xref: /linux/drivers/staging/rtl8723bs/core/rtw_mlme.c (revision 4dad25aa60daced1d3bfbdd531c901620e8fb88f)
1 // SPDX-License-Identifier: GPL-2.0
2 /******************************************************************************
3  *
4  * Copyright(c) 2007 - 2011 Realtek Corporation. All rights reserved.
5  *
6  ******************************************************************************/
7 #include <linux/etherdevice.h>
8 #include <drv_types.h>
9 #include <hal_btcoex.h>
10 #include <linux/jiffies.h>
11 
_dynamic_check_timer_handler(struct timer_list * t)12 static void _dynamic_check_timer_handler(struct timer_list *t)
13 {
14 	struct adapter *adapter =
15 		timer_container_of(adapter, t, mlmepriv.dynamic_chk_timer);
16 
17 	rtw_dynamic_check_timer_handler(adapter);
18 
19 	_set_timer(&adapter->mlmepriv.dynamic_chk_timer, 2000);
20 }
21 
_rtw_set_scan_deny_timer_hdl(struct timer_list * t)22 static void _rtw_set_scan_deny_timer_hdl(struct timer_list *t)
23 {
24 	struct adapter *adapter =
25 		timer_container_of(adapter, t, mlmepriv.set_scan_deny_timer);
26 
27 	rtw_clear_scan_deny(adapter);
28 }
29 
rtw_init_mlme_timer(struct adapter * padapter)30 static void rtw_init_mlme_timer(struct adapter *padapter)
31 {
32 	struct	mlme_priv *pmlmepriv = &padapter->mlmepriv;
33 
34 	timer_setup(&pmlmepriv->assoc_timer, _rtw_join_timeout_handler, 0);
35 	timer_setup(&pmlmepriv->scan_to_timer, rtw_scan_timeout_handler, 0);
36 	timer_setup(&pmlmepriv->dynamic_chk_timer,
37 		    _dynamic_check_timer_handler, 0);
38 	timer_setup(&pmlmepriv->set_scan_deny_timer,
39 		    _rtw_set_scan_deny_timer_hdl, 0);
40 }
41 
rtw_init_mlme_priv(struct adapter * padapter)42 int	rtw_init_mlme_priv(struct adapter *padapter)
43 {
44 	int	i;
45 	u8 *pbuf;
46 	struct wlan_network	*pnetwork;
47 	struct mlme_priv	*pmlmepriv = &padapter->mlmepriv;
48 	int	res = _SUCCESS;
49 
50 	pmlmepriv->nic_hdl = (u8 *)padapter;
51 
52 	pmlmepriv->pscanned = NULL;
53 	pmlmepriv->fw_state = WIFI_STATION_STATE; /*  Must sync with rtw_wdev_alloc() */
54 	pmlmepriv->cur_network.network.infrastructure_mode = Ndis802_11AutoUnknown;
55 	pmlmepriv->scan_mode = SCAN_ACTIVE;/*  1: active, 0: passive. Maybe someday we should rename this varable to "active_mode" (Jeff) */
56 
57 	spin_lock_init(&pmlmepriv->lock);
58 	INIT_LIST_HEAD(&pmlmepriv->free_bss_pool.queue);
59 	spin_lock_init(&pmlmepriv->free_bss_pool.lock);
60 	INIT_LIST_HEAD(&pmlmepriv->scanned_queue.queue);
61 	spin_lock_init(&pmlmepriv->scanned_queue.lock);
62 
63 	memset(&pmlmepriv->assoc_ssid, 0, sizeof(struct ndis_802_11_ssid));
64 
65 	pbuf = vzalloc(array_size(MAX_BSS_CNT, sizeof(struct wlan_network)));
66 
67 	if (!pbuf) {
68 		res = _FAIL;
69 		goto exit;
70 	}
71 	pmlmepriv->free_bss_buf = pbuf;
72 
73 	pnetwork = (struct wlan_network *)pbuf;
74 
75 	for (i = 0; i < MAX_BSS_CNT; i++) {
76 		INIT_LIST_HEAD(&pnetwork->list);
77 
78 		list_add_tail(&pnetwork->list, &pmlmepriv->free_bss_pool.queue);
79 
80 		pnetwork++;
81 	}
82 
83 	/* allocate DMA-able/Non-Page memory for cmd_buf and rsp_buf */
84 
85 	rtw_clear_scan_deny(padapter);
86 
87 	#define RTW_ROAM_SCAN_RESULT_EXP_MS 5000
88 	#define RTW_ROAM_RSSI_DIFF_TH 10
89 	#define RTW_ROAM_SCAN_INTERVAL_MS 10000
90 
91 	pmlmepriv->roam_flags = 0
92 		| RTW_ROAM_ON_EXPIRED
93 		| RTW_ROAM_ON_RESUME
94 		;
95 
96 	pmlmepriv->roam_scanr_exp_ms = RTW_ROAM_SCAN_RESULT_EXP_MS;
97 	pmlmepriv->roam_rssi_diff_th = RTW_ROAM_RSSI_DIFF_TH;
98 	pmlmepriv->roam_scan_int_ms = RTW_ROAM_SCAN_INTERVAL_MS;
99 
100 	rtw_init_mlme_timer(padapter);
101 
102 exit:
103 
104 	return res;
105 }
106 
rtw_free_mlme_ie_data(u8 ** ppie,u32 * plen)107 static void rtw_free_mlme_ie_data(u8 **ppie, u32 *plen)
108 {
109 	if (*ppie) {
110 		kfree(*ppie);
111 		*plen = 0;
112 		*ppie = NULL;
113 	}
114 }
115 
rtw_free_mlme_priv_ie_data(struct mlme_priv * pmlmepriv)116 void rtw_free_mlme_priv_ie_data(struct mlme_priv *pmlmepriv)
117 {
118 	rtw_buf_free(&pmlmepriv->assoc_req, &pmlmepriv->assoc_req_len);
119 	rtw_buf_free(&pmlmepriv->assoc_rsp, &pmlmepriv->assoc_rsp_len);
120 	rtw_free_mlme_ie_data(&pmlmepriv->wps_beacon_ie, &pmlmepriv->wps_beacon_ie_len);
121 	rtw_free_mlme_ie_data(&pmlmepriv->wps_probe_req_ie, &pmlmepriv->wps_probe_req_ie_len);
122 	rtw_free_mlme_ie_data(&pmlmepriv->wps_probe_resp_ie, &pmlmepriv->wps_probe_resp_ie_len);
123 	rtw_free_mlme_ie_data(&pmlmepriv->wps_assoc_resp_ie, &pmlmepriv->wps_assoc_resp_ie_len);
124 
125 	rtw_free_mlme_ie_data(&pmlmepriv->p2p_beacon_ie, &pmlmepriv->p2p_beacon_ie_len);
126 	rtw_free_mlme_ie_data(&pmlmepriv->p2p_probe_req_ie, &pmlmepriv->p2p_probe_req_ie_len);
127 	rtw_free_mlme_ie_data(&pmlmepriv->p2p_probe_resp_ie, &pmlmepriv->p2p_probe_resp_ie_len);
128 	rtw_free_mlme_ie_data(&pmlmepriv->p2p_go_probe_resp_ie, &pmlmepriv->p2p_go_probe_resp_ie_len);
129 	rtw_free_mlme_ie_data(&pmlmepriv->p2p_assoc_req_ie, &pmlmepriv->p2p_assoc_req_ie_len);
130 }
131 
_rtw_free_mlme_priv(struct mlme_priv * pmlmepriv)132 void _rtw_free_mlme_priv(struct mlme_priv *pmlmepriv)
133 {
134 	if (pmlmepriv) {
135 		rtw_free_mlme_priv_ie_data(pmlmepriv);
136 		vfree(pmlmepriv->free_bss_buf);
137 	}
138 }
139 
rtw_alloc_network(struct mlme_priv * pmlmepriv)140 struct	wlan_network *rtw_alloc_network(struct	mlme_priv *pmlmepriv)
141 {
142 	struct	wlan_network	*pnetwork;
143 	struct __queue *free_queue = &pmlmepriv->free_bss_pool;
144 	struct list_head *plist = NULL;
145 
146 	spin_lock_bh(&free_queue->lock);
147 
148 	if (list_empty(&free_queue->queue)) {
149 		pnetwork = NULL;
150 		goto exit;
151 	}
152 	plist = get_next(&free_queue->queue);
153 
154 	pnetwork = container_of(plist, struct wlan_network, list);
155 
156 	list_del_init(&pnetwork->list);
157 
158 	pnetwork->network_type = 0;
159 	pnetwork->fixed = false;
160 	pnetwork->last_scanned = jiffies;
161 	pnetwork->aid = 0;
162 	pnetwork->join_res = 0;
163 
164 exit:
165 	spin_unlock_bh(&free_queue->lock);
166 
167 	return pnetwork;
168 }
169 
_rtw_free_network(struct mlme_priv * pmlmepriv,struct wlan_network * pnetwork,u8 isfreeall)170 void _rtw_free_network(struct	mlme_priv *pmlmepriv, struct wlan_network *pnetwork, u8 isfreeall)
171 {
172 	unsigned int delta_time;
173 	u32 lifetime = SCANQUEUE_LIFETIME;
174 	struct __queue *free_queue = &pmlmepriv->free_bss_pool;
175 
176 	if (!pnetwork)
177 		return;
178 
179 	if (pnetwork->fixed)
180 		return;
181 
182 	if (check_fwstate(pmlmepriv, WIFI_ADHOC_MASTER_STATE) ||
183 	    check_fwstate(pmlmepriv, WIFI_ADHOC_STATE))
184 		lifetime = 1;
185 
186 	if (!isfreeall) {
187 		delta_time = jiffies_to_msecs(jiffies - pnetwork->last_scanned);
188 		if (delta_time < lifetime)/*  unit:msec */
189 			return;
190 	}
191 
192 	spin_lock_bh(&free_queue->lock);
193 
194 	list_del_init(&pnetwork->list);
195 
196 	list_add_tail(&pnetwork->list, &free_queue->queue);
197 
198 	spin_unlock_bh(&free_queue->lock);
199 }
200 
_rtw_free_network_nolock(struct mlme_priv * pmlmepriv,struct wlan_network * pnetwork)201 void _rtw_free_network_nolock(struct	mlme_priv *pmlmepriv, struct wlan_network *pnetwork)
202 {
203 	struct __queue *free_queue = &pmlmepriv->free_bss_pool;
204 
205 	if (!pnetwork)
206 		return;
207 
208 	if (pnetwork->fixed)
209 		return;
210 
211 	list_del_init(&pnetwork->list);
212 
213 	list_add_tail(&pnetwork->list, get_list_head(free_queue));
214 }
215 
216 /*
217  * return the wlan_network with the matching addr
218  *
219  * Shall be called under atomic context... to avoid possible racing condition...
220  */
_rtw_find_network(struct __queue * scanned_queue,u8 * addr)221 struct wlan_network *_rtw_find_network(struct __queue *scanned_queue, u8 *addr)
222 {
223 	struct list_head	*phead, *plist;
224 	struct	wlan_network *pnetwork = NULL;
225 
226 	if (is_zero_ether_addr(addr)) {
227 		pnetwork = NULL;
228 		goto exit;
229 	}
230 
231 	phead = get_list_head(scanned_queue);
232 	list_for_each(plist, phead) {
233 		pnetwork = list_entry(plist, struct wlan_network, list);
234 
235 		if (!memcmp(addr, pnetwork->network.mac_address, ETH_ALEN))
236 			break;
237 	}
238 
239 	if (plist == phead)
240 		pnetwork = NULL;
241 
242 exit:
243 	return pnetwork;
244 }
245 
rtw_free_network_queue(struct adapter * padapter,u8 isfreeall)246 void rtw_free_network_queue(struct adapter *padapter, u8 isfreeall)
247 {
248 	struct list_head *phead, *plist, *tmp;
249 	struct wlan_network *pnetwork;
250 	struct mlme_priv *pmlmepriv = &padapter->mlmepriv;
251 	struct __queue *scanned_queue = &pmlmepriv->scanned_queue;
252 
253 	spin_lock_bh(&scanned_queue->lock);
254 
255 	phead = get_list_head(scanned_queue);
256 	list_for_each_safe(plist, tmp, phead) {
257 		pnetwork = list_entry(plist, struct wlan_network, list);
258 
259 		_rtw_free_network(pmlmepriv, pnetwork, isfreeall);
260 	}
261 
262 	spin_unlock_bh(&scanned_queue->lock);
263 }
264 
rtw_if_up(struct adapter * padapter)265 signed int rtw_if_up(struct adapter *padapter)
266 {
267 	signed int res;
268 
269 	if (padapter->bDriverStopped || padapter->bSurpriseRemoved ||
270 		!check_fwstate(&padapter->mlmepriv, _FW_LINKED))
271 		res = false;
272 	else
273 		res =  true;
274 
275 	return res;
276 }
277 
rtw_generate_random_ibss(u8 * pibss)278 void rtw_generate_random_ibss(u8 *pibss)
279 {
280 	unsigned long curtime = jiffies;
281 
282 	pibss[0] = 0x02;  /* in ad-hoc mode bit1 must set to 1 */
283 	pibss[1] = 0x11;
284 	pibss[2] = 0x87;
285 	pibss[3] = (u8)(curtime & 0xff) ;/* p[0]; */
286 	pibss[4] = (u8)((curtime >> 8) & 0xff) ;/* p[1]; */
287 	pibss[5] = (u8)((curtime >> 16) & 0xff) ;/* p[2]; */
288 }
289 
rtw_get_capability_from_ie(u8 * ie)290 u8 *rtw_get_capability_from_ie(u8 *ie)
291 {
292 	return ie + 8 + 2;
293 }
294 
rtw_get_capability(struct wlan_bssid_ex * bss)295 u16 rtw_get_capability(struct wlan_bssid_ex *bss)
296 {
297 	__le16	val;
298 
299 	memcpy((u8 *)&val, rtw_get_capability_from_ie(bss->ies), 2);
300 
301 	return le16_to_cpu(val);
302 }
303 
rtw_get_beacon_interval_from_ie(u8 * ie)304 u8 *rtw_get_beacon_interval_from_ie(u8 *ie)
305 {
306 	return ie + 8;
307 }
308 
rtw_free_mlme_priv(struct mlme_priv * pmlmepriv)309 void rtw_free_mlme_priv(struct mlme_priv *pmlmepriv)
310 {
311 	_rtw_free_mlme_priv(pmlmepriv);
312 }
313 
314 void rtw_free_network_nolock(struct adapter *padapter, struct wlan_network *pnetwork);
rtw_free_network_nolock(struct adapter * padapter,struct wlan_network * pnetwork)315 void rtw_free_network_nolock(struct adapter *padapter, struct wlan_network *pnetwork)
316 {
317 	_rtw_free_network_nolock(&padapter->mlmepriv, pnetwork);
318 	rtw_cfg80211_unlink_bss(padapter, pnetwork);
319 }
320 
321 /*
322  * return the wlan_network with the matching addr
323  *
324  * Shall be called under atomic context... to avoid possible racing condition...
