;
11153         }
11154
11155         for (i = 0, j = 0 ; i < ETH_ALEN; i++, j += 3)
11156                 pchsw_info->addr[i] = key_2char2num(*(extra + j), *(extra + j + 1));
11157
11158         ptdls_sta = rtw_get_stainfo(&padapter->stapriv, pchsw_info->addr);
11159         if (ptdls_sta == NULL)
11160                 return ret;
11161
11162         pchsw_info->ch_sw_state |= TDLS_CH_SW_INITIATOR_STATE;
11163
11164         if (ptdls_sta != NULL) {
11165                 if (pchsw_info->off_ch_num == 0)
11166                         pchsw_info->off_ch_num = 11;
11167         } else
11168                 RTW_INFO("TDLS peer not found\n");
11169
11170         rtw_pm_set_lps(padapter, PS_MODE_ACTIVE);
11171
11172         rtw_hal_get_hwreg(padapter, HW_VAR_CH_SW_NEED_TO_TAKE_CARE_IQK_INFO, &take_care_iqk);
11173         if (take_care_iqk == _TRUE) {
11174                 u8 central_chnl;
11175                 u8 bw_mode;
11176
11177                 bw_mode = (pchsw_info->ch_offset) ? CHANNEL_WIDTH_40 : CHANNEL_WIDTH_20;
11178                 central_chnl = rtw_get_center_ch(pchsw_info->off_ch_num, bw_mode, pchsw_info->ch_offset);
11179                 if (rtw_hal_ch_sw_iqk_info_search(padapter, central_chnl, bw_mode) >= 0)
11180                         rtw_tdls_cmd(padapter, ptdls_sta->hwaddr, TDLS_CH_SW_START);
11181                 else
11182                         rtw_tdls_cmd(padapter, ptdls_sta->hwaddr, TDLS_CH_SW_PREPARE);
11183         } else
11184                 rtw_tdls_cmd(padapter, ptdls_sta->hwaddr, TDLS_CH_SW_START);
11185
11186         /* issue_tdls_ch_switch_req(padapter, ptdls_sta); */
11187         /* RTW_INFO("issue tdls ch switch req\n"); */
11188
11189 #endif /* CONFIG_TDLS_CH_SW */
11190 #endif /* CONFIG_TDLS */
11191
11192         return ret;
11193 }
11194
11195 static int rtw_tdls_ch_switch_off(struct net_device *dev,
11196                                   struct iw_request_info *info,
11197                                   union iwreq_data *wrqu, char *extra)
11198 {
11199         int ret = 0;
11200
11201 #ifdef CONFIG_TDLS
11202 #ifdef CONFIG_TDLS_CH_SW
11203
11204         _adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
11205         struct tdls_ch_switch *pchsw_info = &padapter->tdlsinfo.chsw_info;
11206         u8 i, j, mac_addr[ETH_ALEN];
11207         struct sta_info *ptdls_sta = NULL;
11208         struct tdls_txmgmt txmgmt;
11209
11210         _rtw_memset(&txmgmt, 0x00, sizeof(struct tdls_txmgmt));
11211
11212         RTW_INFO("[%s] %s %d\n", __FUNCTION__, extra, wrqu->data.length - 1);
11213
11214         if (rtw_tdls_is_chsw_allowed(padapter) == _FALSE) {
11215                 RTW_INFO("TDLS channel switch is not allowed\n");
11216                 return ret;
11217         }
11218
11219         if (wrqu->data.length >= 17) {
11220                 for (i = 0, j = 0 ; i < ETH_ALEN; i++, j += 3)
11221                         mac_addr[i] = key_2char2num(*(extra + j), *(extra + j + 1));
11222                 ptdls_sta = rtw_get_stainfo(&padapter->stapriv, mac_addr);
11223         }
11224
11225         if (ptdls_sta == NULL)
11226                 return ret;
11227
11228         rtw_tdls_cmd(padapter, ptdls_sta->hwaddr, TDLS_CH_SW_END_TO_BASE_CHNL);
11229
11230         pchsw_info->ch_sw_state &= ~(TDLS_CH_SW_INITIATOR_STATE |
11231                                      TDLS_CH_SWITCH_ON_STATE |
11232                                      TDLS_PEER_AT_OFF_STATE);
11233         _rtw_memset(pchsw_info->addr, 0x00, ETH_ALEN);
11234
11235         ptdls_sta->ch_switch_time = 0;
11236         ptdls_sta->ch_switch_timeout = 0;
11237         _cancel_timer_ex(&ptdls_sta->ch_sw_timer);
11238         _cancel_timer_ex(&ptdls_sta->delay_timer);
11239         _cancel_timer_ex(&ptdls_sta->stay_on_base_chnl_timer);
11240         _cancel_timer_ex(&ptdls_sta->ch_sw_monitor_timer);
11241
11242         rtw_pm_set_lps(padapter, PS_MODE_MAX);
11243 #endif /* CONFIG_TDLS_CH_SW */
11244 #endif /* CONFIG_TDLS */
11245
11246         return ret;
11247 }
11248
11249 static int rtw_tdls_dump_ch(struct net_device *dev,
11250                             struct iw_request_info *info,
11251                             union iwreq_data *wrqu, char *extra)
11252 {
11253         int ret = 0;
11254
11255 #ifdef CONFIG_TDLS
11256 #ifdef CONFIG_TDLS_CH_SW
11257         _adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
11258         struct tdls_info *ptdlsinfo = &padapter->tdlsinfo;
11259
11260         RTW_INFO("[%s] dump_stack:%s\n", __FUNCTION__, extra);
11261
11262         extra[wrqu->data.length] = 0x00;
11263         ptdlsinfo->chsw_info.dump_stack = rtw_atoi(extra);
11264
11265         return ret;
11266
11267 #endif
11268 #endif /* CONFIG_TDLS */
11269
11270         return ret;
11271 }
11272
11273 static int rtw_tdls_off_ch_num(struct net_device *dev,
11274                                struct iw_request_info *info,
11275                                union iwreq_data *wrqu, char *extra)
11276 {
11277         int ret = 0;
11278
11279 #ifdef CONFIG_TDLS
11280 #ifdef CONFIG_TDLS_CH_SW
11281         _adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
11282         struct tdls_info *ptdlsinfo = &padapter->tdlsinfo;
11283
11284         RTW_INFO("[%s] off_ch_num:%s\n", __FUNCTION__, extra);
11285
11286         extra[wrqu->data.length] = 0x00;
11287         ptdlsinfo->chsw_info.off_ch_num = rtw_atoi(extra);
11288
11289         return ret;
11290
11291 #endif
11292 #endif /* CONFIG_TDLS */
11293
11294         return ret;
11295 }
11296
11297 static int rtw_tdls_ch_offset(struct net_device *dev,
11298                               struct iw_request_info *info,
11299                               union iwreq_data *wrqu, char *extra)
11300 {
11301         int ret = 0;
11302
11303 #ifdef CONFIG_TDLS
11304 #ifdef CONFIG_TDLS_CH_SW
11305         _adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
11306         struct tdls_info *ptdlsinfo = &padapter->tdlsinfo;
11307
11308         RTW_INFO("[%s] ch_offset:%s\n", __FUNCTION__, extra);
11309
11310         extra[wrqu->data.length] = 0x00;
11311         switch (rtw_atoi(extra)) {
11312         case SCA:
11313                 ptdlsinfo->chsw_info.ch_offset = HAL_PRIME_CHNL_OFFSET_LOWER;
11314                 break;
11315
11316         case SCB:
11317                 ptdlsinfo->chsw_info.ch_offset = HAL_PRIME_CHNL_OFFSET_UPPER;
11318                 break;
11319
11320         default:
11321                 ptdlsinfo->chsw_info.ch_offset = HAL_PRIME_CHNL_OFFSET_DONT_CARE;
11322                 break;
11323         }
11324
11325         return ret;
11326
11327 #endif
11328 #endif /* CONFIG_TDLS */
11329
11330         return ret;
11331 }
11332
11333 static int rtw_tdls_pson(struct net_device *dev,
11334                          struct iw_request_info *info,
11335                          union iwreq_data *wrqu, char *extra)
11336 {
11337         int ret = 0;
11338
11339 #ifdef CONFIG_TDLS
11340
11341         _adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
11342         u8 i, j, mac_addr[ETH_ALEN];
11343         struct sta_info *ptdls_sta = NULL;
11344
11345         RTW_INFO("[%s] %s %d\n", __FUNCTION__, extra, wrqu->data.length - 1);
11346
11347         for (i = 0, j = 0; i < ETH_ALEN; i++, j += 3)
11348                 mac_addr[i] = key_2char2num(*(extra + j), *(extra + j + 1));
11349
11350         ptdls_sta = rtw_get_stainfo(&padapter->stapriv, mac_addr);
11351
11352         issue_nulldata_to_TDLS_peer_STA(padapter, ptdls_sta->hwaddr, 1, 3, 500);
11353
11354 #endif /* CONFIG_TDLS */
11355
11356         return ret;
11357 }
11358
11359 static int rtw_tdls_psoff(struct net_device *dev,
11360                           struct iw_request_info *info,
11361                           union iwreq_data *wrqu, char *extra)
11362 {
11363         int ret = 0;
11364
11365 #ifdef CONFIG_TDLS
11366
11367         _adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
11368         u8 i, j, mac_addr[ETH_ALEN];
11369         struct sta_info *ptdls_sta = NULL;
11370
11371         RTW_INFO("[%s] %s %d\n", __FUNCTION__, extra, wrqu->data.length - 1);
11372
11373         for (i = 0, j = 0; i < ETH_ALEN; i++, j += 3)
11374                 mac_addr[i] = key_2char2num(*(extra + j), *(extra + j + 1));
11375
11376         ptdls_sta = rtw_get_stainfo(&padapter->stapriv, mac_addr);
11377
11378         if (ptdls_sta)
11379                 issue_nulldata_to_TDLS_peer_STA(padapter, ptdls_sta->hwaddr, 0, 3, 500);
11380
11381 #endif /* CONFIG_TDLS */
11382
11383         return ret;
11384 }
11385
11386 static int rtw_tdls_setip(struct net_device *dev,
11387                           struct iw_request_info *info,
11388                           union iwreq_data *wrqu, char *extra)
11389 {
11390         int ret = 0;
11391
11392 #ifdef CONFIG_TDLS
11393 #ifdef CONFIG_WFD
11394
11395         _adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
11396         struct tdls_info *ptdlsinfo = &padapter->tdlsinfo;
11397         struct wifi_display_info *pwfd_info = ptdlsinfo->wfd_info;
11398         u8 i = 0, j = 0, k = 0, tag = 0;
11399
11400         RTW_INFO("[%s] %s %d\n", __FUNCTION__, extra, wrqu->data.length - 1);
11401
11402         while (i < 4) {
11403                 for (j = 0; j < 4; j++) {
11404                         if (*(extra + j + tag) == '.' || *(extra + j + tag) == '\0') {
11405                                 if (j == 1)
11406                                         pwfd_info->ip_address[i] = convert_ip_addr('0', '0', *(extra + (j - 1) + tag));
11407                                 if (j == 2)
11408                                         pwfd_info->ip_address[i] = convert_ip_addr('0', *(extra + (j - 2) + tag), *(extra + (j - 1) + tag));
11409                                 if (j == 3)
11410                                         pwfd_info->ip_address[i] = convert_ip_addr(*(extra + (j - 3) + tag), *(extra + (j - 2) + tag), *(extra + (j - 1) + tag));
11411
11412                                 tag += j + 1;
11413                                 break;
11414                         }
11415                 }
11416                 i++;
11417         }
11418
11419         RTW_INFO("[%s] Set IP = %u.%u.%u.%u\n", __FUNCTION__,
11420                  ptdlsinfo->wfd_info->ip_address[0],
11421                  ptdlsinfo->wfd_info->ip_address[1],
11422                  ptdlsinfo->wfd_info->ip_address[2],
11423                  ptdlsinfo->wfd_info->ip_address[3]);
11424
11425 #endif /* CONFIG_WFD */
11426 #endif /* CONFIG_TDLS */
11427
11428         return ret;
11429 }
11430
11431 static int rtw_tdls_getip(struct net_device *dev,
11432                           struct iw_request_info *info,
11433                           union iwreq_data *wrqu, char *extra)
11434 {
11435         int ret = 0;
11436
11437 #ifdef CONFIG_TDLS
11438 #ifdef CONFIG_WFD
11439
11440         _adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
11441         struct tdls_info *ptdlsinfo = &padapter->tdlsinfo;
11442         struct wifi_display_info *pwfd_info = ptdlsinfo->wfd_info;
11443
11444         RTW_INFO("[%s]\n", __FUNCTION__);
11445
11446         sprintf(extra, "\n\n%u.%u.%u.%u\n",
11447                 pwfd_info->peer_ip_address[0], pwfd_info->peer_ip_address[1],
11448                 pwfd_info->peer_ip_address[2], pwfd_info->peer_ip_address[3]);
11449
11450         RTW_INFO("[%s] IP=%u.%u.%u.%u\n", __FUNCTION__,
11451                  pwfd_info->peer_ip_address[0], pwfd_info->peer_ip_address[1],
11452                  pwfd_info->peer_ip_address[2], pwfd_info->peer_ip_address[3]);
11453
11454         wrqu->data.length = strlen(extra);
11455
11456 #endif /* CONFIG_WFD */
11457 #endif /* CONFIG_TDLS */
11458
11459         return ret;
11460 }
11461
11462 static int rtw_tdls_getport(struct net_device *dev,
