OSDN Git Service

Add rtl8723bu driver version 4.4.5
[android-x86/external-kernel-drivers.git] / rtl8723bu / core / rtw_ap.c
1 /******************************************************************************
2  *
3  * Copyright(c) 2007 - 2012 Realtek Corporation. All rights reserved.
4  *
5  * This program is free software; you can redistribute it and/or modify it
6  * under the terms of version 2 of the GNU General Public License as
7  * published by the Free Software Foundation.
8  *
9  * This program is distributed in the hope that it will be useful, but WITHOUT
10  * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
11  * FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for
12  * more details.
13  *
14  * You should have received a copy of the GNU General Public License along with
15  * this program; if not, write to the Free Software Foundation, Inc.,
16  * 51 Franklin Street, Fifth Floor, Boston, MA 02110, USA
17  *
18  *
19  ******************************************************************************/
20 #define _RTW_AP_C_
21
22 #include <drv_types.h>
23
24
25 #ifdef CONFIG_AP_MODE
26
27 extern unsigned char    RTW_WPA_OUI[];
28 extern unsigned char    WMM_OUI[];
29 extern unsigned char    WPS_OUI[];
30 extern unsigned char    P2P_OUI[];
31 extern unsigned char    WFD_OUI[];
32
33 void init_mlme_ap_info(_adapter *padapter)
34 {
35         struct mlme_ext_priv *pmlmeext = &padapter->mlmeextpriv;
36         struct mlme_priv *pmlmepriv = &(padapter->mlmepriv);
37         struct sta_priv *pstapriv = &padapter->stapriv;
38         struct wlan_acl_pool *pacl_list = &pstapriv->acl_list;
39
40
41         _rtw_spinlock_init(&pmlmepriv->bcn_update_lock);
42
43         //for ACL
44         _rtw_init_queue(&pacl_list->acl_node_q);
45
46         //pmlmeext->bstart_bss = _FALSE;
47
48         start_ap_mode(padapter);
49 }
50
51 void free_mlme_ap_info(_adapter *padapter)
52 {
53         _irqL irqL;
54         struct sta_info *psta=NULL;
55         struct sta_priv *pstapriv = &padapter->stapriv;
56         struct mlme_priv *pmlmepriv = &(padapter->mlmepriv);
57         struct mlme_ext_priv *pmlmeext = &padapter->mlmeextpriv;
58         struct mlme_ext_info    *pmlmeinfo = &(pmlmeext->mlmext_info);
59
60         //stop_ap_mode(padapter);
61
62         pmlmepriv->update_bcn = _FALSE;
63         pmlmeext->bstart_bss = _FALSE;
64
65         rtw_sta_flush(padapter, _TRUE);
66
67         pmlmeinfo->state = _HW_STATE_NOLINK_;
68
69         //free_assoc_sta_resources
70         rtw_free_all_stainfo(padapter);
71
72         //free bc/mc sta_info
73         psta = rtw_get_bcmc_stainfo(padapter);
74         //_enter_critical_bh(&(pstapriv->sta_hash_lock), &irqL);
75         rtw_free_stainfo(padapter, psta);
76         //_exit_critical_bh(&(pstapriv->sta_hash_lock), &irqL);
77
78
79         _rtw_spinlock_free(&pmlmepriv->bcn_update_lock);
80
81 }
82
83 static void update_BCNTIM(_adapter *padapter)
84 {
85         struct sta_priv *pstapriv = &padapter->stapriv;
86         struct mlme_ext_priv *pmlmeext = &(padapter->mlmeextpriv);
87         struct mlme_ext_info *pmlmeinfo = &(pmlmeext->mlmext_info);
88         WLAN_BSSID_EX *pnetwork_mlmeext = &(pmlmeinfo->network);
89         unsigned char *pie = pnetwork_mlmeext->IEs;
90
91 /*
92         //DBG_871X("%s\n", __FUNCTION__);
93
94         //update TIM IE
95         //if(pstapriv->tim_bitmap)
96 */
97         if (_TRUE) {
98                 u8 *p, *dst_ie, *premainder_ie = NULL, *pbackup_remainder_ie = NULL;
99                 u16 tim_bitmap_le;
100                 uint offset, tmp_len, tim_ielen, tim_ie_offset, remainder_ielen;
101
102                 tim_bitmap_le = cpu_to_le16(pstapriv->tim_bitmap);
103
104                 p = rtw_get_ie(pie + _FIXED_IE_LENGTH_, _TIM_IE_, &tim_ielen, pnetwork_mlmeext->IELength - _FIXED_IE_LENGTH_);
105                 if (p != NULL && tim_ielen > 0) {
106                         tim_ielen += 2;
107
108                         premainder_ie = p + tim_ielen;
109
110                         tim_ie_offset = (sint)(p -pie);
111
112                         remainder_ielen = pnetwork_mlmeext->IELength - tim_ie_offset - tim_ielen;
113
114                         /*append TIM IE from dst_ie offset*/
115                         dst_ie = p;
116                 } else {
117                         tim_ielen = 0;
118
119                         /*calculate head_len*/
120                         offset = _FIXED_IE_LENGTH_;
121
122                         /* get ssid_ie len */
123                         p = rtw_get_ie(pie + _BEACON_IE_OFFSET_, _SSID_IE_, &tmp_len, (pnetwork_mlmeext->IELength - _BEACON_IE_OFFSET_));
124                         if (p != NULL)
125                                 offset += tmp_len+2;
126
127                         /*get supported rates len*/
128                         p = rtw_get_ie(pie + _BEACON_IE_OFFSET_, _SUPPORTEDRATES_IE_, &tmp_len, (pnetwork_mlmeext->IELength - _BEACON_IE_OFFSET_));
129                         if (p !=  NULL)
130                         {
131                                 offset += tmp_len+2;
132                         }
133
134                         /*DS Parameter Set IE, len=3*/
135                         offset += 3;
136
137                         premainder_ie = pie + offset;
138
139                         remainder_ielen = pnetwork_mlmeext->IELength - offset - tim_ielen;
140
141                         /*append TIM IE from offset*/
142                         dst_ie = pie + offset;
143
144                 }
145
146                 if (remainder_ielen > 0) {
147                         pbackup_remainder_ie = rtw_malloc(remainder_ielen);
148                         if(pbackup_remainder_ie && premainder_ie)
149                                 _rtw_memcpy(pbackup_remainder_ie, premainder_ie, remainder_ielen);
150                 }
151
152                 *dst_ie++=_TIM_IE_;
153
154                 if ((pstapriv->tim_bitmap&0xff00) && (pstapriv->tim_bitmap&0x00fe))
155                         tim_ielen = 5;
156                 else
157                         tim_ielen = 4;
158
159                 *dst_ie++ = tim_ielen;
160
161                 *dst_ie++ = 0;/*DTIM count*/
162                 *dst_ie++ = 1;/*DTIM period*/
163
164                 if (pstapriv->tim_bitmap & BIT(0))/*for bc/mc frames*/
165                         *dst_ie++ = BIT(0);/*bitmap ctrl */
166                 else
167                         *dst_ie++ = 0;
168
169                 if (tim_ielen == 4) {
170                         u8 pvb = 0;
171
172                         if (pstapriv->tim_bitmap & 0x00fe)
173                                 pvb = (u8)tim_bitmap_le;
174                         else if (pstapriv->tim_bitmap & 0xff00)
175                                 pvb = (u8)(tim_bitmap_le >> 8);
176                         else
177                                 pvb = (u8)tim_bitmap_le;
178
179                         *dst_ie++ = pvb;
180
181                 } else if (tim_ielen == 5) {
182                         _rtw_memcpy(dst_ie, &tim_bitmap_le, 2);
183                         dst_ie += 2;
184                 }
185
186                 /*copy remainder IE*/
187                 if (pbackup_remainder_ie) {
188                         _rtw_memcpy(dst_ie, pbackup_remainder_ie, remainder_ielen);
189
190                         rtw_mfree(pbackup_remainder_ie, remainder_ielen);
191                 }
192
193                 offset =  (uint)(dst_ie - pie);
194                 pnetwork_mlmeext->IELength = offset + remainder_ielen;
195
196         }
197 }
198
199 void rtw_add_bcn_ie(_adapter *padapter, WLAN_BSSID_EX *pnetwork, u8 index, u8 *data, u8 len)
200 {
201         PNDIS_802_11_VARIABLE_IEs       pIE;
202         u8      bmatch = _FALSE;
203         u8      *pie = pnetwork->IEs;
204         u8      *p=NULL, *dst_ie=NULL, *premainder_ie=NULL, *pbackup_remainder_ie=NULL;
205         u32     i, offset, ielen, ie_offset, remainder_ielen = 0;
206
207         for (i = sizeof(NDIS_802_11_FIXED_IEs); i < pnetwork->IELength;)
208         {
209                 pIE = (PNDIS_802_11_VARIABLE_IEs)(pnetwork->IEs + i);
210
211                 if (pIE->ElementID > index)
212                 {
213                         break;
214                 }
215                 else if(pIE->ElementID == index) // already exist the same IE
216                 {
217                         p = (u8 *)pIE;
218                         ielen = pIE->Length;
219                         bmatch = _TRUE;
220                         break;
221                 }
222
223                 p = (u8 *)pIE;
224                 ielen = pIE->Length;
225                 i += (pIE->Length + 2);
226         }
227
228         if (p != NULL && ielen>0)
229         {
230                 ielen += 2;
231
232                 premainder_ie = p+ielen;
233
234                 ie_offset = (sint)(p -pie);
235
236                 remainder_ielen = pnetwork->IELength - ie_offset - ielen;
237
238                 if(bmatch)
239                         dst_ie = p;
240                 else
241                         dst_ie = (p+ielen);
242         }
243
244         if(dst_ie == NULL)
245                 return;
246
247         if(remainder_ielen>0)
248         {
249                 pbackup_remainder_ie = rtw_malloc(remainder_ielen);
250                 if(pbackup_remainder_ie && premainder_ie)
251                         _rtw_memcpy(pbackup_remainder_ie, premainder_ie, remainder_ielen);
252         }
253
254         *dst_ie++=index;
255         *dst_ie++=len;
256
257         _rtw_memcpy(dst_ie, data, len);
258         dst_ie+=len;
259
260         //copy remainder IE
261         if(pbackup_remainder_ie)
262         {
263                 _rtw_memcpy(dst_ie, pbackup_remainder_ie, remainder_ielen);
264
265                 rtw_mfree(pbackup_remainder_ie, remainder_ielen);
266         }
267
268         offset =  (uint)(dst_ie - pie);
269         pnetwork->IELength = offset + remainder_ielen;
270 }
271
272 void rtw_remove_bcn_ie(_adapter *padapter, WLAN_BSSID_EX *pnetwork, u8 index)
273 {
274         u8 *p, *dst_ie=NULL, *premainder_ie=NULL, *pbackup_remainder_ie=NULL;
275         uint offset, ielen, ie_offset, remainder_ielen = 0;
276         u8      *pie = pnetwork->IEs;
277
278         p = rtw_get_ie(pie + _FIXED_IE_LENGTH_, index, &ielen, pnetwork->IELength - _FIXED_IE_LENGTH_);
279         if (p != NULL && ielen>0)
280         {
281                 ielen += 2;
282
283                 premainder_ie = p+ielen;
284
285                 ie_offset = (sint)(p -pie);
286
287                 remainder_ielen = pnetwork->IELength - ie_offset - ielen;
288
289                 dst_ie = p;
290         }
291         else {
292                 return;
293         }
294
295         if(remainder_ielen>0)
296         {
297                 pbackup_remainder_ie = rtw_malloc(remainder_ielen);
298                 if(pbackup_remainder_ie && premainder_ie)
299                         _rtw_memcpy(pbackup_remainder_ie, premainder_ie, remainder_ielen);
300         }
301
302         //copy remainder IE
303         if(pbackup_remainder_ie)
304         {
305                 _rtw_memcpy(dst_ie, pbackup_remainder_ie, remainder_ielen);
306
307                 rtw_mfree(pbackup_remainder_ie, remainder_ielen);
308         }
309
310         offset =  (uint)(dst_ie - pie);
311         pnetwork->IELength = offset + remainder_ielen;
312 }
313
314
315 u8 chk_sta_is_alive(struct sta_info *psta);
316 u8 chk_sta_is_alive(struct sta_info *psta)
317 {
318         u8 ret = _FALSE;
319         #ifdef DBG_EXPIRATION_CHK
320         DBG_871X("sta:"MAC_FMT", rssi:%d, rx:"STA_PKTS_FMT", expire_to:%u, %s%ssq_len:%u\n"
321                 , MAC_ARG(psta->hwaddr)
322                 , psta->rssi_stat.UndecoratedSmoothedPWDB
323                 //, STA_RX_PKTS_ARG(psta)
324                 , STA_RX_PKTS_DIFF_ARG(psta)
325                 , psta->expire_to
326                 , psta->state&WIFI_SLEEP_STATE?"PS, ":""
327                 , psta->state&WIFI_STA_ALIVE_CHK_STATE?"SAC, ":""
328                 , psta->sleepq_len
329         );
330         #endif
331
332         //if(sta_last_rx_pkts(psta) == sta_rx_pkts(psta))
333         if((psta->sta_stats.last_rx_data_pkts + psta->sta_stats.last_rx_ctrl_pkts) == (psta->sta_stats.rx_data_pkts + psta->sta_stats.rx_ctrl_pkts))
334         {
335                 #if 0
336                 if(psta->state&WIFI_SLEEP_STATE)
337                         ret = _TRUE;
338                 #endif
339         }
340         else
341         {
342                 ret = _TRUE;
343         }
344
345         sta_update_last_rx_pkts(psta);
346
347         return ret;
348 }
349
350 void    expire_timeout_chk(_adapter *padapter)
351 {
352         _irqL irqL;
353         _list   *phead, *plist;
354         u8 updated = _FALSE;
355         struct sta_info *psta=NULL;
356         struct sta_priv *pstapriv = &padapter->stapriv;
357         u8 chk_alive_num = 0;
358         char chk_alive_list[NUM_STA];
359         int i;
360
361
362         _enter_critical_bh(&pstapriv->auth_list_lock, &irqL);
363
364         phead = &pstapriv->auth_list;
365         plist = get_next(phead);
366
367         //check auth_queue
368         #ifdef DBG_EXPIRATION_CHK
369         if (rtw_end_of_queue_search(phead, plist) == _FALSE) {
370                 DBG_871X(FUNC_NDEV_FMT" auth_list, cnt:%u\n"
371                         , FUNC_NDEV_ARG(padapter->pnetdev), pstapriv->auth_list_cnt);
372         }
373         #endif
374         while ((rtw_end_of_queue_search(phead, plist)) == _FALSE)
375         {
376                 psta = LIST_CONTAINOR(plist, struct sta_info, auth_list);
377
378                 plist = get_next(plist);
379
380
381 #ifdef CONFIG_ATMEL_RC_PATCH
382                 if (_TRUE == _rtw_memcmp((void *)(pstapriv->atmel_rc_pattern), (void *)(psta->hwaddr), ETH_ALEN))
383                         continue;
384                 if (psta->flag_atmel_rc)
385                         continue;
386 #endif
387                 if(psta->expire_to>0)
388                 {
389                         psta->expire_to--;
390                         if (psta->expire_to == 0)
391                         {
392                                 rtw_list_delete(&psta->auth_list);
393                                 pstapriv->auth_list_cnt--;
394
395                                 DBG_871X("auth expire %02X%02X%02X%02X%02X%02X\n",
396                                         psta->hwaddr[0],psta->hwaddr[1],psta->hwaddr[2],psta->hwaddr[3],psta->hwaddr[4],psta->hwaddr[5]);
397
398                                 _exit_critical_bh(&pstapriv->auth_list_lock, &irqL);
399
400                                 //_enter_critical_bh(&(pstapriv->sta_hash_lock), &irqL);
401                                 rtw_free_stainfo(padapter, psta);
402                                 //_exit_critical_bh(&(pstapriv->sta_hash_lock), &irqL);
403
404                                 _enter_critical_bh(&pstapriv->auth_list_lock, &irqL);
405                         }
406                 }
407
408         }
409
410         _exit_critical_bh(&pstapriv->auth_list_lock, &irqL);
411         psta = NULL;
412
413
414         _enter_critical_bh(&pstapriv->asoc_list_lock, &irqL);
415
416         phead = &pstapriv->asoc_list;
417         plist = get_next(phead);
418
419         //check asoc_queue
420         #ifdef DBG_EXPIRATION_CHK
421         if (rtw_end_of_queue_search(phead, plist) == _FALSE) {
422                 DBG_871X(FUNC_NDEV_FMT" asoc_list, cnt:%u\n"
423                         , FUNC_NDEV_ARG(padapter->pnetdev), pstapriv->asoc_list_cnt);
424         }
425         #endif
426         while ((rtw_end_of_queue_search(phead, plist)) == _FALSE)
427         {
428                 psta = LIST_CONTAINOR(plist, struct sta_info, asoc_list);
429                 plist = get_next(plist);
430 #ifdef CONFIG_ATMEL_RC_PATCH
431                 DBG_871X("%s:%d  psta=%p, %02x,%02x||%02x,%02x  \n\n", __func__,  __LINE__,
432                         psta,pstapriv->atmel_rc_pattern[0], pstapriv->atmel_rc_pattern[5], psta->hwaddr[0], psta->hwaddr[5]);
433                 if (_TRUE == _rtw_memcmp((void *)pstapriv->atmel_rc_pattern, (void *)(psta->hwaddr), ETH_ALEN))
434                         continue;
435                 if (psta->flag_atmel_rc)
436                         continue;
437                 DBG_871X("%s: debug line:%d \n", __func__, __LINE__);
438 #endif
439 #ifdef CONFIG_AUTO_AP_MODE
440                 if(psta->isrc)
441                         continue;
442 #endif
443                 if (chk_sta_is_alive(psta) || !psta->expire_to) {
444                         psta->expire_to = pstapriv->expire_to;
445                         psta->keep_alive_trycnt = 0;
446                         #ifdef CONFIG_TX_MCAST2UNI
447                         psta->under_exist_checking = 0;
448                         #endif  // CONFIG_TX_MCAST2UNI
449                 } else {
450                         psta->expire_to--;
451                 }
452
453 #ifndef CONFIG_ACTIVE_KEEP_ALIVE_CHECK
454 #ifdef CONFIG_80211N_HT
455 #ifdef CONFIG_TX_MCAST2UNI
456                 if ( (psta->flags & WLAN_STA_HT) && (psta->htpriv.agg_enable_bitmap || psta->under_exist_checking) ) {
457                         // check sta by delba(addba) for 11n STA
458                         // ToDo: use CCX report to check for all STAs
459                         //DBG_871X("asoc check by DELBA/ADDBA! (pstapriv->expire_to=%d s)(psta->expire_to=%d s), [%02x, %d]\n", pstapriv->expire_to*2, psta->expire_to*2, psta->htpriv.agg_enable_bitmap, psta->under_exist_checking);
460
461                                 if ( psta->expire_to <= (pstapriv->expire_to - 50 ) ) {
462                                 DBG_871X("asoc expire by DELBA/ADDBA! (%d s)\n", (pstapriv->expire_to-psta->expire_to)*2);
463                                 psta->under_exist_checking = 0;
464                                 psta->expire_to = 0;
465                         } else if ( psta->expire_to <= (pstapriv->expire_to - 3) && (psta->under_exist_checking==0)) {
466                                 DBG_871X("asoc check by DELBA/ADDBA! (%d s)\n", (pstapriv->expire_to-psta->expire_to)*2);
467                                 psta->under_exist_checking = 1;
468                                 //tear down TX AMPDU
469                                 send_delba(padapter, 1, psta->hwaddr);// // originator
470                                 psta->htpriv.agg_enable_bitmap = 0x0;//reset
471                                 psta->htpriv.candidate_tid_bitmap = 0x0;//reset
472                         }
473                 }
474 #endif //CONFIG_TX_MCAST2UNI
475 #endif //CONFIG_80211N_HT
476 #endif //CONFIG_ACTIVE_KEEP_ALIVE_CHECK
477
478                 if (psta->expire_to <= 0)
479                 {
480                         struct mlme_ext_priv *pmlmeext = &padapter->mlmeextpriv;
481
482                         if (padapter->registrypriv.wifi_spec == 1)
483                         {
484                                 psta->expire_to = pstapriv->expire_to;
485                                 continue;
486                         }
487
488 #ifndef CONFIG_ACTIVE_KEEP_ALIVE_CHECK
489 #ifdef CONFIG_80211N_HT
490
491 #define KEEP_ALIVE_TRYCNT (3)
492
493                         if(psta->keep_alive_trycnt > 0 && psta->keep_alive_trycnt <= KEEP_ALIVE_TRYCNT)
494                         {
495                                 if(psta->state & WIFI_STA_ALIVE_CHK_STATE)
496                                         psta->state ^= WIFI_STA_ALIVE_CHK_STATE;
497                                 else
498                                         psta->keep_alive_trycnt = 0;
499
500                         }
501                         else if((psta->keep_alive_trycnt > KEEP_ALIVE_TRYCNT) && !(psta->state & WIFI_STA_ALIVE_CHK_STATE))
502                         {
503                                 psta->keep_alive_trycnt = 0;
504                         }
505                         if((psta->htpriv.ht_option==_TRUE) && (psta->htpriv.ampdu_enable==_TRUE))
506                         {
507                                 uint priority = 1; //test using BK
508                                 u8 issued=0;
509
510                                 //issued = (psta->htpriv.agg_enable_bitmap>>priority)&0x1;
511                                 issued |= (psta->htpriv.candidate_tid_bitmap>>priority)&0x1;
512
513                                 if(0==issued)
514                                 {
515                                         if (!(psta->state & WIFI_STA_ALIVE_CHK_STATE))
516                                         {
517                                                 psta->htpriv.candidate_tid_bitmap |= BIT((u8)priority);
518
519                                                 if (psta->state & WIFI_SLEEP_STATE)
520                                                         psta->expire_to = 2; // 2x2=4 sec
521                                                 else
522                                                         psta->expire_to = 1; // 2 sec
523
524                                                 psta->state |= WIFI_STA_ALIVE_CHK_STATE;
525
526                                                 //add_ba_hdl(padapter, (u8*)paddbareq_parm);
527
528                                                 DBG_871X("issue addba_req to check if sta alive, keep_alive_trycnt=%d\n", psta->keep_alive_trycnt);
529
530                                                 issue_addba_req(padapter, psta->hwaddr, (u8)priority);
531
532                                                 _set_timer(&psta->addba_retry_timer, ADDBA_TO);
533
534                                                 psta->keep_alive_trycnt++;
535
536                                                 continue;
537                                         }
538                                 }
539                         }
540                         if(psta->keep_alive_trycnt > 0 && psta->state & WIFI_STA_ALIVE_CHK_STATE)
541                         {
542                                 psta->keep_alive_trycnt = 0;
543                                 psta->state ^= WIFI_STA_ALIVE_CHK_STATE;
544                                 DBG_871X("change to another methods to check alive if staion is at ps mode\n");
545                         }
546
547 #endif //CONFIG_80211N_HT
548 #endif //CONFIG_ACTIVE_KEEP_ALIVE_CHECK
549                         if (psta->state & WIFI_SLEEP_STATE) {
550                                 if (!(psta->state & WIFI_STA_ALIVE_CHK_STATE)) {
551                                         //to check if alive by another methods if staion is at ps mode.
