1 /******************************************************************************
2  *
3  * Copyright(c) 2007 - 2011 Realtek Corporation. All rights reserved.
4  *
5  * This program is free software; you can redistribute it and/or modify it
6  * under the terms of version 2 of the GNU General Public License as
7  * published by the Free Software Foundation.
8  *
9  * This program is distributed in the hope that it will be useful, but WITHOUT
10  * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
11  * FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for
12  * more details.
13  *
14  * You should have received a copy of the GNU General Public License along with
15  * this program; if not, write to the Free Software Foundation, Inc.,
16  * 51 Franklin Street, Fifth Floor, Boston, MA 02110, USA
17  *
18  *
19  ******************************************************************************/
20 #define _RTL8188E_CMD_C_
21 
22 #include <osdep_service.h>
23 #include <drv_types.h>
24 #include <recv_osdep.h>
25 #include <mlme_osdep.h>
26 #include <rtw_ioctl_set.h>
27 
28 #include <rtl8188e_hal.h>
29 
30 #define RTL88E_MAX_H2C_BOX_NUMS		4
31 #define RTL88E_MAX_CMD_LEN		7
32 #define RTL88E_MESSAGE_BOX_SIZE		4
33 #define RTL88E_EX_MESSAGE_BOX_SIZE	4
34 
_is_fw_read_cmd_down(struct adapter * adapt,u8 msgbox_num)35 static u8 _is_fw_read_cmd_down(struct adapter *adapt, u8 msgbox_num)
36 {
37 	u8 read_down = false;
38 	int	retry_cnts = 100;
39 
40 	u8 valid;
41 
42 	do {
43 		valid = usb_read8(adapt, REG_HMETFR) & BIT(msgbox_num);
44 		if (0 == valid)
45 			read_down = true;
46 	} while ((!read_down) && (retry_cnts--));
47 
48 	return read_down;
49 }
50 
51 /*****************************************
52 * H2C Msg format :
53 * 0x1DF - 0x1D0
54 *| 31 - 8	| 7-5	 4 - 0	|
55 *| h2c_msg	|Class_ID CMD_ID	|
56 *
57 * Extend 0x1FF - 0x1F0
58 *|31 - 0	  |
59 *|ext_msg|
60 ******************************************/
FillH2CCmd_88E(struct adapter * adapt,u8 ElementID,u32 CmdLen,u8 * pCmdBuffer)61 static s32 FillH2CCmd_88E(struct adapter *adapt, u8 ElementID, u32 CmdLen, u8 *pCmdBuffer)
62 {
63 	u8 bcmd_down = false;
64 	s32 retry_cnts = 100;
65 	u8 h2c_box_num;
66 	u32 msgbox_addr;
67 	u32 msgbox_ex_addr;
68 	struct hal_data_8188e *haldata = GET_HAL_DATA(adapt);
69 	u8 cmd_idx, ext_cmd_len;
70 	u32 h2c_cmd = 0;
71 	u32 h2c_cmd_ex = 0;
72 	s32 ret = _FAIL;
73 
74 
75 	if (!adapt->bFWReady) {
76 		DBG_88E("FillH2CCmd_88E(): return H2C cmd because fw is not ready\n");
77 		return ret;
78 	}
79 
80 	if (!pCmdBuffer)
81 		goto exit;
82 	if (CmdLen > RTL88E_MAX_CMD_LEN)
83 		goto exit;
84 	if (adapt->bSurpriseRemoved)
85 		goto exit;
86 
87 	/* pay attention to if  race condition happened in  H2C cmd setting. */
88 	do {
89 		h2c_box_num = haldata->LastHMEBoxNum;
90 
91 		if (!_is_fw_read_cmd_down(adapt, h2c_box_num)) {
92 			DBG_88E(" fw read cmd failed...\n");
93 			goto exit;
94 		}
95 
96 		*(u8 *)(&h2c_cmd) = ElementID;
97 
98 		if (CmdLen <= 3) {
