rtl871x_mlme.c

Go to the documentation of this file.

/******************************************************************************
 * rtl871x_mlme.c
 *
 * Copyright(c) 2007 - 2010 Realtek Corporation. All rights reserved.
 * Linux device driver for RTL8192SU
 *
 * This program is free software; you can redistribute it and/or modify it
 * under the terms of version 2 of the GNU General Public License as
 * published by the Free Software Foundation.
 *
 * This program is distributed in the hope that it will be useful, but WITHOUT
 * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
 * FITNESS FOR A PARTICULAR PURPOSE.  See the GNU General Public License for
 * more details.
 *
 * You should have received a copy of the GNU General Public License along with
 * this program; if not, write to the Free Software Foundation, Inc.,
 * 51 Franklin Street, Fifth Floor, Boston, MA 02110, USA
 *
 * Modifications for inclusion into the Linux staging tree are
 * Copyright(c) 2010 Larry Finger. All rights reserved.
 *
 * Contact information:
 * WLAN FAE <[email protected]>
 * Larry Finger <[email protected]>
 *
 ******************************************************************************/

#define _RTL871X_MLME_C_

#include <linux/etherdevice.h>

#include "osdep_service.h"
#include "drv_types.h"
#include "recv_osdep.h"
#include "xmit_osdep.h"
#include "mlme_osdep.h"
#include "sta_info.h"
#include "wifi.h"
#include "wlan_bssdef.h"

static void update_ht_cap(struct _adapter *padapter, u8 *pie, uint ie_len);

static sint _init_mlme_priv(struct _adapter *padapter)
{
    sint    i;
    u8  *pbuf;
    struct wlan_network *pnetwork;
    struct  mlme_priv *pmlmepriv = &padapter->mlmepriv;

    memset((u8 *)pmlmepriv, 0, sizeof(struct mlme_priv));
    pmlmepriv->nic_hdl = (u8 *)padapter;
    pmlmepriv->pscanned = NULL;
    pmlmepriv->fw_state = 0;
    pmlmepriv->cur_network.network.InfrastructureMode =
                 Ndis802_11AutoUnknown;
    /* Maybe someday we should rename this variable to "active_mode"(Jeff)*/
    pmlmepriv->passive_mode = 1; /* 1: active, 0: passive. */
    spin_lock_init(&(pmlmepriv->lock));
    spin_lock_init(&(pmlmepriv->lock2));
    _init_queue(&(pmlmepriv->free_bss_pool));
    _init_queue(&(pmlmepriv->scanned_queue));
    set_scanned_network_val(pmlmepriv, 0);
    memset(&pmlmepriv->assoc_ssid, 0, sizeof(struct ndis_802_11_ssid));
    pbuf = _malloc(MAX_BSS_CNT * (sizeof(struct wlan_network)));
    if (pbuf == NULL)
        return _FAIL;
    pmlmepriv->free_bss_buf = pbuf;
    pnetwork = (struct wlan_network *)pbuf;
    for (i = 0; i < MAX_BSS_CNT; i++) {
        _init_listhead(&(pnetwork->list));
        list_insert_tail(&(pnetwork->list),
                 &(pmlmepriv->free_bss_pool.queue));
        pnetwork++;
    }
    pmlmepriv->sitesurveyctrl.last_rx_pkts = 0;
    pmlmepriv->sitesurveyctrl.last_tx_pkts = 0;
    pmlmepriv->sitesurveyctrl.traffic_busy = false;
    /* allocate DMA-able/Non-Page memory for cmd_buf and rsp_buf */
    r8712_init_mlme_timer(padapter);
    return _SUCCESS;
}

struct wlan_network *_r8712_alloc_network(struct mlme_priv *pmlmepriv)
{
    unsigned long irqL;
    struct wlan_network *pnetwork;
    struct  __queue *free_queue = &pmlmepriv->free_bss_pool;
    struct list_head *plist = NULL;

    if (_queue_empty(free_queue) == true)
        return NULL;
    spin_lock_irqsave(&free_queue->lock, irqL);
    plist = get_next(&(free_queue->queue));
    pnetwork = LIST_CONTAINOR(plist , struct wlan_network, list);
    list_delete(&pnetwork->list);
    pnetwork->last_scanned = jiffies;
    pmlmepriv->num_of_scanned++;
    spin_unlock_irqrestore(&free_queue->lock, irqL);
    return pnetwork;
}

static void _free_network(struct mlme_priv *pmlmepriv,
              struct wlan_network *pnetwork)
{
    u32 curr_time, delta_time;
    unsigned long irqL;
    struct  __queue *free_queue = &(pmlmepriv->free_bss_pool);

    if (pnetwork == NULL)
        return;
    if (pnetwork->fixed == true)
        return;
    curr_time = jiffies;
    delta_time = (curr_time - (u32)pnetwork->last_scanned) / HZ;
    if (delta_time < SCANQUEUE_LIFETIME)
        return;
    spin_lock_irqsave(&free_queue->lock, irqL);
    list_delete(&pnetwork->list);
    list_insert_tail(&pnetwork->list, &free_queue->queue);
    pmlmepriv->num_of_scanned--;
    spin_unlock_irqrestore(&free_queue->lock, irqL);
}

static void _free_network_nolock(struct mlme_priv *pmlmepriv,
              struct wlan_network *pnetwork)
{
    struct  __queue *free_queue = &pmlmepriv->free_bss_pool;

    if (pnetwork == NULL)
        return;
    if (pnetwork->fixed == true)
        return;
    list_delete(&pnetwork->list);
    list_insert_tail(&pnetwork->list, get_list_head(free_queue));
    pmlmepriv->num_of_scanned--;
}


/*
    return the wlan_network with the matching addr
    Shall be called under atomic context...
    to avoid possible racing condition...
*/
static struct wlan_network *_r8712_find_network(struct  __queue *scanned_queue,
                     u8 *addr)
{
    unsigned long irqL;
    struct list_head *phead, *plist;
    struct wlan_network *pnetwork = NULL;

    if (is_zero_ether_addr(addr))
        return NULL;
    spin_lock_irqsave(&scanned_queue->lock, irqL);
    phead = get_list_head(scanned_queue);
    plist = get_next(phead);
    while (plist != phead) {
        pnetwork = LIST_CONTAINOR(plist, struct wlan_network, list);
        plist = get_next(plist);
        if (!memcmp(addr, pnetwork->network.MacAddress, ETH_ALEN))
            break;
    }
    spin_unlock_irqrestore(&scanned_queue->lock, irqL);
    return pnetwork;
}

static void _free_network_queue(struct _adapter *padapter)
{
    unsigned long irqL;
    struct list_head *phead, *plist;
    struct wlan_network *pnetwork;
    struct mlme_priv *pmlmepriv = &padapter->mlmepriv;
    struct  __queue *scanned_queue = &pmlmepriv->scanned_queue;

    spin_lock_irqsave(&scanned_queue->lock, irqL);
    phead = get_list_head(scanned_queue);
    plist = get_next(phead);
    while (end_of_queue_search(phead, plist) == false) {
        pnetwork = LIST_CONTAINOR(plist, struct wlan_network, list);
        plist = get_next(plist);
        _free_network(pmlmepriv, pnetwork);
    }
    spin_unlock_irqrestore(&scanned_queue->lock, irqL);
}

sint r8712_if_up(struct _adapter *padapter)
{
    sint res;

    if (padapter->bDriverStopped || padapter->bSurpriseRemoved ||
        (check_fwstate(&padapter->mlmepriv, _FW_LINKED) == false)) {
        res = false;
    } else
        res = true;
    return res;
}

void r8712_generate_random_ibss(u8 *pibss)
{
    u32 curtime = jiffies;

    pibss[0] = 0x02; /*in ad-hoc mode bit1 must set to 1 */
    pibss[1] = 0x11;
    pibss[2] = 0x87;
    pibss[3] = (u8)(curtime & 0xff);
    pibss[4] = (u8)((curtime>>8) & 0xff);
    pibss[5] = (u8)((curtime>>16) & 0xff);
}

uint r8712_get_ndis_wlan_bssid_ex_sz(struct ndis_wlan_bssid_ex *bss)
{
    uint t_len;

    t_len = sizeof(u32) + 6 * sizeof(unsigned long) + 2 +
            sizeof(struct ndis_802_11_ssid) + sizeof(u32) +
            sizeof(s32) +
            sizeof(enum NDIS_802_11_NETWORK_TYPE) +
            sizeof(struct NDIS_802_11_CONFIGURATION) +
            sizeof(enum NDIS_802_11_NETWORK_INFRASTRUCTURE) +
            sizeof(NDIS_802_11_RATES_EX) +
            sizeof(u32) + bss->IELength;
    return t_len;
}

u8 *r8712_get_capability_from_ie(u8 *ie)
{
    return ie + 8 + 2;
}

int r8712_init_mlme_priv(struct _adapter *padapter)
{
    return _init_mlme_priv(padapter);
}

void r8712_free_mlme_priv(struct mlme_priv *pmlmepriv)
{
    kfree(pmlmepriv->free_bss_buf);
}

static struct   wlan_network *alloc_network(struct mlme_priv *pmlmepriv)
{
    return _r8712_alloc_network(pmlmepriv);
}

static void free_network_nolock(struct mlme_priv *pmlmepriv,
             struct wlan_network *pnetwork)
{
    _free_network_nolock(pmlmepriv, pnetwork);
}

void r8712_free_network_queue(struct _adapter *dev)
{
    _free_network_queue(dev);
}

