--- /dev/null
+From 0d43598686dd4b9c4ef8fe9027ac60b5335feaa8 Mon Sep 17 00:00:00 2001
+From: Greg Kroah-Hartman <gregkh@suse.de>
+Date: Wed, 17 Dec 2008 17:04:23 -0800
+Subject: [PATCH 1/4] Staging: add rt2870 wireless driver
+
+From: Greg Kroah-Hartman <gregkh@suse.de>
+
+This is the Ralink RT2870 driver from the company that does horrible
+things like reading a config file from /etc. However, the driver that
+is currently under development from the wireless development community
+is not working at all yet, so distros and users are using this version
+instead (quite common hardware on a lot of netbook machines).
+
+So here is this driver, for now, until the wireless developers get a
+"clean" version into the main tree, or until this version is cleaned up
+sufficiently to move out of the staging tree.
+
+Ported to the Linux build system and cleaned up a bit already by me.
+
+Cc: Linux wireless <linux-wireless@vger.kernel.org>
+Signed-off-by: Greg Kroah-Hartman <gregkh@suse.de>
+---
+ drivers/staging/Kconfig | 2
+ drivers/staging/Makefile | 1
+ drivers/staging/rt2870/2870_main_dev.c | 1612 ++++
+ drivers/staging/rt2870/Kconfig | 6
+ drivers/staging/rt2870/Makefile | 47
+ drivers/staging/rt2870/TODO | 10
+ drivers/staging/rt2870/aironet.h | 210
+ drivers/staging/rt2870/ap.h | 562 +
+ drivers/staging/rt2870/chlist.h | 1296 +++
+ drivers/staging/rt2870/common/2870_rtmp_init.c | 1778 +++++
+ drivers/staging/rt2870/common/action.c | 1046 +++
+ drivers/staging/rt2870/common/action.h | 68
+ drivers/staging/rt2870/common/ba_action.c | 1798 +++++
+ drivers/staging/rt2870/common/cmm_data.c | 2734 +++++++
+ drivers/staging/rt2870/common/cmm_data_2870.c | 963 ++
+ drivers/staging/rt2870/common/cmm_info.c | 3712 ++++++++++
+ drivers/staging/rt2870/common/cmm_sanity.c | 1663 ++++
+ drivers/staging/rt2870/common/cmm_sync.c | 711 ++
+ drivers/staging/rt2870/common/cmm_wpa.c | 1654 ++++
+ drivers/staging/rt2870/common/dfs.c | 453 +
+ drivers/staging/rt2870/common/eeprom.c | 254
+ drivers/staging/rt2870/common/firmware.h | 558 +
+ drivers/staging/rt2870/common/md5.c | 1427 ++++
+ drivers/staging/rt2870/common/mlme.c | 8609 +++++++++++++++++++++++++
+ drivers/staging/rt2870/common/netif_block.c | 144
+ drivers/staging/rt2870/common/rtmp_init.c | 4132 +++++++++++
+ drivers/staging/rt2870/common/rtmp_tkip.c | 1613 ++++
+ drivers/staging/rt2870/common/rtmp_wep.c | 508 +
+ drivers/staging/rt2870/common/rtusb_bulk.c | 1981 +++++
+ drivers/staging/rt2870/common/rtusb_data.c | 229
+ drivers/staging/rt2870/common/rtusb_io.c | 2006 +++++
+ drivers/staging/rt2870/common/spectrum.c | 1876 +++++
+ drivers/staging/rt2870/dfs.h | 100
+ drivers/staging/rt2870/leap.h | 215
+ drivers/staging/rt2870/link_list.h | 134
+ drivers/staging/rt2870/md4.h | 42
+ drivers/staging/rt2870/md5.h | 107
+ drivers/staging/rt2870/mlme.h | 1471 ++++
+ drivers/staging/rt2870/netif_block.h | 58
+ drivers/staging/rt2870/oid.h | 1091 +++
+ drivers/staging/rt2870/rt2870.h | 761 ++
+ drivers/staging/rt2870/rt28xx.h | 2689 +++++++
+ drivers/staging/rt2870/rt_ate.c | 6452 ++++++++++++++++++
+ drivers/staging/rt2870/rt_ate.h | 315
+ drivers/staging/rt2870/rt_config.h | 104
+ drivers/staging/rt2870/rt_linux.c | 1095 +++
+ drivers/staging/rt2870/rt_linux.h | 908 ++
+ drivers/staging/rt2870/rt_main_dev.c | 1863 +++++
+ drivers/staging/rt2870/rt_profile.c | 2016 +++++
+ drivers/staging/rt2870/rtmp.h | 7586 ++++++++++++++++++++++
+ drivers/staging/rt2870/rtmp_ckipmic.h | 113
+ drivers/staging/rt2870/rtmp_def.h | 1622 ++++
+ drivers/staging/rt2870/rtmp_type.h | 94
+ drivers/staging/rt2870/spectrum.h | 322
+ drivers/staging/rt2870/spectrum_def.h | 95
+ drivers/staging/rt2870/sta/aironet.c | 1312 +++
+ drivers/staging/rt2870/sta/assoc.c | 2039 +++++
+ drivers/staging/rt2870/sta/auth.c | 474 +
+ drivers/staging/rt2870/sta/auth_rsp.c | 166
+ drivers/staging/rt2870/sta/connect.c | 2822 ++++++++
+ drivers/staging/rt2870/sta/dls.c | 2210 ++++++
+ drivers/staging/rt2870/sta/rtmp_data.c | 2619 +++++++
+ drivers/staging/rt2870/sta/sanity.c | 420 +
+ drivers/staging/rt2870/sta/sync.c | 1753 +++++
+ drivers/staging/rt2870/sta/wpa.c | 2107 ++++++
+ drivers/staging/rt2870/sta_ioctl.c | 7068 ++++++++++++++++++++
+ drivers/staging/rt2870/sta_ioctl.c.patch | 18
+ drivers/staging/rt2870/tmp60 | 7037 ++++++++++++++++++++
+ drivers/staging/rt2870/tmp61 | 7037 ++++++++++++++++++++
+ drivers/staging/rt2870/wpa.h | 357 +
+ 70 files changed, 110355 insertions(+)
+ create mode 100644 drivers/staging/rt2870/2870_main_dev.c
+ create mode 100644 drivers/staging/rt2870/Kconfig
+ create mode 100644 drivers/staging/rt2870/Makefile
+ create mode 100644 drivers/staging/rt2870/TODO
+ create mode 100644 drivers/staging/rt2870/aironet.h
+ create mode 100644 drivers/staging/rt2870/ap.h
+ create mode 100644 drivers/staging/rt2870/chlist.h
+ create mode 100644 drivers/staging/rt2870/common/2870_rtmp_init.c
+ create mode 100644 drivers/staging/rt2870/common/action.c
+ create mode 100644 drivers/staging/rt2870/common/action.h
+ create mode 100644 drivers/staging/rt2870/common/ba_action.c
+ create mode 100644 drivers/staging/rt2870/common/cmm_data.c
+ create mode 100644 drivers/staging/rt2870/common/cmm_data_2870.c
+ create mode 100644 drivers/staging/rt2870/common/cmm_info.c
+ create mode 100644 drivers/staging/rt2870/common/cmm_sanity.c
+ create mode 100644 drivers/staging/rt2870/common/cmm_sync.c
+ create mode 100644 drivers/staging/rt2870/common/cmm_wpa.c
+ create mode 100644 drivers/staging/rt2870/common/dfs.c
+ create mode 100644 drivers/staging/rt2870/common/eeprom.c
+ create mode 100644 drivers/staging/rt2870/common/firmware.h
+ create mode 100644 drivers/staging/rt2870/common/md5.c
+ create mode 100644 drivers/staging/rt2870/common/mlme.c
+ create mode 100644 drivers/staging/rt2870/common/netif_block.c
+ create mode 100644 drivers/staging/rt2870/common/rtmp_init.c
+ create mode 100644 drivers/staging/rt2870/common/rtmp_tkip.c
+ create mode 100644 drivers/staging/rt2870/common/rtmp_wep.c
+ create mode 100644 drivers/staging/rt2870/common/rtusb_bulk.c
+ create mode 100644 drivers/staging/rt2870/common/rtusb_data.c
+ create mode 100644 drivers/staging/rt2870/common/rtusb_io.c
+ create mode 100644 drivers/staging/rt2870/common/spectrum.c
+ create mode 100644 drivers/staging/rt2870/dfs.h
+ create mode 100644 drivers/staging/rt2870/leap.h
+ create mode 100644 drivers/staging/rt2870/link_list.h
+ create mode 100644 drivers/staging/rt2870/md4.h
+ create mode 100644 drivers/staging/rt2870/md5.h
+ create mode 100644 drivers/staging/rt2870/mlme.h
+ create mode 100644 drivers/staging/rt2870/netif_block.h
+ create mode 100644 drivers/staging/rt2870/oid.h
+ create mode 100644 drivers/staging/rt2870/rt2870.h
+ create mode 100644 drivers/staging/rt2870/rt28xx.h
+ create mode 100644 drivers/staging/rt2870/rt_ate.c
+ create mode 100644 drivers/staging/rt2870/rt_ate.h
+ create mode 100644 drivers/staging/rt2870/rt_config.h
+ create mode 100644 drivers/staging/rt2870/rt_linux.c
+ create mode 100644 drivers/staging/rt2870/rt_linux.h
+ create mode 100644 drivers/staging/rt2870/rt_main_dev.c
+ create mode 100644 drivers/staging/rt2870/rt_profile.c
+ create mode 100644 drivers/staging/rt2870/rtmp.h
+ create mode 100644 drivers/staging/rt2870/rtmp_ckipmic.h
+ create mode 100644 drivers/staging/rt2870/rtmp_def.h
+ create mode 100644 drivers/staging/rt2870/rtmp_type.h
+ create mode 100644 drivers/staging/rt2870/spectrum.h
+ create mode 100644 drivers/staging/rt2870/spectrum_def.h
+ create mode 100644 drivers/staging/rt2870/sta/aironet.c
+ create mode 100644 drivers/staging/rt2870/sta/assoc.c
+ create mode 100644 drivers/staging/rt2870/sta/auth.c
+ create mode 100644 drivers/staging/rt2870/sta/auth_rsp.c
+ create mode 100644 drivers/staging/rt2870/sta/connect.c
+ create mode 100644 drivers/staging/rt2870/sta/dls.c
+ create mode 100644 drivers/staging/rt2870/sta/rtmp_data.c
+ create mode 100644 drivers/staging/rt2870/sta/sanity.c
+ create mode 100644 drivers/staging/rt2870/sta/sync.c
+ create mode 100644 drivers/staging/rt2870/sta/wpa.c
+ create mode 100644 drivers/staging/rt2870/sta_ioctl.c
+ create mode 100644 drivers/staging/rt2870/sta_ioctl.c.patch
+ create mode 100644 drivers/staging/rt2870/tmp60
+ create mode 100644 drivers/staging/rt2870/tmp61
+ create mode 100644 drivers/staging/rt2870/wpa.h
+
+--- a/drivers/staging/Kconfig
++++ b/drivers/staging/Kconfig
+@@ -49,6 +49,8 @@ source "drivers/staging/otus/Kconfig"
+
+ source "drivers/staging/rt2860/Kconfig"
+
++source "drivers/staging/rt2870/Kconfig"
++
+ source "drivers/staging/benet/Kconfig"
+
+ source "drivers/staging/rtl8187se/Kconfig"
+--- a/drivers/staging/Makefile
++++ b/drivers/staging/Makefile
+@@ -16,5 +16,6 @@ obj-$(CONFIG_USB_ATMEL) += at76_usb/
+ obj-$(CONFIG_AGNX) += agnx/
+ obj-$(CONFIG_OTUS) += otus/
+ obj-$(CONFIG_RT2860) += rt2860/
++obj-$(CONFIG_RT2870) += rt2870/
+ obj-$(CONFIG_BENET) += benet/
+ obj-$(CONFIG_RTL8187SE) += rtl8187se/
+--- /dev/null
++++ b/drivers/staging/rt2870/2870_main_dev.c
+@@ -0,0 +1,1612 @@
++/*
++ *************************************************************************
++ * Ralink Tech Inc.
++ * 5F., No.36, Taiyuan St., Jhubei City,
++ * Hsinchu County 302,
++ * Taiwan, R.O.C.
++ *
++ * (c) Copyright 2002-2007, Ralink Technology, Inc.
++ *
++ * This program is free software; you can redistribute it and/or modify *
++ * it under the terms of the GNU General Public License as published by *
++ * the Free Software Foundation; either version 2 of the License, or *
++ * (at your option) any later version. *
++ * *
++ * This program is distributed in the hope that it will be useful, *
++ * but WITHOUT ANY WARRANTY; without even the implied warranty of *
++ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the *
++ * GNU General Public License for more details. *
++ * *
++ * You should have received a copy of the GNU General Public License *
++ * along with this program; if not, write to the *
++ * Free Software Foundation, Inc., *
++ * 59 Temple Place - Suite 330, Boston, MA 02111-1307, USA. *
++ * *
++ *************************************************************************
++
++ Module Name:
++ rtmp_main.c
++
++ Abstract:
++ main initialization routines
++
++ Revision History:
++ Who When What
++ -------- ---------- ----------------------------------------------
++ Name Date Modification logs
++ Jan Lee 01-10-2005 modified
++ Sample Jun/01/07 Merge RT2870 and RT2860 drivers.
++*/
++
++#include "rt_config.h"
++
++
++// Following information will be show when you run 'modinfo'
++// *** If you have a solution for the bug in current version of driver, please mail to me.
++// Otherwise post to forum in ralinktech's web site(www.ralinktech.com) and let all users help you. ***
++MODULE_AUTHOR("Paul Lin <paul_lin@ralinktech.com>");
++MODULE_DESCRIPTION("RT2870 Wireless Lan Linux Driver");
++#ifdef CONFIG_STA_SUPPORT
++MODULE_LICENSE("GPL");
++#ifdef MODULE_VERSION
++MODULE_VERSION(STA_DRIVER_VERSION);
++#endif
++#endif // CONFIG_STA_SUPPORT //
++
++#ifdef MULTIPLE_CARD_SUPPORT
++// record whether the card in the card list is used in the card file
++extern UINT8 MC_CardUsed[];
++#endif // MULTIPLE_CARD_SUPPORT //
++
++/* Kernel thread and vars, which handles packets that are completed. Only
++ * packets that have a "complete" function are sent here. This way, the
++ * completion is run out of kernel context, and doesn't block the rest of
++ * the stack. */
++
++extern INT __devinit rt28xx_probe(IN void *_dev_p, IN void *_dev_id_p,
++ IN UINT argc, OUT PRTMP_ADAPTER *ppAd);
++
++
++/* module table */
++struct usb_device_id rtusb_usb_id[] = RT2870_USB_DEVICES;
++INT const rtusb_usb_id_len = sizeof(rtusb_usb_id) / sizeof(struct usb_device_id);
++MODULE_DEVICE_TABLE(usb, rtusb_usb_id);
++
++#ifndef PF_NOFREEZE
++#define PF_NOFREEZE 0
++#endif
++
++
++#if LINUX_VERSION_CODE < KERNEL_VERSION(2,5,0)
++
++/**************************************************************************/
++/**************************************************************************/
++//tested for kernel 2.4 series
++/**************************************************************************/
++/**************************************************************************/
++static void *rtusb_probe(struct usb_device *dev, UINT interface,
++ const struct usb_device_id *id_table);
++static void rtusb_disconnect(struct usb_device *dev, void *ptr);
++
++struct usb_driver rtusb_driver = {
++ name:"rt2870",
++ probe:rtusb_probe,
++ disconnect:rtusb_disconnect,
++ id_table:rtusb_usb_id,
++ };
++
++#else
++
++#ifdef CONFIG_PM
++static int rt2870_suspend(struct usb_interface *intf, pm_message_t state);
++static int rt2870_resume(struct usb_interface *intf);
++#endif // CONFIG_PM //
++
++/**************************************************************************/
++/**************************************************************************/
++//tested for kernel 2.6series
++/**************************************************************************/
++/**************************************************************************/
++static int rtusb_probe (struct usb_interface *intf,
++ const struct usb_device_id *id);
++static void rtusb_disconnect(struct usb_interface *intf);
++
++struct usb_driver rtusb_driver = {
++#if LINUX_VERSION_CODE < KERNEL_VERSION(2,6,15)
++ .owner = THIS_MODULE,
++#endif
++ .name="rt2870",
++ .probe=rtusb_probe,
++ .disconnect=rtusb_disconnect,
++ .id_table=rtusb_usb_id,
++
++#ifdef CONFIG_PM
++ suspend: rt2870_suspend,
++ resume: rt2870_resume,
++#endif
++ };
++
++#ifdef CONFIG_PM
++
++VOID RT2860RejectPendingPackets(
++ IN PRTMP_ADAPTER pAd)
++{
++ // clear PS packets
++ // clear TxSw packets
++}
++
++static int rt2870_suspend(
++ struct usb_interface *intf,
++ pm_message_t state)
++{
++ struct net_device *net_dev;
++ PRTMP_ADAPTER pAd = usb_get_intfdata(intf);
++
++
++ DBGPRINT(RT_DEBUG_TRACE, ("===> rt2870_suspend()\n"));
++ net_dev = pAd->net_dev;
++ netif_device_detach (net_dev);
++
++ pAd->PM_FlgSuspend = 1;
++ if (netif_running(net_dev)) {
++ RTUSBCancelPendingBulkInIRP(pAd);
++ RTUSBCancelPendingBulkOutIRP(pAd);
++ }
++ DBGPRINT(RT_DEBUG_TRACE, ("<=== rt2870_suspend()\n"));
++ return 0;
++}
++
++static int rt2870_resume(
++ struct usb_interface *intf)
++{
++ struct net_device *net_dev;
++ PRTMP_ADAPTER pAd = usb_get_intfdata(intf);
++
++
++ DBGPRINT(RT_DEBUG_TRACE, ("===> rt2870_resume()\n"));
++
++ pAd->PM_FlgSuspend = 0;
++ net_dev = pAd->net_dev;
++ netif_device_attach (net_dev);
++ netif_start_queue(net_dev);
++ netif_carrier_on(net_dev);
++ netif_wake_queue(net_dev);
++
++ DBGPRINT(RT_DEBUG_TRACE, ("<=== rt2870_resume()\n"));
++ return 0;
++}
++#endif // CONFIG_PM //
++#endif // LINUX_VERSION_CODE //
++
++
++// Init driver module
++INT __init rtusb_init(void)
++{
++ printk("rtusb init --->\n");
++ return usb_register(&rtusb_driver);
++}
++
++// Deinit driver module
++VOID __exit rtusb_exit(void)
++{
++ usb_deregister(&rtusb_driver);
++ printk("<--- rtusb exit\n");
++}
++
++module_init(rtusb_init);
++module_exit(rtusb_exit);
++
++
++
++
++/*--------------------------------------------------------------------- */
++/* function declarations */
++/*--------------------------------------------------------------------- */
++
++/*
++========================================================================
++Routine Description:
++ MLME kernel thread.
++
++Arguments:
++ *Context the pAd, driver control block pointer
++
++Return Value:
++ 0 close the thread
++
++Note:
++========================================================================
++*/
++INT MlmeThread(
++ IN void *Context)
++{
++ PRTMP_ADAPTER pAd = (PRTMP_ADAPTER)Context;
++ POS_COOKIE pObj;
++ int status;
++
++ pObj = (POS_COOKIE)pAd->OS_Cookie;
++
++ rtmp_os_thread_init("rt2870MlmeThread", (PVOID)&(pAd->mlmeComplete));
++
++ while (pAd->mlme_kill == 0)
++ {
++ /* lock the device pointers */
++ //down(&(pAd->mlme_semaphore));
++ status = down_interruptible(&(pAd->mlme_semaphore));
++
++ /* lock the device pointers , need to check if required*/
++ //down(&(pAd->usbdev_semaphore));
++
++ if (!pAd->PM_FlgSuspend)
++ MlmeHandler(pAd);
++
++ /* unlock the device pointers */
++ //up(&(pAd->usbdev_semaphore));
++ if (status != 0)
++ {
++ RTMP_SET_FLAG(pAd, fRTMP_ADAPTER_HALT_IN_PROGRESS);
++ break;
++ }
++ }
++
++ /* notify the exit routine that we're actually exiting now
++ *
++ * complete()/wait_for_completion() is similar to up()/down(),
++ * except that complete() is safe in the case where the structure
++ * is getting deleted in a parallel mode of execution (i.e. just
++ * after the down() -- that's necessary for the thread-shutdown
++ * case.
++ *
++ * complete_and_exit() goes even further than this -- it is safe in
++ * the case that the thread of the caller is going away (not just
++ * the structure) -- this is necessary for the module-remove case.
++ * This is important in preemption kernels, which transfer the flow
++ * of execution immediately upon a complete().
++ */
++ DBGPRINT(RT_DEBUG_TRACE,( "<---%s\n",__FUNCTION__));
++
++ pObj->MLMEThr_pid = THREAD_PID_INIT_VALUE;
++
++ complete_and_exit (&pAd->mlmeComplete, 0);
++ return 0;
++
++}
++
++
++/*
++========================================================================
++Routine Description:
++ USB command kernel thread.
++
++Arguments:
++ *Context the pAd, driver control block pointer
++
++Return Value:
++ 0 close the thread
++
++Note:
++========================================================================
++*/
++INT RTUSBCmdThread(
++ IN void * Context)
++{
++ PRTMP_ADAPTER pAd = (PRTMP_ADAPTER)Context;
++ POS_COOKIE pObj;
++ int status;
++
++ pObj = (POS_COOKIE)pAd->OS_Cookie;
++
++ rtmp_os_thread_init("rt2870CmdThread", (PVOID)&(pAd->CmdQComplete));
++
++ NdisAcquireSpinLock(&pAd->CmdQLock);
++ pAd->CmdQ.CmdQState = RT2870_THREAD_RUNNING;
++ NdisReleaseSpinLock(&pAd->CmdQLock);
++
++ while (pAd->CmdQ.CmdQState == RT2870_THREAD_RUNNING)
++ {
++ /* lock the device pointers */
++ //down(&(pAd->RTUSBCmd_semaphore));
++ status = down_interruptible(&(pAd->RTUSBCmd_semaphore));
++
++ if (pAd->CmdQ.CmdQState == RT2870_THREAD_STOPED)
++ break;
++
++ if (status != 0)
++ {
++ RTMP_SET_FLAG(pAd, fRTMP_ADAPTER_HALT_IN_PROGRESS);
++ break;
++ }
++ /* lock the device pointers , need to check if required*/
++ //down(&(pAd->usbdev_semaphore));
++
++ if (!pAd->PM_FlgSuspend)
++ CMDHandler(pAd);
++
++ /* unlock the device pointers */
++ //up(&(pAd->usbdev_semaphore));
++ }
++
++ if (!pAd->PM_FlgSuspend)
++ { // Clear the CmdQElements.
++ CmdQElmt *pCmdQElmt = NULL;
++
++ NdisAcquireSpinLock(&pAd->CmdQLock);
++ pAd->CmdQ.CmdQState = RT2870_THREAD_STOPED;
++ while(pAd->CmdQ.size)
++ {
++ RTUSBDequeueCmd(&pAd->CmdQ, &pCmdQElmt);
++ if (pCmdQElmt)
++ {
++ if (pCmdQElmt->CmdFromNdis == TRUE)
++ {
++ if (pCmdQElmt->buffer != NULL)
++ NdisFreeMemory(pCmdQElmt->buffer, pCmdQElmt->bufferlength, 0);
++
++ NdisFreeMemory(pCmdQElmt, sizeof(CmdQElmt), 0);
++ }
++ else
++ {
++ if ((pCmdQElmt->buffer != NULL) && (pCmdQElmt->bufferlength != 0))
++ NdisFreeMemory(pCmdQElmt->buffer, pCmdQElmt->bufferlength, 0);
++ {
++ NdisFreeMemory(pCmdQElmt, sizeof(CmdQElmt), 0);
++ }
++ }
++ }
++ }
++
++ NdisReleaseSpinLock(&pAd->CmdQLock);
++ }
++ /* notify the exit routine that we're actually exiting now
++ *
++ * complete()/wait_for_completion() is similar to up()/down(),
++ * except that complete() is safe in the case where the structure
++ * is getting deleted in a parallel mode of execution (i.e. just
++ * after the down() -- that's necessary for the thread-shutdown
++ * case.
++ *
++ * complete_and_exit() goes even further than this -- it is safe in
++ * the case that the thread of the caller is going away (not just
++ * the structure) -- this is necessary for the module-remove case.
++ * This is important in preemption kernels, which transfer the flow
++ * of execution immediately upon a complete().
++ */
++ DBGPRINT(RT_DEBUG_TRACE,( "<---RTUSBCmdThread\n"));
++
++ pObj->RTUSBCmdThr_pid = THREAD_PID_INIT_VALUE;
++
++ complete_and_exit (&pAd->CmdQComplete, 0);
++ return 0;
++
++}
++
++
++static void RT2870_TimerQ_Handle(RTMP_ADAPTER *pAd)
++{
++ int status;
++ RALINK_TIMER_STRUCT *pTimer;
++ RT2870_TIMER_ENTRY *pEntry;
++ unsigned long irqFlag;
++
++ while(!pAd->TimerFunc_kill)
++ {
++// printk("waiting for event!\n");
++ pTimer = NULL;
++
++ status = down_interruptible(&(pAd->RTUSBTimer_semaphore));
++
++ if (pAd->TimerQ.status == RT2870_THREAD_STOPED)
++ break;
++
++ // event happened.
++ while(pAd->TimerQ.pQHead)
++ {
++ RTMP_IRQ_LOCK(&pAd->TimerQLock, irqFlag);
++ pEntry = pAd->TimerQ.pQHead;
++ if (pEntry)
++ {
++ pTimer = pEntry->pRaTimer;
++
++ // update pQHead
++ pAd->TimerQ.pQHead = pEntry->pNext;
++ if (pEntry == pAd->TimerQ.pQTail)
++ pAd->TimerQ.pQTail = NULL;
++
++ // return this queue entry to timerQFreeList.
++ pEntry->pNext = pAd->TimerQ.pQPollFreeList;
++ pAd->TimerQ.pQPollFreeList = pEntry;
++ }
++ RTMP_IRQ_UNLOCK(&pAd->TimerQLock, irqFlag);
++
++ if (pTimer)
++ {
++ if (pTimer->handle != NULL)
++ if (!pAd->PM_FlgSuspend)
++ pTimer->handle(NULL, (PVOID) pTimer->cookie, NULL, pTimer);
++ if ((pTimer->Repeat) && (pTimer->State == FALSE))
++ RTMP_OS_Add_Timer(&pTimer->TimerObj, pTimer->TimerValue);
++ }
++ }
++
++ if (status != 0)
++ {
++ pAd->TimerQ.status = RT2870_THREAD_STOPED;
++ RTMP_SET_FLAG(pAd, fRTMP_ADAPTER_HALT_IN_PROGRESS);
++ break;
++ }
++ }
++}
++
++
++INT TimerQThread(
++ IN OUT PVOID Context)
++{
++ PRTMP_ADAPTER pAd;
++ POS_COOKIE pObj;
++
++ pAd = (PRTMP_ADAPTER)Context;
++ pObj = (POS_COOKIE) pAd->OS_Cookie;
++
++ rtmp_os_thread_init("rt2870TimerQHandle", (PVOID)&(pAd->TimerQComplete));
++
++ RT2870_TimerQ_Handle(pAd);
++
++ /* notify the exit routine that we're actually exiting now
++ *
++ * complete()/wait_for_completion() is similar to up()/down(),
++ * except that complete() is safe in the case where the structure
++ * is getting deleted in a parallel mode of execution (i.e. just
++ * after the down() -- that's necessary for the thread-shutdown
++ * case.
++ *
++ * complete_and_exit() goes even further than this -- it is safe in
++ * the case that the thread of the caller is going away (not just
++ * the structure) -- this is necessary for the module-remove case.
++ * This is important in preemption kernels, which transfer the flow
++ * of execution immediately upon a complete().
++ */
++ DBGPRINT(RT_DEBUG_TRACE,( "<---%s\n",__FUNCTION__));
++
++ pObj->TimerQThr_pid = THREAD_PID_INIT_VALUE;
++
++ complete_and_exit(&pAd->TimerQComplete, 0);
++ return 0;
++
++}
++
++
++RT2870_TIMER_ENTRY *RT2870_TimerQ_Insert(
++ IN RTMP_ADAPTER *pAd,
++ IN RALINK_TIMER_STRUCT *pTimer)
++{
++ RT2870_TIMER_ENTRY *pQNode = NULL, *pQTail;
++ unsigned long irqFlags;
++
++
++ RTMP_IRQ_LOCK(&pAd->TimerQLock, irqFlags);
++ if (pAd->TimerQ.status & RT2870_THREAD_CAN_DO_INSERT)
++ {
++ if(pAd->TimerQ.pQPollFreeList)
++ {
++ pQNode = pAd->TimerQ.pQPollFreeList;
++ pAd->TimerQ.pQPollFreeList = pQNode->pNext;
++
++ pQNode->pRaTimer = pTimer;
++ pQNode->pNext = NULL;
++
++ pQTail = pAd->TimerQ.pQTail;
++ if (pAd->TimerQ.pQTail != NULL)
++ pQTail->pNext = pQNode;
++ pAd->TimerQ.pQTail = pQNode;
++ if (pAd->TimerQ.pQHead == NULL)
++ pAd->TimerQ.pQHead = pQNode;
++ }
++ RTMP_IRQ_UNLOCK(&pAd->TimerQLock, irqFlags);
++
++ if (pQNode)
++ up(&pAd->RTUSBTimer_semaphore);
++ //wake_up(&timerWaitQ);
++ }
++ else
++ {
++ RTMP_IRQ_UNLOCK(&pAd->TimerQLock, irqFlags);
++ }
++ return pQNode;
++}
++
++
++BOOLEAN RT2870_TimerQ_Remove(
++ IN RTMP_ADAPTER *pAd,
++ IN RALINK_TIMER_STRUCT *pTimer)
++{
++ RT2870_TIMER_ENTRY *pNode, *pPrev = NULL;
++ unsigned long irqFlags;
++
++ RTMP_IRQ_LOCK(&pAd->TimerQLock, irqFlags);
++ if (pAd->TimerQ.status >= RT2870_THREAD_INITED)
++ {
++ pNode = pAd->TimerQ.pQHead;
++ while (pNode)
++ {
++ if (pNode->pRaTimer == pTimer)
++ break;
++ pPrev = pNode;
++ pNode = pNode->pNext;
++ }
++
++ // Now move it to freeList queue.
++ if (pNode)
++ {
++ if (pNode == pAd->TimerQ.pQHead)
++ pAd->TimerQ.pQHead = pNode->pNext;
++ if (pNode == pAd->TimerQ.pQTail)
++ pAd->TimerQ.pQTail = pPrev;
++ if (pPrev != NULL)
++ pPrev->pNext = pNode->pNext;
++
++ // return this queue entry to timerQFreeList.
++ pNode->pNext = pAd->TimerQ.pQPollFreeList;
++ pAd->TimerQ.pQPollFreeList = pNode;
++ }
++ }
++ RTMP_IRQ_UNLOCK(&pAd->TimerQLock, irqFlags);
++
++ return TRUE;
++}
++
++
++void RT2870_TimerQ_Exit(RTMP_ADAPTER *pAd)
++{
++ RT2870_TIMER_ENTRY *pTimerQ;
++ unsigned long irqFlags;
++
++ RTMP_IRQ_LOCK(&pAd->TimerQLock, irqFlags);
++ while (pAd->TimerQ.pQHead)
++ {
++ pTimerQ = pAd->TimerQ.pQHead;
++ pAd->TimerQ.pQHead = pTimerQ->pNext;
++ // remove the timeQ
++ }
++ pAd->TimerQ.pQPollFreeList = NULL;
++ os_free_mem(pAd, pAd->TimerQ.pTimerQPoll);
++ pAd->TimerQ.pQTail = NULL;
++ pAd->TimerQ.pQHead = NULL;
++ pAd->TimerQ.status = RT2870_THREAD_STOPED;
++ RTMP_IRQ_UNLOCK(&pAd->TimerQLock, irqFlags);
++
++}
++
++
++void RT2870_TimerQ_Init(RTMP_ADAPTER *pAd)
++{
++ int i;
++ RT2870_TIMER_ENTRY *pQNode, *pEntry;
++ unsigned long irqFlags;
++
++ NdisAllocateSpinLock(&pAd->TimerQLock);
++
++ RTMP_IRQ_LOCK(&pAd->TimerQLock, irqFlags);
++ NdisZeroMemory(&pAd->TimerQ, sizeof(pAd->TimerQ));
++ //InterlockedExchange(&pAd->TimerQ.count, 0);
++
++ /* Initialise the wait q head */
++ //init_waitqueue_head(&timerWaitQ);
++
++ os_alloc_mem(pAd, &pAd->TimerQ.pTimerQPoll, sizeof(RT2870_TIMER_ENTRY) * TIMER_QUEUE_SIZE_MAX);
++ if (pAd->TimerQ.pTimerQPoll)
++ {
++ pEntry = NULL;
++ pQNode = (RT2870_TIMER_ENTRY *)pAd->TimerQ.pTimerQPoll;
++ for (i = 0 ;i <TIMER_QUEUE_SIZE_MAX; i++)
++ {
++ pQNode->pNext = pEntry;
++ pEntry = pQNode;
++ pQNode++;
++ }
++ pAd->TimerQ.pQPollFreeList = pEntry;
++ pAd->TimerQ.pQHead = NULL;
++ pAd->TimerQ.pQTail = NULL;
++ pAd->TimerQ.status = RT2870_THREAD_INITED;
++ }
++ RTMP_IRQ_UNLOCK(&pAd->TimerQLock, irqFlags);
++}
++
++
++VOID RT2870_WatchDog(IN RTMP_ADAPTER *pAd)
++{
++ PHT_TX_CONTEXT pHTTXContext;
++ int idx;
++ ULONG irqFlags;
++ PURB pUrb;
++ BOOLEAN needDumpSeq = FALSE;
++ UINT32 MACValue;
++
++
++ idx = 0;
++ RTMP_IO_READ32(pAd, TXRXQ_PCNT, &MACValue);
++ if ((MACValue & 0xff) !=0 )
++ {
++ DBGPRINT(RT_DEBUG_TRACE, ("TX QUEUE 0 Not EMPTY(Value=0x%0x). !!!!!!!!!!!!!!!\n", MACValue));
++ RTMP_IO_WRITE32(pAd, PBF_CFG, 0xf40012);
++ while((MACValue &0xff) != 0 && (idx++ < 10))
++ {
++ RTMP_IO_READ32(pAd, TXRXQ_PCNT, &MACValue);
++ NdisMSleep(1);
++ }
++ RTMP_IO_WRITE32(pAd, PBF_CFG, 0xf40006);
++ }
++
++ idx = 0;
++ if ((MACValue & 0xff00) !=0 )
++ {
++ DBGPRINT(RT_DEBUG_TRACE, ("TX QUEUE 1 Not EMPTY(Value=0x%0x). !!!!!!!!!!!!!!!\n", MACValue));
++ RTMP_IO_WRITE32(pAd, PBF_CFG, 0xf4000a);
++ while((MACValue &0xff00) != 0 && (idx++ < 10))
++ {
++ RTMP_IO_READ32(pAd, TXRXQ_PCNT, &MACValue);
++ NdisMSleep(1);
++ }
++ RTMP_IO_WRITE32(pAd, PBF_CFG, 0xf40006);
++ }
++
++
++ if (pAd->watchDogRxOverFlowCnt >= 2)
++ {
++ DBGPRINT(RT_DEBUG_TRACE, ("Maybe the Rx Bulk-In hanged! Cancel the pending Rx bulks request!\n"));
++ if ((!RTMP_TEST_FLAG(pAd, (fRTMP_ADAPTER_RESET_IN_PROGRESS |
++ fRTMP_ADAPTER_BULKIN_RESET |
++ fRTMP_ADAPTER_HALT_IN_PROGRESS |
++ fRTMP_ADAPTER_NIC_NOT_EXIST))))
++ {
++ DBGPRINT(RT_DEBUG_TRACE, ("Call CMDTHREAD_RESET_BULK_IN to cancel the pending Rx Bulk!\n"));
++ RTMP_SET_FLAG(pAd, fRTMP_ADAPTER_BULKIN_RESET);
++ RTUSBEnqueueInternalCmd(pAd, CMDTHREAD_RESET_BULK_IN, NULL, 0);
++ needDumpSeq = TRUE;
++ }
++ pAd->watchDogRxOverFlowCnt = 0;
++ }
++
++
++ for (idx = 0; idx < NUM_OF_TX_RING; idx++)
++ {
++ pUrb = NULL;
++
++ RTMP_IRQ_LOCK(&pAd->BulkOutLock[idx], irqFlags);
++ if ((pAd->BulkOutPending[idx] == TRUE) && pAd->watchDogTxPendingCnt)
++ {
++ pAd->watchDogTxPendingCnt[idx]++;
++
++ if ((pAd->watchDogTxPendingCnt[idx] > 2) &&
++ (!RTMP_TEST_FLAG(pAd, (fRTMP_ADAPTER_RESET_IN_PROGRESS | fRTMP_ADAPTER_HALT_IN_PROGRESS | fRTMP_ADAPTER_NIC_NOT_EXIST | fRTMP_ADAPTER_BULKOUT_RESET)))
++ )
++ {
++ // FIXME: Following code just support single bulk out. If you wanna support multiple bulk out. Modify it!
++ pHTTXContext = (PHT_TX_CONTEXT)(&pAd->TxContext[idx]);
++ if (pHTTXContext->IRPPending)
++ { // Check TxContext.
++ pUrb = pHTTXContext->pUrb;
++ }
++ else if (idx == MGMTPIPEIDX)
++ {
++ PTX_CONTEXT pMLMEContext, pNULLContext, pPsPollContext;
++
++ //Check MgmtContext.
++ pMLMEContext = (PTX_CONTEXT)(pAd->MgmtRing.Cell[pAd->MgmtRing.TxDmaIdx].AllocVa);
++ pPsPollContext = (PTX_CONTEXT)(&pAd->PsPollContext);
++ pNULLContext = (PTX_CONTEXT)(&pAd->NullContext);
++
++ if (pMLMEContext->IRPPending)
++ {
++ ASSERT(pMLMEContext->IRPPending);
++ pUrb = pMLMEContext->pUrb;
++ }
++ else if (pNULLContext->IRPPending)
++ {
++ ASSERT(pNULLContext->IRPPending);
++ pUrb = pNULLContext->pUrb;
++ }
++ else if (pPsPollContext->IRPPending)
++ {
++ ASSERT(pPsPollContext->IRPPending);
++ pUrb = pPsPollContext->pUrb;
++ }
++ }
++
++ RTMP_IRQ_UNLOCK(&pAd->BulkOutLock[idx], irqFlags);
++
++ DBGPRINT(RT_DEBUG_TRACE, ("Maybe the Tx Bulk-Out hanged! Cancel the pending Tx bulks request of idx(%d)!\n", idx));
++ if (pUrb)
++ {
++ DBGPRINT(RT_DEBUG_TRACE, ("Unlink the pending URB!\n"));
++ // unlink it now
++ RTUSB_UNLINK_URB(pUrb);
++ // Sleep 200 microseconds to give cancellation time to work
++ RTMPusecDelay(200);
++ needDumpSeq = TRUE;
++ }
++ else
++ {
++ DBGPRINT(RT_DEBUG_ERROR, ("Unkonw bulkOut URB maybe hanged!!!!!!!!!!!!\n"));
++ }
++ }
++ else
++ {
++ RTMP_IRQ_UNLOCK(&pAd->BulkOutLock[idx], irqFlags);
++ }
++ }
++ else
++ {
++ RTMP_IRQ_UNLOCK(&pAd->BulkOutLock[idx], irqFlags);
++ }
++ }
++
++#ifdef DOT11_N_SUPPORT
++ // For Sigma debug, dump the ba_reordering sequence.
++ if((needDumpSeq == TRUE) && (pAd->CommonCfg.bDisableReordering == 0))
++ {
++ USHORT Idx;
++ PBA_REC_ENTRY pBAEntry = NULL;
++ UCHAR count = 0;
++ struct reordering_mpdu *mpdu_blk;
++
++ Idx = pAd->MacTab.Content[BSSID_WCID].BARecWcidArray[0];
++
++ pBAEntry = &pAd->BATable.BARecEntry[Idx];
++ if((pBAEntry->list.qlen > 0) && (pBAEntry->list.next != NULL))
++ {
++ DBGPRINT(RT_DEBUG_TRACE, ("NICUpdateRawCounters():The Queueing pkt in reordering buffer:\n"));
++ NdisAcquireSpinLock(&pBAEntry->RxReRingLock);
++ mpdu_blk = pBAEntry->list.next;
++ while (mpdu_blk)
++ {
++ DBGPRINT(RT_DEBUG_TRACE, ("\t%d:Seq-%d, bAMSDU-%d!\n", count, mpdu_blk->Sequence, mpdu_blk->bAMSDU));
++ mpdu_blk = mpdu_blk->next;
++ count++;
++ }
++
++ DBGPRINT(RT_DEBUG_TRACE, ("\npBAEntry->LastIndSeq=%d!\n", pBAEntry->LastIndSeq));
++ NdisReleaseSpinLock(&pBAEntry->RxReRingLock);
++ }
++ }
++#endif // DOT11_N_SUPPORT //
++}
++
++/*
++========================================================================
++Routine Description:
++ Release allocated resources.
++
++Arguments:
++ *dev Point to the PCI or USB device
++ pAd driver control block pointer
++
++Return Value:
++ None
++
++Note:
++========================================================================
++*/
++static void _rtusb_disconnect(struct usb_device *dev, PRTMP_ADAPTER pAd)
++{
++ struct net_device *net_dev = NULL;
++
++
++ DBGPRINT(RT_DEBUG_ERROR, ("rtusb_disconnect: unregister usbnet usb-%s-%s\n",
++ dev->bus->bus_name, dev->devpath));
++ if (!pAd)
++ {
++#ifdef MULTIPLE_CARD_SUPPORT
++ if ((pAd->MC_RowID >= 0) && (pAd->MC_RowID <= MAX_NUM_OF_MULTIPLE_CARD))
++ MC_CardUsed[pAd->MC_RowID] = 0; // not clear MAC address
++#endif // MULTIPLE_CARD_SUPPORT //
++
++#if LINUX_VERSION_CODE < KERNEL_VERSION(2,5,0) /* kernel 2.4 series */
++ while(MOD_IN_USE > 0)
++ {
++ MOD_DEC_USE_COUNT;
++ }
++#else
++ usb_put_dev(dev);
++#endif // LINUX_VERSION_CODE //
++
++ printk("rtusb_disconnect: pAd == NULL!\n");
++ return;
++ }
++ RTMP_SET_FLAG(pAd, fRTMP_ADAPTER_NIC_NOT_EXIST);
++
++
++
++ // for debug, wait to show some messages to /proc system
++ udelay(1);
++
++
++
++
++ net_dev = pAd->net_dev;
++ if (pAd->net_dev != NULL)
++ {
++ printk("rtusb_disconnect: unregister_netdev(), dev->name=%s!\n", net_dev->name);
++ unregister_netdev (pAd->net_dev);
++ }
++ udelay(1);
++#if LINUX_VERSION_CODE < KERNEL_VERSION(2,5,0) /* kernel 2.4 series */
++#else
++ flush_scheduled_work();
++#endif // LINUX_VERSION_CODE //
++ udelay(1);
++
++ // free net_device memory
++#if LINUX_VERSION_CODE < KERNEL_VERSION(2,5,0) /* kernel 2.4 series */
++ kfree(net_dev);
++#else
++ free_netdev(net_dev);
++#endif // LINUX_VERSION_CODE //
++
++ // free adapter memory
++ RTMPFreeAdapter(pAd);
++
++ // release a use of the usb device structure
++#if LINUX_VERSION_CODE < KERNEL_VERSION(2,5,0) /* kernel 2.4 series */
++ while(MOD_IN_USE > 0)
++ {
++ MOD_DEC_USE_COUNT;
++ }
++#else
++ usb_put_dev(dev);
++#endif // LINUX_VERSION_CODE //
++ udelay(1);
++
++ DBGPRINT(RT_DEBUG_ERROR, (" RTUSB disconnect successfully\n"));
++}
++
++
++/*
++========================================================================
++Routine Description:
++ Probe RT28XX chipset.
++
++Arguments:
++ *dev Point to the PCI or USB device
++ interface
++ *id_table Point to the PCI or USB device ID
++
++Return Value:
++ None
++
++Note:
++========================================================================
++*/
++#if LINUX_VERSION_CODE < KERNEL_VERSION(2,5,0) /* kernel 2.4 series */
++static void *rtusb_probe(struct usb_device *dev, UINT interface,
++ const struct usb_device_id *id)
++{
++ PRTMP_ADAPTER pAd;
++ rt28xx_probe((void *)dev, (void *)id, interface, &pAd);
++ return (void *)pAd;
++}
++
++//Disconnect function is called within exit routine
++static void rtusb_disconnect(struct usb_device *dev, void *ptr)
++{
++ _rtusb_disconnect(dev, ((PRTMP_ADAPTER)ptr));
++}
++
++#else /* kernel 2.6 series */
++static int rtusb_probe (struct usb_interface *intf,
++ const struct usb_device_id *id)
++{
++ PRTMP_ADAPTER pAd;
++ return (int)rt28xx_probe((void *)intf, (void *)id, 0, &pAd);
++}
++
++
++static void rtusb_disconnect(struct usb_interface *intf)
++{
++ struct usb_device *dev = interface_to_usbdev(intf);
++ PRTMP_ADAPTER pAd;
++
++
++ pAd = usb_get_intfdata(intf);
++ usb_set_intfdata(intf, NULL);
++
++ _rtusb_disconnect(dev, pAd);
++}
++#endif // LINUX_VERSION_CODE //
++
++
++/*
++========================================================================
++Routine Description:
++ Close kernel threads.
++
++Arguments:
++ *pAd the raxx interface data pointer
++
++Return Value:
++ NONE
++
++Note:
++========================================================================
++*/
++VOID RT28xxThreadTerminate(
++ IN RTMP_ADAPTER *pAd)
++{
++ POS_COOKIE pObj = (POS_COOKIE) pAd->OS_Cookie;
++ INT ret;
++
++
++ // Sleep 50 milliseconds so pending io might finish normally
++ RTMPusecDelay(50000);
++
++ // We want to wait until all pending receives and sends to the
++ // device object. We cancel any
++ // irps. Wait until sends and receives have stopped.
++ RTUSBCancelPendingIRPs(pAd);
++
++ // Terminate Threads
++ CHECK_PID_LEGALITY(pObj->TimerQThr_pid)
++ {
++ POS_COOKIE pObj = (POS_COOKIE)pAd->OS_Cookie;
++
++ printk("Terminate the TimerQThr_pid=%d!\n", GET_PID_NUMBER(pObj->TimerQThr_pid));
++ mb();
++ pAd->TimerFunc_kill = 1;
++ mb();
++ ret = KILL_THREAD_PID(pObj->TimerQThr_pid, SIGTERM, 1);
++ if (ret)
++ {
++ printk(KERN_WARNING "%s: unable to stop TimerQThread, pid=%d, ret=%d!\n",
++ pAd->net_dev->name, GET_PID_NUMBER(pObj->TimerQThr_pid), ret);
++ }
++ else
++ {
++ wait_for_completion(&pAd->TimerQComplete);
++ pObj->TimerQThr_pid = THREAD_PID_INIT_VALUE;
++ }
++ }
++
++ CHECK_PID_LEGALITY(pObj->MLMEThr_pid)
++ {
++ printk("Terminate the MLMEThr_pid=%d!\n", GET_PID_NUMBER(pObj->MLMEThr_pid));
++ mb();
++ pAd->mlme_kill = 1;
++ //RT28XX_MLME_HANDLER(pAd);
++ mb();
++ ret = KILL_THREAD_PID(pObj->MLMEThr_pid, SIGTERM, 1);
++ if (ret)
++ {
++ printk (KERN_WARNING "%s: unable to Mlme thread, pid=%d, ret=%d!\n",
++ pAd->net_dev->name, GET_PID_NUMBER(pObj->MLMEThr_pid), ret);
++ }
++ else
++ {
++ //wait_for_completion (&pAd->notify);
++ wait_for_completion (&pAd->mlmeComplete);
++ pObj->MLMEThr_pid = THREAD_PID_INIT_VALUE;
++ }
++ }
++
++ CHECK_PID_LEGALITY(pObj->RTUSBCmdThr_pid)
++ {
++ printk("Terminate the RTUSBCmdThr_pid=%d!\n", GET_PID_NUMBER(pObj->RTUSBCmdThr_pid));
++ mb();
++ NdisAcquireSpinLock(&pAd->CmdQLock);
++ pAd->CmdQ.CmdQState = RT2870_THREAD_STOPED;
++ NdisReleaseSpinLock(&pAd->CmdQLock);
++ mb();
++ //RTUSBCMDUp(pAd);
++ ret = KILL_THREAD_PID(pObj->RTUSBCmdThr_pid, SIGTERM, 1);
++ if (ret)
++ {
++ printk(KERN_WARNING "%s: unable to RTUSBCmd thread, pid=%d, ret=%d!\n",
++ pAd->net_dev->name, GET_PID_NUMBER(pObj->RTUSBCmdThr_pid), ret);
++ }
++ else
++ {
++ //wait_for_completion (&pAd->notify);
++ wait_for_completion (&pAd->CmdQComplete);
++ pObj->RTUSBCmdThr_pid = THREAD_PID_INIT_VALUE;
++ }
++ }
++
++
++ // Kill tasklets
++ pAd->mlme_kill = 0;
++ pAd->CmdQ.CmdQState = RT2870_THREAD_UNKNOWN;
++ pAd->TimerFunc_kill = 0;
++}
++
++
++void kill_thread_task(IN PRTMP_ADAPTER pAd)
++{
++ POS_COOKIE pObj;
++
++ pObj = (POS_COOKIE) pAd->OS_Cookie;
++
++ tasklet_kill(&pObj->rx_done_task);
++ tasklet_kill(&pObj->mgmt_dma_done_task);
++ tasklet_kill(&pObj->ac0_dma_done_task);
++ tasklet_kill(&pObj->ac1_dma_done_task);
++ tasklet_kill(&pObj->ac2_dma_done_task);
++ tasklet_kill(&pObj->ac3_dma_done_task);
++ tasklet_kill(&pObj->hcca_dma_done_task);
++ tasklet_kill(&pObj->tbtt_task);
++
++}
++
++
++/*
++========================================================================
++Routine Description:
++ Check the chipset vendor/product ID.
++
++Arguments:
++ _dev_p Point to the PCI or USB device
++
++Return Value:
++ TRUE Check ok
++ FALSE Check fail
++
++Note:
++========================================================================
++*/
++BOOLEAN RT28XXChipsetCheck(
++ IN void *_dev_p)
++{
++#if LINUX_VERSION_CODE < KERNEL_VERSION(2,5,0) /* kernel 2.4 series */
++ struct usb_device *dev_p = (struct usb_device *)_dev_p;
++#else
++ struct usb_interface *intf = (struct usb_interface *)_dev_p;
++ struct usb_device *dev_p = interface_to_usbdev(intf);
++#endif // LINUX_VERSION_CODE //
++ UINT32 i;
++
++
++ for(i=0; i<rtusb_usb_id_len; i++)
++ {
++ if (dev_p->descriptor.idVendor == rtusb_usb_id[i].idVendor &&
++ dev_p->descriptor.idProduct == rtusb_usb_id[i].idProduct)
++ {
++ printk("rt2870: idVendor = 0x%x, idProduct = 0x%x\n",
++ dev_p->descriptor.idVendor, dev_p->descriptor.idProduct);
++ break;
++ }
++ }
++
++ if (i == rtusb_usb_id_len)
++ {
++ printk("rt2870: Error! Device Descriptor not matching!\n");
++ return FALSE;
++ }
++
++ return TRUE;
++}
++
++
++/*
++========================================================================
++Routine Description:
++ Init net device structure.
++
++Arguments:
++ _dev_p Point to the PCI or USB device
++ *net_dev Point to the net device
++ *pAd the raxx interface data pointer
++
++Return Value:
++ TRUE Init ok
++ FALSE Init fail
++
++Note:
++========================================================================
++*/
++BOOLEAN RT28XXNetDevInit(
++ IN void *_dev_p,
++ IN struct net_device *net_dev,
++ IN RTMP_ADAPTER *pAd)
++{
++#if LINUX_VERSION_CODE < KERNEL_VERSION(2,5,0) /* kernel 2.4 series */
++ struct usb_device *dev_p = (struct usb_device *)_dev_p;
++#else
++ struct usb_interface *intf = (struct usb_interface *)_dev_p;
++ struct usb_device *dev_p = interface_to_usbdev(intf);
++#endif // LINUX_VERSION_CODE //
++
++
++#if LINUX_VERSION_CODE < KERNEL_VERSION(2,5,0) /* kernel 2.4 series */
++ pAd->config = dev_p->config;
++#else
++ pAd->config = &dev_p->config->desc;
++#endif // LINUX_VERSION_CODE //
++ return TRUE;
++}
++
++
++/*
++========================================================================
++Routine Description:
++ Init net device structure.
++
++Arguments:
++ _dev_p Point to the PCI or USB device
++ *pAd the raxx interface data pointer
++
++Return Value:
++ TRUE Config ok
++ FALSE Config fail
++
++Note:
++========================================================================
++*/
++#if LINUX_VERSION_CODE < KERNEL_VERSION(2,5,0)
++BOOLEAN RT28XXProbePostConfig(
++ IN void *_dev_p,
++ IN RTMP_ADAPTER *pAd,
++ IN INT32 interface)
++{
++ struct usb_device *dev_p = (struct usb_device *)_dev_p;
++ struct usb_interface *intf;
++ struct usb_interface_descriptor *iface_desc;
++ struct usb_endpoint_descriptor *endpoint;
++ ULONG BulkOutIdx;
++ UINT32 i;
++
++
++ /* get the active interface descriptor */
++ intf = &dev_p->actconfig->interface[interface];
++ iface_desc = &intf->altsetting[0];
++
++ /* get # of enpoints */
++ pAd->NumberOfPipes = iface_desc->bNumEndpoints;
++ DBGPRINT(RT_DEBUG_TRACE, ("NumEndpoints=%d\n", iface_desc->bNumEndpoints));
++
++ /* Configure Pipes */
++ endpoint = &iface_desc->endpoint[0];
++ BulkOutIdx = 0;
++
++ for(i=0; i<pAd->NumberOfPipes; i++)
++ {
++ if ((endpoint[i].bmAttributes == USB_ENDPOINT_XFER_BULK) &&
++ ((endpoint[i].bEndpointAddress & USB_ENDPOINT_DIR_MASK) == USB_DIR_IN))
++ {
++ pAd->BulkInEpAddr = endpoint[i].bEndpointAddress;
++ pAd->BulkInMaxPacketSize = endpoint[i].wMaxPacketSize;
++
++ DBGPRINT_RAW(RT_DEBUG_TRACE,
++ ("BULK IN MaximumPacketSize = %d\n", pAd->BulkInMaxPacketSize));
++ DBGPRINT_RAW(RT_DEBUG_TRACE,
++ ("EP address = 0x%2x \n", endpoint[i].bEndpointAddress));
++ }
++ else if ((endpoint[i].bmAttributes == USB_ENDPOINT_XFER_BULK) &&
++ ((endpoint[i].bEndpointAddress & USB_ENDPOINT_DIR_MASK) == USB_DIR_OUT))
++ {
++ // There are 6 bulk out EP. EP6 highest priority.
++ // EP1-4 is EDCA. EP5 is HCCA.
++ pAd->BulkOutEpAddr[BulkOutIdx++] = endpoint[i].bEndpointAddress;
++ pAd->BulkOutMaxPacketSize = endpoint[i].wMaxPacketSize;
++
++ DBGPRINT_RAW(RT_DEBUG_TRACE,
++ ("BULK OUT MaximumPacketSize = %d\n", pAd->BulkOutMaxPacketSize));
++ DBGPRINT_RAW(RT_DEBUG_TRACE,
++ ("EP address = 0x%2x \n", endpoint[i].bEndpointAddress));
++ }
++ }
++
++ if (!(pAd->BulkInEpAddr && pAd->BulkOutEpAddr[0]))
++ {
++ printk("Could not find both bulk-in and bulk-out endpoints\n");
++ return FALSE;
++ }
++
++ return TRUE;
++}
++
++#else
++BOOLEAN RT28XXProbePostConfig(
++ IN void *_dev_p,
++ IN RTMP_ADAPTER *pAd,
++ IN INT32 interface)
++{
++ struct usb_interface *intf = (struct usb_interface *)_dev_p;
++ struct usb_host_interface *iface_desc;
++ ULONG BulkOutIdx;
++ UINT32 i;
++
++
++ /* get the active interface descriptor */
++ iface_desc = intf->cur_altsetting;
++
++ /* get # of enpoints */
++ pAd->NumberOfPipes = iface_desc->desc.bNumEndpoints;
++ DBGPRINT(RT_DEBUG_TRACE,
++ ("NumEndpoints=%d\n", iface_desc->desc.bNumEndpoints));
++
++ /* Configure Pipes */
++ BulkOutIdx = 0;
++
++ for(i=0; i<pAd->NumberOfPipes; i++)
++ {
++ if ((iface_desc->endpoint[i].desc.bmAttributes ==
++ USB_ENDPOINT_XFER_BULK) &&
++ ((iface_desc->endpoint[i].desc.bEndpointAddress &
++ USB_ENDPOINT_DIR_MASK) == USB_DIR_IN))
++ {
++ pAd->BulkInEpAddr = iface_desc->endpoint[i].desc.bEndpointAddress;
++ pAd->BulkInMaxPacketSize = iface_desc->endpoint[i].desc.wMaxPacketSize;
++
++ DBGPRINT_RAW(RT_DEBUG_TRACE,
++ ("BULK IN MaximumPacketSize = %d\n", pAd->BulkInMaxPacketSize));
++ DBGPRINT_RAW(RT_DEBUG_TRACE,
++ ("EP address = 0x%2x\n", iface_desc->endpoint[i].desc.bEndpointAddress));
++ }
++ else if ((iface_desc->endpoint[i].desc.bmAttributes ==
++ USB_ENDPOINT_XFER_BULK) &&
++ ((iface_desc->endpoint[i].desc.bEndpointAddress &
++ USB_ENDPOINT_DIR_MASK) == USB_DIR_OUT))
++ {
++ // there are 6 bulk out EP. EP6 highest priority.
++ // EP1-4 is EDCA. EP5 is HCCA.
++ pAd->BulkOutEpAddr[BulkOutIdx++] = iface_desc->endpoint[i].desc.bEndpointAddress;
++ pAd->BulkOutMaxPacketSize = iface_desc->endpoint[i].desc.wMaxPacketSize;
++
++ DBGPRINT_RAW(RT_DEBUG_TRACE,
++ ("BULK OUT MaximumPacketSize = %d\n", pAd->BulkOutMaxPacketSize));
++ DBGPRINT_RAW(RT_DEBUG_TRACE,
++ ("EP address = 0x%2x \n", iface_desc->endpoint[i].desc.bEndpointAddress));
++ }
++ }
++
++ if (!(pAd->BulkInEpAddr && pAd->BulkOutEpAddr[0]))
++ {
++ printk("%s: Could not find both bulk-in and bulk-out endpoints\n", __FUNCTION__);
++ return FALSE;
++ }
++
++ return TRUE;
++}
++#endif // LINUX_VERSION_CODE //
++
++
++/*
++========================================================================
++Routine Description:
++ Disable DMA.
++
++Arguments:
++ *pAd the raxx interface data pointer
++
++Return Value:
++ None
++
++Note:
++========================================================================
++*/
++VOID RT28XXDMADisable(
++ IN RTMP_ADAPTER *pAd)
++{
++ // no use
++}
++
++
++
++/*
++========================================================================
++Routine Description:
++ Enable DMA.
++
++Arguments:
++ *pAd the raxx interface data pointer
++
++Return Value:
++ None
++
++Note:
++========================================================================
++*/
++VOID RT28XXDMAEnable(
++ IN RTMP_ADAPTER *pAd)
++{
++ WPDMA_GLO_CFG_STRUC GloCfg;
++ USB_DMA_CFG_STRUC UsbCfg;
++ int i = 0;
++
++
++ RTMP_IO_WRITE32(pAd, MAC_SYS_CTRL, 0x4);
++ do
++ {
++ RTMP_IO_READ32(pAd, WPDMA_GLO_CFG, &GloCfg.word);
++ if ((GloCfg.field.TxDMABusy == 0) && (GloCfg.field.RxDMABusy == 0))
++ break;
++
++ DBGPRINT(RT_DEBUG_TRACE, ("==> DMABusy\n"));
++ RTMPusecDelay(1000);
++ i++;
++ }while ( i <200);
++
++
++ RTMPusecDelay(50);
++ GloCfg.field.EnTXWriteBackDDONE = 1;
++ GloCfg.field.EnableRxDMA = 1;
++ GloCfg.field.EnableTxDMA = 1;
++ DBGPRINT(RT_DEBUG_TRACE, ("<== WRITE DMA offset 0x208 = 0x%x\n", GloCfg.word));
++ RTMP_IO_WRITE32(pAd, WPDMA_GLO_CFG, GloCfg.word);
++
++ UsbCfg.word = 0;
++ UsbCfg.field.phyclear = 0;
++ /* usb version is 1.1,do not use bulk in aggregation */
++ if (pAd->BulkInMaxPacketSize == 512)
++ UsbCfg.field.RxBulkAggEn = 1;
++ /* for last packet, PBF might use more than limited, so minus 2 to prevent from error */
++ UsbCfg.field.RxBulkAggLmt = (MAX_RXBULK_SIZE /1024)-3;
++ UsbCfg.field.RxBulkAggTOut = 0x80; /* 2006-10-18 */
++ UsbCfg.field.RxBulkEn = 1;
++ UsbCfg.field.TxBulkEn = 1;
++
++ RTUSBWriteMACRegister(pAd, USB_DMA_CFG, UsbCfg.word);
++
++}
++
++/*
++========================================================================
++Routine Description:
++ Write Beacon buffer to Asic.
++
++Arguments:
++ *pAd the raxx interface data pointer
++
++Return Value:
++ None
++
++Note:
++========================================================================
++*/
++VOID RT28xx_UpdateBeaconToAsic(
++ IN RTMP_ADAPTER *pAd,
++ IN INT apidx,
++ IN ULONG FrameLen,
++ IN ULONG UpdatePos)
++{
++ PUCHAR pBeaconFrame = NULL;
++ UCHAR *ptr;
++ UINT i, padding;
++ BEACON_SYNC_STRUCT *pBeaconSync = pAd->CommonCfg.pBeaconSync;
++ UINT32 longValue;
++ BOOLEAN bBcnReq = FALSE;
++ UCHAR bcn_idx = 0;
++
++
++ if (pBeaconFrame == NULL)
++ {
++ DBGPRINT(RT_DEBUG_ERROR,("pBeaconFrame is NULL!\n"));
++ return;
++ }
++
++ if (pBeaconSync == NULL)
++ {
++ DBGPRINT(RT_DEBUG_ERROR,("pBeaconSync is NULL!\n"));
++ return;
++ }
++
++ //if ((pAd->WdsTab.Mode == WDS_BRIDGE_MODE) ||
++ // ((pAd->ApCfg.MBSSID[apidx].MSSIDDev == NULL) || !(pAd->ApCfg.MBSSID[apidx].MSSIDDev->flags & IFF_UP))
++ // )
++ if (bBcnReq == FALSE)
++ {
++ /* when the ra interface is down, do not send its beacon frame */
++ /* clear all zero */
++ for(i=0; i<TXWI_SIZE; i+=4) {
++ RTMP_IO_WRITE32(pAd, pAd->BeaconOffset[bcn_idx] + i, 0x00);
++ }
++ pBeaconSync->BeaconBitMap &= (~(BEACON_BITMAP_MASK & (1 << bcn_idx)));
++ NdisZeroMemory(pBeaconSync->BeaconTxWI[bcn_idx], TXWI_SIZE);
++ }
++ else
++ {
++ ptr = (PUCHAR)&pAd->BeaconTxWI;
++#ifdef RT_BIG_ENDIAN
++ RTMPWIEndianChange(ptr, TYPE_TXWI);
++#endif
++ if (NdisEqualMemory(pBeaconSync->BeaconTxWI[bcn_idx], &pAd->BeaconTxWI, TXWI_SIZE) == FALSE)
++ { // If BeaconTxWI changed, we need to rewrite the TxWI for the Beacon frames.
++ pBeaconSync->BeaconBitMap &= (~(BEACON_BITMAP_MASK & (1 << bcn_idx)));
++ NdisMoveMemory(pBeaconSync->BeaconTxWI[bcn_idx], &pAd->BeaconTxWI, TXWI_SIZE);
++ }
++
++ if ((pBeaconSync->BeaconBitMap & (1 << bcn_idx)) != (1 << bcn_idx))
++ {
++ for (i=0; i<TXWI_SIZE; i+=4) // 16-byte TXWI field
++ {
++ longValue = *ptr + (*(ptr+1)<<8) + (*(ptr+2)<<16) + (*(ptr+3)<<24);
++ RTMP_IO_WRITE32(pAd, pAd->BeaconOffset[bcn_idx] + i, longValue);
++ ptr += 4;
++ }
++ }
++
++ ptr = pBeaconSync->BeaconBuf[bcn_idx];
++ padding = (FrameLen & 0x01);
++ NdisZeroMemory((PUCHAR)(pBeaconFrame + FrameLen), padding);
++ FrameLen += padding;
++ for (i = 0 ; i < FrameLen /*HW_BEACON_OFFSET*/; i += 2)
++ {
++ if (NdisEqualMemory(ptr, pBeaconFrame, 2) == FALSE)
++ {
++ NdisMoveMemory(ptr, pBeaconFrame, 2);
++ //shortValue = *ptr + (*(ptr+1)<<8);
++ //RTMP_IO_WRITE8(pAd, pAd->BeaconOffset[bcn_idx] + TXWI_SIZE + i, shortValue);
++ RTUSBMultiWrite(pAd, pAd->BeaconOffset[bcn_idx] + TXWI_SIZE + i, ptr, 2);
++ }
++ ptr +=2;
++ pBeaconFrame += 2;
++ }
++
++ pBeaconSync->BeaconBitMap |= (1 << bcn_idx);
++ }
++
++}
++
++
++VOID RT2870_BssBeaconStop(
++ IN RTMP_ADAPTER *pAd)
++{
++ BEACON_SYNC_STRUCT *pBeaconSync;
++ int i, offset;
++ BOOLEAN Cancelled = TRUE;
++
++ pBeaconSync = pAd->CommonCfg.pBeaconSync;
++ if (pBeaconSync && pBeaconSync->EnableBeacon)
++ {
++ INT NumOfBcn;
++
++
++#ifdef CONFIG_STA_SUPPORT
++ IF_DEV_CONFIG_OPMODE_ON_STA(pAd)
++ {
++ NumOfBcn = MAX_MESH_NUM;
++ }
++#endif // CONFIG_STA_SUPPORT //
++
++ RTMPCancelTimer(&pAd->CommonCfg.BeaconUpdateTimer, &Cancelled);
++
++ for(i=0; i<NumOfBcn; i++)
++ {
++ NdisZeroMemory(pBeaconSync->BeaconBuf[i], HW_BEACON_OFFSET);
++ NdisZeroMemory(pBeaconSync->BeaconTxWI[i], TXWI_SIZE);
++
++ for (offset=0; offset<HW_BEACON_OFFSET; offset+=4)
++ RTMP_IO_WRITE32(pAd, pAd->BeaconOffset[i] + offset, 0x00);
++
++ pBeaconSync->CapabilityInfoLocationInBeacon[i] = 0;
++ pBeaconSync->TimIELocationInBeacon[i] = 0;
++ }
++ pBeaconSync->BeaconBitMap = 0;
++ pBeaconSync->DtimBitOn = 0;
++ }
++}
++
++
++VOID RT2870_BssBeaconStart(
++ IN RTMP_ADAPTER *pAd)
++{
++ int apidx;
++ BEACON_SYNC_STRUCT *pBeaconSync;
++// LARGE_INTEGER tsfTime, deltaTime;
++
++ pBeaconSync = pAd->CommonCfg.pBeaconSync;
++ if (pBeaconSync && pBeaconSync->EnableBeacon)
++ {
++ INT NumOfBcn;
++
++
++#ifdef CONFIG_STA_SUPPORT
++ IF_DEV_CONFIG_OPMODE_ON_STA(pAd)
++ {
++ NumOfBcn = MAX_MESH_NUM;
++ }
++#endif // CONFIG_STA_SUPPORT //
++
++ for(apidx=0; apidx<NumOfBcn; apidx++)
++ {
++ UCHAR CapabilityInfoLocationInBeacon = 0;
++ UCHAR TimIELocationInBeacon = 0;
++
++ NdisZeroMemory(pBeaconSync->BeaconBuf[apidx], HW_BEACON_OFFSET);
++ pBeaconSync->CapabilityInfoLocationInBeacon[apidx] = CapabilityInfoLocationInBeacon;
++ pBeaconSync->TimIELocationInBeacon[apidx] = TimIELocationInBeacon;
++ NdisZeroMemory(pBeaconSync->BeaconTxWI[apidx], TXWI_SIZE);
++ }
++ pBeaconSync->BeaconBitMap = 0;
++ pBeaconSync->DtimBitOn = 0;
++ pAd->CommonCfg.BeaconUpdateTimer.Repeat = TRUE;
++
++ pAd->CommonCfg.BeaconAdjust = 0;
++ pAd->CommonCfg.BeaconFactor = 0xffffffff / (pAd->CommonCfg.BeaconPeriod << 10);
++ pAd->CommonCfg.BeaconRemain = (0xffffffff % (pAd->CommonCfg.BeaconPeriod << 10)) + 1;
++ printk("RT2870_BssBeaconStart:BeaconFactor=%d, BeaconRemain=%d!\n", pAd->CommonCfg.BeaconFactor, pAd->CommonCfg.BeaconRemain);
++ RTMPSetTimer(&pAd->CommonCfg.BeaconUpdateTimer, pAd->CommonCfg.BeaconPeriod);
++
++ }
++}
++
++
++VOID RT2870_BssBeaconInit(
++ IN RTMP_ADAPTER *pAd)
++{
++ BEACON_SYNC_STRUCT *pBeaconSync;
++ int i;
++
++ NdisAllocMemory(pAd->CommonCfg.pBeaconSync, sizeof(BEACON_SYNC_STRUCT), MEM_ALLOC_FLAG);
++ if (pAd->CommonCfg.pBeaconSync)
++ {
++ pBeaconSync = pAd->CommonCfg.pBeaconSync;
++ NdisZeroMemory(pBeaconSync, sizeof(BEACON_SYNC_STRUCT));
++ for(i=0; i < HW_BEACON_MAX_COUNT; i++)
++ {
++ NdisZeroMemory(pBeaconSync->BeaconBuf[i], HW_BEACON_OFFSET);
++ pBeaconSync->CapabilityInfoLocationInBeacon[i] = 0;
++ pBeaconSync->TimIELocationInBeacon[i] = 0;
++ NdisZeroMemory(pBeaconSync->BeaconTxWI[i], TXWI_SIZE);
++ }
++ pBeaconSync->BeaconBitMap = 0;
++
++ //RTMPInitTimer(pAd, &pAd->CommonCfg.BeaconUpdateTimer, GET_TIMER_FUNCTION(BeaconUpdateExec), pAd, TRUE);
++ pBeaconSync->EnableBeacon = TRUE;
++ }
++}
++
++
++VOID RT2870_BssBeaconExit(
++ IN RTMP_ADAPTER *pAd)
++{
++ BEACON_SYNC_STRUCT *pBeaconSync;
++ BOOLEAN Cancelled = TRUE;
++ int i;
++
++ if (pAd->CommonCfg.pBeaconSync)
++ {
++ pBeaconSync = pAd->CommonCfg.pBeaconSync;
++ pBeaconSync->EnableBeacon = FALSE;
++ RTMPCancelTimer(&pAd->CommonCfg.BeaconUpdateTimer, &Cancelled);
++ pBeaconSync->BeaconBitMap = 0;
++
++ for(i=0; i<HW_BEACON_MAX_COUNT; i++)
++ {
++ NdisZeroMemory(pBeaconSync->BeaconBuf[i], HW_BEACON_OFFSET);
++ pBeaconSync->CapabilityInfoLocationInBeacon[i] = 0;
++ pBeaconSync->TimIELocationInBeacon[i] = 0;
++ NdisZeroMemory(pBeaconSync->BeaconTxWI[i], TXWI_SIZE);
++ }
++
++ NdisFreeMemory(pAd->CommonCfg.pBeaconSync, HW_BEACON_OFFSET * HW_BEACON_MAX_COUNT, 0);
++ pAd->CommonCfg.pBeaconSync = NULL;
++ }
++}
++
++VOID BeaconUpdateExec(
++ IN PVOID SystemSpecific1,
++ IN PVOID FunctionContext,
++ IN PVOID SystemSpecific2,
++ IN PVOID SystemSpecific3)
++{
++ PRTMP_ADAPTER pAd = (PRTMP_ADAPTER)FunctionContext;
++ LARGE_INTEGER tsfTime_a;//, tsfTime_b, deltaTime_exp, deltaTime_ab;
++ UINT32 delta, remain, remain_low, remain_high;
++// BOOLEAN positive;
++
++ ReSyncBeaconTime(pAd);
++
++
++
++ RTMP_IO_READ32(pAd, TSF_TIMER_DW0, &tsfTime_a.u.LowPart);
++ RTMP_IO_READ32(pAd, TSF_TIMER_DW1, &tsfTime_a.u.HighPart);
++
++
++ //positive=getDeltaTime(tsfTime_a, expectedTime, &deltaTime_exp);
++ remain_high = pAd->CommonCfg.BeaconRemain * tsfTime_a.u.HighPart;
++ remain_low = tsfTime_a.u.LowPart % (pAd->CommonCfg.BeaconPeriod << 10);
++ remain = (remain_high + remain_low)%(pAd->CommonCfg.BeaconPeriod << 10);
++ delta = (pAd->CommonCfg.BeaconPeriod << 10) - remain;
++
++ pAd->CommonCfg.BeaconUpdateTimer.TimerValue = (delta >> 10) + 10;
++
++}
++
+--- /dev/null
++++ b/drivers/staging/rt2870/aironet.h
+@@ -0,0 +1,210 @@
++/*
++ *************************************************************************
++ * Ralink Tech Inc.
++ * 5F., No.36, Taiyuan St., Jhubei City,
++ * Hsinchu County 302,
++ * Taiwan, R.O.C.
++ *
++ * (c) Copyright 2002-2007, Ralink Technology, Inc.
++ *
++ * This program is free software; you can redistribute it and/or modify *
++ * it under the terms of the GNU General Public License as published by *
++ * the Free Software Foundation; either version 2 of the License, or *
++ * (at your option) any later version. *
++ * *
++ * This program is distributed in the hope that it will be useful, *
++ * but WITHOUT ANY WARRANTY; without even the implied warranty of *
++ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the *
++ * GNU General Public License for more details. *
++ * *
++ * You should have received a copy of the GNU General Public License *
++ * along with this program; if not, write to the *
++ * Free Software Foundation, Inc., *
++ * 59 Temple Place - Suite 330, Boston, MA 02111-1307, USA. *
++ * *
++ *************************************************************************
++
++ Module Name:
++ aironet.h
++
++ Abstract:
++
++ Revision History:
++ Who When What
++ -------- ---------- ----------------------------------------------
++ Name Date Modification logs
++ Paul Lin 04-06-15 Initial
++*/
++
++#ifndef __AIRONET_H__
++#define __AIRONET_H__
++
++// Measurement Type definition
++#define MSRN_TYPE_UNUSED 0
++#define MSRN_TYPE_CHANNEL_LOAD_REQ 1
++#define MSRN_TYPE_NOISE_HIST_REQ 2
++#define MSRN_TYPE_BEACON_REQ 3
++#define MSRN_TYPE_FRAME_REQ 4
++
++// Scan Mode in Beacon Request
++#define MSRN_SCAN_MODE_PASSIVE 0
++#define MSRN_SCAN_MODE_ACTIVE 1
++#define MSRN_SCAN_MODE_BEACON_TABLE 2
++
++// PHY type definition for Aironet beacon report, CCX 2 table 36-9
++#define PHY_FH 1
++#define PHY_DSS 2
++#define PHY_UNUSED 3
++#define PHY_OFDM 4
++#define PHY_HR_DSS 5
++#define PHY_ERP 6
++
++// RPI table in dBm
++#define RPI_0 0 // Power <= -87
++#define RPI_1 1 // -87 < Power <= -82
++#define RPI_2 2 // -82 < Power <= -77
++#define RPI_3 3 // -77 < Power <= -72
++#define RPI_4 4 // -72 < Power <= -67
++#define RPI_5 5 // -67 < Power <= -62
++#define RPI_6 6 // -62 < Power <= -57
++#define RPI_7 7 // -57 < Power
++
++// Cisco Aironet IAPP definetions
++#define AIRONET_IAPP_TYPE 0x32
++#define AIRONET_IAPP_SUBTYPE_REQUEST 0x01
++#define AIRONET_IAPP_SUBTYPE_REPORT 0x81
++
++// Measurement Request detail format
++typedef struct _MEASUREMENT_REQUEST {
++ UCHAR Channel;
++ UCHAR ScanMode; // Use only in beacon request, other requests did not use this field
++ USHORT Duration;
++} MEASUREMENT_REQUEST, *PMEASUREMENT_REQUEST;
++
++// Beacon Measurement Report
++// All these field might change to UCHAR, because we didn't do anything to these report.
++// We copy all these beacons and report to CCX 2 AP.
++typedef struct _BEACON_REPORT {
++ UCHAR Channel;
++ UCHAR Spare;
++ USHORT Duration;
++ UCHAR PhyType; // Definiation is listed above table 36-9
++ UCHAR RxPower;
++ UCHAR BSSID[6];
++ UCHAR ParentTSF[4];
++ UCHAR TargetTSF[8];
++ USHORT BeaconInterval;
++ USHORT CapabilityInfo;
++} BEACON_REPORT, *PBEACON_REPORT;
++
++// Frame Measurement Report (Optional)
++typedef struct _FRAME_REPORT {
++ UCHAR Channel;
++ UCHAR Spare;
++ USHORT Duration;
++ UCHAR TA;
++ UCHAR BSSID[6];
++ UCHAR RSSI;
++ UCHAR Count;
++} FRAME_REPORT, *PFRAME_REPORT;
++
++#pragma pack(1)
++// Channel Load Report
++typedef struct _CHANNEL_LOAD_REPORT {
++ UCHAR Channel;
++ UCHAR Spare;
++ USHORT Duration;
++ UCHAR CCABusy;
++} CHANNEL_LOAD_REPORT, *PCHANNEL_LOAD_REPORT;
++#pragma pack()
++
++// Nosie Histogram Report
++typedef struct _NOISE_HIST_REPORT {
++ UCHAR Channel;
++ UCHAR Spare;
++ USHORT Duration;
++ UCHAR Density[8];
++} NOISE_HIST_REPORT, *PNOISE_HIST_REPORT;
++
++// Radio Management Capability element
++typedef struct _RADIO_MANAGEMENT_CAPABILITY {
++ UCHAR Eid; // TODO: Why the Eid is 1 byte, not normal 2 bytes???
++ UCHAR Length;
++ UCHAR AironetOui[3]; // AIronet OUI (00 40 96)
++ UCHAR Type; // Type / Version
++ USHORT Status; // swap16 required
++} RADIO_MANAGEMENT_CAPABILITY, *PRADIO_MANAGEMENT_CAPABILITY;
++
++// Measurement Mode Bit definition
++typedef struct _MEASUREMENT_MODE {
++ UCHAR Rsvd:4;
++ UCHAR Report:1;
++ UCHAR NotUsed:1;
++ UCHAR Enable:1;
++ UCHAR Parallel:1;
++} MEASUREMENT_MODE, *PMEASUREMENT_MODE;
++
++// Measurement Request element, This is little endian mode
++typedef struct _MEASUREMENT_REQUEST_ELEMENT {
++ USHORT Eid;
++ USHORT Length; // swap16 required
++ USHORT Token; // non-zero unique token
++ UCHAR Mode; // Measurement Mode
++ UCHAR Type; // Measurement type
++} MEASUREMENT_REQUEST_ELEMENT, *PMEASUREMENT_REQUEST_ELEMENT;
++
++// Measurement Report element, This is little endian mode
++typedef struct _MEASUREMENT_REPORT_ELEMENT {
++ USHORT Eid;
++ USHORT Length; // swap16 required
++ USHORT Token; // non-zero unique token
++ UCHAR Mode; // Measurement Mode
++ UCHAR Type; // Measurement type
++} MEASUREMENT_REPORT_ELEMENT, *PMEASUREMENT_REPORT_ELEMENT;
++
++// Cisco Aironet IAPP Frame Header, Network byte order used
++typedef struct _AIRONET_IAPP_HEADER {
++ UCHAR CiscoSnapHeader[8]; // 8 bytes Cisco snap header
++ USHORT Length; // IAPP ID & length, remember to swap16 in LE system
++ UCHAR Type; // IAPP type
++ UCHAR SubType; // IAPP subtype
++ UCHAR DA[6]; // Destination MAC address
++ UCHAR SA[6]; // Source MAC address
++ USHORT Token; // Dialog token, no need to swap16 since it is for yoken usage only
++} AIRONET_IAPP_HEADER, *PAIRONET_IAPP_HEADER;
++
++// Radio Measurement Request frame
++typedef struct _AIRONET_RM_REQUEST_FRAME {
++ AIRONET_IAPP_HEADER IAPP; // Common header
++ UCHAR Delay; // Activation Delay
++ UCHAR Offset; // Measurement offset
++} AIRONET_RM_REQUEST_FRAME, *PAIRONET_RM_REQUEST_FRAME;
++
++// Radio Measurement Report frame
++typedef struct _AIRONET_RM_REPORT_FRAME {
++ AIRONET_IAPP_HEADER IAPP; // Common header
++} AIRONET_RM_REPORT_FRAME, *PAIRONET_RM_REPORT_FRAME;
++
++// Saved element request actions which will saved in StaCfg.
++typedef struct _RM_REQUEST_ACTION {
++ MEASUREMENT_REQUEST_ELEMENT ReqElem; // Saved request element
++ MEASUREMENT_REQUEST Measurement; // Saved measurement within the request element
++} RM_REQUEST_ACTION, *PRM_REQUEST_ACTION;
++
++// CCX administration control
++typedef union _CCX_CONTROL {
++ struct {
++ UINT32 Enable:1; // Enable CCX2
++ UINT32 LeapEnable:1; // Enable LEAP at CCX2
++ UINT32 RMEnable:1; // Radio Measurement Enable
++ UINT32 DCRMEnable:1; // Non serving channel Radio Measurement enable
++ UINT32 QOSEnable:1; // Enable QOS for CCX 2.0 support
++ UINT32 FastRoamEnable:1; // Enable fast roaming
++ UINT32 Rsvd:2; // Not used
++ UINT32 dBmToRoam:8; // the condition to roam when receiving Rssi less than this value. It's negative value.
++ UINT32 TuLimit:16; // Limit for different channel scan
++ } field;
++ UINT32 word;
++} CCX_CONTROL, *PCCX_CONTROL;
++
++#endif // __AIRONET_H__
+--- /dev/null
++++ b/drivers/staging/rt2870/ap.h
+@@ -0,0 +1,562 @@
++/*
++ *************************************************************************
++ * Ralink Tech Inc.
++ * 5F., No.36, Taiyuan St., Jhubei City,
++ * Hsinchu County 302,
++ * Taiwan, R.O.C.
++ *
++ * (c) Copyright 2002-2007, Ralink Technology, Inc.
++ *
++ * This program is free software; you can redistribute it and/or modify *
++ * it under the terms of the GNU General Public License as published by *
++ * the Free Software Foundation; either version 2 of the License, or *
++ * (at your option) any later version. *
++ * *
++ * This program is distributed in the hope that it will be useful, *
++ * but WITHOUT ANY WARRANTY; without even the implied warranty of *
++ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the *
++ * GNU General Public License for more details. *
++ * *
++ * You should have received a copy of the GNU General Public License *
++ * along with this program; if not, write to the *
++ * Free Software Foundation, Inc., *
++ * 59 Temple Place - Suite 330, Boston, MA 02111-1307, USA. *
++ * *
++ *************************************************************************
++
++ Module Name:
++ ap.h
++
++ Abstract:
++ Miniport generic portion header file
++
++ Revision History:
++ Who When What
++ -------- ---------- ----------------------------------------------
++ Paul Lin 08-01-2002 created
++ James Tan 09-06-2002 modified (Revise NTCRegTable)
++ John Chang 12-22-2004 modified for RT2561/2661. merge with STA driver
++*/
++#ifndef __AP_H__
++#define __AP_H__
++
++
++
++// ========================= AP RTMP.h ================================
++
++
++
++// =============================================================
++// Function Prototypes
++// =============================================================
++
++// ap_data.c
++
++BOOLEAN APBridgeToWirelessSta(
++ IN PRTMP_ADAPTER pAd,
++ IN PUCHAR pHeader,
++ IN UINT HdrLen,
++ IN PUCHAR pData,
++ IN UINT DataLen,
++ IN ULONG fromwdsidx);
++
++BOOLEAN APHandleRxDoneInterrupt(
++ IN PRTMP_ADAPTER pAd);
++
++VOID APSendPackets(
++ IN NDIS_HANDLE MiniportAdapterContext,
++ IN PPNDIS_PACKET ppPacketArray,
++ IN UINT NumberOfPackets);
++
++NDIS_STATUS APSendPacket(
++ IN PRTMP_ADAPTER pAd,
++ IN PNDIS_PACKET pPacket);
++
++
++NDIS_STATUS APHardTransmit(
++ IN PRTMP_ADAPTER pAd,
++ IN TX_BLK *pTxBlk,
++ IN UCHAR QueIdx);
++
++VOID APRxEAPOLFrameIndicate(
++ IN PRTMP_ADAPTER pAd,
++ IN MAC_TABLE_ENTRY *pEntry,
++ IN RX_BLK *pRxBlk,
++ IN UCHAR FromWhichBSSID);
++
++NDIS_STATUS APCheckRxError(
++ IN PRTMP_ADAPTER pAd,
++ IN PRT28XX_RXD_STRUC pRxD,
++ IN UCHAR Wcid);
++
++BOOLEAN APCheckClass2Class3Error(
++ IN PRTMP_ADAPTER pAd,
++ IN ULONG Wcid,
++ IN PHEADER_802_11 pHeader);
++
++VOID APHandleRxPsPoll(
++ IN PRTMP_ADAPTER pAd,
++ IN PUCHAR pAddr,
++ IN USHORT Aid,
++ IN BOOLEAN isActive);
++
++VOID RTMPDescriptorEndianChange(
++ IN PUCHAR pData,
++ IN ULONG DescriptorType);
++
++VOID RTMPFrameEndianChange(
++ IN PRTMP_ADAPTER pAd,
++ IN PUCHAR pData,
++ IN ULONG Dir,
++ IN BOOLEAN FromRxDoneInt);
++
++// ap_assoc.c
++
++VOID APAssocStateMachineInit(
++ IN PRTMP_ADAPTER pAd,
++ IN STATE_MACHINE *S,
++ OUT STATE_MACHINE_FUNC Trans[]);
++
++VOID APPeerAssocReqAction(
++ IN PRTMP_ADAPTER pAd,
++ IN MLME_QUEUE_ELEM *Elem);
++
++VOID APPeerReassocReqAction(
++ IN PRTMP_ADAPTER pAd,
++ IN MLME_QUEUE_ELEM *Elem);
++
++VOID APPeerDisassocReqAction(
++ IN PRTMP_ADAPTER pAd,
++ IN MLME_QUEUE_ELEM *Elem);
++
++VOID MbssKickOutStas(
++ IN PRTMP_ADAPTER pAd,
++ IN INT apidx,
++ IN USHORT Reason);
++
++VOID APMlmeKickOutSta(
++ IN PRTMP_ADAPTER pAd,
++ IN PUCHAR pStaAddr,
++ IN UCHAR Wcid,
++ IN USHORT Reason);
++
++VOID APMlmeDisassocReqAction(
++ IN PRTMP_ADAPTER pAd,
++ IN MLME_QUEUE_ELEM *Elem);
++
++VOID APCls3errAction(
++ IN PRTMP_ADAPTER pAd,
++ IN ULONG Wcid,
++ IN PHEADER_802_11 pHeader);
++
++
++USHORT APBuildAssociation(
++ IN PRTMP_ADAPTER pAd,
++ IN MAC_TABLE_ENTRY *pEntry,
++ IN USHORT CapabilityInfo,
++ IN UCHAR MaxSupportedRateIn500Kbps,
++ IN UCHAR *RSN,
++ IN UCHAR *pRSNLen,
++ IN BOOLEAN bWmmCapable,
++ IN ULONG RalinkIe,
++#ifdef DOT11N_DRAFT3
++ IN EXT_CAP_INFO_ELEMENT ExtCapInfo,
++#endif // DOT11N_DRAFT3 //
++ IN HT_CAPABILITY_IE *pHtCapability,
++ IN UCHAR HtCapabilityLen,
++ OUT USHORT *pAid);
++
++/*
++VOID RTMPAddClientSec(
++ IN PRTMP_ADAPTER pAd,
++ IN UCHAR BssIdx,
++ IN UCHAR KeyIdx,
++ IN UCHAR CipherAlg,
++ IN PUCHAR pKey,
++ IN PUCHAR pTxMic,
++ IN PUCHAR pRxMic,
++ IN MAC_TABLE_ENTRY *pEntry);
++*/
++
++// ap_auth.c
++
++void APAuthStateMachineInit(
++ IN PRTMP_ADAPTER pAd,
++ IN STATE_MACHINE *Sm,
++ OUT STATE_MACHINE_FUNC Trans[]);
++
++VOID APMlmeDeauthReqAction(
++ IN PRTMP_ADAPTER pAd,
++ IN MLME_QUEUE_ELEM *Elem);
++
++VOID APCls2errAction(
++ IN PRTMP_ADAPTER pAd,
++ IN ULONG Wcid,
++ IN PHEADER_802_11 pHeader);
++
++// ap_authrsp.c
++
++VOID APAuthRspStateMachineInit(
++ IN PRTMP_ADAPTER pAd,
++ IN PSTATE_MACHINE Sm,
++ IN STATE_MACHINE_FUNC Trans[]);
++
++VOID APPeerAuthAtAuthRspIdleAction(
++ IN PRTMP_ADAPTER pAd,
++ IN MLME_QUEUE_ELEM *Elem);
++
++VOID APPeerDeauthReqAction(
++ IN PRTMP_ADAPTER pAd,
++ IN MLME_QUEUE_ELEM *Elem);
++
++VOID APPeerAuthSimpleRspGenAndSend(
++ IN PRTMP_ADAPTER pAd,
++ IN PHEADER_802_11 pHdr80211,
++ IN USHORT Alg,
++ IN USHORT Seq,
++ IN USHORT StatusCode);
++
++// ap_connect.c
++
++BOOLEAN BeaconTransmitRequired(
++ IN PRTMP_ADAPTER pAd,
++ IN INT apidx);
++
++VOID APMakeBssBeacon(
++ IN PRTMP_ADAPTER pAd,
++ IN INT apidx);
++
++VOID APUpdateBeaconFrame(
++ IN PRTMP_ADAPTER pAd,
++ IN INT apidx);
++
++VOID APMakeAllBssBeacon(
++ IN PRTMP_ADAPTER pAd);
++
++VOID APUpdateAllBeaconFrame(
++ IN PRTMP_ADAPTER pAd);
++
++
++// ap_sync.c
++
++VOID APSyncStateMachineInit(
++ IN PRTMP_ADAPTER pAd,
++ IN STATE_MACHINE *Sm,
++ OUT STATE_MACHINE_FUNC Trans[]);
++
++VOID APScanTimeout(
++ IN PVOID SystemSpecific1,
++ IN PVOID FunctionContext,
++ IN PVOID SystemSpecific2,
++ IN PVOID SystemSpecific3);
++
++VOID APInvalidStateWhenScan(
++ IN PRTMP_ADAPTER pAd,
++ IN MLME_QUEUE_ELEM *Elem);
++
++VOID APScanTimeoutAction(
++ IN PRTMP_ADAPTER pAd,
++ IN MLME_QUEUE_ELEM *Elem);
++
++VOID APPeerProbeReqAction(
++ IN PRTMP_ADAPTER pAd,
++ IN MLME_QUEUE_ELEM *Elem);
++
++VOID APPeerBeaconAction(
++ IN PRTMP_ADAPTER pAd,
++ IN MLME_QUEUE_ELEM *Elem);
++
++VOID APMlmeScanReqAction(
++ IN PRTMP_ADAPTER pAd,
++ IN MLME_QUEUE_ELEM *Elem);
++
++VOID APPeerBeaconAtScanAction(
++ IN PRTMP_ADAPTER pAd,
++ IN MLME_QUEUE_ELEM *Elem);
++
++VOID APScanCnclAction(
++ IN PRTMP_ADAPTER pAd,
++ IN MLME_QUEUE_ELEM *Elem);
++
++VOID ApSiteSurvey(
++ IN PRTMP_ADAPTER pAd);
++
++VOID SupportRate(
++ IN PUCHAR SupRate,
++ IN UCHAR SupRateLen,
++ IN PUCHAR ExtRate,
++ IN UCHAR ExtRateLen,
++ OUT PUCHAR *Rates,
++ OUT PUCHAR RatesLen,
++ OUT PUCHAR pMaxSupportRate);
++
++
++BOOLEAN ApScanRunning(
++ IN PRTMP_ADAPTER pAd);
++
++#ifdef DOT11N_DRAFT3
++VOID APOverlappingBSSScan(
++ IN RTMP_ADAPTER *pAd);
++#endif // DOT11N_DRAFT3 //
++
++// ap_wpa.c
++
++VOID APWpaStateMachineInit(
++ IN PRTMP_ADAPTER pAd,
++ IN STATE_MACHINE *Sm,
++ OUT STATE_MACHINE_FUNC Trans[]);
++
++// ap_mlme.c
++
++VOID APMlmePeriodicExec(
++ IN PRTMP_ADAPTER pAd);
++
++VOID APMlmeSelectTxRateTable(
++ IN PRTMP_ADAPTER pAd,
++ IN PMAC_TABLE_ENTRY pEntry,
++ IN PUCHAR *ppTable,
++ IN PUCHAR pTableSize,
++ IN PUCHAR pInitTxRateIdx);
++
++VOID APMlmeSetTxRate(
++ IN PRTMP_ADAPTER pAd,
++ IN PMAC_TABLE_ENTRY pEntry,
++ IN PRTMP_TX_RATE_SWITCH pTxRate);
++
++VOID APMlmeDynamicTxRateSwitching(
++ IN PRTMP_ADAPTER pAd);
++
++VOID APQuickResponeForRateUpExec(
++ IN PVOID SystemSpecific1,
++ IN PVOID FunctionContext,
++ IN PVOID SystemSpecific2,
++ IN PVOID SystemSpecific3);
++
++BOOLEAN APMsgTypeSubst(
++ IN PRTMP_ADAPTER pAd,
++ IN PFRAME_802_11 pFrame,
++ OUT INT *Machine,
++ OUT INT *MsgType);
++
++VOID APQuickResponeForRateUpExec(
++ IN PVOID SystemSpecific1,
++ IN PVOID FunctionContext,
++ IN PVOID SystemSpecific2,
++ IN PVOID SystemSpecific3);
++
++#ifdef RT2870
++VOID BeaconUpdateExec(
++ IN PVOID SystemSpecific1,
++ IN PVOID FunctionContext,
++ IN PVOID SystemSpecific2,
++ IN PVOID SystemSpecific3);
++#endif // RT2870 //
++
++VOID RTMPSetPiggyBack(
++ IN PRTMP_ADAPTER pAd,
++ IN BOOLEAN bPiggyBack);
++
++VOID APAsicEvaluateRxAnt(
++ IN PRTMP_ADAPTER pAd);
++
++VOID APAsicRxAntEvalTimeout(
++ IN PRTMP_ADAPTER pAd);
++
++// ap.c
++
++VOID APSwitchChannel(
++ IN PRTMP_ADAPTER pAd,
++ IN INT Channel);
++
++NDIS_STATUS APInitialize(
++ IN PRTMP_ADAPTER pAd);
++
++VOID APShutdown(
++ IN PRTMP_ADAPTER pAd);
++
++VOID APStartUp(
++ IN PRTMP_ADAPTER pAd);
++
++VOID APStop(
++ IN PRTMP_ADAPTER pAd);
++
++VOID APCleanupPsQueue(
++ IN PRTMP_ADAPTER pAd,
++ IN PQUEUE_HEADER pQueue);
++
++VOID MacTableReset(
++ IN PRTMP_ADAPTER pAd);
++
++MAC_TABLE_ENTRY *MacTableInsertEntry(
++ IN PRTMP_ADAPTER pAd,
++ IN PUCHAR pAddr,
++ IN UCHAR apidx,
++ IN BOOLEAN CleanAll);
++
++BOOLEAN MacTableDeleteEntry(
++ IN PRTMP_ADAPTER pAd,
++ IN USHORT wcid,
++ IN PUCHAR pAddr);
++
++MAC_TABLE_ENTRY *MacTableLookup(
++ IN PRTMP_ADAPTER pAd,
++ IN PUCHAR pAddr);
++
++VOID MacTableMaintenance(
++ IN PRTMP_ADAPTER pAd);
++
++UINT32 MacTableAssocStaNumGet(
++ IN PRTMP_ADAPTER pAd);
++
++MAC_TABLE_ENTRY *APSsPsInquiry(
++ IN PRTMP_ADAPTER pAd,
++ IN PUCHAR pAddr,
++ OUT SST *Sst,
++ OUT USHORT *Aid,
++ OUT UCHAR *PsMode,
++ OUT UCHAR *Rate);
++
++BOOLEAN APPsIndicate(
++ IN PRTMP_ADAPTER pAd,
++ IN PUCHAR pAddr,
++ IN ULONG Wcid,
++ IN UCHAR Psm);
++
++VOID ApLogEvent(
++ IN PRTMP_ADAPTER pAd,
++ IN PUCHAR pAddr,
++ IN USHORT Event);
++
++#ifdef DOT11_N_SUPPORT
++VOID APUpdateOperationMode(
++ IN PRTMP_ADAPTER pAd);
++#endif // DOT11_N_SUPPORT //
++
++VOID APUpdateCapabilityAndErpIe(
++ IN PRTMP_ADAPTER pAd);
++
++BOOLEAN ApCheckAccessControlList(
++ IN PRTMP_ADAPTER pAd,
++ IN PUCHAR pAddr,
++ IN UCHAR Apidx);
++
++VOID ApUpdateAccessControlList(
++ IN PRTMP_ADAPTER pAd,
++ IN UCHAR Apidx);
++
++VOID ApEnqueueNullFrame(
++ IN PRTMP_ADAPTER pAd,
++ IN PUCHAR pAddr,
++ IN UCHAR TxRate,
++ IN UCHAR PID,
++ IN UCHAR apidx,
++ IN BOOLEAN bQosNull,
++ IN BOOLEAN bEOSP,
++ IN UCHAR OldUP);
++
++VOID ApSendFrame(
++ IN PRTMP_ADAPTER pAd,
++ IN PVOID pBuffer,
++ IN ULONG Length,
++ IN UCHAR TxRate,
++ IN UCHAR PID);
++
++VOID ApEnqueueAckFrame(
++ IN PRTMP_ADAPTER pAd,
++ IN PUCHAR pAddr,
++ IN UCHAR TxRate,
++ IN UCHAR apidx);
++
++UCHAR APAutoSelectChannel(
++ IN PRTMP_ADAPTER pAd,
++ IN BOOLEAN Optimal);
++
++// ap_sanity.c
++
++
++BOOLEAN PeerAssocReqCmmSanity(
++ IN PRTMP_ADAPTER pAd,
++ IN BOOLEAN isRessoc,
++ IN VOID *Msg,
++ IN ULONG MsgLen,
++ OUT PUCHAR pAddr2,
++ OUT USHORT *pCapabilityInfo,
++ OUT USHORT *pListenInterval,
++ OUT PUCHAR pApAddr,
++ OUT UCHAR *pSsidLen,
++ OUT char *Ssid,
++ OUT UCHAR *pRatesLen,
++ OUT UCHAR Rates[],
++ OUT UCHAR *RSN,
++ OUT UCHAR *pRSNLen,
++ OUT BOOLEAN *pbWmmCapable,
++#ifdef WSC_AP_SUPPORT
++ OUT BOOLEAN *pWscCapable,
++#endif // WSC_AP_SUPPORT //
++ OUT ULONG *pRalinkIe,
++#ifdef DOT11N_DRAFT3
++ OUT EXT_CAP_INFO_ELEMENT *pExtCapInfo,
++#endif // DOT11N_DRAFT3 //
++ OUT UCHAR *pHtCapabilityLen,
++ OUT HT_CAPABILITY_IE *pHtCapability);
++
++BOOLEAN PeerDisassocReqSanity(
++ IN PRTMP_ADAPTER pAd,
++ IN VOID *Msg,
++ IN ULONG MsgLen,
++ OUT PUCHAR pAddr2,
++ OUT USHORT *Reason);
++
++BOOLEAN PeerDeauthReqSanity(
++ IN PRTMP_ADAPTER pAd,
++ IN VOID *Msg,
++ IN ULONG MsgLen,
++ OUT PUCHAR pAddr2,
++ OUT USHORT *Reason);
++
++BOOLEAN APPeerAuthSanity(
++ IN PRTMP_ADAPTER pAd,
++ IN VOID *Msg,
++ IN ULONG MsgLen,
++ OUT PUCHAR pAddr1,
++ OUT PUCHAR pAddr2,
++ OUT USHORT *Alg,
++ OUT USHORT *Seq,
++ OUT USHORT *Status,
++ CHAR *ChlgText);
++
++BOOLEAN APPeerProbeReqSanity(
++ IN PRTMP_ADAPTER pAd,
++ IN VOID *Msg,
++ IN ULONG MsgLen,
++ OUT PUCHAR pAddr2,
++ OUT CHAR Ssid[],
++ OUT UCHAR *SsidLen);
++
++BOOLEAN APPeerBeaconAndProbeRspSanity(
++ IN PRTMP_ADAPTER pAd,
++ IN VOID *Msg,
++ IN ULONG MsgLen,
++ OUT PUCHAR pAddr2,
++ OUT PUCHAR pBssid,
++ OUT CHAR Ssid[],
++ OUT UCHAR *SsidLen,
++ OUT UCHAR *BssType,
++ OUT USHORT *BeaconPeriod,
++ OUT UCHAR *Channel,
++ OUT LARGE_INTEGER *Timestamp,
++ OUT USHORT *CapabilityInfo,
++ OUT UCHAR Rate[],
++ OUT UCHAR *RateLen,
++ OUT BOOLEAN *ExtendedRateIeExist,
++ OUT UCHAR *Erp);
++
++// ap_info.c
++
++
++
++// ================== end of AP RTMP.h ========================
++
++
++#endif // __AP_H__
++
+--- /dev/null
++++ b/drivers/staging/rt2870/chlist.h
+@@ -0,0 +1,1296 @@
++/*
++ *************************************************************************
++ * Ralink Tech Inc.
++ * 5F., No.36, Taiyuan St., Jhubei City,
++ * Hsinchu County 302,
++ * Taiwan, R.O.C.
++ *
++ * (c) Copyright 2002-2007, Ralink Technology, Inc.
++ *
++ * This program is free software; you can redistribute it and/or modify *
++ * it under the terms of the GNU General Public License as published by *
++ * the Free Software Foundation; either version 2 of the License, or *
++ * (at your option) any later version. *
++ * *
++ * This program is distributed in the hope that it will be useful, *
++ * but WITHOUT ANY WARRANTY; without even the implied warranty of *
++ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the *
++ * GNU General Public License for more details. *
++ * *
++ * You should have received a copy of the GNU General Public License *
++ * along with this program; if not, write to the *
++ * Free Software Foundation, Inc., *
++ * 59 Temple Place - Suite 330, Boston, MA 02111-1307, USA. *
++ * *
++ *************************************************************************
++
++ Module Name:
++ chlist.c
++
++ Abstract:
++
++ Revision History:
++ Who When What
++ -------- ---------- ----------------------------------------------
++ Fonchi Wu 2007-12-19 created
++*/
++
++#ifndef __CHLIST_H__
++#define __CHLIST_H__
++
++#include "rtmp_type.h"
++#include "rtmp_def.h"
++
++
++#define ODOR 0
++#define IDOR 1
++#define BOTH 2
++
++#define BAND_5G 0
++#define BAND_24G 1
++#define BAND_BOTH 2
++
++typedef struct _CH_DESP {
++ UCHAR FirstChannel;
++ UCHAR NumOfCh;
++ CHAR MaxTxPwr; // dBm
++ UCHAR Geography; // 0:out door, 1:in door, 2:both
++ BOOLEAN DfsReq; // Dfs require, 0: No, 1: yes.
++} CH_DESP, *PCH_DESP;
++
++typedef struct _CH_REGION {
++ UCHAR CountReg[3];
++ UCHAR DfsType; // 0: CE, 1: FCC, 2: JAP, 3:JAP_W53, JAP_W56
++ CH_DESP ChDesp[10];
++} CH_REGION, *PCH_REGION;
++
++static CH_REGION ChRegion[] =
++{
++ { // Antigua and Berbuda
++ "AG",
++ CE,
++ {
++ { 1, 13, 20, BOTH, FALSE}, // 2.4 G, ch 1~13
++ { 36, 4, 23, BOTH, FALSE}, // 5G, ch 36~48
++ { 52, 4, 23, BOTH, FALSE}, // 5G, ch 52~64
++ { 100, 11, 30, BOTH, FALSE}, // 5G, ch 100~140
++ { 0}, // end
++ }
++ },
++
++ { // Argentina
++ "AR",
++ CE,
++ {
++ { 1, 13, 20, BOTH, FALSE}, // 2.4 G, ch 1~13
++ { 52, 4, 24, BOTH, FALSE}, // 5G, ch 52~64
++ { 149, 4, 30, BOTH, FALSE}, // 5G, ch 149~161
++ { 0}, // end
++ }
++ },
++
++ { // Aruba
++ "AW",
++ CE,
++ {
++ { 1, 13, 20, BOTH, FALSE}, // 2.4 G, ch 1~13
++ { 36, 4, 23, BOTH, FALSE}, // 5G, ch 36~48
++ { 52, 4, 23, BOTH, FALSE}, // 5G, ch 52~64
++ { 100, 11, 30, BOTH, FALSE}, // 5G, ch 100~140
++ { 0}, // end
++ }
++ },
++
++ { // Australia
++ "AU",
++ CE,
++ {
++ { 1, 13, 20, BOTH, FALSE}, // 2.4 G, ch 1~13
++ { 36, 4, 23, BOTH, FALSE}, // 5G, ch 36~48
++ { 52, 4, 24, BOTH, FALSE}, // 5G, ch 52~64
++ { 149, 5, 30, BOTH, FALSE}, // 5G, ch 149~165
++ { 0}, // end
++ }
++ },
++
++ { // Austria
++ "AT",
++ CE,
++ {
++ { 1, 13, 20, BOTH, FALSE}, // 2.4 G, ch 1~13
++ { 36, 4, 23, IDOR, TRUE}, // 5G, ch 36~48
++ { 52, 4, 23, IDOR, TRUE}, // 5G, ch 52~64
++ { 100, 11, 30, BOTH, TRUE}, // 5G, ch 100~140
++ { 0}, // end
++ }
++ },
++
++ { // Bahamas
++ "BS",
++ CE,
++ {
++ { 1, 13, 20, BOTH, FALSE}, // 2.4 G, ch 1~13
++ { 36, 4, 23, BOTH, FALSE}, // 5G, ch 36~48
++ { 52, 4, 24, BOTH, FALSE}, // 5G, ch 52~64
++ { 149, 5, 30, BOTH, FALSE}, // 5G, ch 149~165
++ { 0}, // end
++ }
++ },
++
++ { // Barbados
++ "BB",
++ CE,
++ {
++ { 1, 13, 20, BOTH, FALSE}, // 2.4 G, ch 1~13
++ { 36, 4, 23, BOTH, FALSE}, // 5G, ch 36~48
++ { 52, 4, 24, BOTH, FALSE}, // 5G, ch 52~64
++ { 100, 11, 30, BOTH, FALSE}, // 5G, ch 100~140
++ { 0}, // end
++ }
++ },
++
++ { // Bermuda
++ "BM",
++ CE,
++ {
++ { 1, 13, 20, BOTH, FALSE}, // 2.4 G, ch 1~13
++ { 36, 4, 23, BOTH, FALSE}, // 5G, ch 36~48
++ { 52, 4, 24, BOTH, FALSE}, // 5G, ch 52~64
++ { 100, 11, 30, BOTH, FALSE}, // 5G, ch 100~140
++ { 0}, // end
++ }
++ },
++
++ { // Brazil
++ "BR",
++ CE,
++ {
++ { 1, 13, 20, BOTH, FALSE}, // 2.4 G, ch 1~13
++ { 36, 4, 23, BOTH, FALSE}, // 5G, ch 36~48
++ { 52, 4, 24, BOTH, FALSE}, // 5G, ch 52~64
++ { 100, 11, 24, BOTH, FALSE}, // 5G, ch 100~140
++ { 149, 5, 30, BOTH, FALSE}, // 5G, ch 100~140
++ { 0}, // end
++ }
++ },
++
++ { // Belgium
++ "BE",
++ CE,
++ {
++ { 1, 13, 20, BOTH, FALSE}, // 2.4 G, ch 1~13
++ { 36, 4, 18, IDOR, FALSE}, // 5G, ch 36~48
++ { 52, 4, 18, IDOR, FALSE}, // 5G, ch 52~64
++ { 0}, // end
++ }
++ },
++
++ { // Bulgaria
++ "BG",
++ CE,
++ {
++ { 1, 13, 20, BOTH, FALSE}, // 2.4 G, ch 1~13
++ { 36, 4, 23, IDOR, FALSE}, // 5G, ch 36~48
++ { 52, 4, 23, IDOR, TRUE}, // 5G, ch 52~64
++ { 100, 11, 30, ODOR, TRUE}, // 5G, ch 100~140
++ { 0}, // end
++ }
++ },
++
++ { // Canada
++ "CA",
++ CE,
++ {
++ { 1, 13, 20, BOTH, FALSE}, // 2.4 G, ch 1~13
++ { 36, 4, 23, BOTH, FALSE}, // 5G, ch 36~48
++ { 52, 4, 23, BOTH, FALSE}, // 5G, ch 52~64
++ { 149, 5, 30, BOTH, FALSE}, // 5G, ch 149~165
++ { 0}, // end
++ }
++ },
++
++ { // Cayman IsLands
++ "KY",
++ CE,
++ {
++ { 1, 13, 20, BOTH, FALSE}, // 2.4 G, ch 1~13
++ { 36, 4, 23, BOTH, FALSE}, // 5G, ch 36~48
++ { 52, 4, 24, BOTH, FALSE}, // 5G, ch 52~64
++ { 100, 11, 30, BOTH, FALSE}, // 5G, ch 100~140
++ { 0}, // end
++ }
++ },
++
++ { // Chile
++ "CL",
++ CE,
++ {
++ { 1, 13, 20, BOTH, FALSE}, // 2.4 G, ch 1~13
++ { 36, 4, 20, BOTH, FALSE}, // 5G, ch 36~48
++ { 52, 4, 20, BOTH, FALSE}, // 5G, ch 52~64
++ { 149, 5, 20, BOTH, FALSE}, // 5G, ch 149~165
++ { 0}, // end
++ }
++ },
++
++ { // China
++ "CN",
++ CE,
++ {
++ { 1, 13, 20, BOTH, FALSE}, // 2.4 G, ch 1~13
++ { 149, 4, 27, BOTH, FALSE}, // 5G, ch 149~161
++ { 0}, // end
++ }
++ },
++
++ { // Colombia
++ "CO",
++ CE,
++ {
++ { 1, 13, 20, BOTH, FALSE}, // 2.4 G, ch 1~13
++ { 36, 4, 17, BOTH, FALSE}, // 5G, ch 36~48
++ { 52, 4, 24, BOTH, FALSE}, // 5G, ch 52~64
++ { 100, 11, 30, BOTH, FALSE}, // 5G, ch 100~140
++ { 149, 5, 30, BOTH, FALSE}, // 5G, ch 149~165
++ { 0}, // end
++ }
++ },
++
++ { // Costa Rica
++ "CR",
++ CE,
++ {
++ { 1, 13, 20, BOTH, FALSE}, // 2.4 G, ch 1~13
++ { 36, 4, 17, BOTH, FALSE}, // 5G, ch 36~48
++ { 52, 4, 24, BOTH, FALSE}, // 5G, ch 52~64
++ { 149, 4, 30, BOTH, FALSE}, // 5G, ch 149~161
++ { 0}, // end
++ }
++ },
++
++ { // Cyprus
++ "CY",
++ CE,
++ {
++ { 1, 13, 20, BOTH, FALSE}, // 2.4 G, ch 1~13
++ { 36, 4, 23, IDOR, FALSE}, // 5G, ch 36~48
++ { 52, 4, 24, IDOR, TRUE}, // 5G, ch 52~64
++ { 100, 11, 30, BOTH, TRUE}, // 5G, ch 100~140
++ { 0}, // end
++ }
++ },
++
++ { // Czech_Republic
++ "CZ",
++ CE,
++ {
++ { 1, 13, 20, BOTH, FALSE}, // 2.4 G, ch 1~13
++ { 36, 4, 23, IDOR, FALSE}, // 5G, ch 36~48
++ { 52, 4, 23, IDOR, TRUE}, // 5G, ch 52~64
++ { 0}, // end
++ }
++ },
++
++ { // Denmark
++ "DK",
++ CE,
++ {
++ { 1, 13, 20, BOTH, FALSE}, // 2.4 G, ch 1~13
++ { 36, 4, 23, IDOR, FALSE}, // 5G, ch 36~48
++ { 52, 4, 23, IDOR, TRUE}, // 5G, ch 52~64
++ { 100, 11, 30, BOTH, TRUE}, // 5G, ch 100~140
++ { 0}, // end
++ }
++ },
++
++ { // Dominican Republic
++ "DO",
++ CE,
++ {
++ { 1, 0, 20, BOTH, FALSE}, // 2.4 G, ch 0
++ { 149, 4, 20, BOTH, FALSE}, // 5G, ch 149~161
++ { 0}, // end
++ }
++ },
++
++ { // Equador
++ "EC",
++ CE,
++ {
++ { 1, 13, 20, BOTH, FALSE}, // 2.4 G, ch 1~13
++ { 100, 11, 27, BOTH, FALSE}, // 5G, ch 100~140
++ { 0}, // end
++ }
++ },
++
++ { // El Salvador
++ "SV",
++ CE,
++ {
++ { 1, 13, 20, BOTH, FALSE}, // 2.4 G, ch 1~13
++ { 36, 4, 23, IDOR, FALSE}, // 5G, ch 36~48
++ { 52, 4, 30, BOTH, TRUE}, // 5G, ch 52~64
++ { 149, 4, 36, BOTH, TRUE}, // 5G, ch 149~165
++ { 0}, // end
++ }
++ },
++
++ { // Finland
++ "FI",
++ CE,
++ {
++ { 1, 13, 20, BOTH, FALSE}, // 2.4 G, ch 1~13
++ { 36, 4, 23, IDOR, FALSE}, // 5G, ch 36~48
++ { 52, 4, 23, IDOR, TRUE}, // 5G, ch 52~64
++ { 100, 11, 30, BOTH, TRUE}, // 5G, ch 100~140
++ { 0}, // end
++ }
++ },
++
++ { // France
++ "FR",
++ CE,
++ {
++ { 1, 13, 20, BOTH, FALSE}, // 2.4 G, ch 1~13
++ { 36, 4, 23, IDOR, FALSE}, // 5G, ch 36~48
++ { 52, 4, 23, IDOR, TRUE}, // 5G, ch 52~64
++ { 0}, // end
++ }
++ },
++
++ { // Germany
++ "DE",
++ CE,
++ {
++ { 1, 13, 20, BOTH, FALSE}, // 2.4 G, ch 1~13
++ { 36, 4, 23, IDOR, FALSE}, // 5G, ch 36~48
++ { 52, 4, 23, IDOR, TRUE}, // 5G, ch 52~64
++ { 100, 11, 30, BOTH, TRUE}, // 5G, ch 100~140
++ { 0}, // end
++ }
++ },
++
++ { // Greece
++ "GR",
++ CE,
++ {
++ { 1, 13, 20, BOTH, FALSE}, // 2.4 G, ch 1~13
++ { 36, 4, 23, IDOR, FALSE}, // 5G, ch 36~48
++ { 52, 4, 23, IDOR, TRUE}, // 5G, ch 52~64
++ { 100, 11, 30, ODOR, TRUE}, // 5G, ch 100~140
++ { 0}, // end
++ }
++ },
++
++ { // Guam
++ "GU",
++ CE,
++ {
++ { 1, 11, 20, BOTH, FALSE}, // 2.4 G, ch 1~11
++ { 36, 4, 17, BOTH, FALSE}, // 5G, ch 36~48
++ { 52, 4, 24, BOTH, FALSE}, // 5G, ch 52~64
++ { 100, 11, 30, BOTH, FALSE}, // 5G, ch 100~140
++ { 149, 5, 30, BOTH, FALSE}, // 5G, ch 149~165
++ { 0}, // end
++ }
++ },
++
++ { // Guatemala
++ "GT",
++ CE,
++ {
++ { 1, 13, 20, BOTH, FALSE}, // 2.4 G, ch 1~13
++ { 36, 4, 17, BOTH, FALSE}, // 5G, ch 36~48
++ { 52, 4, 24, BOTH, FALSE}, // 5G, ch 52~64
++ { 149, 4, 30, BOTH, FALSE}, // 5G, ch 149~161
++ { 0}, // end
++ }
++ },
++
++ { // Haiti
++ "HT",
++ CE,
++ {
++ { 1, 13, 20, BOTH, FALSE}, // 2.4 G, ch 1~13
++ { 36, 4, 17, BOTH, FALSE}, // 5G, ch 36~48
++ { 52, 4, 24, BOTH, FALSE}, // 5G, ch 52~64
++ { 149, 4, 30, BOTH, FALSE}, // 5G, ch 149~161
++ { 0}, // end
++ }
++ },
++
++ { // Honduras
++ "HN",
++ CE,
++ {
++ { 1, 13, 20, BOTH, FALSE}, // 2.4 G, ch 1~13
++ { 149, 4, 27, BOTH, FALSE}, // 5G, ch 149~161
++ { 0}, // end
++ }
++ },
++
++ { // Hong Kong
++ "HK",
++ CE,
++ {
++ { 1, 13, 20, BOTH, FALSE}, // 2.4 G, ch 1~13
++ { 36, 4, 23, IDOR, FALSE}, // 5G, ch 36~48
++ { 52, 4, 23, IDOR, FALSE}, // 5G, ch 52~64
++ { 149, 4, 30, BOTH, FALSE}, // 5G, ch 149~161
++ { 0}, // end
++ }
++ },
++
++ { // Hungary
++ "HU",
++ CE,
++ {
++ { 1, 13, 20, BOTH, FALSE}, // 2.4 G, ch 1~13
++ { 36, 4, 23, IDOR, FALSE}, // 5G, ch 36~48
++ { 52, 4, 23, IDOR, TRUE}, // 5G, ch 52~64
++ { 0}, // end
++ }
++ },
++
++ { // Iceland
++ "IS",
++ CE,
++ {
++ { 1, 13, 20, BOTH, FALSE}, // 2.4 G, ch 1~13
++ { 36, 4, 23, IDOR, FALSE}, // 5G, ch 36~48
++ { 52, 4, 23, IDOR, TRUE}, // 5G, ch 52~64
++ { 100, 11, 30, BOTH, TRUE}, // 5G, ch 100~140
++ { 0}, // end
++ }
++ },
++
++ { // India
++ "IN",
++ CE,
++ {
++ { 1, 13, 20, BOTH, FALSE}, // 2.4 G, ch 1~13
++ { 149, 4, 24, IDOR, FALSE}, // 5G, ch 149~161
++ { 0}, // end
++ }
++ },
++
++ { // Indonesia
++ "ID",
++ CE,
++ {
++ { 1, 13, 20, BOTH, FALSE}, // 2.4 G, ch 1~13
++ { 149, 4, 27, BOTH, FALSE}, // 5G, ch 149~161
++ { 0}, // end
++ }
++ },
++
++ { // Ireland
++ "IE",
++ CE,
++ {
++ { 1, 13, 20, BOTH, FALSE}, // 2.4 G, ch 1~13
++ { 36, 4, 23, IDOR, FALSE}, // 5G, ch 36~48
++ { 52, 4, 23, IDOR, TRUE}, // 5G, ch 52~64
++ { 100, 11, 30, ODOR, TRUE}, // 5G, ch 100~140
++ { 0}, // end
++ }
++ },
++
++ { // Israel
++ "IL",
++ CE,
++ {
++ { 1, 3, 20, IDOR, FALSE}, // 2.4 G, ch 1~3
++ { 4, 6, 20, BOTH, FALSE}, // 2.4 G, ch 4~9
++ { 10, 4, 20, IDOR, FALSE}, // 2.4 G, ch 10~13
++ { 0}, // end
++ }
++ },
++
++ { // Italy
++ "IT",
++ CE,
++ {
++ { 1, 13, 20, BOTH, FALSE}, // 2.4 G, ch 1~13
++ { 36, 4, 23, IDOR, FALSE}, // 5G, ch 36~48
++ { 52, 4, 23, IDOR, TRUE}, // 5G, ch 52~64
++ { 100, 11, 30, ODOR, TRUE}, // 5G, ch 100~140
++ { 0}, // end
++ }
++ },
++
++ { // Japan
++ "JP",
++ JAP,
++ {
++ { 1, 14, 20, BOTH, FALSE}, // 2.4 G, ch 1~14
++ { 36, 4, 23, IDOR, FALSE}, // 5G, ch 36~48
++ { 0}, // end
++ }
++ },
++
++ { // Jordan
++ "JO",
++ CE,
++ {
++ { 1, 13, 20, IDOR, FALSE}, // 2.4 G, ch 1~13
++ { 36, 4, 23, IDOR, FALSE}, // 5G, ch 36~48
++ { 149, 4, 23, IDOR, FALSE}, // 5G, ch 149~161
++ { 0}, // end
++ }
++ },
++
++ { // Latvia
++ "LV",
++ CE,
++ {
++ { 1, 13, 20, BOTH, FALSE}, // 2.4 G, ch 1~13
++ { 36, 4, 23, IDOR, FALSE}, // 5G, ch 36~48
++ { 52, 4, 23, IDOR, TRUE}, // 5G, ch 52~64
++ { 100, 11, 30, BOTH, TRUE}, // 5G, ch 100~140
++ { 0}, // end
++ }
++ },
++
++ { // Liechtenstein
++ "LI",
++ CE,
++ {
++ { 1, 13, 20, BOTH, FALSE}, // 2.4 G, ch 1~13
++ { 52, 4, 23, IDOR, TRUE}, // 5G, ch 52~64
++ { 100, 11, 30, BOTH, TRUE}, // 5G, ch 100~140
++ { 0}, // end
++ }
++ },
++
++ { // Lithuania
++ "LT",
++ CE,
++ {
++ { 1, 13, 20, BOTH, FALSE}, // 2.4 G, ch 1~13
++ { 36, 4, 23, IDOR, FALSE}, // 5G, ch 36~48
++ { 52, 4, 23, IDOR, TRUE}, // 5G, ch 52~64
++ { 100, 11, 30, BOTH, TRUE}, // 5G, ch 100~140
++ { 0}, // end
++ }
++ },
++
++ { // Luxemburg
++ "LU",
++ CE,
++ {
++ { 1, 13, 20, BOTH, FALSE}, // 2.4 G, ch 1~13
++ { 36, 4, 23, IDOR, FALSE}, // 5G, ch 36~48
++ { 52, 4, 23, IDOR, TRUE}, // 5G, ch 52~64
++ { 100, 11, 30, BOTH, TRUE}, // 5G, ch 100~140
++ { 0}, // end
++ }
++ },
++
++ { // Malaysia
++ "MY",
++ CE,
++ {
++ { 36, 4, 23, BOTH, FALSE}, // 5G, ch 36~48
++ { 52, 4, 23, BOTH, FALSE}, // 5G, ch 52~64
++ { 149, 5, 20, BOTH, FALSE}, // 5G, ch 149~165
++ { 0}, // end
++ }
++ },
++
++ { // Malta
++ "MT",
++ CE,
++ {
++ { 1, 13, 20, BOTH, FALSE}, // 2.4 G, ch 1~13
++ { 36, 4, 23, IDOR, FALSE}, // 5G, ch 36~48
++ { 52, 4, 23, IDOR, TRUE}, // 5G, ch 52~64
++ { 100, 11, 30, BOTH, TRUE}, // 5G, ch 100~140
++ { 0}, // end
++ }
++ },
++
++ { // Marocco
++ "MA",
++ CE,
++ {
++ { 1, 13, 20, BOTH, FALSE}, // 2.4 G, ch 1~13
++ { 36, 4, 24, IDOR, FALSE}, // 5G, ch 36~48
++ { 0}, // end
++ }
++ },
++
++ { // Mexico
++ "MX",
++ CE,
++ {
++ { 1, 13, 20, BOTH, FALSE}, // 2.4 G, ch 1~13
++ { 36, 4, 23, BOTH, FALSE}, // 5G, ch 36~48
++ { 52, 4, 24, BOTH, FALSE}, // 5G, ch 52~64
++ { 149, 5, 30, IDOR, FALSE}, // 5G, ch 149~165
++ { 0}, // end
++ }
++ },
++
++ { // Netherlands
++ "NL",
++ CE,
++ {
++ { 1, 13, 20, BOTH, FALSE}, // 2.4 G, ch 1~13
++ { 36, 4, 23, IDOR, FALSE}, // 5G, ch 36~48
++ { 52, 4, 24, IDOR, TRUE}, // 5G, ch 52~64
++ { 100, 11, 30, BOTH, TRUE}, // 5G, ch 100~140
++ { 0}, // end
++ }
++ },
++
++ { // New Zealand
++ "NZ",
++ CE,
++ {
++ { 1, 13, 20, BOTH, FALSE}, // 2.4 G, ch 1~13
++ { 36, 4, 24, BOTH, FALSE}, // 5G, ch 36~48
++ { 52, 4, 24, BOTH, FALSE}, // 5G, ch 52~64
++ { 149, 4, 30, BOTH, FALSE}, // 5G, ch 149~161
++ { 0}, // end
++ }
++ },
++
++ { // Norway
++ "NO",
++ CE,
++ {
++ { 1, 13, 20, BOTH, FALSE}, // 2.4 G, ch 1~13
++ { 36, 4, 24, IDOR, FALSE}, // 5G, ch 36~48
++ { 52, 4, 24, IDOR, TRUE}, // 5G, ch 52~64
++ { 100, 11, 30, BOTH, TRUE}, // 5G, ch 149~161
++ { 0}, // end
++ }
++ },
++
++ { // Peru
++ "PE",
++ CE,
++ {
++ { 1, 13, 20, BOTH, FALSE}, // 2.4 G, ch 1~13
++ { 149, 4, 27, BOTH, FALSE}, // 5G, ch 149~161
++ { 0}, // end
++ }
++ },
++
++ { // Portugal
++ "PT",
++ CE,
++ {
++ { 1, 13, 20, BOTH, FALSE}, // 2.4 G, ch 1~13
++ { 36, 4, 23, IDOR, FALSE}, // 5G, ch 36~48
++ { 52, 4, 23, IDOR, TRUE}, // 5G, ch 52~64
++ { 100, 11, 30, BOTH, TRUE}, // 5G, ch 100~140
++ { 0}, // end
++ }
++ },
++
++ { // Poland
++ "PL",
++ CE,
++ {
++ { 1, 13, 20, BOTH, FALSE}, // 2.4 G, ch 1~13
++ { 36, 4, 23, IDOR, FALSE}, // 5G, ch 36~48
++ { 52, 4, 23, IDOR, TRUE}, // 5G, ch 52~64
++ { 100, 11, 30, BOTH, TRUE}, // 5G, ch 100~140
++ { 0}, // end
++ }
++ },
++
++ { // Romania
++ "RO",
++ CE,
++ {
++ { 1, 13, 20, BOTH, FALSE}, // 2.4 G, ch 1~13
++ { 36, 4, 23, IDOR, FALSE}, // 5G, ch 36~48
++ { 52, 4, 23, IDOR, TRUE}, // 5G, ch 52~64
++ { 100, 11, 30, BOTH, TRUE}, // 5G, ch 100~140
++ { 0}, // end
++ }
++ },
++
++ { // Russia
++ "RU",
++ CE,
++ {
++ { 1, 13, 20, BOTH, FALSE}, // 2.4 G, ch 1~13
++ { 149, 4, 20, IDOR, FALSE}, // 5G, ch 149~161
++ { 0}, // end
++ }
++ },
++
++ { // Saudi Arabia
++ "SA",
++ CE,
++ {
++ { 1, 13, 20, BOTH, FALSE}, // 2.4 G, ch 1~13
++ { 36, 4, 23, BOTH, FALSE}, // 5G, ch 36~48
++ { 52, 4, 23, BOTH, FALSE}, // 5G, ch 52~64
++ { 149, 4, 23, BOTH, FALSE}, // 5G, ch 149~161
++ { 0}, // end
++ }
++ },
++
++ { // Serbia_and_Montenegro
++ "CS",
++ CE,
++ {
++ { 1, 13, 20, BOTH, FALSE}, // 2.4 G, ch 1~13
++ { 0}, // end
++ }
++ },
++
++ { // Singapore
++ "SG",
++ CE,
++ {
++ { 1, 13, 20, BOTH, FALSE}, // 2.4 G, ch 1~13
++ { 36, 4, 23, BOTH, FALSE}, // 5G, ch 36~48
++ { 52, 4, 23, BOTH, FALSE}, // 5G, ch 52~64
++ { 149, 4, 20, BOTH, FALSE}, // 5G, ch 149~161
++ { 0}, // end
++ }
++ },
++
++ { // Slovakia
++ "SK",
++ CE,
++ {
++ { 1, 13, 20, BOTH, FALSE}, // 2.4 G, ch 1~13
++ { 36, 4, 23, IDOR, FALSE}, // 5G, ch 36~48
++ { 52, 4, 23, IDOR, TRUE}, // 5G, ch 52~64
++ { 100, 11, 30, BOTH, TRUE}, // 5G, ch 100~140
++ { 0}, // end
++ }
++ },
++
++ { // Slovenia
++ "SI",
++ CE,
++ {
++ { 1, 13, 20, BOTH, FALSE}, // 2.4 G, ch 1~13
++ { 36, 4, 23, IDOR, FALSE}, // 5G, ch 36~48
++ { 52, 4, 23, IDOR, TRUE}, // 5G, ch 52~64
++ { 0}, // end
++ }
++ },
++
++ { // South Africa
++ "ZA",
++ CE,
++ {
++ { 1, 13, 20, BOTH, FALSE}, // 2.4 G, ch 1~13
++ { 36, 4, 23, BOTH, FALSE}, // 5G, ch 36~48
++ { 52, 4, 23, IDOR, FALSE}, // 5G, ch 52~64
++ { 100, 11, 30, BOTH, TRUE}, // 5G, ch 100~140
++ { 149, 4, 30, BOTH, FALSE}, // 5G, ch 149~161
++ { 0}, // end
++ }
++ },
++
++ { // South Korea
++ "KR",
++ CE,
++ {
++ { 1, 13, 20, BOTH, FALSE}, // 2.4 G, ch 1~13
++ { 36, 4, 20, BOTH, FALSE}, // 5G, ch 36~48
++ { 52, 4, 20, BOTH, FALSE}, // 5G, ch 52~64
++ { 100, 8, 20, BOTH, FALSE}, // 5G, ch 100~128
++ { 149, 4, 20, BOTH, FALSE}, // 5G, ch 149~161
++ { 0}, // end
++ }
++ },
++
++ { // Spain
++ "ES",
++ CE,
++ {
++ { 1, 13, 20, BOTH, FALSE}, // 2.4 G, ch 1~13
++ { 36, 4, 17, IDOR, FALSE}, // 5G, ch 36~48
++ { 52, 4, 23, IDOR, TRUE}, // 5G, ch 52~64
++ { 100, 11, 30, BOTH, TRUE}, // 5G, ch 100~140
++ { 0}, // end
++ }
++ },
++
++ { // Sweden
++ "SE",
++ CE,
++ {
++ { 1, 13, 20, BOTH, FALSE}, // 2.4 G, ch 1~13
++ { 36, 4, 23, IDOR, FALSE}, // 5G, ch 36~48
++ { 52, 4, 23, IDOR, TRUE}, // 5G, ch 52~64
++ { 100, 11, 30, BOTH, TRUE}, // 5G, ch 100~140
++ { 0}, // end
++ }
++ },
++
++ { // Switzerland
++ "CH",
++ CE,
++ {
++ { 1, 13, 20, BOTH, FALSE}, // 2.4 G, ch 1~13
++ { 36, 4, 23, IDOR, TRUE}, // 5G, ch 36~48
++ { 52, 4, 23, IDOR, TRUE}, // 5G, ch 52~64
++ { 0}, // end
++ }
++ },
++
++ { // Taiwan
++ "TW",
++ CE,
++ {
++ { 1, 11, 30, BOTH, FALSE}, // 2.4 G, ch 1~11
++ { 52, 4, 23, IDOR, FALSE}, // 5G, ch 52~64
++ { 0}, // end
++ }
++ },
++
++ { // Turkey
++ "TR",
++ CE,
++ {
++ { 1, 13, 20, BOTH, FALSE}, // 2.4 G, ch 1~11
++ { 36, 4, 23, BOTH, FALSE}, // 5G, ch 36~48
++ { 52, 4, 23, BOTH, FALSE}, // 5G, ch 52~64
++ { 0}, // end
++ }
++ },
++
++ { // UK
++ "GB",
++ CE,
++ {
++ { 1, 13, 20, BOTH, FALSE}, // 2.4 G, ch 1~11
++ { 36, 4, 23, IDOR, FALSE}, // 5G, ch 52~64
++ { 52, 4, 23, IDOR, TRUE}, // 5G, ch 52~64
++ { 100, 11, 30, BOTH, TRUE}, // 5G, ch 100~140
++ { 0}, // end
++ }
++ },
++
++ { // Ukraine
++ "UA",
++ CE,
++ {
++ { 1, 13, 20, BOTH, FALSE}, // 2.4 G, ch 1~11
++ { 0}, // end
++ }
++ },
++
++ { // United_Arab_Emirates
++ "AE",
++ CE,
++ {
++ { 1, 13, 20, BOTH, FALSE}, // 2.4 G, ch 1~11
++ { 0}, // end
++ }
++ },
++
++ { // United_States
++ "US",
++ CE,
++ {
++ { 1, 11, 30, BOTH, FALSE}, // 2.4 G, ch 1~11
++ { 36, 4, 17, IDOR, FALSE}, // 5G, ch 52~64
++ { 52, 4, 24, BOTH, TRUE}, // 5G, ch 52~64
++ { 100, 11, 30, BOTH, TRUE}, // 5G, ch 100~140
++ { 149, 5, 30, BOTH, FALSE}, // 5G, ch 149~165
++ { 0}, // end
++ }
++ },
++
++ { // Venezuela
++ "VE",
++ CE,
++ {
++ { 1, 13, 20, BOTH, FALSE}, // 2.4 G, ch 1~11
++ { 149, 4, 27, BOTH, FALSE}, // 5G, ch 149~161
++ { 0}, // end
++ }
++ },
++
++ { // Default
++ "",
++ CE,
++ {
++ { 1, 11, 20, BOTH, FALSE}, // 2.4 G, ch 1~11
++ { 36, 4, 20, BOTH, FALSE}, // 5G, ch 52~64
++ { 52, 4, 20, BOTH, FALSE}, // 5G, ch 52~64
++ { 100, 11, 20, BOTH, FALSE}, // 5G, ch 100~140
++ { 149, 5, 20, BOTH, FALSE}, // 5G, ch 149~165
++ { 0}, // end
++ }
++ },
++};
++
++static inline PCH_REGION GetChRegion(
++ IN PUCHAR CntryCode)
++{
++ INT loop = 0;
++ PCH_REGION pChRegion = NULL;
++
++ while (strcmp(ChRegion[loop].CountReg, "") != 0)
++ {
++ if (strncmp(ChRegion[loop].CountReg, CntryCode, 2) == 0)
++ {
++ pChRegion = &ChRegion[loop];
++ break;
++ }
++ loop++;
++ }
++
++ if (pChRegion == NULL)
++ pChRegion = &ChRegion[loop];
++ return pChRegion;
++}
++
++static inline VOID ChBandCheck(
++ IN UCHAR PhyMode,
++ OUT PUCHAR pChType)
++{
++ switch(PhyMode)
++ {
++ case PHY_11A:
++#ifdef DOT11_N_SUPPORT
++ case PHY_11AN_MIXED:
++#endif // DOT11_N_SUPPORT //
++ *pChType = BAND_5G;
++ break;
++ case PHY_11ABG_MIXED:
++#ifdef DOT11_N_SUPPORT
++ case PHY_11AGN_MIXED:
++ case PHY_11ABGN_MIXED:
++#endif // DOT11_N_SUPPORT //
++ *pChType = BAND_BOTH;
++ break;
++
++ default:
++ *pChType = BAND_24G;
++ break;
++ }
++}
++
++static inline UCHAR FillChList(
++ IN PRTMP_ADAPTER pAd,
++ IN PCH_DESP pChDesp,
++ IN UCHAR Offset,
++ IN UCHAR increment)
++{
++ INT i, j, l;
++ UCHAR channel;
++
++ j = Offset;
++ for (i = 0; i < pChDesp->NumOfCh; i++)
++ {
++ channel = pChDesp->FirstChannel + i * increment;
++ for (l=0; l<MAX_NUM_OF_CHANNELS; l++)
++ {
++ if (channel == pAd->TxPower[l].Channel)
++ {
++ pAd->ChannelList[j].Power = pAd->TxPower[l].Power;
++ pAd->ChannelList[j].Power2 = pAd->TxPower[l].Power2;
++ break;
++ }
++ }
++ if (l == MAX_NUM_OF_CHANNELS)
++ continue;
++
++ pAd->ChannelList[j].Channel = pChDesp->FirstChannel + i * increment;
++ pAd->ChannelList[j].MaxTxPwr = pChDesp->MaxTxPwr;
++ pAd->ChannelList[j].DfsReq = pChDesp->DfsReq;
++ j++;
++ }
++ pAd->ChannelListNum = j;
++
++ return j;
++}
++
++static inline VOID CreateChList(
++ IN PRTMP_ADAPTER pAd,
++ IN PCH_REGION pChRegion,
++ IN UCHAR Geography)
++{
++ INT i;
++ UCHAR offset = 0;
++ PCH_DESP pChDesp;
++ UCHAR ChType;
++ UCHAR increment;
++
++ if (pChRegion == NULL)
++ return;
++
++ ChBandCheck(pAd->CommonCfg.PhyMode, &ChType);
++
++ for (i=0; i<10; i++)
++ {
++ pChDesp = &pChRegion->ChDesp[i];
++ if (pChDesp->FirstChannel == 0)
++ break;
++
++ if (ChType == BAND_5G)
++ {
++ if (pChDesp->FirstChannel <= 14)
++ continue;
++ }
++ else if (ChType == BAND_24G)
++ {
++ if (pChDesp->FirstChannel > 14)
++ continue;
++ }
++
++ if ((pChDesp->Geography == BOTH)
++ || (pChDesp->Geography == Geography))
++ {
++ if (pChDesp->FirstChannel > 14)
++ increment = 4;
++ else
++ increment = 1;
++ offset = FillChList(pAd, pChDesp, offset, increment);
++ }
++ }
++}
++
++static inline VOID BuildChannelListEx(
++ IN PRTMP_ADAPTER pAd)
++{
++ PCH_REGION pChReg;
++
++ pChReg = GetChRegion(pAd->CommonCfg.CountryCode);
++ CreateChList(pAd, pChReg, pAd->CommonCfg.Geography);
++}
++
++static inline VOID BuildBeaconChList(
++ IN PRTMP_ADAPTER pAd,
++ OUT PUCHAR pBuf,
++ OUT PULONG pBufLen)
++{
++ INT i;
++ ULONG TmpLen;
++ PCH_REGION pChRegion;
++ PCH_DESP pChDesp;
++ UCHAR ChType;
++
++ pChRegion = GetChRegion(pAd->CommonCfg.CountryCode);
++
++ if (pChRegion == NULL)
++ return;
++
++ ChBandCheck(pAd->CommonCfg.PhyMode, &ChType);
++ *pBufLen = 0;
++
++ for (i=0; i<10; i++)
++ {
++ pChDesp = &pChRegion->ChDesp[i];
++ if (pChDesp->FirstChannel == 0)
++ break;
++
++ if (ChType == BAND_5G)
++ {
++ if (pChDesp->FirstChannel <= 14)
++ continue;
++ }
++ else if (ChType == BAND_24G)
++ {
++ if (pChDesp->FirstChannel > 14)
++ continue;
++ }
++
++ if ((pChDesp->Geography == BOTH)
++ || (pChDesp->Geography == pAd->CommonCfg.Geography))
++ {
++ MakeOutgoingFrame(pBuf + *pBufLen, &TmpLen,
++ 1, &pChDesp->FirstChannel,
++ 1, &pChDesp->NumOfCh,
++ 1, &pChDesp->MaxTxPwr,
++ END_OF_ARGS);
++ *pBufLen += TmpLen;
++ }
++ }
++}
++
++
++#ifdef DOT11_N_SUPPORT
++static inline BOOLEAN IsValidChannel(
++ IN PRTMP_ADAPTER pAd,
++ IN UCHAR channel)
++
++{
++ INT i;
++
++ for (i = 0; i < pAd->ChannelListNum; i++)
++ {
++ if (pAd->ChannelList[i].Channel == channel)
++ break;
++ }
++
++ if (i == pAd->ChannelListNum)
++ return FALSE;
++ else
++ return TRUE;
++}
++
++
++static inline UCHAR GetExtCh(
++ IN UCHAR Channel,
++ IN UCHAR Direction)
++{
++ CHAR ExtCh;
++
++ if (Direction == EXTCHA_ABOVE)
++ ExtCh = Channel + 4;
++ else
++ ExtCh = (Channel - 4) > 0 ? (Channel - 4) : 0;
++
++ return ExtCh;
++}
++
++
++static inline VOID N_ChannelCheck(
++ IN PRTMP_ADAPTER pAd)
++{
++ //UCHAR ChannelNum = pAd->ChannelListNum;
++ UCHAR Channel = pAd->CommonCfg.Channel;
++
++ if ((pAd->CommonCfg.PhyMode >= PHY_11ABGN_MIXED) && (pAd->CommonCfg.RegTransmitSetting.field.BW == BW_40))
++ {
++ if (Channel > 14)
++ {
++ if ((Channel == 36) || (Channel == 44) || (Channel == 52) || (Channel == 60) || (Channel == 100) || (Channel == 108) ||
++ (Channel == 116) || (Channel == 124) || (Channel == 132) || (Channel == 149) || (Channel == 157))
++ {
++ pAd->CommonCfg.RegTransmitSetting.field.EXTCHA = EXTCHA_ABOVE;
++ }
++ else if ((Channel == 40) || (Channel == 48) || (Channel == 56) || (Channel == 64) || (Channel == 104) || (Channel == 112) ||
++ (Channel == 120) || (Channel == 128) || (Channel == 136) || (Channel == 153) || (Channel == 161))
++ {
++ pAd->CommonCfg.RegTransmitSetting.field.EXTCHA = EXTCHA_BELOW;
++ }
++ else
++ {
++ pAd->CommonCfg.RegTransmitSetting.field.BW = BW_20;
++ }
++ }
++ else
++ {
++ do
++ {
++ UCHAR ExtCh;
++ UCHAR Dir = pAd->CommonCfg.RegTransmitSetting.field.EXTCHA;
++ ExtCh = GetExtCh(Channel, Dir);
++ if (IsValidChannel(pAd, ExtCh))
++ break;
++
++ Dir = (Dir == EXTCHA_ABOVE) ? EXTCHA_BELOW : EXTCHA_ABOVE;
++ ExtCh = GetExtCh(Channel, Dir);
++ if (IsValidChannel(pAd, ExtCh))
++ {
++ pAd->CommonCfg.RegTransmitSetting.field.EXTCHA = Dir;
++ break;
++ }
++ pAd->CommonCfg.RegTransmitSetting.field.BW = BW_20;
++ } while(FALSE);
++
++ if (Channel == 14)
++ {
++ pAd->CommonCfg.RegTransmitSetting.field.BW = BW_20;
++ //pAd->CommonCfg.RegTransmitSetting.field.EXTCHA = EXTCHA_NONE; // We didn't set the ExtCh as NONE due to it'll set in RTMPSetHT()
++ }
++#if 0
++ switch (pAd->CommonCfg.CountryRegion & 0x7f)
++ {
++ case REGION_0_BG_BAND: // 1 -11
++ case REGION_1_BG_BAND: // 1 - 13
++ case REGION_5_BG_BAND: // 1 - 14
++ if (Channel <= 4)
++ {
++ pAd->CommonCfg.RegTransmitSetting.field.EXTCHA = EXTCHA_ABOVE;
++ }
++ else if (Channel >= 8)
++ {
++ if ((ChannelNum - Channel) < 4)
++ pAd->CommonCfg.RegTransmitSetting.field.EXTCHA = EXTCHA_BELOW;
++ }
++ break;
++
++ case REGION_2_BG_BAND: // 10 - 11
++ case REGION_3_BG_BAND: // 10 - 13
++ case REGION_4_BG_BAND: // 14
++ pAd->CommonCfg.RegTransmitSetting.field.BW = BW_20;
++ break;
++
++ case REGION_6_BG_BAND: // 3 - 9
++ if (Channel <= 5)
++ pAd->CommonCfg.RegTransmitSetting.field.EXTCHA = EXTCHA_ABOVE;
++ else if (Channel == 6)
++ pAd->CommonCfg.RegTransmitSetting.field.BW = BW_20;
++ else if (Channel >= 7)
++ pAd->CommonCfg.RegTransmitSetting.field.EXTCHA = EXTCHA_BELOW;
++ break;
++
++ case REGION_7_BG_BAND: // 5 - 13
++ if (Channel <= 8)
++ pAd->CommonCfg.RegTransmitSetting.field.EXTCHA = EXTCHA_ABOVE;
++ else if (Channel >= 10)
++ pAd->CommonCfg.RegTransmitSetting.field.EXTCHA = EXTCHA_BELOW;
++ break;
++
++ default: // Error. should never happen
++ break;
++ }
++#endif
++ }
++ }
++
++
++}
++
++
++static inline VOID N_SetCenCh(
++ IN PRTMP_ADAPTER pAd)
++{
++ if (pAd->CommonCfg.RegTransmitSetting.field.BW == BW_40)
++ {
++ if (pAd->CommonCfg.RegTransmitSetting.field.EXTCHA == EXTCHA_ABOVE)
++ {
++ pAd->CommonCfg.CentralChannel = pAd->CommonCfg.Channel + 2;
++ }
++ else
++ {
++ if (pAd->CommonCfg.Channel == 14)
++ pAd->CommonCfg.CentralChannel = pAd->CommonCfg.Channel - 1;
++ else
++ pAd->CommonCfg.CentralChannel = pAd->CommonCfg.Channel - 2;
++ }
++ }
++ else
++ {
++ pAd->CommonCfg.CentralChannel = pAd->CommonCfg.Channel;
++ }
++}
++#endif // DOT11_N_SUPPORT //
++
++
++static inline UINT8 GetCuntryMaxTxPwr(
++ IN PRTMP_ADAPTER pAd,
++ IN UINT8 channel)
++{
++ int i;
++ for (i = 0; i < pAd->ChannelListNum; i++)
++ {
++ if (pAd->ChannelList[i].Channel == channel)
++ break;
++ }
++
++ if (i == pAd->ChannelListNum)
++ return 0xff;
++ else
++ return pAd->ChannelList[i].MaxTxPwr;
++}
++#endif // __CHLIST_H__
++
+--- /dev/null
++++ b/drivers/staging/rt2870/common/2870_rtmp_init.c
+@@ -0,0 +1,1778 @@
++/*
++ *************************************************************************
++ * Ralink Tech Inc.
++ * 5F., No.36, Taiyuan St., Jhubei City,
++ * Hsinchu County 302,
++ * Taiwan, R.O.C.
++ *
++ * (c) Copyright 2002-2007, Ralink Technology, Inc.
++ *
++ * This program is free software; you can redistribute it and/or modify *
++ * it under the terms of the GNU General Public License as published by *
++ * the Free Software Foundation; either version 2 of the License, or *
++ * (at your option) any later version. *
++ * *
++ * This program is distributed in the hope that it will be useful, *
++ * but WITHOUT ANY WARRANTY; without even the implied warranty of *
++ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the *
++ * GNU General Public License for more details. *
++ * *
++ * You should have received a copy of the GNU General Public License *
++ * along with this program; if not, write to the *
++ * Free Software Foundation, Inc., *
++ * 59 Temple Place - Suite 330, Boston, MA 02111-1307, USA. *
++ * *
++ *************************************************************************
++
++ Module Name:
++ 2870_rtmp_init.c
++
++ Abstract:
++ Miniport generic portion header file
++
++ Revision History:
++ Who When What
++ -------- ---------- ----------------------------------------------
++ Paul Lin 2002-08-01 created
++ John Chang 2004-08-20 RT2561/2661 use scatter-gather scheme
++ Jan Lee 2006-09-15 RT2860. Change for 802.11n , EEPROM, Led, BA, HT.
++ Sample Lin 2007-05-31 Merge RT2860 and RT2870 drivers.
++*/
++
++#include "../rt_config.h"
++
++
++static void rx_done_tasklet(unsigned long data);
++static void rt2870_hcca_dma_done_tasklet(unsigned long data);
++static void rt2870_ac3_dma_done_tasklet(unsigned long data);
++static void rt2870_ac2_dma_done_tasklet(unsigned long data);
++static void rt2870_ac1_dma_done_tasklet(unsigned long data);
++static void rt2870_ac0_dma_done_tasklet(unsigned long data);
++static void rt2870_mgmt_dma_done_tasklet(unsigned long data);
++static void rt2870_null_frame_complete_tasklet(unsigned long data);
++static void rt2870_rts_frame_complete_tasklet(unsigned long data);
++static void rt2870_pspoll_frame_complete_tasklet(unsigned long data);
++static void rt2870_dataout_complete_tasklet(unsigned long data);
++
++
++/*
++========================================================================
++Routine Description:
++ Initialize receive data structures.
++
++Arguments:
++ pAd Pointer to our adapter
++
++Return Value:
++ NDIS_STATUS_SUCCESS
++ NDIS_STATUS_RESOURCES
++
++Note:
++ Initialize all receive releated private buffer, include those define
++ in RTMP_ADAPTER structure and all private data structures. The mahor
++ work is to allocate buffer for each packet and chain buffer to
++ NDIS packet descriptor.
++========================================================================
++*/
++NDIS_STATUS NICInitRecv(
++ IN PRTMP_ADAPTER pAd)
++{
++ UCHAR i;
++ NDIS_STATUS Status = NDIS_STATUS_SUCCESS;
++ POS_COOKIE pObj = (POS_COOKIE) pAd->OS_Cookie;
++
++
++ DBGPRINT(RT_DEBUG_TRACE, ("--> NICInitRecv\n"));
++ pObj = pObj;
++
++ //InterlockedExchange(&pAd->PendingRx, 0);
++ pAd->PendingRx = 0;
++ pAd->NextRxBulkInReadIndex = 0; // Next Rx Read index
++ pAd->NextRxBulkInIndex = 0 ; //RX_RING_SIZE -1; // Rx Bulk pointer
++ pAd->NextRxBulkInPosition = 0;
++
++ for (i = 0; i < (RX_RING_SIZE); i++)
++ {
++ PRX_CONTEXT pRxContext = &(pAd->RxContext[i]);
++
++ //Allocate URB
++ pRxContext->pUrb = RTUSB_ALLOC_URB(0);
++ if (pRxContext->pUrb == NULL)
++ {
++ Status = NDIS_STATUS_RESOURCES;
++ goto out1;
++ }
++
++ // Allocate transfer buffer
++ pRxContext->TransferBuffer = RTUSB_URB_ALLOC_BUFFER(pObj->pUsb_Dev, MAX_RXBULK_SIZE, &pRxContext->data_dma);
++ if (pRxContext->TransferBuffer == NULL)
++ {
++ Status = NDIS_STATUS_RESOURCES;
++ goto out1;
++ }
++
++ NdisZeroMemory(pRxContext->TransferBuffer, MAX_RXBULK_SIZE);
++
++ pRxContext->pAd = pAd;
++ pRxContext->pIrp = NULL;
++ pRxContext->InUse = FALSE;
++ pRxContext->IRPPending = FALSE;
++ pRxContext->Readable = FALSE;
++ //pRxContext->ReorderInUse = FALSE;
++ pRxContext->bRxHandling = FALSE;
++ pRxContext->BulkInOffset = 0;
++ }
++
++ DBGPRINT(RT_DEBUG_TRACE, ("<-- NICInitRecv\n"));
++ return Status;
++
++out1:
++ for (i = 0; i < (RX_RING_SIZE); i++)
++ {
++ PRX_CONTEXT pRxContext = &(pAd->RxContext[i]);
++
++ if (NULL != pRxContext->TransferBuffer)
++ {
++ RTUSB_URB_FREE_BUFFER(pObj->pUsb_Dev, MAX_RXBULK_SIZE,
++ pRxContext->TransferBuffer, pRxContext->data_dma);
++ pRxContext->TransferBuffer = NULL;
++ }
++
++ if (NULL != pRxContext->pUrb)
++ {
++ RTUSB_UNLINK_URB(pRxContext->pUrb);
++ RTUSB_FREE_URB(pRxContext->pUrb);
++ pRxContext->pUrb = NULL;
++ }
++ }
++
++ return Status;
++}
++
++
++/*
++========================================================================
++Routine Description:
++ Initialize transmit data structures.
++
++Arguments:
++ pAd Pointer to our adapter
++
++Return Value:
++ NDIS_STATUS_SUCCESS
++ NDIS_STATUS_RESOURCES
++
++Note:
++========================================================================
++*/
++NDIS_STATUS NICInitTransmit(
++ IN PRTMP_ADAPTER pAd)
++{
++#define LM_USB_ALLOC(pObj, Context, TB_Type, BufferSize, Status, msg1, err1, msg2, err2) \
++ Context->pUrb = RTUSB_ALLOC_URB(0); \
++ if (Context->pUrb == NULL) { \
++ DBGPRINT(RT_DEBUG_ERROR, msg1); \
++ Status = NDIS_STATUS_RESOURCES; \
++ goto err1; } \
++ \
++ Context->TransferBuffer = \
++ (TB_Type)RTUSB_URB_ALLOC_BUFFER(pObj->pUsb_Dev, BufferSize, &Context->data_dma); \
++ if (Context->TransferBuffer == NULL) { \
++ DBGPRINT(RT_DEBUG_ERROR, msg2); \
++ Status = NDIS_STATUS_RESOURCES; \
++ goto err2; }
++
++#define LM_URB_FREE(pObj, Context, BufferSize) \
++ if (NULL != Context->pUrb) { \
++ RTUSB_UNLINK_URB(Context->pUrb); \
++ RTUSB_FREE_URB(Context->pUrb); \
++ Context->pUrb = NULL; } \
++ if (NULL != Context->TransferBuffer) { \
++ RTUSB_URB_FREE_BUFFER(pObj->pUsb_Dev, BufferSize, \
++ Context->TransferBuffer, \
++ Context->data_dma); \
++ Context->TransferBuffer = NULL; }
++
++ UCHAR i, acidx;
++ NDIS_STATUS Status = NDIS_STATUS_SUCCESS;
++ PTX_CONTEXT pNullContext = &(pAd->NullContext);
++ PTX_CONTEXT pPsPollContext = &(pAd->PsPollContext);
++ PTX_CONTEXT pRTSContext = &(pAd->RTSContext);
++ PTX_CONTEXT pMLMEContext = NULL;
++// PHT_TX_CONTEXT pHTTXContext = NULL;
++ POS_COOKIE pObj = (POS_COOKIE) pAd->OS_Cookie;
++ PVOID RingBaseVa;
++// RTMP_TX_RING *pTxRing;
++ RTMP_MGMT_RING *pMgmtRing;
++
++ DBGPRINT(RT_DEBUG_TRACE, ("--> NICInitTransmit\n"));
++ pObj = pObj;
++
++ // Init 4 set of Tx parameters
++ for(acidx = 0; acidx < NUM_OF_TX_RING; acidx++)
++ {
++ // Initialize all Transmit releated queues
++ InitializeQueueHeader(&pAd->TxSwQueue[acidx]);
++
++ // Next Local tx ring pointer waiting for buck out
++ pAd->NextBulkOutIndex[acidx] = acidx;
++ pAd->BulkOutPending[acidx] = FALSE; // Buck Out control flag
++ //pAd->DataBulkDoneIdx[acidx] = 0;
++ }
++
++ //pAd->NextMLMEIndex = 0;
++ //pAd->PushMgmtIndex = 0;
++ //pAd->PopMgmtIndex = 0;
++ //InterlockedExchange(&pAd->MgmtQueueSize, 0);
++ //InterlockedExchange(&pAd->TxCount, 0);
++
++ //pAd->PrioRingFirstIndex = 0;
++ //pAd->PrioRingTxCnt = 0;
++
++ do
++ {
++ //
++ // TX_RING_SIZE, 4 ACs
++ //
++ for(acidx=0; acidx<4; acidx++)
++ {
++ PHT_TX_CONTEXT pHTTXContext = &(pAd->TxContext[acidx]);
++
++ NdisZeroMemory(pHTTXContext, sizeof(HT_TX_CONTEXT));
++ //Allocate URB
++ LM_USB_ALLOC(pObj, pHTTXContext, PHTTX_BUFFER, sizeof(HTTX_BUFFER), Status,
++ ("<-- ERROR in Alloc TX TxContext[%d] urb!! \n", acidx),
++ done,
++ ("<-- ERROR in Alloc TX TxContext[%d] HTTX_BUFFER !! \n", acidx),
++ out1);
++
++ NdisZeroMemory(pHTTXContext->TransferBuffer->Aggregation, 4);
++ pHTTXContext->pAd = pAd;
++ pHTTXContext->pIrp = NULL;
++ pHTTXContext->IRPPending = FALSE;
++ pHTTXContext->NextBulkOutPosition = 0;
++ pHTTXContext->ENextBulkOutPosition = 0;
++ pHTTXContext->CurWritePosition = 0;
++ pHTTXContext->CurWriteRealPos = 0;
++ pHTTXContext->BulkOutSize = 0;
++ pHTTXContext->BulkOutPipeId = acidx;
++ pHTTXContext->bRingEmpty = TRUE;
++ pHTTXContext->bCopySavePad = FALSE;
++
++ pAd->BulkOutPending[acidx] = FALSE;
++ }
++
++
++ //
++ // MGMT_RING_SIZE
++ //
++#if 0
++ for(i=0; i<MGMT_RING_SIZE; i++) // 8
++ {
++ PTX_CONTEXT pMLMEContext = &(pAd->MLMEContext[i]);
++
++
++ NdisZeroMemory(pMLMEContext, sizeof(TX_CONTEXT));
++
++ //Allocate URB
++ LM_USB_ALLOC(pObj, pMLMEContext, PTX_BUFFER, sizeof(TX_BUFFER), Status,
++ ("<-- ERROR in Alloc TX MLMEContext[%d] urb!! \n", i),
++ out2,
++ ("<-- ERROR in Alloc TX MLMEContext[%d] TX_BUFFER !! \n", i),
++ out2);
++
++ pMLMEContext->pAd = pAd;
++ pMLMEContext->pIrp = NULL;
++ pMLMEContext->InUse = FALSE;
++ pMLMEContext->IRPPending = FALSE;
++ }
++#else
++ // Allocate MGMT ring descriptor's memory
++ pAd->MgmtDescRing.AllocSize = MGMT_RING_SIZE * sizeof(TX_CONTEXT);
++ RTMPAllocateMemory(&pAd->MgmtDescRing.AllocVa, pAd->MgmtDescRing.AllocSize);
++ if (pAd->MgmtDescRing.AllocVa == NULL)
++ {
++ DBGPRINT_ERR(("Failed to allocate a big buffer for MgmtDescRing!\n"));
++ Status = NDIS_STATUS_RESOURCES;
++ goto out1;
++ }
++ NdisZeroMemory(pAd->MgmtDescRing.AllocVa, pAd->MgmtDescRing.AllocSize);
++ RingBaseVa = pAd->MgmtDescRing.AllocVa;
++
++ // Initialize MGMT Ring and associated buffer memory
++ pMgmtRing = &pAd->MgmtRing;
++ for (i = 0; i < MGMT_RING_SIZE; i++)
++ {
++ // link the pre-allocated Mgmt buffer to MgmtRing.Cell
++ pMgmtRing->Cell[i].AllocSize = sizeof(TX_CONTEXT);
++ pMgmtRing->Cell[i].AllocVa = RingBaseVa;
++ pMgmtRing->Cell[i].pNdisPacket = NULL;
++ pMgmtRing->Cell[i].pNextNdisPacket = NULL;
++
++ //Allocate URB for MLMEContext
++ pMLMEContext = (PTX_CONTEXT) pAd->MgmtRing.Cell[i].AllocVa;
++ pMLMEContext->pUrb = RTUSB_ALLOC_URB(0);
++ if (pMLMEContext->pUrb == NULL)
++ {
++ DBGPRINT(RT_DEBUG_ERROR, ("<-- ERROR in Alloc TX MLMEContext[%d] urb!! \n", i));
++ Status = NDIS_STATUS_RESOURCES;
++ goto out2;
++ }
++ pMLMEContext->pAd = pAd;
++ pMLMEContext->pIrp = NULL;
++ pMLMEContext->TransferBuffer = NULL;
++ pMLMEContext->InUse = FALSE;
++ pMLMEContext->IRPPending = FALSE;
++ pMLMEContext->bWaitingBulkOut = FALSE;
++ pMLMEContext->BulkOutSize = 0;
++ pMLMEContext->SelfIdx = i;
++
++ // Offset to next ring descriptor address
++ RingBaseVa = (PUCHAR) RingBaseVa + sizeof(TX_CONTEXT);
++ }
++ DBGPRINT(RT_DEBUG_TRACE, ("MGMT Ring: total %d entry allocated\n", i));
++
++ //pAd->MgmtRing.TxSwFreeIdx = (MGMT_RING_SIZE - 1);
++ pAd->MgmtRing.TxSwFreeIdx = MGMT_RING_SIZE;
++ pAd->MgmtRing.TxCpuIdx = 0;
++ pAd->MgmtRing.TxDmaIdx = 0;
++#endif
++
++ //
++ // BEACON_RING_SIZE
++ //
++ for(i=0; i<BEACON_RING_SIZE; i++) // 2
++ {
++ PTX_CONTEXT pBeaconContext = &(pAd->BeaconContext[i]);
++
++
++ NdisZeroMemory(pBeaconContext, sizeof(TX_CONTEXT));
++
++ //Allocate URB
++ LM_USB_ALLOC(pObj, pBeaconContext, PTX_BUFFER, sizeof(TX_BUFFER), Status,
++ ("<-- ERROR in Alloc TX BeaconContext[%d] urb!! \n", i),
++ out2,
++ ("<-- ERROR in Alloc TX BeaconContext[%d] TX_BUFFER !! \n", i),
++ out3);
++
++ pBeaconContext->pAd = pAd;
++ pBeaconContext->pIrp = NULL;
++ pBeaconContext->InUse = FALSE;
++ pBeaconContext->IRPPending = FALSE;
++ }
++
++ //
++ // NullContext
++ //
++ NdisZeroMemory(pNullContext, sizeof(TX_CONTEXT));
++
++ //Allocate URB
++ LM_USB_ALLOC(pObj, pNullContext, PTX_BUFFER, sizeof(TX_BUFFER), Status,
++ ("<-- ERROR in Alloc TX NullContext urb!! \n"),
++ out3,
++ ("<-- ERROR in Alloc TX NullContext TX_BUFFER !! \n"),
++ out4);
++
++ pNullContext->pAd = pAd;
++ pNullContext->pIrp = NULL;
++ pNullContext->InUse = FALSE;
++ pNullContext->IRPPending = FALSE;
++
++ //
++ // RTSContext
++ //
++ NdisZeroMemory(pRTSContext, sizeof(TX_CONTEXT));
++
++ //Allocate URB
++ LM_USB_ALLOC(pObj, pRTSContext, PTX_BUFFER, sizeof(TX_BUFFER), Status,
++ ("<-- ERROR in Alloc TX RTSContext urb!! \n"),
++ out4,
++ ("<-- ERROR in Alloc TX RTSContext TX_BUFFER !! \n"),
++ out5);
++
++ pRTSContext->pAd = pAd;
++ pRTSContext->pIrp = NULL;
++ pRTSContext->InUse = FALSE;
++ pRTSContext->IRPPending = FALSE;
++
++ //
++ // PsPollContext
++ //
++ //NdisZeroMemory(pPsPollContext, sizeof(TX_CONTEXT));
++ //Allocate URB
++ LM_USB_ALLOC(pObj, pPsPollContext, PTX_BUFFER, sizeof(TX_BUFFER), Status,
++ ("<-- ERROR in Alloc TX PsPollContext urb!! \n"),
++ out5,
++ ("<-- ERROR in Alloc TX PsPollContext TX_BUFFER !! \n"),
++ out6);
++
++ pPsPollContext->pAd = pAd;
++ pPsPollContext->pIrp = NULL;
++ pPsPollContext->InUse = FALSE;
++ pPsPollContext->IRPPending = FALSE;
++ pPsPollContext->bAggregatible = FALSE;
++ pPsPollContext->LastOne = TRUE;
++
++ } while (FALSE);
++
++
++done:
++ DBGPRINT(RT_DEBUG_TRACE, ("<-- NICInitTransmit\n"));
++
++ return Status;
++
++ /* --------------------------- ERROR HANDLE --------------------------- */
++out6:
++ LM_URB_FREE(pObj, pPsPollContext, sizeof(TX_BUFFER));
++
++out5:
++ LM_URB_FREE(pObj, pRTSContext, sizeof(TX_BUFFER));
++
++out4:
++ LM_URB_FREE(pObj, pNullContext, sizeof(TX_BUFFER));
++
++out3:
++ for(i=0; i<BEACON_RING_SIZE; i++)
++ {
++ PTX_CONTEXT pBeaconContext = &(pAd->BeaconContext[i]);
++ if (pBeaconContext)
++ LM_URB_FREE(pObj, pBeaconContext, sizeof(TX_BUFFER));
++ }
++
++out2:
++ if (pAd->MgmtDescRing.AllocVa)
++ {
++ pMgmtRing = &pAd->MgmtRing;
++ for(i=0; i<MGMT_RING_SIZE; i++)
++ {
++ pMLMEContext = (PTX_CONTEXT) pAd->MgmtRing.Cell[i].AllocVa;
++ if (pMLMEContext)
++ LM_URB_FREE(pObj, pMLMEContext, sizeof(TX_BUFFER));
++ }
++ NdisFreeMemory(pAd->MgmtDescRing.AllocVa, pAd->MgmtDescRing.AllocSize, 0);
++ pAd->MgmtDescRing.AllocVa = NULL;
++ }
++
++out1:
++ for (acidx = 0; acidx < 4; acidx++)
++ {
++ PHT_TX_CONTEXT pTxContext = &(pAd->TxContext[acidx]);
++ if (pTxContext)
++ LM_URB_FREE(pObj, pTxContext, sizeof(HTTX_BUFFER));
++ }
++
++ // Here we didn't have any pre-allocated memory need to free.
++
++ return Status;
++}
++
++
++/*
++========================================================================
++Routine Description:
++ Allocate DMA memory blocks for send, receive.
++
++Arguments:
++ pAd Pointer to our adapter
++
++Return Value:
++ NDIS_STATUS_SUCCESS
++ NDIS_STATUS_FAILURE
++ NDIS_STATUS_RESOURCES
++
++Note:
++========================================================================
++*/
++NDIS_STATUS RTMPAllocTxRxRingMemory(
++ IN PRTMP_ADAPTER pAd)
++{
++// COUNTER_802_11 pCounter = &pAd->WlanCounters;
++ NDIS_STATUS Status;
++ INT num;
++
++
++ DBGPRINT(RT_DEBUG_TRACE, ("--> RTMPAllocTxRxRingMemory\n"));
++
++
++ do
++ {
++ // Init the CmdQ and CmdQLock
++ NdisAllocateSpinLock(&pAd->CmdQLock);
++ NdisAcquireSpinLock(&pAd->CmdQLock);
++ RTUSBInitializeCmdQ(&pAd->CmdQ);
++ NdisReleaseSpinLock(&pAd->CmdQLock);
++
++
++ NdisAllocateSpinLock(&pAd->MLMEBulkOutLock);
++ //NdisAllocateSpinLock(&pAd->MLMEWaitQueueLock);
++ NdisAllocateSpinLock(&pAd->BulkOutLock[0]);
++ NdisAllocateSpinLock(&pAd->BulkOutLock[1]);
++ NdisAllocateSpinLock(&pAd->BulkOutLock[2]);
++ NdisAllocateSpinLock(&pAd->BulkOutLock[3]);
++ NdisAllocateSpinLock(&pAd->BulkOutLock[4]);
++ NdisAllocateSpinLock(&pAd->BulkOutLock[5]);
++ NdisAllocateSpinLock(&pAd->BulkInLock);
++
++ for (num = 0; num < NUM_OF_TX_RING; num++)
++ {
++ NdisAllocateSpinLock(&pAd->TxContextQueueLock[num]);
++ }
++
++#ifdef RALINK_ATE
++ NdisAllocateSpinLock(&pAd->GenericLock);
++#endif // RALINK_ATE //
++
++// NdisAllocateSpinLock(&pAd->MemLock); // Not used in RT28XX
++
++// NdisAllocateSpinLock(&pAd->MacTabLock); // init it in UserCfgInit()
++// NdisAllocateSpinLock(&pAd->BATabLock); // init it in BATableInit()
++
++// for(num=0; num<MAX_LEN_OF_BA_REC_TABLE; num++)
++// {
++// NdisAllocateSpinLock(&pAd->BATable.BARecEntry[num].RxReRingLock);
++// }
++
++ //
++ // Init Mac Table
++ //
++// MacTableInitialize(pAd);
++
++ //
++ // Init send data structures and related parameters
++ //
++ Status = NICInitTransmit(pAd);
++ if (Status != NDIS_STATUS_SUCCESS)
++ break;
++
++ //
++ // Init receive data structures and related parameters
++ //
++ Status = NICInitRecv(pAd);
++ if (Status != NDIS_STATUS_SUCCESS)
++ break;
++
++ pAd->PendingIoCount = 1;
++
++ } while (FALSE);
++
++ NdisZeroMemory(&pAd->FragFrame, sizeof(FRAGMENT_FRAME));
++ pAd->FragFrame.pFragPacket = RTMP_AllocateFragPacketBuffer(pAd, RX_BUFFER_NORMSIZE);
++
++ if (pAd->FragFrame.pFragPacket == NULL)
++ {
++ Status = NDIS_STATUS_RESOURCES;
++ }
++
++ DBGPRINT_S(Status, ("<-- RTMPAllocTxRxRingMemory, Status=%x\n", Status));
++ return Status;
++}
++
++
++/*
++========================================================================
++Routine Description:
++ Calls USB_InterfaceStop and frees memory allocated for the URBs
++ calls NdisMDeregisterDevice and frees the memory
++ allocated in VNetInitialize for the Adapter Object
++
++Arguments:
++ *pAd the raxx interface data pointer
++
++Return Value:
++ None
++
++Note:
++========================================================================
++*/
++VOID RTMPFreeTxRxRingMemory(
++ IN PRTMP_ADAPTER pAd)
++{
++#define LM_URB_FREE(pObj, Context, BufferSize) \
++ if (NULL != Context->pUrb) { \
++ RTUSB_UNLINK_URB(Context->pUrb); \
++ RTUSB_FREE_URB(Context->pUrb); \
++ Context->pUrb = NULL; } \
++ if (NULL != Context->TransferBuffer) { \
++ RTUSB_URB_FREE_BUFFER(pObj->pUsb_Dev, BufferSize, \
++ Context->TransferBuffer, \
++ Context->data_dma); \
++ Context->TransferBuffer = NULL; }
++
++
++ UINT i, acidx;
++ PTX_CONTEXT pNullContext = &pAd->NullContext;
++ PTX_CONTEXT pPsPollContext = &pAd->PsPollContext;
++ PTX_CONTEXT pRTSContext = &pAd->RTSContext;
++// PHT_TX_CONTEXT pHTTXContext;
++ //PRTMP_REORDERBUF pReorderBuf;
++ POS_COOKIE pObj = (POS_COOKIE) pAd->OS_Cookie;
++// RTMP_TX_RING *pTxRing;
++
++ DBGPRINT(RT_DEBUG_ERROR, ("---> RTMPFreeTxRxRingMemory\n"));
++ pObj = pObj;
++
++ // Free all resources for the RECEIVE buffer queue.
++ for(i=0; i<(RX_RING_SIZE); i++)
++ {
++ PRX_CONTEXT pRxContext = &(pAd->RxContext[i]);
++ if (pRxContext)
++ LM_URB_FREE(pObj, pRxContext, MAX_RXBULK_SIZE);
++ }
++
++ // Free PsPoll frame resource
++ LM_URB_FREE(pObj, pPsPollContext, sizeof(TX_BUFFER));
++
++ // Free NULL frame resource
++ LM_URB_FREE(pObj, pNullContext, sizeof(TX_BUFFER));
++
++ // Free RTS frame resource
++ LM_URB_FREE(pObj, pRTSContext, sizeof(TX_BUFFER));
++
++
++ // Free beacon frame resource
++ for(i=0; i<BEACON_RING_SIZE; i++)
++ {
++ PTX_CONTEXT pBeaconContext = &(pAd->BeaconContext[i]);
++ if (pBeaconContext)
++ LM_URB_FREE(pObj, pBeaconContext, sizeof(TX_BUFFER));
++ }
++
++
++ // Free mgmt frame resource
++ for(i = 0; i < MGMT_RING_SIZE; i++)
++ {
++ PTX_CONTEXT pMLMEContext = (PTX_CONTEXT)pAd->MgmtRing.Cell[i].AllocVa;
++ //LM_URB_FREE(pObj, pMLMEContext, sizeof(TX_BUFFER));
++ if (NULL != pAd->MgmtRing.Cell[i].pNdisPacket)
++ {
++ RTMPFreeNdisPacket(pAd, pAd->MgmtRing.Cell[i].pNdisPacket);
++ pAd->MgmtRing.Cell[i].pNdisPacket = NULL;
++ pMLMEContext->TransferBuffer = NULL;
++ }
++
++ if (pMLMEContext)
++ {
++ if (NULL != pMLMEContext->pUrb)
++ {
++ RTUSB_UNLINK_URB(pMLMEContext->pUrb);
++ RTUSB_FREE_URB(pMLMEContext->pUrb);
++ pMLMEContext->pUrb = NULL;
++ }
++ }
++ }
++ if (pAd->MgmtDescRing.AllocVa)
++ NdisFreeMemory(pAd->MgmtDescRing.AllocVa, pAd->MgmtDescRing.AllocSize, 0);
++
++
++ // Free Tx frame resource
++ for (acidx = 0; acidx < 4; acidx++)
++ {
++ PHT_TX_CONTEXT pHTTXContext = &(pAd->TxContext[acidx]);
++ if (pHTTXContext)
++ LM_URB_FREE(pObj, pHTTXContext, sizeof(HTTX_BUFFER));
++ }
++
++ if (pAd->FragFrame.pFragPacket)
++ RELEASE_NDIS_PACKET(pAd, pAd->FragFrame.pFragPacket, NDIS_STATUS_SUCCESS);
++
++ for(i=0; i<6; i++)
++ {
++ NdisFreeSpinLock(&pAd->BulkOutLock[i]);
++ }
++
++ NdisFreeSpinLock(&pAd->BulkInLock);
++ NdisFreeSpinLock(&pAd->MLMEBulkOutLock);
++
++ NdisFreeSpinLock(&pAd->CmdQLock);
++#ifdef RALINK_ATE
++ NdisFreeSpinLock(&pAd->GenericLock);
++#endif // RALINK_ATE //
++ // Clear all pending bulk-out request flags.
++ RTUSB_CLEAR_BULK_FLAG(pAd, 0xffffffff);
++
++// NdisFreeSpinLock(&pAd->MacTabLock);
++
++// for(i=0; i<MAX_LEN_OF_BA_REC_TABLE; i++)
++// {
++// NdisFreeSpinLock(&pAd->BATable.BARecEntry[i].RxReRingLock);
++// }
++
++ DBGPRINT(RT_DEBUG_ERROR, ("<--- ReleaseAdapter\n"));
++}
++
++
++/*
++========================================================================
++Routine Description:
++ Allocate memory for adapter control block.
++
++Arguments:
++ pAd Pointer to our adapter
++
++Return Value:
++ NDIS_STATUS_SUCCESS
++ NDIS_STATUS_FAILURE
++ NDIS_STATUS_RESOURCES
++
++Note:
++========================================================================
++*/
++NDIS_STATUS AdapterBlockAllocateMemory(
++ IN PVOID handle,
++ OUT PVOID *ppAd)
++{
++ PUSB_DEV usb_dev;
++ POS_COOKIE pObj = (POS_COOKIE) handle;
++
++
++ usb_dev = pObj->pUsb_Dev;
++
++ pObj->MLMEThr_pid = THREAD_PID_INIT_VALUE;
++ pObj->RTUSBCmdThr_pid = THREAD_PID_INIT_VALUE;
++
++ *ppAd = (PVOID)vmalloc(sizeof(RTMP_ADAPTER));
++
++ if (*ppAd)
++ {
++ NdisZeroMemory(*ppAd, sizeof(RTMP_ADAPTER));
++ ((PRTMP_ADAPTER)*ppAd)->OS_Cookie = handle;
++ return (NDIS_STATUS_SUCCESS);
++ }
++ else
++ {
++ return (NDIS_STATUS_FAILURE);
++ }
++}
++
++
++/*
++========================================================================
++Routine Description:
++ Create kernel threads & tasklets.
++
++Arguments:
++ *net_dev Pointer to wireless net device interface
++
++Return Value:
++ NDIS_STATUS_SUCCESS
++ NDIS_STATUS_FAILURE
++
++Note:
++========================================================================
++*/
++NDIS_STATUS CreateThreads(
++ IN struct net_device *net_dev)
++{
++ PRTMP_ADAPTER pAd = (PRTMP_ADAPTER) net_dev->priv;
++ POS_COOKIE pObj = (POS_COOKIE) pAd->OS_Cookie;
++ pid_t pid_number = -1;
++
++ //init_MUTEX(&(pAd->usbdev_semaphore));
++
++ init_MUTEX_LOCKED(&(pAd->mlme_semaphore));
++ init_completion (&pAd->mlmeComplete);
++
++ init_MUTEX_LOCKED(&(pAd->RTUSBCmd_semaphore));
++ init_completion (&pAd->CmdQComplete);
++
++ init_MUTEX_LOCKED(&(pAd->RTUSBTimer_semaphore));
++ init_completion (&pAd->TimerQComplete);
++
++ // Creat MLME Thread
++ pObj->MLMEThr_pid= THREAD_PID_INIT_VALUE;
++ pid_number = kernel_thread(MlmeThread, pAd, CLONE_VM);
++ if (pid_number < 0)
++ {
++ printk (KERN_WARNING "%s: unable to start Mlme thread\n",pAd->net_dev->name);
++ return NDIS_STATUS_FAILURE;
++ }
++ pObj->MLMEThr_pid = GET_PID(pid_number);
++ // Wait for the thread to start
++ wait_for_completion(&(pAd->mlmeComplete));
++
++ // Creat Command Thread
++ pObj->RTUSBCmdThr_pid= THREAD_PID_INIT_VALUE;
++ pid_number = kernel_thread(RTUSBCmdThread, pAd, CLONE_VM);
++ if (pid_number < 0)
++ {
++ printk (KERN_WARNING "%s: unable to start RTUSBCmd thread\n",pAd->net_dev->name);
++ return NDIS_STATUS_FAILURE;
++ }
++ pObj->RTUSBCmdThr_pid = GET_PID(pid_number);
++ wait_for_completion(&(pAd->CmdQComplete));
++
++ pObj->TimerQThr_pid= THREAD_PID_INIT_VALUE;
++ pid_number = kernel_thread(TimerQThread, pAd, CLONE_VM);
++ if (pid_number < 0)
++ {
++ printk (KERN_WARNING "%s: unable to start TimerQThread\n",pAd->net_dev->name);
++ return NDIS_STATUS_FAILURE;
++ }
++ pObj->TimerQThr_pid = GET_PID(pid_number);
++ // Wait for the thread to start
++ wait_for_completion(&(pAd->TimerQComplete));
++
++ // Create receive tasklet
++ tasklet_init(&pObj->rx_done_task, rx_done_tasklet, (ULONG)pAd);
++ tasklet_init(&pObj->mgmt_dma_done_task, rt2870_mgmt_dma_done_tasklet, (unsigned long)pAd);
++ tasklet_init(&pObj->ac0_dma_done_task, rt2870_ac0_dma_done_tasklet, (unsigned long)pAd);
++ tasklet_init(&pObj->ac1_dma_done_task, rt2870_ac1_dma_done_tasklet, (unsigned long)pAd);
++ tasklet_init(&pObj->ac2_dma_done_task, rt2870_ac2_dma_done_tasklet, (unsigned long)pAd);
++ tasklet_init(&pObj->ac3_dma_done_task, rt2870_ac3_dma_done_tasklet, (unsigned long)pAd);
++ tasklet_init(&pObj->hcca_dma_done_task, rt2870_hcca_dma_done_tasklet, (unsigned long)pAd);
++ tasklet_init(&pObj->tbtt_task, tbtt_tasklet, (unsigned long)pAd);
++ tasklet_init(&pObj->null_frame_complete_task, rt2870_null_frame_complete_tasklet, (unsigned long)pAd);
++ tasklet_init(&pObj->rts_frame_complete_task, rt2870_rts_frame_complete_tasklet, (unsigned long)pAd);
++ tasklet_init(&pObj->pspoll_frame_complete_task, rt2870_pspoll_frame_complete_tasklet, (unsigned long)pAd);
++
++ return NDIS_STATUS_SUCCESS;
++}
++
++
++#ifdef CONFIG_STA_SUPPORT
++/*
++========================================================================
++Routine Description:
++ As STA's BSSID is a WC too, it uses shared key table.
++ This function write correct unicast TX key to ASIC WCID.
++ And we still make a copy in our MacTab.Content[BSSID_WCID].PairwiseKey.
++ Caller guarantee TKIP/AES always has keyidx = 0. (pairwise key)
++ Caller guarantee WEP calls this function when set Txkey, default key index=0~3.
++
++Arguments:
++ pAd Pointer to our adapter
++ pKey Pointer to the where the key stored
++
++Return Value:
++ NDIS_SUCCESS Add key successfully
++
++Note:
++========================================================================
++*/
++VOID RTMPAddBSSIDCipher(
++ IN PRTMP_ADAPTER pAd,
++ IN UCHAR Aid,
++ IN PNDIS_802_11_KEY pKey,
++ IN UCHAR CipherAlg)
++{
++ PUCHAR pTxMic, pRxMic;
++ BOOLEAN bKeyRSC, bAuthenticator; // indicate the receive SC set by KeyRSC value
++// UCHAR CipherAlg;
++ UCHAR i;
++ ULONG WCIDAttri;
++ USHORT offset;
++ UCHAR KeyIdx, IVEIV[8];
++ UINT32 Value;
++
++ DBGPRINT(RT_DEBUG_TRACE, ("RTMPAddBSSIDCipher==> Aid = %d\n",Aid));
++
++ // Bit 29 of Add-key KeyRSC
++ bKeyRSC = (pKey->KeyIndex & 0x20000000) ? TRUE : FALSE;
++
++ // Bit 28 of Add-key Authenticator
++ bAuthenticator = (pKey->KeyIndex & 0x10000000) ? TRUE : FALSE;
++ KeyIdx = (UCHAR)pKey->KeyIndex&0xff;
++
++ if (KeyIdx > 4)
++ return;
++
++
++ if (pAd->MacTab.Content[Aid].PairwiseKey.CipherAlg == CIPHER_TKIP)
++ { if (pAd->StaCfg.AuthMode == Ndis802_11AuthModeWPANone)
++ {
++ // for WPA-None Tx, Rx MIC is the same
++ pTxMic = (PUCHAR) (&pKey->KeyMaterial) + 16;
++ pRxMic = pTxMic;
++ }
++ else if (bAuthenticator == TRUE)
++ {
++ pTxMic = (PUCHAR) (&pKey->KeyMaterial) + 16;
++ pRxMic = (PUCHAR) (&pKey->KeyMaterial) + 24;
++ }
++ else
++ {
++ pRxMic = (PUCHAR) (&pKey->KeyMaterial) + 16;
++ pTxMic = (PUCHAR) (&pKey->KeyMaterial) + 24;
++ }
++
++ offset = PAIRWISE_KEY_TABLE_BASE + (Aid * HW_KEY_ENTRY_SIZE) + 0x10;
++ for (i=0; i<8; )
++ {
++ Value = *(pTxMic+i);
++ Value += (*(pTxMic+i+1)<<8);
++ Value += (*(pTxMic+i+2)<<16);
++ Value += (*(pTxMic+i+3)<<24);
++ RTUSBWriteMACRegister(pAd, offset+i, Value);
++ i+=4;
++ }
++
++ offset = PAIRWISE_KEY_TABLE_BASE + (Aid * HW_KEY_ENTRY_SIZE) + 0x18;
++ for (i=0; i<8; )
++ {
++ Value = *(pRxMic+i);
++ Value += (*(pRxMic+i+1)<<8);
++ Value += (*(pRxMic+i+2)<<16);
++ Value += (*(pRxMic+i+3)<<24);
++ RTUSBWriteMACRegister(pAd, offset+i, Value);
++ i+=4;
++ }
++
++ // Only Key lenth equal to TKIP key have these
++ NdisMoveMemory(pAd->MacTab.Content[Aid].PairwiseKey.RxMic, pRxMic, 8);
++ NdisMoveMemory(pAd->MacTab.Content[Aid].PairwiseKey.TxMic, pTxMic, 8);
++
++ DBGPRINT(RT_DEBUG_TRACE,
++ (" TxMIC = %02x:%02x:%02x:%02x:%02x:%02x:%02x:%02x \n",
++ pTxMic[0],pTxMic[1],pTxMic[2],pTxMic[3],
++ pTxMic[4],pTxMic[5],pTxMic[6],pTxMic[7]));
++ DBGPRINT(RT_DEBUG_TRACE,
++ (" RxMIC = %02x:%02x:%02x:%02x:%02x:%02x:%02x:%02x \n",
++ pRxMic[0],pRxMic[1],pRxMic[2],pRxMic[3],
++ pRxMic[4],pRxMic[5],pRxMic[6],pRxMic[7]));
++ }
++
++ // 2. Record Security Key.
++ pAd->MacTab.Content[BSSID_WCID].PairwiseKey.KeyLen= (UCHAR)pKey->KeyLength;
++ NdisMoveMemory(pAd->MacTab.Content[Aid].PairwiseKey.Key, &pKey->KeyMaterial, pKey->KeyLength);
++
++ // 3. Check RxTsc. And used to init to ASIC IV.
++ if (bKeyRSC == TRUE)
++ NdisMoveMemory(pAd->MacTab.Content[Aid].PairwiseKey.RxTsc, &pKey->KeyRSC, 6);
++ else
++ NdisZeroMemory(pAd->MacTab.Content[Aid].PairwiseKey.RxTsc, 6);
++
++ // 4. Init TxTsc to one based on WiFi WPA specs
++ pAd->MacTab.Content[Aid].PairwiseKey.TxTsc[0] = 1;
++ pAd->MacTab.Content[Aid].PairwiseKey.TxTsc[1] = 0;
++ pAd->MacTab.Content[Aid].PairwiseKey.TxTsc[2] = 0;
++ pAd->MacTab.Content[Aid].PairwiseKey.TxTsc[3] = 0;
++ pAd->MacTab.Content[Aid].PairwiseKey.TxTsc[4] = 0;
++ pAd->MacTab.Content[Aid].PairwiseKey.TxTsc[5] = 0;
++
++ CipherAlg = pAd->MacTab.Content[Aid].PairwiseKey.CipherAlg;
++
++ offset = PAIRWISE_KEY_TABLE_BASE + (Aid * HW_KEY_ENTRY_SIZE);
++ RTUSBMultiWrite(pAd, (USHORT) offset, pKey->KeyMaterial,
++ ((pKey->KeyLength == LEN_TKIP_KEY) ? 16 : (USHORT)pKey->KeyLength));
++
++ offset = SHARED_KEY_TABLE_BASE + (KeyIdx * HW_KEY_ENTRY_SIZE);
++ RTUSBMultiWrite(pAd, (USHORT) offset, pKey->KeyMaterial, (USHORT)pKey->KeyLength);
++
++ offset = PAIRWISE_IVEIV_TABLE_BASE + (Aid * HW_IVEIV_ENTRY_SIZE);
++ NdisZeroMemory(IVEIV, 8);
++
++ // IV/EIV
++ if ((CipherAlg == CIPHER_TKIP) ||
++ (CipherAlg == CIPHER_TKIP_NO_MIC) ||
++ (CipherAlg == CIPHER_AES))
++ {
++ IVEIV[3] = 0x20; // Eiv bit on. keyid always 0 for pairwise key
++ }
++ // default key idx needs to set.
++ // in TKIP/AES KeyIdx = 0 , WEP KeyIdx is default tx key.
++ else
++ {
++ IVEIV[3] |= (KeyIdx<< 6);
++ }
++ RTUSBMultiWrite(pAd, (USHORT) offset, IVEIV, 8);
++
++ // WCID Attribute UDF:3, BSSIdx:3, Alg:3, Keytable:1=PAIRWISE KEY, BSSIdx is 0
++ if ((CipherAlg == CIPHER_TKIP) ||
++ (CipherAlg == CIPHER_TKIP_NO_MIC) ||
++ (CipherAlg == CIPHER_AES))
++ {
++ WCIDAttri = (CipherAlg<<1)|SHAREDKEYTABLE;
++ }
++ else
++ WCIDAttri = (CipherAlg<<1)|SHAREDKEYTABLE;
++
++ offset = MAC_WCID_ATTRIBUTE_BASE + (Aid* HW_WCID_ATTRI_SIZE);
++ RTUSBWriteMACRegister(pAd, offset, WCIDAttri);
++ RTUSBReadMACRegister(pAd, offset, &Value);
++
++ DBGPRINT(RT_DEBUG_TRACE, ("BSSID_WCID : offset = %x, WCIDAttri = %lx\n",
++ offset, WCIDAttri));
++
++ // pAddr
++ // Add Bssid mac address at linkup. not here. check!
++ /*offset = MAC_WCID_BASE + (BSSID_WCID * HW_WCID_ENTRY_SIZE);
++ *for (i=0; i<MAC_ADDR_LEN; i++)
++ {
++ RTMP_IO_WRITE8(pAd, offset+i, pKey->BSSID[i]);
++ }
++ */
++
++ DBGPRINT(RT_DEBUG_ERROR, ("AddBSSIDasWCIDEntry: Alg=%s, KeyLength = %d\n",
++ CipherName[CipherAlg], pKey->KeyLength));
++ DBGPRINT(RT_DEBUG_TRACE, ("Key [idx=%x] [KeyLen = %d]\n",
++ pKey->KeyIndex, pKey->KeyLength));
++ for(i=0; i<pKey->KeyLength; i++)
++ DBGPRINT_RAW(RT_DEBUG_TRACE,(" %x:", pKey->KeyMaterial[i]));
++ DBGPRINT(RT_DEBUG_TRACE,(" \n"));
++}
++#endif // CONFIG_STA_SUPPORT //
++
++/*
++========================================================================
++Routine Description:
++ Get a received packet.
++
++Arguments:
++ pAd device control block
++ pSaveRxD receive descriptor information
++ *pbReschedule need reschedule flag
++ *pRxPending pending received packet flag
++
++Return Value:
++ the recieved packet
++
++Note:
++========================================================================
++*/
++#define RT2870_RXDMALEN_FIELD_SIZE 4
++PNDIS_PACKET GetPacketFromRxRing(
++ IN PRTMP_ADAPTER pAd,
++ OUT PRT28XX_RXD_STRUC pSaveRxD,
++ OUT BOOLEAN *pbReschedule,
++ IN OUT UINT32 *pRxPending)
++{
++ PRX_CONTEXT pRxContext;
++ PNDIS_PACKET pSkb;
++ PUCHAR pData;
++ ULONG ThisFrameLen;
++ ULONG RxBufferLength;
++ PRXWI_STRUC pRxWI;
++
++ pRxContext = &pAd->RxContext[pAd->NextRxBulkInReadIndex];
++ if ((pRxContext->Readable == FALSE) || (pRxContext->InUse == TRUE))
++ return NULL;
++
++ RxBufferLength = pRxContext->BulkInOffset - pAd->ReadPosition;
++ if (RxBufferLength < (RT2870_RXDMALEN_FIELD_SIZE + sizeof(RXWI_STRUC) + sizeof(RXINFO_STRUC)))
++ {
++ goto label_null;
++ }
++
++ pData = &pRxContext->TransferBuffer[pAd->ReadPosition]; /* 4KB */
++ // The RXDMA field is 4 bytes, now just use the first 2 bytes. The Length including the (RXWI + MSDU + Padding)
++ ThisFrameLen = *pData + (*(pData+1)<<8);
++ if (ThisFrameLen == 0)
++ {
++ DBGPRINT(RT_DEBUG_TRACE, ("BIRIdx(%d): RXDMALen is zero.[%ld], BulkInBufLen = %ld)\n",
++ pAd->NextRxBulkInReadIndex, ThisFrameLen, pRxContext->BulkInOffset));
++ goto label_null;
++ }
++ if ((ThisFrameLen&0x3) != 0)
++ {
++ DBGPRINT(RT_DEBUG_ERROR, ("BIRIdx(%d): RXDMALen not multiple of 4.[%ld], BulkInBufLen = %ld)\n",
++ pAd->NextRxBulkInReadIndex, ThisFrameLen, pRxContext->BulkInOffset));
++ goto label_null;
++ }
++
++ if ((ThisFrameLen + 8)> RxBufferLength) // 8 for (RT2870_RXDMALEN_FIELD_SIZE + sizeof(RXINFO_STRUC))
++ {
++ DBGPRINT(RT_DEBUG_TRACE,("BIRIdx(%d):FrameLen(0x%lx) outranges. BulkInLen=0x%lx, remaining RxBufLen=0x%lx, ReadPos=0x%lx\n",
++ pAd->NextRxBulkInReadIndex, ThisFrameLen, pRxContext->BulkInOffset, RxBufferLength, pAd->ReadPosition));
++
++ // error frame. finish this loop
++ goto label_null;
++ }
++
++ // skip USB frame length field
++ pData += RT2870_RXDMALEN_FIELD_SIZE;
++ pRxWI = (PRXWI_STRUC)pData;
++#ifdef RT_BIG_ENDIAN
++ RTMPWIEndianChange(pData, TYPE_RXWI);
++#endif // RT_BIG_ENDIAN //
++ if (pRxWI->MPDUtotalByteCount > ThisFrameLen)
++ {
++ DBGPRINT(RT_DEBUG_ERROR, ("%s():pRxWIMPDUtotalByteCount(%d) large than RxDMALen(%ld)\n",
++ __FUNCTION__, pRxWI->MPDUtotalByteCount, ThisFrameLen));
++ goto label_null;
++ }
++#ifdef RT_BIG_ENDIAN
++ RTMPWIEndianChange(pData, TYPE_RXWI);
++#endif // RT_BIG_ENDIAN //
++
++ // allocate a rx packet
++ pSkb = dev_alloc_skb(ThisFrameLen);
++ if (pSkb == NULL)
++ {
++ DBGPRINT(RT_DEBUG_ERROR,("%s():Cannot Allocate sk buffer for this Bulk-In buffer!\n", __FUNCTION__));
++ goto label_null;
++ }
++
++ // copy the rx packet
++ memcpy(skb_put(pSkb, ThisFrameLen), pData, ThisFrameLen);
++ RTPKT_TO_OSPKT(pSkb)->dev = get_netdev_from_bssid(pAd, BSS0);
++ RTMP_SET_PACKET_SOURCE(OSPKT_TO_RTPKT(pSkb), PKTSRC_NDIS);
++
++ // copy RxD
++ *pSaveRxD = *(PRXINFO_STRUC)(pData + ThisFrameLen);
++#ifdef RT_BIG_ENDIAN
++ RTMPDescriptorEndianChange((PUCHAR)pSaveRxD, TYPE_RXINFO);
++#endif // RT_BIG_ENDIAN //
++
++ // update next packet read position.
++ pAd->ReadPosition += (ThisFrameLen + RT2870_RXDMALEN_FIELD_SIZE + RXINFO_SIZE); // 8 for (RT2870_RXDMALEN_FIELD_SIZE + sizeof(RXINFO_STRUC))
++
++ return pSkb;
++
++label_null:
++
++ return NULL;
++}
++
++
++/*
++========================================================================
++Routine Description:
++ Handle received packets.
++
++Arguments:
++ data - URB information pointer
++
++Return Value:
++ None
++
++Note:
++========================================================================
++*/
++static void rx_done_tasklet(unsigned long data)
++{
++ purbb_t pUrb;
++ PRX_CONTEXT pRxContext;
++ PRTMP_ADAPTER pAd;
++ NTSTATUS Status;
++ unsigned int IrqFlags;
++
++ pUrb = (purbb_t)data;
++ pRxContext = (PRX_CONTEXT)pUrb->context;
++ pAd = pRxContext->pAd;
++ Status = pUrb->status;
++
++
++ RTMP_IRQ_LOCK(&pAd->BulkInLock, IrqFlags);
++ pRxContext->InUse = FALSE;
++ pRxContext->IRPPending = FALSE;
++ pRxContext->BulkInOffset += pUrb->actual_length;
++ //NdisInterlockedDecrement(&pAd->PendingRx);
++ pAd->PendingRx--;
++
++ if (Status == USB_ST_NOERROR)
++ {
++ pAd->BulkInComplete++;
++ pAd->NextRxBulkInPosition = 0;
++ if (pRxContext->BulkInOffset) // As jan's comment, it may bulk-in success but size is zero.
++ {
++ pRxContext->Readable = TRUE;
++ INC_RING_INDEX(pAd->NextRxBulkInIndex, RX_RING_SIZE);
++ }
++ RTMP_IRQ_UNLOCK(&pAd->BulkInLock, IrqFlags);
++ }
++ else // STATUS_OTHER
++ {
++ pAd->BulkInCompleteFail++;
++ // Still read this packet although it may comtain wrong bytes.
++ pRxContext->Readable = FALSE;
++ RTMP_IRQ_UNLOCK(&pAd->BulkInLock, IrqFlags);
++
++ // Parsing all packets. because after reset, the index will reset to all zero.
