xref: /OK3568_Linux_fs/kernel/drivers/net/wireless/rockchip_wlan/rtl8723bs/core/rtw_mlme.c (revision 4882a59341e53eb6f0b4789bf948001014eff981)
1 /******************************************************************************
2  *
3  * Copyright(c) 2007 - 2017 Realtek Corporation.
4  *
5  * This program is free software; you can redistribute it and/or modify it
6  * under the terms of version 2 of the GNU General Public License as
7  * published by the Free Software Foundation.
8  *
9  * This program is distributed in the hope that it will be useful, but WITHOUT
10  * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
11  * FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for
12  * more details.
13  *
14  *****************************************************************************/
15 #define _RTW_MLME_C_
16 
17 #include <hal_data.h>
18 
19 extern void indicate_wx_scan_complete_event(_adapter *padapter);
20 extern u8 rtw_do_join(_adapter *padapter);
21 
22 
rtw_init_mlme_timer(_adapter * padapter)23 void rtw_init_mlme_timer(_adapter *padapter)
24 {
25 	struct	mlme_priv *pmlmepriv = &padapter->mlmepriv;
26 
27 	rtw_init_timer(&(pmlmepriv->assoc_timer), padapter, rtw_join_timeout_handler, padapter);
28 	rtw_init_timer(&(pmlmepriv->scan_to_timer), padapter, rtw_scan_timeout_handler, padapter);
29 
30 #ifdef CONFIG_DFS_MASTER
31 	rtw_init_timer(&(pmlmepriv->dfs_master_timer), padapter, rtw_dfs_master_timer_hdl, padapter);
32 #endif
33 
34 #ifdef CONFIG_SET_SCAN_DENY_TIMER
35 	rtw_init_timer(&(pmlmepriv->set_scan_deny_timer), padapter, rtw_set_scan_deny_timer_hdl, padapter);
36 #endif
37 
38 #ifdef RTK_DMP_PLATFORM
39 	_init_workitem(&(pmlmepriv->Linkup_workitem), Linkup_workitem_callback, padapter);
40 	_init_workitem(&(pmlmepriv->Linkdown_workitem), Linkdown_workitem_callback, padapter);
41 #endif
42 }
43 
_rtw_init_mlme_priv(_adapter * padapter)44 sint	_rtw_init_mlme_priv(_adapter *padapter)
45 {
46 	sint	i;
47 	u8	*pbuf;
48 	struct wlan_network	*pnetwork;
49 	struct mlme_priv		*pmlmepriv = &padapter->mlmepriv;
50 	sint	res = _SUCCESS;
51 
52 
53 	/* We don't need to memset padapter->XXX to zero, because adapter is allocated by rtw_zvmalloc(). */
54 	/* _rtw_memset((u8 *)pmlmepriv, 0, sizeof(struct mlme_priv)); */
55 
56 
57 	/*qos_priv*/
58 	/*pmlmepriv->qospriv.qos_option = pregistrypriv->wmm_enable;*/
59 
60 	/*ht_priv*/
61 #ifdef CONFIG_80211N_HT
62 	pmlmepriv->htpriv.ampdu_enable = _FALSE;/*set to disabled*/
63 #endif
64 
65 	pmlmepriv->nic_hdl = (u8 *)padapter;
66 
67 	pmlmepriv->pscanned = NULL;
68 	/*pmlmepriv->fw_state = WIFI_STATION_STATE; */ /*Must sync with rtw_wdev_alloc()*/
69 	/*init_fwstate(pmlmepriv, WIFI_STATION_STATE);*/
70 	init_fwstate(pmlmepriv, WIFI_NULL_STATE);/*assigned interface role(STA/AP) must after execute set_opmode*/
71 
72 	/* wdev->iftype = NL80211_IFTYPE_STATION*/
73 	pmlmepriv->cur_network.network.InfrastructureMode = Ndis802_11AutoUnknown;
74 	pmlmepriv->scan_mode = SCAN_ACTIVE; /* 1: active, 0: pasive. Maybe someday we should rename this varable to "active_mode" (Jeff) */
75 
76 	_rtw_spinlock_init(&(pmlmepriv->lock));
77 	_rtw_init_queue(&(pmlmepriv->free_bss_pool));
78 	_rtw_init_queue(&(pmlmepriv->scanned_queue));
79 
80 	set_scanned_network_val(pmlmepriv, 0);
81 
82 	_rtw_memset(&pmlmepriv->assoc_ssid, 0, sizeof(NDIS_802_11_SSID));
83 
84 	pbuf = rtw_zvmalloc(MAX_BSS_CNT * (sizeof(struct wlan_network)));
85 
86 	if (pbuf == NULL) {
87 		res = _FAIL;
88 		goto exit;
89 	}
90 	pmlmepriv->free_bss_buf = pbuf;
91 
92 	pnetwork = (struct wlan_network *)pbuf;
93 
94 	for (i = 0; i < MAX_BSS_CNT; i++) {
95 		_rtw_init_listhead(&(pnetwork->list));
96 
97 		rtw_list_insert_tail(&(pnetwork->list), &(pmlmepriv->free_bss_pool.queue));
98 
99 		pnetwork++;
100 	}
101 
102 	/* allocate DMA-able/Non-Page memory for cmd_buf and rsp_buf */
103 
104 	rtw_clear_scan_deny(padapter);
105 #ifdef CONFIG_ARP_KEEP_ALIVE
106 	pmlmepriv->bGetGateway = 0;
107 	pmlmepriv->GetGatewayTryCnt = 0;
108 #endif
109 
110 #ifdef CONFIG_LAYER2_ROAMING
111 #define RTW_ROAM_SCAN_RESULT_EXP_MS (5*1000)
112 #define RTW_ROAM_RSSI_DIFF_TH 10
113 #define RTW_ROAM_SCAN_INTERVAL_MS (10*1000)
114 #define RTW_ROAM_RSSI_THRESHOLD 70
115 
116 	pmlmepriv->roam_flags = 0
117 				| RTW_ROAM_ON_EXPIRED
118 #ifdef CONFIG_LAYER2_ROAMING_RESUME
119 				| RTW_ROAM_ON_RESUME
120 #endif
121 #ifdef CONFIG_LAYER2_ROAMING_ACTIVE
122 				| RTW_ROAM_ACTIVE
123 #endif
124 				;
125 
126 	pmlmepriv->roam_scanr_exp_ms = RTW_ROAM_SCAN_RESULT_EXP_MS;
127 	pmlmepriv->roam_rssi_diff_th = RTW_ROAM_RSSI_DIFF_TH;
128 	pmlmepriv->roam_scan_int_ms = RTW_ROAM_SCAN_INTERVAL_MS;
129 	pmlmepriv->roam_rssi_threshold = RTW_ROAM_RSSI_THRESHOLD;
130 #endif /* CONFIG_LAYER2_ROAMING */
131 
132 #ifdef CONFIG_RTW_80211R
133 	memset(&pmlmepriv->ftpriv, 0, sizeof(ft_priv));
134 	pmlmepriv->ftpriv.ft_flags = 0
135 		| RTW_FT_STA_SUPPORTED
136 		| RTW_FT_STA_OVER_DS_SUPPORTED
137 		;
138 #endif
139 	rtw_init_mlme_timer(padapter);
140 
141 exit:
142 
143 
144 	return res;
145 }
146 
147 void rtw_mfree_mlme_priv_lock(struct mlme_priv *pmlmepriv);
rtw_mfree_mlme_priv_lock(struct mlme_priv * pmlmepriv)148 void rtw_mfree_mlme_priv_lock(struct mlme_priv *pmlmepriv)
149 {
150 	_rtw_spinlock_free(&pmlmepriv->lock);
151 	_rtw_spinlock_free(&(pmlmepriv->free_bss_pool.lock));
152 	_rtw_spinlock_free(&(pmlmepriv->scanned_queue.lock));
153 }
154 
rtw_free_mlme_ie_data(u8 ** ppie,u32 * plen)155 static void rtw_free_mlme_ie_data(u8 **ppie, u32 *plen)
156 {
157 	if (*ppie) {
158 		rtw_mfree(*ppie, *plen);
159 		*plen = 0;
160 		*ppie = NULL;
161 	}
162 }
163 
rtw_free_mlme_priv_ie_data(struct mlme_priv * pmlmepriv)164 void rtw_free_mlme_priv_ie_data(struct mlme_priv *pmlmepriv)
165 {
166 #if defined(CONFIG_AP_MODE) && defined (CONFIG_NATIVEAP_MLME)
167 	rtw_buf_free(&pmlmepriv->assoc_req, &pmlmepriv->assoc_req_len);
168 	rtw_buf_free(&pmlmepriv->assoc_rsp, &pmlmepriv->assoc_rsp_len);
169 	rtw_free_mlme_ie_data(&pmlmepriv->wps_beacon_ie, &pmlmepriv->wps_beacon_ie_len);
170 	rtw_free_mlme_ie_data(&pmlmepriv->wps_probe_req_ie, &pmlmepriv->wps_probe_req_ie_len);
171 	rtw_free_mlme_ie_data(&pmlmepriv->wps_probe_resp_ie, &pmlmepriv->wps_probe_resp_ie_len);
172 	rtw_free_mlme_ie_data(&pmlmepriv->wps_assoc_resp_ie, &pmlmepriv->wps_assoc_resp_ie_len);
173 
174 	rtw_free_mlme_ie_data(&pmlmepriv->p2p_beacon_ie, &pmlmepriv->p2p_beacon_ie_len);
175 	rtw_free_mlme_ie_data(&pmlmepriv->p2p_probe_req_ie, &pmlmepriv->p2p_probe_req_ie_len);
176 	rtw_free_mlme_ie_data(&pmlmepriv->p2p_probe_resp_ie, &pmlmepriv->p2p_probe_resp_ie_len);
177 	rtw_free_mlme_ie_data(&pmlmepriv->p2p_go_probe_resp_ie, &pmlmepriv->p2p_go_probe_resp_ie_len);
178 	rtw_free_mlme_ie_data(&pmlmepriv->p2p_assoc_req_ie, &pmlmepriv->p2p_assoc_req_ie_len);
179 	rtw_free_mlme_ie_data(&pmlmepriv->p2p_assoc_resp_ie, &pmlmepriv->p2p_assoc_resp_ie_len);
180 #endif
181 
182 #if defined(CONFIG_WFD) && defined(CONFIG_IOCTL_CFG80211)
183 	rtw_free_mlme_ie_data(&pmlmepriv->wfd_beacon_ie, &pmlmepriv->wfd_beacon_ie_len);
184 	rtw_free_mlme_ie_data(&pmlmepriv->wfd_probe_req_ie, &pmlmepriv->wfd_probe_req_ie_len);
185 	rtw_free_mlme_ie_data(&pmlmepriv->wfd_probe_resp_ie, &pmlmepriv->wfd_probe_resp_ie_len);
186 	rtw_free_mlme_ie_data(&pmlmepriv->wfd_go_probe_resp_ie, &pmlmepriv->wfd_go_probe_resp_ie_len);
187 	rtw_free_mlme_ie_data(&pmlmepriv->wfd_assoc_req_ie, &pmlmepriv->wfd_assoc_req_ie_len);
188 	rtw_free_mlme_ie_data(&pmlmepriv->wfd_assoc_resp_ie, &pmlmepriv->wfd_assoc_resp_ie_len);
189 #endif
190 
191 #ifdef CONFIG_RTW_80211R
192 	rtw_free_mlme_ie_data(&pmlmepriv->auth_rsp, &pmlmepriv->auth_rsp_len);
193 #endif
194 }
195 
196 #if defined(CONFIG_WFD) && defined(CONFIG_IOCTL_CFG80211)
rtw_mlme_update_wfd_ie_data(struct mlme_priv * mlme,u8 type,u8 * ie,u32 ie_len)197 int rtw_mlme_update_wfd_ie_data(struct mlme_priv *mlme, u8 type, u8 *ie, u32 ie_len)
198 {
199 	_adapter *adapter = mlme_to_adapter(mlme);
200 	struct wifi_display_info *wfd_info = &adapter->wfd_info;
201 	u8 clear = 0;
202 	u8 **t_ie = NULL;
203 	u32 *t_ie_len = NULL;
204 	int ret = _FAIL;
205 
206 	if (!hal_chk_wl_func(adapter, WL_FUNC_MIRACAST))
207 		goto success;
208 
209 	if (wfd_info->wfd_enable == _TRUE)
210 		goto success; /* WFD IE is build by self */
211 
212 	if (!ie && !ie_len)
213 		clear = 1;
214 	else if (!ie || !ie_len) {
215 		RTW_PRINT(FUNC_ADPT_FMT" type:%u, ie:%p, ie_len:%u"
216 			  , FUNC_ADPT_ARG(adapter), type, ie, ie_len);
217 		rtw_warn_on(1);
218 		goto exit;
219 	}
220 
221 	switch (type) {
222 	case MLME_BEACON_IE:
223 		t_ie = &mlme->wfd_beacon_ie;
224 		t_ie_len = &mlme->wfd_beacon_ie_len;
225 		break;
226 	case MLME_PROBE_REQ_IE:
227 		t_ie = &mlme->wfd_probe_req_ie;
228 		t_ie_len = &mlme->wfd_probe_req_ie_len;
229 		break;
230 	case MLME_PROBE_RESP_IE:
231 		t_ie = &mlme->wfd_probe_resp_ie;
232 		t_ie_len = &mlme->wfd_probe_resp_ie_len;
233 		break;
234 	case MLME_GO_PROBE_RESP_IE:
235 		t_ie = &mlme->wfd_go_probe_resp_ie;
236 		t_ie_len = &mlme->wfd_go_probe_resp_ie_len;
237 		break;
238 	case MLME_ASSOC_REQ_IE:
239 		t_ie = &mlme->wfd_assoc_req_ie;
240 		t_ie_len = &mlme->wfd_assoc_req_ie_len;
241 		break;
242 	case MLME_ASSOC_RESP_IE:
243 		t_ie = &mlme->wfd_assoc_resp_ie;
244 		t_ie_len = &mlme->wfd_assoc_resp_ie_len;
245 		break;
246 	default:
247 		RTW_PRINT(FUNC_ADPT_FMT" unsupported type:%u"
248 			  , FUNC_ADPT_ARG(adapter), type);
249 		rtw_warn_on(1);
250 		goto exit;
251 	}
252 
253 	if (*t_ie) {
254 		u32 free_len = *t_ie_len;
255 		*t_ie_len = 0;
256 		rtw_mfree(*t_ie, free_len);
257 		*t_ie = NULL;
258 	}
259 
260 	if (!clear) {
261 		*t_ie = rtw_malloc(ie_len);
262 		if (*t_ie == NULL) {
263 			RTW_ERR(FUNC_ADPT_FMT" type:%u, rtw_malloc() fail\n"
264 				, FUNC_ADPT_ARG(adapter), type);
265 			goto exit;
266 		}
267 		_rtw_memcpy(*t_ie, ie, ie_len);
268 		*t_ie_len = ie_len;
269 	}
270 
271 	if (*t_ie && *t_ie_len) {
272 		u8 *attr_content;
273 		u32 attr_contentlen = 0;
274 
275 		attr_content = rtw_get_wfd_attr_content(*t_ie, *t_ie_len, WFD_ATTR_DEVICE_INFO, NULL, &attr_contentlen);
276 		if (attr_content && attr_contentlen) {
277 			if (RTW_GET_BE16(attr_content + 2) != wfd_info->rtsp_ctrlport) {
278 				wfd_info->rtsp_ctrlport = RTW_GET_BE16(attr_content + 2);
279 				RTW_INFO(FUNC_ADPT_FMT" type:%u, RTSP CTRL port = %u\n"
280 					, FUNC_ADPT_ARG(adapter), type, wfd_info->rtsp_ctrlport);
281 			}
282 		}
283 	}
284 
285 success:
286 	ret = _SUCCESS;
287 
288 exit:
289 	return ret;
290 }
291 #endif /* defined(CONFIG_WFD) && defined(CONFIG_IOCTL_CFG80211) */
292 
_rtw_free_mlme_priv(struct mlme_priv * pmlmepriv)293 void _rtw_free_mlme_priv(struct mlme_priv *pmlmepriv)
294 {
295 	if (NULL == pmlmepriv) {
296 		rtw_warn_on(1);
297 		goto exit;
298 	}
299 	rtw_free_mlme_priv_ie_data(pmlmepriv);
300 
301 	if (pmlmepriv) {
302 		rtw_mfree_mlme_priv_lock(pmlmepriv);
303 
304 		if (pmlmepriv->free_bss_buf)
305 			rtw_vmfree(pmlmepriv->free_bss_buf, MAX_BSS_CNT * sizeof(struct wlan_network));
306 	}
307 exit:
308 	return;
309 }
310 
_rtw_enqueue_network(_queue * queue,struct wlan_network * pnetwork)311 sint	_rtw_enqueue_network(_queue *queue, struct wlan_network *pnetwork)
312 {
313 	_irqL irqL;
314 
315 
316 	if (pnetwork == NULL)
317 		goto exit;
318 
319 	_enter_critical_bh(&queue->lock, &irqL);
320 
321 	rtw_list_insert_tail(&pnetwork->list, &queue->queue);
322 
323 	_exit_critical_bh(&queue->lock, &irqL);
324 
325 exit:
326 
327 
328 	return _SUCCESS;
329 }
330 
331 /*
332 struct	wlan_network *_rtw_dequeue_network(_queue *queue)
333 {
334 	_irqL irqL;
335 
336 	struct wlan_network *pnetwork;
337 
338 
339 	_enter_critical_bh(&queue->lock, &irqL);
340 
341 	if (_rtw_queue_empty(queue) == _TRUE)
342 
343 		pnetwork = NULL;
344 
345 	else
346 	{
347 		pnetwork = LIST_CONTAINOR(get_next(&queue->queue), struct wlan_network, list);
348 
349 		rtw_list_delete(&(pnetwork->list));
350 	}
351 
352 	_exit_critical_bh(&queue->lock, &irqL);
353 
354 
355 	return pnetwork;
356 }
357 */
358 
_rtw_alloc_network(struct mlme_priv * pmlmepriv)359 struct	wlan_network *_rtw_alloc_network(struct	mlme_priv *pmlmepriv) /* (_queue *free_queue) */
360 {
361 	_irqL	irqL;
362 	struct	wlan_network	*pnetwork;
363 	_queue *free_queue = &pmlmepriv->free_bss_pool;
364 	_list *plist = NULL;
365 
366 
367 	_enter_critical_bh(&free_queue->lock, &irqL);
368 
369 	if (_rtw_queue_empty(free_queue) == _TRUE) {
370 		pnetwork = NULL;
371 		goto exit;
372 	}
373 	plist = get_next(&(free_queue->queue));
374 
375 	pnetwork = LIST_CONTAINOR(plist , struct wlan_network, list);
376 
377 	rtw_list_delete(&pnetwork->list);
378 
379 	pnetwork->network_type = 0;
380 	pnetwork->fixed = _FALSE;
381 	pnetwork->last_scanned = rtw_get_current_time();
382 	pnetwork->aid = 0;
383 	pnetwork->join_res = 0;
384 
385 	pmlmepriv->num_of_scanned++;
386 
387 exit:
388 	_exit_critical_bh(&free_queue->lock, &irqL);
389 
390 
391 	return pnetwork;
392 }
393 
_rtw_free_network(struct mlme_priv * pmlmepriv,struct wlan_network * pnetwork,u8 isfreeall)394 void _rtw_free_network(struct	mlme_priv *pmlmepriv , struct wlan_network *pnetwork, u8 isfreeall)
395 {
396 	u32 delta_time;
397 	u32 lifetime = SCANQUEUE_LIFETIME;
398 	_irqL irqL;
399 	_queue *free_queue = &(pmlmepriv->free_bss_pool);
400 
401 
402 	if (pnetwork == NULL)
403 		goto exit;
404 
405 	if (pnetwork->fixed == _TRUE)
406 		goto exit;
407 
408 	if ((check_fwstate(pmlmepriv, WIFI_ADHOC_MASTER_STATE) == _TRUE) ||
409 	    (check_fwstate(pmlmepriv, WIFI_ADHOC_STATE) == _TRUE))
410 		lifetime = 1;
411 
412 	if (!isfreeall) {
413 		delta_time = (u32) rtw_get_passing_time_ms(pnetwork->last_scanned);
414 		if (delta_time < lifetime) /* unit:msec */
415 			goto exit;
416 	}
417 
418 	_enter_critical_bh(&free_queue->lock, &irqL);
419 
420 	rtw_list_delete(&(pnetwork->list));
421 
422 	rtw_list_insert_tail(&(pnetwork->list), &(free_queue->queue));
423 
424 	pmlmepriv->num_of_scanned--;
425 
426 
427 	/* RTW_INFO("_rtw_free_network:SSID=%s\n", pnetwork->network.Ssid.Ssid); */
428 
429 	_exit_critical_bh(&free_queue->lock, &irqL);
430 
431 exit:
432 	return;
433 }
434 
_rtw_free_network_nolock(struct mlme_priv * pmlmepriv,struct wlan_network * pnetwork)435 void _rtw_free_network_nolock(struct	mlme_priv *pmlmepriv, struct wlan_network *pnetwork)
436 {
437 
438 	_queue *free_queue = &(pmlmepriv->free_bss_pool);
439 
440 
441 	if (pnetwork == NULL)
442 		goto exit;
443 
444 	if (pnetwork->fixed == _TRUE)
445 		goto exit;
446 
447 	/* _enter_critical(&free_queue->lock, &irqL); */
448 
449 	rtw_list_delete(&(pnetwork->list));
450 
451 	rtw_list_insert_tail(&(pnetwork->list), get_list_head(free_queue));
452 
453 	pmlmepriv->num_of_scanned--;
454 
455 	/* _exit_critical(&free_queue->lock, &irqL); */
456 
457 exit:
458 	return;
459 }
460 
461 
462 /*
463 	return the wlan_network with the matching addr
464 
465 	Shall be calle under atomic context... to avoid possible racing condition...
466 */
_rtw_find_network(_queue * scanned_queue,u8 * addr)467 struct wlan_network *_rtw_find_network(_queue *scanned_queue, u8 *addr)
468 {
469 
470 	/* _irqL irqL; */
471 	_list	*phead, *plist;
472 	struct	wlan_network *pnetwork = NULL;
473 	u8 zero_addr[ETH_ALEN] = {0, 0, 0, 0, 0, 0};
474 
475 
476 	if (_rtw_memcmp(zero_addr, addr, ETH_ALEN)) {
477 		pnetwork = NULL;
478 		goto exit;
479 	}
480 
481 	/* _enter_critical_bh(&scanned_queue->lock, &irqL); */
482 
483 	phead = get_list_head(scanned_queue);
484 	plist = get_next(phead);
485 
486 	while (plist != phead) {
487 		pnetwork = LIST_CONTAINOR(plist, struct wlan_network , list);
488 
489 		if (_rtw_memcmp(addr, pnetwork->network.MacAddress, ETH_ALEN) == _TRUE)
490 			break;
491 
492 		plist = get_next(plist);
493 	}
494 
495 	if (plist == phead)
496 		pnetwork = NULL;
497 
498 	/* _exit_critical_bh(&scanned_queue->lock, &irqL); */
499 
500 exit:
501 
502 
503 	return pnetwork;
504 
505 }
506 
507 
_rtw_free_network_queue(_adapter * padapter,u8 isfreeall)508 void _rtw_free_network_queue(_adapter *padapter, u8 isfreeall)
509 {
510 	_irqL irqL;
511 	_list *phead, *plist;
512 	struct wlan_network *pnetwork;
513 	struct mlme_priv *pmlmepriv = &padapter->mlmepriv;
514 	_queue *scanned_queue = &pmlmepriv->scanned_queue;
515 
516 
517 
518 	_enter_critical_bh(&scanned_queue->lock, &irqL);
519 
520 	phead = get_list_head(scanned_queue);
521 	plist = get_next(phead);
522 
523 	while (rtw_end_of_queue_search(phead, plist) == _FALSE) {
524 
525 		pnetwork = LIST_CONTAINOR(plist, struct wlan_network, list);
526 
527 		plist = get_next(plist);
528 
529 		_rtw_free_network(pmlmepriv, pnetwork, isfreeall);
530 
531 	}
532 
533 	_exit_critical_bh(&scanned_queue->lock, &irqL);
534 
535 
536 }
537 
538 
539 
540 
rtw_if_up(_adapter * padapter)541 sint rtw_if_up(_adapter *padapter)
542 {
543 
544 	sint res;
545 
546 	if (RTW_CANNOT_RUN(padapter) ||
547 	    (check_fwstate(&padapter->mlmepriv, _FW_LINKED) == _FALSE)) {
548 		res = _FALSE;
549 	} else
550 		res =  _TRUE;
551 
552 	return res;
553 }
554 
555 
rtw_generate_random_ibss(u8 * pibss)556 void rtw_generate_random_ibss(u8 *pibss)
557 {
558 	*((u32 *)(&pibss[2])) = rtw_random32();
559 	pibss[0] = 0x02; /* in ad-hoc mode local bit must set to 1 */
560 	pibss[1] = 0x11;
561 	pibss[2] = 0x87;
562 }
563 
rtw_get_capability_from_ie(u8 * ie)564 u8 *rtw_get_capability_from_ie(u8 *ie)
565 {
566 	return ie + 8 + 2;
567 }
568 
569 
rtw_get_capability(WLAN_BSSID_EX * bss)570 u16 rtw_get_capability(WLAN_BSSID_EX *bss)
571 {
572 	u16	val;
573 
574 	_rtw_memcpy((u8 *)&val, rtw_get_capability_from_ie(bss->IEs), 2);
575 
576 	return le16_to_cpu(val);
577 }
578 
rtw_get_timestampe_from_ie(u8 * ie)579 u8 *rtw_get_timestampe_from_ie(u8 *ie)
580 {
581 	return ie + 0;
582 }
583 
rtw_get_beacon_interval_from_ie(u8 * ie)584 u8 *rtw_get_beacon_interval_from_ie(u8 *ie)
585 {
586 	return ie + 8;
587 }
588 
589 
rtw_init_mlme_priv(_adapter * padapter)590 int	rtw_init_mlme_priv(_adapter *padapter) /* (struct	mlme_priv *pmlmepriv) */
591 {
592 	int	res;
593 	res = _rtw_init_mlme_priv(padapter);/* (pmlmepriv); */
594 	return res;
595 }
596 
rtw_free_mlme_priv(struct mlme_priv * pmlmepriv)597 void rtw_free_mlme_priv(struct mlme_priv *pmlmepriv)
598 {
599 	_rtw_free_mlme_priv(pmlmepriv);
600 }
601 
602 int	rtw_enqueue_network(_queue *queue, struct wlan_network *pnetwork);
rtw_enqueue_network(_queue * queue,struct wlan_network * pnetwork)603 int	rtw_enqueue_network(_queue *queue, struct wlan_network *pnetwork)
604 {
605 	int	res;
606 	res = _rtw_enqueue_network(queue, pnetwork);
607 	return res;
608 }
609 
610 /*
611 static struct	wlan_network *rtw_dequeue_network(_queue *queue)
612 {
613 	struct wlan_network *pnetwork;
614 	pnetwork = _rtw_dequeue_network(queue);
615 	return pnetwork;
616 }
617 */
618 
619 struct	wlan_network *rtw_alloc_network(struct	mlme_priv *pmlmepriv);
rtw_alloc_network(struct mlme_priv * pmlmepriv)620 struct	wlan_network *rtw_alloc_network(struct	mlme_priv *pmlmepriv) /* (_queue	*free_queue) */
621 {
622 	struct	wlan_network	*pnetwork;
623 	pnetwork = _rtw_alloc_network(pmlmepriv);
624 	return pnetwork;
625 }
626 
627 void rtw_free_network(struct mlme_priv *pmlmepriv, struct	wlan_network *pnetwork, u8 is_freeall);
rtw_free_network(struct mlme_priv * pmlmepriv,struct wlan_network * pnetwork,u8 is_freeall)628 void rtw_free_network(struct mlme_priv *pmlmepriv, struct	wlan_network *pnetwork, u8 is_freeall)/* (struct	wlan_network *pnetwork, _queue	*free_queue) */
629 {
630 	_rtw_free_network(pmlmepriv, pnetwork, is_freeall);
631 }
632 
633 void rtw_free_network_nolock(_adapter *padapter, struct wlan_network *pnetwork);
rtw_free_network_nolock(_adapter * padapter,struct wlan_network * pnetwork)634 void rtw_free_network_nolock(_adapter *padapter, struct wlan_network *pnetwork)
635 {
636 	_rtw_free_network_nolock(&(padapter->mlmepriv), pnetwork);
637 #ifdef CONFIG_IOCTL_CFG80211
638 	rtw_cfg80211_unlink_bss(padapter, pnetwork);
639 #endif /* CONFIG_IOCTL_CFG80211 */
640 }
641 
642 
rtw_free_network_queue(_adapter * dev,u8 isfreeall)643 void rtw_free_network_queue(_adapter *dev, u8 isfreeall)
644 {
645 	_rtw_free_network_queue(dev, isfreeall);