99 			memcpy((u8 *)(&h2c_cmd)+1, pCmdBuffer, CmdLen);
100 		} else {
101 			memcpy((u8 *)(&h2c_cmd)+1, pCmdBuffer, 3);
102 			ext_cmd_len = CmdLen-3;
103 			memcpy((u8 *)(&h2c_cmd_ex), pCmdBuffer+3, ext_cmd_len);
104 
105 			/* Write Ext command */
106 			msgbox_ex_addr = REG_HMEBOX_EXT_0 + (h2c_box_num * RTL88E_EX_MESSAGE_BOX_SIZE);
107 			for (cmd_idx = 0; cmd_idx < ext_cmd_len; cmd_idx++) {
108 				usb_write8(adapt, msgbox_ex_addr+cmd_idx, *((u8 *)(&h2c_cmd_ex)+cmd_idx));
109 			}
110 		}
111 		/*  Write command */
112 		msgbox_addr = REG_HMEBOX_0 + (h2c_box_num * RTL88E_MESSAGE_BOX_SIZE);
113 		for (cmd_idx = 0; cmd_idx < RTL88E_MESSAGE_BOX_SIZE; cmd_idx++) {
114 			usb_write8(adapt, msgbox_addr+cmd_idx, *((u8 *)(&h2c_cmd)+cmd_idx));
115 		}
116 		bcmd_down = true;
117 
118 		haldata->LastHMEBoxNum = (h2c_box_num+1) % RTL88E_MAX_H2C_BOX_NUMS;
119 
120 	} while ((!bcmd_down) && (retry_cnts--));
121 
122 	ret = _SUCCESS;
123 
124 exit:
125 
126 
127 	return ret;
128 }
129 
rtl8188e_set_raid_cmd(struct adapter * adapt,u32 mask)130 u8 rtl8188e_set_raid_cmd(struct adapter *adapt, u32 mask)
131 {
132 	u8 buf[3];
133 	u8 res = _SUCCESS;
134 	struct hal_data_8188e *haldata = GET_HAL_DATA(adapt);
135 
136 	if (haldata->fw_ractrl) {
137 
138 		memset(buf, 0, 3);
139 		put_unaligned_le32(mask, buf);
140 
141 		FillH2CCmd_88E(adapt, H2C_DM_MACID_CFG, 3, buf);
142 	} else {
143 		DBG_88E("==>%s fw dont support RA\n", __func__);
144 		res = _FAIL;
145 	}
146 
147 
148 	return res;
149 }
150 
151 /* bitmap[0:27] = tx_rate_bitmap */
152 /* bitmap[28:31]= Rate Adaptive id */
153 /* arg[0:4] = macid */
154 /* arg[5] = Short GI */
rtl8188e_Add_RateATid(struct adapter * pAdapter,u32 bitmap,u8 arg,u8 rssi_level)155 void rtl8188e_Add_RateATid(struct adapter *pAdapter, u32 bitmap, u8 arg, u8 rssi_level)
156 {
157 	struct hal_data_8188e *haldata = GET_HAL_DATA(pAdapter);
158 
159 	u8 macid, init_rate, raid, shortGIrate = false;
160 
161 	macid = arg&0x1f;
162 
163 	raid = (bitmap>>28) & 0x0f;
164 	bitmap &= 0x0fffffff;
165 
166 	if (rssi_level != DM_RATR_STA_INIT)
167 		bitmap = ODM_Get_Rate_Bitmap(&haldata->odmpriv, macid, bitmap, rssi_level);
168 
169 	bitmap |= ((raid<<28)&0xf0000000);
170 
171 	init_rate = get_highest_rate_idx(bitmap&0x0fffffff)&0x3f;
172 
173 	shortGIrate = (arg&BIT(5)) ? true : false;
174 
175 	if (shortGIrate)
176 		init_rate |= BIT(6);
177 
178 	raid = (bitmap>>28) & 0x0f;
179 
180 	bitmap &= 0x0fffffff;
181 
182 	DBG_88E("%s=> mac_id:%d, raid:%d, ra_bitmap=0x%x, shortGIrate=0x%02x\n",
183 		__func__, macid, raid, bitmap, shortGIrate);
184 
185 	ODM_RA_UpdateRateInfo_8188E(&(haldata->odmpriv), macid, raid, bitmap, shortGIrate);
186 }
187 
rtl8188e_set_FwPwrMode_cmd(struct adapter * adapt,u8 Mode)188 void rtl8188e_set_FwPwrMode_cmd(struct adapter *adapt, u8 Mode)
189 {
190 	struct setpwrmode_parm H2CSetPwrMode;
191 	struct pwrctrl_priv *pwrpriv = &adapt->pwrctrlpriv;
192 	u8 RLBM = 0; /*  0:Min, 1:Max, 2:User define */
193 