++ if ((!RTMP_TEST_FLAG(pAd, (fRTMP_ADAPTER_RESET_IN_PROGRESS |
++ fRTMP_ADAPTER_BULKIN_RESET |
++ fRTMP_ADAPTER_HALT_IN_PROGRESS |
++ fRTMP_ADAPTER_NIC_NOT_EXIST))))
++ {
++
++ DBGPRINT_RAW(RT_DEBUG_ERROR, ("Bulk In Failed. Status=%d, BIIdx=0x%x, BIRIdx=0x%x, actual_length= 0x%x\n",
++ Status, pAd->NextRxBulkInIndex, pAd->NextRxBulkInReadIndex, pRxContext->pUrb->actual_length));
++
++ RTMP_SET_FLAG(pAd, fRTMP_ADAPTER_BULKIN_RESET);
++ RTUSBEnqueueInternalCmd(pAd, CMDTHREAD_RESET_BULK_IN, NULL, 0);
++ }
++ }
++
++ ASSERT((pRxContext->InUse == pRxContext->IRPPending));
++
++#ifdef RALINK_ATE
++ if (ATE_ON(pAd))
++ {
++ // If the driver is in ATE mode and Rx frame is set into here.
++ if (pAd->ContinBulkIn == TRUE)
++ {
++ RTUSBBulkReceive(pAd);
++ }
++ }
++ else
++#endif // RALINK_ATE //
++ RTUSBBulkReceive(pAd);
++
++ return;
++
++}
++
++
++static void rt2870_mgmt_dma_done_tasklet(unsigned long data)
++{
++ PRTMP_ADAPTER pAd;
++ PTX_CONTEXT pMLMEContext;
++ int index;
++ PNDIS_PACKET pPacket;
++ purbb_t pUrb;
++ NTSTATUS Status;
++ unsigned long IrqFlags;
++
++
++ pUrb = (purbb_t)data;
++ pMLMEContext = (PTX_CONTEXT)pUrb->context;
++ pAd = pMLMEContext->pAd;
++ Status = pUrb->status;
++ index = pMLMEContext->SelfIdx;
++
++ ASSERT((pAd->MgmtRing.TxDmaIdx == index));
++
++ RTMP_IRQ_LOCK(&pAd->BulkOutLock[MGMTPIPEIDX], IrqFlags);
++
++
++ if (Status != USB_ST_NOERROR)
++ {
++ //Bulk-Out fail status handle
++ if ((!RTMP_TEST_FLAG(pAd, fRTMP_ADAPTER_RESET_IN_PROGRESS)) &&
++ (!RTMP_TEST_FLAG(pAd, fRTMP_ADAPTER_HALT_IN_PROGRESS)) &&
++ (!RTMP_TEST_FLAG(pAd, fRTMP_ADAPTER_NIC_NOT_EXIST)) &&
++ (!RTMP_TEST_FLAG(pAd, fRTMP_ADAPTER_BULKOUT_RESET)))
++ {
++ DBGPRINT_RAW(RT_DEBUG_ERROR, ("Bulk Out MLME Failed, Status=%d!\n", Status));
++ // TODO: How to handle about the MLMEBulkOut failed issue. Need to resend the mgmt pkt?
++ RTMP_SET_FLAG(pAd, fRTMP_ADAPTER_BULKOUT_RESET);
++ pAd->bulkResetPipeid = (MGMTPIPEIDX | BULKOUT_MGMT_RESET_FLAG);
++ }
++ }
++
++ pAd->BulkOutPending[MGMTPIPEIDX] = FALSE;
++ RTMP_IRQ_UNLOCK(&pAd->BulkOutLock[MGMTPIPEIDX], IrqFlags);
++
++ RTMP_IRQ_LOCK(&pAd->MLMEBulkOutLock, IrqFlags);
++ // Reset MLME context flags
++ pMLMEContext->IRPPending = FALSE;
++ pMLMEContext->InUse = FALSE;
++ pMLMEContext->bWaitingBulkOut = FALSE;
++ pMLMEContext->BulkOutSize = 0;
++
++ pPacket = pAd->MgmtRing.Cell[index].pNdisPacket;
++ pAd->MgmtRing.Cell[index].pNdisPacket = NULL;
++
++ // Increase MgmtRing Index
++ INC_RING_INDEX(pAd->MgmtRing.TxDmaIdx, MGMT_RING_SIZE);
++ pAd->MgmtRing.TxSwFreeIdx++;
++ RTMP_IRQ_UNLOCK(&pAd->MLMEBulkOutLock, IrqFlags);
++
++ // No-matter success or fail, we free the mgmt packet.
++ if (pPacket)
++ RTMPFreeNdisPacket(pAd, pPacket);
++
++ if ((RTMP_TEST_FLAG(pAd, (fRTMP_ADAPTER_RESET_IN_PROGRESS |
++ fRTMP_ADAPTER_HALT_IN_PROGRESS |
++ fRTMP_ADAPTER_NIC_NOT_EXIST))))
++ {
++ // do nothing and return directly.
++ }
++ else
++ {
++ if (RTMP_TEST_FLAG(pAd, fRTMP_ADAPTER_BULKOUT_RESET) &&
++ ((pAd->bulkResetPipeid & BULKOUT_MGMT_RESET_FLAG) == BULKOUT_MGMT_RESET_FLAG))
++ { // For Mgmt Bulk-Out failed, ignore it now.
++ RTUSBEnqueueInternalCmd(pAd, CMDTHREAD_RESET_BULK_OUT, NULL, 0);
++ }
++ else
++ {
++
++ // Always call Bulk routine, even reset bulk.
++ // The protectioon of rest bulk should be in BulkOut routine
++ if (pAd->MgmtRing.TxSwFreeIdx < MGMT_RING_SIZE /* pMLMEContext->bWaitingBulkOut == TRUE */)
++ {
++ RTUSB_SET_BULK_FLAG(pAd, fRTUSB_BULK_OUT_MLME);
++ }
++ RTUSBKickBulkOut(pAd);
++ }
++ }
++
++}
++
++
++static void rt2870_hcca_dma_done_tasklet(unsigned long data)
++{
++ PRTMP_ADAPTER pAd;
++ PHT_TX_CONTEXT pHTTXContext;
++ UCHAR BulkOutPipeId = 4;
++ purbb_t pUrb;
++
++
++ DBGPRINT_RAW(RT_DEBUG_ERROR, ("--->hcca_dma_done_tasklet\n"));
++
++
++ pUrb = (purbb_t)data;
++ pHTTXContext = (PHT_TX_CONTEXT)pUrb->context;
++ pAd = pHTTXContext->pAd;
++
++ rt2870_dataout_complete_tasklet((unsigned long)pUrb);
++
++ if ((RTMP_TEST_FLAG(pAd, (fRTMP_ADAPTER_RESET_IN_PROGRESS |
++ fRTMP_ADAPTER_HALT_IN_PROGRESS |
++ fRTMP_ADAPTER_NIC_NOT_EXIST))))
++ {
++ // do nothing and return directly.
++ }
++ else
++ {
++ if (RTMP_TEST_FLAG(pAd, fRTMP_ADAPTER_BULKOUT_RESET))
++ {
++ RTUSBEnqueueInternalCmd(pAd, CMDTHREAD_RESET_BULK_OUT, NULL, 0);
++ }
++ else
++ { pHTTXContext = &pAd->TxContext[BulkOutPipeId];
++ if ((pAd->TxSwQueue[BulkOutPipeId].Number > 0) &&
++ /*((pHTTXContext->CurWritePosition > (pHTTXContext->NextBulkOutPosition + 0x6000)) || (pHTTXContext->NextBulkOutPosition > pHTTXContext->CurWritePosition + 0x6000)) && */
++ (pAd->DeQueueRunning[BulkOutPipeId] == FALSE) &&
++ (pHTTXContext->bCurWriting == FALSE))
++ {
++ RTMPDeQueuePacket(pAd, FALSE, BulkOutPipeId, MAX_TX_PROCESS);
++ }
++
++ RTUSB_SET_BULK_FLAG(pAd, fRTUSB_BULK_OUT_DATA_NORMAL);
++ RTUSBKickBulkOut(pAd);
++ }
++ }
++
++ DBGPRINT_RAW(RT_DEBUG_ERROR, ("<---hcca_dma_done_tasklet\n"));
++
++ return;
++}
++
++
++static void rt2870_ac3_dma_done_tasklet(unsigned long data)
++{
++ PRTMP_ADAPTER pAd;
++ PHT_TX_CONTEXT pHTTXContext;
++ UCHAR BulkOutPipeId = 3;
++ purbb_t pUrb;
++
++
++ pUrb = (purbb_t)data;
++ pHTTXContext = (PHT_TX_CONTEXT)pUrb->context;
++ pAd = pHTTXContext->pAd;
++
++ rt2870_dataout_complete_tasklet((unsigned long)pUrb);
++
++ if ((RTMP_TEST_FLAG(pAd, (fRTMP_ADAPTER_RESET_IN_PROGRESS |
++ fRTMP_ADAPTER_HALT_IN_PROGRESS |
++ fRTMP_ADAPTER_NIC_NOT_EXIST))))
++ {
++ // do nothing and return directly.
++ }
++ else
++ {
++ if (RTMP_TEST_FLAG(pAd, fRTMP_ADAPTER_BULKOUT_RESET))
++ {
++ RTUSBEnqueueInternalCmd(pAd, CMDTHREAD_RESET_BULK_OUT, NULL, 0);
++ }
++ else
++ { pHTTXContext = &pAd->TxContext[BulkOutPipeId];
++ if ((pAd->TxSwQueue[BulkOutPipeId].Number > 0) &&
++ /*((pHTTXContext->CurWritePosition > (pHTTXContext->NextBulkOutPosition + 0x6000)) || (pHTTXContext->NextBulkOutPosition > pHTTXContext->CurWritePosition + 0x6000)) && */
++ (pAd->DeQueueRunning[BulkOutPipeId] == FALSE) &&
++ (pHTTXContext->bCurWriting == FALSE))
++ {
++ RTMPDeQueuePacket(pAd, FALSE, BulkOutPipeId, MAX_TX_PROCESS);
++ }
++
++ RTUSB_SET_BULK_FLAG(pAd, fRTUSB_BULK_OUT_DATA_NORMAL<<3);
++ RTUSBKickBulkOut(pAd);
++ }
++ }
++
++
++ return;
++}
++
++
++static void rt2870_ac2_dma_done_tasklet(unsigned long data)
++{
++ PRTMP_ADAPTER pAd;
++ PHT_TX_CONTEXT pHTTXContext;
++ UCHAR BulkOutPipeId = 2;
++ purbb_t pUrb;
++
++
++ pUrb = (purbb_t)data;
++ pHTTXContext = (PHT_TX_CONTEXT)pUrb->context;
++ pAd = pHTTXContext->pAd;
++
++ rt2870_dataout_complete_tasklet((unsigned long)pUrb);
++
++ if ((RTMP_TEST_FLAG(pAd, (fRTMP_ADAPTER_RESET_IN_PROGRESS |
++ fRTMP_ADAPTER_HALT_IN_PROGRESS |
++ fRTMP_ADAPTER_NIC_NOT_EXIST))))
++ {
++ // do nothing and return directly.
++ }
++ else
++ {
++ if (RTMP_TEST_FLAG(pAd, fRTMP_ADAPTER_BULKOUT_RESET))
++ {
++ RTUSBEnqueueInternalCmd(pAd, CMDTHREAD_RESET_BULK_OUT, NULL, 0);
++ }
++ else
++ { pHTTXContext = &pAd->TxContext[BulkOutPipeId];
++ if ((pAd->TxSwQueue[BulkOutPipeId].Number > 0) &&
++ /*((pHTTXContext->CurWritePosition > (pHTTXContext->NextBulkOutPosition + 0x6000)) || (pHTTXContext->NextBulkOutPosition > pHTTXContext->CurWritePosition + 0x6000)) && */
++ (pAd->DeQueueRunning[BulkOutPipeId] == FALSE) &&
++ (pHTTXContext->bCurWriting == FALSE))
++ {
++ RTMPDeQueuePacket(pAd, FALSE, BulkOutPipeId, MAX_TX_PROCESS);
++ }
++
++ RTUSB_SET_BULK_FLAG(pAd, fRTUSB_BULK_OUT_DATA_NORMAL<<2);
++ RTUSBKickBulkOut(pAd);
++ }
++ }
++
++ return;
++}
++
++
++static void rt2870_ac1_dma_done_tasklet(unsigned long data)
++{
++ PRTMP_ADAPTER pAd;
++ PHT_TX_CONTEXT pHTTXContext;
++ UCHAR BulkOutPipeId = 1;
++ purbb_t pUrb;
++
++
++ pUrb = (purbb_t)data;
++ pHTTXContext = (PHT_TX_CONTEXT)pUrb->context;
++ pAd = pHTTXContext->pAd;
++
++ rt2870_dataout_complete_tasklet((unsigned long)pUrb);
++
++ if ((RTMP_TEST_FLAG(pAd, (fRTMP_ADAPTER_RESET_IN_PROGRESS |
++ fRTMP_ADAPTER_HALT_IN_PROGRESS |
++ fRTMP_ADAPTER_NIC_NOT_EXIST))))
++ {
++ // do nothing and return directly.
++ }
++ else
++ {
++ if (RTMP_TEST_FLAG(pAd, fRTMP_ADAPTER_BULKOUT_RESET))
++ {
++ RTUSBEnqueueInternalCmd(pAd, CMDTHREAD_RESET_BULK_OUT, NULL, 0);
++ }
++ else
++ { pHTTXContext = &pAd->TxContext[BulkOutPipeId];
++ if ((pAd->TxSwQueue[BulkOutPipeId].Number > 0) &&
++ /*((pHTTXContext->CurWritePosition > (pHTTXContext->NextBulkOutPosition + 0x6000)) || (pHTTXContext->NextBulkOutPosition > pHTTXContext->CurWritePosition + 0x6000)) && */
++ (pAd->DeQueueRunning[BulkOutPipeId] == FALSE) &&
++ (pHTTXContext->bCurWriting == FALSE))
++ {
++ RTMPDeQueuePacket(pAd, FALSE, BulkOutPipeId, MAX_TX_PROCESS);
++ }
++
++ RTUSB_SET_BULK_FLAG(pAd, fRTUSB_BULK_OUT_DATA_NORMAL<<1);
++ RTUSBKickBulkOut(pAd);
++ }
++ }
++
++
++ return;
++}
++
++
++static void rt2870_ac0_dma_done_tasklet(unsigned long data)
++{
++ PRTMP_ADAPTER pAd;
++ PHT_TX_CONTEXT pHTTXContext;
++ UCHAR BulkOutPipeId = 0;
++ purbb_t pUrb;
++
++
++ pUrb = (purbb_t)data;
++ pHTTXContext = (PHT_TX_CONTEXT)pUrb->context;
++ pAd = pHTTXContext->pAd;
++
++ rt2870_dataout_complete_tasklet((unsigned long)pUrb);
++
++ if ((RTMP_TEST_FLAG(pAd, (fRTMP_ADAPTER_RESET_IN_PROGRESS |
++ fRTMP_ADAPTER_HALT_IN_PROGRESS |
++ fRTMP_ADAPTER_NIC_NOT_EXIST))))
++ {
++ // do nothing and return directly.
++ }
++ else
++ {
++ if (RTMP_TEST_FLAG(pAd, fRTMP_ADAPTER_BULKOUT_RESET))
++ {
++ RTUSBEnqueueInternalCmd(pAd, CMDTHREAD_RESET_BULK_OUT, NULL, 0);
++ }
++ else
++ { pHTTXContext = &pAd->TxContext[BulkOutPipeId];
++ if ((pAd->TxSwQueue[BulkOutPipeId].Number > 0) &&
++ /* ((pHTTXContext->CurWritePosition > (pHTTXContext->NextBulkOutPosition + 0x6000)) || (pHTTXContext->NextBulkOutPosition > pHTTXContext->CurWritePosition + 0x6000)) && */
++ (pAd->DeQueueRunning[BulkOutPipeId] == FALSE) &&
++ (pHTTXContext->bCurWriting == FALSE))
++ {
++ RTMPDeQueuePacket(pAd, FALSE, BulkOutPipeId, MAX_TX_PROCESS);
++ }
++
++ RTUSB_SET_BULK_FLAG(pAd, fRTUSB_BULK_OUT_DATA_NORMAL);
++ RTUSBKickBulkOut(pAd);
++ }
++ }
++
++
++ return;
++
++}
++
++
++static void rt2870_null_frame_complete_tasklet(unsigned long data)
++{
++ PRTMP_ADAPTER pAd;
++ PTX_CONTEXT pNullContext;
++ purbb_t pUrb;
++ NTSTATUS Status;
++ unsigned long irqFlag;
++
++
++ pUrb = (purbb_t)data;
++ pNullContext = (PTX_CONTEXT)pUrb->context;
++ pAd = pNullContext->pAd;
++ Status = pUrb->status;
++
++ // Reset Null frame context flags
++ RTMP_IRQ_LOCK(&pAd->BulkOutLock[0], irqFlag);
++ pNullContext->IRPPending = FALSE;
++ pNullContext->InUse = FALSE;
++ pAd->BulkOutPending[0] = FALSE;
++ pAd->watchDogTxPendingCnt[0] = 0;
++
++ if (Status == USB_ST_NOERROR)
++ {
++ RTMP_IRQ_UNLOCK(&pAd->BulkOutLock[0], irqFlag);
++
++ RTMPDeQueuePacket(pAd, FALSE, NUM_OF_TX_RING, MAX_TX_PROCESS);
++ }
++ else // STATUS_OTHER
++ {
++ if ((!RTMP_TEST_FLAG(pAd, fRTMP_ADAPTER_RESET_IN_PROGRESS)) &&
++ (!RTMP_TEST_FLAG(pAd, fRTMP_ADAPTER_HALT_IN_PROGRESS)) &&
++ (!RTMP_TEST_FLAG(pAd, fRTMP_ADAPTER_NIC_NOT_EXIST)) &&
++ (!RTMP_TEST_FLAG(pAd, fRTMP_ADAPTER_BULKOUT_RESET)))
++ {
++ DBGPRINT_RAW(RT_DEBUG_ERROR, ("Bulk Out Null Frame Failed, ReasonCode=%d!\n", Status));
++ RTMP_SET_FLAG(pAd, fRTMP_ADAPTER_BULKOUT_RESET);
++ pAd->bulkResetPipeid = (MGMTPIPEIDX | BULKOUT_MGMT_RESET_FLAG);
++ RTMP_IRQ_UNLOCK(&pAd->BulkOutLock[0], irqFlag);
++ RTUSBEnqueueInternalCmd(pAd, CMDTHREAD_RESET_BULK_OUT, NULL, 0);
++ }
++ else
++ {
++ RTMP_IRQ_UNLOCK(&pAd->BulkOutLock[0], irqFlag);
++ }
++ }
++
++ // Always call Bulk routine, even reset bulk.
++ // The protectioon of rest bulk should be in BulkOut routine
++ RTUSBKickBulkOut(pAd);
++
++}
++
++
++static void rt2870_rts_frame_complete_tasklet(unsigned long data)
++{
++ PRTMP_ADAPTER pAd;
++ PTX_CONTEXT pRTSContext;
++ purbb_t pUrb;
++ NTSTATUS Status;
++ unsigned long irqFlag;
++
++
++ pUrb = (purbb_t)data;
++ pRTSContext = (PTX_CONTEXT)pUrb->context;
++ pAd = pRTSContext->pAd;
++ Status = pUrb->status;
++
++ // Reset RTS frame context flags
++ RTMP_IRQ_LOCK(&pAd->BulkOutLock[0], irqFlag);
++ pRTSContext->IRPPending = FALSE;
++ pRTSContext->InUse = FALSE;
++
++ if (Status == USB_ST_NOERROR)
++ {
++ RTMP_IRQ_UNLOCK(&pAd->BulkOutLock[0], irqFlag);
++ RTMPDeQueuePacket(pAd, FALSE, NUM_OF_TX_RING, MAX_TX_PROCESS);
++ }
++ else // STATUS_OTHER
++ {
++ if ((!RTMP_TEST_FLAG(pAd, fRTMP_ADAPTER_RESET_IN_PROGRESS)) &&
++ (!RTMP_TEST_FLAG(pAd, fRTMP_ADAPTER_HALT_IN_PROGRESS)) &&
++ (!RTMP_TEST_FLAG(pAd, fRTMP_ADAPTER_NIC_NOT_EXIST)) &&
++ (!RTMP_TEST_FLAG(pAd, fRTMP_ADAPTER_BULKOUT_RESET)))
++ {
++ DBGPRINT_RAW(RT_DEBUG_ERROR, ("Bulk Out RTS Frame Failed\n"));
++ RTMP_SET_FLAG(pAd, fRTMP_ADAPTER_BULKOUT_RESET);
++ pAd->bulkResetPipeid = (MGMTPIPEIDX | BULKOUT_MGMT_RESET_FLAG);
++ RTMP_IRQ_UNLOCK(&pAd->BulkOutLock[0], irqFlag);
++ RTUSBEnqueueInternalCmd(pAd, CMDTHREAD_RESET_BULK_OUT, NULL, 0);
++ }
++ else
++ {
++ RTMP_IRQ_UNLOCK(&pAd->BulkOutLock[0], irqFlag);
++ }
++ }
++
++ RTMP_SEM_LOCK(&pAd->BulkOutLock[pRTSContext->BulkOutPipeId]);
++ pAd->BulkOutPending[pRTSContext->BulkOutPipeId] = FALSE;
++ RTMP_SEM_UNLOCK(&pAd->BulkOutLock[pRTSContext->BulkOutPipeId]);
++
++ // Always call Bulk routine, even reset bulk.
++ // The protectioon of rest bulk should be in BulkOut routine
++ RTUSBKickBulkOut(pAd);
++
++}
++
++
++static void rt2870_pspoll_frame_complete_tasklet(unsigned long data)
++{
++ PRTMP_ADAPTER pAd;
++ PTX_CONTEXT pPsPollContext;
++ purbb_t pUrb;
++ NTSTATUS Status;
++
++
++ pUrb = (purbb_t)data;
++ pPsPollContext = (PTX_CONTEXT)pUrb->context;
++ pAd = pPsPollContext->pAd;
++ Status = pUrb->status;
++
++ // Reset PsPoll context flags
++ pPsPollContext->IRPPending = FALSE;
++ pPsPollContext->InUse = FALSE;
++ pAd->watchDogTxPendingCnt[0] = 0;
++
++ if (Status == USB_ST_NOERROR)
++ {
++ RTMPDeQueuePacket(pAd, FALSE, NUM_OF_TX_RING, MAX_TX_PROCESS);
++ }
++ else // STATUS_OTHER
++ {
++ if ((!RTMP_TEST_FLAG(pAd, fRTMP_ADAPTER_RESET_IN_PROGRESS)) &&
++ (!RTMP_TEST_FLAG(pAd, fRTMP_ADAPTER_HALT_IN_PROGRESS)) &&
++ (!RTMP_TEST_FLAG(pAd, fRTMP_ADAPTER_NIC_NOT_EXIST)) &&
++ (!RTMP_TEST_FLAG(pAd, fRTMP_ADAPTER_BULKOUT_RESET)))
++ {
++ DBGPRINT_RAW(RT_DEBUG_ERROR, ("Bulk Out PSPoll Failed\n"));
++ RTMP_SET_FLAG(pAd, fRTMP_ADAPTER_BULKOUT_RESET);
++ pAd->bulkResetPipeid = (MGMTPIPEIDX | BULKOUT_MGMT_RESET_FLAG);
++ RTUSBEnqueueInternalCmd(pAd, CMDTHREAD_RESET_BULK_OUT, NULL, 0);
++ }
++ }
++
++ RTMP_SEM_LOCK(&pAd->BulkOutLock[0]);
++ pAd->BulkOutPending[0] = FALSE;
++ RTMP_SEM_UNLOCK(&pAd->BulkOutLock[0]);
++
++ // Always call Bulk routine, even reset bulk.
++ // The protectioon of rest bulk should be in BulkOut routine
++ RTUSBKickBulkOut(pAd);
++
++}
++
++
++static void rt2870_dataout_complete_tasklet(unsigned long data)
++{
++ PRTMP_ADAPTER pAd;
++ purbb_t pUrb;
++ POS_COOKIE pObj;
++ PHT_TX_CONTEXT pHTTXContext;
++ UCHAR BulkOutPipeId;
++ NTSTATUS Status;
++ unsigned long IrqFlags;
++
++
++ pUrb = (purbb_t)data;
++ pHTTXContext = (PHT_TX_CONTEXT)pUrb->context;
++ pAd = pHTTXContext->pAd;
++ pObj = (POS_COOKIE) pAd->OS_Cookie;
++ Status = pUrb->status;
++
++ // Store BulkOut PipeId
++ BulkOutPipeId = pHTTXContext->BulkOutPipeId;
++ pAd->BulkOutDataOneSecCount++;
++
++ //DBGPRINT(RT_DEBUG_LOUD, ("Done-B(%d):I=0x%lx, CWPos=%ld, NBPos=%ld, ENBPos=%ld, bCopy=%d!\n", BulkOutPipeId, in_interrupt(), pHTTXContext->CurWritePosition,
++ // pHTTXContext->NextBulkOutPosition, pHTTXContext->ENextBulkOutPosition, pHTTXContext->bCopySavePad));
++
++ RTMP_IRQ_LOCK(&pAd->BulkOutLock[BulkOutPipeId], IrqFlags);
++ pAd->BulkOutPending[BulkOutPipeId] = FALSE;
++ pHTTXContext->IRPPending = FALSE;
++ pAd->watchDogTxPendingCnt[BulkOutPipeId] = 0;
++
++ if (Status == USB_ST_NOERROR)
++ {
++ pAd->BulkOutComplete++;
++
++ RTMP_IRQ_UNLOCK(&pAd->BulkOutLock[BulkOutPipeId], IrqFlags);
++
++ pAd->Counters8023.GoodTransmits++;
++ //RTMP_IRQ_LOCK(&pAd->TxContextQueueLock[BulkOutPipeId], IrqFlags);
++ FREE_HTTX_RING(pAd, BulkOutPipeId, pHTTXContext);
++ //RTMP_IRQ_UNLOCK(&pAd->TxContextQueueLock[BulkOutPipeId], IrqFlags);
++
++
++ }
++ else // STATUS_OTHER
++ {
++ PUCHAR pBuf;
++
++ pAd->BulkOutCompleteOther++;
++
++ pBuf = &pHTTXContext->TransferBuffer->field.WirelessPacket[pHTTXContext->NextBulkOutPosition];
++
++ if (!RTMP_TEST_FLAG(pAd, (fRTMP_ADAPTER_RESET_IN_PROGRESS |
++ fRTMP_ADAPTER_HALT_IN_PROGRESS |
++ fRTMP_ADAPTER_NIC_NOT_EXIST |
++ fRTMP_ADAPTER_BULKOUT_RESET)))
++ {
++ RTMP_SET_FLAG(pAd, fRTMP_ADAPTER_BULKOUT_RESET);
++ pAd->bulkResetPipeid = BulkOutPipeId;
++ pAd->bulkResetReq[BulkOutPipeId] = pAd->BulkOutReq;
++ }
++ RTMP_IRQ_UNLOCK(&pAd->BulkOutLock[BulkOutPipeId], IrqFlags);
++
++ DBGPRINT_RAW(RT_DEBUG_ERROR, ("BulkOutDataPacket failed: ReasonCode=%d!\n", Status));
++ DBGPRINT_RAW(RT_DEBUG_ERROR, ("\t>>BulkOut Req=0x%lx, Complete=0x%lx, Other=0x%lx\n", pAd->BulkOutReq, pAd->BulkOutComplete, pAd->BulkOutCompleteOther));
++ DBGPRINT_RAW(RT_DEBUG_ERROR, ("\t>>BulkOut Header:%x %x %x %x %x %x %x %x\n", pBuf[0], pBuf[1], pBuf[2], pBuf[3], pBuf[4], pBuf[5], pBuf[6], pBuf[7]));
++ //DBGPRINT_RAW(RT_DEBUG_ERROR, (">>BulkOutCompleteCancel=0x%x, BulkOutCompleteOther=0x%x\n", pAd->BulkOutCompleteCancel, pAd->BulkOutCompleteOther));
++
++ }
++
++ //
++ // bInUse = TRUE, means some process are filling TX data, after that must turn on bWaitingBulkOut
++ // bWaitingBulkOut = TRUE, means the TX data are waiting for bulk out.
++ //
++ //RTMP_IRQ_LOCK(&pAd->TxContextQueueLock[BulkOutPipeId], IrqFlags);
++ if ((pHTTXContext->ENextBulkOutPosition != pHTTXContext->CurWritePosition) &&
++ (pHTTXContext->ENextBulkOutPosition != (pHTTXContext->CurWritePosition+8)) &&
++ !RTUSB_TEST_BULK_FLAG(pAd, (fRTUSB_BULK_OUT_DATA_FRAG << BulkOutPipeId)))
++ {
++ // Indicate There is data avaliable
++ RTUSB_SET_BULK_FLAG(pAd, (fRTUSB_BULK_OUT_DATA_NORMAL << BulkOutPipeId));
++ }
++ //RTMP_IRQ_UNLOCK(&pAd->TxContextQueueLock[BulkOutPipeId], IrqFlags);
++
++ // Always call Bulk routine, even reset bulk.
++ // The protection of rest bulk should be in BulkOut routine
++ RTUSBKickBulkOut(pAd);
++}
++
++/* End of 2870_rtmp_init.c */
+--- /dev/null
++++ b/drivers/staging/rt2870/common/action.c
+@@ -0,0 +1,1046 @@
++/*
++ *************************************************************************
++ * Ralink Tech Inc.
++ * 5F., No.36, Taiyuan St., Jhubei City,
++ * Hsinchu County 302,
++ * Taiwan, R.O.C.
++ *
++ * (c) Copyright 2002-2007, Ralink Technology, Inc.
++ *
++ * This program is free software; you can redistribute it and/or modify *
++ * it under the terms of the GNU General Public License as published by *
++ * the Free Software Foundation; either version 2 of the License, or *
++ * (at your option) any later version. *
++ * *
++ * This program is distributed in the hope that it will be useful, *
++ * but WITHOUT ANY WARRANTY; without even the implied warranty of *
++ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the *
++ * GNU General Public License for more details. *
++ * *
++ * You should have received a copy of the GNU General Public License *
++ * along with this program; if not, write to the *
++ * Free Software Foundation, Inc., *
++ * 59 Temple Place - Suite 330, Boston, MA 02111-1307, USA. *
++ * *
++ *************************************************************************
++
++ Module Name:
++ action.c
++
++ Abstract:
++ Handle association related requests either from WSTA or from local MLME
++
++ Revision History:
++ Who When What
++ -------- ---------- ----------------------------------------------
++ Jan Lee 2006 created for rt2860
++ */
++
++#include "../rt_config.h"
++#include "action.h"
++
++
++static VOID ReservedAction(
++ IN PRTMP_ADAPTER pAd,
++ IN MLME_QUEUE_ELEM *Elem);
++
++/*
++ ==========================================================================
++ Description:
++ association state machine init, including state transition and timer init
++ Parameters:
++ S - pointer to the association state machine
++ Note:
++ The state machine looks like the following
++
++ ASSOC_IDLE
++ MT2_MLME_DISASSOC_REQ mlme_disassoc_req_action
++ MT2_PEER_DISASSOC_REQ peer_disassoc_action
++ MT2_PEER_ASSOC_REQ drop
++ MT2_PEER_REASSOC_REQ drop
++ MT2_CLS3ERR cls3err_action
++ ==========================================================================
++ */
++VOID ActionStateMachineInit(
++ IN PRTMP_ADAPTER pAd,
++ IN STATE_MACHINE *S,
++ OUT STATE_MACHINE_FUNC Trans[])
++{
++ StateMachineInit(S, (STATE_MACHINE_FUNC *)Trans, MAX_ACT_STATE, MAX_ACT_MSG, (STATE_MACHINE_FUNC)Drop, ACT_IDLE, ACT_MACHINE_BASE);
++
++ StateMachineSetAction(S, ACT_IDLE, MT2_PEER_SPECTRUM_CATE, (STATE_MACHINE_FUNC)PeerSpectrumAction);
++ StateMachineSetAction(S, ACT_IDLE, MT2_PEER_QOS_CATE, (STATE_MACHINE_FUNC)PeerQOSAction);
++
++ StateMachineSetAction(S, ACT_IDLE, MT2_PEER_DLS_CATE, (STATE_MACHINE_FUNC)ReservedAction);
++#ifdef QOS_DLS_SUPPORT
++ StateMachineSetAction(S, ACT_IDLE, MT2_PEER_DLS_CATE, (STATE_MACHINE_FUNC)PeerDLSAction);
++#endif // QOS_DLS_SUPPORT //
++
++#ifdef DOT11_N_SUPPORT
++ StateMachineSetAction(S, ACT_IDLE, MT2_PEER_BA_CATE, (STATE_MACHINE_FUNC)PeerBAAction);
++ StateMachineSetAction(S, ACT_IDLE, MT2_PEER_HT_CATE, (STATE_MACHINE_FUNC)PeerHTAction);
++ StateMachineSetAction(S, ACT_IDLE, MT2_MLME_ADD_BA_CATE, (STATE_MACHINE_FUNC)MlmeADDBAAction);
++ StateMachineSetAction(S, ACT_IDLE, MT2_MLME_ORI_DELBA_CATE, (STATE_MACHINE_FUNC)MlmeDELBAAction);
++ StateMachineSetAction(S, ACT_IDLE, MT2_MLME_REC_DELBA_CATE, (STATE_MACHINE_FUNC)MlmeDELBAAction);
++#endif // DOT11_N_SUPPORT //
++
++ StateMachineSetAction(S, ACT_IDLE, MT2_PEER_PUBLIC_CATE, (STATE_MACHINE_FUNC)PeerPublicAction);
++ StateMachineSetAction(S, ACT_IDLE, MT2_PEER_RM_CATE, (STATE_MACHINE_FUNC)PeerRMAction);
++
++ StateMachineSetAction(S, ACT_IDLE, MT2_MLME_QOS_CATE, (STATE_MACHINE_FUNC)MlmeQOSAction);
++ StateMachineSetAction(S, ACT_IDLE, MT2_MLME_DLS_CATE, (STATE_MACHINE_FUNC)MlmeDLSAction);
++ StateMachineSetAction(S, ACT_IDLE, MT2_ACT_INVALID, (STATE_MACHINE_FUNC)MlmeInvalidAction);
++}
++
++#ifdef DOT11_N_SUPPORT
++VOID MlmeADDBAAction(
++ IN PRTMP_ADAPTER pAd,
++ IN MLME_QUEUE_ELEM *Elem)
++
++{
++ MLME_ADDBA_REQ_STRUCT *pInfo;
++ UCHAR Addr[6];
++ PUCHAR pOutBuffer = NULL;
++ NDIS_STATUS NStatus;
++ ULONG Idx;
++ FRAME_ADDBA_REQ Frame;
++ ULONG FrameLen;
++ BA_ORI_ENTRY *pBAEntry = NULL;
++
++ pInfo = (MLME_ADDBA_REQ_STRUCT *)Elem->Msg;
++ NdisZeroMemory(&Frame, sizeof(FRAME_ADDBA_REQ));
++
++ if(MlmeAddBAReqSanity(pAd, Elem->Msg, Elem->MsgLen, Addr))
++ {
++ NStatus = MlmeAllocateMemory(pAd, &pOutBuffer); //Get an unused nonpaged memory
++ if(NStatus != NDIS_STATUS_SUCCESS)
++ {
++ DBGPRINT(RT_DEBUG_TRACE,("BA - MlmeADDBAAction() allocate memory failed \n"));
++ return;
++ }
++ // 1. find entry
++ Idx = pAd->MacTab.Content[pInfo->Wcid].BAOriWcidArray[pInfo->TID];
++ if (Idx == 0)
++ {
++ MlmeFreeMemory(pAd, pOutBuffer);
++ DBGPRINT(RT_DEBUG_ERROR,("BA - MlmeADDBAAction() can't find BAOriEntry \n"));
++ return;
++ }
++ else
++ {
++ pBAEntry =&pAd->BATable.BAOriEntry[Idx];
++ }
++
++#ifdef CONFIG_STA_SUPPORT
++ IF_DEV_CONFIG_OPMODE_ON_STA(pAd)
++ {
++ if (ADHOC_ON(pAd))
++ ActHeaderInit(pAd, &Frame.Hdr, pInfo->pAddr, pAd->CurrentAddress, pAd->CommonCfg.Bssid);
++ else
++#ifdef QOS_DLS_SUPPORT
++ if (pAd->MacTab.Content[pInfo->Wcid].ValidAsDls)
++ ActHeaderInit(pAd, &Frame.Hdr, pInfo->pAddr, pAd->CurrentAddress, pAd->CommonCfg.Bssid);
++ else
++#endif // QOS_DLS_SUPPORT //
++ ActHeaderInit(pAd, &Frame.Hdr, pAd->CommonCfg.Bssid, pAd->CurrentAddress, pInfo->pAddr);
++
++ }
++#endif // CONFIG_STA_SUPPORT //
++
++ Frame.Category = CATEGORY_BA;
++ Frame.Action = ADDBA_REQ;
++ Frame.BaParm.AMSDUSupported = 0;
++ Frame.BaParm.BAPolicy = IMMED_BA;
++ Frame.BaParm.TID = pInfo->TID;
++ Frame.BaParm.BufSize = pInfo->BaBufSize;
++ Frame.Token = pInfo->Token;
++ Frame.TimeOutValue = pInfo->TimeOutValue;
++ Frame.BaStartSeq.field.FragNum = 0;
++ Frame.BaStartSeq.field.StartSeq = pAd->MacTab.Content[pInfo->Wcid].TxSeq[pInfo->TID];
++
++ *(USHORT *)(&Frame.BaParm) = cpu2le16(*(USHORT *)(&Frame.BaParm));
++ Frame.TimeOutValue = cpu2le16(Frame.TimeOutValue);
++ Frame.BaStartSeq.word = cpu2le16(Frame.BaStartSeq.word);
++
++ MakeOutgoingFrame(pOutBuffer, &FrameLen,
++ sizeof(FRAME_ADDBA_REQ), &Frame,
++ END_OF_ARGS);
++ MiniportMMRequest(pAd, QID_AC_BE, pOutBuffer, FrameLen);
++ MlmeFreeMemory(pAd, pOutBuffer);
++
++ DBGPRINT(RT_DEBUG_TRACE, ("BA - Send ADDBA request. StartSeq = %x, FrameLen = %ld. BufSize = %d\n", Frame.BaStartSeq.field.StartSeq, FrameLen, Frame.BaParm.BufSize));
++ }
++}
++
++/*
++ ==========================================================================
++ Description:
++ send DELBA and delete BaEntry if any
++ Parametrs:
++ Elem - MLME message MLME_DELBA_REQ_STRUCT
++
++ IRQL = DISPATCH_LEVEL
++
++ ==========================================================================
++ */
++VOID MlmeDELBAAction(
++ IN PRTMP_ADAPTER pAd,
++ IN MLME_QUEUE_ELEM *Elem)
++{
++ MLME_DELBA_REQ_STRUCT *pInfo;
++ PUCHAR pOutBuffer = NULL;
++ PUCHAR pOutBuffer2 = NULL;
++ NDIS_STATUS NStatus;
++ ULONG Idx;
++ FRAME_DELBA_REQ Frame;
++ ULONG FrameLen;
++ FRAME_BAR FrameBar;
++
++ pInfo = (MLME_DELBA_REQ_STRUCT *)Elem->Msg;
++ // must send back DELBA
++ NdisZeroMemory(&Frame, sizeof(FRAME_DELBA_REQ));
++ DBGPRINT(RT_DEBUG_TRACE, ("==> MlmeDELBAAction(), Initiator(%d) \n", pInfo->Initiator));
++
++ if(MlmeDelBAReqSanity(pAd, Elem->Msg, Elem->MsgLen))
++ {
++ NStatus = MlmeAllocateMemory(pAd, &pOutBuffer); //Get an unused nonpaged memory
++ if(NStatus != NDIS_STATUS_SUCCESS)
++ {
++ DBGPRINT(RT_DEBUG_ERROR,("BA - MlmeDELBAAction() allocate memory failed 1. \n"));
++ return;
++ }
++
++ NStatus = MlmeAllocateMemory(pAd, &pOutBuffer2); //Get an unused nonpaged memory
++ if(NStatus != NDIS_STATUS_SUCCESS)
++ {
++ MlmeFreeMemory(pAd, pOutBuffer);
++ DBGPRINT(RT_DEBUG_ERROR, ("BA - MlmeDELBAAction() allocate memory failed 2. \n"));
++ return;
++ }
++
++ // SEND BAR (Send BAR to refresh peer reordering buffer.)
++ Idx = pAd->MacTab.Content[pInfo->Wcid].BAOriWcidArray[pInfo->TID];
++
++#ifdef CONFIG_STA_SUPPORT
++ IF_DEV_CONFIG_OPMODE_ON_STA(pAd)
++ BarHeaderInit(pAd, &FrameBar, pAd->MacTab.Content[pInfo->Wcid].Addr, pAd->CurrentAddress);
++#endif // CONFIG_STA_SUPPORT //
++
++ FrameBar.StartingSeq.field.FragNum = 0; // make sure sequence not clear in DEL funciton.
++ FrameBar.StartingSeq.field.StartSeq = pAd->MacTab.Content[pInfo->Wcid].TxSeq[pInfo->TID]; // make sure sequence not clear in DEL funciton.
++ FrameBar.BarControl.TID = pInfo->TID; // make sure sequence not clear in DEL funciton.
++ FrameBar.BarControl.ACKPolicy = IMMED_BA; // make sure sequence not clear in DEL funciton.
++ FrameBar.BarControl.Compressed = 1; // make sure sequence not clear in DEL funciton.
++ FrameBar.BarControl.MTID = 0; // make sure sequence not clear in DEL funciton.
++
++ MakeOutgoingFrame(pOutBuffer2, &FrameLen,
++ sizeof(FRAME_BAR), &FrameBar,
++ END_OF_ARGS);
++ MiniportMMRequest(pAd, QID_AC_BE, pOutBuffer2, FrameLen);
++ MlmeFreeMemory(pAd, pOutBuffer2);
++ DBGPRINT(RT_DEBUG_TRACE,("BA - MlmeDELBAAction() . Send BAR to refresh peer reordering buffer \n"));
++
++ // SEND DELBA FRAME
++ FrameLen = 0;
++#ifdef CONFIG_STA_SUPPORT
++ IF_DEV_CONFIG_OPMODE_ON_STA(pAd)
++ {
++ if (ADHOC_ON(pAd))
++ ActHeaderInit(pAd, &Frame.Hdr, pAd->MacTab.Content[pInfo->Wcid].Addr, pAd->CurrentAddress, pAd->CommonCfg.Bssid);
++ else
++#ifdef QOS_DLS_SUPPORT
++ if (pAd->MacTab.Content[pInfo->Wcid].ValidAsDls)
++ ActHeaderInit(pAd, &Frame.Hdr, pAd->MacTab.Content[pInfo->Wcid].Addr, pAd->CurrentAddress, pAd->CommonCfg.Bssid);
++ else
++#endif // QOS_DLS_SUPPORT //
++ ActHeaderInit(pAd, &Frame.Hdr, pAd->CommonCfg.Bssid, pAd->CurrentAddress, pAd->MacTab.Content[pInfo->Wcid].Addr);
++ }
++#endif // CONFIG_STA_SUPPORT //
++ Frame.Category = CATEGORY_BA;
++ Frame.Action = DELBA;
++ Frame.DelbaParm.Initiator = pInfo->Initiator;
++ Frame.DelbaParm.TID = pInfo->TID;
++ Frame.ReasonCode = 39; // Time Out
++ *(USHORT *)(&Frame.DelbaParm) = cpu2le16(*(USHORT *)(&Frame.DelbaParm));
++ Frame.ReasonCode = cpu2le16(Frame.ReasonCode);
++
++ MakeOutgoingFrame(pOutBuffer, &FrameLen,
++ sizeof(FRAME_DELBA_REQ), &Frame,
++ END_OF_ARGS);
++ MiniportMMRequest(pAd, QID_AC_BE, pOutBuffer, FrameLen);
++ MlmeFreeMemory(pAd, pOutBuffer);
++ DBGPRINT(RT_DEBUG_TRACE, ("BA - MlmeDELBAAction() . 3 DELBA sent. Initiator(%d)\n", pInfo->Initiator));
++ }
++}
++#endif // DOT11_N_SUPPORT //
++
++VOID MlmeQOSAction(
++ IN PRTMP_ADAPTER pAd,
++ IN MLME_QUEUE_ELEM *Elem)
++{
++}
++
++VOID MlmeDLSAction(
++ IN PRTMP_ADAPTER pAd,
++ IN MLME_QUEUE_ELEM *Elem)
++{
++}
++
++VOID MlmeInvalidAction(
++ IN PRTMP_ADAPTER pAd,
++ IN MLME_QUEUE_ELEM *Elem)
++{
++ //PUCHAR pOutBuffer = NULL;
++ //Return the receiving frame except the MSB of category filed set to 1. 7.3.1.11
++}
++
++VOID PeerQOSAction(
++ IN PRTMP_ADAPTER pAd,
++ IN MLME_QUEUE_ELEM *Elem)
++{
++}
++
++#ifdef QOS_DLS_SUPPORT
++VOID PeerDLSAction(
++ IN PRTMP_ADAPTER pAd,
++ IN MLME_QUEUE_ELEM *Elem)
++{
++ UCHAR Action = Elem->Msg[LENGTH_802_11+1];
++
++ switch(Action)
++ {
++ case ACTION_DLS_REQUEST:
++#ifdef CONFIG_STA_SUPPORT
++ IF_DEV_CONFIG_OPMODE_ON_STA(pAd)
++ PeerDlsReqAction(pAd, Elem);
++#endif // CONFIG_STA_SUPPORT //
++ break;
++
++ case ACTION_DLS_RESPONSE:
++#ifdef CONFIG_STA_SUPPORT
++ IF_DEV_CONFIG_OPMODE_ON_STA(pAd)
++ PeerDlsRspAction(pAd, Elem);
++#endif // CONFIG_STA_SUPPORT //
++ break;
++
++ case ACTION_DLS_TEARDOWN:
++#ifdef CONFIG_STA_SUPPORT
++ IF_DEV_CONFIG_OPMODE_ON_STA(pAd)
++ PeerDlsTearDownAction(pAd, Elem);
++#endif // CONFIG_STA_SUPPORT //
++ break;
++ }
++}
++#endif // QOS_DLS_SUPPORT //
++
++#ifdef DOT11_N_SUPPORT
++VOID PeerBAAction(
++ IN PRTMP_ADAPTER pAd,
++ IN MLME_QUEUE_ELEM *Elem)
++{
++ UCHAR Action = Elem->Msg[LENGTH_802_11+1];
++
++ switch(Action)
++ {
++ case ADDBA_REQ:
++ PeerAddBAReqAction(pAd,Elem);
++ break;
++ case ADDBA_RESP:
++ PeerAddBARspAction(pAd,Elem);
++ break;
++ case DELBA:
++ PeerDelBAAction(pAd,Elem);
++ break;
++ }
++}
++
++
++#ifdef DOT11N_DRAFT3
++
++#ifdef CONFIG_STA_SUPPORT
++VOID StaPublicAction(
++ IN PRTMP_ADAPTER pAd,
++ IN UCHAR Bss2040Coexist)
++{
++ BSS_2040_COEXIST_IE BssCoexist;
++ MLME_SCAN_REQ_STRUCT ScanReq;
++
++ BssCoexist.word = Bss2040Coexist;
++ // AP asks Station to return a 20/40 BSS Coexistence mgmt frame. So we first starts a scan, then send back 20/40 BSS Coexistence mgmt frame
++ if ((BssCoexist.field.InfoReq == 1) && (OPSTATUS_TEST_FLAG(pAd, fOP_STATUS_SCAN_2040)))
++ {
++ // Clear record first. After scan , will update those bit and send back to transmiter.
++ pAd->CommonCfg.BSSCoexist2040.field.InfoReq = 1;
++ pAd->CommonCfg.BSSCoexist2040.field.Intolerant40 = 0;
++ pAd->CommonCfg.BSSCoexist2040.field.BSS20WidthReq = 0;
++ // Fill out stuff for scan request
++ ScanParmFill(pAd, &ScanReq, ZeroSsid, 0, BSS_ANY, SCAN_2040_BSS_COEXIST);
++ MlmeEnqueue(pAd, SYNC_STATE_MACHINE, MT2_MLME_SCAN_REQ, sizeof(MLME_SCAN_REQ_STRUCT), &ScanReq);
++ pAd->Mlme.CntlMachine.CurrState = CNTL_WAIT_OID_LIST_SCAN;
++ }
++}
++
++
++/*
++Description : Build Intolerant Channel Rerpot from Trigger event table.
++return : how many bytes copied.
++*/
++ULONG BuildIntolerantChannelRep(
++ IN PRTMP_ADAPTER pAd,
++ IN PUCHAR pDest)
++{
++ ULONG FrameLen = 0;
++ ULONG ReadOffset = 0;
++ UCHAR i;
++ UCHAR LastRegClass = 0xff;
++ PUCHAR pLen;
++
++ for ( i = 0;i < MAX_TRIGGER_EVENT;i++)
++ {
++ if (pAd->CommonCfg.TriggerEventTab.EventA[i].bValid == TRUE)
++ {
++ if (pAd->CommonCfg.TriggerEventTab.EventA[i].RegClass == LastRegClass)
++ {
++ *(pDest + ReadOffset) = (UCHAR)pAd->CommonCfg.TriggerEventTab.EventA[i].Channel;
++ *pLen++;
++ ReadOffset++;
++ FrameLen++;
++ }
++ else
++ {
++ *(pDest + ReadOffset) = IE_2040_BSS_INTOLERANT_REPORT; // IE
++ *(pDest + ReadOffset + 1) = 2; // Len = RegClass byte + channel byte.
++ pLen = pDest + ReadOffset + 1;
++ LastRegClass = pAd->CommonCfg.TriggerEventTab.EventA[i].RegClass;
++ *(pDest + ReadOffset + 2) = LastRegClass; // Len = RegClass byte + channel byte.
++ *(pDest + ReadOffset + 3) = (UCHAR)pAd->CommonCfg.TriggerEventTab.EventA[i].Channel;
++ FrameLen += 4;
++ ReadOffset += 4;
++ }
++
++ }
++ }
++ return FrameLen;
++}
++
++
++/*
++Description : Send 20/40 BSS Coexistence Action frame If one trigger event is triggered.
++*/
++VOID Send2040CoexistAction(
++ IN PRTMP_ADAPTER pAd,
++ IN UCHAR Wcid,
++ IN BOOLEAN bAddIntolerantCha)
++{
++ PUCHAR pOutBuffer = NULL;
++ NDIS_STATUS NStatus;
++ FRAME_ACTION_HDR Frame;
++ ULONG FrameLen;
++ ULONG IntolerantChaRepLen;
++
++ IntolerantChaRepLen = 0;
++ NStatus = MlmeAllocateMemory(pAd, &pOutBuffer); //Get an unused nonpaged memory
++ if(NStatus != NDIS_STATUS_SUCCESS)
++ {
++ DBGPRINT(RT_DEBUG_ERROR,("ACT - Send2040CoexistAction() allocate memory failed \n"));
++ return;
++ }
++ ActHeaderInit(pAd, &Frame.Hdr, pAd->MacTab.Content[Wcid].Addr, pAd->CommonCfg.Bssid);
++ Frame.Category = CATEGORY_PUBLIC;
++ Frame.Action = ACTION_BSS_2040_COEXIST;
++
++ MakeOutgoingFrame(pOutBuffer, &FrameLen,
++ sizeof(FRAME_ACTION_HDR), &Frame,
++ END_OF_ARGS);
++
++ *(pOutBuffer + FrameLen) = pAd->CommonCfg.BSSCoexist2040.word;
++ FrameLen++;
++
++ if (bAddIntolerantCha == TRUE)
++ IntolerantChaRepLen = BuildIntolerantChannelRep(pAd, pOutBuffer + FrameLen);
++
++ MiniportMMRequest(pAd, QID_AC_BE, pOutBuffer, FrameLen + IntolerantChaRepLen);
++ DBGPRINT(RT_DEBUG_ERROR,("ACT - Send2040CoexistAction( BSSCoexist2040 = 0x%x ) \n", pAd->CommonCfg.BSSCoexist2040.word));
++
++}
++
++
++/*
++ ==========================================================================
++ Description:
++ After scan, Update 20/40 BSS Coexistence IE and send out.
++ According to 802.11n D3.03 11.14.10
++
++ Parameters:
++ ==========================================================================
++ */
++VOID Update2040CoexistFrameAndNotify(
++ IN PRTMP_ADAPTER pAd,
++ IN UCHAR Wcid,
++ IN BOOLEAN bAddIntolerantCha)
++{
++ BSS_2040_COEXIST_IE OldValue;
++
++ OldValue.word = pAd->CommonCfg.BSSCoexist2040.word;
++ if ((pAd->CommonCfg.TriggerEventTab.EventANo > 0) || (pAd->CommonCfg.TriggerEventTab.EventBCountDown > 0))
++ pAd->CommonCfg.BSSCoexist2040.field.BSS20WidthReq = 1;
++
++ // Need to check !!!!
++ // How STA will set Intolerant40 if implementation dependent. Now we don't set this bit first.!!!!!
++ // So Only check BSS20WidthReq change.
++ if (OldValue.field.BSS20WidthReq != pAd->CommonCfg.BSSCoexist2040.field.BSS20WidthReq)
++ {
++ Send2040CoexistAction(pAd, Wcid, bAddIntolerantCha);
++ }
++}
++#endif // CONFIG_STA_SUPPORT //
++
++
++BOOLEAN ChannelSwitchSanityCheck(
++ IN PRTMP_ADAPTER pAd,
++ IN UCHAR Wcid,
++ IN UCHAR NewChannel,
++ IN UCHAR Secondary)
++{
++ UCHAR i;
++
++ if (Wcid >= MAX_LEN_OF_MAC_TABLE)
++ return FALSE;
++
++ if ((NewChannel > 7) && (Secondary == 1))
++ return FALSE;
++
++ if ((NewChannel < 5) && (Secondary == 3))
++ return FALSE;
++
++ // 0. Check if new channel is in the channellist.
++ for (i = 0;i < pAd->ChannelListNum;i++)
++ {
++ if (pAd->ChannelList[i].Channel == NewChannel)
++ {
++ break;
++ }
++ }
++
++ if (i == pAd->ChannelListNum)
++ return FALSE;
++
++ return TRUE;
++}
++
++
++VOID ChannelSwitchAction(
++ IN PRTMP_ADAPTER pAd,
++ IN UCHAR Wcid,
++ IN UCHAR NewChannel,
++ IN UCHAR Secondary)
++{
++ UCHAR BBPValue = 0;
++ ULONG MACValue;
++
++ DBGPRINT(RT_DEBUG_TRACE,("SPECTRUM - ChannelSwitchAction(NewChannel = %d , Secondary = %d) \n", NewChannel, Secondary));
++
++ if (ChannelSwitchSanityCheck(pAd, Wcid, NewChannel, Secondary) == FALSE)
++ return;
++
++ // 1. Switches to BW = 20.
++ if (Secondary == 0)
++ {
++ RTMP_BBP_IO_READ8_BY_REG_ID(pAd, BBP_R4, &BBPValue);
++ BBPValue&= (~0x18);
++ RTMP_BBP_IO_WRITE8_BY_REG_ID(pAd, BBP_R4, BBPValue);
++ if (pAd->MACVersion == 0x28600100)
++ {
++ RTMP_BBP_IO_WRITE8_BY_REG_ID(pAd, BBP_R69, 0x16);
++ RTMP_BBP_IO_WRITE8_BY_REG_ID(pAd, BBP_R70, 0x08);
++ RTMP_BBP_IO_WRITE8_BY_REG_ID(pAd, BBP_R73, 0x11);
++ DBGPRINT(RT_DEBUG_TRACE, ("!!!rt2860C !!! \n" ));
++ }
++ pAd->CommonCfg.BBPCurrentBW = BW_20;
++ pAd->CommonCfg.Channel = NewChannel;
++ pAd->CommonCfg.CentralChannel = pAd->CommonCfg.Channel;
++ AsicSwitchChannel(pAd, pAd->CommonCfg.Channel,FALSE);
++ AsicLockChannel(pAd, pAd->CommonCfg.Channel);
++ pAd->MacTab.Content[Wcid].HTPhyMode.field.BW = 0;
++ DBGPRINT(RT_DEBUG_TRACE, ("!!!20MHz !!! \n" ));
++ }
++ // 1. Switches to BW = 40 And Station supports BW = 40.
++ else if (((Secondary == 1) || (Secondary == 3)) && (pAd->CommonCfg.HtCapability.HtCapInfo.ChannelWidth == 1))
++ {
++ pAd->CommonCfg.Channel = NewChannel;
++
++ if (Secondary == 1)
++ {
++ // Secondary above.
++ pAd->CommonCfg.CentralChannel = pAd->CommonCfg.Channel + 2;
++ RTMP_IO_READ32(pAd, TX_BAND_CFG, &MACValue);
++ MACValue &= 0xfe;
++ RTMP_IO_WRITE32(pAd, TX_BAND_CFG, MACValue);
++ RTMP_BBP_IO_READ8_BY_REG_ID(pAd, BBP_R4, &BBPValue);
++ BBPValue&= (~0x18);
++ BBPValue|= (0x10);
++ RTMP_BBP_IO_WRITE8_BY_REG_ID(pAd, BBP_R4, BBPValue);
++ RTMP_BBP_IO_READ8_BY_REG_ID(pAd, BBP_R3, &BBPValue);
++ BBPValue&= (~0x20);
++ RTMP_BBP_IO_WRITE8_BY_REG_ID(pAd, BBP_R3, BBPValue);
++ DBGPRINT(RT_DEBUG_TRACE, ("!!!40MHz Lower LINK UP !!! Control Channel at Below. Central = %d \n", pAd->CommonCfg.CentralChannel ));
++ }
++ else
++ {
++ // Secondary below.
++ pAd->CommonCfg.CentralChannel = pAd->CommonCfg.Channel - 2;
++ RTMP_IO_READ32(pAd, TX_BAND_CFG, &MACValue);
++ MACValue &= 0xfe;
++ MACValue |= 0x1;
++ RTMP_IO_WRITE32(pAd, TX_BAND_CFG, MACValue);
++ RTMP_BBP_IO_READ8_BY_REG_ID(pAd, BBP_R4, &BBPValue);
++ BBPValue&= (~0x18);
++ BBPValue|= (0x10);
++ RTMP_BBP_IO_WRITE8_BY_REG_ID(pAd, BBP_R4, BBPValue);
++ RTMP_BBP_IO_READ8_BY_REG_ID(pAd, BBP_R3, &BBPValue);
++ BBPValue&= (~0x20);
++ BBPValue|= (0x20);
++ RTMP_BBP_IO_WRITE8_BY_REG_ID(pAd, BBP_R3, BBPValue);
++ DBGPRINT(RT_DEBUG_TRACE, ("!!!40MHz Upper LINK UP !!! Control Channel at UpperCentral = %d \n", pAd->CommonCfg.CentralChannel ));
++ }
++ pAd->CommonCfg.BBPCurrentBW = BW_40;
++ AsicSwitchChannel(pAd, pAd->CommonCfg.CentralChannel, FALSE);
++ AsicLockChannel(pAd, pAd->CommonCfg.CentralChannel);
++ pAd->MacTab.Content[Wcid].HTPhyMode.field.BW = 1;
++ }
++}
++#endif // DOT11N_DRAFT3 //
++#endif // DOT11_N_SUPPORT //
++
++VOID PeerPublicAction(
++ IN PRTMP_ADAPTER pAd,
++ IN MLME_QUEUE_ELEM *Elem)
++{
++#ifdef DOT11N_DRAFT3
++ UCHAR Action = Elem->Msg[LENGTH_802_11+1];
++#endif // DOT11N_DRAFT3 //
++
++ if (Elem->Wcid >= MAX_LEN_OF_MAC_TABLE)
++ return;
++
++#ifdef DOT11N_DRAFT3
++ switch(Action)
++ {
++ case ACTION_BSS_2040_COEXIST: // Format defined in IEEE 7.4.7a.1 in 11n Draf3.03
++ {
++ //UCHAR BssCoexist;
++ BSS_2040_COEXIST_ELEMENT *pCoexistInfo;
++ BSS_2040_COEXIST_IE *pBssCoexistIe;
++ BSS_2040_INTOLERANT_CH_REPORT *pIntolerantReport = NULL;
++
++ if (Elem->MsgLen <= (LENGTH_802_11 + sizeof(BSS_2040_COEXIST_ELEMENT)) )
++ {
++ DBGPRINT(RT_DEBUG_ERROR, ("ACTION - 20/40 BSS Coexistence Management Frame length too short! len = %ld!\n", Elem->MsgLen));
++ break;
++ }
++ DBGPRINT(RT_DEBUG_TRACE, ("ACTION - 20/40 BSS Coexistence Management action----> \n"));
++ hex_dump("CoexistenceMgmtFrame", Elem->Msg, Elem->MsgLen);
++
++
++ pCoexistInfo = (BSS_2040_COEXIST_ELEMENT *) &Elem->Msg[LENGTH_802_11+2];
++ //hex_dump("CoexistInfo", (PUCHAR)pCoexistInfo, sizeof(BSS_2040_COEXIST_ELEMENT));
++ if (Elem->MsgLen >= (LENGTH_802_11 + sizeof(BSS_2040_COEXIST_ELEMENT) + sizeof(BSS_2040_INTOLERANT_CH_REPORT)))
++ {
++ pIntolerantReport = (BSS_2040_INTOLERANT_CH_REPORT *)((PUCHAR)pCoexistInfo + sizeof(BSS_2040_COEXIST_ELEMENT));
++ }
++ //hex_dump("IntolerantReport ", (PUCHAR)pIntolerantReport, sizeof(BSS_2040_INTOLERANT_CH_REPORT));
++
++ pBssCoexistIe = (BSS_2040_COEXIST_IE *)(&pCoexistInfo->BssCoexistIe);
++
++#ifdef CONFIG_STA_SUPPORT
++ IF_DEV_CONFIG_OPMODE_ON_STA(pAd)
++ {
++ if (INFRA_ON(pAd))
++ {
++ StaPublicAction(pAd, pCoexistInfo);
++ }
++ }
++#endif // CONFIG_STA_SUPPORT //
++
++ }
++ break;
++ }
++
++#endif // DOT11N_DRAFT3 //
++
++}
++
++
++static VOID ReservedAction(
++ IN PRTMP_ADAPTER pAd,
++ IN MLME_QUEUE_ELEM *Elem)
++{
++ UCHAR Category;
++
++ if (Elem->MsgLen <= LENGTH_802_11)
++ {
++ return;
++ }
++
++ Category = Elem->Msg[LENGTH_802_11];
++ DBGPRINT(RT_DEBUG_TRACE,("Rcv reserved category(%d) Action Frame\n", Category));
++ hex_dump("Reserved Action Frame", &Elem->Msg[0], Elem->MsgLen);
++}
++
++VOID PeerRMAction(
++ IN PRTMP_ADAPTER pAd,
++ IN MLME_QUEUE_ELEM *Elem)
++
++{
++ return;
++}
++
++#ifdef DOT11_N_SUPPORT
++static VOID respond_ht_information_exchange_action(
++ IN PRTMP_ADAPTER pAd,
++ IN MLME_QUEUE_ELEM *Elem)
++{
++ PUCHAR pOutBuffer = NULL;
++ NDIS_STATUS NStatus;
++ ULONG FrameLen;
++ FRAME_HT_INFO HTINFOframe, *pFrame;
++ UCHAR *pAddr;
++
++
++ // 2. Always send back ADDBA Response
++ NStatus = MlmeAllocateMemory(pAd, &pOutBuffer); //Get an unused nonpaged memory
++
++ if (NStatus != NDIS_STATUS_SUCCESS)
++ {
++ DBGPRINT(RT_DEBUG_TRACE,("ACTION - respond_ht_information_exchange_action() allocate memory failed \n"));
++ return;
++ }
++
++ // get RA
++ pFrame = (FRAME_HT_INFO *) &Elem->Msg[0];
++ pAddr = pFrame->Hdr.Addr2;
++
++ NdisZeroMemory(&HTINFOframe, sizeof(FRAME_HT_INFO));
++ // 2-1. Prepare ADDBA Response frame.
++#ifdef CONFIG_STA_SUPPORT
++ IF_DEV_CONFIG_OPMODE_ON_STA(pAd)
++ {
++ if (ADHOC_ON(pAd))
++ ActHeaderInit(pAd, &HTINFOframe.Hdr, pAddr, pAd->CurrentAddress, pAd->CommonCfg.Bssid);
++ else
++ ActHeaderInit(pAd, &HTINFOframe.Hdr, pAd->CommonCfg.Bssid, pAd->CurrentAddress, pAddr);
++ }
++#endif // CONFIG_STA_SUPPORT //
++
++ HTINFOframe.Category = CATEGORY_HT;
++ HTINFOframe.Action = HT_INFO_EXCHANGE;
++ HTINFOframe.HT_Info.Request = 0;
++ HTINFOframe.HT_Info.Forty_MHz_Intolerant = pAd->CommonCfg.HtCapability.HtCapInfo.Forty_Mhz_Intolerant;
++ HTINFOframe.HT_Info.STA_Channel_Width = pAd->CommonCfg.AddHTInfo.AddHtInfo.RecomWidth;
++
++ MakeOutgoingFrame(pOutBuffer, &FrameLen,
++ sizeof(FRAME_HT_INFO), &HTINFOframe,
++ END_OF_ARGS);
++
++ MiniportMMRequest(pAd, QID_AC_BE, pOutBuffer, FrameLen);
++ MlmeFreeMemory(pAd, pOutBuffer);
++}
++
++
++#ifdef DOT11N_DRAFT3
++VOID SendNotifyBWActionFrame(
++ IN PRTMP_ADAPTER pAd,
++ IN UCHAR Wcid,
++ IN UCHAR apidx)
++{
++ PUCHAR pOutBuffer = NULL;
++ NDIS_STATUS NStatus;
++ FRAME_ACTION_HDR Frame;
++ ULONG FrameLen;
++ PUCHAR pAddr1;
++
++
++ NStatus = MlmeAllocateMemory(pAd, &pOutBuffer); //Get an unused nonpaged memory
++ if(NStatus != NDIS_STATUS_SUCCESS)
++ {
++ DBGPRINT(RT_DEBUG_ERROR,("ACT - SendNotifyBWAction() allocate memory failed \n"));
++ return;
++ }
++
++ if (Wcid == MCAST_WCID)
++ pAddr1 = &BROADCAST_ADDR[0];
++ else
++ pAddr1 = pAd->MacTab.Content[Wcid].Addr;
++ ActHeaderInit(pAd, &Frame.Hdr, pAddr1, pAd->ApCfg.MBSSID[apidx].Bssid, pAd->ApCfg.MBSSID[apidx].Bssid);
++
++ Frame.Category = CATEGORY_HT;
++ Frame.Action = NOTIFY_BW_ACTION;
++
++ MakeOutgoingFrame(pOutBuffer, &FrameLen,
++ sizeof(FRAME_ACTION_HDR), &Frame,
++ END_OF_ARGS);
++
++ *(pOutBuffer + FrameLen) = pAd->CommonCfg.AddHTInfo.AddHtInfo.RecomWidth;
++ FrameLen++;
++
++
++ MiniportMMRequest(pAd, QID_AC_BE, pOutBuffer, FrameLen);
++ DBGPRINT(RT_DEBUG_TRACE,("ACT - SendNotifyBWAction(NotifyBW= %d)!\n", pAd->CommonCfg.AddHTInfo.AddHtInfo.RecomWidth));
++
++}
++#endif // DOT11N_DRAFT3 //
++
++
++VOID PeerHTAction(
++ IN PRTMP_ADAPTER pAd,
++ IN MLME_QUEUE_ELEM *Elem)
++{
++ UCHAR Action = Elem->Msg[LENGTH_802_11+1];
++
++ if (Elem->Wcid >= MAX_LEN_OF_MAC_TABLE)
++ return;
++
++ switch(Action)
++ {
++ case NOTIFY_BW_ACTION:
++ DBGPRINT(RT_DEBUG_TRACE,("ACTION - HT Notify Channel bandwidth action----> \n"));
++#ifdef CONFIG_STA_SUPPORT
++ if(pAd->StaActive.SupportedPhyInfo.bHtEnable == FALSE)
++ {
++ // Note, this is to patch DIR-1353 AP. When the AP set to Wep, it will use legacy mode. But AP still keeps
++ // sending BW_Notify Action frame, and cause us to linkup and linkdown.
++ // In legacy mode, don't need to parse HT action frame.
++ DBGPRINT(RT_DEBUG_TRACE,("ACTION -Ignore HT Notify Channel BW when link as legacy mode. BW = %d---> \n",
++ Elem->Msg[LENGTH_802_11+2] ));
++ break;
++ }
++#endif // CONFIG_STA_SUPPORT //
++
++ if (Elem->Msg[LENGTH_802_11+2] == 0) // 7.4.8.2. if value is 1, keep the same as supported channel bandwidth.
++ pAd->MacTab.Content[Elem->Wcid].HTPhyMode.field.BW = 0;
++
++ break;
++
++ case SMPS_ACTION:
++ // 7.3.1.25
++ DBGPRINT(RT_DEBUG_TRACE,("ACTION - SMPS action----> \n"));
++ if (((Elem->Msg[LENGTH_802_11+2]&0x1) == 0))
++ {
++ pAd->MacTab.Content[Elem->Wcid].MmpsMode = MMPS_ENABLE;
++ }
++ else if (((Elem->Msg[LENGTH_802_11+2]&0x2) == 0))
++ {
++ pAd->MacTab.Content[Elem->Wcid].MmpsMode = MMPS_STATIC;
++ }
++ else
++ {
++ pAd->MacTab.Content[Elem->Wcid].MmpsMode = MMPS_DYNAMIC;
++ }
++
++ DBGPRINT(RT_DEBUG_TRACE,("Aid(%d) MIMO PS = %d\n", Elem->Wcid, pAd->MacTab.Content[Elem->Wcid].MmpsMode));
++ // rt2860c : add something for smps change.
++ break;
++
++ case SETPCO_ACTION:
++ break;
++
++ case MIMO_CHA_MEASURE_ACTION:
++ break;
++
++ case HT_INFO_EXCHANGE:
++ {
++ HT_INFORMATION_OCTET *pHT_info;
++
++ pHT_info = (HT_INFORMATION_OCTET *) &Elem->Msg[LENGTH_802_11+2];
++ // 7.4.8.10
++ DBGPRINT(RT_DEBUG_TRACE,("ACTION - HT Information Exchange action----> \n"));
++ if (pHT_info->Request)
++ {
++ respond_ht_information_exchange_action(pAd, Elem);
++ }
++ }
++ break;
++ }
++}
++
++
++/*
++ ==========================================================================
++ Description:
++ Retry sending ADDBA Reqest.
++
++ IRQL = DISPATCH_LEVEL
++
++ Parametrs:
++ p8023Header: if this is already 802.3 format, p8023Header is NULL
++
++ Return : TRUE if put into rx reordering buffer, shouldn't indicaterxhere.
++ FALSE , then continue indicaterx at this moment.
++ ==========================================================================
++ */
++VOID ORIBATimerTimeout(
++ IN PRTMP_ADAPTER pAd)
++{
++ MAC_TABLE_ENTRY *pEntry;
++ INT i, total;
++// FRAME_BAR FrameBar;
++// ULONG FrameLen;
++// NDIS_STATUS NStatus;
++// PUCHAR pOutBuffer = NULL;
++// USHORT Sequence;
++ UCHAR TID;
++
++#ifdef RALINK_ATE
++ if (ATE_ON(pAd))
++ return;
++#endif // RALINK_ATE //
++
++ total = pAd->MacTab.Size * NUM_OF_TID;
++
++ for (i = 1; ((i <MAX_LEN_OF_BA_ORI_TABLE) && (total > 0)) ; i++)
++ {
++ if (pAd->BATable.BAOriEntry[i].ORI_BA_Status == Originator_Done)
++ {
++ pEntry = &pAd->MacTab.Content[pAd->BATable.BAOriEntry[i].Wcid];
++ TID = pAd->BATable.BAOriEntry[i].TID;
++
++ ASSERT(pAd->BATable.BAOriEntry[i].Wcid < MAX_LEN_OF_MAC_TABLE);
++ }
++ total --;
++ }
++}
++
++
++VOID SendRefreshBAR(
++ IN PRTMP_ADAPTER pAd,
++ IN MAC_TABLE_ENTRY *pEntry)
++{
++ FRAME_BAR FrameBar;
++ ULONG FrameLen;
++ NDIS_STATUS NStatus;
++ PUCHAR pOutBuffer = NULL;
++ USHORT Sequence;
++ UCHAR i, TID;
++ USHORT idx;
++ BA_ORI_ENTRY *pBAEntry;
++
++ for (i = 0; i <NUM_OF_TID; i++)
++ {
++ idx = pEntry->BAOriWcidArray[i];
++ if (idx == 0)
++ {
++ continue;
++ }
++ pBAEntry = &pAd->BATable.BAOriEntry[idx];
++
++ if (pBAEntry->ORI_BA_Status == Originator_Done)
++ {
++ TID = pBAEntry->TID;
++
++ ASSERT(pBAEntry->Wcid < MAX_LEN_OF_MAC_TABLE);
++
++ NStatus = MlmeAllocateMemory(pAd, &pOutBuffer); //Get an unused nonpaged memory
++ if(NStatus != NDIS_STATUS_SUCCESS)
++ {
++ DBGPRINT(RT_DEBUG_ERROR,("BA - MlmeADDBAAction() allocate memory failed \n"));
++ return;
++ }
++
++ Sequence = pEntry->TxSeq[TID];
++
++
++#ifdef CONFIG_STA_SUPPORT
++ IF_DEV_CONFIG_OPMODE_ON_STA(pAd)
++ BarHeaderInit(pAd, &FrameBar, pEntry->Addr, pAd->CurrentAddress);
++#endif // CONFIG_STA_SUPPORT //
++
++ FrameBar.StartingSeq.field.FragNum = 0; // make sure sequence not clear in DEL function.
++ FrameBar.StartingSeq.field.StartSeq = Sequence; // make sure sequence not clear in DEL funciton.
++ FrameBar.BarControl.TID = TID; // make sure sequence not clear in DEL funciton.
++
++ MakeOutgoingFrame(pOutBuffer, &FrameLen,
++ sizeof(FRAME_BAR), &FrameBar,
++ END_OF_ARGS);
++ //if (!(CLIENT_STATUS_TEST_FLAG(pEntry, fCLIENT_STATUS_RALINK_CHIPSET)))
++ if (1) // Now we always send BAR.
++ {
++ //MiniportMMRequestUnlock(pAd, 0, pOutBuffer, FrameLen);
++ MiniportMMRequest(pAd, 0, pOutBuffer, FrameLen);
++ }
++ MlmeFreeMemory(pAd, pOutBuffer);
++ }
++ }
++}
++#endif // DOT11_N_SUPPORT //
++
++VOID ActHeaderInit(
++ IN PRTMP_ADAPTER pAd,
++ IN OUT PHEADER_802_11 pHdr80211,
++ IN PUCHAR Addr1,
++ IN PUCHAR Addr2,
++ IN PUCHAR Addr3)
++{
++ NdisZeroMemory(pHdr80211, sizeof(HEADER_802_11));
++ pHdr80211->FC.Type = BTYPE_MGMT;
++ pHdr80211->FC.SubType = SUBTYPE_ACTION;
++
++ COPY_MAC_ADDR(pHdr80211->Addr1, Addr1);
++ COPY_MAC_ADDR(pHdr80211->Addr2, Addr2);
++ COPY_MAC_ADDR(pHdr80211->Addr3, Addr3);
++}
++
++VOID BarHeaderInit(
++ IN PRTMP_ADAPTER pAd,
++ IN OUT PFRAME_BAR pCntlBar,
++ IN PUCHAR pDA,
++ IN PUCHAR pSA)
++{
++// USHORT Duration;
++
++ NdisZeroMemory(pCntlBar, sizeof(FRAME_BAR));
++ pCntlBar->FC.Type = BTYPE_CNTL;
++ pCntlBar->FC.SubType = SUBTYPE_BLOCK_ACK_REQ;
++ pCntlBar->BarControl.MTID = 0;
++ pCntlBar->BarControl.Compressed = 1;
++ pCntlBar->BarControl.ACKPolicy = 0;
++
++
++ pCntlBar->Duration = 16 + RTMPCalcDuration(pAd, RATE_1, sizeof(FRAME_BA));
++
++ COPY_MAC_ADDR(pCntlBar->Addr1, pDA);
++ COPY_MAC_ADDR(pCntlBar->Addr2, pSA);
++}
++
++
++/*
++ ==========================================================================
++ Description:
++ Insert Category and action code into the action frame.
++
++ Parametrs:
++ 1. frame buffer pointer.
++ 2. frame length.
++ 3. category code of the frame.
++ 4. action code of the frame.
++
++ Return : None.
++ ==========================================================================
++ */
++VOID InsertActField(
++ IN PRTMP_ADAPTER pAd,
++ OUT PUCHAR pFrameBuf,
++ OUT PULONG pFrameLen,
++ IN UINT8 Category,
++ IN UINT8 ActCode)
++{
++ ULONG TempLen;
++
++ MakeOutgoingFrame( pFrameBuf, &TempLen,
++ 1, &Category,
++ 1, &ActCode,
++ END_OF_ARGS);
++
++ *pFrameLen = *pFrameLen + TempLen;
++
++ return;
++}
+--- /dev/null
++++ b/drivers/staging/rt2870/common/action.h
+@@ -0,0 +1,68 @@
++/*
++ *************************************************************************
++ * Ralink Tech Inc.
++ * 5F., No.36, Taiyuan St., Jhubei City,
++ * Hsinchu County 302,
++ * Taiwan, R.O.C.
++ *
++ * (c) Copyright 2002-2007, Ralink Technology, Inc.
++ *
++ * This program is free software; you can redistribute it and/or modify *
++ * it under the terms of the GNU General Public License as published by *
++ * the Free Software Foundation; either version 2 of the License, or *
++ * (at your option) any later version. *
++ * *
++ * This program is distributed in the hope that it will be useful, *
++ * but WITHOUT ANY WARRANTY; without even the implied warranty of *
++ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the *
++ * GNU General Public License for more details. *
++ * *
++ * You should have received a copy of the GNU General Public License *
++ * along with this program; if not, write to the *
++ * Free Software Foundation, Inc., *
++ * 59 Temple Place - Suite 330, Boston, MA 02111-1307, USA. *
++ * *
++ *************************************************************************
++
++ Module Name:
++ aironet.h
++
++ Abstract:
++
++ Revision History:
++ Who When What
++ -------- ---------- ----------------------------------------------
++ Name Date Modification logs
++ Paul Lin 04-06-15 Initial
++*/
++
++#ifndef __ACTION_H__
++#define __ACTION_H__
++
++typedef struct PACKED __HT_INFO_OCTET
++{
++#ifdef RT_BIG_ENDIAN
++ UCHAR Reserved:5;
++ UCHAR STA_Channel_Width:1;
++ UCHAR Forty_MHz_Intolerant:1;
++ UCHAR Request:1;
++#else
++ UCHAR Request:1;
++ UCHAR Forty_MHz_Intolerant:1;
++ UCHAR STA_Channel_Width:1;
++ UCHAR Reserved:5;
++#endif
++} HT_INFORMATION_OCTET;
++
++
++typedef struct PACKED __FRAME_HT_INFO
++{
++ HEADER_802_11 Hdr;
++ UCHAR Category;
++ UCHAR Action;
++ HT_INFORMATION_OCTET HT_Info;
++} FRAME_HT_INFO, *PFRAME_HT_INFO;
++
++#endif /* __ACTION_H__ */
++
++
+--- /dev/null
++++ b/drivers/staging/rt2870/common/ba_action.c
+@@ -0,0 +1,1798 @@
++/*
++ *************************************************************************
++ * Ralink Tech Inc.
++ * 5F., No.36, Taiyuan St., Jhubei City,
++ * Hsinchu County 302,
++ * Taiwan, R.O.C.
++ *
++ * (c) Copyright 2002-2007, Ralink Technology, Inc.
++ *
++ * This program is free software; you can redistribute it and/or modify *
++ * it under the terms of the GNU General Public License as published by *
++ * the Free Software Foundation; either version 2 of the License, or *
++ * (at your option) any later version. *
++ * *
++ * This program is distributed in the hope that it will be useful, *
++ * but WITHOUT ANY WARRANTY; without even the implied warranty of *
++ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the *
++ * GNU General Public License for more details. *
++ * *
++ * You should have received a copy of the GNU General Public License *
++ * along with this program; if not, write to the *
++ * Free Software Foundation, Inc., *
++ * 59 Temple Place - Suite 330, Boston, MA 02111-1307, USA. *
++ * *
++ *************************************************************************
++ */
++
++
++#ifdef DOT11_N_SUPPORT
++
++#include "../rt_config.h"
++
++
++
++#define BA_ORI_INIT_SEQ (pEntry->TxSeq[TID]) //1 // inital sequence number of BA session
++
++#define ORI_SESSION_MAX_RETRY 8
++#define ORI_BA_SESSION_TIMEOUT (2000) // ms
++#define REC_BA_SESSION_IDLE_TIMEOUT (1000) // ms
++
++#define REORDERING_PACKET_TIMEOUT ((100 * HZ)/1000) // system ticks -- 100 ms
++#define MAX_REORDERING_PACKET_TIMEOUT ((3000 * HZ)/1000) // system ticks -- 100 ms
++
++#define RESET_RCV_SEQ (0xFFFF)
++
++static void ba_mpdu_blk_free(PRTMP_ADAPTER pAd, struct reordering_mpdu *mpdu_blk);
++
++
++BA_ORI_ENTRY *BATableAllocOriEntry(
++ IN PRTMP_ADAPTER pAd,
++ OUT USHORT *Idx);
++
++BA_REC_ENTRY *BATableAllocRecEntry(
++ IN PRTMP_ADAPTER pAd,
++ OUT USHORT *Idx);
++
++VOID BAOriSessionSetupTimeout(
++ IN PVOID SystemSpecific1,
++ IN PVOID FunctionContext,
++ IN PVOID SystemSpecific2,
++ IN PVOID SystemSpecific3);
++
++VOID BARecSessionIdleTimeout(
++ IN PVOID SystemSpecific1,
++ IN PVOID FunctionContext,
++ IN PVOID SystemSpecific2,
++ IN PVOID SystemSpecific3);
++
++
++BUILD_TIMER_FUNCTION(BAOriSessionSetupTimeout);
++BUILD_TIMER_FUNCTION(BARecSessionIdleTimeout);
++
++#define ANNOUNCE_REORDERING_PACKET(_pAd, _mpdu_blk) \
++ Announce_Reordering_Packet(_pAd, _mpdu_blk);
++
++VOID BA_MaxWinSizeReasign(
++ IN PRTMP_ADAPTER pAd,
++ IN MAC_TABLE_ENTRY *pEntryPeer,
++ OUT UCHAR *pWinSize)
++{
++ UCHAR MaxSize;
++
++
++ if (pAd->MACVersion >= RALINK_2883_VERSION) // 3*3
++ {
++ if (pAd->MACVersion >= RALINK_3070_VERSION)
++ {
++ if (pEntryPeer->WepStatus != Ndis802_11EncryptionDisabled)
++ MaxSize = 7; // for non-open mode
++ else
++ MaxSize = 13;
++ }
++ else
++ MaxSize = 31;
++ }
++ else if (pAd->MACVersion >= RALINK_2880E_VERSION) // 2880 e
++ {
++ if (pEntryPeer->WepStatus != Ndis802_11EncryptionDisabled)
++ MaxSize = 7; // for non-open mode
++ else
++ MaxSize = 13;
++ }
++ else
++ MaxSize = 7;
++
++ DBGPRINT(RT_DEBUG_TRACE, ("ba> Win Size = %d, Max Size = %d\n",
++ *pWinSize, MaxSize));
++
++ if ((*pWinSize) > MaxSize)
++ {
++ DBGPRINT(RT_DEBUG_TRACE, ("ba> reassign max win size from %d to %d\n",
++ *pWinSize, MaxSize));
++
++ *pWinSize = MaxSize;
++ }
++}
++
++void Announce_Reordering_Packet(IN PRTMP_ADAPTER pAd,
++ IN struct reordering_mpdu *mpdu)
++{
++ PNDIS_PACKET pPacket;
++
++ pPacket = mpdu->pPacket;
++
++ if (mpdu->bAMSDU)
++ {
++ ASSERT(0);
++ BA_Reorder_AMSDU_Annnounce(pAd, pPacket);
++ }
++ else
++ {
++ //
++ // pass this 802.3 packet to upper layer or forward this packet to WM directly
++ //
++
++#ifdef CONFIG_STA_SUPPORT
++ IF_DEV_CONFIG_OPMODE_ON_STA(pAd)
++ ANNOUNCE_OR_FORWARD_802_3_PACKET(pAd, pPacket, RTMP_GET_PACKET_IF(pPacket));
++#endif // CONFIG_STA_SUPPORT //
++ }
++}
++
++/*
++ * Insert a reordering mpdu into sorted linked list by sequence no.
++ */
++BOOLEAN ba_reordering_mpdu_insertsorted(struct reordering_list *list, struct reordering_mpdu *mpdu)
++{
++
++ struct reordering_mpdu **ppScan = &list->next;
++
++ while (*ppScan != NULL)
++ {
++ if (SEQ_SMALLER((*ppScan)->Sequence, mpdu->Sequence, MAXSEQ))
++ {
++ ppScan = &(*ppScan)->next;
++ }
++ else if ((*ppScan)->Sequence == mpdu->Sequence)
++ {
++ /* give up this duplicated frame */
++ return(FALSE);
++ }
++ else
++ {
++ /* find position */
++ break;
++ }
++ }
++
++ mpdu->next = *ppScan;
++ *ppScan = mpdu;
++ list->qlen++;
++ return TRUE;
++}
++
++
++/*
++ * caller lock critical section if necessary
++ */
++static inline void ba_enqueue(struct reordering_list *list, struct reordering_mpdu *mpdu_blk)
++{
++ list->qlen++;
++ mpdu_blk->next = list->next;
++ list->next = mpdu_blk;
++}
++
++/*
++ * caller lock critical section if necessary
++ */
++static inline struct reordering_mpdu * ba_dequeue(struct reordering_list *list)
++{
++ struct reordering_mpdu *mpdu_blk = NULL;
++
++ ASSERT(list);
++
++ if (list->qlen)
++ {
++ list->qlen--;
++ mpdu_blk = list->next;
++ if (mpdu_blk)
++ {
++ list->next = mpdu_blk->next;
++ mpdu_blk->next = NULL;
++ }
++ }
++ return mpdu_blk;
++}
++
++
++static inline struct reordering_mpdu *ba_reordering_mpdu_dequeue(struct reordering_list *list)
++{
++ return(ba_dequeue(list));
++}
++
++
++static inline struct reordering_mpdu *ba_reordering_mpdu_probe(struct reordering_list *list)
++ {
++ ASSERT(list);
++
++ return(list->next);
++ }
++
++
++/*
++ * free all resource for reordering mechanism
++ */
++void ba_reordering_resource_release(PRTMP_ADAPTER pAd)
++{
++ BA_TABLE *Tab;
++ PBA_REC_ENTRY pBAEntry;
++ struct reordering_mpdu *mpdu_blk;
++ int i;
++
++ Tab = &pAd->BATable;
++
++ /* I. release all pending reordering packet */
++ NdisAcquireSpinLock(&pAd->BATabLock);
++ for (i = 0; i < MAX_LEN_OF_BA_REC_TABLE; i++)
++ {
++ pBAEntry = &Tab->BARecEntry[i];
++ if (pBAEntry->REC_BA_Status != Recipient_NONE)
++ {
++ while ((mpdu_blk = ba_reordering_mpdu_dequeue(&pBAEntry->list)))
++ {
++ ASSERT(mpdu_blk->pPacket);
++ RELEASE_NDIS_PACKET(pAd, mpdu_blk->pPacket, NDIS_STATUS_FAILURE);
++ ba_mpdu_blk_free(pAd, mpdu_blk);
++ }
++ }
++ }
++ NdisReleaseSpinLock(&pAd->BATabLock);
++
++ ASSERT(pBAEntry->list.qlen == 0);
++ /* II. free memory of reordering mpdu table */
++ NdisAcquireSpinLock(&pAd->mpdu_blk_pool.lock);
++ os_free_mem(pAd, pAd->mpdu_blk_pool.mem);
++ NdisReleaseSpinLock(&pAd->mpdu_blk_pool.lock);
++}
++
++
++
++/*
++ * Allocate all resource for reordering mechanism
++ */
++BOOLEAN ba_reordering_resource_init(PRTMP_ADAPTER pAd, int num)
++{
++ int i;
++ PUCHAR mem;
++ struct reordering_mpdu *mpdu_blk;
++ struct reordering_list *freelist;
++
++ /* allocate spinlock */
++ NdisAllocateSpinLock(&pAd->mpdu_blk_pool.lock);
++
++ /* initialize freelist */
++ freelist = &pAd->mpdu_blk_pool.freelist;
++ freelist->next = NULL;
++ freelist->qlen = 0;
++
++ DBGPRINT(RT_DEBUG_TRACE, ("Allocate %d memory for BA reordering\n", (UINT32)(num*sizeof(struct reordering_mpdu))));
++
++ /* allocate number of mpdu_blk memory */
++ os_alloc_mem(pAd, (PUCHAR *)&mem, (num*sizeof(struct reordering_mpdu)));
++
++ pAd->mpdu_blk_pool.mem = mem;
++
++ if (mem == NULL)
++ {
++ DBGPRINT(RT_DEBUG_ERROR, ("Can't Allocate Memory for BA Reordering\n"));
++ return(FALSE);
++ }
++
++ /* build mpdu_blk free list */
++ for (i=0; i<num; i++)
++ {
++ /* get mpdu_blk */
++ mpdu_blk = (struct reordering_mpdu *) mem;
++ /* initial mpdu_blk */
++ NdisZeroMemory(mpdu_blk, sizeof(struct reordering_mpdu));
++ /* next mpdu_blk */
++ mem += sizeof(struct reordering_mpdu);
++ /* insert mpdu_blk into freelist */
++ ba_enqueue(freelist, mpdu_blk);
++ }
++
++ return(TRUE);
++}
++
++//static int blk_count=0; // sample take off, no use
++
++static struct reordering_mpdu *ba_mpdu_blk_alloc(PRTMP_ADAPTER pAd)
++{
++ struct reordering_mpdu *mpdu_blk;
++
++ NdisAcquireSpinLock(&pAd->mpdu_blk_pool.lock);
++ mpdu_blk = ba_dequeue(&pAd->mpdu_blk_pool.freelist);
++ if (mpdu_blk)
++ {
++// blk_count++;
++ /* reset mpdu_blk */
++ NdisZeroMemory(mpdu_blk, sizeof(struct reordering_mpdu));
++ }
++ NdisReleaseSpinLock(&pAd->mpdu_blk_pool.lock);
++ return mpdu_blk;
++}
++
++static void ba_mpdu_blk_free(PRTMP_ADAPTER pAd, struct reordering_mpdu *mpdu_blk)
++{
++ ASSERT(mpdu_blk);
++
++ NdisAcquireSpinLock(&pAd->mpdu_blk_pool.lock);
++// blk_count--;
++ ba_enqueue(&pAd->mpdu_blk_pool.freelist, mpdu_blk);
++ NdisReleaseSpinLock(&pAd->mpdu_blk_pool.lock);
++}
++
++
++static USHORT ba_indicate_reordering_mpdus_in_order(
++ IN PRTMP_ADAPTER pAd,
++ IN PBA_REC_ENTRY pBAEntry,
++ IN USHORT StartSeq)
++{
++ struct reordering_mpdu *mpdu_blk;
++ USHORT LastIndSeq = RESET_RCV_SEQ;
++
++ NdisAcquireSpinLock(&pBAEntry->RxReRingLock);
++
++ while ((mpdu_blk = ba_reordering_mpdu_probe(&pBAEntry->list)))
++ {
++ /* find in-order frame */
++ if (!SEQ_STEPONE(mpdu_blk->Sequence, StartSeq, MAXSEQ))
++ {
++ break;
++ }
++ /* dequeue in-order frame from reodering list */
++ mpdu_blk = ba_reordering_mpdu_dequeue(&pBAEntry->list);
++ /* pass this frame up */
++ ANNOUNCE_REORDERING_PACKET(pAd, mpdu_blk);
++ /* move to next sequence */
++ StartSeq = mpdu_blk->Sequence;
++ LastIndSeq = StartSeq;
++ /* free mpdu_blk */
++ ba_mpdu_blk_free(pAd, mpdu_blk);
++ }
++
++ NdisReleaseSpinLock(&pBAEntry->RxReRingLock);
++
++ /* update last indicated sequence */
++ return LastIndSeq;
++}
++
++static void ba_indicate_reordering_mpdus_le_seq(
++ IN PRTMP_ADAPTER pAd,
++ IN PBA_REC_ENTRY pBAEntry,
++ IN USHORT Sequence)
++{
++ struct reordering_mpdu *mpdu_blk;
++
++ NdisAcquireSpinLock(&pBAEntry->RxReRingLock);
++ while ((mpdu_blk = ba_reordering_mpdu_probe(&pBAEntry->list)))
++ {
++ /* find in-order frame */
++ if ((mpdu_blk->Sequence == Sequence) || SEQ_SMALLER(mpdu_blk->Sequence, Sequence, MAXSEQ))
++ {
++ /* dequeue in-order frame from reodering list */
++ mpdu_blk = ba_reordering_mpdu_dequeue(&pBAEntry->list);
++ /* pass this frame up */
++ ANNOUNCE_REORDERING_PACKET(pAd, mpdu_blk);
++ /* free mpdu_blk */
++ ba_mpdu_blk_free(pAd, mpdu_blk);
++ }
++ else
++ {
++ break;
++ }
++ }
++ NdisReleaseSpinLock(&pBAEntry->RxReRingLock);
++}
++
++
++static void ba_refresh_reordering_mpdus(
++ IN PRTMP_ADAPTER pAd,
++ PBA_REC_ENTRY pBAEntry)
++{
++ struct reordering_mpdu *mpdu_blk;
++
++ NdisAcquireSpinLock(&pBAEntry->RxReRingLock);
++
++ /* dequeue in-order frame from reodering list */
++ while ((mpdu_blk = ba_reordering_mpdu_dequeue(&pBAEntry->list)))
++ {
++ /* pass this frame up */
++ ANNOUNCE_REORDERING_PACKET(pAd, mpdu_blk);
++
++ pBAEntry->LastIndSeq = mpdu_blk->Sequence;
++ ba_mpdu_blk_free(pAd, mpdu_blk);
++
++ /* update last indicated sequence */
++ }
++ ASSERT(pBAEntry->list.qlen == 0);
++ pBAEntry->LastIndSeq = RESET_RCV_SEQ;
++ NdisReleaseSpinLock(&pBAEntry->RxReRingLock);
++}
++
++
++//static
++void ba_flush_reordering_timeout_mpdus(
++ IN PRTMP_ADAPTER pAd,
++ IN PBA_REC_ENTRY pBAEntry,
++ IN ULONG Now32)
++
++{
++ USHORT Sequence;
++
++// if ((RTMP_TIME_AFTER((unsigned long)Now32, (unsigned long)(pBAEntry->LastIndSeqAtTimer+REORDERING_PACKET_TIMEOUT)) &&
++// (pBAEntry->list.qlen > ((pBAEntry->BAWinSize*7)/8))) //||
++// (RTMP_TIME_AFTER((unsigned long)Now32, (unsigned long)(pBAEntry->LastIndSeqAtTimer+(10*REORDERING_PACKET_TIMEOUT))) &&
++// (pBAEntry->list.qlen > (pBAEntry->BAWinSize/8)))
++ if (RTMP_TIME_AFTER((unsigned long)Now32, (unsigned long)(pBAEntry->LastIndSeqAtTimer+(MAX_REORDERING_PACKET_TIMEOUT/6)))
++ &&(pBAEntry->list.qlen > 1)
++ )
++ {
++ DBGPRINT(RT_DEBUG_TRACE,("timeout[%d] (%08lx-%08lx = %d > %d): %x, flush all!\n ", pBAEntry->list.qlen, Now32, (pBAEntry->LastIndSeqAtTimer),
++ (int)((long) Now32 - (long)(pBAEntry->LastIndSeqAtTimer)), MAX_REORDERING_PACKET_TIMEOUT,
++ pBAEntry->LastIndSeq));
++ ba_refresh_reordering_mpdus(pAd, pBAEntry);
++ pBAEntry->LastIndSeqAtTimer = Now32;
++ }
++ else
++ if (RTMP_TIME_AFTER((unsigned long)Now32, (unsigned long)(pBAEntry->LastIndSeqAtTimer+(REORDERING_PACKET_TIMEOUT)))
++ && (pBAEntry->list.qlen > 0)
++ )
++ {
++ //
++ // force LastIndSeq to shift to LastIndSeq+1
++ //
++ Sequence = (pBAEntry->LastIndSeq+1) & MAXSEQ;
++ ba_indicate_reordering_mpdus_le_seq(pAd, pBAEntry, Sequence);
++ pBAEntry->LastIndSeqAtTimer = Now32;
++ pBAEntry->LastIndSeq = Sequence;
++ //
++ // indicate in-order mpdus
++ //
++ Sequence = ba_indicate_reordering_mpdus_in_order(pAd, pBAEntry, Sequence);
++ if (Sequence != RESET_RCV_SEQ)
++ {
++ pBAEntry->LastIndSeq = Sequence;
++ }
++
++ }
++#if 0
++ else if (
++ (RTMP_TIME_AFTER((unsigned long)Now32, (unsigned long)(pBAEntry->LastIndSeqAtTimer+(MAX_REORDERING_PACKET_TIMEOUT))) &&
++ (pBAEntry->list.qlen > 1))
++ )
++ {
++ DBGPRINT(RT_DEBUG_TRACE,("timeout[%d] (%lx-%lx = %d > %d): %x\n ", pBAEntry->list.qlen, Now32, (pBAEntry->LastIndSeqAtTimer),
++ (int)((long) Now32 - (long)(pBAEntry->LastIndSeqAtTimer)), MAX_REORDERING_PACKET_TIMEOUT,
++ pBAEntry->LastIndSeq));
++ ba_refresh_reordering_mpdus(pAd, pBAEntry);
++ pBAEntry->LastIndSeqAtTimer = Now32;
++ }
++#endif
++}
++
++
++/*
++ * generate ADDBA request to
++ * set up BA agreement
++ */
++VOID BAOriSessionSetUp(
++ IN PRTMP_ADAPTER pAd,
++ IN MAC_TABLE_ENTRY *pEntry,
++ IN UCHAR TID,
++ IN USHORT TimeOut,
++ IN ULONG DelayTime,
++ IN BOOLEAN isForced)
++
++{
++ //MLME_ADDBA_REQ_STRUCT AddbaReq;
++ BA_ORI_ENTRY *pBAEntry = NULL;
++ USHORT Idx;
++ BOOLEAN Cancelled;
++
++ if ((pAd->CommonCfg.BACapability.field.AutoBA != TRUE) && (isForced == FALSE))
++ return;
++
++ // if this entry is limited to use legacy tx mode, it doesn't generate BA.
++ if (RTMPStaFixedTxMode(pAd, pEntry) != FIXED_TXMODE_HT)
++ return;
++
++ if ((pEntry->BADeclineBitmap & (1<<TID)) && (isForced == FALSE))
++ {
++ // try again after 3 secs
++ DelayTime = 3000;
++// printk("DeCline BA from Peer\n");
++// return;
++ }
++
++
++ Idx = pEntry->BAOriWcidArray[TID];
++ if (Idx == 0)
++ {
++ // allocate a BA session
++ pBAEntry = BATableAllocOriEntry(pAd, &Idx);
++ if (pBAEntry == NULL)
++ {
++ DBGPRINT(RT_DEBUG_TRACE,("ADDBA - MlmeADDBAAction() allocate BA session failed \n"));
++ return;
++ }
++ }
++ else
++ {
++ pBAEntry =&pAd->BATable.BAOriEntry[Idx];
++ }
++
++ if (pBAEntry->ORI_BA_Status >= Originator_WaitRes)
++ {
++ return;
++ }
++
++ pEntry->BAOriWcidArray[TID] = Idx;
++
++ // Initialize BA session
++ pBAEntry->ORI_BA_Status = Originator_WaitRes;
++ pBAEntry->Wcid = pEntry->Aid;
++ pBAEntry->BAWinSize = pAd->CommonCfg.BACapability.field.RxBAWinLimit;
++ pBAEntry->Sequence = BA_ORI_INIT_SEQ;
++ pBAEntry->Token = 1; // (2008-01-21) Jan Lee recommends it - this token can't be 0
++ pBAEntry->TID = TID;
++ pBAEntry->TimeOutValue = TimeOut;
++ pBAEntry->pAdapter = pAd;
++
++ if (!(pEntry->TXBAbitmap & (1<<TID)))
++ {
++ RTMPInitTimer(pAd, &pBAEntry->ORIBATimer, GET_TIMER_FUNCTION(BAOriSessionSetupTimeout), pBAEntry, FALSE);
++ }
++ else
++ RTMPCancelTimer(&pBAEntry->ORIBATimer, &Cancelled);
++
++ // set timer to send ADDBA request
++ RTMPSetTimer(&pBAEntry->ORIBATimer, DelayTime);
++}
++
++VOID BAOriSessionAdd(
++ IN PRTMP_ADAPTER pAd,
++ IN MAC_TABLE_ENTRY *pEntry,
++ IN PFRAME_ADDBA_RSP pFrame)
++{
++ BA_ORI_ENTRY *pBAEntry = NULL;
++ BOOLEAN Cancelled;
++ UCHAR TID;
++ USHORT Idx;
++ PUCHAR pOutBuffer2 = NULL;
++ NDIS_STATUS NStatus;
++ ULONG FrameLen;
++ FRAME_BAR FrameBar;
++
++ TID = pFrame->BaParm.TID;
++ Idx = pEntry->BAOriWcidArray[TID];
++ pBAEntry =&pAd->BATable.BAOriEntry[Idx];
++
++ // Start fill in parameters.
++ if ((Idx !=0) && (pBAEntry->TID == TID) && (pBAEntry->ORI_BA_Status == Originator_WaitRes))
++ {
++ pBAEntry->BAWinSize = min(pBAEntry->BAWinSize, ((UCHAR)pFrame->BaParm.BufSize));
++ BA_MaxWinSizeReasign(pAd, pEntry, &pBAEntry->BAWinSize);
++
++ pBAEntry->TimeOutValue = pFrame->TimeOutValue;
++ pBAEntry->ORI_BA_Status = Originator_Done;
++ // reset sequence number
++ pBAEntry->Sequence = BA_ORI_INIT_SEQ;
++ // Set Bitmap flag.
++ pEntry->TXBAbitmap |= (1<<TID);
++ RTMPCancelTimer(&pBAEntry->ORIBATimer, &Cancelled);
++
++ pBAEntry->ORIBATimer.TimerValue = 0; //pFrame->TimeOutValue;
++
++ DBGPRINT(RT_DEBUG_TRACE,("%s : TXBAbitmap = %x, BAWinSize = %d, TimeOut = %ld\n", __FUNCTION__, pEntry->TXBAbitmap,
++ pBAEntry->BAWinSize, pBAEntry->ORIBATimer.TimerValue));
++
++ // SEND BAR ;
++ NStatus = MlmeAllocateMemory(pAd, &pOutBuffer2); //Get an unused nonpaged memory
++ if (NStatus != NDIS_STATUS_SUCCESS)
++ {
++ DBGPRINT(RT_DEBUG_TRACE,("BA - BAOriSessionAdd() allocate memory failed \n"));
++ return;
++ }
++
++
++#ifdef CONFIG_STA_SUPPORT
++ IF_DEV_CONFIG_OPMODE_ON_STA(pAd)
++ BarHeaderInit(pAd, &FrameBar, pAd->MacTab.Content[pBAEntry->Wcid].Addr, pAd->CurrentAddress);
++#endif // CONFIG_STA_SUPPORT //
++
++ FrameBar.StartingSeq.field.FragNum = 0; // make sure sequence not clear in DEL function.
++ FrameBar.StartingSeq.field.StartSeq = pBAEntry->Sequence; // make sure sequence not clear in DEL funciton.
++ FrameBar.BarControl.TID = pBAEntry->TID; // make sure sequence not clear in DEL funciton.
++ MakeOutgoingFrame(pOutBuffer2, &FrameLen,
++ sizeof(FRAME_BAR), &FrameBar,
++ END_OF_ARGS);
++ MiniportMMRequest(pAd, QID_AC_BE, pOutBuffer2, FrameLen);
++ MlmeFreeMemory(pAd, pOutBuffer2);
++
++
++ if (pBAEntry->ORIBATimer.TimerValue)
++ RTMPSetTimer(&pBAEntry->ORIBATimer, pBAEntry->ORIBATimer.TimerValue); // in mSec
++ }
++}
++
++BOOLEAN BARecSessionAdd(
++ IN PRTMP_ADAPTER pAd,
++ IN MAC_TABLE_ENTRY *pEntry,
++ IN PFRAME_ADDBA_REQ pFrame)
++{
++ BA_REC_ENTRY *pBAEntry = NULL;
++ BOOLEAN Status = TRUE;
++ BOOLEAN Cancelled;
++ USHORT Idx;
++ UCHAR TID;
++ UCHAR BAWinSize;
++ //UINT32 Value;
++ //UINT offset;
++
++
++ ASSERT(pEntry);
++
++ // find TID
++ TID = pFrame->BaParm.TID;
++
++ BAWinSize = min(((UCHAR)pFrame->BaParm.BufSize), (UCHAR)pAd->CommonCfg.BACapability.field.RxBAWinLimit);
++
++ // Intel patch
++ if (BAWinSize == 0)
++ {
++ BAWinSize = 64;
++ }
++
++ Idx = pEntry->BARecWcidArray[TID];
++
++
++ if (Idx == 0)
++ {
++ pBAEntry = BATableAllocRecEntry(pAd, &Idx);
++ }
++ else
++ {
++ pBAEntry = &pAd->BATable.BARecEntry[Idx];
++ // flush all pending reordering mpdus
++ ba_refresh_reordering_mpdus(pAd, pBAEntry);
++ }
++
++ DBGPRINT(RT_DEBUG_TRACE,("%s(%ld): Idx = %d, BAWinSize(req %d) = %d\n", __FUNCTION__, pAd->BATable.numAsRecipient, Idx,
++ pFrame->BaParm.BufSize, BAWinSize));
++
++ // Start fill in parameters.
++ if (pBAEntry != NULL)
++ {
++ ASSERT(pBAEntry->list.qlen == 0);
++
++ pBAEntry->REC_BA_Status = Recipient_HandleRes;
++ pBAEntry->BAWinSize = BAWinSize;
++ pBAEntry->Wcid = pEntry->Aid;
++ pBAEntry->TID = TID;
++ pBAEntry->TimeOutValue = pFrame->TimeOutValue;
++ pBAEntry->REC_BA_Status = Recipient_Accept;
++ // initial sequence number
++ pBAEntry->LastIndSeq = RESET_RCV_SEQ; //pFrame->BaStartSeq.field.StartSeq;
++
++ printk("Start Seq = %08x\n", pFrame->BaStartSeq.field.StartSeq);
++
++ if (pEntry->RXBAbitmap & (1<<TID))
++ {
++ RTMPCancelTimer(&pBAEntry->RECBATimer, &Cancelled);
++ }
++ else
++ {
++ RTMPInitTimer(pAd, &pBAEntry->RECBATimer, GET_TIMER_FUNCTION(BARecSessionIdleTimeout), pBAEntry, TRUE);
++ }
++
++#if 0 // for debugging
++ RTMPSetTimer(&pBAEntry->RECBATimer, REC_BA_SESSION_IDLE_TIMEOUT);
++#endif
++
++ // Set Bitmap flag.
++ pEntry->RXBAbitmap |= (1<<TID);
++ pEntry->BARecWcidArray[TID] = Idx;
++
++ pEntry->BADeclineBitmap &= ~(1<<TID);
++
++ // Set BA session mask in WCID table.
++ RT28XX_ADD_BA_SESSION_TO_ASIC(pAd, pEntry->Aid, TID);
++
++ DBGPRINT(RT_DEBUG_TRACE,("MACEntry[%d]RXBAbitmap = 0x%x. BARecWcidArray=%d\n",
++ pEntry->Aid, pEntry->RXBAbitmap, pEntry->BARecWcidArray[TID]));
++ }
++ else
++ {
++ Status = FALSE;
++ DBGPRINT(RT_DEBUG_TRACE,("Can't Accept ADDBA for %02x:%02x:%02x:%02x:%02x:%02x TID = %d\n",
++ PRINT_MAC(pEntry->Addr), TID));
++ }
++ return(Status);
++}
++
++
++BA_REC_ENTRY *BATableAllocRecEntry(
++ IN PRTMP_ADAPTER pAd,
++ OUT USHORT *Idx)
++{
++ int i;
++ BA_REC_ENTRY *pBAEntry = NULL;
++
++
++ NdisAcquireSpinLock(&pAd->BATabLock);
++
++ if (pAd->BATable.numAsRecipient >= MAX_BARECI_SESSION)
++ {
++ printk("BA Recipeint Session (%ld) > %d\n", pAd->BATable.numAsRecipient,
++ MAX_BARECI_SESSION);
++ goto done;
++ }
++
++ // reserve idx 0 to identify BAWcidArray[TID] as empty
++ for (i=1; i < MAX_LEN_OF_BA_REC_TABLE; i++)
++ {
++ pBAEntry =&pAd->BATable.BARecEntry[i];
++ if ((pBAEntry->REC_BA_Status == Recipient_NONE))
++ {
++ // get one
++ pAd->BATable.numAsRecipient++;
++ pBAEntry->REC_BA_Status = Recipient_USED;
++ *Idx = i;
++ break;
++ }
++ }
++
++done:
++ NdisReleaseSpinLock(&pAd->BATabLock);
++ return pBAEntry;
++}
++
++BA_ORI_ENTRY *BATableAllocOriEntry(
++ IN PRTMP_ADAPTER pAd,
++ OUT USHORT *Idx)
++{
++ int i;
++ BA_ORI_ENTRY *pBAEntry = NULL;
++
++ NdisAcquireSpinLock(&pAd->BATabLock);
++
++ if (pAd->BATable.numAsOriginator >= (MAX_LEN_OF_BA_ORI_TABLE))
++ {
++ goto done;
++ }
++
++ // reserve idx 0 to identify BAWcidArray[TID] as empty
++ for (i=1; i<MAX_LEN_OF_BA_ORI_TABLE; i++)
++ {
++ pBAEntry =&pAd->BATable.BAOriEntry[i];
++ if ((pBAEntry->ORI_BA_Status == Originator_NONE))
++ {
++ // get one
++ pAd->BATable.numAsOriginator++;
++ pBAEntry->ORI_BA_Status = Originator_USED;
++ pBAEntry->pAdapter = pAd;
++ *Idx = i;
++ break;
++ }
++ }
++
++done:
++ NdisReleaseSpinLock(&pAd->BATabLock);
++ return pBAEntry;
++}
++
++
++VOID BATableFreeOriEntry(
++ IN PRTMP_ADAPTER pAd,
++ IN ULONG Idx)
++{
++ BA_ORI_ENTRY *pBAEntry = NULL;
++ MAC_TABLE_ENTRY *pEntry;
++
++
++ if ((Idx == 0) || (Idx >= MAX_LEN_OF_BA_ORI_TABLE))
++ return;
++
++ pBAEntry =&pAd->BATable.BAOriEntry[Idx];
++
++ if (pBAEntry->ORI_BA_Status != Originator_NONE)
++ {
++ pEntry = &pAd->MacTab.Content[pBAEntry->Wcid];
++ pEntry->BAOriWcidArray[pBAEntry->TID] = 0;
++
++
++ NdisAcquireSpinLock(&pAd->BATabLock);
++ if (pBAEntry->ORI_BA_Status == Originator_Done)
++ {
++ pEntry->TXBAbitmap &= (~(1<<(pBAEntry->TID) ));
++ DBGPRINT(RT_DEBUG_TRACE, ("BATableFreeOriEntry numAsOriginator= %ld\n", pAd->BATable.numAsRecipient));
++ // Erase Bitmap flag.
++ }
++
++ ASSERT(pAd->BATable.numAsOriginator != 0);
++
++ pAd->BATable.numAsOriginator -= 1;
++
++ pBAEntry->ORI_BA_Status = Originator_NONE;
++ pBAEntry->Token = 0;
++ NdisReleaseSpinLock(&pAd->BATabLock);
++ }
++}
++
++
++VOID BATableFreeRecEntry(
++ IN PRTMP_ADAPTER pAd,
++ IN ULONG Idx)
++{
++ BA_REC_ENTRY *pBAEntry = NULL;
++ MAC_TABLE_ENTRY *pEntry;
++
++
++ if ((Idx == 0) || (Idx >= MAX_LEN_OF_BA_REC_TABLE))
++ return;
++
++ pBAEntry =&pAd->BATable.BARecEntry[Idx];
++
++ if (pBAEntry->REC_BA_Status != Recipient_NONE)
++ {
++ pEntry = &pAd->MacTab.Content[pBAEntry->Wcid];
++ pEntry->BARecWcidArray[pBAEntry->TID] = 0;
++
++ NdisAcquireSpinLock(&pAd->BATabLock);
++
++ ASSERT(pAd->BATable.numAsRecipient != 0);
++
++ pAd->BATable.numAsRecipient -= 1;
++
++ pBAEntry->REC_BA_Status = Recipient_NONE;
++ NdisReleaseSpinLock(&pAd->BATabLock);
++ }
++}
++
++
++VOID BAOriSessionTearDown(
++ IN OUT PRTMP_ADAPTER pAd,
++ IN UCHAR Wcid,
++ IN UCHAR TID,
++ IN BOOLEAN bPassive,
++ IN BOOLEAN bForceSend)
++{
++ ULONG Idx = 0;
++ BA_ORI_ENTRY *pBAEntry;
++ BOOLEAN Cancelled;
++
++ if (Wcid >= MAX_LEN_OF_MAC_TABLE)
++ {
++ return;
++ }
++
++ //
++ // Locate corresponding BA Originator Entry in BA Table with the (pAddr,TID).
++ //
++ Idx = pAd->MacTab.Content[Wcid].BAOriWcidArray[TID];
++ if ((Idx == 0) || (Idx >= MAX_LEN_OF_BA_ORI_TABLE))
++ {
++ if (bForceSend == TRUE)
++ {
++ // force send specified TID DelBA
++ MLME_DELBA_REQ_STRUCT DelbaReq;
++ MLME_QUEUE_ELEM *Elem = (MLME_QUEUE_ELEM *) kmalloc(sizeof(MLME_QUEUE_ELEM), MEM_ALLOC_FLAG);
++
++ NdisZeroMemory(&DelbaReq, sizeof(DelbaReq));
++ NdisZeroMemory(Elem, sizeof(MLME_QUEUE_ELEM));
++
++ COPY_MAC_ADDR(DelbaReq.Addr, pAd->MacTab.Content[Wcid].Addr);
++ DelbaReq.Wcid = Wcid;
++ DelbaReq.TID = TID;
++ DelbaReq.Initiator = ORIGINATOR;
++#if 1
++ Elem->MsgLen = sizeof(DelbaReq);
++ NdisMoveMemory(Elem->Msg, &DelbaReq, sizeof(DelbaReq));
++ MlmeDELBAAction(pAd, Elem);
++ kfree(Elem);
++#else
++ MlmeEnqueue(pAd, ACTION_STATE_MACHINE, MT2_MLME_ORI_DELBA_CATE, sizeof(MLME_DELBA_REQ_STRUCT), (PVOID)&DelbaReq);
++ RT28XX_MLME_HANDLER(pAd);
++#endif
++ }
++
++ return;
++ }
++
++ DBGPRINT(RT_DEBUG_TRACE,("%s===>Wcid=%d.TID=%d \n", __FUNCTION__, Wcid, TID));
++
++ pBAEntry = &pAd->BATable.BAOriEntry[Idx];
++ DBGPRINT(RT_DEBUG_TRACE,("\t===>Idx = %ld, Wcid=%d.TID=%d, ORI_BA_Status = %d \n", Idx, Wcid, TID, pBAEntry->ORI_BA_Status));
++ //
++ // Prepare DelBA action frame and send to the peer.
++ //
++ if ((bPassive == FALSE) && (TID == pBAEntry->TID) && (pBAEntry->ORI_BA_Status == Originator_Done))
++ {
++ MLME_DELBA_REQ_STRUCT DelbaReq;
++ MLME_QUEUE_ELEM *Elem = (MLME_QUEUE_ELEM *) kmalloc(sizeof(MLME_QUEUE_ELEM), MEM_ALLOC_FLAG);
++
++ NdisZeroMemory(&DelbaReq, sizeof(DelbaReq));
++ NdisZeroMemory(Elem, sizeof(MLME_QUEUE_ELEM));
++
++ COPY_MAC_ADDR(DelbaReq.Addr, pAd->MacTab.Content[Wcid].Addr);
++ DelbaReq.Wcid = Wcid;
++ DelbaReq.TID = pBAEntry->TID;
++ DelbaReq.Initiator = ORIGINATOR;
++#if 1
++ Elem->MsgLen = sizeof(DelbaReq);
++ NdisMoveMemory(Elem->Msg, &DelbaReq, sizeof(DelbaReq));
++ MlmeDELBAAction(pAd, Elem);
++ kfree(Elem);
++#else
++ MlmeEnqueue(pAd, ACTION_STATE_MACHINE, MT2_MLME_ORI_DELBA_CATE, sizeof(MLME_DELBA_REQ_STRUCT), (PVOID)&DelbaReq);
++ RT28XX_MLME_HANDLER(pAd);
++#endif
++ }
++ RTMPCancelTimer(&pBAEntry->ORIBATimer, &Cancelled);
++ BATableFreeOriEntry(pAd, Idx);
++
++ if (bPassive)
++ {
++ //BAOriSessionSetUp(pAd, &pAd->MacTab.Content[Wcid], TID, 0, 10000, TRUE);
++ }
++}
++
++VOID BARecSessionTearDown(
++ IN OUT PRTMP_ADAPTER pAd,
++ IN UCHAR Wcid,
++ IN UCHAR TID,
++ IN BOOLEAN bPassive)
++{
++ ULONG Idx = 0;
++ BA_REC_ENTRY *pBAEntry;
++
++ if (Wcid >= MAX_LEN_OF_MAC_TABLE)
++ {
++ return;
++ }
++
++ //
++ // Locate corresponding BA Originator Entry in BA Table with the (pAddr,TID).
++ //
++ Idx = pAd->MacTab.Content[Wcid].BARecWcidArray[TID];
++ if (Idx == 0)
++ return;
++
++ DBGPRINT(RT_DEBUG_TRACE,("%s===>Wcid=%d.TID=%d \n", __FUNCTION__, Wcid, TID));
++
++
++ pBAEntry = &pAd->BATable.BARecEntry[Idx];
++ DBGPRINT(RT_DEBUG_TRACE,("\t===>Idx = %ld, Wcid=%d.TID=%d, REC_BA_Status = %d \n", Idx, Wcid, TID, pBAEntry->REC_BA_Status));
++ //
++ // Prepare DelBA action frame and send to the peer.
++ //
++ if ((TID == pBAEntry->TID) && (pBAEntry->REC_BA_Status == Recipient_Accept))
++ {
++ MLME_DELBA_REQ_STRUCT DelbaReq;
++ BOOLEAN Cancelled;
++ MLME_QUEUE_ELEM *Elem = (MLME_QUEUE_ELEM *) kmalloc(sizeof(MLME_QUEUE_ELEM), MEM_ALLOC_FLAG);
++ //ULONG offset;
++ //UINT32 VALUE;
++
++ RTMPCancelTimer(&pBAEntry->RECBATimer, &Cancelled);
++
++ //
++ // 1. Send DELBA Action Frame
++ //
++ if (bPassive == FALSE)
++ {
++ NdisZeroMemory(&DelbaReq, sizeof(DelbaReq));
++ NdisZeroMemory(Elem, sizeof(MLME_QUEUE_ELEM));
++
++ COPY_MAC_ADDR(DelbaReq.Addr, pAd->MacTab.Content[Wcid].Addr);
++ DelbaReq.Wcid = Wcid;
++ DelbaReq.TID = TID;
++ DelbaReq.Initiator = RECIPIENT;
++#if 1
++ Elem->MsgLen = sizeof(DelbaReq);
++ NdisMoveMemory(Elem->Msg, &DelbaReq, sizeof(DelbaReq));
++ MlmeDELBAAction(pAd, Elem);
++ kfree(Elem);
++#else
++ MlmeEnqueue(pAd, ACTION_STATE_MACHINE, MT2_MLME_ORI_DELBA_CATE, sizeof(MLME_DELBA_REQ_STRUCT), (PVOID)&DelbaReq);
++ RT28XX_MLME_HANDLER(pAd);
++#endif
++ }
++
++
++ //
++ // 2. Free resource of BA session
++ //
++ // flush all pending reordering mpdus
++ ba_refresh_reordering_mpdus(pAd, pBAEntry);
++
++ NdisAcquireSpinLock(&pAd->BATabLock);
++
++ // Erase Bitmap flag.
++ pBAEntry->LastIndSeq = RESET_RCV_SEQ;
++ pBAEntry->BAWinSize = 0;
++ // Erase Bitmap flag at software mactable
++ pAd->MacTab.Content[Wcid].RXBAbitmap &= (~(1<<(pBAEntry->TID)));
++ pAd->MacTab.Content[Wcid].BARecWcidArray[TID] = 0;
++
++ RT28XX_DEL_BA_SESSION_FROM_ASIC(pAd, Wcid, TID);
++
++ NdisReleaseSpinLock(&pAd->BATabLock);
++
++ }
++
++ BATableFreeRecEntry(pAd, Idx);
++}
++
++VOID BASessionTearDownALL(
++ IN OUT PRTMP_ADAPTER pAd,
++ IN UCHAR Wcid)
++{
++ int i;
++
++ for (i=0; i<NUM_OF_TID; i++)
++ {
++ BAOriSessionTearDown(pAd, Wcid, i, FALSE, FALSE);
++ BARecSessionTearDown(pAd, Wcid, i, FALSE);
++ }
++}
++
++
++/*
++ ==========================================================================
++ Description:
++ Retry sending ADDBA Reqest.
++
++ IRQL = DISPATCH_LEVEL
++
++ Parametrs:
++ p8023Header: if this is already 802.3 format, p8023Header is NULL
++
++ Return : TRUE if put into rx reordering buffer, shouldn't indicaterxhere.
++ FALSE , then continue indicaterx at this moment.
++ ==========================================================================
++ */
++VOID BAOriSessionSetupTimeout(
++ IN PVOID SystemSpecific1,
++ IN PVOID FunctionContext,
++ IN PVOID SystemSpecific2,
++ IN PVOID SystemSpecific3)
++{
++ BA_ORI_ENTRY *pBAEntry = (BA_ORI_ENTRY *)FunctionContext;
++ MAC_TABLE_ENTRY *pEntry;
++ PRTMP_ADAPTER pAd;
++
++ if (pBAEntry == NULL)
++ return;
++
++ pAd = pBAEntry->pAdapter;
++
++#ifdef CONFIG_STA_SUPPORT
++ IF_DEV_CONFIG_OPMODE_ON_STA(pAd)
++ {
++ // Do nothing if monitor mode is on
++ if (MONITOR_ON(pAd))
++ return;
++ }
++#endif // CONFIG_STA_SUPPORT //
++
++#ifdef RALINK_ATE
++ // Nothing to do in ATE mode.
++ if (ATE_ON(pAd))
++ return;
++#endif // RALINK_ATE //
++
++ pEntry = &pAd->MacTab.Content[pBAEntry->Wcid];
++
++ if ((pBAEntry->ORI_BA_Status == Originator_WaitRes) && (pBAEntry->Token < ORI_SESSION_MAX_RETRY))
++ {
++ MLME_ADDBA_REQ_STRUCT AddbaReq;
++
++ NdisZeroMemory(&AddbaReq, sizeof(AddbaReq));
++ COPY_MAC_ADDR(AddbaReq.pAddr, pEntry->Addr);
++ AddbaReq.Wcid = (UCHAR)(pEntry->Aid);
++ AddbaReq.TID = pBAEntry->TID;
++ AddbaReq.BaBufSize = pAd->CommonCfg.BACapability.field.RxBAWinLimit;
++ AddbaReq.TimeOutValue = 0;
++ AddbaReq.Token = pBAEntry->Token;
++ MlmeEnqueue(pAd, ACTION_STATE_MACHINE, MT2_MLME_ADD_BA_CATE, sizeof(MLME_ADDBA_REQ_STRUCT), (PVOID)&AddbaReq);
++ RT28XX_MLME_HANDLER(pAd);
++ DBGPRINT(RT_DEBUG_TRACE,("BA Ori Session Timeout(%d) : Send ADD BA again\n", pBAEntry->Token));
++
++ pBAEntry->Token++;
++ RTMPSetTimer(&pBAEntry->ORIBATimer, ORI_BA_SESSION_TIMEOUT);
++ }
++ else
++ {
++ BATableFreeOriEntry(pAd, pEntry->BAOriWcidArray[pBAEntry->TID]);
++ }
++}
++
++/*
++ ==========================================================================
++ Description:
++ Retry sending ADDBA Reqest.
++
++ IRQL = DISPATCH_LEVEL
++
++ Parametrs:
++ p8023Header: if this is already 802.3 format, p8023Header is NULL
++
++ Return : TRUE if put into rx reordering buffer, shouldn't indicaterxhere.
++ FALSE , then continue indicaterx at this moment.
++ ==========================================================================
++ */
++VOID BARecSessionIdleTimeout(
++ IN PVOID SystemSpecific1,
++ IN PVOID FunctionContext,
++ IN PVOID SystemSpecific2,
++ IN PVOID SystemSpecific3)
++{
++
++ BA_REC_ENTRY *pBAEntry = (BA_REC_ENTRY *)FunctionContext;
++ PRTMP_ADAPTER pAd;
++ ULONG Now32;
++
++ if (pBAEntry == NULL)
++ return;
++
++ if ((pBAEntry->REC_BA_Status == Recipient_Accept))
++ {
++ NdisGetSystemUpTime(&Now32);
++
++ if (RTMP_TIME_AFTER((unsigned long)Now32, (unsigned long)(pBAEntry->LastIndSeqAtTimer + REC_BA_SESSION_IDLE_TIMEOUT)))
++ {
++ pAd = pBAEntry->pAdapter;
++ // flush all pending reordering mpdus
++ ba_refresh_reordering_mpdus(pAd, pBAEntry);
++ printk("%ld: REC BA session Timeout\n", Now32);
++ }
++ }
++}
++
++
++VOID PeerAddBAReqAction(
++ IN PRTMP_ADAPTER pAd,
++ IN MLME_QUEUE_ELEM *Elem)
++
++{
++ // 7.4.4.1
++ //ULONG Idx;
++ UCHAR Status = 1;
++ UCHAR pAddr[6];
++ FRAME_ADDBA_RSP ADDframe;
++ PUCHAR pOutBuffer = NULL;
++ NDIS_STATUS NStatus;
++ PFRAME_ADDBA_REQ pAddreqFrame = NULL;
++ //UCHAR BufSize;
++ ULONG FrameLen;
++ PULONG ptemp;
++ PMAC_TABLE_ENTRY pMacEntry;
++
++ DBGPRINT(RT_DEBUG_TRACE, ("%s ==> (Wcid = %d)\n", __FUNCTION__, Elem->Wcid));
++
++ //hex_dump("AddBAReq", Elem->Msg, Elem->MsgLen);
++
++ //ADDBA Request from unknown peer, ignore this.
++ if (Elem->Wcid >= MAX_LEN_OF_MAC_TABLE)
++ return;
++
++ pMacEntry = &pAd->MacTab.Content[Elem->Wcid];
++ DBGPRINT(RT_DEBUG_TRACE,("BA - PeerAddBAReqAction----> \n"));
++ ptemp = (PULONG)Elem->Msg;
++ //DBGPRINT_RAW(RT_DEBUG_EMU, ("%08x:: %08x:: %08x:: %08x:: %08x:: %08x:: %08x:: %08x:: %08x\n", *(ptemp), *(ptemp+1), *(ptemp+2), *(ptemp+3), *(ptemp+4), *(ptemp+5), *(ptemp+6), *(ptemp+7), *(ptemp+8)));
++
++ if (PeerAddBAReqActionSanity(pAd, Elem->Msg, Elem->MsgLen, pAddr))
++ {
++
++ if ((pAd->CommonCfg.bBADecline == FALSE) && IS_HT_STA(pMacEntry))
++ {
++ pAddreqFrame = (PFRAME_ADDBA_REQ)(&Elem->Msg[0]);
++ printk("Rcv Wcid(%d) AddBAReq\n", Elem->Wcid);
++ if (BARecSessionAdd(pAd, &pAd->MacTab.Content[Elem->Wcid], pAddreqFrame))
++ Status = 0;
++ else
++ Status = 38; // more parameters have invalid values
++ }
++ else
++ {
++ Status = 37; // the request has been declined.
++ }
++ }
++
++ if (pAd->MacTab.Content[Elem->Wcid].ValidAsCLI)
++ ASSERT(pAd->MacTab.Content[Elem->Wcid].Sst == SST_ASSOC);
++
++ pAddreqFrame = (PFRAME_ADDBA_REQ)(&Elem->Msg[0]);
++ // 2. Always send back ADDBA Response
++ NStatus = MlmeAllocateMemory(pAd, &pOutBuffer); //Get an unused nonpaged memory
++ if (NStatus != NDIS_STATUS_SUCCESS)
++ {
++ DBGPRINT(RT_DEBUG_TRACE,("ACTION - PeerBAAction() allocate memory failed \n"));
++ return;
++ }
++
++ NdisZeroMemory(&ADDframe, sizeof(FRAME_ADDBA_RSP));
++ // 2-1. Prepare ADDBA Response frame.
++#ifdef CONFIG_STA_SUPPORT
++ IF_DEV_CONFIG_OPMODE_ON_STA(pAd)
++ {
++ if (ADHOC_ON(pAd))
++ ActHeaderInit(pAd, &ADDframe.Hdr, pAddr, pAd->CurrentAddress, pAd->CommonCfg.Bssid);
++ else
++#ifdef QOS_DLS_SUPPORT
++ if (pAd->MacTab.Content[Elem->Wcid].ValidAsDls)
++ ActHeaderInit(pAd, &ADDframe.Hdr, pAddr, pAd->CurrentAddress, pAd->CommonCfg.Bssid);
++ else
++#endif // QOS_DLS_SUPPORT //
++ ActHeaderInit(pAd, &ADDframe.Hdr, pAd->CommonCfg.Bssid, pAd->CurrentAddress, pAddr);
++ }
++#endif // CONFIG_STA_SUPPORT //
++ ADDframe.Category = CATEGORY_BA;
++ ADDframe.Action = ADDBA_RESP;
++ ADDframe.Token = pAddreqFrame->Token;
++ // What is the Status code?? need to check.
++ ADDframe.StatusCode = Status;
++ ADDframe.BaParm.BAPolicy = IMMED_BA;
++ ADDframe.BaParm.AMSDUSupported = 0;
++ ADDframe.BaParm.TID = pAddreqFrame->BaParm.TID;
++ ADDframe.BaParm.BufSize = min(((UCHAR)pAddreqFrame->BaParm.BufSize), (UCHAR)pAd->CommonCfg.BACapability.field.RxBAWinLimit);
++ if (ADDframe.BaParm.BufSize == 0)
++ {
++ ADDframe.BaParm.BufSize = 64;
++ }
++ ADDframe.TimeOutValue = 0; //pAddreqFrame->TimeOutValue;
++
++ *(USHORT *)(&ADDframe.BaParm) = cpu2le16(*(USHORT *)(&ADDframe.BaParm));
++ ADDframe.StatusCode = cpu2le16(ADDframe.StatusCode);
++ ADDframe.TimeOutValue = cpu2le16(ADDframe.TimeOutValue);
++
++ MakeOutgoingFrame(pOutBuffer, &FrameLen,
++ sizeof(FRAME_ADDBA_RSP), &ADDframe,
++ END_OF_ARGS);
++ MiniportMMRequest(pAd, QID_AC_BE, pOutBuffer, FrameLen);
++ MlmeFreeMemory(pAd, pOutBuffer);
++
++ DBGPRINT(RT_DEBUG_TRACE, ("%s(%d): TID(%d), BufSize(%d) <== \n", __FUNCTION__, Elem->Wcid, ADDframe.BaParm.TID,
++ ADDframe.BaParm.BufSize));
++}
++
++
++VOID PeerAddBARspAction(
++ IN PRTMP_ADAPTER pAd,
++ IN MLME_QUEUE_ELEM *Elem)
++
++{
++ //UCHAR Idx, i;
++ //PUCHAR pOutBuffer = NULL;
++ PFRAME_ADDBA_RSP pFrame = NULL;
++ //PBA_ORI_ENTRY pBAEntry;
++
++ //ADDBA Response from unknown peer, ignore this.
++ if (Elem->Wcid >= MAX_LEN_OF_MAC_TABLE)
++ return;
++
++ DBGPRINT(RT_DEBUG_TRACE, ("%s ==> Wcid(%d)\n", __FUNCTION__, Elem->Wcid));
++
++ //hex_dump("PeerAddBARspAction()", Elem->Msg, Elem->MsgLen);
++
++ if (PeerAddBARspActionSanity(pAd, Elem->Msg, Elem->MsgLen))
++ {
++ pFrame = (PFRAME_ADDBA_RSP)(&Elem->Msg[0]);
++
++ DBGPRINT(RT_DEBUG_TRACE, ("\t\t StatusCode = %d\n", pFrame->StatusCode));
++ switch (pFrame->StatusCode)
++ {
++ case 0:
++ // I want a BAsession with this peer as an originator.
++ BAOriSessionAdd(pAd, &pAd->MacTab.Content[Elem->Wcid], pFrame);
++ break;
++ default:
++ // check status == USED ???
++ BAOriSessionTearDown(pAd, Elem->Wcid, pFrame->BaParm.TID, TRUE, FALSE);
++ break;
++ }
++ // Rcv Decline StatusCode
++ if ((pFrame->StatusCode == 37)
++#ifdef CONFIG_STA_SUPPORT
++ || ((pAd->OpMode == OPMODE_STA) && STA_TGN_WIFI_ON(pAd) && (pFrame->StatusCode != 0))
++#endif // CONFIG_STA_SUPPORT //
++ )
++ {
++ pAd->MacTab.Content[Elem->Wcid].BADeclineBitmap |= 1<<pFrame->BaParm.TID;
++ }
++ }
++}
++
++VOID PeerDelBAAction(
++ IN PRTMP_ADAPTER pAd,
++ IN MLME_QUEUE_ELEM *Elem)
++
++{
++ //UCHAR Idx;
++ //PUCHAR pOutBuffer = NULL;
++ PFRAME_DELBA_REQ pDelFrame = NULL;
++
++ DBGPRINT(RT_DEBUG_TRACE,("%s ==>\n", __FUNCTION__));
++ //DELBA Request from unknown peer, ignore this.
++ if (PeerDelBAActionSanity(pAd, Elem->Wcid, Elem->Msg, Elem->MsgLen))
++ {
++ pDelFrame = (PFRAME_DELBA_REQ)(&Elem->Msg[0]);
++ if (pDelFrame->DelbaParm.Initiator == ORIGINATOR)
++ {
++ DBGPRINT(RT_DEBUG_TRACE,("BA - PeerDelBAAction----> ORIGINATOR\n"));
++ BARecSessionTearDown(pAd, Elem->Wcid, pDelFrame->DelbaParm.TID, TRUE);
++ }
++ else
++ {
++ DBGPRINT(RT_DEBUG_TRACE,("BA - PeerDelBAAction----> RECIPIENT, Reason = %d\n", pDelFrame->ReasonCode));
++ //hex_dump("DelBA Frame", pDelFrame, Elem->MsgLen);
++ BAOriSessionTearDown(pAd, Elem->Wcid, pDelFrame->DelbaParm.TID, TRUE, FALSE);
++ }
++ }
++}
++
++
++BOOLEAN CntlEnqueueForRecv(
++ IN PRTMP_ADAPTER pAd,
++ IN ULONG Wcid,
++ IN ULONG MsgLen,
++ IN PFRAME_BA_REQ pMsg)
++{
++ PFRAME_BA_REQ pFrame = pMsg;
++ //PRTMP_REORDERBUF pBuffer;
++ //PRTMP_REORDERBUF pDmaBuf;
++ PBA_REC_ENTRY pBAEntry;
++ //BOOLEAN Result;
++ ULONG Idx;
++ //UCHAR NumRxPkt;
++ UCHAR TID;//, i;
++
++ TID = (UCHAR)pFrame->BARControl.TID;
++
++ DBGPRINT(RT_DEBUG_TRACE, ("%s(): BAR-Wcid(%ld), Tid (%d)\n", __FUNCTION__, Wcid, TID));
++ //hex_dump("BAR", (PCHAR) pFrame, MsgLen);
++ // Do nothing if the driver is starting halt state.
++ // This might happen when timer already been fired before cancel timer with mlmehalt
++ if (RTMP_TEST_FLAG(pAd, fRTMP_ADAPTER_HALT_IN_PROGRESS | fRTMP_ADAPTER_NIC_NOT_EXIST))
++ return FALSE;
++
++ // First check the size, it MUST not exceed the mlme queue size
++ if (MsgLen > MGMT_DMA_BUFFER_SIZE)
++ {
++ DBGPRINT_ERR(("CntlEnqueueForRecv: frame too large, size = %ld \n", MsgLen));
++ return FALSE;
++ }
++ else if (MsgLen != sizeof(FRAME_BA_REQ))
++ {
++ DBGPRINT_ERR(("CntlEnqueueForRecv: BlockAck Request frame length size = %ld incorrect\n", MsgLen));
++ return FALSE;
++ }
++ else if (MsgLen != sizeof(FRAME_BA_REQ))
++ {
++ DBGPRINT_ERR(("CntlEnqueueForRecv: BlockAck Request frame length size = %ld incorrect\n", MsgLen));
++ return FALSE;
++ }
++
++ if ((Wcid < MAX_LEN_OF_MAC_TABLE) && (TID < 8))
++ {
++ // if this receiving packet is from SA that is in our OriEntry. Since WCID <9 has direct mapping. no need search.
++ Idx = pAd->MacTab.Content[Wcid].BARecWcidArray[TID];
++ pBAEntry = &pAd->BATable.BARecEntry[Idx];
++ }
++ else
++ {
++ return FALSE;
++ }
++
++ DBGPRINT(RT_DEBUG_TRACE, ("BAR(%ld) : Tid (%d) - %04x:%04x\n", Wcid, TID, pFrame->BAStartingSeq.field.StartSeq, pBAEntry->LastIndSeq ));
++
++ if (SEQ_SMALLER(pBAEntry->LastIndSeq, pFrame->BAStartingSeq.field.StartSeq, MAXSEQ))
++ {
++ //printk("BAR Seq = %x, LastIndSeq = %x\n", pFrame->BAStartingSeq.field.StartSeq, pBAEntry->LastIndSeq);
++ ba_indicate_reordering_mpdus_le_seq(pAd, pBAEntry, pFrame->BAStartingSeq.field.StartSeq);
++ pBAEntry->LastIndSeq = (pFrame->BAStartingSeq.field.StartSeq == 0) ? MAXSEQ :(pFrame->BAStartingSeq.field.StartSeq -1);
++ }
++ //ba_refresh_reordering_mpdus(pAd, pBAEntry);
++ return TRUE;
++}
++
++/*
++Description : Send PSMP Action frame If PSMP mode switches.
++*/
++VOID SendPSMPAction(
++ IN PRTMP_ADAPTER pAd,
++ IN UCHAR Wcid,
++ IN UCHAR Psmp)
++{
++ PUCHAR pOutBuffer = NULL;
++ NDIS_STATUS NStatus;
++ //ULONG Idx;
++ FRAME_PSMP_ACTION Frame;
++ ULONG FrameLen;
++
++ NStatus = MlmeAllocateMemory(pAd, &pOutBuffer); //Get an unused nonpaged memory
++ if (NStatus != NDIS_STATUS_SUCCESS)
++ {
++ DBGPRINT(RT_DEBUG_ERROR,("BA - MlmeADDBAAction() allocate memory failed \n"));
++ return;
++ }
++#ifdef CONFIG_STA_SUPPORT
++ IF_DEV_CONFIG_OPMODE_ON_STA(pAd)
++ ActHeaderInit(pAd, &Frame.Hdr, pAd->CommonCfg.Bssid, pAd->CurrentAddress, pAd->MacTab.Content[Wcid].Addr);
++#endif // CONFIG_STA_SUPPORT //
++
++ Frame.Category = CATEGORY_HT;
++ Frame.Action = SMPS_ACTION;
++ switch (Psmp)
++ {
++ case MMPS_ENABLE:
++ Frame.Psmp = 0;
++ break;
++ case MMPS_DYNAMIC:
++ Frame.Psmp = 3;
++ break;
++ case MMPS_STATIC:
++ Frame.Psmp = 1;
++ break;
++ }
++ MakeOutgoingFrame(pOutBuffer, &FrameLen,
++ sizeof(FRAME_PSMP_ACTION), &Frame,
++ END_OF_ARGS);
++ MiniportMMRequest(pAd, QID_AC_BE, pOutBuffer, FrameLen);
++ MlmeFreeMemory(pAd, pOutBuffer);
++ DBGPRINT(RT_DEBUG_ERROR,("HT - SendPSMPAction( %d ) \n", Frame.Psmp));
++}
++
++
++#define RADIO_MEASUREMENT_REQUEST_ACTION 0
++
++typedef struct PACKED
++{
++ UCHAR RegulatoryClass;
++ UCHAR ChannelNumber;
++ USHORT RandomInterval;
++ USHORT MeasurementDuration;
++ UCHAR MeasurementMode;
++ UCHAR BSSID[MAC_ADDR_LEN];
++ UCHAR ReportingCondition;
++ UCHAR Threshold;
++ UCHAR SSIDIE[2]; // 2 byte
++} BEACON_REQUEST;
++
++typedef struct PACKED
++{
++ UCHAR ID;
++ UCHAR Length;
++ UCHAR Token;
++ UCHAR RequestMode;
++ UCHAR Type;
++} MEASUREMENT_REQ;
++
++
++
++
++void convert_reordering_packet_to_preAMSDU_or_802_3_packet(
++ IN PRTMP_ADAPTER pAd,
++ IN RX_BLK *pRxBlk,
++ IN UCHAR FromWhichBSSID)
++{
++ PNDIS_PACKET pRxPkt;
++ UCHAR Header802_3[LENGTH_802_3];
++
++ // 1. get 802.3 Header
++ // 2. remove LLC
++ // a. pointer pRxBlk->pData to payload
++ // b. modify pRxBlk->DataSize
++
++#ifdef CONFIG_STA_SUPPORT
++ IF_DEV_CONFIG_OPMODE_ON_STA(pAd)
++ RTMP_802_11_REMOVE_LLC_AND_CONVERT_TO_802_3(pRxBlk, Header802_3);
++#endif // CONFIG_STA_SUPPORT //
++
++ ASSERT(pRxBlk->pRxPacket);
++ pRxPkt = RTPKT_TO_OSPKT(pRxBlk->pRxPacket);
++
++ RTPKT_TO_OSPKT(pRxPkt)->dev = get_netdev_from_bssid(pAd, FromWhichBSSID);
++ RTPKT_TO_OSPKT(pRxPkt)->data = pRxBlk->pData;
++ RTPKT_TO_OSPKT(pRxPkt)->len = pRxBlk->DataSize;
++ RTPKT_TO_OSPKT(pRxPkt)->tail = RTPKT_TO_OSPKT(pRxPkt)->data + RTPKT_TO_OSPKT(pRxPkt)->len;
++
++ //
++ // copy 802.3 header, if necessary
++ //
++ if (!RX_BLK_TEST_FLAG(pRxBlk, fRX_AMSDU))
++ {
++
++#ifdef CONFIG_STA_SUPPORT
++ IF_DEV_CONFIG_OPMODE_ON_STA(pAd)
++ {
++#ifdef LINUX
++ NdisMoveMemory(skb_push(pRxPkt, LENGTH_802_3), Header802_3, LENGTH_802_3);
++#endif
++#ifdef UCOS
++ NdisMoveMemory(net_pkt_push(pRxPkt, LENGTH_802_3), Header802_3, LENGTH_802_3);
++#endif
++ }
++#endif // CONFIG_STA_SUPPORT //
++ }
++}
++
++
++#define INDICATE_LEGACY_OR_AMSDU(_pAd, _pRxBlk, _fromWhichBSSID) \
++ do \
++ { \
++ if (RX_BLK_TEST_FLAG(_pRxBlk, fRX_AMSDU)) \
++ { \
++ Indicate_AMSDU_Packet(_pAd, _pRxBlk, _fromWhichBSSID); \
++ } \
++ else if (RX_BLK_TEST_FLAG(_pRxBlk, fRX_EAP)) \
++ { \
++ Indicate_EAPOL_Packet(_pAd, _pRxBlk, _fromWhichBSSID); \
++ } \
++ else \
++ { \
++ Indicate_Legacy_Packet(_pAd, _pRxBlk, _fromWhichBSSID); \
++ } \
++ } while (0);
++
++
++
++static VOID ba_enqueue_reordering_packet(
++ IN PRTMP_ADAPTER pAd,
++ IN PBA_REC_ENTRY pBAEntry,
++ IN RX_BLK *pRxBlk,
++ IN UCHAR FromWhichBSSID)
++{
++ struct reordering_mpdu *mpdu_blk;
++ UINT16 Sequence = (UINT16) pRxBlk->pHeader->Sequence;
++
++ mpdu_blk = ba_mpdu_blk_alloc(pAd);
++ if (mpdu_blk != NULL)
++ {
++ // Write RxD buffer address & allocated buffer length
++ NdisAcquireSpinLock(&pBAEntry->RxReRingLock);
++
++ mpdu_blk->Sequence = Sequence;
++
++ mpdu_blk->bAMSDU = RX_BLK_TEST_FLAG(pRxBlk, fRX_AMSDU);
++
++ convert_reordering_packet_to_preAMSDU_or_802_3_packet(pAd, pRxBlk, FromWhichBSSID);
++
++ STATS_INC_RX_PACKETS(pAd, FromWhichBSSID);
++
++ //
++ // it is necessary for reordering packet to record
++ // which BSS it come from
++ //
++ RTMP_SET_PACKET_IF(pRxBlk->pRxPacket, FromWhichBSSID);
++
++ mpdu_blk->pPacket = pRxBlk->pRxPacket;
++
++ if (ba_reordering_mpdu_insertsorted(&pBAEntry->list, mpdu_blk) == FALSE)
++ {
++ // had been already within reordering list
++ // don't indicate
++ RELEASE_NDIS_PACKET(pAd, pRxBlk->pRxPacket, NDIS_STATUS_SUCCESS);
++ ba_mpdu_blk_free(pAd, mpdu_blk);
++ }
++
++ ASSERT((0<= pBAEntry->list.qlen) && (pBAEntry->list.qlen <= pBAEntry->BAWinSize));
++ NdisReleaseSpinLock(&pBAEntry->RxReRingLock);
++ }
++ else
++ {
++#if 0
++ DBGPRINT(RT_DEBUG_ERROR, ("!!! (%d:%d) Can't allocate reordering mpdu blk\n",
++ blk_count, pBAEntry->list.qlen));
++#else
++ DBGPRINT(RT_DEBUG_ERROR, ("!!! (%d) Can't allocate reordering mpdu blk\n",
++ pBAEntry->list.qlen));
++#endif
++ /*
++ * flush all pending reordering mpdus
++ * and receving mpdu to upper layer
++ * make tcp/ip to take care reordering mechanism
++ */
++ //ba_refresh_reordering_mpdus(pAd, pBAEntry);
++ ba_indicate_reordering_mpdus_le_seq(pAd, pBAEntry, Sequence);
++
++ pBAEntry->LastIndSeq = Sequence;
++ INDICATE_LEGACY_OR_AMSDU(pAd, pRxBlk, FromWhichBSSID);
++ }
++}
++
++
++/*
++ ==========================================================================
++ Description:
++ Indicate this packet to upper layer or put it into reordering buffer
++
++ Parametrs:
++ pRxBlk : carry necessary packet info 802.11 format
++ FromWhichBSSID : the packet received from which BSS
++
++ Return :
++ none
++
++ Note :
++ the packet queued into reordering buffer need to cover to 802.3 format
++ or pre_AMSDU format
++ ==========================================================================
++ */
++
++VOID Indicate_AMPDU_Packet(
++ IN PRTMP_ADAPTER pAd,
++ IN RX_BLK *pRxBlk,
++ IN UCHAR FromWhichBSSID)
++{
++ USHORT Idx;
++ PBA_REC_ENTRY pBAEntry = NULL;
++ UINT16 Sequence = pRxBlk->pHeader->Sequence;
++ ULONG Now32;
++ UCHAR Wcid = pRxBlk->pRxWI->WirelessCliID;
++ UCHAR TID = pRxBlk->pRxWI->TID;
++
++
++ if (!RX_BLK_TEST_FLAG(pRxBlk, fRX_AMSDU) && (pRxBlk->DataSize > MAX_RX_PKT_LEN))
++ {
++#if 0 // sample take off, no use
++ static int err_size;
++
++ err_size++;
++ if (err_size > 20) {
++ printk("AMPDU DataSize = %d\n", pRxBlk->DataSize);
++ hex_dump("802.11 Header", (UCHAR *)pRxBlk->pHeader, 24);
++ hex_dump("Payload", pRxBlk->pData, 64);
++ err_size = 0;
++ }
++#endif
++ // release packet
++ RELEASE_NDIS_PACKET(pAd, pRxBlk->pRxPacket, NDIS_STATUS_FAILURE);
++ return;
++ }
++
++
++#if 0 // test
++ /* Rec BA Session had been torn down */
++ INDICATE_LEGACY_OR_AMSDU(pAd, pRxBlk, FromWhichBSSID);
++ return;
++#endif
++
++ if (Wcid < MAX_LEN_OF_MAC_TABLE)
++ {
++ Idx = pAd->MacTab.Content[Wcid].BARecWcidArray[TID];
++ if (Idx == 0)
++ {
++ /* Rec BA Session had been torn down */
++ INDICATE_LEGACY_OR_AMSDU(pAd, pRxBlk, FromWhichBSSID);
++ return;
++ }
++ pBAEntry = &pAd->BATable.BARecEntry[Idx];
++ }
++ else
++ {
++ // impossible !!!
++ ASSERT(0);
++ // release packet
++ RELEASE_NDIS_PACKET(pAd, pRxBlk->pRxPacket, NDIS_STATUS_FAILURE);
++ return;
++ }
++
++ ASSERT(pBAEntry);
++
++ // update last rx time
++ NdisGetSystemUpTime(&Now32);
++
++ pBAEntry->rcvSeq = Sequence;
++
++
++ ba_flush_reordering_timeout_mpdus(pAd, pBAEntry, Now32);
++ pBAEntry->LastIndSeqAtTimer = Now32;
++
++ //
++ // Reset Last Indicate Sequence
++ //
++ if (pBAEntry->LastIndSeq == RESET_RCV_SEQ)
++ {
++ ASSERT((pBAEntry->list.qlen == 0) && (pBAEntry->list.next == NULL));
++
++ // reset rcv sequence of BA session
++ pBAEntry->LastIndSeq = Sequence;
++ pBAEntry->LastIndSeqAtTimer = Now32;
++ INDICATE_LEGACY_OR_AMSDU(pAd, pRxBlk, FromWhichBSSID);
++ return;
++ }
++
++
++ //
++ // I. Check if in order.
++ //
++ if (SEQ_STEPONE(Sequence, pBAEntry->LastIndSeq, MAXSEQ))
++ {
++ USHORT LastIndSeq;
++
++ pBAEntry->LastIndSeq = Sequence;
++ INDICATE_LEGACY_OR_AMSDU(pAd, pRxBlk, FromWhichBSSID);
++ LastIndSeq = ba_indicate_reordering_mpdus_in_order(pAd, pBAEntry, pBAEntry->LastIndSeq);
++ if (LastIndSeq != RESET_RCV_SEQ)
++ {
++ pBAEntry->LastIndSeq = LastIndSeq;
++ }
++ pBAEntry->LastIndSeqAtTimer = Now32;
++ }
++ //
++ // II. Drop Duplicated Packet
++ //
++ else if (Sequence == pBAEntry->LastIndSeq)
++ {
++
++ // drop and release packet
++ pBAEntry->nDropPacket++;
++ RELEASE_NDIS_PACKET(pAd, pRxBlk->pRxPacket, NDIS_STATUS_FAILURE);
++ }
++ //
++ // III. Drop Old Received Packet
++ //
++ else if (SEQ_SMALLER(Sequence, pBAEntry->LastIndSeq, MAXSEQ))
++ {
++
++ // drop and release packet
++ pBAEntry->nDropPacket++;
++ RELEASE_NDIS_PACKET(pAd, pRxBlk->pRxPacket, NDIS_STATUS_FAILURE);
++ }
++ //
++ // IV. Receive Sequence within Window Size
++ //
++ else if (SEQ_SMALLER(Sequence, (((pBAEntry->LastIndSeq+pBAEntry->BAWinSize+1)) & MAXSEQ), MAXSEQ))
++ {
++ ba_enqueue_reordering_packet(pAd, pBAEntry, pRxBlk, FromWhichBSSID);
++ }
++ //
++ // V. Receive seq surpasses Win(lastseq + nMSDU). So refresh all reorder buffer
++ //
++ else
++ {
++#if 0
++ ba_refresh_reordering_mpdus(pAd, pBAEntry);
++ INDICATE_LEGACY_OR_AMSDU(pAd, pRxBlk, FromWhichBSSID);
++#else
++ LONG WinStartSeq, TmpSeq;
++
++
++ TmpSeq = Sequence - (pBAEntry->BAWinSize) -1;
++ if (TmpSeq < 0)
++ {
++ TmpSeq = (MAXSEQ+1) + TmpSeq;
++ }
++ WinStartSeq = (TmpSeq+1) & MAXSEQ;
++ ba_indicate_reordering_mpdus_le_seq(pAd, pBAEntry, WinStartSeq);
++ pBAEntry->LastIndSeq = WinStartSeq; //TmpSeq;
++
++ pBAEntry->LastIndSeqAtTimer = Now32;
++
++ ba_enqueue_reordering_packet(pAd, pBAEntry, pRxBlk, FromWhichBSSID);
++
++ TmpSeq = ba_indicate_reordering_mpdus_in_order(pAd, pBAEntry, pBAEntry->LastIndSeq);
++ if (TmpSeq != RESET_RCV_SEQ)
++ {
++ pBAEntry->LastIndSeq = TmpSeq;
++ }
++#endif
++ }
++}
++
++#endif // DOT11_N_SUPPORT //
++
+--- /dev/null
++++ b/drivers/staging/rt2870/common/cmm_data_2870.c
+@@ -0,0 +1,963 @@
++/*
++ *************************************************************************
++ * Ralink Tech Inc.
++ * 5F., No.36, Taiyuan St., Jhubei City,
++ * Hsinchu County 302,
++ * Taiwan, R.O.C.
++ *
++ * (c) Copyright 2002-2007, Ralink Technology, Inc.
++ *
++ * This program is free software; you can redistribute it and/or modify *
++ * it under the terms of the GNU General Public License as published by *
++ * the Free Software Foundation; either version 2 of the License, or *
++ * (at your option) any later version. *
++ * *
++ * This program is distributed in the hope that it will be useful, *
++ * but WITHOUT ANY WARRANTY; without even the implied warranty of *
++ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the *
++ * GNU General Public License for more details. *
++ * *
++ * You should have received a copy of the GNU General Public License *
++ * along with this program; if not, write to the *
++ * Free Software Foundation, Inc., *
++ * 59 Temple Place - Suite 330, Boston, MA 02111-1307, USA. *
++ * *
++ *************************************************************************
++*/
++/*
++ All functions in this file must be USB-depended, or you should out your function
++ in other files.
++
++*/
++#include "../rt_config.h"
++
++
++/*
++ We can do copy the frame into pTxContext when match following conditions.
++ =>
++ =>
++ =>
++*/
++static inline NDIS_STATUS RtmpUSBCanDoWrite(
++ IN RTMP_ADAPTER *pAd,
++ IN UCHAR QueIdx,
++ IN HT_TX_CONTEXT *pHTTXContext)
++{
++ NDIS_STATUS canWrite = NDIS_STATUS_RESOURCES;
++
++ if (((pHTTXContext->CurWritePosition) < pHTTXContext->NextBulkOutPosition) && (pHTTXContext->CurWritePosition + LOCAL_TXBUF_SIZE) > pHTTXContext->NextBulkOutPosition)
++ {
++ DBGPRINT(RT_DEBUG_ERROR,("RtmpUSBCanDoWrite c1!\n"));
++ RTUSB_SET_BULK_FLAG(pAd, (fRTUSB_BULK_OUT_DATA_NORMAL << QueIdx));
++ }
++ else if ((pHTTXContext->CurWritePosition == 8) && (pHTTXContext->NextBulkOutPosition < LOCAL_TXBUF_SIZE))
++ {
++ DBGPRINT(RT_DEBUG_ERROR,("RtmpUSBCanDoWrite c2!\n"));
++ RTUSB_SET_BULK_FLAG(pAd, (fRTUSB_BULK_OUT_DATA_NORMAL << QueIdx));
++ }
++ else if (pHTTXContext->bCurWriting == TRUE)
++ {
++ DBGPRINT(RT_DEBUG_ERROR,("RtmpUSBCanDoWrite c3!\n"));
++ }
++ else
++ {
++ canWrite = NDIS_STATUS_SUCCESS;
++ }
++
++
++ return canWrite;
++}
++
++
++USHORT RtmpUSB_WriteSubTxResource(
++ IN PRTMP_ADAPTER pAd,
++ IN TX_BLK *pTxBlk,
++ IN BOOLEAN bIsLast,
++ OUT USHORT *FreeNumber)
++{
++
++ // Dummy function. Should be removed in the future.
++ return 0;
++
++}
++
++USHORT RtmpUSB_WriteFragTxResource(
++ IN PRTMP_ADAPTER pAd,
++ IN TX_BLK *pTxBlk,
++ IN UCHAR fragNum,
++ OUT USHORT *FreeNumber)
++{
++ HT_TX_CONTEXT *pHTTXContext;
++ USHORT hwHdrLen; // The hwHdrLen consist of 802.11 header length plus the header padding length.
++ UINT32 fillOffset;
++ TXINFO_STRUC *pTxInfo;
++ TXWI_STRUC *pTxWI;
++ PUCHAR pWirelessPacket = NULL;
++ UCHAR QueIdx;
++ NDIS_STATUS Status;
++ unsigned long IrqFlags;
++ UINT32 USBDMApktLen = 0, DMAHdrLen, padding;
++ BOOLEAN TxQLastRound = FALSE;
++
++ //
++ // get Tx Ring Resource & Dma Buffer address
++ //
++ QueIdx = pTxBlk->QueIdx;
++ pHTTXContext = &pAd->TxContext[QueIdx];
++
++ RTMP_IRQ_LOCK(&pAd->TxContextQueueLock[QueIdx], IrqFlags);
++
++ pHTTXContext = &pAd->TxContext[QueIdx];
++ fillOffset = pHTTXContext->CurWritePosition;
++
++ if(fragNum == 0)
++ {
++ // Check if we have enough space for this bulk-out batch.
++ Status = RtmpUSBCanDoWrite(pAd, QueIdx, pHTTXContext);
++ if (Status == NDIS_STATUS_SUCCESS)
++ {
++ pHTTXContext->bCurWriting = TRUE;
++
++ // Reserve space for 8 bytes padding.
++ if ((pHTTXContext->ENextBulkOutPosition == pHTTXContext->CurWritePosition))
++ {
++ pHTTXContext->ENextBulkOutPosition += 8;
++ pHTTXContext->CurWritePosition += 8;
++ fillOffset += 8;
++ }
++ pTxBlk->Priv = 0;
++ pHTTXContext->CurWriteRealPos = pHTTXContext->CurWritePosition;
++ }
++ else
++ {
++ RTMP_IRQ_UNLOCK(&pAd->TxContextQueueLock[QueIdx], IrqFlags);
++
++ RELEASE_NDIS_PACKET(pAd, pTxBlk->pPacket, NDIS_STATUS_FAILURE);
++ return(Status);
++ }
++ }
++ else
++ {
++ // For sub-sequent frames of this bulk-out batch. Just copy it to our bulk-out buffer.
++ Status = ((pHTTXContext->bCurWriting == TRUE) ? NDIS_STATUS_SUCCESS : NDIS_STATUS_FAILURE);
++ if (Status == NDIS_STATUS_SUCCESS)
++ {
++ fillOffset += pTxBlk->Priv;
++ }
++ else
++ {
++ RTMP_IRQ_UNLOCK(&pAd->TxContextQueueLock[QueIdx], IrqFlags);
++
++ RELEASE_NDIS_PACKET(pAd, pTxBlk->pPacket, NDIS_STATUS_FAILURE);
++ return(Status);
++ }
++ }
++
++ NdisZeroMemory((PUCHAR)(&pTxBlk->HeaderBuf[0]), TXINFO_SIZE);
++ pTxInfo = (PTXINFO_STRUC)(&pTxBlk->HeaderBuf[0]);
++ pTxWI= (PTXWI_STRUC)(&pTxBlk->HeaderBuf[TXINFO_SIZE]);
++
++ pWirelessPacket = &pHTTXContext->TransferBuffer->field.WirelessPacket[fillOffset];
++
++ // copy TXWI + WLAN Header + LLC into DMA Header Buffer
++ //hwHdrLen = ROUND_UP(pTxBlk->MpduHeaderLen, 4);
++ hwHdrLen = pTxBlk->MpduHeaderLen + pTxBlk->HdrPadLen;
++
++ // Build our URB for USBD
++ DMAHdrLen = TXWI_SIZE + hwHdrLen;
++ USBDMApktLen = DMAHdrLen + pTxBlk->SrcBufLen;
++ padding = (4 - (USBDMApktLen % 4)) & 0x03; // round up to 4 byte alignment
++ USBDMApktLen += padding;
++
++ pTxBlk->Priv += (TXINFO_SIZE + USBDMApktLen);
++
++ // For TxInfo, the length of USBDMApktLen = TXWI_SIZE + 802.11 header + payload
++ RTMPWriteTxInfo(pAd, pTxInfo, (USHORT)(USBDMApktLen), FALSE, FIFO_EDCA, FALSE /*NextValid*/, FALSE);
++
++ if (fragNum == pTxBlk->TotalFragNum)
++ {
++ pTxInfo->USBDMATxburst = 0;
++ if ((pHTTXContext->CurWritePosition + pTxBlk->Priv + 3906)> MAX_TXBULK_LIMIT)
++ {
++ pTxInfo->SwUseLastRound = 1;
++ TxQLastRound = TRUE;
++ }
++ }
++ else
++ {
++ pTxInfo->USBDMATxburst = 1;
++ }
++
++ NdisMoveMemory(pWirelessPacket, pTxBlk->HeaderBuf, TXINFO_SIZE + TXWI_SIZE + hwHdrLen);
++#ifdef RT_BIG_ENDIAN
++ RTMPFrameEndianChange(pAd, (PUCHAR)(pWirelessPacket + TXINFO_SIZE + TXWI_SIZE), DIR_WRITE, FALSE);
++#endif // RT_BIG_ENDIAN //
++ pWirelessPacket += (TXINFO_SIZE + TXWI_SIZE + hwHdrLen);
++ pHTTXContext->CurWriteRealPos += (TXINFO_SIZE + TXWI_SIZE + hwHdrLen);
++
++ RTMP_IRQ_UNLOCK(&pAd->TxContextQueueLock[QueIdx], IrqFlags);
++
++ NdisMoveMemory(pWirelessPacket, pTxBlk->pSrcBufData, pTxBlk->SrcBufLen);
++
++ // Zero the last padding.
++ pWirelessPacket += pTxBlk->SrcBufLen;
++ NdisZeroMemory(pWirelessPacket, padding + 8);
++
++ if (fragNum == pTxBlk->TotalFragNum)
++ {
++ RTMP_IRQ_LOCK(&pAd->TxContextQueueLock[QueIdx], IrqFlags);
++
++ // Update the pHTTXContext->CurWritePosition. 3906 used to prevent the NextBulkOut is a A-RALINK/A-MSDU Frame.
++ pHTTXContext->CurWritePosition += pTxBlk->Priv;
++ if (TxQLastRound == TRUE)
++ pHTTXContext->CurWritePosition = 8;
++ pHTTXContext->CurWriteRealPos = pHTTXContext->CurWritePosition;
++
++
++ // Finally, set bCurWriting as FALSE
++ pHTTXContext->bCurWriting = FALSE;
++
++ RTMP_IRQ_UNLOCK(&pAd->TxContextQueueLock[QueIdx], IrqFlags);
++
++ // succeed and release the skb buffer
++ RELEASE_NDIS_PACKET(pAd, pTxBlk->pPacket, NDIS_STATUS_SUCCESS);
++ }
++
++
++ return(Status);
++
++}
++
++
++USHORT RtmpUSB_WriteSingleTxResource(
++ IN PRTMP_ADAPTER pAd,
++ IN TX_BLK *pTxBlk,
++ IN BOOLEAN bIsLast,
++ OUT USHORT *FreeNumber)
++{
++ HT_TX_CONTEXT *pHTTXContext;
++ USHORT hwHdrLen;
++ UINT32 fillOffset;
++ TXINFO_STRUC *pTxInfo;
++ TXWI_STRUC *pTxWI;
++ PUCHAR pWirelessPacket;
++ UCHAR QueIdx;
++ unsigned long IrqFlags;
++ NDIS_STATUS Status;
++ UINT32 USBDMApktLen = 0, DMAHdrLen, padding;
++ BOOLEAN bTxQLastRound = FALSE;
++
++ // For USB, didn't need PCI_MAP_SINGLE()
++ //SrcBufPA = PCI_MAP_SINGLE(pAd, (char *) pTxBlk->pSrcBufData, pTxBlk->SrcBufLen, PCI_DMA_TODEVICE);
++
++
++ //
++ // get Tx Ring Resource & Dma Buffer address
++ //
++ QueIdx = pTxBlk->QueIdx;
++
++ RTMP_IRQ_LOCK(&pAd->TxContextQueueLock[QueIdx], IrqFlags);
++ pHTTXContext = &pAd->TxContext[QueIdx];
++ fillOffset = pHTTXContext->CurWritePosition;
++
++
++
++ // Check ring full.
++ Status = RtmpUSBCanDoWrite(pAd, QueIdx, pHTTXContext);
++ if(Status == NDIS_STATUS_SUCCESS)
++ {
++ pHTTXContext->bCurWriting = TRUE;
++
++ pTxInfo = (PTXINFO_STRUC)(&pTxBlk->HeaderBuf[0]);
++ pTxWI= (PTXWI_STRUC)(&pTxBlk->HeaderBuf[TXINFO_SIZE]);
++
++ // Reserve space for 8 bytes padding.
++ if ((pHTTXContext->ENextBulkOutPosition == pHTTXContext->CurWritePosition))
++ {
++ pHTTXContext->ENextBulkOutPosition += 8;
++ pHTTXContext->CurWritePosition += 8;
++ fillOffset += 8;
++ }
++ pHTTXContext->CurWriteRealPos = pHTTXContext->CurWritePosition;
++
++ pWirelessPacket = &pHTTXContext->TransferBuffer->field.WirelessPacket[fillOffset];
++
++ // copy TXWI + WLAN Header + LLC into DMA Header Buffer
++ //hwHdrLen = ROUND_UP(pTxBlk->MpduHeaderLen, 4);
++ hwHdrLen = pTxBlk->MpduHeaderLen + pTxBlk->HdrPadLen;
++
++ // Build our URB for USBD
++ DMAHdrLen = TXWI_SIZE + hwHdrLen;
++ USBDMApktLen = DMAHdrLen + pTxBlk->SrcBufLen;
++ padding = (4 - (USBDMApktLen % 4)) & 0x03; // round up to 4 byte alignment
++ USBDMApktLen += padding;
++
++ pTxBlk->Priv = (TXINFO_SIZE + USBDMApktLen);
++
++ // For TxInfo, the length of USBDMApktLen = TXWI_SIZE + 802.11 header + payload
++ RTMPWriteTxInfo(pAd, pTxInfo, (USHORT)(USBDMApktLen), FALSE, FIFO_EDCA, FALSE /*NextValid*/, FALSE);
++
++ if ((pHTTXContext->CurWritePosition + 3906 + pTxBlk->Priv) > MAX_TXBULK_LIMIT)
++ {
++ pTxInfo->SwUseLastRound = 1;
++ bTxQLastRound = TRUE;
++ }
++ NdisMoveMemory(pWirelessPacket, pTxBlk->HeaderBuf, TXINFO_SIZE + TXWI_SIZE + hwHdrLen);
++#ifdef RT_BIG_ENDIAN
++ RTMPFrameEndianChange(pAd, (PUCHAR)(pWirelessPacket + TXINFO_SIZE + TXWI_SIZE), DIR_WRITE, FALSE);
++#endif // RT_BIG_ENDIAN //
++ pWirelessPacket += (TXINFO_SIZE + TXWI_SIZE + hwHdrLen);
++
++ // We unlock it here to prevent the first 8 bytes maybe over-writed issue.
++ // 1. First we got CurWritePosition but the first 8 bytes still not write to the pTxcontext.
++ // 2. An interrupt break our routine and handle bulk-out complete.
++ // 3. In the bulk-out compllete, it need to do another bulk-out,
++ // if the ENextBulkOutPosition is just the same as CurWritePosition, it will save the first 8 bytes from CurWritePosition,
++ // but the payload still not copyed. the pTxContext->SavedPad[] will save as allzero. and set the bCopyPad = TRUE.
++ // 4. Interrupt complete.
++ // 5. Our interrupted routine go back and fill the first 8 bytes to pTxContext.
++ // 6. Next time when do bulk-out, it found the bCopyPad==TRUE and will copy the SavedPad[] to pTxContext->NextBulkOutPosition.
++ // and the packet will wrong.
++ pHTTXContext->CurWriteRealPos += (TXINFO_SIZE + TXWI_SIZE + hwHdrLen);
++ RTMP_IRQ_UNLOCK(&pAd->TxContextQueueLock[QueIdx], IrqFlags);
++
++ NdisMoveMemory(pWirelessPacket, pTxBlk->pSrcBufData, pTxBlk->SrcBufLen);
++ pWirelessPacket += pTxBlk->SrcBufLen;
++ NdisZeroMemory(pWirelessPacket, padding + 8);
++
++ RTMP_IRQ_LOCK(&pAd->TxContextQueueLock[QueIdx], IrqFlags);
++
++ pHTTXContext->CurWritePosition += pTxBlk->Priv;
++ if (bTxQLastRound)
++ pHTTXContext->CurWritePosition = 8;
++ pHTTXContext->CurWriteRealPos = pHTTXContext->CurWritePosition;
++
++ pHTTXContext->bCurWriting = FALSE;
++ }
++
++
++ RTMP_IRQ_UNLOCK(&pAd->TxContextQueueLock[QueIdx], IrqFlags);
++
++
++ // succeed and release the skb buffer
++ RELEASE_NDIS_PACKET(pAd, pTxBlk->pPacket, NDIS_STATUS_SUCCESS);
++
++ return(Status);
++
++}
++
++
++USHORT RtmpUSB_WriteMultiTxResource(
++ IN PRTMP_ADAPTER pAd,
++ IN TX_BLK *pTxBlk,
++ IN UCHAR frameNum,
++ OUT USHORT *FreeNumber)
++{
++ HT_TX_CONTEXT *pHTTXContext;
++ USHORT hwHdrLen; // The hwHdrLen consist of 802.11 header length plus the header padding length.
++ UINT32 fillOffset;
++ TXINFO_STRUC *pTxInfo;
++ TXWI_STRUC *pTxWI;
++ PUCHAR pWirelessPacket = NULL;
++ UCHAR QueIdx;
++ NDIS_STATUS Status;
++ unsigned long IrqFlags;
++ //UINT32 USBDMApktLen = 0, DMAHdrLen, padding;
++
++ //
++ // get Tx Ring Resource & Dma Buffer address
++ //
++ QueIdx = pTxBlk->QueIdx;
++ pHTTXContext = &pAd->TxContext[QueIdx];
++
++ RTMP_IRQ_LOCK(&pAd->TxContextQueueLock[QueIdx], IrqFlags);
++
++ if(frameNum == 0)
++ {
++ // Check if we have enough space for this bulk-out batch.
++ Status = RtmpUSBCanDoWrite(pAd, QueIdx, pHTTXContext);
++ if (Status == NDIS_STATUS_SUCCESS)
++ {
++ pHTTXContext->bCurWriting = TRUE;
++
++ pTxInfo = (PTXINFO_STRUC)(&pTxBlk->HeaderBuf[0]);
++ pTxWI= (PTXWI_STRUC)(&pTxBlk->HeaderBuf[TXINFO_SIZE]);
++
++
++ // Reserve space for 8 bytes padding.
++ if ((pHTTXContext->ENextBulkOutPosition == pHTTXContext->CurWritePosition))
++ {
++
++ pHTTXContext->CurWritePosition += 8;
++ pHTTXContext->ENextBulkOutPosition += 8;
++ }
++ fillOffset = pHTTXContext->CurWritePosition;
++ pHTTXContext->CurWriteRealPos = pHTTXContext->CurWritePosition;
++
++ pWirelessPacket = &pHTTXContext->TransferBuffer->field.WirelessPacket[fillOffset];
++
++ //
++ // Copy TXINFO + TXWI + WLAN Header + LLC into DMA Header Buffer
++ //
++ if (pTxBlk->TxFrameType == TX_AMSDU_FRAME)
++ //hwHdrLen = ROUND_UP(pTxBlk->MpduHeaderLen-LENGTH_AMSDU_SUBFRAMEHEAD, 4)+LENGTH_AMSDU_SUBFRAMEHEAD;
++ hwHdrLen = pTxBlk->MpduHeaderLen-LENGTH_AMSDU_SUBFRAMEHEAD + pTxBlk->HdrPadLen + LENGTH_AMSDU_SUBFRAMEHEAD;
++ else if (pTxBlk->TxFrameType == TX_RALINK_FRAME)
++ //hwHdrLen = ROUND_UP(pTxBlk->MpduHeaderLen-LENGTH_ARALINK_HEADER_FIELD, 4)+LENGTH_ARALINK_HEADER_FIELD;
++ hwHdrLen = pTxBlk->MpduHeaderLen-LENGTH_ARALINK_HEADER_FIELD + pTxBlk->HdrPadLen + LENGTH_ARALINK_HEADER_FIELD;
++ else
++ //hwHdrLen = ROUND_UP(pTxBlk->MpduHeaderLen, 4);
++ hwHdrLen = pTxBlk->MpduHeaderLen + pTxBlk->HdrPadLen;
++
++ // Update the pTxBlk->Priv.
++ pTxBlk->Priv = TXINFO_SIZE + TXWI_SIZE + hwHdrLen;
++
++ // pTxInfo->USBDMApktLen now just a temp value and will to correct latter.
++ RTMPWriteTxInfo(pAd, pTxInfo, (USHORT)(pTxBlk->Priv), FALSE, FIFO_EDCA, FALSE /*NextValid*/, FALSE);
++
++ // Copy it.
++ NdisMoveMemory(pWirelessPacket, pTxBlk->HeaderBuf, pTxBlk->Priv);
++#ifdef RT_BIG_ENDIAN
++ RTMPFrameEndianChange(pAd, (PUCHAR)(pWirelessPacket+ TXINFO_SIZE + TXWI_SIZE), DIR_WRITE, FALSE);
++#endif // RT_BIG_ENDIAN //
++ pHTTXContext->CurWriteRealPos += pTxBlk->Priv;
++ pWirelessPacket += pTxBlk->Priv;
++ }
++ }
++ else
++ { // For sub-sequent frames of this bulk-out batch. Just copy it to our bulk-out buffer.
++
++ Status = ((pHTTXContext->bCurWriting == TRUE) ? NDIS_STATUS_SUCCESS : NDIS_STATUS_FAILURE);
++ if (Status == NDIS_STATUS_SUCCESS)
++ {
++ fillOffset = (pHTTXContext->CurWritePosition + pTxBlk->Priv);
++ pWirelessPacket = &pHTTXContext->TransferBuffer->field.WirelessPacket[fillOffset];
++
++ //hwHdrLen = pTxBlk->MpduHeaderLen;
++ NdisMoveMemory(pWirelessPacket, pTxBlk->HeaderBuf, pTxBlk->MpduHeaderLen);
++ pWirelessPacket += (pTxBlk->MpduHeaderLen);
++ pTxBlk->Priv += pTxBlk->MpduHeaderLen;
++ }
++ else
++ { // It should not happened now unless we are going to shutdown.
++ DBGPRINT(RT_DEBUG_ERROR, ("WriteMultiTxResource():bCurWriting is FALSE when handle sub-sequent frames.\n"));
++ Status = NDIS_STATUS_FAILURE;
++ }
++ }
++
++
++ // We unlock it here to prevent the first 8 bytes maybe over-write issue.
++ // 1. First we got CurWritePosition but the first 8 bytes still not write to the pTxContext.
++ // 2. An interrupt break our routine and handle bulk-out complete.
++ // 3. In the bulk-out compllete, it need to do another bulk-out,
++ // if the ENextBulkOutPosition is just the same as CurWritePosition, it will save the first 8 bytes from CurWritePosition,
++ // but the payload still not copyed. the pTxContext->SavedPad[] will save as allzero. and set the bCopyPad = TRUE.
++ // 4. Interrupt complete.
++ // 5. Our interrupted routine go back and fill the first 8 bytes to pTxContext.
++ // 6. Next time when do bulk-out, it found the bCopyPad==TRUE and will copy the SavedPad[] to pTxContext->NextBulkOutPosition.
++ // and the packet will wrong.
++ RTMP_IRQ_UNLOCK(&pAd->TxContextQueueLock[QueIdx], IrqFlags);
++
++ if (Status != NDIS_STATUS_SUCCESS)
++ {
++ DBGPRINT(RT_DEBUG_ERROR,("WriteMultiTxResource: CWPos = %ld, NBOutPos = %ld.\n", pHTTXContext->CurWritePosition, pHTTXContext->NextBulkOutPosition));
++ goto done;
++ }
++
++ // Copy the frame content into DMA buffer and update the pTxBlk->Priv
++ NdisMoveMemory(pWirelessPacket, pTxBlk->pSrcBufData, pTxBlk->SrcBufLen);
++ pWirelessPacket += pTxBlk->SrcBufLen;
++ pTxBlk->Priv += pTxBlk->SrcBufLen;
++
++done:
++ // Release the skb buffer here
++ RELEASE_NDIS_PACKET(pAd, pTxBlk->pPacket, NDIS_STATUS_SUCCESS);
++
++ return(Status);
++
++}
++
++
++VOID RtmpUSB_FinalWriteTxResource(
++ IN PRTMP_ADAPTER pAd,
++ IN TX_BLK *pTxBlk,
++ IN USHORT totalMPDUSize,
++ IN USHORT TxIdx)
++{
++ UCHAR QueIdx;
++ HT_TX_CONTEXT *pHTTXContext;
++ UINT32 fillOffset;
++ TXINFO_STRUC *pTxInfo;
++ TXWI_STRUC *pTxWI;
++ UINT32 USBDMApktLen, padding;
++ unsigned long IrqFlags;
++ PUCHAR pWirelessPacket;
++
++ QueIdx = pTxBlk->QueIdx;
++ pHTTXContext = &pAd->TxContext[QueIdx];
++
++ RTMP_IRQ_LOCK(&pAd->TxContextQueueLock[QueIdx], IrqFlags);
++
++ if (pHTTXContext->bCurWriting == TRUE)
++ {
++ fillOffset = pHTTXContext->CurWritePosition;
++ if (((pHTTXContext->ENextBulkOutPosition == pHTTXContext->CurWritePosition) || ((pHTTXContext->ENextBulkOutPosition-8) == pHTTXContext->CurWritePosition))
++ && (pHTTXContext->bCopySavePad == TRUE))
++ pWirelessPacket = (PUCHAR)(&pHTTXContext->SavedPad[0]);
++ else
++ pWirelessPacket = (PUCHAR)(&pHTTXContext->TransferBuffer->field.WirelessPacket[fillOffset]);
++
++ //
++ // Update TxInfo->USBDMApktLen ,
++ // the length = TXWI_SIZE + 802.11_hdr + 802.11_hdr_pad + payload_of_all_batch_frames + Bulk-Out-padding
++ //
++ pTxInfo = (PTXINFO_STRUC)(pWirelessPacket);
++
++ // Calculate the bulk-out padding
++ USBDMApktLen = pTxBlk->Priv - TXINFO_SIZE;
++ padding = (4 - (USBDMApktLen % 4)) & 0x03; // round up to 4 byte alignment
++ USBDMApktLen += padding;
++
++ pTxInfo->USBDMATxPktLen = USBDMApktLen;
++
++ //
++ // Update TXWI->MPDUtotalByteCount ,
++ // the length = 802.11 header + payload_of_all_batch_frames
++ pTxWI= (PTXWI_STRUC)(pWirelessPacket + TXINFO_SIZE);
++ pTxWI->MPDUtotalByteCount = totalMPDUSize;
++
++ //
++ // Update the pHTTXContext->CurWritePosition
++ //
++ pHTTXContext->CurWritePosition += (TXINFO_SIZE + USBDMApktLen);
++ if ((pHTTXContext->CurWritePosition + 3906)> MAX_TXBULK_LIMIT)
++ { // Add 3906 for prevent the NextBulkOut packet size is a A-RALINK/A-MSDU Frame.
++ pHTTXContext->CurWritePosition = 8;
++ pTxInfo->SwUseLastRound = 1;
++ }
++ pHTTXContext->CurWriteRealPos = pHTTXContext->CurWritePosition;
++
++
++ //
++ // Zero the last padding.
++ //
++ pWirelessPacket = (&pHTTXContext->TransferBuffer->field.WirelessPacket[fillOffset + pTxBlk->Priv]);
++ NdisZeroMemory(pWirelessPacket, padding + 8);
++
++ // Finally, set bCurWriting as FALSE
++ pHTTXContext->bCurWriting = FALSE;
++
++ }
++ else
++ { // It should not happened now unless we are going to shutdown.
++ DBGPRINT(RT_DEBUG_ERROR, ("FinalWriteTxResource():bCurWriting is FALSE when handle last frames.\n"));
++ }
++
++ RTMP_IRQ_UNLOCK(&pAd->TxContextQueueLock[QueIdx], IrqFlags);
++
++}
++
++
++VOID RtmpUSBDataLastTxIdx(
++ IN PRTMP_ADAPTER pAd,
++ IN UCHAR QueIdx,
++ IN USHORT TxIdx)
++{
++ // DO nothing for USB.
++}
++
++
++/*
++ When can do bulk-out:
++ 1. TxSwFreeIdx < TX_RING_SIZE;
++ It means has at least one Ring entity is ready for bulk-out, kick it out.
++ 2. If TxSwFreeIdx == TX_RING_SIZE
++ Check if the CurWriting flag is FALSE, if it's FALSE, we can do kick out.
++
++*/
++VOID RtmpUSBDataKickOut(
++ IN PRTMP_ADAPTER pAd,
++ IN TX_BLK *pTxBlk,
++ IN UCHAR QueIdx)
++{
++ RTUSB_SET_BULK_FLAG(pAd, (fRTUSB_BULK_OUT_DATA_NORMAL << QueIdx));
++ RTUSBKickBulkOut(pAd);
++
++}
++
++
++/*
++ Must be run in Interrupt context
++ This function handle RT2870 specific TxDesc and cpu index update and kick the packet out.
++ */
++int RtmpUSBMgmtKickOut(
++ IN RTMP_ADAPTER *pAd,
++ IN UCHAR QueIdx,
++ IN PNDIS_PACKET pPacket,
++ IN PUCHAR pSrcBufVA,
++ IN UINT SrcBufLen)
++{
++ PTXINFO_STRUC pTxInfo;
++ ULONG BulkOutSize;
++ UCHAR padLen;
++ PUCHAR pDest;
++ ULONG SwIdx = pAd->MgmtRing.TxCpuIdx;
++ PTX_CONTEXT pMLMEContext = (PTX_CONTEXT)pAd->MgmtRing.Cell[SwIdx].AllocVa;
++ unsigned long IrqFlags;
++
++
++ pTxInfo = (PTXINFO_STRUC)(pSrcBufVA);
++
++ // Build our URB for USBD
++ BulkOutSize = SrcBufLen;
++ BulkOutSize = (BulkOutSize + 3) & (~3);
++ RTMPWriteTxInfo(pAd, pTxInfo, (USHORT)(BulkOutSize - TXINFO_SIZE), TRUE, EpToQueue[MGMTPIPEIDX], FALSE, FALSE);
++
++ BulkOutSize += 4; // Always add 4 extra bytes at every packet.
++
++ // If BulkOutSize is multiple of BulkOutMaxPacketSize, add extra 4 bytes again.
++ if ((BulkOutSize % pAd->BulkOutMaxPacketSize) == 0)
++ BulkOutSize += 4;
++
++ padLen = BulkOutSize - SrcBufLen;
++ ASSERT((padLen <= RTMP_PKT_TAIL_PADDING));
++
++ // Now memzero all extra padding bytes.
++ pDest = (PUCHAR)(pSrcBufVA + SrcBufLen);
++ skb_put(GET_OS_PKT_TYPE(pPacket), padLen);
++ NdisZeroMemory(pDest, padLen);
++
++ RTMP_IRQ_LOCK(&pAd->MLMEBulkOutLock, IrqFlags);
++
++ pAd->MgmtRing.Cell[pAd->MgmtRing.TxCpuIdx].pNdisPacket = pPacket;
++ pMLMEContext->TransferBuffer = (PTX_BUFFER)(GET_OS_PKT_DATAPTR(pPacket));
++
++ // Length in TxInfo should be 8 less than bulkout size.
++ pMLMEContext->BulkOutSize = BulkOutSize;
++ pMLMEContext->InUse = TRUE;
++ pMLMEContext->bWaitingBulkOut = TRUE;
++
++
++ //for debug
++ //hex_dump("RtmpUSBMgmtKickOut", &pMLMEContext->TransferBuffer->field.WirelessPacket[0], (pMLMEContext->BulkOutSize > 16 ? 16 : pMLMEContext->BulkOutSize));
++
++ //pAd->RalinkCounters.KickTxCount++;
++ //pAd->RalinkCounters.OneSecTxDoneCount++;
++
++ //if (pAd->MgmtRing.TxSwFreeIdx == MGMT_RING_SIZE)
++ // needKickOut = TRUE;
++
++ // Decrease the TxSwFreeIdx and Increase the TX_CTX_IDX
++ pAd->MgmtRing.TxSwFreeIdx--;
++ INC_RING_INDEX(pAd->MgmtRing.TxCpuIdx, MGMT_RING_SIZE);
++
++ RTMP_IRQ_UNLOCK(&pAd->MLMEBulkOutLock, IrqFlags);
++
++ RTUSB_SET_BULK_FLAG(pAd, fRTUSB_BULK_OUT_MLME);
++ //if (needKickOut)
++ RTUSBKickBulkOut(pAd);
++
++ return 0;
++}
++
++
++VOID RtmpUSBNullFrameKickOut(
++ IN RTMP_ADAPTER *pAd,
++ IN UCHAR QueIdx,
++ IN UCHAR *pNullFrame,
++ IN UINT32 frameLen)
++{
++ if (pAd->NullContext.InUse == FALSE)
++ {
++ PTX_CONTEXT pNullContext;
++ PTXINFO_STRUC pTxInfo;
++ PTXWI_STRUC pTxWI;
++ PUCHAR pWirelessPkt;
++
++ pNullContext = &(pAd->NullContext);
++
++ // Set the in use bit
++ pNullContext->InUse = TRUE;
++ pWirelessPkt = (PUCHAR)&pNullContext->TransferBuffer->field.WirelessPacket[0];
++
++ RTMPZeroMemory(&pWirelessPkt[0], 100);
++ pTxInfo = (PTXINFO_STRUC)&pWirelessPkt[0];
++ RTMPWriteTxInfo(pAd, pTxInfo, (USHORT)(sizeof(HEADER_802_11)+TXWI_SIZE), TRUE, EpToQueue[MGMTPIPEIDX], FALSE, FALSE);
++ pTxInfo->QSEL = FIFO_EDCA;
++ pTxWI = (PTXWI_STRUC)&pWirelessPkt[TXINFO_SIZE];
++ RTMPWriteTxWI(pAd, pTxWI, FALSE, FALSE, FALSE, FALSE, TRUE, FALSE, 0, BSSID_WCID, (sizeof(HEADER_802_11)),
++ 0, 0, (UCHAR)pAd->CommonCfg.MlmeTransmit.field.MCS, IFS_HTTXOP, FALSE, &pAd->CommonCfg.MlmeTransmit);
++#ifdef RT_BIG_ENDIAN
++ RTMPWIEndianChange((PUCHAR)pTxWI, TYPE_TXWI);
++#endif // RT_BIG_ENDIAN //
++
++ RTMPMoveMemory(&pWirelessPkt[TXWI_SIZE+TXINFO_SIZE], &pAd->NullFrame, sizeof(HEADER_802_11));
++#ifdef RT_BIG_ENDIAN
++ RTMPFrameEndianChange(pAd, (PUCHAR)&pWirelessPkt[TXINFO_SIZE + TXWI_SIZE], DIR_WRITE, FALSE);
++#endif // RT_BIG_ENDIAN //
++ pAd->NullContext.BulkOutSize = TXINFO_SIZE + TXWI_SIZE + sizeof(pAd->NullFrame) + 4;
++
++ // Fill out frame length information for global Bulk out arbitor
++ //pNullContext->BulkOutSize = TransferBufferLength;
++ DBGPRINT(RT_DEBUG_TRACE, ("SYNC - send NULL Frame @%d Mbps...\n", RateIdToMbps[pAd->CommonCfg.TxRate]));
++ RTUSB_SET_BULK_FLAG(pAd, fRTUSB_BULK_OUT_DATA_NULL);
++
++ // Kick bulk out
++ RTUSBKickBulkOut(pAd);
++ }
++
++}
++
++#ifdef CONFIG_STA_SUPPORT
++/*
++ ========================================================================
++
++ Routine Description:
++ Check Rx descriptor, return NDIS_STATUS_FAILURE if any error dound
++
++ Arguments:
++ pRxD Pointer to the Rx descriptor
++
++ Return Value:
++ NDIS_STATUS_SUCCESS No err
++ NDIS_STATUS_FAILURE Error
++
++ Note:
++
++ ========================================================================
++*/
++NDIS_STATUS RTMPCheckRxError(
++ IN PRTMP_ADAPTER pAd,
++ IN PHEADER_802_11 pHeader,
++ IN PRXWI_STRUC pRxWI,
++ IN PRT28XX_RXD_STRUC pRxINFO)
++{
++ PCIPHER_KEY pWpaKey;
++ INT dBm;
++
++ if (pAd->bPromiscuous == TRUE)
++ return(NDIS_STATUS_SUCCESS);
++ if(pRxINFO == NULL)
++ return(NDIS_STATUS_FAILURE);
++
++ // Phy errors & CRC errors
++ if (pRxINFO->Crc)
++ {
++ // Check RSSI for Noise Hist statistic collection.
++ dBm = (INT) (pRxWI->RSSI0) - pAd->BbpRssiToDbmDelta;
++ if (dBm <= -87)
++ pAd->StaCfg.RPIDensity[0] += 1;
++ else if (dBm <= -82)
++ pAd->StaCfg.RPIDensity[1] += 1;
++ else if (dBm <= -77)
++ pAd->StaCfg.RPIDensity[2] += 1;
++ else if (dBm <= -72)
++ pAd->StaCfg.RPIDensity[3] += 1;
++ else if (dBm <= -67)
++ pAd->StaCfg.RPIDensity[4] += 1;
++ else if (dBm <= -62)
++ pAd->StaCfg.RPIDensity[5] += 1;
++ else if (dBm <= -57)
++ pAd->StaCfg.RPIDensity[6] += 1;
++ else if (dBm > -57)
++ pAd->StaCfg.RPIDensity[7] += 1;
++
++ return(NDIS_STATUS_FAILURE);
++ }
++
++ // Add Rx size to channel load counter, we should ignore error counts
++ pAd->StaCfg.CLBusyBytes += (pRxWI->MPDUtotalByteCount+ 14);
++
++ // Drop ToDs promiscous frame, it is opened due to CCX 2 channel load statistics
++ if (pHeader->FC.ToDs)
++ {
++ DBGPRINT_RAW(RT_DEBUG_ERROR, ("Err;FC.ToDs\n"));
++ return NDIS_STATUS_FAILURE;
++ }
++
++ // Paul 04-03 for OFDM Rx length issue
++ if (pRxWI->MPDUtotalByteCount > MAX_AGGREGATION_SIZE)
++ {
++ DBGPRINT_RAW(RT_DEBUG_ERROR, ("received packet too long\n"));
++ return NDIS_STATUS_FAILURE;
++ }
++
++ // Drop not U2M frames, cant's drop here because we will drop beacon in this case
++ // I am kind of doubting the U2M bit operation
++ // if (pRxD->U2M == 0)
++ // return(NDIS_STATUS_FAILURE);
++
++ // drop decyption fail frame
++ if (pRxINFO->Decrypted && pRxINFO->CipherErr)
++ {
++
++ //
++ // MIC Error
++ //
++ if ((pRxINFO->CipherErr == 2) && pRxINFO->MyBss)
++ {
++ pWpaKey = &pAd->SharedKey[BSS0][pRxWI->KeyIndex];
++ RTMPReportMicError(pAd, pWpaKey);
++ DBGPRINT_RAW(RT_DEBUG_ERROR,("Rx MIC Value error\n"));
++ }
++
++ if (pRxINFO->Decrypted &&
++ (pAd->SharedKey[BSS0][pRxWI->KeyIndex].CipherAlg == CIPHER_AES) &&
++ (pHeader->Sequence == pAd->FragFrame.Sequence))
++ {
++ //
++ // Acceptable since the First FragFrame no CipherErr problem.
++ //
++ return(NDIS_STATUS_SUCCESS);
++ }
++
++ return(NDIS_STATUS_FAILURE);
++ }
++
++ return(NDIS_STATUS_SUCCESS);
++}
++
++VOID RT28xxUsbStaAsicForceWakeup(
++ IN PRTMP_ADAPTER pAd,
++ IN BOOLEAN bFromTx)
++{
++ AUTO_WAKEUP_STRUC AutoWakeupCfg;
++
++ AutoWakeupCfg.word = 0;
++ RTMP_IO_WRITE32(pAd, AUTO_WAKEUP_CFG, AutoWakeupCfg.word);
++
++ AsicSendCommandToMcu(pAd, 0x31, 0xff, 0x00, 0x00);
++
++ OPSTATUS_CLEAR_FLAG(pAd, fOP_STATUS_DOZE);
++}
++
++VOID RT28xxUsbStaAsicSleepThenAutoWakeup(
++ IN PRTMP_ADAPTER pAd,
++ IN USHORT TbttNumToNextWakeUp)
++{
++ AUTO_WAKEUP_STRUC AutoWakeupCfg;
++
++ // we have decided to SLEEP, so at least do it for a BEACON period.
++ if (TbttNumToNextWakeUp == 0)
++ TbttNumToNextWakeUp = 1;
++
++ AutoWakeupCfg.word = 0;
++ RTMP_IO_WRITE32(pAd, AUTO_WAKEUP_CFG, AutoWakeupCfg.word);
++
++ AutoWakeupCfg.field.NumofSleepingTbtt = TbttNumToNextWakeUp - 1;
++ AutoWakeupCfg.field.EnableAutoWakeup = 1;
++ AutoWakeupCfg.field.AutoLeadTime = 5;
++ RTMP_IO_WRITE32(pAd, AUTO_WAKEUP_CFG, AutoWakeupCfg.word);
++
++ AsicSendCommandToMcu(pAd, 0x30, 0xff, 0xff, 0x02); // send POWER-SAVE command to MCU. Timeout 40us.
++
++ OPSTATUS_SET_FLAG(pAd, fOP_STATUS_DOZE);
++
++}
++#endif // CONFIG_STA_SUPPORT //
++
++VOID RT28xxUsbMlmeRadioOn(
++ IN PRTMP_ADAPTER pAd)
++{
++ DBGPRINT(RT_DEBUG_TRACE,("RT28xxUsbMlmeRadioOn()\n"));
++
++ if (!RTMP_TEST_FLAG(pAd, fRTMP_ADAPTER_RADIO_OFF))
++ return;
++
++#ifdef CONFIG_STA_SUPPORT
++ IF_DEV_CONFIG_OPMODE_ON_STA(pAd)
++ {
++ AsicSendCommandToMcu(pAd, 0x31, 0xff, 0x00, 0x00);
++ RTMPusecDelay(10000);
++ }
++#endif // CONFIG_STA_SUPPORT //
++ NICResetFromError(pAd);
++
++ // Enable Tx/Rx
++ RTMPEnableRxTx(pAd);
++
++ // Clear Radio off flag
++ RTMP_CLEAR_FLAG(pAd, fRTMP_ADAPTER_RADIO_OFF);
++
++#ifdef CONFIG_STA_SUPPORT
++ IF_DEV_CONFIG_OPMODE_ON_STA(pAd)
++ RTUSBBulkReceive(pAd);
++#endif // CONFIG_STA_SUPPORT //
++
++ // Set LED
++ RTMPSetLED(pAd, LED_RADIO_ON);
++}
++
++VOID RT28xxUsbMlmeRadioOFF(
++ IN PRTMP_ADAPTER pAd)
++{
++ WPDMA_GLO_CFG_STRUC GloCfg;
++ UINT32 Value, i;
++
++ DBGPRINT(RT_DEBUG_TRACE,("RT28xxUsbMlmeRadioOFF()\n"));
++
++ if (RTMP_TEST_FLAG(pAd, fRTMP_ADAPTER_RADIO_OFF))
++ return;
++
++ // Set LED
++ RTMPSetLED(pAd, LED_RADIO_OFF);
++ // Set Radio off flag
++ RTMP_SET_FLAG(pAd, fRTMP_ADAPTER_RADIO_OFF);
++
++#ifdef CONFIG_STA_SUPPORT
++ IF_DEV_CONFIG_OPMODE_ON_STA(pAd)
++ {
++ // Link down first if any association exists
++ if (INFRA_ON(pAd) || ADHOC_ON(pAd))
++ LinkDown(pAd, FALSE);
++ RTMPusecDelay(10000);
++
++ //==========================================
++ // Clean up old bss table
++ BssTableInit(&pAd->ScanTab);
++ }
++#endif // CONFIG_STA_SUPPORT //
++
++
++ // Disable MAC Tx/Rx
++ RTMP_IO_READ32(pAd, MAC_SYS_CTRL, &Value);
++ Value &= (0xfffffff3);
++ RTMP_IO_WRITE32(pAd, MAC_SYS_CTRL, Value);
++
++ // MAC_SYS_CTRL => value = 0x0 => 40mA
++ RTMP_IO_WRITE32(pAd, MAC_SYS_CTRL, 0);
++
++ // PWR_PIN_CFG => value = 0x0 => 40mA
++ RTMP_IO_WRITE32(pAd, PWR_PIN_CFG, 0);
++
++ // TX_PIN_CFG => value = 0x0 => 20mA
++ RTMP_IO_WRITE32(pAd, TX_PIN_CFG, 0);
++
++ if (pAd->CommonCfg.BBPCurrentBW == BW_40)
++ {
++ // Must using 40MHz.
++ AsicTurnOffRFClk(pAd, pAd->CommonCfg.CentralChannel);
++ }
++ else
++ {
++ // Must using 20MHz.
++ AsicTurnOffRFClk(pAd, pAd->CommonCfg.Channel);
++ }
++
++ // Waiting for DMA idle
++ i = 0;
++ do
++ {
++ RTMP_IO_READ32(pAd, WPDMA_GLO_CFG, &GloCfg.word);
++ if ((GloCfg.field.TxDMABusy == 0) && (GloCfg.field.RxDMABusy == 0))
++ break;
++
++ RTMPusecDelay(1000);
++ }while (i++ < 100);
++
++#ifdef CONFIG_STA_SUPPORT
++ IF_DEV_CONFIG_OPMODE_ON_STA(pAd)
++ AsicSendCommandToMcu(pAd, 0x30, 0xff, 0xff, 0x02);
++#endif // CONFIG_STA_SUPPORT //
++}
++
+--- /dev/null
++++ b/drivers/staging/rt2870/common/cmm_data.c
+@@ -0,0 +1,2734 @@
++/*
++ *************************************************************************
++ * Ralink Tech Inc.
