xref: /OK3568_Linux_fs/external/rkwifibt/drivers/rtl8723ds/core/rtw_mlme.c (revision 4882a59341e53eb6f0b4789bf948001014eff981)
1 /******************************************************************************
2  *
3  * Copyright(c) 2007 - 2019 Realtek Corporation.
4  *
5  * This program is free software; you can redistribute it and/or modify it
6  * under the terms of version 2 of the GNU General Public License as
7  * published by the Free Software Foundation.
8  *
9  * This program is distributed in the hope that it will be useful, but WITHOUT
10  * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
11  * FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for
12  * more details.
13  *
14  *****************************************************************************/
15 #define _RTW_MLME_C_
16 
17 #include <hal_data.h>
18 #ifdef CONFIG_PLATFORM_CMAP_INTFS
19 #include "../os_dep/linux/custom_multiap_intfs/custom_multiap_intfs.h"
20 #endif
21 
22 extern void indicate_wx_scan_complete_event(_adapter *padapter);
23 extern u8 rtw_do_join(_adapter *padapter);
24 
25 
rtw_init_mlme_timer(_adapter * padapter)26 void rtw_init_mlme_timer(_adapter *padapter)
27 {
28 	struct	mlme_priv *pmlmepriv = &padapter->mlmepriv;
29 
30 	rtw_init_timer(&(pmlmepriv->assoc_timer), padapter, rtw_join_timeout_handler, padapter);
31 	rtw_init_timer(&(pmlmepriv->scan_to_timer), padapter, rtw_scan_timeout_handler, padapter);
32 
33 #ifdef CONFIG_SET_SCAN_DENY_TIMER
34 	rtw_init_timer(&(pmlmepriv->set_scan_deny_timer), padapter, rtw_set_scan_deny_timer_hdl, padapter);
35 #endif
36 
37 #ifdef RTK_DMP_PLATFORM
38 	_init_workitem(&(pmlmepriv->Linkup_workitem), Linkup_workitem_callback, padapter);
39 	_init_workitem(&(pmlmepriv->Linkdown_workitem), Linkdown_workitem_callback, padapter);
40 #endif
41 }
42 
_rtw_init_mlme_priv(_adapter * padapter)43 sint	_rtw_init_mlme_priv(_adapter *padapter)
44 {
45 	sint	i;
46 	u8	*pbuf;
47 	struct wlan_network	*pnetwork;
48 	struct mlme_priv		*pmlmepriv = &padapter->mlmepriv;
49 	struct rf_ctl_t *rfctl = adapter_to_rfctl(padapter);
50 	sint	res = _SUCCESS;
51 #ifdef CONFIG_RTW_MULTI_AP
52 	struct unassoc_sta_info *unassoc_sta;
53 #endif
54 
55 
56 	/* We don't need to memset padapter->XXX to zero, because adapter is allocated by rtw_zvmalloc(). */
57 	/* _rtw_memset((u8 *)pmlmepriv, 0, sizeof(struct mlme_priv)); */
58 
59 
60 	/*qos_priv*/
61 	/*pmlmepriv->qospriv.qos_option = pregistrypriv->wmm_enable;*/
62 
63 	/*ht_priv*/
64 #ifdef CONFIG_80211N_HT
65 	pmlmepriv->htpriv.ampdu_enable = _FALSE;/*set to disabled*/
66 #endif
67 
68 	pmlmepriv->nic_hdl = (u8 *)padapter;
69 
70 	pmlmepriv->pscanned = NULL;
71 	init_fwstate(pmlmepriv, WIFI_STATION_STATE);
72 	pmlmepriv->cur_network.network.InfrastructureMode = Ndis802_11AutoUnknown;
73 	pmlmepriv->scan_mode = SCAN_ACTIVE; /* 1: active, 0: pasive. Maybe someday we should rename this varable to "active_mode" (Jeff) */
74 
75 	_rtw_spinlock_init(&(pmlmepriv->lock));
76 	_rtw_init_queue(&(pmlmepriv->free_bss_pool));
77 	_rtw_init_queue(&(pmlmepriv->scanned_queue));
78 
79 	set_scanned_network_val(pmlmepriv, 0);
80 
81 	_rtw_memset(&pmlmepriv->assoc_ssid, 0, sizeof(NDIS_802_11_SSID));
82 
83 	if (padapter->registrypriv.max_bss_cnt != 0)
84 		pmlmepriv->max_bss_cnt = padapter->registrypriv.max_bss_cnt;
85 	else if (rfctl->max_chan_nums <= MAX_CHANNEL_NUM_2G)
86 		pmlmepriv->max_bss_cnt = MAX_BSS_CNT;
87 	else
88 		pmlmepriv->max_bss_cnt = MAX_BSS_CNT + MAX_BSS_CNT;
89 
90 
91 	pbuf = rtw_zvmalloc(pmlmepriv->max_bss_cnt * (sizeof(struct wlan_network)));
92 
93 	if (pbuf == NULL) {
94 		res = _FAIL;
95 		goto exit;
96 	}
97 	pmlmepriv->free_bss_buf = pbuf;
98 
99 	pnetwork = (struct wlan_network *)pbuf;
100 
101 	for (i = 0; i < pmlmepriv->max_bss_cnt; i++) {
102 		_rtw_init_listhead(&(pnetwork->list));
103 
104 		rtw_list_insert_tail(&(pnetwork->list), &(pmlmepriv->free_bss_pool.queue));
105 
106 		pnetwork++;
107 	}
108 
109 #ifdef CONFIG_RTW_MULTI_AP
110 	if (is_primary_adapter(padapter)) {
111 		_rtw_init_queue(&(pmlmepriv->free_unassoc_sta_queue));
112 		_rtw_init_queue(&(pmlmepriv->unassoc_sta_queue));
113 		for (i = 0; i < UNASOC_STA_SRC_NUM; i++)
114 			pmlmepriv->unassoc_sta_mode_of_stype[i] = padapter->registrypriv.unassoc_sta_mode_of_stype[i];
115 		if (padapter->registrypriv.max_unassoc_sta_cnt != 0)
116 			pmlmepriv->max_unassoc_sta_cnt = padapter->registrypriv.max_unassoc_sta_cnt;
117 		else if (rfctl->max_chan_nums <= MAX_CHANNEL_NUM_2G)
118 			pmlmepriv->max_unassoc_sta_cnt = MAX_UNASSOC_STA_CNT;
119 		else
120 			pmlmepriv->max_unassoc_sta_cnt = MAX_UNASSOC_STA_CNT * 2;
121 		pbuf = rtw_zvmalloc(pmlmepriv->max_unassoc_sta_cnt * (sizeof(struct unassoc_sta_info)));
122 		if (pbuf == NULL) {
123 			res = _FAIL;
124 			goto exit;
125 		}
126 		pmlmepriv->free_unassoc_sta_buf = pbuf;
127 		unassoc_sta = (struct unassoc_sta_info *) pbuf;
128 		for (i = 0; i < pmlmepriv->max_unassoc_sta_cnt; i++) {
129 			_rtw_init_listhead(&(unassoc_sta->list));
130 			rtw_list_insert_tail(&(unassoc_sta->list), &(pmlmepriv->free_unassoc_sta_queue.queue));
131 			unassoc_sta++;
132 		}
133 	}
134 #ifdef CONFIG_PLATFORM_CMAP_INTFS
135 	rtw_init_timer(&pmlmepriv->cmap_unassoc_sta_timer, padapter, cmap_unassoc_sta_report_info_timer, padapter);
136 #endif
137 #endif
138 	/* allocate DMA-able/Non-Page memory for cmd_buf and rsp_buf */
139 
140 	rtw_clear_scan_deny(padapter);
141 #ifdef CONFIG_ARP_KEEP_ALIVE
142 	pmlmepriv->bGetGateway = 0;
143 	pmlmepriv->GetGatewayTryCnt = 0;
144 #endif
145 
146 #ifdef CONFIG_LAYER2_ROAMING
147 #define RTW_ROAM_SCAN_RESULT_EXP_MS (5*1000)
148 #define RTW_ROAM_RSSI_DIFF_TH 10
149 #define RTW_ROAM_SCAN_INTERVAL (5)    /* 5*(2 second)*/
150 #define RTW_ROAM_RSSI_THRESHOLD 70
151 #define RTW_ROAM_DICONNECT_DELAY	20
152 	_rtw_spinlock_init(&pmlmepriv->clnt_auth_lock);
153 	pmlmepriv->roam_flags = CONFIG_ROAMING_FLAG;
154 
155 	pmlmepriv->roam_scanr_exp_ms = RTW_ROAM_SCAN_RESULT_EXP_MS;
156 	pmlmepriv->roam_rssi_diff_th = RTW_ROAM_RSSI_DIFF_TH;
157 	pmlmepriv->roam_scan_int 	 = RTW_ROAM_SCAN_INTERVAL;
158 	pmlmepriv->roam_rssi_threshold = RTW_ROAM_RSSI_THRESHOLD;
159 	pmlmepriv->need_to_roam = _FALSE;
160 	pmlmepriv->last_roaming = rtw_get_current_time();
161 #endif /* CONFIG_LAYER2_ROAMING */
162 
163 #ifdef CONFIG_RTW_80211R
164 	rtw_ft_info_init(&pmlmepriv->ft_roam);
165 #endif
166 #ifdef CONFIG_LAYER2_ROAMING
167 #if defined(CONFIG_RTW_WNM) || defined(CONFIG_RTW_80211K)
168 	rtw_roam_nb_info_init(padapter);
169 	pmlmepriv->ch_cnt = 0;
170 #endif
171 #endif
172 
173 	pmlmepriv->defs_lmt_sta = 2;
174 	pmlmepriv->defs_lmt_time = 5;
175 
176 	rtw_init_mlme_timer(padapter);
177 
178 exit:
179 
180 
181 	return res;
182 }
183 
184 void rtw_mfree_mlme_priv_lock(struct mlme_priv *pmlmepriv);
rtw_mfree_mlme_priv_lock(struct mlme_priv * pmlmepriv)185 void rtw_mfree_mlme_priv_lock(struct mlme_priv *pmlmepriv)
186 {
187 	_rtw_spinlock_free(&pmlmepriv->lock);
188 #ifdef CONFIG_LAYER2_ROAMING
189 	_rtw_spinlock_free(&pmlmepriv->clnt_auth_lock);
190 #endif
191 	_rtw_spinlock_free(&(pmlmepriv->free_bss_pool.lock));
192 	_rtw_spinlock_free(&(pmlmepriv->scanned_queue.lock));
193 #ifdef CONFIG_RTW_MULTI_AP
194 	if (is_primary_adapter(mlme_to_adapter(pmlmepriv))) {
195 		_rtw_spinlock_free(&(pmlmepriv->unassoc_sta_queue.lock));
196 		_rtw_spinlock_free(&(pmlmepriv->free_unassoc_sta_queue.lock));
197 	}
198 #endif
199 }
200 
rtw_free_mlme_priv_ie_data(struct mlme_priv * pmlmepriv)201 void rtw_free_mlme_priv_ie_data(struct mlme_priv *pmlmepriv)
202 {
203 	rtw_buf_free(&pmlmepriv->assoc_req, &pmlmepriv->assoc_req_len);
204 	rtw_buf_free(&pmlmepriv->assoc_rsp, &pmlmepriv->assoc_rsp_len);
205 #if defined(CONFIG_AP_MODE) && defined (CONFIG_NATIVEAP_MLME)
206 	rtw_buf_free(&pmlmepriv->wps_beacon_ie, &pmlmepriv->wps_beacon_ie_len);
207 	rtw_buf_free(&pmlmepriv->wps_probe_req_ie, &pmlmepriv->wps_probe_req_ie_len);
208 	rtw_buf_free(&pmlmepriv->wps_probe_resp_ie, &pmlmepriv->wps_probe_resp_ie_len);
209 	rtw_buf_free(&pmlmepriv->wps_assoc_resp_ie, &pmlmepriv->wps_assoc_resp_ie_len);
210 
211 	rtw_buf_free(&pmlmepriv->p2p_beacon_ie, &pmlmepriv->p2p_beacon_ie_len);
212 	rtw_buf_free(&pmlmepriv->p2p_probe_req_ie, &pmlmepriv->p2p_probe_req_ie_len);
213 	rtw_buf_free(&pmlmepriv->p2p_probe_resp_ie, &pmlmepriv->p2p_probe_resp_ie_len);
214 	rtw_buf_free(&pmlmepriv->p2p_go_probe_resp_ie, &pmlmepriv->p2p_go_probe_resp_ie_len);
215 	rtw_buf_free(&pmlmepriv->p2p_assoc_req_ie, &pmlmepriv->p2p_assoc_req_ie_len);
216 	rtw_buf_free(&pmlmepriv->p2p_assoc_resp_ie, &pmlmepriv->p2p_assoc_resp_ie_len);
217 #endif
218 
219 #if defined(CONFIG_WFD) && defined(CONFIG_IOCTL_CFG80211)
220 	rtw_buf_free(&pmlmepriv->wfd_beacon_ie, &pmlmepriv->wfd_beacon_ie_len);
221 	rtw_buf_free(&pmlmepriv->wfd_probe_req_ie, &pmlmepriv->wfd_probe_req_ie_len);
222 	rtw_buf_free(&pmlmepriv->wfd_probe_resp_ie, &pmlmepriv->wfd_probe_resp_ie_len);
223 	rtw_buf_free(&pmlmepriv->wfd_go_probe_resp_ie, &pmlmepriv->wfd_go_probe_resp_ie_len);
224 	rtw_buf_free(&pmlmepriv->wfd_assoc_req_ie, &pmlmepriv->wfd_assoc_req_ie_len);
225 	rtw_buf_free(&pmlmepriv->wfd_assoc_resp_ie, &pmlmepriv->wfd_assoc_resp_ie_len);
226 #endif
227 
228 #ifdef CONFIG_RTW_80211R
229 	rtw_buf_free(&pmlmepriv->auth_rsp, &pmlmepriv->auth_rsp_len);
230 #endif
231 #ifdef CONFIG_RTW_MBO
232 	rtw_buf_free(&pmlmepriv->pcell_data_cap_ie, &pmlmepriv->cell_data_cap_len);
233 #endif
234 }
235 
236 #if defined(CONFIG_WFD) && defined(CONFIG_IOCTL_CFG80211)
rtw_mlme_update_wfd_ie_data(struct mlme_priv * mlme,u8 type,u8 * ie,u32 ie_len)237 int rtw_mlme_update_wfd_ie_data(struct mlme_priv *mlme, u8 type, u8 *ie, u32 ie_len)
238 {
239 	_adapter *adapter = mlme_to_adapter(mlme);
240 	struct wifi_display_info *wfd_info = &adapter->wfd_info;
241 	u8 clear = 0;
242 	u8 **t_ie = NULL;
243 	u32 *t_ie_len = NULL;
244 	int ret = _FAIL;
245 
246 	if (!hal_chk_wl_func(adapter, WL_FUNC_MIRACAST))
247 		goto success;
248 
249 	if (wfd_info->wfd_enable == _TRUE)
250 		goto success; /* WFD IE is build by self */
251 
252 	if (!ie && !ie_len)
253 		clear = 1;
254 	else if (!ie || !ie_len) {
255 		RTW_PRINT(FUNC_ADPT_FMT" type:%u, ie:%p, ie_len:%u"
256 			  , FUNC_ADPT_ARG(adapter), type, ie, ie_len);
257 		rtw_warn_on(1);
258 		goto exit;
259 	}
260 
261 	switch (type) {
262 	case MLME_BEACON_IE:
263 		t_ie = &mlme->wfd_beacon_ie;
264 		t_ie_len = &mlme->wfd_beacon_ie_len;
265 		break;
266 	case MLME_PROBE_REQ_IE:
267 		t_ie = &mlme->wfd_probe_req_ie;
268 		t_ie_len = &mlme->wfd_probe_req_ie_len;
269 		break;
270 	case MLME_PROBE_RESP_IE:
271 		t_ie = &mlme->wfd_probe_resp_ie;
272 		t_ie_len = &mlme->wfd_probe_resp_ie_len;
273 		break;
274 	case MLME_GO_PROBE_RESP_IE:
275 		t_ie = &mlme->wfd_go_probe_resp_ie;
276 		t_ie_len = &mlme->wfd_go_probe_resp_ie_len;
277 		break;
278 	case MLME_ASSOC_REQ_IE:
279 		t_ie = &mlme->wfd_assoc_req_ie;
280 		t_ie_len = &mlme->wfd_assoc_req_ie_len;
281 		break;
282 	case MLME_ASSOC_RESP_IE:
283 		t_ie = &mlme->wfd_assoc_resp_ie;
284 		t_ie_len = &mlme->wfd_assoc_resp_ie_len;
285 		break;
286 	default:
287 		RTW_PRINT(FUNC_ADPT_FMT" unsupported type:%u"
288 			  , FUNC_ADPT_ARG(adapter), type);
289 		rtw_warn_on(1);
290 		goto exit;
291 	}
292 
293 	if (*t_ie) {
294 		u32 free_len = *t_ie_len;
295 		*t_ie_len = 0;
296 		rtw_mfree(*t_ie, free_len);
297 		*t_ie = NULL;
298 	}
299 
300 	if (!clear) {
301 		*t_ie = rtw_malloc(ie_len);
302 		if (*t_ie == NULL) {
303 			RTW_ERR(FUNC_ADPT_FMT" type:%u, rtw_malloc() fail\n"
304 				, FUNC_ADPT_ARG(adapter), type);
305 			goto exit;
306 		}
307 		_rtw_memcpy(*t_ie, ie, ie_len);
308 		*t_ie_len = ie_len;
309 	}
310 
311 	if (*t_ie && *t_ie_len) {
312 		u8 *attr_content;
313 		u32 attr_contentlen = 0;
314 
315 		attr_content = rtw_get_wfd_attr_content(*t_ie, *t_ie_len, WFD_ATTR_DEVICE_INFO, NULL, &attr_contentlen);
316 		if (attr_content && attr_contentlen) {
317 			if (RTW_GET_BE16(attr_content + 2) != wfd_info->rtsp_ctrlport) {
318 				wfd_info->rtsp_ctrlport = RTW_GET_BE16(attr_content + 2);
319 				RTW_INFO(FUNC_ADPT_FMT" type:%u, RTSP CTRL port = %u\n"
320 					, FUNC_ADPT_ARG(adapter), type, wfd_info->rtsp_ctrlport);
321 			}
322 		}
323 	}
324 
325 success:
326 	ret = _SUCCESS;
327 
328 exit:
329 	return ret;
330 }
331 #endif /* defined(CONFIG_WFD) && defined(CONFIG_IOCTL_CFG80211) */
332 
_rtw_free_mlme_priv(struct mlme_priv * pmlmepriv)333 void _rtw_free_mlme_priv(struct mlme_priv *pmlmepriv)
334 {
335 	_adapter *adapter = mlme_to_adapter(pmlmepriv);
336 	if (NULL == pmlmepriv) {
337 		rtw_warn_on(1);
338 		goto exit;
339 	}
340 	rtw_free_mlme_priv_ie_data(pmlmepriv);
341 
342 	if (pmlmepriv) {
343 		rtw_mfree_mlme_priv_lock(pmlmepriv);
344 
345 		if (pmlmepriv->free_bss_buf)
346 			rtw_vmfree(pmlmepriv->free_bss_buf, pmlmepriv->max_bss_cnt * sizeof(struct wlan_network));
347 #ifdef CONFIG_RTW_MULTI_AP
348 		if (is_primary_adapter(adapter)) {
349 			if (pmlmepriv->free_unassoc_sta_buf)
350 				rtw_vmfree(pmlmepriv->free_unassoc_sta_buf, pmlmepriv->max_unassoc_sta_cnt * sizeof(struct unassoc_sta_info));
351 		}
352 #ifdef CONFIG_PLATFORM_CMAP_INTFS
353 		_cancel_timer_ex(&pmlmepriv->cmap_unassoc_sta_timer);
354 #endif
355 #endif
356 	}
357 exit:
358 	return;
359 }
360 
_rtw_enqueue_network(_queue * queue,struct wlan_network * pnetwork)361 sint	_rtw_enqueue_network(_queue *queue, struct wlan_network *pnetwork)
362 {
363 	_irqL irqL;
364 
365 
366 	if (pnetwork == NULL)
367 		goto exit;
368 
369 	_enter_critical_bh(&queue->lock, &irqL);
370 
371 	rtw_list_insert_tail(&pnetwork->list, &queue->queue);
372 
373 	_exit_critical_bh(&queue->lock, &irqL);
374 
375 exit:
376 
377 
378 	return _SUCCESS;
379 }
380 
381 /*
382 struct	wlan_network *_rtw_dequeue_network(_queue *queue)
383 {
384 	_irqL irqL;
385 
386 	struct wlan_network *pnetwork;
387 
388 
389 	_enter_critical_bh(&queue->lock, &irqL);
390 
391 	if (_rtw_queue_empty(queue) == _TRUE)
392 
393 		pnetwork = NULL;
394 
395 	else
396 	{
397 		pnetwork = LIST_CONTAINOR(get_next(&queue->queue), struct wlan_network, list);
398 
399 		rtw_list_delete(&(pnetwork->list));
400 	}
401 
402 	_exit_critical_bh(&queue->lock, &irqL);
403 
404 
405 	return pnetwork;
406 }
407 */
408 
_rtw_alloc_network(struct mlme_priv * pmlmepriv)409 struct	wlan_network *_rtw_alloc_network(struct	mlme_priv *pmlmepriv) /* (_queue *free_queue) */
410 {
411 	_irqL	irqL;
412 	struct	wlan_network	*pnetwork;
413 	_queue *free_queue = &pmlmepriv->free_bss_pool;
414 	_list *plist = NULL;
415 
416 
417 	_enter_critical_bh(&free_queue->lock, &irqL);
418 
419 	if (_rtw_queue_empty(free_queue) == _TRUE) {
420 		pnetwork = NULL;
421 		goto exit;
422 	}
423 	plist = get_next(&(free_queue->queue));
424 
425 	pnetwork = LIST_CONTAINOR(plist , struct wlan_network, list);
426 
427 	rtw_list_delete(&pnetwork->list);
428 
429 	pnetwork->network_type = 0;
430 	pnetwork->fixed = _FALSE;
431 	pnetwork->last_scanned = rtw_get_current_time();
432 	pnetwork->last_non_hidden_ssid_ap = pnetwork->last_scanned;
433 #if defined(CONFIG_RTW_MESH) && CONFIG_RTW_MESH_ACNODE_PREVENT
434 	pnetwork->acnode_stime = 0;
435 	pnetwork->acnode_notify_etime = 0;
436 #endif
437 
438 	pnetwork->aid = 0;
439 	pnetwork->join_res = 0;
440 
441 	pmlmepriv->num_of_scanned++;
442 
443 exit:
444 	_exit_critical_bh(&free_queue->lock, &irqL);
445 
446 
447 	return pnetwork;
448 }
449 
_rtw_free_network(struct mlme_priv * pmlmepriv,struct wlan_network * pnetwork,u8 isfreeall)450 void _rtw_free_network(struct	mlme_priv *pmlmepriv , struct wlan_network *pnetwork, u8 isfreeall)
451 {
452 	u32 delta_time;
453 	u32 lifetime = SCANQUEUE_LIFETIME;
454 	_irqL irqL;
455 	_queue *free_queue = &(pmlmepriv->free_bss_pool);
456 
457 
458 	if (pnetwork == NULL)
459 		goto exit;
460 
461 	if (pnetwork->fixed == _TRUE)
462 		goto exit;
463 
464 	if ((check_fwstate(pmlmepriv, WIFI_ADHOC_MASTER_STATE) == _TRUE) ||
465 	    (check_fwstate(pmlmepriv, WIFI_ADHOC_STATE) == _TRUE))
466 		lifetime = 1;
467 
468 	if (!isfreeall) {
469 		delta_time = (u32) rtw_get_passing_time_ms(pnetwork->last_scanned);
470 		if (delta_time < lifetime) /* unit:msec */
471 			goto exit;
472 	}
473 
474 	_enter_critical_bh(&free_queue->lock, &irqL);
475 
476 	rtw_list_delete(&(pnetwork->list));
477 
478 	rtw_list_insert_tail(&(pnetwork->list), &(free_queue->queue));
479 
480 	pmlmepriv->num_of_scanned--;
481 
482 
483 	/* RTW_INFO("_rtw_free_network:SSID=%s\n", pnetwork->network.Ssid.Ssid); */
484 
485 	_exit_critical_bh(&free_queue->lock, &irqL);
486 
487 exit:
488 	return;
489 }
490 
_rtw_free_network_nolock(struct mlme_priv * pmlmepriv,struct wlan_network * pnetwork)491 void _rtw_free_network_nolock(struct	mlme_priv *pmlmepriv, struct wlan_network *pnetwork)
492 {
493 
494 	_queue *free_queue = &(pmlmepriv->free_bss_pool);
495 
496 
497 	if (pnetwork == NULL)
498 		goto exit;
499 
500 	if (pnetwork->fixed == _TRUE)
501 		goto exit;
502 
503 	/* _enter_critical(&free_queue->lock, &irqL); */
504 
505 	rtw_list_delete(&(pnetwork->list));
506 
507 	rtw_list_insert_tail(&(pnetwork->list), get_list_head(free_queue));
508 
509 	pmlmepriv->num_of_scanned--;
510 
511 	/* _exit_critical(&free_queue->lock, &irqL); */
512 
513 exit:
514 	return;
515 }
516 
_rtw_free_network_queue(_adapter * padapter,u8 isfreeall)517 void _rtw_free_network_queue(_adapter *padapter, u8 isfreeall)
518 {
519 	_irqL irqL;
520 	_list *phead, *plist;
521 	struct wlan_network *pnetwork;
522 	struct mlme_priv *pmlmepriv = &padapter->mlmepriv;
523 	_queue *scanned_queue = &pmlmepriv->scanned_queue;
524 
525 
526 
527 	_enter_critical_bh(&scanned_queue->lock, &irqL);
528 
529 	phead = get_list_head(scanned_queue);
530 	plist = get_next(phead);
531 
532 	while (rtw_end_of_queue_search(phead, plist) == _FALSE) {
533 
534 		pnetwork = LIST_CONTAINOR(plist, struct wlan_network, list);
535 
536 		plist = get_next(plist);
537 
538 		_rtw_free_network(pmlmepriv, pnetwork, isfreeall);
539 
540 	}
541 
542 	_exit_critical_bh(&scanned_queue->lock, &irqL);
543 
544 
545 }
546 
547 
548 
549 
rtw_if_up(_adapter * padapter)550 sint rtw_if_up(_adapter *padapter)
551 {
552 
553 	sint res;
554 
555 	if (RTW_CANNOT_RUN(padapter) ||
556 	    (check_fwstate(&padapter->mlmepriv, WIFI_ASOC_STATE) == _FALSE)) {
557 		res = _FALSE;
558 	} else
559 		res =  _TRUE;
560 
561 	return res;
562 }
563 
564 
rtw_generate_random_ibss(u8 * pibss)565 void rtw_generate_random_ibss(u8 *pibss)
566 {
567 	*((u32 *)(&pibss[2])) = rtw_random32();
568 	pibss[0] = 0x02; /* in ad-hoc mode local bit must set to 1 */
569 	pibss[1] = 0x11;
570 	pibss[2] = 0x87;
571 }
572 
rtw_get_capability_from_ie(u8 * ie)573 u8 *rtw_get_capability_from_ie(u8 *ie)
574 {
575 	return ie + 8 + 2;
576 }
577 
578 
rtw_get_capability(WLAN_BSSID_EX * bss)579 u16 rtw_get_capability(WLAN_BSSID_EX *bss)
580 {
581 	u16	val;
582 
583 	_rtw_memcpy((u8 *)&val, rtw_get_capability_from_ie(bss->IEs), 2);
584 
585 	return le16_to_cpu(val);
586 }
587 
rtw_get_timestampe_from_ie(u8 * ie)588 u8 *rtw_get_timestampe_from_ie(u8 *ie)
589 {
590 	return ie + 0;
591 }
592 
rtw_get_beacon_interval_from_ie(u8 * ie)593 u8 *rtw_get_beacon_interval_from_ie(u8 *ie)
594 {
595 	return ie + 8;
596 }
597 
598 
rtw_init_mlme_priv(_adapter * padapter)599 int	rtw_init_mlme_priv(_adapter *padapter) /* (struct	mlme_priv *pmlmepriv) */
600 {
601 	int	res;
602 	res = _rtw_init_mlme_priv(padapter);/* (pmlmepriv); */
603 	return res;
604 }
605 
rtw_free_mlme_priv(struct mlme_priv * pmlmepriv)606 void rtw_free_mlme_priv(struct mlme_priv *pmlmepriv)
607 {
608 	_rtw_free_mlme_priv(pmlmepriv);
609 }
610 
611 int	rtw_enqueue_network(_queue *queue, struct wlan_network *pnetwork);
rtw_enqueue_network(_queue * queue,struct wlan_network * pnetwork)612 int	rtw_enqueue_network(_queue *queue, struct wlan_network *pnetwork)
613 {
614 	int	res;
615 	res = _rtw_enqueue_network(queue, pnetwork);
616 	return res;
617 }
618 
619 /*
620 static struct	wlan_network *rtw_dequeue_network(_queue *queue)
621 {
622 	struct wlan_network *pnetwork;
623 	pnetwork = _rtw_dequeue_network(queue);
624 	return pnetwork;
625 }
626 */
627 
628 struct	wlan_network *rtw_alloc_network(struct	mlme_priv *pmlmepriv);
rtw_alloc_network(struct mlme_priv * pmlmepriv)629 struct	wlan_network *rtw_alloc_network(struct	mlme_priv *pmlmepriv) /* (_queue	*free_queue) */
630 {
631 	struct	wlan_network	*pnetwork;
632 	pnetwork = _rtw_alloc_network(pmlmepriv);
633 	return pnetwork;
634 }
635 
636 void rtw_free_network(struct mlme_priv *pmlmepriv, struct	wlan_network *pnetwork, u8 is_freeall);
rtw_free_network(struct mlme_priv * pmlmepriv,struct wlan_network * pnetwork,u8 is_freeall)637 void rtw_free_network(struct mlme_priv *pmlmepriv, struct	wlan_network *pnetwork, u8 is_freeall)/* (struct	wlan_network *pnetwork, _queue	*free_queue) */
638 {
639 	_rtw_free_network(pmlmepriv, pnetwork, is_freeall);
640 }
641 
642 void rtw_free_network_nolock(_adapter *padapter, struct wlan_network *pnetwork);
rtw_free_network_nolock(_adapter * padapter,struct wlan_network * pnetwork)643 void rtw_free_network_nolock(_adapter *padapter, struct wlan_network *pnetwork)
644 {
645 	_rtw_free_network_nolock(&(padapter->mlmepriv), pnetwork);
646 #ifdef CONFIG_IOCTL_CFG80211
647 	rtw_cfg80211_unlink_bss(padapter, pnetwork);
648 #endif /* CONFIG_IOCTL_CFG80211 */
649 }
650 
651 
rtw_free_network_queue(_adapter * dev,u8 isfreeall)652 void rtw_free_network_queue(_adapter *dev, u8 isfreeall)
653 {
654 	_rtw_free_network_queue(dev, isfreeall);
655 }
656 
_rtw_find_network(_queue * scanned_queue,const u8 * addr)657 struct wlan_network *_rtw_find_network(_queue *scanned_queue, const u8 *addr)
658 {
659 	_list	*phead, *plist;
660 	struct	wlan_network *pnetwork = NULL;
661 	u8 zero_addr[ETH_ALEN] = {0, 0, 0, 0, 0, 0};
662 
663 	if (_rtw_memcmp(zero_addr, addr, ETH_ALEN)) {
664 		pnetwork = NULL;
665 		goto exit;
666 	}
667 
668 	phead = get_list_head(scanned_queue);
669 	plist = get_next(phead);
670 
671 	while (plist != phead) {
672 		pnetwork = LIST_CONTAINOR(plist, struct wlan_network , list);
673 
674 		if (_rtw_memcmp(addr, pnetwork->network.MacAddress, ETH_ALEN) == _TRUE)
675 			break;
676 
677 		plist = get_next(plist);
678 	}
679 
680 	if (plist == phead)
681 		pnetwork = NULL;
682 
683 exit:
684 	return pnetwork;
685 }
686 
rtw_find_network(_queue * scanned_queue,const u8 * addr)687 struct wlan_network *rtw_find_network(_queue *scanned_queue, const u8 *addr)
688 {
689 	struct	wlan_network *pnetwork;
690 	_irqL irqL;
691 
692 	 _enter_critical_bh(&scanned_queue->lock, &irqL);
693 	pnetwork = _rtw_find_network(scanned_queue, addr);
694 	_exit_critical_bh(&scanned_queue->lock, &irqL);
695 
696 	return pnetwork;
697 }
698 
rtw_is_same_ibss(_adapter * adapter,struct wlan_network * pnetwork)699 int rtw_is_same_ibss(_adapter *adapter, struct wlan_network *pnetwork)
700 {
701 	int ret = _TRUE;
702 	struct security_priv *psecuritypriv = &adapter->securitypriv;
703 
704 	if ((psecuritypriv->dot11PrivacyAlgrthm != _NO_PRIVACY_) &&
705 	    (pnetwork->network.Privacy == 0))
706 		ret = _FALSE;
707 	else if ((psecuritypriv->dot11PrivacyAlgrthm == _NO_PRIVACY_) &&
708 		 (pnetwork->network.Privacy == 1))
709 		ret = _FALSE;
710 	else
711 		ret = _TRUE;
712 
713 	return ret;
714 
715 }
716 
is_same_ess(WLAN_BSSID_EX * a,WLAN_BSSID_EX * b)717 inline int is_same_ess(WLAN_BSSID_EX *a, WLAN_BSSID_EX *b)
718 {
719 	return (a->Ssid.SsidLength == b->Ssid.SsidLength)
720 	       &&  _rtw_memcmp(a->Ssid.Ssid, b->Ssid.Ssid, a->Ssid.SsidLength) == _TRUE;
721 }
722 
is_same_network(WLAN_BSSID_EX * src,WLAN_BSSID_EX * dst,u8 feature)723 int is_same_network(WLAN_BSSID_EX *src, WLAN_BSSID_EX *dst, u8 feature)
724 {
725 	u16 s_cap, d_cap;
726 
727 
728 	if (rtw_bug_check(dst, src, &s_cap, &d_cap) == _FALSE)
729 		return _FALSE;
730 
731 	_rtw_memcpy((u8 *)&s_cap, rtw_get_capability_from_ie(src->IEs), 2);
732 	_rtw_memcpy((u8 *)&d_cap, rtw_get_capability_from_ie(dst->IEs), 2);
733 
734 
735 	s_cap = le16_to_cpu(s_cap);
736 	d_cap = le16_to_cpu(d_cap);
737 
738 
739 #ifdef CONFIG_P2P
740 	if ((feature == 1) && /* 1: P2P supported */
741 	    (_rtw_memcmp(src->MacAddress, dst->MacAddress, ETH_ALEN) == _TRUE)
742 	   )
743 		return _TRUE;
744 #endif
745 
746 	/* Wi-Fi driver doesn't consider the situation of BCN and ProbRsp sent from the same hidden AP,
747 	  * it considers these two packets are sent from different AP.
748 	  * Therefore, the scan queue may store two scan results of the same hidden AP, likes below.
749 	  *
750 	  *  index            bssid              ch    RSSI   SdBm  Noise   age          flag             ssid
751 	  *    1    00:e0:4c:55:50:01    153   -73     -73        0     7044   [WPS][ESS]     RTK5G
752 	  *    3    00:e0:4c:55:50:01    153   -73     -73        0     7044   [WPS][ESS]
753 	  *
754 	  * Original rules will compare Ssid, SsidLength, MacAddress, s_cap, d_cap at the same time.
755 	  * Wi-Fi driver will assume that the BCN and ProbRsp sent from the same hidden AP are the same network
756 	  * after we add an additional rule to compare SsidLength and Ssid.
757 	  * It means the scan queue will not store two scan results of the same hidden AP, it only store ProbRsp.
758 	  * For customer request.