325  */
rtw_find_network(struct __queue * scanned_queue,u8 * addr)326 struct	wlan_network *rtw_find_network(struct __queue *scanned_queue, u8 *addr)
327 {
328 	struct	wlan_network *pnetwork = _rtw_find_network(scanned_queue, addr);
329 
330 	return pnetwork;
331 }
332 
rtw_is_same_ibss(struct adapter * adapter,struct wlan_network * pnetwork)333 int rtw_is_same_ibss(struct adapter *adapter, struct wlan_network *pnetwork)
334 {
335 	int ret = true;
336 	struct security_priv *psecuritypriv = &adapter->securitypriv;
337 
338 	if ((psecuritypriv->dot11PrivacyAlgrthm != _NO_PRIVACY_) &&
339 		    (pnetwork->network.privacy == 0))
340 		ret = false;
341 	else if ((psecuritypriv->dot11PrivacyAlgrthm == _NO_PRIVACY_) &&
342 		 (pnetwork->network.privacy == 1))
343 		ret = false;
344 	else
345 		ret = true;
346 
347 	return ret;
348 }
349 
is_same_ess(struct wlan_bssid_ex * a,struct wlan_bssid_ex * b)350 inline int is_same_ess(struct wlan_bssid_ex *a, struct wlan_bssid_ex *b)
351 {
352 	return (a->ssid.ssid_length == b->ssid.ssid_length)
353 		&&  !memcmp(a->ssid.ssid, b->ssid.ssid, a->ssid.ssid_length);
354 }
355 
is_same_network(struct wlan_bssid_ex * src,struct wlan_bssid_ex * dst,u8 feature)356 int is_same_network(struct wlan_bssid_ex *src, struct wlan_bssid_ex *dst, u8 feature)
357 {
358 	u16 s_cap, d_cap;
359 	__le16 tmps, tmpd;
360 
361 	if (rtw_bug_check(dst, src, &s_cap, &d_cap) == false)
362 		return false;
363 
364 	memcpy((u8 *)&tmps, rtw_get_capability_from_ie(src->ies), 2);
365 	memcpy((u8 *)&tmpd, rtw_get_capability_from_ie(dst->ies), 2);
366 
367 	s_cap = le16_to_cpu(tmps);
368 	d_cap = le16_to_cpu(tmpd);
369 
370 	return (src->ssid.ssid_length == dst->ssid.ssid_length) &&
371 			((!memcmp(src->mac_address, dst->mac_address, ETH_ALEN))) &&
372 			((!memcmp(src->ssid.ssid, dst->ssid.ssid, src->ssid.ssid_length))) &&
373 			((s_cap & WLAN_CAPABILITY_IBSS) ==
374 			(d_cap & WLAN_CAPABILITY_IBSS)) &&
375 			((s_cap & WLAN_CAPABILITY_ESS) ==
376 			(d_cap & WLAN_CAPABILITY_ESS));
377 }
378 
_rtw_find_same_network(struct __queue * scanned_queue,struct wlan_network * network)379 struct wlan_network *_rtw_find_same_network(struct __queue *scanned_queue, struct wlan_network *network)
380 {
381 	struct list_head *phead, *plist;
382 	struct wlan_network *found = NULL;
383 
384 	phead = get_list_head(scanned_queue);
385 	list_for_each(plist, phead) {
386 		found = list_entry(plist, struct wlan_network, list);
387 
388 		if (is_same_network(&network->network, &found->network, 0))
389 			break;
390 	}
391 
392 	if (plist == phead)
393 		found = NULL;
394 
395 	return found;
396 }
397 
rtw_get_oldest_wlan_network(struct __queue * scanned_queue)398 struct	wlan_network	*rtw_get_oldest_wlan_network(struct __queue *scanned_queue)
399 {
400 	struct list_head	*plist, *phead;
401 
402 	struct	wlan_network	*pwlan = NULL;
403 	struct	wlan_network	*oldest = NULL;
404 
405 	phead = get_list_head(scanned_queue);
406 
407 	list_for_each(plist, phead) {
408 		pwlan = list_entry(plist, struct wlan_network, list);
409 
410 		if (!pwlan->fixed) {
411 			if (!oldest || time_after(oldest->last_scanned, pwlan->last_scanned))
412 				oldest = pwlan;
413 		}
414 	}
415 	return oldest;
416 }
417 
update_network(struct wlan_bssid_ex * dst,struct wlan_bssid_ex * src,struct adapter * padapter,bool update_ie)418 void update_network(struct wlan_bssid_ex *dst, struct wlan_bssid_ex *src,
419 	struct adapter *padapter, bool update_ie)
420 {
421 	long rssi_ori = dst->rssi;
422 
423 	u8 sq_smp = src->phy_info.signal_quality;
424 
425 	u8 ss_final;
426 	u8 sq_final;
427 	long rssi_final;
428 
429 	/* The rule below is 1/5 for sample value, 4/5 for history value */
430 	if (check_fwstate(&padapter->mlmepriv, _FW_LINKED) && is_same_network(&padapter->mlmepriv.cur_network.network, src, 0)) {
431 		/* Take the recvpriv's value for the connected AP*/
432 		ss_final = padapter->recvpriv.signal_strength;
433 		sq_final = padapter->recvpriv.signal_qual;
434 		/* the rssi value here is undecorated, and will be used for antenna diversity */
435 		if (sq_smp != 101) /* from the right channel */
436 			rssi_final = (src->rssi + dst->rssi * 4) / 5;
437 		else
438 			rssi_final = rssi_ori;
439 	} else {
440 		if (sq_smp != 101) { /* from the right channel */
441 			ss_final = ((u32)(src->phy_info.signal_strength) + (u32)(dst->phy_info.signal_strength) * 4) / 5;
442 			sq_final = ((u32)(src->phy_info.signal_quality) + (u32)(dst->phy_info.signal_quality) * 4) / 5;
443 			rssi_final = (src->rssi + dst->rssi * 4) / 5;
444 		} else {
445 			/* bss info not receiving from the right channel, use the original RX signal infos */
446 			ss_final = dst->phy_info.signal_strength;
447 			sq_final = dst->phy_info.signal_quality;
448 			rssi_final = dst->rssi;
449 		}
450 	}
451 
452 	if (update_ie) {
453 		dst->reserved[0] = src->reserved[0];
454 		dst->reserved[1] = src->reserved[1];
455 		memcpy((u8 *)dst, (u8 *)src, get_wlan_bssid_ex_sz(src));
456 	}
457 
458 	dst->phy_info.signal_strength = ss_final;
459 	dst->phy_info.signal_quality = sq_final;
460 	dst->rssi = rssi_final;
461 }
462 
update_current_network(struct adapter * adapter,struct wlan_bssid_ex * pnetwork)463 static void update_current_network(struct adapter *adapter, struct wlan_bssid_ex *pnetwork)
464 {
465 	struct	mlme_priv *pmlmepriv = &adapter->mlmepriv;
466 
467 	rtw_bug_check(&pmlmepriv->cur_network.network,
468 		&pmlmepriv->cur_network.network,
469 		&pmlmepriv->cur_network.network,
470 		&pmlmepriv->cur_network.network);
471 
472 	if (check_fwstate(pmlmepriv, _FW_LINKED) && (is_same_network(&pmlmepriv->cur_network.network, pnetwork, 0))) {
473 		update_network(&pmlmepriv->cur_network.network, pnetwork, adapter, true);
474 		rtw_update_protection(adapter, (pmlmepriv->cur_network.network.ies) + sizeof(struct ndis_802_11_fix_ie),
475 								pmlmepriv->cur_network.network.ie_length);
476 	}
477 }
478 
479 /* Caller must hold pmlmepriv->lock first. */
rtw_update_scanned_network(struct adapter * adapter,struct wlan_bssid_ex * target)480 void rtw_update_scanned_network(struct adapter *adapter, struct wlan_bssid_ex *target)
481 {
482 	struct list_head	*plist, *phead;
483 	u32 bssid_ex_sz;
484 	struct mlme_priv *pmlmepriv = &adapter->mlmepriv;
485 	struct __queue	*queue	= &pmlmepriv->scanned_queue;
486 	struct wlan_network	*pnetwork = NULL;
487 	struct wlan_network	*oldest = NULL;
488 	int target_find = 0;
489 	u8 feature = 0;
490 
491 	spin_lock_bh(&queue->lock);
492 	phead = get_list_head(queue);
493 	list_for_each(plist, phead) {
494 		pnetwork = list_entry(plist, struct wlan_network, list);
495 
496 		rtw_bug_check(pnetwork, pnetwork, pnetwork, pnetwork);
497 
498 		if (is_same_network(&pnetwork->network, target, feature)) {
499 			target_find = 1;
500 			break;
501 		}
502 
503 		if (rtw_roam_flags(adapter)) {
504 			/* TODO: don't select network in the same ess as oldest if it's new enough*/
505 		}
506 
507 		if (!oldest || time_after(oldest->last_scanned, pnetwork->last_scanned))
508 			oldest = pnetwork;
509 	}
510 
511 	/*
512 	 * If we didn't find a match, then get a new network slot to initialize
513 	 * with this beacon's information
514 	 */
515 	if (!target_find) {
516 		if (list_empty(&pmlmepriv->free_bss_pool.queue)) {
517 			/* If there are no more slots, expire the oldest */
518 			/* list_del_init(&oldest->list); */
519 			pnetwork = oldest;
520 			if (!pnetwork)
521 				goto exit;
522 
523 			memcpy(&pnetwork->network, target,  get_wlan_bssid_ex_sz(target));
524 			/*  variable initialize */
525 			pnetwork->fixed = false;
526 			pnetwork->last_scanned = jiffies;
527 
528 			pnetwork->network_type = 0;
529 			pnetwork->aid = 0;
530 			pnetwork->join_res = 0;
531 
532 			/* bss info not receiving from the right channel */
533 			if (pnetwork->network.phy_info.signal_quality == 101)
534 				pnetwork->network.phy_info.signal_quality = 0;
535 		} else {
536 			/* Otherwise just pull from the free list */
537 
538 			pnetwork = rtw_alloc_network(pmlmepriv); /*  will update scan_time */
539 
540 			if (!pnetwork)
541 				goto exit;
542 
543 			bssid_ex_sz = get_wlan_bssid_ex_sz(target);
544 			target->length = bssid_ex_sz;
545 			memcpy(&pnetwork->network, target, bssid_ex_sz);
546 
547 			pnetwork->last_scanned = jiffies;
548 
549 			/* bss info not receiving from the right channel */
550 			if (pnetwork->network.phy_info.signal_quality == 101)
551 				pnetwork->network.phy_info.signal_quality = 0;
552 
553 			list_add_tail(&pnetwork->list, &queue->queue);
554 		}
555 	} else {
556 		/* we have an entry and we are going to update it. But this entry may
557 		 * be already expired. In this case we do the same as we found a new
558 		 * net and call the new_net handler
559 		 */
560 		bool update_ie = true;
561 
562 		pnetwork->last_scanned = jiffies;
563 
564 		/* target.reserved[0]== 1, means that scanned network is a bcn frame. */
565 		if (pnetwork->network.ie_length > target->ie_length && target->reserved[0] == 1)
566 			update_ie = false;
567 
568 		/*  probe resp(3) > beacon(1) > probe req(2) */
569 		if (target->reserved[0] != 2 &&
570 		    target->reserved[0] >= pnetwork->network.reserved[0]) {
571 			update_ie = true;
572 		} else {
573 			update_ie = false;
574 		}
575 
576 		update_network(&pnetwork->network, target, adapter, update_ie);
577 	}
578 
579 exit:
580 	spin_unlock_bh(&queue->lock);
581 }
582 
583 void rtw_add_network(struct adapter *adapter, struct wlan_bssid_ex *pnetwork);
rtw_add_network(struct adapter * adapter,struct wlan_bssid_ex * pnetwork)584 void rtw_add_network(struct adapter *adapter, struct wlan_bssid_ex *pnetwork)
585 {
586 	update_current_network(adapter, pnetwork);
587 	rtw_update_scanned_network(adapter, pnetwork);
588 }
589 
590 /* select the desired network based on the capability of the (i)bss.
591  * check items:
592  * (1) security
593  * (2) network_type
594  * (3) WMM
595  * (4) HT
596  * (5) others
597  */
598 int rtw_is_desired_network(struct adapter *adapter, struct wlan_network *pnetwork);
rtw_is_desired_network(struct adapter * adapter,struct wlan_network * pnetwork)599 int rtw_is_desired_network(struct adapter *adapter, struct wlan_network *pnetwork)
600 {
601 	struct security_priv *psecuritypriv = &adapter->securitypriv;
602 	struct mlme_priv *pmlmepriv = &adapter->mlmepriv;
603 	u32 desired_encmode;
604 	u32 privacy;
605 	uint wps_ielen;
606 	int bselected = true;
607 
608 	desired_encmode = psecuritypriv->ndisencryptstatus;
609 	privacy = pnetwork->network.privacy;
610 
611 	if (check_fwstate(pmlmepriv, WIFI_UNDER_WPS)) {
612 		if (rtw_get_wps_ie(pnetwork->network.ies + _FIXED_IE_LENGTH_, pnetwork->network.ie_length - _FIXED_IE_LENGTH_, NULL, &wps_ielen))
613 			return true;
614 		else
615 			return false;
616 	}
617 	if (adapter->registrypriv.wifi_spec == 1) { /* for  correct flow of 8021X  to do.... */
618 		u8 *p = NULL;
619 		uint ie_len = 0;
620 
621 		if ((desired_encmode == Ndis802_11EncryptionDisabled) && (privacy != 0))
622 			bselected = false;
623 
624 		if (psecuritypriv->ndisauthtype == Ndis802_11AuthModeWPA2PSK) {
625 			p = rtw_get_ie(pnetwork->network.ies + _BEACON_IE_OFFSET_, WLAN_EID_RSN, &ie_len, (pnetwork->network.ie_length - _BEACON_IE_OFFSET_));
626 			if (p && ie_len > 0)
627 				bselected = true;
628 			else
629 				bselected = false;
630 		}
631 	}
632 
633 	if ((desired_encmode != Ndis802_11EncryptionDisabled) && (privacy == 0))
634 		bselected = false;
635 
636 	if (check_fwstate(pmlmepriv, WIFI_ADHOC_STATE)) {
637 		if (pnetwork->network.infrastructure_mode != pmlmepriv->cur_network.network.infrastructure_mode)
638 			bselected = false;
639 	}
640 
641 	return bselected;
642 }
643 
644 /* TODO: Perry : For Power Management */
rtw_atimdone_event_callback(struct adapter * adapter,u8 * pbuf)645 void rtw_atimdone_event_callback(struct adapter	*adapter, u8 *pbuf)
646 {
647 }
648 
rtw_survey_event_callback(struct adapter * adapter,u8 * pbuf)649 void rtw_survey_event_callback(struct adapter	*adapter, u8 *pbuf)
650 {
651 	u32 len;
652 	struct wlan_bssid_ex *pnetwork;
653 	struct	mlme_priv *pmlmepriv = &adapter->mlmepriv;
654 
655 	pnetwork = (struct wlan_bssid_ex *)pbuf;