++ * 5F., No.36, Taiyuan St., Jhubei City,
++ * Hsinchu County 302,
++ * Taiwan, R.O.C.
++ *
++ * (c) Copyright 2002-2007, Ralink Technology, Inc.
++ *
++ * This program is free software; you can redistribute it and/or modify *
++ * it under the terms of the GNU General Public License as published by *
++ * the Free Software Foundation; either version 2 of the License, or *
++ * (at your option) any later version. *
++ * *
++ * This program is distributed in the hope that it will be useful, *
++ * but WITHOUT ANY WARRANTY; without even the implied warranty of *
++ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the *
++ * GNU General Public License for more details. *
++ * *
++ * You should have received a copy of the GNU General Public License *
++ * along with this program; if not, write to the *
++ * Free Software Foundation, Inc., *
++ * 59 Temple Place - Suite 330, Boston, MA 02111-1307, USA. *
++ * *
++ *************************************************************************
++*/
++
++#include "../rt_config.h"
++
++#define MAX_TX_IN_TBTT (16)
++
++
++UCHAR SNAP_802_1H[] = {0xaa, 0xaa, 0x03, 0x00, 0x00, 0x00};
++UCHAR SNAP_BRIDGE_TUNNEL[] = {0xaa, 0xaa, 0x03, 0x00, 0x00, 0xf8};
++// Add Cisco Aironet SNAP heade for CCX2 support
++UCHAR SNAP_AIRONET[] = {0xaa, 0xaa, 0x03, 0x00, 0x40, 0x96, 0x00, 0x00};
++UCHAR CKIP_LLC_SNAP[] = {0xaa, 0xaa, 0x03, 0x00, 0x40, 0x96, 0x00, 0x02};
++UCHAR EAPOL_LLC_SNAP[]= {0xaa, 0xaa, 0x03, 0x00, 0x00, 0x00, 0x88, 0x8e};
++UCHAR EAPOL[] = {0x88, 0x8e};
++UCHAR TPID[] = {0x81, 0x00}; /* VLAN related */
++
++UCHAR IPX[] = {0x81, 0x37};
++UCHAR APPLE_TALK[] = {0x80, 0xf3};
++UCHAR RateIdToPlcpSignal[12] = {
++ 0, /* RATE_1 */ 1, /* RATE_2 */ 2, /* RATE_5_5 */ 3, /* RATE_11 */ // see BBP spec
++ 11, /* RATE_6 */ 15, /* RATE_9 */ 10, /* RATE_12 */ 14, /* RATE_18 */ // see IEEE802.11a-1999 p.14
++ 9, /* RATE_24 */ 13, /* RATE_36 */ 8, /* RATE_48 */ 12 /* RATE_54 */ }; // see IEEE802.11a-1999 p.14
++
++UCHAR OfdmSignalToRateId[16] = {
++ RATE_54, RATE_54, RATE_54, RATE_54, // OFDM PLCP Signal = 0, 1, 2, 3 respectively
++ RATE_54, RATE_54, RATE_54, RATE_54, // OFDM PLCP Signal = 4, 5, 6, 7 respectively
++ RATE_48, RATE_24, RATE_12, RATE_6, // OFDM PLCP Signal = 8, 9, 10, 11 respectively
++ RATE_54, RATE_36, RATE_18, RATE_9, // OFDM PLCP Signal = 12, 13, 14, 15 respectively
++};
++
++UCHAR OfdmRateToRxwiMCS[12] = {
++ 0, 0, 0, 0,
++ 0, 1, 2, 3, // OFDM rate 6,9,12,18 = rxwi mcs 0,1,2,3
++ 4, 5, 6, 7, // OFDM rate 24,36,48,54 = rxwi mcs 4,5,6,7
++};
++UCHAR RxwiMCSToOfdmRate[12] = {
++ RATE_6, RATE_9, RATE_12, RATE_18,
++ RATE_24, RATE_36, RATE_48, RATE_54, // OFDM rate 6,9,12,18 = rxwi mcs 0,1,2,3
++ 4, 5, 6, 7, // OFDM rate 24,36,48,54 = rxwi mcs 4,5,6,7
++};
++
++char* MCSToMbps[] = {"1Mbps","2Mbps","5.5Mbps","11Mbps","06Mbps","09Mbps","12Mbps","18Mbps","24Mbps","36Mbps","48Mbps","54Mbps","MM-0","MM-1","MM-2","MM-3","MM-4","MM-5","MM-6","MM-7","MM-8","MM-9","MM-10","MM-11","MM-12","MM-13","MM-14","MM-15","MM-32","ee1","ee2","ee3"};
++
++UCHAR default_cwmin[]={CW_MIN_IN_BITS, CW_MIN_IN_BITS, CW_MIN_IN_BITS-1, CW_MIN_IN_BITS-2};
++//UCHAR default_cwmax[]={CW_MAX_IN_BITS, CW_MAX_IN_BITS, CW_MIN_IN_BITS, CW_MIN_IN_BITS-1};
++UCHAR default_sta_aifsn[]={3,7,2,2};
++
++UCHAR MapUserPriorityToAccessCategory[8] = {QID_AC_BE, QID_AC_BK, QID_AC_BK, QID_AC_BE, QID_AC_VI, QID_AC_VI, QID_AC_VO, QID_AC_VO};
++
++
++/*
++ ========================================================================
++
++ Routine Description:
++ API for MLME to transmit management frame to AP (BSS Mode)
++ or station (IBSS Mode)
++
++ Arguments:
++ pAd Pointer to our adapter
++ pData Pointer to the outgoing 802.11 frame
++ Length Size of outgoing management frame
++
++ Return Value:
++ NDIS_STATUS_FAILURE
++ NDIS_STATUS_PENDING
++ NDIS_STATUS_SUCCESS
++
++ IRQL = PASSIVE_LEVEL
++ IRQL = DISPATCH_LEVEL
++
++ Note:
++
++ ========================================================================
++*/
++NDIS_STATUS MiniportMMRequest(
++ IN PRTMP_ADAPTER pAd,
++ IN UCHAR QueIdx,
++ IN PUCHAR pData,
++ IN UINT Length)
++{
++ PNDIS_PACKET pPacket;
++ NDIS_STATUS Status = NDIS_STATUS_SUCCESS;
++ ULONG FreeNum;
++ UCHAR IrqState;
++ UCHAR rtmpHwHdr[TXINFO_SIZE + TXWI_SIZE]; //RTMP_HW_HDR_LEN];
++
++ ASSERT(Length <= MGMT_DMA_BUFFER_SIZE);
++
++ QueIdx=3;
++
++ // 2860C use Tx Ring
++
++ IrqState = pAd->irq_disabled;
++
++ do
++ {
++ // Reset is in progress, stop immediately
++ if ( RTMP_TEST_FLAG(pAd, fRTMP_ADAPTER_RESET_IN_PROGRESS) ||
++ RTMP_TEST_FLAG(pAd, fRTMP_ADAPTER_HALT_IN_PROGRESS | fRTMP_ADAPTER_NIC_NOT_EXIST)||
++ !RTMP_TEST_FLAG(pAd, fRTMP_ADAPTER_START_UP))
++ {
++ Status = NDIS_STATUS_FAILURE;
++ break;
++ }
++
++ // Check Free priority queue
++ // Since we use PBF Queue2 for management frame. Its corresponding DMA ring should be using TxRing.
++
++ // 2860C use Tx Ring
++ if (pAd->MACVersion == 0x28600100)
++ {
++ FreeNum = GET_TXRING_FREENO(pAd, QueIdx);
++ }
++ else
++ {
++ FreeNum = GET_MGMTRING_FREENO(pAd);
++ }
++
++ if ((FreeNum > 0))
++ {
++ // We need to reserve space for rtmp hardware header. i.e., TxWI for RT2860 and TxInfo+TxWI for RT2870
++ NdisZeroMemory(&rtmpHwHdr, (TXINFO_SIZE + TXWI_SIZE));
++ Status = RTMPAllocateNdisPacket(pAd, &pPacket, (PUCHAR)&rtmpHwHdr, (TXINFO_SIZE + TXWI_SIZE), pData, Length);
++ if (Status != NDIS_STATUS_SUCCESS)
++ {
++ DBGPRINT(RT_DEBUG_WARN, ("MiniportMMRequest (error:: can't allocate NDIS PACKET)\n"));
++ break;
++ }
++
++ //pAd->CommonCfg.MlmeTransmit.field.MODE = MODE_CCK;
++ //pAd->CommonCfg.MlmeRate = RATE_2;
++
++
++ Status = MlmeHardTransmit(pAd, QueIdx, pPacket);
++ if (Status != NDIS_STATUS_SUCCESS)
++ RTMPFreeNdisPacket(pAd, pPacket);
++ }
++ else
++ {
++ pAd->RalinkCounters.MgmtRingFullCount++;
++ DBGPRINT(RT_DEBUG_ERROR, ("Qidx(%d), not enough space in MgmtRing, MgmtRingFullCount=%ld!\n",
++ QueIdx, pAd->RalinkCounters.MgmtRingFullCount));
++ }
++
++ } while (FALSE);
++
++
++ return Status;
++}
++
++
++
++
++/*
++ ========================================================================
++
++ Routine Description:
++ Copy frame from waiting queue into relative ring buffer and set
++ appropriate ASIC register to kick hardware transmit function
++
++ Arguments:
++ pAd Pointer to our adapter
++ pBuffer Pointer to memory of outgoing frame
++ Length Size of outgoing management frame
++
++ Return Value:
++ NDIS_STATUS_FAILURE
++ NDIS_STATUS_PENDING
++ NDIS_STATUS_SUCCESS
++
++ IRQL = PASSIVE_LEVEL
++ IRQL = DISPATCH_LEVEL
++
++ Note:
++
++ ========================================================================
++*/
++NDIS_STATUS MlmeHardTransmit(
++ IN PRTMP_ADAPTER pAd,
++ IN UCHAR QueIdx,
++ IN PNDIS_PACKET pPacket)
++{
++ if ((pAd->CommonCfg.RadarDetect.RDMode != RD_NORMAL_MODE)
++#ifdef CARRIER_DETECTION_SUPPORT
++#endif // CARRIER_DETECTION_SUPPORT //
++ )
++ {
++ return NDIS_STATUS_FAILURE;
++ }
++
++ return MlmeHardTransmitMgmtRing(pAd,QueIdx,pPacket);
++
++}
++
++
++
++NDIS_STATUS MlmeHardTransmitMgmtRing(
++ IN PRTMP_ADAPTER pAd,
++ IN UCHAR QueIdx,
++ IN PNDIS_PACKET pPacket)
++{
++ PACKET_INFO PacketInfo;
++ PUCHAR pSrcBufVA;
++ UINT SrcBufLen;
++ PHEADER_802_11 pHeader_802_11;
++ BOOLEAN bAckRequired, bInsertTimestamp;
++ UCHAR MlmeRate;
++ PTXWI_STRUC pFirstTxWI;
++ MAC_TABLE_ENTRY *pMacEntry = NULL;
++
++ RTMP_QueryPacketInfo(pPacket, &PacketInfo, &pSrcBufVA, &SrcBufLen);
++
++ // Make sure MGMT ring resource won't be used by other threads
++// sample, for IRQ LOCK -> SEM LOCK
++// IrqState = pAd->irq_disabled;
++// if (!IrqState)
++ RTMP_SEM_LOCK(&pAd->MgmtRingLock);
++
++
++ if (pSrcBufVA == NULL)
++ {
++ // The buffer shouldn't be NULL
++// if (!IrqState)
++ RTMP_SEM_UNLOCK(&pAd->MgmtRingLock);
++ return NDIS_STATUS_FAILURE;
++ }
++
++#ifdef CONFIG_STA_SUPPORT
++ IF_DEV_CONFIG_OPMODE_ON_STA(pAd)
++ {
++ // outgoing frame always wakeup PHY to prevent frame lost
++ if (OPSTATUS_TEST_FLAG(pAd, fOP_STATUS_DOZE))
++ AsicForceWakeup(pAd, TRUE);
++ }
++#endif // CONFIG_STA_SUPPORT //
++
++ pFirstTxWI = (PTXWI_STRUC)(pSrcBufVA + TXINFO_SIZE);
++ pHeader_802_11 = (PHEADER_802_11) (pSrcBufVA + TXINFO_SIZE + TXWI_SIZE); //TXWI_SIZE);
++
++ if (pHeader_802_11->Addr1[0] & 0x01)
++ {
++ MlmeRate = pAd->CommonCfg.BasicMlmeRate;
++ }
++ else
++ {
++ MlmeRate = pAd->CommonCfg.MlmeRate;
++ }
++
++ // Verify Mlme rate for a / g bands.
++ if ((pAd->LatchRfRegs.Channel > 14) && (MlmeRate < RATE_6)) // 11A band
++ MlmeRate = RATE_6;
++
++ if ((pHeader_802_11->FC.Type == BTYPE_DATA) &&
++ (pHeader_802_11->FC.SubType == SUBTYPE_QOS_NULL))
++ {
++ pMacEntry = MacTableLookup(pAd, pHeader_802_11->Addr1);
++ }
++
++#ifdef CONFIG_STA_SUPPORT
++ IF_DEV_CONFIG_OPMODE_ON_STA(pAd)
++ {
++ // Fixed W52 with Activity scan issue in ABG_MIXED and ABGN_MIXED mode.
++ if (pAd->CommonCfg.PhyMode == PHY_11ABG_MIXED
++#ifdef DOT11_N_SUPPORT
++ || pAd->CommonCfg.PhyMode == PHY_11ABGN_MIXED
++#endif // DOT11_N_SUPPORT //
++ )
++ {
++ if (pAd->LatchRfRegs.Channel > 14)
++ pAd->CommonCfg.MlmeTransmit.field.MODE = 1;
++ else
++ pAd->CommonCfg.MlmeTransmit.field.MODE = 0;
++ }
++ }
++#endif // CONFIG_STA_SUPPORT //
++
++ //
++ // Should not be hard code to set PwrMgmt to 0 (PWR_ACTIVE)
++ // Snice it's been set to 0 while on MgtMacHeaderInit
++ // By the way this will cause frame to be send on PWR_SAVE failed.
++ //
++ // pHeader_802_11->FC.PwrMgmt = 0; // (pAd->StaCfg.Psm == PWR_SAVE);
++ //
++ // In WMM-UAPSD, mlme frame should be set psm as power saving but probe request frame
++#ifdef CONFIG_STA_SUPPORT
++ // Data-Null packets alse pass through MMRequest in RT2860, however, we hope control the psm bit to pass APSD
++ if ((pHeader_802_11->FC.Type != BTYPE_DATA) && (pHeader_802_11->FC.Type != BTYPE_CNTL))
++ {
++ if ((pAd->StaCfg.Psm == PWR_SAVE) &&
++ (pHeader_802_11->FC.SubType == SUBTYPE_ACTION))
++ pHeader_802_11->FC.PwrMgmt = PWR_SAVE;
++ else
++ pHeader_802_11->FC.PwrMgmt = PWR_ACTIVE;
++ }
++#endif // CONFIG_STA_SUPPORT //
++
++ bInsertTimestamp = FALSE;
++ if (pHeader_802_11->FC.Type == BTYPE_CNTL) // must be PS-POLL
++ {
++#ifdef CONFIG_STA_SUPPORT
++ //Set PM bit in ps-poll, to fix WLK 1.2 PowerSaveMode_ext failure issue.
++ if ((pAd->OpMode == OPMODE_STA) && (pHeader_802_11->FC.SubType == SUBTYPE_PS_POLL))
++ {
++ pHeader_802_11->FC.PwrMgmt = PWR_SAVE;
++ }
++#endif // CONFIG_STA_SUPPORT //
++ bAckRequired = FALSE;
++ }
++ else // BTYPE_MGMT or BTYPE_DATA(must be NULL frame)
++ {
++ //pAd->Sequence++;
++ //pHeader_802_11->Sequence = pAd->Sequence;
++
++ if (pHeader_802_11->Addr1[0] & 0x01) // MULTICAST, BROADCAST
++ {
++ bAckRequired = FALSE;
++ pHeader_802_11->Duration = 0;
++ }
++ else
++ {
++ bAckRequired = TRUE;
++ pHeader_802_11->Duration = RTMPCalcDuration(pAd, MlmeRate, 14);
++ if (pHeader_802_11->FC.SubType == SUBTYPE_PROBE_RSP)
++ {
++ bInsertTimestamp = TRUE;
++ }
++ }
++ }
++
++ pHeader_802_11->Sequence = pAd->Sequence++;
++ if (pAd->Sequence >0xfff)
++ pAd->Sequence = 0;
++
++ // Before radar detection done, mgmt frame can not be sent but probe req
++ // Because we need to use probe req to trigger driver to send probe req in passive scan
++ if ((pHeader_802_11->FC.SubType != SUBTYPE_PROBE_REQ)
++ && (pAd->CommonCfg.bIEEE80211H == 1)
++ && (pAd->CommonCfg.RadarDetect.RDMode != RD_NORMAL_MODE))
++ {
++ DBGPRINT(RT_DEBUG_ERROR,("MlmeHardTransmit --> radar detect not in normal mode !!!\n"));
++// if (!IrqState)
++ RTMP_SEM_UNLOCK(&pAd->MgmtRingLock);
++ return (NDIS_STATUS_FAILURE);
++ }
++
++#ifdef RT_BIG_ENDIAN
++ RTMPFrameEndianChange(pAd, (PUCHAR)pHeader_802_11, DIR_WRITE, FALSE);
++#endif
++
++ //
++ // fill scatter-and-gather buffer list into TXD. Internally created NDIS PACKET
++ // should always has only one ohysical buffer, and the whole frame size equals
++ // to the first scatter buffer size
++ //
++
++ // Initialize TX Descriptor
++ // For inter-frame gap, the number is for this frame and next frame
++ // For MLME rate, we will fix as 2Mb to match other vendor's implement
++// pAd->CommonCfg.MlmeTransmit.field.MODE = 1;
++
++// management frame doesn't need encryption. so use RESERVED_WCID no matter u are sending to specific wcid or not.
++ if (pMacEntry == NULL)
++ {
++ RTMPWriteTxWI(pAd, pFirstTxWI, FALSE, FALSE, bInsertTimestamp, FALSE, bAckRequired, FALSE,
++ 0, RESERVED_WCID, (SrcBufLen - TXINFO_SIZE - TXWI_SIZE), PID_MGMT, 0, (UCHAR)pAd->CommonCfg.MlmeTransmit.field.MCS, IFS_BACKOFF, FALSE, &pAd->CommonCfg.MlmeTransmit);
++ }
++ else
++ {
++ RTMPWriteTxWI(pAd, pFirstTxWI, FALSE, FALSE,
++ bInsertTimestamp, FALSE, bAckRequired, FALSE,
++ 0, pMacEntry->Aid, (SrcBufLen - TXINFO_SIZE - TXWI_SIZE),
++ pMacEntry->MaxHTPhyMode.field.MCS, 0,
++ (UCHAR)pMacEntry->MaxHTPhyMode.field.MCS,
++ IFS_BACKOFF, FALSE, &pMacEntry->MaxHTPhyMode);
++ }
++
++#ifdef RT_BIG_ENDIAN
++ RTMPWIEndianChange((PUCHAR)pFirstTxWI, TYPE_TXWI);
++#endif
++
++ // Now do hardware-depened kick out.
++ HAL_KickOutMgmtTx(pAd, QueIdx, pPacket, pSrcBufVA, SrcBufLen);
++
++ // Make sure to release MGMT ring resource
++// if (!IrqState)
++ RTMP_SEM_UNLOCK(&pAd->MgmtRingLock);
++ return NDIS_STATUS_SUCCESS;
++}
++
++
++/********************************************************************************
++
++ New DeQueue Procedures.
++
++ ********************************************************************************/
++
++#define DEQUEUE_LOCK(lock, bIntContext, IrqFlags) \
++ do{ \
++ if (bIntContext == FALSE) \
++ RTMP_IRQ_LOCK((lock), IrqFlags); \
++ }while(0)
++
++#define DEQUEUE_UNLOCK(lock, bIntContext, IrqFlags) \
++ do{ \
++ if (bIntContext == FALSE) \
++ RTMP_IRQ_UNLOCK((lock), IrqFlags); \
++ }while(0)
++
++
++#if 0
++static VOID dumpTxBlk(TX_BLK *pTxBlk)
++{
++ NDIS_PACKET *pPacket;
++ int i, frameNum;
++ PQUEUE_ENTRY pQEntry;
++
++ printk("Dump TX_BLK Structure:\n");
++ printk("\tTxFrameType=%d!\n", pTxBlk->TxFrameType);
++ printk("\tTotalFrameLen=%d\n", pTxBlk->TotalFrameLen);
++ printk("\tTotalFrameNum=%ld!\n", pTxBlk->TxPacketList.Number);
++ printk("\tTotalFragNum=%d!\n", pTxBlk->TotalFragNum);
++ printk("\tpPacketList=\n");
++
++ frameNum = pTxBlk->TxPacketList.Number;
++
++ for(i=0; i < frameNum; i++)
++ { int j;
++ UCHAR *pBuf;
++
++ pQEntry = RemoveHeadQueue(&pTxBlk->TxPacketList);
++ pPacket = QUEUE_ENTRY_TO_PACKET(pQEntry);
++ if (pPacket)
++ {
++ pBuf = GET_OS_PKT_DATAPTR(pPacket);
++ printk("\t\t[%d]:ptr=0x%x, Len=%d!\n", i, (UINT32)(GET_OS_PKT_DATAPTR(pPacket)), GET_OS_PKT_LEN(pPacket));
++ printk("\t\t");
++ for (j =0 ; j < GET_OS_PKT_LEN(pPacket); j++)
++ {
++ printk("%02x ", (pBuf[j] & 0xff));
++ if (j == 16)
++ break;
++ }
++ InsertTailQueue(&pTxBlk->TxPacketList, PACKET_TO_QUEUE_ENTRY(pPacket));
++ }
++ }
++ printk("\tWcid=%d!\n", pTxBlk->Wcid);
++ printk("\tapidx=%d!\n", pTxBlk->apidx);
++ printk("----EndOfDump\n");
++
++}
++#endif
++
++
++/*
++ ========================================================================
++ Tx Path design algorithm:
++ Basically, we divide the packets into four types, Broadcast/Multicast, 11N Rate(AMPDU, AMSDU, Normal), B/G Rate(ARALINK, Normal),
++ Specific Packet Type. Following show the classification rule and policy for each kinds of packets.
++ Classification Rule=>
++ Multicast: (*addr1 & 0x01) == 0x01
++ Specific : bDHCPFrame, bARPFrame, bEAPOLFrame, etc.
++ 11N Rate : If peer support HT
++ (1).AMPDU -- If TXBA is negotiated.
++ (2).AMSDU -- If AMSDU is capable for both peer and ourself.
++ *). AMSDU can embedded in a AMPDU, but now we didn't support it.
++ (3).Normal -- Other packets which send as 11n rate.
++
++ B/G Rate : If peer is b/g only.
++ (1).ARALINK-- If both of peer/us supprot Ralink proprietary Aggregation and the TxRate is large than RATE_6
++ (2).Normal -- Other packets which send as b/g rate.
++ Fragment:
++ The packet must be unicast, NOT A-RALINK, NOT A-MSDU, NOT 11n, then can consider about fragment.
++
++ Classified Packet Handle Rule=>
++ Multicast:
++ No ACK, //pTxBlk->bAckRequired = FALSE;
++ No WMM, //pTxBlk->bWMM = FALSE;
++ No piggyback, //pTxBlk->bPiggyBack = FALSE;
++ Force LowRate, //pTxBlk->bForceLowRate = TRUE;
++ Specific : Basically, for specific packet, we should handle it specifically, but now all specific packets are use
++ the same policy to handle it.
++ Force LowRate, //pTxBlk->bForceLowRate = TRUE;
++
++ 11N Rate :
++ No piggyback, //pTxBlk->bPiggyBack = FALSE;
++
++ (1).AMSDU
++ pTxBlk->bWMM = TRUE;
++ (2).AMPDU
++ pTxBlk->bWMM = TRUE;
++ (3).Normal
++
++ B/G Rate :
++ (1).ARALINK
++
++ (2).Normal
++ ========================================================================
++*/
++static UCHAR TxPktClassification(
++ IN RTMP_ADAPTER *pAd,
++ IN PNDIS_PACKET pPacket)
++{
++ UCHAR TxFrameType = TX_UNKOWN_FRAME;
++ UCHAR Wcid;
++ MAC_TABLE_ENTRY *pMacEntry = NULL;
++#ifdef DOT11_N_SUPPORT
++ BOOLEAN bHTRate = FALSE;
++#endif // DOT11_N_SUPPORT //
++
++ Wcid = RTMP_GET_PACKET_WCID(pPacket);
++ if (Wcid == MCAST_WCID)
++ { // Handle for RA is Broadcast/Multicast Address.
++ return TX_MCAST_FRAME;
++ }
++
++ // Handle for unicast packets
++ pMacEntry = &pAd->MacTab.Content[Wcid];
++ if (RTMP_GET_PACKET_LOWRATE(pPacket))
++ { // It's a specific packet need to force low rate, i.e., bDHCPFrame, bEAPOLFrame, bWAIFrame
++ TxFrameType = TX_LEGACY_FRAME;
++ }
++#ifdef DOT11_N_SUPPORT
++ else if (IS_HT_RATE(pMacEntry))
++ { // it's a 11n capable packet
++
++ // Depends on HTPhyMode to check if the peer support the HTRate transmission.
++ // Currently didn't support A-MSDU embedded in A-MPDU
++ bHTRate = TRUE;
++ if (RTMP_GET_PACKET_MOREDATA(pPacket) || (pMacEntry->PsMode == PWR_SAVE))
++ TxFrameType = TX_LEGACY_FRAME;
++#ifdef UAPSD_AP_SUPPORT
++ else if (RTMP_GET_PACKET_EOSP(pPacket))
++ TxFrameType = TX_LEGACY_FRAME;
++#endif // UAPSD_AP_SUPPORT //
++ else if((pMacEntry->TXBAbitmap & (1<<(RTMP_GET_PACKET_UP(pPacket)))) != 0)
++ return TX_AMPDU_FRAME;
++ else if(CLIENT_STATUS_TEST_FLAG(pMacEntry, fCLIENT_STATUS_AMSDU_INUSED))
++ return TX_AMSDU_FRAME;
++ else
++ TxFrameType = TX_LEGACY_FRAME;
++ }
++#endif // DOT11_N_SUPPORT //
++ else
++ { // it's a legacy b/g packet.
++ if ((CLIENT_STATUS_TEST_FLAG(pMacEntry, fCLIENT_STATUS_AGGREGATION_CAPABLE) && pAd->CommonCfg.bAggregationCapable) &&
++ (RTMP_GET_PACKET_TXRATE(pPacket) >= RATE_6) &&
++ (!(OPSTATUS_TEST_FLAG(pAd, fOP_STATUS_WMM_INUSED) && CLIENT_STATUS_TEST_FLAG(pMacEntry, fCLIENT_STATUS_WMM_CAPABLE))))
++ { // if peer support Ralink Aggregation, we use it.
++ TxFrameType = TX_RALINK_FRAME;
++ }
++ else
++ {
++ TxFrameType = TX_LEGACY_FRAME;
++ }
++ }
++
++ // Currently, our fragment only support when a unicast packet send as NOT-ARALINK, NOT-AMSDU and NOT-AMPDU.
++ if ((RTMP_GET_PACKET_FRAGMENTS(pPacket) > 1) && (TxFrameType == TX_LEGACY_FRAME))
++ TxFrameType = TX_FRAG_FRAME;
++
++ return TxFrameType;
++}
++
++
++BOOLEAN RTMP_FillTxBlkInfo(
++ IN RTMP_ADAPTER *pAd,
++ IN TX_BLK *pTxBlk)
++{
++ PACKET_INFO PacketInfo;
++ PNDIS_PACKET pPacket;
++ PMAC_TABLE_ENTRY pMacEntry = NULL;
++
++ pPacket = pTxBlk->pPacket;
++ RTMP_QueryPacketInfo(pPacket, &PacketInfo, &pTxBlk->pSrcBufHeader, &pTxBlk->SrcBufLen);
++
++ pTxBlk->Wcid = RTMP_GET_PACKET_WCID(pPacket);
++ pTxBlk->apidx = RTMP_GET_PACKET_IF(pPacket);
++ pTxBlk->UserPriority = RTMP_GET_PACKET_UP(pPacket);
++ pTxBlk->FrameGap = IFS_HTTXOP; // ASIC determine Frame Gap
++
++ if (RTMP_GET_PACKET_CLEAR_EAP_FRAME(pTxBlk->pPacket))
++ TX_BLK_SET_FLAG(pTxBlk, fTX_bClearEAPFrame);
++ else
++ TX_BLK_CLEAR_FLAG(pTxBlk, fTX_bClearEAPFrame);
++
++ // Default to clear this flag
++ TX_BLK_CLEAR_FLAG(pTxBlk, fTX_bForceNonQoS);
++
++
++ if (pTxBlk->Wcid == MCAST_WCID)
++ {
++ pTxBlk->pMacEntry = NULL;
++ {
++#ifdef MCAST_RATE_SPECIFIC
++ PUCHAR pDA = GET_OS_PKT_DATAPTR(pPacket);
++ if (((*pDA & 0x01) == 0x01) && (*pDA != 0xff))
++ pTxBlk->pTransmit = &pAd->CommonCfg.MCastPhyMode;
++ else
++#endif // MCAST_RATE_SPECIFIC //
++ pTxBlk->pTransmit = &pAd->MacTab.Content[MCAST_WCID].HTPhyMode;
++ }
++
++ TX_BLK_CLEAR_FLAG(pTxBlk, fTX_bAckRequired); // AckRequired = FALSE, when broadcast packet in Adhoc mode.
++ //TX_BLK_SET_FLAG(pTxBlk, fTX_bForceLowRate);
++ TX_BLK_CLEAR_FLAG(pTxBlk, fTX_bAllowFrag);
++ TX_BLK_CLEAR_FLAG(pTxBlk, fTX_bWMM);
++ if (RTMP_GET_PACKET_MOREDATA(pPacket))
++ {
++ TX_BLK_SET_FLAG(pTxBlk, fTX_bMoreData);
++ }
++
++ }
++ else
++ {
++ pTxBlk->pMacEntry = &pAd->MacTab.Content[pTxBlk->Wcid];
++ pTxBlk->pTransmit = &pTxBlk->pMacEntry->HTPhyMode;
++
++ pMacEntry = pTxBlk->pMacEntry;
++
++
++ // For all unicast packets, need Ack unless the Ack Policy is not set as NORMAL_ACK.
++ if (pAd->CommonCfg.AckPolicy[pTxBlk->QueIdx] != NORMAL_ACK)
++ TX_BLK_CLEAR_FLAG(pTxBlk, fTX_bAckRequired);
++ else
++ TX_BLK_SET_FLAG(pTxBlk, fTX_bAckRequired);
++
++ {
++
++#ifdef CONFIG_STA_SUPPORT
++ IF_DEV_CONFIG_OPMODE_ON_STA(pAd)
++ {
++
++ // If support WMM, enable it.
++ if (OPSTATUS_TEST_FLAG(pAd, fOP_STATUS_WMM_INUSED) &&
++ CLIENT_STATUS_TEST_FLAG(pMacEntry, fCLIENT_STATUS_WMM_CAPABLE))
++ TX_BLK_SET_FLAG(pTxBlk, fTX_bWMM);
++ }
++#endif // CONFIG_STA_SUPPORT //
++ }
++
++ if (pTxBlk->TxFrameType == TX_LEGACY_FRAME)
++ {
++ if ( (RTMP_GET_PACKET_LOWRATE(pPacket)) ||
++ ((pAd->OpMode == OPMODE_AP) && (pMacEntry->MaxHTPhyMode.field.MODE == MODE_CCK) && (pMacEntry->MaxHTPhyMode.field.MCS == RATE_1)))
++ { // Specific packet, i.e., bDHCPFrame, bEAPOLFrame, bWAIFrame, need force low rate.
++ pTxBlk->pTransmit = &pAd->MacTab.Content[MCAST_WCID].HTPhyMode;
++#ifdef DOT11_N_SUPPORT
++ // Modify the WMM bit for ICV issue. If we have a packet with EOSP field need to set as 1, how to handle it???
++ if (IS_HT_STA(pTxBlk->pMacEntry) &&
++ (CLIENT_STATUS_TEST_FLAG(pMacEntry, fCLIENT_STATUS_RALINK_CHIPSET)) &&
++ ((pAd->CommonCfg.bRdg == TRUE) && CLIENT_STATUS_TEST_FLAG(pMacEntry, fCLIENT_STATUS_RDG_CAPABLE)))
++ {
++ TX_BLK_CLEAR_FLAG(pTxBlk, fTX_bWMM);
++ TX_BLK_SET_FLAG(pTxBlk, fTX_bForceNonQoS);
++ }
++#endif // DOT11_N_SUPPORT //
++ }
++
++#ifdef DOT11_N_SUPPORT
++ if ( (IS_HT_RATE(pMacEntry) == FALSE) &&
++ (CLIENT_STATUS_TEST_FLAG(pMacEntry, fCLIENT_STATUS_PIGGYBACK_CAPABLE)))
++ { // Currently piggy-back only support when peer is operate in b/g mode.
++ TX_BLK_SET_FLAG(pTxBlk, fTX_bPiggyBack);
++ }
++#endif // DOT11_N_SUPPORT //
++
++ if (RTMP_GET_PACKET_MOREDATA(pPacket))
++ {
++ TX_BLK_SET_FLAG(pTxBlk, fTX_bMoreData);
++ }
++#ifdef UAPSD_AP_SUPPORT
++ if (RTMP_GET_PACKET_EOSP(pPacket))
++ {
++ TX_BLK_SET_FLAG(pTxBlk, fTX_bWMM_UAPSD_EOSP);
++ }
++#endif // UAPSD_AP_SUPPORT //
++ }
++ else if (pTxBlk->TxFrameType == TX_FRAG_FRAME)
++ {
++ TX_BLK_SET_FLAG(pTxBlk, fTX_bAllowFrag);
++ }
++
++ pMacEntry->DebugTxCount++;
++ }
++
++ return TRUE;
++
++FillTxBlkErr:
++ return FALSE;
++}
++
++
++BOOLEAN CanDoAggregateTransmit(
++ IN RTMP_ADAPTER *pAd,
++ IN NDIS_PACKET *pPacket,
++ IN TX_BLK *pTxBlk)
++{
++
++ //printk("Check if can do aggregation! TxFrameType=%d!\n", pTxBlk->TxFrameType);
++
++ if (RTMP_GET_PACKET_WCID(pPacket) == MCAST_WCID)
++ return FALSE;
++
++ if (RTMP_GET_PACKET_DHCP(pPacket) ||
++ RTMP_GET_PACKET_EAPOL(pPacket) ||
++ RTMP_GET_PACKET_WAI(pPacket))
++ return FALSE;
++
++ if ((pTxBlk->TxFrameType == TX_AMSDU_FRAME) &&
++ ((pTxBlk->TotalFrameLen + GET_OS_PKT_LEN(pPacket))> (RX_BUFFER_AGGRESIZE - 100)))
++ { // For AMSDU, allow the packets with total length < max-amsdu size
++ return FALSE;
++ }
++
++ if ((pTxBlk->TxFrameType == TX_RALINK_FRAME) &&
++ (pTxBlk->TxPacketList.Number == 2))
++ { // For RALINK-Aggregation, allow two frames in one batch.
++ return FALSE;
++ }
++
++#ifdef CONFIG_STA_SUPPORT
++ if ((INFRA_ON(pAd)) && (pAd->OpMode == OPMODE_STA)) // must be unicast to AP
++ return TRUE;
++ else
++#endif // CONFIG_STA_SUPPORT //
++ return FALSE;
++
++}
++
++
++/*
++ ========================================================================
++
++ Routine Description:
++ To do the enqueue operation and extract the first item of waiting
++ list. If a number of available shared memory segments could meet
++ the request of extracted item, the extracted item will be fragmented
++ into shared memory segments.
++
++ Arguments:
++ pAd Pointer to our adapter
++ pQueue Pointer to Waiting Queue
++
++ Return Value:
++ None
++
++ IRQL = DISPATCH_LEVEL
++
++ Note:
++
++ ========================================================================
++*/
++VOID RTMPDeQueuePacket(
++ IN PRTMP_ADAPTER pAd,
++ IN BOOLEAN bIntContext,
++ IN UCHAR QIdx, /* BulkOutPipeId */
++ IN UCHAR Max_Tx_Packets)
++{
++ PQUEUE_ENTRY pEntry = NULL;
++ PNDIS_PACKET pPacket;
++ NDIS_STATUS Status = NDIS_STATUS_SUCCESS;
++ UCHAR Count=0;
++ PQUEUE_HEADER pQueue;
++ ULONG FreeNumber[NUM_OF_TX_RING];
++ UCHAR QueIdx, sQIdx, eQIdx;
++ unsigned long IrqFlags = 0;
++ BOOLEAN hasTxDesc = FALSE;
++ TX_BLK TxBlk;
++ TX_BLK *pTxBlk;
++
++#ifdef DBG_DIAGNOSE
++ BOOLEAN firstRound;
++ RtmpDiagStruct *pDiagStruct = &pAd->DiagStruct;
++#endif
++
++
++ if (QIdx == NUM_OF_TX_RING)
++ {
++ sQIdx = 0;
++ eQIdx = 3; // 4 ACs, start from 0.
++ }
++ else
++ {
++ sQIdx = eQIdx = QIdx;
++ }
++
++ for (QueIdx=sQIdx; QueIdx <= eQIdx; QueIdx++)
++ {
++ Count=0;
++
++ RT28XX_START_DEQUEUE(pAd, QueIdx, IrqFlags);
++
++#ifdef DBG_DIAGNOSE
++ firstRound = ((QueIdx == 0) ? TRUE : FALSE);
++#endif // DBG_DIAGNOSE //
++
++ while (1)
++ {
++ if ((RTMP_TEST_FLAG(pAd, (fRTMP_ADAPTER_BSS_SCAN_IN_PROGRESS |
++ fRTMP_ADAPTER_RADIO_OFF |
++ fRTMP_ADAPTER_RESET_IN_PROGRESS |
++ fRTMP_ADAPTER_HALT_IN_PROGRESS |
++ fRTMP_ADAPTER_NIC_NOT_EXIST))))
++ {
++ RT28XX_STOP_DEQUEUE(pAd, QueIdx, IrqFlags);
++ return;
++ }
++
++ if (Count >= Max_Tx_Packets)
++ break;
++
++ DEQUEUE_LOCK(&pAd->irq_lock, bIntContext, IrqFlags);
++ if (&pAd->TxSwQueue[QueIdx] == NULL)
++ {
++#ifdef DBG_DIAGNOSE
++ if (firstRound == TRUE)
++ pDiagStruct->TxSWQueCnt[pDiagStruct->ArrayCurIdx][0]++;
++#endif // DBG_DIAGNOSE //
++ DEQUEUE_UNLOCK(&pAd->irq_lock, bIntContext, IrqFlags);
++ break;
++ }
++
++
++ // probe the Queue Head
++ pQueue = &pAd->TxSwQueue[QueIdx];
++ if ((pEntry = pQueue->Head) == NULL)
++ {
++ DEQUEUE_UNLOCK(&pAd->irq_lock, bIntContext, IrqFlags);
++ break;
++ }
++
++ pTxBlk = &TxBlk;
++ NdisZeroMemory((PUCHAR)pTxBlk, sizeof(TX_BLK));
++ //InitializeQueueHeader(&pTxBlk->TxPacketList); // Didn't need it because we already memzero it.
++ pTxBlk->QueIdx = QueIdx;
++
++ pPacket = QUEUE_ENTRY_TO_PKT(pEntry);
++
++ // Early check to make sure we have enoguh Tx Resource.
++ hasTxDesc = RT28XX_HAS_ENOUGH_FREE_DESC(pAd, pTxBlk, FreeNumber[QueIdx], pPacket);
++ if (!hasTxDesc)
++ {
++ pAd->PrivateInfo.TxRingFullCnt++;
++
++ DEQUEUE_UNLOCK(&pAd->irq_lock, bIntContext, IrqFlags);
++
++ break;
++ }
++
++ pTxBlk->TxFrameType = TxPktClassification(pAd, pPacket);
++ pEntry = RemoveHeadQueue(pQueue);
++ pTxBlk->TotalFrameNum++;
++ pTxBlk->TotalFragNum += RTMP_GET_PACKET_FRAGMENTS(pPacket); // The real fragment number maybe vary
++ pTxBlk->TotalFrameLen += GET_OS_PKT_LEN(pPacket);
++ pTxBlk->pPacket = pPacket;
++ InsertTailQueue(&pTxBlk->TxPacketList, PACKET_TO_QUEUE_ENTRY(pPacket));
++
++ if (pTxBlk->TxFrameType == TX_RALINK_FRAME || pTxBlk->TxFrameType == TX_AMSDU_FRAME)
++ {
++ // Enhance SW Aggregation Mechanism
++ if (NEED_QUEUE_BACK_FOR_AGG(pAd, QueIdx, FreeNumber[QueIdx], pTxBlk->TxFrameType))
++ {
++ InsertHeadQueue(pQueue, PACKET_TO_QUEUE_ENTRY(pPacket));
++ DEQUEUE_UNLOCK(&pAd->irq_lock, bIntContext, IrqFlags);
++ break;
++ }
++
++ do{
++ if((pEntry = pQueue->Head) == NULL)
++ break;
++
++ // For TX_AMSDU_FRAME/TX_RALINK_FRAME, Need to check if next pakcet can do aggregation.
++ pPacket = QUEUE_ENTRY_TO_PKT(pEntry);
++ FreeNumber[QueIdx] = GET_TXRING_FREENO(pAd, QueIdx);
++ hasTxDesc = RT28XX_HAS_ENOUGH_FREE_DESC(pAd, pTxBlk, FreeNumber[QueIdx], pPacket);
++ if ((hasTxDesc == FALSE) || (CanDoAggregateTransmit(pAd, pPacket, pTxBlk) == FALSE))
++ break;
++
++ //Remove the packet from the TxSwQueue and insert into pTxBlk
++ pEntry = RemoveHeadQueue(pQueue);
++ ASSERT(pEntry);
++ pPacket = QUEUE_ENTRY_TO_PKT(pEntry);
++ pTxBlk->TotalFrameNum++;
++ pTxBlk->TotalFragNum += RTMP_GET_PACKET_FRAGMENTS(pPacket); // The real fragment number maybe vary
++ pTxBlk->TotalFrameLen += GET_OS_PKT_LEN(pPacket);
++ InsertTailQueue(&pTxBlk->TxPacketList, PACKET_TO_QUEUE_ENTRY(pPacket));
++ }while(1);
++
++ if (pTxBlk->TxPacketList.Number == 1)
++ pTxBlk->TxFrameType = TX_LEGACY_FRAME;
++ }
++
++#ifdef RT2870
++ DEQUEUE_UNLOCK(&pAd->irq_lock, bIntContext, IrqFlags);
++#endif // RT2870 //
++
++ Count += pTxBlk->TxPacketList.Number;
++
++ // Do HardTransmit now.
++#ifdef CONFIG_STA_SUPPORT
++ IF_DEV_CONFIG_OPMODE_ON_STA(pAd)
++ Status = STAHardTransmit(pAd, pTxBlk, QueIdx);
++#endif // CONFIG_STA_SUPPORT //
++
++
++#if 0 // We should not break if HardTransmit failed. Well, at least now we should not!
++ if (Status != NDIS_STATUS_SUCCESS)
++ {
++ DBGPRINT(RT_DEBUG_TRACE /*RT_DEBUG_INFO*/,("RTMPHardTransmit return failed!!!\n"));
++ break;
++ }
++#endif
++ }
++
++ RT28XX_STOP_DEQUEUE(pAd, QueIdx, IrqFlags);
++
++#ifdef RT2870
++ if (!hasTxDesc)
++ RTUSBKickBulkOut(pAd);
++#endif // RT2870 //
++
++#ifdef BLOCK_NET_IF
++ if ((pAd->blockQueueTab[QueIdx].SwTxQueueBlockFlag == TRUE)
++ && (pAd->TxSwQueue[QueIdx].Number < 1))
++ {
++ releaseNetIf(&pAd->blockQueueTab[QueIdx]);
++ }
++#endif // BLOCK_NET_IF //
++
++ }
++
++}
++
++
++/*
++ ========================================================================
++
++ Routine Description:
++ Calculates the duration which is required to transmit out frames
++ with given size and specified rate.
++
++ Arguments:
++ pAd Pointer to our adapter
++ Rate Transmit rate
++ Size Frame size in units of byte
++
++ Return Value:
++ Duration number in units of usec
++
++ IRQL = PASSIVE_LEVEL
++ IRQL = DISPATCH_LEVEL
++
++ Note:
++
++ ========================================================================
++*/
++USHORT RTMPCalcDuration(
++ IN PRTMP_ADAPTER pAd,
++ IN UCHAR Rate,
++ IN ULONG Size)
++{
++ ULONG Duration = 0;
++
++ if (Rate < RATE_FIRST_OFDM_RATE) // CCK
++ {
++ if ((Rate > RATE_1) && OPSTATUS_TEST_FLAG(pAd, fOP_STATUS_SHORT_PREAMBLE_INUSED))
++ Duration = 96; // 72+24 preamble+plcp
++ else
++ Duration = 192; // 144+48 preamble+plcp
++
++ Duration += (USHORT)((Size << 4) / RateIdTo500Kbps[Rate]);
++ if ((Size << 4) % RateIdTo500Kbps[Rate])
++ Duration ++;
++ }
++ else if (Rate <= RATE_LAST_OFDM_RATE)// OFDM rates
++ {
++ Duration = 20 + 6; // 16+4 preamble+plcp + Signal Extension
++ Duration += 4 * (USHORT)((11 + Size * 4) / RateIdTo500Kbps[Rate]);
++ if ((11 + Size * 4) % RateIdTo500Kbps[Rate])
++ Duration += 4;
++ }
++ else //mimo rate
++ {
++ Duration = 20 + 6; // 16+4 preamble+plcp + Signal Extension
++ }
++
++ return (USHORT)Duration;
++}
++
++
++/*
++ ========================================================================
++
++ Routine Description:
++ Calculates the duration which is required to transmit out frames
++ with given size and specified rate.
++
++ Arguments:
++ pTxWI Pointer to head of each MPDU to HW.
++ Ack Setting for Ack requirement bit
++ Fragment Setting for Fragment bit
++ RetryMode Setting for retry mode
++ Ifs Setting for IFS gap
++ Rate Setting for transmit rate
++ Service Setting for service
++ Length Frame length
++ TxPreamble Short or Long preamble when using CCK rates
++ QueIdx - 0-3, according to 802.11e/d4.4 June/2003
++
++ Return Value:
++ None
++
++ IRQL = PASSIVE_LEVEL
++ IRQL = DISPATCH_LEVEL
++
++ See also : BASmartHardTransmit() !!!
++
++ ========================================================================
++*/
++VOID RTMPWriteTxWI(
++ IN PRTMP_ADAPTER pAd,
++ IN PTXWI_STRUC pOutTxWI,
++ IN BOOLEAN FRAG,
++ IN BOOLEAN CFACK,
++ IN BOOLEAN InsTimestamp,
++ IN BOOLEAN AMPDU,
++ IN BOOLEAN Ack,
++ IN BOOLEAN NSeq, // HW new a sequence.
++ IN UCHAR BASize,
++ IN UCHAR WCID,
++ IN ULONG Length,
++ IN UCHAR PID,
++ IN UCHAR TID,
++ IN UCHAR TxRate,
++ IN UCHAR Txopmode,
++ IN BOOLEAN CfAck,
++ IN HTTRANSMIT_SETTING *pTransmit)
++{
++ PMAC_TABLE_ENTRY pMac = NULL;
++ TXWI_STRUC TxWI;
++ PTXWI_STRUC pTxWI;
++
++ if (WCID < MAX_LEN_OF_MAC_TABLE)
++ pMac = &pAd->MacTab.Content[WCID];
++
++ //
++ // Always use Long preamble before verifiation short preamble functionality works well.
++ // Todo: remove the following line if short preamble functionality works
++ //
++ OPSTATUS_CLEAR_FLAG(pAd, fOP_STATUS_SHORT_PREAMBLE_INUSED);
++ NdisZeroMemory(&TxWI, TXWI_SIZE);
++ pTxWI = &TxWI;
++
++ pTxWI->FRAG= FRAG;
++
++ pTxWI->CFACK = CFACK;
++ pTxWI->TS= InsTimestamp;
++ pTxWI->AMPDU = AMPDU;
++ pTxWI->ACK = Ack;
++ pTxWI->txop= Txopmode;
++
++ pTxWI->NSEQ = NSeq;
++ // John tune the performace with Intel Client in 20 MHz performance
++#ifdef DOT11_N_SUPPORT
++ BASize = pAd->CommonCfg.TxBASize;
++
++ if( BASize >7 )
++ BASize =7;
++ pTxWI->BAWinSize = BASize;
++ pTxWI->ShortGI = pTransmit->field.ShortGI;
++ pTxWI->STBC = pTransmit->field.STBC;
++#endif // DOT11_N_SUPPORT //
++
++ pTxWI->WirelessCliID = WCID;
++ pTxWI->MPDUtotalByteCount = Length;
++ pTxWI->PacketId = PID;
++
++ // If CCK or OFDM, BW must be 20
++ pTxWI->BW = (pTransmit->field.MODE <= MODE_OFDM) ? (BW_20) : (pTransmit->field.BW);
++#ifdef DOT11N_DRAFT3
++ if (pTxWI->BW)
++ pTxWI->BW = (pAd->CommonCfg.AddHTInfo.AddHtInfo.RecomWidth == 0) ? (BW_20) : (pTransmit->field.BW);
++#endif // DOT11N_DRAFT3 //
++
++ pTxWI->MCS = pTransmit->field.MCS;
++ pTxWI->PHYMODE = pTransmit->field.MODE;
++ pTxWI->CFACK = CfAck;
++
++#ifdef DOT11_N_SUPPORT
++ if (pMac)
++ {
++ if (pAd->CommonCfg.bMIMOPSEnable)
++ {
++ if ((pMac->MmpsMode == MMPS_DYNAMIC) && (pTransmit->field.MCS > 7))
++ {
++ // Dynamic MIMO Power Save Mode
++ pTxWI->MIMOps = 1;
++ }
++ else if (pMac->MmpsMode == MMPS_STATIC)
++ {
++ // Static MIMO Power Save Mode
++ if (pTransmit->field.MODE >= MODE_HTMIX && pTransmit->field.MCS > 7)
++ {
++ pTxWI->MCS = 7;
++ pTxWI->MIMOps = 0;
++ }
++ }
++ }
++ //pTxWI->MIMOps = (pMac->PsMode == PWR_MMPS)? 1:0;
++ if (pMac->bIAmBadAtheros && (pMac->WepStatus != Ndis802_11WEPDisabled))
++ {
++ pTxWI->MpduDensity = 7;
++ }
++ else
++ {
++ pTxWI->MpduDensity = pMac->MpduDensity;
++ }
++ }
++#endif // DOT11_N_SUPPORT //
++
++ pTxWI->PacketId = pTxWI->MCS;
++ NdisMoveMemory(pOutTxWI, &TxWI, sizeof(TXWI_STRUC));
++}
++
++
++VOID RTMPWriteTxWI_Data(
++ IN PRTMP_ADAPTER pAd,
++ IN OUT PTXWI_STRUC pTxWI,
++ IN TX_BLK *pTxBlk)
++{
++ HTTRANSMIT_SETTING *pTransmit;
++ PMAC_TABLE_ENTRY pMacEntry;
++#ifdef DOT11_N_SUPPORT
++ UCHAR BASize;
++#endif // DOT11_N_SUPPORT //
++
++
++ ASSERT(pTxWI);
++
++ pTransmit = pTxBlk->pTransmit;
++ pMacEntry = pTxBlk->pMacEntry;
++
++
++ //
++ // Always use Long preamble before verifiation short preamble functionality works well.
++ // Todo: remove the following line if short preamble functionality works
++ //
++ OPSTATUS_CLEAR_FLAG(pAd, fOP_STATUS_SHORT_PREAMBLE_INUSED);
++ NdisZeroMemory(pTxWI, TXWI_SIZE);
++
++ pTxWI->FRAG = TX_BLK_TEST_FLAG(pTxBlk, fTX_bAllowFrag);
++ pTxWI->ACK = TX_BLK_TEST_FLAG(pTxBlk, fTX_bAckRequired);
++ pTxWI->txop = pTxBlk->FrameGap;
++
++#ifdef CONFIG_STA_SUPPORT
++#ifdef QOS_DLS_SUPPORT
++ if (pMacEntry &&
++ (pAd->StaCfg.BssType == BSS_INFRA) &&
++ (pMacEntry->ValidAsDls == TRUE))
++ pTxWI->WirelessCliID = BSSID_WCID;
++ else
++#endif // QOS_DLS_SUPPORT //
++#endif // CONFIG_STA_SUPPORT //
++ pTxWI->WirelessCliID = pTxBlk->Wcid;
++
++ pTxWI->MPDUtotalByteCount = pTxBlk->MpduHeaderLen + pTxBlk->SrcBufLen;
++ pTxWI->CFACK = TX_BLK_TEST_FLAG(pTxBlk, fTX_bPiggyBack);
++
++ // If CCK or OFDM, BW must be 20
++ pTxWI->BW = (pTransmit->field.MODE <= MODE_OFDM) ? (BW_20) : (pTransmit->field.BW);
++#ifdef DOT11_N_SUPPORT
++#ifdef DOT11N_DRAFT3
++ if (pTxWI->BW)
++ pTxWI->BW = (pAd->CommonCfg.AddHTInfo.AddHtInfo.RecomWidth == 0) ? (BW_20) : (pTransmit->field.BW);
++#endif // DOT11N_DRAFT3 //
++ pTxWI->AMPDU = ((pTxBlk->TxFrameType == TX_AMPDU_FRAME) ? TRUE : FALSE);
++
++ // John tune the performace with Intel Client in 20 MHz performance
++ BASize = pAd->CommonCfg.TxBASize;
++ if((pTxBlk->TxFrameType == TX_AMPDU_FRAME) && (pMacEntry))
++ {
++ UCHAR RABAOriIdx = 0; //The RA's BA Originator table index.
++
++ RABAOriIdx = pTxBlk->pMacEntry->BAOriWcidArray[pTxBlk->UserPriority];
++ BASize = pAd->BATable.BAOriEntry[RABAOriIdx].BAWinSize;
++ }
++
++#if 0 // 3*3
++ if (BASize > 7)
++ BASize = 7;
++#endif
++
++ pTxWI->TxBF = pTransmit->field.TxBF;
++ pTxWI->BAWinSize = BASize;
++ pTxWI->ShortGI = pTransmit->field.ShortGI;
++ pTxWI->STBC = pTransmit->field.STBC;
++#endif // DOT11_N_SUPPORT //
++
++ pTxWI->MCS = pTransmit->field.MCS;
++ pTxWI->PHYMODE = pTransmit->field.MODE;
++
++#ifdef DOT11_N_SUPPORT
++ if (pMacEntry)
++ {
++ if ((pMacEntry->MmpsMode == MMPS_DYNAMIC) && (pTransmit->field.MCS > 7))
++ {
++ // Dynamic MIMO Power Save Mode
++ pTxWI->MIMOps = 1;
++ }
++ else if (pMacEntry->MmpsMode == MMPS_STATIC)
++ {
++ // Static MIMO Power Save Mode
++ if (pTransmit->field.MODE >= MODE_HTMIX && pTransmit->field.MCS > 7)
++ {
++ pTxWI->MCS = 7;
++ pTxWI->MIMOps = 0;
++ }
++ }
++
++ if (pMacEntry->bIAmBadAtheros && (pMacEntry->WepStatus != Ndis802_11WEPDisabled))
++ {
++ pTxWI->MpduDensity = 7;
++ }
++ else
++ {
++ pTxWI->MpduDensity = pMacEntry->MpduDensity;
++ }
++ }
++#endif // DOT11_N_SUPPORT //
++
++#ifdef DBG_DIAGNOSE
++ if (pTxBlk->QueIdx== 0)
++ {
++ pAd->DiagStruct.TxDataCnt[pAd->DiagStruct.ArrayCurIdx]++;
++ pAd->DiagStruct.TxMcsCnt[pAd->DiagStruct.ArrayCurIdx][pTxWI->MCS]++;
++ }
++#endif // DBG_DIAGNOSE //
++
++ // for rate adapation
++ pTxWI->PacketId = pTxWI->MCS;
++}
++
++
++VOID RTMPWriteTxWI_Cache(
++ IN PRTMP_ADAPTER pAd,
++ IN OUT PTXWI_STRUC pTxWI,
++ IN TX_BLK *pTxBlk)
++{
++ PHTTRANSMIT_SETTING /*pTxHTPhyMode,*/ pTransmit;
++ PMAC_TABLE_ENTRY pMacEntry;
++
++ //
++ // update TXWI
++ //
++ pMacEntry = pTxBlk->pMacEntry;
++ pTransmit = pTxBlk->pTransmit;
++
++ if (pMacEntry->bAutoTxRateSwitch)
++ {
++ pTxWI->txop = IFS_HTTXOP;
++
++ // If CCK or OFDM, BW must be 20
++ pTxWI->BW = (pTransmit->field.MODE <= MODE_OFDM) ? (BW_20) : (pTransmit->field.BW);
++ pTxWI->ShortGI = pTransmit->field.ShortGI;
++ pTxWI->STBC = pTransmit->field.STBC;
++
++ pTxWI->MCS = pTransmit->field.MCS;
++ pTxWI->PHYMODE = pTransmit->field.MODE;
++
++ // set PID for TxRateSwitching
++ pTxWI->PacketId = pTransmit->field.MCS;
++ }
++
++#ifdef DOT11_N_SUPPORT
++ pTxWI->AMPDU = ((pMacEntry->NoBADataCountDown == 0) ? TRUE: FALSE);
++ pTxWI->MIMOps = 0;
++
++#ifdef DOT11N_DRAFT3
++ if (pTxWI->BW)
++ pTxWI->BW = (pAd->CommonCfg.AddHTInfo.AddHtInfo.RecomWidth == 0) ? (BW_20) : (pTransmit->field.BW);
++#endif // DOT11N_DRAFT3 //
++
++ if (pAd->CommonCfg.bMIMOPSEnable)
++ {
++ // MIMO Power Save Mode
++ if ((pMacEntry->MmpsMode == MMPS_DYNAMIC) && (pTransmit->field.MCS > 7))
++ {
++ // Dynamic MIMO Power Save Mode
++ pTxWI->MIMOps = 1;
++ }
++ else if (pMacEntry->MmpsMode == MMPS_STATIC)
++ {
++ // Static MIMO Power Save Mode
++ if ((pTransmit->field.MODE >= MODE_HTMIX) && (pTransmit->field.MCS > 7))
++ {
++ pTxWI->MCS = 7;
++ pTxWI->MIMOps = 0;
++ }
++ }
++ }
++#endif // DOT11_N_SUPPORT //
++
++#ifdef DBG_DIAGNOSE
++ if (pTxBlk->QueIdx== 0)
++ {
++ pAd->DiagStruct.TxDataCnt[pAd->DiagStruct.ArrayCurIdx]++;
++ pAd->DiagStruct.TxMcsCnt[pAd->DiagStruct.ArrayCurIdx][pTxWI->MCS]++;
++ }
++#endif // DBG_DIAGNOSE //
++
++ pTxWI->MPDUtotalByteCount = pTxBlk->MpduHeaderLen + pTxBlk->SrcBufLen;
++
++}
++
++
++/*
++ ========================================================================
++
++ Routine Description:
++ Calculates the duration which is required to transmit out frames
++ with given size and specified rate.
++
++ Arguments:
++ pTxD Pointer to transmit descriptor
++ Ack Setting for Ack requirement bit
++ Fragment Setting for Fragment bit
++ RetryMode Setting for retry mode
++ Ifs Setting for IFS gap
++ Rate Setting for transmit rate
++ Service Setting for service
++ Length Frame length
++ TxPreamble Short or Long preamble when using CCK rates
++ QueIdx - 0-3, according to 802.11e/d4.4 June/2003
++
++ Return Value:
++ None
++
++ IRQL = PASSIVE_LEVEL
++ IRQL = DISPATCH_LEVEL
++
++ ========================================================================
++*/
++VOID RTMPWriteTxDescriptor(
++ IN PRTMP_ADAPTER pAd,
++ IN PTXD_STRUC pTxD,
++ IN BOOLEAN bWIV,
++ IN UCHAR QueueSEL)
++{
++ //
++ // Always use Long preamble before verifiation short preamble functionality works well.
++ // Todo: remove the following line if short preamble functionality works
++ //
++ OPSTATUS_CLEAR_FLAG(pAd, fOP_STATUS_SHORT_PREAMBLE_INUSED);
++
++ pTxD->WIV = (bWIV) ? 1: 0;
++ pTxD->QSEL= (QueueSEL);
++ //RT2860c?? fixed using EDCA queue for test... We doubt Queue1 has problem. 2006-09-26 Jan
++ //pTxD->QSEL= FIFO_EDCA;
++ if (pAd->bGenOneHCCA == TRUE)
++ pTxD->QSEL= FIFO_HCCA;
++ pTxD->DMADONE = 0;
++}
++
++
++// should be called only when -
++// 1. MEADIA_CONNECTED
++// 2. AGGREGATION_IN_USED
++// 3. Fragmentation not in used
++// 4. either no previous frame (pPrevAddr1=NULL) .OR. previoud frame is aggregatible
++BOOLEAN TxFrameIsAggregatible(
++ IN PRTMP_ADAPTER pAd,
++ IN PUCHAR pPrevAddr1,
++ IN PUCHAR p8023hdr)
++{
++
++ // can't aggregate EAPOL (802.1x) frame
++ if ((p8023hdr[12] == 0x88) && (p8023hdr[13] == 0x8e))
++ return FALSE;
++
++ // can't aggregate multicast/broadcast frame
++ if (p8023hdr[0] & 0x01)
++ return FALSE;
++
++ if (INFRA_ON(pAd)) // must be unicast to AP
++ return TRUE;
++ else if ((pPrevAddr1 == NULL) || MAC_ADDR_EQUAL(pPrevAddr1, p8023hdr)) // unicast to same STA
++ return TRUE;
++ else
++ return FALSE;
++}
++
++
++/*
++ ========================================================================
++
++ Routine Description:
++ Check the MSDU Aggregation policy
++ 1.HT aggregation is A-MSDU
++ 2.legaacy rate aggregation is software aggregation by Ralink.
++
++ Arguments:
++
++ Return Value:
++
++ Note:
++
++ ========================================================================
++*/
++BOOLEAN PeerIsAggreOn(
++ IN PRTMP_ADAPTER pAd,
++ IN ULONG TxRate,
++ IN PMAC_TABLE_ENTRY pMacEntry)
++{
++ ULONG AFlags = (fCLIENT_STATUS_AMSDU_INUSED | fCLIENT_STATUS_AGGREGATION_CAPABLE);
++
++ if (pMacEntry != NULL && CLIENT_STATUS_TEST_FLAG(pMacEntry, AFlags))
++ {
++#ifdef DOT11_N_SUPPORT
++ if (pMacEntry->HTPhyMode.field.MODE >= MODE_HTMIX)
++ {
++ return TRUE;
++ }
++#endif // DOT11_N_SUPPORT //
++
++#ifdef AGGREGATION_SUPPORT
++ if (TxRate >= RATE_6 && pAd->CommonCfg.bAggregationCapable && (!(OPSTATUS_TEST_FLAG(pAd, fOP_STATUS_WMM_INUSED) && CLIENT_STATUS_TEST_FLAG(pMacEntry, fCLIENT_STATUS_WMM_CAPABLE))))
++ { // legacy Ralink Aggregation support
++ return TRUE;
++ }
++#endif // AGGREGATION_SUPPORT //
++ }
++
++ return FALSE;
++
++}
++
++/*
++ ========================================================================
++
++ Routine Description:
++ Check and fine the packet waiting in SW queue with highest priority
++
++ Arguments:
++ pAd Pointer to our adapter
++
++ Return Value:
++ pQueue Pointer to Waiting Queue
++
++ IRQL = DISPATCH_LEVEL
++
++ Note:
++
++ ========================================================================
++*/
++PQUEUE_HEADER RTMPCheckTxSwQueue(
++ IN PRTMP_ADAPTER pAd,
++ OUT PUCHAR pQueIdx)
++{
++
++ ULONG Number;
++ // 2004-11-15 to be removed. test aggregation only
++// if ((OPSTATUS_TEST_FLAG(pAd, fOP_STATUS_AGGREGATION_INUSED)) && (*pNumber < 2))
++// return NULL;
++
++ Number = pAd->TxSwQueue[QID_AC_BK].Number
++ + pAd->TxSwQueue[QID_AC_BE].Number
++ + pAd->TxSwQueue[QID_AC_VI].Number
++ + pAd->TxSwQueue[QID_AC_VO].Number
++ + pAd->TxSwQueue[QID_HCCA].Number;
++
++ if (pAd->TxSwQueue[QID_AC_VO].Head != NULL)
++ {
++ *pQueIdx = QID_AC_VO;
++ return (&pAd->TxSwQueue[QID_AC_VO]);
++ }
++ else if (pAd->TxSwQueue[QID_AC_VI].Head != NULL)
++ {
++ *pQueIdx = QID_AC_VI;
++ return (&pAd->TxSwQueue[QID_AC_VI]);
++ }
++ else if (pAd->TxSwQueue[QID_AC_BE].Head != NULL)
++ {
++ *pQueIdx = QID_AC_BE;
++ return (&pAd->TxSwQueue[QID_AC_BE]);
++ }
++ else if (pAd->TxSwQueue[QID_AC_BK].Head != NULL)
++ {
++ *pQueIdx = QID_AC_BK;
++ return (&pAd->TxSwQueue[QID_AC_BK]);
++ }
++ else if (pAd->TxSwQueue[QID_HCCA].Head != NULL)
++ {
++ *pQueIdx = QID_HCCA;
++ return (&pAd->TxSwQueue[QID_HCCA]);
++ }
++
++ // No packet pending in Tx Sw queue
++ *pQueIdx = QID_AC_BK;
++
++ return (NULL);
++}
++
++
++
++/*
++ ========================================================================
++
++ Routine Description:
++ Suspend MSDU transmission
++
++ Arguments:
++ pAd Pointer to our adapter
++
++ Return Value:
++ None
++
++ Note:
++
++ ========================================================================
++*/
++VOID RTMPSuspendMsduTransmission(
++ IN PRTMP_ADAPTER pAd)
++{
++ DBGPRINT(RT_DEBUG_TRACE,("SCANNING, suspend MSDU transmission ...\n"));
++
++
++ //
++ // Before BSS_SCAN_IN_PROGRESS, we need to keep Current R66 value and
++ // use Lowbound as R66 value on ScanNextChannel(...)
++ //
++ RTMP_BBP_IO_READ8_BY_REG_ID(pAd, BBP_R66, &pAd->BbpTuning.R66CurrentValue);
++
++ // set BBP_R66 to 0x30/0x40 when scanning (AsicSwitchChannel will set R66 according to channel when scanning)
++ //RTMP_BBP_IO_WRITE8_BY_REG_ID(pAd, BBP_R66, (0x26 + GET_LNA_GAIN(pAd)));
++ RTMPSetAGCInitValue(pAd, BW_20);
++
++ RTMP_SET_FLAG(pAd, fRTMP_ADAPTER_BSS_SCAN_IN_PROGRESS);
++ //RTMP_IO_WRITE32(pAd, TX_CNTL_CSR, 0x000f0000); // abort all TX rings
++}
++
++
++/*
++ ========================================================================
++
++ Routine Description:
++ Resume MSDU transmission
++
++ Arguments:
++ pAd Pointer to our adapter
++
++ Return Value:
++ None
++
++ IRQL = DISPATCH_LEVEL
++
++ Note:
++
++ ========================================================================
++*/
++VOID RTMPResumeMsduTransmission(
++ IN PRTMP_ADAPTER pAd)
++{
++// UCHAR IrqState;
++
++ DBGPRINT(RT_DEBUG_TRACE,("SCAN done, resume MSDU transmission ...\n"));
++
++
++ RTMP_BBP_IO_WRITE8_BY_REG_ID(pAd, BBP_R66, pAd->BbpTuning.R66CurrentValue);
++
++ RTMP_CLEAR_FLAG(pAd, fRTMP_ADAPTER_BSS_SCAN_IN_PROGRESS);
++// sample, for IRQ LOCK to SEM LOCK
++// IrqState = pAd->irq_disabled;
++// if (IrqState)
++// RTMPDeQueuePacket(pAd, TRUE, NUM_OF_TX_RING, MAX_TX_PROCESS);
++// else
++ RTMPDeQueuePacket(pAd, FALSE, NUM_OF_TX_RING, MAX_TX_PROCESS);
++}
++
++
++UINT deaggregate_AMSDU_announce(
++ IN PRTMP_ADAPTER pAd,
++ PNDIS_PACKET pPacket,
++ IN PUCHAR pData,
++ IN ULONG DataSize)
++{
++ USHORT PayloadSize;
++ USHORT SubFrameSize;
++ PHEADER_802_3 pAMSDUsubheader;
++ UINT nMSDU;
++ UCHAR Header802_3[14];
++
++ PUCHAR pPayload, pDA, pSA, pRemovedLLCSNAP;
++ PNDIS_PACKET pClonePacket;
++
++
++
++ nMSDU = 0;
++
++ while (DataSize > LENGTH_802_3)
++ {
++
++ nMSDU++;
++
++ //hex_dump("subheader", pData, 64);
++ pAMSDUsubheader = (PHEADER_802_3)pData;
++ //pData += LENGTH_802_3;
++ PayloadSize = pAMSDUsubheader->Octet[1] + (pAMSDUsubheader->Octet[0]<<8);
++ SubFrameSize = PayloadSize + LENGTH_802_3;
++
++
++ if ((DataSize < SubFrameSize) || (PayloadSize > 1518 ))
++ {
++ break;
++ }
++
++ //printk("%d subframe: Size = %d\n", nMSDU, PayloadSize);
++
++ pPayload = pData + LENGTH_802_3;
++ pDA = pData;
++ pSA = pData + MAC_ADDR_LEN;
++
++ // convert to 802.3 header
++ CONVERT_TO_802_3(Header802_3, pDA, pSA, pPayload, PayloadSize, pRemovedLLCSNAP);
++
++#ifdef CONFIG_STA_SUPPORT
++ if ((Header802_3[12] == 0x88) && (Header802_3[13] == 0x8E) )
++ {
++ // avoid local heap overflow, use dyanamic allocation
++ MLME_QUEUE_ELEM *Elem = (MLME_QUEUE_ELEM *) kmalloc(sizeof(MLME_QUEUE_ELEM), MEM_ALLOC_FLAG);
++ memmove(Elem->Msg+(LENGTH_802_11 + LENGTH_802_1_H), pPayload, PayloadSize);
++ Elem->MsgLen = LENGTH_802_11 + LENGTH_802_1_H + PayloadSize;
++ WpaEAPOLKeyAction(pAd, Elem);
++ kfree(Elem);
++ }
++#endif // CONFIG_STA_SUPPORT //
++
++#ifdef CONFIG_STA_SUPPORT
++ IF_DEV_CONFIG_OPMODE_ON_STA(pAd)
++ {
++ if (pRemovedLLCSNAP)
++ {
++ pPayload -= LENGTH_802_3;
++ PayloadSize += LENGTH_802_3;
++ NdisMoveMemory(pPayload, &Header802_3[0], LENGTH_802_3);
++ }
++ }
++#endif // CONFIG_STA_SUPPORT //
++
++ pClonePacket = ClonePacket(pAd, pPacket, pPayload, PayloadSize);
++ if (pClonePacket)
++ {
++#ifdef CONFIG_STA_SUPPORT
++ IF_DEV_CONFIG_OPMODE_ON_STA(pAd)
++ ANNOUNCE_OR_FORWARD_802_3_PACKET(pAd, pClonePacket, RTMP_GET_PACKET_IF(pPacket));
++#endif // CONFIG_STA_SUPPORT //
++ }
++
++
++ // A-MSDU has padding to multiple of 4 including subframe header.
++ // align SubFrameSize up to multiple of 4
++ SubFrameSize = (SubFrameSize+3)&(~0x3);
++
++
++ if (SubFrameSize > 1528 || SubFrameSize < 32)
++ {
++ break;
++ }
++
++ if (DataSize > SubFrameSize)
++ {
++ pData += SubFrameSize;
++ DataSize -= SubFrameSize;
++ }
++ else
++ {
++ // end of A-MSDU
++ DataSize = 0;
++ }
++ }
++
++ // finally release original rx packet
++ RELEASE_NDIS_PACKET(pAd, pPacket, NDIS_STATUS_SUCCESS);
++
++ return nMSDU;
++}
++
++
++UINT BA_Reorder_AMSDU_Annnounce(
++ IN PRTMP_ADAPTER pAd,
++ IN PNDIS_PACKET pPacket)
++{
++ PUCHAR pData;
++ USHORT DataSize;
++ UINT nMSDU = 0;
++
++ pData = (PUCHAR) GET_OS_PKT_DATAPTR(pPacket);
++ DataSize = (USHORT) GET_OS_PKT_LEN(pPacket);
++
++ nMSDU = deaggregate_AMSDU_announce(pAd, pPacket, pData, DataSize);
++
++ return nMSDU;
++}
++
++
++/*
++ ==========================================================================
++ Description:
++ Look up the MAC address in the MAC table. Return NULL if not found.
++ Return:
++ pEntry - pointer to the MAC entry; NULL is not found
++ ==========================================================================
++*/
++MAC_TABLE_ENTRY *MacTableLookup(
++ IN PRTMP_ADAPTER pAd,
++ PUCHAR pAddr)
++{
++ ULONG HashIdx;
++ MAC_TABLE_ENTRY *pEntry = NULL;
++
++ HashIdx = MAC_ADDR_HASH_INDEX(pAddr);
++ pEntry = pAd->MacTab.Hash[HashIdx];
++
++ while (pEntry && (pEntry->ValidAsCLI || pEntry->ValidAsWDS || pEntry->ValidAsApCli || pEntry->ValidAsMesh))
++ {
++ if (MAC_ADDR_EQUAL(pEntry->Addr, pAddr))
++ {
++ break;
++ }
++ else
++ pEntry = pEntry->pNext;
++ }
++
++ return pEntry;
++}
++
++MAC_TABLE_ENTRY *MacTableInsertEntry(
++ IN PRTMP_ADAPTER pAd,
++ IN PUCHAR pAddr,
++ IN UCHAR apidx,
++ IN BOOLEAN CleanAll)
++{
++ UCHAR HashIdx;
++ int i, FirstWcid;
++ MAC_TABLE_ENTRY *pEntry = NULL, *pCurrEntry;
++
++ // if FULL, return
++ if (pAd->MacTab.Size >= MAX_LEN_OF_MAC_TABLE)
++ return NULL;
++
++ FirstWcid = 1;
++#ifdef CONFIG_STA_SUPPORT
++ IF_DEV_CONFIG_OPMODE_ON_STA(pAd)
++ if (pAd->StaCfg.BssType == BSS_INFRA)
++ FirstWcid = 2;
++#endif // CONFIG_STA_SUPPORT //
++
++ // allocate one MAC entry
++ NdisAcquireSpinLock(&pAd->MacTabLock);
++ for (i = FirstWcid; i< MAX_LEN_OF_MAC_TABLE; i++) // skip entry#0 so that "entry index == AID" for fast lookup
++ {
++ // pick up the first available vacancy
++ if ((pAd->MacTab.Content[i].ValidAsCLI == FALSE) &&
++ (pAd->MacTab.Content[i].ValidAsWDS == FALSE) &&
++ (pAd->MacTab.Content[i].ValidAsApCli== FALSE) &&
++ (pAd->MacTab.Content[i].ValidAsMesh == FALSE)
++#ifdef CONFIG_STA_SUPPORT
++#ifdef QOS_DLS_SUPPORT
++ && (pAd->MacTab.Content[i].ValidAsDls == FALSE)
++#endif // QOS_DLS_SUPPORT //
++#endif // CONFIG_STA_SUPPORT //
++ )
++ {
++ pEntry = &pAd->MacTab.Content[i];
++ if (CleanAll == TRUE)
++ {
++ pEntry->MaxSupportedRate = RATE_11;
++ pEntry->CurrTxRate = RATE_11;
++ NdisZeroMemory(pEntry, sizeof(MAC_TABLE_ENTRY));
++ pEntry->PairwiseKey.KeyLen = 0;
++ pEntry->PairwiseKey.CipherAlg = CIPHER_NONE;
++ }
++#ifdef CONFIG_STA_SUPPORT
++#ifdef QOS_DLS_SUPPORT
++ if (apidx >= MIN_NET_DEVICE_FOR_DLS)
++ {
++ pEntry->ValidAsCLI = FALSE;
++ pEntry->ValidAsWDS = FALSE;
++ pEntry->ValidAsApCli = FALSE;
++ pEntry->ValidAsMesh = FALSE;
++ pEntry->ValidAsDls = TRUE;
++ pEntry->isCached = FALSE;
++ }
++ else
++#endif // QOS_DLS_SUPPORT //
++#endif // CONFIG_STA_SUPPORT //
++ {
++
++#ifdef CONFIG_STA_SUPPORT
++ IF_DEV_CONFIG_OPMODE_ON_STA(pAd)
++ {
++ pEntry->ValidAsCLI = TRUE;
++ pEntry->ValidAsWDS = FALSE;
++ pEntry->ValidAsApCli = FALSE;
++ pEntry->ValidAsMesh = FALSE;
++ pEntry->ValidAsDls = FALSE;
++ }
++#endif // CONFIG_STA_SUPPORT //
++ }
++
++ pEntry->bIAmBadAtheros = FALSE;
++ pEntry->pAd = pAd;
++ pEntry->CMTimerRunning = FALSE;
++ pEntry->EnqueueEapolStartTimerRunning = EAPOL_START_DISABLE;
++ pEntry->RSNIE_Len = 0;
++ NdisZeroMemory(pEntry->R_Counter, sizeof(pEntry->R_Counter));
++ pEntry->ReTryCounter = PEER_MSG1_RETRY_TIMER_CTR;
++
++ if (pEntry->ValidAsMesh)
++ pEntry->apidx = (apidx - MIN_NET_DEVICE_FOR_MESH);
++ else if (pEntry->ValidAsApCli)
++ pEntry->apidx = (apidx - MIN_NET_DEVICE_FOR_APCLI);
++ else if (pEntry->ValidAsWDS)
++ pEntry->apidx = (apidx - MIN_NET_DEVICE_FOR_WDS);
++#ifdef CONFIG_STA_SUPPORT
++#ifdef QOS_DLS_SUPPORT
++ else if (pEntry->ValidAsDls)
++ pEntry->apidx = (apidx - MIN_NET_DEVICE_FOR_DLS);
++#endif // QOS_DLS_SUPPORT //
++#endif // CONFIG_STA_SUPPORT //
++ else
++ pEntry->apidx = apidx;
++
++ {
++
++#ifdef CONFIG_STA_SUPPORT
++ IF_DEV_CONFIG_OPMODE_ON_STA(pAd)
++ {
++ pEntry->AuthMode = pAd->StaCfg.AuthMode;
++ pEntry->WepStatus = pAd->StaCfg.WepStatus;
++ pEntry->PrivacyFilter = Ndis802_11PrivFilterAcceptAll;
++ }
++#endif // CONFIG_STA_SUPPORT //
++ }
++
++ pEntry->GTKState = REKEY_NEGOTIATING;
++ pEntry->PairwiseKey.KeyLen = 0;
++ pEntry->PairwiseKey.CipherAlg = CIPHER_NONE;
++#ifdef CONFIG_STA_SUPPORT
++#ifdef QOS_DLS_SUPPORT
++ if (pEntry->ValidAsDls == TRUE)
++ pEntry->PortSecured = WPA_802_1X_PORT_SECURED;
++#endif //QOS_DLS_SUPPORT
++#endif // CONFIG_STA_SUPPORT //
++ pEntry->PortSecured = WPA_802_1X_PORT_NOT_SECURED;
++ pEntry->PMKID_CacheIdx = ENTRY_NOT_FOUND;
++ COPY_MAC_ADDR(pEntry->Addr, pAddr);
++ pEntry->Sst = SST_NOT_AUTH;
++ pEntry->AuthState = AS_NOT_AUTH;
++ pEntry->Aid = (USHORT)i; //0;
++ pEntry->CapabilityInfo = 0;
++ pEntry->PsMode = PWR_ACTIVE;
++ pEntry->PsQIdleCount = 0;
++ pEntry->NoDataIdleCount = 0;
++ pEntry->ContinueTxFailCnt = 0;
++ InitializeQueueHeader(&pEntry->PsQueue);
++
++
++ pAd->MacTab.Size ++;
++ // Add this entry into ASIC RX WCID search table
++ RT28XX_STA_ENTRY_ADD(pAd, pEntry);
++
++ DBGPRINT(RT_DEBUG_TRACE, ("MacTableInsertEntry - allocate entry #%d, Total= %d\n",i, pAd->MacTab.Size));
++ break;
++ }
++ }
++
++ // add this MAC entry into HASH table
++ if (pEntry)
++ {
++ HashIdx = MAC_ADDR_HASH_INDEX(pAddr);
++ if (pAd->MacTab.Hash[HashIdx] == NULL)
++ {
++ pAd->MacTab.Hash[HashIdx] = pEntry;
++ }
++ else
++ {
++ pCurrEntry = pAd->MacTab.Hash[HashIdx];
++ while (pCurrEntry->pNext != NULL)
++ pCurrEntry = pCurrEntry->pNext;
++ pCurrEntry->pNext = pEntry;
++ }
++ }
++
++ NdisReleaseSpinLock(&pAd->MacTabLock);
++ return pEntry;
++}
++
++/*
++ ==========================================================================
++ Description:
++ Delete a specified client from MAC table
++ ==========================================================================
++ */
++BOOLEAN MacTableDeleteEntry(
++ IN PRTMP_ADAPTER pAd,
++ IN USHORT wcid,
++ IN PUCHAR pAddr)
++{
++ USHORT HashIdx;
++ MAC_TABLE_ENTRY *pEntry, *pPrevEntry, *pProbeEntry;
++ BOOLEAN Cancelled;
++ //USHORT offset; // unused variable
++ //UCHAR j; // unused variable
++
++ if (wcid >= MAX_LEN_OF_MAC_TABLE)
++ return FALSE;
++
++ NdisAcquireSpinLock(&pAd->MacTabLock);
++
++ HashIdx = MAC_ADDR_HASH_INDEX(pAddr);
++ //pEntry = pAd->MacTab.Hash[HashIdx];
++ pEntry = &pAd->MacTab.Content[wcid];
++
++ if (pEntry && (pEntry->ValidAsCLI || pEntry->ValidAsApCli || pEntry->ValidAsWDS || pEntry->ValidAsMesh
++#ifdef CONFIG_STA_SUPPORT
++#ifdef QOS_DLS_SUPPORT
++ || pEntry->ValidAsDls
++#endif // QOS_DLS_SUPPORT //
++#endif // CONFIG_STA_SUPPORT //
++ ))
++ {
++ if (MAC_ADDR_EQUAL(pEntry->Addr, pAddr))
++ {
++
++ // Delete this entry from ASIC on-chip WCID Table
++ RT28XX_STA_ENTRY_MAC_RESET(pAd, wcid);
++
++#ifdef DOT11_N_SUPPORT
++ // free resources of BA
++ BASessionTearDownALL(pAd, pEntry->Aid);
++#endif // DOT11_N_SUPPORT //
++
++
++ pPrevEntry = NULL;
++ pProbeEntry = pAd->MacTab.Hash[HashIdx];
++ ASSERT(pProbeEntry);
++
++ // update Hash list
++ do
++ {
++ if (pProbeEntry == pEntry)
++ {
++ if (pPrevEntry == NULL)
++ {
++ pAd->MacTab.Hash[HashIdx] = pEntry->pNext;
++ }
++ else
++ {
++ pPrevEntry->pNext = pEntry->pNext;
++ }
++ break;
++ }
++
++ pPrevEntry = pProbeEntry;
++ pProbeEntry = pProbeEntry->pNext;
++ } while (pProbeEntry);
++
++ // not found !!!
++ ASSERT(pProbeEntry != NULL);
++
++ RT28XX_STA_ENTRY_KEY_DEL(pAd, BSS0, wcid);
++
++
++ if (pEntry->EnqueueEapolStartTimerRunning != EAPOL_START_DISABLE)
++ {
++ RTMPCancelTimer(&pEntry->EnqueueStartForPSKTimer, &Cancelled);
++ pEntry->EnqueueEapolStartTimerRunning = EAPOL_START_DISABLE;
++ }
++
++
++ NdisZeroMemory(pEntry, sizeof(MAC_TABLE_ENTRY));
++ pAd->MacTab.Size --;
++ DBGPRINT(RT_DEBUG_TRACE, ("MacTableDeleteEntry1 - Total= %d\n", pAd->MacTab.Size));
++ }
++ else
++ {
++ printk("\n%s: Impossible Wcid = %d !!!!!\n", __FUNCTION__, wcid);
++ }
++ }
++
++ NdisReleaseSpinLock(&pAd->MacTabLock);
++
++ //Reset operating mode when no Sta.
++ if (pAd->MacTab.Size == 0)
++ {
++#ifdef DOT11_N_SUPPORT
++ pAd->CommonCfg.AddHTInfo.AddHtInfo2.OperaionMode = 0;
++#endif // DOT11_N_SUPPORT //
++ AsicUpdateProtect(pAd, 0 /*pAd->CommonCfg.AddHTInfo.AddHtInfo2.OperaionMode*/, (ALLN_SETPROTECT), TRUE, 0 /*pAd->MacTab.fAnyStationNonGF*/);
++ }
++
++ return TRUE;
++}
++
++
++/*
++ ==========================================================================
++ Description:
++ This routine reset the entire MAC table. All packets pending in
++ the power-saving queues are freed here.
++ ==========================================================================
++ */
++VOID MacTableReset(
++ IN PRTMP_ADAPTER pAd)
++{
++ int i;
++
++ DBGPRINT(RT_DEBUG_TRACE, ("MacTableReset\n"));
++ //NdisAcquireSpinLock(&pAd->MacTabLock);
++
++ for (i=1; i<MAX_LEN_OF_MAC_TABLE; i++)
++ {
++ if (pAd->MacTab.Content[i].ValidAsCLI == TRUE)
++ {
++
++#ifdef DOT11_N_SUPPORT
++ // free resources of BA
++ BASessionTearDownALL(pAd, i);
++#endif // DOT11_N_SUPPORT //
++
++ pAd->MacTab.Content[i].ValidAsCLI = FALSE;
++
++
++
++#ifdef RT2870
++ NdisZeroMemory(pAd->MacTab.Content[i].Addr, 6);
++ RT28XX_STA_ENTRY_MAC_RESET(pAd, i);
++#endif // RT2870 //
++
++ //AsicDelWcidTab(pAd, i);
++ }
++ }
++
++ return;
++}
++
++/*
++ ==========================================================================
++ Description:
++
++ IRQL = DISPATCH_LEVEL
++
++ ==========================================================================
++*/
++VOID AssocParmFill(
++ IN PRTMP_ADAPTER pAd,
++ IN OUT MLME_ASSOC_REQ_STRUCT *AssocReq,
++ IN PUCHAR pAddr,
++ IN USHORT CapabilityInfo,
++ IN ULONG Timeout,
++ IN USHORT ListenIntv)
++{
++ COPY_MAC_ADDR(AssocReq->Addr, pAddr);
++ // Add mask to support 802.11b mode only
++ AssocReq->CapabilityInfo = CapabilityInfo & SUPPORTED_CAPABILITY_INFO; // not cf-pollable, not cf-poll-request
++ AssocReq->Timeout = Timeout;
++ AssocReq->ListenIntv = ListenIntv;
++}
++
++
++/*
++ ==========================================================================
++ Description:
++
++ IRQL = DISPATCH_LEVEL
++
++ ==========================================================================
++*/
++VOID DisassocParmFill(
++ IN PRTMP_ADAPTER pAd,
++ IN OUT MLME_DISASSOC_REQ_STRUCT *DisassocReq,
++ IN PUCHAR pAddr,
++ IN USHORT Reason)
++{
++ COPY_MAC_ADDR(DisassocReq->Addr, pAddr);
++ DisassocReq->Reason = Reason;
++}
++
++
++/*
++ ========================================================================
++
++ Routine Description:
++ Check the out going frame, if this is an DHCP or ARP datagram
++ will be duplicate another frame at low data rate transmit.
++
++ Arguments:
++ pAd Pointer to our adapter
++ pPacket Pointer to outgoing Ndis frame
++
++ Return Value:
++ TRUE To be duplicate at Low data rate transmit. (1mb)
++ FALSE Do nothing.
++
++ IRQL = DISPATCH_LEVEL
++
++ Note:
++
++ MAC header + IP Header + UDP Header
++ 14 Bytes 20 Bytes
++
++ UDP Header
++ 00|01|02|03|04|05|06|07|08|09|10|11|12|13|14|15|
++ Source Port
++ 16|17|18|19|20|21|22|23|24|25|26|27|28|29|30|31|
++ Destination Port
++
++ port 0x43 means Bootstrap Protocol, server.
++ Port 0x44 means Bootstrap Protocol, client.
++
++ ========================================================================
++*/
++
++BOOLEAN RTMPCheckDHCPFrame(
++ IN PRTMP_ADAPTER pAd,
++ IN PNDIS_PACKET pPacket)
++{
++ PACKET_INFO PacketInfo;
++ ULONG NumberOfBytesRead = 0;
++ ULONG CurrentOffset = 0;
++ PVOID pVirtualAddress = NULL;
++ UINT NdisBufferLength;
++ PUCHAR pSrc;
++ USHORT Protocol;
++ UCHAR ByteOffset36 = 0;
++ UCHAR ByteOffset38 = 0;
++ BOOLEAN ReadFirstParm = TRUE;
++
++ RTMP_QueryPacketInfo(pPacket, &PacketInfo, (PUCHAR *)&pVirtualAddress, &NdisBufferLength);
++
++ NumberOfBytesRead += NdisBufferLength;
++ pSrc = (PUCHAR) pVirtualAddress;
++ Protocol = *(pSrc + 12) * 256 + *(pSrc + 13);
++
++ //
++ // Check DHCP & BOOTP protocol
++ //
++ while (NumberOfBytesRead <= PacketInfo.TotalPacketLength)
++ {
++ if ((NumberOfBytesRead >= 35) && (ReadFirstParm == TRUE))
++ {
++ CurrentOffset = 35 - (NumberOfBytesRead - NdisBufferLength);
++ ByteOffset36 = *(pSrc + CurrentOffset);
++ ReadFirstParm = FALSE;
++ }
++
++ if (NumberOfBytesRead >= 37)
++ {
++ CurrentOffset = 37 - (NumberOfBytesRead - NdisBufferLength);
++ ByteOffset38 = *(pSrc + CurrentOffset);
++ //End of Read
++ break;
++ }
++ return FALSE;
++ }
++
++ // Check for DHCP & BOOTP protocol
++ if ((ByteOffset36 != 0x44) || (ByteOffset38 != 0x43))
++ {
++ //
++ // 2054 (hex 0806) for ARP datagrams
++ // if this packet is not ARP datagrams, then do nothing
++ // ARP datagrams will also be duplicate at 1mb broadcast frames
++ //
++ if (Protocol != 0x0806 )
++ return FALSE;
++ }
++
++ return TRUE;
++}
++
++
++BOOLEAN RTMPCheckEtherType(
++ IN PRTMP_ADAPTER pAd,
++ IN PNDIS_PACKET pPacket)
++{
++ USHORT TypeLen;
++ UCHAR Byte0, Byte1;
++ PUCHAR pSrcBuf;
++ UINT32 pktLen;
++ UINT16 srcPort, dstPort;
++ BOOLEAN status = TRUE;
++
++
++ pSrcBuf = GET_OS_PKT_DATAPTR(pPacket);
++ pktLen = GET_OS_PKT_LEN(pPacket);
++
++ ASSERT(pSrcBuf);
++
++ RTMP_SET_PACKET_SPECIFIC(pPacket, 0);
++
++ // get Ethernet protocol field
++ TypeLen = (pSrcBuf[12] << 8) + pSrcBuf[13];
++
++ pSrcBuf += LENGTH_802_3; // Skip the Ethernet Header.
++
++ if (TypeLen <= 1500)
++ { // 802.3, 802.3 LLC
++ /*
++ DestMAC(6) + SrcMAC(6) + Lenght(2) +
++ DSAP(1) + SSAP(1) + Control(1) +
++ if the DSAP = 0xAA, SSAP=0xAA, Contorl = 0x03, it has a 5-bytes SNAP header.
++ => + SNAP (5, OriginationID(3) + etherType(2))
++ */
++ if (pSrcBuf[0] == 0xAA && pSrcBuf[1] == 0xAA && pSrcBuf[2] == 0x03)
++ {
++ Sniff2BytesFromNdisBuffer(pSrcBuf, 6, &Byte0, &Byte1);
++ RTMP_SET_PACKET_LLCSNAP(pPacket, 1);
++ TypeLen = (USHORT)((Byte0 << 8) + Byte1);
++ pSrcBuf += 8; // Skip this LLC/SNAP header
++ }
++ else
++ {
++ //It just has 3-byte LLC header, maybe a legacy ether type frame. we didn't handle it.
++ }
++ }
++
++ // If it's a VLAN packet, get the real Type/Length field.
++ if (TypeLen == 0x8100)
++ {
++ /* 0x8100 means VLAN packets */
++
++ /* Dest. MAC Address (6-bytes) +
++ Source MAC Address (6-bytes) +
++ Length/Type = 802.1Q Tag Type (2-byte) +
++ Tag Control Information (2-bytes) +
++ Length / Type (2-bytes) +
++ data payload (0-n bytes) +
++ Pad (0-p bytes) +
++ Frame Check Sequence (4-bytes) */
++
++ RTMP_SET_PACKET_VLAN(pPacket, 1);
++ Sniff2BytesFromNdisBuffer(pSrcBuf, 2, &Byte0, &Byte1);
++ TypeLen = (USHORT)((Byte0 << 8) + Byte1);
++
++ pSrcBuf += 4; // Skip the VLAN Header.
++ }
++
++ switch (TypeLen)
++ {
++ case 0x0800:
++ {
++ ASSERT((pktLen > 34));
++ if (*(pSrcBuf + 9) == 0x11)
++ { // udp packet
++ ASSERT((pktLen > 34)); // 14 for ethernet header, 20 for IP header
++
++ pSrcBuf += 20; // Skip the IP header
++ srcPort = OS_NTOHS(*((UINT16 *)pSrcBuf));
++ dstPort = OS_NTOHS(*((UINT16 *)(pSrcBuf +2)));
++
++ if ((srcPort==0x44 && dstPort==0x43) || (srcPort==0x43 && dstPort==0x44))
++ { //It's a BOOTP/DHCP packet
++ RTMP_SET_PACKET_DHCP(pPacket, 1);
++ }
++ }
++ }
++ break;
++ case 0x0806:
++ {
++ //ARP Packet.
++ RTMP_SET_PACKET_DHCP(pPacket, 1);
++ }
++ break;
++ case 0x888e:
++ {
++ // EAPOL Packet.
++ RTMP_SET_PACKET_EAPOL(pPacket, 1);
++ }
++ break;
++ default:
++ status = FALSE;
++ break;
++ }
++
++ return status;
++
++}
++
++
++
++VOID Update_Rssi_Sample(
++ IN PRTMP_ADAPTER pAd,
++ IN RSSI_SAMPLE *pRssi,
++ IN PRXWI_STRUC pRxWI)
++ {
++ CHAR rssi0 = pRxWI->RSSI0;
++ CHAR rssi1 = pRxWI->RSSI1;
++ CHAR rssi2 = pRxWI->RSSI2;
++
++ if (rssi0 != 0)
++ {
++ pRssi->LastRssi0 = ConvertToRssi(pAd, (CHAR)rssi0, RSSI_0);
++ pRssi->AvgRssi0X8 = (pRssi->AvgRssi0X8 - pRssi->AvgRssi0) + pRssi->LastRssi0;
++ pRssi->AvgRssi0 = pRssi->AvgRssi0X8 >> 3;
++ }
++
++ if (rssi1 != 0)
++ {
++ pRssi->LastRssi1 = ConvertToRssi(pAd, (CHAR)rssi1, RSSI_1);
++ pRssi->AvgRssi1X8 = (pRssi->AvgRssi1X8 - pRssi->AvgRssi1) + pRssi->LastRssi1;
++ pRssi->AvgRssi1 = pRssi->AvgRssi1X8 >> 3;
++ }
++
++ if (rssi2 != 0)
++ {
++ pRssi->LastRssi2 = ConvertToRssi(pAd, (CHAR)rssi2, RSSI_2);
++ pRssi->AvgRssi2X8 = (pRssi->AvgRssi2X8 - pRssi->AvgRssi2) + pRssi->LastRssi2;
++ pRssi->AvgRssi2 = pRssi->AvgRssi2X8 >> 3;
++ }
++}
++
++
++
++// Normal legacy Rx packet indication
++VOID Indicate_Legacy_Packet(
++ IN PRTMP_ADAPTER pAd,
++ IN RX_BLK *pRxBlk,
++ IN UCHAR FromWhichBSSID)
++{
++ PNDIS_PACKET pRxPacket = pRxBlk->pRxPacket;
++ UCHAR Header802_3[LENGTH_802_3];
++
++ // 1. get 802.3 Header
++ // 2. remove LLC
++ // a. pointer pRxBlk->pData to payload
++ // b. modify pRxBlk->DataSize
++#ifdef CONFIG_STA_SUPPORT
++ IF_DEV_CONFIG_OPMODE_ON_STA(pAd)
++ RTMP_802_11_REMOVE_LLC_AND_CONVERT_TO_802_3(pRxBlk, Header802_3);
++#endif // CONFIG_STA_SUPPORT //
++
++ if (pRxBlk->DataSize > MAX_RX_PKT_LEN)
++ {
++#if 0 // sample take off, for multiple card design
++ static int err_size;
++
++ err_size++;
++ if (err_size > 20)
++ {
++ printk("Legacy DataSize = %d\n", pRxBlk->DataSize);
++ hex_dump("802.3 Header", Header802_3, LENGTH_802_3);
++ hex_dump("Payload", pRxBlk->pData, 64);
++ err_size = 0;
++ }
++#endif
++
++ // release packet
++ RELEASE_NDIS_PACKET(pAd, pRxPacket, NDIS_STATUS_FAILURE);
++ return;
++ }
++
++
++ STATS_INC_RX_PACKETS(pAd, FromWhichBSSID);
++
++#ifdef RT2870
++#ifdef DOT11_N_SUPPORT
++ if (pAd->CommonCfg.bDisableReordering == 0)
++ {
++ PBA_REC_ENTRY pBAEntry;
++ ULONG Now32;
++ UCHAR Wcid = pRxBlk->pRxWI->WirelessCliID;
++ UCHAR TID = pRxBlk->pRxWI->TID;
++ USHORT Idx;
++
++#define REORDERING_PACKET_TIMEOUT ((100 * HZ)/1000) // system ticks -- 100 ms
++
++ if (Wcid < MAX_LEN_OF_MAC_TABLE)
++ {
++ Idx = pAd->MacTab.Content[Wcid].BARecWcidArray[TID];
++ if (Idx != 0)
++ {
++ pBAEntry = &pAd->BATable.BARecEntry[Idx];
++ // update last rx time
++ NdisGetSystemUpTime(&Now32);
++ if ((pBAEntry->list.qlen > 0) &&
++ RTMP_TIME_AFTER((unsigned long)Now32, (unsigned long)(pBAEntry->LastIndSeqAtTimer+(REORDERING_PACKET_TIMEOUT)))
++ )
++ {
++ printk("Indicate_Legacy_Packet():flush reordering_timeout_mpdus! RxWI->Flags=%d, pRxWI.TID=%d, RxD->AMPDU=%d!\n", pRxBlk->Flags, pRxBlk->pRxWI->TID, pRxBlk->RxD.AMPDU);
++ hex_dump("Dump the legacy Packet:", GET_OS_PKT_DATAPTR(pRxBlk->pRxPacket), 64);
++ ba_flush_reordering_timeout_mpdus(pAd, pBAEntry, Now32);
++ }
++ }
++ }
++ }
++#endif // DOT11_N_SUPPORT //
++#endif // RT2870 //
++
++ wlan_802_11_to_802_3_packet(pAd, pRxBlk, Header802_3, FromWhichBSSID);
++
++ //
++ // pass this 802.3 packet to upper layer or forward this packet to WM directly
++ //
++#ifdef CONFIG_STA_SUPPORT
++ IF_DEV_CONFIG_OPMODE_ON_STA(pAd)
++ ANNOUNCE_OR_FORWARD_802_3_PACKET(pAd, pRxPacket, FromWhichBSSID);
++#endif // CONFIG_STA_SUPPORT //
++
++}
++
++
++// Normal, AMPDU or AMSDU
++VOID CmmRxnonRalinkFrameIndicate(
++ IN PRTMP_ADAPTER pAd,
++ IN RX_BLK *pRxBlk,
++ IN UCHAR FromWhichBSSID)
++{
++#ifdef DOT11_N_SUPPORT
++ if (RX_BLK_TEST_FLAG(pRxBlk, fRX_AMPDU) && (pAd->CommonCfg.bDisableReordering == 0))
++ {
++ Indicate_AMPDU_Packet(pAd, pRxBlk, FromWhichBSSID);
++ }
++ else
++#endif // DOT11_N_SUPPORT //
++ {
++#ifdef DOT11_N_SUPPORT
++ if (RX_BLK_TEST_FLAG(pRxBlk, fRX_AMSDU))
++ {
++ // handle A-MSDU
++ Indicate_AMSDU_Packet(pAd, pRxBlk, FromWhichBSSID);
++ }
++ else
++#endif // DOT11_N_SUPPORT //
++ {
++ Indicate_Legacy_Packet(pAd, pRxBlk, FromWhichBSSID);
++ }
++ }
++}
++
++
++VOID CmmRxRalinkFrameIndicate(
++ IN PRTMP_ADAPTER pAd,
++ IN MAC_TABLE_ENTRY *pEntry,
++ IN RX_BLK *pRxBlk,
++ IN UCHAR FromWhichBSSID)
++{
++ UCHAR Header802_3[LENGTH_802_3];
++ UINT16 Msdu2Size;
++ UINT16 Payload1Size, Payload2Size;
++ PUCHAR pData2;
++ PNDIS_PACKET pPacket2 = NULL;
++
++
++
++ Msdu2Size = *(pRxBlk->pData) + (*(pRxBlk->pData+1) << 8);
++
++ if ((Msdu2Size <= 1536) && (Msdu2Size < pRxBlk->DataSize))
++ {
++ /* skip two byte MSDU2 len */
++ pRxBlk->pData += 2;
++ pRxBlk->DataSize -= 2;
++ }
++ else
++ {
++ // release packet
++ RELEASE_NDIS_PACKET(pAd, pRxBlk->pRxPacket, NDIS_STATUS_FAILURE);
++ return;
++ }
++
++ // get 802.3 Header and remove LLC
++#ifdef CONFIG_STA_SUPPORT
++ IF_DEV_CONFIG_OPMODE_ON_STA(pAd)
++ RTMP_802_11_REMOVE_LLC_AND_CONVERT_TO_802_3(pRxBlk, Header802_3);
++#endif // CONFIG_STA_SUPPORT //
++
++
++ ASSERT(pRxBlk->pRxPacket);
++
++ // Ralink Aggregation frame
++ pAd->RalinkCounters.OneSecRxAggregationCount ++;
++ Payload1Size = pRxBlk->DataSize - Msdu2Size;
++ Payload2Size = Msdu2Size - LENGTH_802_3;
++
++ pData2 = pRxBlk->pData + Payload1Size + LENGTH_802_3;
++#ifdef CONFIG_STA_SUPPORT
++ IF_DEV_CONFIG_OPMODE_ON_STA(pAd)
++ pPacket2 = duplicate_pkt(pAd, (pData2-LENGTH_802_3), LENGTH_802_3, pData2, Payload2Size, FromWhichBSSID);
++#endif // CONFIG_STA_SUPPORT //
++
++ if (!pPacket2)
++ {
++ // release packet
++ RELEASE_NDIS_PACKET(pAd, pRxBlk->pRxPacket, NDIS_STATUS_FAILURE);
++ return;
++ }
++
++ // update payload size of 1st packet
++ pRxBlk->DataSize = Payload1Size;
++ wlan_802_11_to_802_3_packet(pAd, pRxBlk, Header802_3, FromWhichBSSID);
++
++#ifdef CONFIG_STA_SUPPORT
++ IF_DEV_CONFIG_OPMODE_ON_STA(pAd)
++ ANNOUNCE_OR_FORWARD_802_3_PACKET(pAd, pRxBlk->pRxPacket, FromWhichBSSID);
++#endif // CONFIG_STA_SUPPORT //
++
++ if (pPacket2)
++ {
++#ifdef CONFIG_STA_SUPPORT
++ IF_DEV_CONFIG_OPMODE_ON_STA(pAd)
++ ANNOUNCE_OR_FORWARD_802_3_PACKET(pAd, pPacket2, FromWhichBSSID);
++#endif // CONFIG_STA_SUPPORT //
++ }
++}
++
++
++#define RESET_FRAGFRAME(_fragFrame) \
++ { \
++ _fragFrame.RxSize = 0; \
++ _fragFrame.Sequence = 0; \
++ _fragFrame.LastFrag = 0; \
++ _fragFrame.Flags = 0; \
++ }
++
++
++PNDIS_PACKET RTMPDeFragmentDataFrame(
++ IN PRTMP_ADAPTER pAd,
++ IN RX_BLK *pRxBlk)
++{
++ PHEADER_802_11 pHeader = pRxBlk->pHeader;
++ PNDIS_PACKET pRxPacket = pRxBlk->pRxPacket;
++ UCHAR *pData = pRxBlk->pData;
++ USHORT DataSize = pRxBlk->DataSize;
++ PNDIS_PACKET pRetPacket = NULL;
++ UCHAR *pFragBuffer = NULL;
++ BOOLEAN bReassDone = FALSE;
++ UCHAR HeaderRoom = 0;
++
++
++ ASSERT(pHeader);
++
++ HeaderRoom = pData - (UCHAR *)pHeader;
++
++ // Re-assemble the fragmented packets
++ if (pHeader->Frag == 0) // Frag. Number is 0 : First frag or only one pkt
++ {
++ // the first pkt of fragment, record it.
++ if (pHeader->FC.MoreFrag)
++ {
++ ASSERT(pAd->FragFrame.pFragPacket);
++ pFragBuffer = GET_OS_PKT_DATAPTR(pAd->FragFrame.pFragPacket);
++ pAd->FragFrame.RxSize = DataSize + HeaderRoom;
++ NdisMoveMemory(pFragBuffer, pHeader, pAd->FragFrame.RxSize);
++ pAd->FragFrame.Sequence = pHeader->Sequence;
++ pAd->FragFrame.LastFrag = pHeader->Frag; // Should be 0
++ ASSERT(pAd->FragFrame.LastFrag == 0);
++ goto done; // end of processing this frame
++ }
++ }
++ else //Middle & End of fragment
++ {
++ if ((pHeader->Sequence != pAd->FragFrame.Sequence) ||
++ (pHeader->Frag != (pAd->FragFrame.LastFrag + 1)))
++ {
++ // Fragment is not the same sequence or out of fragment number order
++ // Reset Fragment control blk
++ RESET_FRAGFRAME(pAd->FragFrame);
++ DBGPRINT(RT_DEBUG_ERROR, ("Fragment is not the same sequence or out of fragment number order.\n"));
++ goto done; // give up this frame
++ }
++ else if ((pAd->FragFrame.RxSize + DataSize) > MAX_FRAME_SIZE)
++ {
++ // Fragment frame is too large, it exeeds the maximum frame size.
++ // Reset Fragment control blk
++ RESET_FRAGFRAME(pAd->FragFrame);
++ DBGPRINT(RT_DEBUG_ERROR, ("Fragment frame is too large, it exeeds the maximum frame size.\n"));
++ goto done; // give up this frame
++ }
++
++ //
++ // Broadcom AP(BCM94704AGR) will send out LLC in fragment's packet, LLC only can accpet at first fragment.
++ // In this case, we will dropt it.
++ //
++ if (NdisEqualMemory(pData, SNAP_802_1H, sizeof(SNAP_802_1H)))
++ {
++ DBGPRINT(RT_DEBUG_ERROR, ("Find another LLC at Middle or End fragment(SN=%d, Frag=%d)\n", pHeader->Sequence, pHeader->Frag));
++ goto done; // give up this frame
++ }
++
++ pFragBuffer = GET_OS_PKT_DATAPTR(pAd->FragFrame.pFragPacket);
++
++ // concatenate this fragment into the re-assembly buffer
++ NdisMoveMemory((pFragBuffer + pAd->FragFrame.RxSize), pData, DataSize);
++ pAd->FragFrame.RxSize += DataSize;
++ pAd->FragFrame.LastFrag = pHeader->Frag; // Update fragment number
++
++ // Last fragment
++ if (pHeader->FC.MoreFrag == FALSE)
++ {
++ bReassDone = TRUE;
++ }
++ }
++
++done:
++ // always release rx fragmented packet
++ RELEASE_NDIS_PACKET(pAd, pRxPacket, NDIS_STATUS_FAILURE);
++
++ // return defragmented packet if packet is reassembled completely
++ // otherwise return NULL
++ if (bReassDone)
++ {
++ PNDIS_PACKET pNewFragPacket;
++
++ // allocate a new packet buffer for fragment
++ pNewFragPacket = RTMP_AllocateFragPacketBuffer(pAd, RX_BUFFER_NORMSIZE);
++ if (pNewFragPacket)
++ {
++ // update RxBlk
++ pRetPacket = pAd->FragFrame.pFragPacket;
++ pAd->FragFrame.pFragPacket = pNewFragPacket;
++ pRxBlk->pHeader = (PHEADER_802_11) GET_OS_PKT_DATAPTR(pRetPacket);
++ pRxBlk->pData = (UCHAR *)pRxBlk->pHeader + HeaderRoom;
++ pRxBlk->DataSize = pAd->FragFrame.RxSize - HeaderRoom;
++ pRxBlk->pRxPacket = pRetPacket;
++ }
++ else
++ {
++ RESET_FRAGFRAME(pAd->FragFrame);
++ }
++ }
++
++ return pRetPacket;
++}
++
++
++VOID Indicate_AMSDU_Packet(
++ IN PRTMP_ADAPTER pAd,
++ IN RX_BLK *pRxBlk,
++ IN UCHAR FromWhichBSSID)
++{
++ UINT nMSDU;
++
++ update_os_packet_info(pAd, pRxBlk, FromWhichBSSID);
++ RTMP_SET_PACKET_IF(pRxBlk->pRxPacket, FromWhichBSSID);
++ nMSDU = deaggregate_AMSDU_announce(pAd, pRxBlk->pRxPacket, pRxBlk->pData, pRxBlk->DataSize);
++}
++
++VOID Indicate_EAPOL_Packet(
++ IN PRTMP_ADAPTER pAd,
++ IN RX_BLK *pRxBlk,
++ IN UCHAR FromWhichBSSID)
++{
++ MAC_TABLE_ENTRY *pEntry = NULL;
++
++
++#ifdef CONFIG_STA_SUPPORT
++ IF_DEV_CONFIG_OPMODE_ON_STA(pAd)
++ {
++ pEntry = &pAd->MacTab.Content[BSSID_WCID];
++ STARxEAPOLFrameIndicate(pAd, pEntry, pRxBlk, FromWhichBSSID);
++ return;
++ }
++#endif // CONFIG_STA_SUPPORT //
++
++ if (pEntry == NULL)
++ {
++ DBGPRINT(RT_DEBUG_WARN, ("Indicate_EAPOL_Packet: drop and release the invalid packet.\n"));
++ // release packet
++ RELEASE_NDIS_PACKET(pAd, pRxBlk->pRxPacket, NDIS_STATUS_FAILURE);
++ return;
++ }
++}
++
++#define BCN_TBTT_OFFSET 64 //defer 64 us
++VOID ReSyncBeaconTime(
++ IN PRTMP_ADAPTER pAd)
++{
++
++ UINT32 Offset;
++
++
++ Offset = (pAd->TbttTickCount) % (BCN_TBTT_OFFSET);
++
++ pAd->TbttTickCount++;
++
++ //
++ // The updated BeaconInterval Value will affect Beacon Interval after two TBTT
++ // beacasue the original BeaconInterval had been loaded into next TBTT_TIMER
++ //
++ if (Offset == (BCN_TBTT_OFFSET-2))
++ {
++ BCN_TIME_CFG_STRUC csr;
++ RTMP_IO_READ32(pAd, BCN_TIME_CFG, &csr.word);
++ csr.field.BeaconInterval = (pAd->CommonCfg.BeaconPeriod << 4) - 1 ; // ASIC register in units of 1/16 TU = 64us
++ RTMP_IO_WRITE32(pAd, BCN_TIME_CFG, csr.word);
++ }
++ else
++ {
++ if (Offset == (BCN_TBTT_OFFSET-1))
++ {
++ BCN_TIME_CFG_STRUC csr;
++
++ RTMP_IO_READ32(pAd, BCN_TIME_CFG, &csr.word);
++ csr.field.BeaconInterval = (pAd->CommonCfg.BeaconPeriod) << 4; // ASIC register in units of 1/16 TU
++ RTMP_IO_WRITE32(pAd, BCN_TIME_CFG, csr.word);
++ }
++ }
++}
++
+--- /dev/null
++++ b/drivers/staging/rt2870/common/cmm_info.c
+@@ -0,0 +1,3712 @@
++/*
++ *************************************************************************
++ * Ralink Tech Inc.
++ * 5F., No.36, Taiyuan St., Jhubei City,
++ * Hsinchu County 302,
++ * Taiwan, R.O.C.
++ *
++ * (c) Copyright 2002-2007, Ralink Technology, Inc.
++ *
++ * This program is free software; you can redistribute it and/or modify *
++ * it under the terms of the GNU General Public License as published by *
++ * the Free Software Foundation; either version 2 of the License, or *
++ * (at your option) any later version. *
++ * *
++ * This program is distributed in the hope that it will be useful, *
++ * but WITHOUT ANY WARRANTY; without even the implied warranty of *
++ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the *
++ * GNU General Public License for more details. *
++ * *
++ * You should have received a copy of the GNU General Public License *
++ * along with this program; if not, write to the *
++ * Free Software Foundation, Inc., *
++ * 59 Temple Place - Suite 330, Boston, MA 02111-1307, USA. *
++ * *
++ *************************************************************************
++*/
++
++#include "../rt_config.h"
++
++INT Show_SSID_Proc(
++ IN PRTMP_ADAPTER pAd,
++ OUT PUCHAR pBuf);
++
++INT Show_WirelessMode_Proc(
++ IN PRTMP_ADAPTER pAd,
++ OUT PUCHAR pBuf);
++
++INT Show_TxBurst_Proc(
++ IN PRTMP_ADAPTER pAd,
++ OUT PUCHAR pBuf);
++
++INT Show_TxPreamble_Proc(
++ IN PRTMP_ADAPTER pAd,
++ OUT PUCHAR pBuf);
++
++INT Show_TxPower_Proc(
++ IN PRTMP_ADAPTER pAd,
++ OUT PUCHAR pBuf);
++
++INT Show_Channel_Proc(
++ IN PRTMP_ADAPTER pAd,
++ OUT PUCHAR pBuf);
++
++INT Show_BGProtection_Proc(
++ IN PRTMP_ADAPTER pAd,
++ OUT PUCHAR pBuf);
++
++INT Show_RTSThreshold_Proc(
++ IN PRTMP_ADAPTER pAd,
++ OUT PUCHAR pBuf);
++
++INT Show_FragThreshold_Proc(
++ IN PRTMP_ADAPTER pAd,
++ OUT PUCHAR pBuf);
++
++#ifdef DOT11_N_SUPPORT
++INT Show_HtBw_Proc(
++ IN PRTMP_ADAPTER pAd,
++ OUT PUCHAR pBuf);
++
++INT Show_HtMcs_Proc(
++ IN PRTMP_ADAPTER pAd,
++ OUT PUCHAR pBuf);
++
++INT Show_HtGi_Proc(
++ IN PRTMP_ADAPTER pAd,
++ OUT PUCHAR pBuf);
++
++INT Show_HtOpMode_Proc(
++ IN PRTMP_ADAPTER pAd,
++ OUT PUCHAR pBuf);
++
++INT Show_HtExtcha_Proc(
++ IN PRTMP_ADAPTER pAd,
++ OUT PUCHAR pBuf);
++
++INT Show_HtMpduDensity_Proc(
++ IN PRTMP_ADAPTER pAd,
++ OUT PUCHAR pBuf);
++
++INT Show_HtBaWinSize_Proc(
++ IN PRTMP_ADAPTER pAd,
++ OUT PUCHAR pBuf);
++
++INT Show_HtRdg_Proc(
++ IN PRTMP_ADAPTER pAd,
++ OUT PUCHAR pBuf);
++
++INT Show_HtAmsdu_Proc(
++ IN PRTMP_ADAPTER pAd,
++ OUT PUCHAR pBuf);
++
++INT Show_HtAutoBa_Proc(
++ IN PRTMP_ADAPTER pAd,
++ OUT PUCHAR pBuf);
++#endif // DOT11_N_SUPPORT //
++
++INT Show_CountryRegion_Proc(
++ IN PRTMP_ADAPTER pAd,
++ OUT PUCHAR pBuf);
++
++INT Show_CountryRegionABand_Proc(
++ IN PRTMP_ADAPTER pAd,
++ OUT PUCHAR pBuf);
++
++INT Show_CountryCode_Proc(
++ IN PRTMP_ADAPTER pAd,
++ OUT PUCHAR pBuf);
++
++#ifdef AGGREGATION_SUPPORT
++INT Show_PktAggregate_Proc(
++ IN PRTMP_ADAPTER pAd,
++ OUT PUCHAR pBuf);
++#endif // AGGREGATION_SUPPORT //
++
++#ifdef WMM_SUPPORT
++INT Show_WmmCapable_Proc(
++ IN PRTMP_ADAPTER pAd,
++ OUT PUCHAR pBuf);
++#endif // WMM_SUPPORT //
++
++INT Show_IEEE80211H_Proc(
++ IN PRTMP_ADAPTER pAd,
++ OUT PUCHAR pBuf);
++
++#ifdef CONFIG_STA_SUPPORT
++INT Show_NetworkType_Proc(
++ IN PRTMP_ADAPTER pAd,
++ OUT PUCHAR pBuf);
++#endif // CONFIG_STA_SUPPORT //
++
++INT Show_AuthMode_Proc(
++ IN PRTMP_ADAPTER pAd,
++ OUT PUCHAR pBuf);
++
++INT Show_EncrypType_Proc(
++ IN PRTMP_ADAPTER pAd,
++ OUT PUCHAR pBuf);
++
++INT Show_DefaultKeyID_Proc(
++ IN PRTMP_ADAPTER pAd,
++ OUT PUCHAR pBuf);
++
++INT Show_Key1_Proc(
++ IN PRTMP_ADAPTER pAd,
++ OUT PUCHAR pBuf);
++
++INT Show_Key2_Proc(
++ IN PRTMP_ADAPTER pAd,
++ OUT PUCHAR pBuf);
++
++INT Show_Key3_Proc(
++ IN PRTMP_ADAPTER pAd,
++ OUT PUCHAR pBuf);
++
++INT Show_Key4_Proc(
++ IN PRTMP_ADAPTER pAd,
++ OUT PUCHAR pBuf);
++
++INT Show_WPAPSK_Proc(
++ IN PRTMP_ADAPTER pAd,
++ OUT PUCHAR pBuf);
++
++static struct {
++ CHAR *name;
++ INT (*show_proc)(PRTMP_ADAPTER pAdapter, PUCHAR arg);
++} *PRTMP_PRIVATE_STA_SHOW_CFG_VALUE_PROC, RTMP_PRIVATE_STA_SHOW_CFG_VALUE_PROC[] = {
++ {"SSID", Show_SSID_Proc},
++ {"WirelessMode", Show_WirelessMode_Proc},
++ {"TxBurst", Show_TxBurst_Proc},
++ {"TxPreamble", Show_TxPreamble_Proc},
++ {"TxPower", Show_TxPower_Proc},
++ {"Channel", Show_Channel_Proc},
++ {"BGProtection", Show_BGProtection_Proc},
++ {"RTSThreshold", Show_RTSThreshold_Proc},
++ {"FragThreshold", Show_FragThreshold_Proc},
++#ifdef DOT11_N_SUPPORT
++ {"HtBw", Show_HtBw_Proc},
++ {"HtMcs", Show_HtMcs_Proc},
++ {"HtGi", Show_HtGi_Proc},
++ {"HtOpMode", Show_HtOpMode_Proc},
++ {"HtExtcha", Show_HtExtcha_Proc},
++ {"HtMpduDensity", Show_HtMpduDensity_Proc},
++ {"HtBaWinSize", Show_HtBaWinSize_Proc},
++ {"HtRdg", Show_HtRdg_Proc},
++ {"HtAmsdu", Show_HtAmsdu_Proc},
++ {"HtAutoBa", Show_HtAutoBa_Proc},
++#endif // DOT11_N_SUPPORT //
++ {"CountryRegion", Show_CountryRegion_Proc},
++ {"CountryRegionABand", Show_CountryRegionABand_Proc},
++ {"CountryCode", Show_CountryCode_Proc},
++#ifdef AGGREGATION_SUPPORT
++ {"PktAggregate", Show_PktAggregate_Proc},
++#endif
++
++#ifdef WMM_SUPPORT
++ {"WmmCapable", Show_WmmCapable_Proc},
++#endif
++ {"IEEE80211H", Show_IEEE80211H_Proc},
++#ifdef CONFIG_STA_SUPPORT
++ {"NetworkType", Show_NetworkType_Proc},
++#endif // CONFIG_STA_SUPPORT //
++ {"AuthMode", Show_AuthMode_Proc},
++ {"EncrypType", Show_EncrypType_Proc},
++ {"DefaultKeyID", Show_DefaultKeyID_Proc},
++ {"Key1", Show_Key1_Proc},
++ {"Key2", Show_Key2_Proc},
++ {"Key3", Show_Key3_Proc},
++ {"Key4", Show_Key4_Proc},
++ {"WPAPSK", Show_WPAPSK_Proc},
++ {NULL, NULL}
++};
++
++/*
++ ==========================================================================
++ Description:
++ Get Driver version.
++
++ Return:
++ ==========================================================================
++*/
++INT Set_DriverVersion_Proc(
++ IN PRTMP_ADAPTER pAd,
++ IN PUCHAR arg)
++{
++
++#ifdef CONFIG_STA_SUPPORT
++ IF_DEV_CONFIG_OPMODE_ON_STA(pAd)
++ DBGPRINT(RT_DEBUG_TRACE, ("Driver version-%s\n", STA_DRIVER_VERSION));
++#endif // CONFIG_STA_SUPPORT //
++
++ return TRUE;
++}
++
++/*
++ ==========================================================================
++ Description:
++ Set Country Region.
++ This command will not work, if the field of CountryRegion in eeprom is programmed.
++ Return:
++ TRUE if all parameters are OK, FALSE otherwise
++ ==========================================================================
++*/
++INT Set_CountryRegion_Proc(
++ IN PRTMP_ADAPTER pAd,
++ IN PUCHAR arg)
++{
++ ULONG region;
++
++ region = simple_strtol(arg, 0, 10);
++
++#ifdef EXT_BUILD_CHANNEL_LIST
++ return -EOPNOTSUPP;
++#endif // EXT_BUILD_CHANNEL_LIST //
++
++ // Country can be set only when EEPROM not programmed
++ if (pAd->CommonCfg.CountryRegion & 0x80)
++ {
++ DBGPRINT(RT_DEBUG_ERROR, ("Set_CountryRegion_Proc::parameter of CountryRegion in eeprom is programmed \n"));
++ return FALSE;
++ }
++
++ if((region >= 0) && (region <= REGION_MAXIMUM_BG_BAND))
++ {
++ pAd->CommonCfg.CountryRegion = (UCHAR) region;
++ }
++ else if (region == REGION_31_BG_BAND)
++ {
++ pAd->CommonCfg.CountryRegion = (UCHAR) region;
++ }
++ else
++ {
++ DBGPRINT(RT_DEBUG_ERROR, ("Set_CountryRegion_Proc::parameters out of range\n"));
++ return FALSE;
++ }
++
++ // if set country region, driver needs to be reset
++ BuildChannelList(pAd);
++
++ DBGPRINT(RT_DEBUG_TRACE, ("Set_CountryRegion_Proc::(CountryRegion=%d)\n", pAd->CommonCfg.CountryRegion));
++
++ return TRUE;
++}
++
++/*
++ ==========================================================================
++ Description:
++ Set Country Region for A band.
++ This command will not work, if the field of CountryRegion in eeprom is programmed.
++ Return:
++ TRUE if all parameters are OK, FALSE otherwise
++ ==========================================================================
++*/
++INT Set_CountryRegionABand_Proc(
++ IN PRTMP_ADAPTER pAd,
++ IN PUCHAR arg)
++{
++ ULONG region;
++
++ region = simple_strtol(arg, 0, 10);
++
++#ifdef EXT_BUILD_CHANNEL_LIST
++ return -EOPNOTSUPP;
++#endif // EXT_BUILD_CHANNEL_LIST //
++
++ // Country can be set only when EEPROM not programmed
++ if (pAd->CommonCfg.CountryRegionForABand & 0x80)
++ {
++ DBGPRINT(RT_DEBUG_ERROR, ("Set_CountryRegionABand_Proc::parameter of CountryRegion in eeprom is programmed \n"));
++ return FALSE;
++ }
++
++ if((region >= 0) && (region <= REGION_MAXIMUM_A_BAND))
++ {
++ pAd->CommonCfg.CountryRegionForABand = (UCHAR) region;
++ }
++ else
++ {
++ DBGPRINT(RT_DEBUG_ERROR, ("Set_CountryRegionABand_Proc::parameters out of range\n"));
++ return FALSE;
++ }
++
++ // if set country region, driver needs to be reset
++ BuildChannelList(pAd);
++
++ DBGPRINT(RT_DEBUG_TRACE, ("Set_CountryRegionABand_Proc::(CountryRegion=%d)\n", pAd->CommonCfg.CountryRegionForABand));
++
++ return TRUE;
++}
++
++/*
++ ==========================================================================
++ Description:
++ Set Wireless Mode
++ Return:
++ TRUE if all parameters are OK, FALSE otherwise
++ ==========================================================================
++*/
++INT Set_WirelessMode_Proc(
++ IN PRTMP_ADAPTER pAd,
++ IN PUCHAR arg)
++{
++ ULONG WirelessMode;
++ INT success = TRUE;
++
++ WirelessMode = simple_strtol(arg, 0, 10);
++
++
++#ifdef CONFIG_STA_SUPPORT
++ IF_DEV_CONFIG_OPMODE_ON_STA(pAd)
++ {
++ INT MaxPhyMode = PHY_11G;
++
++#ifdef DOT11_N_SUPPORT
++ MaxPhyMode = PHY_11N_5G;
++#endif // DOT11_N_SUPPORT //
++
++ if (WirelessMode <= MaxPhyMode)
++ {
++ RTMPSetPhyMode(pAd, WirelessMode);
++#ifdef DOT11_N_SUPPORT
++ if (WirelessMode >= PHY_11ABGN_MIXED)
++ {
++ pAd->CommonCfg.BACapability.field.AutoBA = TRUE;
++ pAd->CommonCfg.REGBACapability.field.AutoBA = TRUE;
++ }
++ else
++ {
++ pAd->CommonCfg.BACapability.field.AutoBA = FALSE;
++ pAd->CommonCfg.REGBACapability.field.AutoBA = FALSE;
++ }
++#endif // DOT11_N_SUPPORT //
++ // Set AdhocMode rates
++ if (pAd->StaCfg.BssType == BSS_ADHOC)
++ {
++ MlmeUpdateTxRates(pAd, FALSE, 0);
++ MakeIbssBeacon(pAd); // re-build BEACON frame
++ AsicEnableIbssSync(pAd); // copy to on-chip memory
++ }
++ }
++ else
++ {
++ success = FALSE;
++ }
++ }
++#endif // CONFIG_STA_SUPPORT //
++
++ // it is needed to set SSID to take effect
++ if (success == TRUE)
++ {
++#ifdef DOT11_N_SUPPORT
++ SetCommonHT(pAd);
++#endif // DOT11_N_SUPPORT //
++ DBGPRINT(RT_DEBUG_TRACE, ("Set_WirelessMode_Proc::(=%ld)\n", WirelessMode));
++ }
++ else
++ {
++ DBGPRINT(RT_DEBUG_ERROR, ("Set_WirelessMode_Proc::parameters out of range\n"));
++ }
++
++ return success;
++}
++
++/*
++ ==========================================================================
++ Description:
++ Set Channel
++ Return:
++ TRUE if all parameters are OK, FALSE otherwise
++ ==========================================================================
++*/
++INT Set_Channel_Proc(
++ IN PRTMP_ADAPTER pAd,
++ IN PUCHAR arg)
++{
++ INT success = TRUE;
++ UCHAR Channel;
++
++ Channel = (UCHAR) simple_strtol(arg, 0, 10);
++
++ // check if this channel is valid
++ if (ChannelSanity(pAd, Channel) == TRUE)
++ {
++#ifdef CONFIG_STA_SUPPORT
++ IF_DEV_CONFIG_OPMODE_ON_STA(pAd)
++ {
++ pAd->CommonCfg.Channel = Channel;
++
++ if (MONITOR_ON(pAd))
++ {
++#ifdef DOT11_N_SUPPORT
++ N_ChannelCheck(pAd);
++ if (pAd->CommonCfg.PhyMode >= PHY_11ABGN_MIXED &&
++ pAd->CommonCfg.RegTransmitSetting.field.BW == BW_40)
++ {
++ N_SetCenCh(pAd);
++ AsicSwitchChannel(pAd, pAd->CommonCfg.CentralChannel, FALSE);
++ AsicLockChannel(pAd, pAd->CommonCfg.CentralChannel);
++ DBGPRINT(RT_DEBUG_TRACE, ("BW_40, control_channel(%d), CentralChannel(%d) \n",
++ pAd->CommonCfg.Channel, pAd->CommonCfg.CentralChannel));
++ }
++ else
++#endif // DOT11_N_SUPPORT //
++ {
++ AsicSwitchChannel(pAd, pAd->CommonCfg.Channel, FALSE);
++ AsicLockChannel(pAd, pAd->CommonCfg.Channel);
++ DBGPRINT(RT_DEBUG_TRACE, ("BW_20, Channel(%d)\n", pAd->CommonCfg.Channel));
++ }
++ }
++ }
++#endif // CONFIG_STA_SUPPORT //
++ success = TRUE;
++ }
++ else
++ {
++
++#ifdef CONFIG_STA_SUPPORT
++ IF_DEV_CONFIG_OPMODE_ON_STA(pAd)
++ success = FALSE;
++#endif // CONFIG_STA_SUPPORT //
++ }
++
++
++ if (success == TRUE)
++ DBGPRINT(RT_DEBUG_TRACE, ("Set_Channel_Proc::(Channel=%d)\n", pAd->CommonCfg.Channel));
++
++ return success;
++}
++
++/*
++ ==========================================================================
++ Description:
++ Set Short Slot Time Enable or Disable
++ Return:
++ TRUE if all parameters are OK, FALSE otherwise
++ ==========================================================================
++*/
++INT Set_ShortSlot_Proc(
++ IN PRTMP_ADAPTER pAd,
++ IN PUCHAR arg)
++{
++ ULONG ShortSlot;
++
++ ShortSlot = simple_strtol(arg, 0, 10);
++
++ if (ShortSlot == 1)
++ pAd->CommonCfg.bUseShortSlotTime = TRUE;
++ else if (ShortSlot == 0)
++ pAd->CommonCfg.bUseShortSlotTime = FALSE;
++ else
++ return FALSE; //Invalid argument
++
++ DBGPRINT(RT_DEBUG_TRACE, ("Set_ShortSlot_Proc::(ShortSlot=%d)\n", pAd->CommonCfg.bUseShortSlotTime));
++
++ return TRUE;
++}
++
++/*
++ ==========================================================================
++ Description:
++ Set Tx power
++ Return:
++ TRUE if all parameters are OK, FALSE otherwise
++ ==========================================================================
++*/
++INT Set_TxPower_Proc(
++ IN PRTMP_ADAPTER pAd,
++ IN PUCHAR arg)
++{
++ ULONG TxPower;
++ INT success = FALSE;
++
++ TxPower = (ULONG) simple_strtol(arg, 0, 10);
++ if (TxPower <= 100)
++ {
++
++#ifdef CONFIG_STA_SUPPORT
++ IF_DEV_CONFIG_OPMODE_ON_STA(pAd)
++ {
++ pAd->CommonCfg.TxPowerDefault = TxPower;
++ pAd->CommonCfg.TxPowerPercentage = pAd->CommonCfg.TxPowerDefault;
++ }
++#endif // CONFIG_STA_SUPPORT //
++ success = TRUE;
++ }
++ else
++ success = FALSE;
++
++ DBGPRINT(RT_DEBUG_TRACE, ("Set_TxPower_Proc::(TxPowerPercentage=%ld)\n", pAd->CommonCfg.TxPowerPercentage));
++
++ return success;
++}
++
++/*
++ ==========================================================================
++ Description:
++ Set 11B/11G Protection
++ Return:
++ TRUE if all parameters are OK, FALSE otherwise
++ ==========================================================================
++*/
++INT Set_BGProtection_Proc(
++ IN PRTMP_ADAPTER pAd,
++ IN PUCHAR arg)
++{
++ switch (simple_strtol(arg, 0, 10))
++ {
++ case 0: //AUTO
++ pAd->CommonCfg.UseBGProtection = 0;
++ break;
++ case 1: //Always On
++ pAd->CommonCfg.UseBGProtection = 1;
++ break;
++ case 2: //Always OFF
++ pAd->CommonCfg.UseBGProtection = 2;
++ break;
++ default: //Invalid argument
++ return FALSE;
++ }
++
++
++ DBGPRINT(RT_DEBUG_TRACE, ("Set_BGProtection_Proc::(BGProtection=%ld)\n", pAd->CommonCfg.UseBGProtection));
++
++ return TRUE;
++}
++
++/*
++ ==========================================================================
++ Description:
++ Set TxPreamble
++ Return:
++ TRUE if all parameters are OK, FALSE otherwise
++ ==========================================================================
++*/
++INT Set_TxPreamble_Proc(
++ IN PRTMP_ADAPTER pAd,
++ IN PUCHAR arg)
++{
++ RT_802_11_PREAMBLE Preamble;
++
++ Preamble = simple_strtol(arg, 0, 10);
++
++
++ switch (Preamble)
++ {
++ case Rt802_11PreambleShort:
++ pAd->CommonCfg.TxPreamble = Preamble;
++#ifdef CONFIG_STA_SUPPORT
++ IF_DEV_CONFIG_OPMODE_ON_STA(pAd)
++ MlmeSetTxPreamble(pAd, Rt802_11PreambleShort);
++#endif // CONFIG_STA_SUPPORT //
++ break;
++ case Rt802_11PreambleLong:
++#ifdef CONFIG_STA_SUPPORT
++ case Rt802_11PreambleAuto:
++ // if user wants AUTO, initialize to LONG here, then change according to AP's
++ // capability upon association.
++#endif // CONFIG_STA_SUPPORT //
++ pAd->CommonCfg.TxPreamble = Preamble;
++#ifdef CONFIG_STA_SUPPORT
++ IF_DEV_CONFIG_OPMODE_ON_STA(pAd)
++ MlmeSetTxPreamble(pAd, Rt802_11PreambleLong);
++#endif // CONFIG_STA_SUPPORT //
++ break;
++ default: //Invalid argument
++ return FALSE;
++ }
++
++ DBGPRINT(RT_DEBUG_TRACE, ("Set_TxPreamble_Proc::(TxPreamble=%ld)\n", pAd->CommonCfg.TxPreamble));
++
++ return TRUE;
++}
++
++/*
++ ==========================================================================
++ Description:
++ Set RTS Threshold
++ Return:
++ TRUE if all parameters are OK, FALSE otherwise
++ ==========================================================================
++*/
++INT Set_RTSThreshold_Proc(
++ IN PRTMP_ADAPTER pAd,
++ IN PUCHAR arg)
++{
++ NDIS_802_11_RTS_THRESHOLD RtsThresh;
++
++ RtsThresh = simple_strtol(arg, 0, 10);
++
++ if((RtsThresh > 0) && (RtsThresh <= MAX_RTS_THRESHOLD))
++ pAd->CommonCfg.RtsThreshold = (USHORT)RtsThresh;
++#ifdef CONFIG_STA_SUPPORT
++ else if (RtsThresh == 0)
++ pAd->CommonCfg.RtsThreshold = MAX_RTS_THRESHOLD;
++#endif // CONFIG_STA_SUPPORT //
++ else
++ return FALSE; //Invalid argument
++
++ DBGPRINT(RT_DEBUG_TRACE, ("Set_RTSThreshold_Proc::(RTSThreshold=%d)\n", pAd->CommonCfg.RtsThreshold));
++
++ return TRUE;
++}
++
++/*
++ ==========================================================================
++ Description:
++ Set Fragment Threshold
++ Return:
++ TRUE if all parameters are OK, FALSE otherwise
++ ==========================================================================
++*/
++INT Set_FragThreshold_Proc(
++ IN PRTMP_ADAPTER pAd,
++ IN PUCHAR arg)
++{
++ NDIS_802_11_FRAGMENTATION_THRESHOLD FragThresh;
++
++ FragThresh = simple_strtol(arg, 0, 10);
++
++ if (FragThresh > MAX_FRAG_THRESHOLD || FragThresh < MIN_FRAG_THRESHOLD)
++ {
++ //Illegal FragThresh so we set it to default
++ pAd->CommonCfg.FragmentThreshold = MAX_FRAG_THRESHOLD;
++ }
++ else if (FragThresh % 2 == 1)
++ {
++ // The length of each fragment shall always be an even number of octets, except for the last fragment
++ // of an MSDU or MMPDU, which may be either an even or an odd number of octets.
++ pAd->CommonCfg.FragmentThreshold = (USHORT)(FragThresh - 1);
++ }
++ else
++ {
++ pAd->CommonCfg.FragmentThreshold = (USHORT)FragThresh;
++ }
++
++#ifdef CONFIG_STA_SUPPORT
++ IF_DEV_CONFIG_OPMODE_ON_STA(pAd)
++ {
++ if (pAd->CommonCfg.FragmentThreshold == MAX_FRAG_THRESHOLD)
++ pAd->CommonCfg.bUseZeroToDisableFragment = TRUE;
++ else
++ pAd->CommonCfg.bUseZeroToDisableFragment = FALSE;
++ }
++#endif // CONFIG_STA_SUPPORT //
++
++ DBGPRINT(RT_DEBUG_TRACE, ("Set_FragThreshold_Proc::(FragThreshold=%d)\n", pAd->CommonCfg.FragmentThreshold));
++
++ return TRUE;
++}
++
++/*
++ ==========================================================================
++ Description:
++ Set TxBurst
++ Return:
++ TRUE if all parameters are OK, FALSE otherwise
++ ==========================================================================
++*/
++INT Set_TxBurst_Proc(
++ IN PRTMP_ADAPTER pAd,
++ IN PUCHAR arg)
++{
++ ULONG TxBurst;
++
++ TxBurst = simple_strtol(arg, 0, 10);
++ if (TxBurst == 1)
++ pAd->CommonCfg.bEnableTxBurst = TRUE;
++ else if (TxBurst == 0)
++ pAd->CommonCfg.bEnableTxBurst = FALSE;
++ else
++ return FALSE; //Invalid argument
++
++ DBGPRINT(RT_DEBUG_TRACE, ("Set_TxBurst_Proc::(TxBurst=%d)\n", pAd->CommonCfg.bEnableTxBurst));
++
++ return TRUE;
++}
++
++#ifdef AGGREGATION_SUPPORT
++/*
++ ==========================================================================
++ Description:
++ Set TxBurst
++ Return:
++ TRUE if all parameters are OK, FALSE otherwise
++ ==========================================================================
++*/
++INT Set_PktAggregate_Proc(
++ IN PRTMP_ADAPTER pAd,
++ IN PUCHAR arg)
++{
++ ULONG aggre;
++
++ aggre = simple_strtol(arg, 0, 10);
++
++ if (aggre == 1)
++ pAd->CommonCfg.bAggregationCapable = TRUE;
++ else if (aggre == 0)
++ pAd->CommonCfg.bAggregationCapable = FALSE;
++ else
++ return FALSE; //Invalid argument
++
++
++ DBGPRINT(RT_DEBUG_TRACE, ("Set_PktAggregate_Proc::(AGGRE=%d)\n", pAd->CommonCfg.bAggregationCapable));
++
++ return TRUE;
++}
++#endif
++
++/*
++ ==========================================================================
++ Description:
++ Set IEEE80211H.
++ This parameter is 1 when needs radar detection, otherwise 0
++ Return:
++ TRUE if all parameters are OK, FALSE otherwise
++ ==========================================================================
++*/
++INT Set_IEEE80211H_Proc(
++ IN PRTMP_ADAPTER pAd,
++ IN PUCHAR arg)
++{
++ ULONG ieee80211h;
++
++ ieee80211h = simple_strtol(arg, 0, 10);
++
++ if (ieee80211h == 1)
++ pAd->CommonCfg.bIEEE80211H = TRUE;
++ else if (ieee80211h == 0)
++ pAd->CommonCfg.bIEEE80211H = FALSE;
++ else
++ return FALSE; //Invalid argument
++
++ DBGPRINT(RT_DEBUG_TRACE, ("Set_IEEE80211H_Proc::(IEEE80211H=%d)\n", pAd->CommonCfg.bIEEE80211H));
++
++ return TRUE;
++}
++
++
++#ifdef DBG
++/*
++ ==========================================================================
++ Description:
++ For Debug information
++ Return:
++ TRUE if all parameters are OK, FALSE otherwise
++ ==========================================================================
++*/
++INT Set_Debug_Proc(
++ IN PRTMP_ADAPTER pAd,
++ IN PUCHAR arg)
++{
++ DBGPRINT(RT_DEBUG_TRACE, ("==> Set_Debug_Proc *******************\n"));
++
++ if(simple_strtol(arg, 0, 10) <= RT_DEBUG_LOUD)
++ RTDebugLevel = simple_strtol(arg, 0, 10);
++
++ DBGPRINT(RT_DEBUG_TRACE, ("<== Set_Debug_Proc(RTDebugLevel = %ld)\n", RTDebugLevel));
++
++ return TRUE;
++}
++#endif
++
++INT Show_DescInfo_Proc(
++ IN PRTMP_ADAPTER pAd,
++ IN PUCHAR arg)
++{
++
++ return TRUE;
++}
++
++/*
++ ==========================================================================
++ Description:
++ Reset statistics counter
++
++ Arguments:
++ pAdapter Pointer to our adapter
++ arg
++
++ Return:
++ TRUE if all parameters are OK, FALSE otherwise
++ ==========================================================================
++*/
++INT Set_ResetStatCounter_Proc(
++ IN PRTMP_ADAPTER pAd,
++ IN PUCHAR arg)
++{
++ //UCHAR i;
++ //MAC_TABLE_ENTRY *pEntry;
++
++ DBGPRINT(RT_DEBUG_TRACE, ("==>Set_ResetStatCounter_Proc\n"));
++
++ // add the most up-to-date h/w raw counters into software counters
++ NICUpdateRawCounters(pAd);
++
++ NdisZeroMemory(&pAd->WlanCounters, sizeof(COUNTER_802_11));
++ NdisZeroMemory(&pAd->Counters8023, sizeof(COUNTER_802_3));
++ NdisZeroMemory(&pAd->RalinkCounters, sizeof(COUNTER_RALINK));
++
++ // Reset HotSpot counter
++#if 0 // ToDo.
++ for (i = 0; i < MAX_LEN_OF_MAC_TABLE; i++)
++ {
++ pEntry = &pAd->MacTab.Content[i];
++
++ if ((pEntry->Valid == FALSE) || (pEntry->Sst != SST_ASSOC))
++ continue;
++
++ pEntry->HSCounter.LastDataPacketTime = 0;
++ pEntry->HSCounter.TotalRxByteCount= 0;
++ pEntry->HSCounter.TotalTxByteCount= 0;
++ }
++#endif
++
++
++ return TRUE;
++}
++
++/*
++ ========================================================================
++
++ Routine Description:
++ Add WPA key process.
++ In Adhoc WPANONE, bPairwise = 0; KeyIdx = 0;
++
++ Arguments:
++ pAd Pointer to our adapter
++ pBuf Pointer to the where the key stored
++
++ Return Value:
++ NDIS_SUCCESS Add key successfully
++
++ IRQL = DISPATCH_LEVEL
++
++ Note:
++
++ ========================================================================
++*/
++#if 0 // remove by AlbertY
++NDIS_STATUS RTMPWPAAddKeyProc(
++ IN PRTMP_ADAPTER pAd,
++ IN PVOID pBuf)
++{
++ PNDIS_802_11_KEY pKey;
++ ULONG KeyIdx;
++// NDIS_STATUS Status;
++// ULONG offset; // unused variable, snowpin 2006.07.13
++
++ PUCHAR pTxMic, pRxMic;
++ BOOLEAN bTxKey; // Set the key as transmit key
++ BOOLEAN bPairwise; // Indicate the key is pairwise key
++ BOOLEAN bKeyRSC; // indicate the receive SC set by KeyRSC value.
++ // Otherwise, it will set by the NIC.
++ BOOLEAN bAuthenticator; // indicate key is set by authenticator.
++ UCHAR apidx = BSS0;
++
++ pKey = (PNDIS_802_11_KEY) pBuf;
++ KeyIdx = pKey->KeyIndex & 0xff;
++ // Bit 31 of Add-key, Tx Key
++ bTxKey = (pKey->KeyIndex & 0x80000000) ? TRUE : FALSE;
++ // Bit 30 of Add-key PairwiseKey
++ bPairwise = (pKey->KeyIndex & 0x40000000) ? TRUE : FALSE;
++ // Bit 29 of Add-key KeyRSC
++ bKeyRSC = (pKey->KeyIndex & 0x20000000) ? TRUE : FALSE;
++ // Bit 28 of Add-key Authenticator
++ bAuthenticator = (pKey->KeyIndex & 0x10000000) ? TRUE : FALSE;
++
++ DBGPRINT(RT_DEBUG_TRACE,("RTMPWPAAddKeyProc==>pKey->KeyIndex = %x. bPairwise= %d\n", pKey->KeyIndex, bPairwise));
++ // 1. Check Group / Pairwise Key
++ if (bPairwise) // Pairwise Key
++ {
++ // 1. KeyIdx must be 0, otherwise, return NDIS_STATUS_INVALID_DATA
++ if (KeyIdx != 0)
++ return(NDIS_STATUS_INVALID_DATA);
++
++ // 2. Check bTx, it must be true, otherwise, return NDIS_STATUS_INVALID_DATA
++ if (bTxKey == FALSE)
++ return(NDIS_STATUS_INVALID_DATA);
++
++ // 3. If BSSID is all 0xff, return NDIS_STATUS_INVALID_DATA
++ if (MAC_ADDR_EQUAL(pKey->BSSID, BROADCAST_ADDR))
++ return(NDIS_STATUS_INVALID_DATA);
++
++ // 3.1 Check Pairwise key length for TKIP key. For AES, it's always 128 bits
++ //if ((pAdapter->PortCfg.WepStatus == Ndis802_11Encryption2Enabled) && (pKey->KeyLength != LEN_TKIP_KEY))
++ if ((pAd->StaCfg.PairCipher == Ndis802_11Encryption2Enabled) && (pKey->KeyLength != LEN_TKIP_KEY))
++ return(NDIS_STATUS_INVALID_DATA);
++
++ pAd->SharedKey[apidx][KeyIdx].Type = PAIRWISE_KEY;
++
++ if (pAd->ApCfg.MBSSID[apidx].AuthMode == Ndis802_11AuthModeWPA2)
++ {
++ // Send media specific event to start PMKID caching
++ RTMPIndicateWPA2Status(pAd);
++ }
++ }
++ else
++ {
++ // 1. Check BSSID, if not current BSSID or Bcast, return NDIS_STATUS_INVALID_DATA
++ if ((! MAC_ADDR_EQUAL(pKey->BSSID, BROADCAST_ADDR)) &&
++ (! MAC_ADDR_EQUAL(pKey->BSSID, pAd->ApCfg.MBSSID[apidx].Bssid)))
++ return(NDIS_STATUS_INVALID_DATA);
++
++ // 2. Check Key index for supported Group Key
++ if (KeyIdx >= GROUP_KEY_NUM)
++ return(NDIS_STATUS_INVALID_DATA);
++
++ // 3. Set as default Tx Key if bTxKey is TRUE
++ if (bTxKey == TRUE)
++ pAd->ApCfg.MBSSID[apidx].DefaultKeyId = (UCHAR) KeyIdx;
++
++ pAd->SharedKey[apidx][KeyIdx].Type = GROUP_KEY;
++ }
++
++ // 4. Select RxMic / TxMic based on Supp / Authenticator
++ if (pAd->ApCfg.MBSSID[apidx].AuthMode == Ndis802_11AuthModeWPANone)
++ {
++ // for WPA-None Tx, Rx MIC is the same
++ pTxMic = (PUCHAR) (&pKey->KeyMaterial) + 16;
++ pRxMic = pTxMic;
++ }
++ else if (bAuthenticator == TRUE)
++ {
++ pTxMic = (PUCHAR) (&pKey->KeyMaterial) + 16;
++ pRxMic = (PUCHAR) (&pKey->KeyMaterial) + 24;
++ }
++ else
++ {
++ pRxMic = (PUCHAR) (&pKey->KeyMaterial) + 16;
++ pTxMic = (PUCHAR) (&pKey->KeyMaterial) + 24;
++ }
++
++ // 6. Check RxTsc
++ if (bKeyRSC == TRUE)
++ {
++ NdisMoveMemory(pAd->SharedKey[apidx][KeyIdx].RxTsc, &pKey->KeyRSC, 6);
++ NdisMoveMemory(pAd->MacTab.Content[BSSID_WCID].PairwiseKey.RxTsc, &pKey->KeyRSC, 6);
++ }
++ else
++ {
++ NdisZeroMemory(pAd->SharedKey[apidx][KeyIdx].RxTsc, 6);
++ }
++
++ // 7. Copy information into Pairwise Key structure.
++ // pKey->KeyLength will include TxMic and RxMic, therefore, we use 16 bytes hardcoded.
++ pAd->SharedKey[apidx][KeyIdx].KeyLen = (UCHAR) pKey->KeyLength;
++ pAd->MacTab.Content[BSSID_WCID].PairwiseKey.KeyLen = (UCHAR)pKey->KeyLength;
++ NdisMoveMemory(pAd->SharedKey[BSS0][KeyIdx].Key, &pKey->KeyMaterial, 16);
++ NdisMoveMemory(pAd->MacTab.Content[BSSID_WCID].PairwiseKey.Key, &pKey->KeyMaterial, 16);
++ if (pKey->KeyLength == LEN_TKIP_KEY)
++ {
++ // Only Key lenth equal to TKIP key have these
++ NdisMoveMemory(pAd->SharedKey[apidx][KeyIdx].RxMic, pRxMic, 8);
++ NdisMoveMemory(pAd->SharedKey[apidx][KeyIdx].TxMic, pTxMic, 8);
++ NdisMoveMemory(pAd->MacTab.Content[BSSID_WCID].PairwiseKey.RxMic, pRxMic, 8);
++ NdisMoveMemory(pAd->MacTab.Content[BSSID_WCID].PairwiseKey.TxMic, pTxMic, 8);
++ }
++
++ COPY_MAC_ADDR(pAd->SharedKey[BSS0][KeyIdx].BssId, pKey->BSSID);
++
++ // Init TxTsc to one based on WiFi WPA specs
++ pAd->SharedKey[apidx][KeyIdx].TxTsc[0] = 1;
++ pAd->SharedKey[apidx][KeyIdx].TxTsc[1] = 0;
++ pAd->SharedKey[apidx][KeyIdx].TxTsc[2] = 0;
++ pAd->SharedKey[apidx][KeyIdx].TxTsc[3] = 0;
++ pAd->SharedKey[apidx][KeyIdx].TxTsc[4] = 0;
++ pAd->SharedKey[apidx][KeyIdx].TxTsc[5] = 0;
++ // 4. Init TxTsc to one based on WiFi WPA specs
++ pAd->MacTab.Content[BSSID_WCID].PairwiseKey.TxTsc[0] = 1;
++ pAd->MacTab.Content[BSSID_WCID].PairwiseKey.TxTsc[1] = 0;
++ pAd->MacTab.Content[BSSID_WCID].PairwiseKey.TxTsc[2] = 0;
++ pAd->MacTab.Content[BSSID_WCID].PairwiseKey.TxTsc[3] = 0;
++ pAd->MacTab.Content[BSSID_WCID].PairwiseKey.TxTsc[4] = 0;
++ pAd->MacTab.Content[BSSID_WCID].PairwiseKey.TxTsc[5] = 0;
++
++ if (pAd->ApCfg.MBSSID[apidx].WepStatus == Ndis802_11Encryption3Enabled)
++ {
++ pAd->SharedKey[apidx][KeyIdx].CipherAlg = CIPHER_AES;
++ pAd->MacTab.Content[BSSID_WCID].PairwiseKey.CipherAlg = CIPHER_AES;
++ }
++ else if (pAd->ApCfg.MBSSID[apidx].WepStatus == Ndis802_11Encryption2Enabled)
++ {
++ pAd->SharedKey[apidx][KeyIdx].CipherAlg = CIPHER_TKIP;
++ pAd->MacTab.Content[BSSID_WCID].PairwiseKey.CipherAlg = CIPHER_TKIP;
++ }
++ else if (pAd->ApCfg.MBSSID[apidx].WepStatus == Ndis802_11Encryption1Enabled)
++ {
++ if (pAd->SharedKey[apidx][KeyIdx].KeyLen == 5)
++ {
++ pAd->SharedKey[apidx][KeyIdx].CipherAlg = CIPHER_WEP64;
++ pAd->MacTab.Content[BSSID_WCID].PairwiseKey.CipherAlg = CIPHER_WEP64;
++ }
++ else if (pAd->SharedKey[apidx][KeyIdx].KeyLen == 13)
++ {
++ pAd->SharedKey[apidx][KeyIdx].CipherAlg = CIPHER_WEP128;
++ pAd->MacTab.Content[BSSID_WCID].PairwiseKey.CipherAlg = CIPHER_WEP128;
++ }
++ else
++ {
++ pAd->SharedKey[apidx][KeyIdx].CipherAlg = CIPHER_NONE;
++ pAd->MacTab.Content[BSSID_WCID].PairwiseKey.CipherAlg = CIPHER_NONE;
++ }
++ }
++ else
++ {
++ pAd->SharedKey[apidx][KeyIdx].CipherAlg = CIPHER_NONE;
++ pAd->MacTab.Content[BSSID_WCID].PairwiseKey.CipherAlg = CIPHER_NONE;
++ }
++
++ if ((pAd->OpMode == OPMODE_STA)) // Pairwise Key. Add BSSID to WCTable
++ {
++ pAd->MacTab.Content[BSSID_WCID].PairwiseKey.CipherAlg = pAd->SharedKey[BSS0][KeyIdx].CipherAlg;
++ pAd->MacTab.Content[BSSID_WCID].PairwiseKey.KeyLen = pAd->SharedKey[BSS0][KeyIdx].KeyLen;
++ }
++
++ if ((pAd->ApCfg.MBSSID[apidx].AuthMode == Ndis802_11AuthModeWPA2) ||
++ (pAd->ApCfg.MBSSID[apidx].AuthMode == Ndis802_11AuthModeWPA2PSK))
++ {
++ //
++ // On WPA2, Update Group Key Cipher.
++ //
++ if (!bPairwise)
++ {
++ if (pAd->StaCfg.GroupCipher == Ndis802_11Encryption3Enabled)
++ pAd->SharedKey[apidx][KeyIdx].CipherAlg = CIPHER_AES;
++ else if (pAd->StaCfg.GroupCipher == Ndis802_11Encryption2Enabled)
++ pAd->SharedKey[apidx][KeyIdx].CipherAlg = CIPHER_TKIP;
++ }
++ }
++
++ DBGPRINT(RT_DEBUG_TRACE, ("pAd->SharedKey[%d][%d].CipherAlg = %d\n", apidx, KeyIdx, pAd->SharedKey[apidx][KeyIdx].CipherAlg));
++
++#if 0
++ DBGPRINT_RAW(RT_DEBUG_TRACE, ("%s Key #%d", CipherName[pAd->SharedKey[apidx][KeyIdx].CipherAlg],KeyIdx));
++ for (i = 0; i < 16; i++)
++ {
++ DBGPRINT_RAW(RT_DEBUG_TRACE, ("%02x:", pAd->SharedKey[apidx][KeyIdx].Key[i]));
++ }
++ DBGPRINT_RAW(RT_DEBUG_TRACE, ("\n Rx MIC Key = "));
++ for (i = 0; i < 8; i++)
++ {
++ DBGPRINT_RAW(RT_DEBUG_TRACE, ("%02x:", pAd->SharedKey[apidx][KeyIdx].RxMic[i]));
++ }
++ DBGPRINT_RAW(RT_DEBUG_TRACE, ("\n Tx MIC Key = "));
++ for (i = 0; i < 8; i++)
++ {
++ DBGPRINT_RAW(RT_DEBUG_TRACE, ("%02x:", pAd->SharedKey[apidx][KeyIdx].TxMic[i]));
++ }
++ DBGPRINT_RAW(RT_DEBUG_TRACE, ("\n RxTSC = "));
++ for (i = 0; i < 6; i++)
++ {
++ DBGPRINT_RAW(RT_DEBUG_TRACE, ("%02x:", pAd->SharedKey[apidx][KeyIdx].RxTsc[i]));
++ }
++#endif
++ DBGPRINT_RAW(RT_DEBUG_TRACE, ("\n pKey-> BSSID:%02x:%02x:%02x:%02x:%02x:%02x \n",
++ pKey->BSSID[0],pKey->BSSID[1],pKey->BSSID[2],pKey->BSSID[3],pKey->BSSID[4],pKey->BSSID[5]));
++
++ if ((bTxKey) && (pAd->OpMode == OPMODE_STA)) // Pairwise Key. Add BSSID to WCTable
++ RTMPAddBSSIDCipher(pAd, BSSID_WCID, pKey, pAd->SharedKey[BSS0][KeyIdx].CipherAlg);
++
++
++ // No matter pairwise key or what leyidx is, always has a copy at on-chip SharedKeytable.
++ AsicAddSharedKeyEntry(pAd,
++ apidx,
++ (UCHAR)KeyIdx,
++ pAd->SharedKey[apidx][KeyIdx].CipherAlg,
++ pAd->SharedKey[apidx][KeyIdx].Key,
++ pAd->SharedKey[apidx][KeyIdx].TxMic,
++ pAd->SharedKey[apidx][KeyIdx].RxMic);
++
++ // The WCID key specified in used at Tx. For STA, always use pairwise key.
++
++ // ad-hoc mode need to specify WAP Group key with WCID index=BSS0Mcast_WCID. Let's always set this key here.
++/* if (bPairwise == FALSE)
++ {
++ offset = MAC_IVEIV_TABLE_BASE + (BSS0Mcast_WCID * HW_IVEIV_ENTRY_SIZE);
++ NdisZeroMemory(IVEIV, 8);
++ // 1. IV/EIV
++ // Specify key index to find shared key.
++ if ((pAd->SharedKey[BSS0][KeyIdx].CipherAlg==CIPHER_TKIP) ||
++ (pAd->SharedKey[BSS0][KeyIdx].CipherAlg==CIPHER_AES))
++ IVEIV[3] = 0x20; // Eiv bit on. keyid always 0 for pairwise key
++ IVEIV[3] |= (KeyIdx<< 6); // groupkey index is not 0
++ for (i=0; i<8; i++)
++ {
++ RTMP_IO_WRITE8(pAd, offset+i, IVEIV[i]);
++ }
++
++ // 2. WCID Attribute UDF:3, BSSIdx:3, Alg:3, Keytable:use share key, BSSIdx is 0
++ WCIDAttri = (pAd->SharedKey[BSS0][KeyIdx].CipherAlg<<1)|PAIRWISEKEYTABLE;
++ offset = MAC_WCID_ATTRIBUTE_BASE + (BSS0Mcast_WCID* HW_WCID_ATTRI_SIZE);
++ RTMP_IO_WRITE32(pAd, offset, WCIDAttri);
++
++ }
++
++*/
++
++ if (pAd->SharedKey[apidx][KeyIdx].Type == GROUP_KEY)
++ {
++ // 802.1x port control
++ pAd->StaCfg.PortSecured = WPA_802_1X_PORT_SECURED;
++ DBGPRINT(RT_DEBUG_TRACE,("!!WPA_802_1X_PORT_SECURED!!\n"));
++
++ }
++
++ return (NDIS_STATUS_SUCCESS);
++}
++#endif
++
++BOOLEAN RTMPCheckStrPrintAble(
++ IN CHAR *pInPutStr,
++ IN UCHAR strLen)
++{
++ UCHAR i=0;
++
++ for (i=0; i<strLen; i++)
++ {
++ if ((pInPutStr[i] < 0x21) ||
++ (pInPutStr[i] > 0x7E))
++ return FALSE;
++ }
++
++ return TRUE;
++}
++
++/*
++ ========================================================================
++
++ Routine Description:
++ Remove WPA Key process
++
++ Arguments:
++ pAd Pointer to our adapter
++ pBuf Pointer to the where the key stored
++
++ Return Value:
++ NDIS_SUCCESS Add key successfully
++
++ IRQL = DISPATCH_LEVEL
++
++ Note:
++
++ ========================================================================
++*/
++#ifdef CONFIG_STA_SUPPORT
++VOID RTMPSetDesiredRates(
++ IN PRTMP_ADAPTER pAdapter,
++ IN LONG Rates)
++{
++ NDIS_802_11_RATES aryRates;
++
++ memset(&aryRates, 0x00, sizeof(NDIS_802_11_RATES));
++ switch (pAdapter->CommonCfg.PhyMode)
++ {
++ case PHY_11A: // A only
++ switch (Rates)
++ {
++ case 6000000: //6M
++ aryRates[0] = 0x0c; // 6M
++ pAdapter->StaCfg.DesiredTransmitSetting.field.MCS = MCS_0;
++ break;
++ case 9000000: //9M
++ aryRates[0] = 0x12; // 9M
++ pAdapter->StaCfg.DesiredTransmitSetting.field.MCS = MCS_1;
++ break;
++ case 12000000: //12M
++ aryRates[0] = 0x18; // 12M
++ pAdapter->StaCfg.DesiredTransmitSetting.field.MCS = MCS_2;
++ break;
++ case 18000000: //18M
++ aryRates[0] = 0x24; // 18M
++ pAdapter->StaCfg.DesiredTransmitSetting.field.MCS = MCS_3;
++ break;
++ case 24000000: //24M
++ aryRates[0] = 0x30; // 24M
++ pAdapter->StaCfg.DesiredTransmitSetting.field.MCS = MCS_4;
++ break;
++ case 36000000: //36M
++ aryRates[0] = 0x48; // 36M
++ pAdapter->StaCfg.DesiredTransmitSetting.field.MCS = MCS_5;
++ break;
++ case 48000000: //48M
++ aryRates[0] = 0x60; // 48M
++ pAdapter->StaCfg.DesiredTransmitSetting.field.MCS = MCS_6;
++ break;
++ case 54000000: //54M
++ aryRates[0] = 0x6c; // 54M
++ pAdapter->StaCfg.DesiredTransmitSetting.field.MCS = MCS_7;
++ break;
++ case -1: //Auto
++ default:
++ aryRates[0] = 0x6c; // 54Mbps
++ aryRates[1] = 0x60; // 48Mbps
++ aryRates[2] = 0x48; // 36Mbps
++ aryRates[3] = 0x30; // 24Mbps
++ aryRates[4] = 0x24; // 18M
++ aryRates[5] = 0x18; // 12M
++ aryRates[6] = 0x12; // 9M
++ aryRates[7] = 0x0c; // 6M
++ pAdapter->StaCfg.DesiredTransmitSetting.field.MCS = MCS_AUTO;
++ break;
++ }
++ break;
++ case PHY_11BG_MIXED: // B/G Mixed
++ case PHY_11B: // B only
++ case PHY_11ABG_MIXED: // A/B/G Mixed
++ default:
++ switch (Rates)
++ {
++ case 1000000: //1M
++ aryRates[0] = 0x02;
++ pAdapter->StaCfg.DesiredTransmitSetting.field.MCS = MCS_0;
++ break;
++ case 2000000: //2M
++ aryRates[0] = 0x04;
++ pAdapter->StaCfg.DesiredTransmitSetting.field.MCS = MCS_1;
++ break;
++ case 5000000: //5.5M
++ aryRates[0] = 0x0b; // 5.5M
++ pAdapter->StaCfg.DesiredTransmitSetting.field.MCS = MCS_2;
++ break;
++ case 11000000: //11M
++ aryRates[0] = 0x16; // 11M
++ pAdapter->StaCfg.DesiredTransmitSetting.field.MCS = MCS_3;
++ break;
++ case 6000000: //6M
++ aryRates[0] = 0x0c; // 6M
++ pAdapter->StaCfg.DesiredTransmitSetting.field.MCS = MCS_0;
++ break;
++ case 9000000: //9M
++ aryRates[0] = 0x12; // 9M
++ pAdapter->StaCfg.DesiredTransmitSetting.field.MCS = MCS_1;
++ break;
++ case 12000000: //12M
++ aryRates[0] = 0x18; // 12M
++ pAdapter->StaCfg.DesiredTransmitSetting.field.MCS = MCS_2;
++ break;
++ case 18000000: //18M
++ aryRates[0] = 0x24; // 18M
++ pAdapter->StaCfg.DesiredTransmitSetting.field.MCS = MCS_3;
++ break;
++ case 24000000: //24M
++ aryRates[0] = 0x30; // 24M
++ pAdapter->StaCfg.DesiredTransmitSetting.field.MCS = MCS_4;
++ break;
++ case 36000000: //36M
++ aryRates[0] = 0x48; // 36M
++ pAdapter->StaCfg.DesiredTransmitSetting.field.MCS = MCS_5;
++ break;
++ case 48000000: //48M
++ aryRates[0] = 0x60; // 48M
++ pAdapter->StaCfg.DesiredTransmitSetting.field.MCS = MCS_6;
++ break;
++ case 54000000: //54M
++ aryRates[0] = 0x6c; // 54M
++ pAdapter->StaCfg.DesiredTransmitSetting.field.MCS = MCS_7;
++ break;
++ case -1: //Auto
++ default:
++ if (pAdapter->CommonCfg.PhyMode == PHY_11B)
++ { //B Only
++ aryRates[0] = 0x16; // 11Mbps
++ aryRates[1] = 0x0b; // 5.5Mbps
++ aryRates[2] = 0x04; // 2Mbps
++ aryRates[3] = 0x02; // 1Mbps
++ }
++ else
++ { //(B/G) Mixed or (A/B/G) Mixed
++ aryRates[0] = 0x6c; // 54Mbps
++ aryRates[1] = 0x60; // 48Mbps
++ aryRates[2] = 0x48; // 36Mbps
++ aryRates[3] = 0x30; // 24Mbps
++ aryRates[4] = 0x16; // 11Mbps
++ aryRates[5] = 0x0b; // 5.5Mbps
++ aryRates[6] = 0x04; // 2Mbps
++ aryRates[7] = 0x02; // 1Mbps
++ }
++ pAdapter->StaCfg.DesiredTransmitSetting.field.MCS = MCS_AUTO;
++ break;
++ }
++ break;
++ }
++
++ NdisZeroMemory(pAdapter->CommonCfg.DesireRate, MAX_LEN_OF_SUPPORTED_RATES);
++ NdisMoveMemory(pAdapter->CommonCfg.DesireRate, &aryRates, sizeof(NDIS_802_11_RATES));
++ DBGPRINT(RT_DEBUG_TRACE, (" RTMPSetDesiredRates (%02x,%02x,%02x,%02x,%02x,%02x,%02x,%02x)\n",
++ pAdapter->CommonCfg.DesireRate[0],pAdapter->CommonCfg.DesireRate[1],
++ pAdapter->CommonCfg.DesireRate[2],pAdapter->CommonCfg.DesireRate[3],
++ pAdapter->CommonCfg.DesireRate[4],pAdapter->CommonCfg.DesireRate[5],
++ pAdapter->CommonCfg.DesireRate[6],pAdapter->CommonCfg.DesireRate[7] ));
++ // Changing DesiredRate may affect the MAX TX rate we used to TX frames out
++ MlmeUpdateTxRates(pAdapter, FALSE, 0);
++}
++
++NDIS_STATUS RTMPWPARemoveKeyProc(
++ IN PRTMP_ADAPTER pAd,
++ IN PVOID pBuf)
++{
++ PNDIS_802_11_REMOVE_KEY pKey;
++ ULONG KeyIdx;
++ NDIS_STATUS Status = NDIS_STATUS_FAILURE;
++ BOOLEAN bTxKey; // Set the key as transmit key
++ BOOLEAN bPairwise; // Indicate the key is pairwise key
++ BOOLEAN bKeyRSC; // indicate the receive SC set by KeyRSC value.
++ // Otherwise, it will set by the NIC.
++ BOOLEAN bAuthenticator; // indicate key is set by authenticator.
++ INT i;
++
++ DBGPRINT(RT_DEBUG_TRACE,("---> RTMPWPARemoveKeyProc\n"));
++
++ pKey = (PNDIS_802_11_REMOVE_KEY) pBuf;
++ KeyIdx = pKey->KeyIndex & 0xff;
++ // Bit 31 of Add-key, Tx Key
++ bTxKey = (pKey->KeyIndex & 0x80000000) ? TRUE : FALSE;
++ // Bit 30 of Add-key PairwiseKey
++ bPairwise = (pKey->KeyIndex & 0x40000000) ? TRUE : FALSE;
++ // Bit 29 of Add-key KeyRSC
++ bKeyRSC = (pKey->KeyIndex & 0x20000000) ? TRUE : FALSE;
++ // Bit 28 of Add-key Authenticator
++ bAuthenticator = (pKey->KeyIndex & 0x10000000) ? TRUE : FALSE;
++
++ // 1. If bTx is TRUE, return failure information
++ if (bTxKey == TRUE)
++ return(NDIS_STATUS_INVALID_DATA);
++
++ // 2. Check Pairwise Key
++ if (bPairwise)
++ {
++ // a. If BSSID is broadcast, remove all pairwise keys.
++ // b. If not broadcast, remove the pairwise specified by BSSID
++ for (i = 0; i < SHARE_KEY_NUM; i++)
++ {
++ if (MAC_ADDR_EQUAL(pAd->SharedKey[BSS0][i].BssId, pKey->BSSID))
++ {
++ DBGPRINT(RT_DEBUG_TRACE,("RTMPWPARemoveKeyProc(KeyIdx=%d)\n", i));
++ pAd->SharedKey[BSS0][i].KeyLen = 0;
++ pAd->SharedKey[BSS0][i].CipherAlg = CIPHER_NONE;
++ AsicRemoveSharedKeyEntry(pAd, BSS0, (UCHAR)i);
++ Status = NDIS_STATUS_SUCCESS;
++ break;
++ }
++ }
++ }
++ // 3. Group Key
++ else
++ {
++ // a. If BSSID is broadcast, remove all group keys indexed
++ // b. If BSSID matched, delete the group key indexed.
++ DBGPRINT(RT_DEBUG_TRACE,("RTMPWPARemoveKeyProc(KeyIdx=%ld)\n", KeyIdx));
++ pAd->SharedKey[BSS0][KeyIdx].KeyLen = 0;
++ pAd->SharedKey[BSS0][KeyIdx].CipherAlg = CIPHER_NONE;
++ AsicRemoveSharedKeyEntry(pAd, BSS0, (UCHAR)KeyIdx);
++ Status = NDIS_STATUS_SUCCESS;
++ }
++
++ return (Status);
++}
++#endif // CONFIG_STA_SUPPORT //
++
++
++#ifdef CONFIG_STA_SUPPORT
++/*
++ ========================================================================
++
++ Routine Description:
++ Remove All WPA Keys
++
++ Arguments:
++ pAd Pointer to our adapter
++
++ Return Value:
++ None
++
++ IRQL = DISPATCH_LEVEL
++
++ Note:
++
++ ========================================================================
++*/
++VOID RTMPWPARemoveAllKeys(
++ IN PRTMP_ADAPTER pAd)
++{
++
++ UCHAR i;
++
++ DBGPRINT(RT_DEBUG_TRACE,("RTMPWPARemoveAllKeys(AuthMode=%d, WepStatus=%d)\n", pAd->StaCfg.AuthMode, pAd->StaCfg.WepStatus));
++
++ // For WEP/CKIP, there is no need to remove it, since WinXP won't set it again after
++ // Link up. And it will be replaced if user changed it.
++ if (pAd->StaCfg.AuthMode < Ndis802_11AuthModeWPA)
++ return;
++
++ // For WPA-None, there is no need to remove it, since WinXP won't set it again after
++ // Link up. And it will be replaced if user changed it.
++ if (pAd->StaCfg.AuthMode == Ndis802_11AuthModeWPANone)
++ return;
++
++ // set BSSID wcid entry of the Pair-wise Key table as no-security mode
++ AsicRemovePairwiseKeyEntry(pAd, BSS0, BSSID_WCID);
++
++ // set all shared key mode as no-security.
++ for (i = 0; i < SHARE_KEY_NUM; i++)
++ {
++ DBGPRINT(RT_DEBUG_TRACE,("remove %s key #%d\n", CipherName[pAd->SharedKey[BSS0][i].CipherAlg], i));
++ NdisZeroMemory(&pAd->SharedKey[BSS0][i], sizeof(CIPHER_KEY));
++
++ AsicRemoveSharedKeyEntry(pAd, BSS0, i);
++ }
++
++}
++#endif // CONFIG_STA_SUPPORT //
++
++/*
++ ========================================================================
++ Routine Description:
++ Change NIC PHY mode. Re-association may be necessary. possible settings
++ include - PHY_11B, PHY_11BG_MIXED, PHY_11A, and PHY_11ABG_MIXED
++
++ Arguments:
++ pAd - Pointer to our adapter
++ phymode -
++
++ IRQL = PASSIVE_LEVEL
++ IRQL = DISPATCH_LEVEL
++
++ ========================================================================
++*/
++VOID RTMPSetPhyMode(
++ IN PRTMP_ADAPTER pAd,
++ IN ULONG phymode)
++{
++ INT i;
++ // the selected phymode must be supported by the RF IC encoded in E2PROM
++
++ // if no change, do nothing
++ /* bug fix
++ if (pAd->CommonCfg.PhyMode == phymode)
++ return;
++ */
++ pAd->CommonCfg.PhyMode = (UCHAR)phymode;
++
++ DBGPRINT(RT_DEBUG_TRACE,("RTMPSetPhyMode : PhyMode=%d, channel=%d \n", pAd->CommonCfg.PhyMode, pAd->CommonCfg.Channel));
++#ifdef EXT_BUILD_CHANNEL_LIST
++ BuildChannelListEx(pAd);
++#else
++ BuildChannelList(pAd);
++#endif // EXT_BUILD_CHANNEL_LIST //
++
++ // sanity check user setting
++ for (i = 0; i < pAd->ChannelListNum; i++)
++ {
++ if (pAd->CommonCfg.Channel == pAd->ChannelList[i].Channel)
++ break;
++ }
++
++ if (i == pAd->ChannelListNum)
++ {
++#ifdef CONFIG_STA_SUPPORT
++ IF_DEV_CONFIG_OPMODE_ON_STA(pAd)
++ pAd->CommonCfg.Channel = FirstChannel(pAd);
++#endif // CONFIG_STA_SUPPORT //
++ DBGPRINT(RT_DEBUG_ERROR, ("RTMPSetPhyMode: channel is out of range, use first channel=%d \n", pAd->CommonCfg.Channel));
++ }
++
++ NdisZeroMemory(pAd->CommonCfg.SupRate, MAX_LEN_OF_SUPPORTED_RATES);
++ NdisZeroMemory(pAd->CommonCfg.ExtRate, MAX_LEN_OF_SUPPORTED_RATES);
++ NdisZeroMemory(pAd->CommonCfg.DesireRate, MAX_LEN_OF_SUPPORTED_RATES);
++ switch (phymode) {
++ case PHY_11B:
++ pAd->CommonCfg.SupRate[0] = 0x82; // 1 mbps, in units of 0.5 Mbps, basic rate
++ pAd->CommonCfg.SupRate[1] = 0x84; // 2 mbps, in units of 0.5 Mbps, basic rate
++ pAd->CommonCfg.SupRate[2] = 0x8B; // 5.5 mbps, in units of 0.5 Mbps, basic rate
++ pAd->CommonCfg.SupRate[3] = 0x96; // 11 mbps, in units of 0.5 Mbps, basic rate
++ pAd->CommonCfg.SupRateLen = 4;
++ pAd->CommonCfg.ExtRateLen = 0;
++ pAd->CommonCfg.DesireRate[0] = 2; // 1 mbps, in units of 0.5 Mbps
++ pAd->CommonCfg.DesireRate[1] = 4; // 2 mbps, in units of 0.5 Mbps
++ pAd->CommonCfg.DesireRate[2] = 11; // 5.5 mbps, in units of 0.5 Mbps
++ pAd->CommonCfg.DesireRate[3] = 22; // 11 mbps, in units of 0.5 Mbps
++ //pAd->CommonCfg.HTPhyMode.field.MODE = MODE_CCK; // This MODE is only FYI. not use
++ break;
++
++ case PHY_11G:
++ case PHY_11BG_MIXED:
++ case PHY_11ABG_MIXED:
++#ifdef DOT11_N_SUPPORT
++ case PHY_11N_2_4G:
++ case PHY_11ABGN_MIXED:
++ case PHY_11BGN_MIXED:
++ case PHY_11GN_MIXED:
++#endif // DOT11_N_SUPPORT //
++ pAd->CommonCfg.SupRate[0] = 0x82; // 1 mbps, in units of 0.5 Mbps, basic rate
++ pAd->CommonCfg.SupRate[1] = 0x84; // 2 mbps, in units of 0.5 Mbps, basic rate
++ pAd->CommonCfg.SupRate[2] = 0x8B; // 5.5 mbps, in units of 0.5 Mbps, basic rate
++ pAd->CommonCfg.SupRate[3] = 0x96; // 11 mbps, in units of 0.5 Mbps, basic rate
++ pAd->CommonCfg.SupRate[4] = 0x12; // 9 mbps, in units of 0.5 Mbps
++ pAd->CommonCfg.SupRate[5] = 0x24; // 18 mbps, in units of 0.5 Mbps
++ pAd->CommonCfg.SupRate[6] = 0x48; // 36 mbps, in units of 0.5 Mbps
++ pAd->CommonCfg.SupRate[7] = 0x6c; // 54 mbps, in units of 0.5 Mbps
++ pAd->CommonCfg.SupRateLen = 8;
++ pAd->CommonCfg.ExtRate[0] = 0x0C; // 6 mbps, in units of 0.5 Mbps
++ pAd->CommonCfg.ExtRate[1] = 0x18; // 12 mbps, in units of 0.5 Mbps
++ pAd->CommonCfg.ExtRate[2] = 0x30; // 24 mbps, in units of 0.5 Mbps
++ pAd->CommonCfg.ExtRate[3] = 0x60; // 48 mbps, in units of 0.5 Mbps
++ pAd->CommonCfg.ExtRateLen = 4;
++ pAd->CommonCfg.DesireRate[0] = 2; // 1 mbps, in units of 0.5 Mbps
++ pAd->CommonCfg.DesireRate[1] = 4; // 2 mbps, in units of 0.5 Mbps
++ pAd->CommonCfg.DesireRate[2] = 11; // 5.5 mbps, in units of 0.5 Mbps
++ pAd->CommonCfg.DesireRate[3] = 22; // 11 mbps, in units of 0.5 Mbps
++ pAd->CommonCfg.DesireRate[4] = 12; // 6 mbps, in units of 0.5 Mbps
++ pAd->CommonCfg.DesireRate[5] = 18; // 9 mbps, in units of 0.5 Mbps
++ pAd->CommonCfg.DesireRate[6] = 24; // 12 mbps, in units of 0.5 Mbps
++ pAd->CommonCfg.DesireRate[7] = 36; // 18 mbps, in units of 0.5 Mbps
++ pAd->CommonCfg.DesireRate[8] = 48; // 24 mbps, in units of 0.5 Mbps
++ pAd->CommonCfg.DesireRate[9] = 72; // 36 mbps, in units of 0.5 Mbps
++ pAd->CommonCfg.DesireRate[10] = 96; // 48 mbps, in units of 0.5 Mbps
++ pAd->CommonCfg.DesireRate[11] = 108; // 54 mbps, in units of 0.5 Mbps
++ break;
++
++ case PHY_11A:
++#ifdef DOT11_N_SUPPORT
++ case PHY_11AN_MIXED:
++ case PHY_11AGN_MIXED:
++ case PHY_11N_5G:
++#endif // DOT11_N_SUPPORT //
++ pAd->CommonCfg.SupRate[0] = 0x8C; // 6 mbps, in units of 0.5 Mbps, basic rate
++ pAd->CommonCfg.SupRate[1] = 0x12; // 9 mbps, in units of 0.5 Mbps
++ pAd->CommonCfg.SupRate[2] = 0x98; // 12 mbps, in units of 0.5 Mbps, basic rate
++ pAd->CommonCfg.SupRate[3] = 0x24; // 18 mbps, in units of 0.5 Mbps
++ pAd->CommonCfg.SupRate[4] = 0xb0; // 24 mbps, in units of 0.5 Mbps, basic rate
++ pAd->CommonCfg.SupRate[5] = 0x48; // 36 mbps, in units of 0.5 Mbps
++ pAd->CommonCfg.SupRate[6] = 0x60; // 48 mbps, in units of 0.5 Mbps
++ pAd->CommonCfg.SupRate[7] = 0x6c; // 54 mbps, in units of 0.5 Mbps
++ pAd->CommonCfg.SupRateLen = 8;
++ pAd->CommonCfg.ExtRateLen = 0;
++ pAd->CommonCfg.DesireRate[0] = 12; // 6 mbps, in units of 0.5 Mbps
++ pAd->CommonCfg.DesireRate[1] = 18; // 9 mbps, in units of 0.5 Mbps
++ pAd->CommonCfg.DesireRate[2] = 24; // 12 mbps, in units of 0.5 Mbps
++ pAd->CommonCfg.DesireRate[3] = 36; // 18 mbps, in units of 0.5 Mbps
++ pAd->CommonCfg.DesireRate[4] = 48; // 24 mbps, in units of 0.5 Mbps
++ pAd->CommonCfg.DesireRate[5] = 72; // 36 mbps, in units of 0.5 Mbps
++ pAd->CommonCfg.DesireRate[6] = 96; // 48 mbps, in units of 0.5 Mbps
++ pAd->CommonCfg.DesireRate[7] = 108; // 54 mbps, in units of 0.5 Mbps
++ //pAd->CommonCfg.HTPhyMode.field.MODE = MODE_OFDM; // This MODE is only FYI. not use
++ break;
++
++ default:
++ break;
++ }
++
++
++ pAd->CommonCfg.BandState = UNKNOWN_BAND;
++}
++
++
++#ifdef DOT11_N_SUPPORT
++/*
++ ========================================================================
++ Routine Description:
++ Caller ensures we has 802.11n support.
++ Calls at setting HT from AP/STASetinformation
++
++ Arguments:
++ pAd - Pointer to our adapter
++ phymode -
++
++ ========================================================================
++*/
++VOID RTMPSetHT(
++ IN PRTMP_ADAPTER pAd,
++ IN OID_SET_HT_PHYMODE *pHTPhyMode)
++{
++ //ULONG *pmcs;
++ UINT32 Value = 0;
++ UCHAR BBPValue = 0;
++ UCHAR BBP3Value = 0;
++ UCHAR RxStream = pAd->CommonCfg.RxStream;
++
++ DBGPRINT(RT_DEBUG_TRACE, ("RTMPSetHT : HT_mode(%d), ExtOffset(%d), MCS(%d), BW(%d), STBC(%d), SHORTGI(%d)\n",
++ pHTPhyMode->HtMode, pHTPhyMode->ExtOffset,
++ pHTPhyMode->MCS, pHTPhyMode->BW,
++ pHTPhyMode->STBC, pHTPhyMode->SHORTGI));
++
++ // Don't zero supportedHyPhy structure.
++ RTMPZeroMemory(&pAd->CommonCfg.HtCapability, sizeof(pAd->CommonCfg.HtCapability));
++ RTMPZeroMemory(&pAd->CommonCfg.AddHTInfo, sizeof(pAd->CommonCfg.AddHTInfo));
++ RTMPZeroMemory(&pAd->CommonCfg.NewExtChanOffset, sizeof(pAd->CommonCfg.NewExtChanOffset));
++ RTMPZeroMemory(&pAd->CommonCfg.DesiredHtPhy, sizeof(pAd->CommonCfg.DesiredHtPhy));
++
++ if (pAd->CommonCfg.bRdg)
++ {
++ pAd->CommonCfg.HtCapability.ExtHtCapInfo.PlusHTC = 1;
++ pAd->CommonCfg.HtCapability.ExtHtCapInfo.RDGSupport = 1;
++ }
++ else
++ {
++ pAd->CommonCfg.HtCapability.ExtHtCapInfo.PlusHTC = 0;
++ pAd->CommonCfg.HtCapability.ExtHtCapInfo.RDGSupport = 0;
++ }
++
++ pAd->CommonCfg.HtCapability.HtCapParm.MaxRAmpduFactor = 3;
++ pAd->CommonCfg.DesiredHtPhy.MaxRAmpduFactor = 3;
++
++ DBGPRINT(RT_DEBUG_TRACE, ("RTMPSetHT : RxBAWinLimit = %d\n", pAd->CommonCfg.BACapability.field.RxBAWinLimit));
++
++ // Mimo power save, A-MSDU size,
++ pAd->CommonCfg.DesiredHtPhy.AmsduEnable = (USHORT)pAd->CommonCfg.BACapability.field.AmsduEnable;
++ pAd->CommonCfg.DesiredHtPhy.AmsduSize = (UCHAR)pAd->CommonCfg.BACapability.field.AmsduSize;
++ pAd->CommonCfg.DesiredHtPhy.MimoPs = (UCHAR)pAd->CommonCfg.BACapability.field.MMPSmode;
++ pAd->CommonCfg.DesiredHtPhy.MpduDensity = (UCHAR)pAd->CommonCfg.BACapability.field.MpduDensity;
++
++ pAd->CommonCfg.HtCapability.HtCapInfo.AMsduSize = (USHORT)pAd->CommonCfg.BACapability.field.AmsduSize;
++ pAd->CommonCfg.HtCapability.HtCapInfo.MimoPs = (USHORT)pAd->CommonCfg.BACapability.field.MMPSmode;
++ pAd->CommonCfg.HtCapability.HtCapParm.MpduDensity = (UCHAR)pAd->CommonCfg.BACapability.field.MpduDensity;
++
++ DBGPRINT(RT_DEBUG_TRACE, ("RTMPSetHT : AMsduSize = %d, MimoPs = %d, MpduDensity = %d, MaxRAmpduFactor = %d\n",
++ pAd->CommonCfg.DesiredHtPhy.AmsduSize,
++ pAd->CommonCfg.DesiredHtPhy.MimoPs,
++ pAd->CommonCfg.DesiredHtPhy.MpduDensity,
++ pAd->CommonCfg.DesiredHtPhy.MaxRAmpduFactor));
++
++ if(pHTPhyMode->HtMode == HTMODE_GF)
++ {
++ pAd->CommonCfg.HtCapability.HtCapInfo.GF = 1;
++ pAd->CommonCfg.DesiredHtPhy.GF = 1;
++ }
++ else
++ pAd->CommonCfg.DesiredHtPhy.GF = 0;
++
++ // Decide Rx MCSSet
++ switch (RxStream)
++ {
++ case 1:
++ pAd->CommonCfg.HtCapability.MCSSet[0] = 0xff;
++ pAd->CommonCfg.HtCapability.MCSSet[1] = 0x00;
++ break;
++
++ case 2:
++ pAd->CommonCfg.HtCapability.MCSSet[0] = 0xff;
++ pAd->CommonCfg.HtCapability.MCSSet[1] = 0xff;
++ break;
++
++ case 3: // 3*3
++ pAd->CommonCfg.HtCapability.MCSSet[0] = 0xff;
++ pAd->CommonCfg.HtCapability.MCSSet[1] = 0xff;
++ pAd->CommonCfg.HtCapability.MCSSet[2] = 0xff;
++ break;
++ }
++
++ if (pAd->CommonCfg.bForty_Mhz_Intolerant && (pAd->CommonCfg.Channel <= 14) && (pHTPhyMode->BW == BW_40) )
++ {
++ pHTPhyMode->BW = BW_20;
++ pAd->CommonCfg.HtCapability.HtCapInfo.Forty_Mhz_Intolerant = 1;
++ }
++
++ if(pHTPhyMode->BW == BW_40)
++ {
++ pAd->CommonCfg.HtCapability.MCSSet[4] = 0x1; // MCS 32
++ pAd->CommonCfg.HtCapability.HtCapInfo.ChannelWidth = 1;
++ if (pAd->CommonCfg.Channel <= 14)
++ pAd->CommonCfg.HtCapability.HtCapInfo.CCKmodein40 = 1;
++
++ pAd->CommonCfg.DesiredHtPhy.ChannelWidth = 1;
++ pAd->CommonCfg.AddHTInfo.AddHtInfo.RecomWidth = 1;
++ pAd->CommonCfg.AddHTInfo.AddHtInfo.ExtChanOffset = (pHTPhyMode->ExtOffset == EXTCHA_BELOW)? (EXTCHA_BELOW): EXTCHA_ABOVE;
++ // Set Regsiter for extension channel position.
++ RTMP_IO_READ32(pAd, TX_BAND_CFG, &Value);
++ RTMP_BBP_IO_READ8_BY_REG_ID(pAd, BBP_R3, &BBP3Value);
++ if ((pHTPhyMode->ExtOffset == EXTCHA_BELOW))
++ {
++ Value |= 0x1;
++ BBP3Value |= (0x20);
++ RTMP_IO_WRITE32(pAd, TX_BAND_CFG, Value);
++ }
++ else if ((pHTPhyMode->ExtOffset == EXTCHA_ABOVE))
++ {
++ Value &= 0xfe;
++ BBP3Value &= (~0x20);
++ RTMP_IO_WRITE32(pAd, TX_BAND_CFG, Value);
++ }
++
++ // Turn on BBP 40MHz mode now only as AP .
++ // Sta can turn on BBP 40MHz after connection with 40MHz AP. Sta only broadcast 40MHz capability before connection.
++ if ((pAd->OpMode == OPMODE_AP) || INFRA_ON(pAd) || ADHOC_ON(pAd)
++ )
++ {
++ RTMP_BBP_IO_READ8_BY_REG_ID(pAd, BBP_R4, &BBPValue);
++ BBPValue &= (~0x18);
++ BBPValue |= 0x10;
++ RTMP_BBP_IO_WRITE8_BY_REG_ID(pAd, BBP_R4, BBPValue);
++
++ RTMP_BBP_IO_WRITE8_BY_REG_ID(pAd, BBP_R3, BBP3Value);
++ pAd->CommonCfg.BBPCurrentBW = BW_40;
++ }
++ }
++ else
++ {
++ pAd->CommonCfg.HtCapability.HtCapInfo.ChannelWidth = 0;
++ pAd->CommonCfg.DesiredHtPhy.ChannelWidth = 0;
++ pAd->CommonCfg.AddHTInfo.AddHtInfo.RecomWidth = 0;
++ pAd->CommonCfg.AddHTInfo.AddHtInfo.ExtChanOffset = EXTCHA_NONE;
++ pAd->CommonCfg.CentralChannel = pAd->CommonCfg.Channel;
++ // Turn on BBP 20MHz mode by request here.
++ {
++ RTMP_BBP_IO_READ8_BY_REG_ID(pAd, BBP_R4, &BBPValue);
++ BBPValue &= (~0x18);
++ RTMP_BBP_IO_WRITE8_BY_REG_ID(pAd, BBP_R4, BBPValue);
++ pAd->CommonCfg.BBPCurrentBW = BW_20;
++ }
++ }
++
++ if(pHTPhyMode->STBC == STBC_USE)
++ {
++ pAd->CommonCfg.HtCapability.HtCapInfo.TxSTBC = 1;
++ pAd->CommonCfg.DesiredHtPhy.TxSTBC = 1;
++ pAd->CommonCfg.HtCapability.HtCapInfo.RxSTBC = 1;
++ pAd->CommonCfg.DesiredHtPhy.RxSTBC = 1;
++ }
++ else
++ {
++ pAd->CommonCfg.DesiredHtPhy.TxSTBC = 0;
++ pAd->CommonCfg.DesiredHtPhy.RxSTBC = 0;
++ }
++
++#ifdef RT2870
++ /* Frank recommend ,If not, Tx maybe block in high power. Rx has no problem*/
++ if(IS_RT3070(pAd) && ((pAd->RfIcType == RFIC_3020) || (pAd->RfIcType == RFIC_2020)))
++ {
++ pAd->CommonCfg.HtCapability.HtCapInfo.TxSTBC = 0;
++ pAd->CommonCfg.DesiredHtPhy.TxSTBC = 0;
++ }
++#endif // RT2870 //
++
++ if(pHTPhyMode->SHORTGI == GI_400)
++ {
++ pAd->CommonCfg.HtCapability.HtCapInfo.ShortGIfor20 = 1;
++ pAd->CommonCfg.HtCapability.HtCapInfo.ShortGIfor40 = 1;
++ pAd->CommonCfg.DesiredHtPhy.ShortGIfor20 = 1;
++ pAd->CommonCfg.DesiredHtPhy.ShortGIfor40 = 1;
++ }
++ else
++ {
++ pAd->CommonCfg.HtCapability.HtCapInfo.ShortGIfor20 = 0;
++ pAd->CommonCfg.HtCapability.HtCapInfo.ShortGIfor40 = 0;
++ pAd->CommonCfg.DesiredHtPhy.ShortGIfor20 = 0;
++ pAd->CommonCfg.DesiredHtPhy.ShortGIfor40 = 0;
++ }
++
++ // We support link adaptation for unsolicit MCS feedback, set to 2.
++ pAd->CommonCfg.HtCapability.ExtHtCapInfo.MCSFeedback = MCSFBK_NONE; //MCSFBK_UNSOLICIT;
++ pAd->CommonCfg.AddHTInfo.ControlChan = pAd->CommonCfg.Channel;
++ // 1, the extension channel above the control channel.
++
++ // EDCA parameters used for AP's own transmission
++ if (pAd->CommonCfg.APEdcaParm.bValid == FALSE)
++ {
++ pAd->CommonCfg.APEdcaParm.bValid = TRUE;
++ pAd->CommonCfg.APEdcaParm.Aifsn[0] = 3;
++ pAd->CommonCfg.APEdcaParm.Aifsn[1] = 7;
++ pAd->CommonCfg.APEdcaParm.Aifsn[2] = 1;
++ pAd->CommonCfg.APEdcaParm.Aifsn[3] = 1;
++
++ pAd->CommonCfg.APEdcaParm.Cwmin[0] = 4;
++ pAd->CommonCfg.APEdcaParm.Cwmin[1] = 4;
++ pAd->CommonCfg.APEdcaParm.Cwmin[2] = 3;
++ pAd->CommonCfg.APEdcaParm.Cwmin[3] = 2;
++
++ pAd->CommonCfg.APEdcaParm.Cwmax[0] = 6;
++ pAd->CommonCfg.APEdcaParm.Cwmax[1] = 10;
++ pAd->CommonCfg.APEdcaParm.Cwmax[2] = 4;
++ pAd->CommonCfg.APEdcaParm.Cwmax[3] = 3;
++
++ pAd->CommonCfg.APEdcaParm.Txop[0] = 0;
++ pAd->CommonCfg.APEdcaParm.Txop[1] = 0;
++ pAd->CommonCfg.APEdcaParm.Txop[2] = 94;
++ pAd->CommonCfg.APEdcaParm.Txop[3] = 47;
++ }
++ AsicSetEdcaParm(pAd, &pAd->CommonCfg.APEdcaParm);
++
++
++#ifdef CONFIG_STA_SUPPORT
++ IF_DEV_CONFIG_OPMODE_ON_STA(pAd)
++ {
++ RTMPSetIndividualHT(pAd, 0);
++ }
++#endif // CONFIG_STA_SUPPORT //
++
++}
++
++/*
++ ========================================================================
++ Routine Description:
++ Caller ensures we has 802.11n support.
++ Calls at setting HT from AP/STASetinformation
++
++ Arguments:
++ pAd - Pointer to our adapter
++ phymode -
++
++ ========================================================================
++*/
++VOID RTMPSetIndividualHT(
++ IN PRTMP_ADAPTER pAd,
++ IN UCHAR apidx)
++{
++ PRT_HT_PHY_INFO pDesired_ht_phy = NULL;
++ UCHAR TxStream = pAd->CommonCfg.TxStream;
++ UCHAR DesiredMcs = MCS_AUTO;
++
++ do
++ {
++
++#ifdef CONFIG_STA_SUPPORT
++ IF_DEV_CONFIG_OPMODE_ON_STA(pAd)
++ {
++ pDesired_ht_phy = &pAd->StaCfg.DesiredHtPhyInfo;
++ DesiredMcs = pAd->StaCfg.DesiredTransmitSetting.field.MCS;
++ //pAd->StaCfg.bAutoTxRateSwitch = (DesiredMcs == MCS_AUTO) ? TRUE : FALSE;
++ break;
++ }
++#endif // CONFIG_STA_SUPPORT //
++ } while (FALSE);
++
++ if (pDesired_ht_phy == NULL)
++ {
++ DBGPRINT(RT_DEBUG_ERROR, ("RTMPSetIndividualHT: invalid apidx(%d)\n", apidx));
++ return;
++ }
++ RTMPZeroMemory(pDesired_ht_phy, sizeof(RT_HT_PHY_INFO));
++
++ DBGPRINT(RT_DEBUG_TRACE, ("RTMPSetIndividualHT : Desired MCS = %d\n", DesiredMcs));
++ // Check the validity of MCS
++ if ((TxStream == 1) && ((DesiredMcs >= MCS_8) && (DesiredMcs <= MCS_15)))
++ {
++ DBGPRINT(RT_DEBUG_WARN, ("RTMPSetIndividualHT: MCS(%d) is invalid in 1S, reset it as MCS_7\n", DesiredMcs));
++ DesiredMcs = MCS_7;
++ }
++
++ if ((pAd->CommonCfg.DesiredHtPhy.ChannelWidth == BW_20) && (DesiredMcs == MCS_32))
++ {
++ DBGPRINT(RT_DEBUG_WARN, ("RTMPSetIndividualHT: MCS_32 is only supported in 40-MHz, reset it as MCS_0\n"));
++ DesiredMcs = MCS_0;
++ }
++
++ pDesired_ht_phy->bHtEnable = TRUE;
++
++ // Decide desired Tx MCS
++ switch (TxStream)
++ {
++ case 1:
++ if (DesiredMcs == MCS_AUTO)
++ {
++ pDesired_ht_phy->MCSSet[0]= 0xff;
++ pDesired_ht_phy->MCSSet[1]= 0x00;
++ }
++ else if (DesiredMcs <= MCS_7)
++ {
++ pDesired_ht_phy->MCSSet[0]= 1<<DesiredMcs;
++ pDesired_ht_phy->MCSSet[1]= 0x00;
++ }
++ break;
++
++ case 2:
++ if (DesiredMcs == MCS_AUTO)
++ {
++ pDesired_ht_phy->MCSSet[0]= 0xff;
++ pDesired_ht_phy->MCSSet[1]= 0xff;
++ }
++ else if (DesiredMcs <= MCS_15)
++ {
++ ULONG mode;
++
++ mode = DesiredMcs / 8;
++ if (mode < 2)
++ pDesired_ht_phy->MCSSet[mode] = (1 << (DesiredMcs - mode * 8));
++ }
++ break;
++
++ case 3: // 3*3
++ if (DesiredMcs == MCS_AUTO)
++ {
++ /* MCS0 ~ MCS23, 3 bytes */
++ pDesired_ht_phy->MCSSet[0]= 0xff;
++ pDesired_ht_phy->MCSSet[1]= 0xff;
++ pDesired_ht_phy->MCSSet[2]= 0xff;
++ }
++ else if (DesiredMcs <= MCS_23)
++ {
++ ULONG mode;
++
++ mode = DesiredMcs / 8;
++ if (mode < 3)
++ pDesired_ht_phy->MCSSet[mode] = (1 << (DesiredMcs - mode * 8));
++ }
++ break;
++ }
++
++ if(pAd->CommonCfg.DesiredHtPhy.ChannelWidth == BW_40)
++ {
++ if (DesiredMcs == MCS_AUTO || DesiredMcs == MCS_32)
++ pDesired_ht_phy->MCSSet[4] = 0x1;
++ }
++
++ // update HT Rate setting
++ if (pAd->OpMode == OPMODE_STA)
++ MlmeUpdateHtTxRates(pAd, BSS0);
++ else
++ MlmeUpdateHtTxRates(pAd, apidx);
++}
++
++
++/*
++ ========================================================================
++ Routine Description:
++ Update HT IE from our capability.
