1// SPDX-License-Identifier: GPL-2.0
2/******************************************************************************
3 *
4 * Copyright(c) 2007 - 2012 Realtek Corporation. All rights reserved.
5 *
6 ******************************************************************************/
7
8#include <drv_types.h>
9#include <rtw_debug.h>
10#include <hal_com_h2c.h>
11
12static unsigned char ARTHEROS_OUI1[] = {0x00, 0x03, 0x7f};
13static unsigned char ARTHEROS_OUI2[] = {0x00, 0x13, 0x74};
14
15static unsigned char BROADCOM_OUI1[] = {0x00, 0x10, 0x18};
16static unsigned char BROADCOM_OUI2[] = {0x00, 0x0a, 0xf7};
17static unsigned char BROADCOM_OUI3[] = {0x00, 0x05, 0xb5};
18
19static unsigned char CISCO_OUI[] = {0x00, 0x40, 0x96};
20static unsigned char MARVELL_OUI[] = {0x00, 0x50, 0x43};
21static unsigned char RALINK_OUI[] = {0x00, 0x0c, 0x43};
22static unsigned char REALTEK_OUI[] = {0x00, 0xe0, 0x4c};
23static unsigned char AIRGOCAP_OUI[] = {0x00, 0x0a, 0xf5};
24static unsigned char RSN_TKIP_CIPHER[4] = {0x00, 0x0f, 0xac, 0x02};
25static unsigned char WPA_TKIP_CIPHER[4] = {0x00, 0x50, 0xf2, 0x02};
26
27/* define WAIT_FOR_BCN_TO_MIN	(3000) */
28#define WAIT_FOR_BCN_TO_MIN	(6000)
29#define WAIT_FOR_BCN_TO_MAX	(20000)
30
31#define DISCONNECT_BY_CHK_BCN_FAIL_OBSERV_PERIOD_IN_MS 1000
32#define DISCONNECT_BY_CHK_BCN_FAIL_THRESHOLD 3
33
34static u8 rtw_basic_rate_cck[4] = {
35	IEEE80211_CCK_RATE_1MB | IEEE80211_BASIC_RATE_MASK,
36	IEEE80211_CCK_RATE_2MB | IEEE80211_BASIC_RATE_MASK,
37	IEEE80211_CCK_RATE_5MB | IEEE80211_BASIC_RATE_MASK,
38	IEEE80211_CCK_RATE_11MB | IEEE80211_BASIC_RATE_MASK
39};
40
41static u8 rtw_basic_rate_ofdm[3] = {
42	IEEE80211_OFDM_RATE_6MB | IEEE80211_BASIC_RATE_MASK,
43	IEEE80211_OFDM_RATE_12MB | IEEE80211_BASIC_RATE_MASK,
44	IEEE80211_OFDM_RATE_24MB | IEEE80211_BASIC_RATE_MASK
45};
46
47u8 networktype_to_raid_ex(struct adapter *adapter, struct sta_info *psta)
48{
49	u8 raid;
50
51	switch (psta->wireless_mode) {
52	case WIRELESS_11B:
53		raid = RATEID_IDX_B;
54		break;
55	case WIRELESS_11G:
56		raid = RATEID_IDX_G;
57		break;
58	case WIRELESS_11BG:
59		raid = RATEID_IDX_BG;
60		break;
61	case WIRELESS_11_24N:
62	case WIRELESS_11G_24N:
63		raid = RATEID_IDX_GN_N1SS;
64		break;
65	case WIRELESS_11B_24N:
66	case WIRELESS_11BG_24N:
67		if (psta->bw_mode == CHANNEL_WIDTH_20) {
68			raid = RATEID_IDX_BGN_20M_1SS_BN;
69		} else {
70			raid = RATEID_IDX_BGN_40M_1SS;
71		}
72		break;
73	default:
74		raid = RATEID_IDX_BGN_40M_2SS;
75		break;
76	}
77	return raid;
78}
79
80unsigned char ratetbl_val_2wifirate(unsigned char rate);
81unsigned char ratetbl_val_2wifirate(unsigned char rate)
82{
83	switch (rate & 0x7f) {
84	case 0:
85		return IEEE80211_CCK_RATE_1MB;
86	case 1:
87		return IEEE80211_CCK_RATE_2MB;
88	case 2:
89		return IEEE80211_CCK_RATE_5MB;
90	case 3:
91		return IEEE80211_CCK_RATE_11MB;
92	case 4:
93		return IEEE80211_OFDM_RATE_6MB;
94	case 5:
95		return IEEE80211_OFDM_RATE_9MB;
96	case 6:
97		return IEEE80211_OFDM_RATE_12MB;
98	case 7:
99		return IEEE80211_OFDM_RATE_18MB;
100	case 8:
101		return IEEE80211_OFDM_RATE_24MB;
102	case 9:
103		return IEEE80211_OFDM_RATE_36MB;
104	case 10:
105		return IEEE80211_OFDM_RATE_48MB;
106	case 11:
107		return IEEE80211_OFDM_RATE_54MB;
108	default:
109		return 0;
110	}
111}
112
113int is_basicrate(struct adapter *padapter, unsigned char rate);
114int is_basicrate(struct adapter *padapter, unsigned char rate)
115{
116	int i;
117	unsigned char val;
118	struct mlme_ext_priv *pmlmeext = &padapter->mlmeextpriv;
119
120	for (i = 0; i < NumRates; i++) {
121		val = pmlmeext->basicrate[i];
122
123		if ((val != 0xff) && (val != 0xfe))
124			if (rate == ratetbl_val_2wifirate(val))
125				return true;
126	}
127
128	return false;
129}
130
131unsigned int ratetbl2rateset(struct adapter *padapter, unsigned char *rateset);
132unsigned int ratetbl2rateset(struct adapter *padapter, unsigned char *rateset)
133{
134	int i;
135	unsigned char rate;
136	unsigned int	len = 0;
137	struct mlme_ext_priv *pmlmeext = &padapter->mlmeextpriv;
138
139	for (i = 0; i < NumRates; i++) {
140		rate = pmlmeext->datarate[i];
141
142		switch (rate) {
143		case 0xff:
144			return len;
145
146		case 0xfe:
147			continue;
148
149		default:
150			rate = ratetbl_val_2wifirate(rate);
151
152			if (is_basicrate(padapter, rate) == true)
153				rate |= IEEE80211_BASIC_RATE_MASK;
154
155			rateset[len] = rate;
156			len++;
157			break;
158		}
159	}
160	return len;
161}
162
163void get_rate_set(struct adapter *padapter, unsigned char *pbssrate, int *bssrate_len)
164{
165	unsigned char supportedrates[NumRates];
166
167	memset(supportedrates, 0, NumRates);
168	*bssrate_len = ratetbl2rateset(padapter, supportedrates);
169	memcpy(pbssrate, supportedrates, *bssrate_len);
170}
171
172void set_mcs_rate_by_mask(u8 *mcs_set, u32 mask)
173{
174	u8 mcs_rate_1r = (u8)(mask&0xff);
175	u8 mcs_rate_2r = (u8)((mask>>8)&0xff);
176	u8 mcs_rate_3r = (u8)((mask>>16)&0xff);
177	u8 mcs_rate_4r = (u8)((mask>>24)&0xff);
178
179	mcs_set[0] &= mcs_rate_1r;
180	mcs_set[1] &= mcs_rate_2r;
181	mcs_set[2] &= mcs_rate_3r;
182	mcs_set[3] &= mcs_rate_4r;
183}
184
185void UpdateBrateTbl(struct adapter *Adapter, u8 *mBratesOS)
186{
187	u8 i;
188	u8 rate;
189
190	/*  1M, 2M, 5.5M, 11M, 6M, 12M, 24M are mandatory. */
191	for (i = 0; i < NDIS_802_11_LENGTH_RATES_EX; i++) {
192		rate = mBratesOS[i] & 0x7f;
193		switch (rate) {
194		case IEEE80211_CCK_RATE_1MB:
195		case IEEE80211_CCK_RATE_2MB:
196		case IEEE80211_CCK_RATE_5MB:
197		case IEEE80211_CCK_RATE_11MB:
198		case IEEE80211_OFDM_RATE_6MB:
199		case IEEE80211_OFDM_RATE_12MB:
200		case IEEE80211_OFDM_RATE_24MB:
201			mBratesOS[i] |= IEEE80211_BASIC_RATE_MASK;
202			break;
203		}
204	}
205}
206
207void UpdateBrateTblForSoftAP(u8 *bssrateset, u32 bssratelen)
208{
209	u8 i;
210	u8 rate;
211
212	for (i = 0; i < bssratelen; i++) {
213		rate = bssrateset[i] & 0x7f;
214		switch (rate) {
215		case IEEE80211_CCK_RATE_1MB:
216		case IEEE80211_CCK_RATE_2MB:
217		case IEEE80211_CCK_RATE_5MB:
218		case IEEE80211_CCK_RATE_11MB:
219			bssrateset[i] |= IEEE80211_BASIC_RATE_MASK;
220			break;
221		}
222	}
223}
224
225void Save_DM_Func_Flag(struct adapter *padapter)
226{
227	u8 bSaveFlag = true;
228
229	rtw_hal_set_hwreg(padapter, HW_VAR_DM_FUNC_OP, (u8 *)(&bSaveFlag));
230}
231
232void Restore_DM_Func_Flag(struct adapter *padapter)
233{
234	u8 bSaveFlag = false;
235
236	rtw_hal_set_hwreg(padapter, HW_VAR_DM_FUNC_OP, (u8 *)(&bSaveFlag));
237}
238
239void Switch_DM_Func(struct adapter *padapter, u32 mode, u8 enable)
240{
241	if (enable == true)
242		rtw_hal_set_hwreg(padapter, HW_VAR_DM_FUNC_SET, (u8 *)(&mode));
243	else
244		rtw_hal_set_hwreg(padapter, HW_VAR_DM_FUNC_CLR, (u8 *)(&mode));
245}
246
247void Set_MSR(struct adapter *padapter, u8 type)
248{
249	rtw_hal_set_hwreg(padapter, HW_VAR_MEDIA_STATUS, (u8 *)(&type));
250}
251
252inline u8 rtw_get_oper_ch(struct adapter *adapter)
253{
254	return adapter_to_dvobj(adapter)->oper_channel;
255}
256
