drivers/staging/rtl8192e/rtllib_softmac.c

   1 /* IEEE 802.11 SoftMAC layer
   2  * Copyright (c) 2005 Andrea Merello <andreamrl@tiscali.it>
   3  *
   4  * Mostly extracted from the rtl8180-sa2400 driver for the
   5  * in-kernel generic ieee802.11 stack.
   6  *
   7  * Few lines might be stolen from other part of the rtllib
   8  * stack. Copyright who own it's copyright
   9  *
  10  * WPA code stolen from the ipw2200 driver.
  11  * Copyright who own it's copyright.
  12  *
  13  * released under the GPL
  14  */
  15
  16
  17 #include "rtllib.h"
  18 #include "rtl_core.h"
  19
  20 #include <linux/random.h>
  21 #include <linux/delay.h>
  22 #include <linux/version.h>
  23 #include <asm/uaccess.h>
  24 #include "dot11d.h"
  25
  26 extern void _setup_timer( struct timer_list*, void*, unsigned long );
  27 u8 rsn_authen_cipher_suite[16][4] = {
  28         {0x00,0x0F,0xAC,0x00},
  29         {0x00,0x0F,0xAC,0x01},
  30         {0x00,0x0F,0xAC,0x02},
  31         {0x00,0x0F,0xAC,0x03},
  32         {0x00,0x0F,0xAC,0x04},
  33         {0x00,0x0F,0xAC,0x05},
  34 };
  35
  36 short rtllib_is_54g(struct rtllib_network *net)
  37 {
  38         return ((net->rates_ex_len > 0) || (net->rates_len > 4));
  39 }
  40
  41 short rtllib_is_shortslot(struct rtllib_network net)
  42 {
  43         return (net.capability & WLAN_CAPABILITY_SHORT_SLOT_TIME);
  44 }
  45
  46 /* returns the total length needed for pleacing the RATE MFIE
  47  * tag and the EXTENDED RATE MFIE tag if needed.
  48  * It encludes two bytes per tag for the tag itself and its len
  49  */
  50 unsigned int rtllib_MFIE_rate_len(struct rtllib_device *ieee)
  51 {
  52         unsigned int rate_len = 0;
  53
  54         if (ieee->modulation & RTLLIB_CCK_MODULATION)
  55                 rate_len = RTLLIB_CCK_RATE_LEN + 2;
  56
  57         if (ieee->modulation & RTLLIB_OFDM_MODULATION)
  58
  59                 rate_len += RTLLIB_OFDM_RATE_LEN + 2;
  60
  61         return rate_len;
  62 }
  63
  64 /* pleace the MFIE rate, tag to the memory (double) poined.
  65  * Then it updates the pointer so that
  66  * it points after the new MFIE tag added.
  67  */
  68 void rtllib_MFIE_Brate(struct rtllib_device *ieee, u8 **tag_p)
  69 {
  70         u8 *tag = *tag_p;
  71
  72         if (ieee->modulation & RTLLIB_CCK_MODULATION){
  73                 *tag++ = MFIE_TYPE_RATES;
  74                 *tag++ = 4;
  75                 *tag++ = RTLLIB_BASIC_RATE_MASK | RTLLIB_CCK_RATE_1MB;
  76                 *tag++ = RTLLIB_BASIC_RATE_MASK | RTLLIB_CCK_RATE_2MB;
  77                 *tag++ = RTLLIB_BASIC_RATE_MASK | RTLLIB_CCK_RATE_5MB;
  78                 *tag++ = RTLLIB_BASIC_RATE_MASK | RTLLIB_CCK_RATE_11MB;
  79         }
  80
  81         /* We may add an option for custom rates that specific HW might support */
  82         *tag_p = tag;
  83 }
  84
  85 void rtllib_MFIE_Grate(struct rtllib_device *ieee, u8 **tag_p)
  86 {
  87         u8 *tag = *tag_p;
  88
  89                 if (ieee->modulation & RTLLIB_OFDM_MODULATION){
  90
  91                 *tag++ = MFIE_TYPE_RATES_EX;
  92                 *tag++ = 8;
  93                 *tag++ = RTLLIB_BASIC_RATE_MASK | RTLLIB_OFDM_RATE_6MB;
  94                 *tag++ = RTLLIB_BASIC_RATE_MASK | RTLLIB_OFDM_RATE_9MB;
  95                 *tag++ = RTLLIB_BASIC_RATE_MASK | RTLLIB_OFDM_RATE_12MB;
  96                 *tag++ = RTLLIB_BASIC_RATE_MASK | RTLLIB_OFDM_RATE_18MB;
  97                 *tag++ = RTLLIB_BASIC_RATE_MASK | RTLLIB_OFDM_RATE_24MB;
  98                 *tag++ = RTLLIB_BASIC_RATE_MASK | RTLLIB_OFDM_RATE_36MB;
  99                 *tag++ = RTLLIB_BASIC_RATE_MASK | RTLLIB_OFDM_RATE_48MB;
 100                 *tag++ = RTLLIB_BASIC_RATE_MASK | RTLLIB_OFDM_RATE_54MB;
 101
 102         }
 103
 104         /* We may add an option for custom rates that specific HW might support */
 105         *tag_p = tag;
 106 }
 107
 108 void rtllib_WMM_Info(struct rtllib_device *ieee, u8 **tag_p) {
 109         u8 *tag = *tag_p;
 110
 111         *tag++ = MFIE_TYPE_GENERIC;
 112         *tag++ = 7;
 113         *tag++ = 0x00;
 114         *tag++ = 0x50;
 115         *tag++ = 0xf2;
 116         *tag++ = 0x02;
 117         *tag++ = 0x00;
 118         *tag++ = 0x01;
 119         *tag++ = MAX_SP_Len;
 120         *tag_p = tag;
 121 }
 122
 123 void rtllib_TURBO_Info(struct rtllib_device *ieee, u8 **tag_p) {
 124         u8 *tag = *tag_p;
 125
 126         *tag++ = MFIE_TYPE_GENERIC;
 127         *tag++ = 7;
 128         *tag++ = 0x00;
 129         *tag++ = 0xe0;
 130         *tag++ = 0x4c;
 131         *tag++ = 0x01;
 132         *tag++ = 0x02;
 133         *tag++ = 0x11;
 134         *tag++ = 0x00;
 135
 136         *tag_p = tag;
 137         printk(KERN_ALERT "This is enable turbo mode IE process\n");
 138 }
 139
 140 void enqueue_mgmt(struct rtllib_device *ieee, struct sk_buff *skb)
 141 {
 142         int nh;
 143         nh = (ieee->mgmt_queue_head +1) % MGMT_QUEUE_NUM;
 144
 145 /*
 146  * if the queue is full but we have newer frames then
 147  * just overwrites the oldest.
 148  *
 149  * if (nh == ieee->mgmt_queue_tail)
 150  *              return -1;
 151  */
 152         ieee->mgmt_queue_head = nh;
 153         ieee->mgmt_queue_ring[nh] = skb;
 154
 155 }
 156
 157 struct sk_buff *dequeue_mgmt(struct rtllib_device *ieee)
 158 {
 159         struct sk_buff *ret;
 160
 161         if (ieee->mgmt_queue_tail == ieee->mgmt_queue_head)
 162                 return NULL;
 163
 164         ret = ieee->mgmt_queue_ring[ieee->mgmt_queue_tail];
 165
 166         ieee->mgmt_queue_tail =
 167                 (ieee->mgmt_queue_tail+1) % MGMT_QUEUE_NUM;
 168
 169         return ret;
 170 }
 171
 172 void init_mgmt_queue(struct rtllib_device *ieee)
 173 {
 174         ieee->mgmt_queue_tail = ieee->mgmt_queue_head = 0;
 175 }
 176
 177
 178 u8
 179 MgntQuery_TxRateExcludeCCKRates(struct rtllib_device *ieee)
 180 {
 181         u16     i;
 182         u8      QueryRate = 0;
 183         u8      BasicRate;
 184
 185
 186         for ( i = 0; i < ieee->current_network.rates_len; i++)
 187         {
 188                 BasicRate = ieee->current_network.rates[i]&0x7F;
 189                 if (!rtllib_is_cck_rate(BasicRate))
 190                 {
 191                         if (QueryRate == 0)
 192                         {
 193                                 QueryRate = BasicRate;
 194                         }
 195                         else
 196                         {
 197                                 if (BasicRate < QueryRate)
 198                                 {
 199                                         QueryRate = BasicRate;
 200                                 }
 201                         }
 202                 }
 203         }
 204
 205         if (QueryRate == 0)
 206         {
 207                 QueryRate = 12;
 208                 printk("No BasicRate found!!\n");
 209         }
 210         return QueryRate;
 211 }
 212
 213 u8 MgntQuery_MgntFrameTxRate(struct rtllib_device *ieee)
 214 {
 215         struct rt_hi_throughput *pHTInfo = ieee->pHTInfo;
 216         u8 rate;
 217
 218         if (pHTInfo->IOTAction & HT_IOT_ACT_MGNT_USE_CCK_6M)
 219                 rate = 0x0c;
 220         else
 221                 rate = ieee->basic_rate & 0x7f;
 222
 223         if (rate == 0){
 224                 if (ieee->mode == IEEE_A||
 225                    ieee->mode== IEEE_N_5G||
 226                    (ieee->mode== IEEE_N_24G&&!pHTInfo->bCurSuppCCK))
 227                         rate = 0x0c;
 228                 else
 229                         rate = 0x02;
 230         }
 231
 232         return rate;
 233 }
 234
 235
 236 void rtllib_sta_wakeup(struct rtllib_device *ieee, short nl);
 237
 238 inline void softmac_mgmt_xmit(struct sk_buff *skb, struct rtllib_device *ieee)
 239 {
 240         unsigned long flags;
 241         short single = ieee->softmac_features & IEEE_SOFTMAC_SINGLE_QUEUE;
 242         struct rtllib_hdr_3addr  *header=
 243                 (struct rtllib_hdr_3addr  *) skb->data;
 244
 245         struct cb_desc *tcb_desc = (struct cb_desc *)(skb->cb + 8);
 246         spin_lock_irqsave(&ieee->lock, flags);
 247
 248         /* called with 2nd param 0, no mgmt lock required */
 249         rtllib_sta_wakeup(ieee,0);
 250
 251         if (header->frame_ctl == RTLLIB_STYPE_BEACON)
 252                 tcb_desc->queue_index = BEACON_QUEUE;
 253         else
 254                 tcb_desc->queue_index = MGNT_QUEUE;
 255
 256         if (ieee->disable_mgnt_queue)
 257                 tcb_desc->queue_index = HIGH_QUEUE;
 258
 259         tcb_desc->data_rate = MgntQuery_MgntFrameTxRate(ieee);
 260         tcb_desc->RATRIndex = 7;
 261         tcb_desc->bTxDisableRateFallBack = 1;
 262         tcb_desc->bTxUseDriverAssingedRate = 1;
 263         if (single) {
 264                 if (ieee->queue_stop){
 265                         enqueue_mgmt(ieee,skb);
 266                 }else{
 267                         header->seq_ctl = cpu_to_le16(ieee->seq_ctrl[0]<<4);
 268
 269                         if (ieee->seq_ctrl[0] == 0xFFF)
 270                                 ieee->seq_ctrl[0] = 0;
 271                         else
 272                                 ieee->seq_ctrl[0]++;
 273
 274                         /* avoid watchdog triggers */
 275                         ieee->softmac_data_hard_start_xmit(skb,ieee->dev,ieee->basic_rate);
 276                 }
 277
 278                 spin_unlock_irqrestore(&ieee->lock, flags);
 279         }else{
 280                 spin_unlock_irqrestore(&ieee->lock, flags);
 281                 spin_lock_irqsave(&ieee->mgmt_tx_lock, flags);
 282
 283                 header->seq_ctl = cpu_to_le16(ieee->seq_ctrl[0] << 4);
 284
 285                 if (ieee->seq_ctrl[0] == 0xFFF)
 286                         ieee->seq_ctrl[0] = 0;
 287                 else
 288                         ieee->seq_ctrl[0]++;
 289
 290                 /* check wether the managed packet queued greater than 5 */
 291                 if (!ieee->check_nic_enough_desc(ieee->dev,tcb_desc->queue_index)||\
 292                                 (skb_queue_len(&ieee->skb_waitQ[tcb_desc->queue_index]) != 0)||\
 293                                 (ieee->queue_stop) ) {
 294                         /* insert the skb packet to the management queue */
 295                         /* as for the completion function, it does not need
 296                          * to check it any more.
 297                          * */
 298                         printk("%s():insert to waitqueue, queue_index:%d!\n",__func__,tcb_desc->queue_index);
 299                         skb_queue_tail(&ieee->skb_waitQ[tcb_desc->queue_index], skb);
 300                 } else {
 301                         ieee->softmac_hard_start_xmit(skb,ieee->dev);
 302                 }
 303                 spin_unlock_irqrestore(&ieee->mgmt_tx_lock, flags);
 304         }
 305 }
 306
 307 inline void softmac_ps_mgmt_xmit(struct sk_buff *skb,
 308                 struct rtllib_device *ieee)
 309 {
 310         short single = ieee->softmac_features & IEEE_SOFTMAC_SINGLE_QUEUE;
 311         struct rtllib_hdr_3addr  *header =
 312                 (struct rtllib_hdr_3addr  *) skb->data;
 313         u16 fc,type,stype;
 314         struct cb_desc *tcb_desc = (struct cb_desc *)(skb->cb + 8);
 315
 316         fc = header->frame_ctl;
 317         type = WLAN_FC_GET_TYPE(fc);
 318         stype = WLAN_FC_GET_STYPE(fc);
 319
 320
 321         if (stype != RTLLIB_STYPE_PSPOLL)
 322                 tcb_desc->queue_index = MGNT_QUEUE;
 323         else
 324                 tcb_desc->queue_index = HIGH_QUEUE;
 325
 326         if (ieee->disable_mgnt_queue)
 327                 tcb_desc->queue_index = HIGH_QUEUE;
 328
 329
 330         tcb_desc->data_rate = MgntQuery_MgntFrameTxRate(ieee);
 331         tcb_desc->RATRIndex = 7;
 332         tcb_desc->bTxDisableRateFallBack = 1;
 333         tcb_desc->bTxUseDriverAssingedRate = 1;
 334         if (single) {
 335                 if (type != RTLLIB_FTYPE_CTL) {
 336                         header->seq_ctl = cpu_to_le16(ieee->seq_ctrl[0] << 4);
 337
 338                         if (ieee->seq_ctrl[0] == 0xFFF)
 339                                 ieee->seq_ctrl[0] = 0;
 340                         else
 341                                 ieee->seq_ctrl[0]++;
 342
 343                 }
 344                 /* avoid watchdog triggers */
 345                 ieee->softmac_data_hard_start_xmit(skb,ieee->dev,ieee->basic_rate);
 346
 347         } else {
 348                 if (type != RTLLIB_FTYPE_CTL) {
 349                         header->seq_ctl = cpu_to_le16(ieee->seq_ctrl[0] << 4);
 350
 351                         if (ieee->seq_ctrl[0] == 0xFFF)
 352                                 ieee->seq_ctrl[0] = 0;
 353                         else
 354                                 ieee->seq_ctrl[0]++;
 355                 }
 356                 ieee->softmac_hard_start_xmit(skb,ieee->dev);
 357
 358         }
 359 }
 360
 361 inline struct sk_buff *rtllib_probe_req(struct rtllib_device *ieee)
 362 {
 363         unsigned int len,rate_len;
 364         u8 *tag;
 365         struct sk_buff *skb;
 366         struct rtllib_probe_request *req;
 367
 368         len = ieee->current_network.ssid_len;
 369
 370         rate_len = rtllib_MFIE_rate_len(ieee);
 371
 372         skb = dev_alloc_skb(sizeof(struct rtllib_probe_request) +
 373                             2 + len + rate_len + ieee->tx_headroom);
 374
 375         if (!skb)
 376                 return NULL;
 377
 378         skb_reserve(skb, ieee->tx_headroom);
 379
 380         req = (struct rtllib_probe_request *) skb_put(skb,sizeof(struct rtllib_probe_request));
 381         req->header.frame_ctl = cpu_to_le16(RTLLIB_STYPE_PROBE_REQ);
 382         req->header.duration_id = 0;
 383
 384         memset(req->header.addr1, 0xff, ETH_ALEN);
 385         memcpy(req->header.addr2, ieee->dev->dev_addr, ETH_ALEN);
 386         memset(req->header.addr3, 0xff, ETH_ALEN);
 387
 388         tag = (u8 *) skb_put(skb,len+2+rate_len);
 389
 390         *tag++ = MFIE_TYPE_SSID;
 391         *tag++ = len;
 392         memcpy(tag, ieee->current_network.ssid, len);
 393         tag += len;
 394
 395         rtllib_MFIE_Brate(ieee,&tag);
 396         rtllib_MFIE_Grate(ieee,&tag);
 397
 398         return skb;
 399 }
 400
 401 struct sk_buff *rtllib_get_beacon_(struct rtllib_device *ieee);
 402
 403 void rtllib_send_beacon(struct rtllib_device *ieee)
 404 {
 405         struct sk_buff *skb;
 406         if (!ieee->ieee_up)
 407                 return;
 408         skb = rtllib_get_beacon_(ieee);
 409
 410         if (skb){
 411                 softmac_mgmt_xmit(skb, ieee);
 412                 ieee->softmac_stats.tx_beacons++;
 413         }
 414
 415         if (ieee->beacon_txing && ieee->ieee_up){
 416                 mod_timer(&ieee->beacon_timer,jiffies+(MSECS(ieee->current_network.beacon_interval-5)));
 417         }
 418 }
 419
 420
 421 void rtllib_send_beacon_cb(unsigned long _ieee)
 422 {
 423         struct rtllib_device *ieee =
 424                 (struct rtllib_device *) _ieee;
 425         unsigned long flags;
 426
 427         spin_lock_irqsave(&ieee->beacon_lock, flags);
 428         rtllib_send_beacon(ieee);
 429         spin_unlock_irqrestore(&ieee->beacon_lock, flags);
 430 }
 431
 432 /*
 433  * Description:
 434  *              Enable network monitor mode, all rx packets will be received.
 435  */
 436 void rtllib_EnableNetMonitorMode(struct net_device* dev,
 437                 bool bInitState)
 438 {
 439         struct rtllib_device* ieee = netdev_priv_rsl(dev);
 440
 441         printk("========>Enter Monitor Mode\n");
 442
 443         ieee->AllowAllDestAddrHandler(dev, true, !bInitState);
 444 }
 445
 446
 447 /*
 448  *      Description:
 449  *              Disable network network monitor mode, only packets destinated to
 450  *              us will be received.
 451  */
 452 void rtllib_DisableNetMonitorMode(struct net_device* dev,
 453                 bool bInitState)
 454 {
 455         struct rtllib_device* ieee = netdev_priv_rsl(dev);
 456
 457         printk("========>Exit Monitor Mode\n");
 458
 459         ieee->AllowAllDestAddrHandler(dev, false, !bInitState);
 460 }
 461
 462
 463 /*
 464  * Description:
 465  *              This enables the specialized promiscuous mode required by Intel.
 466  *              In this mode, Intel intends to hear traffics from/to other STAs in the same BSS.
 467  *              Therefore we don't have to disable checking BSSID and we only need to allow all dest.
 468  *              BUT: if we enable checking BSSID then we can't recv packets from other STA.
 469  */
 470 void rtllib_EnableIntelPromiscuousMode(struct net_device* dev,
 471                 bool bInitState)
 472 {
 473         bool bFilterOutNonAssociatedBSSID = false;
 474
 475         struct rtllib_device* ieee = netdev_priv_rsl(dev);
 476
 477         printk("========>Enter Intel Promiscuous Mode\n");
 478
 479         ieee->AllowAllDestAddrHandler(dev, true, !bInitState);
 480         ieee->SetHwRegHandler(dev, HW_VAR_CECHK_BSSID, (u8*)&bFilterOutNonAssociatedBSSID);
 481
 482         ieee->bNetPromiscuousMode = true;
 483 }
 484
 485
 486 /*
 487  * Description:
 488  *              This disables the specialized promiscuous mode required by Intel.
 489  *              See MgntEnableIntelPromiscuousMode for detail.
