os_dep/ioctl_linux.c

   1 /******************************************************************************
   2  *
   3  * Copyright(c) 2007 - 2012 Realtek Corporation. All rights reserved.
   4  *
   5  * This program is free software; you can redistribute it and/or modify it
   6  * under the terms of version 2 of the GNU General Public License as
   7  * published by the Free Software Foundation.
   8  *
   9  * This program is distributed in the hope that it will be useful, but WITHOUT
  10  * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
  11  * FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for
  12  * more details.
  13  *
  14  * You should have received a copy of the GNU General Public License along with
  15  * this program; if not, write to the Free Software Foundation, Inc.,
  16  * 51 Franklin Street, Fifth Floor, Boston, MA 02110, USA
  17  *
  18  *
  19  ******************************************************************************/
  20 #define _IOCTL_LINUX_C_
  21
  22 #include <drv_conf.h>
  23 #include <osdep_service.h>
  24 #include <drv_types.h>
  25 #include <wlan_bssdef.h>
  26 #include <rtw_debug.h>
  27 #include <wifi.h>
  28 #include <rtw_mlme.h>
  29 #include <rtw_mlme_ext.h>
  30 #include <rtw_ioctl.h>
  31 #include <rtw_ioctl_set.h>
  32
  33 #ifdef CONFIG_USB_HCI
  34 #include <usb_ops.h>
  35 #endif //CONFIG_USB_HCI
  36 #include <rtw_version.h>
  37
  38 #ifdef CONFIG_RTL8192C
  39 #include <rtl8192c_hal.h>
  40 #endif
  41 #ifdef CONFIG_RTL8192D
  42 #include <rtl8192d_hal.h>
  43 #endif
  44 #ifdef CONFIG_RTL8723A
  45 #include <rtl8723a_pg.h>
  46 #include <rtl8723a_hal.h>
  47 #endif
  48 #ifdef CONFIG_RTL8188E
  49 #include <rtl8188e_hal.h>
  50 #endif
  51 #ifdef CONFIG_GSPI_HCI
  52 #include <gspi_ops.h>
  53 #endif
  54
  55 #ifdef CONFIG_RTL8723A
  56 //extern u8 _InitPowerOn(PADAPTER padapter);
  57 //extern s32 rtl8723a_FirmwareDownload(PADAPTER padapter);
  58 extern s32 FillH2CCmd(PADAPTER padapter, u8 ElementID, u32 CmdLen, u8 *pCmdBuffer);
  59 #endif
  60
  61
  62 #if (LINUX_VERSION_CODE < KERNEL_VERSION(2,6,27))
  63 #define  iwe_stream_add_event(a, b, c, d, e)  iwe_stream_add_event(b, c, d, e)
  64 #define  iwe_stream_add_point(a, b, c, d, e)  iwe_stream_add_point(b, c, d, e)
  65 #endif
  66
  67
  68 #define RTL_IOCTL_WPA_SUPPLICANT        SIOCIWFIRSTPRIV+30
  69
  70 #define SCAN_ITEM_SIZE 768
  71 #define MAX_CUSTOM_LEN 64
  72 #define RATE_COUNT 4
  73
  74 #ifdef CONFIG_GLOBAL_UI_PID
  75 extern int ui_pid[3];
  76 #endif
  77
  78 // combo scan
  79 #define WEXT_CSCAN_AMOUNT 9
  80 #define WEXT_CSCAN_BUF_LEN              360
  81 #define WEXT_CSCAN_HEADER               "CSCAN S\x01\x00\x00S\x00"
  82 #define WEXT_CSCAN_HEADER_SIZE          12
  83 #define WEXT_CSCAN_SSID_SECTION         'S'
  84 #define WEXT_CSCAN_CHANNEL_SECTION      'C'
  85 #define WEXT_CSCAN_NPROBE_SECTION       'N'
  86 #define WEXT_CSCAN_ACTV_DWELL_SECTION   'A'
  87 #define WEXT_CSCAN_PASV_DWELL_SECTION   'P'
  88 #define WEXT_CSCAN_HOME_DWELL_SECTION   'H'
  89 #define WEXT_CSCAN_TYPE_SECTION         'T'
  90
  91
  92 extern u8 key_2char2num(u8 hch, u8 lch);
  93 extern u8 str_2char2num(u8 hch, u8 lch);
  94 extern u8 convert_ip_addr(u8 hch, u8 mch, u8 lch);
  95
  96 u32 rtw_rates[] = {1000000,2000000,5500000,11000000,
  97         6000000,9000000,12000000,18000000,24000000,36000000,48000000,54000000};
  98
  99 static const char * const iw_operation_mode[] =
 100 {
 101         "Auto", "Ad-Hoc", "Managed",  "Master", "Repeater", "Secondary", "Monitor"
 102 };
 103
 104 static int hex2num_i(char c)
 105 {
 106         if (c >= '0' && c <= '9')
 107                 return c - '0';
 108         if (c >= 'a' && c <= 'f')
 109                 return c - 'a' + 10;
 110         if (c >= 'A' && c <= 'F')
 111                 return c - 'A' + 10;
 112         return -1;
 113 }
 114
 115 static int hex2byte_i(const char *hex)
 116 {
 117         int a, b;
 118         a = hex2num_i(*hex++);
 119         if (a < 0)
 120                 return -1;
 121         b = hex2num_i(*hex++);
 122         if (b < 0)
 123                 return -1;
 124         return (a << 4) | b;
 125 }
 126
 127 /**
 128  * hwaddr_aton - Convert ASCII string to MAC address
 129  * @txt: MAC address as a string (e.g., "00:11:22:33:44:55")
 130  * @addr: Buffer for the MAC address (ETH_ALEN = 6 bytes)
 131  * Returns: 0 on success, -1 on failure (e.g., string not a MAC address)
 132  */
 133 static int hwaddr_aton_i(const char *txt, u8 *addr)
 134 {
 135         int i;
 136
 137         for (i = 0; i < 6; i++) {
 138                 int a, b;
 139
 140                 a = hex2num_i(*txt++);
 141                 if (a < 0)
 142                         return -1;
 143                 b = hex2num_i(*txt++);
 144                 if (b < 0)
 145                         return -1;
 146                 *addr++ = (a << 4) | b;
 147                 if (i < 5 && *txt++ != ':')
 148                         return -1;
 149         }
 150
 151         return 0;
 152 }
 153
 154 static void indicate_wx_custom_event(_adapter *padapter, char *msg)
 155 {
 156         u8 *buff, *p;
 157         union iwreq_data wrqu;
 158
 159         if (strlen(msg) > IW_CUSTOM_MAX) {
 160                 DBG_8723A("%s strlen(msg):%zu > IW_CUSTOM_MAX:%u\n", __func__ , strlen(msg), IW_CUSTOM_MAX);
 161                 return;
 162         }
 163
 164         buff = kzalloc(IW_CUSTOM_MAX + 1, GFP_KERNEL);
 165         if(!buff)
 166                 return;
 167
 168         memcpy(buff, msg, strlen(msg));
 169
 170         memset(&wrqu,0,sizeof(wrqu));
 171         wrqu.data.length = strlen(msg);
 172
 173         DBG_8723A("%s %s\n", __func__, buff);
 174 #ifndef CONFIG_IOCTL_CFG80211
 175         wireless_send_event(padapter->pnetdev, IWEVCUSTOM, &wrqu, buff);
 176 #endif
 177
 178         kfree(buff);
 179
 180 }
 181
 182
 183 static void request_wps_pbc_event(_adapter *padapter)
 184 {
 185         u8 *buff, *p;
 186         union iwreq_data wrqu;
 187
 188
 189         buff = kzalloc(IW_CUSTOM_MAX, GFP_KERNEL);
 190         if(!buff)
 191                 return;
 192
 193         p=buff;
 194
 195         p+=sprintf(p, "WPS_PBC_START.request=TRUE");
 196
 197         memset(&wrqu,0,sizeof(wrqu));
 198
 199         wrqu.data.length = p-buff;
 200
 201         wrqu.data.length = (wrqu.data.length<IW_CUSTOM_MAX) ? wrqu.data.length:IW_CUSTOM_MAX;
 202
 203         DBG_8723A("%s\n", __func__);
 204
 205 #ifndef CONFIG_IOCTL_CFG80211
 206         wireless_send_event(padapter->pnetdev, IWEVCUSTOM, &wrqu, buff);
 207 #endif
 208
 209         if(buff) {
 210                 kfree(buff);
 211         }
 212
 213 }
 214
 215
 216 void indicate_wx_scan_complete_event(_adapter *padapter)
 217 {
 218         union iwreq_data wrqu;
 219         struct  mlme_priv *pmlmepriv = &padapter->mlmepriv;
 220
 221         memset(&wrqu, 0, sizeof(union iwreq_data));
 222
 223         //DBG_8723A("+rtw_indicate_wx_scan_complete_event\n");
 224 #ifndef CONFIG_IOCTL_CFG80211
 225         wireless_send_event(padapter->pnetdev, SIOCGIWSCAN, &wrqu, NULL);
 226 #endif
 227 }
 228
 229
 230 void rtw_indicate_wx_assoc_event(_adapter *padapter)
 231 {
 232         union iwreq_data wrqu;
 233         struct  mlme_priv *pmlmepriv = &padapter->mlmepriv;
 234
 235         memset(&wrqu, 0, sizeof(union iwreq_data));
 236
 237         wrqu.ap_addr.sa_family = ARPHRD_ETHER;
 238
 239         memcpy(wrqu.ap_addr.sa_data, pmlmepriv->cur_network.network.MacAddress, ETH_ALEN);
 240
 241         DBG_8723A_LEVEL(_drv_always_, "assoc success\n");
 242 #ifndef CONFIG_IOCTL_CFG80211
 243         wireless_send_event(padapter->pnetdev, SIOCGIWAP, &wrqu, NULL);
 244 #endif
 245 }
 246
 247 void rtw_indicate_wx_disassoc_event(_adapter *padapter)
 248 {
 249         union iwreq_data wrqu;
 250
 251         memset(&wrqu, 0, sizeof(union iwreq_data));
 252
 253         wrqu.ap_addr.sa_family = ARPHRD_ETHER;
 254         memset(wrqu.ap_addr.sa_data, 0, ETH_ALEN);
 255
 256 #ifndef CONFIG_IOCTL_CFG80211
 257         DBG_8723A_LEVEL(_drv_always_, "indicate disassoc\n");
 258         wireless_send_event(padapter->pnetdev, SIOCGIWAP, &wrqu, NULL);
 259 #endif
 260 }
 261
 262 /*
 263 uint    rtw_is_cckrates_included(u8 *rate)
 264 {
 265                 u32     i = 0;
 266
 267                 while(rate[i]!=0)
 268                 {
 269                         if  (  (((rate[i]) & 0x7f) == 2)        || (((rate[i]) & 0x7f) == 4) ||
 270                         (((rate[i]) & 0x7f) == 11)  || (((rate[i]) & 0x7f) == 22) )
 271                         return _TRUE;
 272                         i++;
 273                 }
 274
 275                 return _FALSE;
 276 }
 277
 278 uint    rtw_is_cckratesonly_included(u8 *rate)
 279 {
 280         u32 i = 0;
 281
 282         while(rate[i]!=0)
 283         {
 284                         if  (  (((rate[i]) & 0x7f) != 2) && (((rate[i]) & 0x7f) != 4) &&
 285                                 (((rate[i]) & 0x7f) != 11)  && (((rate[i]) & 0x7f) != 22) )
 286                         return _FALSE;
 287                         i++;
 288         }
 289
 290         return _TRUE;
 291 }
 292 */
 293
 294 static char *translate_scan(_adapter *padapter,
 295                                 struct iw_request_info* info, struct wlan_network *pnetwork,
 296                                 char *start, char *stop)
 297 {
 298         struct iw_event iwe;
 299         u16 cap;
 300         u32 ht_ielen = 0;
 301         char custom[MAX_CUSTOM_LEN];
 302         char *p;
 303         u16 max_rate=0, rate, ht_cap=_FALSE;
 304         u32 i = 0;
 305         char    *current_val;
 306         long rssi;
 307         u8 bw_40MHz=0, short_GI=0;
 308         u16 mcs_rate=0;
 309         struct registry_priv *pregpriv = &padapter->registrypriv;
 310 #ifdef CONFIG_P2P
 311         struct wifidirect_info  *pwdinfo = &padapter->wdinfo;
 312 #endif //CONFIG_P2P
 313
 314 #ifdef CONFIG_P2P
 315 #ifdef CONFIG_WFD
 316         if ( SCAN_RESULT_ALL == pwdinfo->wfd_info->scan_result_type )
 317         {
 318
 319         }
 320         else if ( ( SCAN_RESULT_P2P_ONLY == pwdinfo->wfd_info->scan_result_type ) ||
 321                       ( SCAN_RESULT_WFD_TYPE == pwdinfo->wfd_info->scan_result_type ) )
 322 #endif // CONFIG_WFD
 323         {
 324                 if(!rtw_p2p_chk_state(pwdinfo, P2P_STATE_NONE))
 325                 {
 326                         u32     blnGotP2PIE = _FALSE;
 327
 328                         //      User is doing the P2P device discovery
 329                         //      The prefix of SSID should be "DIRECT-" and the IE should contains the P2P IE.
 330                         //      If not, the driver should ignore this AP and go to the next AP.
 331
 332                         //      Verifying the SSID
 333                         if (!memcmp(pnetwork->network.Ssid.Ssid, pwdinfo->p2p_wildcard_ssid, P2P_WILDCARD_SSID_LEN))
 334                         {
 335                                 u32     p2pielen = 0;
 336
 337                                 if (pnetwork->network.Reserved[0] == 2) { // Probe Request
 338                                         //      Verifying the P2P IE
 339                                         if ( rtw_get_p2p_ie( pnetwork->network.IEs, pnetwork->network.IELength, NULL, &p2pielen) )
 340                                         {
 341                                                 blnGotP2PIE = _TRUE;
 342                                         }
 343                                 } else { // Beacon or Probe Respones
 344                                         //      Verifying the P2P IE
 345                                         if ( rtw_get_p2p_ie( &pnetwork->network.IEs[12], pnetwork->network.IELength - 12, NULL, &p2pielen) )
 346                                         {
 347                                                 blnGotP2PIE = _TRUE;
 348                                         }
 349                                 }
 350                         }
 351
 352                         if ( blnGotP2PIE == _FALSE )
 353                         {
 354                                 return start;
 355                         }
 356
 357                 }
 358         }
 359
 360 #ifdef CONFIG_WFD
 361         if ( SCAN_RESULT_WFD_TYPE == pwdinfo->wfd_info->scan_result_type )
 362         {
 363                 u32     blnGotWFD = _FALSE;
 364                 u8      wfd_ie[ 128 ] = { 0x00 };
 365                 uint    wfd_ielen = 0;
 366
 367                 if ( rtw_get_wfd_ie( &pnetwork->network.IEs[12], pnetwork->network.IELength - 12,  wfd_ie, &wfd_ielen ) )
 368                 {
 369                         u8      wfd_devinfo[ 6 ] = { 0x00 };
 370                         uint    wfd_devlen = 6;
 371
 372                         if ( rtw_get_wfd_attr_content( wfd_ie, wfd_ielen, WFD_ATTR_DEVICE_INFO, wfd_devinfo, &wfd_devlen) )
 373                         {
 374                                 if ( pwdinfo->wfd_info->wfd_device_type == WFD_DEVINFO_PSINK )
 375                                 {
 376                                         //      the first two bits will indicate the WFD device type
 377                                         if ( ( wfd_devinfo[ 1 ] & 0x03 ) == WFD_DEVINFO_SOURCE )
 378                                         {
 379                                                 //      If this device is Miracast PSink device, the scan reuslt should just provide the Miracast source.
 380                                                 blnGotWFD = _TRUE;
 381                                         }
 382                                 }
 383                                 else if ( pwdinfo->wfd_info->wfd_device_type == WFD_DEVINFO_SOURCE )
 384                                 {
 385                                         //      the first two bits will indicate the WFD device type
 386                                         if ( ( wfd_devinfo[ 1 ] & 0x03 ) == WFD_DEVINFO_PSINK )
 387                                         {
 388                                                 //      If this device is Miracast source device, the scan reuslt should just provide the Miracast PSink.
 389                                                 //      Todo: How about the SSink?!
 390                                                 blnGotWFD = _TRUE;
 391                                         }
 392                                 }
 393                         }
 394                 }
 395
 396                 if ( blnGotWFD == _FALSE )
 397                 {
 398                         return start;
 399                 }
 400         }
 401 #endif // CONFIG_WFD
 402
 403 #endif //CONFIG_P2P
 404
 405         /*  AP MAC address  */
 406         iwe.cmd = SIOCGIWAP;
 407         iwe.u.ap_addr.sa_family = ARPHRD_ETHER;
 408
 409         memcpy(iwe.u.ap_addr.sa_data, pnetwork->network.MacAddress, ETH_ALEN);
 410         start = iwe_stream_add_event(info, start, stop, &iwe, IW_EV_ADDR_LEN);
 411
 412         /* Add the ESSID */
 413         iwe.cmd = SIOCGIWESSID;
 414         iwe.u.data.flags = 1;
 415         iwe.u.data.length = min((u16)pnetwork->network.Ssid.SsidLength, (u16)32);
 416         start = iwe_stream_add_point(info, start, stop, &iwe, pnetwork->network.Ssid.Ssid);
 417
 418         //parsing HT_CAP_IE
 419         p = rtw_get_ie(&pnetwork->network.IEs[12], _HT_CAPABILITY_IE_, &ht_ielen, pnetwork->network.IELength-12);
 420
 421         if(p && ht_ielen>0)
 422         {
 423                 struct rtw_ieee80211_ht_cap *pht_capie;
 424                 ht_cap = _TRUE;
 425                 pht_capie = (struct rtw_ieee80211_ht_cap *)(p+2);
 426                 memcpy(&mcs_rate , pht_capie->supp_mcs_set, 2);
 427                 bw_40MHz = (pht_capie->cap_info&IEEE80211_HT_CAP_SUP_WIDTH) ? 1:0;
 428                 short_GI = (pht_capie->cap_info&(IEEE80211_HT_CAP_SGI_20|IEEE80211_HT_CAP_SGI_40)) ? 1:0;
 429         }
 430
 431         /* Add the protocol name */
 432         iwe.cmd = SIOCGIWNAME;
 433         if ((rtw_is_cckratesonly_included((u8*)&pnetwork->network.SupportedRates)) == _TRUE)
 434         {
 435                 if(ht_cap == _TRUE)
 436                         snprintf(iwe.u.name, IFNAMSIZ, "IEEE 802.11bn");
 437                 else
 438                 snprintf(iwe.u.name, IFNAMSIZ, "IEEE 802.11b");
 439         }
 440         else if ((rtw_is_cckrates_included((u8*)&pnetwork->network.SupportedRates)) == _TRUE)
 441         {
 442                 if(ht_cap == _TRUE)
 443                         snprintf(iwe.u.name, IFNAMSIZ, "IEEE 802.11bgn");
 444                 else
 445                 snprintf(iwe.u.name, IFNAMSIZ, "IEEE 802.11bg");
 446         }
 447         else
 448         {
 449                 if(pnetwork->network.Configuration.DSConfig > 14)
 450                 {
 451                         if(ht_cap == _TRUE)
 452                                 snprintf(iwe.u.name, IFNAMSIZ, "IEEE 802.11an");
 453                         else
 454                                 snprintf(iwe.u.name, IFNAMSIZ, "IEEE 802.11a");
 455                 }
 456                 else
 457                 {
 458                         if(ht_cap == _TRUE)
 459                                 snprintf(iwe.u.name, IFNAMSIZ, "IEEE 802.11gn");
 460                         else
 461                                 snprintf(iwe.u.name, IFNAMSIZ, "IEEE 802.11g");
 462                 }
 463         }
 464
 465         start = iwe_stream_add_event(info, start, stop, &iwe, IW_EV_CHAR_LEN);
 466
 467           /* Add mode */
 468         iwe.cmd = SIOCGIWMODE;
 469         memcpy((u8 *)&cap, rtw_get_capability_from_ie(pnetwork->network.IEs), 2);
 470
 471
 472         cap = le16_to_cpu(cap);
 473
 474         if(cap & (WLAN_CAPABILITY_IBSS |WLAN_CAPABILITY_BSS)){
 475                 if (cap & WLAN_CAPABILITY_BSS)
 476                         iwe.u.mode = IW_MODE_MASTER;
 477                 else
 478                         iwe.u.mode = IW_MODE_ADHOC;
 479
 480                 start = iwe_stream_add_event(info, start, stop, &iwe, IW_EV_UINT_LEN);
 481         }
 482
 483         if(pnetwork->network.Configuration.DSConfig<1 /*|| pnetwork->network.Configuration.DSConfig>14*/)
 484                 pnetwork->network.Configuration.DSConfig = 1;
 485
 486          /* Add frequency/channel */
 487         iwe.cmd = SIOCGIWFREQ;
 488         iwe.u.freq.m = rtw_ch2freq(pnetwork->network.Configuration.DSConfig) * 100000;
 489         iwe.u.freq.e = 1;
 490         iwe.u.freq.i = pnetwork->network.Configuration.DSConfig;
 491         start = iwe_stream_add_event(info, start, stop, &iwe, IW_EV_FREQ_LEN);
 492
 493         /* Add encryption capability */
 494         iwe.cmd = SIOCGIWENCODE;
 495         if (cap & WLAN_CAPABILITY_PRIVACY)
 496                 iwe.u.data.flags = IW_ENCODE_ENABLED | IW_ENCODE_NOKEY;
 497         else
 498                 iwe.u.data.flags = IW_ENCODE_DISABLED;
 499         iwe.u.data.length = 0;
 500         start = iwe_stream_add_point(info, start, stop, &iwe, pnetwork->network.Ssid.Ssid);
 501
 502         /*Add basic and extended rates */
 503         max_rate = 0;
 504         p = custom;
 505         p += snprintf(p, MAX_CUSTOM_LEN - (p - custom), " Rates (Mb/s): ");
 506         while(pnetwork->network.SupportedRates[i]!=0)
 507         {
 508                 rate = pnetwork->network.SupportedRates[i]&0x7F;
 509                 if (rate > max_rate)
 510                         max_rate = rate;
 511                 p += snprintf(p, MAX_CUSTOM_LEN - (p - custom),
 512                               "%d%s ", rate >> 1, (rate & 1) ? ".5" : "");
 513                 i++;
 514         }
 515
 516         if(ht_cap == _TRUE)
 517         {
 518                 if(mcs_rate&0x8000)//MCS15
 519                 {
 520                         max_rate = (bw_40MHz) ? ((short_GI)?300:270):((short_GI)?144:130);
 521
 522                 }
 523                 else if(mcs_rate&0x0080)//MCS7
 524                 {
 525                         max_rate = (bw_40MHz) ? ((short_GI)?150:135):((short_GI)?72:65);
 526                 }
 527                 else//default MCS7
 528                 {
 529                         //DBG_8723A("wx_get_scan, mcs_rate_bitmap=0x%x\n", mcs_rate);
 530                         max_rate = (bw_40MHz) ? ((short_GI)?150:135):((short_GI)?72:65);
 531                 }
 532
 533                 max_rate = max_rate*2;//Mbps/2;
 534         }
 535
 536         iwe.cmd = SIOCGIWRATE;
 537         iwe.u.bitrate.fixed = iwe.u.bitrate.disabled = 0;
 538         iwe.u.bitrate.value = max_rate * 500000;
 539         start = iwe_stream_add_event(info, start, stop, &iwe, IW_EV_PARAM_LEN);
 540
 541         //parsing WPA/WPA2 IE
 542         {
 543                 u8 buf[MAX_WPA_IE_LEN];
 544                 u8 wpa_ie[255],rsn_ie[255];
 545                 u16 wpa_len=0,rsn_len=0;
 546                 u8 *p;
 547                 int out_len=0;
 548                 out_len=rtw_get_sec_ie(pnetwork->network.IEs ,pnetwork->network.IELength,rsn_ie,&rsn_len,wpa_ie,&wpa_len);
 549                 RT_TRACE(_module_rtl871x_mlme_c_,_drv_info_,("rtw_wx_get_scan: ssid=%s\n",pnetwork->network.Ssid.Ssid));
 550                 RT_TRACE(_module_rtl871x_mlme_c_,_drv_info_,("rtw_wx_get_scan: wpa_len=%d rsn_len=%d\n",wpa_len,rsn_len));
 551
 552                 if (wpa_len > 0)
 553                 {
 554                         p=buf;
 555                         memset(buf, 0, MAX_WPA_IE_LEN);
 556                         p += sprintf(p, "wpa_ie=");
 557                         for (i = 0; i < wpa_len; i++) {
 558                                 p += sprintf(p, "%02x", wpa_ie[i]);
 559                         }
 560
 561                         memset(&iwe, 0, sizeof(iwe));
 562                         iwe.cmd = IWEVCUSTOM;
 563                         iwe.u.data.length = strlen(buf);
 564                         start = iwe_stream_add_point(info, start, stop, &iwe,buf);
 565
 566                         memset(&iwe, 0, sizeof(iwe));
 567                         iwe.cmd =IWEVGENIE;
 568                         iwe.u.data.length = wpa_len;
 569                         start = iwe_stream_add_point(info, start, stop, &iwe, wpa_ie);
 570                 }
 571                 if (rsn_len > 0)
 572                 {
 573                         p = buf;
 574                         memset(buf, 0, MAX_WPA_IE_LEN);
 575                         p += sprintf(p, "rsn_ie=");
 576                         for (i = 0; i < rsn_len; i++) {
 577                                 p += sprintf(p, "%02x", rsn_ie[i]);
 578                         }
 579                         memset(&iwe, 0, sizeof(iwe));
 580                         iwe.cmd = IWEVCUSTOM;
 581                         iwe.u.data.length = strlen(buf);
 582                         start = iwe_stream_add_point(info, start, stop, &iwe,buf);
 583
 584                         memset(&iwe, 0, sizeof(iwe));
 585                         iwe.cmd =IWEVGENIE;
 586                         iwe.u.data.length = rsn_len;
 587                         start = iwe_stream_add_point(info, start, stop, &iwe, rsn_ie);
 588                 }
 589         }
 590
 591         { //parsing WPS IE
 592                 uint cnt = 0,total_ielen;
 593                 u8 *wpsie_ptr=NULL;
 594                 uint wps_ielen = 0;
 595
 596                 u8 *ie_ptr = pnetwork->network.IEs +_FIXED_IE_LENGTH_;
 597                 total_ielen= pnetwork->network.IELength - _FIXED_IE_LENGTH_;
 598
 599                 while(cnt < total_ielen)
 600                 {
 601                         if(rtw_is_wps_ie(&ie_ptr[cnt], &wps_ielen) && (wps_ielen>2))
 602                         {
 603                                 wpsie_ptr = &ie_ptr[cnt];
 604                                 iwe.cmd =IWEVGENIE;
 605                                 iwe.u.data.length = (u16)wps_ielen;
 606                                 start = iwe_stream_add_point(info, start, stop, &iwe, wpsie_ptr);
 607                         }
 608                         cnt+=ie_ptr[cnt+1]+2; //goto next
 609                 }
 610         }
 611
 612 #ifdef CONFIG_WAPI_SUPPORT
 613         {
 614                 int out_len_wapi=0;
 615                 /* here use static for stack size */
 616                 static u8 buf_wapi[MAX_WAPI_IE_LEN];
 617                 static u8 wapi_ie[MAX_WAPI_IE_LEN];
 618                 u16 wapi_len=0;
 619                 u16  i;
 620
 621                 memset(buf_wapi, 0, MAX_WAPI_IE_LEN);
 622                 memset(wapi_ie, 0, MAX_WAPI_IE_LEN);
 623
 624                 out_len_wapi=rtw_get_wapi_ie(pnetwork->network.IEs ,pnetwork->network.IELength,wapi_ie,&wapi_len);
 625                 RT_TRACE(_module_rtl871x_mlme_c_,_drv_info_,("rtw_wx_get_scan: ssid=%s\n",pnetwork->network.Ssid.Ssid));
 626                 RT_TRACE(_module_rtl871x_mlme_c_,_drv_info_,("rtw_wx_get_scan: wapi_len=%d \n",wapi_len));
 627
 628                 DBG_8723A("rtw_wx_get_scan: %s ",pnetwork->network.Ssid.Ssid);
 629                 DBG_8723A("rtw_wx_get_scan: ssid = %d ",wapi_len);
 630
 631
 632                 if (wapi_len > 0)
 633                 {
 634                         p=buf_wapi;
 635                         memset(buf_wapi, 0, MAX_WAPI_IE_LEN);
 636                         p += sprintf(p, "wapi_ie=");
 637                         for (i = 0; i < wapi_len; i++) {
 638                                 p += sprintf(p, "%02x", wapi_ie[i]);
 639                         }
 640
 641                         memset(&iwe, 0, sizeof(iwe));
 642                         iwe.cmd = IWEVCUSTOM;
 643                         iwe.u.data.length = strlen(buf_wapi);
 644                         start = iwe_stream_add_point(info, start, stop, &iwe,buf_wapi);
 645
 646                         memset(&iwe, 0, sizeof(iwe));
 647                         iwe.cmd =IWEVGENIE;
 648                         iwe.u.data.length = wapi_len;
 649                         start = iwe_stream_add_point(info, start, stop, &iwe, wapi_ie);
 650                 }
 651         }
 652 #endif
 653
 654 {
 655         struct mlme_priv *pmlmepriv = &(padapter->mlmepriv);
 656         u8 ss, sq;
 657
 658         /* Add quality statistics */
 659         iwe.cmd = IWEVQUAL;
 660         iwe.u.qual.updated = IW_QUAL_QUAL_UPDATED | IW_QUAL_LEVEL_UPDATED | IW_QUAL_NOISE_INVALID
 661         #ifdef CONFIG_SIGNAL_DISPLAY_DBM
 662                 | IW_QUAL_DBM
 663         #endif
 664         ;
 665
 666         if ( check_fwstate(pmlmepriv, _FW_LINKED)== _TRUE &&
 667                 is_same_network(&pmlmepriv->cur_network.network, &pnetwork->network)) {
 668                 ss = padapter->recvpriv.signal_strength;
 669                 sq = padapter->recvpriv.signal_qual;
 670         } else {
 671                 ss = pnetwork->network.PhyInfo.SignalStrength;
 672                 sq = pnetwork->network.PhyInfo.SignalQuality;
 673         }
 674
 675
 676         #ifdef CONFIG_SIGNAL_DISPLAY_DBM
 677         iwe.u.qual.level = (u8) translate_percentage_to_dbm(ss);//dbm
 678         #else
 679         iwe.u.qual.level = (u8)ss;//%
 680         #ifdef CONFIG_BT_COEXIST
 681         BT_SignalCompensation(padapter, &iwe.u.qual.level, NULL);
 682         #endif // CONFIG_BT_COEXIST
 683         #endif
 684
 685         iwe.u.qual.qual = (u8)sq;   // signal quality
 686
 687         iwe.u.qual.noise = 0; // noise level
 688
 689         //DBG_8723A("iqual=%d, ilevel=%d, inoise=%d, iupdated=%d\n", iwe.u.qual.qual, iwe.u.qual.level , iwe.u.qual.noise, iwe.u.qual.updated);
 690
 691         start = iwe_stream_add_event(info, start, stop, &iwe, IW_EV_QUAL_LEN);
 692 }
 693
 694         return start;
 695 }
 696
 697 static int wpa_set_auth_algs(struct net_device *dev, u32 value)
 698 {
 699         _adapter *padapter = (_adapter *) rtw_netdev_priv(dev);
 700         int ret = 0;
 701
 702         if ((value & AUTH_ALG_SHARED_KEY)&&(value & AUTH_ALG_OPEN_SYSTEM))
 703         {
 704                 DBG_8723A("wpa_set_auth_algs, AUTH_ALG_SHARED_KEY and  AUTH_ALG_OPEN_SYSTEM [value:0x%x]\n",value);
 705                 padapter->securitypriv.ndisencryptstatus = Ndis802_11Encryption1Enabled;
 706                 padapter->securitypriv.ndisauthtype = Ndis802_11AuthModeAutoSwitch;
 707                 padapter->securitypriv.dot11AuthAlgrthm = dot11AuthAlgrthm_Auto;
 708         }
 709         else if (value & AUTH_ALG_SHARED_KEY)
 710         {
 711                 DBG_8723A("wpa_set_auth_algs, AUTH_ALG_SHARED_KEY  [value:0x%x]\n",value);
 712                 padapter->securitypriv.ndisencryptstatus = Ndis802_11Encryption1Enabled;
 713
 714                 padapter->securitypriv.ndisauthtype = Ndis802_11AuthModeShared;
 715                 padapter->securitypriv.dot11AuthAlgrthm = dot11AuthAlgrthm_Shared;
 716         }
 717         else if(value & AUTH_ALG_OPEN_SYSTEM)
 718         {
 719                 DBG_8723A("wpa_set_auth_algs, AUTH_ALG_OPEN_SYSTEM\n");
 720                 //padapter->securitypriv.ndisencryptstatus = Ndis802_11EncryptionDisabled;
 721                 if(padapter->securitypriv.ndisauthtype < Ndis802_11AuthModeWPAPSK)
 722                 {
 723                         padapter->securitypriv.ndisauthtype = Ndis802_11AuthModeOpen;
 724                         padapter->securitypriv.dot11AuthAlgrthm = dot11AuthAlgrthm_Open;
 725                 }
 726
 727         }
 728         else if(value & AUTH_ALG_LEAP)
 729         {
 730                 DBG_8723A("wpa_set_auth_algs, AUTH_ALG_LEAP\n");
 731         }
 732         else
 733         {
 734                 DBG_8723A("wpa_set_auth_algs, error!\n");
 735                 ret = -EINVAL;
 736         }
 737
 738         return ret;
 739
 740 }
 741
 742 static int wpa_set_encryption(struct net_device *dev, struct ieee_param *param, u32 param_len)
 743 {
 744         int ret = 0;
 745         u32 wep_key_idx, wep_key_len,wep_total_len;
 746         NDIS_802_11_WEP  *pwep = NULL;
 747         _adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
 748         struct mlme_priv        *pmlmepriv = &padapter->mlmepriv;
 749         struct security_priv *psecuritypriv = &padapter->securitypriv;
 750 #ifdef CONFIG_P2P
 751         struct wifidirect_info* pwdinfo = &padapter->wdinfo;
 752 #endif //CONFIG_P2P
 753
 754 _func_enter_;
 755
 756         param->u.crypt.err = 0;
 757         param->u.crypt.alg[IEEE_CRYPT_ALG_NAME_LEN - 1] = '\0';
 758
 759         if (param_len < (u32) ((u8 *) param->u.crypt.key - (u8 *) param) + param->u.crypt.key_len)
 760         {
 761                 ret =  -EINVAL;
 762                 goto exit;
 763         }
 764
 765         if (param->sta_addr[0] == 0xff && param->sta_addr[1] == 0xff &&
 766             param->sta_addr[2] == 0xff && param->sta_addr[3] == 0xff &&
 767             param->sta_addr[4] == 0xff && param->sta_addr[5] == 0xff)
 768         {
 769                 if (param->u.crypt.idx >= WEP_KEYS)
 770                 {
 771                         ret = -EINVAL;
 772                         goto exit;
 773                 }
 774         } else {
 775 #ifdef CONFIG_WAPI_SUPPORT
 776                         if (strcmp(param->u.crypt.alg, "SMS4"))
 777 #endif
 778                         {
 779
 780                 ret = -EINVAL;
 781                 goto exit;
 782         }
 783         }
 784
 785         if (strcmp(param->u.crypt.alg, "WEP") == 0)
 786         {
 787                 RT_TRACE(_module_rtl871x_ioctl_os_c,_drv_err_,("wpa_set_encryption, crypt.alg = WEP\n"));
 788                 DBG_8723A("wpa_set_encryption, crypt.alg = WEP\n");
 789
 790                 padapter->securitypriv.ndisencryptstatus = Ndis802_11Encryption1Enabled;
 791                 padapter->securitypriv.dot11PrivacyAlgrthm=_WEP40_;
 792                 padapter->securitypriv.dot118021XGrpPrivacy=_WEP40_;
 793
 794                 wep_key_idx = param->u.crypt.idx;
 795                 wep_key_len = param->u.crypt.key_len;
 796
 797                 RT_TRACE(_module_rtl871x_ioctl_os_c,_drv_info_,("(1)wep_key_idx=%d\n", wep_key_idx));
 798                 DBG_8723A("(1)wep_key_idx=%d\n", wep_key_idx);
 799
 800                 if (wep_key_idx > WEP_KEYS)
 801                         return -EINVAL;
 802
 803                 RT_TRACE(_module_rtl871x_ioctl_os_c,_drv_info_,("(2)wep_key_idx=%d\n", wep_key_idx));
 804
 805                 if (wep_key_len > 0)
 806                 {
 807                         wep_key_len = wep_key_len <= 5 ? 5 : 13;
 808                         wep_total_len = wep_key_len + FIELD_OFFSET(NDIS_802_11_WEP, KeyMaterial);
 809                         pwep =(NDIS_802_11_WEP   *) kzalloc(wep_total_len, GFP_KERNEL);
 810                         if (pwep == NULL){
 811                                 RT_TRACE(_module_rtl871x_ioctl_os_c,_drv_err_,(" wpa_set_encryption: pwep allocate fail !!!\n"));
 812                                 goto exit;
 813                         }
 814
 815                         pwep->KeyLength = wep_key_len;
 816                         pwep->Length = wep_total_len;
 817
 818                         if(wep_key_len==13)
 819                         {
 820                                 padapter->securitypriv.dot11PrivacyAlgrthm=_WEP104_;
 821                                 padapter->securitypriv.dot118021XGrpPrivacy=_WEP104_;
 822                         }
 823                 }
 824                 else {
 825                         ret = -EINVAL;
 826                         goto exit;
 827                 }
 828
 829                 pwep->KeyIndex = wep_key_idx;
 830                 pwep->KeyIndex |= 0x80000000;
 831
 832                 memcpy(pwep->KeyMaterial,  param->u.crypt.key, pwep->KeyLength);
 833
 834                 if(param->u.crypt.set_tx)
 835                 {
 836                         DBG_8723A("wep, set_tx=1\n");
 837
 838                         if(rtw_set_802_11_add_wep(padapter, pwep) == (u8)_FAIL)
 839                         {
 840                                 ret = -EOPNOTSUPP ;
 841                         }
 842                 }
 843                 else
 844                 {
 845                         DBG_8723A("wep, set_tx=0\n");
 846
 847                         //don't update "psecuritypriv->dot11PrivacyAlgrthm" and
 848                         //"psecuritypriv->dot11PrivacyKeyIndex=keyid", but can rtw_set_key to fw/cam
 849
 850                         if (wep_key_idx >= WEP_KEYS) {
 851                                 ret = -EOPNOTSUPP ;
 852                                 goto exit;
 853                         }
 854
 855                       memcpy(&(psecuritypriv->dot11DefKey[wep_key_idx].skey[0]), pwep->KeyMaterial, pwep->KeyLength);
 856                         psecuritypriv->dot11DefKeylen[wep_key_idx]=pwep->KeyLength;
 857                         rtw_set_key(padapter, psecuritypriv, wep_key_idx, 0);
 858                 }
 859
 860                 goto exit;
 861         }
 862
 863         if(padapter->securitypriv.dot11AuthAlgrthm == dot11AuthAlgrthm_8021X) // 802_1x
 864         {
 865                 struct sta_info * psta,*pbcmc_sta;
 866                 struct sta_priv * pstapriv = &padapter->stapriv;
 867
 868                 if (check_fwstate(pmlmepriv, WIFI_STATION_STATE | WIFI_MP_STATE) == _TRUE) //sta mode
 869                 {
 870                         psta = rtw_get_stainfo(pstapriv, get_bssid(pmlmepriv));
 871                         if (psta == NULL) {
 872                                 //DEBUG_ERR( ("Set wpa_set_encryption: Obtain Sta_info fail \n"));
 873                         }
 874                         else
 875                         {
 876                                 //Jeff: don't disable ieee8021x_blocked while clearing key
 877                                 if (strcmp(param->u.crypt.alg, "none") != 0)
 878                                         psta->ieee8021x_blocked = _FALSE;
 879
 880                                 if((padapter->securitypriv.ndisencryptstatus == Ndis802_11Encryption2Enabled)||
 881                                                 (padapter->securitypriv.ndisencryptstatus ==  Ndis802_11Encryption3Enabled))
 882                                 {
 883                                         psta->dot118021XPrivacy = padapter->securitypriv.dot11PrivacyAlgrthm;
 884                                 }
 885
 886                                 if(param->u.crypt.set_tx ==1)//pairwise key
 887                                 {
 888                                         memcpy(psta->dot118021x_UncstKey.skey,  param->u.crypt.key, (param->u.crypt.key_len>16 ?16:param->u.crypt.key_len));
 889
 890                                         if(strcmp(param->u.crypt.alg, "TKIP") == 0)//set mic key
 891                                         {
 892                                                 //DEBUG_ERR(("\nset key length :param->u.crypt.key_len=%d\n", param->u.crypt.key_len));
 893                                                 memcpy(psta->dot11tkiptxmickey.skey, &(param->u.crypt.key[16]), 8);
 894                                                 memcpy(psta->dot11tkiprxmickey.skey, &(param->u.crypt.key[24]), 8);
 895
 896                                                 padapter->securitypriv.busetkipkey=_FALSE;
 897                                                 //_set_timer(&padapter->securitypriv.tkip_timer, 50);
 898                                         }
 899
 900                                         //DEBUG_ERR((" param->u.crypt.key_len=%d\n",param->u.crypt.key_len));
 901                                         DBG_8723A(" ~~~~set sta key:unicastkey\n");
 902
 903                                         rtw_setstakey_cmd(padapter, (unsigned char *)psta, _TRUE);
 904                                 }
 905                                 else//group key
 906                                 {
 907                                         memcpy(padapter->securitypriv.dot118021XGrpKey[param->u.crypt.idx].skey,  param->u.crypt.key,(param->u.crypt.key_len>16 ?16:param->u.crypt.key_len));
 908                                         memcpy(padapter->securitypriv.dot118021XGrptxmickey[param->u.crypt.idx].skey,&(param->u.crypt.key[16]),8);
 909                                         memcpy(padapter->securitypriv.dot118021XGrprxmickey[param->u.crypt.idx].skey,&(param->u.crypt.key[24]),8);
 910                                         padapter->securitypriv.binstallGrpkey = _TRUE;
 911                                         //DEBUG_ERR((" param->u.crypt.key_len=%d\n", param->u.crypt.key_len));
 912                                         DBG_8723A(" ~~~~set sta key:groupkey\n");
 913
 914                                         padapter->securitypriv.dot118021XGrpKeyid = param->u.crypt.idx;
 915
 916                                         rtw_set_key(padapter,&padapter->securitypriv,param->u.crypt.idx, 1);
 917 #ifdef CONFIG_P2P
 918                                         if(rtw_p2p_chk_state(pwdinfo, P2P_STATE_PROVISIONING_ING))
 919                                         {
 920                                                 rtw_p2p_set_state(pwdinfo, P2P_STATE_PROVISIONING_DONE);
 921                                         }
 922 #endif //CONFIG_P2P
 923
 924                                 }
 925                         }
 926
 927                         pbcmc_sta=rtw_get_bcmc_stainfo(padapter);
 928                         if(pbcmc_sta==NULL)
 929                         {
 930                                 //DEBUG_ERR( ("Set OID_802_11_ADD_KEY: bcmc stainfo is null \n"));
 931                         }
 932                         else
 933                         {
 934                                 //Jeff: don't disable ieee8021x_blocked while clearing key
 935                                 if (strcmp(param->u.crypt.alg, "none") != 0)
 936                                         pbcmc_sta->ieee8021x_blocked = _FALSE;
 937
 938                                 if((padapter->securitypriv.ndisencryptstatus == Ndis802_11Encryption2Enabled)||
 939                                                 (padapter->securitypriv.ndisencryptstatus ==  Ndis802_11Encryption3Enabled))
 940                                 {
 941                                         pbcmc_sta->dot118021XPrivacy = padapter->securitypriv.dot11PrivacyAlgrthm;
 942                                 }
 943                         }
 944                 }
 945                 else if(check_fwstate(pmlmepriv, WIFI_ADHOC_STATE)) //adhoc mode
 946                 {
 947                 }
 948         }
 949
 950 #ifdef CONFIG_WAPI_SUPPORT
 951         if (strcmp(param->u.crypt.alg, "SMS4") == 0)
 952         {
 953                 PRT_WAPI_T                      pWapiInfo = &padapter->wapiInfo;
 954                 PRT_WAPI_STA_INFO       pWapiSta;
 955                 u8                                      WapiASUEPNInitialValueSrc[16] = {0x36,0x5C,0x36,0x5C,0x36,0x5C,0x36,0x5C,0x36,0x5C,0x36,0x5C,0x36,0x5C,0x36,0x5C} ;
 956                 u8                                      WapiAEPNInitialValueSrc[16] = {0x37,0x5C,0x36,0x5C,0x36,0x5C,0x36,0x5C,0x36,0x5C,0x36,0x5C,0x36,0x5C,0x36,0x5C} ;
 957                 u8                                      WapiAEMultiCastPNInitialValueSrc[16] = {0x36,0x5C,0x36,0x5C,0x36,0x5C,0x36,0x5C,0x36,0x5C,0x36,0x5C,0x36,0x5C,0x36,0x5C} ;
 958
 959                 if(param->u.crypt.set_tx == 1)
 960                 {
 961                         list_for_each_entry(pWapiSta, &pWapiInfo->wapiSTAUsedList, list) {
 962                                 if(!memcmp(pWapiSta->PeerMacAddr,param->sta_addr,6))
 963                                 {
 964                                         memcpy(pWapiSta->lastTxUnicastPN,WapiASUEPNInitialValueSrc,16);
 965
 966                                         pWapiSta->wapiUsk.bSet = true;
 967                                         memcpy(pWapiSta->wapiUsk.dataKey,param->u.crypt.key,16);
 968                                         memcpy(pWapiSta->wapiUsk.micKey,param->u.crypt.key+16,16);
 969                                         pWapiSta->wapiUsk.keyId = param->u.crypt.idx ;
 970                                         pWapiSta->wapiUsk.bTxEnable = true;
 971
 972                                         memcpy(pWapiSta->lastRxUnicastPNBEQueue,WapiAEPNInitialValueSrc,16);
 973                                         memcpy(pWapiSta->lastRxUnicastPNBKQueue,WapiAEPNInitialValueSrc,16);
 974                                         memcpy(pWapiSta->lastRxUnicastPNVIQueue,WapiAEPNInitialValueSrc,16);
 975                                         memcpy(pWapiSta->lastRxUnicastPNVOQueue,WapiAEPNInitialValueSrc,16);
 976                                         memcpy(pWapiSta->lastRxUnicastPN,WapiAEPNInitialValueSrc,16);
 977                                         pWapiSta->wapiUskUpdate.bTxEnable = false;
 978                                         pWapiSta->wapiUskUpdate.bSet = false;
 979
 980                                         if (psecuritypriv->sw_encrypt== false || psecuritypriv->sw_decrypt == false)
 981                                         {
 982                                                 //set unicast key for ASUE
 983                                                 rtw_wapi_set_key(padapter, &pWapiSta->wapiUsk, pWapiSta, false, false);
 984                                         }
 985                                 }
 986                         }
 987                 }
 988                 else
 989                 {
 990                         list_for_each_entry(pWapiSta, &pWapiInfo->wapiSTAUsedList, list) {
 991                                 if(!memcmp(pWapiSta->PeerMacAddr,get_bssid(pmlmepriv),6))
 992                                 {
 993                                         pWapiSta->wapiMsk.bSet = true;
 994                                         memcpy(pWapiSta->wapiMsk.dataKey,param->u.crypt.key,16);
 995                                         memcpy(pWapiSta->wapiMsk.micKey,param->u.crypt.key+16,16);
 996                                         pWapiSta->wapiMsk.keyId = param->u.crypt.idx ;
 997                                         pWapiSta->wapiMsk.bTxEnable = false;
 998                                         if(!pWapiSta->bSetkeyOk)
 999                                                 pWapiSta->bSetkeyOk = true;
1000                                         pWapiSta->bAuthenticateInProgress = false;
1001
1002                                         memcpy(pWapiSta->lastRxMulticastPN, WapiAEMultiCastPNInitialValueSrc, 16);
1003
1004                                         if (psecuritypriv->sw_decrypt == false)
1005                                         {
1006                                                 //set rx broadcast key for ASUE
1007                                                 rtw_wapi_set_key(padapter, &pWapiSta->wapiMsk, pWapiSta, true, false);
1008                                         }
1009                                 }
1010
1011                         }
1012                 }
1013         }
1014 #endif
1015
1016 exit:
1017
1018         if (pwep) {
1019                 kfree((u8 *)pwep);
1020         }
1021
1022 _func_exit_;
1023
1024         return ret;
1025 }
1026
1027 static int rtw_set_wpa_ie(_adapter *padapter, char *pie, unsigned short ielen)
1028 {
1029         u8 *buf=NULL, *pos=NULL;
1030         u32 left;
1031         int group_cipher = 0, pairwise_cipher = 0;
1032         int ret = 0;
1033         u8 null_addr[]= {0,0,0,0,0,0};
1034 #ifdef CONFIG_P2P
1035         struct wifidirect_info* pwdinfo = &padapter->wdinfo;
1036 #endif //CONFIG_P2P
1037
1038         if((ielen > MAX_WPA_IE_LEN) || (pie == NULL)){
1039                 _clr_fwstate_(&padapter->mlmepriv, WIFI_UNDER_WPS);
1040                 if(pie == NULL)
1041                         return ret;
1042                 else
1043                         return -EINVAL;
1044         }
1045
1046         if(ielen)
1047         {
1048                 buf = kmalloc(ielen, GFP_KERNEL);
1049                 if (buf == NULL){
1050                         ret =  -ENOMEM;
1051                         goto exit;
1052                 }
1053
1054                 memcpy(buf, pie , ielen);
1055
1056                 //dump
1057                 {
1058                         int i;
1059                         DBG_8723A("\n wpa_ie(length:%d):\n", ielen);
1060                         for(i=0;i<ielen;i=i+8)
1061                                 DBG_8723A("0x%.2x 0x%.2x 0x%.2x 0x%.2x 0x%.2x 0x%.2x 0x%.2x 0x%.2x \n",buf[i],buf[i+1],buf[i+2],buf[i+3],buf[i+4],buf[i+5],buf[i+6],buf[i+7]);
1062                 }
1063
1064                 pos = buf;
1065                 if(ielen < RSN_HEADER_LEN){
1066                         RT_TRACE(_module_rtl871x_ioctl_os_c,_drv_err_,("Ie len too short %d\n", ielen));
1067                         ret  = -1;
1068                         goto exit;
1069                 }
1070
1071 #if 0
1072                 pos += RSN_HEADER_LEN;
1073                 left  = ielen - RSN_HEADER_LEN;
1074
1075                 if (left >= RSN_SELECTOR_LEN){
1076                         pos += RSN_SELECTOR_LEN;
1077                         left -= RSN_SELECTOR_LEN;
1078                 }
1079                 else if (left > 0){
1080                         RT_TRACE(_module_rtl871x_ioctl_os_c,_drv_err_,("Ie length mismatch, %u too much \n", left));
1081                         ret =-1;
1082                         goto exit;
1083                 }
1084 #endif
1085
1086                 if(rtw_parse_wpa_ie(buf, ielen, &group_cipher, &pairwise_cipher, NULL) == _SUCCESS)
1087                 {
1088                         padapter->securitypriv.dot11AuthAlgrthm= dot11AuthAlgrthm_8021X;
1089                         padapter->securitypriv.ndisauthtype=Ndis802_11AuthModeWPAPSK;
1090                         memcpy(padapter->securitypriv.supplicant_ie, &buf[0], ielen);
1091                 }
1092
1093                 if(rtw_parse_wpa2_ie(buf, ielen, &group_cipher, &pairwise_cipher, NULL) == _SUCCESS)
1094                 {
1095                         padapter->securitypriv.dot11AuthAlgrthm= dot11AuthAlgrthm_8021X;
1096                         padapter->securitypriv.ndisauthtype=Ndis802_11AuthModeWPA2PSK;
1097                         memcpy(padapter->securitypriv.supplicant_ie, &buf[0], ielen);
1098                 }
1099
1100                 if (group_cipher == 0)
1101                 {
1102                         group_cipher = WPA_CIPHER_NONE;
1103                 }
1104                 if (pairwise_cipher == 0)
1105                 {
1106                         pairwise_cipher = WPA_CIPHER_NONE;
1107                 }
1108
1109                 switch(group_cipher)
1110                 {
1111                         case WPA_CIPHER_NONE:
1112                                 padapter->securitypriv.dot118021XGrpPrivacy=_NO_PRIVACY_;
1113                                 padapter->securitypriv.ndisencryptstatus=Ndis802_11EncryptionDisabled;
1114                                 break;
1115                         case WPA_CIPHER_WEP40:
1116                                 padapter->securitypriv.dot118021XGrpPrivacy=_WEP40_;
1117                                 padapter->securitypriv.ndisencryptstatus = Ndis802_11Encryption1Enabled;
1118                                 break;
1119                         case WPA_CIPHER_TKIP:
1120                                 padapter->securitypriv.dot118021XGrpPrivacy=_TKIP_;
1121                                 padapter->securitypriv.ndisencryptstatus = Ndis802_11Encryption2Enabled;
1122                                 break;
1123                         case WPA_CIPHER_CCMP:
1124                                 padapter->securitypriv.dot118021XGrpPrivacy=_AES_;
1125                                 padapter->securitypriv.ndisencryptstatus = Ndis802_11Encryption3Enabled;
1126                                 break;
1127                         case WPA_CIPHER_WEP104:
1128                                 padapter->securitypriv.dot118021XGrpPrivacy=_WEP104_;
1129                                 padapter->securitypriv.ndisencryptstatus = Ndis802_11Encryption1Enabled;
1130                                 break;
1131                 }
1132
1133                 switch(pairwise_cipher)
1134                 {
1135                         case WPA_CIPHER_NONE:
1136                                 padapter->securitypriv.dot11PrivacyAlgrthm=_NO_PRIVACY_;
1137                                 padapter->securitypriv.ndisencryptstatus=Ndis802_11EncryptionDisabled;
1138                                 break;
1139                         case WPA_CIPHER_WEP40:
1140                                 padapter->securitypriv.dot11PrivacyAlgrthm=_WEP40_;
1141                                 padapter->securitypriv.ndisencryptstatus = Ndis802_11Encryption1Enabled;
1142                                 break;
1143                         case WPA_CIPHER_TKIP:
1144                                 padapter->securitypriv.dot11PrivacyAlgrthm=_TKIP_;
1145                                 padapter->securitypriv.ndisencryptstatus = Ndis802_11Encryption2Enabled;
1146                                 break;
1147                         case WPA_CIPHER_CCMP:
1148                                 padapter->securitypriv.dot11PrivacyAlgrthm=_AES_;
1149                                 padapter->securitypriv.ndisencryptstatus = Ndis802_11Encryption3Enabled;
1150                                 break;
1151                         case WPA_CIPHER_WEP104:
1152                                 padapter->securitypriv.dot11PrivacyAlgrthm=_WEP104_;
1153                                 padapter->securitypriv.ndisencryptstatus = Ndis802_11Encryption1Enabled;
1154                                 break;
1155                 }
1156
1157                 _clr_fwstate_(&padapter->mlmepriv, WIFI_UNDER_WPS);
1158                 {//set wps_ie
1159                         u16 cnt = 0;
1160                         u8 eid, wps_oui[4]={0x0,0x50,0xf2,0x04};
1161
1162                         while( cnt < ielen )
1163                         {
1164                                 eid = buf[cnt];
1165
1166                                 if ((eid ==_VENDOR_SPECIFIC_IE_) &&
1167                                     (!memcmp(&buf[cnt+2], wps_oui, 4))) {
1168                                         DBG_8723A("SET WPS_IE\n");
1169
1170                                         padapter->securitypriv.wps_ie_len = ( (buf[cnt+1]+2) < (MAX_WPA_IE_LEN<<2)) ? (buf[cnt+1]+2):(MAX_WPA_IE_LEN<<2);
1171
1172                                         memcpy(padapter->securitypriv.wps_ie, &buf[cnt], padapter->securitypriv.wps_ie_len);
1173
1174                                         set_fwstate(&padapter->mlmepriv, WIFI_UNDER_WPS);
1175
1176 #ifdef CONFIG_P2P
1177                                         if(rtw_p2p_chk_state(pwdinfo, P2P_STATE_GONEGO_OK))
1178                                         {
1179                                                 rtw_p2p_set_state(pwdinfo, P2P_STATE_PROVISIONING_ING);
1180                                         }
1181 #endif //CONFIG_P2P
1182                                         cnt += buf[cnt+1]+2;
1183
1184                                         break;
1185                                 } else {
1186                                         cnt += buf[cnt+1]+2; //goto next
1187                                 }
1188                         }
1189                 }
1190         }
1191
1192         //TKIP and AES disallow multicast packets until installing group key
1193         if(padapter->securitypriv.dot11PrivacyAlgrthm == _TKIP_
1194                 || padapter->securitypriv.dot11PrivacyAlgrthm == _TKIP_WTMIC_
1195                 || padapter->securitypriv.dot11PrivacyAlgrthm == _AES_)
1196                 //WPS open need to enable multicast
1197                 //|| check_fwstate(&padapter->mlmepriv, WIFI_UNDER_WPS) == _TRUE)
1198                 rtw_hal_set_hwreg(padapter, HW_VAR_OFF_RCR_AM, null_addr);
1199
1200         RT_TRACE(_module_rtl871x_ioctl_os_c, _drv_info_,
1201                  ("rtw_set_wpa_ie: pairwise_cipher=0x%08x padapter->securitypriv.ndisencryptstatus=%d padapter->securitypriv.ndisauthtype=%d\n",
1202                   pairwise_cipher, padapter->securitypriv.ndisencryptstatus, padapter->securitypriv.ndisauthtype));
1203
1204 exit:
1205
1206         if (buf)
1207                 kfree(buf);
1208
1209         return ret;
1210 }
1211
1212 static int rtw_wx_get_name(struct net_device *dev,
1213                              struct iw_request_info *info,
1214                              union iwreq_data *wrqu, char *extra)
1215 {
1216         _adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
1217         u16 cap;
1218         u32 ht_ielen = 0;
1219         char *p;
1220         u8 ht_cap=_FALSE;
1221         struct  mlme_priv       *pmlmepriv = &(padapter->mlmepriv);
1222         WLAN_BSSID_EX  *pcur_bss = &pmlmepriv->cur_network.network;
1223         NDIS_802_11_RATES_EX* prates = NULL;
1224
1225         RT_TRACE(_module_rtl871x_mlme_c_,_drv_info_,("cmd_code=%x\n", info->cmd));
1226
1227         _func_enter_;
1228
1229         if (check_fwstate(pmlmepriv, _FW_LINKED|WIFI_ADHOC_MASTER_STATE) == _TRUE)
1230         {
1231                 //parsing HT_CAP_IE
1232                 p = rtw_get_ie(&pcur_bss->IEs[12], _HT_CAPABILITY_IE_, &ht_ielen, pcur_bss->IELength-12);
1233                 if(p && ht_ielen>0)
1234                 {
1235                         ht_cap = _TRUE;
1236                 }
1237
1238                 prates = &pcur_bss->SupportedRates;
1239
1240                 if (rtw_is_cckratesonly_included((u8*)prates) == _TRUE)
1241                 {
1242                         if(ht_cap == _TRUE)
1243                                 snprintf(wrqu->name, IFNAMSIZ, "IEEE 802.11bn");
1244                         else
1245                                 snprintf(wrqu->name, IFNAMSIZ, "IEEE 802.11b");
1246                 }
1247                 else if ((rtw_is_cckrates_included((u8*)prates)) == _TRUE)
1248                 {
1249                         if(ht_cap == _TRUE)
1250                                 snprintf(wrqu->name, IFNAMSIZ, "IEEE 802.11bgn");
1251                         else
1252                                 snprintf(wrqu->name, IFNAMSIZ, "IEEE 802.11bg");
1253                 }
1254                 else
1255                 {
1256                         if(pcur_bss->Configuration.DSConfig > 14)
1257                         {
1258                                 if(ht_cap == _TRUE)
1259                                         snprintf(wrqu->name, IFNAMSIZ, "IEEE 802.11an");
1260                                 else
1261                                         snprintf(wrqu->name, IFNAMSIZ, "IEEE 802.11a");
1262                         }
1263                         else
1264                         {
1265                                 if(ht_cap == _TRUE)
1266                                         snprintf(wrqu->name, IFNAMSIZ, "IEEE 802.11gn");
1267                                 else
1268                                         snprintf(wrqu->name, IFNAMSIZ, "IEEE 802.11g");
1269                         }
1270                 }
1271         }
1272         else
1273         {
1274                 //prates = &padapter->registrypriv.dev_network.SupportedRates;
1275                 //snprintf(wrqu->name, IFNAMSIZ, "IEEE 802.11g");
1276                 snprintf(wrqu->name, IFNAMSIZ, "unassociated");
1277         }
1278
1279         _func_exit_;
1280
1281         return 0;
1282 }
1283
1284 static int rtw_wx_set_freq(struct net_device *dev,
1285                              struct iw_request_info *info,
1286                              union iwreq_data *wrqu, char *extra)
1287 {
1288         _func_enter_;
1289
1290         RT_TRACE(_module_rtl871x_mlme_c_, _drv_notice_, ("+rtw_wx_set_freq\n"));
1291
1292         _func_exit_;
1293
1294         return 0;
1295 }
1296
1297 static int rtw_wx_get_freq(struct net_device *dev,
1298                              struct iw_request_info *info,
1299                              union iwreq_data *wrqu, char *extra)
1300 {
1301         _adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
1302         struct  mlme_priv       *pmlmepriv = &(padapter->mlmepriv);
1303         WLAN_BSSID_EX  *pcur_bss = &pmlmepriv->cur_network.network;
1304
1305         if(check_fwstate(pmlmepriv, _FW_LINKED) == _TRUE)
1306         {
1307                 //wrqu->freq.m = ieee80211_wlan_frequencies[pcur_bss->Configuration.DSConfig-1] * 100000;
1308                 wrqu->freq.m = rtw_ch2freq(pcur_bss->Configuration.DSConfig) * 100000;
1309                 wrqu->freq.e = 1;
1310                 wrqu->freq.i = pcur_bss->Configuration.DSConfig;
1311
1312         }
1313         else{
1314                 wrqu->freq.m = rtw_ch2freq(padapter->mlmeextpriv.cur_channel) * 100000;
1315                 wrqu->freq.e = 1;
1316                 wrqu->freq.i = padapter->mlmeextpriv.cur_channel;
1317         }
1318
1319         return 0;
1320 }
1321
1322 static int rtw_wx_set_mode(struct net_device *dev, struct iw_request_info *a,
1323                              union iwreq_data *wrqu, char *b)
1324 {
1325         _adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
1326         NDIS_802_11_NETWORK_INFRASTRUCTURE networkType ;
1327         int ret = 0;
1328
1329         _func_enter_;
1330
1331         if(_FAIL == rtw_pwr_wakeup(padapter)) {
1332                 ret= -EPERM;
1333                 goto exit;
1334         }
1335
1336         if (padapter->hw_init_completed==_FALSE){
1337                 ret = -EPERM;
1338                 goto exit;
1339         }
1340
1341         switch(wrqu->mode)
1342         {
1343                 case IW_MODE_AUTO:
1344                         networkType = Ndis802_11AutoUnknown;
1345                         DBG_8723A("set_mode = IW_MODE_AUTO\n");
1346                         break;
1347                 case IW_MODE_ADHOC:
1348                         networkType = Ndis802_11IBSS;
1349                         DBG_8723A("set_mode = IW_MODE_ADHOC\n");
1350                         break;
1351                 case IW_MODE_MASTER:
1352                         networkType = Ndis802_11APMode;
1353                         DBG_8723A("set_mode = IW_MODE_MASTER\n");
1354                         //rtw_setopmode_cmd(padapter, networkType);
1355                         break;
1356                 case IW_MODE_INFRA:
1357                         networkType = Ndis802_11Infrastructure;
1358                         DBG_8723A("set_mode = IW_MODE_INFRA\n");
1359                         break;
1360
1361                 default :
1362                         ret = -EINVAL;;
1363                         RT_TRACE(_module_rtl871x_ioctl_os_c,_drv_err_,("\n Mode: %s is not supported  \n", iw_operation_mode[wrqu->mode]));
1364                         goto exit;
1365         }
1366
1367 /*
1368         if(Ndis802_11APMode == networkType)
1369         {
1370                 rtw_setopmode_cmd(padapter, networkType);
1371         }
1372         else
1373         {
1374                 rtw_setopmode_cmd(padapter, Ndis802_11AutoUnknown);
1375         }
1376 */
1377
1378         if (rtw_set_802_11_infrastructure_mode(padapter, networkType) ==_FALSE){
1379
1380                 ret = -EPERM;
1381                 goto exit;
1382
1383         }
1384
1385         rtw_setopmode_cmd(padapter, networkType);
1386
1387 exit:
1388
1389         _func_exit_;
1390
1391         return ret;
1392
1393 }
1394
1395 static int rtw_wx_get_mode(struct net_device *dev, struct iw_request_info *a,
1396                              union iwreq_data *wrqu, char *b)
1397 {
1398         _adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
1399         struct  mlme_priv       *pmlmepriv = &(padapter->mlmepriv);
1400
1401         RT_TRACE(_module_rtl871x_mlme_c_,_drv_info_,(" rtw_wx_get_mode \n"));
1402
1403         _func_enter_;
1404
1405         if (check_fwstate(pmlmepriv, WIFI_STATION_STATE) == _TRUE)
1406         {
1407                 wrqu->mode = IW_MODE_INFRA;
1408         }
1409         else if  ((check_fwstate(pmlmepriv, WIFI_ADHOC_MASTER_STATE) == _TRUE) ||
1410                        (check_fwstate(pmlmepriv, WIFI_ADHOC_STATE) == _TRUE))
1411
1412         {
1413                 wrqu->mode = IW_MODE_ADHOC;
1414         }
1415         else if(check_fwstate(pmlmepriv, WIFI_AP_STATE) == _TRUE)
1416         {
1417                 wrqu->mode = IW_MODE_MASTER;
1418         }
1419         else
1420         {
1421                 wrqu->mode = IW_MODE_AUTO;
1422         }
1423
1424         _func_exit_;
1425
1426         return 0;
1427
1428 }
1429
1430
1431 static int rtw_wx_set_pmkid(struct net_device *dev,
1432                              struct iw_request_info *a,
1433                              union iwreq_data *wrqu, char *extra)
1434 {
1435         _adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
1436         u8          j,blInserted = _FALSE;
1437         int         intReturn = _FALSE;
1438         struct mlme_priv  *pmlmepriv = &padapter->mlmepriv;
1439         struct security_priv *psecuritypriv = &padapter->securitypriv;
1440         struct iw_pmksa*  pPMK = ( struct iw_pmksa* ) extra;
1441         u8     strZeroMacAddress[ ETH_ALEN ] = { 0x00 };
1442         u8     strIssueBssid[ ETH_ALEN ] = { 0x00 };
1443
1444 /*
1445         struct iw_pmksa
1446         {
1447             __u32   cmd;
1448             struct sockaddr bssid;