257inline void rtw_set_oper_ch(struct adapter *adapter, u8 ch)
258{
259#ifdef DBG_CH_SWITCH
260	const int len = 128;
261	char msg[128] = {0};
262	int cnt = 0;
263	int i = 0;
264#endif  /* DBG_CH_SWITCH */
265	struct dvobj_priv *dvobj = adapter_to_dvobj(adapter);
266
267	if (dvobj->oper_channel != ch) {
268		dvobj->on_oper_ch_time = jiffies;
269
270#ifdef DBG_CH_SWITCH
271		cnt += scnprintf(msg+cnt, len-cnt, "switch to ch %3u", ch);
272
273		for (i = 0; i < dvobj->iface_nums; i++) {
274			struct adapter *iface = dvobj->padapters[i];
275
276			cnt += scnprintf(msg+cnt, len-cnt, " [%s:", ADPT_ARG(iface));
277			if (iface->mlmeextpriv.cur_channel == ch)
278				cnt += scnprintf(msg+cnt, len-cnt, "C");
279			else
280				cnt += scnprintf(msg+cnt, len-cnt, "_");
281			if (iface->wdinfo.listen_channel == ch && !rtw_p2p_chk_state(&iface->wdinfo, P2P_STATE_NONE))
282				cnt += scnprintf(msg+cnt, len-cnt, "L");
283			else
284				cnt += scnprintf(msg+cnt, len-cnt, "_");
285			cnt += scnprintf(msg+cnt, len-cnt, "]");
286		}
287
288#endif /* DBG_CH_SWITCH */
289	}
290
291	dvobj->oper_channel = ch;
292}
293
294inline u8 rtw_get_oper_bw(struct adapter *adapter)
295{
296	return adapter_to_dvobj(adapter)->oper_bwmode;
297}
298
299inline void rtw_set_oper_bw(struct adapter *adapter, u8 bw)
300{
301	adapter_to_dvobj(adapter)->oper_bwmode = bw;
302}
303
304inline u8 rtw_get_oper_choffset(struct adapter *adapter)
305{
306	return adapter_to_dvobj(adapter)->oper_ch_offset;
307}
308
309inline void rtw_set_oper_choffset(struct adapter *adapter, u8 offset)
310{
311	adapter_to_dvobj(adapter)->oper_ch_offset = offset;
312}
313
314u8 rtw_get_center_ch(u8 channel, u8 chnl_bw, u8 chnl_offset)
315{
316	u8 center_ch = channel;
317
318	if (chnl_bw == CHANNEL_WIDTH_40) {
319		if (chnl_offset == HAL_PRIME_CHNL_OFFSET_LOWER)
320			center_ch = channel + 2;
321		else
322			center_ch = channel - 2;
323	}
324
325	return center_ch;
326}
327
328inline unsigned long rtw_get_on_cur_ch_time(struct adapter *adapter)
329{
330	if (adapter->mlmeextpriv.cur_channel == adapter_to_dvobj(adapter)->oper_channel)
331		return adapter_to_dvobj(adapter)->on_oper_ch_time;
332	else
333		return 0;
334}
335
336void SelectChannel(struct adapter *padapter, unsigned char channel)
337{
338	if (mutex_lock_interruptible(&(adapter_to_dvobj(padapter)->setch_mutex)))
339		return;
340
341	/* saved channel info */
342	rtw_set_oper_ch(padapter, channel);
343
344	rtw_hal_set_chan(padapter, channel);
345
346	mutex_unlock(&(adapter_to_dvobj(padapter)->setch_mutex));
347}
348
349void set_channel_bwmode(struct adapter *padapter, unsigned char channel, unsigned char channel_offset, unsigned short bwmode)
350{
351	u8 center_ch, chnl_offset80 = HAL_PRIME_CHNL_OFFSET_DONT_CARE;
352
353	center_ch = rtw_get_center_ch(channel, bwmode, channel_offset);
354
355
356	/* set Channel */
357	if (mutex_lock_interruptible(&(adapter_to_dvobj(padapter)->setch_mutex)))
358		return;
359
360	/* saved channel/bw info */
361	rtw_set_oper_ch(padapter, channel);
362	rtw_set_oper_bw(padapter, bwmode);
363	rtw_set_oper_choffset(padapter, channel_offset);
364
365	rtw_hal_set_chnl_bw(padapter, center_ch, bwmode, channel_offset, chnl_offset80); /*  set center channel */
366
367	mutex_unlock(&(adapter_to_dvobj(padapter)->setch_mutex));
368}
369
370inline u8 *get_my_bssid(struct wlan_bssid_ex *pnetwork)
371{
372	return pnetwork->mac_address;
373}
374
375u16 get_beacon_interval(struct wlan_bssid_ex *bss)
376{
377	__le16 val;
378
379	memcpy((unsigned char *)&val, rtw_get_beacon_interval_from_ie(bss->ies), 2);
380
381	return le16_to_cpu(val);
382}
383
384int is_client_associated_to_ap(struct adapter *padapter)
385{
386	struct mlme_ext_priv *pmlmeext;
387	struct mlme_ext_info *pmlmeinfo;
388
389	if (!padapter)
390		return _FAIL;
391
392	pmlmeext = &padapter->mlmeextpriv;
393	pmlmeinfo = &(pmlmeext->mlmext_info);
394
395	if ((pmlmeinfo->state & WIFI_FW_ASSOC_SUCCESS) && ((pmlmeinfo->state&0x03) == WIFI_FW_STATION_STATE))
396		return true;
397	else
398		return _FAIL;
399}
400
401int is_client_associated_to_ibss(struct adapter *padapter)
402{
403	struct mlme_ext_priv *pmlmeext = &padapter->mlmeextpriv;
404	struct mlme_ext_info *pmlmeinfo = &(pmlmeext->mlmext_info);
405
406	if ((pmlmeinfo->state & WIFI_FW_ASSOC_SUCCESS) && ((pmlmeinfo->state&0x03) == WIFI_FW_ADHOC_STATE))
407		return true;
408	else
409		return _FAIL;
410}
411
412int is_IBSS_empty(struct adapter *padapter)
413{
414	unsigned int i;
415	struct mlme_ext_priv *pmlmeext = &padapter->mlmeextpriv;
416	struct mlme_ext_info *pmlmeinfo = &(pmlmeext->mlmext_info);
417
418	for (i = IBSS_START_MAC_ID; i < NUM_STA; i++) {
419		if (pmlmeinfo->FW_sta_info[i].status == 1)
420			return _FAIL;
421	}
422
423	return true;
424}
425
426unsigned int decide_wait_for_beacon_timeout(unsigned int bcn_interval)
427{
428	if ((bcn_interval << 2) < WAIT_FOR_BCN_TO_MIN)
429		return WAIT_FOR_BCN_TO_MIN;
430	else if ((bcn_interval << 2) > WAIT_FOR_BCN_TO_MAX)
431		return WAIT_FOR_BCN_TO_MAX;
432	else
433		return bcn_interval << 2;
434}
435
436void invalidate_cam_all(struct adapter *padapter)
437{
438	struct dvobj_priv *dvobj = adapter_to_dvobj(padapter);
439	struct cam_ctl_t *cam_ctl = &dvobj->cam_ctl;
440
441	rtw_hal_set_hwreg(padapter, HW_VAR_CAM_INVALID_ALL, NULL);
442
443	spin_lock_bh(&cam_ctl->lock);
444	cam_ctl->bitmap = 0;
445	memset(dvobj->cam_cache, 0, sizeof(struct cam_entry_cache)*TOTAL_CAM_ENTRY);
446	spin_unlock_bh(&cam_ctl->lock);
447}
448
449static u32 _ReadCAM(struct adapter *padapter, u32 addr)
450{
451	u32 count = 0, cmd;
452
453	cmd = CAM_POLLINIG | addr;
454	rtw_write32(padapter, RWCAM, cmd);
455
456	do {
457		if (0 == (rtw_read32(padapter, REG_CAMCMD) & CAM_POLLINIG))
458			break;
459	} while (count++ < 100);
460
461	return rtw_read32(padapter, REG_CAMREAD);
462}
463
464void read_cam(struct adapter *padapter, u8 entry, u8 *get_key)
465{
466	u32 j, addr, cmd;
467
468	addr = entry << 3;
469
470	for (j = 0; j < 6; j++) {
471		cmd = _ReadCAM(padapter, addr+j);
472		if (j > 1) /* get key from cam */
473			memcpy(get_key+(j-2)*4, &cmd, 4);
474	}
475}
476
477void _write_cam(struct adapter *padapter, u8 entry, u16 ctrl, u8 *mac, u8 *key)
478{
479	unsigned int i, val, addr;
480	int j;
481	u32 cam_val[2];
482
483	addr = entry << 3;
484
485	for (j = 5; j >= 0; j--) {
486		switch (j) {
487		case 0:
488			val = (ctrl | (mac[0] << 16) | (mac[1] << 24));
489			break;
490		case 1:
491			val = (mac[2] | (mac[3] << 8) | (mac[4] << 16) | (mac[5] << 24));
492			break;
493		default:
494			i = (j - 2) << 2;
495			val = (key[i] | (key[i+1] << 8) | (key[i+2] << 16) | (key[i+3] << 24));
496			break;
497		}
498
499		cam_val[0] = val;
500		cam_val[1] = addr + (unsigned int)j;
501
502		rtw_hal_set_hwreg(padapter, HW_VAR_CAM_WRITE, (u8 *)cam_val);
503	}
504}
505
506void _clear_cam_entry(struct adapter *padapter, u8 entry)
507{
508	unsigned char null_sta[] = {0x00, 0x00, 0x00, 0x00, 0x00, 0x00};
