1 /******************************************************************************
2  *
3  * Copyright(c) 2007 - 2011 Realtek Corporation. All rights reserved.
4  *
5  * This program is free software; you can redistribute it and/or modify it
6  * under the terms of version 2 of the GNU General Public License as
7  * published by the Free Software Foundation.
8  *
9  * This program is distributed in the hope that it will be useful, but WITHOUT
10  * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
11  * FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for
12  * more details.
13  *
14  * You should have received a copy of the GNU General Public License along with
15  * this program; if not, write to the Free Software Foundation, Inc.,
16  * 51 Franklin Street, Fifth Floor, Boston, MA 02110, USA
17  *
18  *
19  ******************************************************************************/
20 #define _RTW_MLME_C_
21 
22 
23 #include <osdep_service.h>
24 #include <drv_types.h>
25 #include <recv_osdep.h>
26 #include <xmit_osdep.h>
27 #include <hal_intf.h>
28 #include <mlme_osdep.h>
29 #include <sta_info.h>
30 #include <wifi.h>
31 #include <wlan_bssdef.h>
32 #include <rtw_ioctl_set.h>
33 #include <linux/vmalloc.h>
34 
35 extern unsigned char	MCS_rate_2R[16];
36 extern unsigned char	MCS_rate_1R[16];
37 
rtw_init_mlme_priv(struct adapter * padapter)38 int rtw_init_mlme_priv(struct adapter *padapter)
39 {
40 	int	i;
41 	u8	*pbuf;
42 	struct wlan_network	*pnetwork;
43 	struct mlme_priv		*pmlmepriv = &padapter->mlmepriv;
44 	int	res = _SUCCESS;
45 
46 	/*  We don't need to memset padapter->XXX to zero, because adapter is allocated by vzalloc(). */
47 
48 	pmlmepriv->nic_hdl = (u8 *)padapter;
49 
50 	pmlmepriv->pscanned = NULL;
51 	pmlmepriv->fw_state = 0;
52 	pmlmepriv->cur_network.network.InfrastructureMode = Ndis802_11AutoUnknown;
53 	pmlmepriv->scan_mode = SCAN_ACTIVE;/*  1: active, 0: pasive. Maybe someday we should rename this varable to "active_mode" (Jeff) */
54 
55 	spin_lock_init(&(pmlmepriv->lock));
56 	_rtw_init_queue(&(pmlmepriv->free_bss_pool));
57 	_rtw_init_queue(&(pmlmepriv->scanned_queue));
58 
59 	set_scanned_network_val(pmlmepriv, 0);
60 
61 	memset(&pmlmepriv->assoc_ssid, 0, sizeof(struct ndis_802_11_ssid));
62 
63 	pbuf = vzalloc(MAX_BSS_CNT * (sizeof(struct wlan_network)));
64 
65 	if (pbuf == NULL) {
66 		res = _FAIL;
67 		goto exit;
68 	}
69 	pmlmepriv->free_bss_buf = pbuf;
70 
71 	pnetwork = (struct wlan_network *)pbuf;
72 
73 	for (i = 0; i < MAX_BSS_CNT; i++) {
74 		INIT_LIST_HEAD(&(pnetwork->list));
75 
76 		list_add_tail(&(pnetwork->list), &(pmlmepriv->free_bss_pool.queue));
77 
78 		pnetwork++;
79 	}
80 
81 	/* allocate DMA-able/Non-Page memory for cmd_buf and rsp_buf */
82 
83 	rtw_clear_scan_deny(padapter);
84 
85 	rtw_init_mlme_timer(padapter);
86 
87 exit:
88 	return res;
89 }
90 
91 #if defined(CONFIG_88EU_AP_MODE)
rtw_free_mlme_ie_data(u8 ** ppie,u32 * plen)92 static void rtw_free_mlme_ie_data(u8 **ppie, u32 *plen)
93 {
94 	kfree(*ppie);
95 	*plen = 0;
96 	*ppie = NULL;
97 }
98 
rtw_free_mlme_priv_ie_data(struct mlme_priv * pmlmepriv)99 void rtw_free_mlme_priv_ie_data(struct mlme_priv *pmlmepriv)
100 {
101 	rtw_buf_free(&pmlmepriv->assoc_req, &pmlmepriv->assoc_req_len);
102 	rtw_buf_free(&pmlmepriv->assoc_rsp, &pmlmepriv->assoc_rsp_len);
103 	rtw_free_mlme_ie_data(&pmlmepriv->wps_beacon_ie, &pmlmepriv->wps_beacon_ie_len);
104 	rtw_free_mlme_ie_data(&pmlmepriv->wps_probe_req_ie, &pmlmepriv->wps_probe_req_ie_len);
105 	rtw_free_mlme_ie_data(&pmlmepriv->wps_probe_resp_ie, &pmlmepriv->wps_probe_resp_ie_len);
106 	rtw_free_mlme_ie_data(&pmlmepriv->wps_assoc_resp_ie, &pmlmepriv->wps_assoc_resp_ie_len);
107 
108 	rtw_free_mlme_ie_data(&pmlmepriv->p2p_beacon_ie, &pmlmepriv->p2p_beacon_ie_len);
109 	rtw_free_mlme_ie_data(&pmlmepriv->p2p_probe_req_ie, &pmlmepriv->p2p_probe_req_ie_len);
110 	rtw_free_mlme_ie_data(&pmlmepriv->p2p_probe_resp_ie, &pmlmepriv->p2p_probe_resp_ie_len);
111 	rtw_free_mlme_ie_data(&pmlmepriv->p2p_go_probe_resp_ie, &pmlmepriv->p2p_go_probe_resp_ie_len);
112 	rtw_free_mlme_ie_data(&pmlmepriv->p2p_assoc_req_ie, &pmlmepriv->p2p_assoc_req_ie_len);
113 }
114 #else
rtw_free_mlme_priv_ie_data(struct mlme_priv * pmlmepriv)115 void rtw_free_mlme_priv_ie_data(struct mlme_priv *pmlmepriv)
116 {
117 }
118 #endif
119 
rtw_free_mlme_priv(struct mlme_priv * pmlmepriv)120 void rtw_free_mlme_priv(struct mlme_priv *pmlmepriv)
121 {
122 	rtw_free_mlme_priv_ie_data(pmlmepriv);
123 
124 	if (pmlmepriv) {
125 		if (pmlmepriv->free_bss_buf)
126 			vfree(pmlmepriv->free_bss_buf);
127 	}
128 }
129 
_rtw_alloc_network(struct mlme_priv * pmlmepriv)130 struct	wlan_network *_rtw_alloc_network(struct	mlme_priv *pmlmepriv)/* _queue *free_queue) */
131 {
132 	struct	wlan_network	*pnetwork;
133 	struct __queue *free_queue = &pmlmepriv->free_bss_pool;
134 	struct list_head *plist = NULL;
135 
136 	spin_lock_bh(&free_queue->lock);
137 
138 	if (list_empty(&free_queue->queue)) {
139 		pnetwork = NULL;
140 		goto exit;
141 	}
142 	plist = free_queue->queue.next;
143 
144 	pnetwork = container_of(plist , struct wlan_network, list);
145 
146 	list_del_init(&pnetwork->list);
147 
148 	RT_TRACE(_module_rtl871x_mlme_c_, _drv_info_, ("_rtw_alloc_network: ptr=%p\n", plist));
149 	pnetwork->network_type = 0;
150 	pnetwork->fixed = false;
151 	pnetwork->last_scanned = jiffies;
152 	pnetwork->aid = 0;
153 	pnetwork->join_res = 0;
154 
155 	pmlmepriv->num_of_scanned++;
156 
157 exit:
158 	spin_unlock_bh(&free_queue->lock);
159 
160 	return pnetwork;
161 }
162 
_rtw_free_network(struct mlme_priv * pmlmepriv,struct wlan_network * pnetwork,u8 isfreeall)163 static void _rtw_free_network(struct	mlme_priv *pmlmepriv , struct wlan_network *pnetwork, u8 isfreeall)
164 {
165 	u32 curr_time, delta_time;
166 	u32 lifetime = SCANQUEUE_LIFETIME;
167 	struct __queue *free_queue = &(pmlmepriv->free_bss_pool);
168 
169 	if (pnetwork == NULL)
170 		return;
171 
172 	if (pnetwork->fixed)
173 		return;
174 	curr_time = jiffies;
175 	if ((check_fwstate(pmlmepriv, WIFI_ADHOC_MASTER_STATE)) ||
176 	    (check_fwstate(pmlmepriv, WIFI_ADHOC_STATE)))
177 		lifetime = 1;
178 	if (!isfreeall) {
179 		delta_time = (curr_time - pnetwork->last_scanned)/HZ;
180 		if (delta_time < lifetime)/*  unit:sec */
181 			return;
182 	}
183 	spin_lock_bh(&free_queue->lock);
184 	list_del_init(&(pnetwork->list));
185 	list_add_tail(&(pnetwork->list), &(free_queue->queue));
186 	pmlmepriv->num_of_scanned--;
187 	spin_unlock_bh(&free_queue->lock);
188 }
189 
_rtw_free_network_nolock(struct mlme_priv * pmlmepriv,struct wlan_network * pnetwork)190 void _rtw_free_network_nolock(struct	mlme_priv *pmlmepriv, struct wlan_network *pnetwork)
191 {
192 	struct __queue *free_queue = &(pmlmepriv->free_bss_pool);
193 
194 	if (pnetwork == NULL)
195 		return;
196 	if (pnetwork->fixed)
197 		return;
198 	list_del_init(&(pnetwork->list));
199 	list_add_tail(&(pnetwork->list), get_list_head(free_queue));
200 	pmlmepriv->num_of_scanned--;
201 }
202 
203 /*
204 	return the wlan_network with the matching addr
205 
206 	Shall be calle under atomic context... to avoid possible racing condition...
207 */
rtw_find_network(struct __queue * scanned_queue,u8 * addr)208 struct wlan_network *rtw_find_network(struct __queue *scanned_queue, u8 *addr)
209 {
210 	struct list_head *phead, *plist;
211 	struct	wlan_network *pnetwork = NULL;
212 	u8 zero_addr[ETH_ALEN] = {0, 0, 0, 0, 0, 0};
213 
214 	if (!memcmp(zero_addr, addr, ETH_ALEN)) {
215 		pnetwork = NULL;
216 		goto exit;
217 	}
218 	phead = get_list_head(scanned_queue);
219 	plist = phead->next;
220 
221 	while (plist != phead) {
222 		pnetwork = container_of(plist, struct wlan_network , list);
223 		if (!memcmp(addr, pnetwork->network.MacAddress, ETH_ALEN))
224 			break;
225 		plist = plist->next;
226 	}
227 	if (plist == phead)
228 		pnetwork = NULL;
229 exit:
230 	return pnetwork;
231 }
232 
233 
rtw_free_network_queue(struct adapter * padapter,u8 isfreeall)234 void rtw_free_network_queue(struct adapter *padapter, u8 isfreeall)
235 {
236 	struct list_head *phead, *plist;
237 	struct wlan_network *pnetwork;
238 	struct mlme_priv *pmlmepriv = &padapter->mlmepriv;
239 	struct __queue *scanned_queue = &pmlmepriv->scanned_queue;
240 
241 	spin_lock_bh(&scanned_queue->lock);
242 
243 	phead = get_list_head(scanned_queue);
244 	plist = phead->next;
245 
246 	while (phead != plist) {
247 		pnetwork = container_of(plist, struct wlan_network, list);
248 
249 		plist = plist->next;
250 
251 		_rtw_free_network(pmlmepriv, pnetwork, isfreeall);
252 	}
253 	spin_unlock_bh(&scanned_queue->lock);
254 }
255 
rtw_if_up(struct adapter * padapter)256 int rtw_if_up(struct adapter *padapter)
257 {
258 	int res;
259 
260 	if (padapter->bDriverStopped || padapter->bSurpriseRemoved ||
261 	    (check_fwstate(&padapter->mlmepriv, _FW_LINKED) == false)) {
262 		RT_TRACE(_module_rtl871x_mlme_c_, _drv_info_,
263 			 ("rtw_if_up:bDriverStopped(%d) OR bSurpriseRemoved(%d)",
264 			 padapter->bDriverStopped, padapter->bSurpriseRemoved));
265 		res = false;
266 	} else {
267 		res =  true;
268 	}
269 	return res;
270 }
271 
rtw_generate_random_ibss(u8 * pibss)272 void rtw_generate_random_ibss(u8 *pibss)
273 {
274 	u32	curtime = jiffies;
275 
276 	pibss[0] = 0x02;  /* in ad-hoc mode bit1 must set to 1 */
277 	pibss[1] = 0x11;
278 	pibss[2] = 0x87;
279 	pibss[3] = (u8)(curtime & 0xff);/* p[0]; */
280 	pibss[4] = (u8)((curtime>>8) & 0xff);/* p[1]; */
281 	pibss[5] = (u8)((curtime>>16) & 0xff);/* p[2]; */