/*
    return the wlan_network with the matching addr

    Shall be called under atomic context...
    to avoid possible racing condition...
*/
static struct wlan_network *r8712_find_network(struct  __queue *scanned_queue,
                           u8 *addr)
{
    struct wlan_network *pnetwork = _r8712_find_network(scanned_queue,
                                addr);

    return pnetwork;
}

int r8712_is_same_ibss(struct _adapter *adapter, struct wlan_network *pnetwork)
{
    int ret = true;
    struct security_priv *psecuritypriv = &adapter->securitypriv;

    if ((psecuritypriv->PrivacyAlgrthm != _NO_PRIVACY_) &&
            (pnetwork->network.Privacy == 0))
        ret = false;
    else if ((psecuritypriv->PrivacyAlgrthm == _NO_PRIVACY_) &&
         (pnetwork->network.Privacy == 1))
        ret = false;
    else
        ret = true;
    return ret;

}

static int is_same_network(struct ndis_wlan_bssid_ex *src,
               struct ndis_wlan_bssid_ex *dst)
{
     u16 s_cap, d_cap;

    memcpy((u8 *)&s_cap, r8712_get_capability_from_ie(src->IEs), 2);
    memcpy((u8 *)&d_cap, r8712_get_capability_from_ie(dst->IEs), 2);
    return (src->Ssid.SsidLength == dst->Ssid.SsidLength) &&
            (src->Configuration.DSConfig ==
            dst->Configuration.DSConfig) &&
            ((!memcmp(src->MacAddress, dst->MacAddress,
            ETH_ALEN))) &&
            ((!memcmp(src->Ssid.Ssid,
              dst->Ssid.Ssid,
              src->Ssid.SsidLength))) &&
            ((s_cap & WLAN_CAPABILITY_IBSS) ==
            (d_cap & WLAN_CAPABILITY_IBSS)) &&
            ((s_cap & WLAN_CAPABILITY_BSS) ==
            (d_cap & WLAN_CAPABILITY_BSS));

}

struct  wlan_network *r8712_get_oldest_wlan_network(
                struct  __queue *scanned_queue)
{
    struct list_head *plist, *phead;
    struct  wlan_network    *pwlan = NULL;
    struct  wlan_network    *oldest = NULL;

    phead = get_list_head(scanned_queue);
    plist = get_next(phead);
    while (1) {
        if (end_of_queue_search(phead, plist) ==  true)
            break;
        pwlan = LIST_CONTAINOR(plist, struct wlan_network, list);
        if (pwlan->fixed != true) {
            if (oldest == NULL ||
                time_after((unsigned long)oldest->last_scanned,
                (unsigned long)pwlan->last_scanned))
                oldest = pwlan;
        }
        plist = get_next(plist);
    }
    return oldest;
}

static void update_network(struct ndis_wlan_bssid_ex *dst,
               struct ndis_wlan_bssid_ex *src,
               struct _adapter *padapter)
{
    u32 last_evm = 0, tmpVal;

    if (check_fwstate(&padapter->mlmepriv, _FW_LINKED) &&
        is_same_network(&(padapter->mlmepriv.cur_network.network), src)) {
        if (padapter->recvpriv.signal_qual_data.total_num++ >=
            PHY_LINKQUALITY_SLID_WIN_MAX) {
            padapter->recvpriv.signal_qual_data.total_num =
                   PHY_LINKQUALITY_SLID_WIN_MAX;
            last_evm = padapter->recvpriv.signal_qual_data.
                   elements[padapter->recvpriv.
                   signal_qual_data.index];
            padapter->recvpriv.signal_qual_data.total_val -=
                 last_evm;
        }
        padapter->recvpriv.signal_qual_data.total_val += src->Rssi;

        padapter->recvpriv.signal_qual_data.
              elements[padapter->recvpriv.signal_qual_data.
              index++] = src->Rssi;
        if (padapter->recvpriv.signal_qual_data.index >=
            PHY_LINKQUALITY_SLID_WIN_MAX)
            padapter->recvpriv.signal_qual_data.index = 0;
        /* <1> Showed on UI for user, in percentage. */
        tmpVal = padapter->recvpriv.signal_qual_data.total_val /
             padapter->recvpriv.signal_qual_data.total_num;
        padapter->recvpriv.signal = (u8)tmpVal;

        src->Rssi = padapter->recvpriv.signal;
    } else
        src->Rssi = (src->Rssi + dst->Rssi) / 2;
    memcpy((u8 *)dst, (u8 *)src, r8712_get_ndis_wlan_bssid_ex_sz(src));
}

static void update_current_network(struct _adapter *adapter,
                   struct ndis_wlan_bssid_ex *pnetwork)
{
    struct mlme_priv *pmlmepriv = &adapter->mlmepriv;

    if (is_same_network(&(pmlmepriv->cur_network.network), pnetwork)) {
        update_network(&(pmlmepriv->cur_network.network),
                   pnetwork, adapter);
        r8712_update_protection(adapter,
                   (pmlmepriv->cur_network.network.IEs) +
                   sizeof(struct NDIS_802_11_FIXED_IEs),
                   pmlmepriv->cur_network.network.IELength);
    }
}

/*
Caller must hold pmlmepriv->lock first.
*/
static void update_scanned_network(struct _adapter *adapter,
                struct ndis_wlan_bssid_ex *target)
{
    struct list_head *plist, *phead;

    u32 bssid_ex_sz;
    struct mlme_priv *pmlmepriv = &adapter->mlmepriv;
    struct  __queue *queue = &pmlmepriv->scanned_queue;
    struct wlan_network *pnetwork = NULL;
    struct wlan_network *oldest = NULL;

    phead = get_list_head(queue);
    plist = get_next(phead);

    while (1) {
        if (end_of_queue_search(phead, plist) == true)
            break;

        pnetwork = LIST_CONTAINOR(plist, struct wlan_network, list);
        if (is_same_network(&pnetwork->network, target))
            break;
        if ((oldest == ((struct wlan_network *)0)) ||
            time_after((unsigned long)oldest->last_scanned,
                (unsigned long)pnetwork->last_scanned))
            oldest = pnetwork;

        plist = get_next(plist);
    }


    /* If we didn't find a match, then get a new network slot to initialize
     * with this beacon's information */
    if (end_of_queue_search(phead, plist) == true) {
        if (_queue_empty(&pmlmepriv->free_bss_pool) == true) {
            /* If there are no more slots, expire the oldest */
            pnetwork = oldest;
            target->Rssi = (pnetwork->network.Rssi +
                    target->Rssi) / 2;
            memcpy(&pnetwork->network, target,
                r8712_get_ndis_wlan_bssid_ex_sz(target));
            pnetwork->last_scanned = jiffies;
        } else {
            /* Otherwise just pull from the free list */
            /* update scan_time */
            pnetwork = alloc_network(pmlmepriv);
            if (pnetwork == NULL)
                return;
            bssid_ex_sz = r8712_get_ndis_wlan_bssid_ex_sz(target);
            target->Length = bssid_ex_sz;
            memcpy(&pnetwork->network, target, bssid_ex_sz);
            list_insert_tail(&pnetwork->list, &queue->queue);
        }
    } else {
        /* we have an entry and we are going to update it. But
         * this entry may be already expired. In this case we
         * do the same as we found a new net and call the new_net
         * handler
         */
        update_network(&pnetwork->network, target, adapter);
        pnetwork->last_scanned = jiffies;
    }
}

static void rtl8711_add_network(struct _adapter *adapter,
             struct ndis_wlan_bssid_ex *pnetwork)
{
    unsigned long irqL;
    struct mlme_priv *pmlmepriv = &(((struct _adapter *)adapter)->mlmepriv);
    struct  __queue *queue = &pmlmepriv->scanned_queue;

    spin_lock_irqsave(&queue->lock, irqL);
    update_current_network(adapter, pnetwork);
    update_scanned_network(adapter, pnetwork);
    spin_unlock_irqrestore(&queue->lock, irqL);
}

/*select the desired network based on the capability of the (i)bss.
 * check items:     (1) security
 *          (2) network_type
 *          (3) WMM
 *          (4) HT
 *          (5) others
 */
static int is_desired_network(struct _adapter *adapter,
                struct wlan_network *pnetwork)
{
    u8 wps_ie[512];
    uint wps_ielen;
    int bselected = true;
    struct  security_priv *psecuritypriv = &adapter->securitypriv;

    if (psecuritypriv->wps_phase == true) {
        if (r8712_get_wps_ie(pnetwork->network.IEs,
            pnetwork->network.IELength, wps_ie,
            &wps_ielen) == true)
            return true;
        else
            return false;
    }
    if ((psecuritypriv->PrivacyAlgrthm != _NO_PRIVACY_) &&
            (pnetwork->network.Privacy == 0))
        bselected = false;
    if (check_fwstate(&adapter->mlmepriv, WIFI_ADHOC_STATE) == true) {
        if (pnetwork->network.InfrastructureMode !=
            adapter->mlmepriv.cur_network.network.
            InfrastructureMode)
            bselected = false;
    }
    return bselected;
}

