drivers/staging/rtl8723bs/os_dep/ioctl_linux.c

   1 /******************************************************************************
   2  *
   3  * Copyright(c) 2007 - 2012 Realtek Corporation. All rights reserved.
   4  *
   5  * This program is free software; you can redistribute it and/or modify it
   6  * under the terms of version 2 of the GNU General Public License as
   7  * published by the Free Software Foundation.
   8  *
   9  * This program is distributed in the hope that it will be useful, but WITHOUT
  10  * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
  11  * FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for
  12  * more details.
  13  *
  14  ******************************************************************************/
  15 #define _IOCTL_LINUX_C_
  16
  17 #include <drv_types.h>
  18 #include <rtw_debug.h>
  19 #include <rtw_mp.h>
  20 #include <linux/jiffies.h>
  21
  22 #define RTL_IOCTL_WPA_SUPPLICANT        SIOCIWFIRSTPRIV+30
  23
  24 #define SCAN_ITEM_SIZE 768
  25 #define MAX_CUSTOM_LEN 64
  26 #define RATE_COUNT 4
  27
  28 /*  combo scan */
  29 #define WEXT_CSCAN_AMOUNT 9
  30 #define WEXT_CSCAN_BUF_LEN              360
  31 #define WEXT_CSCAN_HEADER               "CSCAN S\x01\x00\x00S\x00"
  32 #define WEXT_CSCAN_HEADER_SIZE          12
  33 #define WEXT_CSCAN_SSID_SECTION         'S'
  34 #define WEXT_CSCAN_CHANNEL_SECTION      'C'
  35 #define WEXT_CSCAN_NPROBE_SECTION       'N'
  36 #define WEXT_CSCAN_ACTV_DWELL_SECTION   'A'
  37 #define WEXT_CSCAN_PASV_DWELL_SECTION   'P'
  38 #define WEXT_CSCAN_HOME_DWELL_SECTION   'H'
  39 #define WEXT_CSCAN_TYPE_SECTION         'T'
  40
  41
  42 extern u8 key_2char2num(u8 hch, u8 lch);
  43
  44 static u32 rtw_rates[] = {1000000, 2000000, 5500000, 11000000,
  45         6000000, 9000000, 12000000, 18000000, 24000000, 36000000, 48000000, 54000000};
  46
  47 static const char * const iw_operation_mode[] =
  48 {
  49         "Auto", "Ad-Hoc", "Managed",  "Master", "Repeater", "Secondary", "Monitor"
  50 };
  51
  52 static int hex2num_i(char c)
  53 {
  54         if (c >= '0' && c <= '9')
  55                 return c - '0';
  56         if (c >= 'a' && c <= 'f')
  57                 return c - 'a' + 10;
  58         if (c >= 'A' && c <= 'F')
  59                 return c - 'A' + 10;
  60         return -1;
  61 }
  62
  63 /**
  64  * hwaddr_aton - Convert ASCII string to MAC address
  65  * @txt: MAC address as a string (e.g., "00:11:22:33:44:55")
  66  * @addr: Buffer for the MAC address (ETH_ALEN = 6 bytes)
  67  * Returns: 0 on success, -1 on failure (e.g., string not a MAC address)
  68  */
  69 static int hwaddr_aton_i(const char *txt, u8 *addr)
  70 {
  71         int i;
  72
  73         for (i = 0; i < 6; i++) {
  74                 int a, b;
  75
  76                 a = hex2num_i(*txt++);
  77                 if (a < 0)
  78                         return -1;
  79                 b = hex2num_i(*txt++);
  80                 if (b < 0)
  81                         return -1;
  82                 *addr++ = (a << 4) | b;
  83                 if (i < 5 && *txt++ != ':')
  84                         return -1;
  85         }
  86
  87         return 0;
  88 }
  89
  90 void indicate_wx_scan_complete_event(struct adapter *padapter)
  91 {
  92         union iwreq_data wrqu;
  93
  94         memset(&wrqu, 0, sizeof(union iwreq_data));
  95
  96         /* DBG_871X("+rtw_indicate_wx_scan_complete_event\n"); */
  97 }
  98
  99
 100 void rtw_indicate_wx_assoc_event(struct adapter *padapter)
 101 {
 102         union iwreq_data wrqu;
 103         struct  mlme_priv *pmlmepriv = &padapter->mlmepriv;
 104         struct mlme_ext_priv *pmlmeext = &padapter->mlmeextpriv;
 105         struct mlme_ext_info *pmlmeinfo = &(pmlmeext->mlmext_info);
 106         struct wlan_bssid_ex            *pnetwork = (struct wlan_bssid_ex*)(&(pmlmeinfo->network));
 107
 108         memset(&wrqu, 0, sizeof(union iwreq_data));
 109
 110         wrqu.ap_addr.sa_family = ARPHRD_ETHER;
 111
 112         if (check_fwstate(pmlmepriv, WIFI_ADHOC_MASTER_STATE) ==true)
 113                 memcpy(wrqu.ap_addr.sa_data, pnetwork->MacAddress, ETH_ALEN);
 114         else
 115                 memcpy(wrqu.ap_addr.sa_data, pmlmepriv->cur_network.network.MacAddress, ETH_ALEN);
 116
 117         DBG_871X_LEVEL(_drv_always_, "assoc success\n");
 118 }
 119
 120 void rtw_indicate_wx_disassoc_event(struct adapter *padapter)
 121 {
 122         union iwreq_data wrqu;
 123
 124         memset(&wrqu, 0, sizeof(union iwreq_data));
 125
 126         wrqu.ap_addr.sa_family = ARPHRD_ETHER;
 127         memset(wrqu.ap_addr.sa_data, 0, ETH_ALEN);
 128 }
 129
 130 /*
 131 uint    rtw_is_cckrates_included(u8 *rate)
 132 {
 133                 u32 i = 0;
 134
 135                 while (rate[i]!= 0)
 136                 {
 137                         if  ((((rate[i]) & 0x7f) == 2)  || (((rate[i]) & 0x7f) == 4) ||
 138                         (((rate[i]) & 0x7f) == 11)  || (((rate[i]) & 0x7f) == 22))
 139                         return true;
 140                         i++;
 141                 }
 142
 143                 return false;
 144 }
 145
 146 uint    rtw_is_cckratesonly_included(u8 *rate)
 147 {
 148         u32 i = 0;
 149
 150         while (rate[i]!= 0)
 151         {
 152                         if  ((((rate[i]) & 0x7f) != 2) && (((rate[i]) & 0x7f) != 4) &&
 153                                 (((rate[i]) & 0x7f) != 11)  && (((rate[i]) & 0x7f) != 22))
 154                         return false;
 155                         i++;
 156         }
 157
 158         return true;
 159 }
 160 */
 161
 162 static char *translate_scan(struct adapter *padapter,
 163                                 struct iw_request_info* info, struct wlan_network *pnetwork,
 164                                 char *start, char *stop)
 165 {
 166         struct iw_event iwe;
 167         u16 cap;
 168         u32 ht_ielen = 0;
 169         char *custom = NULL;
 170         char *p;
 171         u16 max_rate = 0, rate, ht_cap =false, vht_cap = false;
 172         u32 i = 0;
 173         u8 bw_40MHz = 0, short_GI = 0;
 174         u16 mcs_rate = 0, vht_data_rate = 0;
 175         u8 ie_offset = (pnetwork->network.Reserved[0] == 2? 0:12);
 176         struct mlme_priv *pmlmepriv = &(padapter->mlmepriv);
 177         u8 ss, sq;
 178
 179         /*  AP MAC address  */
 180         iwe.cmd = SIOCGIWAP;
 181         iwe.u.ap_addr.sa_family = ARPHRD_ETHER;
 182
 183         memcpy(iwe.u.ap_addr.sa_data, pnetwork->network.MacAddress, ETH_ALEN);
 184         start = iwe_stream_add_event(info, start, stop, &iwe, IW_EV_ADDR_LEN);
 185
 186         /* Add the ESSID */
 187         iwe.cmd = SIOCGIWESSID;
 188         iwe.u.data.flags = 1;
 189         iwe.u.data.length = min((u16)pnetwork->network.Ssid.SsidLength, (u16)32);
 190         start = iwe_stream_add_point(info, start, stop, &iwe, pnetwork->network.Ssid.Ssid);
 191
 192         /* parsing HT_CAP_IE */
 193         if (pnetwork->network.Reserved[0] == 2) /*  Probe Request */
 194         {
 195                 p = rtw_get_ie(&pnetwork->network.IEs[0], _HT_CAPABILITY_IE_, &ht_ielen, pnetwork->network.IELength);
 196         }
 197         else
 198         {
 199                 p = rtw_get_ie(&pnetwork->network.IEs[12], _HT_CAPABILITY_IE_, &ht_ielen, pnetwork->network.IELength-12);
 200         }
 201         if (p && ht_ielen>0)
 202         {
 203                 struct rtw_ieee80211_ht_cap *pht_capie;
 204                 ht_cap = true;
 205                 pht_capie = (struct rtw_ieee80211_ht_cap *)(p+2);
 206                 memcpy(&mcs_rate , pht_capie->supp_mcs_set, 2);
 207                 bw_40MHz = (le16_to_cpu(pht_capie->cap_info) & IEEE80211_HT_CAP_SUP_WIDTH) ? 1 : 0;
 208                 short_GI = (le16_to_cpu(pht_capie->cap_info) & (IEEE80211_HT_CAP_SGI_20 | IEEE80211_HT_CAP_SGI_40)) ? 1 : 0;
 209         }
 210
 211         /* Add the protocol name */
 212         iwe.cmd = SIOCGIWNAME;
 213         if ((rtw_is_cckratesonly_included((u8 *)&pnetwork->network.SupportedRates)) == true)
 214         {
 215                 if (ht_cap == true)
 216                         snprintf(iwe.u.name, IFNAMSIZ, "IEEE 802.11bn");
 217                 else
 218                 snprintf(iwe.u.name, IFNAMSIZ, "IEEE 802.11b");
 219         }
 220         else if ((rtw_is_cckrates_included((u8 *)&pnetwork->network.SupportedRates)) == true)
 221         {
 222                 if (ht_cap == true)
 223                         snprintf(iwe.u.name, IFNAMSIZ, "IEEE 802.11bgn");
 224                 else
 225                         snprintf(iwe.u.name, IFNAMSIZ, "IEEE 802.11bg");
 226         }
 227         else
 228         {
 229                 if (pnetwork->network.Configuration.DSConfig > 14)
 230                 {
 231                         if (vht_cap == true)
 232                                 snprintf(iwe.u.name, IFNAMSIZ, "IEEE 802.11AC");
 233                         else if (ht_cap == true)
 234                                 snprintf(iwe.u.name, IFNAMSIZ, "IEEE 802.11an");
 235                         else
 236                                 snprintf(iwe.u.name, IFNAMSIZ, "IEEE 802.11a");
 237                 }
 238                 else
 239                 {
 240                         if (ht_cap == true)
 241                                 snprintf(iwe.u.name, IFNAMSIZ, "IEEE 802.11gn");
 242                         else
 243                                 snprintf(iwe.u.name, IFNAMSIZ, "IEEE 802.11g");
 244                 }
 245         }
 246
 247         start = iwe_stream_add_event(info, start, stop, &iwe, IW_EV_CHAR_LEN);
 248
 249           /* Add mode */
 250         if (pnetwork->network.Reserved[0] == 2) /*  Probe Request */
 251         {
 252                 cap = 0;
 253         }
 254         else
 255         {
 256                 __le16 le_tmp;
 257
 258                 iwe.cmd = SIOCGIWMODE;
 259                 memcpy((u8 *)&le_tmp, rtw_get_capability_from_ie(pnetwork->network.IEs), 2);
 260                 cap = le16_to_cpu(le_tmp);
 261         }
 262
 263         if (cap & (WLAN_CAPABILITY_IBSS |WLAN_CAPABILITY_BSS)) {
 264                 if (cap & WLAN_CAPABILITY_BSS)
 265                         iwe.u.mode = IW_MODE_MASTER;
 266                 else
 267                         iwe.u.mode = IW_MODE_ADHOC;
 268
 269                 start = iwe_stream_add_event(info, start, stop, &iwe, IW_EV_UINT_LEN);
 270         }
 271
 272         if (pnetwork->network.Configuration.DSConfig<1 /*|| pnetwork->network.Configuration.DSConfig>14*/)
 273                 pnetwork->network.Configuration.DSConfig = 1;
 274
 275          /* Add frequency/channel */
 276         iwe.cmd = SIOCGIWFREQ;
 277         iwe.u.freq.m = rtw_ch2freq(pnetwork->network.Configuration.DSConfig) * 100000;
 278         iwe.u.freq.e = 1;
 279         iwe.u.freq.i = pnetwork->network.Configuration.DSConfig;
 280         start = iwe_stream_add_event(info, start, stop, &iwe, IW_EV_FREQ_LEN);
 281
 282         /* Add encryption capability */
 283         iwe.cmd = SIOCGIWENCODE;
 284         if (cap & WLAN_CAPABILITY_PRIVACY)
 285                 iwe.u.data.flags = IW_ENCODE_ENABLED | IW_ENCODE_NOKEY;
 286         else
 287                 iwe.u.data.flags = IW_ENCODE_DISABLED;
 288         iwe.u.data.length = 0;
 289         start = iwe_stream_add_point(info, start, stop, &iwe, pnetwork->network.Ssid.Ssid);
 290
 291         /*Add basic and extended rates */
 292         max_rate = 0;
 293         custom = kzalloc(MAX_CUSTOM_LEN, GFP_ATOMIC);
 294         if (!custom)
 295                 return start;
 296         p = custom;
 297         p += snprintf(p, MAX_CUSTOM_LEN - (p - custom), " Rates (Mb/s): ");
 298         while (pnetwork->network.SupportedRates[i]!= 0)
 299         {
 300                 rate = pnetwork->network.SupportedRates[i]&0x7F;
 301                 if (rate > max_rate)
 302                         max_rate = rate;
 303                 p += snprintf(p, MAX_CUSTOM_LEN - (p - custom),
 304                               "%d%s ", rate >> 1, (rate & 1) ? ".5" : "");
 305                 i++;
 306         }
 307
 308         if (vht_cap == true) {
 309                 max_rate = vht_data_rate;
 310         }
 311         else if (ht_cap == true)
 312         {
 313                 if (mcs_rate&0x8000)/* MCS15 */
 314                 {
 315                         max_rate = (bw_40MHz) ? ((short_GI)?300:270):((short_GI)?144:130);
 316
 317                 }
 318                 else if (mcs_rate&0x0080)/* MCS7 */
 319                 {
 320                         max_rate = (bw_40MHz) ? ((short_GI)?150:135):((short_GI)?72:65);
 321                 }
 322                 else/* default MCS7 */
 323                 {
 324                         /* DBG_871X("wx_get_scan, mcs_rate_bitmap = 0x%x\n", mcs_rate); */
 325                         max_rate = (bw_40MHz) ? ((short_GI)?150:135):((short_GI)?72:65);
 326                 }
 327
 328                 max_rate = max_rate*2;/* Mbps/2; */
 329         }
 330
 331         iwe.cmd = SIOCGIWRATE;
 332         iwe.u.bitrate.fixed = iwe.u.bitrate.disabled = 0;
 333         iwe.u.bitrate.value = max_rate * 500000;
 334         start = iwe_stream_add_event(info, start, stop, &iwe, IW_EV_PARAM_LEN);
 335
 336         /* parsing WPA/WPA2 IE */
 337         if (pnetwork->network.Reserved[0] != 2) /*  Probe Request */
 338         {
 339                 u8 *buf;
 340                 u8 wpa_ie[255], rsn_ie[255];
 341                 u16 wpa_len = 0, rsn_len = 0;
 342                 u8 *p;
 343                 sint out_len = 0;
 344                 out_len =rtw_get_sec_ie(pnetwork->network.IEs , pnetwork->network.IELength, rsn_ie,&rsn_len, wpa_ie,&wpa_len);
 345                 RT_TRACE(_module_rtl871x_mlme_c_, _drv_info_, ("rtw_wx_get_scan: ssid =%s\n", pnetwork->network.Ssid.Ssid));
 346                 RT_TRACE(_module_rtl871x_mlme_c_, _drv_info_, ("rtw_wx_get_scan: wpa_len =%d rsn_len =%d\n", wpa_len, rsn_len));
 347
 348                 buf = kzalloc(MAX_WPA_IE_LEN*2, GFP_KERNEL);
 349                 if (!buf)
 350                         return start;
 351                 if (wpa_len > 0) {
 352                         p =buf;
 353                         p += sprintf(p, "wpa_ie =");
 354                         for (i = 0; i < wpa_len; i++) {
 355                                 p += sprintf(p, "%02x", wpa_ie[i]);
 356                         }
 357
 358                         if (wpa_len > 100) {
 359                                 printk("-----------------Len %d----------------\n", wpa_len);
 360                                 for (i = 0; i < wpa_len; i++) {
 361                                         printk("%02x ", wpa_ie[i]);
 362                                 }
 363                                 printk("\n");
 364                                 printk("-----------------Len %d----------------\n", wpa_len);
 365                         }
 366
 367                         memset(&iwe, 0, sizeof(iwe));
 368                         iwe.cmd = IWEVCUSTOM;
 369                         iwe.u.data.length = strlen(buf);
 370                         start = iwe_stream_add_point(info, start, stop, &iwe, buf);
 371
 372                         memset(&iwe, 0, sizeof(iwe));
 373                         iwe.cmd =IWEVGENIE;
 374                         iwe.u.data.length = wpa_len;
 375                         start = iwe_stream_add_point(info, start, stop, &iwe, wpa_ie);
 376                 }
 377                 if (rsn_len > 0) {
 378                         p = buf;
 379                         memset(buf, 0, MAX_WPA_IE_LEN*2);
 380                         p += sprintf(p, "rsn_ie =");
 381                         for (i = 0; i < rsn_len; i++)
 382                                 p += sprintf(p, "%02x", rsn_ie[i]);
 383                         memset(&iwe, 0, sizeof(iwe));
 384                         iwe.cmd = IWEVCUSTOM;
 385                         iwe.u.data.length = strlen(buf);
 386                         start = iwe_stream_add_point(info, start, stop, &iwe, buf);
 387
 388                         memset(&iwe, 0, sizeof(iwe));
 389                         iwe.cmd =IWEVGENIE;
 390                         iwe.u.data.length = rsn_len;
 391                         start = iwe_stream_add_point(info, start, stop, &iwe, rsn_ie);
 392                 }
 393                 kfree(buf);
 394         }
 395
 396         { /* parsing WPS IE */
 397                 uint cnt = 0, total_ielen;
 398                 u8 *wpsie_ptr = NULL;
 399                 uint wps_ielen = 0;
 400
 401                 u8 *ie_ptr = pnetwork->network.IEs + ie_offset;
 402                 total_ielen = pnetwork->network.IELength - ie_offset;
 403
 404                 if (pnetwork->network.Reserved[0] == 2) /*  Probe Request */
 405                 {
 406                         ie_ptr = pnetwork->network.IEs;
 407                         total_ielen = pnetwork->network.IELength;
 408                 }
 409                 else     /*  Beacon or Probe Respones */
 410                 {
 411                         ie_ptr = pnetwork->network.IEs + _FIXED_IE_LENGTH_;
 412                         total_ielen = pnetwork->network.IELength - _FIXED_IE_LENGTH_;
 413                 }
 414
 415                 while (cnt < total_ielen)
 416                 {
 417                         if (rtw_is_wps_ie(&ie_ptr[cnt], &wps_ielen) && (wps_ielen>2))
 418                         {
 419                                 wpsie_ptr = &ie_ptr[cnt];
 420                                 iwe.cmd =IWEVGENIE;
 421                                 iwe.u.data.length = (u16)wps_ielen;
 422                                 start = iwe_stream_add_point(info, start, stop, &iwe, wpsie_ptr);
 423                         }
 424                         cnt+=ie_ptr[cnt+1]+2; /* goto next */
 425                 }
 426         }
 427
 428         /* Add quality statistics */
 429         iwe.cmd = IWEVQUAL;
 430         iwe.u.qual.updated = IW_QUAL_QUAL_UPDATED | IW_QUAL_LEVEL_UPDATED
 431         #if defined(CONFIG_SIGNAL_DISPLAY_DBM) && defined(CONFIG_BACKGROUND_NOISE_MONITOR)
 432                 | IW_QUAL_NOISE_UPDATED
 433         #else
 434                 | IW_QUAL_NOISE_INVALID
 435         #endif
 436         #ifdef CONFIG_SIGNAL_DISPLAY_DBM
 437                 | IW_QUAL_DBM
 438         #endif
 439         ;
 440
 441         if (check_fwstate(pmlmepriv, _FW_LINKED) == true &&
 442                 is_same_network(&pmlmepriv->cur_network.network, &pnetwork->network, 0)) {
 443                 ss = padapter->recvpriv.signal_strength;
 444                 sq = padapter->recvpriv.signal_qual;
 445         } else {
 446                 ss = pnetwork->network.PhyInfo.SignalStrength;
 447                 sq = pnetwork->network.PhyInfo.SignalQuality;
 448         }
 449
 450
 451         #ifdef CONFIG_SIGNAL_DISPLAY_DBM
 452         iwe.u.qual.level = (u8) translate_percentage_to_dbm(ss);/* dbm */
 453         #else
 454         #ifdef CONFIG_SKIP_SIGNAL_SCALE_MAPPING
 455         {
 456                 /* Do signal scale mapping when using percentage as the unit of signal strength, since the scale mapping is skipped in odm */
 457
 458                 struct hal_com_data *pHal = GET_HAL_DATA(padapter);
 459
 460                 iwe.u.qual.level = (u8)odm_SignalScaleMapping(&pHal->odmpriv, ss);
 461         }
 462         #else
 463         iwe.u.qual.level = (u8)ss;/*  */
 464         #endif
 465         #endif
 466
 467         iwe.u.qual.qual = (u8)sq;   /*  signal quality */
 468
 469         #if defined(CONFIG_SIGNAL_DISPLAY_DBM) && defined(CONFIG_BACKGROUND_NOISE_MONITOR)
 470         {
 471                 s16 tmp_noise = 0;
 472                 rtw_hal_get_odm_var(padapter, HAL_ODM_NOISE_MONITOR,&(pnetwork->network.Configuration.DSConfig), &(tmp_noise));
 473                 iwe.u.qual.noise = tmp_noise ;
 474         }
 475         #else
 476         iwe.u.qual.noise = 0; /*  noise level */
 477         #endif
 478
 479         /* DBG_871X("iqual =%d, ilevel =%d, inoise =%d, iupdated =%d\n", iwe.u.qual.qual, iwe.u.qual.level , iwe.u.qual.noise, iwe.u.qual.updated); */
 480
 481         start = iwe_stream_add_event(info, start, stop, &iwe, IW_EV_QUAL_LEN);
 482
 483         {
 484                 u8 *buf;
 485                 u8 *p, *pos;
 486
 487                 buf = kzalloc(MAX_WPA_IE_LEN, GFP_KERNEL);
 488                 if (!buf)
 489                         goto exit;
 490                 p = buf;
 491                 pos = pnetwork->network.Reserved;
 492                 p += sprintf(p, "fm =%02X%02X", pos[1], pos[0]);
 493                 memset(&iwe, 0, sizeof(iwe));
 494                 iwe.cmd = IWEVCUSTOM;
 495                 iwe.u.data.length = strlen(buf);
 496                 start = iwe_stream_add_point(info, start, stop, &iwe, buf);
 497                 kfree(buf);
 498         }
 499 exit:
 500         kfree(custom);
 501
 502         return start;
 503 }
 504
 505 static int wpa_set_auth_algs(struct net_device *dev, u32 value)
 506 {
 507         struct adapter *padapter = (struct adapter *) rtw_netdev_priv(dev);
 508         int ret = 0;
 509
 510         if ((value & AUTH_ALG_SHARED_KEY) && (value & AUTH_ALG_OPEN_SYSTEM))
 511         {
 512                 DBG_871X("wpa_set_auth_algs, AUTH_ALG_SHARED_KEY and  AUTH_ALG_OPEN_SYSTEM [value:0x%x]\n", value);
 513                 padapter->securitypriv.ndisencryptstatus = Ndis802_11Encryption1Enabled;
 514                 padapter->securitypriv.ndisauthtype = Ndis802_11AuthModeAutoSwitch;
 515                 padapter->securitypriv.dot11AuthAlgrthm = dot11AuthAlgrthm_Auto;
 516         }
 517         else if (value & AUTH_ALG_SHARED_KEY)
 518         {
 519                 DBG_871X("wpa_set_auth_algs, AUTH_ALG_SHARED_KEY  [value:0x%x]\n", value);
 520                 padapter->securitypriv.ndisencryptstatus = Ndis802_11Encryption1Enabled;
 521
 522                 padapter->securitypriv.ndisauthtype = Ndis802_11AuthModeShared;
 523                 padapter->securitypriv.dot11AuthAlgrthm = dot11AuthAlgrthm_Shared;
 524         }
 525         else if (value & AUTH_ALG_OPEN_SYSTEM)
 526         {
 527                 DBG_871X("wpa_set_auth_algs, AUTH_ALG_OPEN_SYSTEM\n");
 528                 /* padapter->securitypriv.ndisencryptstatus = Ndis802_11EncryptionDisabled; */
 529                 if (padapter->securitypriv.ndisauthtype < Ndis802_11AuthModeWPAPSK)
 530                 {
 531                         padapter->securitypriv.ndisauthtype = Ndis802_11AuthModeOpen;
 532                         padapter->securitypriv.dot11AuthAlgrthm = dot11AuthAlgrthm_Open;
 533                 }
 534
 535         }
 536         else if (value & AUTH_ALG_LEAP)
 537         {
 538                 DBG_871X("wpa_set_auth_algs, AUTH_ALG_LEAP\n");
 539         }
 540         else
 541         {
 542                 DBG_871X("wpa_set_auth_algs, error!\n");
 543                 ret = -EINVAL;
 544         }
 545
 546         return ret;
 547
 548 }
 549
 550 static int wpa_set_encryption(struct net_device *dev, struct ieee_param *param, u32 param_len)
 551 {
 552         int ret = 0;
 553         u32 wep_key_idx, wep_key_len, wep_total_len;
 554         struct ndis_802_11_wep   *pwep = NULL;
 555         struct adapter *padapter = (struct adapter *)rtw_netdev_priv(dev);
 556         struct mlme_priv *pmlmepriv = &padapter->mlmepriv;
 557         struct security_priv *psecuritypriv = &padapter->securitypriv;
 558
 559         param->u.crypt.err = 0;
 560         param->u.crypt.alg[IEEE_CRYPT_ALG_NAME_LEN - 1] = '\0';
 561
 562         if (param_len < (u32) ((u8 *) param->u.crypt.key - (u8 *) param) + param->u.crypt.key_len)
 563         {
 564                 ret =  -EINVAL;
 565                 goto exit;
 566         }
 567
 568         if (param->sta_addr[0] == 0xff && param->sta_addr[1] == 0xff &&
 569             param->sta_addr[2] == 0xff && param->sta_addr[3] == 0xff &&
 570             param->sta_addr[4] == 0xff && param->sta_addr[5] == 0xff)
 571         {
 572
 573                 if (param->u.crypt.idx >= WEP_KEYS &&
 574                     param->u.crypt.idx >= BIP_MAX_KEYID) {
 575                         ret = -EINVAL;
 576                         goto exit;
 577                 }
 578         }
 579         else
 580         {
 581                 {
 582                         ret = -EINVAL;
 583                         goto exit;
 584                 }
 585         }
 586
 587         if (strcmp(param->u.crypt.alg, "WEP") == 0)
 588         {
 589                 RT_TRACE(_module_rtl871x_ioctl_os_c, _drv_err_, ("wpa_set_encryption, crypt.alg = WEP\n"));
 590                 DBG_871X("wpa_set_encryption, crypt.alg = WEP\n");
 591
 592                 padapter->securitypriv.ndisencryptstatus = Ndis802_11Encryption1Enabled;
 593                 padapter->securitypriv.dot11PrivacyAlgrthm = _WEP40_;
 594                 padapter->securitypriv.dot118021XGrpPrivacy = _WEP40_;
 595
 596                 wep_key_idx = param->u.crypt.idx;
 597                 wep_key_len = param->u.crypt.key_len;
 598
 599                 RT_TRACE(_module_rtl871x_ioctl_os_c, _drv_info_, ("(1)wep_key_idx =%d\n", wep_key_idx));
 600                 DBG_871X("(1)wep_key_idx =%d\n", wep_key_idx);
 601
 602                 if (wep_key_idx > WEP_KEYS)
 603                         return -EINVAL;
 604
 605                 RT_TRACE(_module_rtl871x_ioctl_os_c, _drv_info_, ("(2)wep_key_idx =%d\n", wep_key_idx));
 606
 607                 if (wep_key_len > 0)
 608                 {
 609                         wep_key_len = wep_key_len <= 5 ? 5 : 13;
 610                         wep_total_len = wep_key_len + FIELD_OFFSET(struct ndis_802_11_wep, KeyMaterial);
 611                         pwep =(struct ndis_802_11_wep    *) rtw_malloc(wep_total_len);
 612                         if (pwep == NULL) {
 613                                 RT_TRACE(_module_rtl871x_ioctl_os_c, _drv_err_, (" wpa_set_encryption: pwep allocate fail !!!\n"));
 614                                 goto exit;
 615                         }
 616
 617                         memset(pwep, 0, wep_total_len);
 618
 619                         pwep->KeyLength = wep_key_len;
 620                         pwep->Length = wep_total_len;
 621
 622                         if (wep_key_len == 13)
 623                         {
 624                                 padapter->securitypriv.dot11PrivacyAlgrthm = _WEP104_;
 625                                 padapter->securitypriv.dot118021XGrpPrivacy = _WEP104_;
 626                         }
 627                 }
 628                 else {
 629                         ret = -EINVAL;
 630                         goto exit;
 631                 }
 632
 633                 pwep->KeyIndex = wep_key_idx;
 634                 pwep->KeyIndex |= 0x80000000;
 635
 636                 memcpy(pwep->KeyMaterial,  param->u.crypt.key, pwep->KeyLength);
 637
 638                 if (param->u.crypt.set_tx)
 639                 {
 640                         DBG_871X("wep, set_tx = 1\n");
 641
 642                         if (rtw_set_802_11_add_wep(padapter, pwep) == (u8)_FAIL)
 643                         {
 644                                 ret = -EOPNOTSUPP ;
 645                         }
 646                 }
 647                 else
 648                 {
 649                         DBG_871X("wep, set_tx = 0\n");
 650
 651                         /* don't update "psecuritypriv->dot11PrivacyAlgrthm" and */
 652                         /* psecuritypriv->dot11PrivacyKeyIndex =keyid", but can rtw_set_key to fw/cam */
 653
 654                         if (wep_key_idx >= WEP_KEYS) {
 655                                 ret = -EOPNOTSUPP ;
 656                                 goto exit;
 657                         }
 658
 659                         memcpy(&(psecuritypriv->dot11DefKey[wep_key_idx].skey[0]), pwep->KeyMaterial, pwep->KeyLength);
 660                         psecuritypriv->dot11DefKeylen[wep_key_idx]=pwep->KeyLength;
 661                         rtw_set_key(padapter, psecuritypriv, wep_key_idx, 0, true);
 662                 }
 663
 664                 goto exit;
 665         }
 666
 667         if (padapter->securitypriv.dot11AuthAlgrthm == dot11AuthAlgrthm_8021X) /*  802_1x */
 668         {
 669                 struct sta_info * psta,*pbcmc_sta;
 670                 struct sta_priv * pstapriv = &padapter->stapriv;
 671
 672                 if (check_fwstate(pmlmepriv, WIFI_STATION_STATE | WIFI_MP_STATE) == true) /* sta mode */
 673                 {
 674                         psta = rtw_get_stainfo(pstapriv, get_bssid(pmlmepriv));
 675                         if (psta == NULL) {
 676                                 /* DEBUG_ERR(("Set wpa_set_encryption: Obtain Sta_info fail\n")); */
 677                         }
 678                         else