1449             __u8    pmkid[IW_PMKID_LEN];   //IW_PMKID_LEN=16
1450         }
1451         There are the BSSID information in the bssid.sa_data array.
1452         If cmd is IW_PMKSA_FLUSH, it means the wpa_suppplicant wants to clear all the PMKID information.
1453         If cmd is IW_PMKSA_ADD, it means the wpa_supplicant wants to add a PMKID/BSSID to driver.
1454         If cmd is IW_PMKSA_REMOVE, it means the wpa_supplicant wants to remove a PMKID/BSSID from driver.
1455         */
1456
1457         memcpy(strIssueBssid, pPMK->bssid.sa_data, ETH_ALEN);
1458         if ( pPMK->cmd == IW_PMKSA_ADD )
1459         {
1460                 DBG_8723A( "[rtw_wx_set_pmkid] IW_PMKSA_ADD!\n" );
1461                 if (!memcmp( strIssueBssid, strZeroMacAddress, ETH_ALEN))
1462                 {
1463                     return intReturn;
1464                 }
1465                 else
1466                 {
1467                     intReturn = _TRUE;
1468                 }
1469                 blInserted = _FALSE;
1470
1471                 //overwrite PMKID
1472                 for(j=0 ; j<NUM_PMKID_CACHE; j++)
1473                 {
1474                         if (!memcmp( psecuritypriv->PMKIDList[j].Bssid, strIssueBssid, ETH_ALEN))
1475                         { // BSSID is matched, the same AP => rewrite with new PMKID.
1476
1477                                 DBG_8723A( "[rtw_wx_set_pmkid] BSSID exists in the PMKList.\n" );
1478
1479                                 memcpy(psecuritypriv->PMKIDList[j].PMKID, pPMK->pmkid, IW_PMKID_LEN);
1480                                 psecuritypriv->PMKIDList[ j ].bUsed = _TRUE;
1481                                 psecuritypriv->PMKIDIndex = j+1;
1482                                 blInserted = _TRUE;
1483                                 break;
1484                         }
1485                 }
1486
1487                 if(!blInserted)
1488                 {
1489                     // Find a new entry
1490                     DBG_8723A( "[rtw_wx_set_pmkid] Use the new entry index = %d for this PMKID.\n",
1491                             psecuritypriv->PMKIDIndex );
1492
1493                     memcpy(psecuritypriv->PMKIDList[psecuritypriv->PMKIDIndex].Bssid, strIssueBssid, ETH_ALEN);
1494                     memcpy(psecuritypriv->PMKIDList[psecuritypriv->PMKIDIndex].PMKID, pPMK->pmkid, IW_PMKID_LEN);
1495
1496                     psecuritypriv->PMKIDList[ psecuritypriv->PMKIDIndex ].bUsed = _TRUE;
1497                     psecuritypriv->PMKIDIndex++ ;
1498                     if(psecuritypriv->PMKIDIndex==16)
1499                     {
1500                         psecuritypriv->PMKIDIndex =0;
1501                     }
1502                 }
1503         }
1504         else if ( pPMK->cmd == IW_PMKSA_REMOVE )
1505         {
1506                 DBG_8723A( "[rtw_wx_set_pmkid] IW_PMKSA_REMOVE!\n" );
1507                 intReturn = _TRUE;
1508                 for(j=0 ; j<NUM_PMKID_CACHE; j++)
1509                 {
1510                         if (!memcmp(psecuritypriv->PMKIDList[j].Bssid, strIssueBssid, ETH_ALEN))
1511                         { // BSSID is matched, the same AP => Remove this PMKID information and reset it.
1512                                 memset( psecuritypriv->PMKIDList[ j ].Bssid, 0x00, ETH_ALEN );
1513                                 psecuritypriv->PMKIDList[ j ].bUsed = _FALSE;
1514                                 break;
1515                         }
1516                 }
1517         }
1518         else if ( pPMK->cmd == IW_PMKSA_FLUSH )
1519         {
1520             DBG_8723A( "[rtw_wx_set_pmkid] IW_PMKSA_FLUSH!\n" );
1521             memset( &psecuritypriv->PMKIDList[ 0 ], 0x00, sizeof( RT_PMKID_LIST ) * NUM_PMKID_CACHE );
1522             psecuritypriv->PMKIDIndex = 0;
1523             intReturn = _TRUE;
1524         }
1525     return( intReturn );
1526 }
1527
1528 static int rtw_wx_get_sens(struct net_device *dev,
1529                              struct iw_request_info *info,
1530                              union iwreq_data *wrqu, char *extra)
1531 {
1532         {
1533                 wrqu->sens.value = 0;
1534                 wrqu->sens.fixed = 0;   /* no auto select */
1535                 wrqu->sens.disabled = 1;
1536         }
1537         return 0;
1538 }
1539
1540 static int rtw_wx_get_range(struct net_device *dev,
1541                                 struct iw_request_info *info,
1542                                 union iwreq_data *wrqu, char *extra)
1543 {
1544         struct iw_range *range = (struct iw_range *)extra;
1545         _adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
1546         struct mlme_ext_priv    *pmlmeext = &padapter->mlmeextpriv;
1547
1548         u16 val;
1549         int i;
1550
1551         _func_enter_;
1552
1553         RT_TRACE(_module_rtl871x_mlme_c_,_drv_info_,("rtw_wx_get_range. cmd_code=%x\n", info->cmd));
1554
1555         wrqu->data.length = sizeof(*range);
1556         memset(range, 0, sizeof(*range));
1557
1558         /* Let's try to keep this struct in the same order as in
1559          * linux/include/wireless.h
1560          */
1561
1562         /* TODO: See what values we can set, and remove the ones we can't
1563          * set, or fill them with some default data.
1564          */
1565
1566         /* ~5 Mb/s real (802.11b) */
1567         range->throughput = 5 * 1000 * 1000;
1568
1569         // TODO: Not used in 802.11b?
1570 //      range->min_nwid;        /* Minimal NWID we are able to set */
1571         // TODO: Not used in 802.11b?
1572 //      range->max_nwid;        /* Maximal NWID we are able to set */
1573
1574         /* Old Frequency (backward compat - moved lower ) */
1575 //      range->old_num_channels;
1576 //      range->old_num_frequency;
1577 //      range->old_freq[6]; /* Filler to keep "version" at the same offset */
1578
1579         /* signal level threshold range */
1580
1581         //percent values between 0 and 100.
1582         range->max_qual.qual = 100;
1583         range->max_qual.level = 100;
1584         range->max_qual.noise = 100;
1585         range->max_qual.updated = 7; /* Updated all three */
1586
1587
1588         range->avg_qual.qual = 92; /* > 8% missed beacons is 'bad' */
1589         /* TODO: Find real 'good' to 'bad' threshol value for RSSI */
1590         range->avg_qual.level = 178; /* -78 dBm */
1591         range->avg_qual.noise = 0;
1592         range->avg_qual.updated = 7; /* Updated all three */
1593
1594         range->num_bitrates = RATE_COUNT;
1595
1596         for (i = 0; i < RATE_COUNT && i < IW_MAX_BITRATES; i++)
1597                 range->bitrate[i] = rtw_rates[i];
1598
1599         range->min_frag = MIN_FRAG_THRESHOLD;
1600         range->max_frag = MAX_FRAG_THRESHOLD;
1601
1602         range->pm_capa = 0;
1603
1604         range->we_version_compiled = WIRELESS_EXT;
1605         range->we_version_source = 16;
1606
1607 //      range->retry_capa;      /* What retry options are supported */
1608 //      range->retry_flags;     /* How to decode max/min retry limit */
1609 //      range->r_time_flags;    /* How to decode max/min retry life */
1610 //      range->min_retry;       /* Minimal number of retries */
1611 //      range->max_retry;       /* Maximal number of retries */
1612 //      range->min_r_time;      /* Minimal retry lifetime */
1613 //      range->max_r_time;      /* Maximal retry lifetime */
1614
1615         for (i = 0, val = 0; i < MAX_CHANNEL_NUM; i++) {
1616
1617                 // Include only legal frequencies for some countries
1618                 if(pmlmeext->channel_set[i].ChannelNum != 0)
1619                 {
1620                         range->freq[val].i = pmlmeext->channel_set[i].ChannelNum;
1621                         range->freq[val].m = rtw_ch2freq(pmlmeext->channel_set[i].ChannelNum) * 100000;
1622                         range->freq[val].e = 1;
1623                         val++;
1624                 }
1625
1626                 if (val == IW_MAX_FREQUENCIES)
1627                         break;
1628         }
1629
1630         range->num_channels = val;
1631         range->num_frequency = val;
1632
1633 // Commented by Albert 2009/10/13
1634 // The following code will proivde the security capability to network manager.
1635 // If the driver doesn't provide this capability to network manager,
1636 // the WPA/WPA2 routers can't be choosen in the network manager.
1637
1638 /*
1639 #define IW_SCAN_CAPA_NONE               0x00
1640 #define IW_SCAN_CAPA_ESSID              0x01
1641 #define IW_SCAN_CAPA_BSSID              0x02
1642 #define IW_SCAN_CAPA_CHANNEL    0x04
1643 #define IW_SCAN_CAPA_MODE               0x08
1644 #define IW_SCAN_CAPA_RATE               0x10
1645 #define IW_SCAN_CAPA_TYPE               0x20
1646 #define IW_SCAN_CAPA_TIME               0x40
1647 */
1648
1649 #if WIRELESS_EXT > 17
1650         range->enc_capa = IW_ENC_CAPA_WPA|IW_ENC_CAPA_WPA2|
1651                           IW_ENC_CAPA_CIPHER_TKIP|IW_ENC_CAPA_CIPHER_CCMP;
1652 #endif
1653
1654 #ifdef IW_SCAN_CAPA_ESSID //WIRELESS_EXT > 21
1655         range->scan_capa = IW_SCAN_CAPA_ESSID | IW_SCAN_CAPA_TYPE |IW_SCAN_CAPA_BSSID|
1656                                         IW_SCAN_CAPA_CHANNEL|IW_SCAN_CAPA_MODE|IW_SCAN_CAPA_RATE;
1657 #endif
1658
1659
1660         _func_exit_;
1661
1662         return 0;
1663
1664 }
1665
1666 //set bssid flow
1667 //s1. rtw_set_802_11_infrastructure_mode()
1668 //s2. rtw_set_802_11_authentication_mode()
1669 //s3. set_802_11_encryption_mode()
1670 //s4. rtw_set_802_11_bssid()
1671 static int rtw_wx_set_wap(struct net_device *dev,
1672                          struct iw_request_info *info,
1673                          union iwreq_data *awrq,
1674                          char *extra)
1675 {
1676         _irqL   irqL;
1677         uint ret = 0;
1678         _adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
1679         struct sockaddr *temp = (struct sockaddr *)awrq;
1680         struct  mlme_priv       *pmlmepriv = &(padapter->mlmepriv);
1681         _list   *phead;
1682         u8 *dst_bssid, *src_bssid;
1683         _queue  *queue  = &(pmlmepriv->scanned_queue);
1684         struct  wlan_network    *pnetwork = NULL;
1685         NDIS_802_11_AUTHENTICATION_MODE authmode;
1686
1687         _func_enter_;
1688 /*
1689 #ifdef CONFIG_CONCURRENT_MODE
1690         if(padapter->iface_type > PRIMARY_IFACE)
1691         {
1692                 ret = -EINVAL;
1693                 goto exit;
1694         }
1695 #endif
1696 */
1697
1698 #ifdef CONFIG_CONCURRENT_MODE
1699         if (check_buddy_fwstate(padapter, _FW_UNDER_SURVEY|_FW_UNDER_LINKING) == _TRUE)
1700         {
1701                 DBG_8723A("set bssid, but buddy_intf is under scanning or linking\n");
1702
1703                 ret = -EINVAL;
1704
1705                 goto exit;
1706         }
1707 #endif
1708
1709 #ifdef CONFIG_DUALMAC_CONCURRENT
1710         if (dc_check_fwstate(padapter, _FW_UNDER_SURVEY|_FW_UNDER_LINKING)== _TRUE)
1711         {
1712                 DBG_8723A("set bssid, but buddy_intf is under scanning or linking\n");
1713                 ret = -EINVAL;
1714                 goto exit;
1715         }
1716 #endif
1717
1718         if(_FAIL == rtw_pwr_wakeup(padapter))
1719         {
1720                 ret= -1;
1721                 goto exit;
1722         }
1723
1724         if(!padapter->bup){
1725                 ret = -1;
1726                 goto exit;
1727         }
1728
1729
1730         if (temp->sa_family != ARPHRD_ETHER){
1731                 ret = -EINVAL;
1732                 goto exit;
1733         }
1734
1735         authmode = padapter->securitypriv.ndisauthtype;
1736         spin_lock_bh(&queue->lock);
1737        phead = get_list_head(queue);
1738        pmlmepriv->pscanned = get_next(phead);
1739
1740         while (1)
1741          {
1742
1743                 if ((rtw_end_of_queue_search(phead, pmlmepriv->pscanned)) == _TRUE)
1744                 {
1745 #if 0
1746                         ret = -EINVAL;
1747                         goto exit;
1748
1749                         if(check_fwstate(pmlmepriv, WIFI_ADHOC_STATE) == _TRUE)
1750                         {
1751                                 rtw_set_802_11_bssid(padapter, temp->sa_data);
1752                                 goto exit;
1753                         }
1754                         else
1755                         {
1756                                 ret = -EINVAL;
1757                                 goto exit;
1758                         }
1759 #endif
1760
1761                         break;
1762                 }
1763
1764                 pnetwork = LIST_CONTAINOR(pmlmepriv->pscanned, struct wlan_network, list);
1765
1766                 pmlmepriv->pscanned = get_next(pmlmepriv->pscanned);
1767
1768                 dst_bssid = pnetwork->network.MacAddress;
1769
1770                 src_bssid = temp->sa_data;
1771
1772                 if ((!memcmp(dst_bssid, src_bssid, ETH_ALEN)))
1773                 {
1774                         if(!rtw_set_802_11_infrastructure_mode(padapter, pnetwork->network.InfrastructureMode))
1775                         {
1776                                 ret = -1;
1777                                 spin_unlock_bh(&queue->lock);
1778                                 goto exit;
1779                         }
1780
1781                                 break;
1782                 }
1783
1784         }
1785         spin_unlock_bh(&queue->lock);
1786
1787         rtw_set_802_11_authentication_mode(padapter, authmode);
1788         //set_802_11_encryption_mode(padapter, padapter->securitypriv.ndisencryptstatus);
1789         if (rtw_set_802_11_bssid(padapter, temp->sa_data) == _FALSE) {
1790                 ret = -1;
1791                 goto exit;
1792         }
1793
1794 exit:
1795
1796         _func_exit_;
1797
1798         return ret;
1799 }
1800
1801 static int rtw_wx_get_wap(struct net_device *dev,
1802                             struct iw_request_info *info,
1803                             union iwreq_data *wrqu, char *extra)
1804 {
1805
1806         _adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
1807         struct  mlme_priv       *pmlmepriv = &(padapter->mlmepriv);
1808         WLAN_BSSID_EX  *pcur_bss = &pmlmepriv->cur_network.network;
1809
1810         wrqu->ap_addr.sa_family = ARPHRD_ETHER;
1811
1812         memset(wrqu->ap_addr.sa_data, 0, ETH_ALEN);
1813
1814         RT_TRACE(_module_rtl871x_mlme_c_,_drv_info_,("rtw_wx_get_wap\n"));
1815
1816         _func_enter_;
1817
1818         if  ( ((check_fwstate(pmlmepriv, _FW_LINKED)) == _TRUE) ||
1819                         ((check_fwstate(pmlmepriv, WIFI_ADHOC_MASTER_STATE)) == _TRUE) ||
1820                         ((check_fwstate(pmlmepriv, WIFI_AP_STATE)) == _TRUE) )
1821         {
1822
1823                 memcpy(wrqu->ap_addr.sa_data, pcur_bss->MacAddress, ETH_ALEN);
1824         }
1825         else
1826         {
1827                 memset(wrqu->ap_addr.sa_data, 0, ETH_ALEN);
1828         }
1829
1830         _func_exit_;
1831
1832         return 0;
1833
1834 }
1835
1836 static int rtw_wx_set_mlme(struct net_device *dev,
1837                              struct iw_request_info *info,
1838                              union iwreq_data *wrqu, char *extra)
1839 {
1840 #if 0
1841 /* SIOCSIWMLME data */
1842 struct  iw_mlme
1843 {
1844         __u16           cmd; /* IW_MLME_* */
1845         __u16           reason_code;
1846         struct sockaddr addr;
1847 };
1848 #endif
1849
1850         int ret=0;
1851         u16 reason;
1852         _adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
1853         struct iw_mlme *mlme = (struct iw_mlme *) extra;
1854
1855
1856         if(mlme==NULL)
1857                 return -1;
1858
1859         DBG_8723A("%s\n", __func__);
1860
1861         reason = cpu_to_le16(mlme->reason_code);
1862
1863
1864         DBG_8723A("%s, cmd=%d, reason=%d\n", __func__, mlme->cmd, reason);
1865
1866
1867         switch (mlme->cmd)
1868         {
1869                 case IW_MLME_DEAUTH:
1870                                 if(!rtw_set_802_11_disassociate(padapter))
1871                                 ret = -1;
1872                                 break;
1873
1874                 case IW_MLME_DISASSOC:
1875                                 if(!rtw_set_802_11_disassociate(padapter))
1876                                                 ret = -1;
1877
1878                                 break;
1879
1880                 default:
1881                         return -EOPNOTSUPP;
1882         }
1883
1884         return ret;
1885 }
1886
1887 static int rtw_wx_set_scan(struct net_device *dev, struct iw_request_info *a,
1888                              union iwreq_data *wrqu, char *extra)
1889 {
1890         u8 _status = _FALSE;
1891         int ret = 0;
1892         _adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
1893         struct mlme_priv *pmlmepriv= &padapter->mlmepriv;
1894         NDIS_802_11_SSID ssid[RTW_SSID_SCAN_AMOUNT];
1895         _irqL   irqL;
1896 #ifdef CONFIG_P2P
1897         struct wifidirect_info *pwdinfo= &(padapter->wdinfo);
1898 #endif //CONFIG_P2P
1899         RT_TRACE(_module_rtl871x_mlme_c_,_drv_info_,("rtw_wx_set_scan\n"));
1900
1901 _func_enter_;
1902
1903         #ifdef DBG_IOCTL
1904         DBG_8723A("DBG_IOCTL %s:%d\n",__func__, __LINE__);
1905         #endif
1906 /*
1907 #ifdef CONFIG_CONCURRENT_MODE
1908         if(padapter->iface_type > PRIMARY_IFACE)
1909         {
1910                 ret = -1;
1911                 goto exit;
1912         }
1913 #endif
1914 */
1915
1916         if(_FAIL == rtw_pwr_wakeup(padapter))
1917         {
1918                 ret= -1;
1919                 goto exit;
1920         }
1921
1922         if(padapter->bDriverStopped){
1923            DBG_8723A("bDriverStopped=%d\n", padapter->bDriverStopped);
1924                 ret= -1;
1925                 goto exit;
1926         }
1927
1928         if(!padapter->bup){
1929                 ret = -1;
1930                 goto exit;
1931         }
1932
1933         if (padapter->hw_init_completed==_FALSE){
1934                 ret = -1;
1935                 goto exit;
1936         }
1937
1938         // When Busy Traffic, driver do not site survey. So driver return success.
1939         // wpa_supplicant will not issue SIOCSIWSCAN cmd again after scan timeout.
1940         // modify by thomas 2011-02-22.
1941         if (pmlmepriv->LinkDetectInfo.bBusyTraffic == _TRUE)
1942         {
1943                 indicate_wx_scan_complete_event(padapter);
1944                 goto exit;
1945         }
1946
1947         if (check_fwstate(pmlmepriv, _FW_UNDER_SURVEY|_FW_UNDER_LINKING) == _TRUE)
1948         {
1949                 indicate_wx_scan_complete_event(padapter);
1950                 goto exit;
1951         }
1952
1953 #ifdef CONFIG_BT_COEXIST
1954         {
1955                 u32 curr_time, delta_time;
1956
1957                 // under DHCP(Special packet)
1958                 curr_time = rtw_get_current_time();
1959                 delta_time = curr_time - padapter->pwrctrlpriv.DelayLPSLastTimeStamp;
1960                 delta_time = rtw_systime_to_ms(delta_time);
1961                 if (delta_time < 500) // 500ms
1962                 {
1963                         DBG_8723A("%s: send DHCP pkt before %d ms, Skip scan\n", __func__, delta_time);
1964                         ret = -1;
1965                         goto exit;
1966                 }
1967         }
1968 #endif
1969
1970 #ifdef CONFIG_CONCURRENT_MODE
1971         if (check_buddy_fwstate(padapter,
1972                 _FW_UNDER_SURVEY|_FW_UNDER_LINKING|WIFI_UNDER_WPS) == _TRUE)
1973         {
1974                 if(check_buddy_fwstate(padapter, _FW_UNDER_SURVEY))
1975                 {
1976                         DBG_8723A("scanning_via_buddy_intf\n");
1977                         pmlmepriv->scanning_via_buddy_intf = _TRUE;
1978                 }
1979
1980                 indicate_wx_scan_complete_event(padapter);
1981
1982                 goto exit;
1983         }
1984 #endif
1985
1986 #ifdef CONFIG_DUALMAC_CONCURRENT
1987         if (dc_check_fwstate(padapter, _FW_UNDER_SURVEY|_FW_UNDER_LINKING)== _TRUE)
1988         {
1989                 indicate_wx_scan_complete_event(padapter);
1990                 goto exit;
1991         }
1992 #endif
1993
1994 //      Mareded by Albert 20101103
1995 //      For the DMP WiFi Display project, the driver won't to scan because
1996 //      the pmlmepriv->scan_interval is always equal to 3.
1997 //      So, the wpa_supplicant won't find out the WPS SoftAP.
1998
1999 /*
2000         if(pmlmepriv->scan_interval>10)
2001                 pmlmepriv->scan_interval = 0;
2002
2003         if(pmlmepriv->scan_interval > 0)
2004         {
2005                 DBG_8723A("scan done\n");
2006                 ret = 0;
2007                 goto exit;
2008         }
2009
2010 */
2011 #ifdef CONFIG_P2P
2012         if ( pwdinfo->p2p_state != P2P_STATE_NONE )
2013         {
2014                 rtw_p2p_set_pre_state( pwdinfo, rtw_p2p_state( pwdinfo ) );
2015                 rtw_p2p_set_state(pwdinfo, P2P_STATE_FIND_PHASE_SEARCH);
2016                 rtw_p2p_findphase_ex_set(pwdinfo, P2P_FINDPHASE_EX_FULL);
2017                 rtw_free_network_queue(padapter, _TRUE);
2018         }
2019 #endif //CONFIG_P2P
2020
2021         memset(ssid, 0, sizeof(NDIS_802_11_SSID)*RTW_SSID_SCAN_AMOUNT);
2022
2023 #if WIRELESS_EXT >= 17
2024         if (wrqu->data.length == sizeof(struct iw_scan_req))
2025         {
2026                 struct iw_scan_req *req = (struct iw_scan_req *)extra;
2027
2028                 if (wrqu->data.flags & IW_SCAN_THIS_ESSID)
2029                 {
2030                         int len = min((int)req->essid_len, IW_ESSID_MAX_SIZE);
2031
2032                         memcpy(ssid[0].Ssid, req->essid, len);
2033                         ssid[0].SsidLength = len;
2034
2035                         DBG_8723A("IW_SCAN_THIS_ESSID, ssid=%s, len=%d\n", req->essid, req->essid_len);
2036
2037                         spin_lock_bh(&pmlmepriv->lock);
2038
2039                         _status = rtw_sitesurvey_cmd(padapter, ssid, 1, NULL, 0);
2040
2041                         spin_unlock_bh(&pmlmepriv->lock);
2042
2043                 }
2044                 else if (req->scan_type == IW_SCAN_TYPE_PASSIVE)
2045                 {
2046                         DBG_8723A("rtw_wx_set_scan, req->scan_type == IW_SCAN_TYPE_PASSIVE\n");
2047                 }
2048
2049         }
2050         else
2051 #endif
2052
2053         if (wrqu->data.length >= WEXT_CSCAN_HEADER_SIZE &&
2054             !memcmp(extra, WEXT_CSCAN_HEADER, WEXT_CSCAN_HEADER_SIZE)) {
2055                 int len = wrqu->data.length -WEXT_CSCAN_HEADER_SIZE;
2056                 char *pos = extra+WEXT_CSCAN_HEADER_SIZE;
2057                 char section;
2058                 char sec_len;
2059                 int ssid_index = 0;
2060
2061                 //DBG_8723A("%s COMBO_SCAN header is recognized\n", __func__);
2062
2063                 while(len >= 1) {
2064                         section = *(pos++); len-=1;
2065
2066                         switch(section) {
2067                                 case WEXT_CSCAN_SSID_SECTION:
2068                                         //DBG_8723A("WEXT_CSCAN_SSID_SECTION\n");
2069                                         if(len < 1) {
2070                                                 len = 0;
2071                                                 break;
2072                                         }
2073
2074                                         sec_len = *(pos++); len-=1;
2075
2076                                         if(sec_len>0 && sec_len<=len) {
2077                                                 ssid[ssid_index].SsidLength = sec_len;
2078                                                 memcpy(ssid[ssid_index].Ssid, pos, ssid[ssid_index].SsidLength);
2079                                                 //DBG_8723A("%s COMBO_SCAN with specific ssid:%s, %d\n", __func__
2080                                                 //      , ssid[ssid_index].Ssid, ssid[ssid_index].SsidLength);
2081                                                 ssid_index++;
2082                                         }
2083
2084                                         pos+=sec_len; len-=sec_len;
2085                                         break;
2086
2087
2088                                 case WEXT_CSCAN_CHANNEL_SECTION:
2089                                         //DBG_8723A("WEXT_CSCAN_CHANNEL_SECTION\n");
2090                                         pos+=1; len-=1;
2091                                         break;
2092                                 case WEXT_CSCAN_ACTV_DWELL_SECTION:
2093                                         //DBG_8723A("WEXT_CSCAN_ACTV_DWELL_SECTION\n");
2094                                         pos+=2; len-=2;
2095                                         break;
2096                                 case WEXT_CSCAN_PASV_DWELL_SECTION:
2097                                         //DBG_8723A("WEXT_CSCAN_PASV_DWELL_SECTION\n");
2098                                         pos+=2; len-=2;
2099                                         break;
2100                                 case WEXT_CSCAN_HOME_DWELL_SECTION:
2101                                         //DBG_8723A("WEXT_CSCAN_HOME_DWELL_SECTION\n");
2102                                         pos+=2; len-=2;
2103                                         break;
2104                                 case WEXT_CSCAN_TYPE_SECTION:
2105                                         //DBG_8723A("WEXT_CSCAN_TYPE_SECTION\n");
2106                                         pos+=1; len-=1;
2107                                         break;
2108                                 #if 0
2109                                 case WEXT_CSCAN_NPROBE_SECTION:
2110                                         DBG_8723A("WEXT_CSCAN_NPROBE_SECTION\n");
2111                                         break;
2112                                 #endif
2113
2114                                 default:
2115                                         //DBG_8723A("Unknown CSCAN section %c\n", section);
2116                                         len = 0; // stop parsing
2117                         }
2118                         //DBG_8723A("len:%d\n", len);
2119
2120                 }
2121
2122                 //jeff: it has still some scan paramater to parse, we only do this now...
2123                 _status = rtw_set_802_11_bssid_list_scan(padapter, ssid, RTW_SSID_SCAN_AMOUNT);
2124
2125         } else
2126
2127         {
2128                 _status = rtw_set_802_11_bssid_list_scan(padapter, NULL, 0);
2129         }
2130
2131         if(_status == _FALSE)
2132                 ret = -1;
2133
2134 exit:
2135         #ifdef DBG_IOCTL
2136         DBG_8723A("DBG_IOCTL %s:%d return %d\n",__func__, __LINE__, ret);
2137         #endif
2138
2139 _func_exit_;
2140
2141         return ret;
2142 }
2143
2144 static int rtw_wx_get_scan(struct net_device *dev, struct iw_request_info *a,
2145                              union iwreq_data *wrqu, char *extra)
2146 {
2147         _irqL   irqL;
2148         _list                                   *plist, *phead;
2149         _adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
2150         struct  mlme_priv       *pmlmepriv = &(padapter->mlmepriv);
2151         _queue                          *queue  = &(pmlmepriv->scanned_queue);
2152         struct  wlan_network    *pnetwork = NULL;
2153         char *ev = extra;
2154         char *stop = ev + wrqu->data.length;
2155         u32 ret = 0;
2156         u32 cnt=0;
2157         u32 wait_for_surveydone;
2158         int wait_status;
2159 #ifdef CONFIG_CONCURRENT_MODE
2160         //PADAPTER pbuddy_adapter = padapter->pbuddy_adapter;
2161         //struct mlme_priv *pbuddy_mlmepriv = &(pbuddy_adapter->mlmepriv);
2162 #endif
2163 #ifdef CONFIG_P2P
2164         struct  wifidirect_info*        pwdinfo = &padapter->wdinfo;
2165 #endif //CONFIG_P2P
2166         RT_TRACE(_module_rtl871x_mlme_c_,_drv_info_,("rtw_wx_get_scan\n"));
2167         RT_TRACE(_module_rtl871x_ioctl_os_c,_drv_info_, (" Start of Query SIOCGIWSCAN .\n"));
2168
2169         _func_enter_;
2170
2171         #ifdef DBG_IOCTL
2172         DBG_8723A("DBG_IOCTL %s:%d\n",__func__, __LINE__);
2173         #endif
2174
2175 /*
2176 #ifdef CONFIG_CONCURRENT_MODE
2177         if(padapter->iface_type > PRIMARY_IFACE)
2178         {
2179                 ret = -EINVAL;
2180                 goto exit;
2181         }
2182 #endif
2183 */
2184         if(padapter->pwrctrlpriv.brfoffbyhw && padapter->bDriverStopped)
2185         {
2186                 ret = -EINVAL;
2187                 goto exit;
2188         }
2189
2190 #ifdef CONFIG_P2P
2191         if(!rtw_p2p_chk_state(pwdinfo, P2P_STATE_NONE))
2192         {
2193                 //      P2P is enabled
2194                 if ( padapter->chip_type == RTL8192D )
2195                         wait_for_surveydone = 300;      //      Because the 8192du supports more channels.
2196                 else
2197                         wait_for_surveydone = 200;
2198         }
2199         else
2200         {
2201                 //      P2P is disabled
2202                 wait_for_surveydone = 100;
2203         }
2204 #else
2205         {
2206                 wait_for_surveydone = 100;
2207         }
2208 #endif //CONFIG_P2P
2209
2210 /*
2211 #ifdef CONFIG_CONCURRENT_MODE
2212         if(pmlmepriv->scanning_via_buddy_intf == _TRUE)
2213         {
2214                 pmlmepriv->scanning_via_buddy_intf = _FALSE;//reset
2215
2216                 // change pointers to buddy interface
2217                 padapter = pbuddy_adapter;
2218                 pmlmepriv = pbuddy_mlmepriv;
2219                 queue = &(pbuddy_mlmepriv->scanned_queue);
2220
2221         }
2222 #endif // CONFIG_CONCURRENT_MODE
2223 */
2224
2225         wait_status = _FW_UNDER_SURVEY
2226                 #ifndef CONFIG_ANDROID
2227                 |_FW_UNDER_LINKING
2228                 #endif
2229         ;
2230
2231 #ifdef CONFIG_DUALMAC_CONCURRENT
2232         while(dc_check_fwstate(padapter, wait_status)== _TRUE)
2233         {
2234                 rtw_msleep_os(30);
2235                 cnt++;
2236                 if(cnt > wait_for_surveydone )
2237                         break;
2238         }
2239 #endif // CONFIG_DUALMAC_CONCURRENT
2240
2241         while(check_fwstate(pmlmepriv, wait_status) == _TRUE)
2242         {
2243                 rtw_msleep_os(30);
2244                 cnt++;
2245                 if(cnt > wait_for_surveydone )
2246                         break;
2247         }
2248
2249         spin_lock_bh(&(pmlmepriv->scanned_queue.lock));
2250
2251         phead = get_list_head(queue);
2252         plist = get_next(phead);
2253
2254         while(1)
2255         {
2256                 if (rtw_end_of_queue_search(phead,plist)== _TRUE)
2257                         break;
2258
2259                 if((stop - ev) < SCAN_ITEM_SIZE) {
2260                         ret = -E2BIG;
2261                         break;
2262                 }
2263
2264                 pnetwork = LIST_CONTAINOR(plist, struct wlan_network, list);
2265
2266                 //report network only if the current channel set contains the channel to which this network belongs
2267                 if(rtw_ch_set_search_ch(padapter->mlmeextpriv.channel_set, pnetwork->network.Configuration.DSConfig) >= 0
2268                         #ifdef CONFIG_VALIDATE_SSID
2269                         && _TRUE == rtw_validate_ssid(&(pnetwork->network.Ssid))
2270                         #endif
2271                 )
2272                 {
2273                         ev=translate_scan(padapter, a, pnetwork, ev, stop);
2274                 }
2275
2276                 plist = get_next(plist);
2277
2278         }
2279
2280         spin_unlock_bh(&(pmlmepriv->scanned_queue.lock));
2281
2282        wrqu->data.length = ev-extra;
2283         wrqu->data.flags = 0;
2284
2285 exit:
2286
2287         _func_exit_;
2288
2289         #ifdef DBG_IOCTL
2290         DBG_8723A("DBG_IOCTL %s:%d return %d\n",__func__, __LINE__, ret);
2291         #endif
2292
2293         return ret ;
2294
2295 }
2296
2297 //set ssid flow
2298 //s1. rtw_set_802_11_infrastructure_mode()
2299 //s2. set_802_11_authenticaion_mode()
2300 //s3. set_802_11_encryption_mode()
2301 //s4. rtw_set_802_11_ssid()
2302 static int rtw_wx_set_essid(struct net_device *dev,
2303                               struct iw_request_info *a,
2304                               union iwreq_data *wrqu, char *extra)
2305 {
2306         _irqL irqL;
2307         _adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
2308         struct mlme_priv *pmlmepriv = &padapter->mlmepriv;
2309         _queue *queue = &pmlmepriv->scanned_queue;
2310         struct pwrctrl_priv *pwrpriv = &padapter->pwrctrlpriv;
2311         _list *phead;
2312         s8 status = _TRUE;
2313         struct wlan_network *pnetwork = NULL;
2314         NDIS_802_11_AUTHENTICATION_MODE authmode;
2315         NDIS_802_11_SSID ndis_ssid;
2316         u8 *dst_ssid, *src_ssid;
2317
2318         uint ret = 0, len;
2319
2320         _func_enter_;
2321
2322         #ifdef DBG_IOCTL
2323         DBG_8723A("DBG_IOCTL %s:%d\n",__func__, __LINE__);
2324         #endif
2325
2326 /*
2327 #ifdef CONFIG_CONCURRENT_MODE
2328         if(padapter->iface_type > PRIMARY_IFACE)
2329         {
2330                 ret = -EINVAL;
2331                 goto exit;
2332         }
2333 #endif
2334 */
2335
2336 #ifdef CONFIG_CONCURRENT_MODE
2337         if (check_buddy_fwstate(padapter, _FW_UNDER_SURVEY|_FW_UNDER_LINKING) == _TRUE)
2338         {
2339                 DBG_8723A("set ssid, but buddy_intf is under scanning or linking\n");
2340
2341                 ret = -EINVAL;
2342
2343                 goto exit;
2344         }
2345 #endif
2346
2347 #ifdef CONFIG_DUALMAC_CONCURRENT
2348         if (dc_check_fwstate(padapter, _FW_UNDER_SURVEY|_FW_UNDER_LINKING)== _TRUE)
2349         {
2350                 DBG_8723A("set bssid, but buddy_intf is under scanning or linking\n");
2351                 ret = -EINVAL;
2352                 goto exit;
2353         }
2354 #endif
2355
2356         RT_TRACE(_module_rtl871x_ioctl_os_c, _drv_info_,
2357                  ("+rtw_wx_set_essid: fw_state=0x%08x\n", get_fwstate(pmlmepriv)));
2358         if(_FAIL == rtw_pwr_wakeup(padapter))
2359         {
2360                 ret = -1;
2361                 goto exit;
2362         }
2363
2364         if(!padapter->bup){
2365                 ret = -1;
2366                 goto exit;
2367         }
2368
2369 #if WIRELESS_EXT <= 20
2370         if ((wrqu->essid.length-1) > IW_ESSID_MAX_SIZE){
2371 #else
2372         if (wrqu->essid.length > IW_ESSID_MAX_SIZE){
2373 #endif
2374                 ret= -E2BIG;
2375                 goto exit;
2376         }
2377
2378         if(check_fwstate(pmlmepriv, WIFI_AP_STATE)) {
2379                 ret = -1;
2380                 goto exit;
2381         }
2382
2383         authmode = padapter->securitypriv.ndisauthtype;
2384         DBG_8723A("=>%s\n",__func__);
2385         if (wrqu->essid.flags && wrqu->essid.length)
2386         {
2387                 // Commented by Albert 20100519
2388                 // We got the codes in "set_info" function of iwconfig source code.
2389                 //      =========================================
2390                 //      wrq.u.essid.length = strlen(essid) + 1;
2391                 //      if(we_kernel_version > 20)
2392                 //              wrq.u.essid.length--;
2393                 //      =========================================
2394                 //      That means, if the WIRELESS_EXT less than or equal to 20, the correct ssid len should subtract 1.