194 	DBG_88E("%s: Mode=%d SmartPS=%d UAPSD=%d\n", __func__,
195 		Mode, pwrpriv->smart_ps, adapt->registrypriv.uapsd_enable);
196 
197 	switch (Mode) {
198 	case PS_MODE_ACTIVE:
199 		H2CSetPwrMode.Mode = 0;
200 		break;
201 	case PS_MODE_MIN:
202 		H2CSetPwrMode.Mode = 1;
203 		break;
204 	case PS_MODE_MAX:
205 		RLBM = 1;
206 		H2CSetPwrMode.Mode = 1;
207 		break;
208 	case PS_MODE_DTIM:
209 		RLBM = 2;
210 		H2CSetPwrMode.Mode = 1;
211 		break;
212 	case PS_MODE_UAPSD_WMM:
213 		H2CSetPwrMode.Mode = 2;
214 		break;
215 	default:
216 		H2CSetPwrMode.Mode = 0;
217 		break;
218 	}
219 
220 	H2CSetPwrMode.SmartPS_RLBM = (((pwrpriv->smart_ps<<4)&0xf0) | (RLBM & 0x0f));
221 
222 	H2CSetPwrMode.AwakeInterval = 1;
223 
224 	H2CSetPwrMode.bAllQueueUAPSD = adapt->registrypriv.uapsd_enable;
225 
226 	if (Mode > 0)
227 		H2CSetPwrMode.PwrState = 0x00;/*  AllON(0x0C), RFON(0x04), RFOFF(0x00) */
228 	else
229 		H2CSetPwrMode.PwrState = 0x0C;/*  AllON(0x0C), RFON(0x04), RFOFF(0x00) */
230 
231 	FillH2CCmd_88E(adapt, H2C_PS_PWR_MODE, sizeof(H2CSetPwrMode), (u8 *)&H2CSetPwrMode);
232 
233 }
234 
rtl8188e_set_FwMediaStatus_cmd(struct adapter * adapt,__le16 mstatus_rpt)235 void rtl8188e_set_FwMediaStatus_cmd(struct adapter *adapt, __le16 mstatus_rpt)
236 {
237 	u8 opmode, macid;
238 	u16 mst_rpt = le16_to_cpu(mstatus_rpt);
239 	opmode = (u8)mst_rpt;
240 	macid = (u8)(mst_rpt >> 8);
241 
242 	DBG_88E("### %s: MStatus=%x MACID=%d\n", __func__, opmode, macid);
243 	FillH2CCmd_88E(adapt, H2C_COM_MEDIA_STATUS_RPT, sizeof(mst_rpt), (u8 *)&mst_rpt);
244 }
245 
ConstructBeacon(struct adapter * adapt,u8 * pframe,u32 * pLength)246 static void ConstructBeacon(struct adapter *adapt, u8 *pframe, u32 *pLength)
247 {
248 	struct rtw_ieee80211_hdr	*pwlanhdr;
249 	__le16 *fctrl;
250 	u32 rate_len, pktlen;
251 	struct mlme_ext_priv *pmlmeext = &(adapt->mlmeextpriv);
252 	struct mlme_ext_info	*pmlmeinfo = &(pmlmeext->mlmext_info);
253 	struct wlan_bssid_ex		*cur_network = &(pmlmeinfo->network);
254 	u8 bc_addr[] = {0xff, 0xff, 0xff, 0xff, 0xff, 0xff};
255 
256 	pwlanhdr = (struct rtw_ieee80211_hdr *)pframe;
257 
258 	fctrl = &(pwlanhdr->frame_ctl);
259 	*(fctrl) = 0;
260 
261 	memcpy(pwlanhdr->addr1, bc_addr, ETH_ALEN);
262 	memcpy(pwlanhdr->addr2, myid(&(adapt->eeprompriv)), ETH_ALEN);
263 	memcpy(pwlanhdr->addr3, cur_network->MacAddress, ETH_ALEN);
264 
265 	SetSeqNum(pwlanhdr, 0/*pmlmeext->mgnt_seq*/);
266 	SetFrameSubType(pframe, WIFI_BEACON);
267 
268 	pframe += sizeof(struct rtw_ieee80211_hdr_3addr);
269 	pktlen = sizeof(struct rtw_ieee80211_hdr_3addr);
270 
271 	/* timestamp will be inserted by hardware */
272 	pframe += 8;
273 	pktlen += 8;
274 
275 	/*  beacon interval: 2 bytes */
276 	memcpy(pframe, (unsigned char *)(rtw_get_beacon_interval_from_ie(cur_network->IEs)), 2);
277 
278 	pframe += 2;
279 	pktlen += 2;
280 
281 	/*  capability info: 2 bytes */
282 	memcpy(pframe, (unsigned char *)(rtw_get_capability_from_ie(cur_network->IEs)), 2);
283 
284 	pframe += 2;