646 }
647 
648 /*
649 	return the wlan_network with the matching addr
650 
651 	Shall be calle under atomic context... to avoid possible racing condition...
652 */
rtw_find_network(_queue * scanned_queue,u8 * addr)653 struct	wlan_network *rtw_find_network(_queue *scanned_queue, u8 *addr)
654 {
655 	struct	wlan_network *pnetwork = _rtw_find_network(scanned_queue, addr);
656 
657 	return pnetwork;
658 }
659 
rtw_is_same_ibss(_adapter * adapter,struct wlan_network * pnetwork)660 int rtw_is_same_ibss(_adapter *adapter, struct wlan_network *pnetwork)
661 {
662 	int ret = _TRUE;
663 	struct security_priv *psecuritypriv = &adapter->securitypriv;
664 
665 	if ((psecuritypriv->dot11PrivacyAlgrthm != _NO_PRIVACY_) &&
666 	    (pnetwork->network.Privacy == 0))
667 		ret = _FALSE;
668 	else if ((psecuritypriv->dot11PrivacyAlgrthm == _NO_PRIVACY_) &&
669 		 (pnetwork->network.Privacy == 1))
670 		ret = _FALSE;
671 	else
672 		ret = _TRUE;
673 
674 	return ret;
675 
676 }
677 
is_same_ess(WLAN_BSSID_EX * a,WLAN_BSSID_EX * b)678 inline int is_same_ess(WLAN_BSSID_EX *a, WLAN_BSSID_EX *b)
679 {
680 	return (a->Ssid.SsidLength == b->Ssid.SsidLength)
681 	       &&  _rtw_memcmp(a->Ssid.Ssid, b->Ssid.Ssid, a->Ssid.SsidLength) == _TRUE;
682 }
683 
is_same_network(WLAN_BSSID_EX * src,WLAN_BSSID_EX * dst,u8 feature)684 int is_same_network(WLAN_BSSID_EX *src, WLAN_BSSID_EX *dst, u8 feature)
685 {
686 	u16 s_cap, d_cap;
687 
688 
689 	if (rtw_bug_check(dst, src, &s_cap, &d_cap) == _FALSE)
690 		return _FALSE;
691 
692 	_rtw_memcpy((u8 *)&s_cap, rtw_get_capability_from_ie(src->IEs), 2);
693 	_rtw_memcpy((u8 *)&d_cap, rtw_get_capability_from_ie(dst->IEs), 2);
694 
695 
696 	s_cap = le16_to_cpu(s_cap);
697 	d_cap = le16_to_cpu(d_cap);
698 
699 
700 #ifdef CONFIG_P2P
701 	if ((feature == 1) && /* 1: P2P supported */
702 	    (_rtw_memcmp(src->MacAddress, dst->MacAddress, ETH_ALEN) == _TRUE)
703 	   )
704 		return _TRUE;
705 #endif
706 
707 	return ((src->Ssid.SsidLength == dst->Ssid.SsidLength) &&
708 		/*	(src->Configuration.DSConfig == dst->Configuration.DSConfig) && */
709 		((_rtw_memcmp(src->MacAddress, dst->MacAddress, ETH_ALEN)) == _TRUE) &&
710 		((_rtw_memcmp(src->Ssid.Ssid, dst->Ssid.Ssid, src->Ssid.SsidLength)) == _TRUE) &&
711 		((s_cap & WLAN_CAPABILITY_IBSS) ==
712 		 (d_cap & WLAN_CAPABILITY_IBSS)) &&
713 		((s_cap & WLAN_CAPABILITY_BSS) ==
714 		 (d_cap & WLAN_CAPABILITY_BSS)));
715 
716 }
717 
_rtw_find_same_network(_queue * scanned_queue,struct wlan_network * network)718 struct wlan_network *_rtw_find_same_network(_queue *scanned_queue, struct wlan_network *network)
719 {
720 	_list *phead, *plist;
721 	struct wlan_network *found = NULL;
722 
723 	phead = get_list_head(scanned_queue);
724 	plist = get_next(phead);
725 
726 	while (plist != phead) {
727 		found = LIST_CONTAINOR(plist, struct wlan_network , list);
728 
729 		if (is_same_network(&network->network, &found->network, 0))
730 			break;
731 
732 		plist = get_next(plist);
733 	}
734 
735 	if (plist == phead)
736 		found = NULL;
737 exit:
738 	return found;
739 }
740 
rtw_find_same_network(_queue * scanned_queue,struct wlan_network * network)741 struct wlan_network *rtw_find_same_network(_queue *scanned_queue, struct wlan_network *network)
742 {
743 	_irqL irqL;
744 	struct wlan_network *found = NULL;
745 
746 	if (scanned_queue == NULL || network == NULL)
747 		goto exit;
748 
749 	_enter_critical_bh(&scanned_queue->lock, &irqL);
750 	found = _rtw_find_same_network(scanned_queue, network);
751 	_exit_critical_bh(&scanned_queue->lock, &irqL);
752 
753 exit:
754 	return found;
755 }
756 
rtw_get_oldest_wlan_network(_queue * scanned_queue)757 struct	wlan_network	*rtw_get_oldest_wlan_network(_queue *scanned_queue)
758 {
759 	_list	*plist, *phead;
760 
761 
762 	struct	wlan_network	*pwlan = NULL;
763 	struct	wlan_network	*oldest = NULL;
764 	phead = get_list_head(scanned_queue);
765 
766 	plist = get_next(phead);
767 
768 	while (1) {
769 
770 		if (rtw_end_of_queue_search(phead, plist) == _TRUE)
771 			break;
772 
773 		pwlan = LIST_CONTAINOR(plist, struct wlan_network, list);
774 
775 		if (pwlan->fixed != _TRUE) {
776 			if (oldest == NULL || time_after(oldest->last_scanned, pwlan->last_scanned))
777 				oldest = pwlan;
778 		}
779 
780 		plist = get_next(plist);
781 	}
782 	return oldest;
783 
784 }
785 
update_network(WLAN_BSSID_EX * dst,WLAN_BSSID_EX * src,_adapter * padapter,bool update_ie)786 void update_network(WLAN_BSSID_EX *dst, WLAN_BSSID_EX *src,
787 		    _adapter *padapter, bool update_ie)
788 {
789 	u8 ss_ori = dst->PhyInfo.SignalStrength;
790 	u8 sq_ori = dst->PhyInfo.SignalQuality;
791 	long rssi_ori = dst->Rssi;
792 
793 	u8 ss_smp = src->PhyInfo.SignalStrength;
794 	u8 sq_smp = src->PhyInfo.SignalQuality;
795 	long rssi_smp = src->Rssi;
796 
797 	u8 ss_final;
798 	u8 sq_final;
799 	long rssi_final;
800 
801 
802 #ifdef CONFIG_ANTENNA_DIVERSITY
803 	rtw_hal_antdiv_rssi_compared(padapter, dst, src); /* this will update src.Rssi, need consider again */
804 #endif
805 
806 #if defined(DBG_RX_SIGNAL_DISPLAY_SSID_MONITORED) && 1
807 	if (strcmp(dst->Ssid.Ssid, DBG_RX_SIGNAL_DISPLAY_SSID_MONITORED) == 0) {
808 		RTW_INFO(FUNC_ADPT_FMT" %s("MAC_FMT", ch%u) ss_ori:%3u, sq_ori:%3u, rssi_ori:%3ld, ss_smp:%3u, sq_smp:%3u, rssi_smp:%3ld\n"
809 			 , FUNC_ADPT_ARG(padapter)
810 			, src->Ssid.Ssid, MAC_ARG(src->MacAddress), src->Configuration.DSConfig
811 			 , ss_ori, sq_ori, rssi_ori
812 			 , ss_smp, sq_smp, rssi_smp
813 			);
814 	}
815 #endif
816 
817 	/* The rule below is 1/5 for sample value, 4/5 for history value */
818 	if (check_fwstate(&padapter->mlmepriv, _FW_LINKED) && is_same_network(&(padapter->mlmepriv.cur_network.network), src, 0)) {
819 		/* Take the recvpriv's value for the connected AP*/
820 		ss_final = padapter->recvpriv.signal_strength;
821 		sq_final = padapter->recvpriv.signal_qual;
822 		/* the rssi value here is undecorated, and will be used for antenna diversity */
823 		if (sq_smp != 101) /* from the right channel */
824 			rssi_final = (src->Rssi + dst->Rssi * 4) / 5;
825 		else
826 			rssi_final = rssi_ori;
827 	} else {
828 		if (sq_smp != 101) { /* from the right channel */
829 			ss_final = ((u32)(src->PhyInfo.SignalStrength) + (u32)(dst->PhyInfo.SignalStrength) * 4) / 5;
830 			sq_final = ((u32)(src->PhyInfo.SignalQuality) + (u32)(dst->PhyInfo.SignalQuality) * 4) / 5;
831 			rssi_final = (src->Rssi + dst->Rssi * 4) / 5;
832 		} else {
833 			/* bss info not receving from the right channel, use the original RX signal infos */
834 			ss_final = dst->PhyInfo.SignalStrength;
835 			sq_final = dst->PhyInfo.SignalQuality;
836 			rssi_final = dst->Rssi;
837 		}
838 
839 	}
840 
841 	if (update_ie) {
842 		dst->Reserved[0] = src->Reserved[0];
843 		dst->Reserved[1] = src->Reserved[1];
844 		_rtw_memcpy((u8 *)dst, (u8 *)src, get_WLAN_BSSID_EX_sz(src));
845 	}
846 
847 	dst->PhyInfo.SignalStrength = ss_final;
848 	dst->PhyInfo.SignalQuality = sq_final;
849 	dst->Rssi = rssi_final;
850 
851 #if defined(DBG_RX_SIGNAL_DISPLAY_SSID_MONITORED) && 1
852 	if (strcmp(dst->Ssid.Ssid, DBG_RX_SIGNAL_DISPLAY_SSID_MONITORED) == 0) {
853 		RTW_INFO(FUNC_ADPT_FMT" %s("MAC_FMT"), SignalStrength:%u, SignalQuality:%u, RawRSSI:%ld\n"
854 			 , FUNC_ADPT_ARG(padapter)
855 			, dst->Ssid.Ssid, MAC_ARG(dst->MacAddress), dst->PhyInfo.SignalStrength, dst->PhyInfo.SignalQuality, dst->Rssi);
856 	}
857 #endif
858 
859 #if 0 /* old codes, may be useful one day...
860  * 	RTW_INFO("update_network: rssi=0x%lx dst->Rssi=%d ,dst->Rssi=0x%lx , src->Rssi=0x%lx",(dst->Rssi+src->Rssi)/2,dst->Rssi,dst->Rssi,src->Rssi); */
861 	if (check_fwstate(&padapter->mlmepriv, _FW_LINKED) && is_same_network(&(padapter->mlmepriv.cur_network.network), src)) {
862 
863 		/* RTW_INFO("b:ssid=%s update_network: src->rssi=0x%d padapter->recvpriv.ui_rssi=%d\n",src->Ssid.Ssid,src->Rssi,padapter->recvpriv.signal); */
864 		if (padapter->recvpriv.signal_qual_data.total_num++ >= PHY_LINKQUALITY_SLID_WIN_MAX) {
865 			padapter->recvpriv.signal_qual_data.total_num = PHY_LINKQUALITY_SLID_WIN_MAX;
866 			last_evm = padapter->recvpriv.signal_qual_data.elements[padapter->recvpriv.signal_qual_data.index];
867 			padapter->recvpriv.signal_qual_data.total_val -= last_evm;
868 		}
869 		padapter->recvpriv.signal_qual_data.total_val += query_rx_pwr_percentage(src->Rssi);
870 
871 		padapter->recvpriv.signal_qual_data.elements[padapter->recvpriv.signal_qual_data.index++] = query_rx_pwr_percentage(src->Rssi);
872 		if (padapter->recvpriv.signal_qual_data.index >= PHY_LINKQUALITY_SLID_WIN_MAX)
873 			padapter->recvpriv.signal_qual_data.index = 0;
874 
875 		/* RTW_INFO("Total SQ=%d  pattrib->signal_qual= %d\n", padapter->recvpriv.signal_qual_data.total_val, src->Rssi); */
876 
877 		/* <1> Showed on UI for user,in percentage. */
878 		tmpVal = padapter->recvpriv.signal_qual_data.total_val / padapter->recvpriv.signal_qual_data.total_num;
879 		padapter->recvpriv.signal = (u8)tmpVal; /* Link quality */
880 
881 		src->Rssi = translate_percentage_to_dbm(padapter->recvpriv.signal) ;
882 	} else {
883 		/*	RTW_INFO("ELSE:ssid=%s update_network: src->rssi=0x%d dst->rssi=%d\n",src->Ssid.Ssid,src->Rssi,dst->Rssi); */
884 		src->Rssi = (src->Rssi + dst->Rssi) / 2; /* dBM */
885 	}
886 
887 	/*	RTW_INFO("a:update_network: src->rssi=0x%d padapter->recvpriv.ui_rssi=%d\n",src->Rssi,padapter->recvpriv.signal); */
888 
889 #endif
890 
891 }
892 
update_current_network(_adapter * adapter,WLAN_BSSID_EX * pnetwork)893 static void update_current_network(_adapter *adapter, WLAN_BSSID_EX *pnetwork)
894 {
895 	struct	mlme_priv	*pmlmepriv = &(adapter->mlmepriv);
896 
897 
898 	rtw_bug_check(&(pmlmepriv->cur_network.network),
899 		      &(pmlmepriv->cur_network.network),
900 		      &(pmlmepriv->cur_network.network),
901 		      &(pmlmepriv->cur_network.network));
902 
903 	if ((check_fwstate(pmlmepriv, _FW_LINKED) == _TRUE) && (is_same_network(&(pmlmepriv->cur_network.network), pnetwork, 0))) {
904 
905 		/* if(pmlmepriv->cur_network.network.IELength<= pnetwork->IELength) */
906 		{
907 			update_network(&(pmlmepriv->cur_network.network), pnetwork, adapter, _TRUE);
908 			rtw_update_protection(adapter, (pmlmepriv->cur_network.network.IEs) + sizeof(NDIS_802_11_FIXED_IEs),
909 				      pmlmepriv->cur_network.network.IELength);
910 		}
911 	}
912 
913 
914 }
915 
916 
917 /*
918 
919 Caller must hold pmlmepriv->lock first.
920 
921 
922 */
rtw_update_scanned_network(_adapter * adapter,WLAN_BSSID_EX * target)923 void rtw_update_scanned_network(_adapter *adapter, WLAN_BSSID_EX *target)
924 {
925 	_irqL irqL;
926 	_list	*plist, *phead;
927 	ULONG	bssid_ex_sz;
928 	struct mlme_priv	*pmlmepriv = &(adapter->mlmepriv);
929 	struct mlme_ext_priv	*pmlmeext = &(adapter->mlmeextpriv);
930 #ifdef CONFIG_P2P
931 	struct wifidirect_info *pwdinfo = &(adapter->wdinfo);
932 #endif /* CONFIG_P2P */
933 	_queue	*queue	= &(pmlmepriv->scanned_queue);
934 	struct wlan_network	*pnetwork = NULL;
935 	struct wlan_network	*oldest = NULL;
936 	int target_find = 0;
937 	u8 feature = 0;
938 
939 
940 	_enter_critical_bh(&queue->lock, &irqL);
941 	phead = get_list_head(queue);
942 	plist = get_next(phead);
943 
944 #if 0
945 	RTW_INFO("%s => ssid:%s , rssi:%ld , ss:%d\n",
946 		__func__, target->Ssid.Ssid, target->Rssi, target->PhyInfo.SignalStrength);
947 #endif
948 
949 #ifdef CONFIG_P2P
950 	if (!rtw_p2p_chk_state(pwdinfo, P2P_STATE_NONE))
951 		feature = 1; /* p2p enable */
952 #endif
953 
954 	while (1) {
955 		if (rtw_end_of_queue_search(phead, plist) == _TRUE)
956 			break;
957 
958 		pnetwork = LIST_CONTAINOR(plist, struct wlan_network, list);
959 
960 		rtw_bug_check(pnetwork, pnetwork, pnetwork, pnetwork);
961 
962 #ifdef CONFIG_P2P
963 		if (!rtw_p2p_chk_state(pwdinfo, P2P_STATE_NONE) &&
964 		    (_rtw_memcmp(pnetwork->network.MacAddress, target->MacAddress, ETH_ALEN) == _TRUE)) {
965 			target_find = 1;
966 			break;
967 		}
968 #endif
969 
970 		if (is_same_network(&(pnetwork->network), target, feature)) {
971 			target_find = 1;
972 			break;
973 		}
974 
975 		if (rtw_roam_flags(adapter)) {
976 			/* TODO: don't  select netowrk in the same ess as oldest if it's new enough*/
977 		}
978 #ifdef CONFIG_RSSI_PRIORITY
979 		if ((oldest == NULL) || (pnetwork->network.PhyInfo.SignalStrength < oldest->network.PhyInfo.SignalStrength))
980 			oldest = pnetwork;
981 #else
982 		if (oldest == NULL || time_after(oldest->last_scanned, pnetwork->last_scanned))
983 			oldest = pnetwork;
984 #endif
985 		plist = get_next(plist);
986 
987 	}
988 
989 
990 	/* If we didn't find a match, then get a new network slot to initialize
991 	 * with this beacon's information */
992 	/* if (rtw_end_of_queue_search(phead,plist)== _TRUE) { */
993 	if (!target_find) {
994 		if (_rtw_queue_empty(&(pmlmepriv->free_bss_pool)) == _TRUE) {
995 			/* If there are no more slots, expire the oldest */
996 			/* list_del_init(&oldest->list); */
997 			pnetwork = oldest;
998 			if (pnetwork == NULL) {
999 				goto exit;
1000 			}
1001 #ifdef CONFIG_RSSI_PRIORITY
1002 		RTW_DBG("%s => ssid:%s ,bssid:"MAC_FMT"  will be deleted from scanned_queue (rssi:%ld , ss:%d)\n",
1003 			__func__, pnetwork->network.Ssid.Ssid, MAC_ARG(pnetwork->network.MacAddress), pnetwork->network.Rssi, pnetwork->network.PhyInfo.SignalStrength);
1004 #else
1005 		RTW_DBG("%s => ssid:%s ,bssid:"MAC_FMT" will be deleted from scanned_queue\n",
1006 			__func__, pnetwork->network.Ssid.Ssid, MAC_ARG(pnetwork->network.MacAddress));
1007 #endif
1008 
1009 #ifdef CONFIG_ANTENNA_DIVERSITY
1010 			rtw_hal_get_odm_var(adapter, HAL_ODM_ANTDIV_SELECT, &(target->PhyInfo.Optimum_antenna), NULL);
1011 #endif
1012 			_rtw_memcpy(&(pnetwork->network), target,  get_WLAN_BSSID_EX_sz(target));
1013 			/* pnetwork->last_scanned = rtw_get_current_time(); */
1014 			/* variable initialize */
1015 			pnetwork->fixed = _FALSE;
1016 			pnetwork->last_scanned = rtw_get_current_time();
1017 
1018 			pnetwork->network_type = 0;
1019 			pnetwork->aid = 0;
1020 			pnetwork->join_res = 0;
1021 
1022 			/* bss info not receving from the right channel */
1023 			if (pnetwork->network.PhyInfo.SignalQuality == 101)
1024 				pnetwork->network.PhyInfo.SignalQuality = 0;
1025 		} else {
1026 			/* Otherwise just pull from the free list */
1027 
1028 			pnetwork = rtw_alloc_network(pmlmepriv); /* will update scan_time */
1029 
1030 			if (pnetwork == NULL) {
1031 				goto exit;
1032 			}
1033 
1034 			bssid_ex_sz = get_WLAN_BSSID_EX_sz(target);
1035 			target->Length = bssid_ex_sz;
1036 #ifdef CONFIG_ANTENNA_DIVERSITY
1037 			rtw_hal_get_odm_var(adapter, HAL_ODM_ANTDIV_SELECT, &(target->PhyInfo.Optimum_antenna), NULL);
1038 #endif
1039 			_rtw_memcpy(&(pnetwork->network), target, bssid_ex_sz);
1040 
1041 			pnetwork->last_scanned = rtw_get_current_time();
1042 
1043 			/* bss info not receving from the right channel */
1044 			if (pnetwork->network.PhyInfo.SignalQuality == 101)
1045 				pnetwork->network.PhyInfo.SignalQuality = 0;
1046 
1047 			rtw_list_insert_tail(&(pnetwork->list), &(queue->queue));
1048 
1049 		}
1050 	} else {
1051 		/* we have an entry and we are going to update it. But this entry may
1052 		 * be already expired. In this case we do the same as we found a new
1053 		 * net and call the new_net handler
1054 		 */
1055 		bool update_ie = _TRUE;
1056 
1057 		pnetwork->last_scanned = rtw_get_current_time();
1058 
1059 		/* target.Reserved[0]==BSS_TYPE_BCN, means that scanned network is a bcn frame. */
1060 		if ((pnetwork->network.IELength > target->IELength) && (target->Reserved[0] == BSS_TYPE_BCN))
1061 			update_ie = _FALSE;
1062 
1063 		/* probe resp(3) > beacon(1) > probe req(2) */
1064 		if ((target->Reserved[0] != BSS_TYPE_PROB_REQ) &&
1065 		    (target->Reserved[0] >= pnetwork->network.Reserved[0])
1066 		   )
1067 			update_ie = _TRUE;
1068 		else
1069 			update_ie = _FALSE;
1070 
1071 		update_network(&(pnetwork->network), target, adapter, update_ie);
1072 	}
1073 
1074 exit:
1075 	_exit_critical_bh(&queue->lock, &irqL);
1076 
1077 }
1078 
1079 void rtw_add_network(_adapter *adapter, WLAN_BSSID_EX *pnetwork);
rtw_add_network(_adapter * adapter,WLAN_BSSID_EX * pnetwork)1080 void rtw_add_network(_adapter *adapter, WLAN_BSSID_EX *pnetwork)
1081 {
1082 	_irqL irqL;
1083 	struct	mlme_priv	*pmlmepriv = &(((_adapter *)adapter)->mlmepriv);
1084 	/* _queue	*queue	= &(pmlmepriv->scanned_queue); */
1085 
1086 
1087 	/* _enter_critical_bh(&queue->lock, &irqL); */
1088 
1089 #if defined(CONFIG_P2P) && defined(CONFIG_P2P_REMOVE_GROUP_INFO)
1090 	if (adapter->registrypriv.wifi_spec == 0)
1091 		rtw_bss_ex_del_p2p_attr(pnetwork, P2P_ATTR_GROUP_INFO);
1092 #endif
1093 
1094 	if (!hal_chk_wl_func(adapter, WL_FUNC_MIRACAST))
1095 		rtw_bss_ex_del_wfd_ie(pnetwork);
1096 
1097 	update_current_network(adapter, pnetwork);
1098 
1099 	rtw_update_scanned_network(adapter, pnetwork);
1100 
1101 	/* _exit_critical_bh(&queue->lock, &irqL); */
1102 
1103 }
1104 
1105 /* select the desired network based on the capability of the (i)bss.
1106  * check items: (1) security
1107  *			   (2) network_type
1108  *			   (3) WMM
1109  *			   (4) HT
1110  * (5) others */
1111 int rtw_is_desired_network(_adapter *adapter, struct wlan_network *pnetwork);
rtw_is_desired_network(_adapter * adapter,struct wlan_network * pnetwork)1112 int rtw_is_desired_network(_adapter *adapter, struct wlan_network *pnetwork)
1113 {
1114 	struct security_priv *psecuritypriv = &adapter->securitypriv;
1115 	struct mlme_priv *pmlmepriv = &adapter->mlmepriv;
1116 	u32 desired_encmode;
1117 	u32 privacy;
1118 
1119 	/* u8 wps_ie[512]; */
1120 	uint wps_ielen;
1121 
1122 	int bselected = _TRUE;
1123 
1124 	desired_encmode = psecuritypriv->ndisencryptstatus;
1125 	privacy = pnetwork->network.Privacy;
1126 
1127 	if (check_fwstate(pmlmepriv, WIFI_UNDER_WPS)) {
1128 		if (rtw_get_wps_ie(pnetwork->network.IEs + _FIXED_IE_LENGTH_, pnetwork->network.IELength - _FIXED_IE_LENGTH_, NULL, &wps_ielen) != NULL)
1129 			return _TRUE;
1130 		else
1131 			return _FALSE;
1132 	}
1133 	if (adapter->registrypriv.wifi_spec == 1) { /* for  correct flow of 8021X  to do.... */
1134 		u8 *p = NULL;
1135 		uint ie_len = 0;
1136 
1137 		if ((desired_encmode == Ndis802_11EncryptionDisabled) && (privacy != 0))
1138 			bselected = _FALSE;
1139 
1140 		if (psecuritypriv->ndisauthtype == Ndis802_11AuthModeWPA2PSK) {
1141 			p = rtw_get_ie(pnetwork->network.IEs + _BEACON_IE_OFFSET_, _RSN_IE_2_, &ie_len, (pnetwork->network.IELength - _BEACON_IE_OFFSET_));
1142 			if (p && ie_len > 0)
1143 				bselected = _TRUE;
1144 			else
1145 				bselected = _FALSE;
1146 		}
1147 	}
1148 
1149 
1150 	if ((desired_encmode != Ndis802_11EncryptionDisabled) && (privacy == 0)) {
1151 		RTW_INFO("desired_encmode: %d, privacy: %d\n", desired_encmode, privacy);
1152 		bselected = _FALSE;
1153 	}
1154 
1155 	if (check_fwstate(pmlmepriv, WIFI_ADHOC_STATE) == _TRUE) {
1156 		if (pnetwork->network.InfrastructureMode != pmlmepriv->cur_network.network.InfrastructureMode)
1157 			bselected = _FALSE;
1158 	}
1159 
1160 
1161 	return bselected;
1162 }
1163 
1164 /* TODO: Perry : For Power Management */
rtw_atimdone_event_callback(_adapter * adapter,u8 * pbuf)1165 void rtw_atimdone_event_callback(_adapter	*adapter , u8 *pbuf)
1166 {
1167 
1168 	return;
1169 }
1170 
1171 
rtw_survey_event_callback(_adapter * adapter,u8 * pbuf)1172 void rtw_survey_event_callback(_adapter	*adapter, u8 *pbuf)
1173 {
1174 	_irqL  irqL;
1175 	u32 len;
1176 	WLAN_BSSID_EX *pnetwork;
1177 	struct	mlme_priv	*pmlmepriv = &(adapter->mlmepriv);
1178 
1179 
1180 	pnetwork = (WLAN_BSSID_EX *)pbuf;
1181 
1182 
1183 #ifdef CONFIG_RTL8712
1184 	/* endian_convert */
1185 	pnetwork->Length = le32_to_cpu(pnetwork->Length);
1186 	pnetwork->Ssid.SsidLength = le32_to_cpu(pnetwork->Ssid.SsidLength);
1187 	pnetwork->Privacy = le32_to_cpu(pnetwork->Privacy);
1188 	pnetwork->Rssi = le32_to_cpu(pnetwork->Rssi);
1189 	pnetwork->NetworkTypeInUse = le32_to_cpu(pnetwork->NetworkTypeInUse);
1190 	pnetwork->Configuration.ATIMWindow = le32_to_cpu(pnetwork->Configuration.ATIMWindow);
1191 	pnetwork->Configuration.BeaconPeriod = le32_to_cpu(pnetwork->Configuration.BeaconPeriod);
1192 	pnetwork->Configuration.DSConfig = le32_to_cpu(pnetwork->Configuration.DSConfig);
1193 	pnetwork->Configuration.FHConfig.DwellTime = le32_to_cpu(pnetwork->Configuration.FHConfig.DwellTime);
1194 	pnetwork->Configuration.FHConfig.HopPattern = le32_to_cpu(pnetwork->Configuration.FHConfig.HopPattern);
1195 	pnetwork->Configuration.FHConfig.HopSet = le32_to_cpu(pnetwork->Configuration.FHConfig.HopSet);
1196 	pnetwork->Configuration.FHConfig.Length = le32_to_cpu(pnetwork->Configuration.FHConfig.Length);
1197 	pnetwork->Configuration.Length = le32_to_cpu(pnetwork->Configuration.Length);
1198 	pnetwork->InfrastructureMode = le32_to_cpu(pnetwork->InfrastructureMode);
1199 	pnetwork->IELength = le32_to_cpu(pnetwork->IELength);
1200 #endif
1201 
1202 	len = get_WLAN_BSSID_EX_sz(pnetwork);
1203 	if (len > (sizeof(WLAN_BSSID_EX))) {
1204 		return;
1205 	}
1206 
1207 
1208 	_enter_critical_bh(&pmlmepriv->lock, &irqL);
1209 
1210 	/* update IBSS_network 's timestamp */
1211 	if ((check_fwstate(pmlmepriv, WIFI_ADHOC_MASTER_STATE)) == _TRUE) {
1212 		if (_rtw_memcmp(&(pmlmepriv->cur_network.network.MacAddress), pnetwork->MacAddress, ETH_ALEN)) {
1213 			struct wlan_network *ibss_wlan = NULL;
1214 			_irqL	irqL;
1215 
1216 			_rtw_memcpy(pmlmepriv->cur_network.network.IEs, pnetwork->IEs, 8);
1217 			_enter_critical_bh(&(pmlmepriv->scanned_queue.lock), &irqL);
1218 			ibss_wlan = rtw_find_network(&pmlmepriv->scanned_queue,  pnetwork->MacAddress);
1219 			if (ibss_wlan) {
1220 				_rtw_memcpy(ibss_wlan->network.IEs , pnetwork->IEs, 8);
1221 				_exit_critical_bh(&(pmlmepriv->scanned_queue.lock), &irqL);
1222 				goto exit;
1223 			}
1224 			_exit_critical_bh(&(pmlmepriv->scanned_queue.lock), &irqL);
1225 		}
1226 	}
1227 
1228 	/* lock pmlmepriv->lock when you accessing network_q */
1229 	if ((check_fwstate(pmlmepriv, _FW_UNDER_LINKING)) == _FALSE) {
1230 		if (pnetwork->Ssid.Ssid[0] == 0)
1231 			pnetwork->Ssid.SsidLength = 0;
1232 		rtw_add_network(adapter, pnetwork);
1233 	}
1234 
1235 exit:
1236 
1237 	_exit_critical_bh(&pmlmepriv->lock, &irqL);
1238 
1239 
1240 	return;
1241 }
1242 
rtw_surveydone_event_callback(_adapter * adapter,u8 * pbuf)1243 void rtw_surveydone_event_callback(_adapter	*adapter, u8 *pbuf)
1244 {
1245 	_irqL  irqL;
1246 	struct	mlme_priv	*pmlmepriv = &(adapter->mlmepriv);
1247 #ifdef CONFIG_RTW_80211R
1248 	struct mlme_ext_priv	*pmlmeext = &adapter->mlmeextpriv;
1249 #endif
1250 
1251 #ifdef CONFIG_MLME_EXT
1252 	mlmeext_surveydone_event_callback(adapter);
1253 #endif
1254 
1255 
1256 	_enter_critical_bh(&pmlmepriv->lock, &irqL);
1257 	if (pmlmepriv->wps_probe_req_ie) {
1258 		u32 free_len = pmlmepriv->wps_probe_req_ie_len;
1259 		pmlmepriv->wps_probe_req_ie_len = 0;
1260 		rtw_mfree(pmlmepriv->wps_probe_req_ie, free_len);
1261 		pmlmepriv->wps_probe_req_ie = NULL;
1262 	}
1263 
1264 
1265 	if (check_fwstate(pmlmepriv, _FW_UNDER_SURVEY) == _FALSE) {
1266 		RTW_INFO(FUNC_ADPT_FMT" fw_state:0x%x\n", FUNC_ADPT_ARG(adapter), get_fwstate(pmlmepriv));
1267 		/* rtw_warn_on(1); */
1268 	}
1269 
1270 	_clr_fwstate_(pmlmepriv, _FW_UNDER_SURVEY);
1271 	_exit_critical_bh(&pmlmepriv->lock, &irqL);
1272 
1273 	_cancel_timer_ex(&pmlmepriv->scan_to_timer);
1274 
1275 	_enter_critical_bh(&pmlmepriv->lock, &irqL);
1276 
1277 #ifdef CONFIG_NEW_SIGNAL_STAT_PROCESS
1278 	rtw_set_signal_stat_timer(&adapter->recvpriv);
1279 #endif
1280 
1281 	if (pmlmepriv->to_join == _TRUE) {
1282 		if ((check_fwstate(pmlmepriv, WIFI_ADHOC_STATE) == _TRUE)) {
1283 			if (check_fwstate(pmlmepriv, _FW_LINKED) == _FALSE) {
1284 				set_fwstate(pmlmepriv, _FW_UNDER_LINKING);
1285 
1286 				if (rtw_select_and_join_from_scanned_queue(pmlmepriv) == _SUCCESS)
1287 					_set_timer(&pmlmepriv->assoc_timer, MAX_JOIN_TIMEOUT);
1288 				else {
1289 					WLAN_BSSID_EX    *pdev_network = &(adapter->registrypriv.dev_network);
1290 					u8 *pibss = adapter->registrypriv.dev_network.MacAddress;
1291 
1292 					/* pmlmepriv->fw_state ^= _FW_UNDER_SURVEY; */ /* because don't set assoc_timer */
1293 					_clr_fwstate_(pmlmepriv, _FW_UNDER_SURVEY);
1294 
1295 
1296 					_rtw_memset(&pdev_network->Ssid, 0, sizeof(NDIS_802_11_SSID));