++
++ Arguments:
++ Send all HT IE in beacon/probe rsp/assoc rsp/action frame.
++
++
++ ========================================================================
++*/
++VOID RTMPUpdateHTIE(
++ IN RT_HT_CAPABILITY *pRtHt,
++ IN UCHAR *pMcsSet,
++ OUT HT_CAPABILITY_IE *pHtCapability,
++ OUT ADD_HT_INFO_IE *pAddHtInfo)
++{
++ RTMPZeroMemory(pHtCapability, sizeof(HT_CAPABILITY_IE));
++ RTMPZeroMemory(pAddHtInfo, sizeof(ADD_HT_INFO_IE));
++
++ pHtCapability->HtCapInfo.ChannelWidth = pRtHt->ChannelWidth;
++ pHtCapability->HtCapInfo.MimoPs = pRtHt->MimoPs;
++ pHtCapability->HtCapInfo.GF = pRtHt->GF;
++ pHtCapability->HtCapInfo.ShortGIfor20 = pRtHt->ShortGIfor20;
++ pHtCapability->HtCapInfo.ShortGIfor40 = pRtHt->ShortGIfor40;
++ pHtCapability->HtCapInfo.TxSTBC = pRtHt->TxSTBC;
++ pHtCapability->HtCapInfo.RxSTBC = pRtHt->RxSTBC;
++ pHtCapability->HtCapInfo.AMsduSize = pRtHt->AmsduSize;
++ pHtCapability->HtCapParm.MaxRAmpduFactor = pRtHt->MaxRAmpduFactor;
++ pHtCapability->HtCapParm.MpduDensity = pRtHt->MpduDensity;
++
++ pAddHtInfo->AddHtInfo.ExtChanOffset = pRtHt->ExtChanOffset ;
++ pAddHtInfo->AddHtInfo.RecomWidth = pRtHt->RecomWidth;
++ pAddHtInfo->AddHtInfo2.OperaionMode = pRtHt->OperaionMode;
++ pAddHtInfo->AddHtInfo2.NonGfPresent = pRtHt->NonGfPresent;
++ RTMPMoveMemory(pAddHtInfo->MCSSet, /*pRtHt->MCSSet*/pMcsSet, 4); // rt2860 only support MCS max=32, no need to copy all 16 uchar.
++
++ DBGPRINT(RT_DEBUG_TRACE,("RTMPUpdateHTIE <== \n"));
++}
++#endif // DOT11_N_SUPPORT //
++
++/*
++ ========================================================================
++ Description:
++ Add Client security information into ASIC WCID table and IVEIV table.
++ Return:
++ ========================================================================
++*/
++VOID RTMPAddWcidAttributeEntry(
++ IN PRTMP_ADAPTER pAd,
++ IN UCHAR BssIdx,
++ IN UCHAR KeyIdx,
++ IN UCHAR CipherAlg,
++ IN MAC_TABLE_ENTRY *pEntry)
++{
++ UINT32 WCIDAttri = 0;
++ USHORT offset;
++ UCHAR IVEIV = 0;
++ USHORT Wcid = 0;
++
++ {
++#ifdef CONFIG_STA_SUPPORT
++ IF_DEV_CONFIG_OPMODE_ON_STA(pAd)
++ {
++ if (BssIdx > BSS0)
++ {
++ DBGPRINT(RT_DEBUG_ERROR, ("RTMPAddWcidAttributeEntry: The BSS-index(%d) is out of range for Infra link. \n", BssIdx));
++ return;
++ }
++
++ // 1. In ADHOC mode, the AID is wcid number. And NO mesh link exists.
++ // 2. In Infra mode, the AID:1 MUST be wcid of infra STA.
++ // the AID:2~ assign to mesh link entry.
++ if (pEntry && ADHOC_ON(pAd))
++ Wcid = pEntry->Aid;
++ else if (pEntry && INFRA_ON(pAd))
++ {
++#ifdef QOS_DLS_SUPPORT
++ if (pEntry->ValidAsDls == TRUE)
++ Wcid = pEntry->Aid;
++ else
++#endif // QOS_DLS_SUPPORT //
++ Wcid = BSSID_WCID;
++ }
++ else
++ Wcid = MCAST_WCID;
++ }
++#endif // CONFIG_STA_SUPPORT //
++ }
++
++ // Update WCID attribute table
++ offset = MAC_WCID_ATTRIBUTE_BASE + (Wcid * HW_WCID_ATTRI_SIZE);
++
++#ifdef CONFIG_STA_SUPPORT
++ IF_DEV_CONFIG_OPMODE_ON_STA(pAd)
++ {
++ if (pEntry && pEntry->ValidAsMesh)
++ WCIDAttri = (CipherAlg<<1) | PAIRWISEKEYTABLE;
++#ifdef QOS_DLS_SUPPORT
++ else if ((pEntry) && (pEntry->ValidAsDls) &&
++ ((CipherAlg == CIPHER_TKIP) ||
++ (CipherAlg == CIPHER_TKIP_NO_MIC) ||
++ (CipherAlg == CIPHER_AES) ||
++ (CipherAlg == CIPHER_NONE)))
++ WCIDAttri = (CipherAlg<<1) | PAIRWISEKEYTABLE;
++#endif // QOS_DLS_SUPPORT //
++ else
++ WCIDAttri = (CipherAlg<<1) | SHAREDKEYTABLE;
++ }
++#endif // CONFIG_STA_SUPPORT //
++
++ RTMP_IO_WRITE32(pAd, offset, WCIDAttri);
++
++
++ // Update IV/EIV table
++ offset = MAC_IVEIV_TABLE_BASE + (Wcid * HW_IVEIV_ENTRY_SIZE);
++
++ // WPA mode
++ if ((CipherAlg == CIPHER_TKIP) || (CipherAlg == CIPHER_TKIP_NO_MIC) || (CipherAlg == CIPHER_AES))
++ {
++ // Eiv bit on. keyid always is 0 for pairwise key
++ IVEIV = (KeyIdx <<6) | 0x20;
++ }
++ else
++ {
++ // WEP KeyIdx is default tx key.
++ IVEIV = (KeyIdx << 6);
++ }
++
++ // For key index and ext IV bit, so only need to update the position(offset+3).
++#ifdef RT2870
++ RTUSBMultiWrite_OneByte(pAd, offset+3, &IVEIV);
++#endif // RT2870 //
++
++ DBGPRINT(RT_DEBUG_TRACE,("RTMPAddWcidAttributeEntry: WCID #%d, KeyIndex #%d, Alg=%s\n",Wcid, KeyIdx, CipherName[CipherAlg]));
++ DBGPRINT(RT_DEBUG_TRACE,(" WCIDAttri = 0x%x \n", WCIDAttri));
++
++}
++
++/*
++ ==========================================================================
++ Description:
++ Parse encryption type
++Arguments:
++ pAdapter Pointer to our adapter
++ wrq Pointer to the ioctl argument
++
++ Return Value:
++ None
++
++ Note:
++ ==========================================================================
++*/
++CHAR *GetEncryptType(CHAR enc)
++{
++ if(enc == Ndis802_11WEPDisabled)
++ return "NONE";
++ if(enc == Ndis802_11WEPEnabled)
++ return "WEP";
++ if(enc == Ndis802_11Encryption2Enabled)
++ return "TKIP";
++ if(enc == Ndis802_11Encryption3Enabled)
++ return "AES";
++ if(enc == Ndis802_11Encryption4Enabled)
++ return "TKIPAES";
++ else
++ return "UNKNOW";
++}
++
++CHAR *GetAuthMode(CHAR auth)
++{
++ if(auth == Ndis802_11AuthModeOpen)
++ return "OPEN";
++ if(auth == Ndis802_11AuthModeShared)
++ return "SHARED";
++ if(auth == Ndis802_11AuthModeAutoSwitch)
++ return "AUTOWEP";
++ if(auth == Ndis802_11AuthModeWPA)
++ return "WPA";
++ if(auth == Ndis802_11AuthModeWPAPSK)
++ return "WPAPSK";
++ if(auth == Ndis802_11AuthModeWPANone)
++ return "WPANONE";
++ if(auth == Ndis802_11AuthModeWPA2)
++ return "WPA2";
++ if(auth == Ndis802_11AuthModeWPA2PSK)
++ return "WPA2PSK";
++ if(auth == Ndis802_11AuthModeWPA1WPA2)
++ return "WPA1WPA2";
++ if(auth == Ndis802_11AuthModeWPA1PSKWPA2PSK)
++ return "WPA1PSKWPA2PSK";
++
++ return "UNKNOW";
++}
++
++#if 1 //#ifndef UCOS
++/*
++ ==========================================================================
++ Description:
++ Get site survey results
++ Arguments:
++ pAdapter Pointer to our adapter
++ wrq Pointer to the ioctl argument
++
++ Return Value:
++ None
++
++ Note:
++ Usage:
++ 1.) UI needs to wait 4 seconds after issue a site survey command
++ 2.) iwpriv ra0 get_site_survey
++ 3.) UI needs to prepare at least 4096bytes to get the results
++ ==========================================================================
++*/
++#define LINE_LEN (4+33+20+8+10+9+7+3) // Channel+SSID+Bssid+WepStatus+AuthMode+Signal+WiressMode+NetworkType
++VOID RTMPIoctlGetSiteSurvey(
++ IN PRTMP_ADAPTER pAdapter,
++ IN struct iwreq *wrq)
++{
++ CHAR *msg;
++ INT i=0;
++ INT WaitCnt;
++ INT Status=0;
++ CHAR Ssid[MAX_LEN_OF_SSID +1];
++ INT Rssi = 0, max_len = LINE_LEN;
++ UINT Rssi_Quality = 0;
++ NDIS_802_11_NETWORK_TYPE wireless_mode;
++
++ os_alloc_mem(NULL, (PUCHAR *)&msg, sizeof(CHAR)*((MAX_LEN_OF_BSS_TABLE)*max_len));
++
++ if (msg == NULL)
++ {
++ DBGPRINT(RT_DEBUG_TRACE, ("RTMPIoctlGetSiteSurvey - msg memory alloc fail.\n"));
++ return;
++ }
++
++ memset(msg, 0 ,(MAX_LEN_OF_BSS_TABLE)*max_len );
++ memset(Ssid, 0 ,(MAX_LEN_OF_SSID +1));
++ sprintf(msg,"%s","\n");
++ sprintf(msg+strlen(msg),"%-4s%-33s%-20s%-8s%-10s%-9s%-7s%-3s\n",
++ "Ch", "SSID", "BSSID", "Enc", "Auth", "Siganl(%)", "W-Mode", " NT");
++
++
++ WaitCnt = 0;
++#ifdef CONFIG_STA_SUPPORT
++ pAdapter->StaCfg.bScanReqIsFromWebUI = TRUE;
++ while ((ScanRunning(pAdapter) == TRUE) && (WaitCnt++ < 200))
++ OS_WAIT(500);
++#endif // CONFIG_STA_SUPPORT //
++
++ for(i=0; i<pAdapter->ScanTab.BssNr ;i++)
++ {
++ if( pAdapter->ScanTab.BssEntry[i].Channel==0)
++ break;
++
++ if((strlen(msg)+max_len ) >= IW_SCAN_MAX_DATA)
++ break;
++
++ //Channel
++ sprintf(msg+strlen(msg),"%-4d", pAdapter->ScanTab.BssEntry[i].Channel);
++ //SSID
++ memcpy(Ssid, pAdapter->ScanTab.BssEntry[i].Ssid, pAdapter->ScanTab.BssEntry[i].SsidLen);
++ Ssid[pAdapter->ScanTab.BssEntry[i].SsidLen] = '\0';
++ sprintf(msg+strlen(msg),"%-33s", Ssid);
++ //BSSID
++ sprintf(msg+strlen(msg),"%02x:%02x:%02x:%02x:%02x:%02x ",
++ pAdapter->ScanTab.BssEntry[i].Bssid[0],
++ pAdapter->ScanTab.BssEntry[i].Bssid[1],
++ pAdapter->ScanTab.BssEntry[i].Bssid[2],
++ pAdapter->ScanTab.BssEntry[i].Bssid[3],
++ pAdapter->ScanTab.BssEntry[i].Bssid[4],
++ pAdapter->ScanTab.BssEntry[i].Bssid[5]);
++ //Encryption Type
++ sprintf(msg+strlen(msg),"%-8s",GetEncryptType(pAdapter->ScanTab.BssEntry[i].WepStatus));
++ //Authentication Mode
++ if (pAdapter->ScanTab.BssEntry[i].WepStatus == Ndis802_11WEPEnabled)
++ sprintf(msg+strlen(msg),"%-10s", "UNKNOW");
++ else
++ sprintf(msg+strlen(msg),"%-10s",GetAuthMode(pAdapter->ScanTab.BssEntry[i].AuthMode));
++ // Rssi
++ Rssi = (INT)pAdapter->ScanTab.BssEntry[i].Rssi;
++ if (Rssi >= -50)
++ Rssi_Quality = 100;
++ else if (Rssi >= -80) // between -50 ~ -80dbm
++ Rssi_Quality = (UINT)(24 + ((Rssi + 80) * 26)/10);
++ else if (Rssi >= -90) // between -80 ~ -90dbm
++ Rssi_Quality = (UINT)(((Rssi + 90) * 26)/10);
++ else // < -84 dbm
++ Rssi_Quality = 0;
++ sprintf(msg+strlen(msg),"%-9d", Rssi_Quality);
++ // Wireless Mode
++ wireless_mode = NetworkTypeInUseSanity(&pAdapter->ScanTab.BssEntry[i]);
++ if (wireless_mode == Ndis802_11FH ||
++ wireless_mode == Ndis802_11DS)
++ sprintf(msg+strlen(msg),"%-7s", "11b");
++ else if (wireless_mode == Ndis802_11OFDM5)
++ sprintf(msg+strlen(msg),"%-7s", "11a");
++ else if (wireless_mode == Ndis802_11OFDM5_N)
++ sprintf(msg+strlen(msg),"%-7s", "11a/n");
++ else if (wireless_mode == Ndis802_11OFDM24)
++ sprintf(msg+strlen(msg),"%-7s", "11b/g");
++ else if (wireless_mode == Ndis802_11OFDM24_N)
++ sprintf(msg+strlen(msg),"%-7s", "11b/g/n");
++ else
++ sprintf(msg+strlen(msg),"%-7s", "unknow");
++ //Network Type
++ if (pAdapter->ScanTab.BssEntry[i].BssType == BSS_ADHOC)
++ sprintf(msg+strlen(msg),"%-3s", " Ad");
++ else
++ sprintf(msg+strlen(msg),"%-3s", " In");
++
++ sprintf(msg+strlen(msg),"\n");
++ }
++
++#ifdef CONFIG_STA_SUPPORT
++ pAdapter->StaCfg.bScanReqIsFromWebUI = FALSE;
++#endif // CONFIG_STA_SUPPORT //
++ wrq->u.data.length = strlen(msg);
++ Status = copy_to_user(wrq->u.data.pointer, msg, wrq->u.data.length);
++
++ DBGPRINT(RT_DEBUG_TRACE, ("RTMPIoctlGetSiteSurvey - wrq->u.data.length = %d\n", wrq->u.data.length));
++ os_free_mem(NULL, (PUCHAR)msg);
++}
++
++
++#define MAC_LINE_LEN (14+4+4+10+10+10+6+6) // Addr+aid+psm+datatime+rxbyte+txbyte+current tx rate+last tx rate
++VOID RTMPIoctlGetMacTable(
++ IN PRTMP_ADAPTER pAd,
++ IN struct iwreq *wrq)
++{
++ INT i;
++ RT_802_11_MAC_TABLE MacTab;
++ char *msg;
++
++ MacTab.Num = 0;
++ for (i=0; i<MAX_LEN_OF_MAC_TABLE; i++)
++ {
++ if (pAd->MacTab.Content[i].ValidAsCLI && (pAd->MacTab.Content[i].Sst == SST_ASSOC))
++ {
++ COPY_MAC_ADDR(MacTab.Entry[MacTab.Num].Addr, &pAd->MacTab.Content[i].Addr);
++ MacTab.Entry[MacTab.Num].Aid = (UCHAR)pAd->MacTab.Content[i].Aid;
++ MacTab.Entry[MacTab.Num].Psm = pAd->MacTab.Content[i].PsMode;
++#ifdef DOT11_N_SUPPORT
++ MacTab.Entry[MacTab.Num].MimoPs = pAd->MacTab.Content[i].MmpsMode;
++#endif // DOT11_N_SUPPORT //
++
++ // Fill in RSSI per entry
++ MacTab.Entry[MacTab.Num].AvgRssi0 = pAd->MacTab.Content[i].RssiSample.AvgRssi0;
++ MacTab.Entry[MacTab.Num].AvgRssi1 = pAd->MacTab.Content[i].RssiSample.AvgRssi1;
++ MacTab.Entry[MacTab.Num].AvgRssi2 = pAd->MacTab.Content[i].RssiSample.AvgRssi2;
++
++ // the connected time per entry
++ MacTab.Entry[MacTab.Num].ConnectedTime = pAd->MacTab.Content[i].StaConnectTime;
++#if 0 // ToDo
++ MacTab.Entry[MacTab.Num].HSCounter.LastDataPacketTime = pAd->MacTab.Content[i].HSCounter.LastDataPacketTime;
++ MacTab.Entry[MacTab.Num].HSCounter.TotalRxByteCount = pAd->MacTab.Content[i].HSCounter.TotalRxByteCount;
++ MacTab.Entry[MacTab.Num].HSCounter.TotalTxByteCount = pAd->MacTab.Content[i].HSCounter.TotalTxByteCount;
++#endif
++ MacTab.Entry[MacTab.Num].TxRate.field.MCS = pAd->MacTab.Content[i].HTPhyMode.field.MCS;
++ MacTab.Entry[MacTab.Num].TxRate.field.BW = pAd->MacTab.Content[i].HTPhyMode.field.BW;
++ MacTab.Entry[MacTab.Num].TxRate.field.ShortGI = pAd->MacTab.Content[i].HTPhyMode.field.ShortGI;
++ MacTab.Entry[MacTab.Num].TxRate.field.STBC = pAd->MacTab.Content[i].HTPhyMode.field.STBC;
++ MacTab.Entry[MacTab.Num].TxRate.field.rsv = pAd->MacTab.Content[i].HTPhyMode.field.rsv;
++ MacTab.Entry[MacTab.Num].TxRate.field.MODE = pAd->MacTab.Content[i].HTPhyMode.field.MODE;
++ MacTab.Entry[MacTab.Num].TxRate.word = pAd->MacTab.Content[i].HTPhyMode.word;
++
++ MacTab.Num += 1;
++ }
++ }
++ wrq->u.data.length = sizeof(RT_802_11_MAC_TABLE);
++ if (copy_to_user(wrq->u.data.pointer, &MacTab, wrq->u.data.length))
++ {
++ DBGPRINT(RT_DEBUG_TRACE, ("%s: copy_to_user() fail\n", __FUNCTION__));
++ }
++
++ msg = (CHAR *) kmalloc(sizeof(CHAR)*(MAX_LEN_OF_MAC_TABLE*MAC_LINE_LEN), MEM_ALLOC_FLAG);
++ memset(msg, 0 ,MAX_LEN_OF_MAC_TABLE*MAC_LINE_LEN );
++ sprintf(msg,"%s","\n");
++ sprintf(msg+strlen(msg),"%-14s%-4s%-4s%-10s%-10s%-10s%-6s%-6s\n",
++ "MAC", "AID", "PSM", "LDT", "RxB", "TxB","CTxR", "LTxR");
++
++ for (i=0; i<MAX_LEN_OF_MAC_TABLE; i++)
++ {
++ PMAC_TABLE_ENTRY pEntry = &pAd->MacTab.Content[i];
++ if (pEntry->ValidAsCLI && (pEntry->Sst == SST_ASSOC))
++ {
++ if((strlen(msg)+MAC_LINE_LEN ) >= (MAX_LEN_OF_MAC_TABLE*MAC_LINE_LEN) )
++ break;
++ sprintf(msg+strlen(msg),"%02x%02x%02x%02x%02x%02x ",
++ pEntry->Addr[0], pEntry->Addr[1], pEntry->Addr[2],
++ pEntry->Addr[3], pEntry->Addr[4], pEntry->Addr[5]);
++ sprintf(msg+strlen(msg),"%-4d", (int)pEntry->Aid);
++ sprintf(msg+strlen(msg),"%-4d", (int)pEntry->PsMode);
++ sprintf(msg+strlen(msg),"%-10d",0/*pAd->MacTab.Content[i].HSCounter.LastDataPacketTime*/); // ToDo
++ sprintf(msg+strlen(msg),"%-10d",0/*pAd->MacTab.Content[i].HSCounter.TotalRxByteCount*/); // ToDo
++ sprintf(msg+strlen(msg),"%-10d",0/*pAd->MacTab.Content[i].HSCounter.TotalTxByteCount*/); // ToDo
++ sprintf(msg+strlen(msg),"%-6d",RateIdToMbps[pAd->MacTab.Content[i].CurrTxRate]);
++ sprintf(msg+strlen(msg),"%-6d\n",0/*RateIdToMbps[pAd->MacTab.Content[i].LastTxRate]*/); // ToDo
++ }
++ }
++ // for compatible with old API just do the printk to console
++ //wrq->u.data.length = strlen(msg);
++ //if (copy_to_user(wrq->u.data.pointer, msg, wrq->u.data.length))
++ {
++ DBGPRINT(RT_DEBUG_TRACE, ("%s", msg));
++ }
++
++ kfree(msg);
++}
++#endif // UCOS //
++
++#ifdef DOT11_N_SUPPORT
++INT Set_BASetup_Proc(
++ IN PRTMP_ADAPTER pAd,
++ IN PUCHAR arg)
++{
++ UCHAR mac[6], tid;
++ char *token, sepValue[] = ":", DASH = '-';
++ INT i;
++ MAC_TABLE_ENTRY *pEntry;
++
++/*
++ The BASetup inupt string format should be xx:xx:xx:xx:xx:xx-d,
++ =>The six 2 digit hex-decimal number previous are the Mac address,
++ =>The seventh decimal number is the tid value.
++*/
++ //printk("\n%s\n", arg);
++
++ if(strlen(arg) < 19) //Mac address acceptable format 01:02:03:04:05:06 length 17 plus the "-" and tid value in decimal format.
++ return FALSE;
++
++ token = strchr(arg, DASH);
++ if ((token != NULL) && (strlen(token)>1))
++ {
++ tid = simple_strtol((token+1), 0, 10);
++ if (tid > 15)
++ return FALSE;
++
++ *token = '\0';
++ for (i = 0, token = rstrtok(arg, &sepValue[0]); token; token = rstrtok(NULL, &sepValue[0]), i++)
++ {
++ if((strlen(token) != 2) || (!isxdigit(*token)) || (!isxdigit(*(token+1))))
++ return FALSE;
++ AtoH(token, (PUCHAR)(&mac[i]), 1);
++ }
++ if(i != 6)
++ return FALSE;
++
++ printk("\n%02x:%02x:%02x:%02x:%02x:%02x-%02x\n", mac[0], mac[1],
++ mac[2], mac[3], mac[4], mac[5], tid);
++
++ pEntry = MacTableLookup(pAd, mac);
++
++ if (pEntry) {
++ printk("\nSetup BA Session: Tid = %d\n", tid);
++ BAOriSessionSetUp(pAd, pEntry, tid, 0, 100, TRUE);
++ }
++
++ return TRUE;
++ }
++
++ return FALSE;
++
++}
++
++INT Set_BADecline_Proc(
++ IN PRTMP_ADAPTER pAd,
++ IN PUCHAR arg)
++{
++ ULONG bBADecline;
++
++ bBADecline = simple_strtol(arg, 0, 10);
++
++ if (bBADecline == 0)
++ {
++ pAd->CommonCfg.bBADecline = FALSE;
++ }
++ else if (bBADecline == 1)
++ {
++ pAd->CommonCfg.bBADecline = TRUE;
++ }
++ else
++ {
++ return FALSE; //Invalid argument
++ }
++
++ DBGPRINT(RT_DEBUG_TRACE, ("Set_BADecline_Proc::(BADecline=%d)\n", pAd->CommonCfg.bBADecline));
++
++ return TRUE;
++}
++
++INT Set_BAOriTearDown_Proc(
++ IN PRTMP_ADAPTER pAd,
++ IN PUCHAR arg)
++{
++ UCHAR mac[6], tid;
++ char *token, sepValue[] = ":", DASH = '-';
++ INT i;
++ MAC_TABLE_ENTRY *pEntry;
++
++ //printk("\n%s\n", arg);
++/*
++ The BAOriTearDown inupt string format should be xx:xx:xx:xx:xx:xx-d,
++ =>The six 2 digit hex-decimal number previous are the Mac address,
++ =>The seventh decimal number is the tid value.
++*/
++ if(strlen(arg) < 19) //Mac address acceptable format 01:02:03:04:05:06 length 17 plus the "-" and tid value in decimal format.
++ return FALSE;
++
++ token = strchr(arg, DASH);
++ if ((token != NULL) && (strlen(token)>1))
++ {
++ tid = simple_strtol((token+1), 0, 10);
++ if (tid > NUM_OF_TID)
++ return FALSE;
++
++ *token = '\0';
++ for (i = 0, token = rstrtok(arg, &sepValue[0]); token; token = rstrtok(NULL, &sepValue[0]), i++)
++ {
++ if((strlen(token) != 2) || (!isxdigit(*token)) || (!isxdigit(*(token+1))))
++ return FALSE;
++ AtoH(token, (PUCHAR)(&mac[i]), 1);
++ }
++ if(i != 6)
++ return FALSE;
++
++ printk("\n%02x:%02x:%02x:%02x:%02x:%02x-%02x", mac[0], mac[1],
++ mac[2], mac[3], mac[4], mac[5], tid);
++
++ pEntry = MacTableLookup(pAd, mac);
++
++ if (pEntry) {
++ printk("\nTear down Ori BA Session: Tid = %d\n", tid);
++ BAOriSessionTearDown(pAd, pEntry->Aid, tid, FALSE, TRUE);
++ }
++
++ return TRUE;
++ }
++
++ return FALSE;
++
++}
++
++INT Set_BARecTearDown_Proc(
++ IN PRTMP_ADAPTER pAd,
++ IN PUCHAR arg)
++{
++ UCHAR mac[6], tid;
++ char *token, sepValue[] = ":", DASH = '-';
++ INT i;
++ MAC_TABLE_ENTRY *pEntry;
++
++ //printk("\n%s\n", arg);
++/*
++ The BARecTearDown inupt string format should be xx:xx:xx:xx:xx:xx-d,
++ =>The six 2 digit hex-decimal number previous are the Mac address,
++ =>The seventh decimal number is the tid value.
++*/
++ if(strlen(arg) < 19) //Mac address acceptable format 01:02:03:04:05:06 length 17 plus the "-" and tid value in decimal format.
++ return FALSE;
++
++ token = strchr(arg, DASH);
++ if ((token != NULL) && (strlen(token)>1))
++ {
++ tid = simple_strtol((token+1), 0, 10);
++ if (tid > NUM_OF_TID)
++ return FALSE;
++
++ *token = '\0';
++ for (i = 0, token = rstrtok(arg, &sepValue[0]); token; token = rstrtok(NULL, &sepValue[0]), i++)
++ {
++ if((strlen(token) != 2) || (!isxdigit(*token)) || (!isxdigit(*(token+1))))
++ return FALSE;
++ AtoH(token, (PUCHAR)(&mac[i]), 1);
++ }
++ if(i != 6)
++ return FALSE;
++
++ printk("\n%02x:%02x:%02x:%02x:%02x:%02x-%02x", mac[0], mac[1],
++ mac[2], mac[3], mac[4], mac[5], tid);
++
++ pEntry = MacTableLookup(pAd, mac);
++
++ if (pEntry) {
++ printk("\nTear down Rec BA Session: Tid = %d\n", tid);
++ BARecSessionTearDown(pAd, pEntry->Aid, tid, FALSE);
++ }
++
++ return TRUE;
++ }
++
++ return FALSE;
++
++}
++
++INT Set_HtBw_Proc(
++ IN PRTMP_ADAPTER pAd,
++ IN PUCHAR arg)
++{
++ ULONG HtBw;
++
++ HtBw = simple_strtol(arg, 0, 10);
++ if (HtBw == BW_40)
++ pAd->CommonCfg.RegTransmitSetting.field.BW = BW_40;
++ else if (HtBw == BW_20)
++ pAd->CommonCfg.RegTransmitSetting.field.BW = BW_20;
++ else
++ return FALSE; //Invalid argument
++
++ SetCommonHT(pAd);
++
++ DBGPRINT(RT_DEBUG_TRACE, ("Set_HtBw_Proc::(HtBw=%d)\n", pAd->CommonCfg.RegTransmitSetting.field.BW));
++
++ return TRUE;
++}
++
++INT Set_HtMcs_Proc(
++ IN PRTMP_ADAPTER pAd,
++ IN PUCHAR arg)
++{
++ ULONG HtMcs, Mcs_tmp;
++#ifdef CONFIG_STA_SUPPORT
++ BOOLEAN bAutoRate = FALSE;
++#endif // CONFIG_STA_SUPPORT //
++
++ Mcs_tmp = simple_strtol(arg, 0, 10);
++
++ if (Mcs_tmp <= 15 || Mcs_tmp == 32)
++ HtMcs = Mcs_tmp;
++ else
++ HtMcs = MCS_AUTO;
++
++#ifdef CONFIG_STA_SUPPORT
++ IF_DEV_CONFIG_OPMODE_ON_STA(pAd)
++ {
++ pAd->StaCfg.DesiredTransmitSetting.field.MCS = HtMcs;
++ pAd->StaCfg.bAutoTxRateSwitch = (HtMcs == MCS_AUTO) ? TRUE:FALSE;
++ DBGPRINT(RT_DEBUG_TRACE, ("Set_HtMcs_Proc::(HtMcs=%d, bAutoTxRateSwitch = %d)\n",
++ pAd->StaCfg.DesiredTransmitSetting.field.MCS, pAd->StaCfg.bAutoTxRateSwitch));
++
++ if ((pAd->CommonCfg.PhyMode < PHY_11ABGN_MIXED) ||
++ (pAd->MacTab.Content[BSSID_WCID].HTPhyMode.field.MODE < MODE_HTMIX))
++ {
++ if ((pAd->StaCfg.DesiredTransmitSetting.field.MCS != MCS_AUTO) &&
++ (HtMcs >= 0 && HtMcs <= 3) &&
++ (pAd->StaCfg.DesiredTransmitSetting.field.FixedTxMode == FIXED_TXMODE_CCK))
++ {
++ RTMPSetDesiredRates(pAd, (LONG) (RateIdToMbps[HtMcs] * 1000000));
++ }
++ else if ((pAd->StaCfg.DesiredTransmitSetting.field.MCS != MCS_AUTO) &&
++ (HtMcs >= 0 && HtMcs <= 7) &&
++ (pAd->StaCfg.DesiredTransmitSetting.field.FixedTxMode == FIXED_TXMODE_OFDM))
++ {
++ RTMPSetDesiredRates(pAd, (LONG) (RateIdToMbps[HtMcs+4] * 1000000));
++ }
++ else
++ bAutoRate = TRUE;
++
++ if (bAutoRate)
++ {
++ pAd->StaCfg.DesiredTransmitSetting.field.MCS = MCS_AUTO;
++ RTMPSetDesiredRates(pAd, -1);
++ }
++ DBGPRINT(RT_DEBUG_TRACE, ("Set_HtMcs_Proc::(FixedTxMode=%d)\n",pAd->StaCfg.DesiredTransmitSetting.field.FixedTxMode));
++ }
++ if (ADHOC_ON(pAd))
++ return TRUE;
++ }
++#endif // CONFIG_STA_SUPPORT //
++
++ SetCommonHT(pAd);
++
++ return TRUE;
++}
++
++INT Set_HtGi_Proc(
++ IN PRTMP_ADAPTER pAd,
++ IN PUCHAR arg)
++{
++ ULONG HtGi;
++
++ HtGi = simple_strtol(arg, 0, 10);
++
++ if ( HtGi == GI_400)
++ pAd->CommonCfg.RegTransmitSetting.field.ShortGI = GI_400;
++ else if ( HtGi == GI_800 )
++ pAd->CommonCfg.RegTransmitSetting.field.ShortGI = GI_800;
++ else
++ return FALSE; //Invalid argument
++
++ SetCommonHT(pAd);
++
++ DBGPRINT(RT_DEBUG_TRACE, ("Set_HtGi_Proc::(ShortGI=%d)\n",pAd->CommonCfg.RegTransmitSetting.field.ShortGI));
++
++ return TRUE;
++}
++
++
++INT Set_HtTxBASize_Proc(
++ IN PRTMP_ADAPTER pAd,
++ IN PUCHAR arg)
++{
++ UCHAR Size;
++
++ Size = simple_strtol(arg, 0, 10);
++
++ if (Size <=0 || Size >=64)
++ {
++ Size = 8;
++ }
++ pAd->CommonCfg.TxBASize = Size-1;
++ DBGPRINT(RT_DEBUG_ERROR, ("Set_HtTxBASize ::(TxBASize= %d)\n", Size));
++
++ return TRUE;
++}
++
++
++INT Set_HtOpMode_Proc(
++ IN PRTMP_ADAPTER pAd,
++ IN PUCHAR arg)
++{
++
++ ULONG Value;
++
++ Value = simple_strtol(arg, 0, 10);
++
++ if (Value == HTMODE_GF)
++ pAd->CommonCfg.RegTransmitSetting.field.HTMODE = HTMODE_GF;
++ else if ( Value == HTMODE_MM )
++ pAd->CommonCfg.RegTransmitSetting.field.HTMODE = HTMODE_MM;
++ else
++ return FALSE; //Invalid argument
++
++ SetCommonHT(pAd);
++
++ DBGPRINT(RT_DEBUG_TRACE, ("Set_HtOpMode_Proc::(HtOpMode=%d)\n",pAd->CommonCfg.RegTransmitSetting.field.HTMODE));
++
++ return TRUE;
++
++}
++
++INT Set_HtStbc_Proc(
++ IN PRTMP_ADAPTER pAd,
++ IN PUCHAR arg)
++{
++
++ ULONG Value;
++
++ Value = simple_strtol(arg, 0, 10);
++
++ if (Value == STBC_USE)
++ pAd->CommonCfg.RegTransmitSetting.field.STBC = STBC_USE;
++ else if ( Value == STBC_NONE )
++ pAd->CommonCfg.RegTransmitSetting.field.STBC = STBC_NONE;
++ else
++ return FALSE; //Invalid argument
++
++ SetCommonHT(pAd);
++
++ DBGPRINT(RT_DEBUG_TRACE, ("Set_Stbc_Proc::(HtStbc=%d)\n",pAd->CommonCfg.RegTransmitSetting.field.STBC));
++
++ return TRUE;
++}
++
++INT Set_HtHtc_Proc(
++ IN PRTMP_ADAPTER pAd,
++ IN PUCHAR arg)
++{
++
++ ULONG Value;
++
++ Value = simple_strtol(arg, 0, 10);
++ if (Value == 0)
++ pAd->HTCEnable = FALSE;
++ else if ( Value ==1 )
++ pAd->HTCEnable = TRUE;
++ else
++ return FALSE; //Invalid argument
++
++ DBGPRINT(RT_DEBUG_TRACE, ("Set_HtHtc_Proc::(HtHtc=%d)\n",pAd->HTCEnable));
++
++ return TRUE;
++}
++
++INT Set_HtExtcha_Proc(
++ IN PRTMP_ADAPTER pAd,
++ IN PUCHAR arg)
++{
++
++ ULONG Value;
++
++ Value = simple_strtol(arg, 0, 10);
++
++ if (Value == 0)
++ pAd->CommonCfg.RegTransmitSetting.field.EXTCHA = EXTCHA_BELOW;
++ else if ( Value ==1 )
++ pAd->CommonCfg.RegTransmitSetting.field.EXTCHA = EXTCHA_ABOVE;
++ else
++ return FALSE; //Invalid argument
++
++ SetCommonHT(pAd);
++
++ DBGPRINT(RT_DEBUG_TRACE, ("Set_HtExtcha_Proc::(HtExtcha=%d)\n",pAd->CommonCfg.RegTransmitSetting.field.EXTCHA));
++
++ return TRUE;
++}
++
++INT Set_HtMpduDensity_Proc(
++ IN PRTMP_ADAPTER pAd,
++ IN PUCHAR arg)
++{
++ ULONG Value;
++
++ Value = simple_strtol(arg, 0, 10);
++
++ if (Value <=7 && Value >= 0)
++ pAd->CommonCfg.BACapability.field.MpduDensity = Value;
++ else
++ pAd->CommonCfg.BACapability.field.MpduDensity = 4;
++
++ SetCommonHT(pAd);
++
++ DBGPRINT(RT_DEBUG_TRACE, ("Set_HtMpduDensity_Proc::(HtMpduDensity=%d)\n",pAd->CommonCfg.BACapability.field.MpduDensity));
++
++ return TRUE;
++}
++
++INT Set_HtBaWinSize_Proc(
++ IN PRTMP_ADAPTER pAd,
++ IN PUCHAR arg)
++{
++ ULONG Value;
++
++ Value = simple_strtol(arg, 0, 10);
++
++
++ if (Value >=1 && Value <= 64)
++ {
++ pAd->CommonCfg.REGBACapability.field.RxBAWinLimit = Value;
++ pAd->CommonCfg.BACapability.field.RxBAWinLimit = Value;
++ }
++ else
++ {
++ pAd->CommonCfg.REGBACapability.field.RxBAWinLimit = 64;
++ pAd->CommonCfg.BACapability.field.RxBAWinLimit = 64;
++ }
++
++ SetCommonHT(pAd);
++
++ DBGPRINT(RT_DEBUG_TRACE, ("Set_HtBaWinSize_Proc::(HtBaWinSize=%d)\n",pAd->CommonCfg.BACapability.field.RxBAWinLimit));
++
++ return TRUE;
++}
++
++INT Set_HtRdg_Proc(
++ IN PRTMP_ADAPTER pAd,
++ IN PUCHAR arg)
++{
++ ULONG Value;
++
++ Value = simple_strtol(arg, 0, 10);
++
++ if (Value == 0)
++ pAd->CommonCfg.bRdg = FALSE;
++ else if ( Value ==1 )
++ {
++ pAd->HTCEnable = TRUE;
++ pAd->CommonCfg.bRdg = TRUE;
++ }
++ else
++ return FALSE; //Invalid argument
++
++ SetCommonHT(pAd);
++
++ DBGPRINT(RT_DEBUG_TRACE, ("Set_HtRdg_Proc::(HtRdg=%d)\n",pAd->CommonCfg.bRdg));
++
++ return TRUE;
++}
++
++INT Set_HtLinkAdapt_Proc(
++ IN PRTMP_ADAPTER pAd,
++ IN PUCHAR arg)
++{
++ ULONG Value;
++
++ Value = simple_strtol(arg, 0, 10);
++ if (Value == 0)
++ pAd->bLinkAdapt = FALSE;
++ else if ( Value ==1 )
++ {
++ pAd->HTCEnable = TRUE;
++ pAd->bLinkAdapt = TRUE;
++ }
++ else
++ return FALSE; //Invalid argument
++
++ DBGPRINT(RT_DEBUG_TRACE, ("Set_HtLinkAdapt_Proc::(HtLinkAdapt=%d)\n",pAd->bLinkAdapt));
++
++ return TRUE;
++}
++
++INT Set_HtAmsdu_Proc(
++ IN PRTMP_ADAPTER pAd,
++ IN PUCHAR arg)
++{
++ ULONG Value;
++
++ Value = simple_strtol(arg, 0, 10);
++ if (Value == 0)
++ pAd->CommonCfg.BACapability.field.AmsduEnable = FALSE;
++ else if ( Value == 1 )
++ pAd->CommonCfg.BACapability.field.AmsduEnable = TRUE;
++ else
++ return FALSE; //Invalid argument
++
++ SetCommonHT(pAd);
++
++ DBGPRINT(RT_DEBUG_TRACE, ("Set_HtAmsdu_Proc::(HtAmsdu=%d)\n",pAd->CommonCfg.BACapability.field.AmsduEnable));
++
++ return TRUE;
++}
++
++INT Set_HtAutoBa_Proc(
++ IN PRTMP_ADAPTER pAd,
++ IN PUCHAR arg)
++{
++ ULONG Value;
++
++ Value = simple_strtol(arg, 0, 10);
++ if (Value == 0)
++ pAd->CommonCfg.BACapability.field.AutoBA = FALSE;
++ else if (Value == 1)
++ pAd->CommonCfg.BACapability.field.AutoBA = TRUE;
++ else
++ return FALSE; //Invalid argument
++
++ pAd->CommonCfg.REGBACapability.field.AutoBA = pAd->CommonCfg.BACapability.field.AutoBA;
++ SetCommonHT(pAd);
++
++ DBGPRINT(RT_DEBUG_TRACE, ("Set_HtAutoBa_Proc::(HtAutoBa=%d)\n",pAd->CommonCfg.BACapability.field.AutoBA));
++
++ return TRUE;
++
++}
++
++INT Set_HtProtect_Proc(
++ IN PRTMP_ADAPTER pAd,
++ IN PUCHAR arg)
++{
++ ULONG Value;
++
++ Value = simple_strtol(arg, 0, 10);
++ if (Value == 0)
++ pAd->CommonCfg.bHTProtect = FALSE;
++ else if (Value == 1)
++ pAd->CommonCfg.bHTProtect = TRUE;
++ else
++ return FALSE; //Invalid argument
++
++ DBGPRINT(RT_DEBUG_TRACE, ("Set_HtProtect_Proc::(HtProtect=%d)\n",pAd->CommonCfg.bHTProtect));
++
++ return TRUE;
++}
++
++INT Set_SendPSMPAction_Proc(
++ IN PRTMP_ADAPTER pAd,
++ IN PUCHAR arg)
++{
++ UCHAR mac[6], mode;
++ char *token, sepValue[] = ":", DASH = '-';
++ INT i;
++ MAC_TABLE_ENTRY *pEntry;
++
++ //printk("\n%s\n", arg);
++/*
++ The BARecTearDown inupt string format should be xx:xx:xx:xx:xx:xx-d,
++ =>The six 2 digit hex-decimal number previous are the Mac address,
++ =>The seventh decimal number is the mode value.
++*/
++ if(strlen(arg) < 19) //Mac address acceptable format 01:02:03:04:05:06 length 17 plus the "-" and mode value in decimal format.
++ return FALSE;
++
++ token = strchr(arg, DASH);
++ if ((token != NULL) && (strlen(token)>1))
++ {
++ mode = simple_strtol((token+1), 0, 10);
++ if (mode > MMPS_ENABLE)
++ return FALSE;
++
++ *token = '\0';
++ for (i = 0, token = rstrtok(arg, &sepValue[0]); token; token = rstrtok(NULL, &sepValue[0]), i++)
++ {
++ if((strlen(token) != 2) || (!isxdigit(*token)) || (!isxdigit(*(token+1))))
++ return FALSE;
++ AtoH(token, (PUCHAR)(&mac[i]), 1);
++ }
++ if(i != 6)
++ return FALSE;
++
++ printk("\n%02x:%02x:%02x:%02x:%02x:%02x-%02x", mac[0], mac[1],
++ mac[2], mac[3], mac[4], mac[5], mode);
++
++ pEntry = MacTableLookup(pAd, mac);
++
++ if (pEntry) {
++ printk("\nSendPSMPAction MIPS mode = %d\n", mode);
++ SendPSMPAction(pAd, pEntry->Aid, mode);
++ }
++
++ return TRUE;
++ }
++
++ return FALSE;
++
++
++}
++
++INT Set_HtMIMOPSmode_Proc(
++ IN PRTMP_ADAPTER pAd,
++ IN PUCHAR arg)
++{
++ ULONG Value;
++
++ Value = simple_strtol(arg, 0, 10);
++
++ if (Value <=3 && Value >= 0)
++ pAd->CommonCfg.BACapability.field.MMPSmode = Value;
++ else
++ pAd->CommonCfg.BACapability.field.MMPSmode = 3;
++
++ SetCommonHT(pAd);
++
++ DBGPRINT(RT_DEBUG_TRACE, ("Set_HtMIMOPSmode_Proc::(MIMOPS mode=%d)\n",pAd->CommonCfg.BACapability.field.MMPSmode));
++
++ return TRUE;
++}
++
++
++INT Set_ForceShortGI_Proc(
++ IN PRTMP_ADAPTER pAd,
++ IN PUCHAR arg)
++{
++ ULONG Value;
++
++ Value = simple_strtol(arg, 0, 10);
++ if (Value == 0)
++ pAd->WIFItestbed.bShortGI = FALSE;
++ else if (Value == 1)
++ pAd->WIFItestbed.bShortGI = TRUE;
++ else
++ return FALSE; //Invalid argument
++
++ SetCommonHT(pAd);
++
++ DBGPRINT(RT_DEBUG_TRACE, ("Set_ForceShortGI_Proc::(ForceShortGI=%d)\n", pAd->WIFItestbed.bShortGI));
++
++ return TRUE;
++}
++
++
++
++INT Set_ForceGF_Proc(
++ IN PRTMP_ADAPTER pAd,
++ IN PUCHAR arg)
++{
++ ULONG Value;
++
++ Value = simple_strtol(arg, 0, 10);
++ if (Value == 0)
++ pAd->WIFItestbed.bGreenField = FALSE;
++ else if (Value == 1)
++ pAd->WIFItestbed.bGreenField = TRUE;
++ else
++ return FALSE; //Invalid argument
++
++ SetCommonHT(pAd);
++
++ DBGPRINT(RT_DEBUG_TRACE, ("Set_ForceGF_Proc::(ForceGF=%d)\n", pAd->WIFItestbed.bGreenField));
++
++ return TRUE;
++}
++
++INT Set_HtMimoPs_Proc(
++ IN PRTMP_ADAPTER pAd,
++ IN PUCHAR arg)
++{
++ ULONG Value;
++
++ Value = simple_strtol(arg, 0, 10);
++ if (Value == 0)
++ pAd->CommonCfg.bMIMOPSEnable = FALSE;
++ else if (Value == 1)
++ pAd->CommonCfg.bMIMOPSEnable = TRUE;
++ else
++ return FALSE; //Invalid argument
++
++ DBGPRINT(RT_DEBUG_TRACE, ("Set_HtMimoPs_Proc::(HtMimoPs=%d)\n",pAd->CommonCfg.bMIMOPSEnable));
++
++ return TRUE;
++}
++#endif // DOT11_N_SUPPORT //
++
++
++#ifdef DOT11_N_SUPPORT
++INT SetCommonHT(
++ IN PRTMP_ADAPTER pAd)
++{
++ OID_SET_HT_PHYMODE SetHT;
++
++ if (pAd->CommonCfg.PhyMode < PHY_11ABGN_MIXED)
++ return FALSE;
++
++ SetHT.PhyMode = pAd->CommonCfg.PhyMode;
++ SetHT.TransmitNo = ((UCHAR)pAd->Antenna.field.TxPath);
++ SetHT.HtMode = (UCHAR)pAd->CommonCfg.RegTransmitSetting.field.HTMODE;
++ SetHT.ExtOffset = (UCHAR)pAd->CommonCfg.RegTransmitSetting.field.EXTCHA;
++ SetHT.MCS = MCS_AUTO;
++ SetHT.BW = (UCHAR)pAd->CommonCfg.RegTransmitSetting.field.BW;
++ SetHT.STBC = (UCHAR)pAd->CommonCfg.RegTransmitSetting.field.STBC;
++ SetHT.SHORTGI = (UCHAR)pAd->CommonCfg.RegTransmitSetting.field.ShortGI;
++
++ RTMPSetHT(pAd, &SetHT);
++
++ return TRUE;
++}
++#endif // DOT11_N_SUPPORT //
++
++INT Set_FixedTxMode_Proc(
++ IN PRTMP_ADAPTER pAd,
++ IN PUCHAR arg)
++{
++ UCHAR fix_tx_mode = FIXED_TXMODE_HT;
++
++ if (strcmp(arg, "OFDM") == 0 || strcmp(arg, "ofdm") == 0)
++ {
++ fix_tx_mode = FIXED_TXMODE_OFDM;
++ }
++ else if (strcmp(arg, "CCK") == 0 || strcmp(arg, "cck") == 0)
++ {
++ fix_tx_mode = FIXED_TXMODE_CCK;
++ }
++
++#ifdef CONFIG_STA_SUPPORT
++ IF_DEV_CONFIG_OPMODE_ON_STA(pAd)
++ pAd->StaCfg.DesiredTransmitSetting.field.FixedTxMode = fix_tx_mode;
++#endif // CONFIG_STA_SUPPORT //
++
++ DBGPRINT(RT_DEBUG_TRACE, ("Set_FixedTxMode_Proc::(FixedTxMode=%d)\n", fix_tx_mode));
++
++ return TRUE;
++}
++
++#ifdef CONFIG_APSTA_MIXED_SUPPORT
++INT Set_OpMode_Proc(
++ IN PRTMP_ADAPTER pAd,
++ IN PUCHAR arg)
++{
++ ULONG Value;
++
++ Value = simple_strtol(arg, 0, 10);
++
++#ifdef RT2870
++ if (RTMP_TEST_FLAG(pAd, fRTMP_ADAPTER_START_UP))
++#endif // RT2870 //
++ {
++ DBGPRINT(RT_DEBUG_ERROR, ("Can not switch operate mode on interface up !! \n"));
++ return FALSE;
++ }
++
++ if (Value == 0)
++ pAd->OpMode = OPMODE_STA;
++ else if (Value == 1)
++ pAd->OpMode = OPMODE_AP;
++ else
++ return FALSE; //Invalid argument
++
++ DBGPRINT(RT_DEBUG_TRACE, ("Set_OpMode_Proc::(OpMode=%s)\n", pAd->OpMode == 1 ? "AP Mode" : "STA Mode"));
++
++ return TRUE;
++}
++#endif // CONFIG_APSTA_MIXED_SUPPORT //
++
++
++/////////////////////////////////////////////////////////////////////////
++PCHAR RTMPGetRalinkAuthModeStr(
++ IN NDIS_802_11_AUTHENTICATION_MODE authMode)
++{
++ switch(authMode)
++ {
++ case Ndis802_11AuthModeOpen:
++ return "OPEN";
++ case Ndis802_11AuthModeWPAPSK:
++ return "WPAPSK";
++ case Ndis802_11AuthModeShared:
++ return "SHARED";
++ case Ndis802_11AuthModeWPA:
++ return "WPA";
++ case Ndis802_11AuthModeWPA2:
++ return "WPA2";
++ case Ndis802_11AuthModeWPA2PSK:
++ return "WPA2PSK";
++ case Ndis802_11AuthModeWPA1PSKWPA2PSK:
++ return "WPAPSKWPA2PSK";
++ case Ndis802_11AuthModeWPA1WPA2:
++ return "WPA1WPA2";
++ case Ndis802_11AuthModeWPANone:
++ return "WPANONE";
++ default:
++ return "UNKNOW";
++ }
++}
++
++PCHAR RTMPGetRalinkEncryModeStr(
++ IN USHORT encryMode)
++{
++ switch(encryMode)
++ {
++ case Ndis802_11WEPDisabled:
++ return "NONE";
++ case Ndis802_11WEPEnabled:
++ return "WEP";
++ case Ndis802_11Encryption2Enabled:
++ return "TKIP";
++ case Ndis802_11Encryption3Enabled:
++ return "AES";
++ case Ndis802_11Encryption4Enabled:
++ return "TKIPAES";
++ default:
++ return "UNKNOW";
++ }
++}
++
++INT RTMPShowCfgValue(
++ IN PRTMP_ADAPTER pAd,
++ IN PUCHAR pName,
++ IN PUCHAR pBuf)
++{
++ INT Status = 0;
++
++ for (PRTMP_PRIVATE_STA_SHOW_CFG_VALUE_PROC = RTMP_PRIVATE_STA_SHOW_CFG_VALUE_PROC; PRTMP_PRIVATE_STA_SHOW_CFG_VALUE_PROC->name; PRTMP_PRIVATE_STA_SHOW_CFG_VALUE_PROC++)
++ {
++ if (!strcmp(pName, PRTMP_PRIVATE_STA_SHOW_CFG_VALUE_PROC->name))
++ {
++ if(PRTMP_PRIVATE_STA_SHOW_CFG_VALUE_PROC->show_proc(pAd, pBuf))
++ Status = -EINVAL;
++ break; //Exit for loop.
++ }
++ }
++
++ if(PRTMP_PRIVATE_STA_SHOW_CFG_VALUE_PROC->name == NULL)
++ {
++ sprintf(pBuf, "\n");
++ for (PRTMP_PRIVATE_STA_SHOW_CFG_VALUE_PROC = RTMP_PRIVATE_STA_SHOW_CFG_VALUE_PROC; PRTMP_PRIVATE_STA_SHOW_CFG_VALUE_PROC->name; PRTMP_PRIVATE_STA_SHOW_CFG_VALUE_PROC++)
++ sprintf(pBuf, "%s%s\n", pBuf, PRTMP_PRIVATE_STA_SHOW_CFG_VALUE_PROC->name);
++ }
++
++ return Status;
++}
++
++INT Show_SSID_Proc(
++ IN PRTMP_ADAPTER pAd,
++ OUT PUCHAR pBuf)
++{
++
++#ifdef CONFIG_STA_SUPPORT
++ IF_DEV_CONFIG_OPMODE_ON_STA(pAd)
++ sprintf(pBuf, "\t%s", pAd->CommonCfg.Ssid);
++#endif // CONFIG_STA_SUPPORT //
++ return 0;
++}
++
++INT Show_WirelessMode_Proc(
++ IN PRTMP_ADAPTER pAd,
++ OUT PUCHAR pBuf)
++{
++ switch(pAd->CommonCfg.PhyMode)
++ {
++ case PHY_11BG_MIXED:
++ sprintf(pBuf, "\t11B/G");
++ break;
++ case PHY_11B:
++ sprintf(pBuf, "\t11B");
++ break;
++ case PHY_11A:
++ sprintf(pBuf, "\t11A");
++ break;
++ case PHY_11ABG_MIXED:
++ sprintf(pBuf, "\t11A/B/G");
++ break;
++ case PHY_11G:
++ sprintf(pBuf, "\t11G");
++ break;
++#ifdef DOT11_N_SUPPORT
++ case PHY_11ABGN_MIXED:
++ sprintf(pBuf, "\t11A/B/G/N");
++ break;
++ case PHY_11N_2_4G:
++ sprintf(pBuf, "\t11N only with 2.4G");
++ break;
++ case PHY_11GN_MIXED:
++ sprintf(pBuf, "\t11G/N");
++ break;
++ case PHY_11AN_MIXED:
++ sprintf(pBuf, "\t11A/N");
++ break;
++ case PHY_11BGN_MIXED:
++ sprintf(pBuf, "\t11B/G/N");
++ break;
++ case PHY_11AGN_MIXED:
++ sprintf(pBuf, "\t11A/G/N");
++ break;
++ case PHY_11N_5G:
++ sprintf(pBuf, "\t11N only with 5G");
++ break;
++#endif // DOT11_N_SUPPORT //
++ default:
++ sprintf(pBuf, "\tUnknow Value(%d)", pAd->CommonCfg.PhyMode);
++ break;
++ }
++ return 0;
++}
++
++
++INT Show_TxBurst_Proc(
++ IN PRTMP_ADAPTER pAd,
++ OUT PUCHAR pBuf)
++{
++ sprintf(pBuf, "\t%s", pAd->CommonCfg.bEnableTxBurst ? "TRUE":"FALSE");
++ return 0;
++}
++
++INT Show_TxPreamble_Proc(
++ IN PRTMP_ADAPTER pAd,
++ OUT PUCHAR pBuf)
++{
++ switch(pAd->CommonCfg.TxPreamble)
++ {
++ case Rt802_11PreambleShort:
++ sprintf(pBuf, "\tShort");
++ break;
++ case Rt802_11PreambleLong:
++ sprintf(pBuf, "\tLong");
++ break;
++ case Rt802_11PreambleAuto:
++ sprintf(pBuf, "\tAuto");
++ break;
++ default:
++ sprintf(pBuf, "\tUnknow Value(%lu)", pAd->CommonCfg.TxPreamble);
++ break;
++ }
++
++ return 0;
++}
++
++INT Show_TxPower_Proc(
++ IN PRTMP_ADAPTER pAd,
++ OUT PUCHAR pBuf)
++{
++ sprintf(pBuf, "\t%lu", pAd->CommonCfg.TxPowerPercentage);
++ return 0;
++}
++
++INT Show_Channel_Proc(
++ IN PRTMP_ADAPTER pAd,
++ OUT PUCHAR pBuf)
++{
++ sprintf(pBuf, "\t%d", pAd->CommonCfg.Channel);
++ return 0;
++}
++
++INT Show_BGProtection_Proc(
++ IN PRTMP_ADAPTER pAd,
++ OUT PUCHAR pBuf)
++{
++ switch(pAd->CommonCfg.UseBGProtection)
++ {
++ case 1: //Always On
++ sprintf(pBuf, "\tON");
++ break;
++ case 2: //Always OFF
++ sprintf(pBuf, "\tOFF");
++ break;
++ case 0: //AUTO
++ sprintf(pBuf, "\tAuto");
++ break;
++ default:
++ sprintf(pBuf, "\tUnknow Value(%lu)", pAd->CommonCfg.UseBGProtection);
++ break;
++ }
++ return 0;
++}
++
++INT Show_RTSThreshold_Proc(
++ IN PRTMP_ADAPTER pAd,
++ OUT PUCHAR pBuf)
++{
++ sprintf(pBuf, "\t%u", pAd->CommonCfg.RtsThreshold);
++ return 0;
++}
++
++INT Show_FragThreshold_Proc(
++ IN PRTMP_ADAPTER pAd,
++ OUT PUCHAR pBuf)
++{
++ sprintf(pBuf, "\t%u", pAd->CommonCfg.FragmentThreshold);
++ return 0;
++}
++
++#ifdef DOT11_N_SUPPORT
++INT Show_HtBw_Proc(
++ IN PRTMP_ADAPTER pAd,
++ OUT PUCHAR pBuf)
++{
++ if (pAd->CommonCfg.RegTransmitSetting.field.BW == BW_40)
++ {
++ sprintf(pBuf, "\t40 MHz");
++ }
++ else
++ {
++ sprintf(pBuf, "\t20 MHz");
++ }
++ return 0;
++}
++
++INT Show_HtMcs_Proc(
++ IN PRTMP_ADAPTER pAd,
++ OUT PUCHAR pBuf)
++{
++
++#ifdef CONFIG_STA_SUPPORT
++ IF_DEV_CONFIG_OPMODE_ON_STA(pAd)
++ sprintf(pBuf, "\t%u", pAd->StaCfg.DesiredTransmitSetting.field.MCS);
++#endif // CONFIG_STA_SUPPORT //
++ return 0;
++}
++
++INT Show_HtGi_Proc(
++ IN PRTMP_ADAPTER pAd,
++ OUT PUCHAR pBuf)
++{
++ switch(pAd->CommonCfg.RegTransmitSetting.field.ShortGI)
++ {
++ case GI_400:
++ sprintf(pBuf, "\tGI_400");
++ break;
++ case GI_800:
++ sprintf(pBuf, "\tGI_800");
++ break;
++ default:
++ sprintf(pBuf, "\tUnknow Value(%u)", pAd->CommonCfg.RegTransmitSetting.field.ShortGI);
++ break;
++ }
++ return 0;
++}
++
++INT Show_HtOpMode_Proc(
++ IN PRTMP_ADAPTER pAd,
++ OUT PUCHAR pBuf)
++{
++ switch(pAd->CommonCfg.RegTransmitSetting.field.HTMODE)
++ {
++ case HTMODE_GF:
++ sprintf(pBuf, "\tGF");
++ break;
++ case HTMODE_MM:
++ sprintf(pBuf, "\tMM");
++ break;
++ default:
++ sprintf(pBuf, "\tUnknow Value(%u)", pAd->CommonCfg.RegTransmitSetting.field.HTMODE);
++ break;
++ }
++ return 0;
++}
++
++INT Show_HtExtcha_Proc(
++ IN PRTMP_ADAPTER pAd,
++ OUT PUCHAR pBuf)
++{
++ switch(pAd->CommonCfg.RegTransmitSetting.field.EXTCHA)
++ {
++ case EXTCHA_BELOW:
++ sprintf(pBuf, "\tBelow");
++ break;
++ case EXTCHA_ABOVE:
++ sprintf(pBuf, "\tAbove");
++ break;
++ default:
++ sprintf(pBuf, "\tUnknow Value(%u)", pAd->CommonCfg.RegTransmitSetting.field.EXTCHA);
++ break;
++ }
++ return 0;
++}
++
++
++INT Show_HtMpduDensity_Proc(
++ IN PRTMP_ADAPTER pAd,
++ OUT PUCHAR pBuf)
++{
++ sprintf(pBuf, "\t%u", pAd->CommonCfg.BACapability.field.MpduDensity);
++ return 0;
++}
++
++INT Show_HtBaWinSize_Proc(
++ IN PRTMP_ADAPTER pAd,
++ OUT PUCHAR pBuf)
++{
++ sprintf(pBuf, "\t%u", pAd->CommonCfg.BACapability.field.RxBAWinLimit);
++ return 0;
++}
++
++INT Show_HtRdg_Proc(
++ IN PRTMP_ADAPTER pAd,
++ OUT PUCHAR pBuf)
++{
++ sprintf(pBuf, "\t%s", pAd->CommonCfg.bRdg ? "TRUE":"FALSE");
++ return 0;
++}
++
++INT Show_HtAmsdu_Proc(
++ IN PRTMP_ADAPTER pAd,
++ OUT PUCHAR pBuf)
++{
++ sprintf(pBuf, "\t%s", pAd->CommonCfg.BACapability.field.AmsduEnable ? "TRUE":"FALSE");
++ return 0;
++}
++
++INT Show_HtAutoBa_Proc(
++ IN PRTMP_ADAPTER pAd,
++ OUT PUCHAR pBuf)
++{
++ sprintf(pBuf, "\t%s", pAd->CommonCfg.BACapability.field.AutoBA ? "TRUE":"FALSE");
++ return 0;
++}
++#endif // DOT11_N_SUPPORT //
++
++INT Show_CountryRegion_Proc(
++ IN PRTMP_ADAPTER pAd,
++ OUT PUCHAR pBuf)
++{
++ sprintf(pBuf, "\t%d", pAd->CommonCfg.CountryRegion);
++ return 0;
++}
++
++INT Show_CountryRegionABand_Proc(
++ IN PRTMP_ADAPTER pAd,
++ OUT PUCHAR pBuf)
++{
++ sprintf(pBuf, "\t%d", pAd->CommonCfg.CountryRegionForABand);
++ return 0;
++}
++
++INT Show_CountryCode_Proc(
++ IN PRTMP_ADAPTER pAd,
++ OUT PUCHAR pBuf)
++{
++ sprintf(pBuf, "\t%s", pAd->CommonCfg.CountryCode);
++ return 0;
++}
++
++#ifdef AGGREGATION_SUPPORT
++INT Show_PktAggregate_Proc(
++ IN PRTMP_ADAPTER pAd,
++ OUT PUCHAR pBuf)
++{
++ sprintf(pBuf, "\t%s", pAd->CommonCfg.bAggregationCapable ? "TRUE":"FALSE");
++ return 0;
++}
++#endif // AGGREGATION_SUPPORT //
++
++#ifdef WMM_SUPPORT
++INT Show_WmmCapable_Proc(
++ IN PRTMP_ADAPTER pAd,
++ OUT PUCHAR pBuf)
++{
++
++#ifdef CONFIG_STA_SUPPORT
++ IF_DEV_CONFIG_OPMODE_ON_STA(pAd)
++ sprintf(pBuf, "\t%s", pAd->CommonCfg.bWmmCapable ? "TRUE":"FALSE");
++#endif // CONFIG_STA_SUPPORT //
++
++ return 0;
++}
++#endif // WMM_SUPPORT //
++
++INT Show_IEEE80211H_Proc(
++ IN PRTMP_ADAPTER pAd,
++ OUT PUCHAR pBuf)
++{
++ sprintf(pBuf, "\t%s", pAd->CommonCfg.bIEEE80211H ? "TRUE":"FALSE");
++ return 0;
++}
++
++#ifdef CONFIG_STA_SUPPORT
++INT Show_NetworkType_Proc(
++ IN PRTMP_ADAPTER pAd,
++ OUT PUCHAR pBuf)
++{
++ switch(pAd->StaCfg.BssType)
++ {
++ case BSS_ADHOC:
++ sprintf(pBuf, "\tAdhoc");
++ break;
++ case BSS_INFRA:
++ sprintf(pBuf, "\tInfra");
++ break;
++ case BSS_ANY:
++ sprintf(pBuf, "\tAny");
++ break;
++ case BSS_MONITOR:
++ sprintf(pBuf, "\tMonitor");
++ break;
++ default:
++ sprintf(pBuf, "\tUnknow Value(%d)", pAd->StaCfg.BssType);
++ break;
++ }
++ return 0;
++}
++#endif // CONFIG_STA_SUPPORT //
++
++INT Show_AuthMode_Proc(
++ IN PRTMP_ADAPTER pAd,
++ OUT PUCHAR pBuf)
++{
++ NDIS_802_11_AUTHENTICATION_MODE AuthMode = Ndis802_11AuthModeOpen;
++
++#ifdef CONFIG_STA_SUPPORT
++ IF_DEV_CONFIG_OPMODE_ON_STA(pAd)
++ AuthMode = pAd->StaCfg.AuthMode;
++#endif // CONFIG_STA_SUPPORT //
++
++ if ((AuthMode >= Ndis802_11AuthModeOpen) &&
++ (AuthMode <= Ndis802_11AuthModeWPA1PSKWPA2PSK))
++ sprintf(pBuf, "\t%s", RTMPGetRalinkAuthModeStr(AuthMode));
++ else
++ sprintf(pBuf, "\tUnknow Value(%d)", AuthMode);
++
++ return 0;
++}
++
++INT Show_EncrypType_Proc(
++ IN PRTMP_ADAPTER pAd,
++ OUT PUCHAR pBuf)
++{
++ NDIS_802_11_WEP_STATUS WepStatus = Ndis802_11WEPDisabled;
++
++#ifdef CONFIG_STA_SUPPORT
++ IF_DEV_CONFIG_OPMODE_ON_STA(pAd)
++ WepStatus = pAd->StaCfg.WepStatus;
++#endif // CONFIG_STA_SUPPORT //
++
++ if ((WepStatus >= Ndis802_11WEPEnabled) &&
++ (WepStatus <= Ndis802_11Encryption4KeyAbsent))
++ sprintf(pBuf, "\t%s", RTMPGetRalinkEncryModeStr(WepStatus));
++ else
++ sprintf(pBuf, "\tUnknow Value(%d)", WepStatus);
++
++ return 0;
++}
++
++INT Show_DefaultKeyID_Proc(
++ IN PRTMP_ADAPTER pAd,
++ OUT PUCHAR pBuf)
++{
++ UCHAR DefaultKeyId = 0;
++
++#ifdef CONFIG_STA_SUPPORT
++ IF_DEV_CONFIG_OPMODE_ON_STA(pAd)
++ DefaultKeyId = pAd->StaCfg.DefaultKeyId;
++#endif // CONFIG_STA_SUPPORT //
++
++ sprintf(pBuf, "\t%d", DefaultKeyId);
++
++ return 0;
++}
++
++INT Show_WepKey_Proc(
++ IN PRTMP_ADAPTER pAd,
++ IN INT KeyIdx,
++ OUT PUCHAR pBuf)
++{
++ UCHAR Key[16] = {0}, KeyLength = 0;
++ INT index = BSS0;
++
++ KeyLength = pAd->SharedKey[index][KeyIdx].KeyLen;
++ NdisMoveMemory(Key, pAd->SharedKey[index][KeyIdx].Key, KeyLength);
++
++ //check key string is ASCII or not
++ if (RTMPCheckStrPrintAble(Key, KeyLength))
++ sprintf(pBuf, "\t%s", Key);
++ else
++ {
++ int idx;
++ sprintf(pBuf, "\t");
++ for (idx = 0; idx < KeyLength; idx++)
++ sprintf(pBuf+strlen(pBuf), "%02X", Key[idx]);
++ }
++ return 0;
++}
++
++INT Show_Key1_Proc(
++ IN PRTMP_ADAPTER pAd,
++ OUT PUCHAR pBuf)
++{
++ Show_WepKey_Proc(pAd, 0, pBuf);
++ return 0;
++}
++
++INT Show_Key2_Proc(
++ IN PRTMP_ADAPTER pAd,
++ OUT PUCHAR pBuf)
++{
++ Show_WepKey_Proc(pAd, 1, pBuf);
++ return 0;
++}
++
++INT Show_Key3_Proc(
++ IN PRTMP_ADAPTER pAd,
++ OUT PUCHAR pBuf)
++{
++ Show_WepKey_Proc(pAd, 2, pBuf);
++ return 0;
++}
++
++INT Show_Key4_Proc(
++ IN PRTMP_ADAPTER pAd,
++ OUT PUCHAR pBuf)
++{
++ Show_WepKey_Proc(pAd, 3, pBuf);
++ return 0;
++}
++
++INT Show_WPAPSK_Proc(
++ IN PRTMP_ADAPTER pAd,
++ OUT PUCHAR pBuf)
++{
++ INT idx;
++ UCHAR PMK[32] = {0};
++
++
++#ifdef CONFIG_STA_SUPPORT
++ IF_DEV_CONFIG_OPMODE_ON_STA(pAd)
++ NdisMoveMemory(PMK, pAd->StaCfg.PMK, 32);
++#endif // CONFIG_STA_SUPPORT //
++
++ sprintf(pBuf, "\tPMK = ");
++ for (idx = 0; idx < 32; idx++)
++ sprintf(pBuf+strlen(pBuf), "%02X", PMK[idx]);
++
++ return 0;
++}
++
+--- /dev/null
++++ b/drivers/staging/rt2870/common/cmm_sanity.c
+@@ -0,0 +1,1663 @@
++/*
++ *************************************************************************
++ * Ralink Tech Inc.
++ * 5F., No.36, Taiyuan St., Jhubei City,
++ * Hsinchu County 302,
++ * Taiwan, R.O.C.
++ *
++ * (c) Copyright 2002-2007, Ralink Technology, Inc.
++ *
++ * This program is free software; you can redistribute it and/or modify *
++ * it under the terms of the GNU General Public License as published by *
++ * the Free Software Foundation; either version 2 of the License, or *
++ * (at your option) any later version. *
++ * *
++ * This program is distributed in the hope that it will be useful, *
++ * but WITHOUT ANY WARRANTY; without even the implied warranty of *
++ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the *
++ * GNU General Public License for more details. *
++ * *
++ * You should have received a copy of the GNU General Public License *
++ * along with this program; if not, write to the *
++ * Free Software Foundation, Inc., *
++ * 59 Temple Place - Suite 330, Boston, MA 02111-1307, USA. *
++ * *
++ *************************************************************************
++
++ Module Name:
++ sanity.c
++
++ Abstract:
++
++ Revision History:
++ Who When What
++ -------- ---------- ----------------------------------------------
++ John Chang 2004-09-01 add WMM support
++*/
++#include "../rt_config.h"
++
++
++extern UCHAR CISCO_OUI[];
++
++extern UCHAR WPA_OUI[];
++extern UCHAR RSN_OUI[];
++extern UCHAR WME_INFO_ELEM[];
++extern UCHAR WME_PARM_ELEM[];
++extern UCHAR Ccx2QosInfo[];
++extern UCHAR RALINK_OUI[];
++extern UCHAR BROADCOM_OUI[];
++extern UCHAR WPS_OUI[];
++
++/*
++ ==========================================================================
++ Description:
++ MLME message sanity check
++ Return:
++ TRUE if all parameters are OK, FALSE otherwise
++
++ IRQL = DISPATCH_LEVEL
++
++ ==========================================================================
++ */
++BOOLEAN MlmeAddBAReqSanity(
++ IN PRTMP_ADAPTER pAd,
++ IN VOID *Msg,
++ IN ULONG MsgLen,
++ OUT PUCHAR pAddr2)
++{
++ PMLME_ADDBA_REQ_STRUCT pInfo;
++
++ pInfo = (MLME_ADDBA_REQ_STRUCT *)Msg;
++
++ if ((MsgLen != sizeof(MLME_ADDBA_REQ_STRUCT)))
++ {
++ DBGPRINT(RT_DEBUG_TRACE, ("MlmeAddBAReqSanity fail - message lenght not correct.\n"));
++ return FALSE;
++ }
++
++ if ((pInfo->Wcid >= MAX_LEN_OF_MAC_TABLE))
++ {
++ DBGPRINT(RT_DEBUG_TRACE, ("MlmeAddBAReqSanity fail - The peer Mac is not associated yet.\n"));
++ return FALSE;
++ }
++
++ /*
++ if ((pInfo->BaBufSize > MAX_RX_REORDERBUF) || (pInfo->BaBufSize < 2))
++ {
++ DBGPRINT(RT_DEBUG_TRACE, ("MlmeAddBAReqSanity fail - Rx Reordering buffer too big or too small\n"));
++ return FALSE;
++ }
++ */
++
++ if ((pInfo->pAddr[0]&0x01) == 0x01)
++ {
++ DBGPRINT(RT_DEBUG_TRACE, ("MlmeAddBAReqSanity fail - broadcast address not support BA\n"));
++ return FALSE;
++ }
++
++ return TRUE;
++}
++
++/*
++ ==========================================================================
++ Description:
++ MLME message sanity check
++ Return:
++ TRUE if all parameters are OK, FALSE otherwise
++
++ IRQL = DISPATCH_LEVEL
++
++ ==========================================================================
++ */
++BOOLEAN MlmeDelBAReqSanity(
++ IN PRTMP_ADAPTER pAd,
++ IN VOID *Msg,
++ IN ULONG MsgLen)
++{
++ MLME_DELBA_REQ_STRUCT *pInfo;
++ pInfo = (MLME_DELBA_REQ_STRUCT *)Msg;
++
++ if ((MsgLen != sizeof(MLME_DELBA_REQ_STRUCT)))
++ {
++ DBGPRINT(RT_DEBUG_ERROR, ("MlmeDelBAReqSanity fail - message lenght not correct.\n"));
++ return FALSE;
++ }
++
++ if ((pInfo->Wcid >= MAX_LEN_OF_MAC_TABLE))
++ {
++ DBGPRINT(RT_DEBUG_ERROR, ("MlmeDelBAReqSanity fail - The peer Mac is not associated yet.\n"));
++ return FALSE;
++ }
++
++ if ((pInfo->TID & 0xf0))
++ {
++ DBGPRINT(RT_DEBUG_ERROR, ("MlmeDelBAReqSanity fail - The peer TID is incorrect.\n"));
++ return FALSE;
++ }
++
++ if (NdisEqualMemory(pAd->MacTab.Content[pInfo->Wcid].Addr, pInfo->Addr, MAC_ADDR_LEN) == 0)
++ {
++ DBGPRINT(RT_DEBUG_ERROR, ("MlmeDelBAReqSanity fail - the peer addr dosen't exist.\n"));
++ return FALSE;
++ }
++
++ return TRUE;
++}
++
++BOOLEAN PeerAddBAReqActionSanity(
++ IN PRTMP_ADAPTER pAd,
++ IN VOID *pMsg,
++ IN ULONG MsgLen,
++ OUT PUCHAR pAddr2)
++{
++ PFRAME_802_11 pFrame = (PFRAME_802_11)pMsg;
++ PFRAME_ADDBA_REQ pAddFrame;
++ pAddFrame = (PFRAME_ADDBA_REQ)(pMsg);
++ if (MsgLen < (sizeof(FRAME_ADDBA_REQ)))
++ {
++ DBGPRINT(RT_DEBUG_ERROR,("PeerAddBAReqActionSanity: ADDBA Request frame length size = %ld incorrect\n", MsgLen));
++ return FALSE;
++ }
++ // we support immediate BA.
++ *(USHORT *)(&pAddFrame->BaParm) = cpu2le16(*(USHORT *)(&pAddFrame->BaParm));
++ pAddFrame->TimeOutValue = cpu2le16(pAddFrame->TimeOutValue);
++ pAddFrame->BaStartSeq.word = cpu2le16(pAddFrame->BaStartSeq.word);
++
++ if (pAddFrame->BaParm.BAPolicy != IMMED_BA)
++ {
++ DBGPRINT(RT_DEBUG_ERROR,("PeerAddBAReqActionSanity: ADDBA Request Ba Policy[%d] not support\n", pAddFrame->BaParm.BAPolicy));
++ DBGPRINT(RT_DEBUG_ERROR,("ADDBA Request. tid=%x, Bufsize=%x, AMSDUSupported=%x \n", pAddFrame->BaParm.TID, pAddFrame->BaParm.BufSize, pAddFrame->BaParm.AMSDUSupported));
++ return FALSE;
++ }
++
++ // we support immediate BA.
++ if (pAddFrame->BaParm.TID &0xfff0)
++ {
++ DBGPRINT(RT_DEBUG_ERROR,("PeerAddBAReqActionSanity: ADDBA Request incorrect TID = %d\n", pAddFrame->BaParm.TID));
++ return FALSE;
++ }
++ COPY_MAC_ADDR(pAddr2, pFrame->Hdr.Addr2);
++ return TRUE;
++}
++
++BOOLEAN PeerAddBARspActionSanity(
++ IN PRTMP_ADAPTER pAd,
++ IN VOID *pMsg,
++ IN ULONG MsgLen)
++{
++ //PFRAME_802_11 pFrame = (PFRAME_802_11)pMsg;
++ PFRAME_ADDBA_RSP pAddFrame;
++
++ pAddFrame = (PFRAME_ADDBA_RSP)(pMsg);
++ if (MsgLen < (sizeof(FRAME_ADDBA_RSP)))
++ {
++ DBGPRINT(RT_DEBUG_ERROR,("PeerAddBARspActionSanity: ADDBA Response frame length size = %ld incorrect\n", MsgLen));
++ return FALSE;
++ }
++ // we support immediate BA.
++ *(USHORT *)(&pAddFrame->BaParm) = cpu2le16(*(USHORT *)(&pAddFrame->BaParm));
++ pAddFrame->StatusCode = cpu2le16(pAddFrame->StatusCode);
++ pAddFrame->TimeOutValue = cpu2le16(pAddFrame->TimeOutValue);
++
++ if (pAddFrame->BaParm.BAPolicy != IMMED_BA)
++ {
++ DBGPRINT(RT_DEBUG_ERROR,("PeerAddBAReqActionSanity: ADDBA Response Ba Policy[%d] not support\n", pAddFrame->BaParm.BAPolicy));
++ return FALSE;
++ }
++
++ // we support immediate BA.
++ if (pAddFrame->BaParm.TID &0xfff0)
++ {
++ DBGPRINT(RT_DEBUG_ERROR,("PeerAddBARspActionSanity: ADDBA Response incorrect TID = %d\n", pAddFrame->BaParm.TID));
++ return FALSE;
++ }
++ return TRUE;
++
++}
++
++BOOLEAN PeerDelBAActionSanity(
++ IN PRTMP_ADAPTER pAd,
++ IN UCHAR Wcid,
++ IN VOID *pMsg,
++ IN ULONG MsgLen )
++{
++ //PFRAME_802_11 pFrame = (PFRAME_802_11)pMsg;
++ PFRAME_DELBA_REQ pDelFrame;
++ if (MsgLen != (sizeof(FRAME_DELBA_REQ)))
++ return FALSE;
++
++ if (Wcid >= MAX_LEN_OF_MAC_TABLE)
++ return FALSE;
++
++ pDelFrame = (PFRAME_DELBA_REQ)(pMsg);
++
++ *(USHORT *)(&pDelFrame->DelbaParm) = cpu2le16(*(USHORT *)(&pDelFrame->DelbaParm));
++ pDelFrame->ReasonCode = cpu2le16(pDelFrame->ReasonCode);
++
++ if (pDelFrame->DelbaParm.TID &0xfff0)
++ return FALSE;
++
++ return TRUE;
++}
++
++/*
++ ==========================================================================
++ Description:
++ MLME message sanity check
++ Return:
++ TRUE if all parameters are OK, FALSE otherwise
++
++ IRQL = DISPATCH_LEVEL
++
++ ==========================================================================
++ */
++BOOLEAN PeerBeaconAndProbeRspSanity(
++ IN PRTMP_ADAPTER pAd,
++ IN VOID *Msg,
++ IN ULONG MsgLen,
++ IN UCHAR MsgChannel,
++ OUT PUCHAR pAddr2,
++ OUT PUCHAR pBssid,
++ OUT CHAR Ssid[],
++ OUT UCHAR *pSsidLen,
++ OUT UCHAR *pBssType,
++ OUT USHORT *pBeaconPeriod,
++ OUT UCHAR *pChannel,
++ OUT UCHAR *pNewChannel,
++ OUT LARGE_INTEGER *pTimestamp,
++ OUT CF_PARM *pCfParm,
++ OUT USHORT *pAtimWin,
++ OUT USHORT *pCapabilityInfo,
++ OUT UCHAR *pErp,
++ OUT UCHAR *pDtimCount,
++ OUT UCHAR *pDtimPeriod,
++ OUT UCHAR *pBcastFlag,
++ OUT UCHAR *pMessageToMe,
++ OUT UCHAR SupRate[],
++ OUT UCHAR *pSupRateLen,
++ OUT UCHAR ExtRate[],
++ OUT UCHAR *pExtRateLen,
++ OUT UCHAR *pCkipFlag,
++ OUT UCHAR *pAironetCellPowerLimit,
++ OUT PEDCA_PARM pEdcaParm,
++ OUT PQBSS_LOAD_PARM pQbssLoad,
++ OUT PQOS_CAPABILITY_PARM pQosCapability,
++ OUT ULONG *pRalinkIe,
++ OUT UCHAR *pHtCapabilityLen,
++#ifdef CONFIG_STA_SUPPORT
++ OUT UCHAR *pPreNHtCapabilityLen,
++#endif // CONFIG_STA_SUPPORT //
++ OUT HT_CAPABILITY_IE *pHtCapability,
++ OUT UCHAR *AddHtInfoLen,
++ OUT ADD_HT_INFO_IE *AddHtInfo,
++ OUT UCHAR *NewExtChannelOffset, // Ht extension channel offset(above or below)
++ OUT USHORT *LengthVIE,
++ OUT PNDIS_802_11_VARIABLE_IEs pVIE)
++{
++ CHAR *Ptr;
++#ifdef CONFIG_STA_SUPPORT
++ CHAR TimLen;
++#endif // CONFIG_STA_SUPPORT //
++ PFRAME_802_11 pFrame;
++ PEID_STRUCT pEid;
++ UCHAR SubType;
++ UCHAR Sanity;
++ //UCHAR ECWMin, ECWMax;
++ //MAC_CSR9_STRUC Csr9;
++ ULONG Length = 0;
++
++ // For some 11a AP which didn't have DS_IE, we use two conditions to decide the channel
++ // 1. If the AP is 11n enabled, then check the control channel.
++ // 2. If the AP didn't have any info about channel, use the channel we received this frame as the channel. (May inaccuracy!!)
++ UCHAR CtrlChannel = 0;
++
++ // Add for 3 necessary EID field check
++ Sanity = 0;
++
++ *pAtimWin = 0;
++ *pErp = 0;
++ *pDtimCount = 0;
++ *pDtimPeriod = 0;
++ *pBcastFlag = 0;
++ *pMessageToMe = 0;
++ *pExtRateLen = 0;
++ *pCkipFlag = 0; // Default of CkipFlag is 0
++ *pAironetCellPowerLimit = 0xFF; // Default of AironetCellPowerLimit is 0xFF
++ *LengthVIE = 0; // Set the length of VIE to init value 0
++ *pHtCapabilityLen = 0; // Set the length of VIE to init value 0
++#ifdef CONFIG_STA_SUPPORT
++ if (pAd->OpMode == OPMODE_STA)
++ *pPreNHtCapabilityLen = 0; // Set the length of VIE to init value 0
++#endif // CONFIG_STA_SUPPORT //
++ *AddHtInfoLen = 0; // Set the length of VIE to init value 0
++ *pRalinkIe = 0;
++ *pNewChannel = 0;
++ *NewExtChannelOffset = 0xff; //Default 0xff means no such IE
++ pCfParm->bValid = FALSE; // default: no IE_CF found
++ pQbssLoad->bValid = FALSE; // default: no IE_QBSS_LOAD found
++ pEdcaParm->bValid = FALSE; // default: no IE_EDCA_PARAMETER found
++ pQosCapability->bValid = FALSE; // default: no IE_QOS_CAPABILITY found
++
++ pFrame = (PFRAME_802_11)Msg;
++
++ // get subtype from header
++ SubType = (UCHAR)pFrame->Hdr.FC.SubType;
++
++ // get Addr2 and BSSID from header
++ COPY_MAC_ADDR(pAddr2, pFrame->Hdr.Addr2);
++ COPY_MAC_ADDR(pBssid, pFrame->Hdr.Addr3);
++
++// hex_dump("Beacon", Msg, MsgLen);
++
++ Ptr = pFrame->Octet;
++ Length += LENGTH_802_11;
++
++ // get timestamp from payload and advance the pointer
++ NdisMoveMemory(pTimestamp, Ptr, TIMESTAMP_LEN);
++
++ pTimestamp->u.LowPart = cpu2le32(pTimestamp->u.LowPart);
++ pTimestamp->u.HighPart = cpu2le32(pTimestamp->u.HighPart);
++
++ Ptr += TIMESTAMP_LEN;
++ Length += TIMESTAMP_LEN;
++
++ // get beacon interval from payload and advance the pointer
++ NdisMoveMemory(pBeaconPeriod, Ptr, 2);
++ Ptr += 2;
++ Length += 2;
++
++ // get capability info from payload and advance the pointer
++ NdisMoveMemory(pCapabilityInfo, Ptr, 2);
++ Ptr += 2;
++ Length += 2;
++
++ if (CAP_IS_ESS_ON(*pCapabilityInfo))
++ *pBssType = BSS_INFRA;
++ else
++ *pBssType = BSS_ADHOC;
++
++ pEid = (PEID_STRUCT) Ptr;
++
++ // get variable fields from payload and advance the pointer
++ while ((Length + 2 + pEid->Len) <= MsgLen)
++ {
++ //
++ // Secure copy VIE to VarIE[MAX_VIE_LEN] didn't overflow.
++ //
++ if ((*LengthVIE + pEid->Len + 2) >= MAX_VIE_LEN)
++ {
++ DBGPRINT(RT_DEBUG_WARN, ("PeerBeaconAndProbeRspSanity - Variable IEs out of resource [len(=%d) > MAX_VIE_LEN(=%d)]\n",
++ (*LengthVIE + pEid->Len + 2), MAX_VIE_LEN));
++ break;
++ }
++
++ switch(pEid->Eid)
++ {
++ case IE_SSID:
++ // Already has one SSID EID in this beacon, ignore the second one
++ if (Sanity & 0x1)
++ break;
++ if(pEid->Len <= MAX_LEN_OF_SSID)
++ {
++ NdisMoveMemory(Ssid, pEid->Octet, pEid->Len);
++ *pSsidLen = pEid->Len;
++ Sanity |= 0x1;
++ }
++ else
++ {
++ DBGPRINT(RT_DEBUG_TRACE, ("PeerBeaconAndProbeRspSanity - wrong IE_SSID (len=%d)\n",pEid->Len));
++ return FALSE;
++ }
++ break;
++
++ case IE_SUPP_RATES:
++ if(pEid->Len <= MAX_LEN_OF_SUPPORTED_RATES)
++ {
++ Sanity |= 0x2;
++ NdisMoveMemory(SupRate, pEid->Octet, pEid->Len);
++ *pSupRateLen = pEid->Len;
++
++ // TODO: 2004-09-14 not a good design here, cause it exclude extra rates
++ // from ScanTab. We should report as is. And filter out unsupported
++ // rates in MlmeAux.
++ // Check against the supported rates
++ // RTMPCheckRates(pAd, SupRate, pSupRateLen);
++ }
++ else
++ {
++ DBGPRINT(RT_DEBUG_TRACE, ("PeerBeaconAndProbeRspSanity - wrong IE_SUPP_RATES (len=%d)\n",pEid->Len));
++ return FALSE;
++ }
++ break;
++
++ case IE_HT_CAP:
++ if (pEid->Len >= SIZE_HT_CAP_IE) //Note: allow extension.!!
++ {
++ NdisMoveMemory(pHtCapability, pEid->Octet, sizeof(HT_CAPABILITY_IE));
++ *pHtCapabilityLen = SIZE_HT_CAP_IE; // Nnow we only support 26 bytes.
++
++ *(USHORT *)(&pHtCapability->HtCapInfo) = cpu2le16(*(USHORT *)(&pHtCapability->HtCapInfo));
++ *(USHORT *)(&pHtCapability->ExtHtCapInfo) = cpu2le16(*(USHORT *)(&pHtCapability->ExtHtCapInfo));
++
++#ifdef CONFIG_STA_SUPPORT
++ IF_DEV_CONFIG_OPMODE_ON_STA(pAd)
++ {
++ *pPreNHtCapabilityLen = 0; // Nnow we only support 26 bytes.
++
++ Ptr = (PUCHAR) pVIE;
++ NdisMoveMemory(Ptr + *LengthVIE, &pEid->Eid, pEid->Len + 2);
++ *LengthVIE += (pEid->Len + 2);
++ }
++#endif // CONFIG_STA_SUPPORT //
++ }
++ else
++ {
++ DBGPRINT(RT_DEBUG_WARN, ("PeerBeaconAndProbeRspSanity - wrong IE_HT_CAP. pEid->Len = %d\n", pEid->Len));
++ }
++
++ break;
++ case IE_ADD_HT:
++ if (pEid->Len >= sizeof(ADD_HT_INFO_IE))
++ {
++ // This IE allows extension, but we can ignore extra bytes beyond our knowledge , so only
++ // copy first sizeof(ADD_HT_INFO_IE)
++ NdisMoveMemory(AddHtInfo, pEid->Octet, sizeof(ADD_HT_INFO_IE));
++ *AddHtInfoLen = SIZE_ADD_HT_INFO_IE;
++
++ CtrlChannel = AddHtInfo->ControlChan;
++
++ *(USHORT *)(&AddHtInfo->AddHtInfo2) = cpu2le16(*(USHORT *)(&AddHtInfo->AddHtInfo2));
++ *(USHORT *)(&AddHtInfo->AddHtInfo3) = cpu2le16(*(USHORT *)(&AddHtInfo->AddHtInfo3));
++
++#ifdef CONFIG_STA_SUPPORT
++ IF_DEV_CONFIG_OPMODE_ON_STA(pAd)
++ {
++ Ptr = (PUCHAR) pVIE;
++ NdisMoveMemory(Ptr + *LengthVIE, &pEid->Eid, pEid->Len + 2);
++ *LengthVIE += (pEid->Len + 2);
++ }
++#endif // CONFIG_STA_SUPPORT //
++ }
++ else
++ {
++ DBGPRINT(RT_DEBUG_WARN, ("PeerBeaconAndProbeRspSanity - wrong IE_ADD_HT. \n"));
++ }
++
++ break;
++ case IE_SECONDARY_CH_OFFSET:
++ if (pEid->Len == 1)
++ {
++ *NewExtChannelOffset = pEid->Octet[0];
++ }
++ else
++ {
++ DBGPRINT(RT_DEBUG_WARN, ("PeerBeaconAndProbeRspSanity - wrong IE_SECONDARY_CH_OFFSET. \n"));
++ }
++
++ break;
++ case IE_FH_PARM:
++ DBGPRINT(RT_DEBUG_TRACE, ("PeerBeaconAndProbeRspSanity(IE_FH_PARM) \n"));
++ break;
++
++ case IE_DS_PARM:
++ if(pEid->Len == 1)
++ {
++ *pChannel = *pEid->Octet;
++#ifdef CONFIG_STA_SUPPORT
++ IF_DEV_CONFIG_OPMODE_ON_STA(pAd)
++ {
++ if (ChannelSanity(pAd, *pChannel) == 0)
++ {
++
++ return FALSE;
++ }
++ }
++#endif // CONFIG_STA_SUPPORT //
++ Sanity |= 0x4;
++ }
++ else
++ {
++ DBGPRINT(RT_DEBUG_TRACE, ("PeerBeaconAndProbeRspSanity - wrong IE_DS_PARM (len=%d)\n",pEid->Len));
++ return FALSE;
++ }
++ break;
++
++ case IE_CF_PARM:
++ if(pEid->Len == 6)
++ {
++ pCfParm->bValid = TRUE;
++ pCfParm->CfpCount = pEid->Octet[0];
++ pCfParm->CfpPeriod = pEid->Octet[1];
++ pCfParm->CfpMaxDuration = pEid->Octet[2] + 256 * pEid->Octet[3];
++ pCfParm->CfpDurRemaining = pEid->Octet[4] + 256 * pEid->Octet[5];
++ }
++ else
++ {
++ DBGPRINT(RT_DEBUG_TRACE, ("PeerBeaconAndProbeRspSanity - wrong IE_CF_PARM\n"));
++ return FALSE;
++ }
++ break;
++
++ case IE_IBSS_PARM:
++ if(pEid->Len == 2)
++ {
++ NdisMoveMemory(pAtimWin, pEid->Octet, pEid->Len);
++ }
++ else
++ {
++ DBGPRINT(RT_DEBUG_TRACE, ("PeerBeaconAndProbeRspSanity - wrong IE_IBSS_PARM\n"));
++ return FALSE;
++ }
++ break;
++
++#ifdef CONFIG_STA_SUPPORT
++ case IE_TIM:
++ if(INFRA_ON(pAd) && SubType == SUBTYPE_BEACON)
++ {
++ GetTimBit((PUCHAR)pEid, pAd->StaActive.Aid, &TimLen, pBcastFlag, pDtimCount, pDtimPeriod, pMessageToMe);
++ }
++ break;
++#endif // CONFIG_STA_SUPPORT //
++ case IE_CHANNEL_SWITCH_ANNOUNCEMENT:
++ if(pEid->Len == 3)
++ {
++ *pNewChannel = pEid->Octet[1]; //extract new channel number
++ }
++ break;
++
++ // New for WPA
++ // CCX v2 has the same IE, we need to parse that too
++ // Wifi WMM use the same IE vale, need to parse that too
++ // case IE_WPA:
++ case IE_VENDOR_SPECIFIC:
++ // Check Broadcom/Atheros 802.11n OUI version, for HT Capability IE.
++ // This HT IE is before IEEE draft set HT IE value.2006-09-28 by Jan.
++ /*if (NdisEqualMemory(pEid->Octet, BROADCOM_OUI, 3) && (pEid->Len >= 4))
++ {
++ if ((pEid->Octet[3] == OUI_BROADCOM_HT) && (pEid->Len >= 30))
++ {
++ {
++ NdisMoveMemory(pHtCapability, &pEid->Octet[4], sizeof(HT_CAPABILITY_IE));
++ *pHtCapabilityLen = SIZE_HT_CAP_IE; // Nnow we only support 26 bytes.
++ }
++ }
++ if ((pEid->Octet[3] == OUI_BROADCOM_HT) && (pEid->Len >= 26))
++ {
++ {
++ NdisMoveMemory(AddHtInfo, &pEid->Octet[4], sizeof(ADD_HT_INFO_IE));
++ *AddHtInfoLen = SIZE_ADD_HT_INFO_IE; // Nnow we only support 26 bytes.
++ }
++ }
++ }
++ */
++ // Check the OUI version, filter out non-standard usage
++ if (NdisEqualMemory(pEid->Octet, RALINK_OUI, 3) && (pEid->Len == 7))
++ {
++ //*pRalinkIe = pEid->Octet[3];
++ if (pEid->Octet[3] != 0)
++ *pRalinkIe = pEid->Octet[3];
++ else
++ *pRalinkIe = 0xf0000000; // Set to non-zero value (can't set bit0-2) to represent this is Ralink Chip. So at linkup, we will set ralinkchip flag.
++ }
++#ifdef CONFIG_STA_SUPPORT
++#ifdef DOT11_N_SUPPORT
++ // This HT IE is before IEEE draft set HT IE value.2006-09-28 by Jan.
++
++ // Other vendors had production before IE_HT_CAP value is assigned. To backward support those old-firmware AP,
++ // Check broadcom-defiend pre-802.11nD1.0 OUI for HT related IE, including HT Capatilities IE and HT Information IE
++ else if ((*pHtCapabilityLen == 0) && NdisEqualMemory(pEid->Octet, PRE_N_HT_OUI, 3) && (pEid->Len >= 4) && (pAd->OpMode == OPMODE_STA))
++ {
++ if ((pEid->Octet[3] == OUI_PREN_HT_CAP) && (pEid->Len >= 30) && (*pHtCapabilityLen == 0))
++ {
++ NdisMoveMemory(pHtCapability, &pEid->Octet[4], sizeof(HT_CAPABILITY_IE));
++ *pPreNHtCapabilityLen = SIZE_HT_CAP_IE;
++ }
++
++ if ((pEid->Octet[3] == OUI_PREN_ADD_HT) && (pEid->Len >= 26))
++ {
++ NdisMoveMemory(AddHtInfo, &pEid->Octet[4], sizeof(ADD_HT_INFO_IE));
++ *AddHtInfoLen = SIZE_ADD_HT_INFO_IE;
++ }
++ }
++#endif // DOT11_N_SUPPORT //
++#endif // CONFIG_STA_SUPPORT //
++ else if (NdisEqualMemory(pEid->Octet, WPA_OUI, 4))
++ {
++ // Copy to pVIE which will report to microsoft bssid list.
++ Ptr = (PUCHAR) pVIE;
++ NdisMoveMemory(Ptr + *LengthVIE, &pEid->Eid, pEid->Len + 2);
++ *LengthVIE += (pEid->Len + 2);
++ }
++ else if (NdisEqualMemory(pEid->Octet, WME_PARM_ELEM, 6) && (pEid->Len == 24))
++ {
++ PUCHAR ptr;
++ int i;
++
++ // parsing EDCA parameters
++ pEdcaParm->bValid = TRUE;
++ pEdcaParm->bQAck = FALSE; // pEid->Octet[0] & 0x10;
++ pEdcaParm->bQueueRequest = FALSE; // pEid->Octet[0] & 0x20;
++ pEdcaParm->bTxopRequest = FALSE; // pEid->Octet[0] & 0x40;
++ pEdcaParm->EdcaUpdateCount = pEid->Octet[6] & 0x0f;
++ pEdcaParm->bAPSDCapable = (pEid->Octet[6] & 0x80) ? 1 : 0;
++ ptr = &pEid->Octet[8];
++ for (i=0; i<4; i++)
++ {
++ UCHAR aci = (*ptr & 0x60) >> 5; // b5~6 is AC INDEX
++ pEdcaParm->bACM[aci] = (((*ptr) & 0x10) == 0x10); // b5 is ACM
++ pEdcaParm->Aifsn[aci] = (*ptr) & 0x0f; // b0~3 is AIFSN
++ pEdcaParm->Cwmin[aci] = *(ptr+1) & 0x0f; // b0~4 is Cwmin
++ pEdcaParm->Cwmax[aci] = *(ptr+1) >> 4; // b5~8 is Cwmax
++ pEdcaParm->Txop[aci] = *(ptr+2) + 256 * (*(ptr+3)); // in unit of 32-us
++ ptr += 4; // point to next AC
++ }
++ }
++ else if (NdisEqualMemory(pEid->Octet, WME_INFO_ELEM, 6) && (pEid->Len == 7))
++ {
++ // parsing EDCA parameters
++ pEdcaParm->bValid = TRUE;
++ pEdcaParm->bQAck = FALSE; // pEid->Octet[0] & 0x10;
++ pEdcaParm->bQueueRequest = FALSE; // pEid->Octet[0] & 0x20;
++ pEdcaParm->bTxopRequest = FALSE; // pEid->Octet[0] & 0x40;
++ pEdcaParm->EdcaUpdateCount = pEid->Octet[6] & 0x0f;
++ pEdcaParm->bAPSDCapable = (pEid->Octet[6] & 0x80) ? 1 : 0;
++
++ // use default EDCA parameter
++ pEdcaParm->bACM[QID_AC_BE] = 0;
++ pEdcaParm->Aifsn[QID_AC_BE] = 3;
++ pEdcaParm->Cwmin[QID_AC_BE] = CW_MIN_IN_BITS;
++ pEdcaParm->Cwmax[QID_AC_BE] = CW_MAX_IN_BITS;
++ pEdcaParm->Txop[QID_AC_BE] = 0;
++
++ pEdcaParm->bACM[QID_AC_BK] = 0;
++ pEdcaParm->Aifsn[QID_AC_BK] = 7;
++ pEdcaParm->Cwmin[QID_AC_BK] = CW_MIN_IN_BITS;
++ pEdcaParm->Cwmax[QID_AC_BK] = CW_MAX_IN_BITS;
++ pEdcaParm->Txop[QID_AC_BK] = 0;
++
++ pEdcaParm->bACM[QID_AC_VI] = 0;
++ pEdcaParm->Aifsn[QID_AC_VI] = 2;
++ pEdcaParm->Cwmin[QID_AC_VI] = CW_MIN_IN_BITS-1;
++ pEdcaParm->Cwmax[QID_AC_VI] = CW_MAX_IN_BITS;
++ pEdcaParm->Txop[QID_AC_VI] = 96; // AC_VI: 96*32us ~= 3ms
++
++ pEdcaParm->bACM[QID_AC_VO] = 0;
++ pEdcaParm->Aifsn[QID_AC_VO] = 2;
++ pEdcaParm->Cwmin[QID_AC_VO] = CW_MIN_IN_BITS-2;
++ pEdcaParm->Cwmax[QID_AC_VO] = CW_MAX_IN_BITS-1;
++ pEdcaParm->Txop[QID_AC_VO] = 48; // AC_VO: 48*32us ~= 1.5ms
++ }
++ break;
++
++ case IE_EXT_SUPP_RATES:
++ if (pEid->Len <= MAX_LEN_OF_SUPPORTED_RATES)
++ {
++ NdisMoveMemory(ExtRate, pEid->Octet, pEid->Len);
++ *pExtRateLen = pEid->Len;
++
++ // TODO: 2004-09-14 not a good design here, cause it exclude extra rates
++ // from ScanTab. We should report as is. And filter out unsupported
++ // rates in MlmeAux.
++ // Check against the supported rates
++ // RTMPCheckRates(pAd, ExtRate, pExtRateLen);
++ }
++ break;
++
++ case IE_ERP:
++ if (pEid->Len == 1)
++ {
++ *pErp = (UCHAR)pEid->Octet[0];
++ }
++ break;
++
++ case IE_AIRONET_CKIP:
++ // 0. Check Aironet IE length, it must be larger or equal to 28
++ // Cisco AP350 used length as 28
++ // Cisco AP12XX used length as 30
++ if (pEid->Len < (CKIP_NEGOTIATION_LENGTH - 2))
++ break;
++
++ // 1. Copy CKIP flag byte to buffer for process
++ *pCkipFlag = *(pEid->Octet + 8);
++ break;
++
++ case IE_AP_TX_POWER:
++ // AP Control of Client Transmit Power
++ //0. Check Aironet IE length, it must be 6
++ if (pEid->Len != 0x06)
++ break;
++
++ // Get cell power limit in dBm
++ if (NdisEqualMemory(pEid->Octet, CISCO_OUI, 3) == 1)
++ *pAironetCellPowerLimit = *(pEid->Octet + 4);
++ break;
++
++ // WPA2 & 802.11i RSN
++ case IE_RSN:
++ // There is no OUI for version anymore, check the group cipher OUI before copying
++ if (RTMPEqualMemory(pEid->Octet + 2, RSN_OUI, 3))
++ {
++ // Copy to pVIE which will report to microsoft bssid list.
++ Ptr = (PUCHAR) pVIE;
++ NdisMoveMemory(Ptr + *LengthVIE, &pEid->Eid, pEid->Len + 2);
++ *LengthVIE += (pEid->Len + 2);
++ }
++ break;
++#ifdef CONFIG_STA_SUPPORT
++#ifdef EXT_BUILD_CHANNEL_LIST
++ case IE_COUNTRY:
++ Ptr = (PUCHAR) pVIE;
++ NdisMoveMemory(Ptr + *LengthVIE, &pEid->Eid, pEid->Len + 2);
++ *LengthVIE += (pEid->Len + 2);
++ break;
++#endif // EXT_BUILD_CHANNEL_LIST //
++#endif // CONFIG_STA_SUPPORT //
++ default:
++ break;
++ }
++
++ Length = Length + 2 + pEid->Len; // Eid[1] + Len[1]+ content[Len]
++ pEid = (PEID_STRUCT)((UCHAR*)pEid + 2 + pEid->Len);
++ }
++
++ // For some 11a AP. it did not have the channel EID, patch here
++#ifdef CONFIG_STA_SUPPORT
++ IF_DEV_CONFIG_OPMODE_ON_STA(pAd)
++ {
++ UCHAR LatchRfChannel = MsgChannel;
++ if ((pAd->LatchRfRegs.Channel > 14) && ((Sanity & 0x4) == 0))
++ {
++ if (CtrlChannel != 0)
++ *pChannel = CtrlChannel;
++ else
++ *pChannel = LatchRfChannel;
++ Sanity |= 0x4;
++ }
++ }
++#endif // CONFIG_STA_SUPPORT //
++
++ if (Sanity != 0x7)
++ {
++ DBGPRINT(RT_DEBUG_WARN, ("PeerBeaconAndProbeRspSanity - missing field, Sanity=0x%02x\n", Sanity));
++ return FALSE;
++ }
++ else
++ {
++ return TRUE;
++ }
++
++}
++
++#ifdef DOT11N_DRAFT3
++/*
++ ==========================================================================
++ Description:
++ MLME message sanity check for some IE addressed in 802.11n d3.03.
++ Return:
++ TRUE if all parameters are OK, FALSE otherwise
++
++ IRQL = DISPATCH_LEVEL
++
++ ==========================================================================
++ */
++BOOLEAN PeerBeaconAndProbeRspSanity2(
++ IN PRTMP_ADAPTER pAd,
++ IN VOID *Msg,
++ IN ULONG MsgLen,
++ OUT UCHAR *RegClass)
++{
++ CHAR *Ptr;
++ PFRAME_802_11 pFrame;
++ PEID_STRUCT pEid;
++ ULONG Length = 0;
++
++ pFrame = (PFRAME_802_11)Msg;
++
++ *RegClass = 0;
++ Ptr = pFrame->Octet;
++ Length += LENGTH_802_11;
++
++ // get timestamp from payload and advance the pointer
++ Ptr += TIMESTAMP_LEN;
++ Length += TIMESTAMP_LEN;
++
++ // get beacon interval from payload and advance the pointer
++ Ptr += 2;
++ Length += 2;
++
++ // get capability info from payload and advance the pointer
++ Ptr += 2;
++ Length += 2;
++
++ pEid = (PEID_STRUCT) Ptr;
++
++ // get variable fields from payload and advance the pointer
++ while ((Length + 2 + pEid->Len) <= MsgLen)
++ {
++ switch(pEid->Eid)
++ {
++ case IE_SUPP_REG_CLASS:
++ if(pEid->Len > 0)
++ {
++ *RegClass = *pEid->Octet;
++ }
++ else
++ {
++ DBGPRINT(RT_DEBUG_TRACE, ("PeerBeaconAndProbeRspSanity - wrong IE_SSID (len=%d)\n",pEid->Len));
++ return FALSE;
++ }
++ break;
++ }
++
++ Length = Length + 2 + pEid->Len; // Eid[1] + Len[1]+ content[Len]
++ pEid = (PEID_STRUCT)((UCHAR*)pEid + 2 + pEid->Len);
++ }
++
++ return TRUE;
++
++}
++#endif // DOT11N_DRAFT3 //
++
++/*
++ ==========================================================================
++ Description:
++ MLME message sanity check
++ Return:
++ TRUE if all parameters are OK, FALSE otherwise
++ ==========================================================================
++ */
++BOOLEAN MlmeScanReqSanity(
++ IN PRTMP_ADAPTER pAd,
++ IN VOID *Msg,
++ IN ULONG MsgLen,
++ OUT UCHAR *pBssType,
++ OUT CHAR Ssid[],
++ OUT UCHAR *pSsidLen,
++ OUT UCHAR *pScanType)
++{
++ MLME_SCAN_REQ_STRUCT *Info;
++
++ Info = (MLME_SCAN_REQ_STRUCT *)(Msg);
++ *pBssType = Info->BssType;
++ *pSsidLen = Info->SsidLen;
++ NdisMoveMemory(Ssid, Info->Ssid, *pSsidLen);
++ *pScanType = Info->ScanType;
++
++ if ((*pBssType == BSS_INFRA || *pBssType == BSS_ADHOC || *pBssType == BSS_ANY)
++ && (*pScanType == SCAN_ACTIVE || *pScanType == SCAN_PASSIVE
++#ifdef CONFIG_STA_SUPPORT
++ || *pScanType == SCAN_CISCO_PASSIVE || *pScanType == SCAN_CISCO_ACTIVE
++ || *pScanType == SCAN_CISCO_CHANNEL_LOAD || *pScanType == SCAN_CISCO_NOISE
++#endif // CONFIG_STA_SUPPORT //
++ ))
++ {
++ return TRUE;
++ }
++ else
++ {
++ DBGPRINT(RT_DEBUG_TRACE, ("MlmeScanReqSanity fail - wrong BssType or ScanType\n"));
++ return FALSE;
++ }
++}
++
++// IRQL = DISPATCH_LEVEL
++UCHAR ChannelSanity(
++ IN PRTMP_ADAPTER pAd,
++ IN UCHAR channel)
++{
++ int i;
++
++ for (i = 0; i < pAd->ChannelListNum; i ++)
++ {
++ if (channel == pAd->ChannelList[i].Channel)
++ return 1;
++ }
++ return 0;
++}
++
++/*
++ ==========================================================================
++ Description:
++ MLME message sanity check
++ Return:
++ TRUE if all parameters are OK, FALSE otherwise
++
++ IRQL = DISPATCH_LEVEL
++
++ ==========================================================================
++ */
++BOOLEAN PeerDeauthSanity(
++ IN PRTMP_ADAPTER pAd,
++ IN VOID *Msg,
++ IN ULONG MsgLen,
++ OUT PUCHAR pAddr2,
++ OUT USHORT *pReason)
++{
++ PFRAME_802_11 pFrame = (PFRAME_802_11)Msg;
++
++ COPY_MAC_ADDR(pAddr2, pFrame->Hdr.Addr2);
++ NdisMoveMemory(pReason, &pFrame->Octet[0], 2);
++
++ return TRUE;
++}
++
++/*
++ ==========================================================================
++ Description:
++ MLME message sanity check
++ Return:
++ TRUE if all parameters are OK, FALSE otherwise
++
++ IRQL = DISPATCH_LEVEL
++
++ ==========================================================================
++ */
++BOOLEAN PeerAuthSanity(
++ IN PRTMP_ADAPTER pAd,
++ IN VOID *Msg,
++ IN ULONG MsgLen,
++ OUT PUCHAR pAddr,
++ OUT USHORT *pAlg,
++ OUT USHORT *pSeq,
++ OUT USHORT *pStatus,
++ CHAR *pChlgText)
++{
++ PFRAME_802_11 pFrame = (PFRAME_802_11)Msg;
++
++ COPY_MAC_ADDR(pAddr, pFrame->Hdr.Addr2);
++ NdisMoveMemory(pAlg, &pFrame->Octet[0], 2);
++ NdisMoveMemory(pSeq, &pFrame->Octet[2], 2);
++ NdisMoveMemory(pStatus, &pFrame->Octet[4], 2);
++
++ if ((*pAlg == Ndis802_11AuthModeOpen)
++#ifdef LEAP_SUPPORT
++ || (*pAlg == CISCO_AuthModeLEAP)
++#endif // LEAP_SUPPORT //
++ )
++ {
++ if (*pSeq == 1 || *pSeq == 2)
++ {
++ return TRUE;
++ }
++ else
++ {
++ DBGPRINT(RT_DEBUG_TRACE, ("PeerAuthSanity fail - wrong Seg#\n"));
++ return FALSE;
++ }
++ }
++ else if (*pAlg == Ndis802_11AuthModeShared)
++ {
++ if (*pSeq == 1 || *pSeq == 4)
++ {
++ return TRUE;
++ }
++ else if (*pSeq == 2 || *pSeq == 3)
++ {
++ NdisMoveMemory(pChlgText, &pFrame->Octet[8], CIPHER_TEXT_LEN);
++ return TRUE;
++ }
++ else
++ {
++ DBGPRINT(RT_DEBUG_TRACE, ("PeerAuthSanity fail - wrong Seg#\n"));
++ return FALSE;
++ }
++ }
++ else
++ {
++ DBGPRINT(RT_DEBUG_TRACE, ("PeerAuthSanity fail - wrong algorithm\n"));
++ return FALSE;
++ }
++}
++
++/*
++ ==========================================================================
++ Description:
++ MLME message sanity check
++ Return:
++ TRUE if all parameters are OK, FALSE otherwise
++ ==========================================================================
++ */
++BOOLEAN MlmeAuthReqSanity(
++ IN PRTMP_ADAPTER pAd,
++ IN VOID *Msg,
++ IN ULONG MsgLen,
++ OUT PUCHAR pAddr,
++ OUT ULONG *pTimeout,
++ OUT USHORT *pAlg)
++{
++ MLME_AUTH_REQ_STRUCT *pInfo;
++
++ pInfo = (MLME_AUTH_REQ_STRUCT *)Msg;
++ COPY_MAC_ADDR(pAddr, pInfo->Addr);
++ *pTimeout = pInfo->Timeout;
++ *pAlg = pInfo->Alg;
++
++ if (((*pAlg == Ndis802_11AuthModeShared) ||(*pAlg == Ndis802_11AuthModeOpen)
++#ifdef LEAP_SUPPORT
++ || (*pAlg == CISCO_AuthModeLEAP)
++#endif // LEAP_SUPPORT //
++ ) &&
++ ((*pAddr & 0x01) == 0))
++ {
++ return TRUE;
++ }
++ else
++ {
++ DBGPRINT(RT_DEBUG_TRACE, ("MlmeAuthReqSanity fail - wrong algorithm\n"));
++ return FALSE;
++ }
++}
++
++/*
++ ==========================================================================
++ Description:
++ MLME message sanity check
++ Return:
++ TRUE if all parameters are OK, FALSE otherwise
++
++ IRQL = DISPATCH_LEVEL
++
++ ==========================================================================
++ */
++BOOLEAN MlmeAssocReqSanity(
++ IN PRTMP_ADAPTER pAd,
++ IN VOID *Msg,
++ IN ULONG MsgLen,
++ OUT PUCHAR pApAddr,
++ OUT USHORT *pCapabilityInfo,
++ OUT ULONG *pTimeout,
++ OUT USHORT *pListenIntv)
++{
++ MLME_ASSOC_REQ_STRUCT *pInfo;
++
++ pInfo = (MLME_ASSOC_REQ_STRUCT *)Msg;
++ *pTimeout = pInfo->Timeout; // timeout
++ COPY_MAC_ADDR(pApAddr, pInfo->Addr); // AP address
++ *pCapabilityInfo = pInfo->CapabilityInfo; // capability info
++ *pListenIntv = pInfo->ListenIntv;
++
++ return TRUE;
++}
++
++/*
++ ==========================================================================
++ Description:
++ MLME message sanity check
++ Return:
++ TRUE if all parameters are OK, FALSE otherwise
++
++ IRQL = DISPATCH_LEVEL
++
++ ==========================================================================
++ */
++BOOLEAN PeerDisassocSanity(
++ IN PRTMP_ADAPTER pAd,
++ IN VOID *Msg,
++ IN ULONG MsgLen,
++ OUT PUCHAR pAddr2,
++ OUT USHORT *pReason)
++{
++ PFRAME_802_11 pFrame = (PFRAME_802_11)Msg;
++
++ COPY_MAC_ADDR(pAddr2, pFrame->Hdr.Addr2);
++ NdisMoveMemory(pReason, &pFrame->Octet[0], 2);
++
++ return TRUE;
++}
++
++/*
++ ========================================================================
++ Routine Description:
++ Sanity check NetworkType (11b, 11g or 11a)
++
++ Arguments:
++ pBss - Pointer to BSS table.
++
++ Return Value:
++ Ndis802_11DS .......(11b)
++ Ndis802_11OFDM24....(11g)
++ Ndis802_11OFDM5.....(11a)
++
++ IRQL = DISPATCH_LEVEL
++
++ ========================================================================
++*/
++NDIS_802_11_NETWORK_TYPE NetworkTypeInUseSanity(
++ IN PBSS_ENTRY pBss)
++{
++ NDIS_802_11_NETWORK_TYPE NetWorkType;
++ UCHAR rate, i;
++
++ NetWorkType = Ndis802_11DS;
++
++ if (pBss->Channel <= 14)
++ {
++ //
++ // First check support Rate.
++ //
++ for (i = 0; i < pBss->SupRateLen; i++)
++ {
++ rate = pBss->SupRate[i] & 0x7f; // Mask out basic rate set bit
++ if ((rate == 2) || (rate == 4) || (rate == 11) || (rate == 22))
++ {
++ continue;
++ }
++ else
++ {
++ //
++ // Otherwise (even rate > 108) means Ndis802_11OFDM24
++ //
++ NetWorkType = Ndis802_11OFDM24;
++ break;
++ }
++ }
++
++ //
++ // Second check Extend Rate.
++ //
++ if (NetWorkType != Ndis802_11OFDM24)
++ {
++ for (i = 0; i < pBss->ExtRateLen; i++)
++ {
++ rate = pBss->SupRate[i] & 0x7f; // Mask out basic rate set bit
++ if ((rate == 2) || (rate == 4) || (rate == 11) || (rate == 22))
++ {
++ continue;
++ }
++ else
++ {
++ //
++ // Otherwise (even rate > 108) means Ndis802_11OFDM24
++ //
++ NetWorkType = Ndis802_11OFDM24;
++ break;
++ }
++ }
++ }
++ }
++ else
++ {
++ NetWorkType = Ndis802_11OFDM5;
++ }
++
++ if (pBss->HtCapabilityLen != 0)
++ {
++ if (NetWorkType == Ndis802_11OFDM5)
++ NetWorkType = Ndis802_11OFDM5_N;
++ else
++ NetWorkType = Ndis802_11OFDM24_N;
++ }
++
++ return NetWorkType;
++}
++
++/*
++ ==========================================================================
++ Description:
++ WPA message sanity check
++ Return:
++ TRUE if all parameters are OK, FALSE otherwise
++ ==========================================================================
++ */
++BOOLEAN PeerWpaMessageSanity(
++ IN PRTMP_ADAPTER pAd,
++ IN PEAPOL_PACKET pMsg,
++ IN ULONG MsgLen,
++ IN UCHAR MsgType,
++ IN MAC_TABLE_ENTRY *pEntry)
++{
++ UCHAR mic[LEN_KEY_DESC_MIC], digest[80], KEYDATA[MAX_LEN_OF_RSNIE];
++ BOOLEAN bReplayDiff = FALSE;
++ BOOLEAN bWPA2 = FALSE;
++ KEY_INFO EapolKeyInfo;
++ UCHAR GroupKeyIndex = 0;
++
++
++ NdisZeroMemory(mic, sizeof(mic));
++ NdisZeroMemory(digest, sizeof(digest));
++ NdisZeroMemory(KEYDATA, sizeof(KEYDATA));
++ NdisZeroMemory((PUCHAR)&EapolKeyInfo, sizeof(EapolKeyInfo));
++
++ NdisMoveMemory((PUCHAR)&EapolKeyInfo, (PUCHAR)&pMsg->KeyDesc.KeyInfo, sizeof(KEY_INFO));
++
++ *((USHORT *)&EapolKeyInfo) = cpu2le16(*((USHORT *)&EapolKeyInfo));
++
++ // Choose WPA2 or not
++ if ((pEntry->AuthMode == Ndis802_11AuthModeWPA2) || (pEntry->AuthMode == Ndis802_11AuthModeWPA2PSK))
++ bWPA2 = TRUE;
++
++ // 0. Check MsgType
++ if ((MsgType > EAPOL_GROUP_MSG_2) || (MsgType < EAPOL_PAIR_MSG_1))
++ {
++ DBGPRINT(RT_DEBUG_ERROR, ("The message type is invalid(%d)! \n", MsgType));
++ return FALSE;
++ }
++
++ // 1. Replay counter check
++ if (MsgType == EAPOL_PAIR_MSG_1 || MsgType == EAPOL_PAIR_MSG_3 || MsgType == EAPOL_GROUP_MSG_1) // For supplicant
++ {
++ // First validate replay counter, only accept message with larger replay counter.
++ // Let equal pass, some AP start with all zero replay counter
++ UCHAR ZeroReplay[LEN_KEY_DESC_REPLAY];
++
++ NdisZeroMemory(ZeroReplay, LEN_KEY_DESC_REPLAY);
++ if ((RTMPCompareMemory(pMsg->KeyDesc.ReplayCounter, pEntry->R_Counter, LEN_KEY_DESC_REPLAY) != 1) &&
++ (RTMPCompareMemory(pMsg->KeyDesc.ReplayCounter, ZeroReplay, LEN_KEY_DESC_REPLAY) != 0))
++ {
++ bReplayDiff = TRUE;
++ }
++ }
++ else if (MsgType == EAPOL_PAIR_MSG_2 || MsgType == EAPOL_PAIR_MSG_4 || MsgType == EAPOL_GROUP_MSG_2) // For authenticator
++ {
++ // check Replay Counter coresponds to MSG from authenticator, otherwise discard
++ if (!NdisEqualMemory(pMsg->KeyDesc.ReplayCounter, pEntry->R_Counter, LEN_KEY_DESC_REPLAY))
++ {
++ bReplayDiff = TRUE;
++ }
++ }
++
++ // Replay Counter different condition
++ if (bReplayDiff)
++ {
++ // send wireless event - for replay counter different
++ if (pAd->CommonCfg.bWirelessEvent)
++ RTMPSendWirelessEvent(pAd, IW_REPLAY_COUNTER_DIFF_EVENT_FLAG, pEntry->Addr, pEntry->apidx, 0);
++
++ if (MsgType < EAPOL_GROUP_MSG_1)
++ {
++ DBGPRINT(RT_DEBUG_ERROR, ("Replay Counter Different in pairwise msg %d of 4-way handshake!\n", MsgType));
++ }
++ else
++ {
++ DBGPRINT(RT_DEBUG_ERROR, ("Replay Counter Different in group msg %d of 2-way handshake!\n", (MsgType - EAPOL_PAIR_MSG_4)));
++ }
++
++ hex_dump("Receive replay counter ", pMsg->KeyDesc.ReplayCounter, LEN_KEY_DESC_REPLAY);
++ hex_dump("Current replay counter ", pEntry->R_Counter, LEN_KEY_DESC_REPLAY);
++ return FALSE;
++ }
++
++ // 2. Verify MIC except Pairwise Msg1
++ if (MsgType != EAPOL_PAIR_MSG_1)
++ {
++ UCHAR rcvd_mic[LEN_KEY_DESC_MIC];
++
++ // Record the received MIC for check later
++ NdisMoveMemory(rcvd_mic, pMsg->KeyDesc.KeyMic, LEN_KEY_DESC_MIC);
++ NdisZeroMemory(pMsg->KeyDesc.KeyMic, LEN_KEY_DESC_MIC);
++
++ if (pEntry->WepStatus == Ndis802_11Encryption2Enabled) // TKIP
++ {
++ hmac_md5(pEntry->PTK, LEN_EAP_MICK, (PUCHAR)pMsg, MsgLen, mic);
++ }
++ else if (pEntry->WepStatus == Ndis802_11Encryption3Enabled) // AES
++ {
++ HMAC_SHA1((PUCHAR)pMsg, MsgLen, pEntry->PTK, LEN_EAP_MICK, digest);
++ NdisMoveMemory(mic, digest, LEN_KEY_DESC_MIC);
++ }
++
++ if (!NdisEqualMemory(rcvd_mic, mic, LEN_KEY_DESC_MIC))
++ {
++ // send wireless event - for MIC different
++ if (pAd->CommonCfg.bWirelessEvent)
++ RTMPSendWirelessEvent(pAd, IW_MIC_DIFF_EVENT_FLAG, pEntry->Addr, pEntry->apidx, 0);
++
++ if (MsgType < EAPOL_GROUP_MSG_1)
++ {
++ DBGPRINT(RT_DEBUG_ERROR, ("MIC Different in pairwise msg %d of 4-way handshake!\n", MsgType));
++ }
++ else
++ {
++ DBGPRINT(RT_DEBUG_ERROR, ("MIC Different in group msg %d of 2-way handshake!\n", (MsgType - EAPOL_PAIR_MSG_4)));
++ }
++
++ hex_dump("Received MIC", rcvd_mic, LEN_KEY_DESC_MIC);
++ hex_dump("Desired MIC", mic, LEN_KEY_DESC_MIC);
++
++ return FALSE;
++ }
++ }
++
++ // Extract the context of the Key Data field if it exist
++ // The field in pairwise_msg_2_WPA1(WPA2) & pairwise_msg_3_WPA1 is un-encrypted.
++ // The field in group_msg_1_WPA1(WPA2) & pairwise_msg_3_WPA2 is encrypted.
++ if (pMsg->KeyDesc.KeyDataLen[1] > 0)
++ {
++ // Decrypt this field
++ if ((MsgType == EAPOL_PAIR_MSG_3 && bWPA2) || (MsgType == EAPOL_GROUP_MSG_1))
++ {
++ if(pEntry->WepStatus == Ndis802_11Encryption3Enabled)
++ {
++ // AES
++ AES_GTK_KEY_UNWRAP(&pEntry->PTK[16], KEYDATA, pMsg->KeyDesc.KeyDataLen[1],pMsg->KeyDesc.KeyData);
++ }
++ else
++ {
++ INT i;
++ UCHAR Key[32];
++ // Decrypt TKIP GTK
++ // Construct 32 bytes RC4 Key
++ NdisMoveMemory(Key, pMsg->KeyDesc.KeyIv, 16);
++ NdisMoveMemory(&Key[16], &pEntry->PTK[16], 16);
++ ARCFOUR_INIT(&pAd->PrivateInfo.WEPCONTEXT, Key, 32);
++ //discard first 256 bytes
++ for(i = 0; i < 256; i++)
++ ARCFOUR_BYTE(&pAd->PrivateInfo.WEPCONTEXT);
++ // Decrypt GTK. Becareful, there is no ICV to check the result is correct or not
++ ARCFOUR_DECRYPT(&pAd->PrivateInfo.WEPCONTEXT, KEYDATA, pMsg->KeyDesc.KeyData, pMsg->KeyDesc.KeyDataLen[1]);
++ }
++
++ if (!bWPA2 && (MsgType == EAPOL_GROUP_MSG_1))
++ GroupKeyIndex = EapolKeyInfo.KeyIndex;
++
++ }
++ else if ((MsgType == EAPOL_PAIR_MSG_2) || (MsgType == EAPOL_PAIR_MSG_3 && !bWPA2))
++ {
++ NdisMoveMemory(KEYDATA, pMsg->KeyDesc.KeyData, pMsg->KeyDesc.KeyDataLen[1]);
++ }
++ else
++ {
++
++ return TRUE;
++ }
++
++ // Parse Key Data field to
++ // 1. verify RSN IE for pairwise_msg_2_WPA1(WPA2) ,pairwise_msg_3_WPA1(WPA2)
++ // 2. verify KDE format for pairwise_msg_3_WPA2, group_msg_1_WPA2
++ // 3. update shared key for pairwise_msg_3_WPA2, group_msg_1_WPA1(WPA2)
++ if (!RTMPParseEapolKeyData(pAd, KEYDATA, pMsg->KeyDesc.KeyDataLen[1], GroupKeyIndex, MsgType, bWPA2, pEntry))
++ {
++ return FALSE;
++ }
++ }
++
++ return TRUE;
++
++}
++
++#ifdef CONFIG_STA_SUPPORT
++#ifdef QOS_DLS_SUPPORT
++BOOLEAN MlmeDlsReqSanity(
++ IN PRTMP_ADAPTER pAd,
++ IN VOID *Msg,
++ IN ULONG MsgLen,
++ OUT PRT_802_11_DLS *pDLS,
++ OUT PUSHORT pReason)
++{
++ MLME_DLS_REQ_STRUCT *pInfo;
++
++ pInfo = (MLME_DLS_REQ_STRUCT *)Msg;
++
++ *pDLS = pInfo->pDLS;
++ *pReason = pInfo->Reason;
++
++ return TRUE;
++}
++#endif // QOS_DLS_SUPPORT //
++#endif // CONFIG_STA_SUPPORT //
++
++#ifdef QOS_DLS_SUPPORT
++BOOLEAN PeerDlsReqSanity(
++ IN PRTMP_ADAPTER pAd,
++ IN VOID *Msg,
++ IN ULONG MsgLen,
++ OUT PUCHAR pDA,
++ OUT PUCHAR pSA,
++ OUT USHORT *pCapabilityInfo,
++ OUT USHORT *pDlsTimeout,
++ OUT UCHAR *pRatesLen,
++ OUT UCHAR Rates[],
++ OUT UCHAR *pHtCapabilityLen,
++ OUT HT_CAPABILITY_IE *pHtCapability)
++{
++ CHAR *Ptr;
++ PFRAME_802_11 Fr = (PFRAME_802_11)Msg;
++ PEID_STRUCT eid_ptr;
++
++ // to prevent caller from using garbage output value
++ *pCapabilityInfo = 0;
++ *pDlsTimeout = 0;
++ *pHtCapabilityLen = 0;
++
++ Ptr = Fr->Octet;
++
++ // offset to destination MAC address (Category and Action field)
++ Ptr += 2;
++
++ // get DA from payload and advance the pointer
++ NdisMoveMemory(pDA, Ptr, MAC_ADDR_LEN);
++ Ptr += MAC_ADDR_LEN;
++
++ // get SA from payload and advance the pointer
++ NdisMoveMemory(pSA, Ptr, MAC_ADDR_LEN);
++ Ptr += MAC_ADDR_LEN;
++
++ // get capability info from payload and advance the pointer
++ NdisMoveMemory(pCapabilityInfo, Ptr, 2);
++ Ptr += 2;
++
++ // get capability info from payload and advance the pointer
++ NdisMoveMemory(pDlsTimeout, Ptr, 2);
++ Ptr += 2;
++
++ // Category and Action field + DA + SA + capability + Timeout
++ eid_ptr = (PEID_STRUCT) &Fr->Octet[18];
++
++ while (((UCHAR*)eid_ptr + eid_ptr->Len + 1) < ((UCHAR*)Fr + MsgLen))
++ {
++ switch(eid_ptr->Eid)
++ {
++ case IE_SUPP_RATES:
++ if ((eid_ptr->Len <= MAX_LEN_OF_SUPPORTED_RATES) && (eid_ptr->Len > 0))
++ {
++ NdisMoveMemory(Rates, eid_ptr->Octet, eid_ptr->Len);
++ DBGPRINT(RT_DEBUG_TRACE, ("PeerDlsReqSanity - IE_SUPP_RATES., Len=%d. Rates[0]=%x\n",eid_ptr->Len, Rates[0]));
++ DBGPRINT(RT_DEBUG_TRACE, ("Rates[1]=%x %x %x %x %x %x %x\n", Rates[1], Rates[2], Rates[3], Rates[4], Rates[5], Rates[6], Rates[7]));
++ *pRatesLen = eid_ptr->Len;
++ }
++ else
++ {
++ *pRatesLen = 8;
++ Rates[0] = 0x82;
++ Rates[1] = 0x84;
++ Rates[2] = 0x8b;
++ Rates[3] = 0x96;
++ Rates[4] = 0x12;
++ Rates[5] = 0x24;
++ Rates[6] = 0x48;
++ Rates[7] = 0x6c;
++ DBGPRINT(RT_DEBUG_TRACE, ("PeerDlsReqSanity - wrong IE_SUPP_RATES., Len=%d\n",eid_ptr->Len));
++ }
++ break;
++
++ case IE_EXT_SUPP_RATES:
++ if (eid_ptr->Len + *pRatesLen <= MAX_LEN_OF_SUPPORTED_RATES)
++ {
++ NdisMoveMemory(&Rates[*pRatesLen], eid_ptr->Octet, eid_ptr->Len);
++ *pRatesLen = (*pRatesLen) + eid_ptr->Len;
++ }
++ else
++ {
++ NdisMoveMemory(&Rates[*pRatesLen], eid_ptr->Octet, MAX_LEN_OF_SUPPORTED_RATES - (*pRatesLen));
++ *pRatesLen = MAX_LEN_OF_SUPPORTED_RATES;
++ }
++ break;
++
++ case IE_HT_CAP:
++ if (eid_ptr->Len >= sizeof(HT_CAPABILITY_IE))
++ {
++ NdisMoveMemory(pHtCapability, eid_ptr->Octet, sizeof(HT_CAPABILITY_IE));
++
++ *(USHORT *)(&pHtCapability->HtCapInfo) = cpu2le16(*(USHORT *)(&pHtCapability->HtCapInfo));
++ *(USHORT *)(&pHtCapability->ExtHtCapInfo) = cpu2le16(*(USHORT *)(&pHtCapability->ExtHtCapInfo));
++ *pHtCapabilityLen = sizeof(HT_CAPABILITY_IE);
++
++ DBGPRINT(RT_DEBUG_TRACE, ("PeerDlsReqSanity - IE_HT_CAP\n"));
++ }
++ else
++ {
++ DBGPRINT(RT_DEBUG_TRACE, ("PeerDlsReqSanity - wrong IE_HT_CAP.eid_ptr->Len = %d\n", eid_ptr->Len));
++ }
++ break;
++
++ default:
++ break;
++ }
++
++ eid_ptr = (PEID_STRUCT)((UCHAR*)eid_ptr + 2 + eid_ptr->Len);
++ }
++
++ return TRUE;
++}
++
++BOOLEAN PeerDlsRspSanity(
++ IN PRTMP_ADAPTER pAd,
++ IN VOID *Msg,
++ IN ULONG MsgLen,
++ OUT PUCHAR pDA,
++ OUT PUCHAR pSA,
++ OUT USHORT *pCapabilityInfo,
++ OUT USHORT *pStatus,
++ OUT UCHAR *pRatesLen,
++ OUT UCHAR Rates[],
++ OUT UCHAR *pHtCapabilityLen,
++ OUT HT_CAPABILITY_IE *pHtCapability)
++{
++ CHAR *Ptr;
++ PFRAME_802_11 Fr = (PFRAME_802_11)Msg;
++ PEID_STRUCT eid_ptr;
++
++ // to prevent caller from using garbage output value
++ *pStatus = 0;
++ *pCapabilityInfo = 0;
++ *pHtCapabilityLen = 0;
++
++ Ptr = Fr->Octet;
++
++ // offset to destination MAC address (Category and Action field)
++ Ptr += 2;
++
++ // get status code from payload and advance the pointer
++ NdisMoveMemory(pStatus, Ptr, 2);
++ Ptr += 2;
++
++ // get DA from payload and advance the pointer
++ NdisMoveMemory(pDA, Ptr, MAC_ADDR_LEN);
++ Ptr += MAC_ADDR_LEN;
++
++ // get SA from payload and advance the pointer
++ NdisMoveMemory(pSA, Ptr, MAC_ADDR_LEN);
++ Ptr += MAC_ADDR_LEN;
++
++ if (pStatus == 0)
++ {
++ // get capability info from payload and advance the pointer
++ NdisMoveMemory(pCapabilityInfo, Ptr, 2);
++ Ptr += 2;
++ }
++
++ // Category and Action field + status code + DA + SA + capability
++ eid_ptr = (PEID_STRUCT) &Fr->Octet[18];
++
++ while (((UCHAR*)eid_ptr + eid_ptr->Len + 1) < ((UCHAR*)Fr + MsgLen))
++ {
++ switch(eid_ptr->Eid)
++ {
++ case IE_SUPP_RATES:
++ if ((eid_ptr->Len <= MAX_LEN_OF_SUPPORTED_RATES) && (eid_ptr->Len > 0))
++ {
++ NdisMoveMemory(Rates, eid_ptr->Octet, eid_ptr->Len);
++ DBGPRINT(RT_DEBUG_TRACE, ("PeerDlsRspSanity - IE_SUPP_RATES., Len=%d. Rates[0]=%x\n",eid_ptr->Len, Rates[0]));
++ DBGPRINT(RT_DEBUG_TRACE, ("Rates[1]=%x %x %x %x %x %x %x\n", Rates[1], Rates[2], Rates[3], Rates[4], Rates[5], Rates[6], Rates[7]));
++ *pRatesLen = eid_ptr->Len;
++ }
++ else
++ {
++ *pRatesLen = 8;
++ Rates[0] = 0x82;
++ Rates[1] = 0x84;
++ Rates[2] = 0x8b;
++ Rates[3] = 0x96;
++ Rates[4] = 0x12;
++ Rates[5] = 0x24;
++ Rates[6] = 0x48;
++ Rates[7] = 0x6c;
++ DBGPRINT(RT_DEBUG_TRACE, ("PeerDlsRspSanity - wrong IE_SUPP_RATES., Len=%d\n",eid_ptr->Len));
++ }
++ break;
++
++ case IE_EXT_SUPP_RATES:
++ if (eid_ptr->Len + *pRatesLen <= MAX_LEN_OF_SUPPORTED_RATES)
++ {
++ NdisMoveMemory(&Rates[*pRatesLen], eid_ptr->Octet, eid_ptr->Len);
++ *pRatesLen = (*pRatesLen) + eid_ptr->Len;
++ }
++ else
++ {
++ NdisMoveMemory(&Rates[*pRatesLen], eid_ptr->Octet, MAX_LEN_OF_SUPPORTED_RATES - (*pRatesLen));
++ *pRatesLen = MAX_LEN_OF_SUPPORTED_RATES;
++ }
++ break;
++
++ case IE_HT_CAP:
++ if (eid_ptr->Len >= sizeof(HT_CAPABILITY_IE))
++ {
++ NdisMoveMemory(pHtCapability, eid_ptr->Octet, sizeof(HT_CAPABILITY_IE));
++
++ *(USHORT *)(&pHtCapability->HtCapInfo) = cpu2le16(*(USHORT *)(&pHtCapability->HtCapInfo));
++ *(USHORT *)(&pHtCapability->ExtHtCapInfo) = cpu2le16(*(USHORT *)(&pHtCapability->ExtHtCapInfo));
++ *pHtCapabilityLen = sizeof(HT_CAPABILITY_IE);
++
++ DBGPRINT(RT_DEBUG_TRACE, ("PeerDlsRspSanity - IE_HT_CAP\n"));
++ }
++ else
++ {
++ DBGPRINT(RT_DEBUG_TRACE, ("PeerDlsRspSanity - wrong IE_HT_CAP.eid_ptr->Len = %d\n", eid_ptr->Len));
++ }
++ break;
++
++ default:
++ break;
++ }
++
++ eid_ptr = (PEID_STRUCT)((UCHAR*)eid_ptr + 2 + eid_ptr->Len);
++ }
++
++ return TRUE;
++}
++
++BOOLEAN PeerDlsTearDownSanity(
++ IN PRTMP_ADAPTER pAd,
++ IN VOID *Msg,
++ IN ULONG MsgLen,
++ OUT PUCHAR pDA,
++ OUT PUCHAR pSA,
++ OUT USHORT *pReason)
++{
++ CHAR *Ptr;
++ PFRAME_802_11 Fr = (PFRAME_802_11)Msg;
++
++ // to prevent caller from using garbage output value
++ *pReason = 0;
++
++ Ptr = Fr->Octet;
++
++ // offset to destination MAC address (Category and Action field)
++ Ptr += 2;
++
++ // get DA from payload and advance the pointer
++ NdisMoveMemory(pDA, Ptr, MAC_ADDR_LEN);
++ Ptr += MAC_ADDR_LEN;
++
++ // get SA from payload and advance the pointer
++ NdisMoveMemory(pSA, Ptr, MAC_ADDR_LEN);
++ Ptr += MAC_ADDR_LEN;
++
++ // get reason code from payload and advance the pointer
++ NdisMoveMemory(pReason, Ptr, 2);
++ Ptr += 2;
++
++ return TRUE;
++}
++#endif // QOS_DLS_SUPPORT //
++
+--- /dev/null
++++ b/drivers/staging/rt2870/common/cmm_sync.c
+@@ -0,0 +1,711 @@
++/*
++ *************************************************************************
++ * Ralink Tech Inc.
++ * 5F., No.36, Taiyuan St., Jhubei City,
++ * Hsinchu County 302,
++ * Taiwan, R.O.C.
++ *
++ * (c) Copyright 2002-2007, Ralink Technology, Inc.
++ *
++ * This program is free software; you can redistribute it and/or modify *
++ * it under the terms of the GNU General Public License as published by *
++ * the Free Software Foundation; either version 2 of the License, or *
++ * (at your option) any later version. *
++ * *
++ * This program is distributed in the hope that it will be useful, *
++ * but WITHOUT ANY WARRANTY; without even the implied warranty of *
++ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the *
++ * GNU General Public License for more details. *
++ * *
++ * You should have received a copy of the GNU General Public License *
++ * along with this program; if not, write to the *
++ * Free Software Foundation, Inc., *
++ * 59 Temple Place - Suite 330, Boston, MA 02111-1307, USA. *
++ * *
++ *************************************************************************
++
++ Module Name:
++ sync.c
++
++ Abstract:
++
++ Revision History:
++ Who When What
++ -------- ---------- ----------------------------------------------
++ John Chang 2004-09-01 modified for rt2561/2661
++*/
++#include "../rt_config.h"
++
++// 2.4 Ghz channel plan index in the TxPower arrays.
++#define BG_BAND_REGION_0_START 0 // 1,2,3,4,5,6,7,8,9,10,11
++#define BG_BAND_REGION_0_SIZE 11
++#define BG_BAND_REGION_1_START 0 // 1,2,3,4,5,6,7,8,9,10,11,12,13
++#define BG_BAND_REGION_1_SIZE 13
++#define BG_BAND_REGION_2_START 9 // 10,11
++#define BG_BAND_REGION_2_SIZE 2
++#define BG_BAND_REGION_3_START 9 // 10,11,12,13
++#define BG_BAND_REGION_3_SIZE 4
++#define BG_BAND_REGION_4_START 13 // 14
++#define BG_BAND_REGION_4_SIZE 1
++#define BG_BAND_REGION_5_START 0 // 1,2,3,4,5,6,7,8,9,10,11,12,13,14
++#define BG_BAND_REGION_5_SIZE 14
++#define BG_BAND_REGION_6_START 2 // 3,4,5,6,7,8,9
++#define BG_BAND_REGION_6_SIZE 7
++#define BG_BAND_REGION_7_START 4 // 5,6,7,8,9,10,11,12,13
++#define BG_BAND_REGION_7_SIZE 9
++#define BG_BAND_REGION_31_START 0 // 1,2,3,4,5,6,7,8,9,10,11,12,13,14
++#define BG_BAND_REGION_31_SIZE 14
++
++// 5 Ghz channel plan index in the TxPower arrays.
++UCHAR A_BAND_REGION_0_CHANNEL_LIST[]={36, 40, 44, 48, 52, 56, 60, 64, 149, 153, 157, 161, 165};
++UCHAR A_BAND_REGION_1_CHANNEL_LIST[]={36, 40, 44, 48, 52, 56, 60, 64, 100, 104, 108, 112, 116, 120, 124, 128, 132, 136, 140};
++UCHAR A_BAND_REGION_2_CHANNEL_LIST[]={36, 40, 44, 48, 52, 56, 60, 64};
++UCHAR A_BAND_REGION_3_CHANNEL_LIST[]={52, 56, 60, 64, 149, 153, 157, 161};
++UCHAR A_BAND_REGION_4_CHANNEL_LIST[]={149, 153, 157, 161, 165};
++UCHAR A_BAND_REGION_5_CHANNEL_LIST[]={149, 153, 157, 161};
++UCHAR A_BAND_REGION_6_CHANNEL_LIST[]={36, 40, 44, 48};
++UCHAR A_BAND_REGION_7_CHANNEL_LIST[]={36, 40, 44, 48, 52, 56, 60, 64, 100, 104, 108, 112, 116, 120, 124, 128, 132, 136, 140, 149, 153, 157, 161, 165};
++UCHAR A_BAND_REGION_8_CHANNEL_LIST[]={52, 56, 60, 64};
++UCHAR A_BAND_REGION_9_CHANNEL_LIST[]={36, 40, 44, 48, 52, 56, 60, 64, 100, 104, 108, 112, 116, 132, 136, 140, 149, 153, 157, 161, 165};
++UCHAR A_BAND_REGION_10_CHANNEL_LIST[]={36, 40, 44, 48, 149, 153, 157, 161, 165};
++UCHAR A_BAND_REGION_11_CHANNEL_LIST[]={36, 40, 44, 48, 52, 56, 60, 64, 100, 104, 108, 112, 116, 120, 149, 153, 157, 161};
++
++//BaSizeArray follows the 802.11n definition as MaxRxFactor. 2^(13+factor) bytes. When factor =0, it's about Ba buffer size =8.
++UCHAR BaSizeArray[4] = {8,16,32,64};
++
++/*
++ ==========================================================================
++ Description:
++ Update StaCfg->ChannelList[] according to 1) Country Region 2) RF IC type,
++ and 3) PHY-mode user selected.
++ The outcome is used by driver when doing site survey.
++
++ IRQL = PASSIVE_LEVEL
++ IRQL = DISPATCH_LEVEL
++
++ ==========================================================================
++ */
++VOID BuildChannelList(
++ IN PRTMP_ADAPTER pAd)
++{
++ UCHAR i, j, index=0, num=0;
++ PUCHAR pChannelList = NULL;
++
++ NdisZeroMemory(pAd->ChannelList, MAX_NUM_OF_CHANNELS * sizeof(CHANNEL_TX_POWER));
++
++ // if not 11a-only mode, channel list starts from 2.4Ghz band
++ if ((pAd->CommonCfg.PhyMode != PHY_11A)
++#ifdef DOT11_N_SUPPORT
++ && (pAd->CommonCfg.PhyMode != PHY_11AN_MIXED) && (pAd->CommonCfg.PhyMode != PHY_11N_5G)
++#endif // DOT11_N_SUPPORT //
++ )
++ {
++ switch (pAd->CommonCfg.CountryRegion & 0x7f)
++ {
++ case REGION_0_BG_BAND: // 1 -11
++ NdisMoveMemory(&pAd->ChannelList[index], &pAd->TxPower[BG_BAND_REGION_0_START], sizeof(CHANNEL_TX_POWER) * BG_BAND_REGION_0_SIZE);
++ index += BG_BAND_REGION_0_SIZE;
++ break;
++ case REGION_1_BG_BAND: // 1 - 13
++ NdisMoveMemory(&pAd->ChannelList[index], &pAd->TxPower[BG_BAND_REGION_1_START], sizeof(CHANNEL_TX_POWER) * BG_BAND_REGION_1_SIZE);
++ index += BG_BAND_REGION_1_SIZE;
++ break;
++ case REGION_2_BG_BAND: // 10 - 11
++ NdisMoveMemory(&pAd->ChannelList[index], &pAd->TxPower[BG_BAND_REGION_2_START], sizeof(CHANNEL_TX_POWER) * BG_BAND_REGION_2_SIZE);
++ index += BG_BAND_REGION_2_SIZE;
++ break;
++ case REGION_3_BG_BAND: // 10 - 13
++ NdisMoveMemory(&pAd->ChannelList[index], &pAd->TxPower[BG_BAND_REGION_3_START], sizeof(CHANNEL_TX_POWER) * BG_BAND_REGION_3_SIZE);
++ index += BG_BAND_REGION_3_SIZE;
++ break;
++ case REGION_4_BG_BAND: // 14
++ NdisMoveMemory(&pAd->ChannelList[index], &pAd->TxPower[BG_BAND_REGION_4_START], sizeof(CHANNEL_TX_POWER) * BG_BAND_REGION_4_SIZE);
++ index += BG_BAND_REGION_4_SIZE;
++ break;
++ case REGION_5_BG_BAND: // 1 - 14
++ NdisMoveMemory(&pAd->ChannelList[index], &pAd->TxPower[BG_BAND_REGION_5_START], sizeof(CHANNEL_TX_POWER) * BG_BAND_REGION_5_SIZE);
++ index += BG_BAND_REGION_5_SIZE;
++ break;
++ case REGION_6_BG_BAND: // 3 - 9
++ NdisMoveMemory(&pAd->ChannelList[index], &pAd->TxPower[BG_BAND_REGION_6_START], sizeof(CHANNEL_TX_POWER) * BG_BAND_REGION_6_SIZE);
++ index += BG_BAND_REGION_6_SIZE;
++ break;
++ case REGION_7_BG_BAND: // 5 - 13
++ NdisMoveMemory(&pAd->ChannelList[index], &pAd->TxPower[BG_BAND_REGION_7_START], sizeof(CHANNEL_TX_POWER) * BG_BAND_REGION_7_SIZE);
++ index += BG_BAND_REGION_7_SIZE;
++ break;
++ case REGION_31_BG_BAND: // 1 - 14
++ NdisMoveMemory(&pAd->ChannelList[index], &pAd->TxPower[BG_BAND_REGION_31_START], sizeof(CHANNEL_TX_POWER) * BG_BAND_REGION_31_SIZE);
++ index += BG_BAND_REGION_31_SIZE;
++ break;
++ default: // Error. should never happen
++ break;
++ }
++ for (i=0; i<index; i++)
++ pAd->ChannelList[i].MaxTxPwr = 20;
++ }
++
++ if ((pAd->CommonCfg.PhyMode == PHY_11A) || (pAd->CommonCfg.PhyMode == PHY_11ABG_MIXED)
++#ifdef DOT11_N_SUPPORT
++ || (pAd->CommonCfg.PhyMode == PHY_11ABGN_MIXED) || (pAd->CommonCfg.PhyMode == PHY_11AN_MIXED)
++ || (pAd->CommonCfg.PhyMode == PHY_11AGN_MIXED) || (pAd->CommonCfg.PhyMode == PHY_11N_5G)
++#endif // DOT11_N_SUPPORT //
++ )
++ {
++ switch (pAd->CommonCfg.CountryRegionForABand & 0x7f)
++ {
++ case REGION_0_A_BAND:
++ num = sizeof(A_BAND_REGION_0_CHANNEL_LIST)/sizeof(UCHAR);
++ pChannelList = A_BAND_REGION_0_CHANNEL_LIST;
++ break;
++ case REGION_1_A_BAND:
++ num = sizeof(A_BAND_REGION_1_CHANNEL_LIST)/sizeof(UCHAR);
++ pChannelList = A_BAND_REGION_1_CHANNEL_LIST;
++ break;
++ case REGION_2_A_BAND:
++ num = sizeof(A_BAND_REGION_2_CHANNEL_LIST)/sizeof(UCHAR);
++ pChannelList = A_BAND_REGION_2_CHANNEL_LIST;
++ break;
++ case REGION_3_A_BAND:
++ num = sizeof(A_BAND_REGION_3_CHANNEL_LIST)/sizeof(UCHAR);
++ pChannelList = A_BAND_REGION_3_CHANNEL_LIST;
++ break;
++ case REGION_4_A_BAND:
++ num = sizeof(A_BAND_REGION_4_CHANNEL_LIST)/sizeof(UCHAR);
++ pChannelList = A_BAND_REGION_4_CHANNEL_LIST;
++ break;
++ case REGION_5_A_BAND:
++ num = sizeof(A_BAND_REGION_5_CHANNEL_LIST)/sizeof(UCHAR);
++ pChannelList = A_BAND_REGION_5_CHANNEL_LIST;
++ break;
++ case REGION_6_A_BAND:
++ num = sizeof(A_BAND_REGION_6_CHANNEL_LIST)/sizeof(UCHAR);
++ pChannelList = A_BAND_REGION_6_CHANNEL_LIST;
++ break;
++ case REGION_7_A_BAND:
++ num = sizeof(A_BAND_REGION_7_CHANNEL_LIST)/sizeof(UCHAR);
++ pChannelList = A_BAND_REGION_7_CHANNEL_LIST;
++ break;
++ case REGION_8_A_BAND:
++ num = sizeof(A_BAND_REGION_8_CHANNEL_LIST)/sizeof(UCHAR);
++ pChannelList = A_BAND_REGION_8_CHANNEL_LIST;
++ break;
++ case REGION_9_A_BAND:
++ num = sizeof(A_BAND_REGION_9_CHANNEL_LIST)/sizeof(UCHAR);
++ pChannelList = A_BAND_REGION_9_CHANNEL_LIST;
++ break;
++
++ case REGION_10_A_BAND:
++ num = sizeof(A_BAND_REGION_10_CHANNEL_LIST)/sizeof(UCHAR);
++ pChannelList = A_BAND_REGION_10_CHANNEL_LIST;
++ break;
++
++ case REGION_11_A_BAND:
++ num = sizeof(A_BAND_REGION_11_CHANNEL_LIST)/sizeof(UCHAR);
++ pChannelList = A_BAND_REGION_11_CHANNEL_LIST;
++ break;
++
++ default: // Error. should never happen
++ DBGPRINT(RT_DEBUG_WARN,("countryregion=%d not support", pAd->CommonCfg.CountryRegionForABand));
++ break;
++ }
++
++ if (num != 0)
++ {
++ UCHAR RadarCh[15]={52, 56, 60, 64, 100, 104, 108, 112, 116, 120, 124, 128, 132, 136, 140};
++ for (i=0; i<num; i++)
++ {
++ for (j=0; j<MAX_NUM_OF_CHANNELS; j++)
++ {
++ if (pChannelList[i] == pAd->TxPower[j].Channel)
++ NdisMoveMemory(&pAd->ChannelList[index+i], &pAd->TxPower[j], sizeof(CHANNEL_TX_POWER));
++ }
++ for (j=0; j<15; j++)
++ {
++ if (pChannelList[i] == RadarCh[j])
++ pAd->ChannelList[index+i].DfsReq = TRUE;
++ }
++ pAd->ChannelList[index+i].MaxTxPwr = 20;
++ }
++ index += num;
++ }
++ }
++
++ pAd->ChannelListNum = index;
++ DBGPRINT(RT_DEBUG_TRACE,("country code=%d/%d, RFIC=%d, PHY mode=%d, support %d channels\n",
++ pAd->CommonCfg.CountryRegion, pAd->CommonCfg.CountryRegionForABand, pAd->RfIcType, pAd->CommonCfg.PhyMode, pAd->ChannelListNum));
++#ifdef DBG
++ for (i=0;i<pAd->ChannelListNum;i++)
++ {
++ DBGPRINT_RAW(RT_DEBUG_TRACE,("BuildChannel # %d :: Pwr0 = %d, Pwr1 =%d, \n ", pAd->ChannelList[i].Channel, pAd->ChannelList[i].Power, pAd->ChannelList[i].Power2));
++ }
++#endif
++}
++
++/*
++ ==========================================================================
++ Description:
++ This routine return the first channel number according to the country
++ code selection and RF IC selection (signal band or dual band). It is called
++ whenever driver need to start a site survey of all supported channels.
++ Return:
++ ch - the first channel number of current country code setting
++
++ IRQL = PASSIVE_LEVEL
++
++ ==========================================================================
++ */
++UCHAR FirstChannel(
++ IN PRTMP_ADAPTER pAd)
++{
++ return pAd->ChannelList[0].Channel;
++}
++
++/*
++ ==========================================================================
++ Description:
++ This routine returns the next channel number. This routine is called
++ during driver need to start a site survey of all supported channels.
++ Return:
++ next_channel - the next channel number valid in current country code setting.
++ Note:
++ return 0 if no more next channel
++ ==========================================================================
++ */
++UCHAR NextChannel(
++ IN PRTMP_ADAPTER pAd,
++ IN UCHAR channel)
++{
++ int i;
++ UCHAR next_channel = 0;
++
++ for (i = 0; i < (pAd->ChannelListNum - 1); i++)
++ if (channel == pAd->ChannelList[i].Channel)
++ {
++ next_channel = pAd->ChannelList[i+1].Channel;
++ break;
++ }
++ return next_channel;
++}
++
++/*
++ ==========================================================================
++ Description:
++ This routine is for Cisco Compatible Extensions 2.X
++ Spec31. AP Control of Client Transmit Power
++ Return:
++ None
++ Note:
++ Required by Aironet dBm(mW)
++ 0dBm(1mW), 1dBm(5mW), 13dBm(20mW), 15dBm(30mW),
++ 17dBm(50mw), 20dBm(100mW)
++
++ We supported
++ 3dBm(Lowest), 6dBm(10%), 9dBm(25%), 12dBm(50%),
++ 14dBm(75%), 15dBm(100%)
++
++ The client station's actual transmit power shall be within +/- 5dB of
++ the minimum value or next lower value.
++ ==========================================================================
++ */
++VOID ChangeToCellPowerLimit(
++ IN PRTMP_ADAPTER pAd,
++ IN UCHAR AironetCellPowerLimit)
++{
++ //valud 0xFF means that hasn't found power limit information
++ //from the AP's Beacon/Probe response.
++ if (AironetCellPowerLimit == 0xFF)
++ return;
++
++ if (AironetCellPowerLimit < 6) //Used Lowest Power Percentage.
++ pAd->CommonCfg.TxPowerPercentage = 6;
++ else if (AironetCellPowerLimit < 9)
++ pAd->CommonCfg.TxPowerPercentage = 10;
++ else if (AironetCellPowerLimit < 12)
++ pAd->CommonCfg.TxPowerPercentage = 25;
++ else if (AironetCellPowerLimit < 14)
++ pAd->CommonCfg.TxPowerPercentage = 50;
++ else if (AironetCellPowerLimit < 15)
++ pAd->CommonCfg.TxPowerPercentage = 75;
++ else
++ pAd->CommonCfg.TxPowerPercentage = 100; //else used maximum
++
++ if (pAd->CommonCfg.TxPowerPercentage > pAd->CommonCfg.TxPowerDefault)
++ pAd->CommonCfg.TxPowerPercentage = pAd->CommonCfg.TxPowerDefault;
++
++}
++
++CHAR ConvertToRssi(
++ IN PRTMP_ADAPTER pAd,
++ IN CHAR Rssi,
++ IN UCHAR RssiNumber)
++{
++ UCHAR RssiOffset, LNAGain;
++
++ // Rssi equals to zero should be an invalid value
++ if (Rssi == 0)
++ return -99;
++
++ LNAGain = GET_LNA_GAIN(pAd);
++ if (pAd->LatchRfRegs.Channel > 14)
++ {
++ if (RssiNumber == 0)
++ RssiOffset = pAd->ARssiOffset0;
++ else if (RssiNumber == 1)
++ RssiOffset = pAd->ARssiOffset1;
++ else
++ RssiOffset = pAd->ARssiOffset2;
++ }
++ else
++ {
++ if (RssiNumber == 0)
++ RssiOffset = pAd->BGRssiOffset0;
++ else if (RssiNumber == 1)
++ RssiOffset = pAd->BGRssiOffset1;
++ else
++ RssiOffset = pAd->BGRssiOffset2;
++ }
++
++ return (-12 - RssiOffset - LNAGain - Rssi);
++}
++
++/*
++ ==========================================================================
++ Description:
++ Scan next channel
++ ==========================================================================
++ */
++VOID ScanNextChannel(
++ IN PRTMP_ADAPTER pAd)
++{
++ HEADER_802_11 Hdr80211;
++ PUCHAR pOutBuffer = NULL;
++ NDIS_STATUS NStatus;
++ ULONG FrameLen = 0;
++ UCHAR SsidLen = 0, ScanType = pAd->MlmeAux.ScanType, BBPValue = 0;
++#ifdef CONFIG_STA_SUPPORT
++ USHORT Status;
++ PHEADER_802_11 pHdr80211;
++#endif // CONFIG_STA_SUPPORT //
++ UINT ScanTimeIn5gChannel = SHORT_CHANNEL_TIME;
++
++#ifdef CONFIG_STA_SUPPORT
++ IF_DEV_CONFIG_OPMODE_ON_STA(pAd)
++ {
++ if (MONITOR_ON(pAd))
++ return;
++ }
++#endif // CONFIG_STA_SUPPORT //
++
++#ifdef RALINK_ATE
++ // Nothing to do in ATE mode.
++ if (ATE_ON(pAd))
++ return;
++#endif // RALINK_ATE //
++
++ if (pAd->MlmeAux.Channel == 0)
++ {
++ if ((pAd->CommonCfg.BBPCurrentBW == BW_40)
++#ifdef CONFIG_STA_SUPPORT
++ && (INFRA_ON(pAd)
++ || (pAd->OpMode == OPMODE_AP))
++#endif // CONFIG_STA_SUPPORT //
++ )
++ {
++ AsicSwitchChannel(pAd, pAd->CommonCfg.CentralChannel, FALSE);
++ AsicLockChannel(pAd, pAd->CommonCfg.CentralChannel);
++ RTMP_BBP_IO_READ8_BY_REG_ID(pAd, BBP_R4, &BBPValue);
++ BBPValue &= (~0x18);
++ BBPValue |= 0x10;
++ RTMP_BBP_IO_WRITE8_BY_REG_ID(pAd, BBP_R4, BBPValue);
++ DBGPRINT(RT_DEBUG_TRACE, ("SYNC - End of SCAN, restore to 40MHz channel %d, Total BSS[%02d]\n",pAd->CommonCfg.CentralChannel, pAd->ScanTab.BssNr));
++ }
++ else
++ {
++ AsicSwitchChannel(pAd, pAd->CommonCfg.Channel, FALSE);
++ AsicLockChannel(pAd, pAd->CommonCfg.Channel);
++ DBGPRINT(RT_DEBUG_TRACE, ("SYNC - End of SCAN, restore to channel %d, Total BSS[%02d]\n",pAd->CommonCfg.Channel, pAd->ScanTab.BssNr));
++ }
++
++#ifdef CONFIG_STA_SUPPORT
++ IF_DEV_CONFIG_OPMODE_ON_STA(pAd)
++ {
++ //
++ // To prevent data lost.
++ // Send an NULL data with turned PSM bit on to current associated AP before SCAN progress.
++ // Now, we need to send an NULL data with turned PSM bit off to AP, when scan progress done
++ //
++ if (OPSTATUS_TEST_FLAG(pAd, fOP_STATUS_MEDIA_STATE_CONNECTED) && (INFRA_ON(pAd)))
++ {
++ NStatus = MlmeAllocateMemory(pAd, (PVOID)&pOutBuffer);
++ if (NStatus == NDIS_STATUS_SUCCESS)
++ {
++ pHdr80211 = (PHEADER_802_11) pOutBuffer;
++ MgtMacHeaderInit(pAd, pHdr80211, SUBTYPE_NULL_FUNC, 1, pAd->CommonCfg.Bssid, pAd->CommonCfg.Bssid);
++ pHdr80211->Duration = 0;
++ pHdr80211->FC.Type = BTYPE_DATA;
++ pHdr80211->FC.PwrMgmt = (pAd->StaCfg.Psm == PWR_SAVE);
++
++ // Send using priority queue
++ MiniportMMRequest(pAd, 0, pOutBuffer, sizeof(HEADER_802_11));
++ DBGPRINT(RT_DEBUG_TRACE, ("MlmeScanReqAction -- Send PSM Data frame\n"));
++ MlmeFreeMemory(pAd, pOutBuffer);
++ RTMPusecDelay(5000);
++ }
++ }
++
++ pAd->Mlme.SyncMachine.CurrState = SYNC_IDLE;
++ Status = MLME_SUCCESS;
++ MlmeEnqueue(pAd, MLME_CNTL_STATE_MACHINE, MT2_SCAN_CONF, 2, &Status);
++ }
++#endif // CONFIG_STA_SUPPORT //
++
++
++ RTMP_CLEAR_FLAG(pAd, fRTMP_ADAPTER_BSS_SCAN_IN_PROGRESS);
++ }
++#ifdef RT2870
++#ifdef CONFIG_STA_SUPPORT
++ else if (RTMP_TEST_FLAG(pAd, fRTMP_ADAPTER_NIC_NOT_EXIST) && (pAd->OpMode == OPMODE_STA))
++ {
++ pAd->Mlme.SyncMachine.CurrState = SYNC_IDLE;
++ MlmeCntlConfirm(pAd, MT2_SCAN_CONF, MLME_FAIL_NO_RESOURCE);
++ }
++#endif // CONFIG_STA_SUPPORT //
++#endif // RT2870 //
++ else
++ {
++#ifdef CONFIG_STA_SUPPORT
++ IF_DEV_CONFIG_OPMODE_ON_STA(pAd)
++ {
++ // BBP and RF are not accessible in PS mode, we has to wake them up first
++ if (OPSTATUS_TEST_FLAG(pAd, fOP_STATUS_DOZE))
++ AsicForceWakeup(pAd, TRUE);
++
++ // leave PSM during scanning. otherwise we may lost ProbeRsp & BEACON
++ if (pAd->StaCfg.Psm == PWR_SAVE)
++ MlmeSetPsmBit(pAd, PWR_ACTIVE);
++ }
++#endif // CONFIG_STA_SUPPORT //
++
++ AsicSwitchChannel(pAd, pAd->MlmeAux.Channel, TRUE);
++ AsicLockChannel(pAd, pAd->MlmeAux.Channel);
++
++#ifdef CONFIG_STA_SUPPORT
++ IF_DEV_CONFIG_OPMODE_ON_STA(pAd)
++ {
++ if (pAd->MlmeAux.Channel > 14)
++ {
++ if ((pAd->CommonCfg.bIEEE80211H == 1) && RadarChannelCheck(pAd, pAd->MlmeAux.Channel))
++ {
++ ScanType = SCAN_PASSIVE;
++ ScanTimeIn5gChannel = MIN_CHANNEL_TIME;
++ }
++ }
++
++#ifdef CARRIER_DETECTION_SUPPORT // Roger sync Carrier
++ // carrier detection
++ if (pAd->CommonCfg.CarrierDetect.Enable == TRUE)
++ {
++ ScanType = SCAN_PASSIVE;
++ ScanTimeIn5gChannel = MIN_CHANNEL_TIME;
++ }
++#endif // CARRIER_DETECTION_SUPPORT //
++ }
++
++#endif // CONFIG_STA_SUPPORT //
++
++ //Global country domain(ch1-11:active scan, ch12-14 passive scan)
++ if ((pAd->MlmeAux.Channel <= 14) && (pAd->MlmeAux.Channel >= 12) && ((pAd->CommonCfg.CountryRegion & 0x7f) == REGION_31_BG_BAND))
++ {
++ ScanType = SCAN_PASSIVE;
++ }
++
++ // We need to shorten active scan time in order for WZC connect issue
++ // Chnage the channel scan time for CISCO stuff based on its IAPP announcement
++ if (ScanType == FAST_SCAN_ACTIVE)
++ RTMPSetTimer(&pAd->MlmeAux.ScanTimer, FAST_ACTIVE_SCAN_TIME);
++#ifdef CONFIG_STA_SUPPORT
++ else if (((ScanType == SCAN_CISCO_ACTIVE) ||
++ (ScanType == SCAN_CISCO_PASSIVE) ||
++ (ScanType == SCAN_CISCO_CHANNEL_LOAD) ||
++ (ScanType == SCAN_CISCO_NOISE)) && (pAd->OpMode == OPMODE_STA))
++ {
++ if (pAd->StaCfg.CCXScanTime < 25)
++ RTMPSetTimer(&pAd->MlmeAux.ScanTimer, pAd->StaCfg.CCXScanTime * 2);
++ else
++ RTMPSetTimer(&pAd->MlmeAux.ScanTimer, pAd->StaCfg.CCXScanTime);
++ }
++#endif // CONFIG_STA_SUPPORT //
++ else // must be SCAN_PASSIVE or SCAN_ACTIVE
++ {
++ if ((pAd->CommonCfg.PhyMode == PHY_11ABG_MIXED)
++#ifdef DOT11_N_SUPPORT
++ || (pAd->CommonCfg.PhyMode == PHY_11ABGN_MIXED) || (pAd->CommonCfg.PhyMode == PHY_11AGN_MIXED)
++#endif // DOT11_N_SUPPORT //
++ )
++ {
++ if (pAd->MlmeAux.Channel > 14)
++ RTMPSetTimer(&pAd->MlmeAux.ScanTimer, ScanTimeIn5gChannel);
++ else
++ RTMPSetTimer(&pAd->MlmeAux.ScanTimer, MIN_CHANNEL_TIME);
++ }
++ else
++ RTMPSetTimer(&pAd->MlmeAux.ScanTimer, MAX_CHANNEL_TIME);
++ }
++
++ if ((ScanType == SCAN_ACTIVE) || (ScanType == FAST_SCAN_ACTIVE) ||
++ (ScanType == SCAN_CISCO_ACTIVE))
++ {
++ NStatus = MlmeAllocateMemory(pAd, &pOutBuffer); //Get an unused nonpaged memory
++ if (NStatus != NDIS_STATUS_SUCCESS)
++ {
++ DBGPRINT(RT_DEBUG_TRACE, ("SYNC - ScanNextChannel() allocate memory fail\n"));
++#ifdef CONFIG_STA_SUPPORT
++ IF_DEV_CONFIG_OPMODE_ON_STA(pAd)
++ {
++ pAd->Mlme.SyncMachine.CurrState = SYNC_IDLE;
++ Status = MLME_FAIL_NO_RESOURCE;
++ MlmeEnqueue(pAd, MLME_CNTL_STATE_MACHINE, MT2_SCAN_CONF, 2, &Status);
++ }
++#endif // CONFIG_STA_SUPPORT //
++
++ return;
++ }
++
++ // There is no need to send broadcast probe request if active scan is in effect.
++ if ((ScanType == SCAN_ACTIVE) || (ScanType == FAST_SCAN_ACTIVE)
++ )
++ SsidLen = pAd->MlmeAux.SsidLen;
++ else
++ SsidLen = 0;
++
++ MgtMacHeaderInit(pAd, &Hdr80211, SUBTYPE_PROBE_REQ, 0, BROADCAST_ADDR, BROADCAST_ADDR);
++ MakeOutgoingFrame(pOutBuffer, &FrameLen,
++ sizeof(HEADER_802_11), &Hdr80211,
++ 1, &SsidIe,
++ 1, &SsidLen,
++ SsidLen, pAd->MlmeAux.Ssid,
++ 1, &SupRateIe,
++ 1, &pAd->CommonCfg.SupRateLen,
++ pAd->CommonCfg.SupRateLen, pAd->CommonCfg.SupRate,
++ END_OF_ARGS);
++
++ if (pAd->CommonCfg.ExtRateLen)
++ {
++ ULONG Tmp;
++ MakeOutgoingFrame(pOutBuffer + FrameLen, &Tmp,
++ 1, &ExtRateIe,
++ 1, &pAd->CommonCfg.ExtRateLen,
++ pAd->CommonCfg.ExtRateLen, pAd->CommonCfg.ExtRate,
++ END_OF_ARGS);
++ FrameLen += Tmp;
++ }
++
++#ifdef DOT11_N_SUPPORT
++ if (pAd->CommonCfg.PhyMode >= PHY_11ABGN_MIXED)
++ {
++ ULONG Tmp;
++ UCHAR HtLen;
++ UCHAR BROADCOM[4] = {0x0, 0x90, 0x4c, 0x33};
++#ifdef RT_BIG_ENDIAN
++ HT_CAPABILITY_IE HtCapabilityTmp;
++#endif
++ if (pAd->bBroadComHT == TRUE)
++ {
++ HtLen = pAd->MlmeAux.HtCapabilityLen + 4;
++#ifdef RT_BIG_ENDIAN
++ NdisMoveMemory(&HtCapabilityTmp, &pAd->MlmeAux.HtCapability, SIZE_HT_CAP_IE);
++ *(USHORT *)(&HtCapabilityTmp.HtCapInfo) = SWAP16(*(USHORT *)(&HtCapabilityTmp.HtCapInfo));
++ *(USHORT *)(&HtCapabilityTmp.ExtHtCapInfo) = SWAP16(*(USHORT *)(&HtCapabilityTmp.ExtHtCapInfo));
++
++ MakeOutgoingFrame(pOutBuffer + FrameLen, &Tmp,
++ 1, &WpaIe,
++ 1, &HtLen,
++ 4, &BROADCOM[0],
++ pAd->MlmeAux.HtCapabilityLen, &HtCapabilityTmp,
++ END_OF_ARGS);
++#else
++ MakeOutgoingFrame(pOutBuffer + FrameLen, &Tmp,
++ 1, &WpaIe,
++ 1, &HtLen,
++ 4, &BROADCOM[0],
++ pAd->MlmeAux.HtCapabilityLen, &pAd->MlmeAux.HtCapability,
++ END_OF_ARGS);
++#endif // RT_BIG_ENDIAN //
++ }
++ else
++ {
++ HtLen = pAd->MlmeAux.HtCapabilityLen;
++#ifdef RT_BIG_ENDIAN
++ NdisMoveMemory(&HtCapabilityTmp, &pAd->CommonCfg.HtCapability, SIZE_HT_CAP_IE);
++ *(USHORT *)(&HtCapabilityTmp.HtCapInfo) = SWAP16(*(USHORT *)(&HtCapabilityTmp.HtCapInfo));
++ *(USHORT *)(&HtCapabilityTmp.ExtHtCapInfo) = SWAP16(*(USHORT *)(&HtCapabilityTmp.ExtHtCapInfo));
++
++ MakeOutgoingFrame(pOutBuffer + FrameLen, &Tmp,
++ 1, &HtCapIe,
++ 1, &HtLen,
++ HtLen, &HtCapabilityTmp,
++ END_OF_ARGS);
++#else
++ MakeOutgoingFrame(pOutBuffer + FrameLen, &Tmp,
++ 1, &HtCapIe,
++ 1, &HtLen,
++ HtLen, &pAd->CommonCfg.HtCapability,
++ END_OF_ARGS);
++#endif // RT_BIG_ENDIAN //
++ }
++ FrameLen += Tmp;
++
++#ifdef DOT11N_DRAFT3
++ if (pAd->CommonCfg.BACapability.field.b2040CoexistScanSup == 1)
++ {
++ ULONG Tmp;
++ HtLen = 1;
++ MakeOutgoingFrame(pOutBuffer + FrameLen, &Tmp,
++ 1, &ExtHtCapIe,
++ 1, &HtLen,
++ 1, &pAd->CommonCfg.BSSCoexist2040.word,
++ END_OF_ARGS);
++
++ FrameLen += Tmp;
++ }
++#endif // DOT11N_DRAFT3 //
++ }
++#endif // DOT11_N_SUPPORT //
++
++
++ MiniportMMRequest(pAd, 0, pOutBuffer, FrameLen);
++ MlmeFreeMemory(pAd, pOutBuffer);
++ }
++
++ // For SCAN_CISCO_PASSIVE, do nothing and silently wait for beacon or other probe reponse
++
++#ifdef CONFIG_STA_SUPPORT
++ IF_DEV_CONFIG_OPMODE_ON_STA(pAd)
++ pAd->Mlme.SyncMachine.CurrState = SCAN_LISTEN;
++#endif // CONFIG_STA_SUPPORT //
++
++ }
++}
++
++VOID MgtProbReqMacHeaderInit(
++ IN PRTMP_ADAPTER pAd,
++ IN OUT PHEADER_802_11 pHdr80211,
++ IN UCHAR SubType,
++ IN UCHAR ToDs,
++ IN PUCHAR pDA,
++ IN PUCHAR pBssid)
++{
++ NdisZeroMemory(pHdr80211, sizeof(HEADER_802_11));
++
++ pHdr80211->FC.Type = BTYPE_MGMT;
++ pHdr80211->FC.SubType = SubType;
++ if (SubType == SUBTYPE_ACK)
++ pHdr80211->FC.Type = BTYPE_CNTL;
++ pHdr80211->FC.ToDs = ToDs;
++ COPY_MAC_ADDR(pHdr80211->Addr1, pDA);
++ COPY_MAC_ADDR(pHdr80211->Addr2, pAd->CurrentAddress);
++ COPY_MAC_ADDR(pHdr80211->Addr3, pBssid);
++}
++
++
+--- /dev/null
++++ b/drivers/staging/rt2870/common/cmm_wpa.c
+@@ -0,0 +1,1654 @@
++/*
++ *************************************************************************
++ * Ralink Tech Inc.
++ * 5F., No.36, Taiyuan St., Jhubei City,
++ * Hsinchu County 302,
++ * Taiwan, R.O.C.
++ *
++ * (c) Copyright 2002-2007, Ralink Technology, Inc.
++ *
++ * This program is free software; you can redistribute it and/or modify *
++ * it under the terms of the GNU General Public License as published by *
++ * the Free Software Foundation; either version 2 of the License, or *
++ * (at your option) any later version. *
++ * *
++ * This program is distributed in the hope that it will be useful, *
++ * but WITHOUT ANY WARRANTY; without even the implied warranty of *
++ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the *
++ * GNU General Public License for more details. *
++ * *
++ * You should have received a copy of the GNU General Public License *
++ * along with this program; if not, write to the *
++ * Free Software Foundation, Inc., *
++ * 59 Temple Place - Suite 330, Boston, MA 02111-1307, USA. *
++ * *
++ *************************************************************************
++
++ Module Name:
++ wpa.c
++
++ Abstract:
++
++ Revision History:
++ Who When What
++ -------- ---------- ----------------------------------------------
++ Jan Lee 03-07-22 Initial
++ Paul Lin 03-11-28 Modify for supplicant
++*/
++#include "../rt_config.h"
++// WPA OUI
++UCHAR OUI_WPA_NONE_AKM[4] = {0x00, 0x50, 0xF2, 0x00};
++UCHAR OUI_WPA_VERSION[4] = {0x00, 0x50, 0xF2, 0x01};
++UCHAR OUI_WPA_WEP40[4] = {0x00, 0x50, 0xF2, 0x01};
++UCHAR OUI_WPA_TKIP[4] = {0x00, 0x50, 0xF2, 0x02};
++UCHAR OUI_WPA_CCMP[4] = {0x00, 0x50, 0xF2, 0x04};
++UCHAR OUI_WPA_WEP104[4] = {0x00, 0x50, 0xF2, 0x05};
++UCHAR OUI_WPA_8021X_AKM[4] = {0x00, 0x50, 0xF2, 0x01};
++UCHAR OUI_WPA_PSK_AKM[4] = {0x00, 0x50, 0xF2, 0x02};
++// WPA2 OUI
++UCHAR OUI_WPA2_WEP40[4] = {0x00, 0x0F, 0xAC, 0x01};
++UCHAR OUI_WPA2_TKIP[4] = {0x00, 0x0F, 0xAC, 0x02};
++UCHAR OUI_WPA2_CCMP[4] = {0x00, 0x0F, 0xAC, 0x04};
++UCHAR OUI_WPA2_8021X_AKM[4] = {0x00, 0x0F, 0xAC, 0x01};
++UCHAR OUI_WPA2_PSK_AKM[4] = {0x00, 0x0F, 0xAC, 0x02};
++UCHAR OUI_WPA2_WEP104[4] = {0x00, 0x0F, 0xAC, 0x05};
++// MSA OUI
++UCHAR OUI_MSA_8021X_AKM[4] = {0x00, 0x0F, 0xAC, 0x05}; // Not yet final - IEEE 802.11s-D1.06
++UCHAR OUI_MSA_PSK_AKM[4] = {0x00, 0x0F, 0xAC, 0x06}; // Not yet final - IEEE 802.11s-D1.06
++
++/*
++ ========================================================================
++
++ Routine Description:
++ The pseudo-random function(PRF) that hashes various inputs to
++ derive a pseudo-random value. To add liveness to the pseudo-random
++ value, a nonce should be one of the inputs.
++
++ It is used to generate PTK, GTK or some specific random value.
++
++ Arguments:
++ UCHAR *key, - the key material for HMAC_SHA1 use
++ INT key_len - the length of key
++ UCHAR *prefix - a prefix label
++ INT prefix_len - the length of the label
++ UCHAR *data - a specific data with variable length
++ INT data_len - the length of a specific data
++ INT len - the output lenght
++
++ Return Value:
++ UCHAR *output - the calculated result
++
++ Note:
++ 802.11i-2004 Annex H.3
++
++ ========================================================================
++*/
++VOID PRF(
++ IN UCHAR *key,
++ IN INT key_len,
++ IN UCHAR *prefix,
++ IN INT prefix_len,
++ IN UCHAR *data,
++ IN INT data_len,
++ OUT UCHAR *output,
++ IN INT len)
++{
++ INT i;
++ UCHAR *input;
++ INT currentindex = 0;
++ INT total_len;
++
++ // Allocate memory for input
++ os_alloc_mem(NULL, (PUCHAR *)&input, 1024);
++
++ if (input == NULL)
++ {
++ DBGPRINT(RT_DEBUG_ERROR, ("!!!PRF: no memory!!!\n"));
++ return;
++ }
++
++ // Generate concatenation input
++ NdisMoveMemory(input, prefix, prefix_len);
++
++ // Concatenate a single octet containing 0
++ input[prefix_len] = 0;
++
++ // Concatenate specific data
++ NdisMoveMemory(&input[prefix_len + 1], data, data_len);
++ total_len = prefix_len + 1 + data_len;
++
++ // Concatenate a single octet containing 0
++ // This octet shall be update later
++ input[total_len] = 0;
++ total_len++;
++
++ // Iterate to calculate the result by hmac-sha-1
++ // Then concatenate to last result
++ for (i = 0; i < (len + 19) / 20; i++)
++ {
++ HMAC_SHA1(input, total_len, key, key_len, &output[currentindex]);
++ currentindex += 20;
++
++ // update the last octet
++ input[total_len - 1]++;
++ }
++ os_free_mem(NULL, input);
++}
++
++/*
++ ========================================================================
++
++ Routine Description:
++ It utilizes PRF-384 or PRF-512 to derive session-specific keys from a PMK.
++ It shall be called by 4-way handshake processing.
++
++ Arguments:
++ pAd - pointer to our pAdapter context
++ PMK - pointer to PMK
++ ANonce - pointer to ANonce
++ AA - pointer to Authenticator Address
++ SNonce - pointer to SNonce
++ SA - pointer to Supplicant Address
++ len - indicate the length of PTK (octet)
++
++ Return Value:
++ Output pointer to the PTK
++
++ Note:
++ Refer to IEEE 802.11i-2004 8.5.1.2
++
++ ========================================================================
++*/
++VOID WpaCountPTK(
++ IN PRTMP_ADAPTER pAd,
++ IN UCHAR *PMK,
++ IN UCHAR *ANonce,
++ IN UCHAR *AA,
++ IN UCHAR *SNonce,
++ IN UCHAR *SA,
++ OUT UCHAR *output,
++ IN UINT len)
++{
++ UCHAR concatenation[76];
++ UINT CurrPos = 0;
++ UCHAR temp[32];
++ UCHAR Prefix[] = {'P', 'a', 'i', 'r', 'w', 'i', 's', 'e', ' ', 'k', 'e', 'y', ' ',
++ 'e', 'x', 'p', 'a', 'n', 's', 'i', 'o', 'n'};
++
++ // initiate the concatenation input
++ NdisZeroMemory(temp, sizeof(temp));
++ NdisZeroMemory(concatenation, 76);
++
++ // Get smaller address
++ if (RTMPCompareMemory(SA, AA, 6) == 1)
++ NdisMoveMemory(concatenation, AA, 6);
++ else
++ NdisMoveMemory(concatenation, SA, 6);
++ CurrPos += 6;
++
++ // Get larger address
++ if (RTMPCompareMemory(SA, AA, 6) == 1)
++ NdisMoveMemory(&concatenation[CurrPos], SA, 6);
++ else
++ NdisMoveMemory(&concatenation[CurrPos], AA, 6);
++
++ // store the larger mac address for backward compatible of
++ // ralink proprietary STA-key issue
++ NdisMoveMemory(temp, &concatenation[CurrPos], MAC_ADDR_LEN);
++ CurrPos += 6;
++
++ // Get smaller Nonce
++ if (RTMPCompareMemory(ANonce, SNonce, 32) == 0)
++ NdisMoveMemory(&concatenation[CurrPos], temp, 32); // patch for ralink proprietary STA-key issue
++ else if (RTMPCompareMemory(ANonce, SNonce, 32) == 1)
++ NdisMoveMemory(&concatenation[CurrPos], SNonce, 32);
++ else
++ NdisMoveMemory(&concatenation[CurrPos], ANonce, 32);
++ CurrPos += 32;
++
++ // Get larger Nonce
++ if (RTMPCompareMemory(ANonce, SNonce, 32) == 0)
++ NdisMoveMemory(&concatenation[CurrPos], temp, 32); // patch for ralink proprietary STA-key issue
++ else if (RTMPCompareMemory(ANonce, SNonce, 32) == 1)
++ NdisMoveMemory(&concatenation[CurrPos], ANonce, 32);
++ else
++ NdisMoveMemory(&concatenation[CurrPos], SNonce, 32);
++ CurrPos += 32;
++
++ hex_dump("concatenation=", concatenation, 76);
++
++ // Use PRF to generate PTK
++ PRF(PMK, LEN_MASTER_KEY, Prefix, 22, concatenation, 76, output, len);
++
++}
++
++/*
++ ========================================================================
++
++ Routine Description:
++ Generate random number by software.
++
++ Arguments:
++ pAd - pointer to our pAdapter context
++ macAddr - pointer to local MAC address
++
++ Return Value:
++
++ Note:
++ 802.1ii-2004 Annex H.5
++
++ ========================================================================
++*/
++VOID GenRandom(
++ IN PRTMP_ADAPTER pAd,
++ IN UCHAR *macAddr,
++ OUT UCHAR *random)
++{
++ INT i, curr;
++ UCHAR local[80], KeyCounter[32];
++ UCHAR result[80];
++ ULONG CurrentTime;
++ UCHAR prefix[] = {'I', 'n', 'i', 't', ' ', 'C', 'o', 'u', 'n', 't', 'e', 'r'};
++
++ // Zero the related information
++ NdisZeroMemory(result, 80);
++ NdisZeroMemory(local, 80);
++ NdisZeroMemory(KeyCounter, 32);
++
++ for (i = 0; i < 32; i++)
++ {
++ // copy the local MAC address
++ COPY_MAC_ADDR(local, macAddr);
++ curr = MAC_ADDR_LEN;
++
++ // concatenate the current time
++ NdisGetSystemUpTime(&CurrentTime);
++ NdisMoveMemory(&local[curr], &CurrentTime, sizeof(CurrentTime));
++ curr += sizeof(CurrentTime);
++
++ // concatenate the last result
++ NdisMoveMemory(&local[curr], result, 32);
++ curr += 32;
++
++ // concatenate a variable
++ NdisMoveMemory(&local[curr], &i, 2);
++ curr += 2;
++
++ // calculate the result
++ PRF(KeyCounter, 32, prefix,12, local, curr, result, 32);
++ }
++
++ NdisMoveMemory(random, result, 32);
++}
++
++/*
++ ========================================================================
++
++ Routine Description:
++ Build cipher suite in RSN-IE.
++ It only shall be called by RTMPMakeRSNIE.
++
++ Arguments:
++ pAd - pointer to our pAdapter context
++ ElementID - indicate the WPA1 or WPA2
++ WepStatus - indicate the encryption type
++ bMixCipher - a boolean to indicate the pairwise cipher and group
++ cipher are the same or not
++
++ Return Value:
++
++ Note:
++
++ ========================================================================
++*/
++static VOID RTMPInsertRsnIeCipher(
++ IN PRTMP_ADAPTER pAd,
++ IN UCHAR ElementID,
++ IN UINT WepStatus,
++ IN BOOLEAN bMixCipher,
++ IN UCHAR FlexibleCipher,
++ OUT PUCHAR pRsnIe,
++ OUT UCHAR *rsn_len)
++{
++ UCHAR PairwiseCnt;
++
++ *rsn_len = 0;
++
++ // decide WPA2 or WPA1
++ if (ElementID == Wpa2Ie)
++ {
++ RSNIE2 *pRsnie_cipher = (RSNIE2*)pRsnIe;
++
++ // Assign the verson as 1
++ pRsnie_cipher->version = 1;
++
++ switch (WepStatus)
++ {
++ // TKIP mode
++ case Ndis802_11Encryption2Enabled:
++ NdisMoveMemory(pRsnie_cipher->mcast, OUI_WPA2_TKIP, 4);
++ pRsnie_cipher->ucount = 1;
++ NdisMoveMemory(pRsnie_cipher->ucast[0].oui, OUI_WPA2_TKIP, 4);
++ *rsn_len = sizeof(RSNIE2);
++ break;
++
++ // AES mode
++ case Ndis802_11Encryption3Enabled:
++ if (bMixCipher)
++ NdisMoveMemory(pRsnie_cipher->mcast, OUI_WPA2_TKIP, 4);
++ else
++ NdisMoveMemory(pRsnie_cipher->mcast, OUI_WPA2_CCMP, 4);
++ pRsnie_cipher->ucount = 1;
++ NdisMoveMemory(pRsnie_cipher->ucast[0].oui, OUI_WPA2_CCMP, 4);
++ *rsn_len = sizeof(RSNIE2);
++ break;
++
++ // TKIP-AES mix mode
++ case Ndis802_11Encryption4Enabled:
++ NdisMoveMemory(pRsnie_cipher->mcast, OUI_WPA2_TKIP, 4);
++
++ PairwiseCnt = 1;
++ // Insert WPA2 TKIP as the first pairwise cipher
++ if (MIX_CIPHER_WPA2_TKIP_ON(FlexibleCipher))
++ {
++ NdisMoveMemory(pRsnie_cipher->ucast[0].oui, OUI_WPA2_TKIP, 4);
++ // Insert WPA2 AES as the secondary pairwise cipher
++ if (MIX_CIPHER_WPA2_AES_ON(FlexibleCipher))
++ {
++ NdisMoveMemory(pRsnie_cipher->ucast[0].oui + 4, OUI_WPA2_CCMP, 4);
++ PairwiseCnt = 2;
++ }
++ }
++ else
++ {
++ // Insert WPA2 AES as the first pairwise cipher
++ NdisMoveMemory(pRsnie_cipher->ucast[0].oui, OUI_WPA2_CCMP, 4);
++ }
++
++ pRsnie_cipher->ucount = PairwiseCnt;
++ *rsn_len = sizeof(RSNIE2) + (4 * (PairwiseCnt - 1));
++ break;
++ }
++
++#ifdef CONFIG_STA_SUPPORT
++ if ((pAd->OpMode == OPMODE_STA) &&
++ (pAd->StaCfg.GroupCipher != Ndis802_11Encryption2Enabled) &&
++ (pAd->StaCfg.GroupCipher != Ndis802_11Encryption3Enabled))
++ {
++ UINT GroupCipher = pAd->StaCfg.GroupCipher;
++ switch(GroupCipher)
++ {
++ case Ndis802_11GroupWEP40Enabled:
++ NdisMoveMemory(pRsnie_cipher->mcast, OUI_WPA2_WEP40, 4);
++ break;
++ case Ndis802_11GroupWEP104Enabled:
++ NdisMoveMemory(pRsnie_cipher->mcast, OUI_WPA2_WEP104, 4);
++ break;
++ }
++ }
++#endif // CONFIG_STA_SUPPORT //
++
++ // swap for big-endian platform
++ pRsnie_cipher->version = cpu2le16(pRsnie_cipher->version);
++ pRsnie_cipher->ucount = cpu2le16(pRsnie_cipher->ucount);
++ }
++ else
++ {
++ RSNIE *pRsnie_cipher = (RSNIE*)pRsnIe;
++
++ // Assign OUI and version
++ NdisMoveMemory(pRsnie_cipher->oui, OUI_WPA_VERSION, 4);
++ pRsnie_cipher->version = 1;
++
++ switch (WepStatus)
++ {
++ // TKIP mode
++ case Ndis802_11Encryption2Enabled:
++ NdisMoveMemory(pRsnie_cipher->mcast, OUI_WPA_TKIP, 4);
++ pRsnie_cipher->ucount = 1;
++ NdisMoveMemory(pRsnie_cipher->ucast[0].oui, OUI_WPA_TKIP, 4);
++ *rsn_len = sizeof(RSNIE);
++ break;
++
++ // AES mode
++ case Ndis802_11Encryption3Enabled:
++ if (bMixCipher)
++ NdisMoveMemory(pRsnie_cipher->mcast, OUI_WPA_TKIP, 4);
++ else
++ NdisMoveMemory(pRsnie_cipher->mcast, OUI_WPA_CCMP, 4);
++ pRsnie_cipher->ucount = 1;
++ NdisMoveMemory(pRsnie_cipher->ucast[0].oui, OUI_WPA_CCMP, 4);
++ *rsn_len = sizeof(RSNIE);
++ break;
++
++ // TKIP-AES mix mode
++ case Ndis802_11Encryption4Enabled:
++ NdisMoveMemory(pRsnie_cipher->mcast, OUI_WPA_TKIP, 4);
++
++ PairwiseCnt = 1;
++ // Insert WPA TKIP as the first pairwise cipher
++ if (MIX_CIPHER_WPA_TKIP_ON(FlexibleCipher))
++ {
++ NdisMoveMemory(pRsnie_cipher->ucast[0].oui, OUI_WPA_TKIP, 4);
++ // Insert WPA AES as the secondary pairwise cipher
++ if (MIX_CIPHER_WPA_AES_ON(FlexibleCipher))
++ {
++ NdisMoveMemory(pRsnie_cipher->ucast[0].oui + 4, OUI_WPA_CCMP, 4);
++ PairwiseCnt = 2;
++ }
++ }
++ else
++ {
++ // Insert WPA AES as the first pairwise cipher
++ NdisMoveMemory(pRsnie_cipher->ucast[0].oui, OUI_WPA_CCMP, 4);
++ }
++
++ pRsnie_cipher->ucount = PairwiseCnt;
++ *rsn_len = sizeof(RSNIE) + (4 * (PairwiseCnt - 1));
++ break;
++ }
++
++#ifdef CONFIG_STA_SUPPORT
++ if ((pAd->OpMode == OPMODE_STA) &&
++ (pAd->StaCfg.GroupCipher != Ndis802_11Encryption2Enabled) &&
++ (pAd->StaCfg.GroupCipher != Ndis802_11Encryption3Enabled))
++ {
++ UINT GroupCipher = pAd->StaCfg.GroupCipher;
++ switch(GroupCipher)
++ {
++ case Ndis802_11GroupWEP40Enabled:
++ NdisMoveMemory(pRsnie_cipher->mcast, OUI_WPA_WEP40, 4);
++ break;
++ case Ndis802_11GroupWEP104Enabled:
++ NdisMoveMemory(pRsnie_cipher->mcast, OUI_WPA_WEP104, 4);
++ break;
++ }
++ }
++#endif // CONFIG_STA_SUPPORT //
++
++ // swap for big-endian platform
++ pRsnie_cipher->version = cpu2le16(pRsnie_cipher->version);
++ pRsnie_cipher->ucount = cpu2le16(pRsnie_cipher->ucount);
++ }
++}
++
++/*
++ ========================================================================
++
++ Routine Description:
++ Build AKM suite in RSN-IE.
++ It only shall be called by RTMPMakeRSNIE.
++
++ Arguments:
++ pAd - pointer to our pAdapter context
++ ElementID - indicate the WPA1 or WPA2
++ AuthMode - indicate the authentication mode
++ apidx - indicate the interface index
++
++ Return Value:
++
++ Note:
++
++ ========================================================================
++*/
++static VOID RTMPInsertRsnIeAKM(
++ IN PRTMP_ADAPTER pAd,
++ IN UCHAR ElementID,
++ IN UINT AuthMode,
++ IN UCHAR apidx,
++ OUT PUCHAR pRsnIe,
++ OUT UCHAR *rsn_len)
++{
++ RSNIE_AUTH *pRsnie_auth;
++
++ pRsnie_auth = (RSNIE_AUTH*)(pRsnIe + (*rsn_len));
++
++ // decide WPA2 or WPA1
++ if (ElementID == Wpa2Ie)
++ {
++ switch (AuthMode)
++ {
++ case Ndis802_11AuthModeWPA2:
++ case Ndis802_11AuthModeWPA1WPA2:
++ pRsnie_auth->acount = 1;
++ NdisMoveMemory(pRsnie_auth->auth[0].oui, OUI_WPA2_8021X_AKM, 4);
++ break;
++
++ case Ndis802_11AuthModeWPA2PSK:
++ case Ndis802_11AuthModeWPA1PSKWPA2PSK:
++ pRsnie_auth->acount = 1;
++ NdisMoveMemory(pRsnie_auth->auth[0].oui, OUI_WPA2_PSK_AKM, 4);
++ break;
++ }
++ }
++ else
++ {
++ switch (AuthMode)
++ {
++ case Ndis802_11AuthModeWPA:
++ case Ndis802_11AuthModeWPA1WPA2:
++ pRsnie_auth->acount = 1;
++ NdisMoveMemory(pRsnie_auth->auth[0].oui, OUI_WPA_8021X_AKM, 4);
++ break;
++
++ case Ndis802_11AuthModeWPAPSK:
++ case Ndis802_11AuthModeWPA1PSKWPA2PSK:
++ pRsnie_auth->acount = 1;
++ NdisMoveMemory(pRsnie_auth->auth[0].oui, OUI_WPA_PSK_AKM, 4);
++ break;
++
++ case Ndis802_11AuthModeWPANone:
++ pRsnie_auth->acount = 1;
++ NdisMoveMemory(pRsnie_auth->auth[0].oui, OUI_WPA_NONE_AKM, 4);
++ break;
++ }
++ }
++
++ pRsnie_auth->acount = cpu2le16(pRsnie_auth->acount);
++
++ (*rsn_len) += sizeof(RSNIE_AUTH); // update current RSNIE length
++
++}
++
++/*
++ ========================================================================
++
++ Routine Description:
++ Build capability in RSN-IE.
++ It only shall be called by RTMPMakeRSNIE.
++
++ Arguments:
++ pAd - pointer to our pAdapter context
++ ElementID - indicate the WPA1 or WPA2
++ apidx - indicate the interface index
++
++ Return Value:
++
++ Note:
++
++ ========================================================================
++*/
++static VOID RTMPInsertRsnIeCap(
++ IN PRTMP_ADAPTER pAd,
++ IN UCHAR ElementID,
++ IN UCHAR apidx,
++ OUT PUCHAR pRsnIe,
++ OUT UCHAR *rsn_len)
++{
++ RSN_CAPABILITIES *pRSN_Cap;
++
++ // it could be ignored in WPA1 mode
++ if (ElementID == WpaIe)
++ return;
++
++ pRSN_Cap = (RSN_CAPABILITIES*)(pRsnIe + (*rsn_len));
++
++
++ pRSN_Cap->word = cpu2le16(pRSN_Cap->word);
++
++ (*rsn_len) += sizeof(RSN_CAPABILITIES); // update current RSNIE length
++
++}
++
++
++/*
++ ========================================================================
++
++ Routine Description:
++ Build RSN IE context. It is not included element-ID and length.