552                                         psta->expire_to = pstapriv->expire_to;
553                                         psta->state |= WIFI_STA_ALIVE_CHK_STATE;
554
555                                         //DBG_871X("alive chk, sta:" MAC_FMT " is at ps mode!\n", MAC_ARG(psta->hwaddr));
556
557                                         //to update bcn with tim_bitmap for this station
558                                         pstapriv->tim_bitmap |= BIT(psta->aid);
559                                         update_beacon(padapter, _TIM_IE_, NULL, _TRUE);
560
561                                         if(!pmlmeext->active_keep_alive_check)
562                                                 continue;
563                                 }
564                         }
565                         #ifdef CONFIG_ACTIVE_KEEP_ALIVE_CHECK
566                         if (pmlmeext->active_keep_alive_check) {
567                                 int stainfo_offset;
568
569                                 stainfo_offset = rtw_stainfo_offset(pstapriv, psta);
570                                 if (stainfo_offset_valid(stainfo_offset)) {
571                                         chk_alive_list[chk_alive_num++] = stainfo_offset;
572                                 }
573
574                                 continue;
575                         }
576                         #endif /* CONFIG_ACTIVE_KEEP_ALIVE_CHECK */
577                         rtw_list_delete(&psta->asoc_list);
578                         pstapriv->asoc_list_cnt--;
579                         DBG_871X("asoc expire "MAC_FMT", state=0x%x\n", MAC_ARG(psta->hwaddr), psta->state);
580                         updated = ap_free_sta(padapter, psta, _FALSE, WLAN_REASON_DEAUTH_LEAVING, _TRUE);
581                 }
582                 else
583                 {
584                         /* TODO: Aging mechanism to digest frames in sleep_q to avoid running out of xmitframe */
585                         if (psta->sleepq_len > (NR_XMITFRAME/pstapriv->asoc_list_cnt)
586                                 && padapter->xmitpriv.free_xmitframe_cnt < ((NR_XMITFRAME/pstapriv->asoc_list_cnt)/2)
587                         ){
588                                 DBG_871X("%s sta:"MAC_FMT", sleepq_len:%u, free_xmitframe_cnt:%u, asoc_list_cnt:%u, clear sleep_q\n", __func__
589                                         , MAC_ARG(psta->hwaddr)
590                                         , psta->sleepq_len, padapter->xmitpriv.free_xmitframe_cnt, pstapriv->asoc_list_cnt);
591                                 wakeup_sta_to_xmit(padapter, psta);
592                         }
593                 }
594         }
595
596         _exit_critical_bh(&pstapriv->asoc_list_lock, &irqL);
597
598 #ifdef CONFIG_ACTIVE_KEEP_ALIVE_CHECK
599 if (chk_alive_num) {
600
601         u8 backup_oper_channel=0;
602         struct mlme_ext_priv *pmlmeext = &padapter->mlmeextpriv;
603         /* switch to correct channel of current network  before issue keep-alive frames */
604         if (rtw_get_oper_ch(padapter) != pmlmeext->cur_channel) {
605                 backup_oper_channel = rtw_get_oper_ch(padapter);
606                 SelectChannel(padapter, pmlmeext->cur_channel);
607         }
608
609         /* issue null data to check sta alive*/
610         for (i = 0; i < chk_alive_num; i++) {
611                 int ret = _FAIL;
612
613                 psta = rtw_get_stainfo_by_offset(pstapriv, chk_alive_list[i]);
614 #ifdef CONFIG_ATMEL_RC_PATCH
615                 if (_TRUE == _rtw_memcmp(  pstapriv->atmel_rc_pattern, psta->hwaddr, ETH_ALEN))
616                         continue;
617                 if (psta->flag_atmel_rc)
618                         continue;
619 #endif
620                 if(!(psta->state &_FW_LINKED))
621                         continue;
622
623                 if (psta->state & WIFI_SLEEP_STATE)
624                         ret = issue_nulldata(padapter, psta->hwaddr, 0, 1, 50);
625                 else
626                         ret = issue_nulldata(padapter, psta->hwaddr, 0, 3, 50);
627
628                 psta->keep_alive_trycnt++;
629                 if (ret == _SUCCESS)
630                 {
631                         DBG_871X("asoc check, sta(" MAC_FMT ") is alive\n", MAC_ARG(psta->hwaddr));
632                         psta->expire_to = pstapriv->expire_to;
633                         psta->keep_alive_trycnt = 0;
634                         continue;
635                 }
636                 else if (psta->keep_alive_trycnt <= 3)
637                 {
638                         DBG_871X("ack check for asoc expire, keep_alive_trycnt=%d\n", psta->keep_alive_trycnt);
639                         psta->expire_to = 1;
640                         continue;
641                 }
642
643                 psta->keep_alive_trycnt = 0;
644                 DBG_871X("asoc expire "MAC_FMT", state=0x%x\n", MAC_ARG(psta->hwaddr), psta->state);
645                 _enter_critical_bh(&pstapriv->asoc_list_lock, &irqL);
646                 if (rtw_is_list_empty(&psta->asoc_list)==_FALSE) {
647                         rtw_list_delete(&psta->asoc_list);
648                         pstapriv->asoc_list_cnt--;
649                         updated = ap_free_sta(padapter, psta, _FALSE, WLAN_REASON_DEAUTH_LEAVING, _TRUE);
650                 }
651                 _exit_critical_bh(&pstapriv->asoc_list_lock, &irqL);
652
653         }
654
655         if (backup_oper_channel>0) /* back to the original operation channel */
656                 SelectChannel(padapter, backup_oper_channel);
657 }
658 #endif /* CONFIG_ACTIVE_KEEP_ALIVE_CHECK */
659
660         associated_clients_update(padapter, updated, STA_INFO_UPDATE_ALL);
661 }
662
663 void add_RATid(_adapter *padapter, struct sta_info *psta, u8 rssi_level)
664 {
665         int i;
666         u8 rf_type;
667         unsigned char sta_band = 0, shortGIrate = _FALSE;
668         u64 tx_ra_bitmap = 0;
669         struct ht_priv  *psta_ht = NULL;
670         struct mlme_priv *pmlmepriv = &(padapter->mlmepriv);
671         WLAN_BSSID_EX *pcur_network = (WLAN_BSSID_EX *)&pmlmepriv->cur_network.network;
672
673 #ifdef CONFIG_80211N_HT
674         if(psta)
675                 psta_ht = &psta->htpriv;
676         else
677                 return;
678 #endif //CONFIG_80211N_HT
679
680         if(!(psta->state & _FW_LINKED))
681                 return;
682
683 #if 0//gtest
684         if(get_rf_mimo_mode(padapter) == RTL8712_RF_2T2R)
685         {
686                 //is this a 2r STA?
687                 if((pstat->tx_ra_bitmap & 0x0ff00000) != 0 && !(priv->pshare->has_2r_sta & BIT(pstat->aid)))
688                 {
689                         priv->pshare->has_2r_sta |= BIT(pstat->aid);
690                         if(rtw_read16(padapter, 0x102501f6) != 0xffff)
691                         {
692                                 rtw_write16(padapter, 0x102501f6, 0xffff);
693                                 reset_1r_sta_RA(priv, 0xffff);
694                                 Switch_1SS_Antenna(priv, 3);
695                         }
696                 }
697                 else// bg or 1R STA?
698                 {
699                         if((priv->pmib->dot11BssType.net_work_type & WIRELESS_11N) && pstat->ht_cap_len && priv->pshare->has_2r_sta == 0)
700                         {
701                                 if(rtw_read16(padapter, 0x102501f6) != 0x7777)
702                                 { // MCS7 SGI
703                                         rtw_write16(padapter, 0x102501f6,0x7777);
704                                         reset_1r_sta_RA(priv, 0x7777);
705                                         Switch_1SS_Antenna(priv, 2);
706                                 }
707                         }
708                 }
709
710         }
711
712         if ((pstat->rssi_level < 1) || (pstat->rssi_level > 3))
713         {
714                 if (pstat->rssi >= priv->pshare->rf_ft_var.raGoDownUpper)
715                         pstat->rssi_level = 1;
716                 else if ((pstat->rssi >= priv->pshare->rf_ft_var.raGoDown20MLower) ||
717                         ((priv->pshare->is_40m_bw) && (pstat->ht_cap_len) &&
718                         (pstat->rssi >= priv->pshare->rf_ft_var.raGoDown40MLower) &&
719                         (pstat->ht_cap_buf.ht_cap_info & cpu_to_le16(_HTCAP_SUPPORT_CH_WDTH_))))
720                         pstat->rssi_level = 2;
721                 else
722                         pstat->rssi_level = 3;
723         }
724
725         // rate adaptive by rssi
726         if ((priv->pmib->dot11BssType.net_work_type & WIRELESS_11N) && pstat->ht_cap_len)
727         {
728                 if ((get_rf_mimo_mode(priv) == MIMO_1T2R) || (get_rf_mimo_mode(priv) == MIMO_1T1R))
729                 {
730                         switch (pstat->rssi_level) {
731                                 case 1:
732                                         pstat->tx_ra_bitmap &= 0x100f0000;
733                                         break;
734                                 case 2:
735                                         pstat->tx_ra_bitmap &= 0x100ff000;
736                                         break;
737                                 case 3:
738                                         if (priv->pshare->is_40m_bw)
739                                                 pstat->tx_ra_bitmap &= 0x100ff005;
740                                         else
741                                                 pstat->tx_ra_bitmap &= 0x100ff001;
742
743                                         break;
744                         }
745                 }
746                 else
747                 {
748                         switch (pstat->rssi_level) {
749                                 case 1:
750                                         pstat->tx_ra_bitmap &= 0x1f0f0000;
751                                         break;
752                                 case 2:
753                                         pstat->tx_ra_bitmap &= 0x1f0ff000;
754                                         break;
755                                 case 3:
756                                         if (priv->pshare->is_40m_bw)
757                                                 pstat->tx_ra_bitmap &= 0x000ff005;
758                                         else
759                                                 pstat->tx_ra_bitmap &= 0x000ff001;
760
761                                         break;
762                         }
763
764                         // Don't need to mask high rates due to new rate adaptive parameters
765                         //if (pstat->is_broadcom_sta)           // use MCS12 as the highest rate vs. Broadcom sta
766                         //      pstat->tx_ra_bitmap &= 0x81ffffff;
767
768                         // NIC driver will report not supporting MCS15 and MCS14 in asoc req
769                         //if (pstat->is_rtl8190_sta && !pstat->is_2t_mimo_sta)
770                         //      pstat->tx_ra_bitmap &= 0x83ffffff;              // if Realtek 1x2 sta, don't use MCS15 and MCS14
771                 }
772         }
773         else if ((priv->pmib->dot11BssType.net_work_type & WIRELESS_11G) && isErpSta(pstat))
774         {
775                 switch (pstat->rssi_level) {
776                         case 1:
777                                 pstat->tx_ra_bitmap &= 0x00000f00;
778                                 break;
779                         case 2:
780                                 pstat->tx_ra_bitmap &= 0x00000ff0;
781                                 break;
782                         case 3:
783                                 pstat->tx_ra_bitmap &= 0x00000ff5;
784                                 break;
785                 }
786         }
787         else
788         {
789                 pstat->tx_ra_bitmap &= 0x0000000d;
790         }
791
792         // disable tx short GI when station cannot rx MCS15(AP is 2T2R)
793         // disable tx short GI when station cannot rx MCS7 (AP is 1T2R or 1T1R)
794         // if there is only 1r STA and we are 2T2R, DO NOT mask SGI rate
795         if ((!(pstat->tx_ra_bitmap & 0x8000000) && (priv->pshare->has_2r_sta > 0) && (get_rf_mimo_mode(padapter) == RTL8712_RF_2T2R)) ||
796                  (!(pstat->tx_ra_bitmap & 0x80000) && (get_rf_mimo_mode(padapter) != RTL8712_RF_2T2R)))
797         {
798                 pstat->tx_ra_bitmap &= ~BIT(28);
799         }
800 #endif
801
802         rtw_hal_update_sta_rate_mask(padapter, psta);
803         tx_ra_bitmap = psta->ra_mask;
804
805         shortGIrate = query_ra_short_GI(psta);
806
807         if ( pcur_network->Configuration.DSConfig > 14 ) {
808
809                 if (tx_ra_bitmap & 0xffff000)
810                         sta_band |= WIRELESS_11_5N ;
811
812                 if (tx_ra_bitmap & 0xff0)
813                         sta_band |= WIRELESS_11A;
814
815                 // 5G band
816
817         } else {
818                 if (tx_ra_bitmap & 0xffff000)
819                         sta_band |= WIRELESS_11_24N;
820
821                 if (tx_ra_bitmap & 0xff0)
822                         sta_band |= WIRELESS_11G;
823
824                 if (tx_ra_bitmap & 0x0f)
825                         sta_band |= WIRELESS_11B;
826         }
827
828         psta->wireless_mode = sta_band;
829         psta->raid = rtw_hal_networktype_to_raid(padapter, psta);
830
831         if (psta->aid < NUM_STA)
832         {
833                 u8      arg[4] = {0};
834
835                 arg[0] = psta->mac_id;
836                 arg[1] = psta->raid;
837                 arg[2] = shortGIrate;
838                 arg[3] = psta->init_rate;
839
840                 DBG_871X("%s=> mac_id:%d , raid:%d , shortGIrate=%d, tx_ra_bitmap:0x%016llx, networkType:0x%02x\n",
841                         __FUNCTION__, psta->mac_id, psta->raid, shortGIrate, tx_ra_bitmap, psta->wireless_mode);
842
843                 rtw_hal_add_ra_tid(padapter, tx_ra_bitmap, arg, rssi_level);
844         }
845         else
846         {
847                 DBG_871X("station aid %d exceed the max number\n", psta->aid);
848         }
849
850 }
851
852 void update_bmc_sta(_adapter *padapter)
853 {
854         _irqL   irqL;
855         unsigned char   network_type;
856         int supportRateNum = 0;
857         u64 tx_ra_bitmap = 0;
858         struct mlme_priv *pmlmepriv = &(padapter->mlmepriv);
859         WLAN_BSSID_EX *pcur_network = (WLAN_BSSID_EX *)&pmlmepriv->cur_network.network;
860         struct sta_info *psta = rtw_get_bcmc_stainfo(padapter);
861
862         if(psta)
863         {
864                 psta->aid = 0;//default set to 0
865                 psta->qos_option = 0;
866 #ifdef CONFIG_80211N_HT
867                 psta->htpriv.ht_option = _FALSE;
868 #endif //CONFIG_80211N_HT
869
870                 psta->ieee8021x_blocked = 0;
871
872                 _rtw_memset((void*)&psta->sta_stats, 0, sizeof(struct stainfo_stats));
873
874                 //psta->dot118021XPrivacy = _NO_PRIVACY_;//!!! remove it, because it has been set before this.
875
876                 //prepare for add_RATid
877                 supportRateNum = rtw_get_rateset_len((u8*)&pcur_network->SupportedRates);
878                 network_type = rtw_check_network_type((u8*)&pcur_network->SupportedRates, supportRateNum, pcur_network->Configuration.DSConfig);
879                 if (IsSupportedTxCCK(network_type)) {
880                         network_type = WIRELESS_11B;
881                 }
882                 else if (network_type == WIRELESS_INVALID) { // error handling
883                         if ( pcur_network->Configuration.DSConfig > 14 )
884                                 network_type = WIRELESS_11A;
885                         else
886                                 network_type = WIRELESS_11B;
887                 }
888                 update_sta_basic_rate(psta, network_type);
889                 psta->wireless_mode = network_type;
890
891                 rtw_hal_update_sta_rate_mask(padapter, psta);
892                 tx_ra_bitmap = psta->ra_mask;
893
894                 psta->raid = rtw_hal_networktype_to_raid(padapter,psta);
895
896                 //if(pHalData->fw_ractrl == _TRUE)
897                 {
898                         u8      arg[4] = {0};
899
900                         arg[0] = psta->mac_id;
901                         arg[1] = psta->raid;
902                         arg[2] = 0;
903                         arg[3] = psta->init_rate;
904
905                         DBG_871X("%s=> mac_id:%d , raid:%d , bitmap=0x%016llx\n",
906                                 __FUNCTION__ , psta->mac_id, psta->raid , tx_ra_bitmap);
907
908                         rtw_hal_add_ra_tid(padapter, tx_ra_bitmap, arg, 0);
909                 }
910
911                 rtw_sta_media_status_rpt(padapter, psta, 1);
912
913                 _enter_critical_bh(&psta->lock, &irqL);
914                 psta->state = _FW_LINKED;
915                 _exit_critical_bh(&psta->lock, &irqL);
916
917         }
918         else
919         {
920                 DBG_871X("add_RATid_bmc_sta error!\n");
921         }
922
923 }
924
925 //notes:
926 //AID: 1~MAX for sta and 0 for bc/mc in ap/adhoc mode
927 //MAC_ID = AID+1 for sta in ap/adhoc mode
928 //MAC_ID = 1 for bc/mc for sta/ap/adhoc
929 //MAC_ID = 0 for bssid for sta/ap/adhoc
930 //CAM_ID = //0~3 for default key, cmd_id=macid + 3, macid=aid+1;
931
932 void update_sta_info_apmode(_adapter *padapter, struct sta_info *psta)
933 {
934         _irqL   irqL;
935         struct mlme_priv *pmlmepriv = &(padapter->mlmepriv);
936         struct security_priv *psecuritypriv = &padapter->securitypriv;
937         struct mlme_ext_priv    *pmlmeext = &(padapter->mlmeextpriv);
938 #ifdef CONFIG_80211N_HT
939         struct ht_priv  *phtpriv_ap = &pmlmepriv->htpriv;
940         struct ht_priv  *phtpriv_sta = &psta->htpriv;
941 #endif //CONFIG_80211N_HT
942         u8      cur_ldpc_cap=0, cur_stbc_cap=0, cur_beamform_cap=0;
943         //set intf_tag to if1
944         //psta->intf_tag = 0;
945
946         DBG_871X("%s\n",__FUNCTION__);
947
948         //psta->mac_id = psta->aid+4;
949         //psta->mac_id = psta->aid+1;//alloc macid when call rtw_alloc_stainfo(),
950                                                        //release macid when call rtw_free_stainfo()
951
952         //ap mode
953         rtw_hal_set_odm_var(padapter,HAL_ODM_STA_INFO,psta,_TRUE);
954
955         if(psecuritypriv->dot11AuthAlgrthm==dot11AuthAlgrthm_8021X)
956                 psta->ieee8021x_blocked = _TRUE;
957         else
958                 psta->ieee8021x_blocked = _FALSE;
959
960
961         //update sta's cap
962
963         //ERP
964         VCS_update(padapter, psta);
965 #ifdef CONFIG_80211N_HT
966         //HT related cap
967         if(phtpriv_sta->ht_option)
968         {
969                 //check if sta supports rx ampdu
970                 phtpriv_sta->ampdu_enable = phtpriv_ap->ampdu_enable;
971
972                 phtpriv_sta->rx_ampdu_min_spacing = (phtpriv_sta->ht_cap.ampdu_params_info&IEEE80211_HT_CAP_AMPDU_DENSITY)>>2;
973
974                 // bwmode
975                 if((phtpriv_sta->ht_cap.cap_info & phtpriv_ap->ht_cap.cap_info) & cpu_to_le16(IEEE80211_HT_CAP_SUP_WIDTH))
976                 {
977                         psta->bw_mode = CHANNEL_WIDTH_40;
978                 }
979                 else
980                 {
981                         psta->bw_mode = CHANNEL_WIDTH_20;
982                 }
983
984                 if (psta->ht_40mhz_intolerant)
985                         psta->bw_mode = CHANNEL_WIDTH_20;
986
987                 if(pmlmeext->cur_bwmode < psta->bw_mode)
988                 {
989                         psta->bw_mode = pmlmeext->cur_bwmode;
990                 }
991
992                 phtpriv_sta->ch_offset = pmlmeext->cur_ch_offset;
993
994
995                 //check if sta support s Short GI 20M
996                 if((phtpriv_sta->ht_cap.cap_info & phtpriv_ap->ht_cap.cap_info) & cpu_to_le16(IEEE80211_HT_CAP_SGI_20))
997                 {
998                         phtpriv_sta->sgi_20m = _TRUE;
999                 }
1000
1001                 //check if sta support s Short GI 40M
1002                 if((phtpriv_sta->ht_cap.cap_info & phtpriv_ap->ht_cap.cap_info) & cpu_to_le16(IEEE80211_HT_CAP_SGI_40))
1003                 {
1004                         if(psta->bw_mode == CHANNEL_WIDTH_40) //according to psta->bw_mode
1005                                 phtpriv_sta->sgi_40m = _TRUE;
1006                         else
1007                                 phtpriv_sta->sgi_40m = _FALSE;