/* TODO: Perry : For Power Management */
void r8712_atimdone_event_callback(struct _adapter *adapter , u8 *pbuf)
{
}

void r8712_survey_event_callback(struct _adapter *adapter, u8 *pbuf)
{
    unsigned long flags;
    u32 len;
    struct ndis_wlan_bssid_ex *pnetwork;
    struct mlme_priv *pmlmepriv = &adapter->mlmepriv;

    pnetwork = (struct ndis_wlan_bssid_ex *)pbuf;
#ifdef __BIG_ENDIAN
    /* endian_convert */
    pnetwork->Length = le32_to_cpu(pnetwork->Length);
    pnetwork->Ssid.SsidLength = le32_to_cpu(pnetwork->Ssid.SsidLength);
    pnetwork->Privacy = le32_to_cpu(pnetwork->Privacy);
    pnetwork->Rssi = le32_to_cpu(pnetwork->Rssi);
    pnetwork->NetworkTypeInUse = le32_to_cpu(pnetwork->NetworkTypeInUse);
    pnetwork->Configuration.ATIMWindow =
         le32_to_cpu(pnetwork->Configuration.ATIMWindow);
    pnetwork->Configuration.BeaconPeriod =
         le32_to_cpu(pnetwork->Configuration.BeaconPeriod);
    pnetwork->Configuration.DSConfig =
         le32_to_cpu(pnetwork->Configuration.DSConfig);
    pnetwork->Configuration.FHConfig.DwellTime =
         le32_to_cpu(pnetwork->Configuration.FHConfig.DwellTime);
    pnetwork->Configuration.FHConfig.HopPattern =
         le32_to_cpu(pnetwork->Configuration.FHConfig.HopPattern);
    pnetwork->Configuration.FHConfig.HopSet =
         le32_to_cpu(pnetwork->Configuration.FHConfig.HopSet);
    pnetwork->Configuration.FHConfig.Length =
         le32_to_cpu(pnetwork->Configuration.FHConfig.Length);
    pnetwork->Configuration.Length =
         le32_to_cpu(pnetwork->Configuration.Length);
    pnetwork->InfrastructureMode =
         le32_to_cpu(pnetwork->InfrastructureMode);
    pnetwork->IELength = le32_to_cpu(pnetwork->IELength);
#endif
    len = r8712_get_ndis_wlan_bssid_ex_sz(pnetwork);
    if (len > sizeof(struct wlan_bssid_ex))
        return;
    spin_lock_irqsave(&pmlmepriv->lock2, flags);
    /* update IBSS_network 's timestamp */
    if (check_fwstate(pmlmepriv, WIFI_ADHOC_MASTER_STATE) == true) {
        if (!memcmp(&(pmlmepriv->cur_network.network.MacAddress),
            pnetwork->MacAddress, ETH_ALEN)) {
            struct wlan_network *ibss_wlan = NULL;

            memcpy(pmlmepriv->cur_network.network.IEs,
                pnetwork->IEs, 8);
            ibss_wlan = r8712_find_network(
                        &pmlmepriv->scanned_queue,
                        pnetwork->MacAddress);
            if (ibss_wlan) {
                memcpy(ibss_wlan->network.IEs,
                    pnetwork->IEs, 8);
                goto exit;
            }
        }
    }
    /* lock pmlmepriv->lock when you accessing network_q */
    if (check_fwstate(pmlmepriv, _FW_UNDER_LINKING) == false) {
        if (pnetwork->Ssid.Ssid[0] != 0)
            rtl8711_add_network(adapter, pnetwork);
        else {
            pnetwork->Ssid.SsidLength = 8;
            memcpy(pnetwork->Ssid.Ssid, "<hidden>", 8);
            rtl8711_add_network(adapter, pnetwork);
        }
    }
exit:
    spin_unlock_irqrestore(&pmlmepriv->lock2, flags);
}

void r8712_surveydone_event_callback(struct _adapter *adapter, u8 *pbuf)
{
    unsigned long irqL;
    struct mlme_priv *pmlmepriv = &adapter->mlmepriv;

    spin_lock_irqsave(&pmlmepriv->lock, irqL);

    if (check_fwstate(pmlmepriv, _FW_UNDER_SURVEY) == true) {
        u8 timer_cancelled;

        _cancel_timer(&pmlmepriv->scan_to_timer, &timer_cancelled);

        _clr_fwstate_(pmlmepriv, _FW_UNDER_SURVEY);
    }

    if (pmlmepriv->to_join == true) {
        if ((check_fwstate(pmlmepriv, WIFI_ADHOC_STATE) == true)) {
            if (check_fwstate(pmlmepriv, _FW_LINKED) == false) {
                set_fwstate(pmlmepriv, _FW_UNDER_LINKING);

                if (r8712_select_and_join_from_scan(pmlmepriv)
                    == _SUCCESS)
                    _set_timer(&pmlmepriv->assoc_timer,
                           MAX_JOIN_TIMEOUT);
                else {
                    struct wlan_bssid_ex *pdev_network =
                      &(adapter->registrypriv.dev_network);
                    u8 *pibss =
                         adapter->registrypriv.
                            dev_network.MacAddress;
                    pmlmepriv->fw_state ^= _FW_UNDER_SURVEY;
                    memset(&pdev_network->Ssid, 0,
                        sizeof(struct
                               ndis_802_11_ssid));
                    memcpy(&pdev_network->Ssid,
                        &pmlmepriv->assoc_ssid,
                        sizeof(struct
                             ndis_802_11_ssid));
                    r8712_update_registrypriv_dev_network
                        (adapter);
                    r8712_generate_random_ibss(pibss);
                    pmlmepriv->fw_state =
                         WIFI_ADHOC_MASTER_STATE;
                    pmlmepriv->to_join = false;
                }
            }
        } else {
            pmlmepriv->to_join = false;
            set_fwstate(pmlmepriv, _FW_UNDER_LINKING);
            if (r8712_select_and_join_from_scan(pmlmepriv) ==
                _SUCCESS)
                _set_timer(&pmlmepriv->assoc_timer,
                       MAX_JOIN_TIMEOUT);
            else
                _clr_fwstate_(pmlmepriv, _FW_UNDER_LINKING);
        }
    }
    spin_unlock_irqrestore(&pmlmepriv->lock, irqL);
}

/*
 *r8712_free_assoc_resources: the caller has to lock pmlmepriv->lock
 */
void r8712_free_assoc_resources(struct _adapter *adapter)
{
    unsigned long irqL;
    struct wlan_network *pwlan = NULL;
    struct mlme_priv *pmlmepriv = &adapter->mlmepriv;
    struct sta_priv *pstapriv = &adapter->stapriv;
    struct wlan_network *tgt_network = &pmlmepriv->cur_network;

    pwlan = r8712_find_network(&pmlmepriv->scanned_queue,
                   tgt_network->network.MacAddress);

    if (check_fwstate(pmlmepriv, WIFI_STATION_STATE|WIFI_AP_STATE)) {
        struct sta_info *psta;

        psta = r8712_get_stainfo(&adapter->stapriv,
                     tgt_network->network.MacAddress);

        spin_lock_irqsave(&pstapriv->sta_hash_lock, irqL);
        r8712_free_stainfo(adapter,  psta);
        spin_unlock_irqrestore(&pstapriv->sta_hash_lock, irqL);
    }

    if (check_fwstate(pmlmepriv,
        WIFI_ADHOC_STATE|WIFI_ADHOC_MASTER_STATE|WIFI_AP_STATE))
        r8712_free_all_stainfo(adapter);
    if (pwlan)
        pwlan->fixed = false;

    if (((check_fwstate(pmlmepriv, WIFI_ADHOC_MASTER_STATE)) &&
         (adapter->stapriv.asoc_sta_count == 1)))
        free_network_nolock(pmlmepriv, pwlan);
}

/*
*r8712_indicate_connect: the caller has to lock pmlmepriv->lock
*/
void r8712_indicate_connect(struct _adapter *padapter)
{
    struct mlme_priv *pmlmepriv = &padapter->mlmepriv;

    pmlmepriv->to_join = false;
    set_fwstate(pmlmepriv, _FW_LINKED);
    padapter->ledpriv.LedControlHandler(padapter, LED_CTL_LINK);
    r8712_os_indicate_connect(padapter);
    if (padapter->registrypriv.power_mgnt > PS_MODE_ACTIVE)
        _set_timer(&pmlmepriv->dhcp_timer, 60000);
}


/*
*r8712_ind_disconnect: the caller has to lock pmlmepriv->lock
*/
void r8712_ind_disconnect(struct _adapter *padapter)
{
    struct mlme_priv *pmlmepriv = &padapter->mlmepriv;

    if (check_fwstate(pmlmepriv, _FW_LINKED) == true) {
        _clr_fwstate_(pmlmepriv, _FW_LINKED);
        padapter->ledpriv.LedControlHandler(padapter, LED_CTL_NO_LINK);
        r8712_os_indicate_disconnect(padapter);
    }
    if (padapter->pwrctrlpriv.pwr_mode !=
        padapter->registrypriv.power_mgnt) {
        _cancel_timer_ex(&pmlmepriv->dhcp_timer);
        r8712_set_ps_mode(padapter, padapter->registrypriv.power_mgnt,
                  padapter->registrypriv.smart_ps);
    }
}