285 	pktlen += 2;
286 
287 	if ((pmlmeinfo->state&0x03) == WIFI_FW_AP_STATE) {
288 		pktlen += cur_network->IELength - sizeof(struct ndis_802_11_fixed_ie);
289 		memcpy(pframe, cur_network->IEs+sizeof(struct ndis_802_11_fixed_ie), pktlen);
290 
291 		goto _ConstructBeacon;
292 	}
293 
294 	/* below for ad-hoc mode */
295 
296 	/*  SSID */
297 	pframe = rtw_set_ie(pframe, _SSID_IE_, cur_network->Ssid.SsidLength, cur_network->Ssid.Ssid, &pktlen);
298 
299 	/*  supported rates... */
300 	rate_len = rtw_get_rateset_len(cur_network->SupportedRates);
301 	pframe = rtw_set_ie(pframe, _SUPPORTEDRATES_IE_, ((rate_len > 8) ? 8 : rate_len), cur_network->SupportedRates, &pktlen);
302 
303 	/*  DS parameter set */
304 	pframe = rtw_set_ie(pframe, _DSSET_IE_, 1, (unsigned char *)&(cur_network->Configuration.DSConfig), &pktlen);
305 
306 	if ((pmlmeinfo->state&0x03) == WIFI_FW_ADHOC_STATE) {
307 		u32 ATIMWindow;
308 		/*  IBSS Parameter Set... */
309 		ATIMWindow = 0;
310 		pframe = rtw_set_ie(pframe, _IBSS_PARA_IE_, 2, (unsigned char *)(&ATIMWindow), &pktlen);
311 	}
312 
313 	/* todo: ERP IE */
314 
315 	/*  EXTERNDED SUPPORTED RATE */
316 	if (rate_len > 8)
317 		pframe = rtw_set_ie(pframe, _EXT_SUPPORTEDRATES_IE_, (rate_len - 8), (cur_network->SupportedRates + 8), &pktlen);
318 
319 	/* todo:HT for adhoc */
320 
321 _ConstructBeacon:
322 
323 	if ((pktlen + TXDESC_SIZE) > 512) {
324 		DBG_88E("beacon frame too large\n");
325 		return;
326 	}
327 
328 	*pLength = pktlen;
329 }
330 
ConstructPSPoll(struct adapter * adapt,u8 * pframe,u32 * pLength)331 static void ConstructPSPoll(struct adapter *adapt, u8 *pframe, u32 *pLength)
332 {
333 	struct rtw_ieee80211_hdr	*pwlanhdr;
334 	struct mlme_ext_priv *pmlmeext = &(adapt->mlmeextpriv);
335 	struct mlme_ext_info	*pmlmeinfo = &(pmlmeext->mlmext_info);
336 	__le16 *fctrl;
337 	struct wlan_bssid_ex *pnetwork = &(pmlmeinfo->network);
338 
339 	pwlanhdr = (struct rtw_ieee80211_hdr *)pframe;
340 
341 	/*  Frame control. */
342 	fctrl = &(pwlanhdr->frame_ctl);
343 	*(fctrl) = 0;
344 	SetPwrMgt(fctrl);
345 	SetFrameSubType(pframe, WIFI_PSPOLL);
346 
347 	/*  AID. */
348 	SetDuration(pframe, (pmlmeinfo->aid | 0xc000));
349 
350 	/*  BSSID. */
351 	memcpy(pwlanhdr->addr1, pnetwork->MacAddress, ETH_ALEN);
352 
353 	/*  TA. */
354 	memcpy(pwlanhdr->addr2, myid(&(adapt->eeprompriv)), ETH_ALEN);
355 
356 	*pLength = 16;
357 }
358 
ConstructNullFunctionData(struct adapter * adapt,u8 * pframe,u32 * pLength,u8 * StaAddr,u8 bQoS,u8 AC,u8 bEosp,u8 bForcePowerSave)359 static void ConstructNullFunctionData(struct adapter *adapt, u8 *pframe,
360 	u32 *pLength,
361 	u8 *StaAddr,
362 	u8 bQoS,
363 	u8 AC,
364 	u8 bEosp,
365 	u8 bForcePowerSave)
366 {
367 	struct rtw_ieee80211_hdr	*pwlanhdr;
368 	__le16 *fctrl;
369 	u32 pktlen;
370 	struct mlme_priv *pmlmepriv = &adapt->mlmepriv;
371 	struct wlan_network		*cur_network = &pmlmepriv->cur_network;
372 	struct mlme_ext_priv *pmlmeext = &(adapt->mlmeextpriv);