282 	return;
283 }
284 
rtw_get_capability_from_ie(u8 * ie)285 u8 *rtw_get_capability_from_ie(u8 *ie)
286 {
287 	return ie + 8 + 2;
288 }
289 
290 
rtw_get_capability(struct wlan_bssid_ex * bss)291 u16 rtw_get_capability(struct wlan_bssid_ex *bss)
292 {
293 	__le16	val;
294 
295 	memcpy((u8 *)&val, rtw_get_capability_from_ie(bss->IEs), 2);
296 
297 	return le16_to_cpu(val);
298 }
299 
rtw_get_beacon_interval_from_ie(u8 * ie)300 u8 *rtw_get_beacon_interval_from_ie(u8 *ie)
301 {
302 	return ie + 8;
303 }
304 
rtw_alloc_network(struct mlme_priv * pmlmepriv)305 static struct wlan_network *rtw_alloc_network(struct mlme_priv *pmlmepriv)
306 {
307 	return _rtw_alloc_network(pmlmepriv);
308 }
309 
rtw_free_network_nolock(struct mlme_priv * pmlmepriv,struct wlan_network * pnetwork)310 static void rtw_free_network_nolock(struct mlme_priv *pmlmepriv,
311 				    struct wlan_network *pnetwork)
312 {
313 	_rtw_free_network_nolock(pmlmepriv, pnetwork);
314 }
315 
rtw_is_same_ibss(struct adapter * adapter,struct wlan_network * pnetwork)316 int rtw_is_same_ibss(struct adapter *adapter, struct wlan_network *pnetwork)
317 {
318 	int ret = true;
319 	struct security_priv *psecuritypriv = &adapter->securitypriv;
320 
321 	if ((psecuritypriv->dot11PrivacyAlgrthm != _NO_PRIVACY_) &&
322 	    (pnetwork->network.Privacy == 0))
323 		ret = false;
324 	else if ((psecuritypriv->dot11PrivacyAlgrthm == _NO_PRIVACY_) &&
325 		 (pnetwork->network.Privacy == 1))
326 		ret = false;
327 	else
328 		ret = true;
329 	return ret;
330 }
331 
is_same_ess(struct wlan_bssid_ex * a,struct wlan_bssid_ex * b)332 static int is_same_ess(struct wlan_bssid_ex *a, struct wlan_bssid_ex *b)
333 {
334 	return (a->Ssid.SsidLength == b->Ssid.SsidLength) &&
335 	       !memcmp(a->Ssid.Ssid, b->Ssid.Ssid, a->Ssid.SsidLength);
336 }
337 
is_same_network(struct wlan_bssid_ex * src,struct wlan_bssid_ex * dst)338 int is_same_network(struct wlan_bssid_ex *src, struct wlan_bssid_ex *dst)
339 {
340 	 u16 s_cap, d_cap;
341 	__le16 le_scap, le_dcap;
342 
343 	memcpy((u8 *)&le_scap, rtw_get_capability_from_ie(src->IEs), 2);
344 	memcpy((u8 *)&le_dcap, rtw_get_capability_from_ie(dst->IEs), 2);
345 
346 
347 	s_cap = le16_to_cpu(le_scap);
348 	d_cap = le16_to_cpu(le_dcap);
349 
350 	return ((src->Ssid.SsidLength == dst->Ssid.SsidLength) &&
351 		((!memcmp(src->MacAddress, dst->MacAddress, ETH_ALEN)) == true) &&
352 		((!memcmp(src->Ssid.Ssid, dst->Ssid.Ssid, src->Ssid.SsidLength)) == true) &&
353 		((s_cap & WLAN_CAPABILITY_IBSS) ==
354 		(d_cap & WLAN_CAPABILITY_IBSS)) &&
355 		((s_cap & WLAN_CAPABILITY_BSS) ==
356 		(d_cap & WLAN_CAPABILITY_BSS)));
357 }
358 
rtw_get_oldest_wlan_network(struct __queue * scanned_queue)359 struct	wlan_network	*rtw_get_oldest_wlan_network(struct __queue *scanned_queue)
360 {
361 	struct list_head *plist, *phead;
362 	struct	wlan_network	*pwlan = NULL;
363 	struct	wlan_network	*oldest = NULL;
364 
365 	phead = get_list_head(scanned_queue);
366 
367 	plist = phead->next;
368 
369 	while (1) {
370 		if (phead == plist)
371 			break;
372 
373 		pwlan = container_of(plist, struct wlan_network, list);
374 
375 		if (!pwlan->fixed) {
376 			if (oldest == NULL || time_after(oldest->last_scanned, pwlan->last_scanned))
377 				oldest = pwlan;
378 		}
379 
380 		plist = plist->next;
381 	}
382 	return oldest;
383 }
384 
update_network(struct wlan_bssid_ex * dst,struct wlan_bssid_ex * src,struct adapter * padapter,bool update_ie)385 void update_network(struct wlan_bssid_ex *dst, struct wlan_bssid_ex *src,
386 	struct adapter *padapter, bool update_ie)
387 {
388 	long rssi_ori = dst->Rssi;
389 	u8 sq_smp = src->PhyInfo.SignalQuality;
390 	u8 ss_final;
391 	u8 sq_final;
392 	long rssi_final;
393 
394 	rtw_hal_antdiv_rssi_compared(padapter, dst, src); /* this will update src.Rssi, need consider again */
395 
396 	/* The rule below is 1/5 for sample value, 4/5 for history value */
397 	if (check_fwstate(&padapter->mlmepriv, _FW_LINKED) && is_same_network(&(padapter->mlmepriv.cur_network.network), src)) {
398 		/* Take the recvpriv's value for the connected AP*/
399 		ss_final = padapter->recvpriv.signal_strength;
400 		sq_final = padapter->recvpriv.signal_qual;
401 		/* the rssi value here is undecorated, and will be used for antenna diversity */
402 		if (sq_smp != 101) /* from the right channel */
403 			rssi_final = (src->Rssi+dst->Rssi*4)/5;
404 		else
405 			rssi_final = rssi_ori;
406 	} else {
407 		if (sq_smp != 101) { /* from the right channel */
408 			ss_final = ((u32)(src->PhyInfo.SignalStrength)+(u32)(dst->PhyInfo.SignalStrength)*4)/5;
409 			sq_final = ((u32)(src->PhyInfo.SignalQuality)+(u32)(dst->PhyInfo.SignalQuality)*4)/5;
410 			rssi_final = (src->Rssi+dst->Rssi*4)/5;
411 		} else {
412 			/* bss info not receiving from the right channel, use the original RX signal infos */
413 			ss_final = dst->PhyInfo.SignalStrength;
414 			sq_final = dst->PhyInfo.SignalQuality;
415 			rssi_final = dst->Rssi;
416 		}
417 	}
418 	if (update_ie)
419 		memcpy((u8 *)dst, (u8 *)src, get_wlan_bssid_ex_sz(src));
420 	dst->PhyInfo.SignalStrength = ss_final;
421 	dst->PhyInfo.SignalQuality = sq_final;
422 	dst->Rssi = rssi_final;
423 
424 }
425 
update_current_network(struct adapter * adapter,struct wlan_bssid_ex * pnetwork)426 static void update_current_network(struct adapter *adapter, struct wlan_bssid_ex *pnetwork)
427 {
428 	struct	mlme_priv	*pmlmepriv = &(adapter->mlmepriv);
429 
430 	if ((check_fwstate(pmlmepriv, _FW_LINKED) == true) &&
431 	    (is_same_network(&(pmlmepriv->cur_network.network), pnetwork))) {
432 		update_network(&(pmlmepriv->cur_network.network), pnetwork, adapter, true);
433 		rtw_update_protection(adapter, (pmlmepriv->cur_network.network.IEs) + sizeof(struct ndis_802_11_fixed_ie),
434 				      pmlmepriv->cur_network.network.IELength);
435 	}
436 }
437 
438 /*
439 Caller must hold pmlmepriv->lock first.
440 */
rtw_update_scanned_network(struct adapter * adapter,struct wlan_bssid_ex * target)441 void rtw_update_scanned_network(struct adapter *adapter, struct wlan_bssid_ex *target)
442 {
443 	struct list_head *plist, *phead;
444 	u32	bssid_ex_sz;
445 	struct mlme_priv	*pmlmepriv = &(adapter->mlmepriv);
446 	struct __queue *queue	= &(pmlmepriv->scanned_queue);
447 	struct wlan_network	*pnetwork = NULL;
448 	struct wlan_network	*oldest = NULL;
449 
450 	spin_lock_bh(&queue->lock);
451 	phead = get_list_head(queue);
452 	plist = phead->next;
453 
454 	while (phead != plist) {
455 		pnetwork	= container_of(plist, struct wlan_network, list);
456 
457 		if (is_same_network(&(pnetwork->network), target))
458 			break;
459 		if ((oldest == ((struct wlan_network *)0)) ||
460 		    time_after(oldest->last_scanned, pnetwork->last_scanned))
461 			oldest = pnetwork;
462 		plist = plist->next;
463 	}
464 	/* If we didn't find a match, then get a new network slot to initialize
465 	 * with this beacon's information */
466 	if (phead == plist) {
467 		if (list_empty(&(pmlmepriv->free_bss_pool.queue))) {
468 			/* If there are no more slots, expire the oldest */
469 			pnetwork = oldest;
470 
471 			rtw_hal_get_def_var(adapter, HAL_DEF_CURRENT_ANTENNA, &(target->PhyInfo.Optimum_antenna));
472 			memcpy(&(pnetwork->network), target,  get_wlan_bssid_ex_sz(target));
473 			/*  variable initialize */
474 			pnetwork->fixed = false;
475 			pnetwork->last_scanned = jiffies;
476 
477 			pnetwork->network_type = 0;
478 			pnetwork->aid = 0;
479 			pnetwork->join_res = 0;
480 
481 			/* bss info not receiving from the right channel */
482 			if (pnetwork->network.PhyInfo.SignalQuality == 101)
483 				pnetwork->network.PhyInfo.SignalQuality = 0;
484 		} else {
485 			/* Otherwise just pull from the free list */
486 
487 			pnetwork = rtw_alloc_network(pmlmepriv); /*  will update scan_time */
488 
489 			if (pnetwork == NULL) {
490 				RT_TRACE(_module_rtl871x_mlme_c_, _drv_err_, ("\n\n\nsomething wrong here\n\n\n"));
491 				goto exit;
492 			}
493 
494 			bssid_ex_sz = get_wlan_bssid_ex_sz(target);
495 			target->Length = bssid_ex_sz;
496 			rtw_hal_get_def_var(adapter, HAL_DEF_CURRENT_ANTENNA, &(target->PhyInfo.Optimum_antenna));
497 			memcpy(&(pnetwork->network), target, bssid_ex_sz);
498 
499 			pnetwork->last_scanned = jiffies;
500 
501 			/* bss info not receiving from the right channel */
502 			if (pnetwork->network.PhyInfo.SignalQuality == 101)
503 				pnetwork->network.PhyInfo.SignalQuality = 0;
504 			list_add_tail(&(pnetwork->list), &(queue->queue));
505 		}
506 	} else {
507 		/* we have an entry and we are going to update it. But this entry may
508 		 * be already expired. In this case we do the same as we found a new
509 		 * net and call the new_net handler
510 		 */
511 		bool update_ie = true;
512 
513 		pnetwork->last_scanned = jiffies;
514 
515 		/* target.Reserved[0]== 1, means that scanned network is a bcn frame. */
516 		if ((pnetwork->network.IELength > target->IELength) && (target->Reserved[0] == 1))
517 			update_ie = false;
518 
519 		update_network(&(pnetwork->network), target, adapter, update_ie);
520 	}
521 
522 exit:
523 	spin_unlock_bh(&queue->lock);
524 
525 }
526 
rtw_add_network(struct adapter * adapter,struct wlan_bssid_ex * pnetwork)527 static void rtw_add_network(struct adapter *adapter,
528 			    struct wlan_bssid_ex *pnetwork)
529 {
530 	update_current_network(adapter, pnetwork);
531 	rtw_update_scanned_network(adapter, pnetwork);
532 }
533 
534 /*
535  * select the desired network based on the capability of the (i)bss.