 679                         {
 680                                 /* Jeff: don't disable ieee8021x_blocked while clearing key */
 681                                 if (strcmp(param->u.crypt.alg, "none") != 0)
 682                                         psta->ieee8021x_blocked = false;
 683
 684                                 if ((padapter->securitypriv.ndisencryptstatus == Ndis802_11Encryption2Enabled)||
 685                                                 (padapter->securitypriv.ndisencryptstatus ==  Ndis802_11Encryption3Enabled))
 686                                 {
 687                                         psta->dot118021XPrivacy = padapter->securitypriv.dot11PrivacyAlgrthm;
 688                                 }
 689
 690                                 if (param->u.crypt.set_tx == 1)/* pairwise key */
 691                                 {
 692                                         memcpy(psta->dot118021x_UncstKey.skey,  param->u.crypt.key, (param->u.crypt.key_len>16 ?16:param->u.crypt.key_len));
 693
 694                                         if (strcmp(param->u.crypt.alg, "TKIP") == 0)/* set mic key */
 695                                         {
 696                                                 /* DEBUG_ERR(("\nset key length :param->u.crypt.key_len =%d\n", param->u.crypt.key_len)); */
 697                                                 memcpy(psta->dot11tkiptxmickey.skey, &(param->u.crypt.key[16]), 8);
 698                                                 memcpy(psta->dot11tkiprxmickey.skey, &(param->u.crypt.key[24]), 8);
 699
 700                                                 padapter->securitypriv.busetkipkey =false;
 701                                                 /* _set_timer(&padapter->securitypriv.tkip_timer, 50); */
 702                                         }
 703
 704                                         /* DEBUG_ERR((" param->u.crypt.key_len =%d\n", param->u.crypt.key_len)); */
 705                                         DBG_871X(" ~~~~set sta key:unicastkey\n");
 706
 707                                         rtw_setstakey_cmd(padapter, psta, true, true);
 708                                 }
 709                                 else/* group key */
 710                                 {
 711                                         if (strcmp(param->u.crypt.alg, "TKIP") == 0 || strcmp(param->u.crypt.alg, "CCMP") == 0)
 712                                         {
 713                                                 memcpy(padapter->securitypriv.dot118021XGrpKey[param->u.crypt.idx].skey,  param->u.crypt.key, (param->u.crypt.key_len>16 ?16:param->u.crypt.key_len));
 714                                                 /* only TKIP group key need to install this */
 715                                                 if (param->u.crypt.key_len > 16)
 716                                                 {
 717                                                         memcpy(padapter->securitypriv.dot118021XGrptxmickey[param->u.crypt.idx].skey,&(param->u.crypt.key[16]), 8);
 718                                                         memcpy(padapter->securitypriv.dot118021XGrprxmickey[param->u.crypt.idx].skey,&(param->u.crypt.key[24]), 8);
 719                                                 }
 720                                                 padapter->securitypriv.binstallGrpkey = true;
 721                                                 /* DEBUG_ERR((" param->u.crypt.key_len =%d\n", param->u.crypt.key_len)); */
 722                                                 DBG_871X(" ~~~~set sta key:groupkey\n");
 723
 724                                                 padapter->securitypriv.dot118021XGrpKeyid = param->u.crypt.idx;
 725
 726                                                 rtw_set_key(padapter,&padapter->securitypriv, param->u.crypt.idx, 1, true);
 727                                         }
 728                                         else if (strcmp(param->u.crypt.alg, "BIP") == 0)
 729                                         {
 730                                                 /* printk("BIP key_len =%d , index =%d @@@@@@@@@@@@@@@@@@\n", param->u.crypt.key_len, param->u.crypt.idx); */
 731                                                 /* save the IGTK key, length 16 bytes */
 732                                                 memcpy(padapter->securitypriv.dot11wBIPKey[param->u.crypt.idx].skey,  param->u.crypt.key, (param->u.crypt.key_len>16 ?16:param->u.crypt.key_len));
 733                                                 /*printk("IGTK key below:\n");
 734                                                 for (no = 0;no<16;no++)
 735                                                         printk(" %02x ", padapter->securitypriv.dot11wBIPKey[param->u.crypt.idx].skey[no]);
 736                                                 printk("\n");*/
 737                                                 padapter->securitypriv.dot11wBIPKeyid = param->u.crypt.idx;
 738                                                 padapter->securitypriv.binstallBIPkey = true;
 739                                                 DBG_871X(" ~~~~set sta key:IGKT\n");
 740                                         }
 741                                 }
 742                         }
 743
 744                         pbcmc_sta =rtw_get_bcmc_stainfo(padapter);
 745                         if (pbcmc_sta == NULL)
 746                         {
 747                                 /* DEBUG_ERR(("Set OID_802_11_ADD_KEY: bcmc stainfo is null\n")); */
 748                         }
 749                         else
 750                         {
 751                                 /* Jeff: don't disable ieee8021x_blocked while clearing key */
 752                                 if (strcmp(param->u.crypt.alg, "none") != 0)
 753                                         pbcmc_sta->ieee8021x_blocked = false;
 754
 755                                 if ((padapter->securitypriv.ndisencryptstatus == Ndis802_11Encryption2Enabled)||
 756                                                 (padapter->securitypriv.ndisencryptstatus ==  Ndis802_11Encryption3Enabled))
 757                                 {
 758                                         pbcmc_sta->dot118021XPrivacy = padapter->securitypriv.dot11PrivacyAlgrthm;
 759                                 }
 760                         }
 761                 }
 762                 else if (check_fwstate(pmlmepriv, WIFI_ADHOC_STATE)) /* adhoc mode */
 763                 {
 764                 }
 765         }
 766
 767 exit:
 768
 769         if (pwep) {
 770                 kfree((u8 *)pwep);
 771         }
 772         return ret;
 773 }
 774
 775 static int rtw_set_wpa_ie(struct adapter *padapter, char *pie, unsigned short ielen)
 776 {
 777         u8 *buf = NULL, *pos = NULL;
 778         int group_cipher = 0, pairwise_cipher = 0;
 779         int ret = 0;
 780         u8 null_addr[]= {0, 0, 0, 0, 0, 0};
 781
 782         if ((ielen > MAX_WPA_IE_LEN) || (pie == NULL)) {
 783                 _clr_fwstate_(&padapter->mlmepriv, WIFI_UNDER_WPS);
 784                 if (pie == NULL)
 785                         return ret;
 786                 else
 787                         return -EINVAL;
 788         }
 789
 790         if (ielen)
 791         {
 792                 buf = rtw_zmalloc(ielen);
 793                 if (buf == NULL) {
 794                         ret =  -ENOMEM;
 795                         goto exit;
 796                 }
 797
 798                 memcpy(buf, pie , ielen);
 799
 800                 /* dump */
 801                 {
 802                         int i;
 803                         DBG_871X("\n wpa_ie(length:%d):\n", ielen);
 804                         for (i = 0;i<ielen;i =i+8)
 805                                 DBG_871X("0x%.2x 0x%.2x 0x%.2x 0x%.2x 0x%.2x 0x%.2x 0x%.2x 0x%.2x\n", buf[i], buf[i+1], buf[i+2], buf[i+3], buf[i+4], buf[i+5], buf[i+6], buf[i+7]);
 806                 }
 807
 808                 pos = buf;
 809                 if (ielen < RSN_HEADER_LEN) {
 810                         RT_TRACE(_module_rtl871x_ioctl_os_c, _drv_err_, ("Ie len too short %d\n", ielen));
 811                         ret  = -1;
 812                         goto exit;
 813                 }
 814
 815                 if (rtw_parse_wpa_ie(buf, ielen, &group_cipher, &pairwise_cipher, NULL) == _SUCCESS)
 816                 {
 817                         padapter->securitypriv.dot11AuthAlgrthm = dot11AuthAlgrthm_8021X;
 818                         padapter->securitypriv.ndisauthtype =Ndis802_11AuthModeWPAPSK;
 819                         memcpy(padapter->securitypriv.supplicant_ie, &buf[0], ielen);
 820                 }
 821
 822                 if (rtw_parse_wpa2_ie(buf, ielen, &group_cipher, &pairwise_cipher, NULL) == _SUCCESS)
 823                 {
 824                         padapter->securitypriv.dot11AuthAlgrthm = dot11AuthAlgrthm_8021X;
 825                         padapter->securitypriv.ndisauthtype =Ndis802_11AuthModeWPA2PSK;
 826                         memcpy(padapter->securitypriv.supplicant_ie, &buf[0], ielen);
 827                 }
 828
 829                 if (group_cipher == 0)
 830                 {
 831                         group_cipher = WPA_CIPHER_NONE;
 832                 }
 833                 if (pairwise_cipher == 0)
 834                 {
 835                         pairwise_cipher = WPA_CIPHER_NONE;
 836                 }
 837
 838                 switch (group_cipher)
 839                 {
 840                         case WPA_CIPHER_NONE:
 841                                 padapter->securitypriv.dot118021XGrpPrivacy = _NO_PRIVACY_;
 842                                 padapter->securitypriv.ndisencryptstatus =Ndis802_11EncryptionDisabled;
 843                                 break;
 844                         case WPA_CIPHER_WEP40:
 845                                 padapter->securitypriv.dot118021XGrpPrivacy = _WEP40_;
 846                                 padapter->securitypriv.ndisencryptstatus = Ndis802_11Encryption1Enabled;
 847                                 break;
 848                         case WPA_CIPHER_TKIP:
 849                                 padapter->securitypriv.dot118021XGrpPrivacy = _TKIP_;
 850                                 padapter->securitypriv.ndisencryptstatus = Ndis802_11Encryption2Enabled;
 851                                 break;
 852                         case WPA_CIPHER_CCMP:
 853                                 padapter->securitypriv.dot118021XGrpPrivacy = _AES_;
 854                                 padapter->securitypriv.ndisencryptstatus = Ndis802_11Encryption3Enabled;
 855                                 break;
 856                         case WPA_CIPHER_WEP104:
 857                                 padapter->securitypriv.dot118021XGrpPrivacy = _WEP104_;
 858                                 padapter->securitypriv.ndisencryptstatus = Ndis802_11Encryption1Enabled;
 859                                 break;
 860                 }
 861
 862                 switch (pairwise_cipher)
 863                 {
 864                         case WPA_CIPHER_NONE:
 865                                 padapter->securitypriv.dot11PrivacyAlgrthm = _NO_PRIVACY_;
 866                                 padapter->securitypriv.ndisencryptstatus =Ndis802_11EncryptionDisabled;
 867                                 break;
 868                         case WPA_CIPHER_WEP40:
 869                                 padapter->securitypriv.dot11PrivacyAlgrthm = _WEP40_;
 870                                 padapter->securitypriv.ndisencryptstatus = Ndis802_11Encryption1Enabled;
 871                                 break;
 872                         case WPA_CIPHER_TKIP:
 873                                 padapter->securitypriv.dot11PrivacyAlgrthm = _TKIP_;
 874                                 padapter->securitypriv.ndisencryptstatus = Ndis802_11Encryption2Enabled;
 875                                 break;
 876                         case WPA_CIPHER_CCMP:
 877                                 padapter->securitypriv.dot11PrivacyAlgrthm = _AES_;
 878                                 padapter->securitypriv.ndisencryptstatus = Ndis802_11Encryption3Enabled;
 879                                 break;
 880                         case WPA_CIPHER_WEP104:
 881                                 padapter->securitypriv.dot11PrivacyAlgrthm = _WEP104_;
 882                                 padapter->securitypriv.ndisencryptstatus = Ndis802_11Encryption1Enabled;
 883                                 break;
 884                 }
 885
 886                 _clr_fwstate_(&padapter->mlmepriv, WIFI_UNDER_WPS);
 887                 {/* set wps_ie */
 888                         u16 cnt = 0;
 889                         u8 eid, wps_oui[4]={0x0, 0x50, 0xf2, 0x04};
 890
 891                         while (cnt < ielen)
 892                         {
 893                                 eid = buf[cnt];
 894
 895                                 if ((eid == _VENDOR_SPECIFIC_IE_) && (!memcmp(&buf[cnt+2], wps_oui, 4)))
 896                                 {
 897                                         DBG_871X("SET WPS_IE\n");
 898
 899                                         padapter->securitypriv.wps_ie_len = ((buf[cnt+1]+2) < MAX_WPS_IE_LEN) ? (buf[cnt+1]+2):MAX_WPS_IE_LEN;
 900
 901                                         memcpy(padapter->securitypriv.wps_ie, &buf[cnt], padapter->securitypriv.wps_ie_len);
 902
 903                                         set_fwstate(&padapter->mlmepriv, WIFI_UNDER_WPS);
 904
 905                                         cnt += buf[cnt+1]+2;
 906
 907                                         break;
 908                                 } else {
 909                                         cnt += buf[cnt+1]+2; /* goto next */
 910                                 }
 911                         }
 912                 }
 913         }
 914
 915         /* TKIP and AES disallow multicast packets until installing group key */
 916         if (padapter->securitypriv.dot11PrivacyAlgrthm == _TKIP_
 917                 || padapter->securitypriv.dot11PrivacyAlgrthm == _TKIP_WTMIC_
 918                 || padapter->securitypriv.dot11PrivacyAlgrthm == _AES_)
 919                 /* WPS open need to enable multicast */
 920                 /*  check_fwstate(&padapter->mlmepriv, WIFI_UNDER_WPS) == true) */
 921                 rtw_hal_set_hwreg(padapter, HW_VAR_OFF_RCR_AM, null_addr);
 922
 923         RT_TRACE(_module_rtl871x_ioctl_os_c, _drv_info_,
 924                  ("rtw_set_wpa_ie: pairwise_cipher = 0x%08x padapter->securitypriv.ndisencryptstatus =%d padapter->securitypriv.ndisauthtype =%d\n",
 925                   pairwise_cipher, padapter->securitypriv.ndisencryptstatus, padapter->securitypriv.ndisauthtype));
 926
 927 exit:
 928
 929         if (buf) kfree(buf);
 930
 931         return ret;
 932 }
 933
 934 static int rtw_wx_get_name(struct net_device *dev,
 935                              struct iw_request_info *info,
 936                              union iwreq_data *wrqu, char *extra)
 937 {
 938         struct adapter *padapter = (struct adapter *)rtw_netdev_priv(dev);
 939         u32 ht_ielen = 0;
 940         char *p;
 941         u8 ht_cap =false, vht_cap =false;
 942         struct  mlme_priv *pmlmepriv = &(padapter->mlmepriv);
 943         struct wlan_bssid_ex  *pcur_bss = &pmlmepriv->cur_network.network;
 944         NDIS_802_11_RATES_EX* prates = NULL;
 945
 946         RT_TRACE(_module_rtl871x_mlme_c_, _drv_info_, ("cmd_code =%x\n", info->cmd));
 947
 948         if (check_fwstate(pmlmepriv, _FW_LINKED|WIFI_ADHOC_MASTER_STATE) == true) {
 949                 /* parsing HT_CAP_IE */
 950                 p = rtw_get_ie(&pcur_bss->IEs[12], _HT_CAPABILITY_IE_, &ht_ielen, pcur_bss->IELength-12);
 951                 if (p && ht_ielen>0)
 952                 {
 953                         ht_cap = true;
 954                 }
 955
 956                 prates = &pcur_bss->SupportedRates;
 957
 958                 if (rtw_is_cckratesonly_included((u8 *)prates) == true)
 959                 {
 960                         if (ht_cap == true)
 961                                 snprintf(wrqu->name, IFNAMSIZ, "IEEE 802.11bn");
 962                         else
 963                                 snprintf(wrqu->name, IFNAMSIZ, "IEEE 802.11b");
 964                 }
 965                 else if ((rtw_is_cckrates_included((u8 *)prates)) == true)
 966                 {
 967                         if (ht_cap == true)
 968                                 snprintf(wrqu->name, IFNAMSIZ, "IEEE 802.11bgn");
 969                         else
 970                                 snprintf(wrqu->name, IFNAMSIZ, "IEEE 802.11bg");
 971                 }
 972                 else
 973                 {
 974                         if (pcur_bss->Configuration.DSConfig > 14)
 975                         {
 976                                 if (vht_cap == true)
 977                                         snprintf(wrqu->name, IFNAMSIZ, "IEEE 802.11AC");
 978                                 else if (ht_cap == true)
 979                                         snprintf(wrqu->name, IFNAMSIZ, "IEEE 802.11an");
 980                                 else
 981                                         snprintf(wrqu->name, IFNAMSIZ, "IEEE 802.11a");
 982                         }
 983                         else
 984                         {
 985                                 if (ht_cap == true)
 986                                         snprintf(wrqu->name, IFNAMSIZ, "IEEE 802.11gn");
 987                                 else
 988                                         snprintf(wrqu->name, IFNAMSIZ, "IEEE 802.11g");
 989                         }
 990                 }
 991         }
 992         else
 993         {
 994                 /* prates = &padapter->registrypriv.dev_network.SupportedRates; */
 995                 /* snprintf(wrqu->name, IFNAMSIZ, "IEEE 802.11g"); */
 996                 snprintf(wrqu->name, IFNAMSIZ, "unassociated");
 997         }
 998         return 0;
 999 }
1000
1001 static int rtw_wx_set_freq(struct net_device *dev,
1002                              struct iw_request_info *info,
1003                              union iwreq_data *wrqu, char *extra)
1004 {
1005         RT_TRACE(_module_rtl871x_mlme_c_, _drv_notice_, ("+rtw_wx_set_freq\n"));
1006
1007         return 0;
1008 }
1009
1010 static int rtw_wx_get_freq(struct net_device *dev,
1011                              struct iw_request_info *info,
1012                              union iwreq_data *wrqu, char *extra)
1013 {
1014         struct adapter *padapter = (struct adapter *)rtw_netdev_priv(dev);
1015         struct  mlme_priv *pmlmepriv = &(padapter->mlmepriv);
1016         struct wlan_bssid_ex  *pcur_bss = &pmlmepriv->cur_network.network;
1017
1018         if (check_fwstate(pmlmepriv, _FW_LINKED) == true)
1019         {
1020                 /* wrqu->freq.m = ieee80211_wlan_frequencies[pcur_bss->Configuration.DSConfig-1] * 100000; */
1021                 wrqu->freq.m = rtw_ch2freq(pcur_bss->Configuration.DSConfig) * 100000;
1022                 wrqu->freq.e = 1;
1023                 wrqu->freq.i = pcur_bss->Configuration.DSConfig;
1024
1025         }
1026         else {
1027                 wrqu->freq.m = rtw_ch2freq(padapter->mlmeextpriv.cur_channel) * 100000;
1028                 wrqu->freq.e = 1;
1029                 wrqu->freq.i = padapter->mlmeextpriv.cur_channel;
1030         }
1031
1032         return 0;
1033 }
1034
1035 static int rtw_wx_set_mode(struct net_device *dev, struct iw_request_info *a,
1036                              union iwreq_data *wrqu, char *b)
1037 {
1038         struct adapter *padapter = (struct adapter *)rtw_netdev_priv(dev);
1039         enum NDIS_802_11_NETWORK_INFRASTRUCTURE networkType ;
1040         int ret = 0;
1041
1042         if (_FAIL == rtw_pwr_wakeup(padapter)) {
1043                 ret = -EPERM;
1044                 goto exit;
1045         }
1046
1047         if (padapter->hw_init_completed ==false) {
1048                 ret = -EPERM;
1049                 goto exit;
1050         }
1051
1052         switch (wrqu->mode)
1053         {
1054                 case IW_MODE_AUTO:
1055                         networkType = Ndis802_11AutoUnknown;
1056                         DBG_871X("set_mode = IW_MODE_AUTO\n");
1057                         break;
1058                 case IW_MODE_ADHOC:
1059                         networkType = Ndis802_11IBSS;
1060                         DBG_871X("set_mode = IW_MODE_ADHOC\n");
1061                         break;
1062                 case IW_MODE_MASTER:
1063                         networkType = Ndis802_11APMode;
1064                         DBG_871X("set_mode = IW_MODE_MASTER\n");
1065                         /* rtw_setopmode_cmd(padapter, networkType, true); */
1066                         break;
1067                 case IW_MODE_INFRA:
1068                         networkType = Ndis802_11Infrastructure;
1069                         DBG_871X("set_mode = IW_MODE_INFRA\n");
1070                         break;
1071
1072                 default :
1073                         ret = -EINVAL;;
1074                         RT_TRACE(_module_rtl871x_ioctl_os_c, _drv_err_, ("\n Mode: %s is not supported \n", iw_operation_mode[wrqu->mode]));
1075                         goto exit;
1076         }
1077
1078 /*
1079         if (Ndis802_11APMode == networkType)
1080         {
1081                 rtw_setopmode_cmd(padapter, networkType, true);
1082         }
1083         else
1084         {
1085                 rtw_setopmode_cmd(padapter, Ndis802_11AutoUnknown, true);
1086         }
1087 */
1088
1089         if (rtw_set_802_11_infrastructure_mode(padapter, networkType) ==false) {
1090
1091                 ret = -EPERM;
1092                 goto exit;
1093
1094         }
1095
1096         rtw_setopmode_cmd(padapter, networkType, true);
1097
1098 exit:
1099         return ret;
1100 }
1101
1102 static int rtw_wx_get_mode(struct net_device *dev, struct iw_request_info *a,
1103                              union iwreq_data *wrqu, char *b)
1104 {
1105         struct adapter *padapter = (struct adapter *)rtw_netdev_priv(dev);
1106         struct  mlme_priv *pmlmepriv = &(padapter->mlmepriv);
1107
1108         RT_TRACE(_module_rtl871x_mlme_c_, _drv_info_, (" rtw_wx_get_mode\n"));
1109
1110         if (check_fwstate(pmlmepriv, WIFI_STATION_STATE) == true)
1111         {
1112                 wrqu->mode = IW_MODE_INFRA;
1113         }
1114         else if  ((check_fwstate(pmlmepriv, WIFI_ADHOC_MASTER_STATE) == true) ||
1115                        (check_fwstate(pmlmepriv, WIFI_ADHOC_STATE) == true))
1116
1117         {
1118                 wrqu->mode = IW_MODE_ADHOC;
1119         }
1120         else if (check_fwstate(pmlmepriv, WIFI_AP_STATE) == true)
1121         {
1122                 wrqu->mode = IW_MODE_MASTER;
1123         }
1124         else
1125         {
1126                 wrqu->mode = IW_MODE_AUTO;
1127         }
1128         return 0;
1129 }
1130
1131
1132 static int rtw_wx_set_pmkid(struct net_device *dev,
1133                              struct iw_request_info *a,
1134                              union iwreq_data *wrqu, char *extra)
1135 {
1136         struct adapter *padapter = (struct adapter *)rtw_netdev_priv(dev);
1137         u8          j, blInserted = false;
1138         int         intReturn = false;
1139         struct security_priv *psecuritypriv = &padapter->securitypriv;
1140         struct iw_pmksa*  pPMK = (struct iw_pmksa*) extra;
1141         u8     strZeroMacAddress[ ETH_ALEN ] = { 0x00 };
1142         u8     strIssueBssid[ ETH_ALEN ] = { 0x00 };
1143
1144         /*
1145         There are the BSSID information in the bssid.sa_data array.
1146         If cmd is IW_PMKSA_FLUSH, it means the wpa_suppplicant wants to clear all the PMKID information.
1147         If cmd is IW_PMKSA_ADD, it means the wpa_supplicant wants to add a PMKID/BSSID to driver.
1148         If cmd is IW_PMKSA_REMOVE, it means the wpa_supplicant wants to remove a PMKID/BSSID from driver.
1149         */
1150
1151         memcpy(strIssueBssid, pPMK->bssid.sa_data, ETH_ALEN);
1152         if (pPMK->cmd == IW_PMKSA_ADD)
1153         {
1154                 DBG_871X("[rtw_wx_set_pmkid] IW_PMKSA_ADD!\n");
1155                 if (!memcmp(strIssueBssid, strZeroMacAddress, ETH_ALEN))
1156                 {
1157                     return(intReturn);
1158                 }
1159                 else
1160                 {
1161                     intReturn = true;
1162                 }
1163                 blInserted = false;
1164
1165                 /* overwrite PMKID */
1166                 for (j = 0 ; j<NUM_PMKID_CACHE; j++)
1167                 {
1168                         if (!memcmp(psecuritypriv->PMKIDList[j].Bssid, strIssueBssid, ETH_ALEN))
1169                         { /*  BSSID is matched, the same AP => rewrite with new PMKID. */
1170
1171                                 DBG_871X("[rtw_wx_set_pmkid] BSSID exists in the PMKList.\n");
1172
1173                                 memcpy(psecuritypriv->PMKIDList[j].PMKID, pPMK->pmkid, IW_PMKID_LEN);
1174                                 psecuritypriv->PMKIDList[ j ].bUsed = true;
1175                                 psecuritypriv->PMKIDIndex = j+1;
1176                                 blInserted = true;
1177                                 break;
1178                         }
1179                 }
1180
1181                 if (!blInserted)
1182                 {
1183                     /*  Find a new entry */
1184                     DBG_871X("[rtw_wx_set_pmkid] Use the new entry index = %d for this PMKID.\n",
1185                             psecuritypriv->PMKIDIndex);
1186
1187                     memcpy(psecuritypriv->PMKIDList[psecuritypriv->PMKIDIndex].Bssid, strIssueBssid, ETH_ALEN);
1188                     memcpy(psecuritypriv->PMKIDList[psecuritypriv->PMKIDIndex].PMKID, pPMK->pmkid, IW_PMKID_LEN);
1189
1190                     psecuritypriv->PMKIDList[ psecuritypriv->PMKIDIndex ].bUsed = true;
1191                     psecuritypriv->PMKIDIndex++ ;
1192                     if (psecuritypriv->PMKIDIndex == 16)
1193                     {
1194                         psecuritypriv->PMKIDIndex = 0;
1195                     }
1196                 }
1197         }
1198         else if (pPMK->cmd == IW_PMKSA_REMOVE)
1199         {
1200                 DBG_871X("[rtw_wx_set_pmkid] IW_PMKSA_REMOVE!\n");
1201                 intReturn = true;
1202                 for (j = 0 ; j<NUM_PMKID_CACHE; j++)
1203                 {
1204                         if (!memcmp(psecuritypriv->PMKIDList[j].Bssid, strIssueBssid, ETH_ALEN))
1205                         { /*  BSSID is matched, the same AP => Remove this PMKID information and reset it. */
1206                                 memset(psecuritypriv->PMKIDList[ j ].Bssid, 0x00, ETH_ALEN);
1207                                 psecuritypriv->PMKIDList[ j ].bUsed = false;
1208                                 break;
1209                         }
1210                 }
1211         }
1212         else if (pPMK->cmd == IW_PMKSA_FLUSH)
1213         {
1214             DBG_871X("[rtw_wx_set_pmkid] IW_PMKSA_FLUSH!\n");
1215             memset(&psecuritypriv->PMKIDList[ 0 ], 0x00, sizeof(RT_PMKID_LIST) * NUM_PMKID_CACHE);
1216             psecuritypriv->PMKIDIndex = 0;
1217             intReturn = true;
1218         }
1219         return intReturn;
1220 }
1221
1222 static int rtw_wx_get_sens(struct net_device *dev,
1223                              struct iw_request_info *info,
1224                              union iwreq_data *wrqu, char *extra)
1225 {
1226         {
1227                 wrqu->sens.value = 0;
1228                 wrqu->sens.fixed = 0;   /* no auto select */
1229                 wrqu->sens.disabled = 1;
1230         }
1231         return 0;
1232 }
1233
1234 static int rtw_wx_get_range(struct net_device *dev,
1235                                 struct iw_request_info *info,
1236                                 union iwreq_data *wrqu, char *extra)
1237 {
1238         struct iw_range *range = (struct iw_range *)extra;
1239         struct adapter *padapter = (struct adapter *)rtw_netdev_priv(dev);
1240         struct mlme_ext_priv *pmlmeext = &padapter->mlmeextpriv;
1241
1242         u16 val;
1243         int i;
1244
1245         RT_TRACE(_module_rtl871x_mlme_c_, _drv_info_, ("rtw_wx_get_range. cmd_code =%x\n", info->cmd));
1246
1247         wrqu->data.length = sizeof(*range);
1248         memset(range, 0, sizeof(*range));
1249
1250         /* Let's try to keep this struct in the same order as in
1251          * linux/include/wireless.h
1252          */
1253
1254         /* TODO: See what values we can set, and remove the ones we can't
1255          * set, or fill them with some default data.