759 	  */
760 
761 	if (((_rtw_memcmp(src->MacAddress, dst->MacAddress, ETH_ALEN)) == _TRUE) &&
762 		((s_cap & WLAN_CAPABILITY_IBSS) == (d_cap & WLAN_CAPABILITY_IBSS)) &&
763 		((s_cap & WLAN_CAPABILITY_BSS) == (d_cap & WLAN_CAPABILITY_BSS))) {
764 		if ((src->Ssid.SsidLength == dst->Ssid.SsidLength) &&
765 			(((_rtw_memcmp(src->Ssid.Ssid, dst->Ssid.Ssid, src->Ssid.SsidLength)) == _TRUE) || //Case of normal AP
766 			(is_all_null(src->Ssid.Ssid, src->Ssid.SsidLength) == _TRUE || is_all_null(dst->Ssid.Ssid, dst->Ssid.SsidLength) == _TRUE))) //Case of hidden AP
767 			return _TRUE;
768 		else if ((src->Ssid.SsidLength == 0 || dst->Ssid.SsidLength == 0)) //Case of hidden AP
769 			return _TRUE;
770 		else
771 			return _FALSE;
772 	} else {
773 		return _FALSE;
774 	}
775 }
776 
_rtw_find_same_network(_queue * scanned_queue,struct wlan_network * network)777 struct wlan_network *_rtw_find_same_network(_queue *scanned_queue, struct wlan_network *network)
778 {
779 	_list *phead, *plist;
780 	struct wlan_network *found = NULL;
781 
782 	phead = get_list_head(scanned_queue);
783 	plist = get_next(phead);
784 
785 	while (plist != phead) {
786 		found = LIST_CONTAINOR(plist, struct wlan_network , list);
787 
788 		if (is_same_network(&network->network, &found->network, 0))
789 			break;
790 
791 		plist = get_next(plist);
792 	}
793 
794 	if (plist == phead)
795 		found = NULL;
796 
797 	return found;
798 }
799 
rtw_find_same_network(_queue * scanned_queue,struct wlan_network * network)800 struct wlan_network *rtw_find_same_network(_queue *scanned_queue, struct wlan_network *network)
801 {
802 	_irqL irqL;
803 	struct wlan_network *found = NULL;
804 
805 	if (scanned_queue == NULL || network == NULL)
806 		goto exit;
807 
808 	_enter_critical_bh(&scanned_queue->lock, &irqL);
809 	found = _rtw_find_same_network(scanned_queue, network);
810 	_exit_critical_bh(&scanned_queue->lock, &irqL);
811 
812 exit:
813 	return found;
814 }
815 
rtw_get_oldest_wlan_network(_queue * scanned_queue)816 struct	wlan_network	*rtw_get_oldest_wlan_network(_queue *scanned_queue)
817 {
818 	_list	*plist, *phead;
819 
820 
821 	struct	wlan_network	*pwlan = NULL;
822 	struct	wlan_network	*oldest = NULL;
823 	phead = get_list_head(scanned_queue);
824 
825 	plist = get_next(phead);
826 
827 	while (1) {
828 
829 		if (rtw_end_of_queue_search(phead, plist) == _TRUE)
830 			break;
831 
832 		pwlan = LIST_CONTAINOR(plist, struct wlan_network, list);
833 
834 		if (pwlan->fixed != _TRUE) {
835 			if (oldest == NULL || rtw_time_after(oldest->last_scanned, pwlan->last_scanned))
836 				oldest = pwlan;
837 		}
838 
839 		plist = get_next(plist);
840 	}
841 	return oldest;
842 
843 }
844 
update_network(WLAN_BSSID_EX * dst,WLAN_BSSID_EX * src,_adapter * padapter,bool update_ie)845 void update_network(WLAN_BSSID_EX *dst, WLAN_BSSID_EX *src,
846 		    _adapter *padapter, bool update_ie)
847 {
848 #if defined(DBG_RX_SIGNAL_DISPLAY_SSID_MONITORED) && 1
849 	u8 ss_ori = dst->PhyInfo.SignalStrength;
850 	u8 sq_ori = dst->PhyInfo.SignalQuality;
851 	u8 ss_smp = src->PhyInfo.SignalStrength;
852 	long rssi_smp = src->Rssi;
853 #endif
854 	long rssi_ori = dst->Rssi;
855 
856 	u8 sq_smp = src->PhyInfo.SignalQuality;
857 	u8 ss_final;
858 	u8 sq_final;
859 	long rssi_final;
860 
861 
862 #ifdef CONFIG_ANTENNA_DIVERSITY
863 	rtw_hal_antdiv_rssi_compared(padapter, dst, src); /* this will update src.Rssi, need consider again */
864 #endif
865 
866 #if defined(DBG_RX_SIGNAL_DISPLAY_SSID_MONITORED) && 1
867 	if (strcmp(dst->Ssid.Ssid, DBG_RX_SIGNAL_DISPLAY_SSID_MONITORED) == 0) {
868 		RTW_INFO(FUNC_ADPT_FMT" %s("MAC_FMT", ch%u) ss_ori:%3u, sq_ori:%3u, rssi_ori:%3ld, ss_smp:%3u, sq_smp:%3u, rssi_smp:%3ld\n"
869 			 , FUNC_ADPT_ARG(padapter)
870 			, src->Ssid.Ssid, MAC_ARG(src->MacAddress), src->Configuration.DSConfig
871 			 , ss_ori, sq_ori, rssi_ori
872 			 , ss_smp, sq_smp, rssi_smp
873 			);
874 	}
875 #endif
876 
877 	/* The rule below is 1/5 for sample value, 4/5 for history value */
878 	if (check_fwstate(&padapter->mlmepriv, WIFI_ASOC_STATE) && is_same_network(&(padapter->mlmepriv.cur_network.network), src, 0)) {
879 		/* Take the recvpriv's value for the connected AP*/
880 		ss_final = padapter->recvpriv.signal_strength;
881 		sq_final = padapter->recvpriv.signal_qual;
882 		/* the rssi value here is undecorated, and will be used for antenna diversity */
883 		if (sq_smp != 101) /* from the right channel */
884 			rssi_final = (src->Rssi + dst->Rssi * 4) / 5;
885 		else
886 			rssi_final = rssi_ori;
887 	} else {
888 		if (sq_smp != 101) { /* from the right channel */
889 			ss_final = ((u32)(src->PhyInfo.SignalStrength) + (u32)(dst->PhyInfo.SignalStrength) * 4) / 5;
890 			sq_final = ((u32)(src->PhyInfo.SignalQuality) + (u32)(dst->PhyInfo.SignalQuality) * 4) / 5;
891 			rssi_final = (src->Rssi + dst->Rssi * 4) / 5;
892 		} else {
893 			/* bss info not receving from the right channel, use the original RX signal infos */
894 			ss_final = dst->PhyInfo.SignalStrength;
895 			sq_final = dst->PhyInfo.SignalQuality;
896 			rssi_final = dst->Rssi;
897 		}
898 
899 	}
900 
901 	if (update_ie) {
902 		dst->Reserved[0] = src->Reserved[0];
903 		dst->Reserved[1] = src->Reserved[1];
904 		_rtw_memcpy((u8 *)dst, (u8 *)src, get_WLAN_BSSID_EX_sz(src));
905 	}
906 #ifdef CONFIG_LAYER2_ROAMING
907 	dst->tsf = src->tsf;
908 #endif
909 	dst->PhyInfo.SignalStrength = ss_final;
910 	dst->PhyInfo.SignalQuality = sq_final;
911 	dst->Rssi = rssi_final;
912 
913 #if defined(DBG_RX_SIGNAL_DISPLAY_SSID_MONITORED) && 1
914 	if (strcmp(dst->Ssid.Ssid, DBG_RX_SIGNAL_DISPLAY_SSID_MONITORED) == 0) {
915 		RTW_INFO(FUNC_ADPT_FMT" %s("MAC_FMT"), SignalStrength:%u, SignalQuality:%u, RawRSSI:%ld\n"
916 			 , FUNC_ADPT_ARG(padapter)
917 			, dst->Ssid.Ssid, MAC_ARG(dst->MacAddress), dst->PhyInfo.SignalStrength, dst->PhyInfo.SignalQuality, dst->Rssi);
918 	}
919 #endif
920 
921 #if 0 /* old codes, may be useful one day...
922  * 	RTW_INFO("update_network: rssi=0x%lx dst->Rssi=%d ,dst->Rssi=0x%lx , src->Rssi=0x%lx",(dst->Rssi+src->Rssi)/2,dst->Rssi,dst->Rssi,src->Rssi); */
923 	if (check_fwstate(&padapter->mlmepriv, WIFI_ASOC_STATE) && is_same_network(&(padapter->mlmepriv.cur_network.network), src)) {
924 
925 		/* RTW_INFO("b:ssid=%s update_network: src->rssi=0x%d padapter->recvpriv.ui_rssi=%d\n",src->Ssid.Ssid,src->Rssi,padapter->recvpriv.signal); */
926 		if (padapter->recvpriv.signal_qual_data.total_num++ >= PHY_LINKQUALITY_SLID_WIN_MAX) {
927 			padapter->recvpriv.signal_qual_data.total_num = PHY_LINKQUALITY_SLID_WIN_MAX;
928 			last_evm = padapter->recvpriv.signal_qual_data.elements[padapter->recvpriv.signal_qual_data.index];
929 			padapter->recvpriv.signal_qual_data.total_val -= last_evm;
930 		}
931 		padapter->recvpriv.signal_qual_data.total_val += query_rx_pwr_percentage(src->Rssi);
932 
933 		padapter->recvpriv.signal_qual_data.elements[padapter->recvpriv.signal_qual_data.index++] = query_rx_pwr_percentage(src->Rssi);
934 		if (padapter->recvpriv.signal_qual_data.index >= PHY_LINKQUALITY_SLID_WIN_MAX)
935 			padapter->recvpriv.signal_qual_data.index = 0;
936 
937 		/* RTW_INFO("Total SQ=%d  pattrib->signal_qual= %d\n", padapter->recvpriv.signal_qual_data.total_val, src->Rssi); */
938 
939 		/* <1> Showed on UI for user,in percentage. */
940 		tmpVal = padapter->recvpriv.signal_qual_data.total_val / padapter->recvpriv.signal_qual_data.total_num;
941 		padapter->recvpriv.signal = (u8)tmpVal; /* Link quality */
942 
943 		src->Rssi = translate_percentage_to_dbm(padapter->recvpriv.signal) ;
944 	} else {
945 		/*	RTW_INFO("ELSE:ssid=%s update_network: src->rssi=0x%d dst->rssi=%d\n",src->Ssid.Ssid,src->Rssi,dst->Rssi); */
946 		src->Rssi = (src->Rssi + dst->Rssi) / 2; /* dBM */
947 	}
948 
949 	/*	RTW_INFO("a:update_network: src->rssi=0x%d padapter->recvpriv.ui_rssi=%d\n",src->Rssi,padapter->recvpriv.signal); */
950 
951 #endif
952 
953 }
954 
update_current_network(_adapter * adapter,WLAN_BSSID_EX * pnetwork)955 static void update_current_network(_adapter *adapter, WLAN_BSSID_EX *pnetwork)
956 {
957 	struct	mlme_priv	*pmlmepriv = &(adapter->mlmepriv);
958 
959 
960 	rtw_bug_check(&(pmlmepriv->cur_network.network),
961 		      &(pmlmepriv->cur_network.network),
962 		      &(pmlmepriv->cur_network.network),
963 		      &(pmlmepriv->cur_network.network));
964 
965 	if ((check_fwstate(pmlmepriv, WIFI_ASOC_STATE) == _TRUE) && (is_same_network(&(pmlmepriv->cur_network.network), pnetwork, 0))) {
966 
967 		/* if(pmlmepriv->cur_network.network.IELength<= pnetwork->IELength) */
968 		{
969 			update_network(&(pmlmepriv->cur_network.network), pnetwork, adapter, _TRUE);
970 			rtw_update_protection(adapter, (pmlmepriv->cur_network.network.IEs) + sizeof(NDIS_802_11_FIXED_IEs),
971 				      pmlmepriv->cur_network.network.IELength);
972 		}
973 	}
974 
975 
976 }
977 
978 
979 /*
980 
981 Caller must hold pmlmepriv->lock first.
982 
983 
984 */
rtw_update_scanned_network(_adapter * adapter,WLAN_BSSID_EX * target)985 bool rtw_update_scanned_network(_adapter *adapter, WLAN_BSSID_EX *target)
986 {
987 	_irqL irqL;
988 	_list	*plist, *phead;
989 	u32	bssid_ex_sz;
990 	struct mlme_priv	*pmlmepriv = &(adapter->mlmepriv);
991 #ifdef CONFIG_P2P
992 	struct wifidirect_info *pwdinfo = &(adapter->wdinfo);
993 #endif /* CONFIG_P2P */
994 	_queue	*queue	= &(pmlmepriv->scanned_queue);
995 	struct wlan_network	*pnetwork = NULL;
996 	struct wlan_network	*choice = NULL;
997 	int target_find = 0;
998 	u8 feature = 0;
999 	bool update_ie = _FALSE;
1000 
1001 	_enter_critical_bh(&queue->lock, &irqL);
1002 	phead = get_list_head(queue);
1003 	plist = get_next(phead);
1004 
1005 #if 0
1006 	RTW_INFO("%s => ssid:%s , rssi:%ld , ss:%d\n",
1007 		__func__, target->Ssid.Ssid, target->Rssi, target->PhyInfo.SignalStrength);
1008 #endif
1009 
1010 #ifdef CONFIG_P2P
1011 	if (!rtw_p2p_chk_state(pwdinfo, P2P_STATE_NONE))
1012 		feature = 1; /* p2p enable */
1013 #endif
1014 
1015 	while (1) {
1016 		if (rtw_end_of_queue_search(phead, plist) == _TRUE)
1017 			break;
1018 
1019 		pnetwork = LIST_CONTAINOR(plist, struct wlan_network, list);
1020 
1021 		rtw_bug_check(pnetwork, pnetwork, pnetwork, pnetwork);
1022 
1023 #ifdef CONFIG_P2P
1024 		if (!rtw_p2p_chk_state(pwdinfo, P2P_STATE_NONE) &&
1025 		    (_rtw_memcmp(pnetwork->network.MacAddress, target->MacAddress, ETH_ALEN) == _TRUE)) {
1026 			target_find = 1;
1027 			break;
1028 		}
1029 #endif
1030 
1031 		if (is_same_network(&(pnetwork->network), target, feature)) {
1032 			target_find = 1;
1033 			break;
1034 		}
1035 
1036 		if (rtw_roam_flags(adapter)) {
1037 			/* TODO: don't  select netowrk in the same ess as choice if it's new enough*/
1038 		}
1039 		if (pnetwork->fixed) {
1040 			plist = get_next(plist);
1041 			continue;
1042 		}
1043 
1044 #ifdef CONFIG_RSSI_PRIORITY
1045 		if ((choice == NULL) || (pnetwork->network.PhyInfo.SignalStrength < choice->network.PhyInfo.SignalStrength))
1046 			#ifdef CONFIG_RTW_MESH
1047 			if (!MLME_IS_MESH(adapter) || !MLME_IS_ASOC(adapter)
1048 				|| !rtw_bss_is_same_mbss(&pmlmepriv->cur_network.network, &pnetwork->network))
1049 			#endif
1050 				choice = pnetwork;
1051 #else
1052 		if (choice == NULL || rtw_time_after(choice->last_scanned, pnetwork->last_scanned))
1053 			#ifdef CONFIG_RTW_MESH
1054 			if (!MLME_IS_MESH(adapter) || !MLME_IS_ASOC(adapter)
1055 				|| !rtw_bss_is_same_mbss(&pmlmepriv->cur_network.network, &pnetwork->network))
1056 			#endif
1057 				choice = pnetwork;
1058 #endif
1059 		plist = get_next(plist);
1060 
1061 	}
1062 
1063 
1064 	/* If we didn't find a match, then get a new network slot to initialize
1065 	 * with this beacon's information */
1066 	/* if (rtw_end_of_queue_search(phead,plist)== _TRUE) { */
1067 	if (!target_find) {
1068 		if (_rtw_queue_empty(&(pmlmepriv->free_bss_pool)) == _TRUE) {
1069 			/* If there are no more slots, expire the choice */
1070 			/* list_del_init(&choice->list); */
1071 			pnetwork = choice;
1072 			if (pnetwork == NULL)
1073 				goto unlock_scan_queue;
1074 
1075 #ifdef CONFIG_RSSI_PRIORITY
1076 		RTW_DBG("%s => ssid:%s ,bssid:"MAC_FMT"  will be deleted from scanned_queue (rssi:%ld , ss:%d)\n",
1077 			__func__, pnetwork->network.Ssid.Ssid, MAC_ARG(pnetwork->network.MacAddress), pnetwork->network.Rssi, pnetwork->network.PhyInfo.SignalStrength);
1078 #else
1079 		RTW_DBG("%s => ssid:%s ,bssid:"MAC_FMT" will be deleted from scanned_queue\n",
1080 			__func__, pnetwork->network.Ssid.Ssid, MAC_ARG(pnetwork->network.MacAddress));
1081 #endif
1082 
1083 #ifdef CONFIG_ANTENNA_DIVERSITY
1084 			rtw_hal_get_odm_var(adapter, HAL_ODM_ANTDIV_SELECT, &(target->PhyInfo.Optimum_antenna), NULL);
1085 #endif
1086 			_rtw_memcpy(&(pnetwork->network), target,  get_WLAN_BSSID_EX_sz(target));
1087 			pnetwork->bcn_keys_valid = 0;
1088 			if (target->Reserved[0] == BSS_TYPE_BCN || target->Reserved[0] == BSS_TYPE_PROB_RSP)
1089 				rtw_update_bcn_keys_of_network(pnetwork);
1090 			/* variable initialize */
1091 			pnetwork->fixed = _FALSE;
1092 			pnetwork->last_scanned = rtw_get_current_time();
1093 			pnetwork->last_non_hidden_ssid_ap = pnetwork->last_scanned;
1094 			#if defined(CONFIG_RTW_MESH) && CONFIG_RTW_MESH_ACNODE_PREVENT
1095 			pnetwork->acnode_stime = 0;
1096 			pnetwork->acnode_notify_etime = 0;
1097 			#endif
1098 #ifdef	CONFIG_LAYER2_ROAMING
1099 			pnetwork->network.tsf = target->tsf;
1100 #endif
1101 			pnetwork->network_type = 0;
1102 			pnetwork->aid = 0;
1103 			pnetwork->join_res = 0;
1104 
1105 			/* bss info not receving from the right channel */
1106 			if (pnetwork->network.PhyInfo.SignalQuality == 101)
1107 				pnetwork->network.PhyInfo.SignalQuality = 0;
1108 		} else {
1109 			/* Otherwise just pull from the free list */
1110 
1111 			pnetwork = rtw_alloc_network(pmlmepriv); /* will update scan_time */
1112 			if (pnetwork == NULL)
1113 				goto unlock_scan_queue;
1114 
1115 			bssid_ex_sz = get_WLAN_BSSID_EX_sz(target);
1116 			target->Length = bssid_ex_sz;
1117 #ifdef CONFIG_ANTENNA_DIVERSITY
1118 			rtw_hal_get_odm_var(adapter, HAL_ODM_ANTDIV_SELECT, &(target->PhyInfo.Optimum_antenna), NULL);
1119 #endif
1120 			_rtw_memcpy(&(pnetwork->network), target, bssid_ex_sz);
1121 			pnetwork->bcn_keys_valid = 0;
1122 			if (target->Reserved[0] == BSS_TYPE_BCN || target->Reserved[0] == BSS_TYPE_PROB_RSP)
1123 				rtw_update_bcn_keys_of_network(pnetwork);
1124 
1125 			/* bss info not receving from the right channel */
1126 			if (pnetwork->network.PhyInfo.SignalQuality == 101)
1127 				pnetwork->network.PhyInfo.SignalQuality = 0;
1128 
1129 			rtw_list_insert_tail(&(pnetwork->list), &(queue->queue));
1130 
1131 		}
1132 	} else {
1133 		/* we have an entry and we are going to update it. But this entry may
1134 		 * be already expired. In this case we do the same as we found a new
1135 		 * net and call the new_net handler
1136 		 */
1137 		#if defined(CONFIG_RTW_MESH) && CONFIG_RTW_MESH_ACNODE_PREVENT
1138 		systime last_scanned = pnetwork->last_scanned;
1139 		#endif
1140 		struct beacon_keys bcn_keys;
1141 		bool bcn_keys_valid = 0;
1142 		bool is_hidden_ssid_ap = 0;
1143 
1144 		pnetwork->last_scanned = rtw_get_current_time();
1145 
1146 		if (target->Reserved[0] == BSS_TYPE_BCN || target->Reserved[0] == BSS_TYPE_PROB_RSP) {
1147 			if (target->InfrastructureMode == Ndis802_11Infrastructure) {
1148 				is_hidden_ssid_ap = hidden_ssid_ap(target);
1149 				if (!is_hidden_ssid_ap) /* update last time it's non hidden ssid AP */
1150 					pnetwork->last_non_hidden_ssid_ap = rtw_get_current_time();
1151 			}
1152 			bcn_keys_valid = rtw_get_bcn_keys_from_bss(target, &bcn_keys);
1153 		}
1154 
1155 		if (target->InfrastructureMode == Ndis802_11_mesh
1156 			|| target->Reserved[0] >= pnetwork->network.Reserved[0])
1157 			update_ie = _TRUE;
1158 		else if (target->InfrastructureMode == Ndis802_11Infrastructure && !pnetwork->fixed
1159 			&& rtw_get_passing_time_ms(pnetwork->last_non_hidden_ssid_ap) > SCANQUEUE_LIFETIME)
1160 			update_ie = _TRUE;
1161 		else if (bcn_keys_valid) {
1162 			if (is_hidden_ssid(bcn_keys.ssid, bcn_keys.ssid_len)) {
1163 				/* hidden ssid, replace with current beacon ssid directly */
1164 				_rtw_memcpy(bcn_keys.ssid, pnetwork->bcn_keys.ssid, pnetwork->bcn_keys.ssid_len);
1165 				bcn_keys.ssid_len = pnetwork->bcn_keys.ssid_len;
1166 			}
1167 			if (rtw_bcn_key_compare(&pnetwork->bcn_keys, &bcn_keys) == _FALSE)
1168 				update_ie = _TRUE;
1169 		}
1170 
1171 		#if defined(CONFIG_RTW_MESH) && CONFIG_RTW_MESH_ACNODE_PREVENT
1172 		if (!MLME_IS_MESH(adapter) || !MLME_IS_ASOC(adapter)
1173 			|| pnetwork->network.Configuration.DSConfig != target->Configuration.DSConfig
1174 			|| rtw_get_passing_time_ms(last_scanned) > adapter->mesh_cfg.peer_sel_policy.scanr_exp_ms
1175 			|| !rtw_bss_is_same_mbss(&pnetwork->network, target)
1176 		) {
1177 			pnetwork->acnode_stime = 0;
1178 			pnetwork->acnode_notify_etime = 0;
1179 		}
1180 		#endif
1181 
1182 		if (bcn_keys_valid) {
1183 			_rtw_memcpy(&pnetwork->bcn_keys, &bcn_keys, sizeof(bcn_keys));
1184 			pnetwork->bcn_keys_valid = 1;
1185 		} else if (update_ie)
1186 			pnetwork->bcn_keys_valid = 0;
1187 
1188 		update_network(&(pnetwork->network), target, adapter, update_ie);
1189 	}
1190 
1191 	#if defined(CONFIG_RTW_MESH) && CONFIG_RTW_MESH_ACNODE_PREVENT
1192 	if (MLME_IS_MESH(adapter) && MLME_IS_ASOC(adapter))
1193 		rtw_mesh_update_scanned_acnode_status(adapter, pnetwork);
1194 	#endif
1195 
1196 unlock_scan_queue:
1197 	_exit_critical_bh(&queue->lock, &irqL);
1198 
1199 #ifdef CONFIG_RTW_MESH
1200 	if (pnetwork && MLME_IS_MESH(adapter)
1201 		&& check_fwstate(pmlmepriv, WIFI_ASOC_STATE)
1202 		&& !check_fwstate(pmlmepriv, WIFI_UNDER_SURVEY)
1203 	)
1204 		rtw_chk_candidate_peer_notify(adapter, pnetwork);
1205 #endif
1206 
1207 	return update_ie;
1208 }
1209 
1210 void rtw_add_network(_adapter *adapter, WLAN_BSSID_EX *pnetwork);
rtw_add_network(_adapter * adapter,WLAN_BSSID_EX * pnetwork)1211 void rtw_add_network(_adapter *adapter, WLAN_BSSID_EX *pnetwork)
1212 {
1213 	bool update_ie;
1214 	/* _queue	*queue	= &(pmlmepriv->scanned_queue); */
1215 
1216 	/* _enter_critical_bh(&queue->lock, &irqL); */
1217 
1218 #if defined(CONFIG_P2P) && defined(CONFIG_P2P_REMOVE_GROUP_INFO)
1219 	if (adapter->registrypriv.wifi_spec == 0)
1220 		rtw_bss_ex_del_p2p_attr(pnetwork, P2P_ATTR_GROUP_INFO);
1221 #endif
1222 	if (!hal_chk_wl_func(adapter, WL_FUNC_MIRACAST))
1223 		rtw_bss_ex_del_wfd_ie(pnetwork);
1224 	/* Wi-Fi driver will update the current network if the scan result of the connected AP be updated by scan. */
1225 	update_ie = rtw_update_scanned_network(adapter, pnetwork);
1226 
1227 	if (update_ie)
1228 		update_current_network(adapter, pnetwork);
1229 
1230 	/* _exit_critical_bh(&queue->lock, &irqL); */
1231 
1232 }
1233 
1234 #ifdef CONFIG_RTW_MULTI_AP
rtw_unassoc_sta_set_mode(_adapter * adapter,u8 stype,u8 mode)1235 void rtw_unassoc_sta_set_mode(_adapter *adapter, u8 stype, u8 mode)
1236 {
1237 	if (stype >= UNASOC_STA_SRC_NUM
1238 		|| mode >= UNASOC_STA_MODE_NUM)
1239 		return;
1240 
1241 	adapter = GET_PRIMARY_ADAPTER(adapter);
1242 
1243 	if (adapter->mlmepriv.unassoc_sta_mode_of_stype[stype] == mode)
1244 		return;
1245 
1246 	adapter->mlmepriv.unassoc_sta_mode_of_stype[stype] = mode;
1247 
1248 	rtw_run_in_thread_cmd_wait(adapter, ((void *)(rtw_hal_rcr_set_chk_bssid_act_non)), adapter, 2000);
1249 }
1250 
rtw_unassoc_sta_src_chk(_adapter * adapter,u8 stype)1251 bool rtw_unassoc_sta_src_chk(_adapter *adapter, u8 stype)
1252 {
1253 	if (stype >= UNASOC_STA_SRC_NUM)
1254 		return 0;
1255 
1256 	adapter = GET_PRIMARY_ADAPTER(adapter);
1257 
1258 	return adapter->mlmepriv.unassoc_sta_mode_of_stype[stype] == UNASOC_STA_MODE_ALL
1259 		|| (adapter->mlmepriv.unassoc_sta_mode_of_stype[stype] == UNASOC_STA_MODE_INTERESTED
1260 			&& adapter->mlmepriv.interested_unassoc_sta_cnt)
1261 		;
1262 }
1263 
1264 const char *unasoc_sta_src_str[] = {
1265 	"BMC",
1266 	"NMY_UC",
1267 };
1268 
1269 const char *unasoc_sta_mode_str[] = {
1270 	"DISABLED",
1271 	"INTERESTED",
1272 	"ALL",
1273 };
1274 
dump_unassoc_sta(void * sel,_adapter * adapter)1275 void dump_unassoc_sta(void *sel, _adapter *adapter)
1276 {
1277 	struct mlme_priv *mlmepriv;
1278 	_queue *queue;
1279 	_list *list, *head;
1280 	struct unassoc_sta_info **unassoc_sta_arr;
1281 	struct unassoc_sta_info *unassoc_sta;
1282 	u16 i, unassoc_sta_cnt = 0;
1283 
1284 	adapter = GET_PRIMARY_ADAPTER(adapter);
1285 	mlmepriv = &(adapter->mlmepriv);
1286 	queue = &(mlmepriv->unassoc_sta_queue);
1287 
1288 	for (i = 0; i < UNASOC_STA_SRC_NUM; i++) {
1289 		RTW_PRINT_SEL(sel, "[%u]%-6s:%u(%s)\n", i, unasoc_sta_src_str[i]
1290 			, mlmepriv->unassoc_sta_mode_of_stype[i], unasoc_sta_mode_str[mlmepriv->unassoc_sta_mode_of_stype[i]]);
1291 	}
1292 	RTW_PRINT_SEL(sel, "interested_unassoc_sta_cnt:%u\n", mlmepriv->interested_unassoc_sta_cnt);
1293 
1294 	unassoc_sta_arr = rtw_zvmalloc(mlmepriv->max_unassoc_sta_cnt * sizeof(struct unassoc_sta_info *));
1295 	if (!unassoc_sta_arr)
1296 		return;
1297 
1298 	enter_critical_bh(&queue->lock);
1299 	head = get_list_head(queue);
1300 	list = get_next(head);
1301 
1302 	while (rtw_end_of_queue_search(head, list) == _FALSE) {
1303 		unassoc_sta = LIST_CONTAINOR(list, struct unassoc_sta_info, list);
1304 		list = get_next(list);
1305 
1306 		unassoc_sta_arr[unassoc_sta_cnt++] = unassoc_sta;
1307 	}
1308 
1309 	exit_critical_bh(&queue->lock);
1310 
1311 	RTW_PRINT_SEL(sel, "  %17s %18s %6s\n", "mac_addr", "measure_delta_time", "rssi");
1312 
1313 	for (i = 0; i < unassoc_sta_cnt; i++) {
1314 		u8 rcpi;
1315 		s8 rx_power;
1316 		u32 measure_delta_time;
1317 
1318 		unassoc_sta = unassoc_sta_arr[i];
1319 
1320 		measure_delta_time = rtw_systime_to_ms(rtw_get_current_time() - unassoc_sta->time);
1321 
1322 		RTW_PRINT_SEL(sel, "%c "MAC_FMT" %18u %6d\n"
1323 			, unassoc_sta->interested ? '*' : ' '
1324 			, MAC_ARG(unassoc_sta->addr), measure_delta_time, unassoc_sta->recv_signal_power);
1325 	}
1326 
1327 	rtw_vmfree(unassoc_sta_arr, mlmepriv->max_unassoc_sta_cnt * sizeof(struct unassoc_sta_info *));
1328 }
1329 
del_unassoc_sta(struct mlme_priv * mlmepriv,struct unassoc_sta_info * unassoc_sta)1330 static void del_unassoc_sta(struct mlme_priv *mlmepriv, struct unassoc_sta_info *unassoc_sta)
1331 {
1332 	_irqL irqL;
1333 	_queue *free_queue = &(mlmepriv->free_unassoc_sta_queue);
1334 
1335 	if (unassoc_sta->interested)
1336 		mlmepriv->interested_unassoc_sta_cnt--;
1337 	if (mlmepriv->interested_unassoc_sta_cnt == 0) {
1338 		rtw_run_in_thread_cmd(mlme_to_adapter(mlmepriv)
1339 			, ((void *)(rtw_hal_rcr_set_chk_bssid_act_non)), mlme_to_adapter(mlmepriv));
1340 	}
1341 
1342 	_enter_critical_bh(&free_queue->lock, &irqL);
1343 	rtw_list_delete(&(unassoc_sta->list));
1344 	rtw_list_insert_tail(&(unassoc_sta->list), &(free_queue->queue));
1345 	_exit_critical_bh(&free_queue->lock, &irqL);
1346 }
1347 
del_unassoc_sta_chk(struct mlme_priv * mlmepriv,struct unassoc_sta_info * unassoc_sta)1348 static u8 del_unassoc_sta_chk(struct mlme_priv *mlmepriv, struct unassoc_sta_info *unassoc_sta)
1349 {
1350 	systime cur, lifetime;
1351 
1352 	if (unassoc_sta == NULL)
1353 		return UNASOC_STA_DEL_CHK_SKIP;
1354 
1355 	if (unassoc_sta->interested)
1356 		return UNASOC_STA_DEL_CHK_SKIP;
1357 
1358 	cur = rtw_get_current_time();
1359 	lifetime = unassoc_sta->time + rtw_ms_to_systime(UNASSOC_STA_LIFETIME_MS);
1360 	if (rtw_time_before(cur, lifetime))
1361 		return UNASOC_STA_DEL_CHK_ALIVE;
1362 
1363 	del_unassoc_sta(mlmepriv, unassoc_sta);
1364 
1365 	return UNASOC_STA_DEL_CHK_DELETED;
1366 }
1367 
alloc_unassoc_sta(struct mlme_priv * mlmepriv)1368 static struct unassoc_sta_info *alloc_unassoc_sta(struct mlme_priv *mlmepriv)
1369 {
1370 	_irqL	irqL;
1371 	struct	unassoc_sta_info *unassoc_sta;
1372 	_queue *free_queue = &mlmepriv->free_unassoc_sta_queue;
1373 	_list *list = NULL;
1374 
1375 
1376 	_enter_critical_bh(&free_queue->lock, &irqL);
1377 
1378 	if (_rtw_queue_empty(free_queue) == _TRUE) {
1379 		unassoc_sta = NULL;
1380 		goto exit;
1381 	}
1382 	list = get_next(&(free_queue->queue));
1383 
1384 	unassoc_sta = LIST_CONTAINOR(list, struct unassoc_sta_info, list);
1385 
1386 	rtw_list_delete(&unassoc_sta->list);
1387 
1388 	_rtw_memset(unassoc_sta->addr, 0, ETH_ALEN);
1389 	unassoc_sta->recv_signal_power = 0;
1390 	unassoc_sta->time = 0;
1391 	unassoc_sta->interested = 0;
1392 exit:
1393 	_exit_critical_bh(&free_queue->lock, &irqL);
1394 
1395 	return unassoc_sta;
1396 
1397 }
1398 
rtw_del_unassoc_sta_queue(_adapter * adapter)1399 void rtw_del_unassoc_sta_queue(_adapter *adapter)
1400 {
1401 	struct unassoc_sta_info *unassoc_sta;
1402 	struct mlme_priv *mlmepriv;
1403 	_queue *queue;
1404 	_irqL irqL;
1405 	_list *head, *list;
1406 
1407 	adapter = GET_PRIMARY_ADAPTER(adapter);
1408 	mlmepriv = &(adapter->mlmepriv);
1409 	queue = &(mlmepriv->unassoc_sta_queue);
1410 
1411 	_enter_critical_bh(&queue->lock, &irqL);
1412 	head = get_list_head(queue);
1413 	list = get_next(head);
1414 
1415 	while ((rtw_end_of_queue_search(head, list)) == _FALSE) {
1416 		unassoc_sta = LIST_CONTAINOR(list , struct unassoc_sta_info, list);
1417 		list = get_next(list);
1418 
1419 		del_unassoc_sta(mlmepriv, unassoc_sta);
1420 	}
1421 
1422 	_exit_critical_bh(&queue->lock, &irqL);
1423 
1424 }
1425 
rtw_del_unassoc_sta(_adapter * adapter,u8 * addr)1426 void rtw_del_unassoc_sta(_adapter *adapter, u8 *addr)
1427 {
1428 	struct unassoc_sta_info *unassoc_sta;
1429 	struct mlme_priv *mlmepriv;
1430 	_queue *queue;
1431 	_irqL irqL;
1432 	_list *head, *list;
1433 
1434 	adapter = GET_PRIMARY_ADAPTER(adapter);
1435 	mlmepriv = &(adapter->mlmepriv);
1436 	queue = &(mlmepriv->unassoc_sta_queue);
1437 
1438 	_enter_critical_bh(&queue->lock, &irqL);
1439 	head = get_list_head(queue);
1440 	list = get_next(head);
1441 
1442 	while ((rtw_end_of_queue_search(head, list)) == _FALSE) {
1443 		unassoc_sta = LIST_CONTAINOR(list , struct unassoc_sta_info, list);
1444 		list = get_next(list);
1445 
1446 		if (_rtw_memcmp(addr, unassoc_sta->addr, ETH_ALEN) == _TRUE) {
1447 			del_unassoc_sta(mlmepriv, unassoc_sta);
1448 			goto unlock_unassoc_sta_queue;
1449 		}
1450 	}
1451 
1452 unlock_unassoc_sta_queue:
1453 	_exit_critical_bh(&queue->lock, &irqL);
1454 }
1455 
rtw_rx_add_unassoc_sta(_adapter * adapter,u8 stype,u8 * addr,s8 recv_signal_power)1456 void rtw_rx_add_unassoc_sta(_adapter *adapter, u8 stype, u8 *addr, s8 recv_signal_power)
1457 {
1458 	struct unassoc_sta_info *unassoc_sta;
1459 	struct unassoc_sta_info *oldest_unassoc_sta = NULL;
1460 	struct mlme_priv *mlmepriv;
1461 	_queue *queue;
1462 	_irqL irqL;
1463 	_list *head, *list;
1464 
1465 	adapter = GET_PRIMARY_ADAPTER(adapter);
1466 	mlmepriv = &(adapter->mlmepriv);
1467 	queue = &(mlmepriv->unassoc_sta_queue);
1468 
1469 	_enter_critical_bh(&queue->lock, &irqL);
1470 	head = get_list_head(queue);
1471 	list = get_next(head);
1472 
1473 	while ((rtw_end_of_queue_search(head, list)) == _FALSE) {
1474 		unassoc_sta = LIST_CONTAINOR(list , struct unassoc_sta_info, list);
1475 		list = get_next(list);
1476 
1477 		if (_rtw_memcmp(addr, unassoc_sta->addr, ETH_ALEN) == _TRUE) {
1478 			if (unassoc_sta->interested
1479 				|| mlmepriv->unassoc_sta_mode_of_stype[stype] >= UNASOC_STA_MODE_ALL
1480 			) {
1481 				unassoc_sta->recv_signal_power = recv_signal_power;
1482 				unassoc_sta->time = rtw_get_current_time();
1483 				goto unlock_unassoc_sta_queue;
1484 			}
1485 		}
1486 
1487 		if (del_unassoc_sta_chk(mlmepriv, unassoc_sta) == UNASOC_STA_DEL_CHK_ALIVE) {
1488 			if (oldest_unassoc_sta == NULL)
1489 				oldest_unassoc_sta = unassoc_sta;
1490 			else if (rtw_time_before(unassoc_sta->time, oldest_unassoc_sta->time))
1491 				oldest_unassoc_sta = unassoc_sta;
1492 		}
1493 	}
1494 
1495 	if (mlmepriv->unassoc_sta_mode_of_stype[stype] <= UNASOC_STA_MODE_INTERESTED)
1496 		goto unlock_unassoc_sta_queue;
1497 
1498 	unassoc_sta = alloc_unassoc_sta(mlmepriv);
1499 	if (unassoc_sta == NULL) {
1500 		if (oldest_unassoc_sta) {
1501 			del_unassoc_sta(mlmepriv, oldest_unassoc_sta);
1502 			unassoc_sta = alloc_unassoc_sta(mlmepriv);
1503 		} else
1504 			goto unlock_unassoc_sta_queue;
1505 	}
1506 	_rtw_memcpy(unassoc_sta->addr, addr, ETH_ALEN);
1507 	unassoc_sta->recv_signal_power = recv_signal_power;
1508 	unassoc_sta->time = rtw_get_current_time();
1509 	rtw_list_insert_tail(&(unassoc_sta->list), &(queue->queue));
1510 
1511 unlock_unassoc_sta_queue:
1512 	_exit_critical_bh(&queue->lock, &irqL);
1513 }
1514 
rtw_add_interested_unassoc_sta(_adapter * adapter,u8 * addr)1515 void rtw_add_interested_unassoc_sta(_adapter *adapter, u8 *addr)
1516 {
1517 	struct unassoc_sta_info *unassoc_sta;
1518 	struct unassoc_sta_info *oldest_unassoc_sta = NULL;
1519 	struct mlme_priv *mlmepriv;
1520 	_queue *queue;
1521 	_irqL irqL;
1522 	_list *head, *list;
1523 
1524 	adapter = GET_PRIMARY_ADAPTER(adapter);
1525 	mlmepriv = &(adapter->mlmepriv);
1526 	queue = &(mlmepriv->unassoc_sta_queue);
1527 
1528 	_enter_critical_bh(&queue->lock, &irqL);
1529 	head = get_list_head(queue);
1530 	list = get_next(head);
1531 
1532 	while ((rtw_end_of_queue_search(head, list)) == _FALSE) {
1533 		unassoc_sta = LIST_CONTAINOR(list , struct unassoc_sta_info, list);
1534 		list = get_next(list);
1535 
1536 		if (_rtw_memcmp(addr, unassoc_sta->addr, ETH_ALEN) == _TRUE) {
1537 			if (!unassoc_sta->interested) {
1538 				unassoc_sta->interested = 1;
1539 				mlmepriv->interested_unassoc_sta_cnt++;
1540 				if (mlmepriv->interested_unassoc_sta_cnt == 1) {
1541 					rtw_run_in_thread_cmd(mlme_to_adapter(mlmepriv)
1542 						, ((void *)(rtw_hal_rcr_set_chk_bssid_act_non)), mlme_to_adapter(mlmepriv));
1543 				}
1544 			}
1545 			goto unlock_unassoc_sta_queue;
1546 		}
1547 
1548 		if (del_unassoc_sta_chk(mlmepriv, unassoc_sta) == UNASOC_STA_DEL_CHK_ALIVE) {
1549 			if (oldest_unassoc_sta == NULL)
1550 				oldest_unassoc_sta = unassoc_sta;
1551 			else if (rtw_time_after(unassoc_sta->time, oldest_unassoc_sta->time))
1552 				oldest_unassoc_sta = unassoc_sta;
1553 		}
1554 	}
1555 	unassoc_sta = alloc_unassoc_sta(mlmepriv);
1556 	if (unassoc_sta == NULL) {
1557 		RTW_INFO(FUNC_ADPT_FMT": Allocate fail\n", FUNC_ADPT_ARG(adapter));
1558 		if (oldest_unassoc_sta) {
1559 			RTW_INFO(FUNC_ADPT_FMT": Delete oldest entry and try again.\n", FUNC_ADPT_ARG(adapter));
1560 			del_unassoc_sta(mlmepriv, oldest_unassoc_sta);
1561 			unassoc_sta = alloc_unassoc_sta(mlmepriv);
1562 		} else
1563 			goto unlock_unassoc_sta_queue;
1564 	}
1565 	_rtw_memcpy(unassoc_sta->addr, addr, ETH_ALEN);
1566 	unassoc_sta->interested = 1;
1567 	unassoc_sta->recv_signal_power = 0;
1568 	unassoc_sta->time = rtw_get_current_time() - rtw_ms_to_systime(UNASSOC_STA_LIFETIME_MS);
1569 	rtw_list_insert_tail(&(unassoc_sta->list), &(queue->queue));
1570 	mlmepriv->interested_unassoc_sta_cnt++;
1571 	if (mlmepriv->interested_unassoc_sta_cnt == 1) {
1572 		rtw_run_in_thread_cmd(mlme_to_adapter(mlmepriv)
1573 			, ((void *)(rtw_hal_rcr_set_chk_bssid_act_non)), mlme_to_adapter(mlmepriv));
1574 	}
1575 
1576 unlock_unassoc_sta_queue:
1577 	_exit_critical_bh(&queue->lock, &irqL);
1578 }
1579 
rtw_undo_interested_unassoc_sta(_adapter * adapter,u8 * addr)1580 void rtw_undo_interested_unassoc_sta(_adapter *adapter, u8 *addr)
1581 {
1582 	struct unassoc_sta_info *unassoc_sta;
1583 	struct mlme_priv *mlmepriv;
1584 	_queue *queue;
1585 	_irqL irqL;
1586 	_list *head, *list;
1587 
1588 	adapter = GET_PRIMARY_ADAPTER(adapter);
1589 	mlmepriv = &(adapter->mlmepriv);
1590 	queue = &(mlmepriv->unassoc_sta_queue);
1591 
1592 	_enter_critical_bh(&queue->lock, &irqL);
1593 	head = get_list_head(queue);
1594 	list = get_next(head);
1595 
1596 	while ((rtw_end_of_queue_search(head, list)) == _FALSE) {
1597 		unassoc_sta = LIST_CONTAINOR(list , struct unassoc_sta_info, list);
1598 		list = get_next(list);
1599 
1600 		if (_rtw_memcmp(addr, unassoc_sta->addr, ETH_ALEN) == _TRUE) {
1601 			if (unassoc_sta->interested) {
1602 				unassoc_sta->interested = 0;
1603 				mlmepriv->interested_unassoc_sta_cnt--;
1604 				if (mlmepriv->interested_unassoc_sta_cnt == 0) {
1605 					rtw_run_in_thread_cmd(mlme_to_adapter(mlmepriv)
1606 						, ((void *)(rtw_hal_rcr_set_chk_bssid_act_non)), mlme_to_adapter(mlmepriv));
1607 				}
1608 			}
1609 			goto unlock_unassoc_sta_queue;
1610 		}
1611 	}
1612 unlock_unassoc_sta_queue:
1613 	_exit_critical_bh(&queue->lock, &irqL);
1614 }
1615 
rtw_undo_all_interested_unassoc_sta(_adapter * adapter)1616 void rtw_undo_all_interested_unassoc_sta(_adapter *adapter)
1617 {
1618 	struct unassoc_sta_info *unassoc_sta;
1619 	struct mlme_priv *mlmepriv;
1620 	_queue *queue;
1621 	_irqL irqL;
1622 	_list *head, *list;
1623 
1624 	adapter = GET_PRIMARY_ADAPTER(adapter);
1625 	mlmepriv = &(adapter->mlmepriv);
1626 	queue = &(mlmepriv->unassoc_sta_queue);
1627 
1628 	_enter_critical_bh(&queue->lock, &irqL);
1629 	head = get_list_head(queue);
1630 	list = get_next(head);
1631 
1632 	while ((rtw_end_of_queue_search(head, list)) == _FALSE) {
1633 		unassoc_sta = LIST_CONTAINOR(list , struct unassoc_sta_info, list);
1634 		list = get_next(list);
1635 
1636 		if (unassoc_sta->interested) {
1637 			unassoc_sta->interested = 0;
1638 			mlmepriv->interested_unassoc_sta_cnt--;
1639 			if (mlmepriv->interested_unassoc_sta_cnt == 0) {
1640 				rtw_run_in_thread_cmd(mlme_to_adapter(mlmepriv)
1641 					, ((void *)(rtw_hal_rcr_set_chk_bssid_act_non)), mlme_to_adapter(mlmepriv));
1642 				goto unlock_unassoc_sta_queue;
1643 			}
1644 		}
1645 	}
1646 unlock_unassoc_sta_queue:
1647 	_exit_critical_bh(&queue->lock, &irqL);
1648 }
1649 
rtw_search_unassoc_sta(_adapter * adapter,u8 * addr,struct unassoc_sta_info * ret_sta)1650 u8 rtw_search_unassoc_sta(_adapter *adapter, u8 *addr, struct unassoc_sta_info *ret_sta)
1651 {
1652 	struct unassoc_sta_info *unassoc_sta = NULL;
1653 	struct mlme_priv *mlmepriv;
1654 	_queue *queue;
1655 	_irqL irqL;
1656 	_list *head, *list;
1657 	u8 searched = 0;
1658 
1659 	adapter = GET_PRIMARY_ADAPTER(adapter);
1660 	mlmepriv = &(adapter->mlmepriv);
1661 	queue = &(mlmepriv->unassoc_sta_queue);
1662 
1663 	_enter_critical_bh(&queue->lock, &irqL);
1664 	head = get_list_head(queue);
1665 	list = get_next(head);
1666 
1667 	while ((rtw_end_of_queue_search(head, list)) == _FALSE) {
1668 		unassoc_sta = LIST_CONTAINOR(list , struct unassoc_sta_info, list);
1669 		list = get_next(list);
1670 
1671 		if (_rtw_memcmp(addr, unassoc_sta->addr, ETH_ALEN) == _TRUE) {
1672 			memcpy(ret_sta, unassoc_sta, sizeof(struct unassoc_sta_info));
1673 			searched = 1;
1674 			break;
1675 		}
1676 	}
1677 	_exit_critical_bh(&queue->lock, &irqL);
1678 
1679 	return searched;
1680 }
1681 #endif /* CONFIG_RTW_MULTI_AP */
1682 
1683 /* select the desired network based on the capability of the (i)bss.