11463                             struct iw_request_info *info,
11464                             union iwreq_data *wrqu, char *extra)
11465 {
11466
11467         int ret = 0;
11468
11469 #ifdef CONFIG_TDLS
11470 #ifdef CONFIG_WFD
11471
11472         _adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
11473         struct tdls_info *ptdlsinfo = &padapter->tdlsinfo;
11474         struct wifi_display_info *pwfd_info = ptdlsinfo->wfd_info;
11475
11476         RTW_INFO("[%s]\n", __FUNCTION__);
11477
11478         sprintf(extra, "\n\n%d\n", pwfd_info->peer_rtsp_ctrlport);
11479         RTW_INFO("[%s] remote port = %d\n",
11480                  __FUNCTION__, pwfd_info->peer_rtsp_ctrlport);
11481
11482         wrqu->data.length = strlen(extra);
11483
11484 #endif /* CONFIG_WFD */
11485 #endif /* CONFIG_TDLS */
11486
11487         return ret;
11488
11489 }
11490
11491 /* WFDTDLS, for sigma test */
11492 static int rtw_tdls_dis_result(struct net_device *dev,
11493                                struct iw_request_info *info,
11494                                union iwreq_data *wrqu, char *extra)
11495 {
11496
11497         int ret = 0;
11498
11499 #ifdef CONFIG_TDLS
11500 #ifdef CONFIG_WFD
11501
11502         _adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
11503         struct tdls_info *ptdlsinfo = &padapter->tdlsinfo;
11504
11505         RTW_INFO("[%s]\n", __FUNCTION__);
11506
11507         if (ptdlsinfo->dev_discovered == _TRUE) {
11508                 sprintf(extra, "\n\nDis=1\n");
11509                 ptdlsinfo->dev_discovered = _FALSE;
11510         }
11511
11512         wrqu->data.length = strlen(extra);
11513
11514 #endif /* CONFIG_WFD */
11515 #endif /* CONFIG_TDLS */
11516
11517         return ret;
11518
11519 }
11520
11521 /* WFDTDLS, for sigma test */
11522 static int rtw_wfd_tdls_status(struct net_device *dev,
11523                                struct iw_request_info *info,
11524                                union iwreq_data *wrqu, char *extra)
11525 {
11526
11527         int ret = 0;
11528
11529 #ifdef CONFIG_TDLS
11530
11531         _adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
11532         struct tdls_info *ptdlsinfo = &padapter->tdlsinfo;
11533
11534         RTW_INFO("[%s]\n", __FUNCTION__);
11535
11536         sprintf(extra, "\nlink_established:%d\n"
11537                 "sta_cnt:%d\n"
11538                 "sta_maximum:%d\n"
11539                 "cur_channel:%d\n"
11540                 "tdls_enable:%d"
11541 #ifdef CONFIG_TDLS_CH_SW
11542                 "ch_sw_state:%08x\n"
11543                 "chsw_on:%d\n"
11544                 "off_ch_num:%d\n"
11545                 "cur_time:%d\n"
11546                 "ch_offset:%d\n"
11547                 "delay_swtich_back:%d"
11548 #endif
11549                 ,
11550                 ptdlsinfo->link_established, ptdlsinfo->sta_cnt,
11551                 ptdlsinfo->sta_maximum, ptdlsinfo->cur_channel,
11552                 ptdlsinfo->tdls_enable
11553 #ifdef CONFIG_TDLS_CH_SW
11554                 ,
11555                 ptdlsinfo->chsw_info.ch_sw_state,
11556                 ATOMIC_READ(&padapter->tdlsinfo.chsw_info.chsw_on),
11557                 ptdlsinfo->chsw_info.off_ch_num,
11558                 ptdlsinfo->chsw_info.cur_time,
11559                 ptdlsinfo->chsw_info.ch_offset,
11560                 ptdlsinfo->chsw_info.delay_switch_back
11561 #endif
11562                );
11563
11564         wrqu->data.length = strlen(extra);
11565
11566 #endif /* CONFIG_TDLS */
11567
11568         return ret;
11569
11570 }
11571
11572 static int rtw_tdls_getsta(struct net_device *dev,
11573                            struct iw_request_info *info,
11574                            union iwreq_data *wrqu, char *extra)
11575 {
11576
11577         int ret = 0;
11578 #ifdef CONFIG_TDLS
11579         u8 i, j;
11580         _adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
11581         u8 addr[ETH_ALEN] = {0};
11582         char charmac[17];
11583         struct sta_info *ptdls_sta = NULL;
11584
11585         RTW_INFO("[%s] %s %d\n", __FUNCTION__,
11586                  (char *)wrqu->data.pointer, wrqu->data.length - 1);
11587
11588         if (copy_from_user(charmac, wrqu->data.pointer + 9, 17)) {
11589                 ret = -EFAULT;
11590                 goto exit;
11591         }
11592
11593         RTW_INFO("[%s] %d, charmac:%s\n", __FUNCTION__, __LINE__, charmac);
11594         for (i = 0, j = 0 ; i < ETH_ALEN; i++, j += 3)
11595                 addr[i] = key_2char2num(*(charmac + j), *(charmac + j + 1));
11596
11597         RTW_INFO("[%s] %d, charmac:%s, addr:"MAC_FMT"\n",
11598                  __FUNCTION__, __LINE__, charmac, MAC_ARG(addr));
11599         ptdls_sta = rtw_get_stainfo(&padapter->stapriv, addr);
11600         if (ptdls_sta) {
11601                 sprintf(extra, "\n\ntdls_sta_state=0x%08x\n", ptdls_sta->tdls_sta_state);
11602                 RTW_INFO("\n\ntdls_sta_state=%d\n", ptdls_sta->tdls_sta_state);
11603         } else {
11604                 sprintf(extra, "\n\nNot found this sta\n");
11605                 RTW_INFO("\n\nNot found this sta\n");
11606         }
11607         wrqu->data.length = strlen(extra);
11608
11609 #endif /* CONFIG_TDLS */
11610 exit:
11611         return ret;
11612
11613 }
11614
11615 static int rtw_tdls_get_best_ch(struct net_device *dev,
11616                                 struct iw_request_info *info,
11617                                 union iwreq_data *wrqu, char *extra)
11618 {
11619 #ifdef CONFIG_FIND_BEST_CHANNEL
11620         _adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
11621         struct mlme_ext_priv *pmlmeext = &padapter->mlmeextpriv;
11622         u32 i, best_channel_24G = 1, best_channel_5G = 36, index_24G = 0, index_5G = 0;
11623
11624         for (i = 0; pmlmeext->channel_set[i].ChannelNum != 0; i++) {
11625                 if (pmlmeext->channel_set[i].ChannelNum == 1)
11626                         index_24G = i;
11627                 if (pmlmeext->channel_set[i].ChannelNum == 36)
11628                         index_5G = i;
11629         }
11630
11631         for (i = 0; pmlmeext->channel_set[i].ChannelNum != 0; i++) {
11632                 /* 2.4G */
11633                 if (pmlmeext->channel_set[i].ChannelNum == 6 || pmlmeext->channel_set[i].ChannelNum == 11) {
11634                         if (pmlmeext->channel_set[i].rx_count < pmlmeext->channel_set[index_24G].rx_count) {
11635                                 index_24G = i;
11636                                 best_channel_24G = pmlmeext->channel_set[i].ChannelNum;
11637                         }
11638                 }
11639
11640                 /* 5G */
11641                 if (pmlmeext->channel_set[i].ChannelNum >= 36
11642                     && pmlmeext->channel_set[i].ChannelNum < 140) {
11643                         /* Find primary channel */
11644                         if (((pmlmeext->channel_set[i].ChannelNum - 36) % 8 == 0)
11645                             && (pmlmeext->channel_set[i].rx_count < pmlmeext->channel_set[index_5G].rx_count)) {
11646                                 index_5G = i;
11647                                 best_channel_5G = pmlmeext->channel_set[i].ChannelNum;
11648                         }
11649                 }
11650
11651                 if (pmlmeext->channel_set[i].ChannelNum >= 149
11652                     && pmlmeext->channel_set[i].ChannelNum < 165) {
11653                         /* Find primary channel */
11654                         if (((pmlmeext->channel_set[i].ChannelNum - 149) % 8 == 0)
11655                             && (pmlmeext->channel_set[i].rx_count < pmlmeext->channel_set[index_5G].rx_count)) {
11656                                 index_5G = i;
11657                                 best_channel_5G = pmlmeext->channel_set[i].ChannelNum;
11658                         }
11659                 }
11660 #if 1 /* debug */
11661                 RTW_INFO("The rx cnt of channel %3d = %d\n",
11662                          pmlmeext->channel_set[i].ChannelNum,
11663                          pmlmeext->channel_set[i].rx_count);
11664 #endif
11665         }
11666
11667         sprintf(extra, "\nbest_channel_24G = %d\n", best_channel_24G);
11668         RTW_INFO("best_channel_24G = %d\n", best_channel_24G);
11669
11670         if (index_5G != 0) {
11671                 sprintf(extra, "best_channel_5G = %d\n", best_channel_5G);
11672                 RTW_INFO("best_channel_5G = %d\n", best_channel_5G);
11673         }
11674
11675         wrqu->data.length = strlen(extra);
11676
11677 #endif
11678
11679         return 0;
11680
11681 }
11682
11683 static int rtw_tdls(struct net_device *dev,
11684                     struct iw_request_info *info,
11685                     union iwreq_data *wrqu, char *extra)
11686 {
11687         int ret = 0;
11688
11689 #ifdef CONFIG_TDLS
11690
11691         _adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
11692
11693         RTW_INFO("[%s] extra = %s\n", __FUNCTION__, extra);
11694
11695         if (hal_chk_wl_func(padapter, WL_FUNC_TDLS) == _FALSE) {
11696                 RTW_INFO("Discard tdls oper since hal doesn't support tdls\n");
11697                 return 0;
11698         }
11699
11700         if (padapter->tdlsinfo.tdls_enable == 0) {
11701                 RTW_INFO("tdls haven't enabled\n");
11702                 return 0;
11703         }
11704
11705         /* WFD Sigma will use the tdls enable command to let the driver know we want to test the tdls now! */
11706
11707         if (hal_chk_wl_func(padapter, WL_FUNC_MIRACAST)) {
11708                 if (_rtw_memcmp(extra, "wfdenable=", 10)) {
11709                         wrqu->data.length -= 10;
11710                         rtw_wx_tdls_wfd_enable(dev, info, wrqu, &extra[10]);
11711                         return ret;
11712                 }
11713         }
11714
11715         if (_rtw_memcmp(extra, "weaksec=", 8)) {
11716                 wrqu->data.length -= 8;
11717                 rtw_tdls_weaksec(dev, info, wrqu, &extra[8]);
11718                 return ret;
11719         } else if (_rtw_memcmp(extra, "tdlsenable=", 11)) {
11720                 wrqu->data.length -= 11;
11721                 rtw_tdls_enable(dev, info, wrqu, &extra[11]);
11722                 return ret;
11723         }
11724
11725         if (_rtw_memcmp(extra, "setup=", 6)) {
11726                 wrqu->data.length -= 6;
11727                 rtw_tdls_setup(dev, info, wrqu, &extra[6]);
11728         } else if (_rtw_memcmp(extra, "tear=", 5)) {
11729                 wrqu->data.length -= 5;
11730                 rtw_tdls_teardown(dev, info, wrqu, &extra[5]);
11731         } else if (_rtw_memcmp(extra, "dis=", 4)) {
11732                 wrqu->data.length -= 4;
11733                 rtw_tdls_discovery(dev, info, wrqu, &extra[4]);
11734         } else if (_rtw_memcmp(extra, "swoff=", 6)) {
11735                 wrqu->data.length -= 6;
11736                 rtw_tdls_ch_switch_off(dev, info, wrqu, &extra[6]);
11737         } else if (_rtw_memcmp(extra, "sw=", 3)) {
11738                 wrqu->data.length -= 3;
11739                 rtw_tdls_ch_switch(dev, info, wrqu, &extra[3]);
11740         } else if (_rtw_memcmp(extra, "dumpstack=", 10)) {
11741                 wrqu->data.length -= 10;
11742                 rtw_tdls_dump_ch(dev, info, wrqu, &extra[10]);
11743         } else if (_rtw_memcmp(extra, "offchnum=", 9)) {
11744                 wrqu->data.length -= 9;
11745                 rtw_tdls_off_ch_num(dev, info, wrqu, &extra[9]);
11746         } else if (_rtw_memcmp(extra, "choffset=", 9)) {
11747                 wrqu->data.length -= 9;
11748                 rtw_tdls_ch_offset(dev, info, wrqu, &extra[9]);
11749         } else if (_rtw_memcmp(extra, "pson=", 5)) {