1297 					_rtw_memcpy(&pdev_network->Ssid, &pmlmepriv->assoc_ssid, sizeof(NDIS_802_11_SSID));
1298 
1299 					rtw_update_registrypriv_dev_network(adapter);
1300 					rtw_generate_random_ibss(pibss);
1301 
1302 					/*pmlmepriv->fw_state = WIFI_ADHOC_MASTER_STATE;*/
1303 					init_fwstate(pmlmepriv, WIFI_ADHOC_MASTER_STATE);
1304 
1305 					if (rtw_create_ibss_cmd(adapter, 0) != _SUCCESS)
1306 						RTW_ERR("rtw_create_ibss_cmd FAIL\n");
1307 
1308 					pmlmepriv->to_join = _FALSE;
1309 				}
1310 			}
1311 		} else {
1312 			int s_ret;
1313 			set_fwstate(pmlmepriv, _FW_UNDER_LINKING);
1314 			pmlmepriv->to_join = _FALSE;
1315 			s_ret = rtw_select_and_join_from_scanned_queue(pmlmepriv);
1316 			if (_SUCCESS == s_ret)
1317 				_set_timer(&pmlmepriv->assoc_timer, MAX_JOIN_TIMEOUT);
1318 			else if (s_ret == 2) { /* there is no need to wait for join */
1319 				_clr_fwstate_(pmlmepriv, _FW_UNDER_LINKING);
1320 				rtw_indicate_connect(adapter);
1321 			} else {
1322 				RTW_INFO("try_to_join, but select scanning queue fail, to_roam:%d\n", rtw_to_roam(adapter));
1323 
1324 				if (rtw_to_roam(adapter) != 0) {
1325 					if (rtw_dec_to_roam(adapter) == 0
1326 					    || _SUCCESS != rtw_sitesurvey_cmd(adapter, &pmlmepriv->assoc_ssid, 1, NULL, 0)
1327 					   ) {
1328 						rtw_set_to_roam(adapter, 0);
1329 #ifdef CONFIG_INTEL_WIDI
1330 						if (adapter->mlmepriv.widi_state == INTEL_WIDI_STATE_ROAMING) {
1331 							_rtw_memset(pmlmepriv->sa_ext, 0x00, L2SDTA_SERVICE_VE_LEN);
1332 							intel_widi_wk_cmd(adapter, INTEL_WIDI_LISTEN_WK, NULL, 0);
1333 							RTW_INFO("change to widi listen\n");
1334 						}
1335 #endif /* CONFIG_INTEL_WIDI */
1336 						rtw_free_assoc_resources(adapter, 1);
1337 						rtw_indicate_disconnect(adapter, 0, _FALSE);
1338 					} else
1339 						pmlmepriv->to_join = _TRUE;
1340 				} else
1341 					rtw_indicate_disconnect(adapter, 0, _FALSE);
1342 				_clr_fwstate_(pmlmepriv, _FW_UNDER_LINKING);
1343 			}
1344 		}
1345 	} else {
1346 		if (rtw_chk_roam_flags(adapter, RTW_ROAM_ACTIVE)) {
1347 			if (check_fwstate(pmlmepriv, WIFI_STATION_STATE)
1348 			    && check_fwstate(pmlmepriv, _FW_LINKED)) {
1349 				if (rtw_select_roaming_candidate(pmlmepriv) == _SUCCESS) {
1350 #ifdef CONFIG_RTW_80211R
1351 					if (rtw_chk_ft_flags(adapter, RTW_FT_OVER_DS_SUPPORTED)) {
1352 						start_clnt_ft_action(adapter, (u8 *)pmlmepriv->roam_network->network.MacAddress);
1353 					} else {
1354 						/*wait a little time to retrieve packets buffered in the current ap while scan*/
1355 						_set_timer(&pmlmeext->ft_roam_timer, 30);
1356 					}
1357 #else
1358 					receive_disconnect(adapter, pmlmepriv->cur_network.network.MacAddress
1359 						, WLAN_REASON_ACTIVE_ROAM, _FALSE);
1360 #endif
1361 				}
1362 			}
1363 		}
1364 	}
1365 
1366 	/* RTW_INFO("scan complete in %dms\n",rtw_get_passing_time_ms(pmlmepriv->scan_start_time)); */
1367 
1368 	_exit_critical_bh(&pmlmepriv->lock, &irqL);
1369 
1370 #ifdef CONFIG_P2P_PS
1371 	if (check_fwstate(pmlmepriv, _FW_LINKED) == _TRUE)
1372 		p2p_ps_wk_cmd(adapter, P2P_PS_SCAN_DONE, 0);
1373 #endif /* CONFIG_P2P_PS */
1374 
1375 	rtw_mi_os_xmit_schedule(adapter);
1376 
1377 #ifdef CONFIG_DRVEXT_MODULE_WSC
1378 	drvext_surveydone_callback(&adapter->drvextpriv);
1379 #endif
1380 
1381 #ifdef DBG_CONFIG_ERROR_DETECT
1382 	{
1383 		struct mlme_ext_priv *pmlmeext = &adapter->mlmeextpriv;
1384 		if (pmlmeext->sitesurvey_res.bss_cnt == 0) {
1385 			/* rtw_hal_sreset_reset(adapter); */
1386 		}
1387 	}
1388 #endif
1389 
1390 #ifdef CONFIG_IOCTL_CFG80211
1391 	rtw_cfg80211_surveydone_event_callback(adapter);
1392 #endif /* CONFIG_IOCTL_CFG80211 */
1393 
1394 	rtw_indicate_scan_done(adapter, _FALSE);
1395 
1396 #if defined(CONFIG_CONCURRENT_MODE) && defined(CONFIG_IOCTL_CFG80211)
1397 	rtw_cfg80211_indicate_scan_done_for_buddy(adapter, _FALSE);
1398 #endif
1399 
1400 }
1401 
rtw_dummy_event_callback(_adapter * adapter,u8 * pbuf)1402 void rtw_dummy_event_callback(_adapter *adapter , u8 *pbuf)
1403 {
1404 
1405 }
1406 
rtw_fwdbg_event_callback(_adapter * adapter,u8 * pbuf)1407 void rtw_fwdbg_event_callback(_adapter *adapter , u8 *pbuf)
1408 {
1409 
1410 }
1411 
free_scanqueue(struct mlme_priv * pmlmepriv)1412 static void free_scanqueue(struct	mlme_priv *pmlmepriv)
1413 {
1414 	_irqL irqL, irqL0;
1415 	_queue *free_queue = &pmlmepriv->free_bss_pool;
1416 	_queue *scan_queue = &pmlmepriv->scanned_queue;
1417 	_list	*plist, *phead, *ptemp;
1418 
1419 
1420 	_enter_critical_bh(&scan_queue->lock, &irqL0);
1421 	_enter_critical_bh(&free_queue->lock, &irqL);
1422 
1423 	phead = get_list_head(scan_queue);
1424 	plist = get_next(phead);
1425 
1426 	while (plist != phead) {
1427 		ptemp = get_next(plist);
1428 		rtw_list_delete(plist);
1429 		rtw_list_insert_tail(plist, &free_queue->queue);
1430 		plist = ptemp;
1431 		pmlmepriv->num_of_scanned--;
1432 	}
1433 
1434 	_exit_critical_bh(&free_queue->lock, &irqL);
1435 	_exit_critical_bh(&scan_queue->lock, &irqL0);
1436 
1437 }
1438 
rtw_reset_rx_info(_adapter * adapter)1439 void rtw_reset_rx_info(_adapter *adapter)
1440 {
1441 	struct recv_priv  *precvpriv = &adapter->recvpriv;
1442 
1443 	precvpriv->dbg_rx_ampdu_drop_count = 0;
1444 	precvpriv->dbg_rx_ampdu_forced_indicate_count = 0;
1445 	precvpriv->dbg_rx_ampdu_loss_count = 0;
1446 	precvpriv->dbg_rx_dup_mgt_frame_drop_count = 0;
1447 	precvpriv->dbg_rx_ampdu_window_shift_cnt = 0;
1448 	precvpriv->dbg_rx_drop_count = 0;
1449 	precvpriv->dbg_rx_conflic_mac_addr_cnt = 0;
1450 }
1451 
1452 /*
1453 *rtw_free_assoc_resources: the caller has to lock pmlmepriv->lock
1454 */
rtw_free_assoc_resources(_adapter * adapter,int lock_scanned_queue)1455 void rtw_free_assoc_resources(_adapter *adapter, int lock_scanned_queue)
1456 {
1457 	_irqL irqL;
1458 	struct wlan_network *pwlan = NULL;
1459 	struct	mlme_priv *pmlmepriv = &adapter->mlmepriv;
1460 	struct	sta_priv *pstapriv = &adapter->stapriv;
1461 	struct wlan_network *tgt_network = &pmlmepriv->cur_network;
1462 
1463 
1464 #ifdef CONFIG_TDLS
1465 	struct tdls_info *ptdlsinfo = &adapter->tdlsinfo;
1466 #endif /* CONFIG_TDLS */
1467 
1468 
1469 	RTW_INFO("%s-"ADPT_FMT" tgt_network MacAddress=" MAC_FMT" ssid=%s\n",
1470 		__func__, ADPT_ARG(adapter), MAC_ARG(tgt_network->network.MacAddress), tgt_network->network.Ssid.Ssid);
1471 
1472 	if (check_fwstate(pmlmepriv, WIFI_STATION_STATE)) {
1473 		struct sta_info *psta;
1474 
1475 		psta = rtw_get_stainfo(&adapter->stapriv, tgt_network->network.MacAddress);
1476 
1477 #ifdef CONFIG_TDLS
1478 		if (ptdlsinfo->link_established == _TRUE) {
1479 			rtw_tdls_cmd(adapter, NULL, TDLS_RS_RCR);
1480 			rtw_reset_tdls_info(adapter);
1481 			rtw_free_all_stainfo(adapter);
1482 			/* _enter_critical_bh(&(pstapriv->sta_hash_lock), &irqL); */
1483 		} else
1484 #endif /* CONFIG_TDLS */
1485 		{
1486 			/* _enter_critical_bh(&(pstapriv->sta_hash_lock), &irqL); */
1487 			rtw_free_stainfo(adapter,  psta);
1488 		}
1489 
1490 		/* _exit_critical_bh(&(pstapriv->sta_hash_lock), &irqL); */
1491 
1492 	}
1493 
1494 	if (check_fwstate(pmlmepriv, WIFI_ADHOC_STATE | WIFI_ADHOC_MASTER_STATE)) {
1495 		struct sta_info *psta;
1496 
1497 		rtw_free_all_stainfo(adapter);
1498 
1499 		psta = rtw_get_bcmc_stainfo(adapter);
1500 		/* _enter_critical_bh(&(pstapriv->sta_hash_lock), &irqL);		 */
1501 		rtw_free_stainfo(adapter, psta);
1502 		/* _exit_critical_bh(&(pstapriv->sta_hash_lock), &irqL);		 */
1503 
1504 		rtw_init_bcmc_stainfo(adapter);
1505 	}
1506 
1507 	if (lock_scanned_queue)
1508 		_enter_critical_bh(&(pmlmepriv->scanned_queue.lock), &irqL);
1509 
1510 	pwlan = _rtw_find_same_network(&pmlmepriv->scanned_queue, tgt_network);
1511 	if ((pwlan)  && (!check_fwstate(pmlmepriv, WIFI_UNDER_WPS))) {
1512 		pwlan->fixed = _FALSE;
1513 
1514 		RTW_INFO("free disconnecting network of scanned_queue\n");
1515 		rtw_free_network_nolock(adapter, pwlan);
1516 #ifdef CONFIG_P2P
1517 		if (!rtw_p2p_chk_state(&adapter->wdinfo, P2P_STATE_NONE)) {
1518 			rtw_mi_set_scan_deny(adapter, 2000);
1519 			/* rtw_clear_scan_deny(adapter);			 */
1520 		}
1521 #endif /* CONFIG_P2P */
1522 	} else {
1523 		if (pwlan == NULL)
1524 			RTW_INFO("free disconnecting network of scanned_queue failed due to pwlan== NULL\n\n");
1525 		if (check_fwstate(pmlmepriv, WIFI_UNDER_WPS))
1526 			RTW_INFO("donot free disconnecting network of scanned_queue when WIFI_UNDER_WPS\n\n");
1527 	}
1528 
1529 
1530 	if ((check_fwstate(pmlmepriv, WIFI_ADHOC_MASTER_STATE) && (adapter->stapriv.asoc_sta_count == 1))
1531 	    /*||check_fwstate(pmlmepriv, WIFI_STATION_STATE)*/) {
1532 		if (pwlan)
1533 			rtw_free_network_nolock(adapter, pwlan);
1534 	}
1535 
1536 	if (lock_scanned_queue)
1537 		_exit_critical_bh(&(pmlmepriv->scanned_queue.lock), &irqL);
1538 
1539 	adapter->securitypriv.key_mask = 0;
1540 
1541 	rtw_reset_rx_info(adapter);
1542 
1543 
1544 }
1545 
1546 /*
1547 *rtw_indicate_connect: the caller has to lock pmlmepriv->lock
1548 */
rtw_indicate_connect(_adapter * padapter)1549 void rtw_indicate_connect(_adapter *padapter)
1550 {
1551 	struct mlme_priv	*pmlmepriv = &padapter->mlmepriv;
1552 	struct xmit_priv	*pxmitpriv = &padapter->xmitpriv;
1553 
1554 
1555 
1556 	pmlmepriv->to_join = _FALSE;
1557 
1558 	if (!check_fwstate(&padapter->mlmepriv, _FW_LINKED)) {
1559 
1560 		set_fwstate(pmlmepriv, _FW_LINKED);
1561 
1562 		rtw_led_control(padapter, LED_CTL_LINK);
1563 
1564 
1565 #ifdef CONFIG_DRVEXT_MODULE
1566 		if (padapter->drvextpriv.enable_wpa)
1567 			indicate_l2_connect(padapter);
1568 		else
1569 #endif
1570 		{
1571 			rtw_os_indicate_connect(padapter);
1572 		}
1573 
1574 	}
1575 
1576 	rtw_set_to_roam(padapter, 0);
1577 #ifdef CONFIG_INTEL_WIDI
1578 	if (padapter->mlmepriv.widi_state == INTEL_WIDI_STATE_ROAMING) {
1579 		_rtw_memset(pmlmepriv->sa_ext, 0x00, L2SDTA_SERVICE_VE_LEN);
1580 		intel_widi_wk_cmd(padapter, INTEL_WIDI_LISTEN_WK, NULL, 0);
1581 		RTW_INFO("change to widi listen\n");
1582 	}
1583 #endif /* CONFIG_INTEL_WIDI */
1584 	if (!MLME_IS_AP(padapter) && !MLME_IS_MESH(padapter))
1585 		rtw_mi_set_scan_deny(padapter, 3000);
1586 
1587 
1588 }
1589 
1590 
1591 /*
1592 *rtw_indicate_disconnect: the caller has to lock pmlmepriv->lock
1593 */
rtw_indicate_disconnect(_adapter * padapter,u16 reason,u8 locally_generated)1594 void rtw_indicate_disconnect(_adapter *padapter, u16 reason, u8 locally_generated)
1595 {
1596 	struct	mlme_priv *pmlmepriv = &padapter->mlmepriv;
1597 	struct mlme_ext_priv *pmlmeext = &(padapter->mlmeextpriv);
1598 	struct mlme_ext_info *pmlmeinfo = &(pmlmeext->mlmext_info);
1599 	WLAN_BSSID_EX	*cur_network = &(pmlmeinfo->network);
1600 	struct sta_info *psta;
1601 	struct sta_priv *pstapriv = &padapter->stapriv;
1602 	u8 *wps_ie = NULL;
1603 	uint wpsie_len = 0;
1604 
1605 
1606 
1607 	_clr_fwstate_(pmlmepriv, _FW_UNDER_LINKING | WIFI_UNDER_WPS);
1608 
1609 	/* force to clear cur_network_scanned's SELECTED REGISTRAR */
1610 	if (pmlmepriv->cur_network_scanned) {
1611 		WLAN_BSSID_EX	*current_joined_bss = &(pmlmepriv->cur_network_scanned->network);
1612 		if (current_joined_bss) {
1613 			wps_ie = rtw_get_wps_ie(current_joined_bss->IEs + _FIXED_IE_LENGTH_,
1614 				current_joined_bss->IELength - _FIXED_IE_LENGTH_, NULL, &wpsie_len);
1615 			if (wps_ie && wpsie_len > 0) {
1616 				u8 *attr = NULL;
1617 				u32 attr_len;
1618 				attr = rtw_get_wps_attr(wps_ie, wpsie_len, WPS_ATTR_SELECTED_REGISTRAR,
1619 							NULL, &attr_len);
1620 				if (attr)
1621 					*(attr + 4) = 0;
1622 			}
1623 		}
1624 	}
1625 	/* RTW_INFO("clear wps when %s\n", __func__); */
1626 
1627 	if (rtw_to_roam(padapter) > 0)
1628 		_clr_fwstate_(pmlmepriv, _FW_LINKED);
1629 
1630 #ifdef CONFIG_WAPI_SUPPORT
1631 	psta = rtw_get_stainfo(pstapriv, cur_network->MacAddress);
1632 	if (check_fwstate(pmlmepriv, WIFI_STATION_STATE))
1633 		rtw_wapi_return_one_sta_info(padapter, psta->cmn.mac_addr);
1634 	else if (check_fwstate(pmlmepriv, WIFI_ADHOC_STATE) ||
1635 		 check_fwstate(pmlmepriv, WIFI_ADHOC_MASTER_STATE))
1636 		rtw_wapi_return_all_sta_info(padapter);
1637 #endif
1638 
1639 	if (check_fwstate(&padapter->mlmepriv, _FW_LINKED)
1640 	    || (rtw_to_roam(padapter) <= 0)
1641 	   ) {
1642 
1643 		rtw_os_indicate_disconnect(padapter, reason, locally_generated);
1644 
1645 		/* set ips_deny_time to avoid enter IPS before LPS leave */
1646 		rtw_set_ips_deny(padapter, 3000);
1647 
1648 		_clr_fwstate_(pmlmepriv, _FW_LINKED);
1649 
1650 		rtw_led_control(padapter, LED_CTL_NO_LINK);
1651 
1652 		rtw_clear_scan_deny(padapter);
1653 	}
1654 
1655 #ifdef CONFIG_P2P_PS
1656 	p2p_ps_wk_cmd(padapter, P2P_PS_DISABLE, 1);
1657 #endif /* CONFIG_P2P_PS */
1658 
1659 #ifdef CONFIG_LPS
1660 	rtw_lps_ctrl_wk_cmd(padapter, LPS_CTRL_DISCONNECT, 1);
1661 #endif
1662 
1663 #ifdef CONFIG_BEAMFORMING
1664 	beamforming_wk_cmd(padapter, BEAMFORMING_CTRL_LEAVE, cur_network->MacAddress, ETH_ALEN, 1);
1665 #endif /*CONFIG_BEAMFORMING*/
1666 
1667 }
1668 
rtw_indicate_scan_done(_adapter * padapter,bool aborted)1669 inline void rtw_indicate_scan_done(_adapter *padapter, bool aborted)
1670 {
1671 	RTW_INFO(FUNC_ADPT_FMT"\n", FUNC_ADPT_ARG(padapter));
1672 
1673 	rtw_os_indicate_scan_done(padapter, aborted);
1674 
1675 #ifdef CONFIG_IPS
1676 	if (is_primary_adapter(padapter)
1677 	    && (_FALSE == adapter_to_pwrctl(padapter)->bInSuspend)
1678 	    && (check_fwstate(&padapter->mlmepriv, WIFI_ASOC_STATE | WIFI_UNDER_LINKING) == _FALSE)) {
1679 		struct pwrctrl_priv *pwrpriv;
1680 
1681 		pwrpriv = adapter_to_pwrctl(padapter);
1682 		rtw_set_ips_deny(padapter, 0);
1683 #ifdef CONFIG_IPS_CHECK_IN_WD
1684 		_set_timer(&adapter_to_dvobj(padapter)->dynamic_chk_timer, 1);
1685 #else /* !CONFIG_IPS_CHECK_IN_WD */
1686 		_rtw_set_pwr_state_check_timer(pwrpriv, 1);
1687 #endif /* !CONFIG_IPS_CHECK_IN_WD */
1688 	}
1689 #endif /* CONFIG_IPS */
1690 }
1691 
_rtw_wait_scan_done(_adapter * adapter,u8 abort,u32 timeout_ms)1692 static u32 _rtw_wait_scan_done(_adapter *adapter, u8 abort, u32 timeout_ms)
1693 {
1694 	systime start;
1695 	u32 pass_ms;
1696 	struct mlme_priv *pmlmepriv = &(adapter->mlmepriv);
1697 	struct mlme_ext_priv *pmlmeext = &(adapter->mlmeextpriv);
1698 
1699 	start = rtw_get_current_time();
1700 
1701 	pmlmeext->scan_abort = abort;
1702 
1703 	while (check_fwstate(pmlmepriv, _FW_UNDER_SURVEY)
1704 	       && rtw_get_passing_time_ms(start) <= timeout_ms) {
1705 
1706 		if (RTW_CANNOT_RUN(adapter))
1707 			break;
1708 
1709 		RTW_INFO(FUNC_NDEV_FMT"fw_state=_FW_UNDER_SURVEY!\n", FUNC_NDEV_ARG(adapter->pnetdev));
1710 		rtw_msleep_os(20);
1711 	}
1712 
1713 	if (_TRUE == abort) {
1714 		if (check_fwstate(pmlmepriv, _FW_UNDER_SURVEY)) {
1715 			if (!RTW_CANNOT_RUN(adapter))
1716 				RTW_INFO(FUNC_NDEV_FMT"waiting for scan_abort time out!\n", FUNC_NDEV_ARG(adapter->pnetdev));
1717 #ifdef CONFIG_PLATFORM_MSTAR
1718 			/*_clr_fwstate_(pmlmepriv, _FW_UNDER_SURVEY);*/
1719 			set_survey_timer(pmlmeext, 0);
1720 			mlme_set_scan_to_timer(pmlmepriv, 50);
1721 #endif
1722 			rtw_indicate_scan_done(adapter, _TRUE);
1723 		}
1724 	}
1725 
1726 	pmlmeext->scan_abort = _FALSE;
1727 	pass_ms = rtw_get_passing_time_ms(start);
1728 
1729 	return pass_ms;
1730 
1731 }
1732 
rtw_scan_wait_completed(_adapter * adapter)1733 void rtw_scan_wait_completed(_adapter *adapter)
1734 {
1735 	u32 scan_to = SCANNING_TIMEOUT;
1736 
1737 #ifdef CONFIG_SCAN_BACKOP
1738 	if (is_supported_5g(adapter->registrypriv.wireless_mode)
1739 	    && IsSupported24G(adapter->registrypriv.wireless_mode)) /*dual band*/
1740 		scan_to = CONC_SCANNING_TIMEOUT_DUAL_BAND;
1741 	else /*single band*/
1742 		scan_to = CONC_SCANNING_TIMEOUT_SINGLE_BAND;
1743 #endif /* CONFIG_SCAN_BACKOP */
1744 
1745 	_rtw_wait_scan_done(adapter, _FALSE, scan_to);
1746 }
1747 
rtw_scan_abort_timeout(_adapter * adapter,u32 timeout_ms)1748 u32 rtw_scan_abort_timeout(_adapter *adapter, u32 timeout_ms)
1749 {
1750 	return _rtw_wait_scan_done(adapter, _TRUE, timeout_ms);
1751 }
1752 
rtw_scan_abort_no_wait(_adapter * adapter)1753 void rtw_scan_abort_no_wait(_adapter *adapter)
1754 {
1755 	struct mlme_priv *pmlmepriv = &(adapter->mlmepriv);
1756 	struct mlme_ext_priv *pmlmeext = &(adapter->mlmeextpriv);
1757 
1758 	if (check_fwstate(pmlmepriv, _FW_UNDER_SURVEY))
1759 		pmlmeext->scan_abort = _TRUE;
1760 }
1761 
rtw_scan_abort(_adapter * adapter)1762 void rtw_scan_abort(_adapter *adapter)
1763 {
1764 	rtw_scan_abort_timeout(adapter, 200);
1765 }
1766 
rtw_joinbss_update_stainfo(_adapter * padapter,struct wlan_network * pnetwork)1767 static struct sta_info *rtw_joinbss_update_stainfo(_adapter *padapter, struct wlan_network *pnetwork)
1768 {
1769 	int i;
1770 	struct sta_info *bmc_sta, *psta = NULL;
1771 	struct recv_reorder_ctrl *preorder_ctrl;
1772 	struct sta_priv *pstapriv = &padapter->stapriv;
1773 	struct mlme_ext_priv	*pmlmeext = &padapter->mlmeextpriv;
1774 
1775 	psta = rtw_get_stainfo(pstapriv, pnetwork->network.MacAddress);
1776 	if (psta == NULL)
1777 		psta = rtw_alloc_stainfo(pstapriv, pnetwork->network.MacAddress);
1778 
1779 	if (psta) { /* update ptarget_sta */
1780 		RTW_INFO("%s\n", __FUNCTION__);
1781 
1782 		psta->cmn.aid  = pnetwork->join_res;
1783 
1784 #if 0 /* alloc macid when call rtw_alloc_stainfo(), and release macid when call rtw_free_stainfo() */
1785 #ifdef CONFIG_CONCURRENT_MODE
1786 
1787 		if (PRIMARY_ADAPTER == padapter->adapter_type)
1788 			psta->cmn.mac_id = 0;
1789 		else
1790 			psta->cmn.mac_id = 2;
1791 #else
1792 		psta->cmn.mac_id = 0;
1793 #endif
1794 #endif /* removed */
1795 
1796 		update_sta_info(padapter, psta);
1797 
1798 		/* update station supportRate */
1799 		psta->bssratelen = rtw_get_rateset_len(pnetwork->network.SupportedRates);
1800 		_rtw_memcpy(psta->bssrateset, pnetwork->network.SupportedRates, psta->bssratelen);
1801 		rtw_hal_update_sta_ra_info(padapter, psta);
1802 
1803 		psta->wireless_mode = pmlmeext->cur_wireless_mode;
1804 		rtw_hal_update_sta_wset(padapter, psta);
1805 
1806 		/* sta mode */
1807 		rtw_hal_set_odm_var(padapter, HAL_ODM_STA_INFO, psta, _TRUE);
1808 
1809 		/* security related */
1810 #ifdef CONFIG_RTW_80211R
1811 		if ((padapter->securitypriv.dot11AuthAlgrthm == dot11AuthAlgrthm_8021X) && (psta->ft_pairwise_key_installed == _FALSE)) {
1812 #else
1813 		if (padapter->securitypriv.dot11AuthAlgrthm == dot11AuthAlgrthm_8021X) {
1814 #endif
1815 			padapter->securitypriv.binstallGrpkey = _FALSE;
1816 			padapter->securitypriv.busetkipkey = _FALSE;
1817 			padapter->securitypriv.bgrpkey_handshake = _FALSE;
1818 
1819 			psta->ieee8021x_blocked = _TRUE;
1820 			psta->dot118021XPrivacy = padapter->securitypriv.dot11PrivacyAlgrthm;
1821 
1822 			_rtw_memset((u8 *)&psta->dot118021x_UncstKey, 0, sizeof(union Keytype));
1823 
1824 			_rtw_memset((u8 *)&psta->dot11tkiprxmickey, 0, sizeof(union Keytype));
1825 			_rtw_memset((u8 *)&psta->dot11tkiptxmickey, 0, sizeof(union Keytype));
1826 
1827 			_rtw_memset((u8 *)&psta->dot11txpn, 0, sizeof(union pn48));
1828 			psta->dot11txpn.val = psta->dot11txpn.val + 1;
1829 #ifdef CONFIG_IEEE80211W
1830 			_rtw_memset((u8 *)&psta->dot11wtxpn, 0, sizeof(union pn48));
1831 #endif /* CONFIG_IEEE80211W */
1832 			_rtw_memset((u8 *)&psta->dot11rxpn, 0, sizeof(union pn48));
1833 		}
1834 
1835 		/*	Commented by Albert 2012/07/21 */
1836 		/*	When doing the WPS, the wps_ie_len won't equal to 0 */
1837 		/*	And the Wi-Fi driver shouldn't allow the data packet to be tramsmitted. */
1838 		if (padapter->securitypriv.wps_ie_len != 0) {
1839 			psta->ieee8021x_blocked = _TRUE;
1840 			padapter->securitypriv.wps_ie_len = 0;
1841 		}
1842 
1843 
1844 		/* for A-MPDU Rx reordering buffer control for bmc_sta & sta_info */
1845 		/* if A-MPDU Rx is enabled, reseting  rx_ordering_ctrl wstart_b(indicate_seq) to default value=0xffff */
1846 		/* todo: check if AP can send A-MPDU packets */
1847 		for (i = 0; i < 16 ; i++) {
1848 			/* preorder_ctrl = &precvpriv->recvreorder_ctrl[i]; */
1849 			preorder_ctrl = &psta->recvreorder_ctrl[i];
1850 			preorder_ctrl->enable = _FALSE;
1851 			preorder_ctrl->indicate_seq = 0xffff;
1852 #ifdef DBG_RX_SEQ
1853 			RTW_INFO("DBG_RX_SEQ %s:%d indicate_seq:%u\n", __FUNCTION__, __LINE__,
1854 				 preorder_ctrl->indicate_seq);
1855 #endif
1856 			preorder_ctrl->wend_b = 0xffff;
1857 			preorder_ctrl->wsize_b = 64;/* max_ampdu_sz; */ /* ex. 32(kbytes) -> wsize_b=32 */
1858 			preorder_ctrl->ampdu_size = RX_AMPDU_SIZE_INVALID;
1859 		}
1860 
1861 
1862 		bmc_sta = rtw_get_bcmc_stainfo(padapter);
1863 		if (bmc_sta) {
1864 			for (i = 0; i < 16 ; i++) {
1865 				/* preorder_ctrl = &precvpriv->recvreorder_ctrl[i]; */
1866 				preorder_ctrl = &bmc_sta->recvreorder_ctrl[i];
1867 				preorder_ctrl->enable = _FALSE;
1868 				preorder_ctrl->indicate_seq = 0xffff;
1869 #ifdef DBG_RX_SEQ
1870 				RTW_INFO("DBG_RX_SEQ %s:%d indicate_seq:%u\n", __FUNCTION__, __LINE__,
1871 					 preorder_ctrl->indicate_seq);
1872 #endif
1873 				preorder_ctrl->wend_b = 0xffff;
1874 				preorder_ctrl->wsize_b = 64;/* max_ampdu_sz; */ /* ex. 32(kbytes) -> wsize_b=32 */
1875 				preorder_ctrl->ampdu_size = RX_AMPDU_SIZE_INVALID;
1876 			}
1877 		}
1878 	}
1879 
1880 	return psta;
1881 
1882 }
1883 
1884 /* pnetwork : returns from rtw_joinbss_event_callback
1885  * ptarget_wlan: found from scanned_queue */
1886 static void rtw_joinbss_update_network(_adapter *padapter, struct wlan_network *ptarget_wlan, struct wlan_network  *pnetwork)
1887 {
1888 	struct mlme_priv	*pmlmepriv = &(padapter->mlmepriv);
1889 	struct wlan_network  *cur_network = &(pmlmepriv->cur_network);
1890 
1891 	RTW_INFO("%s\n", __FUNCTION__);
1892 
1893 
1894 
1895 	/* why not use ptarget_wlan?? */
1896 	_rtw_memcpy(&cur_network->network, &pnetwork->network, pnetwork->network.Length);
1897 	/* some IEs in pnetwork is wrong, so we should use ptarget_wlan IEs */
1898 	cur_network->network.IELength = ptarget_wlan->network.IELength;
1899 	_rtw_memcpy(&cur_network->network.IEs[0], &ptarget_wlan->network.IEs[0], MAX_IE_SZ);
1900 
1901 	cur_network->aid = pnetwork->join_res;
1902 
1903 
1904 #ifdef CONFIG_NEW_SIGNAL_STAT_PROCESS
1905 	rtw_set_signal_stat_timer(&padapter->recvpriv);
1906 #endif
1907 	padapter->recvpriv.signal_strength = ptarget_wlan->network.PhyInfo.SignalStrength;
1908 	padapter->recvpriv.signal_qual = ptarget_wlan->network.PhyInfo.SignalQuality;
1909 	/* the ptarget_wlan->network.Rssi is raw data, we use ptarget_wlan->network.PhyInfo.SignalStrength instead (has scaled) */
1910 	padapter->recvpriv.rssi = translate_percentage_to_dbm(ptarget_wlan->network.PhyInfo.SignalStrength);
1911 #if defined(DBG_RX_SIGNAL_DISPLAY_PROCESSING) && 1
1912 	RTW_INFO(FUNC_ADPT_FMT" signal_strength:%3u, rssi:%3d, signal_qual:%3u"
1913 		 "\n"
1914 		 , FUNC_ADPT_ARG(padapter)
1915 		 , padapter->recvpriv.signal_strength
1916 		 , padapter->recvpriv.rssi
1917 		 , padapter->recvpriv.signal_qual
1918 		);
1919 #endif
1920 #ifdef CONFIG_NEW_SIGNAL_STAT_PROCESS
1921 	rtw_set_signal_stat_timer(&padapter->recvpriv);
1922 #endif
1923 
1924 	/* update fw_state */ /* will clr _FW_UNDER_LINKING here indirectly */
1925 
1926 	switch (pnetwork->network.InfrastructureMode) {
1927 	case Ndis802_11Infrastructure:
1928 
1929 		if (pmlmepriv->fw_state & WIFI_UNDER_WPS)
1930 			/*pmlmepriv->fw_state = WIFI_STATION_STATE|WIFI_UNDER_WPS;*/
1931 			init_fwstate(pmlmepriv, WIFI_STATION_STATE | WIFI_UNDER_WPS);
1932 		else
1933 			/*pmlmepriv->fw_state = WIFI_STATION_STATE;*/
1934 			init_fwstate(pmlmepriv, WIFI_STATION_STATE);
1935 		break;
1936 	case Ndis802_11IBSS:
1937 		/*pmlmepriv->fw_state = WIFI_ADHOC_STATE;*/
1938 		init_fwstate(pmlmepriv, WIFI_ADHOC_STATE);
1939 		break;
1940 	default:
1941 		/*pmlmepriv->fw_state = WIFI_NULL_STATE;*/
1942 		init_fwstate(pmlmepriv, WIFI_NULL_STATE);
1943 		break;
1944 	}
1945 
1946 	rtw_update_protection(padapter, (cur_network->network.IEs) + sizeof(NDIS_802_11_FIXED_IEs),
1947 			      (cur_network->network.IELength));
1948 
1949 #ifdef CONFIG_80211N_HT
1950 	rtw_update_ht_cap(padapter, cur_network->network.IEs, cur_network->network.IELength, (u8) cur_network->network.Configuration.DSConfig);
1951 #endif
1952 }
1953 
1954 /* Notes: the fucntion could be > passive_level (the same context as Rx tasklet)
1955  * pnetwork : returns from rtw_joinbss_event_callback
1956  * ptarget_wlan: found from scanned_queue
1957  * if join_res > 0, for (fw_state==WIFI_STATION_STATE), we check if  "ptarget_sta" & "ptarget_wlan" exist.