 490  */
 491 void rtllib_DisableIntelPromiscuousMode(struct net_device* dev,
 492                 bool bInitState)
 493 {
 494         bool bFilterOutNonAssociatedBSSID = true;
 495
 496         struct rtllib_device* ieee = netdev_priv_rsl(dev);
 497
 498         printk("========>Exit Intel Promiscuous Mode\n");
 499
 500         ieee->AllowAllDestAddrHandler(dev, false, !bInitState);
 501         ieee->SetHwRegHandler(dev, HW_VAR_CECHK_BSSID, (u8*)&bFilterOutNonAssociatedBSSID);
 502
 503         ieee->bNetPromiscuousMode = false;
 504 }
 505
 506 void rtllib_send_probe(struct rtllib_device *ieee, u8 is_mesh)
 507 {
 508         struct sk_buff *skb;
 509         skb = rtllib_probe_req(ieee);
 510         if (skb){
 511                 softmac_mgmt_xmit(skb, ieee);
 512                 ieee->softmac_stats.tx_probe_rq++;
 513         }
 514 }
 515
 516
 517 void rtllib_send_probe_requests(struct rtllib_device *ieee, u8 is_mesh)
 518 {
 519         if (ieee->active_scan && (ieee->softmac_features &
 520             IEEE_SOFTMAC_PROBERQ)) {
 521                 rtllib_send_probe(ieee, 0);
 522                 rtllib_send_probe(ieee, 0);
 523         }
 524 }
 525
 526 void rtllib_softmac_hint11d_wq(void *data)
 527 {
 528 }
 529
 530 void rtllib_update_active_chan_map(struct rtllib_device *ieee)
 531 {
 532         memcpy(ieee->active_channel_map, GET_DOT11D_INFO(ieee)->channel_map, MAX_CHANNEL_NUMBER+1);
 533 }
 534
 535 /* this performs syncro scan blocking the caller until all channels
 536  * in the allowed channel map has been checked.
 537  */
 538 void rtllib_softmac_scan_syncro(struct rtllib_device *ieee, u8 is_mesh)
 539 {
 540         short ch = 0;
 541
 542         rtllib_update_active_chan_map(ieee);
 543
 544         ieee->be_scan_inprogress = true;
 545
 546         down(&ieee->scan_sem);
 547
 548         while(1)
 549         {
 550
 551                 do {
 552                         ch++;
 553                         if (ch > MAX_CHANNEL_NUMBER)
 554                                 goto out; /* scan completed */
 555                 } while(!ieee->active_channel_map[ch]);
 556
 557                 /* this fuction can be called in two situations
 558                  * 1- We have switched to ad-hoc mode and we are
 559                  *    performing a complete syncro scan before conclude
 560                  *    there are no interesting cell and to create a
 561                  *    new one. In this case the link state is
 562                  *    RTLLIB_NOLINK until we found an interesting cell.
 563                  *    If so the ieee8021_new_net, called by the RX path
 564                  *    will set the state to RTLLIB_LINKED, so we stop
 565                  *    scanning
 566                  * 2- We are linked and the root uses run iwlist scan.
 567                  *    So we switch to RTLLIB_LINKED_SCANNING to remember
 568                  *    that we are still logically linked (not interested in
 569                  *    new network events, despite for updating the net list,
 570                  *    but we are temporarly 'unlinked' as the driver shall
 571                  *    not filter RX frames and the channel is changing.
 572                  * So the only situation in witch are interested is to check
 573                  * if the state become LINKED because of the #1 situation
 574                  */
 575
 576                 if (ieee->state == RTLLIB_LINKED)
 577                         goto out;
 578                 if (ieee->sync_scan_hurryup){
 579                         printk("============>sync_scan_hurryup out\n");
 580                         goto out;
 581                 }
 582
 583                 ieee->set_chan(ieee->dev, ch);
 584                 if (ieee->active_channel_map[ch] == 1)
 585                 rtllib_send_probe_requests(ieee, 0);
 586
 587                 /* this prevent excessive time wait when we
 588                  * need to wait for a syncro scan to end..
 589                  */
 590                 msleep_interruptible_rsl(RTLLIB_SOFTMAC_SCAN_TIME);
 591         }
 592 out:
 593         ieee->actscanning = false;
 594         ieee->sync_scan_hurryup = 0;
 595
 596         if (ieee->state >= RTLLIB_LINKED){
 597                 if (IS_DOT11D_ENABLE(ieee))
 598                         DOT11D_ScanComplete(ieee);
 599         }
 600         up(&ieee->scan_sem);
 601
 602         ieee->be_scan_inprogress = false;
 603
 604         {
 605         union iwreq_data wrqu;
 606         memset(&wrqu, 0, sizeof(wrqu));
 607         wireless_send_event(ieee->dev,SIOCGIWSCAN,&wrqu,NULL);
 608         }
 609 }
 610
 611 void rtllib_softmac_scan_wq(void *data)
 612 {
 613         struct rtllib_device *ieee = container_of_dwork_rsl(data, struct rtllib_device, softmac_scan_wq);
 614         u8 last_channel = ieee->current_network.channel;
 615
 616         rtllib_update_active_chan_map(ieee);
 617
 618         if (!ieee->ieee_up)
 619                 return;
 620         if (rtllib_act_scanning(ieee,true) == true)
 621                 return;
 622
 623         down(&ieee->scan_sem);
 624
 625         if (ieee->eRFPowerState == eRfOff)
 626         {
 627                 printk("======>%s():rf state is eRfOff, return\n",__func__);
 628                 goto out1;
 629         }
 630
 631         do{
 632                 ieee->current_network.channel =
 633                         (ieee->current_network.channel + 1) % MAX_CHANNEL_NUMBER;
 634                 if (ieee->scan_watch_dog++ > MAX_CHANNEL_NUMBER)
 635                 {
 636                         if (!ieee->active_channel_map[ieee->current_network.channel])
 637                                 ieee->current_network.channel = 6;
 638                         goto out; /* no good chans */
 639                 }
 640         } while(!ieee->active_channel_map[ieee->current_network.channel]);
 641
 642         if (ieee->scanning_continue == 0 )
 643                 goto out;
 644
 645         ieee->set_chan(ieee->dev, ieee->current_network.channel);
 646
 647         if (ieee->active_channel_map[ieee->current_network.channel] == 1)
 648         rtllib_send_probe_requests(ieee, 0);
 649
 650         queue_delayed_work_rsl(ieee->wq, &ieee->softmac_scan_wq, MSECS(RTLLIB_SOFTMAC_SCAN_TIME));
 651
 652         up(&ieee->scan_sem);
 653         return;
 654
 655 out:
 656         if (IS_DOT11D_ENABLE(ieee))
 657                 DOT11D_ScanComplete(ieee);
 658         ieee->current_network.channel = last_channel;
 659
 660 out1:
 661         ieee->actscanning = false;
 662         ieee->scan_watch_dog = 0;
 663         ieee->scanning_continue = 0;
 664         up(&ieee->scan_sem);
 665 }
 666
 667
 668
 669 void rtllib_beacons_start(struct rtllib_device *ieee)
 670 {
 671         unsigned long flags;
 672         spin_lock_irqsave(&ieee->beacon_lock,flags);
 673
 674         ieee->beacon_txing = 1;
 675         rtllib_send_beacon(ieee);
 676
 677         spin_unlock_irqrestore(&ieee->beacon_lock,flags);
 678 }
 679
 680 void rtllib_beacons_stop(struct rtllib_device *ieee)
 681 {
 682         unsigned long flags;
 683
 684         spin_lock_irqsave(&ieee->beacon_lock,flags);
 685
 686         ieee->beacon_txing = 0;
 687         del_timer_sync(&ieee->beacon_timer);
 688
 689         spin_unlock_irqrestore(&ieee->beacon_lock,flags);
 690
 691 }
 692
 693
 694 void rtllib_stop_send_beacons(struct rtllib_device *ieee)
 695 {
 696         if (ieee->stop_send_beacons)
 697                 ieee->stop_send_beacons(ieee->dev);
 698         if (ieee->softmac_features & IEEE_SOFTMAC_BEACONS)
 699                 rtllib_beacons_stop(ieee);
 700 }
 701
 702
 703 void rtllib_start_send_beacons(struct rtllib_device *ieee)
 704 {
 705         if (ieee->start_send_beacons)
 706                 ieee->start_send_beacons(ieee->dev);
 707         if (ieee->softmac_features & IEEE_SOFTMAC_BEACONS)
 708                 rtllib_beacons_start(ieee);
 709 }
 710
 711
 712 void rtllib_softmac_stop_scan(struct rtllib_device *ieee)
 713 {
 714         down(&ieee->scan_sem);
 715         ieee->scan_watch_dog = 0;
 716         if (ieee->scanning_continue == 1) {
 717                 ieee->scanning_continue = 0;
 718                 ieee->actscanning = 0;
 719
 720                 cancel_delayed_work(&ieee->softmac_scan_wq);
 721         }
 722
 723         up(&ieee->scan_sem);
 724 }
 725
 726 void rtllib_stop_scan(struct rtllib_device *ieee)
 727 {
 728         if (ieee->softmac_features & IEEE_SOFTMAC_SCAN){
 729                 rtllib_softmac_stop_scan(ieee);
 730         }else{
 731                 if (ieee->rtllib_stop_hw_scan)
 732                         ieee->rtllib_stop_hw_scan(ieee->dev);
 733         }
 734 }
 735
 736 void rtllib_stop_scan_syncro(struct rtllib_device *ieee)
 737 {
 738         if (ieee->softmac_features & IEEE_SOFTMAC_SCAN){
 739                         ieee->sync_scan_hurryup = 1;
 740         }else{
 741                 if (ieee->rtllib_stop_hw_scan)
 742                         ieee->rtllib_stop_hw_scan(ieee->dev);
 743         }
 744 }
 745
 746 bool rtllib_act_scanning(struct rtllib_device *ieee, bool sync_scan)
 747 {
 748         if (ieee->softmac_features & IEEE_SOFTMAC_SCAN){
 749                 if (sync_scan){
 750                         return ieee->be_scan_inprogress;
 751                 }else{
 752                         return (ieee->actscanning ||ieee->be_scan_inprogress);
 753                 }
 754         }else{
 755                 return test_bit(STATUS_SCANNING, &ieee->status);
 756         }
 757 }
 758
 759 /* called with ieee->lock held */
 760 void rtllib_start_scan(struct rtllib_device *ieee)
 761 {
 762         RT_TRACE(COMP_DBG, "===>%s()\n",__func__);
 763         if (ieee->rtllib_ips_leave_wq != NULL)
 764         ieee->rtllib_ips_leave_wq(ieee->dev);
 765
 766
 767         if (IS_DOT11D_ENABLE(ieee) )
 768         {
 769                 if (IS_COUNTRY_IE_VALID(ieee))
 770                 {
 771                         RESET_CIE_WATCHDOG(ieee);
 772                 }
 773         }
 774         if (ieee->softmac_features & IEEE_SOFTMAC_SCAN) {
 775                 if (ieee->scanning_continue == 0) {
 776                         ieee->actscanning = true;
 777                         ieee->scanning_continue = 1;
 778                         queue_delayed_work_rsl(ieee->wq, &ieee->softmac_scan_wq, 0);
 779                 }
 780         } else {
 781                 if (ieee->rtllib_start_hw_scan)
 782                         ieee->rtllib_start_hw_scan(ieee->dev);
 783         }
 784
 785 }
 786
 787 /* called with wx_sem held */
 788 void rtllib_start_scan_syncro(struct rtllib_device *ieee, u8 is_mesh)
 789 {
 790         if (IS_DOT11D_ENABLE(ieee) )
 791         {
 792                 if (IS_COUNTRY_IE_VALID(ieee))
 793                 {
 794                         RESET_CIE_WATCHDOG(ieee);
 795                 }
 796         }
 797         ieee->sync_scan_hurryup = 0;
 798         if (ieee->softmac_features & IEEE_SOFTMAC_SCAN){
 799                 rtllib_softmac_scan_syncro(ieee, is_mesh);
 800         }else{
 801                 if (ieee->rtllib_start_hw_scan)
 802                         ieee->rtllib_start_hw_scan(ieee->dev);
 803         }
 804
 805 }
 806
 807 inline struct sk_buff *rtllib_authentication_req(struct rtllib_network *beacon,
 808         struct rtllib_device *ieee, int challengelen,u8 * daddr)
 809 {
 810         struct sk_buff *skb;
 811         struct rtllib_authentication *auth;
 812         int  len = 0;
 813         len = sizeof(struct rtllib_authentication) + challengelen + ieee->tx_headroom + 4;
 814         skb = dev_alloc_skb(len);
 815
 816         if (!skb) return NULL;
 817
 818         skb_reserve(skb, ieee->tx_headroom);
 819
 820         auth = (struct rtllib_authentication *)
 821                 skb_put(skb, sizeof(struct rtllib_authentication));
 822
 823         auth->header.frame_ctl = RTLLIB_STYPE_AUTH;
 824         if (challengelen) auth->header.frame_ctl |= RTLLIB_FCTL_WEP;
 825
 826         auth->header.duration_id = 0x013a;
 827                 memcpy(auth->header.addr1, beacon->bssid, ETH_ALEN);
 828         memcpy(auth->header.addr2, ieee->dev->dev_addr, ETH_ALEN);
 829         memcpy(auth->header.addr3, beacon->bssid, ETH_ALEN);
 830         if (ieee->auth_mode == 0)
 831                 auth->algorithm = WLAN_AUTH_OPEN;
 832         else if (ieee->auth_mode == 1)
 833                 auth->algorithm = WLAN_AUTH_SHARED_KEY;
 834         else if (ieee->auth_mode == 2)
 835                 auth->algorithm = WLAN_AUTH_OPEN;
 836         auth->transaction = cpu_to_le16(ieee->associate_seq);
 837         ieee->associate_seq++;
 838
 839         auth->status = cpu_to_le16(WLAN_STATUS_SUCCESS);
 840
 841         return skb;
 842
 843 }
 844
 845 void constructWMMIE(u8* wmmie, u8* wmm_len,u8 oui_subtype)
 846 {
 847         u8      szQoSOUI[] ={221, 0, 0x00, 0x50, 0xf2, 0x02, 0, 1};
 848
 849         if (oui_subtype == OUI_SUBTYPE_QOS_CAPABI)
 850         {
 851                 szQoSOUI[0] = 46;
 852                 szQoSOUI[1] = *wmm_len;
 853                 memcpy(wmmie,szQoSOUI,3);
 854                 *wmm_len = 3;
 855         }
 856         else
 857         {
 858                 szQoSOUI[1] = *wmm_len + 6;
 859                 szQoSOUI[6] = oui_subtype;
 860                 memcpy(wmmie, szQoSOUI, 8);
 861                 *(wmmie+8) = 0;
 862                 *wmm_len = 9;
 863         }
 864 }
 865
 866 static struct sk_buff* rtllib_probe_resp(struct rtllib_device *ieee, u8 *dest)
 867 {
 868         u8 *tag;
 869         int beacon_size;
 870         struct rtllib_probe_response *beacon_buf;
 871         struct sk_buff *skb = NULL;
 872         int encrypt;
 873         int atim_len,erp_len;
 874         struct rtllib_crypt_data* crypt;
 875
 876         char *ssid = ieee->current_network.ssid;
 877         int ssid_len = ieee->current_network.ssid_len;
 878         int rate_len = ieee->current_network.rates_len+2;
 879         int rate_ex_len = ieee->current_network.rates_ex_len;
 880         int wpa_ie_len = ieee->wpa_ie_len;
 881         u8 erpinfo_content = 0;
 882
 883         u8* tmp_ht_cap_buf = NULL;
 884         u8 tmp_ht_cap_len = 0;
 885         u8* tmp_ht_info_buf = NULL;
 886         u8 tmp_ht_info_len = 0;
 887         struct rt_hi_throughput *pHTInfo = ieee->pHTInfo;
 888         u8* tmp_generic_ie_buf = NULL;
 889         u8 tmp_generic_ie_len = 0;
 890
 891         if (rate_ex_len > 0)
 892                 rate_ex_len+=2;
 893
 894         if (ieee->current_network.capability & WLAN_CAPABILITY_IBSS)
 895                 atim_len = 4;
 896         else
 897                 atim_len = 0;
 898
 899       if ((ieee->current_network.mode == IEEE_G)
 900                 ||( ieee->current_network.mode == IEEE_N_24G && ieee->pHTInfo->bCurSuppCCK)) {
 901                 erp_len = 3;
 902                 erpinfo_content = 0;
 903                 if (ieee->current_network.buseprotection)
 904                         erpinfo_content |= ERP_UseProtection;
 905         }
 906         else
 907                 erp_len = 0;
 908
 909         crypt = ieee->crypt[ieee->tx_keyidx];
 910         encrypt = ieee->host_encrypt && crypt && crypt->ops &&
 911                 ((0 == strcmp(crypt->ops->name, "WEP") || wpa_ie_len));
 912         if (ieee->pHTInfo->bCurrentHTSupport){
 913                 tmp_ht_cap_buf =(u8*) &(ieee->pHTInfo->SelfHTCap);
 914                 tmp_ht_cap_len = sizeof(ieee->pHTInfo->SelfHTCap);
 915                 tmp_ht_info_buf =(u8*) &(ieee->pHTInfo->SelfHTInfo);
 916                 tmp_ht_info_len = sizeof(ieee->pHTInfo->SelfHTInfo);
 917                 HTConstructCapabilityElement(ieee, tmp_ht_cap_buf, &tmp_ht_cap_len,encrypt, false);
 918                 HTConstructInfoElement(ieee,tmp_ht_info_buf,&tmp_ht_info_len, encrypt);
 919
 920
 921                 if (pHTInfo->bRegRT2RTAggregation)
 922                 {
 923                         tmp_generic_ie_buf = ieee->pHTInfo->szRT2RTAggBuffer;
 924                         tmp_generic_ie_len = sizeof(ieee->pHTInfo->szRT2RTAggBuffer);
 925                         HTConstructRT2RTAggElement(ieee, tmp_generic_ie_buf, &tmp_generic_ie_len);
 926                 }
 927         }
 928
 929         beacon_size = sizeof(struct rtllib_probe_response)+2+
 930                 ssid_len
 931                 +3
 932                 +rate_len
 933                 +rate_ex_len
 934                 +atim_len
 935                 +erp_len
 936                 +wpa_ie_len
 937                 +ieee->tx_headroom;
 938         skb = dev_alloc_skb(beacon_size);
 939         if (!skb)
 940                 return NULL;
 941
 942         skb_reserve(skb, ieee->tx_headroom);
 943
 944         beacon_buf = (struct rtllib_probe_response*) skb_put(skb, (beacon_size - ieee->tx_headroom));
 945         memcpy (beacon_buf->header.addr1, dest,ETH_ALEN);
 946         memcpy (beacon_buf->header.addr2, ieee->dev->dev_addr, ETH_ALEN);
 947         memcpy (beacon_buf->header.addr3, ieee->current_network.bssid, ETH_ALEN);
 948
 949         beacon_buf->header.duration_id = 0;
 950         beacon_buf->beacon_interval =
 951                 cpu_to_le16(ieee->current_network.beacon_interval);
 952         beacon_buf->capability =
 953                 cpu_to_le16(ieee->current_network.capability & WLAN_CAPABILITY_IBSS);
 954         beacon_buf->capability |=
 955                 cpu_to_le16(ieee->current_network.capability & WLAN_CAPABILITY_SHORT_PREAMBLE);
 956
 957         if (ieee->short_slot && (ieee->current_network.capability & WLAN_CAPABILITY_SHORT_SLOT_TIME))
 958                 cpu_to_le16((beacon_buf->capability |= WLAN_CAPABILITY_SHORT_SLOT_TIME));
 959
 960         crypt = ieee->crypt[ieee->tx_keyidx];
 961         if (encrypt)
 962                 beacon_buf->capability |= cpu_to_le16(WLAN_CAPABILITY_PRIVACY);
 963
 964
 965         beacon_buf->header.frame_ctl = cpu_to_le16(RTLLIB_STYPE_PROBE_RESP);
 966         beacon_buf->info_element[0].id = MFIE_TYPE_SSID;
 967         beacon_buf->info_element[0].len = ssid_len;
 968
 969         tag = (u8*) beacon_buf->info_element[0].data;
 970
 971         memcpy(tag, ssid, ssid_len);
 972
 973         tag += ssid_len;
 974
 975         *(tag++) = MFIE_TYPE_RATES;
 976         *(tag++) = rate_len-2;
 977         memcpy(tag,ieee->current_network.rates,rate_len-2);
 978         tag+=rate_len-2;
 979
 980         *(tag++) = MFIE_TYPE_DS_SET;
 981         *(tag++) = 1;
 982         *(tag++) = ieee->current_network.channel;
 983
 984         if (atim_len){
 985         u16 val16;
 986                 *(tag++) = MFIE_TYPE_IBSS_SET;
 987                 *(tag++) = 2;
 988                  val16 = cpu_to_le16(ieee->current_network.atim_window);
 989                 memcpy((u8 *)tag, (u8 *)&val16, 2);
 990                 tag+=2;
 991         }
 992
 993         if (erp_len){
 994                 *(tag++) = MFIE_TYPE_ERP;
 995                 *(tag++) = 1;
 996                 *(tag++) = erpinfo_content;
 997         }
 998         if (rate_ex_len){
 999                 *(tag++) = MFIE_TYPE_RATES_EX;
1000                 *(tag++) = rate_ex_len-2;
1001                 memcpy(tag,ieee->current_network.rates_ex,rate_ex_len-2);
1002                 tag+=rate_ex_len-2;
1003         }
1004
1005         if (wpa_ie_len)
1006         {
1007                 if (ieee->iw_mode == IW_MODE_ADHOC)
1008                 {
1009                         memcpy(&ieee->wpa_ie[14], &ieee->wpa_ie[8], 4);
1010                 }
1011                 memcpy(tag, ieee->wpa_ie, ieee->wpa_ie_len);
1012                 tag += ieee->wpa_ie_len;
1013         }
1014
1015         return skb;
1016 }
1017
1018 struct sk_buff* rtllib_assoc_resp(struct rtllib_device *ieee, u8 *dest)
1019 {
1020         struct sk_buff *skb;
1021         u8* tag;
1022
1023         struct rtllib_crypt_data* crypt;
1024         struct rtllib_assoc_response_frame *assoc;
1025         short encrypt;
1026
1027         unsigned int rate_len = rtllib_MFIE_rate_len(ieee);
1028         int len = sizeof(struct rtllib_assoc_response_frame) + rate_len + ieee->tx_headroom;
1029
1030         skb = dev_alloc_skb(len);
1031
1032         if (!skb)
1033                 return NULL;
1034
1035         skb_reserve(skb, ieee->tx_headroom);
1036
1037         assoc = (struct rtllib_assoc_response_frame *)
1038                 skb_put(skb,sizeof(struct rtllib_assoc_response_frame));
1039
1040         assoc->header.frame_ctl = cpu_to_le16(RTLLIB_STYPE_ASSOC_RESP);
1041         memcpy(assoc->header.addr1, dest,ETH_ALEN);
1042         memcpy(assoc->header.addr3, ieee->dev->dev_addr, ETH_ALEN);
1043         memcpy(assoc->header.addr2, ieee->dev->dev_addr, ETH_ALEN);
1044         assoc->capability = cpu_to_le16(ieee->iw_mode == IW_MODE_MASTER ?