11750                 wrqu->data.length -= 5;
11751                 rtw_tdls_pson(dev, info, wrqu, &extra[5]);
11752         } else if (_rtw_memcmp(extra, "psoff=", 6)) {
11753                 wrqu->data.length -= 6;
11754                 rtw_tdls_psoff(dev, info, wrqu, &extra[6]);
11755         }
11756
11757 #ifdef CONFIG_WFD
11758         if (hal_chk_wl_func(padapter, WL_FUNC_MIRACAST)) {
11759                 if (_rtw_memcmp(extra, "setip=", 6)) {
11760                         wrqu->data.length -= 6;
11761                         rtw_tdls_setip(dev, info, wrqu, &extra[6]);
11762                 } else if (_rtw_memcmp(extra, "tprobe=", 6))
11763                         issue_tunneled_probe_req((_adapter *)rtw_netdev_priv(dev));
11764         }
11765 #endif /* CONFIG_WFD */
11766
11767 #endif /* CONFIG_TDLS */
11768
11769         return ret;
11770 }
11771
11772
11773 static int rtw_tdls_get(struct net_device *dev,
11774                         struct iw_request_info *info,
11775                         union iwreq_data *wrqu, char *extra)
11776 {
11777         int ret = 0;
11778
11779 #ifdef CONFIG_TDLS
11780
11781         RTW_INFO("[%s] extra = %s\n", __FUNCTION__, (char *) wrqu->data.pointer);
11782
11783         if (_rtw_memcmp(wrqu->data.pointer, "ip", 2))
11784                 rtw_tdls_getip(dev, info, wrqu, extra);
11785         else if (_rtw_memcmp(wrqu->data.pointer, "port", 4))
11786                 rtw_tdls_getport(dev, info, wrqu, extra);
11787         /* WFDTDLS, for sigma test */
11788         else if (_rtw_memcmp(wrqu->data.pointer, "dis", 3))
11789                 rtw_tdls_dis_result(dev, info, wrqu, extra);
11790         else if (_rtw_memcmp(wrqu->data.pointer, "status", 6))
11791                 rtw_wfd_tdls_status(dev, info, wrqu, extra);
11792         else if (_rtw_memcmp(wrqu->data.pointer, "tdls_sta=", 9))
11793                 rtw_tdls_getsta(dev, info, wrqu, extra);
11794         else if (_rtw_memcmp(wrqu->data.pointer, "best_ch", 7))
11795                 rtw_tdls_get_best_ch(dev, info, wrqu, extra);
11796 #endif /* CONFIG_TDLS */
11797
11798         return ret;
11799 }
11800
11801
11802
11803
11804
11805 #ifdef CONFIG_INTEL_WIDI
11806 static int rtw_widi_set(struct net_device *dev,
11807                         struct iw_request_info *info,
11808                         union iwreq_data *wrqu, char *extra)
11809 {
11810         int ret = 0;
11811         _adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
11812
11813         process_intel_widi_cmd(padapter, extra);
11814
11815         return ret;
11816 }
11817
11818 static int rtw_widi_set_probe_request(struct net_device *dev,
11819                                       struct iw_request_info *info,
11820                                       union iwreq_data *wrqu, char *extra)
11821 {
11822         int     ret = 0;
11823         u8      *pbuf = NULL;
11824         _adapter        *padapter = (_adapter *)rtw_netdev_priv(dev);
11825
11826         pbuf = rtw_malloc(sizeof(l2_msg_t));
11827         if (pbuf) {
11828                 if (copy_from_user(pbuf, wrqu->data.pointer, wrqu->data.length))
11829                         ret = -EFAULT;
11830                 /* _rtw_memcpy(pbuf, wrqu->data.pointer, wrqu->data.length); */
11831
11832                 if (wrqu->data.flags == 0)
11833                         intel_widi_wk_cmd(padapter, INTEL_WIDI_ISSUE_PROB_WK, pbuf, sizeof(l2_msg_t));
11834                 else if (wrqu->data.flags == 1)
11835                         rtw_set_wfd_rds_sink_info(padapter, (l2_msg_t *)pbuf);
11836         }
11837         return ret;
11838 }
11839 #endif /* CONFIG_INTEL_WIDI */
11840
11841 #ifdef CONFIG_MAC_LOOPBACK_DRIVER
11842
11843 #if defined(CONFIG_RTL8188E)
11844 #include <rtl8188e_hal.h>
11845 extern void rtl8188e_cal_txdesc_chksum(struct tx_desc *ptxdesc);
11846 #define cal_txdesc_chksum rtl8188e_cal_txdesc_chksum
11847 #ifdef CONFIG_SDIO_HCI || defined(CONFIG_GSPI_HCI)
11848 extern void rtl8188es_fill_default_txdesc(struct xmit_frame *pxmitframe, u8 *pbuf);
11849 #define fill_default_txdesc rtl8188es_fill_default_txdesc
11850 #endif /* CONFIG_SDIO_HCI */
11851 #endif /* CONFIG_RTL8188E */
11852 #if defined(CONFIG_RTL8723B)
11853 extern void rtl8723b_cal_txdesc_chksum(struct tx_desc *ptxdesc);
11854 #define cal_txdesc_chksum rtl8723b_cal_txdesc_chksum
11855 extern void rtl8723b_fill_default_txdesc(struct xmit_frame *pxmitframe, u8 *pbuf);
11856 #define fill_default_txdesc rtl8723b_fill_default_txdesc
11857 #endif /* CONFIG_RTL8723B */
11858
11859 #if defined(CONFIG_RTL8703B)
11860 /* extern void rtl8703b_cal_txdesc_chksum(struct tx_desc *ptxdesc); */
11861 #define cal_txdesc_chksum rtl8703b_cal_txdesc_chksum
11862 /* extern void rtl8703b_fill_default_txdesc(struct xmit_frame *pxmitframe, u8 *pbuf); */
11863 #define fill_default_txdesc rtl8703b_fill_default_txdesc
11864 #endif /* CONFIG_RTL8703B */
11865
11866 #if defined(CONFIG_RTL8723D)
11867 /* extern void rtl8723d_cal_txdesc_chksum(struct tx_desc *ptxdesc); */
11868 #define cal_txdesc_chksum rtl8723d_cal_txdesc_chksum
11869 /* extern void rtl8723d_fill_default_txdesc(struct xmit_frame *pxmitframe, u8 *pbuf); */
11870 #define fill_default_txdesc rtl8723d_fill_default_txdesc
11871 #endif /* CONFIG_RTL8723D */
11872
11873 #if defined(CONFIG_RTL8192E)
11874 extern void rtl8192e_cal_txdesc_chksum(struct tx_desc *ptxdesc);
11875 #define cal_txdesc_chksum rtl8192e_cal_txdesc_chksum
11876 #ifdef CONFIG_SDIO_HCI || defined(CONFIG_GSPI_HCI)
11877 extern void rtl8192es_fill_default_txdesc(struct xmit_frame *pxmitframe, u8 *pbuf);
11878 #define fill_default_txdesc rtl8192es_fill_default_txdesc
11879 #endif /* CONFIG_SDIO_HCI */
11880 #endif /* CONFIG_RTL8192E */
11881
11882 static s32 initLoopback(PADAPTER padapter)
11883 {
11884         PLOOPBACKDATA ploopback;
11885
11886
11887         if (padapter->ploopback == NULL) {
11888                 ploopback = (PLOOPBACKDATA)rtw_zmalloc(sizeof(LOOPBACKDATA));
11889                 if (ploopback == NULL)
11890                         return -ENOMEM;
11891
11892                 _rtw_init_sema(&ploopback->sema, 0);
11893                 ploopback->bstop = _TRUE;
11894                 ploopback->cnt = 0;
11895                 ploopback->size = 300;
11896                 _rtw_memset(ploopback->msg, 0, sizeof(ploopback->msg));
11897
11898                 padapter->ploopback = ploopback;
11899         }
11900
11901         return 0;
11902 }
11903
11904 static void freeLoopback(PADAPTER padapter)
11905 {
11906         PLOOPBACKDATA ploopback;
11907
11908
11909         ploopback = padapter->ploopback;
11910         if (ploopback) {
11911                 rtw_mfree((u8 *)ploopback, sizeof(LOOPBACKDATA));
11912                 padapter->ploopback = NULL;
11913         }
11914 }
11915
11916 static s32 initpseudoadhoc(PADAPTER padapter)
11917 {
11918         NDIS_802_11_NETWORK_INFRASTRUCTURE networkType;
11919         s32 err;
11920
11921         networkType = Ndis802_11IBSS;
11922         err = rtw_set_802_11_infrastructure_mode(padapter, networkType);
11923         if (err == _FALSE)
11924                 return _FAIL;
11925
11926         err = rtw_setopmode_cmd(padapter, networkType, _TRUE);
11927         if (err == _FAIL)
11928                 return _FAIL;
11929
11930         return _SUCCESS;
11931 }
11932
11933 static s32 createpseudoadhoc(PADAPTER padapter)
11934 {
11935         NDIS_802_11_AUTHENTICATION_MODE authmode;
11936         struct mlme_priv *pmlmepriv;
11937         NDIS_802_11_SSID *passoc_ssid;
11938         WLAN_BSSID_EX *pdev_network;
11939         u8 *pibss;
11940         u8 ssid[] = "pseduo_ad-hoc";
11941         s32 err;
11942         _irqL irqL;
11943
11944
11945         pmlmepriv = &padapter->mlmepriv;
11946
11947         authmode = Ndis802_11AuthModeOpen;
11948         err = rtw_set_802_11_authentication_mode(padapter, authmode);
11949         if (err == _FALSE)
11950                 return _FAIL;
11951
11952         passoc_ssid = &pmlmepriv->assoc_ssid;
11953         _rtw_memset(passoc_ssid, 0, sizeof(NDIS_802_11_SSID));
11954         passoc_ssid->SsidLength = sizeof(ssid) - 1;
11955         _rtw_memcpy(passoc_ssid->Ssid, ssid, passoc_ssid->SsidLength);
11956
11957         pdev_network = &padapter->registrypriv.dev_network;
11958         pibss = padapter->registrypriv.dev_network.MacAddress;
11959         _rtw_memcpy(&pdev_network->Ssid, passoc_ssid, sizeof(NDIS_802_11_SSID));
11960
11961         rtw_update_registrypriv_dev_network(padapter);
11962         rtw_generate_random_ibss(pibss);
11963
11964         _enter_critical_bh(&pmlmepriv->lock, &irqL);
11965         /*pmlmepriv->fw_state = WIFI_ADHOC_MASTER_STATE;*/
11966         init_fwstate(pmlmepriv, WIFI_ADHOC_MASTER_STATE);
11967
11968         _exit_critical_bh(&pmlmepriv->lock, &irqL);
11969
11970 #if 0
11971         err = rtw_create_ibss_cmd(padapter, 0);
11972         if (err == _FAIL)
11973                 return _FAIL;
11974 #else
11975         {
11976                 struct wlan_network *pcur_network;
11977                 struct sta_info *psta;
11978
11979                 /* 3  create a new psta */
11980                 pcur_network = &pmlmepriv->cur_network;
11981
11982                 /* clear psta in the cur_network, if any */
11983                 psta = rtw_get_stainfo(&padapter->stapriv, pcur_network->network.MacAddress);
11984                 if (psta)
11985                         rtw_free_stainfo(padapter, psta);
11986
11987                 psta = rtw_alloc_stainfo(&padapter->stapriv, pibss);
11988                 if (psta == NULL)
11989                         return _FAIL;
11990
11991                 /* 3  join psudo AdHoc */
11992                 pcur_network->join_res = 1;
11993                 pcur_network->aid = psta->aid = 1;
11994                 _rtw_memcpy(&pcur_network->network, pdev_network, get_WLAN_BSSID_EX_sz(pdev_network));
11995
11996                 /* set msr to WIFI_FW_ADHOC_STATE */
11997                 padapter->hw_port = HW_PORT0;
11998                 Set_MSR(padapter, WIFI_FW_ADHOC_STATE);
11999
12000         }
12001 #endif
12002
12003         return _SUCCESS;
12004 }
12005
12006 static struct xmit_frame *createloopbackpkt(PADAPTER padapter, u32 size)
12007 {
12008         struct xmit_priv *pxmitpriv;
12009         struct xmit_frame *pframe;
12010         struct xmit_buf *pxmitbuf;
12011         struct pkt_attrib *pattrib;
12012         struct tx_desc *desc;
12013         u8 *pkt_start, *pkt_end, *ptr;
12014         struct rtw_ieee80211_hdr *hdr;
12015         s32 bmcast;
12016         _irqL irqL;
12017
12018
12019         if ((TXDESC_SIZE + WLANHDR_OFFSET + size) > MAX_XMITBUF_SZ)
12020                 return NULL;
12021
12022         pxmitpriv = &padapter->xmitpriv;
12023         pframe = NULL;
12024
12025         /* 2 1. allocate xmit frame */
12026         pframe = rtw_alloc_xmitframe(pxmitpriv);
12027         if (pframe == NULL)
12028                 return NULL;
12029         pframe->padapter = padapter;
12030
12031         /* 2 2. allocate xmit buffer */
12032         _enter_critical_bh(&pxmitpriv->lock, &irqL);
12033         pxmitbuf = rtw_alloc_xmitbuf(pxmitpriv);
12034         _exit_critical_bh(&pxmitpriv->lock, &irqL);
12035         if (pxmitbuf == NULL) {
12036                 rtw_free_xmitframe(pxmitpriv, pframe);
12037                 return NULL;
12038         }
12039
12040         pframe->pxmitbuf = pxmitbuf;
12041         pframe->buf_addr = pxmitbuf->pbuf;
12042         pxmitbuf->priv_data = pframe;
12043
12044         /* 2 3. update_attrib() */
12045         pattrib = &pframe->attrib;
12046
12047         /* init xmitframe attribute */
12048         _rtw_memset(pattrib, 0, sizeof(struct pkt_attrib));
12049
12050         pattrib->ether_type = 0x8723;