509	unsigned char null_key[] = {0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00};
510
511	_write_cam(padapter, entry, 0, null_sta, null_key);
512}
513
514inline void write_cam(struct adapter *adapter, u8 id, u16 ctrl, u8 *mac, u8 *key)
515{
516	_write_cam(adapter, id, ctrl, mac, key);
517	write_cam_cache(adapter, id, ctrl, mac, key);
518}
519
520inline void clear_cam_entry(struct adapter *adapter, u8 id)
521{
522	_clear_cam_entry(adapter, id);
523	clear_cam_cache(adapter, id);
524}
525
526void write_cam_cache(struct adapter *adapter, u8 id, u16 ctrl, u8 *mac, u8 *key)
527{
528	struct dvobj_priv *dvobj = adapter_to_dvobj(adapter);
529	struct cam_ctl_t *cam_ctl = &dvobj->cam_ctl;
530
531	spin_lock_bh(&cam_ctl->lock);
532
533	dvobj->cam_cache[id].ctrl = ctrl;
534	memcpy(dvobj->cam_cache[id].mac, mac, ETH_ALEN);
535	memcpy(dvobj->cam_cache[id].key, key, 16);
536
537	spin_unlock_bh(&cam_ctl->lock);
538}
539
540void clear_cam_cache(struct adapter *adapter, u8 id)
541{
542	struct dvobj_priv *dvobj = adapter_to_dvobj(adapter);
543	struct cam_ctl_t *cam_ctl = &dvobj->cam_ctl;
544
545	spin_lock_bh(&cam_ctl->lock);
546
547	memset(&(dvobj->cam_cache[id]), 0, sizeof(struct cam_entry_cache));
548
549	spin_unlock_bh(&cam_ctl->lock);
550}
551
552static bool _rtw_camid_is_gk(struct adapter *adapter, u8 cam_id)
553{
554	struct dvobj_priv *dvobj = adapter_to_dvobj(adapter);
555	struct cam_ctl_t *cam_ctl = &dvobj->cam_ctl;
556	bool ret = false;
557
558	if (cam_id >= TOTAL_CAM_ENTRY)
559		goto exit;
560
561	if (!(cam_ctl->bitmap & BIT(cam_id)))
562		goto exit;
563
564	ret = (dvobj->cam_cache[cam_id].ctrl&BIT6)?true:false;
565
566exit:
567	return ret;
568}
569
570static s16 _rtw_camid_search(struct adapter *adapter, u8 *addr, s16 kid)
571{
572	struct dvobj_priv *dvobj = adapter_to_dvobj(adapter);
573	int i;
574	s16 cam_id = -1;
575
576	for (i = 0; i < TOTAL_CAM_ENTRY; i++) {
577		if (addr && memcmp(dvobj->cam_cache[i].mac, addr, ETH_ALEN))
578			continue;
579		if (kid >= 0 && kid != (dvobj->cam_cache[i].ctrl&0x03))
580			continue;
581
582		cam_id = i;
583		break;
584	}
585
586	return cam_id;
587}
588
589s16 rtw_camid_search(struct adapter *adapter, u8 *addr, s16 kid)
590{
591	struct dvobj_priv *dvobj = adapter_to_dvobj(adapter);
592	struct cam_ctl_t *cam_ctl = &dvobj->cam_ctl;
593	s16 cam_id = -1;
594
595	spin_lock_bh(&cam_ctl->lock);
596	cam_id = _rtw_camid_search(adapter, addr, kid);
597	spin_unlock_bh(&cam_ctl->lock);
598
599	return cam_id;
600}
601
602s16 rtw_camid_alloc(struct adapter *adapter, struct sta_info *sta, u8 kid)
603{
604	struct dvobj_priv *dvobj = adapter_to_dvobj(adapter);
605	struct cam_ctl_t *cam_ctl = &dvobj->cam_ctl;
606	s16 cam_id = -1;
607	struct mlme_ext_info *mlmeinfo;
608
609	spin_lock_bh(&cam_ctl->lock);
610
611	mlmeinfo = &adapter->mlmeextpriv.mlmext_info;
612
613	if ((((mlmeinfo->state&0x03) == WIFI_FW_AP_STATE) || ((mlmeinfo->state&0x03) == WIFI_FW_ADHOC_STATE))
614		&& !sta) {
615		/* AP/Ad-hoc mode group key: static alloction to default key by key ID */
616		if (kid > 3) {
617			netdev_dbg(adapter->pnetdev,
618				   FUNC_ADPT_FMT " group key with invalid key id:%u\n",
619				   FUNC_ADPT_ARG(adapter), kid);
620			rtw_warn_on(1);
621			goto bitmap_handle;
622		}
623
624		cam_id = kid;
625	} else {
626		int i;
627		u8 *addr = sta?sta->hwaddr:NULL;
628
629		if (!sta) {
630			if (!(mlmeinfo->state & WIFI_FW_ASSOC_SUCCESS)) {
631				/* bypass STA mode group key setting before connected(ex:WEP) because bssid is not ready */
632				goto bitmap_handle;
633			}
634
635			addr = get_bssid(&adapter->mlmepriv);
636		}
637
638		i = _rtw_camid_search(adapter, addr, kid);
639		if (i >= 0) {
640			/* Fix issue that pairwise and group key have same key id. Pairwise key first, group key can overwirte group only(ex: rekey) */
641			if (sta || _rtw_camid_is_gk(adapter, i))
642				cam_id = i;
643			else
644				netdev_dbg(adapter->pnetdev,
645					   FUNC_ADPT_FMT " group key id:%u the same key id as pairwise key\n",
646					   FUNC_ADPT_ARG(adapter), kid);
647			goto bitmap_handle;
648		}
649
650		for (i = 4; i < TOTAL_CAM_ENTRY; i++)
651			if (!(cam_ctl->bitmap & BIT(i)))
652				break;
653
654		if (i == TOTAL_CAM_ENTRY) {
655			if (sta)
656				netdev_dbg(adapter->pnetdev,
657					   FUNC_ADPT_FMT " pairwise key with %pM id:%u no room\n",
658					   FUNC_ADPT_ARG(adapter),
659					   MAC_ARG(sta->hwaddr), kid);
660			else
661				netdev_dbg(adapter->pnetdev,
662					   FUNC_ADPT_FMT " group key id:%u no room\n",
663					   FUNC_ADPT_ARG(adapter), kid);
664			rtw_warn_on(1);
665			goto bitmap_handle;
666		}
667
668		cam_id = i;
669	}
670
671bitmap_handle:
672	if (cam_id >= 0 && cam_id < 32)
673		cam_ctl->bitmap |= BIT(cam_id);
674
675	spin_unlock_bh(&cam_ctl->lock);
676
677	return cam_id;
678}
679
680void rtw_camid_free(struct adapter *adapter, u8 cam_id)
681{
682	struct dvobj_priv *dvobj = adapter_to_dvobj(adapter);
683	struct cam_ctl_t *cam_ctl = &dvobj->cam_ctl;
684
685	spin_lock_bh(&cam_ctl->lock);
686
687	if (cam_id < TOTAL_CAM_ENTRY)
688		cam_ctl->bitmap &= ~(BIT(cam_id));
689
690	spin_unlock_bh(&cam_ctl->lock);
691}
692
693int allocate_fw_sta_entry(struct adapter *padapter)
694{
695	unsigned int mac_id;
696	struct mlme_ext_priv *pmlmeext = &padapter->mlmeextpriv;
697	struct mlme_ext_info *pmlmeinfo = &(pmlmeext->mlmext_info);
698
699	for (mac_id = IBSS_START_MAC_ID; mac_id < NUM_STA; mac_id++) {
700		if (pmlmeinfo->FW_sta_info[mac_id].status == 0) {
701			pmlmeinfo->FW_sta_info[mac_id].status = 1;
702			pmlmeinfo->FW_sta_info[mac_id].retry = 0;
703			break;
704		}
705	}
706
707	return mac_id;
708}
709
710void flush_all_cam_entry(struct adapter *padapter)
711{
712	struct mlme_ext_priv *pmlmeext = &padapter->mlmeextpriv;
713	struct mlme_ext_info *pmlmeinfo = &(pmlmeext->mlmext_info);
714
715	invalidate_cam_all(padapter);
716	/* clear default key related key search setting */
717	rtw_hal_set_hwreg(padapter, HW_VAR_SEC_DK_CFG, (u8 *)false);
718
719	memset((u8 *)(pmlmeinfo->FW_sta_info), 0, sizeof(pmlmeinfo->FW_sta_info));
720}
721
722int WMM_param_handler(struct adapter *padapter, struct ndis_80211_var_ie *pIE)
723{
724	/* struct registry_priv *pregpriv = &padapter->registrypriv; */
725	struct mlme_priv *pmlmepriv = &(padapter->mlmepriv);
726	struct mlme_ext_priv *pmlmeext = &padapter->mlmeextpriv;
727	struct mlme_ext_info *pmlmeinfo = &(pmlmeext->mlmext_info);
728
729	if (pmlmepriv->qospriv.qos_option == 0) {
730		pmlmeinfo->WMM_enable = 0;
731		return false;
732	}
733
734	if (!memcmp(&(pmlmeinfo->WMM_param), (pIE->data + 6), sizeof(struct WMM_para_element)))
735		return false;
736	else
737		memcpy(&(pmlmeinfo->WMM_param), (pIE->data + 6), sizeof(struct WMM_para_element));
738
739	pmlmeinfo->WMM_enable = 1;
740	return true;
741}
742
743static void sort_wmm_ac_params(u32 *inx, u32 *edca)
744{
745	u32 i, j, change_inx = false;
746
747	/* entry indx: 0->vo, 1->vi, 2->be, 3->bk. */
748	for (i = 0; i < 4; i++) {
749		for (j = i + 1; j < 4; j++) {
750			/* compare CW and AIFS */