1958  * if join_res > 0, for (fw_state==WIFI_ADHOC_STATE), we only check if "ptarget_wlan" exist.
1959  * if join_res > 0, update "cur_network->network" from "pnetwork->network" if (ptarget_wlan !=NULL).
1960  */
1961 /* #define REJOIN */
1962 void rtw_joinbss_event_prehandle(_adapter *adapter, u8 *pbuf)
1963 {
1964 	_irqL irqL, irqL2;
1965 	static u8 retry = 0;
1966 	struct sta_info *ptarget_sta = NULL, *pcur_sta = NULL;
1967 	struct	sta_priv *pstapriv = &adapter->stapriv;
1968 	struct	mlme_priv	*pmlmepriv = &(adapter->mlmepriv);
1969 	struct wlan_network	*pnetwork	= (struct wlan_network *)pbuf;
1970 	struct wlan_network	*cur_network = &(pmlmepriv->cur_network);
1971 	struct wlan_network	*pcur_wlan = NULL, *ptarget_wlan = NULL;
1972 	unsigned int		the_same_macaddr = _FALSE;
1973 
1974 
1975 #ifdef CONFIG_RTL8712
1976 	/* endian_convert */
1977 	pnetwork->join_res = le32_to_cpu(pnetwork->join_res);
1978 	pnetwork->network_type = le32_to_cpu(pnetwork->network_type);
1979 	pnetwork->network.Length = le32_to_cpu(pnetwork->network.Length);
1980 	pnetwork->network.Ssid.SsidLength = le32_to_cpu(pnetwork->network.Ssid.SsidLength);
1981 	pnetwork->network.Privacy = le32_to_cpu(pnetwork->network.Privacy);
1982 	pnetwork->network.Rssi = le32_to_cpu(pnetwork->network.Rssi);
1983 	pnetwork->network.NetworkTypeInUse = le32_to_cpu(pnetwork->network.NetworkTypeInUse) ;
1984 	pnetwork->network.Configuration.ATIMWindow = le32_to_cpu(pnetwork->network.Configuration.ATIMWindow);
1985 	pnetwork->network.Configuration.BeaconPeriod = le32_to_cpu(pnetwork->network.Configuration.BeaconPeriod);
1986 	pnetwork->network.Configuration.DSConfig = le32_to_cpu(pnetwork->network.Configuration.DSConfig);
1987 	pnetwork->network.Configuration.FHConfig.DwellTime = le32_to_cpu(pnetwork->network.Configuration.FHConfig.DwellTime);
1988 	pnetwork->network.Configuration.FHConfig.HopPattern = le32_to_cpu(pnetwork->network.Configuration.FHConfig.HopPattern);
1989 	pnetwork->network.Configuration.FHConfig.HopSet = le32_to_cpu(pnetwork->network.Configuration.FHConfig.HopSet);
1990 	pnetwork->network.Configuration.FHConfig.Length = le32_to_cpu(pnetwork->network.Configuration.FHConfig.Length);
1991 	pnetwork->network.Configuration.Length = le32_to_cpu(pnetwork->network.Configuration.Length);
1992 	pnetwork->network.InfrastructureMode = le32_to_cpu(pnetwork->network.InfrastructureMode);
1993 	pnetwork->network.IELength = le32_to_cpu(pnetwork->network.IELength);
1994 #endif
1995 
1996 
1997 	rtw_get_encrypt_decrypt_from_registrypriv(adapter);
1998 
1999 
2000 
2001 	the_same_macaddr = _rtw_memcmp(pnetwork->network.MacAddress, cur_network->network.MacAddress, ETH_ALEN);
2002 
2003 	pnetwork->network.Length = get_WLAN_BSSID_EX_sz(&pnetwork->network);
2004 	if (pnetwork->network.Length > sizeof(WLAN_BSSID_EX)) {
2005 		goto ignore_joinbss_callback;
2006 	}
2007 
2008 	_enter_critical_bh(&pmlmepriv->lock, &irqL);
2009 
2010 	pmlmepriv->LinkDetectInfo.TrafficTransitionCount = 0;
2011 	pmlmepriv->LinkDetectInfo.LowPowerTransitionCount = 0;
2012 
2013 
2014 	if (pnetwork->join_res > 0) {
2015 		_enter_critical_bh(&(pmlmepriv->scanned_queue.lock), &irqL);
2016 		retry = 0;
2017 		if (check_fwstate(pmlmepriv, _FW_UNDER_LINKING)) {
2018 			/* s1. find ptarget_wlan */
2019 			if (check_fwstate(pmlmepriv, _FW_LINKED)) {
2020 				if (the_same_macaddr == _TRUE)
2021 					ptarget_wlan = rtw_find_network(&pmlmepriv->scanned_queue, cur_network->network.MacAddress);
2022 				else {
2023 					pcur_wlan = rtw_find_network(&pmlmepriv->scanned_queue, cur_network->network.MacAddress);
2024 					if (pcur_wlan)
2025 						pcur_wlan->fixed = _FALSE;
2026 
2027 					pcur_sta = rtw_get_stainfo(pstapriv, cur_network->network.MacAddress);
2028 					if (pcur_sta) {
2029 						/* _enter_critical_bh(&(pstapriv->sta_hash_lock), &irqL2); */
2030 						rtw_free_stainfo(adapter,  pcur_sta);
2031 						/* _exit_critical_bh(&(pstapriv->sta_hash_lock), &irqL2); */
2032 					}
2033 
2034 					ptarget_wlan = rtw_find_network(&pmlmepriv->scanned_queue, pnetwork->network.MacAddress);
2035 					if (check_fwstate(pmlmepriv, WIFI_STATION_STATE) == _TRUE) {
2036 						if (ptarget_wlan)
2037 							ptarget_wlan->fixed = _TRUE;
2038 					}
2039 				}
2040 
2041 			} else {
2042 				ptarget_wlan = _rtw_find_same_network(&pmlmepriv->scanned_queue, pnetwork);
2043 				if (check_fwstate(pmlmepriv, WIFI_STATION_STATE) == _TRUE) {
2044 					if (ptarget_wlan)
2045 						ptarget_wlan->fixed = _TRUE;
2046 				}
2047 			}
2048 
2049 			/* s2. update cur_network */
2050 			if (ptarget_wlan)
2051 				rtw_joinbss_update_network(adapter, ptarget_wlan, pnetwork);
2052 			else {
2053 				RTW_PRINT("Can't find ptarget_wlan when joinbss_event callback\n");
2054 				_exit_critical_bh(&(pmlmepriv->scanned_queue.lock), &irqL);
2055 				goto ignore_joinbss_callback;
2056 			}
2057 
2058 
2059 			/* s3. find ptarget_sta & update ptarget_sta after update cur_network only for station mode */
2060 			if (check_fwstate(pmlmepriv, WIFI_STATION_STATE) == _TRUE) {
2061 				ptarget_sta = rtw_joinbss_update_stainfo(adapter, pnetwork);
2062 				if (ptarget_sta == NULL) {
2063 					RTW_ERR("Can't update stainfo when joinbss_event callback\n");
2064 					_exit_critical_bh(&(pmlmepriv->scanned_queue.lock), &irqL);
2065 					goto ignore_joinbss_callback;
2066 				}
2067 			}
2068 
2069 			/* s4. indicate connect			 */
2070 			if (MLME_IS_STA(adapter) || MLME_IS_ADHOC(adapter)) {
2071 				pmlmepriv->cur_network_scanned = ptarget_wlan;
2072 				rtw_indicate_connect(adapter);
2073 			}
2074 
2075 			/* s5. Cancle assoc_timer					 */
2076 			_cancel_timer_ex(&pmlmepriv->assoc_timer);
2077 
2078 
2079 		} else {
2080 			_exit_critical_bh(&(pmlmepriv->scanned_queue.lock), &irqL);
2081 			goto ignore_joinbss_callback;
2082 		}
2083 
2084 		_exit_critical_bh(&(pmlmepriv->scanned_queue.lock), &irqL);
2085 
2086 	} else if (pnetwork->join_res == -4) {
2087 		rtw_reset_securitypriv(adapter);
2088 		_set_timer(&pmlmepriv->assoc_timer, 1);
2089 
2090 		/* rtw_free_assoc_resources(adapter, 1); */
2091 
2092 		if ((check_fwstate(pmlmepriv, _FW_UNDER_LINKING)) == _TRUE) {
2093 			_clr_fwstate_(pmlmepriv, _FW_UNDER_LINKING);
2094 		}
2095 
2096 	} else { /* if join_res < 0 (join fails), then try again */
2097 
2098 #ifdef REJOIN
2099 		res = _FAIL;
2100 		if (retry < 2) {
2101 			res = rtw_select_and_join_from_scanned_queue(pmlmepriv);
2102 		}
2103 
2104 		if (res == _SUCCESS) {
2105 			/* extend time of assoc_timer */
2106 			_set_timer(&pmlmepriv->assoc_timer, MAX_JOIN_TIMEOUT);
2107 			retry++;
2108 		} else if (res == 2) { /* there is no need to wait for join */
2109 			_clr_fwstate_(pmlmepriv, _FW_UNDER_LINKING);
2110 			rtw_indicate_connect(adapter);
2111 		} else {
2112 #endif
2113 
2114 			_set_timer(&pmlmepriv->assoc_timer, 1);
2115 			/* rtw_free_assoc_resources(adapter, 1); */
2116 			_clr_fwstate_(pmlmepriv, _FW_UNDER_LINKING);
2117 
2118 #ifdef REJOIN
2119 			retry = 0;
2120 		}
2121 #endif
2122 	}
2123 
2124 ignore_joinbss_callback:
2125 	_exit_critical_bh(&pmlmepriv->lock, &irqL);
2126 }
2127 
2128 void rtw_joinbss_event_callback(_adapter *adapter, u8 *pbuf)
2129 {
2130 	struct wlan_network	*pnetwork	= (struct wlan_network *)pbuf;
2131 
2132 
2133 	mlmeext_joinbss_event_callback(adapter, pnetwork->join_res);
2134 
2135 	rtw_mi_os_xmit_schedule(adapter);
2136 
2137 }
2138 
2139 void rtw_sta_media_status_rpt(_adapter *adapter, struct sta_info *sta, bool connected)
2140 {
2141 	struct macid_ctl_t *macid_ctl = &adapter->dvobj->macid_ctl;
2142 	bool miracast_enabled = 0;
2143 	bool miracast_sink = 0;
2144 	u8 role = H2C_MSR_ROLE_RSVD;
2145 
2146 	if (sta == NULL) {
2147 		RTW_PRINT(FUNC_ADPT_FMT" sta is NULL\n"
2148 			  , FUNC_ADPT_ARG(adapter));
2149 		rtw_warn_on(1);
2150 		return;
2151 	}
2152 
2153 	if (sta->cmn.mac_id >= macid_ctl->num) {
2154 		RTW_PRINT(FUNC_ADPT_FMT" invalid macid:%u\n"
2155 			  , FUNC_ADPT_ARG(adapter), sta->cmn.mac_id);
2156 		rtw_warn_on(1);
2157 		return;
2158 	}
2159 
2160 	if (!rtw_macid_is_used(macid_ctl, sta->cmn.mac_id)) {
2161 		RTW_PRINT(FUNC_ADPT_FMT" macid:%u not is used, set connected to 0\n"
2162 			  , FUNC_ADPT_ARG(adapter), sta->cmn.mac_id);
2163 		connected = 0;
2164 		rtw_warn_on(1);
2165 	}
2166 
2167 	if (connected && !rtw_macid_is_bmc(macid_ctl, sta->cmn.mac_id)) {
2168 		miracast_enabled = STA_OP_WFD_MODE(sta) != 0 && is_miracast_enabled(adapter);
2169 		miracast_sink = miracast_enabled && (STA_OP_WFD_MODE(sta) & MIRACAST_SINK);
2170 
2171 #ifdef CONFIG_TDLS
2172 		if (sta->tdls_sta_state & TDLS_LINKED_STATE)
2173 			role = H2C_MSR_ROLE_TDLS;
2174 		else
2175 #endif
2176 		if (MLME_IS_STA(adapter)) {
2177 			if (MLME_IS_GC(adapter))
2178 				role = H2C_MSR_ROLE_GO;
2179 			else
2180 				role = H2C_MSR_ROLE_AP;
2181 		} else if (MLME_IS_AP(adapter)) {
2182 			if (MLME_IS_GO(adapter))
2183 				role = H2C_MSR_ROLE_GC;
2184 			else
2185 				role = H2C_MSR_ROLE_STA;
2186 		} else if (MLME_IS_ADHOC(adapter) || MLME_IS_ADHOC_MASTER(adapter))
2187 			role = H2C_MSR_ROLE_ADHOC;
2188 		else if (MLME_IS_MESH(adapter))
2189 			role = H2C_MSR_ROLE_MESH;
2190 
2191 #ifdef CONFIG_WFD
2192 		if (role == H2C_MSR_ROLE_GC
2193 			|| role == H2C_MSR_ROLE_GO
2194 			|| role == H2C_MSR_ROLE_TDLS
2195 		) {
2196 			if (adapter->wfd_info.rtsp_ctrlport
2197 				|| adapter->wfd_info.tdls_rtsp_ctrlport
2198 				|| adapter->wfd_info.peer_rtsp_ctrlport)
2199 				rtw_wfd_st_switch(sta, 1);
2200 		}
2201 #endif
2202 	}
2203 
2204 	rtw_hal_set_FwMediaStatusRpt_single_cmd(adapter
2205 		, connected
2206 		, miracast_enabled
2207 		, miracast_sink
2208 		, role
2209 		, sta->cmn.mac_id
2210 	);
2211 }
2212 
2213 u8 rtw_sta_media_status_rpt_cmd(_adapter *adapter, struct sta_info *sta, bool connected)
2214 {
2215 	struct cmd_priv	*cmdpriv = &adapter->cmdpriv;
2216 	struct cmd_obj *cmdobj;
2217 	struct drvextra_cmd_parm *cmd_parm;
2218 	struct sta_media_status_rpt_cmd_parm *rpt_parm;
2219 	u8	res = _SUCCESS;
2220 
2221 	cmdobj = (struct cmd_obj *)rtw_zmalloc(sizeof(struct cmd_obj));
2222 	if (cmdobj == NULL) {
2223 		res = _FAIL;
2224 		goto exit;
2225 	}
2226 
2227 	cmd_parm = (struct drvextra_cmd_parm *)rtw_zmalloc(sizeof(struct drvextra_cmd_parm));
2228 	if (cmd_parm == NULL) {
2229 		rtw_mfree((u8 *)cmdobj, sizeof(struct cmd_obj));
2230 		res = _FAIL;
2231 		goto exit;
2232 	}
2233 
2234 	rpt_parm = (struct sta_media_status_rpt_cmd_parm *)rtw_zmalloc(sizeof(struct sta_media_status_rpt_cmd_parm));
2235 	if (rpt_parm == NULL) {
2236 		rtw_mfree((u8 *)cmdobj, sizeof(struct cmd_obj));
2237 		rtw_mfree((u8 *)cmd_parm, sizeof(struct drvextra_cmd_parm));
2238 		res = _FAIL;
2239 		goto exit;
2240 	}
2241 
2242 	rpt_parm->sta = sta;
2243 	rpt_parm->connected = connected;
2244 
2245 	cmd_parm->ec_id = STA_MSTATUS_RPT_WK_CID;
2246 	cmd_parm->type = 0;
2247 	cmd_parm->size = sizeof(struct sta_media_status_rpt_cmd_parm);
2248 	cmd_parm->pbuf = (u8 *)rpt_parm;
2249 	init_h2fwcmd_w_parm_no_rsp(cmdobj, cmd_parm, GEN_CMD_CODE(_Set_Drv_Extra));
2250 
2251 	res = rtw_enqueue_cmd(cmdpriv, cmdobj);
2252 
2253 exit:
2254 	return res;
2255 }
2256 
2257 inline void rtw_sta_media_status_rpt_cmd_hdl(_adapter *adapter, struct sta_media_status_rpt_cmd_parm *parm)
2258 {
2259 	rtw_sta_media_status_rpt(adapter, parm->sta, parm->connected);
2260 }
2261 
2262 void rtw_stassoc_event_callback(_adapter *adapter, u8 *pbuf)
2263 {
2264 	_irqL irqL;
2265 	struct sta_info *psta;
2266 	struct mlme_priv *pmlmepriv = &(adapter->mlmepriv);
2267 	struct stassoc_event	*pstassoc	= (struct stassoc_event *)pbuf;
2268 	struct wlan_network	*cur_network = &(pmlmepriv->cur_network);
2269 	struct wlan_network	*ptarget_wlan = NULL;
2270 
2271 
2272 #if CONFIG_RTW_MACADDR_ACL
2273 	if (rtw_access_ctrl(adapter, pstassoc->macaddr) == _FALSE)
2274 		return;
2275 #endif
2276 
2277 #if defined(CONFIG_AP_MODE) && defined (CONFIG_NATIVEAP_MLME)
2278 	if (MLME_IS_AP(adapter) || MLME_IS_MESH(adapter)) {
2279 		psta = rtw_get_stainfo(&adapter->stapriv, pstassoc->macaddr);
2280 		if (psta) {
2281 			u8 *passoc_req = NULL;
2282 			u32 assoc_req_len = 0;
2283 
2284 			rtw_sta_media_status_rpt(adapter, psta, 1);
2285 
2286 #ifndef CONFIG_AUTO_AP_MODE
2287 			ap_sta_info_defer_update(adapter, psta);
2288 
2289 			/* report to upper layer */
2290 			RTW_INFO("indicate_sta_assoc_event to upper layer - hostapd\n");
2291 #ifdef CONFIG_IOCTL_CFG80211
2292 			_enter_critical_bh(&psta->lock, &irqL);
2293 			if (psta->passoc_req && psta->assoc_req_len > 0) {
2294 				passoc_req = rtw_zmalloc(psta->assoc_req_len);
2295 				if (passoc_req) {
2296 					assoc_req_len = psta->assoc_req_len;
2297 					_rtw_memcpy(passoc_req, psta->passoc_req, assoc_req_len);
2298 
2299 					rtw_mfree(psta->passoc_req , psta->assoc_req_len);
2300 					psta->passoc_req = NULL;
2301 					psta->assoc_req_len = 0;
2302 				}
2303 			}
2304 			_exit_critical_bh(&psta->lock, &irqL);
2305 
2306 			if (passoc_req && assoc_req_len > 0) {
2307 				rtw_cfg80211_indicate_sta_assoc(adapter, passoc_req, assoc_req_len);
2308 
2309 				rtw_mfree(passoc_req, assoc_req_len);
2310 			}
2311 #else /* !CONFIG_IOCTL_CFG80211	 */
2312 			rtw_indicate_sta_assoc_event(adapter, psta);
2313 #endif /* !CONFIG_IOCTL_CFG80211 */
2314 #endif /* !CONFIG_AUTO_AP_MODE */
2315 
2316 #ifdef CONFIG_BEAMFORMING
2317 			beamforming_wk_cmd(adapter, BEAMFORMING_CTRL_ENTER, (u8 *)psta, sizeof(struct sta_info), 0);
2318 #endif/*CONFIG_BEAMFORMING*/
2319 			if (is_wep_enc(adapter->securitypriv.dot11PrivacyAlgrthm))
2320 				rtw_ap_wep_pk_setting(adapter, psta);
2321 		}
2322 		goto exit;
2323 	}
2324 #endif /* defined (CONFIG_AP_MODE) && defined (CONFIG_NATIVEAP_MLME) */
2325 
2326 	/* for AD-HOC mode */
2327 	psta = rtw_get_stainfo(&adapter->stapriv, pstassoc->macaddr);
2328 	if (psta == NULL) {
2329 		RTW_ERR(FUNC_ADPT_FMT" get no sta_info with "MAC_FMT"\n"
2330 			, FUNC_ADPT_ARG(adapter), MAC_ARG(pstassoc->macaddr));
2331 		rtw_warn_on(1);
2332 		goto exit;
2333 	}
2334 
2335 	rtw_sta_media_status_rpt(adapter, psta, 1);
2336 
2337 	if (adapter->securitypriv.dot11AuthAlgrthm == dot11AuthAlgrthm_8021X)
2338 		psta->dot118021XPrivacy = adapter->securitypriv.dot11PrivacyAlgrthm;
2339 
2340 
2341 	psta->ieee8021x_blocked = _FALSE;
2342 
2343 	_enter_critical_bh(&pmlmepriv->lock, &irqL);
2344 
2345 	if ((check_fwstate(pmlmepriv, WIFI_ADHOC_MASTER_STATE) == _TRUE) ||
2346 	    (check_fwstate(pmlmepriv, WIFI_ADHOC_STATE) == _TRUE)) {
2347 		if (adapter->stapriv.asoc_sta_count == 2) {
2348 			_enter_critical_bh(&(pmlmepriv->scanned_queue.lock), &irqL);
2349 			ptarget_wlan = rtw_find_network(&pmlmepriv->scanned_queue, cur_network->network.MacAddress);
2350 			pmlmepriv->cur_network_scanned = ptarget_wlan;
2351 			if (ptarget_wlan)
2352 				ptarget_wlan->fixed = _TRUE;
2353 			_exit_critical_bh(&(pmlmepriv->scanned_queue.lock), &irqL);
2354 			/* a sta + bc/mc_stainfo (not Ibss_stainfo) */
2355 			rtw_indicate_connect(adapter);
2356 		}
2357 	}
2358 
2359 	_exit_critical_bh(&pmlmepriv->lock, &irqL);
2360 
2361 
2362 	mlmeext_sta_add_event_callback(adapter, psta);
2363 
2364 #ifdef CONFIG_RTL8711
2365 	/* submit SetStaKey_cmd to tell fw, fw will allocate an CAM entry for this sta	 */
2366 	rtw_setstakey_cmd(adapter, psta, GROUP_KEY, _TRUE);
2367 #endif
2368 
2369 exit:
2370 	return;
2371 }
2372 
2373 #ifdef CONFIG_IEEE80211W
2374 void rtw_sta_timeout_event_callback(_adapter *adapter, u8 *pbuf)
2375 {
2376 	_irqL irqL;
2377 	struct sta_info *psta;
2378 	struct stadel_event *pstadel = (struct stadel_event *)pbuf;
2379 	struct sta_priv *pstapriv = &adapter->stapriv;
2380 
2381 
2382 	psta = rtw_get_stainfo(&adapter->stapriv, pstadel->macaddr);
2383 
2384 	if (psta) {
2385 		u8 updated = _FALSE;
2386 
2387 		_enter_critical_bh(&pstapriv->asoc_list_lock, &irqL);
2388 		if (rtw_is_list_empty(&psta->asoc_list) == _FALSE) {
2389 			rtw_list_delete(&psta->asoc_list);
2390 			pstapriv->asoc_list_cnt--;
2391 			updated = ap_free_sta(adapter, psta, _TRUE, WLAN_REASON_PREV_AUTH_NOT_VALID, _TRUE);
2392 		}
2393 		_exit_critical_bh(&pstapriv->asoc_list_lock, &irqL);
2394 
2395 		associated_clients_update(adapter, updated, STA_INFO_UPDATE_ALL);
2396 	}
2397 
2398 
2399 
2400 }
2401 #endif /* CONFIG_IEEE80211W */
2402 
2403 #ifdef CONFIG_RTW_80211R
2404 void rtw_update_ft_stainfo(_adapter *padapter, WLAN_BSSID_EX *pnetwork)
2405 {
2406 	struct sta_priv		*pstapriv = &padapter->stapriv;
2407 	struct sta_info		*psta = NULL;
2408 
2409 	psta = rtw_get_stainfo(pstapriv, pnetwork->MacAddress);
2410 	if (psta == NULL)
2411 		psta = rtw_alloc_stainfo(pstapriv, pnetwork->MacAddress);
2412 
2413 	if (padapter->securitypriv.dot11AuthAlgrthm == dot11AuthAlgrthm_8021X) {
2414 
2415 		padapter->securitypriv.binstallGrpkey = _FALSE;
2416 		padapter->securitypriv.busetkipkey = _FALSE;
2417 		padapter->securitypriv.bgrpkey_handshake = _FALSE;
2418 
2419 		psta->ieee8021x_blocked = _TRUE;
2420 		psta->dot118021XPrivacy = padapter->securitypriv.dot11PrivacyAlgrthm;
2421 		psta->dot11txpn.val = psta->dot11txpn.val + 1;
2422 
2423 		_rtw_memset((u8 *)&psta->dot118021x_UncstKey, 0, sizeof(union Keytype));
2424 		_rtw_memset((u8 *)&psta->dot11tkiprxmickey, 0, sizeof(union Keytype));
2425 		_rtw_memset((u8 *)&psta->dot11tkiptxmickey, 0, sizeof(union Keytype));
2426 		_rtw_memset((u8 *)&psta->dot11txpn, 0, sizeof(union pn48));
2427 #ifdef CONFIG_IEEE80211W
2428 		_rtw_memset((u8 *)&psta->dot11wtxpn, 0, sizeof(union pn48));
2429 #endif
2430 		_rtw_memset((u8 *)&psta->dot11rxpn, 0, sizeof(union pn48));
2431 	}
2432 
2433 }
2434 
2435 void rtw_ft_reassoc_event_callback(_adapter *padapter, u8 *pbuf)
2436 {
2437 	struct mlme_priv		*pmlmepriv = &(padapter->mlmepriv);
2438 	struct stassoc_event	*pstassoc = (struct stassoc_event *)pbuf;
2439 	ft_priv	*pftpriv = &pmlmepriv->ftpriv;
2440 	struct mlme_ext_priv	*pmlmeext = &padapter->mlmeextpriv;
2441 	struct mlme_ext_info	*pmlmeinfo = &(pmlmeext->mlmext_info);
2442 	WLAN_BSSID_EX		*pnetwork = (WLAN_BSSID_EX *)(&(pmlmeinfo->network));
2443 	struct cfg80211_ft_event_params ft_evt_parms;
2444 	_irqL irqL;
2445 
2446 	_rtw_memset(&ft_evt_parms, 0, sizeof(ft_evt_parms));
2447 	rtw_update_ft_stainfo(padapter, pnetwork);
2448 	ft_evt_parms.ies_len = pftpriv->ft_event.ies_len;
2449 	ft_evt_parms.ies =  rtw_zmalloc(ft_evt_parms.ies_len);
2450 	if (ft_evt_parms.ies)
2451 		_rtw_memcpy((void *)ft_evt_parms.ies, pftpriv->ft_event.ies, ft_evt_parms.ies_len);
2452 	 else
2453 		goto err_2;
2454 
2455 	ft_evt_parms.target_ap = rtw_zmalloc(ETH_ALEN);
2456 	if (ft_evt_parms.target_ap)
2457 		_rtw_memcpy((void *)ft_evt_parms.target_ap, pstassoc->macaddr, ETH_ALEN);
2458 	else
2459 		goto err_1;
2460 
2461 	ft_evt_parms.ric_ies = pftpriv->ft_event.ric_ies;
2462 	ft_evt_parms.ric_ies_len = pftpriv->ft_event.ric_ies_len;
2463 
2464 	_enter_critical_bh(&pmlmepriv->lock, &irqL);
2465 	rtw_set_ft_status(padapter, RTW_FT_AUTHENTICATED_STA);
2466 	_exit_critical_bh(&pmlmepriv->lock, &irqL);
2467 
2468 	rtw_cfg80211_ft_event(padapter, &ft_evt_parms);
2469 	RTW_INFO("%s: to "MAC_FMT"\n", __func__, MAC_ARG(ft_evt_parms.target_ap));
2470 
2471 	rtw_mfree((u8 *)pftpriv->ft_event.target_ap, ETH_ALEN);
2472 err_1:
2473 	rtw_mfree((u8 *)ft_evt_parms.ies, ft_evt_parms.ies_len);
2474 err_2:
2475 	return;
2476 }
2477 #endif
2478 
2479 void rtw_sta_mstatus_disc_rpt(_adapter *adapter, u8 mac_id)
2480 {
2481 	struct macid_ctl_t *macid_ctl = &adapter->dvobj->macid_ctl;
2482 
2483 	RTW_INFO("%s "ADPT_FMT" - mac_id=%d\n", __func__, ADPT_ARG(adapter), mac_id);
2484 
2485 	if (mac_id >= 0 && mac_id < macid_ctl->num) {
2486 		rtw_hal_set_FwMediaStatusRpt_single_cmd(adapter, 0, 0, 0, 0, mac_id);
2487 		/*
2488 		 * For safety, prevent from keeping macid sleep.
2489 		 * If we can sure all power mode enter/leave are paired,
2490 		 * this check can be removed.