1045                 WLAN_CAPABILITY_ESS : WLAN_CAPABILITY_IBSS);
1046
1047
1048         if (ieee->short_slot)
1049                 assoc->capability |= cpu_to_le16(WLAN_CAPABILITY_SHORT_SLOT_TIME);
1050
1051         if (ieee->host_encrypt)
1052                 crypt = ieee->crypt[ieee->tx_keyidx];
1053         else
1054                 crypt = NULL;
1055
1056         encrypt = ( crypt && crypt->ops);
1057
1058         if (encrypt)
1059                 assoc->capability |= cpu_to_le16(WLAN_CAPABILITY_PRIVACY);
1060
1061         assoc->status = 0;
1062         assoc->aid = cpu_to_le16(ieee->assoc_id);
1063         if (ieee->assoc_id == 0x2007)
1064                 ieee->assoc_id=0;
1065         else
1066                 ieee->assoc_id++;
1067
1068         tag = (u8*) skb_put(skb, rate_len);
1069         rtllib_MFIE_Brate(ieee, &tag);
1070         rtllib_MFIE_Grate(ieee, &tag);
1071
1072         return skb;
1073 }
1074
1075 struct sk_buff* rtllib_auth_resp(struct rtllib_device *ieee,int status, u8 *dest)
1076 {
1077         struct sk_buff *skb = NULL;
1078         struct rtllib_authentication *auth;
1079         int len = ieee->tx_headroom + sizeof(struct rtllib_authentication)+1;
1080         skb = dev_alloc_skb(len);
1081         if (!skb)
1082                 return NULL;
1083
1084         skb->len = sizeof(struct rtllib_authentication);
1085
1086         skb_reserve(skb, ieee->tx_headroom);
1087
1088         auth = (struct rtllib_authentication *)
1089                 skb_put(skb, sizeof(struct rtllib_authentication));
1090
1091         auth->status = cpu_to_le16(status);
1092         auth->transaction = cpu_to_le16(2);
1093         auth->algorithm = cpu_to_le16(WLAN_AUTH_OPEN);
1094
1095         memcpy(auth->header.addr3, ieee->dev->dev_addr, ETH_ALEN);
1096         memcpy(auth->header.addr2, ieee->dev->dev_addr, ETH_ALEN);
1097         memcpy(auth->header.addr1, dest, ETH_ALEN);
1098         auth->header.frame_ctl = cpu_to_le16(RTLLIB_STYPE_AUTH);
1099         return skb;
1100
1101
1102 }
1103
1104 struct sk_buff* rtllib_null_func(struct rtllib_device *ieee,short pwr)
1105 {
1106         struct sk_buff *skb;
1107         struct rtllib_hdr_3addr* hdr;
1108
1109         skb = dev_alloc_skb(sizeof(struct rtllib_hdr_3addr)+ieee->tx_headroom);
1110         if (!skb)
1111                 return NULL;
1112
1113         skb_reserve(skb, ieee->tx_headroom);
1114
1115         hdr = (struct rtllib_hdr_3addr*)skb_put(skb,sizeof(struct rtllib_hdr_3addr));
1116
1117         memcpy(hdr->addr1, ieee->current_network.bssid, ETH_ALEN);
1118         memcpy(hdr->addr2, ieee->dev->dev_addr, ETH_ALEN);
1119         memcpy(hdr->addr3, ieee->current_network.bssid, ETH_ALEN);
1120
1121         hdr->frame_ctl = cpu_to_le16(RTLLIB_FTYPE_DATA |
1122                 RTLLIB_STYPE_NULLFUNC | RTLLIB_FCTL_TODS |
1123                 (pwr ? RTLLIB_FCTL_PM:0));
1124
1125         return skb;
1126
1127
1128 }
1129
1130 struct sk_buff* rtllib_pspoll_func(struct rtllib_device *ieee)
1131 {
1132         struct sk_buff *skb;
1133         struct rtllib_pspoll_hdr* hdr;
1134
1135         skb = dev_alloc_skb(sizeof(struct rtllib_pspoll_hdr)+ieee->tx_headroom);
1136         if (!skb)
1137                 return NULL;
1138
1139         skb_reserve(skb, ieee->tx_headroom);
1140
1141         hdr = (struct rtllib_pspoll_hdr*)skb_put(skb,sizeof(struct rtllib_pspoll_hdr));
1142
1143         memcpy(hdr->bssid, ieee->current_network.bssid, ETH_ALEN);
1144         memcpy(hdr->ta, ieee->dev->dev_addr, ETH_ALEN);
1145
1146         hdr->aid = cpu_to_le16(ieee->assoc_id | 0xc000);
1147         hdr->frame_ctl = cpu_to_le16(RTLLIB_FTYPE_CTL |RTLLIB_STYPE_PSPOLL | RTLLIB_FCTL_PM);
1148
1149         return skb;
1150
1151 }
1152
1153 void rtllib_resp_to_assoc_rq(struct rtllib_device *ieee, u8* dest)
1154 {
1155         struct sk_buff *buf = rtllib_assoc_resp(ieee, dest);
1156
1157         if (buf)
1158                 softmac_mgmt_xmit(buf, ieee);
1159 }
1160
1161
1162 void rtllib_resp_to_auth(struct rtllib_device *ieee, int s, u8* dest)
1163 {
1164         struct sk_buff *buf = rtllib_auth_resp(ieee, s, dest);
1165
1166         if (buf)
1167                 softmac_mgmt_xmit(buf, ieee);
1168 }
1169
1170
1171 void rtllib_resp_to_probe(struct rtllib_device *ieee, u8 *dest)
1172 {
1173
1174         struct sk_buff *buf = rtllib_probe_resp(ieee, dest);
1175         if (buf)
1176                 softmac_mgmt_xmit(buf, ieee);
1177 }
1178
1179
1180 inline int SecIsInPMKIDList(struct rtllib_device *ieee, u8 *bssid)
1181 {
1182         int i = 0;
1183
1184         do
1185         {
1186                 if ((ieee->PMKIDList[i].bUsed) && (memcmp(ieee->PMKIDList[i].Bssid, bssid, ETH_ALEN) == 0))
1187                 {
1188                         break;
1189                 }
1190                 else
1191                 {
1192                         i++;
1193                 }
1194         } while (i < NUM_PMKID_CACHE);
1195
1196         if (i == NUM_PMKID_CACHE)
1197         {
1198                 i = -1;
1199         }
1200         else
1201         {
1202         }
1203
1204         return (i);
1205
1206 }
1207
1208
1209 inline struct sk_buff *rtllib_association_req(struct rtllib_network *beacon,struct rtllib_device *ieee)
1210 {
1211         struct sk_buff *skb;
1212
1213         struct rtllib_assoc_request_frame *hdr;
1214         u8 *tag, *ies;
1215         int i;
1216         u8* ht_cap_buf = NULL;
1217         u8 ht_cap_len=0;
1218         u8* realtek_ie_buf=NULL;
1219         u8 realtek_ie_len=0;
1220         int wpa_ie_len= ieee->wpa_ie_len;
1221         int wps_ie_len = ieee->wps_ie_len;
1222         unsigned int ckip_ie_len=0;
1223         unsigned int ccxrm_ie_len=0;
1224         unsigned int cxvernum_ie_len=0;
1225         struct rtllib_crypt_data* crypt;
1226         int encrypt;
1227         int     PMKCacheIdx;
1228
1229         unsigned int rate_len = (beacon->rates_len?(beacon->rates_len+2):0) + (beacon->rates_ex_len?(beacon->rates_ex_len)+2:0);
1230
1231         unsigned int wmm_info_len = beacon->qos_data.supported?9:0;
1232         unsigned int turbo_info_len = beacon->Turbo_Enable?9:0;
1233
1234         int len = 0;
1235         crypt = ieee->crypt[ieee->tx_keyidx];
1236         if (crypt != NULL) {
1237                 encrypt = ieee->host_encrypt && crypt && crypt->ops && ((0 == strcmp(crypt->ops->name,"WEP") || wpa_ie_len));
1238         } else {
1239                 encrypt = 0;
1240         }
1241
1242         if ((ieee->rtllib_ap_sec_type && (ieee->rtllib_ap_sec_type(ieee)&SEC_ALG_TKIP)) ||(ieee->bForcedBgMode == true))
1243         {
1244                 ieee->pHTInfo->bEnableHT = 0;
1245                 ieee->mode = WIRELESS_MODE_G;
1246         }
1247
1248         if (ieee->pHTInfo->bCurrentHTSupport&&ieee->pHTInfo->bEnableHT)
1249         {
1250                 ht_cap_buf = (u8*)&(ieee->pHTInfo->SelfHTCap);
1251                 ht_cap_len = sizeof(ieee->pHTInfo->SelfHTCap);
1252                 HTConstructCapabilityElement(ieee, ht_cap_buf, &ht_cap_len, encrypt, true);
1253                 if (ieee->pHTInfo->bCurrentRT2RTAggregation) {
1254                         realtek_ie_buf = ieee->pHTInfo->szRT2RTAggBuffer;
1255                         realtek_ie_len = sizeof( ieee->pHTInfo->szRT2RTAggBuffer);
1256                         HTConstructRT2RTAggElement(ieee, realtek_ie_buf, &realtek_ie_len);
1257
1258                 }
1259         }
1260
1261         if (beacon->bCkipSupported)
1262         {
1263                 ckip_ie_len = 30+2;
1264         }
1265         if (beacon->bCcxRmEnable)
1266         {
1267                 ccxrm_ie_len = 6+2;
1268         }
1269         if ( beacon->BssCcxVerNumber >= 2 )
1270         {
1271                 cxvernum_ie_len = 5+2;
1272         }
1273
1274         PMKCacheIdx = SecIsInPMKIDList(ieee, ieee->current_network.bssid);
1275         if (PMKCacheIdx >= 0)
1276         {
1277                 wpa_ie_len += 18;
1278                 printk("[PMK cache]: WPA2 IE length: %x\n", wpa_ie_len);
1279         }
1280         len = sizeof(struct rtllib_assoc_request_frame)+ 2
1281                 + beacon->ssid_len
1282                 + rate_len
1283                 + wpa_ie_len
1284                 + wps_ie_len
1285                 + wmm_info_len
1286                 + turbo_info_len
1287                 + ht_cap_len
1288                 + realtek_ie_len
1289                 + ckip_ie_len
1290                 + ccxrm_ie_len
1291                 + cxvernum_ie_len
1292                 + ieee->tx_headroom;
1293
1294         skb = dev_alloc_skb(len);
1295
1296         if (!skb)
1297                 return NULL;
1298
1299         skb_reserve(skb, ieee->tx_headroom);
1300
1301         hdr = (struct rtllib_assoc_request_frame *)
1302                 skb_put(skb, sizeof(struct rtllib_assoc_request_frame)+2);
1303
1304
1305         hdr->header.frame_ctl = RTLLIB_STYPE_ASSOC_REQ;
1306         hdr->header.duration_id= 37;
1307         memcpy(hdr->header.addr1, beacon->bssid, ETH_ALEN);
1308         memcpy(hdr->header.addr2, ieee->dev->dev_addr, ETH_ALEN);
1309         memcpy(hdr->header.addr3, beacon->bssid, ETH_ALEN);
1310
1311         memcpy(ieee->ap_mac_addr, beacon->bssid, ETH_ALEN);
1312
1313         hdr->capability = cpu_to_le16(WLAN_CAPABILITY_ESS);
1314         if (beacon->capability & WLAN_CAPABILITY_PRIVACY )
1315                 hdr->capability |= cpu_to_le16(WLAN_CAPABILITY_PRIVACY);
1316
1317         if (beacon->capability & WLAN_CAPABILITY_SHORT_PREAMBLE)
1318                 hdr->capability |= cpu_to_le16(WLAN_CAPABILITY_SHORT_PREAMBLE);
1319
1320         if (ieee->short_slot && (beacon->capability&WLAN_CAPABILITY_SHORT_SLOT_TIME))
1321                 hdr->capability |= cpu_to_le16(WLAN_CAPABILITY_SHORT_SLOT_TIME);
1322
1323
1324         hdr->listen_interval = beacon->listen_interval;
1325
1326         hdr->info_element[0].id = MFIE_TYPE_SSID;
1327
1328         hdr->info_element[0].len = beacon->ssid_len;
1329         tag = skb_put(skb, beacon->ssid_len);
1330         memcpy(tag, beacon->ssid, beacon->ssid_len);
1331
1332         tag = skb_put(skb, rate_len);
1333
1334         if (beacon->rates_len){
1335                 *tag++ = MFIE_TYPE_RATES;
1336                 *tag++ = beacon->rates_len;
1337                 for (i=0;i<beacon->rates_len;i++){
1338                         *tag++ = beacon->rates[i];
1339                 }
1340         }
1341
1342         if (beacon->rates_ex_len){
1343                 *tag++ = MFIE_TYPE_RATES_EX;
1344                 *tag++ = beacon->rates_ex_len;
1345                 for (i=0;i<beacon->rates_ex_len;i++){
1346                         *tag++ = beacon->rates_ex[i];
1347                 }
1348         }
1349
1350         if ( beacon->bCkipSupported )
1351         {
1352                 static u8       AironetIeOui[] = {0x00, 0x01, 0x66};
1353                 u8      CcxAironetBuf[30];
1354                 struct octet_string osCcxAironetIE;
1355
1356                 memset(CcxAironetBuf, 0,30);
1357                 osCcxAironetIE.Octet = CcxAironetBuf;
1358                 osCcxAironetIE.Length = sizeof(CcxAironetBuf);
1359                 memcpy(osCcxAironetIE.Octet, AironetIeOui, sizeof(AironetIeOui));
1360
1361                 osCcxAironetIE.Octet[IE_CISCO_FLAG_POSITION] |=  (SUPPORT_CKIP_PK|SUPPORT_CKIP_MIC) ;
1362                 tag = skb_put(skb, ckip_ie_len);
1363                 *tag++ = MFIE_TYPE_AIRONET;
1364                 *tag++ = osCcxAironetIE.Length;
1365                 memcpy(tag,osCcxAironetIE.Octet,osCcxAironetIE.Length);
1366                 tag += osCcxAironetIE.Length;
1367         }
1368
1369         if (beacon->bCcxRmEnable)
1370         {
1371                 static u8 CcxRmCapBuf[] = {0x00, 0x40, 0x96, 0x01, 0x01, 0x00};
1372                 struct octet_string osCcxRmCap;
1373
1374                 osCcxRmCap.Octet = CcxRmCapBuf;
1375                 osCcxRmCap.Length = sizeof(CcxRmCapBuf);
1376                 tag = skb_put(skb,ccxrm_ie_len);
1377                 *tag++ = MFIE_TYPE_GENERIC;
1378                 *tag++ = osCcxRmCap.Length;
1379                 memcpy(tag,osCcxRmCap.Octet,osCcxRmCap.Length);
1380                 tag += osCcxRmCap.Length;
1381         }
1382
1383         if ( beacon->BssCcxVerNumber >= 2 )
1384         {
1385                 u8                      CcxVerNumBuf[] = {0x00, 0x40, 0x96, 0x03, 0x00};
1386                 struct octet_string osCcxVerNum;
1387                 CcxVerNumBuf[4] = beacon->BssCcxVerNumber;
1388                 osCcxVerNum.Octet = CcxVerNumBuf;
1389                 osCcxVerNum.Length = sizeof(CcxVerNumBuf);
1390                 tag = skb_put(skb,cxvernum_ie_len);
1391                 *tag++ = MFIE_TYPE_GENERIC;
1392                 *tag++ = osCcxVerNum.Length;
1393                 memcpy(tag,osCcxVerNum.Octet,osCcxVerNum.Length);
1394                 tag += osCcxVerNum.Length;
1395         }
1396         if (ieee->pHTInfo->bCurrentHTSupport&&ieee->pHTInfo->bEnableHT){
1397                 if (ieee->pHTInfo->ePeerHTSpecVer != HT_SPEC_VER_EWC)
1398                 {
1399                         tag = skb_put(skb, ht_cap_len);
1400                         *tag++ = MFIE_TYPE_HT_CAP;
1401                         *tag++ = ht_cap_len - 2;
1402                         memcpy(tag, ht_cap_buf,ht_cap_len -2);
1403                         tag += ht_cap_len -2;
1404                 }
1405         }
1406
1407
1408         if (wpa_ie_len){
1409                 tag = skb_put(skb, ieee->wpa_ie_len);
1410                 memcpy(tag, ieee->wpa_ie, ieee->wpa_ie_len);
1411
1412                 if (PMKCacheIdx >= 0)
1413                 {
1414                         tag = skb_put(skb, 18);
1415                         *tag = 1;
1416                         *(tag + 1) = 0;
1417                         memcpy((tag + 2), &ieee->PMKIDList[PMKCacheIdx].PMKID, 16);
1418                 }
1419         }
1420         if (wmm_info_len) {
1421                 tag = skb_put(skb,wmm_info_len);
1422                 rtllib_WMM_Info(ieee, &tag);
1423         }
1424
1425         if (wps_ie_len && ieee->wps_ie) {
1426                 tag = skb_put(skb, wps_ie_len);
1427                 memcpy(tag, ieee->wps_ie, wps_ie_len);
1428         }
1429
1430         tag = skb_put(skb,turbo_info_len);
1431         if (turbo_info_len)
1432                 rtllib_TURBO_Info(ieee, &tag);
1433
1434         if (ieee->pHTInfo->bCurrentHTSupport&&ieee->pHTInfo->bEnableHT){
1435                 if (ieee->pHTInfo->ePeerHTSpecVer == HT_SPEC_VER_EWC)
1436                 {
1437                         tag = skb_put(skb, ht_cap_len);
1438                         *tag++ = MFIE_TYPE_GENERIC;
1439                         *tag++ = ht_cap_len - 2;
1440                         memcpy(tag, ht_cap_buf,ht_cap_len - 2);
1441                         tag += ht_cap_len -2;
1442                 }
1443
1444                 if (ieee->pHTInfo->bCurrentRT2RTAggregation){
1445                         tag = skb_put(skb, realtek_ie_len);
1446                         *tag++ = MFIE_TYPE_GENERIC;
1447                         *tag++ = realtek_ie_len - 2;
1448                         memcpy(tag, realtek_ie_buf,realtek_ie_len -2 );
1449                 }
1450         }
1451
1452         if (ieee->assocreq_ies){
1453                 kfree(ieee->assocreq_ies);
1454                 ieee->assocreq_ies = NULL;
1455         }
1456         ies = &(hdr->info_element[0].id);
1457         ieee->assocreq_ies_len = (skb->data + skb->len) - ies;
1458         ieee->assocreq_ies = kmalloc(ieee->assocreq_ies_len, GFP_ATOMIC);
1459         if (ieee->assocreq_ies)
1460                 memcpy(ieee->assocreq_ies, ies, ieee->assocreq_ies_len);
1461         else{
1462                 printk("%s()Warning: can't alloc memory for assocreq_ies\n", __func__);
1463                 ieee->assocreq_ies_len = 0;
1464         }
1465
1466         return skb;
1467 }
1468
1469 void rtllib_associate_abort(struct rtllib_device *ieee)
1470 {
1471
1472         unsigned long flags;
1473         spin_lock_irqsave(&ieee->lock, flags);
1474
1475         ieee->associate_seq++;
1476
1477         /* don't scan, and avoid to have the RX path possibily
1478          * try again to associate. Even do not react to AUTH or
1479          * ASSOC response. Just wait for the retry wq to be scheduled.