536  * check items:	(1) security
537  *			(2) network_type
538  *			(3) WMM
539  *			(4) HT
540  *			(5) others
541  */
rtw_is_desired_network(struct adapter * adapter,struct wlan_network * pnetwork)542 static int rtw_is_desired_network(struct adapter *adapter, struct wlan_network *pnetwork)
543 {
544 	struct security_priv *psecuritypriv = &adapter->securitypriv;
545 	struct mlme_priv *pmlmepriv = &adapter->mlmepriv;
546 	u32 desired_encmode;
547 	u32 privacy;
548 
549 	/* u8 wps_ie[512]; */
550 	uint wps_ielen;
551 
552 	int bselected = true;
553 
554 	desired_encmode = psecuritypriv->ndisencryptstatus;
555 	privacy = pnetwork->network.Privacy;
556 
557 	if (check_fwstate(pmlmepriv, WIFI_UNDER_WPS)) {
558 		if (rtw_get_wps_ie(pnetwork->network.IEs+_FIXED_IE_LENGTH_, pnetwork->network.IELength-_FIXED_IE_LENGTH_, NULL, &wps_ielen) != NULL)
559 			return true;
560 		else
561 			return false;
562 	}
563 	if (adapter->registrypriv.wifi_spec == 1) { /* for  correct flow of 8021X  to do.... */
564 		if ((desired_encmode == Ndis802_11EncryptionDisabled) && (privacy != 0))
565 			bselected = false;
566 	}
567 
568 
569 	if ((desired_encmode != Ndis802_11EncryptionDisabled) && (privacy == 0)) {
570 		DBG_88E("desired_encmode: %d, privacy: %d\n", desired_encmode, privacy);
571 		bselected = false;
572 	}
573 
574 	if (check_fwstate(pmlmepriv, WIFI_ADHOC_STATE) == true) {
575 		if (pnetwork->network.InfrastructureMode != pmlmepriv->cur_network.network.InfrastructureMode)
576 			bselected = false;
577 	}
578 
579 
580 	return bselected;
581 }
582 
583 /* TODO: Perry: For Power Management */
rtw_atimdone_event_callback(struct adapter * adapter,u8 * pbuf)584 void rtw_atimdone_event_callback(struct adapter	*adapter , u8 *pbuf)
585 {
586 	RT_TRACE(_module_rtl871x_mlme_c_, _drv_err_, ("receive atimdone_evet\n"));
587 	return;
588 }
589 
590 
rtw_survey_event_callback(struct adapter * adapter,u8 * pbuf)591 void rtw_survey_event_callback(struct adapter	*adapter, u8 *pbuf)
592 {
593 	u32 len;
594 	struct wlan_bssid_ex *pnetwork;
595 	struct	mlme_priv	*pmlmepriv = &(adapter->mlmepriv);
596 
597 	pnetwork = (struct wlan_bssid_ex *)pbuf;
598 
599 	RT_TRACE(_module_rtl871x_mlme_c_, _drv_info_, ("rtw_survey_event_callback, ssid=%s\n",  pnetwork->Ssid.Ssid));
600 
601 	len = get_wlan_bssid_ex_sz(pnetwork);
602 	if (len > (sizeof(struct wlan_bssid_ex))) {
603 		RT_TRACE(_module_rtl871x_mlme_c_, _drv_err_, ("\n****rtw_survey_event_callback: return a wrong bss ***\n"));
604 		return;
605 	}
606 	spin_lock_bh(&pmlmepriv->lock);
607 
608 	/*  update IBSS_network 's timestamp */
609 	if ((check_fwstate(pmlmepriv, WIFI_ADHOC_MASTER_STATE)) == true) {
610 		if (!memcmp(&(pmlmepriv->cur_network.network.MacAddress), pnetwork->MacAddress, ETH_ALEN)) {
611 			struct wlan_network *ibss_wlan = NULL;
612 
613 			memcpy(pmlmepriv->cur_network.network.IEs, pnetwork->IEs, 8);
614 			spin_lock_bh(&(pmlmepriv->scanned_queue.lock));
615 			ibss_wlan = rtw_find_network(&pmlmepriv->scanned_queue,  pnetwork->MacAddress);
616 			if (ibss_wlan) {
617 				memcpy(ibss_wlan->network.IEs , pnetwork->IEs, 8);
618 				spin_unlock_bh(&pmlmepriv->scanned_queue.lock);
619 				goto exit;
620 			}
621 			spin_unlock_bh(&pmlmepriv->scanned_queue.lock);
622 		}
623 	}
624 
625 	/*  lock pmlmepriv->lock when you accessing network_q */
626 	if ((check_fwstate(pmlmepriv, _FW_UNDER_LINKING)) == false) {
627 		if (pnetwork->Ssid.Ssid[0] == 0)
628 			pnetwork->Ssid.SsidLength = 0;
629 		rtw_add_network(adapter, pnetwork);
630 	}
631 
632 exit:
633 
634 	spin_unlock_bh(&pmlmepriv->lock);
635 	return;
636 }
637 
rtw_surveydone_event_callback(struct adapter * adapter,u8 * pbuf)638 void rtw_surveydone_event_callback(struct adapter	*adapter, u8 *pbuf)
639 {
640 	struct	mlme_priv *pmlmepriv = &(adapter->mlmepriv);
641 	struct mlme_ext_priv *pmlmeext;
642 
643 	spin_lock_bh(&pmlmepriv->lock);
644 
645 	if (pmlmepriv->wps_probe_req_ie) {
646 		pmlmepriv->wps_probe_req_ie_len = 0;
647 		kfree(pmlmepriv->wps_probe_req_ie);
648 		pmlmepriv->wps_probe_req_ie = NULL;
649 	}
650 
651 	RT_TRACE(_module_rtl871x_mlme_c_, _drv_info_, ("rtw_surveydone_event_callback: fw_state:%x\n\n", get_fwstate(pmlmepriv)));
652 
653 	if (check_fwstate(pmlmepriv, _FW_UNDER_SURVEY)) {
654 		del_timer_sync(&pmlmepriv->scan_to_timer);
655 		_clr_fwstate_(pmlmepriv, _FW_UNDER_SURVEY);
656 	} else {
657 		RT_TRACE(_module_rtl871x_mlme_c_, _drv_err_, ("nic status=%x, survey done event comes too late!\n", get_fwstate(pmlmepriv)));
658 	}
659 
660 	rtw_set_signal_stat_timer(&adapter->recvpriv);
661 
662 	if (pmlmepriv->to_join) {
663 		if ((check_fwstate(pmlmepriv, WIFI_ADHOC_STATE) == true)) {
664 			if (check_fwstate(pmlmepriv, _FW_LINKED) == false) {
665 				set_fwstate(pmlmepriv, _FW_UNDER_LINKING);
666 
667 				if (rtw_select_and_join_from_scanned_queue(pmlmepriv) == _SUCCESS) {
668 					mod_timer(&pmlmepriv->assoc_timer,
669 						  jiffies + msecs_to_jiffies(MAX_JOIN_TIMEOUT));
670 				} else {
671 					struct wlan_bssid_ex    *pdev_network = &(adapter->registrypriv.dev_network);
672 					u8 *pibss = adapter->registrypriv.dev_network.MacAddress;
673 
674 					_clr_fwstate_(pmlmepriv, _FW_UNDER_SURVEY);
675 
676 					RT_TRACE(_module_rtl871x_mlme_c_, _drv_err_, ("switching to adhoc master\n"));
677 
678 					memcpy(&pdev_network->Ssid, &pmlmepriv->assoc_ssid, sizeof(struct ndis_802_11_ssid));
679 
680 					rtw_update_registrypriv_dev_network(adapter);
681 					rtw_generate_random_ibss(pibss);
682 
683 					pmlmepriv->fw_state = WIFI_ADHOC_MASTER_STATE;
684 
685 					if (rtw_createbss_cmd(adapter) != _SUCCESS)
686 						RT_TRACE(_module_rtl871x_mlme_c_, _drv_err_, ("Error=>rtw_createbss_cmd status FAIL\n"));
687 					pmlmepriv->to_join = false;
688 				}
689 			}
690 		} else {
691 			int s_ret;
692 			set_fwstate(pmlmepriv, _FW_UNDER_LINKING);
693 			pmlmepriv->to_join = false;
694 			s_ret = rtw_select_and_join_from_scanned_queue(pmlmepriv);
695 			if (_SUCCESS == s_ret) {
696 			     mod_timer(&pmlmepriv->assoc_timer,
697 				       jiffies + msecs_to_jiffies(MAX_JOIN_TIMEOUT));
698 			} else if (s_ret == 2) { /* there is no need to wait for join */
699 				_clr_fwstate_(pmlmepriv, _FW_UNDER_LINKING);
700 				rtw_indicate_connect(adapter);
701 			} else {
702 				DBG_88E("try_to_join, but select scanning queue fail, to_roaming:%d\n", pmlmepriv->to_roaming);
703 				if (pmlmepriv->to_roaming != 0) {
704 					if (--pmlmepriv->to_roaming == 0 ||
705 					    _SUCCESS != rtw_sitesurvey_cmd(adapter, &pmlmepriv->assoc_ssid, 1, NULL, 0)) {
706 						pmlmepriv->to_roaming = 0;
707 						rtw_free_assoc_resources(adapter, 1);
708 						rtw_indicate_disconnect(adapter);
709 					} else {
710 						pmlmepriv->to_join = true;
711 					}
712 				}
713 				_clr_fwstate_(pmlmepriv, _FW_UNDER_LINKING);
714 			}
715 		}
716 	}
717 
718 	indicate_wx_scan_complete_event(adapter);
719 
720 	spin_unlock_bh(&pmlmepriv->lock);
721 
722 	rtw_os_xmit_schedule(adapter);
723 
724 	pmlmeext = &adapter->mlmeextpriv;
725 }
726 
rtw_dummy_event_callback(struct adapter * adapter,u8 * pbuf)727 void rtw_dummy_event_callback(struct adapter *adapter , u8 *pbuf)
728 {
729 }
730 
rtw_fwdbg_event_callback(struct adapter * adapter,u8 * pbuf)731 void rtw_fwdbg_event_callback(struct adapter *adapter , u8 *pbuf)
732 {
733 }
734 
free_scanqueue(struct mlme_priv * pmlmepriv)735 static void free_scanqueue(struct	mlme_priv *pmlmepriv)
736 {
737 	struct __queue *free_queue = &pmlmepriv->free_bss_pool;
738 	struct __queue *scan_queue = &pmlmepriv->scanned_queue;
739 	struct list_head *plist, *phead, *ptemp;
740 
741 	RT_TRACE(_module_rtl871x_mlme_c_, _drv_notice_, ("+free_scanqueue\n"));
742 	spin_lock_bh(&scan_queue->lock);
743 	spin_lock_bh(&free_queue->lock);
744 
745 	phead = get_list_head(scan_queue);
746 	plist = phead->next;
747 
748 	while (plist != phead) {
749 		ptemp = plist->next;
750 		list_del_init(plist);
751 		list_add_tail(plist, &free_queue->queue);
752 		plist = ptemp;
753 		pmlmepriv->num_of_scanned--;
754 	}
755 
756 	spin_unlock_bh(&free_queue->lock);
757 	spin_unlock_bh(&scan_queue->lock);
758 }
759 
760 /*
761 *rtw_free_assoc_resources: the caller has to lock pmlmepriv->lock
762 */
rtw_free_assoc_resources(struct adapter * adapter,int lock_scanned_queue)763 void rtw_free_assoc_resources(struct adapter *adapter, int lock_scanned_queue)
764 {
765 	struct wlan_network *pwlan = NULL;
766 	struct	mlme_priv *pmlmepriv = &adapter->mlmepriv;
767 	struct	sta_priv *pstapriv = &adapter->stapriv;
768 	struct wlan_network *tgt_network = &pmlmepriv->cur_network;
769 
770 	RT_TRACE(_module_rtl871x_mlme_c_, _drv_notice_, ("+rtw_free_assoc_resources\n"));
771 	RT_TRACE(_module_rtl871x_mlme_c_, _drv_info_,
772 		 ("tgt_network->network.MacAddress=%pM ssid=%s\n",
773 		 tgt_network->network.MacAddress, tgt_network->network.Ssid.Ssid));
774 
775 	if (check_fwstate(pmlmepriv, WIFI_STATION_STATE | WIFI_AP_STATE)) {
776 		struct sta_info *psta;
777 
778 		psta = rtw_get_stainfo(&adapter->stapriv, tgt_network->network.MacAddress);
779 
780 		spin_lock_bh(&(pstapriv->sta_hash_lock));
781 		rtw_free_stainfo(adapter,  psta);
782 		spin_unlock_bh(&pstapriv->sta_hash_lock);
783 	}
784 
785 	if (check_fwstate(pmlmepriv, WIFI_ADHOC_STATE | WIFI_ADHOC_MASTER_STATE | WIFI_AP_STATE)) {
786 		struct sta_info *psta;
787 
788 		rtw_free_all_stainfo(adapter);
789 
790 		psta = rtw_get_bcmc_stainfo(adapter);
791 		spin_lock_bh(&(pstapriv->sta_hash_lock));
792 		rtw_free_stainfo(adapter, psta);
793 		spin_unlock_bh(&pstapriv->sta_hash_lock);
794 
795 		rtw_init_bcmc_stainfo(adapter);
796 	}
797 
798 	if (lock_scanned_queue)
799 		spin_lock_bh(&(pmlmepriv->scanned_queue.lock));
800 
801 	pwlan = rtw_find_network(&pmlmepriv->scanned_queue, tgt_network->network.MacAddress);
802 	if (pwlan)
803 		pwlan->fixed = false;
804 	else
805 		RT_TRACE(_module_rtl871x_mlme_c_, _drv_err_, ("rtw_free_assoc_resources:pwlan==NULL\n\n"));
806 
807 	if ((check_fwstate(pmlmepriv, WIFI_ADHOC_MASTER_STATE) && (adapter->stapriv.asoc_sta_count == 1)))
808 		rtw_free_network_nolock(pmlmepriv, pwlan);
809 
810 	if (lock_scanned_queue)
811 		spin_unlock_bh(&pmlmepriv->scanned_queue.lock);
812 	pmlmepriv->key_mask = 0;
813 }
814 
815 /*
816 *rtw_indicate_connect: the caller has to lock pmlmepriv->lock
817 */
rtw_indicate_connect(struct adapter * padapter)818 void rtw_indicate_connect(struct adapter *padapter)
819 {
820 	struct mlme_priv	*pmlmepriv = &padapter->mlmepriv;
821 
822 	RT_TRACE(_module_rtl871x_mlme_c_, _drv_err_, ("+rtw_indicate_connect\n"));
823 
824 	pmlmepriv->to_join = false;
825 
826 	if (!check_fwstate(&padapter->mlmepriv, _FW_LINKED)) {
827 		set_fwstate(pmlmepriv, _FW_LINKED);
828 
829 		rtw_led_control(padapter, LED_CTL_LINK);
830 
831 		rtw_os_indicate_connect(padapter);
832 	}
833 
834 	pmlmepriv->to_roaming = 0;
835 
836 	rtw_set_scan_deny(padapter, 3000);
837 
838 	RT_TRACE(_module_rtl871x_mlme_c_, _drv_err_, ("-rtw_indicate_connect: fw_state=0x%08x\n", get_fwstate(pmlmepriv)));
839 }
840 
841 /*
842 *rtw_indicate_disconnect: the caller has to lock pmlmepriv->lock
843 */
rtw_indicate_disconnect(struct adapter * padapter)844 void rtw_indicate_disconnect(struct adapter *padapter)
845 {
846 	struct	mlme_priv *pmlmepriv = &padapter->mlmepriv;
847 
848 	RT_TRACE(_module_rtl871x_mlme_c_, _drv_err_, ("+rtw_indicate_disconnect\n"));
849 
850 	_clr_fwstate_(pmlmepriv, _FW_UNDER_LINKING | WIFI_UNDER_WPS);
851 
852 
853 	if (pmlmepriv->to_roaming > 0)
854 		_clr_fwstate_(pmlmepriv, _FW_LINKED);
855 
856 	if (check_fwstate(&padapter->mlmepriv, _FW_LINKED) ||
857 	    (pmlmepriv->to_roaming <= 0)) {
858 		rtw_os_indicate_disconnect(padapter);
859 
860 		_clr_fwstate_(pmlmepriv, _FW_LINKED);
861 		rtw_led_control(padapter, LED_CTL_NO_LINK);
862 		rtw_clear_scan_deny(padapter);
863 	}
864 
865 	rtw_lps_ctrl_wk_cmd(padapter, LPS_CTRL_DISCONNECT, 1);
866 }
867 
rtw_indicate_scan_done(struct adapter * padapter,bool aborted)868 inline void rtw_indicate_scan_done(struct adapter *padapter, bool aborted)
869 {
870 	rtw_os_indicate_scan_done(padapter, aborted);
871 }
872 
rtw_scan_abort(struct adapter * adapter)873 void rtw_scan_abort(struct adapter *adapter)
874 {
875 	u32 start;
876 	struct mlme_priv	*pmlmepriv = &(adapter->mlmepriv);
877 	struct mlme_ext_priv	*pmlmeext = &(adapter->mlmeextpriv);
878 
879 	start = jiffies;
880 	pmlmeext->scan_abort = true;
881 	while (check_fwstate(pmlmepriv, _FW_UNDER_SURVEY) &&
882 	       rtw_get_passing_time_ms(start) <= 200) {
883 		if (adapter->bDriverStopped || adapter->bSurpriseRemoved)
884 			break;
885 		DBG_88E(FUNC_NDEV_FMT"fw_state=_FW_UNDER_SURVEY!\n", FUNC_NDEV_ARG(adapter->pnetdev));
886 		msleep(20);
887 	}
888 	if (check_fwstate(pmlmepriv, _FW_UNDER_SURVEY)) {
889 		if (!adapter->bDriverStopped && !adapter->bSurpriseRemoved)
890 			DBG_88E(FUNC_NDEV_FMT"waiting for scan_abort time out!\n", FUNC_NDEV_ARG(adapter->pnetdev));
891 		rtw_indicate_scan_done(adapter, true);
892 	}
893 	pmlmeext->scan_abort = false;
894 }
895 
rtw_joinbss_update_stainfo(struct adapter * padapter,struct wlan_network * pnetwork)896 static struct sta_info *rtw_joinbss_update_stainfo(struct adapter *padapter, struct wlan_network *pnetwork)
897 {
898 	int i;
899 	struct sta_info *bmc_sta, *psta = NULL;
900 	struct recv_reorder_ctrl *preorder_ctrl;
901 	struct sta_priv *pstapriv = &padapter->stapriv;
902 
903 	psta = rtw_get_stainfo(pstapriv, pnetwork->network.MacAddress);
904 	if (psta == NULL)
905 		psta = rtw_alloc_stainfo(pstapriv, pnetwork->network.MacAddress);
906 
907 	if (psta) { /* update ptarget_sta */
908 		DBG_88E("%s\n", __func__);
909 		psta->aid  = pnetwork->join_res;
910 			psta->mac_id = 0;
911 		/* sta mode */
912 		rtw_hal_set_odm_var(padapter, HAL_ODM_STA_INFO, psta, true);
913 		/* security related */
914 		if (padapter->securitypriv.dot11AuthAlgrthm == dot11AuthAlgrthm_8021X) {
915 			padapter->securitypriv.binstallGrpkey = false;
916 			padapter->securitypriv.busetkipkey = false;
917 			padapter->securitypriv.bgrpkey_handshake = false;
918 			psta->ieee8021x_blocked = true;
919 			psta->dot118021XPrivacy = padapter->securitypriv.dot11PrivacyAlgrthm;
920 			memset((u8 *)&psta->dot118021x_UncstKey, 0, sizeof(union Keytype));
921 			memset((u8 *)&psta->dot11tkiprxmickey, 0, sizeof(union Keytype));
922 			memset((u8 *)&psta->dot11tkiptxmickey, 0, sizeof(union Keytype));
923 			memset((u8 *)&psta->dot11txpn, 0, sizeof(union pn48));
924 			memset((u8 *)&psta->dot11rxpn, 0, sizeof(union pn48));
925 		}
926 		/*
927 		 * Commented by Albert 2012/07/21
928 		 * When doing the WPS, the wps_ie_len won't equal to 0
929 		 * And the Wi-Fi driver shouldn't allow the data
930 		 * packet to be tramsmitted.