2491 		 * Lucas@20131113
2492 		 */
2493 		/* wakeup macid after disconnect. */
2494 		/*if (MLME_IS_STA(adapter))*/
2495 		rtw_hal_macid_wakeup(adapter, mac_id);
2496 	} else {
2497 		RTW_PRINT(FUNC_ADPT_FMT" invalid macid:%u\n"
2498 			  , FUNC_ADPT_ARG(adapter), mac_id);
2499 		rtw_warn_on(1);
2500 	}
2501 }
2502 void rtw_sta_mstatus_report(_adapter *adapter)
2503 {
2504 	struct mlme_priv *pmlmepriv = &adapter->mlmepriv;
2505 	struct wlan_network *tgt_network = &pmlmepriv->cur_network;
2506 	struct sta_info *psta = NULL;
2507 
2508 	if (check_fwstate(pmlmepriv, WIFI_STATION_STATE) && check_fwstate(pmlmepriv, WIFI_ASOC_STATE)) {
2509 		psta = rtw_get_stainfo(&adapter->stapriv, tgt_network->network.MacAddress);
2510 		if (psta)
2511 			rtw_sta_mstatus_disc_rpt(adapter, psta->cmn.mac_id);
2512 		else {
2513 			RTW_INFO("%s "ADPT_FMT" - mac_addr: "MAC_FMT" psta == NULL\n", __func__, ADPT_ARG(adapter), MAC_ARG(tgt_network->network.MacAddress));
2514 			rtw_warn_on(1);
2515 		}
2516 	}
2517 }
2518 
2519 void rtw_stadel_event_callback(_adapter *adapter, u8 *pbuf)
2520 {
2521 	_irqL irqL, irqL2;
2522 
2523 	struct sta_info *psta;
2524 	struct wlan_network *pwlan = NULL;
2525 	WLAN_BSSID_EX    *pdev_network = NULL;
2526 	u8 *pibss = NULL;
2527 	struct	mlme_priv	*pmlmepriv = &(adapter->mlmepriv);
2528 	struct	stadel_event *pstadel	= (struct stadel_event *)pbuf;
2529 	struct	sta_priv *pstapriv = &adapter->stapriv;
2530 	struct wlan_network *tgt_network = &(pmlmepriv->cur_network);
2531 	struct mlme_ext_priv	*pmlmeext = &adapter->mlmeextpriv;
2532 	struct mlme_ext_info	*pmlmeinfo = &(pmlmeext->mlmext_info);
2533 
2534 
2535 	RTW_INFO("%s(mac_id=%d)=" MAC_FMT "\n", __func__, pstadel->mac_id, MAC_ARG(pstadel->macaddr));
2536 	rtw_sta_mstatus_disc_rpt(adapter, pstadel->mac_id);
2537 
2538 	psta = rtw_get_stainfo(&adapter->stapriv, pstadel->macaddr);
2539 
2540 	if (psta == NULL) {
2541 		RTW_INFO("%s(mac_id=%d)=" MAC_FMT " psta == NULL\n", __func__, pstadel->mac_id, MAC_ARG(pstadel->macaddr));
2542 		/*rtw_warn_on(1);*/
2543 	}
2544 
2545 	if (psta)
2546 		rtw_wfd_st_switch(psta, 0);
2547 
2548 	if (MLME_IS_AP(adapter)) {
2549 #ifdef CONFIG_IOCTL_CFG80211
2550 #ifdef COMPAT_KERNEL_RELEASE
2551 
2552 #elif (LINUX_VERSION_CODE < KERNEL_VERSION(2, 6, 37)) || defined(CONFIG_CFG80211_FORCE_COMPATIBLE_2_6_37_UNDER)
2553 		rtw_cfg80211_indicate_sta_disassoc(adapter, pstadel->macaddr, *(u16 *)pstadel->rsvd);
2554 #endif /* (LINUX_VERSION_CODE < KERNEL_VERSION(2, 6, 37)) || defined(CONFIG_CFG80211_FORCE_COMPATIBLE_2_6_37_UNDER) */
2555 #endif /* CONFIG_IOCTL_CFG80211 */
2556 
2557 		return;
2558 	}
2559 
2560 	mlmeext_sta_del_event_callback(adapter);
2561 
2562 	_enter_critical_bh(&pmlmepriv->lock, &irqL2);
2563 
2564 	if (check_fwstate(pmlmepriv, WIFI_STATION_STATE)) {
2565 		u16 reason = *((unsigned short *)(pstadel->rsvd));
2566 		bool roam = _FALSE;
2567 		struct wlan_network *roam_target = NULL;
2568 
2569 #ifdef CONFIG_LAYER2_ROAMING
2570 #ifdef CONFIG_RTW_80211R
2571 		if (reason == WLAN_REASON_EXPIRATION_CHK && rtw_chk_roam_flags(adapter, RTW_ROAM_ON_EXPIRED))
2572 			pmlmepriv->ftpriv.ft_roam_on_expired = _TRUE;
2573 		else
2574 			pmlmepriv->ftpriv.ft_roam_on_expired = _FALSE;
2575 #endif
2576 		if (adapter->registrypriv.wifi_spec == 1)
2577 			roam = _FALSE;
2578 		else if (reason == WLAN_REASON_EXPIRATION_CHK && rtw_chk_roam_flags(adapter, RTW_ROAM_ON_EXPIRED))
2579 			roam = _TRUE;
2580 		else if (reason == WLAN_REASON_ACTIVE_ROAM && rtw_chk_roam_flags(adapter, RTW_ROAM_ACTIVE)) {
2581 			roam = _TRUE;
2582 			roam_target = pmlmepriv->roam_network;
2583 		}
2584 #ifdef CONFIG_INTEL_WIDI
2585 		else if (adapter->mlmepriv.widi_state == INTEL_WIDI_STATE_CONNECTED)
2586 			roam = _TRUE;
2587 #endif /* CONFIG_INTEL_WIDI */
2588 
2589 		if (roam == _TRUE) {
2590 			if (rtw_to_roam(adapter) > 0)
2591 				rtw_dec_to_roam(adapter); /* this stadel_event is caused by roaming, decrease to_roam */
2592 			else if (rtw_to_roam(adapter) == 0)
2593 				rtw_set_to_roam(adapter, adapter->registrypriv.max_roaming_times);
2594 		} else
2595 			rtw_set_to_roam(adapter, 0);
2596 #endif /* CONFIG_LAYER2_ROAMING */
2597 
2598 		rtw_free_uc_swdec_pending_queue(adapter);
2599 
2600 		rtw_free_assoc_resources(adapter, 1);
2601 		rtw_free_mlme_priv_ie_data(pmlmepriv);
2602 
2603 		_enter_critical_bh(&(pmlmepriv->scanned_queue.lock), &irqL);
2604 		/* remove the network entry in scanned_queue */
2605 		pwlan = rtw_find_network(&pmlmepriv->scanned_queue, tgt_network->network.MacAddress);
2606 		if ((pwlan)  && (!check_fwstate(pmlmepriv, WIFI_UNDER_WPS))) {
2607 			pwlan->fixed = _FALSE;
2608 			rtw_free_network_nolock(adapter, pwlan);
2609 		}
2610 		_exit_critical_bh(&(pmlmepriv->scanned_queue.lock), &irqL);
2611 
2612 		rtw_indicate_disconnect(adapter, *(u16 *)pstadel->rsvd, pstadel->locally_generated);
2613 #ifdef CONFIG_INTEL_WIDI
2614 		if (!rtw_to_roam(adapter))
2615 			process_intel_widi_disconnect(adapter, 1);
2616 #endif /* CONFIG_INTEL_WIDI */
2617 
2618 		_rtw_roaming(adapter, roam_target);
2619 	}
2620 
2621 	if (check_fwstate(pmlmepriv, WIFI_ADHOC_MASTER_STATE) ||
2622 	    check_fwstate(pmlmepriv, WIFI_ADHOC_STATE)) {
2623 
2624 		/* _enter_critical_bh(&(pstapriv->sta_hash_lock), &irqL); */
2625 		rtw_free_stainfo(adapter,  psta);
2626 		/* _exit_critical_bh(&(pstapriv->sta_hash_lock), &irqL); */
2627 
2628 		if (adapter->stapriv.asoc_sta_count == 1) { /* a sta + bc/mc_stainfo (not Ibss_stainfo) */
2629 			/* rtw_indicate_disconnect(adapter); */ /* removed@20091105 */
2630 			_enter_critical_bh(&(pmlmepriv->scanned_queue.lock), &irqL);
2631 			/* free old ibss network */
2632 			/* pwlan = rtw_find_network(&pmlmepriv->scanned_queue, pstadel->macaddr); */
2633 			pwlan = rtw_find_network(&pmlmepriv->scanned_queue, tgt_network->network.MacAddress);
2634 			if (pwlan) {
2635 				pwlan->fixed = _FALSE;
2636 				rtw_free_network_nolock(adapter, pwlan);
2637 			}
2638 			_exit_critical_bh(&(pmlmepriv->scanned_queue.lock), &irqL);
2639 			/* re-create ibss */
2640 			pdev_network = &(adapter->registrypriv.dev_network);
2641 			pibss = adapter->registrypriv.dev_network.MacAddress;
2642 
2643 			_rtw_memcpy(pdev_network, &tgt_network->network, get_WLAN_BSSID_EX_sz(&tgt_network->network));
2644 
2645 			_rtw_memset(&pdev_network->Ssid, 0, sizeof(NDIS_802_11_SSID));
2646 			_rtw_memcpy(&pdev_network->Ssid, &pmlmepriv->assoc_ssid, sizeof(NDIS_802_11_SSID));
2647 
2648 			rtw_update_registrypriv_dev_network(adapter);
2649 
2650 			rtw_generate_random_ibss(pibss);
2651 
2652 			if (check_fwstate(pmlmepriv, WIFI_ADHOC_STATE)) {
2653 				set_fwstate(pmlmepriv, WIFI_ADHOC_MASTER_STATE);
2654 				_clr_fwstate_(pmlmepriv, WIFI_ADHOC_STATE);
2655 			}
2656 
2657 			if (rtw_create_ibss_cmd(adapter, 0) != _SUCCESS)
2658 				RTW_ERR("rtw_create_ibss_cmd FAIL\n");
2659 
2660 		}
2661 
2662 	}
2663 
2664 	_exit_critical_bh(&pmlmepriv->lock, &irqL2);
2665 
2666 
2667 }
2668 
2669 
2670 void rtw_cpwm_event_callback(PADAPTER padapter, u8 *pbuf)
2671 {
2672 #ifdef CONFIG_LPS_LCLK
2673 	struct reportpwrstate_parm *preportpwrstate;
2674 #endif
2675 
2676 
2677 #ifdef CONFIG_LPS_LCLK
2678 	preportpwrstate = (struct reportpwrstate_parm *)pbuf;
2679 	preportpwrstate->state |= (u8)(adapter_to_pwrctl(padapter)->cpwm_tog + 0x80);
2680 	cpwm_int_hdl(padapter, preportpwrstate);
2681 #endif
2682 
2683 
2684 }
2685 
2686 
2687 void rtw_wmm_event_callback(PADAPTER padapter, u8 *pbuf)
2688 {
2689 
2690 	WMMOnAssocRsp(padapter);
2691 
2692 
2693 }
2694 
2695 /*
2696 * rtw_join_timeout_handler - Timeout/failure handler for CMD JoinBss
2697 */
2698 void rtw_join_timeout_handler(void *ctx)
2699 {
2700 	_adapter *adapter = (_adapter *)ctx;
2701 	_irqL irqL;
2702 	struct	mlme_priv *pmlmepriv = &adapter->mlmepriv;
2703 
2704 #if 0
2705 	if (rtw_is_drv_stopped(adapter)) {
2706 		_rtw_up_sema(&pmlmepriv->assoc_terminate);
2707 		return;
2708 	}
2709 #endif
2710 
2711 
2712 
2713 	RTW_INFO("%s, fw_state=%x\n", __FUNCTION__, get_fwstate(pmlmepriv));
2714 
2715 	if (RTW_CANNOT_RUN(adapter))
2716 		return;
2717 
2718 
2719 	_enter_critical_bh(&pmlmepriv->lock, &irqL);
2720 
2721 #ifdef CONFIG_LAYER2_ROAMING
2722 	if (rtw_to_roam(adapter) > 0) { /* join timeout caused by roaming */
2723 		while (1) {
2724 			rtw_dec_to_roam(adapter);
2725 			if (rtw_to_roam(adapter) != 0) { /* try another */
2726 				int do_join_r;
2727 				RTW_INFO("%s try another roaming\n", __FUNCTION__);
2728 				do_join_r = rtw_do_join(adapter);
2729 				if (_SUCCESS != do_join_r) {
2730 					RTW_INFO("%s roaming do_join return %d\n", __FUNCTION__ , do_join_r);
2731 					continue;
2732 				}
2733 				break;
2734 			} else {
2735 #ifdef CONFIG_INTEL_WIDI
2736 				if (adapter->mlmepriv.widi_state == INTEL_WIDI_STATE_ROAMING) {
2737 					_rtw_memset(pmlmepriv->sa_ext, 0x00, L2SDTA_SERVICE_VE_LEN);
2738 					intel_widi_wk_cmd(adapter, INTEL_WIDI_LISTEN_WK, NULL, 0);
2739 					RTW_INFO("change to widi listen\n");
2740 				}
2741 #endif /* CONFIG_INTEL_WIDI */
2742 				RTW_INFO("%s We've try roaming but fail\n", __FUNCTION__);
2743 #ifdef CONFIG_RTW_80211R
2744 				rtw_clr_ft_flags(adapter, RTW_FT_SUPPORTED|RTW_FT_OVER_DS_SUPPORTED);
2745 				rtw_reset_ft_status(adapter);
2746 #endif
2747 				rtw_indicate_disconnect(adapter, 0, _FALSE);
2748 				break;
2749 			}
2750 		}
2751 
2752 	} else
2753 #endif
2754 	{
2755 		rtw_indicate_disconnect(adapter, 0, _FALSE);
2756 		free_scanqueue(pmlmepriv);/* ??? */
2757 
2758 #ifdef CONFIG_IOCTL_CFG80211
2759 		/* indicate disconnect for the case that join_timeout and check_fwstate != FW_LINKED */
2760 		rtw_cfg80211_indicate_disconnect(adapter, 0, _FALSE);
2761 #endif /* CONFIG_IOCTL_CFG80211 */
2762 
2763 	}
2764 
2765 	_exit_critical_bh(&pmlmepriv->lock, &irqL);
2766 
2767 
2768 #ifdef CONFIG_DRVEXT_MODULE_WSC
2769 	drvext_assoc_fail_indicate(&adapter->drvextpriv);
2770 #endif
2771 
2772 
2773 
2774 }
2775 
2776 /*
2777 * rtw_scan_timeout_handler - Timeout/Faliure handler for CMD SiteSurvey
2778 * @adapter: pointer to _adapter structure
2779 */
2780 void rtw_scan_timeout_handler(void *ctx)
2781 {
2782 	_adapter *adapter = (_adapter *)ctx;
2783 	_irqL irqL;
2784 	struct mlme_priv *pmlmepriv = &adapter->mlmepriv;
2785 	RTW_INFO(FUNC_ADPT_FMT" fw_state=%x\n", FUNC_ADPT_ARG(adapter), get_fwstate(pmlmepriv));
2786 
2787 	_enter_critical_bh(&pmlmepriv->lock, &irqL);
2788 
2789 	_clr_fwstate_(pmlmepriv, _FW_UNDER_SURVEY);
2790 
2791 	_exit_critical_bh(&pmlmepriv->lock, &irqL);
2792 
2793 #ifdef CONFIG_IOCTL_CFG80211
2794 	rtw_cfg80211_surveydone_event_callback(adapter);
2795 #endif /* CONFIG_IOCTL_CFG80211 */
2796 
2797 	rtw_indicate_scan_done(adapter, _TRUE);
2798 
2799 #if defined(CONFIG_CONCURRENT_MODE) && defined(CONFIG_IOCTL_CFG80211)
2800 	rtw_cfg80211_indicate_scan_done_for_buddy(adapter, _TRUE);
2801 #endif
2802 }
2803 
2804 void rtw_mlme_reset_auto_scan_int(_adapter *adapter, u8 *reason)
2805 {
2806 	struct mlme_priv *mlme = &adapter->mlmepriv;
2807 	struct mlme_ext_priv	*pmlmeext = &adapter->mlmeextpriv;
2808 	struct mlme_ext_info	*pmlmeinfo = &(pmlmeext->mlmext_info);
2809 	u8 u_ch;
2810 	u32 interval_ms = 0xffffffff; /* 0xffffffff: special value to make min() works well, also means no auto scan */
2811 
2812 	*reason = RTW_AUTO_SCAN_REASON_UNSPECIFIED;
2813 	rtw_mi_get_ch_setting_union(adapter, &u_ch, NULL, NULL);
2814 
2815 	if (hal_chk_bw_cap(adapter, BW_CAP_40M)
2816 	    && is_client_associated_to_ap(adapter) == _TRUE
2817 	    && u_ch >= 1 && u_ch <= 14
2818 	    && adapter->registrypriv.wifi_spec
2819 	    /* TODO: AP Connected is 40MHz capability? */
2820 	   ) {
2821 		interval_ms = rtw_min(interval_ms, 60 * 1000);
2822 		*reason |= RTW_AUTO_SCAN_REASON_2040_BSS;
2823 	}
2824 
2825 exit:
2826 	if (interval_ms == 0xffffffff)
2827 		interval_ms = 0;
2828 
2829 	rtw_mlme_set_auto_scan_int(adapter, interval_ms);
2830 	return;
2831 }
2832 
2833 void rtw_drv_scan_by_self(_adapter *padapter, u8 reason)
2834 {
2835 	struct mlme_priv *pmlmepriv = &padapter->mlmepriv;
2836 	struct rtw_ieee80211_channel ch_for_2040_bss[14] = {
2837 		{1, RTW_IEEE80211_CHAN_PASSIVE_SCAN},
2838 		{2, RTW_IEEE80211_CHAN_PASSIVE_SCAN},
2839 		{3, RTW_IEEE80211_CHAN_PASSIVE_SCAN},
2840 		{4, RTW_IEEE80211_CHAN_PASSIVE_SCAN},
2841 		{5, RTW_IEEE80211_CHAN_PASSIVE_SCAN},
2842 		{6, RTW_IEEE80211_CHAN_PASSIVE_SCAN},
2843 		{7, RTW_IEEE80211_CHAN_PASSIVE_SCAN},
2844 		{8, RTW_IEEE80211_CHAN_PASSIVE_SCAN},
2845 		{9, RTW_IEEE80211_CHAN_PASSIVE_SCAN},
2846 		{10, RTW_IEEE80211_CHAN_PASSIVE_SCAN},
2847 		{11, RTW_IEEE80211_CHAN_PASSIVE_SCAN},
2848 		{12, RTW_IEEE80211_CHAN_PASSIVE_SCAN},
2849 		{13, RTW_IEEE80211_CHAN_PASSIVE_SCAN},
2850 		{14, RTW_IEEE80211_CHAN_PASSIVE_SCAN},
2851 	};
2852 	struct rtw_ieee80211_channel *ch_sel = NULL;
2853 	int ch_num = 0;
2854 
2855 	if (rtw_is_scan_deny(padapter))
2856 		goto exit;
2857 
2858 	if (!rtw_is_adapter_up(padapter))
2859 		goto exit;
2860 
2861 	if (rtw_mi_busy_traffic_check(padapter, _FALSE)) {
2862 #ifdef CONFIG_LAYER2_ROAMING
2863 		if (rtw_chk_roam_flags(padapter, RTW_ROAM_ACTIVE) && pmlmepriv->need_to_roam == _TRUE) {
2864 			RTW_INFO("need to roam, don't care BusyTraffic\n");
2865 		} else
2866 #endif
2867 		{
2868 			RTW_INFO(FUNC_ADPT_FMT" exit BusyTraffic\n", FUNC_ADPT_ARG(padapter));
2869 			goto exit;
2870 		}
2871 	}
2872 	if (check_fwstate(pmlmepriv, WIFI_AP_STATE) && check_fwstate(pmlmepriv, WIFI_UNDER_WPS)) {
2873 		RTW_INFO(FUNC_ADPT_FMT" WIFI_AP_STATE && WIFI_UNDER_WPS\n", FUNC_ADPT_ARG(padapter));
2874 		goto exit;
2875 	}
2876 	if (check_fwstate(pmlmepriv, (_FW_UNDER_SURVEY | _FW_UNDER_LINKING)) == _TRUE) {
2877 		RTW_INFO(FUNC_ADPT_FMT" _FW_UNDER_SURVEY|_FW_UNDER_LINKING\n", FUNC_ADPT_ARG(padapter));
2878 		goto exit;
2879 	}
2880 
2881 #ifdef CONFIG_CONCURRENT_MODE
2882 	if (rtw_mi_buddy_check_fwstate(padapter, (_FW_UNDER_SURVEY | _FW_UNDER_LINKING | WIFI_UNDER_WPS))) {
2883 		RTW_INFO(FUNC_ADPT_FMT", but buddy_intf is under scanning or linking or wps_phase\n", FUNC_ADPT_ARG(padapter));
2884 		goto exit;
2885 	}
2886 #endif
2887 
2888 	RTW_INFO(FUNC_ADPT_FMT" reason:0x%02x\n", FUNC_ADPT_ARG(padapter), reason);
2889 
2890 	/* only for 20/40 BSS */
2891 	if (reason == RTW_AUTO_SCAN_REASON_2040_BSS) {
2892 		ch_sel = ch_for_2040_bss;
2893 		ch_num = 14;
2894 	}
2895 
2896 	rtw_set_802_11_bssid_list_scan(padapter, NULL, 0, ch_sel, ch_num);
2897 exit:
2898 	return;
2899 }
2900 
2901 static void rtw_auto_scan_handler(_adapter *padapter)
2902 {
2903 	struct mlme_priv *pmlmepriv = &padapter->mlmepriv;
2904 	u8 reason = RTW_AUTO_SCAN_REASON_UNSPECIFIED;
2905 
2906 	rtw_mlme_reset_auto_scan_int(padapter, &reason);
2907 
2908 #ifdef CONFIG_P2P
2909 	if (!rtw_p2p_chk_state(&padapter->wdinfo, P2P_STATE_NONE))
2910 		goto exit;
2911 #endif
2912 
2913 #ifdef CONFIG_TDLS
2914 	if (padapter->tdlsinfo.link_established == _TRUE)
2915 		goto exit;
2916 #endif
2917 
2918 	if (pmlmepriv->auto_scan_int_ms == 0
2919 	    || rtw_get_passing_time_ms(pmlmepriv->scan_start_time) < pmlmepriv->auto_scan_int_ms)
2920 		goto exit;
2921 
2922 	rtw_drv_scan_by_self(padapter, reason);
2923 
2924 exit:
2925 	return;
2926 }
2927 static u8 is_drv_in_lps(_adapter *adapter)
2928 {
2929 	u8 is_in_lps = _FALSE;
2930 
2931 	#ifdef CONFIG_LPS_LCLK_WD_TIMER /* to avoid leaving lps 32k frequently*/
2932 	if ((adapter_to_pwrctl(adapter)->bFwCurrentInPSMode == _TRUE)
2933 	#ifdef CONFIG_BT_COEXIST
2934 		&& (rtw_btcoex_IsBtControlLps(adapter) == _FALSE)
2935 	#endif
2936 		)
2937 		is_in_lps = _TRUE;
2938 	#endif /* CONFIG_LPS_LCLK_WD_TIMER*/
2939 	return is_in_lps;
2940 }
2941 void rtw_iface_dynamic_check_timer_handlder(_adapter *adapter)
2942 {
2943 #ifdef CONFIG_AP_MODE
2944 	struct mlme_priv *pmlmepriv = &adapter->mlmepriv;
2945 #endif /* CONFIG_AP_MODE */
2946 
2947 	if (adapter->net_closed == _TRUE)
2948 		return;
2949 	#ifdef CONFIG_LPS_LCLK_WD_TIMER /* to avoid leaving lps 32k frequently*/
2950 	if (is_drv_in_lps(adapter)) {
2951 		u8 bEnterPS;
2952 
2953 		linked_status_chk(adapter, 1);
2954 
2955 		bEnterPS = traffic_status_watchdog(adapter, 1);
2956 		if (bEnterPS) {
2957 			/* rtw_lps_ctrl_wk_cmd(adapter, LPS_CTRL_ENTER, 1); */
2958 			rtw_hal_dm_watchdog_in_lps(adapter);
2959 		} else {
2960 			/* call rtw_lps_ctrl_wk_cmd(padapter, LPS_CTRL_LEAVE, 1) in traffic_status_watchdog() */
2961 		}
2962 	}
2963 	#endif /* CONFIG_LPS_LCLK_WD_TIMER	*/
2964 
2965 	/* auto site survey */
2966 	rtw_auto_scan_handler(adapter);
2967 
2968 #ifdef CONFIG_AP_MODE
2969 	if (MLME_IS_AP(adapter)|| MLME_IS_MESH(adapter)) {
2970 		#ifndef CONFIG_ACTIVE_KEEP_ALIVE_CHECK
2971 		expire_timeout_chk(adapter);
2972 		#endif /* !CONFIG_ACTIVE_KEEP_ALIVE_CHECK */
2973 
2974 		#ifdef CONFIG_BMC_TX_RATE_SELECT
2975 		rtw_update_bmc_sta_tx_rate(adapter);
2976 		#endif /*CONFIG_BMC_TX_RATE_SELECT*/
2977 	}
2978 #endif /*CONFIG_AP_MODE*/
2979 
2980 
2981 #ifdef CONFIG_BR_EXT
2982 
2983 #if (LINUX_VERSION_CODE > KERNEL_VERSION(2, 6, 35))
2984 	rcu_read_lock();
2985 #endif /* (LINUX_VERSION_CODE > KERNEL_VERSION(2, 6, 35)) */
2986 
2987 #if (LINUX_VERSION_CODE <= KERNEL_VERSION(2, 6, 35))
2988 	if (adapter->pnetdev->br_port
2989 #else	/* (LINUX_VERSION_CODE <= KERNEL_VERSION(2, 6, 35)) */
2990 	if (rcu_dereference(adapter->pnetdev->rx_handler_data)
2991 #endif /* (LINUX_VERSION_CODE <= KERNEL_VERSION(2, 6, 35)) */
2992 		&& (check_fwstate(pmlmepriv, WIFI_STATION_STATE | WIFI_ADHOC_STATE) == _TRUE)) {
2993 		/* expire NAT2.5 entry */
2994 		void nat25_db_expire(_adapter *priv);
2995 		nat25_db_expire(adapter);
2996 
2997 		if (adapter->pppoe_connection_in_progress > 0)
2998 			adapter->pppoe_connection_in_progress--;
2999 		/* due to rtw_dynamic_check_timer_handlder() is called every 2 seconds */
3000 		if (adapter->pppoe_connection_in_progress > 0)
3001 			adapter->pppoe_connection_in_progress--;
3002 	}
3003 
3004 #if (LINUX_VERSION_CODE > KERNEL_VERSION(2, 6, 35))
3005 	rcu_read_unlock();
3006 #endif /* (LINUX_VERSION_CODE > KERNEL_VERSION(2, 6, 35)) */
3007 
3008 #endif /* CONFIG_BR_EXT */
3009 
3010 }
3011 
3012 /*TP_avg(t) = (1/10) * TP_avg(t-1) + (9/10) * TP(t) MBps*/
3013 static void collect_sta_traffic_statistics(_adapter *adapter)
3014 {
3015 	struct macid_ctl_t *macid_ctl = &adapter->dvobj->macid_ctl;
3016 	struct sta_info *sta;
3017 	u16 curr_tx_mbytes = 0, curr_rx_mbytes = 0;
3018 	int i;
3019 
3020 	for (i = 0; i < MACID_NUM_SW_LIMIT; i++) {
3021 		sta = macid_ctl->sta[i];
3022 		if (sta && !is_broadcast_mac_addr(sta->cmn.mac_addr)) {
3023 			if (sta->sta_stats.last_tx_bytes > sta->sta_stats.tx_bytes)
3024 				sta->sta_stats.last_tx_bytes =  sta->sta_stats.tx_bytes;
3025 			if (sta->sta_stats.last_rx_bytes > sta->sta_stats.rx_bytes)
3026 				sta->sta_stats.last_rx_bytes = sta->sta_stats.rx_bytes;
3027 
3028 			curr_tx_mbytes = ((sta->sta_stats.tx_bytes - sta->sta_stats.last_tx_bytes) >> 20) / 2; /*MBps*/
3029 			curr_rx_mbytes = ((sta->sta_stats.rx_bytes - sta->sta_stats.last_rx_bytes) >> 20) / 2; /*MBps*/
3030 			sta->sta_stats.tx_tp_mbytes = curr_tx_mbytes;
3031 			sta->sta_stats.rx_tp_mbytes = curr_rx_mbytes;
3032 
3033 			sta->cmn.tx_moving_average_tp =
3034 				(sta->cmn.tx_moving_average_tp / 10) + (curr_tx_mbytes * 9 / 10);
3035 
3036 			sta->cmn.rx_moving_average_tp =
3037 				(sta->cmn.rx_moving_average_tp / 10) + (curr_rx_mbytes * 9 /10);
3038 
3039 			sta->sta_stats.last_tx_bytes = sta->sta_stats.tx_bytes;
3040 			sta->sta_stats.last_rx_bytes = sta->sta_stats.rx_bytes;
3041 		}
3042 
3043 		if (adapter->bsta_tp_dump && sta && !is_broadcast_mac_addr(sta->cmn.mac_addr))
3044 			dump_sta_traffic(RTW_DBGDUMP, adapter, sta);
3045 
3046 	}
3047 }
3048 
3049 void rtw_sta_traffic_info(void *sel, _adapter *adapter)
3050 {
3051 	struct macid_ctl_t *macid_ctl = &adapter->dvobj->macid_ctl;
3052 	struct sta_info *sta;
3053 	int i;
3054 
3055 	for (i = 0; i < MACID_NUM_SW_LIMIT; i++) {
3056 		sta = macid_ctl->sta[i];
3057 		if (sta && !is_broadcast_mac_addr(sta->cmn.mac_addr))
3058 			dump_sta_traffic(sel, adapter, sta);
3059 	}
3060 }
3061 
3062 /*#define DBG_TRAFFIC_STATISTIC*/
3063 static void collect_traffic_statistics(_adapter *padapter)
3064 {
3065 	struct dvobj_priv	*pdvobjpriv = adapter_to_dvobj(padapter);
3066 
3067 	/*_rtw_memset(&pdvobjpriv->traffic_stat, 0, sizeof(struct rtw_traffic_statistics));*/
3068 
3069 	/* Tx bytes reset*/
3070 	pdvobjpriv->traffic_stat.tx_bytes = 0;
3071 	pdvobjpriv->traffic_stat.tx_pkts = 0;
3072 	pdvobjpriv->traffic_stat.tx_drop = 0;
3073 
3074 	/* Rx bytes reset*/
3075 	pdvobjpriv->traffic_stat.rx_bytes = 0;
3076 	pdvobjpriv->traffic_stat.rx_pkts = 0;
3077 	pdvobjpriv->traffic_stat.rx_drop = 0;
3078 
3079 	rtw_mi_traffic_statistics(padapter);
3080 
3081 	/* Calculate throughput in last interval */
3082 	pdvobjpriv->traffic_stat.cur_tx_bytes = pdvobjpriv->traffic_stat.tx_bytes - pdvobjpriv->traffic_stat.last_tx_bytes;
3083 	pdvobjpriv->traffic_stat.cur_rx_bytes = pdvobjpriv->traffic_stat.rx_bytes - pdvobjpriv->traffic_stat.last_rx_bytes;
3084 	pdvobjpriv->traffic_stat.last_tx_bytes = pdvobjpriv->traffic_stat.tx_bytes;
3085 	pdvobjpriv->traffic_stat.last_rx_bytes = pdvobjpriv->traffic_stat.rx_bytes;
3086 
3087 	pdvobjpriv->traffic_stat.cur_tx_tp = (u32)(pdvobjpriv->traffic_stat.cur_tx_bytes * 8 / 2 / 1024 / 1024);
3088 	pdvobjpriv->traffic_stat.cur_rx_tp = (u32)(pdvobjpriv->traffic_stat.cur_rx_bytes * 8 / 2 / 1024 / 1024);
3089 
3090 	#ifdef DBG_TRAFFIC_STATISTIC
3091 	RTW_INFO("\n========================\n");
3092 	RTW_INFO("cur_tx_bytes:%lld\n", pdvobjpriv->traffic_stat.cur_tx_bytes);
3093 	RTW_INFO("cur_rx_bytes:%lld\n", pdvobjpriv->traffic_stat.cur_rx_bytes);
3094 
3095 	RTW_INFO("last_tx_bytes:%lld\n", pdvobjpriv->traffic_stat.last_tx_bytes);
3096 	RTW_INFO("last_rx_bytes:%lld\n", pdvobjpriv->traffic_stat.last_rx_bytes);
3097 
3098 	RTW_INFO("cur_tx_tp:%d\n", pdvobjpriv->traffic_stat.cur_tx_tp);
3099 	RTW_INFO("cur_rx_tp:%d\n", pdvobjpriv->traffic_stat.cur_rx_tp);
3100 	#endif
3101 }
3102 
3103 void rtw_dynamic_check_timer_handlder(void *ctx)
3104 {
3105 	struct dvobj_priv *pdvobj = (struct dvobj_priv *)ctx;
3106 	_adapter *adapter = dvobj_get_primary_adapter(pdvobj);
3107 
3108 #if (MP_DRIVER == 1)