/*Notes:
 *pnetwork : returns from r8712_joinbss_event_callback
 *ptarget_wlan: found from scanned_queue
 *if join_res > 0, for (fw_state==WIFI_STATION_STATE), we check if
 *  "ptarget_sta" & "ptarget_wlan" exist.
 *if join_res > 0, for (fw_state==WIFI_ADHOC_STATE), we only check
 * if "ptarget_wlan" exist.
 *if join_res > 0, update "cur_network->network" from
 * "pnetwork->network" if (ptarget_wlan !=NULL).
 */
void r8712_joinbss_event_callback(struct _adapter *adapter, u8 *pbuf)
{
    unsigned long irqL = 0, irqL2;
    u8 timer_cancelled;
    struct sta_info *ptarget_sta = NULL, *pcur_sta = NULL;
    struct sta_priv *pstapriv = &adapter->stapriv;
    struct mlme_priv    *pmlmepriv = &adapter->mlmepriv;
    struct wlan_network *cur_network = &pmlmepriv->cur_network;
    struct wlan_network *pcur_wlan = NULL, *ptarget_wlan = NULL;
    unsigned int        the_same_macaddr = false;
    struct wlan_network *pnetwork;

    if (sizeof(struct list_head) == 4 * sizeof(u32)) {
        pnetwork = (struct wlan_network *)
            _malloc(sizeof(struct wlan_network));
        memcpy((u8 *)pnetwork+16, (u8 *)pbuf + 8,
            sizeof(struct wlan_network) - 16);
    } else
        pnetwork = (struct wlan_network *)pbuf;

#ifdef __BIG_ENDIAN
    /* endian_convert */
    pnetwork->join_res = le32_to_cpu(pnetwork->join_res);
    pnetwork->network_type = le32_to_cpu(pnetwork->network_type);
    pnetwork->network.Length = le32_to_cpu(pnetwork->network.Length);
    pnetwork->network.Ssid.SsidLength =
         le32_to_cpu(pnetwork->network.Ssid.SsidLength);
    pnetwork->network.Privacy = le32_to_cpu(pnetwork->network.Privacy);
    pnetwork->network.Rssi = le32_to_cpu(pnetwork->network.Rssi);
    pnetwork->network.NetworkTypeInUse =
         le32_to_cpu(pnetwork->network.NetworkTypeInUse);
    pnetwork->network.Configuration.ATIMWindow =
         le32_to_cpu(pnetwork->network.Configuration.ATIMWindow);
    pnetwork->network.Configuration.BeaconPeriod =
         le32_to_cpu(pnetwork->network.Configuration.BeaconPeriod);
    pnetwork->network.Configuration.DSConfig =
         le32_to_cpu(pnetwork->network.Configuration.DSConfig);
    pnetwork->network.Configuration.FHConfig.DwellTime =
         le32_to_cpu(pnetwork->network.Configuration.FHConfig.
                 DwellTime);
    pnetwork->network.Configuration.FHConfig.HopPattern =
         le32_to_cpu(pnetwork->network.Configuration.
                 FHConfig.HopPattern);
    pnetwork->network.Configuration.FHConfig.HopSet =
         le32_to_cpu(pnetwork->network.Configuration.FHConfig.HopSet);
    pnetwork->network.Configuration.FHConfig.Length =
         le32_to_cpu(pnetwork->network.Configuration.FHConfig.Length);
    pnetwork->network.Configuration.Length =
         le32_to_cpu(pnetwork->network.Configuration.Length);
    pnetwork->network.InfrastructureMode =
         le32_to_cpu(pnetwork->network.InfrastructureMode);
    pnetwork->network.IELength = le32_to_cpu(pnetwork->network.IELength);
#endif

    the_same_macaddr = !memcmp(pnetwork->network.MacAddress,
                   cur_network->network.MacAddress, ETH_ALEN);
    pnetwork->network.Length =
         r8712_get_ndis_wlan_bssid_ex_sz(&pnetwork->network);
    spin_lock_irqsave(&pmlmepriv->lock, irqL);
    if (pnetwork->network.Length > sizeof(struct wlan_bssid_ex))
        goto ignore_joinbss_callback;
    if (pnetwork->join_res > 0) {
        if (check_fwstate(pmlmepriv, _FW_UNDER_LINKING) == true) {
            /*s1. find ptarget_wlan*/
            if (check_fwstate(pmlmepriv, _FW_LINKED) == true) {
                if (the_same_macaddr == true)
                    ptarget_wlan =
                        r8712_find_network(&pmlmepriv->
                        scanned_queue,
                        cur_network->network.MacAddress);
                else {
                    pcur_wlan =
                         r8712_find_network(&pmlmepriv->
                         scanned_queue,
                         cur_network->network.MacAddress);
                    pcur_wlan->fixed = false;

                    pcur_sta = r8712_get_stainfo(pstapriv,
                         cur_network->network.MacAddress);
                    spin_lock_irqsave(&pstapriv->
                        sta_hash_lock, irqL2);
                    r8712_free_stainfo(adapter, pcur_sta);
                    spin_unlock_irqrestore(&(pstapriv->
                        sta_hash_lock), irqL2);

                    ptarget_wlan =
                         r8712_find_network(&pmlmepriv->
                         scanned_queue,
                         pnetwork->network.
                         MacAddress);
                    if (ptarget_wlan)
                        ptarget_wlan->fixed = true;
                }
            } else {
                ptarget_wlan = r8712_find_network(&pmlmepriv->
                        scanned_queue,
                        pnetwork->network.MacAddress);
                if (ptarget_wlan)
                    ptarget_wlan->fixed = true;
            }

            if (ptarget_wlan == NULL) {
                if (check_fwstate(pmlmepriv,
                    _FW_UNDER_LINKING))
                    pmlmepriv->fw_state ^=
                         _FW_UNDER_LINKING;
                goto ignore_joinbss_callback;
            }

            /*s2. find ptarget_sta & update ptarget_sta*/
            if (check_fwstate(pmlmepriv, WIFI_STATION_STATE)) {
                if (the_same_macaddr == true) {
                    ptarget_sta =
                         r8712_get_stainfo(pstapriv,
                         pnetwork->network.MacAddress);
                    if (ptarget_sta == NULL)
                        ptarget_sta =
                         r8712_alloc_stainfo(pstapriv,
                         pnetwork->network.MacAddress);
                } else
                    ptarget_sta =
                         r8712_alloc_stainfo(pstapriv,
                         pnetwork->network.MacAddress);
                if (ptarget_sta) /*update ptarget_sta*/ {
                    ptarget_sta->aid = pnetwork->join_res;
                    ptarget_sta->qos_option = 1;
                    ptarget_sta->mac_id = 5;
                    if (adapter->securitypriv.
                        AuthAlgrthm == 2) {
                        adapter->securitypriv.
                            binstallGrpkey =
                             false;
                        adapter->securitypriv.
                            busetkipkey =
                             false;
                        adapter->securitypriv.
                            bgrpkey_handshake =
                             false;
                        ptarget_sta->ieee8021x_blocked
                             = true;
                        ptarget_sta->XPrivacy =
                             adapter->securitypriv.
                             PrivacyAlgrthm;
                        memset((u8 *)&ptarget_sta->
                             x_UncstKey,
                             0,
                             sizeof(union Keytype));
                        memset((u8 *)&ptarget_sta->
                             tkiprxmickey,
                             0,
                             sizeof(union Keytype));
                        memset((u8 *)&ptarget_sta->
                             tkiptxmickey,
                             0,
                             sizeof(union Keytype));
                        memset((u8 *)&ptarget_sta->
                             txpn, 0,
                             sizeof(union pn48));
                        memset((u8 *)&ptarget_sta->
                             rxpn, 0,
                             sizeof(union pn48));
                    }
                } else {
                    if (check_fwstate(pmlmepriv,
                        _FW_UNDER_LINKING))
                        pmlmepriv->fw_state ^=
                             _FW_UNDER_LINKING;
                    goto ignore_joinbss_callback;
                }
            }

            /*s3. update cur_network & indicate connect*/
            memcpy(&cur_network->network, &pnetwork->network,
                pnetwork->network.Length);
            cur_network->aid = pnetwork->join_res;
            /*update fw_state will clr _FW_UNDER_LINKING*/
            switch (pnetwork->network.InfrastructureMode) {
            case Ndis802_11Infrastructure:
                pmlmepriv->fw_state = WIFI_STATION_STATE;
                break;
            case Ndis802_11IBSS:
                pmlmepriv->fw_state = WIFI_ADHOC_STATE;
                break;
            default:
                pmlmepriv->fw_state = WIFI_NULL_STATE;
                break;
            }
            r8712_update_protection(adapter,
                      (cur_network->network.IEs) +
                      sizeof(struct NDIS_802_11_FIXED_IEs),
                      (cur_network->network.IELength));
            /*TODO: update HT_Capability*/
            update_ht_cap(adapter, cur_network->network.IEs,
                      cur_network->network.IELength);
            /*indicate connect*/
            if (check_fwstate(pmlmepriv, WIFI_STATION_STATE)
                == true)
                r8712_indicate_connect(adapter);
            _cancel_timer(&pmlmepriv->assoc_timer,
                      &timer_cancelled);
        } else
            goto ignore_joinbss_callback;
    } else {
        if (check_fwstate(pmlmepriv, _FW_UNDER_LINKING) == true) {
            _set_timer(&pmlmepriv->assoc_timer, 1);
            _clr_fwstate_(pmlmepriv, _FW_UNDER_LINKING);
        }
    }
ignore_joinbss_callback:
    spin_unlock_irqrestore(&pmlmepriv->lock, irqL);
    if (sizeof(struct list_head) == 4 * sizeof(u32))
        kfree((u8 *)pnetwork);
}

void r8712_stassoc_event_callback(struct _adapter *adapter, u8 *pbuf)
{
    unsigned long irqL;
    struct sta_info *psta;
    struct mlme_priv *pmlmepriv = &(adapter->mlmepriv);
    struct stassoc_event *pstassoc  = (struct stassoc_event *)pbuf;