1480          * Here we will check if there are good nets to associate
1481          * with, so we retry or just get back to NO_LINK and scanning
1482          */
1483         if (ieee->state == RTLLIB_ASSOCIATING_AUTHENTICATING){
1484                 RTLLIB_DEBUG_MGMT("Authentication failed\n");
1485                 ieee->softmac_stats.no_auth_rs++;
1486         }else{
1487                 RTLLIB_DEBUG_MGMT("Association failed\n");
1488                 ieee->softmac_stats.no_ass_rs++;
1489         }
1490
1491         ieee->state = RTLLIB_ASSOCIATING_RETRY;
1492
1493         queue_delayed_work_rsl(ieee->wq, &ieee->associate_retry_wq, \
1494                            RTLLIB_SOFTMAC_ASSOC_RETRY_TIME);
1495
1496         spin_unlock_irqrestore(&ieee->lock, flags);
1497 }
1498
1499 void rtllib_associate_abort_cb(unsigned long dev)
1500 {
1501         rtllib_associate_abort((struct rtllib_device *) dev);
1502 }
1503
1504 void rtllib_associate_step1(struct rtllib_device *ieee,u8 * daddr)
1505 {
1506         struct rtllib_network *beacon = &ieee->current_network;
1507         struct sk_buff *skb;
1508
1509         RTLLIB_DEBUG_MGMT("Stopping scan\n");
1510
1511         ieee->softmac_stats.tx_auth_rq++;
1512
1513         skb=rtllib_authentication_req(beacon, ieee, 0,daddr);
1514
1515         if (!skb)
1516                 rtllib_associate_abort(ieee);
1517         else{
1518                 ieee->state = RTLLIB_ASSOCIATING_AUTHENTICATING ;
1519                 RTLLIB_DEBUG_MGMT("Sending authentication request\n");
1520                 softmac_mgmt_xmit(skb, ieee);
1521                 if (!timer_pending(&ieee->associate_timer)){
1522                         ieee->associate_timer.expires = jiffies + (HZ / 2);
1523                         add_timer(&ieee->associate_timer);
1524                 }
1525         }
1526 }
1527
1528 void rtllib_auth_challenge(struct rtllib_device *ieee, u8 *challenge, int chlen)
1529 {
1530         u8 *c;
1531         struct sk_buff *skb;
1532         struct rtllib_network *beacon = &ieee->current_network;
1533
1534         ieee->associate_seq++;
1535         ieee->softmac_stats.tx_auth_rq++;
1536
1537         skb = rtllib_authentication_req(beacon, ieee, chlen+2,beacon->bssid);
1538
1539         if (!skb)
1540                 rtllib_associate_abort(ieee);
1541         else{
1542                 c = skb_put(skb, chlen+2);
1543                 *(c++) = MFIE_TYPE_CHALLENGE;
1544                 *(c++) = chlen;
1545                 memcpy(c, challenge, chlen);
1546
1547                 RTLLIB_DEBUG_MGMT("Sending authentication challenge response\n");
1548
1549                 rtllib_encrypt_fragment(ieee, skb, sizeof(struct rtllib_hdr_3addr  ));
1550
1551                 softmac_mgmt_xmit(skb, ieee);
1552                 mod_timer(&ieee->associate_timer, jiffies + (HZ/2));
1553         }
1554         kfree(challenge);
1555 }
1556
1557 void rtllib_associate_step2(struct rtllib_device *ieee)
1558 {
1559         struct sk_buff* skb;
1560         struct rtllib_network *beacon = &ieee->current_network;
1561
1562         del_timer_sync(&ieee->associate_timer);
1563
1564         RTLLIB_DEBUG_MGMT("Sending association request\n");
1565
1566         ieee->softmac_stats.tx_ass_rq++;
1567         skb=rtllib_association_req(beacon, ieee);
1568         if (!skb)
1569                 rtllib_associate_abort(ieee);
1570         else{
1571                 softmac_mgmt_xmit(skb, ieee);
1572                 mod_timer(&ieee->associate_timer, jiffies + (HZ/2));
1573         }
1574 }
1575
1576 #define CANCELLED  2
1577 void rtllib_associate_complete_wq(void *data)
1578 {
1579         struct rtllib_device *ieee = (struct rtllib_device *)container_of_work_rsl(data, struct rtllib_device, associate_complete_wq);
1580         struct rt_pwr_save_ctrl *pPSC = (struct rt_pwr_save_ctrl *)(&(ieee->PowerSaveControl));
1581         printk(KERN_INFO "Associated successfully\n");
1582         if (ieee->is_silent_reset == 0){
1583             printk("normal associate\n");
1584             notify_wx_assoc_event(ieee);
1585         }
1586
1587         netif_carrier_on(ieee->dev);
1588         ieee->is_roaming = false;
1589         if (rtllib_is_54g(&ieee->current_network) &&
1590                 (ieee->modulation & RTLLIB_OFDM_MODULATION)){
1591
1592                 ieee->rate = 108;
1593                 printk(KERN_INFO"Using G rates:%d\n", ieee->rate);
1594         }else{
1595                 ieee->rate = 22;
1596                 ieee->SetWirelessMode(ieee->dev, IEEE_B);
1597                 printk(KERN_INFO"Using B rates:%d\n", ieee->rate);
1598         }
1599         if (ieee->pHTInfo->bCurrentHTSupport&&ieee->pHTInfo->bEnableHT)
1600         {
1601                 printk("Successfully associated, ht enabled\n");
1602                 HTOnAssocRsp(ieee);
1603         } else {
1604                 printk("Successfully associated, ht not enabled(%d, %d)\n",
1605                                 ieee->pHTInfo->bCurrentHTSupport, ieee->pHTInfo->bEnableHT);
1606                 memset(ieee->dot11HTOperationalRateSet, 0, 16);
1607         }
1608         ieee->LinkDetectInfo.SlotNum = 2 * (1 + ieee->current_network.beacon_interval/500);
1609         if (ieee->LinkDetectInfo.NumRecvBcnInPeriod==0||ieee->LinkDetectInfo.NumRecvDataInPeriod==0 )
1610         {
1611                 ieee->LinkDetectInfo.NumRecvBcnInPeriod = 1;
1612                 ieee->LinkDetectInfo.NumRecvDataInPeriod= 1;
1613         }
1614         pPSC->LpsIdleCount = 0;
1615         ieee->link_change(ieee->dev);
1616
1617         if (ieee->is_silent_reset == 1) {
1618                 printk("silent reset associate\n");
1619                 ieee->is_silent_reset = 0;
1620         }
1621
1622         if (ieee->data_hard_resume)
1623                 ieee->data_hard_resume(ieee->dev);
1624
1625 }
1626
1627 static void rtllib_sta_send_associnfo(struct rtllib_device *ieee)
1628 {
1629         char *buf;
1630         size_t len;
1631         int i;
1632         union iwreq_data wrqu;
1633
1634                 return;
1635
1636
1637         buf = kmalloc(50 + 2 * (ieee->assocreq_ies_len + ieee->assocresp_ies_len), GFP_ATOMIC);
1638         if (!buf)
1639                 return;
1640
1641         len = sprintf(buf, "ASSOCINFO(");
1642         if (ieee->assocreq_ies) {
1643                 len += sprintf(buf + len, "ReqIEs=");
1644                 for (i = 0; i < ieee->assocreq_ies_len; i++) {
1645                         len += sprintf(buf + len, "%02x", ieee->assocreq_ies[i]);
1646                 }
1647         }
1648         if (ieee->assocresp_ies) {
1649                 if (ieee->assocreq_ies)
1650                         len += sprintf(buf + len, " ");
1651                 len += sprintf(buf + len, "RespIEs=");
1652                 for (i = 0; i < ieee->assocresp_ies_len; i++) {
1653                         len += sprintf(buf + len, "%02x", ieee->assocresp_ies[i]);
1654                 }
1655         }
1656         len += sprintf(buf + len, ")");
1657
1658         if (len > IW_CUSTOM_MAX) {
1659                 len = sprintf(buf, "ASSOCRESPIE=");
1660                 for (i = 0; i < ieee->assocresp_ies_len; i++) {
1661                         len += sprintf(buf + len, "%02x", ieee->assocresp_ies[i]);
1662                 }
1663         }
1664
1665         if (len <= IW_CUSTOM_MAX) {
1666                 memset(&wrqu, 0, sizeof(wrqu));
1667                 wrqu.data.length = len;
1668                 wireless_send_event(ieee->dev, IWEVCUSTOM, &wrqu, buf);
1669         }
1670
1671         kfree(buf);
1672 }
1673
1674 void rtllib_associate_complete(struct rtllib_device *ieee)
1675 {
1676         del_timer_sync(&ieee->associate_timer);
1677
1678         ieee->state = RTLLIB_LINKED;
1679         rtllib_sta_send_associnfo(ieee);
1680
1681         queue_work_rsl(ieee->wq, &ieee->associate_complete_wq);
1682 }
1683
1684 void rtllib_associate_procedure_wq(void *data)
1685 {
1686         struct rtllib_device *ieee = container_of_dwork_rsl(data, struct rtllib_device, associate_procedure_wq);
1687         rtllib_stop_scan_syncro(ieee);
1688         if (ieee->rtllib_ips_leave != NULL)
1689                 ieee->rtllib_ips_leave(ieee->dev);
1690         down(&ieee->wx_sem);
1691
1692         if (ieee->data_hard_stop)
1693                 ieee->data_hard_stop(ieee->dev);
1694
1695         rtllib_stop_scan(ieee);
1696         RT_TRACE(COMP_DBG, "===>%s(), chan:%d\n", __func__, ieee->current_network.channel);
1697         HTSetConnectBwMode(ieee, HT_CHANNEL_WIDTH_20, HT_EXTCHNL_OFFSET_NO_EXT);
1698         if (ieee->eRFPowerState == eRfOff)
1699         {
1700             RT_TRACE(COMP_DBG, "=============>%s():Rf state is eRfOff, schedule ipsleave wq again,return\n",__func__);
1701                 if (ieee->rtllib_ips_leave_wq != NULL)
1702                         ieee->rtllib_ips_leave_wq(ieee->dev);
1703                 up(&ieee->wx_sem);
1704                 return;
1705         }
1706         ieee->associate_seq = 1;
1707
1708         rtllib_associate_step1(ieee, ieee->current_network.bssid);
1709
1710         up(&ieee->wx_sem);
1711 }
1712
1713 inline void rtllib_softmac_new_net(struct rtllib_device *ieee, struct rtllib_network *net)
1714 {
1715         u8 tmp_ssid[IW_ESSID_MAX_SIZE+1];
1716         int tmp_ssid_len = 0;
1717
1718         short apset,ssidset,ssidbroad,apmatch,ssidmatch;
1719
1720         /* we are interested in new new only if we are not associated
1721          * and we are not associating / authenticating
1722          */
1723         if (ieee->state != RTLLIB_NOLINK)
1724                 return;
1725
1726         if ((ieee->iw_mode == IW_MODE_INFRA) && !(net->capability & WLAN_CAPABILITY_ESS))
1727                 return;
1728
1729         if ((ieee->iw_mode == IW_MODE_ADHOC) && !(net->capability & WLAN_CAPABILITY_IBSS))
1730                 return;
1731
1732         if ((ieee->iw_mode == IW_MODE_ADHOC) && (net->channel > ieee->ibss_maxjoin_chal)) {
1733                 return;
1734         }
1735         if (ieee->iw_mode == IW_MODE_INFRA || ieee->iw_mode == IW_MODE_ADHOC)
1736                 {
1737                 /* if the user specified the AP MAC, we need also the essid
1738                  * This could be obtained by beacons or, if the network does not
1739                  * broadcast it, it can be put manually.
1740                  */
1741                 apset = ieee->wap_set;
1742                 ssidset = ieee->ssid_set;
1743                 ssidbroad =  !(net->ssid_len == 0 || net->ssid[0]== '\0');
1744                 apmatch = (memcmp(ieee->current_network.bssid, net->bssid, ETH_ALEN)==0);
1745                 if (!ssidbroad){
1746                         ssidmatch = (ieee->current_network.ssid_len == net->hidden_ssid_len)&&\
1747                                         (!strncmp(ieee->current_network.ssid, net->hidden_ssid, net->hidden_ssid_len));
1748                         if (net->hidden_ssid_len > 0)
1749                         {
1750                                 strncpy(net->ssid, net->hidden_ssid, net->hidden_ssid_len);
1751                                 net->ssid_len = net->hidden_ssid_len;
1752                                 ssidbroad = 1;
1753                         }
1754                 }
1755                 else
1756                         ssidmatch = (ieee->current_network.ssid_len == net->ssid_len)&&\
1757                                         (!strncmp(ieee->current_network.ssid, net->ssid, net->ssid_len));
1758
1759                 if (    /* if the user set the AP check if match.
1760                          * if the network does not broadcast essid we check the user supplyed ANY essid
1761                          * if the network does broadcast and the user does not set essid it is OK
1762                          * if the network does broadcast and the user did set essid chech if essid match
1763                          */
1764                         ( apset && apmatch &&
1765                                 ((ssidset && ssidbroad && ssidmatch) || (ssidbroad && !ssidset) || (!ssidbroad && ssidset)) )
1766                         /* if the ap is not set, check that the user set the bssid
1767                          * and the network does bradcast and that those two bssid matches
1768                          */
1769                          ||  (!apset && ssidset && ssidbroad && ssidmatch) || (ieee->is_roaming && ssidset && ssidbroad && ssidmatch)
1770                         ){
1771                                 /* if the essid is hidden replace it with the
1772                                 * essid provided by the user.
1773                                 */
1774                                 if (!ssidbroad){
1775                                         strncpy(tmp_ssid, ieee->current_network.ssid, IW_ESSID_MAX_SIZE);
1776                                         tmp_ssid_len = ieee->current_network.ssid_len;
1777                                 }
1778                                 memcpy(&ieee->current_network, net, sizeof(struct rtllib_network));
1779                                 if (!ssidbroad){
1780                                         strncpy(ieee->current_network.ssid, tmp_ssid, IW_ESSID_MAX_SIZE);
1781                                         ieee->current_network.ssid_len = tmp_ssid_len;
1782                                 }
1783                                 printk(KERN_INFO"Linking with %s,channel:%d, qos:%d, myHT:%d, networkHT:%d, mode:%x cur_net.flags:0x%x\n",ieee->current_network.ssid,ieee->current_network.channel, ieee->current_network.qos_data.supported, ieee->pHTInfo->bEnableHT, ieee->current_network.bssht.bdSupportHT, ieee->current_network.mode, ieee->current_network.flags);
1784
1785                                 if ((rtllib_act_scanning(ieee, false)) && !(ieee->softmac_features & IEEE_SOFTMAC_SCAN)){
1786                                         rtllib_stop_scan_syncro(ieee);
1787                                 }
1788
1789                                 ieee->hwscan_ch_bk = ieee->current_network.channel;
1790                                 HTResetIOTSetting(ieee->pHTInfo);
1791                                 ieee->wmm_acm = 0;
1792                                 if (ieee->iw_mode == IW_MODE_INFRA) {
1793                                         /* Join the network for the first time */
1794                                         ieee->AsocRetryCount = 0;
1795                                         if ((ieee->current_network.qos_data.supported == 1) &&
1796                                            ieee->current_network.bssht.bdSupportHT)
1797                                                 HTResetSelfAndSavePeerSetting(ieee, &(ieee->current_network));
1798                                         else
1799                                                 ieee->pHTInfo->bCurrentHTSupport = false;
1800
1801                                         ieee->state = RTLLIB_ASSOCIATING;
1802                                         if (ieee->LedControlHandler != NULL)
1803                                                 ieee->LedControlHandler(ieee->dev, LED_CTL_START_TO_LINK);
1804                                         queue_delayed_work_rsl(ieee->wq, &ieee->associate_procedure_wq, 0);
1805                                 } else {
1806                                         if (rtllib_is_54g(&ieee->current_network) &&
1807                                                 (ieee->modulation & RTLLIB_OFDM_MODULATION)){
1808                                                 ieee->rate = 108;
1809                                                 ieee->SetWirelessMode(ieee->dev, IEEE_G);
1810                                                 printk(KERN_INFO"Using G rates\n");
1811                                         }else{
1812                                                 ieee->rate = 22;
1813                                                 ieee->SetWirelessMode(ieee->dev, IEEE_B);
1814                                                 printk(KERN_INFO"Using B rates\n");
1815                                         }
1816                                         memset(ieee->dot11HTOperationalRateSet, 0, 16);
1817                                         ieee->state = RTLLIB_LINKED;
1818                                 }
1819
1820                 }
1821         }
1822
1823 }
1824
1825 void rtllib_softmac_check_all_nets(struct rtllib_device *ieee)
1826 {
1827         unsigned long flags;
1828         struct rtllib_network *target;
1829
1830         spin_lock_irqsave(&ieee->lock, flags);
1831
1832         list_for_each_entry(target, &ieee->network_list, list) {
1833
1834                 /* if the state become different that NOLINK means
1835                  * we had found what we are searching for
1836                  */
1837
1838                 if (ieee->state != RTLLIB_NOLINK)
1839                         break;
1840
1841                 if (ieee->scan_age == 0 || time_after(target->last_scanned + ieee->scan_age, jiffies))
1842                 rtllib_softmac_new_net(ieee, target);
1843         }
1844
1845         spin_unlock_irqrestore(&ieee->lock, flags);
1846
1847 }
1848
1849
1850 static inline u16 auth_parse(struct sk_buff *skb, u8** challenge, int *chlen)
1851 {
1852         struct rtllib_authentication *a;
1853         u8 *t;
1854         if (skb->len <  (sizeof(struct rtllib_authentication)-sizeof(struct rtllib_info_element))){
1855                 RTLLIB_DEBUG_MGMT("invalid len in auth resp: %d\n",skb->len);
1856                 return 0xcafe;
1857         }
1858         *challenge = NULL;
1859         a = (struct rtllib_authentication*) skb->data;
1860         if (skb->len > (sizeof(struct rtllib_authentication) +3)){
1861                 t = skb->data + sizeof(struct rtllib_authentication);
1862
1863                 if (*(t++) == MFIE_TYPE_CHALLENGE){
1864                         *chlen = *(t++);
1865                         *challenge = (u8*)kmalloc(*chlen, GFP_ATOMIC);
1866                         memcpy(*challenge, t, *chlen);
1867                 }
1868         }
1869
1870         return cpu_to_le16(a->status);
1871
1872 }
1873
1874
1875 int auth_rq_parse(struct sk_buff *skb,u8* dest)
1876 {
1877         struct rtllib_authentication *a;
1878
1879         if (skb->len <  (sizeof(struct rtllib_authentication)-sizeof(struct rtllib_info_element))){
1880                 RTLLIB_DEBUG_MGMT("invalid len in auth request: %d\n",skb->len);
1881                 return -1;
1882         }
1883         a = (struct rtllib_authentication*) skb->data;
1884
1885         memcpy(dest,a->header.addr2, ETH_ALEN);
1886
1887         if (le16_to_cpu(a->algorithm) != WLAN_AUTH_OPEN)
1888                 return  WLAN_STATUS_NOT_SUPPORTED_AUTH_ALG;
1889
1890         return WLAN_STATUS_SUCCESS;
1891 }
1892
1893 static short probe_rq_parse(struct rtllib_device *ieee, struct sk_buff *skb, u8 *src)
1894 {
1895         u8 *tag;
1896         u8 *skbend;
1897         u8 *ssid=NULL;
1898         u8 ssidlen = 0;
1899
1900         struct rtllib_hdr_3addr   *header =
1901                 (struct rtllib_hdr_3addr   *) skb->data;
1902
1903         if (skb->len < sizeof (struct rtllib_hdr_3addr  ))
1904                 return -1; /* corrupted */
1905         if ((memcmp(header->addr3,ieee->current_network.bssid,ETH_ALEN) != 0)&&
1906                 (memcmp(header->addr3,"\xff\xff\xff\xff\xff\xff",ETH_ALEN) != 0)) {
1907             return -1;
1908         }
1909
1910         if (memcmp(header->addr3,ieee->current_network.bssid,ETH_ALEN) == 0) {
1911         }
1912
1913         if (memcmp(header->addr3,"\xff\xff\xff\xff\xff\xff",ETH_ALEN) == 0) {
1914         }
1915         memcpy(src,header->addr2, ETH_ALEN);
1916
1917         skbend = (u8*)skb->data + skb->len;
1918
1919         tag = skb->data + sizeof (struct rtllib_hdr_3addr  );
1920
1921         while (tag+1 < skbend){
1922                 if (*tag == 0){
1923                         ssid = tag+2;
1924                         ssidlen = *(tag+1);
1925                         break;
1926                 }
1927                 tag++; /* point to the len field */
1928                 tag = tag + *(tag); /* point to the last data byte of the tag */
1929                 tag++; /* point to the next tag */
1930         }
1931
1932         if (ssidlen == 0) return 1;
1933
1934         if (!ssid) return 1; /* ssid not found in tagged param */
1935         return (!strncmp(ssid, ieee->current_network.ssid, ssidlen));
1936
1937 }
1938
1939 int assoc_rq_parse(struct sk_buff *skb,u8* dest)
1940 {
1941         struct rtllib_assoc_request_frame *a;
1942
1943         if (skb->len < (sizeof(struct rtllib_assoc_request_frame) -
1944                 sizeof(struct rtllib_info_element))) {
1945
1946                 RTLLIB_DEBUG_MGMT("invalid len in auth request:%d \n", skb->len);
1947                 return -1;
1948         }
1949
1950         a = (struct rtllib_assoc_request_frame*) skb->data;
1951
1952         memcpy(dest,a->header.addr2,ETH_ALEN);
1953
1954         return 0;
1955 }
1956
1957 static inline u16 assoc_parse(struct rtllib_device *ieee, struct sk_buff *skb, int *aid)
1958 {
1959         struct rtllib_assoc_response_frame *response_head;
1960         u16 status_code;
1961
1962         if (skb->len <  sizeof(struct rtllib_assoc_response_frame)){
1963                 RTLLIB_DEBUG_MGMT("invalid len in auth resp: %d\n", skb->len);
1964                 return 0xcafe;
1965         }
1966
1967         response_head = (struct rtllib_assoc_response_frame*) skb->data;
1968         *aid = le16_to_cpu(response_head->aid) & 0x3fff;
1969
1970         status_code = le16_to_cpu(response_head->status);
1971         if ((status_code==WLAN_STATUS_ASSOC_DENIED_RATES || \
1972            status_code==WLAN_STATUS_CAPS_UNSUPPORTED)&&
1973            ((ieee->mode == IEEE_G) &&
1974             (ieee->current_network.mode == IEEE_N_24G) &&
1975             (ieee->AsocRetryCount++ < (RT_ASOC_RETRY_LIMIT-1)))) {
1976                  ieee->pHTInfo->IOTAction |= HT_IOT_ACT_PURE_N_MODE;
1977         }else {
1978                  ieee->AsocRetryCount = 0;
1979         }
1980
1981         return le16_to_cpu(response_head->status);
1982 }
1983
1984 void rtllib_rx_probe_rq(struct rtllib_device *ieee, struct sk_buff *skb)
1985 {
1986         u8 dest[ETH_ALEN];
1987         ieee->softmac_stats.rx_probe_rq++;
1988         if (probe_rq_parse(ieee, skb, dest) > 0){
1989                 ieee->softmac_stats.tx_probe_rs++;
1990                 rtllib_resp_to_probe(ieee, dest);
1991         }
1992 }
1993
1994 static inline void rtllib_rx_auth_rq(struct rtllib_device *ieee, struct sk_buff *skb)
1995 {
1996         u8 dest[ETH_ALEN];
1997         int status;
1998         ieee->softmac_stats.rx_auth_rq++;
1999
2000         if ((status = auth_rq_parse(skb, dest))!= -1){
2001                 rtllib_resp_to_auth(ieee, status, dest);
2002         }
2003
2004 }
2005
2006 static inline void rtllib_rx_assoc_rq(struct rtllib_device *ieee, struct sk_buff *skb)
2007 {
2008
2009         u8 dest[ETH_ALEN];
2010
2011         ieee->softmac_stats.rx_ass_rq++;
2012         if (assoc_rq_parse(skb,dest) != -1){
2013                 rtllib_resp_to_assoc_rq(ieee, dest);