3109 	if (adapter->registrypriv.mp_mode == 1 && adapter->mppriv.mp_dm == 0) { /* for MP ODM dynamic Tx power tracking */
3110 		/* RTW_INFO("%s mp_dm =0 return\n", __func__); */
3111 		goto exit;
3112 	}
3113 #endif
3114 
3115 	if (!adapter)
3116 		goto exit;
3117 
3118 	if (!rtw_is_hw_init_completed(adapter))
3119 		goto exit;
3120 
3121 	if (RTW_CANNOT_RUN(adapter))
3122 		goto exit;
3123 
3124 	collect_traffic_statistics(adapter);
3125 	collect_sta_traffic_statistics(adapter);
3126 	rtw_mi_dynamic_check_timer_handlder(adapter);
3127 
3128 	if (!is_drv_in_lps(adapter))
3129 		rtw_dynamic_chk_wk_cmd(adapter);
3130 
3131 exit:
3132 	_set_timer(&pdvobj->dynamic_chk_timer, 2000);
3133 }
3134 
3135 
3136 #ifdef CONFIG_SET_SCAN_DENY_TIMER
3137 inline bool rtw_is_scan_deny(_adapter *adapter)
3138 {
3139 	struct mlme_priv *mlmepriv = &adapter->mlmepriv;
3140 	return (ATOMIC_READ(&mlmepriv->set_scan_deny) != 0) ? _TRUE : _FALSE;
3141 }
3142 
3143 inline void rtw_clear_scan_deny(_adapter *adapter)
3144 {
3145 	struct mlme_priv *mlmepriv = &adapter->mlmepriv;
3146 	ATOMIC_SET(&mlmepriv->set_scan_deny, 0);
3147 	if (0)
3148 		RTW_INFO(FUNC_ADPT_FMT"\n", FUNC_ADPT_ARG(adapter));
3149 }
3150 
3151 void rtw_set_scan_deny_timer_hdl(void *ctx)
3152 {
3153 	_adapter *adapter = (_adapter *)ctx;
3154 
3155 	rtw_clear_scan_deny(adapter);
3156 }
3157 void rtw_set_scan_deny(_adapter *adapter, u32 ms)
3158 {
3159 	struct mlme_priv *mlmepriv = &adapter->mlmepriv;
3160 	if (0)
3161 		RTW_INFO(FUNC_ADPT_FMT"\n", FUNC_ADPT_ARG(adapter));
3162 	ATOMIC_SET(&mlmepriv->set_scan_deny, 1);
3163 	_set_timer(&mlmepriv->set_scan_deny_timer, ms);
3164 }
3165 #endif
3166 
3167 #ifdef CONFIG_LAYER2_ROAMING
3168 /*
3169 * Select a new roaming candidate from the original @param candidate and @param competitor
3170 * @return _TRUE: candidate is updated
3171 * @return _FALSE: candidate is not updated
3172 */
3173 static int rtw_check_roaming_candidate(struct mlme_priv *mlme
3174 	, struct wlan_network **candidate, struct wlan_network *competitor)
3175 {
3176 	int updated = _FALSE;
3177 	_adapter *adapter = container_of(mlme, _adapter, mlmepriv);
3178 #ifdef CONFIG_RTW_80211R
3179 	ft_priv *pftpriv = &mlme->ftpriv;
3180 	u32 mdie_len = 0;
3181 	u8 *ptmp = NULL;
3182 #endif
3183 
3184 #if defined(CONFIG_RTW_REPEATER_SON) &&  (!defined(CONFIG_RTW_REPEATER_SON_ROOT))
3185 	if (rtw_rson_isupdate_roamcan(mlme, candidate, competitor))
3186 		goto  update;
3187 	goto exit;
3188 #endif
3189 
3190 	if (is_same_ess(&competitor->network, &mlme->cur_network.network) == _FALSE)
3191 		goto exit;
3192 
3193 	if (rtw_is_desired_network(adapter, competitor) == _FALSE)
3194 		goto exit;
3195 
3196 #ifdef CONFIG_LAYER2_ROAMING
3197 	if (mlme->need_to_roam == _FALSE)
3198 		goto exit;
3199 #endif
3200 
3201 #ifdef CONFIG_RTW_80211R
3202 	if (rtw_chk_ft_flags(adapter, RTW_FT_SUPPORTED)) {
3203 		ptmp = rtw_get_ie(&competitor->network.IEs[12], _MDIE_, &mdie_len, competitor->network.IELength-12);
3204 		if (ptmp) {
3205 			if (!_rtw_memcmp(&pftpriv->mdid, ptmp+2, 2))
3206 				goto exit;
3207 
3208 			/*The candidate don't support over-the-DS*/
3209 			if (rtw_chk_ft_flags(adapter, RTW_FT_STA_OVER_DS_SUPPORTED)) {
3210 				if ((rtw_chk_ft_flags(adapter, RTW_FT_OVER_DS_SUPPORTED) && !(*(ptmp+4) & 0x01)) ||
3211 					(!rtw_chk_ft_flags(adapter, RTW_FT_OVER_DS_SUPPORTED) && (*(ptmp+4) & 0x01))) {
3212 					RTW_INFO("FT: ignore the candidate(" MAC_FMT ") for over-the-DS\n", MAC_ARG(competitor->network.MacAddress));
3213 					rtw_clr_ft_flags(adapter, RTW_FT_OVER_DS_SUPPORTED);
3214 					goto exit;
3215 				}
3216 			}
3217 		} else
3218 			goto exit;
3219 	}
3220 #endif
3221 
3222 	RTW_INFO("roam candidate:%s %s("MAC_FMT", ch%3u) rssi:%d, age:%5d\n",
3223 		 (competitor == mlme->cur_network_scanned) ? "*" : " " ,
3224 		 competitor->network.Ssid.Ssid,
3225 		 MAC_ARG(competitor->network.MacAddress),
3226 		 competitor->network.Configuration.DSConfig,
3227 		 (int)competitor->network.Rssi,
3228 		 rtw_get_passing_time_ms(competitor->last_scanned)
3229 		);
3230 
3231 	/* got specific addr to roam */
3232 	if (!is_zero_mac_addr(mlme->roam_tgt_addr)) {
3233 		if (_rtw_memcmp(mlme->roam_tgt_addr, competitor->network.MacAddress, ETH_ALEN) == _TRUE)
3234 			goto update;
3235 		else
3236 			goto exit;
3237 	}
3238 #if 1
3239 	if (rtw_get_passing_time_ms(competitor->last_scanned) >= mlme->roam_scanr_exp_ms)
3240 		goto exit;
3241 
3242 	if (competitor->network.Rssi - mlme->cur_network_scanned->network.Rssi < mlme->roam_rssi_diff_th)
3243 		goto exit;
3244 
3245 	if (*candidate != NULL && (*candidate)->network.Rssi >= competitor->network.Rssi)
3246 		goto exit;
3247 #else
3248 	goto exit;
3249 #endif
3250 
3251 update:
3252 	*candidate = competitor;
3253 	updated = _TRUE;
3254 
3255 exit:
3256 	return updated;
3257 }
3258 
3259 int rtw_select_roaming_candidate(struct mlme_priv *mlme)
3260 {
3261 	_irqL	irqL;
3262 	int ret = _FAIL;
3263 	_list	*phead;
3264 	_adapter *adapter;
3265 	_queue	*queue	= &(mlme->scanned_queue);
3266 	struct	wlan_network	*pnetwork = NULL;
3267 	struct	wlan_network	*candidate = NULL;
3268 	u8		bSupportAntDiv = _FALSE;
3269 
3270 
3271 	if (mlme->cur_network_scanned == NULL) {
3272 		rtw_warn_on(1);
3273 		goto exit;
3274 	}
3275 
3276 	_enter_critical_bh(&(mlme->scanned_queue.lock), &irqL);
3277 	phead = get_list_head(queue);
3278 	adapter = (_adapter *)mlme->nic_hdl;
3279 
3280 	mlme->pscanned = get_next(phead);
3281 
3282 	while (!rtw_end_of_queue_search(phead, mlme->pscanned)) {
3283 
3284 		pnetwork = LIST_CONTAINOR(mlme->pscanned, struct wlan_network, list);
3285 		if (pnetwork == NULL) {
3286 			ret = _FAIL;
3287 			goto exit;
3288 		}
3289 
3290 		mlme->pscanned = get_next(mlme->pscanned);
3291 
3292 		if (0)
3293 			RTW_INFO("%s("MAC_FMT", ch%u) rssi:%d\n"
3294 				 , pnetwork->network.Ssid.Ssid
3295 				 , MAC_ARG(pnetwork->network.MacAddress)
3296 				 , pnetwork->network.Configuration.DSConfig
3297 				 , (int)pnetwork->network.Rssi);
3298 
3299 		rtw_check_roaming_candidate(mlme, &candidate, pnetwork);
3300 
3301 	}
3302 
3303 	if (candidate == NULL) {
3304 	/*	if parent note lost the path to root and there is no other cadidate, report disconnection	*/
3305 #if defined(CONFIG_RTW_REPEATER_SON) &&  (!defined(CONFIG_RTW_REPEATER_SON_ROOT))
3306 		struct rtw_rson_struct  rson_curr;
3307 		u8 rson_score;
3308 
3309 		rtw_get_rson_struct(&(mlme->cur_network_scanned->network), &rson_curr);
3310 		rson_score = rtw_cal_rson_score(&rson_curr, mlme->cur_network_scanned->network.Rssi);
3311 		if (check_fwstate(mlme, _FW_LINKED)
3312 			&& ((rson_score == RTW_RSON_SCORE_NOTCNNT)
3313 			|| (rson_score == RTW_RSON_SCORE_NOTSUP)))
3314 			receive_disconnect(adapter, mlme->cur_network_scanned->network.MacAddress
3315 								, WLAN_REASON_EXPIRATION_CHK, _FALSE);
3316 #endif
3317 		RTW_INFO("%s: return _FAIL(candidate == NULL)\n", __FUNCTION__);
3318 		ret = _FAIL;
3319 		goto exit;
3320 	} else {
3321 #if defined(CONFIG_RTW_REPEATER_SON) &&  (!defined(CONFIG_RTW_REPEATER_SON_ROOT))
3322 		struct rtw_rson_struct  rson_curr;
3323 		u8 rson_score;
3324 
3325 		rtw_get_rson_struct(&(candidate->network), &rson_curr);
3326 		rson_score = rtw_cal_rson_score(&rson_curr, candidate->network.Rssi);
3327 		RTW_INFO("%s: candidate: %s("MAC_FMT", ch:%u) rson_score:%d\n", __FUNCTION__,
3328 			candidate->network.Ssid.Ssid, MAC_ARG(candidate->network.MacAddress),
3329 			 candidate->network.Configuration.DSConfig, rson_score);
3330 #else
3331 		RTW_INFO("%s: candidate: %s("MAC_FMT", ch:%u)\n", __FUNCTION__,
3332 			candidate->network.Ssid.Ssid, MAC_ARG(candidate->network.MacAddress),
3333 			 candidate->network.Configuration.DSConfig);
3334 #endif
3335 		mlme->roam_network = candidate;
3336 
3337 		if (_rtw_memcmp(candidate->network.MacAddress, mlme->roam_tgt_addr, ETH_ALEN) == _TRUE)
3338 			_rtw_memset(mlme->roam_tgt_addr, 0, ETH_ALEN);
3339 	}
3340 
3341 	ret = _SUCCESS;
3342 exit:
3343 	_exit_critical_bh(&(mlme->scanned_queue.lock), &irqL);
3344 
3345 	return ret;
3346 }
3347 #endif /* CONFIG_LAYER2_ROAMING */
3348 
3349 /*
3350 * Select a new join candidate from the original @param candidate and @param competitor
3351 * @return _TRUE: candidate is updated
3352 * @return _FALSE: candidate is not updated
3353 */
3354 static int rtw_check_join_candidate(struct mlme_priv *mlme
3355 	    , struct wlan_network **candidate, struct wlan_network *competitor)
3356 {
3357 	int updated = _FALSE;
3358 	_adapter *adapter = container_of(mlme, _adapter, mlmepriv);
3359 
3360 #if defined(CONFIG_RTW_REPEATER_SON) &&  (!defined(CONFIG_RTW_REPEATER_SON_ROOT))
3361 	s16 rson_score;
3362 	struct rtw_rson_struct  rson_data;
3363 
3364 	if (rtw_rson_choose(candidate, competitor)) {
3365 		*candidate = competitor;
3366 		rtw_get_rson_struct(&((*candidate)->network), &rson_data);
3367 		rson_score = rtw_cal_rson_score(&rson_data, (*candidate)->network.Rssi);
3368 		RTW_INFO("[assoc_ssid:%s] new candidate: %s("MAC_FMT", ch%u) rson_score:%d\n",
3369 			 mlme->assoc_ssid.Ssid,
3370 			 (*candidate)->network.Ssid.Ssid,
3371 			 MAC_ARG((*candidate)->network.MacAddress),
3372 			 (*candidate)->network.Configuration.DSConfig,
3373 			 rson_score);
3374 		return _TRUE;
3375 	}
3376 	return _FALSE;
3377 #endif
3378 
3379 	/* check bssid, if needed */
3380 	if (mlme->assoc_by_bssid == _TRUE) {
3381 		if (_rtw_memcmp(competitor->network.MacAddress, mlme->assoc_bssid, ETH_ALEN) == _FALSE)
3382 			goto exit;
3383 	}
3384 
3385 	/* check ssid, if needed */
3386 	if (mlme->assoc_ssid.Ssid[0] && mlme->assoc_ssid.SsidLength) {
3387 		if (competitor->network.Ssid.SsidLength != mlme->assoc_ssid.SsidLength
3388 		    || _rtw_memcmp(competitor->network.Ssid.Ssid, mlme->assoc_ssid.Ssid, mlme->assoc_ssid.SsidLength) == _FALSE
3389 		   )
3390 			goto exit;
3391 	}
3392 
3393 	if (rtw_is_desired_network(adapter, competitor)  == _FALSE)
3394 		goto exit;
3395 
3396 #ifdef CONFIG_LAYER2_ROAMING
3397 	if (rtw_to_roam(adapter) > 0) {
3398 		if (rtw_get_passing_time_ms(competitor->last_scanned) >= mlme->roam_scanr_exp_ms
3399 		    || is_same_ess(&competitor->network, &mlme->cur_network.network) == _FALSE
3400 		   )
3401 			goto exit;
3402 	}
3403 #endif
3404 
3405 	if (*candidate == NULL || (*candidate)->network.Rssi < competitor->network.Rssi) {
3406 		*candidate = competitor;
3407 		updated = _TRUE;
3408 	}
3409 
3410 	if (updated) {
3411 		RTW_INFO("[by_bssid:%u][assoc_ssid:%s][to_roam:%u] "
3412 			 "new candidate: %s("MAC_FMT", ch%u) rssi:%d\n",
3413 			 mlme->assoc_by_bssid,
3414 			 mlme->assoc_ssid.Ssid,
3415 			 rtw_to_roam(adapter),
3416 			 (*candidate)->network.Ssid.Ssid,
3417 			 MAC_ARG((*candidate)->network.MacAddress),
3418 			 (*candidate)->network.Configuration.DSConfig,
3419 			 (int)(*candidate)->network.Rssi
3420 			);
3421 	}
3422 
3423 exit:
3424 	return updated;
3425 }
3426 
3427 /*
3428 Calling context:
3429 The caller of the sub-routine will be in critical section...
3430 
3431 The caller must hold the following spinlock
3432 
3433 pmlmepriv->lock
3434 
3435 
3436 */
3437 
3438 int rtw_select_and_join_from_scanned_queue(struct mlme_priv *pmlmepriv)
3439 {
3440 	_irqL	irqL;
3441 	int ret;
3442 	_list	*phead;
3443 	_adapter *adapter;
3444 	_queue	*queue	= &(pmlmepriv->scanned_queue);
3445 	struct	wlan_network	*pnetwork = NULL;
3446 	struct	wlan_network	*candidate = NULL;
3447 	u8		bSupportAntDiv = _FALSE;
3448 
3449 
3450 	adapter = (_adapter *)pmlmepriv->nic_hdl;
3451 
3452 	_enter_critical_bh(&(pmlmepriv->scanned_queue.lock), &irqL);
3453 
3454 #ifdef CONFIG_LAYER2_ROAMING
3455 	if (pmlmepriv->roam_network) {
3456 		candidate = pmlmepriv->roam_network;
3457 		pmlmepriv->roam_network = NULL;
3458 		goto candidate_exist;
3459 	}
3460 #endif
3461 
3462 	phead = get_list_head(queue);
3463 	pmlmepriv->pscanned = get_next(phead);
3464 
3465 	while (!rtw_end_of_queue_search(phead, pmlmepriv->pscanned)) {
3466 
3467 		pnetwork = LIST_CONTAINOR(pmlmepriv->pscanned, struct wlan_network, list);
3468 		if (pnetwork == NULL) {
3469 			ret = _FAIL;
3470 			goto exit;
3471 		}
3472 
3473 		pmlmepriv->pscanned = get_next(pmlmepriv->pscanned);
3474 
3475 		if (0)
3476 			RTW_INFO("%s("MAC_FMT", ch%u) rssi:%d\n"
3477 				 , pnetwork->network.Ssid.Ssid
3478 				 , MAC_ARG(pnetwork->network.MacAddress)
3479 				 , pnetwork->network.Configuration.DSConfig
3480 				 , (int)pnetwork->network.Rssi);
3481 
3482 		rtw_check_join_candidate(pmlmepriv, &candidate, pnetwork);
3483 
3484 	}
3485 
3486 	if (candidate == NULL) {
3487 		RTW_INFO("%s: return _FAIL(candidate == NULL)\n", __FUNCTION__);
3488 #ifdef CONFIG_WOWLAN
3489 		_clr_fwstate_(pmlmepriv, _FW_LINKED | _FW_UNDER_LINKING);
3490 #endif
3491 		ret = _FAIL;
3492 		goto exit;
3493 	} else {
3494 		RTW_INFO("%s: candidate: %s("MAC_FMT", ch:%u)\n", __FUNCTION__,
3495 			candidate->network.Ssid.Ssid, MAC_ARG(candidate->network.MacAddress),
3496 			 candidate->network.Configuration.DSConfig);
3497 		goto candidate_exist;
3498 	}
3499 
3500 candidate_exist:
3501 
3502 	/* check for situation of  _FW_LINKED */
3503 	if (check_fwstate(pmlmepriv, _FW_LINKED) == _TRUE) {
3504 		RTW_INFO("%s: _FW_LINKED while ask_for_joinbss!!!\n", __FUNCTION__);
3505 
3506 #if 0 /* for WPA/WPA2 authentication, wpa_supplicant will expect authentication from AP, it is needed to reconnect AP... */
3507 		if (is_same_network(&pmlmepriv->cur_network.network, &candidate->network)) {
3508 			RTW_INFO("%s: _FW_LINKED and is same network, it needn't join again\n", __FUNCTION__);
3509 
3510 			rtw_indicate_connect(adapter);/* rtw_indicate_connect again */
3511 
3512 			ret = 2;
3513 			goto exit;
3514 		} else
3515 #endif
3516 		{
3517 			rtw_disassoc_cmd(adapter, 0, 0);
3518 			rtw_indicate_disconnect(adapter, 0, _FALSE);
3519 			rtw_free_assoc_resources(adapter, 0);
3520 		}
3521 	}
3522 
3523 #ifdef CONFIG_ANTENNA_DIVERSITY
3524 	rtw_hal_get_def_var(adapter, HAL_DEF_IS_SUPPORT_ANT_DIV, &(bSupportAntDiv));
3525 	if (_TRUE == bSupportAntDiv) {
3526 		u8 CurrentAntenna;
3527 		rtw_hal_get_odm_var(adapter, HAL_ODM_ANTDIV_SELECT, &(CurrentAntenna), NULL);
3528 		RTW_INFO("#### Opt_Ant_(%s) , cur_Ant(%s)\n",
3529 			(MAIN_ANT == candidate->network.PhyInfo.Optimum_antenna) ? "MAIN_ANT" : "AUX_ANT",
3530 			 (MAIN_ANT == CurrentAntenna) ? "MAIN_ANT" : "AUX_ANT"
3531 			);
3532 	}
3533 #endif
3534 	set_fwstate(pmlmepriv, _FW_UNDER_LINKING);
3535 	ret = rtw_joinbss_cmd(adapter, candidate);
3536 
3537 exit:
3538 	_exit_critical_bh(&(pmlmepriv->scanned_queue.lock), &irqL);
3539 
3540 
3541 	return ret;
3542 }
3543 
3544 sint rtw_set_auth(_adapter *adapter, struct security_priv *psecuritypriv)
3545 {
3546 	struct	cmd_obj *pcmd;
3547 	struct	setauth_parm *psetauthparm;
3548 	struct	cmd_priv	*pcmdpriv = &(adapter->cmdpriv);
3549 	sint		res = _SUCCESS;
3550 
3551 
3552 	pcmd = (struct	cmd_obj *)rtw_zmalloc(sizeof(struct	cmd_obj));
3553 	if (pcmd == NULL) {
3554 		res = _FAIL; /* try again */
3555 		goto exit;
3556 	}
3557 
3558 	psetauthparm = (struct setauth_parm *)rtw_zmalloc(sizeof(struct setauth_parm));
3559 	if (psetauthparm == NULL) {
3560 		rtw_mfree((unsigned char *)pcmd, sizeof(struct	cmd_obj));
3561 		res = _FAIL;
3562 		goto exit;
3563 	}
3564 
3565 	_rtw_memset(psetauthparm, 0, sizeof(struct setauth_parm));
3566 	psetauthparm->mode = (unsigned char)psecuritypriv->dot11AuthAlgrthm;
3567 
3568 	pcmd->cmdcode = _SetAuth_CMD_;
3569 	pcmd->parmbuf = (unsigned char *)psetauthparm;
3570 	pcmd->cmdsz = (sizeof(struct setauth_parm));
3571 	pcmd->rsp = NULL;
3572 	pcmd->rspsz = 0;
3573 
3574 
3575 	_rtw_init_listhead(&pcmd->list);
3576 
3577 
3578 	res = rtw_enqueue_cmd(pcmdpriv, pcmd);
3579 
3580 exit:
3581 
3582 
3583 	return res;
3584 
3585 }
3586 
3587 
3588 sint rtw_set_key(_adapter *adapter, struct security_priv *psecuritypriv, sint keyid, u8 set_tx, bool enqueue)
3589 {
3590 	u8	keylen;
3591 	struct cmd_obj		*pcmd;
3592 	struct setkey_parm	*psetkeyparm;
3593 	struct cmd_priv		*pcmdpriv = &(adapter->cmdpriv);
3594 	struct mlme_priv		*pmlmepriv = &(adapter->mlmepriv);
3595 	sint	res = _SUCCESS;
3596 
3597 
3598 	psetkeyparm = (struct setkey_parm *)rtw_zmalloc(sizeof(struct setkey_parm));
3599 	if (psetkeyparm == NULL) {
3600 		res = _FAIL;
3601 		goto exit;
3602 	}
3603 	_rtw_memset(psetkeyparm, 0, sizeof(struct setkey_parm));
3604 
3605 	if (psecuritypriv->dot11AuthAlgrthm == dot11AuthAlgrthm_8021X) {
3606 		psetkeyparm->algorithm = (unsigned char)psecuritypriv->dot118021XGrpPrivacy;
3607 	} else {
3608 		psetkeyparm->algorithm = (u8)psecuritypriv->dot11PrivacyAlgrthm;
3609 
3610 	}
3611 	psetkeyparm->keyid = (u8)keyid;/* 0~3 */
3612 	psetkeyparm->set_tx = set_tx;
3613 	if (is_wep_enc(psetkeyparm->algorithm))
3614 		adapter->securitypriv.key_mask |= BIT(psetkeyparm->keyid);
3615 
3616 	RTW_INFO("==> rtw_set_key algorithm(%x),keyid(%x),key_mask(%x)\n", psetkeyparm->algorithm, psetkeyparm->keyid, adapter->securitypriv.key_mask);
3617 
3618 	switch (psetkeyparm->algorithm) {
3619 
3620 	case _WEP40_:
3621 		keylen = 5;
3622 		_rtw_memcpy(&(psetkeyparm->key[0]), &(psecuritypriv->dot11DefKey[keyid].skey[0]), keylen);
3623 		break;
3624 	case _WEP104_:
3625 		keylen = 13;
3626 		_rtw_memcpy(&(psetkeyparm->key[0]), &(psecuritypriv->dot11DefKey[keyid].skey[0]), keylen);
3627 		break;
3628 	case _TKIP_:
3629 		keylen = 16;
3630 		_rtw_memcpy(&psetkeyparm->key, &psecuritypriv->dot118021XGrpKey[keyid], keylen);
3631 		psetkeyparm->grpkey = 1;
3632 		break;
3633 	case _AES_:
3634 		keylen = 16;
3635 		_rtw_memcpy(&psetkeyparm->key, &psecuritypriv->dot118021XGrpKey[keyid], keylen);
3636 		psetkeyparm->grpkey = 1;
3637 		break;
3638 	default:
3639 		res = _FAIL;
3640 		rtw_mfree((unsigned char *)psetkeyparm, sizeof(struct setkey_parm));
3641 		goto exit;
3642 	}
3643 
3644 
3645 	if (enqueue) {
3646 		pcmd = (struct	cmd_obj *)rtw_zmalloc(sizeof(struct	cmd_obj));
3647 		if (pcmd == NULL) {
3648 			rtw_mfree((unsigned char *)psetkeyparm, sizeof(struct setkey_parm));
3649 			res = _FAIL; /* try again */
3650 			goto exit;
3651 		}
3652 
3653 		pcmd->cmdcode = _SetKey_CMD_;
3654 		pcmd->parmbuf = (u8 *)psetkeyparm;
3655 		pcmd->cmdsz = (sizeof(struct setkey_parm));
3656 		pcmd->rsp = NULL;
3657 		pcmd->rspsz = 0;
3658 
3659 		_rtw_init_listhead(&pcmd->list);
3660 
3661 		/* _rtw_init_sema(&(pcmd->cmd_sem), 0); */
3662 
3663 		res = rtw_enqueue_cmd(pcmdpriv, pcmd);
3664 	} else {
3665 		setkey_hdl(adapter, (u8 *)psetkeyparm);
3666 		rtw_mfree((u8 *) psetkeyparm, sizeof(struct setkey_parm));
3667 	}
3668 exit:
3669 	return res;
3670 
3671 }
3672 
3673 #ifdef CONFIG_WMMPS_STA
3674 /*
3675  * rtw_uapsd_use_default_setting
3676  * This function is used for setting default uapsd max sp length to uapsd_max_sp_len
3677  * in qos_priv data structure from registry. In additional, it will also map default uapsd
3678  * ac to each uapsd TID, delivery-enabled and trigger-enabled of corresponding TID.
3679  *
3680  * Arguments:
3681  * @padapter: _adapter pointer.
3682  *
3683  * Auther: Arvin Liu
3684  * Date: 2017/05/03
3685  */
3686 void	rtw_uapsd_use_default_setting(_adapter *padapter)
3687 {
3688 	struct mlme_priv		*pmlmepriv = &padapter->mlmepriv;
3689 	struct qos_priv		*pqospriv = &pmlmepriv->qospriv;
3690 	struct registry_priv		*pregistrypriv = &padapter->registrypriv;
3691 
3692 	if (pregistrypriv->uapsd_ac_enable != 0) {
3693 		pqospriv->uapsd_max_sp_len = pregistrypriv->uapsd_max_sp_len;
3694 
3695 		CLEAR_FLAGS(pqospriv->uapsd_tid);
3696 		CLEAR_FLAGS(pqospriv->uapsd_tid_delivery_enabled);
3697 		CLEAR_FLAGS(pqospriv->uapsd_tid_trigger_enabled);
3698 
3699 		/* check the uapsd setting of AC_VO from registry then map these setting to each TID if necessary  */
3700 		if(TEST_FLAG(pregistrypriv->uapsd_ac_enable, DRV_CFG_UAPSD_VO)) {
3701 			SET_FLAG(pqospriv->uapsd_tid, WMM_TID7);
3702 			SET_FLAG(pqospriv->uapsd_tid_delivery_enabled, WMM_TID7);
3703 			SET_FLAG(pqospriv->uapsd_tid_trigger_enabled, WMM_TID7);
3704 			SET_FLAG(pqospriv->uapsd_tid, WMM_TID6);
3705 			SET_FLAG(pqospriv->uapsd_tid_delivery_enabled, WMM_TID6);
3706 			SET_FLAG(pqospriv->uapsd_tid_trigger_enabled, WMM_TID6);
3707 		}
3708 
3709 		/* check the uapsd setting of AC_VI from registry then map these setting to each TID if necessary  */
3710 		if(TEST_FLAG(pregistrypriv->uapsd_ac_enable, DRV_CFG_UAPSD_VI)) {
3711 			SET_FLAG(pqospriv->uapsd_tid, WMM_TID5);
3712 			SET_FLAG(pqospriv->uapsd_tid_delivery_enabled, WMM_TID5);
3713 			SET_FLAG(pqospriv->uapsd_tid_trigger_enabled, WMM_TID5);
3714 			SET_FLAG(pqospriv->uapsd_tid, WMM_TID4);
3715 			SET_FLAG(pqospriv->uapsd_tid_delivery_enabled, WMM_TID4);
3716 			SET_FLAG(pqospriv->uapsd_tid_trigger_enabled, WMM_TID4);
3717 		}
3718 
3719 		/* check the uapsd setting of AC_BK from registry then map these setting to each TID if necessary  */
3720 		if(TEST_FLAG(pregistrypriv->uapsd_ac_enable, DRV_CFG_UAPSD_BK)) {
3721 			SET_FLAG(pqospriv->uapsd_tid, WMM_TID2);
3722 			SET_FLAG(pqospriv->uapsd_tid_delivery_enabled, WMM_TID2);
3723 			SET_FLAG(pqospriv->uapsd_tid_trigger_enabled, WMM_TID2);
3724 			SET_FLAG(pqospriv->uapsd_tid, WMM_TID1);
3725 			SET_FLAG(pqospriv->uapsd_tid_delivery_enabled, WMM_TID1);
3726 			SET_FLAG(pqospriv->uapsd_tid_trigger_enabled, WMM_TID1);
3727 		}
3728 
3729 		/* check the uapsd setting of AC_BE from registry then map these setting to each TID if necessary  */
3730 		if(TEST_FLAG(pregistrypriv->uapsd_ac_enable, DRV_CFG_UAPSD_BE)) {
3731 			SET_FLAG(pqospriv->uapsd_tid, WMM_TID3);
3732 			SET_FLAG(pqospriv->uapsd_tid_delivery_enabled, WMM_TID3);
3733 			SET_FLAG(pqospriv->uapsd_tid_trigger_enabled, WMM_TID3);
3734 			SET_FLAG(pqospriv->uapsd_tid, WMM_TID0);
3735 			SET_FLAG(pqospriv->uapsd_tid_delivery_enabled, WMM_TID0);
3736 			SET_FLAG(pqospriv->uapsd_tid_trigger_enabled, WMM_TID0);
3737 		}
3738 
3739 		RTW_INFO("[WMMPS] UAPSD MAX SP Len = 0x%02x, UAPSD TID enabled = 0x%02x\n",
3740 			pqospriv->uapsd_max_sp_len, (u8)pqospriv->uapsd_tid);
3741 	}
3742 
3743 }
3744 
3745 /*
3746  * rtw_is_wmmps_mode
3747  * This function is used for checking whether Driver and an AP support uapsd function or not.
3748  * If both of them support uapsd function, it will return true. Otherwise returns false.
3749  *
3750  * Arguments:
3751  * @padapter: _adapter pointer.