12051         _rtw_memcpy(pattrib->src, adapter_mac_addr(padapter), ETH_ALEN);
12052         _rtw_memcpy(pattrib->ta, pattrib->src, ETH_ALEN);
12053         _rtw_memset(pattrib->dst, 0xFF, ETH_ALEN);
12054         _rtw_memcpy(pattrib->ra, pattrib->dst, ETH_ALEN);
12055
12056         /*      pattrib->dhcp_pkt = 0;
12057          *      pattrib->pktlen = 0; */
12058         pattrib->ack_policy = 0;
12059         /*      pattrib->pkt_hdrlen = ETH_HLEN; */
12060         pattrib->hdrlen = WLAN_HDR_A3_LEN;
12061         pattrib->subtype = WIFI_DATA;
12062         pattrib->priority = 0;
12063         pattrib->qsel = pattrib->priority;
12064         /*      do_queue_select(padapter, pattrib); */
12065         pattrib->nr_frags = 1;
12066         pattrib->encrypt = 0;
12067         pattrib->bswenc = _FALSE;
12068         pattrib->qos_en = _FALSE;
12069
12070         bmcast = IS_MCAST(pattrib->ra);
12071         if (bmcast) {
12072                 pattrib->mac_id = 1;
12073                 pattrib->psta = rtw_get_bcmc_stainfo(padapter);
12074         } else {
12075                 pattrib->mac_id = 0;
12076                 pattrib->psta = rtw_get_stainfo(&padapter->stapriv, get_bssid(&padapter->mlmepriv));
12077         }
12078
12079         pattrib->pktlen = size;
12080         pattrib->last_txcmdsz = pattrib->hdrlen + pattrib->pktlen;
12081
12082         /* 2 4. fill TX descriptor */
12083         desc = (struct tx_desc *)pframe->buf_addr;
12084         _rtw_memset(desc, 0, TXDESC_SIZE);
12085
12086         fill_default_txdesc(pframe, (u8 *)desc);
12087
12088         /* Hw set sequence number */
12089         ((PTXDESC)desc)->hwseq_en = 0; /* HWSEQ_EN, 0:disable, 1:enable
12090  * ((PTXDESC)desc)->hwseq_sel = 0;  */ /* HWSEQ_SEL */
12091
12092         ((PTXDESC)desc)->disdatafb = 1;
12093
12094         /* convert to little endian */
12095         desc->txdw0 = cpu_to_le32(desc->txdw0);
12096         desc->txdw1 = cpu_to_le32(desc->txdw1);
12097         desc->txdw2 = cpu_to_le32(desc->txdw2);
12098         desc->txdw3 = cpu_to_le32(desc->txdw3);
12099         desc->txdw4 = cpu_to_le32(desc->txdw4);
12100         desc->txdw5 = cpu_to_le32(desc->txdw5);
12101         desc->txdw6 = cpu_to_le32(desc->txdw6);
12102         desc->txdw7 = cpu_to_le32(desc->txdw7);
12103 #ifdef CONFIG_PCI_HCI
12104         desc->txdw8 = cpu_to_le32(desc->txdw8);
12105         desc->txdw9 = cpu_to_le32(desc->txdw9);
12106         desc->txdw10 = cpu_to_le32(desc->txdw10);
12107         desc->txdw11 = cpu_to_le32(desc->txdw11);
12108         desc->txdw12 = cpu_to_le32(desc->txdw12);
12109         desc->txdw13 = cpu_to_le32(desc->txdw13);
12110         desc->txdw14 = cpu_to_le32(desc->txdw14);
12111         desc->txdw15 = cpu_to_le32(desc->txdw15);
12112 #endif
12113
12114         cal_txdesc_chksum(desc);
12115
12116         /* 2 5. coalesce */
12117         pkt_start = pframe->buf_addr + TXDESC_SIZE;
12118         pkt_end = pkt_start + pattrib->last_txcmdsz;
12119
12120         /* 3 5.1. make wlan header, make_wlanhdr() */
12121         hdr = (struct rtw_ieee80211_hdr *)pkt_start;
12122         set_frame_sub_type(&hdr->frame_ctl, pattrib->subtype);
12123         _rtw_memcpy(hdr->addr1, pattrib->dst, ETH_ALEN); /* DA */
12124         _rtw_memcpy(hdr->addr2, pattrib->src, ETH_ALEN); /* SA */
12125         _rtw_memcpy(hdr->addr3, get_bssid(&padapter->mlmepriv), ETH_ALEN); /* RA, BSSID */
12126
12127         /* 3 5.2. make payload */
12128         ptr = pkt_start + pattrib->hdrlen;
12129         get_random_bytes(ptr, pkt_end - ptr);
12130
12131         pxmitbuf->len = TXDESC_SIZE + pattrib->last_txcmdsz;
12132         pxmitbuf->ptail += pxmitbuf->len;
12133
12134         return pframe;
12135 }
12136
12137 static void freeloopbackpkt(PADAPTER padapter, struct xmit_frame *pframe)
12138 {
12139         struct xmit_priv *pxmitpriv;
12140         struct xmit_buf *pxmitbuf;
12141
12142
12143         pxmitpriv = &padapter->xmitpriv;
12144         pxmitbuf = pframe->pxmitbuf;
12145
12146         rtw_free_xmitframe(pxmitpriv, pframe);
12147         rtw_free_xmitbuf(pxmitpriv, pxmitbuf);
12148 }
12149
12150 static void printdata(u8 *pbuf, u32 len)
12151 {
12152         u32 i, val;
12153
12154
12155         for (i = 0; (i + 4) <= len; i += 4) {
12156                 printk("%08X", *(u32 *)(pbuf + i));
12157                 if ((i + 4) & 0x1F)
12158                         printk(" ");
12159                 else
12160                         printk("\n");
12161         }
12162
12163         if (i < len) {
12164 #ifdef CONFIG_BIG_ENDIAN
12165                 for (; i < len, i++)
12166                         printk("%02X", pbuf + i);
12167 #else /* CONFIG_LITTLE_ENDIAN */
12168 #if 0
12169                 val = 0;
12170                 _rtw_memcpy(&val, pbuf + i, len - i);
12171                 printk("%8X", val);
12172 #else
12173                 u8 str[9];
12174                 u8 n;
12175                 val = 0;
12176                 n = len - i;
12177                 _rtw_memcpy(&val, pbuf + i, n);
12178                 sprintf(str, "%08X", val);
12179                 n = (4 - n) * 2;
12180                 printk("%8s", str + n);
12181 #endif
12182 #endif /* CONFIG_LITTLE_ENDIAN */
12183         }
12184         printk("\n");
12185 }
12186
12187 static u8 pktcmp(PADAPTER padapter, u8 *txbuf, u32 txsz, u8 *rxbuf, u32 rxsz)
12188 {
12189         PHAL_DATA_TYPE phal;
12190         struct recv_stat *prxstat;
12191         struct recv_stat report;
12192         PRXREPORT prxreport;
12193         u32 drvinfosize;
12194         u32 rxpktsize;
12195         u8 fcssize;
12196         u8 ret = _FALSE;
12197
12198         prxstat = (struct recv_stat *)rxbuf;
12199         report.rxdw0 = le32_to_cpu(prxstat->rxdw0);
12200         report.rxdw1 = le32_to_cpu(prxstat->rxdw1);
12201         report.rxdw2 = le32_to_cpu(prxstat->rxdw2);
12202         report.rxdw3 = le32_to_cpu(prxstat->rxdw3);
12203         report.rxdw4 = le32_to_cpu(prxstat->rxdw4);
12204         report.rxdw5 = le32_to_cpu(prxstat->rxdw5);
12205
12206         prxreport = (PRXREPORT)&report;
12207         drvinfosize = prxreport->drvinfosize << 3;
12208         rxpktsize = prxreport->pktlen;
12209
12210         phal = GET_HAL_DATA(padapter);
12211         if (phal->ReceiveConfig & RCR_APPFCS)
12212                 fcssize = IEEE80211_FCS_LEN;
12213         else
12214                 fcssize = 0;
12215
12216         if ((txsz - TXDESC_SIZE) != (rxpktsize - fcssize)) {
12217                 RTW_INFO("%s: ERROR! size not match tx/rx=%d/%d !\n",
12218                          __func__, txsz - TXDESC_SIZE, rxpktsize - fcssize);
12219                 ret = _FALSE;
12220         } else {
12221                 ret = _rtw_memcmp(txbuf + TXDESC_SIZE, \
12222                                   rxbuf + RXDESC_SIZE + drvinfosize, \
12223                                   txsz - TXDESC_SIZE);
12224                 if (ret == _FALSE)
12225                         RTW_INFO("%s: ERROR! pkt content mismatch!\n", __func__);
12226         }
12227
12228         if (ret == _FALSE) {
12229                 RTW_INFO("\n%s: TX PKT total=%d, desc=%d, content=%d\n",
12230                          __func__, txsz, TXDESC_SIZE, txsz - TXDESC_SIZE);
12231                 RTW_INFO("%s: TX DESC size=%d\n", __func__, TXDESC_SIZE);
12232                 printdata(txbuf, TXDESC_SIZE);
12233                 RTW_INFO("%s: TX content size=%d\n", __func__, txsz - TXDESC_SIZE);
12234                 printdata(txbuf + TXDESC_SIZE, txsz - TXDESC_SIZE);
12235
12236                 RTW_INFO("\n%s: RX PKT read=%d offset=%d(%d,%d) content=%d\n",
12237                         __func__, rxsz, RXDESC_SIZE + drvinfosize, RXDESC_SIZE, drvinfosize, rxpktsize);
12238                 if (rxpktsize != 0) {
12239                         RTW_INFO("%s: RX DESC size=%d\n", __func__, RXDESC_SIZE);
12240                         printdata(rxbuf, RXDESC_SIZE);
12241                         RTW_INFO("%s: RX drvinfo size=%d\n", __func__, drvinfosize);
12242                         printdata(rxbuf + RXDESC_SIZE, drvinfosize);
12243                         RTW_INFO("%s: RX content size=%d\n", __func__, rxpktsize);
12244                         printdata(rxbuf + RXDESC_SIZE + drvinfosize, rxpktsize);
12245                 } else {
12246                         RTW_INFO("%s: RX data size=%d\n", __func__, rxsz);
12247                         printdata(rxbuf, rxsz);
12248                 }
12249         }
12250
12251         return ret;
12252 }
12253
12254 thread_return lbk_thread(thread_context context)
12255 {
12256         s32 err;
12257         PADAPTER padapter;
12258         PLOOPBACKDATA ploopback;
12259         struct xmit_frame *pxmitframe;
12260         u32 cnt, ok, fail, headerlen;
12261         u32 pktsize;
12262         u32 ff_hwaddr;
12263
12264
12265         padapter = (PADAPTER)context;
12266         ploopback = padapter->ploopback;
12267         if (ploopback == NULL)
12268                 return -1;
12269         cnt = 0;
12270         ok = 0;
12271         fail = 0;
12272
12273         daemonize("%s", "RTW_LBK_THREAD");
12274         allow_signal(SIGTERM);
12275
12276         do {
12277                 if (ploopback->size == 0) {
12278                         get_random_bytes(&pktsize, 4);
12279                         pktsize = (pktsize % 1535) + 1; /* 1~1535 */
12280                 } else
12281                         pktsize = ploopback->size;
12282
12283                 pxmitframe = createloopbackpkt(padapter, pktsize);
12284                 if (pxmitframe == NULL) {
12285                         sprintf(ploopback->msg, "loopback FAIL! 3. create Packet FAIL!");
12286                         break;
12287                 }
12288
12289                 ploopback->txsize = TXDESC_SIZE + pxmitframe->attrib.last_txcmdsz;
12290                 _rtw_memcpy(ploopback->txbuf, pxmitframe->buf_addr, ploopback->txsize);
12291                 ff_hwaddr = rtw_get_ff_hwaddr(pxmitframe);
12292                 cnt++;
12293                 RTW_INFO("%s: wirte port cnt=%d size=%d\n", __func__, cnt, ploopback->txsize);
12294                 pxmitframe->pxmitbuf->pdata = ploopback->txbuf;
12295                 rtw_write_port(padapter, ff_hwaddr, ploopback->txsize, (u8 *)pxmitframe->pxmitbuf);
12296
12297                 /* wait for rx pkt */
12298                 _rtw_down_sema(&ploopback->sema);
12299
12300                 err = pktcmp(padapter, ploopback->txbuf, ploopback->txsize, ploopback->rxbuf, ploopback->rxsize);
12301                 if (err == _TRUE)
12302                         ok++;
12303                 else
12304                         fail++;
12305
12306                 ploopback->txsize = 0;
12307                 _rtw_memset(ploopback->txbuf, 0, 0x8000);
12308                 ploopback->rxsize = 0;
12309                 _rtw_memset(ploopback->rxbuf, 0, 0x8000);
12310
12311                 freeloopbackpkt(padapter, pxmitframe);
12312                 pxmitframe = NULL;
12313
12314                 if (signal_pending(current))
12315                         flush_signals(current);
12316
12317                 if ((ploopback->bstop == _TRUE) ||
12318                     ((ploopback->cnt != 0) && (ploopback->cnt == cnt))) {
12319                         u32 ok_rate, fail_rate, all;
12320                         all = cnt;
12321                         ok_rate = (ok * 100) / all;
12322                         fail_rate = (fail * 100) / all;
12323                         sprintf(ploopback->msg, \
12324                                 "loopback result: ok=%d%%(%d/%d),error=%d%%(%d/%d)", \
12325                                 ok_rate, ok, all, fail_rate, fail, all);
12326                         break;
12327                 }
12328         } while (1);
12329