1684  * check items: (1) security
1685  *			   (2) network_type
1686  *			   (3) WMM
1687  *			   (4) HT
1688  * (5) others */
1689 int rtw_is_desired_network(_adapter *adapter, struct wlan_network *pnetwork);
rtw_is_desired_network(_adapter * adapter,struct wlan_network * pnetwork)1690 int rtw_is_desired_network(_adapter *adapter, struct wlan_network *pnetwork)
1691 {
1692 	struct security_priv *psecuritypriv = &adapter->securitypriv;
1693 	struct mlme_priv *pmlmepriv = &adapter->mlmepriv;
1694 	u32 desired_encmode;
1695 	u32 privacy;
1696 
1697 	/* u8 wps_ie[512]; */
1698 	uint wps_ielen;
1699 
1700 	int bselected = _TRUE;
1701 
1702 	desired_encmode = psecuritypriv->ndisencryptstatus;
1703 	privacy = pnetwork->network.Privacy;
1704 
1705 	if (check_fwstate(pmlmepriv, WIFI_UNDER_WPS)) {
1706 		if (rtw_get_wps_ie(pnetwork->network.IEs + _FIXED_IE_LENGTH_, pnetwork->network.IELength - _FIXED_IE_LENGTH_, NULL, &wps_ielen) != NULL)
1707 			return _TRUE;
1708 		else
1709 			return _FALSE;
1710 	}
1711 	if (adapter->registrypriv.wifi_spec == 1) { /* for  correct flow of 8021X  to do.... */
1712 		u8 *p = NULL;
1713 		uint ie_len = 0;
1714 
1715 		if ((desired_encmode == Ndis802_11EncryptionDisabled) && (privacy != 0))
1716 			bselected = _FALSE;
1717 
1718 		if (psecuritypriv->ndisauthtype == Ndis802_11AuthModeWPA2PSK) {
1719 			p = rtw_get_ie(pnetwork->network.IEs + _BEACON_IE_OFFSET_, _RSN_IE_2_, &ie_len, (pnetwork->network.IELength - _BEACON_IE_OFFSET_));
1720 			if (p && ie_len > 0)
1721 				bselected = _TRUE;
1722 			else
1723 				bselected = _FALSE;
1724 		}
1725 	}
1726 
1727 
1728 	if ((desired_encmode != Ndis802_11EncryptionDisabled) && (privacy == 0)) {
1729 		RTW_INFO("desired_encmode: %d, privacy: %d\n", desired_encmode, privacy);
1730 		bselected = _FALSE;
1731 	}
1732 
1733 	if (check_fwstate(pmlmepriv, WIFI_ADHOC_STATE) == _TRUE) {
1734 		if (pnetwork->network.InfrastructureMode != pmlmepriv->cur_network.network.InfrastructureMode)
1735 			bselected = _FALSE;
1736 	}
1737 
1738 #ifdef CONFIG_RTW_MBO
1739 	if (rtw_mbo_disallowed_network(pnetwork) == _TRUE)
1740 		bselected = _FALSE;
1741 #endif
1742 
1743 	return bselected;
1744 }
1745 
1746 #ifdef CONFIG_80211D
process_80211d(PADAPTER padapter,WLAN_BSSID_EX * bssid)1747 static void process_80211d(PADAPTER padapter, WLAN_BSSID_EX *bssid)
1748 {
1749 	struct rf_ctl_t *rfctl = adapter_to_rfctl(padapter);
1750 	struct registry_priv *pregistrypriv;
1751 	struct mlme_ext_priv *pmlmeext;
1752 	RT_CHANNEL_INFO *chplan_new;
1753 	u8 channel;
1754 	u8 i;
1755 
1756 
1757 	pregistrypriv = &padapter->registrypriv;
1758 	pmlmeext = &padapter->mlmeextpriv;
1759 
1760 	/* Adjust channel plan by AP Country IE */
1761 	if (pregistrypriv->enable80211d
1762 	    && (!pmlmeext->update_channel_plan_by_ap_done)) {
1763 		u8 *ie, *p;
1764 		u32 len;
1765 		RT_CHANNEL_PLAN chplan_ap;
1766 		RT_CHANNEL_INFO *chplan_sta = NULL;
1767 		u8 country[4];
1768 		u8 fcn; /* first channel number */
1769 		u8 noc; /* number of channel */
1770 		u8 j, k;
1771 
1772 		ie = rtw_get_ie(bssid->IEs + _FIXED_IE_LENGTH_, _COUNTRY_IE_, &len, bssid->IELength - _FIXED_IE_LENGTH_);
1773 		if (!ie)
1774 			return;
1775 		if (len < 6)
1776 			return;
1777 
1778 		ie += 2;
1779 		p = ie;
1780 		ie += len;
1781 
1782 		_rtw_memset(country, 0, 4);
1783 		_rtw_memcpy(country, p, 3);
1784 		p += 3;
1785 		RTW_INFO("%s: 802.11d country=%s\n", __FUNCTION__, country);
1786 
1787 		i = 0;
1788 		while ((ie - p) >= 3) {
1789 			fcn = *(p++);
1790 			noc = *(p++);
1791 			p++;
1792 
1793 			for (j = 0; j < noc; j++) {
1794 				if (fcn <= 14)
1795 					channel = fcn + j; /* 2.4 GHz */
1796 				else
1797 					channel = fcn + j * 4; /* 5 GHz */
1798 
1799 				chplan_ap.Channel[i++] = channel;
1800 			}
1801 		}
1802 		chplan_ap.Len = i;
1803 
1804 #ifdef CONFIG_RTW_DEBUG
1805 		i = 0;
1806 		RTW_INFO("%s: AP[%s] channel plan {", __FUNCTION__, bssid->Ssid.Ssid);
1807 		while ((i < chplan_ap.Len) && (chplan_ap.Channel[i] != 0)) {
1808 			_RTW_INFO("%02d,", chplan_ap.Channel[i]);
1809 			i++;
1810 		}
1811 		_RTW_INFO("}\n");
1812 #endif
1813 
1814 		chplan_sta = rtw_malloc(sizeof(RT_CHANNEL_INFO) * MAX_CHANNEL_NUM);
1815 		if (!chplan_sta)
1816 			goto done_update_chplan_from_ap;
1817 
1818 		_rtw_memcpy(chplan_sta, rfctl->channel_set, sizeof(RT_CHANNEL_INFO) * MAX_CHANNEL_NUM);
1819 #ifdef CONFIG_RTW_DEBUG
1820 		i = 0;
1821 		RTW_INFO("%s: STA channel plan {", __FUNCTION__);
1822 		while ((i < MAX_CHANNEL_NUM) && (chplan_sta[i].ChannelNum != 0)) {
1823 			_RTW_INFO("%02d(%c),", chplan_sta[i].ChannelNum, chplan_sta[i].flags & RTW_CHF_NO_IR ? 'p' : 'a');
1824 			i++;
1825 		}
1826 		_RTW_INFO("}\n");
1827 #endif
1828 
1829 		_rtw_memset(rfctl->channel_set, 0, sizeof(rfctl->channel_set));
1830 		chplan_new = rfctl->channel_set;
1831 
1832 		i = j = k = 0;
1833 		if (pregistrypriv->wireless_mode & WIRELESS_11G) {
1834 			do {
1835 				if ((i == MAX_CHANNEL_NUM)
1836 				    || (chplan_sta[i].ChannelNum == 0)
1837 				    || (chplan_sta[i].ChannelNum > 14))
1838 					break;
1839 
1840 				if ((j == chplan_ap.Len) || (chplan_ap.Channel[j] > 14))
1841 					break;
1842 
1843 				if (chplan_sta[i].ChannelNum == chplan_ap.Channel[j]) {
1844 					chplan_new[k].ChannelNum = chplan_ap.Channel[j];
1845 					i++;
1846 					j++;
1847 					k++;
1848 				} else if (chplan_sta[i].ChannelNum < chplan_ap.Channel[j]) {
1849 					chplan_new[k].ChannelNum = chplan_sta[i].ChannelNum;
1850 #if 0
1851 					if (chplan_sta[i].flags & RTW_CHF_NO_IR)
1852 						chplan_new[k].flags |= RTW_CHF_NO_IR;
1853 #else
1854 					chplan_new[k].flags |= RTW_CHF_NO_IR;
1855 #endif
1856 					i++;
1857 					k++;
1858 				} else if (chplan_sta[i].ChannelNum > chplan_ap.Channel[j]) {
1859 					chplan_new[k].ChannelNum = chplan_ap.Channel[j];
1860 					j++;
1861 					k++;
1862 				}
1863 			} while (1);
1864 
1865 			/* change AP not support channel to Passive scan */
1866 			while ((i < MAX_CHANNEL_NUM)
1867 			       && (chplan_sta[i].ChannelNum != 0)
1868 			       && (chplan_sta[i].ChannelNum <= 14)) {
1869 				chplan_new[k].ChannelNum = chplan_sta[i].ChannelNum;
1870 #if 0
1871 				if (chplan_sta[i].flags & RTW_CHF_NO_IR)
1872 					chplan_new[k].flags |= RTW_CHF_NO_IR;
1873 #else
1874 				chplan_new[k].flags |= RTW_CHF_NO_IR;
1875 #endif
1876 				i++;
1877 				k++;
1878 			}
1879 
1880 			/* add channel AP supported */
1881 			while ((j < chplan_ap.Len) && (chplan_ap.Channel[j] <= 14)) {
1882 				chplan_new[k].ChannelNum = chplan_ap.Channel[j];
1883 				j++;
1884 				k++;
1885 			}
1886 		} else {
1887 			/* keep original STA 2.4G channel plan */
1888 			while ((i < MAX_CHANNEL_NUM)
1889 			       && (chplan_sta[i].ChannelNum != 0)
1890 			       && (chplan_sta[i].ChannelNum <= 14)) {
1891 				chplan_new[k].ChannelNum = chplan_sta[i].ChannelNum;
1892 				if (chplan_sta[i].flags & RTW_CHF_NO_IR)
1893 					chplan_new[k].flags |= RTW_CHF_NO_IR;
1894 				i++;
1895 				k++;
1896 			}
1897 
1898 			/* skip AP 2.4G channel plan */
1899 			while ((j < chplan_ap.Len) && (chplan_ap.Channel[j] <= 14))
1900 				j++;
1901 		}
1902 
1903 		if (pregistrypriv->wireless_mode & WIRELESS_11A) {
1904 			do {
1905 				if ((i >= MAX_CHANNEL_NUM)
1906 				    || (chplan_sta[i].ChannelNum == 0))
1907 					break;
1908 
1909 				if ((j == chplan_ap.Len) || (chplan_ap.Channel[j] == 0))
1910 					break;
1911 
1912 				if (chplan_sta[i].ChannelNum == chplan_ap.Channel[j]) {
1913 					chplan_new[k].ChannelNum = chplan_ap.Channel[j];
1914 					i++;
1915 					j++;
1916 					k++;
1917 				} else if (chplan_sta[i].ChannelNum < chplan_ap.Channel[j]) {
1918 					chplan_new[k].ChannelNum = chplan_sta[i].ChannelNum;
1919 #if 0
1920 					if (chplan_sta[i].flags & RTW_CHF_NO_IR)
1921 						chplan_new[k].flags |= RTW_CHF_NO_IR;
1922 #else
1923 					chplan_new[k].flags |= RTW_CHF_NO_IR;
1924 #endif
1925 					i++;
1926 					k++;
1927 				} else if (chplan_sta[i].ChannelNum > chplan_ap.Channel[j]) {
1928 					chplan_new[k].ChannelNum = chplan_ap.Channel[j];
1929 					j++;
1930 					k++;
1931 				}
1932 			} while (1);
1933 
1934 			/* change AP not support channel to Passive scan */
1935 			while ((i < MAX_CHANNEL_NUM) && (chplan_sta[i].ChannelNum != 0)) {
1936 				chplan_new[k].ChannelNum = chplan_sta[i].ChannelNum;
1937 #if 0
1938 				if (chplan_sta[i].flags & RTW_CHF_NO_IR)
1939 					chplan_new[k].flags |= RTW_CHF_NO_IR;
1940 #else
1941 				chplan_new[k].flags |= RTW_CHF_NO_IR;
1942 #endif
1943 				i++;
1944 				k++;
1945 			}
1946 
1947 			/* add channel AP supported */
1948 			while ((j < chplan_ap.Len) && (chplan_ap.Channel[j] != 0)) {
1949 				chplan_new[k].ChannelNum = chplan_ap.Channel[j];
1950 				j++;
1951 				k++;
1952 			}
1953 		} else {
1954 			/* keep original STA 5G channel plan */
1955 			while ((i < MAX_CHANNEL_NUM) && (chplan_sta[i].ChannelNum != 0)) {
1956 				chplan_new[k].ChannelNum = chplan_sta[i].ChannelNum;
1957 				if (chplan_sta[i].flags & RTW_CHF_NO_IR)
1958 					chplan_new[k].flags |= RTW_CHF_NO_IR;
1959 				i++;
1960 				k++;
1961 			}
1962 		}
1963 
1964 		pmlmeext->update_channel_plan_by_ap_done = 1;
1965 		rtw_nlrtw_reg_change_event(padapter);
1966 
1967 #ifdef CONFIG_RTW_DEBUG
1968 		k = 0;
1969 		RTW_INFO("%s: new STA channel plan {", __FUNCTION__);
1970 		while ((k < MAX_CHANNEL_NUM) && (chplan_new[k].ChannelNum != 0)) {
1971 			_RTW_INFO("%02d(%c),", chplan_new[k].ChannelNum, chplan_new[k].flags & RTW_CHF_NO_IR ? 'p' : 'c');
1972 			k++;
1973 		}
1974 		_RTW_INFO("}\n");
1975 #endif
1976 
1977 #if 0
1978 		/* recover the right channel index */
1979 		channel = chplan_sta[pmlmeext->sitesurvey_res.channel_idx].ChannelNum;
1980 		k = 0;
1981 		while ((k < MAX_CHANNEL_NUM) && (chplan_new[k].ChannelNum != 0)) {
1982 			if (chplan_new[k].ChannelNum == channel) {
1983 				RTW_INFO("%s: change mlme_ext sitesurvey channel index from %d to %d\n",
1984 					__FUNCTION__, pmlmeext->sitesurvey_res.channel_idx, k);
1985 				pmlmeext->sitesurvey_res.channel_idx = k;
1986 				break;
1987 			}
1988 			k++;
1989 		}
1990 #endif
1991 
1992 done_update_chplan_from_ap:
1993 		if (chplan_sta)
1994 			rtw_mfree(chplan_sta, sizeof(RT_CHANNEL_INFO) * MAX_CHANNEL_NUM);
1995 	}
1996 }
1997 #endif
1998 
rtw_survey_event_callback(_adapter * adapter,u8 * pbuf)1999 void rtw_survey_event_callback(_adapter	*adapter, u8 *pbuf)
2000 {
2001 	_irqL  irqL;
2002 	u32 len;
2003 	u8 val8;
2004 	WLAN_BSSID_EX *pnetwork;
2005 	struct	mlme_priv	*pmlmepriv = &(adapter->mlmepriv);
2006 
2007 	pnetwork = (WLAN_BSSID_EX *)pbuf;
2008 
2009 	len = get_WLAN_BSSID_EX_sz(pnetwork);
2010 	if (len > (sizeof(WLAN_BSSID_EX))) {
2011 		return;
2012 	}
2013 
2014 #ifdef CONFIG_RTW_80211K
2015     	val8 = 0;
2016 	rtw_hal_get_hwreg(adapter, HW_VAR_FREECNT, &val8);
2017 
2018 	/* use TSF if no free run counter */
2019 	if (val8==0)
2020 		pnetwork->PhyInfo.free_cnt = (u32)rtw_hal_get_tsftr_by_port(
2021 			adapter, rtw_hal_get_port(adapter));
2022 #endif
2023 
2024 	if (pnetwork->InfrastructureMode == Ndis802_11Infrastructure) {
2025 		#ifdef CONFIG_80211D
2026 		process_80211d(adapter, pnetwork);
2027 		#endif
2028 		if (MLME_IS_SCAN(adapter)) {
2029 			adapter->mlmeextpriv.sitesurvey_res.activate_ch_cnt
2030 				+= rtw_process_beacon_hint(adapter, pnetwork);
2031 		}
2032 	}
2033 
2034 	_enter_critical_bh(&pmlmepriv->lock, &irqL);
2035 
2036 	/* update IBSS_network 's timestamp */
2037 	if ((check_fwstate(pmlmepriv, WIFI_ADHOC_MASTER_STATE)) == _TRUE) {
2038 		if (_rtw_memcmp(&(pmlmepriv->cur_network.network.MacAddress), pnetwork->MacAddress, ETH_ALEN)) {
2039 			struct wlan_network *ibss_wlan = NULL;
2040 			_irqL	irqL;
2041 
2042 			_rtw_memcpy(pmlmepriv->cur_network.network.IEs, pnetwork->IEs, 8);
2043 			_enter_critical_bh(&(pmlmepriv->scanned_queue.lock), &irqL);
2044 			ibss_wlan = _rtw_find_network(&pmlmepriv->scanned_queue,  pnetwork->MacAddress);
2045 			if (ibss_wlan) {
2046 				_rtw_memcpy(ibss_wlan->network.IEs , pnetwork->IEs, 8);
2047 				_exit_critical_bh(&(pmlmepriv->scanned_queue.lock), &irqL);
2048 				goto exit;
2049 			}
2050 			_exit_critical_bh(&(pmlmepriv->scanned_queue.lock), &irqL);
2051 		}
2052 	}
2053 
2054 	/* lock pmlmepriv->lock when you accessing network_q */
2055 	if ((check_fwstate(pmlmepriv, WIFI_UNDER_LINKING)) == _FALSE) {
2056 		if (pnetwork->Ssid.Ssid[0] == 0)
2057 			pnetwork->Ssid.SsidLength = 0;
2058 		rtw_add_network(adapter, pnetwork);
2059 	}
2060 
2061 exit:
2062 
2063 	_exit_critical_bh(&pmlmepriv->lock, &irqL);
2064 
2065 
2066 	return;
2067 }
2068 
rtw_surveydone_event_callback(_adapter * adapter,u8 * pbuf)2069 void rtw_surveydone_event_callback(_adapter	*adapter, u8 *pbuf)
2070 {
2071 	_irqL  irqL;
2072 	struct surveydone_event *parm = (struct surveydone_event *)pbuf;
2073 	struct	mlme_priv	*pmlmepriv = &(adapter->mlmepriv);
2074 	struct mlme_ext_priv	*pmlmeext = &adapter->mlmeextpriv;
2075 
2076 #ifdef CONFIG_MLME_EXT
2077 	mlmeext_surveydone_event_callback(adapter);
2078 #endif
2079 
2080 
2081 	_enter_critical_bh(&pmlmepriv->lock, &irqL);
2082 	if (pmlmepriv->wps_probe_req_ie) {
2083 		u32 free_len = pmlmepriv->wps_probe_req_ie_len;
2084 		pmlmepriv->wps_probe_req_ie_len = 0;
2085 		rtw_mfree(pmlmepriv->wps_probe_req_ie, free_len);
2086 		pmlmepriv->wps_probe_req_ie = NULL;
2087 	}
2088 
2089 
2090 	if (check_fwstate(pmlmepriv, WIFI_UNDER_SURVEY) == _FALSE) {
2091 		RTW_INFO(FUNC_ADPT_FMT" fw_state:0x%x\n", FUNC_ADPT_ARG(adapter), get_fwstate(pmlmepriv));
2092 		/* rtw_warn_on(1); */
2093 	}
2094 
2095 	if (pmlmeext->scan_abort == _TRUE)
2096 		pmlmeext->scan_abort = _FALSE;
2097 
2098 	_clr_fwstate_(pmlmepriv, WIFI_UNDER_SURVEY);
2099 	_exit_critical_bh(&pmlmepriv->lock, &irqL);
2100 
2101 	_cancel_timer_ex(&pmlmepriv->scan_to_timer);
2102 
2103 	_enter_critical_bh(&pmlmepriv->lock, &irqL);
2104 
2105 #ifdef CONFIG_NEW_SIGNAL_STAT_PROCESS
2106 	rtw_set_signal_stat_timer(&adapter->recvpriv);
2107 #endif
2108 
2109 	if (pmlmepriv->to_join == _TRUE) {
2110 		if ((check_fwstate(pmlmepriv, WIFI_ADHOC_STATE) == _TRUE)) {
2111 			if (check_fwstate(pmlmepriv, WIFI_ASOC_STATE) == _FALSE) {
2112 				set_fwstate(pmlmepriv, WIFI_UNDER_LINKING);
2113 
2114 				if (rtw_select_and_join_from_scanned_queue(pmlmepriv) == _SUCCESS)
2115 					_set_timer(&pmlmepriv->assoc_timer, MAX_JOIN_TIMEOUT);
2116 				#ifdef CONFIG_AP_MODE
2117 				else {
2118 					WLAN_BSSID_EX    *pdev_network = &(adapter->registrypriv.dev_network);
2119 					u8 *pibss = adapter->registrypriv.dev_network.MacAddress;
2120 
2121 					/* pmlmepriv->fw_state ^= WIFI_UNDER_SURVEY; */ /* because don't set assoc_timer */
2122 					_clr_fwstate_(pmlmepriv, WIFI_UNDER_SURVEY);
2123 
2124 
2125 					_rtw_memset(&pdev_network->Ssid, 0, sizeof(NDIS_802_11_SSID));
2126 					_rtw_memcpy(&pdev_network->Ssid, &pmlmepriv->assoc_ssid, sizeof(NDIS_802_11_SSID));
2127 
2128 					rtw_update_registrypriv_dev_network(adapter);
2129 					rtw_generate_random_ibss(pibss);
2130 
2131 					/*pmlmepriv->fw_state = WIFI_ADHOC_MASTER_STATE;*/
2132 					init_fwstate(pmlmepriv, WIFI_ADHOC_MASTER_STATE);
2133 
2134 					if (rtw_create_ibss_cmd(adapter, 0) != _SUCCESS)
2135 						RTW_ERR("rtw_create_ibss_cmd FAIL\n");
2136 
2137 					pmlmepriv->to_join = _FALSE;
2138 				}
2139 				#endif /* CONFIG_AP_MODE */
2140 			}
2141 		} else {
2142 			int s_ret;
2143 			set_fwstate(pmlmepriv, WIFI_UNDER_LINKING);
2144 			pmlmepriv->to_join = _FALSE;
2145 			s_ret = rtw_select_and_join_from_scanned_queue(pmlmepriv);
2146 			if (_SUCCESS == s_ret)
2147 				_set_timer(&pmlmepriv->assoc_timer, MAX_JOIN_TIMEOUT);
2148 			else if (s_ret == 2) { /* there is no need to wait for join */
2149 				_clr_fwstate_(pmlmepriv, WIFI_UNDER_LINKING);
2150 				rtw_indicate_connect(adapter);
2151 			} else {
2152 				RTW_INFO("try_to_join, but select scanning queue fail, to_roam:%d\n", rtw_to_roam(adapter));
2153 
2154 				if (rtw_to_roam(adapter) != 0) {
2155 					struct sitesurvey_parm scan_parm;
2156 					u8 ssc_chk = rtw_sitesurvey_condition_check(adapter, _FALSE);
2157 
2158 					rtw_init_sitesurvey_parm(adapter, &scan_parm);
2159 					_rtw_memcpy(&scan_parm.ssid[0], &pmlmepriv->assoc_ssid, sizeof(NDIS_802_11_SSID));
2160 					scan_parm.ssid_num = 1;
2161 
2162 					if (rtw_dec_to_roam(adapter) == 0
2163 						|| (ssc_chk != SS_ALLOW && ssc_chk != SS_DENY_BUSY_TRAFFIC)
2164 						|| _SUCCESS != rtw_sitesurvey_cmd(adapter, &scan_parm)
2165 					   ) {
2166 						rtw_set_to_roam(adapter, 0);
2167 						rtw_free_assoc_resources(adapter, _TRUE);
2168 						rtw_indicate_disconnect(adapter, 0, _FALSE);
2169 					} else
2170 						pmlmepriv->to_join = _TRUE;
2171 				} else
2172 					rtw_indicate_disconnect(adapter, 0, _FALSE);
2173 				_clr_fwstate_(pmlmepriv, WIFI_UNDER_LINKING);
2174 			}
2175 		}
2176 	} else {
2177 		if (rtw_chk_roam_flags(adapter, RTW_ROAM_ACTIVE)
2178 		#if (defined(CONFIG_RTW_WNM) && defined(CONFIG_RTW_80211R))
2179 			|| rtw_wnm_btm_roam_triggered(adapter)
2180 		#endif
2181 		) {
2182 			if (check_fwstate(pmlmepriv, WIFI_STATION_STATE)
2183 			    && check_fwstate(pmlmepriv, WIFI_ASOC_STATE)) {
2184 				if (rtw_select_roaming_candidate(pmlmepriv) == _SUCCESS) {
2185 			#ifdef CONFIG_RTW_80211R
2186 					rtw_ft_start_roam(adapter,
2187 						(u8 *)pmlmepriv->roam_network->network.MacAddress);
2188 			#else
2189 					receive_disconnect(adapter, pmlmepriv->cur_network.network.MacAddress
2190 						, WLAN_REASON_ACTIVE_ROAM, _FALSE);
2191 			#endif
2192 				}
2193 			}
2194 		}
2195 	}
2196 
2197 	/* RTW_INFO("scan complete in %dms\n",rtw_get_passing_time_ms(pmlmepriv->scan_start_time)); */
2198 
2199 	_exit_critical_bh(&pmlmepriv->lock, &irqL);
2200 
2201 #ifdef CONFIG_P2P_PS
2202 	if (check_fwstate(pmlmepriv, WIFI_ASOC_STATE) == _TRUE)
2203 		p2p_ps_wk_cmd(adapter, P2P_PS_SCAN_DONE, 0);
2204 #endif /* CONFIG_P2P_PS */
2205 
2206 	rtw_mi_os_xmit_schedule(adapter);
2207 
2208 #ifdef CONFIG_DRVEXT_MODULE_WSC
2209 	drvext_surveydone_callback(&adapter->drvextpriv);
2210 #endif
2211 
2212 #ifdef DBG_CONFIG_ERROR_DETECT
2213 	{
2214 		struct mlme_ext_priv *pmlmeext = &adapter->mlmeextpriv;
2215 		if (pmlmeext->sitesurvey_res.bss_cnt == 0) {
2216 			/* rtw_hal_sreset_reset(adapter); */
2217 		}
2218 	}
2219 #endif
2220 
2221 #ifdef CONFIG_IOCTL_CFG80211
2222 	rtw_cfg80211_surveydone_event_callback(adapter);
2223 #endif /* CONFIG_IOCTL_CFG80211 */
2224 
2225 	rtw_indicate_scan_done(adapter, _FALSE);
2226 
2227 #if defined(CONFIG_CONCURRENT_MODE) && defined(CONFIG_IOCTL_CFG80211)
2228 	rtw_cfg80211_indicate_scan_done_for_buddy(adapter, _FALSE);
2229 #endif
2230 
2231 	if (parm->activate_ch_cnt) {
2232 		op_class_pref_apply_regulatory(adapter, REG_BEACON_HINT);
2233 		rtw_nlrtw_reg_beacon_hint_event(adapter);
2234 	}
2235 
2236 #ifdef CONFIG_RTW_MESH
2237 	#if CONFIG_RTW_MESH_OFFCH_CAND
2238 	if (rtw_mesh_offch_candidate_accepted(adapter)) {
2239 		u8 ch;
2240 
2241 		ch = rtw_mesh_select_operating_ch(adapter);
2242 		if (ch && pmlmepriv->cur_network.network.Configuration.DSConfig != ch) {
2243 			u8 ifbmp = rtw_mi_get_ap_mesh_ifbmp(adapter);
2244 
2245 			if (ifbmp) {
2246 				/* switch to selected channel */
2247 				rtw_change_bss_chbw_cmd(adapter, RTW_CMDF_DIRECTLY, ifbmp, 0, ch, REQ_BW_ORI, REQ_OFFSET_NONE);
2248 				issue_probereq_ex(adapter, &pmlmepriv->cur_network.network.mesh_id, NULL, 0, 0, 0, 0);
2249 			} else
2250 				rtw_warn_on(1);
2251 		}
2252 	}
2253 	#endif
2254 #endif /* CONFIG_RTW_MESH */
2255 
2256 #ifdef CONFIG_RTW_ACS
2257 	if (parm->acs) {
2258 		u8 ifbmp = rtw_mi_get_ap_mesh_ifbmp(adapter);
2259 
2260 		if (ifbmp)
2261 			rtw_change_bss_chbw_cmd(adapter, RTW_CMDF_DIRECTLY, ifbmp, 0, REQ_CH_INT_INFO, REQ_BW_ORI, REQ_OFFSET_NONE);
2262 	}
2263 #endif
2264 }
2265 
_rtw_sitesurvey_condition_check(const char * caller,_adapter * adapter,bool check_sc_interval)2266 u8 _rtw_sitesurvey_condition_check(const char *caller, _adapter *adapter, bool check_sc_interval)
2267 {
2268 	u8 ss_condition = SS_ALLOW;
2269 	struct mlme_priv *pmlmepriv = &adapter->mlmepriv;
2270 	struct registry_priv *registry_par = &adapter->registrypriv;
2271 
2272 
2273 #ifdef CONFIG_MP_INCLUDED
2274 	if (rtw_mp_mode_check(adapter)) {
2275 		RTW_INFO("%s ("ADPT_FMT") MP mode block Scan request\n", caller, ADPT_ARG(adapter));
2276 		ss_condition = SS_DENY_MP_MODE;
2277 		goto _exit;
2278 	}
2279 #endif
2280 
2281 #ifdef DBG_LA_MODE
2282 	if(registry_par->la_mode_en == 1 && MLME_IS_ASOC(adapter)) {
2283 		RTW_INFO("%s ("ADPT_FMT") LA debug mode block Scan request\n", caller, ADPT_ARG(adapter));
2284 		ss_condition = SS_DENY_LA_MODE;
2285 		goto _exit;
2286 	}
2287 #endif
2288 
2289 #ifdef CONFIG_RTW_REPEATER_SON
2290 	if (adapter->rtw_rson_scanstage == RSON_SCAN_PROCESS) {
2291 		RTW_INFO("%s ("ADPT_FMT") blocking scan for under rson scanning process\n", caller, ADPT_ARG(adapter));
2292 		ss_condition = SS_DENY_RSON_SCANING;
2293 		goto _exit;
2294 	}
2295 #endif
2296 #ifdef CONFIG_IOCTL_CFG80211
2297 	if (adapter_wdev_data(adapter)->block_scan == _TRUE) {
2298 		RTW_INFO("%s ("ADPT_FMT") wdev_priv.block_scan is set\n", caller, ADPT_ARG(adapter));
2299 		ss_condition = SS_DENY_BLOCK_SCAN;
2300 		goto _exit;
2301 	}
2302 #endif
2303 
2304 	if (adapter_to_dvobj(adapter)->scan_deny == _TRUE) {
2305 		RTW_INFO("%s ("ADPT_FMT") tpt mode, scan deny!\n", caller, ADPT_ARG(adapter));
2306 		ss_condition = SS_DENY_BLOCK_SCAN;
2307 		goto _exit;
2308 	}
2309 
2310 	if (rtw_is_scan_deny(adapter)) {
2311 		RTW_INFO("%s ("ADPT_FMT") : scan deny\n", caller, ADPT_ARG(adapter));
2312 		ss_condition = SS_DENY_BY_DRV;
2313 		goto _exit;
2314 	}
2315 
2316 #ifdef CONFIG_ADAPTIVITY_DENY_SCAN
2317 	if (adapter_to_rfctl(adapter)->adaptivity_en
2318 	    && rtw_phydm_get_edcca_flag(adapter)
2319 	    && rtw_is_2g_ch(GET_HAL_DATA(adapter)->current_channel)) {
2320 		RTW_WARN(FUNC_ADPT_FMT": Adaptivity block scan! (ch=%u)\n",
2321 			 FUNC_ADPT_ARG(adapter),
2322 			 GET_HAL_DATA(adapter)->current_channel);
2323 		ss_condition = SS_DENY_ADAPTIVITY;
2324 		goto _exit;
2325 	}
2326 #endif /* CONFIG_ADAPTIVITY_DENY_SCAN */
2327 
2328 	if (check_fwstate(pmlmepriv, WIFI_AP_STATE)){
2329 		if(check_fwstate(pmlmepriv, WIFI_UNDER_WPS)) {
2330 			RTW_INFO("%s ("ADPT_FMT") : scan abort!! AP mode process WPS\n", caller, ADPT_ARG(adapter));
2331 			ss_condition = SS_DENY_SELF_AP_UNDER_WPS;
2332 			goto _exit;
2333 		} else if (check_fwstate(pmlmepriv, WIFI_UNDER_LINKING) == _TRUE) {
2334 			RTW_INFO("%s ("ADPT_FMT") : scan abort!!AP mode under linking (fwstate=0x%x)\n",
2335 				caller, ADPT_ARG(adapter), pmlmepriv->fw_state);
2336 			ss_condition = SS_DENY_SELF_AP_UNDER_LINKING;
2337 			goto _exit;
2338 		} else if (check_fwstate(pmlmepriv, WIFI_UNDER_SURVEY) == _TRUE) {
2339 			RTW_INFO("%s ("ADPT_FMT") : scan abort!!AP mode under survey (fwstate=0x%x)\n",
2340 				caller, ADPT_ARG(adapter), pmlmepriv->fw_state);
2341 			ss_condition = SS_DENY_SELF_AP_UNDER_SURVEY;
2342 			goto _exit;
2343 		}
2344 	} else {
2345 		if (check_fwstate(pmlmepriv, WIFI_UNDER_LINKING) == _TRUE) {
2346 			RTW_INFO("%s ("ADPT_FMT") : scan abort!!STA mode under linking (fwstate=0x%x)\n",
2347 				caller, ADPT_ARG(adapter), pmlmepriv->fw_state);
2348 			ss_condition = SS_DENY_SELF_STA_UNDER_LINKING;
2349 			goto _exit;
2350 		} else if (check_fwstate(pmlmepriv, WIFI_UNDER_SURVEY) == _TRUE) {
2351 			RTW_INFO("%s ("ADPT_FMT") : scan abort!!STA mode under survey (fwstate=0x%x)\n",
2352 				caller, ADPT_ARG(adapter), pmlmepriv->fw_state);
2353 			ss_condition = SS_DENY_SELF_STA_UNDER_SURVEY;
2354 			goto _exit;
2355 		}
2356 	}
2357 
2358 #ifdef CONFIG_CONCURRENT_MODE
2359 	if (rtw_mi_buddy_check_fwstate(adapter, WIFI_UNDER_LINKING | WIFI_UNDER_WPS)) {
2360 		RTW_INFO("%s ("ADPT_FMT") : scan abort!! buddy_intf under linking or wps\n", caller, ADPT_ARG(adapter));
2361 		ss_condition = SS_DENY_BUDDY_UNDER_LINK_WPS;
2362 		goto _exit;
2363 
2364 	} else if (rtw_mi_buddy_check_fwstate(adapter, WIFI_UNDER_SURVEY)) {
2365 		RTW_INFO("%s ("ADPT_FMT") : scan abort!! buddy_intf under survey\n", caller, ADPT_ARG(adapter));
2366 		ss_condition = SS_DENY_BUDDY_UNDER_SURVEY;
2367 		goto _exit;
2368 	}
2369 #endif /* CONFIG_CONCURRENT_MODE */
2370 
2371 #ifdef RTW_BUSY_DENY_SCAN
2372 	/*
2373 	 * busy traffic check
2374 	 * Rules:
2375 	 * 1. If (scan interval <= BUSY_TRAFFIC_SCAN_DENY_PERIOD) always allow
2376 	 *    scan, otherwise goto rule 2.