2395 #if WIRELESS_EXT <= 20
2396                 len = ((wrqu->essid.length-1) < IW_ESSID_MAX_SIZE) ? (wrqu->essid.length-1) : IW_ESSID_MAX_SIZE;
2397 #else
2398                 len = (wrqu->essid.length < IW_ESSID_MAX_SIZE) ? wrqu->essid.length : IW_ESSID_MAX_SIZE;
2399 #endif
2400
2401                 if( wrqu->essid.length != 33 )
2402                         DBG_8723A("ssid=%s, len=%d\n", extra, wrqu->essid.length);
2403
2404                 memset(&ndis_ssid, 0, sizeof(NDIS_802_11_SSID));
2405                 ndis_ssid.SsidLength = len;
2406                 memcpy(ndis_ssid.Ssid, extra, len);
2407                 src_ssid = ndis_ssid.Ssid;
2408
2409                 RT_TRACE(_module_rtl871x_ioctl_os_c, _drv_info_, ("rtw_wx_set_essid: ssid=[%s]\n", src_ssid));
2410                 spin_lock_bh(&queue->lock);
2411                phead = get_list_head(queue);
2412               pmlmepriv->pscanned = get_next(phead);
2413
2414                 while (1)
2415                 {
2416                         if (rtw_end_of_queue_search(phead, pmlmepriv->pscanned) == _TRUE)
2417                         {
2418 #if 0
2419                                 if(check_fwstate(pmlmepriv, WIFI_ADHOC_STATE) == _TRUE)
2420                                 {
2421                                         rtw_set_802_11_ssid(padapter, &ndis_ssid);
2422
2423                                         goto exit;
2424                                 }
2425                                 else
2426                                 {
2427                                         RT_TRACE(_module_rtl871x_ioctl_os_c,_drv_info_,("rtw_wx_set_ssid(): scanned_queue is empty\n"));
2428                                         ret = -EINVAL;
2429                                         goto exit;
2430                                 }
2431 #endif
2432                                 RT_TRACE(_module_rtl871x_ioctl_os_c, _drv_warning_,
2433                                          ("rtw_wx_set_essid: scan_q is empty, set ssid to check if scanning again!\n"));
2434
2435                                 break;
2436                         }
2437
2438                         pnetwork = LIST_CONTAINOR(pmlmepriv->pscanned, struct wlan_network, list);
2439
2440                         pmlmepriv->pscanned = get_next(pmlmepriv->pscanned);
2441
2442                         dst_ssid = pnetwork->network.Ssid.Ssid;
2443
2444                         RT_TRACE(_module_rtl871x_ioctl_os_c, _drv_info_,
2445                                  ("rtw_wx_set_essid: dst_ssid=%s\n",
2446                                   pnetwork->network.Ssid.Ssid));
2447
2448                         if ((!memcmp(dst_ssid, src_ssid, ndis_ssid.SsidLength)) &&
2449                                 (pnetwork->network.Ssid.SsidLength==ndis_ssid.SsidLength))
2450                         {
2451                                 RT_TRACE(_module_rtl871x_ioctl_os_c, _drv_info_,
2452                                          ("rtw_wx_set_essid: find match, set infra mode\n"));
2453
2454                                 if(check_fwstate(pmlmepriv, WIFI_ADHOC_STATE) == _TRUE)
2455                                 {
2456                                         if(pnetwork->network.InfrastructureMode != pmlmepriv->cur_network.network.InfrastructureMode)
2457                                                 continue;
2458                                 }
2459
2460                                 if (rtw_set_802_11_infrastructure_mode(padapter, pnetwork->network.InfrastructureMode) == _FALSE)
2461                                 {
2462                                         ret = -1;
2463                                         spin_unlock_bh(&queue->lock);
2464                                         goto exit;
2465                                 }
2466
2467                                 break;
2468                         }
2469                 }
2470                 spin_unlock_bh(&queue->lock);
2471                 RT_TRACE(_module_rtl871x_ioctl_os_c, _drv_info_,
2472                          ("set ssid: set_802_11_auth. mode=%d\n", authmode));
2473                 rtw_set_802_11_authentication_mode(padapter, authmode);
2474                 //set_802_11_encryption_mode(padapter, padapter->securitypriv.ndisencryptstatus);
2475                 if (rtw_set_802_11_ssid(padapter, &ndis_ssid) == _FALSE) {
2476                         ret = -1;
2477                         goto exit;
2478                 }
2479         }
2480
2481 exit:
2482
2483         DBG_8723A("<=%s, ret %d\n",__func__, ret);
2484
2485         #ifdef DBG_IOCTL
2486         DBG_8723A("DBG_IOCTL %s:%d return %d\n",__func__, __LINE__, ret);
2487         #endif
2488
2489         _func_exit_;
2490
2491         return ret;
2492 }
2493
2494 static int rtw_wx_get_essid(struct net_device *dev,
2495                               struct iw_request_info *a,
2496                               union iwreq_data *wrqu, char *extra)
2497 {
2498         u32 len,ret = 0;
2499         _adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
2500         struct  mlme_priv       *pmlmepriv = &(padapter->mlmepriv);
2501         WLAN_BSSID_EX  *pcur_bss = &pmlmepriv->cur_network.network;
2502
2503         RT_TRACE(_module_rtl871x_mlme_c_,_drv_info_,("rtw_wx_get_essid\n"));
2504
2505         _func_enter_;
2506
2507         if ( (check_fwstate(pmlmepriv, _FW_LINKED) == _TRUE) ||
2508               (check_fwstate(pmlmepriv, WIFI_ADHOC_MASTER_STATE) == _TRUE))
2509         {
2510                 len = pcur_bss->Ssid.SsidLength;
2511
2512                 wrqu->essid.length = len;
2513
2514                 memcpy(extra, pcur_bss->Ssid.Ssid, len);
2515
2516                 wrqu->essid.flags = 1;
2517         }
2518         else
2519         {
2520                 ret = -1;
2521                 goto exit;
2522         }
2523
2524 exit:
2525
2526         _func_exit_;
2527
2528         return ret;
2529
2530 }
2531
2532 static int rtw_wx_set_rate(struct net_device *dev,
2533                               struct iw_request_info *a,
2534                               union iwreq_data *wrqu, char *extra)
2535 {
2536         int     i, ret = 0;
2537         _adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
2538         u8      datarates[NumRates];
2539         u32     target_rate = wrqu->bitrate.value;
2540         u32     fixed = wrqu->bitrate.fixed;
2541         u32     ratevalue = 0;
2542          u8 mpdatarate[NumRates]={11, 10, 9, 8, 7, 6, 5, 4, 3, 2, 1, 0, 0xff};
2543
2544 _func_enter_;
2545
2546         RT_TRACE(_module_rtl871x_mlme_c_,_drv_info_,(" rtw_wx_set_rate \n"));
2547         RT_TRACE(_module_rtl871x_ioctl_os_c,_drv_info_,("target_rate = %d, fixed = %d\n",target_rate,fixed));
2548
2549         if(target_rate == -1){
2550                 ratevalue = 11;
2551                 goto set_rate;
2552         }
2553         target_rate = target_rate/100000;
2554
2555         switch(target_rate){
2556                 case 10:
2557                         ratevalue = 0;
2558                         break;
2559                 case 20:
2560                         ratevalue = 1;
2561                         break;
2562                 case 55:
2563                         ratevalue = 2;
2564                         break;
2565                 case 60:
2566                         ratevalue = 3;
2567                         break;
2568                 case 90:
2569                         ratevalue = 4;
2570                         break;
2571                 case 110:
2572                         ratevalue = 5;
2573                         break;
2574                 case 120:
2575                         ratevalue = 6;
2576                         break;
2577                 case 180:
2578                         ratevalue = 7;
2579                         break;
2580                 case 240:
2581                         ratevalue = 8;
2582                         break;
2583                 case 360:
2584                         ratevalue = 9;
2585                         break;
2586                 case 480:
2587                         ratevalue = 10;
2588                         break;
2589                 case 540:
2590                         ratevalue = 11;
2591                         break;
2592                 default:
2593                         ratevalue = 11;
2594                         break;
2595         }
2596
2597 set_rate:
2598
2599         for(i=0; i<NumRates; i++)
2600         {
2601                 if(ratevalue==mpdatarate[i])
2602                 {
2603                         datarates[i] = mpdatarate[i];
2604                         if(fixed == 0)
2605                                 break;
2606                 }
2607                 else{
2608                         datarates[i] = 0xff;
2609                 }
2610
2611                 RT_TRACE(_module_rtl871x_ioctl_os_c,_drv_info_,("datarate_inx=%d\n",datarates[i]));
2612         }
2613
2614         if( rtw_setdatarate_cmd(padapter, datarates) !=_SUCCESS){
2615                 RT_TRACE(_module_rtl871x_ioctl_os_c,_drv_err_,("rtw_wx_set_rate Fail!!!\n"));
2616                 ret = -1;
2617         }
2618
2619 _func_exit_;
2620
2621         return ret;
2622 }
2623
2624 static int rtw_wx_get_rate(struct net_device *dev,
2625                              struct iw_request_info *info,
2626                              union iwreq_data *wrqu, char *extra)
2627 {
2628         u16 max_rate = 0;
2629
2630         max_rate = rtw_get_cur_max_rate((_adapter *)rtw_netdev_priv(dev));
2631
2632         if(max_rate == 0)
2633                 return -EPERM;
2634
2635         wrqu->bitrate.fixed = 0;        /* no auto select */
2636         wrqu->bitrate.value = max_rate * 100000;
2637
2638         return 0;
2639 }
2640
2641 static int rtw_wx_set_rts(struct net_device *dev,
2642                              struct iw_request_info *info,
2643                              union iwreq_data *wrqu, char *extra)
2644 {
2645         _adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
2646
2647         _func_enter_;
2648
2649         if (wrqu->rts.disabled)
2650                 padapter->registrypriv.rts_thresh = 2347;
2651         else {
2652                 if (wrqu->rts.value < 0 ||
2653                     wrqu->rts.value > 2347)
2654                         return -EINVAL;
2655
2656                 padapter->registrypriv.rts_thresh = wrqu->rts.value;
2657         }
2658
2659         DBG_8723A("%s, rts_thresh=%d\n", __func__, padapter->registrypriv.rts_thresh);
2660
2661         _func_exit_;
2662
2663         return 0;
2664
2665 }
2666
2667 static int rtw_wx_get_rts(struct net_device *dev,
2668                              struct iw_request_info *info,
2669                              union iwreq_data *wrqu, char *extra)
2670 {
2671         _adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
2672
2673         _func_enter_;
2674
2675         DBG_8723A("%s, rts_thresh=%d\n", __func__, padapter->registrypriv.rts_thresh);
2676
2677         wrqu->rts.value = padapter->registrypriv.rts_thresh;
2678         wrqu->rts.fixed = 0;    /* no auto select */
2679         //wrqu->rts.disabled = (wrqu->rts.value == DEFAULT_RTS_THRESHOLD);
2680
2681         _func_exit_;
2682
2683         return 0;
2684 }
2685
2686 static int rtw_wx_set_frag(struct net_device *dev,
2687                              struct iw_request_info *info,
2688                              union iwreq_data *wrqu, char *extra)
2689 {
2690         _adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
2691
2692         _func_enter_;
2693
2694         if (wrqu->frag.disabled)
2695                 padapter->xmitpriv.frag_len = MAX_FRAG_THRESHOLD;
2696         else {
2697                 if (wrqu->frag.value < MIN_FRAG_THRESHOLD ||
2698                     wrqu->frag.value > MAX_FRAG_THRESHOLD)
2699                         return -EINVAL;
2700
2701                 padapter->xmitpriv.frag_len = wrqu->frag.value & ~0x1;
2702         }
2703
2704         DBG_8723A("%s, frag_len=%d\n", __func__, padapter->xmitpriv.frag_len);
2705
2706         _func_exit_;
2707
2708         return 0;
2709
2710 }
2711
2712 static int rtw_wx_get_frag(struct net_device *dev,
2713                              struct iw_request_info *info,
2714                              union iwreq_data *wrqu, char *extra)
2715 {
2716         _adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
2717
2718         _func_enter_;
2719
2720         DBG_8723A("%s, frag_len=%d\n", __func__, padapter->xmitpriv.frag_len);
2721
2722         wrqu->frag.value = padapter->xmitpriv.frag_len;
2723         wrqu->frag.fixed = 0;   /* no auto select */
2724         //wrqu->frag.disabled = (wrqu->frag.value == DEFAULT_FRAG_THRESHOLD);
2725
2726         _func_exit_;
2727
2728         return 0;
2729 }
2730
2731 static int rtw_wx_get_retry(struct net_device *dev,
2732                              struct iw_request_info *info,
2733                              union iwreq_data *wrqu, char *extra)
2734 {
2735         //_adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
2736
2737
2738         wrqu->retry.value = 7;
2739         wrqu->retry.fixed = 0;  /* no auto select */
2740         wrqu->retry.disabled = 1;
2741
2742         return 0;
2743
2744 }
2745
2746 #if 0
2747 #define IW_ENCODE_INDEX         0x00FF  /* Token index (if needed) */
2748 #define IW_ENCODE_FLAGS         0xFF00  /* Flags defined below */
2749 #define IW_ENCODE_MODE          0xF000  /* Modes defined below */
2750 #define IW_ENCODE_DISABLED      0x8000  /* Encoding disabled */
2751 #define IW_ENCODE_ENABLED       0x0000  /* Encoding enabled */
2752 #define IW_ENCODE_RESTRICTED    0x4000  /* Refuse non-encoded packets */
2753 #define IW_ENCODE_OPEN          0x2000  /* Accept non-encoded packets */
2754 #define IW_ENCODE_NOKEY         0x0800  /* Key is write only, so not present */
2755 #define IW_ENCODE_TEMP          0x0400  /* Temporary key */
2756 /*
2757 iwconfig wlan0 key on -> flags = 0x6001 -> maybe it means auto
2758 iwconfig wlan0 key off -> flags = 0x8800
2759 iwconfig wlan0 key open -> flags = 0x2800
2760 iwconfig wlan0 key open 1234567890 -> flags = 0x2000
2761 iwconfig wlan0 key restricted -> flags = 0x4800
2762 iwconfig wlan0 key open [3] 1234567890 -> flags = 0x2003
2763 iwconfig wlan0 key restricted [2] 1234567890 -> flags = 0x4002
2764 iwconfig wlan0 key open [3] -> flags = 0x2803
2765 iwconfig wlan0 key restricted [2] -> flags = 0x4802
2766 */
2767 #endif
2768
2769 static int rtw_wx_set_enc(struct net_device *dev,
2770                             struct iw_request_info *info,
2771                             union iwreq_data *wrqu, char *keybuf)
2772 {
2773         u32 key, ret = 0;
2774         u32 keyindex_provided;
2775         NDIS_802_11_WEP  wep;
2776         NDIS_802_11_AUTHENTICATION_MODE authmode;
2777
2778         struct iw_point *erq = &(wrqu->encoding);
2779         _adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
2780         struct pwrctrl_priv *pwrpriv = &padapter->pwrctrlpriv;
2781         DBG_8723A("+rtw_wx_set_enc, flags=0x%x\n", erq->flags);
2782
2783         memset(&wep, 0, sizeof(NDIS_802_11_WEP));
2784
2785         key = erq->flags & IW_ENCODE_INDEX;
2786
2787         _func_enter_;
2788
2789         if (erq->flags & IW_ENCODE_DISABLED)
2790         {
2791                 DBG_8723A("EncryptionDisabled\n");
2792                 padapter->securitypriv.ndisencryptstatus = Ndis802_11EncryptionDisabled;
2793                 padapter->securitypriv.dot11PrivacyAlgrthm=_NO_PRIVACY_;
2794                 padapter->securitypriv.dot118021XGrpPrivacy=_NO_PRIVACY_;
2795                 padapter->securitypriv.dot11AuthAlgrthm= dot11AuthAlgrthm_Open; //open system
2796                 authmode = Ndis802_11AuthModeOpen;
2797                 padapter->securitypriv.ndisauthtype=authmode;
2798
2799                 goto exit;
2800         }
2801
2802         if (key) {
2803                 if (key > WEP_KEYS)
2804                         return -EINVAL;
2805                 key--;
2806                 keyindex_provided = 1;
2807         }
2808         else
2809         {
2810                 keyindex_provided = 0;
2811                 key = padapter->securitypriv.dot11PrivacyKeyIndex;
2812                 DBG_8723A("rtw_wx_set_enc, key=%d\n", key);
2813         }
2814
2815         //set authentication mode
2816         if(erq->flags & IW_ENCODE_OPEN)
2817         {
2818                 DBG_8723A("rtw_wx_set_enc():IW_ENCODE_OPEN\n");
2819                 padapter->securitypriv.ndisencryptstatus = Ndis802_11Encryption1Enabled;//Ndis802_11EncryptionDisabled;
2820
2821                 padapter->securitypriv.dot11AuthAlgrthm= dot11AuthAlgrthm_Open;
2822
2823                 padapter->securitypriv.dot11PrivacyAlgrthm=_NO_PRIVACY_;
2824                 padapter->securitypriv.dot118021XGrpPrivacy=_NO_PRIVACY_;
2825                 authmode = Ndis802_11AuthModeOpen;
2826                 padapter->securitypriv.ndisauthtype=authmode;
2827         }
2828         else if(erq->flags & IW_ENCODE_RESTRICTED)
2829         {
2830                 DBG_8723A("rtw_wx_set_enc():IW_ENCODE_RESTRICTED\n");
2831                 padapter->securitypriv.ndisencryptstatus = Ndis802_11Encryption1Enabled;
2832
2833                 padapter->securitypriv.dot11AuthAlgrthm= dot11AuthAlgrthm_Shared;
2834
2835                 padapter->securitypriv.dot11PrivacyAlgrthm=_WEP40_;
2836                 padapter->securitypriv.dot118021XGrpPrivacy=_WEP40_;
2837                 authmode = Ndis802_11AuthModeShared;
2838                 padapter->securitypriv.ndisauthtype=authmode;
2839         }
2840         else
2841         {
2842                 DBG_8723A("rtw_wx_set_enc():erq->flags=0x%x\n", erq->flags);
2843
2844                 padapter->securitypriv.ndisencryptstatus = Ndis802_11Encryption1Enabled;//Ndis802_11EncryptionDisabled;
2845                 padapter->securitypriv.dot11AuthAlgrthm= dot11AuthAlgrthm_Open; //open system
2846                 padapter->securitypriv.dot11PrivacyAlgrthm=_NO_PRIVACY_;
2847                 padapter->securitypriv.dot118021XGrpPrivacy=_NO_PRIVACY_;
2848                 authmode = Ndis802_11AuthModeOpen;
2849                 padapter->securitypriv.ndisauthtype=authmode;
2850         }
2851
2852         wep.KeyIndex = key;
2853         if (erq->length > 0)
2854         {
2855                 wep.KeyLength = erq->length <= 5 ? 5 : 13;
2856
2857                 wep.Length = wep.KeyLength + FIELD_OFFSET(NDIS_802_11_WEP, KeyMaterial);
2858         }
2859         else
2860         {
2861                 wep.KeyLength = 0 ;
2862
2863                 if(keyindex_provided == 1)// set key_id only, no given KeyMaterial(erq->length==0).
2864                 {
2865                         padapter->securitypriv.dot11PrivacyKeyIndex = key;
2866
2867                         DBG_8723A("(keyindex_provided == 1), keyid=%d, key_len=%d\n", key, padapter->securitypriv.dot11DefKeylen[key]);
2868
2869                         switch(padapter->securitypriv.dot11DefKeylen[key])
2870                         {
2871                                 case 5:
2872                                         padapter->securitypriv.dot11PrivacyAlgrthm=_WEP40_;
2873                                         break;
2874                                 case 13:
2875                                         padapter->securitypriv.dot11PrivacyAlgrthm=_WEP104_;
2876                                         break;
2877                                 default:
2878                                         padapter->securitypriv.dot11PrivacyAlgrthm=_NO_PRIVACY_;
2879                                         break;
2880                         }
2881
2882                         goto exit;
2883
2884                 }
2885
2886         }
2887
2888         wep.KeyIndex |= 0x80000000;
2889
2890         memcpy(wep.KeyMaterial, keybuf, wep.KeyLength);
2891
2892         if (rtw_set_802_11_add_wep(padapter, &wep) == _FALSE) {
2893                 if(rf_on == pwrpriv->rf_pwrstate )
2894                         ret = -EOPNOTSUPP;
2895                 goto exit;
2896         }
2897
2898 exit:
2899
2900         _func_exit_;
2901
2902         return ret;
2903
2904 }
2905
2906 static int rtw_wx_get_enc(struct net_device *dev,
2907                             struct iw_request_info *info,
2908                             union iwreq_data *wrqu, char *keybuf)
2909 {
2910         uint key, ret =0;
2911         _adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
2912         struct iw_point *erq = &(wrqu->encoding);
2913         struct  mlme_priv       *pmlmepriv = &(padapter->mlmepriv);
2914
2915         _func_enter_;
2916
2917         if(check_fwstate(pmlmepriv, _FW_LINKED) != _TRUE)
2918         {
2919                  if(check_fwstate(pmlmepriv, WIFI_ADHOC_MASTER_STATE) != _TRUE)
2920                  {
2921                 erq->length = 0;
2922                 erq->flags |= IW_ENCODE_DISABLED;
2923                 return 0;
2924         }
2925         }
2926
2927
2928         key = erq->flags & IW_ENCODE_INDEX;
2929
2930         if (key) {
2931                 if (key > WEP_KEYS)
2932                         return -EINVAL;
2933                 key--;
2934         } else
2935         {
2936                 key = padapter->securitypriv.dot11PrivacyKeyIndex;
2937         }
2938
2939         erq->flags = key + 1;
2940
2941         //if(padapter->securitypriv.ndisauthtype == Ndis802_11AuthModeOpen)
2942         //{
2943         //      erq->flags |= IW_ENCODE_OPEN;
2944         //}
2945
2946         switch(padapter->securitypriv.ndisencryptstatus)
2947         {
2948                 case Ndis802_11EncryptionNotSupported:
2949                 case Ndis802_11EncryptionDisabled:
2950
2951                 erq->length = 0;
2952                 erq->flags |= IW_ENCODE_DISABLED;
2953
2954                 break;
2955
2956                 case Ndis802_11Encryption1Enabled:
2957
2958                 erq->length = padapter->securitypriv.dot11DefKeylen[key];
2959
2960                 if(erq->length)
2961                 {
2962                         memcpy(keybuf, padapter->securitypriv.dot11DefKey[key].skey, padapter->securitypriv.dot11DefKeylen[key]);
2963
2964                 erq->flags |= IW_ENCODE_ENABLED;
2965
2966                         if(padapter->securitypriv.ndisauthtype == Ndis802_11AuthModeOpen)
2967                         {
2968                                 erq->flags |= IW_ENCODE_OPEN;
2969                         }
2970                         else if(padapter->securitypriv.ndisauthtype == Ndis802_11AuthModeShared)
2971                         {
2972                 erq->flags |= IW_ENCODE_RESTRICTED;
2973                         }
2974                 }
2975                 else
2976                 {
2977                         erq->length = 0;
2978                         erq->flags |= IW_ENCODE_DISABLED;
2979                 }
2980
2981                 break;
2982
2983                 case Ndis802_11Encryption2Enabled:
2984                 case Ndis802_11Encryption3Enabled:
2985
2986                 erq->length = 16;
2987                 erq->flags |= (IW_ENCODE_ENABLED | IW_ENCODE_OPEN | IW_ENCODE_NOKEY);
2988
2989                 break;
2990
2991                 default:
2992                 erq->length = 0;
2993                 erq->flags |= IW_ENCODE_DISABLED;
2994
2995                 break;
2996
2997         }
2998
2999         _func_exit_;
3000
3001         return ret;
3002
3003 }
3004
3005 static int rtw_wx_get_power(struct net_device *dev,
3006                              struct iw_request_info *info,
3007                              union iwreq_data *wrqu, char *extra)
3008 {
3009         //_adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
3010
3011         wrqu->power.value = 0;
3012         wrqu->power.fixed = 0;  /* no auto select */
3013         wrqu->power.disabled = 1;
3014
3015         return 0;
3016
3017 }
3018
3019 static int rtw_wx_set_gen_ie(struct net_device *dev,
3020                              struct iw_request_info *info,
3021                              union iwreq_data *wrqu, char *extra)
3022 {
3023         int ret;
3024         _adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
3025
3026        ret = rtw_set_wpa_ie(padapter, extra, wrqu->data.length);
3027
3028         return ret;
3029 }
3030
3031 static int rtw_wx_set_auth(struct net_device *dev,
3032                              struct iw_request_info *info,
3033                              union iwreq_data *wrqu, char *extra)
3034 {
3035         _adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
3036         struct iw_param *param = (struct iw_param*)&(wrqu->param);
3037         struct mlme_priv        *pmlmepriv = &padapter->mlmepriv;
3038         struct security_priv *psecuritypriv = &padapter->securitypriv;
3039         struct mlme_ext_priv    *pmlmeext = &padapter->mlmeextpriv;
3040         struct mlme_ext_info    *pmlmeinfo = &(pmlmeext->mlmext_info);
3041         u32 value = param->value;
3042         int ret = 0;
3043
3044         switch (param->flags & IW_AUTH_INDEX) {
3045
3046         case IW_AUTH_WPA_VERSION:
3047 #ifdef CONFIG_WAPI_SUPPORT
3048 #ifndef CONFIG_IOCTL_CFG80211
3049                  padapter->wapiInfo.bWapiEnable = false;
3050                  if(value == IW_AUTH_WAPI_VERSION_1)
3051                  {
3052                         padapter->wapiInfo.bWapiEnable = true;
3053                         psecuritypriv->dot11PrivacyAlgrthm = _SMS4_;
3054                         psecuritypriv->dot118021XGrpPrivacy = _SMS4_;
3055                         psecuritypriv->dot11AuthAlgrthm = dot11AuthAlgrthm_WAPI;
3056                         pmlmeinfo->auth_algo = psecuritypriv->dot11AuthAlgrthm;
3057                         padapter->wapiInfo.extra_prefix_len = WAPI_EXT_LEN;
3058                         padapter->wapiInfo.extra_postfix_len = SMS4_MIC_LEN;
3059                 }
3060 #endif
3061 #endif
3062                 break;
3063         case IW_AUTH_CIPHER_PAIRWISE:
3064
3065                 break;
3066         case IW_AUTH_CIPHER_GROUP:
3067
3068                 break;
3069         case IW_AUTH_KEY_MGMT:
3070 #ifdef CONFIG_WAPI_SUPPORT
3071 #ifndef CONFIG_IOCTL_CFG80211
3072                 DBG_8723A("rtw_wx_set_auth: IW_AUTH_KEY_MGMT case \n");
3073                 if(value == IW_AUTH_KEY_MGMT_WAPI_PSK)
3074                         padapter->wapiInfo.bWapiPSK = true;
3075                 else
3076                         padapter->wapiInfo.bWapiPSK = false;
3077                 DBG_8723A("rtw_wx_set_auth: IW_AUTH_KEY_MGMT bwapipsk %d \n",padapter->wapiInfo.bWapiPSK);
3078 #endif
3079 #endif
3080                 /*
3081                  *  ??? does not use these parameters
3082                  */
3083                 break;
3084
3085         case IW_AUTH_TKIP_COUNTERMEASURES:
3086         {
3087             if ( param->value )
3088             {  // wpa_supplicant is enabling the tkip countermeasure.
3089                padapter->securitypriv.btkip_countermeasure = _TRUE;
3090             }
3091             else
3092             {  // wpa_supplicant is disabling the tkip countermeasure.
3093                padapter->securitypriv.btkip_countermeasure = _FALSE;
3094             }
3095                 break;
3096         }
3097         case IW_AUTH_DROP_UNENCRYPTED:
3098                 {
3099                         /* HACK:
3100                          *
3101                          * wpa_supplicant calls set_wpa_enabled when the driver
3102                          * is loaded and unloaded, regardless of if WPA is being
3103                          * used.  No other calls are made which can be used to
3104                          * determine if encryption will be used or not prior to
3105                          * association being expected.  If encryption is not being
3106                          * used, drop_unencrypted is set to false, else true -- we
3107                          * can use this to determine if the CAP_PRIVACY_ON bit should
3108                          * be set.
3109                          */
3110
3111                         if(padapter->securitypriv.ndisencryptstatus == Ndis802_11Encryption1Enabled)
3112                         {
3113                                 break;//it means init value, or using wep, ndisencryptstatus = Ndis802_11Encryption1Enabled,
3114                                                 // then it needn't reset it;
3115                         }
3116
3117                         if(param->value){
3118                                 padapter->securitypriv.ndisencryptstatus = Ndis802_11EncryptionDisabled;
3119                                 padapter->securitypriv.dot11PrivacyAlgrthm=_NO_PRIVACY_;
3120                                 padapter->securitypriv.dot118021XGrpPrivacy=_NO_PRIVACY_;
3121                                 padapter->securitypriv.dot11AuthAlgrthm= dot11AuthAlgrthm_Open; //open system
3122                                 padapter->securitypriv.ndisauthtype=Ndis802_11AuthModeOpen;
3123                         }
3124
3125                         break;
3126                 }
3127
3128         case IW_AUTH_80211_AUTH_ALG:
3129
3130                 #if defined(CONFIG_ANDROID) || 1
3131                 /*
3132                  *  It's the starting point of a link layer connection using wpa_supplicant
3133                 */
3134                 if(check_fwstate(&padapter->mlmepriv, _FW_LINKED)) {
3135                         LeaveAllPowerSaveMode(padapter);
3136                         rtw_disassoc_cmd(padapter, 500, _FALSE);
3137                         DBG_8723A("%s...call rtw_indicate_disconnect\n ",__func__);
3138                         rtw_indicate_disconnect(padapter);
3139                         rtw_free_assoc_resources(padapter, 1);
3140                 }
3141                 #endif
3142
3143
3144                 ret = wpa_set_auth_algs(dev, (u32)param->value);
3145
3146                 break;
3147
3148         case IW_AUTH_WPA_ENABLED:
3149
3150                 //if(param->value)
3151                 //      padapter->securitypriv.dot11AuthAlgrthm = dot11AuthAlgrthm_8021X; //802.1x
3152                 //else
3153                 //      padapter->securitypriv.dot11AuthAlgrthm = dot11AuthAlgrthm_Open;//open system
3154
3155                 //_disassociate(priv);
3156
3157                 break;
3158
3159         case IW_AUTH_RX_UNENCRYPTED_EAPOL:
3160                 //ieee->ieee802_1x = param->value;
3161                 break;
3162
3163         case IW_AUTH_PRIVACY_INVOKED:
3164                 //ieee->privacy_invoked = param->value;
3165                 break;
3166
3167 #ifdef CONFIG_WAPI_SUPPORT
3168 #ifndef CONFIG_IOCTL_CFG80211
3169         case IW_AUTH_WAPI_ENABLED:
3170                 break;
3171 #endif
3172 #endif
3173
3174         default:
3175                 return -EOPNOTSUPP;
3176
3177         }
3178
3179         return ret;
3180
3181 }
3182
3183 static int rtw_wx_set_enc_ext(struct net_device *dev,
3184                              struct iw_request_info *info,
3185                              union iwreq_data *wrqu, char *extra)
3186 {
3187         char *alg_name;
3188         u32 param_len;
3189         struct ieee_param *param = NULL;
3190         struct iw_point *pencoding = &wrqu->encoding;
3191         struct iw_encode_ext *pext = (struct iw_encode_ext *)extra;
3192         int ret = 0;
3193
3194         param_len = sizeof(struct ieee_param) + pext->key_len;
3195         param = (struct ieee_param *)kzalloc(param_len, GFP_KERNEL);
3196         if (param == NULL)
3197                 return -ENOMEM;
3198
3199         param->cmd = IEEE_CMD_SET_ENCRYPTION;
3200         memset(param->sta_addr, 0xff, ETH_ALEN);
3201
3202
3203         switch (pext->alg) {
3204         case IW_ENCODE_ALG_NONE:
3205                 //todo: remove key
3206                 //remove = 1;
3207                 alg_name = "none";
3208                 break;
3209         case IW_ENCODE_ALG_WEP:
3210                 alg_name = "WEP";
3211                 break;
3212         case IW_ENCODE_ALG_TKIP:
3213                 alg_name = "TKIP";
3214                 break;
3215         case IW_ENCODE_ALG_CCMP:
3216                 alg_name = "CCMP";
3217                 break;
3218 #ifdef CONFIG_WAPI_SUPPORT
3219 #ifndef CONFIG_IOCTL_CFG80211
3220         case IW_ENCODE_ALG_SM4:
3221                 alg_name= "SMS4";
3222                 memcpy(param->sta_addr, pext->addr.sa_data, ETH_ALEN);
3223                 DBG_8723A("rtw_wx_set_enc_ext: SMS4 case \n");
3224                 break;
3225 #endif
3226 #endif
3227         default:
3228                 ret = -1;
3229                 goto out;
3230         }
3231
3232         strncpy((char *)param->u.crypt.alg, alg_name, IEEE_CRYPT_ALG_NAME_LEN);
3233
3234         if (pext->ext_flags & IW_ENCODE_EXT_SET_TX_KEY)
3235         {
3236                 param->u.crypt.set_tx = 1;
3237         }
3238
3239         /* cliW: WEP does not have group key
3240          * just not checking GROUP key setting
3241          */
3242         if ((pext->alg != IW_ENCODE_ALG_WEP) &&
3243                 (pext->ext_flags & IW_ENCODE_EXT_GROUP_KEY))
3244         {
3245                 param->u.crypt.set_tx = 0;
3246         }
3247
3248         param->u.crypt.idx = (pencoding->flags&0x00FF) -1 ;
3249
3250         if (pext->ext_flags & IW_ENCODE_EXT_RX_SEQ_VALID)
3251         {
3252 #ifdef CONFIG_WAPI_SUPPORT
3253 #ifndef CONFIG_IOCTL_CFG80211
3254                 if(pext->alg == IW_ENCODE_ALG_SM4)
3255                         memcpy(param->u.crypt.seq, pext->rx_seq, 16);
3256                 else
3257 #endif
3258 #endif
3259                 memcpy(param->u.crypt.seq, pext->rx_seq, 8);
3260         }
3261
3262         if(pext->key_len)
3263         {
3264                 param->u.crypt.key_len = pext->key_len;
3265                 //memcpy(param + 1, pext + 1, pext->key_len);
3266                 memcpy(param->u.crypt.key, pext + 1, pext->key_len);
3267         }
3268
3269         if (pencoding->flags & IW_ENCODE_DISABLED)
3270         {
3271                 //todo: remove key
3272                 //remove = 1;
3273         }
3274
3275         ret =  wpa_set_encryption(dev, param, param_len);
3276
3277 out:
3278         kfree(param);
3279
3280         return ret;
3281 }
3282
3283
3284 static int rtw_wx_get_nick(struct net_device *dev,
3285                              struct iw_request_info *info,
3286                              union iwreq_data *wrqu, char *extra)
3287 {
3288         //_adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
3289          //struct mlme_priv *pmlmepriv = &(padapter->mlmepriv);
3290          //struct security_priv *psecuritypriv = &padapter->securitypriv;
3291
3292         if(extra)
3293         {
3294                 wrqu->data.length = 14;
3295                 wrqu->data.flags = 1;
3296                 memcpy(extra, "<WIFI@REALTEK>", 14);
3297         }
3298
3299         //rtw_signal_process(pid, SIGUSR1); //for test
3300
3301         //dump debug info here
3302 /*
3303         u32 dot11AuthAlgrthm;           // 802.11 auth, could be open, shared, and 8021x
3304         u32 dot11PrivacyAlgrthm;        // This specify the privacy for shared auth. algorithm.
3305         u32 dot118021XGrpPrivacy;       // This specify the privacy algthm. used for Grp key
3306         u32 ndisauthtype;
3307         u32 ndisencryptstatus;
3308 */
3309
3310         //DBG_8723A("auth_alg=0x%x, enc_alg=0x%x, auth_type=0x%x, enc_type=0x%x\n",
3311         //              psecuritypriv->dot11AuthAlgrthm, psecuritypriv->dot11PrivacyAlgrthm,
3312         //              psecuritypriv->ndisauthtype, psecuritypriv->ndisencryptstatus);
3313
3314         //DBG_8723A("enc_alg=0x%x\n", psecuritypriv->dot11PrivacyAlgrthm);
3315         //DBG_8723A("auth_type=0x%x\n", psecuritypriv->ndisauthtype);
3316         //DBG_8723A("enc_type=0x%x\n", psecuritypriv->ndisencryptstatus);
3317
3318 #if 0
3319         DBG_8723A("dbg(0x210)=0x%x\n", rtw_read32(padapter, 0x210));
3320         DBG_8723A("dbg(0x608)=0x%x\n", rtw_read32(padapter, 0x608));
3321         DBG_8723A("dbg(0x280)=0x%x\n", rtw_read32(padapter, 0x280));
3322         DBG_8723A("dbg(0x284)=0x%x\n", rtw_read32(padapter, 0x284));
3323         DBG_8723A("dbg(0x288)=0x%x\n", rtw_read32(padapter, 0x288));
3324
3325         DBG_8723A("dbg(0x664)=0x%x\n", rtw_read32(padapter, 0x664));
3326
3327
3328         DBG_8723A("\n");
3329
3330         DBG_8723A("dbg(0x430)=0x%x\n", rtw_read32(padapter, 0x430));
3331         DBG_8723A("dbg(0x438)=0x%x\n", rtw_read32(padapter, 0x438));
3332
3333         DBG_8723A("dbg(0x440)=0x%x\n", rtw_read32(padapter, 0x440));
3334
3335         DBG_8723A("dbg(0x458)=0x%x\n", rtw_read32(padapter, 0x458));
3336
3337         DBG_8723A("dbg(0x484)=0x%x\n", rtw_read32(padapter, 0x484));
3338         DBG_8723A("dbg(0x488)=0x%x\n", rtw_read32(padapter, 0x488));
3339
3340         DBG_8723A("dbg(0x444)=0x%x\n", rtw_read32(padapter, 0x444));
3341         DBG_8723A("dbg(0x448)=0x%x\n", rtw_read32(padapter, 0x448));
3342         DBG_8723A("dbg(0x44c)=0x%x\n", rtw_read32(padapter, 0x44c));
3343         DBG_8723A("dbg(0x450)=0x%x\n", rtw_read32(padapter, 0x450));
3344 #endif
3345
3346         return 0;
3347
3348 }
3349
3350 static int rtw_wx_read32(struct net_device *dev,
3351                             struct iw_request_info *info,
3352                             union iwreq_data *wrqu, char *extra)
3353 {
3354         PADAPTER padapter;
3355         struct iw_point *p;
3356         u16 len;
3357         u32 addr;
3358         u32 data32;
3359         u32 bytes;
3360         u8 *ptmp;
3361         int ret = 0;
3362
3363
3364         padapter = (PADAPTER)rtw_netdev_priv(dev);
3365         p = &wrqu->data;
3366         len = p->length;
3367         ptmp = (u8*)kmalloc(len, GFP_KERNEL);
3368         if (ptmp == NULL)
3369                 return -ENOMEM;
3370
3371         if (copy_from_user(ptmp, p->pointer, len)) {
3372                 ret = -EFAULT;
3373                 goto out;
3374         }
3375
3376         bytes = 0;
3377         addr = 0;
3378         sscanf(ptmp, "%d,%x", &bytes, &addr);
3379
3380         switch (bytes) {
3381                 case 1:
3382                         data32 = rtw_read8(padapter, addr);
3383                         sprintf(extra, "0x%02X", data32);
3384                         break;
3385                 case 2:
3386                         data32 = rtw_read16(padapter, addr);
3387                         sprintf(extra, "0x%04X", data32);
3388                         break;
3389                 case 4:
3390                         data32 = rtw_read32(padapter, addr);
3391                         sprintf(extra, "0x%08X", data32);
3392                         break;
3393                 default:
3394                         DBG_8723A(KERN_INFO "%s: usage> read [bytes],[address(hex)]\n", __func__);
3395                         ret = -EINVAL;
3396                         goto out;
3397         }
3398         DBG_8723A(KERN_INFO "%s: addr=0x%08X data=%s\n", __func__, addr, extra);
3399
3400 out:
3401         kfree(ptmp);
3402         return ret;
3403 }
3404
3405 static int rtw_wx_write32(struct net_device *dev,
3406                             struct iw_request_info *info,
3407                             union iwreq_data *wrqu, char *extra)
3408 {
3409         PADAPTER padapter = (PADAPTER)rtw_netdev_priv(dev);
3410
3411         u32 addr;
3412         u32 data32;
3413         u32 bytes;
3414
3415         bytes = 0;
3416         addr = 0;
3417         data32 = 0;
3418         sscanf(extra, "%d,%x,%x", &bytes, &addr, &data32);
3419
3420         switch (bytes) {
3421                 case 1:
3422                         rtw_write8(padapter, addr, (u8)data32);
3423                         DBG_8723A(KERN_INFO "%s: addr=0x%08X data=0x%02X\n", __func__, addr, (u8)data32);
3424                         break;
3425                 case 2:
3426                         rtw_write16(padapter, addr, (u16)data32);
3427                         DBG_8723A(KERN_INFO "%s: addr=0x%08X data=0x%04X\n", __func__, addr, (u16)data32);
3428                         break;
3429                 case 4:
3430                         rtw_write32(padapter, addr, data32);
3431                         DBG_8723A(KERN_INFO "%s: addr=0x%08X data=0x%08X\n", __func__, addr, data32);
3432                         break;
3433                 default:
3434                         DBG_8723A(KERN_INFO "%s: usage> write [bytes],[address(hex)],[data(hex)]\n", __func__);
3435                         return -EINVAL;
3436         }
3437
3438         return 0;
3439 }
3440
3441 static int rtw_wx_read_rf(struct net_device *dev,
3442                             struct iw_request_info *info,
3443                             union iwreq_data *wrqu, char *extra)
3444 {
3445         _adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
3446         u32 path, addr, data32;
3447
3448
3449         path = *(u32*)extra;
3450         addr = *((u32*)extra + 1);
3451         data32 = rtw_hal_read_rfreg(padapter, path, addr, 0xFFFFF);
3452 //      DBG_8723A("%s: path=%d addr=0x%02x data=0x%05x\n", __func__, path, addr, data32);
3453         /*
3454          * IMPORTANT!!
3455          * Only when wireless private ioctl is at odd order,
3456          * "extra" would be copied to user space.
3457          */
3458         sprintf(extra, "0x%05x", data32);
3459
3460         return 0;
3461 }
3462
3463 static int rtw_wx_write_rf(struct net_device *dev,
3464                             struct iw_request_info *info,
3465                             union iwreq_data *wrqu, char *extra)
3466 {
3467         _adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
3468         u32 path, addr, data32;
3469
3470
3471         path = *(u32*)extra;
3472         addr = *((u32*)extra + 1);
3473         data32 = *((u32*)extra + 2);
3474 //      DBG_8723A("%s: path=%d addr=0x%02x data=0x%05x\n", __func__, path, addr, data32);
3475         rtw_hal_write_rfreg(padapter, path, addr, 0xFFFFF, data32);
3476
3477         return 0;
3478 }
3479
3480 static int rtw_wx_priv_null(struct net_device *dev, struct iw_request_info *a,
3481                  union iwreq_data *wrqu, char *b)
3482 {
3483         return -1;
3484 }
3485
3486 static int dummy(struct net_device *dev, struct iw_request_info *a,
3487                  union iwreq_data *wrqu, char *b)
3488 {
3489         //_adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
3490         //struct mlme_priv *pmlmepriv = &(padapter->mlmepriv);
3491
3492         //DBG_8723A("cmd_code=%x, fwstate=0x%x\n", a->cmd, get_fwstate(pmlmepriv));
3493
3494         return -1;
3495
3496 }
3497
3498 static int rtw_wx_set_channel_plan(struct net_device *dev,
3499                                struct iw_request_info *info,
3500                                union iwreq_data *wrqu, char *extra)
3501 {
3502         _adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
3503         struct registry_priv *pregistrypriv = &padapter->registrypriv;
3504         struct mlme_priv *pmlmepriv = &padapter->mlmepriv;
3505         extern int rtw_channel_plan;
3506         u8 channel_plan_req = (u8) (*((int *)wrqu));
3507
3508         #if 0
3509         rtw_channel_plan = (int)wrqu->data.pointer;
3510         pregistrypriv->channel_plan = rtw_channel_plan;
3511         pmlmepriv->ChannelPlan = pregistrypriv->channel_plan;
3512         #endif
3513
3514         if( _SUCCESS == rtw_set_chplan_cmd(padapter, channel_plan_req, 1) ) {
3515                 DBG_8723A("%s set channel_plan = 0x%02X\n", __func__, pmlmepriv->ChannelPlan);
3516         } else
3517                 return -EPERM;
3518
3519         return 0;
3520 }
3521
3522 static int rtw_wx_set_mtk_wps_probe_ie(struct net_device *dev,
3523                 struct iw_request_info *a,
3524                 union iwreq_data *wrqu, char *b)
3525 {
3526         return 0;
3527 }
3528
3529 static int rtw_wx_get_sensitivity(struct net_device *dev,
3530                                 struct iw_request_info *info,
3531                                 union iwreq_data *wrqu, char *buf)
3532 {
3533         return 0;
3534 }
3535
3536 static int rtw_wx_set_mtk_wps_ie(struct net_device *dev,
3537                                 struct iw_request_info *info,
3538                                 union iwreq_data *wrqu, char *extra)
3539 {
3540         return 0;
3541 }
3542
3543 /*
3544 typedef int (*iw_handler)(struct net_device *dev, struct iw_request_info *info,
3545                           union iwreq_data *wrqu, char *extra);
3546 */
3547 /*
3548  *      For all data larger than 16 octets, we need to use a
3549  *      pointer to memory allocated in user space.
3550  */
3551 static  int rtw_drvext_hdl(struct net_device *dev, struct iw_request_info *info,
3552                                                 union iwreq_data *wrqu, char *extra)
3553 {
3554
3555  #if 0
3556 struct  iw_point
3557 {
3558   void __user   *pointer;       /* Pointer to the data  (in user space) */
3559   __u16         length;         /* number of fields or size in bytes */
3560   __u16         flags;          /* Optional params */
3561 };
3562  #endif
3563
3564 #ifdef CONFIG_DRVEXT_MODULE
3565         u8 res;
3566         struct drvext_handler *phandler;
3567         struct drvext_oidparam *poidparam;
3568         int ret;
3569         u16 len;
3570         u8 *pparmbuf, bset;
3571         _adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
3572         struct iw_point *p = &wrqu->data;
3573
3574         if( (!p->length) || (!p->pointer)){
3575                 ret = -EINVAL;
3576                 goto _rtw_drvext_hdl_exit;
3577         }
3578
3579
3580         bset = (u8)(p->flags&0xFFFF);
3581         len = p->length;
3582         pparmbuf = (u8*)kmalloc(len, GFP_KERNEL);
3583         if (pparmbuf == NULL){
3584                 ret = -ENOMEM;
3585                 goto out;
3586         }
3587
3588         if(bset)//set info
3589         {
3590                 if (copy_from_user(pparmbuf, p->pointer,len)) {
3591                         ret = -EFAULT;
3592                         goto _rtw_drvext_hdl_exit;
3593                 }
3594         }
3595         else//query info
3596         {
3597
3598         }
3599
3600
3601         //
3602         poidparam = (struct drvext_oidparam *)pparmbuf;
3603
3604         RT_TRACE(_module_rtl871x_ioctl_os_c,_drv_info_,("drvext set oid subcode [%d], len[%d], InformationBufferLength[%d]\r\n",
3605                                                  poidparam->subcode, poidparam->len, len));
3606
3607
3608         //check subcode
3609         if ( poidparam->subcode >= MAX_DRVEXT_HANDLERS)
3610         {
3611                 RT_TRACE(_module_rtl871x_ioctl_os_c,_drv_err_,("no matching drvext handlers\r\n"));
3612                 ret = -EINVAL;
3613                 goto _rtw_drvext_hdl_exit;
3614         }
3615
3616
3617         if ( poidparam->subcode >= MAX_DRVEXT_OID_SUBCODES)
3618         {
3619                 RT_TRACE(_module_rtl871x_ioctl_os_c,_drv_err_,("no matching drvext subcodes\r\n"));
3620                 ret = -EINVAL;
3621                 goto _rtw_drvext_hdl_exit;
3622         }
3623
3624
3625         phandler = drvextoidhandlers + poidparam->subcode;
3626
3627         if (poidparam->len != phandler->parmsize)
3628         {
3629                 RT_TRACE(_module_rtl871x_ioctl_os_c,_drv_err_,("no matching drvext param size %d vs %d\r\n",
3630                                                 poidparam->len , phandler->parmsize));
3631                 ret = -EINVAL;
3632                 goto _rtw_drvext_hdl_exit;
3633         }
3634
3635
3636         res = phandler->handler(&padapter->drvextpriv, bset, poidparam->data);
3637
3638         if(res==0)
3639         {
3640                 ret = 0;
3641
3642                 if (bset == 0x00) {//query info
3643                         //memcpy(p->pointer, pparmbuf, len);
3644                         if (copy_to_user(p->pointer, pparmbuf, len))
3645                                 ret = -EFAULT;
3646                 }
3647         }
3648         else
3649                 ret = -EFAULT;
3650
3651
3652 _rtw_drvext_hdl_exit:
3653         kfree(pparmbuf);
3654 out:
3655         return ret;
3656
3657 #endif
3658
3659         return 0;
3660
3661 }
3662
3663 static int rtw_get_ap_info(struct net_device *dev,
3664                                struct iw_request_info *info,
3665                                union iwreq_data *wrqu, char *extra)
3666 {
3667         int bssid_match, ret = 0;
3668         u32 cnt=0, wpa_ielen;
3669         _irqL   irqL;
3670         _list   *plist, *phead;
3671         unsigned char *pbuf;
3672         u8 bssid[ETH_ALEN];
3673         char data[32];
3674         struct wlan_network *pnetwork = NULL;
3675         _adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
3676         struct mlme_priv *pmlmepriv = &(padapter->mlmepriv);
3677         _queue *queue = &(pmlmepriv->scanned_queue);
3678         struct iw_point *pdata = &wrqu->data;
3679
3680         DBG_8723A("+rtw_get_aplist_info\n");
3681
3682         if((padapter->bDriverStopped) || (pdata==NULL))
3683         {
3684                 ret= -EINVAL;
3685                 goto exit;
3686         }
3687
3688         while((check_fwstate(pmlmepriv, (_FW_UNDER_SURVEY|_FW_UNDER_LINKING))) == _TRUE)
3689         {
3690                 rtw_msleep_os(30);
3691                 cnt++;
3692                 if(cnt > 100)
3693                         break;
3694         }
3695
3696
3697         //pdata->length = 0;//?
3698         pdata->flags = 0;
3699         if(pdata->length>=32)
3700         {
3701                 if(copy_from_user(data, pdata->pointer, 32))
3702                 {
3703                         ret= -EINVAL;
3704                         goto exit;
3705                 }
3706         }
3707         else
3708         {
3709                 ret= -EINVAL;
3710                 goto exit;
3711         }
3712
3713         spin_lock_bh(&(pmlmepriv->scanned_queue.lock));
3714
3715         phead = get_list_head(queue);
3716         plist = get_next(phead);
3717
3718         while(1)
3719         {
3720                 if (rtw_end_of_queue_search(phead,plist)== _TRUE)
3721                         break;
3722
3723
3724                 pnetwork = LIST_CONTAINOR(plist, struct wlan_network, list);
3725
3726                 //if(hwaddr_aton_i(pdata->pointer, bssid))
3727                 if(hwaddr_aton_i(data, bssid))
3728                 {
3729                         DBG_8723A("Invalid BSSID '%s'.\n", (u8*)data);
3730                         spin_unlock_bh(&(pmlmepriv->scanned_queue.lock));
3731                         return -EINVAL;
3732                 }
3733
3734
3735                 if (!memcmp(bssid, pnetwork->network.MacAddress, ETH_ALEN))//BSSID match, then check if supporting wpa/wpa2
3736                 {
3737                         DBG_8723A("BSSID:" MAC_FMT "\n", MAC_ARG(bssid));
3738
3739                         pbuf = rtw_get_wpa_ie(&pnetwork->network.IEs[12], &wpa_ielen, pnetwork->network.IELength-12);
3740                         if(pbuf && (wpa_ielen>0))
3741                         {
3742                                 pdata->flags = 1;
3743                                 break;
3744                         }
3745
3746                         pbuf = rtw_get_wpa2_ie(&pnetwork->network.IEs[12], &wpa_ielen, pnetwork->network.IELength-12);
3747                         if(pbuf && (wpa_ielen>0))
3748                         {
3749                                 pdata->flags = 2;
3750                                 break;
3751                         }
3752
3753                 }
3754
3755                 plist = get_next(plist);
3756
3757         }
3758
3759         spin_unlock_bh(&(pmlmepriv->scanned_queue.lock));
3760
3761         if(pdata->length>=34)
3762         {
3763                 if(copy_to_user((u8*)pdata->pointer+32, (u8*)&pdata->flags, 1))
3764                 {
3765                         ret= -EINVAL;
3766                         goto exit;
3767                 }
3768         }
3769
3770 exit:
3771
3772         return ret;
3773
3774 }
3775
3776 static int rtw_set_pid(struct net_device *dev,
3777                                struct iw_request_info *info,
3778                                union iwreq_data *wrqu, char *extra)
3779 {
3780
3781         int ret = 0;
3782         _adapter *padapter = rtw_netdev_priv(dev);
3783         int *pdata = (int *)wrqu;
3784         int selector;
3785
3786         if((padapter->bDriverStopped) || (pdata==NULL))
3787         {
3788                 ret= -EINVAL;
3789                 goto exit;
3790         }
3791
3792         selector = *pdata;
3793         if(selector < 3 && selector >=0) {
3794                 padapter->pid[selector] = *(pdata+1);
3795                 #ifdef CONFIG_GLOBAL_UI_PID
3796                 ui_pid[selector] = *(pdata+1);
3797                 #endif
3798                 DBG_8723A("%s set pid[%d]=%d\n", __func__, selector ,padapter->pid[selector]);
3799         }
3800         else
3801                 DBG_8723A("%s selector %d error\n", __func__, selector);
3802
3803 exit:
3804
3805         return ret;
3806
3807 }
3808
3809 static int rtw_wps_start(struct net_device *dev,
3810                                struct iw_request_info *info,
3811                                union iwreq_data *wrqu, char *extra)
3812 {
3813
3814         int ret = 0;
3815         _adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
3816         struct iw_point *pdata = &wrqu->data;
3817         u32   u32wps_start = 0;
3818         unsigned int uintRet = 0;
3819
3820         uintRet = copy_from_user( ( void* ) &u32wps_start, pdata->pointer, 4 );
3821
3822         if((padapter->bDriverStopped) || (pdata==NULL))
3823         {
3824                 ret= -EINVAL;
3825                 goto exit;
3826         }
3827
3828         if ( u32wps_start == 0 )
3829         {
3830                 u32wps_start = *extra;
3831         }
3832
3833         DBG_8723A( "[%s] wps_start = %d\n", __func__, u32wps_start );
3834
3835         if ( u32wps_start == 1 ) // WPS Start
3836         {
3837                 rtw_led_control(padapter, LED_CTL_START_WPS);
3838         }
3839         else if ( u32wps_start == 2 ) // WPS Stop because of wps success
3840         {
3841                 rtw_led_control(padapter, LED_CTL_STOP_WPS);
3842         }
3843         else if ( u32wps_start == 3 ) // WPS Stop because of wps fail
3844         {
3845                 rtw_led_control(padapter, LED_CTL_STOP_WPS_FAIL);
3846         }
3847
3848 #ifdef CONFIG_INTEL_WIDI
3849         process_intel_widi_wps_status(padapter, u32wps_start);
3850 #endif //CONFIG_INTEL_WIDI
3851
3852 exit:
3853
3854         return ret;
3855
3856 }
3857
3858 #ifdef CONFIG_P2P
3859 static int rtw_wext_p2p_enable(struct net_device *dev,
3860                                struct iw_request_info *info,
3861                                union iwreq_data *wrqu, char *extra)
3862 {
3863
3864         int ret = 0;
3865         _adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
3866         struct mlme_priv *pmlmepriv = &(padapter->mlmepriv);
3867         struct iw_point *pdata = &wrqu->data;
3868         struct wifidirect_info *pwdinfo= &(padapter->wdinfo);
3869         struct mlme_ext_priv    *pmlmeext = &padapter->mlmeextpriv;
3870         struct pwrctrl_priv *pwrpriv = &padapter->pwrctrlpriv;
3871         enum P2P_ROLE init_role = P2P_ROLE_DISABLE;
3872
3873         if(*extra == '0' )
3874                 init_role = P2P_ROLE_DISABLE;
3875         else if(*extra == '1')
3876                 init_role = P2P_ROLE_DEVICE;
3877         else if(*extra == '2')
3878                 init_role = P2P_ROLE_CLIENT;
3879         else if(*extra == '3')
3880                 init_role = P2P_ROLE_GO;
3881
3882         if(_FAIL == rtw_p2p_enable(padapter, init_role))
3883         {
3884                 ret = -EFAULT;
3885                 goto exit;
3886         }
3887
3888         //set channel/bandwidth
3889         if(init_role != P2P_ROLE_DISABLE)
3890         {
3891                 u8 channel, ch_offset;
3892                 u16 bwmode;
3893
3894                 if(rtw_p2p_chk_state(pwdinfo, P2P_STATE_LISTEN))
3895                 {
3896                         //      Stay at the listen state and wait for discovery.
3897                         channel = pwdinfo->listen_channel;
3898                         pwdinfo->operating_channel = pwdinfo->listen_channel;
3899                         ch_offset = HAL_PRIME_CHNL_OFFSET_DONT_CARE;
3900                         bwmode = HT_CHANNEL_WIDTH_20;
3901                 }
3902 #ifdef CONFIG_CONCURRENT_MODE
3903                 else if(rtw_p2p_chk_state(pwdinfo, P2P_STATE_IDLE))
3904                 {
3905                         _adapter                                *pbuddy_adapter = padapter->pbuddy_adapter;
3906                         //struct wifidirect_info        *pbuddy_wdinfo = &pbuddy_adapter->wdinfo;
3907                         struct mlme_priv                *pbuddy_mlmepriv = &pbuddy_adapter->mlmepriv;
3908                         struct mlme_ext_priv    *pbuddy_mlmeext = &pbuddy_adapter->mlmeextpriv;
3909
3910                         _set_timer( &pwdinfo->ap_p2p_switch_timer, pwdinfo->ext_listen_interval );
3911                         if ( check_fwstate( pbuddy_mlmepriv, _FW_LINKED ) )
3912                         {
3913                                 pwdinfo->operating_channel = pbuddy_mlmeext->cur_channel;
3914                                 //      How about the ch_offset and bwmode ??
3915                         }
3916                         else
3917                         {
3918                                 pwdinfo->operating_channel = pwdinfo->listen_channel;
3919                         }
3920
3921                         channel = pbuddy_mlmeext->cur_channel;
3922                         ch_offset = pbuddy_mlmeext->cur_ch_offset;
3923                         bwmode = pbuddy_mlmeext->cur_bwmode;
3924                 }
3925 #endif
3926                 else
3927                 {
3928                         pwdinfo->operating_channel = pmlmeext->cur_channel;
3929
3930                         channel = pwdinfo->operating_channel;
3931                         ch_offset = pmlmeext->cur_ch_offset;
3932                         bwmode = pmlmeext->cur_bwmode;
3933                 }
3934
3935                 set_channel_bwmode(padapter, channel, ch_offset, bwmode);
3936         }
3937
3938 exit:
3939         return ret;
3940
3941 }
3942
3943 static int rtw_p2p_set_go_nego_ssid(struct net_device *dev,
3944                                struct iw_request_info *info,
3945                                union iwreq_data *wrqu, char *extra)
3946 {
3947
3948         int ret = 0;
3949         _adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
3950         struct mlme_priv *pmlmepriv = &(padapter->mlmepriv);
3951         struct iw_point *pdata = &wrqu->data;
3952         struct wifidirect_info *pwdinfo= &(padapter->wdinfo);
3953
3954         DBG_8723A( "[%s] ssid = %s, len = %zu\n", __func__, extra, strlen( extra ) );
3955         memcpy(pwdinfo->nego_ssid, extra, strlen( extra ) );
3956         pwdinfo->nego_ssidlen = strlen( extra );
3957
3958         return ret;
3959
3960 }
3961
3962
3963 static int rtw_p2p_set_intent(struct net_device *dev,
3964                                struct iw_request_info *info,
3965                                union iwreq_data *wrqu, char *extra)
3966 {
3967         int                                                     ret = 0;
3968         _adapter                                                *padapter = (_adapter *)rtw_netdev_priv(dev);
3969         struct wifidirect_info                  *pwdinfo= &(padapter->wdinfo);
3970         u8                                                      intent = pwdinfo->intent;
3971
3972         switch( wrqu->data.length )
3973         {
3974                 case 1:
3975                 {
3976                         intent = extra[ 0 ] - '0';
3977                         break;
3978                 }
3979                 case 2:
3980                 {
3981                         intent = str_2char2num( extra[ 0 ], extra[ 1 ]);
3982                         break;
3983                 }
3984         }
3985
3986         if ( intent <= 15 )
3987         {
3988                 pwdinfo->intent= intent;
3989         }
3990         else
3991         {
3992                 ret = -1;
3993         }
3994
3995         DBG_8723A( "[%s] intent = %d\n", __func__, intent);
3996
3997         return ret;
3998
3999 }
4000
4001 static int rtw_p2p_set_listen_ch(struct net_device *dev,
4002                                struct iw_request_info *info,
4003                                union iwreq_data *wrqu, char *extra)
4004 {
4005
4006         int ret = 0;
4007         _adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
4008         struct wifidirect_info *pwdinfo= &(padapter->wdinfo);
4009         u8      listen_ch = pwdinfo->listen_channel;    //      Listen channel number
4010
4011         switch( wrqu->data.length )
4012         {
4013                 case 1:
4014                 {
4015                         listen_ch = extra[ 0 ] - '0';
4016                         break;
4017                 }
4018                 case 2:
4019                 {
4020                         listen_ch = str_2char2num( extra[ 0 ], extra[ 1 ]);
4021                         break;
4022                 }
4023         }
4024
4025         if ( ( listen_ch == 1 ) || ( listen_ch == 6 ) || ( listen_ch == 11 ) )
4026         {
4027                 pwdinfo->listen_channel = listen_ch;
4028                 set_channel_bwmode(padapter, pwdinfo->listen_channel, HAL_PRIME_CHNL_OFFSET_DONT_CARE, HT_CHANNEL_WIDTH_20);
4029         }
4030         else
4031         {
4032                 ret = -1;
4033         }
4034
4035         DBG_8723A( "[%s] listen_ch = %d\n", __func__, pwdinfo->listen_channel );
4036
4037         return ret;
4038
4039 }
4040
4041 static int rtw_p2p_set_op_ch(struct net_device *dev,
4042                                struct iw_request_info *info,
4043                                union iwreq_data *wrqu, char *extra)
4044 {
4045 //      Commented by Albert 20110524
4046 //      This function is used to set the operating channel if the driver will become the group owner
4047
4048         int ret = 0;
4049         _adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
4050         struct wifidirect_info *pwdinfo= &(padapter->wdinfo);
4051         u8      op_ch = pwdinfo->operating_channel;     //      Operating channel number
4052
4053         switch( wrqu->data.length )
4054         {
4055                 case 1:
4056                 {
4057                         op_ch = extra[ 0 ] - '0';
4058                         break;
4059                 }
4060                 case 2:
4061                 {
4062                         op_ch = str_2char2num( extra[ 0 ], extra[ 1 ]);
4063                         break;
4064                 }
4065         }
4066
4067         if ( op_ch > 0 )
4068         {
4069                 pwdinfo->operating_channel = op_ch;
4070         }
4071         else
4072         {
4073                 ret = -1;
4074         }
4075
4076         DBG_8723A( "[%s] op_ch = %d\n", __func__, pwdinfo->operating_channel );
4077
4078         return ret;
4079
4080 }
4081
4082
4083 static int rtw_p2p_profilefound(struct net_device *dev,
4084                                struct iw_request_info *info,
4085                                union iwreq_data *wrqu, char *extra)
4086 {
4087
4088         int ret = 0;
4089         _adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
4090         struct wifidirect_info *pwdinfo= &(padapter->wdinfo);
4091
4092         //      Comment by Albert 2010/10/13
4093         //      Input data format:
4094         //      Ex:  0
4095         //      Ex:  1XX:XX:XX:XX:XX:XXYYSSID
4096         //      0 => Reflush the profile record list.