1008                 }
1009
1010                 psta->qos_option = _TRUE;
1011
1012                 // B0 Config LDPC Coding Capability
1013                 if (TEST_FLAG(phtpriv_ap->ldpc_cap, LDPC_HT_ENABLE_TX) &&
1014                         GET_HT_CAP_ELE_LDPC_CAP((u8 *)(&phtpriv_sta->ht_cap)))
1015                 {
1016                         SET_FLAG(cur_ldpc_cap, (LDPC_HT_ENABLE_TX | LDPC_HT_CAP_TX));
1017                         DBG_871X("Enable HT Tx LDPC for STA(%d)\n",psta->aid);
1018                 }
1019
1020                 // B7 B8 B9 Config STBC setting
1021                 if (TEST_FLAG(phtpriv_ap->stbc_cap, STBC_HT_ENABLE_TX) &&
1022                         GET_HT_CAP_ELE_RX_STBC((u8 *)(&phtpriv_sta->ht_cap)))
1023                 {
1024                         SET_FLAG(cur_stbc_cap, (STBC_HT_ENABLE_TX | STBC_HT_CAP_TX) );
1025                         DBG_871X("Enable HT Tx STBC for STA(%d)\n",psta->aid);
1026                 }
1027
1028         }
1029         else
1030         {
1031                 phtpriv_sta->ampdu_enable = _FALSE;
1032
1033                 phtpriv_sta->sgi_20m = _FALSE;
1034                 phtpriv_sta->sgi_40m = _FALSE;
1035                 psta->bw_mode = CHANNEL_WIDTH_20;
1036                 phtpriv_sta->ch_offset = HAL_PRIME_CHNL_OFFSET_DONT_CARE;
1037         }
1038
1039         phtpriv_sta->ldpc_cap = cur_ldpc_cap;
1040         phtpriv_sta->stbc_cap = cur_stbc_cap;
1041         phtpriv_sta->beamform_cap = cur_beamform_cap;
1042
1043         //Rx AMPDU
1044         send_delba(padapter, 0, psta->hwaddr);// recipient
1045
1046         //TX AMPDU
1047         send_delba(padapter, 1, psta->hwaddr);// // originator
1048         phtpriv_sta->agg_enable_bitmap = 0x0;//reset
1049         phtpriv_sta->candidate_tid_bitmap = 0x0;//reset
1050 #endif //CONFIG_80211N_HT
1051
1052
1053         update_ldpc_stbc_cap(psta);
1054
1055         //todo: init other variables
1056
1057         _rtw_memset((void*)&psta->sta_stats, 0, sizeof(struct stainfo_stats));
1058
1059
1060         //add ratid
1061         //add_RATid(padapter, psta);//move to ap_sta_info_defer_update()
1062
1063
1064         _enter_critical_bh(&psta->lock, &irqL);
1065         psta->state |= _FW_LINKED;
1066         _exit_critical_bh(&psta->lock, &irqL);
1067
1068
1069 }
1070
1071 static void update_ap_info(_adapter *padapter, struct sta_info *psta)
1072 {
1073         struct mlme_priv *pmlmepriv = &(padapter->mlmepriv);
1074         WLAN_BSSID_EX *pnetwork = (WLAN_BSSID_EX *)&pmlmepriv->cur_network.network;
1075         struct security_priv *psecuritypriv = &padapter->securitypriv;
1076         struct mlme_ext_priv    *pmlmeext = &(padapter->mlmeextpriv);
1077 #ifdef CONFIG_80211N_HT
1078         struct ht_priv  *phtpriv_ap = &pmlmepriv->htpriv;
1079 #endif //CONFIG_80211N_HT
1080
1081         psta->wireless_mode = pmlmeext->cur_wireless_mode;
1082
1083         psta->bssratelen = rtw_get_rateset_len(pnetwork->SupportedRates);
1084         _rtw_memcpy(psta->bssrateset, pnetwork->SupportedRates, psta->bssratelen);
1085
1086 #ifdef CONFIG_80211N_HT
1087         //HT related cap
1088         if(phtpriv_ap->ht_option)
1089         {
1090                 //check if sta supports rx ampdu
1091                 //phtpriv_ap->ampdu_enable = phtpriv_ap->ampdu_enable;
1092
1093                 //check if sta support s Short GI 20M
1094                 if((phtpriv_ap->ht_cap.cap_info) & cpu_to_le16(IEEE80211_HT_CAP_SGI_20))
1095                 {
1096                         phtpriv_ap->sgi_20m = _TRUE;
1097                 }
1098                 //check if sta support s Short GI 40M
1099                 if((phtpriv_ap->ht_cap.cap_info) & cpu_to_le16(IEEE80211_HT_CAP_SGI_40))
1100                 {
1101                         phtpriv_ap->sgi_40m = _TRUE;
1102                 }
1103
1104                 psta->qos_option = _TRUE;
1105         }
1106         else
1107         {
1108                 phtpriv_ap->ampdu_enable = _FALSE;
1109
1110                 phtpriv_ap->sgi_20m = _FALSE;
1111                 phtpriv_ap->sgi_40m = _FALSE;
1112         }
1113
1114         psta->bw_mode = pmlmeext->cur_bwmode;
1115         phtpriv_ap->ch_offset = pmlmeext->cur_ch_offset;
1116
1117         phtpriv_ap->agg_enable_bitmap = 0x0;//reset
1118         phtpriv_ap->candidate_tid_bitmap = 0x0;//reset
1119
1120         _rtw_memcpy(&psta->htpriv, &pmlmepriv->htpriv, sizeof(struct ht_priv));
1121
1122
1123 #endif //CONFIG_80211N_HT
1124
1125         psta->state |= WIFI_AP_STATE; /* Aries, add,fix bug of flush_cam_entry at STOP AP mode , 0724 */
1126 }
1127
1128 static void rtw_set_hw_wmm_param(_adapter *padapter)
1129 {
1130         u8      ACI, ACM, AIFS, ECWMin, ECWMax, aSifsTime;
1131         u8      acm_mask;
1132         u16     TXOP;
1133         u32     acParm, i;
1134         u32     edca[4], inx[4];
1135         struct mlme_ext_priv    *pmlmeext = &padapter->mlmeextpriv;
1136         struct mlme_ext_info    *pmlmeinfo = &(pmlmeext->mlmext_info);
1137         struct xmit_priv                *pxmitpriv = &padapter->xmitpriv;
1138         struct registry_priv     *pregpriv = &padapter->registrypriv;
1139
1140         acm_mask = 0;
1141
1142         if (IsSupported5G(pmlmeext->cur_wireless_mode) ||
1143                 (pmlmeext->cur_wireless_mode & WIRELESS_11_24N))
1144                 aSifsTime = 16;
1145         else
1146                 aSifsTime = 10;
1147
1148         if (pmlmeinfo->WMM_enable == 0) {
1149                 padapter->mlmepriv.acm_mask = 0;
1150
1151                 AIFS = aSifsTime + (2 * pmlmeinfo->slotTime);
1152
1153                 if (pmlmeext->cur_wireless_mode & (WIRELESS_11G | WIRELESS_11A)) {
1154                         ECWMin = 4;
1155                         ECWMax = 10;
1156                 } else if (pmlmeext->cur_wireless_mode & WIRELESS_11B) {
1157                         ECWMin = 5;
1158                         ECWMax = 10;
1159                 } else {
1160                         ECWMin = 4;
1161                         ECWMax = 10;
1162                 }
1163
1164                 TXOP = 0;
1165                 acParm = AIFS | (ECWMin << 8) | (ECWMax << 12) | (TXOP << 16);
1166                 rtw_hal_set_hwreg(padapter, HW_VAR_AC_PARAM_BE, (u8 *)(&acParm));
1167                 rtw_hal_set_hwreg(padapter, HW_VAR_AC_PARAM_BK, (u8 *)(&acParm));
1168                 rtw_hal_set_hwreg(padapter, HW_VAR_AC_PARAM_VI, (u8 *)(&acParm));
1169
1170                 ECWMin = 2;
1171                 ECWMax = 3;
1172                 TXOP = 0x2f;
1173                 acParm = AIFS | (ECWMin << 8) | (ECWMax << 12) | (TXOP << 16);
1174                 rtw_hal_set_hwreg(padapter, HW_VAR_AC_PARAM_VO, (u8 *)(&acParm));
1175
1176         } else {
1177                 edca[0] = edca[1] = edca[2] = edca[3] = 0;
1178
1179                 /*TODO:*/
1180                 acm_mask = 0;
1181                 padapter->mlmepriv.acm_mask = acm_mask;
1182
1183                 /*
1184                 //BK
1185                 //AIFS = AIFSN * slot time + SIFS - r2t phy delay
1186                 */
1187                 AIFS = (7 * pmlmeinfo->slotTime) + aSifsTime;
1188                 ECWMin = 4;
1189                 ECWMax = 10;
1190                 TXOP = 0;
1191                 acParm = AIFS | (ECWMin << 8) | (ECWMax << 12) | (TXOP << 16);
1192                 rtw_hal_set_hwreg(padapter, HW_VAR_AC_PARAM_BK, (u8 *)(&acParm));
1193                 edca[XMIT_BK_QUEUE] = acParm;
1194                 DBG_871X("WMM(BK): %x\n", acParm);
1195
1196                 /* BE */
1197                 AIFS = (3 * pmlmeinfo->slotTime) + aSifsTime;
1198                 ECWMin = 4;
1199                 ECWMax = 6;
1200                 TXOP = 0;
1201                 acParm = AIFS | (ECWMin << 8) | (ECWMax << 12) | (TXOP << 16);
1202                 rtw_hal_set_hwreg(padapter, HW_VAR_AC_PARAM_BE, (u8 *)(&acParm));
1203                 edca[XMIT_BE_QUEUE] = acParm;
1204                 DBG_871X("WMM(BE): %x\n", acParm);
1205
1206                 /* VI */
1207                 AIFS = (1 * pmlmeinfo->slotTime) + aSifsTime;
1208                 ECWMin = 3;
1209                 ECWMax = 4;
1210                 TXOP = 94;
1211                 acParm = AIFS | (ECWMin << 8) | (ECWMax << 12) | (TXOP << 16);
1212                 rtw_hal_set_hwreg(padapter, HW_VAR_AC_PARAM_VI, (u8 *)(&acParm));
1213                 edca[XMIT_VI_QUEUE] = acParm;
1214                 DBG_871X("WMM(VI): %x\n", acParm);
1215
1216                 /* VO */
1217                 AIFS = (1 * pmlmeinfo->slotTime) + aSifsTime;
1218                 ECWMin = 2;
1219                 ECWMax = 3;
1220                 TXOP = 47;
1221                 acParm = AIFS | (ECWMin << 8) | (ECWMax << 12) | (TXOP << 16);
1222                 rtw_hal_set_hwreg(padapter, HW_VAR_AC_PARAM_VO, (u8 *)(&acParm));
1223                 edca[XMIT_VO_QUEUE] = acParm;
1224                 DBG_871X("WMM(VO): %x\n", acParm);
1225
1226
1227                 if (padapter->registrypriv.acm_method == 1)
1228                         rtw_hal_set_hwreg(padapter, HW_VAR_ACM_CTRL, (u8 *)(&acm_mask));
1229                 else
1230                         padapter->mlmepriv.acm_mask = acm_mask;
1231
1232                 inx[0] = 0; inx[1] = 1; inx[2] = 2; inx[3] = 3;
1233
1234                 if (pregpriv->wifi_spec == 1) {
1235                         u32     j, tmp, change_inx = _FALSE;
1236
1237                         /* entry indx: 0->vo, 1->vi, 2->be, 3->bk. */
1238                         for (i = 0 ; i < 4 ; i++) {
1239                                 for (j = i+1 ; j < 4 ; j++) {
1240                                         /* compare CW and AIFS */
1241                                         if ((edca[j] & 0xFFFF) < (edca[i] & 0xFFFF)) {
1242                                                 change_inx = _TRUE;
1243                                         } else if ((edca[j] & 0xFFFF) == (edca[i] & 0xFFFF)) {
1244                                                 /* compare TXOP */
1245                                                 if ((edca[j] >> 16) > (edca[i] >> 16))
1246                                                         change_inx = _TRUE;
1247                                         }
1248
1249                                         if (change_inx) {
1250                                                 tmp = edca[i];
1251                                                 edca[i] = edca[j];
1252                                                 edca[j] = tmp;
1253
1254                                                 tmp = inx[i];
1255                                                 inx[i] = inx[j];
1256                                                 inx[j] = tmp;
1257
1258                                                 change_inx = _FALSE;
1259                                         }
1260                                 }
1261                         }
1262                 }
1263
1264                 for (i = 0 ; i < 4 ; i++) {
1265                         pxmitpriv->wmm_para_seq[i] = inx[i];
1266                         DBG_871X("wmm_para_seq(%d): %d\n", i, pxmitpriv->wmm_para_seq[i]);
1267                 }
1268
1269         }
1270
1271 }
1272
1273 static void update_hw_ht_param(_adapter *padapter)
1274 {
1275         unsigned char           max_AMPDU_len;
1276         unsigned char           min_MPDU_spacing;
1277         struct registry_priv     *pregpriv = &padapter->registrypriv;
1278         struct mlme_ext_priv    *pmlmeext = &padapter->mlmeextpriv;
1279         struct mlme_ext_info    *pmlmeinfo = &(pmlmeext->mlmext_info);
1280
1281         DBG_871X("%s\n", __FUNCTION__);
1282
1283
1284         //handle A-MPDU parameter field
1285         /*
1286                 AMPDU_para [1:0]:Max AMPDU Len => 0:8k , 1:16k, 2:32k, 3:64k
1287                 AMPDU_para [4:2]:Min MPDU Start Spacing
1288         */
1289         max_AMPDU_len = pmlmeinfo->HT_caps.u.HT_cap_element.AMPDU_para & 0x03;
1290
1291         min_MPDU_spacing = (pmlmeinfo->HT_caps.u.HT_cap_element.AMPDU_para & 0x1c) >> 2;
1292
1293         rtw_hal_set_hwreg(padapter, HW_VAR_AMPDU_MIN_SPACE, (u8 *)(&min_MPDU_spacing));
1294
1295         rtw_hal_set_hwreg(padapter, HW_VAR_AMPDU_FACTOR, (u8 *)(&max_AMPDU_len));
1296
1297         //
1298         // Config SM Power Save setting
1299         //
1300         pmlmeinfo->SM_PS = (pmlmeinfo->HT_caps.u.HT_cap_element.HT_caps_info & 0x0C) >> 2;
1301         if(pmlmeinfo->SM_PS == WLAN_HT_CAP_SM_PS_STATIC)
1302         {
1303                 /*u8 i;
1304                 //update the MCS rates
1305                 for (i = 0; i < 16; i++)
1306                 {
1307                         pmlmeinfo->HT_caps.HT_cap_element.MCS_rate[i] &= MCS_rate_1R[i];
1308                 }*/
1309                 DBG_871X("%s(): WLAN_HT_CAP_SM_PS_STATIC\n",__FUNCTION__);
1310         }
1311
1312         //
1313         // Config current HT Protection mode.
1314         //
1315         //pmlmeinfo->HT_protection = pmlmeinfo->HT_info.infos[1] & 0x3;
1316
1317 }
1318
1319 static void rtw_ap_check_scan(_adapter *padapter)
1320 {
1321         _irqL   irqL;
1322         _list           *plist, *phead;
1323         u32     delta_time, lifetime;
1324         struct  wlan_network    *pnetwork = NULL;
1325         WLAN_BSSID_EX *pbss = NULL;
1326         struct  mlme_priv       *pmlmepriv = &(padapter->mlmepriv);
1327         _queue  *queue  = &(pmlmepriv->scanned_queue);
1328         u8 do_scan = _FALSE;
1329
1330         lifetime = SCANQUEUE_LIFETIME; /* 20 sec */
1331
1332         _enter_critical_bh(&(pmlmepriv->scanned_queue.lock), &irqL);
1333         phead = get_list_head(queue);
1334         if (rtw_end_of_queue_search(phead, get_next(phead)) == _TRUE)
1335                 if (padapter->registrypriv.wifi_spec)
1336                         do_scan = _TRUE;
1337         _exit_critical_bh(&(pmlmepriv->scanned_queue.lock), &irqL);
1338
1339 #ifdef CONFIG_AUTO_CHNL_SEL_NHM
1340         if (padapter->registrypriv.acs_auto_scan) {
1341                 do_scan = _TRUE;
1342                 rtw_acs_start(padapter, _TRUE);
1343         }
1344 #endif
1345
1346         if (_TRUE == do_scan) {
1347                 DBG_871X("%s : drv scans by itself and wait_completed\n", __func__);
1348                 rtw_drv_scan_by_self(padapter);
1349                 rtw_scan_wait_completed(padapter);
1350         }
1351
1352 #ifdef CONFIG_AUTO_CHNL_SEL_NHM
1353         if (padapter->registrypriv.acs_auto_scan)
1354                 rtw_acs_start(padapter, _FALSE);
1355 #endif
1356         _enter_critical_bh(&(pmlmepriv->scanned_queue.lock), &irqL);
1357
1358         phead = get_list_head(queue);
1359         plist = get_next(phead);
1360
1361         while (1) {
1362
1363                 if (rtw_end_of_queue_search(phead, plist) == _TRUE)
1364                         break;
1365
1366                 pnetwork = LIST_CONTAINOR(plist, struct wlan_network, list);
1367
1368                 if (rtw_ch_set_search_ch(padapter->mlmeextpriv.channel_set, pnetwork->network.Configuration.DSConfig) >= 0
1369                         && rtw_mlme_band_check(padapter, pnetwork->network.Configuration.DSConfig) == _TRUE
1370                         && _TRUE == rtw_validate_ssid(&(pnetwork->network.Ssid))) {
1371                         delta_time = (u32) rtw_get_passing_time_ms(pnetwork->last_scanned);
1372
1373                         if (delta_time < lifetime) {
1374
1375                                 uint ie_len = 0;
1376                                 u8 *pbuf = NULL;
1377                                 u8 *ie = NULL;
1378
1379                                 pbss = &pnetwork->network;
1380                                 ie = pbss->IEs;
1381
1382                                 /*check if HT CAP INFO IE exists or not*/
1383                                 pbuf = rtw_get_ie(ie + _BEACON_IE_OFFSET_, _HT_CAPABILITY_IE_, &ie_len, (pbss->IELength - _BEACON_IE_OFFSET_));
1384                                 if (pbuf == NULL) {
1385                                         /* HT CAP INFO IE don't exist, it is b/g mode bss.*/
1386
1387                                         if (pmlmepriv->olbc == _FALSE)
1388                                                 pmlmepriv->olbc = _TRUE;
1389
1390                                         if (pmlmepriv->olbc_ht == _FALSE)
1391                                                 pmlmepriv->olbc_ht = _TRUE;
1392                                 }
1393                         }
1394                 }
1395
1396                 plist = get_next(plist);
1397
1398         }
1399
1400         _exit_critical_bh(&(pmlmepriv->scanned_queue.lock), &irqL);
1401
1402         pmlmepriv->num_sta_no_ht = 0; /* reset to 0 after ap do scanning*/
1403
1404 }
1405
1406 void rtw_start_bss_hdl_after_chbw_decided(_adapter *adapter)
1407 {
1408         WLAN_BSSID_EX *pnetwork = &(adapter->mlmepriv.cur_network.network);
1409         struct sta_info *sta = NULL;
1410
1411         /* update cur_wireless_mode */
1412         update_wireless_mode(adapter);
1413
1414         /* update RRSR and RTS_INIT_RATE register after set channel and bandwidth */
1415         UpdateBrateTbl(adapter, pnetwork->SupportedRates);
1416         rtw_hal_set_hwreg(adapter, HW_VAR_BASIC_RATE, pnetwork->SupportedRates);
1417
1418         /* update capability after cur_wireless_mode updated */
1419         update_capinfo(adapter, rtw_get_capability(pnetwork));
1420
1421         /* update bc/mc sta_info */
1422         update_bmc_sta(adapter);
1423
1424         /* update AP's sta info */
1425         sta = rtw_get_stainfo(&adapter->stapriv, pnetwork->MacAddress);
1426         if (!sta) {
1427                 DBG_871X(FUNC_ADPT_FMT" !sta for macaddr="MAC_FMT"\n", FUNC_ADPT_ARG(adapter), MAC_ARG(pnetwork->MacAddress));
1428                 rtw_warn_on(1);
1429                 return;
1430         }
1431
1432         update_ap_info(adapter, sta);
1433 }
1434
1435 void start_bss_network(_adapter *padapter, struct createbss_parm *parm)
1436 {
1437 #define DUMP_ADAPTERS_STATUS 0
1438
1439         u8 val8;
1440         u16 bcn_interval;
1441         u32     acparm;
1442         struct registry_priv     *pregpriv = &padapter->registrypriv;
1443         struct mlme_priv *pmlmepriv = &(padapter->mlmepriv);
1444         struct security_priv* psecuritypriv=&(padapter->securitypriv);
1445         WLAN_BSSID_EX *pnetwork = (WLAN_BSSID_EX *)&pmlmepriv->cur_network.network; /* used as input */
1446         struct mlme_ext_priv    *pmlmeext = &(padapter->mlmeextpriv);
1447         struct mlme_ext_info    *pmlmeinfo = &(pmlmeext->mlmext_info);
1448         WLAN_BSSID_EX *pnetwork_mlmeext = &(pmlmeinfo->network);
1449         u8 req_ch, req_bw, req_offset;
1450         bool ch_setting_changed = _FALSE;
1451         u8 ch_to_set = 0, bw_to_set, offset_to_set;
1452         u8 doiqk = _FALSE;
1453
1454         if (parm->req_ch == 0) {
1455                 /* change to unspecificed ch, bw, offset, get from IE */
1456                 goto get_cbhw_from_ie;
1457         } else if (parm->req_ch > 0) {
1458                 /* change ch, bw, offset */
1459                 req_ch = parm->req_ch;
1460                 req_bw = parm->req_bw;
1461                 req_offset = parm->req_offset;
1462                 goto change_chbw;
1463         }
1464
1465         bcn_interval = (u16)pnetwork->Configuration.BeaconPeriod;
1466
1467         //check if there is wps ie,
1468         //if there is wpsie in beacon, the hostapd will update beacon twice when stating hostapd,
1469         //and at first time the security ie ( RSN/WPA IE) will not include in beacon.
1470         if(NULL == rtw_get_wps_ie(pnetwork->IEs+_FIXED_IE_LENGTH_, pnetwork->IELength-_FIXED_IE_LENGTH_, NULL, NULL))
1471         {
1472                 pmlmeext->bstart_bss = _TRUE;
1473         }
1474
1475         //todo: update wmm, ht cap
1476         //pmlmeinfo->WMM_enable;
1477         //pmlmeinfo->HT_enable;
1478         if(pmlmepriv->qospriv.qos_option)
1479                 pmlmeinfo->WMM_enable = _TRUE;
1480 #ifdef CONFIG_80211N_HT
1481         if(pmlmepriv->htpriv.ht_option)
1482         {
1483                 pmlmeinfo->WMM_enable = _TRUE;
1484                 pmlmeinfo->HT_enable = _TRUE;
1485                 //pmlmeinfo->HT_info_enable = _TRUE;
1486                 //pmlmeinfo->HT_caps_enable = _TRUE;
1487
1488                 update_hw_ht_param(padapter);
1489         }
1490 #endif //#CONFIG_80211N_HT
1491
1492
1493         if(pmlmepriv->cur_network.join_res != _TRUE) //setting only at  first time
1494         {
1495                 //WEP Key will be set before this function, do not clear CAM.