1256          */
1257
1258         /* ~5 Mb/s real (802.11b) */
1259         range->throughput = 5 * 1000 * 1000;
1260
1261         /* signal level threshold range */
1262
1263         /* percent values between 0 and 100. */
1264         range->max_qual.qual = 100;
1265         range->max_qual.level = 100;
1266         range->max_qual.noise = 100;
1267         range->max_qual.updated = 7; /* Updated all three */
1268
1269
1270         range->avg_qual.qual = 92; /* > 8% missed beacons is 'bad' */
1271         /* TODO: Find real 'good' to 'bad' threshol value for RSSI */
1272         range->avg_qual.level = 256 - 78;
1273         range->avg_qual.noise = 0;
1274         range->avg_qual.updated = 7; /* Updated all three */
1275
1276         range->num_bitrates = RATE_COUNT;
1277
1278         for (i = 0; i < RATE_COUNT && i < IW_MAX_BITRATES; i++) {
1279                 range->bitrate[i] = rtw_rates[i];
1280         }
1281
1282         range->min_frag = MIN_FRAG_THRESHOLD;
1283         range->max_frag = MAX_FRAG_THRESHOLD;
1284
1285         range->pm_capa = 0;
1286
1287         range->we_version_compiled = WIRELESS_EXT;
1288         range->we_version_source = 16;
1289
1290         for (i = 0, val = 0; i < MAX_CHANNEL_NUM; i++) {
1291
1292                 /*  Include only legal frequencies for some countries */
1293                 if (pmlmeext->channel_set[i].ChannelNum != 0)
1294                 {
1295                         range->freq[val].i = pmlmeext->channel_set[i].ChannelNum;
1296                         range->freq[val].m = rtw_ch2freq(pmlmeext->channel_set[i].ChannelNum) * 100000;
1297                         range->freq[val].e = 1;
1298                         val++;
1299                 }
1300
1301                 if (val == IW_MAX_FREQUENCIES)
1302                         break;
1303         }
1304
1305         range->num_channels = val;
1306         range->num_frequency = val;
1307
1308 /*  Commented by Albert 2009/10/13 */
1309 /*  The following code will proivde the security capability to network manager. */
1310 /*  If the driver doesn't provide this capability to network manager, */
1311 /*  the WPA/WPA2 routers can't be choosen in the network manager. */
1312
1313 /*
1314 #define IW_SCAN_CAPA_NONE               0x00
1315 #define IW_SCAN_CAPA_ESSID              0x01
1316 #define IW_SCAN_CAPA_BSSID              0x02
1317 #define IW_SCAN_CAPA_CHANNEL    0x04
1318 #define IW_SCAN_CAPA_MODE               0x08
1319 #define IW_SCAN_CAPA_RATE               0x10
1320 #define IW_SCAN_CAPA_TYPE               0x20
1321 #define IW_SCAN_CAPA_TIME               0x40
1322 */
1323
1324         range->enc_capa = IW_ENC_CAPA_WPA|IW_ENC_CAPA_WPA2|
1325                           IW_ENC_CAPA_CIPHER_TKIP|IW_ENC_CAPA_CIPHER_CCMP;
1326
1327         range->scan_capa = IW_SCAN_CAPA_ESSID | IW_SCAN_CAPA_TYPE |IW_SCAN_CAPA_BSSID|
1328                                         IW_SCAN_CAPA_CHANNEL|IW_SCAN_CAPA_MODE|IW_SCAN_CAPA_RATE;
1329
1330         return 0;
1331 }
1332
1333 /* set bssid flow */
1334 /* s1. rtw_set_802_11_infrastructure_mode() */
1335 /* s2. rtw_set_802_11_authentication_mode() */
1336 /* s3. set_802_11_encryption_mode() */
1337 /* s4. rtw_set_802_11_bssid() */
1338 static int rtw_wx_set_wap(struct net_device *dev,
1339                          struct iw_request_info *info,
1340                          union iwreq_data *awrq,
1341                          char *extra)
1342 {
1343         uint ret = 0;
1344         struct adapter *padapter = (struct adapter *)rtw_netdev_priv(dev);
1345         struct sockaddr *temp = (struct sockaddr *)awrq;
1346         struct  mlme_priv *pmlmepriv = &(padapter->mlmepriv);
1347         struct list_head        *phead;
1348         u8 *dst_bssid, *src_bssid;
1349         struct __queue  *queue  = &(pmlmepriv->scanned_queue);
1350         struct  wlan_network    *pnetwork = NULL;
1351         enum NDIS_802_11_AUTHENTICATION_MODE    authmode;
1352
1353         rtw_ps_deny(padapter, PS_DENY_JOIN);
1354         if (_FAIL == rtw_pwr_wakeup(padapter))
1355         {
1356                 ret = -1;
1357                 goto exit;
1358         }
1359
1360         if (!padapter->bup) {
1361                 ret = -1;
1362                 goto exit;
1363         }
1364
1365
1366         if (temp->sa_family != ARPHRD_ETHER) {
1367                 ret = -EINVAL;
1368                 goto exit;
1369         }
1370
1371         authmode = padapter->securitypriv.ndisauthtype;
1372         spin_lock_bh(&queue->lock);
1373         phead = get_list_head(queue);
1374         pmlmepriv->pscanned = get_next(phead);
1375
1376         while (1) {
1377                 if (phead == pmlmepriv->pscanned)
1378                         break;
1379
1380                 pnetwork = LIST_CONTAINOR(pmlmepriv->pscanned, struct wlan_network, list);
1381
1382                 pmlmepriv->pscanned = get_next(pmlmepriv->pscanned);
1383
1384                 dst_bssid = pnetwork->network.MacAddress;
1385
1386                 src_bssid = temp->sa_data;
1387
1388                 if ((!memcmp(dst_bssid, src_bssid, ETH_ALEN)))
1389                 {
1390                         if (!rtw_set_802_11_infrastructure_mode(padapter, pnetwork->network.InfrastructureMode))
1391                         {
1392                                 ret = -1;
1393                                 spin_unlock_bh(&queue->lock);
1394                                 goto exit;
1395                         }
1396
1397                                 break;
1398                 }
1399
1400         }
1401         spin_unlock_bh(&queue->lock);
1402
1403         rtw_set_802_11_authentication_mode(padapter, authmode);
1404         /* set_802_11_encryption_mode(padapter, padapter->securitypriv.ndisencryptstatus); */
1405         if (rtw_set_802_11_bssid(padapter, temp->sa_data) == false) {
1406                 ret = -1;
1407                 goto exit;
1408         }
1409
1410 exit:
1411
1412         rtw_ps_deny_cancel(padapter, PS_DENY_JOIN);
1413
1414         return ret;
1415 }
1416
1417 static int rtw_wx_get_wap(struct net_device *dev,
1418                             struct iw_request_info *info,
1419                             union iwreq_data *wrqu, char *extra)
1420 {
1421
1422         struct adapter *padapter = (struct adapter *)rtw_netdev_priv(dev);
1423         struct  mlme_priv *pmlmepriv = &(padapter->mlmepriv);
1424         struct wlan_bssid_ex  *pcur_bss = &pmlmepriv->cur_network.network;
1425
1426         wrqu->ap_addr.sa_family = ARPHRD_ETHER;
1427
1428         memset(wrqu->ap_addr.sa_data, 0, ETH_ALEN);
1429
1430         RT_TRACE(_module_rtl871x_mlme_c_, _drv_info_, ("rtw_wx_get_wap\n"));
1431
1432         if  (((check_fwstate(pmlmepriv, _FW_LINKED)) == true) ||
1433                         ((check_fwstate(pmlmepriv, WIFI_ADHOC_MASTER_STATE)) == true) ||
1434                         ((check_fwstate(pmlmepriv, WIFI_AP_STATE)) == true))
1435         {
1436
1437                 memcpy(wrqu->ap_addr.sa_data, pcur_bss->MacAddress, ETH_ALEN);
1438         }
1439         else
1440         {
1441                 memset(wrqu->ap_addr.sa_data, 0, ETH_ALEN);
1442         }
1443
1444         return 0;
1445 }
1446
1447 static int rtw_wx_set_mlme(struct net_device *dev,
1448                              struct iw_request_info *info,
1449                              union iwreq_data *wrqu, char *extra)
1450 {
1451         int ret = 0;
1452         u16 reason;
1453         struct adapter *padapter = (struct adapter *)rtw_netdev_priv(dev);
1454         struct iw_mlme *mlme = (struct iw_mlme *) extra;
1455
1456
1457         if (mlme == NULL)
1458                 return -1;
1459
1460         DBG_871X("%s\n", __func__);
1461
1462         reason = mlme->reason_code;
1463
1464         DBG_871X("%s, cmd =%d, reason =%d\n", __func__, mlme->cmd, reason);
1465
1466         switch (mlme->cmd)
1467         {
1468         case IW_MLME_DEAUTH:
1469                 if (!rtw_set_802_11_disassociate(padapter))
1470                         ret = -1;
1471                 break;
1472         case IW_MLME_DISASSOC:
1473                 if (!rtw_set_802_11_disassociate(padapter))
1474                         ret = -1;
1475                 break;
1476         default:
1477                 return -EOPNOTSUPP;
1478         }
1479
1480         return ret;
1481 }
1482
1483 static int rtw_wx_set_scan(struct net_device *dev, struct iw_request_info *a,
1484                              union iwreq_data *wrqu, char *extra)
1485 {
1486         u8 _status = false;
1487         int ret = 0;
1488         struct adapter *padapter = (struct adapter *)rtw_netdev_priv(dev);
1489         struct mlme_priv *pmlmepriv = &padapter->mlmepriv;
1490         struct ndis_802_11_ssid ssid[RTW_SSID_SCAN_AMOUNT];
1491         RT_TRACE(_module_rtl871x_mlme_c_, _drv_info_, ("rtw_wx_set_scan\n"));
1492
1493         #ifdef DBG_IOCTL
1494         DBG_871X("DBG_IOCTL %s:%d\n", __func__, __LINE__);
1495         #endif
1496
1497         rtw_ps_deny(padapter, PS_DENY_SCAN);
1498         if (_FAIL == rtw_pwr_wakeup(padapter))
1499         {
1500                 ret = -1;
1501                 goto exit;
1502         }
1503
1504         if (padapter->bDriverStopped) {
1505                 DBG_871X("bDriverStopped =%d\n", padapter->bDriverStopped);
1506                 ret = -1;
1507                 goto exit;
1508         }
1509
1510         if (!padapter->bup) {
1511                 ret = -1;
1512                 goto exit;
1513         }
1514
1515         if (padapter->hw_init_completed ==false) {
1516                 ret = -1;
1517                 goto exit;
1518         }
1519
1520         /*  When Busy Traffic, driver do not site survey. So driver return success. */
1521         /*  wpa_supplicant will not issue SIOCSIWSCAN cmd again after scan timeout. */
1522         /*  modify by thomas 2011-02-22. */
1523         if (pmlmepriv->LinkDetectInfo.bBusyTraffic == true)
1524         {
1525                 indicate_wx_scan_complete_event(padapter);
1526                 goto exit;
1527         }
1528
1529         if (check_fwstate(pmlmepriv, _FW_UNDER_SURVEY|_FW_UNDER_LINKING) == true)
1530         {
1531                 indicate_wx_scan_complete_event(padapter);
1532                 goto exit;
1533         }
1534
1535         memset(ssid, 0, sizeof(struct ndis_802_11_ssid)*RTW_SSID_SCAN_AMOUNT);
1536
1537         if (wrqu->data.length == sizeof(struct iw_scan_req))
1538         {
1539                 struct iw_scan_req *req = (struct iw_scan_req *)extra;
1540
1541                 if (wrqu->data.flags & IW_SCAN_THIS_ESSID)
1542                 {
1543                         int len = min((int)req->essid_len, IW_ESSID_MAX_SIZE);
1544
1545                         memcpy(ssid[0].Ssid, req->essid, len);
1546                         ssid[0].SsidLength = len;
1547
1548                         DBG_871X("IW_SCAN_THIS_ESSID, ssid =%s, len =%d\n", req->essid, req->essid_len);
1549
1550                         spin_lock_bh(&pmlmepriv->lock);
1551
1552                         _status = rtw_sitesurvey_cmd(padapter, ssid, 1, NULL, 0);
1553
1554                         spin_unlock_bh(&pmlmepriv->lock);
1555
1556                 }
1557                 else if (req->scan_type == IW_SCAN_TYPE_PASSIVE)
1558                 {
1559                         DBG_871X("rtw_wx_set_scan, req->scan_type == IW_SCAN_TYPE_PASSIVE\n");
1560                 }
1561
1562         }
1563         else if (wrqu->data.length >= WEXT_CSCAN_HEADER_SIZE
1564                 && !memcmp(extra, WEXT_CSCAN_HEADER, WEXT_CSCAN_HEADER_SIZE)
1565         )
1566         {
1567                 int len = wrqu->data.length -WEXT_CSCAN_HEADER_SIZE;
1568                 char *pos = extra+WEXT_CSCAN_HEADER_SIZE;
1569                 char section;
1570                 char sec_len;
1571                 int ssid_index = 0;
1572
1573                 /* DBG_871X("%s COMBO_SCAN header is recognized\n", __func__); */
1574
1575                 while (len >= 1) {
1576                         section = *(pos++); len-= 1;
1577
1578                         switch (section) {
1579                                 case WEXT_CSCAN_SSID_SECTION:
1580                                         /* DBG_871X("WEXT_CSCAN_SSID_SECTION\n"); */
1581                                         if (len < 1) {
1582                                                 len = 0;
1583                                                 break;
1584                                         }
1585
1586                                         sec_len = *(pos++); len-= 1;
1587
1588                                         if (sec_len>0 && sec_len<=len) {
1589                                                 ssid[ssid_index].SsidLength = sec_len;
1590                                                 memcpy(ssid[ssid_index].Ssid, pos, ssid[ssid_index].SsidLength);
1591                                                 /* DBG_871X("%s COMBO_SCAN with specific ssid:%s, %d\n", __func__ */
1592                                                 /*      , ssid[ssid_index].Ssid, ssid[ssid_index].SsidLength); */
1593                                                 ssid_index++;
1594                                         }
1595
1596                                         pos+=sec_len; len-=sec_len;
1597                                         break;
1598
1599
1600                                 case WEXT_CSCAN_CHANNEL_SECTION:
1601                                         /* DBG_871X("WEXT_CSCAN_CHANNEL_SECTION\n"); */
1602                                         pos+= 1; len-= 1;
1603                                         break;
1604                                 case WEXT_CSCAN_ACTV_DWELL_SECTION:
1605                                         /* DBG_871X("WEXT_CSCAN_ACTV_DWELL_SECTION\n"); */
1606                                         pos+=2; len-=2;
1607                                         break;
1608                                 case WEXT_CSCAN_PASV_DWELL_SECTION:
1609                                         /* DBG_871X("WEXT_CSCAN_PASV_DWELL_SECTION\n"); */
1610                                         pos+=2; len-=2;
1611                                         break;
1612                                 case WEXT_CSCAN_HOME_DWELL_SECTION:
1613                                         /* DBG_871X("WEXT_CSCAN_HOME_DWELL_SECTION\n"); */
1614                                         pos+=2; len-=2;
1615                                         break;
1616                                 case WEXT_CSCAN_TYPE_SECTION:
1617                                         /* DBG_871X("WEXT_CSCAN_TYPE_SECTION\n"); */
1618                                         pos+= 1; len-= 1;
1619                                         break;
1620                                 default:
1621                                         /* DBG_871X("Unknown CSCAN section %c\n", section); */
1622                                         len = 0; /*  stop parsing */
1623                         }
1624                         /* DBG_871X("len:%d\n", len); */
1625
1626                 }
1627
1628                 /* jeff: it has still some scan paramater to parse, we only do this now... */
1629                 _status = rtw_set_802_11_bssid_list_scan(padapter, ssid, RTW_SSID_SCAN_AMOUNT);
1630
1631         } else
1632
1633         {
1634                 _status = rtw_set_802_11_bssid_list_scan(padapter, NULL, 0);
1635         }
1636
1637         if (_status == false)
1638                 ret = -1;
1639
1640 exit:
1641
1642         rtw_ps_deny_cancel(padapter, PS_DENY_SCAN);
1643
1644         #ifdef DBG_IOCTL
1645         DBG_871X("DBG_IOCTL %s:%d return %d\n", __func__, __LINE__, ret);
1646         #endif
1647
1648         return ret;
1649 }
1650
1651 static int rtw_wx_get_scan(struct net_device *dev, struct iw_request_info *a,
1652                              union iwreq_data *wrqu, char *extra)
1653 {
1654         struct list_head                                        *plist, *phead;
1655         struct adapter *padapter = (struct adapter *)rtw_netdev_priv(dev);
1656         struct  mlme_priv *pmlmepriv = &(padapter->mlmepriv);
1657         struct __queue                          *queue  = &(pmlmepriv->scanned_queue);
1658         struct  wlan_network    *pnetwork = NULL;
1659         char *ev = extra;
1660         char *stop = ev + wrqu->data.length;
1661         u32 ret = 0;
1662         sint wait_status;
1663
1664         RT_TRACE(_module_rtl871x_mlme_c_, _drv_info_, ("rtw_wx_get_scan\n"));
1665         RT_TRACE(_module_rtl871x_ioctl_os_c, _drv_info_, (" Start of Query SIOCGIWSCAN .\n"));
1666
1667         #ifdef DBG_IOCTL
1668         DBG_871X("DBG_IOCTL %s:%d\n", __func__, __LINE__);
1669         #endif
1670
1671         if (adapter_to_pwrctl(padapter)->brfoffbyhw && padapter->bDriverStopped)
1672         {
1673                 ret = -EINVAL;
1674                 goto exit;
1675         }
1676
1677         wait_status = _FW_UNDER_SURVEY | _FW_UNDER_LINKING;
1678
1679         if (check_fwstate(pmlmepriv, wait_status))
1680                 return -EAGAIN;
1681
1682         spin_lock_bh(&(pmlmepriv->scanned_queue.lock));
1683
1684         phead = get_list_head(queue);
1685         plist = get_next(phead);
1686
1687         while (1)
1688         {
1689                 if (phead == plist)
1690                         break;
1691
1692                 if ((stop - ev) < SCAN_ITEM_SIZE) {
1693                         ret = -E2BIG;
1694                         break;
1695                 }
1696
1697                 pnetwork = LIST_CONTAINOR(plist, struct wlan_network, list);
1698
1699                 /* report network only if the current channel set contains the channel to which this network belongs */
1700                 if (rtw_ch_set_search_ch(padapter->mlmeextpriv.channel_set, pnetwork->network.Configuration.DSConfig) >= 0
1701                         && rtw_mlme_band_check(padapter, pnetwork->network.Configuration.DSConfig) == true
1702                         && true == rtw_validate_ssid(&(pnetwork->network.Ssid))
1703                 )
1704                 {
1705                         ev =translate_scan(padapter, a, pnetwork, ev, stop);
1706                 }
1707
1708                 plist = get_next(plist);
1709
1710         }
1711
1712         spin_unlock_bh(&(pmlmepriv->scanned_queue.lock));
1713
1714         wrqu->data.length = ev-extra;
1715         wrqu->data.flags = 0;
1716
1717 exit:
1718
1719         #ifdef DBG_IOCTL
1720         DBG_871X("DBG_IOCTL %s:%d return %d\n", __func__, __LINE__, ret);
1721         #endif
1722
1723         return ret ;
1724
1725 }
1726
1727 /* set ssid flow */
1728 /* s1. rtw_set_802_11_infrastructure_mode() */
1729 /* s2. set_802_11_authenticaion_mode() */
1730 /* s3. set_802_11_encryption_mode() */
1731 /* s4. rtw_set_802_11_ssid() */
1732 static int rtw_wx_set_essid(struct net_device *dev,
1733                               struct iw_request_info *a,
1734                               union iwreq_data *wrqu, char *extra)
1735 {
1736         struct adapter *padapter = (struct adapter *)rtw_netdev_priv(dev);
1737         struct mlme_priv *pmlmepriv = &padapter->mlmepriv;
1738         struct __queue *queue = &pmlmepriv->scanned_queue;
1739         struct list_head *phead;
1740         struct wlan_network *pnetwork = NULL;
1741         enum NDIS_802_11_AUTHENTICATION_MODE authmode;
1742         struct ndis_802_11_ssid ndis_ssid;
1743         u8 *dst_ssid, *src_ssid;
1744
1745         uint ret = 0, len;
1746
1747         #ifdef DBG_IOCTL
1748         DBG_871X("DBG_IOCTL %s:%d\n", __func__, __LINE__);
1749         #endif
1750
1751         RT_TRACE(_module_rtl871x_ioctl_os_c, _drv_info_,
1752                  ("+rtw_wx_set_essid: fw_state = 0x%08x\n", get_fwstate(pmlmepriv)));
1753
1754         rtw_ps_deny(padapter, PS_DENY_JOIN);
1755         if (_FAIL == rtw_pwr_wakeup(padapter))
1756         {
1757                 ret = -1;
1758                 goto exit;
1759         }
1760
1761         if (!padapter->bup) {
1762                 ret = -1;
1763                 goto exit;
1764         }
1765
1766         if (wrqu->essid.length > IW_ESSID_MAX_SIZE) {
1767                 ret = -E2BIG;
1768                 goto exit;
1769         }
1770
1771         if (check_fwstate(pmlmepriv, WIFI_AP_STATE)) {
1772                 ret = -1;
1773                 goto exit;
1774         }
1775
1776         authmode = padapter->securitypriv.ndisauthtype;
1777         DBG_871X("=>%s\n", __func__);
1778         if (wrqu->essid.flags && wrqu->essid.length)
1779         {
1780                 len = (wrqu->essid.length < IW_ESSID_MAX_SIZE) ? wrqu->essid.length : IW_ESSID_MAX_SIZE;
1781
1782                 if (wrqu->essid.length != 33)
1783                         DBG_871X("ssid =%s, len =%d\n", extra, wrqu->essid.length);
1784
1785                 memset(&ndis_ssid, 0, sizeof(struct ndis_802_11_ssid));
1786                 ndis_ssid.SsidLength = len;
1787                 memcpy(ndis_ssid.Ssid, extra, len);
1788                 src_ssid = ndis_ssid.Ssid;
1789
1790                 RT_TRACE(_module_rtl871x_ioctl_os_c, _drv_info_, ("rtw_wx_set_essid: ssid =[%s]\n", src_ssid));
1791                 spin_lock_bh(&queue->lock);
1792                 phead = get_list_head(queue);
1793                 pmlmepriv->pscanned = get_next(phead);
1794
1795                 while (1) {
1796                         if (phead == pmlmepriv->pscanned)
1797                         {
1798                                 RT_TRACE(_module_rtl871x_ioctl_os_c, _drv_warning_,
1799                                          ("rtw_wx_set_essid: scan_q is empty, set ssid to check if scanning again!\n"));
1800
1801                                 break;
1802                         }
1803
1804                         pnetwork = LIST_CONTAINOR(pmlmepriv->pscanned, struct wlan_network, list);
1805
1806                         pmlmepriv->pscanned = get_next(pmlmepriv->pscanned);
1807
1808                         dst_ssid = pnetwork->network.Ssid.Ssid;
1809
1810                         RT_TRACE(_module_rtl871x_ioctl_os_c, _drv_info_,
1811                                  ("rtw_wx_set_essid: dst_ssid =%s\n",
1812                                   pnetwork->network.Ssid.Ssid));
1813
1814                         if ((!memcmp(dst_ssid, src_ssid, ndis_ssid.SsidLength)) &&
1815                                 (pnetwork->network.Ssid.SsidLength ==ndis_ssid.SsidLength))
1816                         {
1817                                 RT_TRACE(_module_rtl871x_ioctl_os_c, _drv_info_,
1818                                          ("rtw_wx_set_essid: find match, set infra mode\n"));
1819
1820                                 if (check_fwstate(pmlmepriv, WIFI_ADHOC_STATE) == true)
1821                                 {
1822                                         if (pnetwork->network.InfrastructureMode != pmlmepriv->cur_network.network.InfrastructureMode)
1823                                                 continue;
1824                                 }
1825
1826                                 if (rtw_set_802_11_infrastructure_mode(padapter, pnetwork->network.InfrastructureMode) == false)
1827                                 {
1828                                         ret = -1;
1829                                         spin_unlock_bh(&queue->lock);
1830                                         goto exit;
1831                                 }
1832
1833                                 break;
1834                         }
1835                 }
1836                 spin_unlock_bh(&queue->lock);
1837                 RT_TRACE(_module_rtl871x_ioctl_os_c, _drv_info_,
1838                          ("set ssid: set_802_11_auth. mode =%d\n", authmode));
1839                 rtw_set_802_11_authentication_mode(padapter, authmode);
1840                 /* set_802_11_encryption_mode(padapter, padapter->securitypriv.ndisencryptstatus); */
1841                 if (rtw_set_802_11_ssid(padapter, &ndis_ssid) == false) {
1842                         ret = -1;
1843                         goto exit;
1844                 }
1845         }
1846
1847 exit:
1848
1849         rtw_ps_deny_cancel(padapter, PS_DENY_JOIN);
1850
1851         DBG_871X("<=%s, ret %d\n", __func__, ret);
1852
1853         #ifdef DBG_IOCTL
1854         DBG_871X("DBG_IOCTL %s:%d return %d\n", __func__, __LINE__, ret);
1855         #endif
1856
1857         return ret;
1858 }
1859
1860 static int rtw_wx_get_essid(struct net_device *dev,
1861                               struct iw_request_info *a,
1862                               union iwreq_data *wrqu, char *extra)
1863 {
1864         u32 len, ret = 0;
1865         struct adapter *padapter = (struct adapter *)rtw_netdev_priv(dev);
1866         struct  mlme_priv *pmlmepriv = &(padapter->mlmepriv);
1867         struct wlan_bssid_ex  *pcur_bss = &pmlmepriv->cur_network.network;
1868
1869         RT_TRACE(_module_rtl871x_mlme_c_, _drv_info_, ("rtw_wx_get_essid\n"));
1870
1871         if ((check_fwstate(pmlmepriv, _FW_LINKED) == true) ||
1872               (check_fwstate(pmlmepriv, WIFI_ADHOC_MASTER_STATE) == true))
1873         {
1874                 len = pcur_bss->Ssid.SsidLength;
1875
1876                 wrqu->essid.length = len;
1877
1878                 memcpy(extra, pcur_bss->Ssid.Ssid, len);
1879
1880                 wrqu->essid.flags = 1;
1881         }
1882         else
1883         {
1884                 ret = -1;
1885                 goto exit;
1886         }
1887
1888 exit:
1889         return ret;
1890 }
1891
1892 static int rtw_wx_set_rate(struct net_device *dev,
1893                               struct iw_request_info *a,
1894                               union iwreq_data *wrqu, char *extra)
1895 {
1896         int     i, ret = 0;
1897         struct adapter *padapter = (struct adapter *)rtw_netdev_priv(dev);
1898         u8 datarates[NumRates];
1899         u32 target_rate = wrqu->bitrate.value;
1900         u32 fixed = wrqu->bitrate.fixed;
1901         u32 ratevalue = 0;
1902         u8 mpdatarate[NumRates]={11, 10, 9, 8, 7, 6, 5, 4, 3, 2, 1, 0, 0xff};
1903
1904         RT_TRACE(_module_rtl871x_mlme_c_, _drv_info_, (" rtw_wx_set_rate\n"));
1905         RT_TRACE(_module_rtl871x_ioctl_os_c, _drv_info_, ("target_rate = %d, fixed = %d\n", target_rate, fixed));
1906
1907         if (target_rate == -1) {
1908                 ratevalue = 11;
1909                 goto set_rate;
1910         }
1911         target_rate = target_rate/100000;
1912
1913         switch (target_rate) {
1914                 case 10:
1915                         ratevalue = 0;
1916                         break;
1917                 case 20:
1918                         ratevalue = 1;
1919                         break;
1920                 case 55:
1921                         ratevalue = 2;
1922                         break;
1923                 case 60:
1924                         ratevalue = 3;
1925                         break;
1926                 case 90:
1927                         ratevalue = 4;
1928                         break;
1929                 case 110:
1930                         ratevalue = 5;
1931                         break;
1932                 case 120:
1933                         ratevalue = 6;
1934                         break;
1935                 case 180:
1936                         ratevalue = 7;
1937                         break;
1938                 case 240:
1939                         ratevalue = 8;
1940                         break;
1941                 case 360:
1942                         ratevalue = 9;
1943                         break;
1944                 case 480:
1945                         ratevalue = 10;
1946                         break;
1947                 case 540:
1948                         ratevalue = 11;
1949                         break;
1950                 default:
1951                         ratevalue = 11;
1952                         break;
1953         }
1954
1955 set_rate:
1956
1957         for (i = 0; i<NumRates; i++)
1958         {
1959                 if (ratevalue ==mpdatarate[i])
1960                 {
1961                         datarates[i] = mpdatarate[i];
1962                         if (fixed == 0)
1963                                 break;
1964                 }
1965                 else {
1966                         datarates[i] = 0xff;
1967                 }
1968
1969                 RT_TRACE(_module_rtl871x_ioctl_os_c, _drv_info_, ("datarate_inx =%d\n", datarates[i]));
1970         }
1971
1972         if (rtw_setdatarate_cmd(padapter, datarates) != _SUCCESS) {
1973                 RT_TRACE(_module_rtl871x_ioctl_os_c, _drv_err_, ("rtw_wx_set_rate Fail!!!\n"));
1974                 ret = -1;
1975         }
1976         return ret;
1977 }
1978
1979 static int rtw_wx_get_rate(struct net_device *dev,