656 
657 	len = get_wlan_bssid_ex_sz(pnetwork);
658 	if (len > (sizeof(struct wlan_bssid_ex)))
659 		return;
660 
661 	spin_lock_bh(&pmlmepriv->lock);
662 
663 	/*  update IBSS_network 's timestamp */
664 	if (check_fwstate(pmlmepriv, WIFI_ADHOC_MASTER_STATE)) {
665 		if (!memcmp(&pmlmepriv->cur_network.network.mac_address, pnetwork->mac_address, ETH_ALEN)) {
666 			struct wlan_network *ibss_wlan = NULL;
667 
668 			memcpy(pmlmepriv->cur_network.network.ies, pnetwork->ies, 8);
669 			spin_lock_bh(&pmlmepriv->scanned_queue.lock);
670 			ibss_wlan = rtw_find_network(&pmlmepriv->scanned_queue,  pnetwork->mac_address);
671 			if (ibss_wlan) {
672 				memcpy(ibss_wlan->network.ies, pnetwork->ies, 8);
673 				spin_unlock_bh(&pmlmepriv->scanned_queue.lock);
674 				goto exit;
675 			}
676 			spin_unlock_bh(&pmlmepriv->scanned_queue.lock);
677 		}
678 	}
679 
680 	/*  lock pmlmepriv->lock when you accessing network_q */
681 	if (!check_fwstate(pmlmepriv, _FW_UNDER_LINKING)) {
682 		if (pnetwork->ssid.ssid[0] == 0)
683 			pnetwork->ssid.ssid_length = 0;
684 		rtw_add_network(adapter, pnetwork);
685 	}
686 
687 exit:
688 
689 	spin_unlock_bh(&pmlmepriv->lock);
690 }
691 
rtw_surveydone_event_callback(struct adapter * adapter,u8 * pbuf)692 void rtw_surveydone_event_callback(struct adapter	*adapter, u8 *pbuf)
693 {
694 	struct	mlme_priv *pmlmepriv = &adapter->mlmepriv;
695 
696 	spin_lock_bh(&pmlmepriv->lock);
697 	if (pmlmepriv->wps_probe_req_ie) {
698 		pmlmepriv->wps_probe_req_ie_len = 0;
699 		kfree(pmlmepriv->wps_probe_req_ie);
700 		pmlmepriv->wps_probe_req_ie = NULL;
701 	}
702 
703 	if (check_fwstate(pmlmepriv, _FW_UNDER_SURVEY)) {
704 		spin_unlock_bh(&pmlmepriv->lock);
705 		timer_delete_sync(&pmlmepriv->scan_to_timer);
706 		spin_lock_bh(&pmlmepriv->lock);
707 		_clr_fwstate_(pmlmepriv, _FW_UNDER_SURVEY);
708 	}
709 
710 	rtw_set_signal_stat_timer(&adapter->recvpriv);
711 
712 	if (pmlmepriv->to_join) {
713 		if (check_fwstate(pmlmepriv, WIFI_ADHOC_STATE)) {
714 			if (!check_fwstate(pmlmepriv, _FW_LINKED)) {
715 				set_fwstate(pmlmepriv, _FW_UNDER_LINKING);
716 
717 				if (rtw_select_and_join_from_scanned_queue(pmlmepriv) == _SUCCESS) {
718 					_set_timer(&pmlmepriv->assoc_timer, MAX_JOIN_TIMEOUT);
719 				} else {
720 					u8 ret = _SUCCESS;
721 					struct wlan_bssid_ex    *pdev_network = &adapter->registrypriv.dev_network;
722 					u8 *pibss = adapter->registrypriv.dev_network.mac_address;
723 
724 					/* pmlmepriv->fw_state ^= _FW_UNDER_SURVEY;because don't set assoc_timer */
725 					_clr_fwstate_(pmlmepriv, _FW_UNDER_SURVEY);
726 
727 					memcpy(&pdev_network->ssid, &pmlmepriv->assoc_ssid, sizeof(struct ndis_802_11_ssid));
728 
729 					rtw_update_registrypriv_dev_network(adapter);
730 					rtw_generate_random_ibss(pibss);
731 
732 					pmlmepriv->fw_state = WIFI_ADHOC_MASTER_STATE;
733 
734 					pmlmepriv->to_join = false;
735 
736 					ret = rtw_createbss_cmd(adapter);
737 					if (ret != _SUCCESS)
738 						goto unlock;
739 				}
740 			}
741 		} else {
742 			int s_ret;
743 
744 			set_fwstate(pmlmepriv, _FW_UNDER_LINKING);
745 			pmlmepriv->to_join = false;
746 			s_ret = rtw_select_and_join_from_scanned_queue(pmlmepriv);
747 			if (s_ret == _SUCCESS) {
748 				_set_timer(&pmlmepriv->assoc_timer, MAX_JOIN_TIMEOUT);
749 			} else if (s_ret == 2) {/* there is no need to wait for join */
750 				_clr_fwstate_(pmlmepriv, _FW_UNDER_LINKING);
751 				rtw_indicate_connect(adapter);
752 			} else {
753 				if (rtw_to_roam(adapter) != 0) {
754 					if (rtw_dec_to_roam(adapter) == 0
755 						|| _SUCCESS != rtw_sitesurvey_cmd(adapter, &pmlmepriv->assoc_ssid, 1, NULL, 0)
756 					) {
757 						rtw_set_to_roam(adapter, 0);
758 						rtw_free_assoc_resources(adapter, 1);
759 						rtw_indicate_disconnect(adapter);
760 					} else {
761 						pmlmepriv->to_join = true;
762 					}
763 				} else
764 					rtw_indicate_disconnect(adapter);
765 
766 				_clr_fwstate_(pmlmepriv, _FW_UNDER_LINKING);
767 			}
768 		}
769 	} else {
770 		if (rtw_chk_roam_flags(adapter, RTW_ROAM_ACTIVE)) {
771 			if (check_fwstate(pmlmepriv, WIFI_STATION_STATE)
772 				&& check_fwstate(pmlmepriv, _FW_LINKED)) {
773 				if (rtw_select_roaming_candidate(pmlmepriv) == _SUCCESS) {
774 					receive_disconnect(adapter, pmlmepriv->cur_network.network.mac_address
775 						, WLAN_REASON_ACTIVE_ROAM);
776 				}
777 			}
778 		}
779 	}
780 
781 unlock:
782 	spin_unlock_bh(&pmlmepriv->lock);
783 
784 	rtw_os_xmit_schedule(adapter);
785 
786 	rtw_cfg80211_surveydone_event_callback(adapter);
787 
788 	rtw_indicate_scan_done(adapter, false);
789 }
790 
rtw_dummy_event_callback(struct adapter * adapter,u8 * pbuf)791 void rtw_dummy_event_callback(struct adapter *adapter, u8 *pbuf)
792 {
793 }
794 
rtw_fwdbg_event_callback(struct adapter * adapter,u8 * pbuf)795 void rtw_fwdbg_event_callback(struct adapter *adapter, u8 *pbuf)
796 {
797 }
798 
free_scanqueue(struct mlme_priv * pmlmepriv)799 static void free_scanqueue(struct	mlme_priv *pmlmepriv)
800 {
801 	struct __queue *free_queue = &pmlmepriv->free_bss_pool;
802 	struct __queue *scan_queue = &pmlmepriv->scanned_queue;
803 	struct list_head	*plist, *phead, *ptemp;
804 
805 	spin_lock_bh(&scan_queue->lock);
806 	spin_lock_bh(&free_queue->lock);
807 
808 	phead = get_list_head(scan_queue);
809 	plist = get_next(phead);
810 
811 	while (plist != phead) {
812 		ptemp = get_next(plist);
813 		list_del_init(plist);
814 		list_add_tail(plist, &free_queue->queue);
815 		plist = ptemp;
816 	}
817 
818 	spin_unlock_bh(&free_queue->lock);
819 	spin_unlock_bh(&scan_queue->lock);
820 }
821 
find_network(struct adapter * adapter)822 static void find_network(struct adapter *adapter)
823 {
824 	struct wlan_network *pwlan = NULL;
825 	struct	mlme_priv *pmlmepriv = &adapter->mlmepriv;
826 	struct wlan_network *tgt_network = &pmlmepriv->cur_network;
827 
828 	pwlan = rtw_find_network(&pmlmepriv->scanned_queue, tgt_network->network.mac_address);
829 	if (!pwlan)
830 		return;
831 
832 	pwlan->fixed = false;
833 
834 	if (check_fwstate(pmlmepriv, WIFI_ADHOC_MASTER_STATE) &&
835 	    (adapter->stapriv.asoc_sta_count == 1))
836 		rtw_free_network_nolock(adapter, pwlan);
837 }
838 
839 /* rtw_free_assoc_resources: the caller has to lock pmlmepriv->lock */
rtw_free_assoc_resources(struct adapter * adapter,int lock_scanned_queue)840 void rtw_free_assoc_resources(struct adapter *adapter, int lock_scanned_queue)
841 {
842 	struct	mlme_priv *pmlmepriv = &adapter->mlmepriv;
843 	struct wlan_network *tgt_network = &pmlmepriv->cur_network;
844 
845 	if (check_fwstate(pmlmepriv, WIFI_STATION_STATE | WIFI_AP_STATE)) {
846 		struct sta_info *psta;
847 
848 		psta = rtw_get_stainfo(&adapter->stapriv, tgt_network->network.mac_address);
849 		rtw_free_stainfo(adapter,  psta);
850 	}
851 
852 	if (check_fwstate(pmlmepriv, WIFI_ADHOC_STATE | WIFI_ADHOC_MASTER_STATE | WIFI_AP_STATE)) {
853 		struct sta_info *psta;
854 
855 		rtw_free_all_stainfo(adapter);
856 
857 		psta = rtw_get_bcmc_stainfo(adapter);
858 		rtw_free_stainfo(adapter, psta);
859 
860 		rtw_init_bcmc_stainfo(adapter);
861 	}
862 
863 	find_network(adapter);
864 
865 	if (lock_scanned_queue)
866 		adapter->securitypriv.key_mask = 0;
867 }
868 
869 /* rtw_indicate_connect: the caller has to lock pmlmepriv->lock */
rtw_indicate_connect(struct adapter * padapter)870 void rtw_indicate_connect(struct adapter *padapter)
871 {
872 	struct mlme_priv *pmlmepriv = &padapter->mlmepriv;
873 
874 	pmlmepriv->to_join = false;
875 
876 	if (!check_fwstate(&padapter->mlmepriv, _FW_LINKED)) {
877 		set_fwstate(pmlmepriv, _FW_LINKED);
878 
879 		if (check_fwstate(pmlmepriv, WIFI_ADHOC_MASTER_STATE) ||
880 		    check_fwstate(pmlmepriv, WIFI_ADHOC_STATE)) {
881 			rtw_cfg80211_ibss_indicate_connect(padapter);
882 		} else {
883 			rtw_cfg80211_indicate_connect(padapter);
884 		}
885 
886 		netif_carrier_on(padapter->pnetdev);
887 
888 		if (padapter->pid[2] != 0)
889 			rtw_signal_process(padapter->pid[2], SIGALRM);
890 	}
891 
892 	rtw_set_to_roam(padapter, 0);
893 	rtw_set_scan_deny(padapter, 3000);
894 }
895 
896 /* rtw_indicate_disconnect: the caller has to lock pmlmepriv->lock */
rtw_indicate_disconnect(struct adapter * padapter)897 void rtw_indicate_disconnect(struct adapter *padapter)
898 {
899 	struct	mlme_priv *pmlmepriv = &padapter->mlmepriv;
900 
901 	_clr_fwstate_(pmlmepriv, _FW_UNDER_LINKING | WIFI_UNDER_WPS);
902 
903 	if (rtw_to_roam(padapter) > 0)
904 		_clr_fwstate_(pmlmepriv, _FW_LINKED);
905 
906 	if (check_fwstate(&padapter->mlmepriv, _FW_LINKED) || rtw_to_roam(padapter) <= 0) {
907 		/*  Do it first for tx broadcast pkt after disconnection issue! */
908 		netif_carrier_off(padapter->pnetdev);
909 
910 		rtw_cfg80211_indicate_disconnect(padapter);
911 
912 		/* modify for CONFIG_IEEE80211W, none 11w also can use the same command */
913 		rtw_reset_securitypriv_cmd(padapter);
914 
915 		/* set ips_deny_time to avoid enter IPS before LPS leave */
916 		rtw_set_ips_deny(padapter, 3000);
917 
918 		_clr_fwstate_(pmlmepriv, _FW_LINKED);
919 
920 		rtw_clear_scan_deny(padapter);
921 	}
922 
923 	rtw_lps_ctrl_wk_cmd(padapter, LPS_CTRL_DISCONNECT, 1);
924 }
925 
rtw_indicate_scan_done(struct adapter * padapter,bool aborted)926 inline void rtw_indicate_scan_done(struct adapter *padapter, bool aborted)
927 {
928 	rtw_cfg80211_indicate_scan_done(padapter, aborted);
929 
930 	if ((!adapter_to_pwrctl(padapter)->bInSuspend) &&
931 	    (!check_fwstate(&padapter->mlmepriv,
932 			    WIFI_ASOC_STATE | WIFI_UNDER_LINKING))) {
933 		rtw_set_ips_deny(padapter, 0);
934 		_set_timer(&padapter->mlmepriv.dynamic_chk_timer, 1);
935 	}
936 }
937 
rtw_scan_abort(struct adapter * adapter)938 void rtw_scan_abort(struct adapter *adapter)
939 {
940 	unsigned long start;
941 	struct mlme_priv *pmlmepriv = &adapter->mlmepriv;
942 	struct mlme_ext_priv *pmlmeext = &adapter->mlmeextpriv;
943 
944 	start = jiffies;
945 	pmlmeext->scan_abort = true;
946 	while (check_fwstate(pmlmepriv, _FW_UNDER_SURVEY)
947 		&& jiffies_to_msecs(start) <= 200) {
948 		if (adapter->bDriverStopped || adapter->bSurpriseRemoved)
949 			break;
950 
951 		msleep(20);
952 	}
953 
954 	if (check_fwstate(pmlmepriv, _FW_UNDER_SURVEY))
955 		rtw_indicate_scan_done(adapter, true);
956 
957 	pmlmeext->scan_abort = false;
958 }
959 
rtw_joinbss_update_stainfo(struct adapter * padapter,struct wlan_network * pnetwork)960 static struct sta_info *rtw_joinbss_update_stainfo(struct adapter *padapter, struct wlan_network *pnetwork)
961 {
962 	int i;
963 	struct sta_info *bmc_sta, *psta = NULL;
964 	struct recv_reorder_ctrl *preorder_ctrl;
965 	struct sta_priv *pstapriv = &padapter->stapriv;
966 	struct mlme_ext_priv *pmlmeext = &padapter->mlmeextpriv;
967 
968 	psta = rtw_get_stainfo(pstapriv, pnetwork->network.mac_address);
969 	if (!psta)
970 		psta = rtw_alloc_stainfo(pstapriv, pnetwork->network.mac_address);
971 
972 	if (psta) { /* update ptarget_sta */
973 
974 		psta->aid  = pnetwork->join_res;
975 
976 		update_sta_info(padapter, psta);
977 
978 		/* update station supportRate */
979 		psta->bssratelen = rtw_get_rateset_len(pnetwork->network.supported_rates);
980 		memcpy(psta->bssrateset, pnetwork->network.supported_rates, psta->bssratelen);
981 		rtw_hal_update_sta_rate_mask(padapter, psta);
982 
983 		psta->wireless_mode = pmlmeext->cur_wireless_mode;
984 		psta->raid = networktype_to_raid_ex(padapter, psta);
985 
986 		/* sta mode */
987 		rtw_hal_set_odm_var(padapter, HAL_ODM_STA_INFO, psta, true);
988 
989 		/* security related */
990 		if (padapter->securitypriv.dot11AuthAlgrthm == dot11AuthAlgrthm_8021X) {
991 			padapter->securitypriv.binstallGrpkey = false;
992 			padapter->securitypriv.busetkipkey = false;
993 			padapter->securitypriv.bgrpkey_handshake = false;
994 
995 			psta->ieee8021x_blocked = true;
996 			psta->dot118021XPrivacy = padapter->securitypriv.dot11PrivacyAlgrthm;
997 
998 			memset((u8 *)&psta->dot118021x_UncstKey, 0, sizeof(union Keytype));
999 
1000 			memset((u8 *)&psta->dot11tkiprxmickey, 0, sizeof(union Keytype));
1001 			memset((u8 *)&psta->dot11tkiptxmickey, 0, sizeof(union Keytype));
1002 