2377 	 * 2. Deny scan if any interface is busy, otherwise allow scan.
2378 	 */
2379 	if (pmlmepriv->lastscantime
2380 	    && (rtw_get_passing_time_ms(pmlmepriv->lastscantime) >
2381 		registry_par->scan_interval_thr)
2382 	    && rtw_mi_busy_traffic_check(adapter)) {
2383 		RTW_WARN("%s ("ADPT_FMT") : scan abort!! BusyTraffic\n",
2384 			 caller, ADPT_ARG(adapter));
2385 		ss_condition = SS_DENY_BUSY_TRAFFIC;
2386 		goto _exit;
2387 	}
2388 #endif /* RTW_BUSY_DENY_SCAN */
2389 
2390 _exit:
2391 	return ss_condition;
2392 }
2393 
free_scanqueue(struct mlme_priv * pmlmepriv)2394 static void free_scanqueue(struct	mlme_priv *pmlmepriv)
2395 {
2396 	_irqL irqL, irqL0;
2397 	_queue *free_queue = &pmlmepriv->free_bss_pool;
2398 	_queue *scan_queue = &pmlmepriv->scanned_queue;
2399 	_list	*plist, *phead, *ptemp;
2400 
2401 
2402 	_enter_critical_bh(&scan_queue->lock, &irqL0);
2403 	_enter_critical_bh(&free_queue->lock, &irqL);
2404 
2405 	phead = get_list_head(scan_queue);
2406 	plist = get_next(phead);
2407 
2408 	while (plist != phead) {
2409 		ptemp = get_next(plist);
2410 		rtw_list_delete(plist);
2411 		rtw_list_insert_tail(plist, &free_queue->queue);
2412 		plist = ptemp;
2413 		pmlmepriv->num_of_scanned--;
2414 	}
2415 
2416 	_exit_critical_bh(&free_queue->lock, &irqL);
2417 	_exit_critical_bh(&scan_queue->lock, &irqL0);
2418 
2419 }
2420 
rtw_reset_rx_info(_adapter * adapter)2421 void rtw_reset_rx_info(_adapter *adapter)
2422 {
2423 	struct recv_priv  *precvpriv = &adapter->recvpriv;
2424 
2425 	precvpriv->dbg_rx_ampdu_drop_count = 0;
2426 	precvpriv->dbg_rx_ampdu_forced_indicate_count = 0;
2427 	precvpriv->dbg_rx_ampdu_loss_count = 0;
2428 	precvpriv->dbg_rx_dup_mgt_frame_drop_count = 0;
2429 	precvpriv->dbg_rx_ampdu_window_shift_cnt = 0;
2430 	precvpriv->dbg_rx_drop_count = 0;
2431 	precvpriv->dbg_rx_conflic_mac_addr_cnt = 0;
2432 }
2433 
2434 /*
2435 *rtw_free_assoc_resources: the caller has to lock pmlmepriv->lock
2436 */
rtw_free_assoc_resources(_adapter * adapter,u8 lock_scanned_queue)2437 void rtw_free_assoc_resources(_adapter *adapter, u8 lock_scanned_queue)
2438 {
2439 	_irqL irqL;
2440 	struct wlan_network *pwlan = NULL;
2441 	struct	mlme_priv *pmlmepriv = &adapter->mlmepriv;
2442 	struct wlan_network *tgt_network = &pmlmepriv->cur_network;
2443 
2444 
2445 #ifdef CONFIG_TDLS
2446 	struct tdls_info *ptdlsinfo = &adapter->tdlsinfo;
2447 #endif /* CONFIG_TDLS */
2448 
2449 
2450 	RTW_INFO("%s-"ADPT_FMT" tgt_network MacAddress=" MAC_FMT" ssid=%s\n",
2451 		__func__, ADPT_ARG(adapter), MAC_ARG(tgt_network->network.MacAddress), tgt_network->network.Ssid.Ssid);
2452 
2453 	if (check_fwstate(pmlmepriv, WIFI_STATION_STATE)) {
2454 		struct sta_info *psta;
2455 
2456 		psta = rtw_get_stainfo(&adapter->stapriv, tgt_network->network.MacAddress);
2457 
2458 #ifdef CONFIG_TDLS
2459 		rtw_free_all_tdls_sta(adapter, _TRUE);
2460 		rtw_reset_tdls_info(adapter);
2461 
2462 		if (ptdlsinfo->link_established == _TRUE)
2463 			rtw_tdls_cmd(adapter, NULL, TDLS_RS_RCR);
2464 #endif /* CONFIG_TDLS */
2465 
2466 		/* _enter_critical_bh(&(pstapriv->sta_hash_lock), &irqL); */
2467 		rtw_free_stainfo(adapter, psta);
2468 		/* _exit_critical_bh(&(pstapriv->sta_hash_lock), &irqL); */
2469 
2470 	}
2471 
2472 	if (check_fwstate(pmlmepriv, WIFI_ADHOC_STATE | WIFI_ADHOC_MASTER_STATE)) {
2473 		struct sta_info *psta;
2474 
2475 		rtw_free_all_stainfo(adapter);
2476 
2477 		psta = rtw_get_bcmc_stainfo(adapter);
2478 		/* _enter_critical_bh(&(pstapriv->sta_hash_lock), &irqL);		 */
2479 		rtw_free_stainfo(adapter, psta);
2480 		/* _exit_critical_bh(&(pstapriv->sta_hash_lock), &irqL);		 */
2481 
2482 		rtw_init_bcmc_stainfo(adapter);
2483 	}
2484 
2485 	if (lock_scanned_queue)
2486 		_enter_critical_bh(&(pmlmepriv->scanned_queue.lock), &irqL);
2487 
2488 	if (check_fwstate(pmlmepriv, WIFI_UNDER_WPS) || (pmlmepriv->wpa_phase == _TRUE)){
2489 		RTW_INFO("Dont free disconnecting network of scanned_queue due to uner %s %s phase\n\n",
2490 			check_fwstate(pmlmepriv, WIFI_UNDER_WPS) ? "WPS" : "",
2491 			(pmlmepriv->wpa_phase == _TRUE) ? "WPA" : "");
2492 	} else {
2493 		pwlan = _rtw_find_same_network(&pmlmepriv->scanned_queue, tgt_network);
2494 		if (pwlan) {
2495 			pwlan->fixed = _FALSE;
2496 
2497 			RTW_INFO("Free disconnecting network of scanned_queue\n");
2498 			rtw_free_network_nolock(adapter, pwlan);
2499 #ifdef CONFIG_P2P
2500 			if (!rtw_p2p_chk_state(&adapter->wdinfo, P2P_STATE_NONE)) {
2501 				rtw_set_scan_deny(adapter, 2000);
2502 				/* rtw_clear_scan_deny(adapter); */
2503 			}
2504 #endif /* CONFIG_P2P */
2505 		} else
2506 			RTW_ERR("Free disconnecting network of scanned_queue failed due to pwlan == NULL\n\n");
2507 	}
2508 
2509 	if ((check_fwstate(pmlmepriv, WIFI_ADHOC_MASTER_STATE) && (adapter->stapriv.asoc_sta_count == 1))
2510 	    /*||check_fwstate(pmlmepriv, WIFI_STATION_STATE)*/) {
2511 		if (pwlan)
2512 			rtw_free_network_nolock(adapter, pwlan);
2513 	}
2514 
2515 	if (lock_scanned_queue)
2516 		_exit_critical_bh(&(pmlmepriv->scanned_queue.lock), &irqL);
2517 
2518 	adapter->securitypriv.key_mask = 0;
2519 
2520 	rtw_reset_rx_info(adapter);
2521 
2522 
2523 }
2524 
2525 /*
2526 *rtw_indicate_connect: the caller has to lock pmlmepriv->lock
2527 */
rtw_indicate_connect(_adapter * padapter)2528 void rtw_indicate_connect(_adapter *padapter)
2529 {
2530 	struct mlme_priv	*pmlmepriv = &padapter->mlmepriv;
2531 
2532 	pmlmepriv->to_join = _FALSE;
2533 
2534 	if (!check_fwstate(&padapter->mlmepriv, WIFI_ASOC_STATE)) {
2535 
2536 		set_fwstate(pmlmepriv, WIFI_ASOC_STATE);
2537 
2538 		rtw_led_control(padapter, LED_CTL_LINK);
2539 
2540 		rtw_os_indicate_connect(padapter);
2541 
2542 		#ifdef CONFIG_RTW_WDS
2543 		if (MLME_IS_STA(padapter))
2544 			rtw_wds_gptr_tbl_init(padapter);
2545 		#endif
2546 	}
2547 
2548 	rtw_set_to_roam(padapter, 0);
2549 	if (!MLME_IS_AP(padapter) && !MLME_IS_MESH(padapter))
2550 		rtw_mi_set_scan_deny(padapter, 3000);
2551 
2552 
2553 }
2554 
2555 
2556 /*
2557 *rtw_indicate_disconnect: the caller has to lock pmlmepriv->lock
2558 */
rtw_indicate_disconnect(_adapter * padapter,u16 reason,u8 locally_generated)2559 void rtw_indicate_disconnect(_adapter *padapter, u16 reason, u8 locally_generated)
2560 {
2561 	struct mlme_priv *pmlmepriv = &padapter->mlmepriv;
2562 	struct mlme_ext_priv *pmlmeext = &(padapter->mlmeextpriv);
2563 	struct mlme_ext_info *pmlmeinfo = &(pmlmeext->mlmext_info);
2564 	WLAN_BSSID_EX	*cur_network = &(pmlmeinfo->network);
2565 #ifdef CONFIG_WAPI_SUPPORT
2566 	struct sta_info *psta;
2567 	struct sta_priv *pstapriv = &padapter->stapriv;
2568 #endif
2569 	u8 *wps_ie = NULL;
2570 	uint wpsie_len = 0;
2571 
2572 	if (check_fwstate(pmlmepriv, WIFI_UNDER_WPS))
2573 		pmlmepriv->wpa_phase = _TRUE;
2574 
2575 	_clr_fwstate_(pmlmepriv, WIFI_UNDER_LINKING | WIFI_UNDER_WPS | WIFI_OP_CH_SWITCHING | WIFI_UNDER_KEY_HANDSHAKE);
2576 
2577 	/* force to clear cur_network_scanned's SELECTED REGISTRAR */
2578 	if (pmlmepriv->cur_network_scanned) {
2579 		WLAN_BSSID_EX	*current_joined_bss = &(pmlmepriv->cur_network_scanned->network);
2580 		if (current_joined_bss) {
2581 			wps_ie = rtw_get_wps_ie(current_joined_bss->IEs + _FIXED_IE_LENGTH_,
2582 				current_joined_bss->IELength - _FIXED_IE_LENGTH_, NULL, &wpsie_len);
2583 			if (wps_ie && wpsie_len > 0) {
2584 				u8 *attr = NULL;
2585 				u32 attr_len;
2586 				attr = rtw_get_wps_attr(wps_ie, wpsie_len, WPS_ATTR_SELECTED_REGISTRAR,
2587 							NULL, &attr_len);
2588 				if (attr)
2589 					*(attr + 4) = 0;
2590 			}
2591 		}
2592 	}
2593 	/* RTW_INFO("clear wps when %s\n", __func__); */
2594 
2595 	if (rtw_to_roam(padapter) > 0)
2596 		_clr_fwstate_(pmlmepriv, WIFI_ASOC_STATE);
2597 
2598 #ifdef CONFIG_WAPI_SUPPORT
2599 	psta = rtw_get_stainfo(pstapriv, cur_network->MacAddress);
2600 	if (check_fwstate(pmlmepriv, WIFI_STATION_STATE))
2601 		rtw_wapi_return_one_sta_info(padapter, psta->cmn.mac_addr);
2602 	else if (check_fwstate(pmlmepriv, WIFI_ADHOC_STATE) ||
2603 		 check_fwstate(pmlmepriv, WIFI_ADHOC_MASTER_STATE))
2604 		rtw_wapi_return_all_sta_info(padapter);
2605 #endif
2606 
2607 	if (check_fwstate(&padapter->mlmepriv, WIFI_ASOC_STATE)
2608 	    || (rtw_to_roam(padapter) <= 0)
2609 	   ) {
2610 		#ifdef CONFIG_RTW_WDS
2611 		adapter_set_use_wds(padapter, 0);
2612 		rtw_wds_gptr_tbl_unregister(padapter);
2613 		#endif
2614 		#ifdef CONFIG_RTW_MULTI_AP
2615 		padapter->multi_ap = 0;
2616 		#endif
2617 
2618 #ifdef CONFIG_RTW_TOKEN_BASED_XMIT
2619 		if (ATOMIC_READ(&padapter->tbtx_tx_pause) == _TRUE) {
2620 			ATOMIC_SET(&padapter->tbtx_tx_pause, _FALSE);
2621 			rtw_tx_control_cmd(padapter);
2622 		}
2623 #endif
2624 
2625 		rtw_os_indicate_disconnect(padapter, reason, locally_generated);
2626 
2627 		/* set ips_deny_time to avoid enter IPS before LPS leave */
2628 		rtw_set_ips_deny(padapter, 3000);
2629 
2630 		_clr_fwstate_(pmlmepriv, WIFI_ASOC_STATE);
2631 
2632 		rtw_led_control(padapter, LED_CTL_NO_LINK);
2633 
2634 		rtw_clear_scan_deny(padapter);
2635 	}
2636 
2637 #ifdef CONFIG_P2P_PS
2638 	p2p_ps_wk_cmd(padapter, P2P_PS_DISABLE, 1);
2639 #endif /* CONFIG_P2P_PS */
2640 
2641 #ifdef CONFIG_LPS
2642 	rtw_lps_ctrl_wk_cmd(padapter, LPS_CTRL_DISCONNECT, 0);
2643 #endif
2644 
2645 #ifdef CONFIG_BEAMFORMING
2646 	beamforming_wk_cmd(padapter, BEAMFORMING_CTRL_LEAVE, cur_network->MacAddress, ETH_ALEN, 1);
2647 #endif /*CONFIG_BEAMFORMING*/
2648 
2649 }
2650 
rtw_indicate_scan_done(_adapter * padapter,bool aborted)2651 inline void rtw_indicate_scan_done(_adapter *padapter, bool aborted)
2652 {
2653 	RTW_INFO(FUNC_ADPT_FMT"\n", FUNC_ADPT_ARG(padapter));
2654 
2655 	rtw_os_indicate_scan_done(padapter, aborted);
2656 
2657 #ifdef CONFIG_IPS
2658 	if (is_primary_adapter(padapter)
2659 	    && (_FALSE == adapter_to_pwrctl(padapter)->bInSuspend)
2660 	    && (check_fwstate(&padapter->mlmepriv, WIFI_ASOC_STATE | WIFI_UNDER_LINKING) == _FALSE)) {
2661 		struct pwrctrl_priv *pwrpriv;
2662 
2663 		pwrpriv = adapter_to_pwrctl(padapter);
2664 		rtw_set_ips_deny(padapter, 0);
2665 #ifdef CONFIG_IPS_CHECK_IN_WD
2666 		_set_timer(&adapter_to_dvobj(padapter)->dynamic_chk_timer, 1);
2667 #else /* !CONFIG_IPS_CHECK_IN_WD */
2668 		_rtw_set_pwr_state_check_timer(pwrpriv, 1);
2669 #endif /* !CONFIG_IPS_CHECK_IN_WD */
2670 	}
2671 #endif /* CONFIG_IPS */
2672 }
2673 
_rtw_wait_scan_done(_adapter * adapter,u8 abort,u32 timeout_ms)2674 static u32 _rtw_wait_scan_done(_adapter *adapter, u8 abort, u32 timeout_ms)
2675 {
2676 	systime start;
2677 	u32 pass_ms;
2678 	struct mlme_priv *pmlmepriv = &(adapter->mlmepriv);
2679 	struct mlme_ext_priv *pmlmeext = &(adapter->mlmeextpriv);
2680 
2681 	start = rtw_get_current_time();
2682 
2683 	pmlmeext->scan_abort = abort;
2684 
2685 	while (check_fwstate(pmlmepriv, WIFI_UNDER_SURVEY)
2686 	       && rtw_get_passing_time_ms(start) <= timeout_ms) {
2687 
2688 		if (RTW_CANNOT_RUN(adapter))
2689 			break;
2690 
2691 		RTW_INFO(FUNC_NDEV_FMT"fw_state=WIFI_UNDER_SURVEY!\n", FUNC_NDEV_ARG(adapter->pnetdev));
2692 		rtw_msleep_os(20);
2693 	}
2694 
2695 	if (_TRUE == abort) {
2696 		if (check_fwstate(pmlmepriv, WIFI_UNDER_SURVEY)) {
2697 			if (!RTW_CANNOT_RUN(adapter))
2698 				RTW_INFO(FUNC_NDEV_FMT"waiting for scan_abort time out!\n", FUNC_NDEV_ARG(adapter->pnetdev));
2699 #ifdef CONFIG_PLATFORM_MSTAR
2700 			/*_clr_fwstate_(pmlmepriv, WIFI_UNDER_SURVEY);*/
2701 			set_survey_timer(pmlmeext, 0);
2702 			mlme_set_scan_to_timer(pmlmepriv, 50);
2703 #endif
2704 			rtw_indicate_scan_done(adapter, _TRUE);
2705 		}
2706 	}
2707 
2708 	pmlmeext->scan_abort = _FALSE;
2709 	pass_ms = rtw_get_passing_time_ms(start);
2710 
2711 	return pass_ms;
2712 
2713 }
2714 
rtw_scan_wait_completed(_adapter * adapter)2715 void rtw_scan_wait_completed(_adapter *adapter)
2716 {
2717 	struct mlme_ext_priv *pmlmeext = &adapter->mlmeextpriv;
2718 	struct ss_res *ss = &pmlmeext->sitesurvey_res;
2719 
2720 	_rtw_wait_scan_done(adapter, _FALSE, ss->scan_timeout_ms);
2721 }
2722 
rtw_scan_abort_timeout(_adapter * adapter,u32 timeout_ms)2723 u32 rtw_scan_abort_timeout(_adapter *adapter, u32 timeout_ms)
2724 {
2725 	return _rtw_wait_scan_done(adapter, _TRUE, timeout_ms);
2726 }
2727 
rtw_scan_abort_no_wait(_adapter * adapter)2728 void rtw_scan_abort_no_wait(_adapter *adapter)
2729 {
2730 	struct mlme_priv *pmlmepriv = &(adapter->mlmepriv);
2731 	struct mlme_ext_priv *pmlmeext = &(adapter->mlmeextpriv);
2732 
2733 	if (check_fwstate(pmlmepriv, WIFI_UNDER_SURVEY))
2734 		pmlmeext->scan_abort = _TRUE;
2735 }
2736 
rtw_scan_abort(_adapter * adapter)2737 void rtw_scan_abort(_adapter *adapter)
2738 {
2739 	rtw_scan_abort_timeout(adapter, 200);
2740 }
2741 
_rtw_wait_join_done(_adapter * adapter,u8 abort,u32 timeout_ms)2742 static u32 _rtw_wait_join_done(_adapter *adapter, u8 abort, u32 timeout_ms)
2743 {
2744 	systime start;
2745 	u32 pass_ms;
2746 	struct mlme_priv *pmlmepriv = &(adapter->mlmepriv);
2747 	struct mlme_ext_priv *pmlmeext = &(adapter->mlmeextpriv);
2748 
2749 	start = rtw_get_current_time();
2750 
2751 	pmlmeext->join_abort = abort;
2752 	if (abort)
2753 		set_link_timer(pmlmeext, 1);
2754 
2755 	while (rtw_get_passing_time_ms(start) <= timeout_ms
2756 		&& (check_fwstate(pmlmepriv, WIFI_UNDER_LINKING)
2757 			#ifdef CONFIG_IOCTL_CFG80211
2758 			|| rtw_cfg80211_is_connect_requested(adapter)
2759 			#endif
2760 			)
2761 	) {
2762 		if (RTW_CANNOT_RUN(adapter))
2763 			break;
2764 
2765 		RTW_INFO(FUNC_ADPT_FMT" linking...\n", FUNC_ADPT_ARG(adapter));
2766 		rtw_msleep_os(20);
2767 	}
2768 
2769 	if (abort) {
2770 		if (check_fwstate(pmlmepriv, WIFI_UNDER_LINKING)
2771 			#ifdef CONFIG_IOCTL_CFG80211
2772 			|| rtw_cfg80211_is_connect_requested(adapter)
2773 			#endif
2774 		) {
2775 			if (!RTW_CANNOT_RUN(adapter))
2776 				RTW_INFO(FUNC_ADPT_FMT" waiting for join_abort time out!\n", FUNC_ADPT_ARG(adapter));
2777 		}
2778 	}
2779 
2780 	pmlmeext->join_abort = 0;
2781 	pass_ms = rtw_get_passing_time_ms(start);
2782 
2783 	return pass_ms;
2784 }
2785 
rtw_join_abort_timeout(_adapter * adapter,u32 timeout_ms)2786 u32 rtw_join_abort_timeout(_adapter *adapter, u32 timeout_ms)
2787 {
2788 	return _rtw_wait_join_done(adapter, _TRUE, timeout_ms);
2789 }
2790 
rtw_joinbss_update_stainfo(_adapter * padapter,struct wlan_network * pnetwork)2791 static struct sta_info *rtw_joinbss_update_stainfo(_adapter *padapter, struct wlan_network *pnetwork)
2792 {
2793 	int i;
2794 	struct sta_info *psta = NULL;
2795 	struct recv_reorder_ctrl *preorder_ctrl;
2796 	struct sta_priv *pstapriv = &padapter->stapriv;
2797 	struct mlme_ext_priv	*pmlmeext = &padapter->mlmeextpriv;
2798 #if defined(CONFIG_RTS_FULL_BW) || defined(CONFIG_RTW_MULTI_AP)
2799 	struct	mlme_priv	*pmlmepriv = &(padapter->mlmepriv);
2800 #endif
2801 #ifdef CONFIG_RTS_FULL_BW
2802 	struct wlan_network  *cur_network = &(pmlmepriv->cur_network);
2803 #endif
2804 
2805 	psta = rtw_get_stainfo(pstapriv, pnetwork->network.MacAddress);
2806 	if (psta == NULL)
2807 		psta = rtw_alloc_stainfo(pstapriv, pnetwork->network.MacAddress);
2808 
2809 	if (psta) { /* update ptarget_sta */
2810 		RTW_INFO("%s\n", __FUNCTION__);
2811 
2812 		psta->cmn.aid  = pnetwork->join_res;
2813 
2814 		update_sta_info(padapter, psta);
2815 
2816 		/* update station supportRate */
2817 		psta->bssratelen = rtw_get_rateset_len(pnetwork->network.SupportedRates);
2818 		_rtw_memcpy(psta->bssrateset, pnetwork->network.SupportedRates, psta->bssratelen);
2819 		rtw_hal_update_sta_ra_info(padapter, psta);
2820 
2821 		psta->wireless_mode = pmlmeext->cur_wireless_mode;
2822 		rtw_hal_update_sta_wset(padapter, psta);
2823 
2824 		/* sta mode */
2825 		rtw_hal_set_odm_var(padapter, HAL_ODM_STA_INFO, psta, _TRUE);
2826 
2827 		/* security related */
2828 #ifdef CONFIG_RTW_80211R
2829 		if ((padapter->securitypriv.dot11AuthAlgrthm == dot11AuthAlgrthm_8021X)
2830 			&& (psta->ft_pairwise_key_installed == _FALSE)) {
2831 #else
2832 		if (padapter->securitypriv.dot11AuthAlgrthm == dot11AuthAlgrthm_8021X) {
2833 #endif
2834 			u8 *ie;
2835 			sint ie_len;
2836 			u8 mfp_opt = MFP_NO;
2837 			u8 spp_opt = 0;
2838 
2839 			padapter->securitypriv.binstallGrpkey = _FALSE;
2840 			padapter->securitypriv.busetkipkey = _FALSE;
2841 			padapter->securitypriv.bgrpkey_handshake = _FALSE;
2842 
2843 			ie = rtw_get_ie(pnetwork->network.IEs + _BEACON_IE_OFFSET_, WLAN_EID_RSN
2844 				, &ie_len, (pnetwork->network.IELength - _BEACON_IE_OFFSET_));
2845 			if (ie && ie_len > 0
2846 				&& rtw_parse_wpa2_ie(ie, ie_len + 2, NULL, NULL, NULL, NULL, &mfp_opt, &spp_opt) == _SUCCESS
2847 			) {
2848 				if (padapter->securitypriv.mfp_opt >= MFP_OPTIONAL && mfp_opt >= MFP_OPTIONAL)
2849 					psta->flags |= WLAN_STA_MFP;
2850 			}
2851 
2852 			if (padapter->securitypriv.dot11PrivacyAlgrthm != _NO_PRIVACY_ ) {
2853 				/*check if amsdu is allowed */
2854 				if (rtw_check_amsdu_disable(padapter->registrypriv.amsdu_mode, spp_opt) == _TRUE)
2855 					psta->flags |= WLAN_STA_AMSDU_DISABLE;
2856 			}
2857 			psta->ieee8021x_blocked = _TRUE;
2858 			psta->dot118021XPrivacy = padapter->securitypriv.dot11PrivacyAlgrthm;
2859 
2860 			_rtw_memset((u8 *)&psta->dot118021x_UncstKey, 0, sizeof(union Keytype));
2861 			_rtw_memset((u8 *)&psta->dot11tkiprxmickey, 0, sizeof(union Keytype));
2862 			_rtw_memset((u8 *)&psta->dot11tkiptxmickey, 0, sizeof(union Keytype));
2863 		}
2864 
2865 		/*	Commented by Albert 2012/07/21 */
2866 		/*	When doing the WPS, the wps_ie_len won't equal to 0 */
2867 		/*	And the Wi-Fi driver shouldn't allow the data packet to be tramsmitted. */
2868 		if (padapter->securitypriv.wps_ie_len != 0) {
2869 			psta->ieee8021x_blocked = _TRUE;
2870 			padapter->securitypriv.wps_ie_len = 0;
2871 		}
2872 
2873 
2874 		/* for A-MPDU Rx reordering buffer control for sta_info */
2875 		/* if A-MPDU Rx is enabled, reseting  rx_ordering_ctrl wstart_b(indicate_seq) to default value=0xffff */
2876 		/* todo: check if AP can send A-MPDU packets */
2877 		for (i = 0; i < 16 ; i++) {
2878 			/* preorder_ctrl = &precvpriv->recvreorder_ctrl[i]; */
2879 			preorder_ctrl = &psta->recvreorder_ctrl[i];
2880 			preorder_ctrl->enable = _FALSE;
2881 			preorder_ctrl->indicate_seq = 0xffff;
2882 			rtw_clear_bit(RTW_RECV_ACK_OR_TIMEOUT, &preorder_ctrl->rec_abba_rsp_ack);
2883 			#ifdef DBG_RX_SEQ
2884 			RTW_INFO("DBG_RX_SEQ "FUNC_ADPT_FMT" tid:%u SN_CLEAR indicate_seq:%u preorder_ctrl->rec_abba_rsp_ack:%lu\n"
2885 				, FUNC_ADPT_ARG(padapter)
2886 				, i
2887 				, preorder_ctrl->indicate_seq
2888 				,preorder_ctrl->rec_abba_rsp_ack
2889 				);
2890 			#endif
2891 			preorder_ctrl->wend_b = 0xffff;
2892 			preorder_ctrl->wsize_b = 64;/* max_ampdu_sz; */ /* ex. 32(kbytes) -> wsize_b=32 */
2893 			preorder_ctrl->ampdu_size = RX_AMPDU_SIZE_INVALID;
2894 		}
2895 	}
2896 
2897 #ifdef	CONFIG_RTW_80211K
2898 	_rtw_memcpy(&psta->rm_en_cap, pnetwork->network.PhyInfo.rm_en_cap, 5);
2899 #endif
2900 #ifdef CONFIG_RTW_MULTI_AP
2901 	if (padapter->multi_ap & MULTI_AP_BACKHAUL_STA) {
2902 		u8 multi_ap = rtw_get_multi_ap_ie_ext(pmlmepriv->assoc_rsp + sizeof(struct rtw_ieee80211_hdr_3addr) + 6
2903 				, pmlmepriv->assoc_rsp_len - sizeof(struct rtw_ieee80211_hdr_3addr) - 6);
2904 
2905 		if (multi_ap & MULTI_AP_BACKHAUL_BSS) /* backhaul bss, enable WDS */
2906 			psta->flags |= WLAN_STA_MULTI_AP | WLAN_STA_WDS;
2907 		else if (multi_ap & MULTI_AP_FRONTHAUL_BSS) /* fronthaul bss only */
2908 			psta->flags |= WLAN_STA_MULTI_AP;
2909 	}
2910 #endif
2911 #ifdef CONFIG_RTS_FULL_BW
2912 	rtw_parse_sta_vendor_ie_8812(padapter, psta, BSS_EX_TLV_IES(&cur_network->network), BSS_EX_TLV_IES_LEN(&cur_network->network));
2913 #endif
2914 	return psta;
2915 
2916 }
2917 
2918 /* pnetwork : returns from rtw_joinbss_event_callback
2919  * ptarget_wlan: found from scanned_queue */
2920 static void rtw_joinbss_update_network(_adapter *padapter, struct wlan_network *ptarget_wlan, struct wlan_network  *pnetwork)
2921 {
2922 	struct mlme_priv	*pmlmepriv = &(padapter->mlmepriv);
2923 	struct security_priv *psecuritypriv = &padapter->securitypriv;
2924 	struct wlan_network  *cur_network = &(pmlmepriv->cur_network);
2925 	sint tmp_fw_state = 0x0;
2926 
2927 	RTW_INFO("%s\n", __FUNCTION__);
2928 
2929 	/* why not use ptarget_wlan?? */
2930 	_rtw_memcpy(&cur_network->network, &pnetwork->network, pnetwork->network.Length);
2931 	/* some IEs in pnetwork is wrong, so we should use ptarget_wlan IEs */
2932 	cur_network->network.IELength = ptarget_wlan->network.IELength;
2933 	_rtw_memcpy(&cur_network->network.IEs[0], &ptarget_wlan->network.IEs[0], MAX_IE_SZ);
2934 
2935 	cur_network->aid = pnetwork->join_res;
2936 
2937 
2938 #ifdef CONFIG_NEW_SIGNAL_STAT_PROCESS
2939 	rtw_set_signal_stat_timer(&padapter->recvpriv);
2940 #endif
2941 	padapter->recvpriv.signal_strength = ptarget_wlan->network.PhyInfo.SignalStrength;
2942 	padapter->recvpriv.signal_qual = ptarget_wlan->network.PhyInfo.SignalQuality;
2943 	/* the ptarget_wlan->network.Rssi is raw data, we use ptarget_wlan->network.PhyInfo.SignalStrength instead (has scaled) */
2944 	padapter->recvpriv.rssi = translate_percentage_to_dbm(ptarget_wlan->network.PhyInfo.SignalStrength);
2945 #if defined(DBG_RX_SIGNAL_DISPLAY_PROCESSING) && 1
2946 	RTW_INFO(FUNC_ADPT_FMT" signal_strength:%3u, rssi:%3d, signal_qual:%3u"
2947 		 "\n"
2948 		 , FUNC_ADPT_ARG(padapter)
2949 		 , padapter->recvpriv.signal_strength
2950 		 , padapter->recvpriv.rssi
2951 		 , padapter->recvpriv.signal_qual
2952 		);
2953 #endif
2954 #ifdef CONFIG_NEW_SIGNAL_STAT_PROCESS
2955 	rtw_set_signal_stat_timer(&padapter->recvpriv);
2956 #endif
2957 
2958 	/* update fw_state */ /* will clr WIFI_UNDER_LINKING here indirectly */
2959 
2960 	switch (pnetwork->network.InfrastructureMode) {
2961 	case Ndis802_11Infrastructure:
2962 		/* Check encryption */
2963 		if (psecuritypriv->dot11AuthAlgrthm == dot11AuthAlgrthm_8021X)
2964 			tmp_fw_state = tmp_fw_state | WIFI_UNDER_KEY_HANDSHAKE;
2965 
2966 		if (check_fwstate(pmlmepriv, WIFI_UNDER_WPS))
2967 			tmp_fw_state = tmp_fw_state | WIFI_UNDER_WPS;
2968 
2969 		init_fwstate(pmlmepriv, WIFI_STATION_STATE | tmp_fw_state);
2970 
2971 		break;
2972 	case Ndis802_11IBSS:
2973 		/*pmlmepriv->fw_state = WIFI_ADHOC_STATE;*/
2974 		init_fwstate(pmlmepriv, WIFI_ADHOC_STATE);
2975 		break;
2976 	default:
2977 		/*pmlmepriv->fw_state = WIFI_NULL_STATE;*/
2978 		init_fwstate(pmlmepriv, WIFI_NULL_STATE);
2979 		break;
2980 	}
2981 
2982 	rtw_update_protection(padapter, (cur_network->network.IEs) + sizeof(NDIS_802_11_FIXED_IEs),
2983 			      (cur_network->network.IELength));
2984 
2985 #ifdef CONFIG_80211N_HT
2986 	rtw_update_ht_cap(padapter, cur_network->network.IEs, cur_network->network.IELength, (u8) cur_network->network.Configuration.DSConfig);
2987 #endif
2988 }
2989 
2990 /* Notes: the fucntion could be > passive_level (the same context as Rx tasklet)
2991  * pnetwork : returns from rtw_joinbss_event_callback
2992  * ptarget_wlan: found from scanned_queue
2993  * if join_res > 0, for (fw_state==WIFI_STATION_STATE), we check if  "ptarget_sta" & "ptarget_wlan" exist.
2994  * if join_res > 0, for (fw_state==WIFI_ADHOC_STATE), we only check if "ptarget_wlan" exist.
2995  * if join_res > 0, update "cur_network->network" from "pnetwork->network" if (ptarget_wlan !=NULL).