12330         ploopback->bstop = _TRUE;
12331
12332         thread_exit();
12333 }
12334
12335 static void loopbackTest(PADAPTER padapter, u32 cnt, u32 size, u8 *pmsg)
12336 {
12337         PLOOPBACKDATA ploopback;
12338         u32 len;
12339         s32 err;
12340
12341
12342         ploopback = padapter->ploopback;
12343
12344         if (ploopback) {
12345                 if (ploopback->bstop == _FALSE) {
12346                         ploopback->bstop = _TRUE;
12347                         _rtw_up_sema(&ploopback->sema);
12348                 }
12349                 len = 0;
12350                 do {
12351                         len = strlen(ploopback->msg);
12352                         if (len)
12353                                 break;
12354                         rtw_msleep_os(1);
12355                 } while (1);
12356                 _rtw_memcpy(pmsg, ploopback->msg, len + 1);
12357                 freeLoopback(padapter);
12358
12359                 return;
12360         }
12361
12362         /* disable dynamic algorithm     */
12363         rtw_phydm_ability_backup(padapter);
12364         rtw_phydm_func_disable_all(padapter);
12365
12366         /* create pseudo ad-hoc connection */
12367         err = initpseudoadhoc(padapter);
12368         if (err == _FAIL) {
12369                 sprintf(pmsg, "loopback FAIL! 1.1 init ad-hoc FAIL!");
12370                 return;
12371         }
12372
12373         err = createpseudoadhoc(padapter);
12374         if (err == _FAIL) {
12375                 sprintf(pmsg, "loopback FAIL! 1.2 create ad-hoc master FAIL!");
12376                 return;
12377         }
12378
12379         err = initLoopback(padapter);
12380         if (err) {
12381                 sprintf(pmsg, "loopback FAIL! 2. init FAIL! error code=%d", err);
12382                 return;
12383         }
12384
12385         ploopback = padapter->ploopback;
12386
12387         ploopback->bstop = _FALSE;
12388         ploopback->cnt = cnt;
12389         ploopback->size = size;
12390         ploopback->lbkthread = kthread_run(lbk_thread, padapter, "RTW_LBK_THREAD");
12391         if (IS_ERR(padapter->lbkthread)) {
12392                 freeLoopback(padapter);
12393                 sprintf(pmsg, "loopback start FAIL! cnt=%d", cnt);
12394                 return;
12395         }
12396
12397         sprintf(pmsg, "loopback start! cnt=%d", cnt);
12398 }
12399 #endif /* CONFIG_MAC_LOOPBACK_DRIVER */
12400
12401 static int rtw_test(
12402         struct net_device *dev,
12403         struct iw_request_info *info,
12404         union iwreq_data *wrqu, char *extra)
12405 {
12406         u32 len;
12407         u8 *pbuf, *pch;
12408         char *ptmp;
12409         u8 *delim = ",";
12410         PADAPTER padapter = rtw_netdev_priv(dev);
12411
12412
12413         RTW_INFO("+%s\n", __func__);
12414         len = wrqu->data.length;
12415
12416         pbuf = (u8 *)rtw_zmalloc(len);
12417         if (pbuf == NULL) {
12418                 RTW_INFO("%s: no memory!\n", __func__);
12419                 return -ENOMEM;
12420         }
12421
12422         if (copy_from_user(pbuf, wrqu->data.pointer, len)) {
12423                 rtw_mfree(pbuf, len);
12424                 RTW_INFO("%s: copy from user fail!\n", __func__);
12425                 return -EFAULT;
12426         }
12427         RTW_INFO("%s: string=\"%s\"\n", __func__, pbuf);
12428
12429         ptmp = (char *)pbuf;
12430         pch = strsep(&ptmp, delim);
12431         if ((pch == NULL) || (strlen(pch) == 0)) {
12432                 rtw_mfree(pbuf, len);
12433                 RTW_INFO("%s: parameter error(level 1)!\n", __func__);
12434                 return -EFAULT;
12435         }
12436
12437 #ifdef CONFIG_MAC_LOOPBACK_DRIVER
12438         if (strcmp(pch, "loopback") == 0) {
12439                 s32 cnt = 0;
12440                 u32 size = 64;
12441
12442                 pch = strsep(&ptmp, delim);
12443                 if ((pch == NULL) || (strlen(pch) == 0)) {
12444                         rtw_mfree(pbuf, len);
12445                         RTW_INFO("%s: parameter error(level 2)!\n", __func__);
12446                         return -EFAULT;
12447                 }
12448
12449                 sscanf(pch, "%d", &cnt);
12450                 RTW_INFO("%s: loopback cnt=%d\n", __func__, cnt);
12451
12452                 pch = strsep(&ptmp, delim);
12453                 if ((pch == NULL) || (strlen(pch) == 0)) {
12454                         rtw_mfree(pbuf, len);
12455                         RTW_INFO("%s: parameter error(level 2)!\n", __func__);
12456                         return -EFAULT;
12457                 }
12458
12459                 sscanf(pch, "%d", &size);
12460                 RTW_INFO("%s: loopback size=%d\n", __func__, size);
12461
12462                 loopbackTest(padapter, cnt, size, extra);
12463                 wrqu->data.length = strlen(extra) + 1;
12464
12465                 goto free_buf;
12466         }
12467 #endif
12468
12469
12470 #ifdef CONFIG_BT_COEXIST
12471         if (strcmp(pch, "bton") == 0) {
12472                 rtw_btcoex_SetManualControl(padapter, _FALSE);
12473                 goto free_buf;
12474         } else if (strcmp(pch, "btoff") == 0) {
12475                 rtw_btcoex_SetManualControl(padapter, _TRUE);
12476                 goto free_buf;
12477         }
12478 #endif
12479
12480         if (strcmp(pch, "h2c") == 0) {
12481                 u8 param[8];
12482                 u8 count = 0;
12483                 u32 tmp;
12484                 u8 i;
12485                 u32 pos;
12486                 u8 ret;
12487
12488                 do {
12489                         pch = strsep(&ptmp, delim);
12490                         if ((pch == NULL) || (strlen(pch) == 0))
12491                                 break;
12492
12493                         sscanf(pch, "%x", &tmp);
12494                         param[count++] = (u8)tmp;
12495                 } while (count < 8);
12496
12497                 if (count == 0) {
12498                         rtw_mfree(pbuf, len);
12499                         RTW_INFO("%s: parameter error(level 2)!\n", __func__);
12500                         return -EFAULT;
12501                 }
12502
12503                 ret = rtw_test_h2c_cmd(padapter, param, count);
12504
12505                 pos = sprintf(extra, "H2C ID=0x%02x content=", param[0]);
12506                 for (i = 1; i < count; i++)
12507                         pos += sprintf(extra + pos, "%02x,", param[i]);
12508                 extra[pos] = 0;
12509                 pos--;
12510                 pos += sprintf(extra + pos, " %s", ret == _FAIL ? "FAIL" : "OK");
12511
12512                 wrqu->data.length = strlen(extra) + 1;
12513
12514                 goto free_buf;
12515         }
12516
12517 free_buf:
12518         rtw_mfree(pbuf, len);
12519         return 0;
12520 }
12521
12522 static iw_handler rtw_handlers[] = {
12523         NULL,                                   /* SIOCSIWCOMMIT */
12524         rtw_wx_get_name,                /* SIOCGIWNAME */
12525         dummy,                                  /* SIOCSIWNWID */
12526         dummy,                                  /* SIOCGIWNWID */
12527         rtw_wx_set_freq,                /* SIOCSIWFREQ */
12528         rtw_wx_get_freq,                /* SIOCGIWFREQ */
12529         rtw_wx_set_mode,                /* SIOCSIWMODE */
12530         rtw_wx_get_mode,                /* SIOCGIWMODE */
12531         dummy,                                  /* SIOCSIWSENS */
12532         rtw_wx_get_sens,                /* SIOCGIWSENS */
12533         NULL,                                   /* SIOCSIWRANGE */
12534         rtw_wx_get_range,               /* SIOCGIWRANGE */
12535         rtw_wx_set_priv,                /* SIOCSIWPRIV */
12536         NULL,                                   /* SIOCGIWPRIV */
12537         NULL,                                   /* SIOCSIWSTATS */
12538         NULL,                                   /* SIOCGIWSTATS */
12539         dummy,                                  /* SIOCSIWSPY */
12540         dummy,                                  /* SIOCGIWSPY */
12541         NULL,                                   /* SIOCGIWTHRSPY */
12542         NULL,                                   /* SIOCWIWTHRSPY */
12543         rtw_wx_set_wap,         /* SIOCSIWAP */
12544         rtw_wx_get_wap,         /* SIOCGIWAP */
12545         rtw_wx_set_mlme,                /* request MLME operation; uses struct iw_mlme */
12546         dummy,                                  /* SIOCGIWAPLIST -- depricated */
12547         rtw_wx_set_scan,                /* SIOCSIWSCAN */
12548         rtw_wx_get_scan,                /* SIOCGIWSCAN */
12549         rtw_wx_set_essid,               /* SIOCSIWESSID */
12550         rtw_wx_get_essid,               /* SIOCGIWESSID */
12551         dummy,                                  /* SIOCSIWNICKN */
12552         rtw_wx_get_nick,                /* SIOCGIWNICKN */
12553         NULL,                                   /* -- hole -- */
12554         NULL,                                   /* -- hole -- */
12555         rtw_wx_set_rate,                /* SIOCSIWRATE */
12556         rtw_wx_get_rate,                /* SIOCGIWRATE */
12557         rtw_wx_set_rts,                 /* SIOCSIWRTS */
12558         rtw_wx_get_rts,                 /* SIOCGIWRTS */
12559         rtw_wx_set_frag,                /* SIOCSIWFRAG */
12560         rtw_wx_get_frag,                /* SIOCGIWFRAG */
12561         dummy,                                  /* SIOCSIWTXPOW */
12562         dummy,                                  /* SIOCGIWTXPOW */
12563         dummy,                                  /* SIOCSIWRETRY */
12564         rtw_wx_get_retry,               /* SIOCGIWRETRY */
12565         rtw_wx_set_enc,                 /* SIOCSIWENCODE */
12566         rtw_wx_get_enc,                 /* SIOCGIWENCODE */
12567         dummy,                                  /* SIOCSIWPOWER */
12568         rtw_wx_get_power,               /* SIOCGIWPOWER */
12569         NULL,                                   /*---hole---*/
12570         NULL,                                   /*---hole---*/
12571         rtw_wx_set_gen_ie,              /* SIOCSIWGENIE */
12572         NULL,                                   /* SIOCGWGENIE */
12573         rtw_wx_set_auth,                /* SIOCSIWAUTH */
12574         NULL,                                   /* SIOCGIWAUTH */
12575         rtw_wx_set_enc_ext,             /* SIOCSIWENCODEEXT */
12576         NULL,                                   /* SIOCGIWENCODEEXT */
12577         rtw_wx_set_pmkid,               /* SIOCSIWPMKSA */
12578         NULL,                                   /*---hole---*/
12579 };
12580
12581
12582 static const struct iw_priv_args rtw_private_args[] = {
12583         {
12584                 SIOCIWFIRSTPRIV + 0x0,
12585                 IW_PRIV_TYPE_CHAR | 0x7FF, 0, "write"
12586         },
12587         {
12588                 SIOCIWFIRSTPRIV + 0x1,
12589                 IW_PRIV_TYPE_CHAR | 0x7FF,
12590                 IW_PRIV_TYPE_CHAR | IW_PRIV_SIZE_FIXED | IFNAMSIZ, "read"
12591         },
12592         {
12593                 SIOCIWFIRSTPRIV + 0x2, 0, 0, "driver_ext"
12594         },
12595         {
12596                 SIOCIWFIRSTPRIV + 0x3, 0, 0, "mp_ioctl"
12597         },
12598         {
12599                 SIOCIWFIRSTPRIV + 0x4,
12600                 IW_PRIV_TYPE_INT | IW_PRIV_SIZE_FIXED | 1, 0, "apinfo"
12601         },
12602         {
12603                 SIOCIWFIRSTPRIV + 0x5,
12604                 IW_PRIV_TYPE_INT | IW_PRIV_SIZE_FIXED | 2, 0, "setpid"
12605         },
12606         {
12607                 SIOCIWFIRSTPRIV + 0x6,
12608                 IW_PRIV_TYPE_INT | IW_PRIV_SIZE_FIXED | 1, 0, "wps_start"