2014         }
2015
2016         printk(KERN_INFO"New client associated: "MAC_FMT"\n", MAC_ARG(dest));
2017 }
2018
2019
2020 void rtllib_sta_ps_send_null_frame(struct rtllib_device *ieee, short pwr)
2021 {
2022
2023         struct sk_buff *buf = rtllib_null_func(ieee, pwr);
2024
2025         if (buf)
2026                 softmac_ps_mgmt_xmit(buf, ieee);
2027
2028 }
2029
2030 void rtllib_sta_ps_send_pspoll_frame(struct rtllib_device *ieee)
2031 {
2032
2033         struct sk_buff *buf = rtllib_pspoll_func(ieee);
2034
2035         if (buf)
2036                 softmac_ps_mgmt_xmit(buf, ieee);
2037
2038 }
2039
2040 static short rtllib_sta_ps_sleep(struct rtllib_device *ieee, u64 *time)
2041 {
2042         int timeout = ieee->ps_timeout;
2043         u8 dtim;
2044         struct rt_pwr_save_ctrl *pPSC = (struct rt_pwr_save_ctrl *)(&(ieee->PowerSaveControl));
2045         /*if (ieee->ps == RTLLIB_PS_DISABLED ||
2046                 ieee->iw_mode != IW_MODE_INFRA ||
2047                 ieee->state != RTLLIB_LINKED)
2048
2049                 return 0;
2050         */
2051
2052         if (ieee->LPSDelayCnt)
2053         {
2054                 ieee->LPSDelayCnt --;
2055                 return 0;
2056         }
2057
2058         dtim = ieee->current_network.dtim_data;
2059         if (!(dtim & RTLLIB_DTIM_VALID))
2060                 return 0;
2061         timeout = ieee->current_network.beacon_interval;
2062         ieee->current_network.dtim_data = RTLLIB_DTIM_INVALID;
2063         /* there's no need to nofity AP that I find you buffered with broadcast packet */
2064         if (dtim & (RTLLIB_DTIM_UCAST & ieee->ps))
2065                 return 2;
2066
2067         if (!time_after(jiffies, ieee->dev->trans_start + MSECS(timeout))){
2068                 return 0;
2069         }
2070         if (!time_after(jiffies, ieee->last_rx_ps_time + MSECS(timeout))){
2071                 return 0;
2072         }
2073         if ((ieee->softmac_features & IEEE_SOFTMAC_SINGLE_QUEUE ) &&
2074                 (ieee->mgmt_queue_tail != ieee->mgmt_queue_head))
2075                 return 0;
2076
2077         if (time){
2078                 if (ieee->bAwakePktSent == true) {
2079                         pPSC->LPSAwakeIntvl = 1;
2080                 } else {
2081                         u8              MaxPeriod = 1;
2082
2083                         if (pPSC->LPSAwakeIntvl == 0)
2084                                 pPSC->LPSAwakeIntvl = 1;
2085                         if (pPSC->RegMaxLPSAwakeIntvl == 0)
2086                                 MaxPeriod = 1;
2087                         else if (pPSC->RegMaxLPSAwakeIntvl == 0xFF)
2088                                 MaxPeriod = ieee->current_network.dtim_period;
2089                         else
2090                                 MaxPeriod = pPSC->RegMaxLPSAwakeIntvl;
2091                         pPSC->LPSAwakeIntvl = (pPSC->LPSAwakeIntvl >= MaxPeriod) ? MaxPeriod : (pPSC->LPSAwakeIntvl + 1);
2092                 }
2093                 {
2094                         u8 LPSAwakeIntvl_tmp = 0;
2095                         u8 period = ieee->current_network.dtim_period;
2096                         u8 count = ieee->current_network.tim.tim_count;
2097                         if (count == 0 ) {
2098                                 if (pPSC->LPSAwakeIntvl > period)
2099                                         LPSAwakeIntvl_tmp = period + (pPSC->LPSAwakeIntvl - period) -((pPSC->LPSAwakeIntvl-period)%period);
2100                                 else
2101                                         LPSAwakeIntvl_tmp = pPSC->LPSAwakeIntvl;
2102
2103                         } else {
2104                                 if (pPSC->LPSAwakeIntvl > ieee->current_network.tim.tim_count)
2105                                         LPSAwakeIntvl_tmp = count + (pPSC->LPSAwakeIntvl - count) -((pPSC->LPSAwakeIntvl-count)%period);
2106                                 else
2107                                         LPSAwakeIntvl_tmp = pPSC->LPSAwakeIntvl;
2108                         }
2109
2110                 *time = ieee->current_network.last_dtim_sta_time
2111                         + MSECS(ieee->current_network.beacon_interval * LPSAwakeIntvl_tmp);
2112         }
2113         }
2114
2115         return 1;
2116
2117
2118 }
2119
2120 inline void rtllib_sta_ps(struct rtllib_device *ieee)
2121 {
2122
2123         u64 time;
2124         short sleep;
2125
2126         unsigned long flags,flags2;
2127
2128         spin_lock_irqsave(&ieee->lock, flags);
2129
2130         if ((ieee->ps == RTLLIB_PS_DISABLED ||
2131                 ieee->iw_mode != IW_MODE_INFRA ||
2132                 ieee->state != RTLLIB_LINKED)){
2133
2134                 RT_TRACE(COMP_DBG, "=====>%s(): no need to ps,wake up!! ieee->ps is %d,ieee->iw_mode is %d,ieee->state is %d\n",
2135                         __func__,ieee->ps,ieee->iw_mode,ieee->state);
2136                 spin_lock_irqsave(&ieee->mgmt_tx_lock, flags2);
2137
2138                 rtllib_sta_wakeup(ieee, 1);
2139
2140                 spin_unlock_irqrestore(&ieee->mgmt_tx_lock, flags2);
2141         }
2142
2143         sleep = rtllib_sta_ps_sleep(ieee, &time);
2144         /* 2 wake, 1 sleep, 0 do nothing */
2145         if (sleep == 0)
2146         {
2147                 goto out;
2148         }
2149         if (sleep == 1){
2150                 if (ieee->sta_sleep == LPS_IS_SLEEP){
2151                         ieee->enter_sleep_state(ieee->dev, time);
2152                 }
2153
2154                 else if (ieee->sta_sleep == LPS_IS_WAKE){
2155                         spin_lock_irqsave(&ieee->mgmt_tx_lock, flags2);
2156
2157                         if (ieee->ps_is_queue_empty(ieee->dev)){
2158                                 ieee->sta_sleep = LPS_WAIT_NULL_DATA_SEND;
2159                                 ieee->ack_tx_to_ieee = 1;
2160                                 rtllib_sta_ps_send_null_frame(ieee,1);
2161                                 ieee->ps_time = time;
2162                         }
2163                         spin_unlock_irqrestore(&ieee->mgmt_tx_lock, flags2);
2164
2165                 }
2166
2167                 ieee->bAwakePktSent = false;
2168
2169         }else if (sleep == 2){
2170                 spin_lock_irqsave(&ieee->mgmt_tx_lock, flags2);
2171
2172                 rtllib_sta_wakeup(ieee,1);
2173
2174                 spin_unlock_irqrestore(&ieee->mgmt_tx_lock, flags2);
2175         }
2176
2177 out:
2178         spin_unlock_irqrestore(&ieee->lock, flags);
2179
2180 }
2181
2182 void rtllib_sta_wakeup(struct rtllib_device *ieee, short nl)
2183 {
2184         if (ieee->sta_sleep == LPS_IS_WAKE){
2185                 if (nl){
2186                         if (ieee->pHTInfo->IOTAction & HT_IOT_ACT_NULL_DATA_POWER_SAVING)
2187                         {
2188                                 ieee->ack_tx_to_ieee = 1;
2189                                 rtllib_sta_ps_send_null_frame(ieee, 0);
2190                         }
2191                         else
2192                         {
2193                                 ieee->ack_tx_to_ieee = 1;
2194                                 rtllib_sta_ps_send_pspoll_frame(ieee);
2195                         }
2196                 }
2197                 return;
2198
2199         }
2200
2201         if (ieee->sta_sleep == LPS_IS_SLEEP)
2202                 ieee->sta_wake_up(ieee->dev);
2203         if (nl){
2204                 /*
2205                         ieee->ack_tx_to_ieee = 1;
2206                         printk("%s(3): notify AP we are awaked ++++++++++ SendNullFunctionData\n", __func__);
2207                         rtllib_sta_ps_send_null_frame(ieee, 0);
2208                 */
2209                 if (ieee->pHTInfo->IOTAction & HT_IOT_ACT_NULL_DATA_POWER_SAVING)
2210                 {
2211                         ieee->ack_tx_to_ieee = 1;
2212                         rtllib_sta_ps_send_null_frame(ieee, 0);
2213                 }
2214                 else
2215                 {
2216                         ieee->ack_tx_to_ieee = 1;
2217                         ieee->polling = true;
2218                         rtllib_sta_ps_send_pspoll_frame(ieee);
2219                 }
2220
2221         } else {
2222                 ieee->sta_sleep = LPS_IS_WAKE;
2223                 ieee->polling = false;
2224         }
2225 }
2226
2227 void rtllib_ps_tx_ack(struct rtllib_device *ieee, short success)
2228 {
2229         unsigned long flags,flags2;
2230
2231         spin_lock_irqsave(&ieee->lock, flags);
2232
2233         if (ieee->sta_sleep == LPS_WAIT_NULL_DATA_SEND){
2234                 /* Null frame with PS bit set */
2235                 if (success){
2236                         ieee->sta_sleep = LPS_IS_SLEEP;
2237                         ieee->enter_sleep_state(ieee->dev, ieee->ps_time);
2238                 }
2239                 /* if the card report not success we can't be sure the AP
2240                  * has not RXed so we can't assume the AP believe us awake
2241                  */
2242         } else {/* 21112005 - tx again null without PS bit if lost */
2243
2244                 if ((ieee->sta_sleep == LPS_IS_WAKE) && !success){
2245                         spin_lock_irqsave(&ieee->mgmt_tx_lock, flags2);
2246                         if (ieee->pHTInfo->IOTAction & HT_IOT_ACT_NULL_DATA_POWER_SAVING)
2247                         {
2248                                 rtllib_sta_ps_send_null_frame(ieee, 0);
2249                         }
2250                         else
2251                         {
2252                                 rtllib_sta_ps_send_pspoll_frame(ieee);
2253                         }
2254                         spin_unlock_irqrestore(&ieee->mgmt_tx_lock, flags2);
2255                 }
2256         }
2257         spin_unlock_irqrestore(&ieee->lock, flags);
2258 }
2259
2260 void rtllib_process_action(struct rtllib_device* ieee, struct sk_buff* skb)
2261 {
2262         struct rtllib_hdr_3addr *header = (struct rtllib_hdr_3addr *) skb->data;
2263         u8* act = rtllib_get_payload((struct rtllib_hdr *)header);
2264         u8 category = 0;
2265
2266         if (act == NULL) {
2267                 RTLLIB_DEBUG(RTLLIB_DL_ERR, "error to get payload of action frame\n");
2268                 return;
2269         }
2270
2271         category = *act;
2272         act ++;
2273         switch (category) {
2274                 case ACT_CAT_BA:
2275                         switch (*act) {
2276                                 case ACT_ADDBAREQ:
2277                                         rtllib_rx_ADDBAReq(ieee, skb);
2278                                         break;
2279                                 case ACT_ADDBARSP:
2280                                         rtllib_rx_ADDBARsp(ieee, skb);
2281                                         break;
2282                                 case ACT_DELBA:
2283                                         rtllib_rx_DELBA(ieee, skb);
2284                                         break;
2285                         }
2286                         break;
2287                 default:
2288                         break;
2289         }
2290         return;
2291 }
2292
2293 inline int rtllib_rx_assoc_resp(struct rtllib_device *ieee, struct sk_buff *skb, struct rtllib_rx_stats *rx_stats)
2294 {
2295         u16 errcode;
2296         int aid;
2297         u8* ies;
2298         struct rtllib_assoc_response_frame *assoc_resp;
2299         struct rtllib_hdr_3addr *header = (struct rtllib_hdr_3addr *) skb->data;
2300
2301         RTLLIB_DEBUG_MGMT("received [RE]ASSOCIATION RESPONSE (%d)\n",
2302                                         WLAN_FC_GET_STYPE(header->frame_ctl));
2303
2304         if ((ieee->softmac_features & IEEE_SOFTMAC_ASSOCIATE) &&
2305                 ieee->state == RTLLIB_ASSOCIATING_AUTHENTICATED &&
2306                 (ieee->iw_mode == IW_MODE_INFRA))
2307         {
2308                 if (0 == (errcode=assoc_parse(ieee,skb, &aid))){
2309                         struct rtllib_network *network = kzalloc(sizeof(struct rtllib_network), GFP_ATOMIC);
2310
2311                         if (!network)
2312                                 return 1;
2313                         memset(network,0,sizeof(*network));
2314                         ieee->state=RTLLIB_LINKED;
2315                         ieee->assoc_id = aid;
2316                         ieee->softmac_stats.rx_ass_ok++;
2317                         /* station support qos */
2318                         /* Let the register setting defaultly with Legacy station */
2319                         assoc_resp = (struct rtllib_assoc_response_frame*)skb->data;
2320                         if (ieee->current_network.qos_data.supported == 1) {
2321                                 if (rtllib_parse_info_param(ieee,assoc_resp->info_element,\
2322                                                         rx_stats->len - sizeof(*assoc_resp),\
2323                                                         network,rx_stats)){
2324                                         kfree(network);
2325                                         return 1;
2326                                 }
2327                                 else
2328                                 {
2329                                         memcpy(ieee->pHTInfo->PeerHTCapBuf, network->bssht.bdHTCapBuf, network->bssht.bdHTCapLen);
2330                                         memcpy(ieee->pHTInfo->PeerHTInfoBuf, network->bssht.bdHTInfoBuf, network->bssht.bdHTInfoLen);
2331                                 }
2332                                 if (ieee->handle_assoc_response != NULL)
2333                                         ieee->handle_assoc_response(ieee->dev, (struct rtllib_assoc_response_frame*)header, network);
2334                                 kfree(network);
2335                         }
2336
2337                         if (ieee->assocresp_ies){
2338                                 kfree(ieee->assocresp_ies);
2339                                 ieee->assocresp_ies = NULL;
2340                         }
2341                         ies = &(assoc_resp->info_element[0].id);
2342                         ieee->assocresp_ies_len = (skb->data + skb->len) - ies;
2343                         ieee->assocresp_ies = kmalloc(ieee->assocresp_ies_len, GFP_ATOMIC);
2344                         if (ieee->assocresp_ies)
2345                                 memcpy(ieee->assocresp_ies, ies, ieee->assocresp_ies_len);
2346                         else{
2347                                 printk("%s()Warning: can't alloc memory for assocresp_ies\n", __func__);
2348                                 ieee->assocresp_ies_len = 0;
2349                         }
2350                         rtllib_associate_complete(ieee);
2351                 } else {
2352                         /* aid could not been allocated */
2353                         ieee->softmac_stats.rx_ass_err++;
2354                         printk(
2355                                 "Association response status code 0x%x\n",
2356                                 errcode);
2357                         RTLLIB_DEBUG_MGMT(
2358                                 "Association response status code 0x%x\n",
2359                                 errcode);
2360                         if (ieee->AsocRetryCount < RT_ASOC_RETRY_LIMIT) {
2361                                 queue_delayed_work_rsl(ieee->wq, &ieee->associate_procedure_wq, 0);
2362                         } else {
2363                                 rtllib_associate_abort(ieee);
2364                         }
2365                 }
2366         }
2367
2368         return 0;
2369 }
2370
2371 inline int rtllib_rx_auth(struct rtllib_device *ieee, struct sk_buff *skb, struct rtllib_rx_stats *rx_stats)
2372 {
2373         u16 errcode;
2374         u8* challenge;
2375         int chlen=0;
2376         bool bSupportNmode = true, bHalfSupportNmode = false;
2377
2378         if (ieee->softmac_features & IEEE_SOFTMAC_ASSOCIATE){
2379                 if (ieee->state == RTLLIB_ASSOCIATING_AUTHENTICATING &&
2380                     (ieee->iw_mode == IW_MODE_INFRA)) {
2381                         RTLLIB_DEBUG_MGMT("Received authentication response");
2382
2383                         if (0 == (errcode=auth_parse(skb, &challenge, &chlen))) {
2384                                 if (ieee->open_wep || !challenge){
2385                                         ieee->state = RTLLIB_ASSOCIATING_AUTHENTICATED;
2386                                         ieee->softmac_stats.rx_auth_rs_ok++;
2387                                         if (!(ieee->pHTInfo->IOTAction&HT_IOT_ACT_PURE_N_MODE))
2388                                         {
2389                                                 if (!ieee->GetNmodeSupportBySecCfg(ieee->dev))
2390                                                 {
2391                                                         if (IsHTHalfNmodeAPs(ieee))
2392                                                         {
2393                                                                 bSupportNmode = true;
2394                                                                 bHalfSupportNmode = true;
2395                                                         }
2396                                                         else
2397                                                         {
2398                                                                 bSupportNmode = false;
2399                                                                 bHalfSupportNmode = false;
2400                                                         }
2401                                                 }
2402                                         }
2403                                         /* Dummy wirless mode setting to avoid encryption issue */
2404                                         if (bSupportNmode) {
2405                                                 ieee->SetWirelessMode(ieee->dev, \
2406                                                         ieee->current_network.mode);
2407                                         }else{
2408                                                 /*TODO*/
2409                                                 ieee->SetWirelessMode(ieee->dev, IEEE_G);
2410                                         }
2411
2412                                         if (ieee->current_network.mode == IEEE_N_24G && bHalfSupportNmode == true)
2413                                         {
2414                                                 printk("===============>entern half N mode\n");
2415                                                 ieee->bHalfWirelessN24GMode = true;
2416                                         }
2417                                         else
2418                                                 ieee->bHalfWirelessN24GMode = false;
2419
2420                                         rtllib_associate_step2(ieee);
2421                                 }else{
2422                                         rtllib_auth_challenge(ieee, challenge, chlen);
2423                                 }
2424                         }else{
2425                                 ieee->softmac_stats.rx_auth_rs_err++;
2426                                 RTLLIB_DEBUG_MGMT("Authentication respose status code 0x%x",errcode);
2427
2428                                 printk("Authentication respose status code 0x%x",errcode);
2429                                 rtllib_associate_abort(ieee);
2430                         }
2431
2432                 }else if (ieee->iw_mode == IW_MODE_MASTER){
2433                         rtllib_rx_auth_rq(ieee, skb);
2434                 }
2435         }
2436
2437         return 0;
2438 }
2439
2440 inline int rtllib_rx_deauth(struct rtllib_device *ieee, struct sk_buff *skb)
2441 {
2442         struct rtllib_hdr_3addr *header = (struct rtllib_hdr_3addr *) skb->data;
2443
2444         if (memcmp(header->addr3, ieee->current_network.bssid, ETH_ALEN) != 0)
2445                 return 0;
2446
2447         /* FIXME for now repeat all the association procedure
2448         * both for disassociation and deauthentication
2449         */
2450         if ((ieee->softmac_features & IEEE_SOFTMAC_ASSOCIATE) &&
2451             ieee->state == RTLLIB_LINKED &&
2452             (ieee->iw_mode == IW_MODE_INFRA)) {
2453                 printk(KERN_INFO "==========>received disassoc/deauth(%x) "
2454                        "frame, reason code:%x\n",
2455                        WLAN_FC_GET_STYPE(header->frame_ctl),
2456                        ((struct rtllib_disassoc*)skb->data)->reason);
2457                 ieee->state = RTLLIB_ASSOCIATING;
2458                 ieee->softmac_stats.reassoc++;
2459                 ieee->is_roaming = true;
2460                 ieee->LinkDetectInfo.bBusyTraffic = false;
2461                 rtllib_disassociate(ieee);
2462                 RemovePeerTS(ieee, header->addr2);
2463                 if (ieee->LedControlHandler != NULL)
2464                         ieee->LedControlHandler(ieee->dev, LED_CTL_START_TO_LINK);
2465
2466                 if (!(ieee->rtllib_ap_sec_type(ieee)&(SEC_ALG_CCMP|SEC_ALG_TKIP)))
2467                 queue_delayed_work_rsl(ieee->wq, &ieee->associate_procedure_wq, 5);
2468         }
2469
2470         return 0;
2471 }
2472
2473 inline int rtllib_rx_frame_softmac(struct rtllib_device *ieee, struct sk_buff *skb,
2474                         struct rtllib_rx_stats *rx_stats, u16 type,
2475                         u16 stype)
2476 {
2477         struct rtllib_hdr_3addr *header = (struct rtllib_hdr_3addr *) skb->data;
2478
2479         if (!ieee->proto_started)
2480                 return 0;
2481
2482         switch (WLAN_FC_GET_STYPE(header->frame_ctl)) {
2483
2484                 case RTLLIB_STYPE_ASSOC_RESP:
2485                 case RTLLIB_STYPE_REASSOC_RESP:
2486
2487                         if (rtllib_rx_assoc_resp(ieee, skb, rx_stats) == 1)
2488                                 return 1;
2489
2490                         break;
2491
2492                 case RTLLIB_STYPE_ASSOC_REQ:
2493                 case RTLLIB_STYPE_REASSOC_REQ:
2494
2495                         if ((ieee->softmac_features & IEEE_SOFTMAC_ASSOCIATE) &&
2496                                 ieee->iw_mode == IW_MODE_MASTER)
2497
2498                                 rtllib_rx_assoc_rq(ieee, skb);
2499                         break;
2500
2501                 case RTLLIB_STYPE_AUTH:
2502
2503                         rtllib_rx_auth(ieee, skb, rx_stats);
2504
2505                         break;
2506                 case RTLLIB_STYPE_DISASSOC:
2507                 case RTLLIB_STYPE_DEAUTH:
2508
2509                         rtllib_rx_deauth(ieee, skb);
2510
2511                         break;
2512
2513                 case RTLLIB_STYPE_MANAGE_ACT:
2514                         rtllib_process_action(ieee,skb);
2515                         break;
2516                 default:
2517                         return -1;
2518                         break;
2519         }
2520
2521         return 0;
2522 }
2523
2524 /* following are for a simplier TX queue management.