1003 			memset((u8 *)&psta->dot11txpn, 0, sizeof(union pn48));
1004 			psta->dot11txpn.val = psta->dot11txpn.val + 1;
1005 			memset((u8 *)&psta->dot11wtxpn, 0, sizeof(union pn48));
1006 			memset((u8 *)&psta->dot11rxpn, 0, sizeof(union pn48));
1007 		}
1008 
1009 		/* When doing the WPS, the wps_ie_len won't equal to 0 */
1010 		/* And the Wi-Fi driver shouldn't allow the data packet to be transmitted. */
1011 		if (padapter->securitypriv.wps_ie_len != 0) {
1012 			psta->ieee8021x_blocked = true;
1013 			padapter->securitypriv.wps_ie_len = 0;
1014 		}
1015 
1016 		/* for A-MPDU Rx reordering buffer control for bmc_sta & sta_info */
1017 		/* if A-MPDU Rx is enabled, resetting  rx_ordering_ctrl wstart_b(indicate_seq) to default value = 0xffff */
1018 		/* todo: check if AP can send A-MPDU packets */
1019 		for (i = 0; i < 16 ; i++) {
1020 			preorder_ctrl = &psta->recvreorder_ctrl[i];
1021 			preorder_ctrl->enable = false;
1022 			preorder_ctrl->indicate_seq = 0xffff;
1023 			preorder_ctrl->wend_b = 0xffff;
1024 			preorder_ctrl->wsize_b = 64;/* max_ampdu_sz;ex. 32(kbytes) -> wsize_b =32 */
1025 		}
1026 
1027 		bmc_sta = rtw_get_bcmc_stainfo(padapter);
1028 		if (bmc_sta) {
1029 			for (i = 0; i < 16 ; i++) {
1030 				preorder_ctrl = &bmc_sta->recvreorder_ctrl[i];
1031 				preorder_ctrl->enable = false;
1032 				preorder_ctrl->indicate_seq = 0xffff;
1033 				preorder_ctrl->wend_b = 0xffff;
1034 				preorder_ctrl->wsize_b = 64;/* max_ampdu_sz;ex. 32(kbytes) -> wsize_b =32 */
1035 			}
1036 		}
1037 	}
1038 
1039 	return psta;
1040 }
1041 
1042 /* pnetwork : returns from rtw_joinbss_event_callback */
1043 /* ptarget_wlan: found from scanned_queue */
rtw_joinbss_update_network(struct adapter * padapter,struct wlan_network * ptarget_wlan,struct wlan_network * pnetwork)1044 static void rtw_joinbss_update_network(struct adapter *padapter, struct wlan_network *ptarget_wlan, struct wlan_network  *pnetwork)
1045 {
1046 	struct mlme_priv *pmlmepriv = &padapter->mlmepriv;
1047 	struct wlan_network  *cur_network = &pmlmepriv->cur_network;
1048 
1049 	/*  why not use ptarget_wlan?? */
1050 	memcpy(&cur_network->network, &pnetwork->network, pnetwork->network.length);
1051 	/*  some ies in pnetwork is wrong, so we should use ptarget_wlan ies */
1052 	cur_network->network.ie_length = ptarget_wlan->network.ie_length;
1053 	memcpy(&cur_network->network.ies[0], &ptarget_wlan->network.ies[0], MAX_IE_SZ);
1054 
1055 	cur_network->aid = pnetwork->join_res;
1056 
1057 	rtw_set_signal_stat_timer(&padapter->recvpriv);
1058 
1059 	padapter->recvpriv.signal_strength = ptarget_wlan->network.phy_info.signal_strength;
1060 	padapter->recvpriv.signal_qual = ptarget_wlan->network.phy_info.signal_quality;
1061 	/* the ptarget_wlan->network.rssi is raw data, we use ptarget_wlan->network.phy_info.signal_strength instead (has scaled) */
1062 	padapter->recvpriv.rssi = translate_percentage_to_dbm(ptarget_wlan->network.phy_info.signal_strength);
1063 
1064 	rtw_set_signal_stat_timer(&padapter->recvpriv);
1065 
1066 	/* update fw_state will clr _FW_UNDER_LINKING here indirectly */
1067 	switch (pnetwork->network.infrastructure_mode) {
1068 	case Ndis802_11Infrastructure:
1069 
1070 			if (pmlmepriv->fw_state & WIFI_UNDER_WPS)
1071 				pmlmepriv->fw_state = WIFI_STATION_STATE | WIFI_UNDER_WPS;
1072 			else
1073 				pmlmepriv->fw_state = WIFI_STATION_STATE;
1074 
1075 			break;
1076 	case Ndis802_11IBSS:
1077 			pmlmepriv->fw_state = WIFI_ADHOC_STATE;
1078 			break;
1079 	default:
1080 			pmlmepriv->fw_state = WIFI_NULL_STATE;
1081 			break;
1082 	}
1083 
1084 	rtw_update_protection(padapter, (cur_network->network.ies) + sizeof(struct ndis_802_11_fix_ie),
1085 									(cur_network->network.ie_length));
1086 
1087 	rtw_update_ht_cap(padapter, cur_network->network.ies, cur_network->network.ie_length, (u8) cur_network->network.configuration.ds_config);
1088 }
1089 
1090 static struct rt_pmkid_list   backupPMKIDList[NUM_PMKID_CACHE];
rtw_reset_securitypriv(struct adapter * adapter)1091 void rtw_reset_securitypriv(struct adapter *adapter)
1092 {
1093 	u8 backupPMKIDIndex = 0;
1094 	u8 backupTKIPCountermeasure = 0x00;
1095 	u32 backupTKIPcountermeasure_time = 0;
1096 	/*  add for CONFIG_IEEE80211W, none 11w also can use */
1097 	struct mlme_ext_priv *pmlmeext = &adapter->mlmeextpriv;
1098 
1099 	spin_lock_bh(&adapter->security_key_mutex);
1100 
1101 	if (adapter->securitypriv.dot11AuthAlgrthm == dot11AuthAlgrthm_8021X) {
1102 		/* 802.1x */
1103 		/*  Added by Albert 2009/02/18 */
1104 		/*  We have to backup the PMK information for WiFi PMK Caching test item. */
1105 		/*  */
1106 		/*  Backup the btkip_countermeasure information. */
1107 		/*  When the countermeasure is trigger, the driver have to disconnect with AP for 60 seconds. */
1108 
1109 		memcpy(&backupPMKIDList[0], &adapter->securitypriv.PMKIDList[0], sizeof(struct rt_pmkid_list) * NUM_PMKID_CACHE);
1110 		backupPMKIDIndex = adapter->securitypriv.PMKIDIndex;
1111 		backupTKIPCountermeasure = adapter->securitypriv.btkip_countermeasure;
1112 		backupTKIPcountermeasure_time = adapter->securitypriv.btkip_countermeasure_time;
1113 
1114 		/* reset RX BIP packet number */
1115 		pmlmeext->mgnt_80211w_IPN_rx = 0;
1116 
1117 		memset((unsigned char *)&adapter->securitypriv, 0, sizeof(struct security_priv));
1118 
1119 		/*  Added by Albert 2009/02/18 */
1120 		/*  Restore the PMK information to securitypriv structure for the following connection. */
1121 		memcpy(&adapter->securitypriv.PMKIDList[0], &backupPMKIDList[0], sizeof(struct rt_pmkid_list) * NUM_PMKID_CACHE);
1122 		adapter->securitypriv.PMKIDIndex = backupPMKIDIndex;
1123 		adapter->securitypriv.btkip_countermeasure = backupTKIPCountermeasure;
1124 		adapter->securitypriv.btkip_countermeasure_time = backupTKIPcountermeasure_time;
1125 
1126 		adapter->securitypriv.ndisauthtype = Ndis802_11AuthModeOpen;
1127 		adapter->securitypriv.ndisencryptstatus = Ndis802_11WEPDisabled;
1128 
1129 	} else {
1130 		/* reset values in securitypriv */
1131 		/* if (adapter->mlmepriv.fw_state & WIFI_STATION_STATE) */
1132 		/*  */
1133 		struct security_priv *psec_priv = &adapter->securitypriv;
1134 
1135 		psec_priv->dot11AuthAlgrthm = dot11AuthAlgrthm_Open;  /* open system */
1136 		psec_priv->dot11PrivacyAlgrthm = _NO_PRIVACY_;
1137 		psec_priv->dot11PrivacyKeyIndex = 0;
1138 
1139 		psec_priv->dot118021XGrpPrivacy = _NO_PRIVACY_;
1140 		psec_priv->dot118021XGrpKeyid = 1;
1141 
1142 		psec_priv->ndisauthtype = Ndis802_11AuthModeOpen;
1143 		psec_priv->ndisencryptstatus = Ndis802_11WEPDisabled;
1144 		/*  */
1145 	}
1146 	/*  add for CONFIG_IEEE80211W, none 11w also can use */
1147 	spin_unlock_bh(&adapter->security_key_mutex);
1148 }
1149 
1150 /* Notes: the function could be > passive_level (the same context as Rx tasklet) */
1151 /* pnetwork : returns from rtw_joinbss_event_callback */
1152 /* ptarget_wlan: found from scanned_queue */
1153 /* if join_res > 0, for (fw_state ==WIFI_STATION_STATE), we check if  "ptarget_sta" & "ptarget_wlan" exist. */
1154 /* if join_res > 0, for (fw_state ==WIFI_ADHOC_STATE), we only check if "ptarget_wlan" exist. */
1155 /* if join_res > 0, update "cur_network->network" from "pnetwork->network" if (ptarget_wlan != NULL). */
1156 /*  */
1157 /* define REJOIN */
rtw_joinbss_event_prehandle(struct adapter * adapter,u8 * pbuf)1158 void rtw_joinbss_event_prehandle(struct adapter *adapter, u8 *pbuf)
1159 {
1160 	static u8 __maybe_unused retry;
1161 	struct sta_info *ptarget_sta = NULL, *pcur_sta = NULL;
1162 	struct	sta_priv *pstapriv = &adapter->stapriv;
1163 	struct	mlme_priv *pmlmepriv = &adapter->mlmepriv;
1164 	struct wlan_network	*pnetwork	= (struct wlan_network *)pbuf;
1165 	struct wlan_network	*cur_network = &pmlmepriv->cur_network;
1166 	struct wlan_network	*pcur_wlan = NULL, *ptarget_wlan = NULL;
1167 	unsigned int		the_same_macaddr = false;
1168 
1169 	the_same_macaddr = !memcmp(pnetwork->network.mac_address, cur_network->network.mac_address, ETH_ALEN);
1170 
1171 	pnetwork->network.length = get_wlan_bssid_ex_sz(&pnetwork->network);
1172 	if (pnetwork->network.length > sizeof(struct wlan_bssid_ex))
1173 		return;
1174 
1175 	spin_lock_bh(&pmlmepriv->lock);
1176 
1177 	pmlmepriv->LinkDetectInfo.TrafficTransitionCount = 0;
1178 	pmlmepriv->LinkDetectInfo.LowPowerTransitionCount = 0;
1179 
1180 	if (pnetwork->join_res > 0) {
1181 		spin_lock_bh(&pmlmepriv->scanned_queue.lock);
1182 		retry = 0;
1183 		if (check_fwstate(pmlmepriv, _FW_UNDER_LINKING)) {
1184 			/* s1. find ptarget_wlan */
1185 			if (check_fwstate(pmlmepriv, _FW_LINKED)) {
1186 				if (the_same_macaddr) {
1187 					ptarget_wlan = rtw_find_network(&pmlmepriv->scanned_queue, cur_network->network.mac_address);
1188 				} else {
1189 					pcur_wlan = rtw_find_network(&pmlmepriv->scanned_queue, cur_network->network.mac_address);
1190 					if (pcur_wlan)
1191 						pcur_wlan->fixed = false;
1192 
1193 					pcur_sta = rtw_get_stainfo(pstapriv, cur_network->network.mac_address);
1194 					if (pcur_sta)
1195 						rtw_free_stainfo(adapter,  pcur_sta);
1196 
1197 					ptarget_wlan = rtw_find_network(&pmlmepriv->scanned_queue, pnetwork->network.mac_address);
1198 					if (check_fwstate(pmlmepriv, WIFI_STATION_STATE)) {
1199 						if (ptarget_wlan)
1200 							ptarget_wlan->fixed = true;
1201 					}
1202 				}
1203 
1204 			} else {
1205 				ptarget_wlan = _rtw_find_same_network(&pmlmepriv->scanned_queue, pnetwork);
1206 				if (check_fwstate(pmlmepriv, WIFI_STATION_STATE)) {
1207 					if (ptarget_wlan)
1208 						ptarget_wlan->fixed = true;
1209 				}
1210 			}
1211 
1212 			/* s2. update cur_network */
1213 			if (ptarget_wlan) {
1214 				rtw_joinbss_update_network(adapter, ptarget_wlan, pnetwork);
1215 			} else {
1216 				netdev_dbg(adapter->pnetdev,
1217 					   "Can't find ptarget_wlan when joinbss_event callback\n");
1218 				spin_unlock_bh(&pmlmepriv->scanned_queue.lock);
1219 				goto ignore_joinbss_callback;
1220 			}
1221 
1222 			/* s3. find ptarget_sta & update ptarget_sta after update cur_network only for station mode */
1223 			if (check_fwstate(pmlmepriv, WIFI_STATION_STATE)) {
1224 				ptarget_sta = rtw_joinbss_update_stainfo(adapter, pnetwork);
1225 				if (!ptarget_sta) {
1226 					spin_unlock_bh(&pmlmepriv->scanned_queue.lock);
1227 					goto ignore_joinbss_callback;
1228 				}
1229 			}
1230 
1231 			/* s4. indicate connect */
1232 			if (check_fwstate(pmlmepriv, WIFI_STATION_STATE)) {
1233 				pmlmepriv->cur_network_scanned = ptarget_wlan;
1234 				rtw_indicate_connect(adapter);
1235 			}
1236 
1237 			spin_unlock_bh(&pmlmepriv->scanned_queue.lock);
1238 
1239 			spin_unlock_bh(&pmlmepriv->lock);
1240 			/* s5. Cancel assoc_timer */
1241 			timer_delete_sync(&pmlmepriv->assoc_timer);
1242 			spin_lock_bh(&pmlmepriv->lock);
1243 		} else {
1244 			spin_unlock_bh(&pmlmepriv->scanned_queue.lock);
1245 		}
1246 	} else if (pnetwork->join_res == -4) {
1247 		rtw_reset_securitypriv(adapter);
1248 		_set_timer(&pmlmepriv->assoc_timer, 1);
1249 
1250 		if (check_fwstate(pmlmepriv, _FW_UNDER_LINKING))
1251 			_clr_fwstate_(pmlmepriv, _FW_UNDER_LINKING);
1252 
1253 	} else {/* if join_res < 0 (join fails), then try again */
1254 
1255 		#ifdef REJOIN
1256 		res = _FAIL;
1257 		if (retry < 2)
1258 			res = rtw_select_and_join_from_scanned_queue(pmlmepriv);
1259 
1260 		if (res == _SUCCESS) {
1261 			/* extend time of assoc_timer */
1262 			_set_timer(&pmlmepriv->assoc_timer, MAX_JOIN_TIMEOUT);
1263 			retry++;
1264 		} else if (res == 2) {/* there is no need to wait for join */
1265 			_clr_fwstate_(pmlmepriv, _FW_UNDER_LINKING);
1266 			rtw_indicate_connect(adapter);
1267 		} else {
1268 		#endif
1269 
1270 			_set_timer(&pmlmepriv->assoc_timer, 1);
1271 			_clr_fwstate_(pmlmepriv, _FW_UNDER_LINKING);
1272 
1273 		#ifdef REJOIN
1274 			retry = 0;
1275 		}
1276 		#endif
1277 	}
1278 
1279 ignore_joinbss_callback:
1280 
1281 	spin_unlock_bh(&pmlmepriv->lock);
1282 }
1283 
rtw_joinbss_event_callback(struct adapter * adapter,u8 * pbuf)1284 void rtw_joinbss_event_callback(struct adapter *adapter, u8 *pbuf)
1285 {
1286 	struct wlan_network	*pnetwork	= (struct wlan_network *)pbuf;
1287 
1288 	mlmeext_joinbss_event_callback(adapter, pnetwork->join_res);