751			if ((edca[j] & 0xFFFF) < (edca[i] & 0xFFFF)) {
752				change_inx = true;
753			} else if ((edca[j] & 0xFFFF) == (edca[i] & 0xFFFF)) {
754				/* compare TXOP */
755				if ((edca[j] >> 16) > (edca[i] >> 16))
756					change_inx = true;
757			}
758
759			if (change_inx) {
760				swap(edca[i], edca[j]);
761				swap(inx[i], inx[j]);
762
763				change_inx = false;
764			}
765		}
766	}
767}
768
769void WMMOnAssocRsp(struct adapter *padapter)
770{
771	u8 ACI, ACM, AIFS, ECWMin, ECWMax, aSifsTime;
772	u8 acm_mask;
773	u16 TXOP;
774	u32 acParm, i;
775	u32 edca[4], inx[4];
776	struct mlme_ext_priv *pmlmeext = &padapter->mlmeextpriv;
777	struct mlme_ext_info *pmlmeinfo = &(pmlmeext->mlmext_info);
778	struct xmit_priv *pxmitpriv = &padapter->xmitpriv;
779	struct registry_priv *pregpriv = &padapter->registrypriv;
780
781	acm_mask = 0;
782
783	if (pmlmeext->cur_wireless_mode & WIRELESS_11_24N)
784		aSifsTime = 16;
785	else
786		aSifsTime = 10;
787
788	if (pmlmeinfo->WMM_enable == 0) {
789		padapter->mlmepriv.acm_mask = 0;
790
791		AIFS = aSifsTime + (2 * pmlmeinfo->slotTime);
792
793		if (pmlmeext->cur_wireless_mode & WIRELESS_11G) {
794			ECWMin = 4;
795			ECWMax = 10;
796		} else if (pmlmeext->cur_wireless_mode & WIRELESS_11B) {
797			ECWMin = 5;
798			ECWMax = 10;
799		} else {
800			ECWMin = 4;
801			ECWMax = 10;
802		}
803
804		TXOP = 0;
805		acParm = AIFS | (ECWMin << 8) | (ECWMax << 12) | (TXOP << 16);
806		rtw_hal_set_hwreg(padapter, HW_VAR_AC_PARAM_BE, (u8 *)(&acParm));
807		rtw_hal_set_hwreg(padapter, HW_VAR_AC_PARAM_BK, (u8 *)(&acParm));
808		rtw_hal_set_hwreg(padapter, HW_VAR_AC_PARAM_VI, (u8 *)(&acParm));
809
810		ECWMin = 2;
811		ECWMax = 3;
812		TXOP = 0x2f;
813		acParm = AIFS | (ECWMin << 8) | (ECWMax << 12) | (TXOP << 16);
814		rtw_hal_set_hwreg(padapter, HW_VAR_AC_PARAM_VO, (u8 *)(&acParm));
815	} else {
816		edca[0] = edca[1] = edca[2] = edca[3] = 0;
817
818		for (i = 0; i < 4; i++) {
819			ACI = (pmlmeinfo->WMM_param.ac_param[i].ACI_AIFSN >> 5) & 0x03;
820			ACM = (pmlmeinfo->WMM_param.ac_param[i].ACI_AIFSN >> 4) & 0x01;
821
822			/* AIFS = AIFSN * slot time + SIFS - r2t phy delay */
823			AIFS = (pmlmeinfo->WMM_param.ac_param[i].ACI_AIFSN & 0x0f) * pmlmeinfo->slotTime + aSifsTime;
824
825			ECWMin = (pmlmeinfo->WMM_param.ac_param[i].CW & 0x0f);
826			ECWMax = (pmlmeinfo->WMM_param.ac_param[i].CW & 0xf0) >> 4;
827			TXOP = le16_to_cpu(pmlmeinfo->WMM_param.ac_param[i].TXOP_limit);
828
829			acParm = AIFS | (ECWMin << 8) | (ECWMax << 12) | (TXOP << 16);
830
831			switch (ACI) {
832			case 0x0:
833				rtw_hal_set_hwreg(padapter, HW_VAR_AC_PARAM_BE, (u8 *)(&acParm));
834				acm_mask |= (ACM ? BIT(1):0);
835				edca[XMIT_BE_QUEUE] = acParm;
836				break;
837
838			case 0x1:
839				rtw_hal_set_hwreg(padapter, HW_VAR_AC_PARAM_BK, (u8 *)(&acParm));
840				/* acm_mask |= (ACM? BIT(0):0); */
841				edca[XMIT_BK_QUEUE] = acParm;
842				break;
843
844			case 0x2:
845				rtw_hal_set_hwreg(padapter, HW_VAR_AC_PARAM_VI, (u8 *)(&acParm));
846				acm_mask |= (ACM ? BIT(2):0);
847				edca[XMIT_VI_QUEUE] = acParm;
848				break;
849
850			case 0x3:
851				rtw_hal_set_hwreg(padapter, HW_VAR_AC_PARAM_VO, (u8 *)(&acParm));
852				acm_mask |= (ACM ? BIT(3):0);
853				edca[XMIT_VO_QUEUE] = acParm;
854				break;
855			}
856		}
857
858		if (padapter->registrypriv.acm_method == 1)
859			rtw_hal_set_hwreg(padapter, HW_VAR_ACM_CTRL, (u8 *)(&acm_mask));
860		else
861			padapter->mlmepriv.acm_mask = acm_mask;
862
863		inx[0] = 0; inx[1] = 1; inx[2] = 2; inx[3] = 3;
864
865		if (pregpriv->wifi_spec == 1)
866			sort_wmm_ac_params(inx, edca);
867
868		for (i = 0; i < 4; i++)
869			pxmitpriv->wmm_para_seq[i] = inx[i];
870	}
871}
872
873static void bwmode_update_check(struct adapter *padapter, struct ndis_80211_var_ie *pIE)
874{
875	unsigned char  new_bwmode;
876	unsigned char  new_ch_offset;
877	struct HT_info_element	 *pHT_info;
878	struct mlme_priv *pmlmepriv = &(padapter->mlmepriv);
879	struct mlme_ext_priv *pmlmeext = &padapter->mlmeextpriv;
880	struct mlme_ext_info *pmlmeinfo = &(pmlmeext->mlmext_info);
881	struct registry_priv *pregistrypriv = &padapter->registrypriv;
882	struct ht_priv *phtpriv = &pmlmepriv->htpriv;
883	u8 cbw40_enable = 0;
884
885	if (!pIE)
886		return;
887
888	if (phtpriv->ht_option == false)
889		return;
890
891	if (pIE->length > sizeof(struct HT_info_element))
892		return;
893
894	pHT_info = (struct HT_info_element *)pIE->data;
895
896	if (pmlmeext->cur_channel > 14) {
897		if ((pregistrypriv->bw_mode & 0xf0) > 0)
898			cbw40_enable = 1;
899	} else {
900		if ((pregistrypriv->bw_mode & 0x0f) > 0)
901			cbw40_enable = 1;
902	}
903
904	if ((pHT_info->infos[0] & BIT(2)) && cbw40_enable) {
905		new_bwmode = CHANNEL_WIDTH_40;
906
907		switch (pHT_info->infos[0] & 0x3) {
908		case 1:
909			new_ch_offset = HAL_PRIME_CHNL_OFFSET_LOWER;
910			break;
911
912		case 3:
913			new_ch_offset = HAL_PRIME_CHNL_OFFSET_UPPER;
914			break;
915
916		default:
917			new_bwmode = CHANNEL_WIDTH_20;
918			new_ch_offset = HAL_PRIME_CHNL_OFFSET_DONT_CARE;
919			break;
920		}
921	} else {
922		new_bwmode = CHANNEL_WIDTH_20;
923		new_ch_offset = HAL_PRIME_CHNL_OFFSET_DONT_CARE;
924	}
925
926	if ((new_bwmode != pmlmeext->cur_bwmode) || (new_ch_offset != pmlmeext->cur_ch_offset)) {
927		pmlmeinfo->bwmode_updated = true;
928
929		pmlmeext->cur_bwmode = new_bwmode;
930		pmlmeext->cur_ch_offset = new_ch_offset;
931
932		/* update HT info also */
933		HT_info_handler(padapter, pIE);
934	} else {
935		pmlmeinfo->bwmode_updated = false;
936	}
937
938	if (true == pmlmeinfo->bwmode_updated) {
939		struct sta_info *psta;
940		struct wlan_bssid_ex	*cur_network = &(pmlmeinfo->network);
941		struct sta_priv *pstapriv = &padapter->stapriv;
942
943		/* set_channel_bwmode(padapter, pmlmeext->cur_channel, pmlmeext->cur_ch_offset, pmlmeext->cur_bwmode); */
944
945		/* update ap's stainfo */
946		psta = rtw_get_stainfo(pstapriv, cur_network->mac_address);
947		if (psta) {
948			struct ht_priv *phtpriv_sta = &psta->htpriv;
949
950			if (phtpriv_sta->ht_option) {
951				/*  bwmode */
952				psta->bw_mode = pmlmeext->cur_bwmode;
953				phtpriv_sta->ch_offset = pmlmeext->cur_ch_offset;
954			} else {
955				psta->bw_mode = CHANNEL_WIDTH_20;
956				phtpriv_sta->ch_offset = HAL_PRIME_CHNL_OFFSET_DONT_CARE;
957			}
958
959			rtw_dm_ra_mask_wk_cmd(padapter, (u8 *)psta);
960		}
961	}
962}
963
964void HT_caps_handler(struct adapter *padapter, struct ndis_80211_var_ie *pIE)
965{
966	unsigned int	i;
967	u8 max_AMPDU_len, min_MPDU_spacing;
968	u8 cur_ldpc_cap = 0, cur_stbc_cap = 0;
969	struct mlme_ext_priv *pmlmeext = &padapter->mlmeextpriv;
970	struct mlme_ext_info *pmlmeinfo = &(pmlmeext->mlmext_info);
971	struct mlme_priv *pmlmepriv = &padapter->mlmepriv;
972	struct ht_priv *phtpriv = &pmlmepriv->htpriv;
973
974	if (!pIE)
975		return;
976
977	if (phtpriv->ht_option == false)
978		return;
979
980	pmlmeinfo->HT_caps_enable = 1;
981
982	for (i = 0; i < (pIE->length); i++) {
983		if (i != 2) {