++
++ Arguments:
++ pAd - pointer to our pAdapter context
++ AuthMode - indicate the authentication mode
++ WepStatus - indicate the encryption type
++ apidx - indicate the interface index
++
++ Return Value:
++
++ Note:
++
++ ========================================================================
++*/
++VOID RTMPMakeRSNIE(
++ IN PRTMP_ADAPTER pAd,
++ IN UINT AuthMode,
++ IN UINT WepStatus,
++ IN UCHAR apidx)
++{
++ PUCHAR pRsnIe = NULL; // primary RSNIE
++ UCHAR *rsnielen_cur_p = 0; // the length of the primary RSNIE
++ UCHAR *rsnielen_ex_cur_p = 0; // the length of the secondary RSNIE
++ UCHAR PrimaryRsnie;
++ BOOLEAN bMixCipher = FALSE; // indicate the pairwise and group cipher are different
++ UCHAR p_offset;
++ WPA_MIX_PAIR_CIPHER FlexibleCipher = MIX_CIPHER_NOTUSE; // it provide the more flexible cipher combination in WPA-WPA2 and TKIPAES mode
++
++ rsnielen_cur_p = NULL;
++ rsnielen_ex_cur_p = NULL;
++
++ {
++#ifdef CONFIG_STA_SUPPORT
++ IF_DEV_CONFIG_OPMODE_ON_STA(pAd)
++ {
++#ifdef WPA_SUPPLICANT_SUPPORT
++ if (pAd->StaCfg.WpaSupplicantUP != WPA_SUPPLICANT_DISABLE)
++ {
++ if (AuthMode < Ndis802_11AuthModeWPA)
++ return;
++ }
++ else
++#endif // WPA_SUPPLICANT_SUPPORT //
++ {
++ // Support WPAPSK or WPA2PSK in STA-Infra mode
++ // Support WPANone in STA-Adhoc mode
++ if ((AuthMode != Ndis802_11AuthModeWPAPSK) &&
++ (AuthMode != Ndis802_11AuthModeWPA2PSK) &&
++ (AuthMode != Ndis802_11AuthModeWPANone)
++ )
++ return;
++ }
++
++ DBGPRINT(RT_DEBUG_TRACE,("==> RTMPMakeRSNIE(STA)\n"));
++
++ // Zero RSNIE context
++ pAd->StaCfg.RSNIE_Len = 0;
++ NdisZeroMemory(pAd->StaCfg.RSN_IE, MAX_LEN_OF_RSNIE);
++
++ // Pointer to RSNIE
++ rsnielen_cur_p = &pAd->StaCfg.RSNIE_Len;
++ pRsnIe = pAd->StaCfg.RSN_IE;
++
++ bMixCipher = pAd->StaCfg.bMixCipher;
++ }
++#endif // CONFIG_STA_SUPPORT //
++ }
++
++ // indicate primary RSNIE as WPA or WPA2
++ if ((AuthMode == Ndis802_11AuthModeWPA) ||
++ (AuthMode == Ndis802_11AuthModeWPAPSK) ||
++ (AuthMode == Ndis802_11AuthModeWPANone) ||
++ (AuthMode == Ndis802_11AuthModeWPA1WPA2) ||
++ (AuthMode == Ndis802_11AuthModeWPA1PSKWPA2PSK))
++ PrimaryRsnie = WpaIe;
++ else
++ PrimaryRsnie = Wpa2Ie;
++
++ {
++ // Build the primary RSNIE
++ // 1. insert cipher suite
++ RTMPInsertRsnIeCipher(pAd, PrimaryRsnie, WepStatus, bMixCipher, FlexibleCipher, pRsnIe, &p_offset);
++
++ // 2. insert AKM
++ RTMPInsertRsnIeAKM(pAd, PrimaryRsnie, AuthMode, apidx, pRsnIe, &p_offset);
++
++ // 3. insert capability
++ RTMPInsertRsnIeCap(pAd, PrimaryRsnie, apidx, pRsnIe, &p_offset);
++ }
++
++ // 4. update the RSNIE length
++ *rsnielen_cur_p = p_offset;
++
++ hex_dump("The primary RSNIE", pRsnIe, (*rsnielen_cur_p));
++
++
++}
++
++/*
++ ==========================================================================
++ Description:
++ Check whether the received frame is EAP frame.
++
++ Arguments:
++ pAd - pointer to our pAdapter context
++ pEntry - pointer to active entry
++ pData - the received frame
++ DataByteCount - the received frame's length
++ FromWhichBSSID - indicate the interface index
++
++ Return:
++ TRUE - This frame is EAP frame
++ FALSE - otherwise
++ ==========================================================================
++*/
++BOOLEAN RTMPCheckWPAframe(
++ IN PRTMP_ADAPTER pAd,
++ IN PMAC_TABLE_ENTRY pEntry,
++ IN PUCHAR pData,
++ IN ULONG DataByteCount,
++ IN UCHAR FromWhichBSSID)
++{
++ ULONG Body_len;
++ BOOLEAN Cancelled;
++
++
++ if(DataByteCount < (LENGTH_802_1_H + LENGTH_EAPOL_H))
++ return FALSE;
++
++
++ // Skip LLC header
++ if (NdisEqualMemory(SNAP_802_1H, pData, 6) ||
++ // Cisco 1200 AP may send packet with SNAP_BRIDGE_TUNNEL
++ NdisEqualMemory(SNAP_BRIDGE_TUNNEL, pData, 6))
++ {
++ pData += 6;
++ }
++ // Skip 2-bytes EAPoL type
++ if (NdisEqualMemory(EAPOL, pData, 2))
++ {
++ pData += 2;
++ }
++ else
++ return FALSE;
++
++ switch (*(pData+1))
++ {
++ case EAPPacket:
++ Body_len = (*(pData+2)<<8) | (*(pData+3));
++ DBGPRINT(RT_DEBUG_TRACE, ("Receive EAP-Packet frame, TYPE = 0, Length = %ld\n", Body_len));
++ break;
++ case EAPOLStart:
++ DBGPRINT(RT_DEBUG_TRACE, ("Receive EAPOL-Start frame, TYPE = 1 \n"));
++ if (pEntry->EnqueueEapolStartTimerRunning != EAPOL_START_DISABLE)
++ {
++ DBGPRINT(RT_DEBUG_TRACE, ("Cancel the EnqueueEapolStartTimerRunning \n"));
++ RTMPCancelTimer(&pEntry->EnqueueStartForPSKTimer, &Cancelled);
++ pEntry->EnqueueEapolStartTimerRunning = EAPOL_START_DISABLE;
++ }
++ break;
++ case EAPOLLogoff:
++ DBGPRINT(RT_DEBUG_TRACE, ("Receive EAPOLLogoff frame, TYPE = 2 \n"));
++ break;
++ case EAPOLKey:
++ Body_len = (*(pData+2)<<8) | (*(pData+3));
++ DBGPRINT(RT_DEBUG_TRACE, ("Receive EAPOL-Key frame, TYPE = 3, Length = %ld\n", Body_len));
++ break;
++ case EAPOLASFAlert:
++ DBGPRINT(RT_DEBUG_TRACE, ("Receive EAPOLASFAlert frame, TYPE = 4 \n"));
++ break;
++ default:
++ return FALSE;
++
++ }
++ return TRUE;
++}
++
++
++/*
++ ==========================================================================
++ Description:
++ ENCRYPT AES GTK before sending in EAPOL frame.
++ AES GTK length = 128 bit, so fix blocks for aes-key-wrap as 2 in this function.
++ This function references to RFC 3394 for aes key wrap algorithm.
++ Return:
++ ==========================================================================
++*/
++VOID AES_GTK_KEY_WRAP(
++ IN UCHAR *key,
++ IN UCHAR *plaintext,
++ IN UCHAR p_len,
++ OUT UCHAR *ciphertext)
++{
++ UCHAR A[8], BIN[16], BOUT[16];
++ UCHAR R[512];
++ INT num_blocks = p_len/8; // unit:64bits
++ INT i, j;
++ aes_context aesctx;
++ UCHAR xor;
++
++ rtmp_aes_set_key(&aesctx, key, 128);
++
++ // Init IA
++ for (i = 0; i < 8; i++)
++ A[i] = 0xa6;
++
++ //Input plaintext
++ for (i = 0; i < num_blocks; i++)
++ {
++ for (j = 0 ; j < 8; j++)
++ R[8 * (i + 1) + j] = plaintext[8 * i + j];
++ }
++
++ // Key Mix
++ for (j = 0; j < 6; j++)
++ {
++ for(i = 1; i <= num_blocks; i++)
++ {
++ //phase 1
++ NdisMoveMemory(BIN, A, 8);
++ NdisMoveMemory(&BIN[8], &R[8 * i], 8);
++ rtmp_aes_encrypt(&aesctx, BIN, BOUT);
++
++ NdisMoveMemory(A, &BOUT[0], 8);
++ xor = num_blocks * j + i;
++ A[7] = BOUT[7] ^ xor;
++ NdisMoveMemory(&R[8 * i], &BOUT[8], 8);
++ }
++ }
++
++ // Output ciphertext
++ NdisMoveMemory(ciphertext, A, 8);
++
++ for (i = 1; i <= num_blocks; i++)
++ {
++ for (j = 0 ; j < 8; j++)
++ ciphertext[8 * i + j] = R[8 * i + j];
++ }
++}
++
++
++/*
++ ========================================================================
++
++ Routine Description:
++ Misc function to decrypt AES body
++
++ Arguments:
++
++ Return Value:
++
++ Note:
++ This function references to RFC 3394 for aes key unwrap algorithm.
++
++ ========================================================================
++*/
++VOID AES_GTK_KEY_UNWRAP(
++ IN UCHAR *key,
++ OUT UCHAR *plaintext,
++ IN UCHAR c_len,
++ IN UCHAR *ciphertext)
++
++{
++ UCHAR A[8], BIN[16], BOUT[16];
++ UCHAR xor;
++ INT i, j;
++ aes_context aesctx;
++ UCHAR *R;
++ INT num_blocks = c_len/8; // unit:64bits
++
++
++ os_alloc_mem(NULL, (PUCHAR *)&R, 512);
++
++ if (R == NULL)
++ {
++ DBGPRINT(RT_DEBUG_ERROR, ("!!!AES_GTK_KEY_UNWRAP: no memory!!!\n"));
++ return;
++ } /* End of if */
++
++ // Initialize
++ NdisMoveMemory(A, ciphertext, 8);
++ //Input plaintext
++ for(i = 0; i < (c_len-8); i++)
++ {
++ R[ i] = ciphertext[i + 8];
++ }
++
++ rtmp_aes_set_key(&aesctx, key, 128);
++
++ for(j = 5; j >= 0; j--)
++ {
++ for(i = (num_blocks-1); i > 0; i--)
++ {
++ xor = (num_blocks -1 )* j + i;
++ NdisMoveMemory(BIN, A, 8);
++ BIN[7] = A[7] ^ xor;
++ NdisMoveMemory(&BIN[8], &R[(i-1)*8], 8);
++ rtmp_aes_decrypt(&aesctx, BIN, BOUT);
++ NdisMoveMemory(A, &BOUT[0], 8);
++ NdisMoveMemory(&R[(i-1)*8], &BOUT[8], 8);
++ }
++ }
++
++ // OUTPUT
++ for(i = 0; i < c_len; i++)
++ {
++ plaintext[i] = R[i];
++ }
++
++
++ os_free_mem(NULL, R);
++}
++
++/*
++ ==========================================================================
++ Description:
++ Report the EAP message type
++
++ Arguments:
++ msg - EAPOL_PAIR_MSG_1
++ EAPOL_PAIR_MSG_2
++ EAPOL_PAIR_MSG_3
++ EAPOL_PAIR_MSG_4
++ EAPOL_GROUP_MSG_1
++ EAPOL_GROUP_MSG_2
++
++ Return:
++ message type string
++
++ ==========================================================================
++*/
++CHAR *GetEapolMsgType(CHAR msg)
++{
++ if(msg == EAPOL_PAIR_MSG_1)
++ return "Pairwise Message 1";
++ else if(msg == EAPOL_PAIR_MSG_2)
++ return "Pairwise Message 2";
++ else if(msg == EAPOL_PAIR_MSG_3)
++ return "Pairwise Message 3";
++ else if(msg == EAPOL_PAIR_MSG_4)
++ return "Pairwise Message 4";
++ else if(msg == EAPOL_GROUP_MSG_1)
++ return "Group Message 1";
++ else if(msg == EAPOL_GROUP_MSG_2)
++ return "Group Message 2";
++ else
++ return "Invalid Message";
++}
++
++
++/*
++ ========================================================================
++
++ Routine Description:
++ Check Sanity RSN IE of EAPoL message
++
++ Arguments:
++
++ Return Value:
++
++
++ ========================================================================
++*/
++BOOLEAN RTMPCheckRSNIE(
++ IN PRTMP_ADAPTER pAd,
++ IN PUCHAR pData,
++ IN UCHAR DataLen,
++ IN MAC_TABLE_ENTRY *pEntry,
++ OUT UCHAR *Offset)
++{
++ PUCHAR pVIE;
++ UCHAR len;
++ PEID_STRUCT pEid;
++ BOOLEAN result = FALSE;
++
++ pVIE = pData;
++ len = DataLen;
++ *Offset = 0;
++
++ while (len > sizeof(RSNIE2))
++ {
++ pEid = (PEID_STRUCT) pVIE;
++ // WPA RSN IE
++ if ((pEid->Eid == IE_WPA) && (NdisEqualMemory(pEid->Octet, WPA_OUI, 4)))
++ {
++ if ((pEntry->AuthMode == Ndis802_11AuthModeWPA || pEntry->AuthMode == Ndis802_11AuthModeWPAPSK) &&
++ (NdisEqualMemory(pVIE, pEntry->RSN_IE, pEntry->RSNIE_Len)) &&
++ (pEntry->RSNIE_Len == (pEid->Len + 2)))
++ {
++ result = TRUE;
++ }
++
++ *Offset += (pEid->Len + 2);
++ }
++ // WPA2 RSN IE
++ else if ((pEid->Eid == IE_RSN) && (NdisEqualMemory(pEid->Octet + 2, RSN_OUI, 3)))
++ {
++ if ((pEntry->AuthMode == Ndis802_11AuthModeWPA2 || pEntry->AuthMode == Ndis802_11AuthModeWPA2PSK) &&
++ (NdisEqualMemory(pVIE, pEntry->RSN_IE, pEntry->RSNIE_Len)) &&
++ (pEntry->RSNIE_Len == (pEid->Len + 2))/* ToDo-AlbertY for mesh*/)
++ {
++ result = TRUE;
++ }
++
++ *Offset += (pEid->Len + 2);
++ }
++ else
++ {
++ break;
++ }
++
++ pVIE += (pEid->Len + 2);
++ len -= (pEid->Len + 2);
++ }
++
++
++ return result;
++
++}
++
++
++/*
++ ========================================================================
++
++ Routine Description:
++ Parse KEYDATA field. KEYDATA[] May contain 2 RSN IE and optionally GTK.
++ GTK is encaptulated in KDE format at p.83 802.11i D10
++
++ Arguments:
++
++ Return Value:
++
++ Note:
++ 802.11i D10
++
++ ========================================================================
++*/
++BOOLEAN RTMPParseEapolKeyData(
++ IN PRTMP_ADAPTER pAd,
++ IN PUCHAR pKeyData,
++ IN UCHAR KeyDataLen,
++ IN UCHAR GroupKeyIndex,
++ IN UCHAR MsgType,
++ IN BOOLEAN bWPA2,
++ IN MAC_TABLE_ENTRY *pEntry)
++{
++ PKDE_ENCAP pKDE = NULL;
++ PUCHAR pMyKeyData = pKeyData;
++ UCHAR KeyDataLength = KeyDataLen;
++ UCHAR GTKLEN = 0;
++ UCHAR DefaultIdx = 0;
++ UCHAR skip_offset;
++
++ // Verify The RSN IE contained in pairewise_msg_2 && pairewise_msg_3 and skip it
++ if (MsgType == EAPOL_PAIR_MSG_2 || MsgType == EAPOL_PAIR_MSG_3)
++ {
++ // Check RSN IE whether it is WPA2/WPA2PSK
++ if (!RTMPCheckRSNIE(pAd, pKeyData, KeyDataLen, pEntry, &skip_offset))
++ {
++ // send wireless event - for RSN IE different
++ if (pAd->CommonCfg.bWirelessEvent)
++ RTMPSendWirelessEvent(pAd, IW_RSNIE_DIFF_EVENT_FLAG, pEntry->Addr, pEntry->apidx, 0);
++
++ DBGPRINT(RT_DEBUG_ERROR, ("RSN_IE Different in msg %d of 4-way handshake!\n", MsgType));
++ hex_dump("Receive RSN_IE ", pKeyData, KeyDataLen);
++ hex_dump("Desired RSN_IE ", pEntry->RSN_IE, pEntry->RSNIE_Len);
++
++ return FALSE;
++ }
++ else
++ {
++ if (bWPA2 && MsgType == EAPOL_PAIR_MSG_3)
++ {
++ // skip RSN IE
++ pMyKeyData += skip_offset;
++ KeyDataLength -= skip_offset;
++ DBGPRINT(RT_DEBUG_TRACE, ("RTMPParseEapolKeyData ==> WPA2/WPA2PSK RSN IE matched in Msg 3, Length(%d) \n", skip_offset));
++ }
++ else
++ return TRUE;
++ }
++ }
++
++ DBGPRINT(RT_DEBUG_TRACE,("RTMPParseEapolKeyData ==> KeyDataLength %d without RSN_IE \n", KeyDataLength));
++
++ // Parse EKD format in pairwise_msg_3_WPA2 && group_msg_1_WPA2
++ if (bWPA2 && (MsgType == EAPOL_PAIR_MSG_3 || MsgType == EAPOL_GROUP_MSG_1))
++ {
++ if (KeyDataLength >= 8) // KDE format exclude GTK length
++ {
++ pKDE = (PKDE_ENCAP) pMyKeyData;
++
++
++ DefaultIdx = pKDE->GTKEncap.Kid;
++
++ // Sanity check - KED length
++ if (KeyDataLength < (pKDE->Len + 2))
++ {
++ DBGPRINT(RT_DEBUG_ERROR, ("ERROR: The len from KDE is too short \n"));
++ return FALSE;
++ }
++
++ // Get GTK length - refer to IEEE 802.11i-2004 p.82
++ GTKLEN = pKDE->Len -6;
++ if (GTKLEN < LEN_AES_KEY)
++ {
++ DBGPRINT(RT_DEBUG_ERROR, ("ERROR: GTK Key length is too short (%d) \n", GTKLEN));
++ return FALSE;
++ }
++
++ }
++ else
++ {
++ DBGPRINT(RT_DEBUG_ERROR, ("ERROR: KDE format length is too short \n"));
++ return FALSE;
++ }
++
++ DBGPRINT(RT_DEBUG_TRACE, ("GTK in KDE format ,DefaultKeyID=%d, KeyLen=%d \n", DefaultIdx, GTKLEN));
++ // skip it
++ pMyKeyData += 8;
++ KeyDataLength -= 8;
++
++ }
++ else if (!bWPA2 && MsgType == EAPOL_GROUP_MSG_1)
++ {
++ DefaultIdx = GroupKeyIndex;
++ DBGPRINT(RT_DEBUG_TRACE, ("GTK DefaultKeyID=%d \n", DefaultIdx));
++ }
++
++ // Sanity check - shared key index must be 1 ~ 3
++ if (DefaultIdx < 1 || DefaultIdx > 3)
++ {
++ DBGPRINT(RT_DEBUG_ERROR, ("ERROR: GTK Key index(%d) is invalid in %s %s \n", DefaultIdx, ((bWPA2) ? "WPA2" : "WPA"), GetEapolMsgType(MsgType)));
++ return FALSE;
++ }
++
++
++#ifdef CONFIG_STA_SUPPORT
++ // Todo
++#endif // CONFIG_STA_SUPPORT //
++
++ return TRUE;
++
++}
++
++
++/*
++ ========================================================================
++
++ Routine Description:
++ Construct EAPoL message for WPA handshaking
++ Its format is below,
++
++ +--------------------+
++ | Protocol Version | 1 octet
++ +--------------------+
++ | Protocol Type | 1 octet
++ +--------------------+
++ | Body Length | 2 octets
++ +--------------------+
++ | Descriptor Type | 1 octet
++ +--------------------+
++ | Key Information | 2 octets
++ +--------------------+
++ | Key Length | 1 octet
++ +--------------------+
++ | Key Repaly Counter | 8 octets
++ +--------------------+
++ | Key Nonce | 32 octets
++ +--------------------+
++ | Key IV | 16 octets
++ +--------------------+
++ | Key RSC | 8 octets
++ +--------------------+
++ | Key ID or Reserved | 8 octets
++ +--------------------+
++ | Key MIC | 16 octets
++ +--------------------+
++ | Key Data Length | 2 octets
++ +--------------------+
++ | Key Data | n octets
++ +--------------------+
++
++
++ Arguments:
++ pAd Pointer to our adapter
++
++ Return Value:
++ None
++
++ Note:
++
++ ========================================================================
++*/
++VOID ConstructEapolMsg(
++ IN PRTMP_ADAPTER pAd,
++ IN UCHAR AuthMode,
++ IN UCHAR WepStatus,
++ IN UCHAR GroupKeyWepStatus,
++ IN UCHAR MsgType,
++ IN UCHAR DefaultKeyIdx,
++ IN UCHAR *ReplayCounter,
++ IN UCHAR *KeyNonce,
++ IN UCHAR *TxRSC,
++ IN UCHAR *PTK,
++ IN UCHAR *GTK,
++ IN UCHAR *RSNIE,
++ IN UCHAR RSNIE_Len,
++ OUT PEAPOL_PACKET pMsg)
++{
++ BOOLEAN bWPA2 = FALSE;
++
++ // Choose WPA2 or not
++ if ((AuthMode == Ndis802_11AuthModeWPA2) || (AuthMode == Ndis802_11AuthModeWPA2PSK))
++ bWPA2 = TRUE;
++
++ // Init Packet and Fill header
++ pMsg->ProVer = EAPOL_VER;
++ pMsg->ProType = EAPOLKey;
++
++ // Default 95 bytes, the EAPoL-Key descriptor exclude Key-data field
++ pMsg->Body_Len[1] = LEN_EAPOL_KEY_MSG;
++
++ // Fill in EAPoL descriptor
++ if (bWPA2)
++ pMsg->KeyDesc.Type = WPA2_KEY_DESC;
++ else
++ pMsg->KeyDesc.Type = WPA1_KEY_DESC;
++
++ // Fill in Key information, refer to IEEE Std 802.11i-2004 page 78
++ // When either the pairwise or the group cipher is AES, the DESC_TYPE_AES(2) shall be used.
++ pMsg->KeyDesc.KeyInfo.KeyDescVer =
++ (((WepStatus == Ndis802_11Encryption3Enabled) || (GroupKeyWepStatus == Ndis802_11Encryption3Enabled)) ? (DESC_TYPE_AES) : (DESC_TYPE_TKIP));
++
++ // Specify Key Type as Group(0) or Pairwise(1)
++ if (MsgType >= EAPOL_GROUP_MSG_1)
++ pMsg->KeyDesc.KeyInfo.KeyType = GROUPKEY;
++ else
++ pMsg->KeyDesc.KeyInfo.KeyType = PAIRWISEKEY;
++
++ // Specify Key Index, only group_msg1_WPA1
++ if (!bWPA2 && (MsgType >= EAPOL_GROUP_MSG_1))
++ pMsg->KeyDesc.KeyInfo.KeyIndex = DefaultKeyIdx;
++
++ if (MsgType == EAPOL_PAIR_MSG_3)
++ pMsg->KeyDesc.KeyInfo.Install = 1;
++
++ if ((MsgType == EAPOL_PAIR_MSG_1) || (MsgType == EAPOL_PAIR_MSG_3) || (MsgType == EAPOL_GROUP_MSG_1))
++ pMsg->KeyDesc.KeyInfo.KeyAck = 1;
++
++ if (MsgType != EAPOL_PAIR_MSG_1)
++ pMsg->KeyDesc.KeyInfo.KeyMic = 1;
++
++ if ((bWPA2 && (MsgType >= EAPOL_PAIR_MSG_3)) || (!bWPA2 && (MsgType >= EAPOL_GROUP_MSG_1)))
++ {
++ pMsg->KeyDesc.KeyInfo.Secure = 1;
++ }
++
++ if (bWPA2 && ((MsgType == EAPOL_PAIR_MSG_3) || (MsgType == EAPOL_GROUP_MSG_1)))
++ {
++ pMsg->KeyDesc.KeyInfo.EKD_DL = 1;
++ }
++
++ // key Information element has done.
++ *(USHORT *)(&pMsg->KeyDesc.KeyInfo) = cpu2le16(*(USHORT *)(&pMsg->KeyDesc.KeyInfo));
++
++ // Fill in Key Length
++#if 0
++ if (bWPA2)
++ {
++ // In WPA2 mode, the field indicates the length of pairwise key cipher,
++ // so only pairwise_msg_1 and pairwise_msg_3 need to fill.
++ if ((MsgType == EAPOL_PAIR_MSG_1) || (MsgType == EAPOL_PAIR_MSG_3))
++ pMsg->KeyDesc.KeyLength[1] = ((WepStatus == Ndis802_11Encryption2Enabled) ? LEN_TKIP_KEY : LEN_AES_KEY);
++ }
++ else if (!bWPA2)
++#endif
++ {
++ if (MsgType >= EAPOL_GROUP_MSG_1)
++ {
++ // the length of group key cipher
++ pMsg->KeyDesc.KeyLength[1] = ((GroupKeyWepStatus == Ndis802_11Encryption2Enabled) ? TKIP_GTK_LENGTH : LEN_AES_KEY);
++ }
++ else
++ {
++ // the length of pairwise key cipher
++ pMsg->KeyDesc.KeyLength[1] = ((WepStatus == Ndis802_11Encryption2Enabled) ? LEN_TKIP_KEY : LEN_AES_KEY);
++ }
++ }
++
++ // Fill in replay counter
++ NdisMoveMemory(pMsg->KeyDesc.ReplayCounter, ReplayCounter, LEN_KEY_DESC_REPLAY);
++
++ // Fill Key Nonce field
++ // ANonce : pairwise_msg1 & pairwise_msg3
++ // SNonce : pairwise_msg2
++ // GNonce : group_msg1_wpa1
++ if ((MsgType <= EAPOL_PAIR_MSG_3) || ((!bWPA2 && (MsgType == EAPOL_GROUP_MSG_1))))
++ NdisMoveMemory(pMsg->KeyDesc.KeyNonce, KeyNonce, LEN_KEY_DESC_NONCE);
++
++ // Fill key IV - WPA2 as 0, WPA1 as random
++ if (!bWPA2 && (MsgType == EAPOL_GROUP_MSG_1))
++ {
++ // Suggest IV be random number plus some number,
++ NdisMoveMemory(pMsg->KeyDesc.KeyIv, &KeyNonce[16], LEN_KEY_DESC_IV);
++ pMsg->KeyDesc.KeyIv[15] += 2;
++ }
++
++ // Fill Key RSC field
++ // It contains the RSC for the GTK being installed.
++ if ((MsgType == EAPOL_PAIR_MSG_3 && bWPA2) || (MsgType == EAPOL_GROUP_MSG_1))
++ {
++ NdisMoveMemory(pMsg->KeyDesc.KeyRsc, TxRSC, 6);
++ }
++
++ // Clear Key MIC field for MIC calculation later
++ NdisZeroMemory(pMsg->KeyDesc.KeyMic, LEN_KEY_DESC_MIC);
++
++ ConstructEapolKeyData(pAd,
++ AuthMode,
++ WepStatus,
++ GroupKeyWepStatus,
++ MsgType,
++ DefaultKeyIdx,
++ bWPA2,
++ PTK,
++ GTK,
++ RSNIE,
++ RSNIE_Len,
++ pMsg);
++
++ // Calculate MIC and fill in KeyMic Field except Pairwise Msg 1.
++ if (MsgType != EAPOL_PAIR_MSG_1)
++ {
++ CalculateMIC(pAd, WepStatus, PTK, pMsg);
++ }
++
++ DBGPRINT(RT_DEBUG_TRACE, ("===> ConstructEapolMsg for %s %s\n", ((bWPA2) ? "WPA2" : "WPA"), GetEapolMsgType(MsgType)));
++ DBGPRINT(RT_DEBUG_TRACE, (" Body length = %d \n", pMsg->Body_Len[1]));
++ DBGPRINT(RT_DEBUG_TRACE, (" Key length = %d \n", pMsg->KeyDesc.KeyLength[1]));
++
++
++}
++
++/*
++ ========================================================================
++
++ Routine Description:
++ Construct the Key Data field of EAPoL message
++
++ Arguments:
++ pAd Pointer to our adapter
++ Elem Message body
++
++ Return Value:
++ None
++
++ Note:
++
++ ========================================================================
++*/
++VOID ConstructEapolKeyData(
++ IN PRTMP_ADAPTER pAd,
++ IN UCHAR AuthMode,
++ IN UCHAR WepStatus,
++ IN UCHAR GroupKeyWepStatus,
++ IN UCHAR MsgType,
++ IN UCHAR DefaultKeyIdx,
++ IN BOOLEAN bWPA2Capable,
++ IN UCHAR *PTK,
++ IN UCHAR *GTK,
++ IN UCHAR *RSNIE,
++ IN UCHAR RSNIE_LEN,
++ OUT PEAPOL_PACKET pMsg)
++{
++ UCHAR *mpool, *Key_Data, *Rc4GTK;
++ UCHAR ekey[(LEN_KEY_DESC_IV+LEN_EAP_EK)];
++ UCHAR data_offset;
++
++
++ if (MsgType == EAPOL_PAIR_MSG_1 || MsgType == EAPOL_PAIR_MSG_4 || MsgType == EAPOL_GROUP_MSG_2)
++ return;
++
++ // allocate memory pool
++ os_alloc_mem(pAd, (PUCHAR *)&mpool, 1500);
++
++ if (mpool == NULL)
++ return;
++
++ /* Rc4GTK Len = 512 */
++ Rc4GTK = (UCHAR *) ROUND_UP(mpool, 4);
++ /* Key_Data Len = 512 */
++ Key_Data = (UCHAR *) ROUND_UP(Rc4GTK + 512, 4);
++
++ NdisZeroMemory(Key_Data, 512);
++ pMsg->KeyDesc.KeyDataLen[1] = 0;
++ data_offset = 0;
++
++ // Encapsulate RSNIE in pairwise_msg2 & pairwise_msg3
++ if (RSNIE_LEN && ((MsgType == EAPOL_PAIR_MSG_2) || (MsgType == EAPOL_PAIR_MSG_3)))
++ {
++ if (bWPA2Capable)
++ Key_Data[data_offset + 0] = IE_WPA2;
++ else
++ Key_Data[data_offset + 0] = IE_WPA;
++
++ Key_Data[data_offset + 1] = RSNIE_LEN;
++ NdisMoveMemory(&Key_Data[data_offset + 2], RSNIE, RSNIE_LEN);
++ data_offset += (2 + RSNIE_LEN);
++ }
++
++ // Encapsulate KDE format in pairwise_msg3_WPA2 & group_msg1_WPA2
++ if (bWPA2Capable && ((MsgType == EAPOL_PAIR_MSG_3) || (MsgType == EAPOL_GROUP_MSG_1)))
++ {
++ // Key Data Encapsulation (KDE) format - 802.11i-2004 Figure-43w and Table-20h
++ Key_Data[data_offset + 0] = 0xDD;
++
++ if (GroupKeyWepStatus == Ndis802_11Encryption3Enabled)
++ {
++ Key_Data[data_offset + 1] = 0x16;// 4+2+16(OUI+DataType+DataField)
++ }
++ else
++ {
++ Key_Data[data_offset + 1] = 0x26;// 4+2+32(OUI+DataType+DataField)
++ }
++
++ Key_Data[data_offset + 2] = 0x00;
++ Key_Data[data_offset + 3] = 0x0F;
++ Key_Data[data_offset + 4] = 0xAC;
++ Key_Data[data_offset + 5] = 0x01;
++
++ // GTK KDE format - 802.11i-2004 Figure-43x
++ Key_Data[data_offset + 6] = (DefaultKeyIdx & 0x03);
++ Key_Data[data_offset + 7] = 0x00; // Reserved Byte
++
++ data_offset += 8;
++ }
++
++
++ // Encapsulate GTK and encrypt the key-data field with KEK.
++ // Only for pairwise_msg3_WPA2 and group_msg1
++ if ((MsgType == EAPOL_PAIR_MSG_3 && bWPA2Capable) || (MsgType == EAPOL_GROUP_MSG_1))
++ {
++ // Fill in GTK
++ if (GroupKeyWepStatus == Ndis802_11Encryption3Enabled)
++ {
++ NdisMoveMemory(&Key_Data[data_offset], GTK, LEN_AES_KEY);
++ data_offset += LEN_AES_KEY;
++ }
++ else
++ {
++ NdisMoveMemory(&Key_Data[data_offset], GTK, TKIP_GTK_LENGTH);
++ data_offset += TKIP_GTK_LENGTH;
++ }
++
++ // Still dont know why, but if not append will occur "GTK not include in MSG3"
++ // Patch for compatibility between zero config and funk
++ if (MsgType == EAPOL_PAIR_MSG_3 && bWPA2Capable)
++ {
++ if (GroupKeyWepStatus == Ndis802_11Encryption3Enabled)
++ {
++ Key_Data[data_offset + 0] = 0xDD;
++ Key_Data[data_offset + 1] = 0;
++ data_offset += 2;
++ }
++ else
++ {
++ Key_Data[data_offset + 0] = 0xDD;
++ Key_Data[data_offset + 1] = 0;
++ Key_Data[data_offset + 2] = 0;
++ Key_Data[data_offset + 3] = 0;
++ Key_Data[data_offset + 4] = 0;
++ Key_Data[data_offset + 5] = 0;
++ data_offset += 6;
++ }
++ }
++
++ // Encrypt the data material in key data field
++ if (WepStatus == Ndis802_11Encryption3Enabled)
++ {
++ AES_GTK_KEY_WRAP(&PTK[16], Key_Data, data_offset, Rc4GTK);
++ // AES wrap function will grow 8 bytes in length
++ data_offset += 8;
++ }
++ else
++ {
++ // PREPARE Encrypted "Key DATA" field. (Encrypt GTK with RC4, usinf PTK[16]->[31] as Key, IV-field as IV)
++ // put TxTsc in Key RSC field
++ pAd->PrivateInfo.FCSCRC32 = PPPINITFCS32; //Init crc32.
++
++ // ekey is the contanetion of IV-field, and PTK[16]->PTK[31]
++ NdisMoveMemory(ekey, pMsg->KeyDesc.KeyIv, LEN_KEY_DESC_IV);
++ NdisMoveMemory(&ekey[LEN_KEY_DESC_IV], &PTK[16], LEN_EAP_EK);
++ ARCFOUR_INIT(&pAd->PrivateInfo.WEPCONTEXT, ekey, sizeof(ekey)); //INIT SBOX, KEYLEN+3(IV)
++ pAd->PrivateInfo.FCSCRC32 = RTMP_CALC_FCS32(pAd->PrivateInfo.FCSCRC32, Key_Data, data_offset);
++ WPAARCFOUR_ENCRYPT(&pAd->PrivateInfo.WEPCONTEXT, Rc4GTK, Key_Data, data_offset);
++ }
++
++ NdisMoveMemory(pMsg->KeyDesc.KeyData, Rc4GTK, data_offset);
++ }
++ else
++ {
++ NdisMoveMemory(pMsg->KeyDesc.KeyData, Key_Data, data_offset);
++ }
++
++ // set key data length field and total length
++ pMsg->KeyDesc.KeyDataLen[1] = data_offset;
++ pMsg->Body_Len[1] += data_offset;
++
++ os_free_mem(pAd, mpool);
++
++}
++
++/*
++ ========================================================================
++
++ Routine Description:
++ Calcaulate MIC. It is used during 4-ways handsharking.
++
++ Arguments:
++ pAd - pointer to our pAdapter context
++ PeerWepStatus - indicate the encryption type
++
++ Return Value:
++
++ Note:
++
++ ========================================================================
++*/
++VOID CalculateMIC(
++ IN PRTMP_ADAPTER pAd,
++ IN UCHAR PeerWepStatus,
++ IN UCHAR *PTK,
++ OUT PEAPOL_PACKET pMsg)
++{
++ UCHAR *OutBuffer;
++ ULONG FrameLen = 0;
++ UCHAR mic[LEN_KEY_DESC_MIC];
++ UCHAR digest[80];
++
++ // allocate memory for MIC calculation
++ os_alloc_mem(pAd, (PUCHAR *)&OutBuffer, 512);
++
++ if (OutBuffer == NULL)
++ {
++ DBGPRINT(RT_DEBUG_ERROR, ("!!!CalculateMIC: no memory!!!\n"));
++ return;
++ }
++
++ // make a frame for calculating MIC.
++ MakeOutgoingFrame(OutBuffer, &FrameLen,
++ pMsg->Body_Len[1] + 4, pMsg,
++ END_OF_ARGS);
++
++ NdisZeroMemory(mic, sizeof(mic));
++
++ // Calculate MIC
++ if (PeerWepStatus == Ndis802_11Encryption3Enabled)
++ {
++ HMAC_SHA1(OutBuffer, FrameLen, PTK, LEN_EAP_MICK, digest);
++ NdisMoveMemory(mic, digest, LEN_KEY_DESC_MIC);
++ }
++ else
++ {
++ hmac_md5(PTK, LEN_EAP_MICK, OutBuffer, FrameLen, mic);
++ }
++
++ // store the calculated MIC
++ NdisMoveMemory(pMsg->KeyDesc.KeyMic, mic, LEN_KEY_DESC_MIC);
++
++ os_free_mem(pAd, OutBuffer);
++}
++
++/*
++ ========================================================================
++
++ Routine Description:
++ Some received frames can't decrypt by Asic, so decrypt them by software.
++
++ Arguments:
++ pAd - pointer to our pAdapter context
++ PeerWepStatus - indicate the encryption type
++
++ Return Value:
++ NDIS_STATUS_SUCCESS - decryption successful
++ NDIS_STATUS_FAILURE - decryption failure
++
++ ========================================================================
++*/
++NDIS_STATUS RTMPSoftDecryptBroadCastData(
++ IN PRTMP_ADAPTER pAd,
++ IN RX_BLK *pRxBlk,
++ IN NDIS_802_11_ENCRYPTION_STATUS GroupCipher,
++ IN PCIPHER_KEY pShard_key)
++{
++ PRXWI_STRUC pRxWI = pRxBlk->pRxWI;
++
++
++
++ // handle WEP decryption
++ if (GroupCipher == Ndis802_11Encryption1Enabled)
++ {
++ if (RTMPSoftDecryptWEP(pAd, pRxBlk->pData, pRxWI->MPDUtotalByteCount, pShard_key))
++ {
++
++ //Minus IV[4] & ICV[4]
++ pRxWI->MPDUtotalByteCount -= 8;
++ }
++ else
++ {
++ DBGPRINT(RT_DEBUG_ERROR, ("ERROR : Software decrypt WEP data fails.\n"));
++ // give up this frame
++ return NDIS_STATUS_FAILURE;
++ }
++ }
++ // handle TKIP decryption
++ else if (GroupCipher == Ndis802_11Encryption2Enabled)
++ {
++ if (RTMPSoftDecryptTKIP(pAd, pRxBlk->pData, pRxWI->MPDUtotalByteCount, 0, pShard_key))
++ {
++
++ //Minus 8 bytes MIC, 8 bytes IV/EIV, 4 bytes ICV
++ pRxWI->MPDUtotalByteCount -= 20;
++ }
++ else
++ {
++ DBGPRINT(RT_DEBUG_ERROR, ("ERROR : RTMPSoftDecryptTKIP Failed\n"));
++ // give up this frame
++ return NDIS_STATUS_FAILURE;
++ }
++ }
++ // handle AES decryption
++ else if (GroupCipher == Ndis802_11Encryption3Enabled)
++ {
++ if (RTMPSoftDecryptAES(pAd, pRxBlk->pData, pRxWI->MPDUtotalByteCount , pShard_key))
++ {
++
++ //8 bytes MIC, 8 bytes IV/EIV (CCMP Header)
++ pRxWI->MPDUtotalByteCount -= 16;
++ }
++ else
++ {
++ DBGPRINT(RT_DEBUG_ERROR, ("ERROR : RTMPSoftDecryptAES Failed\n"));
++ // give up this frame
++ return NDIS_STATUS_FAILURE;
++ }
++ }
++ else
++ {
++ // give up this frame
++ return NDIS_STATUS_FAILURE;
++ }
++
++ return NDIS_STATUS_SUCCESS;
++
++}
++
+--- /dev/null
++++ b/drivers/staging/rt2870/common/dfs.c
+@@ -0,0 +1,453 @@
++/*
++ *************************************************************************
++ * Ralink Tech Inc.
++ * 5F., No.36, Taiyuan St., Jhubei City,
++ * Hsinchu County 302,
++ * Taiwan, R.O.C.
++ *
++ * (c) Copyright 2002-2007, Ralink Technology, Inc.
++ *
++ * This program is free software; you can redistribute it and/or modify *
++ * it under the terms of the GNU General Public License as published by *
++ * the Free Software Foundation; either version 2 of the License, or *
++ * (at your option) any later version. *
++ * *
++ * This program is distributed in the hope that it will be useful, *
++ * but WITHOUT ANY WARRANTY; without even the implied warranty of *
++ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the *
++ * GNU General Public License for more details. *
++ * *
++ * You should have received a copy of the GNU General Public License *
++ * along with this program; if not, write to the *
++ * Free Software Foundation, Inc., *
++ * 59 Temple Place - Suite 330, Boston, MA 02111-1307, USA. *
++ * *
++ *************************************************************************
++
++ Module Name:
++ ap_dfs.c
++
++ Abstract:
++ Support DFS function.
++
++ Revision History:
++ Who When What
++ -------- ---------- ----------------------------------------------
++ Fonchi 03-12-2007 created
++*/
++
++#include "../rt_config.h"
++
++typedef struct _RADAR_DURATION_TABLE
++{
++ ULONG RDDurRegion;
++ ULONG RadarSignalDuration;
++ ULONG Tolerance;
++} RADAR_DURATION_TABLE, *PRADAR_DURATION_TABLE;
++
++
++static UCHAR RdIdleTimeTable[MAX_RD_REGION][4] =
++{
++ {9, 250, 250, 250}, // CE
++ {4, 250, 250, 250}, // FCC
++ {4, 250, 250, 250}, // JAP
++ {15, 250, 250, 250}, // JAP_W53
++ {4, 250, 250, 250} // JAP_W56
++};
++
++/*
++ ========================================================================
++
++ Routine Description:
++ Bbp Radar detection routine
++
++ Arguments:
++ pAd Pointer to our adapter
++
++ Return Value:
++
++ ========================================================================
++*/
++VOID BbpRadarDetectionStart(
++ IN PRTMP_ADAPTER pAd)
++{
++ UINT8 RadarPeriod;
++
++ RTMP_BBP_IO_WRITE8_BY_REG_ID(pAd, 114, 0x02);
++ RTMP_BBP_IO_WRITE8_BY_REG_ID(pAd, 121, 0x20);
++ RTMP_BBP_IO_WRITE8_BY_REG_ID(pAd, 122, 0x00);
++ RTMP_BBP_IO_WRITE8_BY_REG_ID(pAd, 123, 0x08/*0x80*/);
++ RTMP_BBP_IO_WRITE8_BY_REG_ID(pAd, 124, 0x28);
++ RTMP_BBP_IO_WRITE8_BY_REG_ID(pAd, 125, 0xff);
++
++#if 0
++ // toggle Rx enable bit for radar detection.
++ // it's Andy's recommand.
++ {
++ UINT32 Value;
++ RTMP_IO_READ32(pAd, MAC_SYS_CTRL, &Value);
++ Value |= (0x1 << 3);
++ RTMP_IO_WRITE32(pAd, MAC_SYS_CTRL, Value);
++ Value &= ~(0x1 << 3);
++ RTMP_IO_WRITE32(pAd, MAC_SYS_CTRL, Value);
++ }
++#endif
++ RadarPeriod = ((UINT)RdIdleTimeTable[pAd->CommonCfg.RadarDetect.RDDurRegion][0] + (UINT)pAd->CommonCfg.RadarDetect.DfsSessionTime) < 250 ?
++ (RdIdleTimeTable[pAd->CommonCfg.RadarDetect.RDDurRegion][0] + pAd->CommonCfg.RadarDetect.DfsSessionTime) : 250;
++
++ RTMP_IO_WRITE8(pAd, 0x7020, 0x1d);
++ RTMP_IO_WRITE8(pAd, 0x7021, 0x40);
++
++ RadarDetectionStart(pAd, 0, RadarPeriod);
++ return;
++}
++
++/*
++ ========================================================================
++
++ Routine Description:
++ Bbp Radar detection routine
++
++ Arguments:
++ pAd Pointer to our adapter
++
++ Return Value:
++
++ ========================================================================
++*/
++VOID BbpRadarDetectionStop(
++ IN PRTMP_ADAPTER pAd)
++{
++ RTMP_IO_WRITE8(pAd, 0x7020, 0x1d);
++ RTMP_IO_WRITE8(pAd, 0x7021, 0x60);
++
++ RadarDetectionStop(pAd);
++ return;
++}
++
++/*
++ ========================================================================
++
++ Routine Description:
++ Radar detection routine
++
++ Arguments:
++ pAd Pointer to our adapter
++
++ Return Value:
++
++ ========================================================================
++*/
++VOID RadarDetectionStart(
++ IN PRTMP_ADAPTER pAd,
++ IN BOOLEAN CTSProtect,
++ IN UINT8 CTSPeriod)
++{
++ UINT8 DfsActiveTime = (pAd->CommonCfg.RadarDetect.DfsSessionTime & 0x1f);
++ UINT8 CtsProtect = (CTSProtect == 1) ? 0x02 : 0x01; // CTS protect.
++
++ if (CTSProtect != 0)
++ {
++ switch(pAd->CommonCfg.RadarDetect.RDDurRegion)
++ {
++ case FCC:
++ case JAP_W56:
++ CtsProtect = 0x03;
++ break;
++
++ case CE:
++ case JAP_W53:
++ default:
++ CtsProtect = 0x02;
++ break;
++ }
++ }
++ else
++ CtsProtect = 0x01;
++
++
++ // send start-RD with CTS protection command to MCU
++ // highbyte [7] reserve
++ // highbyte [6:5] 0x: stop Carrier/Radar detection
++ // highbyte [10]: Start Carrier/Radar detection without CTS protection, 11: Start Carrier/Radar detection with CTS protection
++ // highbyte [4:0] Radar/carrier detection duration. In 1ms.
++
++ // lowbyte [7:0] Radar/carrier detection period, in 1ms.
++ AsicSendCommandToMcu(pAd, 0x60, 0xff, CTSPeriod, DfsActiveTime | (CtsProtect << 5));
++ //AsicSendCommandToMcu(pAd, 0x63, 0xff, 10, 0);
++
++ return;
++}
++
++/*
++ ========================================================================
++
++ Routine Description:
++ Radar detection routine
++
++ Arguments:
++ pAd Pointer to our adapter
++
++ Return Value:
++ TRUE Found radar signal
++ FALSE Not found radar signal
++
++ ========================================================================
++*/
++VOID RadarDetectionStop(
++ IN PRTMP_ADAPTER pAd)
++{
++ DBGPRINT(RT_DEBUG_TRACE,("RadarDetectionStop.\n"));
++ AsicSendCommandToMcu(pAd, 0x60, 0xff, 0x00, 0x00); // send start-RD with CTS protection command to MCU
++
++ return;
++}
++
++/*
++ ========================================================================
++
++ Routine Description:
++ Radar channel check routine
++
++ Arguments:
++ pAd Pointer to our adapter
++
++ Return Value:
++ TRUE need to do radar detect
++ FALSE need not to do radar detect
++
++ ========================================================================
++*/
++BOOLEAN RadarChannelCheck(
++ IN PRTMP_ADAPTER pAd,
++ IN UCHAR Ch)
++{
++#if 1
++ INT i;
++ BOOLEAN result = FALSE;
++
++ for (i=0; i<pAd->ChannelListNum; i++)
++ {
++ if (Ch == pAd->ChannelList[i].Channel)
++ {
++ result = pAd->ChannelList[i].DfsReq;
++ break;
++ }
++ }
++
++ return result;
++#else
++ INT i;
++ UCHAR Channel[15]={52, 56, 60, 64, 100, 104, 108, 112, 116, 120, 124, 128, 132, 136, 140};
++
++ for (i=0; i<15; i++)
++ {
++ if (Ch == Channel[i])
++ {
++ break;
++ }
++ }
++
++ if (i != 15)
++ return TRUE;
++ else
++ return FALSE;
++#endif
++}
++
++ULONG JapRadarType(
++ IN PRTMP_ADAPTER pAd)
++{
++ ULONG i;
++ const UCHAR Channel[15]={52, 56, 60, 64, 100, 104, 108, 112, 116, 120, 124, 128, 132, 136, 140};
++
++ if (pAd->CommonCfg.RadarDetect.RDDurRegion != JAP)
++ {
++ return pAd->CommonCfg.RadarDetect.RDDurRegion;
++ }
++
++ for (i=0; i<15; i++)
++ {
++ if (pAd->CommonCfg.Channel == Channel[i])
++ {
++ break;
++ }
++ }
++
++ if (i < 4)
++ return JAP_W53;
++ else if (i < 15)
++ return JAP_W56;
++ else
++ return JAP; // W52
++
++}
++
++ULONG RTMPBbpReadRadarDuration(
++ IN PRTMP_ADAPTER pAd)
++{
++ UINT8 byteValue = 0;
++ ULONG result;
++
++ BBP_IO_READ8_BY_REG_ID(pAd, BBP_R115, &byteValue);
++
++ result = 0;
++ switch (byteValue)
++ {
++ case 1: // radar signal detected by pulse mode.
++ case 2: // radar signal detected by width mode.
++ result = RTMPReadRadarDuration(pAd);
++ break;
++
++ case 0: // No radar signal.
++ default:
++
++ result = 0;
++ break;
++ }
++
++ return result;
++}
++
++ULONG RTMPReadRadarDuration(
++ IN PRTMP_ADAPTER pAd)
++{
++ ULONG result = 0;
++
++#ifdef DFS_SUPPORT
++ UINT8 duration1 = 0, duration2 = 0, duration3 = 0;
++
++ BBP_IO_READ8_BY_REG_ID(pAd, BBP_R116, &duration1);
++ BBP_IO_READ8_BY_REG_ID(pAd, BBP_R117, &duration2);
++ BBP_IO_READ8_BY_REG_ID(pAd, BBP_R118, &duration3);
++ result = (duration1 << 16) + (duration2 << 8) + duration3;
++#endif // DFS_SUPPORT //
++
++ return result;
++
++}
++
++VOID RTMPCleanRadarDuration(
++ IN PRTMP_ADAPTER pAd)
++{
++ return;
++}
++
++/*
++ ========================================================================
++ Routine Description:
++ Radar wave detection. The API should be invoke each second.
++
++ Arguments:
++ pAd - Adapter pointer
++
++ Return Value:
++ None
++
++ ========================================================================
++*/
++VOID ApRadarDetectPeriodic(
++ IN PRTMP_ADAPTER pAd)
++{
++ INT i;
++
++ pAd->CommonCfg.RadarDetect.InServiceMonitorCount++;
++
++ for (i=0; i<pAd->ChannelListNum; i++)
++ {
++ if (pAd->ChannelList[i].RemainingTimeForUse > 0)
++ {
++ pAd->ChannelList[i].RemainingTimeForUse --;
++ if ((pAd->Mlme.PeriodicRound%5) == 0)
++ {
++ DBGPRINT(RT_DEBUG_TRACE, ("RadarDetectPeriodic - ch=%d, RemainingTimeForUse=%d\n", pAd->ChannelList[i].Channel, pAd->ChannelList[i].RemainingTimeForUse));
++ }
++ }
++ }
++
++ //radar detect
++ if ((pAd->CommonCfg.Channel > 14)
++ && (pAd->CommonCfg.bIEEE80211H == 1)
++ && RadarChannelCheck(pAd, pAd->CommonCfg.Channel))
++ {
++ RadarDetectPeriodic(pAd);
++ }
++
++ return;
++}
++
++// Periodic Radar detection, switch channel will occur in RTMPHandleTBTTInterrupt()
++// Before switch channel, driver needs doing channel switch announcement.
++VOID RadarDetectPeriodic(
++ IN PRTMP_ADAPTER pAd)
++{
++ // need to check channel availability, after switch channel
++ if (pAd->CommonCfg.RadarDetect.RDMode != RD_SILENCE_MODE)
++ return;
++
++ // channel availability check time is 60sec, use 65 for assurance
++ if (pAd->CommonCfg.RadarDetect.RDCount++ > pAd->CommonCfg.RadarDetect.ChMovingTime)
++ {
++ DBGPRINT(RT_DEBUG_TRACE, ("Not found radar signal, start send beacon and radar detection in service monitor\n\n"));
++ BbpRadarDetectionStop(pAd);
++ AsicEnableBssSync(pAd);
++ pAd->CommonCfg.RadarDetect.RDMode = RD_NORMAL_MODE;
++
++
++ return;
++ }
++
++ return;
++}
++
++
++/*
++ ==========================================================================
++ Description:
++ change channel moving time for DFS testing.
++
++ Arguments:
++ pAdapter Pointer to our adapter
++ wrq Pointer to the ioctl argument
++
++ Return Value:
++ None
++
++ Note:
++ Usage:
++ 1.) iwpriv ra0 set ChMovTime=[value]
++ ==========================================================================
++*/
++INT Set_ChMovingTime_Proc(
++ IN PRTMP_ADAPTER pAd,
++ IN PUCHAR arg)
++{
++ UINT8 Value;
++
++ Value = simple_strtol(arg, 0, 10);
++
++ pAd->CommonCfg.RadarDetect.ChMovingTime = Value;
++
++ DBGPRINT(RT_DEBUG_TRACE, ("%s:: %d\n", __FUNCTION__,
++ pAd->CommonCfg.RadarDetect.ChMovingTime));
++
++ return TRUE;
++}
++
++INT Set_LongPulseRadarTh_Proc(
++ IN PRTMP_ADAPTER pAd,
++ IN PUCHAR arg)
++{
++ UINT8 Value;
++
++ Value = simple_strtol(arg, 0, 10) > 10 ? 10 : simple_strtol(arg, 0, 10);
++
++ pAd->CommonCfg.RadarDetect.LongPulseRadarTh = Value;
++
++ DBGPRINT(RT_DEBUG_TRACE, ("%s:: %d\n", __FUNCTION__,
++ pAd->CommonCfg.RadarDetect.LongPulseRadarTh));
++
++ return TRUE;
++}
++
++
+--- /dev/null
++++ b/drivers/staging/rt2870/common/eeprom.c
+@@ -0,0 +1,254 @@
++/*
++ *************************************************************************
++ * Ralink Tech Inc.
++ * 5F., No.36, Taiyuan St., Jhubei City,
++ * Hsinchu County 302,
++ * Taiwan, R.O.C.
++ *
++ * (c) Copyright 2002-2007, Ralink Technology, Inc.
++ *
++ * This program is free software; you can redistribute it and/or modify *
++ * it under the terms of the GNU General Public License as published by *
++ * the Free Software Foundation; either version 2 of the License, or *
++ * (at your option) any later version. *
++ * *
++ * This program is distributed in the hope that it will be useful, *
++ * but WITHOUT ANY WARRANTY; without even the implied warranty of *
++ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the *
++ * GNU General Public License for more details. *
++ * *
++ * You should have received a copy of the GNU General Public License *
++ * along with this program; if not, write to the *
++ * Free Software Foundation, Inc., *
++ * 59 Temple Place - Suite 330, Boston, MA 02111-1307, USA. *
++ * *
++ *************************************************************************
++
++ Module Name:
++ eeprom.c
++
++ Abstract:
++
++ Revision History:
++ Who When What
++ -------- ---------- ----------------------------------------------
++ Name Date Modification logs
++*/
++#include "../rt_config.h"
++
++#if 0
++#define EEPROM_SIZE 0x200
++#define NVRAM_OFFSET 0x30000
++#define RF_OFFSET 0x40000
++
++static UCHAR init_flag = 0;
++static PUCHAR nv_ee_start = 0;
++
++static UCHAR EeBuffer[EEPROM_SIZE];
++#endif
++// IRQL = PASSIVE_LEVEL
++VOID RaiseClock(
++ IN PRTMP_ADAPTER pAd,
++ IN UINT32 *x)
++{
++ *x = *x | EESK;
++ RTMP_IO_WRITE32(pAd, E2PROM_CSR, *x);
++ RTMPusecDelay(1); // Max frequency = 1MHz in Spec. definition
++}
++
++// IRQL = PASSIVE_LEVEL
++VOID LowerClock(
++ IN PRTMP_ADAPTER pAd,
++ IN UINT32 *x)
++{
++ *x = *x & ~EESK;
++ RTMP_IO_WRITE32(pAd, E2PROM_CSR, *x);
++ RTMPusecDelay(1);
++}
++
++// IRQL = PASSIVE_LEVEL
++USHORT ShiftInBits(
++ IN PRTMP_ADAPTER pAd)
++{
++ UINT32 x,i;
++ USHORT data=0;
++
++ RTMP_IO_READ32(pAd, E2PROM_CSR, &x);
++
++ x &= ~( EEDO | EEDI);
++
++ for(i=0; i<16; i++)
++ {
++ data = data << 1;
++ RaiseClock(pAd, &x);
++
++ RTMP_IO_READ32(pAd, E2PROM_CSR, &x);
++
++ x &= ~(EEDI);
++ if(x & EEDO)
++ data |= 1;
++
++ LowerClock(pAd, &x);
++ }
++
++ return data;
++}
++
++// IRQL = PASSIVE_LEVEL
++VOID ShiftOutBits(
++ IN PRTMP_ADAPTER pAd,
++ IN USHORT data,
++ IN USHORT count)
++{
++ UINT32 x,mask;
++
++ mask = 0x01 << (count - 1);
++ RTMP_IO_READ32(pAd, E2PROM_CSR, &x);
++
++ x &= ~(EEDO | EEDI);
++
++ do
++ {
++ x &= ~EEDI;
++ if(data & mask) x |= EEDI;
++
++ RTMP_IO_WRITE32(pAd, E2PROM_CSR, x);
++
++ RaiseClock(pAd, &x);
++ LowerClock(pAd, &x);
++
++ mask = mask >> 1;
++ } while(mask);
++
++ x &= ~EEDI;
++ RTMP_IO_WRITE32(pAd, E2PROM_CSR, x);
++}
++
++// IRQL = PASSIVE_LEVEL
++VOID EEpromCleanup(
++ IN PRTMP_ADAPTER pAd)
++{
++ UINT32 x;
++
++ RTMP_IO_READ32(pAd, E2PROM_CSR, &x);
++
++ x &= ~(EECS | EEDI);
++ RTMP_IO_WRITE32(pAd, E2PROM_CSR, x);
++
++ RaiseClock(pAd, &x);
++ LowerClock(pAd, &x);
++}
++
++VOID EWEN(
++ IN PRTMP_ADAPTER pAd)
++{
++ UINT32 x;
++
++ // reset bits and set EECS
++ RTMP_IO_READ32(pAd, E2PROM_CSR, &x);
++ x &= ~(EEDI | EEDO | EESK);
++ x |= EECS;
++ RTMP_IO_WRITE32(pAd, E2PROM_CSR, x);
++
++ // kick a pulse
++ RaiseClock(pAd, &x);
++ LowerClock(pAd, &x);
++
++ // output the read_opcode and six pulse in that order
++ ShiftOutBits(pAd, EEPROM_EWEN_OPCODE, 5);
++ ShiftOutBits(pAd, 0, 6);
++
++ EEpromCleanup(pAd);
++}
++
++VOID EWDS(
++ IN PRTMP_ADAPTER pAd)
++{
++ UINT32 x;
++
++ // reset bits and set EECS
++ RTMP_IO_READ32(pAd, E2PROM_CSR, &x);
++ x &= ~(EEDI | EEDO | EESK);
++ x |= EECS;
++ RTMP_IO_WRITE32(pAd, E2PROM_CSR, x);
++
++ // kick a pulse
++ RaiseClock(pAd, &x);
++ LowerClock(pAd, &x);
++
++ // output the read_opcode and six pulse in that order
++ ShiftOutBits(pAd, EEPROM_EWDS_OPCODE, 5);
++ ShiftOutBits(pAd, 0, 6);
++
++ EEpromCleanup(pAd);
++}
++
++// IRQL = PASSIVE_LEVEL
++USHORT RTMP_EEPROM_READ16(
++ IN PRTMP_ADAPTER pAd,
++ IN USHORT Offset)
++{
++ UINT32 x;
++ USHORT data;
++
++ Offset /= 2;
++ // reset bits and set EECS
++ RTMP_IO_READ32(pAd, E2PROM_CSR, &x);
++ x &= ~(EEDI | EEDO | EESK);
++ x |= EECS;
++ RTMP_IO_WRITE32(pAd, E2PROM_CSR, x);
++
++ // kick a pulse
++ RaiseClock(pAd, &x);
++ LowerClock(pAd, &x);
++
++ // output the read_opcode and register number in that order
++ ShiftOutBits(pAd, EEPROM_READ_OPCODE, 3);
++ ShiftOutBits(pAd, Offset, pAd->EEPROMAddressNum);
++
++ // Now read the data (16 bits) in from the selected EEPROM word
++ data = ShiftInBits(pAd);
++
++ EEpromCleanup(pAd);
++
++ return data;
++} //ReadEEprom
++
++VOID RTMP_EEPROM_WRITE16(
++ IN PRTMP_ADAPTER pAd,
++ IN USHORT Offset,
++ IN USHORT Data)
++{
++ UINT32 x;
++
++ Offset /= 2;
++
++ EWEN(pAd);
++
++ // reset bits and set EECS
++ RTMP_IO_READ32(pAd, E2PROM_CSR, &x);
++ x &= ~(EEDI | EEDO | EESK);
++ x |= EECS;
++ RTMP_IO_WRITE32(pAd, E2PROM_CSR, x);
++
++ // kick a pulse
++ RaiseClock(pAd, &x);
++ LowerClock(pAd, &x);
++
++ // output the read_opcode ,register number and data in that order
++ ShiftOutBits(pAd, EEPROM_WRITE_OPCODE, 3);
++ ShiftOutBits(pAd, Offset, pAd->EEPROMAddressNum);
++ ShiftOutBits(pAd, Data, 16); // 16-bit access
++
++ // read DO status
++ RTMP_IO_READ32(pAd, E2PROM_CSR, &x);
++
++ EEpromCleanup(pAd);
++
++ RTMPusecDelay(10000); //delay for twp(MAX)=10ms
++
++ EWDS(pAd);
++
++ EEpromCleanup(pAd);
++}
++
+--- /dev/null
++++ b/drivers/staging/rt2870/common/firmware.h
+@@ -0,0 +1,558 @@
++/*
++ Copyright (c) 2007, Ralink Technology Corporation
++ All rights reserved.
++
++ Redistribution. Redistribution and use in binary form, without
++ modification, are permitted provided that the following conditions are
++ met:
++
++ * Redistributions must reproduce the above copyright notice and the
++ following disclaimer in the documentation and/or other materials
++ provided with the distribution.
++ * Neither the name of Ralink Technology Corporation nor the names of its
++ suppliers may be used to endorse or promote products derived from this
++ software without specific prior written permission.
++ * No reverse engineering, decompilation, or disassembly of this software
++ is permitted.
++
++ Limited patent license. Ralink Technology Corporation grants a world-wide,
++ royalty-free, non-exclusive license under patents it now or hereafter
++ owns or controls to make, have made, use, import, offer to sell and
++ sell ("Utilize") this software, but solely to the extent that any
++ such patent is necessary to Utilize the software alone, or in
++ combination with an operating system licensed under an approved Open
++ Source license as listed by the Open Source Initiative at
++ http://opensource.org/licenses. The patent license shall not apply to
++ any other combinations which include this software. No hardware per
++ se is licensed hereunder.
++
++ DISCLAIMER. THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND
++ CONTRIBUTORS "AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING,
++ BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND
++ FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE
++ COPYRIGHT OWNER OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT,
++ INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING,
++ BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS
++ OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND
++ ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR
++ TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE
++ USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH
++ DAMAGE.
++*/
++/* AUTO GEN PLEASE DO NOT MODIFY IT */
++/* AUTO GEN PLEASE DO NOT MODIFY IT */
++
++
++UCHAR FirmwareImage [] = {
++0xff, 0xff, 0xff, 0x02, 0x10, 0x28, 0x02, 0x10, 0x32, 0x02, 0x10, 0x78, 0x02, 0x12, 0x79, 0x02,
++0x12, 0x7a, 0x02, 0x12, 0x99, 0x02, 0x12, 0x9e, 0x12, 0x12, 0x9a, 0x22, 0x02, 0x16, 0x36, 0x02,
++0x17, 0x0c, 0x02, 0x13, 0x89, 0x02, 0x12, 0x9f, 0x30, 0x05, 0x06, 0x20, 0x0d, 0x03, 0x12, 0x17,
++0xae, 0x22, 0x90, 0x01, 0x8c, 0xe0, 0x30, 0xe3, 0x1b, 0xe5, 0x4c, 0x30, 0xe0, 0x04, 0x7f, 0x40,
++0x80, 0x02, 0x7f, 0x00, 0x90, 0x10, 0x2f, 0xef, 0xf0, 0x90, 0x01, 0x8c, 0x74, 0x08, 0xf0, 0xe4,
++0x90, 0x01, 0xa7, 0xf0, 0x90, 0x01, 0x8c, 0xe0, 0x30, 0xe0, 0x1c, 0x90, 0x01, 0x80, 0xe0, 0xb4,
++0x02, 0x15, 0xa3, 0xe0, 0xb4, 0x01, 0x10, 0x90, 0x01, 0x84, 0xe0, 0xb4, 0x81, 0x09, 0x90, 0x01,
++0x8c, 0x74, 0x01, 0xf0, 0x12, 0x0d, 0xc8, 0x22, 0x90, 0x04, 0x14, 0xe0, 0x20, 0xe7, 0x03, 0x02,
++0x12, 0x6e, 0x90, 0x70, 0x12, 0xe0, 0xf5, 0x56, 0x90, 0x04, 0x04, 0xe0, 0x12, 0x0a, 0x9d, 0x10,
++0xb7, 0x31, 0x10, 0xe2, 0x50, 0x11, 0x08, 0x51, 0x11, 0x13, 0x52, 0x11, 0x13, 0x53, 0x11, 0x13,
++0x54, 0x11, 0x54, 0x55, 0x11, 0x79, 0x70, 0x11, 0xa4, 0x71, 0x11, 0xd2, 0x72, 0x12, 0x25, 0x73,
++0x12, 0x46, 0x80, 0x00, 0x00, 0x12, 0x6e, 0x20, 0x02, 0x03, 0x30, 0x03, 0x1d, 0x7d, 0x02, 0xaf,
++0x56, 0x12, 0x0b, 0x91, 0x90, 0x04, 0x14, 0x74, 0x80, 0xf0, 0xe4, 0x90, 0x70, 0x13, 0xf0, 0xe5,
++0x56, 0xf4, 0x70, 0x03, 0x02, 0x12, 0x6e, 0x02, 0x12, 0x67, 0x85, 0x56, 0x41, 0xd2, 0x02, 0x02,
++0x12, 0x6e, 0x90, 0x70, 0x10, 0xe0, 0x54, 0x7f, 0x64, 0x02, 0x60, 0x03, 0x02, 0x12, 0x6e, 0x90,
++0x70, 0x11, 0xe0, 0x64, 0x08, 0x60, 0x08, 0xe0, 0x64, 0x20, 0x60, 0x03, 0x02, 0x12, 0x6e, 0x75,
++0x4e, 0x03, 0x75, 0x4f, 0x20, 0x02, 0x12, 0x6e, 0x90, 0x70, 0x11, 0xe0, 0x24, 0xff, 0x92, 0x47,
++0x02, 0x12, 0x6e, 0x90, 0x04, 0x04, 0xe0, 0x25, 0xe0, 0x24, 0x5d, 0xf5, 0x57, 0x90, 0x70, 0x10,
++0xe0, 0xff, 0x74, 0x47, 0x25, 0x57, 0xf8, 0xc6, 0xef, 0xc6, 0x90, 0x70, 0x11, 0xe0, 0xff, 0x74,
++0x48, 0x25, 0x57, 0xf8, 0xc6, 0xef, 0xc6, 0xe4, 0xfd, 0xaf, 0x56, 0x12, 0x0b, 0x91, 0x90, 0x04,
++0x14, 0x74, 0x80, 0xf0, 0xe4, 0x90, 0x70, 0x13, 0xf0, 0xe5, 0x56, 0xf4, 0x70, 0x03, 0x02, 0x12,
++0x6e, 0x02, 0x12, 0x67, 0xe5, 0x47, 0x64, 0x07, 0x60, 0x0b, 0xe5, 0x47, 0x64, 0x08, 0x60, 0x05,
++0xe5, 0x47, 0xb4, 0x09, 0x08, 0x90, 0x70, 0x11, 0xe0, 0x54, 0x0f, 0xf5, 0x3a, 0xe4, 0xfd, 0xaf,
++0x56, 0x12, 0x0b, 0x91, 0xd2, 0x04, 0x02, 0x12, 0x6e, 0x90, 0x70, 0x10, 0xe0, 0xfe, 0x90, 0x70,
++0x11, 0xe0, 0xfd, 0xed, 0xf8, 0xe6, 0xf5, 0x57, 0xfd, 0xaf, 0x56, 0x12, 0x0b, 0x91, 0x90, 0x04,
++0x14, 0x74, 0x80, 0xf0, 0xe4, 0x90, 0x70, 0x13, 0xf0, 0xe5, 0x56, 0xf4, 0x70, 0x03, 0x02, 0x12,
++0x6e, 0x02, 0x12, 0x67, 0x90, 0x70, 0x10, 0xe0, 0xfe, 0x90, 0x70, 0x11, 0xe0, 0xfd, 0xed, 0xf5,
++0x82, 0x8e, 0x83, 0xe0, 0xf5, 0x57, 0xfd, 0xaf, 0x56, 0x12, 0x0b, 0x91, 0x90, 0x04, 0x14, 0x74,
++0x80, 0xf0, 0xe4, 0x90, 0x70, 0x13, 0xf0, 0xe5, 0x56, 0xf4, 0x70, 0x03, 0x02, 0x12, 0x6e, 0x02,
++0x12, 0x67, 0x90, 0x10, 0x02, 0xe0, 0xb4, 0x70, 0x1e, 0xa3, 0xe0, 0xb4, 0x30, 0x19, 0x90, 0x05,
++0x08, 0xe0, 0x44, 0x01, 0xf0, 0xfd, 0x90, 0x05, 0x05, 0xe0, 0x54, 0xfb, 0xf0, 0x44, 0x04, 0xf0,
++0xed, 0x54, 0xfe, 0x90, 0x05, 0x08, 0xf0, 0xe4, 0xf5, 0x4e, 0xf5, 0x4f, 0x75, 0x3a, 0xff, 0xad,
++0x57, 0xaf, 0x56, 0x12, 0x0b, 0x91, 0x90, 0x04, 0x14, 0x74, 0x80, 0xf0, 0xe4, 0x90, 0x70, 0x13,
++0xf0, 0xe5, 0x56, 0xf4, 0x60, 0x07, 0x90, 0x70, 0x25, 0xe0, 0x44, 0x01, 0xf0, 0x90, 0x70, 0x40,
++0xe5, 0x3a, 0xf0, 0x80, 0x49, 0x90, 0x70, 0x10, 0xe0, 0x24, 0xff, 0x92, 0x93, 0xe4, 0xfd, 0xaf,
++0x56, 0x12, 0x0b, 0x91, 0x90, 0x04, 0x14, 0x74, 0x80, 0xf0, 0xe4, 0x90, 0x70, 0x13, 0xf0, 0xe5,
++0x56, 0xf4, 0x60, 0x2a, 0x80, 0x21, 0x90, 0x70, 0x10, 0xe0, 0x24, 0xff, 0x92, 0x4a, 0xd2, 0x05,
++0xad, 0x57, 0xaf, 0x56, 0x12, 0x0b, 0x91, 0x90, 0x04, 0x14, 0x74, 0x80, 0xf0, 0xe4, 0x90, 0x70,
++0x13, 0xf0, 0xe5, 0x56, 0xf4, 0x60, 0x07, 0x90, 0x70, 0x25, 0xe0, 0x44, 0x01, 0xf0, 0x90, 0x70,
++0x42, 0xe5, 0x3a, 0xf0, 0xa3, 0x74, 0xab, 0xf0, 0x22, 0x22, 0xe5, 0x53, 0x70, 0x1a, 0x30, 0x60,
++0x09, 0xb2, 0x4d, 0x30, 0x4d, 0x04, 0x05, 0x46, 0xc2, 0x04, 0xe5, 0x4f, 0x45, 0x4e, 0x60, 0x08,
++0xe5, 0x4f, 0x15, 0x4f, 0x70, 0x02, 0x15, 0x4e, 0x22, 0x22, 0xc2, 0x42, 0xd3, 0x22, 0x22, 0xc2,
++0x4b, 0xc2, 0x4c, 0xe5, 0x44, 0x12, 0x0a, 0x9d, 0x12, 0xc1, 0x00, 0x13, 0x54, 0x04, 0x13, 0x50,
++0x08, 0x13, 0x2b, 0x10, 0x12, 0xd5, 0x20, 0x12, 0xf5, 0x60, 0x13, 0x06, 0xa0, 0x00, 0x00, 0x13,
++0x56, 0x85, 0x48, 0x43, 0x85, 0x4a, 0x42, 0x85, 0x4c, 0x5e, 0xe5, 0x47, 0x64, 0x06, 0x60, 0x03,
++0x02, 0x13, 0x56, 0x80, 0x1b, 0xe5, 0x48, 0xc4, 0x54, 0x0f, 0xf5, 0x43, 0xe5, 0x4a, 0xc4, 0x54,
++0x0f, 0xf5, 0x42, 0xe5, 0x4c, 0xc4, 0x54, 0x0f, 0xf5, 0x5e, 0xe5, 0x47, 0x64, 0x06, 0x70, 0x66,
++0x53, 0x43, 0x0f, 0x80, 0x61, 0x85, 0x49, 0x43, 0x85, 0x4b, 0x42, 0x85, 0x4d, 0x5e, 0xe5, 0x47,
++0x64, 0x06, 0x70, 0x52, 0x80, 0x1b, 0xe5, 0x49, 0xc4, 0x54, 0x0f, 0xf5, 0x43, 0xe5, 0x4b, 0xc4,
++0x54, 0x0f, 0xf5, 0x42, 0xe5, 0x4d, 0xc4, 0x54, 0x0f, 0xf5, 0x5e, 0xe5, 0x47, 0x64, 0x06, 0x70,
++0x35, 0xe5, 0x43, 0x54, 0x0f, 0x44, 0x10, 0xf5, 0x43, 0x80, 0x2b, 0xe5, 0x47, 0xb4, 0x04, 0x06,
++0x53, 0x5e, 0xfb, 0x75, 0x42, 0x09, 0xe5, 0x47, 0xb4, 0x05, 0x06, 0x43, 0x5e, 0x04, 0x75, 0x42,
++0x09, 0xe5, 0x47, 0xb4, 0x06, 0x10, 0xe5, 0x43, 0x54, 0x0f, 0x44, 0x30, 0xf5, 0x43, 0x80, 0x06,
++0xd2, 0x4b, 0x80, 0x02, 0xd2, 0x4c, 0xe4, 0xf5, 0x25, 0xe5, 0x42, 0xc4, 0x54, 0xf0, 0xff, 0xe5,
++0x43, 0x54, 0x0f, 0x4f, 0xf5, 0x5f, 0x90, 0x70, 0x44, 0xf0, 0xa3, 0xe5, 0x5e, 0xf0, 0xa3, 0xe5,
++0x4a, 0xf0, 0xa3, 0xe5, 0x48, 0xf0, 0xa3, 0xe5, 0x4c, 0xf0, 0xa3, 0xe5, 0x44, 0xf0, 0xa3, 0xe5,
++0x42, 0xf0, 0xa3, 0xe5, 0x43, 0xf0, 0xd2, 0x60, 0x22, 0xe5, 0x47, 0x60, 0x10, 0x24, 0xc0, 0x70,
++0x03, 0x12, 0x16, 0x16, 0x12, 0x13, 0x9e, 0xc2, 0xaf, 0xc2, 0x04, 0xd2, 0xaf, 0x22, 0xc2, 0xaf,
++0x90, 0x04, 0x14, 0xe0, 0x54, 0x0e, 0x60, 0x04, 0xd2, 0x18, 0x80, 0x08, 0xe5, 0x4e, 0x45, 0x4f,
++0x24, 0xff, 0x92, 0x18, 0xd2, 0xaf, 0x90, 0x04, 0x14, 0xe0, 0xa2, 0xe4, 0x92, 0x19, 0x74, 0x1e,
++0xf0, 0xe5, 0x5f, 0x54, 0x0f, 0xf5, 0x2d, 0xe5, 0x25, 0x70, 0x13, 0x30, 0x18, 0x05, 0xe5, 0x5f,
++0x20, 0xe5, 0x0b, 0x30, 0x19, 0x19, 0xe5, 0x5f, 0x54, 0x30, 0xff, 0xbf, 0x30, 0x11, 0xe5, 0x25,
++0x70, 0x05, 0x75, 0x25, 0x0c, 0x80, 0x02, 0x15, 0x25, 0xd2, 0x6c, 0xd2, 0x6d, 0x80, 0x0f, 0xe5,
++0x5f, 0x30, 0xe6, 0x06, 0xc2, 0x6c, 0xd2, 0x6d, 0x80, 0x04, 0xd2, 0x6c, 0xc2, 0x6d, 0xe5, 0x47,
++0x64, 0x03, 0x70, 0x21, 0x30, 0x4b, 0x06, 0xc2, 0x6c, 0xd2, 0x6d, 0x80, 0x18, 0xe5, 0x25, 0x70,
++0x03, 0x30, 0x4c, 0x11, 0xc2, 0x4c, 0xe5, 0x25, 0x70, 0x05, 0x75, 0x25, 0x07, 0x80, 0x02, 0x15,
++0x25, 0xd2, 0x6c, 0xd2, 0x6d, 0xe5, 0x47, 0xb4, 0x09, 0x14, 0xe5, 0x44, 0x20, 0xe3, 0x0b, 0xe5,
++0x3a, 0x64, 0x02, 0x60, 0x05, 0xe5, 0x3a, 0xb4, 0x03, 0x04, 0xc2, 0x6c, 0xd2, 0x6d, 0x90, 0x70,
++0x46, 0xe5, 0x2d, 0xf0, 0x20, 0x69, 0x07, 0xe5, 0x5e, 0x20, 0xe0, 0x02, 0xb2, 0x68, 0x20, 0x6b,
++0x07, 0xe5, 0x5e, 0x20, 0xe1, 0x02, 0xb2, 0x6a, 0x20, 0x6d, 0x07, 0xe5, 0x5e, 0x20, 0xe2, 0x02,
++0xb2, 0x6c, 0x90, 0x70, 0x47, 0xe5, 0x2d, 0xf0, 0x75, 0x2e, 0x40, 0x20, 0x69, 0x04, 0xa2, 0x68,
++0x80, 0x26, 0x30, 0x68, 0x06, 0xe5, 0x46, 0xa2, 0xe2, 0x80, 0x1d, 0xe5, 0x5e, 0x20, 0xe2, 0x04,
++0x7f, 0x01, 0x80, 0x02, 0x7f, 0x00, 0xe5, 0x46, 0x54, 0xf0, 0xfe, 0xbe, 0xf0, 0x04, 0x7e, 0x01,
++0x80, 0x02, 0x7e, 0x00, 0xee, 0x6f, 0x24, 0xff, 0x92, 0x73, 0x92, 0x72, 0x20, 0x6b, 0x04, 0xa2,
++0x6a, 0x80, 0x26, 0x30, 0x6a, 0x06, 0xe5, 0x46, 0xa2, 0xe2, 0x80, 0x1d, 0xe5, 0x5e, 0x20, 0xe0,
++0x04, 0x7f, 0x01, 0x80, 0x02, 0x7f, 0x00, 0xe5, 0x46, 0x54, 0xf0, 0xfe, 0xbe, 0xf0, 0x04, 0x7e,
++0x01, 0x80, 0x02, 0x7e, 0x00, 0xee, 0x6f, 0x24, 0xff, 0x92, 0x75, 0x92, 0x74, 0x20, 0x6d, 0x04,
++0xa2, 0x6c, 0x80, 0x26, 0x30, 0x6c, 0x06, 0xe5, 0x46, 0xa2, 0xe2, 0x80, 0x1d, 0xe5, 0x5e, 0x20,
++0xe1, 0x04, 0x7f, 0x01, 0x80, 0x02, 0x7f, 0x00, 0xe5, 0x46, 0x54, 0xf0, 0xfe, 0xbe, 0xf0, 0x04,
++0x7e, 0x01, 0x80, 0x02, 0x7e, 0x00, 0xee, 0x6f, 0x24, 0xff, 0x92, 0x71, 0x92, 0x70, 0x90, 0x10,
++0x2f, 0xe5, 0x2e, 0xf0, 0xe5, 0x47, 0x64, 0x06, 0x70, 0x4c, 0x90, 0x02, 0x29, 0xe0, 0x54, 0xfe,
++0xf0, 0xe5, 0x43, 0xc4, 0x54, 0x0f, 0x14, 0x60, 0x14, 0x24, 0xfe, 0x60, 0x23, 0x24, 0x03, 0x60,
++0x03, 0x02, 0x16, 0x05, 0x90, 0x02, 0x28, 0xe0, 0x30, 0x47, 0x0f, 0x80, 0x07, 0x90, 0x02, 0x28,
++0xe0, 0x20, 0x47, 0x06, 0x54, 0xfe, 0xf0, 0x02, 0x16, 0x05, 0x44, 0x01, 0xf0, 0x02, 0x16, 0x05,
++0xe5, 0x46, 0x30, 0xe2, 0x04, 0x7f, 0x01, 0x80, 0x02, 0x7f, 0x00, 0x90, 0x02, 0x28, 0xe0, 0x54,
++0xfe, 0x4f, 0xf0, 0x02, 0x16, 0x05, 0xe5, 0x47, 0x64, 0x07, 0x60, 0x0f, 0xe5, 0x47, 0x64, 0x08,
++0x60, 0x09, 0xe5, 0x47, 0x64, 0x09, 0x60, 0x03, 0x02, 0x16, 0x05, 0xe4, 0xf5, 0x27, 0x90, 0x02,
++0x29, 0xe0, 0x54, 0xfc, 0xf0, 0xe5, 0x3a, 0x14, 0x60, 0x2d, 0x14, 0x60, 0x2e, 0x14, 0x60, 0x36,
++0x24, 0xfc, 0x60, 0x5f, 0x24, 0xf9, 0x60, 0x1f, 0x24, 0x0e, 0x70, 0x69, 0xe5, 0x46, 0x13, 0x13,
++0x54, 0x3f, 0x75, 0xf0, 0x01, 0x84, 0xaf, 0xf0, 0x20, 0x47, 0x04, 0x7e, 0x01, 0x80, 0x02, 0x7e,
++0x00, 0xef, 0x6e, 0x24, 0xff, 0x80, 0x45, 0xa2, 0x47, 0x80, 0x41, 0xe5, 0x46, 0x30, 0xe2, 0x03,
++0xd3, 0x80, 0x27, 0xc3, 0x80, 0x24, 0xe5, 0x46, 0x30, 0xe2, 0x0d, 0x54, 0x38, 0xc3, 0x94, 0x30,
++0x50, 0x06, 0x7e, 0x00, 0x7f, 0x01, 0x80, 0x04, 0x7e, 0x00, 0x7f, 0x00, 0x20, 0x47, 0x04, 0x7d,
++0x01, 0x80, 0x02, 0x7d, 0x00, 0xef, 0x6d, 0x4e, 0x24, 0xff, 0x92, 0x38, 0xa2, 0x47, 0xb3, 0x92,
++0x39, 0x80, 0x19, 0xe5, 0x46, 0x30, 0xe2, 0x03, 0xd3, 0x80, 0x01, 0xc3, 0x92, 0x39, 0xa2, 0x47,
++0xb3, 0x92, 0x38, 0x80, 0x07, 0xa2, 0x47, 0xb3, 0x92, 0x38, 0x92, 0x39, 0x90, 0x02, 0x28, 0xe0,
++0x54, 0xfc, 0x45, 0x27, 0xf0, 0x90, 0x70, 0x9c, 0xe5, 0x3a, 0xf0, 0xa3, 0xe5, 0x47, 0xf0, 0x90,
++0x70, 0x41, 0xe5, 0x3a, 0xf0, 0x22, 0xe4, 0x90, 0x02, 0x29, 0xf0, 0x30, 0x47, 0x04, 0xaf, 0x45,
++0x80, 0x04, 0xe5, 0x45, 0xf4, 0xff, 0x90, 0x02, 0x28, 0xef, 0xf0, 0x22, 0x8f, 0x50, 0xd2, 0x59,
++0x22, 0x8f, 0x54, 0xd2, 0x58, 0x22, 0xe4, 0xf5, 0x62, 0xc2, 0xaf, 0xe5, 0x51, 0x14, 0x60, 0x46,
++0x14, 0x60, 0x62, 0x24, 0x02, 0x60, 0x03, 0x02, 0x16, 0xf0, 0xd2, 0x59, 0x75, 0x55, 0x01, 0x90,
++0x02, 0xa2, 0xe0, 0x54, 0x7f, 0xf0, 0xa3, 0xe0, 0x20, 0xe7, 0x22, 0x90, 0x04, 0x34, 0xe0, 0xb4,
++0x02, 0x1b, 0xa3, 0xe0, 0xb4, 0x02, 0x16, 0xa3, 0xe0, 0xb4, 0x02, 0x11, 0x7f, 0x20, 0x12, 0x16,
++0x2c, 0x90, 0x10, 0x04, 0xe0, 0x54, 0xf3, 0xf0, 0x75, 0x51, 0x01, 0x80, 0x73, 0xe5, 0x50, 0x70,
++0x05, 0x75, 0x62, 0x03, 0x80, 0x6a, 0x90, 0x12, 0x00, 0xe0, 0x54, 0x03, 0x70, 0x11, 0x7f, 0x20,
++0x12, 0x16, 0x2c, 0x90, 0x02, 0xa2, 0xe0, 0x54, 0xbf, 0xf0, 0x75, 0x51, 0x02, 0x80, 0x51, 0xe5,
++0x50, 0x70, 0x02, 0x80, 0x46, 0x90, 0x02, 0xa3, 0xe0, 0x20, 0xe6, 0x3b, 0x90, 0x04, 0x37, 0xe0,
++0x64, 0x22, 0x70, 0x33, 0x90, 0x01, 0x8a, 0x74, 0x7e, 0xf0, 0x90, 0x01, 0x96, 0xf0, 0x90, 0x12,
++0x04, 0x74, 0x0a, 0xf0, 0x90, 0x13, 0x28, 0xe0, 0x54, 0xf0, 0xf0, 0xa3, 0xe0, 0x54, 0xf0, 0xf0,
++0xa3, 0xe0, 0x54, 0xfa, 0xf0, 0x90, 0x04, 0x01, 0xe0, 0x54, 0xf9, 0xf0, 0x75, 0x62, 0x01, 0x75,
++0x55, 0x02, 0xe4, 0xf5, 0x51, 0x80, 0x09, 0xe5, 0x50, 0x70, 0x05, 0x75, 0x62, 0x03, 0xf5, 0x51,
++0xe5, 0x62, 0x60, 0x15, 0xc2, 0x01, 0xe4, 0xf5, 0x51, 0xc2, 0x59, 0xad, 0x62, 0xaf, 0x40, 0x12,
++0x17, 0x7a, 0xe5, 0x62, 0xb4, 0x03, 0x02, 0xd2, 0x03, 0xd2, 0xaf, 0x22, 0xc2, 0xaf, 0x30, 0x01,
++0x12, 0xe4, 0x90, 0x01, 0x96, 0xf0, 0xf5, 0x51, 0xc2, 0x59, 0xc2, 0x01, 0x7d, 0x02, 0xaf, 0x40,
++0x12, 0x17, 0x7a, 0xe5, 0x52, 0x14, 0x60, 0x09, 0x04, 0x70, 0x4c, 0x75, 0x52, 0x01, 0x75, 0x55,
++0x03, 0x90, 0x04, 0x01, 0xe0, 0x44, 0x0e, 0xf0, 0x90, 0x13, 0x28, 0xe0, 0x44, 0x0f, 0xf0, 0xa3,
++0xe0, 0x44, 0x0f, 0xf0, 0xa3, 0xe0, 0x44, 0x05, 0xf0, 0x90, 0x12, 0x04, 0x74, 0x03, 0xf0, 0x90,
++0x02, 0xa2, 0xe0, 0x44, 0xc0, 0xf0, 0x90, 0x10, 0x04, 0xe0, 0x44, 0x0c, 0xf0, 0xe4, 0xf5, 0x52,
++0xf5, 0x55, 0x30, 0x02, 0x0b, 0xc2, 0x02, 0x7d, 0x01, 0xaf, 0x41, 0x12, 0x17, 0x7a, 0x80, 0x02,
++0xc2, 0x03, 0xe4, 0x90, 0x01, 0x96, 0xf0, 0xd2, 0xaf, 0x22, 0xef, 0xf4, 0x60, 0x2d, 0xe4, 0xfe,
++0x74, 0x14, 0x2e, 0xf5, 0x82, 0xe4, 0x34, 0x70, 0xf5, 0x83, 0xe0, 0xb4, 0xff, 0x19, 0x74, 0x14,
++0x2e, 0xf5, 0x82, 0xe4, 0x34, 0x70, 0xf5, 0x83, 0xef, 0xf0, 0x74, 0x1c, 0x2e, 0xf5, 0x82, 0xe4,
++0x34, 0x70, 0xf5, 0x83, 0xed, 0xf0, 0x22, 0x0e, 0xbe, 0x04, 0xd5, 0x22, 0x22, 0x22, 0x90, 0x70,
++0x2a, 0xe0, 0x30, 0xe1, 0x4d, 0xc2, 0xaf, 0x90, 0x70, 0x28, 0xe0, 0x90, 0x10, 0x1c, 0xf0, 0x90,
++0x70, 0x29, 0xe0, 0x90, 0x10, 0x1d, 0xf0, 0x90, 0x70, 0x2a, 0xe0, 0x90, 0x10, 0x1e, 0xf0, 0x90,
++0x10, 0x1c, 0xe0, 0xf5, 0x62, 0x90, 0x10, 0x1e, 0xe0, 0x20, 0xe1, 0xf3, 0x90, 0x10, 0x1c, 0xe0,
++0x90, 0x70, 0x28, 0xf0, 0x90, 0x10, 0x1d, 0xe0, 0x90, 0x70, 0x29, 0xf0, 0x90, 0x10, 0x1e, 0xe0,
++0x90, 0x70, 0x2a, 0xf0, 0x30, 0x4a, 0x07, 0x90, 0x70, 0x24, 0xe0, 0x44, 0x01, 0xf0, 0xc2, 0x05,
++0xd2, 0xaf, 0x22, 0x22, 0x22, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
++0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
++0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
++0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
++0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
++0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
++0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
++0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
++0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
++0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
++0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
++0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
++0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
++0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
++0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
++0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
++0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
++0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
++0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
++0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
++0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
++0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
++0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
++0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
++0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
++0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
++0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
++0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
++0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
++0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
++0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
++0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
++0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
++0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
++0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
++0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
++0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
++0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
++0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
++0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
++0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
++0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
++0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
++0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
++0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
++0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
++0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
++0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
++0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
++0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
++0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
++0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
++0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
++0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
++0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
++0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
++0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
++0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
++0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
++0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
++0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
++0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
++0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
++0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
++0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
++0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
++0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
++0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
++0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
++0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
++0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
++0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
++0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
++0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
++0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
++0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
++0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
++0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
++0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
++0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
++0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
++0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
++0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
++0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
++0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
++0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
++0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
++0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
++0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
++0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
++0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
++0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
++0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
++0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
++0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
++0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
++0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
++0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
++0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
++0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
++0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
++0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
++0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
++0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
++0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
++0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
++0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
++0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
++0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
++0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
++0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
++0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
++0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
++0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
++0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
++0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
++0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
++0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
++0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
++0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
++0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
++0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
++0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
++0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
++0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
++0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
++0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
++0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x0a, 0x69, 0x77,
++0xff, 0xff, 0xff, 0x02, 0x10, 0x28, 0x02, 0x10, 0x32, 0x02, 0x10, 0x78, 0x02, 0x12, 0x25, 0x02,
++0x12, 0x26, 0x02, 0x12, 0x39, 0x02, 0x12, 0x3e, 0x12, 0x12, 0x3a, 0x22, 0x02, 0x15, 0x72, 0x02,
++0x16, 0x48, 0x02, 0x13, 0x29, 0x02, 0x12, 0x3f, 0x30, 0x05, 0x06, 0x20, 0x0d, 0x03, 0x12, 0x16,
++0xea, 0x22, 0x90, 0x01, 0x8c, 0xe0, 0x30, 0xe3, 0x1b, 0xe5, 0x4c, 0x30, 0xe0, 0x04, 0x7f, 0x40,
++0x80, 0x02, 0x7f, 0x00, 0x90, 0x10, 0x2f, 0xef, 0xf0, 0x90, 0x01, 0x8c, 0x74, 0x08, 0xf0, 0xe4,
++0x90, 0x01, 0xa7, 0xf0, 0x90, 0x01, 0x8c, 0xe0, 0x30, 0xe0, 0x1c, 0x90, 0x01, 0x80, 0xe0, 0xb4,
++0x02, 0x15, 0xa3, 0xe0, 0xb4, 0x01, 0x10, 0x90, 0x01, 0x84, 0xe0, 0xb4, 0x81, 0x09, 0x90, 0x01,
++0x8c, 0x74, 0x01, 0xf0, 0x12, 0x0d, 0xdd, 0x22, 0x90, 0x04, 0x14, 0xe0, 0x20, 0xe7, 0x03, 0x02,
++0x12, 0x1a, 0x90, 0x70, 0x12, 0xe0, 0xf5, 0x56, 0x90, 0x04, 0x04, 0xe0, 0x12, 0x0a, 0xb6, 0x10,
++0xb4, 0x31, 0x10, 0xdf, 0x50, 0x11, 0x05, 0x51, 0x11, 0x10, 0x52, 0x11, 0x10, 0x53, 0x11, 0x10,
++0x54, 0x11, 0x51, 0x55, 0x11, 0x70, 0x70, 0x11, 0x9a, 0x71, 0x11, 0xc4, 0x72, 0x11, 0xf2, 0x80,
++0x00, 0x00, 0x12, 0x1a, 0x20, 0x02, 0x03, 0x30, 0x03, 0x1d, 0x7d, 0x02, 0xaf, 0x56, 0x12, 0x0b,
++0xaa, 0x90, 0x04, 0x14, 0x74, 0x80, 0xf0, 0xe4, 0x90, 0x70, 0x13, 0xf0, 0xe5, 0x56, 0xf4, 0x70,
++0x03, 0x02, 0x12, 0x1a, 0x02, 0x12, 0x13, 0x85, 0x56, 0x41, 0xd2, 0x02, 0x02, 0x12, 0x1a, 0x90,
++0x70, 0x10, 0xe0, 0x54, 0x7f, 0x64, 0x02, 0x60, 0x03, 0x02, 0x12, 0x1a, 0x90, 0x70, 0x11, 0xe0,
++0x64, 0x08, 0x60, 0x08, 0xe0, 0x64, 0x20, 0x60, 0x03, 0x02, 0x12, 0x1a, 0x75, 0x4e, 0x03, 0x75,
++0x4f, 0x20, 0x02, 0x12, 0x1a, 0x90, 0x70, 0x11, 0xe0, 0x24, 0xff, 0x92, 0x47, 0x02, 0x12, 0x1a,
++0x90, 0x04, 0x04, 0xe0, 0x25, 0xe0, 0x24, 0x5d, 0xf5, 0x57, 0x90, 0x70, 0x10, 0xe0, 0xff, 0x74,
++0x47, 0x25, 0x57, 0xf8, 0xc6, 0xef, 0xc6, 0x90, 0x70, 0x11, 0xe0, 0xff, 0x74, 0x48, 0x25, 0x57,
++0xf8, 0xc6, 0xef, 0xc6, 0xe4, 0xfd, 0xaf, 0x56, 0x12, 0x0b, 0xaa, 0x90, 0x04, 0x14, 0x74, 0x80,
++0xf0, 0xe4, 0x90, 0x70, 0x13, 0xf0, 0xe5, 0x56, 0xf4, 0x70, 0x03, 0x02, 0x12, 0x1a, 0x02, 0x12,
++0x13, 0xe5, 0x47, 0x64, 0x07, 0x60, 0x05, 0xe5, 0x47, 0xb4, 0x08, 0x08, 0x90, 0x70, 0x11, 0xe0,
++0x54, 0x07, 0xf5, 0x3a, 0xe4, 0xfd, 0xaf, 0x56, 0x12, 0x0b, 0xaa, 0xd2, 0x04, 0x02, 0x12, 0x1a,
++0x90, 0x70, 0x10, 0xe0, 0xfe, 0x90, 0x70, 0x11, 0xe0, 0xfd, 0xed, 0xf8, 0xe6, 0xf5, 0x57, 0xfd,
++0xaf, 0x56, 0x12, 0x0b, 0xaa, 0x90, 0x04, 0x14, 0x74, 0x80, 0xf0, 0xe4, 0x90, 0x70, 0x13, 0xf0,
++0xe5, 0x56, 0xf4, 0x70, 0x03, 0x02, 0x12, 0x1a, 0x80, 0x79, 0x90, 0x70, 0x10, 0xe0, 0xfe, 0x90,
++0x70, 0x11, 0xe0, 0xfd, 0xed, 0xf5, 0x82, 0x8e, 0x83, 0xe0, 0xf5, 0x57, 0xfd, 0xaf, 0x56, 0x12,
++0x0b, 0xaa, 0x90, 0x04, 0x14, 0x74, 0x80, 0xf0, 0xe4, 0x90, 0x70, 0x13, 0xf0, 0xe5, 0x56, 0xf4,
++0x60, 0x58, 0x80, 0x4f, 0xe4, 0xf5, 0x4e, 0xf5, 0x4f, 0x75, 0x3a, 0xff, 0xad, 0x57, 0xaf, 0x56,
++0x12, 0x0b, 0xaa, 0x90, 0x04, 0x14, 0x74, 0x80, 0xf0, 0xe4, 0x90, 0x70, 0x13, 0xf0, 0xe5, 0x56,
++0xf4, 0x60, 0x07, 0x90, 0x70, 0x25, 0xe0, 0x44, 0x01, 0xf0, 0x90, 0x70, 0x40, 0xe5, 0x3a, 0xf0,
++0x80, 0x28, 0x90, 0x70, 0x10, 0xe0, 0x24, 0xff, 0x92, 0x4a, 0xd2, 0x05, 0xad, 0x57, 0xaf, 0x56,
++0x12, 0x0b, 0xaa, 0x90, 0x04, 0x14, 0x74, 0x80, 0xf0, 0xe4, 0x90, 0x70, 0x13, 0xf0, 0xe5, 0x56,
++0xf4, 0x60, 0x07, 0x90, 0x70, 0x25, 0xe0, 0x44, 0x01, 0xf0, 0x90, 0x70, 0x42, 0xe5, 0x3a, 0xf0,
++0xa3, 0x74, 0xab, 0xf0, 0x22, 0x22, 0xe5, 0x53, 0x70, 0x0e, 0xe5, 0x4f, 0x45, 0x4e, 0x60, 0x08,
++0xe5, 0x4f, 0x15, 0x4f, 0x70, 0x02, 0x15, 0x4e, 0x22, 0x22, 0xc2, 0x42, 0xd3, 0x22, 0x22, 0xc2,
++0x4b, 0xc2, 0x4c, 0xe5, 0x44, 0x12, 0x0a, 0xb6, 0x12, 0x61, 0x00, 0x12, 0xf4, 0x04, 0x12, 0xf0,
++0x08, 0x12, 0xcb, 0x10, 0x12, 0x75, 0x20, 0x12, 0x95, 0x60, 0x12, 0xa6, 0xa0, 0x00, 0x00, 0x12,
++0xf6, 0x85, 0x48, 0x43, 0x85, 0x4a, 0x42, 0x85, 0x4c, 0x5e, 0xe5, 0x47, 0x64, 0x06, 0x60, 0x03,
++0x02, 0x12, 0xf6, 0x80, 0x1b, 0xe5, 0x48, 0xc4, 0x54, 0x0f, 0xf5, 0x43, 0xe5, 0x4a, 0xc4, 0x54,
++0x0f, 0xf5, 0x42, 0xe5, 0x4c, 0xc4, 0x54, 0x0f, 0xf5, 0x5e, 0xe5, 0x47, 0x64, 0x06, 0x70, 0x66,
++0x53, 0x43, 0x0f, 0x80, 0x61, 0x85, 0x49, 0x43, 0x85, 0x4b, 0x42, 0x85, 0x4d, 0x5e, 0xe5, 0x47,
++0x64, 0x06, 0x70, 0x52, 0x80, 0x1b, 0xe5, 0x49, 0xc4, 0x54, 0x0f, 0xf5, 0x43, 0xe5, 0x4b, 0xc4,
++0x54, 0x0f, 0xf5, 0x42, 0xe5, 0x4d, 0xc4, 0x54, 0x0f, 0xf5, 0x5e, 0xe5, 0x47, 0x64, 0x06, 0x70,
++0x35, 0xe5, 0x43, 0x54, 0x0f, 0x44, 0x10, 0xf5, 0x43, 0x80, 0x2b, 0xe5, 0x47, 0xb4, 0x04, 0x06,
++0x53, 0x5e, 0xfb, 0x75, 0x42, 0x09, 0xe5, 0x47, 0xb4, 0x05, 0x06, 0x43, 0x5e, 0x04, 0x75, 0x42,
++0x09, 0xe5, 0x47, 0xb4, 0x06, 0x10, 0xe5, 0x43, 0x54, 0x0f, 0x44, 0x30, 0xf5, 0x43, 0x80, 0x06,
++0xd2, 0x4b, 0x80, 0x02, 0xd2, 0x4c, 0xe4, 0xf5, 0x25, 0xe5, 0x42, 0xc4, 0x54, 0xf0, 0xff, 0xe5,
++0x43, 0x54, 0x0f, 0x4f, 0xf5, 0x5f, 0x90, 0x70, 0x44, 0xf0, 0xa3, 0xe5, 0x5e, 0xf0, 0xa3, 0xe5,
++0x4a, 0xf0, 0xa3, 0xe5, 0x48, 0xf0, 0xa3, 0xe5, 0x4c, 0xf0, 0xa3, 0xe5, 0x44, 0xf0, 0xa3, 0xe5,
++0x42, 0xf0, 0xa3, 0xe5, 0x43, 0xf0, 0xd2, 0x60, 0x22, 0xe5, 0x47, 0x60, 0x10, 0x24, 0xc0, 0x70,
++0x03, 0x12, 0x15, 0x52, 0x12, 0x13, 0x3e, 0xc2, 0xaf, 0xc2, 0x04, 0xd2, 0xaf, 0x22, 0xc2, 0xaf,
++0x90, 0x04, 0x14, 0xe0, 0x54, 0x0e, 0x60, 0x04, 0xd2, 0x18, 0x80, 0x08, 0xe5, 0x4e, 0x45, 0x4f,
++0x24, 0xff, 0x92, 0x18, 0xd2, 0xaf, 0x90, 0x04, 0x14, 0xe0, 0xa2, 0xe4, 0x92, 0x19, 0x74, 0x1e,
++0xf0, 0xe5, 0x5f, 0x54, 0x0f, 0xf5, 0x2d, 0xe5, 0x25, 0x70, 0x13, 0x30, 0x18, 0x05, 0xe5, 0x5f,
++0x20, 0xe5, 0x0b, 0x30, 0x19, 0x19, 0xe5, 0x5f, 0x54, 0x30, 0xff, 0xbf, 0x30, 0x11, 0xe5, 0x25,
++0x70, 0x05, 0x75, 0x25, 0x0c, 0x80, 0x02, 0x15, 0x25, 0xd2, 0x6c, 0xd2, 0x6d, 0x80, 0x0f, 0xe5,
++0x5f, 0x30, 0xe6, 0x06, 0xc2, 0x6c, 0xd2, 0x6d, 0x80, 0x04, 0xd2, 0x6c, 0xc2, 0x6d, 0xe5, 0x47,
++0x64, 0x03, 0x70, 0x21, 0x30, 0x4b, 0x06, 0xc2, 0x6c, 0xd2, 0x6d, 0x80, 0x18, 0xe5, 0x25, 0x70,
++0x03, 0x30, 0x4c, 0x11, 0xc2, 0x4c, 0xe5, 0x25, 0x70, 0x05, 0x75, 0x25, 0x07, 0x80, 0x02, 0x15,
++0x25, 0xd2, 0x6c, 0xd2, 0x6d, 0x90, 0x70, 0x46, 0xe5, 0x2d, 0xf0, 0x20, 0x69, 0x07, 0xe5, 0x5e,
++0x20, 0xe0, 0x02, 0xb2, 0x68, 0x20, 0x6b, 0x07, 0xe5, 0x5e, 0x20, 0xe1, 0x02, 0xb2, 0x6a, 0x20,
++0x6d, 0x07, 0xe5, 0x5e, 0x20, 0xe2, 0x02, 0xb2, 0x6c, 0x90, 0x70, 0x47, 0xe5, 0x2d, 0xf0, 0x75,
++0x2e, 0x40, 0x20, 0x69, 0x04, 0xa2, 0x68, 0x80, 0x15, 0x30, 0x68, 0x06, 0xe5, 0x46, 0xa2, 0xe3,
++0x80, 0x0c, 0xe5, 0x46, 0x54, 0xf0, 0xff, 0xbf, 0xf0, 0x03, 0xd3, 0x80, 0x01, 0xc3, 0x92, 0x73,
++0x92, 0x72, 0x20, 0x6b, 0x04, 0xa2, 0x6a, 0x80, 0x15, 0x30, 0x6a, 0x06, 0xe5, 0x46, 0xa2, 0xe3,
++0x80, 0x0c, 0xe5, 0x46, 0x54, 0xf0, 0xff, 0xbf, 0xf0, 0x03, 0xd3, 0x80, 0x01, 0xc3, 0x92, 0x75,
++0x92, 0x74, 0x20, 0x6d, 0x04, 0xa2, 0x6c, 0x80, 0x15, 0x30, 0x6c, 0x06, 0xe5, 0x46, 0xa2, 0xe3,
++0x80, 0x0c, 0xe5, 0x46, 0x54, 0xf0, 0xff, 0xbf, 0xf0, 0x03, 0xd3, 0x80, 0x01, 0xc3, 0x92, 0x71,
++0x92, 0x70, 0x90, 0x10, 0x2f, 0xe5, 0x2e, 0xf0, 0xe5, 0x47, 0x64, 0x06, 0x70, 0x4c, 0x90, 0x02,
++0x29, 0xe0, 0x54, 0xfe, 0xf0, 0xe5, 0x43, 0xc4, 0x54, 0x0f, 0x14, 0x60, 0x14, 0x24, 0xfe, 0x60,
++0x23, 0x24, 0x03, 0x60, 0x03, 0x02, 0x15, 0x41, 0x90, 0x02, 0x28, 0xe0, 0x30, 0x47, 0x0f, 0x80,
++0x07, 0x90, 0x02, 0x28, 0xe0, 0x20, 0x47, 0x06, 0x54, 0xfe, 0xf0, 0x02, 0x15, 0x41, 0x44, 0x01,
++0xf0, 0x02, 0x15, 0x41, 0xe5, 0x46, 0x30, 0xe3, 0x04, 0x7f, 0x01, 0x80, 0x02, 0x7f, 0x00, 0x90,
++0x02, 0x28, 0xe0, 0x54, 0xfe, 0x4f, 0xf0, 0x02, 0x15, 0x41, 0xe5, 0x47, 0x64, 0x07, 0x60, 0x09,
++0xe5, 0x47, 0x64, 0x08, 0x60, 0x03, 0x02, 0x15, 0x41, 0xe4, 0xf5, 0x27, 0x90, 0x02, 0x29, 0xe0,
++0x54, 0xfc, 0xf0, 0xe5, 0x3a, 0x14, 0x60, 0x26, 0x14, 0x60, 0x2e, 0x14, 0x60, 0x36, 0x24, 0x03,
++0x70, 0x5f, 0xe5, 0x46, 0x13, 0x13, 0x13, 0x54, 0x1f, 0x75, 0xf0, 0x03, 0x84, 0xaf, 0xf0, 0x20,
++0x47, 0x04, 0x7e, 0x01, 0x80, 0x02, 0x7e, 0x00, 0xef, 0x6e, 0x24, 0xff, 0x80, 0x02, 0xa2, 0x47,
++0x92, 0x39, 0xa2, 0x47, 0xb3, 0x92, 0x38, 0x80, 0x3f, 0xe5, 0x46, 0x30, 0xe3, 0x03, 0xd3, 0x80,
++0x27, 0xc3, 0x80, 0x24, 0xe5, 0x46, 0x30, 0xe3, 0x0d, 0x54, 0x70, 0xc3, 0x94, 0x60, 0x50, 0x06,
++0x7e, 0x00, 0x7f, 0x01, 0x80, 0x04, 0x7e, 0x00, 0x7f, 0x00, 0x20, 0x47, 0x04, 0x7d, 0x01, 0x80,
++0x02, 0x7d, 0x00, 0xef, 0x6d, 0x4e, 0x24, 0xff, 0x92, 0x38, 0xa2, 0x47, 0xb3, 0x92, 0x39, 0x80,
++0x07, 0xa2, 0x47, 0xb3, 0x92, 0x38, 0x92, 0x39, 0x90, 0x02, 0x28, 0xe0, 0x54, 0xfc, 0x45, 0x27,
++0xf0, 0x90, 0x70, 0x9c, 0xe5, 0x3a, 0xf0, 0xa3, 0xe5, 0x47, 0xf0, 0x90, 0x70, 0x41, 0xe5, 0x3a,
++0xf0, 0x22, 0xe4, 0x90, 0x02, 0x29, 0xf0, 0x30, 0x47, 0x04, 0xaf, 0x45, 0x80, 0x04, 0xe5, 0x45,
++0xf4, 0xff, 0x90, 0x02, 0x28, 0xef, 0xf0, 0x22, 0x8f, 0x50, 0xd2, 0x59, 0x22, 0x8f, 0x54, 0xd2,
++0x58, 0x22, 0xe4, 0xf5, 0x62, 0xc2, 0xaf, 0xe5, 0x51, 0x14, 0x60, 0x46, 0x14, 0x60, 0x62, 0x24,
++0x02, 0x60, 0x03, 0x02, 0x16, 0x2c, 0xd2, 0x59, 0x75, 0x55, 0x01, 0x90, 0x02, 0xa2, 0xe0, 0x54,
++0x7f, 0xf0, 0xa3, 0xe0, 0x20, 0xe7, 0x22, 0x90, 0x04, 0x34, 0xe0, 0xb4, 0x02, 0x1b, 0xa3, 0xe0,
++0xb4, 0x02, 0x16, 0xa3, 0xe0, 0xb4, 0x02, 0x11, 0x7f, 0x20, 0x12, 0x15, 0x68, 0x90, 0x10, 0x04,
++0xe0, 0x54, 0xf3, 0xf0, 0x75, 0x51, 0x01, 0x80, 0x73, 0xe5, 0x50, 0x70, 0x05, 0x75, 0x62, 0x03,
++0x80, 0x6a, 0x90, 0x12, 0x00, 0xe0, 0x54, 0x03, 0x70, 0x11, 0x7f, 0x20, 0x12, 0x15, 0x68, 0x90,
++0x02, 0xa2, 0xe0, 0x54, 0xbf, 0xf0, 0x75, 0x51, 0x02, 0x80, 0x51, 0xe5, 0x50, 0x70, 0x02, 0x80,
++0x46, 0x90, 0x02, 0xa3, 0xe0, 0x20, 0xe6, 0x3b, 0x90, 0x04, 0x37, 0xe0, 0x64, 0x22, 0x70, 0x33,
++0x90, 0x01, 0x8a, 0x74, 0x7e, 0xf0, 0x90, 0x01, 0x96, 0xf0, 0x90, 0x12, 0x04, 0x74, 0x0a, 0xf0,
++0x90, 0x13, 0x28, 0xe0, 0x54, 0xf0, 0xf0, 0xa3, 0xe0, 0x54, 0xf0, 0xf0, 0xa3, 0xe0, 0x54, 0xfa,
++0xf0, 0x90, 0x04, 0x01, 0xe0, 0x54, 0xf9, 0xf0, 0x75, 0x62, 0x01, 0x75, 0x55, 0x02, 0xe4, 0xf5,
++0x51, 0x80, 0x09, 0xe5, 0x50, 0x70, 0x05, 0x75, 0x62, 0x03, 0xf5, 0x51, 0xe5, 0x62, 0x60, 0x15,
++0xc2, 0x01, 0xe4, 0xf5, 0x51, 0xc2, 0x59, 0xad, 0x62, 0xaf, 0x40, 0x12, 0x16, 0xb6, 0xe5, 0x62,
++0xb4, 0x03, 0x02, 0xd2, 0x03, 0xd2, 0xaf, 0x22, 0xc2, 0xaf, 0x30, 0x01, 0x12, 0xe4, 0x90, 0x01,
++0x96, 0xf0, 0xf5, 0x51, 0xc2, 0x59, 0xc2, 0x01, 0x7d, 0x02, 0xaf, 0x40, 0x12, 0x16, 0xb6, 0xe5,
++0x52, 0x14, 0x60, 0x09, 0x04, 0x70, 0x4c, 0x75, 0x52, 0x01, 0x75, 0x55, 0x03, 0x90, 0x04, 0x01,
++0xe0, 0x44, 0x0e, 0xf0, 0x90, 0x13, 0x28, 0xe0, 0x44, 0x0f, 0xf0, 0xa3, 0xe0, 0x44, 0x0f, 0xf0,
++0xa3, 0xe0, 0x44, 0x05, 0xf0, 0x90, 0x12, 0x04, 0x74, 0x03, 0xf0, 0x90, 0x02, 0xa2, 0xe0, 0x44,
++0xc0, 0xf0, 0x90, 0x10, 0x04, 0xe0, 0x44, 0x0c, 0xf0, 0xe4, 0xf5, 0x52, 0xf5, 0x55, 0x30, 0x02,
++0x0b, 0xc2, 0x02, 0x7d, 0x01, 0xaf, 0x41, 0x12, 0x16, 0xb6, 0x80, 0x02, 0xc2, 0x03, 0xe4, 0x90,
++0x01, 0x96, 0xf0, 0xd2, 0xaf, 0x22, 0xef, 0xf4, 0x60, 0x2d, 0xe4, 0xfe, 0x74, 0x14, 0x2e, 0xf5,
++0x82, 0xe4, 0x34, 0x70, 0xf5, 0x83, 0xe0, 0xb4, 0xff, 0x19, 0x74, 0x14, 0x2e, 0xf5, 0x82, 0xe4,
++0x34, 0x70, 0xf5, 0x83, 0xef, 0xf0, 0x74, 0x1c, 0x2e, 0xf5, 0x82, 0xe4, 0x34, 0x70, 0xf5, 0x83,
++0xed, 0xf0, 0x22, 0x0e, 0xbe, 0x04, 0xd5, 0x22, 0x22, 0x22, 0x90, 0x70, 0x2a, 0xe0, 0x30, 0xe1,
++0x4d, 0xc2, 0xaf, 0x90, 0x70, 0x28, 0xe0, 0x90, 0x10, 0x1c, 0xf0, 0x90, 0x70, 0x29, 0xe0, 0x90,
++0x10, 0x1d, 0xf0, 0x90, 0x70, 0x2a, 0xe0, 0x90, 0x10, 0x1e, 0xf0, 0x90, 0x10, 0x1c, 0xe0, 0xf5,
++0x62, 0x90, 0x10, 0x1e, 0xe0, 0x20, 0xe1, 0xf3, 0x90, 0x10, 0x1c, 0xe0, 0x90, 0x70, 0x28, 0xf0,
++0x90, 0x10, 0x1d, 0xe0, 0x90, 0x70, 0x29, 0xf0, 0x90, 0x10, 0x1e, 0xe0, 0x90, 0x70, 0x2a, 0xf0,
++0x30, 0x4a, 0x07, 0x90, 0x70, 0x24, 0xe0, 0x44, 0x01, 0xf0, 0xc2, 0x05, 0xd2, 0xaf, 0x22, 0x22,
++0x22, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
++0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
++0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
++0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
++0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
++0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
++0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
++0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
++0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
++0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
++0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
++0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
++0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
++0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
++0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
++0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
++0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
++0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
++0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
++0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
++0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
++0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
++0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
++0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
++0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
++0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
++0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
++0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
++0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
++0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
++0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
++0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
++0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
++0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
++0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
++0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
++0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
++0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
++0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
++0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
++0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
++0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
++0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
++0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
++0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
++0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
++0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
++0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
++0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
++0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
++0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
++0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
++0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
++0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
++0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
++0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
++0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
++0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
++0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
++0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
++0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
++0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
++0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
++0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
++0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
++0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
++0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
++0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
++0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
++0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
++0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
++0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
++0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
++0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
++0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
++0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
++0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
++0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
++0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
++0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
++0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
++0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
++0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
++0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
++0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
++0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
++0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
++0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
++0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
++0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
++0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
++0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
++0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
++0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
++0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
++0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
++0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
++0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
++0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
++0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
++0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
++0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
++0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
++0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
++0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
++0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
++0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
++0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
++0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
++0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
++0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
++0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
++0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
++0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
++0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
++0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
++0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
++0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
++0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
++0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
++0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
++0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
++0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
++0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
++0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
++0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
++0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
++0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
++0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
++0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
++0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
++0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
++0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
++0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
++0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
++0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
++0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
++0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
++0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00,
++0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x01, 0xe9, 0x00, } ;
+--- /dev/null
++++ b/drivers/staging/rt2870/common/md5.c
+@@ -0,0 +1,1427 @@
++/*
++ *************************************************************************
++ * Ralink Tech Inc.
++ * 5F., No.36, Taiyuan St., Jhubei City,
++ * Hsinchu County 302,
++ * Taiwan, R.O.C.
++ *
++ * (c) Copyright 2002-2007, Ralink Technology, Inc.
++ *
++ * This program is free software; you can redistribute it and/or modify *
++ * it under the terms of the GNU General Public License as published by *
++ * the Free Software Foundation; either version 2 of the License, or *
++ * (at your option) any later version. *
++ * *
++ * This program is distributed in the hope that it will be useful, *
++ * but WITHOUT ANY WARRANTY; without even the implied warranty of *
++ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the *
++ * GNU General Public License for more details. *
++ * *
++ * You should have received a copy of the GNU General Public License *
++ * along with this program; if not, write to the *
++ * Free Software Foundation, Inc., *
++ * 59 Temple Place - Suite 330, Boston, MA 02111-1307, USA. *
++ * *
++ *************************************************************************
++
++ Module Name:
++ md5.c
++
++ Abstract:
++
++ Revision History:
++ Who When What
++ -------- ---------- ----------------------------------------------
++ Name Date Modification logs
++ jan 10-28-03 Initial
++ Rita 11-23-04 Modify MD5 and SHA-1
++ Rita 10-14-05 Modify SHA-1 in big-endian platform
++ */
++#include "../rt_config.h"
++
++/**
++ * md5_mac:
++ * @key: pointer to the key used for MAC generation
++ * @key_len: length of the key in bytes
++ * @data: pointer to the data area for which the MAC is generated
++ * @data_len: length of the data in bytes
++ * @mac: pointer to the buffer holding space for the MAC; the buffer should
++ * have space for 128-bit (16 bytes) MD5 hash value
++ *
++ * md5_mac() determines the message authentication code by using secure hash
++ * MD5(key | data | key).
++ */
++void md5_mac(u8 *key, size_t key_len, u8 *data, size_t data_len, u8 *mac)
++{
++ MD5_CTX context;
++
++ MD5Init(&context);
++ MD5Update(&context, key, key_len);
++ MD5Update(&context, data, data_len);
++ MD5Update(&context, key, key_len);
++ MD5Final(mac, &context);
++}
++
++/**
++ * hmac_md5:
++ * @key: pointer to the key used for MAC generation
++ * @key_len: length of the key in bytes
++ * @data: pointer to the data area for which the MAC is generated
++ * @data_len: length of the data in bytes
++ * @mac: pointer to the buffer holding space for the MAC; the buffer should
++ * have space for 128-bit (16 bytes) MD5 hash value
++ *
++ * hmac_md5() determines the message authentication code using HMAC-MD5.
++ * This implementation is based on the sample code presented in RFC 2104.
++ */
++void hmac_md5(u8 *key, size_t key_len, u8 *data, size_t data_len, u8 *mac)
++{
++ MD5_CTX context;
++ u8 k_ipad[65]; /* inner padding - key XORd with ipad */
++ u8 k_opad[65]; /* outer padding - key XORd with opad */
++ u8 tk[16];
++ int i;
++
++ //assert(key != NULL && data != NULL && mac != NULL);
++
++ /* if key is longer than 64 bytes reset it to key = MD5(key) */
++ if (key_len > 64) {
++ MD5_CTX ttcontext;
++
++ MD5Init(&ttcontext);
++ MD5Update(&ttcontext, key, key_len);
++ MD5Final(tk, &ttcontext);
++ //key=(PUCHAR)ttcontext.buf;
++ key = tk;
++ key_len = 16;
++ }
++
++ /* the HMAC_MD5 transform looks like:
++ *
++ * MD5(K XOR opad, MD5(K XOR ipad, text))
++ *
++ * where K is an n byte key
++ * ipad is the byte 0x36 repeated 64 times
++ * opad is the byte 0x5c repeated 64 times
++ * and text is the data being protected */
++
++ /* start out by storing key in pads */
++ NdisZeroMemory(k_ipad, sizeof(k_ipad));
++ NdisZeroMemory(k_opad, sizeof(k_opad));
++ //assert(key_len < sizeof(k_ipad));
++ NdisMoveMemory(k_ipad, key, key_len);
++ NdisMoveMemory(k_opad, key, key_len);
++
++ /* XOR key with ipad and opad values */
++ for (i = 0; i < 64; i++) {
++ k_ipad[i] ^= 0x36;
++ k_opad[i] ^= 0x5c;
++ }
++
++ /* perform inner MD5 */
++ MD5Init(&context); /* init context for 1st pass */
++ MD5Update(&context, k_ipad, 64); /* start with inner pad */
++ MD5Update(&context, data, data_len); /* then text of datagram */
++ MD5Final(mac, &context); /* finish up 1st pass */
++
++ /* perform outer MD5 */
++ MD5Init(&context); /* init context for 2nd pass */
++ MD5Update(&context, k_opad, 64); /* start with outer pad */
++ MD5Update(&context, mac, 16); /* then results of 1st hash */
++ MD5Final(mac, &context); /* finish up 2nd pass */
++}
++
++#ifndef RT_BIG_ENDIAN
++#define byteReverse(buf, len) /* Nothing */
++#else
++void byteReverse(unsigned char *buf, unsigned longs);
++void byteReverse(unsigned char *buf, unsigned longs)
++{
++ do {
++ *(UINT32 *)buf = SWAP32(*(UINT32 *)buf);
++ buf += 4;
++ } while (--longs);
++}
++#endif
++
++
++/* ========================== MD5 implementation =========================== */
++// four base functions for MD5
++#define MD5_F1(x, y, z) (((x) & (y)) | ((~x) & (z)))
++#define MD5_F2(x, y, z) (((x) & (z)) | ((y) & (~z)))
++#define MD5_F3(x, y, z) ((x) ^ (y) ^ (z))
++#define MD5_F4(x, y, z) ((y) ^ ((x) | (~z)))
++#define CYCLIC_LEFT_SHIFT(w, s) (((w) << (s)) | ((w) >> (32-(s))))
++
++#define MD5Step(f, w, x, y, z, data, t, s) \
++ ( w += f(x, y, z) + data + t, w = (CYCLIC_LEFT_SHIFT(w, s)) & 0xffffffff, w += x )
++
++
++/*
++ * Function Description:
++ * Initiate MD5 Context satisfied in RFC 1321
++ *
++ * Arguments:
++ * pCtx Pointer to MD5 context
++ *
++ * Return Value:
++ * None
++ */
++VOID MD5Init(MD5_CTX *pCtx)
++{
++ pCtx->Buf[0]=0x67452301;
++ pCtx->Buf[1]=0xefcdab89;
++ pCtx->Buf[2]=0x98badcfe;
++ pCtx->Buf[3]=0x10325476;
++
++ pCtx->LenInBitCount[0]=0;
++ pCtx->LenInBitCount[1]=0;
++}
++
++
++/*
++ * Function Description:
++ * Update MD5 Context, allow of an arrary of octets as the next portion
++ * of the message
++ *
++ * Arguments:
++ * pCtx Pointer to MD5 context
++ * pData Pointer to input data
++ * LenInBytes The length of input data (unit: byte)
++ *
++ * Return Value:
++ * None
++ *
++ * Note:
++ * Called after MD5Init or MD5Update(itself)
++ */
++VOID MD5Update(MD5_CTX *pCtx, UCHAR *pData, UINT32 LenInBytes)
++{
++
++ UINT32 TfTimes;
++ UINT32 temp;
++ unsigned int i;
++
++ temp = pCtx->LenInBitCount[0];
++
++ pCtx->LenInBitCount[0] = (UINT32) (pCtx->LenInBitCount[0] + (LenInBytes << 3));
++
++ if (pCtx->LenInBitCount[0] < temp)
++ pCtx->LenInBitCount[1]++; //carry in
++
++ pCtx->LenInBitCount[1] += LenInBytes >> 29;
++
++ // mod 64 bytes
++ temp = (temp >> 3) & 0x3f;
++
++ // process lacks of 64-byte data
++ if (temp)
++ {
++ UCHAR *pAds = (UCHAR *) pCtx->Input + temp;
++
++ if ((temp+LenInBytes) < 64)
++ {
++ NdisMoveMemory(pAds, (UCHAR *)pData, LenInBytes);
++ return;
++ }
++
++ NdisMoveMemory(pAds, (UCHAR *)pData, 64-temp);
++ byteReverse(pCtx->Input, 16);
++ MD5Transform(pCtx->Buf, (UINT32 *)pCtx->Input);
++
++ pData += 64-temp;
++ LenInBytes -= 64-temp;
++ } // end of if (temp)
++
++
++ TfTimes = (LenInBytes >> 6);
++
++ for (i=TfTimes; i>0; i--)
++ {
++ NdisMoveMemory(pCtx->Input, (UCHAR *)pData, 64);
++ byteReverse(pCtx->Input, 16);
++ MD5Transform(pCtx->Buf, (UINT32 *)pCtx->Input);
++ pData += 64;
++ LenInBytes -= 64;
++ } // end of for
++
++ // buffering lacks of 64-byte data
++ if(LenInBytes)
++ NdisMoveMemory(pCtx->Input, (UCHAR *)pData, LenInBytes);
++
++}
++
++
++/*
++ * Function Description:
++ * Append padding bits and length of original message in the tail
++ * The message digest has to be completed in the end
++ *
++ * Arguments:
++ * Digest Output of Digest-Message for MD5
++ * pCtx Pointer to MD5 context
++ *
++ * Return Value:
++ * None
++ *
++ * Note:
++ * Called after MD5Update
++ */
++VOID MD5Final(UCHAR Digest[16], MD5_CTX *pCtx)
++{
++ UCHAR Remainder;
++ UCHAR PadLenInBytes;
++ UCHAR *pAppend=0;
++ unsigned int i;
++
++ Remainder = (UCHAR)((pCtx->LenInBitCount[0] >> 3) & 0x3f);
++
++ PadLenInBytes = (Remainder < 56) ? (56-Remainder) : (120-Remainder);
++
++ pAppend = (UCHAR *)pCtx->Input + Remainder;
++
++ // padding bits without crossing block(64-byte based) boundary
++ if (Remainder < 56)
++ {
++ *pAppend = 0x80;
++ PadLenInBytes --;
++
++ NdisZeroMemory((UCHAR *)pCtx->Input + Remainder+1, PadLenInBytes);
++
++ // add data-length field, from low to high
++ for (i=0; i<4; i++)
++ {
++ pCtx->Input[56+i] = (UCHAR)((pCtx->LenInBitCount[0] >> (i << 3)) & 0xff);
++ pCtx->Input[60+i] = (UCHAR)((pCtx->LenInBitCount[1] >> (i << 3)) & 0xff);
++ }
++
++ byteReverse(pCtx->Input, 16);
++ MD5Transform(pCtx->Buf, (UINT32 *)pCtx->Input);
++ } // end of if
++
++ // padding bits with crossing block(64-byte based) boundary
++ else
++ {
++ // the first block ===
++ *pAppend = 0x80;
++ PadLenInBytes --;
++
++ NdisZeroMemory((UCHAR *)pCtx->Input + Remainder+1, (64-Remainder-1));
++ PadLenInBytes -= (64 - Remainder - 1);
++
++ byteReverse(pCtx->Input, 16);
++ MD5Transform(pCtx->Buf, (UINT32 *)pCtx->Input);
++
++
++ // the second block ===
++ NdisZeroMemory((UCHAR *)pCtx->Input, PadLenInBytes);
++
++ // add data-length field
++ for (i=0; i<4; i++)
++ {
++ pCtx->Input[56+i] = (UCHAR)((pCtx->LenInBitCount[0] >> (i << 3)) & 0xff);
++ pCtx->Input[60+i] = (UCHAR)((pCtx->LenInBitCount[1] >> (i << 3)) & 0xff);
++ }
++
++ byteReverse(pCtx->Input, 16);
++ MD5Transform(pCtx->Buf, (UINT32 *)pCtx->Input);
++ } // end of else
++
++
++ NdisMoveMemory((UCHAR *)Digest, (UINT32 *)pCtx->Buf, 16); // output
++ byteReverse((UCHAR *)Digest, 4);
++ NdisZeroMemory(pCtx, sizeof(pCtx)); // memory free
++}
++
++
++/*
++ * Function Description:
++ * The central algorithm of MD5, consists of four rounds and sixteen
++ * steps per round
++ *
++ * Arguments:
++ * Buf Buffers of four states (output: 16 bytes)
++ * Mes Input data (input: 64 bytes)
++ *
++ * Return Value:
++ * None
++ *
++ * Note:
++ * Called by MD5Update or MD5Final
++ */
++VOID MD5Transform(UINT32 Buf[4], UINT32 Mes[16])
++{
++ UINT32 Reg[4], Temp;
++ unsigned int i;
++
++ static UCHAR LShiftVal[16] =
++ {
++ 7, 12, 17, 22,
++ 5, 9 , 14, 20,
++ 4, 11, 16, 23,
++ 6, 10, 15, 21,
++ };
++
++
++ // [equal to 4294967296*abs(sin(index))]
++ static UINT32 MD5Table[64] =
++ {
++ 0xd76aa478, 0xe8c7b756, 0x242070db, 0xc1bdceee,
++ 0xf57c0faf, 0x4787c62a, 0xa8304613, 0xfd469501,
++ 0x698098d8, 0x8b44f7af, 0xffff5bb1, 0x895cd7be,
++ 0x6b901122, 0xfd987193, 0xa679438e, 0x49b40821,
++
++ 0xf61e2562, 0xc040b340, 0x265e5a51, 0xe9b6c7aa,
++ 0xd62f105d, 0x02441453, 0xd8a1e681, 0xe7d3fbc8,
++ 0x21e1cde6, 0xc33707d6, 0xf4d50d87, 0x455a14ed,
++ 0xa9e3e905, 0xfcefa3f8, 0x676f02d9, 0x8d2a4c8a,
++
++ 0xfffa3942, 0x8771f681, 0x6d9d6122, 0xfde5380c,
++ 0xa4beea44, 0x4bdecfa9, 0xf6bb4b60, 0xbebfbc70,
++ 0x289b7ec6, 0xeaa127fa, 0xd4ef3085, 0x04881d05,
++ 0xd9d4d039, 0xe6db99e5, 0x1fa27cf8, 0xc4ac5665,
++
++ 0xf4292244, 0x432aff97, 0xab9423a7, 0xfc93a039,
++ 0x655b59c3, 0x8f0ccc92, 0xffeff47d, 0x85845dd1,
++ 0x6fa87e4f, 0xfe2ce6e0, 0xa3014314, 0x4e0811a1,
++ 0xf7537e82, 0xbd3af235, 0x2ad7d2bb, 0xeb86d391
++ };
++
++
++ for (i=0; i<4; i++)
++ Reg[i]=Buf[i];
++
++
++ // 64 steps in MD5 algorithm
++ for (i=0; i<16; i++)
++ {
++ MD5Step(MD5_F1, Reg[0], Reg[1], Reg[2], Reg[3], Mes[i],
++ MD5Table[i], LShiftVal[i & 0x3]);
++
++ // one-word right shift
++ Temp = Reg[3];
++ Reg[3] = Reg[2];
++ Reg[2] = Reg[1];
++ Reg[1] = Reg[0];
++ Reg[0] = Temp;
++ }
++ for (i=16; i<32; i++)
++ {
++ MD5Step(MD5_F2, Reg[0], Reg[1], Reg[2], Reg[3], Mes[(5*(i & 0xf)+1) & 0xf],
++ MD5Table[i], LShiftVal[(0x1 << 2)+(i & 0x3)]);
++
++ // one-word right shift
++ Temp = Reg[3];
++ Reg[3] = Reg[2];
++ Reg[2] = Reg[1];
++ Reg[1] = Reg[0];
++ Reg[0] = Temp;
++ }
++ for (i=32; i<48; i++)
++ {
++ MD5Step(MD5_F3, Reg[0], Reg[1], Reg[2], Reg[3], Mes[(3*(i & 0xf)+5) & 0xf],
++ MD5Table[i], LShiftVal[(0x1 << 3)+(i & 0x3)]);
++
++ // one-word right shift
++ Temp = Reg[3];
++ Reg[3] = Reg[2];
++ Reg[2] = Reg[1];
++ Reg[1] = Reg[0];
++ Reg[0] = Temp;
++ }
++ for (i=48; i<64; i++)
++ {
++ MD5Step(MD5_F4, Reg[0], Reg[1], Reg[2], Reg[3], Mes[(7*(i & 0xf)) & 0xf],
++ MD5Table[i], LShiftVal[(0x3 << 2)+(i & 0x3)]);
++
++ // one-word right shift
++ Temp = Reg[3];
++ Reg[3] = Reg[2];
++ Reg[2] = Reg[1];
++ Reg[1] = Reg[0];
++ Reg[0] = Temp;
++ }
++
++
++ // (temporary)output
++ for (i=0; i<4; i++)
++ Buf[i] += Reg[i];
++
++}
++
++
++
++/* ========================= SHA-1 implementation ========================== */
++// four base functions for SHA-1
++#define SHA1_F1(b, c, d) (((b) & (c)) | ((~b) & (d)))
++#define SHA1_F2(b, c, d) ((b) ^ (c) ^ (d))
++#define SHA1_F3(b, c, d) (((b) & (c)) | ((b) & (d)) | ((c) & (d)))
++
++
++#define SHA1Step(f, a, b, c, d, e, w, k) \
++ ( e += ( f(b, c, d) + w + k + CYCLIC_LEFT_SHIFT(a, 5)) & 0xffffffff, \
++ b = CYCLIC_LEFT_SHIFT(b, 30) )
++
++//Initiate SHA-1 Context satisfied in RFC 3174
++VOID SHAInit(SHA_CTX *pCtx)
++{
++ pCtx->Buf[0]=0x67452301;
++ pCtx->Buf[1]=0xefcdab89;
++ pCtx->Buf[2]=0x98badcfe;
++ pCtx->Buf[3]=0x10325476;
++ pCtx->Buf[4]=0xc3d2e1f0;
++
++ pCtx->LenInBitCount[0]=0;
++ pCtx->LenInBitCount[1]=0;
++}
++
++/*
++ * Function Description:
++ * Update SHA-1 Context, allow of an arrary of octets as the next
++ * portion of the message
++ *
++ * Arguments:
++ * pCtx Pointer to SHA-1 context
++ * pData Pointer to input data
++ * LenInBytes The length of input data (unit: byte)
++ *
++ * Return Value:
++ * error indicate more than pow(2,64) bits of data
++ *
++ * Note:
++ * Called after SHAInit or SHAUpdate(itself)
++ */
++UCHAR SHAUpdate(SHA_CTX *pCtx, UCHAR *pData, UINT32 LenInBytes)
++{
++ UINT32 TfTimes;
++ UINT32 temp1,temp2;
++ unsigned int i;
++ UCHAR err=1;
++
++ temp1 = pCtx->LenInBitCount[0];
++ temp2 = pCtx->LenInBitCount[1];
++
++ pCtx->LenInBitCount[0] = (UINT32) (pCtx->LenInBitCount[0] + (LenInBytes << 3));
++ if (pCtx->LenInBitCount[0] < temp1)
++ pCtx->LenInBitCount[1]++; //carry in
++
++
++ pCtx->LenInBitCount[1] = (UINT32) (pCtx->LenInBitCount[1] +(LenInBytes >> 29));
++ if (pCtx->LenInBitCount[1] < temp2)
++ return (err); //check total length of original data
++
++
++ // mod 64 bytes
++ temp1 = (temp1 >> 3) & 0x3f;
++
++ // process lacks of 64-byte data
++ if (temp1)
++ {
++ UCHAR *pAds = (UCHAR *) pCtx->Input + temp1;
++
++ if ((temp1+LenInBytes) < 64)
++ {
++ NdisMoveMemory(pAds, (UCHAR *)pData, LenInBytes);
++ return (0);
++ }
++
++ NdisMoveMemory(pAds, (UCHAR *)pData, 64-temp1);
++ byteReverse((UCHAR *)pCtx->Input, 16);
++
++ NdisZeroMemory((UCHAR *)pCtx->Input + 64, 16);
++ SHATransform(pCtx->Buf, (UINT32 *)pCtx->Input);
++
++ pData += 64-temp1;
++ LenInBytes -= 64-temp1;
++ } // end of if (temp1)
++
++
++ TfTimes = (LenInBytes >> 6);
++
++ for (i=TfTimes; i>0; i--)
++ {
++ NdisMoveMemory(pCtx->Input, (UCHAR *)pData, 64);
++ byteReverse((UCHAR *)pCtx->Input, 16);
++
++ NdisZeroMemory((UCHAR *)pCtx->Input + 64, 16);
++ SHATransform(pCtx->Buf, (UINT32 *)pCtx->Input);
++ pData += 64;
++ LenInBytes -= 64;
++ } // end of for
++
++ // buffering lacks of 64-byte data
++ if(LenInBytes)
++ NdisMoveMemory(pCtx->Input, (UCHAR *)pData, LenInBytes);
++
++ return (0);
++
++}
++
++// Append padding bits and length of original message in the tail
++// The message digest has to be completed in the end
++VOID SHAFinal(SHA_CTX *pCtx, UCHAR Digest[20])
++{
++ UCHAR Remainder;
++ UCHAR PadLenInBytes;
++ UCHAR *pAppend=0;
++ unsigned int i;
++
++ Remainder = (UCHAR)((pCtx->LenInBitCount[0] >> 3) & 0x3f);
++
++ pAppend = (UCHAR *)pCtx->Input + Remainder;
++
++ PadLenInBytes = (Remainder < 56) ? (56-Remainder) : (120-Remainder);
++
++ // padding bits without crossing block(64-byte based) boundary
++ if (Remainder < 56)
++ {
++ *pAppend = 0x80;
++ PadLenInBytes --;
++
++ NdisZeroMemory((UCHAR *)pCtx->Input + Remainder+1, PadLenInBytes);
++
++ // add data-length field, from high to low
++ for (i=0; i<4; i++)
++ {
++ pCtx->Input[56+i] = (UCHAR)((pCtx->LenInBitCount[1] >> ((3-i) << 3)) & 0xff);
++ pCtx->Input[60+i] = (UCHAR)((pCtx->LenInBitCount[0] >> ((3-i) << 3)) & 0xff);
++ }
++
++ byteReverse((UCHAR *)pCtx->Input, 16);
++ NdisZeroMemory((UCHAR *)pCtx->Input + 64, 14);
++ SHATransform(pCtx->Buf, (UINT32 *)pCtx->Input);
++ } // end of if
++
++ // padding bits with crossing block(64-byte based) boundary
++ else
++ {
++ // the first block ===
++ *pAppend = 0x80;
++ PadLenInBytes --;
++
++ NdisZeroMemory((UCHAR *)pCtx->Input + Remainder+1, (64-Remainder-1));
++ PadLenInBytes -= (64 - Remainder - 1);
++
++ byteReverse((UCHAR *)pCtx->Input, 16);
++ NdisZeroMemory((UCHAR *)pCtx->Input + 64, 16);
++ SHATransform(pCtx->Buf, (UINT32 *)pCtx->Input);
++
++
++ // the second block ===
++ NdisZeroMemory((UCHAR *)pCtx->Input, PadLenInBytes);
++
++ // add data-length field
++ for (i=0; i<4; i++)
++ {
++ pCtx->Input[56+i] = (UCHAR)((pCtx->LenInBitCount[1] >> ((3-i) << 3)) & 0xff);
++ pCtx->Input[60+i] = (UCHAR)((pCtx->LenInBitCount[0] >> ((3-i) << 3)) & 0xff);
++ }
++
++ byteReverse((UCHAR *)pCtx->Input, 16);
++ NdisZeroMemory((UCHAR *)pCtx->Input + 64, 16);
++ SHATransform(pCtx->Buf, (UINT32 *)pCtx->Input);
++ } // end of else
++
++
++ //Output, bytereverse
++ for (i=0; i<20; i++)
++ {
++ Digest [i] = (UCHAR)(pCtx->Buf[i>>2] >> 8*(3-(i & 0x3)));
++ }
++
++ NdisZeroMemory(pCtx, sizeof(pCtx)); // memory free
++}
++
++
++// The central algorithm of SHA-1, consists of four rounds and
++// twenty steps per round
++VOID SHATransform(UINT32 Buf[5], UINT32 Mes[20])
++{
++ UINT32 Reg[5],Temp;
++ unsigned int i;
++ UINT32 W[80];
++
++ static UINT32 SHA1Table[4] = { 0x5a827999, 0x6ed9eba1,
++ 0x8f1bbcdc, 0xca62c1d6 };
++
++ Reg[0]=Buf[0];
++ Reg[1]=Buf[1];
++ Reg[2]=Buf[2];
++ Reg[3]=Buf[3];
++ Reg[4]=Buf[4];
++
++ //the first octet of a word is stored in the 0th element, bytereverse
++ for(i = 0; i < 16; i++)
++ {
++ W[i] = (Mes[i] >> 24) & 0xff;
++ W[i] |= (Mes[i] >> 8 ) & 0xff00;
++ W[i] |= (Mes[i] << 8 ) & 0xff0000;
++ W[i] |= (Mes[i] << 24) & 0xff000000;
++ }
++
++
++ for (i = 0; i < 64; i++)
++ W[16+i] = CYCLIC_LEFT_SHIFT(W[i] ^ W[2+i] ^ W[8+i] ^ W[13+i], 1);
++
++
++ // 80 steps in SHA-1 algorithm
++ for (i=0; i<80; i++)
++ {
++ if (i<20)
++ SHA1Step(SHA1_F1, Reg[0], Reg[1], Reg[2], Reg[3], Reg[4],
++ W[i], SHA1Table[0]);
++
++ else if (i>=20 && i<40)
++ SHA1Step(SHA1_F2, Reg[0], Reg[1], Reg[2], Reg[3], Reg[4],
++ W[i], SHA1Table[1]);
++
++ else if (i>=40 && i<60)
++ SHA1Step(SHA1_F3, Reg[0], Reg[1], Reg[2], Reg[3], Reg[4],
++ W[i], SHA1Table[2]);
++
++ else
++ SHA1Step(SHA1_F2, Reg[0], Reg[1], Reg[2], Reg[3], Reg[4],
++ W[i], SHA1Table[3]);
++
++
++ // one-word right shift
++ Temp = Reg[4];
++ Reg[4] = Reg[3];
++ Reg[3] = Reg[2];
++ Reg[2] = Reg[1];
++ Reg[1] = Reg[0];
++ Reg[0] = Temp;
++
++ } // end of for-loop
++
++
++ // (temporary)output
++ for (i=0; i<5; i++)
++ Buf[i] += Reg[i];
++
++}
++
++
++/* ========================= AES En/Decryption ========================== */
++
++/* forward S-box */
++static uint32 FSb[256] =
++{
++ 0x63, 0x7C, 0x77, 0x7B, 0xF2, 0x6B, 0x6F, 0xC5,
++ 0x30, 0x01, 0x67, 0x2B, 0xFE, 0xD7, 0xAB, 0x76,
++ 0xCA, 0x82, 0xC9, 0x7D, 0xFA, 0x59, 0x47, 0xF0,
++ 0xAD, 0xD4, 0xA2, 0xAF, 0x9C, 0xA4, 0x72, 0xC0,
++ 0xB7, 0xFD, 0x93, 0x26, 0x36, 0x3F, 0xF7, 0xCC,
++ 0x34, 0xA5, 0xE5, 0xF1, 0x71, 0xD8, 0x31, 0x15,
++ 0x04, 0xC7, 0x23, 0xC3, 0x18, 0x96, 0x05, 0x9A,
++ 0x07, 0x12, 0x80, 0xE2, 0xEB, 0x27, 0xB2, 0x75,
++ 0x09, 0x83, 0x2C, 0x1A, 0x1B, 0x6E, 0x5A, 0xA0,
++ 0x52, 0x3B, 0xD6, 0xB3, 0x29, 0xE3, 0x2F, 0x84,
++ 0x53, 0xD1, 0x00, 0xED, 0x20, 0xFC, 0xB1, 0x5B,
++ 0x6A, 0xCB, 0xBE, 0x39, 0x4A, 0x4C, 0x58, 0xCF,
++ 0xD0, 0xEF, 0xAA, 0xFB, 0x43, 0x4D, 0x33, 0x85,
++ 0x45, 0xF9, 0x02, 0x7F, 0x50, 0x3C, 0x9F, 0xA8,
++ 0x51, 0xA3, 0x40, 0x8F, 0x92, 0x9D, 0x38, 0xF5,
++ 0xBC, 0xB6, 0xDA, 0x21, 0x10, 0xFF, 0xF3, 0xD2,
++ 0xCD, 0x0C, 0x13, 0xEC, 0x5F, 0x97, 0x44, 0x17,
++ 0xC4, 0xA7, 0x7E, 0x3D, 0x64, 0x5D, 0x19, 0x73,
++ 0x60, 0x81, 0x4F, 0xDC, 0x22, 0x2A, 0x90, 0x88,
++ 0x46, 0xEE, 0xB8, 0x14, 0xDE, 0x5E, 0x0B, 0xDB,
++ 0xE0, 0x32, 0x3A, 0x0A, 0x49, 0x06, 0x24, 0x5C,
++ 0xC2, 0xD3, 0xAC, 0x62, 0x91, 0x95, 0xE4, 0x79,
++ 0xE7, 0xC8, 0x37, 0x6D, 0x8D, 0xD5, 0x4E, 0xA9,
++ 0x6C, 0x56, 0xF4, 0xEA, 0x65, 0x7A, 0xAE, 0x08,
++ 0xBA, 0x78, 0x25, 0x2E, 0x1C, 0xA6, 0xB4, 0xC6,
++ 0xE8, 0xDD, 0x74, 0x1F, 0x4B, 0xBD, 0x8B, 0x8A,
++ 0x70, 0x3E, 0xB5, 0x66, 0x48, 0x03, 0xF6, 0x0E,
++ 0x61, 0x35, 0x57, 0xB9, 0x86, 0xC1, 0x1D, 0x9E,
++ 0xE1, 0xF8, 0x98, 0x11, 0x69, 0xD9, 0x8E, 0x94,
++ 0x9B, 0x1E, 0x87, 0xE9, 0xCE, 0x55, 0x28, 0xDF,
++ 0x8C, 0xA1, 0x89, 0x0D, 0xBF, 0xE6, 0x42, 0x68,
++ 0x41, 0x99, 0x2D, 0x0F, 0xB0, 0x54, 0xBB, 0x16
++};
++
++/* forward table */
++#define FT \
++\
++ V(C6,63,63,A5), V(F8,7C,7C,84), V(EE,77,77,99), V(F6,7B,7B,8D), \
++ V(FF,F2,F2,0D), V(D6,6B,6B,BD), V(DE,6F,6F,B1), V(91,C5,C5,54), \
++ V(60,30,30,50), V(02,01,01,03), V(CE,67,67,A9), V(56,2B,2B,7D), \
++ V(E7,FE,FE,19), V(B5,D7,D7,62), V(4D,AB,AB,E6), V(EC,76,76,9A), \
++ V(8F,CA,CA,45), V(1F,82,82,9D), V(89,C9,C9,40), V(FA,7D,7D,87), \
++ V(EF,FA,FA,15), V(B2,59,59,EB), V(8E,47,47,C9), V(FB,F0,F0,0B), \
++ V(41,AD,AD,EC), V(B3,D4,D4,67), V(5F,A2,A2,FD), V(45,AF,AF,EA), \
++ V(23,9C,9C,BF), V(53,A4,A4,F7), V(E4,72,72,96), V(9B,C0,C0,5B), \
++ V(75,B7,B7,C2), V(E1,FD,FD,1C), V(3D,93,93,AE), V(4C,26,26,6A), \
++ V(6C,36,36,5A), V(7E,3F,3F,41), V(F5,F7,F7,02), V(83,CC,CC,4F), \
++ V(68,34,34,5C), V(51,A5,A5,F4), V(D1,E5,E5,34), V(F9,F1,F1,08), \
++ V(E2,71,71,93), V(AB,D8,D8,73), V(62,31,31,53), V(2A,15,15,3F), \
++ V(08,04,04,0C), V(95,C7,C7,52), V(46,23,23,65), V(9D,C3,C3,5E), \
++ V(30,18,18,28), V(37,96,96,A1), V(0A,05,05,0F), V(2F,9A,9A,B5), \
++ V(0E,07,07,09), V(24,12,12,36), V(1B,80,80,9B), V(DF,E2,E2,3D), \
++ V(CD,EB,EB,26), V(4E,27,27,69), V(7F,B2,B2,CD), V(EA,75,75,9F), \
++ V(12,09,09,1B), V(1D,83,83,9E), V(58,2C,2C,74), V(34,1A,1A,2E), \
++ V(36,1B,1B,2D), V(DC,6E,6E,B2), V(B4,5A,5A,EE), V(5B,A0,A0,FB), \
++ V(A4,52,52,F6), V(76,3B,3B,4D), V(B7,D6,D6,61), V(7D,B3,B3,CE), \
++ V(52,29,29,7B), V(DD,E3,E3,3E), V(5E,2F,2F,71), V(13,84,84,97), \
++ V(A6,53,53,F5), V(B9,D1,D1,68), V(00,00,00,00), V(C1,ED,ED,2C), \
++ V(40,20,20,60), V(E3,FC,FC,1F), V(79,B1,B1,C8), V(B6,5B,5B,ED), \
++ V(D4,6A,6A,BE), V(8D,CB,CB,46), V(67,BE,BE,D9), V(72,39,39,4B), \
++ V(94,4A,4A,DE), V(98,4C,4C,D4), V(B0,58,58,E8), V(85,CF,CF,4A), \
++ V(BB,D0,D0,6B), V(C5,EF,EF,2A), V(4F,AA,AA,E5), V(ED,FB,FB,16), \
++ V(86,43,43,C5), V(9A,4D,4D,D7), V(66,33,33,55), V(11,85,85,94), \
++ V(8A,45,45,CF), V(E9,F9,F9,10), V(04,02,02,06), V(FE,7F,7F,81), \
++ V(A0,50,50,F0), V(78,3C,3C,44), V(25,9F,9F,BA), V(4B,A8,A8,E3), \
++ V(A2,51,51,F3), V(5D,A3,A3,FE), V(80,40,40,C0), V(05,8F,8F,8A), \
++ V(3F,92,92,AD), V(21,9D,9D,BC), V(70,38,38,48), V(F1,F5,F5,04), \
++ V(63,BC,BC,DF), V(77,B6,B6,C1), V(AF,DA,DA,75), V(42,21,21,63), \
++ V(20,10,10,30), V(E5,FF,FF,1A), V(FD,F3,F3,0E), V(BF,D2,D2,6D), \
++ V(81,CD,CD,4C), V(18,0C,0C,14), V(26,13,13,35), V(C3,EC,EC,2F), \
++ V(BE,5F,5F,E1), V(35,97,97,A2), V(88,44,44,CC), V(2E,17,17,39), \
++ V(93,C4,C4,57), V(55,A7,A7,F2), V(FC,7E,7E,82), V(7A,3D,3D,47), \
++ V(C8,64,64,AC), V(BA,5D,5D,E7), V(32,19,19,2B), V(E6,73,73,95), \
++ V(C0,60,60,A0), V(19,81,81,98), V(9E,4F,4F,D1), V(A3,DC,DC,7F), \
++ V(44,22,22,66), V(54,2A,2A,7E), V(3B,90,90,AB), V(0B,88,88,83), \
++ V(8C,46,46,CA), V(C7,EE,EE,29), V(6B,B8,B8,D3), V(28,14,14,3C), \
++ V(A7,DE,DE,79), V(BC,5E,5E,E2), V(16,0B,0B,1D), V(AD,DB,DB,76), \
++ V(DB,E0,E0,3B), V(64,32,32,56), V(74,3A,3A,4E), V(14,0A,0A,1E), \
++ V(92,49,49,DB), V(0C,06,06,0A), V(48,24,24,6C), V(B8,5C,5C,E4), \
++ V(9F,C2,C2,5D), V(BD,D3,D3,6E), V(43,AC,AC,EF), V(C4,62,62,A6), \
++ V(39,91,91,A8), V(31,95,95,A4), V(D3,E4,E4,37), V(F2,79,79,8B), \
++ V(D5,E7,E7,32), V(8B,C8,C8,43), V(6E,37,37,59), V(DA,6D,6D,B7), \
++ V(01,8D,8D,8C), V(B1,D5,D5,64), V(9C,4E,4E,D2), V(49,A9,A9,E0), \
++ V(D8,6C,6C,B4), V(AC,56,56,FA), V(F3,F4,F4,07), V(CF,EA,EA,25), \
++ V(CA,65,65,AF), V(F4,7A,7A,8E), V(47,AE,AE,E9), V(10,08,08,18), \
++ V(6F,BA,BA,D5), V(F0,78,78,88), V(4A,25,25,6F), V(5C,2E,2E,72), \
++ V(38,1C,1C,24), V(57,A6,A6,F1), V(73,B4,B4,C7), V(97,C6,C6,51), \
++ V(CB,E8,E8,23), V(A1,DD,DD,7C), V(E8,74,74,9C), V(3E,1F,1F,21), \
++ V(96,4B,4B,DD), V(61,BD,BD,DC), V(0D,8B,8B,86), V(0F,8A,8A,85), \
++ V(E0,70,70,90), V(7C,3E,3E,42), V(71,B5,B5,C4), V(CC,66,66,AA), \
++ V(90,48,48,D8), V(06,03,03,05), V(F7,F6,F6,01), V(1C,0E,0E,12), \
++ V(C2,61,61,A3), V(6A,35,35,5F), V(AE,57,57,F9), V(69,B9,B9,D0), \
++ V(17,86,86,91), V(99,C1,C1,58), V(3A,1D,1D,27), V(27,9E,9E,B9), \
++ V(D9,E1,E1,38), V(EB,F8,F8,13), V(2B,98,98,B3), V(22,11,11,33), \
++ V(D2,69,69,BB), V(A9,D9,D9,70), V(07,8E,8E,89), V(33,94,94,A7), \
++ V(2D,9B,9B,B6), V(3C,1E,1E,22), V(15,87,87,92), V(C9,E9,E9,20), \
++ V(87,CE,CE,49), V(AA,55,55,FF), V(50,28,28,78), V(A5,DF,DF,7A), \
++ V(03,8C,8C,8F), V(59,A1,A1,F8), V(09,89,89,80), V(1A,0D,0D,17), \
++ V(65,BF,BF,DA), V(D7,E6,E6,31), V(84,42,42,C6), V(D0,68,68,B8), \
++ V(82,41,41,C3), V(29,99,99,B0), V(5A,2D,2D,77), V(1E,0F,0F,11), \
++ V(7B,B0,B0,CB), V(A8,54,54,FC), V(6D,BB,BB,D6), V(2C,16,16,3A)
++
++#define V(a,b,c,d) 0x##a##b##c##d
++static uint32 FT0[256] = { FT };
++#undef V
++
++#define V(a,b,c,d) 0x##d##a##b##c
++static uint32 FT1[256] = { FT };
++#undef V
++
++#define V(a,b,c,d) 0x##c##d##a##b
++static uint32 FT2[256] = { FT };
++#undef V
++
++#define V(a,b,c,d) 0x##b##c##d##a
++static uint32 FT3[256] = { FT };
++#undef V
++
++#undef FT
++
++/* reverse S-box */
++
++static uint32 RSb[256] =
++{
++ 0x52, 0x09, 0x6A, 0xD5, 0x30, 0x36, 0xA5, 0x38,
++ 0xBF, 0x40, 0xA3, 0x9E, 0x81, 0xF3, 0xD7, 0xFB,
++ 0x7C, 0xE3, 0x39, 0x82, 0x9B, 0x2F, 0xFF, 0x87,
++ 0x34, 0x8E, 0x43, 0x44, 0xC4, 0xDE, 0xE9, 0xCB,
++ 0x54, 0x7B, 0x94, 0x32, 0xA6, 0xC2, 0x23, 0x3D,
++ 0xEE, 0x4C, 0x95, 0x0B, 0x42, 0xFA, 0xC3, 0x4E,
++ 0x08, 0x2E, 0xA1, 0x66, 0x28, 0xD9, 0x24, 0xB2,
++ 0x76, 0x5B, 0xA2, 0x49, 0x6D, 0x8B, 0xD1, 0x25,
++ 0x72, 0xF8, 0xF6, 0x64, 0x86, 0x68, 0x98, 0x16,
++ 0xD4, 0xA4, 0x5C, 0xCC, 0x5D, 0x65, 0xB6, 0x92,
++ 0x6C, 0x70, 0x48, 0x50, 0xFD, 0xED, 0xB9, 0xDA,
++ 0x5E, 0x15, 0x46, 0x57, 0xA7, 0x8D, 0x9D, 0x84,
++ 0x90, 0xD8, 0xAB, 0x00, 0x8C, 0xBC, 0xD3, 0x0A,
++ 0xF7, 0xE4, 0x58, 0x05, 0xB8, 0xB3, 0x45, 0x06,
++ 0xD0, 0x2C, 0x1E, 0x8F, 0xCA, 0x3F, 0x0F, 0x02,
++ 0xC1, 0xAF, 0xBD, 0x03, 0x01, 0x13, 0x8A, 0x6B,
++ 0x3A, 0x91, 0x11, 0x41, 0x4F, 0x67, 0xDC, 0xEA,
++ 0x97, 0xF2, 0xCF, 0xCE, 0xF0, 0xB4, 0xE6, 0x73,
++ 0x96, 0xAC, 0x74, 0x22, 0xE7, 0xAD, 0x35, 0x85,
++ 0xE2, 0xF9, 0x37, 0xE8, 0x1C, 0x75, 0xDF, 0x6E,
++ 0x47, 0xF1, 0x1A, 0x71, 0x1D, 0x29, 0xC5, 0x89,
++ 0x6F, 0xB7, 0x62, 0x0E, 0xAA, 0x18, 0xBE, 0x1B,
++ 0xFC, 0x56, 0x3E, 0x4B, 0xC6, 0xD2, 0x79, 0x20,
++ 0x9A, 0xDB, 0xC0, 0xFE, 0x78, 0xCD, 0x5A, 0xF4,
++ 0x1F, 0xDD, 0xA8, 0x33, 0x88, 0x07, 0xC7, 0x31,
++ 0xB1, 0x12, 0x10, 0x59, 0x27, 0x80, 0xEC, 0x5F,
++ 0x60, 0x51, 0x7F, 0xA9, 0x19, 0xB5, 0x4A, 0x0D,
++ 0x2D, 0xE5, 0x7A, 0x9F, 0x93, 0xC9, 0x9C, 0xEF,
++ 0xA0, 0xE0, 0x3B, 0x4D, 0xAE, 0x2A, 0xF5, 0xB0,
++ 0xC8, 0xEB, 0xBB, 0x3C, 0x83, 0x53, 0x99, 0x61,
++ 0x17, 0x2B, 0x04, 0x7E, 0xBA, 0x77, 0xD6, 0x26,
++ 0xE1, 0x69, 0x14, 0x63, 0x55, 0x21, 0x0C, 0x7D
++};
++
++/* reverse table */
++
++#define RT \
++\
++ V(51,F4,A7,50), V(7E,41,65,53), V(1A,17,A4,C3), V(3A,27,5E,96), \
++ V(3B,AB,6B,CB), V(1F,9D,45,F1), V(AC,FA,58,AB), V(4B,E3,03,93), \
++ V(20,30,FA,55), V(AD,76,6D,F6), V(88,CC,76,91), V(F5,02,4C,25), \
++ V(4F,E5,D7,FC), V(C5,2A,CB,D7), V(26,35,44,80), V(B5,62,A3,8F), \
++ V(DE,B1,5A,49), V(25,BA,1B,67), V(45,EA,0E,98), V(5D,FE,C0,E1), \
++ V(C3,2F,75,02), V(81,4C,F0,12), V(8D,46,97,A3), V(6B,D3,F9,C6), \
++ V(03,8F,5F,E7), V(15,92,9C,95), V(BF,6D,7A,EB), V(95,52,59,DA), \
++ V(D4,BE,83,2D), V(58,74,21,D3), V(49,E0,69,29), V(8E,C9,C8,44), \
++ V(75,C2,89,6A), V(F4,8E,79,78), V(99,58,3E,6B), V(27,B9,71,DD), \
++ V(BE,E1,4F,B6), V(F0,88,AD,17), V(C9,20,AC,66), V(7D,CE,3A,B4), \
++ V(63,DF,4A,18), V(E5,1A,31,82), V(97,51,33,60), V(62,53,7F,45), \
++ V(B1,64,77,E0), V(BB,6B,AE,84), V(FE,81,A0,1C), V(F9,08,2B,94), \
++ V(70,48,68,58), V(8F,45,FD,19), V(94,DE,6C,87), V(52,7B,F8,B7), \
++ V(AB,73,D3,23), V(72,4B,02,E2), V(E3,1F,8F,57), V(66,55,AB,2A), \
++ V(B2,EB,28,07), V(2F,B5,C2,03), V(86,C5,7B,9A), V(D3,37,08,A5), \
++ V(30,28,87,F2), V(23,BF,A5,B2), V(02,03,6A,BA), V(ED,16,82,5C), \
++ V(8A,CF,1C,2B), V(A7,79,B4,92), V(F3,07,F2,F0), V(4E,69,E2,A1), \
++ V(65,DA,F4,CD), V(06,05,BE,D5), V(D1,34,62,1F), V(C4,A6,FE,8A), \
++ V(34,2E,53,9D), V(A2,F3,55,A0), V(05,8A,E1,32), V(A4,F6,EB,75), \
++ V(0B,83,EC,39), V(40,60,EF,AA), V(5E,71,9F,06), V(BD,6E,10,51), \
++ V(3E,21,8A,F9), V(96,DD,06,3D), V(DD,3E,05,AE), V(4D,E6,BD,46), \
++ V(91,54,8D,B5), V(71,C4,5D,05), V(04,06,D4,6F), V(60,50,15,FF), \
++ V(19,98,FB,24), V(D6,BD,E9,97), V(89,40,43,CC), V(67,D9,9E,77), \
++ V(B0,E8,42,BD), V(07,89,8B,88), V(E7,19,5B,38), V(79,C8,EE,DB), \
++ V(A1,7C,0A,47), V(7C,42,0F,E9), V(F8,84,1E,C9), V(00,00,00,00), \
++ V(09,80,86,83), V(32,2B,ED,48), V(1E,11,70,AC), V(6C,5A,72,4E), \
++ V(FD,0E,FF,FB), V(0F,85,38,56), V(3D,AE,D5,1E), V(36,2D,39,27), \
++ V(0A,0F,D9,64), V(68,5C,A6,21), V(9B,5B,54,D1), V(24,36,2E,3A), \
++ V(0C,0A,67,B1), V(93,57,E7,0F), V(B4,EE,96,D2), V(1B,9B,91,9E), \
++ V(80,C0,C5,4F), V(61,DC,20,A2), V(5A,77,4B,69), V(1C,12,1A,16), \
++ V(E2,93,BA,0A), V(C0,A0,2A,E5), V(3C,22,E0,43), V(12,1B,17,1D), \
++ V(0E,09,0D,0B), V(F2,8B,C7,AD), V(2D,B6,A8,B9), V(14,1E,A9,C8), \
++ V(57,F1,19,85), V(AF,75,07,4C), V(EE,99,DD,BB), V(A3,7F,60,FD), \
++ V(F7,01,26,9F), V(5C,72,F5,BC), V(44,66,3B,C5), V(5B,FB,7E,34), \
++ V(8B,43,29,76), V(CB,23,C6,DC), V(B6,ED,FC,68), V(B8,E4,F1,63), \
++ V(D7,31,DC,CA), V(42,63,85,10), V(13,97,22,40), V(84,C6,11,20), \
++ V(85,4A,24,7D), V(D2,BB,3D,F8), V(AE,F9,32,11), V(C7,29,A1,6D), \
++ V(1D,9E,2F,4B), V(DC,B2,30,F3), V(0D,86,52,EC), V(77,C1,E3,D0), \
++ V(2B,B3,16,6C), V(A9,70,B9,99), V(11,94,48,FA), V(47,E9,64,22), \
++ V(A8,FC,8C,C4), V(A0,F0,3F,1A), V(56,7D,2C,D8), V(22,33,90,EF), \
++ V(87,49,4E,C7), V(D9,38,D1,C1), V(8C,CA,A2,FE), V(98,D4,0B,36), \
++ V(A6,F5,81,CF), V(A5,7A,DE,28), V(DA,B7,8E,26), V(3F,AD,BF,A4), \
++ V(2C,3A,9D,E4), V(50,78,92,0D), V(6A,5F,CC,9B), V(54,7E,46,62), \
++ V(F6,8D,13,C2), V(90,D8,B8,E8), V(2E,39,F7,5E), V(82,C3,AF,F5), \
++ V(9F,5D,80,BE), V(69,D0,93,7C), V(6F,D5,2D,A9), V(CF,25,12,B3), \
++ V(C8,AC,99,3B), V(10,18,7D,A7), V(E8,9C,63,6E), V(DB,3B,BB,7B), \
++ V(CD,26,78,09), V(6E,59,18,F4), V(EC,9A,B7,01), V(83,4F,9A,A8), \
++ V(E6,95,6E,65), V(AA,FF,E6,7E), V(21,BC,CF,08), V(EF,15,E8,E6), \
++ V(BA,E7,9B,D9), V(4A,6F,36,CE), V(EA,9F,09,D4), V(29,B0,7C,D6), \
++ V(31,A4,B2,AF), V(2A,3F,23,31), V(C6,A5,94,30), V(35,A2,66,C0), \
++ V(74,4E,BC,37), V(FC,82,CA,A6), V(E0,90,D0,B0), V(33,A7,D8,15), \
++ V(F1,04,98,4A), V(41,EC,DA,F7), V(7F,CD,50,0E), V(17,91,F6,2F), \
++ V(76,4D,D6,8D), V(43,EF,B0,4D), V(CC,AA,4D,54), V(E4,96,04,DF), \
++ V(9E,D1,B5,E3), V(4C,6A,88,1B), V(C1,2C,1F,B8), V(46,65,51,7F), \
++ V(9D,5E,EA,04), V(01,8C,35,5D), V(FA,87,74,73), V(FB,0B,41,2E), \
++ V(B3,67,1D,5A), V(92,DB,D2,52), V(E9,10,56,33), V(6D,D6,47,13), \
++ V(9A,D7,61,8C), V(37,A1,0C,7A), V(59,F8,14,8E), V(EB,13,3C,89), \
++ V(CE,A9,27,EE), V(B7,61,C9,35), V(E1,1C,E5,ED), V(7A,47,B1,3C), \
++ V(9C,D2,DF,59), V(55,F2,73,3F), V(18,14,CE,79), V(73,C7,37,BF), \
++ V(53,F7,CD,EA), V(5F,FD,AA,5B), V(DF,3D,6F,14), V(78,44,DB,86), \
++ V(CA,AF,F3,81), V(B9,68,C4,3E), V(38,24,34,2C), V(C2,A3,40,5F), \
++ V(16,1D,C3,72), V(BC,E2,25,0C), V(28,3C,49,8B), V(FF,0D,95,41), \
++ V(39,A8,01,71), V(08,0C,B3,DE), V(D8,B4,E4,9C), V(64,56,C1,90), \
++ V(7B,CB,84,61), V(D5,32,B6,70), V(48,6C,5C,74), V(D0,B8,57,42)
++
++#define V(a,b,c,d) 0x##a##b##c##d
++static uint32 RT0[256] = { RT };
++#undef V
++
++#define V(a,b,c,d) 0x##d##a##b##c
++static uint32 RT1[256] = { RT };
++#undef V
++
++#define V(a,b,c,d) 0x##c##d##a##b
++static uint32 RT2[256] = { RT };
++#undef V
++
++#define V(a,b,c,d) 0x##b##c##d##a
++static uint32 RT3[256] = { RT };
++#undef V
++
++#undef RT
++
++/* round constants */
++
++static uint32 RCON[10] =
++{
++ 0x01000000, 0x02000000, 0x04000000, 0x08000000,
++ 0x10000000, 0x20000000, 0x40000000, 0x80000000,
++ 0x1B000000, 0x36000000
++};
++
++/* key schedule tables */
++
++static int KT_init = 1;
++
++static uint32 KT0[256];
++static uint32 KT1[256];
++static uint32 KT2[256];
++static uint32 KT3[256];
++
++/* platform-independant 32-bit integer manipulation macros */
++
++#define GET_UINT32(n,b,i) \
++{ \
++ (n) = ( (uint32) (b)[(i) ] << 24 ) \
++ | ( (uint32) (b)[(i) + 1] << 16 ) \
++ | ( (uint32) (b)[(i) + 2] << 8 ) \
++ | ( (uint32) (b)[(i) + 3] ); \
++}
++
++#define PUT_UINT32(n,b,i) \
++{ \
++ (b)[(i) ] = (uint8) ( (n) >> 24 ); \
++ (b)[(i) + 1] = (uint8) ( (n) >> 16 ); \
++ (b)[(i) + 2] = (uint8) ( (n) >> 8 ); \
++ (b)[(i) + 3] = (uint8) ( (n) ); \
++}
++
++/* AES key scheduling routine */
++
++int rtmp_aes_set_key( aes_context *ctx, uint8 *key, int nbits )
++{
++ int i;
++ uint32 *RK, *SK;
++
++ switch( nbits )
++ {
++ case 128: ctx->nr = 10; break;
++ case 192: ctx->nr = 12; break;
++ case 256: ctx->nr = 14; break;
++ default : return( 1 );
++ }
++
++ RK = ctx->erk;
++
++ for( i = 0; i < (nbits >> 5); i++ )
++ {
++ GET_UINT32( RK[i], key, i * 4 );
++ }
++
++ /* setup encryption round keys */
++
++ switch( nbits )
++ {
++ case 128:
++
++ for( i = 0; i < 10; i++, RK += 4 )
++ {
++ RK[4] = RK[0] ^ RCON[i] ^
++ ( FSb[ (uint8) ( RK[3] >> 16 ) ] << 24 ) ^
++ ( FSb[ (uint8) ( RK[3] >> 8 ) ] << 16 ) ^
++ ( FSb[ (uint8) ( RK[3] ) ] << 8 ) ^
++ ( FSb[ (uint8) ( RK[3] >> 24 ) ] );
++
++ RK[5] = RK[1] ^ RK[4];
++ RK[6] = RK[2] ^ RK[5];
++ RK[7] = RK[3] ^ RK[6];
++ }
++ break;
++
++ case 192:
++
++ for( i = 0; i < 8; i++, RK += 6 )
++ {
++ RK[6] = RK[0] ^ RCON[i] ^
++ ( FSb[ (uint8) ( RK[5] >> 16 ) ] << 24 ) ^
++ ( FSb[ (uint8) ( RK[5] >> 8 ) ] << 16 ) ^
++ ( FSb[ (uint8) ( RK[5] ) ] << 8 ) ^
++ ( FSb[ (uint8) ( RK[5] >> 24 ) ] );
++
++ RK[7] = RK[1] ^ RK[6];
++ RK[8] = RK[2] ^ RK[7];
++ RK[9] = RK[3] ^ RK[8];
++ RK[10] = RK[4] ^ RK[9];
++ RK[11] = RK[5] ^ RK[10];
++ }
++ break;
++
++ case 256:
++
++ for( i = 0; i < 7; i++, RK += 8 )
++ {
++ RK[8] = RK[0] ^ RCON[i] ^
++ ( FSb[ (uint8) ( RK[7] >> 16 ) ] << 24 ) ^
++ ( FSb[ (uint8) ( RK[7] >> 8 ) ] << 16 ) ^
++ ( FSb[ (uint8) ( RK[7] ) ] << 8 ) ^
++ ( FSb[ (uint8) ( RK[7] >> 24 ) ] );
++
++ RK[9] = RK[1] ^ RK[8];
++ RK[10] = RK[2] ^ RK[9];
++ RK[11] = RK[3] ^ RK[10];
++
++ RK[12] = RK[4] ^
++ ( FSb[ (uint8) ( RK[11] >> 24 ) ] << 24 ) ^
++ ( FSb[ (uint8) ( RK[11] >> 16 ) ] << 16 ) ^
++ ( FSb[ (uint8) ( RK[11] >> 8 ) ] << 8 ) ^
++ ( FSb[ (uint8) ( RK[11] ) ] );
++
++ RK[13] = RK[5] ^ RK[12];
++ RK[14] = RK[6] ^ RK[13];
++ RK[15] = RK[7] ^ RK[14];
++ }
++ break;
++ }
++
++ /* setup decryption round keys */
++
++ if( KT_init )
++ {
++ for( i = 0; i < 256; i++ )
++ {
++ KT0[i] = RT0[ FSb[i] ];
++ KT1[i] = RT1[ FSb[i] ];
++ KT2[i] = RT2[ FSb[i] ];
++ KT3[i] = RT3[ FSb[i] ];
++ }
++
++ KT_init = 0;
++ }
++
++ SK = ctx->drk;
++
++ *SK++ = *RK++;
++ *SK++ = *RK++;
++ *SK++ = *RK++;
++ *SK++ = *RK++;
++
++ for( i = 1; i < ctx->nr; i++ )
++ {
++ RK -= 8;
++
++ *SK++ = KT0[ (uint8) ( *RK >> 24 ) ] ^
++ KT1[ (uint8) ( *RK >> 16 ) ] ^
++ KT2[ (uint8) ( *RK >> 8 ) ] ^
++ KT3[ (uint8) ( *RK ) ]; RK++;
++
++ *SK++ = KT0[ (uint8) ( *RK >> 24 ) ] ^
++ KT1[ (uint8) ( *RK >> 16 ) ] ^
++ KT2[ (uint8) ( *RK >> 8 ) ] ^
++ KT3[ (uint8) ( *RK ) ]; RK++;
++
++ *SK++ = KT0[ (uint8) ( *RK >> 24 ) ] ^
++ KT1[ (uint8) ( *RK >> 16 ) ] ^
++ KT2[ (uint8) ( *RK >> 8 ) ] ^
++ KT3[ (uint8) ( *RK ) ]; RK++;
++
++ *SK++ = KT0[ (uint8) ( *RK >> 24 ) ] ^
++ KT1[ (uint8) ( *RK >> 16 ) ] ^
++ KT2[ (uint8) ( *RK >> 8 ) ] ^
++ KT3[ (uint8) ( *RK ) ]; RK++;
++ }
++
++ RK -= 8;
++
++ *SK++ = *RK++;
++ *SK++ = *RK++;
++ *SK++ = *RK++;
++ *SK++ = *RK++;
++
++ return( 0 );
++}
++
++/* AES 128-bit block encryption routine */
++
++void rtmp_aes_encrypt(aes_context *ctx, uint8 input[16], uint8 output[16] )
++{
++ uint32 *RK, X0, X1, X2, X3, Y0, Y1, Y2, Y3;
++
++ RK = ctx->erk;
++ GET_UINT32( X0, input, 0 ); X0 ^= RK[0];
++ GET_UINT32( X1, input, 4 ); X1 ^= RK[1];
++ GET_UINT32( X2, input, 8 ); X2 ^= RK[2];
++ GET_UINT32( X3, input, 12 ); X3 ^= RK[3];
++
++#define AES_FROUND(X0,X1,X2,X3,Y0,Y1,Y2,Y3) \
++{ \
++ RK += 4; \
++ \
++ X0 = RK[0] ^ FT0[ (uint8) ( Y0 >> 24 ) ] ^ \
++ FT1[ (uint8) ( Y1 >> 16 ) ] ^ \
++ FT2[ (uint8) ( Y2 >> 8 ) ] ^ \
++ FT3[ (uint8) ( Y3 ) ]; \
++ \
++ X1 = RK[1] ^ FT0[ (uint8) ( Y1 >> 24 ) ] ^ \
++ FT1[ (uint8) ( Y2 >> 16 ) ] ^ \
++ FT2[ (uint8) ( Y3 >> 8 ) ] ^ \
++ FT3[ (uint8) ( Y0 ) ]; \
++ \
++ X2 = RK[2] ^ FT0[ (uint8) ( Y2 >> 24 ) ] ^ \
++ FT1[ (uint8) ( Y3 >> 16 ) ] ^ \
++ FT2[ (uint8) ( Y0 >> 8 ) ] ^ \
++ FT3[ (uint8) ( Y1 ) ]; \
++ \
++ X3 = RK[3] ^ FT0[ (uint8) ( Y3 >> 24 ) ] ^ \
++ FT1[ (uint8) ( Y0 >> 16 ) ] ^ \
++ FT2[ (uint8) ( Y1 >> 8 ) ] ^ \
++ FT3[ (uint8) ( Y2 ) ]; \
++}
++
++ AES_FROUND( Y0, Y1, Y2, Y3, X0, X1, X2, X3 ); /* round 1 */
++ AES_FROUND( X0, X1, X2, X3, Y0, Y1, Y2, Y3 ); /* round 2 */
++ AES_FROUND( Y0, Y1, Y2, Y3, X0, X1, X2, X3 ); /* round 3 */
++ AES_FROUND( X0, X1, X2, X3, Y0, Y1, Y2, Y3 ); /* round 4 */
++ AES_FROUND( Y0, Y1, Y2, Y3, X0, X1, X2, X3 ); /* round 5 */
++ AES_FROUND( X0, X1, X2, X3, Y0, Y1, Y2, Y3 ); /* round 6 */
++ AES_FROUND( Y0, Y1, Y2, Y3, X0, X1, X2, X3 ); /* round 7 */
++ AES_FROUND( X0, X1, X2, X3, Y0, Y1, Y2, Y3 ); /* round 8 */
++ AES_FROUND( Y0, Y1, Y2, Y3, X0, X1, X2, X3 ); /* round 9 */
++
++ if( ctx->nr > 10 )
++ {
++ AES_FROUND( X0, X1, X2, X3, Y0, Y1, Y2, Y3 ); /* round 10 */
++ AES_FROUND( Y0, Y1, Y2, Y3, X0, X1, X2, X3 ); /* round 11 */
++ }
++
++ if( ctx->nr > 12 )
++ {
++ AES_FROUND( X0, X1, X2, X3, Y0, Y1, Y2, Y3 ); /* round 12 */
++ AES_FROUND( Y0, Y1, Y2, Y3, X0, X1, X2, X3 ); /* round 13 */
++ }
++
++ /* last round */
++
++ RK += 4;
++
++ X0 = RK[0] ^ ( FSb[ (uint8) ( Y0 >> 24 ) ] << 24 ) ^
++ ( FSb[ (uint8) ( Y1 >> 16 ) ] << 16 ) ^
++ ( FSb[ (uint8) ( Y2 >> 8 ) ] << 8 ) ^
++ ( FSb[ (uint8) ( Y3 ) ] );
++
++ X1 = RK[1] ^ ( FSb[ (uint8) ( Y1 >> 24 ) ] << 24 ) ^
++ ( FSb[ (uint8) ( Y2 >> 16 ) ] << 16 ) ^
++ ( FSb[ (uint8) ( Y3 >> 8 ) ] << 8 ) ^
++ ( FSb[ (uint8) ( Y0 ) ] );
++
++ X2 = RK[2] ^ ( FSb[ (uint8) ( Y2 >> 24 ) ] << 24 ) ^
++ ( FSb[ (uint8) ( Y3 >> 16 ) ] << 16 ) ^
++ ( FSb[ (uint8) ( Y0 >> 8 ) ] << 8 ) ^
++ ( FSb[ (uint8) ( Y1 ) ] );
++
++ X3 = RK[3] ^ ( FSb[ (uint8) ( Y3 >> 24 ) ] << 24 ) ^
++ ( FSb[ (uint8) ( Y0 >> 16 ) ] << 16 ) ^
++ ( FSb[ (uint8) ( Y1 >> 8 ) ] << 8 ) ^
++ ( FSb[ (uint8) ( Y2 ) ] );
++
++ PUT_UINT32( X0, output, 0 );
++ PUT_UINT32( X1, output, 4 );
++ PUT_UINT32( X2, output, 8 );
++ PUT_UINT32( X3, output, 12 );
++}
++
++/* AES 128-bit block decryption routine */
++
++void rtmp_aes_decrypt( aes_context *ctx, uint8 input[16], uint8 output[16] )
++{
++ uint32 *RK, X0, X1, X2, X3, Y0, Y1, Y2, Y3;
++
++ RK = ctx->drk;
++
++ GET_UINT32( X0, input, 0 ); X0 ^= RK[0];
++ GET_UINT32( X1, input, 4 ); X1 ^= RK[1];
++ GET_UINT32( X2, input, 8 ); X2 ^= RK[2];
++ GET_UINT32( X3, input, 12 ); X3 ^= RK[3];
++
++#define AES_RROUND(X0,X1,X2,X3,Y0,Y1,Y2,Y3) \
++{ \
++ RK += 4; \
++ \
++ X0 = RK[0] ^ RT0[ (uint8) ( Y0 >> 24 ) ] ^ \
++ RT1[ (uint8) ( Y3 >> 16 ) ] ^ \
++ RT2[ (uint8) ( Y2 >> 8 ) ] ^ \
++ RT3[ (uint8) ( Y1 ) ]; \
++ \
++ X1 = RK[1] ^ RT0[ (uint8) ( Y1 >> 24 ) ] ^ \
++ RT1[ (uint8) ( Y0 >> 16 ) ] ^ \
++ RT2[ (uint8) ( Y3 >> 8 ) ] ^ \
++ RT3[ (uint8) ( Y2 ) ]; \
++ \
++ X2 = RK[2] ^ RT0[ (uint8) ( Y2 >> 24 ) ] ^ \
++ RT1[ (uint8) ( Y1 >> 16 ) ] ^ \
++ RT2[ (uint8) ( Y0 >> 8 ) ] ^ \
++ RT3[ (uint8) ( Y3 ) ]; \
++ \
++ X3 = RK[3] ^ RT0[ (uint8) ( Y3 >> 24 ) ] ^ \
++ RT1[ (uint8) ( Y2 >> 16 ) ] ^ \
++ RT2[ (uint8) ( Y1 >> 8 ) ] ^ \
++ RT3[ (uint8) ( Y0 ) ]; \
++}
++
++ AES_RROUND( Y0, Y1, Y2, Y3, X0, X1, X2, X3 ); /* round 1 */
++ AES_RROUND( X0, X1, X2, X3, Y0, Y1, Y2, Y3 ); /* round 2 */
++ AES_RROUND( Y0, Y1, Y2, Y3, X0, X1, X2, X3 ); /* round 3 */
++ AES_RROUND( X0, X1, X2, X3, Y0, Y1, Y2, Y3 ); /* round 4 */
++ AES_RROUND( Y0, Y1, Y2, Y3, X0, X1, X2, X3 ); /* round 5 */
++ AES_RROUND( X0, X1, X2, X3, Y0, Y1, Y2, Y3 ); /* round 6 */
++ AES_RROUND( Y0, Y1, Y2, Y3, X0, X1, X2, X3 ); /* round 7 */
++ AES_RROUND( X0, X1, X2, X3, Y0, Y1, Y2, Y3 ); /* round 8 */
++ AES_RROUND( Y0, Y1, Y2, Y3, X0, X1, X2, X3 ); /* round 9 */
++
++ if( ctx->nr > 10 )
++ {
++ AES_RROUND( X0, X1, X2, X3, Y0, Y1, Y2, Y3 ); /* round 10 */
++ AES_RROUND( Y0, Y1, Y2, Y3, X0, X1, X2, X3 ); /* round 11 */
++ }
++
++ if( ctx->nr > 12 )
++ {
++ AES_RROUND( X0, X1, X2, X3, Y0, Y1, Y2, Y3 ); /* round 12 */
++ AES_RROUND( Y0, Y1, Y2, Y3, X0, X1, X2, X3 ); /* round 13 */
++ }
++
++ /* last round */
++
++ RK += 4;
++
++ X0 = RK[0] ^ ( RSb[ (uint8) ( Y0 >> 24 ) ] << 24 ) ^
++ ( RSb[ (uint8) ( Y3 >> 16 ) ] << 16 ) ^
++ ( RSb[ (uint8) ( Y2 >> 8 ) ] << 8 ) ^
++ ( RSb[ (uint8) ( Y1 ) ] );
++
++ X1 = RK[1] ^ ( RSb[ (uint8) ( Y1 >> 24 ) ] << 24 ) ^
++ ( RSb[ (uint8) ( Y0 >> 16 ) ] << 16 ) ^
++ ( RSb[ (uint8) ( Y3 >> 8 ) ] << 8 ) ^
++ ( RSb[ (uint8) ( Y2 ) ] );
++
++ X2 = RK[2] ^ ( RSb[ (uint8) ( Y2 >> 24 ) ] << 24 ) ^
++ ( RSb[ (uint8) ( Y1 >> 16 ) ] << 16 ) ^
++ ( RSb[ (uint8) ( Y0 >> 8 ) ] << 8 ) ^
++ ( RSb[ (uint8) ( Y3 ) ] );
++
++ X3 = RK[3] ^ ( RSb[ (uint8) ( Y3 >> 24 ) ] << 24 ) ^
++ ( RSb[ (uint8) ( Y2 >> 16 ) ] << 16 ) ^
++ ( RSb[ (uint8) ( Y1 >> 8 ) ] << 8 ) ^
++ ( RSb[ (uint8) ( Y0 ) ] );
++
++ PUT_UINT32( X0, output, 0 );
++ PUT_UINT32( X1, output, 4 );
++ PUT_UINT32( X2, output, 8 );
++ PUT_UINT32( X3, output, 12 );
++}
++
++/*
++ ========================================================================
++
++ Routine Description:
++ SHA1 function
++
++ Arguments:
++
++ Return Value:
++
++ Note:
++
++ ========================================================================
++*/
++VOID HMAC_SHA1(
++ IN UCHAR *text,
++ IN UINT text_len,
++ IN UCHAR *key,
++ IN UINT key_len,
++ IN UCHAR *digest)
++{
++ SHA_CTX context;
++ UCHAR k_ipad[65]; /* inner padding - key XORd with ipad */
++ UCHAR k_opad[65]; /* outer padding - key XORd with opad */
++ INT i;
++
++ // if key is longer than 64 bytes reset it to key=SHA1(key)
++ if (key_len > 64)
++ {
++ SHA_CTX tctx;
++ SHAInit(&tctx);
++ SHAUpdate(&tctx, key, key_len);
++ SHAFinal(&tctx, key);
++ key_len = 20;
++ }
++ NdisZeroMemory(k_ipad, sizeof(k_ipad));
++ NdisZeroMemory(k_opad, sizeof(k_opad));
++ NdisMoveMemory(k_ipad, key, key_len);
++ NdisMoveMemory(k_opad, key, key_len);
++
++ // XOR key with ipad and opad values
++ for (i = 0; i < 64; i++)
++ {
++ k_ipad[i] ^= 0x36;
++ k_opad[i] ^= 0x5c;
++ }
++
++ // perform inner SHA1
++ SHAInit(&context); /* init context for 1st pass */
++ SHAUpdate(&context, k_ipad, 64); /* start with inner pad */
++ SHAUpdate(&context, text, text_len); /* then text of datagram */
++ SHAFinal(&context, digest); /* finish up 1st pass */
++
++ //perform outer SHA1
++ SHAInit(&context); /* init context for 2nd pass */
++ SHAUpdate(&context, k_opad, 64); /* start with outer pad */
++ SHAUpdate(&context, digest, 20); /* then results of 1st hash */
++ SHAFinal(&context, digest); /* finish up 2nd pass */
++
++}
++
++/*
++* F(P, S, c, i) = U1 xor U2 xor ... Uc
++* U1 = PRF(P, S || Int(i))
++* U2 = PRF(P, U1)
++* Uc = PRF(P, Uc-1)
++*/
++
++void F(char *password, unsigned char *ssid, int ssidlength, int iterations, int count, unsigned char *output)
++{
++ unsigned char digest[36], digest1[SHA_DIGEST_LEN];
++ int i, j;
++
++ /* U1 = PRF(P, S || int(i)) */
++ memcpy(digest, ssid, ssidlength);
++ digest[ssidlength] = (unsigned char)((count>>24) & 0xff);
++ digest[ssidlength+1] = (unsigned char)((count>>16) & 0xff);
++ digest[ssidlength+2] = (unsigned char)((count>>8) & 0xff);
++ digest[ssidlength+3] = (unsigned char)(count & 0xff);
++ HMAC_SHA1(digest, ssidlength+4, (unsigned char*) password, (int) strlen(password), digest1); // for WPA update
++
++ /* output = U1 */
++ memcpy(output, digest1, SHA_DIGEST_LEN);
++
++ for (i = 1; i < iterations; i++)
++ {
++ /* Un = PRF(P, Un-1) */
++ HMAC_SHA1(digest1, SHA_DIGEST_LEN, (unsigned char*) password, (int) strlen(password), digest); // for WPA update
++ memcpy(digest1, digest, SHA_DIGEST_LEN);
++
++ /* output = output xor Un */
++ for (j = 0; j < SHA_DIGEST_LEN; j++)
++ {
++ output[j] ^= digest[j];
++ }
++ }
++}
++/*
++* password - ascii string up to 63 characters in length
++* ssid - octet string up to 32 octets
++* ssidlength - length of ssid in octets
++* output must be 40 octets in length and outputs 256 bits of key
++*/
++int PasswordHash(char *password, unsigned char *ssid, int ssidlength, unsigned char *output)
++{
++ if ((strlen(password) > 63) || (ssidlength > 32))
++ return 0;
++
++ F(password, ssid, ssidlength, 4096, 1, output);
++ F(password, ssid, ssidlength, 4096, 2, &output[SHA_DIGEST_LEN]);
++ return 1;
++}
++
++
+--- /dev/null
++++ b/drivers/staging/rt2870/common/mlme.c
+@@ -0,0 +1,8609 @@
++/*
++ *************************************************************************
++ * Ralink Tech Inc.
++ * 5F., No.36, Taiyuan St., Jhubei City,
++ * Hsinchu County 302,
++ * Taiwan, R.O.C.
++ *
++ * (c) Copyright 2002-2007, Ralink Technology, Inc.