1289 
1290 	rtw_os_xmit_schedule(adapter);
1291 }
1292 
1293 /* FOR STA, AP , AD-HOC mode */
rtw_sta_media_status_rpt(struct adapter * adapter,struct sta_info * psta,u32 mstatus)1294 void rtw_sta_media_status_rpt(struct adapter *adapter, struct sta_info *psta, u32 mstatus)
1295 {
1296 	u16 media_status_rpt;
1297 
1298 	if (!psta)
1299 		return;
1300 
1301 	media_status_rpt = (u16)((psta->mac_id << 8) | mstatus); /*   MACID|OPMODE:1 connect */
1302 	rtw_hal_set_hwreg(adapter, HW_VAR_H2C_MEDIA_STATUS_RPT, (u8 *)&media_status_rpt);
1303 }
1304 
rtw_stassoc_event_callback(struct adapter * adapter,u8 * pbuf)1305 void rtw_stassoc_event_callback(struct adapter *adapter, u8 *pbuf)
1306 {
1307 	struct sta_info *psta;
1308 	struct mlme_priv *pmlmepriv = &adapter->mlmepriv;
1309 	struct stassoc_event	*pstassoc	= (struct stassoc_event *)pbuf;
1310 	struct wlan_network	*cur_network = &pmlmepriv->cur_network;
1311 	struct wlan_network	*ptarget_wlan = NULL;
1312 
1313 	if (rtw_access_ctrl(adapter, pstassoc->macaddr) == false)
1314 		return;
1315 
1316 	if (check_fwstate(pmlmepriv, WIFI_AP_STATE)) {
1317 		psta = rtw_get_stainfo(&adapter->stapriv, pstassoc->macaddr);
1318 		if (psta) {
1319 			u8 *passoc_req = NULL;
1320 			u32 assoc_req_len = 0;
1321 
1322 			rtw_sta_media_status_rpt(adapter, psta, 1);
1323 
1324 			ap_sta_info_defer_update(adapter, psta);
1325 
1326 			/* report to upper layer */
1327 			spin_lock_bh(&psta->lock);
1328 			if (psta->passoc_req && psta->assoc_req_len > 0) {
1329 				passoc_req = kmemdup(psta->passoc_req, psta->assoc_req_len, GFP_ATOMIC);
1330 				if (passoc_req) {
1331 					assoc_req_len = psta->assoc_req_len;
1332 
1333 					kfree(psta->passoc_req);
1334 					psta->passoc_req = NULL;
1335 					psta->assoc_req_len = 0;
1336 				}
1337 			}
1338 			spin_unlock_bh(&psta->lock);
1339 
1340 			if (passoc_req && assoc_req_len > 0) {
1341 				rtw_cfg80211_indicate_sta_assoc(adapter, passoc_req, assoc_req_len);
1342 
1343 				kfree(passoc_req);
1344 			}
1345 		}
1346 		return;
1347 	}
1348 
1349 	/* for AD-HOC mode */
1350 	psta = rtw_get_stainfo(&adapter->stapriv, pstassoc->macaddr);
1351 	if (psta) {
1352 		/* the sta have been in sta_info_queue => do nothing */
1353 
1354 		return; /* between drv has received this event before and  fw have not yet to set key to CAM_ENTRY) */
1355 	}
1356 
1357 	psta = rtw_alloc_stainfo(&adapter->stapriv, pstassoc->macaddr);
1358 	if (!psta)
1359 		return;
1360 
1361 	/* to do : init sta_info variable */
1362 	psta->qos_option = 0;
1363 	psta->mac_id = (uint)pstassoc->cam_id;
1364 
1365 	/* for ad-hoc mode */
1366 	rtw_hal_set_odm_var(adapter, HAL_ODM_STA_INFO, psta, true);
1367 
1368 	rtw_sta_media_status_rpt(adapter, psta, 1);
1369 
1370 	if (adapter->securitypriv.dot11AuthAlgrthm == dot11AuthAlgrthm_8021X)
1371 		psta->dot118021XPrivacy = adapter->securitypriv.dot11PrivacyAlgrthm;
1372 
1373 	psta->ieee8021x_blocked = false;
1374 
1375 	spin_lock_bh(&pmlmepriv->lock);
1376 
1377 	if (check_fwstate(pmlmepriv, WIFI_ADHOC_MASTER_STATE) ||
1378 	    check_fwstate(pmlmepriv, WIFI_ADHOC_STATE)) {
1379 		if (adapter->stapriv.asoc_sta_count == 2) {
1380 			spin_lock_bh(&pmlmepriv->scanned_queue.lock);
1381 			ptarget_wlan = rtw_find_network(&pmlmepriv->scanned_queue, cur_network->network.mac_address);
1382 			pmlmepriv->cur_network_scanned = ptarget_wlan;
1383 			if (ptarget_wlan)
1384 				ptarget_wlan->fixed = true;
1385 			spin_unlock_bh(&pmlmepriv->scanned_queue.lock);
1386 			/*  a sta + bc/mc_stainfo (not Ibss_stainfo) */
1387 			rtw_indicate_connect(adapter);
1388 		}
1389 	}
1390 
1391 	spin_unlock_bh(&pmlmepriv->lock);
1392 
1393 	mlmeext_sta_add_event_callback(adapter, psta);
1394 }
1395 
rtw_stadel_event_callback(struct adapter * adapter,u8 * pbuf)1396 void rtw_stadel_event_callback(struct adapter *adapter, u8 *pbuf)
1397 {
1398 	int mac_id = (-1);
1399 	struct sta_info *psta;
1400 	struct wlan_network *pwlan = NULL;
1401 	struct wlan_bssid_ex    *pdev_network = NULL;
1402 	u8 *pibss = NULL;
1403 	struct	mlme_priv *pmlmepriv = &adapter->mlmepriv;
1404 	struct	stadel_event *pstadel	= (struct stadel_event *)pbuf;
1405 	struct wlan_network *tgt_network = &pmlmepriv->cur_network;
1406 	struct mlme_ext_priv *pmlmeext = &adapter->mlmeextpriv;
1407 	struct mlme_ext_info *pmlmeinfo = &pmlmeext->mlmext_info;
1408 
1409 	psta = rtw_get_stainfo(&adapter->stapriv, pstadel->macaddr);
1410 	if (psta)
1411 		mac_id = psta->mac_id;
1412 	else
1413 		mac_id = pstadel->mac_id;
1414 
1415 	if (mac_id >= 0) {
1416 		u16 media_status;
1417 
1418 		media_status = (mac_id << 8) | 0; /*   MACID|OPMODE:0 means disconnect */
1419 		/* for STA, AP, ADHOC mode, report disconnect stauts to FW */
1420 		rtw_hal_set_hwreg(adapter, HW_VAR_H2C_MEDIA_STATUS_RPT, (u8 *)&media_status);
1421 	}
1422 
1423 	/* if (check_fwstate(pmlmepriv, WIFI_AP_STATE)) */
1424 	if ((pmlmeinfo->state & 0x03) == WIFI_FW_AP_STATE)
1425 		return;
1426 
1427 	mlmeext_sta_del_event_callback(adapter);
1428 
1429 	spin_lock_bh(&pmlmepriv->lock);
1430 
1431 	if (check_fwstate(pmlmepriv, WIFI_STATION_STATE)) {
1432 		u16 reason = *((unsigned short *)(pstadel->rsvd));
1433 		bool roam = false;
1434 		struct wlan_network *roam_target = NULL;
1435 
1436 		if (adapter->registrypriv.wifi_spec == 1) {
1437 			roam = false;
1438 		} else if (reason == WLAN_REASON_EXPIRATION_CHK && rtw_chk_roam_flags(adapter, RTW_ROAM_ON_EXPIRED)) {
1439 			roam = true;
1440 		} else if (reason == WLAN_REASON_ACTIVE_ROAM && rtw_chk_roam_flags(adapter, RTW_ROAM_ACTIVE)) {
1441 			roam = true;
1442 			roam_target = pmlmepriv->roam_network;
1443 		}
1444 
1445 		if (roam) {
1446 			if (rtw_to_roam(adapter) > 0)
1447 				rtw_dec_to_roam(adapter); /* this stadel_event is caused by roaming, decrease to_roam */
1448 			else if (rtw_to_roam(adapter) == 0)
1449 				rtw_set_to_roam(adapter, adapter->registrypriv.max_roaming_times);
1450 		} else {
1451 			rtw_set_to_roam(adapter, 0);
1452 		}
1453 
1454 		rtw_free_uc_swdec_pending_queue(adapter);
1455 
1456 		rtw_free_assoc_resources(adapter, 1);
1457 		rtw_indicate_disconnect(adapter);
1458 
1459 		spin_lock_bh(&pmlmepriv->scanned_queue.lock);
1460 		/*  remove the network entry in scanned_queue */
1461 		pwlan = rtw_find_network(&pmlmepriv->scanned_queue, tgt_network->network.mac_address);
1462 		if (pwlan) {
1463 			pwlan->fixed = false;
1464 			rtw_free_network_nolock(adapter, pwlan);
1465 		}
1466 		spin_unlock_bh(&pmlmepriv->scanned_queue.lock);
1467 
1468 		_rtw_roaming(adapter, roam_target);
1469 	}
1470 
1471 	if (check_fwstate(pmlmepriv, WIFI_ADHOC_MASTER_STATE) ||
1472 	      check_fwstate(pmlmepriv, WIFI_ADHOC_STATE)) {
1473 		rtw_free_stainfo(adapter,  psta);
1474 
1475 		if (adapter->stapriv.asoc_sta_count == 1) {/* a sta + bc/mc_stainfo (not Ibss_stainfo) */
1476 			u8 ret = _SUCCESS;
1477 
1478 			spin_lock_bh(&pmlmepriv->scanned_queue.lock);
1479 			/* free old ibss network */
1480 			pwlan = rtw_find_network(&pmlmepriv->scanned_queue, tgt_network->network.mac_address);
1481 			if (pwlan) {
1482 				pwlan->fixed = false;
1483 				rtw_free_network_nolock(adapter, pwlan);
1484 			}
1485 			spin_unlock_bh(&pmlmepriv->scanned_queue.lock);
1486 			/* re-create ibss */
1487 			pdev_network = &adapter->registrypriv.dev_network;
1488 			pibss = adapter->registrypriv.dev_network.mac_address;
1489 
1490 			memcpy(pdev_network, &tgt_network->network, get_wlan_bssid_ex_sz(&tgt_network->network));
1491 
1492 			memcpy(&pdev_network->ssid, &pmlmepriv->assoc_ssid, sizeof(struct ndis_802_11_ssid));
1493 
1494 			rtw_update_registrypriv_dev_network(adapter);
1495 
1496 			rtw_generate_random_ibss(pibss);
1497 
1498 			if (check_fwstate(pmlmepriv, WIFI_ADHOC_STATE)) {
1499 				set_fwstate(pmlmepriv, WIFI_ADHOC_MASTER_STATE);
1500 				_clr_fwstate_(pmlmepriv, WIFI_ADHOC_STATE);
1501 			}
1502 
1503 			ret = rtw_createbss_cmd(adapter);
1504 			if (ret != _SUCCESS)
1505 				goto unlock;
1506 		}
1507 	}
1508 
1509 unlock:
1510 	spin_unlock_bh(&pmlmepriv->lock);
1511 }
1512 
rtw_cpwm_event_callback(struct adapter * padapter,u8 * pbuf)1513 void rtw_cpwm_event_callback(struct adapter *padapter, u8 *pbuf)
1514 {
1515 	struct reportpwrstate_parm *preportpwrstate;
1516 
1517 	preportpwrstate = (struct reportpwrstate_parm *)pbuf;
1518 	preportpwrstate->state |= (u8)(adapter_to_pwrctl(padapter)->cpwm_tog + 0x80);
1519 	cpwm_int_hdl(padapter, preportpwrstate);
1520 }
1521 
rtw_wmm_event_callback(struct adapter * padapter,u8 * pbuf)1522 void rtw_wmm_event_callback(struct adapter *padapter, u8 *pbuf)
1523 {
1524 	WMMOnAssocRsp(padapter);
1525 }
1526 
1527 /*
1528  * _rtw_join_timeout_handler - Timeout/failure handler for CMD JoinBss
1529  * @adapter: pointer to struct adapter structure
1530  */
_rtw_join_timeout_handler(struct timer_list * t)1531 void _rtw_join_timeout_handler(struct timer_list *t)
1532 {
1533 	struct adapter *adapter = timer_container_of(adapter, t,
1534 						     mlmepriv.assoc_timer);
1535 	struct	mlme_priv *pmlmepriv = &adapter->mlmepriv;
1536 
1537 	if (adapter->bDriverStopped || adapter->bSurpriseRemoved)
1538 		return;
1539 
1540 	spin_lock_bh(&pmlmepriv->lock);
1541 
1542 	if (rtw_to_roam(adapter) > 0) { /* join timeout caused by roaming */
1543 		while (1) {
1544 			rtw_dec_to_roam(adapter);
1545 			if (rtw_to_roam(adapter) != 0) { /* try another */
1546 				int do_join_r;
1547 
1548 				do_join_r = rtw_do_join(adapter);
1549 				if (do_join_r != _SUCCESS)
1550 					continue;
1551 
1552 				break;
1553 			}
1554 
1555 			rtw_indicate_disconnect(adapter);
1556 			break;
1557 		}
1558 
1559 	} else {
1560 		rtw_indicate_disconnect(adapter);
1561 		free_scanqueue(pmlmepriv);/*  */
1562 
1563 		/* indicate disconnect for the case that join_timeout and check_fwstate != FW_LINKED */
1564 		rtw_cfg80211_indicate_disconnect(adapter);
1565 	}
1566 
1567 	spin_unlock_bh(&pmlmepriv->lock);
1568 }
1569 
1570 /*
1571  * rtw_scan_timeout_handler - Timeout/Failure handler for CMD SiteSurvey
1572  * @adapter: pointer to struct adapter structure
1573  */
rtw_scan_timeout_handler(struct timer_list * t)1574 void rtw_scan_timeout_handler(struct timer_list *t)
1575 {
1576 	struct adapter *adapter = timer_container_of(adapter, t,
1577 						     mlmepriv.scan_to_timer);
1578 	struct	mlme_priv *pmlmepriv = &adapter->mlmepriv;
1579 
1580 	spin_lock_bh(&pmlmepriv->lock);
1581 
1582 	_clr_fwstate_(pmlmepriv, _FW_UNDER_SURVEY);
1583 
1584 	spin_unlock_bh(&pmlmepriv->lock);
1585 
1586 	rtw_indicate_scan_done(adapter, true);
1587 }
1588 
rtw_mlme_reset_auto_scan_int(struct adapter * adapter)1589 void rtw_mlme_reset_auto_scan_int(struct adapter *adapter)
1590 {
1591 	struct mlme_priv *mlme = &adapter->mlmepriv;
1592 	struct mlme_ext_priv *pmlmeext = &adapter->mlmeextpriv;
1593 	struct mlme_ext_info *pmlmeinfo = &pmlmeext->mlmext_info;
1594 
1595 	if (pmlmeinfo->VHT_enable) /* disable auto scan when connect to 11AC AP */
1596 		mlme->auto_scan_int_ms = 0;
1597 	else if (adapter->registrypriv.wifi_spec && is_client_associated_to_ap(adapter) == true)
1598 		mlme->auto_scan_int_ms = 60 * 1000;
1599 	else if (rtw_chk_roam_flags(adapter, RTW_ROAM_ACTIVE)) {
1600 		if (check_fwstate(mlme, WIFI_STATION_STATE) && check_fwstate(mlme, _FW_LINKED))
1601 			mlme->auto_scan_int_ms = mlme->roam_scan_int_ms;
1602 	} else
1603 		mlme->auto_scan_int_ms = 0; /* disabled */
1604 }
1605 
rtw_auto_scan_handler(struct adapter * padapter)1606 static void rtw_auto_scan_handler(struct adapter *padapter)
1607 {
1608 	struct mlme_priv *pmlmepriv = &padapter->mlmepriv;
1609 
1610 	rtw_mlme_reset_auto_scan_int(padapter);
1611 
1612 	if (pmlmepriv->auto_scan_int_ms != 0
1613 		&& jiffies_to_msecs(jiffies - pmlmepriv->scan_start_time) > pmlmepriv->auto_scan_int_ms) {
1614 		if (!padapter->registrypriv.wifi_spec) {
1615 			if (check_fwstate(pmlmepriv, _FW_UNDER_SURVEY | _FW_UNDER_LINKING))
1616 				goto exit;
1617 
1618 			if (pmlmepriv->LinkDetectInfo.bBusyTraffic)
1619 				goto exit;
1620 		}
1621 
1622 		rtw_set_802_11_bssid_list_scan(padapter, NULL, 0);
1623 	}
1624 
1625 exit:
1626 	return;
1627 }
1628 