12609         },
12610         /* for PLATFORM_MT53XX   */
12611         {
12612                 SIOCIWFIRSTPRIV + 0x7,
12613                 IW_PRIV_TYPE_INT | IW_PRIV_SIZE_FIXED | 1, 0, "get_sensitivity"
12614         },
12615         {
12616                 SIOCIWFIRSTPRIV + 0x8,
12617                 IW_PRIV_TYPE_INT | IW_PRIV_SIZE_FIXED | 1, 0, "wps_prob_req_ie"
12618         },
12619         {
12620                 SIOCIWFIRSTPRIV + 0x9,
12621                 IW_PRIV_TYPE_INT | IW_PRIV_SIZE_FIXED | 1, 0, "wps_assoc_req_ie"
12622         },
12623
12624         /* for RTK_DMP_PLATFORM  */
12625         {
12626                 SIOCIWFIRSTPRIV + 0xA,
12627                 IW_PRIV_TYPE_INT | IW_PRIV_SIZE_FIXED | 1, 0, "channel_plan"
12628         },
12629
12630         {
12631                 SIOCIWFIRSTPRIV + 0xB,
12632                 IW_PRIV_TYPE_INT | IW_PRIV_SIZE_FIXED | 2, 0, "dbg"
12633         },
12634         {
12635                 SIOCIWFIRSTPRIV + 0xC,
12636                 IW_PRIV_TYPE_INT | IW_PRIV_SIZE_FIXED | 3, 0, "rfw"
12637         },
12638         {
12639                 SIOCIWFIRSTPRIV + 0xD,
12640                 IW_PRIV_TYPE_INT | IW_PRIV_SIZE_FIXED | 2, IW_PRIV_TYPE_CHAR | IW_PRIV_SIZE_FIXED | IFNAMSIZ, "rfr"
12641         },
12642 #if 0
12643         {
12644                 SIOCIWFIRSTPRIV + 0xE, 0, 0, "wowlan_ctrl"
12645         },
12646 #endif
12647         {
12648                 SIOCIWFIRSTPRIV + 0x10,
12649                 IW_PRIV_TYPE_CHAR | 1024, 0, "p2p_set"
12650         },
12651         {
12652                 SIOCIWFIRSTPRIV + 0x11,
12653                 IW_PRIV_TYPE_CHAR | 1024, IW_PRIV_TYPE_CHAR | IW_PRIV_SIZE_MASK , "p2p_get"
12654         },
12655         {
12656                 SIOCIWFIRSTPRIV + 0x12, 0, 0, "NULL"
12657         },
12658         {
12659                 SIOCIWFIRSTPRIV + 0x13,
12660                 IW_PRIV_TYPE_CHAR | 64, IW_PRIV_TYPE_CHAR | 64 , "p2p_get2"
12661         },
12662         {
12663                 SIOCIWFIRSTPRIV + 0x14,
12664                 IW_PRIV_TYPE_CHAR  | 64, 0, "tdls"
12665         },
12666         {
12667                 SIOCIWFIRSTPRIV + 0x15,
12668                 IW_PRIV_TYPE_CHAR | 1024, IW_PRIV_TYPE_CHAR | 1024 , "tdls_get"
12669         },
12670         {
12671                 SIOCIWFIRSTPRIV + 0x16,
12672                 IW_PRIV_TYPE_CHAR | 64, 0, "pm_set"
12673         },
12674
12675         {SIOCIWFIRSTPRIV + 0x18, IW_PRIV_TYPE_CHAR | IFNAMSIZ , 0 , "rereg_nd_name"},
12676 #ifdef CONFIG_MP_INCLUDED
12677         {SIOCIWFIRSTPRIV + 0x1A, IW_PRIV_TYPE_CHAR | 1024, 0,  "NULL"},
12678         {SIOCIWFIRSTPRIV + 0x1B, IW_PRIV_TYPE_CHAR | 128, IW_PRIV_TYPE_CHAR | IW_PRIV_SIZE_MASK, "NULL"},
12679 #else
12680         {SIOCIWFIRSTPRIV + 0x1A, IW_PRIV_TYPE_CHAR | 1024, 0, "efuse_set"},
12681         {SIOCIWFIRSTPRIV + 0x1B, IW_PRIV_TYPE_CHAR | 128, IW_PRIV_TYPE_CHAR | IW_PRIV_SIZE_MASK, "efuse_get"},
12682 #endif
12683         {
12684                 SIOCIWFIRSTPRIV + 0x1D,
12685                 IW_PRIV_TYPE_CHAR | 40, IW_PRIV_TYPE_CHAR | 0x7FF, "test"
12686         },
12687
12688 #ifdef CONFIG_INTEL_WIDI
12689         {
12690                 SIOCIWFIRSTPRIV + 0x1E,
12691                 IW_PRIV_TYPE_CHAR | 1024, 0, "widi_set"
12692         },
12693         {
12694                 SIOCIWFIRSTPRIV + 0x1F,
12695                 IW_PRIV_TYPE_CHAR | 128, 0, "widi_prob_req"
12696         },
12697 #endif /* CONFIG_INTEL_WIDI */
12698
12699         { SIOCIWFIRSTPRIV + 0x0E, IW_PRIV_TYPE_CHAR | 1024, 0 , ""},  /* set  */
12700         { SIOCIWFIRSTPRIV + 0x0F, IW_PRIV_TYPE_CHAR | 1024, IW_PRIV_TYPE_CHAR | IW_PRIV_SIZE_MASK , ""},/* get
12701  * --- sub-ioctls definitions --- */
12702
12703 #ifdef CONFIG_APPEND_VENDOR_IE_ENABLE
12704         { VENDOR_IE_SET, IW_PRIV_TYPE_CHAR | 1024 , 0 , "vendor_ie_set" },
12705         { VENDOR_IE_GET, IW_PRIV_TYPE_CHAR | 1024, IW_PRIV_TYPE_CHAR | IW_PRIV_SIZE_MASK, "vendor_ie_get" },
12706 #endif
12707 #if defined(CONFIG_RTL8723B)
12708         { MP_SetBT, IW_PRIV_TYPE_CHAR | 1024, IW_PRIV_TYPE_CHAR | IW_PRIV_SIZE_MASK, "mp_setbt" },
12709         { MP_DISABLE_BT_COEXIST, IW_PRIV_TYPE_CHAR | 1024, 0, "mp_disa_btcoex"},
12710 #endif
12711 #ifdef CONFIG_WOWLAN
12712         { MP_WOW_ENABLE , IW_PRIV_TYPE_CHAR | 1024, 0, "wow_mode" },
12713         { MP_WOW_SET_PATTERN , IW_PRIV_TYPE_CHAR | 1024, 0, "wow_set_pattern" },
12714 #endif
12715 #ifdef CONFIG_AP_WOWLAN
12716         { MP_AP_WOW_ENABLE , IW_PRIV_TYPE_CHAR | 1024, 0, "ap_wow_mode" }, /* set  */
12717 #endif
12718 #ifdef CONFIG_SDIO_INDIRECT_ACCESS
12719         { MP_SD_IREAD, IW_PRIV_TYPE_CHAR | 1024, IW_PRIV_TYPE_CHAR | IW_PRIV_SIZE_MASK, "sd_iread" },
12720         { MP_SD_IWRITE, IW_PRIV_TYPE_CHAR | 1024, IW_PRIV_TYPE_CHAR | IW_PRIV_SIZE_MASK, "sd_iwrite" },
12721 #endif
12722 };
12723
12724
12725 static const struct iw_priv_args rtw_mp_private_args[] = {
12726         /* --- sub-ioctls definitions --- */
12727 #ifdef CONFIG_MP_INCLUDED
12728         { MP_START , IW_PRIV_TYPE_CHAR | 1024, IW_PRIV_TYPE_CHAR | IW_PRIV_SIZE_MASK, "mp_start" },
12729         { MP_PHYPARA, IW_PRIV_TYPE_CHAR | 1024, IW_PRIV_TYPE_CHAR | IW_PRIV_SIZE_MASK, "mp_phypara" },
12730         { MP_STOP , IW_PRIV_TYPE_CHAR | 1024, IW_PRIV_TYPE_CHAR | IW_PRIV_SIZE_MASK, "mp_stop" },
12731         { MP_CHANNEL , IW_PRIV_TYPE_CHAR | 1024 , IW_PRIV_TYPE_CHAR | IW_PRIV_SIZE_MASK, "mp_channel" },
12732         { MP_BANDWIDTH , IW_PRIV_TYPE_CHAR | 1024, IW_PRIV_TYPE_CHAR | IW_PRIV_SIZE_MASK, "mp_bandwidth"},
12733         { MP_RATE , IW_PRIV_TYPE_CHAR | 1024, IW_PRIV_TYPE_CHAR | IW_PRIV_SIZE_MASK, "mp_rate" },
12734         { MP_RESET_STATS , IW_PRIV_TYPE_CHAR | 1024, IW_PRIV_TYPE_CHAR | IW_PRIV_SIZE_MASK, "mp_reset_stats"},
12735         { MP_QUERY , IW_PRIV_TYPE_CHAR | 1024, IW_PRIV_TYPE_CHAR | IW_PRIV_SIZE_MASK , "mp_query"},
12736         { READ_REG , IW_PRIV_TYPE_CHAR | 1024, IW_PRIV_TYPE_CHAR | IW_PRIV_SIZE_MASK, "read_reg" },
12737         { MP_RATE , IW_PRIV_TYPE_CHAR | 1024, IW_PRIV_TYPE_CHAR | IW_PRIV_SIZE_MASK, "mp_rate" },
12738         { READ_RF , IW_PRIV_TYPE_CHAR | 1024, IW_PRIV_TYPE_CHAR | IW_PRIV_SIZE_MASK, "read_rf" },
12739         { MP_PSD , IW_PRIV_TYPE_CHAR | 1024, IW_PRIV_TYPE_CHAR | IW_PRIV_SIZE_MASK, "mp_psd"},
12740         { MP_DUMP, IW_PRIV_TYPE_CHAR | 1024, IW_PRIV_TYPE_CHAR | IW_PRIV_SIZE_MASK, "mp_dump" },
12741         { MP_TXPOWER , IW_PRIV_TYPE_CHAR | 1024, IW_PRIV_TYPE_CHAR | IW_PRIV_SIZE_MASK, "mp_txpower"},
12742         { MP_ANT_TX , IW_PRIV_TYPE_CHAR | 1024,  IW_PRIV_TYPE_CHAR | IW_PRIV_SIZE_MASK, "mp_ant_tx"},
12743         { MP_ANT_RX , IW_PRIV_TYPE_CHAR | 1024, IW_PRIV_TYPE_CHAR | IW_PRIV_SIZE_MASK, "mp_ant_rx"},
12744         { WRITE_REG , IW_PRIV_TYPE_CHAR | 1024, IW_PRIV_TYPE_CHAR | IW_PRIV_SIZE_MASK, "write_reg" },
12745         { WRITE_RF , IW_PRIV_TYPE_CHAR | 1024, IW_PRIV_TYPE_CHAR | IW_PRIV_SIZE_MASK, "write_rf" },
12746         { MP_CTX , IW_PRIV_TYPE_CHAR | 1024, IW_PRIV_TYPE_CHAR | IW_PRIV_SIZE_MASK, "mp_ctx"},
12747         { MP_ARX , IW_PRIV_TYPE_CHAR | 1024, IW_PRIV_TYPE_CHAR | IW_PRIV_SIZE_MASK, "mp_arx"},
12748         { MP_THER , IW_PRIV_TYPE_CHAR | 1024, IW_PRIV_TYPE_CHAR | IW_PRIV_SIZE_MASK, "mp_ther"},
12749         { EFUSE_SET, IW_PRIV_TYPE_CHAR | 1024, IW_PRIV_TYPE_CHAR | IW_PRIV_SIZE_MASK, "efuse_set" },
12750         { EFUSE_GET, IW_PRIV_TYPE_CHAR | 1024, IW_PRIV_TYPE_CHAR | IW_PRIV_SIZE_MASK, "efuse_get" },
12751         { MP_PWRTRK , IW_PRIV_TYPE_CHAR | 1024, IW_PRIV_TYPE_CHAR | IW_PRIV_SIZE_MASK, "mp_pwrtrk"},
12752         { MP_QueryDrvStats, IW_PRIV_TYPE_CHAR | 1024, IW_PRIV_TYPE_CHAR | IW_PRIV_SIZE_MASK, "mp_drvquery" },
12753         { MP_IOCTL, IW_PRIV_TYPE_CHAR | 1024, 0, "mp_ioctl"},
12754         { MP_SetRFPathSwh, IW_PRIV_TYPE_CHAR | 1024, IW_PRIV_TYPE_CHAR | IW_PRIV_SIZE_MASK, "mp_setrfpath" },
12755         { MP_PwrCtlDM, IW_PRIV_TYPE_CHAR | 1024, IW_PRIV_TYPE_CHAR | IW_PRIV_SIZE_MASK, "mp_pwrctldm" },
12756         { MP_GET_TXPOWER_INX, IW_PRIV_TYPE_CHAR | 1024, IW_PRIV_TYPE_CHAR | IW_PRIV_SIZE_MASK, "mp_get_txpower" },
12757         { MP_GETVER, IW_PRIV_TYPE_CHAR | 1024, IW_PRIV_TYPE_CHAR | IW_PRIV_SIZE_MASK, "mp_priv_ver" },
12758         { MP_MON, IW_PRIV_TYPE_CHAR | 1024, IW_PRIV_TYPE_CHAR | IW_PRIV_SIZE_MASK, "mp_mon" },
12759         { EFUSE_MASK, IW_PRIV_TYPE_CHAR | 1024, IW_PRIV_TYPE_CHAR | IW_PRIV_SIZE_MASK, "efuse_mask" },
12760         { EFUSE_FILE, IW_PRIV_TYPE_CHAR | 1024, IW_PRIV_TYPE_CHAR | IW_PRIV_SIZE_MASK, "efuse_file" },
12761         { MP_TX, IW_PRIV_TYPE_CHAR | 1024, IW_PRIV_TYPE_CHAR | IW_PRIV_SIZE_MASK, "mp_tx" },
12762         { MP_RX, IW_PRIV_TYPE_CHAR | 1024, IW_PRIV_TYPE_CHAR | IW_PRIV_SIZE_MASK, "mp_rx" },
12763         { MP_HW_TX_MODE, IW_PRIV_TYPE_CHAR | 1024, IW_PRIV_TYPE_CHAR | IW_PRIV_SIZE_MASK, "mp_hxtx" },
12764         { CTA_TEST, IW_PRIV_TYPE_CHAR | 1024, 0, "cta_test"},
12765         { MP_IQK, IW_PRIV_TYPE_CHAR | 1024, 0, "mp_iqk"},
12766         { MP_LCK, IW_PRIV_TYPE_CHAR | 1024, 0, "mp_lck"},
12767 #ifdef CONFIG_RTW_CUSTOMER_STR
12768         { MP_CUSTOMER_STR, IW_PRIV_TYPE_CHAR | 1024, IW_PRIV_TYPE_CHAR | IW_PRIV_SIZE_MASK, "customer_str" },
12769 #endif
12770
12771 #endif /* CONFIG_MP_INCLUDED */
12772 };
12773
12774 static iw_handler rtw_private_handler[] = {
12775         rtw_wx_write32,                                 /* 0x00 */
12776         rtw_wx_read32,                                  /* 0x01 */
12777         rtw_drvext_hdl,                                 /* 0x02 */
12778 #ifdef MP_IOCTL_HDL
12779         rtw_mp_ioctl_hdl,                               /* 0x03 */
12780 #else
12781         rtw_wx_priv_null,
12782 #endif
12783         /* for MM DTV platform */
12784         rtw_get_ap_info,                                        /* 0x04 */
12785
12786         rtw_set_pid,                                            /* 0x05 */
12787         rtw_wps_start,                                  /* 0x06 */
12788
12789         /* for PLATFORM_MT53XX */
12790         rtw_wx_get_sensitivity,                 /* 0x07 */
12791         rtw_wx_set_mtk_wps_probe_ie,    /* 0x08 */
12792         rtw_wx_set_mtk_wps_ie,                  /* 0x09 */
12793
12794         /* for RTK_DMP_PLATFORM
12795          * Set Channel depend on the country code */
12796         rtw_wx_set_channel_plan,                /* 0x0A */
12797
12798         rtw_dbg_port,                                   /* 0x0B */
12799         rtw_wx_write_rf,                                        /* 0x0C */
12800         rtw_wx_read_rf,                                 /* 0x0D */
12801
12802         rtw_priv_set,                                   /*0x0E*/
12803         rtw_priv_get,                                   /*0x0F*/
12804
12805         rtw_p2p_set,                                    /* 0x10 */
12806         rtw_p2p_get,                                    /* 0x11 */
12807         NULL,                                                   /* 0x12 */
12808         rtw_p2p_get2,                                   /* 0x13 */
12809
12810         rtw_tdls,                                               /* 0x14 */
12811         rtw_tdls_get,                                   /* 0x15 */
12812
12813         rtw_pm_set,                                             /* 0x16 */
12814         rtw_wx_priv_null,                               /* 0x17 */
12815         rtw_rereg_nd_name,                              /* 0x18 */
12816         rtw_wx_priv_null,                               /* 0x19 */
12817 #ifdef CONFIG_MP_INCLUDED
12818         rtw_wx_priv_null,                               /* 0x1A */
12819         rtw_wx_priv_null,                               /* 0x1B */
12820 #else
12821         rtw_mp_efuse_set,                               /* 0x1A */