931 		 */
932 		if (padapter->securitypriv.wps_ie_len != 0) {
933 			psta->ieee8021x_blocked = true;
934 			padapter->securitypriv.wps_ie_len = 0;
935 		}
936 		/* for A-MPDU Rx reordering buffer control for bmc_sta & sta_info */
937 		/* if A-MPDU Rx is enabled, resetting  rx_ordering_ctrl wstart_b(indicate_seq) to default value = 0xffff */
938 		/* todo: check if AP can send A-MPDU packets */
939 		for (i = 0; i < 16; i++) {
940 			/* preorder_ctrl = &precvpriv->recvreorder_ctrl[i]; */
941 			preorder_ctrl = &psta->recvreorder_ctrl[i];
942 			preorder_ctrl->enable = false;
943 			preorder_ctrl->indicate_seq = 0xffff;
944 			preorder_ctrl->wend_b = 0xffff;
945 			preorder_ctrl->wsize_b = 64;/* max_ampdu_sz; ex. 32(kbytes) -> wsize_b = 32 */
946 		}
947 		bmc_sta = rtw_get_bcmc_stainfo(padapter);
948 		if (bmc_sta) {
949 			for (i = 0; i < 16; i++) {
950 				/* preorder_ctrl = &precvpriv->recvreorder_ctrl[i]; */
951 				preorder_ctrl = &bmc_sta->recvreorder_ctrl[i];
952 				preorder_ctrl->enable = false;
953 				preorder_ctrl->indicate_seq = 0xffff;
954 				preorder_ctrl->wend_b = 0xffff;
955 				preorder_ctrl->wsize_b = 64;/* max_ampdu_sz; ex. 32(kbytes) -> wsize_b = 32 */
956 			}
957 		}
958 		/* misc. */
959 		update_sta_info(padapter, psta);
960 	}
961 	return psta;
962 }
963 
964 /* pnetwork: returns from rtw_joinbss_event_callback */
965 /* ptarget_wlan: found from scanned_queue */
rtw_joinbss_update_network(struct adapter * padapter,struct wlan_network * ptarget_wlan,struct wlan_network * pnetwork)966 static void rtw_joinbss_update_network(struct adapter *padapter, struct wlan_network *ptarget_wlan, struct wlan_network  *pnetwork)
967 {
968 	struct mlme_priv	*pmlmepriv = &(padapter->mlmepriv);
969 	struct wlan_network  *cur_network = &(pmlmepriv->cur_network);
970 
971 	DBG_88E("%s\n", __func__);
972 
973 	RT_TRACE(_module_rtl871x_mlme_c_, _drv_info_,
974 		 ("\nfw_state:%x, BSSID:%pM\n",
975 		 get_fwstate(pmlmepriv), pnetwork->network.MacAddress));
976 
977 
978 	/*  why not use ptarget_wlan?? */
979 	memcpy(&cur_network->network, &pnetwork->network, pnetwork->network.Length);
980 	/*  some IEs in pnetwork is wrong, so we should use ptarget_wlan IEs */
981 	cur_network->network.IELength = ptarget_wlan->network.IELength;
982 	memcpy(&cur_network->network.IEs[0], &ptarget_wlan->network.IEs[0], MAX_IE_SZ);
983 
984 	cur_network->aid = pnetwork->join_res;
985 
986 
987 	rtw_set_signal_stat_timer(&padapter->recvpriv);
988 	padapter->recvpriv.signal_strength = ptarget_wlan->network.PhyInfo.SignalStrength;
989 	padapter->recvpriv.signal_qual = ptarget_wlan->network.PhyInfo.SignalQuality;
990 	/* the ptarget_wlan->network.Rssi is raw data, we use ptarget_wlan->network.PhyInfo.SignalStrength instead (has scaled) */
991 	padapter->recvpriv.rssi = translate_percentage_to_dbm(ptarget_wlan->network.PhyInfo.SignalStrength);
992 	rtw_set_signal_stat_timer(&padapter->recvpriv);
993 
994 	/* update fw_state will clr _FW_UNDER_LINKING here indirectly */
995 	switch (pnetwork->network.InfrastructureMode) {
996 	case Ndis802_11Infrastructure:
997 		if (pmlmepriv->fw_state&WIFI_UNDER_WPS)
998 			pmlmepriv->fw_state = WIFI_STATION_STATE|WIFI_UNDER_WPS;
999 		else
1000 			pmlmepriv->fw_state = WIFI_STATION_STATE;
1001 		break;
1002 	case Ndis802_11IBSS:
1003 		pmlmepriv->fw_state = WIFI_ADHOC_STATE;
1004 		break;
1005 	default:
1006 		pmlmepriv->fw_state = WIFI_NULL_STATE;
1007 		RT_TRACE(_module_rtl871x_mlme_c_, _drv_err_, ("Invalid network_mode\n"));
1008 		break;
1009 	}
1010 
1011 	rtw_update_protection(padapter, (cur_network->network.IEs) +
1012 			      sizeof(struct ndis_802_11_fixed_ie),
1013 			      (cur_network->network.IELength));
1014 	rtw_update_ht_cap(padapter, cur_network->network.IEs, cur_network->network.IELength);
1015 }
1016 
1017 /* Notes: the function could be > passive_level (the same context as Rx tasklet) */
1018 /* pnetwork: returns from rtw_joinbss_event_callback */
1019 /* ptarget_wlan: found from scanned_queue */
1020 /* if join_res > 0, for (fw_state == WIFI_STATION_STATE), we check if  "ptarget_sta" & "ptarget_wlan" exist. */
1021 /* if join_res > 0, for (fw_state == WIFI_ADHOC_STATE), we only check if "ptarget_wlan" exist. */
1022 /* if join_res > 0, update "cur_network->network" from "pnetwork->network" if (ptarget_wlan != NULL). */
1023 
rtw_joinbss_event_prehandle(struct adapter * adapter,u8 * pbuf)1024 void rtw_joinbss_event_prehandle(struct adapter *adapter, u8 *pbuf)
1025 {
1026 	struct sta_info *ptarget_sta = NULL, *pcur_sta = NULL;
1027 	struct	sta_priv *pstapriv = &adapter->stapriv;
1028 	struct	mlme_priv	*pmlmepriv = &(adapter->mlmepriv);
1029 	struct wlan_network	*pnetwork	= (struct wlan_network *)pbuf;
1030 	struct wlan_network	*cur_network = &(pmlmepriv->cur_network);
1031 	struct wlan_network	*pcur_wlan = NULL, *ptarget_wlan = NULL;
1032 	unsigned int		the_same_macaddr = false;
1033 
1034 	RT_TRACE(_module_rtl871x_mlme_c_, _drv_info_, ("joinbss event call back received with res=%d\n", pnetwork->join_res));
1035 
1036 	rtw_get_encrypt_decrypt_from_registrypriv(adapter);
1037 
1038 
1039 	if (pmlmepriv->assoc_ssid.SsidLength == 0)
1040 		RT_TRACE(_module_rtl871x_mlme_c_, _drv_err_, ("@@@@@   joinbss event call back  for Any SSid\n"));
1041 	else
1042 		RT_TRACE(_module_rtl871x_mlme_c_, _drv_err_, ("@@@@@   rtw_joinbss_event_callback for SSid:%s\n", pmlmepriv->assoc_ssid.Ssid));
1043 
1044 	the_same_macaddr = !memcmp(pnetwork->network.MacAddress, cur_network->network.MacAddress, ETH_ALEN);
1045 
1046 	pnetwork->network.Length = get_wlan_bssid_ex_sz(&pnetwork->network);
1047 	if (pnetwork->network.Length > sizeof(struct wlan_bssid_ex)) {
1048 		RT_TRACE(_module_rtl871x_mlme_c_, _drv_err_, ("\n\n ***joinbss_evt_callback return a wrong bss ***\n\n"));
1049 		return;
1050 	}
1051 
1052 	spin_lock_bh(&pmlmepriv->lock);
1053 
1054 	RT_TRACE(_module_rtl871x_mlme_c_, _drv_info_, ("\nrtw_joinbss_event_callback!! _enter_critical\n"));
1055 
1056 	if (pnetwork->join_res > 0) {
1057 		spin_lock_bh(&(pmlmepriv->scanned_queue.lock));
1058 		if (check_fwstate(pmlmepriv, _FW_UNDER_LINKING)) {
1059 			/* s1. find ptarget_wlan */
1060 			if (check_fwstate(pmlmepriv, _FW_LINKED)) {
1061 				if (the_same_macaddr) {
1062 					ptarget_wlan = rtw_find_network(&pmlmepriv->scanned_queue, cur_network->network.MacAddress);
1063 				} else {
1064 					pcur_wlan = rtw_find_network(&pmlmepriv->scanned_queue, cur_network->network.MacAddress);
1065 					if (pcur_wlan)
1066 						pcur_wlan->fixed = false;
1067 
1068 					pcur_sta = rtw_get_stainfo(pstapriv, cur_network->network.MacAddress);
1069 					if (pcur_sta) {
1070 						spin_lock_bh(&(pstapriv->sta_hash_lock));
1071 						rtw_free_stainfo(adapter,  pcur_sta);
1072 						spin_unlock_bh(&pstapriv->sta_hash_lock);
1073 					}
1074 
1075 					ptarget_wlan = rtw_find_network(&pmlmepriv->scanned_queue, pnetwork->network.MacAddress);
1076 					if (check_fwstate(pmlmepriv, WIFI_STATION_STATE) == true) {
1077 						if (ptarget_wlan)
1078 							ptarget_wlan->fixed = true;
1079 					}
1080 				}
1081 			} else {
1082 				ptarget_wlan = rtw_find_network(&pmlmepriv->scanned_queue, pnetwork->network.MacAddress);
1083 				if (check_fwstate(pmlmepriv, WIFI_STATION_STATE) == true) {
1084 					if (ptarget_wlan)
1085 						ptarget_wlan->fixed = true;
1086 				}
1087 			}
1088 
1089 			/* s2. update cur_network */
1090 			if (ptarget_wlan) {
1091 				rtw_joinbss_update_network(adapter, ptarget_wlan, pnetwork);
1092 			} else {
1093 				RT_TRACE(_module_rtl871x_mlme_c_, _drv_err_, ("Can't find ptarget_wlan when joinbss_event callback\n"));
1094 				spin_unlock_bh(&pmlmepriv->scanned_queue.lock);
1095 				goto ignore_joinbss_callback;
1096 			}
1097 
1098 
1099 			/* s3. find ptarget_sta & update ptarget_sta after update cur_network only for station mode */
1100 			if (check_fwstate(pmlmepriv, WIFI_STATION_STATE) == true) {
1101 				ptarget_sta = rtw_joinbss_update_stainfo(adapter, pnetwork);
1102 				if (ptarget_sta == NULL) {
1103 					RT_TRACE(_module_rtl871x_mlme_c_, _drv_err_, ("Can't update stainfo when joinbss_event callback\n"));
1104 					spin_unlock_bh(&pmlmepriv->scanned_queue.lock);
1105 					goto ignore_joinbss_callback;
1106 				}
1107 			}
1108 
1109 			/* s4. indicate connect */
1110 				if (check_fwstate(pmlmepriv, WIFI_STATION_STATE) == true) {
1111 					rtw_indicate_connect(adapter);
1112 				} else {
1113 					/* adhoc mode will rtw_indicate_connect when rtw_stassoc_event_callback */
1114 					RT_TRACE(_module_rtl871x_mlme_c_, _drv_info_, ("adhoc mode, fw_state:%x", get_fwstate(pmlmepriv)));
1115 				}
1116 
1117 			/* s5. Cancle assoc_timer */
1118 			del_timer_sync(&pmlmepriv->assoc_timer);
1119 
1120 			RT_TRACE(_module_rtl871x_mlme_c_, _drv_info_, ("Cancle assoc_timer\n"));
1121 
1122 		} else {
1123 			RT_TRACE(_module_rtl871x_mlme_c_, _drv_err_, ("rtw_joinbss_event_callback err: fw_state:%x", get_fwstate(pmlmepriv)));
1124 			spin_unlock_bh(&pmlmepriv->scanned_queue.lock);
1125 			goto ignore_joinbss_callback;
1126 		}
1127 
1128 		spin_unlock_bh(&pmlmepriv->scanned_queue.lock);
1129 
1130 	} else if (pnetwork->join_res == -4) {
1131 		rtw_reset_securitypriv(adapter);
1132 		mod_timer(&pmlmepriv->assoc_timer,
1133 			  jiffies + msecs_to_jiffies(1));
1134 
1135 		if ((check_fwstate(pmlmepriv, _FW_UNDER_LINKING)) == true) {
1136 			RT_TRACE(_module_rtl871x_mlme_c_, _drv_err_, ("fail! clear _FW_UNDER_LINKING ^^^fw_state=%x\n", get_fwstate(pmlmepriv)));
1137 			_clr_fwstate_(pmlmepriv, _FW_UNDER_LINKING);
1138 		}
1139 	} else { /* if join_res < 0 (join fails), then try again */
1140 		mod_timer(&pmlmepriv->assoc_timer,
1141 			  jiffies + msecs_to_jiffies(1));
1142 		_clr_fwstate_(pmlmepriv, _FW_UNDER_LINKING);