    /* to do: */
    if (r8712_access_ctrl(&adapter->acl_list, pstassoc->macaddr) == false)
        return;
    psta = r8712_get_stainfo(&adapter->stapriv, pstassoc->macaddr);
    if (psta != NULL) {
        /*the sta have been in sta_info_queue => do nothing
         *(between drv has received this event before and
         *  fw have not yet to set key to CAM_ENTRY) */
        return;
    }

    psta = r8712_alloc_stainfo(&adapter->stapriv, pstassoc->macaddr);
    if (psta == NULL)
        return;
    /* to do : init sta_info variable */
    psta->qos_option = 0;
    psta->mac_id = le32_to_cpu((uint)pstassoc->cam_id);
    /* psta->aid = (uint)pstassoc->cam_id; */

    if (adapter->securitypriv.AuthAlgrthm == 2)
        psta->XPrivacy = adapter->securitypriv.PrivacyAlgrthm;
    psta->ieee8021x_blocked = false;
    spin_lock_irqsave(&pmlmepriv->lock, irqL);
    if ((check_fwstate(pmlmepriv, WIFI_ADHOC_MASTER_STATE) == true) ||
        (check_fwstate(pmlmepriv, WIFI_ADHOC_STATE) == true)) {
        if (adapter->stapriv.asoc_sta_count == 2) {
            /* a sta + bc/mc_stainfo (not Ibss_stainfo) */
            r8712_indicate_connect(adapter);
        }
    }
    spin_unlock_irqrestore(&pmlmepriv->lock, irqL);
}

void r8712_stadel_event_callback(struct _adapter *adapter, u8 *pbuf)
{
    unsigned long irqL, irqL2;
    struct sta_info *psta;
    struct wlan_network *pwlan = NULL;
    struct wlan_bssid_ex *pdev_network = NULL;
    u8 *pibss = NULL;
    struct mlme_priv *pmlmepriv = &adapter->mlmepriv;
    struct stadel_event *pstadel = (struct stadel_event *)pbuf;
    struct sta_priv *pstapriv = &adapter->stapriv;
    struct wlan_network *tgt_network = &pmlmepriv->cur_network;

    spin_lock_irqsave(&pmlmepriv->lock, irqL2);
    if (check_fwstate(pmlmepriv, WIFI_STATION_STATE) == true) {
        r8712_ind_disconnect(adapter);
        r8712_free_assoc_resources(adapter);
    }
    if (check_fwstate(pmlmepriv, WIFI_ADHOC_MASTER_STATE |
        WIFI_ADHOC_STATE)) {
        psta = r8712_get_stainfo(&adapter->stapriv, pstadel->macaddr);
        spin_lock_irqsave(&pstapriv->sta_hash_lock, irqL);
        r8712_free_stainfo(adapter, psta);
        spin_unlock_irqrestore(&pstapriv->sta_hash_lock, irqL);
        if (adapter->stapriv.asoc_sta_count == 1) {
            /*a sta + bc/mc_stainfo (not Ibss_stainfo) */
            pwlan = r8712_find_network(&pmlmepriv->scanned_queue,
                tgt_network->network.MacAddress);
            if (pwlan) {
                pwlan->fixed = false;
                free_network_nolock(pmlmepriv, pwlan);
            }
            /*re-create ibss*/
            pdev_network = &(adapter->registrypriv.dev_network);
            pibss = adapter->registrypriv.dev_network.MacAddress;
            memcpy(pdev_network, &tgt_network->network,
                r8712_get_ndis_wlan_bssid_ex_sz(&tgt_network->
                            network));
            memset(&pdev_network->Ssid, 0,
                sizeof(struct ndis_802_11_ssid));
            memcpy(&pdev_network->Ssid,
                &pmlmepriv->assoc_ssid,
                sizeof(struct ndis_802_11_ssid));
            r8712_update_registrypriv_dev_network(adapter);
            r8712_generate_random_ibss(pibss);
            if (check_fwstate(pmlmepriv, WIFI_ADHOC_STATE)) {
                _clr_fwstate_(pmlmepriv, WIFI_ADHOC_STATE);
                set_fwstate(pmlmepriv, WIFI_ADHOC_MASTER_STATE);
            }
        }
    }
    spin_unlock_irqrestore(&pmlmepriv->lock, irqL2);
}

void r8712_cpwm_event_callback(struct _adapter *adapter, u8 *pbuf)
{
    struct reportpwrstate_parm *preportpwrstate =
             (struct reportpwrstate_parm *)pbuf;

    preportpwrstate->state |= (u8)(adapter->pwrctrlpriv.cpwm_tog + 0x80);
    r8712_cpwm_int_hdl(adapter, preportpwrstate);
}

/*  When the Netgear 3500 AP is with WPA2PSK-AES mode, it will send
 *   the ADDBA req frame with start seq control = 0 to wifi client after
 *   the WPA handshake and the seqence number of following data packet
 *  will be 0. In this case, the Rx reorder sequence is not longer than 0
 *   and the WiFi client will drop the data with seq number 0.
 *  So, the 8712 firmware has to inform driver with receiving the
 *   ADDBA-Req frame so that the driver can reset the
 *  sequence value of Rx reorder control.
 */
void r8712_got_addbareq_event_callback(struct _adapter *adapter, u8 *pbuf)
{
    struct  ADDBA_Req_Report_parm *pAddbareq_pram =
             (struct ADDBA_Req_Report_parm *)pbuf;
    struct  sta_info *psta;
    struct  sta_priv *pstapriv = &adapter->stapriv;
    struct  recv_reorder_ctrl *precvreorder_ctrl = NULL;

    printk(KERN_INFO "r8712u: [%s] mac = %pM, seq = %d, tid = %d\n",
         __func__, pAddbareq_pram->MacAddress,
        pAddbareq_pram->StartSeqNum, pAddbareq_pram->tid);
    psta = r8712_get_stainfo(pstapriv, pAddbareq_pram->MacAddress);
    if (psta) {
        precvreorder_ctrl =
             &psta->recvreorder_ctrl[pAddbareq_pram->tid];
        /* set the indicate_seq to 0xffff so that the rx reorder
         * can store any following data packet.
         */
        precvreorder_ctrl->indicate_seq = 0xffff;
    }
}

void r8712_wpspbc_event_callback(struct _adapter *adapter, u8 *pbuf)
{
    if (adapter->securitypriv.wps_hw_pbc_pressed == false)
        adapter->securitypriv.wps_hw_pbc_pressed = true;
}

void _r8712_sitesurvey_ctrl_handler(struct _adapter *adapter)
{
    struct mlme_priv *pmlmepriv = &adapter->mlmepriv;
    struct sitesurvey_ctrl  *psitesurveyctrl = &pmlmepriv->sitesurveyctrl;
    struct registry_priv    *pregistrypriv = &adapter->registrypriv;
    u64 current_tx_pkts;
    uint current_rx_pkts;

    current_tx_pkts = (adapter->xmitpriv.tx_pkts) -
              (psitesurveyctrl->last_tx_pkts);
    current_rx_pkts = (adapter->recvpriv.rx_pkts) -
              (psitesurveyctrl->last_rx_pkts);
    psitesurveyctrl->last_tx_pkts = adapter->xmitpriv.tx_pkts;
    psitesurveyctrl->last_rx_pkts = adapter->recvpriv.rx_pkts;
    if ((current_tx_pkts > pregistrypriv->busy_thresh) ||
        (current_rx_pkts > pregistrypriv->busy_thresh))
        psitesurveyctrl->traffic_busy = true;
    else
        psitesurveyctrl->traffic_busy = false;
}

void _r8712_join_timeout_handler(struct _adapter *adapter)
{
    unsigned long irqL;
    struct mlme_priv *pmlmepriv = &adapter->mlmepriv;

    if (adapter->bDriverStopped || adapter->bSurpriseRemoved)
        return;
    spin_lock_irqsave(&pmlmepriv->lock, irqL);
    _clr_fwstate_(pmlmepriv, _FW_UNDER_LINKING);
    pmlmepriv->to_join = false;
    if (check_fwstate(pmlmepriv, _FW_LINKED) == true) {
        r8712_os_indicate_disconnect(adapter);
        _clr_fwstate_(pmlmepriv, _FW_LINKED);
    }
    if (adapter->pwrctrlpriv.pwr_mode != adapter->registrypriv.power_mgnt) {
        r8712_set_ps_mode(adapter, adapter->registrypriv.power_mgnt,
                  adapter->registrypriv.smart_ps);
    }
    spin_unlock_irqrestore(&pmlmepriv->lock, irqL);
}

void r8712_scan_timeout_handler (struct _adapter *adapter)
{
    unsigned long irqL;
    struct mlme_priv *pmlmepriv = &adapter->mlmepriv;

    spin_lock_irqsave(&pmlmepriv->lock, irqL);
    _clr_fwstate_(pmlmepriv, _FW_UNDER_SURVEY);
    pmlmepriv->to_join = false; /* scan fail, so clear to_join flag */
    spin_unlock_irqrestore(&pmlmepriv->lock, irqL);
}

void _r8712_dhcp_timeout_handler (struct _adapter *adapter)
{
    if (adapter->bDriverStopped || adapter->bSurpriseRemoved)
        return;
    if (adapter->pwrctrlpriv.pwr_mode != adapter->registrypriv.power_mgnt)
        r8712_set_ps_mode(adapter, adapter->registrypriv.power_mgnt,
                adapter->registrypriv.smart_ps);
}