rtw_dynamic_check_timer_handler(struct adapter * adapter)1629 void rtw_dynamic_check_timer_handler(struct adapter *adapter)
1630 {
1631 	if (!adapter)
1632 		return;
1633 
1634 	if (!adapter->hw_init_completed)
1635 		return;
1636 
1637 	if (adapter->bDriverStopped || adapter->bSurpriseRemoved)
1638 		return;
1639 
1640 	if (adapter->net_closed)
1641 		return;
1642 
1643 	if ((adapter_to_pwrctl(adapter)->fw_current_in_ps_mode)
1644 		&& !(hal_btcoex_IsBtControlLps(adapter))
1645 		) {
1646 		u8 bEnterPS;
1647 
1648 		linked_status_chk(adapter);
1649 
1650 		bEnterPS = traffic_status_watchdog(adapter, 1);
1651 		if (bEnterPS) {
1652 			/* rtw_lps_ctrl_wk_cmd(adapter, LPS_CTRL_ENTER, 1); */
1653 			rtw_hal_dm_watchdog_in_lps(adapter);
1654 		} else {
1655 			/* call rtw_lps_ctrl_wk_cmd(padapter, LPS_CTRL_LEAVE, 1) in traffic_status_watchdog() */
1656 		}
1657 
1658 	} else {
1659 		rtw_dynamic_chk_wk_cmd(adapter);
1660 	}
1661 
1662 	/* auto site survey */
1663 	rtw_auto_scan_handler(adapter);
1664 }
1665 
rtw_is_scan_deny(struct adapter * adapter)1666 inline bool rtw_is_scan_deny(struct adapter *adapter)
1667 {
1668 	struct mlme_priv *mlmepriv = &adapter->mlmepriv;
1669 
1670 	return (atomic_read(&mlmepriv->set_scan_deny) != 0) ? true : false;
1671 }
1672 
rtw_clear_scan_deny(struct adapter * adapter)1673 inline void rtw_clear_scan_deny(struct adapter *adapter)
1674 {
1675 	struct mlme_priv *mlmepriv = &adapter->mlmepriv;
1676 
1677 	atomic_set(&mlmepriv->set_scan_deny, 0);
1678 }
1679 
rtw_set_scan_deny(struct adapter * adapter,u32 ms)1680 void rtw_set_scan_deny(struct adapter *adapter, u32 ms)
1681 {
1682 	struct mlme_priv *mlmepriv = &adapter->mlmepriv;
1683 
1684 	atomic_set(&mlmepriv->set_scan_deny, 1);
1685 	_set_timer(&mlmepriv->set_scan_deny_timer, ms);
1686 }
1687 
1688 /*
1689  * Select a new roaming candidate from the original @param candidate and @param competitor
1690  * @return true: candidate is updated
1691  * @return false: candidate is not updated
1692  */
rtw_check_roaming_candidate(struct mlme_priv * mlme,struct wlan_network ** candidate,struct wlan_network * competitor)1693 static int rtw_check_roaming_candidate(struct mlme_priv *mlme
1694 	, struct wlan_network **candidate, struct wlan_network *competitor)
1695 {
1696 	int updated = false;
1697 	struct adapter *adapter = container_of(mlme, struct adapter, mlmepriv);
1698 
1699 	if (is_same_ess(&competitor->network, &mlme->cur_network.network) == false)
1700 		goto exit;
1701 
1702 	if (rtw_is_desired_network(adapter, competitor) == false)
1703 		goto exit;
1704 
1705 	/* got specific addr to roam */
1706 	if (!is_zero_mac_addr(mlme->roam_tgt_addr)) {
1707 		if (!memcmp(mlme->roam_tgt_addr, competitor->network.mac_address, ETH_ALEN))
1708 			goto update;
1709 		else
1710 			goto exit;
1711 	}
1712 	if (jiffies_to_msecs(jiffies - competitor->last_scanned) >= mlme->roam_scanr_exp_ms)
1713 		goto exit;
1714 
1715 	if (competitor->network.rssi - mlme->cur_network_scanned->network.rssi < mlme->roam_rssi_diff_th)
1716 		goto exit;
1717 
1718 	if (*candidate && (*candidate)->network.rssi >= competitor->network.rssi)
1719 		goto exit;
1720 
1721 update:
1722 	*candidate = competitor;
1723 	updated = true;
1724 
1725 exit:
1726 	return updated;
1727 }
1728 
rtw_select_roaming_candidate(struct mlme_priv * mlme)1729 int rtw_select_roaming_candidate(struct mlme_priv *mlme)
1730 {
1731 	int ret = _FAIL;
1732 	struct list_head	*phead;
1733 	struct __queue	*queue	= &mlme->scanned_queue;
1734 	struct	wlan_network	*pnetwork = NULL;
1735 	struct	wlan_network	*candidate = NULL;
1736 
1737 	if (!mlme->cur_network_scanned) {
1738 		rtw_warn_on(1);
1739 		return ret;
1740 	}
1741 
1742 	spin_lock_bh(&mlme->scanned_queue.lock);
1743 	phead = get_list_head(queue);
1744 
1745 	list_for_each(mlme->pscanned, phead) {
1746 		pnetwork = list_entry(mlme->pscanned, struct wlan_network,
1747 				      list);
1748 
1749 		rtw_check_roaming_candidate(mlme, &candidate, pnetwork);
1750 	}
1751 
1752 	if (!candidate) {
1753 		ret = _FAIL;
1754 		goto exit;
1755 	} else {
1756 		mlme->roam_network = candidate;
1757 
1758 		if (!memcmp(candidate->network.mac_address, mlme->roam_tgt_addr, ETH_ALEN))
1759 			eth_zero_addr(mlme->roam_tgt_addr);
1760 	}
1761 
1762 	ret = _SUCCESS;
1763 exit:
1764 	spin_unlock_bh(&mlme->scanned_queue.lock);
1765 
1766 	return ret;
1767 }
1768 
1769 /*
1770  * Select a new join candidate from the original @param candidate and @param competitor
1771  * @return true: candidate is updated
1772  * @return false: candidate is not updated
1773  */
rtw_check_join_candidate(struct mlme_priv * mlme,struct wlan_network ** candidate,struct wlan_network * competitor)1774 static int rtw_check_join_candidate(struct mlme_priv *mlme
1775 	, struct wlan_network **candidate, struct wlan_network *competitor)
1776 {
1777 	int updated = false;
1778 	struct adapter *adapter = container_of(mlme, struct adapter, mlmepriv);
1779 
1780 	/* check bssid, if needed */
1781 	if (mlme->assoc_by_bssid) {
1782 		if (memcmp(competitor->network.mac_address, mlme->assoc_bssid, ETH_ALEN))
1783 			goto exit;
1784 	}
1785 
1786 	/* check ssid, if needed */
1787 	if (mlme->assoc_ssid.ssid[0] && mlme->assoc_ssid.ssid_length) {
1788 		if (competitor->network.ssid.ssid_length != mlme->assoc_ssid.ssid_length
1789 			|| memcmp(competitor->network.ssid.ssid, mlme->assoc_ssid.ssid, mlme->assoc_ssid.ssid_length)
1790 		)
1791 			goto exit;
1792 	}
1793 
1794 	if (rtw_is_desired_network(adapter, competitor)  == false)
1795 		goto exit;
1796 
1797 	if (rtw_to_roam(adapter) > 0) {
1798 		if (jiffies_to_msecs(jiffies - competitor->last_scanned) >= mlme->roam_scanr_exp_ms
1799 			|| is_same_ess(&competitor->network, &mlme->cur_network.network) == false
1800 		)
1801 			goto exit;
1802 	}
1803 
1804 	if (!*candidate || (*candidate)->network.rssi < competitor->network.rssi) {
1805 		*candidate = competitor;
1806 		updated = true;
1807 	}
1808 
1809 exit:
1810 	return updated;
1811 }
1812 
1813 /*
1814  * Calling context:
1815  * The caller of the sub-routine will be in critical section...
1816  * The caller must hold the following spinlock
1817  * pmlmepriv->lock
1818  */
1819 
rtw_select_and_join_from_scanned_queue(struct mlme_priv * pmlmepriv)1820 int rtw_select_and_join_from_scanned_queue(struct mlme_priv *pmlmepriv)
1821 {
1822 	int ret;
1823 	struct list_head	*phead;
1824 	struct adapter *adapter;
1825 	struct __queue	*queue	= &pmlmepriv->scanned_queue;
1826 	struct	wlan_network	*pnetwork = NULL;
1827 	struct	wlan_network	*candidate = NULL;
1828 
1829 	adapter = (struct adapter *)pmlmepriv->nic_hdl;
1830 
1831 	spin_lock_bh(&pmlmepriv->scanned_queue.lock);
1832 
1833 	if (pmlmepriv->roam_network) {
1834 		candidate = pmlmepriv->roam_network;
1835 		pmlmepriv->roam_network = NULL;
1836 		goto candidate_exist;
1837 	}
1838 
1839 	phead = get_list_head(queue);
1840 	list_for_each(pmlmepriv->pscanned, phead) {
1841 		pnetwork = list_entry(pmlmepriv->pscanned,
1842 				      struct wlan_network, list);
1843 
1844 		rtw_check_join_candidate(pmlmepriv, &candidate, pnetwork);
1845 	}
1846 
1847 	if (!candidate) {
1848 		ret = _FAIL;
1849 		goto exit;
1850 	} else {
1851 		goto candidate_exist;
1852 	}
1853 
1854 candidate_exist:
1855 
1856 	/*  check for situation of  _FW_LINKED */
1857 	if (check_fwstate(pmlmepriv, _FW_LINKED)) {
1858 		rtw_disassoc_cmd(adapter, 0, true);
1859 		rtw_indicate_disconnect(adapter);
1860 		rtw_free_assoc_resources(adapter, 0);
1861 	}
1862 
1863 	set_fwstate(pmlmepriv, _FW_UNDER_LINKING);
1864 	ret = rtw_joinbss_cmd(adapter, candidate);
1865 
1866 exit:
1867 	spin_unlock_bh(&pmlmepriv->scanned_queue.lock);
1868 	return ret;
1869 }
1870 
rtw_set_auth(struct adapter * adapter,struct security_priv * psecuritypriv)1871 signed int rtw_set_auth(struct adapter *adapter, struct security_priv *psecuritypriv)
1872 {
1873 	struct	cmd_obj *pcmd;
1874 	struct	setauth_parm *psetauthparm;
1875 	struct	cmd_priv *pcmdpriv = &adapter->cmdpriv;
1876 	signed int		res = _SUCCESS;
1877 
1878 	pcmd = kzalloc_obj(*pcmd);
1879 	if (!pcmd) {
1880 		res = _FAIL;  /* try again */
1881 		goto exit;
1882 	}
1883 
1884 	psetauthparm = kzalloc_obj(*psetauthparm);
1885 	if (!psetauthparm) {
1886 		kfree(pcmd);
1887 		res = _FAIL;
1888 		goto exit;
1889 	}
1890 
1891 	psetauthparm->mode = (unsigned char)psecuritypriv->dot11AuthAlgrthm;
1892 
1893 	pcmd->cmdcode = _SetAuth_CMD_;
1894 	pcmd->parmbuf = (unsigned char *)psetauthparm;
1895 	pcmd->cmdsz =  (sizeof(struct setauth_parm));
1896 	pcmd->rsp = NULL;
1897 	pcmd->rspsz = 0;
1898 
1899 	INIT_LIST_HEAD(&pcmd->list);
1900 
1901 	res = rtw_enqueue_cmd(pcmdpriv, pcmd);
1902 
1903 exit:
1904 	return res;
1905 }
1906 
rtw_set_key(struct adapter * adapter,struct security_priv * psecuritypriv,signed int keyid,u8 set_tx,bool enqueue)1907 signed int rtw_set_key(struct adapter *adapter, struct security_priv *psecuritypriv, signed int keyid, u8 set_tx, bool enqueue)
1908 {
1909 	u8 keylen;
1910 	struct cmd_obj *pcmd;
1911 	struct setkey_parm	*psetkeyparm;
1912 	struct cmd_priv *pcmdpriv = &adapter->cmdpriv;
1913 	signed int	res = _SUCCESS;
1914 
1915 	psetkeyparm = kzalloc_obj(*psetkeyparm);
1916 	if (!psetkeyparm) {
1917 		res = _FAIL;
1918 		goto exit;
1919 	}
1920 
1921 	if (psecuritypriv->dot11AuthAlgrthm == dot11AuthAlgrthm_8021X)
1922 		psetkeyparm->algorithm = (unsigned char)psecuritypriv->dot118021XGrpPrivacy;
1923 	else
1924 		psetkeyparm->algorithm = (u8)psecuritypriv->dot11PrivacyAlgrthm;
1925 
1926 	psetkeyparm->keyid = (u8)keyid;/* 0~3 */
1927 	psetkeyparm->set_tx = set_tx;
1928 	if (is_wep_enc(psetkeyparm->algorithm))
1929 		adapter->securitypriv.key_mask |= BIT(psetkeyparm->keyid);
1930 
1931 	switch (psetkeyparm->algorithm) {
1932 	case _WEP40_:
1933 		keylen = 5;
1934 		memcpy(&psetkeyparm->key[0], &psecuritypriv->dot11DefKey[keyid].skey[0], keylen);
1935 		break;
1936 	case _WEP104_:
1937 		keylen = 13;
1938 		memcpy(&psetkeyparm->key[0], &psecuritypriv->dot11DefKey[keyid].skey[0], keylen);
1939 		break;
1940 	case _TKIP_:
1941 		keylen = 16;
1942 		memcpy(&psetkeyparm->key, &psecuritypriv->dot118021XGrpKey[keyid], keylen);
1943 		psetkeyparm->grpkey = 1;
1944 		break;
1945 	case _AES_:
1946 		keylen = 16;
1947 		memcpy(&psetkeyparm->key, &psecuritypriv->dot118021XGrpKey[keyid], keylen);
1948 		psetkeyparm->grpkey = 1;
1949 		break;
1950 	default:
1951 		res = _FAIL;
1952 		kfree(psetkeyparm);
1953 		goto exit;
1954 	}
1955 
1956 	if (enqueue) {
1957 		pcmd = kzalloc_obj(*pcmd);
1958 		if (!pcmd) {
1959 			kfree(psetkeyparm);
1960 			res = _FAIL;  /* try again */
1961 			goto exit;
1962 		}
1963 
1964 		pcmd->cmdcode = _SetKey_CMD_;
1965 		pcmd->parmbuf = (u8 *)psetkeyparm;
1966 		pcmd->cmdsz =  (sizeof(struct setkey_parm));
1967 		pcmd->rsp = NULL;
1968 		pcmd->rspsz = 0;
1969 
1970 		INIT_LIST_HEAD(&pcmd->list);
1971 
1972 		res = rtw_enqueue_cmd(pcmdpriv, pcmd);
1973 	} else {
1974 		setkey_hdl(adapter, (u8 *)psetkeyparm);
1975 		kfree(psetkeyparm);
1976 	}
1977 exit:
1978 	return res;
1979 }
1980 
1981 /* adjust ies for rtw_joinbss_cmd in WMM */
rtw_restruct_wmm_ie(struct adapter * adapter,u8 * in_ie,u8 * out_ie,uint in_len,uint initial_out_len)1982 int rtw_restruct_wmm_ie(struct adapter *adapter, u8 *in_ie, u8 *out_ie, uint in_len, uint initial_out_len)
1983 {
1984 	unsigned	int ielength = 0;
1985 	unsigned int i, j;
1986 
1987 	i = 12; /* after the fixed IE */
1988 	while (i < in_len) {
1989 		ielength = initial_out_len;
1990 
1991 		if (i + 5 < in_len &&
1992 		    in_ie[i] == 0xDD && in_ie[i + 2] == 0x00 &&
1993 		    in_ie[i + 3] == 0x50 && in_ie[i + 4] == 0xF2 &&
1994 		    in_ie[i + 5] == 0x02) {
1995 			for (j = i; j < i + 9; j++) {
1996 				out_ie[ielength] = in_ie[j];
1997 				ielength++;
1998 			}
1999 			out_ie[initial_out_len + 1] = 0x07;
2000 			out_ie[initial_out_len + 6] = 0x00;
2001 			out_ie[initial_out_len + 8] = 0x00;
2002 
2003 			break;
2004 		}
2005 
2006 		i += (in_ie[i + 1] + 2); /*  to the next IE element */
2007 	}
2008 
2009 	return ielength;
2010 }
2011 
2012 /* Ported from 8185: IsInPreAuthKeyList().
2013  * (Renamed from SecIsInPreAuthKeyList(), 2006-10-13.)
2014  * Added by Annie, 2006-05-07.