1496                 if ((psecuritypriv->dot11PrivacyAlgrthm != _WEP40_) && (psecuritypriv->dot11PrivacyAlgrthm != _WEP104_))
1497                         flush_all_cam_entry(padapter);  //clear CAM
1498         }
1499
1500         //set MSR to AP_Mode
1501         Set_MSR(padapter, _HW_STATE_AP_);
1502
1503         //Set BSSID REG
1504         rtw_hal_set_hwreg(padapter, HW_VAR_BSSID, pnetwork->MacAddress);
1505
1506         //Set EDCA param reg
1507 #ifdef CONFIG_CONCURRENT_MODE
1508         acparm = 0x005ea42b;
1509 #else
1510         acparm = 0x002F3217; // VO
1511 #endif
1512         rtw_hal_set_hwreg(padapter, HW_VAR_AC_PARAM_VO, (u8 *)(&acparm));
1513         acparm = 0x005E4317; // VI
1514         rtw_hal_set_hwreg(padapter, HW_VAR_AC_PARAM_VI, (u8 *)(&acparm));
1515         //acparm = 0x00105320; // BE
1516         acparm = 0x005ea42b;
1517         rtw_hal_set_hwreg(padapter, HW_VAR_AC_PARAM_BE, (u8 *)(&acparm));
1518         acparm = 0x0000A444; // BK
1519         rtw_hal_set_hwreg(padapter, HW_VAR_AC_PARAM_BK, (u8 *)(&acparm));
1520
1521         //Set Security
1522         val8 = (psecuritypriv->dot11AuthAlgrthm == dot11AuthAlgrthm_8021X)? 0xcc: 0xcf;
1523         rtw_hal_set_hwreg(padapter, HW_VAR_SEC_CFG, (u8 *)(&val8));
1524
1525         //Beacon Control related register
1526         rtw_hal_set_hwreg(padapter, HW_VAR_BEACON_INTERVAL, (u8 *)(&bcn_interval));
1527
1528 #if 0
1529         if(pmlmepriv->cur_network.join_res != _TRUE) //setting only at  first time
1530         {
1531                 //u32 initialgain;
1532
1533                 //initialgain = 0x1e;
1534
1535
1536                 //disable dynamic functions, such as high power, DIG
1537                 /*rtw_phydm_ability_backup(padapter);*/
1538                 /*rtw_phydm_func_disable_all(padapter);*/
1539
1540                 //turn on all dynamic functions
1541                 /* Switch_DM_Func(padapter, DYNAMIC_ALL_FUNC_ENABLE, _TRUE);*/
1542
1543                 /*rtw_hal_set_odm_var(padapter, HAL_ODM_INITIAL_GAIN, &initialgain, _FALSE);*/
1544
1545         }
1546 #endif
1547
1548 get_cbhw_from_ie:
1549         rtw_ies_get_chbw(pnetwork->IEs + sizeof(NDIS_802_11_FIXED_IEs)
1550                 , pnetwork->IELength - sizeof(NDIS_802_11_FIXED_IEs)
1551                 , &req_ch, &req_bw, &req_offset);
1552
1553 change_chbw:
1554         rtw_warn_on(req_ch == 0);
1555
1556         ch_setting_changed = rtw_ap_chbw_decision(padapter, req_ch, req_bw, req_offset
1557                 , &ch_to_set, &bw_to_set, &offset_to_set);
1558
1559         //let pnetwork_mlmeext == pnetwork_mlme.
1560         _rtw_memcpy(pnetwork_mlmeext, pnetwork, pnetwork->Length);
1561
1562         rtw_start_bss_hdl_after_chbw_decided(padapter);
1563
1564         #if defined(CONFIG_DFS_MASTER)
1565         rtw_dfs_master_status_apply(padapter, MLME_AP_STARTED);
1566         #endif
1567
1568         doiqk = _TRUE;
1569         rtw_hal_set_hwreg(padapter , HW_VAR_DO_IQK , &doiqk);
1570
1571         if (ch_to_set != 0)
1572                 set_channel_bwmode(padapter, ch_to_set, offset_to_set, bw_to_set);
1573
1574         doiqk = _FALSE;
1575         rtw_hal_set_hwreg(padapter , HW_VAR_DO_IQK , &doiqk);
1576         if (DUMP_ADAPTERS_STATUS) {
1577                 DBG_871X(FUNC_ADPT_FMT" done\n", FUNC_ADPT_ARG(padapter));
1578                 dump_adapters_status(RTW_DBGDUMP , adapter_to_dvobj(padapter));
1579         }
1580
1581         if (_TRUE == pmlmeext->bstart_bss
1582                 && !check_fwstate(pmlmepriv, WIFI_SITE_MONITOR)
1583                 && !check_fwstate(pmlmepriv, WIFI_OP_CH_SWITCHING)
1584                 #ifdef CONFIG_CONCURRENT_MODE
1585                 && !check_buddy_fwstate(padapter, WIFI_SITE_MONITOR)
1586                 #endif
1587         ) {
1588
1589                if ((pmlmepriv->olbc == _TRUE) || (pmlmepriv->olbc_ht == _TRUE)) {
1590
1591                         /* AP is not starting a 40 MHz BSS in presence of an 802.11g BSS. */
1592
1593                         pmlmepriv->ht_op_mode &= (~HT_INFO_OPERATION_MODE_OP_MODE_MASK);
1594                         pmlmepriv->ht_op_mode |= OP_MODE_MAY_BE_LEGACY_STAS;
1595                         update_beacon(padapter, _HT_ADD_INFO_IE_, NULL, _FALSE);
1596                 }
1597
1598                 update_beacon(padapter, _TIM_IE_, NULL, _TRUE);
1599
1600                 #if !defined(CONFIG_INTERRUPT_BASED_TXBCN)
1601                 #if defined(CONFIG_USB_HCI) || defined(CONFIG_SDIO_HCI) || defined(CONFIG_GSPI_HCI)
1602                 /* other case will  tx beacon when bcn interrupt coming in. */
1603                 if (send_beacon(padapter) == _FAIL)
1604                         DBG_871X("issue_beacon, fail!\n");
1605                 #endif
1606                 #endif /* !defined(CONFIG_INTERRUPT_BASED_TXBCN) */
1607         }
1608
1609         /*Set EDCA param reg after update cur_wireless_mode & update_capinfo*/
1610         if (pregpriv->wifi_spec == 1)
1611                 rtw_set_hw_wmm_param(padapter);
1612
1613         /*pmlmeext->bstart_bss = _TRUE;*/
1614 }
1615
1616 int rtw_check_beacon_data(_adapter *padapter, u8 *pbuf,  int len)
1617 {
1618         int ret=_SUCCESS;
1619         u8 *p;
1620         u8 *pHT_caps_ie=NULL;
1621         u8 *pHT_info_ie=NULL;
1622         u16 cap, ht_cap=_FALSE;
1623         uint ie_len = 0;
1624         int group_cipher, pairwise_cipher;
1625         u8      channel, network_type, supportRate[NDIS_802_11_LENGTH_RATES_EX];
1626         int supportRateNum = 0;
1627         u8 OUI1[] = {0x00, 0x50, 0xf2,0x01};
1628         u8 wps_oui[4]={0x0,0x50,0xf2,0x04};
1629         u8 WMM_PARA_IE[] = {0x00, 0x50, 0xf2, 0x02, 0x01, 0x01};
1630         struct registry_priv *pregistrypriv = &padapter->registrypriv;
1631         struct security_priv *psecuritypriv = &padapter->securitypriv;
1632         struct mlme_priv *pmlmepriv = &(padapter->mlmepriv);
1633         WLAN_BSSID_EX *pbss_network = (WLAN_BSSID_EX *)&pmlmepriv->cur_network.network;
1634         struct sta_priv *pstapriv = &padapter->stapriv;
1635         u8 *ie = pbss_network->IEs;
1636         u8 vht_cap=_FALSE;
1637         struct mlme_ext_priv    *pmlmeext = &(padapter->mlmeextpriv);
1638         struct mlme_ext_info    *pmlmeinfo = &(pmlmeext->mlmext_info);
1639         u8 rf_num = 0;
1640
1641         /* SSID */
1642         /* Supported rates */
1643         /* DS Params */
1644         /* WLAN_EID_COUNTRY */
1645         /* ERP Information element */
1646         /* Extended supported rates */
1647         /* WPA/WPA2 */
1648         /* Wi-Fi Wireless Multimedia Extensions */
1649         /* ht_capab, ht_oper */
1650         /* WPS IE */
1651
1652         DBG_871X("%s, len=%d\n", __FUNCTION__, len);
1653
1654         if(check_fwstate(pmlmepriv, WIFI_AP_STATE) != _TRUE)
1655                 return _FAIL;
1656
1657
1658         if(len>MAX_IE_SZ)
1659                 return _FAIL;
1660
1661         pbss_network->IELength = len;
1662
1663         _rtw_memset(ie, 0, MAX_IE_SZ);
1664
1665         _rtw_memcpy(ie, pbuf, pbss_network->IELength);
1666
1667
1668         if(pbss_network->InfrastructureMode!=Ndis802_11APMode)
1669                 return _FAIL;
1670
1671
1672         rtw_ap_check_scan(padapter);
1673
1674
1675         pbss_network->Rssi = 0;
1676
1677         _rtw_memcpy(pbss_network->MacAddress, adapter_mac_addr(padapter), ETH_ALEN);
1678
1679         //beacon interval
1680         p = rtw_get_beacon_interval_from_ie(ie);//ie + 8;       // 8: TimeStamp, 2: Beacon Interval 2:Capability
1681         //pbss_network->Configuration.BeaconPeriod = le16_to_cpu(*(unsigned short*)p);
1682         pbss_network->Configuration.BeaconPeriod = RTW_GET_LE16(p);
1683
1684         //capability
1685         //cap = *(unsigned short *)rtw_get_capability_from_ie(ie);
1686         //cap = le16_to_cpu(cap);
1687         cap = RTW_GET_LE16(ie);
1688
1689         //SSID
1690         p = rtw_get_ie(ie + _BEACON_IE_OFFSET_, _SSID_IE_, &ie_len, (pbss_network->IELength -_BEACON_IE_OFFSET_));
1691         if(p && ie_len>0)
1692         {
1693                 _rtw_memset(&pbss_network->Ssid, 0, sizeof(NDIS_802_11_SSID));
1694                 _rtw_memcpy(pbss_network->Ssid.Ssid, (p + 2), ie_len);
1695                 pbss_network->Ssid.SsidLength = ie_len;
1696                 #ifdef CONFIG_P2P
1697                 _rtw_memcpy(padapter->wdinfo.p2p_group_ssid, pbss_network->Ssid.Ssid, pbss_network->Ssid.SsidLength);
1698                 padapter->wdinfo.p2p_group_ssid_len = pbss_network->Ssid.SsidLength;
1699                 #endif
1700         }
1701
1702         //chnnel
1703         channel = 0;
1704         pbss_network->Configuration.Length = 0;
1705         p = rtw_get_ie(ie + _BEACON_IE_OFFSET_, _DSSET_IE_, &ie_len, (pbss_network->IELength - _BEACON_IE_OFFSET_));
1706         if(p && ie_len>0)
1707                 channel = *(p + 2);
1708
1709         pbss_network->Configuration.DSConfig = channel;
1710
1711
1712         _rtw_memset(supportRate, 0, NDIS_802_11_LENGTH_RATES_EX);
1713         // get supported rates
1714         p = rtw_get_ie(ie + _BEACON_IE_OFFSET_, _SUPPORTEDRATES_IE_, &ie_len, (pbss_network->IELength - _BEACON_IE_OFFSET_));
1715         if (p !=  NULL)
1716         {
1717                 _rtw_memcpy(supportRate, p+2, ie_len);
1718                 supportRateNum = ie_len;
1719         }
1720
1721         //get ext_supported rates
1722         p = rtw_get_ie(ie + _BEACON_IE_OFFSET_, _EXT_SUPPORTEDRATES_IE_, &ie_len, pbss_network->IELength - _BEACON_IE_OFFSET_);
1723         if (p !=  NULL)
1724         {
1725                 _rtw_memcpy(supportRate+supportRateNum, p+2, ie_len);
1726                 supportRateNum += ie_len;
1727
1728         }
1729
1730         network_type = rtw_check_network_type(supportRate, supportRateNum, channel);
1731
1732         rtw_set_supported_rate(pbss_network->SupportedRates, network_type);
1733
1734
1735         //parsing ERP_IE
1736         p = rtw_get_ie(ie + _BEACON_IE_OFFSET_, _ERPINFO_IE_, &ie_len, (pbss_network->IELength - _BEACON_IE_OFFSET_));
1737         if(p && ie_len>0)
1738         {
1739                 ERP_IE_handler(padapter, (PNDIS_802_11_VARIABLE_IEs)p);
1740         }
1741
1742         //update privacy/security
1743         if (cap & BIT(4))
1744                 pbss_network->Privacy = 1;
1745         else
1746                 pbss_network->Privacy = 0;
1747
1748         psecuritypriv->wpa_psk = 0;
1749
1750         //wpa2
1751         group_cipher = 0; pairwise_cipher = 0;
1752         psecuritypriv->wpa2_group_cipher = _NO_PRIVACY_;
1753         psecuritypriv->wpa2_pairwise_cipher = _NO_PRIVACY_;
1754         p = rtw_get_ie(ie + _BEACON_IE_OFFSET_, _RSN_IE_2_, &ie_len, (pbss_network->IELength - _BEACON_IE_OFFSET_));
1755         if(p && ie_len>0)
1756         {
1757                 if(rtw_parse_wpa2_ie(p, ie_len+2, &group_cipher, &pairwise_cipher, NULL) == _SUCCESS)
1758                 {
1759                         psecuritypriv->dot11AuthAlgrthm= dot11AuthAlgrthm_8021X;
1760
1761                         psecuritypriv->dot8021xalg = 1;//psk,  todo:802.1x
1762                         psecuritypriv->wpa_psk |= BIT(1);
1763
1764                         psecuritypriv->wpa2_group_cipher = group_cipher;
1765                         psecuritypriv->wpa2_pairwise_cipher = pairwise_cipher;
1766 #if 0
1767                         switch(group_cipher)
1768                         {
1769                                 case WPA_CIPHER_NONE:
1770                                 psecuritypriv->wpa2_group_cipher = _NO_PRIVACY_;
1771                                 break;
1772                                 case WPA_CIPHER_WEP40:
1773                                 psecuritypriv->wpa2_group_cipher = _WEP40_;
1774                                 break;
1775                                 case WPA_CIPHER_TKIP:
1776                                 psecuritypriv->wpa2_group_cipher = _TKIP_;
1777                                 break;
1778                                 case WPA_CIPHER_CCMP:
1779                                 psecuritypriv->wpa2_group_cipher = _AES_;
1780                                 break;
1781                                 case WPA_CIPHER_WEP104:
1782                                 psecuritypriv->wpa2_group_cipher = _WEP104_;
1783                                 break;
1784                         }
1785
1786                         switch(pairwise_cipher)
1787                         {
1788                                 case WPA_CIPHER_NONE:
1789                                 psecuritypriv->wpa2_pairwise_cipher = _NO_PRIVACY_;
1790                                 break;
1791                                 case WPA_CIPHER_WEP40:
1792                                 psecuritypriv->wpa2_pairwise_cipher = _WEP40_;
1793                                 break;
1794                                 case WPA_CIPHER_TKIP:
1795                                 psecuritypriv->wpa2_pairwise_cipher = _TKIP_;
1796                                 break;
1797                                 case WPA_CIPHER_CCMP:
1798                                 psecuritypriv->wpa2_pairwise_cipher = _AES_;
1799                                 break;
1800                                 case WPA_CIPHER_WEP104:
1801                                 psecuritypriv->wpa2_pairwise_cipher = _WEP104_;
1802                                 break;
1803                         }
1804 #endif
1805                 }
1806
1807         }
1808
1809         //wpa
1810         ie_len = 0;
1811         group_cipher = 0; pairwise_cipher = 0;
1812         psecuritypriv->wpa_group_cipher = _NO_PRIVACY_;
1813         psecuritypriv->wpa_pairwise_cipher = _NO_PRIVACY_;
1814         for (p = ie + _BEACON_IE_OFFSET_; ;p += (ie_len + 2))
1815         {
1816                 p = rtw_get_ie(p, _SSN_IE_1_, &ie_len, (pbss_network->IELength - _BEACON_IE_OFFSET_ - (ie_len + 2)));
1817                 if ((p) && (_rtw_memcmp(p+2, OUI1, 4)))
1818                 {
1819                         if(rtw_parse_wpa_ie(p, ie_len+2, &group_cipher, &pairwise_cipher, NULL) == _SUCCESS)
1820                         {
1821                                 psecuritypriv->dot11AuthAlgrthm= dot11AuthAlgrthm_8021X;
1822
1823                                 psecuritypriv->dot8021xalg = 1;//psk,  todo:802.1x
1824
1825                                 psecuritypriv->wpa_psk |= BIT(0);
1826
1827                                 psecuritypriv->wpa_group_cipher = group_cipher;
1828                                 psecuritypriv->wpa_pairwise_cipher = pairwise_cipher;
1829
1830 #if 0
1831                                 switch(group_cipher)
1832                                 {
1833                                         case WPA_CIPHER_NONE:
1834                                         psecuritypriv->wpa_group_cipher = _NO_PRIVACY_;
1835                                         break;
1836                                         case WPA_CIPHER_WEP40:
1837                                         psecuritypriv->wpa_group_cipher = _WEP40_;
1838                                         break;
1839                                         case WPA_CIPHER_TKIP:
1840                                         psecuritypriv->wpa_group_cipher = _TKIP_;
1841                                         break;
1842                                         case WPA_CIPHER_CCMP:
1843                                         psecuritypriv->wpa_group_cipher = _AES_;
1844                                         break;
1845                                         case WPA_CIPHER_WEP104:
1846                                         psecuritypriv->wpa_group_cipher = _WEP104_;
1847                                         break;
1848                                 }
1849
1850                                 switch(pairwise_cipher)
1851                                 {
1852                                         case WPA_CIPHER_NONE:
1853                                         psecuritypriv->wpa_pairwise_cipher = _NO_PRIVACY_;
1854                                         break;
1855                                         case WPA_CIPHER_WEP40:
1856                                         psecuritypriv->wpa_pairwise_cipher = _WEP40_;
1857                                         break;
1858                                         case WPA_CIPHER_TKIP:
1859                                         psecuritypriv->wpa_pairwise_cipher = _TKIP_;
1860                                         break;
1861                                         case WPA_CIPHER_CCMP:
1862                                         psecuritypriv->wpa_pairwise_cipher = _AES_;
1863                                         break;
1864                                         case WPA_CIPHER_WEP104:
1865                                         psecuritypriv->wpa_pairwise_cipher = _WEP104_;
1866                                         break;
1867                                 }
1868 #endif
1869                         }
1870
1871                         break;
1872
1873                 }
1874
1875                 if ((p == NULL) || (ie_len == 0))
1876                 {
1877                                 break;
1878                 }
1879
1880         }
1881
1882         //wmm
1883         ie_len = 0;
1884         pmlmepriv->qospriv.qos_option = 0;
1885         if(pregistrypriv->wmm_enable)
1886         {
1887                 for (p = ie + _BEACON_IE_OFFSET_; ;p += (ie_len + 2))
1888                 {
1889                         p = rtw_get_ie(p, _VENDOR_SPECIFIC_IE_, &ie_len, (pbss_network->IELength - _BEACON_IE_OFFSET_ - (ie_len + 2)));
1890                         if((p) && _rtw_memcmp(p+2, WMM_PARA_IE, 6))
1891                         {
1892                                 pmlmepriv->qospriv.qos_option = 1;
1893
1894                                 *(p+8) |= BIT(7);//QoS Info, support U-APSD
1895
1896                                 /* disable all ACM bits since the WMM admission control is not supported */
1897                                 *(p + 10) &= ~BIT(4); /* BE */
1898                                 *(p + 14) &= ~BIT(4); /* BK */
1899                                 *(p + 18) &= ~BIT(4); /* VI */
1900                                 *(p + 22) &= ~BIT(4); /* VO */
1901
1902                                 break;
1903                         }
1904
1905                         if ((p == NULL) || (ie_len == 0))
1906                         {
1907                                 break;
1908                         }
1909                 }
1910         }
1911 #ifdef CONFIG_80211N_HT
1912         //parsing HT_CAP_IE
1913         p = rtw_get_ie(ie + _BEACON_IE_OFFSET_, _HT_CAPABILITY_IE_, &ie_len, (pbss_network->IELength - _BEACON_IE_OFFSET_));
1914         if(p && ie_len>0)
1915         {
1916                 u8 rf_type=0;
1917                 HT_CAP_AMPDU_FACTOR max_rx_ampdu_factor=MAX_AMPDU_FACTOR_64K;
1918                 struct rtw_ieee80211_ht_cap *pht_cap = (struct rtw_ieee80211_ht_cap *)(p+2);
1919
1920                 if (0) {
1921                         DBG_871X(FUNC_ADPT_FMT" HT_CAP_IE from upper layer:\n", FUNC_ADPT_ARG(padapter));
1922                         dump_ht_cap_ie_content(RTW_DBGDUMP, p+2, ie_len);
1923                 }
1924
1925                 pHT_caps_ie=p;
1926
1927                 ht_cap = _TRUE;
1928                 network_type |= WIRELESS_11_24N;
1929
1930                 rtw_ht_use_default_setting(padapter);
1931
1932                 /* Update HT Capabilities Info field */
1933                 if (pmlmepriv->htpriv.sgi_20m == _FALSE)
1934                         pht_cap->cap_info &= ~(IEEE80211_HT_CAP_SGI_20);
1935
1936                 if (pmlmepriv->htpriv.sgi_40m == _FALSE)
1937                         pht_cap->cap_info &= ~(IEEE80211_HT_CAP_SGI_40);
1938
1939                 if (!TEST_FLAG(pmlmepriv->htpriv.ldpc_cap, LDPC_HT_ENABLE_RX))
1940                 {
1941                         pht_cap->cap_info &= ~(IEEE80211_HT_CAP_LDPC_CODING);
1942                 }
1943
1944                 if (!TEST_FLAG(pmlmepriv->htpriv.stbc_cap, STBC_HT_ENABLE_TX))
1945                 {
1946                         pht_cap->cap_info &= ~(IEEE80211_HT_CAP_TX_STBC);
1947                 }
1948
1949                 if (!TEST_FLAG(pmlmepriv->htpriv.stbc_cap, STBC_HT_ENABLE_RX))
1950                 {
1951                         pht_cap->cap_info &= ~(IEEE80211_HT_CAP_RX_STBC_3R);
1952                 }
1953
1954                 /* Update A-MPDU Parameters field */
1955                 pht_cap->ampdu_params_info &= ~(IEEE80211_HT_CAP_AMPDU_FACTOR|IEEE80211_HT_CAP_AMPDU_DENSITY);
1956
1957                 if((psecuritypriv->wpa_pairwise_cipher & WPA_CIPHER_CCMP) ||
1958                         (psecuritypriv->wpa2_pairwise_cipher & WPA_CIPHER_CCMP))
1959                 {
1960                         pht_cap->ampdu_params_info |= (IEEE80211_HT_CAP_AMPDU_DENSITY&(0x07<<2));
1961                 }
1962                 else
1963                 {
1964                         pht_cap->ampdu_params_info |= (IEEE80211_HT_CAP_AMPDU_DENSITY&0x00);
1965                 }
1966
1967                 rtw_hal_get_def_var(padapter, HW_VAR_MAX_RX_AMPDU_FACTOR, &max_rx_ampdu_factor);
1968                 pht_cap->ampdu_params_info |= (IEEE80211_HT_CAP_AMPDU_FACTOR & max_rx_ampdu_factor); //set  Max Rx AMPDU size  to 64K
1969
1970                 _rtw_memcpy(&(pmlmeinfo->HT_caps), pht_cap, sizeof(struct HT_caps_element));
1971
1972                 /* Update Supported MCS Set field */
1973                 {
1974                         int i;
1975
1976                         rtw_hal_get_hwreg(padapter, HW_VAR_RF_TYPE, (u8 *)(&rf_type));
1977
1978                         /* RX MCS Bitmask */
1979                         switch(rf_type)
1980                         {
1981                                 case RF_1T1R:
1982                                         set_mcs_rate_by_mask(HT_CAP_ELE_RX_MCS_MAP(pht_cap), MCS_RATE_1R);
1983                                         break;
1984                                 default:
1985                                         DBG_871X("[warning] rf_type %d is not expected\n", rf_type);
1986                         }
1987                         for (i = 0; i < 10; i++)
1988                                 *(HT_CAP_ELE_RX_MCS_MAP(pht_cap)+i) &= padapter->mlmeextpriv.default_supported_mcs_set[i];
1989                 }
1990
1991
1992                 _rtw_memcpy(&pmlmepriv->htpriv.ht_cap, p+2, ie_len);
1993
1994                 if (0) {
1995                         DBG_871X(FUNC_ADPT_FMT" HT_CAP_IE driver masked:\n", FUNC_ADPT_ARG(padapter));
1996                         dump_ht_cap_ie_content(RTW_DBGDUMP, p+2, ie_len);
1997                 }
1998         }
1999
2000         //parsing HT_INFO_IE
2001         p = rtw_get_ie(ie + _BEACON_IE_OFFSET_, _HT_ADD_INFO_IE_, &ie_len, (pbss_network->IELength - _BEACON_IE_OFFSET_));