984			/* Commented by Albert 2010/07/12 */
985			/* Got the endian issue here. */
986			pmlmeinfo->HT_caps.u.HT_cap[i] &= (pIE->data[i]);
987		} else {
988			/* modify from  fw by Thomas 2010/11/17 */
989			max_AMPDU_len = min(pmlmeinfo->HT_caps.u.HT_cap_element.AMPDU_para & 0x3,
990					    pIE->data[i] & 0x3);
991
992			min_MPDU_spacing = max(pmlmeinfo->HT_caps.u.HT_cap_element.AMPDU_para & 0x1c,
993					       pIE->data[i] & 0x1c);
994
995			pmlmeinfo->HT_caps.u.HT_cap_element.AMPDU_para = max_AMPDU_len | min_MPDU_spacing;
996		}
997	}
998
999	/* update the MCS set */
1000	for (i = 0; i < 16; i++)
1001		pmlmeinfo->HT_caps.u.HT_cap_element.MCS_rate[i] &= pmlmeext->default_supported_mcs_set[i];
1002
1003	/* update the MCS rates */
1004	set_mcs_rate_by_mask(pmlmeinfo->HT_caps.u.HT_cap_element.MCS_rate, MCS_RATE_1R);
1005
1006	if (check_fwstate(pmlmepriv, WIFI_AP_STATE)) {
1007		/*  Config STBC setting */
1008		if (TEST_FLAG(phtpriv->stbc_cap, STBC_HT_ENABLE_TX) &&
1009		    GET_HT_CAPABILITY_ELE_TX_STBC(pIE->data))
1010			SET_FLAG(cur_stbc_cap, STBC_HT_ENABLE_TX);
1011
1012		phtpriv->stbc_cap = cur_stbc_cap;
1013	} else {
1014		/*  Config LDPC Coding Capability */
1015		if (TEST_FLAG(phtpriv->ldpc_cap, LDPC_HT_ENABLE_TX) &&
1016		    GET_HT_CAPABILITY_ELE_LDPC_CAP(pIE->data))
1017			SET_FLAG(cur_ldpc_cap, (LDPC_HT_ENABLE_TX | LDPC_HT_CAP_TX));
1018
1019		phtpriv->ldpc_cap = cur_ldpc_cap;
1020
1021		/*  Config STBC setting */
1022		if (TEST_FLAG(phtpriv->stbc_cap, STBC_HT_ENABLE_TX) &&
1023		    GET_HT_CAPABILITY_ELE_RX_STBC(pIE->data))
1024			SET_FLAG(cur_stbc_cap, (STBC_HT_ENABLE_TX | STBC_HT_CAP_TX));
1025
1026		phtpriv->stbc_cap = cur_stbc_cap;
1027	}
1028}
1029
1030void HT_info_handler(struct adapter *padapter, struct ndis_80211_var_ie *pIE)
1031{
1032	struct mlme_ext_priv *pmlmeext = &padapter->mlmeextpriv;
1033	struct mlme_ext_info *pmlmeinfo = &(pmlmeext->mlmext_info);
1034	struct mlme_priv *pmlmepriv = &padapter->mlmepriv;
1035	struct ht_priv *phtpriv = &pmlmepriv->htpriv;
1036
1037	if (!pIE)
1038		return;
1039
1040	if (phtpriv->ht_option == false)
1041		return;
1042
1043	if (pIE->length > sizeof(struct HT_info_element))
1044		return;
1045
1046	pmlmeinfo->HT_info_enable = 1;
1047	memcpy(&(pmlmeinfo->HT_info), pIE->data, pIE->length);
1048}
1049
1050void HTOnAssocRsp(struct adapter *padapter)
1051{
1052	unsigned char max_AMPDU_len;
1053	unsigned char min_MPDU_spacing;
1054	/* struct registry_priv  *pregpriv = &padapter->registrypriv; */
1055	struct mlme_ext_priv *pmlmeext = &padapter->mlmeextpriv;
1056	struct mlme_ext_info *pmlmeinfo = &(pmlmeext->mlmext_info);
1057
1058	if ((pmlmeinfo->HT_info_enable) && (pmlmeinfo->HT_caps_enable)) {
1059		pmlmeinfo->HT_enable = 1;
1060	} else {
1061		pmlmeinfo->HT_enable = 0;
1062		/* set_channel_bwmode(padapter, pmlmeext->cur_channel, pmlmeext->cur_ch_offset, pmlmeext->cur_bwmode); */
1063		return;
1064	}
1065
1066	/* handle A-MPDU parameter field */
1067	/*
1068		AMPDU_para [1:0]:Max AMPDU Len => 0:8k , 1:16k, 2:32k, 3:64k
1069		AMPDU_para [4:2]:Min MPDU Start Spacing
1070	*/
1071	max_AMPDU_len = pmlmeinfo->HT_caps.u.HT_cap_element.AMPDU_para & 0x03;
1072
1073	min_MPDU_spacing = (pmlmeinfo->HT_caps.u.HT_cap_element.AMPDU_para & 0x1c) >> 2;
1074
1075	rtw_hal_set_hwreg(padapter, HW_VAR_AMPDU_MIN_SPACE, (u8 *)(&min_MPDU_spacing));
1076
1077	rtw_hal_set_hwreg(padapter, HW_VAR_AMPDU_FACTOR, (u8 *)(&max_AMPDU_len));
1078}
1079
1080void ERP_IE_handler(struct adapter *padapter, struct ndis_80211_var_ie *pIE)
1081{
1082	struct mlme_ext_priv *pmlmeext = &padapter->mlmeextpriv;
1083	struct mlme_ext_info *pmlmeinfo = &(pmlmeext->mlmext_info);
1084
1085	if (pIE->length > 1)
1086		return;
1087
1088	pmlmeinfo->ERP_enable = 1;
1089	memcpy(&(pmlmeinfo->ERP_IE), pIE->data, pIE->length);
1090}
1091
1092void VCS_update(struct adapter *padapter, struct sta_info *psta)
1093{
1094	struct registry_priv  *pregpriv = &padapter->registrypriv;
1095	struct mlme_ext_priv *pmlmeext = &padapter->mlmeextpriv;
1096	struct mlme_ext_info *pmlmeinfo = &(pmlmeext->mlmext_info);
1097
1098	switch (pregpriv->vrtl_carrier_sense) {/* 0:off 1:on 2:auto */
1099	case 0: /* off */
1100		psta->rtsen = 0;
1101		psta->cts2self = 0;
1102		break;
1103
1104	case 1: /* on */
1105		if (pregpriv->vcs_type == 1) { /* 1:RTS/CTS 2:CTS to self */
1106			psta->rtsen = 1;
1107			psta->cts2self = 0;
1108		} else {
1109			psta->rtsen = 0;
1110			psta->cts2self = 1;
1111		}
1112		break;
1113
1114	case 2: /* auto */
1115	default:
1116		if ((pmlmeinfo->ERP_enable) && (pmlmeinfo->ERP_IE & BIT(1))) {
1117			if (pregpriv->vcs_type == 1) {
1118				psta->rtsen = 1;
1119				psta->cts2self = 0;
1120			} else {
1121				psta->rtsen = 0;
1122				psta->cts2self = 1;
1123			}
1124		} else {
1125			psta->rtsen = 0;
1126			psta->cts2self = 0;
1127		}
1128		break;
1129	}
1130}
1131
1132void update_ldpc_stbc_cap(struct sta_info *psta)
1133{
1134	if (psta->htpriv.ht_option) {
1135		if (TEST_FLAG(psta->htpriv.ldpc_cap, LDPC_HT_ENABLE_TX))
1136			psta->ldpc = 1;
1137
1138		if (TEST_FLAG(psta->htpriv.stbc_cap, STBC_HT_ENABLE_TX))
1139			psta->stbc = 1;
1140	} else {
1141		psta->ldpc = 0;
1142		psta->stbc = 0;
1143	}
1144}
1145
1146int rtw_check_bcn_info(struct adapter *Adapter, u8 *pframe, u32 packet_len)
1147{
1148	unsigned int len;
1149	unsigned char *p;
1150	unsigned short	val16, subtype;
1151	struct wlan_network *cur_network = &(Adapter->mlmepriv.cur_network);
1152	/* u8 wpa_ie[255], rsn_ie[255]; */
1153	u16 wpa_len = 0, rsn_len = 0;
1154	u8 encryp_protocol = 0;
1155	struct wlan_bssid_ex *bssid;
1156	int group_cipher = 0, pairwise_cipher = 0, is_8021x = 0;
1157	unsigned char *pbuf;
1158	u32 wpa_ielen = 0;
1159	u8 *pbssid = GetAddr3Ptr(pframe);
1160	struct HT_info_element *pht_info = NULL;
1161	struct ieee80211_ht_cap *pht_cap = NULL;
1162	u32 bcn_channel;
1163	unsigned short	ht_cap_info;
1164	unsigned char ht_info_infos_0;
1165	struct mlme_priv *pmlmepriv = &Adapter->mlmepriv;
1166	int ssid_len;
1167
1168	if (is_client_associated_to_ap(Adapter) == false)
1169		return true;
1170
1171	len = packet_len - sizeof(struct ieee80211_hdr_3addr);
1172
1173	if (len > MAX_IE_SZ)
1174		return _FAIL;
1175
1176	if (memcmp(cur_network->network.mac_address, pbssid, 6))
1177		return true;
1178
1179	bssid = rtw_zmalloc(sizeof(struct wlan_bssid_ex));
1180	if (!bssid)
1181		return true;
1182
1183	if ((pmlmepriv->timeBcnInfoChkStart != 0) && (jiffies_to_msecs(jiffies - pmlmepriv->timeBcnInfoChkStart) > DISCONNECT_BY_CHK_BCN_FAIL_OBSERV_PERIOD_IN_MS)) {
1184		pmlmepriv->timeBcnInfoChkStart = 0;
1185		pmlmepriv->NumOfBcnInfoChkFail = 0;
1186	}
1187
1188	subtype = GetFrameSubType(pframe) >> 4;
1189
1190	if (subtype == WIFI_BEACON)
1191		bssid->reserved[0] = 1;
1192
1193	bssid->length = sizeof(struct wlan_bssid_ex) - MAX_IE_SZ + len;
1194
1195	/* below is to copy the information element */
1196	bssid->ie_length = len;
1197	memcpy(bssid->ies, (pframe + sizeof(struct ieee80211_hdr_3addr)), bssid->ie_length);