12822         rtw_mp_efuse_get,                               /* 0x1B */
12823 #endif
12824         NULL,                                                   /* 0x1C is reserved for hostapd */
12825         rtw_test,                                               /* 0x1D */
12826 #ifdef CONFIG_INTEL_WIDI
12827         rtw_widi_set,                                   /* 0x1E */
12828         rtw_widi_set_probe_request,             /* 0x1F */
12829 #endif /* CONFIG_INTEL_WIDI */
12830 };
12831
12832 #if WIRELESS_EXT >= 17
12833 static struct iw_statistics *rtw_get_wireless_stats(struct net_device *dev)
12834 {
12835         _adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
12836         struct iw_statistics *piwstats = &padapter->iwstats;
12837         int tmp_level = 0;
12838         int tmp_qual = 0;
12839         int tmp_noise = 0;
12840
12841         if (check_fwstate(&padapter->mlmepriv, _FW_LINKED) != _TRUE) {
12842                 piwstats->qual.qual = 0;
12843                 piwstats->qual.level = 0;
12844                 piwstats->qual.noise = 0;
12845                 /* RTW_INFO("No link  level:%d, qual:%d, noise:%d\n", tmp_level, tmp_qual, tmp_noise); */
12846         } else {
12847 #ifdef CONFIG_SIGNAL_DISPLAY_DBM
12848                 tmp_level = translate_percentage_to_dbm(padapter->recvpriv.signal_strength);
12849 #else
12850 #ifdef CONFIG_SIGNAL_SCALE_MAPPING
12851                 tmp_level = padapter->recvpriv.signal_strength;
12852 #else
12853                 {
12854                         /* Do signal scale mapping when using percentage as the unit of signal strength, since the scale mapping is skipped in odm */
12855
12856                         HAL_DATA_TYPE *pHal = GET_HAL_DATA(padapter);
12857
12858                         tmp_level = (u8)odm_signal_scale_mapping(&pHal->odmpriv, padapter->recvpriv.signal_strength);
12859                 }
12860 #endif
12861 #endif
12862
12863                 tmp_qual = padapter->recvpriv.signal_qual;
12864                 rtw_get_noise(padapter);
12865                 tmp_noise = padapter->recvpriv.noise;
12866                 /* RTW_INFO("level:%d, qual:%d, noise:%d, rssi (%d)\n", tmp_level, tmp_qual, tmp_noise,padapter->recvpriv.rssi); */
12867
12868                 piwstats->qual.level = tmp_level;
12869                 piwstats->qual.qual = tmp_qual;
12870                 piwstats->qual.noise = tmp_noise;
12871         }
12872 #if (LINUX_VERSION_CODE >= KERNEL_VERSION(2, 6, 14))
12873         piwstats->qual.updated = IW_QUAL_ALL_UPDATED ;/* |IW_QUAL_DBM; */
12874 #else
12875 #ifdef RTK_DMP_PLATFORM
12876         /* IW_QUAL_DBM= 0x8, if driver use this flag, wireless extension will show value of dbm. */
12877         /* remove this flag for show percentage 0~100 */
12878         piwstats->qual.updated = 0x07;
12879 #else
12880         piwstats->qual.updated = 0x0f;
12881 #endif
12882 #endif
12883
12884 #ifdef CONFIG_SIGNAL_DISPLAY_DBM
12885         piwstats->qual.updated = piwstats->qual.updated | IW_QUAL_DBM;
12886 #endif
12887
12888         return &padapter->iwstats;
12889 }
12890 #endif
12891
12892 #ifdef CONFIG_WIRELESS_EXT
12893 struct iw_handler_def rtw_handlers_def = {
12894         .standard = rtw_handlers,
12895         .num_standard = sizeof(rtw_handlers) / sizeof(iw_handler),
12896 #if (LINUX_VERSION_CODE < KERNEL_VERSION(2, 6, 33)) || defined(CONFIG_WEXT_PRIV)
12897         .private = rtw_private_handler,
12898         .private_args = (struct iw_priv_args *)rtw_private_args,
12899         .num_private = sizeof(rtw_private_handler) / sizeof(iw_handler),
12900         .num_private_args = sizeof(rtw_private_args) / sizeof(struct iw_priv_args),
12901 #endif
12902 #if WIRELESS_EXT >= 17
12903         .get_wireless_stats = rtw_get_wireless_stats,
12904 #endif
12905 };
12906 #endif
12907
12908 /* copy from net/wireless/wext.c start
12909  * ----------------------------------------------------------------
12910  *
12911  * Calculate size of private arguments
12912  */
12913 static const char iw_priv_type_size[] = {
12914         0,                              /* IW_PRIV_TYPE_NONE */
12915         1,                              /* IW_PRIV_TYPE_BYTE */
12916         1,                              /* IW_PRIV_TYPE_CHAR */
12917         0,                              /* Not defined */
12918         sizeof(__u32),                  /* IW_PRIV_TYPE_INT */
12919         sizeof(struct iw_freq),         /* IW_PRIV_TYPE_FLOAT */
12920         sizeof(struct sockaddr),        /* IW_PRIV_TYPE_ADDR */
12921         0,                              /* Not defined */
12922 };
12923
12924 static int get_priv_size(__u16 args)
12925 {
12926         int num = args & IW_PRIV_SIZE_MASK;
12927         int type = (args & IW_PRIV_TYPE_MASK) >> 12;
12928
12929         return num * iw_priv_type_size[type];
12930 }
12931 /* copy from net/wireless/wext.c end */
12932
12933
12934 static int _rtw_ioctl_wext_private(struct net_device *dev, union iwreq_data *wrq_data)
12935 {
12936         int err = 0;
12937         u8 *input = NULL;
12938         u32 input_len = 0;
12939         const char delim[] = " ";
12940         u8 *output = NULL;
12941         u32 output_len = 0;
12942         u32 count = 0;
12943         u8 *buffer = NULL;
12944         u32 buffer_len = 0;
12945         char *ptr = NULL;
12946         u8 cmdname[17] = {0}; /* IFNAMSIZ+1 */
12947         u32 cmdlen;
12948         s32 len;
12949         u8 *extra = NULL;
12950         u32 extra_size = 0;
12951
12952         s32 k;
12953         const iw_handler *priv;         /* Private ioctl */
12954         const struct iw_priv_args *priv_args;   /* Private ioctl description */
12955         const struct iw_priv_args *mp_priv_args;        /*MP Private ioctl description */
12956         const struct iw_priv_args *sel_priv_args;       /*Selected Private ioctl description */
12957         u32 num_priv;                           /* Number of ioctl */
12958         u32 num_priv_args;                      /* Number of descriptions */
12959         u32 num_mp_priv_args;                   /*Number of MP descriptions */
12960         u32 num_sel_priv_args;                  /*Number of Selected descriptions */
12961         iw_handler handler;
12962         int temp;
12963         int subcmd = 0;                         /* sub-ioctl index */
12964         int offset = 0;                         /* Space for sub-ioctl index */
12965
12966         union iwreq_data wdata;
12967
12968         _rtw_memcpy(&wdata, wrq_data, sizeof(wdata));
12969
12970         input_len = wdata.data.length;
12971         if (!input_len)
12972                 return -EINVAL;
12973         input = rtw_zmalloc(input_len);
12974         if (NULL == input)
12975                 return -ENOMEM;
12976         if (copy_from_user(input, wdata.data.pointer, input_len)) {
12977                 err = -EFAULT;
12978                 goto exit;
12979         }
12980         input[input_len - 1] = '\0';
12981         ptr = input;
12982         len = input_len;
12983
12984         if (ptr == NULL) {
12985                 err = -EOPNOTSUPP;
12986                 goto exit;
12987         }
12988
12989         sscanf(ptr, "%16s", cmdname);
12990         cmdlen = strlen(cmdname);
12991         RTW_INFO("%s: cmd=%s\n", __func__, cmdname);
12992
12993         /* skip command string */
12994         if (cmdlen > 0)
12995                 cmdlen += 1; /* skip one space */
12996         ptr += cmdlen;
12997         len -= cmdlen;
12998         RTW_INFO("%s: parameters=%s\n", __func__, ptr);
12999
13000         priv = rtw_private_handler;
13001         priv_args = rtw_private_args;
13002         mp_priv_args = rtw_mp_private_args;
13003         num_priv = sizeof(rtw_private_handler) / sizeof(iw_handler);
13004         num_priv_args = sizeof(rtw_private_args) / sizeof(struct iw_priv_args);
13005         num_mp_priv_args = sizeof(rtw_mp_private_args) / sizeof(struct iw_priv_args);
13006
13007         if (num_priv_args == 0) {
13008                 err = -EOPNOTSUPP;
13009                 goto exit;
13010         }
13011
13012         /* Search the correct ioctl */
13013         k = -1;
13014         sel_priv_args = priv_args;
13015         num_sel_priv_args = num_priv_args;
13016         while
13017         ((++k < num_sel_priv_args) && strcmp(sel_priv_args[k].name, cmdname))
13018                 ;
13019
13020         /* If not found... */
13021         if (k == num_sel_priv_args) {
13022                 k = -1;
13023                 sel_priv_args = mp_priv_args;
13024                 num_sel_priv_args = num_mp_priv_args;
13025                 while
13026                 ((++k < num_sel_priv_args) && strcmp(sel_priv_args[k].name, cmdname))
13027                         ;
13028
13029                 if (k == num_sel_priv_args) {
13030                         err = -EOPNOTSUPP;
13031                         goto exit;
13032                 }
13033         }
13034
13035         /* Watch out for sub-ioctls ! */
13036         if (sel_priv_args[k].cmd < SIOCDEVPRIVATE) {
13037                 int j = -1;
13038
13039                 /* Find the matching *real* ioctl */
13040                 while ((++j < num_priv_args) && ((priv_args[j].name[0] != '\0') ||
13041                          (priv_args[j].set_args != sel_priv_args[k].set_args) ||
13042                          (priv_args[j].get_args != sel_priv_args[k].get_args)))
13043                         ;
13044
13045                 /* If not found... */
13046                 if (j == num_priv_args) {
13047                         err = -EINVAL;
13048                         goto exit;
13049                 }
13050
13051                 /* Save sub-ioctl number */
13052                 subcmd = sel_priv_args[k].cmd;
13053                 /* Reserve one int (simplify alignment issues) */
13054                 offset = sizeof(__u32);
13055                 /* Use real ioctl definition from now on */
13056                 k = j;
13057         }
13058
13059         buffer = rtw_zmalloc(4096);
13060         if (NULL == buffer) {
13061                 err = -ENOMEM;
13062                 goto exit;
13063         }
13064
13065         /* If we have to set some data */
13066         if ((priv_args[k].set_args & IW_PRIV_TYPE_MASK) &&
13067             (priv_args[k].set_args & IW_PRIV_SIZE_MASK)) {
13068                 u8 *str;
13069
13070                 switch (priv_args[k].set_args & IW_PRIV_TYPE_MASK) {
13071                 case IW_PRIV_TYPE_BYTE:
13072                         /* Fetch args */
13073                         count = 0;
13074                         do {
13075                                 str = strsep(&ptr, delim);
13076                                 if (NULL == str)
13077                                         break;
13078                                 sscanf(str, "%i", &temp);
13079                                 buffer[count++] = (u8)temp;
13080                         } while (1);
13081                         buffer_len = count;
13082
13083                         /* Number of args to fetch */
13084                         wdata.data.length = count;
13085                         if (wdata.data.length > (priv_args[k].set_args & IW_PRIV_SIZE_MASK))
13086                                 wdata.data.length = priv_args[k].set_args & IW_PRIV_SIZE_MASK;
13087
13088                         break;
13089
13090                 case IW_PRIV_TYPE_INT:
13091                         /* Fetch args */
13092                         count = 0;
13093                         do {
13094                                 str = strsep(&ptr, delim);
13095                                 if (NULL == str)
13096                                         break;
13097                                 sscanf(str, "%i", &temp);