2002         if(p && ie_len>0)
2003         {
2004                 pHT_info_ie=p;
2005         }
2006 #endif //CONFIG_80211N_HT
2007         switch(network_type)
2008         {
2009                 case WIRELESS_11B:
2010                         pbss_network->NetworkTypeInUse = Ndis802_11DS;
2011                         break;
2012                 case WIRELESS_11G:
2013                 case WIRELESS_11BG:
2014              case WIRELESS_11G_24N:
2015                 case WIRELESS_11BG_24N:
2016                         pbss_network->NetworkTypeInUse = Ndis802_11OFDM24;
2017                         break;
2018                 case WIRELESS_11A:
2019                         pbss_network->NetworkTypeInUse = Ndis802_11OFDM5;
2020                         break;
2021                 default :
2022                         pbss_network->NetworkTypeInUse = Ndis802_11OFDM24;
2023                         break;
2024         }
2025
2026         pmlmepriv->cur_network.network_type = network_type;
2027
2028 #ifdef CONFIG_80211N_HT
2029         pmlmepriv->htpriv.ht_option = _FALSE;
2030
2031         if( (psecuritypriv->wpa2_pairwise_cipher&WPA_CIPHER_TKIP) ||
2032                       (psecuritypriv->wpa_pairwise_cipher&WPA_CIPHER_TKIP))
2033         {
2034                 //todo:
2035                 //ht_cap = _FALSE;
2036         }
2037
2038         //ht_cap
2039         if(pregistrypriv->ht_enable && ht_cap==_TRUE)
2040         {
2041                 pmlmepriv->htpriv.ht_option = _TRUE;
2042                 pmlmepriv->qospriv.qos_option = 1;
2043
2044                 if(pregistrypriv->ampdu_enable==1)
2045                 {
2046                         pmlmepriv->htpriv.ampdu_enable = _TRUE;
2047                 }
2048
2049                 HT_caps_handler(padapter, (PNDIS_802_11_VARIABLE_IEs)pHT_caps_ie);
2050
2051                 HT_info_handler(padapter, (PNDIS_802_11_VARIABLE_IEs)pHT_info_ie);
2052         }
2053 #endif
2054
2055
2056         pbss_network->Length = get_WLAN_BSSID_EX_sz((WLAN_BSSID_EX  *)pbss_network);
2057
2058         rtw_ies_get_chbw(pbss_network->IEs + _BEACON_IE_OFFSET_, pbss_network->IELength - _BEACON_IE_OFFSET_
2059                 , &pmlmepriv->ori_ch, &pmlmepriv->ori_bw, &pmlmepriv->ori_offset);
2060         rtw_warn_on(pmlmepriv->ori_ch == 0);
2061
2062 {
2063         /* alloc sta_info for ap itself */
2064
2065         struct sta_info *sta;
2066
2067         sta = rtw_get_stainfo(&padapter->stapriv, pbss_network->MacAddress);
2068         if (!sta) {
2069                 sta = rtw_alloc_stainfo(&padapter->stapriv, pbss_network->MacAddress);
2070                 if (sta == NULL)
2071                         return _FAIL;
2072         }
2073 }
2074
2075         rtw_startbss_cmd(padapter, RTW_CMDF_WAIT_ACK);
2076
2077         rtw_indicate_connect( padapter);
2078
2079         pmlmepriv->cur_network.join_res = _TRUE;//for check if already set beacon
2080
2081         //update bc/mc sta_info
2082         //update_bmc_sta(padapter);
2083
2084         return ret;
2085
2086 }
2087
2088 void rtw_set_macaddr_acl(_adapter *padapter, int mode)
2089 {
2090         struct sta_priv *pstapriv = &padapter->stapriv;
2091         struct wlan_acl_pool *pacl_list = &pstapriv->acl_list;
2092
2093         DBG_871X("%s, mode=%d\n", __func__, mode);
2094
2095         pacl_list->mode = mode;
2096 }
2097
2098 int rtw_acl_add_sta(_adapter *padapter, u8 *addr)
2099 {
2100         _irqL irqL;
2101         _list   *plist, *phead;
2102         u8 added = _FALSE;
2103         int i, ret=0;
2104         struct rtw_wlan_acl_node *paclnode;
2105         struct sta_priv *pstapriv = &padapter->stapriv;
2106         struct wlan_acl_pool *pacl_list = &pstapriv->acl_list;
2107         _queue  *pacl_node_q =&pacl_list->acl_node_q;
2108
2109         DBG_871X("%s(acl_num=%d)=" MAC_FMT "\n", __func__, pacl_list->num, MAC_ARG(addr));
2110
2111         if((NUM_ACL-1) < pacl_list->num)
2112                 return (-1);
2113
2114
2115         _enter_critical_bh(&(pacl_node_q->lock), &irqL);
2116
2117         phead = get_list_head(pacl_node_q);
2118         plist = get_next(phead);
2119
2120         while ((rtw_end_of_queue_search(phead, plist)) == _FALSE)
2121         {
2122                 paclnode = LIST_CONTAINOR(plist, struct rtw_wlan_acl_node, list);
2123                 plist = get_next(plist);
2124
2125                 if(_rtw_memcmp(paclnode->addr, addr, ETH_ALEN))
2126                 {
2127                         if(paclnode->valid == _TRUE)
2128                         {
2129                                 added = _TRUE;
2130                                 DBG_871X("%s, sta has been added\n", __func__);
2131                                 break;
2132                         }
2133                 }
2134         }
2135
2136         _exit_critical_bh(&(pacl_node_q->lock), &irqL);
2137
2138
2139         if(added == _TRUE)
2140                 return ret;
2141
2142
2143         _enter_critical_bh(&(pacl_node_q->lock), &irqL);
2144
2145         for(i=0; i< NUM_ACL; i++)
2146         {
2147                 paclnode = &pacl_list->aclnode[i];
2148
2149                 if(paclnode->valid == _FALSE)
2150                 {
2151                         _rtw_init_listhead(&paclnode->list);
2152
2153                         _rtw_memcpy(paclnode->addr, addr, ETH_ALEN);
2154
2155                         paclnode->valid = _TRUE;
2156
2157                         rtw_list_insert_tail(&paclnode->list, get_list_head(pacl_node_q));
2158
2159                         pacl_list->num++;
2160
2161                         break;
2162                 }
2163         }
2164
2165         DBG_871X("%s, acl_num=%d\n", __func__, pacl_list->num);
2166
2167         _exit_critical_bh(&(pacl_node_q->lock), &irqL);
2168
2169         return ret;
2170 }
2171
2172 int rtw_acl_remove_sta(_adapter *padapter, u8 *addr)
2173 {
2174         _irqL irqL;
2175         _list   *plist, *phead;
2176         int i, ret=0;
2177         struct rtw_wlan_acl_node *paclnode;
2178         struct sta_priv *pstapriv = &padapter->stapriv;
2179         struct wlan_acl_pool *pacl_list = &pstapriv->acl_list;
2180         _queue  *pacl_node_q =&pacl_list->acl_node_q;
2181         u8 baddr[ETH_ALEN] = { 0xff, 0xff, 0xff, 0xff, 0xff, 0xff };    //Baddr is used for clearing acl_list
2182
2183         DBG_871X("%s(acl_num=%d)=" MAC_FMT "\n", __func__, pacl_list->num, MAC_ARG(addr));
2184
2185         _enter_critical_bh(&(pacl_node_q->lock), &irqL);
2186
2187         phead = get_list_head(pacl_node_q);
2188         plist = get_next(phead);
2189
2190         while ((rtw_end_of_queue_search(phead, plist)) == _FALSE)
2191         {
2192                 paclnode = LIST_CONTAINOR(plist, struct rtw_wlan_acl_node, list);
2193                 plist = get_next(plist);
2194
2195                 if(_rtw_memcmp(paclnode->addr, addr, ETH_ALEN) || _rtw_memcmp(baddr, addr, ETH_ALEN))
2196                 {
2197                         if(paclnode->valid == _TRUE)
2198                         {
2199                                 paclnode->valid = _FALSE;
2200
2201                                 rtw_list_delete(&paclnode->list);
2202
2203                                 pacl_list->num--;
2204                         }
2205                 }
2206         }
2207
2208         _exit_critical_bh(&(pacl_node_q->lock), &irqL);
2209
2210         DBG_871X("%s, acl_num=%d\n", __func__, pacl_list->num);
2211
2212         return ret;
2213
2214 }
2215
2216 u8 rtw_ap_set_pairwise_key(_adapter *padapter, struct sta_info *psta)
2217 {
2218         struct cmd_obj*                 ph2c;
2219         struct set_stakey_parm  *psetstakey_para;
2220         struct cmd_priv                         *pcmdpriv=&padapter->cmdpriv;
2221         u8      res=_SUCCESS;
2222
2223         ph2c = (struct cmd_obj*)rtw_zmalloc(sizeof(struct cmd_obj));
2224         if ( ph2c == NULL){
2225                 res= _FAIL;
2226                 goto exit;
2227         }
2228
2229         psetstakey_para = (struct set_stakey_parm*)rtw_zmalloc(sizeof(struct set_stakey_parm));
2230         if(psetstakey_para==NULL){
2231                 rtw_mfree((u8 *) ph2c, sizeof(struct cmd_obj));
2232                 res=_FAIL;
2233                 goto exit;
2234         }
2235
2236         init_h2fwcmd_w_parm_no_rsp(ph2c, psetstakey_para, _SetStaKey_CMD_);
2237
2238
2239         psetstakey_para->algorithm = (u8)psta->dot118021XPrivacy;
2240
2241         _rtw_memcpy(psetstakey_para->addr, psta->hwaddr, ETH_ALEN);
2242
2243         _rtw_memcpy(psetstakey_para->key, &psta->dot118021x_UncstKey, 16);
2244
2245
2246         res = rtw_enqueue_cmd(pcmdpriv, ph2c);
2247
2248 exit:
2249
2250         return res;
2251
2252 }
2253
2254 static int rtw_ap_set_key(_adapter *padapter, u8 *key, u8 alg, int keyid, u8 set_tx)
2255 {
2256         u8 keylen;
2257         struct cmd_obj* pcmd;
2258         struct setkey_parm *psetkeyparm;
2259         struct cmd_priv *pcmdpriv=&(padapter->cmdpriv);
2260         int res=_SUCCESS;
2261
2262         //DBG_871X("%s\n", __FUNCTION__);
2263
2264         pcmd = (struct cmd_obj*)rtw_zmalloc(sizeof(struct cmd_obj));
2265         if(pcmd==NULL){
2266                 res= _FAIL;
2267                 goto exit;
2268         }
2269         psetkeyparm=(struct setkey_parm*)rtw_zmalloc(sizeof(struct setkey_parm));
2270         if(psetkeyparm==NULL){
2271                 rtw_mfree((unsigned char *)pcmd, sizeof(struct cmd_obj));
2272                 res= _FAIL;
2273                 goto exit;
2274         }
2275
2276         _rtw_memset(psetkeyparm, 0, sizeof(struct setkey_parm));
2277
2278         psetkeyparm->keyid=(u8)keyid;
2279         if (is_wep_enc(alg))
2280                 padapter->securitypriv.key_mask |= BIT(psetkeyparm->keyid);
2281
2282         psetkeyparm->algorithm = alg;
2283
2284         psetkeyparm->set_tx = set_tx;
2285
2286         switch(alg)
2287         {
2288                 case _WEP40_:
2289                         keylen = 5;
2290                         break;
2291                 case _WEP104_:
2292                         keylen = 13;
2293                         break;
2294                 case _TKIP_:
2295                 case _TKIP_WTMIC_:
2296                 case _AES_:
2297                 default:
2298                         keylen = 16;
2299         }
2300
2301         _rtw_memcpy(&(psetkeyparm->key[0]), key, keylen);
2302
2303         pcmd->cmdcode = _SetKey_CMD_;
2304         pcmd->parmbuf = (u8 *)psetkeyparm;
2305         pcmd->cmdsz =  (sizeof(struct setkey_parm));
2306         pcmd->rsp = NULL;
2307         pcmd->rspsz = 0;
2308
2309
2310         _rtw_init_listhead(&pcmd->list);
2311
2312         res = rtw_enqueue_cmd(pcmdpriv, pcmd);
2313
2314 exit:
2315
2316         return res;
2317 }
2318
2319 int rtw_ap_set_group_key(_adapter *padapter, u8 *key, u8 alg, int keyid)
2320 {
2321         DBG_871X("%s\n", __FUNCTION__);
2322
2323         return rtw_ap_set_key(padapter, key, alg, keyid, 1);
2324 }
2325
2326 int rtw_ap_set_wep_key(_adapter *padapter, u8 *key, u8 keylen, int keyid, u8 set_tx)
2327 {
2328         u8 alg;
2329
2330         switch(keylen)
2331         {
2332                 case 5:
2333                         alg =_WEP40_;
2334                         break;
2335                 case 13:
2336                         alg =_WEP104_;
2337                         break;
2338                 default:
2339                         alg =_NO_PRIVACY_;
2340         }
2341
2342         DBG_871X("%s\n", __FUNCTION__);
2343
2344         return rtw_ap_set_key(padapter, key, alg, keyid, set_tx);
2345 }
2346
2347 u8 rtw_ap_bmc_frames_hdl(_adapter *padapter)
2348 {
2349 #define HIQ_XMIT_COUNTS (6)
2350         _irqL irqL;
2351         struct sta_info *psta_bmc;
2352         _list   *xmitframe_plist, *xmitframe_phead;
2353         struct xmit_frame *pxmitframe = NULL;
2354         struct xmit_priv *pxmitpriv = &padapter->xmitpriv;
2355         struct sta_priv  *pstapriv = &padapter->stapriv;
2356         bool update_tim = _FALSE;
2357
2358
2359         if (padapter->registrypriv.wifi_spec != 1)
2360                 return H2C_SUCCESS;
2361
2362
2363         psta_bmc = rtw_get_bcmc_stainfo(padapter);
2364         if (!psta_bmc)
2365                 return H2C_SUCCESS;
2366
2367
2368         _enter_critical_bh(&pxmitpriv->lock, &irqL);
2369
2370         if ((pstapriv->tim_bitmap & BIT(0)) && (psta_bmc->sleepq_len > 0)) {
2371                 int tx_counts = 0;
2372
2373                 _update_beacon(padapter, _TIM_IE_, NULL, _FALSE, "update TIM with TIB=1");
2374
2375                 DBG_871X("sleepq_len of bmc_sta = %d\n", psta_bmc->sleepq_len);
2376
2377                 xmitframe_phead = get_list_head(&psta_bmc->sleep_q);
2378                 xmitframe_plist = get_next(xmitframe_phead);
2379
2380                 while ((rtw_end_of_queue_search(xmitframe_phead, xmitframe_plist)) == _FALSE) {
2381                         pxmitframe = LIST_CONTAINOR(xmitframe_plist, struct xmit_frame, list);
2382
2383                         xmitframe_plist = get_next(xmitframe_plist);
2384
2385                         rtw_list_delete(&pxmitframe->list);
2386
2387                         psta_bmc->sleepq_len--;
2388                         tx_counts++;
2389
2390                         if (psta_bmc->sleepq_len > 0)
2391                                 pxmitframe->attrib.mdata = 1;
2392                         else
2393                                 pxmitframe->attrib.mdata = 0;
2394
2395                         if (tx_counts == HIQ_XMIT_COUNTS)
2396                                 pxmitframe->attrib.mdata = 0;
2397
2398                         pxmitframe->attrib.triggered = 1;
2399
2400                         if (xmitframe_hiq_filter(pxmitframe) == _TRUE)
2401                                 pxmitframe->attrib.qsel = QSLT_HIGH;/*HIQ*/
2402
2403                         rtw_hal_xmitframe_enqueue(padapter, pxmitframe);
2404
2405                         if (tx_counts == HIQ_XMIT_COUNTS)
2406                                 break;
2407
2408                 }
2409
2410         } else {
2411                 if (psta_bmc->sleepq_len == 0) {
2412
2413                         /*DBG_871X("sleepq_len of bmc_sta = %d\n", psta_bmc->sleepq_len);*/
2414
2415                         if (pstapriv->tim_bitmap & BIT(0))
2416                                 update_tim = _TRUE;
2417
2418                         pstapriv->tim_bitmap &= ~BIT(0);
2419                         pstapriv->sta_dz_bitmap &= ~BIT(0);
2420
2421                         if (update_tim == _TRUE) {
2422                                 DBG_871X("clear TIB\n");
2423                                 _update_beacon(padapter, _TIM_IE_, NULL, _TRUE, "bmc sleepq and HIQ empty");
2424                         }
2425                 }
2426         }
2427
2428         _exit_critical_bh(&pxmitpriv->lock, &irqL);
2429
2430 /*
2431         //HIQ Check
2432         rtw_hal_get_hwreg(padapter, HW_VAR_CHK_HI_QUEUE_EMPTY, &empty);
2433
2434         while (_FALSE == empty && rtw_get_passing_time_ms(start) < 3000)
2435         {
2436                 rtw_msleep_os(100);
2437                 rtw_hal_get_hwreg(padapter, HW_VAR_CHK_HI_QUEUE_EMPTY, &empty);
2438         }
2439
2440
2441         printk("check if hiq empty=%d\n", empty);
2442 */
2443
2444         return H2C_SUCCESS;
2445 }
2446
2447 #ifdef CONFIG_NATIVEAP_MLME
2448
2449 static void associated_stainfo_update(_adapter *padapter, struct sta_info *psta, u32 sta_info_type)
2450 {
2451         struct mlme_priv *pmlmepriv = &(padapter->mlmepriv);
2452
2453         DBG_871X("%s: "MAC_FMT", updated_type=0x%x\n", __func__, MAC_ARG(psta->hwaddr), sta_info_type);
2454
2455         if (sta_info_type & STA_INFO_UPDATE_BW) {
2456
2457                 if ((psta->flags & WLAN_STA_HT) && !psta->ht_20mhz_set) {
2458                         if (pmlmepriv->sw_to_20mhz) {
2459                                 psta->bw_mode = CHANNEL_WIDTH_20;
2460                                 /*psta->htpriv.ch_offset = HAL_PRIME_CHNL_OFFSET_DONT_CARE;*/
2461                                 psta->htpriv.sgi_40m = _FALSE;
2462                         } else {
2463                                 /*TODO: Switch back to 40MHZ?80MHZ*/
2464                         }
2465                 }
2466         }
2467
2468 /*
2469         if (sta_info_type & STA_INFO_UPDATE_RATE) {
2470
2471         }
2472 */
2473
2474         if (sta_info_type & STA_INFO_UPDATE_PROTECTION_MODE)
2475                 VCS_update(padapter, psta);
2476
2477 /*
2478         if (sta_info_type & STA_INFO_UPDATE_CAP) {
2479
2480         }
2481
2482         if (sta_info_type & STA_INFO_UPDATE_HT_CAP) {
2483
2484         }
2485
2486         if (sta_info_type & STA_INFO_UPDATE_VHT_CAP) {
2487
2488         }
2489 */
2490
2491 }
2492
2493 static void update_bcn_ext_capab_ie(_adapter *padapter)
2494 {
2495         sint ie_len = 0;
2496         unsigned char   *pbuf;
2497         struct mlme_priv *pmlmepriv = &(padapter->mlmepriv);
2498         struct mlme_ext_priv    *pmlmeext = &(padapter->mlmeextpriv);
2499         struct mlme_ext_info    *pmlmeinfo = &(pmlmeext->mlmext_info);
2500         WLAN_BSSID_EX *pnetwork = &(pmlmeinfo->network);
2501         u8 *ie = pnetwork->IEs;
2502         u8 null_extcap_data[8] = {0};
2503
2504         pbuf = rtw_get_ie(ie + _BEACON_IE_OFFSET_, _EXT_CAP_IE_, &ie_len, (pnetwork->IELength - _BEACON_IE_OFFSET_));
2505         if (pbuf && ie_len > 0)
2506                 rtw_remove_bcn_ie(padapter, pnetwork, _EXT_CAP_IE_);
2507
2508         if ((pmlmepriv->ext_capab_ie_len > 0) &&
2509                 (_rtw_memcmp(pmlmepriv->ext_capab_ie_data, null_extcap_data, sizeof(null_extcap_data)) == _FALSE))
2510                 rtw_add_bcn_ie(padapter, pnetwork, _EXT_CAP_IE_, pmlmepriv->ext_capab_ie_data, pmlmepriv->ext_capab_ie_len);
2511
2512 }
2513
2514 static void update_bcn_fixed_ie(_adapter *padapter)
2515 {
2516         DBG_871X("%s\n", __FUNCTION__);
2517
2518 }
2519
2520 static void update_bcn_erpinfo_ie(_adapter *padapter)
2521 {
2522         struct mlme_priv *pmlmepriv = &(padapter->mlmepriv);
2523         struct mlme_ext_priv    *pmlmeext = &(padapter->mlmeextpriv);
2524         struct mlme_ext_info    *pmlmeinfo = &(pmlmeext->mlmext_info);
2525         WLAN_BSSID_EX *pnetwork = &(pmlmeinfo->network);
2526         unsigned char *p, *ie = pnetwork->IEs;
2527         u32 len = 0;
2528
2529         DBG_871X("%s, ERP_enable=%d\n", __FUNCTION__, pmlmeinfo->ERP_enable);
2530
2531         if(!pmlmeinfo->ERP_enable)
2532                 return;
2533
2534         //parsing ERP_IE
2535         p = rtw_get_ie(ie + _BEACON_IE_OFFSET_, _ERPINFO_IE_, &len, (pnetwork->IELength - _BEACON_IE_OFFSET_));
2536         if(p && len>0)
2537         {
2538                 PNDIS_802_11_VARIABLE_IEs pIE = (PNDIS_802_11_VARIABLE_IEs)p;
2539
2540                 if (pmlmepriv->num_sta_non_erp == 1)
2541                         pIE->data[0] |= RTW_ERP_INFO_NON_ERP_PRESENT|RTW_ERP_INFO_USE_PROTECTION;
2542                 else
2543                         pIE->data[0] &= ~(RTW_ERP_INFO_NON_ERP_PRESENT|RTW_ERP_INFO_USE_PROTECTION);
2544
2545                 if(pmlmepriv->num_sta_no_short_preamble > 0)
2546                         pIE->data[0] |= RTW_ERP_INFO_BARKER_PREAMBLE_MODE;
2547                 else
2548                         pIE->data[0] &= ~(RTW_ERP_INFO_BARKER_PREAMBLE_MODE);
2549
2550                 ERP_IE_handler(padapter, pIE);
2551         }
2552
2553 }
2554
2555 static void update_bcn_htcap_ie(_adapter *padapter)
2556 {
2557         DBG_871X("%s\n", __FUNCTION__);
2558
2559 }
2560
2561 static void update_bcn_htinfo_ie(_adapter *padapter)
2562 {
2563         /*
2564         u8 beacon_updated = _FALSE;
2565         u32 sta_info_update_type = STA_INFO_UPDATE_NONE;
2566         */
2567         struct mlme_priv *pmlmepriv = &(padapter->mlmepriv);
2568         struct mlme_ext_priv    *pmlmeext = &(padapter->mlmeextpriv);
2569         struct mlme_ext_info    *pmlmeinfo = &(pmlmeext->mlmext_info);
2570         WLAN_BSSID_EX *pnetwork = &(pmlmeinfo->network);
2571         unsigned char *p, *ie = pnetwork->IEs;
2572         u32 len = 0;
2573
2574         if (pmlmepriv->htpriv.ht_option == _FALSE)
2575                 return;
2576
2577         if (pmlmeinfo->HT_info_enable != 1)
2578                 return;
2579
2580
2581         DBG_871X("%s current operation mode=0x%X\n",
2582                    __FUNCTION__, pmlmepriv->ht_op_mode);
2583
2584         DBG_871X("num_sta_40mhz_intolerant(%d), 20mhz_width_req(%d), intolerant_ch_rpt(%d), olbc(%d)\n",
2585                                         pmlmepriv->num_sta_40mhz_intolerant, pmlmepriv->ht_20mhz_width_req, pmlmepriv->ht_intolerant_ch_reported, pmlmepriv->olbc);
2586
2587         /*parsing HT_INFO_IE, currently only update ht_op_mode - pht_info->infos[1] & pht_info->infos[2] for wifi logo test*/
2588         p = rtw_get_ie(ie + _BEACON_IE_OFFSET_, _HT_ADD_INFO_IE_, &len, (pnetwork->IELength - _BEACON_IE_OFFSET_));
2589         if (p && len > 0) {
2590                 struct HT_info_element *pht_info = NULL;
2591
2592                 pht_info = (struct HT_info_element *)(p + 2);
2593
2594                 /* for STA Channel Width/Secondary Channel Offset*/
2595                 if ((pmlmepriv->sw_to_20mhz == 0) && (pmlmeext->cur_channel <= 14)) {
2596                         if ((pmlmepriv->num_sta_40mhz_intolerant > 0) || (pmlmepriv->ht_20mhz_width_req == _TRUE)
2597                                 || (pmlmepriv->ht_intolerant_ch_reported == _TRUE) || (pmlmepriv->olbc == _TRUE)) {
2598                                 SET_HT_OP_ELE_2ND_CHL_OFFSET(pht_info, 0);
2599                                 SET_HT_OP_ELE_STA_CHL_WIDTH(pht_info, 0);
2600
2601                                 pmlmepriv->sw_to_20mhz = 1;
2602                                 /*
2603                                 sta_info_update_type |= STA_INFO_UPDATE_BW;
2604                                 beacon_updated = _TRUE;
2605                                 */
2606
2607                                 DBG_871X("%s:switching to 20Mhz\n", __FUNCTION__);
2608
2609                                 /*TODO : cur_bwmode/cur_ch_offset switches to 20Mhz*/
2610                         }
2611                 } else {
2612
2613                         if ((pmlmepriv->num_sta_40mhz_intolerant == 0) && (pmlmepriv->ht_20mhz_width_req == _FALSE)
2614                                 && (pmlmepriv->ht_intolerant_ch_reported == _FALSE) && (pmlmepriv->olbc == _FALSE)) {
2615
2616                                 if (pmlmeext->cur_bwmode >= CHANNEL_WIDTH_40) {
2617
2618                                         SET_HT_OP_ELE_STA_CHL_WIDTH(pht_info, 1);
2619
2620                                         SET_HT_OP_ELE_2ND_CHL_OFFSET(pht_info,
2621                                         (pmlmeext->cur_ch_offset == HAL_PRIME_CHNL_OFFSET_LOWER) ?