373 	struct mlme_ext_info	*pmlmeinfo = &(pmlmeext->mlmext_info);
374 	struct wlan_bssid_ex *pnetwork = &(pmlmeinfo->network);
375 
376 	pwlanhdr = (struct rtw_ieee80211_hdr *)pframe;
377 
378 	fctrl = &pwlanhdr->frame_ctl;
379 	*(fctrl) = 0;
380 	if (bForcePowerSave)
381 		SetPwrMgt(fctrl);
382 
383 	switch (cur_network->network.InfrastructureMode) {
384 	case Ndis802_11Infrastructure:
385 		SetToDs(fctrl);
386 		memcpy(pwlanhdr->addr1, pnetwork->MacAddress, ETH_ALEN);
387 		memcpy(pwlanhdr->addr2, myid(&(adapt->eeprompriv)), ETH_ALEN);
388 		memcpy(pwlanhdr->addr3, StaAddr, ETH_ALEN);
389 		break;
390 	case Ndis802_11APMode:
391 		SetFrDs(fctrl);
392 		memcpy(pwlanhdr->addr1, StaAddr, ETH_ALEN);
393 		memcpy(pwlanhdr->addr2, pnetwork->MacAddress, ETH_ALEN);
394 		memcpy(pwlanhdr->addr3, myid(&(adapt->eeprompriv)), ETH_ALEN);
395 		break;
396 	case Ndis802_11IBSS:
397 	default:
398 		memcpy(pwlanhdr->addr1, StaAddr, ETH_ALEN);
399 		memcpy(pwlanhdr->addr2, myid(&(adapt->eeprompriv)), ETH_ALEN);
400 		memcpy(pwlanhdr->addr3, pnetwork->MacAddress, ETH_ALEN);
401 		break;
402 	}
403 
404 	SetSeqNum(pwlanhdr, 0);
405 
406 	if (bQoS) {
407 		struct rtw_ieee80211_hdr_3addr_qos *pwlanqoshdr;
408 
409 		SetFrameSubType(pframe, WIFI_QOS_DATA_NULL);
410 
411 		pwlanqoshdr = (struct rtw_ieee80211_hdr_3addr_qos *)pframe;
412 		SetPriority(&pwlanqoshdr->qc, AC);
413 		SetEOSP(&pwlanqoshdr->qc, bEosp);
414 
415 		pktlen = sizeof(struct rtw_ieee80211_hdr_3addr_qos);
416 	} else {
417 		SetFrameSubType(pframe, WIFI_DATA_NULL);
418 
419 		pktlen = sizeof(struct rtw_ieee80211_hdr_3addr);
420 	}
421 
422 	*pLength = pktlen;
423 }
424 
ConstructProbeRsp(struct adapter * adapt,u8 * pframe,u32 * pLength,u8 * StaAddr,bool bHideSSID)425 static void ConstructProbeRsp(struct adapter *adapt, u8 *pframe, u32 *pLength, u8 *StaAddr, bool bHideSSID)
426 {
427 	struct rtw_ieee80211_hdr	*pwlanhdr;
428 	__le16 *fctrl;
429 	u8 *mac, *bssid;
430 	u32 pktlen;
431 	struct mlme_ext_priv *pmlmeext = &(adapt->mlmeextpriv);
432 	struct mlme_ext_info	*pmlmeinfo = &(pmlmeext->mlmext_info);
433 	struct wlan_bssid_ex	*cur_network = &(pmlmeinfo->network);
434 
435 	pwlanhdr = (struct rtw_ieee80211_hdr *)pframe;
436 
437 	mac = myid(&(adapt->eeprompriv));
438 	bssid = cur_network->MacAddress;
439 
440 	fctrl = &(pwlanhdr->frame_ctl);
441 	*(fctrl) = 0;
442 	memcpy(pwlanhdr->addr1, StaAddr, ETH_ALEN);
443 	memcpy(pwlanhdr->addr2, mac, ETH_ALEN);
444 	memcpy(pwlanhdr->addr3, bssid, ETH_ALEN);
445 
446 	SetSeqNum(pwlanhdr, 0);
447 	SetFrameSubType(fctrl, WIFI_PROBERSP);
448 
449 	pktlen = sizeof(struct rtw_ieee80211_hdr_3addr);
450 	pframe += pktlen;
451 
452 	if (cur_network->IELength > MAX_IE_SZ)
453 		return;
454 
455 	memcpy(pframe, cur_network->IEs, cur_network->IELength);
456 	pframe += cur_network->IELength;
457 	pktlen += cur_network->IELength;
458 
459 	*pLength = pktlen;
460 }
461 
462 /*  */
463 /*  Description: Fill the reserved packets that FW will use to RSVD page. */