void _r8712_wdg_timeout_handler(struct _adapter *adapter)
{
    r8712_wdg_wk_cmd(adapter);
}

int r8712_select_and_join_from_scan(struct mlme_priv *pmlmepriv)
{
    struct list_head *phead;
    unsigned char *dst_ssid, *src_ssid;
    struct _adapter *adapter;
    struct  __queue *queue = NULL;
    struct wlan_network *pnetwork = NULL;
    struct wlan_network *pnetwork_max_rssi = NULL;

    adapter = (struct _adapter *)pmlmepriv->nic_hdl;
    queue = &pmlmepriv->scanned_queue;
    phead = get_list_head(queue);
    pmlmepriv->pscanned = get_next(phead);
    while (1) {
        if (end_of_queue_search(phead, pmlmepriv->pscanned) == true) {
            if ((pmlmepriv->assoc_by_rssi == true) &&
                (pnetwork_max_rssi != NULL)) {
                pnetwork = pnetwork_max_rssi;
                goto ask_for_joinbss;
            }
            return _FAIL;
        }
        pnetwork = LIST_CONTAINOR(pmlmepriv->pscanned,
                      struct wlan_network, list);
        if (pnetwork == NULL)
            return _FAIL;
        pmlmepriv->pscanned = get_next(pmlmepriv->pscanned);
        if (pmlmepriv->assoc_by_bssid == true) {
            dst_ssid = pnetwork->network.MacAddress;
            src_ssid = pmlmepriv->assoc_bssid;
            if (!memcmp(dst_ssid, src_ssid, ETH_ALEN)) {
                if (check_fwstate(pmlmepriv, _FW_LINKED)) {
                    if (is_same_network(&pmlmepriv->
                        cur_network.network,
                        &pnetwork->network)) {
                        _clr_fwstate_(pmlmepriv,
                            _FW_UNDER_LINKING);
                        /*r8712_indicate_connect again*/
                        r8712_indicate_connect(adapter);
                        return 2;
                    }
                    r8712_disassoc_cmd(adapter);
                    r8712_ind_disconnect(adapter);
                    r8712_free_assoc_resources(adapter);
                }
                goto ask_for_joinbss;
            }
        } else if (pmlmepriv->assoc_ssid.SsidLength == 0)
            goto ask_for_joinbss;
        dst_ssid = pnetwork->network.Ssid.Ssid;
        src_ssid = pmlmepriv->assoc_ssid.Ssid;
        if ((pnetwork->network.Ssid.SsidLength ==
            pmlmepriv->assoc_ssid.SsidLength) &&
            (!memcmp(dst_ssid, src_ssid,
             pmlmepriv->assoc_ssid.SsidLength))) {
            if (pmlmepriv->assoc_by_rssi == true) {
                /* if the ssid is the same, select the bss
                 *  which has the max rssi*/
                if (pnetwork_max_rssi) {
                    if (pnetwork->network.Rssi >
                        pnetwork_max_rssi->network.Rssi)
                        pnetwork_max_rssi = pnetwork;
                } else
                    pnetwork_max_rssi = pnetwork;
            } else if (is_desired_network(adapter, pnetwork)) {
                if (check_fwstate(pmlmepriv, _FW_LINKED)) {
                    r8712_disassoc_cmd(adapter);
                    r8712_free_assoc_resources(adapter);
                }
                goto ask_for_joinbss;
            }
        }
    }
    return _FAIL;
ask_for_joinbss:
    return r8712_joinbss_cmd(adapter, pnetwork);
}

sint r8712_set_auth(struct _adapter *adapter,
            struct security_priv *psecuritypriv)
{
    struct cmd_priv *pcmdpriv = &adapter->cmdpriv;
    struct cmd_obj *pcmd;
    struct setauth_parm *psetauthparm;
    sint ret = _SUCCESS;

    pcmd = (struct cmd_obj *)_malloc(sizeof(struct cmd_obj));
    if (pcmd == NULL)
        return _FAIL;

    psetauthparm = (struct setauth_parm *)_malloc(
            sizeof(struct setauth_parm));
    if (psetauthparm == NULL) {
        kfree((unsigned char *)pcmd);
        return _FAIL;
    }
    memset(psetauthparm, 0, sizeof(struct setauth_parm));
    psetauthparm->mode = (u8)psecuritypriv->AuthAlgrthm;
    pcmd->cmdcode = _SetAuth_CMD_;
    pcmd->parmbuf = (unsigned char *)psetauthparm;
    pcmd->cmdsz = sizeof(struct setauth_parm);
    pcmd->rsp = NULL;
    pcmd->rspsz = 0;
    _init_listhead(&pcmd->list);
    r8712_enqueue_cmd(pcmdpriv, pcmd);
    return ret;
}

sint r8712_set_key(struct _adapter *adapter,
           struct security_priv *psecuritypriv,
         sint keyid)
{
    struct cmd_priv *pcmdpriv = &adapter->cmdpriv;
    struct cmd_obj *pcmd;
    struct setkey_parm *psetkeyparm;
    u8 keylen;

    pcmd = (struct cmd_obj *)_malloc(sizeof(struct cmd_obj));
    if (pcmd == NULL)
        return _FAIL;
    psetkeyparm = (struct setkey_parm *)_malloc(sizeof(struct setkey_parm));
    if (psetkeyparm == NULL) {
        kfree((unsigned char *)pcmd);
        return _FAIL;
    }
    memset(psetkeyparm, 0, sizeof(struct setkey_parm));
    if (psecuritypriv->AuthAlgrthm == 2) { /* 802.1X */
        psetkeyparm->algorithm =
             (u8)psecuritypriv->XGrpPrivacy;
    } else { /* WEP */
        psetkeyparm->algorithm =
             (u8)psecuritypriv->PrivacyAlgrthm;
    }
    psetkeyparm->keyid = (u8)keyid;

    switch (psetkeyparm->algorithm) {
    case _WEP40_:
        keylen = 5;
        memcpy(psetkeyparm->key,
            psecuritypriv->DefKey[keyid].skey, keylen);
        break;
    case _WEP104_:
        keylen = 13;
        memcpy(psetkeyparm->key,
            psecuritypriv->DefKey[keyid].skey, keylen);
        break;
    case _TKIP_:
        if (keyid < 1 || keyid > 2)
            return _FAIL;
        keylen = 16;
        memcpy(psetkeyparm->key,
            &psecuritypriv->XGrpKey[keyid - 1], keylen);
        psetkeyparm->grpkey = 1;
        break;
    case _AES_:
        if (keyid < 1 || keyid > 2)
            return _FAIL;
        keylen = 16;
        memcpy(psetkeyparm->key,
            &psecuritypriv->XGrpKey[keyid - 1], keylen);
        psetkeyparm->grpkey = 1;
        break;
    default:
        return _FAIL;
    }
    pcmd->cmdcode = _SetKey_CMD_;
    pcmd->parmbuf = (u8 *)psetkeyparm;
    pcmd->cmdsz =  (sizeof(struct setkey_parm));
    pcmd->rsp = NULL;
    pcmd->rspsz = 0;
    _init_listhead(&pcmd->list);
    r8712_enqueue_cmd(pcmdpriv, pcmd);
    return _SUCCESS;
}

/* adjust IEs for r8712_joinbss_cmd in WMM */
int r8712_restruct_wmm_ie(struct _adapter *adapter, u8 *in_ie, u8 *out_ie,
            uint in_len, uint initial_out_len)
{
    unsigned int ielength = 0;
    unsigned int i, j;

    i = 12; /* after the fixed IE */
    while (i < in_len) {
        ielength = initial_out_len;
        if (in_ie[i] == 0xDD && in_ie[i + 2] == 0x00 &&
            in_ie[i + 3] == 0x50 && in_ie[i + 4] == 0xF2 &&
            in_ie[i + 5] == 0x02 && i + 5 < in_len) {
            /*WMM element ID and OUI*/
            for (j = i; j < i + 9; j++) {
                out_ie[ielength] = in_ie[j];
                ielength++;
            }
            out_ie[initial_out_len + 1] = 0x07;
            out_ie[initial_out_len + 6] = 0x00;
            out_ie[initial_out_len + 8] = 0x00;
            break;
        }
        i += (in_ie[i + 1] + 2); /* to the next IE element */
    }
    return ielength;
}