13098                                 ((s32 *)buffer)[count++] = (s32)temp;
13099                         } while (1);
13100                         buffer_len = count * sizeof(s32);
13101
13102                         /* Number of args to fetch */
13103                         wdata.data.length = count;
13104                         if (wdata.data.length > (priv_args[k].set_args & IW_PRIV_SIZE_MASK))
13105                                 wdata.data.length = priv_args[k].set_args & IW_PRIV_SIZE_MASK;
13106
13107                         break;
13108
13109                 case IW_PRIV_TYPE_CHAR:
13110                         if (len > 0) {
13111                                 /* Size of the string to fetch */
13112                                 wdata.data.length = len;
13113                                 if (wdata.data.length > (priv_args[k].set_args & IW_PRIV_SIZE_MASK))
13114                                         wdata.data.length = priv_args[k].set_args & IW_PRIV_SIZE_MASK;
13115
13116                                 /* Fetch string */
13117                                 _rtw_memcpy(buffer, ptr, wdata.data.length);
13118                         } else {
13119                                 wdata.data.length = 1;
13120                                 buffer[0] = '\0';
13121                         }
13122                         buffer_len = wdata.data.length;
13123                         break;
13124
13125                 default:
13126                         RTW_INFO("%s: Not yet implemented...\n", __func__);
13127                         err = -1;
13128                         goto exit;
13129                 }
13130
13131                 if ((priv_args[k].set_args & IW_PRIV_SIZE_FIXED) &&
13132                     (wdata.data.length != (priv_args[k].set_args & IW_PRIV_SIZE_MASK))) {
13133                         RTW_INFO("%s: The command %s needs exactly %d argument(s)...\n",
13134                                 __func__, cmdname, priv_args[k].set_args & IW_PRIV_SIZE_MASK);
13135                         err = -EINVAL;
13136                         goto exit;
13137                 }
13138         }   /* if args to set */
13139         else
13140                 wdata.data.length = 0L;
13141
13142         /* Those two tests are important. They define how the driver
13143         * will have to handle the data */
13144         if ((priv_args[k].set_args & IW_PRIV_SIZE_FIXED) &&
13145             ((get_priv_size(priv_args[k].set_args) + offset) <= IFNAMSIZ)) {
13146                 /* First case : all SET args fit within wrq */
13147                 if (offset)
13148                         wdata.mode = subcmd;
13149                 _rtw_memcpy(wdata.name + offset, buffer, IFNAMSIZ - offset);
13150         } else {
13151                 if ((priv_args[k].set_args == 0) &&
13152                     (priv_args[k].get_args & IW_PRIV_SIZE_FIXED) &&
13153                     (get_priv_size(priv_args[k].get_args) <= IFNAMSIZ)) {
13154                         /* Second case : no SET args, GET args fit within wrq */
13155                         if (offset)
13156                                 wdata.mode = subcmd;
13157                 } else {
13158                         /* Third case : args won't fit in wrq, or variable number of args */
13159                         if (copy_to_user(wdata.data.pointer, buffer, buffer_len)) {
13160                                 err = -EFAULT;
13161                                 goto exit;
13162                         }
13163                         wdata.data.flags = subcmd;
13164                 }
13165         }
13166
13167         rtw_mfree(input, input_len);
13168         input = NULL;
13169
13170         extra_size = 0;
13171         if (IW_IS_SET(priv_args[k].cmd)) {
13172                 /* Size of set arguments */
13173                 extra_size = get_priv_size(priv_args[k].set_args);
13174
13175                 /* Does it fits in iwr ? */
13176                 if ((priv_args[k].set_args & IW_PRIV_SIZE_FIXED) &&
13177                     ((extra_size + offset) <= IFNAMSIZ))
13178                         extra_size = 0;
13179         } else {
13180                 /* Size of get arguments */
13181                 extra_size = get_priv_size(priv_args[k].get_args);
13182
13183                 /* Does it fits in iwr ? */
13184                 if ((priv_args[k].get_args & IW_PRIV_SIZE_FIXED) &&
13185                     (extra_size <= IFNAMSIZ))
13186                         extra_size = 0;
13187         }
13188
13189         if (extra_size == 0) {
13190                 extra = (u8 *)&wdata;
13191                 rtw_mfree(buffer, 4096);
13192                 buffer = NULL;
13193         } else
13194                 extra = buffer;
13195
13196         handler = priv[priv_args[k].cmd - SIOCIWFIRSTPRIV];
13197         err = handler(dev, NULL, &wdata, extra);
13198
13199         /* If we have to get some data */
13200         if ((priv_args[k].get_args & IW_PRIV_TYPE_MASK) &&
13201             (priv_args[k].get_args & IW_PRIV_SIZE_MASK)) {
13202                 int j;
13203                 int n = 0;      /* number of args */
13204                 u8 str[20] = {0};
13205
13206                 /* Check where is the returned data */
13207                 if ((priv_args[k].get_args & IW_PRIV_SIZE_FIXED) &&
13208                     (get_priv_size(priv_args[k].get_args) <= IFNAMSIZ))
13209                         n = priv_args[k].get_args & IW_PRIV_SIZE_MASK;
13210                 else
13211                         n = wdata.data.length;
13212
13213                 output = rtw_zmalloc(4096);
13214                 if (NULL == output) {
13215                         err =  -ENOMEM;
13216                         goto exit;
13217                 }
13218
13219                 switch (priv_args[k].get_args & IW_PRIV_TYPE_MASK) {
13220                 case IW_PRIV_TYPE_BYTE:
13221                         /* Display args */
13222                         for (j = 0; j < n; j++) {
13223                                 sprintf(str, "%d  ", extra[j]);
13224                                 len = strlen(str);
13225                                 output_len = strlen(output);
13226                                 if ((output_len + len + 1) > 4096) {
13227                                         err = -E2BIG;
13228                                         goto exit;
13229                                 }
13230                                 _rtw_memcpy(output + output_len, str, len);
13231                         }
13232                         break;
13233
13234                 case IW_PRIV_TYPE_INT:
13235                         /* Display args */
13236                         for (j = 0; j < n; j++) {
13237                                 sprintf(str, "%d  ", ((__s32 *)extra)[j]);
13238                                 len = strlen(str);
13239                                 output_len = strlen(output);
13240                                 if ((output_len + len + 1) > 4096) {
13241                                         err = -E2BIG;
13242                                         goto exit;
13243                                 }
13244                                 _rtw_memcpy(output + output_len, str, len);
13245                         }
13246                         break;
13247
13248                 case IW_PRIV_TYPE_CHAR:
13249                         /* Display args */
13250                         _rtw_memcpy(output, extra, n);
13251                         break;
13252
13253                 default:
13254                         RTW_INFO("%s: Not yet implemented...\n", __func__);
13255                         err = -1;
13256                         goto exit;
13257                 }
13258
13259                 output_len = strlen(output) + 1;
13260                 wrq_data->data.length = output_len;
13261                 if (copy_to_user(wrq_data->data.pointer, output, output_len)) {
13262                         err = -EFAULT;
13263                         goto exit;
13264                 }
13265         }   /* if args to set */
13266         else
13267                 wrq_data->data.length = 0;
13268
13269 exit:
13270         if (input)
13271                 rtw_mfree(input, input_len);
13272         if (buffer)
13273                 rtw_mfree(buffer, 4096);
13274         if (output)
13275                 rtw_mfree(output, 4096);
13276
13277         return err;
13278 }
13279
13280 #ifdef CONFIG_COMPAT
13281 static int rtw_ioctl_compat_wext_private(struct net_device *dev, struct ifreq *rq)
13282 {
13283         struct compat_iw_point iwp_compat;
13284         union iwreq_data wrq_data;
13285         int err = 0;
13286         RTW_INFO("%s:...\n", __func__);
13287         if (copy_from_user(&iwp_compat, rq->ifr_ifru.ifru_data, sizeof(struct compat_iw_point)))
13288                 return -EFAULT;
13289
13290         wrq_data.data.pointer = compat_ptr(iwp_compat.pointer);
13291         wrq_data.data.length = iwp_compat.length;
13292         wrq_data.data.flags = iwp_compat.flags;
13293
13294         err = _rtw_ioctl_wext_private(dev, &wrq_data);
13295
13296         iwp_compat.pointer = ptr_to_compat(wrq_data.data.pointer);
13297         iwp_compat.length = wrq_data.data.length;
13298         iwp_compat.flags = wrq_data.data.flags;
13299         if (copy_to_user(rq->ifr_ifru.ifru_data, &iwp_compat, sizeof(struct compat_iw_point)))
13300                 return -EFAULT;
13301
13302         return err;
13303 }
13304 #endif /* CONFIG_COMPAT */
13305
13306 static int rtw_ioctl_standard_wext_private(struct net_device *dev, struct ifreq *rq)
13307 {
13308         struct iw_point *iwp;
13309         struct ifreq ifrq;
13310         union iwreq_data wrq_data;
13311         int err = 0;
13312         iwp = &wrq_data.data;
13313         RTW_INFO("%s:...\n", __func__);
13314         if (copy_from_user(iwp, rq->ifr_ifru.ifru_data, sizeof(struct iw_point)))
13315                 return -EFAULT;
13316
13317         err = _rtw_ioctl_wext_private(dev, &wrq_data);
13318
13319         if (copy_to_user(rq->ifr_ifru.ifru_data, iwp, sizeof(struct iw_point)))
13320                 return -EFAULT;
13321
13322         return err;
13323 }
13324
13325 static int rtw_ioctl_wext_private(struct net_device *dev, struct ifreq *rq)
13326 {
13327 #ifdef CONFIG_COMPAT
13328 #if (KERNEL_VERSION(4, 6, 0) > LINUX_VERSION_CODE)
13329         if (is_compat_task())
13330 #else
13331         if (in_compat_syscall())
13332 #endif
13333                 return rtw_ioctl_compat_wext_private(dev, rq);
13334         else
13335 #endif /* CONFIG_COMPAT */
13336                 return rtw_ioctl_standard_wext_private(dev, rq);
13337 }
13338
13339 int rtw_ioctl(struct net_device *dev, struct ifreq *rq, int cmd)
13340 {
13341         struct iwreq *wrq = (struct iwreq *)rq;
13342         int ret = 0;
13343
13344         switch (cmd) {
13345         case RTL_IOCTL_WPA_SUPPLICANT:
13346                 ret = wpa_supplicant_ioctl(dev, &wrq->u.data);
13347                 break;
13348 #ifdef CONFIG_AP_MODE
13349         case RTL_IOCTL_HOSTAPD:
13350                 ret = rtw_hostapd_ioctl(dev, &wrq->u.data);
13351                 break;
13352 #ifdef CONFIG_WIRELESS_EXT
13353         case SIOCSIWMODE:
13354                 ret = rtw_wx_set_mode(dev, NULL, &wrq->u, NULL);
13355                 break;
13356 #endif
13357 #endif /* CONFIG_AP_MODE */
13358         case SIOCDEVPRIVATE:
13359                 ret = rtw_ioctl_wext_private(dev, rq);
13360                 break;
13361         case (SIOCDEVPRIVATE+1):
13362                 ret = rtw_android_priv_cmd(dev, rq, cmd);
13363                 break;
13364         default:
13365                 ret = -EOPNOTSUPP;
13366                 break;
13367         }
13368
13369         return ret;
13370 }