1198
1199	/* check bw and channel offset */
1200	/* parsing HT_CAP_IE */
1201	p = rtw_get_ie(bssid->ies + _FIXED_IE_LENGTH_, WLAN_EID_HT_CAPABILITY, &len, bssid->ie_length - _FIXED_IE_LENGTH_);
1202	if (p && len > 0) {
1203		pht_cap = (struct ieee80211_ht_cap *)(p + 2);
1204		ht_cap_info = le16_to_cpu(pht_cap->cap_info);
1205	} else {
1206		ht_cap_info = 0;
1207	}
1208	/* parsing HT_INFO_IE */
1209	p = rtw_get_ie(bssid->ies + _FIXED_IE_LENGTH_, WLAN_EID_HT_OPERATION, &len, bssid->ie_length - _FIXED_IE_LENGTH_);
1210	if (p && len > 0) {
1211		pht_info = (struct HT_info_element *)(p + 2);
1212		ht_info_infos_0 = pht_info->infos[0];
1213	} else {
1214		ht_info_infos_0 = 0;
1215	}
1216	if (ht_cap_info != cur_network->bcn_info.ht_cap_info ||
1217	    ((ht_info_infos_0&0x03) != (cur_network->bcn_info.ht_info_infos_0&0x03))) {
1218		{
1219			/* bcn_info_update */
1220			cur_network->bcn_info.ht_cap_info = ht_cap_info;
1221			cur_network->bcn_info.ht_info_infos_0 = ht_info_infos_0;
1222			/* to do : need to check that whether modify related register of BB or not */
1223		}
1224		/* goto _mismatch; */
1225	}
1226
1227	/* Checking for channel */
1228	p = rtw_get_ie(bssid->ies + _FIXED_IE_LENGTH_, WLAN_EID_DS_PARAMS, &len, bssid->ie_length - _FIXED_IE_LENGTH_);
1229	if (p) {
1230		bcn_channel = *(p + 2);
1231	} else {/* In 5G, some ap do not have DSSET IE checking HT info for channel */
1232		rtw_get_ie(bssid->ies + _FIXED_IE_LENGTH_, WLAN_EID_HT_OPERATION,
1233			   &len, bssid->ie_length - _FIXED_IE_LENGTH_);
1234		if (pht_info)
1235			bcn_channel = pht_info->primary_channel;
1236		else /* we don't find channel IE, so don't check it */
1237			bcn_channel = Adapter->mlmeextpriv.cur_channel;
1238	}
1239
1240	if (bcn_channel != Adapter->mlmeextpriv.cur_channel)
1241		goto _mismatch;
1242
1243	/* checking SSID */
1244	ssid_len = 0;
1245	p = rtw_get_ie(bssid->ies + _FIXED_IE_LENGTH_, WLAN_EID_SSID, &len, bssid->ie_length - _FIXED_IE_LENGTH_);
1246	if (p) {
1247		ssid_len = *(p + 1);
1248		if (ssid_len > NDIS_802_11_LENGTH_SSID)
1249			ssid_len = 0;
1250	}
1251	memcpy(bssid->ssid.ssid, (p + 2), ssid_len);
1252	bssid->ssid.ssid_length = ssid_len;
1253
1254	if (memcmp(bssid->ssid.ssid, cur_network->network.ssid.ssid, 32) ||
1255			bssid->ssid.ssid_length != cur_network->network.ssid.ssid_length)
1256		if (bssid->ssid.ssid[0] != '\0' &&
1257		    bssid->ssid.ssid_length != 0) /* not hidden ssid */
1258			goto _mismatch;
1259
1260	/* check encryption info */
1261	val16 = rtw_get_capability((struct wlan_bssid_ex *)bssid);
1262
1263	if (val16 & BIT(4))
1264		bssid->privacy = 1;
1265	else
1266		bssid->privacy = 0;
1267
1268	if (cur_network->network.privacy != bssid->privacy)
1269		goto _mismatch;
1270
1271	rtw_get_sec_ie(bssid->ies, bssid->ie_length, NULL, &rsn_len, NULL, &wpa_len);
1272
1273	if (rsn_len > 0)
1274		encryp_protocol = ENCRYP_PROTOCOL_WPA2;
1275	else if (wpa_len > 0)
1276		encryp_protocol = ENCRYP_PROTOCOL_WPA;
1277	else
1278		if (bssid->privacy)
1279			encryp_protocol = ENCRYP_PROTOCOL_WEP;
1280
1281	if (cur_network->bcn_info.encryp_protocol != encryp_protocol)
1282		goto _mismatch;
1283
1284	if (encryp_protocol == ENCRYP_PROTOCOL_WPA || encryp_protocol == ENCRYP_PROTOCOL_WPA2) {
1285		pbuf = rtw_get_wpa_ie(&bssid->ies[12], &wpa_ielen, bssid->ie_length-12);
1286		if (pbuf && (wpa_ielen > 0)) {
1287			rtw_parse_wpa_ie(pbuf, wpa_ielen + 2, &group_cipher,
1288					 &pairwise_cipher, &is_8021x);
1289		} else {
1290			pbuf = rtw_get_wpa2_ie(&bssid->ies[12], &wpa_ielen, bssid->ie_length-12);
1291
1292			if (pbuf && (wpa_ielen > 0))
1293				rtw_parse_wpa2_ie(pbuf, wpa_ielen + 2, &group_cipher,
1294						  &pairwise_cipher, &is_8021x);
1295		}
1296
1297		if (pairwise_cipher != cur_network->bcn_info.pairwise_cipher ||
1298		    group_cipher != cur_network->bcn_info.group_cipher)
1299			goto _mismatch;
1300
1301		if (is_8021x != cur_network->bcn_info.is_8021x)
1302			goto _mismatch;
1303	}
1304
1305	kfree(bssid);
1306	return _SUCCESS;
1307
1308_mismatch:
1309	kfree(bssid);
1310
1311	if (pmlmepriv->NumOfBcnInfoChkFail == 0)
1312		pmlmepriv->timeBcnInfoChkStart = jiffies;
1313
1314	pmlmepriv->NumOfBcnInfoChkFail++;
1315
1316	if ((pmlmepriv->timeBcnInfoChkStart != 0) && (jiffies_to_msecs(jiffies - pmlmepriv->timeBcnInfoChkStart) <= DISCONNECT_BY_CHK_BCN_FAIL_OBSERV_PERIOD_IN_MS)
1317		&& (pmlmepriv->NumOfBcnInfoChkFail >= DISCONNECT_BY_CHK_BCN_FAIL_THRESHOLD)) {
1318		pmlmepriv->timeBcnInfoChkStart = 0;
1319		pmlmepriv->NumOfBcnInfoChkFail = 0;
1320		return _FAIL;
1321	}
1322
1323	return _SUCCESS;
1324}
1325
1326void update_beacon_info(struct adapter *padapter, u8 *pframe, uint pkt_len, struct sta_info *psta)
1327{
1328	unsigned int i;
1329	unsigned int len;
1330	struct ndis_80211_var_ie *pIE;
1331
1332	len = pkt_len - (_BEACON_IE_OFFSET_ + WLAN_HDR_A3_LEN);
1333
1334	for (i = 0; i < len;) {
1335		pIE = (struct ndis_80211_var_ie *)(pframe + (_BEACON_IE_OFFSET_ + WLAN_HDR_A3_LEN) + i);
1336
1337		switch (pIE->element_id) {
1338		case WLAN_EID_VENDOR_SPECIFIC:
1339			/* to update WMM parameter set while receiving beacon */
1340			if (!memcmp(pIE->data, WMM_PARA_OUI, 6) && pIE->length == WLAN_WMM_LEN)	/* WMM */
1341				if (WMM_param_handler(padapter, pIE))
1342					report_wmm_edca_update(padapter);
1343
1344			break;
1345
1346		case WLAN_EID_HT_OPERATION:	/* HT info */
1347			/* HT_info_handler(padapter, pIE); */
1348			bwmode_update_check(padapter, pIE);
1349			break;
1350
1351		case WLAN_EID_ERP_INFO:
1352			ERP_IE_handler(padapter, pIE);
1353			VCS_update(padapter, psta);
1354			break;
1355
1356		default:
1357			break;
1358		}
1359
1360		i += (pIE->length + 2);
1361	}
1362}
1363
1364unsigned int is_ap_in_tkip(struct adapter *padapter)
1365{
1366	u32 i;
1367	struct ndis_80211_var_ie *pIE;
1368	struct mlme_ext_priv *pmlmeext = &padapter->mlmeextpriv;
1369	struct mlme_ext_info *pmlmeinfo = &(pmlmeext->mlmext_info);
1370	struct wlan_bssid_ex		*cur_network = &(pmlmeinfo->network);
1371
1372	if (rtw_get_capability((struct wlan_bssid_ex *)cur_network) & WLAN_CAPABILITY_PRIVACY) {
1373		for (i = sizeof(struct ndis_802_11_fix_ie); i < pmlmeinfo->network.ie_length;) {
1374			pIE = (struct ndis_80211_var_ie *)(pmlmeinfo->network.ies + i);
1375
1376			switch (pIE->element_id) {
1377			case WLAN_EID_VENDOR_SPECIFIC:
1378				if ((!memcmp(pIE->data, RTW_WPA_OUI, 4)) && (!memcmp((pIE->data + 12), WPA_TKIP_CIPHER, 4)))
1379					return true;
1380
1381				break;
1382
1383			case WLAN_EID_RSN:
1384				if (!memcmp((pIE->data + 8), RSN_TKIP_CIPHER, 4))
1385					return true;
1386				break;
1387
1388			default:
1389				break;
1390			}
1391
1392			i += (pIE->length + 2);
1393		}
1394
1395		return false;
1396	} else {
1397		return false;
1398	}
1399}
1400
1401int support_short_GI(struct adapter *padapter, struct HT_caps_element *pHT_caps, u8 bwmode)
1402{
1403	unsigned char bit_offset;
1404	struct mlme_ext_priv *pmlmeext = &padapter->mlmeextpriv;