2525  * Instead of using netif_[stop/wake]_queue the driver
2526  * will uses these two function (plus a reset one), that
2527  * will internally uses the kernel netif_* and takes
2528  * care of the ieee802.11 fragmentation.
2529  * So the driver receives a fragment per time and might
2530  * call the stop function when it want without take care
2531  * to have enought room to TX an entire packet.
2532  * This might be useful if each fragment need it's own
2533  * descriptor, thus just keep a total free memory > than
2534  * the max fragmentation treshold is not enought.. If the
2535  * ieee802.11 stack passed a TXB struct then you needed
2536  * to keep N free descriptors where
2537  * N = MAX_PACKET_SIZE / MIN_FRAG_TRESHOLD
2538  * In this way you need just one and the 802.11 stack
2539  * will take care of buffering fragments and pass them to
2540  * to the driver later, when it wakes the queue.
2541  */
2542 void rtllib_softmac_xmit(struct rtllib_txb *txb, struct rtllib_device *ieee)
2543 {
2544
2545         unsigned int queue_index = txb->queue_index;
2546         unsigned long flags;
2547         int  i;
2548         struct cb_desc *tcb_desc = NULL;
2549         unsigned long queue_len = 0;
2550
2551         spin_lock_irqsave(&ieee->lock,flags);
2552
2553         /* called with 2nd parm 0, no tx mgmt lock required */
2554         rtllib_sta_wakeup(ieee,0);
2555
2556         /* update the tx status */
2557         tcb_desc = (struct cb_desc *)(txb->fragments[0]->cb + MAX_DEV_ADDR_SIZE);
2558         if (tcb_desc->bMulticast) {
2559                 ieee->stats.multicast++;
2560         }
2561
2562         /* if xmit available, just xmit it immediately, else just insert it to the wait queue */
2563         for (i = 0; i < txb->nr_frags; i++) {
2564                 queue_len = skb_queue_len(&ieee->skb_waitQ[queue_index]);
2565                 if ((queue_len  != 0) ||\
2566                         (!ieee->check_nic_enough_desc(ieee->dev,queue_index))||\
2567                        (ieee->queue_stop)) {
2568                         /* insert the skb packet to the wait queue */
2569                         /* as for the completion function, it does not need
2570                          * to check it any more.
2571                          * */
2572                         if (queue_len < 200)
2573                         {
2574                                 skb_queue_tail(&ieee->skb_waitQ[queue_index], txb->fragments[i]);
2575                         }else{
2576                                 kfree_skb(txb->fragments[i]);
2577                         }
2578                 }else{
2579                         ieee->softmac_data_hard_start_xmit(
2580                                         txb->fragments[i],
2581                                         ieee->dev,ieee->rate);
2582                 }
2583         }
2584
2585         rtllib_txb_free(txb);
2586
2587         spin_unlock_irqrestore(&ieee->lock,flags);
2588
2589 }
2590
2591 /* called with ieee->lock acquired */
2592 void rtllib_resume_tx(struct rtllib_device *ieee)
2593 {
2594         int i;
2595         for (i = ieee->tx_pending.frag; i < ieee->tx_pending.txb->nr_frags; i++) {
2596
2597                 if (ieee->queue_stop){
2598                         ieee->tx_pending.frag = i;
2599                         return;
2600                 }else{
2601
2602                         ieee->softmac_data_hard_start_xmit(
2603                                 ieee->tx_pending.txb->fragments[i],
2604                                 ieee->dev,ieee->rate);
2605                         ieee->stats.tx_packets++;
2606                 }
2607         }
2608
2609         rtllib_txb_free(ieee->tx_pending.txb);
2610         ieee->tx_pending.txb = NULL;
2611 }
2612
2613
2614 void rtllib_reset_queue(struct rtllib_device *ieee)
2615 {
2616         unsigned long flags;
2617
2618         spin_lock_irqsave(&ieee->lock,flags);
2619         init_mgmt_queue(ieee);
2620         if (ieee->tx_pending.txb){
2621                 rtllib_txb_free(ieee->tx_pending.txb);
2622                 ieee->tx_pending.txb = NULL;
2623         }
2624         ieee->queue_stop = 0;
2625         spin_unlock_irqrestore(&ieee->lock,flags);
2626
2627 }
2628
2629 void rtllib_wake_queue(struct rtllib_device *ieee)
2630 {
2631
2632         unsigned long flags;
2633         struct sk_buff *skb;
2634         struct rtllib_hdr_3addr  *header;
2635
2636         spin_lock_irqsave(&ieee->lock,flags);
2637         if (! ieee->queue_stop) goto exit;
2638
2639         ieee->queue_stop = 0;
2640
2641         if (ieee->softmac_features & IEEE_SOFTMAC_SINGLE_QUEUE){
2642                 while (!ieee->queue_stop && (skb = dequeue_mgmt(ieee))){
2643
2644                         header = (struct rtllib_hdr_3addr  *) skb->data;
2645
2646                         header->seq_ctl = cpu_to_le16(ieee->seq_ctrl[0] << 4);
2647
2648                         if (ieee->seq_ctrl[0] == 0xFFF)
2649                                 ieee->seq_ctrl[0] = 0;
2650                         else
2651                                 ieee->seq_ctrl[0]++;
2652
2653                         ieee->softmac_data_hard_start_xmit(skb,ieee->dev,ieee->basic_rate);
2654                 }
2655         }
2656         if (!ieee->queue_stop && ieee->tx_pending.txb)
2657                 rtllib_resume_tx(ieee);
2658
2659         if (!ieee->queue_stop && netif_queue_stopped(ieee->dev)){
2660                 ieee->softmac_stats.swtxawake++;
2661                 netif_wake_queue(ieee->dev);
2662         }
2663
2664 exit :
2665         spin_unlock_irqrestore(&ieee->lock,flags);
2666 }
2667
2668
2669 void rtllib_stop_queue(struct rtllib_device *ieee)
2670 {
2671
2672         if (! netif_queue_stopped(ieee->dev)){
2673                 netif_stop_queue(ieee->dev);
2674                 ieee->softmac_stats.swtxstop++;
2675         }
2676         ieee->queue_stop = 1;
2677
2678 }
2679
2680 void rtllib_stop_all_queues(struct rtllib_device *ieee)
2681 {
2682         unsigned int i;
2683         for (i=0; i < ieee->dev->num_tx_queues; i++)
2684                 netdev_get_tx_queue(ieee->dev,i)->trans_start = jiffies;
2685
2686         netif_tx_stop_all_queues(ieee->dev);
2687 }
2688
2689 void rtllib_wake_all_queues(struct rtllib_device *ieee)
2690 {
2691         netif_tx_wake_all_queues(ieee->dev);
2692 }
2693
2694 inline void rtllib_randomize_cell(struct rtllib_device *ieee)
2695 {
2696
2697         get_random_bytes(ieee->current_network.bssid, ETH_ALEN);
2698
2699         /* an IBSS cell address must have the two less significant
2700          * bits of the first byte = 2
2701          */
2702         ieee->current_network.bssid[0] &= ~0x01;
2703         ieee->current_network.bssid[0] |= 0x02;
2704 }
2705
2706 /* called in user context only */
2707 void rtllib_start_master_bss(struct rtllib_device *ieee)
2708 {
2709         ieee->assoc_id = 1;
2710
2711         if (ieee->current_network.ssid_len == 0){
2712                 strncpy(ieee->current_network.ssid,
2713                         RTLLIB_DEFAULT_TX_ESSID,
2714                         IW_ESSID_MAX_SIZE);
2715
2716                 ieee->current_network.ssid_len = strlen(RTLLIB_DEFAULT_TX_ESSID);
2717                 ieee->ssid_set = 1;
2718         }
2719
2720         memcpy(ieee->current_network.bssid, ieee->dev->dev_addr, ETH_ALEN);
2721
2722         ieee->set_chan(ieee->dev, ieee->current_network.channel);
2723         ieee->state = RTLLIB_LINKED;
2724         ieee->link_change(ieee->dev);
2725         notify_wx_assoc_event(ieee);
2726
2727         if (ieee->data_hard_resume)
2728                 ieee->data_hard_resume(ieee->dev);
2729
2730         netif_carrier_on(ieee->dev);
2731 }
2732
2733 void rtllib_start_monitor_mode(struct rtllib_device *ieee)
2734 {
2735         /* reset hardware status */
2736         if (ieee->raw_tx){
2737                 if (ieee->data_hard_resume)
2738                         ieee->data_hard_resume(ieee->dev);
2739
2740                 netif_carrier_on(ieee->dev);
2741         }
2742 }
2743
2744 void rtllib_start_ibss_wq(void *data)
2745 {
2746         struct rtllib_device *ieee = container_of_dwork_rsl(data, struct rtllib_device, start_ibss_wq);
2747         /* iwconfig mode ad-hoc will schedule this and return
2748          * on the other hand this will block further iwconfig SET
2749          * operations because of the wx_sem hold.
2750          * Anyway some most set operations set a flag to speed-up
2751          * (abort) this wq (when syncro scanning) before sleeping
2752          * on the semaphore
2753          */
2754         if (!ieee->proto_started){
2755                 printk("==========oh driver down return\n");
2756                 return;
2757         }
2758         down(&ieee->wx_sem);
2759
2760         if (ieee->current_network.ssid_len == 0){
2761                 strcpy(ieee->current_network.ssid,RTLLIB_DEFAULT_TX_ESSID);
2762                 ieee->current_network.ssid_len = strlen(RTLLIB_DEFAULT_TX_ESSID);
2763                 ieee->ssid_set = 1;
2764         }
2765
2766         ieee->state = RTLLIB_NOLINK;
2767         ieee->mode = IEEE_G;
2768         /* check if we have this cell in our network list */
2769         rtllib_softmac_check_all_nets(ieee);
2770
2771
2772         /* if not then the state is not linked. Maybe the user swithced to
2773          * ad-hoc mode just after being in monitor mode, or just after
2774          * being very few time in managed mode (so the card have had no
2775          * time to scan all the chans..) or we have just run up the iface
2776          * after setting ad-hoc mode. So we have to give another try..
2777          * Here, in ibss mode, should be safe to do this without extra care
2778          * (in bss mode we had to make sure no-one tryed to associate when
2779          * we had just checked the ieee->state and we was going to start the
2780          * scan) beacause in ibss mode the rtllib_new_net function, when
2781          * finds a good net, just set the ieee->state to RTLLIB_LINKED,
2782          * so, at worst, we waste a bit of time to initiate an unneeded syncro
2783          * scan, that will stop at the first round because it sees the state
2784          * associated.
2785          */
2786         if (ieee->state == RTLLIB_NOLINK)
2787                 rtllib_start_scan_syncro(ieee, 0);
2788
2789         /* the network definitively is not here.. create a new cell */
2790         if (ieee->state == RTLLIB_NOLINK){
2791                 printk("creating new IBSS cell\n");
2792                 ieee->current_network.channel = ieee->IbssStartChnl;
2793                 if (!ieee->wap_set)
2794                         rtllib_randomize_cell(ieee);
2795
2796                 if (ieee->modulation & RTLLIB_CCK_MODULATION){
2797
2798                         ieee->current_network.rates_len = 4;
2799
2800                         ieee->current_network.rates[0] = RTLLIB_BASIC_RATE_MASK | RTLLIB_CCK_RATE_1MB;
2801                         ieee->current_network.rates[1] = RTLLIB_BASIC_RATE_MASK | RTLLIB_CCK_RATE_2MB;
2802                         ieee->current_network.rates[2] = RTLLIB_BASIC_RATE_MASK | RTLLIB_CCK_RATE_5MB;
2803                         ieee->current_network.rates[3] = RTLLIB_BASIC_RATE_MASK | RTLLIB_CCK_RATE_11MB;
2804
2805                 }else
2806                         ieee->current_network.rates_len = 0;
2807
2808                 if (ieee->modulation & RTLLIB_OFDM_MODULATION){
2809                         ieee->current_network.rates_ex_len = 8;
2810
2811                         /*ieee->current_network.rates_ex[0] = RTLLIB_BASIC_RATE_MASK | RTLLIB_OFDM_RATE_6MB;
2812                         ieee->current_network.rates_ex[1] = RTLLIB_BASIC_RATE_MASK | RTLLIB_OFDM_RATE_9MB;
2813                         ieee->current_network.rates_ex[2] = RTLLIB_BASIC_RATE_MASK | RTLLIB_OFDM_RATE_12MB;
2814                         ieee->current_network.rates_ex[3] = RTLLIB_BASIC_RATE_MASK | RTLLIB_OFDM_RATE_18MB;
2815                         ieee->current_network.rates_ex[4] = RTLLIB_BASIC_RATE_MASK | RTLLIB_OFDM_RATE_24MB;
2816                         ieee->current_network.rates_ex[5] = RTLLIB_BASIC_RATE_MASK | RTLLIB_OFDM_RATE_36MB;
2817                         ieee->current_network.rates_ex[6] = RTLLIB_BASIC_RATE_MASK | RTLLIB_OFDM_RATE_48MB;
2818                         ieee->current_network.rates_ex[7] = RTLLIB_BASIC_RATE_MASK | RTLLIB_OFDM_RATE_54MB;*/
2819
2820                         ieee->current_network.rates_ex[0] = RTLLIB_OFDM_RATE_6MB;
2821                         ieee->current_network.rates_ex[1] = RTLLIB_OFDM_RATE_9MB;
2822                         ieee->current_network.rates_ex[2] = RTLLIB_OFDM_RATE_12MB;
2823                         ieee->current_network.rates_ex[3] = RTLLIB_OFDM_RATE_18MB;
2824                         ieee->current_network.rates_ex[4] = RTLLIB_OFDM_RATE_24MB;
2825                         ieee->current_network.rates_ex[5] = RTLLIB_OFDM_RATE_36MB;
2826                         ieee->current_network.rates_ex[6] = RTLLIB_OFDM_RATE_48MB;
2827                         ieee->current_network.rates_ex[7] = RTLLIB_OFDM_RATE_54MB;
2828
2829                         ieee->rate = 108;
2830                 }else{
2831                         ieee->current_network.rates_ex_len = 0;
2832                         ieee->rate = 22;
2833                 }
2834
2835                 ieee->current_network.qos_data.supported = 0;
2836                 ieee->SetWirelessMode(ieee->dev, IEEE_G);
2837                 ieee->current_network.mode = ieee->mode;
2838                 ieee->current_network.atim_window = 0;
2839                 ieee->current_network.capability = WLAN_CAPABILITY_IBSS;
2840         }
2841
2842         printk("%s(): ieee->mode = %d\n", __func__, ieee->mode);
2843         if ((ieee->mode == IEEE_N_24G) || (ieee->mode == IEEE_N_5G))
2844                 HTUseDefaultSetting(ieee);
2845         else
2846                 ieee->pHTInfo->bCurrentHTSupport = false;
2847
2848         ieee->SetHwRegHandler(ieee->dev, HW_VAR_MEDIA_STATUS, (u8 *)(&ieee->state));
2849
2850         ieee->state = RTLLIB_LINKED;
2851         ieee->link_change(ieee->dev);
2852
2853         HTSetConnectBwMode(ieee, HT_CHANNEL_WIDTH_20, HT_EXTCHNL_OFFSET_NO_EXT);
2854         if (ieee->LedControlHandler != NULL)
2855                 ieee->LedControlHandler(ieee->dev,LED_CTL_LINK);
2856
2857         rtllib_start_send_beacons(ieee);
2858
2859         notify_wx_assoc_event(ieee);
2860
2861         if (ieee->data_hard_resume)
2862                 ieee->data_hard_resume(ieee->dev);
2863
2864         netif_carrier_on(ieee->dev);
2865
2866         up(&ieee->wx_sem);
2867 }
2868
2869 inline void rtllib_start_ibss(struct rtllib_device *ieee)
2870 {
2871         queue_delayed_work_rsl(ieee->wq, &ieee->start_ibss_wq, MSECS(150));
2872 }
2873
2874 /* this is called only in user context, with wx_sem held */
2875 void rtllib_start_bss(struct rtllib_device *ieee)
2876 {
2877         unsigned long flags;
2878         if (IS_DOT11D_ENABLE(ieee) && !IS_COUNTRY_IE_VALID(ieee))
2879         {
2880                 if (! ieee->bGlobalDomain)
2881                 {
2882                         return;
2883                 }
2884         }
2885         /* check if we have already found the net we
2886          * are interested in (if any).