++ *
++ * This program is free software; you can redistribute it and/or modify *
++ * it under the terms of the GNU General Public License as published by *
++ * the Free Software Foundation; either version 2 of the License, or *
++ * (at your option) any later version. *
++ * *
++ * This program is distributed in the hope that it will be useful, *
++ * but WITHOUT ANY WARRANTY; without even the implied warranty of *
++ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the *
++ * GNU General Public License for more details. *
++ * *
++ * You should have received a copy of the GNU General Public License *
++ * along with this program; if not, write to the *
++ * Free Software Foundation, Inc., *
++ * 59 Temple Place - Suite 330, Boston, MA 02111-1307, USA. *
++ * *
++ *************************************************************************
++
++ Module Name:
++ mlme.c
++
++ Abstract:
++
++ Revision History:
++ Who When What
++ -------- ---------- ----------------------------------------------
++ John Chang 2004-08-25 Modify from RT2500 code base
++ John Chang 2004-09-06 modified for RT2600
++*/
++
++#include "../rt_config.h"
++#include <stdarg.h>
++
++UCHAR CISCO_OUI[] = {0x00, 0x40, 0x96};
++
++UCHAR WPA_OUI[] = {0x00, 0x50, 0xf2, 0x01};
++UCHAR RSN_OUI[] = {0x00, 0x0f, 0xac};
++UCHAR WAPI_OUI[] = {0x00, 0x14, 0x72};
++UCHAR WME_INFO_ELEM[] = {0x00, 0x50, 0xf2, 0x02, 0x00, 0x01};
++UCHAR WME_PARM_ELEM[] = {0x00, 0x50, 0xf2, 0x02, 0x01, 0x01};
++UCHAR Ccx2QosInfo[] = {0x00, 0x40, 0x96, 0x04};
++UCHAR RALINK_OUI[] = {0x00, 0x0c, 0x43};
++UCHAR BROADCOM_OUI[] = {0x00, 0x90, 0x4c};
++UCHAR WPS_OUI[] = {0x00, 0x50, 0xf2, 0x04};
++#ifdef CONFIG_STA_SUPPORT
++#ifdef DOT11_N_SUPPORT
++UCHAR PRE_N_HT_OUI[] = {0x00, 0x90, 0x4c};
++#endif // DOT11_N_SUPPORT //
++#endif // CONFIG_STA_SUPPORT //
++
++UCHAR RateSwitchTable[] = {
++// Item No. Mode Curr-MCS TrainUp TrainDown // Mode- Bit0: STBC, Bit1: Short GI, Bit4,5: Mode(0:CCK, 1:OFDM, 2:HT Mix, 3:HT GF)
++ 0x11, 0x00, 0, 0, 0, // Initial used item after association
++ 0x00, 0x00, 0, 40, 101,
++ 0x01, 0x00, 1, 40, 50,
++ 0x02, 0x00, 2, 35, 45,
++ 0x03, 0x00, 3, 20, 45,
++ 0x04, 0x21, 0, 30, 50,
++ 0x05, 0x21, 1, 20, 50,
++ 0x06, 0x21, 2, 20, 50,
++ 0x07, 0x21, 3, 15, 50,
++ 0x08, 0x21, 4, 15, 30,
++ 0x09, 0x21, 5, 10, 25,
++ 0x0a, 0x21, 6, 8, 25,
++ 0x0b, 0x21, 7, 8, 25,
++ 0x0c, 0x20, 12, 15, 30,
++ 0x0d, 0x20, 13, 8, 20,
++ 0x0e, 0x20, 14, 8, 20,
++ 0x0f, 0x20, 15, 8, 25,
++ 0x10, 0x22, 15, 8, 25,
++ 0x11, 0x00, 0, 0, 0,
++ 0x12, 0x00, 0, 0, 0,
++ 0x13, 0x00, 0, 0, 0,
++ 0x14, 0x00, 0, 0, 0,
++ 0x15, 0x00, 0, 0, 0,
++ 0x16, 0x00, 0, 0, 0,
++ 0x17, 0x00, 0, 0, 0,
++ 0x18, 0x00, 0, 0, 0,
++ 0x19, 0x00, 0, 0, 0,
++ 0x1a, 0x00, 0, 0, 0,
++ 0x1b, 0x00, 0, 0, 0,
++ 0x1c, 0x00, 0, 0, 0,
++ 0x1d, 0x00, 0, 0, 0,
++ 0x1e, 0x00, 0, 0, 0,
++ 0x1f, 0x00, 0, 0, 0,
++};
++
++UCHAR RateSwitchTable11B[] = {
++// Item No. Mode Curr-MCS TrainUp TrainDown // Mode- Bit0: STBC, Bit1: Short GI, Bit4,5: Mode(0:CCK, 1:OFDM, 2:HT Mix, 3:HT GF)
++ 0x04, 0x03, 0, 0, 0, // Initial used item after association
++ 0x00, 0x00, 0, 40, 101,
++ 0x01, 0x00, 1, 40, 50,
++ 0x02, 0x00, 2, 35, 45,
++ 0x03, 0x00, 3, 20, 45,
++};
++
++UCHAR RateSwitchTable11BG[] = {
++// Item No. Mode Curr-MCS TrainUp TrainDown // Mode- Bit0: STBC, Bit1: Short GI, Bit4,5: Mode(0:CCK, 1:OFDM, 2:HT Mix, 3:HT GF)
++ 0x0a, 0x00, 0, 0, 0, // Initial used item after association
++ 0x00, 0x00, 0, 40, 101,
++ 0x01, 0x00, 1, 40, 50,
++ 0x02, 0x00, 2, 35, 45,
++ 0x03, 0x00, 3, 20, 45,
++ 0x04, 0x10, 2, 20, 35,
++ 0x05, 0x10, 3, 16, 35,
++ 0x06, 0x10, 4, 10, 25,
++ 0x07, 0x10, 5, 16, 25,
++ 0x08, 0x10, 6, 10, 25,
++ 0x09, 0x10, 7, 10, 13,
++};
++
++UCHAR RateSwitchTable11G[] = {
++// Item No. Mode Curr-MCS TrainUp TrainDown // Mode- Bit0: STBC, Bit1: Short GI, Bit4,5: Mode(0:CCK, 1:OFDM, 2:HT Mix, 3:HT GF)
++ 0x08, 0x00, 0, 0, 0, // Initial used item after association
++ 0x00, 0x10, 0, 20, 101,
++ 0x01, 0x10, 1, 20, 35,
++ 0x02, 0x10, 2, 20, 35,
++ 0x03, 0x10, 3, 16, 35,
++ 0x04, 0x10, 4, 10, 25,
++ 0x05, 0x10, 5, 16, 25,
++ 0x06, 0x10, 6, 10, 25,
++ 0x07, 0x10, 7, 10, 13,
++};
++
++#ifdef DOT11_N_SUPPORT
++UCHAR RateSwitchTable11N1S[] = {
++// Item No. Mode Curr-MCS TrainUp TrainDown // Mode- Bit0: STBC, Bit1: Short GI, Bit4,5: Mode(0:CCK, 1:OFDM, 2:HT Mix, 3:HT GF)
++ 0x09, 0x00, 0, 0, 0, // Initial used item after association
++ 0x00, 0x21, 0, 30, 101,
++ 0x01, 0x21, 1, 20, 50,
++ 0x02, 0x21, 2, 20, 50,
++ 0x03, 0x21, 3, 15, 50,
++ 0x04, 0x21, 4, 15, 30,
++ 0x05, 0x21, 5, 10, 25,
++ 0x06, 0x21, 6, 8, 14,
++ 0x07, 0x21, 7, 8, 14,
++ 0x08, 0x23, 7, 8, 14,
++};
++
++UCHAR RateSwitchTable11N2S[] = {
++// Item No. Mode Curr-MCS TrainUp TrainDown // Mode- Bit0: STBC, Bit1: Short GI, Bit4,5: Mode(0:CCK, 1:OFDM, 2:HT Mix, 3:HT GF)
++ 0x0a, 0x00, 0, 0, 0, // Initial used item after association
++ 0x00, 0x21, 0, 30, 101,
++ 0x01, 0x21, 1, 20, 50,
++ 0x02, 0x21, 2, 20, 50,
++ 0x03, 0x21, 3, 15, 50,
++ 0x04, 0x21, 4, 15, 30,
++ 0x05, 0x20, 12, 15, 30,
++ 0x06, 0x20, 13, 8, 20,
++ 0x07, 0x20, 14, 8, 20,
++ 0x08, 0x20, 15, 8, 25,
++ 0x09, 0x22, 15, 8, 25,
++};
++
++UCHAR RateSwitchTable11N3S[] = {
++// Item No. Mode Curr-MCS TrainUp TrainDown // Mode- Bit0: STBC, Bit1: Short GI, Bit4,5: Mode(0:CCK, 1:OFDM, 2:HT Mix, 3:HT GF)
++ 0x0a, 0x00, 0, 0, 0, // Initial used item after association
++ 0x00, 0x21, 0, 30, 101,
++ 0x01, 0x21, 1, 20, 50,
++ 0x02, 0x21, 2, 20, 50,
++ 0x03, 0x21, 3, 15, 50,
++ 0x04, 0x21, 4, 15, 30,
++ 0x05, 0x20, 12, 15, 30,
++ 0x06, 0x20, 13, 8, 20,
++ 0x07, 0x20, 14, 8, 20,
++ 0x08, 0x20, 15, 8, 25,
++ 0x09, 0x22, 15, 8, 25,
++};
++
++UCHAR RateSwitchTable11N2SForABand[] = {
++// Item No. Mode Curr-MCS TrainUp TrainDown // Mode- Bit0: STBC, Bit1: Short GI, Bit4,5: Mode(0:CCK, 1:OFDM, 2:HT Mix, 3:HT GF)
++ 0x0b, 0x09, 0, 0, 0, // Initial used item after association
++ 0x00, 0x21, 0, 30, 101,
++ 0x01, 0x21, 1, 20, 50,
++ 0x02, 0x21, 2, 20, 50,
++ 0x03, 0x21, 3, 15, 50,
++ 0x04, 0x21, 4, 15, 30,
++ 0x05, 0x21, 5, 15, 30,
++ 0x06, 0x20, 12, 15, 30,
++ 0x07, 0x20, 13, 8, 20,
++ 0x08, 0x20, 14, 8, 20,
++ 0x09, 0x20, 15, 8, 25,
++ 0x0a, 0x22, 15, 8, 25,
++};
++
++UCHAR RateSwitchTable11N3SForABand[] = { // 3*3
++// Item No. Mode Curr-MCS TrainUp TrainDown // Mode- Bit0: STBC, Bit1: Short GI, Bit4,5: Mode(0:CCK, 1:OFDM, 2:HT Mix, 3:HT GF)
++ 0x0b, 0x09, 0, 0, 0, // Initial used item after association
++ 0x00, 0x21, 0, 30, 101,
++ 0x01, 0x21, 1, 20, 50,
++ 0x02, 0x21, 2, 20, 50,
++ 0x03, 0x21, 3, 15, 50,
++ 0x04, 0x21, 4, 15, 30,
++ 0x05, 0x21, 5, 15, 30,
++ 0x06, 0x20, 12, 15, 30,
++ 0x07, 0x20, 13, 8, 20,
++ 0x08, 0x20, 14, 8, 20,
++ 0x09, 0x20, 15, 8, 25,
++ 0x0a, 0x22, 15, 8, 25,
++};
++
++UCHAR RateSwitchTable11BGN1S[] = {
++// Item No. Mode Curr-MCS TrainUp TrainDown // Mode- Bit0: STBC, Bit1: Short GI, Bit4,5: Mode(0:CCK, 1:OFDM, 2:HT Mix, 3:HT GF)
++ 0x0d, 0x00, 0, 0, 0, // Initial used item after association
++ 0x00, 0x00, 0, 40, 101,
++ 0x01, 0x00, 1, 40, 50,
++ 0x02, 0x00, 2, 35, 45,
++ 0x03, 0x00, 3, 20, 45,
++ 0x04, 0x21, 0, 30,101, //50
++ 0x05, 0x21, 1, 20, 50,
++ 0x06, 0x21, 2, 20, 50,
++ 0x07, 0x21, 3, 15, 50,
++ 0x08, 0x21, 4, 15, 30,
++ 0x09, 0x21, 5, 10, 25,
++ 0x0a, 0x21, 6, 8, 14,
++ 0x0b, 0x21, 7, 8, 14,
++ 0x0c, 0x23, 7, 8, 14,
++};
++
++UCHAR RateSwitchTable11BGN2S[] = {
++// Item No. Mode Curr-MCS TrainUp TrainDown // Mode- Bit0: STBC, Bit1: Short GI, Bit4,5: Mode(0:CCK, 1:OFDM, 2:HT Mix, 3:HT GF)
++ 0x0a, 0x00, 0, 0, 0, // Initial used item after association
++ 0x00, 0x21, 0, 30,101, //50
++ 0x01, 0x21, 1, 20, 50,
++ 0x02, 0x21, 2, 20, 50,
++ 0x03, 0x21, 3, 15, 50,
++ 0x04, 0x21, 4, 15, 30,
++ 0x05, 0x20, 12, 15, 30,
++ 0x06, 0x20, 13, 8, 20,
++ 0x07, 0x20, 14, 8, 20,
++ 0x08, 0x20, 15, 8, 25,
++ 0x09, 0x22, 15, 8, 25,
++};
++
++UCHAR RateSwitchTable11BGN3S[] = { // 3*3
++// Item No. Mode Curr-MCS TrainUp TrainDown // Mode- Bit0: STBC, Bit1: Short GI, Bit4,5: Mode(0:CCK, 1:OFDM, 2:HT Mix, 3:HT GF)
++ 0x0a, 0x00, 0, 0, 0, // Initial used item after association
++ 0x00, 0x21, 0, 30,101, //50
++ 0x01, 0x21, 1, 20, 50,
++ 0x02, 0x21, 2, 20, 50,
++ 0x03, 0x21, 3, 20, 50,
++ 0x04, 0x21, 4, 15, 50,
++#if 1
++ 0x05, 0x20, 20, 15, 30,
++ 0x06, 0x20, 21, 8, 20,
++ 0x07, 0x20, 22, 8, 20,
++ 0x08, 0x20, 23, 8, 25,
++ 0x09, 0x22, 23, 8, 25,
++#else // for RT2860 2*3 test
++ 0x05, 0x20, 12, 15, 30,
++ 0x06, 0x20, 13, 8, 20,
++ 0x07, 0x20, 14, 8, 20,
++ 0x08, 0x20, 15, 8, 25,
++ 0x09, 0x22, 15, 8, 25,
++#endif
++};
++
++UCHAR RateSwitchTable11BGN2SForABand[] = {
++// Item No. Mode Curr-MCS TrainUp TrainDown // Mode- Bit0: STBC, Bit1: Short GI, Bit4,5: Mode(0:CCK, 1:OFDM, 2:HT Mix, 3:HT GF)
++ 0x0b, 0x09, 0, 0, 0, // Initial used item after association
++ 0x00, 0x21, 0, 30,101, //50
++ 0x01, 0x21, 1, 20, 50,
++ 0x02, 0x21, 2, 20, 50,
++ 0x03, 0x21, 3, 15, 50,
++ 0x04, 0x21, 4, 15, 30,
++ 0x05, 0x21, 5, 15, 30,
++ 0x06, 0x20, 12, 15, 30,
++ 0x07, 0x20, 13, 8, 20,
++ 0x08, 0x20, 14, 8, 20,
++ 0x09, 0x20, 15, 8, 25,
++ 0x0a, 0x22, 15, 8, 25,
++};
++
++UCHAR RateSwitchTable11BGN3SForABand[] = { // 3*3
++// Item No. Mode Curr-MCS TrainUp TrainDown // Mode- Bit0: STBC, Bit1: Short GI, Bit4,5: Mode(0:CCK, 1:OFDM, 2:HT Mix, 3:HT GF)
++ 0x0c, 0x09, 0, 0, 0, // Initial used item after association
++ 0x00, 0x21, 0, 30,101, //50
++ 0x01, 0x21, 1, 20, 50,
++ 0x02, 0x21, 2, 20, 50,
++ 0x03, 0x21, 3, 15, 50,
++ 0x04, 0x21, 4, 15, 30,
++ 0x05, 0x21, 5, 15, 30,
++ 0x06, 0x21, 12, 15, 30,
++ 0x07, 0x20, 20, 15, 30,
++ 0x08, 0x20, 21, 8, 20,
++ 0x09, 0x20, 22, 8, 20,
++ 0x0a, 0x20, 23, 8, 25,
++ 0x0b, 0x22, 23, 8, 25,
++};
++#endif // DOT11_N_SUPPORT //
++
++PUCHAR ReasonString[] = {
++ /* 0 */ "Reserved",
++ /* 1 */ "Unspecified Reason",
++ /* 2 */ "Previous Auth no longer valid",
++ /* 3 */ "STA is leaving / has left",
++ /* 4 */ "DIS-ASSOC due to inactivity",
++ /* 5 */ "AP unable to hanle all associations",
++ /* 6 */ "class 2 error",
++ /* 7 */ "class 3 error",
++ /* 8 */ "STA is leaving / has left",
++ /* 9 */ "require auth before assoc/re-assoc",
++ /* 10 */ "Reserved",
++ /* 11 */ "Reserved",
++ /* 12 */ "Reserved",
++ /* 13 */ "invalid IE",
++ /* 14 */ "MIC error",
++ /* 15 */ "4-way handshake timeout",
++ /* 16 */ "2-way (group key) handshake timeout",
++ /* 17 */ "4-way handshake IE diff among AssosReq/Rsp/Beacon",
++ /* 18 */
++};
++
++extern UCHAR OfdmRateToRxwiMCS[];
++// since RT61 has better RX sensibility, we have to limit TX ACK rate not to exceed our normal data TX rate.
++// otherwise the WLAN peer may not be able to receive the ACK thus downgrade its data TX rate
++ULONG BasicRateMask[12] = {0xfffff001 /* 1-Mbps */, 0xfffff003 /* 2 Mbps */, 0xfffff007 /* 5.5 */, 0xfffff00f /* 11 */,
++ 0xfffff01f /* 6 */ , 0xfffff03f /* 9 */ , 0xfffff07f /* 12 */ , 0xfffff0ff /* 18 */,
++ 0xfffff1ff /* 24 */ , 0xfffff3ff /* 36 */ , 0xfffff7ff /* 48 */ , 0xffffffff /* 54 */};
++
++UCHAR MULTICAST_ADDR[MAC_ADDR_LEN] = {0x1, 0x00, 0x00, 0x00, 0x00, 0x00};
++UCHAR BROADCAST_ADDR[MAC_ADDR_LEN] = {0xff, 0xff, 0xff, 0xff, 0xff, 0xff};
++UCHAR ZERO_MAC_ADDR[MAC_ADDR_LEN] = {0x00, 0x00, 0x00, 0x00, 0x00, 0x00};
++
++// e.g. RssiSafeLevelForTxRate[RATE_36]" means if the current RSSI is greater than
++// this value, then it's quaranteed capable of operating in 36 mbps TX rate in
++// clean environment.
++// TxRate: 1 2 5.5 11 6 9 12 18 24 36 48 54 72 100
++CHAR RssiSafeLevelForTxRate[] ={ -92, -91, -90, -87, -88, -86, -85, -83, -81, -78, -72, -71, -40, -40 };
++
++UCHAR RateIdToMbps[] = { 1, 2, 5, 11, 6, 9, 12, 18, 24, 36, 48, 54, 72, 100};
++USHORT RateIdTo500Kbps[] = { 2, 4, 11, 22, 12, 18, 24, 36, 48, 72, 96, 108, 144, 200};
++
++UCHAR SsidIe = IE_SSID;
++UCHAR SupRateIe = IE_SUPP_RATES;
++UCHAR ExtRateIe = IE_EXT_SUPP_RATES;
++#ifdef DOT11_N_SUPPORT
++UCHAR HtCapIe = IE_HT_CAP;
++UCHAR AddHtInfoIe = IE_ADD_HT;
++UCHAR NewExtChanIe = IE_SECONDARY_CH_OFFSET;
++#ifdef DOT11N_DRAFT3
++UCHAR ExtHtCapIe = IE_EXT_CAPABILITY;
++#endif // DOT11N_DRAFT3 //
++#endif // DOT11_N_SUPPORT //
++UCHAR ErpIe = IE_ERP;
++UCHAR DsIe = IE_DS_PARM;
++UCHAR TimIe = IE_TIM;
++UCHAR WpaIe = IE_WPA;
++UCHAR Wpa2Ie = IE_WPA2;
++UCHAR IbssIe = IE_IBSS_PARM;
++UCHAR Ccx2Ie = IE_CCX_V2;
++UCHAR WapiIe = IE_WAPI;
++
++extern UCHAR WPA_OUI[];
++
++UCHAR SES_OUI[] = {0x00, 0x90, 0x4c};
++
++UCHAR ZeroSsid[32] = {0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,
++ 0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x00};
++
++// Reset the RFIC setting to new series
++RTMP_RF_REGS RF2850RegTable[] = {
++// ch R1 R2 R3(TX0~4=0) R4
++ {1, 0x98402ecc, 0x984c0786, 0x9816b455, 0x9800510b},
++ {2, 0x98402ecc, 0x984c0786, 0x98168a55, 0x9800519f},
++ {3, 0x98402ecc, 0x984c078a, 0x98168a55, 0x9800518b},
++ {4, 0x98402ecc, 0x984c078a, 0x98168a55, 0x9800519f},
++ {5, 0x98402ecc, 0x984c078e, 0x98168a55, 0x9800518b},
++ {6, 0x98402ecc, 0x984c078e, 0x98168a55, 0x9800519f},
++ {7, 0x98402ecc, 0x984c0792, 0x98168a55, 0x9800518b},
++ {8, 0x98402ecc, 0x984c0792, 0x98168a55, 0x9800519f},
++ {9, 0x98402ecc, 0x984c0796, 0x98168a55, 0x9800518b},
++ {10, 0x98402ecc, 0x984c0796, 0x98168a55, 0x9800519f},
++ {11, 0x98402ecc, 0x984c079a, 0x98168a55, 0x9800518b},
++ {12, 0x98402ecc, 0x984c079a, 0x98168a55, 0x9800519f},
++ {13, 0x98402ecc, 0x984c079e, 0x98168a55, 0x9800518b},
++ {14, 0x98402ecc, 0x984c07a2, 0x98168a55, 0x98005193},
++
++ // 802.11 UNI / HyperLan 2
++ {36, 0x98402ecc, 0x984c099a, 0x98158a55, 0x980ed1a3},
++ {38, 0x98402ecc, 0x984c099e, 0x98158a55, 0x980ed193},
++ {40, 0x98402ec8, 0x984c0682, 0x98158a55, 0x980ed183},
++ {44, 0x98402ec8, 0x984c0682, 0x98158a55, 0x980ed1a3},
++ {46, 0x98402ec8, 0x984c0686, 0x98158a55, 0x980ed18b},
++ {48, 0x98402ec8, 0x984c0686, 0x98158a55, 0x980ed19b},
++ {52, 0x98402ec8, 0x984c068a, 0x98158a55, 0x980ed193},
++ {54, 0x98402ec8, 0x984c068a, 0x98158a55, 0x980ed1a3},
++ {56, 0x98402ec8, 0x984c068e, 0x98158a55, 0x980ed18b},
++ {60, 0x98402ec8, 0x984c0692, 0x98158a55, 0x980ed183},
++ {62, 0x98402ec8, 0x984c0692, 0x98158a55, 0x980ed193},
++ {64, 0x98402ec8, 0x984c0692, 0x98158a55, 0x980ed1a3}, // Plugfest#4, Day4, change RFR3 left4th 9->5.
++
++ // 802.11 HyperLan 2
++ {100, 0x98402ec8, 0x984c06b2, 0x98178a55, 0x980ed783},
++
++ // 2008.04.30 modified
++ // The system team has AN to improve the EVM value
++ // for channel 102 to 108 for the RT2850/RT2750 dual band solution.
++ {102, 0x98402ec8, 0x985c06b2, 0x98578a55, 0x980ed793},
++ {104, 0x98402ec8, 0x985c06b2, 0x98578a55, 0x980ed1a3},
++ {108, 0x98402ecc, 0x985c0a32, 0x98578a55, 0x980ed193},
++
++ {110, 0x98402ecc, 0x984c0a36, 0x98178a55, 0x980ed183},
++ {112, 0x98402ecc, 0x984c0a36, 0x98178a55, 0x980ed19b},
++ {116, 0x98402ecc, 0x984c0a3a, 0x98178a55, 0x980ed1a3},
++ {118, 0x98402ecc, 0x984c0a3e, 0x98178a55, 0x980ed193},
++ {120, 0x98402ec4, 0x984c0382, 0x98178a55, 0x980ed183},
++ {124, 0x98402ec4, 0x984c0382, 0x98178a55, 0x980ed193},
++ {126, 0x98402ec4, 0x984c0382, 0x98178a55, 0x980ed15b}, // 0x980ed1bb->0x980ed15b required by Rory 20070927
++ {128, 0x98402ec4, 0x984c0382, 0x98178a55, 0x980ed1a3},
++ {132, 0x98402ec4, 0x984c0386, 0x98178a55, 0x980ed18b},
++ {134, 0x98402ec4, 0x984c0386, 0x98178a55, 0x980ed193},
++ {136, 0x98402ec4, 0x984c0386, 0x98178a55, 0x980ed19b},
++ {140, 0x98402ec4, 0x984c038a, 0x98178a55, 0x980ed183},
++
++ // 802.11 UNII
++ {149, 0x98402ec4, 0x984c038a, 0x98178a55, 0x980ed1a7},
++ {151, 0x98402ec4, 0x984c038e, 0x98178a55, 0x980ed187},
++ {153, 0x98402ec4, 0x984c038e, 0x98178a55, 0x980ed18f},
++ {157, 0x98402ec4, 0x984c038e, 0x98178a55, 0x980ed19f},
++ {159, 0x98402ec4, 0x984c038e, 0x98178a55, 0x980ed1a7},
++ {161, 0x98402ec4, 0x984c0392, 0x98178a55, 0x980ed187},
++ {165, 0x98402ec4, 0x984c0392, 0x98178a55, 0x980ed197},
++
++ // Japan
++ {184, 0x95002ccc, 0x9500491e, 0x9509be55, 0x950c0a0b},
++ {188, 0x95002ccc, 0x95004922, 0x9509be55, 0x950c0a13},
++ {192, 0x95002ccc, 0x95004926, 0x9509be55, 0x950c0a1b},
++ {196, 0x95002ccc, 0x9500492a, 0x9509be55, 0x950c0a23},
++ {208, 0x95002ccc, 0x9500493a, 0x9509be55, 0x950c0a13},
++ {212, 0x95002ccc, 0x9500493e, 0x9509be55, 0x950c0a1b},
++ {216, 0x95002ccc, 0x95004982, 0x9509be55, 0x950c0a23},
++
++ // still lack of MMAC(Japan) ch 34,38,42,46
++};
++UCHAR NUM_OF_2850_CHNL = (sizeof(RF2850RegTable) / sizeof(RTMP_RF_REGS));
++
++FREQUENCY_ITEM FreqItems3020[] =
++{
++ /**************************************************/
++ // ISM : 2.4 to 2.483 GHz //
++ /**************************************************/
++ // 11g
++ /**************************************************/
++ //-CH---N-------R---K-----------
++ {1, 241, 2, 2},
++ {2, 241, 2, 7},
++ {3, 242, 2, 2},
++ {4, 242, 2, 7},
++ {5, 243, 2, 2},
++ {6, 243, 2, 7},
++ {7, 244, 2, 2},
++ {8, 244, 2, 7},
++ {9, 245, 2, 2},
++ {10, 245, 2, 7},
++ {11, 246, 2, 2},
++ {12, 246, 2, 7},
++ {13, 247, 2, 2},
++ {14, 248, 2, 4},
++};
++#define NUM_OF_3020_CHNL (sizeof(FreqItems3020) / sizeof(FREQUENCY_ITEM))
++
++/*
++ ==========================================================================
++ Description:
++ initialize the MLME task and its data structure (queue, spinlock,
++ timer, state machines).
++
++ IRQL = PASSIVE_LEVEL
++
++ Return:
++ always return NDIS_STATUS_SUCCESS
++
++ ==========================================================================
++*/
++NDIS_STATUS MlmeInit(
++ IN PRTMP_ADAPTER pAd)
++{
++ NDIS_STATUS Status = NDIS_STATUS_SUCCESS;
++
++ DBGPRINT(RT_DEBUG_TRACE, ("--> MLME Initialize\n"));
++
++ do
++ {
++ Status = MlmeQueueInit(&pAd->Mlme.Queue);
++ if(Status != NDIS_STATUS_SUCCESS)
++ break;
++
++ pAd->Mlme.bRunning = FALSE;
++ NdisAllocateSpinLock(&pAd->Mlme.TaskLock);
++
++#ifdef CONFIG_STA_SUPPORT
++ IF_DEV_CONFIG_OPMODE_ON_STA(pAd)
++ {
++ BssTableInit(&pAd->ScanTab);
++
++ // init STA state machines
++ AssocStateMachineInit(pAd, &pAd->Mlme.AssocMachine, pAd->Mlme.AssocFunc);
++ AuthStateMachineInit(pAd, &pAd->Mlme.AuthMachine, pAd->Mlme.AuthFunc);
++ AuthRspStateMachineInit(pAd, &pAd->Mlme.AuthRspMachine, pAd->Mlme.AuthRspFunc);
++ SyncStateMachineInit(pAd, &pAd->Mlme.SyncMachine, pAd->Mlme.SyncFunc);
++ WpaPskStateMachineInit(pAd, &pAd->Mlme.WpaPskMachine, pAd->Mlme.WpaPskFunc);
++ AironetStateMachineInit(pAd, &pAd->Mlme.AironetMachine, pAd->Mlme.AironetFunc);
++
++#ifdef QOS_DLS_SUPPORT
++ DlsStateMachineInit(pAd, &pAd->Mlme.DlsMachine, pAd->Mlme.DlsFunc);
++#endif // QOS_DLS_SUPPORT //
++
++
++ // Since we are using switch/case to implement it, the init is different from the above
++ // state machine init
++ MlmeCntlInit(pAd, &pAd->Mlme.CntlMachine, NULL);
++ }
++#endif // CONFIG_STA_SUPPORT //
++
++
++
++ ActionStateMachineInit(pAd, &pAd->Mlme.ActMachine, pAd->Mlme.ActFunc);
++
++ // Init mlme periodic timer
++ RTMPInitTimer(pAd, &pAd->Mlme.PeriodicTimer, GET_TIMER_FUNCTION(MlmePeriodicExec), pAd, TRUE);
++
++ // Set mlme periodic timer
++ RTMPSetTimer(&pAd->Mlme.PeriodicTimer, MLME_TASK_EXEC_INTV);
++
++ // software-based RX Antenna diversity
++ RTMPInitTimer(pAd, &pAd->Mlme.RxAntEvalTimer, GET_TIMER_FUNCTION(AsicRxAntEvalTimeout), pAd, FALSE);
++
++ } while (FALSE);
++
++ DBGPRINT(RT_DEBUG_TRACE, ("<-- MLME Initialize\n"));
++
++ return Status;
++}
++
++/*
++ ==========================================================================
++ Description:
++ main loop of the MLME
++ Pre:
++ Mlme has to be initialized, and there are something inside the queue
++ Note:
++ This function is invoked from MPSetInformation and MPReceive;
++ This task guarantee only one MlmeHandler will run.
++
++ IRQL = DISPATCH_LEVEL
++
++ ==========================================================================
++ */
++VOID MlmeHandler(
++ IN PRTMP_ADAPTER pAd)
++{
++ MLME_QUEUE_ELEM *Elem = NULL;
++#ifdef APCLI_SUPPORT
++ SHORT apcliIfIndex;
++#endif
++
++ // Only accept MLME and Frame from peer side, no other (control/data) frame should
++ // get into this state machine
++
++ NdisAcquireSpinLock(&pAd->Mlme.TaskLock);
++ if(pAd->Mlme.bRunning)
++ {
++ NdisReleaseSpinLock(&pAd->Mlme.TaskLock);
++ return;
++ }
++ else
++ {
++ pAd->Mlme.bRunning = TRUE;
++ }
++ NdisReleaseSpinLock(&pAd->Mlme.TaskLock);
++
++ while (!MlmeQueueEmpty(&pAd->Mlme.Queue))
++ {
++ if (RTMP_TEST_FLAG(pAd, fRTMP_ADAPTER_MLME_RESET_IN_PROGRESS) ||
++ RTMP_TEST_FLAG(pAd, fRTMP_ADAPTER_HALT_IN_PROGRESS) ||
++ RTMP_TEST_FLAG(pAd, fRTMP_ADAPTER_NIC_NOT_EXIST))
++ {
++ DBGPRINT(RT_DEBUG_TRACE, ("Device Halted or Removed or MlmeRest, exit MlmeHandler! (queue num = %ld)\n", pAd->Mlme.Queue.Num));
++ break;
++ }
++
++#ifdef RALINK_ATE
++ if(ATE_ON(pAd))
++ {
++ DBGPRINT(RT_DEBUG_TRACE, ("The driver is in ATE mode now in MlmeHandler\n"));
++ break;
++ }
++#endif // RALINK_ATE //
++
++ //From message type, determine which state machine I should drive
++ if (MlmeDequeue(&pAd->Mlme.Queue, &Elem))
++ {
++#ifdef RT2870
++ if (Elem->MsgType == MT2_RESET_CONF)
++ {
++ DBGPRINT_RAW(RT_DEBUG_TRACE, ("!!! reset MLME state machine !!!\n"));
++ MlmeRestartStateMachine(pAd);
++ Elem->Occupied = FALSE;
++ Elem->MsgLen = 0;
++ continue;
++ }
++#endif // RT2870 //
++
++ // if dequeue success
++ switch (Elem->Machine)
++ {
++ // STA state machines
++#ifdef CONFIG_STA_SUPPORT
++ case ASSOC_STATE_MACHINE:
++ StateMachinePerformAction(pAd, &pAd->Mlme.AssocMachine, Elem);
++ break;
++ case AUTH_STATE_MACHINE:
++ StateMachinePerformAction(pAd, &pAd->Mlme.AuthMachine, Elem);
++ break;
++ case AUTH_RSP_STATE_MACHINE:
++ StateMachinePerformAction(pAd, &pAd->Mlme.AuthRspMachine, Elem);
++ break;
++ case SYNC_STATE_MACHINE:
++ StateMachinePerformAction(pAd, &pAd->Mlme.SyncMachine, Elem);
++ break;
++ case MLME_CNTL_STATE_MACHINE:
++ MlmeCntlMachinePerformAction(pAd, &pAd->Mlme.CntlMachine, Elem);
++ break;
++ case WPA_PSK_STATE_MACHINE:
++ StateMachinePerformAction(pAd, &pAd->Mlme.WpaPskMachine, Elem);
++ break;
++#ifdef LEAP_SUPPORT
++ case LEAP_STATE_MACHINE:
++ LeapMachinePerformAction(pAd, &pAd->Mlme.LeapMachine, Elem);
++ break;
++#endif
++ case AIRONET_STATE_MACHINE:
++ StateMachinePerformAction(pAd, &pAd->Mlme.AironetMachine, Elem);
++ break;
++
++#ifdef QOS_DLS_SUPPORT
++ case DLS_STATE_MACHINE:
++ StateMachinePerformAction(pAd, &pAd->Mlme.DlsMachine, Elem);
++ break;
++#endif // QOS_DLS_SUPPORT //
++#endif // CONFIG_STA_SUPPORT //
++
++ case ACTION_STATE_MACHINE:
++ StateMachinePerformAction(pAd, &pAd->Mlme.ActMachine, Elem);
++ break;
++
++
++
++
++ default:
++ DBGPRINT(RT_DEBUG_TRACE, ("ERROR: Illegal machine %ld in MlmeHandler()\n", Elem->Machine));
++ break;
++ } // end of switch
++
++ // free MLME element
++ Elem->Occupied = FALSE;
++ Elem->MsgLen = 0;
++
++ }
++ else {
++ DBGPRINT_ERR(("MlmeHandler: MlmeQueue empty\n"));
++ }
++ }
++
++ NdisAcquireSpinLock(&pAd->Mlme.TaskLock);
++ pAd->Mlme.bRunning = FALSE;
++ NdisReleaseSpinLock(&pAd->Mlme.TaskLock);
++}
++
++/*
++ ==========================================================================
++ Description:
++ Destructor of MLME (Destroy queue, state machine, spin lock and timer)
++ Parameters:
++ Adapter - NIC Adapter pointer
++ Post:
++ The MLME task will no longer work properly
++
++ IRQL = PASSIVE_LEVEL
++
++ ==========================================================================
++ */
++VOID MlmeHalt(
++ IN PRTMP_ADAPTER pAd)
++{
++ BOOLEAN Cancelled;
++
++ DBGPRINT(RT_DEBUG_TRACE, ("==> MlmeHalt\n"));
++
++ if (!RTMP_TEST_FLAG(pAd, fRTMP_ADAPTER_NIC_NOT_EXIST))
++ {
++ // disable BEACON generation and other BEACON related hardware timers
++ AsicDisableSync(pAd);
++ }
++
++#ifdef CONFIG_STA_SUPPORT
++ IF_DEV_CONFIG_OPMODE_ON_STA(pAd)
++ {
++#ifdef QOS_DLS_SUPPORT
++ UCHAR i;
++#endif // QOS_DLS_SUPPORT //
++ // Cancel pending timers
++ RTMPCancelTimer(&pAd->MlmeAux.AssocTimer, &Cancelled);
++ RTMPCancelTimer(&pAd->MlmeAux.ReassocTimer, &Cancelled);
++ RTMPCancelTimer(&pAd->MlmeAux.DisassocTimer, &Cancelled);
++ RTMPCancelTimer(&pAd->MlmeAux.AuthTimer, &Cancelled);
++ RTMPCancelTimer(&pAd->MlmeAux.BeaconTimer, &Cancelled);
++ RTMPCancelTimer(&pAd->MlmeAux.ScanTimer, &Cancelled);
++
++#ifdef QOS_DLS_SUPPORT
++ for (i=0; i<MAX_NUM_OF_DLS_ENTRY; i++)
++ {
++ RTMPCancelTimer(&pAd->StaCfg.DLSEntry[i].Timer, &Cancelled);
++ }
++#endif // QOS_DLS_SUPPORT //
++ }
++#endif // CONFIG_STA_SUPPORT //
++
++ RTMPCancelTimer(&pAd->Mlme.PeriodicTimer, &Cancelled);
++ RTMPCancelTimer(&pAd->Mlme.RxAntEvalTimer, &Cancelled);
++
++
++
++ if (!RTMP_TEST_FLAG(pAd, fRTMP_ADAPTER_NIC_NOT_EXIST))
++ {
++ // Set LED
++ RTMPSetLED(pAd, LED_HALT);
++ RTMPSetSignalLED(pAd, -100); // Force signal strength Led to be turned off, firmware is not done it.
++#ifdef RT2870
++ {
++ LED_CFG_STRUC LedCfg;
++ RTMP_IO_READ32(pAd, LED_CFG, &LedCfg.word);
++ LedCfg.field.LedPolar = 0;
++ LedCfg.field.RLedMode = 0;
++ LedCfg.field.GLedMode = 0;
++ LedCfg.field.YLedMode = 0;
++ RTMP_IO_WRITE32(pAd, LED_CFG, LedCfg.word);
++ }
++#endif // RT2870 //
++ }
++
++ RTMPusecDelay(5000); // 5 msec to gurantee Ant Diversity timer canceled
++
++ MlmeQueueDestroy(&pAd->Mlme.Queue);
++ NdisFreeSpinLock(&pAd->Mlme.TaskLock);
++
++ DBGPRINT(RT_DEBUG_TRACE, ("<== MlmeHalt\n"));
++}
++
++VOID MlmeResetRalinkCounters(
++ IN PRTMP_ADAPTER pAd)
++{
++ pAd->RalinkCounters.LastOneSecRxOkDataCnt = pAd->RalinkCounters.OneSecRxOkDataCnt;
++ // clear all OneSecxxx counters.
++ pAd->RalinkCounters.OneSecBeaconSentCnt = 0;
++ pAd->RalinkCounters.OneSecFalseCCACnt = 0;
++ pAd->RalinkCounters.OneSecRxFcsErrCnt = 0;
++ pAd->RalinkCounters.OneSecRxOkCnt = 0;
++ pAd->RalinkCounters.OneSecTxFailCount = 0;
++ pAd->RalinkCounters.OneSecTxNoRetryOkCount = 0;
++ pAd->RalinkCounters.OneSecTxRetryOkCount = 0;
++ pAd->RalinkCounters.OneSecRxOkDataCnt = 0;
++
++ // TODO: for debug only. to be removed
++ pAd->RalinkCounters.OneSecOsTxCount[QID_AC_BE] = 0;
++ pAd->RalinkCounters.OneSecOsTxCount[QID_AC_BK] = 0;
++ pAd->RalinkCounters.OneSecOsTxCount[QID_AC_VI] = 0;
++ pAd->RalinkCounters.OneSecOsTxCount[QID_AC_VO] = 0;
++ pAd->RalinkCounters.OneSecDmaDoneCount[QID_AC_BE] = 0;
++ pAd->RalinkCounters.OneSecDmaDoneCount[QID_AC_BK] = 0;
++ pAd->RalinkCounters.OneSecDmaDoneCount[QID_AC_VI] = 0;
++ pAd->RalinkCounters.OneSecDmaDoneCount[QID_AC_VO] = 0;
++ pAd->RalinkCounters.OneSecTxDoneCount = 0;
++ pAd->RalinkCounters.OneSecRxCount = 0;
++ pAd->RalinkCounters.OneSecTxAggregationCount = 0;
++ pAd->RalinkCounters.OneSecRxAggregationCount = 0;
++
++ return;
++}
++
++unsigned long rx_AMSDU;
++unsigned long rx_Total;
++
++/*
++ ==========================================================================
++ Description:
++ This routine is executed periodically to -
++ 1. Decide if it's a right time to turn on PwrMgmt bit of all
++ outgoiing frames
++ 2. Calculate ChannelQuality based on statistics of the last
++ period, so that TX rate won't toggling very frequently between a
++ successful TX and a failed TX.
++ 3. If the calculated ChannelQuality indicated current connection not
++ healthy, then a ROAMing attempt is tried here.
++
++ IRQL = DISPATCH_LEVEL
++
++ ==========================================================================
++ */
++#define ADHOC_BEACON_LOST_TIME (8*OS_HZ) // 8 sec
++VOID MlmePeriodicExec(
++ IN PVOID SystemSpecific1,
++ IN PVOID FunctionContext,
++ IN PVOID SystemSpecific2,
++ IN PVOID SystemSpecific3)
++{
++ ULONG TxTotalCnt;
++ PRTMP_ADAPTER pAd = (RTMP_ADAPTER *)FunctionContext;
++
++ // Do nothing if the driver is starting halt state.
++ // This might happen when timer already been fired before cancel timer with mlmehalt
++ if ((RTMP_TEST_FLAG(pAd, (fRTMP_ADAPTER_HALT_IN_PROGRESS |
++ fRTMP_ADAPTER_RADIO_OFF |
++ fRTMP_ADAPTER_RADIO_MEASUREMENT |
++ fRTMP_ADAPTER_RESET_IN_PROGRESS))))
++ return;
++
++ RT28XX_MLME_PRE_SANITY_CHECK(pAd);
++
++#ifdef RALINK_ATE
++ /* Do not show RSSI until "Normal 1 second Mlme PeriodicExec". */
++ if (ATE_ON(pAd))
++ {
++ if (pAd->Mlme.PeriodicRound % MLME_TASK_EXEC_MULTIPLE != (MLME_TASK_EXEC_MULTIPLE - 1))
++ {
++ pAd->Mlme.PeriodicRound ++;
++ return;
++ }
++ }
++#endif // RALINK_ATE //
++
++#ifdef CONFIG_STA_SUPPORT
++ IF_DEV_CONFIG_OPMODE_ON_STA(pAd)
++ {
++ // Do nothing if monitor mode is on
++ if (MONITOR_ON(pAd))
++ return;
++
++ if (pAd->Mlme.PeriodicRound & 0x1)
++ {
++ // This is the fix for wifi 11n extension channel overlapping test case. for 2860D
++ if (((pAd->MACVersion & 0xffff) == 0x0101) &&
++ (STA_TGN_WIFI_ON(pAd)) &&
++ (pAd->CommonCfg.IOTestParm.bToggle == FALSE))
++
++ {
++ RTMP_IO_WRITE32(pAd, TXOP_CTRL_CFG, 0x24Bf);
++ pAd->CommonCfg.IOTestParm.bToggle = TRUE;
++ }
++ else if ((STA_TGN_WIFI_ON(pAd)) &&
++ ((pAd->MACVersion & 0xffff) == 0x0101))
++ {
++ RTMP_IO_WRITE32(pAd, TXOP_CTRL_CFG, 0x243f);
++ pAd->CommonCfg.IOTestParm.bToggle = FALSE;
++ }
++ }
++ }
++#endif // CONFIG_STA_SUPPORT //
++
++ pAd->bUpdateBcnCntDone = FALSE;
++
++// RECBATimerTimeout(SystemSpecific1,FunctionContext,SystemSpecific2,SystemSpecific3);
++ pAd->Mlme.PeriodicRound ++;
++
++ // execute every 500ms
++ if ((pAd->Mlme.PeriodicRound % 5 == 0) && RTMPAutoRateSwitchCheck(pAd)/*(OPSTATUS_TEST_FLAG(pAd, fOP_STATUS_TX_RATE_SWITCH_ENABLED))*/)
++ {
++#ifdef CONFIG_STA_SUPPORT
++ // perform dynamic tx rate switching based on past TX history
++ IF_DEV_CONFIG_OPMODE_ON_STA(pAd)
++ {
++ if ((OPSTATUS_TEST_FLAG(pAd, fOP_STATUS_MEDIA_STATE_CONNECTED)
++ )
++ && (!OPSTATUS_TEST_FLAG(pAd, fOP_STATUS_DOZE)))
++ MlmeDynamicTxRateSwitching(pAd);
++ }
++#endif // CONFIG_STA_SUPPORT //
++ }
++
++ // Normal 1 second Mlme PeriodicExec.
++ if (pAd->Mlme.PeriodicRound %MLME_TASK_EXEC_MULTIPLE == 0)
++ {
++ pAd->Mlme.OneSecPeriodicRound ++;
++
++#ifdef RALINK_ATE
++ if (ATE_ON(pAd))
++ {
++ /* request from Baron : move this routine from later to here */
++ /* for showing Rx error count in ATE RXFRAME */
++ NICUpdateRawCounters(pAd);
++ if (pAd->ate.bRxFer == 1)
++ {
++ pAd->ate.RxTotalCnt += pAd->ate.RxCntPerSec;
++ ate_print(KERN_EMERG "MlmePeriodicExec: Rx packet cnt = %d/%d\n", pAd->ate.RxCntPerSec, pAd->ate.RxTotalCnt);
++ pAd->ate.RxCntPerSec = 0;
++
++ if (pAd->ate.RxAntennaSel == 0)
++ ate_print(KERN_EMERG "MlmePeriodicExec: Rx AvgRssi0=%d, AvgRssi1=%d, AvgRssi2=%d\n\n",
++ pAd->ate.AvgRssi0, pAd->ate.AvgRssi1, pAd->ate.AvgRssi2);
++ else
++ ate_print(KERN_EMERG "MlmePeriodicExec: Rx AvgRssi=%d\n\n", pAd->ate.AvgRssi0);
++ }
++ MlmeResetRalinkCounters(pAd);
++ return;
++ }
++#endif // RALINK_ATE //
++
++
++ if (rx_Total)
++ {
++
++ // reset counters
++ rx_AMSDU = 0;
++ rx_Total = 0;
++ }
++
++ //ORIBATimerTimeout(pAd);
++
++ // Media status changed, report to NDIS
++ if (RTMP_TEST_FLAG(pAd, fRTMP_ADAPTER_MEDIA_STATE_CHANGE))
++ {
++ RTMP_CLEAR_FLAG(pAd, fRTMP_ADAPTER_MEDIA_STATE_CHANGE);
++ if (OPSTATUS_TEST_FLAG(pAd, fOP_STATUS_MEDIA_STATE_CONNECTED))
++ {
++ pAd->IndicateMediaState = NdisMediaStateConnected;
++ RTMP_IndicateMediaState(pAd);
++
++ }
++ else
++ {
++ pAd->IndicateMediaState = NdisMediaStateDisconnected;
++ RTMP_IndicateMediaState(pAd);
++ }
++ }
++
++ NdisGetSystemUpTime(&pAd->Mlme.Now32);
++
++ // add the most up-to-date h/w raw counters into software variable, so that
++ // the dynamic tuning mechanism below are based on most up-to-date information
++ NICUpdateRawCounters(pAd);
++
++#ifdef RT2870
++ RT2870_WatchDog(pAd);
++#endif // RT2870 //
++
++#ifdef DOT11_N_SUPPORT
++ // Need statistics after read counter. So put after NICUpdateRawCounters
++ ORIBATimerTimeout(pAd);
++#endif // DOT11_N_SUPPORT //
++
++ // if MGMT RING is full more than twice within 1 second, we consider there's
++ // a hardware problem stucking the TX path. In this case, try a hardware reset
++ // to recover the system
++ // if (pAd->RalinkCounters.MgmtRingFullCount >= 2)
++ // RTMP_SET_FLAG(pAd, fRTMP_ADAPTER_HARDWARE_ERROR);
++ // else
++ // pAd->RalinkCounters.MgmtRingFullCount = 0;
++
++ // The time period for checking antenna is according to traffic
++ if (pAd->Mlme.bEnableAutoAntennaCheck)
++ {
++ TxTotalCnt = pAd->RalinkCounters.OneSecTxNoRetryOkCount +
++ pAd->RalinkCounters.OneSecTxRetryOkCount +
++ pAd->RalinkCounters.OneSecTxFailCount;
++
++ if (TxTotalCnt > 50)
++ {
++ if (pAd->Mlme.OneSecPeriodicRound % 10 == 0)
++ {
++ AsicEvaluateRxAnt(pAd);
++ }
++ }
++ else
++ {
++ if (pAd->Mlme.OneSecPeriodicRound % 3 == 0)
++ {
++ AsicEvaluateRxAnt(pAd);
++ }
++ }
++ }
++
++#ifdef CONFIG_STA_SUPPORT
++ IF_DEV_CONFIG_OPMODE_ON_STA(pAd)
++ STAMlmePeriodicExec(pAd);
++#endif // CONFIG_STA_SUPPORT //
++
++ MlmeResetRalinkCounters(pAd);
++
++#ifdef CONFIG_STA_SUPPORT
++ IF_DEV_CONFIG_OPMODE_ON_STA(pAd)
++ {
++ {
++ // When Adhoc beacon is enabled and RTS/CTS is enabled, there is a chance that hardware MAC FSM will run into a deadlock
++ // and sending CTS-to-self over and over.
++ // Software Patch Solution:
++ // 1. Polling debug state register 0x10F4 every one second.
++ // 2. If in 0x10F4 the ((bit29==1) && (bit7==1)) OR ((bit29==1) && (bit5==1)), it means the deadlock has occurred.
++ // 3. If the deadlock occurred, reset MAC/BBP by setting 0x1004 to 0x0001 for a while then setting it back to 0x000C again.
++
++ UINT32 MacReg = 0;
++
++ RTMP_IO_READ32(pAd, 0x10F4, &MacReg);
++ if (((MacReg & 0x20000000) && (MacReg & 0x80)) || ((MacReg & 0x20000000) && (MacReg & 0x20)))
++ {
++ RTMP_IO_WRITE32(pAd, MAC_SYS_CTRL, 0x1);
++ RTMPusecDelay(1);
++ RTMP_IO_WRITE32(pAd, MAC_SYS_CTRL, 0xC);
++
++ DBGPRINT(RT_DEBUG_WARN,("Warning, MAC specific condition occurs \n"));
++ }
++ }
++ }
++#endif // CONFIG_STA_SUPPORT //
++
++ RT28XX_MLME_HANDLER(pAd);
++ }
++
++
++ pAd->bUpdateBcnCntDone = FALSE;
++}
++
++#ifdef CONFIG_STA_SUPPORT
++VOID STAMlmePeriodicExec(
++ PRTMP_ADAPTER pAd)
++{
++ ULONG TxTotalCnt;
++ int i;
++
++//
++// We return here in ATE mode, because the statistics
++// that ATE needs are not collected via this routine.
++//
++#ifdef RALINK_ATE
++ // It is supposed that we will never reach here in ATE mode.
++ ASSERT(!(ATE_ON(pAd)));
++ if (ATE_ON(pAd))
++ return;
++#endif // RALINK_ATE //
++
++#ifdef WPA_SUPPLICANT_SUPPORT
++ if (pAd->StaCfg.WpaSupplicantUP == WPA_SUPPLICANT_DISABLE)
++#endif // WPA_SUPPLICANT_SUPPORT //
++ {
++ // WPA MIC error should block association attempt for 60 seconds
++ if (pAd->StaCfg.bBlockAssoc && (pAd->StaCfg.LastMicErrorTime + (60 * OS_HZ) < pAd->Mlme.Now32))
++ pAd->StaCfg.bBlockAssoc = FALSE;
++ }
++
++ if ((pAd->PreMediaState != pAd->IndicateMediaState) && (pAd->CommonCfg.bWirelessEvent))
++ {
++ if (pAd->IndicateMediaState == NdisMediaStateConnected)
++ {
++ RTMPSendWirelessEvent(pAd, IW_STA_LINKUP_EVENT_FLAG, pAd->MacTab.Content[BSSID_WCID].Addr, BSS0, 0);
++ }
++ pAd->PreMediaState = pAd->IndicateMediaState;
++ }
++
++
++
++
++ AsicStaBbpTuning(pAd);
++
++ TxTotalCnt = pAd->RalinkCounters.OneSecTxNoRetryOkCount +
++ pAd->RalinkCounters.OneSecTxRetryOkCount +
++ pAd->RalinkCounters.OneSecTxFailCount;
++
++ if (OPSTATUS_TEST_FLAG(pAd, fOP_STATUS_MEDIA_STATE_CONNECTED))
++ {
++ // update channel quality for Roaming and UI LinkQuality display
++ MlmeCalculateChannelQuality(pAd, pAd->Mlme.Now32);
++ }
++
++ // must be AFTER MlmeDynamicTxRateSwitching() because it needs to know if
++ // Radio is currently in noisy environment
++ if (!RTMP_TEST_FLAG(pAd, fRTMP_ADAPTER_BSS_SCAN_IN_PROGRESS))
++ AsicAdjustTxPower(pAd);
++
++ if (INFRA_ON(pAd))
++ {
++#ifdef QOS_DLS_SUPPORT
++ // Check DLS time out, then tear down those session
++ RTMPCheckDLSTimeOut(pAd);
++#endif // QOS_DLS_SUPPORT //
++
++ // Is PSM bit consistent with user power management policy?
++ // This is the only place that will set PSM bit ON.
++ if (!OPSTATUS_TEST_FLAG(pAd, fOP_STATUS_DOZE))
++ MlmeCheckPsmChange(pAd, pAd->Mlme.Now32);
++
++ pAd->RalinkCounters.LastOneSecTotalTxCount = TxTotalCnt;
++
++ if ((pAd->StaCfg.LastBeaconRxTime + 1*OS_HZ < pAd->Mlme.Now32) &&
++ (!RTMP_TEST_FLAG(pAd, fRTMP_ADAPTER_BSS_SCAN_IN_PROGRESS)) &&
++ ((TxTotalCnt + pAd->RalinkCounters.OneSecRxOkCnt < 600)))
++ {
++ RTMPSetAGCInitValue(pAd, BW_20);
++ DBGPRINT(RT_DEBUG_TRACE, ("MMCHK - No BEACON. restore R66 to the low bound(%d) \n", (0x2E + GET_LNA_GAIN(pAd))));
++ }
++
++ //if ((pAd->RalinkCounters.OneSecTxNoRetryOkCount == 0) &&
++ // (pAd->RalinkCounters.OneSecTxRetryOkCount == 0))
++ {
++ if (pAd->CommonCfg.bAPSDCapable && pAd->CommonCfg.APEdcaParm.bAPSDCapable)
++ {
++ // When APSD is enabled, the period changes as 20 sec
++ if ((pAd->Mlme.OneSecPeriodicRound % 20) == 8)
++ RTMPSendNullFrame(pAd, pAd->CommonCfg.TxRate, TRUE);
++ }
++ else
++ {
++ // Send out a NULL frame every 10 sec to inform AP that STA is still alive (Avoid being age out)
++ if ((pAd->Mlme.OneSecPeriodicRound % 10) == 8)
++ {
++ if (pAd->CommonCfg.bWmmCapable)
++ RTMPSendNullFrame(pAd, pAd->CommonCfg.TxRate, TRUE);
++ else
++ RTMPSendNullFrame(pAd, pAd->CommonCfg.TxRate, FALSE);
++ }
++ }
++ }
++
++ if (CQI_IS_DEAD(pAd->Mlme.ChannelQuality))
++ {
++ DBGPRINT(RT_DEBUG_TRACE, ("MMCHK - No BEACON. Dead CQI. Auto Recovery attempt #%ld\n", pAd->RalinkCounters.BadCQIAutoRecoveryCount));
++ pAd->StaCfg.CCXAdjacentAPReportFlag = TRUE;
++ pAd->StaCfg.CCXAdjacentAPLinkDownTime = pAd->StaCfg.LastBeaconRxTime;
++
++ // Lost AP, send disconnect & link down event
++ LinkDown(pAd, FALSE);
++
++#ifdef WPA_SUPPLICANT_SUPPORT
++#ifndef NATIVE_WPA_SUPPLICANT_SUPPORT
++ if (pAd->StaCfg.WpaSupplicantUP)
++ {
++ union iwreq_data wrqu;
++ //send disassociate event to wpa_supplicant
++ memset(&wrqu, 0, sizeof(wrqu));
++ wrqu.data.flags = RT_DISASSOC_EVENT_FLAG;
++ wireless_send_event(pAd->net_dev, IWEVCUSTOM, &wrqu, NULL);
++ }
++#endif // NATIVE_WPA_SUPPLICANT_SUPPORT //
++#endif // WPA_SUPPLICANT_SUPPORT //
++
++#ifdef NATIVE_WPA_SUPPLICANT_SUPPORT
++ {
++ union iwreq_data wrqu;
++ memset(wrqu.ap_addr.sa_data, 0, MAC_ADDR_LEN);
++ wireless_send_event(pAd->net_dev, SIOCGIWAP, &wrqu, NULL);
++ }
++#endif // NATIVE_WPA_SUPPLICANT_SUPPORT //
++
++ // RTMPPatchMacBbpBug(pAd);
++ MlmeAutoReconnectLastSSID(pAd);
++ }
++ else if (CQI_IS_BAD(pAd->Mlme.ChannelQuality))
++ {
++ pAd->RalinkCounters.BadCQIAutoRecoveryCount ++;
++ DBGPRINT(RT_DEBUG_TRACE, ("MMCHK - Bad CQI. Auto Recovery attempt #%ld\n", pAd->RalinkCounters.BadCQIAutoRecoveryCount));
++ MlmeAutoReconnectLastSSID(pAd);
++ }
++
++ // Add auto seamless roaming
++ if (pAd->StaCfg.bFastRoaming)
++ {
++ SHORT dBmToRoam = (SHORT)pAd->StaCfg.dBmToRoam;
++
++ DBGPRINT(RT_DEBUG_TRACE, ("Rssi=%d, dBmToRoam=%d\n", RTMPMaxRssi(pAd, pAd->StaCfg.RssiSample.LastRssi0, pAd->StaCfg.RssiSample.LastRssi1, pAd->StaCfg.RssiSample.LastRssi2), (CHAR)dBmToRoam));
++
++ if (RTMPMaxRssi(pAd, pAd->StaCfg.RssiSample.LastRssi0, pAd->StaCfg.RssiSample.LastRssi1, pAd->StaCfg.RssiSample.LastRssi2) <= (CHAR)dBmToRoam)
++ {
++ MlmeCheckForFastRoaming(pAd, pAd->Mlme.Now32);
++ }
++ }
++ }
++ else if (ADHOC_ON(pAd))
++ {
++ //radar detect
++ if ((pAd->CommonCfg.Channel > 14)
++ && (pAd->CommonCfg.bIEEE80211H == 1)
++ && RadarChannelCheck(pAd, pAd->CommonCfg.Channel))
++ {
++ RadarDetectPeriodic(pAd);
++ }
++
++ // If all peers leave, and this STA becomes the last one in this IBSS, then change MediaState
++ // to DISCONNECTED. But still holding this IBSS (i.e. sending BEACON) so that other STAs can
++ // join later.
++ if ((pAd->StaCfg.LastBeaconRxTime + ADHOC_BEACON_LOST_TIME < pAd->Mlme.Now32) &&
++ OPSTATUS_TEST_FLAG(pAd, fOP_STATUS_MEDIA_STATE_CONNECTED))
++ {
++ MLME_START_REQ_STRUCT StartReq;
++
++ DBGPRINT(RT_DEBUG_TRACE, ("MMCHK - excessive BEACON lost, last STA in this IBSS, MediaState=Disconnected\n"));
++ LinkDown(pAd, FALSE);
++
++ StartParmFill(pAd, &StartReq, pAd->MlmeAux.Ssid, pAd->MlmeAux.SsidLen);
++ MlmeEnqueue(pAd, SYNC_STATE_MACHINE, MT2_MLME_START_REQ, sizeof(MLME_START_REQ_STRUCT), &StartReq);
++ pAd->Mlme.CntlMachine.CurrState = CNTL_WAIT_START;
++ }
++
++ for (i = 1; i < MAX_LEN_OF_MAC_TABLE; i++)
++ {
++ MAC_TABLE_ENTRY *pEntry = &pAd->MacTab.Content[i];
++
++ if (pEntry->ValidAsCLI == FALSE)
++ continue;
++
++ if (pEntry->LastBeaconRxTime + ADHOC_BEACON_LOST_TIME < pAd->Mlme.Now32)
++ MacTableDeleteEntry(pAd, pEntry->Aid, pEntry->Addr);
++ }
++ }
++ else // no INFRA nor ADHOC connection
++ {
++
++ if (pAd->StaCfg.bScanReqIsFromWebUI &&
++ ((pAd->StaCfg.LastScanTime + 30 * OS_HZ) > pAd->Mlme.Now32))
++ goto SKIP_AUTO_SCAN_CONN;
++ else
++ pAd->StaCfg.bScanReqIsFromWebUI = FALSE;
++
++ if ((pAd->StaCfg.bAutoReconnect == TRUE)
++ && RTMP_TEST_FLAG(pAd, fRTMP_ADAPTER_START_UP)
++ && (MlmeValidateSSID(pAd->MlmeAux.AutoReconnectSsid, pAd->MlmeAux.AutoReconnectSsidLen) == TRUE))
++ {
++ if ((pAd->ScanTab.BssNr==0) && (pAd->Mlme.CntlMachine.CurrState == CNTL_IDLE))
++ {
++ MLME_SCAN_REQ_STRUCT ScanReq;
++
++ if ((pAd->StaCfg.LastScanTime + 10 * OS_HZ) < pAd->Mlme.Now32)
++ {
++ DBGPRINT(RT_DEBUG_TRACE, ("STAMlmePeriodicExec():CNTL - ScanTab.BssNr==0, start a new ACTIVE scan SSID[%s]\n", pAd->MlmeAux.AutoReconnectSsid));
++ ScanParmFill(pAd, &ScanReq, pAd->MlmeAux.AutoReconnectSsid, pAd->MlmeAux.AutoReconnectSsidLen, BSS_ANY, SCAN_ACTIVE);
++ MlmeEnqueue(pAd, SYNC_STATE_MACHINE, MT2_MLME_SCAN_REQ, sizeof(MLME_SCAN_REQ_STRUCT), &ScanReq);
++ pAd->Mlme.CntlMachine.CurrState = CNTL_WAIT_OID_LIST_SCAN;
++ // Reset Missed scan number
++ pAd->StaCfg.LastScanTime = pAd->Mlme.Now32;
++ }
++ else if (pAd->StaCfg.BssType == BSS_ADHOC) // Quit the forever scan when in a very clean room
++ MlmeAutoReconnectLastSSID(pAd);
++ }
++ else if (pAd->Mlme.CntlMachine.CurrState == CNTL_IDLE)
++ {
++ if ((pAd->Mlme.OneSecPeriodicRound % 7) == 0)
++ {
++ MlmeAutoScan(pAd);
++ pAd->StaCfg.LastScanTime = pAd->Mlme.Now32;
++ }
++ else
++ {
++#ifdef CARRIER_DETECTION_SUPPORT // Roger sync Carrier
++ if (pAd->CommonCfg.CarrierDetect.Enable == TRUE)
++ {
++ if ((pAd->Mlme.OneSecPeriodicRound % 5) == 1)
++ MlmeAutoReconnectLastSSID(pAd);
++ }
++ else
++#endif // CARRIER_DETECTION_SUPPORT //
++ MlmeAutoReconnectLastSSID(pAd);
++ }
++ }
++ }
++ }
++
++SKIP_AUTO_SCAN_CONN:
++
++#ifdef DOT11_N_SUPPORT
++ if ((pAd->MacTab.Content[BSSID_WCID].TXBAbitmap !=0) && (pAd->MacTab.fAnyBASession == FALSE))
++ {
++ pAd->MacTab.fAnyBASession = TRUE;
++ AsicUpdateProtect(pAd, HT_FORCERTSCTS, ALLN_SETPROTECT, FALSE, FALSE);
++ }
++ else if ((pAd->MacTab.Content[BSSID_WCID].TXBAbitmap ==0) && (pAd->MacTab.fAnyBASession == TRUE))
++ {
++ pAd->MacTab.fAnyBASession = FALSE;
++ AsicUpdateProtect(pAd, pAd->MlmeAux.AddHtInfo.AddHtInfo2.OperaionMode, ALLN_SETPROTECT, FALSE, FALSE);
++ }
++#endif // DOT11_N_SUPPORT //
++
++
++#ifdef DOT11_N_SUPPORT
++#ifdef DOT11N_DRAFT3
++ if (OPSTATUS_TEST_FLAG(pAd, fOP_STATUS_SCAN_2040))
++ TriEventCounterMaintenance(pAd);
++#endif // DOT11N_DRAFT3 //
++#endif // DOT11_N_SUPPORT //
++
++ return;
++}
++
++// Link down report
++VOID LinkDownExec(
++ IN PVOID SystemSpecific1,
++ IN PVOID FunctionContext,
++ IN PVOID SystemSpecific2,
++ IN PVOID SystemSpecific3)
++{
++
++ RTMP_ADAPTER *pAd = (RTMP_ADAPTER *)FunctionContext;
++
++ pAd->IndicateMediaState = NdisMediaStateDisconnected;
++ RTMP_IndicateMediaState(pAd);
++ pAd->ExtraInfo = GENERAL_LINK_DOWN;
++}
++
++// IRQL = DISPATCH_LEVEL
++VOID MlmeAutoScan(
++ IN PRTMP_ADAPTER pAd)
++{
++ // check CntlMachine.CurrState to avoid collision with NDIS SetOID request
++ if (pAd->Mlme.CntlMachine.CurrState == CNTL_IDLE)
++ {
++ DBGPRINT(RT_DEBUG_TRACE, ("MMCHK - Driver auto scan\n"));
++ MlmeEnqueue(pAd,
++ MLME_CNTL_STATE_MACHINE,
++ OID_802_11_BSSID_LIST_SCAN,
++ 0,
++ NULL);
++ RT28XX_MLME_HANDLER(pAd);
++ }
++}
++
++// IRQL = DISPATCH_LEVEL
++VOID MlmeAutoReconnectLastSSID(
++ IN PRTMP_ADAPTER pAd)
++{
++
++
++ // check CntlMachine.CurrState to avoid collision with NDIS SetOID request
++ if ((pAd->Mlme.CntlMachine.CurrState == CNTL_IDLE) &&
++ (MlmeValidateSSID(pAd->MlmeAux.AutoReconnectSsid, pAd->MlmeAux.AutoReconnectSsidLen) == TRUE))
++ {
++ NDIS_802_11_SSID OidSsid;
++ OidSsid.SsidLength = pAd->MlmeAux.AutoReconnectSsidLen;
++ NdisMoveMemory(OidSsid.Ssid, pAd->MlmeAux.AutoReconnectSsid, pAd->MlmeAux.AutoReconnectSsidLen);
++
++ DBGPRINT(RT_DEBUG_TRACE, ("Driver auto reconnect to last OID_802_11_SSID setting - %s, len - %d\n", pAd->MlmeAux.AutoReconnectSsid, pAd->MlmeAux.AutoReconnectSsidLen));
++ MlmeEnqueue(pAd,
++ MLME_CNTL_STATE_MACHINE,
++ OID_802_11_SSID,
++ sizeof(NDIS_802_11_SSID),
++ &OidSsid);
++ RT28XX_MLME_HANDLER(pAd);
++ }
++}
++#endif // CONFIG_STA_SUPPORT //
++
++/*
++ ==========================================================================
++ Validate SSID for connection try and rescan purpose
++ Valid SSID will have visible chars only.
++ The valid length is from 0 to 32.
++ IRQL = DISPATCH_LEVEL
++ ==========================================================================
++ */
++BOOLEAN MlmeValidateSSID(
++ IN PUCHAR pSsid,
++ IN UCHAR SsidLen)
++{
++ int index;
++
++ if (SsidLen > MAX_LEN_OF_SSID)
++ return (FALSE);
++
++ // Check each character value
++ for (index = 0; index < SsidLen; index++)
++ {
++ if (pSsid[index] < 0x20)
++ return (FALSE);
++ }
++
++ // All checked
++ return (TRUE);
++}
++
++VOID MlmeSelectTxRateTable(
++ IN PRTMP_ADAPTER pAd,
++ IN PMAC_TABLE_ENTRY pEntry,
++ IN PUCHAR *ppTable,
++ IN PUCHAR pTableSize,
++ IN PUCHAR pInitTxRateIdx)
++{
++ do
++ {
++ // decide the rate table for tuning
++ if (pAd->CommonCfg.TxRateTableSize > 0)
++ {
++ *ppTable = RateSwitchTable;
++ *pTableSize = RateSwitchTable[0];
++ *pInitTxRateIdx = RateSwitchTable[1];
++
++ break;
++ }
++
++#ifdef CONFIG_STA_SUPPORT
++ if ((pAd->OpMode == OPMODE_STA) && ADHOC_ON(pAd))
++ {
++#ifdef DOT11_N_SUPPORT
++ if ((pAd->CommonCfg.PhyMode >= PHY_11ABGN_MIXED) &&
++ (pEntry->HTCapability.MCSSet[0] == 0xff) &&
++ ((pEntry->HTCapability.MCSSet[1] == 0x00) || (pAd->Antenna.field.TxPath == 1)))
++ {// 11N 1S Adhoc
++ *ppTable = RateSwitchTable11N1S;
++ *pTableSize = RateSwitchTable11N1S[0];
++ *pInitTxRateIdx = RateSwitchTable11N1S[1];
++
++ }
++ else if ((pAd->CommonCfg.PhyMode >= PHY_11ABGN_MIXED) &&
++ (pEntry->HTCapability.MCSSet[0] == 0xff) &&
++ (pEntry->HTCapability.MCSSet[1] == 0xff) &&
++ (pAd->Antenna.field.TxPath == 2))
++ {// 11N 2S Adhoc
++ if (pAd->LatchRfRegs.Channel <= 14)
++ {
++ *ppTable = RateSwitchTable11N2S;
++ *pTableSize = RateSwitchTable11N2S[0];
++ *pInitTxRateIdx = RateSwitchTable11N2S[1];
++ }
++ else
++ {
++ *ppTable = RateSwitchTable11N2SForABand;
++ *pTableSize = RateSwitchTable11N2SForABand[0];
++ *pInitTxRateIdx = RateSwitchTable11N2SForABand[1];
++ }
++
++ }
++ else
++#endif // DOT11_N_SUPPORT //
++ if ((pEntry->RateLen == 4)
++#ifdef DOT11_N_SUPPORT
++ && (pEntry->HTCapability.MCSSet[0] == 0) && (pEntry->HTCapability.MCSSet[1] == 0)
++#endif // DOT11_N_SUPPORT //
++ )
++ {
++ *ppTable = RateSwitchTable11B;
++ *pTableSize = RateSwitchTable11B[0];
++ *pInitTxRateIdx = RateSwitchTable11B[1];
++
++ }
++ else if (pAd->LatchRfRegs.Channel <= 14)
++ {
++ *ppTable = RateSwitchTable11BG;
++ *pTableSize = RateSwitchTable11BG[0];
++ *pInitTxRateIdx = RateSwitchTable11BG[1];
++
++ }
++ else
++ {
++ *ppTable = RateSwitchTable11G;
++ *pTableSize = RateSwitchTable11G[0];
++ *pInitTxRateIdx = RateSwitchTable11G[1];
++
++ }
++ break;
++ }
++#endif // CONFIG_STA_SUPPORT //
++
++#ifdef DOT11_N_SUPPORT
++ //if ((pAd->StaActive.SupRateLen + pAd->StaActive.ExtRateLen == 12) && (pAd->StaActive.SupportedPhyInfo.MCSSet[0] == 0xff) &&
++ // ((pAd->StaActive.SupportedPhyInfo.MCSSet[1] == 0x00) || (pAd->Antenna.field.TxPath == 1)))
++ if ((pEntry->RateLen == 12) && (pEntry->HTCapability.MCSSet[0] == 0xff) &&
++ ((pEntry->HTCapability.MCSSet[1] == 0x00) || (pAd->CommonCfg.TxStream == 1)))
++ {// 11BGN 1S AP
++ *ppTable = RateSwitchTable11BGN1S;
++ *pTableSize = RateSwitchTable11BGN1S[0];
++ *pInitTxRateIdx = RateSwitchTable11BGN1S[1];
++
++ break;
++ }
++
++ //else if ((pAd->StaActive.SupRateLen + pAd->StaActive.ExtRateLen == 12) && (pAd->StaActive.SupportedPhyInfo.MCSSet[0] == 0xff) &&
++ // (pAd->StaActive.SupportedPhyInfo.MCSSet[1] == 0xff) && (pAd->Antenna.field.TxPath == 2))
++ if ((pEntry->RateLen == 12) && (pEntry->HTCapability.MCSSet[0] == 0xff) &&
++ (pEntry->HTCapability.MCSSet[1] == 0xff) && (pAd->CommonCfg.TxStream == 2))
++ {// 11BGN 2S AP
++ if (pAd->LatchRfRegs.Channel <= 14)
++ {
++ *ppTable = RateSwitchTable11BGN2S;
++ *pTableSize = RateSwitchTable11BGN2S[0];
++ *pInitTxRateIdx = RateSwitchTable11BGN2S[1];
++
++ }
++ else
++ {
++ *ppTable = RateSwitchTable11BGN2SForABand;
++ *pTableSize = RateSwitchTable11BGN2SForABand[0];
++ *pInitTxRateIdx = RateSwitchTable11BGN2SForABand[1];
++
++ }
++ break;
++ }
++
++ //else if ((pAd->StaActive.SupportedPhyInfo.MCSSet[0] == 0xff) && ((pAd->StaActive.SupportedPhyInfo.MCSSet[1] == 0x00) || (pAd->Antenna.field.TxPath == 1)))
++ if ((pEntry->HTCapability.MCSSet[0] == 0xff) && ((pEntry->HTCapability.MCSSet[1] == 0x00) || (pAd->CommonCfg.TxStream == 1)))
++ {// 11N 1S AP
++ *ppTable = RateSwitchTable11N1S;
++ *pTableSize = RateSwitchTable11N1S[0];
++ *pInitTxRateIdx = RateSwitchTable11N1S[1];
++
++ break;
++ }
++
++ //else if ((pAd->StaActive.SupportedPhyInfo.MCSSet[0] == 0xff) && (pAd->StaActive.SupportedPhyInfo.MCSSet[1] == 0xff) && (pAd->Antenna.field.TxPath == 2))
++ if ((pEntry->HTCapability.MCSSet[0] == 0xff) && (pEntry->HTCapability.MCSSet[1] == 0xff) && (pAd->CommonCfg.TxStream == 2))
++ {// 11N 2S AP
++ if (pAd->LatchRfRegs.Channel <= 14)
++ {
++ *ppTable = RateSwitchTable11N2S;
++ *pTableSize = RateSwitchTable11N2S[0];
++ *pInitTxRateIdx = RateSwitchTable11N2S[1];
++ }
++ else
++ {
++ *ppTable = RateSwitchTable11N2SForABand;
++ *pTableSize = RateSwitchTable11N2SForABand[0];
++ *pInitTxRateIdx = RateSwitchTable11N2SForABand[1];
++ }
++
++ break;
++ }
++#endif // DOT11_N_SUPPORT //
++ //else if ((pAd->StaActive.SupRateLen == 4) && (pAd->StaActive.ExtRateLen == 0) && (pAd->StaActive.SupportedPhyInfo.MCSSet[0] == 0) && (pAd->StaActive.SupportedPhyInfo.MCSSet[1] == 0))
++ if ((pEntry->RateLen == 4)
++#ifdef DOT11_N_SUPPORT
++ && (pEntry->HTCapability.MCSSet[0] == 0) && (pEntry->HTCapability.MCSSet[1] == 0)
++#endif // DOT11_N_SUPPORT //
++ )
++ {// B only AP
++ *ppTable = RateSwitchTable11B;
++ *pTableSize = RateSwitchTable11B[0];
++ *pInitTxRateIdx = RateSwitchTable11B[1];
++
++ break;
++ }
++
++ //else if ((pAd->StaActive.SupRateLen + pAd->StaActive.ExtRateLen > 8) && (pAd->StaActive.SupportedPhyInfo.MCSSet[0] == 0) && (pAd->StaActive.SupportedPhyInfo.MCSSet[1] == 0))
++ if ((pEntry->RateLen > 8)
++#ifdef DOT11_N_SUPPORT
++ && (pEntry->HTCapability.MCSSet[0] == 0) && (pEntry->HTCapability.MCSSet[1] == 0)
++#endif // DOT11_N_SUPPORT //
++ )
++ {// B/G mixed AP
++ *ppTable = RateSwitchTable11BG;
++ *pTableSize = RateSwitchTable11BG[0];
++ *pInitTxRateIdx = RateSwitchTable11BG[1];
++
++ break;
++ }
++
++ //else if ((pAd->StaActive.SupRateLen + pAd->StaActive.ExtRateLen == 8) && (pAd->StaActive.SupportedPhyInfo.MCSSet[0] == 0) && (pAd->StaActive.SupportedPhyInfo.MCSSet[1] == 0))
++ if ((pEntry->RateLen == 8)
++#ifdef DOT11_N_SUPPORT
++ && (pEntry->HTCapability.MCSSet[0] == 0) && (pEntry->HTCapability.MCSSet[1] == 0)
++#endif // DOT11_N_SUPPORT //
++ )
++ {// G only AP
++ *ppTable = RateSwitchTable11G;
++ *pTableSize = RateSwitchTable11G[0];
++ *pInitTxRateIdx = RateSwitchTable11G[1];
++
++ break;
++ }
++#ifdef DOT11_N_SUPPORT
++#endif // DOT11_N_SUPPORT //
++
++#ifdef CONFIG_STA_SUPPORT
++ IF_DEV_CONFIG_OPMODE_ON_STA(pAd)
++ {
++#ifdef DOT11_N_SUPPORT
++ //else if ((pAd->StaActive.SupportedPhyInfo.MCSSet[0] == 0) && (pAd->StaActive.SupportedPhyInfo.MCSSet[1] == 0))
++ if ((pEntry->HTCapability.MCSSet[0] == 0) && (pEntry->HTCapability.MCSSet[1] == 0))
++#endif // DOT11_N_SUPPORT //
++ { // Legacy mode
++ if (pAd->CommonCfg.MaxTxRate <= RATE_11)
++ {
++ *ppTable = RateSwitchTable11B;
++ *pTableSize = RateSwitchTable11B[0];
++ *pInitTxRateIdx = RateSwitchTable11B[1];
++ }
++ else if ((pAd->CommonCfg.MaxTxRate > RATE_11) && (pAd->CommonCfg.MinTxRate > RATE_11))
++ {
++ *ppTable = RateSwitchTable11G;
++ *pTableSize = RateSwitchTable11G[0];
++ *pInitTxRateIdx = RateSwitchTable11G[1];
++
++ }
++ else
++ {
++ *ppTable = RateSwitchTable11BG;
++ *pTableSize = RateSwitchTable11BG[0];
++ *pInitTxRateIdx = RateSwitchTable11BG[1];
++ }
++ break;
++ }
++#ifdef DOT11_N_SUPPORT
++ if (pAd->LatchRfRegs.Channel <= 14)
++ {
++ if (pAd->CommonCfg.TxStream == 1)
++ {
++ *ppTable = RateSwitchTable11N1S;
++ *pTableSize = RateSwitchTable11N1S[0];
++ *pInitTxRateIdx = RateSwitchTable11N1S[1];
++ DBGPRINT_RAW(RT_DEBUG_ERROR,("DRS: unkown mode,default use 11N 1S AP \n"));
++ }
++ else
++ {
++ *ppTable = RateSwitchTable11N2S;
++ *pTableSize = RateSwitchTable11N2S[0];
++ *pInitTxRateIdx = RateSwitchTable11N2S[1];
++ DBGPRINT_RAW(RT_DEBUG_ERROR,("DRS: unkown mode,default use 11N 2S AP \n"));
++ }
++ }
++ else
++ {
++ if (pAd->CommonCfg.TxStream == 1)
++ {
++ *ppTable = RateSwitchTable11N1S;
++ *pTableSize = RateSwitchTable11N1S[0];
++ *pInitTxRateIdx = RateSwitchTable11N1S[1];
++ DBGPRINT_RAW(RT_DEBUG_ERROR,("DRS: unkown mode,default use 11N 1S AP \n"));
++ }
++ else
++ {
++ *ppTable = RateSwitchTable11N2SForABand;
++ *pTableSize = RateSwitchTable11N2SForABand[0];
++ *pInitTxRateIdx = RateSwitchTable11N2SForABand[1];
++ DBGPRINT_RAW(RT_DEBUG_ERROR,("DRS: unkown mode,default use 11N 2S AP \n"));
++ }
++ }
++#endif // DOT11_N_SUPPORT //
++ DBGPRINT_RAW(RT_DEBUG_ERROR,("DRS: unkown mode (SupRateLen=%d, ExtRateLen=%d, MCSSet[0]=0x%x, MCSSet[1]=0x%x)\n",
++ pAd->StaActive.SupRateLen, pAd->StaActive.ExtRateLen, pAd->StaActive.SupportedPhyInfo.MCSSet[0], pAd->StaActive.SupportedPhyInfo.MCSSet[1]));
++ }
++#endif // CONFIG_STA_SUPPORT //
++ } while(FALSE);
++}
++
++#ifdef CONFIG_STA_SUPPORT
++/*
++ ==========================================================================
++ Description:
++ This routine checks if there're other APs out there capable for
++ roaming. Caller should call this routine only when Link up in INFRA mode
++ and channel quality is below CQI_GOOD_THRESHOLD.
++
++ IRQL = DISPATCH_LEVEL
++
++ Output:
++ ==========================================================================
++ */
++VOID MlmeCheckForRoaming(
++ IN PRTMP_ADAPTER pAd,
++ IN ULONG Now32)
++{
++ USHORT i;
++ BSS_TABLE *pRoamTab = &pAd->MlmeAux.RoamTab;
++ BSS_ENTRY *pBss;
++
++ DBGPRINT(RT_DEBUG_TRACE, ("==> MlmeCheckForRoaming\n"));
++ // put all roaming candidates into RoamTab, and sort in RSSI order
++ BssTableInit(pRoamTab);
++ for (i = 0; i < pAd->ScanTab.BssNr; i++)
++ {
++ pBss = &pAd->ScanTab.BssEntry[i];
++
++ if ((pBss->LastBeaconRxTime + BEACON_LOST_TIME) < Now32)
++ continue; // AP disappear
++ if (pBss->Rssi <= RSSI_THRESHOLD_FOR_ROAMING)
++ continue; // RSSI too weak. forget it.
++ if (MAC_ADDR_EQUAL(pBss->Bssid, pAd->CommonCfg.Bssid))
++ continue; // skip current AP
++ if (pBss->Rssi < (pAd->StaCfg.RssiSample.LastRssi0 + RSSI_DELTA))
++ continue; // only AP with stronger RSSI is eligible for roaming
++
++ // AP passing all above rules is put into roaming candidate table
++ NdisMoveMemory(&pRoamTab->BssEntry[pRoamTab->BssNr], pBss, sizeof(BSS_ENTRY));
++ pRoamTab->BssNr += 1;
++ }
++
++ if (pRoamTab->BssNr > 0)
++ {
++ // check CntlMachine.CurrState to avoid collision with NDIS SetOID request
++ if (pAd->Mlme.CntlMachine.CurrState == CNTL_IDLE)
++ {
++ pAd->RalinkCounters.PoorCQIRoamingCount ++;
++ DBGPRINT(RT_DEBUG_TRACE, ("MMCHK - Roaming attempt #%ld\n", pAd->RalinkCounters.PoorCQIRoamingCount));
++ MlmeEnqueue(pAd, MLME_CNTL_STATE_MACHINE, MT2_MLME_ROAMING_REQ, 0, NULL);
++ RT28XX_MLME_HANDLER(pAd);
++ }
++ }
++ DBGPRINT(RT_DEBUG_TRACE, ("<== MlmeCheckForRoaming(# of candidate= %d)\n",pRoamTab->BssNr));
++}
++
++/*
++ ==========================================================================
++ Description:
++ This routine checks if there're other APs out there capable for
++ roaming. Caller should call this routine only when link up in INFRA mode
++ and channel quality is below CQI_GOOD_THRESHOLD.
++
++ IRQL = DISPATCH_LEVEL
++
++ Output:
++ ==========================================================================
++ */
++VOID MlmeCheckForFastRoaming(
++ IN PRTMP_ADAPTER pAd,
++ IN ULONG Now)
++{
++ USHORT i;
++ BSS_TABLE *pRoamTab = &pAd->MlmeAux.RoamTab;
++ BSS_ENTRY *pBss;
++
++ DBGPRINT(RT_DEBUG_TRACE, ("==> MlmeCheckForFastRoaming\n"));
++ // put all roaming candidates into RoamTab, and sort in RSSI order
++ BssTableInit(pRoamTab);
++ for (i = 0; i < pAd->ScanTab.BssNr; i++)
++ {
++ pBss = &pAd->ScanTab.BssEntry[i];
++
++ if ((pBss->Rssi <= -50) && (pBss->Channel == pAd->CommonCfg.Channel))
++ continue; // RSSI too weak. forget it.
++ if (MAC_ADDR_EQUAL(pBss->Bssid, pAd->CommonCfg.Bssid))
++ continue; // skip current AP
++ if (!SSID_EQUAL(pBss->Ssid, pBss->SsidLen, pAd->CommonCfg.Ssid, pAd->CommonCfg.SsidLen))
++ continue; // skip different SSID
++ if (pBss->Rssi < (RTMPMaxRssi(pAd, pAd->StaCfg.RssiSample.LastRssi0, pAd->StaCfg.RssiSample.LastRssi1, pAd->StaCfg.RssiSample.LastRssi2) + RSSI_DELTA))
++ continue; // skip AP without better RSSI
++
++ DBGPRINT(RT_DEBUG_TRACE, ("LastRssi0 = %d, pBss->Rssi = %d\n", RTMPMaxRssi(pAd, pAd->StaCfg.RssiSample.LastRssi0, pAd->StaCfg.RssiSample.LastRssi1, pAd->StaCfg.RssiSample.LastRssi2), pBss->Rssi));
++ // AP passing all above rules is put into roaming candidate table
++ NdisMoveMemory(&pRoamTab->BssEntry[pRoamTab->BssNr], pBss, sizeof(BSS_ENTRY));
++ pRoamTab->BssNr += 1;
++ }
++
++ if (pRoamTab->BssNr > 0)
++ {
++ // check CntlMachine.CurrState to avoid collision with NDIS SetOID request
++ if (pAd->Mlme.CntlMachine.CurrState == CNTL_IDLE)
++ {
++ pAd->RalinkCounters.PoorCQIRoamingCount ++;
++ DBGPRINT(RT_DEBUG_TRACE, ("MMCHK - Roaming attempt #%ld\n", pAd->RalinkCounters.PoorCQIRoamingCount));
++ MlmeEnqueue(pAd, MLME_CNTL_STATE_MACHINE, MT2_MLME_ROAMING_REQ, 0, NULL);
++ RT28XX_MLME_HANDLER(pAd);
++ }
++ }
++ // Maybe site survey required
++ else
++ {
++ if ((pAd->StaCfg.LastScanTime + 10 * 1000) < Now)
++ {
++ // check CntlMachine.CurrState to avoid collision with NDIS SetOID request
++ DBGPRINT(RT_DEBUG_TRACE, ("MMCHK - Roaming, No eligable entry, try new scan!\n"));
++ pAd->StaCfg.ScanCnt = 2;
++ pAd->StaCfg.LastScanTime = Now;
++ MlmeAutoScan(pAd);
++ }
++ }
++
++ DBGPRINT(RT_DEBUG_TRACE, ("<== MlmeCheckForFastRoaming (BssNr=%d)\n", pRoamTab->BssNr));
++}
++
++/*
++ ==========================================================================
++ Description:
++ This routine calculates TxPER, RxPER of the past N-sec period. And
++ according to the calculation result, ChannelQuality is calculated here
++ to decide if current AP is still doing the job.
++
++ If ChannelQuality is not good, a ROAMing attempt may be tried later.
++ Output:
++ StaCfg.ChannelQuality - 0..100
++
++ IRQL = DISPATCH_LEVEL
++
++ NOTE: This routine decide channle quality based on RX CRC error ratio.
++ Caller should make sure a function call to NICUpdateRawCounters(pAd)
++ is performed right before this routine, so that this routine can decide
++ channel quality based on the most up-to-date information
++ ==========================================================================
++ */
++VOID MlmeCalculateChannelQuality(
++ IN PRTMP_ADAPTER pAd,
++ IN ULONG Now32)
++{
++ ULONG TxOkCnt, TxCnt, TxPER, TxPRR;
++ ULONG RxCnt, RxPER;
++ UCHAR NorRssi;
++ CHAR MaxRssi;
++ ULONG BeaconLostTime = BEACON_LOST_TIME;
++
++#ifdef CARRIER_DETECTION_SUPPORT // Roger sync Carrier
++ // longer beacon lost time when carrier detection enabled
++ if (pAd->CommonCfg.CarrierDetect.Enable == TRUE)
++ {
++ BeaconLostTime = BEACON_LOST_TIME + BEACON_LOST_TIME/2;
++ }
++#endif // CARRIER_DETECTION_SUPPORT //
++
++ MaxRssi = RTMPMaxRssi(pAd, pAd->StaCfg.RssiSample.LastRssi0, pAd->StaCfg.RssiSample.LastRssi1, pAd->StaCfg.RssiSample.LastRssi2);
++
++ //
++ // calculate TX packet error ratio and TX retry ratio - if too few TX samples, skip TX related statistics
++ //
++ TxOkCnt = pAd->RalinkCounters.OneSecTxNoRetryOkCount + pAd->RalinkCounters.OneSecTxRetryOkCount;
++ TxCnt = TxOkCnt + pAd->RalinkCounters.OneSecTxFailCount;
++ if (TxCnt < 5)
++ {
++ TxPER = 0;
++ TxPRR = 0;
++ }
++ else
++ {
++ TxPER = (pAd->RalinkCounters.OneSecTxFailCount * 100) / TxCnt;
++ TxPRR = ((TxCnt - pAd->RalinkCounters.OneSecTxNoRetryOkCount) * 100) / TxCnt;
++ }
++
++ //
++ // calculate RX PER - don't take RxPER into consideration if too few sample
++ //
++ RxCnt = pAd->RalinkCounters.OneSecRxOkCnt + pAd->RalinkCounters.OneSecRxFcsErrCnt;
++ if (RxCnt < 5)
++ RxPER = 0;
++ else
++ RxPER = (pAd->RalinkCounters.OneSecRxFcsErrCnt * 100) / RxCnt;
++
++ //
++ // decide ChannelQuality based on: 1)last BEACON received time, 2)last RSSI, 3)TxPER, and 4)RxPER
++ //
++ if (INFRA_ON(pAd) &&
++ (pAd->RalinkCounters.OneSecTxNoRetryOkCount < 2) && // no heavy traffic
++ (pAd->StaCfg.LastBeaconRxTime + BeaconLostTime < Now32))
++ {
++ DBGPRINT(RT_DEBUG_TRACE, ("BEACON lost > %ld msec with TxOkCnt=%ld -> CQI=0\n", BeaconLostTime, TxOkCnt));
++ pAd->Mlme.ChannelQuality = 0;
++ }
++ else
++ {
++ // Normalize Rssi
++ if (MaxRssi > -40)
++ NorRssi = 100;
++ else if (MaxRssi < -90)
++ NorRssi = 0;
++ else
++ NorRssi = (MaxRssi + 90) * 2;
++
++ // ChannelQuality = W1*RSSI + W2*TxPRR + W3*RxPER (RSSI 0..100), (TxPER 100..0), (RxPER 100..0)
++ pAd->Mlme.ChannelQuality = (RSSI_WEIGHTING * NorRssi +
++ TX_WEIGHTING * (100 - TxPRR) +
++ RX_WEIGHTING* (100 - RxPER)) / 100;
++ if (pAd->Mlme.ChannelQuality >= 100)
++ pAd->Mlme.ChannelQuality = 100;
++ }
++
++}
++
++VOID MlmeSetTxRate(
++ IN PRTMP_ADAPTER pAd,
++ IN PMAC_TABLE_ENTRY pEntry,
++ IN PRTMP_TX_RATE_SWITCH pTxRate)
++{
++ UCHAR MaxMode = MODE_OFDM;
++
++#ifdef DOT11_N_SUPPORT
++ MaxMode = MODE_HTGREENFIELD;
++
++ if (pTxRate->STBC && (pAd->StaCfg.MaxHTPhyMode.field.STBC) && (pAd->Antenna.field.TxPath == 2))
++ pAd->StaCfg.HTPhyMode.field.STBC = STBC_USE;
++ else
++#endif // DOT11_N_SUPPORT //
++ pAd->StaCfg.HTPhyMode.field.STBC = STBC_NONE;
++
++ if (pTxRate->CurrMCS < MCS_AUTO)
++ pAd->StaCfg.HTPhyMode.field.MCS = pTxRate->CurrMCS;
++
++ if (pAd->StaCfg.HTPhyMode.field.MCS > 7)
++ pAd->StaCfg.HTPhyMode.field.STBC = STBC_NONE;
++
++ if (ADHOC_ON(pAd))
++ {
++ // If peer adhoc is b-only mode, we can't send 11g rate.
++ pAd->StaCfg.HTPhyMode.field.ShortGI = GI_800;
++ pEntry->HTPhyMode.field.STBC = STBC_NONE;
++
++ //
++ // For Adhoc MODE_CCK, driver will use AdhocBOnlyJoined flag to roll back to B only if necessary
++ //
++ pEntry->HTPhyMode.field.MODE = pTxRate->Mode;
++ pEntry->HTPhyMode.field.ShortGI = pAd->StaCfg.HTPhyMode.field.ShortGI;
++ pEntry->HTPhyMode.field.MCS = pAd->StaCfg.HTPhyMode.field.MCS;
++
++ // Patch speed error in status page
++ pAd->StaCfg.HTPhyMode.field.MODE = pEntry->HTPhyMode.field.MODE;
++ }
++ else
++ {
++ if (pTxRate->Mode <= MaxMode)
++ pAd->StaCfg.HTPhyMode.field.MODE = pTxRate->Mode;
++
++#ifdef DOT11_N_SUPPORT
++ if (pTxRate->ShortGI && (pAd->StaCfg.MaxHTPhyMode.field.ShortGI))
++ pAd->StaCfg.HTPhyMode.field.ShortGI = GI_400;
++ else
++#endif // DOT11_N_SUPPORT //
++ pAd->StaCfg.HTPhyMode.field.ShortGI = GI_800;
++
++#ifdef DOT11_N_SUPPORT
++ // Reexam each bandwidth's SGI support.
++ if (pAd->StaCfg.HTPhyMode.field.ShortGI == GI_400)
++ {
++ if ((pEntry->HTPhyMode.field.BW == BW_20) && (!CLIENT_STATUS_TEST_FLAG(pEntry, fCLIENT_STATUS_SGI20_CAPABLE)))
++ pAd->StaCfg.HTPhyMode.field.ShortGI = GI_800;
++ if ((pEntry->HTPhyMode.field.BW == BW_40) && (!CLIENT_STATUS_TEST_FLAG(pEntry, fCLIENT_STATUS_SGI40_CAPABLE)))
++ pAd->StaCfg.HTPhyMode.field.ShortGI = GI_800;
++ }
++
++ // Turn RTS/CTS rate to 6Mbps.
++ if ((pEntry->HTPhyMode.field.MCS == 0) && (pAd->StaCfg.HTPhyMode.field.MCS != 0))
++ {
++ pEntry->HTPhyMode.field.MCS = pAd->StaCfg.HTPhyMode.field.MCS;
++ if (pAd->MacTab.fAnyBASession)
++ {
++ AsicUpdateProtect(pAd, HT_FORCERTSCTS, ALLN_SETPROTECT, TRUE, (BOOLEAN)pAd->MlmeAux.AddHtInfo.AddHtInfo2.NonGfPresent);
++ }
++ else
++ {
++ AsicUpdateProtect(pAd, pAd->MlmeAux.AddHtInfo.AddHtInfo2.OperaionMode, ALLN_SETPROTECT, TRUE, (BOOLEAN)pAd->MlmeAux.AddHtInfo.AddHtInfo2.NonGfPresent);
++ }
++ }
++ else if ((pEntry->HTPhyMode.field.MCS == 8) && (pAd->StaCfg.HTPhyMode.field.MCS != 8))
++ {
++ pEntry->HTPhyMode.field.MCS = pAd->StaCfg.HTPhyMode.field.MCS;
++ if (pAd->MacTab.fAnyBASession)
++ {
++ AsicUpdateProtect(pAd, HT_FORCERTSCTS, ALLN_SETPROTECT, TRUE, (BOOLEAN)pAd->MlmeAux.AddHtInfo.AddHtInfo2.NonGfPresent);
++ }
++ else
++ {
++ AsicUpdateProtect(pAd, pAd->MlmeAux.AddHtInfo.AddHtInfo2.OperaionMode, ALLN_SETPROTECT, TRUE, (BOOLEAN)pAd->MlmeAux.AddHtInfo.AddHtInfo2.NonGfPresent);
++ }
++ }
++ else if ((pEntry->HTPhyMode.field.MCS != 0) && (pAd->StaCfg.HTPhyMode.field.MCS == 0))
++ {
++ AsicUpdateProtect(pAd, HT_RTSCTS_6M, ALLN_SETPROTECT, TRUE, (BOOLEAN)pAd->MlmeAux.AddHtInfo.AddHtInfo2.NonGfPresent);
++
++ }
++ else if ((pEntry->HTPhyMode.field.MCS != 8) && (pAd->StaCfg.HTPhyMode.field.MCS == 8))
++ {
++ AsicUpdateProtect(pAd, HT_RTSCTS_6M, ALLN_SETPROTECT, TRUE, (BOOLEAN)pAd->MlmeAux.AddHtInfo.AddHtInfo2.NonGfPresent);
++ }
++#endif // DOT11_N_SUPPORT //
++
++ pEntry->HTPhyMode.field.STBC = pAd->StaCfg.HTPhyMode.field.STBC;
++ pEntry->HTPhyMode.field.ShortGI = pAd->StaCfg.HTPhyMode.field.ShortGI;
++ pEntry->HTPhyMode.field.MCS = pAd->StaCfg.HTPhyMode.field.MCS;
++ pEntry->HTPhyMode.field.MODE = pAd->StaCfg.HTPhyMode.field.MODE;
++#ifdef DOT11_N_SUPPORT
++ if ((pAd->StaCfg.MaxHTPhyMode.field.MODE == MODE_HTGREENFIELD) &&
++ pAd->WIFItestbed.bGreenField)
++ pEntry->HTPhyMode.field.MODE = MODE_HTGREENFIELD;
++#endif // DOT11_N_SUPPORT //
++ }
++
++ pAd->LastTxRate = (USHORT)(pEntry->HTPhyMode.word);
++}
++
++/*
++ ==========================================================================
++ Description:
++ This routine calculates the acumulated TxPER of eaxh TxRate. And
++ according to the calculation result, change CommonCfg.TxRate which
++ is the stable TX Rate we expect the Radio situation could sustained.
++
++ CommonCfg.TxRate will change dynamically within {RATE_1/RATE_6, MaxTxRate}
++ Output:
++ CommonCfg.TxRate -
++
++ IRQL = DISPATCH_LEVEL
++
++ NOTE:
++ call this routine every second
++ ==========================================================================
++ */
++VOID MlmeDynamicTxRateSwitching(
++ IN PRTMP_ADAPTER pAd)
++{
++ UCHAR UpRateIdx = 0, DownRateIdx = 0, CurrRateIdx;
++ ULONG i, AccuTxTotalCnt = 0, TxTotalCnt;
++ ULONG TxErrorRatio = 0;
++ BOOLEAN bTxRateChanged, bUpgradeQuality = FALSE;
++ PRTMP_TX_RATE_SWITCH pCurrTxRate, pNextTxRate = NULL;
++ PUCHAR pTable;
++ UCHAR TableSize = 0;
++ UCHAR InitTxRateIdx = 0, TrainUp, TrainDown;
++ CHAR Rssi, RssiOffset = 0;
++ TX_STA_CNT1_STRUC StaTx1;
++ TX_STA_CNT0_STRUC TxStaCnt0;
++ ULONG TxRetransmit = 0, TxSuccess = 0, TxFailCount = 0;
++ MAC_TABLE_ENTRY *pEntry;
++
++#ifdef RALINK_ATE
++ if (ATE_ON(pAd))
++ {
++ return;
++ }
++#endif // RALINK_ATE //
++
++ //
++ // walk through MAC table, see if need to change AP's TX rate toward each entry
++ //
++ for (i = 1; i < MAX_LEN_OF_MAC_TABLE; i++)
++ {
++ pEntry = &pAd->MacTab.Content[i];
++
++ // check if this entry need to switch rate automatically
++ if (RTMPCheckEntryEnableAutoRateSwitch(pAd, pEntry) == FALSE)
++ continue;
++
++ if ((pAd->MacTab.Size == 1) || (pEntry->ValidAsDls))
++ {
++ Rssi = RTMPMaxRssi(pAd,
++ pAd->StaCfg.RssiSample.AvgRssi0,
++ pAd->StaCfg.RssiSample.AvgRssi1,
++ pAd->StaCfg.RssiSample.AvgRssi2);
++
++ // Update statistic counter
++ RTMP_IO_READ32(pAd, TX_STA_CNT0, &TxStaCnt0.word);
++ RTMP_IO_READ32(pAd, TX_STA_CNT1, &StaTx1.word);
++ pAd->bUpdateBcnCntDone = TRUE;
++ TxRetransmit = StaTx1.field.TxRetransmit;
++ TxSuccess = StaTx1.field.TxSuccess;
++ TxFailCount = TxStaCnt0.field.TxFailCount;
++ TxTotalCnt = TxRetransmit + TxSuccess + TxFailCount;
++
++ pAd->RalinkCounters.OneSecTxRetryOkCount += StaTx1.field.TxRetransmit;
++ pAd->RalinkCounters.OneSecTxNoRetryOkCount += StaTx1.field.TxSuccess;
++ pAd->RalinkCounters.OneSecTxFailCount += TxStaCnt0.field.TxFailCount;
++ pAd->WlanCounters.TransmittedFragmentCount.u.LowPart += StaTx1.field.TxSuccess;
++ pAd->WlanCounters.RetryCount.u.LowPart += StaTx1.field.TxRetransmit;
++ pAd->WlanCounters.FailedCount.u.LowPart += TxStaCnt0.field.TxFailCount;
++
++ // if no traffic in the past 1-sec period, don't change TX rate,
++ // but clear all bad history. because the bad history may affect the next
++ // Chariot throughput test
++ AccuTxTotalCnt = pAd->RalinkCounters.OneSecTxNoRetryOkCount +
++ pAd->RalinkCounters.OneSecTxRetryOkCount +
++ pAd->RalinkCounters.OneSecTxFailCount;
++
++ if (TxTotalCnt)
++ TxErrorRatio = ((TxRetransmit + TxFailCount) * 100) / TxTotalCnt;
++ }
++ else
++ {
++ if (INFRA_ON(pAd) && (i == 1))
++ Rssi = RTMPMaxRssi(pAd,
++ pAd->StaCfg.RssiSample.AvgRssi0,
++ pAd->StaCfg.RssiSample.AvgRssi1,
++ pAd->StaCfg.RssiSample.AvgRssi2);
++ else
++ Rssi = RTMPMaxRssi(pAd,
++ pEntry->RssiSample.AvgRssi0,
++ pEntry->RssiSample.AvgRssi1,
++ pEntry->RssiSample.AvgRssi2);
++
++ TxTotalCnt = pEntry->OneSecTxNoRetryOkCount +
++ pEntry->OneSecTxRetryOkCount +
++ pEntry->OneSecTxFailCount;
++
++ if (TxTotalCnt)
++ TxErrorRatio = ((pEntry->OneSecTxRetryOkCount + pEntry->OneSecTxFailCount) * 100) / TxTotalCnt;
++ }
++
++ CurrRateIdx = pEntry->CurrTxRateIndex;
++
++ MlmeSelectTxRateTable(pAd, pEntry, &pTable, &TableSize, &InitTxRateIdx);
++
++ if (CurrRateIdx >= TableSize)
++ {
++ CurrRateIdx = TableSize - 1;
++ }
++
++ // When switch from Fixed rate -> auto rate, the REAL TX rate might be different from pAd->CommonCfg.TxRateIndex.
++ // So need to sync here.
++ pCurrTxRate = (PRTMP_TX_RATE_SWITCH) &pTable[(CurrRateIdx+1)*5];
++ if ((pEntry->HTPhyMode.field.MCS != pCurrTxRate->CurrMCS)
++ //&& (pAd->StaCfg.bAutoTxRateSwitch == TRUE)
++ )
++ {
++
++ // Need to sync Real Tx rate and our record.
++ // Then return for next DRS.
++ pCurrTxRate = (PRTMP_TX_RATE_SWITCH) &pTable[(InitTxRateIdx+1)*5];
++ pEntry->CurrTxRateIndex = InitTxRateIdx;
++ MlmeSetTxRate(pAd, pEntry, pCurrTxRate);
++
++ // reset all OneSecTx counters
++ RESET_ONE_SEC_TX_CNT(pEntry);
++ continue;
++ }
++
++ // decide the next upgrade rate and downgrade rate, if any
++ if ((CurrRateIdx > 0) && (CurrRateIdx < (TableSize - 1)))
++ {
++ UpRateIdx = CurrRateIdx + 1;
++ DownRateIdx = CurrRateIdx -1;
++ }
++ else if (CurrRateIdx == 0)
++ {
++ UpRateIdx = CurrRateIdx + 1;
++ DownRateIdx = CurrRateIdx;
++ }
++ else if (CurrRateIdx == (TableSize - 1))
++ {
++ UpRateIdx = CurrRateIdx;
++ DownRateIdx = CurrRateIdx - 1;
++ }
++
++ pCurrTxRate = (PRTMP_TX_RATE_SWITCH) &pTable[(CurrRateIdx+1)*5];
++
++#ifdef DOT11_N_SUPPORT
++ if ((Rssi > -65) && (pCurrTxRate->Mode >= MODE_HTMIX))
++ {
++ TrainUp = (pCurrTxRate->TrainUp + (pCurrTxRate->TrainUp >> 1));
++ TrainDown = (pCurrTxRate->TrainDown + (pCurrTxRate->TrainDown >> 1));
++ }
++ else
++#endif // DOT11_N_SUPPORT //
++ {
++ TrainUp = pCurrTxRate->TrainUp;
++ TrainDown = pCurrTxRate->TrainDown;
++ }
++
++ //pAd->DrsCounters.LastTimeTxRateChangeAction = pAd->DrsCounters.LastSecTxRateChangeAction;
++
++ //
++ // Keep the last time TxRateChangeAction status.
++ //
++ pEntry->LastTimeTxRateChangeAction = pEntry->LastSecTxRateChangeAction;
++
++
++
++ //
++ // CASE 1. when TX samples are fewer than 15, then decide TX rate solely on RSSI
++ // (criteria copied from RT2500 for Netopia case)
++ //
++ if (TxTotalCnt <= 15)
++ {
++ CHAR idx = 0;
++ UCHAR TxRateIdx;
++ //UCHAR MCS0 = 0, MCS1 = 0, MCS2 = 0, MCS3 = 0, MCS4 = 0, MCS7 = 0, MCS12 = 0, MCS13 = 0, MCS14 = 0, MCS15 = 0;
++ UCHAR MCS0 = 0, MCS1 = 0, MCS2 = 0, MCS3 = 0, MCS4 = 0, MCS5 =0, MCS6 = 0, MCS7 = 0;
++ UCHAR MCS12 = 0, MCS13 = 0, MCS14 = 0, MCS15 = 0;
++ UCHAR MCS20 = 0, MCS21 = 0, MCS22 = 0, MCS23 = 0; // 3*3
++
++ // check the existence and index of each needed MCS
++ while (idx < pTable[0])
++ {
++ pCurrTxRate = (PRTMP_TX_RATE_SWITCH) &pTable[(idx+1)*5];
++
++ if (pCurrTxRate->CurrMCS == MCS_0)
++ {
++ MCS0 = idx;
++ }
++ else if (pCurrTxRate->CurrMCS == MCS_1)
++ {
++ MCS1 = idx;
++ }
++ else if (pCurrTxRate->CurrMCS == MCS_2)
++ {
++ MCS2 = idx;
++ }
++ else if (pCurrTxRate->CurrMCS == MCS_3)
++ {
++ MCS3 = idx;
++ }
++ else if (pCurrTxRate->CurrMCS == MCS_4)
++ {
++ MCS4 = idx;
++ }
++ else if (pCurrTxRate->CurrMCS == MCS_5)
++ {
++ MCS5 = idx;
++ }
++ else if (pCurrTxRate->CurrMCS == MCS_6)
++ {
++ MCS6 = idx;
++ }
++ //else if (pCurrTxRate->CurrMCS == MCS_7)
++ else if ((pCurrTxRate->CurrMCS == MCS_7) && (pCurrTxRate->ShortGI == GI_800)) // prevent the highest MCS using short GI when 1T and low throughput
++ {
++ MCS7 = idx;
++ }
++ else if (pCurrTxRate->CurrMCS == MCS_12)
++ {
++ MCS12 = idx;
++ }
++ else if (pCurrTxRate->CurrMCS == MCS_13)
++ {
++ MCS13 = idx;
++ }
++ else if (pCurrTxRate->CurrMCS == MCS_14)
++ {
++ MCS14 = idx;
++ }
++ //else if ((pCurrTxRate->CurrMCS == MCS_15)/* && (pCurrTxRate->ShortGI == GI_800)*/) //we hope to use ShortGI as initial rate
++ else if ((pCurrTxRate->CurrMCS == MCS_15) && (pCurrTxRate->ShortGI == GI_800)) //we hope to use ShortGI as initial rate, however Atheros's chip has bugs when short GI
++ {
++ MCS15 = idx;
++ }
++ else if (pCurrTxRate->CurrMCS == MCS_20) // 3*3
++ {
++ MCS20 = idx;
++ }
++ else if (pCurrTxRate->CurrMCS == MCS_21)
++ {
++ MCS21 = idx;
++ }
++ else if (pCurrTxRate->CurrMCS == MCS_22)
++ {
++ MCS22 = idx;
++ }
++ else if (pCurrTxRate->CurrMCS == MCS_23)
++ {
++ MCS23 = idx;
++ }
++ idx ++;
++ }
++
++ if (pAd->LatchRfRegs.Channel <= 14)
++ {
++ if (pAd->NicConfig2.field.ExternalLNAForG)
++ {
++ RssiOffset = 2;
++ }
++ else
++ {
++ RssiOffset = 5;
++ }
++ }
++ else
++ {
++ if (pAd->NicConfig2.field.ExternalLNAForA)
++ {
++ RssiOffset = 5;
++ }
++ else
++ {
++ RssiOffset = 8;
++ }
++ }
++#ifdef DOT11_N_SUPPORT
++ /*if (MCS15)*/
++ if ((pTable == RateSwitchTable11BGN3S) ||
++ (pTable == RateSwitchTable11N3S) ||
++ (pTable == RateSwitchTable))
++ {// N mode with 3 stream // 3*3
++ if (MCS23 && (Rssi >= -70))
++ TxRateIdx = MCS15;
++ else if (MCS22 && (Rssi >= -72))
++ TxRateIdx = MCS14;
++ else if (MCS21 && (Rssi >= -76))
++ TxRateIdx = MCS13;
++ else if (MCS20 && (Rssi >= -78))
++ TxRateIdx = MCS12;
++ else if (MCS4 && (Rssi >= -82))
++ TxRateIdx = MCS4;
++ else if (MCS3 && (Rssi >= -84))
++ TxRateIdx = MCS3;
++ else if (MCS2 && (Rssi >= -86))
++ TxRateIdx = MCS2;
++ else if (MCS1 && (Rssi >= -88))
++ TxRateIdx = MCS1;
++ else
++ TxRateIdx = MCS0;
++ }
++// else if ((pTable == RateSwitchTable11BGN2S) || (pTable == RateSwitchTable11BGN2SForABand) ||(pTable == RateSwitchTable11N2S) ||(pTable == RateSwitchTable11N2SForABand) || (pTable == RateSwitchTable))
++ else if ((pTable == RateSwitchTable11BGN2S) || (pTable == RateSwitchTable11BGN2SForABand) ||(pTable == RateSwitchTable11N2S) ||(pTable == RateSwitchTable11N2SForABand)) // 3*3
++ {// N mode with 2 stream
++ if (MCS15 && (Rssi >= (-70+RssiOffset)))
++ TxRateIdx = MCS15;
++ else if (MCS14 && (Rssi >= (-72+RssiOffset)))
++ TxRateIdx = MCS14;
++ else if (MCS13 && (Rssi >= (-76+RssiOffset)))
++ TxRateIdx = MCS13;
++ else if (MCS12 && (Rssi >= (-78+RssiOffset)))
++ TxRateIdx = MCS12;
++ else if (MCS4 && (Rssi >= (-82+RssiOffset)))
++ TxRateIdx = MCS4;
++ else if (MCS3 && (Rssi >= (-84+RssiOffset)))
++ TxRateIdx = MCS3;
++ else if (MCS2 && (Rssi >= (-86+RssiOffset)))
++ TxRateIdx = MCS2;
++ else if (MCS1 && (Rssi >= (-88+RssiOffset)))
++ TxRateIdx = MCS1;
++ else
++ TxRateIdx = MCS0;
++ }
++ else if ((pTable == RateSwitchTable11BGN1S) || (pTable == RateSwitchTable11N1S))
++ {// N mode with 1 stream
++ if (MCS7 && (Rssi > (-72+RssiOffset)))
++ TxRateIdx = MCS7;
++ else if (MCS6 && (Rssi > (-74+RssiOffset)))
++ TxRateIdx = MCS6;
++ else if (MCS5 && (Rssi > (-77+RssiOffset)))
++ TxRateIdx = MCS5;
++ else if (MCS4 && (Rssi > (-79+RssiOffset)))
++ TxRateIdx = MCS4;
++ else if (MCS3 && (Rssi > (-81+RssiOffset)))
++ TxRateIdx = MCS3;
++ else if (MCS2 && (Rssi > (-83+RssiOffset)))
++ TxRateIdx = MCS2;
++ else if (MCS1 && (Rssi > (-86+RssiOffset)))
++ TxRateIdx = MCS1;
++ else
++ TxRateIdx = MCS0;
++ }
++ else
++#endif // DOT11_N_SUPPORT //
++ {// Legacy mode
++ if (MCS7 && (Rssi > -70))
++ TxRateIdx = MCS7;
++ else if (MCS6 && (Rssi > -74))
++ TxRateIdx = MCS6;
++ else if (MCS5 && (Rssi > -78))
++ TxRateIdx = MCS5;
++ else if (MCS4 && (Rssi > -82))
++ TxRateIdx = MCS4;
++ else if (MCS4 == 0) // for B-only mode
++ TxRateIdx = MCS3;
++ else if (MCS3 && (Rssi > -85))
++ TxRateIdx = MCS3;
++ else if (MCS2 && (Rssi > -87))
++ TxRateIdx = MCS2;
++ else if (MCS1 && (Rssi > -90))
++ TxRateIdx = MCS1;
++ else
++ TxRateIdx = MCS0;
++ }
++
++ // if (TxRateIdx != pAd->CommonCfg.TxRateIndex)
++ {
++ pEntry->CurrTxRateIndex = TxRateIdx;
++ pNextTxRate = (PRTMP_TX_RATE_SWITCH) &pTable[(pEntry->CurrTxRateIndex+1)*5];
++ MlmeSetTxRate(pAd, pEntry, pNextTxRate);
++ }
++
++ NdisZeroMemory(pEntry->TxQuality, sizeof(USHORT) * MAX_STEP_OF_TX_RATE_SWITCH);
++ NdisZeroMemory(pEntry->PER, sizeof(UCHAR) * MAX_STEP_OF_TX_RATE_SWITCH);
++ pEntry->fLastSecAccordingRSSI = TRUE;
++ // reset all OneSecTx counters
++ RESET_ONE_SEC_TX_CNT(pEntry);
++
++ continue;
++ }
++
++ if (pEntry->fLastSecAccordingRSSI == TRUE)
++ {
++ pEntry->fLastSecAccordingRSSI = FALSE;
++ pEntry->LastSecTxRateChangeAction = 0;
++ // reset all OneSecTx counters
++ RESET_ONE_SEC_TX_CNT(pEntry);
++
++ continue;
++ }
++
++ do
++ {
++ BOOLEAN bTrainUpDown = FALSE;
++
++ pEntry->CurrTxRateStableTime ++;
++
++ // downgrade TX quality if PER >= Rate-Down threshold
++ if (TxErrorRatio >= TrainDown)
++ {
++ bTrainUpDown = TRUE;
++ pEntry->TxQuality[CurrRateIdx] = DRS_TX_QUALITY_WORST_BOUND;
++ }
++ // upgrade TX quality if PER <= Rate-Up threshold
++ else if (TxErrorRatio <= TrainUp)
++ {
++ bTrainUpDown = TRUE;
++ bUpgradeQuality = TRUE;
++ if (pEntry->TxQuality[CurrRateIdx])
++ pEntry->TxQuality[CurrRateIdx] --; // quality very good in CurrRate
++
++ if (pEntry->TxRateUpPenalty)
++ pEntry->TxRateUpPenalty --;
++ else if (pEntry->TxQuality[UpRateIdx])
++ pEntry->TxQuality[UpRateIdx] --; // may improve next UP rate's quality
++ }
++
++ pEntry->PER[CurrRateIdx] = (UCHAR)TxErrorRatio;
++
++ if (bTrainUpDown)
++ {
++ // perform DRS - consider TxRate Down first, then rate up.
++ if ((CurrRateIdx != DownRateIdx) && (pEntry->TxQuality[CurrRateIdx] >= DRS_TX_QUALITY_WORST_BOUND))
++ {
++ pEntry->CurrTxRateIndex = DownRateIdx;
++ }
++ else if ((CurrRateIdx != UpRateIdx) && (pEntry->TxQuality[UpRateIdx] <= 0))
++ {
++ pEntry->CurrTxRateIndex = UpRateIdx;
++ }
++ }
++ } while (FALSE);
++
++ // if rate-up happen, clear all bad history of all TX rates
++ if (pEntry->CurrTxRateIndex > CurrRateIdx)
++ {
++ pEntry->CurrTxRateStableTime = 0;
++ pEntry->TxRateUpPenalty = 0;
++ pEntry->LastSecTxRateChangeAction = 1; // rate UP
++ NdisZeroMemory(pEntry->TxQuality, sizeof(USHORT) * MAX_STEP_OF_TX_RATE_SWITCH);
++ NdisZeroMemory(pEntry->PER, sizeof(UCHAR) * MAX_STEP_OF_TX_RATE_SWITCH);
++
++ //
++ // For TxRate fast train up
++ //
++ if (!pAd->StaCfg.StaQuickResponeForRateUpTimerRunning)
++ {
++ RTMPSetTimer(&pAd->StaCfg.StaQuickResponeForRateUpTimer, 100);
++
++ pAd->StaCfg.StaQuickResponeForRateUpTimerRunning = TRUE;
++ }
++ bTxRateChanged = TRUE;
++ }
++ // if rate-down happen, only clear DownRate's bad history
++ else if (pEntry->CurrTxRateIndex < CurrRateIdx)
++ {
++ pEntry->CurrTxRateStableTime = 0;
++ pEntry->TxRateUpPenalty = 0; // no penalty
++ pEntry->LastSecTxRateChangeAction = 2; // rate DOWN
++ pEntry->TxQuality[pEntry->CurrTxRateIndex] = 0;
++ pEntry->PER[pEntry->CurrTxRateIndex] = 0;
++
++ //
++ // For TxRate fast train down
++ //
++ if (!pAd->StaCfg.StaQuickResponeForRateUpTimerRunning)
++ {
++ RTMPSetTimer(&pAd->StaCfg.StaQuickResponeForRateUpTimer, 100);
++
++ pAd->StaCfg.StaQuickResponeForRateUpTimerRunning = TRUE;
++ }
++ bTxRateChanged = TRUE;
++ }
++ else
++ {
++ pEntry->LastSecTxRateChangeAction = 0; // rate no change
++ bTxRateChanged = FALSE;
++ }
++
++ pEntry->LastTxOkCount = TxSuccess;
++
++ // reset all OneSecTx counters
++ RESET_ONE_SEC_TX_CNT(pEntry);
++
++ pNextTxRate = (PRTMP_TX_RATE_SWITCH) &pTable[(pEntry->CurrTxRateIndex+1)*5];
++ if (bTxRateChanged && pNextTxRate)
++ {
++ MlmeSetTxRate(pAd, pEntry, pNextTxRate);
++ }
++ }
++}
++
++/*
++ ========================================================================
++ Routine Description:
++ Station side, Auto TxRate faster train up timer call back function.
++
++ Arguments:
++ SystemSpecific1 - Not used.
++ FunctionContext - Pointer to our Adapter context.
++ SystemSpecific2 - Not used.
++ SystemSpecific3 - Not used.
++
++ Return Value:
++ None
++
++ ========================================================================
++*/
++VOID StaQuickResponeForRateUpExec(
++ IN PVOID SystemSpecific1,
++ IN PVOID FunctionContext,
++ IN PVOID SystemSpecific2,
++ IN PVOID SystemSpecific3)
++{
++ PRTMP_ADAPTER pAd = (PRTMP_ADAPTER)FunctionContext;
++ UCHAR UpRateIdx = 0, DownRateIdx = 0, CurrRateIdx = 0;
++ ULONG TxTotalCnt;
++ ULONG TxErrorRatio = 0;
++ BOOLEAN bTxRateChanged; //, bUpgradeQuality = FALSE;
++ PRTMP_TX_RATE_SWITCH pCurrTxRate, pNextTxRate = NULL;
++ PUCHAR pTable;
++ UCHAR TableSize = 0;
++ UCHAR InitTxRateIdx = 0, TrainUp, TrainDown;
++ TX_STA_CNT1_STRUC StaTx1;
++ TX_STA_CNT0_STRUC TxStaCnt0;
++ CHAR Rssi, ratio;
++ ULONG TxRetransmit = 0, TxSuccess = 0, TxFailCount = 0;
++ MAC_TABLE_ENTRY *pEntry;
++ ULONG i;
++
++ pAd->StaCfg.StaQuickResponeForRateUpTimerRunning = FALSE;
++
++ //
++ // walk through MAC table, see if need to change AP's TX rate toward each entry
++ //
++ for (i = 1; i < MAX_LEN_OF_MAC_TABLE; i++)
++ {
++ pEntry = &pAd->MacTab.Content[i];
++
++ // check if this entry need to switch rate automatically
++ if (RTMPCheckEntryEnableAutoRateSwitch(pAd, pEntry) == FALSE)
++ continue;
++
++ if (INFRA_ON(pAd) && (i == 1))
++ Rssi = RTMPMaxRssi(pAd,
++ pAd->StaCfg.RssiSample.AvgRssi0,
++ pAd->StaCfg.RssiSample.AvgRssi1,
++ pAd->StaCfg.RssiSample.AvgRssi2);
++ else
++ Rssi = RTMPMaxRssi(pAd,
++ pEntry->RssiSample.AvgRssi0,
++ pEntry->RssiSample.AvgRssi1,
++ pEntry->RssiSample.AvgRssi2);
++
++ CurrRateIdx = pAd->CommonCfg.TxRateIndex;
++
++ MlmeSelectTxRateTable(pAd, pEntry, &pTable, &TableSize, &InitTxRateIdx);
++
++ // decide the next upgrade rate and downgrade rate, if any
++ if ((CurrRateIdx > 0) && (CurrRateIdx < (TableSize - 1)))
++ {
++ UpRateIdx = CurrRateIdx + 1;
++ DownRateIdx = CurrRateIdx -1;
++ }
++ else if (CurrRateIdx == 0)
++ {
++ UpRateIdx = CurrRateIdx + 1;
++ DownRateIdx = CurrRateIdx;
++ }
++ else if (CurrRateIdx == (TableSize - 1))
++ {
++ UpRateIdx = CurrRateIdx;
++ DownRateIdx = CurrRateIdx - 1;
++ }
++
++ pCurrTxRate = (PRTMP_TX_RATE_SWITCH) &pTable[(CurrRateIdx+1)*5];
++
++#ifdef DOT11_N_SUPPORT
++ if ((Rssi > -65) && (pCurrTxRate->Mode >= MODE_HTMIX))
++ {
++ TrainUp = (pCurrTxRate->TrainUp + (pCurrTxRate->TrainUp >> 1));
++ TrainDown = (pCurrTxRate->TrainDown + (pCurrTxRate->TrainDown >> 1));
++ }
++ else
++#endif // DOT11_N_SUPPORT //
++ {
++ TrainUp = pCurrTxRate->TrainUp;
++ TrainDown = pCurrTxRate->TrainDown;
++ }
++
++ if (pAd->MacTab.Size == 1)
++ {
++ // Update statistic counter
++ RTMP_IO_READ32(pAd, TX_STA_CNT0, &TxStaCnt0.word);
++ RTMP_IO_READ32(pAd, TX_STA_CNT1, &StaTx1.word);
++
++ TxRetransmit = StaTx1.field.TxRetransmit;
++ TxSuccess = StaTx1.field.TxSuccess;
++ TxFailCount = TxStaCnt0.field.TxFailCount;
++ TxTotalCnt = TxRetransmit + TxSuccess + TxFailCount;
++
++ pAd->RalinkCounters.OneSecTxRetryOkCount += StaTx1.field.TxRetransmit;
++ pAd->RalinkCounters.OneSecTxNoRetryOkCount += StaTx1.field.TxSuccess;
++ pAd->RalinkCounters.OneSecTxFailCount += TxStaCnt0.field.TxFailCount;
++ pAd->WlanCounters.TransmittedFragmentCount.u.LowPart += StaTx1.field.TxSuccess;
++ pAd->WlanCounters.RetryCount.u.LowPart += StaTx1.field.TxRetransmit;
++ pAd->WlanCounters.FailedCount.u.LowPart += TxStaCnt0.field.TxFailCount;
++
++#if 0 // test by Gary.
++ // if no traffic in the past 1-sec period, don't change TX rate,
++ // but clear all bad history. because the bad history may affect the next
++ // Chariot throughput test
++ TxTotalCnt = pAd->RalinkCounters.OneSecTxNoRetryOkCount +
++ pAd->RalinkCounters.OneSecTxRetryOkCount +
++ pAd->RalinkCounters.OneSecTxFailCount;
++#endif
++ if (TxTotalCnt)
++ TxErrorRatio = ((TxRetransmit + TxFailCount) * 100) / TxTotalCnt;
++ }
++ else
++ {
++ TxTotalCnt = pEntry->OneSecTxNoRetryOkCount +
++ pEntry->OneSecTxRetryOkCount +
++ pEntry->OneSecTxFailCount;
++
++ if (TxTotalCnt)
++ TxErrorRatio = ((pEntry->OneSecTxRetryOkCount + pEntry->OneSecTxFailCount) * 100) / TxTotalCnt;
++ }
++
++
++ //
++ // CASE 1. when TX samples are fewer than 15, then decide TX rate solely on RSSI
++ // (criteria copied from RT2500 for Netopia case)
++ //
++ if (TxTotalCnt <= 12)
++ {
++ NdisZeroMemory(pAd->DrsCounters.TxQuality, sizeof(USHORT) * MAX_STEP_OF_TX_RATE_SWITCH);
++ NdisZeroMemory(pAd->DrsCounters.PER, sizeof(UCHAR) * MAX_STEP_OF_TX_RATE_SWITCH);
++
++ if ((pAd->DrsCounters.LastSecTxRateChangeAction == 1) && (CurrRateIdx != DownRateIdx))
++ {
++ pAd->CommonCfg.TxRateIndex = DownRateIdx;
++ pAd->DrsCounters.TxQuality[CurrRateIdx] = DRS_TX_QUALITY_WORST_BOUND;
++ }
++ else if ((pAd->DrsCounters.LastSecTxRateChangeAction == 2) && (CurrRateIdx != UpRateIdx))
++ {
++ pAd->CommonCfg.TxRateIndex = UpRateIdx;
++ }
++
++ DBGPRINT_RAW(RT_DEBUG_TRACE,("QuickDRS: TxTotalCnt <= 15, train back to original rate \n"));
++ return;
++ }
++
++ do
++ {
++ ULONG OneSecTxNoRetryOKRationCount;
++
++ if (pAd->DrsCounters.LastTimeTxRateChangeAction == 0)
++ ratio = 5;
++ else
++ ratio = 4;
++
++ // downgrade TX quality if PER >= Rate-Down threshold
++ if (TxErrorRatio >= TrainDown)
++ {
++ pAd->DrsCounters.TxQuality[CurrRateIdx] = DRS_TX_QUALITY_WORST_BOUND;
++ }
++
++ pAd->DrsCounters.PER[CurrRateIdx] = (UCHAR)TxErrorRatio;
++
++ OneSecTxNoRetryOKRationCount = (TxSuccess * ratio);
++
++ // perform DRS - consider TxRate Down first, then rate up.
++ if ((pAd->DrsCounters.LastSecTxRateChangeAction == 1) && (CurrRateIdx != DownRateIdx))
++ {
++ if ((pAd->DrsCounters.LastTxOkCount + 2) >= OneSecTxNoRetryOKRationCount)
++ {
++ pAd->CommonCfg.TxRateIndex = DownRateIdx;
++ pAd->DrsCounters.TxQuality[CurrRateIdx] = DRS_TX_QUALITY_WORST_BOUND;
++
++ }
++
++ }
++ else if ((pAd->DrsCounters.LastSecTxRateChangeAction == 2) && (CurrRateIdx != UpRateIdx))
++ {
++ if ((TxErrorRatio >= 50) || (TxErrorRatio >= TrainDown))
++ {
++
++ }
++ else if ((pAd->DrsCounters.LastTxOkCount + 2) >= OneSecTxNoRetryOKRationCount)
++ {
++ pAd->CommonCfg.TxRateIndex = UpRateIdx;
++ }
++ }
++ }while (FALSE);
++
++ // if rate-up happen, clear all bad history of all TX rates
++ if (pAd->CommonCfg.TxRateIndex > CurrRateIdx)
++ {
++ pAd->DrsCounters.TxRateUpPenalty = 0;
++ NdisZeroMemory(pAd->DrsCounters.TxQuality, sizeof(USHORT) * MAX_STEP_OF_TX_RATE_SWITCH);
++ NdisZeroMemory(pAd->DrsCounters.PER, sizeof(UCHAR) * MAX_STEP_OF_TX_RATE_SWITCH);
++ bTxRateChanged = TRUE;
++ }
++ // if rate-down happen, only clear DownRate's bad history
++ else if (pAd->CommonCfg.TxRateIndex < CurrRateIdx)
++ {
++ DBGPRINT_RAW(RT_DEBUG_TRACE,("QuickDRS: --TX rate from %d to %d \n", CurrRateIdx, pAd->CommonCfg.TxRateIndex));
++
++ pAd->DrsCounters.TxRateUpPenalty = 0; // no penalty
++ pAd->DrsCounters.TxQuality[pAd->CommonCfg.TxRateIndex] = 0;
++ pAd->DrsCounters.PER[pAd->CommonCfg.TxRateIndex] = 0;
++ bTxRateChanged = TRUE;
++ }
++ else
++ {
++ bTxRateChanged = FALSE;
++ }
++
++ pNextTxRate = (PRTMP_TX_RATE_SWITCH) &pTable[(pAd->CommonCfg.TxRateIndex+1)*5];
++ if (bTxRateChanged && pNextTxRate)
++ {
++ MlmeSetTxRate(pAd, pEntry, pNextTxRate);
++ }
++ }
++}
++
++/*
++ ==========================================================================
++ Description:
++ This routine is executed periodically inside MlmePeriodicExec() after
++ association with an AP.
++ It checks if StaCfg.Psm is consistent with user policy (recorded in
++ StaCfg.WindowsPowerMode). If not, enforce user policy. However,
++ there're some conditions to consider:
++ 1. we don't support power-saving in ADHOC mode, so Psm=PWR_ACTIVE all
++ the time when Mibss==TRUE
++ 2. When link up in INFRA mode, Psm should not be switch to PWR_SAVE
++ if outgoing traffic available in TxRing or MgmtRing.
++ Output:
++ 1. change pAd->StaCfg.Psm to PWR_SAVE or leave it untouched
++
++ IRQL = DISPATCH_LEVEL
++
++ ==========================================================================
++ */
++VOID MlmeCheckPsmChange(
++ IN PRTMP_ADAPTER pAd,
++ IN ULONG Now32)
++{
++ ULONG PowerMode;
++
++ // condition -
++ // 1. Psm maybe ON only happen in INFRASTRUCTURE mode
++ // 2. user wants either MAX_PSP or FAST_PSP
++ // 3. but current psm is not in PWR_SAVE
++ // 4. CNTL state machine is not doing SCANning
++ // 5. no TX SUCCESS event for the past 1-sec period
++#ifdef NDIS51_MINIPORT
++ if (pAd->StaCfg.WindowsPowerProfile == NdisPowerProfileBattery)
++ PowerMode = pAd->StaCfg.WindowsBatteryPowerMode;
++ else
++#endif
++ PowerMode = pAd->StaCfg.WindowsPowerMode;
++
++ if (INFRA_ON(pAd) &&
++ (PowerMode != Ndis802_11PowerModeCAM) &&
++ (pAd->StaCfg.Psm == PWR_ACTIVE) &&
++// (! RTMP_TEST_FLAG(pAd, fRTMP_ADAPTER_BSS_SCAN_IN_PROGRESS))
++ (pAd->Mlme.CntlMachine.CurrState == CNTL_IDLE) /*&&
++ (pAd->RalinkCounters.OneSecTxNoRetryOkCount == 0) &&
++ (pAd->RalinkCounters.OneSecTxRetryOkCount == 0)*/)
++ {
++ NdisGetSystemUpTime(&pAd->Mlme.LastSendNULLpsmTime);
++ pAd->RalinkCounters.RxCountSinceLastNULL = 0;
++ MlmeSetPsmBit(pAd, PWR_SAVE);
++ if (!(pAd->CommonCfg.bAPSDCapable && pAd->CommonCfg.APEdcaParm.bAPSDCapable))
++ {
++ RTMPSendNullFrame(pAd, pAd->CommonCfg.TxRate, FALSE);
++ }
++ else
++ {
++ RTMPSendNullFrame(pAd, pAd->CommonCfg.TxRate, TRUE);
++ }
++ }
++}
++
++// IRQL = PASSIVE_LEVEL
++// IRQL = DISPATCH_LEVEL
++VOID MlmeSetPsmBit(
++ IN PRTMP_ADAPTER pAd,
++ IN USHORT psm)
++{
++ AUTO_RSP_CFG_STRUC csr4;
++
++ pAd->StaCfg.Psm = psm;
++ RTMP_IO_READ32(pAd, AUTO_RSP_CFG, &csr4.word);
++ csr4.field.AckCtsPsmBit = (psm == PWR_SAVE)? 1:0;
++ RTMP_IO_WRITE32(pAd, AUTO_RSP_CFG, csr4.word);
++ DBGPRINT(RT_DEBUG_TRACE, ("MlmeSetPsmBit = %d\n", psm));
++}
++#endif // CONFIG_STA_SUPPORT //
++
++
++// IRQL = DISPATCH_LEVEL
++VOID MlmeSetTxPreamble(
++ IN PRTMP_ADAPTER pAd,
++ IN USHORT TxPreamble)
++{
++ AUTO_RSP_CFG_STRUC csr4;
++
++ //
++ // Always use Long preamble before verifiation short preamble functionality works well.
++ // Todo: remove the following line if short preamble functionality works
++ //
++ //TxPreamble = Rt802_11PreambleLong;
++
++ RTMP_IO_READ32(pAd, AUTO_RSP_CFG, &csr4.word);
++ if (TxPreamble == Rt802_11PreambleLong)
++ {
++ DBGPRINT(RT_DEBUG_TRACE, ("MlmeSetTxPreamble (= LONG PREAMBLE)\n"));
++ OPSTATUS_CLEAR_FLAG(pAd, fOP_STATUS_SHORT_PREAMBLE_INUSED);
++ csr4.field.AutoResponderPreamble = 0;
++ }
++ else
++ {
++ // NOTE: 1Mbps should always use long preamble
++ DBGPRINT(RT_DEBUG_TRACE, ("MlmeSetTxPreamble (= SHORT PREAMBLE)\n"));
++ OPSTATUS_SET_FLAG(pAd, fOP_STATUS_SHORT_PREAMBLE_INUSED);
++ csr4.field.AutoResponderPreamble = 1;
++ }
++
++ RTMP_IO_WRITE32(pAd, AUTO_RSP_CFG, csr4.word);
++}
++
++/*
++ ==========================================================================
++ Description:
++ Update basic rate bitmap
++ ==========================================================================
++ */
++
++VOID UpdateBasicRateBitmap(
++ IN PRTMP_ADAPTER pAdapter)
++{
++ INT i, j;
++ /* 1 2 5.5, 11, 6, 9, 12, 18, 24, 36, 48, 54 */
++ UCHAR rate[] = { 2, 4, 11, 22, 12, 18, 24, 36, 48, 72, 96, 108 };
++ UCHAR *sup_p = pAdapter->CommonCfg.SupRate;
++ UCHAR *ext_p = pAdapter->CommonCfg.ExtRate;
++ ULONG bitmap = pAdapter->CommonCfg.BasicRateBitmap;
++
++
++ /* if A mode, always use fix BasicRateBitMap */
++ //if (pAdapter->CommonCfg.Channel == PHY_11A)
++ if (pAdapter->CommonCfg.Channel > 14)
++ pAdapter->CommonCfg.BasicRateBitmap = 0x150; /* 6, 12, 24M */
++ /* End of if */
++
++ if (pAdapter->CommonCfg.BasicRateBitmap > 4095)
++ {
++ /* (2 ^ MAX_LEN_OF_SUPPORTED_RATES) -1 */
++ return;
++ } /* End of if */
++
++ for(i=0; i<MAX_LEN_OF_SUPPORTED_RATES; i++)
++ {
++ sup_p[i] &= 0x7f;
++ ext_p[i] &= 0x7f;
++ } /* End of for */
++
++ for(i=0; i<MAX_LEN_OF_SUPPORTED_RATES; i++)
++ {
++ if (bitmap & (1 << i))
++ {
++ for(j=0; j<MAX_LEN_OF_SUPPORTED_RATES; j++)
++ {
++ if (sup_p[j] == rate[i])
++ sup_p[j] |= 0x80;
++ /* End of if */
++ } /* End of for */
++
++ for(j=0; j<MAX_LEN_OF_SUPPORTED_RATES; j++)
++ {
++ if (ext_p[j] == rate[i])
++ ext_p[j] |= 0x80;
++ /* End of if */
++ } /* End of for */
++ } /* End of if */
++ } /* End of for */
++} /* End of UpdateBasicRateBitmap */
++
++// IRQL = PASSIVE_LEVEL
++// IRQL = DISPATCH_LEVEL
++// bLinkUp is to identify the inital link speed.
++// TRUE indicates the rate update at linkup, we should not try to set the rate at 54Mbps.
++VOID MlmeUpdateTxRates(
++ IN PRTMP_ADAPTER pAd,
++ IN BOOLEAN bLinkUp,
++ IN UCHAR apidx)
++{
++ int i, num;
++ UCHAR Rate = RATE_6, MaxDesire = RATE_1, MaxSupport = RATE_1;
++ UCHAR MinSupport = RATE_54;
++ ULONG BasicRateBitmap = 0;
++ UCHAR CurrBasicRate = RATE_1;
++ UCHAR *pSupRate, SupRateLen, *pExtRate, ExtRateLen;
++ PHTTRANSMIT_SETTING pHtPhy = NULL;
++ PHTTRANSMIT_SETTING pMaxHtPhy = NULL;
++ PHTTRANSMIT_SETTING pMinHtPhy = NULL;
++ BOOLEAN *auto_rate_cur_p;
++ UCHAR HtMcs = MCS_AUTO;
++
++ // find max desired rate
++ UpdateBasicRateBitmap(pAd);
++
++ num = 0;
++ auto_rate_cur_p = NULL;
++ for (i=0; i<MAX_LEN_OF_SUPPORTED_RATES; i++)
++ {
++ switch (pAd->CommonCfg.DesireRate[i] & 0x7f)
++ {
++ case 2: Rate = RATE_1; num++; break;
++ case 4: Rate = RATE_2; num++; break;
++ case 11: Rate = RATE_5_5; num++; break;
++ case 22: Rate = RATE_11; num++; break;
++ case 12: Rate = RATE_6; num++; break;
++ case 18: Rate = RATE_9; num++; break;
++ case 24: Rate = RATE_12; num++; break;
++ case 36: Rate = RATE_18; num++; break;
++ case 48: Rate = RATE_24; num++; break;
++ case 72: Rate = RATE_36; num++; break;
++ case 96: Rate = RATE_48; num++; break;
++ case 108: Rate = RATE_54; num++; break;
++ //default: Rate = RATE_1; break;
++ }
++ if (MaxDesire < Rate) MaxDesire = Rate;
++ }
++
++//===========================================================================
++//===========================================================================
++
++#ifdef CONFIG_STA_SUPPORT
++ IF_DEV_CONFIG_OPMODE_ON_STA(pAd)
++ {
++ pHtPhy = &pAd->StaCfg.HTPhyMode;
++ pMaxHtPhy = &pAd->StaCfg.MaxHTPhyMode;
++ pMinHtPhy = &pAd->StaCfg.MinHTPhyMode;
++
++ auto_rate_cur_p = &pAd->StaCfg.bAutoTxRateSwitch;
++ HtMcs = pAd->StaCfg.DesiredTransmitSetting.field.MCS;
++
++ if ((pAd->StaCfg.BssType == BSS_ADHOC) &&
++ (pAd->CommonCfg.PhyMode == PHY_11B) &&
++ (MaxDesire > RATE_11))
++ {
++ MaxDesire = RATE_11;
++ }
++ }
++#endif // CONFIG_STA_SUPPORT //
++
++ pAd->CommonCfg.MaxDesiredRate = MaxDesire;
++ pMinHtPhy->word = 0;
++ pMaxHtPhy->word = 0;
++ pHtPhy->word = 0;
++
++ // Auto rate switching is enabled only if more than one DESIRED RATES are
++ // specified; otherwise disabled
++ if (num <= 1)
++ {
++ //OPSTATUS_CLEAR_FLAG(pAd, fOP_STATUS_TX_RATE_SWITCH_ENABLED);
++ //pAd->CommonCfg.bAutoTxRateSwitch = FALSE;
++ *auto_rate_cur_p = FALSE;
++ }
++ else
++ {
++ //OPSTATUS_SET_FLAG(pAd, fOP_STATUS_TX_RATE_SWITCH_ENABLED);
++ //pAd->CommonCfg.bAutoTxRateSwitch = TRUE;
++ *auto_rate_cur_p = TRUE;
++ }
++
++#if 1
++ if (HtMcs != MCS_AUTO)
++ {
++ //OPSTATUS_CLEAR_FLAG(pAd, fOP_STATUS_TX_RATE_SWITCH_ENABLED);
++ //pAd->CommonCfg.bAutoTxRateSwitch = FALSE;
++ *auto_rate_cur_p = FALSE;
++ }
++ else
++ {
++ //OPSTATUS_SET_FLAG(pAd, fOP_STATUS_TX_RATE_SWITCH_ENABLED);
++ //pAd->CommonCfg.bAutoTxRateSwitch = TRUE;
++ *auto_rate_cur_p = TRUE;
++ }
++#endif
++
++#ifdef CONFIG_STA_SUPPORT
++ if ((ADHOC_ON(pAd) || INFRA_ON(pAd)) && (pAd->OpMode == OPMODE_STA))
++ {
++ pSupRate = &pAd->StaActive.SupRate[0];
++ pExtRate = &pAd->StaActive.ExtRate[0];
++ SupRateLen = pAd->StaActive.SupRateLen;
++ ExtRateLen = pAd->StaActive.ExtRateLen;
++ }
++ else
++#endif // CONFIG_STA_SUPPORT //
++ {
++ pSupRate = &pAd->CommonCfg.SupRate[0];
++ pExtRate = &pAd->CommonCfg.ExtRate[0];
++ SupRateLen = pAd->CommonCfg.SupRateLen;
++ ExtRateLen = pAd->CommonCfg.ExtRateLen;
++ }
++
++ // find max supported rate
++ for (i=0; i<SupRateLen; i++)
++ {
++ switch (pSupRate[i] & 0x7f)
++ {
++ case 2: Rate = RATE_1; if (pSupRate[i] & 0x80) BasicRateBitmap |= 0x0001; break;
++ case 4: Rate = RATE_2; if (pSupRate[i] & 0x80) BasicRateBitmap |= 0x0002; break;
++ case 11: Rate = RATE_5_5; if (pSupRate[i] & 0x80) BasicRateBitmap |= 0x0004; break;
++ case 22: Rate = RATE_11; if (pSupRate[i] & 0x80) BasicRateBitmap |= 0x0008; break;
++ case 12: Rate = RATE_6; /*if (pSupRate[i] & 0x80)*/ BasicRateBitmap |= 0x0010; break;
++ case 18: Rate = RATE_9; if (pSupRate[i] & 0x80) BasicRateBitmap |= 0x0020; break;
++ case 24: Rate = RATE_12; /*if (pSupRate[i] & 0x80)*/ BasicRateBitmap |= 0x0040; break;
++ case 36: Rate = RATE_18; if (pSupRate[i] & 0x80) BasicRateBitmap |= 0x0080; break;
++ case 48: Rate = RATE_24; /*if (pSupRate[i] & 0x80)*/ BasicRateBitmap |= 0x0100; break;
++ case 72: Rate = RATE_36; if (pSupRate[i] & 0x80) BasicRateBitmap |= 0x0200; break;
++ case 96: Rate = RATE_48; if (pSupRate[i] & 0x80) BasicRateBitmap |= 0x0400; break;
++ case 108: Rate = RATE_54; if (pSupRate[i] & 0x80) BasicRateBitmap |= 0x0800; break;
++ default: Rate = RATE_1; break;
++ }
++ if (MaxSupport < Rate) MaxSupport = Rate;
++
++ if (MinSupport > Rate) MinSupport = Rate;
++ }
++
++ for (i=0; i<ExtRateLen; i++)
++ {
++ switch (pExtRate[i] & 0x7f)
++ {
++ case 2: Rate = RATE_1; if (pExtRate[i] & 0x80) BasicRateBitmap |= 0x0001; break;
++ case 4: Rate = RATE_2; if (pExtRate[i] & 0x80) BasicRateBitmap |= 0x0002; break;
++ case 11: Rate = RATE_5_5; if (pExtRate[i] & 0x80) BasicRateBitmap |= 0x0004; break;
++ case 22: Rate = RATE_11; if (pExtRate[i] & 0x80) BasicRateBitmap |= 0x0008; break;
++ case 12: Rate = RATE_6; /*if (pExtRate[i] & 0x80)*/ BasicRateBitmap |= 0x0010; break;
++ case 18: Rate = RATE_9; if (pExtRate[i] & 0x80) BasicRateBitmap |= 0x0020; break;
++ case 24: Rate = RATE_12; /*if (pExtRate[i] & 0x80)*/ BasicRateBitmap |= 0x0040; break;
++ case 36: Rate = RATE_18; if (pExtRate[i] & 0x80) BasicRateBitmap |= 0x0080; break;
++ case 48: Rate = RATE_24; /*if (pExtRate[i] & 0x80)*/ BasicRateBitmap |= 0x0100; break;
++ case 72: Rate = RATE_36; if (pExtRate[i] & 0x80) BasicRateBitmap |= 0x0200; break;
++ case 96: Rate = RATE_48; if (pExtRate[i] & 0x80) BasicRateBitmap |= 0x0400; break;
++ case 108: Rate = RATE_54; if (pExtRate[i] & 0x80) BasicRateBitmap |= 0x0800; break;
++ default: Rate = RATE_1; break;
++ }
++ if (MaxSupport < Rate) MaxSupport = Rate;
++
++ if (MinSupport > Rate) MinSupport = Rate;
++ }
++
++ RTMP_IO_WRITE32(pAd, LEGACY_BASIC_RATE, BasicRateBitmap);
++
++ // bug fix
++ // pAd->CommonCfg.BasicRateBitmap = BasicRateBitmap;
++
++ // calculate the exptected ACK rate for each TX rate. This info is used to caculate
++ // the DURATION field of outgoing uniicast DATA/MGMT frame
++ for (i=0; i<MAX_LEN_OF_SUPPORTED_RATES; i++)
++ {
++ if (BasicRateBitmap & (0x01 << i))
++ CurrBasicRate = (UCHAR)i;
++ pAd->CommonCfg.ExpectedACKRate[i] = CurrBasicRate;
++ }
++
++ DBGPRINT(RT_DEBUG_TRACE,("MlmeUpdateTxRates[MaxSupport = %d] = MaxDesire %d Mbps\n", RateIdToMbps[MaxSupport], RateIdToMbps[MaxDesire]));
++ // max tx rate = min {max desire rate, max supported rate}
++ if (MaxSupport < MaxDesire)
++ pAd->CommonCfg.MaxTxRate = MaxSupport;
++ else
++ pAd->CommonCfg.MaxTxRate = MaxDesire;
++
++ pAd->CommonCfg.MinTxRate = MinSupport;
++ // 2003-07-31 john - 2500 doesn't have good sensitivity at high OFDM rates. to increase the success
++ // ratio of initial DHCP packet exchange, TX rate starts from a lower rate depending
++ // on average RSSI
++ // 1. RSSI >= -70db, start at 54 Mbps (short distance)
++ // 2. -70 > RSSI >= -75, start at 24 Mbps (mid distance)
++ // 3. -75 > RSSI, start at 11 Mbps (long distance)
++ //if (OPSTATUS_TEST_FLAG(pAd, fOP_STATUS_TX_RATE_SWITCH_ENABLED)/* &&
++ // OPSTATUS_TEST_FLAG(pAd, fOP_STATUS_MEDIA_STATE_CONNECTED)*/)
++ if (*auto_rate_cur_p)
++ {
++ short dbm = 0;
++#ifdef CONFIG_STA_SUPPORT
++ IF_DEV_CONFIG_OPMODE_ON_STA(pAd)
++ dbm = pAd->StaCfg.RssiSample.AvgRssi0 - pAd->BbpRssiToDbmDelta;
++#endif // CONFIG_STA_SUPPORT //
++ if (bLinkUp == TRUE)
++ pAd->CommonCfg.TxRate = RATE_24;
++ else
++ pAd->CommonCfg.TxRate = pAd->CommonCfg.MaxTxRate;
++
++ if (dbm < -75)
++ pAd->CommonCfg.TxRate = RATE_11;
++ else if (dbm < -70)
++ pAd->CommonCfg.TxRate = RATE_24;
++
++ // should never exceed MaxTxRate (consider 11B-only mode)
++ if (pAd->CommonCfg.TxRate > pAd->CommonCfg.MaxTxRate)
++ pAd->CommonCfg.TxRate = pAd->CommonCfg.MaxTxRate;
++
++ pAd->CommonCfg.TxRateIndex = 0;
++ }
++ else
++ {
++ pAd->CommonCfg.TxRate = pAd->CommonCfg.MaxTxRate;
++ pHtPhy->field.MCS = (pAd->CommonCfg.MaxTxRate > 3) ? (pAd->CommonCfg.MaxTxRate - 4) : pAd->CommonCfg.MaxTxRate;
++ pHtPhy->field.MODE = (pAd->CommonCfg.MaxTxRate > 3) ? MODE_OFDM : MODE_CCK;
++
++ pAd->MacTab.Content[BSSID_WCID].HTPhyMode.field.STBC = pHtPhy->field.STBC;
++ pAd->MacTab.Content[BSSID_WCID].HTPhyMode.field.ShortGI = pHtPhy->field.ShortGI;
++ pAd->MacTab.Content[BSSID_WCID].HTPhyMode.field.MCS = pHtPhy->field.MCS;
++ pAd->MacTab.Content[BSSID_WCID].HTPhyMode.field.MODE = pHtPhy->field.MODE;
++ }
++
++ if (pAd->CommonCfg.TxRate <= RATE_11)
++ {
++ pMaxHtPhy->field.MODE = MODE_CCK;
++ pMaxHtPhy->field.MCS = pAd->CommonCfg.TxRate;
++ pMinHtPhy->field.MCS = pAd->CommonCfg.MinTxRate;
++ }
++ else
++ {
++ pMaxHtPhy->field.MODE = MODE_OFDM;
++ pMaxHtPhy->field.MCS = OfdmRateToRxwiMCS[pAd->CommonCfg.TxRate];
++ if (pAd->CommonCfg.MinTxRate >= RATE_6 && (pAd->CommonCfg.MinTxRate <= RATE_54))
++ {pMinHtPhy->field.MCS = OfdmRateToRxwiMCS[pAd->CommonCfg.MinTxRate];}
++ else
++ {pMinHtPhy->field.MCS = pAd->CommonCfg.MinTxRate;}
++ }
++
++ pHtPhy->word = (pMaxHtPhy->word);
++ if (bLinkUp && (pAd->OpMode == OPMODE_STA))
++ {
++ pAd->MacTab.Content[BSSID_WCID].HTPhyMode.word = pHtPhy->word;
++ pAd->MacTab.Content[BSSID_WCID].MaxHTPhyMode.word = pMaxHtPhy->word;
++ pAd->MacTab.Content[BSSID_WCID].MinHTPhyMode.word = pMinHtPhy->word;
++ }
++ else
++ {
++ switch (pAd->CommonCfg.PhyMode)
++ {
++ case PHY_11BG_MIXED:
++ case PHY_11B:
++#ifdef DOT11_N_SUPPORT
++ case PHY_11BGN_MIXED:
++#endif // DOT11_N_SUPPORT //
++ pAd->CommonCfg.MlmeRate = RATE_1;
++ pAd->CommonCfg.MlmeTransmit.field.MODE = MODE_CCK;
++ pAd->CommonCfg.MlmeTransmit.field.MCS = RATE_1;
++
++//#ifdef WIFI_TEST
++ pAd->CommonCfg.RtsRate = RATE_11;
++//#else
++// pAd->CommonCfg.RtsRate = RATE_1;
++//#endif
++ break;
++ case PHY_11G:
++ case PHY_11A:
++#ifdef DOT11_N_SUPPORT
++ case PHY_11AGN_MIXED:
++ case PHY_11GN_MIXED:
++ case PHY_11N_2_4G:
++ case PHY_11AN_MIXED:
++ case PHY_11N_5G:
++#endif // DOT11_N_SUPPORT //
++ pAd->CommonCfg.MlmeRate = RATE_6;
++ pAd->CommonCfg.RtsRate = RATE_6;
++ pAd->CommonCfg.MlmeTransmit.field.MODE = MODE_OFDM;
++ pAd->CommonCfg.MlmeTransmit.field.MCS = OfdmRateToRxwiMCS[pAd->CommonCfg.MlmeRate];
++ break;
++ case PHY_11ABG_MIXED:
++#ifdef DOT11_N_SUPPORT
++ case PHY_11ABGN_MIXED:
++#endif // DOT11_N_SUPPORT //
++ if (pAd->CommonCfg.Channel <= 14)
++ {
++ pAd->CommonCfg.MlmeRate = RATE_1;
++ pAd->CommonCfg.RtsRate = RATE_1;
++ pAd->CommonCfg.MlmeTransmit.field.MODE = MODE_CCK;
++ pAd->CommonCfg.MlmeTransmit.field.MCS = RATE_1;
++ }
++ else
++ {
++ pAd->CommonCfg.MlmeRate = RATE_6;
++ pAd->CommonCfg.RtsRate = RATE_6;
++ pAd->CommonCfg.MlmeTransmit.field.MODE = MODE_OFDM;
++ pAd->CommonCfg.MlmeTransmit.field.MCS = OfdmRateToRxwiMCS[pAd->CommonCfg.MlmeRate];
++ }
++ break;
++ default: // error
++ pAd->CommonCfg.MlmeRate = RATE_6;
++ pAd->CommonCfg.MlmeTransmit.field.MODE = MODE_OFDM;
++ pAd->CommonCfg.MlmeTransmit.field.MCS = OfdmRateToRxwiMCS[pAd->CommonCfg.MlmeRate];
++ pAd->CommonCfg.RtsRate = RATE_1;
++ break;
++ }
++ //
++ // Keep Basic Mlme Rate.
++ //
++ pAd->MacTab.Content[MCAST_WCID].HTPhyMode.word = pAd->CommonCfg.MlmeTransmit.word;
++ if (pAd->CommonCfg.MlmeTransmit.field.MODE == MODE_OFDM)
++ pAd->MacTab.Content[MCAST_WCID].HTPhyMode.field.MCS = OfdmRateToRxwiMCS[RATE_24];
++ else
++ pAd->MacTab.Content[MCAST_WCID].HTPhyMode.field.MCS = RATE_1;
++ pAd->CommonCfg.BasicMlmeRate = pAd->CommonCfg.MlmeRate;
++ }
++
++ DBGPRINT(RT_DEBUG_TRACE, (" MlmeUpdateTxRates (MaxDesire=%d, MaxSupport=%d, MaxTxRate=%d, MinRate=%d, Rate Switching =%d)\n",
++ RateIdToMbps[MaxDesire], RateIdToMbps[MaxSupport], RateIdToMbps[pAd->CommonCfg.MaxTxRate], RateIdToMbps[pAd->CommonCfg.MinTxRate],
++ /*OPSTATUS_TEST_FLAG(pAd, fOP_STATUS_TX_RATE_SWITCH_ENABLED)*/*auto_rate_cur_p));
++ DBGPRINT(RT_DEBUG_TRACE, (" MlmeUpdateTxRates (TxRate=%d, RtsRate=%d, BasicRateBitmap=0x%04lx)\n",
++ RateIdToMbps[pAd->CommonCfg.TxRate], RateIdToMbps[pAd->CommonCfg.RtsRate], BasicRateBitmap));
++ DBGPRINT(RT_DEBUG_TRACE, ("MlmeUpdateTxRates (MlmeTransmit=0x%x, MinHTPhyMode=%x, MaxHTPhyMode=0x%x, HTPhyMode=0x%x)\n",
++ pAd->CommonCfg.MlmeTransmit.word, pAd->MacTab.Content[BSSID_WCID].MinHTPhyMode.word ,pAd->MacTab.Content[BSSID_WCID].MaxHTPhyMode.word ,pAd->MacTab.Content[BSSID_WCID].HTPhyMode.word ));
++}
++
++#ifdef DOT11_N_SUPPORT
++/*
++ ==========================================================================
++ Description:
++ This function update HT Rate setting.
++ Input Wcid value is valid for 2 case :
++ 1. it's used for Station in infra mode that copy AP rate to Mactable.
++ 2. OR Station in adhoc mode to copy peer's HT rate to Mactable.
++
++ IRQL = DISPATCH_LEVEL
++
++ ==========================================================================
++ */
++VOID MlmeUpdateHtTxRates(
++ IN PRTMP_ADAPTER pAd,
++ IN UCHAR apidx)
++{
++ UCHAR StbcMcs; //j, StbcMcs, bitmask;
++ CHAR i; // 3*3
++ RT_HT_CAPABILITY *pRtHtCap = NULL;
++ RT_HT_PHY_INFO *pActiveHtPhy = NULL;
++ ULONG BasicMCS;
++ UCHAR j, bitmask;
++ PRT_HT_PHY_INFO pDesireHtPhy = NULL;
++ PHTTRANSMIT_SETTING pHtPhy = NULL;
++ PHTTRANSMIT_SETTING pMaxHtPhy = NULL;
++ PHTTRANSMIT_SETTING pMinHtPhy = NULL;
++ BOOLEAN *auto_rate_cur_p;
++
++ DBGPRINT(RT_DEBUG_TRACE,("MlmeUpdateHtTxRates===> \n"));
++
++ auto_rate_cur_p = NULL;
++
++#ifdef CONFIG_STA_SUPPORT
++ IF_DEV_CONFIG_OPMODE_ON_STA(pAd)
++ {
++ pDesireHtPhy = &pAd->StaCfg.DesiredHtPhyInfo;
++ pActiveHtPhy = &pAd->StaCfg.DesiredHtPhyInfo;
++ pHtPhy = &pAd->StaCfg.HTPhyMode;
++ pMaxHtPhy = &pAd->StaCfg.MaxHTPhyMode;
++ pMinHtPhy = &pAd->StaCfg.MinHTPhyMode;
++
++ auto_rate_cur_p = &pAd->StaCfg.bAutoTxRateSwitch;
++ }
++#endif // CONFIG_STA_SUPPORT //
++
++#ifdef CONFIG_STA_SUPPORT
++ if ((ADHOC_ON(pAd) || INFRA_ON(pAd)) && (pAd->OpMode == OPMODE_STA))
++ {
++ if (pAd->StaActive.SupportedPhyInfo.bHtEnable == FALSE)
++ return;
++
++ pRtHtCap = &pAd->StaActive.SupportedHtPhy;
++ pActiveHtPhy = &pAd->StaActive.SupportedPhyInfo;
++ StbcMcs = (UCHAR)pAd->MlmeAux.AddHtInfo.AddHtInfo3.StbcMcs;
++ BasicMCS =pAd->MlmeAux.AddHtInfo.MCSSet[0]+(pAd->MlmeAux.AddHtInfo.MCSSet[1]<<8)+(StbcMcs<<16);
++ if ((pAd->CommonCfg.DesiredHtPhy.TxSTBC) && (pRtHtCap->RxSTBC) && (pAd->Antenna.field.TxPath == 2))
++ pMaxHtPhy->field.STBC = STBC_USE;
++ else
++ pMaxHtPhy->field.STBC = STBC_NONE;
++ }
++ else
++#endif // CONFIG_STA_SUPPORT //
++ {
++ if (pDesireHtPhy->bHtEnable == FALSE)
++ return;
++
++ pRtHtCap = &pAd->CommonCfg.DesiredHtPhy;
++ StbcMcs = (UCHAR)pAd->CommonCfg.AddHTInfo.AddHtInfo3.StbcMcs;
++ BasicMCS = pAd->CommonCfg.AddHTInfo.MCSSet[0]+(pAd->CommonCfg.AddHTInfo.MCSSet[1]<<8)+(StbcMcs<<16);
++ if ((pAd->CommonCfg.DesiredHtPhy.TxSTBC) && (pRtHtCap->RxSTBC) && (pAd->Antenna.field.TxPath == 2))
++ pMaxHtPhy->field.STBC = STBC_USE;
++ else
++ pMaxHtPhy->field.STBC = STBC_NONE;
++ }
++
++ // Decide MAX ht rate.
++ if ((pRtHtCap->GF) && (pAd->CommonCfg.DesiredHtPhy.GF))
++ pMaxHtPhy->field.MODE = MODE_HTGREENFIELD;
++ else
++ pMaxHtPhy->field.MODE = MODE_HTMIX;
++
++ if ((pAd->CommonCfg.DesiredHtPhy.ChannelWidth) && (pRtHtCap->ChannelWidth))
++ pMaxHtPhy->field.BW = BW_40;
++ else
++ pMaxHtPhy->field.BW = BW_20;
++
++ if (pMaxHtPhy->field.BW == BW_20)
++ pMaxHtPhy->field.ShortGI = (pAd->CommonCfg.DesiredHtPhy.ShortGIfor20 & pRtHtCap->ShortGIfor20);
++ else
++ pMaxHtPhy->field.ShortGI = (pAd->CommonCfg.DesiredHtPhy.ShortGIfor40 & pRtHtCap->ShortGIfor40);
++
++ for (i=23; i>=0; i--) // 3*3
++ {
++ j = i/8;
++ bitmask = (1<<(i-(j*8)));
++
++ if ((pActiveHtPhy->MCSSet[j] & bitmask) && (pDesireHtPhy->MCSSet[j] & bitmask))
++ {
++ pMaxHtPhy->field.MCS = i;
++ break;
++ }
++
++ if (i==0)
++ break;
++ }
++
++ // Copy MIN ht rate. rt2860???
++ pMinHtPhy->field.BW = BW_20;
++ pMinHtPhy->field.MCS = 0;
++ pMinHtPhy->field.STBC = 0;
++ pMinHtPhy->field.ShortGI = 0;
++ //If STA assigns fixed rate. update to fixed here.
++#ifdef CONFIG_STA_SUPPORT
++ if ( (pAd->OpMode == OPMODE_STA) && (pDesireHtPhy->MCSSet[0] != 0xff))
++ {
++ if (pDesireHtPhy->MCSSet[4] != 0)
++ {
++ pMaxHtPhy->field.MCS = 32;
++ pMinHtPhy->field.MCS = 32;
++ DBGPRINT(RT_DEBUG_TRACE,("MlmeUpdateHtTxRates<=== Use Fixed MCS = %d\n",pMinHtPhy->field.MCS));
++ }
++
++ for (i=23; (CHAR)i >= 0; i--) // 3*3
++ {
++ j = i/8;
++ bitmask = (1<<(i-(j*8)));
++ if ( (pDesireHtPhy->MCSSet[j] & bitmask) && (pActiveHtPhy->MCSSet[j] & bitmask))
++ {
++ pMaxHtPhy->field.MCS = i;
++ pMinHtPhy->field.MCS = i;
++ break;
++ }
++ if (i==0)
++ break;
++ }
++ }
++#endif // CONFIG_STA_SUPPORT //
++
++
++ // Decide ht rate
++ pHtPhy->field.STBC = pMaxHtPhy->field.STBC;
++ pHtPhy->field.BW = pMaxHtPhy->field.BW;
++ pHtPhy->field.MODE = pMaxHtPhy->field.MODE;
++ pHtPhy->field.MCS = pMaxHtPhy->field.MCS;
++ pHtPhy->field.ShortGI = pMaxHtPhy->field.ShortGI;
++
++ // use default now. rt2860
++ if (pDesireHtPhy->MCSSet[0] != 0xff)
++ *auto_rate_cur_p = FALSE;
++ else
++ *auto_rate_cur_p = TRUE;
++
++ DBGPRINT(RT_DEBUG_TRACE, (" MlmeUpdateHtTxRates<---.AMsduSize = %d \n", pAd->CommonCfg.DesiredHtPhy.AmsduSize ));
++ DBGPRINT(RT_DEBUG_TRACE,("TX: MCS[0] = %x (choose %d), BW = %d, ShortGI = %d, MODE = %d, \n", pActiveHtPhy->MCSSet[0],pHtPhy->field.MCS,
++ pHtPhy->field.BW, pHtPhy->field.ShortGI, pHtPhy->field.MODE));
++ DBGPRINT(RT_DEBUG_TRACE,("MlmeUpdateHtTxRates<=== \n"));
++}
++#endif // DOT11_N_SUPPORT //
++
++// IRQL = DISPATCH_LEVEL
++VOID MlmeRadioOff(
++ IN PRTMP_ADAPTER pAd)
++{
++ RT28XX_MLME_RADIO_OFF(pAd);
++}
++
++// IRQL = DISPATCH_LEVEL
++VOID MlmeRadioOn(
++ IN PRTMP_ADAPTER pAd)
++{
++ RT28XX_MLME_RADIO_ON(pAd);
++}
++
++// ===========================================================================================
++// bss_table.c
++// ===========================================================================================
++
++
++/*! \brief initialize BSS table
++ * \param p_tab pointer to the table
++ * \return none
++ * \pre
++ * \post
++
++ IRQL = PASSIVE_LEVEL
++ IRQL = DISPATCH_LEVEL
++
++ */
++VOID BssTableInit(
++ IN BSS_TABLE *Tab)
++{
++ int i;
++
++ Tab->BssNr = 0;
++ Tab->BssOverlapNr = 0;
++ for (i = 0; i < MAX_LEN_OF_BSS_TABLE; i++)
++ {
++ NdisZeroMemory(&Tab->BssEntry[i], sizeof(BSS_ENTRY));
++ Tab->BssEntry[i].Rssi = -127; // initial the rssi as a minimum value
++ }
++}
++
++#ifdef DOT11_N_SUPPORT
++VOID BATableInit(
++ IN PRTMP_ADAPTER pAd,
++ IN BA_TABLE *Tab)
++{
++ int i;
++
++ Tab->numAsOriginator = 0;
++ Tab->numAsRecipient = 0;
++ NdisAllocateSpinLock(&pAd->BATabLock);
++ for (i = 0; i < MAX_LEN_OF_BA_REC_TABLE; i++)
++ {
++ Tab->BARecEntry[i].REC_BA_Status = Recipient_NONE;
++ NdisAllocateSpinLock(&(Tab->BARecEntry[i].RxReRingLock));
++ }
++ for (i = 0; i < MAX_LEN_OF_BA_ORI_TABLE; i++)
++ {
++ Tab->BAOriEntry[i].ORI_BA_Status = Originator_NONE;
++ }
++}
++#endif // DOT11_N_SUPPORT //
++
++/*! \brief search the BSS table by SSID
++ * \param p_tab pointer to the bss table
++ * \param ssid SSID string
++ * \return index of the table, BSS_NOT_FOUND if not in the table
++ * \pre
++ * \post
++ * \note search by sequential search
++
++ IRQL = DISPATCH_LEVEL
++
++ */
++ULONG BssTableSearch(
++ IN BSS_TABLE *Tab,
++ IN PUCHAR pBssid,
++ IN UCHAR Channel)
++{
++ UCHAR i;
++
++ for (i = 0; i < Tab->BssNr; i++)
++ {
++ //
++ // Some AP that support A/B/G mode that may used the same BSSID on 11A and 11B/G.
++ // We should distinguish this case.
++ //
++ if ((((Tab->BssEntry[i].Channel <= 14) && (Channel <= 14)) ||
++ ((Tab->BssEntry[i].Channel > 14) && (Channel > 14))) &&
++ MAC_ADDR_EQUAL(Tab->BssEntry[i].Bssid, pBssid))
++ {
++ return i;
++ }
++ }
++ return (ULONG)BSS_NOT_FOUND;
++}
++
++ULONG BssSsidTableSearch(
++ IN BSS_TABLE *Tab,
++ IN PUCHAR pBssid,
++ IN PUCHAR pSsid,
++ IN UCHAR SsidLen,
++ IN UCHAR Channel)
++{
++ UCHAR i;
++
++ for (i = 0; i < Tab->BssNr; i++)
++ {
++ //
++ // Some AP that support A/B/G mode that may used the same BSSID on 11A and 11B/G.
++ // We should distinguish this case.
++ //
++ if ((((Tab->BssEntry[i].Channel <= 14) && (Channel <= 14)) ||
++ ((Tab->BssEntry[i].Channel > 14) && (Channel > 14))) &&
++ MAC_ADDR_EQUAL(Tab->BssEntry[i].Bssid, pBssid) &&
++ SSID_EQUAL(pSsid, SsidLen, Tab->BssEntry[i].Ssid, Tab->BssEntry[i].SsidLen))
++ {
++ return i;
++ }
++ }
++ return (ULONG)BSS_NOT_FOUND;
++}
++
++ULONG BssTableSearchWithSSID(
++ IN BSS_TABLE *Tab,
++ IN PUCHAR Bssid,
++ IN PUCHAR pSsid,
++ IN UCHAR SsidLen,
++ IN UCHAR Channel)
++{
++ UCHAR i;
++
++ for (i = 0; i < Tab->BssNr; i++)
++ {
++ if ((((Tab->BssEntry[i].Channel <= 14) && (Channel <= 14)) ||
++ ((Tab->BssEntry[i].Channel > 14) && (Channel > 14))) &&
++ MAC_ADDR_EQUAL(&(Tab->BssEntry[i].Bssid), Bssid) &&
++ (SSID_EQUAL(pSsid, SsidLen, Tab->BssEntry[i].Ssid, Tab->BssEntry[i].SsidLen) ||
++ (NdisEqualMemory(pSsid, ZeroSsid, SsidLen)) ||
++ (NdisEqualMemory(Tab->BssEntry[i].Ssid, ZeroSsid, Tab->BssEntry[i].SsidLen))))
++ {
++ return i;
++ }
++ }
++ return (ULONG)BSS_NOT_FOUND;
++}
++
++// IRQL = DISPATCH_LEVEL
++VOID BssTableDeleteEntry(
++ IN OUT BSS_TABLE *Tab,
++ IN PUCHAR pBssid,
++ IN UCHAR Channel)
++{
++ UCHAR i, j;
++
++ for (i = 0; i < Tab->BssNr; i++)
++ {
++ if ((Tab->BssEntry[i].Channel == Channel) &&
++ (MAC_ADDR_EQUAL(Tab->BssEntry[i].Bssid, pBssid)))
++ {
++ for (j = i; j < Tab->BssNr - 1; j++)
++ {
++ NdisMoveMemory(&(Tab->BssEntry[j]), &(Tab->BssEntry[j + 1]), sizeof(BSS_ENTRY));
++ }
++ NdisZeroMemory(&(Tab->BssEntry[Tab->BssNr - 1]), sizeof(BSS_ENTRY));
++ Tab->BssNr -= 1;
++ return;
++ }
++ }
++}
++
++#ifdef DOT11_N_SUPPORT
++/*
++ ========================================================================
++ Routine Description:
++ Delete the Originator Entry in BAtable. Or decrease numAs Originator by 1 if needed.
++
++ Arguments:
++ // IRQL = DISPATCH_LEVEL
++ ========================================================================
++*/
++VOID BATableDeleteORIEntry(
++ IN OUT PRTMP_ADAPTER pAd,
++ IN BA_ORI_ENTRY *pBAORIEntry)
++{
++
++ if (pBAORIEntry->ORI_BA_Status != Originator_NONE)
++ {
++ NdisAcquireSpinLock(&pAd->BATabLock);
++ if (pBAORIEntry->ORI_BA_Status == Originator_Done)
++ {
++ pAd->BATable.numAsOriginator -= 1;
++ DBGPRINT(RT_DEBUG_TRACE, ("BATableDeleteORIEntry numAsOriginator= %ld\n", pAd->BATable.numAsRecipient));
++ // Erase Bitmap flag.
++ }
++ pAd->MacTab.Content[pBAORIEntry->Wcid].TXBAbitmap &= (~(1<<(pBAORIEntry->TID) )); // If STA mode, erase flag here
++ pAd->MacTab.Content[pBAORIEntry->Wcid].BAOriWcidArray[pBAORIEntry->TID] = 0; // If STA mode, erase flag here
++ pBAORIEntry->ORI_BA_Status = Originator_NONE;
++ pBAORIEntry->Token = 1;
++ // Not clear Sequence here.
++ NdisReleaseSpinLock(&pAd->BATabLock);
++ }
++}
++#endif // DOT11_N_SUPPORT //
++
++/*! \brief
++ * \param
++ * \return
++ * \pre
++ * \post
++
++ IRQL = DISPATCH_LEVEL
++
++ */
++VOID BssEntrySet(
++ IN PRTMP_ADAPTER pAd,
++ OUT BSS_ENTRY *pBss,
++ IN PUCHAR pBssid,
++ IN CHAR Ssid[],
++ IN UCHAR SsidLen,
++ IN UCHAR BssType,
++ IN USHORT BeaconPeriod,
++ IN PCF_PARM pCfParm,
++ IN USHORT AtimWin,
++ IN USHORT CapabilityInfo,
++ IN UCHAR SupRate[],
++ IN UCHAR SupRateLen,
++ IN UCHAR ExtRate[],
++ IN UCHAR ExtRateLen,
++ IN HT_CAPABILITY_IE *pHtCapability,
++ IN ADD_HT_INFO_IE *pAddHtInfo, // AP might use this additional ht info IE
++ IN UCHAR HtCapabilityLen,
++ IN UCHAR AddHtInfoLen,
++ IN UCHAR NewExtChanOffset,
++ IN UCHAR Channel,
++ IN CHAR Rssi,
++ IN LARGE_INTEGER TimeStamp,
++ IN UCHAR CkipFlag,
++ IN PEDCA_PARM pEdcaParm,
++ IN PQOS_CAPABILITY_PARM pQosCapability,
++ IN PQBSS_LOAD_PARM pQbssLoad,
++ IN USHORT LengthVIE,
++ IN PNDIS_802_11_VARIABLE_IEs pVIE)
++{
++ COPY_MAC_ADDR(pBss->Bssid, pBssid);
++ // Default Hidden SSID to be TRUE, it will be turned to FALSE after coping SSID
++ pBss->Hidden = 1;
++ if (SsidLen > 0)
++ {
++ // For hidden SSID AP, it might send beacon with SSID len equal to 0
++ // Or send beacon /probe response with SSID len matching real SSID length,
++ // but SSID is all zero. such as "00-00-00-00" with length 4.
++ // We have to prevent this case overwrite correct table
++ if (NdisEqualMemory(Ssid, ZeroSsid, SsidLen) == 0)
++ {
++ NdisZeroMemory(pBss->Ssid, MAX_LEN_OF_SSID);
++ NdisMoveMemory(pBss->Ssid, Ssid, SsidLen);
++ pBss->SsidLen = SsidLen;
++ pBss->Hidden = 0;
++ }
++ }
++ else
++ pBss->SsidLen = 0;
++ pBss->BssType = BssType;
++ pBss->BeaconPeriod = BeaconPeriod;
++ if (BssType == BSS_INFRA)
++ {
++ if (pCfParm->bValid)
++ {
++ pBss->CfpCount = pCfParm->CfpCount;
++ pBss->CfpPeriod = pCfParm->CfpPeriod;
++ pBss->CfpMaxDuration = pCfParm->CfpMaxDuration;
++ pBss->CfpDurRemaining = pCfParm->CfpDurRemaining;
++ }
++ }
++ else
++ {
++ pBss->AtimWin = AtimWin;
++ }
++
++ pBss->CapabilityInfo = CapabilityInfo;
++ // The privacy bit indicate security is ON, it maight be WEP, TKIP or AES
++ // Combine with AuthMode, they will decide the connection methods.
++ pBss->Privacy = CAP_IS_PRIVACY_ON(pBss->CapabilityInfo);
++ ASSERT(SupRateLen <= MAX_LEN_OF_SUPPORTED_RATES);
++ if (SupRateLen <= MAX_LEN_OF_SUPPORTED_RATES)
++ NdisMoveMemory(pBss->SupRate, SupRate, SupRateLen);
++ else
++ NdisMoveMemory(pBss->SupRate, SupRate, MAX_LEN_OF_SUPPORTED_RATES);
++ pBss->SupRateLen = SupRateLen;
++ ASSERT(ExtRateLen <= MAX_LEN_OF_SUPPORTED_RATES);
++ NdisMoveMemory(pBss->ExtRate, ExtRate, ExtRateLen);
++ NdisMoveMemory(&pBss->HtCapability, pHtCapability, HtCapabilityLen);
++ NdisMoveMemory(&pBss->AddHtInfo, pAddHtInfo, AddHtInfoLen);
++ pBss->NewExtChanOffset = NewExtChanOffset;
++ pBss->ExtRateLen = ExtRateLen;
++ pBss->Channel = Channel;
++ pBss->CentralChannel = Channel;
++ pBss->Rssi = Rssi;
++ // Update CkipFlag. if not exists, the value is 0x0
++ pBss->CkipFlag = CkipFlag;
++
++ // New for microsoft Fixed IEs
++ NdisMoveMemory(pBss->FixIEs.Timestamp, &TimeStamp, 8);
++ pBss->FixIEs.BeaconInterval = BeaconPeriod;
++ pBss->FixIEs.Capabilities = CapabilityInfo;
++
++ // New for microsoft Variable IEs
++ if (LengthVIE != 0)
++ {
++ pBss->VarIELen = LengthVIE;
++ NdisMoveMemory(pBss->VarIEs, pVIE, pBss->VarIELen);
++ }
++ else
++ {
++ pBss->VarIELen = 0;
++ }
++
++ pBss->AddHtInfoLen = 0;
++ pBss->HtCapabilityLen = 0;
++#ifdef DOT11_N_SUPPORT
++ if (HtCapabilityLen> 0)
++ {
++ pBss->HtCapabilityLen = HtCapabilityLen;
++ NdisMoveMemory(&pBss->HtCapability, pHtCapability, HtCapabilityLen);
++ if (AddHtInfoLen > 0)
++ {
++ pBss->AddHtInfoLen = AddHtInfoLen;
++ NdisMoveMemory(&pBss->AddHtInfo, pAddHtInfo, AddHtInfoLen);
++
++ if ((pAddHtInfo->ControlChan > 2)&& (pAddHtInfo->AddHtInfo.ExtChanOffset == EXTCHA_BELOW) && (pHtCapability->HtCapInfo.ChannelWidth == BW_40))
++ {
++ pBss->CentralChannel = pAddHtInfo->ControlChan - 2;
++ }
++ else if ((pAddHtInfo->AddHtInfo.ExtChanOffset == EXTCHA_ABOVE) && (pHtCapability->HtCapInfo.ChannelWidth == BW_40))
++ {
++ pBss->CentralChannel = pAddHtInfo->ControlChan + 2;
++ }
++ }
++ }
++#endif // DOT11_N_SUPPORT //
++
++ BssCipherParse(pBss);
++
++ // new for QOS
++ if (pEdcaParm)
++ NdisMoveMemory(&pBss->EdcaParm, pEdcaParm, sizeof(EDCA_PARM));
++ else
++ pBss->EdcaParm.bValid = FALSE;
++ if (pQosCapability)
++ NdisMoveMemory(&pBss->QosCapability, pQosCapability, sizeof(QOS_CAPABILITY_PARM));
++ else
++ pBss->QosCapability.bValid = FALSE;
++ if (pQbssLoad)
++ NdisMoveMemory(&pBss->QbssLoad, pQbssLoad, sizeof(QBSS_LOAD_PARM));
++ else
++ pBss->QbssLoad.bValid = FALSE;
++
++#ifdef CONFIG_STA_SUPPORT
++ IF_DEV_CONFIG_OPMODE_ON_STA(pAd)
++ {
++ PEID_STRUCT pEid;
++ USHORT Length = 0;
++
++
++ NdisZeroMemory(&pBss->WpaIE.IE[0], MAX_CUSTOM_LEN);
++ NdisZeroMemory(&pBss->RsnIE.IE[0], MAX_CUSTOM_LEN);
++#ifdef EXT_BUILD_CHANNEL_LIST
++ NdisZeroMemory(&pBss->CountryString[0], 3);
++ pBss->bHasCountryIE = FALSE;
++#endif // EXT_BUILD_CHANNEL_LIST //
++ pEid = (PEID_STRUCT) pVIE;
++ while ((Length + 2 + (USHORT)pEid->Len) <= LengthVIE)
++ {
++ switch(pEid->Eid)
++ {
++ case IE_WPA:
++ if (NdisEqualMemory(pEid->Octet, WPA_OUI, 4))
++ {
++ if ((pEid->Len + 2) > MAX_CUSTOM_LEN)
++ {
++ pBss->WpaIE.IELen = 0;
++ break;
++ }
++ pBss->WpaIE.IELen = pEid->Len + 2;
++ NdisMoveMemory(pBss->WpaIE.IE, pEid, pBss->WpaIE.IELen);
++ }
++ break;
++ case IE_RSN:
++ if (NdisEqualMemory(pEid->Octet + 2, RSN_OUI, 3))
++ {
++ if ((pEid->Len + 2) > MAX_CUSTOM_LEN)
++ {
++ pBss->RsnIE.IELen = 0;
++ break;
++ }
++ pBss->RsnIE.IELen = pEid->Len + 2;
++ NdisMoveMemory(pBss->RsnIE.IE, pEid, pBss->RsnIE.IELen);
++ }
++ break;
++#ifdef EXT_BUILD_CHANNEL_LIST
++ case IE_COUNTRY:
++ NdisMoveMemory(&pBss->CountryString[0], pEid->Octet, 3);
++ pBss->bHasCountryIE = TRUE;
++ break;
++#endif // EXT_BUILD_CHANNEL_LIST //
++ }
++ Length = Length + 2 + (USHORT)pEid->Len; // Eid[1] + Len[1]+ content[Len]
++ pEid = (PEID_STRUCT)((UCHAR*)pEid + 2 + pEid->Len);
++ }
++ }
++#endif // CONFIG_STA_SUPPORT //
++}
++
++/*!
++ * \brief insert an entry into the bss table
++ * \param p_tab The BSS table
++ * \param Bssid BSSID
++ * \param ssid SSID
++ * \param ssid_len Length of SSID
++ * \param bss_type
++ * \param beacon_period
++ * \param timestamp
++ * \param p_cf
++ * \param atim_win
++ * \param cap
++ * \param rates
++ * \param rates_len
++ * \param channel_idx
++ * \return none
++ * \pre
++ * \post
++ * \note If SSID is identical, the old entry will be replaced by the new one
++
++ IRQL = DISPATCH_LEVEL
++
++ */
++ULONG BssTableSetEntry(
++ IN PRTMP_ADAPTER pAd,
++ OUT BSS_TABLE *Tab,
++ IN PUCHAR pBssid,
++ IN CHAR Ssid[],
++ IN UCHAR SsidLen,
++ IN UCHAR BssType,
++ IN USHORT BeaconPeriod,
++ IN CF_PARM *CfParm,
++ IN USHORT AtimWin,
++ IN USHORT CapabilityInfo,
++ IN UCHAR SupRate[],
++ IN UCHAR SupRateLen,
++ IN UCHAR ExtRate[],
++ IN UCHAR ExtRateLen,
++ IN HT_CAPABILITY_IE *pHtCapability,
++ IN ADD_HT_INFO_IE *pAddHtInfo, // AP might use this additional ht info IE
++ IN UCHAR HtCapabilityLen,
++ IN UCHAR AddHtInfoLen,
++ IN UCHAR NewExtChanOffset,
++ IN UCHAR ChannelNo,
++ IN CHAR Rssi,
++ IN LARGE_INTEGER TimeStamp,
++ IN UCHAR CkipFlag,
++ IN PEDCA_PARM pEdcaParm,
++ IN PQOS_CAPABILITY_PARM pQosCapability,
++ IN PQBSS_LOAD_PARM pQbssLoad,
++ IN USHORT LengthVIE,
++ IN PNDIS_802_11_VARIABLE_IEs pVIE)
++{
++ ULONG Idx;
++
++ Idx = BssTableSearchWithSSID(Tab, pBssid, Ssid, SsidLen, ChannelNo);
++ if (Idx == BSS_NOT_FOUND)
++ {
++ if (Tab->BssNr >= MAX_LEN_OF_BSS_TABLE)
++ {
++ //
++ // It may happen when BSS Table was full.
++ // The desired AP will not be added into BSS Table
++ // In this case, if we found the desired AP then overwrite BSS Table.
++ //
++ if(!OPSTATUS_TEST_FLAG(pAd, fOP_STATUS_MEDIA_STATE_CONNECTED))
++ {
++ if (MAC_ADDR_EQUAL(pAd->MlmeAux.Bssid, pBssid) ||
++ SSID_EQUAL(pAd->MlmeAux.Ssid, pAd->MlmeAux.SsidLen, Ssid, SsidLen))
++ {
++ Idx = Tab->BssOverlapNr;
++ BssEntrySet(pAd, &Tab->BssEntry[Idx], pBssid, Ssid, SsidLen, BssType, BeaconPeriod, CfParm, AtimWin,
++ CapabilityInfo, SupRate, SupRateLen, ExtRate, ExtRateLen,pHtCapability, pAddHtInfo,HtCapabilityLen, AddHtInfoLen,
++ NewExtChanOffset, ChannelNo, Rssi, TimeStamp, CkipFlag, pEdcaParm, pQosCapability, pQbssLoad, LengthVIE, pVIE);
++ Tab->BssOverlapNr = (Tab->BssOverlapNr++) % MAX_LEN_OF_BSS_TABLE;
++ }
++ return Idx;
++ }
++ else
++ {
++ return BSS_NOT_FOUND;
++ }
++ }
++ Idx = Tab->BssNr;
++ BssEntrySet(pAd, &Tab->BssEntry[Idx], pBssid, Ssid, SsidLen, BssType, BeaconPeriod, CfParm, AtimWin,
++ CapabilityInfo, SupRate, SupRateLen, ExtRate, ExtRateLen,pHtCapability, pAddHtInfo,HtCapabilityLen, AddHtInfoLen,
++ NewExtChanOffset, ChannelNo, Rssi, TimeStamp, CkipFlag, pEdcaParm, pQosCapability, pQbssLoad, LengthVIE, pVIE);
++ Tab->BssNr++;
++ }
++ else
++ {
++ BssEntrySet(pAd, &Tab->BssEntry[Idx], pBssid, Ssid, SsidLen, BssType, BeaconPeriod,CfParm, AtimWin,
++ CapabilityInfo, SupRate, SupRateLen, ExtRate, ExtRateLen,pHtCapability, pAddHtInfo,HtCapabilityLen, AddHtInfoLen,
++ NewExtChanOffset, ChannelNo, Rssi, TimeStamp, CkipFlag, pEdcaParm, pQosCapability, pQbssLoad, LengthVIE, pVIE);
++ }
++
++ return Idx;
++}
++
++#ifdef CONFIG_STA_SUPPORT
++#ifdef DOT11_N_SUPPORT
++#ifdef DOT11N_DRAFT3
++VOID TriEventInit(
++ IN PRTMP_ADAPTER pAd)
++{
++ UCHAR i;
++
++ for (i = 0;i < MAX_TRIGGER_EVENT;i++)
++ pAd->CommonCfg.TriggerEventTab.EventA[i].bValid = FALSE;
++
++ pAd->CommonCfg.TriggerEventTab.EventANo = 0;
++ pAd->CommonCfg.TriggerEventTab.EventBCountDown = 0;
++}
++
++ULONG TriEventTableSetEntry(
++ IN PRTMP_ADAPTER pAd,
++ OUT TRIGGER_EVENT_TAB *Tab,
++ IN PUCHAR pBssid,
++ IN HT_CAPABILITY_IE *pHtCapability,
++ IN UCHAR HtCapabilityLen,
++ IN UCHAR RegClass,
++ IN UCHAR ChannelNo)
++{
++ // Event A
++ if (HtCapabilityLen == 0)
++ {
++ if (Tab->EventANo < MAX_TRIGGER_EVENT)
++ {
++ RTMPMoveMemory(Tab->EventA[Tab->EventANo].BSSID, pBssid, 6);
++ Tab->EventA[Tab->EventANo].bValid = TRUE;
++ Tab->EventA[Tab->EventANo].Channel = ChannelNo;
++ Tab->EventA[Tab->EventANo].CDCounter = pAd->CommonCfg.Dot11BssWidthChanTranDelay;
++ if (RegClass != 0)
++ {
++ // Beacon has Regulatory class IE. So use beacon's
++ Tab->EventA[Tab->EventANo].RegClass = RegClass;
++ }
++ else
++ {
++ // Use Station's Regulatory class instead.
++ if (pAd->StaActive.SupportedHtPhy.bHtEnable == TRUE)
++ {
++ if (pAd->CommonCfg.CentralChannel > pAd->CommonCfg.Channel)
++ {
++ Tab->EventA[Tab->EventANo].RegClass = 32;
++ }
++ else if (pAd->CommonCfg.CentralChannel < pAd->CommonCfg.Channel)
++ Tab->EventA[Tab->EventANo].RegClass = 33;
++ }
++ else
++ Tab->EventA[Tab->EventANo].RegClass = ??;
++
++ }
++
++ Tab->EventANo ++;
++ }
++ }
++ else if (pHtCapability->HtCapInfo.Intolerant40)
++ {
++ Tab->EventBCountDown = pAd->CommonCfg.Dot11BssWidthChanTranDelay;
++ }
++
++}
++
++/*
++ ========================================================================
++ Routine Description:
++ Trigger Event table Maintainence called once every second.
++
++ Arguments:
++ // IRQL = DISPATCH_LEVEL
++ ========================================================================
++*/
++VOID TriEventCounterMaintenance(
++ IN PRTMP_ADAPTER pAd)
++{
++ UCHAR i;
++ BOOLEAN bNotify = FALSE;
++ for (i = 0;i < MAX_TRIGGER_EVENT;i++)
++ {
++ if (pAd->CommonCfg.TriggerEventTab.EventA[i].bValid && (pAd->CommonCfg.TriggerEventTab.EventA[i].CDCounter > 0))
++ {
++ pAd->CommonCfg.TriggerEventTab.EventA[i].CDCounter--;
++ if (pAd->CommonCfg.TriggerEventTab.EventA[i].CDCounter == 0)
++ {
++ pAd->CommonCfg.TriggerEventTab.EventA[i].bValid = FALSE;
++ pAd->CommonCfg.TriggerEventTab.EventANo --;
++ // Need to send 20/40 Coexistence Notify frame if has status change.
++ bNotify = TRUE;
++ }
++ }
++ }
++ if (pAd->CommonCfg.TriggerEventTab.EventBCountDown > 0)
++ {
++ pAd->CommonCfg.TriggerEventTab.EventBCountDown--;
++ if (pAd->CommonCfg.TriggerEventTab.EventBCountDown == 0)
++ bNotify = TRUE;
++ }
++
++ if (bNotify == TRUE)
++ Update2040CoexistFrameAndNotify(pAd, BSSID_WCID, TRUE);
++}
++#endif // DOT11N_DRAFT3 //
++#endif // DOT11_N_SUPPORT //
++
++// IRQL = DISPATCH_LEVEL
++VOID BssTableSsidSort(
++ IN PRTMP_ADAPTER pAd,
++ OUT BSS_TABLE *OutTab,
++ IN CHAR Ssid[],
++ IN UCHAR SsidLen)
++{
++ INT i;
++ BssTableInit(OutTab);
++
++ for (i = 0; i < pAd->ScanTab.BssNr; i++)
++ {
++ BSS_ENTRY *pInBss = &pAd->ScanTab.BssEntry[i];
++ BOOLEAN bIsHiddenApIncluded = FALSE;
++
++ if (((pAd->CommonCfg.bIEEE80211H == 1) &&
++ (pAd->MlmeAux.Channel > 14) &&
++ RadarChannelCheck(pAd, pInBss->Channel))
++#ifdef CARRIER_DETECTION_SUPPORT // Roger sync Carrier
++ || (pAd->CommonCfg.CarrierDetect.Enable == TRUE)
++#endif // CARRIER_DETECTION_SUPPORT //
++ )
++ {
++ if (pInBss->Hidden)
++ bIsHiddenApIncluded = TRUE;
++ }
++
++ if ((pInBss->BssType == pAd->StaCfg.BssType) &&
++ (SSID_EQUAL(Ssid, SsidLen, pInBss->Ssid, pInBss->SsidLen) || bIsHiddenApIncluded))
++ {
++ BSS_ENTRY *pOutBss = &OutTab->BssEntry[OutTab->BssNr];
++
++
++#ifdef EXT_BUILD_CHANNEL_LIST
++ // If no Country IE exists no Connection will be established when IEEE80211dClientMode is strict.
++ if ((pAd->StaCfg.IEEE80211dClientMode == Rt802_11_D_Strict) &&
++ (pInBss->bHasCountryIE == FALSE))
++ {
++ DBGPRINT(RT_DEBUG_TRACE,("StaCfg.IEEE80211dClientMode == Rt802_11_D_Strict, but this AP doesn't have country IE.\n"));
++ continue;
++ }
++#endif // EXT_BUILD_CHANNEL_LIST //
++
++#ifdef DOT11_N_SUPPORT
++ // 2.4G/5G N only mode
++ if ((pInBss->HtCapabilityLen == 0) &&
++ ((pAd->CommonCfg.PhyMode == PHY_11N_2_4G) || (pAd->CommonCfg.PhyMode == PHY_11N_5G)))
++ {
++ DBGPRINT(RT_DEBUG_TRACE,("STA is in N-only Mode, this AP don't have Ht capability in Beacon.\n"));
++ continue;
++ }
++#endif // DOT11_N_SUPPORT //
++
++ // New for WPA2
++ // Check the Authmode first
++ if (pAd->StaCfg.AuthMode >= Ndis802_11AuthModeWPA)
++ {
++ // Check AuthMode and AuthModeAux for matching, in case AP support dual-mode
++ if ((pAd->StaCfg.AuthMode != pInBss->AuthMode) && (pAd->StaCfg.AuthMode != pInBss->AuthModeAux))
++ // None matched
++ continue;
++
++ // Check cipher suite, AP must have more secured cipher than station setting
++ if ((pAd->StaCfg.AuthMode == Ndis802_11AuthModeWPA) || (pAd->StaCfg.AuthMode == Ndis802_11AuthModeWPAPSK))
++ {
++ // If it's not mixed mode, we should only let BSS pass with the same encryption
++ if (pInBss->WPA.bMixMode == FALSE)
++ if (pAd->StaCfg.WepStatus != pInBss->WPA.GroupCipher)
++ continue;
++
++ // check group cipher
++ if ((pAd->StaCfg.WepStatus < pInBss->WPA.GroupCipher) &&
++ (pInBss->WPA.GroupCipher != Ndis802_11GroupWEP40Enabled) &&
++ (pInBss->WPA.GroupCipher != Ndis802_11GroupWEP104Enabled))
++ continue;
++
++ // check pairwise cipher, skip if none matched
++ // If profile set to AES, let it pass without question.
++ // If profile set to TKIP, we must find one mateched
++ if ((pAd->StaCfg.WepStatus == Ndis802_11Encryption2Enabled) &&
++ (pAd->StaCfg.WepStatus != pInBss->WPA.PairCipher) &&
++ (pAd->StaCfg.WepStatus != pInBss->WPA.PairCipherAux))
++ continue;
++ }
++ else if ((pAd->StaCfg.AuthMode == Ndis802_11AuthModeWPA2) || (pAd->StaCfg.AuthMode == Ndis802_11AuthModeWPA2PSK))
++ {
++ // If it's not mixed mode, we should only let BSS pass with the same encryption
++ if (pInBss->WPA2.bMixMode == FALSE)
++ if (pAd->StaCfg.WepStatus != pInBss->WPA2.GroupCipher)
++ continue;
++
++ // check group cipher
++ if ((pAd->StaCfg.WepStatus < pInBss->WPA.GroupCipher) &&
++ (pInBss->WPA2.GroupCipher != Ndis802_11GroupWEP40Enabled) &&
++ (pInBss->WPA2.GroupCipher != Ndis802_11GroupWEP104Enabled))
++ continue;
++
++ // check pairwise cipher, skip if none matched
++ // If profile set to AES, let it pass without question.
++ // If profile set to TKIP, we must find one mateched
++ if ((pAd->StaCfg.WepStatus == Ndis802_11Encryption2Enabled) &&
++ (pAd->StaCfg.WepStatus != pInBss->WPA2.PairCipher) &&
++ (pAd->StaCfg.WepStatus != pInBss->WPA2.PairCipherAux))
++ continue;
++ }
++ }
++ // Bss Type matched, SSID matched.
++ // We will check wepstatus for qualification Bss
++ else if (pAd->StaCfg.WepStatus != pInBss->WepStatus)
++ {
++ DBGPRINT(RT_DEBUG_TRACE,("StaCfg.WepStatus=%d, while pInBss->WepStatus=%d\n", pAd->StaCfg.WepStatus, pInBss->WepStatus));
++ //
++ // For the SESv2 case, we will not qualify WepStatus.
++ //
++ if (!pInBss->bSES)
++ continue;
++ }
++
++ // Since the AP is using hidden SSID, and we are trying to connect to ANY
++ // It definitely will fail. So, skip it.
++ // CCX also require not even try to connect it!!
++ if (SsidLen == 0)
++ continue;
++
++#ifdef DOT11_N_SUPPORT
++ // If both station and AP use 40MHz, still need to check if the 40MHZ band's legality in my country region
++ // If this 40MHz wideband is not allowed in my country list, use bandwidth 20MHZ instead,
++ if ((pInBss->CentralChannel != pInBss->Channel) &&
++ (pAd->CommonCfg.RegTransmitSetting.field.BW == BW_40))
++ {
++ if (RTMPCheckChannel(pAd, pInBss->CentralChannel, pInBss->Channel) == FALSE)
++ {
++ pAd->CommonCfg.RegTransmitSetting.field.BW = BW_20;
++ SetCommonHT(pAd);
++ pAd->CommonCfg.RegTransmitSetting.field.BW = BW_40;
++ }
++ else
++ {
++ if (pAd->CommonCfg.DesiredHtPhy.ChannelWidth == BAND_WIDTH_20)
++ {
++ SetCommonHT(pAd);
++ }
++ }
++ }
++#endif // DOT11_N_SUPPORT //
++
++ // copy matching BSS from InTab to OutTab
++ NdisMoveMemory(pOutBss, pInBss, sizeof(BSS_ENTRY));
++
++ OutTab->BssNr++;
++ }
++ else if ((pInBss->BssType == pAd->StaCfg.BssType) && (SsidLen == 0))
++ {
++ BSS_ENTRY *pOutBss = &OutTab->BssEntry[OutTab->BssNr];
++
++
++#ifdef DOT11_N_SUPPORT
++ // 2.4G/5G N only mode
++ if ((pInBss->HtCapabilityLen == 0) &&
++ ((pAd->CommonCfg.PhyMode == PHY_11N_2_4G) || (pAd->CommonCfg.PhyMode == PHY_11N_5G)))
++ {
++ DBGPRINT(RT_DEBUG_TRACE,("STA is in N-only Mode, this AP don't have Ht capability in Beacon.\n"));
++ continue;
++ }
++#endif // DOT11_N_SUPPORT //
++
++ // New for WPA2
++ // Check the Authmode first
++ if (pAd->StaCfg.AuthMode >= Ndis802_11AuthModeWPA)
++ {
++ // Check AuthMode and AuthModeAux for matching, in case AP support dual-mode
++ if ((pAd->StaCfg.AuthMode != pInBss->AuthMode) && (pAd->StaCfg.AuthMode != pInBss->AuthModeAux))
++ // None matched
++ continue;
++
++ // Check cipher suite, AP must have more secured cipher than station setting
++ if ((pAd->StaCfg.AuthMode == Ndis802_11AuthModeWPA) || (pAd->StaCfg.AuthMode == Ndis802_11AuthModeWPAPSK))
++ {
++ // If it's not mixed mode, we should only let BSS pass with the same encryption
++ if (pInBss->WPA.bMixMode == FALSE)
++ if (pAd->StaCfg.WepStatus != pInBss->WPA.GroupCipher)
++ continue;
++
++ // check group cipher
++ if (pAd->StaCfg.WepStatus < pInBss->WPA.GroupCipher)
++ continue;
++
++ // check pairwise cipher, skip if none matched
++ // If profile set to AES, let it pass without question.
++ // If profile set to TKIP, we must find one mateched
++ if ((pAd->StaCfg.WepStatus == Ndis802_11Encryption2Enabled) &&
++ (pAd->StaCfg.WepStatus != pInBss->WPA.PairCipher) &&
++ (pAd->StaCfg.WepStatus != pInBss->WPA.PairCipherAux))
++ continue;
++ }
++ else if ((pAd->StaCfg.AuthMode == Ndis802_11AuthModeWPA2) || (pAd->StaCfg.AuthMode == Ndis802_11AuthModeWPA2PSK))
++ {
++ // If it's not mixed mode, we should only let BSS pass with the same encryption
++ if (pInBss->WPA2.bMixMode == FALSE)
++ if (pAd->StaCfg.WepStatus != pInBss->WPA2.GroupCipher)
++ continue;
++
++ // check group cipher
++ if (pAd->StaCfg.WepStatus < pInBss->WPA2.GroupCipher)
++ continue;
++
++ // check pairwise cipher, skip if none matched
++ // If profile set to AES, let it pass without question.
++ // If profile set to TKIP, we must find one mateched
++ if ((pAd->StaCfg.WepStatus == Ndis802_11Encryption2Enabled) &&
++ (pAd->StaCfg.WepStatus != pInBss->WPA2.PairCipher) &&
++ (pAd->StaCfg.WepStatus != pInBss->WPA2.PairCipherAux))
++ continue;
++ }
++ }
++ // Bss Type matched, SSID matched.
++ // We will check wepstatus for qualification Bss
++ else if (pAd->StaCfg.WepStatus != pInBss->WepStatus)
++ continue;
++
++#ifdef DOT11_N_SUPPORT
++ // If both station and AP use 40MHz, still need to check if the 40MHZ band's legality in my country region
++ // If this 40MHz wideband is not allowed in my country list, use bandwidth 20MHZ instead,
++ if ((pInBss->CentralChannel != pInBss->Channel) &&
++ (pAd->CommonCfg.RegTransmitSetting.field.BW == BW_40))
++ {
++ if (RTMPCheckChannel(pAd, pInBss->CentralChannel, pInBss->Channel) == FALSE)
++ {
++ pAd->CommonCfg.RegTransmitSetting.field.BW = BW_20;
++ SetCommonHT(pAd);
++ pAd->CommonCfg.RegTransmitSetting.field.BW = BW_40;
++ }
++ }
++#endif // DOT11_N_SUPPORT //
++
++ // copy matching BSS from InTab to OutTab
++ NdisMoveMemory(pOutBss, pInBss, sizeof(BSS_ENTRY));
++
++ OutTab->BssNr++;
++ }
++
++ if (OutTab->BssNr >= MAX_LEN_OF_BSS_TABLE)
++ break;
++ }
++
++ BssTableSortByRssi(OutTab);
++}
++
++
++// IRQL = DISPATCH_LEVEL
++VOID BssTableSortByRssi(
++ IN OUT BSS_TABLE *OutTab)
++{
++ INT i, j;
++ BSS_ENTRY TmpBss;
++
++ for (i = 0; i < OutTab->BssNr - 1; i++)
++ {
++ for (j = i+1; j < OutTab->BssNr; j++)
++ {
++ if (OutTab->BssEntry[j].Rssi > OutTab->BssEntry[i].Rssi)
++ {
++ NdisMoveMemory(&TmpBss, &OutTab->BssEntry[j], sizeof(BSS_ENTRY));
++ NdisMoveMemory(&OutTab->BssEntry[j], &OutTab->BssEntry[i], sizeof(BSS_ENTRY));
++ NdisMoveMemory(&OutTab->BssEntry[i], &TmpBss, sizeof(BSS_ENTRY));
++ }
++ }
++ }
++}
++#endif // CONFIG_STA_SUPPORT //
++
++
++VOID BssCipherParse(
++ IN OUT PBSS_ENTRY pBss)
++{
++ PEID_STRUCT pEid;
++ PUCHAR pTmp;
++ PRSN_IE_HEADER_STRUCT pRsnHeader;
++ PCIPHER_SUITE_STRUCT pCipher;
++ PAKM_SUITE_STRUCT pAKM;
++ USHORT Count;
++ INT Length;
++ NDIS_802_11_ENCRYPTION_STATUS TmpCipher;
++
++ //
++ // WepStatus will be reset later, if AP announce TKIP or AES on the beacon frame.