2015  *
2016  * Search by BSSID,
2017  *
2018  * Return Value:
2019  * -1: if there is no pre-auth key in the  table
2020  * >=0: if there is pre-auth key, and return the entry id
2021  */
SecIsInPMKIDList(struct adapter * Adapter,u8 * bssid)2022 static int SecIsInPMKIDList(struct adapter *Adapter, u8 *bssid)
2023 {
2024 	struct security_priv *p = &Adapter->securitypriv;
2025 	int i;
2026 
2027 	for (i = 0; i < NUM_PMKID_CACHE; i++)
2028 		if ((p->PMKIDList[i].bUsed) &&
2029 				(!memcmp(p->PMKIDList[i].Bssid, bssid, ETH_ALEN)))
2030 			return i;
2031 	return -1;
2032 }
2033 
2034 /*  */
2035 /*  Check the RSN IE length */
2036 /*  If the RSN IE length <= 20, the RSN IE didn't include the PMKID information */
2037 /*  0-11th element in the array are the fixed IE */
2038 /*  12th element in the array is the IE */
2039 /*  13th element in the array is the IE length */
2040 /*  */
2041 
rtw_append_pmkid(struct adapter * Adapter,int iEntry,u8 * ie,uint ie_len)2042 static int rtw_append_pmkid(struct adapter *Adapter, int iEntry, u8 *ie, uint ie_len)
2043 {
2044 	struct security_priv *psecuritypriv = &Adapter->securitypriv;
2045 
2046 	if (ie[13] <= 20) {
2047 		/*  The RSN IE didn't include the PMK ID, append the PMK information */
2048 		ie[ie_len] = 1;
2049 		ie_len++;
2050 		ie[ie_len] = 0;	/* PMKID count = 0x0100 */
2051 		ie_len++;
2052 		memcpy(&ie[ie_len], &psecuritypriv->PMKIDList[iEntry].PMKID, 16);
2053 		ie_len += 16;
2054 		ie[13] += 18;/* PMKID length = 2+16 */
2055 	}
2056 	return ie_len;
2057 }
2058 
rtw_report_sec_ie(struct adapter * adapter,u8 authmode,u8 * sec_ie)2059 static void rtw_report_sec_ie(struct adapter *adapter, u8 authmode, u8 *sec_ie)
2060 {
2061 	uint	len;
2062 	u8 *buff, *p;
2063 	union iwreq_data wrqu;
2064 
2065 	buff = NULL;
2066 	if (authmode == WLAN_EID_VENDOR_SPECIFIC) {
2067 		buff = kzalloc(IW_CUSTOM_MAX, GFP_ATOMIC);
2068 		if (!buff)
2069 			return;
2070 
2071 		p = buff;
2072 
2073 		p += scnprintf(p, IW_CUSTOM_MAX - (p - buff), "ASSOCINFO(ReqIEs =");
2074 
2075 		len = sec_ie[1] + 2;
2076 		len = (len < IW_CUSTOM_MAX) ? len : IW_CUSTOM_MAX;
2077 
2078 		p += scnprintf(p, IW_CUSTOM_MAX - (p - buff), " %*ph", len, sec_ie);
2079 
2080 		p += scnprintf(p, IW_CUSTOM_MAX - (p - buff), ")");
2081 
2082 		memset(&wrqu, 0, sizeof(wrqu));
2083 
2084 		wrqu.data.length = p - buff;
2085 
2086 		wrqu.data.length = (wrqu.data.length < IW_CUSTOM_MAX) ? wrqu.data.length : IW_CUSTOM_MAX;
2087 
2088 		kfree(buff);
2089 	}
2090 }
2091 
rtw_restruct_sec_ie(struct adapter * adapter,u8 * in_ie,u8 * out_ie,uint in_len)2092 signed int rtw_restruct_sec_ie(struct adapter *adapter, u8 *in_ie, u8 *out_ie, uint in_len)
2093 {
2094 	u8 authmode = 0x0;
2095 	uint	ielength;
2096 	int iEntry;
2097 
2098 	struct mlme_priv *pmlmepriv = &adapter->mlmepriv;
2099 	struct security_priv *psecuritypriv = &adapter->securitypriv;
2100 	uint	ndisauthmode = psecuritypriv->ndisauthtype;
2101 
2102 	/* copy fixed ie only */
2103 	memcpy(out_ie, in_ie, 12);
2104 	ielength = 12;
2105 	if ((ndisauthmode == Ndis802_11AuthModeWPA) || (ndisauthmode == Ndis802_11AuthModeWPAPSK))
2106 		authmode = WLAN_EID_VENDOR_SPECIFIC;
2107 	if ((ndisauthmode == Ndis802_11AuthModeWPA2) || (ndisauthmode == Ndis802_11AuthModeWPA2PSK))
2108 		authmode = WLAN_EID_RSN;
2109 
2110 	if (check_fwstate(pmlmepriv, WIFI_UNDER_WPS)) {
2111 		memcpy(out_ie + ielength, psecuritypriv->wps_ie, psecuritypriv->wps_ie_len);
2112 
2113 		ielength += psecuritypriv->wps_ie_len;
2114 	} else if ((authmode == WLAN_EID_VENDOR_SPECIFIC) || (authmode == WLAN_EID_RSN)) {
2115 		/* copy RSN or SSN */
2116 		memcpy(&out_ie[ielength], &psecuritypriv->supplicant_ie[0], psecuritypriv->supplicant_ie[1] + 2);
2117 		ielength += psecuritypriv->supplicant_ie[1] + 2;
2118 		rtw_report_sec_ie(adapter, authmode, psecuritypriv->supplicant_ie);
2119 	}
2120 
2121 	iEntry = SecIsInPMKIDList(adapter, pmlmepriv->assoc_bssid);
2122 	if (iEntry < 0)
2123 		return ielength;
2124 
2125 	if (authmode == WLAN_EID_RSN)
2126 		ielength = rtw_append_pmkid(adapter, iEntry, out_ie, ielength);
2127 
2128 	return ielength;
2129 }
2130 
rtw_init_registrypriv_dev_network(struct adapter * adapter)2131 void rtw_init_registrypriv_dev_network(struct adapter *adapter)
2132 {
2133 	struct registry_priv *pregistrypriv = &adapter->registrypriv;
2134 	struct eeprom_priv *peepriv = &adapter->eeprompriv;
2135 	struct wlan_bssid_ex    *pdev_network = &pregistrypriv->dev_network;
2136 	u8 *myhwaddr = myid(peepriv);
2137 
2138 	memcpy(pdev_network->mac_address, myhwaddr, ETH_ALEN);
2139 
2140 	memcpy(&pdev_network->ssid, &pregistrypriv->ssid, sizeof(struct ndis_802_11_ssid));
2141 
2142 	pdev_network->configuration.length = sizeof(struct ndis_802_11_conf);
2143 	pdev_network->configuration.beacon_period = 100;
2144 }
2145 
rtw_update_registrypriv_dev_network(struct adapter * adapter)2146 void rtw_update_registrypriv_dev_network(struct adapter *adapter)
2147 {
2148 	int sz = 0;
2149 	struct registry_priv *pregistrypriv = &adapter->registrypriv;
2150 	struct wlan_bssid_ex    *pdev_network = &pregistrypriv->dev_network;
2151 	struct	security_priv *psecuritypriv = &adapter->securitypriv;
2152 	struct	wlan_network	*cur_network = &adapter->mlmepriv.cur_network;
2153 
2154 	pdev_network->privacy = (psecuritypriv->dot11PrivacyAlgrthm > 0 ? 1 : 0) ; /*  adhoc no 802.1x */
2155 
2156 	pdev_network->rssi = 0;
2157 
2158 	switch (pregistrypriv->wireless_mode) {
2159 	case WIRELESS_11B:
2160 		pdev_network->network_type_in_use = (Ndis802_11DS);
2161 		break;
2162 	case WIRELESS_11G:
2163 	case WIRELESS_11BG:
2164 	case WIRELESS_11_24N:
2165 	case WIRELESS_11G_24N:
2166 	case WIRELESS_11BG_24N:
2167 		pdev_network->network_type_in_use = (Ndis802_11OFDM24);
2168 		break;
2169 	default:
2170 		/*  TODO */
2171 		break;
2172 	}
2173 
2174 	pdev_network->configuration.ds_config = (pregistrypriv->channel);
2175 
2176 	if (cur_network->network.infrastructure_mode == Ndis802_11IBSS)
2177 		pdev_network->configuration.atim_window = (0);
2178 
2179 	pdev_network->infrastructure_mode = (cur_network->network.infrastructure_mode);
2180 
2181 	/*  1. Supported rates */
2182 	/*  2. IE */
2183 
2184 	/* rtw_set_supported_rate(pdev_network->supported_rates, pregistrypriv->wireless_mode) ;  will be called in rtw_generate_ie */
2185 	sz = rtw_generate_ie(pregistrypriv);
2186 
2187 	pdev_network->ie_length = sz;
2188 
2189 	pdev_network->length = get_wlan_bssid_ex_sz((struct wlan_bssid_ex  *)pdev_network);
2190 
2191 	/* notes: translate ie_length & length after assign the length to cmdsz in createbss_cmd(); */
2192 	/* pdev_network->ie_length = cpu_to_le32(sz); */
2193 }
2194 
2195 /* the function is at passive_level */
rtw_joinbss_reset(struct adapter * padapter)2196 void rtw_joinbss_reset(struct adapter *padapter)
2197 {
2198 	u8 threshold;
2199 	struct mlme_priv *pmlmepriv = &padapter->mlmepriv;
2200 
2201 	struct ht_priv *phtpriv = &pmlmepriv->htpriv;
2202 
2203 	/* todo: if you want to do something io/reg/hw setting before join_bss, please add code here */
2204 
2205 	pmlmepriv->num_FortyMHzIntolerant = 0;
2206 
2207 	pmlmepriv->num_sta_no_ht = 0;
2208 
2209 	phtpriv->ampdu_enable = false;/* reset to disabled */
2210 
2211 	/*  TH = 1 => means that invalidate usb rx aggregation */
2212 	/*  TH = 0 => means that validate usb rx aggregation, use init value. */
2213 	if (phtpriv->ht_option) {
2214 		if (padapter->registrypriv.wifi_spec == 1)
2215 			threshold = 1;
2216 		else
2217 			threshold = 0;
2218 		rtw_hal_set_hwreg(padapter, HW_VAR_RXDMA_AGG_PG_TH, (u8 *)(&threshold));
2219 	} else {
2220 		threshold = 1;
2221 		rtw_hal_set_hwreg(padapter, HW_VAR_RXDMA_AGG_PG_TH, (u8 *)(&threshold));
2222 	}
2223 }
2224 
rtw_ht_use_default_setting(struct adapter * padapter)2225 void rtw_ht_use_default_setting(struct adapter *padapter)
2226 {
2227 	struct mlme_priv *pmlmepriv = &padapter->mlmepriv;
2228 	struct ht_priv *phtpriv = &pmlmepriv->htpriv;
2229 	struct registry_priv *pregistrypriv = &padapter->registrypriv;
2230 	bool		bHwLDPCSupport = false, bHwSTBCSupport = false;
2231 	bool		bHwSupportBeamformer = false, bHwSupportBeamformee = false;
2232 
2233 	if (pregistrypriv->wifi_spec)
2234 		phtpriv->bss_coexist = 1;
2235 	else
2236 		phtpriv->bss_coexist = 0;
2237 
2238 	phtpriv->sgi_40m = TEST_FLAG(pregistrypriv->short_gi, BIT1) ? true : false;
2239 	phtpriv->sgi_20m = TEST_FLAG(pregistrypriv->short_gi, BIT0) ? true : false;
2240 
2241 	/*  LDPC support */
2242 	rtw_hal_get_def_var(padapter, HAL_DEF_RX_LDPC, (u8 *)&bHwLDPCSupport);
2243 	CLEAR_FLAGS(phtpriv->ldpc_cap);
2244 	if (bHwLDPCSupport) {
2245 		if (TEST_FLAG(pregistrypriv->ldpc_cap, BIT4))
2246 			SET_FLAG(phtpriv->ldpc_cap, LDPC_HT_ENABLE_RX);
2247 	}
2248 	rtw_hal_get_def_var(padapter, HAL_DEF_TX_LDPC, (u8 *)&bHwLDPCSupport);
2249 	if (bHwLDPCSupport) {
2250 		if (TEST_FLAG(pregistrypriv->ldpc_cap, BIT5))
2251 			SET_FLAG(phtpriv->ldpc_cap, LDPC_HT_ENABLE_TX);
2252 	}
2253 
2254 	/*  STBC */
2255 	rtw_hal_get_def_var(padapter, HAL_DEF_TX_STBC, (u8 *)&bHwSTBCSupport);
2256 	CLEAR_FLAGS(phtpriv->stbc_cap);
2257 	if (bHwSTBCSupport) {
2258 		if (TEST_FLAG(pregistrypriv->stbc_cap, BIT5))
2259 			SET_FLAG(phtpriv->stbc_cap, STBC_HT_ENABLE_TX);
2260 	}
2261 	rtw_hal_get_def_var(padapter, HAL_DEF_RX_STBC, (u8 *)&bHwSTBCSupport);
2262 	if (bHwSTBCSupport) {
2263 		if (TEST_FLAG(pregistrypriv->stbc_cap, BIT4))
2264 			SET_FLAG(phtpriv->stbc_cap, STBC_HT_ENABLE_RX);
2265 	}
2266 
2267 	/*  Beamforming setting */
2268 	rtw_hal_get_def_var(padapter, HAL_DEF_EXPLICIT_BEAMFORMER, (u8 *)&bHwSupportBeamformer);
2269 	rtw_hal_get_def_var(padapter, HAL_DEF_EXPLICIT_BEAMFORMEE, (u8 *)&bHwSupportBeamformee);
2270 	CLEAR_FLAGS(phtpriv->beamform_cap);
2271 	if (TEST_FLAG(pregistrypriv->beamform_cap, BIT4) && bHwSupportBeamformer)
2272 		SET_FLAG(phtpriv->beamform_cap, BEAMFORMING_HT_BEAMFORMER_ENABLE);
2273 
2274 	if (TEST_FLAG(pregistrypriv->beamform_cap, BIT5) && bHwSupportBeamformee)
2275 		SET_FLAG(phtpriv->beamform_cap, BEAMFORMING_HT_BEAMFORMEE_ENABLE);
2276 }
2277 
rtw_build_wmm_ie_ht(struct adapter * padapter,u8 * out_ie,uint * pout_len)2278 void rtw_build_wmm_ie_ht(struct adapter *padapter, u8 *out_ie, uint *pout_len)
2279 {
2280 	unsigned char WMM_IE[] = {0x00, 0x50, 0xf2, 0x02, 0x00, 0x01, 0x00};
2281 	int out_len;
2282 
2283 	if (padapter->mlmepriv.qospriv.qos_option == 0) {
2284 		out_len = *pout_len;
2285 		rtw_set_ie(out_ie + out_len, WLAN_EID_VENDOR_SPECIFIC,
2286 			   _WMM_IE_Length_, WMM_IE, pout_len);
2287 
2288 		padapter->mlmepriv.qospriv.qos_option = 1;
2289 	}
2290 }
2291 
2292 /* the function is >= passive_level */
rtw_restructure_ht_ie(struct adapter * padapter,u8 * in_ie,u8 * out_ie,uint in_len,uint * pout_len,u8 channel)2293 unsigned int rtw_restructure_ht_ie(struct adapter *padapter, u8 *in_ie, u8 *out_ie, uint in_len, uint *pout_len, u8 channel)
2294 {
2295 	u32 ielen, out_len;
2296 	enum ieee80211_max_ampdu_length_exp max_rx_ampdu_factor;
2297 	unsigned char *p;
2298 	struct ieee80211_ht_cap ht_capie;
2299 	u8 cbw40_enable = 0, stbc_rx_enable = 0, operation_bw = 0;
2300 	struct registry_priv *pregistrypriv = &padapter->registrypriv;