/*
 * Ported from 8185: IsInPreAuthKeyList().
 *
 * Search by BSSID,
 * Return Value:
 *  -1      :if there is no pre-auth key in the  table
 *  >=0     :if there is pre-auth key, and   return the entry id
 */
static int SecIsInPMKIDList(struct _adapter *Adapter, u8 *bssid)
{
    struct security_priv *psecuritypriv = &Adapter->securitypriv;
    int i = 0;

    do {
        if (psecuritypriv->PMKIDList[i].bUsed &&
           (!memcmp(psecuritypriv->PMKIDList[i].Bssid,
                bssid, ETH_ALEN)))
            break;
        else
            i++;
    } while (i < NUM_PMKID_CACHE);

    if (i == NUM_PMKID_CACHE) {
        i = -1; /* Could not find. */
    } else {
        ; /* There is one Pre-Authentication Key for the
           * specific BSSID. */
    }
    return i;
}

sint r8712_restruct_sec_ie(struct _adapter *adapter, u8 *in_ie,
             u8 *out_ie, uint in_len)
{
    u8 authmode = 0, securitytype, match;
    u8 sec_ie[255], uncst_oui[4], bkup_ie[255];
    u8 wpa_oui[4] = {0x0, 0x50, 0xf2, 0x01};
    uint ielength, cnt, remove_cnt;
    int iEntry;
    struct mlme_priv *pmlmepriv = &adapter->mlmepriv;
    struct security_priv *psecuritypriv = &adapter->securitypriv;
    uint ndisauthmode = psecuritypriv->ndisauthtype;
    uint ndissecuritytype = psecuritypriv->ndisencryptstatus;

    if ((ndisauthmode == Ndis802_11AuthModeWPA) ||
        (ndisauthmode == Ndis802_11AuthModeWPAPSK)) {
        authmode = _WPA_IE_ID_;
        uncst_oui[0] = 0x0;
        uncst_oui[1] = 0x50;
        uncst_oui[2] = 0xf2;
    }
    if ((ndisauthmode == Ndis802_11AuthModeWPA2) ||
        (ndisauthmode == Ndis802_11AuthModeWPA2PSK)) {
        authmode = _WPA2_IE_ID_;
        uncst_oui[0] = 0x0;
        uncst_oui[1] = 0x0f;
        uncst_oui[2] = 0xac;
    }
    switch (ndissecuritytype) {
    case Ndis802_11Encryption1Enabled:
    case Ndis802_11Encryption1KeyAbsent:
        securitytype = _WEP40_;
        uncst_oui[3] = 0x1;
        break;
    case Ndis802_11Encryption2Enabled:
    case Ndis802_11Encryption2KeyAbsent:
        securitytype = _TKIP_;
        uncst_oui[3] = 0x2;
        break;
    case Ndis802_11Encryption3Enabled:
    case Ndis802_11Encryption3KeyAbsent:
        securitytype = _AES_;
        uncst_oui[3] = 0x4;
        break;
    default:
        securitytype = _NO_PRIVACY_;
        break;
    }
    /*Search required WPA or WPA2 IE and copy to sec_ie[] */
    cnt = 12;
    match = false;
    while (cnt < in_len) {
        if (in_ie[cnt] == authmode) {
            if ((authmode == _WPA_IE_ID_) &&
                (!memcmp(&in_ie[cnt+2], &wpa_oui[0], 4))) {
                memcpy(&sec_ie[0], &in_ie[cnt],
                    in_ie[cnt + 1] + 2);
                match = true;
                break;
            }
            if (authmode == _WPA2_IE_ID_) {
                memcpy(&sec_ie[0], &in_ie[cnt],
                    in_ie[cnt + 1] + 2);
                match = true;
                break;
            }
            if (((authmode == _WPA_IE_ID_) &&
                 (!memcmp(&in_ie[cnt + 2], &wpa_oui[0], 4))) ||
                 (authmode == _WPA2_IE_ID_))
                memcpy(&bkup_ie[0], &in_ie[cnt],
                    in_ie[cnt + 1] + 2);
        }
        cnt += in_ie[cnt+1] + 2; /*get next*/
    }
    /*restruct WPA IE or WPA2 IE in sec_ie[] */
    if (match == true) {
        if (sec_ie[0] == _WPA_IE_ID_) {
            /* parsing SSN IE to select required encryption
             * algorithm, and set the bc/mc encryption algorithm */
            while (true) {
                /*check wpa_oui tag*/
                if (memcmp(&sec_ie[2], &wpa_oui[0], 4)) {
                    match = false;
                    break;
                }
                if ((sec_ie[6] != 0x01) || (sec_ie[7] != 0x0)) {
                    /*IE Ver error*/
                    match = false;
                    break;
                }
                if (!memcmp(&sec_ie[8], &wpa_oui[0], 3)) {
                    /* get bc/mc encryption type (group
                     * key type)*/
                    switch (sec_ie[11]) {
                    case 0x0: /*none*/
                        psecuritypriv->XGrpPrivacy =
                                _NO_PRIVACY_;
                        break;
                    case 0x1: /*WEP_40*/
                        psecuritypriv->XGrpPrivacy =
                                _WEP40_;
                        break;
                    case 0x2: /*TKIP*/
                        psecuritypriv->XGrpPrivacy =
                                _TKIP_;
                        break;
                    case 0x3: /*AESCCMP*/
                    case 0x4:
                        psecuritypriv->XGrpPrivacy =
                                _AES_;
                        break;
                    case 0x5: /*WEP_104*/
                        psecuritypriv->XGrpPrivacy =
                                _WEP104_;
                        break;
                    }
                } else {
                    match = false;
                    break;
                }
                if (sec_ie[12] == 0x01) {
                    /*check the unicast encryption type*/
                    if (memcmp(&sec_ie[14],
                        &uncst_oui[0], 4)) {
                        match = false;
                        break;

                    } /*else the uncst_oui is match*/
                } else { /*mixed mode, unicast_enc_type > 1*/
                    /*select the uncst_oui and remove
                     * the other uncst_oui*/
                    cnt = sec_ie[12];
                    remove_cnt = (cnt-1) * 4;
                    sec_ie[12] = 0x01;
                    memcpy(&sec_ie[14], &uncst_oui[0], 4);
                    /*remove the other unicast suit*/
                    memcpy(&sec_ie[18],
                        &sec_ie[18 + remove_cnt],
                        sec_ie[1] - 18 + 2 -
                        remove_cnt);
                    sec_ie[1] = sec_ie[1] - remove_cnt;
                }
                break;
            }
        }
        if (authmode == _WPA2_IE_ID_) {
            /* parsing RSN IE to select required encryption
             * algorithm, and set the bc/mc encryption algorithm */
            while (true) {
                if ((sec_ie[2] != 0x01) || (sec_ie[3] != 0x0)) {
                    /*IE Ver error*/
                    match = false;
                    break;
                }
                if (!memcmp(&sec_ie[4], &uncst_oui[0], 3)) {
                    /*get bc/mc encryption type*/
                    switch (sec_ie[7]) {
                    case 0x1: /*WEP_40*/
                        psecuritypriv->XGrpPrivacy =
                                _WEP40_;
                        break;
                    case 0x2: /*TKIP*/
                        psecuritypriv->XGrpPrivacy =
                                _TKIP_;
                        break;
                    case 0x4: /*AESWRAP*/
                        psecuritypriv->XGrpPrivacy =
                                _AES_;
                        break;
                    case 0x5: /*WEP_104*/
                        psecuritypriv->XGrpPrivacy =
                                _WEP104_;
                        break;
                    default: /*one*/
                        psecuritypriv->XGrpPrivacy =
                                _NO_PRIVACY_;
                        break;
                    }
                } else {
                    match = false;
                    break;
                }
                if (sec_ie[8] == 0x01) {
                    /*check the unicast encryption type*/
                    if (memcmp(&sec_ie[10],
                             &uncst_oui[0], 4)) {
                        match = false;
                        break;
                    } /*else the uncst_oui is match*/
                } else { /*mixed mode, unicast_enc_type > 1*/
                    /*select the uncst_oui and remove the
                     * other uncst_oui*/
                    cnt = sec_ie[8];
                    remove_cnt = (cnt-1)*4;
                    sec_ie[8] = 0x01;
                    memcpy(&sec_ie[10], &uncst_oui[0], 4);
                    /*remove the other unicast suit*/
                    memcpy(&sec_ie[14],
                        &sec_ie[14 + remove_cnt],
                        (sec_ie[1] - 14 + 2 -
                        remove_cnt));
                    sec_ie[1] = sec_ie[1]-remove_cnt;
                }
                break;
            }
        }
    }
    if ((authmode == _WPA_IE_ID_) || (authmode == _WPA2_IE_ID_)) {
        /*copy fixed ie*/
        memcpy(out_ie, in_ie, 12);
        ielength = 12;
        /*copy RSN or SSN*/
        if (match == true) {
            memcpy(&out_ie[ielength], &sec_ie[0], sec_ie[1]+2);
            ielength += sec_ie[1] + 2;
            if (authmode == _WPA2_IE_ID_) {
                /*the Pre-Authentication bit should be zero*/
                out_ie[ielength - 1] = 0;
                out_ie[ielength - 2] = 0;
            }
            r8712_report_sec_ie(adapter, authmode, sec_ie);
        }
    } else {
        /*copy fixed ie only*/
        memcpy(out_ie, in_ie, 12);
        ielength = 12;
        if (psecuritypriv->wps_phase == true) {
            memcpy(out_ie+ielength, psecuritypriv->wps_ie,
                psecuritypriv->wps_ie_len);
            ielength += psecuritypriv->wps_ie_len;
        }
    }
    iEntry = SecIsInPMKIDList(adapter, pmlmepriv->assoc_bssid);
    if (iEntry < 0)
        return ielength;
    else {
        if (authmode == _WPA2_IE_ID_) {
            out_ie[ielength] = 1;
            ielength++;
            out_ie[ielength] = 0;   /*PMKID count = 0x0100*/
            ielength++;
            memcpy(&out_ie[ielength],
                &psecuritypriv->PMKIDList[iEntry].PMKID, 16);
            ielength += 16;
            out_ie[13] += 18;/*PMKID length = 2+16*/
        }
    }
    return ielength;
}

void r8712_init_registrypriv_dev_network(struct _adapter *adapter)
{
    struct registry_priv *pregistrypriv = &adapter->registrypriv;
    struct eeprom_priv *peepriv = &adapter->eeprompriv;
    struct wlan_bssid_ex *pdev_network = &pregistrypriv->dev_network;
    u8 *myhwaddr = myid(peepriv);