1405	struct mlme_ext_info *pmlmeinfo = &(pmlmeext->mlmext_info);
1406
1407	if (!(pmlmeinfo->HT_enable))
1408		return _FAIL;
1409
1410	bit_offset = (bwmode & CHANNEL_WIDTH_40) ? 6 : 5;
1411
1412	if (le16_to_cpu(pHT_caps->u.HT_cap_element.HT_caps_info) & (0x1 << bit_offset))
1413		return _SUCCESS;
1414	else
1415		return _FAIL;
1416}
1417
1418unsigned char get_highest_rate_idx(u32 mask)
1419{
1420	int i;
1421	unsigned char rate_idx = 0;
1422
1423	for (i = 31; i >= 0; i--) {
1424		if (mask & BIT(i)) {
1425			rate_idx = i;
1426			break;
1427		}
1428	}
1429
1430	return rate_idx;
1431}
1432
1433void Update_RA_Entry(struct adapter *padapter, struct sta_info *psta)
1434{
1435	rtw_hal_update_ra_mask(psta, 0);
1436}
1437
1438void set_sta_rate(struct adapter *padapter, struct sta_info *psta)
1439{
1440	/* rate adaptive */
1441	Update_RA_Entry(padapter, psta);
1442}
1443
1444static u32 get_realtek_assoc_AP_vender(struct ndis_80211_var_ie *pIE)
1445{
1446	u32 Vender = HT_IOT_PEER_REALTEK;
1447
1448	if (pIE->length >= 5) {
1449		if (pIE->data[4] == 1)
1450			/* if (pIE->data[5] & RT_HT_CAP_USE_LONG_PREAMBLE) */
1451			/* bssDesc->BssHT.RT2RT_HT_Mode |= RT_HT_CAP_USE_LONG_PREAMBLE; */
1452			if (pIE->data[5] & RT_HT_CAP_USE_92SE)
1453				/* bssDesc->BssHT.RT2RT_HT_Mode |= RT_HT_CAP_USE_92SE; */
1454				Vender = HT_IOT_PEER_REALTEK_92SE;
1455
1456		if (pIE->data[5] & RT_HT_CAP_USE_SOFTAP)
1457			Vender = HT_IOT_PEER_REALTEK_SOFTAP;
1458
1459		if (pIE->data[4] == 2) {
1460			if (pIE->data[6] & RT_HT_CAP_USE_JAGUAR_BCUT)
1461				Vender = HT_IOT_PEER_REALTEK_JAGUAR_BCUTAP;
1462
1463			if (pIE->data[6] & RT_HT_CAP_USE_JAGUAR_CCUT)
1464				Vender = HT_IOT_PEER_REALTEK_JAGUAR_CCUTAP;
1465		}
1466	}
1467
1468	return Vender;
1469}
1470
1471unsigned char check_assoc_AP(u8 *pframe, uint len)
1472{
1473	unsigned int	i;
1474	struct ndis_80211_var_ie *pIE;
1475
1476	for (i = sizeof(struct ndis_802_11_fix_ie); i < len;) {
1477		pIE = (struct ndis_80211_var_ie *)(pframe + i);
1478
1479		switch (pIE->element_id) {
1480		case WLAN_EID_VENDOR_SPECIFIC:
1481			if ((!memcmp(pIE->data, ARTHEROS_OUI1, 3)) || (!memcmp(pIE->data, ARTHEROS_OUI2, 3)))
1482				return HT_IOT_PEER_ATHEROS;
1483			else if ((!memcmp(pIE->data, BROADCOM_OUI1, 3)) ||
1484				 (!memcmp(pIE->data, BROADCOM_OUI2, 3)) ||
1485				 (!memcmp(pIE->data, BROADCOM_OUI3, 3)))
1486				return HT_IOT_PEER_BROADCOM;
1487			else if (!memcmp(pIE->data, MARVELL_OUI, 3))
1488				return HT_IOT_PEER_MARVELL;
1489			else if (!memcmp(pIE->data, RALINK_OUI, 3))
1490				return HT_IOT_PEER_RALINK;
1491			else if (!memcmp(pIE->data, CISCO_OUI, 3))
1492				return HT_IOT_PEER_CISCO;
1493			else if (!memcmp(pIE->data, REALTEK_OUI, 3))
1494				return get_realtek_assoc_AP_vender(pIE);
1495			else if (!memcmp(pIE->data, AIRGOCAP_OUI, 3))
1496				return HT_IOT_PEER_AIRGO;
1497			else
1498				break;
1499
1500		default:
1501			break;
1502		}
1503
1504		i += (pIE->length + 2);
1505	}
1506
1507	return HT_IOT_PEER_UNKNOWN;
1508}
1509
1510void update_IOT_info(struct adapter *padapter)
1511{
1512	struct mlme_ext_priv *pmlmeext = &padapter->mlmeextpriv;
1513	struct mlme_ext_info *pmlmeinfo = &(pmlmeext->mlmext_info);
1514
1515	switch (pmlmeinfo->assoc_AP_vendor) {
1516	case HT_IOT_PEER_MARVELL:
1517		pmlmeinfo->turboMode_cts2self = 1;
1518		pmlmeinfo->turboMode_rtsen = 0;
1519		break;
1520
1521	case HT_IOT_PEER_RALINK:
1522		pmlmeinfo->turboMode_cts2self = 0;
1523		pmlmeinfo->turboMode_rtsen = 1;
1524		/* disable high power */
1525		Switch_DM_Func(padapter, (~DYNAMIC_BB_DYNAMIC_TXPWR), false);
1526		break;
1527	case HT_IOT_PEER_REALTEK:
1528		/* rtw_write16(padapter, 0x4cc, 0xffff); */
1529		/* rtw_write16(padapter, 0x546, 0x01c0); */
1530		/* disable high power */
1531		Switch_DM_Func(padapter, (~DYNAMIC_BB_DYNAMIC_TXPWR), false);
1532		break;
1533	default:
1534		pmlmeinfo->turboMode_cts2self = 0;
1535		pmlmeinfo->turboMode_rtsen = 1;
1536		break;
1537	}
1538}
1539
1540void update_capinfo(struct adapter *Adapter, u16 updateCap)
1541{
1542	struct mlme_ext_priv *pmlmeext = &Adapter->mlmeextpriv;
1543	struct mlme_ext_info *pmlmeinfo = &(pmlmeext->mlmext_info);
1544	bool		ShortPreamble;
1545
1546	/*  Check preamble mode, 2005.01.06, by rcnjko. */
1547	/*  Mark to update preamble value forever, 2008.03.18 by lanhsin */
1548	/* if (pMgntInfo->RegPreambleMode == PREAMBLE_AUTO) */
1549	{
1550		if (updateCap & cShortPreamble) {
1551			/*  Short Preamble */
1552			if (pmlmeinfo->preamble_mode != PREAMBLE_SHORT) { /*  PREAMBLE_LONG or PREAMBLE_AUTO */
1553				ShortPreamble = true;
1554				pmlmeinfo->preamble_mode = PREAMBLE_SHORT;
1555				rtw_hal_set_hwreg(Adapter, HW_VAR_ACK_PREAMBLE, (u8 *)&ShortPreamble);
1556			}
1557		} else {
1558			/*  Long Preamble */
1559			if (pmlmeinfo->preamble_mode != PREAMBLE_LONG) { /*  PREAMBLE_SHORT or PREAMBLE_AUTO */
1560				ShortPreamble = false;
1561				pmlmeinfo->preamble_mode = PREAMBLE_LONG;
1562				rtw_hal_set_hwreg(Adapter, HW_VAR_ACK_PREAMBLE, (u8 *)&ShortPreamble);
1563			}
1564		}
1565	}
1566
1567	if (updateCap & cIBSS) {
1568		/* Filen: See 802.11-2007 p.91 */
1569		pmlmeinfo->slotTime = NON_SHORT_SLOT_TIME;
1570	} else {
1571		/* Filen: See 802.11-2007 p.90 */
1572		if (pmlmeext->cur_wireless_mode & (WIRELESS_11_24N)) {
1573			pmlmeinfo->slotTime = SHORT_SLOT_TIME;
1574		} else if (pmlmeext->cur_wireless_mode & (WIRELESS_11G)) {
1575			if ((updateCap & cShortSlotTime) /* && (!(pMgntInfo->pHTInfo->RT2RT_HT_Mode & RT_HT_CAP_USE_LONG_PREAMBLE)) */)
1576				/*  Short Slot Time */
1577				pmlmeinfo->slotTime = SHORT_SLOT_TIME;
1578			else
1579				/*  Long Slot Time */
1580				pmlmeinfo->slotTime = NON_SHORT_SLOT_TIME;
1581		} else {
1582			/* B Mode */
1583			pmlmeinfo->slotTime = NON_SHORT_SLOT_TIME;
1584		}
1585	}
1586
1587	rtw_hal_set_hwreg(Adapter, HW_VAR_SLOT_TIME, &pmlmeinfo->slotTime);
1588}
1589
1590void update_wireless_mode(struct adapter *padapter)
1591{
1592	int network_type = 0;
1593	u32 SIFS_Timer;
1594	struct mlme_ext_priv *pmlmeext = &padapter->mlmeextpriv;
1595	struct mlme_ext_info *pmlmeinfo = &(pmlmeext->mlmext_info);
1596	struct wlan_bssid_ex *cur_network = &(pmlmeinfo->network);
1597	unsigned char *rate = cur_network->supported_rates;
1598
1599	if ((pmlmeinfo->HT_info_enable) && (pmlmeinfo->HT_caps_enable))
1600		pmlmeinfo->HT_enable = 1;
1601
1602	if (pmlmeinfo->HT_enable)
1603		network_type = WIRELESS_11_24N;
1604
1605	if (rtw_is_cckratesonly_included(rate))
1606		network_type |= WIRELESS_11B;
1607	else if (rtw_is_cckrates_included(rate))
1608		network_type |= WIRELESS_11BG;
1609	else
1610		network_type |= WIRELESS_11G;
1611
1612	pmlmeext->cur_wireless_mode = network_type & padapter->registrypriv.wireless_mode;
1613
1614	SIFS_Timer = 0x0a0a0808; /* 0x0808 -> for CCK, 0x0a0a -> for OFDM */
1615													/* change this value if having IOT issues. */
1616
1617	padapter->HalFunc.SetHwRegHandler(padapter, HW_VAR_RESP_SIFS,  (u8 *)&SIFS_Timer);
1618
1619	padapter->HalFunc.SetHwRegHandler(padapter, HW_VAR_WIRELESS_MODE,  (u8 *)&(pmlmeext->cur_wireless_mode));