1980                              struct iw_request_info *info,
1981                              union iwreq_data *wrqu, char *extra)
1982 {
1983         u16 max_rate = 0;
1984
1985         max_rate = rtw_get_cur_max_rate((struct adapter *)rtw_netdev_priv(dev));
1986
1987         if (max_rate == 0)
1988                 return -EPERM;
1989
1990         wrqu->bitrate.fixed = 0;        /* no auto select */
1991         wrqu->bitrate.value = max_rate * 100000;
1992
1993         return 0;
1994 }
1995
1996 static int rtw_wx_set_rts(struct net_device *dev,
1997                              struct iw_request_info *info,
1998                              union iwreq_data *wrqu, char *extra)
1999 {
2000         struct adapter *padapter = (struct adapter *)rtw_netdev_priv(dev);
2001
2002         if (wrqu->rts.disabled)
2003                 padapter->registrypriv.rts_thresh = 2347;
2004         else {
2005                 if (wrqu->rts.value < 0 ||
2006                     wrqu->rts.value > 2347)
2007                         return -EINVAL;
2008
2009                 padapter->registrypriv.rts_thresh = wrqu->rts.value;
2010         }
2011
2012         DBG_871X("%s, rts_thresh =%d\n", __func__, padapter->registrypriv.rts_thresh);
2013
2014         return 0;
2015 }
2016
2017 static int rtw_wx_get_rts(struct net_device *dev,
2018                              struct iw_request_info *info,
2019                              union iwreq_data *wrqu, char *extra)
2020 {
2021         struct adapter *padapter = (struct adapter *)rtw_netdev_priv(dev);
2022
2023         DBG_871X("%s, rts_thresh =%d\n", __func__, padapter->registrypriv.rts_thresh);
2024
2025         wrqu->rts.value = padapter->registrypriv.rts_thresh;
2026         wrqu->rts.fixed = 0;    /* no auto select */
2027         /* wrqu->rts.disabled = (wrqu->rts.value == DEFAULT_RTS_THRESHOLD); */
2028
2029         return 0;
2030 }
2031
2032 static int rtw_wx_set_frag(struct net_device *dev,
2033                              struct iw_request_info *info,
2034                              union iwreq_data *wrqu, char *extra)
2035 {
2036         struct adapter *padapter = (struct adapter *)rtw_netdev_priv(dev);
2037
2038         if (wrqu->frag.disabled)
2039                 padapter->xmitpriv.frag_len = MAX_FRAG_THRESHOLD;
2040         else {
2041                 if (wrqu->frag.value < MIN_FRAG_THRESHOLD ||
2042                     wrqu->frag.value > MAX_FRAG_THRESHOLD)
2043                         return -EINVAL;
2044
2045                 padapter->xmitpriv.frag_len = wrqu->frag.value & ~0x1;
2046         }
2047
2048         DBG_871X("%s, frag_len =%d\n", __func__, padapter->xmitpriv.frag_len);
2049
2050         return 0;
2051
2052 }
2053
2054 static int rtw_wx_get_frag(struct net_device *dev,
2055                              struct iw_request_info *info,
2056                              union iwreq_data *wrqu, char *extra)
2057 {
2058         struct adapter *padapter = (struct adapter *)rtw_netdev_priv(dev);
2059
2060         DBG_871X("%s, frag_len =%d\n", __func__, padapter->xmitpriv.frag_len);
2061
2062         wrqu->frag.value = padapter->xmitpriv.frag_len;
2063         wrqu->frag.fixed = 0;   /* no auto select */
2064         /* wrqu->frag.disabled = (wrqu->frag.value == DEFAULT_FRAG_THRESHOLD); */
2065
2066         return 0;
2067 }
2068
2069 static int rtw_wx_get_retry(struct net_device *dev,
2070                              struct iw_request_info *info,
2071                              union iwreq_data *wrqu, char *extra)
2072 {
2073         /* struct adapter *padapter = (struct adapter *)rtw_netdev_priv(dev); */
2074
2075
2076         wrqu->retry.value = 7;
2077         wrqu->retry.fixed = 0;  /* no auto select */
2078         wrqu->retry.disabled = 1;
2079
2080         return 0;
2081
2082 }
2083
2084 static int rtw_wx_set_enc(struct net_device *dev,
2085                             struct iw_request_info *info,
2086                             union iwreq_data *wrqu, char *keybuf)
2087 {
2088         u32 key, ret = 0;
2089         u32 keyindex_provided;
2090         struct ndis_802_11_wep   wep;
2091         enum NDIS_802_11_AUTHENTICATION_MODE authmode;
2092
2093         struct iw_point *erq = &(wrqu->encoding);
2094         struct adapter *padapter = (struct adapter *)rtw_netdev_priv(dev);
2095         struct pwrctrl_priv *pwrpriv = adapter_to_pwrctl(padapter);
2096         DBG_871X("+rtw_wx_set_enc, flags = 0x%x\n", erq->flags);
2097
2098         memset(&wep, 0, sizeof(struct ndis_802_11_wep));
2099
2100         key = erq->flags & IW_ENCODE_INDEX;
2101
2102         if (erq->flags & IW_ENCODE_DISABLED)
2103         {
2104                 DBG_871X("EncryptionDisabled\n");
2105                 padapter->securitypriv.ndisencryptstatus = Ndis802_11EncryptionDisabled;
2106                 padapter->securitypriv.dot11PrivacyAlgrthm = _NO_PRIVACY_;
2107                 padapter->securitypriv.dot118021XGrpPrivacy = _NO_PRIVACY_;
2108                 padapter->securitypriv.dot11AuthAlgrthm = dot11AuthAlgrthm_Open; /* open system */
2109                 authmode = Ndis802_11AuthModeOpen;
2110                 padapter->securitypriv.ndisauthtype =authmode;
2111
2112                 goto exit;
2113         }
2114
2115         if (key) {
2116                 if (key > WEP_KEYS)
2117                         return -EINVAL;
2118                 key--;
2119                 keyindex_provided = 1;
2120         }
2121         else
2122         {
2123                 keyindex_provided = 0;
2124                 key = padapter->securitypriv.dot11PrivacyKeyIndex;
2125                 DBG_871X("rtw_wx_set_enc, key =%d\n", key);
2126         }
2127
2128         /* set authentication mode */
2129         if (erq->flags & IW_ENCODE_OPEN)
2130         {
2131                 DBG_871X("rtw_wx_set_enc():IW_ENCODE_OPEN\n");
2132                 padapter->securitypriv.ndisencryptstatus = Ndis802_11Encryption1Enabled;/* Ndis802_11EncryptionDisabled; */
2133
2134                 padapter->securitypriv.dot11AuthAlgrthm = dot11AuthAlgrthm_Open;
2135
2136                 padapter->securitypriv.dot11PrivacyAlgrthm = _NO_PRIVACY_;
2137                 padapter->securitypriv.dot118021XGrpPrivacy = _NO_PRIVACY_;
2138                 authmode = Ndis802_11AuthModeOpen;
2139                 padapter->securitypriv.ndisauthtype =authmode;
2140         }
2141         else if (erq->flags & IW_ENCODE_RESTRICTED)
2142         {
2143                 DBG_871X("rtw_wx_set_enc():IW_ENCODE_RESTRICTED\n");
2144                 padapter->securitypriv.ndisencryptstatus = Ndis802_11Encryption1Enabled;
2145
2146                 padapter->securitypriv.dot11AuthAlgrthm = dot11AuthAlgrthm_Shared;
2147
2148                 padapter->securitypriv.dot11PrivacyAlgrthm = _WEP40_;
2149                 padapter->securitypriv.dot118021XGrpPrivacy = _WEP40_;
2150                 authmode = Ndis802_11AuthModeShared;
2151                 padapter->securitypriv.ndisauthtype =authmode;
2152         }
2153         else
2154         {
2155                 DBG_871X("rtw_wx_set_enc():erq->flags = 0x%x\n", erq->flags);
2156
2157                 padapter->securitypriv.ndisencryptstatus = Ndis802_11Encryption1Enabled;/* Ndis802_11EncryptionDisabled; */
2158                 padapter->securitypriv.dot11AuthAlgrthm = dot11AuthAlgrthm_Open; /* open system */
2159                 padapter->securitypriv.dot11PrivacyAlgrthm = _NO_PRIVACY_;
2160                 padapter->securitypriv.dot118021XGrpPrivacy = _NO_PRIVACY_;
2161                 authmode = Ndis802_11AuthModeOpen;
2162                 padapter->securitypriv.ndisauthtype =authmode;
2163         }
2164
2165         wep.KeyIndex = key;
2166         if (erq->length > 0)
2167         {
2168                 wep.KeyLength = erq->length <= 5 ? 5 : 13;
2169
2170                 wep.Length = wep.KeyLength + FIELD_OFFSET(struct ndis_802_11_wep, KeyMaterial);
2171         }
2172         else
2173         {
2174                 wep.KeyLength = 0 ;
2175
2176                 if (keyindex_provided == 1)/*  set key_id only, no given KeyMaterial(erq->length == 0). */
2177                 {
2178                         padapter->securitypriv.dot11PrivacyKeyIndex = key;
2179
2180                         DBG_871X("(keyindex_provided == 1), keyid =%d, key_len =%d\n", key, padapter->securitypriv.dot11DefKeylen[key]);
2181
2182                         switch (padapter->securitypriv.dot11DefKeylen[key])
2183                         {
2184                                 case 5:
2185                                         padapter->securitypriv.dot11PrivacyAlgrthm = _WEP40_;
2186                                         break;
2187                                 case 13:
2188                                         padapter->securitypriv.dot11PrivacyAlgrthm = _WEP104_;
2189                                         break;
2190                                 default:
2191                                         padapter->securitypriv.dot11PrivacyAlgrthm = _NO_PRIVACY_;
2192                                         break;
2193                         }
2194
2195                         goto exit;
2196
2197                 }
2198
2199         }
2200
2201         wep.KeyIndex |= 0x80000000;
2202
2203         memcpy(wep.KeyMaterial, keybuf, wep.KeyLength);
2204
2205         if (rtw_set_802_11_add_wep(padapter, &wep) == false) {
2206                 if (rf_on == pwrpriv->rf_pwrstate)
2207                         ret = -EOPNOTSUPP;
2208                 goto exit;
2209         }
2210
2211 exit:
2212         return ret;
2213 }
2214
2215 static int rtw_wx_get_enc(struct net_device *dev,
2216                             struct iw_request_info *info,
2217                             union iwreq_data *wrqu, char *keybuf)
2218 {
2219         uint key, ret = 0;
2220         struct adapter *padapter = (struct adapter *)rtw_netdev_priv(dev);
2221         struct iw_point *erq = &(wrqu->encoding);
2222         struct  mlme_priv *pmlmepriv = &(padapter->mlmepriv);
2223
2224         if (check_fwstate(pmlmepriv, _FW_LINKED) != true)
2225         {
2226                  if (check_fwstate(pmlmepriv, WIFI_ADHOC_MASTER_STATE) != true)
2227                  {
2228                 erq->length = 0;
2229                 erq->flags |= IW_ENCODE_DISABLED;
2230                 return 0;
2231         }
2232         }
2233
2234
2235         key = erq->flags & IW_ENCODE_INDEX;
2236
2237         if (key) {
2238                 if (key > WEP_KEYS)
2239                         return -EINVAL;
2240                 key--;
2241         } else
2242         {
2243                 key = padapter->securitypriv.dot11PrivacyKeyIndex;
2244         }
2245
2246         erq->flags = key + 1;
2247
2248         /* if (padapter->securitypriv.ndisauthtype == Ndis802_11AuthModeOpen) */
2249         /*  */
2250         /*       erq->flags |= IW_ENCODE_OPEN; */
2251         /*  */
2252
2253         switch (padapter->securitypriv.ndisencryptstatus)
2254         {
2255         case Ndis802_11EncryptionNotSupported:
2256         case Ndis802_11EncryptionDisabled:
2257                 erq->length = 0;
2258                 erq->flags |= IW_ENCODE_DISABLED;
2259                 break;
2260         case Ndis802_11Encryption1Enabled:
2261                 erq->length = padapter->securitypriv.dot11DefKeylen[key];
2262
2263                 if (erq->length)
2264                 {
2265                         memcpy(keybuf, padapter->securitypriv.dot11DefKey[key].skey, padapter->securitypriv.dot11DefKeylen[key]);
2266
2267                         erq->flags |= IW_ENCODE_ENABLED;
2268
2269                         if (padapter->securitypriv.ndisauthtype == Ndis802_11AuthModeOpen)
2270                         {
2271                                 erq->flags |= IW_ENCODE_OPEN;
2272                         }
2273                         else if (padapter->securitypriv.ndisauthtype == Ndis802_11AuthModeShared)
2274                         {
2275                 erq->flags |= IW_ENCODE_RESTRICTED;
2276                         }
2277                 }
2278                 else
2279                 {
2280                         erq->length = 0;
2281                         erq->flags |= IW_ENCODE_DISABLED;
2282                 }
2283                 break;
2284         case Ndis802_11Encryption2Enabled:
2285         case Ndis802_11Encryption3Enabled:
2286                 erq->length = 16;
2287                 erq->flags |= (IW_ENCODE_ENABLED | IW_ENCODE_OPEN | IW_ENCODE_NOKEY);
2288                 break;
2289         default:
2290                 erq->length = 0;
2291                 erq->flags |= IW_ENCODE_DISABLED;
2292                 break;
2293         }
2294         return ret;
2295 }
2296
2297 static int rtw_wx_get_power(struct net_device *dev,
2298                              struct iw_request_info *info,
2299                              union iwreq_data *wrqu, char *extra)
2300 {
2301         /* struct adapter *padapter = (struct adapter *)rtw_netdev_priv(dev); */
2302
2303         wrqu->power.value = 0;
2304         wrqu->power.fixed = 0;  /* no auto select */
2305         wrqu->power.disabled = 1;
2306
2307         return 0;
2308 }
2309
2310 static int rtw_wx_set_gen_ie(struct net_device *dev,
2311                              struct iw_request_info *info,
2312                              union iwreq_data *wrqu, char *extra)
2313 {
2314         int ret;
2315         struct adapter *padapter = (struct adapter *)rtw_netdev_priv(dev);
2316
2317         ret = rtw_set_wpa_ie(padapter, extra, wrqu->data.length);
2318
2319         return ret;
2320 }
2321
2322 static int rtw_wx_set_auth(struct net_device *dev,
2323                              struct iw_request_info *info,
2324                              union iwreq_data *wrqu, char *extra)
2325 {
2326         struct adapter *padapter = (struct adapter *)rtw_netdev_priv(dev);
2327         struct iw_param *param = (struct iw_param*)&(wrqu->param);
2328         int ret = 0;
2329
2330         switch (param->flags & IW_AUTH_INDEX) {
2331
2332         case IW_AUTH_WPA_VERSION:
2333                 break;
2334         case IW_AUTH_CIPHER_PAIRWISE:
2335
2336                 break;
2337         case IW_AUTH_CIPHER_GROUP:
2338
2339                 break;
2340         case IW_AUTH_KEY_MGMT:
2341                 /*
2342                  *  ??? does not use these parameters
2343                  */
2344                 break;
2345
2346         case IW_AUTH_TKIP_COUNTERMEASURES:
2347         {
2348             if (param->value)
2349             {  /*  wpa_supplicant is enabling the tkip countermeasure. */
2350                padapter->securitypriv.btkip_countermeasure = true;
2351             }
2352             else
2353             {  /*  wpa_supplicant is disabling the tkip countermeasure. */
2354                padapter->securitypriv.btkip_countermeasure = false;
2355             }
2356                 break;
2357         }
2358         case IW_AUTH_DROP_UNENCRYPTED:
2359                 {
2360                         /* HACK:
2361                          *
2362                          * wpa_supplicant calls set_wpa_enabled when the driver
2363                          * is loaded and unloaded, regardless of if WPA is being
2364                          * used.  No other calls are made which can be used to
2365                          * determine if encryption will be used or not prior to
2366                          * association being expected.  If encryption is not being
2367                          * used, drop_unencrypted is set to false, else true -- we
2368                          * can use this to determine if the CAP_PRIVACY_ON bit should
2369                          * be set.
2370                          */
2371
2372                         if (padapter->securitypriv.ndisencryptstatus == Ndis802_11Encryption1Enabled)
2373                         {
2374                                 break;/* it means init value, or using wep, ndisencryptstatus = Ndis802_11Encryption1Enabled, */
2375                                                 /*  then it needn't reset it; */
2376                         }
2377
2378                         if (param->value) {
2379                                 padapter->securitypriv.ndisencryptstatus = Ndis802_11EncryptionDisabled;
2380                                 padapter->securitypriv.dot11PrivacyAlgrthm = _NO_PRIVACY_;
2381                                 padapter->securitypriv.dot118021XGrpPrivacy = _NO_PRIVACY_;
2382                                 padapter->securitypriv.dot11AuthAlgrthm = dot11AuthAlgrthm_Open; /* open system */
2383                                 padapter->securitypriv.ndisauthtype =Ndis802_11AuthModeOpen;
2384                         }
2385
2386                         break;
2387                 }
2388
2389         case IW_AUTH_80211_AUTH_ALG:
2390
2391                 /*
2392                  *  It's the starting point of a link layer connection using wpa_supplicant
2393                 */
2394                 if (check_fwstate(&padapter->mlmepriv, _FW_LINKED)) {
2395                         LeaveAllPowerSaveMode(padapter);
2396                         rtw_disassoc_cmd(padapter, 500, false);
2397                         DBG_871X("%s...call rtw_indicate_disconnect\n ", __func__);
2398                         rtw_indicate_disconnect(padapter);
2399                         rtw_free_assoc_resources(padapter, 1);
2400                 }
2401
2402
2403                 ret = wpa_set_auth_algs(dev, (u32)param->value);
2404
2405                 break;
2406
2407         case IW_AUTH_WPA_ENABLED:
2408                 break;
2409         case IW_AUTH_RX_UNENCRYPTED_EAPOL:
2410                 break;
2411         case IW_AUTH_PRIVACY_INVOKED:
2412                 break;
2413         default:
2414                 return -EOPNOTSUPP;
2415         }
2416         return ret;
2417 }
2418
2419 static int rtw_wx_set_enc_ext(struct net_device *dev,
2420                              struct iw_request_info *info,
2421                              union iwreq_data *wrqu, char *extra)
2422 {
2423         char *alg_name;
2424         u32 param_len;
2425         struct ieee_param *param = NULL;
2426         struct iw_point *pencoding = &wrqu->encoding;
2427         struct iw_encode_ext *pext = (struct iw_encode_ext *)extra;
2428         int ret = 0;
2429
2430         param_len = sizeof(struct ieee_param) + pext->key_len;
2431         param = (struct ieee_param *)rtw_malloc(param_len);
2432         if (param == NULL)
2433                 return -1;
2434
2435         memset(param, 0, param_len);
2436
2437         param->cmd = IEEE_CMD_SET_ENCRYPTION;
2438         memset(param->sta_addr, 0xff, ETH_ALEN);
2439
2440
2441         switch (pext->alg) {
2442         case IW_ENCODE_ALG_NONE:
2443                 /* todo: remove key */
2444                 /* remove = 1; */
2445                 alg_name = "none";
2446                 break;
2447         case IW_ENCODE_ALG_WEP:
2448                 alg_name = "WEP";
2449                 break;
2450         case IW_ENCODE_ALG_TKIP:
2451                 alg_name = "TKIP";
2452                 break;
2453         case IW_ENCODE_ALG_CCMP:
2454                 alg_name = "CCMP";
2455                 break;
2456         case IW_ENCODE_ALG_AES_CMAC:
2457                 alg_name = "BIP";
2458                 break;
2459         default:
2460                 ret = -1;
2461                 goto exit;
2462         }
2463
2464         strncpy((char *)param->u.crypt.alg, alg_name, IEEE_CRYPT_ALG_NAME_LEN);
2465
2466         if (pext->ext_flags & IW_ENCODE_EXT_SET_TX_KEY)
2467         {
2468                 param->u.crypt.set_tx = 1;
2469         }
2470
2471         /* cliW: WEP does not have group key
2472          * just not checking GROUP key setting
2473          */
2474         if ((pext->alg != IW_ENCODE_ALG_WEP) &&
2475                 ((pext->ext_flags & IW_ENCODE_EXT_GROUP_KEY)
2476                 || (pext->ext_flags & IW_ENCODE_ALG_AES_CMAC)
2477         ))
2478         {
2479                 param->u.crypt.set_tx = 0;
2480         }
2481
2482         param->u.crypt.idx = (pencoding->flags&0x00FF) -1 ;
2483
2484         if (pext->ext_flags & IW_ENCODE_EXT_RX_SEQ_VALID)
2485         {
2486                 memcpy(param->u.crypt.seq, pext->rx_seq, 8);
2487         }
2488
2489         if (pext->key_len)
2490         {
2491                 param->u.crypt.key_len = pext->key_len;
2492                 /* memcpy(param + 1, pext + 1, pext->key_len); */
2493                 memcpy(param->u.crypt.key, pext + 1, pext->key_len);
2494         }
2495
2496         if (pencoding->flags & IW_ENCODE_DISABLED)
2497         {
2498                 /* todo: remove key */
2499                 /* remove = 1; */
2500         }
2501
2502         ret =  wpa_set_encryption(dev, param, param_len);
2503
2504 exit:
2505         if (param)
2506         {
2507                 kfree((u8 *)param);
2508         }
2509
2510         return ret;
2511 }
2512
2513
2514 static int rtw_wx_get_nick(struct net_device *dev,
2515                              struct iw_request_info *info,
2516                              union iwreq_data *wrqu, char *extra)
2517 {
2518         /* struct adapter *padapter = (struct adapter *)rtw_netdev_priv(dev); */
2519          /* struct mlme_priv *pmlmepriv = &(padapter->mlmepriv); */
2520          /* struct security_priv *psecuritypriv = &padapter->securitypriv; */
2521
2522         if (extra)
2523         {
2524                 wrqu->data.length = 14;
2525                 wrqu->data.flags = 1;
2526                 memcpy(extra, "<WIFI@REALTEK>", 14);
2527         }
2528         return 0;
2529 }
2530
2531 static int rtw_wx_read32(struct net_device *dev,
2532                             struct iw_request_info *info,
2533                             union iwreq_data *wrqu, char *extra)
2534 {
2535         struct adapter *padapter;
2536         struct iw_point *p;
2537         u16 len;
2538         u32 addr;
2539         u32 data32;
2540         u32 bytes;
2541         u8 *ptmp;
2542         int ret;
2543
2544
2545         ret = 0;
2546         padapter = (struct adapter *)rtw_netdev_priv(dev);
2547         p = &wrqu->data;
2548         len = p->length;
2549         if (0 == len)
2550                 return -EINVAL;
2551
2552         ptmp = (u8 *)rtw_malloc(len);
2553         if (NULL == ptmp)
2554                 return -ENOMEM;
2555
2556         if (copy_from_user(ptmp, p->pointer, len)) {
2557                 ret = -EFAULT;
2558                 goto exit;
2559         }
2560
2561         bytes = 0;
2562         addr = 0;
2563         sscanf(ptmp, "%d,%x", &bytes, &addr);
2564
2565         switch (bytes) {
2566                 case 1:
2567                         data32 = rtw_read8(padapter, addr);
2568                         sprintf(extra, "0x%02X", data32);
2569                         break;
2570                 case 2:
2571                         data32 = rtw_read16(padapter, addr);
2572                         sprintf(extra, "0x%04X", data32);
2573                         break;
2574                 case 4:
2575                         data32 = rtw_read32(padapter, addr);
2576                         sprintf(extra, "0x%08X", data32);
2577                         break;
2578                 default:
2579                         DBG_871X(KERN_INFO "%s: usage> read [bytes],[address(hex)]\n", __func__);
2580                         ret = -EINVAL;
2581                         goto exit;
2582         }
2583         DBG_871X(KERN_INFO "%s: addr = 0x%08X data =%s\n", __func__, addr, extra);
2584
2585 exit:
2586         kfree(ptmp);
2587
2588         return 0;
2589 }
2590
2591 static int rtw_wx_write32(struct net_device *dev,
2592                             struct iw_request_info *info,
2593                             union iwreq_data *wrqu, char *extra)
2594 {
2595         struct adapter *padapter = (struct adapter *)rtw_netdev_priv(dev);
2596
2597         u32 addr;
2598         u32 data32;
2599         u32 bytes;
2600
2601
2602         bytes = 0;
2603         addr = 0;
2604         data32 = 0;
2605         sscanf(extra, "%d,%x,%x", &bytes, &addr, &data32);
2606
2607         switch (bytes) {
2608                 case 1:
2609                         rtw_write8(padapter, addr, (u8)data32);
2610                         DBG_871X(KERN_INFO "%s: addr = 0x%08X data = 0x%02X\n", __func__, addr, (u8)data32);
2611                         break;
2612                 case 2:
2613                         rtw_write16(padapter, addr, (u16)data32);
2614                         DBG_871X(KERN_INFO "%s: addr = 0x%08X data = 0x%04X\n", __func__, addr, (u16)data32);
2615                         break;
2616                 case 4:
2617                         rtw_write32(padapter, addr, data32);
2618                         DBG_871X(KERN_INFO "%s: addr = 0x%08X data = 0x%08X\n", __func__, addr, data32);
2619                         break;
2620                 default:
2621                         DBG_871X(KERN_INFO "%s: usage> write [bytes],[address(hex)],[data(hex)]\n", __func__);
2622                         return -EINVAL;
2623         }
2624
2625         return 0;
2626 }
2627
2628 static int rtw_wx_read_rf(struct net_device *dev,
2629                             struct iw_request_info *info,
2630                             union iwreq_data *wrqu, char *extra)
2631 {
2632         struct adapter *padapter = (struct adapter *)rtw_netdev_priv(dev);
2633         u32 path, addr, data32;
2634
2635
2636         path = *(u32*)extra;
2637         addr = *((u32*)extra + 1);
2638         data32 = rtw_hal_read_rfreg(padapter, path, addr, 0xFFFFF);
2639         /*
2640          * IMPORTANT!!
2641          * Only when wireless private ioctl is at odd order,
2642          * "extra" would be copied to user space.
2643          */
2644         sprintf(extra, "0x%05x", data32);
2645
2646         return 0;
2647 }
2648
2649 static int rtw_wx_write_rf(struct net_device *dev,
2650                             struct iw_request_info *info,
2651                             union iwreq_data *wrqu, char *extra)
2652 {
2653         struct adapter *padapter = (struct adapter *)rtw_netdev_priv(dev);
2654         u32 path, addr, data32;
2655
2656
2657         path = *(u32*)extra;
2658         addr = *((u32*)extra + 1);
2659         data32 = *((u32*)extra + 2);
2660 /*      DBG_871X("%s: path =%d addr = 0x%02x data = 0x%05x\n", __func__, path, addr, data32); */
2661         rtw_hal_write_rfreg(padapter, path, addr, 0xFFFFF, data32);
2662
2663         return 0;
2664 }
2665
2666 static int rtw_wx_priv_null(struct net_device *dev, struct iw_request_info *a,
2667                  union iwreq_data *wrqu, char *b)
2668 {
2669         return -1;
2670 }
2671
2672 static int dummy(struct net_device *dev, struct iw_request_info *a,
2673                  union iwreq_data *wrqu, char *b)
2674 {
2675         /* struct adapter *padapter = (struct adapter *)rtw_netdev_priv(dev); */
2676         /* struct mlme_priv *pmlmepriv = &(padapter->mlmepriv); */
2677
2678         /* DBG_871X("cmd_code =%x, fwstate = 0x%x\n", a->cmd, get_fwstate(pmlmepriv)); */
2679
2680         return -1;
2681
2682 }
2683
2684 static int rtw_wx_set_channel_plan(struct net_device *dev,
2685                                struct iw_request_info *info,
2686                                union iwreq_data *wrqu, char *extra)
2687 {
2688         struct adapter *padapter = (struct adapter *)rtw_netdev_priv(dev);
2689         u8 channel_plan_req = (u8) (*((int *)wrqu));
2690
2691         if (_SUCCESS == rtw_set_chplan_cmd(padapter, channel_plan_req, 1, 1)) {
2692                 DBG_871X("%s set channel_plan = 0x%02X\n", __func__, channel_plan_req);
2693         } else
2694                 return -EPERM;
2695
2696         return 0;
2697 }
2698
2699 static int rtw_wx_set_mtk_wps_probe_ie(struct net_device *dev,
2700                 struct iw_request_info *a,
2701                 union iwreq_data *wrqu, char *b)
2702 {
2703         return 0;
2704 }
2705
2706 static int rtw_wx_get_sensitivity(struct net_device *dev,
2707                                 struct iw_request_info *info,
2708                                 union iwreq_data *wrqu, char *buf)
2709 {
2710         return 0;
2711 }
2712
2713 static int rtw_wx_set_mtk_wps_ie(struct net_device *dev,
2714                                 struct iw_request_info *info,
2715                                 union iwreq_data *wrqu, char *extra)
2716 {
2717         return 0;
2718 }
2719
2720 /*
2721 typedef int (*iw_handler)(struct net_device *dev, struct iw_request_info *info,
2722                           union iwreq_data *wrqu, char *extra);
2723 */
2724 /*
2725  *For all data larger than 16 octets, we need to use a
2726  *pointer to memory allocated in user space.