2622                                                 HT_INFO_HT_PARAM_SECONDARY_CHNL_ABOVE : HT_INFO_HT_PARAM_SECONDARY_CHNL_BELOW);
2623
2624                                         pmlmepriv->sw_to_20mhz = 0;
2625                                         /*
2626                                         sta_info_update_type |= STA_INFO_UPDATE_BW;
2627                                         beacon_updated = _TRUE;
2628                                         */
2629
2630                                         DBG_871X("%s:switching back to 40Mhz\n", __FUNCTION__);
2631                                 }
2632                         }
2633                 }
2634
2635                 /* to update  ht_op_mode*/
2636                 *(u16 *)(pht_info->infos + 1) = cpu_to_le16(pmlmepriv->ht_op_mode);
2637
2638         }
2639
2640         /*associated_clients_update(padapter, beacon_updated, sta_info_update_type);*/
2641
2642 }
2643
2644 static void update_bcn_rsn_ie(_adapter *padapter)
2645 {
2646         DBG_871X("%s\n", __FUNCTION__);
2647
2648 }
2649
2650 static void update_bcn_wpa_ie(_adapter *padapter)
2651 {
2652         DBG_871X("%s\n", __FUNCTION__);
2653
2654 }
2655
2656 static void update_bcn_wmm_ie(_adapter *padapter)
2657 {
2658         DBG_871X("%s\n", __FUNCTION__);
2659
2660 }
2661
2662 static void update_bcn_wps_ie(_adapter *padapter)
2663 {
2664         u8 *pwps_ie=NULL, *pwps_ie_src, *premainder_ie, *pbackup_remainder_ie=NULL;
2665         uint wps_ielen=0, wps_offset, remainder_ielen;
2666         struct mlme_priv *pmlmepriv = &(padapter->mlmepriv);
2667         struct mlme_ext_priv    *pmlmeext = &(padapter->mlmeextpriv);
2668         struct mlme_ext_info    *pmlmeinfo = &(pmlmeext->mlmext_info);
2669         WLAN_BSSID_EX *pnetwork = &(pmlmeinfo->network);
2670         unsigned char *ie = pnetwork->IEs;
2671         u32 ielen = pnetwork->IELength;
2672
2673
2674         DBG_871X("%s\n", __FUNCTION__);
2675
2676         pwps_ie = rtw_get_wps_ie(ie+_FIXED_IE_LENGTH_, ielen-_FIXED_IE_LENGTH_, NULL, &wps_ielen);
2677
2678         if(pwps_ie==NULL || wps_ielen==0)
2679                 return;
2680
2681         pwps_ie_src = pmlmepriv->wps_beacon_ie;
2682         if(pwps_ie_src == NULL)
2683                 return;
2684
2685         wps_offset = (uint)(pwps_ie-ie);
2686
2687         premainder_ie = pwps_ie + wps_ielen;
2688
2689         remainder_ielen = ielen - wps_offset - wps_ielen;
2690
2691         if(remainder_ielen>0)
2692         {
2693                 pbackup_remainder_ie = rtw_malloc(remainder_ielen);
2694                 if(pbackup_remainder_ie)
2695                         _rtw_memcpy(pbackup_remainder_ie, premainder_ie, remainder_ielen);
2696         }
2697
2698         wps_ielen = (uint)pwps_ie_src[1];//to get ie data len
2699         if((wps_offset+wps_ielen+2+remainder_ielen)<=MAX_IE_SZ)
2700         {
2701                 _rtw_memcpy(pwps_ie, pwps_ie_src, wps_ielen+2);
2702                 pwps_ie += (wps_ielen+2);
2703
2704                 if(pbackup_remainder_ie)
2705                         _rtw_memcpy(pwps_ie, pbackup_remainder_ie, remainder_ielen);
2706
2707                 //update IELength
2708                 pnetwork->IELength = wps_offset + (wps_ielen+2) + remainder_ielen;
2709         }
2710
2711         if(pbackup_remainder_ie)
2712                 rtw_mfree(pbackup_remainder_ie, remainder_ielen);
2713
2714         // deal with the case without set_tx_beacon_cmd() in update_beacon()
2715 #if defined( CONFIG_INTERRUPT_BASED_TXBCN ) || defined( CONFIG_PCI_HCI )
2716         if( (pmlmeinfo->state&0x03) == WIFI_FW_AP_STATE)
2717         {
2718                 u8 sr = 0;
2719                 rtw_get_wps_attr_content(pwps_ie_src,  wps_ielen, WPS_ATTR_SELECTED_REGISTRAR, (u8*)(&sr), NULL);
2720
2721                 if( sr ) {
2722                         set_fwstate(pmlmepriv, WIFI_UNDER_WPS);
2723                         DBG_871X("%s, set WIFI_UNDER_WPS\n", __func__);
2724                 } else {
2725                         clr_fwstate(pmlmepriv, WIFI_UNDER_WPS);
2726                         DBG_871X("%s, clr WIFI_UNDER_WPS\n", __func__);
2727                 }
2728         }
2729 #endif
2730 }
2731
2732 static void update_bcn_p2p_ie(_adapter *padapter)
2733 {
2734
2735 }
2736
2737 static void update_bcn_vendor_spec_ie(_adapter *padapter, u8*oui)
2738 {
2739         DBG_871X("%s\n", __FUNCTION__);
2740
2741         if(_rtw_memcmp(RTW_WPA_OUI, oui, 4))
2742         {
2743                 update_bcn_wpa_ie(padapter);
2744         }
2745         else if(_rtw_memcmp(WMM_OUI, oui, 4))
2746         {
2747                 update_bcn_wmm_ie(padapter);
2748         }
2749         else if(_rtw_memcmp(WPS_OUI, oui, 4))
2750         {
2751                 update_bcn_wps_ie(padapter);
2752         }
2753         else if(_rtw_memcmp(P2P_OUI, oui, 4))
2754         {
2755                 update_bcn_p2p_ie(padapter);
2756         }
2757         else
2758         {
2759                 DBG_871X("unknown OUI type!\n");
2760         }
2761
2762
2763 }
2764
2765 void _update_beacon(_adapter *padapter, u8 ie_id, u8 *oui, u8 tx, const char *tag)
2766 {
2767         _irqL irqL;
2768         struct mlme_priv *pmlmepriv;
2769         struct mlme_ext_priv    *pmlmeext;
2770         //struct mlme_ext_info  *pmlmeinfo;
2771
2772         //DBG_871X("%s\n", __FUNCTION__);
2773
2774         if(!padapter)
2775                 return;
2776
2777         pmlmepriv = &(padapter->mlmepriv);
2778         pmlmeext = &(padapter->mlmeextpriv);
2779         //pmlmeinfo = &(pmlmeext->mlmext_info);
2780
2781         if(_FALSE == pmlmeext->bstart_bss)
2782                 return;
2783
2784         _enter_critical_bh(&pmlmepriv->bcn_update_lock, &irqL);
2785
2786         switch(ie_id)
2787         {
2788                 case 0xFF:
2789
2790                         update_bcn_fixed_ie(padapter);//8: TimeStamp, 2: Beacon Interval 2:Capability
2791
2792                         break;
2793
2794                 case _TIM_IE_:
2795
2796                         update_BCNTIM(padapter);
2797
2798                         break;
2799
2800                 case _ERPINFO_IE_:
2801
2802                         update_bcn_erpinfo_ie(padapter);
2803
2804                         break;
2805
2806                 case _HT_CAPABILITY_IE_:
2807
2808                         update_bcn_htcap_ie(padapter);
2809
2810                         break;
2811
2812                 case _RSN_IE_2_:
2813
2814                         update_bcn_rsn_ie(padapter);
2815
2816                         break;
2817
2818                 case _HT_ADD_INFO_IE_:
2819
2820                         update_bcn_htinfo_ie(padapter);
2821
2822                         break;
2823
2824                 case _EXT_CAP_IE_:
2825
2826                         update_bcn_ext_capab_ie(padapter);
2827
2828                         break;
2829
2830                 case _VENDOR_SPECIFIC_IE_:
2831
2832                         update_bcn_vendor_spec_ie(padapter, oui);
2833
2834                         break;
2835
2836                 default:
2837                         break;
2838         }
2839
2840         pmlmepriv->update_bcn = _TRUE;
2841
2842         _exit_critical_bh(&pmlmepriv->bcn_update_lock, &irqL);
2843
2844 #ifndef CONFIG_INTERRUPT_BASED_TXBCN
2845 #if defined(CONFIG_USB_HCI) || defined(CONFIG_SDIO_HCI) || defined(CONFIG_GSPI_HCI)
2846         if(tx)
2847         {
2848                 //send_beacon(padapter);//send_beacon must execute on TSR level
2849                 if (0)
2850                         DBG_871X(FUNC_ADPT_FMT" ie_id:%u - %s\n", FUNC_ADPT_ARG(padapter), ie_id, tag);
2851                 set_tx_beacon_cmd(padapter);
2852         }
2853 #else
2854         {
2855                 //PCI will issue beacon when BCN interrupt occurs.
2856         }
2857 #endif
2858 #endif //!CONFIG_INTERRUPT_BASED_TXBCN
2859
2860 }
2861
2862 #ifdef CONFIG_80211N_HT
2863
2864 void rtw_process_public_act_bsscoex(_adapter *padapter, u8 *pframe, uint frame_len)
2865 {
2866         struct sta_info *psta;
2867         struct sta_priv *pstapriv = &padapter->stapriv;
2868         u8 beacon_updated = _FALSE;
2869         struct mlme_priv *pmlmepriv = &(padapter->mlmepriv);
2870         u8 *frame_body = pframe + sizeof(struct rtw_ieee80211_hdr_3addr);
2871         uint frame_body_len = frame_len - sizeof(struct rtw_ieee80211_hdr_3addr);
2872         u8 category, action;
2873
2874         psta = rtw_get_stainfo(pstapriv, GetAddr2Ptr(pframe));
2875         if (psta == NULL)
2876                 return;
2877
2878
2879         category = frame_body[0];
2880         action = frame_body[1];
2881
2882         if (frame_body_len > 0) {
2883                 if ((frame_body[2] == EID_BSSCoexistence) && (frame_body[3] > 0)) {
2884                         u8 ie_data = frame_body[4];
2885
2886                         if (ie_data & RTW_WLAN_20_40_BSS_COEX_40MHZ_INTOL) {
2887                                 if (psta->ht_40mhz_intolerant == 0) {
2888                                         psta->ht_40mhz_intolerant = 1;
2889                                         pmlmepriv->num_sta_40mhz_intolerant++;
2890                                         beacon_updated = _TRUE;
2891                                 }
2892                         } else if (ie_data & RTW_WLAN_20_40_BSS_COEX_20MHZ_WIDTH_REQ)   {
2893                                 if (pmlmepriv->ht_20mhz_width_req == _FALSE) {
2894                                         pmlmepriv->ht_20mhz_width_req = _TRUE;
2895                                         beacon_updated = _TRUE;
2896                                 }
2897                         } else
2898                                 beacon_updated = _FALSE;
2899                 }
2900         }
2901
2902         if (frame_body_len > 8) {
2903                 /* if EID_BSSIntolerantChlReport ie exists */
2904                 if ((frame_body[5] == EID_BSSIntolerantChlReport) && (frame_body[6] > 0)) {
2905                         /*todo:*/
2906                         if (pmlmepriv->ht_intolerant_ch_reported == _FALSE) {
2907                                 pmlmepriv->ht_intolerant_ch_reported = _TRUE;
2908                                 beacon_updated = _TRUE;
2909                         }
2910                 }
2911         }
2912
2913         if (beacon_updated) {
2914
2915                 update_beacon(padapter, _HT_ADD_INFO_IE_, NULL, _TRUE);
2916
2917                 associated_stainfo_update(padapter, psta, STA_INFO_UPDATE_BW);
2918         }
2919
2920
2921
2922 }
2923
2924 void rtw_process_ht_action_smps(_adapter *padapter, u8 *ta, u8 ctrl_field)
2925 {
2926         u8 e_field, m_field;
2927         struct sta_info *psta;
2928         struct sta_priv *pstapriv = &padapter->stapriv;
2929
2930         psta = rtw_get_stainfo(pstapriv, ta);
2931         if (psta == NULL)
2932                 return;
2933
2934         e_field = (ctrl_field & BIT(0)) ? 1 : 0;
2935         m_field = (ctrl_field & BIT(1)) ? 1 : 0;
2936
2937         if (e_field) {
2938
2939                 /* enable */
2940                 /* 0:static SMPS, 1:dynamic SMPS, 3:SMPS disabled, 2:reserved*/
2941
2942                 if (m_field) /*mode*/
2943                         psta->htpriv.smps_cap = 1;
2944                 else
2945                         psta->htpriv.smps_cap = 0;
2946         } else {
2947                 /*disable*/
2948                 psta->htpriv.smps_cap = 3;
2949         }
2950
2951         rtw_dm_ra_mask_wk_cmd(padapter, (u8 *)psta);
2952
2953 }
2954
2955 /*
2956 op_mode
2957 Set to 0 (HT pure) under the followign conditions
2958         - all STAs in the BSS are 20/40 MHz HT in 20/40 MHz BSS or
2959         - all STAs in the BSS are 20 MHz HT in 20 MHz BSS
2960 Set to 1 (HT non-member protection) if there may be non-HT STAs
2961         in both the primary and the secondary channel
2962 Set to 2 if only HT STAs are associated in BSS,
2963         however and at least one 20 MHz HT STA is associated
2964 Set to 3 (HT mixed mode) when one or more non-HT STAs are associated
2965         (currently non-GF HT station is considered as non-HT STA also)
2966 */
2967 static int rtw_ht_operation_update(_adapter *padapter)
2968 {
2969         u16 cur_op_mode, new_op_mode;
2970         int op_mode_changes = 0;
2971         struct mlme_priv *pmlmepriv = &(padapter->mlmepriv);
2972         struct ht_priv  *phtpriv_ap = &pmlmepriv->htpriv;
2973
2974         if (pmlmepriv->htpriv.ht_option == _FALSE)
2975                 return 0;
2976
2977         /*if (!iface->conf->ieee80211n || iface->conf->ht_op_mode_fixed)
2978                 return 0;*/
2979
2980         DBG_871X("%s current operation mode=0x%X\n",
2981                    __FUNCTION__, pmlmepriv->ht_op_mode);
2982
2983         if (!(pmlmepriv->ht_op_mode & HT_INFO_OPERATION_MODE_NON_GF_DEVS_PRESENT)
2984             && pmlmepriv->num_sta_ht_no_gf) {
2985                 pmlmepriv->ht_op_mode |=
2986                         HT_INFO_OPERATION_MODE_NON_GF_DEVS_PRESENT;
2987                 op_mode_changes++;
2988         } else if ((pmlmepriv->ht_op_mode &
2989                     HT_INFO_OPERATION_MODE_NON_GF_DEVS_PRESENT) &&
2990                    pmlmepriv->num_sta_ht_no_gf == 0) {
2991                 pmlmepriv->ht_op_mode &=
2992                         ~HT_INFO_OPERATION_MODE_NON_GF_DEVS_PRESENT;
2993                 op_mode_changes++;
2994         }
2995
2996         if (!(pmlmepriv->ht_op_mode & HT_INFO_OPERATION_MODE_NON_HT_STA_PRESENT) &&
2997             (pmlmepriv->num_sta_no_ht || pmlmepriv->olbc_ht)) {
2998                 pmlmepriv->ht_op_mode |= HT_INFO_OPERATION_MODE_NON_HT_STA_PRESENT;
2999                 op_mode_changes++;
3000         } else if ((pmlmepriv->ht_op_mode &
3001                     HT_INFO_OPERATION_MODE_NON_HT_STA_PRESENT) &&
3002                    (pmlmepriv->num_sta_no_ht == 0 && !pmlmepriv->olbc_ht)) {
3003                 pmlmepriv->ht_op_mode &=
3004                         ~HT_INFO_OPERATION_MODE_NON_HT_STA_PRESENT;
3005                 op_mode_changes++;
3006         }
3007
3008         /* Note: currently we switch to the MIXED op mode if HT non-greenfield
3009          * station is associated. Probably it's a theoretical case, since
3010          * it looks like all known HT STAs support greenfield.
3011          */
3012         new_op_mode = 0;
3013         if (pmlmepriv->num_sta_no_ht /*||
3014             (pmlmepriv->ht_op_mode & HT_INFO_OPERATION_MODE_NON_GF_DEVS_PRESENT)*/)
3015                 new_op_mode = OP_MODE_MIXED;
3016         else if ((phtpriv_ap->ht_cap.cap_info & IEEE80211_HT_CAP_SUP_WIDTH)
3017                  && pmlmepriv->num_sta_ht_20mhz)
3018                 new_op_mode = OP_MODE_20MHZ_HT_STA_ASSOCED;
3019         else if (pmlmepriv->olbc_ht)
3020                 new_op_mode = OP_MODE_MAY_BE_LEGACY_STAS;
3021         else
3022                 new_op_mode = OP_MODE_PURE;
3023
3024         cur_op_mode = pmlmepriv->ht_op_mode & HT_INFO_OPERATION_MODE_OP_MODE_MASK;
3025         if (cur_op_mode != new_op_mode) {
3026                 pmlmepriv->ht_op_mode &= ~HT_INFO_OPERATION_MODE_OP_MODE_MASK;
3027                 pmlmepriv->ht_op_mode |= new_op_mode;
3028                 op_mode_changes++;
3029         }
3030
3031         DBG_871X("%s new operation mode=0x%X changes=%d\n",
3032                    __FUNCTION__, pmlmepriv->ht_op_mode, op_mode_changes);
3033
3034         return op_mode_changes;
3035
3036 }
3037
3038 #endif /* CONFIG_80211N_HT */
3039
3040 void associated_clients_update(_adapter *padapter, u8 updated, u32 sta_info_type)
3041 {
3042         //update associcated stations cap.