464 /*			Now we just send 4 types packet to rsvd page. */
465 /*			(1)Beacon, (2)Ps-poll, (3)Null data, (4)ProbeRsp. */
466 /*	Input: */
467 /*	    bDLFinished - false: At the first time we will send all the packets as a large packet to Hw, */
468 /*						so we need to set the packet length to total length. */
469 /*			      true: At the second time, we should send the first packet (default:beacon) */
470 /*						to Hw again and set the length in descriptor to the real beacon length. */
471 /*  2009.10.15 by tynli. */
SetFwRsvdPagePkt(struct adapter * adapt,bool bDLFinished)472 static void SetFwRsvdPagePkt(struct adapter *adapt, bool bDLFinished)
473 {
474 	struct hal_data_8188e *haldata;
475 	struct xmit_frame	*pmgntframe;
476 	struct pkt_attrib	*pattrib;
477 	struct xmit_priv *pxmitpriv;
478 	struct mlme_ext_priv *pmlmeext;
479 	struct mlme_ext_info	*pmlmeinfo;
480 	u32 BeaconLength = 0, ProbeRspLength = 0, PSPollLength;
481 	u32 NullDataLength, QosNullLength;
482 	u8 *ReservedPagePacket;
483 	u8 PageNum, PageNeed, TxDescLen;
484 	u16 BufIndex;
485 	u32 TotalPacketLen;
486 	struct rsvdpage_loc RsvdPageLoc;
487 	struct wlan_bssid_ex *pnetwork;
488 
489 	DBG_88E("%s\n", __func__);
490 	ReservedPagePacket = kzalloc(1000, GFP_KERNEL);
491 	if (ReservedPagePacket == NULL) {
492 		DBG_88E("%s: alloc ReservedPagePacket fail!\n", __func__);
493 		return;
494 	}
495 
496 	haldata = GET_HAL_DATA(adapt);
497 	pxmitpriv = &adapt->xmitpriv;
498 	pmlmeext = &adapt->mlmeextpriv;
499 	pmlmeinfo = &pmlmeext->mlmext_info;
500 	pnetwork = &(pmlmeinfo->network);
501 
502 	TxDescLen = TXDESC_SIZE;
503 	PageNum = 0;
504 
505 	/* 3 (1) beacon * 2 pages */
506 	BufIndex = TXDESC_OFFSET;
507 	ConstructBeacon(adapt, &ReservedPagePacket[BufIndex], &BeaconLength);
508 
509 	/*  When we count the first page size, we need to reserve description size for the RSVD */
510 	/*  packet, it will be filled in front of the packet in TXPKTBUF. */
511 	PageNeed = (u8)PageNum_128(TxDescLen + BeaconLength);
512 	/*  To reserved 2 pages for beacon buffer. 2010.06.24. */
513 	if (PageNeed == 1)
514 		PageNeed += 1;
515 	PageNum += PageNeed;
516 	haldata->FwRsvdPageStartOffset = PageNum;
517 
518 	BufIndex += PageNeed*128;
519 
520 	/* 3 (2) ps-poll *1 page */
521 	RsvdPageLoc.LocPsPoll = PageNum;
522 	ConstructPSPoll(adapt, &ReservedPagePacket[BufIndex], &PSPollLength);
523 	rtl8188e_fill_fake_txdesc(adapt, &ReservedPagePacket[BufIndex-TxDescLen], PSPollLength, true, false);
524 
525 	PageNeed = (u8)PageNum_128(TxDescLen + PSPollLength);
526 	PageNum += PageNeed;
527 
528 	BufIndex += PageNeed*128;
529 
530 	/* 3 (3) null data * 1 page */
531 	RsvdPageLoc.LocNullData = PageNum;
532 	ConstructNullFunctionData(adapt, &ReservedPagePacket[BufIndex], &NullDataLength, pnetwork->MacAddress, false, 0, 0, false);
533 	rtl8188e_fill_fake_txdesc(adapt, &ReservedPagePacket[BufIndex-TxDescLen], NullDataLength, false, false);
534 
535 	PageNeed = (u8)PageNum_128(TxDescLen + NullDataLength);