4097         //      1 => Add the profile list
4098         //      XX:XX:XX:XX:XX:XX => peer's MAC Address ( ex: 00:E0:4C:00:00:01 )
4099         //      YY => SSID Length
4100         //      SSID => SSID for persistence group
4101
4102         DBG_8723A( "[%s] In value = %s, len = %d \n", __func__, extra, wrqu->data.length -1);
4103
4104
4105         //      The upper application should pass the SSID to driver by using this rtw_p2p_profilefound function.
4106         if(!rtw_p2p_chk_state(pwdinfo, P2P_STATE_NONE))
4107         {
4108                 if ( extra[ 0 ] == '0' )
4109                 {
4110                         //      Remove all the profile information of wifidirect_info structure.
4111                         memset( &pwdinfo->profileinfo[ 0 ], 0x00, sizeof( struct profile_info ) * P2P_MAX_PERSISTENT_GROUP_NUM );
4112                         pwdinfo->profileindex = 0;
4113                 }
4114                 else
4115                 {
4116                         if ( pwdinfo->profileindex >= P2P_MAX_PERSISTENT_GROUP_NUM )
4117                 {
4118                                 ret = -1;
4119                 }
4120                 else
4121                 {
4122                                 int jj, kk;
4123
4124                                 //      Add this profile information into pwdinfo->profileinfo
4125                                 //      Ex:  1XX:XX:XX:XX:XX:XXYYSSID
4126                                 for( jj = 0, kk = 1; jj < ETH_ALEN; jj++, kk += 3 )
4127                                 {
4128                                         pwdinfo->profileinfo[ pwdinfo->profileindex ].peermac[ jj ] = key_2char2num(extra[ kk ], extra[ kk+ 1 ]);
4129                                 }
4130
4131                                 pwdinfo->profileinfo[ pwdinfo->profileindex ].ssidlen = ( extra[18] - '0' ) * 10 + ( extra[ 19 ] - '0' );
4132                                 memcpy(pwdinfo->profileinfo[ pwdinfo->profileindex ].ssid, &extra[ 20 ], pwdinfo->profileinfo[ pwdinfo->profileindex ].ssidlen );
4133                                 pwdinfo->profileindex++;
4134                         }
4135                 }
4136         }
4137
4138         return ret;
4139
4140 }
4141
4142 static int rtw_p2p_setDN(struct net_device *dev,
4143                                struct iw_request_info *info,
4144                                union iwreq_data *wrqu, char *extra)
4145 {
4146
4147         int ret = 0;
4148         _adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
4149         struct wifidirect_info *pwdinfo= &(padapter->wdinfo);
4150
4151
4152         DBG_8723A( "[%s] %s %d\n", __func__, extra, wrqu->data.length -1  );
4153         memset( pwdinfo->device_name, 0x00, WPS_MAX_DEVICE_NAME_LEN );
4154         memcpy(pwdinfo->device_name, extra, wrqu->data.length - 1 );
4155         pwdinfo->device_name_len = wrqu->data.length - 1;
4156
4157         return ret;
4158
4159 }
4160
4161
4162 static int rtw_p2p_get_status(struct net_device *dev,
4163                                struct iw_request_info *info,
4164                                union iwreq_data *wrqu, char *extra)
4165 {
4166
4167         int ret = 0;
4168         _adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
4169         struct iw_point *pdata = &wrqu->data;
4170         struct wifidirect_info  *pwdinfo = &( padapter->wdinfo );
4171 #ifdef CONFIG_CONCURRENT_MODE
4172         _adapter                                *pbuddy_adapter = padapter->pbuddy_adapter;
4173         struct wifidirect_info  *pbuddy_wdinfo = &pbuddy_adapter->wdinfo;
4174         struct mlme_priv                *pbuddy_mlmepriv = &pbuddy_adapter->mlmepriv;
4175         struct mlme_ext_priv    *pbuddy_mlmeext = &pbuddy_adapter->mlmeextpriv;
4176 #endif
4177
4178         if ( padapter->bShowGetP2PState )
4179         {
4180                 DBG_8723A( "[%s] Role = %d, Status = %d, peer addr = %.2X:%.2X:%.2X:%.2X:%.2X:%.2X\n", __func__, rtw_p2p_role(pwdinfo), rtw_p2p_state(pwdinfo),
4181                                 pwdinfo->p2p_peer_interface_addr[ 0 ], pwdinfo->p2p_peer_interface_addr[ 1 ], pwdinfo->p2p_peer_interface_addr[ 2 ],
4182                                 pwdinfo->p2p_peer_interface_addr[ 3 ], pwdinfo->p2p_peer_interface_addr[ 4 ], pwdinfo->p2p_peer_interface_addr[ 5 ]);
4183         }
4184
4185         //      Commented by Albert 2010/10/12
4186         //      Because of the output size limitation, I had removed the "Role" information.
4187         //      About the "Role" information, we will use the new private IOCTL to get the "Role" information.
4188         sprintf( extra, "\n\nStatus=%.2d\n", rtw_p2p_state(pwdinfo) );
4189         wrqu->data.length = strlen( extra );
4190
4191         return ret;
4192
4193 }
4194
4195 //      Commented by Albert 20110520
4196 //      This function will return the config method description
4197 //      This config method description will show us which config method the remote P2P device is intented to use
4198 //      by sending the provisioning discovery request frame.
4199
4200 static int rtw_p2p_get_req_cm(struct net_device *dev,
4201                                struct iw_request_info *info,
4202                                union iwreq_data *wrqu, char *extra)
4203 {
4204
4205         int ret = 0;
4206         _adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
4207         struct iw_point *pdata = &wrqu->data;
4208         struct wifidirect_info  *pwdinfo = &( padapter->wdinfo );
4209
4210         sprintf( extra, "\n\nCM=%s\n", pwdinfo->rx_prov_disc_info.strconfig_method_desc_of_prov_disc_req );
4211         wrqu->data.length = strlen( extra );
4212         return ret;
4213
4214 }
4215
4216
4217 static int rtw_p2p_get_role(struct net_device *dev,
4218                                struct iw_request_info *info,
4219                                union iwreq_data *wrqu, char *extra)
4220 {
4221
4222         int ret = 0;
4223         _adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
4224         struct iw_point *pdata = &wrqu->data;
4225         struct wifidirect_info  *pwdinfo = &( padapter->wdinfo );
4226
4227
4228         DBG_8723A( "[%s] Role = %d, Status = %d, peer addr = %.2X:%.2X:%.2X:%.2X:%.2X:%.2X\n", __func__, rtw_p2p_role(pwdinfo), rtw_p2p_state(pwdinfo),
4229                         pwdinfo->p2p_peer_interface_addr[ 0 ], pwdinfo->p2p_peer_interface_addr[ 1 ], pwdinfo->p2p_peer_interface_addr[ 2 ],
4230                         pwdinfo->p2p_peer_interface_addr[ 3 ], pwdinfo->p2p_peer_interface_addr[ 4 ], pwdinfo->p2p_peer_interface_addr[ 5 ]);
4231
4232         sprintf( extra, "\n\nRole=%.2d\n", rtw_p2p_role(pwdinfo) );
4233         wrqu->data.length = strlen( extra );
4234         return ret;
4235
4236 }
4237
4238
4239 static int rtw_p2p_get_peer_ifaddr(struct net_device *dev,
4240                                struct iw_request_info *info,
4241                                union iwreq_data *wrqu, char *extra)
4242 {
4243
4244         int ret = 0;
4245         _adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
4246         struct iw_point *pdata = &wrqu->data;
4247         struct wifidirect_info  *pwdinfo = &( padapter->wdinfo );
4248
4249
4250         DBG_8723A( "[%s] Role = %d, Status = %d, peer addr = %.2X:%.2X:%.2X:%.2X:%.2X:%.2X\n", __func__, rtw_p2p_role(pwdinfo), rtw_p2p_state(pwdinfo),
4251                         pwdinfo->p2p_peer_interface_addr[ 0 ], pwdinfo->p2p_peer_interface_addr[ 1 ], pwdinfo->p2p_peer_interface_addr[ 2 ],
4252                         pwdinfo->p2p_peer_interface_addr[ 3 ], pwdinfo->p2p_peer_interface_addr[ 4 ], pwdinfo->p2p_peer_interface_addr[ 5 ]);
4253
4254         sprintf( extra, "\nMAC %.2X:%.2X:%.2X:%.2X:%.2X:%.2X",
4255                         pwdinfo->p2p_peer_interface_addr[ 0 ], pwdinfo->p2p_peer_interface_addr[ 1 ], pwdinfo->p2p_peer_interface_addr[ 2 ],
4256                         pwdinfo->p2p_peer_interface_addr[ 3 ], pwdinfo->p2p_peer_interface_addr[ 4 ], pwdinfo->p2p_peer_interface_addr[ 5 ]);
4257         wrqu->data.length = strlen( extra );
4258         return ret;
4259
4260 }
4261
4262 static int rtw_p2p_get_peer_devaddr(struct net_device *dev,
4263                                struct iw_request_info *info,
4264                                union iwreq_data *wrqu, char *extra)
4265
4266 {
4267
4268         int ret = 0;
4269         _adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
4270         struct iw_point *pdata = &wrqu->data;
4271         struct wifidirect_info  *pwdinfo = &( padapter->wdinfo );
4272
4273         DBG_8723A( "[%s] Role = %d, Status = %d, peer addr = %.2X:%.2X:%.2X:%.2X:%.2X:%.2X\n", __func__, rtw_p2p_role(pwdinfo), rtw_p2p_state(pwdinfo),
4274                         pwdinfo->rx_prov_disc_info.peerDevAddr[ 0 ], pwdinfo->rx_prov_disc_info.peerDevAddr[ 1 ],
4275                         pwdinfo->rx_prov_disc_info.peerDevAddr[ 2 ], pwdinfo->rx_prov_disc_info.peerDevAddr[ 3 ],
4276                         pwdinfo->rx_prov_disc_info.peerDevAddr[ 4 ], pwdinfo->rx_prov_disc_info.peerDevAddr[ 5 ]);
4277         sprintf( extra, "\n%.2X%.2X%.2X%.2X%.2X%.2X",
4278                         pwdinfo->rx_prov_disc_info.peerDevAddr[ 0 ], pwdinfo->rx_prov_disc_info.peerDevAddr[ 1 ],
4279                         pwdinfo->rx_prov_disc_info.peerDevAddr[ 2 ], pwdinfo->rx_prov_disc_info.peerDevAddr[ 3 ],
4280                         pwdinfo->rx_prov_disc_info.peerDevAddr[ 4 ], pwdinfo->rx_prov_disc_info.peerDevAddr[ 5 ]);
4281         wrqu->data.length = strlen( extra );
4282         return ret;
4283
4284 }
4285
4286 static int rtw_p2p_get_peer_devaddr_by_invitation(struct net_device *dev,
4287                                struct iw_request_info *info,
4288                                union iwreq_data *wrqu, char *extra)
4289
4290 {
4291
4292         int ret = 0;
4293         _adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
4294         struct iw_point *pdata = &wrqu->data;
4295         struct wifidirect_info  *pwdinfo = &( padapter->wdinfo );
4296
4297         DBG_8723A( "[%s] Role = %d, Status = %d, peer addr = %.2X:%.2X:%.2X:%.2X:%.2X:%.2X\n", __func__, rtw_p2p_role(pwdinfo), rtw_p2p_state(pwdinfo),
4298                         pwdinfo->p2p_peer_device_addr[ 0 ], pwdinfo->p2p_peer_device_addr[ 1 ],
4299                         pwdinfo->p2p_peer_device_addr[ 2 ], pwdinfo->p2p_peer_device_addr[ 3 ],
4300                         pwdinfo->p2p_peer_device_addr[ 4 ], pwdinfo->p2p_peer_device_addr[ 5 ]);
4301         sprintf( extra, "\nMAC %.2X:%.2X:%.2X:%.2X:%.2X:%.2X",
4302                         pwdinfo->p2p_peer_device_addr[ 0 ], pwdinfo->p2p_peer_device_addr[ 1 ],
4303                         pwdinfo->p2p_peer_device_addr[ 2 ], pwdinfo->p2p_peer_device_addr[ 3 ],
4304                         pwdinfo->p2p_peer_device_addr[ 4 ], pwdinfo->p2p_peer_device_addr[ 5 ]);
4305         wrqu->data.length = strlen( extra );
4306         return ret;
4307
4308 }
4309
4310 static int rtw_p2p_get_groupid(struct net_device *dev,
4311                                struct iw_request_info *info,
4312                                union iwreq_data *wrqu, char *extra)
4313
4314 {
4315
4316         int ret = 0;
4317         _adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
4318         struct iw_point *pdata = &wrqu->data;
4319         struct wifidirect_info  *pwdinfo = &( padapter->wdinfo );
4320
4321         sprintf( extra, "\n%.2X:%.2X:%.2X:%.2X:%.2X:%.2X %s",
4322                         pwdinfo->groupid_info.go_device_addr[ 0 ], pwdinfo->groupid_info.go_device_addr[ 1 ],
4323                         pwdinfo->groupid_info.go_device_addr[ 2 ], pwdinfo->groupid_info.go_device_addr[ 3 ],
4324                         pwdinfo->groupid_info.go_device_addr[ 4 ], pwdinfo->groupid_info.go_device_addr[ 5 ],
4325                         pwdinfo->groupid_info.ssid);
4326         wrqu->data.length = strlen( extra );
4327         return ret;
4328
4329 }
4330
4331 static int rtw_p2p_get_op_ch(struct net_device *dev,
4332                                struct iw_request_info *info,
4333                                union iwreq_data *wrqu, char *extra)
4334
4335 {
4336
4337         int ret = 0;
4338         _adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
4339         struct iw_point *pdata = &wrqu->data;
4340         struct wifidirect_info  *pwdinfo = &( padapter->wdinfo );
4341
4342
4343         DBG_8723A( "[%s] Op_ch = %02x\n", __func__, pwdinfo->operating_channel);
4344
4345         sprintf( extra, "\n\nOp_ch=%.2d\n", pwdinfo->operating_channel );
4346         wrqu->data.length = strlen( extra );
4347         return ret;
4348
4349 }
4350
4351 inline static void macstr2num(u8 *dst, u8 *src)
4352 {
4353         int     jj, kk;
4354         for (jj = 0, kk = 0; jj < ETH_ALEN; jj++, kk += 3)
4355         {
4356                 dst[jj] = key_2char2num(src[kk], src[kk + 1]);
4357         }
4358 }
4359
4360 static int rtw_p2p_get_wps_configmethod(struct net_device *dev,
4361                                                                                 struct iw_request_info *info,
4362                                                                                 union iwreq_data *wrqu, char *extra, char *subcmd)
4363 {
4364
4365         int ret = 0;
4366         _adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
4367         u8 peerMAC[ETH_ALEN] = { 0x00 };
4368         struct mlme_priv *pmlmepriv = &padapter->mlmepriv;
4369         _irqL irqL;
4370         _list * plist,*phead;
4371         _queue *queue = &(pmlmepriv->scanned_queue);
4372         struct wlan_network *pnetwork = NULL;
4373         u8 blnMatch = 0;
4374         u16     attr_content = 0;
4375         uint attr_contentlen = 0;
4376         u8      attr_content_str[P2P_PRIVATE_IOCTL_SET_LEN] = { 0x00 };
4377
4378         //      Commented by Albert 20110727
4379         //      The input data is the MAC address which the application wants to know its WPS config method.
4380         //      After knowing its WPS config method, the application can decide the config method for provisioning discovery.
4381         //      Format: iwpriv wlanx p2p_get_wpsCM 00:E0:4C:00:00:05
4382
4383         DBG_8723A("[%s] data = %s\n", __func__, subcmd);
4384
4385         macstr2num(peerMAC, subcmd);
4386
4387         spin_lock_bh(&(pmlmepriv->scanned_queue.lock));
4388
4389         phead = get_list_head(queue);
4390         plist = get_next(phead);
4391
4392         while (1)
4393         {
4394                 if (rtw_end_of_queue_search(phead, plist) == _TRUE) break;
4395
4396                 pnetwork = LIST_CONTAINOR(plist, struct wlan_network, list);
4397                 if (!memcmp(pnetwork->network.MacAddress, peerMAC, ETH_ALEN))
4398                 {
4399                         u8 *wpsie;
4400                         uint    wpsie_len = 0;
4401
4402                         //      The mac address is matched.
4403
4404                         if ((wpsie = rtw_get_wps_ie(&pnetwork->network.IEs[12], pnetwork->network.IELength - 12, NULL, &wpsie_len)))
4405                         {
4406                                 rtw_get_wps_attr_content(wpsie, wpsie_len, WPS_ATTR_CONF_METHOD, (u8 *)&attr_content, &attr_contentlen);
4407                                 if (attr_contentlen)
4408                                 {
4409                                         attr_content = be16_to_cpu(attr_content);
4410                                         sprintf(attr_content_str, "\n\nM=%.4d", attr_content);
4411                                         blnMatch = 1;
4412                                 }
4413                         }
4414
4415                         break;
4416                 }
4417
4418                 plist = get_next(plist);
4419
4420         }
4421
4422         spin_unlock_bh(&(pmlmepriv->scanned_queue.lock));
4423
4424         if (!blnMatch)
4425         {
4426                 sprintf(attr_content_str, "\n\nM=0000");
4427         }
4428
4429         wrqu->data.length = strlen(attr_content_str);
4430         memcpy(extra, attr_content_str, wrqu->data.length);
4431
4432         return ret;
4433
4434 }
4435
4436 #ifdef CONFIG_WFD
4437 static int rtw_p2p_get_peer_wfd_port(struct net_device *dev,
4438                                struct iw_request_info *info,
4439                                union iwreq_data *wrqu, char *extra)
4440 {
4441
4442         int ret = 0;
4443         _adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
4444         struct iw_point *pdata = &wrqu->data;
4445         struct wifidirect_info  *pwdinfo = &( padapter->wdinfo );
4446
4447         DBG_8723A( "[%s] p2p_state = %d\n", __func__, rtw_p2p_state(pwdinfo) );
4448
4449         sprintf( extra, "\n\nPort=%d\n", pwdinfo->wfd_info->peer_rtsp_ctrlport );
4450         DBG_8723A( "[%s] remote port = %d\n", __func__, pwdinfo->wfd_info->peer_rtsp_ctrlport );
4451
4452         wrqu->data.length = strlen( extra );
4453         return ret;
4454
4455 }
4456
4457 static int rtw_p2p_get_peer_wfd_preferred_connection(struct net_device *dev,
4458                                struct iw_request_info *info,
4459                                union iwreq_data *wrqu, char *extra)
4460 {
4461
4462         int ret = 0;
4463         _adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
4464         struct iw_point *pdata = &wrqu->data;
4465         struct wifidirect_info  *pwdinfo = &( padapter->wdinfo );
4466
4467         sprintf( extra, "\n\nwfd_pc=%d\n", pwdinfo->wfd_info->wfd_pc );
4468         DBG_8723A( "[%s] wfd_pc = %d\n", __func__, pwdinfo->wfd_info->wfd_pc );
4469
4470         wrqu->data.length = strlen( extra );
4471         pwdinfo->wfd_info->wfd_pc = _FALSE;     //      Reset the WFD preferred connection to P2P
4472         return ret;
4473
4474 }
4475
4476 static int rtw_p2p_get_peer_wfd_session_available(struct net_device *dev,
4477                                struct iw_request_info *info,
4478                                union iwreq_data *wrqu, char *extra)
4479 {
4480
4481         int ret = 0;
4482         _adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
4483         struct iw_point *pdata = &wrqu->data;
4484         struct wifidirect_info  *pwdinfo = &( padapter->wdinfo );
4485
4486         sprintf( extra, "\n\nwfd_sa=%d\n", pwdinfo->wfd_info->peer_session_avail );
4487         DBG_8723A( "[%s] wfd_sa = %d\n", __func__, pwdinfo->wfd_info->peer_session_avail );
4488
4489         wrqu->data.length = strlen( extra );
4490         pwdinfo->wfd_info->peer_session_avail = _TRUE;  //      Reset the WFD session available
4491         return ret;
4492
4493 }
4494
4495 #endif // CONFIG_WFD
4496
4497 static int rtw_p2p_get_go_device_address(struct net_device *dev,
4498                                                                                  struct iw_request_info *info,
4499                                                                                  union iwreq_data *wrqu, char *extra, char *subcmd)
4500 {
4501
4502         int ret = 0;
4503         _adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
4504         u8 peerMAC[ETH_ALEN] = { 0x00 };
4505         struct mlme_priv *pmlmepriv = &padapter->mlmepriv;
4506         _irqL irqL;
4507         _list *plist, *phead;
4508         _queue *queue   = &(pmlmepriv->scanned_queue);
4509         struct wlan_network *pnetwork = NULL;
4510         u8 blnMatch = 0;
4511         u8 *p2pie;
4512         uint p2pielen = 0, attr_contentlen = 0;
4513         u8 attr_content[100] = { 0x00 };
4514         u8 go_devadd_str[P2P_PRIVATE_IOCTL_SET_LEN] = { 0x00 };
4515
4516         //      Commented by Albert 20121209
4517         //      The input data is the GO's interface address which the application wants to know its device address.
4518         //      Format: iwpriv wlanx p2p_get2 go_devadd=00:E0:4C:00:00:05
4519
4520         DBG_8723A("[%s] data = %s\n", __func__, subcmd);
4521
4522         macstr2num(peerMAC, subcmd);
4523
4524         spin_lock_bh(&(pmlmepriv->scanned_queue.lock));
4525
4526         phead = get_list_head(queue);
4527         plist = get_next(phead);
4528
4529         while (1)
4530         {
4531                 if (rtw_end_of_queue_search(phead, plist) == _TRUE) break;
4532
4533                 pnetwork = LIST_CONTAINOR(plist, struct wlan_network, list);
4534                 if (!memcmp(pnetwork->network.MacAddress, peerMAC, ETH_ALEN))
4535                 {
4536                         //      Commented by Albert 2011/05/18
4537                         //      Match the device address located in the P2P IE
4538                         //      This is for the case that the P2P device address is not the same as the P2P interface address.
4539
4540                         if ((p2pie = rtw_get_p2p_ie(&pnetwork->network.IEs[12], pnetwork->network.IELength - 12, NULL, &p2pielen)))
4541                         {
4542                                 while (p2pie)
4543                                 {
4544                                         //      The P2P Device ID attribute is included in the Beacon frame.
4545                                         //      The P2P Device Info attribute is included in the probe response frame.
4546
4547                                         memset(attr_content, 0x00, 100);
4548                                         if (rtw_get_p2p_attr_content(p2pie, p2pielen, P2P_ATTR_DEVICE_ID, attr_content, &attr_contentlen))
4549                                         {
4550                                                 //      Handle the P2P Device ID attribute of Beacon first
4551                                                 blnMatch = 1;
4552                                                 break;
4553
4554                                         } else if (rtw_get_p2p_attr_content(p2pie, p2pielen, P2P_ATTR_DEVICE_INFO, attr_content, &attr_contentlen))
4555                                         {
4556                                                 //      Handle the P2P Device Info attribute of probe response
4557                                                 blnMatch = 1;
4558                                                 break;
4559                                         }
4560
4561                                         //Get the next P2P IE
4562                                         p2pie = rtw_get_p2p_ie(p2pie + p2pielen, pnetwork->network.IELength - 12 - (p2pie - &pnetwork->network.IEs[12] + p2pielen), NULL, &p2pielen);
4563                                 }
4564                         }
4565                 }
4566
4567                 plist = get_next(plist);
4568
4569         }
4570
4571         spin_unlock_bh(&(pmlmepriv->scanned_queue.lock));
4572
4573         if (!blnMatch)
4574         {
4575                 sprintf(go_devadd_str, "\n\ndev_add=NULL");
4576         } else
4577         {
4578                 sprintf(go_devadd_str, "\n\ndev_add=%.2X:%.2X:%.2X:%.2X:%.2X:%.2X",
4579                                 attr_content[0], attr_content[1], attr_content[2], attr_content[3], attr_content[4], attr_content[5]);
4580         }
4581
4582         wrqu->data.length = strlen(go_devadd_str);
4583         memcpy(extra, go_devadd_str, wrqu->data.length);
4584
4585         return ret;
4586
4587 }
4588
4589 static int rtw_p2p_get_device_type(struct net_device *dev,
4590                                                                    struct iw_request_info *info,
4591                                                                    union iwreq_data *wrqu, char *extra, char *subcmd)
4592 {
4593
4594         int ret = 0;
4595         _adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
4596         u8 peerMAC[ETH_ALEN] = { 0x00 };
4597         struct mlme_priv *pmlmepriv = &padapter->mlmepriv;
4598         _irqL irqL;
4599         _list *plist, *phead;
4600         _queue *queue = &(pmlmepriv->scanned_queue);
4601         struct wlan_network *pnetwork = NULL;
4602         u8 blnMatch = 0;
4603         u8 dev_type[8] = { 0x00 };
4604         uint dev_type_len = 0;
4605         u8 dev_type_str[P2P_PRIVATE_IOCTL_SET_LEN] = { 0x00 };    // +9 is for the str "dev_type=", we have to clear it at wrqu->data.pointer
4606
4607         //      Commented by Albert 20121209
4608         //      The input data is the MAC address which the application wants to know its device type.
4609         //      Such user interface could know the device type.
4610         //      Format: iwpriv wlanx p2p_get2 dev_type=00:E0:4C:00:00:05
4611
4612         DBG_8723A("[%s] data = %s\n", __func__, subcmd);
4613
4614         macstr2num(peerMAC, subcmd);
4615
4616         spin_lock_bh(&(pmlmepriv->scanned_queue.lock));
4617
4618         phead = get_list_head(queue);
4619         plist = get_next(phead);
4620
4621         while (1)
4622         {
4623                 if (rtw_end_of_queue_search(phead, plist) == _TRUE) break;
4624
4625                 pnetwork = LIST_CONTAINOR(plist, struct wlan_network, list);
4626                 if (!memcmp(pnetwork->network.MacAddress, peerMAC, ETH_ALEN))
4627                 {
4628                         u8 *wpsie;
4629                         uint    wpsie_len = 0;
4630
4631                         //      The mac address is matched.
4632
4633                         if ((wpsie = rtw_get_wps_ie(&pnetwork->network.IEs[12], pnetwork->network.IELength - 12, NULL, &wpsie_len)))
4634                         {
4635                                 rtw_get_wps_attr_content(wpsie, wpsie_len, WPS_ATTR_PRIMARY_DEV_TYPE, dev_type, &dev_type_len);
4636                                 if (dev_type_len)
4637                                 {
4638                                         u16     type = 0;
4639
4640                                         memcpy(&type, dev_type, 2);
4641                                         type = be16_to_cpu(type);
4642                                         sprintf(dev_type_str, "\n\nN=%.2d", type);
4643                                         blnMatch = 1;
4644                                 }
4645                         }
4646                         break;
4647                 }
4648
4649                 plist = get_next(plist);
4650
4651         }
4652
4653         spin_unlock_bh(&(pmlmepriv->scanned_queue.lock));
4654
4655         if (!blnMatch)
4656         {
4657                 sprintf(dev_type_str, "\n\nN=00");
4658         }
4659
4660         wrqu->data.length = strlen(dev_type_str);
4661         memcpy(extra, dev_type_str, wrqu->data.length);
4662
4663         return ret;
4664
4665 }
4666
4667 static int rtw_p2p_get_device_name(struct net_device *dev,
4668                                                                    struct iw_request_info *info,
4669                                                                    union iwreq_data *wrqu, char *extra, char *subcmd)
4670 {
4671
4672         int ret = 0;
4673         _adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
4674         u8 peerMAC[ETH_ALEN] = { 0x00 };
4675         struct mlme_priv *pmlmepriv = &padapter->mlmepriv;
4676         _irqL irqL;
4677         _list *plist, *phead;
4678         _queue *queue = &(pmlmepriv->scanned_queue);
4679         struct wlan_network *pnetwork = NULL;
4680         u8 blnMatch = 0;
4681         u8 dev_name[WPS_MAX_DEVICE_NAME_LEN] = { 0x00 };
4682         uint dev_len = 0;
4683         u8 dev_name_str[P2P_PRIVATE_IOCTL_SET_LEN] = { 0x00 };
4684
4685         //      Commented by Albert 20121225
4686         //      The input data is the MAC address which the application wants to know its device name.
4687         //      Such user interface could show peer device's device name instead of ssid.
4688         //      Format: iwpriv wlanx p2p_get2 devN=00:E0:4C:00:00:05
4689
4690         DBG_8723A("[%s] data = %s\n", __func__, subcmd);
4691
4692         macstr2num(peerMAC, subcmd);
4693
4694         spin_lock_bh(&(pmlmepriv->scanned_queue.lock));
4695
4696         phead = get_list_head(queue);
4697         plist = get_next(phead);
4698
4699         while (1)
4700         {
4701                 if (rtw_end_of_queue_search(phead, plist) == _TRUE) break;
4702
4703                 pnetwork = LIST_CONTAINOR(plist, struct wlan_network, list);
4704                 if (!memcmp(pnetwork->network.MacAddress, peerMAC, ETH_ALEN))
4705                 {
4706                         u8 *wpsie;
4707                         uint    wpsie_len = 0;
4708
4709                         //      The mac address is matched.
4710
4711                         if ((wpsie = rtw_get_wps_ie(&pnetwork->network.IEs[12], pnetwork->network.IELength - 12, NULL, &wpsie_len)))
4712                         {
4713                                 rtw_get_wps_attr_content(wpsie, wpsie_len, WPS_ATTR_DEVICE_NAME, dev_name, &dev_len);
4714                                 if (dev_len)
4715                                 {
4716                                         sprintf(dev_name_str, "\n\nN=%s", dev_name);
4717                                         blnMatch = 1;
4718                                 }
4719                         }
4720                         break;
4721                 }
4722
4723                 plist = get_next(plist);
4724
4725         }
4726
4727         spin_unlock_bh(&(pmlmepriv->scanned_queue.lock));
4728
4729         if (!blnMatch)
4730         {
4731                 sprintf(dev_name_str, "\n\nN=0000");
4732         }
4733
4734         wrqu->data.length = strlen(dev_name_str);
4735         memcpy(extra, dev_name_str, wrqu->data.length);
4736
4737         return ret;
4738
4739 }
4740
4741 static int rtw_p2p_get_invitation_procedure(struct net_device *dev,
4742                                                                                         struct iw_request_info *info,
4743                                                                                         union iwreq_data *wrqu, char *extra, char *subcmd)
4744 {
4745
4746         int ret = 0;
4747         _adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
4748         u8 peerMAC[ETH_ALEN] = { 0x00 };
4749         struct mlme_priv *pmlmepriv = &padapter->mlmepriv;
4750         _irqL irqL;
4751         _list *plist, *phead;
4752         _queue *queue   = &(pmlmepriv->scanned_queue);
4753         struct wlan_network *pnetwork = NULL;
4754         u8 blnMatch = 0;
4755         u8 *p2pie;
4756         uint p2pielen = 0, attr_contentlen = 0;
4757         u8 attr_content[2] = { 0x00 };
4758         u8 inv_proc_str[P2P_PRIVATE_IOCTL_SET_LEN] = { 0x00 };
4759
4760         //      Commented by Ouden 20121226
4761         //      The application wants to know P2P initation procedure is support or not.
4762         //      Format: iwpriv wlanx p2p_get2 InvProc=00:E0:4C:00:00:05
4763
4764         DBG_8723A("[%s] data = %s\n", __func__, subcmd);
4765
4766         macstr2num(peerMAC, subcmd);
4767
4768         spin_lock_bh(&(pmlmepriv->scanned_queue.lock));
4769
4770         phead = get_list_head(queue);
4771         plist = get_next(phead);
4772
4773         while (1) {
4774                 if (rtw_end_of_queue_search(phead, plist) == _TRUE)
4775                         break;
4776
4777                 pnetwork = LIST_CONTAINOR(plist, struct wlan_network, list);
4778                 if (!memcmp(pnetwork->network.MacAddress, peerMAC, ETH_ALEN)) {
4779                         //      Commented by Albert 20121226
4780                         //      Match the device address located in the P2P IE
4781                         //      This is for the case that the P2P device address is not the same as the P2P interface address.
4782
4783                         if ((p2pie = rtw_get_p2p_ie(&pnetwork->network.IEs[12], pnetwork->network.IELength - 12, NULL, &p2pielen))) {
4784                                 while (p2pie) {
4785                                         //memset( attr_content, 0x00, 2);
4786                                         if (rtw_get_p2p_attr_content(p2pie, p2pielen, P2P_ATTR_CAPABILITY, attr_content, &attr_contentlen)) {
4787                                                 //      Handle the P2P capability attribute
4788                                                 blnMatch = 1;
4789                                                 break;
4790                                         }
4791
4792                                         //Get the next P2P IE
4793                                         p2pie = rtw_get_p2p_ie(p2pie + p2pielen, pnetwork->network.IELength - 12 - (p2pie - &pnetwork->network.IEs[12] + p2pielen), NULL, &p2pielen);
4794                                 }
4795                         }
4796                 }
4797                 plist = get_next(plist);
4798         }
4799
4800         spin_unlock_bh(&(pmlmepriv->scanned_queue.lock));
4801
4802         if (!blnMatch) {
4803                 sprintf(inv_proc_str, "\nIP=-1");
4804         } else {
4805                 if (attr_content[0] & 0x20)
4806                         sprintf(inv_proc_str, "\nIP=1");
4807                 else
4808                         sprintf(inv_proc_str, "\nIP=0");
4809         }
4810
4811         wrqu->data.length = strlen(inv_proc_str);
4812         memcpy(extra, inv_proc_str, wrqu->data.length);
4813
4814         return ret;
4815 }
4816
4817 static int rtw_p2p_connect(struct net_device *dev,
4818                                struct iw_request_info *info,
4819                                union iwreq_data *wrqu, char *extra)
4820 {
4821
4822         int ret = 0;
4823         _adapter                                *padapter = (_adapter *)rtw_netdev_priv(dev);
4824         struct wifidirect_info  *pwdinfo = &( padapter->wdinfo );
4825         u8                                      peerMAC[ ETH_ALEN ] = { 0x00 };
4826         int                                     jj,kk;
4827         u8                                      peerMACStr[ ETH_ALEN * 2 ] = { 0x00 };
4828         struct mlme_priv                *pmlmepriv = &padapter->mlmepriv;
4829         _irqL                           irqL;
4830         _list                                   *plist, *phead;
4831         _queue                          *queue  = &(pmlmepriv->scanned_queue);
4832         struct  wlan_network    *pnetwork = NULL;
4833         uint                                    uintPeerChannel = 0;
4834 #ifdef CONFIG_CONCURRENT_MODE
4835         _adapter                                *pbuddy_adapter = padapter->pbuddy_adapter;
4836         struct mlme_priv                *pbuddy_mlmepriv = &pbuddy_adapter->mlmepriv;
4837         struct mlme_ext_priv    *pbuddy_mlmeext = &pbuddy_adapter->mlmeextpriv;
4838 #endif // CONFIG_CONCURRENT_MODE
4839
4840         //      Commented by Albert 20110304
4841         //      The input data contains two informations.
4842         //      1. First information is the MAC address which wants to formate with
4843         //      2. Second information is the WPS PINCode or "pbc" string for push button method
4844         //      Format: 00:E0:4C:00:00:05
4845         //      Format: 00:E0:4C:00:00:05
4846
4847         DBG_8723A( "[%s] data = %s\n", __func__, extra );
4848
4849         if ( pwdinfo->p2p_state == P2P_STATE_NONE )
4850         {
4851                 DBG_8723A( "[%s] WiFi Direct is disable!\n", __func__ );
4852                 return ret;
4853         }
4854
4855         if ( pwdinfo->ui_got_wps_info == P2P_NO_WPSINFO )
4856         {
4857                 return -1;
4858         }
4859
4860         for( jj = 0, kk = 0; jj < ETH_ALEN; jj++, kk += 3 )
4861         {
4862                 peerMAC[ jj ] = key_2char2num( extra[kk], extra[kk+ 1] );
4863         }
4864
4865         spin_lock_bh(&(pmlmepriv->scanned_queue.lock));
4866
4867         phead = get_list_head(queue);
4868         plist = get_next(phead);
4869
4870         while(1)
4871         {
4872                 if (rtw_end_of_queue_search(phead,plist)== _TRUE)
4873                         break;
4874
4875                 pnetwork = LIST_CONTAINOR(plist, struct wlan_network, list);
4876                 if (!memcmp( pnetwork->network.MacAddress, peerMAC, ETH_ALEN))
4877                 {
4878                         uintPeerChannel = pnetwork->network.Configuration.DSConfig;
4879                         break;
4880                 }
4881
4882                 plist = get_next(plist);
4883
4884         }
4885
4886         spin_unlock_bh(&(pmlmepriv->scanned_queue.lock));
4887
4888         if ( uintPeerChannel )
4889         {
4890 #ifdef CONFIG_CONCURRENT_MODE
4891                 if ( check_fwstate( pbuddy_mlmepriv, _FW_LINKED ) )
4892                 {
4893                         _cancel_timer_ex( &pwdinfo->ap_p2p_switch_timer );
4894                 }
4895 #endif // CONFIG_CONCURRENT_MODE
4896
4897                 memset( &pwdinfo->nego_req_info, 0x00, sizeof( struct tx_nego_req_info ) );
4898                 memset( &pwdinfo->groupid_info, 0x00, sizeof( struct group_id_info ) );
4899
4900                 pwdinfo->nego_req_info.peer_channel_num[ 0 ] = uintPeerChannel;
4901                 memcpy(pwdinfo->nego_req_info.peerDevAddr, pnetwork->network.MacAddress, ETH_ALEN );
4902                 pwdinfo->nego_req_info.benable = _TRUE;
4903
4904                 _cancel_timer_ex( &pwdinfo->restore_p2p_state_timer );
4905                 if ( rtw_p2p_state(pwdinfo) != P2P_STATE_GONEGO_OK )
4906                 {
4907                         //      Restore to the listen state if the current p2p state is not nego OK
4908                         rtw_p2p_set_state(pwdinfo, P2P_STATE_LISTEN );
4909                 }
4910
4911                 rtw_p2p_set_pre_state(pwdinfo, rtw_p2p_state(pwdinfo));
4912                 rtw_p2p_set_state(pwdinfo, P2P_STATE_GONEGO_ING);
4913
4914 #ifdef CONFIG_CONCURRENT_MODE
4915                 if ( check_fwstate( pbuddy_mlmepriv, _FW_LINKED ) )
4916                 {
4917                         //      Have to enter the power saving with the AP
4918                         set_channel_bwmode(padapter, pbuddy_mlmeext->cur_channel, pbuddy_mlmeext->cur_ch_offset, pbuddy_mlmeext->cur_bwmode);
4919
4920                         issue_nulldata(pbuddy_adapter, NULL, 1, 3, 500);
4921                 }
4922 #endif // CONFIG_CONCURRENT_MODE
4923
4924                 DBG_8723A( "[%s] Start PreTx Procedure!\n", __func__ );
4925                 _set_timer( &pwdinfo->pre_tx_scan_timer, P2P_TX_PRESCAN_TIMEOUT );
4926 #ifdef CONFIG_CONCURRENT_MODE
4927                 if ( check_fwstate( pbuddy_mlmepriv, _FW_LINKED ) )
4928                 {
4929                         _set_timer( &pwdinfo->restore_p2p_state_timer, P2P_CONCURRENT_GO_NEGO_TIMEOUT );
4930                 }
4931                 else
4932                 {
4933                         _set_timer( &pwdinfo->restore_p2p_state_timer, P2P_GO_NEGO_TIMEOUT );
4934                 }
4935 #else
4936                 _set_timer( &pwdinfo->restore_p2p_state_timer, P2P_GO_NEGO_TIMEOUT );
4937 #endif // CONFIG_CONCURRENT_MODE
4938
4939         }
4940         else
4941         {
4942                 DBG_8723A( "[%s] Not Found in Scanning Queue~\n", __func__ );
4943                 ret = -1;
4944         }
4945 exit:
4946         return ret;
4947 }
4948
4949 static int rtw_p2p_invite_req(struct net_device *dev,
4950                                struct iw_request_info *info,
4951                                union iwreq_data *wrqu, char *extra)
4952 {
4953
4954         int ret = 0;
4955         _adapter                                        *padapter = (_adapter *)rtw_netdev_priv(dev);
4956         struct iw_point                         *pdata = &wrqu->data;
4957         struct wifidirect_info          *pwdinfo = &( padapter->wdinfo );
4958         int                                             jj,kk;
4959         u8                                              peerMACStr[ ETH_ALEN * 2 ] = { 0x00 };
4960         struct mlme_priv                        *pmlmepriv = &padapter->mlmepriv;
4961         _list                                           *plist, *phead;
4962         _queue                                  *queue  = &(pmlmepriv->scanned_queue);
4963         struct  wlan_network            *pnetwork = NULL;
4964         uint                                            uintPeerChannel = 0;
4965         u8                                              attr_content[50] = { 0x00 }, _status = 0;
4966         u8                                              *p2pie;
4967         uint                                            p2pielen = 0, attr_contentlen = 0;
4968         _irqL                                   irqL;
4969         struct tx_invite_req_info*      pinvite_req_info = &pwdinfo->invitereq_info;
4970 #ifdef CONFIG_CONCURRENT_MODE
4971         _adapter                                        *pbuddy_adapter = padapter->pbuddy_adapter;
4972         struct mlme_priv                        *pbuddy_mlmepriv = &pbuddy_adapter->mlmepriv;
4973         struct mlme_ext_priv            *pbuddy_mlmeext = &pbuddy_adapter->mlmeextpriv;
4974 #endif // CONFIG_CONCURRENT_MODE
4975
4976 #ifdef CONFIG_WFD
4977         struct wifi_display_info*       pwfd_info = pwdinfo->wfd_info;
4978 #endif // CONFIG_WFD
4979
4980         //      Commented by Albert 20120321
4981         //      The input data contains two informations.
4982         //      1. First information is the P2P device address which you want to send to.
4983         //      2. Second information is the group id which combines with GO's mac address, space and GO's ssid.
4984         //      Command line sample: iwpriv wlan0 p2p_set invite="00:11:22:33:44:55 00:E0:4C:00:00:05 DIRECT-xy"
4985         //      Format: 00:11:22:33:44:55 00:E0:4C:00:00:05 DIRECT-xy
4986
4987         DBG_8723A( "[%s] data = %s\n", __func__, extra );
4988
4989         if ( wrqu->data.length <=  37 )
4990         {
4991                 DBG_8723A( "[%s] Wrong format!\n", __func__ );
4992                 return ret;
4993         }
4994
4995         if(rtw_p2p_chk_state(pwdinfo, P2P_STATE_NONE))
4996         {
4997                 DBG_8723A( "[%s] WiFi Direct is disable!\n", __func__ );
4998                 return ret;
4999         }
5000         else
5001         {
5002                 //      Reset the content of struct tx_invite_req_info
5003                 pinvite_req_info->benable = _FALSE;
5004                 memset( pinvite_req_info->go_bssid, 0x00, ETH_ALEN );
5005                 memset( pinvite_req_info->go_ssid, 0x00, WLAN_SSID_MAXLEN );
5006                 pinvite_req_info->ssidlen = 0x00;
5007                 pinvite_req_info->operating_ch = pwdinfo->operating_channel;
5008                 memset( pinvite_req_info->peer_macaddr, 0x00, ETH_ALEN );
5009                 pinvite_req_info->token = 3;
5010         }
5011
5012         for( jj = 0, kk = 0; jj < ETH_ALEN; jj++, kk += 3 )
5013         {
5014                 pinvite_req_info->peer_macaddr[ jj ] = key_2char2num( extra[kk], extra[kk+ 1] );
5015         }
5016
5017         spin_lock_bh(&(pmlmepriv->scanned_queue.lock));
5018
5019         phead = get_list_head(queue);
5020         plist = get_next(phead);
5021
5022         while(1)
5023         {
5024                 if (rtw_end_of_queue_search(phead,plist)== _TRUE)
5025                         break;
5026
5027                 pnetwork = LIST_CONTAINOR(plist, struct wlan_network, list);
5028
5029                 //      Commented by Albert 2011/05/18
5030                 //      Match the device address located in the P2P IE
5031                 //      This is for the case that the P2P device address is not the same as the P2P interface address.
5032
5033                 if ( (p2pie=rtw_get_p2p_ie( &pnetwork->network.IEs[12], pnetwork->network.IELength - 12, NULL, &p2pielen)) )
5034                 {
5035                         //      The P2P Device ID attribute is included in the Beacon frame.
5036                         //      The P2P Device Info attribute is included in the probe response frame.
5037
5038                         if ( rtw_get_p2p_attr_content( p2pie, p2pielen, P2P_ATTR_DEVICE_ID, attr_content, &attr_contentlen) )
5039                         {
5040                                 //      Handle the P2P Device ID attribute of Beacon first
5041                                 if (!memcmp(attr_content, pinvite_req_info->peer_macaddr, ETH_ALEN))
5042                                 {
5043                                         uintPeerChannel = pnetwork->network.Configuration.DSConfig;
5044                                         break;
5045                                 }
5046                         }
5047                         else if ( rtw_get_p2p_attr_content( p2pie, p2pielen, P2P_ATTR_DEVICE_INFO, attr_content, &attr_contentlen) )
5048                         {
5049                                 //      Handle the P2P Device Info attribute of probe response
5050                                 if (!memcmp(attr_content, pinvite_req_info->peer_macaddr, ETH_ALEN))
5051                                 {
5052                                         uintPeerChannel = pnetwork->network.Configuration.DSConfig;
5053                                         break;
5054                                 }
5055                         }
5056
5057                 }
5058
5059                 plist = get_next(plist);
5060
5061         }
5062
5063         spin_unlock_bh(&(pmlmepriv->scanned_queue.lock));
5064
5065 #ifdef CONFIG_WFD
5066         if ( uintPeerChannel )
5067         {
5068                 u8      wfd_ie[ 128 ] = { 0x00 };
5069                 uint    wfd_ielen = 0;
5070
5071                 if ( rtw_get_wfd_ie( &pnetwork->network.IEs[12], pnetwork->network.IELength - 12,  wfd_ie, &wfd_ielen ) )
5072                 {
5073                         u8      wfd_devinfo[ 6 ] = { 0x00 };
5074                         uint    wfd_devlen = 6;
5075
5076                         DBG_8723A( "[%s] Found WFD IE!\n", __func__ );
5077                         if ( rtw_get_wfd_attr_content( wfd_ie, wfd_ielen, WFD_ATTR_DEVICE_INFO, wfd_devinfo, &wfd_devlen ) )
5078                         {
5079                                 u16     wfd_devinfo_field = 0;
5080
5081                                 //      Commented by Albert 20120319
5082                                 //      The first two bytes are the WFD device information field of WFD device information subelement.
5083                                 //      In big endian format.
5084                                 wfd_devinfo_field = RTW_GET_BE16(wfd_devinfo);
5085                                 if ( wfd_devinfo_field & WFD_DEVINFO_SESSION_AVAIL )
5086                                 {
5087                                         pwfd_info->peer_session_avail = _TRUE;
5088                                 }
5089                                 else
5090                                 {
5091                                         pwfd_info->peer_session_avail = _FALSE;
5092                                 }
5093                         }
5094                 }
5095
5096                 if ( _FALSE == pwfd_info->peer_session_avail )
5097                 {
5098                         DBG_8723A( "[%s] WFD Session not avaiable!\n", __func__ );
5099                         goto exit;
5100                 }
5101         }
5102 #endif // CONFIG_WFD
5103
5104         if ( uintPeerChannel )
5105         {
5106 #ifdef CONFIG_CONCURRENT_MODE
5107                 if ( check_fwstate( pbuddy_mlmepriv, _FW_LINKED ) )
5108                 {
5109                         _cancel_timer_ex( &pwdinfo->ap_p2p_switch_timer );
5110                 }
5111 #endif // CONFIG_CONCURRENT_MODE
5112
5113                 //      Store the GO's bssid
5114                 for( jj = 0, kk = 18; jj < ETH_ALEN; jj++, kk += 3 )
5115                 {
5116                         pinvite_req_info->go_bssid[ jj ] = key_2char2num( extra[kk], extra[kk+ 1] );
5117                 }
5118
5119                 //      Store the GO's ssid
5120                 pinvite_req_info->ssidlen = wrqu->data.length - 36;
5121                 memcpy(pinvite_req_info->go_ssid, &extra[ 36 ], (u32) pinvite_req_info->ssidlen );
5122                 pinvite_req_info->benable = _TRUE;
5123                 pinvite_req_info->peer_ch = uintPeerChannel;
5124
5125                 rtw_p2p_set_pre_state(pwdinfo, rtw_p2p_state(pwdinfo));
5126                 rtw_p2p_set_state(pwdinfo, P2P_STATE_TX_INVITE_REQ);
5127
5128 #ifdef CONFIG_CONCURRENT_MODE
5129                 if ( check_fwstate( pbuddy_mlmepriv, _FW_LINKED ) )
5130                 {
5131                         //      Have to enter the power saving with the AP
5132                         set_channel_bwmode(padapter, pbuddy_mlmeext->cur_channel, pbuddy_mlmeext->cur_ch_offset, pbuddy_mlmeext->cur_bwmode);
5133
5134                         issue_nulldata(pbuddy_adapter, NULL, 1, 3, 500);
5135                 }
5136                 else
5137                 {
5138                         set_channel_bwmode(padapter, uintPeerChannel, HAL_PRIME_CHNL_OFFSET_DONT_CARE, HT_CHANNEL_WIDTH_20);
5139                 }
5140 #else
5141                 set_channel_bwmode(padapter, uintPeerChannel, HAL_PRIME_CHNL_OFFSET_DONT_CARE, HT_CHANNEL_WIDTH_20);
5142 #endif
5143
5144                 _set_timer( &pwdinfo->pre_tx_scan_timer, P2P_TX_PRESCAN_TIMEOUT );
5145
5146 #ifdef CONFIG_CONCURRENT_MODE
5147                 if ( check_fwstate( pbuddy_mlmepriv, _FW_LINKED ) )
5148                 {
5149                         _set_timer( &pwdinfo->restore_p2p_state_timer, P2P_CONCURRENT_INVITE_TIMEOUT );
5150                 }
5151                 else
5152                 {
5153                         _set_timer( &pwdinfo->restore_p2p_state_timer, P2P_INVITE_TIMEOUT );
5154                 }
5155 #else
5156                 _set_timer( &pwdinfo->restore_p2p_state_timer, P2P_INVITE_TIMEOUT );
5157 #endif // CONFIG_CONCURRENT_MODE
5158
5159
5160         }
5161         else
5162         {
5163                 DBG_8723A( "[%s] NOT Found in the Scanning Queue!\n", __func__ );
5164         }
5165 exit:
5166
5167         return ret;
5168
5169 }
5170
5171 static int rtw_p2p_set_persistent(struct net_device *dev,
5172                                struct iw_request_info *info,
5173                                union iwreq_data *wrqu, char *extra)
5174 {
5175
5176         int ret = 0;
5177         _adapter                                        *padapter = (_adapter *)rtw_netdev_priv(dev);
5178         struct iw_point                         *pdata = &wrqu->data;
5179         struct wifidirect_info          *pwdinfo = &( padapter->wdinfo );
5180         int                                             jj,kk;
5181         u8                                              peerMACStr[ ETH_ALEN * 2 ] = { 0x00 };
5182         struct mlme_priv                        *pmlmepriv = &padapter->mlmepriv;
5183         _list                                           *plist, *phead;
5184         _queue                                  *queue  = &(pmlmepriv->scanned_queue);
5185         struct  wlan_network            *pnetwork = NULL;
5186         uint                                            uintPeerChannel = 0;
5187         u8                                              attr_content[50] = { 0x00 }, _status = 0;
5188         u8                                              *p2pie;
5189         uint                                            p2pielen = 0, attr_contentlen = 0;
5190         _irqL                                   irqL;
5191         struct tx_invite_req_info*      pinvite_req_info = &pwdinfo->invitereq_info;
5192 #ifdef CONFIG_CONCURRENT_MODE
5193         _adapter                                        *pbuddy_adapter = padapter->pbuddy_adapter;
5194         struct mlme_priv                        *pbuddy_mlmepriv = &pbuddy_adapter->mlmepriv;
5195         struct mlme_ext_priv            *pbuddy_mlmeext = &pbuddy_adapter->mlmeextpriv;
5196 #endif // CONFIG_CONCURRENT_MODE
5197
5198 #ifdef CONFIG_WFD
5199         struct wifi_display_info*       pwfd_info = pwdinfo->wfd_info;
5200 #endif // CONFIG_WFD
5201
5202         //      Commented by Albert 20120328
5203         //      The input data is 0 or 1
5204         //      0: disable persistent group functionality
5205         //      1: enable persistent group founctionality
5206
5207         DBG_8723A( "[%s] data = %s\n", __func__, extra );
5208
5209         if(rtw_p2p_chk_state(pwdinfo, P2P_STATE_NONE))
5210         {
5211                 DBG_8723A( "[%s] WiFi Direct is disable!\n", __func__ );
5212                 return ret;
5213         }
5214         else
5215         {
5216                 if ( extra[ 0 ] == '0' )        //      Disable the persistent group function.
5217                 {
5218                         pwdinfo->persistent_supported = _FALSE;
5219                 }
5220                 else if ( extra[ 0 ] == '1' )   //      Enable the persistent group function.