3043         if(updated == _TRUE)
3044         {
3045                 _irqL irqL;
3046                 _list   *phead, *plist;
3047                 struct sta_info *psta=NULL;
3048                 struct sta_priv *pstapriv = &padapter->stapriv;
3049
3050                 _enter_critical_bh(&pstapriv->asoc_list_lock, &irqL);
3051
3052                 phead = &pstapriv->asoc_list;
3053                 plist = get_next(phead);
3054
3055                 //check asoc_queue
3056                 while ((rtw_end_of_queue_search(phead, plist)) == _FALSE)
3057                 {
3058                         psta = LIST_CONTAINOR(plist, struct sta_info, asoc_list);
3059
3060                         plist = get_next(plist);
3061
3062                         associated_stainfo_update(padapter, psta, sta_info_type);
3063                 }
3064
3065                 _exit_critical_bh(&pstapriv->asoc_list_lock, &irqL);
3066
3067         }
3068
3069 }
3070
3071 /* called > TSR LEVEL for USB or SDIO Interface*/
3072 void bss_cap_update_on_sta_join(_adapter *padapter, struct sta_info *psta)
3073 {
3074         u8 beacon_updated = _FALSE;
3075         struct mlme_priv *pmlmepriv = &(padapter->mlmepriv);
3076         struct mlme_ext_priv *pmlmeext = &(padapter->mlmeextpriv);
3077
3078
3079 #if 0
3080         if (!(psta->capability & WLAN_CAPABILITY_SHORT_PREAMBLE) &&
3081             !psta->no_short_preamble_set) {
3082                 psta->no_short_preamble_set = 1;
3083                 pmlmepriv->num_sta_no_short_preamble++;
3084                 if ((pmlmeext->cur_wireless_mode > WIRELESS_11B) &&
3085                      (pmlmepriv->num_sta_no_short_preamble == 1))
3086                         ieee802_11_set_beacons(hapd->iface);
3087         }
3088 #endif
3089
3090
3091         if(!(psta->flags & WLAN_STA_SHORT_PREAMBLE))
3092         {
3093                 if(!psta->no_short_preamble_set)
3094                 {
3095                         psta->no_short_preamble_set = 1;
3096
3097                         pmlmepriv->num_sta_no_short_preamble++;
3098
3099                         if ((pmlmeext->cur_wireless_mode > WIRELESS_11B) &&
3100                                 (pmlmepriv->num_sta_no_short_preamble == 1))
3101                         {
3102                                 beacon_updated = _TRUE;
3103                                 update_beacon(padapter, 0xFF, NULL, _TRUE);
3104                         }
3105
3106                 }
3107         }
3108         else
3109         {
3110                 if(psta->no_short_preamble_set)
3111                 {
3112                         psta->no_short_preamble_set = 0;
3113
3114                         pmlmepriv->num_sta_no_short_preamble--;
3115
3116                         if ((pmlmeext->cur_wireless_mode > WIRELESS_11B) &&
3117                                 (pmlmepriv->num_sta_no_short_preamble == 0))
3118                         {
3119                                 beacon_updated = _TRUE;
3120                                 update_beacon(padapter, 0xFF, NULL, _TRUE);
3121                         }
3122
3123                 }
3124         }
3125
3126 #if 0
3127         if (psta->flags & WLAN_STA_NONERP && !psta->nonerp_set) {
3128                 psta->nonerp_set = 1;
3129                 pmlmepriv->num_sta_non_erp++;
3130                 if (pmlmepriv->num_sta_non_erp == 1)
3131                         ieee802_11_set_beacons(hapd->iface);
3132         }
3133 #endif
3134
3135         if(psta->flags & WLAN_STA_NONERP)
3136         {
3137                 if(!psta->nonerp_set)
3138                 {
3139                         psta->nonerp_set = 1;
3140
3141                         pmlmepriv->num_sta_non_erp++;
3142
3143                         if (pmlmepriv->num_sta_non_erp == 1)
3144                         {
3145                                 beacon_updated = _TRUE;
3146                                 update_beacon(padapter, _ERPINFO_IE_, NULL, _TRUE);
3147                         }
3148                 }
3149
3150         }
3151         else
3152         {
3153                 if(psta->nonerp_set)
3154                 {
3155                         psta->nonerp_set = 0;
3156
3157                         pmlmepriv->num_sta_non_erp--;
3158
3159                         if (pmlmepriv->num_sta_non_erp == 0)
3160                         {
3161                                 beacon_updated = _TRUE;
3162                                 update_beacon(padapter, _ERPINFO_IE_, NULL, _TRUE);
3163                         }
3164                 }
3165
3166         }
3167
3168
3169 #if 0
3170         if (!(psta->capability & WLAN_CAPABILITY_SHORT_SLOT) &&
3171             !psta->no_short_slot_time_set) {
3172                 psta->no_short_slot_time_set = 1;
3173                 pmlmepriv->num_sta_no_short_slot_time++;
3174                 if ((pmlmeext->cur_wireless_mode > WIRELESS_11B) &&
3175                     (pmlmepriv->num_sta_no_short_slot_time == 1))
3176                         ieee802_11_set_beacons(hapd->iface);
3177         }
3178 #endif
3179
3180         if(!(psta->capability & WLAN_CAPABILITY_SHORT_SLOT))
3181         {
3182                 if(!psta->no_short_slot_time_set)
3183                 {
3184                         psta->no_short_slot_time_set = 1;
3185
3186                         pmlmepriv->num_sta_no_short_slot_time++;
3187
3188                         if ((pmlmeext->cur_wireless_mode > WIRELESS_11B) &&
3189                                  (pmlmepriv->num_sta_no_short_slot_time == 1))
3190                         {
3191                                 beacon_updated = _TRUE;
3192                                 update_beacon(padapter, 0xFF, NULL, _TRUE);
3193                         }
3194
3195                 }
3196         }
3197         else
3198         {
3199                 if(psta->no_short_slot_time_set)
3200                 {
3201                         psta->no_short_slot_time_set = 0;
3202
3203                         pmlmepriv->num_sta_no_short_slot_time--;
3204
3205                         if ((pmlmeext->cur_wireless_mode > WIRELESS_11B) &&
3206                                  (pmlmepriv->num_sta_no_short_slot_time == 0))
3207                         {
3208                                 beacon_updated = _TRUE;
3209                                 update_beacon(padapter, 0xFF, NULL, _TRUE);
3210                         }
3211                 }
3212         }
3213
3214 #ifdef CONFIG_80211N_HT
3215
3216         if (psta->flags & WLAN_STA_HT)
3217         {
3218                 u16 ht_capab = le16_to_cpu(psta->htpriv.ht_cap.cap_info);
3219
3220                 DBG_871X("HT: STA " MAC_FMT " HT Capabilities "
3221                            "Info: 0x%04x\n", MAC_ARG(psta->hwaddr), ht_capab);
3222
3223                 if (psta->no_ht_set) {
3224                         psta->no_ht_set = 0;
3225                         pmlmepriv->num_sta_no_ht--;
3226                 }
3227
3228                 if ((ht_capab & IEEE80211_HT_CAP_GRN_FLD) == 0) {
3229                         if (!psta->no_ht_gf_set) {
3230                                 psta->no_ht_gf_set = 1;
3231                                 pmlmepriv->num_sta_ht_no_gf++;
3232                         }
3233                         DBG_871X("%s STA " MAC_FMT " - no "
3234                                    "greenfield, num of non-gf stations %d\n",
3235                                    __FUNCTION__, MAC_ARG(psta->hwaddr),
3236                                    pmlmepriv->num_sta_ht_no_gf);
3237                 }
3238
3239                 if ((ht_capab & IEEE80211_HT_CAP_SUP_WIDTH) == 0) {
3240                         if (!psta->ht_20mhz_set) {
3241                                 psta->ht_20mhz_set = 1;
3242                                 pmlmepriv->num_sta_ht_20mhz++;
3243                         }
3244                         DBG_871X("%s STA " MAC_FMT " - 20 MHz HT, "
3245                                    "num of 20MHz HT STAs %d\n",
3246                                    __FUNCTION__, MAC_ARG(psta->hwaddr),
3247                                    pmlmepriv->num_sta_ht_20mhz);
3248                 }
3249
3250
3251                 if (ht_capab & RTW_IEEE80211_HT_CAP_40MHZ_INTOLERANT) {
3252
3253                         if (!psta->ht_40mhz_intolerant) {
3254                                 psta->ht_40mhz_intolerant = 1;
3255                                 pmlmepriv->num_sta_40mhz_intolerant++;
3256                                 DBG_871X("%s STA " MAC_FMT " - HT_CAP_40MHZ_INTOLERANT is set\n" ,
3257                                    __FUNCTION__, MAC_ARG(psta->hwaddr));
3258                                 beacon_updated = _TRUE;
3259                         }
3260
3261 /*
3262                         if (pmlmepriv->ht_40mhz_intolerant == _FALSE) {
3263
3264                                 pmlmepriv->ht_40mhz_intolerant = _TRUE;
3265
3266                                 DBG_871X("%s STA " MAC_FMT " - HT_CAP_40MHZ_INTOLERANT is set\n" ,
3267                                    __FUNCTION__, MAC_ARG(psta->hwaddr));
3268
3269                                 beacon_updated = _TRUE;
3270                         }
3271 */
3272
3273                         /*update ext_capab_ie_len & ext_capab_ie_data for beacon, probersp, assocrsp.*/
3274                         if (pmlmepriv->ext_capab_ie_len == 0)
3275                                 pmlmepriv->ext_capab_ie_len = 1;
3276                         SET_EXT_CAPABILITY_ELE_BSS_COEXIST(pmlmepriv->ext_capab_ie_data, 1);
3277
3278                         update_beacon(padapter, _EXT_CAP_IE_, NULL, _FALSE);
3279                 }
3280
3281         }
3282         else
3283         {
3284                 if (!psta->no_ht_set) {
3285                         psta->no_ht_set = 1;
3286                         pmlmepriv->num_sta_no_ht++;
3287                 }
3288                 if(pmlmepriv->htpriv.ht_option == _TRUE) {
3289                         DBG_871X("%s STA " MAC_FMT
3290                                    " - no HT, num of non-HT stations %d\n",
3291                                    __FUNCTION__, MAC_ARG(psta->hwaddr),
3292                                    pmlmepriv->num_sta_no_ht);
3293                 }
3294         }
3295
3296         if (rtw_ht_operation_update(padapter) > 0) {
3297                 update_beacon(padapter, _HT_CAPABILITY_IE_, NULL, _FALSE);
3298                 update_beacon(padapter, _HT_ADD_INFO_IE_, NULL, _TRUE);
3299                 /*beacon_updated = _TRUE;*/
3300         }
3301
3302 #endif /* CONFIG_80211N_HT */
3303
3304         //update associcated stations cap.
3305         associated_clients_update(padapter,  beacon_updated, STA_INFO_UPDATE_ALL);
3306
3307         DBG_871X("%s, updated=%d\n", __func__, beacon_updated);
3308
3309 }
3310
3311 u8 bss_cap_update_on_sta_leave(_adapter *padapter, struct sta_info *psta)
3312 {
3313         u8 beacon_updated = _FALSE;
3314         struct mlme_priv *pmlmepriv = &(padapter->mlmepriv);
3315         struct mlme_ext_priv *pmlmeext = &(padapter->mlmeextpriv);
3316
3317         if(!psta)
3318                 return beacon_updated;
3319
3320         if (psta->no_short_preamble_set) {
3321                 psta->no_short_preamble_set = 0;
3322                 pmlmepriv->num_sta_no_short_preamble--;
3323                 if (pmlmeext->cur_wireless_mode > WIRELESS_11B
3324                     && pmlmepriv->num_sta_no_short_preamble == 0)
3325                 {
3326                         beacon_updated = _TRUE;
3327                         update_beacon(padapter, 0xFF, NULL, _TRUE);
3328                 }
3329         }
3330
3331         if (psta->nonerp_set) {
3332                 psta->nonerp_set = 0;
3333                 pmlmepriv->num_sta_non_erp--;
3334                 if (pmlmepriv->num_sta_non_erp == 0)
3335                 {
3336                         beacon_updated = _TRUE;
3337                         update_beacon(padapter, _ERPINFO_IE_, NULL, _TRUE);
3338                 }
3339         }
3340
3341         if (psta->no_short_slot_time_set) {
3342                 psta->no_short_slot_time_set = 0;
3343                 pmlmepriv->num_sta_no_short_slot_time--;
3344                 if (pmlmeext->cur_wireless_mode > WIRELESS_11B
3345                     && pmlmepriv->num_sta_no_short_slot_time == 0)
3346                 {
3347                         beacon_updated = _TRUE;
3348                         update_beacon(padapter, 0xFF, NULL, _TRUE);
3349                 }
3350         }
3351
3352 #ifdef CONFIG_80211N_HT
3353
3354         if (psta->no_ht_gf_set) {
3355                 psta->no_ht_gf_set = 0;
3356                 pmlmepriv->num_sta_ht_no_gf--;
3357         }
3358
3359         if (psta->no_ht_set) {
3360                 psta->no_ht_set = 0;
3361                 pmlmepriv->num_sta_no_ht--;
3362         }
3363
3364         if (psta->ht_20mhz_set) {
3365                 psta->ht_20mhz_set = 0;
3366                 pmlmepriv->num_sta_ht_20mhz--;
3367         }
3368
3369         if (psta->ht_40mhz_intolerant) {
3370                 psta->ht_40mhz_intolerant = 0;
3371                 pmlmepriv->num_sta_40mhz_intolerant--;
3372
3373                 /*update ext_capab_ie_len & ext_capab_ie_data for beacon, probersp, assocrsp.*/
3374                 if ((pmlmepriv->ext_capab_ie_len > 0) && (pmlmepriv->num_sta_40mhz_intolerant == 0)) {
3375                         SET_EXT_CAPABILITY_ELE_BSS_COEXIST(pmlmepriv->ext_capab_ie_data, 0);
3376                         update_beacon(padapter, _EXT_CAP_IE_, NULL, _FALSE);
3377                 }
3378
3379                 beacon_updated = _TRUE;
3380
3381                 update_beacon(padapter, _HT_ADD_INFO_IE_, NULL, _FALSE);
3382         }
3383
3384         if (rtw_ht_operation_update(padapter) > 0) {
3385                 update_beacon(padapter, _HT_CAPABILITY_IE_, NULL, _FALSE);
3386                 update_beacon(padapter, _HT_ADD_INFO_IE_, NULL, _TRUE);
3387         }
3388
3389 #endif /* CONFIG_80211N_HT */
3390
3391         /* update associated stations cap.
3392         associated_clients_update(padapter,  beacon_updated, STA_INFO_UPDATE_ALL); //move it to avoid deadlock
3393         */
3394
3395         DBG_871X("%s, updated=%d\n", __func__, beacon_updated);
3396
3397         return beacon_updated;
3398
3399 }
3400
3401 u8 ap_free_sta(_adapter *padapter, struct sta_info *psta, bool active, u16 reason, bool enqueue)
3402 {
3403         _irqL irqL;
3404         u8 beacon_updated = _FALSE;
3405         struct mlme_priv *pmlmepriv = &(padapter->mlmepriv);
3406         struct mlme_ext_priv    *pmlmeext = &(padapter->mlmeextpriv);
3407         struct sta_priv *pstapriv = &padapter->stapriv;
3408
3409         if(!psta)
3410                 return beacon_updated;
3411
3412         if (active == _TRUE)
3413         {
3414 #ifdef CONFIG_80211N_HT
3415                 //tear down Rx AMPDU
3416                 send_delba(padapter, 0, psta->hwaddr);// recipient
3417
3418                 //tear down TX AMPDU
3419                 send_delba(padapter, 1, psta->hwaddr);// // originator
3420
3421 #endif //CONFIG_80211N_HT
3422
3423                 issue_deauth(padapter, psta->hwaddr, reason);
3424         }
3425
3426
3427         psta->htpriv.agg_enable_bitmap = 0x0;//reset
3428         psta->htpriv.candidate_tid_bitmap = 0x0;//reset
3429
3430         //clear cam entry / key
3431         rtw_clearstakey_cmd(padapter, psta, enqueue);
3432
3433
3434         _enter_critical_bh(&psta->lock, &irqL);
3435         psta->state &= ~_FW_LINKED;
3436         _exit_critical_bh(&psta->lock, &irqL);
3437
3438         #ifdef CONFIG_IOCTL_CFG80211
3439         if (1) {
3440                 #ifdef COMPAT_KERNEL_RELEASE
3441                 rtw_cfg80211_indicate_sta_disassoc(padapter, psta->hwaddr, reason);
3442                 #elif (LINUX_VERSION_CODE >= KERNEL_VERSION(2,6,37)) && !defined(CONFIG_CFG80211_FORCE_COMPATIBLE_2_6_37_UNDER)
3443                 rtw_cfg80211_indicate_sta_disassoc(padapter, psta->hwaddr, reason);
3444                 #else //(LINUX_VERSION_CODE >= KERNEL_VERSION(2,6,37)) && !defined(CONFIG_CFG80211_FORCE_COMPATIBLE_2_6_37_UNDER)
3445                 /* will call rtw_cfg80211_indicate_sta_disassoc() in cmd_thread for old API context */
3446                 #endif //(LINUX_VERSION_CODE >= KERNEL_VERSION(2,6,37)) && !defined(CONFIG_CFG80211_FORCE_COMPATIBLE_2_6_37_UNDER)
3447         } else
3448         #endif //CONFIG_IOCTL_CFG80211
3449         {
3450                 rtw_indicate_sta_disassoc_event(padapter, psta);
3451         }
3452
3453         report_del_sta_event(padapter, psta->hwaddr, reason, enqueue, _FALSE);
3454
3455         beacon_updated = bss_cap_update_on_sta_leave(padapter, psta);
3456
3457         //_enter_critical_bh(&(pstapriv->sta_hash_lock), &irqL);
3458         rtw_free_stainfo(padapter, psta);
3459         //_exit_critical_bh(&(pstapriv->sta_hash_lock), &irqL);
3460
3461
3462         return beacon_updated;
3463
3464 }
3465
3466 int rtw_ap_inform_ch_switch(_adapter *padapter, u8 new_ch, u8 ch_offset)
3467 {
3468         _irqL irqL;
3469         _list   *phead, *plist;
3470         int ret=0;
3471         struct sta_info *psta = NULL;
3472         struct sta_priv *pstapriv = &padapter->stapriv;
3473         struct mlme_ext_priv *pmlmeext = &padapter->mlmeextpriv;
3474         struct mlme_ext_info    *pmlmeinfo = &(pmlmeext->mlmext_info);
3475         u8 bc_addr[ETH_ALEN] = {0xff,0xff,0xff,0xff,0xff,0xff};
3476
3477         if((pmlmeinfo->state&0x03) != WIFI_FW_AP_STATE)
3478                 return ret;
3479
3480         DBG_871X(FUNC_NDEV_FMT" with ch:%u, offset:%u\n",
3481                 FUNC_NDEV_ARG(padapter->pnetdev), new_ch, ch_offset);
3482
3483         _enter_critical_bh(&pstapriv->asoc_list_lock, &irqL);
3484         phead = &pstapriv->asoc_list;
3485         plist = get_next(phead);
3486
3487         /* for each sta in asoc_queue */
3488         while ((rtw_end_of_queue_search(phead, plist)) == _FALSE)
3489         {
3490                 psta = LIST_CONTAINOR(plist, struct sta_info, asoc_list);
3491                 plist = get_next(plist);
3492
3493                 issue_action_spct_ch_switch(padapter, psta->hwaddr, new_ch, ch_offset);
3494                 psta->expire_to = ((pstapriv->expire_to * 2) > 5) ? 5 : (pstapriv->expire_to * 2);
3495         }
3496         _exit_critical_bh(&pstapriv->asoc_list_lock, &irqL);
3497
3498         issue_action_spct_ch_switch(padapter, bc_addr, new_ch, ch_offset);
3499
3500         return ret;
3501 }
3502
3503 int rtw_sta_flush(_adapter *padapter, bool enqueue)
3504 {
3505         _irqL irqL;
3506         _list   *phead, *plist;
3507         int ret = 0;
3508         struct sta_info *psta = NULL;
3509         struct sta_priv *pstapriv = &padapter->stapriv;
3510         struct mlme_ext_priv *pmlmeext = &padapter->mlmeextpriv;
3511         struct mlme_ext_info    *pmlmeinfo = &(pmlmeext->mlmext_info);
3512         u8 bc_addr[ETH_ALEN] = {0xff,0xff,0xff,0xff,0xff,0xff};
3513         u8 flush_num = 0;
3514         char flush_list[NUM_STA];
3515         int i;
3516
3517         if ((pmlmeinfo->state&0x03) != WIFI_FW_AP_STATE)
3518                 return ret;
3519
3520         DBG_871X(FUNC_NDEV_FMT"\n", FUNC_NDEV_ARG(padapter->pnetdev));
3521
3522         /* pick sta from sta asoc_queue */
3523         _enter_critical_bh(&pstapriv->asoc_list_lock, &irqL);
3524         phead = &pstapriv->asoc_list;
3525         plist = get_next(phead);
3526         while ((rtw_end_of_queue_search(phead, plist)) == _FALSE) {
3527                 int stainfo_offset;
3528
3529                 psta = LIST_CONTAINOR(plist, struct sta_info, asoc_list);
3530                 plist = get_next(plist);
3531
3532                 rtw_list_delete(&psta->asoc_list);
3533                 pstapriv->asoc_list_cnt--;
3534
3535                 stainfo_offset = rtw_stainfo_offset(pstapriv, psta);
3536                 if (stainfo_offset_valid(stainfo_offset))
3537                         flush_list[flush_num++] = stainfo_offset;
3538                 else
3539                         rtw_warn_on(1);
3540         }
3541         _exit_critical_bh(&pstapriv->asoc_list_lock, &irqL);
3542
3543         /* call ap_free_sta() for each sta picked */
3544         for (i = 0; i < flush_num; i++) {
3545                 psta = rtw_get_stainfo_by_offset(pstapriv, flush_list[i]);
3546                 ap_free_sta(padapter, psta, _TRUE, WLAN_REASON_DEAUTH_LEAVING, enqueue);
3547         }
3548
3549         issue_deauth(padapter, bc_addr, WLAN_REASON_DEAUTH_LEAVING);
3550
3551         associated_clients_update(padapter, _TRUE, STA_INFO_UPDATE_ALL);
3552
3553         return ret;
3554 }
3555
3556 /* called > TSR LEVEL for USB or SDIO Interface*/
3557 void sta_info_update(_adapter *padapter, struct sta_info *psta)
3558 {
3559         int flags = psta->flags;
3560         struct mlme_priv *pmlmepriv = &(padapter->mlmepriv);
3561
3562
3563         //update wmm cap.
3564         if(WLAN_STA_WME&flags)
3565                 psta->qos_option = 1;
3566         else
3567                 psta->qos_option = 0;
3568
3569         if(pmlmepriv->qospriv.qos_option == 0)
3570                 psta->qos_option = 0;
3571
3572
3573 #ifdef CONFIG_80211N_HT
3574         //update 802.11n ht cap.