536 	PageNum += PageNeed;
537 
538 	BufIndex += PageNeed*128;
539 
540 	/* 3 (4) probe response * 1page */
541 	RsvdPageLoc.LocProbeRsp = PageNum;
542 	ConstructProbeRsp(adapt, &ReservedPagePacket[BufIndex], &ProbeRspLength, pnetwork->MacAddress, false);
543 	rtl8188e_fill_fake_txdesc(adapt, &ReservedPagePacket[BufIndex-TxDescLen], ProbeRspLength, false, false);
544 
545 	PageNeed = (u8)PageNum_128(TxDescLen + ProbeRspLength);
546 	PageNum += PageNeed;
547 
548 	BufIndex += PageNeed*128;
549 
550 	/* 3 (5) Qos null data */
551 	RsvdPageLoc.LocQosNull = PageNum;
552 	ConstructNullFunctionData(adapt, &ReservedPagePacket[BufIndex],
553 				  &QosNullLength, pnetwork->MacAddress, true, 0, 0, false);
554 	rtl8188e_fill_fake_txdesc(adapt, &ReservedPagePacket[BufIndex-TxDescLen], QosNullLength, false, false);
555 
556 	PageNeed = (u8)PageNum_128(TxDescLen + QosNullLength);
557 	PageNum += PageNeed;
558 
559 	TotalPacketLen = BufIndex + QosNullLength;
560 	pmgntframe = alloc_mgtxmitframe(pxmitpriv);
561 	if (pmgntframe == NULL)
562 		goto exit;
563 
564 	/*  update attribute */
565 	pattrib = &pmgntframe->attrib;
566 	update_mgntframe_attrib(adapt, pattrib);
567 	pattrib->qsel = 0x10;
568 	pattrib->last_txcmdsz = TotalPacketLen - TXDESC_OFFSET;
569 	pattrib->pktlen = pattrib->last_txcmdsz;
570 	memcpy(pmgntframe->buf_addr, ReservedPagePacket, TotalPacketLen);
571 
572 	rtw_hal_mgnt_xmit(adapt, pmgntframe);
573 
574 	DBG_88E("%s: Set RSVD page location to Fw\n", __func__);
575 	FillH2CCmd_88E(adapt, H2C_COM_RSVD_PAGE, sizeof(RsvdPageLoc), (u8 *)&RsvdPageLoc);
576 
577 exit:
578 	kfree(ReservedPagePacket);
579 }
580 
rtl8188e_set_FwJoinBssReport_cmd(struct adapter * adapt,u8 mstatus)581 void rtl8188e_set_FwJoinBssReport_cmd(struct adapter *adapt, u8 mstatus)
582 {
583 	struct hal_data_8188e *haldata = GET_HAL_DATA(adapt);
584 	struct mlme_ext_priv *pmlmeext = &(adapt->mlmeextpriv);
585 	struct mlme_ext_info	*pmlmeinfo = &(pmlmeext->mlmext_info);
586 	bool	bSendBeacon = false;
587 	bool	bcn_valid = false;
588 	u8 DLBcnCount = 0;
589 	u32 poll = 0;
590 
591 
592 	DBG_88E("%s mstatus(%x)\n", __func__, mstatus);
593 
594 	if (mstatus == 1) {
595 		/*  We should set AID, correct TSF, HW seq enable before set JoinBssReport to Fw in 88/92C. */
596 		/*  Suggested by filen. Added by tynli. */
597 		usb_write16(adapt, REG_BCN_PSR_RPT, (0xC000|pmlmeinfo->aid));
598 		/*  Do not set TSF again here or vWiFi beacon DMA INT will not work. */
599 
600 		/* Set REG_CR bit 8. DMA beacon by SW. */
601 		haldata->RegCR_1 |= BIT0;
602 		usb_write8(adapt,  REG_CR+1, haldata->RegCR_1);
603 
604 		/*  Disable Hw protection for a time which revserd for Hw sending beacon. */
605 		/*  Fix download reserved page packet fail that access collision with the protection time. */
606 		/*  2010.05.11. Added by tynli. */
607 		usb_write8(adapt, REG_BCN_CTRL, usb_read8(adapt, REG_BCN_CTRL)&(~BIT(3)));
608 		usb_write8(adapt, REG_BCN_CTRL, usb_read8(adapt, REG_BCN_CTRL)|BIT(4));