1143 	}
1144 
1145 ignore_joinbss_callback:
1146 	spin_unlock_bh(&pmlmepriv->lock);
1147 }
1148 
rtw_joinbss_event_callback(struct adapter * adapter,u8 * pbuf)1149 void rtw_joinbss_event_callback(struct adapter *adapter, u8 *pbuf)
1150 {
1151 	struct wlan_network	*pnetwork	= (struct wlan_network *)pbuf;
1152 
1153 	mlmeext_joinbss_event_callback(adapter, pnetwork->join_res);
1154 
1155 	rtw_os_xmit_schedule(adapter);
1156 }
1157 
search_max_mac_id(struct adapter * padapter)1158 static u8 search_max_mac_id(struct adapter *padapter)
1159 {
1160 	u8 mac_id;
1161 #if defined(CONFIG_88EU_AP_MODE)
1162 	u8 aid;
1163 	struct mlme_priv *pmlmepriv = &(padapter->mlmepriv);
1164 	struct sta_priv *pstapriv = &padapter->stapriv;
1165 #endif
1166 	struct mlme_ext_priv *pmlmeext = &(padapter->mlmeextpriv);
1167 	struct mlme_ext_info	*pmlmeinfo = &(pmlmeext->mlmext_info);
1168 
1169 #if defined(CONFIG_88EU_AP_MODE)
1170 	if (check_fwstate(pmlmepriv, WIFI_AP_STATE)) {
1171 		for (aid = (pstapriv->max_num_sta); aid > 0; aid--) {
1172 			if (pstapriv->sta_aid[aid-1] != NULL)
1173 				break;
1174 		}
1175 		mac_id = aid + 1;
1176 	} else
1177 #endif
1178 	{/* adhoc  id =  31~2 */
1179 		for (mac_id = (NUM_STA-1); mac_id >= IBSS_START_MAC_ID; mac_id--) {
1180 			if (pmlmeinfo->FW_sta_info[mac_id].status == 1)
1181 				break;
1182 		}
1183 	}
1184 	return mac_id;
1185 }
1186 
1187 /* FOR AP , AD-HOC mode */
rtw_stassoc_hw_rpt(struct adapter * adapter,struct sta_info * psta)1188 void rtw_stassoc_hw_rpt(struct adapter *adapter, struct sta_info *psta)
1189 {
1190 	u16 media_status;
1191 	u8 macid;
1192 
1193 	if (psta == NULL)
1194 		return;
1195 
1196 	macid = search_max_mac_id(adapter);
1197 	rtw_hal_set_hwreg(adapter, HW_VAR_TX_RPT_MAX_MACID, (u8 *)&macid);
1198 	media_status = (psta->mac_id<<8)|1; /*   MACID|OPMODE:1 connect */
1199 	rtw_hal_set_hwreg(adapter, HW_VAR_H2C_MEDIA_STATUS_RPT, (u8 *)&media_status);
1200 }
1201 
rtw_stassoc_event_callback(struct adapter * adapter,u8 * pbuf)1202 void rtw_stassoc_event_callback(struct adapter *adapter, u8 *pbuf)
1203 {
1204 	struct sta_info *psta;
1205 	struct mlme_priv *pmlmepriv = &(adapter->mlmepriv);
1206 	struct stassoc_event	*pstassoc = (struct stassoc_event *)pbuf;
1207 	struct wlan_network	*cur_network = &(pmlmepriv->cur_network);
1208 	struct wlan_network	*ptarget_wlan = NULL;
1209 
1210 	if (rtw_access_ctrl(adapter, pstassoc->macaddr) == false)
1211 		return;
1212 
1213 #if defined(CONFIG_88EU_AP_MODE)
1214 	if (check_fwstate(pmlmepriv, WIFI_AP_STATE)) {
1215 		psta = rtw_get_stainfo(&adapter->stapriv, pstassoc->macaddr);
1216 		if (psta) {
1217 			ap_sta_info_defer_update(adapter, psta);
1218 			rtw_stassoc_hw_rpt(adapter, psta);
1219 		}
1220 		return;
1221 	}
1222 #endif
1223 	/* for AD-HOC mode */
1224 	psta = rtw_get_stainfo(&adapter->stapriv, pstassoc->macaddr);
1225 	if (psta != NULL) {
1226 		/* the sta have been in sta_info_queue => do nothing */
1227 		RT_TRACE(_module_rtl871x_mlme_c_, _drv_err_, ("Error: rtw_stassoc_event_callback: sta has been in sta_hash_queue\n"));
1228 		return; /* between drv has received this event before and  fw have not yet to set key to CAM_ENTRY) */
1229 	}
1230 	psta = rtw_alloc_stainfo(&adapter->stapriv, pstassoc->macaddr);
1231 	if (psta == NULL) {
1232 		RT_TRACE(_module_rtl871x_mlme_c_, _drv_err_, ("Can't alloc sta_info when rtw_stassoc_event_callback\n"));
1233 		return;
1234 	}
1235 	/* to do: init sta_info variable */
1236 	psta->qos_option = 0;
1237 	psta->mac_id = (uint)pstassoc->cam_id;
1238 	DBG_88E("%s\n", __func__);
1239 	/* for ad-hoc mode */
1240 	rtw_hal_set_odm_var(adapter, HAL_ODM_STA_INFO, psta, true);
1241 	rtw_stassoc_hw_rpt(adapter, psta);
1242 	if (adapter->securitypriv.dot11AuthAlgrthm == dot11AuthAlgrthm_8021X)
1243 		psta->dot118021XPrivacy = adapter->securitypriv.dot11PrivacyAlgrthm;
1244 	psta->ieee8021x_blocked = false;
1245 	spin_lock_bh(&pmlmepriv->lock);
1246 	if ((check_fwstate(pmlmepriv, WIFI_ADHOC_MASTER_STATE)) ||
1247 	    (check_fwstate(pmlmepriv, WIFI_ADHOC_STATE))) {
1248 		if (adapter->stapriv.asoc_sta_count == 2) {
1249 			spin_lock_bh(&(pmlmepriv->scanned_queue.lock));
1250 			ptarget_wlan = rtw_find_network(&pmlmepriv->scanned_queue, cur_network->network.MacAddress);
1251 			if (ptarget_wlan)
1252 				ptarget_wlan->fixed = true;
1253 			spin_unlock_bh(&pmlmepriv->scanned_queue.lock);
1254 			/*  a sta + bc/mc_stainfo (not Ibss_stainfo) */
1255 			rtw_indicate_connect(adapter);
1256 		}
1257 	}
1258 	spin_unlock_bh(&pmlmepriv->lock);
1259 	mlmeext_sta_add_event_callback(adapter, psta);
1260 }
1261 
rtw_stadel_event_callback(struct adapter * adapter,u8 * pbuf)1262 void rtw_stadel_event_callback(struct adapter *adapter, u8 *pbuf)
1263 {
1264 	int mac_id = -1;
1265 	struct sta_info *psta;
1266 	struct wlan_network *pwlan = NULL;
1267 	struct wlan_bssid_ex *pdev_network = NULL;
1268 	u8 *pibss = NULL;
1269 	struct	mlme_priv *pmlmepriv = &(adapter->mlmepriv);
1270 	struct	stadel_event *pstadel = (struct stadel_event *)pbuf;
1271 	struct	sta_priv *pstapriv = &adapter->stapriv;
1272 	struct wlan_network *tgt_network = &(pmlmepriv->cur_network);
1273 
1274 	psta = rtw_get_stainfo(&adapter->stapriv, pstadel->macaddr);
1275 	if (psta)
1276 		mac_id = psta->mac_id;
1277 	else
1278 		mac_id = pstadel->mac_id;
1279 
1280 	DBG_88E("%s(mac_id=%d)=%pM\n", __func__, mac_id, pstadel->macaddr);
1281 
1282 	if (mac_id >= 0) {
1283 		u16 media_status;
1284 		media_status = (mac_id<<8)|0; /*   MACID|OPMODE:0 means disconnect */
1285 		/* for STA, AP, ADHOC mode, report disconnect stauts to FW */
1286 		rtw_hal_set_hwreg(adapter, HW_VAR_H2C_MEDIA_STATUS_RPT, (u8 *)&media_status);
1287 	}
1288 
1289 	if (check_fwstate(pmlmepriv, WIFI_AP_STATE))
1290 		return;
1291 
1292 	mlmeext_sta_del_event_callback(adapter);
1293 
1294 	spin_lock_bh(&pmlmepriv->lock);
1295 
1296 	if (check_fwstate(pmlmepriv, WIFI_STATION_STATE)) {
1297 		if (pmlmepriv->to_roaming > 0)
1298 			pmlmepriv->to_roaming--; /*  this stadel_event is caused by roaming, decrease to_roaming */
1299 		else if (pmlmepriv->to_roaming == 0)
1300 			pmlmepriv->to_roaming = adapter->registrypriv.max_roaming_times;
1301 
1302 		if (*((unsigned short *)(pstadel->rsvd)) != WLAN_REASON_EXPIRATION_CHK)
1303 			pmlmepriv->to_roaming = 0; /*  don't roam */
1304 
1305 		rtw_free_uc_swdec_pending_queue(adapter);
1306 
1307 		rtw_free_assoc_resources(adapter, 1);
1308 		rtw_indicate_disconnect(adapter);
1309 		spin_lock_bh(&(pmlmepriv->scanned_queue.lock));
1310 		/*  remove the network entry in scanned_queue */
1311 		pwlan = rtw_find_network(&pmlmepriv->scanned_queue, tgt_network->network.MacAddress);
1312 		if (pwlan) {
1313 			pwlan->fixed = false;
1314 			rtw_free_network_nolock(pmlmepriv, pwlan);
1315 		}
1316 		spin_unlock_bh(&pmlmepriv->scanned_queue.lock);
1317 		_rtw_roaming(adapter, tgt_network);
1318 	}
1319 	if (check_fwstate(pmlmepriv, WIFI_ADHOC_MASTER_STATE) ||
1320 	    check_fwstate(pmlmepriv, WIFI_ADHOC_STATE)) {
1321 		spin_lock_bh(&(pstapriv->sta_hash_lock));
1322 		rtw_free_stainfo(adapter,  psta);
1323 		spin_unlock_bh(&pstapriv->sta_hash_lock);
1324 
1325 		if (adapter->stapriv.asoc_sta_count == 1) { /* a sta + bc/mc_stainfo (not Ibss_stainfo) */
1326 			spin_lock_bh(&(pmlmepriv->scanned_queue.lock));
1327 			/* free old ibss network */
1328 			pwlan = rtw_find_network(&pmlmepriv->scanned_queue, tgt_network->network.MacAddress);
1329 			if (pwlan) {
1330 				pwlan->fixed = false;
1331 				rtw_free_network_nolock(pmlmepriv, pwlan);
1332 			}
1333 			spin_unlock_bh(&pmlmepriv->scanned_queue.lock);
1334 			/* re-create ibss */
1335 			pdev_network = &(adapter->registrypriv.dev_network);
1336 			pibss = adapter->registrypriv.dev_network.MacAddress;
1337 
1338 			memcpy(pdev_network, &tgt_network->network, get_wlan_bssid_ex_sz(&tgt_network->network));
1339 
1340 			memcpy(&pdev_network->Ssid, &pmlmepriv->assoc_ssid, sizeof(struct ndis_802_11_ssid));
1341 
1342 			rtw_update_registrypriv_dev_network(adapter);
1343 
1344 			rtw_generate_random_ibss(pibss);
1345 
1346 			if (check_fwstate(pmlmepriv, WIFI_ADHOC_STATE)) {
1347 				set_fwstate(pmlmepriv, WIFI_ADHOC_MASTER_STATE);
1348 				_clr_fwstate_(pmlmepriv, WIFI_ADHOC_STATE);
1349 			}
1350 
1351 			if (rtw_createbss_cmd(adapter) != _SUCCESS)
1352 				RT_TRACE(_module_rtl871x_ioctl_set_c_, _drv_err_, ("***Error=>stadel_event_callback: rtw_createbss_cmd status FAIL***\n "));
1353 		}
1354 	}
1355 	spin_unlock_bh(&pmlmepriv->lock);
1356 }
1357 
rtw_cpwm_event_callback(struct adapter * padapter,u8 * pbuf)1358 void rtw_cpwm_event_callback(struct adapter *padapter, u8 *pbuf)
1359 {
1360 	RT_TRACE(_module_rtl871x_mlme_c_, _drv_err_, ("+rtw_cpwm_event_callback !!!\n"));
1361 }
1362 
1363 /*
1364 * _rtw_join_timeout_handler - Timeout/faliure handler for CMD JoinBss
1365 * @adapter: pointer to struct adapter structure
1366 */
_rtw_join_timeout_handler(unsigned long data)1367 void _rtw_join_timeout_handler (unsigned long data)
1368 {
1369 	struct adapter *adapter = (struct adapter *)data;
1370 	struct	mlme_priv *pmlmepriv = &adapter->mlmepriv;
1371 	int do_join_r;
1372 
1373 	DBG_88E("%s, fw_state=%x\n", __func__, get_fwstate(pmlmepriv));
1374 
1375 	if (adapter->bDriverStopped || adapter->bSurpriseRemoved)
1376 		return;
1377 
1378 
1379 	spin_lock_bh(&pmlmepriv->lock);
1380 
1381 	if (pmlmepriv->to_roaming > 0) { /*  join timeout caused by roaming */
1382 		while (1) {
1383 			pmlmepriv->to_roaming--;
1384 			if (pmlmepriv->to_roaming != 0) { /* try another , */
1385 				DBG_88E("%s try another roaming\n", __func__);
1386 				do_join_r = rtw_do_join(adapter);
1387 				if (_SUCCESS != do_join_r) {
1388 					DBG_88E("%s roaming do_join return %d\n", __func__ , do_join_r);