    memcpy(pdev_network->MacAddress, myhwaddr, ETH_ALEN);
    memcpy(&pdev_network->Ssid, &pregistrypriv->ssid,
        sizeof(struct ndis_802_11_ssid));
    pdev_network->Configuration.Length =
             sizeof(struct NDIS_802_11_CONFIGURATION);
    pdev_network->Configuration.BeaconPeriod = 100;
    pdev_network->Configuration.FHConfig.Length = 0;
    pdev_network->Configuration.FHConfig.HopPattern = 0;
    pdev_network->Configuration.FHConfig.HopSet = 0;
    pdev_network->Configuration.FHConfig.DwellTime = 0;
}

void r8712_update_registrypriv_dev_network(struct _adapter *adapter)
{
    int sz = 0;
    struct registry_priv    *pregistrypriv = &adapter->registrypriv;
    struct wlan_bssid_ex    *pdev_network = &pregistrypriv->dev_network;
    struct security_priv    *psecuritypriv = &adapter->securitypriv;
    struct wlan_network *cur_network = &adapter->mlmepriv.cur_network;

    pdev_network->Privacy = cpu_to_le32(psecuritypriv->PrivacyAlgrthm
                        > 0 ? 1 : 0) ; /* adhoc no 802.1x */
    pdev_network->Rssi = 0;
    switch (pregistrypriv->wireless_mode) {
    case WIRELESS_11B:
        pdev_network->NetworkTypeInUse = cpu_to_le32(Ndis802_11DS);
        break;
    case WIRELESS_11G:
    case WIRELESS_11BG:
        pdev_network->NetworkTypeInUse = cpu_to_le32(Ndis802_11OFDM24);
        break;
    case WIRELESS_11A:
        pdev_network->NetworkTypeInUse = cpu_to_le32(Ndis802_11OFDM5);
        break;
    default:
        /* TODO */
        break;
    }
    pdev_network->Configuration.DSConfig = cpu_to_le32(
                           pregistrypriv->channel);
    if (cur_network->network.InfrastructureMode == Ndis802_11IBSS)
        pdev_network->Configuration.ATIMWindow = cpu_to_le32(3);
    pdev_network->InfrastructureMode = cpu_to_le32(
                cur_network->network.InfrastructureMode);
    /* 1. Supported rates
     * 2. IE
     */
    sz = r8712_generate_ie(pregistrypriv);
    pdev_network->IELength = sz;
    pdev_network->Length = r8712_get_ndis_wlan_bssid_ex_sz(
                  (struct ndis_wlan_bssid_ex *)pdev_network);
}

/*the function is at passive_level*/
void r8712_joinbss_reset(struct _adapter *padapter)
{
    int i;
    struct mlme_priv    *pmlmepriv = &padapter->mlmepriv;
    struct ht_priv      *phtpriv = &pmlmepriv->htpriv;

    /* todo: if you want to do something io/reg/hw setting before join_bss,
     * please add code here */
    phtpriv->ampdu_enable = false;/*reset to disabled*/
    for (i = 0; i < 16; i++)
        phtpriv->baddbareq_issued[i] = false;/*reset it*/
    if (phtpriv->ht_option) {
        /* validate  usb rx aggregation */
        r8712_write8(padapter, 0x102500D9, 48);/*TH = 48 pages, 6k*/
    } else {
        /* invalidate  usb rx aggregation */
        /* TH=1 => means that invalidate usb rx aggregation */
        r8712_write8(padapter, 0x102500D9, 1);
    }
}

/*the function is >= passive_level*/
unsigned int r8712_restructure_ht_ie(struct _adapter *padapter, u8 *in_ie,
                     u8 *out_ie, uint in_len, uint *pout_len)
{
    u32 ielen, out_len;
    unsigned char *p, *pframe;
    struct ieee80211_ht_cap ht_capie;
    unsigned char WMM_IE[] = {0x00, 0x50, 0xf2, 0x02, 0x00, 0x01, 0x00};
    struct mlme_priv *pmlmepriv = &padapter->mlmepriv;
    struct qos_priv *pqospriv = &pmlmepriv->qospriv;
    struct ht_priv *phtpriv = &pmlmepriv->htpriv;

    phtpriv->ht_option = 0;
    p = r8712_get_ie(in_ie+12, _HT_CAPABILITY_IE_, &ielen, in_len-12);
    if (p && (ielen > 0)) {
        if (pqospriv->qos_option == 0) {
            out_len = *pout_len;
            pframe = r8712_set_ie(out_ie+out_len,
                          _VENDOR_SPECIFIC_IE_,
                          _WMM_IE_Length_,
                           WMM_IE, pout_len);
            pqospriv->qos_option = 1;
        }
        out_len = *pout_len;
        memset(&ht_capie, 0, sizeof(struct ieee80211_ht_cap));
        ht_capie.cap_info = IEEE80211_HT_CAP_SUP_WIDTH |
                    IEEE80211_HT_CAP_SGI_20 |
                    IEEE80211_HT_CAP_SGI_40 |
                    IEEE80211_HT_CAP_TX_STBC |
                    IEEE80211_HT_CAP_MAX_AMSDU |
                    IEEE80211_HT_CAP_DSSSCCK40;
        ht_capie.ampdu_params_info = (IEEE80211_HT_CAP_AMPDU_FACTOR &
                0x03) | (IEEE80211_HT_CAP_AMPDU_DENSITY & 0x00);
        pframe = r8712_set_ie(out_ie+out_len, _HT_CAPABILITY_IE_,
                sizeof(struct ieee80211_ht_cap),
                (unsigned char *)&ht_capie, pout_len);
        phtpriv->ht_option = 1;
    }
    return phtpriv->ht_option;
}

/* the function is > passive_level (in critical_section) */
static void update_ht_cap(struct _adapter *padapter, u8 *pie, uint ie_len)
{
    u8 *p, max_ampdu_sz;
    int i, len;
    struct sta_info *bmc_sta, *psta;
    struct ieee80211_ht_cap *pht_capie;
    struct ieee80211_ht_addt_info *pht_addtinfo;
    struct recv_reorder_ctrl *preorder_ctrl;
    struct mlme_priv *pmlmepriv = &padapter->mlmepriv;
    struct ht_priv *phtpriv = &pmlmepriv->htpriv;
    struct registry_priv *pregistrypriv = &padapter->registrypriv;
    struct wlan_network *pcur_network = &(pmlmepriv->cur_network);

    if (!phtpriv->ht_option)
        return;
    /* maybe needs check if ap supports rx ampdu. */
    if ((phtpriv->ampdu_enable == false) &&
        (pregistrypriv->ampdu_enable == 1))
        phtpriv->ampdu_enable = true;
    /*check Max Rx A-MPDU Size*/
    len = 0;
    p = r8712_get_ie(pie + sizeof(struct NDIS_802_11_FIXED_IEs),
                _HT_CAPABILITY_IE_,
                &len, ie_len -
                sizeof(struct NDIS_802_11_FIXED_IEs));
    if (p && len > 0) {
        pht_capie = (struct ieee80211_ht_cap *)(p+2);
        max_ampdu_sz = (pht_capie->ampdu_params_info &
                IEEE80211_HT_CAP_AMPDU_FACTOR);
        /* max_ampdu_sz (kbytes); */
        max_ampdu_sz = 1 << (max_ampdu_sz+3);
        phtpriv->rx_ampdu_maxlen = max_ampdu_sz;
    }
    /* for A-MPDU Rx reordering buffer control for bmc_sta & sta_info
     * if A-MPDU Rx is enabled, resetting rx_ordering_ctrl
     * wstart_b(indicate_seq) to default value=0xffff
     * todo: check if AP can send A-MPDU packets
     */
    bmc_sta = r8712_get_bcmc_stainfo(padapter);
    if (bmc_sta) {
        for (i = 0; i < 16; i++) {
            preorder_ctrl = &bmc_sta->recvreorder_ctrl[i];
            preorder_ctrl->indicate_seq = 0xffff;
            preorder_ctrl->wend_b = 0xffff;
        }
    }
    psta = r8712_get_stainfo(&padapter->stapriv,
                 pcur_network->network.MacAddress);
    if (psta) {
        for (i = 0; i < 16 ; i++) {
            preorder_ctrl = &psta->recvreorder_ctrl[i];
            preorder_ctrl->indicate_seq = 0xffff;
            preorder_ctrl->wend_b = 0xffff;
        }
    }
    len = 0;
    p = r8712_get_ie(pie + sizeof(struct NDIS_802_11_FIXED_IEs),
           _HT_ADD_INFO_IE_, &len,
           ie_len-sizeof(struct NDIS_802_11_FIXED_IEs));
    if (p && len > 0)
        pht_addtinfo = (struct ieee80211_ht_addt_info *)(p + 2);
}

void r8712_issue_addbareq_cmd(struct _adapter *padapter, int priority)
{
    struct mlme_priv *pmlmepriv = &padapter->mlmepriv;
    struct ht_priv   *phtpriv = &pmlmepriv->htpriv;

    if ((phtpriv->ht_option == 1) && (phtpriv->ampdu_enable == true)) {
        if (phtpriv->baddbareq_issued[priority] == false) {
            r8712_addbareq_cmd(padapter, (u8)priority);
            phtpriv->baddbareq_issued[priority] = true;
        }
    }
}