3575         if(WLAN_STA_HT&flags)
3576         {
3577                 psta->htpriv.ht_option = _TRUE;
3578                 psta->qos_option = 1;
3579
3580                 psta->htpriv.smps_cap = (psta->htpriv.ht_cap.cap_info & IEEE80211_HT_CAP_SM_PS)>>2;
3581         }
3582         else
3583         {
3584                 psta->htpriv.ht_option = _FALSE;
3585         }
3586
3587         if(pmlmepriv->htpriv.ht_option == _FALSE)
3588                 psta->htpriv.ht_option = _FALSE;
3589 #endif
3590
3591
3592
3593         update_sta_info_apmode(padapter, psta);
3594
3595
3596 }
3597
3598 /* called >= TSR LEVEL for USB or SDIO Interface*/
3599 void ap_sta_info_defer_update(_adapter *padapter, struct sta_info *psta)
3600 {
3601         if (psta->state & _FW_LINKED) {
3602                 //add ratid
3603                 add_RATid(padapter, psta, 0);//DM_RATR_STA_INIT
3604         }
3605 }
3606 /* restore hw setting from sw data structures */
3607 void rtw_ap_restore_network(_adapter *padapter)
3608 {
3609         struct mlme_priv *mlmepriv = &padapter->mlmepriv;
3610         struct mlme_ext_priv    *pmlmeext = &padapter->mlmeextpriv;
3611         struct mlme_ext_info    *pmlmeinfo = &(pmlmeext->mlmext_info);
3612         struct sta_priv * pstapriv = &padapter->stapriv;
3613         struct sta_info *psta;
3614         struct security_priv* psecuritypriv=&(padapter->securitypriv);
3615         _irqL irqL;
3616         _list   *phead, *plist;
3617         u8 chk_alive_num = 0;
3618         char chk_alive_list[NUM_STA];
3619         int i;
3620
3621         rtw_setopmode_cmd(padapter, Ndis802_11APMode,_FALSE);
3622
3623         set_channel_bwmode(padapter, pmlmeext->cur_channel, pmlmeext->cur_ch_offset, pmlmeext->cur_bwmode);
3624
3625         rtw_startbss_cmd(padapter, RTW_CMDF_DIRECTLY);
3626
3627         if((padapter->securitypriv.dot11PrivacyAlgrthm == _TKIP_) ||
3628                 (padapter->securitypriv.dot11PrivacyAlgrthm == _AES_))
3629         {
3630                 /* restore group key, WEP keys is restored in ips_leave() */
3631                 rtw_set_key(padapter, psecuritypriv, psecuritypriv->dot118021XGrpKeyid, 0,_FALSE);
3632         }
3633
3634         _enter_critical_bh(&pstapriv->asoc_list_lock, &irqL);
3635
3636         phead = &pstapriv->asoc_list;
3637         plist = get_next(phead);
3638
3639         while ((rtw_end_of_queue_search(phead, plist)) == _FALSE) {
3640                 int stainfo_offset;
3641
3642                 psta = LIST_CONTAINOR(plist, struct sta_info, asoc_list);
3643                 plist = get_next(plist);
3644
3645                 stainfo_offset = rtw_stainfo_offset(pstapriv, psta);
3646                 if (stainfo_offset_valid(stainfo_offset)) {
3647                         chk_alive_list[chk_alive_num++] = stainfo_offset;
3648                 }
3649         }
3650
3651         _exit_critical_bh(&pstapriv->asoc_list_lock, &irqL);
3652
3653         for (i = 0; i < chk_alive_num; i++) {
3654                 psta = rtw_get_stainfo_by_offset(pstapriv, chk_alive_list[i]);
3655
3656                 if (psta == NULL) {
3657                         DBG_871X(FUNC_ADPT_FMT" sta_info is null\n", FUNC_ADPT_ARG(padapter));
3658                 } else if (psta->state &_FW_LINKED) {
3659                         rtw_sta_media_status_rpt(padapter, psta, 1);
3660                         Update_RA_Entry(padapter, psta);
3661                         //pairwise key
3662                         /* per sta pairwise key and settings */
3663                         if(     (padapter->securitypriv.dot11PrivacyAlgrthm == _TKIP_) ||
3664                                 (padapter->securitypriv.dot11PrivacyAlgrthm == _AES_))
3665                         {
3666                                 rtw_setstakey_cmd(padapter, psta, UNICAST_KEY,_FALSE);
3667                         }
3668                 }
3669         }
3670
3671 }
3672
3673 void start_ap_mode(_adapter *padapter)
3674 {
3675         int i;
3676         struct mlme_priv *pmlmepriv = &(padapter->mlmepriv);
3677         struct sta_priv *pstapriv = &padapter->stapriv;
3678         struct mlme_ext_priv *pmlmeext = &padapter->mlmeextpriv;
3679         struct mlme_ext_info    *pmlmeinfo = &(pmlmeext->mlmext_info);
3680         struct wlan_acl_pool *pacl_list = &pstapriv->acl_list;
3681
3682         pmlmepriv->update_bcn = _FALSE;
3683
3684         /*init_mlme_ap_info(padapter);*/
3685
3686         pmlmeext->bstart_bss = _FALSE;
3687
3688         pmlmepriv->num_sta_non_erp = 0;
3689
3690         pmlmepriv->num_sta_no_short_slot_time = 0;
3691
3692         pmlmepriv->num_sta_no_short_preamble = 0;
3693
3694         pmlmepriv->num_sta_ht_no_gf = 0;
3695 #ifdef CONFIG_80211N_HT
3696         pmlmepriv->num_sta_no_ht = 0;
3697 #endif //CONFIG_80211N_HT
3698         pmlmeinfo->HT_info_enable = 0;
3699         pmlmeinfo->HT_caps_enable = 0;
3700         pmlmeinfo->HT_enable = 0;
3701
3702         pmlmepriv->num_sta_ht_20mhz = 0;
3703         pmlmepriv->num_sta_40mhz_intolerant = 0;
3704         pmlmepriv->olbc = _FALSE;
3705         pmlmepriv->olbc_ht = _FALSE;
3706
3707 #ifdef CONFIG_80211N_HT
3708         pmlmepriv->ht_20mhz_width_req = _FALSE;
3709         pmlmepriv->ht_intolerant_ch_reported = _FALSE;
3710         pmlmepriv->ht_op_mode = 0;
3711         pmlmepriv->sw_to_20mhz = 0;
3712 #endif
3713
3714         _rtw_memset(pmlmepriv->ext_capab_ie_data, 0, sizeof(pmlmepriv->ext_capab_ie_data));
3715         pmlmepriv->ext_capab_ie_len = 0;
3716
3717         for (i = 0 ;  i < NUM_STA ; i++)
3718                 pstapriv->sta_aid[i] = NULL;
3719
3720         //for ACL
3721         _rtw_init_listhead(&(pacl_list->acl_node_q.queue));
3722         pacl_list->num = 0;
3723         pacl_list->mode = 0;
3724         for(i = 0; i < NUM_ACL; i++)
3725         {
3726                 _rtw_init_listhead(&pacl_list->aclnode[i].list);
3727                 pacl_list->aclnode[i].valid = _FALSE;
3728         }
3729
3730 }
3731
3732 void stop_ap_mode(_adapter *padapter)
3733 {
3734         _irqL irqL;
3735         _list   *phead, *plist;
3736         struct rtw_wlan_acl_node *paclnode;
3737         struct sta_info *psta=NULL;
3738         struct sta_priv *pstapriv = &padapter->stapriv;
3739         struct mlme_priv *pmlmepriv = &(padapter->mlmepriv);
3740         struct mlme_ext_priv *pmlmeext = &padapter->mlmeextpriv;
3741         struct wlan_acl_pool *pacl_list = &pstapriv->acl_list;
3742         _queue  *pacl_node_q =&pacl_list->acl_node_q;
3743
3744         pmlmepriv->update_bcn = _FALSE;
3745         pmlmeext->bstart_bss = _FALSE;
3746         padapter->netif_up = _FALSE;
3747         //_rtw_spinlock_free(&pmlmepriv->bcn_update_lock);
3748
3749         //reset and init security priv , this can refine with rtw_reset_securitypriv
3750         _rtw_memset((unsigned char *)&padapter->securitypriv, 0, sizeof (struct security_priv));
3751         padapter->securitypriv.ndisauthtype = Ndis802_11AuthModeOpen;
3752         padapter->securitypriv.ndisencryptstatus = Ndis802_11WEPDisabled;
3753
3754         #ifdef CONFIG_DFS_MASTER
3755         rtw_dfs_master_status_apply(padapter, MLME_AP_STOPPED);
3756         #endif
3757
3758         /* free scan queue */
3759         rtw_free_network_queue(padapter, _TRUE);
3760
3761         //for ACL
3762         _enter_critical_bh(&(pacl_node_q->lock), &irqL);
3763         phead = get_list_head(pacl_node_q);
3764         plist = get_next(phead);
3765         while ((rtw_end_of_queue_search(phead, plist)) == _FALSE)
3766         {
3767                 paclnode = LIST_CONTAINOR(plist, struct rtw_wlan_acl_node, list);
3768                 plist = get_next(plist);
3769
3770                 if(paclnode->valid == _TRUE)
3771                 {
3772                         paclnode->valid = _FALSE;
3773
3774                         rtw_list_delete(&paclnode->list);
3775
3776                         pacl_list->num--;
3777                 }
3778         }
3779         _exit_critical_bh(&(pacl_node_q->lock), &irqL);
3780
3781         DBG_871X("%s, free acl_node_queue, num=%d\n", __func__, pacl_list->num);
3782
3783         rtw_sta_flush(padapter, _TRUE);
3784
3785         //free_assoc_sta_resources
3786         rtw_free_all_stainfo(padapter);
3787
3788         psta = rtw_get_bcmc_stainfo(padapter);
3789         //_enter_critical_bh(&(pstapriv->sta_hash_lock), &irqL);
3790         rtw_free_stainfo(padapter, psta);
3791         //_exit_critical_bh(&(pstapriv->sta_hash_lock), &irqL);
3792
3793         rtw_init_bcmc_stainfo(padapter);
3794
3795         rtw_free_mlme_priv_ie_data(pmlmepriv);
3796
3797 #ifdef CONFIG_BT_COEXIST
3798         rtw_btcoex_MediaStatusNotify(padapter, 0); //disconnect
3799 #endif
3800
3801 }
3802
3803 #endif //CONFIG_NATIVEAP_MLME
3804
3805 void rtw_ap_update_bss_chbw(_adapter *adapter, WLAN_BSSID_EX *bss, u8 ch, u8 bw, u8 offset)
3806 {
3807 #define UPDATE_VHT_CAP 1
3808 #define UPDATE_HT_CAP 1
3809
3810 #ifdef CONFIG_80211N_HT
3811         {
3812                 struct ht_priv  *htpriv = &adapter->mlmepriv.htpriv;
3813                 u8 *ht_cap_ie, *ht_op_ie;
3814                 int ht_cap_ielen, ht_op_ielen;
3815
3816                 ht_cap_ie = rtw_get_ie((bss->IEs + sizeof(NDIS_802_11_FIXED_IEs)), EID_HTCapability, &ht_cap_ielen, (bss->IELength - sizeof(NDIS_802_11_FIXED_IEs)));
3817                 ht_op_ie = rtw_get_ie((bss->IEs + sizeof(NDIS_802_11_FIXED_IEs)), EID_HTInfo, &ht_op_ielen, (bss->IELength - sizeof(NDIS_802_11_FIXED_IEs)));
3818
3819                 /* update ht cap ie */
3820                 if (ht_cap_ie && ht_cap_ielen) {
3821                         #if UPDATE_HT_CAP
3822                         if (bw >= CHANNEL_WIDTH_40)
3823                                 SET_HT_CAP_ELE_CHL_WIDTH(ht_cap_ie + 2, 1);
3824                         else
3825                                 SET_HT_CAP_ELE_CHL_WIDTH(ht_cap_ie + 2, 0);
3826
3827                         if (bw >= CHANNEL_WIDTH_40 && htpriv->sgi_40m)
3828                                 SET_HT_CAP_ELE_SHORT_GI40M(ht_cap_ie + 2, 1);
3829                         else
3830                                 SET_HT_CAP_ELE_SHORT_GI40M(ht_cap_ie + 2, 0);
3831
3832                         if (htpriv->sgi_20m)
3833                                 SET_HT_CAP_ELE_SHORT_GI20M(ht_cap_ie + 2, 1);
3834                         else
3835                                 SET_HT_CAP_ELE_SHORT_GI20M(ht_cap_ie + 2, 0);
3836                         #endif
3837                 }
3838
3839                 /* update ht op ie */
3840                 if (ht_op_ie && ht_op_ielen) {
3841                         SET_HT_OP_ELE_PRI_CHL(ht_op_ie + 2, ch);
3842                         switch (offset) {
3843                         case HAL_PRIME_CHNL_OFFSET_LOWER:
3844                                 SET_HT_OP_ELE_2ND_CHL_OFFSET(ht_op_ie + 2, SCA);
3845                                 break;
3846                         case HAL_PRIME_CHNL_OFFSET_UPPER:
3847                                 SET_HT_OP_ELE_2ND_CHL_OFFSET(ht_op_ie + 2, SCB);
3848                                 break;
3849                         case HAL_PRIME_CHNL_OFFSET_DONT_CARE:
3850                         default:
3851                                 SET_HT_OP_ELE_2ND_CHL_OFFSET(ht_op_ie + 2, SCN);
3852                                 break;
3853                         }
3854
3855                         if (bw >= CHANNEL_WIDTH_40)
3856                                 SET_HT_OP_ELE_STA_CHL_WIDTH(ht_op_ie + 2, 1);
3857                         else
3858                                 SET_HT_OP_ELE_STA_CHL_WIDTH(ht_op_ie + 2, 0);
3859                 }
3860         }
3861 #endif /* CONFIG_80211N_HT */
3862
3863 {
3864         u8 *p;
3865         int ie_len;
3866         u8 old_ch = bss->Configuration.DSConfig;
3867         bool change_band = _FALSE;
3868
3869         if ((ch <= 14 && old_ch >= 36) || (ch >= 36 && old_ch <= 14))
3870                 change_band = _TRUE;
3871
3872         /* update channel in IE */
3873         p = rtw_get_ie((bss->IEs + sizeof(NDIS_802_11_FIXED_IEs)), _DSSET_IE_, &ie_len, (bss->IELength - sizeof(NDIS_802_11_FIXED_IEs)));
3874         if (p && ie_len > 0)
3875                 *(p + 2) = ch;
3876
3877         bss->Configuration.DSConfig = ch;
3878
3879         /* band is changed, update ERP, support rate, ext support rate IE */
3880         if (change_band == _TRUE)
3881                 change_band_update_ie(adapter, bss, ch);
3882 }
3883
3884 }
3885
3886 bool rtw_ap_chbw_decision(_adapter *adapter, u8 req_ch, u8 req_bw, u8 req_offset
3887         , u8 *ch, u8 *bw, u8 *offset)
3888 {
3889         u8 dec_ch, dec_bw, dec_offset;
3890         u8 u_ch = 0, u_offset, u_bw;
3891         bool changed = _FALSE;
3892         struct mlme_ext_priv *mlmeext = &(adapter->mlmeextpriv);
3893         u8 sta_num;
3894         u8 ld_sta_num;
3895         u8 lg_sta_num;
3896         u8 ap_num;
3897         u8 ld_ap_num;
3898         bool set_u_ch = _FALSE, set_dec_ch = _FALSE;
3899
3900         dec_ch = req_ch;
3901         dec_bw = req_bw;
3902         dec_offset = req_offset;
3903
3904         rtw_dev_iface_status_no_self(adapter, &sta_num, &ld_sta_num, &lg_sta_num, &ap_num, &ld_ap_num);
3905         DBG_871X(FUNC_ADPT_FMT" ld_sta_num:%u, lg_sta_num%u, ap_num:%u\n"
3906                 , FUNC_ADPT_ARG(adapter), ld_sta_num, lg_sta_num, ap_num);
3907
3908         if (ld_sta_num || ap_num) {
3909                 /* has linked STA or AP mode, follow */
3910
3911                 rtw_warn_on(!rtw_get_ch_setting_union_no_self(adapter, &u_ch, &u_bw, &u_offset));
3912
3913                 DBG_871X(FUNC_ADPT_FMT" union no self: %u,%u,%u\n", FUNC_ADPT_ARG(adapter), u_ch, u_bw, u_offset);
3914                 DBG_871X(FUNC_ADPT_FMT" req: %u,%u,%u\n", FUNC_ADPT_ARG(adapter), req_ch, req_bw, req_offset);
3915
3916                 rtw_adjust_chbw(adapter, u_ch, &dec_bw, &dec_offset);
3917
3918                 rtw_sync_chbw(&dec_ch, &dec_bw, &dec_offset
3919                         , &u_ch, &u_bw, &u_offset);
3920
3921                 rtw_ap_update_bss_chbw(adapter, &(adapter->mlmepriv.cur_network.network)
3922                         , dec_ch, dec_bw, dec_offset);
3923
3924                 set_u_ch = _TRUE;
3925         } else if (lg_sta_num) {
3926                 /* has linking STA */
3927
3928                 rtw_warn_on(!rtw_get_ch_setting_union_no_self(adapter, &u_ch, &u_bw, &u_offset));
3929
3930                 DBG_871X(FUNC_ADPT_FMT" union no self: %u,%u,%u\n", FUNC_ADPT_ARG(adapter), u_ch, u_bw, u_offset);
3931                 DBG_871X(FUNC_ADPT_FMT" req: %u,%u,%u\n", FUNC_ADPT_ARG(adapter), req_ch, req_bw, req_offset);
3932
3933                 rtw_adjust_chbw(adapter, dec_ch, &dec_bw, &dec_offset);
3934
3935                 if (rtw_is_chbw_grouped(u_ch, u_bw, u_offset, dec_ch, dec_bw, dec_offset)) {
3936
3937                         rtw_sync_chbw(&dec_ch, &dec_bw, &dec_offset
3938                                         , &u_ch, &u_bw, &u_offset);
3939
3940                         rtw_ap_update_bss_chbw(adapter, &(adapter->mlmepriv.cur_network.network)
3941                                 , dec_ch, dec_bw, dec_offset);
3942
3943                         set_u_ch = _TRUE;
3944                 } else {
3945                         /* set this for possible ch change when join down*/
3946                         set_fwstate(&adapter->mlmepriv, WIFI_OP_CH_SWITCHING);
3947                 }
3948         } else {
3949                 /* single AP mode */
3950
3951                 DBG_871X(FUNC_ADPT_FMT" req: %u,%u,%u\n", FUNC_ADPT_ARG(adapter), req_ch, req_bw, req_offset);
3952                 rtw_adjust_chbw(adapter, dec_ch, &dec_bw, &dec_offset);
3953
3954                 #if defined(CONFIG_DFS_MASTER)
3955                 /* check NOL */
3956                 if (rtw_chset_is_ch_non_ocp(mlmeext->channel_set, dec_ch, dec_bw, dec_offset)) {
3957                         /* choose 5G DFS channel for debug */
3958                         if (adapter_to_rfctl(adapter)->dbg_dfs_master_choose_dfs_ch_first
3959                                 && rtw_choose_available_chbw(adapter, req_bw, &dec_ch, &dec_bw, &dec_offset, RTW_CHF_2G|RTW_CHF_NON_DFS) == _TRUE) {
3960                                 DBG_871X(FUNC_ADPT_FMT" choose 5G DFS channel for debug\n", FUNC_ADPT_ARG(adapter));
3961                         } else
3962                         /* choose from 5G no DFS */
3963                         if (rtw_choose_available_chbw(adapter, req_bw, &dec_ch, &dec_bw, &dec_offset, RTW_CHF_2G|RTW_CHF_DFS) == _FALSE) {
3964                                 /* including 5G DFS, not long CAC */
3965                                 if (rtw_choose_available_chbw(adapter, req_bw, &dec_ch, &dec_bw, &dec_offset, RTW_CHF_2G|RTW_CHF_LONG_CAC) == _FALSE) {
3966                                         /* including 5G DFS, long CAC */
3967                                         if (rtw_choose_available_chbw(adapter, req_bw, &dec_ch, &dec_bw, &dec_offset, RTW_CHF_2G) == _FALSE) {
3968                                                 /* including 2.4G channel */
3969                                                 if (rtw_choose_available_chbw(adapter, req_bw, &dec_ch, &dec_bw, &dec_offset, RTW_CHF_5G) == _FALSE) {
3970                                                         DBG_871X(FUNC_ADPT_FMT" no available ch\n", FUNC_ADPT_ARG(adapter));
3971                                                         rtw_warn_on(1);
3972                                                 }
3973                                         }
3974                                 }
3975                         }
3976                 }
3977                 #endif /* defined(CONFIG_DFS_MASTER) */
3978
3979                 rtw_ap_update_bss_chbw(adapter, &(adapter->mlmepriv.cur_network.network)
3980                                 , dec_ch, dec_bw, dec_offset);
3981
3982                 set_dec_ch = _TRUE;
3983         }
3984
3985         if (check_fwstate(&adapter->mlmepriv, _FW_UNDER_SURVEY)
3986                 #ifdef CONFIG_CONCURRENT_MODE
3987                 || check_buddy_fwstate(adapter, _FW_UNDER_SURVEY)
3988                 #endif
3989         ) {
3990                 /* scanning, leave ch setting to scan state machine */
3991                 set_u_ch = set_dec_ch = _FALSE;
3992         }
3993
3994         if (mlmeext->cur_channel != dec_ch
3995                 || mlmeext->cur_bwmode != dec_bw
3996                 || mlmeext->cur_ch_offset != dec_offset)
3997                 changed = _TRUE;
3998
3999         if (changed == _TRUE && rtw_linked_check(adapter) == _TRUE) {
4000                 #ifdef CONFIG_SPCT_CH_SWITCH
4001                 if (1)
4002                         rtw_ap_inform_ch_switch(adapter, dec_ch, dec_offset);
4003                 else
4004                 #endif
4005                         rtw_sta_flush(adapter, _FALSE);
4006         }
4007
4008         mlmeext->cur_channel = dec_ch;
4009         mlmeext->cur_bwmode = dec_bw;
4010         mlmeext->cur_ch_offset = dec_offset;
4011
4012         if (u_ch != 0)
4013                 DBG_871X(FUNC_ADPT_FMT" union: %u,%u,%u\n", FUNC_ADPT_ARG(adapter), u_ch, u_bw, u_offset);
4014
4015         DBG_871X(FUNC_ADPT_FMT" dec: %u,%u,%u\n", FUNC_ADPT_ARG(adapter), dec_ch, dec_bw, dec_offset);
4016
4017         if (set_u_ch == _TRUE) {
4018                 *ch = u_ch;
4019                 *bw = u_bw;
4020                 *offset = u_offset;
4021         } else if (set_dec_ch == _TRUE) {
4022                 *ch = dec_ch;
4023                 *bw = dec_bw;
4024                 *offset = dec_offset;
4025         }
4026
4027         return changed;
4028 }
4029
4030 #endif //CONFIG_AP_MODE