5221                 {
5222                         pwdinfo->persistent_supported = _TRUE;
5223                 }
5224                 else
5225                 {
5226                         pwdinfo->persistent_supported = _FALSE;
5227                 }
5228         }
5229         printk( "[%s] persistent_supported = %d\n", __func__, pwdinfo->persistent_supported );
5230
5231 exit:
5232
5233         return ret;
5234
5235 }
5236
5237 #ifdef CONFIG_WFD
5238 static int rtw_p2p_set_pc(struct net_device *dev,
5239                                struct iw_request_info *info,
5240                                union iwreq_data *wrqu, char *extra)
5241 {
5242
5243         int ret = 0;
5244         _adapter                                *padapter = (_adapter *)rtw_netdev_priv(dev);
5245         struct iw_point                 *pdata = &wrqu->data;
5246         struct wifidirect_info  *pwdinfo = &( padapter->wdinfo );
5247         u8                                      peerMAC[ ETH_ALEN ] = { 0x00 };
5248         int                                     jj,kk;
5249         u8                                      peerMACStr[ ETH_ALEN * 2 ] = { 0x00 };
5250         struct mlme_priv                *pmlmepriv = &padapter->mlmepriv;
5251         _list                                   *plist, *phead;
5252         _queue                          *queue  = &(pmlmepriv->scanned_queue);
5253         struct  wlan_network    *pnetwork = NULL;
5254         u8                                      attr_content[50] = { 0x00 }, _status = 0;
5255         u8 *p2pie;
5256         uint                                    p2pielen = 0, attr_contentlen = 0;
5257         _irqL                           irqL;
5258         uint                                    uintPeerChannel = 0;
5259 #ifdef CONFIG_CONCURRENT_MODE
5260         _adapter                                *pbuddy_adapter = padapter->pbuddy_adapter;
5261         struct mlme_ext_priv    *pbuddy_mlmeext = &pbuddy_adapter->mlmeextpriv;
5262 #endif // CONFIG_CONCURRENT_MODE
5263         struct wifi_display_info*       pwfd_info = pwdinfo->wfd_info;
5264
5265         //      Commented by Albert 20120512
5266         //      1. Input information is the MAC address which wants to know the Preferred Connection bit (PC bit)
5267         //      Format: 00:E0:4C:00:00:05
5268
5269         DBG_8723A( "[%s] data = %s\n", __func__, extra );
5270
5271         if(rtw_p2p_chk_state(pwdinfo, P2P_STATE_NONE))
5272         {
5273                 DBG_8723A( "[%s] WiFi Direct is disable!\n", __func__ );
5274                 return ret;
5275         }
5276
5277         for( jj = 0, kk = 0; jj < ETH_ALEN; jj++, kk += 3 )
5278         {
5279                 peerMAC[ jj ] = key_2char2num( extra[kk], extra[kk+ 1] );
5280         }
5281
5282         spin_lock_bh(&(pmlmepriv->scanned_queue.lock));
5283
5284         phead = get_list_head(queue);
5285         plist = get_next(phead);
5286
5287         while(1)
5288         {
5289                 if (rtw_end_of_queue_search(phead,plist)== _TRUE)
5290                         break;
5291
5292                 pnetwork = LIST_CONTAINOR(plist, struct wlan_network, list);
5293
5294                 //      Commented by Albert 2011/05/18
5295                 //      Match the device address located in the P2P IE
5296                 //      This is for the case that the P2P device address is not the same as the P2P interface address.
5297
5298                 if ( (p2pie=rtw_get_p2p_ie( &pnetwork->network.IEs[12], pnetwork->network.IELength - 12, NULL, &p2pielen)) )
5299                 {
5300                         //      The P2P Device ID attribute is included in the Beacon frame.
5301                         //      The P2P Device Info attribute is included in the probe response frame.
5302                         printk( "[%s] Got P2P IE\n", __func__ );
5303                         if ( rtw_get_p2p_attr_content( p2pie, p2pielen, P2P_ATTR_DEVICE_ID, attr_content, &attr_contentlen) )
5304                         {
5305                                 //      Handle the P2P Device ID attribute of Beacon first
5306                                 printk( "[%s] P2P_ATTR_DEVICE_ID \n", __func__ );
5307                                 if (!memcmp(attr_content, peerMAC, ETH_ALEN))
5308                                 {
5309                                         uintPeerChannel = pnetwork->network.Configuration.DSConfig;
5310                                         break;
5311                                 }
5312                         }
5313                         else if ( rtw_get_p2p_attr_content( p2pie, p2pielen, P2P_ATTR_DEVICE_INFO, attr_content, &attr_contentlen) )
5314                         {
5315                                 //      Handle the P2P Device Info attribute of probe response
5316                                 printk( "[%s] P2P_ATTR_DEVICE_INFO \n", __func__ );
5317                                 if (!memcmp( attr_content, peerMAC, ETH_ALEN))
5318                                 {
5319                                         uintPeerChannel = pnetwork->network.Configuration.DSConfig;
5320                                         break;
5321                                 }
5322                         }
5323
5324                 }
5325
5326                 plist = get_next(plist);
5327
5328         }
5329
5330         spin_unlock_bh(&(pmlmepriv->scanned_queue.lock));
5331         printk( "[%s] channel = %d\n", __func__, uintPeerChannel );
5332
5333         if ( uintPeerChannel )
5334         {
5335                 u8      wfd_ie[ 128 ] = { 0x00 };
5336                 uint    wfd_ielen = 0;
5337
5338                 if ( rtw_get_wfd_ie( &pnetwork->network.IEs[12], pnetwork->network.IELength - 12,  wfd_ie, &wfd_ielen ) )
5339                 {
5340                         u8      wfd_devinfo[ 6 ] = { 0x00 };
5341                         uint    wfd_devlen = 6;
5342
5343                         DBG_8723A( "[%s] Found WFD IE!\n", __func__ );
5344                         if ( rtw_get_wfd_attr_content( wfd_ie, wfd_ielen, WFD_ATTR_DEVICE_INFO, wfd_devinfo, &wfd_devlen ) )
5345                         {
5346                                 u16     wfd_devinfo_field = 0;
5347
5348                                 //      Commented by Albert 20120319
5349                                 //      The first two bytes are the WFD device information field of WFD device information subelement.
5350                                 //      In big endian format.
5351                                 wfd_devinfo_field = RTW_GET_BE16(wfd_devinfo);
5352                                 if ( wfd_devinfo_field & WFD_DEVINFO_PC_TDLS )
5353                                 {
5354                                         pwfd_info->wfd_pc = _TRUE;
5355                                 }
5356                                 else
5357                                 {
5358                                         pwfd_info->wfd_pc = _FALSE;
5359                                 }
5360                         }
5361                 }
5362         }
5363         else
5364         {
5365                 DBG_8723A( "[%s] NOT Found in the Scanning Queue!\n", __func__ );
5366         }
5367
5368 exit:
5369
5370         return ret;
5371
5372 }
5373
5374 static int rtw_p2p_set_wfd_device_type(struct net_device *dev,
5375                                struct iw_request_info *info,
5376                                union iwreq_data *wrqu, char *extra)
5377 {
5378
5379         int ret = 0;
5380         _adapter                                        *padapter = (_adapter *)rtw_netdev_priv(dev);
5381         struct iw_point                         *pdata = &wrqu->data;
5382         struct wifidirect_info          *pwdinfo = &( padapter->wdinfo );
5383         struct wifi_display_info*       pwfd_info = pwdinfo->wfd_info;
5384
5385         //      Commented by Albert 20120328
5386         //      The input data is 0 or 1
5387         //      0: specify to Miracast source device
5388         //      1 or others: specify to Miracast sink device (display device)
5389
5390         DBG_8723A( "[%s] data = %s\n", __func__, extra );
5391
5392         if ( extra[ 0 ] == '0' )        //      Set to Miracast source device.
5393         {
5394                 pwfd_info->wfd_device_type = WFD_DEVINFO_SOURCE;
5395         }
5396         else                                    //      Set to Miracast sink device.
5397         {
5398                 pwfd_info->wfd_device_type = WFD_DEVINFO_PSINK;
5399         }
5400
5401 exit:
5402
5403         return ret;
5404
5405 }
5406
5407 static int rtw_p2p_set_scan_result_type(struct net_device *dev,
5408                                struct iw_request_info *info,
5409                                union iwreq_data *wrqu, char *extra)
5410 {
5411
5412         int ret = 0;
5413         _adapter                                        *padapter = (_adapter *)rtw_netdev_priv(dev);
5414         struct iw_point                         *pdata = &wrqu->data;
5415         struct wifidirect_info          *pwdinfo = &( padapter->wdinfo );
5416         struct wifi_display_info                *pwfd_info = pwdinfo->wfd_info;
5417
5418         //      Commented by Albert 20120328
5419         //      The input data is 0 , 1 , 2
5420         //      0: when the P2P is enabled, the scan result will return all the found P2P device.
5421         //      1: when the P2P is enabled, the scan result will return all the found P2P device and AP.
5422         //      2: when the P2P is enabled, the scan result will show up the found Miracast devices base on...
5423         //      It will show up all the Miracast source device if this device is sink.
5424         //      It will show up all the Miracast sink device if this device is source.
5425
5426         DBG_8723A( "[%s] data = %s\n", __func__, extra );
5427
5428         if ( extra[ 0 ] == '0' )
5429         {
5430                 pwfd_info->scan_result_type = SCAN_RESULT_P2P_ONLY;
5431         }
5432         else if ( extra[ 0 ] == '1' )
5433         {
5434                 pwfd_info->scan_result_type = SCAN_RESULT_ALL;
5435         }
5436         else if ( extra[ 0 ] == '2' )
5437         {
5438                 pwfd_info->scan_result_type = SCAN_RESULT_WFD_TYPE;
5439         }
5440         else
5441         {
5442                 pwfd_info->scan_result_type = SCAN_RESULT_P2P_ONLY;
5443         }
5444
5445 exit:
5446
5447         return ret;
5448
5449 }
5450
5451 //      To set the WFD session available to enable or disable
5452 static int rtw_p2p_set_sa(struct net_device *dev,
5453                                struct iw_request_info *info,
5454                                union iwreq_data *wrqu, char *extra)
5455 {
5456
5457         int ret = 0;
5458         _adapter                                        *padapter = (_adapter *)rtw_netdev_priv(dev);
5459         struct iw_point                         *pdata = &wrqu->data;
5460         struct wifidirect_info          *pwdinfo = &( padapter->wdinfo );
5461         struct wifi_display_info                *pwfd_info = pwdinfo->wfd_info;
5462
5463         DBG_8723A( "[%s] data = %s\n", __func__, extra );
5464
5465         if( 0 )
5466         {
5467                 DBG_8723A( "[%s] WiFi Direct is disable!\n", __func__ );
5468                 return ret;
5469         }
5470         else
5471         {
5472                 if ( extra[ 0 ] == '0' )        //      Disable the session available.
5473                 {
5474                         pwdinfo->session_available = _FALSE;
5475                 }
5476                 else if ( extra[ 0 ] == '1' )   //      Enable the session available.
5477                 {
5478                         pwdinfo->session_available = _TRUE;
5479                 }
5480                 else
5481                 {
5482                         pwdinfo->session_available = _FALSE;
5483                 }
5484         }
5485         printk( "[%s] session available = %d\n", __func__, pwdinfo->session_available );
5486
5487 exit:
5488
5489         return ret;
5490
5491 }
5492 #endif // CONFIG_WFD
5493
5494 static int rtw_p2p_prov_disc(struct net_device *dev,
5495                                struct iw_request_info *info,
5496                                union iwreq_data *wrqu, char *extra)
5497 {
5498         int ret = 0;
5499         _adapter                                *padapter = (_adapter *)rtw_netdev_priv(dev);
5500         struct wifidirect_info  *pwdinfo = &( padapter->wdinfo );
5501         u8                                      peerMAC[ ETH_ALEN ] = { 0x00 };
5502         int                                     jj,kk;
5503         u8                                      peerMACStr[ ETH_ALEN * 2 ] = { 0x00 };
5504         struct mlme_priv                *pmlmepriv = &padapter->mlmepriv;
5505         _list                                   *plist, *phead;
5506         _queue                          *queue  = &(pmlmepriv->scanned_queue);
5507         struct  wlan_network    *pnetwork = NULL;
5508         uint                                    uintPeerChannel = 0;
5509         u8                                      attr_content[100] = { 0x00 }, _status = 0;
5510         u8 *p2pie;
5511         uint                                    p2pielen = 0, attr_contentlen = 0;
5512         _irqL                           irqL;
5513 #ifdef CONFIG_CONCURRENT_MODE
5514         _adapter                                *pbuddy_adapter = padapter->pbuddy_adapter;
5515         struct mlme_priv                *pbuddy_mlmepriv = &pbuddy_adapter->mlmepriv;
5516         struct mlme_ext_priv    *pbuddy_mlmeext = &pbuddy_adapter->mlmeextpriv;
5517 #endif // CONFIG_CONCURRENT_MODE
5518 #ifdef CONFIG_WFD
5519         struct wifi_display_info*       pwfd_info = pwdinfo->wfd_info;
5520 #endif // CONFIG_WFD
5521
5522         //      Commented by Albert 20110301
5523         //      The input data contains two informations.
5524         //      1. First information is the MAC address which wants to issue the provisioning discovery request frame.
5525         //      2. Second information is the WPS configuration method which wants to discovery
5526         //      Format: 00:E0:4C:00:00:05_display
5527         //      Format: 00:E0:4C:00:00:05_keypad
5528         //      Format: 00:E0:4C:00:00:05_pbc
5529         //      Format: 00:E0:4C:00:00:05_label
5530
5531         DBG_8723A( "[%s] data = %s\n", __func__, extra );
5532
5533         if ( pwdinfo->p2p_state == P2P_STATE_NONE )
5534         {
5535                 DBG_8723A( "[%s] WiFi Direct is disable!\n", __func__ );
5536                 return ret;
5537         }
5538         else
5539         {
5540                 //      Reset the content of struct tx_provdisc_req_info excluded the wps_config_method_request.
5541                 memset( pwdinfo->tx_prov_disc_info.peerDevAddr, 0x00, ETH_ALEN );
5542                 memset( pwdinfo->tx_prov_disc_info.peerIFAddr, 0x00, ETH_ALEN );
5543                 memset( &pwdinfo->tx_prov_disc_info.ssid, 0x00, sizeof( NDIS_802_11_SSID ) );
5544                 pwdinfo->tx_prov_disc_info.peer_channel_num[ 0 ] = 0;
5545                 pwdinfo->tx_prov_disc_info.peer_channel_num[ 1 ] = 0;
5546                 pwdinfo->tx_prov_disc_info.benable = _FALSE;
5547         }
5548
5549         for( jj = 0, kk = 0; jj < ETH_ALEN; jj++, kk += 3 )
5550         {
5551                 peerMAC[ jj ] = key_2char2num( extra[kk], extra[kk+ 1] );
5552         }
5553
5554         if (!memcmp(&extra[ 18 ], "display", 7))
5555         {
5556                 pwdinfo->tx_prov_disc_info.wps_config_method_request = WPS_CM_DISPLYA;
5557         }
5558         else if (!memcmp( &extra[ 18 ], "keypad", 7))
5559         {
5560                 pwdinfo->tx_prov_disc_info.wps_config_method_request = WPS_CM_KEYPAD;
5561         }
5562         else if (!memcmp( &extra[ 18 ], "pbc", 3))
5563         {
5564                 pwdinfo->tx_prov_disc_info.wps_config_method_request = WPS_CM_PUSH_BUTTON;
5565         }
5566         else if (!memcmp( &extra[ 18 ], "label", 5))
5567         {
5568                 pwdinfo->tx_prov_disc_info.wps_config_method_request = WPS_CM_LABEL;
5569         }
5570         else
5571         {
5572                 DBG_8723A( "[%s] Unknown WPS config methodn", __func__ );
5573                 return( ret );
5574         }
5575
5576         spin_lock_bh(&(pmlmepriv->scanned_queue.lock));
5577
5578         phead = get_list_head(queue);
5579         plist = get_next(phead);
5580
5581         while(1)
5582         {
5583                 if (rtw_end_of_queue_search(phead,plist)== _TRUE)
5584                         break;
5585
5586                 if( uintPeerChannel != 0 )
5587                         break;
5588
5589                 pnetwork = LIST_CONTAINOR(plist, struct wlan_network, list);
5590
5591                 //      Commented by Albert 2011/05/18
5592                 //      Match the device address located in the P2P IE
5593                 //      This is for the case that the P2P device address is not the same as the P2P interface address.
5594
5595                 if ( (p2pie=rtw_get_p2p_ie( &pnetwork->network.IEs[12], pnetwork->network.IELength - 12, NULL, &p2pielen)) )
5596                 {
5597                         while ( p2pie )
5598                         {
5599                                 //      The P2P Device ID attribute is included in the Beacon frame.
5600                                 //      The P2P Device Info attribute is included in the probe response frame.
5601
5602                                 if ( rtw_get_p2p_attr_content( p2pie, p2pielen, P2P_ATTR_DEVICE_ID, attr_content, &attr_contentlen) )
5603                                 {
5604                                         //      Handle the P2P Device ID attribute of Beacon first
5605                                         if (!memcmp( attr_content, peerMAC, ETH_ALEN))
5606                                         {
5607                                                 uintPeerChannel = pnetwork->network.Configuration.DSConfig;
5608                                                 break;
5609                                         }
5610                                 }
5611                                 else if ( rtw_get_p2p_attr_content( p2pie, p2pielen, P2P_ATTR_DEVICE_INFO, attr_content, &attr_contentlen) )
5612                                 {
5613                                         //      Handle the P2P Device Info attribute of probe response
5614                                         if (!memcmp( attr_content, peerMAC, ETH_ALEN))
5615                                         {
5616                                                 uintPeerChannel = pnetwork->network.Configuration.DSConfig;
5617                                                 break;
5618                                         }
5619                                 }
5620
5621                                 //Get the next P2P IE
5622                                 p2pie = rtw_get_p2p_ie(p2pie+p2pielen, pnetwork->network.IELength - 12 -(p2pie -&pnetwork->network.IEs[12] + p2pielen), NULL, &p2pielen);
5623                         }
5624
5625                 }
5626
5627                 plist = get_next(plist);
5628
5629         }
5630
5631         spin_unlock_bh(&(pmlmepriv->scanned_queue.lock));
5632
5633 #ifdef CONFIG_WFD
5634         {
5635                 u8      wfd_ie[ 128 ] = { 0x00 };
5636                 uint    wfd_ielen = 0;
5637
5638                 if ( rtw_get_wfd_ie( &pnetwork->network.IEs[12], pnetwork->network.IELength - 12,  wfd_ie, &wfd_ielen ) )
5639                 {
5640                         u8      wfd_devinfo[ 6 ] = { 0x00 };
5641                         uint    wfd_devlen = 6;
5642
5643                         DBG_8723A( "[%s] Found WFD IE!\n", __func__ );
5644                         if ( rtw_get_wfd_attr_content( wfd_ie, wfd_ielen, WFD_ATTR_DEVICE_INFO, wfd_devinfo, &wfd_devlen ) )
5645                         {
5646                                 u16     wfd_devinfo_field = 0;
5647
5648                                 //      Commented by Albert 20120319
5649                                 //      The first two bytes are the WFD device information field of WFD device information subelement.
5650                                 //      In big endian format.
5651                                 wfd_devinfo_field = RTW_GET_BE16(wfd_devinfo);
5652                                 if ( wfd_devinfo_field & WFD_DEVINFO_SESSION_AVAIL )
5653                                 {
5654                                         pwfd_info->peer_session_avail = _TRUE;
5655                                 }
5656                                 else
5657                                 {
5658                                         pwfd_info->peer_session_avail = _FALSE;
5659                                 }
5660                         }
5661                 }
5662
5663                 if ( _FALSE == pwfd_info->peer_session_avail )
5664                 {
5665                         DBG_8723A( "[%s] WFD Session not avaiable!\n", __func__ );
5666                         goto exit;
5667                 }
5668         }
5669 #endif // CONFIG_WFD
5670
5671         if ( uintPeerChannel )
5672         {
5673
5674                 DBG_8723A( "[%s] peer channel: %d!\n", __func__, uintPeerChannel );
5675 #ifdef CONFIG_CONCURRENT_MODE
5676                 if ( check_fwstate( pbuddy_mlmepriv, _FW_LINKED ) )
5677                 {
5678                         _cancel_timer_ex( &pwdinfo->ap_p2p_switch_timer );
5679                 }
5680 #endif // CONFIG_CONCURRENT_MODE
5681                 memcpy(pwdinfo->tx_prov_disc_info.peerIFAddr, pnetwork->network.MacAddress, ETH_ALEN );
5682                 memcpy(pwdinfo->tx_prov_disc_info.peerDevAddr, peerMAC, ETH_ALEN );
5683                 pwdinfo->tx_prov_disc_info.peer_channel_num[0] = ( u16 ) uintPeerChannel;
5684                 pwdinfo->tx_prov_disc_info.benable = _TRUE;
5685                 rtw_p2p_set_pre_state(pwdinfo, rtw_p2p_state(pwdinfo));
5686                 rtw_p2p_set_state(pwdinfo, P2P_STATE_TX_PROVISION_DIS_REQ);
5687
5688                 if(rtw_p2p_chk_role(pwdinfo, P2P_ROLE_CLIENT))
5689                 {
5690                         memcpy(&pwdinfo->tx_prov_disc_info.ssid, &pnetwork->network.Ssid, sizeof( NDIS_802_11_SSID ) );
5691                 }
5692                 else if(rtw_p2p_chk_role(pwdinfo, P2P_ROLE_DEVICE) || rtw_p2p_chk_role(pwdinfo, P2P_ROLE_GO))
5693                 {
5694                         memcpy(pwdinfo->tx_prov_disc_info.ssid.Ssid, pwdinfo->p2p_wildcard_ssid, P2P_WILDCARD_SSID_LEN );
5695                         pwdinfo->tx_prov_disc_info.ssid.SsidLength= P2P_WILDCARD_SSID_LEN;
5696                 }
5697
5698 #ifdef CONFIG_CONCURRENT_MODE
5699                 if ( check_fwstate( pbuddy_mlmepriv, _FW_LINKED ) )
5700                 {
5701                         //      Have to enter the power saving with the AP
5702                         set_channel_bwmode(padapter, pbuddy_mlmeext->cur_channel, pbuddy_mlmeext->cur_ch_offset, pbuddy_mlmeext->cur_bwmode);
5703
5704                         issue_nulldata(pbuddy_adapter, NULL, 1, 3, 500);
5705                 }
5706                 else
5707                 {
5708                         set_channel_bwmode(padapter, uintPeerChannel, HAL_PRIME_CHNL_OFFSET_DONT_CARE, HT_CHANNEL_WIDTH_20);
5709                 }
5710 #else
5711                 set_channel_bwmode(padapter, uintPeerChannel, HAL_PRIME_CHNL_OFFSET_DONT_CARE, HT_CHANNEL_WIDTH_20);
5712 #endif
5713
5714                 _set_timer( &pwdinfo->pre_tx_scan_timer, P2P_TX_PRESCAN_TIMEOUT );
5715
5716 #ifdef CONFIG_CONCURRENT_MODE
5717                 if ( check_fwstate( pbuddy_mlmepriv, _FW_LINKED ) )
5718                 {
5719                         _set_timer( &pwdinfo->restore_p2p_state_timer, P2P_CONCURRENT_PROVISION_TIMEOUT );
5720                 }
5721                 else
5722                 {
5723                         _set_timer( &pwdinfo->restore_p2p_state_timer, P2P_PROVISION_TIMEOUT );
5724                 }
5725 #else
5726                 _set_timer( &pwdinfo->restore_p2p_state_timer, P2P_PROVISION_TIMEOUT );
5727 #endif // CONFIG_CONCURRENT_MODE
5728
5729         }
5730         else
5731         {
5732                 DBG_8723A( "[%s] NOT Found in the Scanning Queue!\n", __func__ );
5733         }
5734 exit:
5735
5736         return ret;
5737
5738 }
5739
5740 //      Added by Albert 20110328
5741 //      This function is used to inform the driver the user had specified the pin code value or pbc
5742 //      to application.
5743
5744 static int rtw_p2p_got_wpsinfo(struct net_device *dev,
5745                                struct iw_request_info *info,
5746                                union iwreq_data *wrqu, char *extra)
5747 {
5748
5749         int ret = 0;
5750         _adapter                                *padapter = (_adapter *)rtw_netdev_priv(dev);
5751         struct wifidirect_info  *pwdinfo = &( padapter->wdinfo );
5752
5753
5754         DBG_8723A( "[%s] data = %s\n", __func__, extra );
5755         //      Added by Albert 20110328
5756         //      if the input data is P2P_NO_WPSINFO -> reset the wpsinfo
5757         //      if the input data is P2P_GOT_WPSINFO_PEER_DISPLAY_PIN -> the utility just input the PIN code got from the peer P2P device.
5758         //      if the input data is P2P_GOT_WPSINFO_SELF_DISPLAY_PIN -> the utility just got the PIN code from itself.
5759         //      if the input data is P2P_GOT_WPSINFO_PBC -> the utility just determine to use the PBC
5760
5761         if ( *extra == '0' )
5762         {
5763                 pwdinfo->ui_got_wps_info = P2P_NO_WPSINFO;
5764         }
5765         else if ( *extra == '1' )
5766         {
5767                 pwdinfo->ui_got_wps_info = P2P_GOT_WPSINFO_PEER_DISPLAY_PIN;
5768         }
5769         else if ( *extra == '2' )
5770         {
5771                 pwdinfo->ui_got_wps_info = P2P_GOT_WPSINFO_SELF_DISPLAY_PIN;
5772         }
5773         else if ( *extra == '3' )
5774         {
5775                 pwdinfo->ui_got_wps_info = P2P_GOT_WPSINFO_PBC;
5776         }
5777         else
5778         {
5779                 pwdinfo->ui_got_wps_info = P2P_NO_WPSINFO;
5780         }
5781
5782         return ret;
5783
5784 }
5785
5786 #endif //CONFIG_P2P
5787
5788 static int rtw_p2p_set(struct net_device *dev,
5789                                struct iw_request_info *info,
5790                                union iwreq_data *wrqu, char *extra)
5791 {
5792
5793         int ret = 0;
5794 #ifdef CONFIG_P2P
5795
5796         _adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
5797         struct mlme_priv *pmlmepriv = &(padapter->mlmepriv);
5798         struct iw_point *pdata = &wrqu->data;
5799         struct wifidirect_info *pwdinfo= &(padapter->wdinfo);
5800         struct mlme_ext_priv    *pmlmeext = &padapter->mlmeextpriv;
5801
5802         DBG_8723A( "[%s] extra = %s\n", __func__, extra );
5803
5804         if (!memcmp( extra, "enable=", 7))
5805         {
5806                 rtw_wext_p2p_enable( dev, info, wrqu, &extra[7] );
5807         }
5808         else if (!memcmp( extra, "setDN=", 6))
5809         {
5810                 wrqu->data.length -= 6;
5811                 rtw_p2p_setDN( dev, info, wrqu, &extra[6] );
5812         }
5813         else if (!memcmp( extra, "profilefound=", 13))
5814         {
5815                 wrqu->data.length -= 13;
5816                 rtw_p2p_profilefound( dev, info, wrqu, &extra[13] );
5817         }
5818         else if (!memcmp( extra, "prov_disc=", 10))
5819         {
5820                 wrqu->data.length -= 10;
5821                 rtw_p2p_prov_disc( dev, info, wrqu, &extra[10] );
5822         }
5823         else if (!memcmp( extra, "nego=", 5))
5824         {
5825                 wrqu->data.length -= 5;
5826                 rtw_p2p_connect( dev, info, wrqu, &extra[5] );
5827         }
5828         else if (!memcmp( extra, "intent=", 7))
5829         {
5830                 //      Commented by Albert 2011/03/23
5831                 //      The wrqu->data.length will include the null character
5832                 //      So, we will decrease 7 + 1
5833                 wrqu->data.length -= 8;
5834                 rtw_p2p_set_intent( dev, info, wrqu, &extra[7] );
5835         }
5836         else if (!memcmp( extra, "ssid=", 5))
5837         {
5838                 wrqu->data.length -= 5;
5839                 rtw_p2p_set_go_nego_ssid( dev, info, wrqu, &extra[5] );
5840         }
5841         else if (!memcmp( extra, "got_wpsinfo=", 12))
5842         {
5843                 wrqu->data.length -= 12;
5844                 rtw_p2p_got_wpsinfo( dev, info, wrqu, &extra[12] );
5845         }
5846         else if (!memcmp( extra, "listen_ch=", 10))
5847         {
5848                 //      Commented by Albert 2011/05/24
5849                 //      The wrqu->data.length will include the null character
5850                 //      So, we will decrease (10 + 1)
5851                 wrqu->data.length -= 11;
5852                 rtw_p2p_set_listen_ch( dev, info, wrqu, &extra[10] );
5853         }
5854         else if (!memcmp( extra, "op_ch=", 6))
5855         {
5856                 //      Commented by Albert 2011/05/24
5857                 //      The wrqu->data.length will include the null character
5858                 //      So, we will decrease (6 + 1)
5859                 wrqu->data.length -= 7;
5860                 rtw_p2p_set_op_ch( dev, info, wrqu, &extra[6] );
5861         }
5862         else if (!memcmp( extra, "invite=", 7))
5863         {
5864                 wrqu->data.length -= 8;
5865                 rtw_p2p_invite_req( dev, info, wrqu, &extra[7] );
5866         }
5867         else if (!memcmp( extra, "persistent=", 11))
5868         {
5869                 wrqu->data.length -= 11;
5870                 rtw_p2p_set_persistent( dev, info, wrqu, &extra[11] );
5871         }
5872 #ifdef CONFIG_WFD
5873         else if (!memcmp( extra, "sa=", 3))
5874         {
5875                 //      sa: WFD Session Available information
5876                 wrqu->data.length -= 3;
5877                 rtw_p2p_set_sa( dev, info, wrqu, &extra[3] );
5878         }
5879         else if (!memcmp( extra, "pc=", 3))
5880         {
5881                 //      pc: WFD Preferred Connection
5882                 wrqu->data.length -= 3;
5883                 rtw_p2p_set_pc( dev, info, wrqu, &extra[3] );
5884         }
5885         else if (!memcmp( extra, "wfd_type=", 9))
5886         {
5887                 //      Specify this device is Mircast source or sink
5888                 wrqu->data.length -= 9;
5889                 rtw_p2p_set_wfd_device_type( dev, info, wrqu, &extra[9] );
5890         }
5891         else if (!memcmp( extra, "scan_type=", 10))
5892         {
5893                 wrqu->data.length -= 10;
5894                 rtw_p2p_set_scan_result_type( dev, info, wrqu, &extra[10] );
5895         }
5896 #endif //CONFIG_WFD
5897
5898 #endif //CONFIG_P2P
5899
5900         return ret;
5901
5902 }
5903
5904 static int rtw_p2p_get(struct net_device *dev,
5905                                struct iw_request_info *info,
5906                                union iwreq_data *wrqu, char *extra)
5907 {
5908
5909         int ret = 0;
5910
5911 #ifdef CONFIG_P2P
5912
5913         _adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
5914         struct mlme_priv *pmlmepriv = &(padapter->mlmepriv);
5915         struct iw_point *pdata = &wrqu->data;
5916         struct wifidirect_info *pwdinfo= &(padapter->wdinfo);
5917         struct mlme_ext_priv    *pmlmeext = &padapter->mlmeextpriv;
5918
5919         if ( padapter->bShowGetP2PState )
5920         {
5921                 DBG_8723A( "[%s] extra = %s\n", __func__, (char*) wrqu->data.pointer );
5922         }
5923
5924         if (!memcmp(wrqu->data.pointer, "status", 6))
5925         {
5926                 rtw_p2p_get_status( dev, info, wrqu, extra );
5927         }
5928         else if (!memcmp(wrqu->data.pointer, "role", 4))
5929         {
5930                 rtw_p2p_get_role( dev, info, wrqu, extra);
5931         }
5932         else if (!memcmp(wrqu->data.pointer, "peer_ifa", 8))
5933         {
5934                 rtw_p2p_get_peer_ifaddr( dev, info, wrqu, extra);
5935         }
5936         else if (!memcmp(wrqu->data.pointer, "req_cm", 6))
5937         {
5938                 rtw_p2p_get_req_cm( dev, info, wrqu, extra);
5939         }
5940         else if (!memcmp(wrqu->data.pointer, "peer_deva", 9))
5941         {
5942                 //      Get the P2P device address when receiving the provision discovery request frame.
5943                 rtw_p2p_get_peer_devaddr( dev, info, wrqu, extra);
5944         }
5945         else if (!memcmp(wrqu->data.pointer, "group_id", 8))
5946         {
5947                 rtw_p2p_get_groupid( dev, info, wrqu, extra);
5948         }
5949         else if (!memcmp(wrqu->data.pointer, "peer_deva_inv", 9))
5950         {
5951                 //      Get the P2P device address when receiving the P2P Invitation request frame.
5952                 rtw_p2p_get_peer_devaddr_by_invitation( dev, info, wrqu, extra);
5953         }
5954         else if (!memcmp(wrqu->data.pointer, "op_ch", 5))
5955         {
5956                 rtw_p2p_get_op_ch( dev, info, wrqu, extra);
5957         }
5958 #ifdef CONFIG_WFD
5959         else if (!memcmp(wrqu->data.pointer, "peer_port", 9))
5960         {
5961                 rtw_p2p_get_peer_wfd_port( dev, info, wrqu, extra );
5962         }
5963         else if (!memcmp(wrqu->data.pointer, "wfd_sa", 6))
5964         {
5965                 rtw_p2p_get_peer_wfd_session_available( dev, info, wrqu, extra );
5966         }
5967         else if (!memcmp( wrqu->data.pointer, "wfd_pc", 6))
5968         {
5969                 rtw_p2p_get_peer_wfd_preferred_connection( dev, info, wrqu, extra );
5970         }
5971 #endif // CONFIG_WFD
5972
5973 #endif //CONFIG_P2P
5974
5975         return ret;
5976
5977 }
5978
5979 static int rtw_p2p_get2(struct net_device *dev,
5980                         struct iw_request_info *info,
5981                         union iwreq_data *wrqu, char *extra)
5982 {
5983         int ret = 0;
5984
5985 #ifdef CONFIG_P2P
5986
5987         int length = wrqu->data.length;
5988         char *buffer = (u8 *)kmalloc(length, GFP_KERNEL);
5989
5990         if (buffer == NULL) {
5991                 ret = -ENOMEM;
5992                 goto exit;
5993         }
5994
5995         if (copy_from_user(buffer, wrqu->data.pointer, wrqu->data.length)) {
5996                 ret = -EFAULT;
5997                 goto bad;
5998         }
5999
6000         DBG_8723A("[%s] buffer = %s\n", __func__, buffer);
6001
6002         if (!memcmp(buffer, "wpsCM=", 6)) {
6003                 ret = rtw_p2p_get_wps_configmethod(dev, info, wrqu, extra, &buffer[6]);
6004         } else if (!memcmp(buffer, "devN=", 5)) {
6005                 ret = rtw_p2p_get_device_name(dev, info, wrqu, extra, &buffer[5]);
6006         } else if (!memcmp(buffer, "dev_type=", 9)) {
6007                 ret = rtw_p2p_get_device_type(dev, info, wrqu, extra, &buffer[9]);
6008         } else if (!memcmp(buffer, "go_devadd=", 10)) {
6009                 ret = rtw_p2p_get_go_device_address(dev, info, wrqu, extra, &buffer[10]);
6010         } else if (!memcmp(buffer, "InvProc=", 8)) {
6011                 ret = rtw_p2p_get_invitation_procedure(dev, info, wrqu, extra, &buffer[8]);
6012         } else {
6013                 snprintf(extra, sizeof("Command not found."), "Command not found.");
6014                 wrqu->data.length = strlen(extra);
6015         }
6016 bad:
6017         kfree(buffer);
6018 exit:
6019 #endif //CONFIG_P2P
6020
6021         return ret;
6022
6023 }
6024
6025 static int rtw_cta_test_start(struct net_device *dev,
6026                                                            struct iw_request_info *info,
6027                                                            union iwreq_data *wrqu, char *extra)
6028 {
6029         int ret = 0;
6030         _adapter        *padapter = (_adapter *)rtw_netdev_priv(dev);
6031         DBG_8723A("%s %s\n", __func__, extra);
6032         if (!strcmp(extra, "1"))
6033                 padapter->in_cta_test = 1;
6034         else
6035                 padapter->in_cta_test = 0;
6036
6037         if(padapter->in_cta_test)
6038         {
6039                 u32 v = rtw_read32(padapter, REG_RCR);
6040                 v &= ~(RCR_CBSSID_DATA | RCR_CBSSID_BCN );//| RCR_ADF
6041                 rtw_write32(padapter, REG_RCR, v);
6042                 DBG_8723A("enable RCR_ADF\n");
6043         }
6044         else
6045         {
6046                 u32 v = rtw_read32(padapter, REG_RCR);
6047                 v |= RCR_CBSSID_DATA | RCR_CBSSID_BCN ;//| RCR_ADF
6048                 rtw_write32(padapter, REG_RCR, v);
6049                 DBG_8723A("disable RCR_ADF\n");
6050         }
6051         return ret;
6052 }
6053
6054
6055 extern int rtw_change_ifname(_adapter *padapter, const char *ifname);
6056 static int rtw_rereg_nd_name(struct net_device *dev,
6057                                struct iw_request_info *info,
6058                                union iwreq_data *wrqu, char *extra)
6059 {
6060         int ret = 0;
6061         _adapter *padapter = rtw_netdev_priv(dev);
6062         struct rereg_nd_name_data *rereg_priv = &padapter->rereg_nd_name_priv;
6063         char new_ifname[IFNAMSIZ];
6064
6065         if(rereg_priv->old_ifname[0] == 0) {
6066                 char *reg_ifname;
6067 #ifdef CONFIG_CONCURRENT_MODE
6068                 if (padapter->isprimary)
6069                         reg_ifname = padapter->registrypriv.ifname;
6070                 else
6071 #endif
6072                 reg_ifname = padapter->registrypriv.if2name;
6073
6074                 strncpy(rereg_priv->old_ifname, reg_ifname, IFNAMSIZ);
6075                 rereg_priv->old_ifname[IFNAMSIZ-1] = 0;
6076         }
6077
6078         //DBG_8723A("%s wrqu->data.length:%d\n", __func__, wrqu->data.length);
6079         if(wrqu->data.length > IFNAMSIZ)
6080                 return -EFAULT;
6081
6082         if ( copy_from_user(new_ifname, wrqu->data.pointer, IFNAMSIZ) ) {
6083                 return -EFAULT;
6084         }
6085
6086         if( 0 == strcmp(rereg_priv->old_ifname, new_ifname) ) {
6087                 return ret;
6088         }
6089
6090         DBG_8723A("%s new_ifname:%s\n", __func__, new_ifname);
6091         if( 0 != (ret = rtw_change_ifname(padapter, new_ifname)) ) {
6092                 goto exit;
6093         }
6094
6095         if(!memcmp(rereg_priv->old_ifname, "disable%d", 9)) {
6096                 padapter->ledpriv.bRegUseLed= rereg_priv->old_bRegUseLed;
6097                 rtw_hal_sw_led_init(padapter);
6098                 rtw_ips_mode_req(&padapter->pwrctrlpriv, rereg_priv->old_ips_mode);
6099         }
6100
6101         strncpy(rereg_priv->old_ifname, new_ifname, IFNAMSIZ);
6102         rereg_priv->old_ifname[IFNAMSIZ-1] = 0;
6103
6104         if(!memcmp(new_ifname, "disable%d", 9)) {
6105
6106                 DBG_8723A("%s disable\n", __func__);
6107                 // free network queue for Android's timming issue
6108                 rtw_free_network_queue(padapter, _TRUE);
6109
6110                 // close led
6111                 rtw_led_control(padapter, LED_CTL_POWER_OFF);
6112                 rereg_priv->old_bRegUseLed = padapter->ledpriv.bRegUseLed;
6113                 padapter->ledpriv.bRegUseLed= _FALSE;
6114                 rtw_hal_sw_led_deinit(padapter);
6115
6116                 // the interface is being "disabled", we can do deeper IPS
6117                 rereg_priv->old_ips_mode = rtw_get_ips_mode_req(&padapter->pwrctrlpriv);
6118                 rtw_ips_mode_req(&padapter->pwrctrlpriv, IPS_NORMAL);
6119         }
6120 exit:
6121         return ret;
6122
6123 }
6124
6125 static void mac_reg_dump(_adapter *padapter)
6126 {
6127         int i,j=1;
6128         printk("\n======= MAC REG =======\n");
6129         for(i=0x0;i<0x300;i+=4)
6130         {
6131                 if(j%4==1)      printk("0x%02x",i);
6132                 printk(" 0x%08x ",rtw_read32(padapter,i));
6133                 if((j++)%4 == 0)        printk("\n");
6134         }
6135         for(i=0x400;i<0x800;i+=4)
6136         {
6137                 if(j%4==1)      printk("0x%02x",i);
6138                 printk(" 0x%08x ",rtw_read32(padapter,i));
6139                 if((j++)%4 == 0)        printk("\n");
6140         }
6141 }
6142 void bb_reg_dump(_adapter *padapter)
6143 {
6144         int i,j=1;
6145         printk("\n======= BB REG =======\n");
6146         for(i=0x800;i<0x1000;i+=4)
6147         {
6148                 if(j%4==1) printk("0x%02x",i);
6149
6150                 printk(" 0x%08x ",rtw_read32(padapter,i));
6151                 if((j++)%4 == 0)        printk("\n");
6152         }
6153 }
6154 void rf_reg_dump(_adapter *padapter)
6155 {
6156         int i,j=1,path;
6157         u32 value;
6158         u8 rf_type,path_nums = 0;
6159         rtw_hal_get_hwreg(padapter, HW_VAR_RF_TYPE, (u8 *)(&rf_type));
6160
6161         printk("\n======= RF REG =======\n");
6162         if((RF_1T2R == rf_type) ||(RF_1T1R ==rf_type ))
6163                 path_nums = 1;
6164         else
6165                 path_nums = 2;
6166
6167         for(path=0;path<path_nums;path++)
6168         {
6169                 printk("\nRF_Path(%x)\n",path);
6170                 for(i=0;i<0x100;i++)
6171                 {
6172                         //value = PHY_QueryRFReg(padapter, (RF_RADIO_PATH_E)path,i, bMaskDWord);
6173                         value = rtw_hal_read_rfreg(padapter, path, i, 0xffffffff);
6174                         if(j%4==1)      printk("0x%02x ",i);
6175                         printk(" 0x%08x ",value);
6176                         if((j++)%4==0)  printk("\n");
6177                 }
6178         }
6179 }
6180
6181 #ifdef CONFIG_IOL
6182 #include <rtw_iol.h>
6183 #endif
6184 static int rtw_dbg_port(struct net_device *dev,
6185                                struct iw_request_info *info,
6186                                union iwreq_data *wrqu, char *extra)
6187 {
6188         _irqL irqL;
6189         int ret = 0;
6190         u8 major_cmd, minor_cmd;
6191         u16 arg;
6192         u32 extra_arg, *pdata, val32;
6193         struct sta_info *psta;
6194         _adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
6195         struct mlme_priv *pmlmepriv = &(padapter->mlmepriv);
6196         struct mlme_ext_priv    *pmlmeext = &padapter->mlmeextpriv;
6197         struct mlme_ext_info    *pmlmeinfo = &(pmlmeext->mlmext_info);
6198         struct security_priv *psecuritypriv = &padapter->securitypriv;
6199         struct wlan_network *cur_network = &(pmlmepriv->cur_network);
6200         struct sta_priv *pstapriv = &padapter->stapriv;
6201
6202
6203         pdata = (u32*)&wrqu->data;
6204
6205         val32 = *pdata;
6206         arg = (u16)(val32&0x0000ffff);
6207         major_cmd = (u8)(val32>>24);
6208         minor_cmd = (u8)((val32>>16)&0x00ff);
6209
6210         extra_arg = *(pdata+1);
6211
6212         switch(major_cmd)
6213         {
6214                 case 0x70://read_reg
6215                         switch(minor_cmd)
6216                         {
6217                                 case 1:
6218                                         DBG_8723A("rtw_read8(0x%x)=0x%02x\n", arg, rtw_read8(padapter, arg));
6219                                         break;
6220                                 case 2:
6221                                         DBG_8723A("rtw_read16(0x%x)=0x%04x\n", arg, rtw_read16(padapter, arg));
6222                                         break;
6223                                 case 4:
6224                                         DBG_8723A("rtw_read32(0x%x)=0x%08x\n", arg, rtw_read32(padapter, arg));
6225                                         break;
6226                         }
6227                         break;
6228                 case 0x71://write_reg
6229                         switch(minor_cmd)
6230                         {
6231                                 case 1:
6232                                         rtw_write8(padapter, arg, extra_arg);
6233                                         DBG_8723A("rtw_write8(0x%x)=0x%02x\n", arg, rtw_read8(padapter, arg));
6234                                         break;
6235                                 case 2:
6236                                         rtw_write16(padapter, arg, extra_arg);
6237                                         DBG_8723A("rtw_write16(0x%x)=0x%04x\n", arg, rtw_read16(padapter, arg));
6238                                         break;
6239                                 case 4:
6240                                         rtw_write32(padapter, arg, extra_arg);
6241                                         DBG_8723A("rtw_write32(0x%x)=0x%08x\n", arg, rtw_read32(padapter, arg));
6242                                         break;
6243                         }
6244                         break;
6245                 case 0x72://read_bb
6246                         DBG_8723A("read_bbreg(0x%x)=0x%x\n", arg, rtw_hal_read_bbreg(padapter, arg, 0xffffffff));
6247                         break;
6248                 case 0x73://write_bb
6249                         rtw_hal_write_bbreg(padapter, arg, 0xffffffff, extra_arg);
6250                         DBG_8723A("write_bbreg(0x%x)=0x%x\n", arg, rtw_hal_read_bbreg(padapter, arg, 0xffffffff));
6251                         break;
6252                 case 0x74://read_rf
6253                         DBG_8723A("read RF_reg path(0x%02x),offset(0x%x),value(0x%08x)\n",minor_cmd,arg,rtw_hal_read_rfreg(padapter, minor_cmd, arg, 0xffffffff));
6254                         break;
6255                 case 0x75://write_rf
6256                         rtw_hal_write_rfreg(padapter, minor_cmd, arg, 0xffffffff, extra_arg);
6257                         DBG_8723A("write RF_reg path(0x%02x),offset(0x%x),value(0x%08x)\n",minor_cmd,arg, rtw_hal_read_rfreg(padapter, minor_cmd, arg, 0xffffffff));
6258                         break;
6259
6260                 case 0x76:
6261                         switch(minor_cmd) {
6262                         case 0x00: //normal mode,
6263                                 padapter->recvpriv.is_signal_dbg = 0;
6264                                 break;
6265                         case 0x01: //dbg mode
6266                                 padapter->recvpriv.is_signal_dbg = 1;
6267                                 extra_arg = extra_arg > 100 ? 100 : extra_arg;
6268                                 padapter->recvpriv.signal_strength_dbg = extra_arg;
6269                                 break;
6270                         }
6271                         break;
6272                 case 0x78: //IOL test
6273                         #ifdef CONFIG_IOL
6274                         switch(minor_cmd) {
6275                         case 0x04: //LLT table initialization test
6276                         {
6277                                 u8 page_boundary = 0xf9;
6278                                 {
6279                                         struct xmit_frame       *xmit_frame;
6280
6281                                         if((xmit_frame=rtw_IOL_accquire_xmit_frame(padapter)) == NULL) {
6282                                                 ret = -ENOMEM;
6283                                                 break;
6284                                         }
6285
6286                                         rtw_IOL_append_LLT_cmd(xmit_frame, page_boundary);
6287
6288
6289                                         if(_SUCCESS != rtw_IOL_exec_cmds_sync(padapter, xmit_frame, 500,0) )
6290                                                 ret = -EPERM;
6291                                 }
6292                         }
6293                                 break;
6294                         case 0x05: //blink LED test
6295                         {
6296                                 u16 reg = 0x4c;
6297                                 u32 blink_num = 50;
6298                                 u32 blink_delay_ms = 200;
6299                                 int i;
6300
6301                                 {
6302                                         struct xmit_frame       *xmit_frame;
6303
6304                                         if((xmit_frame=rtw_IOL_accquire_xmit_frame(padapter)) == NULL) {
6305                                                 ret = -ENOMEM;
6306                                                 break;
6307                                         }
6308
6309                                         for(i=0;i<blink_num;i++){
6310                                                 #ifdef CONFIG_IOL_NEW_GENERATION
6311                                                 rtw_IOL_append_WB_cmd(xmit_frame, reg, 0x00,0xff);
6312                                                 rtw_IOL_append_DELAY_MS_cmd(xmit_frame, blink_delay_ms);
6313                                                 rtw_IOL_append_WB_cmd(xmit_frame, reg, 0x08,0xff);
6314                                                 rtw_IOL_append_DELAY_MS_cmd(xmit_frame, blink_delay_ms);
6315                                                 #else
6316                                                 rtw_IOL_append_WB_cmd(xmit_frame, reg, 0x00);
6317                                                 rtw_IOL_append_DELAY_MS_cmd(xmit_frame, blink_delay_ms);
6318                                                 rtw_IOL_append_WB_cmd(xmit_frame, reg, 0x08);
6319                                                 rtw_IOL_append_DELAY_MS_cmd(xmit_frame, blink_delay_ms);
6320                                                 #endif
6321                                         }
6322                                         if(_SUCCESS != rtw_IOL_exec_cmds_sync(padapter, xmit_frame, (blink_delay_ms*blink_num*2)+200,0) )
6323                                                 ret = -EPERM;
6324                                 }
6325                         }
6326                                 break;
6327
6328                         case 0x06: //continuous write byte test
6329                         {
6330                                 u16 reg = arg;
6331                                 u16 start_value = 0;
6332                                 u32 write_num = extra_arg;
6333                                 int i;
6334                                 u8 final;
6335
6336                                 {
6337                                         struct xmit_frame       *xmit_frame;
6338
6339                                         if((xmit_frame=rtw_IOL_accquire_xmit_frame(padapter)) == NULL) {
6340                                                 ret = -ENOMEM;
6341                                                 break;
6342                                         }
6343
6344                                         for(i=0;i<write_num;i++){
6345                                                 #ifdef CONFIG_IOL_NEW_GENERATION
6346                                                 rtw_IOL_append_WB_cmd(xmit_frame, reg, i+start_value,0xFF);
6347                                                 #else
6348                                                 rtw_IOL_append_WB_cmd(xmit_frame, reg, i+start_value);
6349                                                 #endif
6350                                         }
6351                                         if(_SUCCESS != rtw_IOL_exec_cmds_sync(padapter, xmit_frame, 5000,0))
6352                                                 ret = -EPERM;
6353                                 }
6354
6355                                 if(start_value+write_num-1 == (final=rtw_read8(padapter, reg)) ) {
6356                                         DBG_8723A("continuous IOL_CMD_WB_REG to 0x%x %u times Success, start:%u, final:%u\n", reg, write_num, start_value, final);
6357                                 } else {
6358                                         DBG_8723A("continuous IOL_CMD_WB_REG to 0x%x %u times Fail, start:%u, final:%u\n", reg, write_num, start_value, final);
6359                                 }
6360                         }
6361                                 break;
6362
6363                         case 0x07: //continuous write word test
6364                         {
6365                                 u16 reg = arg;
6366                                 u16 start_value = 200;
6367                                 u32 write_num = extra_arg;
6368
6369                                 int i;
6370                                 u16 final;
6371
6372                                 {
6373                                         struct xmit_frame       *xmit_frame;
6374
6375                                         if((xmit_frame=rtw_IOL_accquire_xmit_frame(padapter)) == NULL) {
6376                                                 ret = -ENOMEM;
6377                                                 break;
6378                                         }
6379
6380                                         for(i=0;i<write_num;i++){
6381                                                 #ifdef CONFIG_IOL_NEW_GENERATION
6382                                                 rtw_IOL_append_WW_cmd(xmit_frame, reg, i+start_value,0xFFFF);
6383                                                 #else
6384                                                 rtw_IOL_append_WW_cmd(xmit_frame, reg, i+start_value);
6385                                                 #endif
6386                                         }
6387                                         if(_SUCCESS !=rtw_IOL_exec_cmds_sync(padapter, xmit_frame, 5000,0))
6388                                                 ret = -EPERM;
6389                                 }
6390
6391                                 if(start_value+write_num-1 == (final=rtw_read16(padapter, reg)) ) {
6392                                         DBG_8723A("continuous IOL_CMD_WW_REG to 0x%x %u times Success, start:%u, final:%u\n", reg, write_num, start_value, final);
6393                                 } else {
6394                                         DBG_8723A("continuous IOL_CMD_WW_REG to 0x%x %u times Fail, start:%u, final:%u\n", reg, write_num, start_value, final);
6395                                 }
6396                         }
6397                                 break;
6398
6399                         case 0x08: //continuous write dword test
6400                         {
6401                                 u16 reg = arg;
6402                                 u32 start_value = 0x110000c7;
6403                                 u32 write_num = extra_arg;
6404
6405                                 int i;
6406                                 u32 final;
6407                                 struct xmit_frame       *xmit_frame;
6408
6409                                 if((xmit_frame=rtw_IOL_accquire_xmit_frame(padapter)) == NULL) {
6410                                         ret = -ENOMEM;
6411                                         break;
6412                                 }
6413
6414                                 for(i=0;i<write_num;i++){
6415                                         #ifdef CONFIG_IOL_NEW_GENERATION
6416                                         rtw_IOL_append_WD_cmd(xmit_frame, reg, i+start_value,0xFFFFFFFF);
6417                                         #else
6418                                         rtw_IOL_append_WD_cmd(xmit_frame, reg, i+start_value);
6419                                         #endif
6420                                 }
6421                                 if(_SUCCESS !=rtw_IOL_exec_cmds_sync(padapter, xmit_frame, 5000,0))
6422                                         ret = -EPERM;
6423
6424
6425                                 if(start_value+write_num-1 == (final=rtw_read32(padapter, reg)) ) {
6426                                         DBG_8723A("continuous IOL_CMD_WD_REG to 0x%x %u times Success, start:%u, final:%u\n", reg, write_num, start_value, final);
6427                                 } else {
6428                                         DBG_8723A("continuous IOL_CMD_WD_REG to 0x%x %u times Fail, start:%u, final:%u\n", reg, write_num, start_value, final);
6429                                 }
6430                         }
6431                                 break;
6432                         #endif //CONFIG_IOL
6433                         break;
6434                 case 0x79:
6435                         {
6436                                 /*
6437                                 * dbg 0x79000000 [value], set RESP_TXAGC to + value, value:0~15
6438                                 * dbg 0x79010000 [value], set RESP_TXAGC to - value, value:0~15
6439                                 */
6440                                 u8 value =  extra_arg & 0x0f;
6441                                 u8 sign = minor_cmd;
6442                                 u16 write_value = 0;
6443
6444                                 DBG_8723A("%s set RESP_TXAGC to %s %u\n", __func__, sign?"minus":"plus", value);
6445
6446                                 if (sign)
6447                                         value = value | 0x10;
6448
6449                                 write_value = value | (value << 5);
6450                                 rtw_write16(padapter, 0x6d9, write_value);
6451                         }
6452                         break;
6453                 case 0x7a:
6454                         receive_disconnect(padapter, pmlmeinfo->network.MacAddress
6455                                 , WLAN_REASON_EXPIRATION_CHK);
6456                         break;
6457                 case 0x7F:
6458                         switch(minor_cmd)
6459                         {
6460                                 case 0x0:
6461                                         DBG_8723A("fwstate=0x%x\n", get_fwstate(pmlmepriv));
6462                                         break;
6463                                 case 0x01:
6464                                         DBG_8723A("auth_alg=0x%x, enc_alg=0x%x, auth_type=0x%x, enc_type=0x%x\n",
6465                                                 psecuritypriv->dot11AuthAlgrthm, psecuritypriv->dot11PrivacyAlgrthm,
6466                                                 psecuritypriv->ndisauthtype, psecuritypriv->ndisencryptstatus);
6467                                         break;