3752  *
3753  * Auther: Arvin Liu
3754  * Date: 2017/06/12
3755  */
3756 bool rtw_is_wmmps_mode(_adapter *padapter)
3757 {
3758 	struct mlme_priv	*pmlmepriv = &(padapter->mlmepriv);
3759 	struct qos_priv	*pqospriv = &pmlmepriv->qospriv;
3760 
3761 	if ((pqospriv->uapsd_ap_supported) && ((pqospriv->uapsd_tid & BIT_MASK_TID_TC)  != 0))
3762 		return _TRUE;
3763 
3764 	return _FALSE;
3765 }
3766 #endif /* CONFIG_WMMPS_STA */
3767 
3768 /* adjust IEs for rtw_joinbss_cmd in WMM */
3769 int rtw_restruct_wmm_ie(_adapter *adapter, u8 *in_ie, u8 *out_ie, uint in_len, uint initial_out_len)
3770 {
3771 #ifdef CONFIG_WMMPS_STA
3772 	struct mlme_priv		*pmlmepriv = &adapter->mlmepriv;
3773 	struct qos_priv		*pqospriv = &pmlmepriv->qospriv;
3774 #endif /* CONFIG_WMMPS_STA */
3775 	unsigned	int ielength = 0;
3776 	unsigned int i, j;
3777 	u8 qos_info = 0;
3778 
3779 	i = 12; /* after the fixed IE */
3780 	while (i < in_len) {
3781 		ielength = initial_out_len;
3782 
3783 		if (in_ie[i] == 0xDD && in_ie[i + 2] == 0x00 && in_ie[i + 3] == 0x50  && in_ie[i + 4] == 0xF2 && in_ie[i + 5] == 0x02 && i + 5 < in_len) { /* WMM element ID and OUI */
3784 
3785 			/* Append WMM IE to the last index of out_ie */
3786 #if 0
3787 			for (j = i; j < i + (in_ie[i + 1] + 2); j++) {
3788 				out_ie[ielength] = in_ie[j];
3789 				ielength++;
3790 			}
3791 			out_ie[initial_out_len + 8] = 0x00; /* force the QoS Info Field to be zero */
3792 #endif
3793 
3794 			for (j = i; j < i + 9; j++) {
3795 				out_ie[ielength] = in_ie[j];
3796 				ielength++;
3797 			}
3798 			out_ie[initial_out_len + 1] = 0x07;
3799 			out_ie[initial_out_len + 6] = 0x00;
3800 
3801 #ifdef CONFIG_WMMPS_STA
3802 			switch(pqospriv->uapsd_max_sp_len) {
3803 				case NO_LIMIT:
3804 					/* do nothing */
3805 					break;
3806 				case TWO_MSDU:
3807 					SET_FLAG(qos_info, BIT5);
3808 					break;
3809 				case FOUR_MSDU:
3810 					SET_FLAG(qos_info, BIT6);
3811 					break;
3812 				case SIX_MSDU:
3813 					SET_FLAG(qos_info, BIT5);
3814 					SET_FLAG(qos_info, BIT6);
3815 					break;
3816 				default:
3817 					/* do nothing */
3818 					break;
3819 			};
3820 
3821 			/* check TID7 and TID6 for AC_VO to set corresponding Qos_info bit in WMM IE  */
3822 			if((TEST_FLAG(pqospriv->uapsd_tid, WMM_TID7)) && (TEST_FLAG(pqospriv->uapsd_tid, WMM_TID6)))
3823 				SET_FLAG(qos_info, WMM_IE_UAPSD_VO);
3824 			/* check TID5 and TID4 for AC_VI to set corresponding Qos_info bit in WMM IE  */
3825 			if((TEST_FLAG(pqospriv->uapsd_tid, WMM_TID5)) && (TEST_FLAG(pqospriv->uapsd_tid, WMM_TID4)))
3826 				SET_FLAG(qos_info, WMM_IE_UAPSD_VI);
3827 			/* check TID2 and TID1 for AC_BK to set corresponding Qos_info bit in WMM IE  */
3828 			if((TEST_FLAG(pqospriv->uapsd_tid, WMM_TID2)) && (TEST_FLAG(pqospriv->uapsd_tid, WMM_TID1)))
3829 				SET_FLAG(qos_info, WMM_IE_UAPSD_BK);
3830 			/* check TID3 and TID0 for AC_BE to set corresponding Qos_info bit in WMM IE  */
3831 			if((TEST_FLAG(pqospriv->uapsd_tid, WMM_TID3)) && (TEST_FLAG(pqospriv->uapsd_tid, WMM_TID0)))
3832 				SET_FLAG(qos_info, WMM_IE_UAPSD_BE);
3833 #endif /* CONFIG_WMMPS_STA */
3834 
3835 			out_ie[initial_out_len + 8] = qos_info;
3836 
3837 			break;
3838 		}
3839 
3840 		i += (in_ie[i + 1] + 2); /* to the next IE element */
3841 	}
3842 
3843 	return ielength;
3844 
3845 }
3846 
3847 
3848 /*
3849  * Ported from 8185: IsInPreAuthKeyList(). (Renamed from SecIsInPreAuthKeyList(), 2006-10-13.)
3850  * Added by Annie, 2006-05-07.
3851  *
3852  * Search by BSSID,
3853  * Return Value:
3854  *		-1		:if there is no pre-auth key in the  table
3855  *		>=0		:if there is pre-auth key, and   return the entry id
3856  *
3857  *   */
3858 
3859 static int SecIsInPMKIDList(_adapter *Adapter, u8 *bssid)
3860 {
3861 	struct security_priv *psecuritypriv = &Adapter->securitypriv;
3862 	int i = 0;
3863 
3864 	do {
3865 		if ((psecuritypriv->PMKIDList[i].bUsed) &&
3866 		    (_rtw_memcmp(psecuritypriv->PMKIDList[i].Bssid, bssid, ETH_ALEN) == _TRUE))
3867 			break;
3868 		else {
3869 			i++;
3870 			/* continue; */
3871 		}
3872 
3873 	} while (i < NUM_PMKID_CACHE);
3874 
3875 	if (i == NUM_PMKID_CACHE) {
3876 		i = -1;/* Could not find. */
3877 	} else {
3878 		/* There is one Pre-Authentication Key for the specific BSSID. */
3879 	}
3880 
3881 	return i;
3882 
3883 }
3884 
3885 /*
3886  * Check the RSN IE length
3887  * If the RSN IE length <= 20, the RSN IE didn't include the PMKID information
3888  * 0-11th element in the array are the fixed IE
3889  * 12th element in the array is the IE
3890  * 13th element in the array is the IE length
3891  *   */
3892 
3893 static int rtw_append_pmkid(_adapter *adapter, int iEntry, u8 *ie, uint ie_len)
3894 {
3895 	struct security_priv *sec = &adapter->securitypriv;
3896 
3897 	if (ie[13] > 20) {
3898 		int i;
3899 		u16 pmkid_cnt = RTW_GET_LE16(ie + 14 + 20);
3900 		if (pmkid_cnt == 1 && _rtw_memcmp(ie + 14 + 20 + 2, &sec->PMKIDList[iEntry].PMKID, 16)) {
3901 			RTW_INFO(FUNC_ADPT_FMT" has carried the same PMKID:"KEY_FMT"\n"
3902 				, FUNC_ADPT_ARG(adapter), KEY_ARG(&sec->PMKIDList[iEntry].PMKID));
3903 			goto exit;
3904 		}
3905 
3906 		RTW_INFO(FUNC_ADPT_FMT" remove original PMKID, count:%u\n"
3907 			 , FUNC_ADPT_ARG(adapter), pmkid_cnt);
3908 
3909 		for (i = 0; i < pmkid_cnt; i++)
3910 			RTW_INFO("    "KEY_FMT"\n", KEY_ARG(ie + 14 + 20 + 2 + i * 16));
3911 
3912 		ie_len -= 2 + pmkid_cnt * 16;
3913 		ie[13] = 20;
3914 	}
3915 
3916 	if (ie[13] <= 20) {
3917 		/* The RSN IE didn't include the PMK ID, append the PMK information */
3918 
3919 		RTW_INFO(FUNC_ADPT_FMT" append PMKID:"KEY_FMT"\n"
3920 			, FUNC_ADPT_ARG(adapter), KEY_ARG(&sec->PMKIDList[iEntry].PMKID));
3921 
3922 		RTW_PUT_LE16(&ie[ie_len], 1);
3923 		ie_len += 2;
3924 
3925 		_rtw_memcpy(&ie[ie_len], &sec->PMKIDList[iEntry].PMKID, 16);
3926 		ie_len += 16;
3927 
3928 		ie[13] += 18;/* PMKID length = 2+16 */
3929 	}
3930 
3931 exit:
3932 	return ie_len;
3933 }
3934 
3935 static int rtw_remove_pmkid(_adapter *adapter, u8 *ie, uint ie_len)
3936 {
3937 	struct security_priv *sec = &adapter->securitypriv;
3938 	int i;
3939 	u16 pmkid_cnt = RTW_GET_LE16(ie + 14 + 20);
3940 
3941 	if (ie[13] <= 20)
3942 		goto exit;
3943 
3944 	RTW_INFO(FUNC_ADPT_FMT" remove original PMKID, count:%u\n"
3945 		 , FUNC_ADPT_ARG(adapter), pmkid_cnt);
3946 
3947 	for (i = 0; i < pmkid_cnt; i++)
3948 		RTW_INFO("    "KEY_FMT"\n", KEY_ARG(ie + 14 + 20 + 2 + i * 16));
3949 
3950 	ie_len -= 2 + pmkid_cnt * 16;
3951 	ie[13] = 20;
3952 
3953 exit:
3954 	return ie_len;
3955 }
3956 
3957 sint rtw_restruct_sec_ie(_adapter *adapter, u8 *in_ie, u8 *out_ie, uint in_len)
3958 {
3959 	u8 authmode = 0x0, securitytype, match;
3960 	u8 sec_ie[255], uncst_oui[4], bkup_ie[255];
3961 	u8 wpa_oui[4] = {0x0, 0x50, 0xf2, 0x01};
3962 	uint	ielength, cnt, remove_cnt;
3963 	int iEntry;
3964 
3965 	struct mlme_priv *pmlmepriv = &adapter->mlmepriv;
3966 	struct security_priv *psecuritypriv = &adapter->securitypriv;
3967 	uint	ndisauthmode = psecuritypriv->ndisauthtype;
3968 	uint ndissecuritytype = psecuritypriv->ndisencryptstatus;
3969 
3970 
3971 
3972 	/* copy fixed ie only */
3973 	_rtw_memcpy(out_ie, in_ie, 12);
3974 	ielength = 12;
3975 	if ((ndisauthmode == Ndis802_11AuthModeWPA) || (ndisauthmode == Ndis802_11AuthModeWPAPSK))
3976 		authmode = _WPA_IE_ID_;
3977 	if ((ndisauthmode == Ndis802_11AuthModeWPA2) || (ndisauthmode == Ndis802_11AuthModeWPA2PSK))
3978 		authmode = _WPA2_IE_ID_;
3979 
3980 	if (check_fwstate(pmlmepriv, WIFI_UNDER_WPS)) {
3981 		_rtw_memcpy(out_ie + ielength, psecuritypriv->wps_ie, psecuritypriv->wps_ie_len);
3982 
3983 		ielength += psecuritypriv->wps_ie_len;
3984 	} else if ((authmode == _WPA_IE_ID_) || (authmode == _WPA2_IE_ID_)) {
3985 		/* copy RSN or SSN		 */
3986 		_rtw_memcpy(&out_ie[ielength], &psecuritypriv->supplicant_ie[0], psecuritypriv->supplicant_ie[1] + 2);
3987 		/* debug for CONFIG_IEEE80211W
3988 		{
3989 			int jj;
3990 			printk("supplicant_ie_length=%d &&&&&&&&&&&&&&&&&&&\n", psecuritypriv->supplicant_ie[1]+2);
3991 			for(jj=0; jj < psecuritypriv->supplicant_ie[1]+2; jj++)
3992 				printk(" %02x ", psecuritypriv->supplicant_ie[jj]);
3993 			printk("\n");
3994 		}*/
3995 		ielength += psecuritypriv->supplicant_ie[1] + 2;
3996 		rtw_report_sec_ie(adapter, authmode, psecuritypriv->supplicant_ie);
3997 
3998 #ifdef CONFIG_DRVEXT_MODULE
3999 		drvext_report_sec_ie(&adapter->drvextpriv, authmode, sec_ie);
4000 #endif
4001 	}
4002 
4003 	iEntry = SecIsInPMKIDList(adapter, pmlmepriv->assoc_bssid);
4004 	if (iEntry < 0) {
4005 		if (authmode == _WPA2_IE_ID_)
4006 			ielength = rtw_remove_pmkid(adapter, out_ie, ielength);
4007 	} else {
4008 		if (authmode == _WPA2_IE_ID_)
4009 			ielength = rtw_append_pmkid(adapter, iEntry, out_ie, ielength);
4010 	}
4011 
4012 
4013 	return ielength;
4014 }
4015 
4016 void rtw_init_registrypriv_dev_network(_adapter *adapter)
4017 {
4018 	struct registry_priv *pregistrypriv = &adapter->registrypriv;
4019 	WLAN_BSSID_EX    *pdev_network = &pregistrypriv->dev_network;
4020 	u8 *myhwaddr = adapter_mac_addr(adapter);
4021 
4022 
4023 	_rtw_memcpy(pdev_network->MacAddress, myhwaddr, ETH_ALEN);
4024 
4025 	_rtw_memcpy(&pdev_network->Ssid, &pregistrypriv->ssid, sizeof(NDIS_802_11_SSID));
4026 
4027 	pdev_network->Configuration.Length = sizeof(NDIS_802_11_CONFIGURATION);
4028 	pdev_network->Configuration.BeaconPeriod = 100;
4029 	pdev_network->Configuration.FHConfig.Length = 0;
4030 	pdev_network->Configuration.FHConfig.HopPattern = 0;
4031 	pdev_network->Configuration.FHConfig.HopSet = 0;
4032 	pdev_network->Configuration.FHConfig.DwellTime = 0;
4033 
4034 
4035 
4036 }
4037 
4038 void rtw_update_registrypriv_dev_network(_adapter *adapter)
4039 {
4040 	int sz = 0;
4041 	struct registry_priv *pregistrypriv = &adapter->registrypriv;
4042 	WLAN_BSSID_EX    *pdev_network = &pregistrypriv->dev_network;
4043 	struct	security_priv	*psecuritypriv = &adapter->securitypriv;
4044 	struct	wlan_network	*cur_network = &adapter->mlmepriv.cur_network;
4045 	/* struct	xmit_priv	*pxmitpriv = &adapter->xmitpriv; */
4046 	struct mlme_ext_priv	*pmlmeext = &adapter->mlmeextpriv;
4047 
4048 
4049 #if 0
4050 	pxmitpriv->vcs_setting = pregistrypriv->vrtl_carrier_sense;
4051 	pxmitpriv->vcs = pregistrypriv->vcs_type;
4052 	pxmitpriv->vcs_type = pregistrypriv->vcs_type;
4053 	/* pxmitpriv->rts_thresh = pregistrypriv->rts_thresh; */
4054 	pxmitpriv->frag_len = pregistrypriv->frag_thresh;
4055 
4056 	adapter->qospriv.qos_option = pregistrypriv->wmm_enable;
4057 #endif
4058 
4059 	pdev_network->Privacy = (psecuritypriv->dot11PrivacyAlgrthm > 0 ? 1 : 0) ; /* adhoc no 802.1x */
4060 
4061 	pdev_network->Rssi = 0;
4062 
4063 	switch (pregistrypriv->wireless_mode) {
4064 	case WIRELESS_11B:
4065 		pdev_network->NetworkTypeInUse = (Ndis802_11DS);
4066 		break;
4067 	case WIRELESS_11G:
4068 	case WIRELESS_11BG:
4069 	case WIRELESS_11_24N:
4070 	case WIRELESS_11G_24N:
4071 	case WIRELESS_11BG_24N:
4072 		pdev_network->NetworkTypeInUse = (Ndis802_11OFDM24);
4073 		break;
4074 	case WIRELESS_11A:
4075 	case WIRELESS_11A_5N:
4076 		pdev_network->NetworkTypeInUse = (Ndis802_11OFDM5);
4077 		break;
4078 	case WIRELESS_11ABGN:
4079 		if (pregistrypriv->channel > 14)
4080 			pdev_network->NetworkTypeInUse = (Ndis802_11OFDM5);
4081 		else
4082 			pdev_network->NetworkTypeInUse = (Ndis802_11OFDM24);
4083 		break;
4084 	default:
4085 		/* TODO */
4086 		break;
4087 	}
4088 
4089 	pdev_network->Configuration.DSConfig = (pregistrypriv->channel);
4090 
4091 	if (cur_network->network.InfrastructureMode == Ndis802_11IBSS) {
4092 		pdev_network->Configuration.ATIMWindow = (0);
4093 
4094 		if (pmlmeext->cur_channel != 0)
4095 			pdev_network->Configuration.DSConfig = pmlmeext->cur_channel;
4096 		else
4097 			pdev_network->Configuration.DSConfig = 1;
4098 	}
4099 
4100 	pdev_network->InfrastructureMode = (cur_network->network.InfrastructureMode);
4101 
4102 	/* 1. Supported rates */
4103 	/* 2. IE */
4104 
4105 	/* rtw_set_supported_rate(pdev_network->SupportedRates, pregistrypriv->wireless_mode) ; */ /* will be called in rtw_generate_ie */
4106 	sz = rtw_generate_ie(pregistrypriv);
4107 
4108 	pdev_network->IELength = sz;
4109 
4110 	pdev_network->Length = get_WLAN_BSSID_EX_sz((WLAN_BSSID_EX *)pdev_network);
4111 
4112 	/* notes: translate IELength & Length after assign the Length to cmdsz in createbss_cmd(); */
4113 	/* pdev_network->IELength = cpu_to_le32(sz); */
4114 
4115 
4116 }
4117 
4118 void rtw_get_encrypt_decrypt_from_registrypriv(_adapter *adapter)
4119 {
4120 
4121 
4122 
4123 }
4124 
4125 /* the fucntion is at passive_level */
4126 void rtw_joinbss_reset(_adapter *padapter)
4127 {
4128 	u8	threshold;
4129 	struct mlme_priv	*pmlmepriv = &padapter->mlmepriv;
4130 	/* todo: if you want to do something io/reg/hw setting before join_bss, please add code here */
4131 
4132 #ifdef CONFIG_80211N_HT
4133 	struct ht_priv		*phtpriv = &pmlmepriv->htpriv;
4134 
4135 	pmlmepriv->num_FortyMHzIntolerant = 0;
4136 
4137 	pmlmepriv->num_sta_no_ht = 0;
4138 
4139 	phtpriv->ampdu_enable = _FALSE;/* reset to disabled */
4140 
4141 #if defined(CONFIG_USB_HCI) || defined(CONFIG_SDIO_HCI)
4142 	/* TH=1 => means that invalidate usb rx aggregation */
4143 	/* TH=0 => means that validate usb rx aggregation, use init value. */
4144 	if (phtpriv->ht_option) {
4145 		if (padapter->registrypriv.wifi_spec == 1)
4146 			threshold = 1;
4147 		else
4148 			threshold = 0;
4149 		rtw_hal_set_hwreg(padapter, HW_VAR_RXDMA_AGG_PG_TH, (u8 *)(&threshold));
4150 	} else {
4151 		threshold = 1;
4152 		rtw_hal_set_hwreg(padapter, HW_VAR_RXDMA_AGG_PG_TH, (u8 *)(&threshold));
4153 	}
4154 #endif/* #if defined( CONFIG_USB_HCI) || defined (CONFIG_SDIO_HCI) */
4155 
4156 #endif/* #ifdef CONFIG_80211N_HT */
4157 
4158 }
4159 
4160 
4161 #ifdef CONFIG_80211N_HT
4162 void	rtw_ht_use_default_setting(_adapter *padapter)
4163 {
4164 	struct mlme_priv		*pmlmepriv = &padapter->mlmepriv;
4165 	struct ht_priv		*phtpriv = &pmlmepriv->htpriv;
4166 	struct registry_priv	*pregistrypriv = &padapter->registrypriv;
4167 	BOOLEAN		bHwLDPCSupport = _FALSE, bHwSTBCSupport = _FALSE;
4168 #ifdef CONFIG_BEAMFORMING
4169 	BOOLEAN		bHwSupportBeamformer = _FALSE, bHwSupportBeamformee = _FALSE;
4170 #endif /* CONFIG_BEAMFORMING */
4171 
4172 	if (pregistrypriv->wifi_spec)
4173 		phtpriv->bss_coexist = 1;
4174 	else
4175 		phtpriv->bss_coexist = 0;
4176 
4177 	phtpriv->sgi_40m = TEST_FLAG(pregistrypriv->short_gi, BIT1) ? _TRUE : _FALSE;
4178 	phtpriv->sgi_20m = TEST_FLAG(pregistrypriv->short_gi, BIT0) ? _TRUE : _FALSE;
4179 
4180 	/* LDPC support */
4181 	rtw_hal_get_def_var(padapter, HAL_DEF_RX_LDPC, (u8 *)&bHwLDPCSupport);
4182 	CLEAR_FLAGS(phtpriv->ldpc_cap);
4183 	if (bHwLDPCSupport) {
4184 		if (TEST_FLAG(pregistrypriv->ldpc_cap, BIT4))
4185 			SET_FLAG(phtpriv->ldpc_cap, LDPC_HT_ENABLE_RX);
4186 	}
4187 	rtw_hal_get_def_var(padapter, HAL_DEF_TX_LDPC, (u8 *)&bHwLDPCSupport);
4188 	if (bHwLDPCSupport) {
4189 		if (TEST_FLAG(pregistrypriv->ldpc_cap, BIT5))
4190 			SET_FLAG(phtpriv->ldpc_cap, LDPC_HT_ENABLE_TX);
4191 	}
4192 	if (phtpriv->ldpc_cap)
4193 		RTW_INFO("[HT] HAL Support LDPC = 0x%02X\n", phtpriv->ldpc_cap);
4194 
4195 	/* STBC */
4196 	rtw_hal_get_def_var(padapter, HAL_DEF_TX_STBC, (u8 *)&bHwSTBCSupport);
4197 	CLEAR_FLAGS(phtpriv->stbc_cap);
4198 	if (bHwSTBCSupport) {
4199 		if (TEST_FLAG(pregistrypriv->stbc_cap, BIT5))
4200 			SET_FLAG(phtpriv->stbc_cap, STBC_HT_ENABLE_TX);
4201 	}
4202 	rtw_hal_get_def_var(padapter, HAL_DEF_RX_STBC, (u8 *)&bHwSTBCSupport);
4203 	if (bHwSTBCSupport) {
4204 		if (TEST_FLAG(pregistrypriv->stbc_cap, BIT4))
4205 			SET_FLAG(phtpriv->stbc_cap, STBC_HT_ENABLE_RX);
4206 	}
4207 	if (phtpriv->stbc_cap)
4208 		RTW_INFO("[HT] HAL Support STBC = 0x%02X\n", phtpriv->stbc_cap);
4209 
4210 	/* Beamforming setting */
4211 	CLEAR_FLAGS(phtpriv->beamform_cap);
4212 #ifdef CONFIG_BEAMFORMING
4213 	rtw_hal_get_def_var(padapter, HAL_DEF_EXPLICIT_BEAMFORMER, (u8 *)&bHwSupportBeamformer);
4214 	rtw_hal_get_def_var(padapter, HAL_DEF_EXPLICIT_BEAMFORMEE, (u8 *)&bHwSupportBeamformee);
4215 	if (TEST_FLAG(pregistrypriv->beamform_cap, BIT4) && bHwSupportBeamformer) {
4216 		SET_FLAG(phtpriv->beamform_cap, BEAMFORMING_HT_BEAMFORMER_ENABLE);
4217 		RTW_INFO("[HT] HAL Support Beamformer\n");
4218 	}
4219 	if (TEST_FLAG(pregistrypriv->beamform_cap, BIT5) && bHwSupportBeamformee) {
4220 		SET_FLAG(phtpriv->beamform_cap, BEAMFORMING_HT_BEAMFORMEE_ENABLE);
4221 		RTW_INFO("[HT] HAL Support Beamformee\n");
4222 	}
4223 #endif /* CONFIG_BEAMFORMING */
4224 }
4225 void rtw_build_wmm_ie_ht(_adapter *padapter, u8 *out_ie, uint *pout_len)
4226 {
4227 	unsigned char WMM_IE[] = {0x00, 0x50, 0xf2, 0x02, 0x00, 0x01, 0x00};
4228 	int out_len;
4229 	u8 *pframe;
4230 
4231 	if (padapter->mlmepriv.qospriv.qos_option == 0) {
4232 		out_len = *pout_len;
4233 		pframe = rtw_set_ie(out_ie + out_len, _VENDOR_SPECIFIC_IE_,
4234 				    _WMM_IE_Length_, WMM_IE, pout_len);
4235 
4236 		padapter->mlmepriv.qospriv.qos_option = 1;
4237 	}
4238 }
4239 
4240 /* the fucntion is >= passive_level */
4241 unsigned int rtw_restructure_ht_ie(_adapter *padapter, u8 *in_ie, u8 *out_ie, uint in_len, uint *pout_len, u8 channel)
4242 {
4243 	u32 ielen, out_len;
4244 	u32 rx_packet_offset, max_recvbuf_sz;
4245 	HT_CAP_AMPDU_FACTOR max_rx_ampdu_factor;
4246 	HT_CAP_AMPDU_DENSITY best_ampdu_density;
4247 	unsigned char *p, *pframe;
4248 	struct rtw_ieee80211_ht_cap ht_capie;
4249 	u8	cbw40_enable = 0, rf_type = 0, operation_bw = 0, rf_num = 0, rx_stbc_nss = 0, rx_nss = 0;
4250 	struct registry_priv *pregistrypriv = &padapter->registrypriv;
4251 	struct mlme_priv	*pmlmepriv = &padapter->mlmepriv;
4252 	struct ht_priv		*phtpriv = &pmlmepriv->htpriv;
4253 	struct mlme_ext_priv	*pmlmeext = &padapter->mlmeextpriv;
4254 	struct hal_spec_t *hal_spec = GET_HAL_SPEC(padapter);
4255 #ifdef CONFIG_80211AC_VHT
4256 	struct mlme_ext_info	*pmlmeinfo = &(pmlmeext->mlmext_info);
4257 	struct vht_priv	*pvhtpriv = &pmlmepriv->vhtpriv;
4258 #endif /* CONFIG_80211AC_VHT */
4259 
4260 	phtpriv->ht_option = _FALSE;
4261 
4262 	out_len = *pout_len;
4263 
4264 	_rtw_memset(&ht_capie, 0, sizeof(struct rtw_ieee80211_ht_cap));
4265 
4266 	ht_capie.cap_info = IEEE80211_HT_CAP_DSSSCCK40;
4267 
4268 	if (phtpriv->sgi_20m)
4269 		ht_capie.cap_info |= IEEE80211_HT_CAP_SGI_20;
4270 
4271 	/* Get HT BW */
4272 	if (in_ie == NULL) {
4273 		/* TDLS: TODO 20/40 issue */
4274 		if (check_fwstate(pmlmepriv, WIFI_STATION_STATE)) {
4275 			operation_bw = padapter->mlmeextpriv.cur_bwmode;
4276 			if (operation_bw > CHANNEL_WIDTH_40)
4277 				operation_bw = CHANNEL_WIDTH_40;
4278 		} else
4279 			/* TDLS: TODO 40? */
4280 			operation_bw = CHANNEL_WIDTH_40;
4281 	} else {
4282 		p = rtw_get_ie(in_ie, _HT_ADD_INFO_IE_, &ielen, in_len);
4283 		if (p && (ielen == sizeof(struct ieee80211_ht_addt_info))) {
4284 			struct HT_info_element *pht_info = (struct HT_info_element *)(p + 2);
4285 			if (pht_info->infos[0] & BIT(2)) {
4286 				switch (pht_info->infos[0] & 0x3) {
4287 				case 1:
4288 				case 3:
4289 					operation_bw = CHANNEL_WIDTH_40;
4290 					break;
4291 				default:
4292 					operation_bw = CHANNEL_WIDTH_20;
4293 					break;
4294 				}
4295 			} else
4296 				operation_bw = CHANNEL_WIDTH_20;
4297 		}
4298 	}
4299 
4300 	/* to disable 40M Hz support while gd_bw_40MHz_en = 0 */
4301 	if (hal_chk_bw_cap(padapter, BW_CAP_40M)) {
4302 		if (channel > 14) {
4303 			if (REGSTY_IS_BW_5G_SUPPORT(pregistrypriv, CHANNEL_WIDTH_40))
4304 				cbw40_enable = 1;
4305 		} else {
4306 			if (REGSTY_IS_BW_2G_SUPPORT(pregistrypriv, CHANNEL_WIDTH_40))
4307 				cbw40_enable = 1;
4308 		}
4309 	}
4310 
4311 	if ((cbw40_enable == 1) && (operation_bw == CHANNEL_WIDTH_40)) {
4312 		ht_capie.cap_info |= IEEE80211_HT_CAP_SUP_WIDTH;
4313 		if (phtpriv->sgi_40m)
4314 			ht_capie.cap_info |= IEEE80211_HT_CAP_SGI_40;
4315 	}
4316 
4317 	/* todo: disable SM power save mode */
4318 	ht_capie.cap_info |= IEEE80211_HT_CAP_SM_PS;
4319 
4320 	/* RX LDPC */
4321 	if (TEST_FLAG(phtpriv->ldpc_cap, LDPC_HT_ENABLE_RX)) {
4322 		ht_capie.cap_info |= IEEE80211_HT_CAP_LDPC_CODING;
4323 		RTW_INFO("[HT] Declare supporting RX LDPC\n");
4324 	}
4325 
4326 	/* TX STBC */
4327 	if (TEST_FLAG(phtpriv->stbc_cap, STBC_HT_ENABLE_TX)) {
4328 		ht_capie.cap_info |= IEEE80211_HT_CAP_TX_STBC;
4329 		RTW_INFO("[HT] Declare supporting TX STBC\n");
4330 	}
4331 
4332 	/* RX STBC */
4333 	if (TEST_FLAG(phtpriv->stbc_cap, STBC_HT_ENABLE_RX)) {
4334 		if ((pregistrypriv->rx_stbc == 0x3) ||							/* enable for 2.4/5 GHz */
4335 		    ((channel <= 14) && (pregistrypriv->rx_stbc == 0x1)) ||		/* enable for 2.4GHz */
4336 		    ((channel > 14) && (pregistrypriv->rx_stbc == 0x2)) ||		/* enable for 5GHz */
4337 		    (pregistrypriv->wifi_spec == 1)) {
4338 			/* HAL_DEF_RX_STBC means STBC RX spatial stream, todo: VHT 4 streams */
4339 			rtw_hal_get_def_var(padapter, HAL_DEF_RX_STBC, (u8 *)(&rx_stbc_nss));
4340 			SET_HT_CAP_ELE_RX_STBC(&ht_capie, rx_stbc_nss);
4341 			RTW_INFO("[HT] Declare supporting RX STBC = %d\n", rx_stbc_nss);
4342 		}
4343 	}
4344 
4345 	/* fill default supported_mcs_set */
4346 	_rtw_memcpy(ht_capie.supp_mcs_set, pmlmeext->default_supported_mcs_set, 16);
4347 
4348 	/* update default supported_mcs_set */
4349 	rtw_hal_get_hwreg(padapter, HW_VAR_RF_TYPE, (u8 *)(&rf_type));
4350 	rx_nss = rtw_min(rf_type_to_rf_rx_cnt(rf_type), hal_spec->rx_nss_num);
4351 
4352 	switch (rx_nss) {
4353 	case 1:
4354 		set_mcs_rate_by_mask(ht_capie.supp_mcs_set, MCS_RATE_1R);
4355 		break;
4356 	case 2:
4357 		#ifdef CONFIG_DISABLE_MCS13TO15