2887          * if not (we are disassociated and we are not
2888          * in associating / authenticating phase) start the background scanning.
2889          */
2890         rtllib_softmac_check_all_nets(ieee);
2891
2892         /* ensure no-one start an associating process (thus setting
2893          * the ieee->state to rtllib_ASSOCIATING) while we
2894          * have just cheked it and we are going to enable scan.
2895          * The rtllib_new_net function is always called with
2896          * lock held (from both rtllib_softmac_check_all_nets and
2897          * the rx path), so we cannot be in the middle of such function
2898          */
2899         spin_lock_irqsave(&ieee->lock, flags);
2900
2901         if (ieee->state == RTLLIB_NOLINK) {
2902                 rtllib_start_scan(ieee);
2903         }
2904         spin_unlock_irqrestore(&ieee->lock, flags);
2905 }
2906
2907 void rtllib_link_change_wq(void *data)
2908 {
2909         struct rtllib_device *ieee = container_of_dwork_rsl(data, struct rtllib_device, link_change_wq);
2910         ieee->link_change(ieee->dev);
2911 }
2912 /* called only in userspace context */
2913 void rtllib_disassociate(struct rtllib_device *ieee)
2914 {
2915         netif_carrier_off(ieee->dev);
2916         if (ieee->softmac_features & IEEE_SOFTMAC_TX_QUEUE)
2917                         rtllib_reset_queue(ieee);
2918
2919         if (ieee->data_hard_stop)
2920                         ieee->data_hard_stop(ieee->dev);
2921         if (IS_DOT11D_ENABLE(ieee))
2922                 Dot11d_Reset(ieee);
2923         ieee->state = RTLLIB_NOLINK;
2924         ieee->is_set_key = false;
2925         ieee->wap_set = 0;
2926
2927         queue_delayed_work_rsl(ieee->wq, &ieee->link_change_wq, 0);
2928
2929         notify_wx_assoc_event(ieee);
2930 }
2931
2932 void rtllib_associate_retry_wq(void *data)
2933 {
2934         struct rtllib_device *ieee = container_of_dwork_rsl(data, struct rtllib_device, associate_retry_wq);
2935         unsigned long flags;
2936
2937         down(&ieee->wx_sem);
2938         if (!ieee->proto_started)
2939                 goto exit;
2940
2941         if (ieee->state != RTLLIB_ASSOCIATING_RETRY)
2942                 goto exit;
2943
2944         /* until we do not set the state to RTLLIB_NOLINK
2945         * there are no possibility to have someone else trying
2946         * to start an association procdure (we get here with
2947         * ieee->state = RTLLIB_ASSOCIATING).
2948         * When we set the state to RTLLIB_NOLINK it is possible
2949         * that the RX path run an attempt to associate, but
2950         * both rtllib_softmac_check_all_nets and the
2951         * RX path works with ieee->lock held so there are no
2952         * problems. If we are still disassociated then start a scan.
2953         * the lock here is necessary to ensure no one try to start
2954         * an association procedure when we have just checked the
2955         * state and we are going to start the scan.
2956         */
2957         ieee->beinretry = true;
2958         ieee->state = RTLLIB_NOLINK;
2959
2960         rtllib_softmac_check_all_nets(ieee);
2961
2962         spin_lock_irqsave(&ieee->lock, flags);
2963
2964         if (ieee->state == RTLLIB_NOLINK)
2965         {
2966                 rtllib_start_scan(ieee);
2967         }
2968         spin_unlock_irqrestore(&ieee->lock, flags);
2969
2970         ieee->beinretry = false;
2971 exit:
2972         up(&ieee->wx_sem);
2973 }
2974
2975 struct sk_buff *rtllib_get_beacon_(struct rtllib_device *ieee)
2976 {
2977         u8 broadcast_addr[] = {0xff,0xff,0xff,0xff,0xff,0xff};
2978
2979         struct sk_buff *skb;
2980         struct rtllib_probe_response *b;
2981         skb = rtllib_probe_resp(ieee, broadcast_addr);
2982
2983         if (!skb)
2984                 return NULL;
2985
2986         b = (struct rtllib_probe_response *) skb->data;
2987         b->header.frame_ctl = cpu_to_le16(RTLLIB_STYPE_BEACON);
2988
2989         return skb;
2990
2991 }
2992
2993 struct sk_buff *rtllib_get_beacon(struct rtllib_device *ieee)
2994 {
2995         struct sk_buff *skb;
2996         struct rtllib_probe_response *b;
2997
2998         skb = rtllib_get_beacon_(ieee);
2999         if (!skb)
3000                 return NULL;
3001
3002         b = (struct rtllib_probe_response *) skb->data;
3003         b->header.seq_ctl = cpu_to_le16(ieee->seq_ctrl[0] << 4);
3004
3005         if (ieee->seq_ctrl[0] == 0xFFF)
3006                 ieee->seq_ctrl[0] = 0;
3007         else
3008                 ieee->seq_ctrl[0]++;
3009
3010         return skb;
3011 }
3012
3013 void rtllib_softmac_stop_protocol(struct rtllib_device *ieee, u8 mesh_flag, u8 shutdown)
3014 {
3015         rtllib_stop_scan_syncro(ieee);
3016         down(&ieee->wx_sem);
3017         rtllib_stop_protocol(ieee,shutdown);
3018         up(&ieee->wx_sem);
3019 }
3020
3021
3022 void rtllib_stop_protocol(struct rtllib_device *ieee, u8 shutdown)
3023 {
3024         if (!ieee->proto_started)
3025                 return;
3026
3027         if (shutdown){
3028         ieee->proto_started = 0;
3029                 ieee->proto_stoppping = 1;
3030                 if (ieee->rtllib_ips_leave != NULL)
3031                         ieee->rtllib_ips_leave(ieee->dev);
3032         }
3033
3034         rtllib_stop_send_beacons(ieee);
3035         del_timer_sync(&ieee->associate_timer);
3036         cancel_delayed_work(&ieee->associate_retry_wq);
3037         cancel_delayed_work(&ieee->start_ibss_wq);
3038         cancel_delayed_work(&ieee->link_change_wq);
3039         rtllib_stop_scan(ieee);
3040
3041         if (ieee->state <= RTLLIB_ASSOCIATING_AUTHENTICATED)
3042                 ieee->state = RTLLIB_NOLINK;
3043
3044         if (ieee->state == RTLLIB_LINKED){
3045                 if (ieee->iw_mode == IW_MODE_INFRA)
3046                         SendDisassociation(ieee,1,deauth_lv_ss);
3047                 rtllib_disassociate(ieee);
3048         }
3049
3050         if (shutdown){
3051                 RemoveAllTS(ieee);
3052                 ieee->proto_stoppping = 0;
3053         }
3054         if (ieee->assocreq_ies) {
3055                 kfree(ieee->assocreq_ies);
3056                 ieee->assocreq_ies = NULL;
3057                 ieee->assocreq_ies_len = 0;
3058         }
3059         if (ieee->assocresp_ies) {
3060                 kfree(ieee->assocresp_ies);
3061                 ieee->assocresp_ies = NULL;
3062                 ieee->assocresp_ies_len = 0;
3063         }
3064 }
3065
3066 void rtllib_softmac_start_protocol(struct rtllib_device *ieee, u8 mesh_flag)
3067 {
3068         down(&ieee->wx_sem);
3069         rtllib_start_protocol(ieee);
3070         up(&ieee->wx_sem);
3071 }
3072
3073 void rtllib_start_protocol(struct rtllib_device *ieee)
3074 {
3075         short ch = 0;
3076         int i = 0;
3077
3078         rtllib_update_active_chan_map(ieee);
3079
3080         if (ieee->proto_started)
3081                 return;
3082
3083         ieee->proto_started = 1;
3084
3085         if (ieee->current_network.channel == 0) {
3086                 do {
3087                         ch++;
3088                         if (ch > MAX_CHANNEL_NUMBER)
3089                                 return; /* no channel found */
3090                 } while(!ieee->active_channel_map[ch]);
3091                 ieee->current_network.channel = ch;
3092         }
3093
3094         if (ieee->current_network.beacon_interval == 0)
3095                 ieee->current_network.beacon_interval = 100;
3096
3097         for (i = 0; i < 17; i++) {
3098                 ieee->last_rxseq_num[i] = -1;
3099                 ieee->last_rxfrag_num[i] = -1;
3100                 ieee->last_packet_time[i] = 0;
3101         }
3102
3103         if (ieee->UpdateBeaconInterruptHandler)
3104                 ieee->UpdateBeaconInterruptHandler(ieee->dev, false);
3105
3106         ieee->wmm_acm = 0;
3107         /* if the user set the MAC of the ad-hoc cell and then
3108          * switch to managed mode, shall we  make sure that association
3109          * attempts does not fail just because the user provide the essid
3110          * and the nic is still checking for the AP MAC ??
3111          */
3112         if (ieee->iw_mode == IW_MODE_INFRA) {
3113                 rtllib_start_bss(ieee);
3114         } else if (ieee->iw_mode == IW_MODE_ADHOC) {
3115                 if (ieee->UpdateBeaconInterruptHandler)
3116                         ieee->UpdateBeaconInterruptHandler(ieee->dev, true);
3117
3118                 rtllib_start_ibss(ieee);
3119
3120         } else if (ieee->iw_mode == IW_MODE_MASTER) {
3121                 rtllib_start_master_bss(ieee);
3122         } else if (ieee->iw_mode == IW_MODE_MONITOR) {
3123                 rtllib_start_monitor_mode(ieee);
3124         }
3125 }
3126
3127 void rtllib_softmac_init(struct rtllib_device *ieee)
3128 {
3129         int i;
3130         memset(&ieee->current_network, 0, sizeof(struct rtllib_network));
3131
3132         ieee->state = RTLLIB_NOLINK;
3133         for (i = 0; i < 5; i++) {
3134           ieee->seq_ctrl[i] = 0;
3135         }
3136         ieee->pDot11dInfo = kmalloc(sizeof(struct rt_dot11d_info), GFP_ATOMIC);
3137         if (!ieee->pDot11dInfo)
3138                 RTLLIB_DEBUG(RTLLIB_DL_ERR, "can't alloc memory for DOT11D\n");
3139         memset(ieee->pDot11dInfo, 0, sizeof(struct rt_dot11d_info));
3140         ieee->LinkDetectInfo.SlotIndex = 0;
3141         ieee->LinkDetectInfo.SlotNum = 2;
3142         ieee->LinkDetectInfo.NumRecvBcnInPeriod=0;
3143         ieee->LinkDetectInfo.NumRecvDataInPeriod=0;
3144         ieee->LinkDetectInfo.NumTxOkInPeriod =0;
3145         ieee->LinkDetectInfo.NumRxOkInPeriod =0;
3146         ieee->LinkDetectInfo.NumRxUnicastOkInPeriod=0;
3147         ieee->bIsAggregateFrame = false;
3148         ieee->assoc_id = 0;
3149         ieee->queue_stop = 0;
3150         ieee->scanning_continue = 0;
3151         ieee->softmac_features = 0;
3152         ieee->wap_set = 0;
3153         ieee->ssid_set = 0;
3154         ieee->proto_started = 0;
3155         ieee->proto_stoppping = 0;
3156         ieee->basic_rate = RTLLIB_DEFAULT_BASIC_RATE;
3157         ieee->rate = 22;
3158         ieee->ps = RTLLIB_PS_DISABLED;
3159         ieee->sta_sleep = LPS_IS_WAKE;
3160
3161         ieee->Regdot11HTOperationalRateSet[0]= 0xff;
3162         ieee->Regdot11HTOperationalRateSet[1]= 0xff;
3163         ieee->Regdot11HTOperationalRateSet[4]= 0x01;
3164
3165         ieee->Regdot11TxHTOperationalRateSet[0]= 0xff;
3166         ieee->Regdot11TxHTOperationalRateSet[1]= 0xff;
3167         ieee->Regdot11TxHTOperationalRateSet[4]= 0x01;
3168
3169         ieee->FirstIe_InScan = false;
3170         ieee->actscanning = false;
3171         ieee->beinretry = false;
3172         ieee->is_set_key = false;
3173         init_mgmt_queue(ieee);
3174
3175         ieee->sta_edca_param[0] = 0x0000A403;
3176         ieee->sta_edca_param[1] = 0x0000A427;
3177         ieee->sta_edca_param[2] = 0x005E4342;
3178         ieee->sta_edca_param[3] = 0x002F3262;
3179         ieee->aggregation = true;
3180         ieee->enable_rx_imm_BA = 1;
3181         ieee->tx_pending.txb = NULL;
3182
3183         _setup_timer(&ieee->associate_timer,
3184                     rtllib_associate_abort_cb,
3185                     (unsigned long) ieee);
3186
3187         _setup_timer(&ieee->beacon_timer,
3188                     rtllib_send_beacon_cb,
3189                     (unsigned long) ieee);
3190
3191
3192         ieee->wq = create_workqueue(DRV_NAME);
3193
3194         INIT_DELAYED_WORK_RSL(&ieee->link_change_wq,(void*)rtllib_link_change_wq,ieee);
3195         INIT_DELAYED_WORK_RSL(&ieee->start_ibss_wq,(void*)rtllib_start_ibss_wq,ieee);
3196         INIT_WORK_RSL(&ieee->associate_complete_wq, (void*)rtllib_associate_complete_wq,ieee);
3197         INIT_DELAYED_WORK_RSL(&ieee->associate_procedure_wq, (void*)rtllib_associate_procedure_wq,ieee);
3198         INIT_DELAYED_WORK_RSL(&ieee->softmac_scan_wq,(void*)rtllib_softmac_scan_wq,ieee);
3199         INIT_DELAYED_WORK_RSL(&ieee->softmac_hint11d_wq,(void*)rtllib_softmac_hint11d_wq,ieee);
3200         INIT_DELAYED_WORK_RSL(&ieee->associate_retry_wq, (void*)rtllib_associate_retry_wq,ieee);
3201         INIT_WORK_RSL(&ieee->wx_sync_scan_wq,(void*)rtllib_wx_sync_scan_wq,ieee);
3202
3203         sema_init(&ieee->wx_sem, 1);
3204         sema_init(&ieee->scan_sem, 1);
3205         sema_init(&ieee->ips_sem,1);
3206
3207         spin_lock_init(&ieee->mgmt_tx_lock);
3208         spin_lock_init(&ieee->beacon_lock);
3209
3210         tasklet_init(&ieee->ps_task,
3211              (void(*)(unsigned long)) rtllib_sta_ps,
3212              (unsigned long)ieee);
3213
3214 }
3215
3216 void rtllib_softmac_free(struct rtllib_device *ieee)
3217 {
3218         down(&ieee->wx_sem);
3219         if (NULL != ieee->pDot11dInfo)
3220         {
3221                 kfree(ieee->pDot11dInfo);
3222                 ieee->pDot11dInfo = NULL;
3223         }
3224         del_timer_sync(&ieee->associate_timer);
3225
3226         cancel_delayed_work(&ieee->associate_retry_wq);
3227         destroy_workqueue(ieee->wq);
3228         up(&ieee->wx_sem);
3229 }
3230
3231 /********************************************************
3232  * Start of WPA code.                                   *
3233  * this is stolen from the ipw2200 driver               *
3234  ********************************************************/
3235
3236
3237 static int rtllib_wpa_enable(struct rtllib_device *ieee, int value)
3238 {
3239         /* This is called when wpa_supplicant loads and closes the driver
3240          * interface. */
3241         printk("%s WPA\n",value ? "enabling" : "disabling");
3242         ieee->wpa_enabled = value;
3243         memset(ieee->ap_mac_addr, 0, 6);
3244         return 0;
3245 }
3246
3247
3248 void rtllib_wpa_assoc_frame(struct rtllib_device *ieee, char *wpa_ie, int wpa_ie_len)
3249 {
3250         /* make sure WPA is enabled */
3251         rtllib_wpa_enable(ieee, 1);
3252
3253         rtllib_disassociate(ieee);
3254 }
3255
3256
3257 static int rtllib_wpa_mlme(struct rtllib_device *ieee, int command, int reason)
3258 {
3259
3260         int ret = 0;
3261
3262         switch (command) {
3263         case IEEE_MLME_STA_DEAUTH:
3264                 break;
3265
3266         case IEEE_MLME_STA_DISASSOC:
3267                 rtllib_disassociate(ieee);
3268                 break;
3269
3270         default:
3271                 printk("Unknown MLME request: %d\n", command);
3272                 ret = -EOPNOTSUPP;
3273         }
3274
3275         return ret;
3276 }
3277
3278
3279 static int rtllib_wpa_set_wpa_ie(struct rtllib_device *ieee,
3280                               struct ieee_param *param, int plen)
3281 {
3282         u8 *buf;
3283
3284         if (param->u.wpa_ie.len > MAX_WPA_IE_LEN ||
3285             (param->u.wpa_ie.len && param->u.wpa_ie.data == NULL))
3286                 return -EINVAL;
3287
3288         if (param->u.wpa_ie.len) {
3289                 buf = kmalloc(param->u.wpa_ie.len, GFP_KERNEL);
3290                 if (buf == NULL)
3291                         return -ENOMEM;
3292
3293                 memcpy(buf, param->u.wpa_ie.data, param->u.wpa_ie.len);
3294                 kfree(ieee->wpa_ie);
3295                 ieee->wpa_ie = buf;
3296                 ieee->wpa_ie_len = param->u.wpa_ie.len;
3297         } else {
3298                 kfree(ieee->wpa_ie);
3299                 ieee->wpa_ie = NULL;
3300                 ieee->wpa_ie_len = 0;
3301         }
3302
3303         rtllib_wpa_assoc_frame(ieee, ieee->wpa_ie, ieee->wpa_ie_len);
3304         return 0;
3305 }
3306
3307 #define AUTH_ALG_OPEN_SYSTEM                    0x1
3308 #define AUTH_ALG_SHARED_KEY                     0x2
3309 #define AUTH_ALG_LEAP                           0x4
3310 static int rtllib_wpa_set_auth_algs(struct rtllib_device *ieee, int value)
3311 {
3312
3313         struct rtllib_security sec = {
3314                 .flags = SEC_AUTH_MODE,
3315         };
3316         int ret = 0;
3317
3318         if (value & AUTH_ALG_SHARED_KEY) {
3319                 sec.auth_mode = WLAN_AUTH_SHARED_KEY;
3320                 ieee->open_wep = 0;
3321                 ieee->auth_mode = 1;
3322         } else if (value & AUTH_ALG_OPEN_SYSTEM){
3323                 sec.auth_mode = WLAN_AUTH_OPEN;
3324                 ieee->open_wep = 1;
3325                 ieee->auth_mode = 0;
3326         }
3327         else if (value & AUTH_ALG_LEAP){
3328                 sec.auth_mode = WLAN_AUTH_LEAP  >> 6;
3329                 ieee->open_wep = 1;
3330                 ieee->auth_mode = 2;
3331         }
3332
3333
3334         if (ieee->set_security)
3335                 ieee->set_security(ieee->dev, &sec);
3336
3337         return ret;
3338 }
3339
3340 static int rtllib_wpa_set_param(struct rtllib_device *ieee, u8 name, u32 value)
3341 {
3342         int ret=0;
3343         unsigned long flags;
3344
3345         switch (name) {
3346         case IEEE_PARAM_WPA_ENABLED:
3347                 ret = rtllib_wpa_enable(ieee, value);
3348                 break;
3349
3350         case IEEE_PARAM_TKIP_COUNTERMEASURES:
3351                 ieee->tkip_countermeasures=value;
3352                 break;
3353
3354                 case IEEE_PARAM_DROP_UNENCRYPTED:
3355                 {
3356                 /* HACK:
3357                  *
3358                  * wpa_supplicant calls set_wpa_enabled when the driver
3359                  * is loaded and unloaded, regardless of if WPA is being
3360                  * used.  No other calls are made which can be used to
3361                  * determine if encryption will be used or not prior to
3362                  * association being expected.  If encryption is not being
3363                  * used, drop_unencrypted is set to false, else true -- we
3364                  * can use this to determine if the CAP_PRIVACY_ON bit should
3365                  * be set.