2727  */
2728 static  int rtw_drvext_hdl(struct net_device *dev, struct iw_request_info *info,
2729                                                 union iwreq_data *wrqu, char *extra)
2730 {
2731         return 0;
2732 }
2733
2734 static int rtw_mp_ioctl_hdl(struct net_device *dev, struct iw_request_info *info,
2735                                                 union iwreq_data *wrqu, char *extra)
2736 {
2737         int ret = 0;
2738         return ret;
2739 }
2740
2741 static int rtw_get_ap_info(struct net_device *dev,
2742                                struct iw_request_info *info,
2743                                union iwreq_data *wrqu, char *extra)
2744 {
2745         int ret = 0;
2746         u32 cnt = 0, wpa_ielen;
2747         struct list_head        *plist, *phead;
2748         unsigned char *pbuf;
2749         u8 bssid[ETH_ALEN];
2750         char data[32];
2751         struct wlan_network *pnetwork = NULL;
2752         struct adapter *padapter = (struct adapter *)rtw_netdev_priv(dev);
2753         struct mlme_priv *pmlmepriv = &(padapter->mlmepriv);
2754         struct __queue *queue = &(pmlmepriv->scanned_queue);
2755         struct iw_point *pdata = &wrqu->data;
2756
2757         DBG_871X("+rtw_get_aplist_info\n");
2758
2759         if ((padapter->bDriverStopped) || (pdata == NULL))
2760         {
2761                 ret = -EINVAL;
2762                 goto exit;
2763         }
2764
2765         while ((check_fwstate(pmlmepriv, (_FW_UNDER_SURVEY|_FW_UNDER_LINKING))) == true)
2766         {
2767                 msleep(30);
2768                 cnt++;
2769                 if (cnt > 100)
2770                         break;
2771         }
2772
2773
2774         /* pdata->length = 0;? */
2775         pdata->flags = 0;
2776         if (pdata->length>=32)
2777         {
2778                 if (copy_from_user(data, pdata->pointer, 32))
2779                 {
2780                         ret = -EINVAL;
2781                         goto exit;
2782                 }
2783         }
2784         else
2785         {
2786                 ret = -EINVAL;
2787                 goto exit;
2788         }
2789
2790         spin_lock_bh(&(pmlmepriv->scanned_queue.lock));
2791
2792         phead = get_list_head(queue);
2793         plist = get_next(phead);
2794
2795         while (1)
2796         {
2797                 if (phead == plist)
2798                         break;
2799
2800
2801                 pnetwork = LIST_CONTAINOR(plist, struct wlan_network, list);
2802
2803                 /* if (hwaddr_aton_i(pdata->pointer, bssid)) */
2804                 if (hwaddr_aton_i(data, bssid))
2805                 {
2806                         DBG_871X("Invalid BSSID '%s'.\n", (u8 *)data);
2807                         spin_unlock_bh(&(pmlmepriv->scanned_queue.lock));
2808                         return -EINVAL;
2809                 }
2810
2811
2812                 if (!memcmp(bssid, pnetwork->network.MacAddress, ETH_ALEN))/* BSSID match, then check if supporting wpa/wpa2 */
2813                 {
2814                         DBG_871X("BSSID:" MAC_FMT "\n", MAC_ARG(bssid));
2815
2816                         pbuf = rtw_get_wpa_ie(&pnetwork->network.IEs[12], &wpa_ielen, pnetwork->network.IELength-12);
2817                         if (pbuf && (wpa_ielen>0))
2818                         {
2819                                 pdata->flags = 1;
2820                                 break;
2821                         }
2822
2823                         pbuf = rtw_get_wpa2_ie(&pnetwork->network.IEs[12], &wpa_ielen, pnetwork->network.IELength-12);
2824                         if (pbuf && (wpa_ielen>0))
2825                         {
2826                                 pdata->flags = 2;
2827                                 break;
2828                         }
2829
2830                 }
2831
2832                 plist = get_next(plist);
2833
2834         }
2835
2836         spin_unlock_bh(&(pmlmepriv->scanned_queue.lock));
2837
2838         if (pdata->length>=34)
2839         {
2840                 if (copy_to_user((u8 __force __user *)pdata->pointer+32, (u8 *)&pdata->flags, 1))
2841                 {
2842                         ret = -EINVAL;
2843                         goto exit;
2844                 }
2845         }
2846
2847 exit:
2848
2849         return ret;
2850
2851 }
2852
2853 static int rtw_set_pid(struct net_device *dev,
2854                                struct iw_request_info *info,
2855                                union iwreq_data *wrqu, char *extra)
2856 {
2857
2858         int ret = 0;
2859         struct adapter *padapter = rtw_netdev_priv(dev);
2860         int *pdata = (int *)wrqu;
2861         int selector;
2862
2863         if ((padapter->bDriverStopped) || (pdata == NULL))
2864         {
2865                 ret = -EINVAL;
2866                 goto exit;
2867         }
2868
2869         selector = *pdata;
2870         if (selector < 3 && selector >= 0) {
2871                 padapter->pid[selector] = *(pdata+1);
2872                 DBG_871X("%s set pid[%d]=%d\n", __func__, selector , padapter->pid[selector]);
2873         }
2874         else
2875                 DBG_871X("%s selector %d error\n", __func__, selector);
2876
2877 exit:
2878
2879         return ret;
2880
2881 }
2882
2883 static int rtw_wps_start(struct net_device *dev,
2884                                struct iw_request_info *info,
2885                                union iwreq_data *wrqu, char *extra)
2886 {
2887
2888         int ret = 0;
2889         struct adapter *padapter = (struct adapter *)rtw_netdev_priv(dev);
2890         struct iw_point *pdata = &wrqu->data;
2891         u32   u32wps_start = 0;
2892         unsigned int uintRet = 0;
2893
2894         if ((true == padapter->bDriverStopped) ||(true ==padapter->bSurpriseRemoved) || (NULL == pdata))
2895         {
2896                 ret = -EINVAL;
2897                 goto exit;
2898         }
2899
2900         uintRet = copy_from_user((void*) &u32wps_start, pdata->pointer, 4);
2901         if (u32wps_start == 0)
2902         {
2903                 u32wps_start = *extra;
2904         }
2905
2906         DBG_871X("[%s] wps_start = %d\n", __func__, u32wps_start);
2907
2908 #ifdef CONFIG_INTEL_WIDI
2909         process_intel_widi_wps_status(padapter, u32wps_start);
2910 #endif /* CONFIG_INTEL_WIDI */
2911
2912 exit:
2913
2914         return ret;
2915
2916 }
2917
2918 static int rtw_p2p_set(struct net_device *dev,
2919                                struct iw_request_info *info,
2920                                union iwreq_data *wrqu, char *extra)
2921 {
2922
2923         int ret = 0;
2924
2925         return ret;
2926
2927 }
2928
2929 static int rtw_p2p_get(struct net_device *dev,
2930                                struct iw_request_info *info,
2931                                union iwreq_data *wrqu, char *extra)
2932 {
2933
2934         int ret = 0;
2935
2936         return ret;
2937
2938 }
2939
2940 static int rtw_p2p_get2(struct net_device *dev,
2941                                                 struct iw_request_info *info,
2942                                                 union iwreq_data *wrqu, char *extra)
2943 {
2944
2945         int ret = 0;
2946
2947         return ret;
2948
2949 }
2950
2951 static int rtw_rereg_nd_name(struct net_device *dev,
2952                                struct iw_request_info *info,
2953                                union iwreq_data *wrqu, char *extra)
2954 {
2955         int ret = 0;
2956         struct adapter *padapter = rtw_netdev_priv(dev);
2957         struct rereg_nd_name_data *rereg_priv = &padapter->rereg_nd_name_priv;
2958         char new_ifname[IFNAMSIZ];
2959
2960         if (rereg_priv->old_ifname[0] == 0) {
2961                 char *reg_ifname;
2962                 reg_ifname = padapter->registrypriv.ifname;
2963
2964                 strncpy(rereg_priv->old_ifname, reg_ifname, IFNAMSIZ);
2965                 rereg_priv->old_ifname[IFNAMSIZ-1] = 0;
2966         }
2967
2968         /* DBG_871X("%s wrqu->data.length:%d\n", __func__, wrqu->data.length); */
2969         if (wrqu->data.length > IFNAMSIZ)
2970                 return -EFAULT;
2971
2972         if (copy_from_user(new_ifname, wrqu->data.pointer, IFNAMSIZ)) {
2973                 return -EFAULT;
2974         }
2975
2976         if (0 == strcmp(rereg_priv->old_ifname, new_ifname)) {
2977                 return ret;
2978         }
2979
2980         DBG_871X("%s new_ifname:%s\n", __func__, new_ifname);
2981         if (0 != (ret = rtw_change_ifname(padapter, new_ifname))) {
2982                 goto exit;
2983         }
2984
2985         strncpy(rereg_priv->old_ifname, new_ifname, IFNAMSIZ);
2986         rereg_priv->old_ifname[IFNAMSIZ-1] = 0;
2987
2988         if (!memcmp(new_ifname, "disable%d", 9)) {
2989
2990                 DBG_871X("%s disable\n", __func__);
2991                 /*  free network queue for Android's timming issue */
2992                 rtw_free_network_queue(padapter, true);
2993
2994                 /*  the interface is being "disabled", we can do deeper IPS */
2995                 /* rereg_priv->old_ips_mode = rtw_get_ips_mode_req(&padapter->pwrctrlpriv); */
2996                 /* rtw_ips_mode_req(&padapter->pwrctrlpriv, IPS_NORMAL); */
2997         }
2998 exit:
2999         return ret;
3000
3001 }
3002
3003 static int rtw_dbg_port(struct net_device *dev,
3004                                struct iw_request_info *info,
3005                                union iwreq_data *wrqu, char *extra)
3006 {
3007         int ret = 0;
3008         u8 major_cmd, minor_cmd;
3009         u16 arg;
3010         u32 extra_arg, *pdata, val32;
3011         struct sta_info *psta;
3012         struct adapter *padapter = (struct adapter *)rtw_netdev_priv(dev);
3013         struct mlme_priv *pmlmepriv = &(padapter->mlmepriv);
3014         struct mlme_ext_priv *pmlmeext = &padapter->mlmeextpriv;
3015         struct mlme_ext_info *pmlmeinfo = &(pmlmeext->mlmext_info);
3016         struct wlan_network *cur_network = &(pmlmepriv->cur_network);
3017         struct sta_priv *pstapriv = &padapter->stapriv;
3018
3019
3020         pdata = (u32*)&wrqu->data;
3021
3022         val32 = *pdata;
3023         arg = (u16)(val32&0x0000ffff);
3024         major_cmd = (u8)(val32>>24);
3025         minor_cmd = (u8)((val32>>16)&0x00ff);
3026
3027         extra_arg = *(pdata+1);
3028
3029         switch (major_cmd)
3030         {
3031                 case 0x70:/* read_reg */
3032                         switch (minor_cmd)
3033                         {
3034                                 case 1:
3035                                         DBG_871X("rtw_read8(0x%x) = 0x%02x\n", arg, rtw_read8(padapter, arg));
3036                                         break;
3037                                 case 2:
3038                                         DBG_871X("rtw_read16(0x%x) = 0x%04x\n", arg, rtw_read16(padapter, arg));
3039                                         break;
3040                                 case 4:
3041                                         DBG_871X("rtw_read32(0x%x) = 0x%08x\n", arg, rtw_read32(padapter, arg));
3042                                         break;
3043                         }
3044                         break;
3045                 case 0x71:/* write_reg */
3046                         switch (minor_cmd)
3047                         {
3048                                 case 1:
3049                                         rtw_write8(padapter, arg, extra_arg);
3050                                         DBG_871X("rtw_write8(0x%x) = 0x%02x\n", arg, rtw_read8(padapter, arg));
3051                                         break;
3052                                 case 2:
3053                                         rtw_write16(padapter, arg, extra_arg);
3054                                         DBG_871X("rtw_write16(0x%x) = 0x%04x\n", arg, rtw_read16(padapter, arg));
3055                                         break;
3056                                 case 4:
3057                                         rtw_write32(padapter, arg, extra_arg);
3058                                         DBG_871X("rtw_write32(0x%x) = 0x%08x\n", arg, rtw_read32(padapter, arg));
3059                                         break;
3060                         }
3061                         break;
3062                 case 0x72:/* read_bb */
3063                         DBG_871X("read_bbreg(0x%x) = 0x%x\n", arg, rtw_hal_read_bbreg(padapter, arg, 0xffffffff));
3064                         break;
3065                 case 0x73:/* write_bb */
3066                         rtw_hal_write_bbreg(padapter, arg, 0xffffffff, extra_arg);
3067                         DBG_871X("write_bbreg(0x%x) = 0x%x\n", arg, rtw_hal_read_bbreg(padapter, arg, 0xffffffff));
3068                         break;
3069                 case 0x74:/* read_rf */
3070                         DBG_871X("read RF_reg path(0x%02x), offset(0x%x), value(0x%08x)\n", minor_cmd, arg, rtw_hal_read_rfreg(padapter, minor_cmd, arg, 0xffffffff));
3071                         break;
3072                 case 0x75:/* write_rf */
3073                         rtw_hal_write_rfreg(padapter, minor_cmd, arg, 0xffffffff, extra_arg);
3074                         DBG_871X("write RF_reg path(0x%02x), offset(0x%x), value(0x%08x)\n", minor_cmd, arg, rtw_hal_read_rfreg(padapter, minor_cmd, arg, 0xffffffff));
3075                         break;
3076
3077                 case 0x76:
3078                         switch (minor_cmd)
3079                         {
3080                                 case 0x00: /* normal mode, */
3081                                         padapter->recvpriv.is_signal_dbg = 0;
3082                                         break;
3083                                 case 0x01: /* dbg mode */
3084                                         padapter->recvpriv.is_signal_dbg = 1;
3085                                         extra_arg = extra_arg>100?100:extra_arg;
3086                                         padapter->recvpriv.signal_strength_dbg =extra_arg;
3087                                         break;
3088                         }
3089                         break;
3090                 case 0x78: /* IOL test */
3091                         break;
3092                 case 0x79:
3093                         {
3094                                 /*
3095                                 * dbg 0x79000000 [value], set RESP_TXAGC to + value, value:0~15
3096                                 * dbg 0x79010000 [value], set RESP_TXAGC to - value, value:0~15
3097                                 */
3098                                 u8 value =  extra_arg & 0x0f;
3099                                 u8 sign = minor_cmd;
3100                                 u16 write_value = 0;
3101
3102                                 DBG_871X("%s set RESP_TXAGC to %s %u\n", __func__, sign?"minus":"plus", value);
3103
3104                                 if (sign)
3105                                         value = value | 0x10;
3106
3107                                 write_value = value | (value << 5);
3108                                 rtw_write16(padapter, 0x6d9, write_value);
3109                         }
3110                         break;
3111                 case 0x7a:
3112                         receive_disconnect(padapter, pmlmeinfo->network.MacAddress
3113                                 , WLAN_REASON_EXPIRATION_CHK);
3114                         break;
3115                 case 0x7F:
3116                         switch (minor_cmd)
3117                         {
3118                                 case 0x0:
3119                                         DBG_871X("fwstate = 0x%x\n", get_fwstate(pmlmepriv));
3120                                         break;
3121                                 case 0x01:
3122                                         DBG_871X("minor_cmd 0x%x\n", minor_cmd);
3123                                         break;
3124                                 case 0x02:
3125                                         DBG_871X("pmlmeinfo->state = 0x%x\n", pmlmeinfo->state);
3126                                         DBG_871X("DrvBcnEarly =%d\n", pmlmeext->DrvBcnEarly);
3127                                         DBG_871X("DrvBcnTimeOut =%d\n", pmlmeext->DrvBcnTimeOut);
3128                                         break;
3129                                 case 0x03:
3130                                         DBG_871X("qos_option =%d\n", pmlmepriv->qospriv.qos_option);
3131                                         DBG_871X("ht_option =%d\n", pmlmepriv->htpriv.ht_option);
3132                                         break;
3133                                 case 0x04:
3134                                         DBG_871X("cur_ch =%d\n", pmlmeext->cur_channel);
3135                                         DBG_871X("cur_bw =%d\n", pmlmeext->cur_bwmode);
3136                                         DBG_871X("cur_ch_off =%d\n", pmlmeext->cur_ch_offset);
3137
3138                                         DBG_871X("oper_ch =%d\n", rtw_get_oper_ch(padapter));
3139                                         DBG_871X("oper_bw =%d\n", rtw_get_oper_bw(padapter));
3140                                         DBG_871X("oper_ch_offet =%d\n", rtw_get_oper_choffset(padapter));
3141
3142                                         break;
3143                                 case 0x05:
3144                                         psta = rtw_get_stainfo(pstapriv, cur_network->network.MacAddress);
3145                                         if (psta)
3146                                         {
3147                                                 int i;
3148                                                 struct recv_reorder_ctrl *preorder_ctrl;
3149
3150                                                 DBG_871X("SSID =%s\n", cur_network->network.Ssid.Ssid);
3151                                                 DBG_871X("sta's macaddr:" MAC_FMT "\n", MAC_ARG(psta->hwaddr));
3152                                                 DBG_871X("cur_channel =%d, cur_bwmode =%d, cur_ch_offset =%d\n", pmlmeext->cur_channel, pmlmeext->cur_bwmode, pmlmeext->cur_ch_offset);
3153                                                 DBG_871X("rtsen =%d, cts2slef =%d\n", psta->rtsen, psta->cts2self);
3154                                                 DBG_871X("state = 0x%x, aid =%d, macid =%d, raid =%d\n", psta->state, psta->aid, psta->mac_id, psta->raid);
3155                                                 DBG_871X("qos_en =%d, ht_en =%d, init_rate =%d\n", psta->qos_option, psta->htpriv.ht_option, psta->init_rate);
3156                                                 DBG_871X("bwmode =%d, ch_offset =%d, sgi_20m =%d, sgi_40m =%d\n", psta->bw_mode, psta->htpriv.ch_offset, psta->htpriv.sgi_20m, psta->htpriv.sgi_40m);
3157                                                 DBG_871X("ampdu_enable = %d\n", psta->htpriv.ampdu_enable);
3158                                                 DBG_871X("agg_enable_bitmap =%x, candidate_tid_bitmap =%x\n", psta->htpriv.agg_enable_bitmap, psta->htpriv.candidate_tid_bitmap);
3159
3160                                                 for (i = 0;i<16;i++)
3161                                                 {
3162                                                         preorder_ctrl = &psta->recvreorder_ctrl[i];
3163                                                         if (preorder_ctrl->enable)
3164                                                         {
3165                                                                 DBG_871X("tid =%d, indicate_seq =%d\n", i, preorder_ctrl->indicate_seq);
3166                                                         }
3167                                                 }
3168
3169                                         }
3170                                         else
3171                                         {
3172                                                 DBG_871X("can't get sta's macaddr, cur_network's macaddr:" MAC_FMT "\n", MAC_ARG(cur_network->network.MacAddress));
3173                                         }
3174                                         break;
3175                                 case 0x06:
3176                                         {
3177                                                 u32 ODMFlag;
3178                                                 rtw_hal_get_hwreg(padapter, HW_VAR_DM_FLAG, (u8 *)(&ODMFlag));
3179                                                 DBG_871X("(B)DMFlag = 0x%x, arg = 0x%x\n", ODMFlag, arg);
3180                                                 ODMFlag = (u32)(0x0f&arg);
3181                                                 DBG_871X("(A)DMFlag = 0x%x\n", ODMFlag);
3182                                                 rtw_hal_set_hwreg(padapter, HW_VAR_DM_FLAG, (u8 *)(&ODMFlag));
3183                                         }
3184                                         break;
3185                                 case 0x07:
3186                                         DBG_871X("bSurpriseRemoved =%d, bDriverStopped =%d\n",
3187                                                 padapter->bSurpriseRemoved, padapter->bDriverStopped);
3188                                         break;
3189                                 case 0x08:
3190                                         {
3191                                                 DBG_871X("minor_cmd 0x%x\n", minor_cmd);
3192                                         }
3193                                         break;
3194                                 case 0x09:
3195                                         {
3196                                                 int i, j;
3197                                                 struct list_head        *plist, *phead;
3198                                                 struct recv_reorder_ctrl *preorder_ctrl;
3199
3200                                                 DBG_871X("sta_dz_bitmap = 0x%x, tim_bitmap = 0x%x\n", pstapriv->sta_dz_bitmap, pstapriv->tim_bitmap);
3201
3202                                                 spin_lock_bh(&pstapriv->sta_hash_lock);
3203
3204                                                 for (i = 0; i< NUM_STA; i++)
3205                                                 {
3206                                                         phead = &(pstapriv->sta_hash[i]);
3207                                                         plist = get_next(phead);
3208
3209                                                         while (phead != plist)
3210                                                         {
3211                                                                 psta = LIST_CONTAINOR(plist, struct sta_info, hash_list);
3212
3213                                                                 plist = get_next(plist);
3214
3215                                                                 if (extra_arg == psta->aid)
3216                                                                 {
3217                                                                         DBG_871X("sta's macaddr:" MAC_FMT "\n", MAC_ARG(psta->hwaddr));
3218                                                                         DBG_871X("rtsen =%d, cts2slef =%d\n", psta->rtsen, psta->cts2self);
3219                                                                         DBG_871X("state = 0x%x, aid =%d, macid =%d, raid =%d\n", psta->state, psta->aid, psta->mac_id, psta->raid);
3220                                                                         DBG_871X("qos_en =%d, ht_en =%d, init_rate =%d\n", psta->qos_option, psta->htpriv.ht_option, psta->init_rate);
3221                                                                         DBG_871X("bwmode =%d, ch_offset =%d, sgi_20m =%d, sgi_40m =%d\n", psta->bw_mode, psta->htpriv.ch_offset, psta->htpriv.sgi_20m, psta->htpriv.sgi_40m);
3222                                                                         DBG_871X("ampdu_enable = %d\n", psta->htpriv.ampdu_enable);
3223                                                                         DBG_871X("agg_enable_bitmap =%x, candidate_tid_bitmap =%x\n", psta->htpriv.agg_enable_bitmap, psta->htpriv.candidate_tid_bitmap);
3224                                                                         DBG_871X("capability = 0x%x\n", psta->capability);
3225                                                                         DBG_871X("flags = 0x%x\n", psta->flags);
3226                                                                         DBG_871X("wpa_psk = 0x%x\n", psta->wpa_psk);
3227                                                                         DBG_871X("wpa2_group_cipher = 0x%x\n", psta->wpa2_group_cipher);
3228                                                                         DBG_871X("wpa2_pairwise_cipher = 0x%x\n", psta->wpa2_pairwise_cipher);
3229                                                                         DBG_871X("qos_info = 0x%x\n", psta->qos_info);
3230                                                                         DBG_871X("dot118021XPrivacy = 0x%x\n", psta->dot118021XPrivacy);
3231
3232
3233
3234                                                                         for (j = 0;j<16;j++)
3235                                                                         {
3236                                                                                 preorder_ctrl = &psta->recvreorder_ctrl[j];
3237                                                                                 if (preorder_ctrl->enable)
3238                                                                                 {
3239                                                                                         DBG_871X("tid =%d, indicate_seq =%d\n", j, preorder_ctrl->indicate_seq);
3240                                                                                 }
3241                                                                         }
3242
3243                                                                 }
3244
3245                                                         }
3246                                                 }
3247
3248                                                 spin_unlock_bh(&pstapriv->sta_hash_lock);
3249
3250                                         }
3251                                         break;
3252                                 case 0x0a:
3253                                         {
3254                                                 int max_mac_id = 0;
3255                                                 max_mac_id = rtw_search_max_mac_id(padapter);
3256                                                 printk("%s ==> max_mac_id = %d\n", __func__, max_mac_id);
3257                                         }
3258                                         break;
3259                                 case 0x0b: /* Enable = 1, Disable = 0 driver control vrtl_carrier_sense. */
3260                                         if (arg == 0) {
3261                                                 DBG_871X("disable driver ctrl vcs\n");
3262                                                 padapter->driver_vcs_en = 0;
3263                                         }
3264                                         else if (arg == 1) {
3265                                                 DBG_871X("enable driver ctrl vcs = %d\n", extra_arg);
3266                                                 padapter->driver_vcs_en = 1;
3267
3268                                                 if (extra_arg>2)
3269                                                         padapter->driver_vcs_type = 1;
3270                                                 else
3271                                                         padapter->driver_vcs_type = extra_arg;
3272                                         }
3273                                         break;
3274                                 case 0x0c:/* dump rx/tx packet */
3275                                         {
3276                                                 if (arg == 0) {
3277                                                         DBG_871X("dump rx packet (%d)\n", extra_arg);
3278                                                         /* pHalData->bDumpRxPkt =extra_arg; */
3279                                                         rtw_hal_set_def_var(padapter, HAL_DEF_DBG_DUMP_RXPKT, &(extra_arg));
3280                                                 }
3281                                                 else if (arg == 1) {
3282                                                         DBG_871X("dump tx packet (%d)\n", extra_arg);
3283                                                         rtw_hal_set_def_var(padapter, HAL_DEF_DBG_DUMP_TXPKT, &(extra_arg));
3284                                                 }
3285                                         }
3286                                         break;
3287                                 case 0x0e:
3288                                         {
3289                                                 if (arg == 0) {
3290                                                         DBG_871X("disable driver ctrl rx_ampdu_factor\n");
3291                                                         padapter->driver_rx_ampdu_factor = 0xFF;
3292                                                 }
3293                                                 else if (arg == 1) {
3294
3295                                                         DBG_871X("enable driver ctrl rx_ampdu_factor = %d\n", extra_arg);
3296
3297                                                         if ((extra_arg & 0x03) > 0x03)
3298                                                                 padapter->driver_rx_ampdu_factor = 0xFF;
3299                                                         else
3300                                                                 padapter->driver_rx_ampdu_factor = extra_arg;
3301                                                 }
3302                                         }
3303                                         break;
3304
3305                                 case 0x10:/*  driver version display */
3306                                         dump_drv_version(RTW_DBGDUMP);
3307                                         break;
3308                                 case 0x11:/* dump linked status */
3309                                         {
3310                                                  linked_info_dump(padapter, extra_arg);
3311                                         }
3312                                         break;
3313                                 case 0x12: /* set rx_stbc */
3314                                 {
3315                                         struct registry_priv *pregpriv = &padapter->registrypriv;
3316                                         /*  0: disable, bit(0):enable 2.4g, bit(1):enable 5g, 0x3: enable both 2.4g and 5g */
3317                                         /* default is set to enable 2.4GHZ for IOT issue with bufflao's AP at 5GHZ */
3318                                         if (pregpriv && (extra_arg == 0 || extra_arg == 1|| extra_arg == 2 || extra_arg == 3))
3319                                         {
3320                                                 pregpriv->rx_stbc = extra_arg;
3321                                                 DBG_871X("set rx_stbc =%d\n", pregpriv->rx_stbc);
3322                                         }
3323                                         else
3324                                                 DBG_871X("get rx_stbc =%d\n", pregpriv->rx_stbc);
3325
3326                                 }
3327                                 break;
3328                                 case 0x13: /* set ampdu_enable */
3329                                 {
3330                                         struct registry_priv *pregpriv = &padapter->registrypriv;
3331                                         /*  0: disable, 0x1:enable (but wifi_spec should be 0), 0x2: force enable (don't care wifi_spec) */
3332                                         if (pregpriv && extra_arg < 3)
3333                                         {
3334                                                 pregpriv->ampdu_enable = extra_arg;
3335                                                 DBG_871X("set ampdu_enable =%d\n", pregpriv->ampdu_enable);
3336                                         }
3337                                         else
3338                                                 DBG_871X("get ampdu_enable =%d\n", pregpriv->ampdu_enable);
3339
3340                                 }
3341                                 break;
3342                                 case 0x14:
3343                                 {
3344                                         DBG_871X("minor_cmd 0x%x\n", minor_cmd);
3345                                 }
3346                                 break;
3347                                 case 0x16:
3348                                 {
3349                                         if (arg == 0xff) {
3350                                                 rtw_odm_dbg_comp_msg(RTW_DBGDUMP, padapter);
3351                                         }
3352                                         else {
3353                                                 u64 dbg_comp = (u64)extra_arg;
3354                                                 rtw_odm_dbg_comp_set(padapter, dbg_comp);
3355                                         }
3356                                 }
3357                                         break;
3358 #ifdef DBG_FIXED_CHAN
3359                                 case 0x17:
3360                                         {
3361                                                 struct mlme_ext_priv *pmlmeext = &(padapter->mlmeextpriv);
3362                                                 printk("===>  Fixed channel to %d\n", extra_arg);
3363                                                 pmlmeext->fixed_chan = extra_arg;
3364
3365                                         }
3366                                         break;
3367 #endif
3368                                 case 0x18:
3369                                         {
3370                                                 printk("===>  Switch USB Mode %d\n", extra_arg);
3371                                                 rtw_hal_set_hwreg(padapter, HW_VAR_USB_MODE, (u8 *)&extra_arg);
3372                                         }
3373                                         break;
3374                                 case 0x19:
3375                                         {
3376                                                 struct registry_priv *pregistrypriv = &padapter->registrypriv;
3377                                                 /*  extra_arg : */
3378                                                 /*  BIT0: Enable VHT LDPC Rx, BIT1: Enable VHT LDPC Tx, */
3379                                                 /*  BIT4: Enable HT LDPC Rx, BIT5: Enable HT LDPC Tx */
3380                                                 if (arg == 0) {
3381                                                         DBG_871X("driver disable LDPC\n");
3382                                                         pregistrypriv->ldpc_cap = 0x00;
3383                                                 }
3384                                                 else if (arg == 1) {
3385                                                         DBG_871X("driver set LDPC cap = 0x%x\n", extra_arg);
3386                                                         pregistrypriv->ldpc_cap = (u8)(extra_arg&0x33);
3387                                                 }
3388                                         }
3389                                         break;
3390                                 case 0x1a:
3391                                         {
3392                                                 struct registry_priv *pregistrypriv = &padapter->registrypriv;
3393                                                 /*  extra_arg : */
3394                                                 /*  BIT0: Enable VHT STBC Rx, BIT1: Enable VHT STBC Tx, */
3395                                                 /*  BIT4: Enable HT STBC Rx, BIT5: Enable HT STBC Tx */
3396                                                 if (arg == 0) {
3397                                                         DBG_871X("driver disable STBC\n");
3398                                                         pregistrypriv->stbc_cap = 0x00;
3399                                                 }
3400                                                 else if (arg == 1) {
3401                                                         DBG_871X("driver set STBC cap = 0x%x\n", extra_arg);
3402                                                         pregistrypriv->stbc_cap = (u8)(extra_arg&0x33);
3403                                                 }
3404                                         }
3405                                         break;
3406                                 case 0x1b:
3407                                         {
3408                                                 struct registry_priv *pregistrypriv = &padapter->registrypriv;
3409
3410                                                 if (arg == 0) {
3411                                                         DBG_871X("disable driver ctrl max_rx_rate, reset to default_rate_set\n");
3412                                                         init_mlme_default_rate_set(padapter);
3413                                                         pregistrypriv->ht_enable = (u8)rtw_ht_enable;
3414                                                 }
3415                                                 else if (arg == 1) {
3416
3417                                                         int i;
3418                                                         u8 max_rx_rate;
3419
3420                                                         DBG_871X("enable driver ctrl max_rx_rate = 0x%x\n", extra_arg);
3421
3422                                                         max_rx_rate = (u8)extra_arg;
3423
3424                                                         if (max_rx_rate < 0xc) /*  max_rx_rate < MSC0 -> B or G -> disable HT */
3425                                                         {
3426                                                                 pregistrypriv->ht_enable = 0;
3427                                                                 for (i = 0; i<NumRates; i++)
3428                                                                 {
3429                                                                         if (pmlmeext->datarate[i] > max_rx_rate)
3430                                                                                 pmlmeext->datarate[i] = 0xff;
3431                                                                 }
3432
3433                                                         }
3434                                                         else if (max_rx_rate < 0x1c) /*  mcs0~mcs15 */
3435                                                         {
3436                                                                 u32 mcs_bitmap = 0x0;
3437
3438                                                                 for (i = 0; i<((max_rx_rate+1)-0xc); i++)
3439                                                                         mcs_bitmap |= BIT(i);
3440
3441                                                                 set_mcs_rate_by_mask(pmlmeext->default_supported_mcs_set, mcs_bitmap);
3442                                                         }
3443                                                 }
3444                                         }
3445                                         break;
3446                                 case 0x1c: /* enable/disable driver control AMPDU Density for peer sta's rx */
3447                                         {
3448                                                 if (arg == 0) {
3449                                                         DBG_871X("disable driver ctrl ampdu density\n");
3450                                                         padapter->driver_ampdu_spacing = 0xFF;
3451                                                 }
3452                                                 else if (arg == 1) {
3453
3454                                                         DBG_871X("enable driver ctrl ampdu density = %d\n", extra_arg);
3455
3456                                                         if ((extra_arg & 0x07) > 0x07)
3457                                                                 padapter->driver_ampdu_spacing = 0xFF;
3458                                                         else
3459                                                                 padapter->driver_ampdu_spacing = extra_arg;
3460                                                 }
3461                                         }
3462                                         break;
3463 #ifdef CONFIG_BACKGROUND_NOISE_MONITOR
3464                                 case 0x1e:
3465                                         {
3466                                                 struct hal_com_data     *pHalData = GET_HAL_DATA(padapter);
3467                                                 PDM_ODM_T pDM_Odm = &pHalData->odmpriv;
3468                                                 u8 chan = rtw_get_oper_ch(padapter);
3469                                                 DBG_871X("===========================================\n");
3470                                                 ODM_InbandNoise_Monitor(pDM_Odm, true, 0x1e, 100);
3471                                                 DBG_871X("channel(%d), noise_a = %d, noise_b = %d , noise_all:%d\n",
3472                                                         chan, pDM_Odm->noise_level.noise[ODM_RF_PATH_A],
3473                                                         pDM_Odm->noise_level.noise[ODM_RF_PATH_B],
3474                                                         pDM_Odm->noise_level.noise_all);
3475                                                 DBG_871X("===========================================\n");
3476
3477                                         }
3478                                         break;
3479 #endif
3480                                 case 0x23:
3481                                         {
3482                                                 DBG_871X("turn %s the bNotifyChannelChange Variable\n", (extra_arg == 1)?"on":"off");
3483                                                 padapter->bNotifyChannelChange = extra_arg;
3484                                                 break;
3485                                         }
3486                                 case 0x24:
3487                                         {
3488                                                 break;
3489                                         }
3490 #ifdef CONFIG_GPIO_API
3491                             case 0x25: /* Get GPIO register */
3492                                     {
3493                                             /*
3494                                             * dbg 0x7f250000 [gpio_num], Get gpio value, gpio_num:0~7
3495                                             */
3496
3497                                             int value;
3498                                             DBG_871X("Read GPIO Value  extra_arg = %d\n", extra_arg);
3499                                             value = rtw_get_gpio(dev, extra_arg);
3500                                             DBG_871X("Read GPIO Value = %d\n", value);
3501                                             break;
3502                                     }
3503                             case 0x26: /* Set GPIO direction */
3504                                     {
3505
3506                                             /* dbg 0x7f26000x [y], Set gpio direction,
3507                                             * x: gpio_num, 4~7  y: indicate direction, 0~1
3508                                             */
3509
3510                                             int value;
3511                                             DBG_871X("Set GPIO Direction! arg = %d , extra_arg =%d\n", arg , extra_arg);
3512                                             value = rtw_config_gpio(dev, arg, extra_arg);
3513                                             DBG_871X("Set GPIO Direction %s\n", (value ==-1)?"Fail!!!":"Success");
3514                                             break;
3515                                         }
3516                                 case 0x27: /* Set GPIO output direction value */
3517                                         {
3518                                                 /*
3519                                                 * dbg 0x7f27000x [y], Set gpio output direction value,
3520                                                 * x: gpio_num, 4~7  y: indicate direction, 0~1
3521                                                 */
3522
3523                                                 int value;
3524                                                 DBG_871X("Set GPIO Value! arg = %d , extra_arg =%d\n", arg , extra_arg);
3525                                                 value = rtw_set_gpio_output_value(dev, arg, extra_arg);
3526                                                 DBG_871X("Set GPIO Value %s\n", (value ==-1)?"Fail!!!":"Success");
3527                                                 break;
3528                                         }
3529 #endif
3530                                 case 0xaa:
3531                                         {
3532                                                 if ((extra_arg & 0x7F)> 0x3F) extra_arg = 0xFF;
3533                                                 DBG_871X("chang data rate to :0x%02x\n", extra_arg);
3534                                                 padapter->fix_rate = extra_arg;
3535                                         }
3536                                         break;
3537                                 case 0xdd:/* registers dump , 0 for mac reg, 1 for bb reg, 2 for rf reg */
3538                                         {
3539                                                 if (extra_arg == 0) {
3540                                                         mac_reg_dump(RTW_DBGDUMP, padapter);
3541                                                 }
3542                                                 else if (extra_arg == 1) {
3543                                                         bb_reg_dump(RTW_DBGDUMP, padapter);
3544                                                 }
3545                                                 else if (extra_arg ==2) {
3546                                                         rf_reg_dump(RTW_DBGDUMP, padapter);
3547                                                 }
3548                                         }
3549                                         break;
3550
3551                                 case 0xee:/* turn on/off dynamic funcs */
3552                                         {
3553                                                 u32 odm_flag;
3554
3555                                                 if (0xf ==extra_arg) {
3556                                                         rtw_hal_get_def_var(padapter, HAL_DEF_DBG_DM_FUNC,&odm_flag);
3557                                                         DBG_871X(" === DMFlag(0x%08x) ===\n", odm_flag);
3558                                                         DBG_871X("extra_arg = 0  - disable all dynamic func\n");
3559                                                         DBG_871X("extra_arg = 1  - disable DIG- BIT(0)\n");
3560                                                         DBG_871X("extra_arg = 2  - disable High power - BIT(1)\n");
3561                                                         DBG_871X("extra_arg = 3  - disable tx power tracking - BIT(2)\n");
3562                                                         DBG_871X("extra_arg = 4  - disable BT coexistence - BIT(3)\n");
3563                                                         DBG_871X("extra_arg = 5  - disable antenna diversity - BIT(4)\n");
3564                                                         DBG_871X("extra_arg = 6  - enable all dynamic func\n");
3565                                                 }
3566                                                 else {
3567                                                         /*extra_arg = 0  - disable all dynamic func
3568                                                                 extra_arg = 1  - disable DIG
3569                                                                 extra_arg = 2  - disable tx power tracking
3570                                                                 extra_arg = 3  - turn on all dynamic func
3571                                                         */
3572                                                         rtw_hal_set_def_var(padapter, HAL_DEF_DBG_DM_FUNC, &(extra_arg));
3573                                                         rtw_hal_get_def_var(padapter, HAL_DEF_DBG_DM_FUNC,&odm_flag);
3574                                                         DBG_871X(" === DMFlag(0x%08x) ===\n", odm_flag);
3575                                                 }
3576                                         }
3577                                         break;
3578
3579                                 case 0xfd:
3580                                         rtw_write8(padapter, 0xc50, arg);
3581                                         DBG_871X("wr(0xc50) = 0x%x\n", rtw_read8(padapter, 0xc50));
3582                                         rtw_write8(padapter, 0xc58, arg);
3583                                         DBG_871X("wr(0xc58) = 0x%x\n", rtw_read8(padapter, 0xc58));
3584                                         break;
3585                                 case 0xfe:
3586                                         DBG_871X("rd(0xc50) = 0x%x\n", rtw_read8(padapter, 0xc50));
3587                                         DBG_871X("rd(0xc58) = 0x%x\n", rtw_read8(padapter, 0xc58));
3588                                         break;
3589                                 case 0xff:
3590                                         {
3591                                                 DBG_871X("dbg(0x210) = 0x%x\n", rtw_read32(padapter, 0x210));
3592                                                 DBG_871X("dbg(0x608) = 0x%x\n", rtw_read32(padapter, 0x608));
3593                                                 DBG_871X("dbg(0x280) = 0x%x\n", rtw_read32(padapter, 0x280));
3594                                                 DBG_871X("dbg(0x284) = 0x%x\n", rtw_read32(padapter, 0x284));
3595                                                 DBG_871X("dbg(0x288) = 0x%x\n", rtw_read32(padapter, 0x288));
3596
3597                                                 DBG_871X("dbg(0x664) = 0x%x\n", rtw_read32(padapter, 0x664));
3598
3599
3600                                                 DBG_871X("\n");
3601
3602                                                 DBG_871X("dbg(0x430) = 0x%x\n", rtw_read32(padapter, 0x430));
3603                                                 DBG_871X("dbg(0x438) = 0x%x\n", rtw_read32(padapter, 0x438));
3604
3605                                                 DBG_871X("dbg(0x440) = 0x%x\n", rtw_read32(padapter, 0x440));
3606
3607                                                 DBG_871X("dbg(0x458) = 0x%x\n", rtw_read32(padapter, 0x458));
3608
3609                                                 DBG_871X("dbg(0x484) = 0x%x\n", rtw_read32(padapter, 0x484));
3610                                                 DBG_871X("dbg(0x488) = 0x%x\n", rtw_read32(padapter, 0x488));
3611
3612                                                 DBG_871X("dbg(0x444) = 0x%x\n", rtw_read32(padapter, 0x444));
3613                                                 DBG_871X("dbg(0x448) = 0x%x\n", rtw_read32(padapter, 0x448));
3614                                                 DBG_871X("dbg(0x44c) = 0x%x\n", rtw_read32(padapter, 0x44c));
3615                                                 DBG_871X("dbg(0x450) = 0x%x\n", rtw_read32(padapter, 0x450));
3616                                         }
3617                                         break;
3618                         }
3619                         break;
3620                 default:
3621                         DBG_871X("error dbg cmd!\n");
3622                         break;
3623         }
3624
3625
3626         return ret;
3627
3628 }
3629
3630 static int wpa_set_param(struct net_device *dev, u8 name, u32 value)
3631 {
3632         uint ret = 0;
3633         struct adapter *padapter = (struct adapter *)rtw_netdev_priv(dev);
3634
3635         switch (name) {
3636         case IEEE_PARAM_WPA_ENABLED:
3637
3638                 padapter->securitypriv.dot11AuthAlgrthm = dot11AuthAlgrthm_8021X; /* 802.1x */
3639
3640                 /* ret = ieee80211_wpa_enable(ieee, value); */
3641
3642                 switch ((value)&0xff)
3643                 {
3644                 case 1 : /* WPA */
3645                         padapter->securitypriv.ndisauthtype = Ndis802_11AuthModeWPAPSK; /* WPA_PSK */
3646                         padapter->securitypriv.ndisencryptstatus = Ndis802_11Encryption2Enabled;
3647                         break;
3648                 case 2: /* WPA2 */
3649                         padapter->securitypriv.ndisauthtype = Ndis802_11AuthModeWPA2PSK; /* WPA2_PSK */
3650                         padapter->securitypriv.ndisencryptstatus = Ndis802_11Encryption3Enabled;
3651                         break;
3652                 }
3653
3654                 RT_TRACE(_module_rtl871x_ioctl_os_c, _drv_info_, ("wpa_set_param:padapter->securitypriv.ndisauthtype =%d\n", padapter->securitypriv.ndisauthtype));
3655
3656                 break;
3657
3658         case IEEE_PARAM_TKIP_COUNTERMEASURES:
3659                 /* ieee->tkip_countermeasures =value; */
3660                 break;
3661
3662         case IEEE_PARAM_DROP_UNENCRYPTED:
3663         {
3664                 /* HACK:
3665                  *
3666                  * wpa_supplicant calls set_wpa_enabled when the driver
3667                  * is loaded and unloaded, regardless of if WPA is being
3668                  * used.  No other calls are made which can be used to
3669                  * determine if encryption will be used or not prior to
3670                  * association being expected.  If encryption is not being
3671                  * used, drop_unencrypted is set to false, else true -- we
3672                  * can use this to determine if the CAP_PRIVACY_ON bit should
3673                  * be set.