1389 					continue;
1390 				}
1391 				break;
1392 			} else {
1393 				DBG_88E("%s We've try roaming but fail\n", __func__);
1394 				rtw_indicate_disconnect(adapter);
1395 				break;
1396 			}
1397 		}
1398 	} else {
1399 		rtw_indicate_disconnect(adapter);
1400 		free_scanqueue(pmlmepriv);/*  */
1401 	}
1402 	spin_unlock_bh(&pmlmepriv->lock);
1403 }
1404 
1405 /*
1406 * rtw_scan_timeout_handler - Timeout/Faliure handler for CMD SiteSurvey
1407 * @adapter: pointer to struct adapter structure
1408 */
rtw_scan_timeout_handler(unsigned long data)1409 void rtw_scan_timeout_handler (unsigned long data)
1410 {
1411 	struct adapter *adapter = (struct adapter *)data;
1412 	struct	mlme_priv *pmlmepriv = &adapter->mlmepriv;
1413 
1414 	DBG_88E(FUNC_ADPT_FMT" fw_state=%x\n", FUNC_ADPT_ARG(adapter), get_fwstate(pmlmepriv));
1415 	spin_lock_bh(&pmlmepriv->lock);
1416 	_clr_fwstate_(pmlmepriv, _FW_UNDER_SURVEY);
1417 	spin_unlock_bh(&pmlmepriv->lock);
1418 	rtw_indicate_scan_done(adapter, true);
1419 }
1420 
rtw_auto_scan_handler(struct adapter * padapter)1421 static void rtw_auto_scan_handler(struct adapter *padapter)
1422 {
1423 	struct mlme_priv *pmlmepriv = &padapter->mlmepriv;
1424 
1425 	/* auto site survey per 60sec */
1426 	if (pmlmepriv->scan_interval > 0) {
1427 		pmlmepriv->scan_interval--;
1428 		if (pmlmepriv->scan_interval == 0) {
1429 			DBG_88E("%s\n", __func__);
1430 			rtw_set_802_11_bssid_list_scan(padapter, NULL, 0);
1431 			pmlmepriv->scan_interval = SCAN_INTERVAL;/*  30*2 sec = 60sec */
1432 		}
1433 	}
1434 }
1435 
rtw_dynamic_check_timer_handlder(unsigned long data)1436 void rtw_dynamic_check_timer_handlder(unsigned long data)
1437 {
1438 	struct adapter *adapter = (struct adapter *)data;
1439 	struct registry_priv *pregistrypriv = &adapter->registrypriv;
1440 
1441 	if (!adapter)
1442 		return;
1443 	if (!adapter->hw_init_completed)
1444 		goto exit;
1445 	if ((adapter->bDriverStopped) || (adapter->bSurpriseRemoved))
1446 		goto exit;
1447 	if (adapter->net_closed)
1448 		goto exit;
1449 	rtw_dynamic_chk_wk_cmd(adapter);
1450 
1451 	if (pregistrypriv->wifi_spec == 1) {
1452 		/* auto site survey */
1453 		rtw_auto_scan_handler(adapter);
1454 	}
1455 exit:
1456 	mod_timer(&adapter->mlmepriv.dynamic_chk_timer,
1457 		  jiffies + msecs_to_jiffies(2000));
1458 }
1459 
1460 #define RTW_SCAN_RESULT_EXPIRE 2000
1461 
1462 /*
1463 * Select a new join candidate from the original @param candidate and @param competitor
1464 * @return true: candidate is updated
1465 * @return false: candidate is not updated
1466 */
rtw_check_join_candidate(struct mlme_priv * pmlmepriv,struct wlan_network ** candidate,struct wlan_network * competitor)1467 static int rtw_check_join_candidate(struct mlme_priv *pmlmepriv
1468 	, struct wlan_network **candidate, struct wlan_network *competitor)
1469 {
1470 	int updated = false;
1471 	struct adapter *adapter = container_of(pmlmepriv, struct adapter, mlmepriv);
1472 
1473 
1474 	/* check bssid, if needed */
1475 	if (pmlmepriv->assoc_by_bssid) {
1476 		if (memcmp(competitor->network.MacAddress, pmlmepriv->assoc_bssid, ETH_ALEN))
1477 			goto exit;
1478 	}
1479 
1480 	/* check ssid, if needed */
1481 	if (pmlmepriv->assoc_ssid.SsidLength) {
1482 		if (competitor->network.Ssid.SsidLength != pmlmepriv->assoc_ssid.SsidLength ||
1483 		    !memcmp(competitor->network.Ssid.Ssid, pmlmepriv->assoc_ssid.Ssid, pmlmepriv->assoc_ssid.SsidLength) == false)
1484 			goto exit;
1485 	}
1486 
1487 	if (rtw_is_desired_network(adapter, competitor)  == false)
1488 		goto exit;
1489 
1490 	if (pmlmepriv->to_roaming) {
1491 		if (rtw_get_passing_time_ms((u32)competitor->last_scanned) >= RTW_SCAN_RESULT_EXPIRE ||
1492 		    is_same_ess(&competitor->network, &pmlmepriv->cur_network.network) == false)
1493 			goto exit;
1494 	}
1495 
1496 	if (*candidate == NULL || (*candidate)->network.Rssi < competitor->network.Rssi) {
1497 		*candidate = competitor;
1498 		updated = true;
1499 	}
1500 	if (updated) {
1501 		DBG_88E("[by_bssid:%u][assoc_ssid:%s]new candidate: %s(%pM rssi:%d\n",
1502 			pmlmepriv->assoc_by_bssid,
1503 			pmlmepriv->assoc_ssid.Ssid,
1504 			(*candidate)->network.Ssid.Ssid,
1505 			(*candidate)->network.MacAddress,
1506 			(int)(*candidate)->network.Rssi);
1507 		DBG_88E("[to_roaming:%u]\n", pmlmepriv->to_roaming);
1508 	}
1509 
1510 exit:
1511 	return updated;
1512 }
1513 
1514 /*
1515 Calling context:
1516 The caller of the sub-routine will be in critical section...
1517 The caller must hold the following spinlock
1518 pmlmepriv->lock
1519 */
1520 
rtw_select_and_join_from_scanned_queue(struct mlme_priv * pmlmepriv)1521 int rtw_select_and_join_from_scanned_queue(struct mlme_priv *pmlmepriv)
1522 {
1523 	int ret;
1524 	struct list_head *phead;
1525 	struct adapter *adapter;
1526 	struct __queue *queue	= &(pmlmepriv->scanned_queue);
1527 	struct	wlan_network	*pnetwork = NULL;
1528 	struct	wlan_network	*candidate = NULL;
1529 	u8	supp_ant_div = false;
1530 
1531 	spin_lock_bh(&(pmlmepriv->scanned_queue.lock));
1532 	phead = get_list_head(queue);
1533 	adapter = (struct adapter *)pmlmepriv->nic_hdl;
1534 	pmlmepriv->pscanned = phead->next;
1535 	while (phead != pmlmepriv->pscanned) {
1536 		pnetwork = container_of(pmlmepriv->pscanned, struct wlan_network, list);
1537 		if (pnetwork == NULL) {
1538 			RT_TRACE(_module_rtl871x_mlme_c_, _drv_err_, ("%s return _FAIL:(pnetwork==NULL)\n", __func__));
1539 			ret = _FAIL;
1540 			goto exit;
1541 		}
1542 		pmlmepriv->pscanned = pmlmepriv->pscanned->next;
1543 		rtw_check_join_candidate(pmlmepriv, &candidate, pnetwork);
1544 	}
1545 	if (candidate == NULL) {
1546 		DBG_88E("%s: return _FAIL(candidate==NULL)\n", __func__);
1547 		ret = _FAIL;
1548 		goto exit;
1549 	} else {
1550 		DBG_88E("%s: candidate: %s(%pM ch:%u)\n", __func__,
1551 			candidate->network.Ssid.Ssid, candidate->network.MacAddress,
1552 			candidate->network.Configuration.DSConfig);
1553 	}
1554 
1555 
1556 	/*  check for situation of  _FW_LINKED */
1557 	if (check_fwstate(pmlmepriv, _FW_LINKED) == true) {
1558 		DBG_88E("%s: _FW_LINKED while ask_for_joinbss!!!\n", __func__);
1559 
1560 		rtw_disassoc_cmd(adapter, 0, true);
1561 		rtw_indicate_disconnect(adapter);
1562 		rtw_free_assoc_resources(adapter, 0);
1563 	}
1564 
1565 	rtw_hal_get_def_var(adapter, HAL_DEF_IS_SUPPORT_ANT_DIV, &(supp_ant_div));
1566 	if (supp_ant_div) {
1567 		u8 cur_ant;
1568 		rtw_hal_get_def_var(adapter, HAL_DEF_CURRENT_ANTENNA, &(cur_ant));
1569 		DBG_88E("#### Opt_Ant_(%s), cur_Ant(%s)\n",
1570 			(2 == candidate->network.PhyInfo.Optimum_antenna) ? "A" : "B",
1571 			(2 == cur_ant) ? "A" : "B"
1572 		);
1573 	}
1574 
1575 	ret = rtw_joinbss_cmd(adapter, candidate);
1576 
1577 exit:
1578 	spin_unlock_bh(&pmlmepriv->scanned_queue.lock);
1579 	return ret;
1580 }
1581 
rtw_set_auth(struct adapter * adapter,struct security_priv * psecuritypriv)1582 int rtw_set_auth(struct adapter *adapter, struct security_priv *psecuritypriv)
1583 {
1584 	struct	cmd_obj *pcmd;
1585 	struct	setauth_parm *psetauthparm;
1586 	struct	cmd_priv *pcmdpriv = &(adapter->cmdpriv);
1587 	int		res = _SUCCESS;
1588 
1589 	pcmd = kzalloc(sizeof(struct cmd_obj), GFP_KERNEL);
1590 	if (pcmd == NULL) {
1591 		res = _FAIL;  /* try again */
1592 		goto exit;
1593 	}
1594 
1595 	psetauthparm = kzalloc(sizeof(struct setauth_parm), GFP_KERNEL);
1596 	if (psetauthparm == NULL) {
1597 		kfree(pcmd);
1598 		res = _FAIL;
1599 		goto exit;
1600 	}
1601 	memset(psetauthparm, 0, sizeof(struct setauth_parm));
1602 	psetauthparm->mode = (unsigned char)psecuritypriv->dot11AuthAlgrthm;
1603 	pcmd->cmdcode = _SetAuth_CMD_;
1604 	pcmd->parmbuf = (unsigned char *)psetauthparm;
1605 	pcmd->cmdsz =  (sizeof(struct setauth_parm));
1606 	pcmd->rsp = NULL;
1607 	pcmd->rspsz = 0;
1608 	INIT_LIST_HEAD(&pcmd->list);
1609 	RT_TRACE(_module_rtl871x_mlme_c_, _drv_err_,
1610 		 ("after enqueue set_auth_cmd, auth_mode=%x\n",
1611 		 psecuritypriv->dot11AuthAlgrthm));
1612 	res = rtw_enqueue_cmd(pcmdpriv, pcmd);
1613 exit:
1614 	return res;
1615 }
1616 
rtw_set_key(struct adapter * adapter,struct security_priv * psecuritypriv,int keyid,u8 set_tx)1617 int rtw_set_key(struct adapter *adapter, struct security_priv *psecuritypriv, int keyid, u8 set_tx)
1618 {
1619 	u8	keylen;
1620 	struct cmd_obj		*pcmd;
1621 	struct setkey_parm	*psetkeyparm;
1622 	struct cmd_priv		*pcmdpriv = &(adapter->cmdpriv);
1623 	struct mlme_priv		*pmlmepriv = &(adapter->mlmepriv);
1624 	int	res = _SUCCESS;
1625 
1626 	pcmd = kzalloc(sizeof(struct cmd_obj), GFP_KERNEL);
1627 	if (pcmd == NULL)
1628 		return _FAIL;  /* try again */
1629 
1630 	psetkeyparm = kzalloc(sizeof(struct setkey_parm), GFP_KERNEL);
1631 	if (psetkeyparm == NULL) {
1632 		res = _FAIL;
1633 		goto err_free_cmd;
1634 	}
1635 
1636 	memset(psetkeyparm, 0, sizeof(struct setkey_parm));
1637 
1638 	if (psecuritypriv->dot11AuthAlgrthm == dot11AuthAlgrthm_8021X) {
1639 		psetkeyparm->algorithm = (unsigned char)psecuritypriv->dot118021XGrpPrivacy;
1640 		RT_TRACE(_module_rtl871x_mlme_c_, _drv_err_,
1641 			 ("\n rtw_set_key: psetkeyparm->algorithm=(unsigned char)psecuritypriv->dot118021XGrpPrivacy=%d\n",
1642 			 psetkeyparm->algorithm));
1643 	} else {
1644 		psetkeyparm->algorithm = (u8)psecuritypriv->dot11PrivacyAlgrthm;
1645 		RT_TRACE(_module_rtl871x_mlme_c_, _drv_err_,
1646 			 ("\n rtw_set_key: psetkeyparm->algorithm=(u8)psecuritypriv->dot11PrivacyAlgrthm=%d\n",
1647 			 psetkeyparm->algorithm));
1648 	}
1649 	psetkeyparm->keyid = (u8)keyid;/* 0~3 */
1650 	psetkeyparm->set_tx = set_tx;
1651 	pmlmepriv->key_mask |= BIT(psetkeyparm->keyid);
1652 	DBG_88E("==> rtw_set_key algorithm(%x), keyid(%x), key_mask(%x)\n",
1653 		psetkeyparm->algorithm, psetkeyparm->keyid, pmlmepriv->key_mask);