4358 		if (((cbw40_enable == 1) && (operation_bw == CHANNEL_WIDTH_40)) && (pregistrypriv->wifi_spec != 1))
4359 			set_mcs_rate_by_mask(ht_capie.supp_mcs_set, MCS_RATE_2R_13TO15_OFF);
4360 		else
4361 		#endif
4362 			set_mcs_rate_by_mask(ht_capie.supp_mcs_set, MCS_RATE_2R);
4363 		break;
4364 	case 3:
4365 		set_mcs_rate_by_mask(ht_capie.supp_mcs_set, MCS_RATE_3R);
4366 		break;
4367 	case 4:
4368 		set_mcs_rate_by_mask(ht_capie.supp_mcs_set, MCS_RATE_4R);
4369 		break;
4370 	default:
4371 		RTW_WARN("rf_type:%d or rx_nss:%u is not expected\n", rf_type, hal_spec->rx_nss_num);
4372 	}
4373 
4374 	{
4375 		rtw_hal_get_def_var(padapter, HAL_DEF_RX_PACKET_OFFSET, &rx_packet_offset);
4376 		rtw_hal_get_def_var(padapter, HAL_DEF_MAX_RECVBUF_SZ, &max_recvbuf_sz);
4377 		if (max_recvbuf_sz - rx_packet_offset >= (8191 - 256)) {
4378 			RTW_INFO("%s IEEE80211_HT_CAP_MAX_AMSDU is set\n", __FUNCTION__);
4379 			ht_capie.cap_info = ht_capie.cap_info | IEEE80211_HT_CAP_MAX_AMSDU;
4380 		}
4381 	}
4382 	/*
4383 	AMPDU_para [1:0]:Max AMPDU Len => 0:8k , 1:16k, 2:32k, 3:64k
4384 	AMPDU_para [4:2]:Min MPDU Start Spacing
4385 	*/
4386 
4387 	/*
4388 	#if defined(CONFIG_RTL8188E) && defined(CONFIG_SDIO_HCI)
4389 	ht_capie.ampdu_params_info = 2;
4390 	#else
4391 	ht_capie.ampdu_params_info = (IEEE80211_HT_CAP_AMPDU_FACTOR&0x03);
4392 	#endif
4393 	*/
4394 
4395 	if (padapter->driver_rx_ampdu_factor != 0xFF)
4396 		max_rx_ampdu_factor = (HT_CAP_AMPDU_FACTOR)padapter->driver_rx_ampdu_factor;
4397 	else
4398 		rtw_hal_get_def_var(padapter, HW_VAR_MAX_RX_AMPDU_FACTOR, &max_rx_ampdu_factor);
4399 
4400 	/* rtw_hal_get_def_var(padapter, HW_VAR_MAX_RX_AMPDU_FACTOR, &max_rx_ampdu_factor); */
4401 	ht_capie.ampdu_params_info = (max_rx_ampdu_factor & 0x03);
4402 
4403 	if (padapter->driver_rx_ampdu_spacing != 0xFF)
4404 		ht_capie.ampdu_params_info |= ((padapter->driver_rx_ampdu_spacing & 0x07) << 2);
4405 	else {
4406 		if (padapter->securitypriv.dot11PrivacyAlgrthm == _AES_) {
4407 			/*
4408 			*	Todo : Each chip must to ask DD , this chip best ampdu_density setting
4409 			*	By yiwei.sun
4410 			*/
4411 			rtw_hal_get_def_var(padapter, HW_VAR_BEST_AMPDU_DENSITY, &best_ampdu_density);
4412 
4413 			ht_capie.ampdu_params_info |= (IEEE80211_HT_CAP_AMPDU_DENSITY & (best_ampdu_density << 2));
4414 
4415 		} else
4416 			ht_capie.ampdu_params_info |= (IEEE80211_HT_CAP_AMPDU_DENSITY & 0x00);
4417 	}
4418 #ifdef CONFIG_BEAMFORMING
4419 	ht_capie.tx_BF_cap_info = 0;
4420 
4421 	/* HT Beamformer*/
4422 	if (TEST_FLAG(phtpriv->beamform_cap, BEAMFORMING_HT_BEAMFORMER_ENABLE)) {
4423 		/* Transmit NDP Capable */
4424 		SET_HT_CAP_TXBF_TRANSMIT_NDP_CAP(&ht_capie, 1);
4425 		/* Explicit Compressed Steering Capable */
4426 		SET_HT_CAP_TXBF_EXPLICIT_COMP_STEERING_CAP(&ht_capie, 1);
4427 		/* Compressed Steering Number Antennas */
4428 		SET_HT_CAP_TXBF_COMP_STEERING_NUM_ANTENNAS(&ht_capie, 1);
4429 		rtw_hal_get_def_var(padapter, HAL_DEF_BEAMFORMER_CAP, (u8 *)&rf_num);
4430 		SET_HT_CAP_TXBF_CHNL_ESTIMATION_NUM_ANTENNAS(&ht_capie, rf_num);
4431 	}
4432 
4433 	/* HT Beamformee */
4434 	if (TEST_FLAG(phtpriv->beamform_cap, BEAMFORMING_HT_BEAMFORMEE_ENABLE)) {
4435 		/* Receive NDP Capable */
4436 		SET_HT_CAP_TXBF_RECEIVE_NDP_CAP(&ht_capie, 1);
4437 		/* Explicit Compressed Beamforming Feedback Capable */
4438 		SET_HT_CAP_TXBF_EXPLICIT_COMP_FEEDBACK_CAP(&ht_capie, 2);
4439 
4440 		rtw_hal_get_def_var(padapter, HAL_DEF_BEAMFORMEE_CAP, (u8 *)&rf_num);
4441 #ifdef CONFIG_80211AC_VHT
4442 		/* IOT action suggested by Yu Chen 2017/3/3 */
4443 		if ((pmlmeinfo->assoc_AP_vendor == HT_IOT_PEER_BROADCOM) &&
4444 			!GET_VHT_CAPABILITY_ELE_MU_BFER(&pvhtpriv->beamform_cap))
4445 			rf_num = (rf_num >= 2 ? 2 : rf_num);
4446 #endif
4447 		SET_HT_CAP_TXBF_COMP_STEERING_NUM_ANTENNAS(&ht_capie, rf_num);
4448 	}
4449 #endif/*CONFIG_BEAMFORMING*/
4450 
4451 	pframe = rtw_set_ie(out_ie + out_len, _HT_CAPABILITY_IE_,
4452 		sizeof(struct rtw_ieee80211_ht_cap), (unsigned char *)&ht_capie, pout_len);
4453 
4454 	phtpriv->ht_option = _TRUE;
4455 
4456 	if (in_ie != NULL) {
4457 		p = rtw_get_ie(in_ie, _HT_ADD_INFO_IE_, &ielen, in_len);
4458 		if (p && (ielen == sizeof(struct ieee80211_ht_addt_info))) {
4459 			out_len = *pout_len;
4460 			pframe = rtw_set_ie(out_ie + out_len, _HT_ADD_INFO_IE_, ielen, p + 2 , pout_len);
4461 		}
4462 	}
4463 
4464 	return phtpriv->ht_option;
4465 
4466 }
4467 
4468 /* the fucntion is > passive_level (in critical_section) */
4469 void rtw_update_ht_cap(_adapter *padapter, u8 *pie, uint ie_len, u8 channel)
4470 {
4471 	u8 *p, max_ampdu_sz;
4472 	int len;
4473 	/* struct sta_info *bmc_sta, *psta; */
4474 	struct rtw_ieee80211_ht_cap *pht_capie;
4475 	struct ieee80211_ht_addt_info *pht_addtinfo;
4476 	/* struct recv_reorder_ctrl *preorder_ctrl; */
4477 	struct mlme_priv	*pmlmepriv = &padapter->mlmepriv;
4478 	struct ht_priv		*phtpriv = &pmlmepriv->htpriv;
4479 	/* struct recv_priv *precvpriv = &padapter->recvpriv; */
4480 	struct registry_priv *pregistrypriv = &padapter->registrypriv;
4481 	/* struct wlan_network *pcur_network = &(pmlmepriv->cur_network);; */
4482 	struct mlme_ext_priv	*pmlmeext = &padapter->mlmeextpriv;
4483 	struct mlme_ext_info	*pmlmeinfo = &(pmlmeext->mlmext_info);
4484 	u8 cbw40_enable = 0;
4485 
4486 
4487 	if (!phtpriv->ht_option)
4488 		return;
4489 
4490 	if ((!pmlmeinfo->HT_info_enable) || (!pmlmeinfo->HT_caps_enable))
4491 		return;
4492 
4493 	RTW_INFO("+rtw_update_ht_cap()\n");
4494 
4495 	/* maybe needs check if ap supports rx ampdu. */
4496 	if ((phtpriv->ampdu_enable == _FALSE) && (pregistrypriv->ampdu_enable == 1)) {
4497 		if (pregistrypriv->wifi_spec == 1) {
4498 			/* remove this part because testbed AP should disable RX AMPDU */
4499 			/* phtpriv->ampdu_enable = _FALSE; */
4500 			phtpriv->ampdu_enable = _TRUE;
4501 		} else
4502 			phtpriv->ampdu_enable = _TRUE;
4503 	}
4504 
4505 
4506 	/* check Max Rx A-MPDU Size */
4507 	len = 0;
4508 	p = rtw_get_ie(pie + sizeof(NDIS_802_11_FIXED_IEs), _HT_CAPABILITY_IE_, &len, ie_len - sizeof(NDIS_802_11_FIXED_IEs));
4509 	if (p && len > 0) {
4510 		pht_capie = (struct rtw_ieee80211_ht_cap *)(p + 2);
4511 		max_ampdu_sz = (pht_capie->ampdu_params_info & IEEE80211_HT_CAP_AMPDU_FACTOR);
4512 		max_ampdu_sz = 1 << (max_ampdu_sz + 3); /* max_ampdu_sz (kbytes); */
4513 
4514 		/* RTW_INFO("rtw_update_ht_cap(): max_ampdu_sz=%d\n", max_ampdu_sz); */
4515 		phtpriv->rx_ampdu_maxlen = max_ampdu_sz;
4516 
4517 	}
4518 
4519 
4520 	len = 0;
4521 	p = rtw_get_ie(pie + sizeof(NDIS_802_11_FIXED_IEs), _HT_ADD_INFO_IE_, &len, ie_len - sizeof(NDIS_802_11_FIXED_IEs));
4522 	if (p && len > 0) {
4523 		pht_addtinfo = (struct ieee80211_ht_addt_info *)(p + 2);
4524 		/* todo: */
4525 	}
4526 
4527 	if (hal_chk_bw_cap(padapter, BW_CAP_40M)) {
4528 		if (channel > 14) {
4529 			if (REGSTY_IS_BW_5G_SUPPORT(pregistrypriv, CHANNEL_WIDTH_40))
4530 				cbw40_enable = 1;
4531 		} else {
4532 			if (REGSTY_IS_BW_2G_SUPPORT(pregistrypriv, CHANNEL_WIDTH_40))
4533 				cbw40_enable = 1;
4534 		}
4535 	}
4536 
4537 	/* update cur_bwmode & cur_ch_offset */
4538 	if ((cbw40_enable) &&
4539 	    (pmlmeinfo->HT_caps.u.HT_cap_element.HT_caps_info & BIT(1)) &&
4540 	    (pmlmeinfo->HT_info.infos[0] & BIT(2))) {
4541 		struct hal_spec_t *hal_spec = GET_HAL_SPEC(padapter);
4542 		int i;
4543 		u8	rf_type = RF_1T1R;
4544 		u8 tx_nss = 0;
4545 
4546 		rtw_hal_get_hwreg(padapter, HW_VAR_RF_TYPE, (u8 *)(&rf_type));
4547 		tx_nss = rtw_min(rf_type_to_rf_tx_cnt(rf_type), hal_spec->tx_nss_num);
4548 
4549 		/* update the MCS set */
4550 		for (i = 0; i < 16; i++)
4551 			pmlmeinfo->HT_caps.u.HT_cap_element.MCS_rate[i] &= pmlmeext->default_supported_mcs_set[i];
4552 
4553 		/* update the MCS rates */
4554 		switch (tx_nss) {
4555 		case 1:
4556 			set_mcs_rate_by_mask(pmlmeinfo->HT_caps.u.HT_cap_element.MCS_rate, MCS_RATE_1R);
4557 			break;
4558 		case 2:
4559 			#ifdef CONFIG_DISABLE_MCS13TO15
4560 			if (pmlmeext->cur_bwmode == CHANNEL_WIDTH_40 && pregistrypriv->wifi_spec != 1)
4561 				set_mcs_rate_by_mask(pmlmeinfo->HT_caps.u.HT_cap_element.MCS_rate, MCS_RATE_2R_13TO15_OFF);
4562 			else
4563 			#endif
4564 				set_mcs_rate_by_mask(pmlmeinfo->HT_caps.u.HT_cap_element.MCS_rate, MCS_RATE_2R);
4565 			break;
4566 		case 3:
4567 			set_mcs_rate_by_mask(pmlmeinfo->HT_caps.u.HT_cap_element.MCS_rate, MCS_RATE_3R);
4568 			break;
4569 		case 4:
4570 			set_mcs_rate_by_mask(pmlmeinfo->HT_caps.u.HT_cap_element.MCS_rate, MCS_RATE_4R);
4571 			break;
4572 		default:
4573 			RTW_WARN("rf_type:%d or tx_nss_num:%u is not expected\n", rf_type, hal_spec->tx_nss_num);
4574 		}
4575 
4576 		/* switch to the 40M Hz mode accoring to the AP */
4577 		/* pmlmeext->cur_bwmode = CHANNEL_WIDTH_40; */
4578 		switch ((pmlmeinfo->HT_info.infos[0] & 0x3)) {
4579 		case EXTCHNL_OFFSET_UPPER:
4580 			pmlmeext->cur_ch_offset = HAL_PRIME_CHNL_OFFSET_LOWER;
4581 			break;
4582 
4583 		case EXTCHNL_OFFSET_LOWER:
4584 			pmlmeext->cur_ch_offset = HAL_PRIME_CHNL_OFFSET_UPPER;
4585 			break;
4586 
4587 		default:
4588 			pmlmeext->cur_ch_offset = HAL_PRIME_CHNL_OFFSET_DONT_CARE;
4589 			break;
4590 		}
4591 	}
4592 
4593 	/*  */
4594 	/* Config SM Power Save setting */
4595 	/*  */
4596 	pmlmeinfo->SM_PS = (pmlmeinfo->HT_caps.u.HT_cap_element.HT_caps_info & 0x0C) >> 2;
4597 	if (pmlmeinfo->SM_PS == WLAN_HT_CAP_SM_PS_STATIC) {
4598 #if 0
4599 		u8 i;
4600 		/* update the MCS rates */
4601 		for (i = 0; i < 16; i++)
4602 			pmlmeinfo->HT_caps.HT_cap_element.MCS_rate[i] &= MCS_rate_1R[i];
4603 #endif
4604 		RTW_INFO("%s(): WLAN_HT_CAP_SM_PS_STATIC\n", __FUNCTION__);
4605 	}
4606 
4607 	/*  */
4608 	/* Config current HT Protection mode. */
4609 	/*  */
4610 	pmlmeinfo->HT_protection = pmlmeinfo->HT_info.infos[1] & 0x3;
4611 
4612 
4613 
4614 #if 0 /* move to rtw_update_sta_info_client() */
4615 	/* for A-MPDU Rx reordering buffer control for bmc_sta & sta_info */
4616 	/* if A-MPDU Rx is enabled, reseting  rx_ordering_ctrl wstart_b(indicate_seq) to default value=0xffff */
4617 	/* todo: check if AP can send A-MPDU packets */
4618 	bmc_sta = rtw_get_bcmc_stainfo(padapter);
4619 	if (bmc_sta) {
4620 		for (i = 0; i < 16 ; i++) {
4621 			/* preorder_ctrl = &precvpriv->recvreorder_ctrl[i]; */
4622 			preorder_ctrl = &bmc_sta->recvreorder_ctrl[i];
4623 			preorder_ctrl->enable = _FALSE;
4624 			preorder_ctrl->indicate_seq = 0xffff;
4625 #ifdef DBG_RX_SEQ
4626 			RTW_INFO("DBG_RX_SEQ %s:%d indicate_seq:%u\n", __FUNCTION__, __LINE__,
4627 				 preorder_ctrl->indicate_seq);
4628 #endif
4629 			preorder_ctrl->wend_b = 0xffff;
4630 			preorder_ctrl->wsize_b = 64;/* max_ampdu_sz; */ /* ex. 32(kbytes) -> wsize_b=32 */
4631 		}
4632 	}
4633 
4634 	psta = rtw_get_stainfo(&padapter->stapriv, pcur_network->network.MacAddress);
4635 	if (psta) {
4636 		for (i = 0; i < 16 ; i++) {
4637 			/* preorder_ctrl = &precvpriv->recvreorder_ctrl[i]; */
4638 			preorder_ctrl = &psta->recvreorder_ctrl[i];
4639 			preorder_ctrl->enable = _FALSE;
4640 			preorder_ctrl->indicate_seq = 0xffff;
4641 #ifdef DBG_RX_SEQ
4642 			RTW_INFO("DBG_RX_SEQ %s:%d indicate_seq:%u\n", __FUNCTION__, __LINE__,
4643 				 preorder_ctrl->indicate_seq);
4644 #endif
4645 			preorder_ctrl->wend_b = 0xffff;
4646 			preorder_ctrl->wsize_b = 64;/* max_ampdu_sz; */ /* ex. 32(kbytes) -> wsize_b=32 */
4647 		}
4648 	}
4649 #endif
4650 
4651 }
4652 
4653 #ifdef CONFIG_TDLS
4654 void rtw_issue_addbareq_cmd_tdls(_adapter *padapter, struct xmit_frame *pxmitframe)
4655 {
4656 	struct pkt_attrib *pattrib = &pxmitframe->attrib;
4657 	struct sta_info *ptdls_sta = NULL;
4658 	u8 issued;
4659 	int priority;
4660 	struct ht_priv	*phtpriv;
4661 
4662 	priority = pattrib->priority;
4663 
4664 	if (pattrib->direct_link == _TRUE) {
4665 		ptdls_sta = rtw_get_stainfo(&padapter->stapriv, pattrib->dst);
4666 		if ((ptdls_sta != NULL) && (ptdls_sta->tdls_sta_state & TDLS_LINKED_STATE)) {
4667 			phtpriv = &ptdls_sta->htpriv;
4668 
4669 			if ((phtpriv->ht_option == _TRUE) && (phtpriv->ampdu_enable == _TRUE)) {
4670 				issued = (phtpriv->agg_enable_bitmap >> priority) & 0x1;
4671 				issued |= (phtpriv->candidate_tid_bitmap >> priority) & 0x1;
4672 
4673 				if (0 == issued) {
4674 					RTW_INFO("[%s], p=%d\n", __FUNCTION__, priority);
4675 					ptdls_sta->htpriv.candidate_tid_bitmap |= BIT((u8)priority);
4676 					rtw_addbareq_cmd(padapter, (u8)priority, pattrib->dst);
4677 				}
4678 			}
4679 		}
4680 	}
4681 }
4682 #endif /* CONFIG_TDLS */
4683 
4684 void rtw_issue_addbareq_cmd(_adapter *padapter, struct xmit_frame *pxmitframe)
4685 {
4686 	u8 issued;
4687 	int priority;
4688 	struct sta_info *psta = NULL;
4689 	struct ht_priv	*phtpriv;
4690 	struct pkt_attrib *pattrib = &pxmitframe->attrib;
4691 	s32 bmcst = IS_MCAST(pattrib->ra);
4692 
4693 	/* if(bmcst || (padapter->mlmepriv.LinkDetectInfo.bTxBusyTraffic == _FALSE)) */
4694 	if (bmcst || (padapter->mlmepriv.LinkDetectInfo.NumTxOkInPeriod < 100))
4695 		return;
4696 
4697 	priority = pattrib->priority;
4698 
4699 #ifdef CONFIG_TDLS
4700 	rtw_issue_addbareq_cmd_tdls(padapter, pxmitframe);
4701 #endif /* CONFIG_TDLS */
4702 
4703 	psta = rtw_get_stainfo(&padapter->stapriv, pattrib->ra);
4704 	if (pattrib->psta != psta) {
4705 		RTW_INFO("%s, pattrib->psta(%p) != psta(%p)\n", __func__, pattrib->psta, psta);
4706 		return;
4707 	}
4708 
4709 	if (psta == NULL) {
4710 		RTW_INFO("%s, psta==NUL\n", __func__);
4711 		return;
4712 	}
4713 
4714 	if (!(psta->state & _FW_LINKED)) {
4715 		RTW_INFO("%s, psta->state(0x%x) != _FW_LINKED\n", __func__, psta->state);
4716 		return;
4717 	}
4718 
4719 
4720 	phtpriv = &psta->htpriv;
4721 
4722 	if ((phtpriv->ht_option == _TRUE) && (phtpriv->ampdu_enable == _TRUE)) {
4723 		issued = (phtpriv->agg_enable_bitmap >> priority) & 0x1;
4724 		issued |= (phtpriv->candidate_tid_bitmap >> priority) & 0x1;
4725 
4726 		if (0 == issued) {
4727 			RTW_INFO("rtw_issue_addbareq_cmd, p=%d\n", priority);
4728 			psta->htpriv.candidate_tid_bitmap |= BIT((u8)priority);
4729 			rtw_addbareq_cmd(padapter, (u8) priority, pattrib->ra);
4730 		}
4731 	}
4732 
4733 }
4734 
4735 void rtw_append_exented_cap(_adapter *padapter, u8 *out_ie, uint *pout_len)
4736 {
4737 	struct mlme_priv	*pmlmepriv = &padapter->mlmepriv;
4738 	struct ht_priv		*phtpriv = &pmlmepriv->htpriv;
4739 #ifdef CONFIG_80211AC_VHT
4740 	struct vht_priv	*pvhtpriv = &pmlmepriv->vhtpriv;
4741 #endif /* CONFIG_80211AC_VHT */
4742 	u8	cap_content[8] = { 0 };
4743 	u8	*pframe;
4744 	u8   null_content[8] = {0};
4745 
4746 	if (phtpriv->bss_coexist)
4747 		SET_EXT_CAPABILITY_ELE_BSS_COEXIST(cap_content, 1);
4748 
4749 #ifdef CONFIG_80211AC_VHT
4750 	if (pvhtpriv->vht_option)
4751 		SET_EXT_CAPABILITY_ELE_OP_MODE_NOTIF(cap_content, 1);
4752 #endif /* CONFIG_80211AC_VHT */
4753 	/*
4754 		From 802.11 specification,if a STA does not support any of capabilities defined
4755 		in the Extended Capabilities element, then the STA is not required to
4756 		transmit the Extended Capabilities element.
4757 	*/
4758 	if (_FALSE == _rtw_memcmp(cap_content, null_content, 8))
4759 		pframe = rtw_set_ie(out_ie + *pout_len, EID_EXTCapability, 8, cap_content , pout_len);
4760 }
4761 #endif
4762 
4763 #ifdef CONFIG_LAYER2_ROAMING
4764 inline void rtw_set_to_roam(_adapter *adapter, u8 to_roam)
4765 {
4766 	if (to_roam == 0)
4767 		adapter->mlmepriv.to_join = _FALSE;
4768 	adapter->mlmepriv.to_roam = to_roam;
4769 }
4770 
4771 inline u8 rtw_dec_to_roam(_adapter *adapter)
4772 {
4773 	adapter->mlmepriv.to_roam--;
4774 	return adapter->mlmepriv.to_roam;
4775 }
4776 
4777 inline u8 rtw_to_roam(_adapter *adapter)
4778 {
4779 	return adapter->mlmepriv.to_roam;
4780 }
4781 
4782 void rtw_roaming(_adapter *padapter, struct wlan_network *tgt_network)
4783 {
4784 	_irqL irqL;
4785 	struct mlme_priv	*pmlmepriv = &padapter->mlmepriv;
4786 
4787 	_enter_critical_bh(&pmlmepriv->lock, &irqL);
4788 	_rtw_roaming(padapter, tgt_network);
4789 	_exit_critical_bh(&pmlmepriv->lock, &irqL);
4790 }
4791 void _rtw_roaming(_adapter *padapter, struct wlan_network *tgt_network)
4792 {
4793 	struct mlme_priv	*pmlmepriv = &padapter->mlmepriv;
4794 	struct wlan_network *cur_network = &pmlmepriv->cur_network;
4795 	int do_join_r;
4796 
4797 	if (0 < rtw_to_roam(padapter)) {
4798 		RTW_INFO("roaming from %s("MAC_FMT"), length:%d\n",
4799 			cur_network->network.Ssid.Ssid, MAC_ARG(cur_network->network.MacAddress),
4800 			 cur_network->network.Ssid.SsidLength);
4801 		_rtw_memcpy(&pmlmepriv->assoc_ssid, &cur_network->network.Ssid, sizeof(NDIS_802_11_SSID));
4802 
4803 		pmlmepriv->assoc_by_bssid = _FALSE;
4804 
4805 #ifdef CONFIG_WAPI_SUPPORT
4806 		rtw_wapi_return_all_sta_info(padapter);
4807 #endif
4808 
4809 		while (1) {
4810 			do_join_r = rtw_do_join(padapter);
4811 			if (_SUCCESS == do_join_r)
4812 				break;
4813 			else {
4814 				RTW_INFO("roaming do_join return %d\n", do_join_r);
4815 				rtw_dec_to_roam(padapter);
4816 
4817 				if (rtw_to_roam(padapter) > 0)
4818 					continue;
4819 				else {
4820 					RTW_INFO("%s(%d) -to roaming fail, indicate_disconnect\n", __FUNCTION__, __LINE__);
4821 #ifdef CONFIG_RTW_80211R
4822 					rtw_clr_ft_flags(padapter, RTW_FT_SUPPORTED|RTW_FT_OVER_DS_SUPPORTED);
4823 					rtw_reset_ft_status(padapter);
4824 #endif
4825 					rtw_indicate_disconnect(padapter, 0, _FALSE);
4826 					break;
4827 				}
4828 			}
4829 		}
4830 	}
4831 
4832 }
4833 #endif /* CONFIG_LAYER2_ROAMING */
4834 
4835 bool rtw_adjust_chbw(_adapter *adapter, u8 req_ch, u8 *req_bw, u8 *req_offset)
4836 {
4837 	struct registry_priv *regsty = adapter_to_regsty(adapter);
4838 	u8 allowed_bw;
4839 
4840 	if (req_ch <= 14)
4841 		allowed_bw = REGSTY_BW_2G(regsty);
4842 	else
4843 		allowed_bw = REGSTY_BW_5G(regsty);
4844 
4845 	allowed_bw = hal_largest_bw(adapter, allowed_bw);
4846 
4847 	if (allowed_bw == CHANNEL_WIDTH_80 && *req_bw > CHANNEL_WIDTH_80)
4848 		*req_bw = CHANNEL_WIDTH_80;
4849 	else if (allowed_bw == CHANNEL_WIDTH_40 && *req_bw > CHANNEL_WIDTH_40)
4850 		*req_bw = CHANNEL_WIDTH_40;
4851 	else if (allowed_bw == CHANNEL_WIDTH_20 && *req_bw > CHANNEL_WIDTH_20) {
4852 		*req_bw = CHANNEL_WIDTH_20;
4853 		*req_offset = HAL_PRIME_CHNL_OFFSET_DONT_CARE;
4854 	} else
4855 		return _FALSE;
4856 
4857 	return _TRUE;
4858 }
4859 
4860 sint rtw_linked_check(_adapter *padapter)
4861 {
4862 	if (MLME_IS_AP(padapter) || MLME_IS_MESH(padapter)
4863 		|| MLME_IS_ADHOC(padapter) || MLME_IS_ADHOC_MASTER(padapter)
4864 	) {
4865 		if (padapter->stapriv.asoc_sta_count > 2)
4866 			return _TRUE;
4867 	} else {
4868 		/* Station mode */
4869 		if (check_fwstate(&padapter->mlmepriv, _FW_LINKED) == _TRUE)
4870 			return _TRUE;
4871 	}
4872 	return _FALSE;
4873 }
4874 /*#define DBG_ADAPTER_STATE_CHK*/
4875 u8 rtw_is_adapter_up(_adapter *padapter)
4876 {
4877 	if (padapter == NULL)
4878 		return _FALSE;
4879 
4880 	if (RTW_CANNOT_RUN(padapter)) {
4881 		#ifdef DBG_ADAPTER_STATE_CHK
4882 		RTW_INFO(FUNC_ADPT_FMT " FALSE -bDriverStopped(%s) bSurpriseRemoved(%s)\n"
4883 			, FUNC_ADPT_ARG(padapter)
4884 			, rtw_is_drv_stopped(padapter) ? "True" : "False"
4885 			, rtw_is_surprise_removed(padapter) ? "True" : "False");
4886 		#endif
4887 		return _FALSE;
4888 	}
4889 
4890 	if (!rtw_is_hw_init_completed(padapter)) {
4891 		#ifdef DBG_ADAPTER_STATE_CHK
4892 		RTW_INFO(FUNC_ADPT_FMT " FALSE -(hw_init_completed == _FALSE)\n", FUNC_ADPT_ARG(padapter));
4893 		#endif
4894 		return _FALSE;
4895 	}
4896 
4897 	if (padapter->bup == _FALSE) {
4898 		#ifdef DBG_ADAPTER_STATE_CHK
4899 		RTW_INFO(FUNC_ADPT_FMT " FALSE -(bup == _FALSE)\n", FUNC_ADPT_ARG(padapter));
4900 		#endif
4901 		return _FALSE;
4902 	}
4903 
4904 	return _TRUE;
4905 }
4906 
4907 bool is_miracast_enabled(_adapter *adapter)
4908 {
4909 	bool enabled = 0;
4910 #ifdef CONFIG_WFD
4911 	struct wifi_display_info *wfdinfo = &adapter->wfd_info;
4912 
4913 	enabled = (wfdinfo->stack_wfd_mode & (MIRACAST_SOURCE | MIRACAST_SINK))
4914 		  || (wfdinfo->op_wfd_mode & (MIRACAST_SOURCE | MIRACAST_SINK));
4915 #endif
4916 
4917 	return enabled;
4918 }
4919 
4920 bool rtw_chk_miracast_mode(_adapter *adapter, u8 mode)
4921 {
4922 	bool ret = 0;
4923 #ifdef CONFIG_WFD
4924 	struct wifi_display_info *wfdinfo = &adapter->wfd_info;
4925 
4926 	ret = (wfdinfo->stack_wfd_mode & mode) || (wfdinfo->op_wfd_mode & mode);
4927 #endif
4928 
4929 	return ret;
4930 }
4931 
4932 const char *get_miracast_mode_str(int mode)
4933 {
4934 	if (mode == MIRACAST_SOURCE)
4935 		return "SOURCE";
4936 	else if (mode == MIRACAST_SINK)
4937 		return "SINK";
4938 	else if (mode == (MIRACAST_SOURCE | MIRACAST_SINK))
4939 		return "SOURCE&SINK";
4940 	else if (mode == MIRACAST_DISABLED)
4941 		return "DISABLED";
4942 	else
4943 		return "INVALID";
4944 }
4945 
4946 #ifdef CONFIG_WFD
4947 static bool wfd_st_match_rule(_adapter *adapter, u8 *local_naddr, u8 *local_port, u8 *remote_naddr, u8 *remote_port)
4948 {
4949 	struct wifi_display_info *wfdinfo = &adapter->wfd_info;
4950 
4951 	if (ntohs(*((u16 *)local_port)) == wfdinfo->rtsp_ctrlport
4952 	    || ntohs(*((u16 *)local_port)) == wfdinfo->tdls_rtsp_ctrlport
4953 	    || ntohs(*((u16 *)remote_port)) == wfdinfo->peer_rtsp_ctrlport)
4954 		return _TRUE;
4955 	return _FALSE;
4956 }
4957 
4958 static struct st_register wfd_st_reg = {
4959 	.s_proto = 0x06,
4960 	.rule = wfd_st_match_rule,
4961 };
4962 #endif /* CONFIG_WFD */
4963 
4964 inline void rtw_wfd_st_switch(struct sta_info *sta, bool on)
4965 {
4966 #ifdef CONFIG_WFD
4967 	if (on)
4968 		rtw_st_ctl_register(&sta->st_ctl, SESSION_TRACKER_REG_ID_WFD, &wfd_st_reg);
4969 	else
4970 		rtw_st_ctl_unregister(&sta->st_ctl, SESSION_TRACKER_REG_ID_WFD);
4971 #endif
4972 }
4973