2996  */
2997 /* #define REJOIN */
2998 void rtw_joinbss_event_prehandle(_adapter *adapter, u8 *pbuf, u16 status)
2999 {
3000 	_irqL irqL;
3001 	static u8 retry = 0;
3002 	struct sta_info *ptarget_sta = NULL, *pcur_sta = NULL;
3003 	struct	sta_priv *pstapriv = &adapter->stapriv;
3004 	struct	mlme_priv	*pmlmepriv = &(adapter->mlmepriv);
3005 	struct wlan_network	*pnetwork	= (struct wlan_network *)pbuf;
3006 	struct wlan_network	*cur_network = &(pmlmepriv->cur_network);
3007 	struct wlan_network	*pcur_wlan = NULL, *ptarget_wlan = NULL;
3008 	unsigned int		the_same_macaddr = _FALSE;
3009 
3010 	rtw_get_encrypt_decrypt_from_registrypriv(adapter);
3011 
3012 	the_same_macaddr = _rtw_memcmp(pnetwork->network.MacAddress, cur_network->network.MacAddress, ETH_ALEN);
3013 
3014 	pnetwork->network.Length = get_WLAN_BSSID_EX_sz(&pnetwork->network);
3015 	if (pnetwork->network.Length > sizeof(WLAN_BSSID_EX))
3016 		goto exit;
3017 
3018 	_enter_critical_bh(&pmlmepriv->lock, &irqL);
3019 
3020 	pmlmepriv->LinkDetectInfo.TrafficTransitionCount = 0;
3021 	pmlmepriv->LinkDetectInfo.LowPowerTransitionCount = 0;
3022 
3023 
3024 	if (pnetwork->join_res > 0) {
3025 		_enter_critical_bh(&(pmlmepriv->scanned_queue.lock), &irqL);
3026 		retry = 0;
3027 		if (check_fwstate(pmlmepriv, WIFI_UNDER_LINKING)) {
3028 			/* s1. find ptarget_wlan */
3029 			if (check_fwstate(pmlmepriv, WIFI_ASOC_STATE)) {
3030 				if (the_same_macaddr == _TRUE)
3031 					ptarget_wlan = _rtw_find_network(&pmlmepriv->scanned_queue, cur_network->network.MacAddress);
3032 				else {
3033 					pcur_wlan = _rtw_find_network(&pmlmepriv->scanned_queue, cur_network->network.MacAddress);
3034 					if (pcur_wlan)
3035 						pcur_wlan->fixed = _FALSE;
3036 
3037 					pcur_sta = rtw_get_stainfo(pstapriv, cur_network->network.MacAddress);
3038 					if (pcur_sta) {
3039 						/* _enter_critical_bh(&(pstapriv->sta_hash_lock), &irqL2); */
3040 						rtw_free_stainfo(adapter,  pcur_sta);
3041 						/* _exit_critical_bh(&(pstapriv->sta_hash_lock), &irqL2); */
3042 					}
3043 
3044 					ptarget_wlan = _rtw_find_network(&pmlmepriv->scanned_queue, pnetwork->network.MacAddress);
3045 					if (check_fwstate(pmlmepriv, WIFI_STATION_STATE) == _TRUE) {
3046 						if (ptarget_wlan)
3047 							ptarget_wlan->fixed = _TRUE;
3048 					}
3049 				}
3050 
3051 			} else {
3052 				ptarget_wlan = _rtw_find_same_network(&pmlmepriv->scanned_queue, pnetwork);
3053 				if (check_fwstate(pmlmepriv, WIFI_STATION_STATE) == _TRUE) {
3054 					if (ptarget_wlan)
3055 						ptarget_wlan->fixed = _TRUE;
3056 				}
3057 			}
3058 
3059 			/* s2. update cur_network */
3060 			if (ptarget_wlan)
3061 				rtw_joinbss_update_network(adapter, ptarget_wlan, pnetwork);
3062 			else {
3063 				RTW_PRINT("Can't find ptarget_wlan when joinbss_event callback\n");
3064 				_exit_critical_bh(&(pmlmepriv->scanned_queue.lock), &irqL);
3065 				goto ignore_joinbss_callback;
3066 			}
3067 
3068 
3069 			/* s3. find ptarget_sta & update ptarget_sta after update cur_network only for station mode */
3070 			if (check_fwstate(pmlmepriv, WIFI_STATION_STATE) == _TRUE) {
3071 				ptarget_sta = rtw_joinbss_update_stainfo(adapter, pnetwork);
3072 				if (ptarget_sta == NULL) {
3073 					RTW_ERR("Can't update stainfo when joinbss_event callback\n");
3074 					_exit_critical_bh(&(pmlmepriv->scanned_queue.lock), &irqL);
3075 					goto ignore_joinbss_callback;
3076 				}
3077 
3078 				/* Queue TX packets before FW/HW ready */
3079 				/* clear in mlmeext_joinbss_event_callback() */
3080 				rtw_xmit_queue_set(ptarget_sta);
3081 			}
3082 
3083 			/* s4. indicate connect			 */
3084 			if (MLME_IS_STA(adapter) || MLME_IS_ADHOC(adapter)) {
3085 				pmlmepriv->cur_network_scanned = ptarget_wlan;
3086 				rtw_indicate_connect(adapter);
3087 			}
3088 
3089 			/* s5. Cancle assoc_timer					 */
3090 			_cancel_timer_ex(&pmlmepriv->assoc_timer);
3091 
3092 
3093 		} else {
3094 			_exit_critical_bh(&(pmlmepriv->scanned_queue.lock), &irqL);
3095 			goto ignore_joinbss_callback;
3096 		}
3097 
3098 		_exit_critical_bh(&(pmlmepriv->scanned_queue.lock), &irqL);
3099 
3100 	} else if (pnetwork->join_res == -4) {
3101 		rtw_reset_securitypriv(adapter);
3102 		pmlmepriv->join_status = status;
3103 		_set_timer(&pmlmepriv->assoc_timer, 1);
3104 
3105 		/* rtw_free_assoc_resources(adapter, _TRUE); */
3106 
3107 		if ((check_fwstate(pmlmepriv, WIFI_UNDER_LINKING)) == _TRUE) {
3108 			_clr_fwstate_(pmlmepriv, WIFI_UNDER_LINKING);
3109 		}
3110 
3111 	} else { /* if join_res < 0 (join fails), then try again */
3112 
3113 #ifdef REJOIN
3114 		res = _FAIL;
3115 		if (retry < 2) {
3116 			res = rtw_select_and_join_from_scanned_queue(pmlmepriv);
3117 		}
3118 
3119 		if (res == _SUCCESS) {
3120 			/* extend time of assoc_timer */
3121 			_set_timer(&pmlmepriv->assoc_timer, MAX_JOIN_TIMEOUT);
3122 			retry++;
3123 		} else if (res == 2) { /* there is no need to wait for join */
3124 			_clr_fwstate_(pmlmepriv, WIFI_UNDER_LINKING);
3125 			rtw_indicate_connect(adapter);
3126 		} else {
3127 #endif
3128 			pmlmepriv->join_status = status;
3129 			_set_timer(&pmlmepriv->assoc_timer, 1);
3130 			/* rtw_free_assoc_resources(adapter, _TRUE); */
3131 			_clr_fwstate_(pmlmepriv, WIFI_UNDER_LINKING);
3132 
3133 #ifdef REJOIN
3134 			retry = 0;
3135 		}
3136 #endif
3137 	}
3138 
3139 ignore_joinbss_callback:
3140 	_exit_critical_bh(&pmlmepriv->lock, &irqL);
3141 
3142 exit:
3143 	return;
3144 }
3145 
3146 void rtw_joinbss_event_callback(_adapter *adapter, u8 *pbuf)
3147 {
3148 	struct wlan_network	*pnetwork	= (struct wlan_network *)pbuf;
3149 
3150 
3151 	mlmeext_joinbss_event_callback(adapter, pnetwork->join_res);
3152 
3153 	rtw_mi_os_xmit_schedule(adapter);
3154 
3155 }
3156 
3157 void rtw_sta_media_status_rpt(_adapter *adapter, struct sta_info *sta, bool connected)
3158 {
3159 	struct macid_ctl_t *macid_ctl = &adapter->dvobj->macid_ctl;
3160 	bool miracast_enabled = 0;
3161 	bool miracast_sink = 0;
3162 	u8 role = H2C_MSR_ROLE_RSVD;
3163 
3164 	if (sta == NULL) {
3165 		RTW_PRINT(FUNC_ADPT_FMT" sta is NULL\n"
3166 			  , FUNC_ADPT_ARG(adapter));
3167 		rtw_warn_on(1);
3168 		return;
3169 	}
3170 
3171 	if (sta->cmn.mac_id >= macid_ctl->num) {
3172 		RTW_PRINT(FUNC_ADPT_FMT" invalid macid:%u\n"
3173 			  , FUNC_ADPT_ARG(adapter), sta->cmn.mac_id);
3174 		rtw_warn_on(1);
3175 		return;
3176 	}
3177 
3178 	if (!rtw_macid_is_used(macid_ctl, sta->cmn.mac_id)) {
3179 		RTW_PRINT(FUNC_ADPT_FMT" macid:%u not is used, set connected to 0\n"
3180 			  , FUNC_ADPT_ARG(adapter), sta->cmn.mac_id);
3181 		connected = 0;
3182 		rtw_warn_on(1);
3183 	}
3184 
3185 	if (connected && !rtw_macid_is_bmc(macid_ctl, sta->cmn.mac_id)) {
3186 		miracast_enabled = STA_OP_WFD_MODE(sta) != 0 && is_miracast_enabled(adapter);
3187 		miracast_sink = miracast_enabled && (STA_OP_WFD_MODE(sta) & MIRACAST_SINK);
3188 
3189 #ifdef CONFIG_TDLS
3190 		if (sta->tdls_sta_state & TDLS_LINKED_STATE)
3191 			role = H2C_MSR_ROLE_TDLS;
3192 		else
3193 #endif
3194 		if (MLME_IS_STA(adapter)) {
3195 			if (MLME_IS_GC(adapter))
3196 				role = H2C_MSR_ROLE_GO;
3197 			else
3198 				role = H2C_MSR_ROLE_AP;
3199 		} else if (MLME_IS_AP(adapter)) {
3200 			if (MLME_IS_GO(adapter))
3201 				role = H2C_MSR_ROLE_GC;
3202 			else
3203 				role = H2C_MSR_ROLE_STA;
3204 		} else if (MLME_IS_ADHOC(adapter) || MLME_IS_ADHOC_MASTER(adapter))
3205 			role = H2C_MSR_ROLE_ADHOC;
3206 		else if (MLME_IS_MESH(adapter))
3207 			role = H2C_MSR_ROLE_MESH;
3208 
3209 #ifdef CONFIG_WFD
3210 		if (role == H2C_MSR_ROLE_GC
3211 			|| role == H2C_MSR_ROLE_GO
3212 			|| role == H2C_MSR_ROLE_TDLS
3213 		) {
3214 			if (adapter->wfd_info.rtsp_ctrlport
3215 				|| adapter->wfd_info.tdls_rtsp_ctrlport
3216 				|| adapter->wfd_info.peer_rtsp_ctrlport)
3217 				rtw_wfd_st_switch(sta, 1);
3218 		}
3219 #endif
3220 	}
3221 
3222 	rtw_hal_set_FwMediaStatusRpt_single_cmd(adapter
3223 		, connected
3224 		, miracast_enabled
3225 		, miracast_sink
3226 		, role
3227 		, sta->cmn.mac_id
3228 	);
3229 }
3230 
3231 u8 rtw_sta_media_status_rpt_cmd(_adapter *adapter, struct sta_info *sta, bool connected)
3232 {
3233 	struct cmd_priv	*cmdpriv = &adapter->cmdpriv;
3234 	struct cmd_obj *cmdobj;
3235 	struct drvextra_cmd_parm *cmd_parm;
3236 	struct sta_media_status_rpt_cmd_parm *rpt_parm;
3237 	u8	res = _SUCCESS;
3238 
3239 	cmdobj = (struct cmd_obj *)rtw_zmalloc(sizeof(struct cmd_obj));
3240 	if (cmdobj == NULL) {
3241 		res = _FAIL;
3242 		goto exit;
3243 	}
3244 
3245 	cmd_parm = (struct drvextra_cmd_parm *)rtw_zmalloc(sizeof(struct drvextra_cmd_parm));
3246 	if (cmd_parm == NULL) {
3247 		rtw_mfree((u8 *)cmdobj, sizeof(struct cmd_obj));
3248 		res = _FAIL;
3249 		goto exit;
3250 	}
3251 
3252 	rpt_parm = (struct sta_media_status_rpt_cmd_parm *)rtw_zmalloc(sizeof(struct sta_media_status_rpt_cmd_parm));
3253 	if (rpt_parm == NULL) {
3254 		rtw_mfree((u8 *)cmdobj, sizeof(struct cmd_obj));
3255 		rtw_mfree((u8 *)cmd_parm, sizeof(struct drvextra_cmd_parm));
3256 		res = _FAIL;
3257 		goto exit;
3258 	}
3259 
3260 	rpt_parm->sta = sta;
3261 	rpt_parm->connected = connected;
3262 
3263 	cmd_parm->ec_id = STA_MSTATUS_RPT_WK_CID;
3264 	cmd_parm->type = 0;
3265 	cmd_parm->size = sizeof(struct sta_media_status_rpt_cmd_parm);
3266 	cmd_parm->pbuf = (u8 *)rpt_parm;
3267 	init_h2fwcmd_w_parm_no_rsp(cmdobj, cmd_parm, CMD_SET_DRV_EXTRA);
3268 
3269 	res = rtw_enqueue_cmd(cmdpriv, cmdobj);
3270 
3271 exit:
3272 	return res;
3273 }
3274 
3275 inline void rtw_sta_media_status_rpt_cmd_hdl(_adapter *adapter, struct sta_media_status_rpt_cmd_parm *parm)
3276 {
3277 	rtw_sta_media_status_rpt(adapter, parm->sta, parm->connected);
3278 }
3279 
3280 void rtw_stassoc_event_callback(_adapter *adapter, u8 *pbuf)
3281 {
3282 	_irqL irqL;
3283 	struct sta_info *psta;
3284 	struct mlme_priv *pmlmepriv = &(adapter->mlmepriv);
3285 	struct stassoc_event	*pstassoc	= (struct stassoc_event *)pbuf;
3286 	struct wlan_network	*cur_network = &(pmlmepriv->cur_network);
3287 	struct wlan_network	*ptarget_wlan = NULL;
3288 
3289 
3290 #if CONFIG_RTW_MACADDR_ACL
3291 	if (rtw_access_ctrl(adapter, pstassoc->macaddr) == _FALSE)
3292 		return;
3293 #endif
3294 
3295 #if defined(CONFIG_AP_MODE) && defined (CONFIG_NATIVEAP_MLME)
3296 	if (MLME_IS_AP(adapter) || MLME_IS_MESH(adapter)) {
3297 		psta = rtw_get_stainfo(&adapter->stapriv, pstassoc->macaddr);
3298 		if (psta) {
3299 			u8 *passoc_req = NULL;
3300 			u32 assoc_req_len = 0;
3301 
3302 			rtw_sta_media_status_rpt(adapter, psta, 1);
3303 
3304 #ifdef CONFIG_MCC_MODE
3305 			rtw_hal_mcc_update_macid_bitmap(adapter, psta->cmn.mac_id, _TRUE);
3306 #endif /* CONFIG_MCC_MODE */
3307 
3308 #ifndef CONFIG_AUTO_AP_MODE
3309 			ap_sta_info_defer_update(adapter, psta);
3310 
3311 			if (!MLME_IS_MESH(adapter)) {
3312 				/* report to upper layer */
3313 				RTW_INFO("indicate_sta_assoc_event to upper layer - hostapd\n");
3314 				#ifdef CONFIG_IOCTL_CFG80211
3315 				_enter_critical_bh(&psta->lock, &irqL);
3316 				if (psta->passoc_req && psta->assoc_req_len > 0) {
3317 					passoc_req = rtw_zmalloc(psta->assoc_req_len);
3318 					if (passoc_req) {
3319 						assoc_req_len = psta->assoc_req_len;
3320 						_rtw_memcpy(passoc_req, psta->passoc_req, assoc_req_len);
3321 					}
3322 				}
3323 				_exit_critical_bh(&psta->lock, &irqL);
3324 
3325 				if (passoc_req && assoc_req_len > 0) {
3326 					rtw_cfg80211_indicate_sta_assoc(adapter, passoc_req, assoc_req_len);
3327 					rtw_mfree(passoc_req, assoc_req_len);
3328 				}
3329 				#else /* !CONFIG_IOCTL_CFG80211	 */
3330 				rtw_indicate_sta_assoc_event(adapter, psta);
3331 				#endif /* !CONFIG_IOCTL_CFG80211 */
3332 			}
3333 #endif /* !CONFIG_AUTO_AP_MODE */
3334 
3335 #ifdef CONFIG_BEAMFORMING
3336 			beamforming_wk_cmd(adapter, BEAMFORMING_CTRL_ENTER, (u8 *)psta, sizeof(struct sta_info), 0);
3337 #endif/*CONFIG_BEAMFORMING*/
3338 			if (is_wep_enc(adapter->securitypriv.dot11PrivacyAlgrthm))
3339 				rtw_ap_wep_pk_setting(adapter, psta);
3340 
3341 			#ifdef CONFIG_PLATFORM_CMAP_INTFS
3342 			if (MLME_IS_AP(adapter)) {
3343 				cmap_intfs_nl_sta_event(psta->cmn.mac_addr, adapter_mac_addr(adapter), 1
3344 					, psta->passoc_req + IEEE80211_3ADDR_LEN, psta->assoc_req_len - IEEE80211_3ADDR_LEN);
3345 			}
3346 			#endif
3347 		}
3348 		goto exit;
3349 	}
3350 #endif /* defined (CONFIG_AP_MODE) && defined (CONFIG_NATIVEAP_MLME) */
3351 
3352 	/* for AD-HOC mode */
3353 	psta = rtw_get_stainfo(&adapter->stapriv, pstassoc->macaddr);
3354 	if (psta == NULL) {
3355 		RTW_ERR(FUNC_ADPT_FMT" get no sta_info with "MAC_FMT"\n"
3356 			, FUNC_ADPT_ARG(adapter), MAC_ARG(pstassoc->macaddr));
3357 		rtw_warn_on(1);
3358 		goto exit;
3359 	}
3360 
3361 	rtw_sta_media_status_rpt(adapter, psta, 1);
3362 
3363 	if (adapter->securitypriv.dot11AuthAlgrthm == dot11AuthAlgrthm_8021X)
3364 		psta->dot118021XPrivacy = adapter->securitypriv.dot11PrivacyAlgrthm;
3365 
3366 
3367 	psta->ieee8021x_blocked = _FALSE;
3368 
3369 	_enter_critical_bh(&pmlmepriv->lock, &irqL);
3370 
3371 	if ((check_fwstate(pmlmepriv, WIFI_ADHOC_MASTER_STATE) == _TRUE) ||
3372 	    (check_fwstate(pmlmepriv, WIFI_ADHOC_STATE) == _TRUE)) {
3373 		if (adapter->stapriv.asoc_sta_count == 2) {
3374 			_enter_critical_bh(&(pmlmepriv->scanned_queue.lock), &irqL);
3375 			ptarget_wlan = _rtw_find_network(&pmlmepriv->scanned_queue, cur_network->network.MacAddress);
3376 			pmlmepriv->cur_network_scanned = ptarget_wlan;
3377 			if (ptarget_wlan)
3378 				ptarget_wlan->fixed = _TRUE;
3379 			_exit_critical_bh(&(pmlmepriv->scanned_queue.lock), &irqL);
3380 			/* a sta + bc/mc_stainfo (not Ibss_stainfo) */
3381 			rtw_indicate_connect(adapter);
3382 		}
3383 	}
3384 
3385 	_exit_critical_bh(&pmlmepriv->lock, &irqL);
3386 
3387 
3388 	mlmeext_sta_add_event_callback(adapter, psta);
3389 
3390 #ifdef CONFIG_RTL8711
3391 	/* submit SetStaKey_cmd to tell fw, fw will allocate an CAM entry for this sta	 */
3392 	rtw_setstakey_cmd(adapter, psta, GROUP_KEY, _TRUE);
3393 #endif
3394 
3395 exit:
3396 #ifdef CONFIG_RTS_FULL_BW
3397 	rtw_set_rts_bw(adapter);
3398 #endif/*CONFIG_RTS_FULL_BW*/
3399 	return;
3400 }
3401 
3402 #ifdef CONFIG_IEEE80211W
3403 void rtw_sta_timeout_event_callback(_adapter *adapter, u8 *pbuf)
3404 {
3405 #ifdef CONFIG_AP_MODE
3406 	_irqL irqL;
3407 	struct sta_info *psta;
3408 	struct stadel_event *pstadel = (struct stadel_event *)pbuf;
3409 	struct sta_priv *pstapriv = &adapter->stapriv;
3410 
3411 	psta = rtw_get_stainfo(&adapter->stapriv, pstadel->macaddr);
3412 
3413 	if (psta) {
3414 		u8 updated = _FALSE;
3415 
3416 		_enter_critical_bh(&pstapriv->asoc_list_lock, &irqL);
3417 		if (rtw_is_list_empty(&psta->asoc_list) == _FALSE) {
3418 			rtw_list_delete(&psta->asoc_list);
3419 			pstapriv->asoc_list_cnt--;
3420 			#ifdef CONFIG_RTW_TOKEN_BASED_XMIT
3421 			if (psta->tbtx_enable)
3422 				pstapriv->tbtx_asoc_list_cnt--;
3423 			#endif
3424 			updated = ap_free_sta(adapter, psta, _TRUE, WLAN_REASON_PREV_AUTH_NOT_VALID, _TRUE);
3425 		}
3426 		_exit_critical_bh(&pstapriv->asoc_list_lock, &irqL);
3427 
3428 		associated_clients_update(adapter, updated, STA_INFO_UPDATE_ALL);
3429 	}
3430 #endif /* CONFIG_AP_MODE */
3431 }
3432 #endif /* CONFIG_IEEE80211W */
3433 
3434 void rtw_sta_mstatus_disc_rpt(_adapter *adapter, u8 mac_id)
3435 {
3436 	struct macid_ctl_t *macid_ctl = &adapter->dvobj->macid_ctl;
3437 
3438 	if (mac_id < macid_ctl->num) {
3439 		u8 id_is_shared = mac_id == RTW_DEFAULT_MGMT_MACID; /* TODO: real shared macid judgment */
3440 
3441 		RTW_INFO(FUNC_ADPT_FMT" - mac_id=%d%s\n", FUNC_ADPT_ARG(adapter)
3442 			, mac_id, id_is_shared ? " shared" : "");
3443 
3444 		if (!id_is_shared) {
3445 			rtw_hal_macid_drop(adapter, mac_id);
3446 			rtw_hal_set_FwMediaStatusRpt_single_cmd(adapter, 0, 0, 0, 0, mac_id);
3447 			/*
3448 			 * For safety, prevent from keeping macid sleep.
3449 			 * If we can sure all power mode enter/leave are paired,
3450 			 * this check can be removed.
3451 			 * Lucas@20131113
3452 			 */
3453 			/* wakeup macid after disconnect. */
3454 			/*if (MLME_IS_STA(adapter))*/
3455 			rtw_hal_macid_wakeup(adapter, mac_id);
3456 		}
3457 	} else {
3458 		RTW_PRINT(FUNC_ADPT_FMT" invalid macid:%u\n"
3459 			  , FUNC_ADPT_ARG(adapter), mac_id);
3460 		rtw_warn_on(1);
3461 	}
3462 }
3463 void rtw_sta_mstatus_report(_adapter *adapter)
3464 {
3465 	struct mlme_priv *pmlmepriv = &adapter->mlmepriv;
3466 	struct wlan_network *tgt_network = &pmlmepriv->cur_network;
3467 	struct sta_info *psta = NULL;
3468 
3469 	if (check_fwstate(pmlmepriv, WIFI_STATION_STATE) && check_fwstate(pmlmepriv, WIFI_ASOC_STATE)) {
3470 		psta = rtw_get_stainfo(&adapter->stapriv, tgt_network->network.MacAddress);
3471 		if (psta)
3472 			rtw_sta_mstatus_disc_rpt(adapter, psta->cmn.mac_id);
3473 		else {
3474 			RTW_INFO("%s "ADPT_FMT" - mac_addr: "MAC_FMT" psta == NULL\n", __func__, ADPT_ARG(adapter), MAC_ARG(tgt_network->network.MacAddress));
3475 			rtw_warn_on(1);
3476 		}
3477 	}
3478 }
3479 
3480 void rtw_stadel_event_callback(_adapter *adapter, u8 *pbuf)
3481 {
3482 	_irqL irqL, irqL2;
3483 
3484 	struct sta_info *psta;
3485 	struct wlan_network *pwlan = NULL;
3486 	WLAN_BSSID_EX    *pdev_network = NULL;
3487 	u8 *pibss = NULL;
3488 	struct	mlme_priv	*pmlmepriv = &(adapter->mlmepriv);
3489 	struct	stadel_event *pstadel	= (struct stadel_event *)pbuf;
3490 	struct wlan_network *tgt_network = &(pmlmepriv->cur_network);
3491 
3492 	RTW_INFO("%s(mac_id=%d)=" MAC_FMT "\n", __func__, pstadel->mac_id, MAC_ARG(pstadel->macaddr));
3493 #ifdef CONFIG_LAYER2_ROAMING
3494 	if (pmlmepriv->roam_network)
3495 		rtw_msleep_os(RTW_ROAM_DICONNECT_DELAY);
3496 #endif
3497 	rtw_sta_mstatus_disc_rpt(adapter, pstadel->mac_id);
3498 
3499 #ifdef CONFIG_MCC_MODE
3500 	rtw_hal_mcc_update_macid_bitmap(adapter, pstadel->mac_id, _FALSE);
3501 #endif /* CONFIG_MCC_MODE */
3502 
3503 	psta = rtw_get_stainfo(&adapter->stapriv, pstadel->macaddr);
3504 
3505 	if (psta == NULL) {
3506 		RTW_INFO("%s(mac_id=%d)=" MAC_FMT " psta == NULL\n", __func__, pstadel->mac_id, MAC_ARG(pstadel->macaddr));
3507 		/*rtw_warn_on(1);*/
3508 	}
3509 
3510 	if (psta)
3511 		rtw_wfd_st_switch(psta, 0);
3512 
3513 	if (MLME_IS_MESH(adapter)) {
3514 		rtw_free_stainfo(adapter, psta);
3515 		goto exit;
3516 	}
3517 
3518 #ifdef CONFIG_AP_MODE
3519 	if (MLME_IS_AP(adapter)) {
3520 #ifdef CONFIG_IOCTL_CFG80211
3521 #ifdef COMPAT_KERNEL_RELEASE
3522 
3523 #elif (LINUX_VERSION_CODE < KERNEL_VERSION(2, 6, 37)) || defined(CONFIG_CFG80211_FORCE_COMPATIBLE_2_6_37_UNDER)
3524 		rtw_cfg80211_indicate_sta_disassoc(adapter, pstadel->macaddr, *(u16 *)pstadel->rsvd);
3525 #endif /* (LINUX_VERSION_CODE < KERNEL_VERSION(2, 6, 37)) || defined(CONFIG_CFG80211_FORCE_COMPATIBLE_2_6_37_UNDER) */
3526 #endif /* CONFIG_IOCTL_CFG80211 */
3527 
3528 		#ifdef CONFIG_PLATFORM_CMAP_INTFS
3529 		cmap_intfs_nl_sta_event(pstadel->macaddr, adapter_mac_addr(adapter), 0, NULL, 0);
3530 		#endif
3531 
3532 		rtw_free_stainfo(adapter, psta);
3533 
3534 		goto exit;
3535 	}
3536 #endif /* CONFIG_AP_MODE */
3537 
3538 	mlmeext_sta_del_event_callback(adapter);
3539 
3540 	_enter_critical_bh(&pmlmepriv->lock, &irqL2);
3541 
3542 	if (check_fwstate(pmlmepriv, WIFI_STATION_STATE)) {
3543 		u16 reason = *((unsigned short *)(pstadel->rsvd));
3544 		bool roam = _FALSE;
3545 		struct wlan_network *roam_target = NULL;
3546 
3547 #ifdef CONFIG_LAYER2_ROAMING
3548 #ifdef CONFIG_RTW_80211R
3549 		if (rtw_ft_roam_expired(adapter, reason))
3550 			pmlmepriv->ft_roam.ft_roam_on_expired = _TRUE;
3551 		else
3552 			pmlmepriv->ft_roam.ft_roam_on_expired = _FALSE;
3553 #endif
3554 		if (adapter->registrypriv.wifi_spec == 1)
3555 			roam = _FALSE;
3556 		else if (reason == WLAN_REASON_EXPIRATION_CHK && rtw_chk_roam_flags(adapter, RTW_ROAM_ON_EXPIRED))
3557 			roam = _TRUE;
3558 		else if (reason == WLAN_REASON_ACTIVE_ROAM && rtw_chk_roam_flags(adapter, RTW_ROAM_ACTIVE)) {
3559 			roam = _TRUE;
3560 			roam_target = pmlmepriv->roam_network;
3561 		}
3562 
3563 #ifdef CONFIG_RTW_80211R
3564 		if (reason == WLAN_REASON_ACTIVE_ROAM && rtw_ft_chk_flags(adapter, RTW_FT_BTM_ROAM)) {
3565 			roam = _TRUE;
3566 			roam_target = pmlmepriv->roam_network;
3567 		}
3568 #endif
3569 
3570 		if (roam == _TRUE) {
3571 			if (rtw_to_roam(adapter) > 0)
3572 				rtw_dec_to_roam(adapter); /* this stadel_event is caused by roaming, decrease to_roam */
3573 			else if (rtw_to_roam(adapter) == 0)
3574 				rtw_set_to_roam(adapter, adapter->registrypriv.max_roaming_times);
3575 		} else
3576 			rtw_set_to_roam(adapter, 0);
3577 #endif /* CONFIG_LAYER2_ROAMING */
3578 
3579 		rtw_free_uc_swdec_pending_queue(adapter);
3580 
3581 		rtw_free_assoc_resources(adapter, _TRUE);
3582 		rtw_free_mlme_priv_ie_data(pmlmepriv);
3583 
3584 		rtw_indicate_disconnect(adapter, *(u16 *)pstadel->rsvd, pstadel->locally_generated);
3585 
3586 #ifdef CONFIG_LAYER2_ROAMING
3587 		_rtw_roaming(adapter, roam_target);
3588 #endif
3589 	}
3590 
3591 #ifdef CONFIG_AP_MODE
3592 	if (check_fwstate(pmlmepriv, WIFI_ADHOC_MASTER_STATE) ||
3593 	    check_fwstate(pmlmepriv, WIFI_ADHOC_STATE)) {
3594 
3595 		/* _enter_critical_bh(&(pstapriv->sta_hash_lock), &irqL); */
3596 		rtw_free_stainfo(adapter,  psta);
3597 		/* _exit_critical_bh(&(pstapriv->sta_hash_lock), &irqL); */
3598 
3599 		if (adapter->stapriv.asoc_sta_count == 1) { /* a sta + bc/mc_stainfo (not Ibss_stainfo) */
3600 			/* rtw_indicate_disconnect(adapter); */ /* removed@20091105 */
3601 			_enter_critical_bh(&(pmlmepriv->scanned_queue.lock), &irqL);
3602 			/* free old ibss network */
3603 			/* pwlan = _rtw_find_network(&pmlmepriv->scanned_queue, pstadel->macaddr); */
3604 			pwlan = _rtw_find_network(&pmlmepriv->scanned_queue, tgt_network->network.MacAddress);
3605 			if (pwlan) {
3606 				pwlan->fixed = _FALSE;
3607 				rtw_free_network_nolock(adapter, pwlan);
3608 			}
3609 			_exit_critical_bh(&(pmlmepriv->scanned_queue.lock), &irqL);
3610 			/* re-create ibss */
3611 			pdev_network = &(adapter->registrypriv.dev_network);
3612 			pibss = adapter->registrypriv.dev_network.MacAddress;
3613 
3614 			_rtw_memcpy(pdev_network, &tgt_network->network, get_WLAN_BSSID_EX_sz(&tgt_network->network));
3615 
3616 			_rtw_memset(&pdev_network->Ssid, 0, sizeof(NDIS_802_11_SSID));
3617 			_rtw_memcpy(&pdev_network->Ssid, &pmlmepriv->assoc_ssid, sizeof(NDIS_802_11_SSID));
3618 
3619 			rtw_update_registrypriv_dev_network(adapter);
3620 
3621 			rtw_generate_random_ibss(pibss);
3622 
3623 			if (check_fwstate(pmlmepriv, WIFI_ADHOC_STATE)) {
3624 				set_fwstate(pmlmepriv, WIFI_ADHOC_MASTER_STATE);
3625 				_clr_fwstate_(pmlmepriv, WIFI_ADHOC_STATE);
3626 			}
3627 
3628 			if (rtw_create_ibss_cmd(adapter, 0) != _SUCCESS)
3629 				RTW_ERR("rtw_create_ibss_cmd FAIL\n");
3630 
3631 		}
3632 
3633 	}
3634 #endif /* CONFIG_AP_MODE */
3635 	_exit_critical_bh(&pmlmepriv->lock, &irqL2);
3636 exit:
3637 	#ifdef CONFIG_RTS_FULL_BW
3638 	rtw_set_rts_bw(adapter);
3639 	#endif/*CONFIG_RTS_FULL_BW*/
3640 	return;
3641 }
3642 
3643 void rtw_wmm_event_callback(PADAPTER padapter, u8 *pbuf)
3644 {
3645 
3646 	WMMOnAssocRsp(padapter);
3647 
3648 
3649 }
3650 
3651 /*
3652 * rtw_join_timeout_handler - Timeout/failure handler for CMD JoinBss
3653 */
3654 void rtw_join_timeout_handler(void *ctx)
3655 {
3656 	_adapter *adapter = (_adapter *)ctx;
3657 	_irqL irqL;
3658 	struct	mlme_priv *pmlmepriv = &adapter->mlmepriv;
3659 
3660 #if 0
3661 	if (rtw_is_drv_stopped(adapter)) {
3662 		_rtw_up_sema(&pmlmepriv->assoc_terminate);
3663 		return;
3664 	}
3665 #endif
3666 
3667 
3668 
3669 	RTW_INFO("%s, fw_state=%x\n", __FUNCTION__, get_fwstate(pmlmepriv));
3670 
3671 	if (RTW_CANNOT_RUN(adapter))
3672 		return;
3673 
3674 
3675 	_enter_critical_bh(&pmlmepriv->lock, &irqL);
3676 
3677 #ifdef CONFIG_LAYER2_ROAMING
3678 	if (rtw_to_roam(adapter) > 0) { /* join timeout caused by roaming */
3679 		while (1) {
3680 			rtw_dec_to_roam(adapter);
3681 			if (rtw_to_roam(adapter) != 0) { /* try another */
3682 				int do_join_r;
3683 				RTW_INFO("%s try another roaming\n", __FUNCTION__);
3684 				do_join_r = rtw_do_join(adapter);
3685 				if (_SUCCESS != do_join_r) {
3686 					RTW_INFO("%s roaming do_join return %d\n", __FUNCTION__ , do_join_r);
3687 					continue;
3688 				}
3689 				break;
3690 			} else {
3691 				RTW_INFO("%s We've try roaming but fail\n", __FUNCTION__);
3692 #ifdef CONFIG_RTW_80211R
3693 				rtw_ft_clr_flags(adapter, RTW_FT_PEER_EN|RTW_FT_PEER_OTD_EN);
3694 				rtw_ft_reset_status(adapter);
3695 #endif
3696 				rtw_indicate_disconnect(adapter, pmlmepriv->join_status, _FALSE);
3697 				break;
3698 			}
3699 		}
3700 
3701 	} else
3702 #endif
3703 	{
3704 		rtw_indicate_disconnect(adapter, pmlmepriv->join_status, _FALSE);
3705 		free_scanqueue(pmlmepriv);/* ??? */
3706 
3707 #ifdef CONFIG_IOCTL_CFG80211
3708 		/* indicate disconnect for the case that join_timeout and check_fwstate != FW_LINKED */
3709 		rtw_cfg80211_indicate_disconnect(adapter, pmlmepriv->join_status, _FALSE);
3710 #endif /* CONFIG_IOCTL_CFG80211 */
3711 
3712 	}
3713 
3714 	pmlmepriv->join_status = 0; /* reset */
3715 
3716 	_exit_critical_bh(&pmlmepriv->lock, &irqL);
3717 
3718 
3719 #ifdef CONFIG_DRVEXT_MODULE_WSC
3720 	drvext_assoc_fail_indicate(&adapter->drvextpriv);
3721 #endif
3722 
3723 
3724 
3725 }
3726 
3727 /*
3728 * rtw_scan_timeout_handler - Timeout/Faliure handler for CMD SiteSurvey