609 
610 		if (haldata->RegFwHwTxQCtrl&BIT6) {
611 			DBG_88E("HalDownloadRSVDPage(): There is an Adapter is sending beacon.\n");
612 			bSendBeacon = true;
613 		}
614 
615 		/*  Set FWHW_TXQ_CTRL 0x422[6]=0 to tell Hw the packet is not a real beacon frame. */
616 		usb_write8(adapt, REG_FWHW_TXQ_CTRL+2, (haldata->RegFwHwTxQCtrl&(~BIT6)));
617 		haldata->RegFwHwTxQCtrl &= (~BIT6);
618 
619 		/*  Clear beacon valid check bit. */
620 		rtw_hal_set_hwreg(adapt, HW_VAR_BCN_VALID, NULL);
621 		DLBcnCount = 0;
622 		poll = 0;
623 		do {
624 			/*  download rsvd page. */
625 			SetFwRsvdPagePkt(adapt, false);
626 			DLBcnCount++;
627 			do {
628 				yield();
629 				/* mdelay(10); */
630 				/*  check rsvd page download OK. */
631 				rtw_hal_get_hwreg(adapt, HW_VAR_BCN_VALID, (u8 *)(&bcn_valid));
632 				poll++;
633 			} while (!bcn_valid && (poll%10) != 0 && !adapt->bSurpriseRemoved && !adapt->bDriverStopped);
634 		} while (!bcn_valid && DLBcnCount <= 100 && !adapt->bSurpriseRemoved && !adapt->bDriverStopped);
635 
636 		if (adapt->bSurpriseRemoved || adapt->bDriverStopped)
637 			;
638 		else if (!bcn_valid)
639 			DBG_88E("%s: 1 Download RSVD page failed! DLBcnCount:%u, poll:%u\n", __func__, DLBcnCount, poll);
640 		else
641 			DBG_88E("%s: 1 Download RSVD success! DLBcnCount:%u, poll:%u\n", __func__, DLBcnCount, poll);
642 		/*  */
643 		/*  We just can send the reserved page twice during the time that Tx thread is stopped (e.g. pnpsetpower) */
644 		/*  because we need to free the Tx BCN Desc which is used by the first reserved page packet. */
645 		/*  At run time, we cannot get the Tx Desc until it is released in TxHandleInterrupt() so we will return */
646 		/*  the beacon TCB in the following code. 2011.11.23. by tynli. */
647 		/*  */
648 
649 		/*  Enable Bcn */
650 		usb_write8(adapt, REG_BCN_CTRL, usb_read8(adapt, REG_BCN_CTRL)|BIT(3));
651 		usb_write8(adapt, REG_BCN_CTRL, usb_read8(adapt, REG_BCN_CTRL)&(~BIT(4)));
652 
653 		/*  To make sure that if there exists an adapter which would like to send beacon. */
654 		/*  If exists, the origianl value of 0x422[6] will be 1, we should check this to */
655 		/*  prevent from setting 0x422[6] to 0 after download reserved page, or it will cause */
656 		/*  the beacon cannot be sent by HW. */
657 		/*  2010.06.23. Added by tynli. */
658 		if (bSendBeacon) {
659 			usb_write8(adapt, REG_FWHW_TXQ_CTRL+2, (haldata->RegFwHwTxQCtrl|BIT6));
660 			haldata->RegFwHwTxQCtrl |= BIT6;
661 		}
662 
663 		/*  Update RSVD page location H2C to Fw. */
664 		if (bcn_valid) {
665 			rtw_hal_set_hwreg(adapt, HW_VAR_BCN_VALID, NULL);
666 			DBG_88E("Set RSVD page location to Fw.\n");
667 		}
668 
669 		/*  Do not enable HW DMA BCN or it will cause Pcie interface hang by timing issue. 2011.11.24. by tynli. */
670 		/*  Clear CR[8] or beacon packet will not be send to TxBuf anymore. */
671 		haldata->RegCR_1 &= (~BIT0);
672 		usb_write8(adapt,  REG_CR+1, haldata->RegCR_1);
673 	}
674 }
675