1620
1621	if (pmlmeext->cur_wireless_mode & WIRELESS_11B)
1622		update_mgnt_tx_rate(padapter, IEEE80211_CCK_RATE_1MB);
1623	else
1624		update_mgnt_tx_rate(padapter, IEEE80211_OFDM_RATE_6MB);
1625}
1626
1627void update_sta_basic_rate(struct sta_info *psta, u8 wireless_mode)
1628{
1629	if (is_supported_tx_cck(wireless_mode)) {
1630		/*  Only B, B/G, and B/G/N AP could use CCK rate */
1631		memcpy(psta->bssrateset, rtw_basic_rate_cck, 4);
1632		psta->bssratelen = 4;
1633	} else {
1634		memcpy(psta->bssrateset, rtw_basic_rate_ofdm, 3);
1635		psta->bssratelen = 3;
1636	}
1637}
1638
1639int update_sta_support_rate(struct adapter *padapter, u8 *pvar_ie, uint var_ie_len, int cam_idx)
1640{
1641	unsigned int	ie_len;
1642	struct ndis_80211_var_ie *pIE;
1643	int	supportRateNum = 0;
1644	struct mlme_ext_priv *pmlmeext = &(padapter->mlmeextpriv);
1645	struct mlme_ext_info *pmlmeinfo = &(pmlmeext->mlmext_info);
1646
1647	pIE = (struct ndis_80211_var_ie *)rtw_get_ie(pvar_ie, WLAN_EID_SUPP_RATES, &ie_len, var_ie_len);
1648	if (!pIE)
1649		return _FAIL;
1650	if (ie_len > sizeof(pmlmeinfo->FW_sta_info[cam_idx].SupportedRates))
1651		return _FAIL;
1652
1653	memcpy(pmlmeinfo->FW_sta_info[cam_idx].SupportedRates, pIE->data, ie_len);
1654	supportRateNum = ie_len;
1655
1656	pIE = (struct ndis_80211_var_ie *)rtw_get_ie(pvar_ie, WLAN_EID_EXT_SUPP_RATES, &ie_len, var_ie_len);
1657	if (pIE && (ie_len <= sizeof(pmlmeinfo->FW_sta_info[cam_idx].SupportedRates) - supportRateNum))
1658		memcpy((pmlmeinfo->FW_sta_info[cam_idx].SupportedRates + supportRateNum), pIE->data, ie_len);
1659
1660	return _SUCCESS;
1661}
1662
1663void process_addba_req(struct adapter *padapter, u8 *paddba_req, u8 *addr)
1664{
1665	struct sta_info *psta;
1666	u16 tid, param;
1667	struct recv_reorder_ctrl *preorder_ctrl;
1668	struct sta_priv *pstapriv = &padapter->stapriv;
1669	struct ADDBA_request *preq = (struct ADDBA_request *)paddba_req;
1670	struct mlme_ext_priv *pmlmeext = &padapter->mlmeextpriv;
1671	struct mlme_ext_info *pmlmeinfo = &(pmlmeext->mlmext_info);
1672
1673	psta = rtw_get_stainfo(pstapriv, addr);
1674
1675	if (psta) {
1676		param = le16_to_cpu(preq->BA_para_set);
1677		tid = (param>>2)&0x0f;
1678
1679		preorder_ctrl = &psta->recvreorder_ctrl[tid];
1680
1681		preorder_ctrl->indicate_seq = 0xffff;
1682
1683		preorder_ctrl->enable = pmlmeinfo->accept_addba_req;
1684	}
1685}
1686
1687void update_TSF(struct mlme_ext_priv *pmlmeext, u8 *pframe, uint len)
1688{
1689	u8 *pIE;
1690	__le32 *pbuf;
1691
1692	pIE = pframe + sizeof(struct ieee80211_hdr_3addr);
1693	pbuf = (__le32 *)pIE;
1694
1695	pmlmeext->TSFValue = le32_to_cpu(*(pbuf+1));
1696
1697	pmlmeext->TSFValue = pmlmeext->TSFValue << 32;
1698
1699	pmlmeext->TSFValue |= le32_to_cpu(*pbuf);
1700}
1701
1702void correct_TSF(struct adapter *padapter, struct mlme_ext_priv *pmlmeext)
1703{
1704	rtw_hal_set_hwreg(padapter, HW_VAR_CORRECT_TSF, NULL);
1705}
1706
1707void adaptive_early_32k(struct mlme_ext_priv *pmlmeext, u8 *pframe, uint len)
1708{
1709	int i;
1710	u8 *pIE;
1711	__le32 *pbuf;
1712	u64 tsf = 0;
1713	u32 delay_ms;
1714	struct mlme_ext_info *pmlmeinfo = &(pmlmeext->mlmext_info);
1715
1716	pmlmeext->bcn_cnt++;
1717
1718	pIE = pframe + sizeof(struct ieee80211_hdr_3addr);
1719	pbuf = (__le32 *)pIE;
1720
1721	tsf = le32_to_cpu(*(pbuf+1));
1722	tsf = tsf << 32;
1723	tsf |= le32_to_cpu(*pbuf);
1724
1725	/* delay = (timestamp mod 1024*100)/1000 (unit: ms) */
1726	/* delay_ms = do_div(tsf, (pmlmeinfo->bcn_interval*1024))/1000; */
1727	delay_ms = do_div(tsf, (pmlmeinfo->bcn_interval*1024));
1728	delay_ms = delay_ms/1000;
1729
1730	if (delay_ms >= 8)
1731		pmlmeext->bcn_delay_cnt[8]++;
1732		/* pmlmeext->bcn_delay_ratio[8] = (pmlmeext->bcn_delay_cnt[8] * 100) /pmlmeext->bcn_cnt; */
1733	else
1734		pmlmeext->bcn_delay_cnt[delay_ms]++;
1735		/* pmlmeext->bcn_delay_ratio[delay_ms] = (pmlmeext->bcn_delay_cnt[delay_ms] * 100) /pmlmeext->bcn_cnt; */
1736
1737/*
1738
1739	for (i = 0; i<9; i++)
1740	{
1741			pmlmeext->bcn_delay_cnt[i] , i, pmlmeext->bcn_delay_ratio[i]);
1742	}
1743*/
1744
1745	/* dump for  adaptive_early_32k */
1746	if (pmlmeext->bcn_cnt > 100 && (pmlmeext->adaptive_tsf_done == true)) {
1747		u8 ratio_20_delay, ratio_80_delay;
1748		u8 DrvBcnEarly, DrvBcnTimeOut;
1749
1750		ratio_20_delay = 0;
1751		ratio_80_delay = 0;
1752		DrvBcnEarly = 0xff;
1753		DrvBcnTimeOut = 0xff;
1754
1755		for (i = 0; i < 9; i++) {
1756			pmlmeext->bcn_delay_ratio[i] = (pmlmeext->bcn_delay_cnt[i] * 100) / pmlmeext->bcn_cnt;
1757
1758			ratio_20_delay += pmlmeext->bcn_delay_ratio[i];
1759			ratio_80_delay += pmlmeext->bcn_delay_ratio[i];
1760
1761			if (ratio_20_delay > 20 && DrvBcnEarly == 0xff)
1762				DrvBcnEarly = i;
1763
1764			if (ratio_80_delay > 80 && DrvBcnTimeOut == 0xff)
1765				DrvBcnTimeOut = i;
1766
1767			/* reset adaptive_early_32k cnt */
1768			pmlmeext->bcn_delay_cnt[i] = 0;
1769			pmlmeext->bcn_delay_ratio[i] = 0;
1770		}
1771
1772		pmlmeext->DrvBcnEarly = DrvBcnEarly;
1773		pmlmeext->DrvBcnTimeOut = DrvBcnTimeOut;
1774
1775		pmlmeext->bcn_cnt = 0;
1776	}
1777}
1778
1779void rtw_alloc_macid(struct adapter *padapter, struct sta_info *psta)
1780{
1781	int i;
1782	struct dvobj_priv *pdvobj = adapter_to_dvobj(padapter);
1783
1784	if (is_broadcast_ether_addr(psta->hwaddr))
1785		return;
1786
1787	if (!memcmp(psta->hwaddr, myid(&padapter->eeprompriv), ETH_ALEN)) {
1788		psta->mac_id = NUM_STA;
1789		return;
1790	}
1791
1792	spin_lock_bh(&pdvobj->lock);
1793	for (i = 0; i < NUM_STA; i++) {
1794		if (pdvobj->macid[i] == false) {
1795			pdvobj->macid[i]  = true;
1796			break;
1797		}
1798	}
1799	spin_unlock_bh(&pdvobj->lock);
1800
1801	if (i > (NUM_STA - 1))
1802		psta->mac_id = NUM_STA;
1803	else
1804		psta->mac_id = i;
1805}
1806
1807void rtw_release_macid(struct adapter *padapter, struct sta_info *psta)
1808{
1809	struct dvobj_priv *pdvobj = adapter_to_dvobj(padapter);
1810
1811	if (is_broadcast_ether_addr(psta->hwaddr))
1812		return;
1813
1814	if (!memcmp(psta->hwaddr, myid(&padapter->eeprompriv), ETH_ALEN))
1815		return;
1816
1817	spin_lock_bh(&pdvobj->lock);
1818	if (psta->mac_id < NUM_STA && psta->mac_id != 1) {
1819		if (pdvobj->macid[psta->mac_id] == true) {
1820			pdvobj->macid[psta->mac_id] = false;
1821			psta->mac_id = NUM_STA;
1822		}
1823	}
1824	spin_unlock_bh(&pdvobj->lock);
1825}
1826
1827/* For 8188E RA */
1828u8 rtw_search_max_mac_id(struct adapter *padapter)
1829{
1830	u8 max_mac_id = 0;
1831	struct dvobj_priv *pdvobj = adapter_to_dvobj(padapter);
1832	int i;
1833
1834	spin_lock_bh(&pdvobj->lock);
1835	for (i = (NUM_STA-1); i >= 0 ; i--) {
1836		if (pdvobj->macid[i] == true)
1837			break;
1838	}
1839	max_mac_id = i;
1840	spin_unlock_bh(&pdvobj->lock);
1841
1842	return max_mac_id;
1843}
1844
1845struct adapter *dvobj_get_port0_adapter(struct dvobj_priv *dvobj)
1846{
1847	if (get_iface_type(dvobj->padapters[i]) != IFACE_PORT0)
1848		return NULL;
1849
1850	return dvobj->padapters;
1851}
1852