3729 * @adapter: pointer to _adapter structure
3730 */
3731 void rtw_scan_timeout_handler(void *ctx)
3732 {
3733 	_adapter *adapter = (_adapter *)ctx;
3734 	_irqL irqL;
3735 	struct mlme_priv *pmlmepriv = &adapter->mlmepriv;
3736 	RTW_INFO(FUNC_ADPT_FMT" fw_state=%x\n", FUNC_ADPT_ARG(adapter), get_fwstate(pmlmepriv));
3737 
3738 	_enter_critical_bh(&pmlmepriv->lock, &irqL);
3739 
3740 	_clr_fwstate_(pmlmepriv, WIFI_UNDER_SURVEY);
3741 
3742 	_exit_critical_bh(&pmlmepriv->lock, &irqL);
3743 
3744 #ifdef CONFIG_IOCTL_CFG80211
3745 	rtw_cfg80211_surveydone_event_callback(adapter);
3746 #endif /* CONFIG_IOCTL_CFG80211 */
3747 
3748 	rtw_indicate_scan_done(adapter, _TRUE);
3749 
3750 #if defined(CONFIG_CONCURRENT_MODE) && defined(CONFIG_IOCTL_CFG80211)
3751 	rtw_cfg80211_indicate_scan_done_for_buddy(adapter, _TRUE);
3752 #endif
3753 }
3754 
3755 void rtw_mlme_reset_auto_scan_int(_adapter *adapter, u8 *reason)
3756 {
3757 #if defined(CONFIG_RTW_MESH) && defined(CONFIG_DFS_MASTER)
3758 #if CONFIG_RTW_MESH_OFFCH_CAND
3759 	struct rf_ctl_t *rfctl = adapter_to_rfctl(adapter);
3760 #endif
3761 #endif
3762 	u8 u_ch;
3763 	u32 interval_ms = 0xffffffff; /* 0xffffffff: special value to make min() works well, also means no auto scan */
3764 
3765 	*reason = RTW_AUTO_SCAN_REASON_UNSPECIFIED;
3766 	rtw_mi_get_ch_setting_union(adapter, &u_ch, NULL, NULL);
3767 
3768 	if (hal_chk_bw_cap(adapter, BW_CAP_40M)
3769 		&& is_client_associated_to_ap(adapter) == _TRUE
3770 		&& u_ch >= 1 && u_ch <= 14
3771 		&& adapter->registrypriv.wifi_spec
3772 		/* TODO: AP Connected is 40MHz capability? */
3773 	) {
3774 		interval_ms = rtw_min(interval_ms, 60 * 1000);
3775 		*reason |= RTW_AUTO_SCAN_REASON_2040_BSS;
3776 	}
3777 
3778 #ifdef CONFIG_RTW_MESH
3779 	#if CONFIG_RTW_MESH_OFFCH_CAND
3780 	if (adapter->mesh_cfg.peer_sel_policy.offch_find_int_ms
3781 		&& rtw_mesh_offch_candidate_accepted(adapter)
3782 		#ifdef CONFIG_DFS_MASTER
3783 		&& (!rfctl->radar_detect_ch || (IS_CH_WAITING(rfctl) && !IS_UNDER_CAC(rfctl)))
3784 		#endif
3785 	) {
3786 		interval_ms = rtw_min(interval_ms, adapter->mesh_cfg.peer_sel_policy.offch_find_int_ms);
3787 		*reason |= RTW_AUTO_SCAN_REASON_MESH_OFFCH_CAND;
3788 	}
3789 	#endif
3790 #endif /* CONFIG_RTW_MESH */
3791 
3792 	if (interval_ms == 0xffffffff)
3793 		interval_ms = 0;
3794 
3795 	rtw_mlme_set_auto_scan_int(adapter, interval_ms);
3796 	return;
3797 }
3798 
3799 void rtw_drv_scan_by_self(_adapter *padapter, u8 reason)
3800 {
3801 	struct sitesurvey_parm parm;
3802 	struct mlme_priv *pmlmepriv = &padapter->mlmepriv;
3803 	int i;
3804 #if 1
3805 	u8 ssc_chk;
3806 
3807 	ssc_chk = rtw_sitesurvey_condition_check(padapter, _FALSE);
3808 	if( ssc_chk == SS_DENY_BUSY_TRAFFIC) {
3809 		#ifdef CONFIG_LAYER2_ROAMING
3810 		if (rtw_chk_roam_flags(padapter, RTW_ROAM_ACTIVE) && pmlmepriv->need_to_roam == _TRUE)
3811 			RTW_INFO(FUNC_ADPT_FMT" need to roam, don't care BusyTraffic\n", FUNC_ADPT_ARG(padapter));
3812 		else
3813 		#endif
3814 		{
3815 			RTW_INFO(FUNC_ADPT_FMT" exit BusyTraffic\n", FUNC_ADPT_ARG(padapter));
3816 			goto exit;
3817 		}
3818 	}
3819 	else if (ssc_chk != SS_ALLOW)
3820 		goto exit;
3821 
3822 	if (!rtw_is_adapter_up(padapter))
3823 		goto exit;
3824 #else
3825 	if (rtw_is_scan_deny(padapter))
3826 		goto exit;
3827 
3828 	if (!rtw_is_adapter_up(padapter))
3829 		goto exit;
3830 
3831 	if (rtw_mi_busy_traffic_check(padapter)) {
3832 #ifdef CONFIG_LAYER2_ROAMING
3833 		if (rtw_chk_roam_flags(padapter, RTW_ROAM_ACTIVE) && pmlmepriv->need_to_roam == _TRUE) {
3834 			RTW_INFO("need to roam, don't care BusyTraffic\n");
3835 		} else
3836 #endif
3837 		{
3838 			RTW_INFO(FUNC_ADPT_FMT" exit BusyTraffic\n", FUNC_ADPT_ARG(padapter));
3839 			goto exit;
3840 		}
3841 	}
3842 	if (check_fwstate(pmlmepriv, WIFI_AP_STATE) && check_fwstate(pmlmepriv, WIFI_UNDER_WPS)) {
3843 		RTW_INFO(FUNC_ADPT_FMT" WIFI_AP_STATE && WIFI_UNDER_WPS\n", FUNC_ADPT_ARG(padapter));
3844 		goto exit;
3845 	}
3846 	if (check_fwstate(pmlmepriv, (WIFI_UNDER_SURVEY | WIFI_UNDER_LINKING)) == _TRUE) {
3847 		RTW_INFO(FUNC_ADPT_FMT" WIFI_UNDER_SURVEY|WIFI_UNDER_LINKING\n", FUNC_ADPT_ARG(padapter));
3848 		goto exit;
3849 	}
3850 
3851 #ifdef CONFIG_CONCURRENT_MODE
3852 	if (rtw_mi_buddy_check_fwstate(padapter, (WIFI_UNDER_SURVEY | WIFI_UNDER_LINKING | WIFI_UNDER_WPS))) {
3853 		RTW_INFO(FUNC_ADPT_FMT", but buddy_intf is under scanning or linking or wps_phase\n", FUNC_ADPT_ARG(padapter));
3854 		goto exit;
3855 	}
3856 #endif
3857 #endif
3858 
3859 	RTW_INFO(FUNC_ADPT_FMT" reason:0x%02x\n", FUNC_ADPT_ARG(padapter), reason);
3860 
3861 	/* only for 20/40 BSS */
3862 	if (reason == RTW_AUTO_SCAN_REASON_2040_BSS) {
3863 		rtw_init_sitesurvey_parm(padapter, &parm);
3864 		for (i=0;i<14;i++) {
3865 			parm.ch[i].hw_value = i + 1;
3866 			parm.ch[i].flags = RTW_IEEE80211_CHAN_PASSIVE_SCAN;
3867 		}
3868 		parm.ch_num = 14;
3869 		rtw_set_802_11_bssid_list_scan(padapter, &parm);
3870 		goto exit;
3871 	}
3872 
3873 #if defined(CONFIG_RTW_WNM) || defined(CONFIG_RTW_80211K)
3874 	if ((reason == RTW_AUTO_SCAN_REASON_ROAM)
3875 		&& (rtw_roam_nb_scan_list_set(padapter, &parm)))
3876 		goto exit;
3877 #endif
3878 
3879 	rtw_init_sitesurvey_parm(padapter, &parm);
3880 	parm.reason = reason;
3881 	rtw_set_802_11_bssid_list_scan(padapter, &parm);
3882 exit:
3883 	return;
3884 }
3885 
3886 static void rtw_auto_scan_handler(_adapter *padapter)
3887 {
3888 	struct mlme_priv *pmlmepriv = &padapter->mlmepriv;
3889 	u8 reason = RTW_AUTO_SCAN_REASON_UNSPECIFIED;
3890 
3891 	rtw_mlme_reset_auto_scan_int(padapter, &reason);
3892 
3893 #ifdef CONFIG_P2P
3894 	if (!rtw_p2p_chk_state(&padapter->wdinfo, P2P_STATE_NONE))
3895 		goto exit;
3896 #endif
3897 
3898 #ifdef CONFIG_TDLS
3899 	if (padapter->tdlsinfo.link_established == _TRUE)
3900 		goto exit;
3901 #endif
3902 
3903 	if (pmlmepriv->auto_scan_int_ms == 0
3904 	    || rtw_get_passing_time_ms(pmlmepriv->scan_start_time) < pmlmepriv->auto_scan_int_ms)
3905 		goto exit;
3906 
3907 	rtw_drv_scan_by_self(padapter, reason);
3908 
3909 exit:
3910 	return;
3911 }
3912 static u8 is_drv_in_lps(_adapter *adapter)
3913 {
3914 	u8 is_in_lps = _FALSE;
3915 
3916 	#ifdef CONFIG_LPS_LCLK_WD_TIMER /* to avoid leaving lps 32k frequently*/
3917 	if ((adapter_to_pwrctl(adapter)->bFwCurrentInPSMode == _TRUE)
3918 	#ifdef CONFIG_BT_COEXIST
3919 		&& (rtw_btcoex_IsBtControlLps(adapter) == _FALSE)
3920 	#endif
3921 		)
3922 		is_in_lps = _TRUE;
3923 	#endif /* CONFIG_LPS_LCLK_WD_TIMER*/
3924 	return is_in_lps;
3925 }
3926 void rtw_iface_dynamic_check_timer_handlder(_adapter *adapter)
3927 {
3928 	struct mlme_priv *pmlmepriv = &adapter->mlmepriv;
3929 
3930 	if (adapter->net_closed == _TRUE)
3931 		return;
3932 	#ifdef CONFIG_LPS_LCLK_WD_TIMER /* to avoid leaving lps 32k frequently*/
3933 	if (is_drv_in_lps(adapter)) {
3934 		u8 bEnterPS;
3935 
3936 		linked_status_chk(adapter, 1);
3937 
3938 		bEnterPS = traffic_status_watchdog(adapter, 1);
3939 		if (bEnterPS) {
3940 			/* rtw_lps_ctrl_wk_cmd(adapter, LPS_CTRL_ENTER, 0); */
3941 			rtw_hal_dm_watchdog_in_lps(adapter);
3942 		} else {
3943 			/* call rtw_lps_ctrl_wk_cmd(padapter, LPS_CTRL_LEAVE, 0) in traffic_status_watchdog() */
3944 		}
3945 	}
3946 	#endif /* CONFIG_LPS_LCLK_WD_TIMER	*/
3947 
3948 	/* auto site survey */
3949 	rtw_auto_scan_handler(adapter);
3950 
3951 #ifdef CONFIG_AP_MODE
3952 	if (MLME_IS_AP(adapter)|| MLME_IS_MESH(adapter)) {
3953 		#ifndef CONFIG_ACTIVE_KEEP_ALIVE_CHECK
3954 		expire_timeout_chk(adapter);
3955 		#endif /* !CONFIG_ACTIVE_KEEP_ALIVE_CHECK */
3956 
3957 		#ifdef CONFIG_BMC_TX_RATE_SELECT
3958 		rtw_update_bmc_sta_tx_rate(adapter);
3959 		#endif /*CONFIG_BMC_TX_RATE_SELECT*/
3960 	}
3961 #endif /*CONFIG_AP_MODE*/
3962 
3963 
3964 #ifdef CONFIG_BR_EXT
3965 if (!adapter_use_wds(adapter)) {
3966 #if (LINUX_VERSION_CODE > KERNEL_VERSION(2, 6, 35))
3967 	rcu_read_lock();
3968 #endif /* (LINUX_VERSION_CODE > KERNEL_VERSION(2, 6, 35)) */
3969 
3970 #if (LINUX_VERSION_CODE <= KERNEL_VERSION(2, 6, 35))
3971 	if (adapter->pnetdev->br_port
3972 #else	/* (LINUX_VERSION_CODE <= KERNEL_VERSION(2, 6, 35)) */
3973 	if (rcu_dereference(adapter->pnetdev->rx_handler_data)
3974 #endif /* (LINUX_VERSION_CODE <= KERNEL_VERSION(2, 6, 35)) */
3975 		&& (check_fwstate(pmlmepriv, WIFI_STATION_STATE | WIFI_ADHOC_STATE) == _TRUE)) {
3976 		/* expire NAT2.5 entry */
3977 		void nat25_db_expire(_adapter *priv);
3978 		nat25_db_expire(adapter);
3979 
3980 		if (adapter->pppoe_connection_in_progress > 0)
3981 			adapter->pppoe_connection_in_progress--;
3982 		/* due to rtw_dynamic_check_timer_handlder() is called every 2 seconds */
3983 		if (adapter->pppoe_connection_in_progress > 0)
3984 			adapter->pppoe_connection_in_progress--;
3985 	}
3986 
3987 #if (LINUX_VERSION_CODE > KERNEL_VERSION(2, 6, 35))
3988 	rcu_read_unlock();
3989 #endif /* (LINUX_VERSION_CODE > KERNEL_VERSION(2, 6, 35)) */
3990 }
3991 #endif /* CONFIG_BR_EXT */
3992 
3993 }
3994 
3995 /*TP_avg(t) = (1/10) * TP_avg(t-1) + (9/10) * TP(t) MBps*/
3996 static void collect_sta_traffic_statistics(_adapter *adapter)
3997 {
3998 	struct macid_ctl_t *macid_ctl = &adapter->dvobj->macid_ctl;
3999 	struct sta_info *sta;
4000 	u64 curr_tx_bytes = 0, curr_rx_bytes = 0;
4001 	u32 curr_tx_mbytes = 0, curr_rx_mbytes = 0;
4002 	int i;
4003 
4004 	for (i = 0; i < MACID_NUM_SW_LIMIT; i++) {
4005 		sta = macid_ctl->sta[i];
4006 		if (sta && !is_broadcast_mac_addr(sta->cmn.mac_addr)) {
4007 			if (sta->sta_stats.last_tx_bytes > sta->sta_stats.tx_bytes)
4008 				sta->sta_stats.last_tx_bytes =  sta->sta_stats.tx_bytes;
4009 			if (sta->sta_stats.last_rx_bytes > sta->sta_stats.rx_bytes)
4010 				sta->sta_stats.last_rx_bytes = sta->sta_stats.rx_bytes;
4011 			if (sta->sta_stats.last_rx_bc_bytes > sta->sta_stats.rx_bc_bytes)
4012 				sta->sta_stats.last_rx_bc_bytes = sta->sta_stats.rx_bc_bytes;
4013 			if (sta->sta_stats.last_rx_mc_bytes > sta->sta_stats.rx_mc_bytes)
4014 				sta->sta_stats.last_rx_mc_bytes = sta->sta_stats.rx_mc_bytes;
4015 
4016 			curr_tx_bytes = sta->sta_stats.tx_bytes - sta->sta_stats.last_tx_bytes;
4017 			curr_rx_bytes = sta->sta_stats.rx_bytes - sta->sta_stats.last_rx_bytes;
4018 			sta->sta_stats.tx_tp_kbits = (curr_tx_bytes * 8 / 2) >> 10;/*Kbps*/
4019 			sta->sta_stats.rx_tp_kbits = (curr_rx_bytes * 8 / 2) >> 10;/*Kbps*/
4020 
4021 			sta->sta_stats.smooth_tx_tp_kbits = (sta->sta_stats.smooth_tx_tp_kbits * 6 / 10) + (sta->sta_stats.tx_tp_kbits * 4 / 10);/*Kbps*/
4022 			sta->sta_stats.smooth_rx_tp_kbits = (sta->sta_stats.smooth_rx_tp_kbits * 6 / 10) + (sta->sta_stats.rx_tp_kbits * 4 / 10);/*Kbps*/
4023 
4024 			curr_tx_mbytes = (curr_tx_bytes / 2) >> 20;/*MBps*/
4025 			curr_rx_mbytes = (curr_rx_bytes / 2) >> 20;/*MBps*/
4026 
4027 			sta->cmn.tx_moving_average_tp =
4028 				(sta->cmn.tx_moving_average_tp / 10) + (curr_tx_mbytes * 9 / 10); /*MBps*/
4029 
4030 			sta->cmn.rx_moving_average_tp =
4031 				(sta->cmn.rx_moving_average_tp / 10) + (curr_rx_mbytes * 9 /10); /*MBps*/
4032 
4033 			rtw_collect_bcn_info(sta->padapter);
4034 
4035 			if (adapter->bsta_tp_dump)
4036 				dump_sta_traffic(RTW_DBGDUMP, adapter, sta);
4037 
4038 			sta->sta_stats.last_tx_bytes = sta->sta_stats.tx_bytes;
4039 			sta->sta_stats.last_rx_bytes = sta->sta_stats.rx_bytes;
4040 			sta->sta_stats.last_rx_bc_bytes = sta->sta_stats.rx_bc_bytes;
4041 			sta->sta_stats.last_rx_mc_bytes = sta->sta_stats.rx_mc_bytes;
4042 		}
4043 	}
4044 }
4045 
4046 void rtw_sta_traffic_info(void *sel, _adapter *adapter)
4047 {
4048 	struct macid_ctl_t *macid_ctl = &adapter->dvobj->macid_ctl;
4049 	struct sta_info *sta;
4050 	int i;
4051 
4052 	for (i = 0; i < MACID_NUM_SW_LIMIT; i++) {
4053 		sta = macid_ctl->sta[i];
4054 		if (sta && !is_broadcast_mac_addr(sta->cmn.mac_addr))
4055 			dump_sta_traffic(sel, adapter, sta);
4056 	}
4057 }
4058 
4059 /*#define DBG_TRAFFIC_STATISTIC*/
4060 static void collect_traffic_statistics(_adapter *padapter)
4061 {
4062 	struct dvobj_priv	*pdvobjpriv = adapter_to_dvobj(padapter);
4063 
4064 	/*_rtw_memset(&pdvobjpriv->traffic_stat, 0, sizeof(struct rtw_traffic_statistics));*/
4065 
4066 	/* Tx bytes reset*/
4067 	pdvobjpriv->traffic_stat.tx_bytes = 0;
4068 	pdvobjpriv->traffic_stat.tx_pkts = 0;
4069 	pdvobjpriv->traffic_stat.tx_drop = 0;
4070 
4071 	/* Rx bytes reset*/
4072 	pdvobjpriv->traffic_stat.rx_bytes = 0;
4073 	pdvobjpriv->traffic_stat.rx_pkts = 0;
4074 	pdvobjpriv->traffic_stat.rx_drop = 0;
4075 
4076 	rtw_mi_traffic_statistics(padapter);
4077 
4078 	/* Calculate throughput in last interval */
4079 	pdvobjpriv->traffic_stat.cur_tx_bytes = pdvobjpriv->traffic_stat.tx_bytes - pdvobjpriv->traffic_stat.last_tx_bytes;
4080 	pdvobjpriv->traffic_stat.cur_rx_bytes = pdvobjpriv->traffic_stat.rx_bytes - pdvobjpriv->traffic_stat.last_rx_bytes;
4081 	pdvobjpriv->traffic_stat.last_tx_bytes = pdvobjpriv->traffic_stat.tx_bytes;
4082 	pdvobjpriv->traffic_stat.last_rx_bytes = pdvobjpriv->traffic_stat.rx_bytes;
4083 
4084 	pdvobjpriv->traffic_stat.cur_tx_tp = (u32)(pdvobjpriv->traffic_stat.cur_tx_bytes * 8 / 2 / 1024 / 1024);/*Mbps*/
4085 	pdvobjpriv->traffic_stat.cur_rx_tp = (u32)(pdvobjpriv->traffic_stat.cur_rx_bytes * 8 / 2 / 1024 / 1024);/*Mbps*/
4086 
4087 	#ifdef DBG_TRAFFIC_STATISTIC
4088 	RTW_INFO("\n========================\n");
4089 	RTW_INFO("cur_tx_bytes:%lld\n", pdvobjpriv->traffic_stat.cur_tx_bytes);
4090 	RTW_INFO("cur_rx_bytes:%lld\n", pdvobjpriv->traffic_stat.cur_rx_bytes);
4091 
4092 	RTW_INFO("last_tx_bytes:%lld\n", pdvobjpriv->traffic_stat.last_tx_bytes);
4093 	RTW_INFO("last_rx_bytes:%lld\n", pdvobjpriv->traffic_stat.last_rx_bytes);
4094 
4095 	RTW_INFO("cur_tx_tp:%d (Mbps)\n", pdvobjpriv->traffic_stat.cur_tx_tp);
4096 	RTW_INFO("cur_rx_tp:%d (Mbps)\n", pdvobjpriv->traffic_stat.cur_rx_tp);
4097 	#endif
4098 
4099 #ifdef CONFIG_RTW_NAPI
4100 #ifdef CONFIG_RTW_NAPI_DYNAMIC
4101 	dynamic_napi_th_chk (padapter);
4102 #endif /* CONFIG_RTW_NAPI_DYNAMIC */
4103 #endif
4104 
4105 }
4106 
4107 void rtw_dynamic_check_timer_handlder(void *ctx)
4108 {
4109 	struct dvobj_priv *pdvobj = (struct dvobj_priv *)ctx;
4110 	_adapter *adapter = dvobj_get_primary_adapter(pdvobj);
4111 
4112 	if (!adapter)
4113 		goto exit;
4114 
4115 #if (MP_DRIVER == 1)
4116 	if (adapter->registrypriv.mp_mode == 1 && adapter->mppriv.mp_dm == 0) { /* for MP ODM dynamic Tx power tracking */
4117 		/* RTW_INFO("%s mp_dm =0 return\n", __func__); */
4118 		goto exit;
4119 	}
4120 #endif
4121 
4122 	if (!rtw_is_hw_init_completed(adapter))
4123 		goto exit;
4124 
4125 	if (RTW_CANNOT_RUN(adapter))
4126 		goto exit;
4127 
4128 	collect_traffic_statistics(adapter);
4129 	collect_sta_traffic_statistics(adapter);
4130 	rtw_mi_dynamic_check_timer_handlder(adapter);
4131 
4132 	if (!is_drv_in_lps(adapter))
4133 		rtw_dynamic_chk_wk_cmd(adapter);
4134 
4135 exit:
4136 	_set_timer(&pdvobj->dynamic_chk_timer, 2000);
4137 }
4138 
4139 
4140 #ifdef CONFIG_SET_SCAN_DENY_TIMER
4141 inline bool rtw_is_scan_deny(_adapter *adapter)
4142 {
4143 	struct mlme_priv *mlmepriv = &adapter->mlmepriv;
4144 	return (ATOMIC_READ(&mlmepriv->set_scan_deny) != 0) ? _TRUE : _FALSE;
4145 }
4146 
4147 inline void rtw_clear_scan_deny(_adapter *adapter)
4148 {
4149 	struct mlme_priv *mlmepriv = &adapter->mlmepriv;
4150 	ATOMIC_SET(&mlmepriv->set_scan_deny, 0);
4151 	if (0)
4152 		RTW_INFO(FUNC_ADPT_FMT"\n", FUNC_ADPT_ARG(adapter));
4153 }
4154 
4155 void rtw_set_scan_deny_timer_hdl(void *ctx)
4156 {
4157 	_adapter *adapter = (_adapter *)ctx;
4158 
4159 	rtw_clear_scan_deny(adapter);
4160 }
4161 void rtw_set_scan_deny(_adapter *adapter, u32 ms)
4162 {
4163 	struct mlme_priv *mlmepriv = &adapter->mlmepriv;
4164 	if (0)
4165 		RTW_INFO(FUNC_ADPT_FMT"\n", FUNC_ADPT_ARG(adapter));
4166 	ATOMIC_SET(&mlmepriv->set_scan_deny, 1);
4167 	_set_timer(&mlmepriv->set_scan_deny_timer, ms);
4168 }
4169 #endif
4170 
4171 #ifdef CONFIG_LAYER2_ROAMING
4172 /*
4173 * Select a new roaming candidate from the original @param candidate and @param competitor
4174 * @return _TRUE: candidate is updated
4175 * @return _FALSE: candidate is not updated
4176 */
4177 static int rtw_check_roaming_candidate(struct mlme_priv *mlme
4178 	, struct wlan_network **candidate, struct wlan_network *competitor)
4179 {
4180 	int updated = _FALSE;
4181 	_adapter *adapter = container_of(mlme, _adapter, mlmepriv);
4182 	struct rf_ctl_t *rfctl = adapter_to_rfctl(adapter);
4183 	RT_CHANNEL_INFO *chset = rfctl->channel_set;
4184 	u8 ch = competitor->network.Configuration.DSConfig;
4185 
4186 	if (rtw_chset_search_ch(chset, ch) < 0)
4187 		goto exit;
4188 	if (IS_DFS_SLAVE_WITH_RD(rfctl)
4189 		&& !rtw_rfctl_dfs_domain_unknown(rfctl)
4190 		&& rtw_chset_is_ch_non_ocp(chset, ch))
4191 		goto exit;
4192 
4193 #if defined(CONFIG_RTW_REPEATER_SON) &&  (!defined(CONFIG_RTW_REPEATER_SON_ROOT))
4194 	if (rtw_rson_isupdate_roamcan(mlme, candidate, competitor))
4195 		goto  update;
4196 	goto exit;
4197 #endif
4198 
4199 	if (is_same_ess(&competitor->network, &mlme->cur_network.network) == _FALSE)
4200 		goto exit;
4201 
4202 	if (rtw_is_desired_network(adapter, competitor) == _FALSE)
4203 		goto exit;
4204 
4205 #ifdef CONFIG_RTW_ROAM_QUICKSCAN
4206 	if (competitor->network.PhyInfo.SignalStrength > CONFIG_RTW_ROAM_QUICKSCAN_TH)
4207 		adapter->mlmeextpriv.quickscan_next = _TRUE;
4208 #endif
4209 
4210 #ifdef CONFIG_LAYER2_ROAMING
4211 	if (mlme->need_to_roam == _FALSE)
4212 		goto exit;
4213 #endif
4214 
4215 	RTW_INFO("roam candidate:%s %s("MAC_FMT", ch%3u) rssi:%d dBm, age:%5d\n",
4216 		 (competitor == mlme->cur_network_scanned) ? "*" : " " ,
4217 		 competitor->network.Ssid.Ssid,
4218 		 MAC_ARG(competitor->network.MacAddress),
4219 		 competitor->network.Configuration.DSConfig,
4220 		 (int)competitor->network.Rssi,
4221 		 rtw_get_passing_time_ms(competitor->last_scanned)
4222 		);
4223 
4224 	/* got specific addr to roam */
4225 	if (!is_zero_mac_addr(mlme->roam_tgt_addr)) {
4226 		if (_rtw_memcmp(mlme->roam_tgt_addr, competitor->network.MacAddress, ETH_ALEN) == _TRUE)
4227 			goto update;
4228 		else
4229 			goto exit;
4230 	}
4231 
4232 #ifdef CONFIG_RTW_80211R
4233 	if (rtw_ft_chk_flags(adapter, RTW_FT_PEER_EN)) {
4234 		if (rtw_ft_chk_roaming_candidate(adapter, competitor) == _FALSE)
4235 		goto exit;
4236 	}
4237 
4238 #ifdef CONFIG_RTW_WNM
4239 	if (rtw_wnm_btm_diff_bss(adapter) &&
4240 		rtw_wnm_btm_roam_candidate(adapter, competitor)) {
4241 		goto update;
4242 	}
4243 #endif
4244 #endif
4245 
4246 #if 1
4247 	if (rtw_get_passing_time_ms(competitor->last_scanned) >= mlme->roam_scanr_exp_ms)
4248 		goto exit;
4249 
4250 	if (competitor->network.Rssi - mlme->cur_network_scanned->network.Rssi < mlme->roam_rssi_diff_th)
4251 		goto exit;
4252 
4253 	if (*candidate != NULL && (*candidate)->network.Rssi >= competitor->network.Rssi)
4254 		goto exit;
4255 #else
4256 	goto exit;
4257 #endif
4258 
4259 update:
4260 	*candidate = competitor;
4261 	updated = _TRUE;
4262 
4263 exit:
4264 	return updated;
4265 }
4266 
4267 int rtw_select_roaming_candidate(struct mlme_priv *mlme)
4268 {
4269 	_irqL	irqL;
4270 	int ret = _FAIL;
4271 	_list	*phead;
4272 	_adapter *adapter;
4273 	_queue	*queue	= &(mlme->scanned_queue);
4274 	struct	wlan_network	*pnetwork = NULL;
4275 	struct	wlan_network	*candidate = NULL;
4276 
4277 	if (mlme->cur_network_scanned == NULL) {
4278 		rtw_warn_on(1);
4279 		goto exit;
4280 	}
4281 
4282 	_enter_critical_bh(&(mlme->scanned_queue.lock), &irqL);
4283 	phead = get_list_head(queue);
4284 	adapter = (_adapter *)mlme->nic_hdl;
4285 
4286 	mlme->pscanned = get_next(phead);
4287 
4288 	while (!rtw_end_of_queue_search(phead, mlme->pscanned)) {
4289 
4290 		pnetwork = LIST_CONTAINOR(mlme->pscanned, struct wlan_network, list);
4291 		if (pnetwork == NULL) {
4292 			ret = _FAIL;
4293 			goto exit;
4294 		}
4295 
4296 		mlme->pscanned = get_next(mlme->pscanned);
4297 
4298 		if (0)
4299 			RTW_INFO("%s("MAC_FMT", ch%u) rssi:%d\n"
4300 				 , pnetwork->network.Ssid.Ssid
4301 				 , MAC_ARG(pnetwork->network.MacAddress)
4302 				 , pnetwork->network.Configuration.DSConfig
4303 				 , (int)pnetwork->network.Rssi);
4304 
4305 		rtw_check_roaming_candidate(mlme, &candidate, pnetwork);
4306 
4307 	}
4308 
4309 	if (candidate == NULL) {
4310 	/*	if parent note lost the path to root and there is no other cadidate, report disconnection	*/
4311 #if defined(CONFIG_RTW_REPEATER_SON) &&  (!defined(CONFIG_RTW_REPEATER_SON_ROOT))
4312 		struct rtw_rson_struct  rson_curr;
4313 		u8 rson_score;
4314 
4315 		rtw_get_rson_struct(&(mlme->cur_network_scanned->network), &rson_curr);
4316 		rson_score = rtw_cal_rson_score(&rson_curr, mlme->cur_network_scanned->network.Rssi);
4317 		if (check_fwstate(mlme, WIFI_ASOC_STATE)
4318 			&& ((rson_score == RTW_RSON_SCORE_NOTCNNT)
4319 			|| (rson_score == RTW_RSON_SCORE_NOTSUP)))
4320 			receive_disconnect(adapter, mlme->cur_network_scanned->network.MacAddress
4321 								, WLAN_REASON_EXPIRATION_CHK, _FALSE);
4322 #endif
4323 		RTW_INFO("%s: return _FAIL(candidate == NULL)\n", __FUNCTION__);
4324 		ret = _FAIL;
4325 		goto exit;
4326 	} else {
4327 #if defined(CONFIG_RTW_REPEATER_SON) &&  (!defined(CONFIG_RTW_REPEATER_SON_ROOT))
4328 		struct rtw_rson_struct  rson_curr;
4329 		u8 rson_score;
4330 
4331 		rtw_get_rson_struct(&(candidate->network), &rson_curr);
4332 		rson_score = rtw_cal_rson_score(&rson_curr, candidate->network.Rssi);
4333 		RTW_INFO("%s: candidate: %s("MAC_FMT", ch:%u) rson_score:%d\n", __FUNCTION__,
4334 			candidate->network.Ssid.Ssid, MAC_ARG(candidate->network.MacAddress),
4335 			 candidate->network.Configuration.DSConfig, rson_score);
4336 #else
4337 		RTW_INFO("%s: candidate: %s("MAC_FMT", ch:%u)\n", __FUNCTION__,
4338 			candidate->network.Ssid.Ssid, MAC_ARG(candidate->network.MacAddress),
4339 			 candidate->network.Configuration.DSConfig);
4340 #endif
4341 		mlme->roam_network = candidate;
4342 
4343 		if (_rtw_memcmp(candidate->network.MacAddress, mlme->roam_tgt_addr, ETH_ALEN) == _TRUE)
4344 			_rtw_memset(mlme->roam_tgt_addr, 0, ETH_ALEN);
4345 	}
4346 
4347 	ret = _SUCCESS;
4348 exit:
4349 	_exit_critical_bh(&(mlme->scanned_queue.lock), &irqL);
4350 
4351 	return ret;
4352 }
4353 #endif /* CONFIG_LAYER2_ROAMING */
4354 
4355 /*
4356 * Select a new join candidate from the original @param candidate and @param competitor
4357 * @return _TRUE: candidate is updated
4358 * @return _FALSE: candidate is not updated
4359 */
4360 static int rtw_check_join_candidate(struct mlme_priv *mlme
4361 	    , struct wlan_network **candidate, struct wlan_network *competitor)
4362 {
4363 	int updated = _FALSE;
4364 	_adapter *adapter = container_of(mlme, _adapter, mlmepriv);
4365 	struct rf_ctl_t *rfctl = adapter_to_rfctl(adapter);
4366 	RT_CHANNEL_INFO *chset = rfctl->channel_set;
4367 	u8 ch = competitor->network.Configuration.DSConfig;
4368 
4369 	if (rtw_chset_search_ch(chset, ch) < 0)
4370 		goto exit;
4371 	if (IS_DFS_SLAVE_WITH_RD(rfctl)
4372 		&& !rtw_rfctl_dfs_domain_unknown(rfctl)
4373 		&& rtw_chset_is_ch_non_ocp(chset, ch))
4374 		goto exit;
4375 
4376 #if defined(CONFIG_RTW_REPEATER_SON) &&  (!defined(CONFIG_RTW_REPEATER_SON_ROOT))
4377 	s16 rson_score;
4378 	struct rtw_rson_struct  rson_data;
4379 
4380 	if (rtw_rson_choose(candidate, competitor)) {
4381 		*candidate = competitor;
4382 		rtw_get_rson_struct(&((*candidate)->network), &rson_data);
4383 		rson_score = rtw_cal_rson_score(&rson_data, (*candidate)->network.Rssi);
4384 		RTW_INFO("[assoc_ssid:%s] new candidate: %s("MAC_FMT", ch%u) rson_score:%d\n",
4385 			 mlme->assoc_ssid.Ssid,
4386 			 (*candidate)->network.Ssid.Ssid,
4387 			 MAC_ARG((*candidate)->network.MacAddress),
4388 			 (*candidate)->network.Configuration.DSConfig,
4389 			 rson_score);
4390 		return _TRUE;
4391 	}
4392 	return _FALSE;
4393 #endif
4394 
4395 	/* check bssid, if needed */
4396 	if (mlme->assoc_by_bssid == _TRUE) {
4397 		if (_rtw_memcmp(competitor->network.MacAddress, mlme->assoc_bssid, ETH_ALEN) == _FALSE)
4398 			goto exit;
4399 	}
4400 
4401 	/* check ssid, if needed */
4402 	if (mlme->assoc_ssid.Ssid[0] && mlme->assoc_ssid.SsidLength) {
4403 		if (competitor->network.Ssid.SsidLength != mlme->assoc_ssid.SsidLength
4404 		    || _rtw_memcmp(competitor->network.Ssid.Ssid, mlme->assoc_ssid.Ssid, mlme->assoc_ssid.SsidLength) == _FALSE
4405 		   )
4406 			goto exit;
4407 	}
4408 
4409 	if (rtw_is_desired_network(adapter, competitor)  == _FALSE)
4410 		goto exit;
4411 
4412 #ifdef CONFIG_LAYER2_ROAMING
4413 	if (rtw_to_roam(adapter) > 0) {
4414 		if (rtw_get_passing_time_ms(competitor->last_scanned) >= mlme->roam_scanr_exp_ms
4415 		    || is_same_ess(&competitor->network, &mlme->cur_network.network) == _FALSE
4416 		   )
4417 			goto exit;
4418 	}
4419 #endif
4420 
4421 	if (*candidate == NULL || (*candidate)->network.Rssi < competitor->network.Rssi) {
4422 		*candidate = competitor;
4423 		updated = _TRUE;
4424 	}
4425 
4426 	if (updated) {
4427 		RTW_INFO("[by_bssid:%u][assoc_ssid:%s][to_roam:%u] "
4428 			 "new candidate: %s("MAC_FMT", ch%u) rssi:%d dBm\n",
4429 			 mlme->assoc_by_bssid,
4430 			 mlme->assoc_ssid.Ssid,
4431 			 rtw_to_roam(adapter),
4432 			 (*candidate)->network.Ssid.Ssid,
4433 			 MAC_ARG((*candidate)->network.MacAddress),
4434 			 (*candidate)->network.Configuration.DSConfig,
4435 			 (int)(*candidate)->network.Rssi
4436 			);
4437 	}
4438 
4439 exit:
4440 	return updated;