6468                                 case 0x02:
6469                                         DBG_8723A("pmlmeinfo->state=0x%x\n", pmlmeinfo->state);
6470                                         break;
6471                                 case 0x03:
6472                                         DBG_8723A("qos_option=%d\n", pmlmepriv->qospriv.qos_option);
6473 #ifdef CONFIG_80211N_HT
6474                                         DBG_8723A("ht_option=%d\n", pmlmepriv->htpriv.ht_option);
6475 #endif //CONFIG_80211N_HT
6476                                         break;
6477                                 case 0x04:
6478                                         DBG_8723A("cur_ch=%d\n", pmlmeext->cur_channel);
6479                                         DBG_8723A("cur_bw=%d\n", pmlmeext->cur_bwmode);
6480                                         DBG_8723A("cur_ch_off=%d\n", pmlmeext->cur_ch_offset);
6481                                         break;
6482                                 case 0x05:
6483                                         psta = rtw_get_stainfo(pstapriv, cur_network->network.MacAddress);
6484                                         if(psta)
6485                                         {
6486                                                 int i;
6487                                                 struct recv_reorder_ctrl *preorder_ctrl;
6488
6489                                                 DBG_8723A("SSID=%s\n", cur_network->network.Ssid.Ssid);
6490                                                 DBG_8723A("sta's macaddr:" MAC_FMT "\n", MAC_ARG(psta->hwaddr));
6491                                                 DBG_8723A("cur_channel=%d, cur_bwmode=%d, cur_ch_offset=%d\n", pmlmeext->cur_channel, pmlmeext->cur_bwmode, pmlmeext->cur_ch_offset);
6492                                                 DBG_8723A("rtsen=%d, cts2slef=%d\n", psta->rtsen, psta->cts2self);
6493                                                 DBG_8723A("state=0x%x, aid=%d, macid=%d, raid=%d\n", psta->state, psta->aid, psta->mac_id, psta->raid);
6494 #ifdef CONFIG_80211N_HT
6495                                                 DBG_8723A("qos_en=%d, ht_en=%d, init_rate=%d\n", psta->qos_option, psta->htpriv.ht_option, psta->init_rate);
6496                                                 DBG_8723A("bwmode=%d, ch_offset=%d, sgi=%d\n", psta->htpriv.bwmode, psta->htpriv.ch_offset, psta->htpriv.sgi);
6497                                                 DBG_8723A("ampdu_enable = %d\n", psta->htpriv.ampdu_enable);
6498                                                 DBG_8723A("agg_enable_bitmap=%x, candidate_tid_bitmap=%x\n", psta->htpriv.agg_enable_bitmap, psta->htpriv.candidate_tid_bitmap);
6499 #endif //CONFIG_80211N_HT
6500
6501                                                 for(i=0;i<16;i++)
6502                                                 {
6503                                                         preorder_ctrl = &psta->recvreorder_ctrl[i];
6504                                                         if(preorder_ctrl->enable)
6505                                                         {
6506                                                                 DBG_8723A("tid=%d, indicate_seq=%d\n", i, preorder_ctrl->indicate_seq);
6507                                                         }
6508                                                 }
6509
6510                                         }
6511                                         else
6512                                         {
6513                                                 DBG_8723A("can't get sta's macaddr, cur_network's macaddr:" MAC_FMT "\n", MAC_ARG(cur_network->network.MacAddress));
6514                                         }
6515                                         break;
6516                                 case 0x06:
6517                                         {
6518                                                 u32     ODMFlag;
6519                                                 rtw_hal_get_hwreg(padapter, HW_VAR_DM_FLAG, (u8*)(&ODMFlag));
6520                                                 DBG_8723A("(B)DMFlag=0x%x, arg=0x%x\n", ODMFlag, arg);
6521                                                 ODMFlag = (u32)(0x0f&arg);
6522                                                 DBG_8723A("(A)DMFlag=0x%x\n", ODMFlag);
6523                                                 rtw_hal_set_hwreg(padapter, HW_VAR_DM_FLAG, (u8 *)(&ODMFlag));
6524                                         }
6525                                         break;
6526                                 case 0x07:
6527                                         DBG_8723A("bSurpriseRemoved=%d, bDriverStopped=%d\n",
6528                                                 padapter->bSurpriseRemoved, padapter->bDriverStopped);
6529                                         break;
6530                                 case 0x08:
6531                                         {
6532                                                 struct xmit_priv *pxmitpriv = &padapter->xmitpriv;
6533                                                 struct recv_priv  *precvpriv = &padapter->recvpriv;
6534
6535                                                 DBG_8723A("free_xmitbuf_cnt=%d, free_xmitframe_cnt=%d"
6536                                                         ", free_xmit_extbuf_cnt=%d, free_xframe_ext_cnt=%d"
6537                                                         ", free_recvframe_cnt=%d\n",
6538                                                         pxmitpriv->free_xmitbuf_cnt, pxmitpriv->free_xmitframe_cnt,
6539                                                         pxmitpriv->free_xmit_extbuf_cnt, pxmitpriv->free_xframe_ext_cnt,
6540                                                         precvpriv->free_recvframe_cnt);
6541                                                 #ifdef CONFIG_USB_HCI
6542                                                 DBG_8723A("rx_urb_pending_cn=%d\n", precvpriv->rx_pending_cnt);
6543                                                 #endif
6544                                         }
6545                                         break;
6546                                 case 0x09:
6547                                         {
6548                                                 int i, j;
6549                                                 _list   *plist, *phead;
6550                                                 struct recv_reorder_ctrl *preorder_ctrl;
6551
6552 #ifdef CONFIG_AP_MODE
6553                                                 DBG_8723A("sta_dz_bitmap=0x%x, tim_bitmap=0x%x\n", pstapriv->sta_dz_bitmap, pstapriv->tim_bitmap);
6554 #endif
6555                                                 spin_lock_bh(&pstapriv->sta_hash_lock);
6556
6557                                                 for(i=0; i< NUM_STA; i++)
6558                                                 {
6559                                                         phead = &(pstapriv->sta_hash[i]);
6560                                                         plist = get_next(phead);
6561
6562                                                         while ((rtw_end_of_queue_search(phead, plist)) == _FALSE)
6563                                                         {
6564                                                                 psta = LIST_CONTAINOR(plist, struct sta_info, hash_list);
6565
6566                                                                 plist = get_next(plist);
6567
6568                                                                 if(extra_arg == psta->aid)
6569                                                                 {
6570                                                                         DBG_8723A("sta's macaddr:" MAC_FMT "\n", MAC_ARG(psta->hwaddr));
6571                                                                         DBG_8723A("rtsen=%d, cts2slef=%d\n", psta->rtsen, psta->cts2self);
6572                                                                         DBG_8723A("state=0x%x, aid=%d, macid=%d, raid=%d\n", psta->state, psta->aid, psta->mac_id, psta->raid);
6573 #ifdef CONFIG_80211N_HT
6574                                                                         DBG_8723A("qos_en=%d, ht_en=%d, init_rate=%d\n", psta->qos_option, psta->htpriv.ht_option, psta->init_rate);
6575                                                                         DBG_8723A("bwmode=%d, ch_offset=%d, sgi=%d\n", psta->htpriv.bwmode, psta->htpriv.ch_offset, psta->htpriv.sgi);
6576                                                                         DBG_8723A("ampdu_enable = %d\n", psta->htpriv.ampdu_enable);
6577                                                                         DBG_8723A("agg_enable_bitmap=%x, candidate_tid_bitmap=%x\n", psta->htpriv.agg_enable_bitmap, psta->htpriv.candidate_tid_bitmap);
6578 #endif //CONFIG_80211N_HT
6579
6580 #ifdef CONFIG_AP_MODE
6581                                                                         DBG_8723A("capability=0x%x\n", psta->capability);
6582                                                                         DBG_8723A("flags=0x%x\n", psta->flags);
6583                                                                         DBG_8723A("wpa_psk=0x%x\n", psta->wpa_psk);
6584                                                                         DBG_8723A("wpa2_group_cipher=0x%x\n", psta->wpa2_group_cipher);
6585                                                                         DBG_8723A("wpa2_pairwise_cipher=0x%x\n", psta->wpa2_pairwise_cipher);
6586                                                                         DBG_8723A("qos_info=0x%x\n", psta->qos_info);
6587 #endif
6588                                                                         DBG_8723A("dot118021XPrivacy=0x%x\n", psta->dot118021XPrivacy);
6589
6590
6591
6592                                                                         for(j=0;j<16;j++)
6593                                                                         {
6594                                                                                 preorder_ctrl = &psta->recvreorder_ctrl[j];
6595                                                                                 if(preorder_ctrl->enable)
6596                                                                                 {
6597                                                                                         DBG_8723A("tid=%d, indicate_seq=%d\n", j, preorder_ctrl->indicate_seq);
6598                                                                                 }
6599                                                                         }
6600
6601                                                                 }
6602
6603                                                         }
6604                                                 }
6605
6606                                                 spin_unlock_bh(&pstapriv->sta_hash_lock);
6607
6608                                         }
6609                                         break;
6610
6611                                 case 0x0c://dump rx/tx packet
6612                                         {
6613                                                 if(arg == 0){
6614                                                         DBG_8723A("dump rx packet (%d)\n",extra_arg);
6615                                                         //pHalData->bDumpRxPkt =extra_arg;
6616                                                         rtw_hal_set_def_var(padapter, HAL_DEF_DBG_DUMP_RXPKT, &(extra_arg));
6617                                                 }
6618                                                 else if(arg==1){
6619                                                         DBG_8723A("dump tx packet (%d)\n",extra_arg);
6620                                                         rtw_hal_set_def_var(padapter, HAL_DEF_DBG_DUMP_TXPKT, &(extra_arg));
6621                                                 }
6622                                         }
6623                                         break;
6624 #if 0
6625                                         case 0x0d://dump cam
6626                                         {
6627                                                 //u8 entry = (u8) extra_arg;
6628                                                 u8 entry=0;
6629                                                 //dump cam
6630                                                 for(entry=0;entry<32;entry++)
6631                                                         read_cam(padapter,entry);
6632                                         }
6633                                         break;
6634 #endif
6635                 #ifdef DBG_CONFIG_ERROR_DETECT
6636                                 case 0x0f:
6637                                                 {
6638                                                         if(extra_arg == 0){
6639                                                                 DBG_8723A("###### silent reset test.......#####\n");
6640                                                                 rtw_hal_sreset_reset(padapter);
6641                                                         } else {
6642                                                                 HAL_DATA_TYPE   *pHalData = GET_HAL_DATA(padapter);
6643                                                                 struct sreset_priv *psrtpriv = &pHalData->srestpriv;
6644                                                                 psrtpriv->dbg_trigger_point = extra_arg;
6645                                                         }
6646
6647                                                 }
6648                                 break;
6649                                 case 0x15:
6650                                         {
6651                                                 struct pwrctrl_priv *pwrpriv = &padapter->pwrctrlpriv;
6652                                                 DBG_8723A("==>silent resete cnts:%d\n",pwrpriv->ips_enter_cnts);
6653                                         }
6654                                         break;
6655
6656                 #endif
6657
6658                                 case 0x10:// driver version display
6659                                         DBG_8723A("rtw driver version=%s\n", DRIVERVERSION);
6660                                         break;
6661                                 case 0x11:
6662                                         {
6663                                                 DBG_8723A("turn %s Rx RSSI display function\n",(extra_arg==1)?"on":"off");
6664                                                 padapter->bRxRSSIDisplay = extra_arg ;
6665                                                 rtw_hal_set_def_var(padapter, HW_DEF_FA_CNT_DUMP,&extra_arg);
6666                                         }
6667                                         break;
6668                                 case 0x12: //set rx_stbc
6669                                 {
6670                                         struct registry_priv    *pregpriv = &padapter->registrypriv;
6671                                         // 0: disable, bit(0):enable 2.4g, bit(1):enable 5g, 0x3: enable both 2.4g and 5g
6672                                         //default is set to enable 2.4GHZ for IOT issue with bufflao's AP at 5GHZ
6673                                         if( pregpriv && (extra_arg == 0 || extra_arg == 1|| extra_arg == 2 || extra_arg == 3))
6674                                         {
6675                                                 pregpriv->rx_stbc= extra_arg;
6676                                                 DBG_8723A("set rx_stbc=%d\n",pregpriv->rx_stbc);
6677                                         }
6678                                         else
6679                                                 DBG_8723A("get rx_stbc=%d\n",pregpriv->rx_stbc);
6680
6681                                 }
6682                                 break;
6683                                 case 0x13: //set ampdu_enable
6684                                 {
6685                                         struct registry_priv    *pregpriv = &padapter->registrypriv;
6686                                         // 0: disable, 0x1:enable (but wifi_spec should be 0), 0x2: force enable (don't care wifi_spec)
6687                                         if( pregpriv && extra_arg >= 0 && extra_arg < 3 )
6688                                         {
6689                                                 pregpriv->ampdu_enable= extra_arg;
6690                                                 DBG_8723A("set ampdu_enable=%d\n",pregpriv->ampdu_enable);
6691                                         }
6692                                         else
6693                                                 DBG_8723A("get ampdu_enable=%d\n",pregpriv->ampdu_enable);
6694
6695                                 }
6696                                 break;
6697                                 case 0x14: //get wifi_spec
6698                                 {
6699                                         struct registry_priv    *pregpriv = &padapter->registrypriv;
6700                                         DBG_8723A("get wifi_spec=%d\n",pregpriv->wifi_spec);
6701
6702                                 }
6703                                 break;
6704                                 case 0x16:
6705                                 {
6706                                         if(arg == 0xff){
6707                                                 printk("ODM_COMP_DIG\t\tBIT0\n");
6708                                                 printk("ODM_COMP_RA_MASK\t\tBIT1\n");
6709                                                 printk("ODM_COMP_DYNAMIC_TXPWR\tBIT2\n");
6710                                                 printk("ODM_COMP_FA_CNT\t\tBIT3\n");
6711                                                 printk("ODM_COMP_RSSI_MONITOR\tBIT4\n");
6712                                                 printk("ODM_COMP_CCK_PD\t\tBIT5\n");
6713                                                 printk("ODM_COMP_ANT_DIV\t\tBIT6\n");
6714                                                 printk("ODM_COMP_PWR_SAVE\t\tBIT7\n");
6715                                                 printk("ODM_COMP_PWR_TRAIN\tBIT8\n");
6716                                                 printk("ODM_COMP_RATE_ADAPTIVE\tBIT9\n");
6717                                                 printk("ODM_COMP_PATH_DIV\t\tBIT10\n");
6718                                                 printk("ODM_COMP_PSD    \tBIT11\n");
6719                                                 printk("ODM_COMP_DYNAMIC_PRICCA\tBIT12\n");
6720                                                 printk("ODM_COMP_RXHP\t\tBIT13\n");
6721                                                 printk("ODM_COMP_EDCA_TURBO\tBIT16\n");
6722                                                 printk("ODM_COMP_EARLY_MODE\tBIT17\n");
6723                                                 printk("ODM_COMP_TX_PWR_TRACK\tBIT24\n");
6724                                                 printk("ODM_COMP_RX_GAIN_TRACK\tBIT25\n");
6725                                                 printk("ODM_COMP_CALIBRATION\tBIT26\n");
6726                                                 rtw_hal_get_def_var(padapter, HW_DEF_ODM_DBG_FLAG,&extra_arg);
6727                                         }
6728                                         else{
6729                                                 rtw_hal_set_def_var(padapter, HW_DEF_ODM_DBG_FLAG,&extra_arg);
6730                                         }
6731                                 }
6732                                         break;
6733 #ifdef DBG_FIXED_CHAN
6734                                 case 0x17:
6735                                         {
6736                                                 struct mlme_ext_priv    *pmlmeext = &(padapter->mlmeextpriv);
6737                                                 printk("===>  Fixed channel to %d \n",extra_arg);
6738                                                 pmlmeext->fixed_chan = extra_arg;
6739
6740                                         }
6741                                         break;
6742 #endif
6743                                 case 0x20:
6744                                         {
6745                                                 rtw_hal_get_hwreg(padapter, HW_VAR_READ_LLT_TAB,(u8 *)&extra_arg);
6746                                         }
6747                                         break;
6748                                 case 0x23:
6749                                         {
6750                                                 DBG_8723A("turn %s the bNotifyChannelChange Variable\n",(extra_arg==1)?"on":"off");
6751                                                 padapter->bNotifyChannelChange = extra_arg;
6752                                                 break;
6753                                         }
6754                                 case 0x24:
6755                                         {
6756 #ifdef CONFIG_P2P
6757                                                 DBG_8723A("turn %s the bShowGetP2PState Variable\n",(extra_arg==1)?"on":"off");
6758                                                 padapter->bShowGetP2PState = extra_arg;
6759 #endif // CONFIG_P2P
6760                                                 break;
6761                                         }
6762                                 case 0xaa:
6763                                         {
6764                                                 if(extra_arg> 0x13) extra_arg = 0xFF;
6765                                                 DBG_8723A("chang data rate to :0x%02x\n",extra_arg);
6766                                                 padapter->fix_rate = extra_arg;
6767                                         }
6768                                         break;
6769                                 case 0xdd://registers dump , 0 for mac reg,1 for bb reg, 2 for rf reg
6770                                         {
6771                                                 if(extra_arg==0){
6772                                                         mac_reg_dump(padapter);
6773                                                 }
6774                                                 else if(extra_arg==1){
6775                                                         bb_reg_dump(padapter);
6776                                                 }
6777                                                 else if(extra_arg==2){
6778                                                         rf_reg_dump(padapter);
6779                                                 }
6780
6781                                         }
6782                                         break;
6783
6784                                 case 0xee://turn on/off dynamic funcs
6785                                         {
6786                                                 u32 odm_flag;
6787
6788                                                 if(0xf==extra_arg){
6789                                                         rtw_hal_get_def_var(padapter, HAL_DEF_DBG_DM_FUNC,&odm_flag);
6790                                                         DBG_8723A(" === DMFlag(0x%08x) === \n",odm_flag);
6791                                                         DBG_8723A("extra_arg = 0  - disable all dynamic func \n");
6792                                                         DBG_8723A("extra_arg = 1  - disable DIG- BIT(0)\n");
6793                                                         DBG_8723A("extra_arg = 2  - disable High power - BIT(1)\n");
6794                                                         DBG_8723A("extra_arg = 3  - disable tx power tracking - BIT(2)\n");
6795                                                         DBG_8723A("extra_arg = 4  - disable BT coexistence - BIT(3)\n");
6796                                                         DBG_8723A("extra_arg = 5  - disable antenna diversity - BIT(4)\n");
6797                                                         DBG_8723A("extra_arg = 6  - enable all dynamic func \n");
6798                                                 }
6799                                                 else{
6800                                                         /*      extra_arg = 0  - disable all dynamic func
6801                                                                 extra_arg = 1  - disable DIG
6802                                                                 extra_arg = 2  - disable tx power tracking
6803                                                                 extra_arg = 3  - turn on all dynamic func
6804                                                         */
6805                                                         rtw_hal_set_def_var(padapter, HAL_DEF_DBG_DM_FUNC, &(extra_arg));
6806                                                         rtw_hal_get_def_var(padapter, HAL_DEF_DBG_DM_FUNC,&odm_flag);
6807                                                         DBG_8723A(" === DMFlag(0x%08x) === \n",odm_flag);
6808                                                 }
6809                                         }
6810                                         break;
6811
6812                                 case 0xfd:
6813                                         rtw_write8(padapter, 0xc50, arg);
6814                                         DBG_8723A("wr(0xc50)=0x%x\n", rtw_read8(padapter, 0xc50));
6815                                         rtw_write8(padapter, 0xc58, arg);
6816                                         DBG_8723A("wr(0xc58)=0x%x\n", rtw_read8(padapter, 0xc58));
6817                                         break;
6818                                 case 0xfe:
6819                                         DBG_8723A("rd(0xc50)=0x%x\n", rtw_read8(padapter, 0xc50));
6820                                         DBG_8723A("rd(0xc58)=0x%x\n", rtw_read8(padapter, 0xc58));
6821                                         break;
6822                                 case 0xff:
6823                                         {
6824                                                 DBG_8723A("dbg(0x210)=0x%x\n", rtw_read32(padapter, 0x210));
6825                                                 DBG_8723A("dbg(0x608)=0x%x\n", rtw_read32(padapter, 0x608));
6826                                                 DBG_8723A("dbg(0x280)=0x%x\n", rtw_read32(padapter, 0x280));
6827                                                 DBG_8723A("dbg(0x284)=0x%x\n", rtw_read32(padapter, 0x284));
6828                                                 DBG_8723A("dbg(0x288)=0x%x\n", rtw_read32(padapter, 0x288));
6829
6830                                                 DBG_8723A("dbg(0x664)=0x%x\n", rtw_read32(padapter, 0x664));
6831
6832
6833                                                 DBG_8723A("\n");
6834
6835                                                 DBG_8723A("dbg(0x430)=0x%x\n", rtw_read32(padapter, 0x430));
6836                                                 DBG_8723A("dbg(0x438)=0x%x\n", rtw_read32(padapter, 0x438));
6837
6838                                                 DBG_8723A("dbg(0x440)=0x%x\n", rtw_read32(padapter, 0x440));
6839
6840                                                 DBG_8723A("dbg(0x458)=0x%x\n", rtw_read32(padapter, 0x458));
6841
6842                                                 DBG_8723A("dbg(0x484)=0x%x\n", rtw_read32(padapter, 0x484));
6843                                                 DBG_8723A("dbg(0x488)=0x%x\n", rtw_read32(padapter, 0x488));
6844
6845                                                 DBG_8723A("dbg(0x444)=0x%x\n", rtw_read32(padapter, 0x444));
6846                                                 DBG_8723A("dbg(0x448)=0x%x\n", rtw_read32(padapter, 0x448));
6847                                                 DBG_8723A("dbg(0x44c)=0x%x\n", rtw_read32(padapter, 0x44c));
6848                                                 DBG_8723A("dbg(0x450)=0x%x\n", rtw_read32(padapter, 0x450));
6849                                         }
6850                                         break;
6851                         }
6852                         break;
6853                 default:
6854                         DBG_8723A("error dbg cmd!\n");
6855                         break;
6856         }
6857
6858
6859         return ret;
6860
6861 }
6862
6863 static int wpa_set_param(struct net_device *dev, u8 name, u32 value)
6864 {
6865         uint ret=0;
6866         u32 flags;
6867         _adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
6868
6869         switch (name){
6870         case IEEE_PARAM_WPA_ENABLED:
6871
6872                 padapter->securitypriv.dot11AuthAlgrthm= dot11AuthAlgrthm_8021X; //802.1x
6873
6874                 //ret = ieee80211_wpa_enable(ieee, value);
6875
6876                 switch((value)&0xff)
6877                 {
6878                         case 1 : //WPA
6879                         padapter->securitypriv.ndisauthtype = Ndis802_11AuthModeWPAPSK; //WPA_PSK
6880                         padapter->securitypriv.ndisencryptstatus = Ndis802_11Encryption2Enabled;
6881                                 break;
6882                         case 2: //WPA2
6883                         padapter->securitypriv.ndisauthtype = Ndis802_11AuthModeWPA2PSK; //WPA2_PSK
6884                         padapter->securitypriv.ndisencryptstatus = Ndis802_11Encryption3Enabled;
6885                                 break;
6886                 }
6887
6888                 RT_TRACE(_module_rtl871x_ioctl_os_c,_drv_info_,("wpa_set_param:padapter->securitypriv.ndisauthtype=%d\n", padapter->securitypriv.ndisauthtype));
6889
6890                 break;
6891
6892         case IEEE_PARAM_TKIP_COUNTERMEASURES:
6893                 //ieee->tkip_countermeasures=value;
6894                 break;
6895
6896         case IEEE_PARAM_DROP_UNENCRYPTED:
6897         {
6898                 /* HACK:
6899                  *
6900                  * wpa_supplicant calls set_wpa_enabled when the driver
6901                  * is loaded and unloaded, regardless of if WPA is being
6902                  * used.  No other calls are made which can be used to
6903                  * determine if encryption will be used or not prior to
6904                  * association being expected.  If encryption is not being
6905                  * used, drop_unencrypted is set to false, else true -- we
6906                  * can use this to determine if the CAP_PRIVACY_ON bit should
6907                  * be set.
6908                  */
6909
6910 #if 0
6911                 struct ieee80211_security sec = {
6912                         .flags = SEC_ENABLED,
6913                         .enabled = value,
6914                 };
6915                 ieee->drop_unencrypted = value;
6916                 /* We only change SEC_LEVEL for open mode. Others
6917                  * are set by ipw_wpa_set_encryption.
6918                  */
6919                 if (!value) {
6920                         sec.flags |= SEC_LEVEL;
6921                         sec.level = SEC_LEVEL_0;
6922                 }
6923                 else {
6924                         sec.flags |= SEC_LEVEL;
6925                         sec.level = SEC_LEVEL_1;
6926                 }
6927                 if (ieee->set_security)
6928                         ieee->set_security(ieee->dev, &sec);
6929 #endif
6930                 break;
6931
6932         }
6933         case IEEE_PARAM_PRIVACY_INVOKED:
6934
6935                 //ieee->privacy_invoked=value;
6936
6937                 break;
6938
6939         case IEEE_PARAM_AUTH_ALGS:
6940
6941                 ret = wpa_set_auth_algs(dev, value);
6942
6943                 break;
6944
6945         case IEEE_PARAM_IEEE_802_1X:
6946
6947                 //ieee->ieee802_1x=value;
6948
6949                 break;
6950
6951         case IEEE_PARAM_WPAX_SELECT:
6952
6953                 // added for WPA2 mixed mode
6954                 //DBG_8723A(KERN_WARNING "------------------------>wpax value = %x\n", value);
6955                 /*
6956                 spin_lock_irqsave(&ieee->wpax_suitlist_lock,flags);
6957                 ieee->wpax_type_set = 1;
6958                 ieee->wpax_type_notify = value;
6959                 spin_unlock_irqrestore(&ieee->wpax_suitlist_lock,flags);
6960                 */
6961
6962                 break;
6963
6964         default:
6965
6966
6967
6968                 ret = -EOPNOTSUPP;
6969
6970
6971                 break;
6972
6973         }
6974
6975         return ret;
6976
6977 }
6978
6979 static int wpa_mlme(struct net_device *dev, u32 command, u32 reason)
6980 {
6981         int ret = 0;
6982         _adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
6983
6984         switch (command)
6985         {
6986                 case IEEE_MLME_STA_DEAUTH:
6987
6988                         if(!rtw_set_802_11_disassociate(padapter))
6989                                 ret = -1;
6990
6991                         break;
6992
6993                 case IEEE_MLME_STA_DISASSOC:
6994
6995                         if(!rtw_set_802_11_disassociate(padapter))
6996                                 ret = -1;
6997
6998                         break;
6999
7000                 default:
7001                         ret = -EOPNOTSUPP;
7002                         break;
7003         }
7004
7005         return ret;
7006
7007 }
7008
7009 static int wpa_supplicant_ioctl(struct net_device *dev, struct iw_point *p)
7010 {
7011         struct ieee_param *param;
7012         uint ret=0;
7013
7014         //down(&ieee->wx_sem);
7015
7016         if (p->length < sizeof(struct ieee_param) || !p->pointer){
7017                 ret = -EINVAL;
7018                 goto out;
7019         }
7020
7021         param = (struct ieee_param *)kmalloc(p->length, GFP_KERNEL);
7022         if (param == NULL)
7023         {
7024                 ret = -ENOMEM;
7025                 goto exit;
7026         }
7027
7028         if (copy_from_user(param, p->pointer, p->length))
7029         {
7030                 ret = -EFAULT;
7031                 goto out;
7032         }
7033
7034         switch (param->cmd) {
7035
7036         case IEEE_CMD_SET_WPA_PARAM:
7037                 ret = wpa_set_param(dev, param->u.wpa_param.name, param->u.wpa_param.value);
7038                 break;
7039
7040         case IEEE_CMD_SET_WPA_IE:
7041                 //ret = wpa_set_wpa_ie(dev, param, p->length);
7042                 ret =  rtw_set_wpa_ie((_adapter *)rtw_netdev_priv(dev), (char*)param->u.wpa_ie.data, (u16)param->u.wpa_ie.len);
7043                 break;
7044
7045         case IEEE_CMD_SET_ENCRYPTION:
7046                 ret = wpa_set_encryption(dev, param, p->length);
7047                 break;
7048
7049         case IEEE_CMD_MLME:
7050                 ret = wpa_mlme(dev, param->u.mlme.command, param->u.mlme.reason_code);
7051                 break;
7052
7053         default:
7054                 DBG_8723A("Unknown WPA supplicant request: %d\n", param->cmd);
7055                 ret = -EOPNOTSUPP;
7056                 break;
7057
7058         }
7059
7060         if (ret == 0 && copy_to_user(p->pointer, param, p->length))
7061                 ret = -EFAULT;
7062
7063 out:
7064         kfree(param);
7065 exit:
7066         //up(&ieee->wx_sem);
7067
7068         return ret;
7069
7070 }
7071
7072 #ifdef CONFIG_AP_MODE
7073 static u8 set_pairwise_key(_adapter *padapter, struct sta_info *psta)
7074 {
7075         struct cmd_obj*                 ph2c;
7076         struct set_stakey_parm  *psetstakey_para;
7077         struct cmd_priv                         *pcmdpriv=&padapter->cmdpriv;
7078         u8      res=_SUCCESS;
7079
7080         ph2c = (struct cmd_obj*)kzalloc(sizeof(struct cmd_obj), GFP_KERNEL);
7081         if ( ph2c == NULL){
7082                 res= _FAIL;
7083                 goto fail1;
7084         }
7085
7086         psetstakey_para = (struct set_stakey_parm*)kzalloc(sizeof(struct set_stakey_parm), GFP_KERNEL);
7087         if(psetstakey_para==NULL){
7088                 kfree((u8 *) ph2c);
7089                 res=_FAIL;
7090                 goto exit;
7091         }
7092
7093         init_h2fwcmd_w_parm_no_rsp(ph2c, psetstakey_para, _SetStaKey_CMD_);
7094
7095
7096         psetstakey_para->algorithm = (u8)psta->dot118021XPrivacy;
7097
7098         memcpy(psetstakey_para->addr, psta->hwaddr, ETH_ALEN);
7099
7100         memcpy(psetstakey_para->key, &psta->dot118021x_UncstKey, 16);
7101
7102
7103         res = rtw_enqueue_cmd(pcmdpriv, ph2c);
7104
7105         kfree(psetstakey_para);
7106 exit:
7107         kfree(ph2c);
7108 fail1:
7109         return res;
7110
7111 }
7112
7113 static int set_group_key(_adapter *padapter, u8 *key, u8 alg, int keyid)
7114 {
7115         u8 keylen;
7116         struct cmd_obj* pcmd;
7117         struct setkey_parm *psetkeyparm;
7118         struct cmd_priv *pcmdpriv=&(padapter->cmdpriv);
7119         int res=_SUCCESS;
7120
7121         DBG_8723A("%s\n", __func__);
7122
7123         pcmd = (struct cmd_obj*)kzalloc(sizeof(struct cmd_obj), GFP_KERNEL);
7124         if (!pcmd) {
7125                 res= _FAIL;
7126                 goto fail;
7127         }
7128         psetkeyparm=(struct setkey_parm*)kzalloc(sizeof(struct setkey_parm),
7129                                                  GFP_KERNEL);
7130         if (!psetkeyparm) {
7131                 res= _FAIL;
7132                 goto exit;
7133         }
7134
7135         psetkeyparm->keyid=(u8)keyid;
7136         if (is_wep_enc(alg))
7137                 padapter->mlmepriv.key_mask |= BIT(psetkeyparm->keyid);
7138         psetkeyparm->algorithm = alg;
7139
7140         psetkeyparm->set_tx = 1;
7141
7142         switch(alg) {
7143         case _WEP40_:
7144                 keylen = 5;
7145                 break;
7146         case _WEP104_:
7147                 keylen = 13;
7148                 break;
7149         case _TKIP_:
7150         case _TKIP_WTMIC_:
7151         case _AES_:
7152         default:
7153                 keylen = 16;
7154         }
7155         memcpy(&(psetkeyparm->key[0]), key, keylen);
7156         pcmd->cmdcode = _SetKey_CMD_;
7157         pcmd->parmbuf = (u8 *)psetkeyparm;
7158         pcmd->cmdsz =  (sizeof(struct setkey_parm));
7159         pcmd->rsp = NULL;
7160         pcmd->rspsz = 0;
7161
7162         _rtw_init_listhead(&pcmd->list);
7163
7164         res = rtw_enqueue_cmd(pcmdpriv, pcmd);
7165
7166         kfree(psetkeyparm);
7167 exit:
7168         kfree(pcmd);
7169 fail:
7170         return res;
7171 }
7172
7173 static int set_wep_key(_adapter *padapter, u8 *key, u8 keylen, int keyid)
7174 {
7175         u8 alg;
7176
7177         switch(keylen) {
7178         case 5:
7179                 alg =_WEP40_;
7180                 break;
7181         case 13:
7182                 alg =_WEP104_;
7183                 break;
7184         default:
7185                 alg =_NO_PRIVACY_;
7186         }
7187
7188         return set_group_key(padapter, key, alg, keyid);
7189 }
7190
7191
7192 static int rtw_set_encryption(struct net_device *dev, struct ieee_param *param, u32 param_len)
7193 {
7194         int ret = 0;
7195         u32 wep_key_idx, wep_key_len,wep_total_len;
7196         NDIS_802_11_WEP  *pwep = NULL;
7197         struct sta_info *psta = NULL, *pbcmc_sta = NULL;
7198         _adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
7199         struct mlme_priv        *pmlmepriv = &padapter->mlmepriv;
7200         struct security_priv* psecuritypriv=&(padapter->securitypriv);
7201         struct sta_priv *pstapriv = &padapter->stapriv;
7202
7203         DBG_8723A("%s\n", __func__);
7204
7205         param->u.crypt.err = 0;
7206         param->u.crypt.alg[IEEE_CRYPT_ALG_NAME_LEN - 1] = '\0';
7207
7208         //sizeof(struct ieee_param) = 64 bytes;
7209         //if (param_len !=  (u32) ((u8 *) param->u.crypt.key - (u8 *) param) + param->u.crypt.key_len)
7210         if (param_len !=  sizeof(struct ieee_param) + param->u.crypt.key_len)
7211         {
7212                 ret =  -EINVAL;
7213                 goto exit;
7214         }
7215
7216         if (param->sta_addr[0] == 0xff && param->sta_addr[1] == 0xff &&
7217             param->sta_addr[2] == 0xff && param->sta_addr[3] == 0xff &&
7218             param->sta_addr[4] == 0xff && param->sta_addr[5] == 0xff)
7219         {
7220                 if (param->u.crypt.idx >= WEP_KEYS)
7221                 {
7222                         ret = -EINVAL;
7223                         goto exit;
7224                 }
7225         }
7226         else
7227         {
7228                 psta = rtw_get_stainfo(pstapriv, param->sta_addr);
7229                 if(!psta)
7230                 {
7231                         //ret = -EINVAL;
7232                         DBG_8723A("rtw_set_encryption(), sta has already been removed or never been added\n");
7233                         goto exit;
7234                 }
7235         }
7236
7237         if (strcmp(param->u.crypt.alg, "none") == 0 && (psta==NULL))
7238         {
7239                 //todo:clear default encryption keys
7240
7241                 DBG_8723A("clear default encryption keys, keyid=%d\n", param->u.crypt.idx);
7242
7243                 goto exit;
7244         }
7245
7246
7247         if (strcmp(param->u.crypt.alg, "WEP") == 0 && (psta==NULL))
7248         {
7249                 DBG_8723A("r871x_set_encryption, crypt.alg = WEP\n");
7250
7251                 wep_key_idx = param->u.crypt.idx;
7252                 wep_key_len = param->u.crypt.key_len;
7253
7254                 DBG_8723A("r871x_set_encryption, wep_key_idx=%d, len=%d\n", wep_key_idx, wep_key_len);
7255
7256                 if((wep_key_idx >= WEP_KEYS) || (wep_key_len<=0))
7257                 {
7258                         ret = -EINVAL;
7259                         goto exit;
7260                 }
7261
7262
7263                 if (wep_key_len > 0)
7264                 {
7265                         wep_key_len = wep_key_len <= 5 ? 5 : 13;
7266                         wep_total_len = wep_key_len + FIELD_OFFSET(NDIS_802_11_WEP, KeyMaterial);
7267                         pwep = (NDIS_802_11_WEP *)kzalloc(wep_total_len,
7268                                                           GFP_KERNEL);
7269                         if(pwep == NULL){
7270                                 DBG_8723A(" r871x_set_encryption: pwep allocate fail !!!\n");
7271                                 goto exit;
7272                         }
7273
7274                         pwep->KeyLength = wep_key_len;
7275                         pwep->Length = wep_total_len;
7276
7277                 }
7278
7279                 pwep->KeyIndex = wep_key_idx;
7280
7281                 memcpy(pwep->KeyMaterial,  param->u.crypt.key, pwep->KeyLength);
7282
7283                 if(param->u.crypt.set_tx)
7284                 {
7285                         DBG_8723A("wep, set_tx=1\n");
7286
7287                         psecuritypriv->ndisencryptstatus = Ndis802_11Encryption1Enabled;
7288                         psecuritypriv->dot11PrivacyAlgrthm=_WEP40_;
7289                         psecuritypriv->dot118021XGrpPrivacy=_WEP40_;
7290
7291                         if(pwep->KeyLength==13)
7292                         {
7293                                 psecuritypriv->dot11PrivacyAlgrthm=_WEP104_;
7294                                 psecuritypriv->dot118021XGrpPrivacy=_WEP104_;
7295                         }
7296
7297
7298                         psecuritypriv->dot11PrivacyKeyIndex = wep_key_idx;
7299
7300                         memcpy(&(psecuritypriv->dot11DefKey[wep_key_idx].skey[0]), pwep->KeyMaterial, pwep->KeyLength);
7301
7302                         psecuritypriv->dot11DefKeylen[wep_key_idx]=pwep->KeyLength;
7303
7304                         set_wep_key(padapter, pwep->KeyMaterial, pwep->KeyLength, wep_key_idx);
7305
7306
7307                 }
7308                 else
7309                 {
7310                         DBG_8723A("wep, set_tx=0\n");
7311
7312                         //don't update "psecuritypriv->dot11PrivacyAlgrthm" and
7313                         //"psecuritypriv->dot11PrivacyKeyIndex=keyid", but can rtw_set_key to cam
7314
7315                         memcpy(&(psecuritypriv->dot11DefKey[wep_key_idx].skey[0]), pwep->KeyMaterial, pwep->KeyLength);
7316
7317                         psecuritypriv->dot11DefKeylen[wep_key_idx] = pwep->KeyLength;
7318
7319                         set_wep_key(padapter, pwep->KeyMaterial, pwep->KeyLength, wep_key_idx);
7320
7321                 }
7322
7323                 goto exit;
7324
7325         }
7326
7327
7328         if(!psta && check_fwstate(pmlmepriv, WIFI_AP_STATE)) // //group key
7329         {
7330                 if(param->u.crypt.set_tx ==1)
7331                 {
7332                         if(strcmp(param->u.crypt.alg, "WEP") == 0)
7333                         {
7334                                 DBG_8723A("%s, set group_key, WEP\n", __func__);
7335
7336                                 memcpy(psecuritypriv->dot118021XGrpKey[param->u.crypt.idx].skey,  param->u.crypt.key, (param->u.crypt.key_len>16 ?16:param->u.crypt.key_len));
7337
7338                                 psecuritypriv->dot118021XGrpPrivacy = _WEP40_;
7339                                 if(param->u.crypt.key_len==13)
7340                                 {
7341                                                 psecuritypriv->dot118021XGrpPrivacy = _WEP104_;
7342                                 }
7343
7344                         }
7345                         else if(strcmp(param->u.crypt.alg, "TKIP") == 0)
7346                         {
7347                                 DBG_8723A("%s, set group_key, TKIP\n", __func__);
7348
7349                                 psecuritypriv->dot118021XGrpPrivacy = _TKIP_;
7350
7351                                 memcpy(psecuritypriv->dot118021XGrpKey[param->u.crypt.idx].skey,  param->u.crypt.key, (param->u.crypt.key_len>16 ?16:param->u.crypt.key_len));
7352
7353                                 //DEBUG_ERR("set key length :param->u.crypt.key_len=%d\n", param->u.crypt.key_len);
7354                                 //set mic key
7355                                 memcpy(psecuritypriv->dot118021XGrptxmickey[param->u.crypt.idx].skey, &(param->u.crypt.key[16]), 8);
7356                                 memcpy(psecuritypriv->dot118021XGrprxmickey[param->u.crypt.idx].skey, &(param->u.crypt.key[24]), 8);
7357
7358                                 psecuritypriv->busetkipkey = _TRUE;
7359
7360                         }
7361                         else if(strcmp(param->u.crypt.alg, "CCMP") == 0)
7362                         {
7363                                 DBG_8723A("%s, set group_key, CCMP\n", __func__);
7364
7365                                 psecuritypriv->dot118021XGrpPrivacy = _AES_;
7366
7367                                 memcpy(psecuritypriv->dot118021XGrpKey[param->u.crypt.idx].skey,  param->u.crypt.key, (param->u.crypt.key_len>16 ?16:param->u.crypt.key_len));
7368                         }
7369                         else
7370                         {
7371                                 DBG_8723A("%s, set group_key, none\n", __func__);
7372
7373                                 psecuritypriv->dot118021XGrpPrivacy = _NO_PRIVACY_;
7374                         }
7375
7376                         psecuritypriv->dot118021XGrpKeyid = param->u.crypt.idx;
7377
7378                         psecuritypriv->binstallGrpkey = _TRUE;
7379
7380                         psecuritypriv->dot11PrivacyAlgrthm = psecuritypriv->dot118021XGrpPrivacy;//!!!
7381
7382                         set_group_key(padapter, param->u.crypt.key, psecuritypriv->dot118021XGrpPrivacy, param->u.crypt.idx);
7383
7384                         pbcmc_sta=rtw_get_bcmc_stainfo(padapter);
7385                         if(pbcmc_sta)
7386                         {
7387                                 pbcmc_sta->ieee8021x_blocked = _FALSE;
7388                                 pbcmc_sta->dot118021XPrivacy= psecuritypriv->dot118021XGrpPrivacy;//rx will use bmc_sta's dot118021XPrivacy
7389                         }
7390
7391                 }
7392
7393                 goto exit;
7394
7395         }
7396
7397         if(psecuritypriv->dot11AuthAlgrthm == dot11AuthAlgrthm_8021X && psta) // psk/802_1x
7398         {
7399                 if(check_fwstate(pmlmepriv, WIFI_AP_STATE))
7400                 {
7401                         if(param->u.crypt.set_tx ==1)
7402                         {
7403                                 memcpy(psta->dot118021x_UncstKey.skey,  param->u.crypt.key, (param->u.crypt.key_len>16 ?16:param->u.crypt.key_len));
7404
7405                                 if(strcmp(param->u.crypt.alg, "WEP") == 0)
7406                                 {
7407                                         DBG_8723A("%s, set pairwise key, WEP\n", __func__);
7408
7409                                         psta->dot118021XPrivacy = _WEP40_;
7410                                         if(param->u.crypt.key_len==13)
7411                                         {
7412                                                 psta->dot118021XPrivacy = _WEP104_;
7413                                         }
7414                                 }
7415                                 else if(strcmp(param->u.crypt.alg, "TKIP") == 0)
7416                                 {
7417                                         DBG_8723A("%s, set pairwise key, TKIP\n", __func__);
7418
7419                                         psta->dot118021XPrivacy = _TKIP_;
7420
7421                                         //DEBUG_ERR("set key length :param->u.crypt.key_len=%d\n", param->u.crypt.key_len);
7422                                         //set mic key
7423                                         memcpy(psta->dot11tkiptxmickey.skey, &(param->u.crypt.key[16]), 8);
7424                                         memcpy(psta->dot11tkiprxmickey.skey, &(param->u.crypt.key[24]), 8);
7425
7426                                         psecuritypriv->busetkipkey = _TRUE;
7427
7428                                 }
7429                                 else if(strcmp(param->u.crypt.alg, "CCMP") == 0)
7430                                 {
7431
7432                                         DBG_8723A("%s, set pairwise key, CCMP\n", __func__);
7433
7434                                         psta->dot118021XPrivacy = _AES_;
7435                                 }
7436                                 else
7437                                 {
7438                                         DBG_8723A("%s, set pairwise key, none\n", __func__);
7439
7440                                         psta->dot118021XPrivacy = _NO_PRIVACY_;
7441                                 }
7442
7443                                 set_pairwise_key(padapter, psta);
7444
7445                                 psta->ieee8021x_blocked = _FALSE;
7446
7447                         }
7448                         else//group key???
7449                         {
7450                                 if(strcmp(param->u.crypt.alg, "WEP") == 0)
7451                                 {
7452                                         memcpy(psecuritypriv->dot118021XGrpKey[param->u.crypt.idx].skey,  param->u.crypt.key, (param->u.crypt.key_len>16 ?16:param->u.crypt.key_len));
7453
7454                                         psecuritypriv->dot118021XGrpPrivacy = _WEP40_;
7455                                         if(param->u.crypt.key_len==13)
7456                                         {
7457                                                 psecuritypriv->dot118021XGrpPrivacy = _WEP104_;
7458                                         }
7459                                 }
7460                                 else if(strcmp(param->u.crypt.alg, "TKIP") == 0)
7461                                 {
7462                                         psecuritypriv->dot118021XGrpPrivacy = _TKIP_;
7463
7464                                         memcpy(psecuritypriv->dot118021XGrpKey[param->u.crypt.idx].skey,  param->u.crypt.key, (param->u.crypt.key_len>16 ?16:param->u.crypt.key_len));
7465
7466                                         //DEBUG_ERR("set key length :param->u.crypt.key_len=%d\n", param->u.crypt.key_len);
7467                                         //set mic key
7468                                         memcpy(psecuritypriv->dot118021XGrptxmickey[param->u.crypt.idx].skey, &(param->u.crypt.key[16]), 8);
7469                                         memcpy(psecuritypriv->dot118021XGrprxmickey[param->u.crypt.idx].skey, &(param->u.crypt.key[24]), 8);
7470
7471                                         psecuritypriv->busetkipkey = _TRUE;
7472
7473                                 }
7474                                 else if(strcmp(param->u.crypt.alg, "CCMP") == 0)
7475                                 {
7476                                         psecuritypriv->dot118021XGrpPrivacy = _AES_;
7477
7478                                         memcpy(psecuritypriv->dot118021XGrpKey[param->u.crypt.idx].skey,  param->u.crypt.key, (param->u.crypt.key_len>16 ?16:param->u.crypt.key_len));
7479                                 }
7480                                 else
7481                                 {
7482                                         psecuritypriv->dot118021XGrpPrivacy = _NO_PRIVACY_;
7483                                 }
7484
7485                                 psecuritypriv->dot118021XGrpKeyid = param->u.crypt.idx;
7486
7487                                 psecuritypriv->binstallGrpkey = _TRUE;
7488
7489                                 psecuritypriv->dot11PrivacyAlgrthm = psecuritypriv->dot118021XGrpPrivacy;//!!!
7490
7491                                 set_group_key(padapter, param->u.crypt.key, psecuritypriv->dot118021XGrpPrivacy, param->u.crypt.idx);
7492
7493                                 pbcmc_sta=rtw_get_bcmc_stainfo(padapter);
7494                                 if(pbcmc_sta)
7495                                 {
7496                                         pbcmc_sta->ieee8021x_blocked = _FALSE;
7497                                         pbcmc_sta->dot118021XPrivacy= psecuritypriv->dot118021XGrpPrivacy;//rx will use bmc_sta's dot118021XPrivacy
7498                                 }
7499
7500                         }
7501
7502                 }
7503
7504         }
7505
7506 exit:
7507
7508         if(pwep) {
7509                 kfree(pwep);
7510         }
7511
7512         return ret;
7513
7514 }
7515
7516 static int rtw_set_beacon(struct net_device *dev, struct ieee_param *param, int len)
7517 {
7518         int ret=0;
7519         _adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
7520         struct mlme_priv *pmlmepriv = &(padapter->mlmepriv);
7521         struct sta_priv *pstapriv = &padapter->stapriv;
7522         unsigned char *pbuf = param->u.bcn_ie.buf;
7523
7524
7525         DBG_8723A("%s, len=%d\n", __func__, len);
7526
7527         if(check_fwstate(pmlmepriv, WIFI_AP_STATE) != _TRUE)
7528                 return -EINVAL;
7529
7530         memcpy(&pstapriv->max_num_sta, param->u.bcn_ie.reserved, 2);
7531
7532         if((pstapriv->max_num_sta>NUM_STA) || (pstapriv->max_num_sta<=0))
7533                 pstapriv->max_num_sta = NUM_STA;
7534
7535
7536         if(rtw_check_beacon_data(padapter, pbuf,  (len-12-2)) == _SUCCESS)// 12 = param header, 2:no packed
7537                 ret = 0;
7538         else
7539                 ret = -EINVAL;
7540
7541
7542         return ret;
7543
7544 }
7545
7546 static int rtw_hostapd_sta_flush(struct net_device *dev)
7547 {
7548         //_irqL irqL;
7549         //_list *phead, *plist;
7550         int ret=0;
7551         //struct sta_info *psta = NULL;
7552         _adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
7553         //struct sta_priv *pstapriv = &padapter->stapriv;
7554
7555         DBG_8723A("%s\n", __func__);
7556
7557         flush_all_cam_entry(padapter);  //clear CAM
7558
7559         ret = rtw_sta_flush(padapter);
7560
7561         return ret;
7562
7563 }
7564
7565 static int rtw_add_sta(struct net_device *dev, struct ieee_param *param)
7566 {
7567         _irqL irqL;
7568         int ret=0;
7569         struct sta_info *psta = NULL;
7570         _adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
7571         struct mlme_priv *pmlmepriv = &(padapter->mlmepriv);
7572         struct sta_priv *pstapriv = &padapter->stapriv;
7573
7574         DBG_8723A("rtw_add_sta(aid=%d)=" MAC_FMT "\n", param->u.add_sta.aid, MAC_ARG(param->sta_addr));
7575
7576         if(check_fwstate(pmlmepriv, (_FW_LINKED|WIFI_AP_STATE)) != _TRUE)
7577         {
7578                 return -EINVAL;
7579         }
7580
7581         if (param->sta_addr[0] == 0xff && param->sta_addr[1] == 0xff &&
7582             param->sta_addr[2] == 0xff && param->sta_addr[3] == 0xff &&
7583             param->sta_addr[4] == 0xff && param->sta_addr[5] == 0xff)
7584         {
7585                 return -EINVAL;
7586         }
7587
7588 /*
7589         psta = rtw_get_stainfo(pstapriv, param->sta_addr);
7590         if(psta)
7591         {
7592                 DBG_8723A("rtw_add_sta(), free has been added psta=%p\n", psta);
7593                 spin_lock_bh(&(pstapriv->sta_hash_lock));
7594                 rtw_free_stainfo(padapter,  psta);
7595                 spin_unlock_bh(&(pstapriv->sta_hash_lock));
7596
7597                 psta = NULL;
7598         }
7599 */
7600         //psta = rtw_alloc_stainfo(pstapriv, param->sta_addr);
7601         psta = rtw_get_stainfo(pstapriv, param->sta_addr);
7602         if(psta)
7603         {
7604                 int flags = param->u.add_sta.flags;
7605
7606                 //DBG_8723A("rtw_add_sta(), init sta's variables, psta=%p\n", psta);
7607
7608                 psta->aid = param->u.add_sta.aid;//aid=1~2007
7609
7610                 memcpy(psta->bssrateset, param->u.add_sta.tx_supp_rates, 16);
7611
7612
7613                 //check wmm cap.
7614                 if(WLAN_STA_WME&flags)
7615                         psta->qos_option = 1;
7616                 else
7617                         psta->qos_option = 0;
7618
7619                 if(pmlmepriv->qospriv.qos_option == 0)
7620                         psta->qos_option = 0;
7621
7622
7623 #ifdef CONFIG_80211N_HT
7624                 //chec 802.11n ht cap.