2301 	struct mlme_priv *pmlmepriv = &padapter->mlmepriv;
2302 	struct ht_priv *phtpriv = &pmlmepriv->htpriv;
2303 	struct mlme_ext_priv *pmlmeext = &padapter->mlmeextpriv;
2304 
2305 	phtpriv->ht_option = false;
2306 
2307 	out_len = *pout_len;
2308 
2309 	memset(&ht_capie, 0, sizeof(struct ieee80211_ht_cap));
2310 
2311 	ht_capie.cap_info = cpu_to_le16(IEEE80211_HT_CAP_DSSSCCK40);
2312 
2313 	if (phtpriv->sgi_20m)
2314 		ht_capie.cap_info |= cpu_to_le16(IEEE80211_HT_CAP_SGI_20);
2315 
2316 	/* Get HT BW */
2317 	if (!in_ie) {
2318 		/* TDLS: TODO 20/40 issue */
2319 		if (check_fwstate(pmlmepriv, WIFI_STATION_STATE)) {
2320 			operation_bw = padapter->mlmeextpriv.cur_bwmode;
2321 			if (operation_bw > CHANNEL_WIDTH_40)
2322 				operation_bw = CHANNEL_WIDTH_40;
2323 		} else
2324 			/* TDLS: TODO 40? */
2325 			operation_bw = CHANNEL_WIDTH_40;
2326 	} else {
2327 		p = rtw_get_ie(in_ie, WLAN_EID_HT_OPERATION, &ielen, in_len);
2328 		if (p && (ielen == sizeof(struct ieee80211_ht_addt_info))) {
2329 			struct HT_info_element *pht_info = (struct HT_info_element *)(p + 2);
2330 
2331 			if (pht_info->infos[0] & BIT(2)) {
2332 				switch (pht_info->infos[0] & 0x3) {
2333 				case 1:
2334 				case 3:
2335 					operation_bw = CHANNEL_WIDTH_40;
2336 					break;
2337 				default:
2338 					operation_bw = CHANNEL_WIDTH_20;
2339 					break;
2340 				}
2341 			} else {
2342 				operation_bw = CHANNEL_WIDTH_20;
2343 			}
2344 		}
2345 	}
2346 
2347 	/* to disable 40M Hz support while gd_bw_40MHz_en = 0 */
2348 	if ((pregistrypriv->bw_mode & 0x0f) > 0)
2349 		cbw40_enable = 1;
2350 
2351 	if ((cbw40_enable == 1) && (operation_bw == CHANNEL_WIDTH_40)) {
2352 		ht_capie.cap_info |= cpu_to_le16(IEEE80211_HT_CAP_SUP_WIDTH);
2353 		if (phtpriv->sgi_40m)
2354 			ht_capie.cap_info |= cpu_to_le16(IEEE80211_HT_CAP_SGI_40);
2355 	}
2356 
2357 	if (TEST_FLAG(phtpriv->stbc_cap, STBC_HT_ENABLE_TX))
2358 		ht_capie.cap_info |= cpu_to_le16(IEEE80211_HT_CAP_TX_STBC);
2359 
2360 	/* todo: disable SM power save mode */
2361 	ht_capie.cap_info |= cpu_to_le16(IEEE80211_HT_CAP_SM_PS);
2362 
2363 	if (TEST_FLAG(phtpriv->stbc_cap, STBC_HT_ENABLE_RX)) {
2364 		if ((channel <= 14 && pregistrypriv->rx_stbc == 0x1) ||	/* enable for 2.4GHz */
2365 			(pregistrypriv->wifi_spec == 1))
2366 			stbc_rx_enable = 1;
2367 	}
2368 
2369 	/* fill default supported_mcs_set */
2370 	memcpy(&ht_capie.mcs, pmlmeext->default_supported_mcs_set, 16);
2371 
2372 	/* update default supported_mcs_set */
2373 	if (stbc_rx_enable)
2374 		ht_capie.cap_info |= cpu_to_le16(IEEE80211_HT_CAP_RX_STBC_1R);/* RX STBC One spatial stream */
2375 
2376 	set_mcs_rate_by_mask(ht_capie.mcs.rx_mask, MCS_RATE_1R);
2377 
2378 	{
2379 		u32 rx_packet_offset, max_recvbuf_sz;
2380 
2381 		rtw_hal_get_def_var(padapter, HAL_DEF_RX_PACKET_OFFSET, &rx_packet_offset);
2382 		rtw_hal_get_def_var(padapter, HAL_DEF_MAX_RECVBUF_SZ, &max_recvbuf_sz);
2383 	}
2384 
2385 	if (padapter->driver_rx_ampdu_factor != 0xFF)
2386 		max_rx_ampdu_factor =
2387 		  (enum ieee80211_max_ampdu_length_exp)padapter->driver_rx_ampdu_factor;
2388 	else
2389 		rtw_hal_get_def_var(padapter, HW_VAR_MAX_RX_AMPDU_FACTOR,
2390 				    &max_rx_ampdu_factor);
2391 
2392 	ht_capie.ampdu_params_info = (max_rx_ampdu_factor & 0x03);
2393 
2394 	if (padapter->securitypriv.dot11PrivacyAlgrthm == _AES_)
2395 		ht_capie.ampdu_params_info |= (IEEE80211_HT_CAP_AMPDU_DENSITY & (0x07 << 2));
2396 	else
2397 		ht_capie.ampdu_params_info |= (IEEE80211_HT_CAP_AMPDU_DENSITY & 0x00);
2398 
2399 	rtw_set_ie(out_ie + out_len, WLAN_EID_HT_CAPABILITY,
2400 		   sizeof(struct ieee80211_ht_cap), (unsigned char *)&ht_capie, pout_len);
2401 
2402 	phtpriv->ht_option = true;
2403 
2404 	if (in_ie) {
2405 		p = rtw_get_ie(in_ie, WLAN_EID_HT_OPERATION, &ielen, in_len);
2406 		if (p && (ielen == sizeof(struct ieee80211_ht_addt_info))) {
2407 			out_len = *pout_len;
2408 			rtw_set_ie(out_ie + out_len, WLAN_EID_HT_OPERATION, ielen, p + 2, pout_len);
2409 		}
2410 	}
2411 
2412 	return phtpriv->ht_option;
2413 }
2414 
2415 /* the function is > passive_level (in critical_section) */
rtw_update_ht_cap(struct adapter * padapter,u8 * pie,uint ie_len,u8 channel)2416 void rtw_update_ht_cap(struct adapter *padapter, u8 *pie, uint ie_len, u8 channel)
2417 {
2418 	u8 *p, max_ampdu_sz;
2419 	int len;
2420 	struct ieee80211_ht_cap *pht_capie;
2421 	struct mlme_priv *pmlmepriv = &padapter->mlmepriv;
2422 	struct ht_priv *phtpriv = &pmlmepriv->htpriv;
2423 	struct registry_priv *pregistrypriv = &padapter->registrypriv;
2424 	struct mlme_ext_priv *pmlmeext = &padapter->mlmeextpriv;
2425 	struct mlme_ext_info *pmlmeinfo = &pmlmeext->mlmext_info;
2426 	u8 cbw40_enable = 0;
2427 
2428 	if (!phtpriv->ht_option)
2429 		return;
2430 
2431 	if ((!pmlmeinfo->HT_info_enable) || (!pmlmeinfo->HT_caps_enable))
2432 		return;
2433 
2434 	/* maybe needs check if ap supports rx ampdu. */
2435 	if (!(phtpriv->ampdu_enable) && pregistrypriv->ampdu_enable == 1)
2436 		phtpriv->ampdu_enable = true;
2437 
2438 	/* check Max Rx A-MPDU Size */
2439 	len = 0;
2440 	p = rtw_get_ie(pie + sizeof(struct ndis_802_11_fix_ie), WLAN_EID_HT_CAPABILITY, &len, ie_len - sizeof(struct ndis_802_11_fix_ie));
2441 	if (p && len > 0) {
2442 		pht_capie = (struct ieee80211_ht_cap *)(p + 2);
2443 		max_ampdu_sz = (pht_capie->ampdu_params_info & IEEE80211_HT_CAP_AMPDU_FACTOR);
2444 		max_ampdu_sz = 1 << (max_ampdu_sz + 3); /*  max_ampdu_sz (kbytes); */
2445 
2446 		phtpriv->rx_ampdu_maxlen = max_ampdu_sz;
2447 	}
2448 
2449 	len = 0;
2450 	p = rtw_get_ie(pie + sizeof(struct ndis_802_11_fix_ie), WLAN_EID_HT_OPERATION, &len, ie_len - sizeof(struct ndis_802_11_fix_ie));
2451 	if (p && len > 0) {
2452 		/* todo: */
2453 	}
2454 
2455 	if ((pregistrypriv->bw_mode & 0x0f) > 0)
2456 		cbw40_enable = 1;
2457 
2458 	/* update cur_bwmode & cur_ch_offset */
2459 	if ((cbw40_enable) &&
2460 	    (le16_to_cpu(pmlmeinfo->HT_caps.u.HT_cap_element.HT_caps_info) &
2461 	      BIT(1)) && (pmlmeinfo->HT_info.infos[0] & BIT(2))) {
2462 		int i;
2463 
2464 		/* update the MCS set */
2465 		for (i = 0; i < 16; i++)
2466 			pmlmeinfo->HT_caps.u.HT_cap_element.MCS_rate[i] &= pmlmeext->default_supported_mcs_set[i];
2467 
2468 		/* update the MCS rates */
2469 		set_mcs_rate_by_mask(pmlmeinfo->HT_caps.u.HT_cap_element.MCS_rate, MCS_RATE_1R);
2470 
2471 		/* switch to the 40M Hz mode according to the AP */
2472 		/* pmlmeext->cur_bwmode = CHANNEL_WIDTH_40; */
2473 		switch ((pmlmeinfo->HT_info.infos[0] & 0x3)) {
2474 		case EXTCHNL_OFFSET_UPPER:
2475 			pmlmeext->cur_ch_offset = HAL_PRIME_CHNL_OFFSET_LOWER;
2476 			break;
2477 
2478 		case EXTCHNL_OFFSET_LOWER:
2479 			pmlmeext->cur_ch_offset = HAL_PRIME_CHNL_OFFSET_UPPER;
2480 			break;
2481 
2482 		default:
2483 			pmlmeext->cur_ch_offset = HAL_PRIME_CHNL_OFFSET_DONT_CARE;
2484 			break;
2485 		}
2486 	}
2487 
2488 	/*  */
2489 	/*  Config SM Power Save setting */
2490 	/*  */
2491 	pmlmeinfo->SM_PS =
2492 		(le16_to_cpu(pmlmeinfo->HT_caps.u.HT_cap_element.HT_caps_info) &
2493 		 0x0C) >> 2;
2494 
2495 	/*  */
2496 	/*  Config current HT Protection mode. */
2497 	/*  */
2498 	pmlmeinfo->HT_protection = pmlmeinfo->HT_info.infos[1] & 0x3;
2499 }
2500 
rtw_issue_addbareq_cmd(struct adapter * padapter,struct xmit_frame * pxmitframe)2501 void rtw_issue_addbareq_cmd(struct adapter *padapter, struct xmit_frame *pxmitframe)
2502 {
2503 	u8 issued;
2504 	int priority;
2505 	struct sta_info *psta;
2506 	struct ht_priv *phtpriv;
2507 	struct pkt_attrib *pattrib = &pxmitframe->attrib;
2508 	s32 bmcst = is_multicast_ether_addr(pattrib->ra);
2509 
2510 	/* if (bmcst || (padapter->mlmepriv.LinkDetectInfo.bTxBusyTraffic == false)) */
2511 	if (bmcst || (padapter->mlmepriv.LinkDetectInfo.NumTxOkInPeriod < 100))
2512 		return;
2513 
2514 	priority = pattrib->priority;
2515 
2516 	psta = rtw_get_stainfo(&padapter->stapriv, pattrib->ra);
2517 	if (pattrib->psta != psta)
2518 		return;
2519 
2520 	if (!psta)
2521 		return;
2522 
2523 	if (!(psta->state & _FW_LINKED))
2524 		return;
2525 
2526 	phtpriv = &psta->htpriv;
2527 
2528 	if (phtpriv->ht_option && phtpriv->ampdu_enable) {
2529 		issued = (phtpriv->agg_enable_bitmap >> priority) & 0x1;
2530 		issued |= (phtpriv->candidate_tid_bitmap >> priority) & 0x1;
2531 
2532 		if (issued == 0) {
2533 			psta->htpriv.candidate_tid_bitmap |= BIT((u8)priority);
2534 			rtw_addbareq_cmd(padapter, (u8) priority, pattrib->ra);
2535 		}
2536 	}
2537 }
2538 
rtw_append_exented_cap(struct adapter * padapter,u8 * out_ie,uint * pout_len)2539 void rtw_append_exented_cap(struct adapter *padapter, u8 *out_ie, uint *pout_len)
2540 {
2541 	struct mlme_priv *pmlmepriv = &padapter->mlmepriv;
2542 	struct ht_priv *phtpriv = &pmlmepriv->htpriv;
2543 	u8 cap_content[8] = {0};
2544 
2545 	if (phtpriv->bss_coexist)
2546 		SET_EXT_CAPABILITY_ELE_BSS_COEXIST(cap_content, 1);
2547 
2548 	rtw_set_ie(out_ie + *pout_len, WLAN_EID_EXT_CAPABILITY, 8, cap_content, pout_len);
2549 }
2550 
rtw_set_to_roam(struct adapter * adapter,u8 to_roam)2551 inline void rtw_set_to_roam(struct adapter *adapter, u8 to_roam)
2552 {
2553 	if (to_roam == 0)
2554 		adapter->mlmepriv.to_join = false;
2555 	adapter->mlmepriv.to_roam = to_roam;
2556 }
2557 
rtw_dec_to_roam(struct adapter * adapter)2558 inline u8 rtw_dec_to_roam(struct adapter *adapter)
2559 {
2560 	adapter->mlmepriv.to_roam--;
2561 	return adapter->mlmepriv.to_roam;
2562 }
2563 
rtw_to_roam(struct adapter * adapter)2564 inline u8 rtw_to_roam(struct adapter *adapter)
2565 {
2566 	return adapter->mlmepriv.to_roam;
2567 }
2568 
rtw_roaming(struct adapter * padapter,struct wlan_network * tgt_network)2569 void rtw_roaming(struct adapter *padapter, struct wlan_network *tgt_network)
2570 {
2571 	struct mlme_priv *pmlmepriv = &padapter->mlmepriv;
2572 
2573 	spin_lock_bh(&pmlmepriv->lock);
2574 	_rtw_roaming(padapter, tgt_network);
2575 	spin_unlock_bh(&pmlmepriv->lock);
2576 }
2577 
_rtw_roaming(struct adapter * padapter,struct wlan_network * tgt_network)2578 void _rtw_roaming(struct adapter *padapter, struct wlan_network *tgt_network)
2579 {
2580 	struct mlme_priv *pmlmepriv = &padapter->mlmepriv;
2581 	struct wlan_network *cur_network = &pmlmepriv->cur_network;
2582 
2583 	if (rtw_to_roam(padapter) > 0) {
2584 		memcpy(&pmlmepriv->assoc_ssid, &cur_network->network.ssid, sizeof(struct ndis_802_11_ssid));
2585 
2586 		pmlmepriv->assoc_by_bssid = false;
2587 
2588 		while (rtw_do_join(padapter) != _SUCCESS) {
2589 			rtw_dec_to_roam(padapter);
2590 			if (rtw_to_roam(padapter) <= 0) {
2591 				rtw_indicate_disconnect(padapter);
2592 				break;
2593 			}
2594 		}
2595 	}
2596 }
2597 
rtw_linked_check(struct adapter * padapter)2598 signed int rtw_linked_check(struct adapter *padapter)
2599 {
2600 	if (check_fwstate(&padapter->mlmepriv, WIFI_AP_STATE) ||
2601 	    check_fwstate(&padapter->mlmepriv, WIFI_ADHOC_STATE | WIFI_ADHOC_MASTER_STATE)) {
2602 		if (padapter->stapriv.asoc_sta_count > 2)
2603 			return true;
2604 	} else {	/* Station mode */
2605 		if (check_fwstate(&padapter->mlmepriv, _FW_LINKED))
2606 			return true;
2607 	}
2608 	return false;
2609 }
2610