++ //
++ if (pBss->Privacy)
++ {
++ pBss->WepStatus = Ndis802_11WEPEnabled;
++ }
++ else
++ {
++ pBss->WepStatus = Ndis802_11WEPDisabled;
++ }
++ // Set default to disable & open authentication before parsing variable IE
++ pBss->AuthMode = Ndis802_11AuthModeOpen;
++ pBss->AuthModeAux = Ndis802_11AuthModeOpen;
++
++ // Init WPA setting
++ pBss->WPA.PairCipher = Ndis802_11WEPDisabled;
++ pBss->WPA.PairCipherAux = Ndis802_11WEPDisabled;
++ pBss->WPA.GroupCipher = Ndis802_11WEPDisabled;
++ pBss->WPA.RsnCapability = 0;
++ pBss->WPA.bMixMode = FALSE;
++
++ // Init WPA2 setting
++ pBss->WPA2.PairCipher = Ndis802_11WEPDisabled;
++ pBss->WPA2.PairCipherAux = Ndis802_11WEPDisabled;
++ pBss->WPA2.GroupCipher = Ndis802_11WEPDisabled;
++ pBss->WPA2.RsnCapability = 0;
++ pBss->WPA2.bMixMode = FALSE;
++
++
++ Length = (INT) pBss->VarIELen;
++
++ while (Length > 0)
++ {
++ // Parse cipher suite base on WPA1 & WPA2, they should be parsed differently
++ pTmp = ((PUCHAR) pBss->VarIEs) + pBss->VarIELen - Length;
++ pEid = (PEID_STRUCT) pTmp;
++ switch (pEid->Eid)
++ {
++ case IE_WPA:
++ //Parse Cisco IE_WPA (LEAP, CCKM, etc.)
++ if ( NdisEqualMemory((pTmp+8), CISCO_OUI, 3))
++ {
++ pTmp += 11;
++ switch (*pTmp)
++ {
++ case 1:
++ case 5: // Although WEP is not allowed in WPA related auth mode, we parse it anyway
++ pBss->WepStatus = Ndis802_11Encryption1Enabled;
++ pBss->WPA.PairCipher = Ndis802_11Encryption1Enabled;
++ pBss->WPA.GroupCipher = Ndis802_11Encryption1Enabled;
++ break;
++ case 2:
++ pBss->WepStatus = Ndis802_11Encryption2Enabled;
++ pBss->WPA.PairCipher = Ndis802_11Encryption1Enabled;
++ pBss->WPA.GroupCipher = Ndis802_11Encryption1Enabled;
++ break;
++ case 4:
++ pBss->WepStatus = Ndis802_11Encryption3Enabled;
++ pBss->WPA.PairCipher = Ndis802_11Encryption1Enabled;
++ pBss->WPA.GroupCipher = Ndis802_11Encryption1Enabled;
++ break;
++ default:
++ break;
++ }
++
++ // if Cisco IE_WPA, break
++ break;
++ }
++ else if (NdisEqualMemory(pEid->Octet, SES_OUI, 3) && (pEid->Len == 7))
++ {
++ pBss->bSES = TRUE;
++ break;
++ }
++ else if (NdisEqualMemory(pEid->Octet, WPA_OUI, 4) != 1)
++ {
++ // if unsupported vendor specific IE
++ break;
++ }
++ // Skip OUI, version, and multicast suite
++ // This part should be improved in the future when AP supported multiple cipher suite.
++ // For now, it's OK since almost all APs have fixed cipher suite supported.
++ // pTmp = (PUCHAR) pEid->Octet;
++ pTmp += 11;
++
++ // Cipher Suite Selectors from Spec P802.11i/D3.2 P26.
++ // Value Meaning
++ // 0 None
++ // 1 WEP-40
++ // 2 Tkip
++ // 3 WRAP
++ // 4 AES
++ // 5 WEP-104
++ // Parse group cipher
++ switch (*pTmp)
++ {
++ case 1:
++ pBss->WPA.GroupCipher = Ndis802_11GroupWEP40Enabled;
++ break;
++ case 5:
++ pBss->WPA.GroupCipher = Ndis802_11GroupWEP104Enabled;
++ break;
++ case 2:
++ pBss->WPA.GroupCipher = Ndis802_11Encryption2Enabled;
++ break;
++ case 4:
++ pBss->WPA.GroupCipher = Ndis802_11Encryption3Enabled;
++ break;
++ default:
++ break;
++ }
++ // number of unicast suite
++ pTmp += 1;
++
++ // skip all unicast cipher suites
++ //Count = *(PUSHORT) pTmp;
++ Count = (pTmp[1]<<8) + pTmp[0];
++ pTmp += sizeof(USHORT);
++
++ // Parsing all unicast cipher suite
++ while (Count > 0)
++ {
++ // Skip OUI
++ pTmp += 3;
++ TmpCipher = Ndis802_11WEPDisabled;
++ switch (*pTmp)
++ {
++ case 1:
++ case 5: // Although WEP is not allowed in WPA related auth mode, we parse it anyway
++ TmpCipher = Ndis802_11Encryption1Enabled;
++ break;
++ case 2:
++ TmpCipher = Ndis802_11Encryption2Enabled;
++ break;
++ case 4:
++ TmpCipher = Ndis802_11Encryption3Enabled;
++ break;
++ default:
++ break;
++ }
++ if (TmpCipher > pBss->WPA.PairCipher)
++ {
++ // Move the lower cipher suite to PairCipherAux
++ pBss->WPA.PairCipherAux = pBss->WPA.PairCipher;
++ pBss->WPA.PairCipher = TmpCipher;
++ }
++ else
++ {
++ pBss->WPA.PairCipherAux = TmpCipher;
++ }
++ pTmp++;
++ Count--;
++ }
++
++ // 4. get AKM suite counts
++ //Count = *(PUSHORT) pTmp;
++ Count = (pTmp[1]<<8) + pTmp[0];
++ pTmp += sizeof(USHORT);
++ pTmp += 3;
++
++ switch (*pTmp)
++ {
++ case 1:
++ // Set AP support WPA mode
++ if (pBss->AuthMode == Ndis802_11AuthModeOpen)
++ pBss->AuthMode = Ndis802_11AuthModeWPA;
++ else
++ pBss->AuthModeAux = Ndis802_11AuthModeWPA;
++ break;
++ case 2:
++ // Set AP support WPA mode
++ if (pBss->AuthMode == Ndis802_11AuthModeOpen)
++ pBss->AuthMode = Ndis802_11AuthModeWPAPSK;
++ else
++ pBss->AuthModeAux = Ndis802_11AuthModeWPAPSK;
++ break;
++ default:
++ break;
++ }
++ pTmp += 1;
++
++ // Fixed for WPA-None
++ if (pBss->BssType == BSS_ADHOC)
++ {
++ pBss->AuthMode = Ndis802_11AuthModeWPANone;
++ pBss->AuthModeAux = Ndis802_11AuthModeWPANone;
++ pBss->WepStatus = pBss->WPA.GroupCipher;
++ // Patched bugs for old driver
++ if (pBss->WPA.PairCipherAux == Ndis802_11WEPDisabled)
++ pBss->WPA.PairCipherAux = pBss->WPA.GroupCipher;
++ }
++ else
++ pBss->WepStatus = pBss->WPA.PairCipher;
++
++ // Check the Pair & Group, if different, turn on mixed mode flag
++ if (pBss->WPA.GroupCipher != pBss->WPA.PairCipher)
++ pBss->WPA.bMixMode = TRUE;
++
++ break;
++
++ case IE_RSN:
++ pRsnHeader = (PRSN_IE_HEADER_STRUCT) pTmp;
++
++ // 0. Version must be 1
++ if (le2cpu16(pRsnHeader->Version) != 1)
++ break;
++ pTmp += sizeof(RSN_IE_HEADER_STRUCT);
++
++ // 1. Check group cipher
++ pCipher = (PCIPHER_SUITE_STRUCT) pTmp;
++ if (!RTMPEqualMemory(pTmp, RSN_OUI, 3))
++ break;
++
++ // Parse group cipher
++ switch (pCipher->Type)
++ {
++ case 1:
++ pBss->WPA2.GroupCipher = Ndis802_11GroupWEP40Enabled;
++ break;
++ case 5:
++ pBss->WPA2.GroupCipher = Ndis802_11GroupWEP104Enabled;
++ break;
++ case 2:
++ pBss->WPA2.GroupCipher = Ndis802_11Encryption2Enabled;
++ break;
++ case 4:
++ pBss->WPA2.GroupCipher = Ndis802_11Encryption3Enabled;
++ break;
++ default:
++ break;
++ }
++ // set to correct offset for next parsing
++ pTmp += sizeof(CIPHER_SUITE_STRUCT);
++
++ // 2. Get pairwise cipher counts
++ //Count = *(PUSHORT) pTmp;
++ Count = (pTmp[1]<<8) + pTmp[0];
++ pTmp += sizeof(USHORT);
++
++ // 3. Get pairwise cipher
++ // Parsing all unicast cipher suite
++ while (Count > 0)
++ {
++ // Skip OUI
++ pCipher = (PCIPHER_SUITE_STRUCT) pTmp;
++ TmpCipher = Ndis802_11WEPDisabled;
++ switch (pCipher->Type)
++ {
++ case 1:
++ case 5: // Although WEP is not allowed in WPA related auth mode, we parse it anyway
++ TmpCipher = Ndis802_11Encryption1Enabled;
++ break;
++ case 2:
++ TmpCipher = Ndis802_11Encryption2Enabled;
++ break;
++ case 4:
++ TmpCipher = Ndis802_11Encryption3Enabled;
++ break;
++ default:
++ break;
++ }
++ if (TmpCipher > pBss->WPA2.PairCipher)
++ {
++ // Move the lower cipher suite to PairCipherAux
++ pBss->WPA2.PairCipherAux = pBss->WPA2.PairCipher;
++ pBss->WPA2.PairCipher = TmpCipher;
++ }
++ else
++ {
++ pBss->WPA2.PairCipherAux = TmpCipher;
++ }
++ pTmp += sizeof(CIPHER_SUITE_STRUCT);
++ Count--;
++ }
++
++ // 4. get AKM suite counts
++ //Count = *(PUSHORT) pTmp;
++ Count = (pTmp[1]<<8) + pTmp[0];
++ pTmp += sizeof(USHORT);
++
++ // 5. Get AKM ciphers
++ pAKM = (PAKM_SUITE_STRUCT) pTmp;
++ if (!RTMPEqualMemory(pTmp, RSN_OUI, 3))
++ break;
++
++ switch (pAKM->Type)
++ {
++ case 1:
++ // Set AP support WPA mode
++ if (pBss->AuthMode == Ndis802_11AuthModeOpen)
++ pBss->AuthMode = Ndis802_11AuthModeWPA2;
++ else
++ pBss->AuthModeAux = Ndis802_11AuthModeWPA2;
++ break;
++ case 2:
++ // Set AP support WPA mode
++ if (pBss->AuthMode == Ndis802_11AuthModeOpen)
++ pBss->AuthMode = Ndis802_11AuthModeWPA2PSK;
++ else
++ pBss->AuthModeAux = Ndis802_11AuthModeWPA2PSK;
++ break;
++ default:
++ break;
++ }
++ pTmp += (Count * sizeof(AKM_SUITE_STRUCT));
++
++ // Fixed for WPA-None
++ if (pBss->BssType == BSS_ADHOC)
++ {
++ pBss->AuthMode = Ndis802_11AuthModeWPANone;
++ pBss->AuthModeAux = Ndis802_11AuthModeWPANone;
++ pBss->WPA.PairCipherAux = pBss->WPA2.PairCipherAux;
++ pBss->WPA.GroupCipher = pBss->WPA2.GroupCipher;
++ pBss->WepStatus = pBss->WPA.GroupCipher;
++ // Patched bugs for old driver
++ if (pBss->WPA.PairCipherAux == Ndis802_11WEPDisabled)
++ pBss->WPA.PairCipherAux = pBss->WPA.GroupCipher;
++ }
++ pBss->WepStatus = pBss->WPA2.PairCipher;
++
++ // 6. Get RSN capability
++ //pBss->WPA2.RsnCapability = *(PUSHORT) pTmp;
++ pBss->WPA2.RsnCapability = (pTmp[1]<<8) + pTmp[0];
++ pTmp += sizeof(USHORT);
++
++ // Check the Pair & Group, if different, turn on mixed mode flag
++ if (pBss->WPA2.GroupCipher != pBss->WPA2.PairCipher)
++ pBss->WPA2.bMixMode = TRUE;
++
++ break;
++ default:
++ break;
++ }
++ Length -= (pEid->Len + 2);
++ }
++}
++
++// ===========================================================================================
++// mac_table.c
++// ===========================================================================================
++
++/*! \brief generates a random mac address value for IBSS BSSID
++ * \param Addr the bssid location
++ * \return none
++ * \pre
++ * \post
++ */
++VOID MacAddrRandomBssid(
++ IN PRTMP_ADAPTER pAd,
++ OUT PUCHAR pAddr)
++{
++ INT i;
++
++ for (i = 0; i < MAC_ADDR_LEN; i++)
++ {
++ pAddr[i] = RandomByte(pAd);
++ }
++
++ pAddr[0] = (pAddr[0] & 0xfe) | 0x02; // the first 2 bits must be 01xxxxxxxx
++}
++
++/*! \brief init the management mac frame header
++ * \param p_hdr mac header
++ * \param subtype subtype of the frame
++ * \param p_ds destination address, don't care if it is a broadcast address
++ * \return none
++ * \pre the station has the following information in the pAd->StaCfg
++ * - bssid
++ * - station address
++ * \post
++ * \note this function initializes the following field
++
++ IRQL = PASSIVE_LEVEL
++ IRQL = DISPATCH_LEVEL
++
++ */
++VOID MgtMacHeaderInit(
++ IN PRTMP_ADAPTER pAd,
++ IN OUT PHEADER_802_11 pHdr80211,
++ IN UCHAR SubType,
++ IN UCHAR ToDs,
++ IN PUCHAR pDA,
++ IN PUCHAR pBssid)
++{
++ NdisZeroMemory(pHdr80211, sizeof(HEADER_802_11));
++
++ pHdr80211->FC.Type = BTYPE_MGMT;
++ pHdr80211->FC.SubType = SubType;
++// if (SubType == SUBTYPE_ACK) // sample, no use, it will conflict with ACTION frame sub type
++// pHdr80211->FC.Type = BTYPE_CNTL;
++ pHdr80211->FC.ToDs = ToDs;
++ COPY_MAC_ADDR(pHdr80211->Addr1, pDA);
++#ifdef CONFIG_STA_SUPPORT
++ IF_DEV_CONFIG_OPMODE_ON_STA(pAd)
++ COPY_MAC_ADDR(pHdr80211->Addr2, pAd->CurrentAddress);
++#endif // CONFIG_STA_SUPPORT //
++ COPY_MAC_ADDR(pHdr80211->Addr3, pBssid);
++}
++
++// ===========================================================================================
++// mem_mgmt.c
++// ===========================================================================================
++
++/*!***************************************************************************
++ * This routine build an outgoing frame, and fill all information specified
++ * in argument list to the frame body. The actual frame size is the summation
++ * of all arguments.
++ * input params:
++ * Buffer - pointer to a pre-allocated memory segment
++ * args - a list of <int arg_size, arg> pairs.
++ * NOTE NOTE NOTE!!!! the last argument must be NULL, otherwise this
++ * function will FAIL!!!
++ * return:
++ * Size of the buffer
++ * usage:
++ * MakeOutgoingFrame(Buffer, output_length, 2, &fc, 2, &dur, 6, p_addr1, 6,p_addr2, END_OF_ARGS);
++
++ IRQL = PASSIVE_LEVEL
++ IRQL = DISPATCH_LEVEL
++
++ ****************************************************************************/
++ULONG MakeOutgoingFrame(
++ OUT CHAR *Buffer,
++ OUT ULONG *FrameLen, ...)
++{
++ CHAR *p;
++ int leng;
++ ULONG TotLeng;
++ va_list Args;
++
++ // calculates the total length
++ TotLeng = 0;
++ va_start(Args, FrameLen);
++ do
++ {
++ leng = va_arg(Args, int);
++ if (leng == END_OF_ARGS)
++ {
++ break;
++ }
++ p = va_arg(Args, PVOID);
++ NdisMoveMemory(&Buffer[TotLeng], p, leng);
++ TotLeng = TotLeng + leng;
++ } while(TRUE);
++
++ va_end(Args); /* clean up */
++ *FrameLen = TotLeng;
++ return TotLeng;
++}
++
++// ===========================================================================================
++// mlme_queue.c
++// ===========================================================================================
++
++/*! \brief Initialize The MLME Queue, used by MLME Functions
++ * \param *Queue The MLME Queue
++ * \return Always Return NDIS_STATE_SUCCESS in this implementation
++ * \pre
++ * \post
++ * \note Because this is done only once (at the init stage), no need to be locked
++
++ IRQL = PASSIVE_LEVEL
++
++ */
++NDIS_STATUS MlmeQueueInit(
++ IN MLME_QUEUE *Queue)
++{
++ INT i;
++
++ NdisAllocateSpinLock(&Queue->Lock);
++
++ Queue->Num = 0;
++ Queue->Head = 0;
++ Queue->Tail = 0;
++
++ for (i = 0; i < MAX_LEN_OF_MLME_QUEUE; i++)
++ {
++ Queue->Entry[i].Occupied = FALSE;
++ Queue->Entry[i].MsgLen = 0;
++ NdisZeroMemory(Queue->Entry[i].Msg, MGMT_DMA_BUFFER_SIZE);
++ }
++
++ return NDIS_STATUS_SUCCESS;
++}
++
++/*! \brief Enqueue a message for other threads, if they want to send messages to MLME thread
++ * \param *Queue The MLME Queue
++ * \param Machine The State Machine Id
++ * \param MsgType The Message Type
++ * \param MsgLen The Message length
++ * \param *Msg The message pointer
++ * \return TRUE if enqueue is successful, FALSE if the queue is full
++ * \pre
++ * \post
++ * \note The message has to be initialized
++
++ IRQL = PASSIVE_LEVEL
++ IRQL = DISPATCH_LEVEL
++
++ */
++BOOLEAN MlmeEnqueue(
++ IN PRTMP_ADAPTER pAd,
++ IN ULONG Machine,
++ IN ULONG MsgType,
++ IN ULONG MsgLen,
++ IN VOID *Msg)
++{
++ INT Tail;
++ MLME_QUEUE *Queue = (MLME_QUEUE *)&pAd->Mlme.Queue;
++
++ // Do nothing if the driver is starting halt state.
++ // This might happen when timer already been fired before cancel timer with mlmehalt
++ if (RTMP_TEST_FLAG(pAd, fRTMP_ADAPTER_HALT_IN_PROGRESS | fRTMP_ADAPTER_NIC_NOT_EXIST))
++ return FALSE;
++
++ // First check the size, it MUST not exceed the mlme queue size
++ if (MsgLen > MGMT_DMA_BUFFER_SIZE)
++ {
++ DBGPRINT_ERR(("MlmeEnqueue: msg too large, size = %ld \n", MsgLen));
++ return FALSE;
++ }
++
++ if (MlmeQueueFull(Queue))
++ {
++ return FALSE;
++ }
++
++ NdisAcquireSpinLock(&(Queue->Lock));
++ Tail = Queue->Tail;
++ Queue->Tail++;
++ Queue->Num++;
++ if (Queue->Tail == MAX_LEN_OF_MLME_QUEUE)
++ {
++ Queue->Tail = 0;
++ }
++
++ Queue->Entry[Tail].Wcid = RESERVED_WCID;
++ Queue->Entry[Tail].Occupied = TRUE;
++ Queue->Entry[Tail].Machine = Machine;
++ Queue->Entry[Tail].MsgType = MsgType;
++ Queue->Entry[Tail].MsgLen = MsgLen;
++
++ if (Msg != NULL)
++ {
++ NdisMoveMemory(Queue->Entry[Tail].Msg, Msg, MsgLen);
++ }
++
++ NdisReleaseSpinLock(&(Queue->Lock));
++ return TRUE;
++}
++
++/*! \brief This function is used when Recv gets a MLME message
++ * \param *Queue The MLME Queue
++ * \param TimeStampHigh The upper 32 bit of timestamp
++ * \param TimeStampLow The lower 32 bit of timestamp
++ * \param Rssi The receiving RSSI strength
++ * \param MsgLen The length of the message
++ * \param *Msg The message pointer
++ * \return TRUE if everything ok, FALSE otherwise (like Queue Full)
++ * \pre
++ * \post
++
++ IRQL = DISPATCH_LEVEL
++
++ */
++BOOLEAN MlmeEnqueueForRecv(
++ IN PRTMP_ADAPTER pAd,
++ IN ULONG Wcid,
++ IN ULONG TimeStampHigh,
++ IN ULONG TimeStampLow,
++ IN UCHAR Rssi0,
++ IN UCHAR Rssi1,
++ IN UCHAR Rssi2,
++ IN ULONG MsgLen,
++ IN VOID *Msg,
++ IN UCHAR Signal)
++{
++ INT Tail, Machine;
++ PFRAME_802_11 pFrame = (PFRAME_802_11)Msg;
++ INT MsgType;
++ MLME_QUEUE *Queue = (MLME_QUEUE *)&pAd->Mlme.Queue;
++
++#ifdef RALINK_ATE
++ /* Nothing to do in ATE mode */
++ if(ATE_ON(pAd))
++ return FALSE;
++#endif // RALINK_ATE //
++
++ // Do nothing if the driver is starting halt state.
++ // This might happen when timer already been fired before cancel timer with mlmehalt
++ if (RTMP_TEST_FLAG(pAd, fRTMP_ADAPTER_HALT_IN_PROGRESS | fRTMP_ADAPTER_NIC_NOT_EXIST))
++ {
++ DBGPRINT_ERR(("MlmeEnqueueForRecv: fRTMP_ADAPTER_HALT_IN_PROGRESS\n"));
++ return FALSE;
++ }
++
++ // First check the size, it MUST not exceed the mlme queue size
++ if (MsgLen > MGMT_DMA_BUFFER_SIZE)
++ {
++ DBGPRINT_ERR(("MlmeEnqueueForRecv: frame too large, size = %ld \n", MsgLen));
++ return FALSE;
++ }
++
++ if (MlmeQueueFull(Queue))
++ {
++ return FALSE;
++ }
++
++#ifdef CONFIG_STA_SUPPORT
++ IF_DEV_CONFIG_OPMODE_ON_STA(pAd)
++ {
++ if (!MsgTypeSubst(pAd, pFrame, &Machine, &MsgType))
++ {
++ DBGPRINT_ERR(("MlmeEnqueueForRecv: un-recongnized mgmt->subtype=%d\n",pFrame->Hdr.FC.SubType));
++ return FALSE;
++ }
++ }
++#endif // CONFIG_STA_SUPPORT //
++
++ // OK, we got all the informations, it is time to put things into queue
++ NdisAcquireSpinLock(&(Queue->Lock));
++ Tail = Queue->Tail;
++ Queue->Tail++;
++ Queue->Num++;
++ if (Queue->Tail == MAX_LEN_OF_MLME_QUEUE)
++ {
++ Queue->Tail = 0;
++ }
++ Queue->Entry[Tail].Occupied = TRUE;
++ Queue->Entry[Tail].Machine = Machine;
++ Queue->Entry[Tail].MsgType = MsgType;
++ Queue->Entry[Tail].MsgLen = MsgLen;
++ Queue->Entry[Tail].TimeStamp.u.LowPart = TimeStampLow;
++ Queue->Entry[Tail].TimeStamp.u.HighPart = TimeStampHigh;
++ Queue->Entry[Tail].Rssi0 = Rssi0;
++ Queue->Entry[Tail].Rssi1 = Rssi1;
++ Queue->Entry[Tail].Rssi2 = Rssi2;
++ Queue->Entry[Tail].Signal = Signal;
++ Queue->Entry[Tail].Wcid = (UCHAR)Wcid;
++
++ Queue->Entry[Tail].Channel = pAd->LatchRfRegs.Channel;
++
++ if (Msg != NULL)
++ {
++ NdisMoveMemory(Queue->Entry[Tail].Msg, Msg, MsgLen);
++ }
++
++ NdisReleaseSpinLock(&(Queue->Lock));
++
++ RT28XX_MLME_HANDLER(pAd);
++
++ return TRUE;
++}
++
++
++/*! \brief Dequeue a message from the MLME Queue
++ * \param *Queue The MLME Queue
++ * \param *Elem The message dequeued from MLME Queue
++ * \return TRUE if the Elem contains something, FALSE otherwise
++ * \pre
++ * \post
++
++ IRQL = DISPATCH_LEVEL
++
++ */
++BOOLEAN MlmeDequeue(
++ IN MLME_QUEUE *Queue,
++ OUT MLME_QUEUE_ELEM **Elem)
++{
++ NdisAcquireSpinLock(&(Queue->Lock));
++ *Elem = &(Queue->Entry[Queue->Head]);
++ Queue->Num--;
++ Queue->Head++;
++ if (Queue->Head == MAX_LEN_OF_MLME_QUEUE)
++ {
++ Queue->Head = 0;
++ }
++ NdisReleaseSpinLock(&(Queue->Lock));
++ return TRUE;
++}
++
++// IRQL = DISPATCH_LEVEL
++VOID MlmeRestartStateMachine(
++ IN PRTMP_ADAPTER pAd)
++{
++#ifdef CONFIG_STA_SUPPORT
++ BOOLEAN Cancelled;
++#endif // CONFIG_STA_SUPPORT //
++
++ DBGPRINT(RT_DEBUG_TRACE, ("MlmeRestartStateMachine \n"));
++
++
++#ifdef CONFIG_STA_SUPPORT
++ IF_DEV_CONFIG_OPMODE_ON_STA(pAd)
++ {
++#ifdef QOS_DLS_SUPPORT
++ UCHAR i;
++#endif // QOS_DLS_SUPPORT //
++ // Cancel all timer events
++ // Be careful to cancel new added timer
++ RTMPCancelTimer(&pAd->MlmeAux.AssocTimer, &Cancelled);
++ RTMPCancelTimer(&pAd->MlmeAux.ReassocTimer, &Cancelled);
++ RTMPCancelTimer(&pAd->MlmeAux.DisassocTimer, &Cancelled);
++ RTMPCancelTimer(&pAd->MlmeAux.AuthTimer, &Cancelled);
++ RTMPCancelTimer(&pAd->MlmeAux.BeaconTimer, &Cancelled);
++ RTMPCancelTimer(&pAd->MlmeAux.ScanTimer, &Cancelled);
++
++#ifdef QOS_DLS_SUPPORT
++ for (i=0; i<MAX_NUM_OF_DLS_ENTRY; i++)
++ {
++ RTMPCancelTimer(&pAd->StaCfg.DLSEntry[i].Timer, &Cancelled);
++ }
++#endif // QOS_DLS_SUPPORT //
++ }
++#endif // CONFIG_STA_SUPPORT //
++
++ // Change back to original channel in case of doing scan
++ AsicSwitchChannel(pAd, pAd->CommonCfg.Channel, FALSE);
++ AsicLockChannel(pAd, pAd->CommonCfg.Channel);
++
++ // Resume MSDU which is turned off durning scan
++ RTMPResumeMsduTransmission(pAd);
++
++#ifdef CONFIG_STA_SUPPORT
++ IF_DEV_CONFIG_OPMODE_ON_STA(pAd)
++ {
++ // Set all state machines back IDLE
++ pAd->Mlme.CntlMachine.CurrState = CNTL_IDLE;
++ pAd->Mlme.AssocMachine.CurrState = ASSOC_IDLE;
++ pAd->Mlme.AuthMachine.CurrState = AUTH_REQ_IDLE;
++ pAd->Mlme.AuthRspMachine.CurrState = AUTH_RSP_IDLE;
++ pAd->Mlme.SyncMachine.CurrState = SYNC_IDLE;
++ pAd->Mlme.ActMachine.CurrState = ACT_IDLE;
++#ifdef QOS_DLS_SUPPORT
++ pAd->Mlme.DlsMachine.CurrState = DLS_IDLE;
++#endif // QOS_DLS_SUPPORT //
++ }
++#endif // CONFIG_STA_SUPPORT //
++
++}
++
++/*! \brief test if the MLME Queue is empty
++ * \param *Queue The MLME Queue
++ * \return TRUE if the Queue is empty, FALSE otherwise
++ * \pre
++ * \post
++
++ IRQL = DISPATCH_LEVEL
++
++ */
++BOOLEAN MlmeQueueEmpty(
++ IN MLME_QUEUE *Queue)
++{
++ BOOLEAN Ans;
++
++ NdisAcquireSpinLock(&(Queue->Lock));
++ Ans = (Queue->Num == 0);
++ NdisReleaseSpinLock(&(Queue->Lock));
++
++ return Ans;
++}
++
++/*! \brief test if the MLME Queue is full
++ * \param *Queue The MLME Queue
++ * \return TRUE if the Queue is empty, FALSE otherwise
++ * \pre
++ * \post
++
++ IRQL = PASSIVE_LEVEL
++ IRQL = DISPATCH_LEVEL
++
++ */
++BOOLEAN MlmeQueueFull(
++ IN MLME_QUEUE *Queue)
++{
++ BOOLEAN Ans;
++
++ NdisAcquireSpinLock(&(Queue->Lock));
++ Ans = (Queue->Num == MAX_LEN_OF_MLME_QUEUE || Queue->Entry[Queue->Tail].Occupied);
++ NdisReleaseSpinLock(&(Queue->Lock));
++
++ return Ans;
++}
++
++/*! \brief The destructor of MLME Queue
++ * \param
++ * \return
++ * \pre
++ * \post
++ * \note Clear Mlme Queue, Set Queue->Num to Zero.
++
++ IRQL = PASSIVE_LEVEL
++
++ */
++VOID MlmeQueueDestroy(
++ IN MLME_QUEUE *pQueue)
++{
++ NdisAcquireSpinLock(&(pQueue->Lock));
++ pQueue->Num = 0;
++ pQueue->Head = 0;
++ pQueue->Tail = 0;
++ NdisReleaseSpinLock(&(pQueue->Lock));
++ NdisFreeSpinLock(&(pQueue->Lock));
++}
++
++/*! \brief To substitute the message type if the message is coming from external
++ * \param pFrame The frame received
++ * \param *Machine The state machine
++ * \param *MsgType the message type for the state machine
++ * \return TRUE if the substitution is successful, FALSE otherwise
++ * \pre
++ * \post
++
++ IRQL = DISPATCH_LEVEL
++
++ */
++#ifdef CONFIG_STA_SUPPORT
++BOOLEAN MsgTypeSubst(
++ IN PRTMP_ADAPTER pAd,
++ IN PFRAME_802_11 pFrame,
++ OUT INT *Machine,
++ OUT INT *MsgType)
++{
++ USHORT Seq;
++ UCHAR EAPType;
++ PUCHAR pData;
++
++ // Pointer to start of data frames including SNAP header
++ pData = (PUCHAR) pFrame + LENGTH_802_11;
++
++ // The only data type will pass to this function is EAPOL frame
++ if (pFrame->Hdr.FC.Type == BTYPE_DATA)
++ {
++ if (NdisEqualMemory(SNAP_AIRONET, pData, LENGTH_802_1_H))
++ {
++ // Cisco Aironet SNAP header
++ *Machine = AIRONET_STATE_MACHINE;
++ *MsgType = MT2_AIRONET_MSG;
++ return (TRUE);
++ }
++#ifdef LEAP_SUPPORT
++ if ( pAd->StaCfg.LeapAuthMode == CISCO_AuthModeLEAP ) //LEAP
++ {
++ // LEAP frames
++ *Machine = LEAP_STATE_MACHINE;
++ EAPType = *((UCHAR*)pFrame + LENGTH_802_11 + LENGTH_802_1_H + 1);
++ return (LeapMsgTypeSubst(EAPType, MsgType));
++ }
++ else
++#endif // LEAP_SUPPORT //
++ {
++ *Machine = WPA_PSK_STATE_MACHINE;
++ EAPType = *((UCHAR*)pFrame + LENGTH_802_11 + LENGTH_802_1_H + 1);
++ return(WpaMsgTypeSubst(EAPType, MsgType));
++ }
++ }
++
++ switch (pFrame->Hdr.FC.SubType)
++ {
++ case SUBTYPE_ASSOC_REQ:
++ *Machine = ASSOC_STATE_MACHINE;
++ *MsgType = MT2_PEER_ASSOC_REQ;
++ break;
++ case SUBTYPE_ASSOC_RSP:
++ *Machine = ASSOC_STATE_MACHINE;
++ *MsgType = MT2_PEER_ASSOC_RSP;
++ break;
++ case SUBTYPE_REASSOC_REQ:
++ *Machine = ASSOC_STATE_MACHINE;
++ *MsgType = MT2_PEER_REASSOC_REQ;
++ break;
++ case SUBTYPE_REASSOC_RSP:
++ *Machine = ASSOC_STATE_MACHINE;
++ *MsgType = MT2_PEER_REASSOC_RSP;
++ break;
++ case SUBTYPE_PROBE_REQ:
++ *Machine = SYNC_STATE_MACHINE;
++ *MsgType = MT2_PEER_PROBE_REQ;
++ break;
++ case SUBTYPE_PROBE_RSP:
++ *Machine = SYNC_STATE_MACHINE;
++ *MsgType = MT2_PEER_PROBE_RSP;
++ break;
++ case SUBTYPE_BEACON:
++ *Machine = SYNC_STATE_MACHINE;
++ *MsgType = MT2_PEER_BEACON;
++ break;
++ case SUBTYPE_ATIM:
++ *Machine = SYNC_STATE_MACHINE;
++ *MsgType = MT2_PEER_ATIM;
++ break;
++ case SUBTYPE_DISASSOC:
++ *Machine = ASSOC_STATE_MACHINE;
++ *MsgType = MT2_PEER_DISASSOC_REQ;
++ break;
++ case SUBTYPE_AUTH:
++ // get the sequence number from payload 24 Mac Header + 2 bytes algorithm
++ NdisMoveMemory(&Seq, &pFrame->Octet[2], sizeof(USHORT));
++ if (Seq == 1 || Seq == 3)
++ {
++ *Machine = AUTH_RSP_STATE_MACHINE;
++ *MsgType = MT2_PEER_AUTH_ODD;
++ }
++ else if (Seq == 2 || Seq == 4)
++ {
++ *Machine = AUTH_STATE_MACHINE;
++ *MsgType = MT2_PEER_AUTH_EVEN;
++ }
++ else
++ {
++ return FALSE;
++ }
++ break;
++ case SUBTYPE_DEAUTH:
++ *Machine = AUTH_RSP_STATE_MACHINE;
++ *MsgType = MT2_PEER_DEAUTH;
++ break;
++ case SUBTYPE_ACTION:
++ *Machine = ACTION_STATE_MACHINE;
++ // Sometimes Sta will return with category bytes with MSB = 1, if they receive catogory out of their support
++ if ((pFrame->Octet[0]&0x7F) > MAX_PEER_CATE_MSG)
++ {
++ *MsgType = MT2_ACT_INVALID;
++ }
++ else
++ {
++ *MsgType = (pFrame->Octet[0]&0x7F);
++ }
++ break;
++ default:
++ return FALSE;
++ break;
++ }
++
++ return TRUE;
++}
++#endif // CONFIG_STA_SUPPORT //
++
++// ===========================================================================================
++// state_machine.c
++// ===========================================================================================
++
++/*! \brief Initialize the state machine.
++ * \param *S pointer to the state machine
++ * \param Trans State machine transition function
++ * \param StNr number of states
++ * \param MsgNr number of messages
++ * \param DefFunc default function, when there is invalid state/message combination
++ * \param InitState initial state of the state machine
++ * \param Base StateMachine base, internal use only
++ * \pre p_sm should be a legal pointer
++ * \post
++
++ IRQL = PASSIVE_LEVEL
++
++ */
++VOID StateMachineInit(
++ IN STATE_MACHINE *S,
++ IN STATE_MACHINE_FUNC Trans[],
++ IN ULONG StNr,
++ IN ULONG MsgNr,
++ IN STATE_MACHINE_FUNC DefFunc,
++ IN ULONG InitState,
++ IN ULONG Base)
++{
++ ULONG i, j;
++
++ // set number of states and messages
++ S->NrState = StNr;
++ S->NrMsg = MsgNr;
++ S->Base = Base;
++
++ S->TransFunc = Trans;
++
++ // init all state transition to default function
++ for (i = 0; i < StNr; i++)
++ {
++ for (j = 0; j < MsgNr; j++)
++ {
++ S->TransFunc[i * MsgNr + j] = DefFunc;
++ }
++ }
++
++ // set the starting state
++ S->CurrState = InitState;
++}
++
++/*! \brief This function fills in the function pointer into the cell in the state machine
++ * \param *S pointer to the state machine
++ * \param St state
++ * \param Msg incoming message
++ * \param f the function to be executed when (state, message) combination occurs at the state machine
++ * \pre *S should be a legal pointer to the state machine, st, msg, should be all within the range, Base should be set in the initial state
++ * \post
++
++ IRQL = PASSIVE_LEVEL
++
++ */
++VOID StateMachineSetAction(
++ IN STATE_MACHINE *S,
++ IN ULONG St,
++ IN ULONG Msg,
++ IN STATE_MACHINE_FUNC Func)
++{
++ ULONG MsgIdx;
++
++ MsgIdx = Msg - S->Base;
++
++ if (St < S->NrState && MsgIdx < S->NrMsg)
++ {
++ // boundary checking before setting the action
++ S->TransFunc[St * S->NrMsg + MsgIdx] = Func;
++ }
++}
++
++/*! \brief This function does the state transition
++ * \param *Adapter the NIC adapter pointer
++ * \param *S the state machine
++ * \param *Elem the message to be executed
++ * \return None
++
++ IRQL = DISPATCH_LEVEL
++
++ */
++VOID StateMachinePerformAction(
++ IN PRTMP_ADAPTER pAd,
++ IN STATE_MACHINE *S,
++ IN MLME_QUEUE_ELEM *Elem)
++{
++ (*(S->TransFunc[S->CurrState * S->NrMsg + Elem->MsgType - S->Base]))(pAd, Elem);
++}
++
++/*
++ ==========================================================================
++ Description:
++ The drop function, when machine executes this, the message is simply
++ ignored. This function does nothing, the message is freed in
++ StateMachinePerformAction()
++ ==========================================================================
++ */
++VOID Drop(
++ IN PRTMP_ADAPTER pAd,
++ IN MLME_QUEUE_ELEM *Elem)
++{
++}
++
++// ===========================================================================================
++// lfsr.c
++// ===========================================================================================
++
++/*
++ ==========================================================================
++ Description:
++
++ IRQL = PASSIVE_LEVEL
++
++ ==========================================================================
++ */
++VOID LfsrInit(
++ IN PRTMP_ADAPTER pAd,
++ IN ULONG Seed)
++{
++ if (Seed == 0)
++ pAd->Mlme.ShiftReg = 1;
++ else
++ pAd->Mlme.ShiftReg = Seed;
++}
++
++/*
++ ==========================================================================
++ Description:
++ ==========================================================================
++ */
++UCHAR RandomByte(
++ IN PRTMP_ADAPTER pAd)
++{
++ ULONG i;
++ UCHAR R, Result;
++
++ R = 0;
++
++ if (pAd->Mlme.ShiftReg == 0)
++ NdisGetSystemUpTime((ULONG *)&pAd->Mlme.ShiftReg);
++
++ for (i = 0; i < 8; i++)
++ {
++ if (pAd->Mlme.ShiftReg & 0x00000001)
++ {
++ pAd->Mlme.ShiftReg = ((pAd->Mlme.ShiftReg ^ LFSR_MASK) >> 1) | 0x80000000;
++ Result = 1;
++ }
++ else
++ {
++ pAd->Mlme.ShiftReg = pAd->Mlme.ShiftReg >> 1;
++ Result = 0;
++ }
++ R = (R << 1) | Result;
++ }
++
++ return R;
++}
++
++VOID AsicUpdateAutoFallBackTable(
++ IN PRTMP_ADAPTER pAd,
++ IN PUCHAR pRateTable)
++{
++ UCHAR i;
++ HT_FBK_CFG0_STRUC HtCfg0;
++ HT_FBK_CFG1_STRUC HtCfg1;
++ LG_FBK_CFG0_STRUC LgCfg0;
++ LG_FBK_CFG1_STRUC LgCfg1;
++ PRTMP_TX_RATE_SWITCH pCurrTxRate, pNextTxRate;
++
++ // set to initial value
++ HtCfg0.word = 0x65432100;
++ HtCfg1.word = 0xedcba988;
++ LgCfg0.word = 0xedcba988;
++ LgCfg1.word = 0x00002100;
++
++ pNextTxRate = (PRTMP_TX_RATE_SWITCH)pRateTable+1;
++ for (i = 1; i < *((PUCHAR) pRateTable); i++)
++ {
++ pCurrTxRate = (PRTMP_TX_RATE_SWITCH)pRateTable+1+i;
++ switch (pCurrTxRate->Mode)
++ {
++ case 0: //CCK
++ break;
++ case 1: //OFDM
++ {
++ switch(pCurrTxRate->CurrMCS)
++ {
++ case 0:
++ LgCfg0.field.OFDMMCS0FBK = (pNextTxRate->Mode == MODE_OFDM) ? (pNextTxRate->CurrMCS+8): pNextTxRate->CurrMCS;
++ break;
++ case 1:
++ LgCfg0.field.OFDMMCS1FBK = (pNextTxRate->Mode == MODE_OFDM) ? (pNextTxRate->CurrMCS+8): pNextTxRate->CurrMCS;
++ break;
++ case 2:
++ LgCfg0.field.OFDMMCS2FBK = (pNextTxRate->Mode == MODE_OFDM) ? (pNextTxRate->CurrMCS+8): pNextTxRate->CurrMCS;
++ break;
++ case 3:
++ LgCfg0.field.OFDMMCS3FBK = (pNextTxRate->Mode == MODE_OFDM) ? (pNextTxRate->CurrMCS+8): pNextTxRate->CurrMCS;
++ break;
++ case 4:
++ LgCfg0.field.OFDMMCS4FBK = (pNextTxRate->Mode == MODE_OFDM) ? (pNextTxRate->CurrMCS+8): pNextTxRate->CurrMCS;
++ break;
++ case 5:
++ LgCfg0.field.OFDMMCS5FBK = (pNextTxRate->Mode == MODE_OFDM) ? (pNextTxRate->CurrMCS+8): pNextTxRate->CurrMCS;
++ break;
++ case 6:
++ LgCfg0.field.OFDMMCS6FBK = (pNextTxRate->Mode == MODE_OFDM) ? (pNextTxRate->CurrMCS+8): pNextTxRate->CurrMCS;
++ break;
++ case 7:
++ LgCfg0.field.OFDMMCS7FBK = (pNextTxRate->Mode == MODE_OFDM) ? (pNextTxRate->CurrMCS+8): pNextTxRate->CurrMCS;
++ break;
++ }
++ }
++ break;
++#ifdef DOT11_N_SUPPORT
++ case 2: //HT-MIX
++ case 3: //HT-GF
++ {
++ if ((pNextTxRate->Mode >= MODE_HTMIX) && (pCurrTxRate->CurrMCS != pNextTxRate->CurrMCS))
++ {
++ switch(pCurrTxRate->CurrMCS)
++ {
++ case 0:
++ HtCfg0.field.HTMCS0FBK = pNextTxRate->CurrMCS;
++ break;
++ case 1:
++ HtCfg0.field.HTMCS1FBK = pNextTxRate->CurrMCS;
++ break;
++ case 2:
++ HtCfg0.field.HTMCS2FBK = pNextTxRate->CurrMCS;
++ break;
++ case 3:
++ HtCfg0.field.HTMCS3FBK = pNextTxRate->CurrMCS;
++ break;
++ case 4:
++ HtCfg0.field.HTMCS4FBK = pNextTxRate->CurrMCS;
++ break;
++ case 5:
++ HtCfg0.field.HTMCS5FBK = pNextTxRate->CurrMCS;
++ break;
++ case 6:
++ HtCfg0.field.HTMCS6FBK = pNextTxRate->CurrMCS;
++ break;
++ case 7:
++ HtCfg0.field.HTMCS7FBK = pNextTxRate->CurrMCS;
++ break;
++ case 8:
++ HtCfg1.field.HTMCS8FBK = pNextTxRate->CurrMCS;
++ break;
++ case 9:
++ HtCfg1.field.HTMCS9FBK = pNextTxRate->CurrMCS;
++ break;
++ case 10:
++ HtCfg1.field.HTMCS10FBK = pNextTxRate->CurrMCS;
++ break;
++ case 11:
++ HtCfg1.field.HTMCS11FBK = pNextTxRate->CurrMCS;
++ break;
++ case 12:
++ HtCfg1.field.HTMCS12FBK = pNextTxRate->CurrMCS;
++ break;
++ case 13:
++ HtCfg1.field.HTMCS13FBK = pNextTxRate->CurrMCS;
++ break;
++ case 14:
++ HtCfg1.field.HTMCS14FBK = pNextTxRate->CurrMCS;
++ break;
++ case 15:
++ HtCfg1.field.HTMCS15FBK = pNextTxRate->CurrMCS;
++ break;
++ default:
++ DBGPRINT(RT_DEBUG_ERROR, ("AsicUpdateAutoFallBackTable: not support CurrMCS=%d\n", pCurrTxRate->CurrMCS));
++ }
++ }
++ }
++ break;
++#endif // DOT11_N_SUPPORT //
++ }
++
++ pNextTxRate = pCurrTxRate;
++ }
++
++ RTMP_IO_WRITE32(pAd, HT_FBK_CFG0, HtCfg0.word);
++ RTMP_IO_WRITE32(pAd, HT_FBK_CFG1, HtCfg1.word);
++ RTMP_IO_WRITE32(pAd, LG_FBK_CFG0, LgCfg0.word);
++ RTMP_IO_WRITE32(pAd, LG_FBK_CFG1, LgCfg1.word);
++}
++
++/*
++ ========================================================================
++
++ Routine Description:
++ Set MAC register value according operation mode.
++ OperationMode AND bNonGFExist are for MM and GF Proteciton.
++ If MM or GF mask is not set, those passing argument doesn't not take effect.
++
++ Operation mode meaning:
++ = 0 : Pure HT, no preotection.
++ = 0x01; there may be non-HT devices in both the control and extension channel, protection is optional in BSS.
++ = 0x10: No Transmission in 40M is protected.
++ = 0x11: Transmission in both 40M and 20M shall be protected
++ if (bNonGFExist)
++ we should choose not to use GF. But still set correct ASIC registers.
++ ========================================================================
++*/
++VOID AsicUpdateProtect(
++ IN PRTMP_ADAPTER pAd,
++ IN USHORT OperationMode,
++ IN UCHAR SetMask,
++ IN BOOLEAN bDisableBGProtect,
++ IN BOOLEAN bNonGFExist)
++{
++ PROT_CFG_STRUC ProtCfg, ProtCfg4;
++ UINT32 Protect[6];
++ USHORT offset;
++ UCHAR i;
++ UINT32 MacReg = 0;
++
++#ifdef RALINK_ATE
++ if (ATE_ON(pAd))
++ return;
++#endif // RALINK_ATE //
++
++#ifdef DOT11_N_SUPPORT
++ if (!(pAd->CommonCfg.bHTProtect) && (OperationMode != 8))
++ {
++ return;
++ }
++
++ if (pAd->BATable.numAsOriginator)
++ {
++ //
++ // enable the RTS/CTS to avoid channel collision
++ //
++ SetMask = ALLN_SETPROTECT;
++ OperationMode = 8;
++ }
++#endif // DOT11_N_SUPPORT //
++
++ // Config ASIC RTS threshold register
++ RTMP_IO_READ32(pAd, TX_RTS_CFG, &MacReg);
++ MacReg &= 0xFF0000FF;
++#if 0
++ MacReg |= (pAd->CommonCfg.RtsThreshold << 8);
++#else
++ // If the user want disable RtsThreshold and enbale Amsdu/Ralink-Aggregation, set the RtsThreshold as 4096
++ if ((
++#ifdef DOT11_N_SUPPORT
++ (pAd->CommonCfg.BACapability.field.AmsduEnable) ||
++#endif // DOT11_N_SUPPORT //
++ (pAd->CommonCfg.bAggregationCapable == TRUE))
++ && pAd->CommonCfg.RtsThreshold == MAX_RTS_THRESHOLD)
++ {
++ MacReg |= (0x1000 << 8);
++ }
++ else
++ {
++ MacReg |= (pAd->CommonCfg.RtsThreshold << 8);
++ }
++#endif
++
++ RTMP_IO_WRITE32(pAd, TX_RTS_CFG, MacReg);
++
++ // Initial common protection settings
++ RTMPZeroMemory(Protect, sizeof(Protect));
++ ProtCfg4.word = 0;
++ ProtCfg.word = 0;
++ ProtCfg.field.TxopAllowGF40 = 1;
++ ProtCfg.field.TxopAllowGF20 = 1;
++ ProtCfg.field.TxopAllowMM40 = 1;
++ ProtCfg.field.TxopAllowMM20 = 1;
++ ProtCfg.field.TxopAllowOfdm = 1;
++ ProtCfg.field.TxopAllowCck = 1;
++ ProtCfg.field.RTSThEn = 1;
++ ProtCfg.field.ProtectNav = ASIC_SHORTNAV;
++
++ // update PHY mode and rate
++ if (pAd->CommonCfg.Channel > 14)
++ ProtCfg.field.ProtectRate = 0x4000;
++ ProtCfg.field.ProtectRate |= pAd->CommonCfg.RtsRate;
++
++ // Handle legacy(B/G) protection
++ if (bDisableBGProtect)
++ {
++ //ProtCfg.field.ProtectRate = pAd->CommonCfg.RtsRate;
++ ProtCfg.field.ProtectCtrl = 0;
++ Protect[0] = ProtCfg.word;
++ Protect[1] = ProtCfg.word;
++ }
++ else
++ {
++ //ProtCfg.field.ProtectRate = pAd->CommonCfg.RtsRate;
++ ProtCfg.field.ProtectCtrl = 0; // CCK do not need to be protected
++ Protect[0] = ProtCfg.word;
++ ProtCfg.field.ProtectCtrl = ASIC_CTS; // OFDM needs using CCK to protect
++ Protect[1] = ProtCfg.word;
++ }
++
++#ifdef DOT11_N_SUPPORT
++ // Decide HT frame protection.
++ if ((SetMask & ALLN_SETPROTECT) != 0)
++ {
++ switch(OperationMode)
++ {
++ case 0x0:
++ // NO PROTECT
++ // 1.All STAs in the BSS are 20/40 MHz HT
++ // 2. in ai 20/40MHz BSS
++ // 3. all STAs are 20MHz in a 20MHz BSS
++ // Pure HT. no protection.
++
++ // MM20_PROT_CFG
++ // Reserved (31:27)
++ // PROT_TXOP(25:20) -- 010111
++ // PROT_NAV(19:18) -- 01 (Short NAV protection)
++ // PROT_CTRL(17:16) -- 00 (None)
++ // PROT_RATE(15:0) -- 0x4004 (OFDM 24M)
++ Protect[2] = 0x01744004;
++
++ // MM40_PROT_CFG
++ // Reserved (31:27)
++ // PROT_TXOP(25:20) -- 111111
++ // PROT_NAV(19:18) -- 01 (Short NAV protection)
++ // PROT_CTRL(17:16) -- 00 (None)
++ // PROT_RATE(15:0) -- 0x4084 (duplicate OFDM 24M)
++ Protect[3] = 0x03f44084;
++
++ // CF20_PROT_CFG
++ // Reserved (31:27)
++ // PROT_TXOP(25:20) -- 010111
++ // PROT_NAV(19:18) -- 01 (Short NAV protection)
++ // PROT_CTRL(17:16) -- 00 (None)
++ // PROT_RATE(15:0) -- 0x4004 (OFDM 24M)
++ Protect[4] = 0x01744004;
++
++ // CF40_PROT_CFG
++ // Reserved (31:27)
++ // PROT_TXOP(25:20) -- 111111
++ // PROT_NAV(19:18) -- 01 (Short NAV protection)
++ // PROT_CTRL(17:16) -- 00 (None)
++ // PROT_RATE(15:0) -- 0x4084 (duplicate OFDM 24M)
++ Protect[5] = 0x03f44084;
++
++ if (bNonGFExist)
++ {
++ // PROT_NAV(19:18) -- 01 (Short NAV protectiion)
++ // PROT_CTRL(17:16) -- 01 (RTS/CTS)
++ Protect[4] = 0x01754004;
++ Protect[5] = 0x03f54084;
++ }
++ pAd->CommonCfg.IOTestParm.bRTSLongProtOn = FALSE;
++ break;
++
++ case 1:
++ // This is "HT non-member protection mode."
++ // If there may be non-HT STAs my BSS
++ ProtCfg.word = 0x01744004; // PROT_CTRL(17:16) : 0 (None)
++ ProtCfg4.word = 0x03f44084; // duplicaet legacy 24M. BW set 1.
++ if (OPSTATUS_TEST_FLAG(pAd, fOP_STATUS_BG_PROTECTION_INUSED))
++ {
++ ProtCfg.word = 0x01740003; //ERP use Protection bit is set, use protection rate at Clause 18..
++ ProtCfg4.word = 0x03f40003; // Don't duplicate RTS/CTS in CCK mode. 0x03f40083;
++ }
++ //Assign Protection method for 20&40 MHz packets
++ ProtCfg.field.ProtectCtrl = ASIC_RTS;
++ ProtCfg.field.ProtectNav = ASIC_SHORTNAV;
++ ProtCfg4.field.ProtectCtrl = ASIC_RTS;
++ ProtCfg4.field.ProtectNav = ASIC_SHORTNAV;
++ Protect[2] = ProtCfg.word;
++ Protect[3] = ProtCfg4.word;
++ Protect[4] = ProtCfg.word;
++ Protect[5] = ProtCfg4.word;
++ pAd->CommonCfg.IOTestParm.bRTSLongProtOn = TRUE;
++ break;
++
++ case 2:
++ // If only HT STAs are in BSS. at least one is 20MHz. Only protect 40MHz packets
++ ProtCfg.word = 0x01744004; // PROT_CTRL(17:16) : 0 (None)
++ ProtCfg4.word = 0x03f44084; // duplicaet legacy 24M. BW set 1.
++
++ //Assign Protection method for 40MHz packets
++ ProtCfg4.field.ProtectCtrl = ASIC_RTS;
++ ProtCfg4.field.ProtectNav = ASIC_SHORTNAV;
++ Protect[2] = ProtCfg.word;
++ Protect[3] = ProtCfg4.word;
++ if (bNonGFExist)
++ {
++ ProtCfg.field.ProtectCtrl = ASIC_RTS;
++ ProtCfg.field.ProtectNav = ASIC_SHORTNAV;
++ }
++ Protect[4] = ProtCfg.word;
++ Protect[5] = ProtCfg4.word;
++
++ pAd->CommonCfg.IOTestParm.bRTSLongProtOn = FALSE;
++ break;
++
++ case 3:
++ // HT mixed mode. PROTECT ALL!
++ // Assign Rate
++ ProtCfg.word = 0x01744004; //duplicaet legacy 24M. BW set 1.
++ ProtCfg4.word = 0x03f44084;
++ // both 20MHz and 40MHz are protected. Whether use RTS or CTS-to-self depends on the
++ if (OPSTATUS_TEST_FLAG(pAd, fOP_STATUS_BG_PROTECTION_INUSED))
++ {
++ ProtCfg.word = 0x01740003; //ERP use Protection bit is set, use protection rate at Clause 18..
++ ProtCfg4.word = 0x03f40003; // Don't duplicate RTS/CTS in CCK mode. 0x03f40083
++ }
++ //Assign Protection method for 20&40 MHz packets
++ ProtCfg.field.ProtectCtrl = ASIC_RTS;
++ ProtCfg.field.ProtectNav = ASIC_SHORTNAV;
++ ProtCfg4.field.ProtectCtrl = ASIC_RTS;
++ ProtCfg4.field.ProtectNav = ASIC_SHORTNAV;
++ Protect[2] = ProtCfg.word;
++ Protect[3] = ProtCfg4.word;
++ Protect[4] = ProtCfg.word;
++ Protect[5] = ProtCfg4.word;
++ pAd->CommonCfg.IOTestParm.bRTSLongProtOn = TRUE;
++ break;
++
++ case 8:
++ // Special on for Atheros problem n chip.
++ Protect[2] = 0x01754004;
++ Protect[3] = 0x03f54084;
++ Protect[4] = 0x01754004;
++ Protect[5] = 0x03f54084;
++ pAd->CommonCfg.IOTestParm.bRTSLongProtOn = TRUE;
++ break;
++ }
++ }
++#endif // DOT11_N_SUPPORT //
++
++ offset = CCK_PROT_CFG;
++ for (i = 0;i < 6;i++)
++ {
++ if ((SetMask & (1<< i)))
++ {
++ RTMP_IO_WRITE32(pAd, offset + i*4, Protect[i]);
++ }
++ }
++}
++
++/*
++ ==========================================================================
++ Description:
++
++ IRQL = PASSIVE_LEVEL
++ IRQL = DISPATCH_LEVEL
++
++ ==========================================================================
++ */
++VOID AsicSwitchChannel(
++ IN PRTMP_ADAPTER pAd,
++ IN UCHAR Channel,
++ IN BOOLEAN bScan)
++{
++ ULONG R2 = 0, R3 = DEFAULT_RF_TX_POWER, R4 = 0;
++ CHAR TxPwer = 0, TxPwer2 = DEFAULT_RF_TX_POWER; //Bbp94 = BBPR94_DEFAULT, TxPwer2 = DEFAULT_RF_TX_POWER;
++ UCHAR index;
++ UINT32 Value = 0; //BbpReg, Value;
++ RTMP_RF_REGS *RFRegTable;
++
++ // Search Tx power value
++ for (index = 0; index < pAd->ChannelListNum; index++)
++ {
++ if (Channel == pAd->ChannelList[index].Channel)
++ {
++ TxPwer = pAd->ChannelList[index].Power;
++ TxPwer2 = pAd->ChannelList[index].Power2;
++ break;
++ }
++ }
++
++ if (index == MAX_NUM_OF_CHANNELS)
++ {
++ DBGPRINT(RT_DEBUG_ERROR, ("AsicSwitchChannel: Cant find the Channel#%d \n", Channel));
++ }
++
++#ifdef RT2870
++ // The RF programming sequence is difference between 3xxx and 2xxx
++ if (IS_RT3070(pAd) && ((pAd->RfIcType == RFIC_3020) || (pAd->RfIcType == RFIC_2020)))
++ {
++ /* modify by WY for Read RF Reg. error */
++ UCHAR RFValue;
++
++ for (index = 0; index < NUM_OF_3020_CHNL; index++)
++ {
++ if (Channel == FreqItems3020[index].Channel)
++ {
++ // Programming channel parameters
++ RT30xxWriteRFRegister(pAd, RF_R02, FreqItems3020[index].N);
++ RT30xxWriteRFRegister(pAd, RF_R03, FreqItems3020[index].K);
++
++ RT30xxReadRFRegister(pAd, RF_R06, (PUCHAR)&RFValue);
++ RFValue = (RFValue & 0xFC) | FreqItems3020[index].R;
++ RT30xxWriteRFRegister(pAd, RF_R06, (UCHAR)RFValue);
++
++ // Set Tx Power
++ RT30xxReadRFRegister(pAd, RF_R12, (PUCHAR)&RFValue);
++ RFValue = (RFValue & 0xE0) | TxPwer;
++ RT30xxWriteRFRegister(pAd, RF_R12, (UCHAR)RFValue);
++
++ // Set RF offset
++ RT30xxReadRFRegister(pAd, RF_R23, (PUCHAR)&RFValue);
++ RFValue = (RFValue & 0x80) | pAd->RfFreqOffset;
++ RT30xxWriteRFRegister(pAd, RF_R23, (UCHAR)RFValue);
++
++ // Set BW
++ if (!bScan && (pAd->CommonCfg.BBPCurrentBW == BW_40))
++ {
++ RFValue = pAd->Mlme.CaliBW40RfR24;
++ //DISABLE_11N_CHECK(pAd);
++ }
++ else
++ {
++ RFValue = pAd->Mlme.CaliBW20RfR24;
++ }
++ RT30xxWriteRFRegister(pAd, RF_R24, (UCHAR)RFValue);
++
++ // Enable RF tuning
++ RT30xxReadRFRegister(pAd, RF_R07, (PUCHAR)&RFValue);
++ RFValue = RFValue | 0x1;
++ RT30xxWriteRFRegister(pAd, RF_R07, (UCHAR)RFValue);
++
++ // latch channel for future usage.
++ pAd->LatchRfRegs.Channel = Channel;
++
++ break;
++ }
++ }
++
++ DBGPRINT(RT_DEBUG_TRACE, ("SwitchChannel#%d(RF=%d, Pwr0=%d, Pwr1=%d, %dT), N=0x%02X, K=0x%02X, R=0x%02X\n",
++ Channel,
++ pAd->RfIcType,
++ TxPwer,
++ TxPwer2,
++ pAd->Antenna.field.TxPath,
++ FreqItems3020[index].N,
++ FreqItems3020[index].K,
++ FreqItems3020[index].R));
++ }
++ else
++#endif // RT2870 //
++ {
++ RFRegTable = RF2850RegTable;
++
++ switch (pAd->RfIcType)
++ {
++ case RFIC_2820:
++ case RFIC_2850:
++ case RFIC_2720:
++ case RFIC_2750:
++
++ for (index = 0; index < NUM_OF_2850_CHNL; index++)
++ {
++ if (Channel == RFRegTable[index].Channel)
++ {
++ R2 = RFRegTable[index].R2;
++ if (pAd->Antenna.field.TxPath == 1)
++ {
++ R2 |= 0x4000; // If TXpath is 1, bit 14 = 1;
++ }
++
++ if (pAd->Antenna.field.RxPath == 2)
++ {
++ R2 |= 0x40; // write 1 to off Rxpath.
++ }
++ else if (pAd->Antenna.field.RxPath == 1)
++ {
++ R2 |= 0x20040; // write 1 to off RxPath
++ }
++
++ if (Channel > 14)
++ {
++ // initialize R3, R4
++ R3 = (RFRegTable[index].R3 & 0xffffc1ff);
++ R4 = (RFRegTable[index].R4 & (~0x001f87c0)) | (pAd->RfFreqOffset << 15);
++
++ // 5G band power range: 0xF9~0X0F, TX0 Reg3 bit9/TX1 Reg4 bit6="0" means the TX power reduce 7dB
++ // R3
++ if ((TxPwer >= -7) && (TxPwer < 0))
++ {
++ TxPwer = (7+TxPwer);
++ TxPwer = (TxPwer > 0xF) ? (0xF) : (TxPwer);
++ R3 |= (TxPwer << 10);
++ DBGPRINT(RT_DEBUG_ERROR, ("AsicSwitchChannel: TxPwer=%d \n", TxPwer));
++ }
++ else
++ {
++ TxPwer = (TxPwer > 0xF) ? (0xF) : (TxPwer);
++ R3 |= (TxPwer << 10) | (1 << 9);
++ }
++
++ // R4
++ if ((TxPwer2 >= -7) && (TxPwer2 < 0))
++ {
++ TxPwer2 = (7+TxPwer2);
++ TxPwer2 = (TxPwer2 > 0xF) ? (0xF) : (TxPwer2);
++ R4 |= (TxPwer2 << 7);
++ DBGPRINT(RT_DEBUG_ERROR, ("AsicSwitchChannel: TxPwer2=%d \n", TxPwer2));
++ }
++ else
++ {
++ TxPwer2 = (TxPwer2 > 0xF) ? (0xF) : (TxPwer2);
++ R4 |= (TxPwer2 << 7) | (1 << 6);
++ }
++ }
++ else
++ {
++ R3 = (RFRegTable[index].R3 & 0xffffc1ff) | (TxPwer << 9); // set TX power0
++ R4 = (RFRegTable[index].R4 & (~0x001f87c0)) | (pAd->RfFreqOffset << 15) | (TxPwer2 <<6);// Set freq Offset & TxPwr1
++ }
++
++ // Based on BBP current mode before changing RF channel.
++ if (!bScan && (pAd->CommonCfg.BBPCurrentBW == BW_40))
++ {
++ R4 |=0x200000;
++ }
++
++ // Update variables
++ pAd->LatchRfRegs.Channel = Channel;
++ pAd->LatchRfRegs.R1 = RFRegTable[index].R1;
++ pAd->LatchRfRegs.R2 = R2;
++ pAd->LatchRfRegs.R3 = R3;
++ pAd->LatchRfRegs.R4 = R4;
++
++ // Set RF value 1's set R3[bit2] = [0]
++ RTMP_RF_IO_WRITE32(pAd, pAd->LatchRfRegs.R1);
++ RTMP_RF_IO_WRITE32(pAd, pAd->LatchRfRegs.R2);
++ RTMP_RF_IO_WRITE32(pAd, (pAd->LatchRfRegs.R3 & (~0x04)));
++ RTMP_RF_IO_WRITE32(pAd, pAd->LatchRfRegs.R4);
++
++ RTMPusecDelay(200);
++
++ // Set RF value 2's set R3[bit2] = [1]
++ RTMP_RF_IO_WRITE32(pAd, pAd->LatchRfRegs.R1);
++ RTMP_RF_IO_WRITE32(pAd, pAd->LatchRfRegs.R2);
++ RTMP_RF_IO_WRITE32(pAd, (pAd->LatchRfRegs.R3 | 0x04));
++ RTMP_RF_IO_WRITE32(pAd, pAd->LatchRfRegs.R4);
++
++ RTMPusecDelay(200);
++
++ // Set RF value 3's set R3[bit2] = [0]
++ RTMP_RF_IO_WRITE32(pAd, pAd->LatchRfRegs.R1);
++ RTMP_RF_IO_WRITE32(pAd, pAd->LatchRfRegs.R2);
++ RTMP_RF_IO_WRITE32(pAd, (pAd->LatchRfRegs.R3 & (~0x04)));
++ RTMP_RF_IO_WRITE32(pAd, pAd->LatchRfRegs.R4);
++
++ break;
++ }
++ }
++ break;
++
++ default:
++ break;
++ }
++ }
++
++ // Change BBP setting during siwtch from a->g, g->a
++ if (Channel <= 14)
++ {
++ ULONG TxPinCfg = 0x00050F0A;//Gary 2007/08/09 0x050A0A
++
++ RTMP_BBP_IO_WRITE8_BY_REG_ID(pAd, BBP_R62, (0x37 - GET_LNA_GAIN(pAd)));
++ RTMP_BBP_IO_WRITE8_BY_REG_ID(pAd, BBP_R63, (0x37 - GET_LNA_GAIN(pAd)));
++ RTMP_BBP_IO_WRITE8_BY_REG_ID(pAd, BBP_R64, (0x37 - GET_LNA_GAIN(pAd)));
++ RTMP_BBP_IO_WRITE8_BY_REG_ID(pAd, BBP_R86, 0);//(0x44 - GET_LNA_GAIN(pAd))); // According the Rory's suggestion to solve the middle range issue.
++ //RTMP_BBP_IO_WRITE8_BY_REG_ID(pAd, BBP_R82, 0x62);
++
++ // Rx High power VGA offset for LNA select
++ if (pAd->NicConfig2.field.ExternalLNAForG)
++ {
++ RTMP_BBP_IO_WRITE8_BY_REG_ID(pAd, BBP_R82, 0x62);
++ RTMP_BBP_IO_WRITE8_BY_REG_ID(pAd, BBP_R75, 0x46);
++ }
++ else
++ {
++ RTMP_BBP_IO_WRITE8_BY_REG_ID(pAd, BBP_R82, 0x84);
++ RTMP_BBP_IO_WRITE8_BY_REG_ID(pAd, BBP_R75, 0x50);
++ }
++
++ // 5G band selection PIN, bit1 and bit2 are complement
++ RTMP_IO_READ32(pAd, TX_BAND_CFG, &Value);
++ Value &= (~0x6);
++ Value |= (0x04);
++ RTMP_IO_WRITE32(pAd, TX_BAND_CFG, Value);
++
++ // Turn off unused PA or LNA when only 1T or 1R
++ if (pAd->Antenna.field.TxPath == 1)
++ {
++ TxPinCfg &= 0xFFFFFFF3;
++ }
++ if (pAd->Antenna.field.RxPath == 1)
++ {
++ TxPinCfg &= 0xFFFFF3FF;
++ }
++
++ RTMP_IO_WRITE32(pAd, TX_PIN_CFG, TxPinCfg);
++ }
++ else
++ {
++ ULONG TxPinCfg = 0x00050F05;//Gary 2007/8/9 0x050505
++
++ RTMP_BBP_IO_WRITE8_BY_REG_ID(pAd, BBP_R62, (0x37 - GET_LNA_GAIN(pAd)));
++ RTMP_BBP_IO_WRITE8_BY_REG_ID(pAd, BBP_R63, (0x37 - GET_LNA_GAIN(pAd)));
++ RTMP_BBP_IO_WRITE8_BY_REG_ID(pAd, BBP_R64, (0x37 - GET_LNA_GAIN(pAd)));
++ RTMP_BBP_IO_WRITE8_BY_REG_ID(pAd, BBP_R86, 0);//(0x44 - GET_LNA_GAIN(pAd))); // According the Rory's suggestion to solve the middle range issue.
++ RTMP_BBP_IO_WRITE8_BY_REG_ID(pAd, BBP_R82, 0xF2);
++
++ // Rx High power VGA offset for LNA select
++ if (pAd->NicConfig2.field.ExternalLNAForA)
++ {
++ RTMP_BBP_IO_WRITE8_BY_REG_ID(pAd, BBP_R75, 0x46);
++ }
++ else
++ {
++ RTMP_BBP_IO_WRITE8_BY_REG_ID(pAd, BBP_R75, 0x50);
++ }
++
++ // 5G band selection PIN, bit1 and bit2 are complement
++ RTMP_IO_READ32(pAd, TX_BAND_CFG, &Value);
++ Value &= (~0x6);
++ Value |= (0x02);
++ RTMP_IO_WRITE32(pAd, TX_BAND_CFG, Value);
++
++ // Turn off unused PA or LNA when only 1T or 1R
++ if (pAd->Antenna.field.TxPath == 1)
++ {
++ TxPinCfg &= 0xFFFFFFF3;
++ }
++ if (pAd->Antenna.field.RxPath == 1)
++ {
++ TxPinCfg &= 0xFFFFF3FF;
++ }
++
++ RTMP_IO_WRITE32(pAd, TX_PIN_CFG, TxPinCfg);
++ }
++
++ // R66 should be set according to Channel and use 20MHz when scanning
++ //RTMP_BBP_IO_WRITE8_BY_REG_ID(pAd, BBP_R66, (0x2E + GET_LNA_GAIN(pAd)));
++ if (bScan)
++ RTMPSetAGCInitValue(pAd, BW_20);
++ else
++ RTMPSetAGCInitValue(pAd, pAd->CommonCfg.BBPCurrentBW);
++
++ //
++ // On 11A, We should delay and wait RF/BBP to be stable
++ // and the appropriate time should be 1000 micro seconds
++ // 2005/06/05 - On 11G, We also need this delay time. Otherwise it's difficult to pass the WHQL.
++ //
++ RTMPusecDelay(1000);
++
++ DBGPRINT(RT_DEBUG_TRACE, ("SwitchChannel#%d(RF=%d, Pwr0=%lu, Pwr1=%lu, %dT) to , R1=0x%08lx, R2=0x%08lx, R3=0x%08lx, R4=0x%08lx\n",
++ Channel,
++ pAd->RfIcType,
++ (R3 & 0x00003e00) >> 9,
++ (R4 & 0x000007c0) >> 6,
++ pAd->Antenna.field.TxPath,
++ pAd->LatchRfRegs.R1,
++ pAd->LatchRfRegs.R2,
++ pAd->LatchRfRegs.R3,
++ pAd->LatchRfRegs.R4));
++}
++
++/*
++ ==========================================================================
++ Description:
++ This function is required for 2421 only, and should not be used during
++ site survey. It's only required after NIC decided to stay at a channel
++ for a longer period.
++ When this function is called, it's always after AsicSwitchChannel().
++
++ IRQL = PASSIVE_LEVEL
++ IRQL = DISPATCH_LEVEL
++
++ ==========================================================================
++ */
++VOID AsicLockChannel(
++ IN PRTMP_ADAPTER pAd,
++ IN UCHAR Channel)
++{
++}
++
++/*
++ ==========================================================================
++ Description:
++
++ IRQL = PASSIVE_LEVEL
++ IRQL = DISPATCH_LEVEL
++
++ ==========================================================================
++ */
++VOID AsicAntennaSelect(
++ IN PRTMP_ADAPTER pAd,
++ IN UCHAR Channel)
++{
++}
++
++/*
++ ========================================================================
++
++ Routine Description:
++ Antenna miscellaneous setting.
++
++ Arguments:
++ pAd Pointer to our adapter
++ BandState Indicate current Band State.
++
++ Return Value:
++ None
++
++ IRQL <= DISPATCH_LEVEL
++
++ Note:
++ 1.) Frame End type control
++ only valid for G only (RF_2527 & RF_2529)
++ 0: means DPDT, set BBP R4 bit 5 to 1
++ 1: means SPDT, set BBP R4 bit 5 to 0
++
++
++ ========================================================================
++*/
++VOID AsicAntennaSetting(
++ IN PRTMP_ADAPTER pAd,
++ IN ABGBAND_STATE BandState)
++{
++}
++
++VOID AsicRfTuningExec(
++ IN PVOID SystemSpecific1,
++ IN PVOID FunctionContext,
++ IN PVOID SystemSpecific2,
++ IN PVOID SystemSpecific3)
++{
++}
++
++/*
++ ==========================================================================
++ Description:
++ Gives CCK TX rate 2 more dB TX power.
++ This routine works only in LINK UP in INFRASTRUCTURE mode.
++
++ calculate desired Tx power in RF R3.Tx0~5, should consider -
++ 0. if current radio is a noisy environment (pAd->DrsCounters.fNoisyEnvironment)
++ 1. TxPowerPercentage
++ 2. auto calibration based on TSSI feedback
++ 3. extra 2 db for CCK
++ 4. -10 db upon very-short distance (AvgRSSI >= -40db) to AP
++
++ NOTE: Since this routine requires the value of (pAd->DrsCounters.fNoisyEnvironment),
++ it should be called AFTER MlmeDynamicTxRatSwitching()
++ ==========================================================================
++ */
++VOID AsicAdjustTxPower(
++ IN PRTMP_ADAPTER pAd)
++{
++ INT i, j;
++ CHAR DeltaPwr = 0;
++ BOOLEAN bAutoTxAgc = FALSE;
++ UCHAR TssiRef, *pTssiMinusBoundary, *pTssiPlusBoundary, TxAgcStep;
++ UCHAR BbpR1 = 0, BbpR49 = 0, idx;
++ PCHAR pTxAgcCompensate;
++ ULONG TxPwr[5];
++ CHAR Value;
++
++ if (pAd->CommonCfg.BBPCurrentBW == BW_40)
++ {
++ if (pAd->CommonCfg.CentralChannel > 14)
++ {
++ TxPwr[0] = pAd->Tx40MPwrCfgABand[0];
++ TxPwr[1] = pAd->Tx40MPwrCfgABand[1];
++ TxPwr[2] = pAd->Tx40MPwrCfgABand[2];
++ TxPwr[3] = pAd->Tx40MPwrCfgABand[3];
++ TxPwr[4] = pAd->Tx40MPwrCfgABand[4];
++ }
++ else
++ {
++ TxPwr[0] = pAd->Tx40MPwrCfgGBand[0];
++ TxPwr[1] = pAd->Tx40MPwrCfgGBand[1];
++ TxPwr[2] = pAd->Tx40MPwrCfgGBand[2];
++ TxPwr[3] = pAd->Tx40MPwrCfgGBand[3];
++ TxPwr[4] = pAd->Tx40MPwrCfgGBand[4];
++ }
++ }
++ else
++ {
++ if (pAd->CommonCfg.Channel > 14)
++ {
++ TxPwr[0] = pAd->Tx20MPwrCfgABand[0];
++ TxPwr[1] = pAd->Tx20MPwrCfgABand[1];
++ TxPwr[2] = pAd->Tx20MPwrCfgABand[2];
++ TxPwr[3] = pAd->Tx20MPwrCfgABand[3];
++ TxPwr[4] = pAd->Tx20MPwrCfgABand[4];
++ }
++ else
++ {
++ TxPwr[0] = pAd->Tx20MPwrCfgGBand[0];
++ TxPwr[1] = pAd->Tx20MPwrCfgGBand[1];
++ TxPwr[2] = pAd->Tx20MPwrCfgGBand[2];
++ TxPwr[3] = pAd->Tx20MPwrCfgGBand[3];
++ TxPwr[4] = pAd->Tx20MPwrCfgGBand[4];
++ }
++ }
++
++ // TX power compensation for temperature variation based on TSSI. try every 4 second
++ if (pAd->Mlme.OneSecPeriodicRound % 4 == 0)
++ {
++ if (pAd->CommonCfg.Channel <= 14)
++ {
++ /* bg channel */
++ bAutoTxAgc = pAd->bAutoTxAgcG;
++ TssiRef = pAd->TssiRefG;
++ pTssiMinusBoundary = &pAd->TssiMinusBoundaryG[0];
++ pTssiPlusBoundary = &pAd->TssiPlusBoundaryG[0];
++ TxAgcStep = pAd->TxAgcStepG;
++ pTxAgcCompensate = &pAd->TxAgcCompensateG;
++ }
++ else
++ {
++ /* a channel */
++ bAutoTxAgc = pAd->bAutoTxAgcA;
++ TssiRef = pAd->TssiRefA;
++ pTssiMinusBoundary = &pAd->TssiMinusBoundaryA[0];
++ pTssiPlusBoundary = &pAd->TssiPlusBoundaryA[0];
++ TxAgcStep = pAd->TxAgcStepA;
++ pTxAgcCompensate = &pAd->TxAgcCompensateA;
++ }
++
++ if (bAutoTxAgc)
++ {
++ /* BbpR1 is unsigned char */
++ RTMP_BBP_IO_READ8_BY_REG_ID(pAd, BBP_R49, &BbpR49);
++
++ /* (p) TssiPlusBoundaryG[0] = 0 = (m) TssiMinusBoundaryG[0] */
++ /* compensate: +4 +3 +2 +1 0 -1 -2 -3 -4 * steps */
++ /* step value is defined in pAd->TxAgcStepG for tx power value */
++
++ /* [4]+1+[4] p4 p3 p2 p1 o1 m1 m2 m3 m4 */
++ /* ex: 0x00 0x15 0x25 0x45 0x88 0xA0 0xB5 0xD0 0xF0
++ above value are examined in mass factory production */
++ /* [4] [3] [2] [1] [0] [1] [2] [3] [4] */
++
++ /* plus (+) is 0x00 ~ 0x45, minus (-) is 0xa0 ~ 0xf0 */
++ /* if value is between p1 ~ o1 or o1 ~ s1, no need to adjust tx power */
++ /* if value is 0xa5, tx power will be -= TxAgcStep*(2-1) */
++
++ if (BbpR49 > pTssiMinusBoundary[1])
++ {
++ // Reading is larger than the reference value
++ // check for how large we need to decrease the Tx power
++ for (idx = 1; idx < 5; idx++)
++ {
++ if (BbpR49 <= pTssiMinusBoundary[idx]) // Found the range
++ break;
++ }
++ // The index is the step we should decrease, idx = 0 means there is nothing to compensate
++// if (R3 > (ULONG) (TxAgcStep * (idx-1)))
++ *pTxAgcCompensate = -(TxAgcStep * (idx-1));
++// else
++// *pTxAgcCompensate = -((UCHAR)R3);
++
++ DeltaPwr += (*pTxAgcCompensate);
++ DBGPRINT(RT_DEBUG_TRACE, ("-- Tx Power, BBP R1=%x, TssiRef=%x, TxAgcStep=%x, step = -%d\n",
++ BbpR49, TssiRef, TxAgcStep, idx-1));
++ }
++ else if (BbpR49 < pTssiPlusBoundary[1])
++ {
++ // Reading is smaller than the reference value
++ // check for how large we need to increase the Tx power
++ for (idx = 1; idx < 5; idx++)
++ {
++ if (BbpR49 >= pTssiPlusBoundary[idx]) // Found the range
++ break;
++ }
++ // The index is the step we should increase, idx = 0 means there is nothing to compensate
++ *pTxAgcCompensate = TxAgcStep * (idx-1);
++ DeltaPwr += (*pTxAgcCompensate);
++ DBGPRINT(RT_DEBUG_TRACE, ("++ Tx Power, BBP R1=%x, TssiRef=%x, TxAgcStep=%x, step = +%d\n",
++ BbpR49, TssiRef, TxAgcStep, idx-1));
++ }
++ else
++ {
++ *pTxAgcCompensate = 0;
++ DBGPRINT(RT_DEBUG_TRACE, (" Tx Power, BBP R49=%x, TssiRef=%x, TxAgcStep=%x, step = +%d\n",
++ BbpR49, TssiRef, TxAgcStep, 0));
++ }
++ }
++ }
++ else
++ {
++ if (pAd->CommonCfg.Channel <= 14)
++ {
++ bAutoTxAgc = pAd->bAutoTxAgcG;
++ pTxAgcCompensate = &pAd->TxAgcCompensateG;
++ }
++ else
++ {
++ bAutoTxAgc = pAd->bAutoTxAgcA;
++ pTxAgcCompensate = &pAd->TxAgcCompensateA;
++ }
++
++ if (bAutoTxAgc)
++ DeltaPwr += (*pTxAgcCompensate);
++ }
++
++ RTMP_BBP_IO_READ8_BY_REG_ID(pAd, BBP_R1, &BbpR1);
++ BbpR1 &= 0xFC;
++
++#ifdef SINGLE_SKU
++ // Handle regulatory max tx power constrain
++ do
++ {
++ UCHAR TxPwrInEEPROM = 0xFF, CountryTxPwr = 0xFF, criterion;
++ UCHAR AdjustMaxTxPwr[40];
++
++ if (pAd->CommonCfg.Channel > 14) // 5G band
++ TxPwrInEEPROM = ((pAd->CommonCfg.DefineMaxTxPwr & 0xFF00) >> 8);
++ else // 2.4G band
++ TxPwrInEEPROM = (pAd->CommonCfg.DefineMaxTxPwr & 0x00FF);
++ CountryTxPwr = GetCuntryMaxTxPwr(pAd, pAd->CommonCfg.Channel);
++
++ // error handling, range check
++ if ((TxPwrInEEPROM > 0x50) || (CountryTxPwr > 0x50))
++ {
++ DBGPRINT(RT_DEBUG_ERROR,("AsicAdjustTxPower - Invalid max tx power (=0x%02x), CountryTxPwr=%d\n", TxPwrInEEPROM, CountryTxPwr));
++ break;
++ }
++
++ criterion = *((PUCHAR)TxPwr + 2) & 0xF; // FAE use OFDM 6M as criterion
++
++ DBGPRINT_RAW(RT_DEBUG_TRACE,("AsicAdjustTxPower (criterion=%d, TxPwrInEEPROM=%d, CountryTxPwr=%d)\n", criterion, TxPwrInEEPROM, CountryTxPwr));
++
++ // Adjust max tx power according to the relationship of tx power in E2PROM
++ for (i=0; i<5; i++)
++ {
++ // CCK will have 4dBm larger than OFDM
++ // Therefore, we should separate to parse the tx power field
++ if (i == 0)
++ {
++ for (j=0; j<8; j++)
++ {
++ Value = (CHAR)((TxPwr[i] >> j*4) & 0x0F);
++
++ if (j < 4)
++ {
++ // CCK will have 4dBm larger than OFDM
++ AdjustMaxTxPwr[i*8+j] = TxPwrInEEPROM + (Value - criterion) + 4;
++ }
++ else
++ {
++ AdjustMaxTxPwr[i*8+j] = TxPwrInEEPROM + (Value - criterion);
++ }
++ DBGPRINT_RAW(RT_DEBUG_TRACE,("AsicAdjustTxPower (i/j=%d/%d, Value=%d, %d)\n", i, j, Value, AdjustMaxTxPwr[i*8+j]));
++ }
++ }
++ else
++ {
++ for (j=0; j<8; j++)
++ {
++ Value = (CHAR)((TxPwr[i] >> j*4) & 0x0F);
++
++ AdjustMaxTxPwr[i*8+j] = TxPwrInEEPROM + (Value - criterion);
++ DBGPRINT_RAW(RT_DEBUG_TRACE,("AsicAdjustTxPower (i/j=%d/%d, Value=%d, %d)\n", i, j, Value, AdjustMaxTxPwr[i*8+j]));
++ }
++ }
++ }
++
++ // Adjust tx power according to the relationship
++ for (i=0; i<5; i++)
++ {
++ if (TxPwr[i] != 0xffffffff)
++ {
++ for (j=0; j<8; j++)
++ {
++ Value = (CHAR)((TxPwr[i] >> j*4) & 0x0F);
++
++ // The system tx power is larger than the regulatory, the power should be restrain
++ if (AdjustMaxTxPwr[i*8+j] > CountryTxPwr)
++ {
++ // decrease to zero and don't need to take care BBPR1
++ if ((Value - (AdjustMaxTxPwr[i*8+j] - CountryTxPwr)) > 0)
++ Value -= (AdjustMaxTxPwr[i*8+j] - CountryTxPwr);
++ else
++ Value = 0;
++
++ DBGPRINT_RAW(RT_DEBUG_TRACE,("AsicAdjustTxPower (i/j=%d/%d, Value=%d, %d)\n", i, j, Value, AdjustMaxTxPwr[i*8+j]));
++ }
++ else
++ DBGPRINT_RAW(RT_DEBUG_TRACE,("AsicAdjustTxPower (i/j=%d/%d, Value=%d, %d, no change)\n", i, j, Value, AdjustMaxTxPwr[i*8+j]));
++
++ TxPwr[i] = (TxPwr[i] & ~(0x0000000F << j*4)) | (Value << j*4);
++ }
++ }
++ }
++ } while (FALSE);
++#endif // SINGLE_SKU //
++
++ /* calculate delta power based on the percentage specified from UI */
++ // E2PROM setting is calibrated for maximum TX power (i.e. 100%)
++ // We lower TX power here according to the percentage specified from UI
++ if (pAd->CommonCfg.TxPowerPercentage == 0xffffffff) // AUTO TX POWER control
++ ;
++ else if (pAd->CommonCfg.TxPowerPercentage > 90) // 91 ~ 100% & AUTO, treat as 100% in terms of mW
++ ;
++ else if (pAd->CommonCfg.TxPowerPercentage > 60) // 61 ~ 90%, treat as 75% in terms of mW // DeltaPwr -= 1;
++ {
++ DeltaPwr -= 1;
++ }
++ else if (pAd->CommonCfg.TxPowerPercentage > 30) // 31 ~ 60%, treat as 50% in terms of mW // DeltaPwr -= 3;
++ {
++ DeltaPwr -= 3;
++ }
++ else if (pAd->CommonCfg.TxPowerPercentage > 15) // 16 ~ 30%, treat as 25% in terms of mW // DeltaPwr -= 6;
++ {
++ BbpR1 |= 0x01;
++ }
++ else if (pAd->CommonCfg.TxPowerPercentage > 9) // 10 ~ 15%, treat as 12.5% in terms of mW // DeltaPwr -= 9;
++ {
++ BbpR1 |= 0x01;
++ DeltaPwr -= 3;
++ }
++ else // 0 ~ 9 %, treat as MIN(~3%) in terms of mW // DeltaPwr -= 12;
++ {
++ BbpR1 |= 0x02;
++ }
++
++ RTMP_BBP_IO_WRITE8_BY_REG_ID(pAd, BBP_R1, BbpR1);
++
++ /* reset different new tx power for different TX rate */
++ for(i=0; i<5; i++)
++ {
++ if (TxPwr[i] != 0xffffffff)
++ {
++ for (j=0; j<8; j++)
++ {
++ Value = (CHAR)((TxPwr[i] >> j*4) & 0x0F); /* 0 ~ 15 */
++
++ if ((Value + DeltaPwr) < 0)
++ {
++ Value = 0; /* min */
++ }
++ else if ((Value + DeltaPwr) > 0xF)
++ {
++ Value = 0xF; /* max */
++ }
++ else
++ {
++ Value += DeltaPwr; /* temperature compensation */
++ }
++
++ /* fill new value to CSR offset */
++ TxPwr[i] = (TxPwr[i] & ~(0x0000000F << j*4)) | (Value << j*4);
++ }
++
++ /* write tx power value to CSR */
++ /* TX_PWR_CFG_0 (8 tx rate) for TX power for OFDM 12M/18M
++ TX power for OFDM 6M/9M
++ TX power for CCK5.5M/11M
++ TX power for CCK1M/2M */
++ /* TX_PWR_CFG_1 ~ TX_PWR_CFG_4 */
++ RTMP_IO_WRITE32(pAd, TX_PWR_CFG_0 + i*4, TxPwr[i]);
++ }
++ }
++
++}
++
++#ifdef CONFIG_STA_SUPPORT
++/*
++ ==========================================================================
++ Description:
++ put PHY to sleep here, and set next wakeup timer. PHY doesn't not wakeup
++ automatically. Instead, MCU will issue a TwakeUpInterrupt to host after
++ the wakeup timer timeout. Driver has to issue a separate command to wake
++ PHY up.
++
++ IRQL = DISPATCH_LEVEL
++
++ ==========================================================================
++ */
++VOID AsicSleepThenAutoWakeup(
++ IN PRTMP_ADAPTER pAd,
++ IN USHORT TbttNumToNextWakeUp)
++{
++ RT28XX_STA_SLEEP_THEN_AUTO_WAKEUP(pAd, TbttNumToNextWakeUp);
++}
++
++/*
++ ==========================================================================
++ Description:
++ AsicForceWakeup() is used whenever manual wakeup is required
++ AsicForceSleep() should only be used when not in INFRA BSS. When
++ in INFRA BSS, we should use AsicSleepThenAutoWakeup() instead.
++ ==========================================================================
++ */
++VOID AsicForceSleep(
++ IN PRTMP_ADAPTER pAd)
++{
++
++}
++
++/*
++ ==========================================================================
++ Description:
++ AsicForceWakeup() is used whenever Twakeup timer (set via AsicSleepThenAutoWakeup)
++ expired.
++
++ IRQL = PASSIVE_LEVEL
++ IRQL = DISPATCH_LEVEL
++ ==========================================================================
++ */
++VOID AsicForceWakeup(
++ IN PRTMP_ADAPTER pAd,
++ IN BOOLEAN bFromTx)
++{
++ DBGPRINT(RT_DEBUG_TRACE, ("--> AsicForceWakeup \n"));
++ RT28XX_STA_FORCE_WAKEUP(pAd, bFromTx);
++}
++#endif // CONFIG_STA_SUPPORT //
++/*
++ ==========================================================================
++ Description:
++ Set My BSSID
++
++ IRQL = DISPATCH_LEVEL
++
++ ==========================================================================
++ */
++VOID AsicSetBssid(
++ IN PRTMP_ADAPTER pAd,
++ IN PUCHAR pBssid)
++{
++ ULONG Addr4;
++ DBGPRINT(RT_DEBUG_TRACE, ("==============> AsicSetBssid %x:%x:%x:%x:%x:%x\n",
++ pBssid[0],pBssid[1],pBssid[2],pBssid[3], pBssid[4],pBssid[5]));
++
++ Addr4 = (ULONG)(pBssid[0]) |
++ (ULONG)(pBssid[1] << 8) |
++ (ULONG)(pBssid[2] << 16) |
++ (ULONG)(pBssid[3] << 24);
++ RTMP_IO_WRITE32(pAd, MAC_BSSID_DW0, Addr4);
++
++ Addr4 = 0;
++ // always one BSSID in STA mode
++ Addr4 = (ULONG)(pBssid[4]) | (ULONG)(pBssid[5] << 8);
++
++ RTMP_IO_WRITE32(pAd, MAC_BSSID_DW1, Addr4);
++}
++
++VOID AsicSetMcastWC(
++ IN PRTMP_ADAPTER pAd)
++{
++ MAC_TABLE_ENTRY *pEntry = &pAd->MacTab.Content[MCAST_WCID];
++ USHORT offset;
++
++ pEntry->Sst = SST_ASSOC;
++ pEntry->Aid = MCAST_WCID; // Softap supports 1 BSSID and use WCID=0 as multicast Wcid index
++ pEntry->PsMode = PWR_ACTIVE;
++ pEntry->CurrTxRate = pAd->CommonCfg.MlmeRate;
++ offset = MAC_WCID_BASE + BSS0Mcast_WCID * HW_WCID_ENTRY_SIZE;
++}
++
++/*
++ ==========================================================================
++ Description:
++
++ IRQL = DISPATCH_LEVEL
++
++ ==========================================================================
++ */
++VOID AsicDelWcidTab(
++ IN PRTMP_ADAPTER pAd,
++ IN UCHAR Wcid)
++{
++ ULONG Addr0 = 0x0, Addr1 = 0x0;
++ ULONG offset;
++
++ DBGPRINT(RT_DEBUG_TRACE, ("AsicDelWcidTab==>Wcid = 0x%x\n",Wcid));
++ offset = MAC_WCID_BASE + Wcid * HW_WCID_ENTRY_SIZE;
++ RTMP_IO_WRITE32(pAd, offset, Addr0);
++ offset += 4;
++ RTMP_IO_WRITE32(pAd, offset, Addr1);
++}
++
++/*
++ ==========================================================================
++ Description:
++
++ IRQL = DISPATCH_LEVEL
++
++ ==========================================================================
++ */
++VOID AsicEnableRDG(
++ IN PRTMP_ADAPTER pAd)
++{
++ TX_LINK_CFG_STRUC TxLinkCfg;
++ UINT32 Data = 0;
++
++ RTMP_IO_READ32(pAd, TX_LINK_CFG, &TxLinkCfg.word);
++ TxLinkCfg.field.TxRDGEn = 1;
++ RTMP_IO_WRITE32(pAd, TX_LINK_CFG, TxLinkCfg.word);
++
++ RTMP_IO_READ32(pAd, EDCA_AC0_CFG, &Data);
++ Data &= 0xFFFFFF00;
++ Data |= 0x80;
++ RTMP_IO_WRITE32(pAd, EDCA_AC0_CFG, Data);
++
++ //OPSTATUS_CLEAR_FLAG(pAd, fOP_STATUS_AGGREGATION_INUSED);
++}
++
++/*
++ ==========================================================================
++ Description:
++
++ IRQL = DISPATCH_LEVEL
++
++ ==========================================================================
++ */
++VOID AsicDisableRDG(
++ IN PRTMP_ADAPTER pAd)
++{
++ TX_LINK_CFG_STRUC TxLinkCfg;
++ UINT32 Data = 0;
++
++
++ RTMP_IO_READ32(pAd, TX_LINK_CFG, &TxLinkCfg.word);
++ TxLinkCfg.field.TxRDGEn = 0;
++ RTMP_IO_WRITE32(pAd, TX_LINK_CFG, TxLinkCfg.word);
++
++ RTMP_IO_READ32(pAd, EDCA_AC0_CFG, &Data);
++
++ Data &= 0xFFFFFF00;
++ //Data |= 0x20;
++#ifndef WIFI_TEST
++ //if ( pAd->CommonCfg.bEnableTxBurst )
++ // Data |= 0x60; // for performance issue not set the TXOP to 0
++#endif
++ if (RTMP_TEST_FLAG(pAd, fRTMP_ADAPTER_DYNAMIC_BE_TXOP_ACTIVE)
++#ifdef DOT11_N_SUPPORT
++ && (pAd->MacTab.fAnyStationMIMOPSDynamic == FALSE)
++#endif // DOT11_N_SUPPORT //
++ )
++ {
++ // For CWC test, change txop from 0x30 to 0x20 in TxBurst mode
++ if (pAd->CommonCfg.bEnableTxBurst)
++ Data |= 0x20;
++ }
++ RTMP_IO_WRITE32(pAd, EDCA_AC0_CFG, Data);
++}
++
++/*
++ ==========================================================================
++ Description:
++
++ IRQL = PASSIVE_LEVEL
++ IRQL = DISPATCH_LEVEL
++
++ ==========================================================================
++ */
++VOID AsicDisableSync(
++ IN PRTMP_ADAPTER pAd)
++{
++ BCN_TIME_CFG_STRUC csr;
++
++ DBGPRINT(RT_DEBUG_TRACE, ("--->Disable TSF synchronization\n"));
++
++ // 2003-12-20 disable TSF and TBTT while NIC in power-saving have side effect
++ // that NIC will never wakes up because TSF stops and no more
++ // TBTT interrupts
++ pAd->TbttTickCount = 0;
++ RTMP_IO_READ32(pAd, BCN_TIME_CFG, &csr.word);
++ csr.field.bBeaconGen = 0;
++ csr.field.bTBTTEnable = 0;
++ csr.field.TsfSyncMode = 0;
++ csr.field.bTsfTicking = 0;
++ RTMP_IO_WRITE32(pAd, BCN_TIME_CFG, csr.word);
++
++}
++
++/*
++ ==========================================================================
++ Description:
++
++ IRQL = DISPATCH_LEVEL
++
++ ==========================================================================
++ */
++VOID AsicEnableBssSync(
++ IN PRTMP_ADAPTER pAd)
++{
++ BCN_TIME_CFG_STRUC csr;
++
++ DBGPRINT(RT_DEBUG_TRACE, ("--->AsicEnableBssSync(INFRA mode)\n"));
++
++ RTMP_IO_READ32(pAd, BCN_TIME_CFG, &csr.word);
++// RTMP_IO_WRITE32(pAd, BCN_TIME_CFG, 0x00000000);
++#ifdef CONFIG_STA_SUPPORT
++ IF_DEV_CONFIG_OPMODE_ON_STA(pAd)
++ {
++ csr.field.BeaconInterval = pAd->CommonCfg.BeaconPeriod << 4; // ASIC register in units of 1/16 TU
++ csr.field.bTsfTicking = 1;
++ csr.field.TsfSyncMode = 1; // sync TSF in INFRASTRUCTURE mode
++ csr.field.bBeaconGen = 0; // do NOT generate BEACON
++ csr.field.bTBTTEnable = 1;
++ }
++#endif // CONFIG_STA_SUPPORT //
++ RTMP_IO_WRITE32(pAd, BCN_TIME_CFG, csr.word);
++}
++
++/*
++ ==========================================================================
++ Description:
++ Note:
++ BEACON frame in shared memory should be built ok before this routine
++ can be called. Otherwise, a garbage frame maybe transmitted out every
++ Beacon period.
++
++ IRQL = DISPATCH_LEVEL
++
++ ==========================================================================
++ */
++VOID AsicEnableIbssSync(
++ IN PRTMP_ADAPTER pAd)
++{
++ BCN_TIME_CFG_STRUC csr9;
++ PUCHAR ptr;
++ UINT i;
++
++ DBGPRINT(RT_DEBUG_TRACE, ("--->AsicEnableIbssSync(ADHOC mode. MPDUtotalByteCount = %d)\n", pAd->BeaconTxWI.MPDUtotalByteCount));
++
++ RTMP_IO_READ32(pAd, BCN_TIME_CFG, &csr9.word);
++ csr9.field.bBeaconGen = 0;
++ csr9.field.bTBTTEnable = 0;
++ csr9.field.bTsfTicking = 0;
++ RTMP_IO_WRITE32(pAd, BCN_TIME_CFG, csr9.word);
++
++
++#ifdef RT2870
++ // move BEACON TXD and frame content to on-chip memory
++ ptr = (PUCHAR)&pAd->BeaconTxWI;
++ for (i=0; i<TXWI_SIZE; i+=2) // 16-byte TXWI field
++ {
++ //UINT32 longptr = *ptr + (*(ptr+1)<<8) + (*(ptr+2)<<16) + (*(ptr+3)<<24);
++ //RTMP_IO_WRITE32(pAd, HW_BEACON_BASE0 + i, longptr);
++ RTUSBMultiWrite(pAd, HW_BEACON_BASE0 + i, ptr, 2);
++ ptr += 2;
++ }
++
++ // start right after the 16-byte TXWI field
++ ptr = pAd->BeaconBuf;
++ for (i=0; i< pAd->BeaconTxWI.MPDUtotalByteCount; i+=2)
++ {
++ //UINT32 longptr = *ptr + (*(ptr+1)<<8) + (*(ptr+2)<<16) + (*(ptr+3)<<24);
++ //RTMP_IO_WRITE32(pAd, HW_BEACON_BASE0 + TXWI_SIZE + i, longptr);
++ RTUSBMultiWrite(pAd, HW_BEACON_BASE0 + TXWI_SIZE + i, ptr, 2);
++ ptr +=2;
++ }
++#endif // RT2870 //
++
++ //
++ // For Wi-Fi faily generated beacons between participating stations.
++ // Set TBTT phase adaptive adjustment step to 8us (default 16us)
++ // don't change settings 2006-5- by Jerry
++ //RTMP_IO_WRITE32(pAd, TBTT_SYNC_CFG, 0x00001010);
++
++ // start sending BEACON
++ csr9.field.BeaconInterval = pAd->CommonCfg.BeaconPeriod << 4; // ASIC register in units of 1/16 TU
++ csr9.field.bTsfTicking = 1;
++ csr9.field.TsfSyncMode = 2; // sync TSF in IBSS mode
++ csr9.field.bTBTTEnable = 1;
++ csr9.field.bBeaconGen = 1;
++ RTMP_IO_WRITE32(pAd, BCN_TIME_CFG, csr9.word);
++}
++
++/*
++ ==========================================================================
++ Description:
++
++ IRQL = PASSIVE_LEVEL
++ IRQL = DISPATCH_LEVEL
++
++ ==========================================================================
++ */
++VOID AsicSetEdcaParm(
++ IN PRTMP_ADAPTER pAd,
++ IN PEDCA_PARM pEdcaParm)
++{
++ EDCA_AC_CFG_STRUC Ac0Cfg, Ac1Cfg, Ac2Cfg, Ac3Cfg;
++ AC_TXOP_CSR0_STRUC csr0;
++ AC_TXOP_CSR1_STRUC csr1;
++ AIFSN_CSR_STRUC AifsnCsr;
++ CWMIN_CSR_STRUC CwminCsr;
++ CWMAX_CSR_STRUC CwmaxCsr;
++ int i;
++
++ Ac0Cfg.word = 0;
++ Ac1Cfg.word = 0;
++ Ac2Cfg.word = 0;
++ Ac3Cfg.word = 0;
++ if ((pEdcaParm == NULL) || (pEdcaParm->bValid == FALSE))
++ {
++ DBGPRINT(RT_DEBUG_TRACE,("AsicSetEdcaParm\n"));
++ OPSTATUS_CLEAR_FLAG(pAd, fOP_STATUS_WMM_INUSED);
++ for (i=0; i<MAX_LEN_OF_MAC_TABLE; i++)
++ {
++ if (pAd->MacTab.Content[i].ValidAsCLI || pAd->MacTab.Content[i].ValidAsApCli)
++ CLIENT_STATUS_CLEAR_FLAG(&pAd->MacTab.Content[i], fCLIENT_STATUS_WMM_CAPABLE);
++ }
++
++ //========================================================
++ // MAC Register has a copy .
++ //========================================================
++//#ifndef WIFI_TEST
++ if( pAd->CommonCfg.bEnableTxBurst )
++ {
++ // For CWC test, change txop from 0x30 to 0x20 in TxBurst mode
++ Ac0Cfg.field.AcTxop = 0x20; // Suggest by John for TxBurst in HT Mode
++ }
++ else
++ Ac0Cfg.field.AcTxop = 0; // QID_AC_BE
++//#else
++// Ac0Cfg.field.AcTxop = 0; // QID_AC_BE
++//#endif
++ Ac0Cfg.field.Cwmin = CW_MIN_IN_BITS;
++ Ac0Cfg.field.Cwmax = CW_MAX_IN_BITS;
++ Ac0Cfg.field.Aifsn = 2;
++ RTMP_IO_WRITE32(pAd, EDCA_AC0_CFG, Ac0Cfg.word);
++
++ Ac1Cfg.field.AcTxop = 0; // QID_AC_BK
++ Ac1Cfg.field.Cwmin = CW_MIN_IN_BITS;
++ Ac1Cfg.field.Cwmax = CW_MAX_IN_BITS;
++ Ac1Cfg.field.Aifsn = 2;
++ RTMP_IO_WRITE32(pAd, EDCA_AC1_CFG, Ac1Cfg.word);
++
++ if (pAd->CommonCfg.PhyMode == PHY_11B)
++ {
++ Ac2Cfg.field.AcTxop = 192; // AC_VI: 192*32us ~= 6ms
++ Ac3Cfg.field.AcTxop = 96; // AC_VO: 96*32us ~= 3ms
++ }
++ else
++ {
++ Ac2Cfg.field.AcTxop = 96; // AC_VI: 96*32us ~= 3ms
++ Ac3Cfg.field.AcTxop = 48; // AC_VO: 48*32us ~= 1.5ms
++ }
++ Ac2Cfg.field.Cwmin = CW_MIN_IN_BITS;
++ Ac2Cfg.field.Cwmax = CW_MAX_IN_BITS;
++ Ac2Cfg.field.Aifsn = 2;
++ RTMP_IO_WRITE32(pAd, EDCA_AC2_CFG, Ac2Cfg.word);
++ Ac3Cfg.field.Cwmin = CW_MIN_IN_BITS;
++ Ac3Cfg.field.Cwmax = CW_MAX_IN_BITS;
++ Ac3Cfg.field.Aifsn = 2;
++ RTMP_IO_WRITE32(pAd, EDCA_AC3_CFG, Ac3Cfg.word);
++
++ //========================================================
++ // DMA Register has a copy too.
++ //========================================================
++ csr0.field.Ac0Txop = 0; // QID_AC_BE
++ csr0.field.Ac1Txop = 0; // QID_AC_BK
++ RTMP_IO_WRITE32(pAd, WMM_TXOP0_CFG, csr0.word);
++ if (pAd->CommonCfg.PhyMode == PHY_11B)
++ {
++ csr1.field.Ac2Txop = 192; // AC_VI: 192*32us ~= 6ms
++ csr1.field.Ac3Txop = 96; // AC_VO: 96*32us ~= 3ms
++ }
++ else
++ {
++ csr1.field.Ac2Txop = 96; // AC_VI: 96*32us ~= 3ms
++ csr1.field.Ac3Txop = 48; // AC_VO: 48*32us ~= 1.5ms
++ }
++ RTMP_IO_WRITE32(pAd, WMM_TXOP1_CFG, csr1.word);
++
++ CwminCsr.word = 0;
++ CwminCsr.field.Cwmin0 = CW_MIN_IN_BITS;
++ CwminCsr.field.Cwmin1 = CW_MIN_IN_BITS;
++ CwminCsr.field.Cwmin2 = CW_MIN_IN_BITS;
++ CwminCsr.field.Cwmin3 = CW_MIN_IN_BITS;
++ RTMP_IO_WRITE32(pAd, WMM_CWMIN_CFG, CwminCsr.word);
++
++ CwmaxCsr.word = 0;
++ CwmaxCsr.field.Cwmax0 = CW_MAX_IN_BITS;
++ CwmaxCsr.field.Cwmax1 = CW_MAX_IN_BITS;
++ CwmaxCsr.field.Cwmax2 = CW_MAX_IN_BITS;
++ CwmaxCsr.field.Cwmax3 = CW_MAX_IN_BITS;
++ RTMP_IO_WRITE32(pAd, WMM_CWMAX_CFG, CwmaxCsr.word);
++
++ RTMP_IO_WRITE32(pAd, WMM_AIFSN_CFG, 0x00002222);
++
++ NdisZeroMemory(&pAd->CommonCfg.APEdcaParm, sizeof(EDCA_PARM));
++ }
++ else
++ {
++ OPSTATUS_SET_FLAG(pAd, fOP_STATUS_WMM_INUSED);
++ //========================================================
++ // MAC Register has a copy.
++ //========================================================
++ //
++ // Modify Cwmin/Cwmax/Txop on queue[QID_AC_VI], Recommend by Jerry 2005/07/27
++ // To degrade our VIDO Queue's throughput for WiFi WMM S3T07 Issue.
++ //
++ //pEdcaParm->Txop[QID_AC_VI] = pEdcaParm->Txop[QID_AC_VI] * 7 / 10; // rt2860c need this
++
++ Ac0Cfg.field.AcTxop = pEdcaParm->Txop[QID_AC_BE];
++ Ac0Cfg.field.Cwmin= pEdcaParm->Cwmin[QID_AC_BE];
++ Ac0Cfg.field.Cwmax = pEdcaParm->Cwmax[QID_AC_BE];
++ Ac0Cfg.field.Aifsn = pEdcaParm->Aifsn[QID_AC_BE]; //+1;
++
++ Ac1Cfg.field.AcTxop = pEdcaParm->Txop[QID_AC_BK];
++ Ac1Cfg.field.Cwmin = pEdcaParm->Cwmin[QID_AC_BK]; //+2;
++ Ac1Cfg.field.Cwmax = pEdcaParm->Cwmax[QID_AC_BK];
++ Ac1Cfg.field.Aifsn = pEdcaParm->Aifsn[QID_AC_BK]; //+1;
++
++ Ac2Cfg.field.AcTxop = (pEdcaParm->Txop[QID_AC_VI] * 6) / 10;
++ Ac2Cfg.field.Cwmin = pEdcaParm->Cwmin[QID_AC_VI];
++ Ac2Cfg.field.Cwmax = pEdcaParm->Cwmax[QID_AC_VI];
++ Ac2Cfg.field.Aifsn = pEdcaParm->Aifsn[QID_AC_VI];
++#ifdef CONFIG_STA_SUPPORT
++ IF_DEV_CONFIG_OPMODE_ON_STA(pAd)
++ {
++ // Tuning for Wi-Fi WMM S06
++ if (pAd->CommonCfg.bWiFiTest &&
++ pEdcaParm->Aifsn[QID_AC_VI] == 10)
++ Ac2Cfg.field.Aifsn -= 1;
++
++ // Tuning for TGn Wi-Fi 5.2.32
++ // STA TestBed changes in this item: conexant legacy sta ==> broadcom 11n sta
++ if (STA_TGN_WIFI_ON(pAd) &&
++ pEdcaParm->Aifsn[QID_AC_VI] == 10)
++ {
++ Ac0Cfg.field.Aifsn = 3;
++ Ac2Cfg.field.AcTxop = 5;
++ }
++ }
++#endif // CONFIG_STA_SUPPORT //
++
++ Ac3Cfg.field.AcTxop = pEdcaParm->Txop[QID_AC_VO];
++ Ac3Cfg.field.Cwmin = pEdcaParm->Cwmin[QID_AC_VO];
++ Ac3Cfg.field.Cwmax = pEdcaParm->Cwmax[QID_AC_VO];
++ Ac3Cfg.field.Aifsn = pEdcaParm->Aifsn[QID_AC_VO];
++
++//#ifdef WIFI_TEST
++ if (pAd->CommonCfg.bWiFiTest)
++ {
++ if (Ac3Cfg.field.AcTxop == 102)
++ {
++ Ac0Cfg.field.AcTxop = pEdcaParm->Txop[QID_AC_BE] ? pEdcaParm->Txop[QID_AC_BE] : 10;
++ Ac0Cfg.field.Aifsn = pEdcaParm->Aifsn[QID_AC_BE]-1; /* AIFSN must >= 1 */
++ Ac1Cfg.field.AcTxop = pEdcaParm->Txop[QID_AC_BK];
++ Ac1Cfg.field.Aifsn = pEdcaParm->Aifsn[QID_AC_BK];
++ Ac2Cfg.field.AcTxop = pEdcaParm->Txop[QID_AC_VI];
++ } /* End of if */
++ }
++//#endif // WIFI_TEST //
++
++ RTMP_IO_WRITE32(pAd, EDCA_AC0_CFG, Ac0Cfg.word);
++ RTMP_IO_WRITE32(pAd, EDCA_AC1_CFG, Ac1Cfg.word);
++ RTMP_IO_WRITE32(pAd, EDCA_AC2_CFG, Ac2Cfg.word);
++ RTMP_IO_WRITE32(pAd, EDCA_AC3_CFG, Ac3Cfg.word);
++
++
++ //========================================================
++ // DMA Register has a copy too.
++ //========================================================
++ csr0.field.Ac0Txop = Ac0Cfg.field.AcTxop;
++ csr0.field.Ac1Txop = Ac1Cfg.field.AcTxop;
++ RTMP_IO_WRITE32(pAd, WMM_TXOP0_CFG, csr0.word);
++
++ csr1.field.Ac2Txop = Ac2Cfg.field.AcTxop;
++ csr1.field.Ac3Txop = Ac3Cfg.field.AcTxop;
++ RTMP_IO_WRITE32(pAd, WMM_TXOP1_CFG, csr1.word);
++
++ CwminCsr.word = 0;
++ CwminCsr.field.Cwmin0 = pEdcaParm->Cwmin[QID_AC_BE];
++ CwminCsr.field.Cwmin1 = pEdcaParm->Cwmin[QID_AC_BK];
++ CwminCsr.field.Cwmin2 = pEdcaParm->Cwmin[QID_AC_VI];
++#ifdef CONFIG_STA_SUPPORT
++ IF_DEV_CONFIG_OPMODE_ON_STA(pAd)
++ CwminCsr.field.Cwmin3 = pEdcaParm->Cwmin[QID_AC_VO] - 1; //for TGn wifi test
++#endif // CONFIG_STA_SUPPORT //
++ RTMP_IO_WRITE32(pAd, WMM_CWMIN_CFG, CwminCsr.word);
++
++ CwmaxCsr.word = 0;
++ CwmaxCsr.field.Cwmax0 = pEdcaParm->Cwmax[QID_AC_BE];
++ CwmaxCsr.field.Cwmax1 = pEdcaParm->Cwmax[QID_AC_BK];
++ CwmaxCsr.field.Cwmax2 = pEdcaParm->Cwmax[QID_AC_VI];
++ CwmaxCsr.field.Cwmax3 = pEdcaParm->Cwmax[QID_AC_VO];
++ RTMP_IO_WRITE32(pAd, WMM_CWMAX_CFG, CwmaxCsr.word);
++
++ AifsnCsr.word = 0;
++ AifsnCsr.field.Aifsn0 = Ac0Cfg.field.Aifsn; //pEdcaParm->Aifsn[QID_AC_BE];
++ AifsnCsr.field.Aifsn1 = Ac1Cfg.field.Aifsn; //pEdcaParm->Aifsn[QID_AC_BK];
++ AifsnCsr.field.Aifsn2 = Ac2Cfg.field.Aifsn; //pEdcaParm->Aifsn[QID_AC_VI];
++#ifdef CONFIG_STA_SUPPORT
++ IF_DEV_CONFIG_OPMODE_ON_STA(pAd)
++ {
++ // Tuning for Wi-Fi WMM S06
++ if (pAd->CommonCfg.bWiFiTest &&
++ pEdcaParm->Aifsn[QID_AC_VI] == 10)
++ AifsnCsr.field.Aifsn2 = Ac2Cfg.field.Aifsn - 4;
++
++ // Tuning for TGn Wi-Fi 5.2.32
++ // STA TestBed changes in this item: conexant legacy sta ==> broadcom 11n sta
++ if (STA_TGN_WIFI_ON(pAd) &&
++ pEdcaParm->Aifsn[QID_AC_VI] == 10)
++ {
++ AifsnCsr.field.Aifsn0 = 3;
++ AifsnCsr.field.Aifsn2 = 7;
++ }
++
++ if (INFRA_ON(pAd))
++ CLIENT_STATUS_SET_FLAG(&pAd->MacTab.Content[BSSID_WCID], fCLIENT_STATUS_WMM_CAPABLE);
++ }
++#endif // CONFIG_STA_SUPPORT //
++
++#ifdef CONFIG_STA_SUPPORT
++ IF_DEV_CONFIG_OPMODE_ON_STA(pAd)
++ AifsnCsr.field.Aifsn3 = Ac3Cfg.field.Aifsn - 1; //pEdcaParm->Aifsn[QID_AC_VO]; //for TGn wifi test
++#endif // CONFIG_STA_SUPPORT //
++ RTMP_IO_WRITE32(pAd, WMM_AIFSN_CFG, AifsnCsr.word);
++
++ NdisMoveMemory(&pAd->CommonCfg.APEdcaParm, pEdcaParm, sizeof(EDCA_PARM));
++ if (!ADHOC_ON(pAd))
++ {
++ DBGPRINT(RT_DEBUG_TRACE,("EDCA [#%d]: AIFSN CWmin CWmax TXOP(us) ACM\n", pEdcaParm->EdcaUpdateCount));
++ DBGPRINT(RT_DEBUG_TRACE,(" AC_BE %2d %2d %2d %4d %d\n",
++ pEdcaParm->Aifsn[0],
++ pEdcaParm->Cwmin[0],
++ pEdcaParm->Cwmax[0],
++ pEdcaParm->Txop[0]<<5,
++ pEdcaParm->bACM[0]));
++ DBGPRINT(RT_DEBUG_TRACE,(" AC_BK %2d %2d %2d %4d %d\n",
++ pEdcaParm->Aifsn[1],
++ pEdcaParm->Cwmin[1],
++ pEdcaParm->Cwmax[1],
++ pEdcaParm->Txop[1]<<5,
++ pEdcaParm->bACM[1]));
++ DBGPRINT(RT_DEBUG_TRACE,(" AC_VI %2d %2d %2d %4d %d\n",
++ pEdcaParm->Aifsn[2],
++ pEdcaParm->Cwmin[2],
++ pEdcaParm->Cwmax[2],
++ pEdcaParm->Txop[2]<<5,
++ pEdcaParm->bACM[2]));
++ DBGPRINT(RT_DEBUG_TRACE,(" AC_VO %2d %2d %2d %4d %d\n",
++ pEdcaParm->Aifsn[3],
++ pEdcaParm->Cwmin[3],
++ pEdcaParm->Cwmax[3],
++ pEdcaParm->Txop[3]<<5,
++ pEdcaParm->bACM[3]));
++ }
++ }
++}
++
++/*
++ ==========================================================================
++ Description:
++
++ IRQL = PASSIVE_LEVEL
++ IRQL = DISPATCH_LEVEL
++
++ ==========================================================================
++ */
++VOID AsicSetSlotTime(
++ IN PRTMP_ADAPTER pAd,
++ IN BOOLEAN bUseShortSlotTime)
++{
++ ULONG SlotTime;
++ UINT32 RegValue = 0;
++
++#ifdef CONFIG_STA_SUPPORT
++ if (pAd->CommonCfg.Channel > 14)
++ bUseShortSlotTime = TRUE;
++#endif // CONFIG_STA_SUPPORT //
++
++ if (bUseShortSlotTime)
++ OPSTATUS_SET_FLAG(pAd, fOP_STATUS_SHORT_SLOT_INUSED);
++ else
++ OPSTATUS_CLEAR_FLAG(pAd, fOP_STATUS_SHORT_SLOT_INUSED);
++
++ SlotTime = (bUseShortSlotTime)? 9 : 20;
++
++#ifdef CONFIG_STA_SUPPORT
++ IF_DEV_CONFIG_OPMODE_ON_STA(pAd)
++ {
++ // force using short SLOT time for FAE to demo performance when TxBurst is ON
++ if (((pAd->StaActive.SupportedPhyInfo.bHtEnable == FALSE) && (OPSTATUS_TEST_FLAG(pAd, fOP_STATUS_WMM_INUSED)))
++#ifdef DOT11_N_SUPPORT
++ || ((pAd->StaActive.SupportedPhyInfo.bHtEnable == TRUE) && (pAd->CommonCfg.BACapability.field.Policy == BA_NOTUSE))
++#endif // DOT11_N_SUPPORT //
++ )
++ {
++ // In this case, we will think it is doing Wi-Fi test
++ // And we will not set to short slot when bEnableTxBurst is TRUE.
++ }
++ else if (pAd->CommonCfg.bEnableTxBurst)
++ SlotTime = 9;
++ }
++#endif // CONFIG_STA_SUPPORT //
++
++ //
++ // For some reasons, always set it to short slot time.
++ //
++ // ToDo: Should consider capability with 11B
++ //
++#ifdef CONFIG_STA_SUPPORT
++ IF_DEV_CONFIG_OPMODE_ON_STA(pAd)
++ {
++ if (pAd->StaCfg.BssType == BSS_ADHOC)
++ SlotTime = 20;
++ }
++#endif // CONFIG_STA_SUPPORT //
++
++ RTMP_IO_READ32(pAd, BKOFF_SLOT_CFG, &RegValue);
++ RegValue = RegValue & 0xFFFFFF00;
++
++ RegValue |= SlotTime;
++
++ RTMP_IO_WRITE32(pAd, BKOFF_SLOT_CFG, RegValue);
++}
++
++/*
++ ========================================================================
++ Description:
++ Add Shared key information into ASIC.
++ Update shared key, TxMic and RxMic to Asic Shared key table
++ Update its cipherAlg to Asic Shared key Mode.
++
++ Return:
++ ========================================================================
++*/
++VOID AsicAddSharedKeyEntry(
++ IN PRTMP_ADAPTER pAd,
++ IN UCHAR BssIndex,
++ IN UCHAR KeyIdx,
++ IN UCHAR CipherAlg,
++ IN PUCHAR pKey,
++ IN PUCHAR pTxMic,
++ IN PUCHAR pRxMic)
++{
++ ULONG offset; //, csr0;
++ SHAREDKEY_MODE_STRUC csr1;
++
++ DBGPRINT(RT_DEBUG_TRACE, ("AsicAddSharedKeyEntry BssIndex=%d, KeyIdx=%d\n", BssIndex,KeyIdx));
++//============================================================================================
++
++ DBGPRINT(RT_DEBUG_TRACE,("AsicAddSharedKeyEntry: %s key #%d\n", CipherName[CipherAlg], BssIndex*4 + KeyIdx));
++ DBGPRINT_RAW(RT_DEBUG_TRACE, (" Key = %02x:%02x:%02x:%02x:%02x:%02x:%02x:%02x:%02x:%02x:%02x:%02x:%02x:%02x:%02x:%02x\n",
++ pKey[0],pKey[1],pKey[2],pKey[3],pKey[4],pKey[5],pKey[6],pKey[7],pKey[8],pKey[9],pKey[10],pKey[11],pKey[12],pKey[13],pKey[14],pKey[15]));
++ if (pRxMic)
++ {
++ DBGPRINT_RAW(RT_DEBUG_TRACE, (" Rx MIC Key = %02x:%02x:%02x:%02x:%02x:%02x:%02x:%02x\n",
++ pRxMic[0],pRxMic[1],pRxMic[2],pRxMic[3],pRxMic[4],pRxMic[5],pRxMic[6],pRxMic[7]));
++ }
++ if (pTxMic)
++ {
++ DBGPRINT_RAW(RT_DEBUG_TRACE, (" Tx MIC Key = %02x:%02x:%02x:%02x:%02x:%02x:%02x:%02x\n",
++ pTxMic[0],pTxMic[1],pTxMic[2],pTxMic[3],pTxMic[4],pTxMic[5],pTxMic[6],pTxMic[7]));
++ }
++//============================================================================================
++ //
++ // fill key material - key + TX MIC + RX MIC
++ //
++
++#ifdef RT2870
++{
++ offset = SHARED_KEY_TABLE_BASE + (4*BssIndex + KeyIdx)*HW_KEY_ENTRY_SIZE;
++ RTUSBMultiWrite(pAd, offset, pKey, MAX_LEN_OF_SHARE_KEY);
++
++ offset += MAX_LEN_OF_SHARE_KEY;
++ if (pTxMic)
++ {
++ RTUSBMultiWrite(pAd, offset, pTxMic, 8);
++ }
++
++ offset += 8;
++ if (pRxMic)
++ {
++ RTUSBMultiWrite(pAd, offset, pRxMic, 8);
++ }
++}
++#endif // RT2870 //
++
++ //
++ // Update cipher algorithm. WSTA always use BSS0
++ //
++ RTMP_IO_READ32(pAd, SHARED_KEY_MODE_BASE+4*(BssIndex/2), &csr1.word);
++ DBGPRINT(RT_DEBUG_TRACE,("Read: SHARED_KEY_MODE_BASE at this Bss[%d] KeyIdx[%d]= 0x%x \n", BssIndex,KeyIdx, csr1.word));
++ if ((BssIndex%2) == 0)
++ {
++ if (KeyIdx == 0)
++ csr1.field.Bss0Key0CipherAlg = CipherAlg;
++ else if (KeyIdx == 1)
++ csr1.field.Bss0Key1CipherAlg = CipherAlg;
++ else if (KeyIdx == 2)
++ csr1.field.Bss0Key2CipherAlg = CipherAlg;
++ else
++ csr1.field.Bss0Key3CipherAlg = CipherAlg;
++ }
++ else
++ {
++ if (KeyIdx == 0)
++ csr1.field.Bss1Key0CipherAlg = CipherAlg;
++ else if (KeyIdx == 1)
++ csr1.field.Bss1Key1CipherAlg = CipherAlg;
++ else if (KeyIdx == 2)
++ csr1.field.Bss1Key2CipherAlg = CipherAlg;
++ else
++ csr1.field.Bss1Key3CipherAlg = CipherAlg;
++ }
++ DBGPRINT(RT_DEBUG_TRACE,("Write: SHARED_KEY_MODE_BASE at this Bss[%d] = 0x%x \n", BssIndex, csr1.word));
++ RTMP_IO_WRITE32(pAd, SHARED_KEY_MODE_BASE+4*(BssIndex/2), csr1.word);
++
++}
++
++// IRQL = DISPATCH_LEVEL
++VOID AsicRemoveSharedKeyEntry(
++ IN PRTMP_ADAPTER pAd,
++ IN UCHAR BssIndex,
++ IN UCHAR KeyIdx)
++{
++ //ULONG SecCsr0;
++ SHAREDKEY_MODE_STRUC csr1;
++
++ DBGPRINT(RT_DEBUG_TRACE,("AsicRemoveSharedKeyEntry: #%d \n", BssIndex*4 + KeyIdx));
++
++ RTMP_IO_READ32(pAd, SHARED_KEY_MODE_BASE+4*(BssIndex/2), &csr1.word);
++ if ((BssIndex%2) == 0)
++ {
++ if (KeyIdx == 0)
++ csr1.field.Bss0Key0CipherAlg = 0;
++ else if (KeyIdx == 1)
++ csr1.field.Bss0Key1CipherAlg = 0;
++ else if (KeyIdx == 2)
++ csr1.field.Bss0Key2CipherAlg = 0;
++ else
++ csr1.field.Bss0Key3CipherAlg = 0;
++ }
++ else
++ {
++ if (KeyIdx == 0)
++ csr1.field.Bss1Key0CipherAlg = 0;
++ else if (KeyIdx == 1)
++ csr1.field.Bss1Key1CipherAlg = 0;
++ else if (KeyIdx == 2)
++ csr1.field.Bss1Key2CipherAlg = 0;
++ else
++ csr1.field.Bss1Key3CipherAlg = 0;
++ }
++ DBGPRINT(RT_DEBUG_TRACE,("Write: SHARED_KEY_MODE_BASE at this Bss[%d] = 0x%x \n", BssIndex, csr1.word));
++ RTMP_IO_WRITE32(pAd, SHARED_KEY_MODE_BASE+4*(BssIndex/2), csr1.word);
++ ASSERT(BssIndex < 4);
++ ASSERT(KeyIdx < 4);
++
++}
++
++
++VOID AsicUpdateWCIDAttribute(
++ IN PRTMP_ADAPTER pAd,
++ IN USHORT WCID,
++ IN UCHAR BssIndex,
++ IN UCHAR CipherAlg,
++ IN BOOLEAN bUsePairewiseKeyTable)
++{
++ ULONG WCIDAttri = 0, offset;
++
++ //
++ // Update WCID attribute.
++ // Only TxKey could update WCID attribute.
++ //
++ offset = MAC_WCID_ATTRIBUTE_BASE + (WCID * HW_WCID_ATTRI_SIZE);
++ WCIDAttri = (BssIndex << 4) | (CipherAlg << 1) | (bUsePairewiseKeyTable);
++ RTMP_IO_WRITE32(pAd, offset, WCIDAttri);
++}
++
++VOID AsicUpdateWCIDIVEIV(
++ IN PRTMP_ADAPTER pAd,
++ IN USHORT WCID,
++ IN ULONG uIV,
++ IN ULONG uEIV)
++{
++ ULONG offset;
++
++ offset = MAC_IVEIV_TABLE_BASE + (WCID * HW_IVEIV_ENTRY_SIZE);
++
++ RTMP_IO_WRITE32(pAd, offset, uIV);
++ RTMP_IO_WRITE32(pAd, offset + 4, uEIV);
++}
++
++VOID AsicUpdateRxWCIDTable(
++ IN PRTMP_ADAPTER pAd,
++ IN USHORT WCID,
++ IN PUCHAR pAddr)
++{
++ ULONG offset;
++ ULONG Addr;
++
++ offset = MAC_WCID_BASE + (WCID * HW_WCID_ENTRY_SIZE);
++ Addr = pAddr[0] + (pAddr[1] << 8) +(pAddr[2] << 16) +(pAddr[3] << 24);
++ RTMP_IO_WRITE32(pAd, offset, Addr);
++ Addr = pAddr[4] + (pAddr[5] << 8);
++ RTMP_IO_WRITE32(pAd, offset + 4, Addr);
++}
++
++
++/*
++ ========================================================================
++
++ Routine Description:
++ Set Cipher Key, Cipher algorithm, IV/EIV to Asic
++
++ Arguments:
++ pAd Pointer to our adapter
++ WCID WCID Entry number.
++ BssIndex BSSID index, station or none multiple BSSID support
++ this value should be 0.
++ KeyIdx This KeyIdx will set to IV's KeyID if bTxKey enabled
++ pCipherKey Pointer to Cipher Key.
++ bUsePairewiseKeyTable TRUE means saved the key in SharedKey table,
++ otherwise PairewiseKey table
++ bTxKey This is the transmit key if enabled.
++
++ Return Value:
++ None
++
++ Note:
++ This routine will set the relative key stuff to Asic including WCID attribute,
++ Cipher Key, Cipher algorithm and IV/EIV.
++
++ IV/EIV will be update if this CipherKey is the transmission key because
++ ASIC will base on IV's KeyID value to select Cipher Key.
++
++ If bTxKey sets to FALSE, this is not the TX key, but it could be
++ RX key
++
++ For AP mode bTxKey must be always set to TRUE.
++ ========================================================================
++*/
++VOID AsicAddKeyEntry(
++ IN PRTMP_ADAPTER pAd,
++ IN USHORT WCID,
++ IN UCHAR BssIndex,
++ IN UCHAR KeyIdx,
++ IN PCIPHER_KEY pCipherKey,
++ IN BOOLEAN bUsePairewiseKeyTable,
++ IN BOOLEAN bTxKey)
++{
++ ULONG offset;
++// ULONG WCIDAttri = 0;
++ UCHAR IV4 = 0;
++ PUCHAR pKey = pCipherKey->Key;
++// ULONG KeyLen = pCipherKey->KeyLen;
++ PUCHAR pTxMic = pCipherKey->TxMic;
++ PUCHAR pRxMic = pCipherKey->RxMic;
++ PUCHAR pTxtsc = pCipherKey->TxTsc;
++ UCHAR CipherAlg = pCipherKey->CipherAlg;
++ SHAREDKEY_MODE_STRUC csr1;
++
++// ASSERT(KeyLen <= MAX_LEN_OF_PEER_KEY);
++
++ DBGPRINT(RT_DEBUG_TRACE, ("==> AsicAddKeyEntry\n"));
++ //
++ // 1.) decide key table offset
++ //
++ if (bUsePairewiseKeyTable)
++ offset = PAIRWISE_KEY_TABLE_BASE + (WCID * HW_KEY_ENTRY_SIZE);
++ else
++ offset = SHARED_KEY_TABLE_BASE + (4 * BssIndex + KeyIdx) * HW_KEY_ENTRY_SIZE;
++
++ //
++ // 2.) Set Key to Asic
++ //
++ //for (i = 0; i < KeyLen; i++)
++
++#ifdef RT2870
++ RTUSBMultiWrite(pAd, offset, pKey, MAX_LEN_OF_PEER_KEY);
++ offset += MAX_LEN_OF_PEER_KEY;
++
++ //
++ // 3.) Set MIC key if available
++ //
++ if (pTxMic)
++ {
++ RTUSBMultiWrite(pAd, offset, pTxMic, 8);
++ }
++ offset += LEN_TKIP_TXMICK;
++
++ if (pRxMic)
++ {
++ RTUSBMultiWrite(pAd, offset, pRxMic, 8);
++ }
++#endif // RT2870 //
++
++ //
++ // 4.) Modify IV/EIV if needs
++ // This will force Asic to use this key ID by setting IV.
++ //
++ if (bTxKey)
++ {
++
++#ifdef RT2870
++ UINT32 tmpVal;
++
++ //
++ // Write IV
++ //
++ IV4 = (KeyIdx << 6);
++ if ((CipherAlg == CIPHER_TKIP) || (CipherAlg == CIPHER_TKIP_NO_MIC) ||(CipherAlg == CIPHER_AES))
++ IV4 |= 0x20; // turn on extension bit means EIV existence
++
++ tmpVal = pTxtsc[1] + (((pTxtsc[1] | 0x20) & 0x7f) << 8) + (pTxtsc[0] << 16) + (IV4 << 24);
++ RTMP_IO_WRITE32(pAd, offset, tmpVal);
++
++ //
++ // Write EIV
++ //
++ offset += 4;
++ RTMP_IO_WRITE32(pAd, offset, *(PUINT32)&pCipherKey->TxTsc[2]);
++#endif // RT2870 //
++ AsicUpdateWCIDAttribute(pAd, WCID, BssIndex, CipherAlg, bUsePairewiseKeyTable);
++ }
++
++ if (!bUsePairewiseKeyTable)
++ {
++ //
++ // Only update the shared key security mode
++ //
++ RTMP_IO_READ32(pAd, SHARED_KEY_MODE_BASE + 4 * (BssIndex / 2), &csr1.word);
++ if ((BssIndex % 2) == 0)
++ {
++ if (KeyIdx == 0)
++ csr1.field.Bss0Key0CipherAlg = CipherAlg;
++ else if (KeyIdx == 1)
++ csr1.field.Bss0Key1CipherAlg = CipherAlg;
++ else if (KeyIdx == 2)
++ csr1.field.Bss0Key2CipherAlg = CipherAlg;
++ else
++ csr1.field.Bss0Key3CipherAlg = CipherAlg;
++ }
++ else
++ {
++ if (KeyIdx == 0)
++ csr1.field.Bss1Key0CipherAlg = CipherAlg;
++ else if (KeyIdx == 1)
++ csr1.field.Bss1Key1CipherAlg = CipherAlg;
++ else if (KeyIdx == 2)
++ csr1.field.Bss1Key2CipherAlg = CipherAlg;
++ else
++ csr1.field.Bss1Key3CipherAlg = CipherAlg;
++ }
++ RTMP_IO_WRITE32(pAd, SHARED_KEY_MODE_BASE + 4 * (BssIndex / 2), csr1.word);
++ }
++
++ DBGPRINT(RT_DEBUG_TRACE, ("<== AsicAddKeyEntry\n"));
++}
++
++
++/*
++ ========================================================================
++ Description:
++ Add Pair-wise key material into ASIC.
++ Update pairwise key, TxMic and RxMic to Asic Pair-wise key table
++
++ Return:
++ ========================================================================
++*/
++VOID AsicAddPairwiseKeyEntry(
++ IN PRTMP_ADAPTER pAd,
++ IN PUCHAR pAddr,
++ IN UCHAR WCID,
++ IN CIPHER_KEY *pCipherKey)
++{
++ INT i;
++ ULONG offset;
++ PUCHAR pKey = pCipherKey->Key;
++ PUCHAR pTxMic = pCipherKey->TxMic;
++ PUCHAR pRxMic = pCipherKey->RxMic;
++#ifdef DBG
++ UCHAR CipherAlg = pCipherKey->CipherAlg;
++#endif // DBG //
++
++ // EKEY
++ offset = PAIRWISE_KEY_TABLE_BASE + (WCID * HW_KEY_ENTRY_SIZE);
++#ifdef RT2870
++ RTUSBMultiWrite(pAd, offset, &pCipherKey->Key[0], MAX_LEN_OF_PEER_KEY);
++#endif // RT2870 //
++ for (i=0; i<MAX_LEN_OF_PEER_KEY; i+=4)
++ {
++ UINT32 Value;
++ RTMP_IO_READ32(pAd, offset + i, &Value);
++ }
++
++ offset += MAX_LEN_OF_PEER_KEY;
++
++ // MIC KEY
++ if (pTxMic)
++ {
++#ifdef RT2870
++ RTUSBMultiWrite(pAd, offset, &pCipherKey->TxMic[0], 8);
++#endif // RT2870 //
++ }
++ offset += 8;
++ if (pRxMic)
++ {
++#ifdef RT2870
++ RTUSBMultiWrite(pAd, offset, &pCipherKey->RxMic[0], 8);
++#endif // RT2870 //
++ }
++
++ DBGPRINT(RT_DEBUG_TRACE,("AsicAddPairwiseKeyEntry: WCID #%d Alg=%s\n",WCID, CipherName[CipherAlg]));
++ DBGPRINT(RT_DEBUG_TRACE,(" Key = %02x:%02x:%02x:%02x:%02x:%02x:%02x:%02x:%02x:%02x:%02x:%02x:%02x:%02x:%02x:%02x\n",
++ pKey[0],pKey[1],pKey[2],pKey[3],pKey[4],pKey[5],pKey[6],pKey[7],pKey[8],pKey[9],pKey[10],pKey[11],pKey[12],pKey[13],pKey[14],pKey[15]));
++ if (pRxMic)
++ {
++ DBGPRINT(RT_DEBUG_TRACE, (" Rx MIC Key = %02x:%02x:%02x:%02x:%02x:%02x:%02x:%02x\n",
++ pRxMic[0],pRxMic[1],pRxMic[2],pRxMic[3],pRxMic[4],pRxMic[5],pRxMic[6],pRxMic[7]));
++ }
++ if (pTxMic)
++ {
++ DBGPRINT(RT_DEBUG_TRACE, (" Tx MIC Key = %02x:%02x:%02x:%02x:%02x:%02x:%02x:%02x\n",
++ pTxMic[0],pTxMic[1],pTxMic[2],pTxMic[3],pTxMic[4],pTxMic[5],pTxMic[6],pTxMic[7]));
++ }
++}
++/*
++ ========================================================================
++ Description:
++ Remove Pair-wise key material from ASIC.
++
++ Return:
++ ========================================================================
++*/
++VOID AsicRemovePairwiseKeyEntry(
++ IN PRTMP_ADAPTER pAd,
++ IN UCHAR BssIdx,
++ IN UCHAR Wcid)
++{
++ ULONG WCIDAttri;
++ USHORT offset;
++
++ // re-set the entry's WCID attribute as OPEN-NONE.
++ offset = MAC_WCID_ATTRIBUTE_BASE + (Wcid * HW_WCID_ATTRI_SIZE);
++ WCIDAttri = (BssIdx<<4) | PAIRWISEKEYTABLE;
++ RTMP_IO_WRITE32(pAd, offset, WCIDAttri);
++}
++
++BOOLEAN AsicSendCommandToMcu(
++ IN PRTMP_ADAPTER pAd,
++ IN UCHAR Command,
++ IN UCHAR Token,
++ IN UCHAR Arg0,
++ IN UCHAR Arg1)
++{
++ HOST_CMD_CSR_STRUC H2MCmd;
++ H2M_MAILBOX_STRUC H2MMailbox;
++ ULONG i = 0;
++ do
++ {
++ RTMP_IO_READ32(pAd, H2M_MAILBOX_CSR, &H2MMailbox.word);
++ if (H2MMailbox.field.Owner == 0)
++ break;
++
++ RTMPusecDelay(2);
++ } while(i++ < 100);
++
++ if (i >= 100)
++ {
++ {
++ DBGPRINT_ERR(("H2M_MAILBOX still hold by MCU. command fail\n"));
++ }
++ return FALSE;
++ }
++
++
++ H2MMailbox.field.Owner = 1; // pass ownership to MCU
++ H2MMailbox.field.CmdToken = Token;
++ H2MMailbox.field.HighByte = Arg1;
++ H2MMailbox.field.LowByte = Arg0;
++ RTMP_IO_WRITE32(pAd, H2M_MAILBOX_CSR, H2MMailbox.word);
++
++ H2MCmd.word = 0;
++ H2MCmd.field.HostCommand = Command;
++ RTMP_IO_WRITE32(pAd, HOST_CMD_CSR, H2MCmd.word);
++
++ if (Command != 0x80)
++ {
++ }
++
++ return TRUE;
++}
++
++
++/*
++ ========================================================================
++
++ Routine Description:
++ Verify the support rate for different PHY type
++
++ Arguments:
++ pAd Pointer to our adapter
++
++ Return Value:
++ None
++
++ IRQL = PASSIVE_LEVEL
++
++ ========================================================================
++*/
++VOID RTMPCheckRates(
++ IN PRTMP_ADAPTER pAd,
++ IN OUT UCHAR SupRate[],
++ IN OUT UCHAR *SupRateLen)
++{
++ UCHAR RateIdx, i, j;
++ UCHAR NewRate[12], NewRateLen;
++
++ NewRateLen = 0;
++
++ if (pAd->CommonCfg.PhyMode == PHY_11B)
++ RateIdx = 4;
++ else
++ RateIdx = 12;
++
++ // Check for support rates exclude basic rate bit
++ for (i = 0; i < *SupRateLen; i++)
++ for (j = 0; j < RateIdx; j++)
++ if ((SupRate[i] & 0x7f) == RateIdTo500Kbps[j])
++ NewRate[NewRateLen++] = SupRate[i];
++
++ *SupRateLen = NewRateLen;
++ NdisMoveMemory(SupRate, NewRate, NewRateLen);
++}
++
++#ifdef CONFIG_STA_SUPPORT
++#ifdef DOT11_N_SUPPORT
++BOOLEAN RTMPCheckChannel(
++ IN PRTMP_ADAPTER pAd,
++ IN UCHAR CentralChannel,
++ IN UCHAR Channel)
++{
++ UCHAR k;
++ UCHAR UpperChannel = 0, LowerChannel = 0;
++ UCHAR NoEffectChannelinList = 0;
++
++ // Find upper and lower channel according to 40MHz current operation.
++ if (CentralChannel < Channel)
++ {
++ UpperChannel = Channel;
++ if (CentralChannel > 2)
++ LowerChannel = CentralChannel - 2;
++ else
++ return FALSE;
++ }
++ else if (CentralChannel > Channel)
++ {
++ UpperChannel = CentralChannel + 2;
++ LowerChannel = Channel;
++ }
++
++ for (k = 0;k < pAd->ChannelListNum;k++)
++ {
++ if (pAd->ChannelList[k].Channel == UpperChannel)
++ {
++ NoEffectChannelinList ++;
++ }
++ if (pAd->ChannelList[k].Channel == LowerChannel)
++ {
++ NoEffectChannelinList ++;
++ }
++ }
++
++ DBGPRINT(RT_DEBUG_TRACE,("Total Channel in Channel List = [%d]\n", NoEffectChannelinList));
++ if (NoEffectChannelinList == 2)
++ return TRUE;
++ else
++ return FALSE;
++}
++
++/*
++ ========================================================================
++
++ Routine Description:
++ Verify the support rate for HT phy type
++
++ Arguments:
++ pAd Pointer to our adapter
++
++ Return Value:
++ FALSE if pAd->CommonCfg.SupportedHtPhy doesn't accept the pHtCapability. (AP Mode)
++
++ IRQL = PASSIVE_LEVEL
++
++ ========================================================================
++*/
++BOOLEAN RTMPCheckHt(
++ IN PRTMP_ADAPTER pAd,
++ IN UCHAR Wcid,
++ IN HT_CAPABILITY_IE *pHtCapability,
++ IN ADD_HT_INFO_IE *pAddHtInfo)
++{
++ if (Wcid >= MAX_LEN_OF_MAC_TABLE)
++ return FALSE;
++
++ // If use AMSDU, set flag.
++ if (pAd->CommonCfg.DesiredHtPhy.AmsduEnable)
++ CLIENT_STATUS_SET_FLAG(&pAd->MacTab.Content[Wcid], fCLIENT_STATUS_AMSDU_INUSED);
++ // Save Peer Capability
++ if (pHtCapability->HtCapInfo.ShortGIfor20)
++ CLIENT_STATUS_SET_FLAG(&pAd->MacTab.Content[Wcid], fCLIENT_STATUS_SGI20_CAPABLE);
++ if (pHtCapability->HtCapInfo.ShortGIfor40)
++ CLIENT_STATUS_SET_FLAG(&pAd->MacTab.Content[Wcid], fCLIENT_STATUS_SGI40_CAPABLE);
++ if (pHtCapability->HtCapInfo.TxSTBC)
++ CLIENT_STATUS_SET_FLAG(&pAd->MacTab.Content[Wcid], fCLIENT_STATUS_TxSTBC_CAPABLE);
++ if (pHtCapability->HtCapInfo.RxSTBC)
++ CLIENT_STATUS_SET_FLAG(&pAd->MacTab.Content[Wcid], fCLIENT_STATUS_RxSTBC_CAPABLE);
++ if (pAd->CommonCfg.bRdg && pHtCapability->ExtHtCapInfo.RDGSupport)
++ {
++ CLIENT_STATUS_SET_FLAG(&pAd->MacTab.Content[Wcid], fCLIENT_STATUS_RDG_CAPABLE);
++ }
++
++ if (Wcid < MAX_LEN_OF_MAC_TABLE)
++ {
++ pAd->MacTab.Content[Wcid].MpduDensity = pHtCapability->HtCapParm.MpduDensity;
++ }
++
++ // Will check ChannelWidth for MCSSet[4] below
++ pAd->MlmeAux.HtCapability.MCSSet[4] = 0x1;
++ switch (pAd->CommonCfg.RxStream)
++ {
++ case 1:
++ pAd->MlmeAux.HtCapability.MCSSet[0] = 0xff;
++ pAd->MlmeAux.HtCapability.MCSSet[1] = 0x00;
++ pAd->MlmeAux.HtCapability.MCSSet[2] = 0x00;
++ pAd->MlmeAux.HtCapability.MCSSet[3] = 0x00;
++ break;
++ case 2:
++ pAd->MlmeAux.HtCapability.MCSSet[0] = 0xff;
++ pAd->MlmeAux.HtCapability.MCSSet[1] = 0xff;
++ pAd->MlmeAux.HtCapability.MCSSet[2] = 0x00;
++ pAd->MlmeAux.HtCapability.MCSSet[3] = 0x00;
++ break;
++ case 3:
++ pAd->MlmeAux.HtCapability.MCSSet[0] = 0xff;
++ pAd->MlmeAux.HtCapability.MCSSet[1] = 0xff;
++ pAd->MlmeAux.HtCapability.MCSSet[2] = 0xff;
++ pAd->MlmeAux.HtCapability.MCSSet[3] = 0x00;
++ break;
++ }
++
++ pAd->MlmeAux.HtCapability.HtCapInfo.ChannelWidth = pAddHtInfo->AddHtInfo.RecomWidth & pAd->CommonCfg.DesiredHtPhy.ChannelWidth;
++
++ DBGPRINT(RT_DEBUG_TRACE, ("RTMPCheckHt:: HtCapInfo.ChannelWidth=%d, RecomWidth=%d, DesiredHtPhy.ChannelWidth=%d, BW40MAvailForA/G=%d/%d, PhyMode=%d \n",
++ pAd->MlmeAux.HtCapability.HtCapInfo.ChannelWidth, pAddHtInfo->AddHtInfo.RecomWidth, pAd->CommonCfg.DesiredHtPhy.ChannelWidth,
++ pAd->NicConfig2.field.BW40MAvailForA, pAd->NicConfig2.field.BW40MAvailForG, pAd->CommonCfg.PhyMode));
++
++ pAd->MlmeAux.HtCapability.HtCapInfo.GF = pHtCapability->HtCapInfo.GF &pAd->CommonCfg.DesiredHtPhy.GF;
++
++ // Send Assoc Req with my HT capability.
++ pAd->MlmeAux.HtCapability.HtCapInfo.AMsduSize = pAd->CommonCfg.DesiredHtPhy.AmsduSize;
++ pAd->MlmeAux.HtCapability.HtCapInfo.MimoPs = pAd->CommonCfg.DesiredHtPhy.MimoPs;
++ pAd->MlmeAux.HtCapability.HtCapInfo.ShortGIfor20 = (pAd->CommonCfg.DesiredHtPhy.ShortGIfor20) & (pHtCapability->HtCapInfo.ShortGIfor20);
++ pAd->MlmeAux.HtCapability.HtCapInfo.ShortGIfor40 = (pAd->CommonCfg.DesiredHtPhy.ShortGIfor40) & (pHtCapability->HtCapInfo.ShortGIfor40);
++ pAd->MlmeAux.HtCapability.HtCapInfo.TxSTBC = (pAd->CommonCfg.DesiredHtPhy.TxSTBC)&(pHtCapability->HtCapInfo.RxSTBC);
++ pAd->MlmeAux.HtCapability.HtCapInfo.RxSTBC = (pAd->CommonCfg.DesiredHtPhy.RxSTBC)&(pHtCapability->HtCapInfo.TxSTBC);
++ pAd->MlmeAux.HtCapability.HtCapParm.MaxRAmpduFactor = pAd->CommonCfg.DesiredHtPhy.MaxRAmpduFactor;
++ pAd->MlmeAux.HtCapability.HtCapParm.MpduDensity = pAd->CommonCfg.HtCapability.HtCapParm.MpduDensity;
++ pAd->MlmeAux.HtCapability.ExtHtCapInfo.PlusHTC = pHtCapability->ExtHtCapInfo.PlusHTC;
++ pAd->MacTab.Content[Wcid].HTCapability.ExtHtCapInfo.PlusHTC = pHtCapability->ExtHtCapInfo.PlusHTC;
++ if (pAd->CommonCfg.bRdg)
++ {
++ pAd->MlmeAux.HtCapability.ExtHtCapInfo.RDGSupport = pHtCapability->ExtHtCapInfo.RDGSupport;
++ pAd->MlmeAux.HtCapability.ExtHtCapInfo.PlusHTC = 1;
++ }
++
++ if (pAd->MlmeAux.HtCapability.HtCapInfo.ChannelWidth == BW_20)
++ pAd->MlmeAux.HtCapability.MCSSet[4] = 0x0; // BW20 can't transmit MCS32
++
++ COPY_AP_HTSETTINGS_FROM_BEACON(pAd, pHtCapability);
++ return TRUE;
++}
++#endif // DOT11_N_SUPPORT //
++#endif // CONFIG_STA_SUPPORT //
++
++/*
++ ========================================================================
++
++ Routine Description:
++ Verify the support rate for different PHY type
++
++ Arguments:
++ pAd Pointer to our adapter
++
++ Return Value:
++ None
++
++ IRQL = PASSIVE_LEVEL
++
++ ========================================================================
++*/
++VOID RTMPUpdateMlmeRate(
++ IN PRTMP_ADAPTER pAd)
++{
++ UCHAR MinimumRate;
++ UCHAR ProperMlmeRate; //= RATE_54;
++ UCHAR i, j, RateIdx = 12; //1, 2, 5.5, 11, 6, 9, 12, 18, 24, 36, 48, 54
++ BOOLEAN bMatch = FALSE;
++
++ switch (pAd->CommonCfg.PhyMode)
++ {
++ case PHY_11B:
++ ProperMlmeRate = RATE_11;
++ MinimumRate = RATE_1;
++ break;
++ case PHY_11BG_MIXED:
++#ifdef DOT11_N_SUPPORT
++ case PHY_11ABGN_MIXED:
++ case PHY_11BGN_MIXED:
++#endif // DOT11_N_SUPPORT //
++ if ((pAd->MlmeAux.SupRateLen == 4) &&
++ (pAd->MlmeAux.ExtRateLen == 0))
++ // B only AP
++ ProperMlmeRate = RATE_11;
++ else
++ ProperMlmeRate = RATE_24;
++
++ if (pAd->MlmeAux.Channel <= 14)
++ MinimumRate = RATE_1;
++ else
++ MinimumRate = RATE_6;
++ break;
++ case PHY_11A:
++#ifdef DOT11_N_SUPPORT
++ case PHY_11N_2_4G: // rt2860 need to check mlmerate for 802.11n
++ case PHY_11GN_MIXED:
++ case PHY_11AGN_MIXED:
++ case PHY_11AN_MIXED:
++ case PHY_11N_5G:
++#endif // DOT11_N_SUPPORT //
++ ProperMlmeRate = RATE_24;
++ MinimumRate = RATE_6;
++ break;
++ case PHY_11ABG_MIXED:
++ ProperMlmeRate = RATE_24;
++ if (pAd->MlmeAux.Channel <= 14)
++ MinimumRate = RATE_1;
++ else
++ MinimumRate = RATE_6;
++ break;
++ default: // error
++ ProperMlmeRate = RATE_1;
++ MinimumRate = RATE_1;
++ break;
++ }
++
++ for (i = 0; i < pAd->MlmeAux.SupRateLen; i++)
++ {
++ for (j = 0; j < RateIdx; j++)
++ {
++ if ((pAd->MlmeAux.SupRate[i] & 0x7f) == RateIdTo500Kbps[j])
++ {
++ if (j == ProperMlmeRate)
++ {
++ bMatch = TRUE;
++ break;
++ }
++ }
++ }
++
++ if (bMatch)
++ break;
++ }
++
++ if (bMatch == FALSE)
++ {
++ for (i = 0; i < pAd->MlmeAux.ExtRateLen; i++)
++ {
++ for (j = 0; j < RateIdx; j++)
++ {
++ if ((pAd->MlmeAux.ExtRate[i] & 0x7f) == RateIdTo500Kbps[j])
++ {
++ if (j == ProperMlmeRate)
++ {
++ bMatch = TRUE;
++ break;
++ }
++ }
++ }
++
++ if (bMatch)
++ break;
++ }
++ }
++
++ if (bMatch == FALSE)
++ {
++ ProperMlmeRate = MinimumRate;
++ }
++
++ pAd->CommonCfg.MlmeRate = MinimumRate;
++ pAd->CommonCfg.RtsRate = ProperMlmeRate;
++ if (pAd->CommonCfg.MlmeRate >= RATE_6)
++ {
++ pAd->CommonCfg.MlmeTransmit.field.MODE = MODE_OFDM;
++ pAd->CommonCfg.MlmeTransmit.field.MCS = OfdmRateToRxwiMCS[pAd->CommonCfg.MlmeRate];
++ pAd->MacTab.Content[BSS0Mcast_WCID].HTPhyMode.field.MODE = MODE_OFDM;
++ pAd->MacTab.Content[BSS0Mcast_WCID].HTPhyMode.field.MCS = OfdmRateToRxwiMCS[pAd->CommonCfg.MlmeRate];
++ }
++ else
++ {
++ pAd->CommonCfg.MlmeTransmit.field.MODE = MODE_CCK;
++ pAd->CommonCfg.MlmeTransmit.field.MCS = pAd->CommonCfg.MlmeRate;
++ pAd->MacTab.Content[BSS0Mcast_WCID].HTPhyMode.field.MODE = MODE_CCK;
++ pAd->MacTab.Content[BSS0Mcast_WCID].HTPhyMode.field.MCS = pAd->CommonCfg.MlmeRate;
++ }
++
++ DBGPRINT(RT_DEBUG_TRACE, ("RTMPUpdateMlmeRate ==> MlmeTransmit = 0x%x \n" , pAd->CommonCfg.MlmeTransmit.word));
++}
++
++CHAR RTMPMaxRssi(
++ IN PRTMP_ADAPTER pAd,
++ IN CHAR Rssi0,
++ IN CHAR Rssi1,
++ IN CHAR Rssi2)
++{
++ CHAR larger = -127;
++
++ if ((pAd->Antenna.field.RxPath == 1) && (Rssi0 != 0))
++ {
++ larger = Rssi0;
++ }
++
++ if ((pAd->Antenna.field.RxPath >= 2) && (Rssi1 != 0))
++ {
++ larger = max(Rssi0, Rssi1);
++ }
++
++ if ((pAd->Antenna.field.RxPath == 3) && (Rssi2 != 0))
++ {
++ larger = max(larger, Rssi2);
++ }
++
++ if (larger == -127)
++ larger = 0;
++
++ return larger;
++}
++
++/*
++ ========================================================================
++ Routine Description:
++ Periodic evaluate antenna link status
++
++ Arguments:
++ pAd - Adapter pointer
++
++ Return Value:
++ None
++
++ ========================================================================
++*/
++VOID AsicEvaluateRxAnt(
++ IN PRTMP_ADAPTER pAd)
++{
++ UCHAR BBPR3 = 0;
++
++#ifdef RALINK_ATE
++ if (ATE_ON(pAd))
++ return;
++#endif // RALINK_ATE //
++
++
++#ifdef CONFIG_STA_SUPPORT
++ IF_DEV_CONFIG_OPMODE_ON_STA(pAd)
++ {
++ if (RTMP_TEST_FLAG(pAd, fRTMP_ADAPTER_RESET_IN_PROGRESS |
++ fRTMP_ADAPTER_HALT_IN_PROGRESS |
++ fRTMP_ADAPTER_RADIO_OFF |
++ fRTMP_ADAPTER_NIC_NOT_EXIST |
++ fRTMP_ADAPTER_BSS_SCAN_IN_PROGRESS))
++ return;
++
++ if (pAd->StaCfg.Psm == PWR_SAVE)
++ return;
++ }
++#endif // CONFIG_STA_SUPPORT //
++
++ RTMP_BBP_IO_READ8_BY_REG_ID(pAd, BBP_R3, &BBPR3);
++ BBPR3 &= (~0x18);
++ if(pAd->Antenna.field.RxPath == 3)
++ {
++ BBPR3 |= (0x10);
++ }
++ else if(pAd->Antenna.field.RxPath == 2)
++ {
++ BBPR3 |= (0x8);
++ }
++ else if(pAd->Antenna.field.RxPath == 1)
++ {
++ BBPR3 |= (0x0);
++ }
++ RTMP_BBP_IO_WRITE8_BY_REG_ID(pAd, BBP_R3, BBPR3);
++#ifdef CONFIG_STA_SUPPORT
++#endif // CONFIG_STA_SUPPORT //
++ if (OPSTATUS_TEST_FLAG(pAd, fOP_STATUS_MEDIA_STATE_CONNECTED)
++ )
++ {
++ ULONG TxTotalCnt = pAd->RalinkCounters.OneSecTxNoRetryOkCount +
++ pAd->RalinkCounters.OneSecTxRetryOkCount +
++ pAd->RalinkCounters.OneSecTxFailCount;
++
++ if (TxTotalCnt > 50)
++ {
++ RTMPSetTimer(&pAd->Mlme.RxAntEvalTimer, 20);
++ pAd->Mlme.bLowThroughput = FALSE;
++ }
++ else
++ {
++ RTMPSetTimer(&pAd->Mlme.RxAntEvalTimer, 300);
++ pAd->Mlme.bLowThroughput = TRUE;
++ }
++ }
++}
++
++/*
++ ========================================================================
++ Routine Description:
++ After evaluation, check antenna link status
++
++ Arguments:
++ pAd - Adapter pointer
++
++ Return Value:
++ None
++
++ ========================================================================
++*/
++VOID AsicRxAntEvalTimeout(
++ IN PVOID SystemSpecific1,
++ IN PVOID FunctionContext,
++ IN PVOID SystemSpecific2,
++ IN PVOID SystemSpecific3)
++{
++ RTMP_ADAPTER *pAd = (RTMP_ADAPTER *)FunctionContext;
++#ifdef CONFIG_STA_SUPPORT
++ UCHAR BBPR3 = 0;
++ CHAR larger = -127, rssi0, rssi1, rssi2;
++#endif // CONFIG_STA_SUPPORT //
++
++#ifdef RALINK_ATE
++ if (ATE_ON(pAd))
++ return;
++#endif // RALINK_ATE //
++
++
++#ifdef CONFIG_STA_SUPPORT
++ IF_DEV_CONFIG_OPMODE_ON_STA(pAd)
++ {
++ if (RTMP_TEST_FLAG(pAd, fRTMP_ADAPTER_RESET_IN_PROGRESS) ||
++ RTMP_TEST_FLAG(pAd, fRTMP_ADAPTER_HALT_IN_PROGRESS) ||
++ RTMP_TEST_FLAG(pAd, fRTMP_ADAPTER_RADIO_OFF) ||
++ RTMP_TEST_FLAG(pAd, fRTMP_ADAPTER_NIC_NOT_EXIST))
++ return;
++
++ if (pAd->StaCfg.Psm == PWR_SAVE)
++ return;
++
++
++ // if the traffic is low, use average rssi as the criteria
++ if (pAd->Mlme.bLowThroughput == TRUE)
++ {
++ rssi0 = pAd->StaCfg.RssiSample.LastRssi0;
++ rssi1 = pAd->StaCfg.RssiSample.LastRssi1;
++ rssi2 = pAd->StaCfg.RssiSample.LastRssi2;
++ }
++ else
++ {
++ rssi0 = pAd->StaCfg.RssiSample.AvgRssi0;
++ rssi1 = pAd->StaCfg.RssiSample.AvgRssi1;
++ rssi2 = pAd->StaCfg.RssiSample.AvgRssi2;
++ }
++
++ if(pAd->Antenna.field.RxPath == 3)
++ {
++ larger = max(rssi0, rssi1);
++
++ if (larger > (rssi2 + 20))
++ pAd->Mlme.RealRxPath = 2;
++ else
++ pAd->Mlme.RealRxPath = 3;
++ }
++ else if(pAd->Antenna.field.RxPath == 2)
++ {
++ if (rssi0 > (rssi1 + 20))
++ pAd->Mlme.RealRxPath = 1;
++ else
++ pAd->Mlme.RealRxPath = 2;
++ }
++
++ RTMP_BBP_IO_READ8_BY_REG_ID(pAd, BBP_R3, &BBPR3);
++ BBPR3 &= (~0x18);
++ if(pAd->Mlme.RealRxPath == 3)
++ {
++ BBPR3 |= (0x10);
++ }
++ else if(pAd->Mlme.RealRxPath == 2)
++ {
++ BBPR3 |= (0x8);
++ }
++ else if(pAd->Mlme.RealRxPath == 1)
++ {
++ BBPR3 |= (0x0);
++ }
++ RTMP_BBP_IO_WRITE8_BY_REG_ID(pAd, BBP_R3, BBPR3);
++ }
++
++#endif // CONFIG_STA_SUPPORT //
++
++}
++
++
++
++VOID APSDPeriodicExec(
++ IN PVOID SystemSpecific1,
++ IN PVOID FunctionContext,
++ IN PVOID SystemSpecific2,
++ IN PVOID SystemSpecific3)
++{
++ RTMP_ADAPTER *pAd = (RTMP_ADAPTER *)FunctionContext;
++
++ if (!OPSTATUS_TEST_FLAG(pAd, fOP_STATUS_MEDIA_STATE_CONNECTED))
++ return;
++
++ pAd->CommonCfg.TriggerTimerCount++;
++
++// Driver should not send trigger frame, it should be send by application layer
++/*
++ if (pAd->CommonCfg.bAPSDCapable && pAd->CommonCfg.APEdcaParm.bAPSDCapable
++ && (pAd->CommonCfg.bNeedSendTriggerFrame ||
++ (((pAd->CommonCfg.TriggerTimerCount%20) == 19) && (!pAd->CommonCfg.bAPSDAC_BE || !pAd->CommonCfg.bAPSDAC_BK || !pAd->CommonCfg.bAPSDAC_VI || !pAd->CommonCfg.bAPSDAC_VO))))
++ {
++ DBGPRINT(RT_DEBUG_TRACE,("Sending trigger frame and enter service period when support APSD\n"));
++ RTMPSendNullFrame(pAd, pAd->CommonCfg.TxRate, TRUE);
++ pAd->CommonCfg.bNeedSendTriggerFrame = FALSE;
++ pAd->CommonCfg.TriggerTimerCount = 0;
++ pAd->CommonCfg.bInServicePeriod = TRUE;
++ }*/
++}
++
++/*
++ ========================================================================
++ Routine Description:
++ Set/reset MAC registers according to bPiggyBack parameter
++
++ Arguments:
++ pAd - Adapter pointer
++ bPiggyBack - Enable / Disable Piggy-Back
++
++ Return Value:
++ None
++
++ ========================================================================
++*/
++VOID RTMPSetPiggyBack(
++ IN PRTMP_ADAPTER pAd,
++ IN BOOLEAN bPiggyBack)
++{
++ TX_LINK_CFG_STRUC TxLinkCfg;
++
++ RTMP_IO_READ32(pAd, TX_LINK_CFG, &TxLinkCfg.word);
++
++ TxLinkCfg.field.TxCFAckEn = bPiggyBack;
++ RTMP_IO_WRITE32(pAd, TX_LINK_CFG, TxLinkCfg.word);
++}
++
++/*
++ ========================================================================
++ Routine Description:
++ check if this entry need to switch rate automatically
++
++ Arguments:
++ pAd
++ pEntry
++
++ Return Value:
++ TURE
++ FALSE
++
++ ========================================================================
++*/
++BOOLEAN RTMPCheckEntryEnableAutoRateSwitch(
++ IN PRTMP_ADAPTER pAd,
++ IN PMAC_TABLE_ENTRY pEntry)
++{
++ BOOLEAN result = TRUE;
++
++
++#ifdef CONFIG_STA_SUPPORT
++ IF_DEV_CONFIG_OPMODE_ON_STA(pAd)
++ {
++ // only associated STA counts
++ if (pEntry && (pEntry->ValidAsCLI) && (pEntry->Sst == SST_ASSOC))
++ {
++ result = pAd->StaCfg.bAutoTxRateSwitch;
++ }
++ else
++ result = FALSE;
++
++#ifdef QOS_DLS_SUPPORT
++ if (pEntry && (pEntry->ValidAsDls))
++ result = pAd->StaCfg.bAutoTxRateSwitch;
++#endif // QOS_DLS_SUPPORT //
++ }
++#endif // CONFIG_STA_SUPPORT //
++
++
++
++ return result;
++}
++
++
++BOOLEAN RTMPAutoRateSwitchCheck(
++ IN PRTMP_ADAPTER pAd)
++{
++
++#ifdef CONFIG_STA_SUPPORT
++ IF_DEV_CONFIG_OPMODE_ON_STA(pAd)
++ {
++ if (pAd->StaCfg.bAutoTxRateSwitch)
++ return TRUE;
++ }
++#endif // CONFIG_STA_SUPPORT //
++ return FALSE;
++}
++
++
++/*
++ ========================================================================
++ Routine Description:
++ check if this entry need to fix tx legacy rate
++
++ Arguments:
++ pAd
++ pEntry
++
++ Return Value:
++ TURE
++ FALSE
++
++ ========================================================================
++*/
++UCHAR RTMPStaFixedTxMode(
++ IN PRTMP_ADAPTER pAd,
++ IN PMAC_TABLE_ENTRY pEntry)
++{
++ UCHAR tx_mode = FIXED_TXMODE_HT;
++
++
++#ifdef CONFIG_STA_SUPPORT
++ IF_DEV_CONFIG_OPMODE_ON_STA(pAd)
++ {
++ tx_mode = (UCHAR)pAd->StaCfg.DesiredTransmitSetting.field.FixedTxMode;
++ }
++#endif // CONFIG_STA_SUPPORT //
++
++ return tx_mode;
++}
++
++/*
++ ========================================================================
++ Routine Description:
++ Overwrite HT Tx Mode by Fixed Legency Tx Mode, if specified.
++
++ Arguments:
++ pAd
++ pEntry
++
++ Return Value:
++ TURE
++ FALSE
++
++ ========================================================================
++*/
++VOID RTMPUpdateLegacyTxSetting(
++ UCHAR fixed_tx_mode,
++ PMAC_TABLE_ENTRY pEntry)
++{
++ HTTRANSMIT_SETTING TransmitSetting;
++
++ if (fixed_tx_mode == FIXED_TXMODE_HT)
++ return;
++
++ TransmitSetting.word = 0;
++
++ TransmitSetting.field.MODE = pEntry->HTPhyMode.field.MODE;
++ TransmitSetting.field.MCS = pEntry->HTPhyMode.field.MCS;
++
++ if (fixed_tx_mode == FIXED_TXMODE_CCK)
++ {
++ TransmitSetting.field.MODE = MODE_CCK;
++ // CCK mode allow MCS 0~3
++ if (TransmitSetting.field.MCS > MCS_3)
++ TransmitSetting.field.MCS = MCS_3;
++ }
++ else
++ {
++ TransmitSetting.field.MODE = MODE_OFDM;
++ // OFDM mode allow MCS 0~7
++ if (TransmitSetting.field.MCS > MCS_7)
++ TransmitSetting.field.MCS = MCS_7;
++ }
++
++ if (pEntry->HTPhyMode.field.MODE >= TransmitSetting.field.MODE)
++ {
++ pEntry->HTPhyMode.word = TransmitSetting.word;
++ DBGPRINT(RT_DEBUG_TRACE, ("RTMPUpdateLegacyTxSetting : wcid-%d, MODE=%s, MCS=%d \n",
++ pEntry->Aid, GetPhyMode(pEntry->HTPhyMode.field.MODE), pEntry->HTPhyMode.field.MCS));
++ }
++}
++
++#ifdef CONFIG_STA_SUPPORT
++/*
++ ==========================================================================
++ Description:
++ dynamic tune BBP R66 to find a balance between sensibility and
++ noise isolation
++
++ IRQL = DISPATCH_LEVEL
++
++ ==========================================================================
++ */
++VOID AsicStaBbpTuning(
++ IN PRTMP_ADAPTER pAd)
++{
++ UCHAR OrigR66Value = 0, R66;//, R66UpperBound = 0x30, R66LowerBound = 0x30;
++ CHAR Rssi;
++
++ // 2860C did not support Fase CCA, therefore can't tune
++ if (pAd->MACVersion == 0x28600100)
++ return;
++
++ //
++ // work as a STA
++ //
++ if (pAd->Mlme.CntlMachine.CurrState != CNTL_IDLE) // no R66 tuning when SCANNING
++ return;
++
++ if ((pAd->OpMode == OPMODE_STA)
++ && (OPSTATUS_TEST_FLAG(pAd, fOP_STATUS_MEDIA_STATE_CONNECTED)
++ )
++ && !(OPSTATUS_TEST_FLAG(pAd, fOP_STATUS_DOZE))
++ )
++ {
++ RTMP_BBP_IO_READ8_BY_REG_ID(pAd, BBP_R66, &OrigR66Value);
++ R66 = OrigR66Value;
++
++ if (pAd->Antenna.field.RxPath > 1)
++ Rssi = (pAd->StaCfg.RssiSample.AvgRssi0 + pAd->StaCfg.RssiSample.AvgRssi1) >> 1;
++ else
++ Rssi = pAd->StaCfg.RssiSample.AvgRssi0;
++
++ if (pAd->LatchRfRegs.Channel <= 14)
++ { //BG band
++#ifdef RT2870
++ // RT3070 is a no LNA solution, it should have different control regarding to AGC gain control
++ // Otherwise, it will have some throughput side effect when low RSSI
++ if (IS_RT3070(pAd))
++ {
++ if (Rssi > RSSI_FOR_MID_LOW_SENSIBILITY)
++ {
++ R66 = 0x1C + 2*GET_LNA_GAIN(pAd) + 0x20;
++ if (OrigR66Value != R66)
++ {
++ RTUSBWriteBBPRegister(pAd, BBP_R66, R66);
++ }
++ }
++ else
++ {
++ R66 = 0x1C + 2*GET_LNA_GAIN(pAd);
++ if (OrigR66Value != R66)
++ {
++ RTUSBWriteBBPRegister(pAd, BBP_R66, R66);
++ }
++ }
++ }
++ else
++#endif // RT2870 //
++ {
++ if (Rssi > RSSI_FOR_MID_LOW_SENSIBILITY)
++ {
++ R66 = (0x2E + GET_LNA_GAIN(pAd)) + 0x10;
++ if (OrigR66Value != R66)
++ {
++ RTMP_BBP_IO_WRITE8_BY_REG_ID(pAd, BBP_R66, R66);
++ }
++ }
++ else
++ {
++ R66 = 0x2E + GET_LNA_GAIN(pAd);
++ if (OrigR66Value != R66)
++ {
++ RTMP_BBP_IO_WRITE8_BY_REG_ID(pAd, BBP_R66, R66);
++ }
++ }
++ }
++ }
++ else
++ { //A band
++ if (pAd->CommonCfg.BBPCurrentBW == BW_20)
++ {
++ if (Rssi > RSSI_FOR_MID_LOW_SENSIBILITY)
++ {
++ R66 = 0x32 + (GET_LNA_GAIN(pAd)*5)/3 + 0x10;
++ if (OrigR66Value != R66)
++ {
++ RTMP_BBP_IO_WRITE8_BY_REG_ID(pAd, BBP_R66, R66);
++ }
++ }
++ else
++ {
++ R66 = 0x32 + (GET_LNA_GAIN(pAd)*5)/3;
++ if (OrigR66Value != R66)
++ {
++ RTMP_BBP_IO_WRITE8_BY_REG_ID(pAd, BBP_R66, R66);
++ }
++ }
++ }
++ else
++ {
++ if (Rssi > RSSI_FOR_MID_LOW_SENSIBILITY)
++ {
++ R66 = 0x3A + (GET_LNA_GAIN(pAd)*5)/3 + 0x10;
++ if (OrigR66Value != R66)
++ {
++ RTMP_BBP_IO_WRITE8_BY_REG_ID(pAd, BBP_R66, R66);
++ }
++ }
++ else
++ {
++ R66 = 0x3A + (GET_LNA_GAIN(pAd)*5)/3;
++ if (OrigR66Value != R66)
++ {
++ RTMP_BBP_IO_WRITE8_BY_REG_ID(pAd, BBP_R66, R66);
++ }
++ }
++ }
++ }
++
++
++ }
++}
++#endif // CONFIG_STA_SUPPORT //
++
++VOID RTMPSetAGCInitValue(
++ IN PRTMP_ADAPTER pAd,
++ IN UCHAR BandWidth)
++{
++ UCHAR R66 = 0x30;
++
++ if (pAd->LatchRfRegs.Channel <= 14)
++ { // BG band
++ R66 = 0x2E + GET_LNA_GAIN(pAd);
++ RTMP_BBP_IO_WRITE8_BY_REG_ID(pAd, BBP_R66, R66);
++ }
++ else
++ { //A band
++ if (BandWidth == BW_20)
++ {
++ R66 = (UCHAR)(0x32 + (GET_LNA_GAIN(pAd)*5)/3);
++ RTMP_BBP_IO_WRITE8_BY_REG_ID(pAd, BBP_R66, R66);
++ }
++#ifdef DOT11_N_SUPPORT
++ else
++ {
++ R66 = (UCHAR)(0x3A + (GET_LNA_GAIN(pAd)*5)/3);
++ RTMP_BBP_IO_WRITE8_BY_REG_ID(pAd, BBP_R66, R66);
++ }
++#endif // DOT11_N_SUPPORT //
++ }
++
++}
++
++VOID AsicTurnOffRFClk(
++ IN PRTMP_ADAPTER pAd,
++ IN UCHAR Channel)
++{
++
++ // RF R2 bit 18 = 0
++ UINT32 R1 = 0, R2 = 0, R3 = 0;
++ UCHAR index;
++ RTMP_RF_REGS *RFRegTable;
++
++ RFRegTable = RF2850RegTable;
++
++ switch (pAd->RfIcType)
++ {
++ case RFIC_2820:
++ case RFIC_2850:
++ case RFIC_2720:
++ case RFIC_2750:
++
++ for (index = 0; index < NUM_OF_2850_CHNL; index++)
++ {
++ if (Channel == RFRegTable[index].Channel)
++ {
++ R1 = RFRegTable[index].R1 & 0xffffdfff;
++ R2 = RFRegTable[index].R2 & 0xfffbffff;
++ R3 = RFRegTable[index].R3 & 0xfff3ffff;
++
++ RTMP_RF_IO_WRITE32(pAd, R1);
++ RTMP_RF_IO_WRITE32(pAd, R2);
++
++ // Program R1b13 to 1, R3/b18,19 to 0, R2b18 to 0.
++ // Set RF R2 bit18=0, R3 bit[18:19]=0
++ //if (pAd->StaCfg.bRadio == FALSE)
++ if (1)
++ {
++ RTMP_RF_IO_WRITE32(pAd, R3);
++
++ DBGPRINT(RT_DEBUG_TRACE, ("AsicTurnOffRFClk#%d(RF=%d, ) , R2=0x%08x, R3 = 0x%08x \n",
++ Channel, pAd->RfIcType, R2, R3));
++ }
++ else
++ DBGPRINT(RT_DEBUG_TRACE, ("AsicTurnOffRFClk#%d(RF=%d, ) , R2=0x%08x \n",
++ Channel, pAd->RfIcType, R2));
++ break;
++ }
++ }
++ break;
++
++ default:
++ break;
++ }
++}
++
++
++VOID AsicTurnOnRFClk(
++ IN PRTMP_ADAPTER pAd,
++ IN UCHAR Channel)
++{
++
++ // RF R2 bit 18 = 0
++ UINT32 R1 = 0, R2 = 0, R3 = 0;
++ UCHAR index;
++ RTMP_RF_REGS *RFRegTable;
++
++ RFRegTable = RF2850RegTable;
++
++ switch (pAd->RfIcType)
++ {
++ case RFIC_2820:
++ case RFIC_2850:
++ case RFIC_2720:
++ case RFIC_2750:
++
++ for (index = 0; index < NUM_OF_2850_CHNL; index++)
++ {
++ if (Channel == RFRegTable[index].Channel)
++ {
++ R3 = pAd->LatchRfRegs.R3;
++ R3 &= 0xfff3ffff;
++ R3 |= 0x00080000;
++ RTMP_RF_IO_WRITE32(pAd, R3);
++
++ R1 = RFRegTable[index].R1;
++ RTMP_RF_IO_WRITE32(pAd, R1);
++
++ R2 = RFRegTable[index].R2;
++ if (pAd->Antenna.field.TxPath == 1)
++ {
++ R2 |= 0x4000; // If TXpath is 1, bit 14 = 1;
++ }
++
++ if (pAd->Antenna.field.RxPath == 2)
++ {
++ R2 |= 0x40; // write 1 to off Rxpath.
++ }
++ else if (pAd->Antenna.field.RxPath == 1)
++ {
++ R2 |= 0x20040; // write 1 to off RxPath
++ }
++ RTMP_RF_IO_WRITE32(pAd, R2);
++
++ break;
++ }
++ }
++ break;
++
++ default:
++ break;
++ }
++
++ DBGPRINT(RT_DEBUG_TRACE, ("AsicTurnOnRFClk#%d(RF=%d, ) , R2=0x%08x\n",
++ Channel,
++ pAd->RfIcType,
++ R2));
++}
++
+--- /dev/null
++++ b/drivers/staging/rt2870/common/netif_block.c
+@@ -0,0 +1,144 @@
++/*
++ *************************************************************************
++ * Ralink Tech Inc.
++ * 5F., No.36, Taiyuan St., Jhubei City,
++ * Hsinchu County 302,
++ * Taiwan, R.O.C.
++ *
++ * (c) Copyright 2002-2007, Ralink Technology, Inc.
++ *
++ * This program is free software; you can redistribute it and/or modify *
++ * it under the terms of the GNU General Public License as published by *
++ * the Free Software Foundation; either version 2 of the License, or *
++ * (at your option) any later version. *
++ * *
++ * This program is distributed in the hope that it will be useful, *
++ * but WITHOUT ANY WARRANTY; without even the implied warranty of *
++ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the *
++ * GNU General Public License for more details. *
++ * *
++ * You should have received a copy of the GNU General Public License *
++ * along with this program; if not, write to the *
++ * Free Software Foundation, Inc., *
++ * 59 Temple Place - Suite 330, Boston, MA 02111-1307, USA. *
++ * *
++ *************************************************************************
++ */
++
++#include "../rt_config.h"
++#include "netif_block.h"
++
++static NETIF_ENTRY freeNetIfEntryPool[FREE_NETIF_POOL_SIZE];
++static LIST_HEADER freeNetIfEntryList;
++
++void initblockQueueTab(
++ IN PRTMP_ADAPTER pAd)
++{
++ int i;
++
++ initList(&freeNetIfEntryList);
++ for (i = 0; i < FREE_NETIF_POOL_SIZE; i++)
++ insertTailList(&freeNetIfEntryList, (PLIST_ENTRY)&freeNetIfEntryPool[i]);
++
++ for (i=0; i < NUM_OF_TX_RING; i++)
++ initList(&pAd->blockQueueTab[i].NetIfList);
++
++ return;
++}
++
++BOOLEAN blockNetIf(
++ IN PBLOCK_QUEUE_ENTRY pBlockQueueEntry,
++ IN PNET_DEV pNetDev)
++{
++ PNETIF_ENTRY pNetIfEntry = NULL;
++
++ if ((pNetIfEntry = (PNETIF_ENTRY)removeHeadList(&freeNetIfEntryList)) != NULL)
++ {
++ netif_stop_queue(pNetDev);
++ pNetIfEntry->pNetDev = pNetDev;
++ insertTailList(&pBlockQueueEntry->NetIfList, (PLIST_ENTRY)pNetIfEntry);
++
++ pBlockQueueEntry->SwTxQueueBlockFlag = TRUE;
++ DBGPRINT(RT_DEBUG_TRACE, ("netif_stop_queue(%s)\n", pNetDev->name));
++ }
++ else
++ return FALSE;
++
++ return TRUE;
++}
++
++VOID releaseNetIf(
++ IN PBLOCK_QUEUE_ENTRY pBlockQueueEntry)
++{
++ PNETIF_ENTRY pNetIfEntry = NULL;
++ PLIST_HEADER pNetIfList = &pBlockQueueEntry->NetIfList;
++
++ while((pNetIfEntry = (PNETIF_ENTRY)removeHeadList(pNetIfList)) != NULL)
++ {
++ PNET_DEV pNetDev = pNetIfEntry->pNetDev;
++ netif_wake_queue(pNetDev);
++ insertTailList(&freeNetIfEntryList, (PLIST_ENTRY)pNetIfEntry);
++
++ DBGPRINT(RT_DEBUG_TRACE, ("netif_wake_queue(%s)\n", pNetDev->name));
++ }
++ pBlockQueueEntry->SwTxQueueBlockFlag = FALSE;
++ return;
++}
++
++
++VOID StopNetIfQueue(
++ IN PRTMP_ADAPTER pAd,
++ IN UCHAR QueIdx,
++ IN PNDIS_PACKET pPacket)
++{
++ PNET_DEV NetDev = NULL;
++ UCHAR IfIdx = 0;
++ BOOLEAN valid = FALSE;
++
++#ifdef APCLI_SUPPORT
++ if (RTMP_GET_PACKET_NET_DEVICE(pPacket) >= MIN_NET_DEVICE_FOR_APCLI)
++ {
++ IfIdx = (RTMP_GET_PACKET_NET_DEVICE(pPacket) - MIN_NET_DEVICE_FOR_APCLI) % MAX_APCLI_NUM;
++ NetDev = pAd->ApCfg.ApCliTab[IfIdx].dev;
++ }
++ else
++#endif // APCLI_SUPPORT //
++#ifdef WDS_SUPPORT
++ if (RTMP_GET_PACKET_NET_DEVICE(pPacket) >= MIN_NET_DEVICE_FOR_WDS)
++ {
++ IfIdx = (RTMP_GET_PACKET_NET_DEVICE(pPacket) - MIN_NET_DEVICE_FOR_WDS) % MAX_WDS_ENTRY;
++ NetDev = pAd->WdsTab.WdsEntry[IfIdx].dev;
++ }
++ else
++#endif // WDS_SUPPORT //
++ {
++#ifdef MBSS_SUPPORT
++ if (pAd->OpMode == OPMODE_AP)
++ {
++ IfIdx = (RTMP_GET_PACKET_NET_DEVICE(pPacket) - MIN_NET_DEVICE_FOR_MBSSID) % MAX_MBSSID_NUM;
++ NetDev = pAd->ApCfg.MBSSID[IfIdx].MSSIDDev;
++ }
++ else
++ {
++ IfIdx = MAIN_MBSSID;
++ NetDev = pAd->net_dev;
++ }
++#else
++ IfIdx = MAIN_MBSSID;
++ NetDev = pAd->net_dev;
++#endif
++ }
++
++ // WMM support 4 software queues.
++ // One software queue full doesn't mean device have no capbility to transmit packet.
++ // So disable block Net-If queue function while WMM enable.
++#ifdef CONFIG_STA_SUPPORT
++ IF_DEV_CONFIG_OPMODE_ON_STA(pAd)
++ valid = (pAd->CommonCfg.bWmmCapable == TRUE) ? FALSE : TRUE;
++#endif // CONFIG_STA_SUPPORT //
++
++ if (valid)
++ blockNetIf(&pAd->blockQueueTab[QueIdx], NetDev);
++ return;
++}
++
+--- /dev/null
++++ b/drivers/staging/rt2870/common/rtmp_init.c
+@@ -0,0 +1,4132 @@
++/*
++ *************************************************************************
++ * Ralink Tech Inc.
++ * 5F., No.36, Taiyuan St., Jhubei City,
++ * Hsinchu County 302,
++ * Taiwan, R.O.C.
++ *
++ * (c) Copyright 2002-2007, Ralink Technology, Inc.
++ *
++ * This program is free software; you can redistribute it and/or modify *
++ * it under the terms of the GNU General Public License as published by *
++ * the Free Software Foundation; either version 2 of the License, or *
++ * (at your option) any later version. *
++ * *
++ * This program is distributed in the hope that it will be useful, *
++ * but WITHOUT ANY WARRANTY; without even the implied warranty of *
++ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the *
++ * GNU General Public License for more details. *
++ * *
++ * You should have received a copy of the GNU General Public License *
++ * along with this program; if not, write to the *
++ * Free Software Foundation, Inc., *
++ * 59 Temple Place - Suite 330, Boston, MA 02111-1307, USA. *
++ * *
++ *************************************************************************
++
++ Module Name:
++ rtmp_init.c
++
++ Abstract:
++ Miniport generic portion header file
++
++ Revision History:
++ Who When What
++ -------- ---------- ----------------------------------------------
++ Paul Lin 2002-08-01 created
++ John Chang 2004-08-20 RT2561/2661 use scatter-gather scheme
++ Jan Lee 2006-09-15 RT2860. Change for 802.11n , EEPROM, Led, BA, HT.
++*/
++#include "../rt_config.h"
++#include "firmware.h"
++
++//#define BIN_IN_FILE /* use *.bin firmware */
++
++UCHAR BIT8[] = {0x01, 0x02, 0x04, 0x08, 0x10, 0x20, 0x40, 0x80};
++ULONG BIT32[] = {0x00000001, 0x00000002, 0x00000004, 0x00000008,
++ 0x00000010, 0x00000020, 0x00000040, 0x00000080,
++ 0x00000100, 0x00000200, 0x00000400, 0x00000800,
++ 0x00001000, 0x00002000, 0x00004000, 0x00008000,
++ 0x00010000, 0x00020000, 0x00040000, 0x00080000,
++ 0x00100000, 0x00200000, 0x00400000, 0x00800000,
++ 0x01000000, 0x02000000, 0x04000000, 0x08000000,
++ 0x10000000, 0x20000000, 0x40000000, 0x80000000};
++
++char* CipherName[] = {"none","wep64","wep128","TKIP","AES","CKIP64","CKIP128"};
++
++const unsigned short ccitt_16Table[] = {
++ 0x0000, 0x1021, 0x2042, 0x3063, 0x4084, 0x50A5, 0x60C6, 0x70E7,
++ 0x8108, 0x9129, 0xA14A, 0xB16B, 0xC18C, 0xD1AD, 0xE1CE, 0xF1EF,
++ 0x1231, 0x0210, 0x3273, 0x2252, 0x52B5, 0x4294, 0x72F7, 0x62D6,
++ 0x9339, 0x8318, 0xB37B, 0xA35A, 0xD3BD, 0xC39C, 0xF3FF, 0xE3DE,
++ 0x2462, 0x3443, 0x0420, 0x1401, 0x64E6, 0x74C7, 0x44A4, 0x5485,
++ 0xA56A, 0xB54B, 0x8528, 0x9509, 0xE5EE, 0xF5CF, 0xC5AC, 0xD58D,
++ 0x3653, 0x2672, 0x1611, 0x0630, 0x76D7, 0x66F6, 0x5695, 0x46B4,
++ 0xB75B, 0xA77A, 0x9719, 0x8738, 0xF7DF, 0xE7FE, 0xD79D, 0xC7BC,
++ 0x48C4, 0x58E5, 0x6886, 0x78A7, 0x0840, 0x1861, 0x2802, 0x3823,
++ 0xC9CC, 0xD9ED, 0xE98E, 0xF9AF, 0x8948, 0x9969, 0xA90A, 0xB92B,
++ 0x5AF5, 0x4AD4, 0x7AB7, 0x6A96, 0x1A71, 0x0A50, 0x3A33, 0x2A12,
++ 0xDBFD, 0xCBDC, 0xFBBF, 0xEB9E, 0x9B79, 0x8B58, 0xBB3B, 0xAB1A,
++ 0x6CA6, 0x7C87, 0x4CE4, 0x5CC5, 0x2C22, 0x3C03, 0x0C60, 0x1C41,
++ 0xEDAE, 0xFD8F, 0xCDEC, 0xDDCD, 0xAD2A, 0xBD0B, 0x8D68, 0x9D49,
++ 0x7E97, 0x6EB6, 0x5ED5, 0x4EF4, 0x3E13, 0x2E32, 0x1E51, 0x0E70,
++ 0xFF9F, 0xEFBE, 0xDFDD, 0xCFFC, 0xBF1B, 0xAF3A, 0x9F59, 0x8F78,
++ 0x9188, 0x81A9, 0xB1CA, 0xA1EB, 0xD10C, 0xC12D, 0xF14E, 0xE16F,
++ 0x1080, 0x00A1, 0x30C2, 0x20E3, 0x5004, 0x4025, 0x7046, 0x6067,
++ 0x83B9, 0x9398, 0xA3FB, 0xB3DA, 0xC33D, 0xD31C, 0xE37F, 0xF35E,
++ 0x02B1, 0x1290, 0x22F3, 0x32D2, 0x4235, 0x5214, 0x6277, 0x7256,
++ 0xB5EA, 0xA5CB, 0x95A8, 0x8589, 0xF56E, 0xE54F, 0xD52C, 0xC50D,
++ 0x34E2, 0x24C3, 0x14A0, 0x0481, 0x7466, 0x6447, 0x5424, 0x4405,
++ 0xA7DB, 0xB7FA, 0x8799, 0x97B8, 0xE75F, 0xF77E, 0xC71D, 0xD73C,
++ 0x26D3, 0x36F2, 0x0691, 0x16B0, 0x6657, 0x7676, 0x4615, 0x5634,
++ 0xD94C, 0xC96D, 0xF90E, 0xE92F, 0x99C8, 0x89E9, 0xB98A, 0xA9AB,
++ 0x5844, 0x4865, 0x7806, 0x6827, 0x18C0, 0x08E1, 0x3882, 0x28A3,
++ 0xCB7D, 0xDB5C, 0xEB3F, 0xFB1E, 0x8BF9, 0x9BD8, 0xABBB, 0xBB9A,
++ 0x4A75, 0x5A54, 0x6A37, 0x7A16, 0x0AF1, 0x1AD0, 0x2AB3, 0x3A92,
++ 0xFD2E, 0xED0F, 0xDD6C, 0xCD4D, 0xBDAA, 0xAD8B, 0x9DE8, 0x8DC9,
++ 0x7C26, 0x6C07, 0x5C64, 0x4C45, 0x3CA2, 0x2C83, 0x1CE0, 0x0CC1,
++ 0xEF1F, 0xFF3E, 0xCF5D, 0xDF7C, 0xAF9B, 0xBFBA, 0x8FD9, 0x9FF8,
++ 0x6E17, 0x7E36, 0x4E55, 0x5E74, 0x2E93, 0x3EB2, 0x0ED1, 0x1EF0
++};
++#define ByteCRC16(v, crc) \
++ (unsigned short)((crc << 8) ^ ccitt_16Table[((crc >> 8) ^ (v)) & 255])
++
++unsigned char BitReverse(unsigned char x)
++{
++ int i;
++ unsigned char Temp=0;
++ for(i=0; ; i++)
++ {
++ if(x & 0x80) Temp |= 0x80;
++ if(i==7) break;
++ x <<= 1;
++ Temp >>= 1;
++ }
++ return Temp;
++}
++
++//
++// BBP register initialization set
++//
++REG_PAIR BBPRegTable[] = {
++ {BBP_R65, 0x2C}, // fix rssi issue
++ {BBP_R66, 0x38}, // Also set this default value to pAd->BbpTuning.R66CurrentValue at initial
++ {BBP_R69, 0x12},
++ {BBP_R70, 0xa}, // BBP_R70 will change to 0x8 in ApStartUp and LinkUp for rt2860C, otherwise value is 0xa
++ {BBP_R73, 0x10},
++ {BBP_R81, 0x37},
++ {BBP_R82, 0x62},
++ {BBP_R83, 0x6A},
++ {BBP_R84, 0x99}, // 0x19 is for rt2860E and after. This is for extension channel overlapping IOT. 0x99 is for rt2860D and before
++ {BBP_R86, 0x00}, // middle range issue, Rory @2008-01-28
++ {BBP_R91, 0x04}, // middle range issue, Rory @2008-01-28
++ {BBP_R92, 0x00}, // middle range issue, Rory @2008-01-28
++ {BBP_R103, 0x00}, // near range high-power issue, requested from Gary @2008-0528
++ {BBP_R105, 0x05}, // 0x05 is for rt2860E to turn on FEQ control. It is safe for rt2860D and before, because Bit 7:2 are reserved in rt2860D and before.
++};
++#define NUM_BBP_REG_PARMS (sizeof(BBPRegTable) / sizeof(REG_PAIR))
++
++//
++// RF register initialization set
++//
++#ifdef RT2870
++REG_PAIR RT30xx_RFRegTable[] = {
++ {RF_R04, 0x40},
++ {RF_R05, 0x03},
++ {RF_R06, 0x02},
++ {RF_R07, 0x70},
++ {RF_R09, 0x0F},
++ {RF_R10, 0x71},
++ {RF_R11, 0x21},
++ {RF_R12, 0x7B},
++ {RF_R14, 0x90},
++ {RF_R15, 0x58},
++ {RF_R16, 0xB3},
++ {RF_R17, 0x92},
++ {RF_R18, 0x2C},
++ {RF_R19, 0x02},
++ {RF_R20, 0xBA},
++ {RF_R21, 0xDB},
++ {RF_R24, 0x16},
++ {RF_R25, 0x01},
++ {RF_R27, 0x03},
++ {RF_R29, 0x1F},
++};
++#define NUM_RF_REG_PARMS (sizeof(RT30xx_RFRegTable) / sizeof(REG_PAIR))
++#endif // RT2870 //
++
++//
++// ASIC register initialization sets
++//
++
++RTMP_REG_PAIR MACRegTable[] = {
++#if defined(HW_BEACON_OFFSET) && (HW_BEACON_OFFSET == 0x200)
++ {BCN_OFFSET0, 0xf8f0e8e0}, /* 0x3800(e0), 0x3A00(e8), 0x3C00(f0), 0x3E00(f8), 512B for each beacon */
++ {BCN_OFFSET1, 0x6f77d0c8}, /* 0x3200(c8), 0x3400(d0), 0x1DC0(77), 0x1BC0(6f), 512B for each beacon */
++#elif defined(HW_BEACON_OFFSET) && (HW_BEACON_OFFSET == 0x100)
++ {BCN_OFFSET0, 0xece8e4e0}, /* 0x3800, 0x3A00, 0x3C00, 0x3E00, 512B for each beacon */
++ {BCN_OFFSET1, 0xfcf8f4f0}, /* 0x3800, 0x3A00, 0x3C00, 0x3E00, 512B for each beacon */
++#else
++ #error You must re-calculate new value for BCN_OFFSET0 & BCN_OFFSET1 in MACRegTable[]!!!
++#endif // HW_BEACON_OFFSET //
++
++ {LEGACY_BASIC_RATE, 0x0000013f}, // Basic rate set bitmap
++ {HT_BASIC_RATE, 0x00008003}, // Basic HT rate set , 20M, MCS=3, MM. Format is the same as in TXWI.
++ {MAC_SYS_CTRL, 0x00}, // 0x1004, , default Disable RX
++ {RX_FILTR_CFG, 0x17f97}, //0x1400 , RX filter control,
++ {BKOFF_SLOT_CFG, 0x209}, // default set short slot time, CC_DELAY_TIME should be 2
++ {TX_SW_CFG0, 0x0}, // Gary,2008-05-21 for CWC test
++ {TX_SW_CFG1, 0x80606}, // Gary,2006-08-23
++ {TX_LINK_CFG, 0x1020}, // Gary,2006-08-23
++ //{TX_TIMEOUT_CFG, 0x00182090}, // CCK has some problem. So increase timieout value. 2006-10-09// MArvek RT
++ {TX_TIMEOUT_CFG, 0x000a2090}, // CCK has some problem. So increase timieout value. 2006-10-09// MArvek RT , Modify for 2860E ,2007-08-01
++ {MAX_LEN_CFG, MAX_AGGREGATION_SIZE | 0x00001000}, // 0x3018, MAX frame length. Max PSDU = 16kbytes.
++ {LED_CFG, 0x7f031e46}, // Gary, 2006-08-23
++ {PBF_MAX_PCNT, 0x1F3FBF9F}, //0x1F3f7f9f}, //Jan, 2006/04/20
++ //{TX_RTY_CFG, 0x6bb80408}, // Jan, 2006/11/16
++ {TX_RTY_CFG, 0x47d01f0f}, // Jan, 2006/11/16, Set TxWI->ACK =0 in Probe Rsp Modify for 2860E ,2007-08-03
++ {AUTO_RSP_CFG, 0x00000013}, // Initial Auto_Responder, because QA will turn off Auto-Responder
++ {CCK_PROT_CFG, 0x05740003 /*0x01740003*/}, // Initial Auto_Responder, because QA will turn off Auto-Responder. And RTS threshold is enabled.
++ {OFDM_PROT_CFG, 0x05740003 /*0x01740003*/}, // Initial Auto_Responder, because QA will turn off Auto-Responder. And RTS threshold is enabled.
++#ifdef RT2870
++ {PBF_CFG, 0xf40006}, // Only enable Queue 2
++ {MM40_PROT_CFG, 0x3F44084}, // Initial Auto_Responder, because QA will turn off Auto-Responder
++ {WPDMA_GLO_CFG, 0x00000030},
++#endif // RT2870 //
++ {GF20_PROT_CFG, 0x01744004}, // set 19:18 --> Short NAV for MIMO PS
++ {GF40_PROT_CFG, 0x03F44084},
++ {MM20_PROT_CFG, 0x01744004},
++ {TXOP_CTRL_CFG, 0x0000583f, /*0x0000243f*/ /*0x000024bf*/}, //Extension channel backoff.