1654 	RT_TRACE(_module_rtl871x_mlme_c_, _drv_err_,
1655 		 ("\n rtw_set_key: psetkeyparm->algorithm=%d psetkeyparm->keyid=(u8)keyid=%d\n",
1656 		 psetkeyparm->algorithm, keyid));
1657 
1658 	switch (psetkeyparm->algorithm) {
1659 	case _WEP40_:
1660 		keylen = 5;
1661 		memcpy(&(psetkeyparm->key[0]), &(psecuritypriv->dot11DefKey[keyid].skey[0]), keylen);
1662 		break;
1663 	case _WEP104_:
1664 		keylen = 13;
1665 		memcpy(&(psetkeyparm->key[0]), &(psecuritypriv->dot11DefKey[keyid].skey[0]), keylen);
1666 		break;
1667 	case _TKIP_:
1668 		keylen = 16;
1669 		memcpy(&psetkeyparm->key, &psecuritypriv->dot118021XGrpKey[keyid], keylen);
1670 		psetkeyparm->grpkey = 1;
1671 		break;
1672 	case _AES_:
1673 		keylen = 16;
1674 		memcpy(&psetkeyparm->key, &psecuritypriv->dot118021XGrpKey[keyid], keylen);
1675 		psetkeyparm->grpkey = 1;
1676 		break;
1677 	default:
1678 		RT_TRACE(_module_rtl871x_mlme_c_, _drv_err_,
1679 			 ("\n rtw_set_key:psecuritypriv->dot11PrivacyAlgrthm=%x (must be 1 or 2 or 4 or 5)\n",
1680 			 psecuritypriv->dot11PrivacyAlgrthm));
1681 		res = _FAIL;
1682 		goto err_free_parm;
1683 	}
1684 	pcmd->cmdcode = _SetKey_CMD_;
1685 	pcmd->parmbuf = (u8 *)psetkeyparm;
1686 	pcmd->cmdsz =  (sizeof(struct setkey_parm));
1687 	pcmd->rsp = NULL;
1688 	pcmd->rspsz = 0;
1689 	INIT_LIST_HEAD(&pcmd->list);
1690 	res = rtw_enqueue_cmd(pcmdpriv, pcmd);
1691 	return res;
1692 
1693 err_free_parm:
1694 	kfree(psetkeyparm);
1695 err_free_cmd:
1696 	kfree(pcmd);
1697 	return res;
1698 }
1699 
1700 /* adjust IEs for rtw_joinbss_cmd in WMM */
rtw_restruct_wmm_ie(struct adapter * adapter,u8 * in_ie,u8 * out_ie,uint in_len,uint initial_out_len)1701 int rtw_restruct_wmm_ie(struct adapter *adapter, u8 *in_ie, u8 *out_ie, uint in_len, uint initial_out_len)
1702 {
1703 	unsigned	int ielength = 0;
1704 	unsigned int i, j;
1705 
1706 	i = 12; /* after the fixed IE */
1707 	while (i < in_len) {
1708 		ielength = initial_out_len;
1709 
1710 		if (in_ie[i] == 0xDD && in_ie[i+2] == 0x00 && in_ie[i+3] == 0x50  && in_ie[i+4] == 0xF2 && in_ie[i+5] == 0x02 && i+5 < in_len) {
1711 			/* WMM element ID and OUI */
1712 			/* Append WMM IE to the last index of out_ie */
1713 
1714 			for (j = i; j < i + 9; j++) {
1715 				out_ie[ielength] = in_ie[j];
1716 				ielength++;
1717 			}
1718 			out_ie[initial_out_len + 1] = 0x07;
1719 			out_ie[initial_out_len + 6] = 0x00;
1720 			out_ie[initial_out_len + 8] = 0x00;
1721 			break;
1722 		}
1723 		i += (in_ie[i+1]+2); /*  to the next IE element */
1724 	}
1725 	return ielength;
1726 }
1727 
1728 /*
1729  * Ported from 8185: IsInPreAuthKeyList().
1730  * (Renamed from SecIsInPreAuthKeyList(), 2006-10-13.)
1731  * Added by Annie, 2006-05-07.
1732  * Search by BSSID,
1733  * Return Value:
1734  *		-1	:if there is no pre-auth key in the table
1735  *		>= 0	:if there is pre-auth key, and return the entry id
1736  */
SecIsInPMKIDList(struct adapter * Adapter,u8 * bssid)1737 static int SecIsInPMKIDList(struct adapter *Adapter, u8 *bssid)
1738 {
1739 	struct security_priv *psecuritypriv = &Adapter->securitypriv;
1740 	int i = 0;
1741 
1742 	do {
1743 		if ((psecuritypriv->PMKIDList[i].bUsed) &&
1744 		    (!memcmp(psecuritypriv->PMKIDList[i].Bssid, bssid, ETH_ALEN))) {
1745 			break;
1746 		} else {
1747 			i++;
1748 			/* continue; */
1749 		}
1750 
1751 	} while (i < NUM_PMKID_CACHE);
1752 
1753 	if (i == NUM_PMKID_CACHE)
1754 		i = -1;/*  Could not find. */
1755 
1756 	return i;
1757 }
1758 
1759 /*  */
1760 /*  Check the RSN IE length */
1761 /*  If the RSN IE length <= 20, the RSN IE didn't include the PMKID information */
1762 /*  0-11th element in the array are the fixed IE */
1763 /*  12th element in the array is the IE */
1764 /*  13th element in the array is the IE length */
1765 /*  */
1766 
rtw_append_pmkid(struct adapter * Adapter,int iEntry,u8 * ie,uint ie_len)1767 static int rtw_append_pmkid(struct adapter *Adapter, int iEntry, u8 *ie, uint ie_len)
1768 {
1769 	struct security_priv *psecuritypriv = &Adapter->securitypriv;
1770 
1771 	if (ie[13] <= 20) {
1772 		/*  The RSN IE didn't include the PMK ID, append the PMK information */
1773 		ie[ie_len] = 1;
1774 		ie_len++;
1775 		ie[ie_len] = 0;	/* PMKID count = 0x0100 */
1776 		ie_len++;
1777 		memcpy(&ie[ie_len], &psecuritypriv->PMKIDList[iEntry].PMKID, 16);
1778 
1779 		ie_len += 16;
1780 		ie[13] += 18;/* PMKID length = 2+16 */
1781 	}
1782 	return ie_len;
1783 }
1784 
rtw_restruct_sec_ie(struct adapter * adapter,u8 * in_ie,u8 * out_ie,uint in_len)1785 int rtw_restruct_sec_ie(struct adapter *adapter, u8 *in_ie, u8 *out_ie, uint in_len)
1786 {
1787 	u8 authmode;
1788 	uint	ielength;
1789 	int iEntry;
1790 
1791 	struct mlme_priv *pmlmepriv = &adapter->mlmepriv;
1792 	struct security_priv *psecuritypriv = &adapter->securitypriv;
1793 	uint	ndisauthmode = psecuritypriv->ndisauthtype;
1794 	uint ndissecuritytype = psecuritypriv->ndisencryptstatus;
1795 
1796 	RT_TRACE(_module_rtl871x_mlme_c_, _drv_notice_,
1797 		 ("+rtw_restruct_sec_ie: ndisauthmode=%d ndissecuritytype=%d\n",
1798 		  ndisauthmode, ndissecuritytype));
1799 
1800 	/* copy fixed ie only */
1801 	memcpy(out_ie, in_ie, 12);
1802 	ielength = 12;
1803 	if ((ndisauthmode == Ndis802_11AuthModeWPA) ||
1804 	    (ndisauthmode == Ndis802_11AuthModeWPAPSK))
1805 			authmode = _WPA_IE_ID_;
1806 	if ((ndisauthmode == Ndis802_11AuthModeWPA2) ||
1807 	    (ndisauthmode == Ndis802_11AuthModeWPA2PSK))
1808 		authmode = _WPA2_IE_ID_;
1809 
1810 	if (check_fwstate(pmlmepriv, WIFI_UNDER_WPS)) {
1811 		memcpy(out_ie+ielength, psecuritypriv->wps_ie, psecuritypriv->wps_ie_len);
1812 
1813 		ielength += psecuritypriv->wps_ie_len;
1814 	} else if ((authmode == _WPA_IE_ID_) || (authmode == _WPA2_IE_ID_)) {
1815 		/* copy RSN or SSN */
1816 		memcpy(&out_ie[ielength], &psecuritypriv->supplicant_ie[0], psecuritypriv->supplicant_ie[1]+2);
1817 		ielength += psecuritypriv->supplicant_ie[1]+2;
1818 		rtw_report_sec_ie(adapter, authmode, psecuritypriv->supplicant_ie);
1819 	}
1820 
1821 	iEntry = SecIsInPMKIDList(adapter, pmlmepriv->assoc_bssid);
1822 	if (iEntry < 0) {
1823 		return ielength;
1824 	} else {
1825 		if (authmode == _WPA2_IE_ID_)
1826 			ielength = rtw_append_pmkid(adapter, iEntry, out_ie, ielength);
1827 	}
1828 	return ielength;
1829 }
1830 
rtw_init_registrypriv_dev_network(struct adapter * adapter)1831 void rtw_init_registrypriv_dev_network(struct adapter *adapter)
1832 {
1833 	struct registry_priv *pregistrypriv = &adapter->registrypriv;
1834 	struct eeprom_priv *peepriv = &adapter->eeprompriv;
1835 	struct wlan_bssid_ex    *pdev_network = &pregistrypriv->dev_network;
1836 	u8 *myhwaddr = myid(peepriv);
1837 
1838 	memcpy(pdev_network->MacAddress, myhwaddr, ETH_ALEN);
1839 
1840 	memcpy(&pdev_network->Ssid, &pregistrypriv->ssid, sizeof(struct ndis_802_11_ssid));
1841 
1842 	pdev_network->Configuration.Length = sizeof(struct ndis_802_11_config);
1843 	pdev_network->Configuration.BeaconPeriod = 100;
1844 	pdev_network->Configuration.FHConfig.Length = 0;
1845 	pdev_network->Configuration.FHConfig.HopPattern = 0;
1846 	pdev_network->Configuration.FHConfig.HopSet = 0;
1847 	pdev_network->Configuration.FHConfig.DwellTime = 0;
1848 }
1849 
rtw_update_registrypriv_dev_network(struct adapter * adapter)1850 void rtw_update_registrypriv_dev_network(struct adapter *adapter)
1851 {
1852 	int sz = 0;
1853 	struct registry_priv *pregistrypriv = &adapter->registrypriv;
1854 	struct wlan_bssid_ex    *pdev_network = &pregistrypriv->dev_network;
1855 	struct	security_priv *psecuritypriv = &adapter->securitypriv;
1856 	struct	wlan_network	*cur_network = &adapter->mlmepriv.cur_network;
1857 
1858 	pdev_network->Privacy = (psecuritypriv->dot11PrivacyAlgrthm > 0 ? 1 : 0); /*  adhoc no 802.1x */
1859 
1860 	pdev_network->Rssi = 0;
1861 
1862 	switch (pregistrypriv->wireless_mode) {
1863 	case WIRELESS_11B:
1864 		pdev_network->NetworkTypeInUse = (Ndis802_11DS);
1865 		break;
1866 	case WIRELESS_11G:
1867 	case WIRELESS_11BG:
1868 	case WIRELESS_11_24N:
1869 	case WIRELESS_11G_24N:
1870 	case WIRELESS_11BG_24N:
1871 		pdev_network->NetworkTypeInUse = (Ndis802_11OFDM24);
1872 		break;
1873 	case WIRELESS_11A:
1874 	case WIRELESS_11A_5N:
1875 		pdev_network->NetworkTypeInUse = (Ndis802_11OFDM5);
1876 		break;
1877 	case WIRELESS_11ABGN:
1878 		if (pregistrypriv->channel > 14)
1879 			pdev_network->NetworkTypeInUse = (Ndis802_11OFDM5);
1880 		else
1881 			pdev_network->NetworkTypeInUse = (Ndis802_11OFDM24);
1882 		break;
1883 	default:
1884 		/*  TODO */
1885 		break;
1886 	}
1887 
1888 	pdev_network->Configuration.DSConfig = (pregistrypriv->channel);
1889 	RT_TRACE(_module_rtl871x_mlme_c_, _drv_info_,
1890 		 ("pregistrypriv->channel=%d, pdev_network->Configuration.DSConfig=0x%x\n",
1891 		 pregistrypriv->channel, pdev_network->Configuration.DSConfig));
1892 
1893 	if (cur_network->network.InfrastructureMode == Ndis802_11IBSS)
1894 		pdev_network->Configuration.ATIMWindow = (0);
1895 
1896 	pdev_network->InfrastructureMode = (cur_network->network.InfrastructureMode);
1897 
1898 	/*  1. Supported rates */
1899 	/*  2. IE */
1900 
1901 	sz = rtw_generate_ie(pregistrypriv);
1902 	pdev_network->IELength = sz;
1903 	pdev_network->Length = get_wlan_bssid_ex_sz((struct wlan_bssid_ex  *)pdev_network);
1904 
1905 	/* notes: translate IELength & Length after assign the Length to cmdsz in createbss_cmd(); */
1906 	/* pdev_network->IELength = cpu_to_le32(sz); */
1907 }
1908 
rtw_get_encrypt_decrypt_from_registrypriv(struct adapter * adapter)1909 void rtw_get_encrypt_decrypt_from_registrypriv(struct adapter *adapter)
1910 {
1911 }
1912 
1913 /* the function is at passive_level */
rtw_joinbss_reset(struct adapter * padapter)1914 void rtw_joinbss_reset(struct adapter *padapter)