4441 }
4442 
4443 /*
4444 Calling context:
4445 The caller of the sub-routine will be in critical section...
4446 
4447 The caller must hold the following spinlock
4448 
4449 pmlmepriv->lock
4450 
4451 
4452 */
4453 
4454 int rtw_select_and_join_from_scanned_queue(struct mlme_priv *pmlmepriv)
4455 {
4456 	_irqL	irqL;
4457 	int ret;
4458 	_list	*phead;
4459 	_adapter *adapter;
4460 	_queue	*queue	= &(pmlmepriv->scanned_queue);
4461 	struct	wlan_network	*pnetwork = NULL;
4462 	struct	wlan_network	*candidate = NULL;
4463 #ifdef CONFIG_ANTENNA_DIVERSITY
4464 	u8		bSupportAntDiv = _FALSE;
4465 #endif
4466 
4467 	adapter = (_adapter *)pmlmepriv->nic_hdl;
4468 
4469 	_enter_critical_bh(&(pmlmepriv->scanned_queue.lock), &irqL);
4470 
4471 #ifdef CONFIG_LAYER2_ROAMING
4472 	if (pmlmepriv->roam_network) {
4473 		candidate = pmlmepriv->roam_network;
4474 		goto candidate_exist;
4475 	}
4476 #endif
4477 
4478 	phead = get_list_head(queue);
4479 	pmlmepriv->pscanned = get_next(phead);
4480 
4481 	while (!rtw_end_of_queue_search(phead, pmlmepriv->pscanned)) {
4482 
4483 		pnetwork = LIST_CONTAINOR(pmlmepriv->pscanned, struct wlan_network, list);
4484 		if (pnetwork == NULL) {
4485 			ret = _FAIL;
4486 			goto exit;
4487 		}
4488 
4489 		pmlmepriv->pscanned = get_next(pmlmepriv->pscanned);
4490 
4491 		if (0)
4492 			RTW_INFO("%s("MAC_FMT", ch%u) rssi:%d\n"
4493 				 , pnetwork->network.Ssid.Ssid
4494 				 , MAC_ARG(pnetwork->network.MacAddress)
4495 				 , pnetwork->network.Configuration.DSConfig
4496 				 , (int)pnetwork->network.Rssi);
4497 
4498 		rtw_check_join_candidate(pmlmepriv, &candidate, pnetwork);
4499 
4500 	}
4501 
4502 	if (candidate == NULL) {
4503 		RTW_INFO("%s: return _FAIL(candidate == NULL)\n", __FUNCTION__);
4504 #ifdef CONFIG_WOWLAN
4505 		_clr_fwstate_(pmlmepriv, WIFI_ASOC_STATE | WIFI_UNDER_LINKING);
4506 #endif
4507 		ret = _FAIL;
4508 		goto exit;
4509 	} else {
4510 		RTW_INFO("%s: candidate: %s("MAC_FMT", ch:%u)\n", __FUNCTION__,
4511 			candidate->network.Ssid.Ssid, MAC_ARG(candidate->network.MacAddress),
4512 			 candidate->network.Configuration.DSConfig);
4513 		goto candidate_exist;
4514 	}
4515 
4516 candidate_exist:
4517 
4518 	/* check for situation of  WIFI_ASOC_STATE */
4519 	if (check_fwstate(pmlmepriv, WIFI_ASOC_STATE) == _TRUE) {
4520 		RTW_INFO("%s: WIFI_ASOC_STATE while ask_for_joinbss!!!\n", __FUNCTION__);
4521 
4522 #if 0 /* for WPA/WPA2 authentication, wpa_supplicant will expect authentication from AP, it is needed to reconnect AP... */
4523 		if (is_same_network(&pmlmepriv->cur_network.network, &candidate->network)) {
4524 			RTW_INFO("%s: WIFI_ASOC_STATE and is same network, it needn't join again\n", __FUNCTION__);
4525 
4526 			rtw_indicate_connect(adapter);/* rtw_indicate_connect again */
4527 
4528 			ret = 2;
4529 			goto exit;
4530 		} else
4531 #endif
4532 		{
4533 			rtw_disassoc_cmd(adapter, 0, 0);
4534 			rtw_indicate_disconnect(adapter, 0, _FALSE);
4535 			rtw_free_assoc_resources_cmd(adapter, _TRUE, 0);
4536 		}
4537 	}
4538 
4539 #ifdef CONFIG_ANTENNA_DIVERSITY
4540 	rtw_hal_get_def_var(adapter, HAL_DEF_IS_SUPPORT_ANT_DIV, &(bSupportAntDiv));
4541 	if (_TRUE == bSupportAntDiv) {
4542 		u8 CurrentAntenna;
4543 		rtw_hal_get_odm_var(adapter, HAL_ODM_ANTDIV_SELECT, &(CurrentAntenna), NULL);
4544 		RTW_INFO("#### Opt_Ant_(%s) , cur_Ant(%s)\n",
4545 			(MAIN_ANT == candidate->network.PhyInfo.Optimum_antenna) ? "MAIN_ANT" : "AUX_ANT",
4546 			 (MAIN_ANT == CurrentAntenna) ? "MAIN_ANT" : "AUX_ANT"
4547 			);
4548 	}
4549 #endif
4550 	set_fwstate(pmlmepriv, WIFI_UNDER_LINKING);
4551 	ret = rtw_joinbss_cmd(adapter, candidate);
4552 
4553 exit:
4554 	_exit_critical_bh(&(pmlmepriv->scanned_queue.lock), &irqL);
4555 
4556 
4557 	return ret;
4558 }
4559 
4560 sint rtw_set_auth(_adapter *adapter, struct security_priv *psecuritypriv)
4561 {
4562 	struct	cmd_obj *pcmd;
4563 	struct	setauth_parm *psetauthparm;
4564 	struct	cmd_priv	*pcmdpriv = &(adapter->cmdpriv);
4565 	sint		res = _SUCCESS;
4566 
4567 
4568 	pcmd = (struct	cmd_obj *)rtw_zmalloc(sizeof(struct	cmd_obj));
4569 	if (pcmd == NULL) {
4570 		res = _FAIL; /* try again */
4571 		goto exit;
4572 	}
4573 
4574 	psetauthparm = (struct setauth_parm *)rtw_zmalloc(sizeof(struct setauth_parm));
4575 	if (psetauthparm == NULL) {
4576 		rtw_mfree((unsigned char *)pcmd, sizeof(struct	cmd_obj));
4577 		res = _FAIL;
4578 		goto exit;
4579 	}
4580 
4581 	_rtw_memset(psetauthparm, 0, sizeof(struct setauth_parm));
4582 	psetauthparm->mode = (unsigned char)psecuritypriv->dot11AuthAlgrthm;
4583 
4584 	pcmd->cmdcode = CMD_SET_AUTH;
4585 	pcmd->parmbuf = (unsigned char *)psetauthparm;
4586 	pcmd->cmdsz = (sizeof(struct setauth_parm));
4587 	pcmd->rsp = NULL;
4588 	pcmd->rspsz = 0;
4589 
4590 
4591 	_rtw_init_listhead(&pcmd->list);
4592 
4593 
4594 	res = rtw_enqueue_cmd(pcmdpriv, pcmd);
4595 
4596 exit:
4597 
4598 
4599 	return res;
4600 
4601 }
4602 
4603 
4604 sint rtw_set_key(_adapter *adapter, struct security_priv *psecuritypriv, sint keyid, u8 set_tx, bool enqueue)
4605 {
4606 	u8	keylen;
4607 	struct cmd_obj		*pcmd;
4608 	struct setkey_parm	*psetkeyparm;
4609 	struct cmd_priv		*pcmdpriv = &(adapter->cmdpriv);
4610 	sint	res = _SUCCESS;
4611 
4612 
4613 	psetkeyparm = (struct setkey_parm *)rtw_zmalloc(sizeof(struct setkey_parm));
4614 	if (psetkeyparm == NULL) {
4615 		res = _FAIL;
4616 		goto exit;
4617 	}
4618 	_rtw_memset(psetkeyparm, 0, sizeof(struct setkey_parm));
4619 
4620 	if (psecuritypriv->dot11AuthAlgrthm == dot11AuthAlgrthm_8021X) {
4621 		psetkeyparm->algorithm = (unsigned char)psecuritypriv->dot118021XGrpPrivacy;
4622 	} else {
4623 		psetkeyparm->algorithm = (u8)psecuritypriv->dot11PrivacyAlgrthm;
4624 
4625 	}
4626 	psetkeyparm->keyid = (u8)keyid;/* 0~3 */
4627 	psetkeyparm->set_tx = set_tx;
4628 	if (is_wep_enc(psetkeyparm->algorithm))
4629 		adapter->securitypriv.key_mask |= BIT(psetkeyparm->keyid);
4630 
4631 	RTW_INFO("==> rtw_set_key algorithm(%x),keyid(%x),key_mask(%x)\n", psetkeyparm->algorithm, psetkeyparm->keyid, adapter->securitypriv.key_mask);
4632 
4633 	switch (psetkeyparm->algorithm) {
4634 
4635 	case _WEP40_:
4636 		keylen = 5;
4637 		_rtw_memcpy(&(psetkeyparm->key[0]), &(psecuritypriv->dot11DefKey[keyid].skey[0]), keylen);
4638 		break;
4639 	case _WEP104_:
4640 		keylen = 13;
4641 		_rtw_memcpy(&(psetkeyparm->key[0]), &(psecuritypriv->dot11DefKey[keyid].skey[0]), keylen);
4642 		break;
4643 	case _TKIP_:
4644 		keylen = 16;
4645 		_rtw_memcpy(&psetkeyparm->key, &psecuritypriv->dot118021XGrpKey[keyid], keylen);
4646 		break;
4647 	case _AES_:
4648 	case _GCMP_:
4649 		keylen = 16;
4650 		_rtw_memcpy(&psetkeyparm->key, &psecuritypriv->dot118021XGrpKey[keyid], keylen);
4651 		break;
4652 	case _GCMP_256_:
4653 	case _CCMP_256_:
4654 		keylen = 32;
4655 		_rtw_memcpy(&psetkeyparm->key, &psecuritypriv->dot118021XGrpKey[keyid], keylen);
4656 		break;
4657 	default:
4658 		res = _FAIL;
4659 		rtw_mfree((unsigned char *)psetkeyparm, sizeof(struct setkey_parm));
4660 		goto exit;
4661 	}
4662 
4663 
4664 	if (enqueue) {
4665 		pcmd = (struct	cmd_obj *)rtw_zmalloc(sizeof(struct	cmd_obj));
4666 		if (pcmd == NULL) {
4667 			rtw_mfree((unsigned char *)psetkeyparm, sizeof(struct setkey_parm));
4668 			res = _FAIL; /* try again */
4669 			goto exit;
4670 		}
4671 
4672 		pcmd->cmdcode =CMD_SET_KEY;
4673 		pcmd->parmbuf = (u8 *)psetkeyparm;
4674 		pcmd->cmdsz = (sizeof(struct setkey_parm));
4675 		pcmd->rsp = NULL;
4676 		pcmd->rspsz = 0;
4677 
4678 		_rtw_init_listhead(&pcmd->list);
4679 
4680 		/* _rtw_init_sema(&(pcmd->cmd_sem), 0); */
4681 
4682 		res = rtw_enqueue_cmd(pcmdpriv, pcmd);
4683 	} else {
4684 		setkey_hdl(adapter, (u8 *)psetkeyparm);
4685 		rtw_mfree((u8 *) psetkeyparm, sizeof(struct setkey_parm));
4686 	}
4687 exit:
4688 	return res;
4689 
4690 }
4691 
4692 #ifdef CONFIG_WMMPS_STA
4693 /*
4694  * rtw_uapsd_use_default_setting
4695  * This function is used for setting default uapsd max sp length to uapsd_max_sp_len
4696  * in qos_priv data structure from registry. In additional, it will also map default uapsd
4697  * ac to each uapsd TID, delivery-enabled and trigger-enabled of corresponding TID.
4698  *
4699  * Arguments:
4700  * @padapter: _adapter pointer.
4701  *
4702  * Auther: Arvin Liu
4703  * Date: 2017/05/03
4704  */
4705 void	rtw_uapsd_use_default_setting(_adapter *padapter)
4706 {
4707 	struct mlme_priv		*pmlmepriv = &padapter->mlmepriv;
4708 	struct qos_priv		*pqospriv = &pmlmepriv->qospriv;
4709 	struct registry_priv		*pregistrypriv = &padapter->registrypriv;
4710 
4711 	if (pregistrypriv->uapsd_ac_enable != 0) {
4712 		pqospriv->uapsd_max_sp_len = pregistrypriv->uapsd_max_sp_len;
4713 
4714 		CLEAR_FLAGS(pqospriv->uapsd_tid);
4715 		CLEAR_FLAGS(pqospriv->uapsd_tid_delivery_enabled);
4716 		CLEAR_FLAGS(pqospriv->uapsd_tid_trigger_enabled);
4717 
4718 		/* check the uapsd setting of AC_VO from registry then map these setting to each TID if necessary  */
4719 		if(TEST_FLAG(pregistrypriv->uapsd_ac_enable, DRV_CFG_UAPSD_VO)) {
4720 			SET_FLAG(pqospriv->uapsd_tid, WMM_TID7);
4721 			SET_FLAG(pqospriv->uapsd_tid_delivery_enabled, WMM_TID7);
4722 			SET_FLAG(pqospriv->uapsd_tid_trigger_enabled, WMM_TID7);
4723 			SET_FLAG(pqospriv->uapsd_tid, WMM_TID6);
4724 			SET_FLAG(pqospriv->uapsd_tid_delivery_enabled, WMM_TID6);
4725 			SET_FLAG(pqospriv->uapsd_tid_trigger_enabled, WMM_TID6);
4726 		}
4727 
4728 		/* check the uapsd setting of AC_VI from registry then map these setting to each TID if necessary  */
4729 		if(TEST_FLAG(pregistrypriv->uapsd_ac_enable, DRV_CFG_UAPSD_VI)) {
4730 			SET_FLAG(pqospriv->uapsd_tid, WMM_TID5);
4731 			SET_FLAG(pqospriv->uapsd_tid_delivery_enabled, WMM_TID5);
4732 			SET_FLAG(pqospriv->uapsd_tid_trigger_enabled, WMM_TID5);
4733 			SET_FLAG(pqospriv->uapsd_tid, WMM_TID4);
4734 			SET_FLAG(pqospriv->uapsd_tid_delivery_enabled, WMM_TID4);
4735 			SET_FLAG(pqospriv->uapsd_tid_trigger_enabled, WMM_TID4);
4736 		}
4737 
4738 		/* check the uapsd setting of AC_BK from registry then map these setting to each TID if necessary  */
4739 		if(TEST_FLAG(pregistrypriv->uapsd_ac_enable, DRV_CFG_UAPSD_BK)) {
4740 			SET_FLAG(pqospriv->uapsd_tid, WMM_TID2);
4741 			SET_FLAG(pqospriv->uapsd_tid_delivery_enabled, WMM_TID2);
4742 			SET_FLAG(pqospriv->uapsd_tid_trigger_enabled, WMM_TID2);
4743 			SET_FLAG(pqospriv->uapsd_tid, WMM_TID1);
4744 			SET_FLAG(pqospriv->uapsd_tid_delivery_enabled, WMM_TID1);
4745 			SET_FLAG(pqospriv->uapsd_tid_trigger_enabled, WMM_TID1);
4746 		}
4747 
4748 		/* check the uapsd setting of AC_BE from registry then map these setting to each TID if necessary  */
4749 		if(TEST_FLAG(pregistrypriv->uapsd_ac_enable, DRV_CFG_UAPSD_BE)) {
4750 			SET_FLAG(pqospriv->uapsd_tid, WMM_TID3);
4751 			SET_FLAG(pqospriv->uapsd_tid_delivery_enabled, WMM_TID3);
4752 			SET_FLAG(pqospriv->uapsd_tid_trigger_enabled, WMM_TID3);
4753 			SET_FLAG(pqospriv->uapsd_tid, WMM_TID0);
4754 			SET_FLAG(pqospriv->uapsd_tid_delivery_enabled, WMM_TID0);
4755 			SET_FLAG(pqospriv->uapsd_tid_trigger_enabled, WMM_TID0);
4756 		}
4757 
4758 		RTW_INFO("[WMMPS] UAPSD MAX SP Len = 0x%02x, UAPSD TID enabled = 0x%02x\n",
4759 			pqospriv->uapsd_max_sp_len, (u8)pqospriv->uapsd_tid);
4760 	}
4761 
4762 }
4763 
4764 /*
4765  * rtw_is_wmmps_mode
4766  * This function is used for checking whether Driver and an AP support uapsd function or not.
4767  * If both of them support uapsd function, it will return true. Otherwise returns false.
4768  *
4769  * Arguments:
4770  * @padapter: _adapter pointer.
4771  *
4772  * Auther: Arvin Liu
4773  * Date: 2017/06/12
4774  */
4775 bool rtw_is_wmmps_mode(_adapter *padapter)
4776 {
4777 	struct mlme_priv	*pmlmepriv = &(padapter->mlmepriv);
4778 	struct qos_priv	*pqospriv = &pmlmepriv->qospriv;
4779 
4780 	if ((pqospriv->uapsd_ap_supported) && ((pqospriv->uapsd_tid & BIT_MASK_TID_TC)  != 0))
4781 		return _TRUE;
4782 
4783 	return _FALSE;
4784 }
4785 #endif /* CONFIG_WMMPS_STA */
4786 
4787 /* adjust IEs for rtw_joinbss_cmd in WMM */
4788 int rtw_restruct_wmm_ie(_adapter *adapter, u8 *in_ie, u8 *out_ie, uint in_len, uint initial_out_len)
4789 {
4790 #ifdef CONFIG_WMMPS_STA
4791 	struct mlme_priv		*pmlmepriv = &adapter->mlmepriv;
4792 	struct qos_priv		*pqospriv = &pmlmepriv->qospriv;
4793 #endif /* CONFIG_WMMPS_STA */
4794 	unsigned	int ielength = 0;
4795 	unsigned int i, j;
4796 	u8 qos_info = 0;
4797 
4798 	i = 12; /* after the fixed IE */
4799 	while (i < in_len) {
4800 		ielength = initial_out_len;
4801 
4802 		if (in_ie[i] == 0xDD && in_ie[i + 2] == 0x00 && in_ie[i + 3] == 0x50  && in_ie[i + 4] == 0xF2 && in_ie[i + 5] == 0x02 && i + 5 < in_len) { /* WMM element ID and OUI */
4803 
4804 			/* Append WMM IE to the last index of out_ie */
4805 #if 0
4806 			for (j = i; j < i + (in_ie[i + 1] + 2); j++) {
4807 				out_ie[ielength] = in_ie[j];
4808 				ielength++;
4809 			}
4810 			out_ie[initial_out_len + 8] = 0x00; /* force the QoS Info Field to be zero */
4811 #endif
4812 
4813 			for (j = i; j < i + 9; j++) {
4814 				out_ie[ielength] = in_ie[j];
4815 				ielength++;
4816 			}
4817 			out_ie[initial_out_len + 1] = 0x07;
4818 			out_ie[initial_out_len + 6] = 0x00;
4819 
4820 #ifdef CONFIG_WMMPS_STA
4821 			switch(pqospriv->uapsd_max_sp_len) {
4822 				case NO_LIMIT:
4823 					/* do nothing */
4824 					break;
4825 				case TWO_MSDU:
4826 					SET_FLAG(qos_info, BIT5);
4827 					break;
4828 				case FOUR_MSDU:
4829 					SET_FLAG(qos_info, BIT6);
4830 					break;
4831 				case SIX_MSDU:
4832 					SET_FLAG(qos_info, BIT5);
4833 					SET_FLAG(qos_info, BIT6);
4834 					break;
4835 				default:
4836 					/* do nothing */
4837 					break;
4838 			};
4839 
4840 			/* check TID7 and TID6 for AC_VO to set corresponding Qos_info bit in WMM IE  */
4841 			if((TEST_FLAG(pqospriv->uapsd_tid, WMM_TID7)) && (TEST_FLAG(pqospriv->uapsd_tid, WMM_TID6)))
4842 				SET_FLAG(qos_info, WMM_IE_UAPSD_VO);
4843 			/* check TID5 and TID4 for AC_VI to set corresponding Qos_info bit in WMM IE  */
4844 			if((TEST_FLAG(pqospriv->uapsd_tid, WMM_TID5)) && (TEST_FLAG(pqospriv->uapsd_tid, WMM_TID4)))
4845 				SET_FLAG(qos_info, WMM_IE_UAPSD_VI);
4846 			/* check TID2 and TID1 for AC_BK to set corresponding Qos_info bit in WMM IE  */
4847 			if((TEST_FLAG(pqospriv->uapsd_tid, WMM_TID2)) && (TEST_FLAG(pqospriv->uapsd_tid, WMM_TID1)))
4848 				SET_FLAG(qos_info, WMM_IE_UAPSD_BK);
4849 			/* check TID3 and TID0 for AC_BE to set corresponding Qos_info bit in WMM IE  */
4850 			if((TEST_FLAG(pqospriv->uapsd_tid, WMM_TID3)) && (TEST_FLAG(pqospriv->uapsd_tid, WMM_TID0)))
4851 				SET_FLAG(qos_info, WMM_IE_UAPSD_BE);
4852 #endif /* CONFIG_WMMPS_STA */
4853 
4854 			out_ie[initial_out_len + 8] = qos_info;
4855 
4856 			break;
4857 		}
4858 
4859 		i += (in_ie[i + 1] + 2); /* to the next IE element */
4860 	}
4861 
4862 	return ielength;
4863 
4864 }
4865 
4866 
4867 /*
4868  * Ported from 8185: IsInPreAuthKeyList(). (Renamed from SecIsInPreAuthKeyList(), 2006-10-13.)
4869  * Added by Annie, 2006-05-07.
4870  *
4871  * Search by BSSID,
4872  * Return Value:
4873  *		-1		:if there is no pre-auth key in the  table
4874  *		>=0		:if there is pre-auth key, and   return the entry id
4875  *
4876  *   */
4877 
4878 static int SecIsInPMKIDList(_adapter *Adapter, u8 *bssid)
4879 {
4880 	struct security_priv *psecuritypriv = &Adapter->securitypriv;
4881 	int i = 0;
4882 
4883 	do {
4884 		if ((psecuritypriv->PMKIDList[i].bUsed) &&
4885 		    (_rtw_memcmp(psecuritypriv->PMKIDList[i].Bssid, bssid, ETH_ALEN) == _TRUE))
4886 			break;
4887 		else {
4888 			i++;
4889 			/* continue; */
4890 		}
4891 
4892 	} while (i < NUM_PMKID_CACHE);
4893 
4894 	if (i == NUM_PMKID_CACHE) {
4895 		i = -1;/* Could not find. */
4896 	} else {
4897 		/* There is one Pre-Authentication Key for the specific BSSID. */
4898 	}
4899 
4900 	return i;
4901 
4902 }
4903 
4904 int rtw_cached_pmkid(_adapter *Adapter, u8 *bssid)
4905 {
4906 	return SecIsInPMKIDList(Adapter, bssid);
4907 }
4908 
4909 int rtw_rsn_sync_pmkid(_adapter *adapter, u8 *ie, uint ie_len, int i_ent)
4910 {
4911 	struct security_priv *sec = &adapter->securitypriv;
4912 	struct rsne_info info;
4913 	u8 gm_cs[4];
4914 	int i;
4915 
4916 	rtw_rsne_info_parse(ie, ie_len, &info);
4917 
4918 	if (info.err) {
4919 		RTW_WARN(FUNC_ADPT_FMT" rtw_rsne_info_parse error\n"
4920 			, FUNC_ADPT_ARG(adapter));
4921 		return 0;
4922 	}
4923 
4924 	if (i_ent < 0 && info.pmkid_cnt == 0)
4925 		goto exit;
4926 
4927 	if (info.pmkid_list == NULL)
4928 		goto exit;
4929 
4930 	if (i_ent >= 0 && info.pmkid_cnt == 1 && _rtw_memcmp(info.pmkid_list, sec->PMKIDList[i_ent].PMKID, 16)) {
4931 		RTW_INFO(FUNC_ADPT_FMT" has carried the same PMKID:"KEY_FMT"\n"
4932 			, FUNC_ADPT_ARG(adapter), KEY_ARG(&sec->PMKIDList[i_ent].PMKID));
4933 		goto exit;
4934 	}
4935 
4936 	/* bakcup group mgmt cs */
4937 	if (info.gmcs)
4938 		_rtw_memcpy(gm_cs, info.gmcs, 4);
4939 
4940 	if (info.pmkid_cnt) {
4941 		RTW_INFO(FUNC_ADPT_FMT" remove original PMKID, count:%u\n"
4942 			 , FUNC_ADPT_ARG(adapter), info.pmkid_cnt);
4943 		for (i = 0; i < info.pmkid_cnt; i++)
4944 			RTW_INFO("    "KEY_FMT"\n", KEY_ARG(info.pmkid_list + i * 16));
4945 	}
4946 
4947 	if (i_ent >= 0) {
4948 		RTW_INFO(FUNC_ADPT_FMT" append PMKID:"KEY_FMT"\n"
4949 			, FUNC_ADPT_ARG(adapter), KEY_ARG(sec->PMKIDList[i_ent].PMKID));
4950 
4951 		info.pmkid_cnt = 1; /* update new pmkid_cnt */
4952 		_rtw_memcpy(info.pmkid_list, sec->PMKIDList[i_ent].PMKID, 16);
4953 	} else
4954 		info.pmkid_cnt = 0; /* update new pmkid_cnt */
4955 
4956 	RTW_PUT_LE16(info.pmkid_list - 2, info.pmkid_cnt);
4957 	if (info.gmcs)
4958 		_rtw_memcpy(info.pmkid_list + 16 * info.pmkid_cnt, gm_cs, 4);
4959 
4960 	ie_len = 1 + 1 + 2 + 4
4961 		+ 2 + 4 * info.pcs_cnt
4962 		+ 2 + 4 * info.akm_cnt
4963 		+ 2
4964 		+ 2 + 16 * info.pmkid_cnt
4965 		+ (info.gmcs ? 4 : 0)
4966 		;
4967 
4968 	ie[1] = (u8)(ie_len - 2);
4969 
4970 exit:
4971 	return ie_len;
4972 }
4973 
4974 sint rtw_restruct_sec_ie(_adapter *adapter, u8 *out_ie)
4975 {
4976 	u8 authmode = 0x0;
4977 	uint	ielength = 0;
4978 	int iEntry;
4979 
4980 	struct mlme_priv *pmlmepriv = &adapter->mlmepriv;
4981 	struct security_priv *psecuritypriv = &adapter->securitypriv;
4982 	uint	ndisauthmode = psecuritypriv->ndisauthtype;
4983 
4984 	if ((ndisauthmode == Ndis802_11AuthModeWPA) || (ndisauthmode == Ndis802_11AuthModeWPAPSK))
4985 		authmode = _WPA_IE_ID_;
4986 	if ((ndisauthmode == Ndis802_11AuthModeWPA2) || (ndisauthmode == Ndis802_11AuthModeWPA2PSK))
4987 		authmode = _WPA2_IE_ID_;
4988 
4989 	if (check_fwstate(pmlmepriv, WIFI_UNDER_WPS)) {
4990 		_rtw_memcpy(out_ie, psecuritypriv->wps_ie, psecuritypriv->wps_ie_len);
4991 		ielength = psecuritypriv->wps_ie_len;
4992 
4993 	} else if ((authmode == _WPA_IE_ID_) || (authmode == _WPA2_IE_ID_)) {
4994 		/* copy RSN or SSN		 */
4995 		_rtw_memcpy(out_ie, psecuritypriv->supplicant_ie, psecuritypriv->supplicant_ie[1] + 2);
4996 		/* debug for CONFIG_IEEE80211W
4997 		{
4998 			int jj;
4999 			printk("supplicant_ie_length=%d &&&&&&&&&&&&&&&&&&&\n", psecuritypriv->supplicant_ie[1]+2);
5000 			for(jj=0; jj < psecuritypriv->supplicant_ie[1]+2; jj++)
5001 				printk(" %02x ", psecuritypriv->supplicant_ie[jj]);
5002 			printk("\n");
5003 		}*/
5004 		ielength = psecuritypriv->supplicant_ie[1] + 2;
5005 		rtw_report_sec_ie(adapter, authmode, psecuritypriv->supplicant_ie);
5006 	}
5007 
5008 	if (authmode == WLAN_EID_RSN) {
5009 		iEntry = SecIsInPMKIDList(adapter, pmlmepriv->assoc_bssid);
5010 		ielength = rtw_rsn_sync_pmkid(adapter, out_ie, ielength, iEntry);
5011 	}
5012 
5013 	if ((psecuritypriv->auth_type == MLME_AUTHTYPE_SAE) &&
5014 		(psecuritypriv->rsnx_ie_len >= 3)) {
5015 		u8 *_pos = out_ie + (psecuritypriv->supplicant_ie[1] + 2);
5016 		_rtw_memcpy(_pos, psecuritypriv->rsnx_ie,
5017 			psecuritypriv->rsnx_ie_len);
5018 		ielength += psecuritypriv->rsnx_ie_len;
5019 		RTW_INFO_DUMP("update IE for RSNX :", out_ie, ielength);
5020 	}
5021 
5022 	return ielength;
5023 }
5024 
5025 void rtw_init_registrypriv_dev_network(_adapter *adapter)
5026 {
5027 	struct registry_priv *pregistrypriv = &adapter->registrypriv;
5028 	WLAN_BSSID_EX    *pdev_network = &pregistrypriv->dev_network;
5029 	u8 *myhwaddr = adapter_mac_addr(adapter);
5030 
5031 
5032 	_rtw_memcpy(pdev_network->MacAddress, myhwaddr, ETH_ALEN);
5033 
5034 	_rtw_memcpy(&pdev_network->Ssid, &pregistrypriv->ssid, sizeof(NDIS_802_11_SSID));
5035 
5036 	pdev_network->Configuration.Length = sizeof(NDIS_802_11_CONFIGURATION);
5037 	pdev_network->Configuration.BeaconPeriod = 100;
5038 }
5039 
5040 void rtw_update_registrypriv_dev_network(_adapter *adapter)
5041 {
5042 	int sz = 0;
5043 	struct registry_priv *pregistrypriv = &adapter->registrypriv;
5044 	WLAN_BSSID_EX    *pdev_network = &pregistrypriv->dev_network;
5045 	struct	security_priv	*psecuritypriv = &adapter->securitypriv;
5046 	struct	wlan_network	*cur_network = &adapter->mlmepriv.cur_network;
5047 	/* struct	xmit_priv	*pxmitpriv = &adapter->xmitpriv; */
5048 	struct mlme_ext_priv	*pmlmeext = &adapter->mlmeextpriv;
5049 
5050 
5051 #if 0
5052 	pxmitpriv->vcs_setting = pregistrypriv->vrtl_carrier_sense;
5053 	pxmitpriv->vcs = pregistrypriv->vcs_type;
5054 	pxmitpriv->vcs_type = pregistrypriv->vcs_type;
5055 	/* pxmitpriv->rts_thresh = pregistrypriv->rts_thresh; */
5056 	pxmitpriv->frag_len = pregistrypriv->frag_thresh;
5057 
5058 	adapter->qospriv.qos_option = pregistrypriv->wmm_enable;
5059 #endif
5060 
5061 	pdev_network->Privacy = (psecuritypriv->dot11PrivacyAlgrthm > 0 ? 1 : 0) ; /* adhoc no 802.1x */
5062 
5063 	pdev_network->Rssi = 0;
5064 
5065 	pdev_network->Configuration.DSConfig = (pregistrypriv->channel);
5066 
5067 	if (cur_network->network.InfrastructureMode == Ndis802_11IBSS) {
5068 		pdev_network->Configuration.ATIMWindow = (0);
5069 
5070 		if (pmlmeext->cur_channel != 0)
5071 			pdev_network->Configuration.DSConfig = pmlmeext->cur_channel;
5072 		else
5073 			pdev_network->Configuration.DSConfig = 1;
5074 	}
5075 
5076 	pdev_network->InfrastructureMode = (cur_network->network.InfrastructureMode);
5077 
5078 	/* 1. Supported rates */
5079 	/* 2. IE */
5080 
5081 	/* rtw_set_supported_rate(pdev_network->SupportedRates, pregistrypriv->wireless_mode) ; */ /* will be called in rtw_generate_ie */
5082 	sz = rtw_generate_ie(pregistrypriv);
5083 
5084 	pdev_network->IELength = sz;
5085 
5086 	pdev_network->Length = get_WLAN_BSSID_EX_sz((WLAN_BSSID_EX *)pdev_network);
5087 
5088 	/* notes: translate IELength & Length after assign the Length to cmdsz in createbss_cmd(); */
5089 	/* pdev_network->IELength = cpu_to_le32(sz); */
5090 
5091 
5092 }
5093 
5094 void rtw_get_encrypt_decrypt_from_registrypriv(_adapter *adapter)
5095 {
5096 
5097 
5098 
5099 }
5100 
5101 /* the fucntion is at passive_level */
5102 void rtw_joinbss_reset(_adapter *padapter)
5103 {
5104 	u8	threshold;
5105 	struct mlme_priv	*pmlmepriv = &padapter->mlmepriv;
5106 	/* todo: if you want to do something io/reg/hw setting before join_bss, please add code here */
5107 
5108 #ifdef CONFIG_80211N_HT
5109 	struct ht_priv		*phtpriv = &pmlmepriv->htpriv;
5110 
5111 	pmlmepriv->num_FortyMHzIntolerant = 0;
5112 
5113 	pmlmepriv->num_sta_no_ht = 0;
5114 
5115 	phtpriv->ampdu_enable = _FALSE;/* reset to disabled */
5116 
5117 #if defined(CONFIG_USB_HCI) || defined(CONFIG_SDIO_HCI)
5118 	/* TH=1 => means that invalidate usb rx aggregation */
5119 	/* TH=0 => means that validate usb rx aggregation, use init value. */
5120 	if (phtpriv->ht_option) {
5121 		if (padapter->registrypriv.wifi_spec == 1)
5122 			threshold = 1;
5123 		else
5124 			threshold = 0;
5125 		rtw_hal_set_hwreg(padapter, HW_VAR_RXDMA_AGG_PG_TH, (u8 *)(&threshold));
5126 	} else {
5127 		threshold = 1;
5128 		rtw_hal_set_hwreg(padapter, HW_VAR_RXDMA_AGG_PG_TH, (u8 *)(&threshold));
5129 	}
5130 #endif/* #if defined( CONFIG_USB_HCI) || defined (CONFIG_SDIO_HCI) */
5131 
5132 #endif/* #ifdef CONFIG_80211N_HT */
5133 
5134 }
5135 
5136 
5137 #ifdef CONFIG_80211N_HT
5138 void	rtw_ht_use_default_setting(_adapter *padapter)
5139 {
5140 	struct mlme_priv		*pmlmepriv = &padapter->mlmepriv;
5141 	struct ht_priv		*phtpriv = &pmlmepriv->htpriv;
5142 	struct registry_priv	*pregistrypriv = &padapter->registrypriv;
5143 	BOOLEAN		bHwLDPCSupport = _FALSE, bHwSTBCSupport = _FALSE;
5144 #ifdef CONFIG_BEAMFORMING
5145 	BOOLEAN		bHwSupportBeamformer = _FALSE, bHwSupportBeamformee = _FALSE;
5146 #endif /* CONFIG_BEAMFORMING */
5147 
5148 	if (pregistrypriv->wifi_spec)
5149 		phtpriv->bss_coexist = 1;
5150 	else
5151 		phtpriv->bss_coexist = 0;
5152 
5153 	phtpriv->sgi_40m = TEST_FLAG(pregistrypriv->short_gi, BIT1) ? _TRUE : _FALSE;
5154 	phtpriv->sgi_20m = TEST_FLAG(pregistrypriv->short_gi, BIT0) ? _TRUE : _FALSE;
5155 
5156 	/* LDPC support */
5157 	rtw_hal_get_def_var(padapter, HAL_DEF_RX_LDPC, (u8 *)&bHwLDPCSupport);
5158 	CLEAR_FLAGS(phtpriv->ldpc_cap);
5159 	if (bHwLDPCSupport) {
5160 		if (TEST_FLAG(pregistrypriv->ldpc_cap, BIT4))
5161 			SET_FLAG(phtpriv->ldpc_cap, LDPC_HT_ENABLE_RX);
5162 	}
5163 	rtw_hal_get_def_var(padapter, HAL_DEF_TX_LDPC, (u8 *)&bHwLDPCSupport);
5164 	if (bHwLDPCSupport) {
5165 		if (TEST_FLAG(pregistrypriv->ldpc_cap, BIT5))
5166 			SET_FLAG(phtpriv->ldpc_cap, LDPC_HT_ENABLE_TX);
5167 	}
5168 	if (phtpriv->ldpc_cap)
5169 		RTW_INFO("[HT] HAL Support LDPC = 0x%02X\n", phtpriv->ldpc_cap);
5170 
5171 	/* STBC */
5172 	rtw_hal_get_def_var(padapter, HAL_DEF_TX_STBC, (u8 *)&bHwSTBCSupport);
5173 	CLEAR_FLAGS(phtpriv->stbc_cap);
5174 	if (bHwSTBCSupport) {
5175 		if (TEST_FLAG(pregistrypriv->stbc_cap, BIT5))
5176 			SET_FLAG(phtpriv->stbc_cap, STBC_HT_ENABLE_TX);
5177 	}
5178 	rtw_hal_get_def_var(padapter, HAL_DEF_RX_STBC, (u8 *)&bHwSTBCSupport);
5179 	if (bHwSTBCSupport) {
5180 		if (TEST_FLAG(pregistrypriv->stbc_cap, BIT4))
5181 			SET_FLAG(phtpriv->stbc_cap, STBC_HT_ENABLE_RX);
5182 	}
5183 	if (phtpriv->stbc_cap)
5184 		RTW_INFO("[HT] HAL Support STBC = 0x%02X\n", phtpriv->stbc_cap);
5185 
5186 	/* Beamforming setting */
5187 	CLEAR_FLAGS(phtpriv->beamform_cap);
5188 #ifdef CONFIG_BEAMFORMING
5189 #ifdef RTW_BEAMFORMING_VERSION_2
5190 #ifdef CONFIG_CONCURRENT_MODE
5191 	/* only enable beamforming in STA client mode */
5192 	if (MLME_IS_STA(padapter) && !MLME_IS_GC(padapter))
5193 #else
5194 	if ((MLME_IS_AP(padapter) && !MLME_IS_GO(padapter)) ||
5195 	    (MLME_IS_STA(padapter) && !MLME_IS_GC(padapter)))
5196 #endif
5197 #endif
5198 	{
5199 		rtw_hal_get_def_var(padapter, HAL_DEF_EXPLICIT_BEAMFORMER, (u8 *)&bHwSupportBeamformer);
5200 		rtw_hal_get_def_var(padapter, HAL_DEF_EXPLICIT_BEAMFORMEE, (u8 *)&bHwSupportBeamformee);
5201 		if (TEST_FLAG(pregistrypriv->beamform_cap, BIT4) && bHwSupportBeamformer) {
5202 			SET_FLAG(phtpriv->beamform_cap, BEAMFORMING_HT_BEAMFORMER_ENABLE);
5203 			RTW_INFO("[HT] HAL Support Beamformer\n");
5204 		}
5205 		if (TEST_FLAG(pregistrypriv->beamform_cap, BIT5) && bHwSupportBeamformee) {
5206 			SET_FLAG(phtpriv->beamform_cap, BEAMFORMING_HT_BEAMFORMEE_ENABLE);
5207 			RTW_INFO("[HT] HAL Support Beamformee\n");
5208 		}
5209 	}
5210 #endif /* CONFIG_BEAMFORMING */
5211 }
5212 void rtw_build_wmm_ie_ht(_adapter *padapter, u8 *out_ie, uint *pout_len)
5213 {
5214 	unsigned char WMM_IE[] = {0x00, 0x50, 0xf2, 0x02, 0x00, 0x01, 0x00};
5215 	int out_len;
5216 	u8 *pframe;
5217 
5218 	if (padapter->mlmepriv.qospriv.qos_option == 0) {
5219 		out_len = *pout_len;
5220 		pframe = rtw_set_ie(out_ie + out_len, _VENDOR_SPECIFIC_IE_,
5221 				    _WMM_IE_Length_, WMM_IE, pout_len);
5222 
5223 		padapter->mlmepriv.qospriv.qos_option = 1;
5224 	}
5225 }