7625                 if(WLAN_STA_HT&flags)
7626                 {
7627                         psta->htpriv.ht_option = _TRUE;
7628                         psta->qos_option = 1;
7629                         memcpy((void*)&psta->htpriv.ht_cap, (void*)&param->u.add_sta.ht_cap, sizeof(struct rtw_ieee80211_ht_cap));
7630                 }
7631                 else
7632                 {
7633                         psta->htpriv.ht_option = _FALSE;
7634                 }
7635
7636                 if(pmlmepriv->htpriv.ht_option == _FALSE)
7637                         psta->htpriv.ht_option = _FALSE;
7638 #endif
7639
7640
7641                 update_sta_info_apmode(padapter, psta);
7642
7643
7644         }
7645         else
7646         {
7647                 ret = -ENOMEM;
7648         }
7649
7650         return ret;
7651
7652 }
7653
7654 static int rtw_del_sta(struct net_device *dev, struct ieee_param *param)
7655 {
7656         _irqL irqL;
7657         int ret=0;
7658         struct sta_info *psta = NULL;
7659         _adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
7660         struct mlme_priv *pmlmepriv = &(padapter->mlmepriv);
7661         struct sta_priv *pstapriv = &padapter->stapriv;
7662
7663         DBG_8723A("rtw_del_sta=" MAC_FMT "\n", MAC_ARG(param->sta_addr));
7664
7665         if(check_fwstate(pmlmepriv, (_FW_LINKED|WIFI_AP_STATE)) != _TRUE)
7666         {
7667                 return -EINVAL;
7668         }
7669
7670         if (param->sta_addr[0] == 0xff && param->sta_addr[1] == 0xff &&
7671             param->sta_addr[2] == 0xff && param->sta_addr[3] == 0xff &&
7672             param->sta_addr[4] == 0xff && param->sta_addr[5] == 0xff)
7673         {
7674                 return -EINVAL;
7675         }
7676
7677         psta = rtw_get_stainfo(pstapriv, param->sta_addr);
7678         if(psta)
7679         {
7680                 u8 updated;
7681
7682                 //DBG_8723A("free psta=%p, aid=%d\n", psta, psta->aid);
7683
7684                 spin_lock_bh(&pstapriv->asoc_list_lock);
7685                 if(rtw_is_list_empty(&psta->asoc_list)==_FALSE)
7686                 {
7687                         rtw_list_delete(&psta->asoc_list);
7688                         pstapriv->asoc_list_cnt--;
7689                         updated = ap_free_sta(padapter, psta, _TRUE, WLAN_REASON_DEAUTH_LEAVING);
7690
7691                 }
7692                 spin_unlock_bh(&pstapriv->asoc_list_lock);
7693
7694                 associated_clients_update(padapter, updated);
7695
7696                 psta = NULL;
7697
7698         }
7699         else
7700         {
7701                 DBG_8723A("rtw_del_sta(), sta has already been removed or never been added\n");
7702
7703                 //ret = -1;
7704         }
7705
7706
7707         return ret;
7708
7709 }
7710
7711 static int rtw_ioctl_get_sta_data(struct net_device *dev, struct ieee_param *param, int len)
7712 {
7713         int ret=0;
7714         struct sta_info *psta = NULL;
7715         _adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
7716         struct mlme_priv *pmlmepriv = &(padapter->mlmepriv);
7717         struct sta_priv *pstapriv = &padapter->stapriv;
7718         struct ieee_param_ex *param_ex = (struct ieee_param_ex *)param;
7719         struct sta_data *psta_data = (struct sta_data *)param_ex->data;
7720
7721         DBG_8723A("rtw_ioctl_get_sta_info, sta_addr: " MAC_FMT "\n", MAC_ARG(param_ex->sta_addr));
7722
7723         if(check_fwstate(pmlmepriv, (_FW_LINKED|WIFI_AP_STATE)) != _TRUE)
7724         {
7725                 return -EINVAL;
7726         }
7727
7728         if (param_ex->sta_addr[0] == 0xff && param_ex->sta_addr[1] == 0xff &&
7729             param_ex->sta_addr[2] == 0xff && param_ex->sta_addr[3] == 0xff &&
7730             param_ex->sta_addr[4] == 0xff && param_ex->sta_addr[5] == 0xff)
7731         {
7732                 return -EINVAL;
7733         }
7734
7735         psta = rtw_get_stainfo(pstapriv, param_ex->sta_addr);
7736         if(psta)
7737         {
7738 #if 0
7739                 struct {
7740                         u16 aid;
7741                         u16 capability;
7742                         int flags;
7743                         u32 sta_set;
7744                         u8 tx_supp_rates[16];
7745                         u32 tx_supp_rates_len;
7746                         struct rtw_ieee80211_ht_cap ht_cap;
7747                         u64     rx_pkts;
7748                         u64     rx_bytes;
7749                         u64     rx_drops;
7750                         u64     tx_pkts;
7751                         u64     tx_bytes;
7752                         u64     tx_drops;
7753                 } get_sta;
7754 #endif
7755                 psta_data->aid = (u16)psta->aid;
7756                 psta_data->capability = psta->capability;
7757                 psta_data->flags = psta->flags;
7758
7759 /*
7760                 nonerp_set : BIT(0)
7761                 no_short_slot_time_set : BIT(1)
7762                 no_short_preamble_set : BIT(2)
7763                 no_ht_gf_set : BIT(3)
7764                 no_ht_set : BIT(4)
7765                 ht_20mhz_set : BIT(5)
7766 */
7767
7768                 psta_data->sta_set =((psta->nonerp_set) |
7769                                                         (psta->no_short_slot_time_set <<1) |
7770                                                         (psta->no_short_preamble_set <<2) |
7771                                                         (psta->no_ht_gf_set <<3) |
7772                                                         (psta->no_ht_set <<4) |
7773                                                         (psta->ht_20mhz_set <<5));
7774
7775                 psta_data->tx_supp_rates_len =  psta->bssratelen;
7776                 memcpy(psta_data->tx_supp_rates, psta->bssrateset, psta->bssratelen);
7777 #ifdef CONFIG_80211N_HT
7778                 memcpy(&psta_data->ht_cap, &psta->htpriv.ht_cap, sizeof(struct rtw_ieee80211_ht_cap));
7779 #endif //CONFIG_80211N_HT
7780                 psta_data->rx_pkts = psta->sta_stats.rx_data_pkts;
7781                 psta_data->rx_bytes = psta->sta_stats.rx_bytes;
7782                 psta_data->rx_drops = psta->sta_stats.rx_drops;
7783
7784                 psta_data->tx_pkts = psta->sta_stats.tx_pkts;
7785                 psta_data->tx_bytes = psta->sta_stats.tx_bytes;
7786                 psta_data->tx_drops = psta->sta_stats.tx_drops;
7787
7788
7789         }
7790         else
7791         {
7792                 ret = -1;
7793         }
7794
7795         return ret;
7796
7797 }
7798
7799 static int rtw_get_sta_wpaie(struct net_device *dev, struct ieee_param *param)
7800 {
7801         int ret=0;
7802         struct sta_info *psta = NULL;
7803         _adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
7804         struct mlme_priv *pmlmepriv = &(padapter->mlmepriv);
7805         struct sta_priv *pstapriv = &padapter->stapriv;
7806
7807         DBG_8723A("rtw_get_sta_wpaie, sta_addr: " MAC_FMT "\n", MAC_ARG(param->sta_addr));
7808
7809         if(check_fwstate(pmlmepriv, (_FW_LINKED|WIFI_AP_STATE)) != _TRUE)
7810         {
7811                 return -EINVAL;
7812         }
7813
7814         if (param->sta_addr[0] == 0xff && param->sta_addr[1] == 0xff &&
7815             param->sta_addr[2] == 0xff && param->sta_addr[3] == 0xff &&
7816             param->sta_addr[4] == 0xff && param->sta_addr[5] == 0xff)
7817         {
7818                 return -EINVAL;
7819         }
7820
7821         psta = rtw_get_stainfo(pstapriv, param->sta_addr);
7822         if(psta)
7823         {
7824                 if((psta->wpa_ie[0] == WLAN_EID_RSN) || (psta->wpa_ie[0] == WLAN_EID_GENERIC))
7825                 {
7826                         int wpa_ie_len;
7827                         int copy_len;
7828
7829                         wpa_ie_len = psta->wpa_ie[1];
7830
7831                         copy_len = ((wpa_ie_len+2) > sizeof(psta->wpa_ie)) ? (sizeof(psta->wpa_ie)):(wpa_ie_len+2);
7832
7833                         param->u.wpa_ie.len = copy_len;
7834
7835                         memcpy(param->u.wpa_ie.reserved, psta->wpa_ie, copy_len);
7836                 }
7837                 else
7838                 {
7839                         //ret = -1;
7840                         DBG_8723A("sta's wpa_ie is NONE\n");
7841                 }
7842         }
7843         else
7844         {
7845                 ret = -1;
7846         }
7847
7848         return ret;
7849
7850 }
7851
7852 static int rtw_set_wps_beacon(struct net_device *dev, struct ieee_param *param, int len)
7853 {
7854         int ret=0;
7855         unsigned char wps_oui[4]={0x0,0x50,0xf2,0x04};
7856         _adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
7857         struct mlme_priv *pmlmepriv = &(padapter->mlmepriv);
7858         struct mlme_ext_priv    *pmlmeext = &(padapter->mlmeextpriv);
7859         struct mlme_ext_info    *pmlmeinfo = &(pmlmeext->mlmext_info);
7860         int ie_len;
7861
7862         DBG_8723A("%s, len=%d\n", __func__, len);
7863
7864         if(check_fwstate(pmlmepriv, WIFI_AP_STATE) != _TRUE)
7865                 return -EINVAL;
7866
7867         ie_len = len-12-2;// 12 = param header, 2:no packed
7868
7869
7870         if(pmlmepriv->wps_beacon_ie)
7871         {
7872                 kfree(pmlmepriv->wps_beacon_ie);
7873                 pmlmepriv->wps_beacon_ie = NULL;
7874         }
7875
7876         if(ie_len>0)
7877         {
7878                 pmlmepriv->wps_beacon_ie = kmalloc(ie_len, GFP_KERNEL);
7879                 pmlmepriv->wps_beacon_ie_len = ie_len;
7880                 if ( pmlmepriv->wps_beacon_ie == NULL) {
7881                         DBG_8723A("%s()-%d: rtw_malloc() ERROR!\n", __func__, __LINE__);
7882                         return -EINVAL;
7883                 }
7884
7885                 memcpy(pmlmepriv->wps_beacon_ie, param->u.bcn_ie.buf, ie_len);
7886
7887                 update_beacon(padapter, _VENDOR_SPECIFIC_IE_, wps_oui, _TRUE);
7888
7889                 pmlmeext->bstart_bss = _TRUE;
7890         }
7891
7892         return ret;
7893 }
7894
7895 static int rtw_set_wps_probe_resp(struct net_device *dev, struct ieee_param *param, int len)
7896 {
7897         int ret=0;
7898         _adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
7899         struct mlme_priv *pmlmepriv = &(padapter->mlmepriv);
7900         int ie_len;
7901
7902         DBG_8723A("%s, len=%d\n", __func__, len);
7903
7904         if(check_fwstate(pmlmepriv, WIFI_AP_STATE) != _TRUE)
7905                 return -EINVAL;
7906
7907         ie_len = len-12-2;// 12 = param header, 2:no packed
7908
7909
7910         if(pmlmepriv->wps_probe_resp_ie)
7911         {
7912                 kfree(pmlmepriv->wps_probe_resp_ie);
7913                 pmlmepriv->wps_probe_resp_ie = NULL;
7914         }
7915
7916         if(ie_len>0)
7917         {
7918                 pmlmepriv->wps_probe_resp_ie = rtw_malloc(ie_len);
7919                 pmlmepriv->wps_probe_resp_ie_len = ie_len;
7920                 if ( pmlmepriv->wps_probe_resp_ie == NULL) {
7921                         DBG_8723A("%s()-%d: rtw_malloc() ERROR!\n", __func__, __LINE__);
7922                         return -EINVAL;
7923                 }
7924                 memcpy(pmlmepriv->wps_probe_resp_ie, param->u.bcn_ie.buf, ie_len);
7925         }
7926
7927
7928         return ret;
7929
7930 }
7931
7932 static int rtw_set_wps_assoc_resp(struct net_device *dev, struct ieee_param *param, int len)
7933 {
7934         int ret=0;
7935         _adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
7936         struct mlme_priv *pmlmepriv = &(padapter->mlmepriv);
7937         int ie_len;
7938
7939         DBG_8723A("%s, len=%d\n", __func__, len);
7940
7941         if(check_fwstate(pmlmepriv, WIFI_AP_STATE) != _TRUE)
7942                 return -EINVAL;
7943
7944         ie_len = len-12-2;// 12 = param header, 2:no packed
7945
7946
7947         if(pmlmepriv->wps_assoc_resp_ie)
7948         {
7949                 kfree(pmlmepriv->wps_assoc_resp_ie);
7950                 pmlmepriv->wps_assoc_resp_ie = NULL;
7951         }
7952
7953         if(ie_len>0)
7954         {
7955                 pmlmepriv->wps_assoc_resp_ie = rtw_malloc(ie_len);
7956                 pmlmepriv->wps_assoc_resp_ie_len = ie_len;
7957                 if ( pmlmepriv->wps_assoc_resp_ie == NULL) {
7958                         DBG_8723A("%s()-%d: rtw_malloc() ERROR!\n", __func__, __LINE__);
7959                         return -EINVAL;
7960                 }
7961
7962                 memcpy(pmlmepriv->wps_assoc_resp_ie, param->u.bcn_ie.buf, ie_len);
7963         }
7964
7965
7966         return ret;
7967
7968 }
7969
7970 static int rtw_set_hidden_ssid(struct net_device *dev, struct ieee_param *param, int len)
7971 {
7972         int ret=0;
7973         _adapter *adapter = (_adapter *)rtw_netdev_priv(dev);
7974         struct mlme_priv *mlmepriv = &(adapter->mlmepriv);
7975         struct mlme_ext_priv    *mlmeext = &(adapter->mlmeextpriv);
7976         struct mlme_ext_info    *mlmeinfo = &(mlmeext->mlmext_info);
7977         int ie_len;
7978         u8 *ssid_ie;
7979         char ssid[NDIS_802_11_LENGTH_SSID + 1];
7980         int ssid_len;
7981         u8 ignore_broadcast_ssid;
7982
7983         if(check_fwstate(mlmepriv, WIFI_AP_STATE) != _TRUE)
7984                 return -EPERM;
7985
7986         if (param->u.bcn_ie.reserved[0] != 0xea)
7987                 return -EINVAL;
7988
7989         mlmeinfo->hidden_ssid_mode = ignore_broadcast_ssid = param->u.bcn_ie.reserved[1];
7990
7991         ie_len = len-12-2;// 12 = param header, 2:no packed
7992         ssid_ie = rtw_get_ie(param->u.bcn_ie.buf,  WLAN_EID_SSID, &ssid_len, ie_len);
7993
7994         if (ssid_ie && ssid_len) {
7995                 WLAN_BSSID_EX *pbss_network = &mlmepriv->cur_network.network;
7996                 WLAN_BSSID_EX *pbss_network_ext = &mlmeinfo->network;
7997
7998                 memcpy(ssid, ssid_ie+2, ssid_len);
7999                 ssid[ssid_len>NDIS_802_11_LENGTH_SSID?NDIS_802_11_LENGTH_SSID:ssid_len] = 0x0;
8000
8001                 if(0)
8002                 DBG_8723A(FUNC_ADPT_FMT" ssid:(%s,%d), from ie:(%s,%d), (%s,%d)\n", FUNC_ADPT_ARG(adapter),
8003                         ssid, ssid_len,
8004                         pbss_network->Ssid.Ssid, pbss_network->Ssid.SsidLength,
8005                         pbss_network_ext->Ssid.Ssid, pbss_network_ext->Ssid.SsidLength);
8006
8007                 memcpy(pbss_network->Ssid.Ssid, (void *)ssid, ssid_len);
8008                 pbss_network->Ssid.SsidLength = ssid_len;
8009                 memcpy(pbss_network_ext->Ssid.Ssid, (void *)ssid, ssid_len);
8010                 pbss_network_ext->Ssid.SsidLength = ssid_len;
8011
8012                 if(0)
8013                 DBG_8723A(FUNC_ADPT_FMT" after ssid:(%s,%d), (%s,%d)\n", FUNC_ADPT_ARG(adapter),
8014                         pbss_network->Ssid.Ssid, pbss_network->Ssid.SsidLength,
8015                         pbss_network_ext->Ssid.Ssid, pbss_network_ext->Ssid.SsidLength);
8016         }
8017
8018         DBG_8723A(FUNC_ADPT_FMT" ignore_broadcast_ssid:%d, %s,%d\n", FUNC_ADPT_ARG(adapter),
8019                 ignore_broadcast_ssid, ssid, ssid_len);
8020
8021         return ret;
8022 }
8023
8024 static int rtw_ioctl_acl_remove_sta(struct net_device *dev, struct ieee_param *param, int len)
8025 {
8026         int ret=0;
8027         _adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
8028         struct mlme_priv *pmlmepriv = &(padapter->mlmepriv);
8029
8030         if(check_fwstate(pmlmepriv, WIFI_AP_STATE) != _TRUE)
8031                 return -EINVAL;
8032
8033         if (param->sta_addr[0] == 0xff && param->sta_addr[1] == 0xff &&
8034             param->sta_addr[2] == 0xff && param->sta_addr[3] == 0xff &&
8035             param->sta_addr[4] == 0xff && param->sta_addr[5] == 0xff)
8036         {
8037                 return -EINVAL;
8038         }
8039
8040         ret = rtw_acl_remove_sta(padapter, param->sta_addr);
8041
8042         return ret;
8043
8044 }
8045
8046 static int rtw_ioctl_acl_add_sta(struct net_device *dev, struct ieee_param *param, int len)
8047 {
8048         int ret=0;
8049         _adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
8050         struct mlme_priv *pmlmepriv = &(padapter->mlmepriv);
8051
8052         if(check_fwstate(pmlmepriv, WIFI_AP_STATE) != _TRUE)
8053                 return -EINVAL;
8054
8055         if (param->sta_addr[0] == 0xff && param->sta_addr[1] == 0xff &&
8056             param->sta_addr[2] == 0xff && param->sta_addr[3] == 0xff &&
8057             param->sta_addr[4] == 0xff && param->sta_addr[5] == 0xff)
8058         {
8059                 return -EINVAL;
8060         }
8061
8062         ret = rtw_acl_add_sta(padapter, param->sta_addr);
8063
8064         return ret;
8065
8066 }
8067
8068 static int rtw_ioctl_set_macaddr_acl(struct net_device *dev, struct ieee_param *param, int len)
8069 {
8070         int ret=0;
8071         _adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
8072         struct mlme_priv *pmlmepriv = &(padapter->mlmepriv);
8073
8074         if(check_fwstate(pmlmepriv, WIFI_AP_STATE) != _TRUE)
8075                 return -EINVAL;
8076
8077         rtw_set_macaddr_acl(padapter, param->u.mlme.command);
8078
8079         return ret;
8080 }
8081
8082 static int rtw_hostapd_ioctl(struct net_device *dev, struct iw_point *p)
8083 {
8084         struct ieee_param *param;
8085         int ret = 0;
8086         _adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
8087
8088         //DBG_8723A("%s\n", __func__);
8089
8090         /*
8091         * this function is expect to call in master mode, which allows no power saving
8092         * so, we just check hw_init_completed
8093         */
8094
8095         if (padapter->hw_init_completed==_FALSE){
8096                 ret = -EPERM;
8097                 goto fail;
8098         }
8099
8100
8101         //if (p->length < sizeof(struct ieee_param) || !p->pointer){
8102         if(!p->pointer){
8103                 ret = -EINVAL;
8104                 goto fail;
8105         }
8106
8107         param = (struct ieee_param *)kmalloc(p->length, GFP_KERNEL);
8108         if (param == NULL)
8109         {
8110                 ret = -ENOMEM;
8111                 goto fail;
8112         }
8113
8114         if (copy_from_user(param, p->pointer, p->length))
8115         {
8116                 ret = -EFAULT;
8117                 goto out;
8118         }
8119
8120         //DBG_8723A("%s, cmd=%d\n", __func__, param->cmd);
8121
8122         switch (param->cmd)
8123         {
8124                 case RTL871X_HOSTAPD_FLUSH:
8125
8126                         ret = rtw_hostapd_sta_flush(dev);
8127
8128                         break;
8129
8130                 case RTL871X_HOSTAPD_ADD_STA:
8131
8132                         ret = rtw_add_sta(dev, param);
8133
8134                         break;
8135
8136                 case RTL871X_HOSTAPD_REMOVE_STA:
8137
8138                         ret = rtw_del_sta(dev, param);
8139
8140                         break;
8141
8142                 case RTL871X_HOSTAPD_SET_BEACON:
8143
8144                         ret = rtw_set_beacon(dev, param, p->length);
8145
8146                         break;
8147
8148                 case RTL871X_SET_ENCRYPTION:
8149
8150                         ret = rtw_set_encryption(dev, param, p->length);
8151
8152                         break;
8153
8154                 case RTL871X_HOSTAPD_GET_WPAIE_STA:
8155
8156                         ret = rtw_get_sta_wpaie(dev, param);
8157
8158                         break;
8159
8160                 case RTL871X_HOSTAPD_SET_WPS_BEACON:
8161
8162                         ret = rtw_set_wps_beacon(dev, param, p->length);
8163
8164                         break;
8165
8166                 case RTL871X_HOSTAPD_SET_WPS_PROBE_RESP:
8167
8168                         ret = rtw_set_wps_probe_resp(dev, param, p->length);
8169
8170                         break;
8171
8172                 case RTL871X_HOSTAPD_SET_WPS_ASSOC_RESP:
8173
8174                         ret = rtw_set_wps_assoc_resp(dev, param, p->length);
8175
8176                         break;
8177
8178                 case RTL871X_HOSTAPD_SET_HIDDEN_SSID:
8179
8180                         ret = rtw_set_hidden_ssid(dev, param, p->length);
8181
8182                         break;
8183
8184                 case RTL871X_HOSTAPD_GET_INFO_STA:
8185
8186                         ret = rtw_ioctl_get_sta_data(dev, param, p->length);
8187
8188                         break;
8189
8190                 case RTL871X_HOSTAPD_SET_MACADDR_ACL:
8191
8192                         ret = rtw_ioctl_set_macaddr_acl(dev, param, p->length);
8193
8194                         break;
8195
8196                 case RTL871X_HOSTAPD_ACL_ADD_STA:
8197
8198                         ret = rtw_ioctl_acl_add_sta(dev, param, p->length);
8199
8200                         break;
8201
8202                 case RTL871X_HOSTAPD_ACL_REMOVE_STA:
8203
8204                         ret = rtw_ioctl_acl_remove_sta(dev, param, p->length);
8205
8206                         break;
8207
8208                 default:
8209                         DBG_8723A("Unknown hostapd request: %d\n", param->cmd);
8210                         ret = -EOPNOTSUPP;
8211                         break;
8212
8213         }
8214
8215         if (ret == 0 && copy_to_user(p->pointer, param, p->length))
8216                 ret = -EFAULT;
8217
8218
8219 out:
8220         kfree((u8 *)param);
8221 fail:
8222         return ret;
8223 }
8224 #endif
8225
8226 #include <rtw_android.h>
8227 static int rtw_wx_set_priv(struct net_device *dev,
8228                                 struct iw_request_info *info,
8229                                 union iwreq_data *awrq,
8230                                 char *extra)
8231 {
8232
8233 #ifdef CONFIG_DEBUG_RTW_WX_SET_PRIV
8234         char *ext_dbg;
8235 #endif
8236
8237         int ret = 0;
8238         int len = 0;
8239         char *ext;
8240         int i;
8241
8242         _adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
8243         struct iw_point *dwrq = (struct iw_point*)awrq;
8244
8245         //RT_TRACE(_module_rtl871x_ioctl_os_c, _drv_notice_, ("+rtw_wx_set_priv\n"));
8246         if(dwrq->length == 0)
8247                 return -EFAULT;
8248
8249         len = dwrq->length;
8250         if (!(ext = rtw_vmalloc(len)))
8251                 return -ENOMEM;
8252
8253         if (copy_from_user(ext, dwrq->pointer, len)) {
8254                 rtw_vmfree(ext, len);
8255                 return -EFAULT;
8256         }
8257
8258
8259         //RT_TRACE(_module_rtl871x_ioctl_os_c, _drv_notice_,
8260         //       ("rtw_wx_set_priv: %s req=%s\n",
8261         //        dev->name, ext));
8262
8263         #ifdef CONFIG_DEBUG_RTW_WX_SET_PRIV
8264         if (!(ext_dbg = rtw_vmalloc(len)))
8265         {
8266                 rtw_vmfree(ext, len);
8267                 return -ENOMEM;
8268         }
8269
8270         memcpy(ext_dbg, ext, len);
8271         #endif
8272
8273         //added for wps2.0 @20110524
8274         if(dwrq->flags == 0x8766 && len > 8)
8275         {
8276                 u32 cp_sz;
8277                 struct mlme_priv *pmlmepriv = &(padapter->mlmepriv);
8278                 u8 *probereq_wpsie = ext;
8279                 int probereq_wpsie_len = len;
8280                 u8 wps_oui[4]={0x0,0x50,0xf2,0x04};
8281
8282                 if((_VENDOR_SPECIFIC_IE_ == probereq_wpsie[0]) &&
8283                         (!memcmp(&probereq_wpsie[2], wps_oui, 4)))
8284                 {
8285                         cp_sz = probereq_wpsie_len>MAX_WPS_IE_LEN ? MAX_WPS_IE_LEN:probereq_wpsie_len;
8286
8287                         //memcpy(pmlmepriv->probereq_wpsie, probereq_wpsie, cp_sz);
8288                         //pmlmepriv->probereq_wpsie_len = cp_sz;
8289                         if(pmlmepriv->wps_probe_req_ie)
8290                         {
8291                                 u32 free_len = pmlmepriv->wps_probe_req_ie_len;
8292                                 pmlmepriv->wps_probe_req_ie_len = 0;
8293                                 kfree(pmlmepriv->wps_probe_req_ie);
8294                                 pmlmepriv->wps_probe_req_ie = NULL;
8295                         }
8296
8297                         pmlmepriv->wps_probe_req_ie = kmalloc(cp_sz,
8298                                                               GFP_KERNEL);
8299                         if ( pmlmepriv->wps_probe_req_ie == NULL) {
8300                                 printk("%s()-%d: rtw_malloc() ERROR!\n", __func__, __LINE__);
8301                                 ret =  -EINVAL;
8302                                 goto FREE_EXT;
8303
8304                         }
8305
8306                         memcpy(pmlmepriv->wps_probe_req_ie, probereq_wpsie, cp_sz);
8307                         pmlmepriv->wps_probe_req_ie_len = cp_sz;
8308
8309                 }
8310
8311                 goto FREE_EXT;
8312
8313         }
8314
8315         if (len >= WEXT_CSCAN_HEADER_SIZE &&
8316             !memcmp(ext, WEXT_CSCAN_HEADER, WEXT_CSCAN_HEADER_SIZE)) {
8317                 ret = rtw_wx_set_scan(dev, info, awrq, ext);
8318                 goto FREE_EXT;
8319         }
8320
8321 #ifdef CONFIG_ANDROID
8322         //DBG_8723A("rtw_wx_set_priv: %s req=%s\n", dev->name, ext);
8323
8324         i = rtw_android_cmdstr_to_num(ext);
8325
8326         switch(i) {
8327                 case ANDROID_WIFI_CMD_START :
8328                         indicate_wx_custom_event(padapter, "START");
8329                         break;
8330                 case ANDROID_WIFI_CMD_STOP :
8331                         indicate_wx_custom_event(padapter, "STOP");
8332                         break;
8333                 case ANDROID_WIFI_CMD_RSSI :
8334                         {
8335                                 struct  mlme_priv       *pmlmepriv = &(padapter->mlmepriv);
8336                                 struct  wlan_network    *pcur_network = &pmlmepriv->cur_network;
8337
8338                                 if(check_fwstate(pmlmepriv, _FW_LINKED) == _TRUE) {
8339                                         sprintf(ext, "%s rssi %d", pcur_network->network.Ssid.Ssid, padapter->recvpriv.rssi);
8340                                 } else {
8341                                         sprintf(ext, "OK");
8342                                 }
8343                         }
8344                         break;
8345                 case ANDROID_WIFI_CMD_LINKSPEED :
8346                         {
8347                                 u16 mbps = rtw_get_cur_max_rate(padapter)/10;
8348                                 sprintf(ext, "LINKSPEED %d", mbps);
8349                         }
8350                         break;
8351                 case ANDROID_WIFI_CMD_MACADDR :
8352                         sprintf(ext, "MACADDR = " MAC_FMT, MAC_ARG(dev->dev_addr));
8353                         break;
8354                 case ANDROID_WIFI_CMD_SCAN_ACTIVE :
8355                         {
8356                                 //rtw_set_scan_mode(padapter, SCAN_ACTIVE);
8357                                 sprintf(ext, "OK");
8358                         }
8359                         break;
8360                 case ANDROID_WIFI_CMD_SCAN_PASSIVE :
8361                         {
8362                                 //rtw_set_scan_mode(padapter, SCAN_PASSIVE);
8363                                 sprintf(ext, "OK");
8364                         }
8365                         break;
8366
8367                 case ANDROID_WIFI_CMD_COUNTRY :
8368                         {
8369                                 char country_code[10];
8370                                 sscanf(ext, "%*s %s", country_code);
8371                                 rtw_set_country(padapter, country_code);
8372                                 sprintf(ext, "OK");
8373                         }
8374                         break;
8375                 default :
8376                         #ifdef  CONFIG_DEBUG_RTW_WX_SET_PRIV
8377                         DBG_8723A("%s: %s unknowned req=%s\n", __func__,
8378                                 dev->name, ext_dbg);
8379                         #endif
8380
8381                         sprintf(ext, "OK");
8382
8383         }
8384
8385         if (copy_to_user(dwrq->pointer, ext, min(dwrq->length, (u16)(strlen(ext)+1)) ) )
8386                 ret = -EFAULT;
8387
8388         #ifdef CONFIG_DEBUG_RTW_WX_SET_PRIV
8389         DBG_8723A("%s: %s req=%s rep=%s dwrq->length=%d, strlen(ext)+1=%d\n", __func__,
8390                 dev->name, ext_dbg ,ext, dwrq->length, (u16)(strlen(ext)+1));
8391         #endif
8392 #endif //end of CONFIG_ANDROID
8393
8394
8395 FREE_EXT:
8396
8397         rtw_vmfree(ext, len);
8398         #ifdef CONFIG_DEBUG_RTW_WX_SET_PRIV
8399         rtw_vmfree(ext_dbg, len);
8400         #endif
8401
8402         //DBG_8723A("rtw_wx_set_priv: (SIOCSIWPRIV) %s ret=%d\n",
8403         //              dev->name, ret);
8404
8405         return ret;
8406 }
8407
8408 static int rtw_pm_set(struct net_device *dev,
8409                                struct iw_request_info *info,
8410                                union iwreq_data *wrqu, char *extra)
8411 {
8412         int ret = 0;
8413         unsigned        mode = 0;
8414         _adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
8415
8416         DBG_8723A( "[%s] extra = %s\n", __func__, extra );
8417
8418         if (!memcmp(extra, "lps=", 4))
8419         {
8420                 sscanf(extra+4, "%u", &mode);
8421                 ret = rtw_pm_set_lps(padapter,mode);
8422         }
8423         else if (!memcmp(extra, "ips=", 4))
8424         {
8425                 sscanf(extra+4, "%u", &mode);
8426                 ret = rtw_pm_set_ips(padapter,mode);
8427         }
8428         else{
8429                 ret = -EINVAL;
8430         }
8431
8432         return ret;
8433 }
8434
8435
8436 static int rtw_wfd_tdls_enable(struct net_device *dev,
8437                                 struct iw_request_info *info,
8438                                 union iwreq_data *wrqu, char *extra)
8439 {
8440         int ret = 0;
8441
8442 #ifdef CONFIG_TDLS
8443 #ifdef CONFIG_WFD
8444
8445         _adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
8446
8447         printk( "[%s] %s %d\n", __func__, extra, wrqu->data.length -1  );
8448
8449         if ( extra[ 0 ] == '0' )
8450         {
8451                 padapter->wdinfo.wfd_tdls_enable = 0;
8452         }
8453         else
8454         {
8455                 padapter->wdinfo.wfd_tdls_enable = 1;
8456         }
8457
8458 #endif //CONFIG_WFD
8459 #endif //CONFIG_TDLS
8460
8461         return ret;
8462 }
8463
8464 static int rtw_tdls_weaksec(struct net_device *dev,
8465                                 struct iw_request_info *info,
8466                                 union iwreq_data *wrqu, char *extra)
8467 {
8468         int ret = 0;
8469
8470 #ifdef CONFIG_TDLS
8471
8472         u8 i, j;
8473         _adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
8474
8475         DBG_8723A( "[%s] %s %d\n", __func__, extra, wrqu->data.length -1  );
8476
8477         if ( extra[ 0 ] == '0' )
8478         {
8479                 padapter->wdinfo.wfd_tdls_weaksec = 0;
8480         }
8481         else
8482         {
8483                 padapter->wdinfo.wfd_tdls_weaksec = 1;
8484         }
8485 #endif
8486
8487         return ret;
8488 }
8489
8490
8491 static int rtw_tdls_enable(struct net_device *dev,
8492                                 struct iw_request_info *info,
8493                                 union iwreq_data *wrqu, char *extra)
8494 {
8495         int ret = 0;
8496
8497 #ifdef CONFIG_TDLS
8498
8499         _adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
8500         struct tdls_info        *ptdlsinfo = &padapter->tdlsinfo;
8501         _irqL    irqL;
8502         _list   *plist, *phead;
8503         s32     index;
8504         struct sta_info *psta = NULL;
8505         struct  sta_priv *pstapriv = &padapter->stapriv;
8506         u8 tdls_sta[NUM_STA][ETH_ALEN];
8507         u8 empty_hwaddr[ETH_ALEN] = { 0x00 };
8508
8509         printk( "[%s] %s %d\n", __func__, extra, wrqu->data.length -1  );
8510
8511         memset(tdls_sta, 0x00, sizeof(tdls_sta));
8512
8513         if ( extra[ 0 ] == '0' )
8514         {
8515                 ptdlsinfo->enable = 0;
8516
8517                 if(pstapriv->asoc_sta_count==1)
8518                         return ret;
8519
8520                 spin_lock_bh(&pstapriv->sta_hash_lock);
8521                 for(index=0; index< NUM_STA; index++)
8522                 {
8523                         phead = &(pstapriv->sta_hash[index]);
8524                         plist = get_next(phead);
8525
8526                         while ((rtw_end_of_queue_search(phead, plist)) == _FALSE)
8527                         {
8528                                 psta = LIST_CONTAINOR(plist, struct sta_info ,hash_list);
8529
8530                                 plist = get_next(plist);
8531
8532                                 if(psta->tdls_sta_state != TDLS_STATE_NONE)
8533                                 {
8534                                         memcpy(tdls_sta[index], psta->hwaddr, ETH_ALEN);
8535                                 }
8536                         }
8537                 }
8538                 spin_unlock_bh(&pstapriv->sta_hash_lock);
8539
8540                 for (index=0; index< NUM_STA; index++)
8541                 {
8542                         if (memcmp(tdls_sta[index], empty_hwaddr, ETH_ALEN))
8543                         {
8544                                 printk("issue tear down to "MAC_FMT"\n", MAC_ARG(tdls_sta[index]));
8545                                 issue_tdls_teardown(padapter, tdls_sta[index]);
8546                         }
8547                 }
8548                 rtw_tdls_cmd(padapter, myid(&(padapter->eeprompriv)), TDLS_RS_RCR);
8549                 rtw_reset_tdls_info(padapter);
8550         }
8551         else if ( extra[ 0 ] == '1' )
8552         {
8553                 ptdlsinfo->enable = 1;
8554         }
8555 #endif //CONFIG_TDLS
8556
8557         return ret;
8558 }
8559
8560 static int rtw_tdls_setup(struct net_device *dev,
8561                                 struct iw_request_info *info,
8562                                 union iwreq_data *wrqu, char *extra)
8563 {
8564         int ret = 0;
8565
8566 #ifdef CONFIG_TDLS
8567
8568         u8 i, j;
8569         _adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
8570         u8 mac_addr[ETH_ALEN];
8571
8572 #ifdef CONFIG_WFD
8573         struct wifidirect_info *pwdinfo= &(padapter->wdinfo);
8574 #endif // CONFIG_WFD
8575
8576         printk( "[%s] %s %d\n", __func__, extra, wrqu->data.length -1  );
8577
8578         for( i=0, j=0 ; i < ETH_ALEN; i++, j+=3 ){
8579                 mac_addr[i]=key_2char2num(*(extra+j), *(extra+j+1));
8580         }
8581
8582 #ifdef CONFIG_WFD
8583         if ( _AES_ != padapter->securitypriv.dot11PrivacyAlgrthm )
8584         {
8585                 //      Weak Security situation with AP.
8586                 if ( 0 == pwdinfo->wfd_tdls_weaksec )
8587                 {
8588                         //      Can't send the tdls setup request out!!
8589                         DBG_8723A( "[%s] Current link is not AES, SKIP sending the tdls setup request!!\n", __func__ );
8590                 }
8591                 else
8592                 {
8593                         issue_tdls_setup_req(padapter, mac_addr);
8594                 }
8595         }
8596         else
8597 #endif // CONFIG_WFD
8598         {
8599                 issue_tdls_setup_req(padapter, mac_addr);
8600         }
8601 #endif
8602
8603         return ret;
8604 }
8605
8606 static int rtw_tdls_teardown(struct net_device *dev,
8607                                 struct iw_request_info *info,
8608                                 union iwreq_data *wrqu, char *extra)
8609 {
8610         int ret = 0;
8611
8612 #ifdef CONFIG_TDLS
8613
8614         u8 i,j;
8615         _adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
8616         struct sta_info *ptdls_sta = NULL;
8617         u8 mac_addr[ETH_ALEN];
8618
8619         DBG_8723A( "[%s] %s %d\n", __func__, extra, wrqu->data.length -1  );
8620
8621         for( i=0, j=0 ; i < ETH_ALEN; i++, j+=3 ){
8622                 mac_addr[i]=key_2char2num(*(extra+j), *(extra+j+1));
8623         }
8624
8625         ptdls_sta = rtw_get_stainfo( &(padapter->stapriv), mac_addr);
8626
8627         if(ptdls_sta != NULL)
8628         {
8629                 ptdls_sta->stat_code = _RSON_TDLS_TEAR_UN_RSN_;
8630                 issue_tdls_teardown(padapter, mac_addr);
8631         }
8632
8633 #endif //CONFIG_TDLS
8634
8635         return ret;
8636 }
8637
8638 static int rtw_tdls_discovery(struct net_device *dev,
8639                                 struct iw_request_info *info,
8640                                 union iwreq_data *wrqu, char *extra)
8641 {
8642         int ret = 0;
8643
8644 #ifdef CONFIG_TDLS
8645
8646         _adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
8647         struct mlme_ext_priv    *pmlmeext = &(padapter->mlmeextpriv);
8648         struct mlme_ext_info    *pmlmeinfo = &(pmlmeext->mlmext_info);
8649
8650         DBG_8723A( "[%s] %s %d\n", __func__, extra, wrqu->data.length -1  );
8651
8652         issue_tdls_dis_req(padapter, NULL);
8653
8654 #endif //CONFIG_TDLS
8655
8656         return ret;
8657 }
8658
8659 static int rtw_tdls_ch_switch(struct net_device *dev,
8660                                 struct iw_request_info *info,
8661                                 union iwreq_data *wrqu, char *extra)
8662 {
8663         int ret = 0;
8664
8665 #ifdef CONFIG_TDLS
8666
8667         _adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
8668         struct tdls_info        *ptdlsinfo = &padapter->tdlsinfo;
8669         u8 i, j, mac_addr[ETH_ALEN];
8670         struct sta_info *ptdls_sta = NULL;
8671
8672         DBG_8723A( "[%s] %s %d\n", __func__, extra, wrqu->data.length -1  );
8673
8674         for( i=0, j=0 ; i < ETH_ALEN; i++, j+=3 ){
8675                 mac_addr[i]=key_2char2num(*(extra+j), *(extra+j+1));
8676         }
8677
8678         ptdls_sta = rtw_get_stainfo(&padapter->stapriv, mac_addr);
8679         if( ptdls_sta == NULL )
8680                 return ret;
8681         ptdlsinfo->ch_sensing=1;
8682
8683         rtw_tdls_cmd(padapter, ptdls_sta->hwaddr, TDLS_INIT_CH_SEN);
8684
8685 #endif //CONFIG_TDLS
8686
8687                 return ret;
8688 }
8689
8690 static int rtw_tdls_pson(struct net_device *dev,
8691                                 struct iw_request_info *info,
8692                                 union iwreq_data *wrqu, char *extra)
8693 {
8694         int ret = 0;
8695
8696 #ifdef CONFIG_TDLS
8697
8698         _adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
8699         struct mlme_ext_priv    *pmlmeext = &(padapter->mlmeextpriv);
8700         struct mlme_ext_info    *pmlmeinfo = &(pmlmeext->mlmext_info);
8701         u8 i, j, mac_addr[ETH_ALEN];
8702         struct sta_info *ptdls_sta = NULL;
8703
8704         DBG_8723A( "[%s] %s %d\n", __func__, extra, wrqu->data.length -1  );
8705
8706         for( i=0, j=0 ; i < ETH_ALEN; i++, j+=3 ){
8707                 mac_addr[i]=key_2char2num(*(extra+j), *(extra+j+1));
8708         }
8709
8710         ptdls_sta = rtw_get_stainfo(&padapter->stapriv, mac_addr);
8711
8712         issue_nulldata_to_TDLS_peer_STA(padapter, ptdls_sta, 1);
8713
8714 #endif //CONFIG_TDLS
8715
8716                 return ret;
8717 }
8718
8719 static int rtw_tdls_psoff(struct net_device *dev,
8720                                 struct iw_request_info *info,
8721                                 union iwreq_data *wrqu, char *extra)
8722 {
8723         int ret = 0;
8724
8725 #ifdef CONFIG_TDLS
8726
8727         _adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
8728         struct mlme_ext_priv    *pmlmeext = &(padapter->mlmeextpriv);
8729         struct mlme_ext_info    *pmlmeinfo = &(pmlmeext->mlmext_info);
8730         u8 i, j, mac_addr[ETH_ALEN];
8731         struct sta_info *ptdls_sta = NULL;
8732
8733         DBG_8723A( "[%s] %s %d\n", __func__, extra, wrqu->data.length -1  );
8734
8735         for( i=0, j=0 ; i < ETH_ALEN; i++, j+=3 ){
8736                 mac_addr[i]=key_2char2num(*(extra+j), *(extra+j+1));
8737         }
8738
8739         ptdls_sta = rtw_get_stainfo(&padapter->stapriv, mac_addr);
8740
8741         issue_nulldata_to_TDLS_peer_STA(padapter, ptdls_sta, 0);
8742
8743 #endif //CONFIG_TDLS
8744
8745         return ret;
8746 }
8747
8748 static int rtw_tdls_setip(struct net_device *dev,
8749                                 struct iw_request_info *info,
8750                                 union iwreq_data *wrqu, char *extra)
8751 {
8752         int ret = 0;
8753
8754 #ifdef CONFIG_TDLS
8755 #ifdef CONFIG_WFD
8756
8757         _adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
8758         struct tdls_info *ptdlsinfo = &padapter->tdlsinfo;
8759         struct wifi_display_info *pwfd_info = ptdlsinfo->wfd_info;
8760         u8 i=0, j=0, k=0, tag=0, ip[3] = { 0xff }, *ptr = extra;
8761
8762         printk( "[%s] %s %d\n", __func__, extra, wrqu->data.length - 1  );
8763
8764
8765         while( i < 4 )
8766         {
8767                 for( j=0; j < 4; j++)
8768                 {
8769                         if( *( extra + j + tag ) == '.' || *( extra + j + tag ) == '\0' )
8770                         {
8771                                 if( j == 1 )
8772                                         pwfd_info->ip_address[i]=convert_ip_addr( '0', '0', *(extra+(j-1)+tag));
8773                                 if( j == 2 )
8774                                         pwfd_info->ip_address[i]=convert_ip_addr( '0', *(extra+(j-2)+tag), *(extra+(j-1)+tag));
8775                                 if( j == 3 )
8776                                         pwfd_info->ip_address[i]=convert_ip_addr( *(extra+(j-3)+tag), *(extra+(j-2)+tag), *(extra+(j-1)+tag));
8777
8778                                 tag += j + 1;
8779                                 break;
8780                         }
8781                 }
8782                 i++;
8783         }
8784
8785         printk( "[%s] Set IP = %u.%u.%u.%u \n", __func__,
8786                 ptdlsinfo->wfd_info->ip_address[0], ptdlsinfo->wfd_info->ip_address[1],
8787                 ptdlsinfo->wfd_info->ip_address[2], ptdlsinfo->wfd_info->ip_address[3]
8788         );
8789
8790 #endif //CONFIG_WFD
8791 #endif //CONFIG_TDLS
8792
8793         return ret;
8794 }
8795
8796 static int rtw_tdls_getip(struct net_device *dev,
8797                                 struct iw_request_info *info,
8798                                 union iwreq_data *wrqu, char *extra)
8799 {
8800         int ret = 0;
8801
8802 #ifdef CONFIG_TDLS
8803 #ifdef CONFIG_WFD
8804
8805         _adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
8806         struct tdls_info *ptdlsinfo = &padapter->tdlsinfo;
8807         struct wifi_display_info *pwfd_info = ptdlsinfo->wfd_info;
8808
8809         printk( "[%s]\n", __func__);
8810
8811         sprintf( extra, "\n\n%u.%u.%u.%u\n",
8812                 pwfd_info->peer_ip_address[0], pwfd_info->peer_ip_address[1],
8813                 pwfd_info->peer_ip_address[2], pwfd_info->peer_ip_address[3]
8814                 );
8815
8816         printk( "[%s] IP=%u.%u.%u.%u\n", __func__,
8817                 pwfd_info->peer_ip_address[0], pwfd_info->peer_ip_address[1],
8818                 pwfd_info->peer_ip_address[2], pwfd_info->peer_ip_address[3]
8819                 );
8820
8821         wrqu->data.length = strlen( extra );
8822
8823 #endif //CONFIG_WFD
8824 #endif //CONFIG_TDLS
8825
8826         return ret;
8827 }
8828
8829 static int rtw_tdls_getport(struct net_device *dev,
8830                                struct iw_request_info *info,
8831                                union iwreq_data *wrqu, char *extra)
8832 {
8833
8834         int ret = 0;
8835
8836 #ifdef CONFIG_TDLS
8837 #ifdef CONFIG_WFD
8838
8839         _adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
8840         struct tdls_info *ptdlsinfo = &padapter->tdlsinfo;
8841         struct wifi_display_info *pwfd_info = ptdlsinfo->wfd_info;
8842
8843         printk( "[%s]\n", __func__);
8844
8845         sprintf( extra, "\n\n%d\n", pwfd_info->peer_rtsp_ctrlport );
8846         printk( "[%s] remote port = %d\n", __func__, pwfd_info->peer_rtsp_ctrlport );
8847
8848         wrqu->data.length = strlen( extra );
8849
8850 #endif //CONFIG_WFD
8851 #endif //CONFIG_TDLS
8852
8853         return ret;
8854
8855 }
8856
8857 //WFDTDLS, for sigma test
8858 static int rtw_tdls_dis_result(struct net_device *dev,
8859                                struct iw_request_info *info,
8860                                union iwreq_data *wrqu, char *extra)
8861 {
8862
8863         int ret = 0;
8864
8865 #ifdef CONFIG_TDLS
8866 #ifdef CONFIG_WFD
8867
8868         _adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
8869         struct tdls_info *ptdlsinfo = &padapter->tdlsinfo;
8870         struct wifi_display_info *pwfd_info = ptdlsinfo->wfd_info;
8871
8872         printk( "[%s]\n", __func__);
8873
8874         if(ptdlsinfo->dev_discovered == 1 )
8875         {
8876                 sprintf( extra, "\n\nDis=1\n" );
8877                 ptdlsinfo->dev_discovered = 0;
8878         }
8879
8880         wrqu->data.length = strlen( extra );
8881
8882 #endif //CONFIG_WFD
8883 #endif //CONFIG_TDLS
8884
8885         return ret;
8886
8887 }
8888
8889 //WFDTDLS, for sigma test
8890 static int rtw_wfd_tdls_status(struct net_device *dev,
8891                                struct iw_request_info *info,
8892                                union iwreq_data *wrqu, char *extra)
8893 {
8894
8895         int ret = 0;
8896
8897 #ifdef CONFIG_TDLS
8898 #ifdef CONFIG_WFD
8899
8900         _adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
8901         struct tdls_info *ptdlsinfo = &padapter->tdlsinfo;
8902         struct wifi_display_info *pwfd_info = ptdlsinfo->wfd_info;
8903
8904         printk( "[%s]\n", __func__);
8905
8906         if(ptdlsinfo->setup_state == TDLS_LINKED_STATE )
8907         {
8908                 sprintf( extra, "\n\nStatus=1\n" );
8909         }
8910         else
8911         {
8912                 sprintf( extra, "\n\nStatus=0\n" );
8913         }
8914
8915         wrqu->data.length = strlen( extra );
8916
8917 #endif //CONFIG_WFD
8918 #endif //CONFIG_TDLS
8919
8920         return ret;
8921
8922 }
8923
8924 static int rtw_tdls_ch_switch_off(struct net_device *dev,
8925                                 struct iw_request_info *info,
8926                                 union iwreq_data *wrqu, char *extra)
8927 {
8928         int ret = 0;
8929
8930 #ifdef CONFIG_TDLS
8931
8932         _adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
8933         u8 i, j, mac_addr[ETH_ALEN];
8934         struct sta_info *ptdls_sta = NULL;
8935
8936         DBG_8723A( "[%s] %s %d\n", __func__, extra, wrqu->data.length -1  );
8937
8938         for( i=0, j=0 ; i < ETH_ALEN; i++, j+=3 ){
8939                 mac_addr[i]=key_2char2num(*(extra+j), *(extra+j+1));
8940         }
8941
8942         ptdls_sta = rtw_get_stainfo(&padapter->stapriv, mac_addr);
8943
8944         ptdls_sta->tdls_sta_state |= TDLS_SW_OFF_STATE;
8945 /*
8946         if((ptdls_sta->tdls_sta_state & TDLS_AT_OFF_CH_STATE) && (ptdls_sta->tdls_sta_state & TDLS_PEER_AT_OFF_STATE)){
8947                 pmlmeinfo->tdls_candidate_ch= pmlmeext->cur_channel;
8948                 issue_tdls_ch_switch_req(padapter, mac_addr);
8949                 DBG_8723A("issue tdls ch switch req back to base channel\n");
8950         }
8951 */
8952
8953 #endif //CONFIG_TDLS
8954
8955         return ret;
8956 }
8957
8958 static int rtw_tdls(struct net_device *dev,
8959                                 struct iw_request_info *info,
8960                                 union iwreq_data *wrqu, char *extra)
8961 {
8962         int ret = 0;
8963
8964 #ifdef CONFIG_TDLS
8965         _adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
8966
8967         DBG_8723A( "[%s] extra = %s\n", __func__, extra );
8968         //      WFD Sigma will use the tdls enable command to let the driver know we want to test the tdls now!