3674                  */
3675                 break;
3676
3677         }
3678         case IEEE_PARAM_PRIVACY_INVOKED:
3679
3680                 /* ieee->privacy_invoked =value; */
3681
3682                 break;
3683
3684         case IEEE_PARAM_AUTH_ALGS:
3685
3686                 ret = wpa_set_auth_algs(dev, value);
3687
3688                 break;
3689
3690         case IEEE_PARAM_IEEE_802_1X:
3691
3692                 /* ieee->ieee802_1x =value; */
3693
3694                 break;
3695
3696         case IEEE_PARAM_WPAX_SELECT:
3697
3698                 /*  added for WPA2 mixed mode */
3699                 /* DBG_871X(KERN_WARNING "------------------------>wpax value = %x\n", value); */
3700                 /*
3701                 spin_lock_irqsave(&ieee->wpax_suitlist_lock, flags);
3702                 ieee->wpax_type_set = 1;
3703                 ieee->wpax_type_notify = value;
3704                 spin_unlock_irqrestore(&ieee->wpax_suitlist_lock, flags);
3705                 */
3706
3707                 break;
3708
3709         default:
3710
3711
3712
3713                 ret = -EOPNOTSUPP;
3714
3715
3716                 break;
3717
3718         }
3719
3720         return ret;
3721
3722 }
3723
3724 static int wpa_mlme(struct net_device *dev, u32 command, u32 reason)
3725 {
3726         int ret = 0;
3727         struct adapter *padapter = (struct adapter *)rtw_netdev_priv(dev);
3728
3729         switch (command)
3730         {
3731                 case IEEE_MLME_STA_DEAUTH:
3732
3733                         if (!rtw_set_802_11_disassociate(padapter))
3734                                 ret = -1;
3735
3736                         break;
3737
3738                 case IEEE_MLME_STA_DISASSOC:
3739
3740                         if (!rtw_set_802_11_disassociate(padapter))
3741                                 ret = -1;
3742
3743                         break;
3744
3745                 default:
3746                         ret = -EOPNOTSUPP;
3747                         break;
3748         }
3749
3750         return ret;
3751
3752 }
3753
3754 static int wpa_supplicant_ioctl(struct net_device *dev, struct iw_point *p)
3755 {
3756         struct ieee_param *param;
3757         uint ret = 0;
3758
3759         /* down(&ieee->wx_sem); */
3760
3761         if (p->length < sizeof(struct ieee_param) || !p->pointer) {
3762                 ret = -EINVAL;
3763                 goto out;
3764         }
3765
3766         param = (struct ieee_param *)rtw_malloc(p->length);
3767         if (param == NULL)
3768         {
3769                 ret = -ENOMEM;
3770                 goto out;
3771         }
3772
3773         if (copy_from_user(param, p->pointer, p->length))
3774         {
3775                 kfree((u8 *)param);
3776                 ret = -EFAULT;
3777                 goto out;
3778         }
3779
3780         switch (param->cmd) {
3781
3782         case IEEE_CMD_SET_WPA_PARAM:
3783                 ret = wpa_set_param(dev, param->u.wpa_param.name, param->u.wpa_param.value);
3784                 break;
3785
3786         case IEEE_CMD_SET_WPA_IE:
3787                 /* ret = wpa_set_wpa_ie(dev, param, p->length); */
3788                 ret =  rtw_set_wpa_ie((struct adapter *)rtw_netdev_priv(dev), (char*)param->u.wpa_ie.data, (u16)param->u.wpa_ie.len);
3789                 break;
3790
3791         case IEEE_CMD_SET_ENCRYPTION:
3792                 ret = wpa_set_encryption(dev, param, p->length);
3793                 break;
3794
3795         case IEEE_CMD_MLME:
3796                 ret = wpa_mlme(dev, param->u.mlme.command, param->u.mlme.reason_code);
3797                 break;
3798
3799         default:
3800                 DBG_871X("Unknown WPA supplicant request: %d\n", param->cmd);
3801                 ret = -EOPNOTSUPP;
3802                 break;
3803
3804         }
3805
3806         if (ret == 0 && copy_to_user(p->pointer, param, p->length))
3807                 ret = -EFAULT;
3808
3809         kfree((u8 *)param);
3810
3811 out:
3812
3813         /* up(&ieee->wx_sem); */
3814
3815         return ret;
3816
3817 }
3818
3819 static int rtw_set_encryption(struct net_device *dev, struct ieee_param *param, u32 param_len)
3820 {
3821         int ret = 0;
3822         u32 wep_key_idx, wep_key_len, wep_total_len;
3823         struct ndis_802_11_wep   *pwep = NULL;
3824         struct sta_info *psta = NULL, *pbcmc_sta = NULL;
3825         struct adapter *padapter = (struct adapter *)rtw_netdev_priv(dev);
3826         struct mlme_priv *pmlmepriv = &padapter->mlmepriv;
3827         struct security_priv* psecuritypriv =&(padapter->securitypriv);
3828         struct sta_priv *pstapriv = &padapter->stapriv;
3829
3830         DBG_871X("%s\n", __func__);
3831
3832         param->u.crypt.err = 0;
3833         param->u.crypt.alg[IEEE_CRYPT_ALG_NAME_LEN - 1] = '\0';
3834
3835         /* sizeof(struct ieee_param) = 64 bytes; */
3836         /* if (param_len !=  (u32) ((u8 *) param->u.crypt.key - (u8 *) param) + param->u.crypt.key_len) */
3837         if (param_len !=  sizeof(struct ieee_param) + param->u.crypt.key_len)
3838         {
3839                 ret =  -EINVAL;
3840                 goto exit;
3841         }
3842
3843         if (param->sta_addr[0] == 0xff && param->sta_addr[1] == 0xff &&
3844             param->sta_addr[2] == 0xff && param->sta_addr[3] == 0xff &&
3845             param->sta_addr[4] == 0xff && param->sta_addr[5] == 0xff)
3846         {
3847                 if (param->u.crypt.idx >= WEP_KEYS)
3848                 {
3849                         ret = -EINVAL;
3850                         goto exit;
3851                 }
3852         }
3853         else
3854         {
3855                 psta = rtw_get_stainfo(pstapriv, param->sta_addr);
3856                 if (!psta)
3857                 {
3858                         /* ret = -EINVAL; */
3859                         DBG_871X("rtw_set_encryption(), sta has already been removed or never been added\n");
3860                         goto exit;
3861                 }
3862         }
3863
3864         if (strcmp(param->u.crypt.alg, "none") == 0 && (psta == NULL))
3865         {
3866                 /* todo:clear default encryption keys */
3867
3868                 psecuritypriv->dot11AuthAlgrthm = dot11AuthAlgrthm_Open;
3869                 psecuritypriv->ndisencryptstatus = Ndis802_11EncryptionDisabled;
3870                 psecuritypriv->dot11PrivacyAlgrthm = _NO_PRIVACY_;
3871                 psecuritypriv->dot118021XGrpPrivacy = _NO_PRIVACY_;
3872
3873                 DBG_871X("clear default encryption keys, keyid =%d\n", param->u.crypt.idx);
3874
3875                 goto exit;
3876         }
3877
3878
3879         if (strcmp(param->u.crypt.alg, "WEP") == 0 && (psta == NULL))
3880         {
3881                 DBG_871X("r871x_set_encryption, crypt.alg = WEP\n");
3882
3883                 wep_key_idx = param->u.crypt.idx;
3884                 wep_key_len = param->u.crypt.key_len;
3885
3886                 DBG_871X("r871x_set_encryption, wep_key_idx =%d, len =%d\n", wep_key_idx, wep_key_len);
3887
3888                 if ((wep_key_idx >= WEP_KEYS) || (wep_key_len<= 0))
3889                 {
3890                         ret = -EINVAL;
3891                         goto exit;
3892                 }
3893
3894
3895                 if (wep_key_len > 0)
3896                 {
3897                         wep_key_len = wep_key_len <= 5 ? 5 : 13;
3898                         wep_total_len = wep_key_len + FIELD_OFFSET(struct ndis_802_11_wep, KeyMaterial);
3899                         pwep =(struct ndis_802_11_wep *)rtw_malloc(wep_total_len);
3900                         if (pwep == NULL) {
3901                                 DBG_871X(" r871x_set_encryption: pwep allocate fail !!!\n");
3902                                 goto exit;
3903                         }
3904
3905                         memset(pwep, 0, wep_total_len);
3906
3907                         pwep->KeyLength = wep_key_len;
3908                         pwep->Length = wep_total_len;
3909
3910                 }
3911
3912                 pwep->KeyIndex = wep_key_idx;
3913
3914                 memcpy(pwep->KeyMaterial,  param->u.crypt.key, pwep->KeyLength);
3915
3916                 if (param->u.crypt.set_tx)
3917                 {
3918                         DBG_871X("wep, set_tx = 1\n");
3919
3920                         psecuritypriv->dot11AuthAlgrthm = dot11AuthAlgrthm_Auto;
3921                         psecuritypriv->ndisencryptstatus = Ndis802_11Encryption1Enabled;
3922                         psecuritypriv->dot11PrivacyAlgrthm = _WEP40_;
3923                         psecuritypriv->dot118021XGrpPrivacy = _WEP40_;
3924
3925                         if (pwep->KeyLength == 13)
3926                         {
3927                                 psecuritypriv->dot11PrivacyAlgrthm = _WEP104_;
3928                                 psecuritypriv->dot118021XGrpPrivacy = _WEP104_;
3929                         }
3930
3931
3932                         psecuritypriv->dot11PrivacyKeyIndex = wep_key_idx;
3933
3934                         memcpy(&(psecuritypriv->dot11DefKey[wep_key_idx].skey[0]), pwep->KeyMaterial, pwep->KeyLength);
3935
3936                         psecuritypriv->dot11DefKeylen[wep_key_idx]=pwep->KeyLength;
3937
3938                         rtw_ap_set_wep_key(padapter, pwep->KeyMaterial, pwep->KeyLength, wep_key_idx, 1);
3939                 }
3940                 else
3941                 {
3942                         DBG_871X("wep, set_tx = 0\n");
3943
3944                         /* don't update "psecuritypriv->dot11PrivacyAlgrthm" and */
3945                         /* psecuritypriv->dot11PrivacyKeyIndex =keyid", but can rtw_set_key to cam */
3946
3947                         memcpy(&(psecuritypriv->dot11DefKey[wep_key_idx].skey[0]), pwep->KeyMaterial, pwep->KeyLength);
3948
3949                         psecuritypriv->dot11DefKeylen[wep_key_idx] = pwep->KeyLength;
3950
3951                         rtw_ap_set_wep_key(padapter, pwep->KeyMaterial, pwep->KeyLength, wep_key_idx, 0);
3952                 }
3953
3954                 goto exit;
3955
3956         }
3957
3958
3959         if (!psta && check_fwstate(pmlmepriv, WIFI_AP_STATE)) /*  group key */
3960         {
3961                 if (param->u.crypt.set_tx == 1)
3962                 {
3963                         if (strcmp(param->u.crypt.alg, "WEP") == 0)
3964                         {
3965                                 DBG_871X("%s, set group_key, WEP\n", __func__);
3966
3967                                 memcpy(psecuritypriv->dot118021XGrpKey[param->u.crypt.idx].skey,  param->u.crypt.key, (param->u.crypt.key_len>16 ?16:param->u.crypt.key_len));
3968
3969                                 psecuritypriv->dot118021XGrpPrivacy = _WEP40_;
3970                                 if (param->u.crypt.key_len == 13)
3971                                 {
3972                                                 psecuritypriv->dot118021XGrpPrivacy = _WEP104_;
3973                                 }
3974
3975                         }
3976                         else if (strcmp(param->u.crypt.alg, "TKIP") == 0)
3977                         {
3978                                 DBG_871X("%s, set group_key, TKIP\n", __func__);
3979
3980                                 psecuritypriv->dot118021XGrpPrivacy = _TKIP_;
3981
3982                                 memcpy(psecuritypriv->dot118021XGrpKey[param->u.crypt.idx].skey,  param->u.crypt.key, (param->u.crypt.key_len>16 ?16:param->u.crypt.key_len));
3983
3984                                 /* DEBUG_ERR("set key length :param->u.crypt.key_len =%d\n", param->u.crypt.key_len); */
3985                                 /* set mic key */
3986                                 memcpy(psecuritypriv->dot118021XGrptxmickey[param->u.crypt.idx].skey, &(param->u.crypt.key[16]), 8);
3987                                 memcpy(psecuritypriv->dot118021XGrprxmickey[param->u.crypt.idx].skey, &(param->u.crypt.key[24]), 8);
3988
3989                                 psecuritypriv->busetkipkey = true;
3990
3991                         }
3992                         else if (strcmp(param->u.crypt.alg, "CCMP") == 0)
3993                         {
3994                                 DBG_871X("%s, set group_key, CCMP\n", __func__);
3995
3996                                 psecuritypriv->dot118021XGrpPrivacy = _AES_;
3997
3998                                 memcpy(psecuritypriv->dot118021XGrpKey[param->u.crypt.idx].skey,  param->u.crypt.key, (param->u.crypt.key_len>16 ?16:param->u.crypt.key_len));
3999                         }
4000                         else
4001                         {
4002                                 DBG_871X("%s, set group_key, none\n", __func__);
4003
4004                                 psecuritypriv->dot118021XGrpPrivacy = _NO_PRIVACY_;
4005                         }
4006
4007                         psecuritypriv->dot118021XGrpKeyid = param->u.crypt.idx;
4008
4009                         psecuritypriv->binstallGrpkey = true;
4010
4011                         psecuritypriv->dot11PrivacyAlgrthm = psecuritypriv->dot118021XGrpPrivacy;/*  */
4012
4013                         rtw_ap_set_group_key(padapter, param->u.crypt.key, psecuritypriv->dot118021XGrpPrivacy, param->u.crypt.idx);
4014
4015                         pbcmc_sta =rtw_get_bcmc_stainfo(padapter);
4016                         if (pbcmc_sta)
4017                         {
4018                                 pbcmc_sta->ieee8021x_blocked = false;
4019                                 pbcmc_sta->dot118021XPrivacy = psecuritypriv->dot118021XGrpPrivacy;/* rx will use bmc_sta's dot118021XPrivacy */
4020                         }
4021
4022                 }
4023
4024                 goto exit;
4025
4026         }
4027
4028         if (psecuritypriv->dot11AuthAlgrthm == dot11AuthAlgrthm_8021X && psta) /*  psk/802_1x */
4029         {
4030                 if (check_fwstate(pmlmepriv, WIFI_AP_STATE))
4031                 {
4032                         if (param->u.crypt.set_tx == 1)
4033                         {
4034                                 memcpy(psta->dot118021x_UncstKey.skey,  param->u.crypt.key, (param->u.crypt.key_len>16 ?16:param->u.crypt.key_len));
4035
4036                                 if (strcmp(param->u.crypt.alg, "WEP") == 0)
4037                                 {
4038                                         DBG_871X("%s, set pairwise key, WEP\n", __func__);
4039
4040                                         psta->dot118021XPrivacy = _WEP40_;
4041                                         if (param->u.crypt.key_len == 13)
4042                                         {
4043                                                 psta->dot118021XPrivacy = _WEP104_;
4044                                         }
4045                                 }
4046                                 else if (strcmp(param->u.crypt.alg, "TKIP") == 0)
4047                                 {
4048                                         DBG_871X("%s, set pairwise key, TKIP\n", __func__);
4049
4050                                         psta->dot118021XPrivacy = _TKIP_;
4051
4052                                         /* DEBUG_ERR("set key length :param->u.crypt.key_len =%d\n", param->u.crypt.key_len); */
4053                                         /* set mic key */
4054                                         memcpy(psta->dot11tkiptxmickey.skey, &(param->u.crypt.key[16]), 8);
4055                                         memcpy(psta->dot11tkiprxmickey.skey, &(param->u.crypt.key[24]), 8);
4056
4057                                         psecuritypriv->busetkipkey = true;
4058
4059                                 }
4060                                 else if (strcmp(param->u.crypt.alg, "CCMP") == 0)
4061                                 {
4062
4063                                         DBG_871X("%s, set pairwise key, CCMP\n", __func__);
4064
4065                                         psta->dot118021XPrivacy = _AES_;
4066                                 }
4067                                 else
4068                                 {
4069                                         DBG_871X("%s, set pairwise key, none\n", __func__);
4070
4071                                         psta->dot118021XPrivacy = _NO_PRIVACY_;
4072                                 }
4073
4074                                 rtw_ap_set_pairwise_key(padapter, psta);
4075
4076                                 psta->ieee8021x_blocked = false;
4077
4078                         }
4079                         else/* group key??? */
4080                         {
4081                                 if (strcmp(param->u.crypt.alg, "WEP") == 0)
4082                                 {
4083                                         memcpy(psecuritypriv->dot118021XGrpKey[param->u.crypt.idx].skey,  param->u.crypt.key, (param->u.crypt.key_len>16 ?16:param->u.crypt.key_len));
4084
4085                                         psecuritypriv->dot118021XGrpPrivacy = _WEP40_;
4086                                         if (param->u.crypt.key_len == 13)
4087                                         {
4088                                                 psecuritypriv->dot118021XGrpPrivacy = _WEP104_;
4089                                         }
4090                                 }
4091                                 else if (strcmp(param->u.crypt.alg, "TKIP") == 0)
4092                                 {
4093                                         psecuritypriv->dot118021XGrpPrivacy = _TKIP_;
4094
4095                                         memcpy(psecuritypriv->dot118021XGrpKey[param->u.crypt.idx].skey,  param->u.crypt.key, (param->u.crypt.key_len>16 ?16:param->u.crypt.key_len));
4096
4097                                         /* DEBUG_ERR("set key length :param->u.crypt.key_len =%d\n", param->u.crypt.key_len); */
4098                                         /* set mic key */
4099                                         memcpy(psecuritypriv->dot118021XGrptxmickey[param->u.crypt.idx].skey, &(param->u.crypt.key[16]), 8);
4100                                         memcpy(psecuritypriv->dot118021XGrprxmickey[param->u.crypt.idx].skey, &(param->u.crypt.key[24]), 8);
4101
4102                                         psecuritypriv->busetkipkey = true;
4103
4104                                 }
4105                                 else if (strcmp(param->u.crypt.alg, "CCMP") == 0)
4106                                 {
4107                                         psecuritypriv->dot118021XGrpPrivacy = _AES_;
4108
4109                                         memcpy(psecuritypriv->dot118021XGrpKey[param->u.crypt.idx].skey,  param->u.crypt.key, (param->u.crypt.key_len>16 ?16:param->u.crypt.key_len));
4110                                 }
4111                                 else
4112                                 {
4113                                         psecuritypriv->dot118021XGrpPrivacy = _NO_PRIVACY_;
4114                                 }
4115
4116                                 psecuritypriv->dot118021XGrpKeyid = param->u.crypt.idx;
4117
4118                                 psecuritypriv->binstallGrpkey = true;
4119
4120                                 psecuritypriv->dot11PrivacyAlgrthm = psecuritypriv->dot118021XGrpPrivacy;/*  */
4121
4122                                 rtw_ap_set_group_key(padapter, param->u.crypt.key, psecuritypriv->dot118021XGrpPrivacy, param->u.crypt.idx);
4123
4124                                 pbcmc_sta =rtw_get_bcmc_stainfo(padapter);
4125                                 if (pbcmc_sta)
4126                                 {
4127                                         pbcmc_sta->ieee8021x_blocked = false;
4128                                         pbcmc_sta->dot118021XPrivacy = psecuritypriv->dot118021XGrpPrivacy;/* rx will use bmc_sta's dot118021XPrivacy */
4129                                 }
4130
4131                         }
4132
4133                 }
4134
4135         }
4136
4137 exit:
4138
4139         if (pwep)
4140         {
4141                 kfree((u8 *)pwep);
4142         }
4143
4144         return ret;
4145
4146 }
4147
4148 static int rtw_set_beacon(struct net_device *dev, struct ieee_param *param, int len)
4149 {
4150         int ret = 0;
4151         struct adapter *padapter = (struct adapter *)rtw_netdev_priv(dev);
4152         struct mlme_priv *pmlmepriv = &(padapter->mlmepriv);
4153         struct sta_priv *pstapriv = &padapter->stapriv;
4154         unsigned char *pbuf = param->u.bcn_ie.buf;
4155
4156
4157         DBG_871X("%s, len =%d\n", __func__, len);
4158
4159         if (check_fwstate(pmlmepriv, WIFI_AP_STATE) != true)
4160                 return -EINVAL;
4161
4162         memcpy(&pstapriv->max_num_sta, param->u.bcn_ie.reserved, 2);
4163
4164         if ((pstapriv->max_num_sta>NUM_STA) || (pstapriv->max_num_sta<= 0))
4165                 pstapriv->max_num_sta = NUM_STA;
4166
4167
4168         if (rtw_check_beacon_data(padapter, pbuf,  (len-12-2)) == _SUCCESS)/*  12 = param header, 2:no packed */
4169                 ret = 0;
4170         else
4171                 ret = -EINVAL;
4172
4173
4174         return ret;
4175
4176 }
4177
4178 static int rtw_hostapd_sta_flush(struct net_device *dev)
4179 {
4180         /* _irqL irqL; */
4181         /* struct list_head     *phead, *plist; */
4182         int ret = 0;
4183         /* struct sta_info *psta = NULL; */
4184         struct adapter *padapter = (struct adapter *)rtw_netdev_priv(dev);
4185         /* struct sta_priv *pstapriv = &padapter->stapriv; */
4186
4187         DBG_871X("%s\n", __func__);
4188
4189         flush_all_cam_entry(padapter);  /* clear CAM */
4190
4191         ret = rtw_sta_flush(padapter);
4192
4193         return ret;
4194
4195 }
4196
4197 static int rtw_add_sta(struct net_device *dev, struct ieee_param *param)
4198 {
4199         int ret = 0;
4200         struct sta_info *psta = NULL;
4201         struct adapter *padapter = (struct adapter *)rtw_netdev_priv(dev);
4202         struct mlme_priv *pmlmepriv = &(padapter->mlmepriv);
4203         struct sta_priv *pstapriv = &padapter->stapriv;
4204
4205         DBG_871X("rtw_add_sta(aid =%d) =" MAC_FMT "\n", param->u.add_sta.aid, MAC_ARG(param->sta_addr));
4206
4207         if (check_fwstate(pmlmepriv, (_FW_LINKED|WIFI_AP_STATE)) != true)
4208         {
4209                 return -EINVAL;
4210         }
4211
4212         if (param->sta_addr[0] == 0xff && param->sta_addr[1] == 0xff &&
4213             param->sta_addr[2] == 0xff && param->sta_addr[3] == 0xff &&
4214             param->sta_addr[4] == 0xff && param->sta_addr[5] == 0xff)
4215         {
4216                 return -EINVAL;
4217         }
4218
4219 /*
4220         psta = rtw_get_stainfo(pstapriv, param->sta_addr);
4221         if (psta)
4222         {
4223                 DBG_871X("rtw_add_sta(), free has been added psta =%p\n", psta);
4224                 spin_lock_bh(&(pstapriv->sta_hash_lock));
4225                 rtw_free_stainfo(padapter,  psta);
4226                 spin_unlock_bh(&(pstapriv->sta_hash_lock));
4227
4228                 psta = NULL;
4229         }
4230 */
4231         /* psta = rtw_alloc_stainfo(pstapriv, param->sta_addr); */
4232         psta = rtw_get_stainfo(pstapriv, param->sta_addr);
4233         if (psta)
4234         {
4235                 int flags = param->u.add_sta.flags;
4236
4237                 /* DBG_871X("rtw_add_sta(), init sta's variables, psta =%p\n", psta); */
4238
4239                 psta->aid = param->u.add_sta.aid;/* aid = 1~2007 */
4240
4241                 memcpy(psta->bssrateset, param->u.add_sta.tx_supp_rates, 16);
4242
4243
4244                 /* check wmm cap. */
4245                 if (WLAN_STA_WME&flags)
4246                         psta->qos_option = 1;
4247                 else
4248                         psta->qos_option = 0;
4249
4250                 if (pmlmepriv->qospriv.qos_option == 0)
4251                         psta->qos_option = 0;
4252
4253                 /* chec 802.11n ht cap. */
4254                 if (WLAN_STA_HT&flags)
4255                 {
4256                         psta->htpriv.ht_option = true;
4257                         psta->qos_option = 1;
4258                         memcpy((void*)&psta->htpriv.ht_cap, (void*)&param->u.add_sta.ht_cap, sizeof(struct rtw_ieee80211_ht_cap));
4259                 }
4260                 else
4261                 {
4262                         psta->htpriv.ht_option = false;
4263                 }
4264
4265                 if (pmlmepriv->htpriv.ht_option == false)
4266                         psta->htpriv.ht_option = false;
4267
4268                 update_sta_info_apmode(padapter, psta);
4269
4270
4271         }
4272         else
4273         {
4274                 ret = -ENOMEM;
4275         }
4276
4277         return ret;
4278
4279 }
4280
4281 static int rtw_del_sta(struct net_device *dev, struct ieee_param *param)
4282 {
4283         int ret = 0;
4284         struct sta_info *psta = NULL;
4285         struct adapter *padapter = (struct adapter *)rtw_netdev_priv(dev);
4286         struct mlme_priv *pmlmepriv = &(padapter->mlmepriv);
4287         struct sta_priv *pstapriv = &padapter->stapriv;
4288
4289         DBG_871X("rtw_del_sta =" MAC_FMT "\n", MAC_ARG(param->sta_addr));
4290
4291         if (check_fwstate(pmlmepriv, (_FW_LINKED|WIFI_AP_STATE)) != true)
4292         {
4293                 return -EINVAL;
4294         }
4295
4296         if (param->sta_addr[0] == 0xff && param->sta_addr[1] == 0xff &&
4297             param->sta_addr[2] == 0xff && param->sta_addr[3] == 0xff &&
4298             param->sta_addr[4] == 0xff && param->sta_addr[5] == 0xff)
4299         {
4300                 return -EINVAL;
4301         }
4302
4303         psta = rtw_get_stainfo(pstapriv, param->sta_addr);
4304         if (psta)
4305         {
4306                 u8 updated =false;
4307
4308                 /* DBG_871X("free psta =%p, aid =%d\n", psta, psta->aid); */
4309
4310                 spin_lock_bh(&pstapriv->asoc_list_lock);
4311                 if (list_empty(&psta->asoc_list) ==false)
4312                 {
4313                         list_del_init(&psta->asoc_list);
4314                         pstapriv->asoc_list_cnt--;
4315                         updated = ap_free_sta(padapter, psta, true, WLAN_REASON_DEAUTH_LEAVING);
4316
4317                 }
4318                 spin_unlock_bh(&pstapriv->asoc_list_lock);
4319
4320                 associated_clients_update(padapter, updated);
4321
4322                 psta = NULL;
4323
4324         }
4325         else
4326         {
4327                 DBG_871X("rtw_del_sta(), sta has already been removed or never been added\n");
4328
4329                 /* ret = -1; */
4330         }
4331
4332
4333         return ret;
4334
4335 }
4336
4337 static int rtw_ioctl_get_sta_data(struct net_device *dev, struct ieee_param *param, int len)
4338 {
4339         int ret = 0;
4340         struct sta_info *psta = NULL;
4341         struct adapter *padapter = (struct adapter *)rtw_netdev_priv(dev);
4342         struct mlme_priv *pmlmepriv = &(padapter->mlmepriv);
4343         struct sta_priv *pstapriv = &padapter->stapriv;
4344         struct ieee_param_ex *param_ex = (struct ieee_param_ex *)param;
4345         struct sta_data *psta_data = (struct sta_data *)param_ex->data;
4346
4347         DBG_871X("rtw_ioctl_get_sta_info, sta_addr: " MAC_FMT "\n", MAC_ARG(param_ex->sta_addr));
4348
4349         if (check_fwstate(pmlmepriv, (_FW_LINKED|WIFI_AP_STATE)) != true)
4350         {
4351                 return -EINVAL;
4352         }
4353
4354         if (param_ex->sta_addr[0] == 0xff && param_ex->sta_addr[1] == 0xff &&
4355             param_ex->sta_addr[2] == 0xff && param_ex->sta_addr[3] == 0xff &&
4356             param_ex->sta_addr[4] == 0xff && param_ex->sta_addr[5] == 0xff)
4357         {
4358                 return -EINVAL;
4359         }
4360
4361         psta = rtw_get_stainfo(pstapriv, param_ex->sta_addr);
4362         if (psta)
4363         {
4364                 psta_data->aid = (u16)psta->aid;
4365                 psta_data->capability = psta->capability;
4366                 psta_data->flags = psta->flags;
4367
4368 /*
4369                 nonerp_set : BIT(0)
4370                 no_short_slot_time_set : BIT(1)
4371                 no_short_preamble_set : BIT(2)
4372                 no_ht_gf_set : BIT(3)
4373                 no_ht_set : BIT(4)
4374                 ht_20mhz_set : BIT(5)
4375 */
4376
4377                 psta_data->sta_set =((psta->nonerp_set) |
4378                                                         (psta->no_short_slot_time_set <<1) |
4379                                                         (psta->no_short_preamble_set <<2) |