1915 {
1916 	u8	threshold;
1917 	struct mlme_priv	*pmlmepriv = &padapter->mlmepriv;
1918 	struct ht_priv		*phtpriv = &pmlmepriv->htpriv;
1919 
1920 	/* todo: if you want to do something io/reg/hw setting before join_bss, please add code here */
1921 	pmlmepriv->num_FortyMHzIntolerant = 0;
1922 
1923 	pmlmepriv->num_sta_no_ht = 0;
1924 
1925 	phtpriv->ampdu_enable = false;/* reset to disabled */
1926 
1927 	/*  TH = 1 => means that invalidate usb rx aggregation */
1928 	/*  TH = 0 => means that validate usb rx aggregation, use init value. */
1929 	if (phtpriv->ht_option) {
1930 		if (padapter->registrypriv.wifi_spec == 1)
1931 			threshold = 1;
1932 		else
1933 			threshold = 0;
1934 		rtw_hal_set_hwreg(padapter, HW_VAR_RXDMA_AGG_PG_TH, (u8 *)(&threshold));
1935 	} else {
1936 		threshold = 1;
1937 		rtw_hal_set_hwreg(padapter, HW_VAR_RXDMA_AGG_PG_TH, (u8 *)(&threshold));
1938 	}
1939 }
1940 
1941 /* the function is >= passive_level */
rtw_restructure_ht_ie(struct adapter * padapter,u8 * in_ie,u8 * out_ie,uint in_len,uint * pout_len)1942 unsigned int rtw_restructure_ht_ie(struct adapter *padapter, u8 *in_ie, u8 *out_ie, uint in_len, uint *pout_len)
1943 {
1944 	u32 ielen, out_len;
1945 	enum ht_cap_ampdu_factor max_rx_ampdu_factor;
1946 	unsigned char *p;
1947 	struct rtw_ieee80211_ht_cap ht_capie;
1948 	unsigned char WMM_IE[] = {0x00, 0x50, 0xf2, 0x02, 0x00, 0x01, 0x00};
1949 	struct mlme_priv	*pmlmepriv = &padapter->mlmepriv;
1950 	struct qos_priv		*pqospriv = &pmlmepriv->qospriv;
1951 	struct ht_priv		*phtpriv = &pmlmepriv->htpriv;
1952 	u32 rx_packet_offset, max_recvbuf_sz;
1953 
1954 
1955 	phtpriv->ht_option = false;
1956 
1957 	p = rtw_get_ie(in_ie+12, _HT_CAPABILITY_IE_, &ielen, in_len-12);
1958 
1959 	if (p && ielen > 0) {
1960 		if (pqospriv->qos_option == 0) {
1961 			out_len = *pout_len;
1962 			rtw_set_ie(out_ie+out_len, _VENDOR_SPECIFIC_IE_,
1963 				   _WMM_IE_Length_, WMM_IE, pout_len);
1964 
1965 			pqospriv->qos_option = 1;
1966 		}
1967 
1968 		out_len = *pout_len;
1969 
1970 		memset(&ht_capie, 0, sizeof(struct rtw_ieee80211_ht_cap));
1971 
1972 		ht_capie.cap_info = IEEE80211_HT_CAP_SUP_WIDTH |
1973 				    IEEE80211_HT_CAP_SGI_20 |
1974 				    IEEE80211_HT_CAP_SGI_40 |
1975 				    IEEE80211_HT_CAP_TX_STBC |
1976 				    IEEE80211_HT_CAP_DSSSCCK40;
1977 
1978 		rtw_hal_get_def_var(padapter, HAL_DEF_RX_PACKET_OFFSET, &rx_packet_offset);
1979 		rtw_hal_get_def_var(padapter, HAL_DEF_MAX_RECVBUF_SZ, &max_recvbuf_sz);
1980 
1981 		/*
1982 		AMPDU_para [1:0]:Max AMPDU Len => 0:8k , 1:16k, 2:32k, 3:64k
1983 		AMPDU_para [4:2]:Min MPDU Start Spacing
1984 		*/
1985 
1986 		rtw_hal_get_def_var(padapter, HW_VAR_MAX_RX_AMPDU_FACTOR, &max_rx_ampdu_factor);
1987 		ht_capie.ampdu_params_info = (max_rx_ampdu_factor&0x03);
1988 
1989 		if (padapter->securitypriv.dot11PrivacyAlgrthm == _AES_)
1990 			ht_capie.ampdu_params_info |= (IEEE80211_HT_CAP_AMPDU_DENSITY&(0x07<<2));
1991 		else
1992 			ht_capie.ampdu_params_info |= (IEEE80211_HT_CAP_AMPDU_DENSITY&0x00);
1993 
1994 
1995 		rtw_set_ie(out_ie+out_len, _HT_CAPABILITY_IE_,
1996 			   sizeof(struct rtw_ieee80211_ht_cap), (unsigned char *)&ht_capie, pout_len);
1997 
1998 		phtpriv->ht_option = true;
1999 
2000 		p = rtw_get_ie(in_ie+12, _HT_ADD_INFO_IE_, &ielen, in_len-12);
2001 		if (p && (ielen == sizeof(struct ieee80211_ht_addt_info))) {
2002 			out_len = *pout_len;
2003 			rtw_set_ie(out_ie+out_len, _HT_ADD_INFO_IE_, ielen, p+2 , pout_len);
2004 		}
2005 	}
2006 	return phtpriv->ht_option;
2007 }
2008 
2009 /* the function is > passive_level (in critical_section) */
rtw_update_ht_cap(struct adapter * padapter,u8 * pie,uint ie_len)2010 void rtw_update_ht_cap(struct adapter *padapter, u8 *pie, uint ie_len)
2011 {
2012 	u8 *p, max_ampdu_sz;
2013 	int len;
2014 	struct rtw_ieee80211_ht_cap *pht_capie;
2015 	struct mlme_priv	*pmlmepriv = &padapter->mlmepriv;
2016 	struct ht_priv		*phtpriv = &pmlmepriv->htpriv;
2017 	struct registry_priv *pregistrypriv = &padapter->registrypriv;
2018 	struct mlme_ext_priv	*pmlmeext = &padapter->mlmeextpriv;
2019 	struct mlme_ext_info	*pmlmeinfo = &(pmlmeext->mlmext_info);
2020 
2021 	if (!phtpriv->ht_option)
2022 		return;
2023 
2024 	if ((!pmlmeinfo->HT_info_enable) || (!pmlmeinfo->HT_caps_enable))
2025 		return;
2026 
2027 	DBG_88E("+rtw_update_ht_cap()\n");
2028 
2029 	/* maybe needs check if ap supports rx ampdu. */
2030 	if ((!phtpriv->ampdu_enable) && (pregistrypriv->ampdu_enable == 1)) {
2031 		if (pregistrypriv->wifi_spec == 1)
2032 			phtpriv->ampdu_enable = false;
2033 		else
2034 			phtpriv->ampdu_enable = true;
2035 	} else if (pregistrypriv->ampdu_enable == 2) {
2036 		phtpriv->ampdu_enable = true;
2037 	}
2038 
2039 
2040 	/* check Max Rx A-MPDU Size */
2041 	len = 0;
2042 	p = rtw_get_ie(pie+sizeof(struct ndis_802_11_fixed_ie), _HT_CAPABILITY_IE_, &len, ie_len-sizeof(struct ndis_802_11_fixed_ie));
2043 	if (p && len > 0) {
2044 		pht_capie = (struct rtw_ieee80211_ht_cap *)(p+2);
2045 		max_ampdu_sz = pht_capie->ampdu_params_info & IEEE80211_HT_CAP_AMPDU_FACTOR;
2046 		max_ampdu_sz = 1 << (max_ampdu_sz+3); /*  max_ampdu_sz (kbytes); */
2047 		phtpriv->rx_ampdu_maxlen = max_ampdu_sz;
2048 	}
2049 	len = 0;
2050 	p = rtw_get_ie(pie+sizeof(struct ndis_802_11_fixed_ie), _HT_ADD_INFO_IE_, &len, ie_len-sizeof(struct ndis_802_11_fixed_ie));
2051 
2052 	/* update cur_bwmode & cur_ch_offset */
2053 	if ((pregistrypriv->cbw40_enable) &&
2054 	    (le16_to_cpu(pmlmeinfo->HT_caps.u.HT_cap_element.HT_caps_info) & BIT(1)) &&
2055 	    (pmlmeinfo->HT_info.infos[0] & BIT(2))) {
2056 		int i;
2057 		u8	rf_type;
2058 
2059 		padapter->HalFunc.GetHwRegHandler(padapter, HW_VAR_RF_TYPE, (u8 *)(&rf_type));
2060 
2061 		/* update the MCS rates */
2062 		for (i = 0; i < 16; i++) {
2063 			if ((rf_type == RF_1T1R) || (rf_type == RF_1T2R))
2064 				pmlmeinfo->HT_caps.u.HT_cap_element.MCS_rate[i] &= MCS_rate_1R[i];
2065 			else
2066 				pmlmeinfo->HT_caps.u.HT_cap_element.MCS_rate[i] &= MCS_rate_2R[i];
2067 		}
2068 		/* switch to the 40M Hz mode according to the AP */
2069 		pmlmeext->cur_bwmode = HT_CHANNEL_WIDTH_40;
2070 		switch ((pmlmeinfo->HT_info.infos[0] & 0x3)) {
2071 		case HT_EXTCHNL_OFFSET_UPPER:
2072 			pmlmeext->cur_ch_offset = HAL_PRIME_CHNL_OFFSET_LOWER;
2073 			break;
2074 		case HT_EXTCHNL_OFFSET_LOWER:
2075 			pmlmeext->cur_ch_offset = HAL_PRIME_CHNL_OFFSET_UPPER;
2076 			break;
2077 		default:
2078 			pmlmeext->cur_ch_offset = HAL_PRIME_CHNL_OFFSET_DONT_CARE;
2079 			break;
2080 		}
2081 	}
2082 
2083 	/*  Config SM Power Save setting */
2084 	pmlmeinfo->SM_PS = (le16_to_cpu(pmlmeinfo->HT_caps.u.HT_cap_element.HT_caps_info) & 0x0C) >> 2;
2085 	if (pmlmeinfo->SM_PS == WLAN_HT_CAP_SM_PS_STATIC)
2086 		DBG_88E("%s(): WLAN_HT_CAP_SM_PS_STATIC\n", __func__);
2087 
2088 	/*  Config current HT Protection mode. */
2089 	pmlmeinfo->HT_protection = pmlmeinfo->HT_info.infos[1] & 0x3;
2090 }
2091 
rtw_issue_addbareq_cmd(struct adapter * padapter,struct xmit_frame * pxmitframe)2092 void rtw_issue_addbareq_cmd(struct adapter *padapter, struct xmit_frame *pxmitframe)
2093 {
2094 	u8 issued;
2095 	int priority;
2096 	struct sta_info *psta = NULL;
2097 	struct ht_priv	*phtpriv;
2098 	struct pkt_attrib *pattrib = &pxmitframe->attrib;
2099 	s32 bmcst = IS_MCAST(pattrib->ra);
2100 
2101 	if (bmcst || (padapter->mlmepriv.LinkDetectInfo.NumTxOkInPeriod < 100))
2102 		return;
2103 
2104 	priority = pattrib->priority;
2105 
2106 	if (pattrib->psta)
2107 		psta = pattrib->psta;
2108 	else
2109 		psta = rtw_get_stainfo(&padapter->stapriv, pattrib->ra);
2110 
2111 	if (psta == NULL)
2112 		return;
2113 
2114 	phtpriv = &psta->htpriv;
2115 
2116 	if ((phtpriv->ht_option) && (phtpriv->ampdu_enable)) {
2117 		issued = (phtpriv->agg_enable_bitmap>>priority)&0x1;
2118 		issued |= (phtpriv->candidate_tid_bitmap>>priority)&0x1;
2119 
2120 		if (0 == issued) {
2121 			DBG_88E("rtw_issue_addbareq_cmd, p=%d\n", priority);
2122 			psta->htpriv.candidate_tid_bitmap |= BIT((u8)priority);
2123 			rtw_addbareq_cmd(padapter, (u8)priority, pattrib->ra);
2124 		}
2125 	}
2126 }
2127 
rtw_roaming(struct adapter * padapter,struct wlan_network * tgt_network)2128 void rtw_roaming(struct adapter *padapter, struct wlan_network *tgt_network)
2129 {
2130 	struct mlme_priv	*pmlmepriv = &padapter->mlmepriv;
2131 
2132 	spin_lock_bh(&pmlmepriv->lock);
2133 	_rtw_roaming(padapter, tgt_network);
2134 	spin_unlock_bh(&pmlmepriv->lock);
2135 }
_rtw_roaming(struct adapter * padapter,struct wlan_network * tgt_network)2136 void _rtw_roaming(struct adapter *padapter, struct wlan_network *tgt_network)
2137 {
2138 	struct mlme_priv	*pmlmepriv = &padapter->mlmepriv;
2139 	int do_join_r;
2140 
2141 	struct wlan_network *pnetwork;
2142 
2143 	if (tgt_network != NULL)
2144 		pnetwork = tgt_network;
2145 	else
2146 		pnetwork = &pmlmepriv->cur_network;
2147 
2148 	if (0 < pmlmepriv->to_roaming) {
2149 		DBG_88E("roaming from %s(%pM length:%d\n",
2150 			pnetwork->network.Ssid.Ssid, pnetwork->network.MacAddress,
2151 			pnetwork->network.Ssid.SsidLength);
2152 		memcpy(&pmlmepriv->assoc_ssid, &pnetwork->network.Ssid, sizeof(struct ndis_802_11_ssid));
2153 
2154 		pmlmepriv->assoc_by_bssid = false;
2155 
2156 		while (1) {
2157 			do_join_r = rtw_do_join(padapter);
2158 			if (_SUCCESS == do_join_r) {
2159 				break;
2160 			} else {
2161 				DBG_88E("roaming do_join return %d\n", do_join_r);
2162 				pmlmepriv->to_roaming--;
2163 
2164 				if (0 < pmlmepriv->to_roaming) {
2165 					continue;
2166 				} else {
2167 					DBG_88E("%s(%d) -to roaming fail, indicate_disconnect\n", __func__, __LINE__);
2168 					rtw_indicate_disconnect(padapter);
2169 					break;
2170 				}
2171 			}
2172 		}
2173 	}
2174 }
2175