8969         if (!memcmp(extra, "wfdenable=", 10))
8970         {
8971                 wrqu->data.length -=10;
8972                 rtw_wfd_tdls_enable( dev, info, wrqu, &extra[10] );
8973                 return ret;
8974         }
8975         else if (!memcmp(extra, "weaksec=", 8))
8976         {
8977                 wrqu->data.length -=8;
8978                 rtw_tdls_weaksec( dev, info, wrqu, &extra[8] );
8979                 return ret;
8980         }
8981         else if (!memcmp(extra, "tdlsenable=", 11))
8982         {
8983                 wrqu->data.length -=11;
8984                 rtw_tdls_enable( dev, info, wrqu, &extra[11] );
8985                 return ret;
8986         }
8987
8988         if( padapter->tdlsinfo.enable == 0 )
8989         {
8990                 printk("tdls haven't enabled\n");
8991                 return 0;
8992         }
8993
8994         if (!memcmp(extra, "setup=", 6))
8995         {
8996                 wrqu->data.length -=6;
8997                 rtw_tdls_setup( dev, info, wrqu, &extra[6] );
8998         }
8999         else if (!memcmp(extra, "tear=", 5))
9000         {
9001                 wrqu->data.length -= 5;
9002                 rtw_tdls_teardown( dev, info, wrqu, &extra[5] );
9003         }
9004         else if (!memcmp(extra, "dis=", 4))
9005         {
9006                 wrqu->data.length -= 4;
9007                 rtw_tdls_discovery( dev, info, wrqu, &extra[4] );
9008         }
9009         else if (!memcmp(extra, "sw=", 3))
9010         {
9011                 wrqu->data.length -= 3;
9012                 rtw_tdls_ch_switch( dev, info, wrqu, &extra[3] );
9013         }
9014         else if (!memcmp(extra, "swoff=", 6))
9015         {
9016                 wrqu->data.length -= 6;
9017                 rtw_tdls_ch_switch_off( dev, info, wrqu, &extra[6] );
9018         }
9019         else if (!memcmp(extra, "pson=", 5))
9020         {
9021                 wrqu->data.length -= 5;
9022                 rtw_tdls_pson( dev, info, wrqu, &extra[5] );
9023         }
9024         else if (!memcmp(extra, "psoff=", 6))
9025         {
9026                 wrqu->data.length -= 6;
9027                 rtw_tdls_psoff( dev, info, wrqu, &extra[6] );
9028         }
9029 #ifdef CONFIG_WFD
9030         else if (!memcmp(extra, "setip=", 6))
9031         {
9032                 wrqu->data.length -= 6;
9033                 rtw_tdls_setip( dev, info, wrqu, &extra[6] );
9034         }
9035         else if (!memcmp(extra, "tprobe=", 6))
9036         {
9037                 issue_tunneled_probe_req((_adapter *)rtw_netdev_priv(dev));
9038         }
9039 #endif //CONFIG_WFD
9040
9041 #endif //CONFIG_TDLS
9042
9043         return ret;
9044 }
9045
9046
9047 static int rtw_tdls_get(struct net_device *dev,
9048                                 struct iw_request_info *info,
9049                                 union iwreq_data *wrqu, char *extra)
9050 {
9051         int ret = 0;
9052
9053 #ifdef CONFIG_WFD
9054
9055         DBG_8723A( "[%s] extra = %s\n", __func__, (char*) wrqu->data.pointer );
9056
9057         if (!memcmp(wrqu->data.pointer, "ip", 2))
9058         {
9059                 rtw_tdls_getip( dev, info, wrqu, extra );
9060         }
9061         if (!memcmp(wrqu->data.pointer, "port", 4))
9062         {
9063                 rtw_tdls_getport( dev, info, wrqu, extra );
9064         }
9065         //WFDTDLS, for sigma test
9066         if (!memcmp(wrqu->data.pointer, "dis", 3))
9067         {
9068                 rtw_tdls_dis_result( dev, info, wrqu, extra );
9069         }
9070         if (!memcmp(wrqu->data.pointer, "status", 6))
9071         {
9072                 rtw_wfd_tdls_status( dev, info, wrqu, extra );
9073         }
9074
9075 #endif //CONFIG_WFD
9076
9077         return ret;
9078 }
9079
9080
9081
9082
9083
9084 #ifdef CONFIG_INTEL_WIDI
9085 static int rtw_widi_set(struct net_device *dev,
9086                                struct iw_request_info *info,
9087                                union iwreq_data *wrqu, char *extra)
9088 {
9089         int ret = 0;
9090         _adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
9091
9092         process_intel_widi_cmd(padapter, extra);
9093
9094         return ret;
9095 }
9096
9097 static int rtw_widi_set_probe_request(struct net_device *dev,
9098                                struct iw_request_info *info,
9099                                union iwreq_data *wrqu, char *extra)
9100 {
9101         int     ret = 0;
9102         u8      *pbuf = NULL;
9103         _adapter        *padapter = (_adapter *)rtw_netdev_priv(dev);
9104
9105         pbuf = kmalloc(sizeof(l2_msg_t), GFP_KERNEL);
9106         if(pbuf) {
9107                 memcpy(pbuf, wrqu->data.pointer, wrqu->data.length);
9108                 intel_widi_wk_cmd(padapter, INTEL_WIDI_ISSUE_PROB_WK, pbuf);
9109         }
9110         return ret;
9111 }
9112 #endif // CONFIG_INTEL_WIDI
9113
9114 #ifdef CONFIG_MAC_LOOPBACK_DRIVER
9115
9116 extern void rtl8723a_cal_txdesc_chksum(struct tx_desc *ptxdesc);
9117 #define cal_txdesc_chksum rtl8723a_cal_txdesc_chksum
9118 extern void rtl8723a_fill_default_txdesc(struct xmit_frame *pxmitframe, u8 *pbuf);
9119 #define fill_default_txdesc rtl8723a_fill_default_txdesc
9120
9121 static s32 initLoopback(PADAPTER padapter)
9122 {
9123         PLOOPBACKDATA ploopback;
9124
9125         if (padapter->ploopback == NULL) {
9126                 ploopback = (PLOOPBACKDATA)kzalloc(sizeof(LOOPBACKDATA),
9127                                                    GFP_KERNEL);
9128                 if (ploopback == NULL)
9129                         return -ENOMEM;
9130
9131                 sema_init(&ploopback->sema, 0);
9132                 ploopback->bstop = _TRUE;
9133                 ploopback->cnt = 0;
9134                 ploopback->size = 300;
9135                 memset(ploopback->msg, 0, sizeof(ploopback->msg));
9136
9137                 padapter->ploopback = ploopback;
9138         }
9139         return 0;
9140 }
9141
9142 static void freeLoopback(PADAPTER padapter)
9143 {
9144         PLOOPBACKDATA ploopback;
9145
9146         ploopback = padapter->ploopback;
9147         if (ploopback) {
9148                 padapter->ploopback = NULL;
9149                 kfree((u8*)ploopback);
9150         }
9151 }
9152
9153 static s32 initpseudoadhoc(PADAPTER padapter)
9154 {
9155         NDIS_802_11_NETWORK_INFRASTRUCTURE networkType;
9156         s32 err;
9157
9158         networkType = Ndis802_11IBSS;
9159         err = rtw_set_802_11_infrastructure_mode(padapter, networkType);
9160         if (err == _FALSE) return _FAIL;
9161
9162         err = rtw_setopmode_cmd(padapter, networkType);
9163         if (err == _FAIL) return _FAIL;
9164
9165         return _SUCCESS;
9166 }
9167
9168 static s32 createpseudoadhoc(PADAPTER padapter)
9169 {
9170         NDIS_802_11_AUTHENTICATION_MODE authmode;
9171         struct mlme_priv *pmlmepriv;
9172         NDIS_802_11_SSID *passoc_ssid;
9173         WLAN_BSSID_EX *pdev_network;
9174         u8 *pibss;
9175         u8 ssid[] = "pseduo_ad-hoc";
9176         s32 err;
9177         _irqL irqL;
9178
9179
9180         pmlmepriv = &padapter->mlmepriv;
9181
9182         authmode = Ndis802_11AuthModeOpen;
9183         err = rtw_set_802_11_authentication_mode(padapter, authmode);
9184         if (err == _FALSE) return _FAIL;
9185
9186         passoc_ssid = &pmlmepriv->assoc_ssid;
9187         memset(passoc_ssid, 0, sizeof(NDIS_802_11_SSID));
9188         passoc_ssid->SsidLength = sizeof(ssid) - 1;
9189         memcpy(passoc_ssid->Ssid, ssid, passoc_ssid->SsidLength);
9190
9191         pdev_network = &padapter->registrypriv.dev_network;
9192         pibss = padapter->registrypriv.dev_network.MacAddress;
9193         memcpy(&pdev_network->Ssid, passoc_ssid, sizeof(NDIS_802_11_SSID));
9194
9195         rtw_update_registrypriv_dev_network(padapter);
9196         rtw_generate_random_ibss(pibss);
9197
9198         spin_lock_bh(&pmlmepriv->lock);
9199         pmlmepriv->fw_state = WIFI_ADHOC_MASTER_STATE;
9200         spin_unlock_bh(&pmlmepriv->lock);
9201
9202 #if 0
9203         err = rtw_createbss_cmd(padapter);
9204         if (err == _FAIL) return _FAIL;
9205 #else
9206 {
9207         struct wlan_network *pcur_network;
9208         struct sta_info *psta;
9209
9210         //3  create a new psta
9211         pcur_network = &pmlmepriv->cur_network;
9212
9213         //clear psta in the cur_network, if any
9214         psta = rtw_get_stainfo(&padapter->stapriv, pcur_network->network.MacAddress);
9215         if (psta) rtw_free_stainfo(padapter, psta);
9216
9217         psta = rtw_alloc_stainfo(&padapter->stapriv, pibss);
9218         if (psta == NULL) return _FAIL;
9219
9220         //3  join psudo AdHoc
9221         pcur_network->join_res = 1;
9222         pcur_network->aid = psta->aid = 1;
9223         memcpy(&pcur_network->network, pdev_network, get_WLAN_BSSID_EX_sz(pdev_network));
9224
9225         // set msr to WIFI_FW_ADHOC_STATE
9226 #if 0
9227         Set_NETYPE0_MSR(padapter, WIFI_FW_ADHOC_STATE);
9228 #else
9229         {
9230                 u8 val8;
9231
9232                 val8 = rtw_read8(padapter, MSR);
9233                 val8 &= 0xFC; // clear NETYPE0
9234                 val8 |= WIFI_FW_ADHOC_STATE & 0x3;
9235                 rtw_write8(padapter, MSR, val8);
9236         }
9237 #endif
9238 }
9239 #endif
9240
9241         return _SUCCESS;
9242 }
9243
9244 static struct xmit_frame* createloopbackpkt(PADAPTER padapter, u32 size)
9245 {
9246         struct xmit_priv *pxmitpriv;
9247         struct xmit_frame *pframe;
9248         struct xmit_buf *pxmitbuf;
9249         struct pkt_attrib *pattrib;
9250         struct tx_desc *desc;
9251         u8 *pkt_start, *pkt_end, *ptr;
9252         struct rtw_ieee80211_hdr *hdr;
9253         s32 bmcast;
9254         _irqL irqL;
9255
9256
9257         if ((TXDESC_SIZE + WLANHDR_OFFSET + size) > MAX_XMITBUF_SZ) return NULL;
9258
9259         pxmitpriv = &padapter->xmitpriv;
9260         pframe = NULL;
9261
9262         //2 1. allocate xmit frame
9263         pframe = rtw_alloc_xmitframe(pxmitpriv);
9264         if (pframe == NULL) return NULL;
9265         pframe->padapter = padapter;
9266
9267         //2 2. allocate xmit buffer
9268         spin_lock_bh(&pxmitpriv->lock);
9269         pxmitbuf = rtw_alloc_xmitbuf(pxmitpriv);
9270         spin_unlock_bh(&pxmitpriv->lock);
9271         if (pxmitbuf == NULL) {
9272                 rtw_free_xmitframe(pxmitpriv, pframe);
9273                 return NULL;
9274         }
9275
9276         pframe->pxmitbuf = pxmitbuf;
9277         pframe->buf_addr = pxmitbuf->pbuf;
9278         pxmitbuf->priv_data = pframe;
9279
9280         //2 3. update_attrib()
9281         pattrib = &pframe->attrib;
9282
9283         // init xmitframe attribute
9284         memset(pattrib, 0, sizeof(struct pkt_attrib));
9285
9286         pattrib->ether_type = 0x8723;
9287         memcpy(pattrib->src, padapter->eeprompriv.mac_addr, ETH_ALEN);
9288         memcpy(pattrib->ta, pattrib->src, ETH_ALEN);
9289         memset(pattrib->dst, 0xFF, ETH_ALEN);
9290         memcpy(pattrib->ra, pattrib->dst, ETH_ALEN);
9291 //      pattrib->pctrl = 0;
9292 //      pattrib->dhcp_pkt = 0;
9293 //      pattrib->pktlen = 0;
9294         pattrib->ack_policy = 0;
9295 //      pattrib->pkt_hdrlen = ETH_HLEN;
9296         pattrib->hdrlen = WLAN_HDR_A3_LEN;
9297         pattrib->subtype = WIFI_DATA;
9298         pattrib->priority = 0;
9299         pattrib->qsel = pattrib->priority;
9300 //      do_queue_select(padapter, pattrib);
9301         pattrib->nr_frags = 1;
9302         pattrib->encrypt = 0;
9303         pattrib->bswenc = _FALSE;
9304         pattrib->qos_en = _FALSE;
9305
9306         bmcast = IS_MCAST(pattrib->ra);
9307         if (bmcast) {
9308                 pattrib->mac_id = 1;
9309                 pattrib->psta = rtw_get_bcmc_stainfo(padapter);
9310         } else {
9311                 pattrib->mac_id = 0;
9312                 pattrib->psta = rtw_get_stainfo(&padapter->stapriv, get_bssid(&padapter->mlmepriv));
9313         }
9314
9315         pattrib->pktlen = size;
9316         pattrib->last_txcmdsz = pattrib->hdrlen + pattrib->pktlen;
9317
9318         //2 4. fill TX descriptor
9319         desc = (struct tx_desc*)pframe->buf_addr;
9320         memset(desc, 0, TXDESC_SIZE);
9321
9322         fill_default_txdesc(pframe, (u8*)desc);
9323
9324         // Hw set sequence number
9325         ((PTXDESC)desc)->hwseq_en = 0; // HWSEQ_EN, 0:disable, 1:enable
9326 //      ((PTXDESC)desc)->hwseq_sel = 0; // HWSEQ_SEL
9327
9328         ((PTXDESC)desc)->disdatafb = 1;
9329
9330         // convert to little endian
9331         desc->txdw0 = cpu_to_le32(desc->txdw0);
9332         desc->txdw1 = cpu_to_le32(desc->txdw1);
9333         desc->txdw2 = cpu_to_le32(desc->txdw2);
9334         desc->txdw3 = cpu_to_le32(desc->txdw3);
9335         desc->txdw4 = cpu_to_le32(desc->txdw4);
9336         desc->txdw5 = cpu_to_le32(desc->txdw5);
9337         desc->txdw6 = cpu_to_le32(desc->txdw6);
9338         desc->txdw7 = cpu_to_le32(desc->txdw7);
9339
9340         cal_txdesc_chksum(desc);
9341
9342         //2 5. coalesce
9343         pkt_start = pframe->buf_addr + TXDESC_SIZE;
9344         pkt_end = pkt_start + pattrib->last_txcmdsz;
9345
9346         //3 5.1. make wlan header, make_wlanhdr()
9347         hdr = (struct rtw_ieee80211_hdr *)pkt_start;
9348         SetFrameSubType(&hdr->frame_ctl, pattrib->subtype);
9349         memcpy(hdr->addr1, pattrib->dst, ETH_ALEN); // DA
9350         memcpy(hdr->addr2, pattrib->src, ETH_ALEN); // SA
9351         memcpy(hdr->addr3, get_bssid(&padapter->mlmepriv), ETH_ALEN); // RA, BSSID
9352
9353         //3 5.2. make payload
9354         ptr = pkt_start + pattrib->hdrlen;
9355         get_random_bytes(ptr, pkt_end - ptr);
9356
9357         pxmitbuf->len = TXDESC_SIZE + pattrib->last_txcmdsz;
9358         pxmitbuf->ptail += pxmitbuf->len;
9359
9360         return pframe;
9361 }
9362
9363 static void freeloopbackpkt(PADAPTER padapter, struct xmit_frame *pframe)
9364 {
9365         struct xmit_priv *pxmitpriv;
9366         struct xmit_buf *pxmitbuf;
9367
9368
9369         pxmitpriv = &padapter->xmitpriv;
9370         pxmitbuf = pframe->pxmitbuf;
9371
9372         rtw_free_xmitframe(pxmitpriv, pframe);
9373         rtw_free_xmitbuf(pxmitpriv, pxmitbuf);
9374 }
9375
9376 static void printdata(u8 *pbuf, u32 len)
9377 {
9378         u32 i, val;
9379
9380
9381         for (i = 0; (i+4) <= len; i+=4) {
9382                 printk("%08X", *(u32*)(pbuf + i));
9383                 if ((i+4) & 0x1F) printk(" ");
9384                 else printk("\n");
9385         }
9386
9387         if (i < len)
9388         {
9389 #ifdef __BIG_ENDIAN
9390                 for (; i < len, i++)
9391                         printk("%02X", pbuf+i);
9392 #else // __LITTLE_ENDIAN
9393                 u8 str[9];
9394                 u8 n;
9395                 val = 0;
9396                 n = len - i;
9397                 memcpy(&val, pbuf+i, n);
9398                 sprintf(str, "%08X", val);
9399                 n = (4 - n) * 2;
9400                 printk("%8s", str+n);
9401 #endif // __LITTLE_ENDIAN
9402         }
9403         printk("\n");
9404 }
9405
9406 static u8 pktcmp(PADAPTER padapter, u8 *txbuf, u32 txsz, u8 *rxbuf, u32 rxsz)
9407 {
9408         PHAL_DATA_TYPE phal;
9409         struct recv_stat *prxstat;
9410         struct recv_stat report;
9411         PRXREPORT prxreport;
9412         u32 drvinfosize;
9413         u32 rxpktsize;
9414         u8 fcssize;
9415         u8 ret = _FALSE;
9416
9417         prxstat = (struct recv_stat*)rxbuf;
9418         report.rxdw0 = le32_to_cpu(prxstat->rxdw0);
9419         report.rxdw1 = le32_to_cpu(prxstat->rxdw1);
9420         report.rxdw2 = le32_to_cpu(prxstat->rxdw2);
9421         report.rxdw3 = le32_to_cpu(prxstat->rxdw3);
9422         report.rxdw4 = le32_to_cpu(prxstat->rxdw4);
9423         report.rxdw5 = le32_to_cpu(prxstat->rxdw5);
9424
9425         prxreport = (PRXREPORT)&report;
9426         drvinfosize = prxreport->drvinfosize << 3;
9427         rxpktsize = prxreport->pktlen;
9428
9429         phal = GET_HAL_DATA(padapter);
9430         if (phal->ReceiveConfig & RCR_APPFCS)
9431                 fcssize = IEEE80211_FCS_LEN;
9432         else
9433                 fcssize = 0;
9434
9435         if ((txsz - TXDESC_SIZE) != (rxpktsize - fcssize)) {
9436                 DBG_8723A("%s: ERROR! size not match tx/rx=%d/%d !\n",
9437                         __func__, txsz - TXDESC_SIZE, rxpktsize - fcssize);
9438                 ret = _FALSE;
9439         } else {
9440                 if (!memcmp(txbuf + TXDESC_SIZE,
9441                             rxbuf + RXDESC_SIZE + drvinfosize,
9442                             txsz - TXDESC_SIZE)) {
9443                         ret = _TRUE;
9444                 } else {
9445                         ret = _FALSE;
9446                         DBG_8723A("%s: ERROR! pkt content mismatch!\n",
9447                                   __func__);
9448                 }
9449         }
9450
9451         if (ret == _FALSE)
9452         {
9453                 DBG_8723A("\n%s: TX PKT total=%d, desc=%d, content=%d\n",
9454                         __func__, txsz, TXDESC_SIZE, txsz - TXDESC_SIZE);
9455                 DBG_8723A("%s: TX DESC size=%d\n", __func__, TXDESC_SIZE);
9456                 printdata(txbuf, TXDESC_SIZE);
9457                 DBG_8723A("%s: TX content size=%d\n", __func__, txsz - TXDESC_SIZE);
9458                 printdata(txbuf + TXDESC_SIZE, txsz - TXDESC_SIZE);
9459
9460                 DBG_8723A("\n%s: RX PKT read=%d offset=%d(%d,%d) content=%d\n",
9461                         __func__, rxsz, RXDESC_SIZE + drvinfosize, RXDESC_SIZE, drvinfosize, rxpktsize);
9462                 if (rxpktsize != 0)
9463                 {
9464                         DBG_8723A("%s: RX DESC size=%d\n", __func__, RXDESC_SIZE);
9465                         printdata(rxbuf, RXDESC_SIZE);
9466                         DBG_8723A("%s: RX drvinfo size=%d\n", __func__, drvinfosize);
9467                         printdata(rxbuf + RXDESC_SIZE, drvinfosize);
9468                         DBG_8723A("%s: RX content size=%d\n", __func__, rxpktsize);
9469                         printdata(rxbuf + RXDESC_SIZE + drvinfosize, rxpktsize);
9470                 } else {
9471                         DBG_8723A("%s: RX data size=%d\n", __func__, rxsz);
9472                         printdata(rxbuf, rxsz);
9473                 }
9474         }
9475
9476         return ret;
9477 }
9478
9479 thread_return lbk_thread(thread_context context)
9480 {
9481         s32 err;
9482         PADAPTER padapter;
9483         PLOOPBACKDATA ploopback;
9484         struct xmit_frame *pxmitframe;
9485         u32 cnt, ok, fail, headerlen;
9486         u32 pktsize;
9487         u32 ff_hwaddr;
9488
9489
9490         padapter = (PADAPTER)context;
9491         ploopback = padapter->ploopback;
9492         if (ploopback == NULL) return -1;
9493         cnt = 0;
9494         ok = 0;
9495         fail = 0;
9496
9497         daemonize("%s", "RTW_LBK_THREAD");
9498         allow_signal(SIGTERM);
9499
9500         do {
9501                 if (ploopback->size == 0) {
9502                         get_random_bytes(&pktsize, 4);
9503                         pktsize = (pktsize % 1535) + 1; // 1~1535
9504                 } else
9505                         pktsize = ploopback->size;
9506
9507                 pxmitframe = createloopbackpkt(padapter, pktsize);
9508                 if (pxmitframe == NULL) {
9509                         sprintf(ploopback->msg, "loopback FAIL! 3. create Packet FAIL!");
9510                         break;
9511                 }
9512
9513                 ploopback->txsize = TXDESC_SIZE + pxmitframe->attrib.last_txcmdsz;
9514                 memcpy(ploopback->txbuf, pxmitframe->buf_addr, ploopback->txsize);
9515                 ff_hwaddr = rtw_get_ff_hwaddr(pxmitframe);
9516                 cnt++;
9517                 DBG_8723A("%s: write port cnt=%d size=%d\n", __func__, cnt, ploopback->txsize);
9518                 pxmitframe->pxmitbuf->pdata = ploopback->txbuf;
9519                 rtw_write_port(padapter, ff_hwaddr, ploopback->txsize, (u8 *)pxmitframe->pxmitbuf);
9520
9521                 // wait for rx pkt
9522                 down(&ploopback->sema)
9523
9524                 err = pktcmp(padapter, ploopback->txbuf, ploopback->txsize, ploopback->rxbuf, ploopback->rxsize);
9525                 if (err == _TRUE)
9526                         ok++;
9527                 else
9528                         fail++;
9529
9530                 ploopback->txsize = 0;
9531                 memset(ploopback->txbuf, 0, 0x8000);
9532                 ploopback->rxsize = 0;
9533                 memset(ploopback->rxbuf, 0, 0x8000);
9534
9535                 freeloopbackpkt(padapter, pxmitframe);
9536                 pxmitframe = NULL;
9537
9538                 if (signal_pending(current)) {
9539                         flush_signals(current);
9540                 }
9541
9542                 if ((ploopback->bstop == _TRUE) ||
9543                         ((ploopback->cnt != 0) && (ploopback->cnt == cnt)))
9544                 {
9545                         u32 ok_rate, fail_rate, all;
9546                         all = cnt;
9547                         ok_rate = (ok*100)/all;
9548                         fail_rate = (fail*100)/all;
9549                         sprintf(ploopback->msg,\
9550                                         "loopback result: ok=%d%%(%d/%d),error=%d%%(%d/%d)",\
9551                                         ok_rate, ok, all, fail_rate, fail, all);
9552                         break;
9553                 }
9554         } while (1);
9555
9556         ploopback->bstop = _TRUE;
9557
9558         thread_exit();
9559 }
9560
9561 static void loopbackTest(PADAPTER padapter, u32 cnt, u32 size, u8* pmsg)
9562 {
9563         PLOOPBACKDATA ploopback;
9564         u32 len;
9565         s32 err;
9566
9567
9568         ploopback = padapter->ploopback;
9569
9570         if (ploopback)
9571         {
9572                 if (ploopback->bstop == _FALSE) {
9573                         ploopback->bstop = _TRUE;
9574                         up(&ploopback->sema);
9575                 }
9576                 len = 0;
9577                 do {
9578                         len = strlen(ploopback->msg);
9579                         if (len) break;
9580                         rtw_msleep_os(1);
9581                 } while (1);
9582                 memcpy(pmsg, ploopback->msg, len+1);
9583                 freeLoopback(padapter);
9584
9585                 return;
9586         }
9587
9588         // disable dynamic algorithm
9589         {
9590         u32 DMFlag = DYNAMIC_FUNC_DISABLE;
9591         rtw_hal_get_hwreg(padapter, HW_VAR_DM_FLAG, (u8*)&DMFlag);
9592         }
9593
9594         // create pseudo ad-hoc connection
9595         err = initpseudoadhoc(padapter);
9596         if (err == _FAIL) {
9597                 sprintf(pmsg, "loopback FAIL! 1.1 init ad-hoc FAIL!");
9598                 return;
9599         }
9600
9601         err = createpseudoadhoc(padapter);
9602         if (err == _FAIL) {
9603                 sprintf(pmsg, "loopback FAIL! 1.2 create ad-hoc master FAIL!");
9604                 return;
9605         }
9606
9607         err = initLoopback(padapter);
9608         if (err) {
9609                 sprintf(pmsg, "loopback FAIL! 2. init FAIL! error code=%d", err);
9610                 return;
9611         }
9612
9613         ploopback = padapter->ploopback;
9614
9615         ploopback->bstop = _FALSE;
9616         ploopback->cnt = cnt;
9617         ploopback->size = size;
9618         ploopback->lbkthread = kthread_run(lbk_thread, padapter, "RTW_LBK_THREAD");
9619         if (IS_ERR(padapter->lbkthread))
9620         {
9621                 freeLoopback(padapter);
9622                 sprintf(pmsg, "loopback start FAIL! cnt=%d", cnt);
9623                 return;
9624         }
9625
9626         sprintf(pmsg, "loopback start! cnt=%d", cnt);
9627 }
9628 #endif // CONFIG_MAC_LOOPBACK_DRIVER
9629
9630 static int rtw_test(
9631         struct net_device *dev,
9632         struct iw_request_info *info,
9633         union iwreq_data *wrqu, char *extra)
9634 {
9635         u32 len;
9636         u8 *pbuf, *pch;
9637         char *ptmp;
9638         u8 *delim = ",";
9639         int ret = 0;
9640         PADAPTER padapter = rtw_netdev_priv(dev);
9641
9642
9643         DBG_8723A("+%s\n", __func__);
9644         len = wrqu->data.length;
9645
9646         pbuf = (u8*)kzalloc(len, GFP_KERNEL);
9647         if (pbuf == NULL) {
9648                 DBG_8723A("%s: no memory!\n", __func__);
9649                 return -ENOMEM;
9650         }
9651
9652         if (copy_from_user(pbuf, wrqu->data.pointer, len)) {
9653                 DBG_8723A("%s: copy from user fail!\n", __func__);
9654                 ret = -EFAULT;
9655                 goto out;
9656         }
9657         DBG_8723A("%s: string=\"%s\"\n", __func__, pbuf);
9658
9659         ptmp = (char*)pbuf;
9660         pch = strsep(&ptmp, delim);
9661         if ((pch == NULL) || (strlen(pch) == 0)) {
9662                 DBG_8723A("%s: parameter error(level 1)!\n", __func__);
9663                 ret = -EFAULT;
9664                 goto out;
9665         }
9666
9667 #ifdef CONFIG_MAC_LOOPBACK_DRIVER
9668         if (strcmp(pch, "loopback") == 0)
9669         {
9670                 s32 cnt = 0;
9671                 u32 size = 64;
9672
9673                 pch = strsep(&ptmp, delim);
9674                 if ((pch == NULL) || (strlen(pch) == 0)) {
9675                         DBG_8723A("%s: parameter error(level 2)!\n", __func__);
9676                         ret = -EFAULT;
9677                         goto out;
9678                 }
9679
9680                 sscanf(pch, "%d", &cnt);
9681                 DBG_8723A("%s: loopback cnt=%d\n", __func__, cnt);
9682
9683                 pch = strsep(&ptmp, delim);
9684                 if ((pch == NULL) || (strlen(pch) == 0)) {
9685                         DBG_8723A("%s: parameter error(level 2)!\n", __func__);
9686                         ret = -EFAULT;
9687                         goto out;
9688                 }
9689
9690                 sscanf(pch, "%d", &size);
9691                 DBG_8723A("%s: loopback size=%d\n", __func__, size);
9692
9693                 loopbackTest(padapter, cnt, size, extra);
9694                 wrqu->data.length = strlen(extra) + 1;
9695
9696                 kfree(pbuf);
9697                 return ret;
9698         }
9699 #endif
9700
9701 #ifdef CONFIG_RTL8723A
9702 #ifdef CONFIG_BT_COEXIST
9703 #define GET_BT_INFO(padapter)   (&GET_HAL_DATA(padapter)->BtInfo)
9704
9705         if (strcmp(pch, "btdbg") == 0)
9706         {
9707                 DBG_8723A("===== BT debug information Start =====\n");
9708                 DBG_8723A("WIFI status=\n");
9709                 DBG_8723A("BT status=\n");
9710                 DBG_8723A("BT profile=\n");
9711                 DBG_8723A("WIFI RSSI=%d\n", GET_HAL_DATA(padapter)->dmpriv.UndecoratedSmoothedPWDB);
9712                 DBG_8723A("BT RSSI=\n");
9713                 DBG_8723A("coex mechanism=\n");
9714                 DBG_8723A("BT counter TX/RX=/\n");
9715                 DBG_8723A("0x880=0x%08x\n", rtw_read32(padapter, 0x880));
9716                 DBG_8723A("0x6c0=0x%08x\n", rtw_read32(padapter, 0x6c0));
9717                 DBG_8723A("0x6c4=0x%08x\n", rtw_read32(padapter, 0x6c4));
9718                 DBG_8723A("0x6c8=0x%08x\n", rtw_read32(padapter, 0x6c8));
9719                 DBG_8723A("0x6cc=0x%08x\n", rtw_read32(padapter, 0x6cc));
9720                 DBG_8723A("0x778=0x%08x\n", rtw_read32(padapter, 0x778));
9721                 DBG_8723A("0xc50=0x%08x\n", rtw_read32(padapter, 0xc50));
9722                 BT_DisplayBtCoexInfo(padapter);
9723                 DBG_8723A("===== BT debug information End =====\n");
9724         }
9725
9726         if (strcmp(pch, "bton") == 0)
9727         {
9728                 PBT30Info               pBTInfo = GET_BT_INFO(padapter);
9729                 PBT_MGNT                pBtMgnt = &pBTInfo->BtMgnt;
9730
9731                 pBtMgnt->ExtConfig.bManualControl = _FALSE;
9732         }
9733
9734         if (strcmp(pch, "btoff") == 0)
9735         {
9736                 PBT30Info               pBTInfo = GET_BT_INFO(padapter);
9737                 PBT_MGNT                pBtMgnt = &pBTInfo->BtMgnt;
9738
9739                 pBtMgnt->ExtConfig.bManualControl = _TRUE;
9740         }
9741 #endif // CONFIG_BT_COEXIST
9742
9743         if (strcmp(pch, "h2c") == 0)
9744         {
9745                 u8 param[6];
9746                 u8 count = 0;
9747                 u32 tmp;
9748                 u8 i;
9749                 u32 pos;
9750                 s32 ret;
9751
9752
9753                 do {
9754                         pch = strsep(&ptmp, delim);
9755                         if ((pch == NULL) || (strlen(pch) == 0))
9756                                 break;
9757
9758                         sscanf(pch, "%x", &tmp);
9759                         param[count++] = (u8)tmp;
9760                 } while (count < 6);
9761
9762                 if (count == 0) {
9763                         kfree(pbuf);
9764                         DBG_8723A("%s: parameter error(level 2)!\n", __func__);
9765                         return -EFAULT;
9766                 }
9767
9768                 ret = FillH2CCmd(padapter, param[0], count-1, &param[1]);
9769
9770                 pos = sprintf(extra, "H2C ID=%x content=", param[0]);
9771                 for (i=0; i<count; i++) {
9772                         pos += sprintf(extra+pos, "%x,", param[i]);
9773                 }
9774                 extra[pos] = 0;
9775                 pos--;
9776                 pos += sprintf(extra+pos, " %s", ret==_FAIL?"FAIL":"OK");
9777
9778                 wrqu->data.length = strlen(extra) + 1;
9779         }
9780 #endif // CONFIG_RTL8723A
9781 out:
9782         kfree(pbuf);
9783         return 0;
9784 }
9785
9786 static iw_handler rtw_handlers[] =
9787 {
9788         NULL,                                   /* SIOCSIWCOMMIT */
9789         rtw_wx_get_name,                /* SIOCGIWNAME */
9790         dummy,                                  /* SIOCSIWNWID */
9791         dummy,                                  /* SIOCGIWNWID */
9792         rtw_wx_set_freq,                /* SIOCSIWFREQ */
9793         rtw_wx_get_freq,                /* SIOCGIWFREQ */
9794         rtw_wx_set_mode,                /* SIOCSIWMODE */
9795         rtw_wx_get_mode,                /* SIOCGIWMODE */
9796         dummy,                                  /* SIOCSIWSENS */
9797         rtw_wx_get_sens,                /* SIOCGIWSENS */
9798         NULL,                                   /* SIOCSIWRANGE */
9799         rtw_wx_get_range,               /* SIOCGIWRANGE */
9800         rtw_wx_set_priv,                /* SIOCSIWPRIV */
9801         NULL,                                   /* SIOCGIWPRIV */
9802         NULL,                                   /* SIOCSIWSTATS */
9803         NULL,                                   /* SIOCGIWSTATS */
9804         dummy,                                  /* SIOCSIWSPY */
9805         dummy,                                  /* SIOCGIWSPY */
9806         NULL,                                   /* SIOCGIWTHRSPY */
9807         NULL,                                   /* SIOCWIWTHRSPY */
9808         rtw_wx_set_wap,         /* SIOCSIWAP */
9809         rtw_wx_get_wap,         /* SIOCGIWAP */
9810         rtw_wx_set_mlme,                /* request MLME operation; uses struct iw_mlme */
9811         dummy,                                  /* SIOCGIWAPLIST -- depricated */
9812         rtw_wx_set_scan,                /* SIOCSIWSCAN */
9813         rtw_wx_get_scan,                /* SIOCGIWSCAN */
9814         rtw_wx_set_essid,               /* SIOCSIWESSID */
9815         rtw_wx_get_essid,               /* SIOCGIWESSID */
9816         dummy,                                  /* SIOCSIWNICKN */
9817         rtw_wx_get_nick,                /* SIOCGIWNICKN */
9818         NULL,                                   /* -- hole -- */
9819         NULL,                                   /* -- hole -- */
9820         rtw_wx_set_rate,                /* SIOCSIWRATE */
9821         rtw_wx_get_rate,                /* SIOCGIWRATE */
9822         rtw_wx_set_rts,                 /* SIOCSIWRTS */
9823         rtw_wx_get_rts,                 /* SIOCGIWRTS */
9824         rtw_wx_set_frag,                /* SIOCSIWFRAG */
9825         rtw_wx_get_frag,                /* SIOCGIWFRAG */
9826         dummy,                                  /* SIOCSIWTXPOW */
9827         dummy,                                  /* SIOCGIWTXPOW */
9828         dummy,                                  /* SIOCSIWRETRY */
9829         rtw_wx_get_retry,               /* SIOCGIWRETRY */
9830         rtw_wx_set_enc,                 /* SIOCSIWENCODE */
9831         rtw_wx_get_enc,                 /* SIOCGIWENCODE */
9832         dummy,                                  /* SIOCSIWPOWER */
9833         rtw_wx_get_power,               /* SIOCGIWPOWER */
9834         NULL,                                   /*---hole---*/
9835         NULL,                                   /*---hole---*/
9836         rtw_wx_set_gen_ie,              /* SIOCSIWGENIE */
9837         NULL,                                   /* SIOCGWGENIE */
9838         rtw_wx_set_auth,                /* SIOCSIWAUTH */
9839         NULL,                                   /* SIOCGIWAUTH */
9840         rtw_wx_set_enc_ext,             /* SIOCSIWENCODEEXT */
9841         NULL,                                   /* SIOCGIWENCODEEXT */
9842         rtw_wx_set_pmkid,               /* SIOCSIWPMKSA */
9843         NULL,                                   /*---hole---*/
9844 };
9845
9846
9847 static const struct iw_priv_args rtw_private_args[] = {
9848         {
9849                 SIOCIWFIRSTPRIV + 0x0,
9850                 IW_PRIV_TYPE_CHAR | 0x7FF, 0, "write"
9851         },
9852         {
9853                 SIOCIWFIRSTPRIV + 0x1,
9854                 IW_PRIV_TYPE_CHAR | 0x7FF,
9855                 IW_PRIV_TYPE_CHAR | IW_PRIV_SIZE_FIXED | IFNAMSIZ, "read"
9856         },
9857         {
9858                 SIOCIWFIRSTPRIV + 0x2, 0, 0, "driver_ext"
9859         },
9860         {
9861                 SIOCIWFIRSTPRIV + 0x3, 0, 0, "mp_ioctl"
9862         },
9863         {
9864                 SIOCIWFIRSTPRIV + 0x4,
9865                 IW_PRIV_TYPE_INT | IW_PRIV_SIZE_FIXED | 1, 0, "apinfo"
9866         },
9867         {
9868                 SIOCIWFIRSTPRIV + 0x5,
9869                 IW_PRIV_TYPE_INT | IW_PRIV_SIZE_FIXED | 2, 0, "setpid"
9870         },
9871         {
9872                 SIOCIWFIRSTPRIV + 0x6,
9873                 IW_PRIV_TYPE_INT | IW_PRIV_SIZE_FIXED | 1, 0, "wps_start"
9874         },
9875 //for PLATFORM_MT53XX
9876         {
9877                 SIOCIWFIRSTPRIV + 0x7,
9878                 IW_PRIV_TYPE_INT | IW_PRIV_SIZE_FIXED | 1, 0, "get_sensitivity"
9879         },
9880         {
9881                 SIOCIWFIRSTPRIV + 0x8,
9882                 IW_PRIV_TYPE_INT | IW_PRIV_SIZE_FIXED | 1, 0, "wps_prob_req_ie"
9883         },
9884         {
9885                 SIOCIWFIRSTPRIV + 0x9,
9886                 IW_PRIV_TYPE_INT | IW_PRIV_SIZE_FIXED | 1, 0, "wps_assoc_req_ie"
9887         },
9888
9889 //for RTK_DMP_PLATFORM
9890         {
9891                 SIOCIWFIRSTPRIV + 0xA,
9892                 IW_PRIV_TYPE_INT | IW_PRIV_SIZE_FIXED | 1, 0, "channel_plan"
9893         },
9894
9895         {
9896                 SIOCIWFIRSTPRIV + 0xB,
9897                 IW_PRIV_TYPE_INT | IW_PRIV_SIZE_FIXED | 2, 0, "dbg"
9898         },
9899         {
9900                 SIOCIWFIRSTPRIV + 0xC,
9901                 IW_PRIV_TYPE_INT | IW_PRIV_SIZE_FIXED | 3, 0, "rfw"
9902         },
9903         {
9904                 SIOCIWFIRSTPRIV + 0xD,
9905                 IW_PRIV_TYPE_INT | IW_PRIV_SIZE_FIXED | 2, IW_PRIV_TYPE_CHAR | IW_PRIV_SIZE_FIXED | IFNAMSIZ, "rfr"
9906         },
9907 #if 0
9908         {
9909                 SIOCIWFIRSTPRIV + 0xE,0,0, "wowlan_ctrl"
9910         },
9911 #endif
9912         {
9913                 SIOCIWFIRSTPRIV + 0x10,
9914                 IW_PRIV_TYPE_CHAR | P2P_PRIVATE_IOCTL_SET_LEN, 0, "p2p_set"
9915         },
9916         {
9917                 SIOCIWFIRSTPRIV + 0x11,
9918                 IW_PRIV_TYPE_CHAR | P2P_PRIVATE_IOCTL_SET_LEN, IW_PRIV_TYPE_CHAR | IW_PRIV_SIZE_FIXED | P2P_PRIVATE_IOCTL_SET_LEN , "p2p_get"
9919         },
9920         {
9921                 SIOCIWFIRSTPRIV + 0x12, 0, 0, "NULL"
9922         },
9923         {
9924                 SIOCIWFIRSTPRIV + 0x13,
9925                 IW_PRIV_TYPE_CHAR | 64, IW_PRIV_TYPE_CHAR | 64 , "p2p_get2"
9926         },
9927         {
9928                 SIOCIWFIRSTPRIV + 0x14,
9929                 IW_PRIV_TYPE_CHAR  | 64, 0, "tdls"
9930         },
9931         {
9932                 SIOCIWFIRSTPRIV + 0x15,
9933                 IW_PRIV_TYPE_CHAR | P2P_PRIVATE_IOCTL_SET_LEN, IW_PRIV_TYPE_CHAR | IW_PRIV_SIZE_FIXED | P2P_PRIVATE_IOCTL_SET_LEN , "tdls_get"
9934         },
9935         {
9936                 SIOCIWFIRSTPRIV + 0x16,
9937                 IW_PRIV_TYPE_CHAR | 64, 0, "pm_set"
9938         },
9939
9940         {SIOCIWFIRSTPRIV + 0x18, IW_PRIV_TYPE_CHAR | IFNAMSIZ , 0 , "rereg_nd_name"},
9941
9942         {SIOCIWFIRSTPRIV + 0x1A, IW_PRIV_TYPE_CHAR | 1024, 0, "efuse_set"},
9943         {SIOCIWFIRSTPRIV + 0x1B, IW_PRIV_TYPE_CHAR | 128, IW_PRIV_TYPE_CHAR | IW_PRIV_SIZE_MASK, "efuse_get"},
9944         {
9945                 SIOCIWFIRSTPRIV + 0x1D,
9946                 IW_PRIV_TYPE_CHAR | 40, IW_PRIV_TYPE_CHAR | 0x7FF, "test"
9947         },
9948
9949 #ifdef CONFIG_INTEL_WIDI
9950         {
9951                 SIOCIWFIRSTPRIV + 0x1E,
9952                 IW_PRIV_TYPE_CHAR | 64, 0, "widi_set"
9953         },
9954         {
9955                 SIOCIWFIRSTPRIV + 0x1F,
9956                 IW_PRIV_TYPE_CHAR | 128, 0, "widi_prob_req"
9957         },
9958 #endif // CONFIG_INTEL_WIDI
9959 };
9960
9961 static iw_handler rtw_private_handler[] =
9962 {
9963         rtw_wx_write32,                                 //0x00
9964         rtw_wx_read32,                                  //0x01
9965         rtw_drvext_hdl,                                 //0x02
9966         NULL,                                           //0x03
9967
9968 // for MM DTV platform
9969         rtw_get_ap_info,                                        //0x04
9970
9971         rtw_set_pid,                                            //0x05
9972         rtw_wps_start,                                  //0x06
9973
9974 // for PLATFORM_MT53XX
9975         rtw_wx_get_sensitivity,                 //0x07
9976         rtw_wx_set_mtk_wps_probe_ie,    //0x08
9977         rtw_wx_set_mtk_wps_ie,                  //0x09
9978
9979 // for RTK_DMP_PLATFORM
9980 // Set Channel depend on the country code
9981         rtw_wx_set_channel_plan,                //0x0A
9982
9983         rtw_dbg_port,                                   //0x0B
9984         rtw_wx_write_rf,                                        //0x0C
9985         rtw_wx_read_rf,                                 //0x0D
9986
9987         rtw_wx_priv_null,                               //0x0E
9988         rtw_wx_priv_null,                               //0x0F
9989
9990         rtw_p2p_set,                                    //0x10
9991         rtw_p2p_get,                                    //0x11
9992         NULL,                                                   //0x12
9993         rtw_p2p_get2,                                   //0x13
9994
9995         rtw_tdls,                                               //0x14
9996         rtw_tdls_get,                                   //0x15
9997
9998         rtw_pm_set,                                             //0x16
9999         rtw_wx_priv_null,                               //0x17
10000         rtw_rereg_nd_name,                              //0x18
10001         rtw_wx_priv_null,                               //0x19
10002
10003         NULL /*rtw_mp_efuse_set*/,                      //0x1A
10004         NULL /*rtw_mp_efuse_get*/,                      //0x1B
10005         NULL,                                                   // 0x1C is reserved for hostapd
10006         rtw_test,                                               // 0x1D
10007 #ifdef CONFIG_INTEL_WIDI
10008         rtw_widi_set,                                   //0x1E
10009         rtw_widi_set_probe_request,             //0x1F
10010 #endif // CONFIG_INTEL_WIDI
10011 };
10012
10013 #if WIRELESS_EXT >= 17
10014 static struct iw_statistics *rtw_get_wireless_stats(struct net_device *dev)
10015 {
10016        _adapter *padapter = (_adapter *)rtw_netdev_priv(dev);
10017            struct iw_statistics *piwstats=&padapter->iwstats;
10018         int tmp_level = 0;
10019         int tmp_qual = 0;
10020         int tmp_noise = 0;
10021
10022         if (check_fwstate(&padapter->mlmepriv, _FW_LINKED) != _TRUE)
10023         {
10024                 piwstats->qual.qual = 0;
10025                 piwstats->qual.level = 0;
10026                 piwstats->qual.noise = 0;
10027                 //DBG_8723A("No link  level:%d, qual:%d, noise:%d\n", tmp_level, tmp_qual, tmp_noise);
10028         }
10029         else{
10030                 #ifdef CONFIG_SIGNAL_DISPLAY_DBM
10031                 tmp_level = translate_percentage_to_dbm(padapter->recvpriv.signal_strength);
10032                 #else
10033                 tmp_level = padapter->recvpriv.signal_strength;
10034                 #ifdef CONFIG_BT_COEXIST
10035                 {
10036                         u8 signal = (u8)tmp_level;
10037                         BT_SignalCompensation(padapter, &signal, NULL);
10038                         tmp_level= signal;
10039                 }
10040                 #endif // CONFIG_BT_COEXIST
10041                 #endif
10042
10043                 tmp_qual = padapter->recvpriv.signal_qual;
10044                 tmp_noise =padapter->recvpriv.noise;
10045                 //DBG_8723A("level:%d, qual:%d, noise:%d, rssi (%d)\n", tmp_level, tmp_qual, tmp_noise,padapter->recvpriv.rssi);
10046
10047                 piwstats->qual.level = tmp_level;
10048                 piwstats->qual.qual = tmp_qual;
10049                 piwstats->qual.noise = tmp_noise;
10050         }
10051 #if (LINUX_VERSION_CODE >= KERNEL_VERSION(2,6,14))
10052         piwstats->qual.updated = IW_QUAL_ALL_UPDATED ;//|IW_QUAL_DBM;
10053 #else
10054         piwstats->qual.updated = 0x0f;
10055 #endif
10056
10057         #ifdef CONFIG_SIGNAL_DISPLAY_DBM
10058         piwstats->qual.updated = piwstats->qual.updated | IW_QUAL_DBM;
10059         #endif
10060
10061         return &padapter->iwstats;
10062 }
10063 #endif
10064
10065 #ifdef CONFIG_WIRELESS_EXT
10066 struct iw_handler_def rtw_handlers_def =
10067 {
10068         .standard = rtw_handlers,
10069         .num_standard = sizeof(rtw_handlers) / sizeof(iw_handler),
10070 #if (LINUX_VERSION_CODE < KERNEL_VERSION(2,6,33)) || defined(CONFIG_WEXT_PRIV)
10071         .private = rtw_private_handler,
10072         .private_args = (struct iw_priv_args *)rtw_private_args,
10073         .num_private = sizeof(rtw_private_handler) / sizeof(iw_handler),
10074         .num_private_args = sizeof(rtw_private_args) / sizeof(struct iw_priv_args),
10075 #endif
10076 #if WIRELESS_EXT >= 17
10077         .get_wireless_stats = rtw_get_wireless_stats,
10078 #endif
10079 };
10080 #endif
10081
10082 // copy from net/wireless/wext.c start
10083 /* ---------------------------------------------------------------- */
10084 /*
10085  * Calculate size of private arguments
10086  */
10087 static const char iw_priv_type_size[] = {
10088         0,                              /* IW_PRIV_TYPE_NONE */
10089         1,                              /* IW_PRIV_TYPE_BYTE */
10090         1,                              /* IW_PRIV_TYPE_CHAR */
10091         0,                              /* Not defined */
10092         sizeof(__u32),                  /* IW_PRIV_TYPE_INT */
10093         sizeof(struct iw_freq),         /* IW_PRIV_TYPE_FLOAT */
10094         sizeof(struct sockaddr),        /* IW_PRIV_TYPE_ADDR */
10095         0,                              /* Not defined */
10096 };
10097
10098 static int get_priv_size(__u16 args)
10099 {
10100         int num = args & IW_PRIV_SIZE_MASK;
10101         int type = (args & IW_PRIV_TYPE_MASK) >> 12;
10102
10103         return num * iw_priv_type_size[type];
10104 }
10105 // copy from net/wireless/wext.c end
10106
10107 static int rtw_ioctl_wext_private(struct net_device *dev, union iwreq_data *wrq_data)
10108 {
10109         int err = 0;
10110         u8 *input = NULL;
10111         u32 input_len = 0;
10112         const char delim[] = " ";
10113         u8 *output = NULL;
10114         u32 output_len = 0;
10115         u32 count = 0;
10116         u8 *buffer= NULL;
10117         u32 buffer_len = 0;
10118         char *ptr = NULL;
10119         u8 cmdname[17] = {0}; // IFNAMSIZ+1
10120         u32 cmdlen;
10121         s32 len;
10122         u8 *extra = NULL;
10123         u32 extra_size = 0;
10124
10125         s32 k;
10126         const iw_handler *priv;         /* Private ioctl */
10127         const struct iw_priv_args *priv_args;   /* Private ioctl description */
10128         u32 num_priv;                           /* Number of ioctl */
10129         u32 num_priv_args;                      /* Number of descriptions */
10130         iw_handler handler;
10131         int temp;
10132         int subcmd = 0;                         /* sub-ioctl index */
10133         int offset = 0;                         /* Space for sub-ioctl index */
10134
10135         union iwreq_data wdata;
10136
10137
10138         memcpy(&wdata, wrq_data, sizeof(wdata));
10139
10140         input_len = wdata.data.length;
10141         input = kzalloc(input_len, GFP_KERNEL);
10142         if (NULL == input)
10143                 return -ENOMEM;
10144         if (copy_from_user(input, wdata.data.pointer, input_len)) {
10145                 err = -EFAULT;
10146                 goto exit;
10147         }
10148         ptr = input;
10149         len = input_len;
10150
10151         sscanf(ptr, "%16s", cmdname);
10152         cmdlen = strlen(cmdname);
10153         DBG_8723A("%s: cmd=%s\n", __func__, cmdname);
10154
10155         // skip command string
10156         if (cmdlen > 0)
10157                 cmdlen += 1; // skip one space
10158         ptr += cmdlen;
10159         len -= cmdlen;
10160         DBG_8723A("%s: parameters=%s\n", __func__, ptr);
10161
10162         priv = rtw_private_handler;
10163         priv_args = rtw_private_args;
10164         num_priv = sizeof(rtw_private_handler) / sizeof(iw_handler);
10165         num_priv_args = sizeof(rtw_private_args) / sizeof(struct iw_priv_args);
10166
10167         if (num_priv_args == 0) {
10168                 err = -EOPNOTSUPP;
10169                 goto exit;
10170         }
10171
10172         /* Search the correct ioctl */
10173         k = -1;
10174         while((++k < num_priv_args) && strcmp(priv_args[k].name, cmdname));
10175
10176         /* If not found... */
10177         if (k == num_priv_args) {
10178                 err = -EOPNOTSUPP;
10179                 goto exit;
10180         }
10181
10182         /* Watch out for sub-ioctls ! */
10183         if (priv_args[k].cmd < SIOCDEVPRIVATE)
10184         {
10185                 int j = -1;
10186
10187                 /* Find the matching *real* ioctl */
10188                 while ((++j < num_priv_args) && ((priv_args[j].name[0] != '\0') ||
10189                         (priv_args[j].set_args != priv_args[k].set_args) ||
10190                         (priv_args[j].get_args != priv_args[k].get_args)));
10191
10192                 /* If not found... */
10193                 if (j == num_priv_args) {
10194                         err = -EINVAL;
10195                         goto exit;
10196                 }
10197
10198                 /* Save sub-ioctl number */
10199                 subcmd = priv_args[k].cmd;
10200                 /* Reserve one int (simplify alignment issues) */
10201                 offset = sizeof(__u32);
10202                 /* Use real ioctl definition from now on */
10203                 k = j;
10204         }
10205
10206         buffer = kzalloc(4096, GFP_KERNEL);
10207         if (NULL == buffer) {
10208                 err = -ENOMEM;
10209                 goto exit;
10210         }
10211
10212         /* If we have to set some data */
10213         if ((priv_args[k].set_args & IW_PRIV_TYPE_MASK) &&
10214                 (priv_args[k].set_args & IW_PRIV_SIZE_MASK))
10215         {
10216                 u8 *str;
10217
10218                 switch (priv_args[k].set_args & IW_PRIV_TYPE_MASK)
10219                 {
10220                         case IW_PRIV_TYPE_BYTE:
10221                                 /* Fetch args */
10222                                 count = 0;
10223                                 do {
10224                                         str = strsep(&ptr, delim);
10225                                         if (NULL == str) break;
10226                                         sscanf(str, "%i", &temp);
10227                                         buffer[count++] = (u8)temp;
10228                                 } while (1);
10229                                 buffer_len = count;
10230
10231                                 /* Number of args to fetch */
10232                                 wdata.data.length = count;
10233                                 if (wdata.data.length > (priv_args[k].set_args & IW_PRIV_SIZE_MASK))
10234                                         wdata.data.length = priv_args[k].set_args & IW_PRIV_SIZE_MASK;
10235
10236                                 break;
10237
10238                         case IW_PRIV_TYPE_INT:
10239                                 /* Fetch args */
10240                                 count = 0;
10241                                 do {
10242                                         str = strsep(&ptr, delim);
10243                                         if (NULL == str) break;
10244                                         sscanf(str, "%i", &temp);
10245                                         ((s32*)buffer)[count++] = (s32)temp;
10246                                 } while (1);
10247                                 buffer_len = count * sizeof(s32);
10248
10249                                 /* Number of args to fetch */
10250                                 wdata.data.length = count;
10251                                 if (wdata.data.length > (priv_args[k].set_args & IW_PRIV_SIZE_MASK))
10252                                         wdata.data.length = priv_args[k].set_args & IW_PRIV_SIZE_MASK;
10253
10254                                 break;
10255
10256                         case IW_PRIV_TYPE_CHAR:
10257                                 if (len > 0)
10258                                 {
10259                                         /* Size of the string to fetch */
10260                                         wdata.data.length = len;
10261                                         if (wdata.data.length > (priv_args[k].set_args & IW_PRIV_SIZE_MASK))
10262                                                 wdata.data.length = priv_args[k].set_args & IW_PRIV_SIZE_MASK;
10263
10264                                         /* Fetch string */
10265                                         memcpy(buffer, ptr, wdata.data.length);
10266                                 }
10267                                 else
10268                                 {
10269                                         wdata.data.length = 1;
10270                                         buffer[0] = '\0';
10271                                 }
10272                                 buffer_len = wdata.data.length;
10273                                 break;
10274
10275                         default:
10276                                 DBG_8723A("%s: Not yet implemented...\n", __func__);
10277                                 err = -1;
10278                                 goto exit;
10279                 }
10280
10281                 if ((priv_args[k].set_args & IW_PRIV_SIZE_FIXED) &&
10282                         (wdata.data.length != (priv_args[k].set_args & IW_PRIV_SIZE_MASK)))
10283                 {
10284                         DBG_8723A("%s: The command %s needs exactly %d argument(s)...\n",
10285                                         __func__, cmdname, priv_args[k].set_args & IW_PRIV_SIZE_MASK);
10286                         err = -EINVAL;
10287                         goto exit;
10288                 }
10289         }   /* if args to set */
10290         else
10291         {
10292                 wdata.data.length = 0L;
10293         }
10294
10295         /* Those two tests are important. They define how the driver
10296         * will have to handle the data */
10297         if ((priv_args[k].set_args & IW_PRIV_SIZE_FIXED) &&
10298                 ((get_priv_size(priv_args[k].set_args) + offset) <= IFNAMSIZ))
10299         {
10300                 /* First case : all SET args fit within wrq */
10301                 if (offset)
10302                         wdata.mode = subcmd;
10303                 memcpy(wdata.name + offset, buffer, IFNAMSIZ - offset);
10304         }
10305         else
10306         {
10307                 if ((priv_args[k].set_args == 0) &&
10308                         (priv_args[k].get_args & IW_PRIV_SIZE_FIXED) &&
10309                         (get_priv_size(priv_args[k].get_args) <= IFNAMSIZ))
10310                 {
10311                         /* Second case : no SET args, GET args fit within wrq */
10312                         if (offset)
10313                                 wdata.mode = subcmd;
10314                 }
10315                 else
10316                 {
10317                         /* Third case : args won't fit in wrq, or variable number of args */
10318                         if (copy_to_user(wdata.data.pointer, buffer, buffer_len)) {
10319                                 err = -EFAULT;
10320                                 goto exit;
10321                         }
10322                         wdata.data.flags = subcmd;
10323                 }
10324         }
10325
10326         kfree(input);
10327         input = NULL;
10328
10329         extra_size = 0;
10330         if (IW_IS_SET(priv_args[k].cmd))
10331         {
10332                 /* Size of set arguments */
10333                 extra_size = get_priv_size(priv_args[k].set_args);
10334
10335                 /* Does it fits in iwr ? */
10336                 if ((priv_args[k].set_args & IW_PRIV_SIZE_FIXED) &&
10337                         ((extra_size + offset) <= IFNAMSIZ))
10338                         extra_size = 0;
10339         } else {
10340                 /* Size of get arguments */
10341                 extra_size = get_priv_size(priv_args[k].get_args);
10342
10343                 /* Does it fits in iwr ? */
10344                 if ((priv_args[k].get_args & IW_PRIV_SIZE_FIXED) &&
10345                         (extra_size <= IFNAMSIZ))
10346                         extra_size = 0;
10347         }
10348
10349         if (extra_size == 0) {
10350                 extra = (u8*)&wdata;
10351                 kfree(buffer);
10352                 buffer = NULL;
10353         } else
10354                 extra = buffer;
10355
10356         handler = priv[priv_args[k].cmd - SIOCIWFIRSTPRIV];
10357         err = handler(dev, NULL, &wdata, extra);
10358
10359         /* If we have to get some data */
10360         if ((priv_args[k].get_args & IW_PRIV_TYPE_MASK) &&
10361                 (priv_args[k].get_args & IW_PRIV_SIZE_MASK))
10362         {
10363                 int j;
10364                 int n = 0;      /* number of args */
10365                 u8 str[20] = {0};
10366
10367                 /* Check where is the returned data */
10368                 if ((priv_args[k].get_args & IW_PRIV_SIZE_FIXED) &&
10369                         (get_priv_size(priv_args[k].get_args) <= IFNAMSIZ))
10370                         n = priv_args[k].get_args & IW_PRIV_SIZE_MASK;
10371                 else
10372                         n = wdata.data.length;
10373
10374                 output = kmalloc(4096, GFP_KERNEL);
10375                 if (NULL == output) {
10376                         err =  -ENOMEM;
10377                         goto exit;
10378                 }
10379
10380                 switch (priv_args[k].get_args & IW_PRIV_TYPE_MASK)
10381                 {
10382                         case IW_PRIV_TYPE_BYTE:
10383                                 /* Display args */
10384                                 for (j = 0; j < n; j++)
10385                                 {
10386                                         sprintf(str, "%d  ", extra[j]);
10387                                         len = strlen(str);
10388                                         output_len = strlen(output);
10389                                         if ((output_len + len + 1) > 4096) {
10390                                                 err = -E2BIG;
10391                                                 goto exit;
10392                                         }
10393                                         memcpy(output+output_len, str, len);
10394                                 }
10395                                 break;
10396
10397                         case IW_PRIV_TYPE_INT:
10398                                 /* Display args */
10399                                 for (j = 0; j < n; j++)
10400                                 {
10401                                         sprintf(str, "%d  ", ((__s32*)extra)[j]);
10402                                         len = strlen(str);
10403                                         output_len = strlen(output);
10404                                         if ((output_len + len + 1) > 4096) {
10405                                                 err = -E2BIG;
10406                                                 goto exit;
10407                                         }
10408                                         memcpy(output+output_len, str, len);
10409                                 }
10410                                 break;
10411
10412                         case IW_PRIV_TYPE_CHAR:
10413                                 /* Display args */
10414                                 memcpy(output, extra, n);
10415                                 break;
10416
10417                         default:
10418                                 DBG_8723A("%s: Not yet implemented...\n", __func__);
10419                                 err = -1;
10420                                 goto exit;
10421                 }
10422
10423                 output_len = strlen(output) + 1;
10424                 wrq_data->data.length = output_len;
10425                 if (copy_to_user(wrq_data->data.pointer, output, output_len)) {
10426                         err = -EFAULT;
10427                         goto exit;
10428                 }
10429         }   /* if args to set */
10430         else
10431         {
10432                 wrq_data->data.length = 0;
10433         }
10434
10435 exit:
10436         if (input)
10437                 kfree(input);
10438         if (buffer)
10439                 kfree(buffer);
10440         if (output)
10441                 kfree(output);
10442
10443         return err;
10444 }
10445
10446 #include <rtw_android.h>
10447 int rtw_ioctl(struct net_device *dev, struct ifreq *rq, int cmd)
10448 {
10449         struct iwreq *wrq = (struct iwreq *)rq;
10450         int ret=0;
10451
10452         switch (cmd)
10453         {
10454                 case RTL_IOCTL_WPA_SUPPLICANT:
10455                         ret = wpa_supplicant_ioctl(dev, &wrq->u.data);
10456                         break;
10457 #ifdef CONFIG_AP_MODE
10458                 case RTL_IOCTL_HOSTAPD:
10459                         ret = rtw_hostapd_ioctl(dev, &wrq->u.data);
10460                         break;
10461 #ifdef CONFIG_NO_WIRELESS_HANDLERS
10462                 case SIOCSIWMODE:
10463                         ret = rtw_wx_set_mode(dev, NULL, &wrq->u, NULL);
10464                         break;
10465 #endif
10466 #endif // CONFIG_AP_MODE
10467                 case SIOCDEVPRIVATE:
10468                         ret = rtw_ioctl_wext_private(dev, &wrq->u);
10469                         break;
10470                 default:
10471                         ret = -EOPNOTSUPP;
10472                         break;
10473         }
10474
10475         return ret;
10476 }