4380                                                         (psta->no_ht_gf_set <<3) |
4381                                                         (psta->no_ht_set <<4) |
4382                                                         (psta->ht_20mhz_set <<5));
4383
4384                 psta_data->tx_supp_rates_len =  psta->bssratelen;
4385                 memcpy(psta_data->tx_supp_rates, psta->bssrateset, psta->bssratelen);
4386                 memcpy(&psta_data->ht_cap, &psta->htpriv.ht_cap, sizeof(struct rtw_ieee80211_ht_cap));
4387                 psta_data->rx_pkts = psta->sta_stats.rx_data_pkts;
4388                 psta_data->rx_bytes = psta->sta_stats.rx_bytes;
4389                 psta_data->rx_drops = psta->sta_stats.rx_drops;
4390
4391                 psta_data->tx_pkts = psta->sta_stats.tx_pkts;
4392                 psta_data->tx_bytes = psta->sta_stats.tx_bytes;
4393                 psta_data->tx_drops = psta->sta_stats.tx_drops;
4394
4395
4396         }
4397         else
4398         {
4399                 ret = -1;
4400         }
4401
4402         return ret;
4403
4404 }
4405
4406 static int rtw_get_sta_wpaie(struct net_device *dev, struct ieee_param *param)
4407 {
4408         int ret = 0;
4409         struct sta_info *psta = NULL;
4410         struct adapter *padapter = (struct adapter *)rtw_netdev_priv(dev);
4411         struct mlme_priv *pmlmepriv = &(padapter->mlmepriv);
4412         struct sta_priv *pstapriv = &padapter->stapriv;
4413
4414         DBG_871X("rtw_get_sta_wpaie, sta_addr: " MAC_FMT "\n", MAC_ARG(param->sta_addr));
4415
4416         if (check_fwstate(pmlmepriv, (_FW_LINKED|WIFI_AP_STATE)) != true)
4417         {
4418                 return -EINVAL;
4419         }
4420
4421         if (param->sta_addr[0] == 0xff && param->sta_addr[1] == 0xff &&
4422             param->sta_addr[2] == 0xff && param->sta_addr[3] == 0xff &&
4423             param->sta_addr[4] == 0xff && param->sta_addr[5] == 0xff)
4424         {
4425                 return -EINVAL;
4426         }
4427
4428         psta = rtw_get_stainfo(pstapriv, param->sta_addr);
4429         if (psta)
4430         {
4431                 if ((psta->wpa_ie[0] == WLAN_EID_RSN) || (psta->wpa_ie[0] == WLAN_EID_GENERIC))
4432                 {
4433                         int wpa_ie_len;
4434                         int copy_len;
4435
4436                         wpa_ie_len = psta->wpa_ie[1];
4437
4438                         copy_len = ((wpa_ie_len+2) > sizeof(psta->wpa_ie)) ? (sizeof(psta->wpa_ie)):(wpa_ie_len+2);
4439
4440                         param->u.wpa_ie.len = copy_len;
4441
4442                         memcpy(param->u.wpa_ie.reserved, psta->wpa_ie, copy_len);
4443                 }
4444                 else
4445                 {
4446                         /* ret = -1; */
4447                         DBG_871X("sta's wpa_ie is NONE\n");
4448                 }
4449         }
4450         else
4451         {
4452                 ret = -1;
4453         }
4454
4455         return ret;
4456
4457 }
4458
4459 static int rtw_set_wps_beacon(struct net_device *dev, struct ieee_param *param, int len)
4460 {
4461         int ret = 0;
4462         unsigned char wps_oui[4]={0x0, 0x50, 0xf2, 0x04};
4463         struct adapter *padapter = (struct adapter *)rtw_netdev_priv(dev);
4464         struct mlme_priv *pmlmepriv = &(padapter->mlmepriv);
4465         struct mlme_ext_priv *pmlmeext = &(padapter->mlmeextpriv);
4466         int ie_len;
4467
4468         DBG_871X("%s, len =%d\n", __func__, len);
4469
4470         if (check_fwstate(pmlmepriv, WIFI_AP_STATE) != true)
4471                 return -EINVAL;
4472
4473         ie_len = len-12-2;/*  12 = param header, 2:no packed */
4474
4475
4476         if (pmlmepriv->wps_beacon_ie)
4477         {
4478                 kfree(pmlmepriv->wps_beacon_ie);
4479                 pmlmepriv->wps_beacon_ie = NULL;
4480         }
4481
4482         if (ie_len>0)
4483         {
4484                 pmlmepriv->wps_beacon_ie = rtw_malloc(ie_len);
4485                 pmlmepriv->wps_beacon_ie_len = ie_len;
4486                 if (pmlmepriv->wps_beacon_ie == NULL) {
4487                         DBG_871X("%s()-%d: rtw_malloc() ERROR!\n", __func__, __LINE__);
4488                         return -EINVAL;
4489                 }
4490
4491                 memcpy(pmlmepriv->wps_beacon_ie, param->u.bcn_ie.buf, ie_len);
4492
4493                 update_beacon(padapter, _VENDOR_SPECIFIC_IE_, wps_oui, true);
4494
4495                 pmlmeext->bstart_bss = true;
4496
4497         }
4498
4499
4500         return ret;
4501
4502 }
4503
4504 static int rtw_set_wps_probe_resp(struct net_device *dev, struct ieee_param *param, int len)
4505 {
4506         int ret = 0;
4507         struct adapter *padapter = (struct adapter *)rtw_netdev_priv(dev);
4508         struct mlme_priv *pmlmepriv = &(padapter->mlmepriv);
4509         int ie_len;
4510
4511         DBG_871X("%s, len =%d\n", __func__, len);
4512
4513         if (check_fwstate(pmlmepriv, WIFI_AP_STATE) != true)
4514                 return -EINVAL;
4515
4516         ie_len = len-12-2;/*  12 = param header, 2:no packed */
4517
4518
4519         if (pmlmepriv->wps_probe_resp_ie)
4520         {
4521                 kfree(pmlmepriv->wps_probe_resp_ie);
4522                 pmlmepriv->wps_probe_resp_ie = NULL;
4523         }
4524
4525         if (ie_len>0)
4526         {
4527                 pmlmepriv->wps_probe_resp_ie = rtw_malloc(ie_len);
4528                 pmlmepriv->wps_probe_resp_ie_len = ie_len;
4529                 if (pmlmepriv->wps_probe_resp_ie == NULL) {
4530                         DBG_871X("%s()-%d: rtw_malloc() ERROR!\n", __func__, __LINE__);
4531                         return -EINVAL;
4532                 }
4533                 memcpy(pmlmepriv->wps_probe_resp_ie, param->u.bcn_ie.buf, ie_len);
4534         }
4535
4536
4537         return ret;
4538
4539 }
4540
4541 static int rtw_set_wps_assoc_resp(struct net_device *dev, struct ieee_param *param, int len)
4542 {
4543         int ret = 0;
4544         struct adapter *padapter = (struct adapter *)rtw_netdev_priv(dev);
4545         struct mlme_priv *pmlmepriv = &(padapter->mlmepriv);
4546         int ie_len;
4547
4548         DBG_871X("%s, len =%d\n", __func__, len);
4549
4550         if (check_fwstate(pmlmepriv, WIFI_AP_STATE) != true)
4551                 return -EINVAL;
4552
4553         ie_len = len-12-2;/*  12 = param header, 2:no packed */
4554
4555
4556         if (pmlmepriv->wps_assoc_resp_ie)
4557         {
4558                 kfree(pmlmepriv->wps_assoc_resp_ie);
4559                 pmlmepriv->wps_assoc_resp_ie = NULL;
4560         }
4561
4562         if (ie_len>0)
4563         {
4564                 pmlmepriv->wps_assoc_resp_ie = rtw_malloc(ie_len);
4565                 pmlmepriv->wps_assoc_resp_ie_len = ie_len;
4566                 if (pmlmepriv->wps_assoc_resp_ie == NULL) {
4567                         DBG_871X("%s()-%d: rtw_malloc() ERROR!\n", __func__, __LINE__);
4568                         return -EINVAL;
4569                 }
4570
4571                 memcpy(pmlmepriv->wps_assoc_resp_ie, param->u.bcn_ie.buf, ie_len);
4572         }
4573
4574
4575         return ret;
4576
4577 }
4578
4579 static int rtw_set_hidden_ssid(struct net_device *dev, struct ieee_param *param, int len)
4580 {
4581         int ret = 0;
4582         struct adapter *adapter = (struct adapter *)rtw_netdev_priv(dev);
4583         struct mlme_priv *mlmepriv = &(adapter->mlmepriv);
4584         struct mlme_ext_priv *mlmeext = &(adapter->mlmeextpriv);
4585         struct mlme_ext_info *mlmeinfo = &(mlmeext->mlmext_info);
4586         int ie_len;
4587         u8 *ssid_ie;
4588         char ssid[NDIS_802_11_LENGTH_SSID + 1];
4589         sint ssid_len;
4590         u8 ignore_broadcast_ssid;
4591
4592         if (check_fwstate(mlmepriv, WIFI_AP_STATE) != true)
4593                 return -EPERM;
4594
4595         if (param->u.bcn_ie.reserved[0] != 0xea)
4596                 return -EINVAL;
4597
4598         mlmeinfo->hidden_ssid_mode = ignore_broadcast_ssid = param->u.bcn_ie.reserved[1];
4599
4600         ie_len = len-12-2;/*  12 = param header, 2:no packed */
4601         ssid_ie = rtw_get_ie(param->u.bcn_ie.buf,  WLAN_EID_SSID, &ssid_len, ie_len);
4602
4603         if (ssid_ie && ssid_len > 0 && ssid_len <= NDIS_802_11_LENGTH_SSID) {
4604                 struct wlan_bssid_ex *pbss_network = &mlmepriv->cur_network.network;
4605                 struct wlan_bssid_ex *pbss_network_ext = &mlmeinfo->network;
4606
4607                 memcpy(ssid, ssid_ie+2, ssid_len);
4608                 ssid[ssid_len] = 0x0;
4609
4610                 if (0)
4611                         DBG_871X(FUNC_ADPT_FMT" ssid:(%s,%d), from ie:(%s,%d), (%s,%d)\n", FUNC_ADPT_ARG(adapter),
4612                                  ssid, ssid_len,
4613                                  pbss_network->Ssid.Ssid, pbss_network->Ssid.SsidLength,
4614                                  pbss_network_ext->Ssid.Ssid, pbss_network_ext->Ssid.SsidLength);
4615
4616                 memcpy(pbss_network->Ssid.Ssid, (void *)ssid, ssid_len);
4617                 pbss_network->Ssid.SsidLength = ssid_len;
4618                 memcpy(pbss_network_ext->Ssid.Ssid, (void *)ssid, ssid_len);
4619                 pbss_network_ext->Ssid.SsidLength = ssid_len;
4620
4621                 if (0)
4622                         DBG_871X(FUNC_ADPT_FMT" after ssid:(%s,%d), (%s,%d)\n", FUNC_ADPT_ARG(adapter),
4623                                  pbss_network->Ssid.Ssid, pbss_network->Ssid.SsidLength,
4624                                  pbss_network_ext->Ssid.Ssid, pbss_network_ext->Ssid.SsidLength);
4625         }
4626
4627         DBG_871X(FUNC_ADPT_FMT" ignore_broadcast_ssid:%d, %s,%d\n", FUNC_ADPT_ARG(adapter),
4628                 ignore_broadcast_ssid, ssid, ssid_len);
4629
4630         return ret;
4631 }
4632
4633 static int rtw_ioctl_acl_remove_sta(struct net_device *dev, struct ieee_param *param, int len)
4634 {
4635         int ret = 0;
4636         struct adapter *padapter = (struct adapter *)rtw_netdev_priv(dev);
4637         struct mlme_priv *pmlmepriv = &(padapter->mlmepriv);
4638
4639         if (check_fwstate(pmlmepriv, WIFI_AP_STATE) != true)
4640                 return -EINVAL;
4641
4642         if (param->sta_addr[0] == 0xff && param->sta_addr[1] == 0xff &&
4643             param->sta_addr[2] == 0xff && param->sta_addr[3] == 0xff &&
4644             param->sta_addr[4] == 0xff && param->sta_addr[5] == 0xff)
4645         {
4646                 return -EINVAL;
4647         }
4648
4649         ret = rtw_acl_remove_sta(padapter, param->sta_addr);
4650
4651         return ret;
4652
4653 }
4654
4655 static int rtw_ioctl_acl_add_sta(struct net_device *dev, struct ieee_param *param, int len)
4656 {
4657         int ret = 0;
4658         struct adapter *padapter = (struct adapter *)rtw_netdev_priv(dev);
4659         struct mlme_priv *pmlmepriv = &(padapter->mlmepriv);
4660
4661         if (check_fwstate(pmlmepriv, WIFI_AP_STATE) != true)
4662                 return -EINVAL;
4663
4664         if (param->sta_addr[0] == 0xff && param->sta_addr[1] == 0xff &&
4665             param->sta_addr[2] == 0xff && param->sta_addr[3] == 0xff &&
4666             param->sta_addr[4] == 0xff && param->sta_addr[5] == 0xff)
4667         {
4668                 return -EINVAL;
4669         }
4670
4671         ret = rtw_acl_add_sta(padapter, param->sta_addr);
4672
4673         return ret;
4674
4675 }
4676
4677 static int rtw_ioctl_set_macaddr_acl(struct net_device *dev, struct ieee_param *param, int len)
4678 {
4679         int ret = 0;
4680         struct adapter *padapter = (struct adapter *)rtw_netdev_priv(dev);
4681         struct mlme_priv *pmlmepriv = &(padapter->mlmepriv);
4682
4683         if (check_fwstate(pmlmepriv, WIFI_AP_STATE) != true)
4684                 return -EINVAL;
4685
4686         rtw_set_macaddr_acl(padapter, param->u.mlme.command);
4687
4688         return ret;
4689 }
4690
4691 static int rtw_hostapd_ioctl(struct net_device *dev, struct iw_point *p)
4692 {
4693         struct ieee_param *param;
4694         int ret = 0;
4695         struct adapter *padapter = (struct adapter *)rtw_netdev_priv(dev);
4696
4697         /* DBG_871X("%s\n", __func__); */
4698
4699         /*
4700         * this function is expect to call in master mode, which allows no power saving
4701         * so, we just check hw_init_completed
4702         */
4703
4704         if (padapter->hw_init_completed ==false) {
4705                 ret = -EPERM;
4706                 goto out;
4707         }
4708
4709
4710         /* if (p->length < sizeof(struct ieee_param) || !p->pointer) { */
4711         if (!p->pointer) {
4712                 ret = -EINVAL;
4713                 goto out;
4714         }
4715
4716         param = (struct ieee_param *)rtw_malloc(p->length);
4717         if (param == NULL)
4718         {
4719                 ret = -ENOMEM;
4720                 goto out;
4721         }
4722
4723         if (copy_from_user(param, p->pointer, p->length))
4724         {
4725                 kfree((u8 *)param);
4726                 ret = -EFAULT;
4727                 goto out;
4728         }
4729
4730         /* DBG_871X("%s, cmd =%d\n", __func__, param->cmd); */
4731
4732         switch (param->cmd)
4733         {
4734                 case RTL871X_HOSTAPD_FLUSH:
4735
4736                         ret = rtw_hostapd_sta_flush(dev);
4737
4738                         break;
4739
4740                 case RTL871X_HOSTAPD_ADD_STA:
4741
4742                         ret = rtw_add_sta(dev, param);
4743
4744                         break;
4745
4746                 case RTL871X_HOSTAPD_REMOVE_STA:
4747
4748                         ret = rtw_del_sta(dev, param);
4749
4750                         break;
4751
4752                 case RTL871X_HOSTAPD_SET_BEACON:
4753
4754                         ret = rtw_set_beacon(dev, param, p->length);
4755
4756                         break;
4757
4758                 case RTL871X_SET_ENCRYPTION:
4759
4760                         ret = rtw_set_encryption(dev, param, p->length);
4761
4762                         break;
4763
4764                 case RTL871X_HOSTAPD_GET_WPAIE_STA:
4765
4766                         ret = rtw_get_sta_wpaie(dev, param);
4767
4768                         break;
4769
4770                 case RTL871X_HOSTAPD_SET_WPS_BEACON:
4771
4772                         ret = rtw_set_wps_beacon(dev, param, p->length);
4773
4774                         break;
4775
4776                 case RTL871X_HOSTAPD_SET_WPS_PROBE_RESP:
4777
4778                         ret = rtw_set_wps_probe_resp(dev, param, p->length);
4779
4780                         break;
4781
4782                 case RTL871X_HOSTAPD_SET_WPS_ASSOC_RESP:
4783
4784                         ret = rtw_set_wps_assoc_resp(dev, param, p->length);
4785
4786                         break;
4787
4788                 case RTL871X_HOSTAPD_SET_HIDDEN_SSID:
4789
4790                         ret = rtw_set_hidden_ssid(dev, param, p->length);
4791
4792                         break;
4793
4794                 case RTL871X_HOSTAPD_GET_INFO_STA:
4795
4796                         ret = rtw_ioctl_get_sta_data(dev, param, p->length);
4797
4798                         break;
4799
4800                 case RTL871X_HOSTAPD_SET_MACADDR_ACL:
4801
4802                         ret = rtw_ioctl_set_macaddr_acl(dev, param, p->length);
4803
4804                         break;
4805
4806                 case RTL871X_HOSTAPD_ACL_ADD_STA:
4807
4808                         ret = rtw_ioctl_acl_add_sta(dev, param, p->length);
4809
4810                         break;
4811
4812                 case RTL871X_HOSTAPD_ACL_REMOVE_STA:
4813
4814                         ret = rtw_ioctl_acl_remove_sta(dev, param, p->length);
4815
4816                         break;
4817
4818                 default:
4819                         DBG_871X("Unknown hostapd request: %d\n", param->cmd);
4820                         ret = -EOPNOTSUPP;
4821                         break;
4822
4823         }
4824
4825         if (ret == 0 && copy_to_user(p->pointer, param, p->length))
4826                 ret = -EFAULT;
4827
4828
4829         kfree((u8 *)param);
4830
4831 out:
4832
4833         return ret;
4834
4835 }
4836
4837 static int rtw_wx_set_priv(struct net_device *dev,
4838                                 struct iw_request_info *info,
4839                                 union iwreq_data *awrq,
4840                                 char *extra)
4841 {
4842
4843 #ifdef CONFIG_DEBUG_RTW_WX_SET_PRIV
4844         char *ext_dbg;
4845 #endif
4846
4847         int ret = 0;
4848         int len = 0;
4849         char *ext;
4850
4851         struct adapter *padapter = (struct adapter *)rtw_netdev_priv(dev);
4852         struct iw_point *dwrq = (struct iw_point*)awrq;
4853
4854         /* RT_TRACE(_module_rtl871x_ioctl_os_c, _drv_notice_, ("+rtw_wx_set_priv\n")); */
4855         if (dwrq->length == 0)
4856                 return -EFAULT;
4857
4858         len = dwrq->length;
4859         if (!(ext = vmalloc(len)))
4860                 return -ENOMEM;
4861
4862         if (copy_from_user(ext, dwrq->pointer, len)) {
4863                 vfree(ext);
4864                 return -EFAULT;
4865         }
4866
4867
4868         /* RT_TRACE(_module_rtl871x_ioctl_os_c, _drv_notice_, */
4869         /*       ("rtw_wx_set_priv: %s req =%s\n", */
4870         /*        dev->name, ext)); */
4871
4872         #ifdef CONFIG_DEBUG_RTW_WX_SET_PRIV
4873         if (!(ext_dbg = vmalloc(len)))
4874         {
4875                 vfree(ext, len);
4876                 return -ENOMEM;
4877         }
4878
4879         memcpy(ext_dbg, ext, len);
4880         #endif
4881
4882         /* added for wps2.0 @20110524 */
4883         if (dwrq->flags == 0x8766 && len > 8)
4884         {
4885                 u32 cp_sz;
4886                 struct mlme_priv *pmlmepriv = &(padapter->mlmepriv);
4887                 u8 *probereq_wpsie = ext;
4888                 int probereq_wpsie_len = len;
4889                 u8 wps_oui[4]={0x0, 0x50, 0xf2, 0x04};
4890
4891                 if ((_VENDOR_SPECIFIC_IE_ == probereq_wpsie[0]) &&
4892                         (!memcmp(&probereq_wpsie[2], wps_oui, 4)))
4893                 {
4894                         cp_sz = probereq_wpsie_len>MAX_WPS_IE_LEN ? MAX_WPS_IE_LEN:probereq_wpsie_len;
4895
4896                         if (pmlmepriv->wps_probe_req_ie)
4897                         {
4898                                 pmlmepriv->wps_probe_req_ie_len = 0;
4899                                 kfree(pmlmepriv->wps_probe_req_ie);
4900                                 pmlmepriv->wps_probe_req_ie = NULL;
4901                         }
4902
4903                         pmlmepriv->wps_probe_req_ie = rtw_malloc(cp_sz);
4904                         if (pmlmepriv->wps_probe_req_ie == NULL) {
4905                                 printk("%s()-%d: rtw_malloc() ERROR!\n", __func__, __LINE__);
4906                                 ret =  -EINVAL;
4907                                 goto FREE_EXT;
4908
4909                         }
4910
4911                         memcpy(pmlmepriv->wps_probe_req_ie, probereq_wpsie, cp_sz);
4912                         pmlmepriv->wps_probe_req_ie_len = cp_sz;
4913
4914                 }
4915
4916                 goto FREE_EXT;
4917
4918         }
4919
4920         if (len >= WEXT_CSCAN_HEADER_SIZE
4921                 && !memcmp(ext, WEXT_CSCAN_HEADER, WEXT_CSCAN_HEADER_SIZE)
4922         ) {
4923                 ret = rtw_wx_set_scan(dev, info, awrq, ext);
4924                 goto FREE_EXT;
4925         }
4926
4927 FREE_EXT:
4928
4929         vfree(ext);
4930         #ifdef CONFIG_DEBUG_RTW_WX_SET_PRIV
4931         vfree(ext_dbg);
4932         #endif
4933
4934         /* DBG_871X("rtw_wx_set_priv: (SIOCSIWPRIV) %s ret =%d\n", */
4935         /*              dev->name, ret); */
4936
4937         return ret;
4938
4939 }
4940
4941 static int rtw_pm_set(struct net_device *dev,
4942                                struct iw_request_info *info,
4943                                union iwreq_data *wrqu, char *extra)
4944 {
4945         int ret = 0;
4946         unsigned        mode = 0;
4947         struct adapter *padapter = (struct adapter *)rtw_netdev_priv(dev);
4948
4949         DBG_871X("[%s] extra = %s\n", __func__, extra);
4950
4951         if (!memcmp(extra, "lps =", 4))
4952         {
4953                 sscanf(extra+4, "%u", &mode);
4954                 ret = rtw_pm_set_lps(padapter, mode);
4955         }
4956         else if (!memcmp(extra, "ips =", 4))
4957         {
4958                 sscanf(extra+4, "%u", &mode);
4959                 ret = rtw_pm_set_ips(padapter, mode);
4960         }
4961         else {
4962                 ret = -EINVAL;
4963         }
4964
4965         return ret;
4966 }
4967
4968 static int rtw_mp_efuse_get(struct net_device *dev,
4969                         struct iw_request_info *info,
4970                         union iwreq_data *wdata, char *extra)
4971 {
4972         int err = 0;
4973         return err;
4974 }
4975
4976 static int rtw_mp_efuse_set(struct net_device *dev,
4977                         struct iw_request_info *info,
4978                         union iwreq_data *wdata, char *extra)
4979 {
4980         int err = 0;
4981         return err;
4982 }
4983
4984 static int rtw_tdls(struct net_device *dev,
4985                                 struct iw_request_info *info,
4986                                 union iwreq_data *wrqu, char *extra)
4987 {
4988         int ret = 0;
4989         return ret;
4990 }
4991
4992
4993 static int rtw_tdls_get(struct net_device *dev,
4994                                 struct iw_request_info *info,
4995                                 union iwreq_data *wrqu, char *extra)
4996 {
4997         int ret = 0;
4998         return ret;
4999 }
5000
5001
5002
5003
5004
5005 #ifdef CONFIG_INTEL_WIDI
5006 static int rtw_widi_set(struct net_device *dev,
5007                                struct iw_request_info *info,
5008                                union iwreq_data *wrqu, char *extra)
5009 {
5010         int ret = 0;
5011         struct adapter *padapter = (struct adapter *)rtw_netdev_priv(dev);
5012
5013         process_intel_widi_cmd(padapter, extra);
5014
5015         return ret;
5016 }
5017
5018 static int rtw_widi_set_probe_request(struct net_device *dev,
5019                                struct iw_request_info *info,
5020                                union iwreq_data *wrqu, char *extra)
5021 {
5022         int     ret = 0;
5023         u8 *pbuf = NULL;
5024         struct adapter  *padapter = (struct adapter *)rtw_netdev_priv(dev);
5025
5026         pbuf = rtw_malloc(sizeof(l2_msg_t));
5027         if (pbuf)
5028         {
5029                 if (copy_from_user(pbuf, wrqu->data.pointer, wrqu->data.length))
5030                         ret = -EFAULT;
5031                 /* memcpy(pbuf, wrqu->data.pointer, wrqu->data.length); */
5032
5033                 if (wrqu->data.flags == 0)
5034                         intel_widi_wk_cmd(padapter, INTEL_WIDI_ISSUE_PROB_WK, pbuf, sizeof(l2_msg_t));
5035                 else if (wrqu->data.flags == 1)
5036                         rtw_set_wfd_rds_sink_info(padapter, (l2_msg_t *)pbuf);
5037         }
5038         return ret;
5039 }
5040 #endif /*  CONFIG_INTEL_WIDI */
5041
5042 static int rtw_test(
5043         struct net_device *dev,
5044         struct iw_request_info *info,
5045         union iwreq_data *wrqu, char *extra)
5046 {
5047         u32 len;
5048         u8 *pbuf, *pch;
5049         char *ptmp;
5050         u8 *delim = ",";
5051         struct adapter *padapter = rtw_netdev_priv(dev);
5052
5053
5054         DBG_871X("+%s\n", __func__);
5055         len = wrqu->data.length;
5056
5057         pbuf = (u8 *)rtw_zmalloc(len);
5058         if (pbuf == NULL) {
5059                 DBG_871X("%s: no memory!\n", __func__);
5060                 return -ENOMEM;
5061         }
5062
5063         if (copy_from_user(pbuf, wrqu->data.pointer, len)) {
5064                 kfree(pbuf);
5065                 DBG_871X("%s: copy from user fail!\n", __func__);
5066                 return -EFAULT;
5067         }
5068         DBG_871X("%s: string =\"%s\"\n", __func__, pbuf);
5069
5070         ptmp = (char*)pbuf;
5071         pch = strsep(&ptmp, delim);
5072         if ((pch == NULL) || (strlen(pch) == 0)) {
5073                 kfree(pbuf);
5074                 DBG_871X("%s: parameter error(level 1)!\n", __func__);
5075                 return -EFAULT;
5076         }
5077
5078         if (strcmp(pch, "bton") == 0)
5079         {
5080                 rtw_btcoex_SetManualControl(padapter, false);
5081         }
5082
5083         if (strcmp(pch, "btoff") == 0)
5084         {
5085                 rtw_btcoex_SetManualControl(padapter, true);
5086         }
5087
5088         if (strcmp(pch, "h2c") == 0)
5089         {
5090                 u8 param[8];
5091                 u8 count = 0;
5092                 u32 tmp;
5093                 u8 i;
5094                 u32 pos;
5095                 s32 ret;
5096
5097
5098                 do {
5099                         pch = strsep(&ptmp, delim);
5100                         if ((pch == NULL) || (strlen(pch) == 0))
5101                                 break;
5102
5103                         sscanf(pch, "%x", &tmp);
5104                         param[count++] = (u8)tmp;
5105                 } while (count < 8);
5106
5107                 if (count == 0) {
5108                         kfree(pbuf);
5109                         DBG_871X("%s: parameter error(level 2)!\n", __func__);
5110                         return -EFAULT;
5111                 }
5112
5113                 ret = rtw_hal_fill_h2c_cmd(padapter, param[0], count-1, &param[1]);
5114
5115                 pos = sprintf(extra, "H2C ID = 0x%02x content =", param[0]);
5116                 for (i = 1; i<count; i++) {
5117                         pos += sprintf(extra+pos, "%02x,", param[i]);
5118                 }
5119                 extra[pos] = 0;
5120                 pos--;
5121                 pos += sprintf(extra+pos, " %s", ret == _FAIL?"FAIL":"OK");
5122
5123                 wrqu->data.length = strlen(extra) + 1;
5124         }
5125
5126         kfree(pbuf);
5127         return 0;
5128 }
5129
5130 static iw_handler rtw_handlers[] =
5131 {
5132         NULL,                                   /* SIOCSIWCOMMIT */
5133         rtw_wx_get_name,                /* SIOCGIWNAME */
5134         dummy,                                  /* SIOCSIWNWID */
5135         dummy,                                  /* SIOCGIWNWID */
5136         rtw_wx_set_freq,                /* SIOCSIWFREQ */
5137         rtw_wx_get_freq,                /* SIOCGIWFREQ */
5138         rtw_wx_set_mode,                /* SIOCSIWMODE */
5139         rtw_wx_get_mode,                /* SIOCGIWMODE */
5140         dummy,                                  /* SIOCSIWSENS */
5141         rtw_wx_get_sens,                /* SIOCGIWSENS */
5142         NULL,                                   /* SIOCSIWRANGE */
5143         rtw_wx_get_range,               /* SIOCGIWRANGE */
5144         rtw_wx_set_priv,                /* SIOCSIWPRIV */
5145         NULL,                                   /* SIOCGIWPRIV */
5146         NULL,                                   /* SIOCSIWSTATS */
5147         NULL,                                   /* SIOCGIWSTATS */
5148         dummy,                                  /* SIOCSIWSPY */
5149         dummy,                                  /* SIOCGIWSPY */
5150         NULL,                                   /* SIOCGIWTHRSPY */
5151         NULL,                                   /* SIOCWIWTHRSPY */
5152         rtw_wx_set_wap,         /* SIOCSIWAP */
5153         rtw_wx_get_wap,         /* SIOCGIWAP */
5154         rtw_wx_set_mlme,                /* request MLME operation; uses struct iw_mlme */
5155         dummy,                                  /* SIOCGIWAPLIST -- depricated */
5156         rtw_wx_set_scan,                /* SIOCSIWSCAN */
5157         rtw_wx_get_scan,                /* SIOCGIWSCAN */
5158         rtw_wx_set_essid,               /* SIOCSIWESSID */
5159         rtw_wx_get_essid,               /* SIOCGIWESSID */
5160         dummy,                                  /* SIOCSIWNICKN */
5161         rtw_wx_get_nick,                /* SIOCGIWNICKN */
5162         NULL,                                   /* -- hole -- */
5163         NULL,                                   /* -- hole -- */
5164         rtw_wx_set_rate,                /* SIOCSIWRATE */
5165         rtw_wx_get_rate,                /* SIOCGIWRATE */
5166         rtw_wx_set_rts,                 /* SIOCSIWRTS */
5167         rtw_wx_get_rts,                 /* SIOCGIWRTS */
5168         rtw_wx_set_frag,                /* SIOCSIWFRAG */