5226 #if defined(CONFIG_80211N_HT)
5227 /* the fucntion is >= passive_level */
5228 unsigned int rtw_restructure_ht_ie(_adapter *padapter, u8 *in_ie, u8 *out_ie, uint in_len, uint *pout_len, u8 channel)
5229 {
5230 	u32 ielen, out_len;
5231 	u32 rx_packet_offset, max_recvbuf_sz;
5232 	HT_CAP_AMPDU_FACTOR max_rx_ampdu_factor;
5233 	HT_CAP_AMPDU_DENSITY best_ampdu_density;
5234 	unsigned char *p, *pframe;
5235 	struct rtw_ieee80211_ht_cap ht_capie;
5236 	u8	cbw40_enable = 0, rf_num = 0, rx_stbc_nss = 0, rx_nss = 0;
5237 	struct registry_priv *pregistrypriv = &padapter->registrypriv;
5238 	struct mlme_priv	*pmlmepriv = &padapter->mlmepriv;
5239 	struct ht_priv		*phtpriv = &pmlmepriv->htpriv;
5240 	struct mlme_ext_priv	*pmlmeext = &padapter->mlmeextpriv;
5241 #ifdef CONFIG_80211AC_VHT
5242 	struct mlme_ext_info	*pmlmeinfo = &(pmlmeext->mlmext_info);
5243 	struct vht_priv	*pvhtpriv = &pmlmepriv->vhtpriv;
5244 #endif /* CONFIG_80211AC_VHT */
5245 
5246 	phtpriv->ht_option = _FALSE;
5247 
5248 	out_len = *pout_len;
5249 
5250 	_rtw_memset(&ht_capie, 0, sizeof(struct rtw_ieee80211_ht_cap));
5251 
5252 	ht_capie.cap_info = IEEE80211_HT_CAP_DSSSCCK40;
5253 
5254 	if (phtpriv->sgi_20m)
5255 		ht_capie.cap_info |= IEEE80211_HT_CAP_SGI_20;
5256 
5257 	/* check if 40MHz is allowed according to hal cap and registry */
5258 	if (hal_chk_bw_cap(padapter, BW_CAP_40M)) {
5259 		if (channel > 14) {
5260 			if (REGSTY_IS_BW_5G_SUPPORT(pregistrypriv, CHANNEL_WIDTH_40))
5261 				cbw40_enable = 1;
5262 		} else {
5263 			if (REGSTY_IS_BW_2G_SUPPORT(pregistrypriv, CHANNEL_WIDTH_40))
5264 				cbw40_enable = 1;
5265 		}
5266 	}
5267 
5268 	if (cbw40_enable) {
5269 		struct rf_ctl_t *rfctl = adapter_to_rfctl(padapter);
5270 		RT_CHANNEL_INFO *chset = rfctl->channel_set;
5271 		u8 oper_bw = CHANNEL_WIDTH_20, oper_offset = HAL_PRIME_CHNL_OFFSET_DONT_CARE;
5272 
5273 		if (in_ie == NULL) {
5274 			/* TDLS: TODO 20/40 issue */
5275 			if (check_fwstate(pmlmepriv, WIFI_STATION_STATE)) {
5276 				oper_bw = padapter->mlmeextpriv.cur_bwmode;
5277 				if (oper_bw > CHANNEL_WIDTH_40)
5278 					oper_bw = CHANNEL_WIDTH_40;
5279 			} else
5280 				/* TDLS: TODO 40? */
5281 				oper_bw = CHANNEL_WIDTH_40;
5282 		} else {
5283 			p = rtw_get_ie(in_ie, WLAN_EID_HT_OPERATION, &ielen, in_len);
5284 			if (p && ielen == HT_OP_IE_LEN) {
5285 				if (GET_HT_OP_ELE_STA_CHL_WIDTH(p + 2)) {
5286 					switch (GET_HT_OP_ELE_2ND_CHL_OFFSET(p + 2)) {
5287 					case SCA:
5288 						oper_bw = CHANNEL_WIDTH_40;
5289 						oper_offset = HAL_PRIME_CHNL_OFFSET_LOWER;
5290 						break;
5291 					case SCB:
5292 						oper_bw = CHANNEL_WIDTH_40;
5293 						oper_offset = HAL_PRIME_CHNL_OFFSET_UPPER;
5294 						break;
5295 					}
5296 				}
5297 			}
5298 			// IOT issue : AP TP-Link WDR6500
5299 			if(oper_bw == CHANNEL_WIDTH_40){
5300 				p = rtw_get_ie(in_ie, WLAN_EID_HT_CAP, &ielen, in_len);
5301 				if (p && ielen == HT_CAP_IE_LEN) {
5302 					oper_bw = GET_HT_CAP_ELE_CHL_WIDTH(p + 2)  ? CHANNEL_WIDTH_40 : CHANNEL_WIDTH_20;
5303 					if(oper_bw == CHANNEL_WIDTH_20)
5304 						oper_offset = HAL_PRIME_CHNL_OFFSET_DONT_CARE;
5305 				}
5306 			}
5307 		}
5308 
5309 		/* adjust bw to fit in channel plan setting */
5310 		if (oper_bw == CHANNEL_WIDTH_40
5311 			&& oper_offset != HAL_PRIME_CHNL_OFFSET_DONT_CARE /* check this because TDLS has no info to set offset */
5312 			&& (!rtw_chset_is_chbw_valid(chset, channel, oper_bw, oper_offset, 1, 1)
5313 				|| (IS_DFS_SLAVE_WITH_RD(rfctl)
5314 					&& !rtw_rfctl_dfs_domain_unknown(rfctl)
5315 					&& rtw_chset_is_chbw_non_ocp(chset, channel, oper_bw, oper_offset))
5316 				)
5317 		) {
5318 			oper_bw = CHANNEL_WIDTH_20;
5319 			oper_offset = HAL_PRIME_CHNL_OFFSET_DONT_CARE;
5320 			rtw_warn_on(!rtw_chset_is_chbw_valid(chset, channel, oper_bw, oper_offset, 1, 1));
5321 			if (IS_DFS_SLAVE_WITH_RD(rfctl) && !rtw_rfctl_dfs_domain_unknown(rfctl))
5322 				rtw_warn_on(rtw_chset_is_chbw_non_ocp(chset, channel, oper_bw, oper_offset));
5323 		}
5324 
5325 		if (oper_bw == CHANNEL_WIDTH_40) {
5326 			ht_capie.cap_info |= IEEE80211_HT_CAP_SUP_WIDTH;
5327 			if (phtpriv->sgi_40m)
5328 				ht_capie.cap_info |= IEEE80211_HT_CAP_SGI_40;
5329 		}
5330 
5331 		cbw40_enable = oper_bw == CHANNEL_WIDTH_40 ? 1 : 0;
5332 	}
5333 
5334 	/* todo: disable SM power save mode */
5335 	ht_capie.cap_info |= IEEE80211_HT_CAP_SM_PS;
5336 
5337 	/* RX LDPC */
5338 	if (TEST_FLAG(phtpriv->ldpc_cap, LDPC_HT_ENABLE_RX)) {
5339 		ht_capie.cap_info |= IEEE80211_HT_CAP_LDPC_CODING;
5340 		RTW_INFO("[HT] Declare supporting RX LDPC\n");
5341 	}
5342 
5343 	/* TX STBC */
5344 	if (TEST_FLAG(phtpriv->stbc_cap, STBC_HT_ENABLE_TX)) {
5345 		ht_capie.cap_info |= IEEE80211_HT_CAP_TX_STBC;
5346 		RTW_INFO("[HT] Declare supporting TX STBC\n");
5347 	}
5348 
5349 	/* RX STBC */
5350 	if (TEST_FLAG(phtpriv->stbc_cap, STBC_HT_ENABLE_RX)) {
5351 		if ((pregistrypriv->rx_stbc == 0x3) ||							/* enable for 2.4/5 GHz */
5352 		    ((channel <= 14) && (pregistrypriv->rx_stbc == 0x1)) ||		/* enable for 2.4GHz */
5353 		    ((channel > 14) && (pregistrypriv->rx_stbc == 0x2)) ||		/* enable for 5GHz */
5354 		    (pregistrypriv->wifi_spec == 1)) {
5355 			/* HAL_DEF_RX_STBC means STBC RX spatial stream, todo: VHT 4 streams */
5356 			rtw_hal_get_def_var(padapter, HAL_DEF_RX_STBC, (u8 *)(&rx_stbc_nss));
5357 			SET_HT_CAP_ELE_RX_STBC(&ht_capie, rx_stbc_nss);
5358 			RTW_INFO("[HT] Declare supporting RX STBC = %d\n", rx_stbc_nss);
5359 		}
5360 	}
5361 
5362 	/* fill default supported_mcs_set */
5363 	_rtw_memcpy(ht_capie.supp_mcs_set, pmlmeext->default_supported_mcs_set, 16);
5364 
5365 	/* update default supported_mcs_set */
5366 	rx_nss = GET_HAL_RX_NSS(padapter);
5367 
5368 	switch (rx_nss) {
5369 	case 1:
5370 		set_mcs_rate_by_mask(ht_capie.supp_mcs_set, MCS_RATE_1R);
5371 		break;
5372 	case 2:
5373 		#ifdef CONFIG_DISABLE_MCS13TO15
5374 		if (cbw40_enable && pregistrypriv->wifi_spec != 1)
5375 			set_mcs_rate_by_mask(ht_capie.supp_mcs_set, MCS_RATE_2R_13TO15_OFF);
5376 		else
5377 		#endif
5378 			set_mcs_rate_by_mask(ht_capie.supp_mcs_set, MCS_RATE_2R);
5379 		break;
5380 	case 3:
5381 		set_mcs_rate_by_mask(ht_capie.supp_mcs_set, MCS_RATE_3R);
5382 		break;
5383 	case 4:
5384 		set_mcs_rate_by_mask(ht_capie.supp_mcs_set, MCS_RATE_4R);
5385 		break;
5386 	default:
5387 		RTW_WARN("rf_type:%d or rx_nss:%u is not expected\n", GET_HAL_RFPATH(padapter), rx_nss);
5388 	}
5389 
5390 	{
5391 		rtw_hal_get_def_var(padapter, HAL_DEF_RX_PACKET_OFFSET, &rx_packet_offset);
5392 		rtw_hal_get_def_var(padapter, HAL_DEF_MAX_RECVBUF_SZ, &max_recvbuf_sz);
5393 		if (max_recvbuf_sz - rx_packet_offset >= (8191 - 256)) {
5394 			RTW_INFO("%s IEEE80211_HT_CAP_MAX_AMSDU is set\n", __FUNCTION__);
5395 			ht_capie.cap_info = ht_capie.cap_info | IEEE80211_HT_CAP_MAX_AMSDU;
5396 		}
5397 	}
5398 	/*
5399 	AMPDU_para [1:0]:Max AMPDU Len => 0:8k , 1:16k, 2:32k, 3:64k
5400 	AMPDU_para [4:2]:Min MPDU Start Spacing
5401 	*/
5402 
5403 	/*
5404 	#if defined(CONFIG_RTL8188E) && defined(CONFIG_SDIO_HCI)
5405 	ht_capie.ampdu_params_info = 2;
5406 	#else
5407 	ht_capie.ampdu_params_info = (IEEE80211_HT_CAP_AMPDU_FACTOR&0x03);
5408 	#endif
5409 	*/
5410 
5411 	if (padapter->driver_rx_ampdu_factor != 0xFF)
5412 		max_rx_ampdu_factor = (HT_CAP_AMPDU_FACTOR)padapter->driver_rx_ampdu_factor;
5413 	else
5414 		rtw_hal_get_def_var(padapter, HW_VAR_MAX_RX_AMPDU_FACTOR, &max_rx_ampdu_factor);
5415 
5416 	/* rtw_hal_get_def_var(padapter, HW_VAR_MAX_RX_AMPDU_FACTOR, &max_rx_ampdu_factor); */
5417 	ht_capie.ampdu_params_info = (max_rx_ampdu_factor & 0x03);
5418 
5419 	if (padapter->driver_rx_ampdu_spacing != 0xFF)
5420 		ht_capie.ampdu_params_info |= ((padapter->driver_rx_ampdu_spacing & 0x07) << 2);
5421 	else {
5422 		if (padapter->securitypriv.dot11PrivacyAlgrthm == _AES_) {
5423 			/*
5424 			*	Todo : Each chip must to ask DD , this chip best ampdu_density setting
5425 			*	By yiwei.sun
5426 			*/
5427 			rtw_hal_get_def_var(padapter, HW_VAR_BEST_AMPDU_DENSITY, &best_ampdu_density);
5428 
5429 			ht_capie.ampdu_params_info |= (IEEE80211_HT_CAP_AMPDU_DENSITY & (best_ampdu_density << 2));
5430 
5431 		} else
5432 			ht_capie.ampdu_params_info |= (IEEE80211_HT_CAP_AMPDU_DENSITY & 0x00);
5433 	}
5434 #ifdef CONFIG_BEAMFORMING
5435 	ht_capie.tx_BF_cap_info = 0;
5436 
5437 	/* HT Beamformer*/
5438 	if (TEST_FLAG(phtpriv->beamform_cap, BEAMFORMING_HT_BEAMFORMER_ENABLE)) {
5439 		/* Transmit NDP Capable */
5440 		SET_HT_CAP_TXBF_TRANSMIT_NDP_CAP(&ht_capie, 1);
5441 		/* Explicit Compressed Steering Capable */
5442 		SET_HT_CAP_TXBF_EXPLICIT_COMP_STEERING_CAP(&ht_capie, 1);
5443 		/* Compressed Steering Number Antennas */
5444 		SET_HT_CAP_TXBF_COMP_STEERING_NUM_ANTENNAS(&ht_capie, 1);
5445 		rtw_hal_get_def_var(padapter, HAL_DEF_BEAMFORMER_CAP, (u8 *)&rf_num);
5446 		SET_HT_CAP_TXBF_CHNL_ESTIMATION_NUM_ANTENNAS(&ht_capie, rf_num);
5447 	}
5448 
5449 	/* HT Beamformee */
5450 	if (TEST_FLAG(phtpriv->beamform_cap, BEAMFORMING_HT_BEAMFORMEE_ENABLE)) {
5451 		/* Receive NDP Capable */
5452 		SET_HT_CAP_TXBF_RECEIVE_NDP_CAP(&ht_capie, 1);
5453 		/* Explicit Compressed Beamforming Feedback Capable */
5454 		SET_HT_CAP_TXBF_EXPLICIT_COMP_FEEDBACK_CAP(&ht_capie, 2);
5455 
5456 		rtw_hal_get_def_var(padapter, HAL_DEF_BEAMFORMEE_CAP, (u8 *)&rf_num);
5457 #ifdef CONFIG_80211AC_VHT
5458 		/* IOT action suggested by Yu Chen 2017/3/3 */
5459 		if ((pmlmeinfo->assoc_AP_vendor == HT_IOT_PEER_BROADCOM) &&
5460 			!pvhtpriv->ap_bf_cap.is_mu_bfer &&
5461 			pvhtpriv->ap_bf_cap.su_sound_dim == 2)
5462 			rf_num = (rf_num >= 2 ? 2 : rf_num);
5463 #endif
5464 		SET_HT_CAP_TXBF_COMP_STEERING_NUM_ANTENNAS(&ht_capie, rf_num);
5465 	}
5466 #endif/*CONFIG_BEAMFORMING*/
5467 
5468 	pframe = rtw_set_ie(out_ie + out_len, _HT_CAPABILITY_IE_,
5469 		sizeof(struct rtw_ieee80211_ht_cap), (unsigned char *)&ht_capie, pout_len);
5470 
5471 	phtpriv->ht_option = _TRUE;
5472 
5473 	if (in_ie != NULL) {
5474 		p = rtw_get_ie(in_ie, _HT_ADD_INFO_IE_, &ielen, in_len);
5475 		if (p && (ielen == sizeof(struct ieee80211_ht_addt_info))) {
5476 			out_len = *pout_len;
5477 			pframe = rtw_set_ie(out_ie + out_len, _HT_ADD_INFO_IE_, ielen, p + 2 , pout_len);
5478 		}
5479 	}
5480 
5481 	return phtpriv->ht_option;
5482 
5483 }
5484 
5485 /* the fucntion is > passive_level (in critical_section) */
5486 void rtw_update_ht_cap(_adapter *padapter, u8 *pie, uint ie_len, u8 channel)
5487 {
5488 	u8 *p, max_ampdu_sz;
5489 	int len;
5490 	/* struct sta_info *bmc_sta, *psta; */
5491 	struct rtw_ieee80211_ht_cap *pht_capie;
5492 	struct ieee80211_ht_addt_info *pht_addtinfo;
5493 	/* struct recv_reorder_ctrl *preorder_ctrl; */
5494 	struct mlme_priv	*pmlmepriv = &padapter->mlmepriv;
5495 	struct ht_priv		*phtpriv = &pmlmepriv->htpriv;
5496 	/* struct recv_priv *precvpriv = &padapter->recvpriv; */
5497 	struct registry_priv *pregistrypriv = &padapter->registrypriv;
5498 	/* struct wlan_network *pcur_network = &(pmlmepriv->cur_network);; */
5499 	struct mlme_ext_priv	*pmlmeext = &padapter->mlmeextpriv;
5500 	struct mlme_ext_info	*pmlmeinfo = &(pmlmeext->mlmext_info);
5501 	u8 cbw40_enable = 0;
5502 
5503 
5504 	if (!phtpriv->ht_option)
5505 		return;
5506 
5507 	if ((!pmlmeinfo->HT_info_enable) || (!pmlmeinfo->HT_caps_enable))
5508 		return;
5509 
5510 	RTW_INFO("+rtw_update_ht_cap()\n");
5511 
5512 	/* maybe needs check if ap supports rx ampdu. */
5513 	if ((phtpriv->ampdu_enable == _FALSE) && (pregistrypriv->ampdu_enable == 1)) {
5514 		if (pregistrypriv->wifi_spec == 1) {
5515 			/* remove this part because testbed AP should disable RX AMPDU */
5516 			/* phtpriv->ampdu_enable = _FALSE; */
5517 			phtpriv->ampdu_enable = _TRUE;
5518 		} else
5519 			phtpriv->ampdu_enable = _TRUE;
5520 	}
5521 
5522 
5523 	/* check Max Rx A-MPDU Size */
5524 	len = 0;
5525 	p = rtw_get_ie(pie + sizeof(NDIS_802_11_FIXED_IEs), _HT_CAPABILITY_IE_, &len, ie_len - sizeof(NDIS_802_11_FIXED_IEs));
5526 	if (p && len > 0) {
5527 		pht_capie = (struct rtw_ieee80211_ht_cap *)(p + 2);
5528 		max_ampdu_sz = (pht_capie->ampdu_params_info & IEEE80211_HT_CAP_AMPDU_FACTOR);
5529 		max_ampdu_sz = 1 << (max_ampdu_sz + 3); /* max_ampdu_sz (kbytes); */
5530 
5531 		/* RTW_INFO("rtw_update_ht_cap(): max_ampdu_sz=%d\n", max_ampdu_sz); */
5532 		phtpriv->rx_ampdu_maxlen = max_ampdu_sz;
5533 
5534 	}
5535 
5536 
5537 	len = 0;
5538 	p = rtw_get_ie(pie + sizeof(NDIS_802_11_FIXED_IEs), _HT_ADD_INFO_IE_, &len, ie_len - sizeof(NDIS_802_11_FIXED_IEs));
5539 	if (p && len > 0) {
5540 		pht_addtinfo = (struct ieee80211_ht_addt_info *)(p + 2);
5541 		/* todo: */
5542 	}
5543 
5544 	if (hal_chk_bw_cap(padapter, BW_CAP_40M)) {
5545 		if (channel > 14) {
5546 			if (REGSTY_IS_BW_5G_SUPPORT(pregistrypriv, CHANNEL_WIDTH_40))
5547 				cbw40_enable = 1;
5548 		} else {
5549 			if (REGSTY_IS_BW_2G_SUPPORT(pregistrypriv, CHANNEL_WIDTH_40))
5550 				cbw40_enable = 1;
5551 		}
5552 	}
5553 
5554 	/* update cur_bwmode & cur_ch_offset */
5555 	if ((cbw40_enable) &&
5556 	    (pmlmeinfo->HT_caps.u.HT_cap_element.HT_caps_info & BIT(1)) &&
5557 	    (pmlmeinfo->HT_info.infos[0] & BIT(2))) {
5558 		int i;
5559 		u8 rx_nss = 0;
5560 
5561 		rx_nss = GET_HAL_RX_NSS(padapter);
5562 
5563 		/* update the MCS set */
5564 		for (i = 0; i < 16; i++)
5565 			pmlmeinfo->HT_caps.u.HT_cap_element.MCS_rate[i] &= pmlmeext->default_supported_mcs_set[i];
5566 
5567 		/* update the MCS rates */
5568 		switch (rx_nss) {
5569 		case 1:
5570 			set_mcs_rate_by_mask(pmlmeinfo->HT_caps.u.HT_cap_element.MCS_rate, MCS_RATE_1R);
5571 			break;
5572 		case 2:
5573 			#ifdef CONFIG_DISABLE_MCS13TO15
5574 			if (pmlmeext->cur_bwmode == CHANNEL_WIDTH_40 && pregistrypriv->wifi_spec != 1)
5575 				set_mcs_rate_by_mask(pmlmeinfo->HT_caps.u.HT_cap_element.MCS_rate, MCS_RATE_2R_13TO15_OFF);
5576 			else
5577 			#endif
5578 				set_mcs_rate_by_mask(pmlmeinfo->HT_caps.u.HT_cap_element.MCS_rate, MCS_RATE_2R);
5579 			break;
5580 		case 3:
5581 			set_mcs_rate_by_mask(pmlmeinfo->HT_caps.u.HT_cap_element.MCS_rate, MCS_RATE_3R);
5582 			break;
5583 		case 4:
5584 			set_mcs_rate_by_mask(pmlmeinfo->HT_caps.u.HT_cap_element.MCS_rate, MCS_RATE_4R);
5585 			break;
5586 		default:
5587 			RTW_WARN("rx_nss:%u is not expected\n", rx_nss);
5588 		}
5589 
5590 		/* switch to the 40M Hz mode accoring to the AP */
5591 		/* pmlmeext->cur_bwmode = CHANNEL_WIDTH_40; */
5592 		switch ((pmlmeinfo->HT_info.infos[0] & 0x3)) {
5593 		case EXTCHNL_OFFSET_UPPER:
5594 			pmlmeext->cur_ch_offset = HAL_PRIME_CHNL_OFFSET_LOWER;
5595 			break;
5596 
5597 		case EXTCHNL_OFFSET_LOWER:
5598 			pmlmeext->cur_ch_offset = HAL_PRIME_CHNL_OFFSET_UPPER;
5599 			break;
5600 
5601 		default:
5602 			pmlmeext->cur_bwmode = CHANNEL_WIDTH_20;
5603 			pmlmeext->cur_ch_offset = HAL_PRIME_CHNL_OFFSET_DONT_CARE;
5604 			RTW_INFO("%s : ch offset is not assigned for HT40 mod , update cur_bwmode=%u, cur_ch_offset=%u\n",
5605 					__func__, pmlmeext->cur_bwmode, pmlmeext->cur_ch_offset);
5606 			break;
5607 		}
5608 	}
5609 
5610 	/*  */
5611 	/* Config SM Power Save setting */
5612 	/*  */
5613 	pmlmeinfo->SM_PS = (pmlmeinfo->HT_caps.u.HT_cap_element.HT_caps_info & 0x0C) >> 2;
5614 	if (pmlmeinfo->SM_PS == WLAN_HT_CAP_SM_PS_STATIC) {
5615 #if 0
5616 		u8 i;
5617 		/* update the MCS rates */
5618 		for (i = 0; i < 16; i++)
5619 			pmlmeinfo->HT_caps.HT_cap_element.MCS_rate[i] &= MCS_rate_1R[i];
5620 #endif
5621 		RTW_INFO("%s(): WLAN_HT_CAP_SM_PS_STATIC\n", __FUNCTION__);
5622 	}
5623 
5624 	/*  */
5625 	/* Config current HT Protection mode. */
5626 	/*  */
5627 	pmlmeinfo->HT_protection = pmlmeinfo->HT_info.infos[1] & 0x3;
5628 }
5629 #endif
5630 
5631 #ifdef CONFIG_TDLS
5632 void rtw_issue_addbareq_cmd_tdls(_adapter *padapter, struct xmit_frame *pxmitframe)
5633 {
5634 	struct pkt_attrib *pattrib = &pxmitframe->attrib;
5635 	struct sta_info *ptdls_sta = NULL;
5636 	u8 issued;
5637 	int priority;
5638 	struct ht_priv	*phtpriv;
5639 
5640 	priority = pattrib->priority;
5641 
5642 	if (pattrib->direct_link == _TRUE) {
5643 		ptdls_sta = rtw_get_stainfo(&padapter->stapriv, pattrib->dst);
5644 		if ((ptdls_sta != NULL) && (ptdls_sta->tdls_sta_state & TDLS_LINKED_STATE)) {
5645 			phtpriv = &ptdls_sta->htpriv;
5646 
5647 			if ((phtpriv->ht_option == _TRUE) && (phtpriv->ampdu_enable == _TRUE)) {
5648 				issued = (phtpriv->agg_enable_bitmap >> priority) & 0x1;
5649 				issued |= (phtpriv->candidate_tid_bitmap >> priority) & 0x1;
5650 
5651 				if (0 == issued) {
5652 					RTW_INFO("[%s], p=%d\n", __FUNCTION__, priority);
5653 					ptdls_sta->htpriv.candidate_tid_bitmap |= BIT((u8)priority);
5654 					rtw_addbareq_cmd(padapter, (u8)priority, pattrib->dst);
5655 				}
5656 			}
5657 		}
5658 	}
5659 }
5660 #endif /* CONFIG_TDLS */
5661 
5662 #ifdef CONFIG_80211N_HT
5663 static u8 rtw_issue_addbareq_check(_adapter *padapter, struct xmit_frame *pxmitframe, u8 issue_when_busy)
5664 {
5665 	struct mlme_priv *pmlmepriv = &padapter->mlmepriv;
5666 	struct registry_priv *pregistry = &padapter->registrypriv;
5667 	struct pkt_attrib *pattrib = &pxmitframe->attrib;
5668 	s32 bmcst = IS_MCAST(pattrib->ra);
5669 
5670 	if (bmcst)
5671 		return _FALSE;
5672 
5673 	if (pregistry->tx_quick_addba_req == 0) {
5674 		if ((issue_when_busy == _TRUE) && (pmlmepriv->LinkDetectInfo.bBusyTraffic == _FALSE))
5675 			return _FALSE;
5676 
5677 		if (pmlmepriv->LinkDetectInfo.NumTxOkInPeriod < 100)
5678 			return _FALSE;
5679 	}
5680 
5681 	return _TRUE;
5682 }
5683 
5684 void rtw_issue_addbareq_cmd(_adapter *padapter, struct xmit_frame *pxmitframe, u8 issue_when_busy)
5685 {
5686 	u8 issued;
5687 	int priority;
5688 	struct sta_info *psta = NULL;
5689 	struct ht_priv	*phtpriv;
5690 	struct pkt_attrib *pattrib = &pxmitframe->attrib;
5691 
5692 	if (rtw_issue_addbareq_check(padapter,pxmitframe, issue_when_busy) == _FALSE)
5693 		return;
5694 
5695 	priority = pattrib->priority;
5696 
5697 #ifdef CONFIG_TDLS
5698 	rtw_issue_addbareq_cmd_tdls(padapter, pxmitframe);
5699 #endif /* CONFIG_TDLS */
5700 
5701 	psta = rtw_get_stainfo(&padapter->stapriv, pattrib->ra);
5702 	if (pattrib->psta != psta) {
5703 		RTW_INFO("%s, pattrib->psta(%p) != psta(%p)\n", __func__, pattrib->psta, psta);
5704 		return;
5705 	}
5706 
5707 	if (psta == NULL) {
5708 		RTW_INFO("%s, psta==NUL\n", __func__);
5709 		return;
5710 	}
5711 
5712 	if (!(psta->state & WIFI_ASOC_STATE)) {
5713 		RTW_INFO("%s, psta->state(0x%x) != WIFI_ASOC_STATE\n", __func__, psta->state);
5714 		return;
5715 	}
5716 
5717 
5718 	phtpriv = &psta->htpriv;
5719 
5720 	if ((phtpriv->ht_option == _TRUE) && (phtpriv->ampdu_enable == _TRUE)) {
5721 		issued = (phtpriv->agg_enable_bitmap >> priority) & 0x1;
5722 		issued |= (phtpriv->candidate_tid_bitmap >> priority) & 0x1;
5723 
5724 		if (0 == issued) {
5725 			RTW_INFO("rtw_issue_addbareq_cmd, p=%d\n", priority);
5726 			psta->htpriv.candidate_tid_bitmap |= BIT((u8)priority);
5727 			rtw_addbareq_cmd(padapter, (u8) priority, pattrib->ra);
5728 		}
5729 	}
5730 
5731 }
5732 #endif /* CONFIG_80211N_HT */
5733 void rtw_append_extended_cap(_adapter *padapter, u8 *out_ie, uint *pout_len)
5734 {
5735 	struct mlme_priv *pmlmepriv = &padapter->mlmepriv;
5736 	struct ht_priv *phtpriv = &pmlmepriv->htpriv;
5737 #ifdef CONFIG_80211AC_VHT
5738 	struct vht_priv *pvhtpriv = &pmlmepriv->vhtpriv;
5739 #endif /* CONFIG_80211AC_VHT */
5740 	u8 *ext_cap_data = pmlmepriv->ext_capab_ie_data;
5741 	u8 *ext_cap_data_len = &(pmlmepriv->ext_capab_ie_len);
5742 
5743 	if (phtpriv->bss_coexist)
5744 		rtw_add_ext_cap_info(ext_cap_data, ext_cap_data_len, BSS_COEXT);
5745 
5746 #ifdef CONFIG_80211AC_VHT
5747 	if (pvhtpriv->vht_option)
5748 		rtw_add_ext_cap_info(ext_cap_data, ext_cap_data_len, OP_MODE_NOTIFICATION);
5749 #endif /* CONFIG_80211AC_VHT */
5750 #ifdef CONFIG_RTW_WNM
5751 	rtw_add_ext_cap_info(ext_cap_data, ext_cap_data_len, BSS_TRANSITION);
5752 #endif
5753 
5754 #ifdef CONFIG_RTW_MBO
5755 	rtw_add_ext_cap_info(ext_cap_data, ext_cap_data_len, INTERWORKING);
5756 #endif
5757 
5758 	/*
5759 		From 802.11 specification,if a STA does not support any of capabilities defined
5760 		in the Extended Capabilities element, then the STA is not required to
5761 		transmit the Extended Capabilities element.
5762 	*/
5763 	rtw_update_ext_cap_ie(ext_cap_data, *ext_cap_data_len, out_ie, pout_len, _BEACON_IE_OFFSET_);
5764 }
5765 #endif
5766 
5767 #ifdef CONFIG_LAYER2_ROAMING
5768 inline void rtw_set_to_roam(_adapter *adapter, u8 to_roam)
5769 {
5770 	if (to_roam == 0)
5771 		adapter->mlmepriv.to_join = _FALSE;
5772 	adapter->mlmepriv.to_roam = to_roam;
5773 }
5774 
5775 inline u8 rtw_dec_to_roam(_adapter *adapter)
5776 {
5777 	adapter->mlmepriv.to_roam--;
5778 	return adapter->mlmepriv.to_roam;
5779 }
5780 
5781 inline u8 rtw_to_roam(_adapter *adapter)
5782 {
5783 	return adapter->mlmepriv.to_roam;
5784 }
5785 
5786 void rtw_roaming(_adapter *padapter, struct wlan_network *tgt_network)
5787 {
5788 	_irqL irqL;
5789 	struct mlme_priv	*pmlmepriv = &padapter->mlmepriv;
5790 
5791 	_enter_critical_bh(&pmlmepriv->lock, &irqL);
5792 	_rtw_roaming(padapter, tgt_network);
5793 	_exit_critical_bh(&pmlmepriv->lock, &irqL);
5794 }
5795 void _rtw_roaming(_adapter *padapter, struct wlan_network *tgt_network)
5796 {
5797 	struct mlme_priv	*pmlmepriv = &padapter->mlmepriv;
5798 	struct wlan_network *cur_network = &pmlmepriv->cur_network;
5799 	int do_join_r;
5800 
5801 	if (0 < rtw_to_roam(padapter)) {
5802 		RTW_INFO("roaming from %s("MAC_FMT"), length:%d\n",
5803 			cur_network->network.Ssid.Ssid, MAC_ARG(cur_network->network.MacAddress),
5804 			 cur_network->network.Ssid.SsidLength);
5805 		_rtw_memcpy(&pmlmepriv->assoc_ssid, &cur_network->network.Ssid, sizeof(NDIS_802_11_SSID));
5806 		pmlmepriv->assoc_ch = 0;
5807 		pmlmepriv->assoc_by_bssid = _FALSE;
5808 
5809 #ifdef CONFIG_WAPI_SUPPORT
5810 		rtw_wapi_return_all_sta_info(padapter);
5811 #endif
5812 
5813 		while (1) {
5814 			do_join_r = rtw_do_join(padapter);
5815 			if (_SUCCESS == do_join_r)
5816 				break;
5817 			else {
5818 				RTW_INFO("roaming do_join return %d\n", do_join_r);
5819 				rtw_dec_to_roam(padapter);
5820 
5821 				if (rtw_to_roam(padapter) > 0)
5822 					continue;
5823 				else {
5824 					RTW_INFO("%s(%d) -to roaming fail, indicate_disconnect\n", __FUNCTION__, __LINE__);
5825 #ifdef CONFIG_RTW_80211R
5826 					rtw_ft_clr_flags(padapter, RTW_FT_PEER_EN|RTW_FT_PEER_OTD_EN);
5827 					rtw_ft_reset_status(padapter);
5828 #endif
5829 					rtw_indicate_disconnect(padapter, 0, _FALSE);
5830 					break;
5831 				}
5832 			}
5833 		}
5834 	}
5835 
5836 }
5837 #endif /* CONFIG_LAYER2_ROAMING */
5838 
5839 bool rtw_adjust_chbw(_adapter *adapter, u8 req_ch, u8 *req_bw, u8 *req_offset)
5840 {
5841 	struct registry_priv *regsty = adapter_to_regsty(adapter);
5842 	u8 allowed_bw;
5843 
5844 	if (req_ch < 14)
5845 		allowed_bw = REGSTY_BW_2G(regsty);
5846 	else if (req_ch == 14)
5847 		allowed_bw = CHANNEL_WIDTH_20;
5848 	else
5849 		allowed_bw = REGSTY_BW_5G(regsty);
5850 
5851 	allowed_bw = hal_largest_bw(adapter, allowed_bw);
5852 
5853 	if (allowed_bw == CHANNEL_WIDTH_80 && *req_bw > CHANNEL_WIDTH_80)
5854 		*req_bw = CHANNEL_WIDTH_80;
5855 	else if (allowed_bw == CHANNEL_WIDTH_40 && *req_bw > CHANNEL_WIDTH_40)
5856 		*req_bw = CHANNEL_WIDTH_40;
5857 	else if (allowed_bw == CHANNEL_WIDTH_20 && *req_bw > CHANNEL_WIDTH_20) {
5858 		*req_bw = CHANNEL_WIDTH_20;
5859 		*req_offset = HAL_PRIME_CHNL_OFFSET_DONT_CARE;
5860 	} else
5861 		return _FALSE;
5862 
5863 	return _TRUE;
5864 }
5865 
5866 sint rtw_linked_check(_adapter *padapter)
5867 {
5868 	if (MLME_IS_AP(padapter) || MLME_IS_MESH(padapter)
5869 		|| MLME_IS_ADHOC(padapter) || MLME_IS_ADHOC_MASTER(padapter)
5870 	) {
5871 		if (padapter->stapriv.asoc_sta_count > 2)
5872 			return _TRUE;
5873 	} else {
5874 		/* Station mode */
5875 		if (check_fwstate(&padapter->mlmepriv, WIFI_ASOC_STATE) == _TRUE)
5876 			return _TRUE;
5877 	}
5878 	return _FALSE;
5879 }
5880 /*#define DBG_ADAPTER_STATE_CHK*/
5881 u8 rtw_is_adapter_up(_adapter *padapter)
5882 {
5883 	if (padapter == NULL)
5884 		return _FALSE;
5885 
5886 	if (RTW_CANNOT_RUN(padapter)) {
5887 		#ifdef DBG_ADAPTER_STATE_CHK
5888 		RTW_INFO(FUNC_ADPT_FMT " FALSE -bDriverStopped(%s) bSurpriseRemoved(%s)\n"
5889 			, FUNC_ADPT_ARG(padapter)
5890 			, rtw_is_drv_stopped(padapter) ? "True" : "False"
5891 			, rtw_is_surprise_removed(padapter) ? "True" : "False");
5892 		#endif
5893 		return _FALSE;
5894 	}
5895 
5896 	if (!rtw_is_hw_init_completed(padapter)) {
5897 		#ifdef DBG_ADAPTER_STATE_CHK
5898 		RTW_INFO(FUNC_ADPT_FMT " FALSE -(hw_init_completed == _FALSE)\n", FUNC_ADPT_ARG(padapter));
5899 		#endif
5900 		return _FALSE;
5901 	}
5902 
5903 	if (padapter->bup == _FALSE) {
5904 		#ifdef DBG_ADAPTER_STATE_CHK
5905 		RTW_INFO(FUNC_ADPT_FMT " FALSE -(bup == _FALSE)\n", FUNC_ADPT_ARG(padapter));
5906 		#endif
5907 		return _FALSE;
5908 	}
5909 
5910 	return _TRUE;
5911 }
5912 
5913 bool is_miracast_enabled(_adapter *adapter)
5914 {
5915 	bool enabled = 0;
5916 #ifdef CONFIG_WFD
5917 	struct wifi_display_info *wfdinfo = &adapter->wfd_info;
5918 
5919 	enabled = (wfdinfo->stack_wfd_mode & (MIRACAST_SOURCE | MIRACAST_SINK))
5920 		  || (wfdinfo->op_wfd_mode & (MIRACAST_SOURCE | MIRACAST_SINK));
5921 #endif
5922 
5923 	return enabled;
5924 }
5925 
5926 bool rtw_chk_miracast_mode(_adapter *adapter, u8 mode)
5927 {
5928 	bool ret = 0;
5929 #ifdef CONFIG_WFD
5930 	struct wifi_display_info *wfdinfo = &adapter->wfd_info;
5931 
5932 	ret = (wfdinfo->stack_wfd_mode & mode) || (wfdinfo->op_wfd_mode & mode);
5933 #endif
5934 
5935 	return ret;
5936 }
5937 
5938 const char *get_miracast_mode_str(int mode)
5939 {
5940 	if (mode == MIRACAST_SOURCE)
5941 		return "SOURCE";
5942 	else if (mode == MIRACAST_SINK)
5943 		return "SINK";
5944 	else if (mode == (MIRACAST_SOURCE | MIRACAST_SINK))
5945 		return "SOURCE&SINK";
5946 	else if (mode == MIRACAST_DISABLED)
5947 		return "DISABLED";
5948 	else
5949 		return "INVALID";
5950 }
5951 
5952 #ifdef CONFIG_WFD
5953 static bool wfd_st_match_rule(_adapter *adapter, u8 *local_naddr, u8 *local_port, u8 *remote_naddr, u8 *remote_port)
5954 {
5955 	struct wifi_display_info *wfdinfo = &adapter->wfd_info;
5956 
5957 	if (ntohs(*((u16 *)local_port)) == wfdinfo->rtsp_ctrlport
5958 	    || ntohs(*((u16 *)local_port)) == wfdinfo->tdls_rtsp_ctrlport
5959 	    || ntohs(*((u16 *)remote_port)) == wfdinfo->peer_rtsp_ctrlport)
5960 		return _TRUE;
5961 	return _FALSE;
5962 }
5963 
5964 static struct st_register wfd_st_reg = {
5965 	.s_proto = 0x06,
5966 	.rule = wfd_st_match_rule,
5967 };
5968 #endif /* CONFIG_WFD */
5969 
5970 inline void rtw_wfd_st_switch(struct sta_info *sta, bool on)
5971 {
5972 #ifdef CONFIG_WFD
5973 	if (on)
5974 		rtw_st_ctl_register(&sta->st_ctl, SESSION_TRACKER_REG_ID_WFD, &wfd_st_reg);
5975 	else
5976 		rtw_st_ctl_unregister(&sta->st_ctl, SESSION_TRACKER_REG_ID_WFD);
5977 #endif
5978 }
5979 
5980 void dump_arp_pkt(void *sel, u8 *da, u8 *sa, u8 *arp, bool tx)
5981 {
5982 	RTW_PRINT_SEL(sel, "%s ARP da="MAC_FMT", sa="MAC_FMT"\n"
5983 		, tx ? "send" : "recv", MAC_ARG(da), MAC_ARG(sa));
5984 	RTW_PRINT_SEL(sel, "htype=%u, ptype=0x%04x, hlen=%u, plen=%u, oper=%u\n"
5985 		, GET_ARP_HTYPE(arp), GET_ARP_PTYPE(arp), GET_ARP_HLEN(arp)
5986 		, GET_ARP_PLEN(arp), GET_ARP_OPER(arp));
5987 	RTW_PRINT_SEL(sel, "sha="MAC_FMT", spa="IP_FMT"\n"
5988 		, MAC_ARG(ARP_SENDER_MAC_ADDR(arp)), IP_ARG(ARP_SENDER_IP_ADDR(arp)));
5989 	RTW_PRINT_SEL(sel, "tha="MAC_FMT", tpa="IP_FMT"\n"
5990 		, MAC_ARG(ARP_TARGET_MAC_ADDR(arp)), IP_ARG(ARP_TARGET_IP_ADDR(arp)));
5991 }
5992 
5993