3366                  */
3367                 struct rtllib_security sec = {
3368                         .flags = SEC_ENABLED,
3369                         .enabled = value,
3370                 };
3371                 ieee->drop_unencrypted = value;
3372                 /* We only change SEC_LEVEL for open mode. Others
3373                  * are set by ipw_wpa_set_encryption.
3374                  */
3375                 if (!value) {
3376                         sec.flags |= SEC_LEVEL;
3377                         sec.level = SEC_LEVEL_0;
3378                 }
3379                 else {
3380                         sec.flags |= SEC_LEVEL;
3381                         sec.level = SEC_LEVEL_1;
3382                 }
3383                 if (ieee->set_security)
3384                         ieee->set_security(ieee->dev, &sec);
3385                 break;
3386         }
3387
3388         case IEEE_PARAM_PRIVACY_INVOKED:
3389                 ieee->privacy_invoked=value;
3390                 break;
3391
3392         case IEEE_PARAM_AUTH_ALGS:
3393                 ret = rtllib_wpa_set_auth_algs(ieee, value);
3394                 break;
3395
3396         case IEEE_PARAM_IEEE_802_1X:
3397                 ieee->ieee802_1x=value;
3398                 break;
3399         case IEEE_PARAM_WPAX_SELECT:
3400                 spin_lock_irqsave(&ieee->wpax_suitlist_lock,flags);
3401                 spin_unlock_irqrestore(&ieee->wpax_suitlist_lock,flags);
3402                 break;
3403
3404         default:
3405                 printk("Unknown WPA param: %d\n",name);
3406                 ret = -EOPNOTSUPP;
3407         }
3408
3409         return ret;
3410 }
3411
3412 /* implementation borrowed from hostap driver */
3413 static int rtllib_wpa_set_encryption(struct rtllib_device *ieee,
3414                                   struct ieee_param *param, int param_len, u8 is_mesh)
3415 {
3416         int ret = 0;
3417         struct rtllib_crypto_ops *ops;
3418         struct rtllib_crypt_data **crypt;
3419
3420         struct rtllib_security sec = {
3421                 .flags = 0,
3422         };
3423
3424         param->u.crypt.err = 0;
3425         param->u.crypt.alg[IEEE_CRYPT_ALG_NAME_LEN - 1] = '\0';
3426
3427         if (param_len !=
3428             (int) ((char *) param->u.crypt.key - (char *) param) +
3429             param->u.crypt.key_len) {
3430                 printk("Len mismatch %d, %d\n", param_len,
3431                                param->u.crypt.key_len);
3432                 return -EINVAL;
3433         }
3434         if (param->sta_addr[0] == 0xff && param->sta_addr[1] == 0xff &&
3435             param->sta_addr[2] == 0xff && param->sta_addr[3] == 0xff &&
3436             param->sta_addr[4] == 0xff && param->sta_addr[5] == 0xff) {
3437                 if (param->u.crypt.idx >= WEP_KEYS)
3438                         return -EINVAL;
3439                 crypt = &ieee->crypt[param->u.crypt.idx];
3440         } else {
3441                 return -EINVAL;
3442         }
3443
3444         if (strcmp(param->u.crypt.alg, "none") == 0) {
3445                 if (crypt) {
3446                         sec.enabled = 0;
3447                         sec.level = SEC_LEVEL_0;
3448                         sec.flags |= SEC_ENABLED | SEC_LEVEL;
3449                         rtllib_crypt_delayed_deinit(ieee, crypt);
3450                 }
3451                 goto done;
3452         }
3453         sec.enabled = 1;
3454         sec.flags |= SEC_ENABLED;
3455
3456         /* IPW HW cannot build TKIP MIC, host decryption still needed. */
3457         if (!(ieee->host_encrypt || ieee->host_decrypt) &&
3458             strcmp(param->u.crypt.alg, "TKIP"))
3459                 goto skip_host_crypt;
3460
3461         ops = rtllib_get_crypto_ops(param->u.crypt.alg);
3462         if (ops == NULL && strcmp(param->u.crypt.alg, "WEP") == 0) {
3463                 request_module("rtllib_crypt_wep");
3464                 ops = rtllib_get_crypto_ops(param->u.crypt.alg);
3465         } else if (ops == NULL && strcmp(param->u.crypt.alg, "TKIP") == 0) {
3466                 request_module("rtllib_crypt_tkip");
3467                 ops = rtllib_get_crypto_ops(param->u.crypt.alg);
3468         } else if (ops == NULL && strcmp(param->u.crypt.alg, "CCMP") == 0) {
3469                 request_module("rtllib_crypt_ccmp");
3470                 ops = rtllib_get_crypto_ops(param->u.crypt.alg);
3471         }
3472         if (ops == NULL) {
3473                 printk("unknown crypto alg '%s'\n", param->u.crypt.alg);
3474                 param->u.crypt.err = IEEE_CRYPT_ERR_UNKNOWN_ALG;
3475                 ret = -EINVAL;
3476                 goto done;
3477         }
3478         if (*crypt == NULL || (*crypt)->ops != ops) {
3479                 struct rtllib_crypt_data *new_crypt;
3480
3481                 rtllib_crypt_delayed_deinit(ieee, crypt);
3482
3483                 new_crypt = (struct rtllib_crypt_data *)
3484                         kmalloc(sizeof(*new_crypt), GFP_KERNEL);
3485                 if (new_crypt == NULL) {
3486                         ret = -ENOMEM;
3487                         goto done;
3488                 }
3489                 memset(new_crypt, 0, sizeof(struct rtllib_crypt_data));
3490                 new_crypt->ops = ops;
3491                 if (new_crypt->ops)
3492                         new_crypt->priv =
3493                                 new_crypt->ops->init(param->u.crypt.idx);
3494
3495                 if (new_crypt->priv == NULL) {
3496                         kfree(new_crypt);
3497                         param->u.crypt.err = IEEE_CRYPT_ERR_CRYPT_INIT_FAILED;
3498                         ret = -EINVAL;
3499                         goto done;
3500                 }
3501
3502                 *crypt = new_crypt;
3503         }
3504
3505         if (param->u.crypt.key_len > 0 && (*crypt)->ops->set_key &&
3506             (*crypt)->ops->set_key(param->u.crypt.key,
3507             param->u.crypt.key_len, param->u.crypt.seq,
3508             (*crypt)->priv) < 0) {
3509                 printk("key setting failed\n");
3510                 param->u.crypt.err = IEEE_CRYPT_ERR_KEY_SET_FAILED;
3511                 ret = -EINVAL;
3512                 goto done;
3513         }
3514
3515  skip_host_crypt:
3516         if (param->u.crypt.set_tx) {
3517                 ieee->tx_keyidx = param->u.crypt.idx;
3518                 sec.active_key = param->u.crypt.idx;
3519                 sec.flags |= SEC_ACTIVE_KEY;
3520         } else
3521                 sec.flags &= ~SEC_ACTIVE_KEY;
3522
3523         if (param->u.crypt.alg != NULL) {
3524                 memcpy(sec.keys[param->u.crypt.idx],
3525                        param->u.crypt.key,
3526                        param->u.crypt.key_len);
3527                 sec.key_sizes[param->u.crypt.idx] = param->u.crypt.key_len;
3528                 sec.flags |= (1 << param->u.crypt.idx);
3529
3530                 if (strcmp(param->u.crypt.alg, "WEP") == 0) {
3531                         sec.flags |= SEC_LEVEL;
3532                         sec.level = SEC_LEVEL_1;
3533                 } else if (strcmp(param->u.crypt.alg, "TKIP") == 0) {
3534                         sec.flags |= SEC_LEVEL;
3535                         sec.level = SEC_LEVEL_2;
3536                 } else if (strcmp(param->u.crypt.alg, "CCMP") == 0) {
3537                         sec.flags |= SEC_LEVEL;
3538                         sec.level = SEC_LEVEL_3;
3539                 }
3540         }
3541  done:
3542         if (ieee->set_security)
3543                 ieee->set_security(ieee->dev, &sec);
3544
3545         /* Do not reset port if card is in Managed mode since resetting will
3546          * generate new IEEE 802.11 authentication which may end up in looping
3547          * with IEEE 802.1X.  If your hardware requires a reset after WEP
3548          * configuration (for example... Prism2), implement the reset_port in
3549          * the callbacks structures used to initialize the 802.11 stack. */
3550         if (ieee->reset_on_keychange &&
3551             ieee->iw_mode != IW_MODE_INFRA &&
3552             ieee->reset_port &&
3553             ieee->reset_port(ieee->dev)) {
3554                 printk("reset_port failed\n");
3555                 param->u.crypt.err = IEEE_CRYPT_ERR_CARD_CONF_FAILED;
3556                 return -EINVAL;
3557         }
3558
3559         return ret;
3560 }
3561
3562 inline struct sk_buff *rtllib_disauth_skb( struct rtllib_network *beacon,
3563                 struct rtllib_device *ieee, u16 asRsn)
3564 {
3565         struct sk_buff *skb;
3566         struct rtllib_disauth *disauth;
3567         int len = sizeof(struct rtllib_disauth) + ieee->tx_headroom;
3568
3569         skb = dev_alloc_skb(len);
3570         if (!skb) {
3571                 return NULL;
3572         }
3573
3574         skb_reserve(skb, ieee->tx_headroom);
3575
3576         disauth = (struct rtllib_disauth *) skb_put(skb,sizeof(struct rtllib_disauth));
3577         disauth->header.frame_ctl = cpu_to_le16(RTLLIB_STYPE_DEAUTH);
3578         disauth->header.duration_id = 0;
3579
3580         memcpy(disauth->header.addr1, beacon->bssid, ETH_ALEN);
3581         memcpy(disauth->header.addr2, ieee->dev->dev_addr, ETH_ALEN);
3582         memcpy(disauth->header.addr3, beacon->bssid, ETH_ALEN);
3583
3584         disauth->reason = cpu_to_le16(asRsn);
3585         return skb;
3586 }
3587
3588 inline struct sk_buff *rtllib_disassociate_skb( struct rtllib_network *beacon,
3589                 struct rtllib_device *ieee, u16 asRsn)
3590 {
3591         struct sk_buff *skb;
3592         struct rtllib_disassoc *disass;
3593         int len = sizeof(struct rtllib_disassoc) + ieee->tx_headroom;
3594         skb = dev_alloc_skb(len);
3595
3596         if (!skb) {
3597                 return NULL;
3598         }
3599
3600         skb_reserve(skb, ieee->tx_headroom);
3601
3602         disass = (struct rtllib_disassoc *) skb_put(skb,sizeof(struct rtllib_disassoc));
3603         disass->header.frame_ctl = cpu_to_le16(RTLLIB_STYPE_DISASSOC);
3604         disass->header.duration_id = 0;
3605
3606         memcpy(disass->header.addr1, beacon->bssid, ETH_ALEN);
3607         memcpy(disass->header.addr2, ieee->dev->dev_addr, ETH_ALEN);
3608         memcpy(disass->header.addr3, beacon->bssid, ETH_ALEN);
3609
3610         disass->reason = cpu_to_le16(asRsn);
3611         return skb;
3612 }
3613
3614 void SendDisassociation(struct rtllib_device *ieee, bool deauth, u16 asRsn)
3615 {
3616         struct rtllib_network *beacon = &ieee->current_network;
3617         struct sk_buff *skb;
3618
3619         if (deauth) {
3620                 skb = rtllib_disauth_skb(beacon,ieee,asRsn);
3621         } else {
3622                 skb = rtllib_disassociate_skb(beacon,ieee,asRsn);
3623         }
3624
3625         if (skb){
3626                 softmac_mgmt_xmit(skb, ieee);
3627         }
3628 }
3629
3630 u8 rtllib_ap_sec_type(struct rtllib_device *ieee)
3631 {
3632         static u8 ccmp_ie[4] = {0x00,0x50,0xf2,0x04};
3633         static u8 ccmp_rsn_ie[4] = {0x00, 0x0f, 0xac, 0x04};
3634         int wpa_ie_len= ieee->wpa_ie_len;
3635         struct rtllib_crypt_data* crypt;
3636         int encrypt;
3637
3638         crypt = ieee->crypt[ieee->tx_keyidx];
3639         encrypt = (ieee->current_network.capability & WLAN_CAPABILITY_PRIVACY) ||\
3640                   (ieee->host_encrypt && crypt && crypt->ops && \
3641                    (0 == strcmp(crypt->ops->name,"WEP")));
3642
3643         /* simply judge  */
3644         if (encrypt && (wpa_ie_len == 0)) {
3645                 return SEC_ALG_WEP;
3646         } else if ((wpa_ie_len != 0)) {
3647                 if (((ieee->wpa_ie[0] == 0xdd) && (!memcmp(&(ieee->wpa_ie[14]),ccmp_ie,4))) ||
3648                                 ((ieee->wpa_ie[0] == 0x30) && (!memcmp(&ieee->wpa_ie[10],ccmp_rsn_ie, 4))))
3649                         return SEC_ALG_CCMP;
3650                 else
3651                         return SEC_ALG_TKIP;
3652         } else {
3653                 return SEC_ALG_NONE;
3654         }
3655 }
3656
3657 int rtllib_wpa_supplicant_ioctl(struct rtllib_device *ieee, struct iw_point *p, u8 is_mesh)
3658 {
3659         struct ieee_param *param;
3660         int ret=0;
3661
3662         down(&ieee->wx_sem);
3663
3664         if (p->length < sizeof(struct ieee_param) || !p->pointer){
3665                 ret = -EINVAL;
3666                 goto out;
3667         }
3668
3669         param = (struct ieee_param *)kmalloc(p->length, GFP_KERNEL);
3670         if (param == NULL){
3671                 ret = -ENOMEM;
3672                 goto out;
3673         }
3674         if (copy_from_user(param, p->pointer, p->length)) {
3675                 kfree(param);
3676                 ret = -EFAULT;
3677                 goto out;
3678         }
3679
3680         switch (param->cmd) {
3681
3682         case IEEE_CMD_SET_WPA_PARAM:
3683                 ret = rtllib_wpa_set_param(ieee, param->u.wpa_param.name,
3684                                         param->u.wpa_param.value);
3685                 break;
3686
3687         case IEEE_CMD_SET_WPA_IE:
3688                 ret = rtllib_wpa_set_wpa_ie(ieee, param, p->length);
3689                 break;
3690
3691         case IEEE_CMD_SET_ENCRYPTION:
3692                 ret = rtllib_wpa_set_encryption(ieee, param, p->length, 0);
3693                 break;
3694
3695         case IEEE_CMD_MLME:
3696                 ret = rtllib_wpa_mlme(ieee, param->u.mlme.command,
3697                                    param->u.mlme.reason_code);
3698                 break;
3699
3700         default:
3701                 printk("Unknown WPA supplicant request: %d\n",param->cmd);
3702                 ret = -EOPNOTSUPP;
3703                 break;
3704         }
3705
3706         if (ret == 0 && copy_to_user(p->pointer, param, p->length))
3707                 ret = -EFAULT;
3708
3709         kfree(param);
3710 out:
3711         up(&ieee->wx_sem);
3712
3713         return ret;
3714 }
3715
3716 void
3717 rtllib_MgntDisconnectIBSS(struct rtllib_device* rtllib)
3718 {
3719         u8      OpMode;
3720         u8      i;
3721         bool    bFilterOutNonAssociatedBSSID = false;
3722
3723         rtllib->state = RTLLIB_NOLINK;
3724
3725         for (i=0;i<6;i++)  rtllib->current_network.bssid[i]= 0x55;
3726
3727         rtllib->OpMode = RT_OP_MODE_NO_LINK;
3728         rtllib->SetHwRegHandler(rtllib->dev, HW_VAR_BSSID, rtllib->current_network.bssid);
3729         OpMode = RT_OP_MODE_NO_LINK;
3730         rtllib->SetHwRegHandler(rtllib->dev, HW_VAR_MEDIA_STATUS, &OpMode);
3731         rtllib_stop_send_beacons(rtllib);
3732
3733         bFilterOutNonAssociatedBSSID = false;
3734         rtllib->SetHwRegHandler(rtllib->dev, HW_VAR_CECHK_BSSID, (u8*)(&bFilterOutNonAssociatedBSSID));
3735         notify_wx_assoc_event(rtllib);
3736
3737 }
3738
3739 void
3740 rtllib_MlmeDisassociateRequest(
3741         struct rtllib_device* rtllib,
3742         u8*             asSta,
3743         u8              asRsn
3744         )
3745 {
3746         u8 i;
3747         u8      OpMode;
3748
3749         RemovePeerTS(rtllib, asSta);
3750
3751
3752         if (memcpy(rtllib->current_network.bssid,asSta,6) == 0)
3753         {
3754                 rtllib->state = RTLLIB_NOLINK;
3755
3756                 for (i=0;i<6;i++)  rtllib->current_network.bssid[i] = 0x22;
3757                 OpMode = RT_OP_MODE_NO_LINK;
3758                 rtllib->OpMode = RT_OP_MODE_NO_LINK;
3759                 rtllib->SetHwRegHandler(rtllib->dev, HW_VAR_MEDIA_STATUS, (u8 *)(&OpMode) );
3760                 rtllib_disassociate(rtllib);
3761
3762                 rtllib->SetHwRegHandler(rtllib->dev, HW_VAR_BSSID, rtllib->current_network.bssid);
3763
3764         }
3765
3766 }
3767
3768 void
3769 rtllib_MgntDisconnectAP(
3770         struct rtllib_device* rtllib,
3771         u8 asRsn
3772 )
3773 {
3774         bool bFilterOutNonAssociatedBSSID = false;
3775
3776         bFilterOutNonAssociatedBSSID = false;
3777         rtllib->SetHwRegHandler(rtllib->dev, HW_VAR_CECHK_BSSID, (u8*)(&bFilterOutNonAssociatedBSSID));
3778         rtllib_MlmeDisassociateRequest( rtllib, rtllib->current_network.bssid, asRsn );
3779
3780         rtllib->state = RTLLIB_NOLINK;
3781 }
3782
3783 bool
3784 rtllib_MgntDisconnect(
3785         struct rtllib_device* rtllib,
3786         u8 asRsn
3787 )
3788 {
3789         if (rtllib->ps != RTLLIB_PS_DISABLED)
3790         {
3791                 rtllib->sta_wake_up(rtllib->dev);
3792         }
3793
3794         if ( rtllib->state == RTLLIB_LINKED )
3795         {
3796                 if ( rtllib->iw_mode == IW_MODE_ADHOC )
3797                 {
3798                         rtllib_MgntDisconnectIBSS(rtllib);
3799                 }
3800                 if ( rtllib->iw_mode == IW_MODE_INFRA )
3801                 {
3802                         rtllib_MgntDisconnectAP(rtllib, asRsn);
3803                 }
3804
3805         }
3806
3807         return true;
3808 }
3809
3810 void notify_wx_assoc_event(struct rtllib_device *ieee)
3811 {
3812         union iwreq_data wrqu;
3813
3814         if (ieee->cannot_notify)
3815                 return;
3816
3817         wrqu.ap_addr.sa_family = ARPHRD_ETHER;
3818         if (ieee->state == RTLLIB_LINKED)
3819                 memcpy(wrqu.ap_addr.sa_data, ieee->current_network.bssid, ETH_ALEN);
3820         else{
3821
3822                 printk("%s(): Tell user space disconnected\n",__func__);
3823                 memset(wrqu.ap_addr.sa_data, 0, ETH_ALEN);
3824         }
3825         wireless_send_event(ieee->dev, SIOCGIWAP, &wrqu, NULL);
3826 }