5169         rtw_wx_get_frag,                /* SIOCGIWFRAG */
5170         dummy,                                  /* SIOCSIWTXPOW */
5171         dummy,                                  /* SIOCGIWTXPOW */
5172         dummy,                                  /* SIOCSIWRETRY */
5173         rtw_wx_get_retry,               /* SIOCGIWRETRY */
5174         rtw_wx_set_enc,                 /* SIOCSIWENCODE */
5175         rtw_wx_get_enc,                 /* SIOCGIWENCODE */
5176         dummy,                                  /* SIOCSIWPOWER */
5177         rtw_wx_get_power,               /* SIOCGIWPOWER */
5178         NULL,                                   /*---hole---*/
5179         NULL,                                   /*---hole---*/
5180         rtw_wx_set_gen_ie,              /* SIOCSIWGENIE */
5181         NULL,                                   /* SIOCGWGENIE */
5182         rtw_wx_set_auth,                /* SIOCSIWAUTH */
5183         NULL,                                   /* SIOCGIWAUTH */
5184         rtw_wx_set_enc_ext,             /* SIOCSIWENCODEEXT */
5185         NULL,                                   /* SIOCGIWENCODEEXT */
5186         rtw_wx_set_pmkid,               /* SIOCSIWPMKSA */
5187         NULL,                                   /*---hole---*/
5188 };
5189
5190 static const struct iw_priv_args rtw_private_args[] = {
5191         {
5192                 SIOCIWFIRSTPRIV + 0x0,
5193                 IW_PRIV_TYPE_CHAR | 0x7FF, 0, "write"
5194         },
5195         {
5196                 SIOCIWFIRSTPRIV + 0x1,
5197                 IW_PRIV_TYPE_CHAR | 0x7FF,
5198                 IW_PRIV_TYPE_CHAR | IW_PRIV_SIZE_FIXED | IFNAMSIZ, "read"
5199         },
5200         {
5201                 SIOCIWFIRSTPRIV + 0x2, 0, 0, "driver_ext"
5202         },
5203         {
5204                 SIOCIWFIRSTPRIV + 0x3, 0, 0, "mp_ioctl"
5205         },
5206         {
5207                 SIOCIWFIRSTPRIV + 0x4,
5208                 IW_PRIV_TYPE_INT | IW_PRIV_SIZE_FIXED | 1, 0, "apinfo"
5209         },
5210         {
5211                 SIOCIWFIRSTPRIV + 0x5,
5212                 IW_PRIV_TYPE_INT | IW_PRIV_SIZE_FIXED | 2, 0, "setpid"
5213         },
5214         {
5215                 SIOCIWFIRSTPRIV + 0x6,
5216                 IW_PRIV_TYPE_INT | IW_PRIV_SIZE_FIXED | 1, 0, "wps_start"
5217         },
5218 /* for PLATFORM_MT53XX */
5219         {
5220                 SIOCIWFIRSTPRIV + 0x7,
5221                 IW_PRIV_TYPE_INT | IW_PRIV_SIZE_FIXED | 1, 0, "get_sensitivity"
5222         },
5223         {
5224                 SIOCIWFIRSTPRIV + 0x8,
5225                 IW_PRIV_TYPE_INT | IW_PRIV_SIZE_FIXED | 1, 0, "wps_prob_req_ie"
5226         },
5227         {
5228                 SIOCIWFIRSTPRIV + 0x9,
5229                 IW_PRIV_TYPE_INT | IW_PRIV_SIZE_FIXED | 1, 0, "wps_assoc_req_ie"
5230         },
5231
5232 /* for RTK_DMP_PLATFORM */
5233         {
5234                 SIOCIWFIRSTPRIV + 0xA,
5235                 IW_PRIV_TYPE_INT | IW_PRIV_SIZE_FIXED | 1, 0, "channel_plan"
5236         },
5237
5238         {
5239                 SIOCIWFIRSTPRIV + 0xB,
5240                 IW_PRIV_TYPE_INT | IW_PRIV_SIZE_FIXED | 2, 0, "dbg"
5241         },
5242         {
5243                 SIOCIWFIRSTPRIV + 0xC,
5244                 IW_PRIV_TYPE_INT | IW_PRIV_SIZE_FIXED | 3, 0, "rfw"
5245         },
5246         {
5247                 SIOCIWFIRSTPRIV + 0xD,
5248                 IW_PRIV_TYPE_INT | IW_PRIV_SIZE_FIXED | 2, IW_PRIV_TYPE_CHAR | IW_PRIV_SIZE_FIXED | IFNAMSIZ, "rfr"
5249         },
5250         {
5251                 SIOCIWFIRSTPRIV + 0x10,
5252                 IW_PRIV_TYPE_CHAR | 1024, 0, "p2p_set"
5253         },
5254         {
5255                 SIOCIWFIRSTPRIV + 0x11,
5256                 IW_PRIV_TYPE_CHAR | 1024, IW_PRIV_TYPE_CHAR | IW_PRIV_SIZE_MASK , "p2p_get"
5257         },
5258         {
5259                 SIOCIWFIRSTPRIV + 0x12, 0, 0, "NULL"
5260         },
5261         {
5262                 SIOCIWFIRSTPRIV + 0x13,
5263                 IW_PRIV_TYPE_CHAR | 64, IW_PRIV_TYPE_CHAR | 64 , "p2p_get2"
5264         },
5265         {
5266                 SIOCIWFIRSTPRIV + 0x14,
5267                 IW_PRIV_TYPE_CHAR  | 64, 0, "tdls"
5268         },
5269         {
5270                 SIOCIWFIRSTPRIV + 0x15,
5271                 IW_PRIV_TYPE_CHAR | 1024, IW_PRIV_TYPE_CHAR | 1024 , "tdls_get"
5272         },
5273         {
5274                 SIOCIWFIRSTPRIV + 0x16,
5275                 IW_PRIV_TYPE_CHAR | 64, 0, "pm_set"
5276         },
5277
5278         {SIOCIWFIRSTPRIV + 0x18, IW_PRIV_TYPE_CHAR | IFNAMSIZ , 0 , "rereg_nd_name"},
5279         {SIOCIWFIRSTPRIV + 0x1A, IW_PRIV_TYPE_CHAR | 1024, 0, "efuse_set"},
5280         {SIOCIWFIRSTPRIV + 0x1B, IW_PRIV_TYPE_CHAR | 128, IW_PRIV_TYPE_CHAR | IW_PRIV_SIZE_MASK, "efuse_get"},
5281         {
5282                 SIOCIWFIRSTPRIV + 0x1D,
5283                 IW_PRIV_TYPE_CHAR | 40, IW_PRIV_TYPE_CHAR | 0x7FF, "test"
5284         },
5285
5286 #ifdef CONFIG_INTEL_WIDI
5287         {
5288                 SIOCIWFIRSTPRIV + 0x1E,
5289                 IW_PRIV_TYPE_CHAR | 1024, 0, "widi_set"
5290         },
5291         {
5292                 SIOCIWFIRSTPRIV + 0x1F,
5293                 IW_PRIV_TYPE_CHAR | 128, 0, "widi_prob_req"
5294         },
5295 #endif /*  CONFIG_INTEL_WIDI */
5296
5297 #ifdef CONFIG_WOWLAN
5298                 { MP_WOW_ENABLE , IW_PRIV_TYPE_CHAR | 1024, 0, "wow_mode" }, /* set */
5299 #endif
5300 #ifdef CONFIG_AP_WOWLAN
5301                 { MP_AP_WOW_ENABLE , IW_PRIV_TYPE_CHAR | 1024, 0, "ap_wow_mode" }, /* set */
5302 #endif
5303 };
5304
5305 static iw_handler rtw_private_handler[] =
5306 {
5307         rtw_wx_write32,                                 /* 0x00 */
5308         rtw_wx_read32,                                  /* 0x01 */
5309         rtw_drvext_hdl,                                 /* 0x02 */
5310         rtw_mp_ioctl_hdl,                               /* 0x03 */
5311
5312 /*  for MM DTV platform */
5313         rtw_get_ap_info,                                        /* 0x04 */
5314
5315         rtw_set_pid,                                            /* 0x05 */
5316         rtw_wps_start,                                  /* 0x06 */
5317
5318 /*  for PLATFORM_MT53XX */
5319         rtw_wx_get_sensitivity,                 /* 0x07 */
5320         rtw_wx_set_mtk_wps_probe_ie,    /* 0x08 */
5321         rtw_wx_set_mtk_wps_ie,                  /* 0x09 */
5322
5323 /*  for RTK_DMP_PLATFORM */
5324 /*  Set Channel depend on the country code */
5325         rtw_wx_set_channel_plan,                /* 0x0A */
5326
5327         rtw_dbg_port,                                   /* 0x0B */
5328         rtw_wx_write_rf,                                        /* 0x0C */
5329         rtw_wx_read_rf,                                 /* 0x0D */
5330         rtw_wx_priv_null,                               /* 0x0E */
5331         rtw_wx_priv_null,                               /* 0x0F */
5332         rtw_p2p_set,                                    /* 0x10 */
5333         rtw_p2p_get,                                    /* 0x11 */
5334         NULL,                                                   /* 0x12 */
5335         rtw_p2p_get2,                                   /* 0x13 */
5336
5337         rtw_tdls,                                               /* 0x14 */
5338         rtw_tdls_get,                                   /* 0x15 */
5339
5340         rtw_pm_set,                                             /* 0x16 */
5341         rtw_wx_priv_null,                               /* 0x17 */
5342         rtw_rereg_nd_name,                              /* 0x18 */
5343         rtw_wx_priv_null,                               /* 0x19 */
5344         rtw_mp_efuse_set,                               /* 0x1A */
5345         rtw_mp_efuse_get,                               /* 0x1B */
5346         NULL,                                                   /*  0x1C is reserved for hostapd */
5347         rtw_test,                                               /*  0x1D */
5348 #ifdef CONFIG_INTEL_WIDI
5349         rtw_widi_set,                                   /* 0x1E */
5350         rtw_widi_set_probe_request,             /* 0x1F */
5351 #endif /*  CONFIG_INTEL_WIDI */
5352 };
5353
5354 static struct iw_statistics *rtw_get_wireless_stats(struct net_device *dev)
5355 {
5356         struct adapter *padapter = (struct adapter *)rtw_netdev_priv(dev);
5357         struct iw_statistics *piwstats =&padapter->iwstats;
5358         int tmp_level = 0;
5359         int tmp_qual = 0;
5360         int tmp_noise = 0;
5361
5362         if (check_fwstate(&padapter->mlmepriv, _FW_LINKED) != true)
5363         {
5364                 piwstats->qual.qual = 0;
5365                 piwstats->qual.level = 0;
5366                 piwstats->qual.noise = 0;
5367                 /* DBG_871X("No link  level:%d, qual:%d, noise:%d\n", tmp_level, tmp_qual, tmp_noise); */
5368         }
5369         else {
5370                 #ifdef CONFIG_SIGNAL_DISPLAY_DBM
5371                 tmp_level = translate_percentage_to_dbm(padapter->recvpriv.signal_strength);
5372                 #else
5373                 #ifdef CONFIG_SKIP_SIGNAL_SCALE_MAPPING
5374                 {
5375                         /* Do signal scale mapping when using percentage as the unit of signal strength, since the scale mapping is skipped in odm */
5376
5377                         struct hal_com_data *pHal = GET_HAL_DATA(padapter);
5378
5379                         tmp_level = (u8)odm_SignalScaleMapping(&pHal->odmpriv, padapter->recvpriv.signal_strength);
5380                 }
5381                 #else
5382                 tmp_level = padapter->recvpriv.signal_strength;
5383                 #endif
5384                 #endif
5385
5386                 tmp_qual = padapter->recvpriv.signal_qual;
5387 #if defined(CONFIG_SIGNAL_DISPLAY_DBM) && defined(CONFIG_BACKGROUND_NOISE_MONITOR)
5388                 if (rtw_linked_check(padapter)) {
5389                         struct mlme_ext_priv *pmlmeext = &padapter->mlmeextpriv;
5390                         struct noise_info info;
5391                         info.bPauseDIG = true;
5392                         info.IGIValue = 0x1e;
5393                         info.max_time = 100;/* ms */
5394                         info.chan = pmlmeext->cur_channel ;/* rtw_get_oper_ch(padapter); */
5395                         rtw_ps_deny(padapter, PS_DENY_IOCTL);
5396                         LeaveAllPowerSaveModeDirect(padapter);
5397
5398                         rtw_hal_set_odm_var(padapter, HAL_ODM_NOISE_MONITOR,&info, false);
5399                         /* ODM_InbandNoise_Monitor(podmpriv, true, 0x20, 100); */
5400                         rtw_ps_deny_cancel(padapter, PS_DENY_IOCTL);
5401                         rtw_hal_get_odm_var(padapter, HAL_ODM_NOISE_MONITOR,&(info.chan), &(padapter->recvpriv.noise));
5402                         DBG_871X("chan:%d, noise_level:%d\n", info.chan, padapter->recvpriv.noise);
5403                 }
5404 #endif
5405                 tmp_noise = padapter->recvpriv.noise;
5406                 DBG_871X("level:%d, qual:%d, noise:%d, rssi (%d)\n", tmp_level, tmp_qual, tmp_noise, padapter->recvpriv.rssi);
5407
5408                 piwstats->qual.level = tmp_level;
5409                 piwstats->qual.qual = tmp_qual;
5410                 piwstats->qual.noise = tmp_noise;
5411         }
5412         piwstats->qual.updated = IW_QUAL_ALL_UPDATED ;/* IW_QUAL_DBM; */
5413
5414         #ifdef CONFIG_SIGNAL_DISPLAY_DBM
5415         piwstats->qual.updated = piwstats->qual.updated | IW_QUAL_DBM;
5416         #endif
5417
5418         return &padapter->iwstats;
5419 }
5420
5421 struct iw_handler_def rtw_handlers_def =
5422 {
5423         .standard = rtw_handlers,
5424         .num_standard = sizeof(rtw_handlers) / sizeof(iw_handler),
5425 #if defined(CONFIG_WEXT_PRIV)
5426         .private = rtw_private_handler,
5427         .private_args = (struct iw_priv_args *)rtw_private_args,
5428         .num_private = sizeof(rtw_private_handler) / sizeof(iw_handler),
5429         .num_private_args = sizeof(rtw_private_args) / sizeof(struct iw_priv_args),
5430 #endif
5431         .get_wireless_stats = rtw_get_wireless_stats,
5432 };
5433
5434 /*  copy from net/wireless/wext.c start */
5435 /* ---------------------------------------------------------------- */
5436 /*
5437  * Calculate size of private arguments
5438  */
5439 static const char iw_priv_type_size[] = {
5440         0,                              /* IW_PRIV_TYPE_NONE */
5441         1,                              /* IW_PRIV_TYPE_BYTE */
5442         1,                              /* IW_PRIV_TYPE_CHAR */
5443         0,                              /* Not defined */
5444         sizeof(__u32),                  /* IW_PRIV_TYPE_INT */
5445         sizeof(struct iw_freq),         /* IW_PRIV_TYPE_FLOAT */
5446         sizeof(struct sockaddr),        /* IW_PRIV_TYPE_ADDR */
5447         0,                              /* Not defined */
5448 };
5449
5450 static int get_priv_size(__u16 args)
5451 {
5452         int num = args & IW_PRIV_SIZE_MASK;
5453         int type = (args & IW_PRIV_TYPE_MASK) >> 12;
5454
5455         return num * iw_priv_type_size[type];
5456 }
5457 /*  copy from net/wireless/wext.c end */
5458
5459 static int rtw_ioctl_wext_private(struct net_device *dev, union iwreq_data *wrq_data)
5460 {
5461         int err = 0;
5462         u8 *input = NULL;
5463         u32 input_len = 0;
5464         const char delim[] = " ";
5465         u8 *output = NULL;
5466         u32 output_len = 0;
5467         u32 count = 0;
5468         u8 *buffer = NULL;
5469         u32 buffer_len = 0;
5470         char *ptr = NULL;
5471         u8 cmdname[17] = {0}; /*  IFNAMSIZ+1 */
5472         u32 cmdlen;
5473         s32 len;
5474         u8 *extra = NULL;
5475         u32 extra_size = 0;
5476
5477         s32 k;
5478         const iw_handler *priv;         /* Private ioctl */
5479         const struct iw_priv_args *priv_args;   /* Private ioctl description */
5480         u32 num_priv;                           /* Number of ioctl */
5481         u32 num_priv_args;                      /* Number of descriptions */
5482         iw_handler handler;
5483         int temp;
5484         int subcmd = 0;                         /* sub-ioctl index */
5485         int offset = 0;                         /* Space for sub-ioctl index */
5486
5487         union iwreq_data wdata;
5488
5489
5490         memcpy(&wdata, wrq_data, sizeof(wdata));
5491
5492         input_len = 2048;
5493         input = rtw_zmalloc(input_len);
5494         if (NULL == input)
5495                 return -ENOMEM;
5496         if (copy_from_user(input, wdata.data.pointer, input_len)) {
5497                 err = -EFAULT;
5498                 goto exit;
5499         }
5500         ptr = input;
5501         len = strlen(input);
5502
5503         sscanf(ptr, "%16s", cmdname);
5504         cmdlen = strlen(cmdname);
5505         DBG_8192C("%s: cmd =%s\n", __func__, cmdname);
5506
5507         /*  skip command string */
5508         if (cmdlen > 0)
5509                 cmdlen += 1; /*  skip one space */
5510         ptr += cmdlen;
5511         len -= cmdlen;
5512         DBG_8192C("%s: parameters =%s\n", __func__, ptr);
5513
5514         priv = rtw_private_handler;
5515         priv_args = rtw_private_args;
5516         num_priv = sizeof(rtw_private_handler) / sizeof(iw_handler);
5517         num_priv_args = sizeof(rtw_private_args) / sizeof(struct iw_priv_args);
5518
5519         if (num_priv_args == 0) {
5520                 err = -EOPNOTSUPP;
5521                 goto exit;
5522         }
5523
5524         /* Search the correct ioctl */
5525         k = -1;
5526         while ((++k < num_priv_args) && strcmp(priv_args[k].name, cmdname));
5527
5528         /* If not found... */
5529         if (k == num_priv_args) {
5530                 err = -EOPNOTSUPP;
5531                 goto exit;
5532         }
5533
5534         /* Watch out for sub-ioctls ! */
5535         if (priv_args[k].cmd < SIOCDEVPRIVATE)
5536         {
5537                 int j = -1;
5538
5539                 /* Find the matching *real* ioctl */
5540                 while ((++j < num_priv_args) && ((priv_args[j].name[0] != '\0') ||
5541                         (priv_args[j].set_args != priv_args[k].set_args) ||
5542                         (priv_args[j].get_args != priv_args[k].get_args)));
5543
5544                 /* If not found... */
5545                 if (j == num_priv_args) {
5546                         err = -EINVAL;
5547                         goto exit;
5548                 }
5549
5550                 /* Save sub-ioctl number */
5551                 subcmd = priv_args[k].cmd;
5552                 /* Reserve one int (simplify alignment issues) */
5553                 offset = sizeof(__u32);
5554                 /* Use real ioctl definition from now on */
5555                 k = j;
5556         }
5557
5558         buffer = rtw_zmalloc(4096);
5559         if (NULL == buffer) {
5560                 err = -ENOMEM;
5561                 goto exit;
5562         }
5563
5564         /* If we have to set some data */
5565         if ((priv_args[k].set_args & IW_PRIV_TYPE_MASK) &&
5566                 (priv_args[k].set_args & IW_PRIV_SIZE_MASK))
5567         {
5568                 u8 *str;
5569
5570                 switch (priv_args[k].set_args & IW_PRIV_TYPE_MASK)
5571                 {
5572                         case IW_PRIV_TYPE_BYTE:
5573                                 /* Fetch args */
5574                                 count = 0;
5575                                 do {
5576                                         str = strsep(&ptr, delim);
5577                                         if (NULL == str) break;
5578                                         sscanf(str, "%i", &temp);
5579                                         buffer[count++] = (u8)temp;
5580                                 } while (1);
5581                                 buffer_len = count;
5582
5583                                 /* Number of args to fetch */
5584                                 wdata.data.length = count;
5585                                 if (wdata.data.length > (priv_args[k].set_args & IW_PRIV_SIZE_MASK))
5586                                         wdata.data.length = priv_args[k].set_args & IW_PRIV_SIZE_MASK;
5587
5588                                 break;
5589
5590                         case IW_PRIV_TYPE_INT:
5591                                 /* Fetch args */
5592                                 count = 0;
5593                                 do {
5594                                         str = strsep(&ptr, delim);
5595                                         if (NULL == str) break;
5596                                         sscanf(str, "%i", &temp);
5597                                         ((s32*)buffer)[count++] = (s32)temp;
5598                                 } while (1);
5599                                 buffer_len = count * sizeof(s32);
5600
5601                                 /* Number of args to fetch */
5602                                 wdata.data.length = count;
5603                                 if (wdata.data.length > (priv_args[k].set_args & IW_PRIV_SIZE_MASK))
5604                                         wdata.data.length = priv_args[k].set_args & IW_PRIV_SIZE_MASK;
5605
5606                                 break;
5607
5608                         case IW_PRIV_TYPE_CHAR:
5609                                 if (len > 0)
5610                                 {
5611                                         /* Size of the string to fetch */
5612                                         wdata.data.length = len;
5613                                         if (wdata.data.length > (priv_args[k].set_args & IW_PRIV_SIZE_MASK))
5614                                                 wdata.data.length = priv_args[k].set_args & IW_PRIV_SIZE_MASK;
5615
5616                                         /* Fetch string */
5617                                         memcpy(buffer, ptr, wdata.data.length);
5618                                 }
5619                                 else
5620                                 {
5621                                         wdata.data.length = 1;
5622                                         buffer[0] = '\0';
5623                                 }
5624                                 buffer_len = wdata.data.length;
5625                                 break;
5626
5627                         default:
5628                                 DBG_8192C("%s: Not yet implemented...\n", __func__);
5629                                 err = -1;
5630                                 goto exit;
5631                 }
5632
5633                 if ((priv_args[k].set_args & IW_PRIV_SIZE_FIXED) &&
5634                         (wdata.data.length != (priv_args[k].set_args & IW_PRIV_SIZE_MASK)))
5635                 {
5636                         DBG_8192C("%s: The command %s needs exactly %d argument(s)...\n",
5637                                         __func__, cmdname, priv_args[k].set_args & IW_PRIV_SIZE_MASK);
5638                         err = -EINVAL;
5639                         goto exit;
5640                 }
5641         }   /* if args to set */
5642         else
5643         {
5644                 wdata.data.length = 0L;
5645         }
5646
5647         /* Those two tests are important. They define how the driver
5648         * will have to handle the data */
5649         if ((priv_args[k].set_args & IW_PRIV_SIZE_FIXED) &&
5650                 ((get_priv_size(priv_args[k].set_args) + offset) <= IFNAMSIZ))
5651         {
5652                 /* First case : all SET args fit within wrq */
5653                 if (offset)
5654                         wdata.mode = subcmd;
5655                 memcpy(wdata.name + offset, buffer, IFNAMSIZ - offset);
5656         }
5657         else
5658         {
5659                 if ((priv_args[k].set_args == 0) &&
5660                         (priv_args[k].get_args & IW_PRIV_SIZE_FIXED) &&
5661                         (get_priv_size(priv_args[k].get_args) <= IFNAMSIZ))
5662                 {
5663                         /* Second case : no SET args, GET args fit within wrq */
5664                         if (offset)
5665                                 wdata.mode = subcmd;
5666                 }
5667                 else
5668                 {
5669                         /* Third case : args won't fit in wrq, or variable number of args */
5670                         if (copy_to_user(wdata.data.pointer, buffer, buffer_len)) {
5671                                 err = -EFAULT;
5672                                 goto exit;
5673                         }
5674                         wdata.data.flags = subcmd;
5675                 }
5676         }
5677
5678         kfree(input);
5679         input = NULL;
5680
5681         extra_size = 0;
5682         if (IW_IS_SET(priv_args[k].cmd))
5683         {
5684                 /* Size of set arguments */
5685                 extra_size = get_priv_size(priv_args[k].set_args);
5686
5687                 /* Does it fits in iwr ? */
5688                 if ((priv_args[k].set_args & IW_PRIV_SIZE_FIXED) &&
5689                         ((extra_size + offset) <= IFNAMSIZ))
5690                         extra_size = 0;
5691         } else {
5692                 /* Size of get arguments */
5693                 extra_size = get_priv_size(priv_args[k].get_args);
5694
5695                 /* Does it fits in iwr ? */
5696                 if ((priv_args[k].get_args & IW_PRIV_SIZE_FIXED) &&
5697                         (extra_size <= IFNAMSIZ))
5698                         extra_size = 0;
5699         }
5700
5701         if (extra_size == 0) {
5702                 extra = (u8 *)&wdata;
5703                 kfree(buffer);
5704                 buffer = NULL;
5705         } else
5706                 extra = buffer;
5707
5708         handler = priv[priv_args[k].cmd - SIOCIWFIRSTPRIV];
5709         err = handler(dev, NULL, &wdata, extra);
5710
5711         /* If we have to get some data */
5712         if ((priv_args[k].get_args & IW_PRIV_TYPE_MASK) &&
5713                 (priv_args[k].get_args & IW_PRIV_SIZE_MASK))
5714         {
5715                 int j;
5716                 int n = 0;      /* number of args */
5717                 u8 str[20] = {0};
5718
5719                 /* Check where is the returned data */
5720                 if ((priv_args[k].get_args & IW_PRIV_SIZE_FIXED) &&
5721                         (get_priv_size(priv_args[k].get_args) <= IFNAMSIZ))
5722                         n = priv_args[k].get_args & IW_PRIV_SIZE_MASK;
5723                 else
5724                         n = wdata.data.length;
5725
5726                 output = rtw_zmalloc(4096);
5727                 if (NULL == output) {
5728                         err =  -ENOMEM;
5729                         goto exit;
5730                 }
5731
5732                 switch (priv_args[k].get_args & IW_PRIV_TYPE_MASK)
5733                 {
5734                         case IW_PRIV_TYPE_BYTE:
5735                                 /* Display args */
5736                                 for (j = 0; j < n; j++)
5737                                 {
5738                                         sprintf(str, "%d  ", extra[j]);
5739                                         len = strlen(str);
5740                                         output_len = strlen(output);
5741                                         if ((output_len + len + 1) > 4096) {
5742                                                 err = -E2BIG;
5743                                                 goto exit;
5744                                         }
5745                                         memcpy(output+output_len, str, len);
5746                                 }
5747                                 break;
5748
5749                         case IW_PRIV_TYPE_INT:
5750                                 /* Display args */
5751                                 for (j = 0; j < n; j++)
5752                                 {
5753                                         sprintf(str, "%d  ", ((__s32*)extra)[j]);
5754                                         len = strlen(str);
5755                                         output_len = strlen(output);
5756                                         if ((output_len + len + 1) > 4096) {
5757                                                 err = -E2BIG;
5758                                                 goto exit;
5759                                         }
5760                                         memcpy(output+output_len, str, len);
5761                                 }
5762                                 break;
5763
5764                         case IW_PRIV_TYPE_CHAR:
5765                                 /* Display args */
5766                                 memcpy(output, extra, n);
5767                                 break;
5768
5769                         default:
5770                                 DBG_8192C("%s: Not yet implemented...\n", __func__);
5771                                 err = -1;
5772                                 goto exit;
5773                 }
5774
5775                 output_len = strlen(output) + 1;
5776                 wrq_data->data.length = output_len;
5777                 if (copy_to_user(wrq_data->data.pointer, output, output_len)) {
5778                         err = -EFAULT;
5779                         goto exit;
5780                 }
5781         }   /* if args to set */
5782         else
5783         {
5784                 wrq_data->data.length = 0;
5785         }
5786
5787 exit:
5788         if (input)
5789                 kfree(input);
5790         if (buffer)
5791                 kfree(buffer);
5792         if (output)
5793                 kfree(output);
5794
5795         return err;
5796 }
5797
5798 int rtw_ioctl(struct net_device *dev, struct ifreq *rq, int cmd)
5799 {
5800         struct iwreq *wrq = (struct iwreq *)rq;
5801         int ret = 0;
5802
5803         switch (cmd)
5804         {
5805                 case RTL_IOCTL_WPA_SUPPLICANT:
5806                         ret = wpa_supplicant_ioctl(dev, &wrq->u.data);
5807                         break;
5808                 case RTL_IOCTL_HOSTAPD:
5809                         ret = rtw_hostapd_ioctl(dev, &wrq->u.data);
5810                         break;
5811                 case SIOCDEVPRIVATE:
5812                         ret = rtw_ioctl_wext_private(dev, &wrq->u);
5813                         break;
5814                 default:
5815                         ret = -EOPNOTSUPP;
5816                         break;
5817         }
5818
5819         return ret;
5820 }