++ {TX_RTS_CFG, 0x00092b20},
++//#ifdef WIFI_TEST
++ {EXP_ACK_TIME, 0x002400ca}, // default value
++//#else
++// {EXP_ACK_TIME, 0x005400ca}, // suggested by Gray @ 20070323 for 11n intel-sta throughput
++//#endif // end - WIFI_TEST //
++ {TXOP_HLDR_ET, 0x00000002},
++
++ /* Jerry comments 2008/01/16: we use SIFS = 10us in CCK defaultly, but it seems that 10us
++ is too small for INTEL 2200bg card, so in MBSS mode, the delta time between beacon0
++ and beacon1 is SIFS (10us), so if INTEL 2200bg card connects to BSS0, the ping
++ will always lost. So we change the SIFS of CCK from 10us to 16us. */
++ {XIFS_TIME_CFG, 0x33a41010},
++ {PWR_PIN_CFG, 0x00000003}, // patch for 2880-E
++};
++
++
++#ifdef CONFIG_STA_SUPPORT
++RTMP_REG_PAIR STAMACRegTable[] = {
++ {WMM_AIFSN_CFG, 0x00002273},
++ {WMM_CWMIN_CFG, 0x00002344},
++ {WMM_CWMAX_CFG, 0x000034aa},
++};
++#endif // CONFIG_STA_SUPPORT //
++
++#define NUM_MAC_REG_PARMS (sizeof(MACRegTable) / sizeof(RTMP_REG_PAIR))
++#ifdef CONFIG_STA_SUPPORT
++#define NUM_STA_MAC_REG_PARMS (sizeof(STAMACRegTable) / sizeof(RTMP_REG_PAIR))
++#endif // CONFIG_STA_SUPPORT //
++
++#ifdef RT2870
++//
++// RT2870 Firmware Spec only used 1 oct for version expression
++//
++#define FIRMWARE_MINOR_VERSION 7
++
++#endif // RT2870 //
++
++// New 8k byte firmware size for RT3071/RT3072
++#define FIRMWAREIMAGE_MAX_LENGTH 0x2000
++#define FIRMWAREIMAGE_LENGTH (sizeof (FirmwareImage) / sizeof(UCHAR))
++#define FIRMWARE_MAJOR_VERSION 0
++
++#define FIRMWAREIMAGEV1_LENGTH 0x1000
++#define FIRMWAREIMAGEV2_LENGTH 0x1000
++
++
++
++/*
++ ========================================================================
++
++ Routine Description:
++ Allocate RTMP_ADAPTER data block and do some initialization
++
++ Arguments:
++ Adapter Pointer to our adapter
++
++ Return Value:
++ NDIS_STATUS_SUCCESS
++ NDIS_STATUS_FAILURE
++
++ IRQL = PASSIVE_LEVEL
++
++ Note:
++
++ ========================================================================
++*/
++NDIS_STATUS RTMPAllocAdapterBlock(
++ IN PVOID handle,
++ OUT PRTMP_ADAPTER *ppAdapter)
++{
++ PRTMP_ADAPTER pAd;
++ NDIS_STATUS Status;
++ INT index;
++ UCHAR *pBeaconBuf = NULL;
++
++ DBGPRINT(RT_DEBUG_TRACE, ("--> RTMPAllocAdapterBlock\n"));
++
++ *ppAdapter = NULL;
++
++ do
++ {
++ // Allocate RTMP_ADAPTER memory block
++ pBeaconBuf = kmalloc(MAX_BEACON_SIZE, MEM_ALLOC_FLAG);
++ if (pBeaconBuf == NULL)
++ {
++ Status = NDIS_STATUS_FAILURE;
++ DBGPRINT_ERR(("Failed to allocate memory - BeaconBuf!\n"));
++ break;
++ }
++
++ Status = AdapterBlockAllocateMemory(handle, (PVOID *)&pAd);
++ if (Status != NDIS_STATUS_SUCCESS)
++ {
++ DBGPRINT_ERR(("Failed to allocate memory - ADAPTER\n"));
++ break;
++ }
++ pAd->BeaconBuf = pBeaconBuf;
++ printk("\n\n=== pAd = %p, size = %d ===\n\n", pAd, (UINT32)sizeof(RTMP_ADAPTER));
++
++
++ // Init spin locks
++ NdisAllocateSpinLock(&pAd->MgmtRingLock);
++
++ for (index =0 ; index < NUM_OF_TX_RING; index++)
++ {
++ NdisAllocateSpinLock(&pAd->TxSwQueueLock[index]);
++ NdisAllocateSpinLock(&pAd->DeQueueLock[index]);
++ pAd->DeQueueRunning[index] = FALSE;
++ }
++
++ NdisAllocateSpinLock(&pAd->irq_lock);
++
++ } while (FALSE);
++
++ if ((Status != NDIS_STATUS_SUCCESS) && (pBeaconBuf))
++ kfree(pBeaconBuf);
++
++ *ppAdapter = pAd;
++
++ DBGPRINT_S(Status, ("<-- RTMPAllocAdapterBlock, Status=%x\n", Status));
++ return Status;
++}
++
++/*
++ ========================================================================
++
++ Routine Description:
++ Read initial Tx power per MCS and BW from EEPROM
++
++ Arguments:
++ Adapter Pointer to our adapter
++
++ Return Value:
++ None
++
++ IRQL = PASSIVE_LEVEL
++
++ Note:
++
++ ========================================================================
++*/
++VOID RTMPReadTxPwrPerRate(
++ IN PRTMP_ADAPTER pAd)
++{
++ ULONG data, Adata, Gdata;
++ USHORT i, value, value2;
++ INT Apwrdelta, Gpwrdelta;
++ UCHAR t1,t2,t3,t4;
++ BOOLEAN bValid, bApwrdeltaMinus = TRUE, bGpwrdeltaMinus = TRUE;
++
++ //
++ // Get power delta for 20MHz and 40MHz.
++ //
++ DBGPRINT(RT_DEBUG_TRACE, ("Txpower per Rate\n"));
++ RT28xx_EEPROM_READ16(pAd, EEPROM_TXPOWER_DELTA, value2);
++ Apwrdelta = 0;
++ Gpwrdelta = 0;
++
++ if ((value2 & 0xff) != 0xff)
++ {
++ if ((value2 & 0x80))
++ Gpwrdelta = (value2&0xf);
++
++ if ((value2 & 0x40))
++ bGpwrdeltaMinus = FALSE;
++ else
++ bGpwrdeltaMinus = TRUE;
++ }
++ if ((value2 & 0xff00) != 0xff00)
++ {
++ if ((value2 & 0x8000))
++ Apwrdelta = ((value2&0xf00)>>8);
++
++ if ((value2 & 0x4000))
++ bApwrdeltaMinus = FALSE;
++ else
++ bApwrdeltaMinus = TRUE;
++ }
++ DBGPRINT(RT_DEBUG_TRACE, ("Gpwrdelta = %x, Apwrdelta = %x .\n", Gpwrdelta, Apwrdelta));
++
++ //
++ // Get Txpower per MCS for 20MHz in 2.4G.
++ //
++ for (i=0; i<5; i++)
++ {
++ RT28xx_EEPROM_READ16(pAd, EEPROM_TXPOWER_BYRATE_20MHZ_2_4G + i*4, value);
++ data = value;
++ if (bApwrdeltaMinus == FALSE)
++ {
++ t1 = (value&0xf)+(Apwrdelta);
++ if (t1 > 0xf)
++ t1 = 0xf;
++ t2 = ((value&0xf0)>>4)+(Apwrdelta);
++ if (t2 > 0xf)
++ t2 = 0xf;
++ t3 = ((value&0xf00)>>8)+(Apwrdelta);
++ if (t3 > 0xf)
++ t3 = 0xf;
++ t4 = ((value&0xf000)>>12)+(Apwrdelta);
++ if (t4 > 0xf)
++ t4 = 0xf;
++ }
++ else
++ {
++ if ((value&0xf) > Apwrdelta)
++ t1 = (value&0xf)-(Apwrdelta);
++ else
++ t1 = 0;
++ if (((value&0xf0)>>4) > Apwrdelta)
++ t2 = ((value&0xf0)>>4)-(Apwrdelta);
++ else
++ t2 = 0;
++ if (((value&0xf00)>>8) > Apwrdelta)
++ t3 = ((value&0xf00)>>8)-(Apwrdelta);
++ else
++ t3 = 0;
++ if (((value&0xf000)>>12) > Apwrdelta)
++ t4 = ((value&0xf000)>>12)-(Apwrdelta);
++ else
++ t4 = 0;
++ }
++ Adata = t1 + (t2<<4) + (t3<<8) + (t4<<12);
++ if (bGpwrdeltaMinus == FALSE)
++ {
++ t1 = (value&0xf)+(Gpwrdelta);
++ if (t1 > 0xf)
++ t1 = 0xf;
++ t2 = ((value&0xf0)>>4)+(Gpwrdelta);
++ if (t2 > 0xf)
++ t2 = 0xf;
++ t3 = ((value&0xf00)>>8)+(Gpwrdelta);
++ if (t3 > 0xf)
++ t3 = 0xf;
++ t4 = ((value&0xf000)>>12)+(Gpwrdelta);
++ if (t4 > 0xf)
++ t4 = 0xf;
++ }
++ else
++ {
++ if ((value&0xf) > Gpwrdelta)
++ t1 = (value&0xf)-(Gpwrdelta);
++ else
++ t1 = 0;
++ if (((value&0xf0)>>4) > Gpwrdelta)
++ t2 = ((value&0xf0)>>4)-(Gpwrdelta);
++ else
++ t2 = 0;
++ if (((value&0xf00)>>8) > Gpwrdelta)
++ t3 = ((value&0xf00)>>8)-(Gpwrdelta);
++ else
++ t3 = 0;
++ if (((value&0xf000)>>12) > Gpwrdelta)
++ t4 = ((value&0xf000)>>12)-(Gpwrdelta);
++ else
++ t4 = 0;
++ }
++ Gdata = t1 + (t2<<4) + (t3<<8) + (t4<<12);
++
++ RT28xx_EEPROM_READ16(pAd, EEPROM_TXPOWER_BYRATE_20MHZ_2_4G + i*4 + 2, value);
++ if (bApwrdeltaMinus == FALSE)
++ {
++ t1 = (value&0xf)+(Apwrdelta);
++ if (t1 > 0xf)
++ t1 = 0xf;
++ t2 = ((value&0xf0)>>4)+(Apwrdelta);
++ if (t2 > 0xf)
++ t2 = 0xf;
++ t3 = ((value&0xf00)>>8)+(Apwrdelta);
++ if (t3 > 0xf)
++ t3 = 0xf;
++ t4 = ((value&0xf000)>>12)+(Apwrdelta);
++ if (t4 > 0xf)
++ t4 = 0xf;
++ }
++ else
++ {
++ if ((value&0xf) > Apwrdelta)
++ t1 = (value&0xf)-(Apwrdelta);
++ else
++ t1 = 0;
++ if (((value&0xf0)>>4) > Apwrdelta)
++ t2 = ((value&0xf0)>>4)-(Apwrdelta);
++ else
++ t2 = 0;
++ if (((value&0xf00)>>8) > Apwrdelta)
++ t3 = ((value&0xf00)>>8)-(Apwrdelta);
++ else
++ t3 = 0;
++ if (((value&0xf000)>>12) > Apwrdelta)
++ t4 = ((value&0xf000)>>12)-(Apwrdelta);
++ else
++ t4 = 0;
++ }
++ Adata |= ((t1<<16) + (t2<<20) + (t3<<24) + (t4<<28));
++ if (bGpwrdeltaMinus == FALSE)
++ {
++ t1 = (value&0xf)+(Gpwrdelta);
++ if (t1 > 0xf)
++ t1 = 0xf;
++ t2 = ((value&0xf0)>>4)+(Gpwrdelta);
++ if (t2 > 0xf)
++ t2 = 0xf;
++ t3 = ((value&0xf00)>>8)+(Gpwrdelta);
++ if (t3 > 0xf)
++ t3 = 0xf;
++ t4 = ((value&0xf000)>>12)+(Gpwrdelta);
++ if (t4 > 0xf)
++ t4 = 0xf;
++ }
++ else
++ {
++ if ((value&0xf) > Gpwrdelta)
++ t1 = (value&0xf)-(Gpwrdelta);
++ else
++ t1 = 0;
++ if (((value&0xf0)>>4) > Gpwrdelta)
++ t2 = ((value&0xf0)>>4)-(Gpwrdelta);
++ else
++ t2 = 0;
++ if (((value&0xf00)>>8) > Gpwrdelta)
++ t3 = ((value&0xf00)>>8)-(Gpwrdelta);
++ else
++ t3 = 0;
++ if (((value&0xf000)>>12) > Gpwrdelta)
++ t4 = ((value&0xf000)>>12)-(Gpwrdelta);
++ else
++ t4 = 0;
++ }
++ Gdata |= ((t1<<16) + (t2<<20) + (t3<<24) + (t4<<28));
++ data |= (value<<16);
++
++ pAd->Tx20MPwrCfgABand[i] = pAd->Tx40MPwrCfgABand[i] = Adata;
++ pAd->Tx20MPwrCfgGBand[i] = pAd->Tx40MPwrCfgGBand[i] = Gdata;
++
++ if (data != 0xffffffff)
++ RTMP_IO_WRITE32(pAd, TX_PWR_CFG_0 + i*4, data);
++ DBGPRINT_RAW(RT_DEBUG_TRACE, ("20MHz BW, 2.4G band-%lx, Adata = %lx, Gdata = %lx \n", data, Adata, Gdata));
++ }
++
++ //
++ // Check this block is valid for 40MHz in 2.4G. If invalid, use parameter for 20MHz in 2.4G
++ //
++ bValid = TRUE;
++ for (i=0; i<6; i++)
++ {
++ RT28xx_EEPROM_READ16(pAd, EEPROM_TXPOWER_BYRATE_40MHZ_2_4G + 2 + i*2, value);
++ if (((value & 0x00FF) == 0x00FF) || ((value & 0xFF00) == 0xFF00))
++ {
++ bValid = FALSE;
++ break;
++ }
++ }
++
++ //
++ // Get Txpower per MCS for 40MHz in 2.4G.
++ //
++ if (bValid)
++ {
++ for (i=0; i<4; i++)
++ {
++ RT28xx_EEPROM_READ16(pAd, EEPROM_TXPOWER_BYRATE_40MHZ_2_4G + i*4, value);
++ if (bGpwrdeltaMinus == FALSE)
++ {
++ t1 = (value&0xf)+(Gpwrdelta);
++ if (t1 > 0xf)
++ t1 = 0xf;
++ t2 = ((value&0xf0)>>4)+(Gpwrdelta);
++ if (t2 > 0xf)
++ t2 = 0xf;
++ t3 = ((value&0xf00)>>8)+(Gpwrdelta);
++ if (t3 > 0xf)
++ t3 = 0xf;
++ t4 = ((value&0xf000)>>12)+(Gpwrdelta);
++ if (t4 > 0xf)
++ t4 = 0xf;
++ }
++ else
++ {
++ if ((value&0xf) > Gpwrdelta)
++ t1 = (value&0xf)-(Gpwrdelta);
++ else
++ t1 = 0;
++ if (((value&0xf0)>>4) > Gpwrdelta)
++ t2 = ((value&0xf0)>>4)-(Gpwrdelta);
++ else
++ t2 = 0;
++ if (((value&0xf00)>>8) > Gpwrdelta)
++ t3 = ((value&0xf00)>>8)-(Gpwrdelta);
++ else
++ t3 = 0;
++ if (((value&0xf000)>>12) > Gpwrdelta)
++ t4 = ((value&0xf000)>>12)-(Gpwrdelta);
++ else
++ t4 = 0;
++ }
++ Gdata = t1 + (t2<<4) + (t3<<8) + (t4<<12);
++
++ RT28xx_EEPROM_READ16(pAd, EEPROM_TXPOWER_BYRATE_40MHZ_2_4G + i*4 + 2, value);
++ if (bGpwrdeltaMinus == FALSE)
++ {
++ t1 = (value&0xf)+(Gpwrdelta);
++ if (t1 > 0xf)
++ t1 = 0xf;
++ t2 = ((value&0xf0)>>4)+(Gpwrdelta);
++ if (t2 > 0xf)
++ t2 = 0xf;
++ t3 = ((value&0xf00)>>8)+(Gpwrdelta);
++ if (t3 > 0xf)
++ t3 = 0xf;
++ t4 = ((value&0xf000)>>12)+(Gpwrdelta);
++ if (t4 > 0xf)
++ t4 = 0xf;
++ }
++ else
++ {
++ if ((value&0xf) > Gpwrdelta)
++ t1 = (value&0xf)-(Gpwrdelta);
++ else
++ t1 = 0;
++ if (((value&0xf0)>>4) > Gpwrdelta)
++ t2 = ((value&0xf0)>>4)-(Gpwrdelta);
++ else
++ t2 = 0;
++ if (((value&0xf00)>>8) > Gpwrdelta)
++ t3 = ((value&0xf00)>>8)-(Gpwrdelta);
++ else
++ t3 = 0;
++ if (((value&0xf000)>>12) > Gpwrdelta)
++ t4 = ((value&0xf000)>>12)-(Gpwrdelta);
++ else
++ t4 = 0;
++ }
++ Gdata |= ((t1<<16) + (t2<<20) + (t3<<24) + (t4<<28));
++
++ if (i == 0)
++ pAd->Tx40MPwrCfgGBand[i+1] = (pAd->Tx40MPwrCfgGBand[i+1] & 0x0000FFFF) | (Gdata & 0xFFFF0000);
++ else
++ pAd->Tx40MPwrCfgGBand[i+1] = Gdata;
++
++ DBGPRINT_RAW(RT_DEBUG_TRACE, ("40MHz BW, 2.4G band, Gdata = %lx \n", Gdata));
++ }
++ }
++
++ //
++ // Check this block is valid for 20MHz in 5G. If invalid, use parameter for 20MHz in 2.4G
++ //
++ bValid = TRUE;
++ for (i=0; i<8; i++)
++ {
++ RT28xx_EEPROM_READ16(pAd, EEPROM_TXPOWER_BYRATE_20MHZ_5G + 2 + i*2, value);
++ if (((value & 0x00FF) == 0x00FF) || ((value & 0xFF00) == 0xFF00))
++ {
++ bValid = FALSE;
++ break;
++ }
++ }
++
++ //
++ // Get Txpower per MCS for 20MHz in 5G.
++ //
++ if (bValid)
++ {
++ for (i=0; i<5; i++)
++ {
++ RT28xx_EEPROM_READ16(pAd, EEPROM_TXPOWER_BYRATE_20MHZ_5G + i*4, value);
++ if (bApwrdeltaMinus == FALSE)
++ {
++ t1 = (value&0xf)+(Apwrdelta);
++ if (t1 > 0xf)
++ t1 = 0xf;
++ t2 = ((value&0xf0)>>4)+(Apwrdelta);
++ if (t2 > 0xf)
++ t2 = 0xf;
++ t3 = ((value&0xf00)>>8)+(Apwrdelta);
++ if (t3 > 0xf)
++ t3 = 0xf;
++ t4 = ((value&0xf000)>>12)+(Apwrdelta);
++ if (t4 > 0xf)
++ t4 = 0xf;
++ }
++ else
++ {
++ if ((value&0xf) > Apwrdelta)
++ t1 = (value&0xf)-(Apwrdelta);
++ else
++ t1 = 0;
++ if (((value&0xf0)>>4) > Apwrdelta)
++ t2 = ((value&0xf0)>>4)-(Apwrdelta);
++ else
++ t2 = 0;
++ if (((value&0xf00)>>8) > Apwrdelta)
++ t3 = ((value&0xf00)>>8)-(Apwrdelta);
++ else
++ t3 = 0;
++ if (((value&0xf000)>>12) > Apwrdelta)
++ t4 = ((value&0xf000)>>12)-(Apwrdelta);
++ else
++ t4 = 0;
++ }
++ Adata = t1 + (t2<<4) + (t3<<8) + (t4<<12);
++
++ RT28xx_EEPROM_READ16(pAd, EEPROM_TXPOWER_BYRATE_20MHZ_5G + i*4 + 2, value);
++ if (bApwrdeltaMinus == FALSE)
++ {
++ t1 = (value&0xf)+(Apwrdelta);
++ if (t1 > 0xf)
++ t1 = 0xf;
++ t2 = ((value&0xf0)>>4)+(Apwrdelta);
++ if (t2 > 0xf)
++ t2 = 0xf;
++ t3 = ((value&0xf00)>>8)+(Apwrdelta);
++ if (t3 > 0xf)
++ t3 = 0xf;
++ t4 = ((value&0xf000)>>12)+(Apwrdelta);
++ if (t4 > 0xf)
++ t4 = 0xf;
++ }
++ else
++ {
++ if ((value&0xf) > Apwrdelta)
++ t1 = (value&0xf)-(Apwrdelta);
++ else
++ t1 = 0;
++ if (((value&0xf0)>>4) > Apwrdelta)
++ t2 = ((value&0xf0)>>4)-(Apwrdelta);
++ else
++ t2 = 0;
++ if (((value&0xf00)>>8) > Apwrdelta)
++ t3 = ((value&0xf00)>>8)-(Apwrdelta);
++ else
++ t3 = 0;
++ if (((value&0xf000)>>12) > Apwrdelta)
++ t4 = ((value&0xf000)>>12)-(Apwrdelta);
++ else
++ t4 = 0;
++ }
++ Adata |= ((t1<<16) + (t2<<20) + (t3<<24) + (t4<<28));
++
++ if (i == 0)
++ pAd->Tx20MPwrCfgABand[i] = (pAd->Tx20MPwrCfgABand[i] & 0x0000FFFF) | (Adata & 0xFFFF0000);
++ else
++ pAd->Tx20MPwrCfgABand[i] = Adata;
++
++ DBGPRINT_RAW(RT_DEBUG_TRACE, ("20MHz BW, 5GHz band, Adata = %lx \n", Adata));
++ }
++ }
++
++ //
++ // Check this block is valid for 40MHz in 5G. If invalid, use parameter for 20MHz in 2.4G
++ //
++ bValid = TRUE;
++ for (i=0; i<6; i++)
++ {
++ RT28xx_EEPROM_READ16(pAd, EEPROM_TXPOWER_BYRATE_40MHZ_5G + 2 + i*2, value);
++ if (((value & 0x00FF) == 0x00FF) || ((value & 0xFF00) == 0xFF00))
++ {
++ bValid = FALSE;
++ break;
++ }
++ }
++
++ //
++ // Get Txpower per MCS for 40MHz in 5G.
++ //
++ if (bValid)
++ {
++ for (i=0; i<4; i++)
++ {
++ RT28xx_EEPROM_READ16(pAd, EEPROM_TXPOWER_BYRATE_40MHZ_5G + i*4, value);
++ if (bApwrdeltaMinus == FALSE)
++ {
++ t1 = (value&0xf)+(Apwrdelta);
++ if (t1 > 0xf)
++ t1 = 0xf;
++ t2 = ((value&0xf0)>>4)+(Apwrdelta);
++ if (t2 > 0xf)
++ t2 = 0xf;
++ t3 = ((value&0xf00)>>8)+(Apwrdelta);
++ if (t3 > 0xf)
++ t3 = 0xf;
++ t4 = ((value&0xf000)>>12)+(Apwrdelta);
++ if (t4 > 0xf)
++ t4 = 0xf;
++ }
++ else
++ {
++ if ((value&0xf) > Apwrdelta)
++ t1 = (value&0xf)-(Apwrdelta);
++ else
++ t1 = 0;
++ if (((value&0xf0)>>4) > Apwrdelta)
++ t2 = ((value&0xf0)>>4)-(Apwrdelta);
++ else
++ t2 = 0;
++ if (((value&0xf00)>>8) > Apwrdelta)
++ t3 = ((value&0xf00)>>8)-(Apwrdelta);
++ else
++ t3 = 0;
++ if (((value&0xf000)>>12) > Apwrdelta)
++ t4 = ((value&0xf000)>>12)-(Apwrdelta);
++ else
++ t4 = 0;
++ }
++ Adata = t1 + (t2<<4) + (t3<<8) + (t4<<12);
++
++ RT28xx_EEPROM_READ16(pAd, EEPROM_TXPOWER_BYRATE_40MHZ_5G + i*4 + 2, value);
++ if (bApwrdeltaMinus == FALSE)
++ {
++ t1 = (value&0xf)+(Apwrdelta);
++ if (t1 > 0xf)
++ t1 = 0xf;
++ t2 = ((value&0xf0)>>4)+(Apwrdelta);
++ if (t2 > 0xf)
++ t2 = 0xf;
++ t3 = ((value&0xf00)>>8)+(Apwrdelta);
++ if (t3 > 0xf)
++ t3 = 0xf;
++ t4 = ((value&0xf000)>>12)+(Apwrdelta);
++ if (t4 > 0xf)
++ t4 = 0xf;
++ }
++ else
++ {
++ if ((value&0xf) > Apwrdelta)
++ t1 = (value&0xf)-(Apwrdelta);
++ else
++ t1 = 0;
++ if (((value&0xf0)>>4) > Apwrdelta)
++ t2 = ((value&0xf0)>>4)-(Apwrdelta);
++ else
++ t2 = 0;
++ if (((value&0xf00)>>8) > Apwrdelta)
++ t3 = ((value&0xf00)>>8)-(Apwrdelta);
++ else
++ t3 = 0;
++ if (((value&0xf000)>>12) > Apwrdelta)
++ t4 = ((value&0xf000)>>12)-(Apwrdelta);
++ else
++ t4 = 0;
++ }
++ Adata |= ((t1<<16) + (t2<<20) + (t3<<24) + (t4<<28));
++
++ if (i == 0)
++ pAd->Tx40MPwrCfgABand[i+1] = (pAd->Tx40MPwrCfgABand[i+1] & 0x0000FFFF) | (Adata & 0xFFFF0000);
++ else
++ pAd->Tx40MPwrCfgABand[i+1] = Adata;
++
++ DBGPRINT_RAW(RT_DEBUG_TRACE, ("40MHz BW, 5GHz band, Adata = %lx \n", Adata));
++ }
++ }
++}
++
++
++/*
++ ========================================================================
++
++ Routine Description:
++ Read initial channel power parameters from EEPROM
++
++ Arguments:
++ Adapter Pointer to our adapter
++
++ Return Value:
++ None
++
++ IRQL = PASSIVE_LEVEL
++
++ Note:
++
++ ========================================================================
++*/
++VOID RTMPReadChannelPwr(
++ IN PRTMP_ADAPTER pAd)
++{
++ UCHAR i, choffset;
++ EEPROM_TX_PWR_STRUC Power;
++ EEPROM_TX_PWR_STRUC Power2;
++
++ // Read Tx power value for all channels
++ // Value from 1 - 0x7f. Default value is 24.
++ // Power value : 2.4G 0x00 (0) ~ 0x1F (31)
++ // : 5.5G 0xF9 (-7) ~ 0x0F (15)
++
++ // 0. 11b/g, ch1 - ch 14
++ for (i = 0; i < 7; i++)
++ {
++// Power.word = RTMP_EEPROM_READ16(pAd, EEPROM_G_TX_PWR_OFFSET + i * 2);
++// Power2.word = RTMP_EEPROM_READ16(pAd, EEPROM_G_TX2_PWR_OFFSET + i * 2);
++ RT28xx_EEPROM_READ16(pAd, EEPROM_G_TX_PWR_OFFSET + i * 2, Power.word);
++ RT28xx_EEPROM_READ16(pAd, EEPROM_G_TX2_PWR_OFFSET + i * 2, Power2.word);
++ pAd->TxPower[i * 2].Channel = i * 2 + 1;
++ pAd->TxPower[i * 2 + 1].Channel = i * 2 + 2;
++
++ if ((Power.field.Byte0 > 31) || (Power.field.Byte0 < 0))
++ pAd->TxPower[i * 2].Power = DEFAULT_RF_TX_POWER;
++ else
++ pAd->TxPower[i * 2].Power = Power.field.Byte0;
++
++ if ((Power.field.Byte1 > 31) || (Power.field.Byte1 < 0))
++ pAd->TxPower[i * 2 + 1].Power = DEFAULT_RF_TX_POWER;
++ else
++ pAd->TxPower[i * 2 + 1].Power = Power.field.Byte1;
++
++ if ((Power2.field.Byte0 > 31) || (Power2.field.Byte0 < 0))
++ pAd->TxPower[i * 2].Power2 = DEFAULT_RF_TX_POWER;
++ else
++ pAd->TxPower[i * 2].Power2 = Power2.field.Byte0;
++
++ if ((Power2.field.Byte1 > 31) || (Power2.field.Byte1 < 0))
++ pAd->TxPower[i * 2 + 1].Power2 = DEFAULT_RF_TX_POWER;
++ else
++ pAd->TxPower[i * 2 + 1].Power2 = Power2.field.Byte1;
++ }
++
++ // 1. U-NII lower/middle band: 36, 38, 40; 44, 46, 48; 52, 54, 56; 60, 62, 64 (including central frequency in BW 40MHz)
++ // 1.1 Fill up channel
++ choffset = 14;
++ for (i = 0; i < 4; i++)
++ {
++ pAd->TxPower[3 * i + choffset + 0].Channel = 36 + i * 8 + 0;
++ pAd->TxPower[3 * i + choffset + 0].Power = DEFAULT_RF_TX_POWER;
++ pAd->TxPower[3 * i + choffset + 0].Power2 = DEFAULT_RF_TX_POWER;
++
++ pAd->TxPower[3 * i + choffset + 1].Channel = 36 + i * 8 + 2;
++ pAd->TxPower[3 * i + choffset + 1].Power = DEFAULT_RF_TX_POWER;
++ pAd->TxPower[3 * i + choffset + 1].Power2 = DEFAULT_RF_TX_POWER;
++
++ pAd->TxPower[3 * i + choffset + 2].Channel = 36 + i * 8 + 4;
++ pAd->TxPower[3 * i + choffset + 2].Power = DEFAULT_RF_TX_POWER;
++ pAd->TxPower[3 * i + choffset + 2].Power2 = DEFAULT_RF_TX_POWER;
++ }
++
++ // 1.2 Fill up power
++ for (i = 0; i < 6; i++)
++ {
++// Power.word = RTMP_EEPROM_READ16(pAd, EEPROM_A_TX_PWR_OFFSET + i * 2);
++// Power2.word = RTMP_EEPROM_READ16(pAd, EEPROM_A_TX2_PWR_OFFSET + i * 2);
++ RT28xx_EEPROM_READ16(pAd, EEPROM_A_TX_PWR_OFFSET + i * 2, Power.word);
++ RT28xx_EEPROM_READ16(pAd, EEPROM_A_TX2_PWR_OFFSET + i * 2, Power2.word);
++
++ if ((Power.field.Byte0 < 16) && (Power.field.Byte0 >= -7))
++ pAd->TxPower[i * 2 + choffset + 0].Power = Power.field.Byte0;
++
++ if ((Power.field.Byte1 < 16) && (Power.field.Byte1 >= -7))
++ pAd->TxPower[i * 2 + choffset + 1].Power = Power.field.Byte1;
++
++ if ((Power2.field.Byte0 < 16) && (Power2.field.Byte0 >= -7))
++ pAd->TxPower[i * 2 + choffset + 0].Power2 = Power2.field.Byte0;
++
++ if ((Power2.field.Byte1 < 16) && (Power2.field.Byte1 >= -7))
++ pAd->TxPower[i * 2 + choffset + 1].Power2 = Power2.field.Byte1;
++ }
++
++ // 2. HipperLAN 2 100, 102 ,104; 108, 110, 112; 116, 118, 120; 124, 126, 128; 132, 134, 136; 140 (including central frequency in BW 40MHz)
++ // 2.1 Fill up channel
++ choffset = 14 + 12;
++ for (i = 0; i < 5; i++)
++ {
++ pAd->TxPower[3 * i + choffset + 0].Channel = 100 + i * 8 + 0;
++ pAd->TxPower[3 * i + choffset + 0].Power = DEFAULT_RF_TX_POWER;
++ pAd->TxPower[3 * i + choffset + 0].Power2 = DEFAULT_RF_TX_POWER;
++
++ pAd->TxPower[3 * i + choffset + 1].Channel = 100 + i * 8 + 2;
++ pAd->TxPower[3 * i + choffset + 1].Power = DEFAULT_RF_TX_POWER;
++ pAd->TxPower[3 * i + choffset + 1].Power2 = DEFAULT_RF_TX_POWER;
++
++ pAd->TxPower[3 * i + choffset + 2].Channel = 100 + i * 8 + 4;
++ pAd->TxPower[3 * i + choffset + 2].Power = DEFAULT_RF_TX_POWER;
++ pAd->TxPower[3 * i + choffset + 2].Power2 = DEFAULT_RF_TX_POWER;
++ }
++ pAd->TxPower[3 * 5 + choffset + 0].Channel = 140;
++ pAd->TxPower[3 * 5 + choffset + 0].Power = DEFAULT_RF_TX_POWER;
++ pAd->TxPower[3 * 5 + choffset + 0].Power2 = DEFAULT_RF_TX_POWER;
++
++ // 2.2 Fill up power
++ for (i = 0; i < 8; i++)
++ {
++// Power.word = RTMP_EEPROM_READ16(pAd, EEPROM_A_TX_PWR_OFFSET + (choffset - 14) + i * 2);
++// Power2.word = RTMP_EEPROM_READ16(pAd, EEPROM_A_TX2_PWR_OFFSET + (choffset - 14) + i * 2);
++ RT28xx_EEPROM_READ16(pAd, EEPROM_A_TX_PWR_OFFSET + (choffset - 14) + i * 2, Power.word);
++ RT28xx_EEPROM_READ16(pAd, EEPROM_A_TX2_PWR_OFFSET + (choffset - 14) + i * 2, Power2.word);
++
++ if ((Power.field.Byte0 < 16) && (Power.field.Byte0 >= -7))
++ pAd->TxPower[i * 2 + choffset + 0].Power = Power.field.Byte0;
++
++ if ((Power.field.Byte1 < 16) && (Power.field.Byte1 >= -7))
++ pAd->TxPower[i * 2 + choffset + 1].Power = Power.field.Byte1;
++
++ if ((Power2.field.Byte0 < 16) && (Power2.field.Byte0 >= -7))
++ pAd->TxPower[i * 2 + choffset + 0].Power2 = Power2.field.Byte0;
++
++ if ((Power2.field.Byte1 < 16) && (Power2.field.Byte1 >= -7))
++ pAd->TxPower[i * 2 + choffset + 1].Power2 = Power2.field.Byte1;
++ }
++
++ // 3. U-NII upper band: 149, 151, 153; 157, 159, 161; 165 (including central frequency in BW 40MHz)
++ // 3.1 Fill up channel
++ choffset = 14 + 12 + 16;
++ for (i = 0; i < 2; i++)
++ {
++ pAd->TxPower[3 * i + choffset + 0].Channel = 149 + i * 8 + 0;
++ pAd->TxPower[3 * i + choffset + 0].Power = DEFAULT_RF_TX_POWER;
++ pAd->TxPower[3 * i + choffset + 0].Power2 = DEFAULT_RF_TX_POWER;
++
++ pAd->TxPower[3 * i + choffset + 1].Channel = 149 + i * 8 + 2;
++ pAd->TxPower[3 * i + choffset + 1].Power = DEFAULT_RF_TX_POWER;
++ pAd->TxPower[3 * i + choffset + 1].Power2 = DEFAULT_RF_TX_POWER;
++
++ pAd->TxPower[3 * i + choffset + 2].Channel = 149 + i * 8 + 4;
++ pAd->TxPower[3 * i + choffset + 2].Power = DEFAULT_RF_TX_POWER;
++ pAd->TxPower[3 * i + choffset + 2].Power2 = DEFAULT_RF_TX_POWER;
++ }
++ pAd->TxPower[3 * 2 + choffset + 0].Channel = 165;
++ pAd->TxPower[3 * 2 + choffset + 0].Power = DEFAULT_RF_TX_POWER;
++ pAd->TxPower[3 * 2 + choffset + 0].Power2 = DEFAULT_RF_TX_POWER;
++
++ // 3.2 Fill up power
++ for (i = 0; i < 4; i++)
++ {
++// Power.word = RTMP_EEPROM_READ16(pAd, EEPROM_A_TX_PWR_OFFSET + (choffset - 14) + i * 2);
++// Power2.word = RTMP_EEPROM_READ16(pAd, EEPROM_A_TX2_PWR_OFFSET + (choffset - 14) + i * 2);
++ RT28xx_EEPROM_READ16(pAd, EEPROM_A_TX_PWR_OFFSET + (choffset - 14) + i * 2, Power.word);
++ RT28xx_EEPROM_READ16(pAd, EEPROM_A_TX2_PWR_OFFSET + (choffset - 14) + i * 2, Power2.word);
++
++ if ((Power.field.Byte0 < 16) && (Power.field.Byte0 >= -7))
++ pAd->TxPower[i * 2 + choffset + 0].Power = Power.field.Byte0;
++
++ if ((Power.field.Byte1 < 16) && (Power.field.Byte1 >= -7))
++ pAd->TxPower[i * 2 + choffset + 1].Power = Power.field.Byte1;
++
++ if ((Power2.field.Byte0 < 16) && (Power2.field.Byte0 >= -7))
++ pAd->TxPower[i * 2 + choffset + 0].Power2 = Power2.field.Byte0;
++
++ if ((Power2.field.Byte1 < 16) && (Power2.field.Byte1 >= -7))
++ pAd->TxPower[i * 2 + choffset + 1].Power2 = Power2.field.Byte1;
++ }
++
++ // 4. Print and Debug
++ choffset = 14 + 12 + 16 + 7;
++
++}
++
++/*
++ ========================================================================
++
++ Routine Description:
++ Read the following from the registry
++ 1. All the parameters
++ 2. NetworkAddres
++
++ Arguments:
++ Adapter Pointer to our adapter
++ WrapperConfigurationContext For use by NdisOpenConfiguration
++
++ Return Value:
++ NDIS_STATUS_SUCCESS
++ NDIS_STATUS_FAILURE
++ NDIS_STATUS_RESOURCES
++
++ IRQL = PASSIVE_LEVEL
++
++ Note:
++
++ ========================================================================
++*/
++NDIS_STATUS NICReadRegParameters(
++ IN PRTMP_ADAPTER pAd,
++ IN NDIS_HANDLE WrapperConfigurationContext
++ )
++{
++ NDIS_STATUS Status = NDIS_STATUS_SUCCESS;
++ DBGPRINT_S(Status, ("<-- NICReadRegParameters, Status=%x\n", Status));
++ return Status;
++}
++
++
++#ifdef RT2870
++/*
++ ========================================================================
++
++ Routine Description:
++ For RF filter calibration purpose
++
++ Arguments:
++ pAd Pointer to our adapter
++
++ Return Value:
++ None
++
++ IRQL = PASSIVE_LEVEL
++
++ ========================================================================
++*/
++VOID RTUSBFilterCalibration(
++ IN PRTMP_ADAPTER pAd)
++{
++ UCHAR R55x = 0, value, FilterTarget = 0x1E, BBPValue;
++ UINT loop = 0, count = 0, loopcnt = 0, ReTry = 0;
++ UCHAR RF_R24_Value = 0;
++
++ // Give bbp filter initial value
++ pAd->Mlme.CaliBW20RfR24 = 0x16;
++ pAd->Mlme.CaliBW40RfR24 = 0x36; //Bit[5] must be 1 for BW 40
++
++ do
++ {
++ if (loop == 1) //BandWidth = 40 MHz
++ {
++ // Write 0x27 to RF_R24 to program filter
++ RF_R24_Value = 0x27;
++ RT30xxWriteRFRegister(pAd, RF_R24, RF_R24_Value);
++ FilterTarget = 0x19;
++
++ // when calibrate BW40, BBP mask must set to BW40.
++ RTUSBReadBBPRegister(pAd, BBP_R4, &BBPValue);
++ BBPValue&= (~0x18);
++ BBPValue|= (0x10);
++ RTUSBWriteBBPRegister(pAd, BBP_R4, BBPValue);
++ }
++ else //BandWidth = 20 MHz
++ {
++ // Write 0x07 to RF_R24 to program filter
++ RF_R24_Value = 0x07;
++ RT30xxWriteRFRegister(pAd, RF_R24, RF_R24_Value);
++ FilterTarget = 0x16;
++ }
++
++ // Write 0x01 to RF_R22 to enable baseband loopback mode
++ RT30xxReadRFRegister(pAd, RF_R22, &value);
++ value |= 0x01;
++ RT30xxWriteRFRegister(pAd, RF_R22, value);
++
++ // Write 0x00 to BBP_R24 to set power & frequency of passband test tone
++ RTUSBWriteBBPRegister(pAd, BBP_R24, 0);
++
++ do
++ {
++ // Write 0x90 to BBP_R25 to transmit test tone
++ RTUSBWriteBBPRegister(pAd, BBP_R25, 0x90);
++
++ RTMPusecDelay(1000);
++ // Read BBP_R55[6:0] for received power, set R55x = BBP_R55[6:0]
++ RTUSBReadBBPRegister(pAd, BBP_R55, &value);
++ R55x = value & 0xFF;
++
++ } while ((ReTry++ < 100) && (R55x == 0));
++
++ // Write 0x06 to BBP_R24 to set power & frequency of stopband test tone
++ RTUSBWriteBBPRegister(pAd, BBP_R24, 0x06);
++
++ while(TRUE)
++ {
++ // Write 0x90 to BBP_R25 to transmit test tone
++ RTUSBWriteBBPRegister(pAd, BBP_R25, 0x90);
++
++ //We need to wait for calibration
++ RTMPusecDelay(1000);
++ RTUSBReadBBPRegister(pAd, BBP_R55, &value);
++ value &= 0xFF;
++ if ((R55x - value) < FilterTarget)
++ {
++ RF_R24_Value ++;
++ }
++ else if ((R55x - value) == FilterTarget)
++ {
++ RF_R24_Value ++;
++ count ++;
++ }
++ else
++ {
++ break;
++ }
++
++ // prevent infinite loop cause driver hang.
++ if (loopcnt++ > 100)
++ {
++ DBGPRINT(RT_DEBUG_ERROR, ("RTUSBFilterCalibration - can't find a valid value, loopcnt=%d stop calibrating", loopcnt));
++ break;
++ }
++
++ // Write RF_R24 to program filter
++ RT30xxWriteRFRegister(pAd, RF_R24, RF_R24_Value);
++ }
++
++ if (count > 0)
++ {
++ RF_R24_Value = RF_R24_Value - ((count) ? (1) : (0));
++ }
++
++ // Store for future usage
++ if (loopcnt < 100)
++ {
++ if (loop++ == 0)
++ {
++ //BandWidth = 20 MHz
++ pAd->Mlme.CaliBW20RfR24 = (UCHAR)RF_R24_Value;
++ }
++ else
++ {
++ //BandWidth = 40 MHz
++ pAd->Mlme.CaliBW40RfR24 = (UCHAR)RF_R24_Value;
++ break;
++ }
++ }
++ else
++ break;
++
++ RT30xxWriteRFRegister(pAd, RF_R24, RF_R24_Value);
++
++ // reset count
++ count = 0;
++ } while(TRUE);
++
++ //
++ // Set back to initial state
++ //
++ RTUSBWriteBBPRegister(pAd, BBP_R24, 0);
++
++ RT30xxReadRFRegister(pAd, RF_R22, &value);
++ value &= ~(0x01);
++ RT30xxWriteRFRegister(pAd, RF_R22, value);
++
++ // set BBP back to BW20
++ RTUSBReadBBPRegister(pAd, BBP_R4, &BBPValue);
++ BBPValue&= (~0x18);
++ RTUSBWriteBBPRegister(pAd, BBP_R4, BBPValue);
++
++ DBGPRINT(RT_DEBUG_TRACE, ("RTUSBFilterCalibration - CaliBW20RfR24=0x%x, CaliBW40RfR24=0x%x\n", pAd->Mlme.CaliBW20RfR24, pAd->Mlme.CaliBW40RfR24));
++}
++
++
++VOID NICInitRT30xxRFRegisters(IN PRTMP_ADAPTER pAd)
++{
++ INT i;
++ // Driver must read EEPROM to get RfIcType before initial RF registers
++ // Initialize RF register to default value
++ if (IS_RT3070(pAd) && ((pAd->RfIcType == RFIC_3020) ||(pAd->RfIcType == RFIC_2020)))
++ {
++ // Init RF calibration
++ // Driver should toggle RF R30 bit7 before init RF registers
++ ULONG RfReg = 0;
++ RT30xxReadRFRegister(pAd, RF_R30, (PUCHAR)&RfReg);
++ RfReg |= 0x80;
++ RT30xxWriteRFRegister(pAd, RF_R30, (UCHAR)RfReg);
++ RTMPusecDelay(1000);
++ RfReg &= 0x7F;
++ RT30xxWriteRFRegister(pAd, RF_R30, (UCHAR)RfReg);
++
++ // Initialize RF register to default value
++ for (i = 0; i < NUM_RF_REG_PARMS; i++)
++ {
++ RT30xxWriteRFRegister(pAd, RT30xx_RFRegTable[i].Register, RT30xx_RFRegTable[i].Value);
++ }
++
++ //For RF filter Calibration
++ RTUSBFilterCalibration(pAd);
++ }
++
++}
++#endif // RT2870 //
++
++
++/*
++ ========================================================================
++
++ Routine Description:
++ Read initial parameters from EEPROM
++
++ Arguments:
++ Adapter Pointer to our adapter
++
++ Return Value:
++ None
++
++ IRQL = PASSIVE_LEVEL
++
++ Note:
++
++ ========================================================================
++*/
++VOID NICReadEEPROMParameters(
++ IN PRTMP_ADAPTER pAd,
++ IN PUCHAR mac_addr)
++{
++ UINT32 data = 0;
++ USHORT i, value, value2;
++ UCHAR TmpPhy;
++ EEPROM_TX_PWR_STRUC Power;
++ EEPROM_VERSION_STRUC Version;
++ EEPROM_ANTENNA_STRUC Antenna;
++ EEPROM_NIC_CONFIG2_STRUC NicConfig2;
++
++ DBGPRINT(RT_DEBUG_TRACE, ("--> NICReadEEPROMParameters\n"));
++
++ // Init EEPROM Address Number, before access EEPROM; if 93c46, EEPROMAddressNum=6, else if 93c66, EEPROMAddressNum=8
++ RTMP_IO_READ32(pAd, E2PROM_CSR, &data);
++ DBGPRINT(RT_DEBUG_TRACE, ("--> E2PROM_CSR = 0x%x\n", data));
++
++ if((data & 0x30) == 0)
++ pAd->EEPROMAddressNum = 6; // 93C46
++ else if((data & 0x30) == 0x10)
++ pAd->EEPROMAddressNum = 8; // 93C66
++ else
++ pAd->EEPROMAddressNum = 8; // 93C86
++ DBGPRINT(RT_DEBUG_TRACE, ("--> EEPROMAddressNum = %d\n", pAd->EEPROMAddressNum ));
++
++ // RT2860 MAC no longer auto load MAC address from E2PROM. Driver has to intialize
++ // MAC address registers according to E2PROM setting
++ if (mac_addr == NULL ||
++ strlen(mac_addr) != 17 ||
++ mac_addr[2] != ':' || mac_addr[5] != ':' || mac_addr[8] != ':' ||
++ mac_addr[11] != ':' || mac_addr[14] != ':')
++ {
++ USHORT Addr01,Addr23,Addr45 ;
++
++ RT28xx_EEPROM_READ16(pAd, 0x04, Addr01);
++ RT28xx_EEPROM_READ16(pAd, 0x06, Addr23);
++ RT28xx_EEPROM_READ16(pAd, 0x08, Addr45);
++
++ pAd->PermanentAddress[0] = (UCHAR)(Addr01 & 0xff);
++ pAd->PermanentAddress[1] = (UCHAR)(Addr01 >> 8);
++ pAd->PermanentAddress[2] = (UCHAR)(Addr23 & 0xff);
++ pAd->PermanentAddress[3] = (UCHAR)(Addr23 >> 8);
++ pAd->PermanentAddress[4] = (UCHAR)(Addr45 & 0xff);
++ pAd->PermanentAddress[5] = (UCHAR)(Addr45 >> 8);
++
++ DBGPRINT(RT_DEBUG_TRACE, ("Initialize MAC Address from E2PROM \n"));
++ }
++ else
++ {
++ INT j;
++ PUCHAR macptr;
++
++ macptr = mac_addr;
++
++ for (j=0; j<MAC_ADDR_LEN; j++)
++ {
++ AtoH(macptr, &pAd->PermanentAddress[j], 1);
++ macptr=macptr+3;
++ }
++
++ DBGPRINT(RT_DEBUG_TRACE, ("Initialize MAC Address from module parameter \n"));
++ }
++
++
++ {
++#if 0
++ USHORT Addr01,Addr23,Addr45 ;
++
++ Addr01=RTMP_EEPROM_READ16(pAd, 0x04);
++ Addr23=RTMP_EEPROM_READ16(pAd, 0x06);
++ Addr45=RTMP_EEPROM_READ16(pAd, 0x08);
++
++ pAd->PermanentAddress[0] = (UCHAR)(Addr01 & 0xff);
++ pAd->PermanentAddress[1] = (UCHAR)(Addr01 >> 8);
++ pAd->PermanentAddress[2] = (UCHAR)(Addr23 & 0xff);
++ pAd->PermanentAddress[3] = (UCHAR)(Addr23 >> 8);
++ pAd->PermanentAddress[4] = (UCHAR)(Addr45 & 0xff);
++ pAd->PermanentAddress[5] = (UCHAR)(Addr45 >> 8);
++#endif
++ //more conveninet to test mbssid, so ap's bssid &0xf1
++ if (pAd->PermanentAddress[0] == 0xff)
++ pAd->PermanentAddress[0] = RandomByte(pAd)&0xf8;
++
++ //if (pAd->PermanentAddress[5] == 0xff)
++ // pAd->PermanentAddress[5] = RandomByte(pAd)&0xf8;
++
++ DBGPRINT_RAW(RT_DEBUG_TRACE,("E2PROM MAC: =%02x:%02x:%02x:%02x:%02x:%02x\n",
++ pAd->PermanentAddress[0], pAd->PermanentAddress[1],
++ pAd->PermanentAddress[2], pAd->PermanentAddress[3],
++ pAd->PermanentAddress[4], pAd->PermanentAddress[5]));
++ if (pAd->bLocalAdminMAC == FALSE)
++ {
++ MAC_DW0_STRUC csr2;
++ MAC_DW1_STRUC csr3;
++ COPY_MAC_ADDR(pAd->CurrentAddress, pAd->PermanentAddress);
++ csr2.field.Byte0 = pAd->CurrentAddress[0];
++ csr2.field.Byte1 = pAd->CurrentAddress[1];
++ csr2.field.Byte2 = pAd->CurrentAddress[2];
++ csr2.field.Byte3 = pAd->CurrentAddress[3];
++ RTMP_IO_WRITE32(pAd, MAC_ADDR_DW0, csr2.word);
++ csr3.word = 0;
++ csr3.field.Byte4 = pAd->CurrentAddress[4];
++ csr3.field.Byte5 = pAd->CurrentAddress[5];
++ csr3.field.U2MeMask = 0xff;
++ RTMP_IO_WRITE32(pAd, MAC_ADDR_DW1, csr3.word);
++ DBGPRINT_RAW(RT_DEBUG_TRACE,("E2PROM MAC: =%02x:%02x:%02x:%02x:%02x:%02x\n",
++ pAd->PermanentAddress[0], pAd->PermanentAddress[1],
++ pAd->PermanentAddress[2], pAd->PermanentAddress[3],
++ pAd->PermanentAddress[4], pAd->PermanentAddress[5]));
++ }
++ }
++
++ // if not return early. cause fail at emulation.
++ // Init the channel number for TX channel power
++ RTMPReadChannelPwr(pAd);
++
++ // if E2PROM version mismatch with driver's expectation, then skip
++ // all subsequent E2RPOM retieval and set a system error bit to notify GUI
++ RT28xx_EEPROM_READ16(pAd, EEPROM_VERSION_OFFSET, Version.word);
++ pAd->EepromVersion = Version.field.Version + Version.field.FaeReleaseNumber * 256;
++ DBGPRINT(RT_DEBUG_TRACE, ("E2PROM: Version = %d, FAE release #%d\n", Version.field.Version, Version.field.FaeReleaseNumber));
++
++ if (Version.field.Version > VALID_EEPROM_VERSION)
++ {
++ DBGPRINT_ERR(("E2PROM: WRONG VERSION 0x%x, should be %d\n",Version.field.Version, VALID_EEPROM_VERSION));
++ /*pAd->SystemErrorBitmap |= 0x00000001;
++
++ // hard-code default value when no proper E2PROM installed
++ pAd->bAutoTxAgcA = FALSE;
++ pAd->bAutoTxAgcG = FALSE;
++
++ // Default the channel power
++ for (i = 0; i < MAX_NUM_OF_CHANNELS; i++)
++ pAd->TxPower[i].Power = DEFAULT_RF_TX_POWER;
++
++ // Default the channel power
++ for (i = 0; i < MAX_NUM_OF_11JCHANNELS; i++)
++ pAd->TxPower11J[i].Power = DEFAULT_RF_TX_POWER;
++
++ for(i = 0; i < NUM_EEPROM_BBP_PARMS; i++)
++ pAd->EEPROMDefaultValue[i] = 0xffff;
++ return; */
++ }
++
++ // Read BBP default value from EEPROM and store to array(EEPROMDefaultValue) in pAd
++ RT28xx_EEPROM_READ16(pAd, EEPROM_NIC1_OFFSET, value);
++ pAd->EEPROMDefaultValue[0] = value;
++
++ RT28xx_EEPROM_READ16(pAd, EEPROM_NIC2_OFFSET, value);
++ pAd->EEPROMDefaultValue[1] = value;
++
++ RT28xx_EEPROM_READ16(pAd, 0x38, value); // Country Region
++ pAd->EEPROMDefaultValue[2] = value;
++
++ for(i = 0; i < 8; i++)
++ {
++ RT28xx_EEPROM_READ16(pAd, EEPROM_BBP_BASE_OFFSET + i*2, value);
++ pAd->EEPROMDefaultValue[i+3] = value;
++ }
++
++ // We have to parse NIC configuration 0 at here.
++ // If TSSI did not have preloaded value, it should reset the TxAutoAgc to false
++ // Therefore, we have to read TxAutoAgc control beforehand.
++ // Read Tx AGC control bit
++ Antenna.word = pAd->EEPROMDefaultValue[0];
++ if (Antenna.word == 0xFFFF)
++ {
++ Antenna.word = 0;
++ Antenna.field.RfIcType = RFIC_2820;
++ Antenna.field.TxPath = 1;
++ Antenna.field.RxPath = 2;
++ DBGPRINT(RT_DEBUG_WARN, ("E2PROM error, hard code as 0x%04x\n", Antenna.word));
++ }
++
++ // Choose the desired Tx&Rx stream.
++ if ((pAd->CommonCfg.TxStream == 0) || (pAd->CommonCfg.TxStream > Antenna.field.TxPath))
++ pAd->CommonCfg.TxStream = Antenna.field.TxPath;
++
++ if ((pAd->CommonCfg.RxStream == 0) || (pAd->CommonCfg.RxStream > Antenna.field.RxPath))
++ {
++ pAd->CommonCfg.RxStream = Antenna.field.RxPath;
++
++ if ((pAd->MACVersion < RALINK_2883_VERSION) &&
++ (pAd->CommonCfg.RxStream > 2))
++ {
++ // only 2 Rx streams for RT2860 series
++ pAd->CommonCfg.RxStream = 2;
++ }
++ }
++
++ // 3*3
++ // read value from EEPROM and set them to CSR174 ~ 177 in chain0 ~ chain2
++ // yet implement
++ for(i=0; i<3; i++)
++ {
++ }
++
++ NicConfig2.word = pAd->EEPROMDefaultValue[1];
++
++
++
++#ifdef CONFIG_STA_SUPPORT
++ IF_DEV_CONFIG_OPMODE_ON_STA(pAd)
++ {
++ NicConfig2.word = 0;
++ if ((NicConfig2.word & 0x00ff) == 0xff)
++ {
++ NicConfig2.word &= 0xff00;
++ }
++
++ if ((NicConfig2.word >> 8) == 0xff)
++ {
++ NicConfig2.word &= 0x00ff;
++ }
++ }
++#endif // CONFIG_STA_SUPPORT //
++
++ if (NicConfig2.field.DynamicTxAgcControl == 1)
++ pAd->bAutoTxAgcA = pAd->bAutoTxAgcG = TRUE;
++ else
++ pAd->bAutoTxAgcA = pAd->bAutoTxAgcG = FALSE;
++
++ DBGPRINT_RAW(RT_DEBUG_TRACE, ("NICReadEEPROMParameters: RxPath = %d, TxPath = %d\n", Antenna.field.RxPath, Antenna.field.TxPath));
++
++ // Save the antenna for future use
++ pAd->Antenna.word = Antenna.word;
++
++ //
++ // Reset PhyMode if we don't support 802.11a
++ // Only RFIC_2850 & RFIC_2750 support 802.11a
++ //
++ if ((Antenna.field.RfIcType != RFIC_2850) && (Antenna.field.RfIcType != RFIC_2750))
++ {
++ if ((pAd->CommonCfg.PhyMode == PHY_11ABG_MIXED) ||
++ (pAd->CommonCfg.PhyMode == PHY_11A))
++ pAd->CommonCfg.PhyMode = PHY_11BG_MIXED;
++#ifdef DOT11_N_SUPPORT
++ else if ((pAd->CommonCfg.PhyMode == PHY_11ABGN_MIXED) ||
++ (pAd->CommonCfg.PhyMode == PHY_11AN_MIXED) ||
++ (pAd->CommonCfg.PhyMode == PHY_11AGN_MIXED) ||
++ (pAd->CommonCfg.PhyMode == PHY_11N_5G))
++ pAd->CommonCfg.PhyMode = PHY_11BGN_MIXED;
++#endif // DOT11_N_SUPPORT //
++ }
++
++ // Read TSSI reference and TSSI boundary for temperature compensation. This is ugly
++ // 0. 11b/g
++ {
++ /* these are tempature reference value (0x00 ~ 0xFE)
++ ex: 0x00 0x15 0x25 0x45 0x88 0xA0 0xB5 0xD0 0xF0
++ TssiPlusBoundaryG [4] [3] [2] [1] [0] (smaller) +
++ TssiMinusBoundaryG[0] [1] [2] [3] [4] (larger) */
++ RT28xx_EEPROM_READ16(pAd, 0x6E, Power.word);
++ pAd->TssiMinusBoundaryG[4] = Power.field.Byte0;
++ pAd->TssiMinusBoundaryG[3] = Power.field.Byte1;
++ RT28xx_EEPROM_READ16(pAd, 0x70, Power.word);
++ pAd->TssiMinusBoundaryG[2] = Power.field.Byte0;
++ pAd->TssiMinusBoundaryG[1] = Power.field.Byte1;
++ RT28xx_EEPROM_READ16(pAd, 0x72, Power.word);
++ pAd->TssiRefG = Power.field.Byte0; /* reference value [0] */
++ pAd->TssiPlusBoundaryG[1] = Power.field.Byte1;
++ RT28xx_EEPROM_READ16(pAd, 0x74, Power.word);
++ pAd->TssiPlusBoundaryG[2] = Power.field.Byte0;
++ pAd->TssiPlusBoundaryG[3] = Power.field.Byte1;
++ RT28xx_EEPROM_READ16(pAd, 0x76, Power.word);
++ pAd->TssiPlusBoundaryG[4] = Power.field.Byte0;
++ pAd->TxAgcStepG = Power.field.Byte1;
++ pAd->TxAgcCompensateG = 0;
++ pAd->TssiMinusBoundaryG[0] = pAd->TssiRefG;
++ pAd->TssiPlusBoundaryG[0] = pAd->TssiRefG;
++
++ // Disable TxAgc if the based value is not right
++ if (pAd->TssiRefG == 0xff)
++ pAd->bAutoTxAgcG = FALSE;
++
++ DBGPRINT(RT_DEBUG_TRACE,("E2PROM: G Tssi[-4 .. +4] = %d %d %d %d - %d -%d %d %d %d, step=%d, tuning=%d\n",
++ pAd->TssiMinusBoundaryG[4], pAd->TssiMinusBoundaryG[3], pAd->TssiMinusBoundaryG[2], pAd->TssiMinusBoundaryG[1],
++ pAd->TssiRefG,
++ pAd->TssiPlusBoundaryG[1], pAd->TssiPlusBoundaryG[2], pAd->TssiPlusBoundaryG[3], pAd->TssiPlusBoundaryG[4],
++ pAd->TxAgcStepG, pAd->bAutoTxAgcG));
++ }
++ // 1. 11a
++ {
++ RT28xx_EEPROM_READ16(pAd, 0xD4, Power.word);
++ pAd->TssiMinusBoundaryA[4] = Power.field.Byte0;
++ pAd->TssiMinusBoundaryA[3] = Power.field.Byte1;
++ RT28xx_EEPROM_READ16(pAd, 0xD6, Power.word);
++ pAd->TssiMinusBoundaryA[2] = Power.field.Byte0;
++ pAd->TssiMinusBoundaryA[1] = Power.field.Byte1;
++ RT28xx_EEPROM_READ16(pAd, 0xD8, Power.word);
++ pAd->TssiRefA = Power.field.Byte0;
++ pAd->TssiPlusBoundaryA[1] = Power.field.Byte1;
++ RT28xx_EEPROM_READ16(pAd, 0xDA, Power.word);
++ pAd->TssiPlusBoundaryA[2] = Power.field.Byte0;
++ pAd->TssiPlusBoundaryA[3] = Power.field.Byte1;
++ RT28xx_EEPROM_READ16(pAd, 0xDC, Power.word);
++ pAd->TssiPlusBoundaryA[4] = Power.field.Byte0;
++ pAd->TxAgcStepA = Power.field.Byte1;
++ pAd->TxAgcCompensateA = 0;
++ pAd->TssiMinusBoundaryA[0] = pAd->TssiRefA;
++ pAd->TssiPlusBoundaryA[0] = pAd->TssiRefA;
++
++ // Disable TxAgc if the based value is not right
++ if (pAd->TssiRefA == 0xff)
++ pAd->bAutoTxAgcA = FALSE;
++
++ DBGPRINT(RT_DEBUG_TRACE,("E2PROM: A Tssi[-4 .. +4] = %d %d %d %d - %d -%d %d %d %d, step=%d, tuning=%d\n",
++ pAd->TssiMinusBoundaryA[4], pAd->TssiMinusBoundaryA[3], pAd->TssiMinusBoundaryA[2], pAd->TssiMinusBoundaryA[1],
++ pAd->TssiRefA,
++ pAd->TssiPlusBoundaryA[1], pAd->TssiPlusBoundaryA[2], pAd->TssiPlusBoundaryA[3], pAd->TssiPlusBoundaryA[4],
++ pAd->TxAgcStepA, pAd->bAutoTxAgcA));
++ }
++ pAd->BbpRssiToDbmDelta = 0x0;
++
++ // Read frequency offset setting for RF
++ RT28xx_EEPROM_READ16(pAd, EEPROM_FREQ_OFFSET, value);
++ if ((value & 0x00FF) != 0x00FF)
++ pAd->RfFreqOffset = (ULONG) (value & 0x00FF);
++ else
++ pAd->RfFreqOffset = 0;
++ DBGPRINT(RT_DEBUG_TRACE, ("E2PROM: RF FreqOffset=0x%lx \n", pAd->RfFreqOffset));
++
++ //CountryRegion byte offset (38h)
++ value = pAd->EEPROMDefaultValue[2] >> 8; // 2.4G band
++ value2 = pAd->EEPROMDefaultValue[2] & 0x00FF; // 5G band
++
++ if ((value <= REGION_MAXIMUM_BG_BAND) && (value2 <= REGION_MAXIMUM_A_BAND))
++ {
++ pAd->CommonCfg.CountryRegion = ((UCHAR) value) | 0x80;
++ pAd->CommonCfg.CountryRegionForABand = ((UCHAR) value2) | 0x80;
++ TmpPhy = pAd->CommonCfg.PhyMode;
++ pAd->CommonCfg.PhyMode = 0xff;
++ RTMPSetPhyMode(pAd, TmpPhy);
++#ifdef DOT11_N_SUPPORT
++ SetCommonHT(pAd);
++#endif // DOT11_N_SUPPORT //
++ }
++
++ //
++ // Get RSSI Offset on EEPROM 0x9Ah & 0x9Ch.
++ // The valid value are (-10 ~ 10)
++ //
++ RT28xx_EEPROM_READ16(pAd, EEPROM_RSSI_BG_OFFSET, value);
++ pAd->BGRssiOffset0 = value & 0x00ff;
++ pAd->BGRssiOffset1 = (value >> 8);
++ RT28xx_EEPROM_READ16(pAd, EEPROM_RSSI_BG_OFFSET+2, value);
++ pAd->BGRssiOffset2 = value & 0x00ff;
++ pAd->ALNAGain1 = (value >> 8);
++ RT28xx_EEPROM_READ16(pAd, EEPROM_LNA_OFFSET, value);
++ pAd->BLNAGain = value & 0x00ff;
++ pAd->ALNAGain0 = (value >> 8);
++
++ // Validate 11b/g RSSI_0 offset.
++ if ((pAd->BGRssiOffset0 < -10) || (pAd->BGRssiOffset0 > 10))
++ pAd->BGRssiOffset0 = 0;
++
++ // Validate 11b/g RSSI_1 offset.
++ if ((pAd->BGRssiOffset1 < -10) || (pAd->BGRssiOffset1 > 10))
++ pAd->BGRssiOffset1 = 0;
++
++ // Validate 11b/g RSSI_2 offset.
++ if ((pAd->BGRssiOffset2 < -10) || (pAd->BGRssiOffset2 > 10))
++ pAd->BGRssiOffset2 = 0;
++
++ RT28xx_EEPROM_READ16(pAd, EEPROM_RSSI_A_OFFSET, value);
++ pAd->ARssiOffset0 = value & 0x00ff;
++ pAd->ARssiOffset1 = (value >> 8);
++ RT28xx_EEPROM_READ16(pAd, (EEPROM_RSSI_A_OFFSET+2), value);
++ pAd->ARssiOffset2 = value & 0x00ff;
++ pAd->ALNAGain2 = (value >> 8);
++
++ if (((UCHAR)pAd->ALNAGain1 == 0xFF) || (pAd->ALNAGain1 == 0x00))
++ pAd->ALNAGain1 = pAd->ALNAGain0;
++ if (((UCHAR)pAd->ALNAGain2 == 0xFF) || (pAd->ALNAGain2 == 0x00))
++ pAd->ALNAGain2 = pAd->ALNAGain0;
++
++ // Validate 11a RSSI_0 offset.
++ if ((pAd->ARssiOffset0 < -10) || (pAd->ARssiOffset0 > 10))
++ pAd->ARssiOffset0 = 0;
++
++ // Validate 11a RSSI_1 offset.
++ if ((pAd->ARssiOffset1 < -10) || (pAd->ARssiOffset1 > 10))
++ pAd->ARssiOffset1 = 0;
++
++ //Validate 11a RSSI_2 offset.
++ if ((pAd->ARssiOffset2 < -10) || (pAd->ARssiOffset2 > 10))
++ pAd->ARssiOffset2 = 0;
++
++ //
++ // Get LED Setting.
++ //
++ RT28xx_EEPROM_READ16(pAd, 0x3a, value);
++ pAd->LedCntl.word = (value&0xff00) >> 8;
++ RT28xx_EEPROM_READ16(pAd, EEPROM_LED1_OFFSET, value);
++ pAd->Led1 = value;
++ RT28xx_EEPROM_READ16(pAd, EEPROM_LED2_OFFSET, value);
++ pAd->Led2 = value;
++ RT28xx_EEPROM_READ16(pAd, EEPROM_LED3_OFFSET, value);
++ pAd->Led3 = value;
++
++ RTMPReadTxPwrPerRate(pAd);
++
++#ifdef SINGLE_SKU
++ //pAd->CommonCfg.DefineMaxTxPwr = RTMP_EEPROM_READ16(pAd, EEPROM_DEFINE_MAX_TXPWR);
++ RT28xx_EEPROM_READ16(pAd, EEPROM_DEFINE_MAX_TXPWR, pAd->CommonCfg.DefineMaxTxPwr);
++#endif // SINGLE_SKU //
++
++ DBGPRINT(RT_DEBUG_TRACE, ("<-- NICReadEEPROMParameters\n"));
++}
++
++/*
++ ========================================================================
++
++ Routine Description:
++ Set default value from EEPROM
++
++ Arguments:
++ Adapter Pointer to our adapter
++
++ Return Value:
++ None
++
++ IRQL = PASSIVE_LEVEL
++
++ Note:
++
++ ========================================================================
++*/
++VOID NICInitAsicFromEEPROM(
++ IN PRTMP_ADAPTER pAd)
++{
++#ifdef CONFIG_STA_SUPPORT
++ UINT32 data = 0;
++ UCHAR BBPR1 = 0;
++#endif // CONFIG_STA_SUPPORT //
++ USHORT i;
++ EEPROM_ANTENNA_STRUC Antenna;
++ EEPROM_NIC_CONFIG2_STRUC NicConfig2;
++ UCHAR BBPR3 = 0;
++
++ DBGPRINT(RT_DEBUG_TRACE, ("--> NICInitAsicFromEEPROM\n"));
++ for(i = 3; i < NUM_EEPROM_BBP_PARMS; i++)
++ {
++ UCHAR BbpRegIdx, BbpValue;
++
++ if ((pAd->EEPROMDefaultValue[i] != 0xFFFF) && (pAd->EEPROMDefaultValue[i] != 0))
++ {
++ BbpRegIdx = (UCHAR)(pAd->EEPROMDefaultValue[i] >> 8);
++ BbpValue = (UCHAR)(pAd->EEPROMDefaultValue[i] & 0xff);
++ RTMP_BBP_IO_WRITE8_BY_REG_ID(pAd, BbpRegIdx, BbpValue);
++ }
++ }
++
++ Antenna.word = pAd->Antenna.word;
++ pAd->Mlme.RealRxPath = (UCHAR) Antenna.field.RxPath;
++ pAd->RfIcType = (UCHAR) Antenna.field.RfIcType;
++
++ NicConfig2.word = pAd->EEPROMDefaultValue[1];
++
++
++ // Save the antenna for future use
++ pAd->NicConfig2.word = NicConfig2.word;
++
++ //
++ // Send LED Setting to MCU.
++ //
++ if (pAd->LedCntl.word == 0xFF)
++ {
++ pAd->LedCntl.word = 0x01;
++ pAd->Led1 = 0x5555;
++ pAd->Led2 = 0x2221;
++
++#ifdef RT2870
++ pAd->Led3 = 0x5627;
++#endif // RT2870 //
++ }
++
++ AsicSendCommandToMcu(pAd, 0x52, 0xff, (UCHAR)pAd->Led1, (UCHAR)(pAd->Led1 >> 8));
++ AsicSendCommandToMcu(pAd, 0x53, 0xff, (UCHAR)pAd->Led2, (UCHAR)(pAd->Led2 >> 8));
++ AsicSendCommandToMcu(pAd, 0x54, 0xff, (UCHAR)pAd->Led3, (UCHAR)(pAd->Led3 >> 8));
++ pAd->LedIndicatorStregth = 0xFF;
++ RTMPSetSignalLED(pAd, -100); // Force signal strength Led to be turned off, before link up
++
++#ifdef CONFIG_STA_SUPPORT
++ IF_DEV_CONFIG_OPMODE_ON_STA(pAd)
++ {
++ // Read Hardware controlled Radio state enable bit
++ if (NicConfig2.field.HardwareRadioControl == 1)
++ {
++ pAd->StaCfg.bHardwareRadio = TRUE;
++
++ // Read GPIO pin2 as Hardware controlled radio state
++ RTMP_IO_READ32(pAd, GPIO_CTRL_CFG, &data);
++ if ((data & 0x04) == 0)
++ {
++ pAd->StaCfg.bHwRadio = FALSE;
++ pAd->StaCfg.bRadio = FALSE;
++// RTMP_IO_WRITE32(pAd, PWR_PIN_CFG, 0x00001818);
++ RTMP_SET_FLAG(pAd, fRTMP_ADAPTER_RADIO_OFF);
++ }
++ }
++ else
++ pAd->StaCfg.bHardwareRadio = FALSE;
++
++ if (pAd->StaCfg.bRadio == FALSE)
++ {
++ RTMPSetLED(pAd, LED_RADIO_OFF);
++ }
++ else
++ {
++ RTMPSetLED(pAd, LED_RADIO_ON);
++ }
++ }
++#endif // CONFIG_STA_SUPPORT //
++
++ // Turn off patching for cardbus controller
++ if (NicConfig2.field.CardbusAcceleration == 1)
++ {
++// pAd->bTest1 = TRUE;
++ }
++
++ if (NicConfig2.field.DynamicTxAgcControl == 1)
++ pAd->bAutoTxAgcA = pAd->bAutoTxAgcG = TRUE;
++ else
++ pAd->bAutoTxAgcA = pAd->bAutoTxAgcG = FALSE;
++ //
++ // Since BBP has been progamed, to make sure BBP setting will be
++ // upate inside of AsicAntennaSelect, so reset to UNKNOWN_BAND!!
++ //
++ pAd->CommonCfg.BandState = UNKNOWN_BAND;
++
++ RTMP_BBP_IO_READ8_BY_REG_ID(pAd, BBP_R3, &BBPR3);
++ BBPR3 &= (~0x18);
++ if(pAd->Antenna.field.RxPath == 3)
++ {
++ BBPR3 |= (0x10);
++ }
++ else if(pAd->Antenna.field.RxPath == 2)
++ {
++ BBPR3 |= (0x8);
++ }
++ else if(pAd->Antenna.field.RxPath == 1)
++ {
++ BBPR3 |= (0x0);
++ }
++ RTMP_BBP_IO_WRITE8_BY_REG_ID(pAd, BBP_R3, BBPR3);
++
++#ifdef CONFIG_STA_SUPPORT
++ IF_DEV_CONFIG_OPMODE_ON_STA(pAd)
++ {
++ // Handle the difference when 1T
++ RTMP_BBP_IO_READ8_BY_REG_ID(pAd, BBP_R1, &BBPR1);
++ if(pAd->Antenna.field.TxPath == 1)
++ {
++ BBPR1 &= (~0x18);
++ }
++ RTMP_BBP_IO_WRITE8_BY_REG_ID(pAd, BBP_R1, BBPR1);
++
++ DBGPRINT(RT_DEBUG_TRACE, ("Use Hw Radio Control Pin=%d; if used Pin=%d;\n", pAd->CommonCfg.bHardwareRadio, pAd->CommonCfg.bHardwareRadio));
++ }
++#endif // CONFIG_STA_SUPPORT //
++ DBGPRINT(RT_DEBUG_TRACE, ("TxPath = %d, RxPath = %d, RFIC=%d, Polar+LED mode=%x\n", pAd->Antenna.field.TxPath, pAd->Antenna.field.RxPath, pAd->RfIcType, pAd->LedCntl.word));
++ DBGPRINT(RT_DEBUG_TRACE, ("<-- NICInitAsicFromEEPROM\n"));
++}
++
++/*
++ ========================================================================
++
++ Routine Description:
++ Initialize NIC hardware
++
++ Arguments:
++ Adapter Pointer to our adapter
++
++ Return Value:
++ None
++
++ IRQL = PASSIVE_LEVEL
++
++ Note:
++
++ ========================================================================
++*/
++NDIS_STATUS NICInitializeAdapter(
++ IN PRTMP_ADAPTER pAd,
++ IN BOOLEAN bHardReset)
++{
++ NDIS_STATUS Status = NDIS_STATUS_SUCCESS;
++ WPDMA_GLO_CFG_STRUC GloCfg;
++// INT_MASK_CSR_STRUC IntMask;
++ ULONG i =0, j=0;
++ AC_TXOP_CSR0_STRUC csr0;
++
++ DBGPRINT(RT_DEBUG_TRACE, ("--> NICInitializeAdapter\n"));
++
++ // 3. Set DMA global configuration except TX_DMA_EN and RX_DMA_EN bits:
++retry:
++ i = 0;
++ do
++ {
++ RTMP_IO_READ32(pAd, WPDMA_GLO_CFG, &GloCfg.word);
++ if ((GloCfg.field.TxDMABusy == 0) && (GloCfg.field.RxDMABusy == 0))
++ break;
++
++ RTMPusecDelay(1000);
++ i++;
++ }while ( i<100);
++ DBGPRINT(RT_DEBUG_TRACE, ("<== DMA offset 0x208 = 0x%x\n", GloCfg.word));
++ GloCfg.word &= 0xff0;
++ GloCfg.field.EnTXWriteBackDDONE =1;
++ RTMP_IO_WRITE32(pAd, WPDMA_GLO_CFG, GloCfg.word);
++
++ // Record HW Beacon offset
++ pAd->BeaconOffset[0] = HW_BEACON_BASE0;
++ pAd->BeaconOffset[1] = HW_BEACON_BASE1;
++ pAd->BeaconOffset[2] = HW_BEACON_BASE2;
++ pAd->BeaconOffset[3] = HW_BEACON_BASE3;
++ pAd->BeaconOffset[4] = HW_BEACON_BASE4;
++ pAd->BeaconOffset[5] = HW_BEACON_BASE5;
++ pAd->BeaconOffset[6] = HW_BEACON_BASE6;
++ pAd->BeaconOffset[7] = HW_BEACON_BASE7;
++
++ //
++ // write all shared Ring's base address into ASIC
++ //
++
++ // asic simulation sequence put this ahead before loading firmware.
++ // pbf hardware reset
++
++ // Initialze ASIC for TX & Rx operation
++ if (NICInitializeAsic(pAd , bHardReset) != NDIS_STATUS_SUCCESS)
++ {
++ if (j++ == 0)
++ {
++ NICLoadFirmware(pAd);
++ goto retry;
++ }
++ return NDIS_STATUS_FAILURE;
++ }
++
++
++
++
++ // WMM parameter
++ csr0.word = 0;
++ RTMP_IO_WRITE32(pAd, WMM_TXOP0_CFG, csr0.word);
++ if (pAd->CommonCfg.PhyMode == PHY_11B)
++ {
++ csr0.field.Ac0Txop = 192; // AC_VI: 192*32us ~= 6ms
++ csr0.field.Ac1Txop = 96; // AC_VO: 96*32us ~= 3ms
++ }
++ else
++ {
++ csr0.field.Ac0Txop = 96; // AC_VI: 96*32us ~= 3ms
++ csr0.field.Ac1Txop = 48; // AC_VO: 48*32us ~= 1.5ms
++ }
++ RTMP_IO_WRITE32(pAd, WMM_TXOP1_CFG, csr0.word);
++
++
++
++
++ // reset action
++ // Load firmware
++ // Status = NICLoadFirmware(pAd);
++
++ DBGPRINT(RT_DEBUG_TRACE, ("<-- NICInitializeAdapter\n"));
++ return Status;
++}
++
++/*
++ ========================================================================
++
++ Routine Description:
++ Initialize ASIC
++
++ Arguments:
++ Adapter Pointer to our adapter
++
++ Return Value:
++ None
++
++ IRQL = PASSIVE_LEVEL
++
++ Note:
++
++ ========================================================================
++*/
++NDIS_STATUS NICInitializeAsic(
++ IN PRTMP_ADAPTER pAd,
++ IN BOOLEAN bHardReset)
++{
++ ULONG Index = 0;
++ UCHAR R0 = 0xff;
++ UINT32 MacCsr12 = 0, Counter = 0;
++#ifdef RT2870
++ UINT32 MacCsr0 = 0;
++ NTSTATUS Status;
++ UCHAR Value = 0xff;
++#endif // RT2870 //
++ USHORT KeyIdx;
++ INT i,apidx;
++
++ DBGPRINT(RT_DEBUG_TRACE, ("--> NICInitializeAsic\n"));
++
++
++#ifdef RT2870
++ //
++ // Make sure MAC gets ready after NICLoadFirmware().
++ //
++ Index = 0;
++
++ //To avoid hang-on issue when interface up in kernel 2.4,
++ //we use a local variable "MacCsr0" instead of using "pAd->MACVersion" directly.
++ do
++ {
++ RTMP_IO_READ32(pAd, MAC_CSR0, &MacCsr0);
++
++ if ((MacCsr0 != 0x00) && (MacCsr0 != 0xFFFFFFFF))
++ break;
++
++ RTMPusecDelay(10);
++ } while (Index++ < 100);
++
++ pAd->MACVersion = MacCsr0;
++ DBGPRINT(RT_DEBUG_TRACE, ("MAC_CSR0 [ Ver:Rev=0x%08x]\n", pAd->MACVersion));
++ // turn on bit13 (set to zero) after rt2860D. This is to solve high-current issue.
++ RTMP_IO_READ32(pAd, PBF_SYS_CTRL, &MacCsr12);
++ MacCsr12 &= (~0x2000);
++ RTMP_IO_WRITE32(pAd, PBF_SYS_CTRL, MacCsr12);
++
++ RTMP_IO_WRITE32(pAd, MAC_SYS_CTRL, 0x3);
++ RTMP_IO_WRITE32(pAd, USB_DMA_CFG, 0x0);
++ Status = RTUSBVenderReset(pAd);
++
++ RTMP_IO_WRITE32(pAd, MAC_SYS_CTRL, 0x0);
++
++ // Initialize MAC register to default value
++ for(Index=0; Index<NUM_MAC_REG_PARMS; Index++)
++ {
++ RTMP_IO_WRITE32(pAd, (USHORT)MACRegTable[Index].Register, MACRegTable[Index].Value);
++ }
++
++ if(IS_RT3070(pAd))
++ {
++ // According to Frank Hsu (from Gary Tsao)
++ RTMP_IO_WRITE32(pAd, (USHORT)TX_SW_CFG0, 0x00000400);
++
++ // Initialize RT3070 serial MAC registers which is different from RT2870 serial
++ RTUSBWriteMACRegister(pAd, TX_SW_CFG1, 0);
++ RTUSBWriteMACRegister(pAd, TX_SW_CFG2, 0);
++ }
++
++
++#ifdef CONFIG_STA_SUPPORT
++ IF_DEV_CONFIG_OPMODE_ON_STA(pAd)
++ {
++ for (Index = 0; Index < NUM_STA_MAC_REG_PARMS; Index++)
++ {
++ RTMP_IO_WRITE32(pAd, (USHORT)STAMACRegTable[Index].Register, STAMACRegTable[Index].Value);
++ }
++ }
++#endif // CONFIG_STA_SUPPORT //
++#endif // RT2870 //
++
++ //
++ // Before program BBP, we need to wait BBP/RF get wake up.
++ //
++ Index = 0;
++ do
++ {
++ RTMP_IO_READ32(pAd, MAC_STATUS_CFG, &MacCsr12);
++
++ if ((MacCsr12 & 0x03) == 0) // if BB.RF is stable
++ break;
++
++ DBGPRINT(RT_DEBUG_TRACE, ("Check MAC_STATUS_CFG = Busy = %x\n", MacCsr12));
++ RTMPusecDelay(1000);
++ } while (Index++ < 100);
++
++ // The commands to firmware should be after these commands, these commands will init firmware
++ // PCI and USB are not the same because PCI driver needs to wait for PCI bus ready
++ RTMP_IO_WRITE32(pAd, H2M_BBP_AGENT, 0); // initialize BBP R/W access agent
++ RTMP_IO_WRITE32(pAd, H2M_MAILBOX_CSR, 0);
++ RTMPusecDelay(1000);
++
++ // Read BBP register, make sure BBP is up and running before write new data
++ Index = 0;
++ do
++ {
++ RTMP_BBP_IO_READ8_BY_REG_ID(pAd, BBP_R0, &R0);
++ DBGPRINT(RT_DEBUG_TRACE, ("BBP version = %x\n", R0));
++ } while ((++Index < 20) && ((R0 == 0xff) || (R0 == 0x00)));
++ //ASSERT(Index < 20); //this will cause BSOD on Check-build driver
++
++ if ((R0 == 0xff) || (R0 == 0x00))
++ return NDIS_STATUS_FAILURE;
++
++ // Initialize BBP register to default value
++ for (Index = 0; Index < NUM_BBP_REG_PARMS; Index++)
++ {
++ RTMP_BBP_IO_WRITE8_BY_REG_ID(pAd, BBPRegTable[Index].Register, BBPRegTable[Index].Value);
++ }
++
++ // for rt2860E and after, init BBP_R84 with 0x19. This is for extension channel overlapping IOT.
++ if ((pAd->MACVersion&0xffff) != 0x0101)
++ RTMP_BBP_IO_WRITE8_BY_REG_ID(pAd, BBP_R84, 0x19);
++
++#ifdef RT2870
++ //write RT3070 BBP wchich different with 2870 after write RT2870 BBP
++ if (IS_RT3070(pAd))
++ {
++ RTMP_BBP_IO_WRITE8_BY_REG_ID(pAd, BBP_R70, 0x0a);
++ RTMP_BBP_IO_WRITE8_BY_REG_ID(pAd, BBP_R84, 0x99);
++ RTMP_BBP_IO_WRITE8_BY_REG_ID(pAd, BBP_R105, 0x05);
++ }
++#endif // RT2870 //
++
++ if (pAd->MACVersion == 0x28600100)
++ {
++ RTMP_BBP_IO_WRITE8_BY_REG_ID(pAd, BBP_R69, 0x16);
++ RTMP_BBP_IO_WRITE8_BY_REG_ID(pAd, BBP_R73, 0x12);
++ }
++
++ if (pAd->MACVersion >= RALINK_2880E_VERSION && pAd->MACVersion < RALINK_3070_VERSION) // 3*3
++ {
++ // enlarge MAX_LEN_CFG
++ UINT32 csr;
++ RTMP_IO_READ32(pAd, MAX_LEN_CFG, &csr);
++ csr &= 0xFFF;
++ csr |= 0x2000;
++ RTMP_IO_WRITE32(pAd, MAX_LEN_CFG, csr);
++ }
++
++#ifdef RT2870
++{
++ UCHAR MAC_Value[]={0xff,0xff,0xff,0xff,0xff,0xff,0xff,0,0};
++
++ //Initialize WCID table
++ Value = 0xff;
++ for(Index =0 ;Index < 254;Index++)
++ {
++ RTUSBMultiWrite(pAd, (USHORT)(MAC_WCID_BASE + Index * 8), MAC_Value, 8);
++ }
++}
++#endif // RT2870 //
++
++ // Add radio off control
++#ifdef CONFIG_STA_SUPPORT
++ IF_DEV_CONFIG_OPMODE_ON_STA(pAd)
++ {
++ if (pAd->StaCfg.bRadio == FALSE)
++ {
++// RTMP_IO_WRITE32(pAd, PWR_PIN_CFG, 0x00001818);
++ RTMP_SET_FLAG(pAd, fRTMP_ADAPTER_RADIO_OFF);
++ DBGPRINT(RT_DEBUG_TRACE, ("Set Radio Off\n"));
++ }
++ }
++#endif // CONFIG_STA_SUPPORT //
++
++ // Clear raw counters
++ RTMP_IO_READ32(pAd, RX_STA_CNT0, &Counter);
++ RTMP_IO_READ32(pAd, RX_STA_CNT1, &Counter);
++ RTMP_IO_READ32(pAd, RX_STA_CNT2, &Counter);
++ RTMP_IO_READ32(pAd, TX_STA_CNT0, &Counter);
++ RTMP_IO_READ32(pAd, TX_STA_CNT1, &Counter);
++ RTMP_IO_READ32(pAd, TX_STA_CNT2, &Counter);
++
++ // ASIC will keep garbage value after boot
++ // Clear all seared key table when initial
++ // This routine can be ignored in radio-ON/OFF operation.
++ if (bHardReset)
++ {
++ for (KeyIdx = 0; KeyIdx < 4; KeyIdx++)
++ {
++ RTMP_IO_WRITE32(pAd, SHARED_KEY_MODE_BASE + 4*KeyIdx, 0);
++ }
++
++ // Clear all pairwise key table when initial
++ for (KeyIdx = 0; KeyIdx < 256; KeyIdx++)
++ {
++ RTMP_IO_WRITE32(pAd, MAC_WCID_ATTRIBUTE_BASE + (KeyIdx * HW_WCID_ATTRI_SIZE), 1);
++ }
++ }
++
++ // assert HOST ready bit
++// RTMP_IO_WRITE32(pAd, MAC_CSR1, 0x0); // 2004-09-14 asked by Mark
++// RTMP_IO_WRITE32(pAd, MAC_CSR1, 0x4);
++
++ // It isn't necessary to clear this space when not hard reset.
++ if (bHardReset == TRUE)
++ {
++ // clear all on-chip BEACON frame space
++ for (apidx = 0; apidx < HW_BEACON_MAX_COUNT; apidx++)
++ {
++ for (i = 0; i < HW_BEACON_OFFSET>>2; i+=4)
++ RTMP_IO_WRITE32(pAd, pAd->BeaconOffset[apidx] + i, 0x00);
++ }
++ }
++#ifdef RT2870
++ AsicDisableSync(pAd);
++ // Clear raw counters
++ RTMP_IO_READ32(pAd, RX_STA_CNT0, &Counter);
++ RTMP_IO_READ32(pAd, RX_STA_CNT1, &Counter);
++ RTMP_IO_READ32(pAd, RX_STA_CNT2, &Counter);
++ RTMP_IO_READ32(pAd, TX_STA_CNT0, &Counter);
++ RTMP_IO_READ32(pAd, TX_STA_CNT1, &Counter);
++ RTMP_IO_READ32(pAd, TX_STA_CNT2, &Counter);
++ // Default PCI clock cycle per ms is different as default setting, which is based on PCI.
++ RTMP_IO_READ32(pAd, USB_CYC_CFG, &Counter);
++ Counter&=0xffffff00;
++ Counter|=0x000001e;
++ RTMP_IO_WRITE32(pAd, USB_CYC_CFG, Counter);
++#endif // RT2870 //
++
++#ifdef CONFIG_STA_SUPPORT
++ IF_DEV_CONFIG_OPMODE_ON_STA(pAd)
++ {
++ // for rt2860E and after, init TXOP_CTRL_CFG with 0x583f. This is for extension channel overlapping IOT.
++ if ((pAd->MACVersion&0xffff) != 0x0101)
++ RTMP_IO_WRITE32(pAd, TXOP_CTRL_CFG, 0x583f);
++ }
++#endif // CONFIG_STA_SUPPORT //
++
++ DBGPRINT(RT_DEBUG_TRACE, ("<-- NICInitializeAsic\n"));
++ return NDIS_STATUS_SUCCESS;
++}
++
++/*
++ ========================================================================
++
++ Routine Description:
++ Reset NIC Asics
++
++ Arguments:
++ Adapter Pointer to our adapter
++
++ Return Value:
++ None
++
++ IRQL = PASSIVE_LEVEL
++
++ Note:
++ Reset NIC to initial state AS IS system boot up time.
++
++ ========================================================================
++*/
++VOID NICIssueReset(
++ IN PRTMP_ADAPTER pAd)
++{
++ UINT32 Value = 0;
++ DBGPRINT(RT_DEBUG_TRACE, ("--> NICIssueReset\n"));
++
++ // Abort Tx, prevent ASIC from writing to Host memory
++ //RTMP_IO_WRITE32(pAd, TX_CNTL_CSR, 0x001f0000);
++
++ // Disable Rx, register value supposed will remain after reset
++ RTMP_IO_READ32(pAd, MAC_SYS_CTRL, &Value);
++ Value &= (0xfffffff3);
++ RTMP_IO_WRITE32(pAd, MAC_SYS_CTRL, Value);
++
++ // Issue reset and clear from reset state
++ RTMP_IO_WRITE32(pAd, MAC_SYS_CTRL, 0x03); // 2004-09-17 change from 0x01
++ RTMP_IO_WRITE32(pAd, MAC_SYS_CTRL, 0x00);
++
++ DBGPRINT(RT_DEBUG_TRACE, ("<-- NICIssueReset\n"));
++}
++
++/*
++ ========================================================================
++
++ Routine Description:
++ Check ASIC registers and find any reason the system might hang
++
++ Arguments:
++ Adapter Pointer to our adapter
++
++ Return Value:
++ None
++
++ IRQL = DISPATCH_LEVEL
++
++ ========================================================================
++*/
++BOOLEAN NICCheckForHang(
++ IN PRTMP_ADAPTER pAd)
++{
++ return (FALSE);
++}
++
++VOID NICUpdateFifoStaCounters(
++ IN PRTMP_ADAPTER pAd)
++{
++ TX_STA_FIFO_STRUC StaFifo;
++ MAC_TABLE_ENTRY *pEntry;
++ UCHAR i = 0;
++ UCHAR pid = 0, wcid = 0;
++ CHAR reTry;
++ UCHAR succMCS;
++
++#ifdef RALINK_ATE
++ /* Nothing to do in ATE mode */
++ if (ATE_ON(pAd))
++ return;
++#endif // RALINK_ATE //
++
++ do
++ {
++ RTMP_IO_READ32(pAd, TX_STA_FIFO, &StaFifo.word);
++
++ if (StaFifo.field.bValid == 0)
++ break;
++
++ wcid = (UCHAR)StaFifo.field.wcid;
++
++
++ /* ignore NoACK and MGMT frame use 0xFF as WCID */
++ if ((StaFifo.field.TxAckRequired == 0) || (wcid >= MAX_LEN_OF_MAC_TABLE))
++ {
++ i++;
++ continue;
++ }
++
++ /* PID store Tx MCS Rate */
++ pid = (UCHAR)StaFifo.field.PidType;
++
++ pEntry = &pAd->MacTab.Content[wcid];
++
++ pEntry->DebugFIFOCount++;
++
++#ifdef DOT11_N_SUPPORT
++ if (StaFifo.field.TxBF) // 3*3
++ pEntry->TxBFCount++;
++#endif // DOT11_N_SUPPORT //
++
++#ifdef UAPSD_AP_SUPPORT
++ UAPSD_SP_AUE_Handle(pAd, pEntry, StaFifo.field.TxSuccess);
++#endif // UAPSD_AP_SUPPORT //
++
++ if (!StaFifo.field.TxSuccess)
++ {
++ pEntry->FIFOCount++;
++ pEntry->OneSecTxFailCount++;
++
++ if (pEntry->FIFOCount >= 1)
++ {
++ DBGPRINT(RT_DEBUG_TRACE, ("#"));
++#if 0
++ SendRefreshBAR(pAd, pEntry);
++ pEntry->NoBADataCountDown = 64;
++#else
++#ifdef DOT11_N_SUPPORT
++ pEntry->NoBADataCountDown = 64;
++#endif // DOT11_N_SUPPORT //
++
++ if(pEntry->PsMode == PWR_ACTIVE)
++ {
++#ifdef DOT11_N_SUPPORT
++ int tid;
++ for (tid=0; tid<NUM_OF_TID; tid++)
++ {
++ BAOriSessionTearDown(pAd, pEntry->Aid, tid, FALSE, FALSE);
++ }
++#endif // DOT11_N_SUPPORT //
++
++ // Update the continuous transmission counter except PS mode
++ pEntry->ContinueTxFailCnt++;
++ }
++ else
++ {
++ // Clear the FIFOCount when sta in Power Save mode. Basically we assume
++ // this tx error happened due to sta just go to sleep.
++ pEntry->FIFOCount = 0;
++ pEntry->ContinueTxFailCnt = 0;
++ }
++#endif
++ //pEntry->FIFOCount = 0;
++ }
++ //pEntry->bSendBAR = TRUE;
++ }
++ else
++ {
++#ifdef DOT11_N_SUPPORT
++ if ((pEntry->PsMode != PWR_SAVE) && (pEntry->NoBADataCountDown > 0))
++ {
++ pEntry->NoBADataCountDown--;
++ if (pEntry->NoBADataCountDown==0)
++ {
++ DBGPRINT(RT_DEBUG_TRACE, ("@\n"));
++ }
++ }
++#endif // DOT11_N_SUPPORT //
++ pEntry->FIFOCount = 0;
++ pEntry->OneSecTxNoRetryOkCount++;
++ // update NoDataIdleCount when sucessful send packet to STA.
++ pEntry->NoDataIdleCount = 0;
++ pEntry->ContinueTxFailCnt = 0;
++ }
++
++ succMCS = StaFifo.field.SuccessRate & 0x7F;
++
++ reTry = pid - succMCS;
++
++ if (StaFifo.field.TxSuccess)
++ {
++ pEntry->TXMCSExpected[pid]++;
++ if (pid == succMCS)
++ {
++ pEntry->TXMCSSuccessful[pid]++;
++ }
++ else
++ {
++ pEntry->TXMCSAutoFallBack[pid][succMCS]++;
++ }
++ }
++ else
++ {
++ pEntry->TXMCSFailed[pid]++;
++ }
++
++ if (reTry > 0)
++ {
++ if ((pid >= 12) && succMCS <=7)
++ {
++ reTry -= 4;
++ }
++ pEntry->OneSecTxRetryOkCount += reTry;
++ }
++
++ i++;
++ // ASIC store 16 stack
++ } while ( i < (2*TX_RING_SIZE) );
++
++}
++
++/*
++ ========================================================================
++
++ Routine Description:
++ Read statistical counters from hardware registers and record them
++ in software variables for later on query
++
++ Arguments:
++ pAd Pointer to our adapter
++
++ Return Value:
++ None
++
++ IRQL = DISPATCH_LEVEL
++
++ ========================================================================
++*/
++VOID NICUpdateRawCounters(
++ IN PRTMP_ADAPTER pAd)
++{
++ UINT32 OldValue;
++ RX_STA_CNT0_STRUC RxStaCnt0;
++ RX_STA_CNT1_STRUC RxStaCnt1;
++ RX_STA_CNT2_STRUC RxStaCnt2;
++ TX_STA_CNT0_STRUC TxStaCnt0;
++ TX_STA_CNT1_STRUC StaTx1;
++ TX_STA_CNT2_STRUC StaTx2;
++ TX_AGG_CNT_STRUC TxAggCnt;
++ TX_AGG_CNT0_STRUC TxAggCnt0;
++ TX_AGG_CNT1_STRUC TxAggCnt1;
++ TX_AGG_CNT2_STRUC TxAggCnt2;
++ TX_AGG_CNT3_STRUC TxAggCnt3;
++ TX_AGG_CNT4_STRUC TxAggCnt4;
++ TX_AGG_CNT5_STRUC TxAggCnt5;
++ TX_AGG_CNT6_STRUC TxAggCnt6;
++ TX_AGG_CNT7_STRUC TxAggCnt7;
++
++
++ RTMP_IO_READ32(pAd, RX_STA_CNT0, &RxStaCnt0.word);
++ RTMP_IO_READ32(pAd, RX_STA_CNT2, &RxStaCnt2.word);
++
++ {
++ RTMP_IO_READ32(pAd, RX_STA_CNT1, &RxStaCnt1.word);
++ // Update RX PLCP error counter
++ pAd->PrivateInfo.PhyRxErrCnt += RxStaCnt1.field.PlcpErr;
++ // Update False CCA counter
++ pAd->RalinkCounters.OneSecFalseCCACnt += RxStaCnt1.field.FalseCca;
++ }
++
++ // Update FCS counters
++ OldValue= pAd->WlanCounters.FCSErrorCount.u.LowPart;
++ pAd->WlanCounters.FCSErrorCount.u.LowPart += (RxStaCnt0.field.CrcErr); // >> 7);
++ if (pAd->WlanCounters.FCSErrorCount.u.LowPart < OldValue)
++ pAd->WlanCounters.FCSErrorCount.u.HighPart++;
++
++ // Add FCS error count to private counters
++ pAd->RalinkCounters.OneSecRxFcsErrCnt += RxStaCnt0.field.CrcErr;
++ OldValue = pAd->RalinkCounters.RealFcsErrCount.u.LowPart;
++ pAd->RalinkCounters.RealFcsErrCount.u.LowPart += RxStaCnt0.field.CrcErr;
++ if (pAd->RalinkCounters.RealFcsErrCount.u.LowPart < OldValue)
++ pAd->RalinkCounters.RealFcsErrCount.u.HighPart++;
++
++ // Update Duplicate Rcv check
++ pAd->RalinkCounters.DuplicateRcv += RxStaCnt2.field.RxDupliCount;
++ pAd->WlanCounters.FrameDuplicateCount.u.LowPart += RxStaCnt2.field.RxDupliCount;
++ // Update RX Overflow counter
++ pAd->Counters8023.RxNoBuffer += (RxStaCnt2.field.RxFifoOverflowCount);
++
++ //pAd->RalinkCounters.RxCount = 0;
++#ifdef RT2870
++ if (pAd->RalinkCounters.RxCount != pAd->watchDogRxCnt)
++ {
++ pAd->watchDogRxCnt = pAd->RalinkCounters.RxCount;
++ pAd->watchDogRxOverFlowCnt = 0;
++ }
++ else
++ {
++ if (RxStaCnt2.field.RxFifoOverflowCount)
++ pAd->watchDogRxOverFlowCnt++;
++ else
++ pAd->watchDogRxOverFlowCnt = 0;
++ }
++#endif // RT2870 //
++
++
++ //if (!OPSTATUS_TEST_FLAG(pAd, fOP_STATUS_TX_RATE_SWITCH_ENABLED) ||
++ // (OPSTATUS_TEST_FLAG(pAd, fOP_STATUS_TX_RATE_SWITCH_ENABLED) && (pAd->MacTab.Size != 1)))
++ if (!pAd->bUpdateBcnCntDone)
++ {
++ // Update BEACON sent count
++ RTMP_IO_READ32(pAd, TX_STA_CNT0, &TxStaCnt0.word);
++ RTMP_IO_READ32(pAd, TX_STA_CNT1, &StaTx1.word);
++ RTMP_IO_READ32(pAd, TX_STA_CNT2, &StaTx2.word);
++ pAd->RalinkCounters.OneSecBeaconSentCnt += TxStaCnt0.field.TxBeaconCount;
++ pAd->RalinkCounters.OneSecTxRetryOkCount += StaTx1.field.TxRetransmit;
++ pAd->RalinkCounters.OneSecTxNoRetryOkCount += StaTx1.field.TxSuccess;
++ pAd->RalinkCounters.OneSecTxFailCount += TxStaCnt0.field.TxFailCount;
++ pAd->WlanCounters.TransmittedFragmentCount.u.LowPart += StaTx1.field.TxSuccess;
++ pAd->WlanCounters.RetryCount.u.LowPart += StaTx1.field.TxRetransmit;
++ pAd->WlanCounters.FailedCount.u.LowPart += TxStaCnt0.field.TxFailCount;
++ }
++
++#if 0
++ Retry = StaTx1.field.TxRetransmit;
++ Fail = TxStaCnt0.field.TxFailCount;
++ TxErrorRatio = 0;
++ OneSecTransmitCount = pAd->WlanCounters.TransmittedFragmentCount.u.LowPart- pAd->WlanCounters.LastTransmittedFragmentCount.u.LowPart;
++ if ((OneSecTransmitCount+Retry + Fail) > 0)
++ TxErrorRatio = (( Retry + Fail) *100) / (OneSecTransmitCount+Retry + Fail);
++
++ if ((OneSecTransmitCount+Retry + Fail) > 0)
++ TxErrorRatio = (( Retry + Fail) *100) / (OneSecTransmitCount+Retry + Fail);
++ DBGPRINT(RT_DEBUG_INFO, ("TX ERROR Rate = %ld %%, Retry = %ld, Fail = %ld, Total = %ld \n",TxErrorRatio, Retry, Fail, (OneSecTransmitCount+Retry + Fail)));
++ pAd->WlanCounters.LastTransmittedFragmentCount.u.LowPart = pAd->WlanCounters.TransmittedFragmentCount.u.LowPart;
++#endif
++
++ //if (pAd->bStaFifoTest == TRUE)
++ {
++ RTMP_IO_READ32(pAd, TX_AGG_CNT, &TxAggCnt.word);
++ RTMP_IO_READ32(pAd, TX_AGG_CNT0, &TxAggCnt0.word);
++ RTMP_IO_READ32(pAd, TX_AGG_CNT1, &TxAggCnt1.word);
++ RTMP_IO_READ32(pAd, TX_AGG_CNT2, &TxAggCnt2.word);
++ RTMP_IO_READ32(pAd, TX_AGG_CNT3, &TxAggCnt3.word);
++ RTMP_IO_READ32(pAd, TX_AGG_CNT4, &TxAggCnt4.word);
++ RTMP_IO_READ32(pAd, TX_AGG_CNT5, &TxAggCnt5.word);
++ RTMP_IO_READ32(pAd, TX_AGG_CNT6, &TxAggCnt6.word);
++ RTMP_IO_READ32(pAd, TX_AGG_CNT7, &TxAggCnt7.word);
++ pAd->RalinkCounters.TxAggCount += TxAggCnt.field.AggTxCount;
++ pAd->RalinkCounters.TxNonAggCount += TxAggCnt.field.NonAggTxCount;
++ pAd->RalinkCounters.TxAgg1MPDUCount += TxAggCnt0.field.AggSize1Count;
++ pAd->RalinkCounters.TxAgg2MPDUCount += TxAggCnt0.field.AggSize2Count;
++
++ pAd->RalinkCounters.TxAgg3MPDUCount += TxAggCnt1.field.AggSize3Count;
++ pAd->RalinkCounters.TxAgg4MPDUCount += TxAggCnt1.field.AggSize4Count;
++ pAd->RalinkCounters.TxAgg5MPDUCount += TxAggCnt2.field.AggSize5Count;
++ pAd->RalinkCounters.TxAgg6MPDUCount += TxAggCnt2.field.AggSize6Count;
++
++ pAd->RalinkCounters.TxAgg7MPDUCount += TxAggCnt3.field.AggSize7Count;
++ pAd->RalinkCounters.TxAgg8MPDUCount += TxAggCnt3.field.AggSize8Count;
++ pAd->RalinkCounters.TxAgg9MPDUCount += TxAggCnt4.field.AggSize9Count;
++ pAd->RalinkCounters.TxAgg10MPDUCount += TxAggCnt4.field.AggSize10Count;
++
++ pAd->RalinkCounters.TxAgg11MPDUCount += TxAggCnt5.field.AggSize11Count;
++ pAd->RalinkCounters.TxAgg12MPDUCount += TxAggCnt5.field.AggSize12Count;
++ pAd->RalinkCounters.TxAgg13MPDUCount += TxAggCnt6.field.AggSize13Count;
++ pAd->RalinkCounters.TxAgg14MPDUCount += TxAggCnt6.field.AggSize14Count;
++
++ pAd->RalinkCounters.TxAgg15MPDUCount += TxAggCnt7.field.AggSize15Count;
++ pAd->RalinkCounters.TxAgg16MPDUCount += TxAggCnt7.field.AggSize16Count;
++
++ // Calculate the transmitted A-MPDU count
++ pAd->RalinkCounters.TransmittedAMPDUCount.u.LowPart += TxAggCnt0.field.AggSize1Count;
++ pAd->RalinkCounters.TransmittedAMPDUCount.u.LowPart += (TxAggCnt0.field.AggSize2Count / 2);
++
++ pAd->RalinkCounters.TransmittedAMPDUCount.u.LowPart += (TxAggCnt1.field.AggSize3Count / 3);
++ pAd->RalinkCounters.TransmittedAMPDUCount.u.LowPart += (TxAggCnt1.field.AggSize4Count / 4);
++
++ pAd->RalinkCounters.TransmittedAMPDUCount.u.LowPart += (TxAggCnt2.field.AggSize5Count / 5);
++ pAd->RalinkCounters.TransmittedAMPDUCount.u.LowPart += (TxAggCnt2.field.AggSize6Count / 6);
++
++ pAd->RalinkCounters.TransmittedAMPDUCount.u.LowPart += (TxAggCnt3.field.AggSize7Count / 7);
++ pAd->RalinkCounters.TransmittedAMPDUCount.u.LowPart += (TxAggCnt3.field.AggSize8Count / 8);
++
++ pAd->RalinkCounters.TransmittedAMPDUCount.u.LowPart += (TxAggCnt4.field.AggSize9Count / 9);
++ pAd->RalinkCounters.TransmittedAMPDUCount.u.LowPart += (TxAggCnt4.field.AggSize10Count / 10);
++
++ pAd->RalinkCounters.TransmittedAMPDUCount.u.LowPart += (TxAggCnt5.field.AggSize11Count / 11);
++ pAd->RalinkCounters.TransmittedAMPDUCount.u.LowPart += (TxAggCnt5.field.AggSize12Count / 12);
++
++ pAd->RalinkCounters.TransmittedAMPDUCount.u.LowPart += (TxAggCnt6.field.AggSize13Count / 13);
++ pAd->RalinkCounters.TransmittedAMPDUCount.u.LowPart += (TxAggCnt6.field.AggSize14Count / 14);
++
++ pAd->RalinkCounters.TransmittedAMPDUCount.u.LowPart += (TxAggCnt7.field.AggSize15Count / 15);
++ pAd->RalinkCounters.TransmittedAMPDUCount.u.LowPart += (TxAggCnt7.field.AggSize16Count / 16);
++ }
++
++#ifdef DBG_DIAGNOSE
++ {
++ RtmpDiagStruct *pDiag;
++ COUNTER_RALINK *pRalinkCounters;
++ UCHAR ArrayCurIdx, i;
++
++ pDiag = &pAd->DiagStruct;
++ pRalinkCounters = &pAd->RalinkCounters;
++ ArrayCurIdx = pDiag->ArrayCurIdx;
++
++ if (pDiag->inited == 0)
++ {
++ NdisZeroMemory(pDiag, sizeof(struct _RtmpDiagStrcut_));
++ pDiag->ArrayStartIdx = pDiag->ArrayCurIdx = 0;
++ pDiag->inited = 1;
++ }
++ else
++ {
++ // Tx
++ pDiag->TxFailCnt[ArrayCurIdx] = TxStaCnt0.field.TxFailCount;
++ pDiag->TxAggCnt[ArrayCurIdx] = TxAggCnt.field.AggTxCount;
++ pDiag->TxNonAggCnt[ArrayCurIdx] = TxAggCnt.field.NonAggTxCount;
++ pDiag->TxAMPDUCnt[ArrayCurIdx][0] = TxAggCnt0.field.AggSize1Count;
++ pDiag->TxAMPDUCnt[ArrayCurIdx][1] = TxAggCnt0.field.AggSize2Count;
++ pDiag->TxAMPDUCnt[ArrayCurIdx][2] = TxAggCnt1.field.AggSize3Count;
++ pDiag->TxAMPDUCnt[ArrayCurIdx][3] = TxAggCnt1.field.AggSize4Count;
++ pDiag->TxAMPDUCnt[ArrayCurIdx][4] = TxAggCnt2.field.AggSize5Count;
++ pDiag->TxAMPDUCnt[ArrayCurIdx][5] = TxAggCnt2.field.AggSize6Count;
++ pDiag->TxAMPDUCnt[ArrayCurIdx][6] = TxAggCnt3.field.AggSize7Count;
++ pDiag->TxAMPDUCnt[ArrayCurIdx][7] = TxAggCnt3.field.AggSize8Count;
++ pDiag->TxAMPDUCnt[ArrayCurIdx][8] = TxAggCnt4.field.AggSize9Count;
++ pDiag->TxAMPDUCnt[ArrayCurIdx][9] = TxAggCnt4.field.AggSize10Count;
++ pDiag->TxAMPDUCnt[ArrayCurIdx][10] = TxAggCnt5.field.AggSize11Count;
++ pDiag->TxAMPDUCnt[ArrayCurIdx][11] = TxAggCnt5.field.AggSize12Count;
++ pDiag->TxAMPDUCnt[ArrayCurIdx][12] = TxAggCnt6.field.AggSize13Count;
++ pDiag->TxAMPDUCnt[ArrayCurIdx][13] = TxAggCnt6.field.AggSize14Count;
++ pDiag->TxAMPDUCnt[ArrayCurIdx][14] = TxAggCnt7.field.AggSize15Count;
++ pDiag->TxAMPDUCnt[ArrayCurIdx][15] = TxAggCnt7.field.AggSize16Count;
++
++ pDiag->RxCrcErrCnt[ArrayCurIdx] = RxStaCnt0.field.CrcErr;
++
++ INC_RING_INDEX(pDiag->ArrayCurIdx, DIAGNOSE_TIME);
++ ArrayCurIdx = pDiag->ArrayCurIdx;
++ for (i =0; i < 9; i++)
++ {
++ pDiag->TxDescCnt[ArrayCurIdx][i]= 0;
++ pDiag->TxSWQueCnt[ArrayCurIdx][i] =0;
++ pDiag->TxMcsCnt[ArrayCurIdx][i] = 0;
++ pDiag->RxMcsCnt[ArrayCurIdx][i] = 0;
++ }
++ pDiag->TxDataCnt[ArrayCurIdx] = 0;
++ pDiag->TxFailCnt[ArrayCurIdx] = 0;
++ pDiag->RxDataCnt[ArrayCurIdx] = 0;
++ pDiag->RxCrcErrCnt[ArrayCurIdx] = 0;
++// for (i = 9; i < 16; i++)
++ for (i = 9; i < 24; i++) // 3*3
++ {
++ pDiag->TxDescCnt[ArrayCurIdx][i] = 0;
++ pDiag->TxMcsCnt[ArrayCurIdx][i] = 0;
++ pDiag->RxMcsCnt[ArrayCurIdx][i] = 0;
++}
++
++ if (pDiag->ArrayCurIdx == pDiag->ArrayStartIdx)
++ INC_RING_INDEX(pDiag->ArrayStartIdx, DIAGNOSE_TIME);
++ }
++
++ }
++#endif // DBG_DIAGNOSE //
++
++
++}
++
++
++/*
++ ========================================================================
++
++ Routine Description:
++ Reset NIC from error
++
++ Arguments:
++ Adapter Pointer to our adapter
++
++ Return Value:
++ None
++
++ IRQL = PASSIVE_LEVEL
++
++ Note:
++ Reset NIC from error state
++
++ ========================================================================
++*/
++VOID NICResetFromError(
++ IN PRTMP_ADAPTER pAd)
++{
++ // Reset BBP (according to alex, reset ASIC will force reset BBP
++ // Therefore, skip the reset BBP
++ // RTMP_IO_WRITE32(pAd, MAC_CSR1, 0x2);
++
++ RTMP_IO_WRITE32(pAd, MAC_SYS_CTRL, 0x1);
++ // Remove ASIC from reset state
++ RTMP_IO_WRITE32(pAd, MAC_SYS_CTRL, 0x0);
++
++ NICInitializeAdapter(pAd, FALSE);
++ NICInitAsicFromEEPROM(pAd);
++
++ // Switch to current channel, since during reset process, the connection should remains on.
++ AsicSwitchChannel(pAd, pAd->CommonCfg.CentralChannel, FALSE);
++ AsicLockChannel(pAd, pAd->CommonCfg.CentralChannel);
++}
++
++/*
++ ========================================================================
++
++ Routine Description:
++ erase 8051 firmware image in MAC ASIC
++
++ Arguments:
++ Adapter Pointer to our adapter
++
++ IRQL = PASSIVE_LEVEL
++
++ ========================================================================
++*/
++VOID NICEraseFirmware(
++ IN PRTMP_ADAPTER pAd)
++{
++ ULONG i;
++
++ for(i=0; i<MAX_FIRMWARE_IMAGE_SIZE; i+=4)
++ RTMP_IO_WRITE32(pAd, FIRMWARE_IMAGE_BASE + i, 0);
++
++}/* End of NICEraseFirmware */
++
++/*
++ ========================================================================
++
++ Routine Description:
++ Load 8051 firmware RT2561.BIN file into MAC ASIC
++
++ Arguments:
++ Adapter Pointer to our adapter
++
++ Return Value:
++ NDIS_STATUS_SUCCESS firmware image load ok
++ NDIS_STATUS_FAILURE image not found
++
++ IRQL = PASSIVE_LEVEL
++
++ ========================================================================
++*/
++NDIS_STATUS NICLoadFirmware(
++ IN PRTMP_ADAPTER pAd)
++{
++#ifdef BIN_IN_FILE
++#define NICLF_DEFAULT_USE() \
++ flg_default_firm_use = TRUE; \
++ printk("%s - Use default firmware!\n", __FUNCTION__);
++
++ NDIS_STATUS Status = NDIS_STATUS_SUCCESS;
++ PUCHAR src;
++ struct file *srcf;
++ INT retval, orgfsuid, orgfsgid, i;
++ mm_segment_t orgfs;
++ PUCHAR pFirmwareImage;
++ UINT FileLength = 0;
++ UINT32 MacReg;
++ ULONG Index;
++ ULONG firm;
++ BOOLEAN flg_default_firm_use = FALSE;
++
++
++ DBGPRINT(RT_DEBUG_TRACE, ("===> %s\n", __FUNCTION__));
++
++ /* init */
++ pFirmwareImage = NULL;
++ src = RTMP_FIRMWARE_FILE_NAME;
++
++ /* save uid and gid used for filesystem access.
++ set user and group to 0 (root) */
++ orgfsuid = current->fsuid;
++ orgfsgid = current->fsgid;
++ current->fsuid = current->fsgid = 0;
++ orgfs = get_fs();
++ set_fs(KERNEL_DS);
++
++ pAd->FirmwareVersion = (FIRMWARE_MAJOR_VERSION << 8) + \
++ FIRMWARE_MINOR_VERSION;
++
++
++ /* allocate firmware buffer */
++ pFirmwareImage = kmalloc(MAX_FIRMWARE_IMAGE_SIZE, MEM_ALLOC_FLAG);
++ if (pFirmwareImage == NULL)
++ {
++ /* allocate fail, use default firmware array in firmware.h */
++ printk("%s - Allocate memory fail!\n", __FUNCTION__);
++ NICLF_DEFAULT_USE();
++ }
++ else
++ {
++ /* allocate ok! zero the firmware buffer */
++ memset(pFirmwareImage, 0x00, MAX_FIRMWARE_IMAGE_SIZE);
++ } /* End of if */
++
++
++ /* if ok, read firmware file from *.bin file */
++ if (flg_default_firm_use == FALSE)
++ {
++ do
++ {
++ /* open the bin file */
++ srcf = filp_open(src, O_RDONLY, 0);
++
++ if (IS_ERR(srcf))
++ {
++ printk("%s - Error %ld opening %s\n",
++ __FUNCTION__, -PTR_ERR(srcf), src);
++ NICLF_DEFAULT_USE();
++ break;
++ } /* End of if */
++
++ /* the object must have a read method */
++ if ((srcf->f_op == NULL) || (srcf->f_op->read == NULL))
++ {
++ printk("%s - %s does not have a write method\n", __FUNCTION__, src);
++ NICLF_DEFAULT_USE();
++ break;
++ } /* End of if */
++
++ /* read the firmware from the file *.bin */
++ FileLength = srcf->f_op->read(srcf,
++ pFirmwareImage,
++ MAX_FIRMWARE_IMAGE_SIZE,
++ &srcf->f_pos);
++
++ if (FileLength != MAX_FIRMWARE_IMAGE_SIZE)
++ {
++ printk("%s: error file length (=%d) in RT2860AP.BIN\n",
++ __FUNCTION__, FileLength);
++ NICLF_DEFAULT_USE();
++ break;
++ }
++ else
++ {
++ PUCHAR ptr = pFirmwareImage;
++ USHORT crc = 0xffff;
++
++
++ /* calculate firmware CRC */
++ for(i=0; i<(MAX_FIRMWARE_IMAGE_SIZE-2); i++, ptr++)
++ crc = ByteCRC16(BitReverse(*ptr), crc);
++ /* End of for */
++
++ if ((pFirmwareImage[MAX_FIRMWARE_IMAGE_SIZE-2] != \
++ (UCHAR)BitReverse((UCHAR)(crc>>8))) ||
++ (pFirmwareImage[MAX_FIRMWARE_IMAGE_SIZE-1] != \
++ (UCHAR)BitReverse((UCHAR)crc)))
++ {
++ /* CRC fail */
++ printk("%s: CRC = 0x%02x 0x%02x "
++ "error, should be 0x%02x 0x%02x\n",
++ __FUNCTION__,
++ pFirmwareImage[MAX_FIRMWARE_IMAGE_SIZE-2],
++ pFirmwareImage[MAX_FIRMWARE_IMAGE_SIZE-1],
++ (UCHAR)(crc>>8), (UCHAR)(crc));
++ NICLF_DEFAULT_USE();
++ break;
++ }
++ else
++ {
++ /* firmware is ok */
++ pAd->FirmwareVersion = \
++ (pFirmwareImage[MAX_FIRMWARE_IMAGE_SIZE-4] << 8) +
++ pFirmwareImage[MAX_FIRMWARE_IMAGE_SIZE-3];
++
++ /* check if firmware version of the file is too old */
++ if ((pAd->FirmwareVersion) < \
++ ((FIRMWARE_MAJOR_VERSION << 8) +
++ FIRMWARE_MINOR_VERSION))
++ {
++ printk("%s: firmware version too old!\n", __FUNCTION__);
++ NICLF_DEFAULT_USE();
++ break;
++ } /* End of if */
++ } /* End of if */
++
++ DBGPRINT(RT_DEBUG_TRACE,
++ ("NICLoadFirmware: CRC ok, ver=%d.%d\n",
++ pFirmwareImage[MAX_FIRMWARE_IMAGE_SIZE-4],
++ pFirmwareImage[MAX_FIRMWARE_IMAGE_SIZE-3]));
++ } /* End of if (FileLength == MAX_FIRMWARE_IMAGE_SIZE) */
++ break;
++ } while(TRUE);
++
++ /* close firmware file */
++ if (IS_ERR(srcf))
++ ;
++ else
++ {
++ retval = filp_close(srcf, NULL);
++ if (retval)
++ {
++ DBGPRINT(RT_DEBUG_ERROR,
++ ("--> Error %d closing %s\n", -retval, src));
++ } /* End of if */
++ } /* End of if */
++ } /* End of if */
++
++
++ /* write firmware to ASIC */
++ if (flg_default_firm_use == TRUE)
++ {
++ /* use default fimeware, free allocated buffer */
++ if (pFirmwareImage != NULL)
++ kfree(pFirmwareImage);
++ /* End of if */
++
++ /* use default *.bin array */
++ pFirmwareImage = FirmwareImage;
++ FileLength = sizeof(FirmwareImage);
++ } /* End of if */
++
++ /* enable Host program ram write selection */
++ RTMP_IO_WRITE32(pAd, PBF_SYS_CTRL, 0x10000);
++
++ for(i=0; i<FileLength; i+=4)
++ {
++ firm = pFirmwareImage[i] +
++ (pFirmwareImage[i+3] << 24) +
++ (pFirmwareImage[i+2] << 16) +
++ (pFirmwareImage[i+1] << 8);
++
++ RTMP_IO_WRITE32(pAd, FIRMWARE_IMAGE_BASE + i, firm);
++ } /* End of for */
++
++ RTMP_IO_WRITE32(pAd, PBF_SYS_CTRL, 0x00000);
++ RTMP_IO_WRITE32(pAd, PBF_SYS_CTRL, 0x00001);
++
++ /* initialize BBP R/W access agent */
++ RTMP_IO_WRITE32(pAd, H2M_BBP_AGENT, 0);
++ RTMP_IO_WRITE32(pAd, H2M_MAILBOX_CSR, 0);
++
++ if (flg_default_firm_use == FALSE)
++ {
++ /* use file firmware, free allocated buffer */
++ if (pFirmwareImage != NULL)
++ kfree(pFirmwareImage);
++ /* End of if */
++ } /* End of if */
++
++ set_fs(orgfs);
++ current->fsuid = orgfsuid;
++ current->fsgid = orgfsgid;
++#else
++
++ NDIS_STATUS Status = NDIS_STATUS_SUCCESS;
++ PUCHAR pFirmwareImage;
++ ULONG FileLength, Index;
++ //ULONG firm;
++ UINT32 MacReg = 0;
++#ifdef RT2870
++ UINT32 Version = (pAd->MACVersion >> 16);
++#endif // RT2870 //
++
++ pFirmwareImage = FirmwareImage;
++ FileLength = sizeof(FirmwareImage);
++#ifdef RT2870
++ // New 8k byte firmware size for RT3071/RT3072
++ //printk("Usb Chip\n");
++ if (FIRMWAREIMAGE_LENGTH == FIRMWAREIMAGE_MAX_LENGTH)
++ //The firmware image consists of two parts. One is the origianl and the other is the new.
++ //Use Second Part
++ {
++ if ((Version != 0x2860) && (Version != 0x2872) && (Version != 0x3070))
++ { // Use Firmware V2.
++ //printk("KH:Use New Version,part2\n");
++ pFirmwareImage = (PUCHAR)&FirmwareImage[FIRMWAREIMAGEV1_LENGTH];
++ FileLength = FIRMWAREIMAGEV2_LENGTH;
++ }
++ else
++ {
++ //printk("KH:Use New Version,part1\n");
++ pFirmwareImage = FirmwareImage;
++ FileLength = FIRMWAREIMAGEV1_LENGTH;
++ }
++ }
++ else
++ {
++ DBGPRINT(RT_DEBUG_ERROR, ("KH: bin file should be 8KB.\n"));
++ Status = NDIS_STATUS_FAILURE;
++ }
++
++#endif // RT2870 //
++
++#if 0
++ /* enable Host program ram write selection */
++ RT28XX_FIRMUD_INIT(pAd);
++
++ for(i=0; i<FileLength; i+=4)
++ {
++ firm = pFirmwareImage[i] +
++ (pFirmwareImage[i+3] << 24) +
++ (pFirmwareImage[i+2] << 16) +
++ (pFirmwareImage[i+1] << 8);
++
++ RTMP_IO_WRITE32(pAd, FIRMWARE_IMAGE_BASE + i, firm);
++ } /* End of for */
++
++ RT28XX_FIRMUD_END(pAd);
++#else
++ RT28XX_WRITE_FIRMWARE(pAd, pFirmwareImage, FileLength);
++#endif
++
++#endif
++
++ /* check if MCU is ready */
++ Index = 0;
++ do
++ {
++ RTMP_IO_READ32(pAd, PBF_SYS_CTRL, &MacReg);
++
++ if (MacReg & 0x80)
++ break;
++
++ RTMPusecDelay(1000);
++ } while (Index++ < 1000);
++
++ if (Index >= 1000)
++ {
++ Status = NDIS_STATUS_FAILURE;
++ DBGPRINT(RT_DEBUG_ERROR, ("NICLoadFirmware: MCU is not ready\n\n\n"));
++ } /* End of if */
++
++#if 0
++ DBGPRINT(RT_DEBUG_TRACE,
++ ("<=== %s (src=%s, status=%d)\n", __FUNCTION__, src, Status));
++#else
++ DBGPRINT(RT_DEBUG_TRACE,
++ ("<=== %s (status=%d)\n", __FUNCTION__, Status));
++#endif
++ return Status;
++} /* End of NICLoadFirmware */
++
++
++/*
++ ========================================================================
++
++ Routine Description:
++ Load Tx rate switching parameters
++
++ Arguments:
++ Adapter Pointer to our adapter
++
++ Return Value:
++ NDIS_STATUS_SUCCESS firmware image load ok
++ NDIS_STATUS_FAILURE image not found
++
++ IRQL = PASSIVE_LEVEL
++
++ Rate Table Format:
++ 1. (B0: Valid Item number) (B1:Initial item from zero)
++ 2. Item Number(Dec) Mode(Hex) Current MCS(Dec) TrainUp(Dec) TrainDown(Dec)
++
++ ========================================================================
++*/
++NDIS_STATUS NICLoadRateSwitchingParams(
++ IN PRTMP_ADAPTER pAd)
++{
++#if 0
++ NDIS_STATUS Status;
++
++ NDIS_HANDLE FileHandle;
++ UINT FileLength = 0, i, j;
++ PUCHAR pFirmwareImage;
++ NDIS_STRING FileName;
++ NDIS_PHYSICAL_ADDRESS HighestAcceptableMax = NDIS_PHYSICAL_ADDRESS_CONST(-1, -1);
++
++ DBGPRINT(RT_DEBUG_TRACE,("===> NICLoadRateSwitchingParams \n"));
++ pAd->CommonCfg.TxRateTableSize = 0;
++
++ if ((pAd->DeviceID == NIC2860_PCI_DEVICE_ID) || (pAd->DeviceID == NIC2860_PCIe_DEVICE_ID))
++ {
++ NdisInitializeString(&FileName,"rate.bin");
++ DBGPRINT(RT_DEBUG_TRACE, ("NICLoadRateSwitchingParams: load file - rate.bin for tx rate switch \n"));
++ }
++ else
++ {
++ DBGPRINT_ERR(("NICLoadRateSwitchingParams: wrong DeviceID = 0x%04x, can't find Tx rate switch parameters file\n", pAd->DeviceID));
++ return NDIS_STATUS_SUCCESS;
++ }
++ NdisOpenFile(&Status, &FileHandle, &FileLength, &FileName, HighestAcceptableMax);
++ NdisFreeString(FileName);
++
++ if (Status != NDIS_STATUS_SUCCESS)
++ {
++ DBGPRINT(RT_DEBUG_ERROR, ("NICLoadRateSwitchingParams: NdisOpenFile() failed, used RateSwitchTable instead\n"));
++ return NDIS_STATUS_SUCCESS;
++ }
++
++ if ((FileLength == 0) || (FileLength > (MAX_STEP_OF_TX_RATE_SWITCH+1)*16))
++ {
++ DBGPRINT(RT_DEBUG_ERROR, ("NICLoadRateSwitchingParams: file size is not reasonable, used RateSwitchTable instead\n"));
++
++ NdisCloseFile(FileHandle);
++ return NDIS_STATUS_SUCCESS;
++ }
++ else
++ {
++ //
++ // NDIS_STATUS_SUCCESS means
++ // The handle at FileHandle is valid for a subsequent call to NdisMapFile.
++ //
++ NdisMapFile(&Status, &pFirmwareImage, FileHandle);
++ DBGPRINT(RT_DEBUG_TRACE, ("NdisMapFile FileLength=%d\n", FileLength));
++ }
++
++ for (i=0, j=0; i<FileLength; i++)
++ {
++ if ((i%16) <= 4) // trim reserved field
++ {
++ if (i%16 == 1) // deal with DEC and HEX, only row0 is Hex, others are Dec
++ {
++ RateSwitchTable[j] = *(pFirmwareImage + i);
++ }
++ else
++ {
++ RateSwitchTable[j] = (*(pFirmwareImage + i)>>4) * 10 + (*(pFirmwareImage + i) & 0x0F);
++ }
++
++ j++;
++ }
++ }
++
++ pAd->CommonCfg.TxRateTableSize = RateSwitchTable[0]; // backup table size
++
++ if (Status == NDIS_STATUS_SUCCESS)
++ {
++ NdisUnmapFile(FileHandle);
++ NdisCloseFile(FileHandle);
++ }
++
++ DBGPRINT(RT_DEBUG_TRACE,("<=== NICLoadRateSwitchingParams(Valid TxRateTable item number=%d)\n", pAd->CommonCfg.TxRateTableSize));
++#endif
++ return NDIS_STATUS_SUCCESS;
++}
++
++/*
++ ========================================================================
++
++ Routine Description:
++ if pSrc1 all zero with length Length, return 0.
++ If not all zero, return 1
++
++ Arguments:
++ pSrc1
++
++ Return Value:
++ 1: not all zero
++ 0: all zero
++
++ IRQL = DISPATCH_LEVEL
++
++ Note:
++
++ ========================================================================
++*/
++ULONG RTMPNotAllZero(
++ IN PVOID pSrc1,
++ IN ULONG Length)
++{
++ PUCHAR pMem1;
++ ULONG Index = 0;
++
++ pMem1 = (PUCHAR) pSrc1;
++
++ for (Index = 0; Index < Length; Index++)
++ {
++ if (pMem1[Index] != 0x0)
++ {
++ break;
++ }
++ }
++
++ if (Index == Length)
++ {
++ return (0);
++ }
++ else
++ {
++ return (1);
++ }
++}
++
++/*
++ ========================================================================
++
++ Routine Description:
++ Compare two memory block
++
++ Arguments:
++ pSrc1 Pointer to first memory address
++ pSrc2 Pointer to second memory address
++
++ Return Value:
++ 0: memory is equal
++ 1: pSrc1 memory is larger
++ 2: pSrc2 memory is larger
++
++ IRQL = DISPATCH_LEVEL
++
++ Note:
++
++ ========================================================================
++*/
++ULONG RTMPCompareMemory(
++ IN PVOID pSrc1,
++ IN PVOID pSrc2,
++ IN ULONG Length)
++{
++ PUCHAR pMem1;
++ PUCHAR pMem2;
++ ULONG Index = 0;
++
++ pMem1 = (PUCHAR) pSrc1;
++ pMem2 = (PUCHAR) pSrc2;
++
++ for (Index = 0; Index < Length; Index++)
++ {
++ if (pMem1[Index] > pMem2[Index])
++ return (1);
++ else if (pMem1[Index] < pMem2[Index])
++ return (2);
++ }
++
++ // Equal
++ return (0);
++}
++
++/*
++ ========================================================================
++
++ Routine Description:
++ Zero out memory block
++
++ Arguments:
++ pSrc1 Pointer to memory address
++ Length Size
++
++ Return Value:
++ None
++
++ IRQL = PASSIVE_LEVEL
++ IRQL = DISPATCH_LEVEL
++
++ Note:
++
++ ========================================================================
++*/
++VOID RTMPZeroMemory(
++ IN PVOID pSrc,
++ IN ULONG Length)
++{
++ PUCHAR pMem;
++ ULONG Index = 0;
++
++ pMem = (PUCHAR) pSrc;
++
++ for (Index = 0; Index < Length; Index++)
++ {
++ pMem[Index] = 0x00;
++ }
++}
++
++VOID RTMPFillMemory(
++ IN PVOID pSrc,
++ IN ULONG Length,
++ IN UCHAR Fill)
++{
++ PUCHAR pMem;
++ ULONG Index = 0;
++
++ pMem = (PUCHAR) pSrc;
++
++ for (Index = 0; Index < Length; Index++)
++ {
++ pMem[Index] = Fill;
++ }
++}
++
++/*
++ ========================================================================
++
++ Routine Description:
++ Copy data from memory block 1 to memory block 2
++
++ Arguments:
++ pDest Pointer to destination memory address
++ pSrc Pointer to source memory address
++ Length Copy size
++
++ Return Value:
++ None
++
++ IRQL = PASSIVE_LEVEL
++ IRQL = DISPATCH_LEVEL
++
++ Note:
++
++ ========================================================================
++*/
++VOID RTMPMoveMemory(
++ OUT PVOID pDest,
++ IN PVOID pSrc,
++ IN ULONG Length)
++{
++ PUCHAR pMem1;
++ PUCHAR pMem2;
++ UINT Index;
++
++ ASSERT((Length==0) || (pDest && pSrc));
++
++ pMem1 = (PUCHAR) pDest;
++ pMem2 = (PUCHAR) pSrc;
++
++ for (Index = 0; Index < Length; Index++)
++ {
++ pMem1[Index] = pMem2[Index];
++ }
++}
++
++/*
++ ========================================================================
++
++ Routine Description:
++ Initialize port configuration structure
++
++ Arguments:
++ Adapter Pointer to our adapter
++
++ Return Value:
++ None
++
++ IRQL = PASSIVE_LEVEL
++
++ Note:
++
++ ========================================================================
++*/
++VOID UserCfgInit(
++ IN PRTMP_ADAPTER pAd)
++{
++// EDCA_PARM DefaultEdcaParm;
++ UINT key_index, bss_index;
++
++ DBGPRINT(RT_DEBUG_TRACE, ("--> UserCfgInit\n"));
++
++ //
++ // part I. intialize common configuration
++ //
++#ifdef RT2870
++ pAd->BulkOutReq = 0;
++
++ pAd->BulkOutComplete = 0;
++ pAd->BulkOutCompleteOther = 0;
++ pAd->BulkOutCompleteCancel = 0;
++ pAd->BulkInReq = 0;
++ pAd->BulkInComplete = 0;
++ pAd->BulkInCompleteFail = 0;
++
++ //pAd->QuickTimerP = 100;
++ //pAd->TurnAggrBulkInCount = 0;
++ pAd->bUsbTxBulkAggre = 0;
++
++ // init as unsed value to ensure driver will set to MCU once.
++ pAd->LedIndicatorStregth = 0xFF;
++
++ pAd->CommonCfg.MaxPktOneTxBulk = 2;
++ pAd->CommonCfg.TxBulkFactor = 1;
++ pAd->CommonCfg.RxBulkFactor =1;
++
++ pAd->CommonCfg.TxPower = 100; //mW
++
++ NdisZeroMemory(&pAd->CommonCfg.IOTestParm, sizeof(pAd->CommonCfg.IOTestParm));
++#endif // RT2870 //
++
++ for(key_index=0; key_index<SHARE_KEY_NUM; key_index++)
++ {
++ for(bss_index = 0; bss_index < MAX_MBSSID_NUM; bss_index++)
++ {
++ pAd->SharedKey[bss_index][key_index].KeyLen = 0;
++ pAd->SharedKey[bss_index][key_index].CipherAlg = CIPHER_NONE;
++ }
++ }
++
++ pAd->Antenna.word = 0;
++ pAd->CommonCfg.BBPCurrentBW = BW_20;
++
++ pAd->LedCntl.word = 0;
++
++ pAd->bAutoTxAgcA = FALSE; // Default is OFF
++ pAd->bAutoTxAgcG = FALSE; // Default is OFF
++ pAd->RfIcType = RFIC_2820;
++
++ // Init timer for reset complete event
++ pAd->CommonCfg.CentralChannel = 1;
++ pAd->bForcePrintTX = FALSE;
++ pAd->bForcePrintRX = FALSE;
++ pAd->bStaFifoTest = FALSE;
++ pAd->bProtectionTest = FALSE;
++ pAd->bHCCATest = FALSE;
++ pAd->bGenOneHCCA = FALSE;
++ pAd->CommonCfg.Dsifs = 10; // in units of usec
++ pAd->CommonCfg.TxPower = 100; //mW
++ pAd->CommonCfg.TxPowerPercentage = 0xffffffff; // AUTO
++ pAd->CommonCfg.TxPowerDefault = 0xffffffff; // AUTO
++ pAd->CommonCfg.TxPreamble = Rt802_11PreambleAuto; // use Long preamble on TX by defaut
++ pAd->CommonCfg.bUseZeroToDisableFragment = FALSE;
++ pAd->CommonCfg.RtsThreshold = 2347;
++ pAd->CommonCfg.FragmentThreshold = 2346;
++ pAd->CommonCfg.UseBGProtection = 0; // 0: AUTO
++ pAd->CommonCfg.bEnableTxBurst = TRUE; //0;
++ pAd->CommonCfg.PhyMode = 0xff; // unknown
++ pAd->CommonCfg.BandState = UNKNOWN_BAND;
++ pAd->CommonCfg.RadarDetect.CSPeriod = 10;
++ pAd->CommonCfg.RadarDetect.CSCount = 0;
++ pAd->CommonCfg.RadarDetect.RDMode = RD_NORMAL_MODE;
++ pAd->CommonCfg.RadarDetect.ChMovingTime = 65;
++ pAd->CommonCfg.RadarDetect.LongPulseRadarTh = 3;
++ pAd->CommonCfg.bAPSDCapable = FALSE;
++ pAd->CommonCfg.bNeedSendTriggerFrame = FALSE;
++ pAd->CommonCfg.TriggerTimerCount = 0;
++ pAd->CommonCfg.bAPSDForcePowerSave = FALSE;
++ pAd->CommonCfg.bCountryFlag = FALSE;
++ pAd->CommonCfg.TxStream = 0;
++ pAd->CommonCfg.RxStream = 0;
++
++ NdisZeroMemory(&pAd->BeaconTxWI, sizeof(pAd->BeaconTxWI));
++
++#ifdef DOT11_N_SUPPORT
++ NdisZeroMemory(&pAd->CommonCfg.HtCapability, sizeof(pAd->CommonCfg.HtCapability));
++ pAd->HTCEnable = FALSE;
++ pAd->bBroadComHT = FALSE;
++ pAd->CommonCfg.bRdg = FALSE;
++
++#ifdef DOT11N_DRAFT3
++ pAd->CommonCfg.Dot11OBssScanPassiveDwell = dot11OBSSScanPassiveDwell; // Unit : TU. 5~1000
++ pAd->CommonCfg.Dot11OBssScanActiveDwell = dot11OBSSScanActiveDwell; // Unit : TU. 10~1000
++ pAd->CommonCfg.Dot11BssWidthTriggerScanInt = dot11BSSWidthTriggerScanInterval; // Unit : Second
++ pAd->CommonCfg.Dot11OBssScanPassiveTotalPerChannel = dot11OBSSScanPassiveTotalPerChannel; // Unit : TU. 200~10000
++ pAd->CommonCfg.Dot11OBssScanActiveTotalPerChannel = dot11OBSSScanActiveTotalPerChannel; // Unit : TU. 20~10000
++ pAd->CommonCfg.Dot11BssWidthChanTranDelayFactor = dot11BSSWidthChannelTransactionDelayFactor;
++ pAd->CommonCfg.Dot11OBssScanActivityThre = dot11BSSScanActivityThreshold; // Unit : percentage
++ pAd->CommonCfg.Dot11BssWidthChanTranDelay = (pAd->CommonCfg.Dot11BssWidthTriggerScanInt * pAd->CommonCfg.Dot11BssWidthChanTranDelayFactor);
++#endif // DOT11N_DRAFT3 //
++
++ NdisZeroMemory(&pAd->CommonCfg.AddHTInfo, sizeof(pAd->CommonCfg.AddHTInfo));
++ pAd->CommonCfg.BACapability.field.MMPSmode = MMPS_ENABLE;
++ pAd->CommonCfg.BACapability.field.MpduDensity = 0;
++ pAd->CommonCfg.BACapability.field.Policy = IMMED_BA;
++ pAd->CommonCfg.BACapability.field.RxBAWinLimit = 64; //32;
++ pAd->CommonCfg.BACapability.field.TxBAWinLimit = 64; //32;
++ DBGPRINT(RT_DEBUG_TRACE, ("--> UserCfgInit. BACapability = 0x%x\n", pAd->CommonCfg.BACapability.word));
++
++ pAd->CommonCfg.BACapability.field.AutoBA = FALSE;
++ BATableInit(pAd, &pAd->BATable);
++
++ pAd->CommonCfg.bExtChannelSwitchAnnouncement = 1;
++ pAd->CommonCfg.bHTProtect = 1;
++ pAd->CommonCfg.bMIMOPSEnable = TRUE;
++ pAd->CommonCfg.bBADecline = FALSE;
++ pAd->CommonCfg.bDisableReordering = FALSE;
++
++ pAd->CommonCfg.TxBASize = 7;
++
++ pAd->CommonCfg.REGBACapability.word = pAd->CommonCfg.BACapability.word;
++#endif // DOT11_N_SUPPORT //
++
++ //pAd->CommonCfg.HTPhyMode.field.BW = BW_20;
++ //pAd->CommonCfg.HTPhyMode.field.MCS = MCS_AUTO;
++ //pAd->CommonCfg.HTPhyMode.field.ShortGI = GI_800;
++ //pAd->CommonCfg.HTPhyMode.field.STBC = STBC_NONE;
++ pAd->CommonCfg.TxRate = RATE_6;
++
++ pAd->CommonCfg.MlmeTransmit.field.MCS = MCS_RATE_6;
++ pAd->CommonCfg.MlmeTransmit.field.BW = BW_20;
++ pAd->CommonCfg.MlmeTransmit.field.MODE = MODE_OFDM;
++
++ pAd->CommonCfg.BeaconPeriod = 100; // in mSec
++
++ //
++ // part II. intialize STA specific configuration
++ //
++#ifdef CONFIG_STA_SUPPORT
++ IF_DEV_CONFIG_OPMODE_ON_STA(pAd)
++ {
++ RX_FILTER_SET_FLAG(pAd, fRX_FILTER_ACCEPT_DIRECT);
++ RX_FILTER_CLEAR_FLAG(pAd, fRX_FILTER_ACCEPT_MULTICAST);
++ RX_FILTER_SET_FLAG(pAd, fRX_FILTER_ACCEPT_BROADCAST);
++ RX_FILTER_SET_FLAG(pAd, fRX_FILTER_ACCEPT_ALL_MULTICAST);
++
++ pAd->StaCfg.Psm = PWR_ACTIVE;
++
++ pAd->StaCfg.OrigWepStatus = Ndis802_11EncryptionDisabled;
++ pAd->StaCfg.PairCipher = Ndis802_11EncryptionDisabled;
++ pAd->StaCfg.GroupCipher = Ndis802_11EncryptionDisabled;
++ pAd->StaCfg.bMixCipher = FALSE;
++ pAd->StaCfg.DefaultKeyId = 0;
++
++ // 802.1x port control
++ pAd->StaCfg.PrivacyFilter = Ndis802_11PrivFilter8021xWEP;
++ pAd->StaCfg.PortSecured = WPA_802_1X_PORT_NOT_SECURED;
++ pAd->StaCfg.LastMicErrorTime = 0;
++ pAd->StaCfg.MicErrCnt = 0;
++ pAd->StaCfg.bBlockAssoc = FALSE;
++ pAd->StaCfg.WpaState = SS_NOTUSE;
++
++ pAd->CommonCfg.NdisRadioStateOff = FALSE; // New to support microsoft disable radio with OID command
++
++ pAd->StaCfg.RssiTrigger = 0;
++ NdisZeroMemory(&pAd->StaCfg.RssiSample, sizeof(RSSI_SAMPLE));
++ pAd->StaCfg.RssiTriggerMode = RSSI_TRIGGERED_UPON_BELOW_THRESHOLD;
++ pAd->StaCfg.AtimWin = 0;
++ pAd->StaCfg.DefaultListenCount = 3;//default listen count;
++ pAd->StaCfg.BssType = BSS_INFRA; // BSS_INFRA or BSS_ADHOC or BSS_MONITOR
++ pAd->StaCfg.bScanReqIsFromWebUI = FALSE;
++ OPSTATUS_CLEAR_FLAG(pAd, fOP_STATUS_DOZE);
++ OPSTATUS_CLEAR_FLAG(pAd, fOP_STATUS_WAKEUP_NOW);
++
++ pAd->StaCfg.bAutoTxRateSwitch = TRUE;
++ pAd->StaCfg.DesiredTransmitSetting.field.MCS = MCS_AUTO;
++ }
++
++#ifdef EXT_BUILD_CHANNEL_LIST
++ pAd->StaCfg.IEEE80211dClientMode = Rt802_11_D_None;
++#endif // EXT_BUILD_CHANNEL_LIST //
++#endif // CONFIG_STA_SUPPORT //
++
++ // global variables mXXXX used in MAC protocol state machines
++ OPSTATUS_SET_FLAG(pAd, fOP_STATUS_RECEIVE_DTIM);
++ OPSTATUS_CLEAR_FLAG(pAd, fOP_STATUS_ADHOC_ON);
++ OPSTATUS_CLEAR_FLAG(pAd, fOP_STATUS_INFRA_ON);
++
++ // PHY specification
++ pAd->CommonCfg.PhyMode = PHY_11BG_MIXED; // default PHY mode
++ OPSTATUS_CLEAR_FLAG(pAd, fOP_STATUS_SHORT_PREAMBLE_INUSED); // CCK use LONG preamble
++
++#ifdef CONFIG_STA_SUPPORT
++ IF_DEV_CONFIG_OPMODE_ON_STA(pAd)
++ {
++ // user desired power mode
++ pAd->StaCfg.WindowsPowerMode = Ndis802_11PowerModeCAM;
++ pAd->StaCfg.WindowsBatteryPowerMode = Ndis802_11PowerModeCAM;
++ pAd->StaCfg.bWindowsACCAMEnable = FALSE;
++
++#ifdef LEAP_SUPPORT
++ // CCX v1.0 releated init value
++ RTMPInitTimer(pAd, &pAd->StaCfg.LeapAuthTimer, GET_TIMER_FUNCTION(LeapAuthTimeout), pAd, FALSE);
++ pAd->StaCfg.LeapAuthMode = CISCO_AuthModeLEAPNone;
++ pAd->StaCfg.bCkipOn = FALSE;
++#endif // LEAP_SUPPORT //
++
++ RTMPInitTimer(pAd, &pAd->StaCfg.StaQuickResponeForRateUpTimer, GET_TIMER_FUNCTION(StaQuickResponeForRateUpExec), pAd, FALSE);
++ pAd->StaCfg.StaQuickResponeForRateUpTimerRunning = FALSE;
++
++ // Patch for Ndtest
++ pAd->StaCfg.ScanCnt = 0;
++
++ // CCX 2.0 control flag init
++ pAd->StaCfg.CCXEnable = FALSE;
++ pAd->StaCfg.CCXReqType = MSRN_TYPE_UNUSED;
++ pAd->StaCfg.CCXQosECWMin = 4;
++ pAd->StaCfg.CCXQosECWMax = 10;
++
++ pAd->StaCfg.bHwRadio = TRUE; // Default Hardware Radio status is On
++ pAd->StaCfg.bSwRadio = TRUE; // Default Software Radio status is On
++ pAd->StaCfg.bRadio = TRUE; // bHwRadio && bSwRadio
++ pAd->StaCfg.bHardwareRadio = FALSE; // Default is OFF
++ pAd->StaCfg.bShowHiddenSSID = FALSE; // Default no show
++
++ // Nitro mode control
++ pAd->StaCfg.bAutoReconnect = TRUE;
++
++ // Save the init time as last scan time, the system should do scan after 2 seconds.
++ // This patch is for driver wake up from standby mode, system will do scan right away.
++ pAd->StaCfg.LastScanTime = 0;
++ NdisZeroMemory(pAd->nickname, IW_ESSID_MAX_SIZE+1);
++ sprintf(pAd->nickname, "%s", STA_NIC_DEVICE_NAME);
++ RTMPInitTimer(pAd, &pAd->StaCfg.WpaDisassocAndBlockAssocTimer, GET_TIMER_FUNCTION(WpaDisassocApAndBlockAssoc), pAd, FALSE);
++#ifdef WPA_SUPPLICANT_SUPPORT
++ pAd->StaCfg.IEEE8021X = FALSE;
++ pAd->StaCfg.IEEE8021x_required_keys = FALSE;
++ pAd->StaCfg.WpaSupplicantUP = WPA_SUPPLICANT_DISABLE;
++#ifdef NATIVE_WPA_SUPPLICANT_SUPPORT
++ pAd->StaCfg.WpaSupplicantUP = WPA_SUPPLICANT_ENABLE;
++#endif // NATIVE_WPA_SUPPLICANT_SUPPORT //
++#endif // WPA_SUPPLICANT_SUPPORT //
++
++ }
++#endif // CONFIG_STA_SUPPORT //
++
++ // Default for extra information is not valid
++ pAd->ExtraInfo = EXTRA_INFO_CLEAR;
++
++ // Default Config change flag
++ pAd->bConfigChanged = FALSE;
++
++ //
++ // part III. AP configurations
++ //
++
++
++ //
++ // part IV. others
++ //
++ // dynamic BBP R66:sensibity tuning to overcome background noise
++ pAd->BbpTuning.bEnable = TRUE;
++ pAd->BbpTuning.FalseCcaLowerThreshold = 100;
++ pAd->BbpTuning.FalseCcaUpperThreshold = 512;
++ pAd->BbpTuning.R66Delta = 4;
++ pAd->Mlme.bEnableAutoAntennaCheck = TRUE;
++
++ //
++ // Also initial R66CurrentValue, RTUSBResumeMsduTransmission might use this value.
++ // if not initial this value, the default value will be 0.
++ //
++ pAd->BbpTuning.R66CurrentValue = 0x38;
++
++ pAd->Bbp94 = BBPR94_DEFAULT;
++ pAd->BbpForCCK = FALSE;
++
++ // Default is FALSE for test bit 1
++ //pAd->bTest1 = FALSE;
++
++ // initialize MAC table and allocate spin lock
++ NdisZeroMemory(&pAd->MacTab, sizeof(MAC_TABLE));
++ InitializeQueueHeader(&pAd->MacTab.McastPsQueue);
++ NdisAllocateSpinLock(&pAd->MacTabLock);
++
++ //RTMPInitTimer(pAd, &pAd->RECBATimer, RECBATimerTimeout, pAd, TRUE);
++ //RTMPSetTimer(&pAd->RECBATimer, REORDER_EXEC_INTV);
++
++#ifdef RALINK_ATE
++ NdisZeroMemory(&pAd->ate, sizeof(ATE_INFO));
++ pAd->ate.Mode = ATE_STOP;
++ pAd->ate.TxCount = 200;/* to exceed TX_RING_SIZE ... */
++ pAd->ate.TxLength = 1024;
++ pAd->ate.TxWI.ShortGI = 0;// LONG GI : 800 ns
++ pAd->ate.TxWI.PHYMODE = MODE_CCK;
++ pAd->ate.TxWI.MCS = 3;
++ pAd->ate.TxWI.BW = BW_20;
++ pAd->ate.Channel = 1;
++ pAd->ate.QID = QID_AC_BE;
++ pAd->ate.Addr1[0] = 0x00;
++ pAd->ate.Addr1[1] = 0x11;
++ pAd->ate.Addr1[2] = 0x22;
++ pAd->ate.Addr1[3] = 0xAA;
++ pAd->ate.Addr1[4] = 0xBB;
++ pAd->ate.Addr1[5] = 0xCC;
++ NdisMoveMemory(pAd->ate.Addr2, pAd->ate.Addr1, ETH_LENGTH_OF_ADDRESS);
++ NdisMoveMemory(pAd->ate.Addr3, pAd->ate.Addr1, ETH_LENGTH_OF_ADDRESS);
++ pAd->ate.bRxFer = 0;
++ pAd->ate.bQATxStart = FALSE;
++ pAd->ate.bQARxStart = FALSE;
++#ifdef RALINK_28xx_QA
++ //pAd->ate.Repeat = 0;
++ pAd->ate.TxStatus = 0;
++ pAd->ate.AtePid = THREAD_PID_INIT_VALUE;
++#endif // RALINK_28xx_QA //
++#endif // RALINK_ATE //
++
++
++ pAd->CommonCfg.bWiFiTest = FALSE;
++
++
++ DBGPRINT(RT_DEBUG_TRACE, ("<-- UserCfgInit\n"));
++}
++
++// IRQL = PASSIVE_LEVEL
++UCHAR BtoH(char ch)
++{
++ if (ch >= '0' && ch <= '9') return (ch - '0'); // Handle numerals
++ if (ch >= 'A' && ch <= 'F') return (ch - 'A' + 0xA); // Handle capitol hex digits
++ if (ch >= 'a' && ch <= 'f') return (ch - 'a' + 0xA); // Handle small hex digits
++ return(255);
++}
++
++//
++// FUNCTION: AtoH(char *, UCHAR *, int)
++//
++// PURPOSE: Converts ascii string to network order hex
++//
++// PARAMETERS:
++// src - pointer to input ascii string
++// dest - pointer to output hex
++// destlen - size of dest
++//
++// COMMENTS:
++//
++// 2 ascii bytes make a hex byte so must put 1st ascii byte of pair
++// into upper nibble and 2nd ascii byte of pair into lower nibble.
++//
++// IRQL = PASSIVE_LEVEL
++
++void AtoH(char * src, UCHAR * dest, int destlen)
++{
++ char * srcptr;
++ PUCHAR destTemp;
++
++ srcptr = src;
++ destTemp = (PUCHAR) dest;
++
++ while(destlen--)
++ {
++ *destTemp = BtoH(*srcptr++) << 4; // Put 1st ascii byte in upper nibble.
++ *destTemp += BtoH(*srcptr++); // Add 2nd ascii byte to above.
++ destTemp++;
++ }
++}
++
++VOID RTMPPatchMacBbpBug(
++ IN PRTMP_ADAPTER pAd)
++{
++ ULONG Index;
++
++ // Initialize BBP register to default value
++ for (Index = 0; Index < NUM_BBP_REG_PARMS; Index++)
++ {
++ RTMP_BBP_IO_WRITE8_BY_REG_ID(pAd, BBPRegTable[Index].Register, (UCHAR)BBPRegTable[Index].Value);
++ }
++
++ // Initialize RF register to default value
++ AsicSwitchChannel(pAd, pAd->CommonCfg.Channel, FALSE);
++ AsicLockChannel(pAd, pAd->CommonCfg.Channel);
++
++ // Re-init BBP register from EEPROM value
++ NICInitAsicFromEEPROM(pAd);
++}
++
++/*
++ ========================================================================
++
++ Routine Description:
++ Init timer objects
++
++ Arguments:
++ pAd Pointer to our adapter
++ pTimer Timer structure
++ pTimerFunc Function to execute when timer expired
++ Repeat Ture for period timer
++
++ Return Value:
++ None
++
++ Note:
++
++ ========================================================================
++*/
++VOID RTMPInitTimer(
++ IN PRTMP_ADAPTER pAd,
++ IN PRALINK_TIMER_STRUCT pTimer,
++ IN PVOID pTimerFunc,
++ IN PVOID pData,
++ IN BOOLEAN Repeat)
++{
++ //
++ // Set Valid to TRUE for later used.
++ // It will crash if we cancel a timer or set a timer
++ // that we haven't initialize before.
++ //
++ pTimer->Valid = TRUE;
++
++ pTimer->PeriodicType = Repeat;
++ pTimer->State = FALSE;
++ pTimer->cookie = (ULONG) pData;
++
++#ifdef RT2870
++ pTimer->pAd = pAd;
++#endif // RT2870 //
++
++ RTMP_OS_Init_Timer(pAd, &pTimer->TimerObj, pTimerFunc, (PVOID) pTimer);
++}
++
++/*
++ ========================================================================
++
++ Routine Description:
++ Init timer objects
++
++ Arguments:
++ pTimer Timer structure
++ Value Timer value in milliseconds
++
++ Return Value:
++ None
++
++ Note:
++ To use this routine, must call RTMPInitTimer before.
++
++ ========================================================================
++*/
++VOID RTMPSetTimer(
++ IN PRALINK_TIMER_STRUCT pTimer,
++ IN ULONG Value)
++{
++ if (pTimer->Valid)
++ {
++ pTimer->TimerValue = Value;
++ pTimer->State = FALSE;
++ if (pTimer->PeriodicType == TRUE)
++ {
++ pTimer->Repeat = TRUE;
++ RTMP_SetPeriodicTimer(&pTimer->TimerObj, Value);
++ }
++ else
++ {
++ pTimer->Repeat = FALSE;
++ RTMP_OS_Add_Timer(&pTimer->TimerObj, Value);
++ }
++ }
++ else
++ {
++ DBGPRINT_ERR(("RTMPSetTimer failed, Timer hasn't been initialize!\n"));
++ }
++}
++
++
++/*
++ ========================================================================
++
++ Routine Description:
++ Init timer objects
++
++ Arguments:
++ pTimer Timer structure
++ Value Timer value in milliseconds
++
++ Return Value:
++ None
++
++ Note:
++ To use this routine, must call RTMPInitTimer before.
++
++ ========================================================================
++*/
++VOID RTMPModTimer(
++ IN PRALINK_TIMER_STRUCT pTimer,
++ IN ULONG Value)
++{
++ BOOLEAN Cancel;
++
++ if (pTimer->Valid)
++ {
++ pTimer->TimerValue = Value;
++ pTimer->State = FALSE;
++ if (pTimer->PeriodicType == TRUE)
++ {
++ RTMPCancelTimer(pTimer, &Cancel);
++ RTMPSetTimer(pTimer, Value);
++ }
++ else
++ {
++ RTMP_OS_Mod_Timer(&pTimer->TimerObj, Value);
++ }
++ }
++ else
++ {
++ DBGPRINT_ERR(("RTMPModTimer failed, Timer hasn't been initialize!\n"));
++ }
++}
++
++/*
++ ========================================================================
++
++ Routine Description:
++ Cancel timer objects
++
++ Arguments:
++ Adapter Pointer to our adapter
++
++ Return Value:
++ None
++
++ IRQL = PASSIVE_LEVEL
++ IRQL = DISPATCH_LEVEL
++
++ Note:
++ 1.) To use this routine, must call RTMPInitTimer before.
++ 2.) Reset NIC to initial state AS IS system boot up time.
++
++ ========================================================================
++*/
++VOID RTMPCancelTimer(
++ IN PRALINK_TIMER_STRUCT pTimer,
++ OUT BOOLEAN *pCancelled)
++{
++ if (pTimer->Valid)
++ {
++ if (pTimer->State == FALSE)
++ pTimer->Repeat = FALSE;
++ RTMP_OS_Del_Timer(&pTimer->TimerObj, pCancelled);
++
++ if (*pCancelled == TRUE)
++ pTimer->State = TRUE;
++
++#ifdef RT2870
++ // We need to go-through the TimerQ to findout this timer handler and remove it if
++ // it's still waiting for execution.
++
++ RT2870_TimerQ_Remove(pTimer->pAd, pTimer);
++#endif // RT2870 //
++ }
++ else
++ {
++ //
++ // NdisMCancelTimer just canced the timer and not mean release the timer.
++ // And don't set the "Valid" to False. So that we can use this timer again.
++ //
++ DBGPRINT_ERR(("RTMPCancelTimer failed, Timer hasn't been initialize!\n"));
++ }
++}
++
++/*
++ ========================================================================
++
++ Routine Description:
++ Set LED Status
++
++ Arguments:
++ pAd Pointer to our adapter
++ Status LED Status
++
++ Return Value:
++ None
++
++ IRQL = PASSIVE_LEVEL
++ IRQL = DISPATCH_LEVEL
++
++ Note:
++
++ ========================================================================
++*/
++VOID RTMPSetLED(
++ IN PRTMP_ADAPTER pAd,
++ IN UCHAR Status)
++{
++ //ULONG data;
++ UCHAR HighByte = 0;
++ UCHAR LowByte;
++
++// In ATE mode of RT2860 AP/STA, we have erased 8051 firmware.
++// So LED mode is not supported when ATE is running.
++#ifdef RALINK_ATE
++ if (ATE_ON(pAd))
++ return;
++#endif // RALINK_ATE //
++
++ LowByte = pAd->LedCntl.field.LedMode&0x7f;
++ switch (Status)
++ {
++ case LED_LINK_DOWN:
++ HighByte = 0x20;
++ AsicSendCommandToMcu(pAd, 0x50, 0xff, LowByte, HighByte);
++ pAd->LedIndicatorStregth = 0;
++ break;
++ case LED_LINK_UP:
++ if (pAd->CommonCfg.Channel > 14)
++ HighByte = 0xa0;
++ else
++ HighByte = 0x60;
++ AsicSendCommandToMcu(pAd, 0x50, 0xff, LowByte, HighByte);
++ break;
++ case LED_RADIO_ON:
++ HighByte = 0x20;
++ AsicSendCommandToMcu(pAd, 0x50, 0xff, LowByte, HighByte);
++ break;
++ case LED_HALT:
++ LowByte = 0; // Driver sets MAC register and MAC controls LED
++ case LED_RADIO_OFF:
++ HighByte = 0;
++ AsicSendCommandToMcu(pAd, 0x50, 0xff, LowByte, HighByte);
++ break;
++ case LED_WPS:
++ HighByte = 0x10;
++ AsicSendCommandToMcu(pAd, 0x50, 0xff, LowByte, HighByte);
++ break;
++ case LED_ON_SITE_SURVEY:
++ HighByte = 0x08;
++ AsicSendCommandToMcu(pAd, 0x50, 0xff, LowByte, HighByte);
++ break;
++ case LED_POWER_UP:
++ HighByte = 0x04;
++ AsicSendCommandToMcu(pAd, 0x50, 0xff, LowByte, HighByte);
++ break;
++ default:
++ DBGPRINT(RT_DEBUG_WARN, ("RTMPSetLED::Unknown Status %d\n", Status));
++ break;
++ }
++
++ //
++ // Keep LED status for LED SiteSurvey mode.
++ // After SiteSurvey, we will set the LED mode to previous status.
++ //
++ if ((Status != LED_ON_SITE_SURVEY) && (Status != LED_POWER_UP))
++ pAd->LedStatus = Status;
++
++ DBGPRINT(RT_DEBUG_TRACE, ("RTMPSetLED::Mode=%d,HighByte=0x%02x,LowByte=0x%02x\n", pAd->LedCntl.field.LedMode, HighByte, LowByte));
++}
++
++/*
++ ========================================================================
++
++ Routine Description:
++ Set LED Signal Stregth
++
++ Arguments:
++ pAd Pointer to our adapter
++ Dbm Signal Stregth
++
++ Return Value:
++ None
++
++ IRQL = PASSIVE_LEVEL
++
++ Note:
++ Can be run on any IRQL level.
++
++ According to Microsoft Zero Config Wireless Signal Stregth definition as belows.
++ <= -90 No Signal
++ <= -81 Very Low
++ <= -71 Low
++ <= -67 Good
++ <= -57 Very Good
++ > -57 Excellent
++ ========================================================================
++*/
++VOID RTMPSetSignalLED(
++ IN PRTMP_ADAPTER pAd,
++ IN NDIS_802_11_RSSI Dbm)
++{
++ UCHAR nLed = 0;
++
++ //
++ // if not Signal Stregth, then do nothing.
++ //
++ if (pAd->LedCntl.field.LedMode != LED_MODE_SIGNAL_STREGTH)
++ {
++ return;
++ }
++
++ if (Dbm <= -90)
++ nLed = 0;
++ else if (Dbm <= -81)
++ nLed = 1;
++ else if (Dbm <= -71)
++ nLed = 3;
++ else if (Dbm <= -67)
++ nLed = 7;
++ else if (Dbm <= -57)
++ nLed = 15;
++ else
++ nLed = 31;
++
++ //
++ // Update Signal Stregth to firmware if changed.
++ //
++ if (pAd->LedIndicatorStregth != nLed)
++ {
++ AsicSendCommandToMcu(pAd, 0x51, 0xff, nLed, pAd->LedCntl.field.Polarity);
++ pAd->LedIndicatorStregth = nLed;
++ }
++}
++
++/*
++ ========================================================================
++
++ Routine Description:
++ Enable RX
++
++ Arguments:
++ pAd Pointer to our adapter
++
++ Return Value:
++ None
++
++ IRQL <= DISPATCH_LEVEL
++
++ Note:
++ Before Enable RX, make sure you have enabled Interrupt.
++ ========================================================================
++*/
++VOID RTMPEnableRxTx(
++ IN PRTMP_ADAPTER pAd)
++{
++// WPDMA_GLO_CFG_STRUC GloCfg;
++// ULONG i = 0;
++
++ DBGPRINT(RT_DEBUG_TRACE, ("==> RTMPEnableRxTx\n"));
++
++#if 0
++ // Enable Rx DMA.
++ RTMP_IO_WRITE32(pAd, MAC_SYS_CTRL, 0x4);
++ do
++ {
++ RTMP_IO_READ32(pAd, WPDMA_GLO_CFG, &GloCfg.word);
++ if ((GloCfg.field.TxDMABusy == 0) && (GloCfg.field.RxDMABusy == 0))
++ break;
++
++ DBGPRINT(RT_DEBUG_TRACE, ("==> DMABusy\n"));
++ RTMPusecDelay(1000);
++ i++;
++ }while ( i <200);
++
++ RTMPusecDelay(50);
++ RT28XX_DMA_WRITE_INIT(GloCfg);
++ DBGPRINT(RT_DEBUG_TRACE, ("<== WRITE DMA offset 0x208 = 0x%x\n", GloCfg.word));
++ RTMP_IO_WRITE32(pAd, WPDMA_GLO_CFG, GloCfg.word);
++
++ RT28XX_DMA_POST_WRITE(pAd);
++#else
++ // Enable Rx DMA.
++ RT28XXDMAEnable(pAd);
++#endif
++
++ // enable RX of MAC block
++ if (pAd->OpMode == OPMODE_AP)
++ {
++ UINT32 rx_filter_flag = APNORMAL;
++
++
++ RTMP_IO_WRITE32(pAd, RX_FILTR_CFG, rx_filter_flag); // enable RX of DMA block
++ }
++ else
++ {
++ RTMP_IO_WRITE32(pAd, RX_FILTR_CFG, STANORMAL); // Staion not drop control frame will fail WiFi Certification.
++ }
++
++ RTMP_IO_WRITE32(pAd, MAC_SYS_CTRL, 0xc);
++ DBGPRINT(RT_DEBUG_TRACE, ("<== RTMPEnableRxTx\n"));
++}
++
++
+--- /dev/null
++++ b/drivers/staging/rt2870/common/rtmp_tkip.c
+@@ -0,0 +1,1613 @@
++/*
++ *************************************************************************
++ * Ralink Tech Inc.
++ * 5F., No.36, Taiyuan St., Jhubei City,
++ * Hsinchu County 302,
++ * Taiwan, R.O.C.
++ *
++ * (c) Copyright 2002-2007, Ralink Technology, Inc.
++ *
++ * This program is free software; you can redistribute it and/or modify *
++ * it under the terms of the GNU General Public License as published by *
++ * the Free Software Foundation; either version 2 of the License, or *
++ * (at your option) any later version. *
++ * *
++ * This program is distributed in the hope that it will be useful, *
++ * but WITHOUT ANY WARRANTY; without even the implied warranty of *
++ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the *
++ * GNU General Public License for more details. *
++ * *
++ * You should have received a copy of the GNU General Public License *
++ * along with this program; if not, write to the *
++ * Free Software Foundation, Inc., *
++ * 59 Temple Place - Suite 330, Boston, MA 02111-1307, USA. *
++ * *
++ *************************************************************************
++
++ Module Name:
++ rtmp_tkip.c
++
++ Abstract:
++
++ Revision History:
++ Who When What
++ -------- ---------- ----------------------------------------------
++ Paul Wu 02-25-02 Initial
++*/
++
++#include "../rt_config.h"
++
++// Rotation functions on 32 bit values
++#define ROL32( A, n ) \
++ ( ((A) << (n)) | ( ((A)>>(32-(n))) & ( (1UL << (n)) - 1 ) ) )
++#define ROR32( A, n ) ROL32( (A), 32-(n) )
++
++UINT Tkip_Sbox_Lower[256] =
++{
++ 0xA5,0x84,0x99,0x8D,0x0D,0xBD,0xB1,0x54,
++ 0x50,0x03,0xA9,0x7D,0x19,0x62,0xE6,0x9A,
++ 0x45,0x9D,0x40,0x87,0x15,0xEB,0xC9,0x0B,
++ 0xEC,0x67,0xFD,0xEA,0xBF,0xF7,0x96,0x5B,
++ 0xC2,0x1C,0xAE,0x6A,0x5A,0x41,0x02,0x4F,
++ 0x5C,0xF4,0x34,0x08,0x93,0x73,0x53,0x3F,
++ 0x0C,0x52,0x65,0x5E,0x28,0xA1,0x0F,0xB5,
++ 0x09,0x36,0x9B,0x3D,0x26,0x69,0xCD,0x9F,
++ 0x1B,0x9E,0x74,0x2E,0x2D,0xB2,0xEE,0xFB,
++ 0xF6,0x4D,0x61,0xCE,0x7B,0x3E,0x71,0x97,
++ 0xF5,0x68,0x00,0x2C,0x60,0x1F,0xC8,0xED,
++ 0xBE,0x46,0xD9,0x4B,0xDE,0xD4,0xE8,0x4A,
++ 0x6B,0x2A,0xE5,0x16,0xC5,0xD7,0x55,0x94,
++ 0xCF,0x10,0x06,0x81,0xF0,0x44,0xBA,0xE3,
++ 0xF3,0xFE,0xC0,0x8A,0xAD,0xBC,0x48,0x04,
++ 0xDF,0xC1,0x75,0x63,0x30,0x1A,0x0E,0x6D,
++ 0x4C,0x14,0x35,0x2F,0xE1,0xA2,0xCC,0x39,
++ 0x57,0xF2,0x82,0x47,0xAC,0xE7,0x2B,0x95,
++ 0xA0,0x98,0xD1,0x7F,0x66,0x7E,0xAB,0x83,
++ 0xCA,0x29,0xD3,0x3C,0x79,0xE2,0x1D,0x76,
++ 0x3B,0x56,0x4E,0x1E,0xDB,0x0A,0x6C,0xE4,
++ 0x5D,0x6E,0xEF,0xA6,0xA8,0xA4,0x37,0x8B,
++ 0x32,0x43,0x59,0xB7,0x8C,0x64,0xD2,0xE0,
++ 0xB4,0xFA,0x07,0x25,0xAF,0x8E,0xE9,0x18,
++ 0xD5,0x88,0x6F,0x72,0x24,0xF1,0xC7,0x51,
++ 0x23,0x7C,0x9C,0x21,0xDD,0xDC,0x86,0x85,
++ 0x90,0x42,0xC4,0xAA,0xD8,0x05,0x01,0x12,
++ 0xA3,0x5F,0xF9,0xD0,0x91,0x58,0x27,0xB9,
++ 0x38,0x13,0xB3,0x33,0xBB,0x70,0x89,0xA7,
++ 0xB6,0x22,0x92,0x20,0x49,0xFF,0x78,0x7A,
++ 0x8F,0xF8,0x80,0x17,0xDA,0x31,0xC6,0xB8,
++ 0xC3,0xB0,0x77,0x11,0xCB,0xFC,0xD6,0x3A
++};
++
++UINT Tkip_Sbox_Upper[256] =
++{
++ 0xC6,0xF8,0xEE,0xF6,0xFF,0xD6,0xDE,0x91,
++ 0x60,0x02,0xCE,0x56,0xE7,0xB5,0x4D,0xEC,
++ 0x8F,0x1F,0x89,0xFA,0xEF,0xB2,0x8E,0xFB,
++ 0x41,0xB3,0x5F,0x45,0x23,0x53,0xE4,0x9B,
++ 0x75,0xE1,0x3D,0x4C,0x6C,0x7E,0xF5,0x83,
++ 0x68,0x51,0xD1,0xF9,0xE2,0xAB,0x62,0x2A,
++ 0x08,0x95,0x46,0x9D,0x30,0x37,0x0A,0x2F,
++ 0x0E,0x24,0x1B,0xDF,0xCD,0x4E,0x7F,0xEA,
++ 0x12,0x1D,0x58,0x34,0x36,0xDC,0xB4,0x5B,
++ 0xA4,0x76,0xB7,0x7D,0x52,0xDD,0x5E,0x13,
++ 0xA6,0xB9,0x00,0xC1,0x40,0xE3,0x79,0xB6,
++ 0xD4,0x8D,0x67,0x72,0x94,0x98,0xB0,0x85,
++ 0xBB,0xC5,0x4F,0xED,0x86,0x9A,0x66,0x11,
++ 0x8A,0xE9,0x04,0xFE,0xA0,0x78,0x25,0x4B,
++ 0xA2,0x5D,0x80,0x05,0x3F,0x21,0x70,0xF1,
++ 0x63,0x77,0xAF,0x42,0x20,0xE5,0xFD,0xBF,
++ 0x81,0x18,0x26,0xC3,0xBE,0x35,0x88,0x2E,
++ 0x93,0x55,0xFC,0x7A,0xC8,0xBA,0x32,0xE6,
++ 0xC0,0x19,0x9E,0xA3,0x44,0x54,0x3B,0x0B,
++ 0x8C,0xC7,0x6B,0x28,0xA7,0xBC,0x16,0xAD,
++ 0xDB,0x64,0x74,0x14,0x92,0x0C,0x48,0xB8,
++ 0x9F,0xBD,0x43,0xC4,0x39,0x31,0xD3,0xF2,
++ 0xD5,0x8B,0x6E,0xDA,0x01,0xB1,0x9C,0x49,
++ 0xD8,0xAC,0xF3,0xCF,0xCA,0xF4,0x47,0x10,
++ 0x6F,0xF0,0x4A,0x5C,0x38,0x57,0x73,0x97,
++ 0xCB,0xA1,0xE8,0x3E,0x96,0x61,0x0D,0x0F,
++ 0xE0,0x7C,0x71,0xCC,0x90,0x06,0xF7,0x1C,
++ 0xC2,0x6A,0xAE,0x69,0x17,0x99,0x3A,0x27,
++ 0xD9,0xEB,0x2B,0x22,0xD2,0xA9,0x07,0x33,
++ 0x2D,0x3C,0x15,0xC9,0x87,0xAA,0x50,0xA5,
++ 0x03,0x59,0x09,0x1A,0x65,0xD7,0x84,0xD0,
++ 0x82,0x29,0x5A,0x1E,0x7B,0xA8,0x6D,0x2C
++};
++
++/*****************************/
++/******** SBOX Table *********/
++/*****************************/
++
++UCHAR SboxTable[256] =
++{
++ 0x63, 0x7c, 0x77, 0x7b, 0xf2, 0x6b, 0x6f, 0xc5,
++ 0x30, 0x01, 0x67, 0x2b, 0xfe, 0xd7, 0xab, 0x76,
++ 0xca, 0x82, 0xc9, 0x7d, 0xfa, 0x59, 0x47, 0xf0,
++ 0xad, 0xd4, 0xa2, 0xaf, 0x9c, 0xa4, 0x72, 0xc0,
++ 0xb7, 0xfd, 0x93, 0x26, 0x36, 0x3f, 0xf7, 0xcc,
++ 0x34, 0xa5, 0xe5, 0xf1, 0x71, 0xd8, 0x31, 0x15,
++ 0x04, 0xc7, 0x23, 0xc3, 0x18, 0x96, 0x05, 0x9a,
++ 0x07, 0x12, 0x80, 0xe2, 0xeb, 0x27, 0xb2, 0x75,
++ 0x09, 0x83, 0x2c, 0x1a, 0x1b, 0x6e, 0x5a, 0xa0,
++ 0x52, 0x3b, 0xd6, 0xb3, 0x29, 0xe3, 0x2f, 0x84,
++ 0x53, 0xd1, 0x00, 0xed, 0x20, 0xfc, 0xb1, 0x5b,
++ 0x6a, 0xcb, 0xbe, 0x39, 0x4a, 0x4c, 0x58, 0xcf,
++ 0xd0, 0xef, 0xaa, 0xfb, 0x43, 0x4d, 0x33, 0x85,
++ 0x45, 0xf9, 0x02, 0x7f, 0x50, 0x3c, 0x9f, 0xa8,
++ 0x51, 0xa3, 0x40, 0x8f, 0x92, 0x9d, 0x38, 0xf5,
++ 0xbc, 0xb6, 0xda, 0x21, 0x10, 0xff, 0xf3, 0xd2,
++ 0xcd, 0x0c, 0x13, 0xec, 0x5f, 0x97, 0x44, 0x17,
++ 0xc4, 0xa7, 0x7e, 0x3d, 0x64, 0x5d, 0x19, 0x73,
++ 0x60, 0x81, 0x4f, 0xdc, 0x22, 0x2a, 0x90, 0x88,
++ 0x46, 0xee, 0xb8, 0x14, 0xde, 0x5e, 0x0b, 0xdb,
++ 0xe0, 0x32, 0x3a, 0x0a, 0x49, 0x06, 0x24, 0x5c,
++ 0xc2, 0xd3, 0xac, 0x62, 0x91, 0x95, 0xe4, 0x79,
++ 0xe7, 0xc8, 0x37, 0x6d, 0x8d, 0xd5, 0x4e, 0xa9,
++ 0x6c, 0x56, 0xf4, 0xea, 0x65, 0x7a, 0xae, 0x08,
++ 0xba, 0x78, 0x25, 0x2e, 0x1c, 0xa6, 0xb4, 0xc6,
++ 0xe8, 0xdd, 0x74, 0x1f, 0x4b, 0xbd, 0x8b, 0x8a,
++ 0x70, 0x3e, 0xb5, 0x66, 0x48, 0x03, 0xf6, 0x0e,
++ 0x61, 0x35, 0x57, 0xb9, 0x86, 0xc1, 0x1d, 0x9e,
++ 0xe1, 0xf8, 0x98, 0x11, 0x69, 0xd9, 0x8e, 0x94,
++ 0x9b, 0x1e, 0x87, 0xe9, 0xce, 0x55, 0x28, 0xdf,
++ 0x8c, 0xa1, 0x89, 0x0d, 0xbf, 0xe6, 0x42, 0x68,
++ 0x41, 0x99, 0x2d, 0x0f, 0xb0, 0x54, 0xbb, 0x16
++};
++
++VOID xor_32(
++ IN PUCHAR a,
++ IN PUCHAR b,
++ OUT PUCHAR out);
++
++VOID xor_128(
++ IN PUCHAR a,
++ IN PUCHAR b,
++ OUT PUCHAR out);
++
++VOID next_key(
++ IN PUCHAR key,
++ IN INT round);
++
++VOID byte_sub(
++ IN PUCHAR in,
++ OUT PUCHAR out);
++
++VOID shift_row(
++ IN PUCHAR in,
++ OUT PUCHAR out);
++
++VOID mix_column(
++ IN PUCHAR in,
++ OUT PUCHAR out);
++
++UCHAR RTMPCkipSbox(
++ IN UCHAR a);
++//
++// Expanded IV for TKIP function.
++//
++typedef struct PACKED _IV_CONTROL_
++{
++ union PACKED
++ {
++ struct PACKED
++ {
++ UCHAR rc0;
++ UCHAR rc1;
++ UCHAR rc2;
++
++ union PACKED
++ {
++ struct PACKED
++ {
++#ifdef RT_BIG_ENDIAN
++ UCHAR KeyID:2;
++ UCHAR ExtIV:1;
++ UCHAR Rsvd:5;
++#else
++ UCHAR Rsvd:5;
++ UCHAR ExtIV:1;
++ UCHAR KeyID:2;
++#endif
++ } field;
++ UCHAR Byte;
++ } CONTROL;
++ } field;
++
++ ULONG word;
++ } IV16;
++
++ ULONG IV32;
++} TKIP_IV, *PTKIP_IV;
++
++
++/*
++ ========================================================================
++
++ Routine Description:
++ Convert from UCHAR[] to ULONG in a portable way
++
++ Arguments:
++ pMICKey pointer to MIC Key
++
++ Return Value:
++ None
++
++ Note:
++
++ ========================================================================
++*/
++ULONG RTMPTkipGetUInt32(
++ IN PUCHAR pMICKey)
++{
++ ULONG res = 0;
++ INT i;
++
++ for (i = 0; i < 4; i++)
++ {
++ res |= (*pMICKey++) << (8 * i);
++ }
++
++ return res;
++}
++
++/*
++ ========================================================================
++
++ Routine Description:
++ Convert from ULONG to UCHAR[] in a portable way
++
++ Arguments:
++ pDst pointer to destination for convert ULONG to UCHAR[]
++ val the value for convert
++
++ Return Value:
++ None
++
++ IRQL = DISPATCH_LEVEL
++
++ Note:
++
++ ========================================================================
++*/
++VOID RTMPTkipPutUInt32(
++ IN OUT PUCHAR pDst,
++ IN ULONG val)
++{
++ INT i;
++
++ for(i = 0; i < 4; i++)
++ {
++ *pDst++ = (UCHAR) (val & 0xff);
++ val >>= 8;
++ }
++}
++
++/*
++ ========================================================================
++
++ Routine Description:
++ Set the MIC Key.
++
++ Arguments:
++ pAd Pointer to our adapter
++ pMICKey pointer to MIC Key
++
++ Return Value:
++ None
++
++ IRQL = DISPATCH_LEVEL
++
++ Note:
++
++ ========================================================================
++*/
++VOID RTMPTkipSetMICKey(
++ IN PTKIP_KEY_INFO pTkip,
++ IN PUCHAR pMICKey)
++{
++ // Set the key
++ pTkip->K0 = RTMPTkipGetUInt32(pMICKey);
++ pTkip->K1 = RTMPTkipGetUInt32(pMICKey + 4);
++ // and reset the message
++ pTkip->L = pTkip->K0;
++ pTkip->R = pTkip->K1;
++ pTkip->nBytesInM = 0;
++ pTkip->M = 0;
++}
++
++/*
++ ========================================================================
++
++ Routine Description:
++ Calculate the MIC Value.
++
++ Arguments:
++ pAd Pointer to our adapter
++ uChar Append this uChar
++
++ Return Value:
++ None
++
++ IRQL = DISPATCH_LEVEL
++
++ Note:
++
++ ========================================================================
++*/
++VOID RTMPTkipAppendByte(
++ IN PTKIP_KEY_INFO pTkip,
++ IN UCHAR uChar)
++{
++ // Append the byte to our word-sized buffer
++ pTkip->M |= (uChar << (8* pTkip->nBytesInM));
++ pTkip->nBytesInM++;
++ // Process the word if it is full.
++ if( pTkip->nBytesInM >= 4 )
++ {
++ pTkip->L ^= pTkip->M;
++ pTkip->R ^= ROL32( pTkip->L, 17 );
++ pTkip->L += pTkip->R;
++ pTkip->R ^= ((pTkip->L & 0xff00ff00) >> 8) | ((pTkip->L & 0x00ff00ff) << 8);
++ pTkip->L += pTkip->R;
++ pTkip->R ^= ROL32( pTkip->L, 3 );
++ pTkip->L += pTkip->R;
++ pTkip->R ^= ROR32( pTkip->L, 2 );
++ pTkip->L += pTkip->R;
++ // Clear the buffer
++ pTkip->M = 0;
++ pTkip->nBytesInM = 0;
++ }
++}
++
++/*
++ ========================================================================
++
++ Routine Description:
++ Calculate the MIC Value.
++
++ Arguments:
++ pAd Pointer to our adapter
++ pSrc Pointer to source data for Calculate MIC Value
++ Len Indicate the length of the source data
++
++ Return Value:
++ None
++
++ IRQL = DISPATCH_LEVEL
++
++ Note:
++
++ ========================================================================
++*/
++VOID RTMPTkipAppend(
++ IN PTKIP_KEY_INFO pTkip,
++ IN PUCHAR pSrc,
++ IN UINT nBytes)
++{
++ // This is simple
++ while(nBytes > 0)
++ {
++ RTMPTkipAppendByte(pTkip, *pSrc++);
++ nBytes--;
++ }
++}
++
++/*
++ ========================================================================
++
++ Routine Description:
++ Get the MIC Value.
++
++ Arguments:
++ pAd Pointer to our adapter
++
++ Return Value:
++ None
++
++ IRQL = DISPATCH_LEVEL
++
++ Note:
++ the MIC Value is store in pAd->PrivateInfo.MIC
++ ========================================================================
++*/
++VOID RTMPTkipGetMIC(
++ IN PTKIP_KEY_INFO pTkip)
++{
++ // Append the minimum padding
++ RTMPTkipAppendByte(pTkip, 0x5a );
++ RTMPTkipAppendByte(pTkip, 0 );
++ RTMPTkipAppendByte(pTkip, 0 );
++ RTMPTkipAppendByte(pTkip, 0 );
++ RTMPTkipAppendByte(pTkip, 0 );
++ // and then zeroes until the length is a multiple of 4
++ while( pTkip->nBytesInM != 0 )
++ {
++ RTMPTkipAppendByte(pTkip, 0 );
++ }
++ // The appendByte function has already computed the result.
++ RTMPTkipPutUInt32(pTkip->MIC, pTkip->L);
++ RTMPTkipPutUInt32(pTkip->MIC + 4, pTkip->R);
++}
++
++/*
++ ========================================================================
++
++ Routine Description:
++ Init Tkip function.
++
++ Arguments:
++ pAd Pointer to our adapter
++ pTKey Pointer to the Temporal Key (TK), TK shall be 128bits.
++ KeyId TK Key ID
++ pTA Pointer to transmitter address
++ pMICKey pointer to MIC Key
++
++ Return Value:
++ None
++
++ IRQL = DISPATCH_LEVEL
++
++ Note:
++
++ ========================================================================
++*/
++VOID RTMPInitTkipEngine(
++ IN PRTMP_ADAPTER pAd,
++ IN PUCHAR pKey,
++ IN UCHAR KeyId,
++ IN PUCHAR pTA,
++ IN PUCHAR pMICKey,
++ IN PUCHAR pTSC,
++ OUT PULONG pIV16,
++ OUT PULONG pIV32)
++{
++ TKIP_IV tkipIv;
++
++ // Prepare 8 bytes TKIP encapsulation for MPDU
++ NdisZeroMemory(&tkipIv, sizeof(TKIP_IV));
++ tkipIv.IV16.field.rc0 = *(pTSC + 1);
++ tkipIv.IV16.field.rc1 = (tkipIv.IV16.field.rc0 | 0x20) & 0x7f;
++ tkipIv.IV16.field.rc2 = *pTSC;
++ tkipIv.IV16.field.CONTROL.field.ExtIV = 1; // 0: non-extended IV, 1: an extended IV
++ tkipIv.IV16.field.CONTROL.field.KeyID = KeyId;
++// tkipIv.IV32 = *(PULONG)(pTSC + 2);
++ NdisMoveMemory(&tkipIv.IV32, (pTSC + 2), 4); // Copy IV
++
++ *pIV16 = tkipIv.IV16.word;
++ *pIV32 = tkipIv.IV32;
++}
++
++/*
++ ========================================================================
++
++ Routine Description:
++ Init MIC Value calculation function which include set MIC key &
++ calculate first 16 bytes (DA + SA + priority + 0)
++
++ Arguments:
++ pAd Pointer to our adapter
++ pTKey Pointer to the Temporal Key (TK), TK shall be 128bits.
++ pDA Pointer to DA address
++ pSA Pointer to SA address
++ pMICKey pointer to MIC Key
++
++ Return Value:
++ None
++
++ Note:
++
++ ========================================================================
++*/
++VOID RTMPInitMICEngine(
++ IN PRTMP_ADAPTER pAd,
++ IN PUCHAR pKey,
++ IN PUCHAR pDA,
++ IN PUCHAR pSA,
++ IN UCHAR UserPriority,
++ IN PUCHAR pMICKey)
++{
++ ULONG Priority = UserPriority;
++
++ // Init MIC value calculation
++ RTMPTkipSetMICKey(&pAd->PrivateInfo.Tx, pMICKey);
++ // DA
++ RTMPTkipAppend(&pAd->PrivateInfo.Tx, pDA, MAC_ADDR_LEN);
++ // SA
++ RTMPTkipAppend(&pAd->PrivateInfo.Tx, pSA, MAC_ADDR_LEN);
++ // Priority + 3 bytes of 0
++ RTMPTkipAppend(&pAd->PrivateInfo.Tx, (PUCHAR)&Priority, 4);
++}
++
++/*
++ ========================================================================
++
++ Routine Description:
++ Compare MIC value of received MSDU
++
++ Arguments:
++ pAd Pointer to our adapter
++ pSrc Pointer to the received Plain text data
++ pDA Pointer to DA address
++ pSA Pointer to SA address
++ pMICKey pointer to MIC Key
++ Len the length of the received plain text data exclude MIC value
++
++ Return Value:
++ TRUE MIC value matched
++ FALSE MIC value mismatched
++
++ IRQL = DISPATCH_LEVEL
++
++ Note:
++
++ ========================================================================
++*/
++BOOLEAN RTMPTkipCompareMICValue(
++ IN PRTMP_ADAPTER pAd,
++ IN PUCHAR pSrc,
++ IN PUCHAR pDA,
++ IN PUCHAR pSA,
++ IN PUCHAR pMICKey,
++ IN UCHAR UserPriority,
++ IN UINT Len)
++{
++ UCHAR OldMic[8];
++ ULONG Priority = UserPriority;
++
++ // Init MIC value calculation
++ RTMPTkipSetMICKey(&pAd->PrivateInfo.Rx, pMICKey);
++ // DA
++ RTMPTkipAppend(&pAd->PrivateInfo.Rx, pDA, MAC_ADDR_LEN);
++ // SA
++ RTMPTkipAppend(&pAd->PrivateInfo.Rx, pSA, MAC_ADDR_LEN);
++ // Priority + 3 bytes of 0
++ RTMPTkipAppend(&pAd->PrivateInfo.Rx, (PUCHAR)&Priority, 4);
++
++ // Calculate MIC value from plain text data
++ RTMPTkipAppend(&pAd->PrivateInfo.Rx, pSrc, Len);
++
++ // Get MIC valude from received frame
++ NdisMoveMemory(OldMic, pSrc + Len, 8);
++
++ // Get MIC value from decrypted plain data
++ RTMPTkipGetMIC(&pAd->PrivateInfo.Rx);
++
++ // Move MIC value from MSDU, this steps should move to data path.
++ // Since the MIC value might cross MPDUs.
++ if(!NdisEqualMemory(pAd->PrivateInfo.Rx.MIC, OldMic, 8))
++ {
++ DBGPRINT_RAW(RT_DEBUG_ERROR, ("RTMPTkipCompareMICValue(): TKIP MIC Error !\n")); //MIC error.
++
++
++ return (FALSE);
++ }
++ return (TRUE);
++}
++
++/*
++ ========================================================================
++
++ Routine Description:
++ Compare MIC value of received MSDU
++
++ Arguments:
++ pAd Pointer to our adapter
++ pLLC LLC header
++ pSrc Pointer to the received Plain text data
++ pDA Pointer to DA address
++ pSA Pointer to SA address
++ pMICKey pointer to MIC Key
++ Len the length of the received plain text data exclude MIC value
++
++ Return Value:
++ TRUE MIC value matched
++ FALSE MIC value mismatched
++
++ IRQL = DISPATCH_LEVEL
++
++ Note:
++
++ ========================================================================
++*/
++BOOLEAN RTMPTkipCompareMICValueWithLLC(
++ IN PRTMP_ADAPTER pAd,
++ IN PUCHAR pLLC,
++ IN PUCHAR pSrc,
++ IN PUCHAR pDA,
++ IN PUCHAR pSA,
++ IN PUCHAR pMICKey,
++ IN UINT Len)
++{
++ UCHAR OldMic[8];
++ ULONG Priority = 0;
++
++ // Init MIC value calculation
++ RTMPTkipSetMICKey(&pAd->PrivateInfo.Rx, pMICKey);
++ // DA
++ RTMPTkipAppend(&pAd->PrivateInfo.Rx, pDA, MAC_ADDR_LEN);
++ // SA
++ RTMPTkipAppend(&pAd->PrivateInfo.Rx, pSA, MAC_ADDR_LEN);
++ // Priority + 3 bytes of 0
++ RTMPTkipAppend(&pAd->PrivateInfo.Rx, (PUCHAR)&Priority, 4);
++
++ // Start with LLC header
++ RTMPTkipAppend(&pAd->PrivateInfo.Rx, pLLC, 8);
++
++ // Calculate MIC value from plain text data
++ RTMPTkipAppend(&pAd->PrivateInfo.Rx, pSrc, Len);
++
++ // Get MIC valude from received frame
++ NdisMoveMemory(OldMic, pSrc + Len, 8);
++
++ // Get MIC value from decrypted plain data
++ RTMPTkipGetMIC(&pAd->PrivateInfo.Rx);
++
++ // Move MIC value from MSDU, this steps should move to data path.
++ // Since the MIC value might cross MPDUs.
++ if(!NdisEqualMemory(pAd->PrivateInfo.Rx.MIC, OldMic, 8))
++ {
++ DBGPRINT_RAW(RT_DEBUG_ERROR, ("RTMPTkipCompareMICValueWithLLC(): TKIP MIC Error !\n")); //MIC error.
++
++
++ return (FALSE);
++ }
++ return (TRUE);
++}
++/*
++ ========================================================================
++
++ Routine Description:
++ Copy frame from waiting queue into relative ring buffer and set
++ appropriate ASIC register to kick hardware transmit function
++
++ Arguments:
++ pAd Pointer to our adapter
++ PNDIS_PACKET Pointer to Ndis Packet for MIC calculation
++ pEncap Pointer to LLC encap data
++ LenEncap Total encap length, might be 0 which indicates no encap
++
++ Return Value:
++ None
++
++ IRQL = DISPATCH_LEVEL
++
++ Note:
++
++ ========================================================================
++*/
++VOID RTMPCalculateMICValue(
++ IN PRTMP_ADAPTER pAd,
++ IN PNDIS_PACKET pPacket,
++ IN PUCHAR pEncap,
++ IN PCIPHER_KEY pKey,
++ IN UCHAR apidx)
++{
++ PACKET_INFO PacketInfo;
++ PUCHAR pSrcBufVA;
++ UINT SrcBufLen;
++ PUCHAR pSrc;
++ UCHAR UserPriority;
++ UCHAR vlan_offset = 0;
++
++ RTMP_QueryPacketInfo(pPacket, &PacketInfo, &pSrcBufVA, &SrcBufLen);
++
++ UserPriority = RTMP_GET_PACKET_UP(pPacket);
++ pSrc = pSrcBufVA;
++
++ // determine if this is a vlan packet
++ if (((*(pSrc + 12) << 8) + *(pSrc + 13)) == 0x8100)
++ vlan_offset = 4;
++
++#ifdef CONFIG_STA_SUPPORT
++#endif // CONFIG_STA_SUPPORT //
++ {
++ RTMPInitMICEngine(
++ pAd,
++ pKey->Key,
++ pSrc,
++ pSrc + 6,
++ UserPriority,
++ pKey->TxMic);
++ }
++
++
++ if (pEncap != NULL)
++ {
++ // LLC encapsulation
++ RTMPTkipAppend(&pAd->PrivateInfo.Tx, pEncap, 6);
++ // Protocol Type
++ RTMPTkipAppend(&pAd->PrivateInfo.Tx, pSrc + 12 + vlan_offset, 2);
++ }
++ SrcBufLen -= (14 + vlan_offset);
++ pSrc += (14 + vlan_offset);
++ do
++ {
++ if (SrcBufLen > 0)
++ {
++ RTMPTkipAppend(&pAd->PrivateInfo.Tx, pSrc, SrcBufLen);
++ }
++
++ break; // No need handle next packet
++
++ } while (TRUE); // End of copying payload
++
++ // Compute the final MIC Value
++ RTMPTkipGetMIC(&pAd->PrivateInfo.Tx);
++}
++
++
++/************************************************************/
++/* tkip_sbox() */
++/* Returns a 16 bit value from a 64K entry table. The Table */
++/* is synthesized from two 256 entry byte wide tables. */
++/************************************************************/
++
++UINT tkip_sbox(UINT index)
++{
++ UINT index_low;
++ UINT index_high;
++ UINT left, right;
++
++ index_low = (index % 256);
++ index_high = ((index >> 8) % 256);
++
++ left = Tkip_Sbox_Lower[index_low] + (Tkip_Sbox_Upper[index_low] * 256);
++ right = Tkip_Sbox_Upper[index_high] + (Tkip_Sbox_Lower[index_high] * 256);
++
++ return (left ^ right);
++}
++
++UINT rotr1(UINT a)
++{
++ unsigned int b;
++
++ if ((a & 0x01) == 0x01)
++ {
++ b = (a >> 1) | 0x8000;
++ }
++ else
++ {
++ b = (a >> 1) & 0x7fff;
++ }
++ b = b % 65536;
++ return b;
++}
++
++VOID RTMPTkipMixKey(
++ UCHAR *key,
++ UCHAR *ta,
++ ULONG pnl, /* Least significant 16 bits of PN */
++ ULONG pnh, /* Most significant 32 bits of PN */
++ UCHAR *rc4key,
++ UINT *p1k)
++{
++
++ UINT tsc0;
++ UINT tsc1;
++ UINT tsc2;
++
++ UINT ppk0;
++ UINT ppk1;
++ UINT ppk2;
++ UINT ppk3;
++ UINT ppk4;
++ UINT ppk5;
++
++ INT i;
++ INT j;
++
++ tsc0 = (unsigned int)((pnh >> 16) % 65536); /* msb */
++ tsc1 = (unsigned int)(pnh % 65536);
++ tsc2 = (unsigned int)(pnl % 65536); /* lsb */
++
++ /* Phase 1, step 1 */
++ p1k[0] = tsc1;
++ p1k[1] = tsc0;
++ p1k[2] = (UINT)(ta[0] + (ta[1]*256));
++ p1k[3] = (UINT)(ta[2] + (ta[3]*256));
++ p1k[4] = (UINT)(ta[4] + (ta[5]*256));
++
++ /* Phase 1, step 2 */
++ for (i=0; i<8; i++)
++ {
++ j = 2*(i & 1);
++ p1k[0] = (p1k[0] + tkip_sbox( (p1k[4] ^ ((256*key[1+j]) + key[j])) % 65536 )) % 65536;
++ p1k[1] = (p1k[1] + tkip_sbox( (p1k[0] ^ ((256*key[5+j]) + key[4+j])) % 65536 )) % 65536;
++ p1k[2] = (p1k[2] + tkip_sbox( (p1k[1] ^ ((256*key[9+j]) + key[8+j])) % 65536 )) % 65536;
++ p1k[3] = (p1k[3] + tkip_sbox( (p1k[2] ^ ((256*key[13+j]) + key[12+j])) % 65536 )) % 65536;
++ p1k[4] = (p1k[4] + tkip_sbox( (p1k[3] ^ (((256*key[1+j]) + key[j]))) % 65536 )) % 65536;
++ p1k[4] = (p1k[4] + i) % 65536;
++ }
++
++ /* Phase 2, Step 1 */
++ ppk0 = p1k[0];
++ ppk1 = p1k[1];
++ ppk2 = p1k[2];
++ ppk3 = p1k[3];
++ ppk4 = p1k[4];
++ ppk5 = (p1k[4] + tsc2) % 65536;
++
++ /* Phase2, Step 2 */
++ ppk0 = ppk0 + tkip_sbox( (ppk5 ^ ((256*key[1]) + key[0])) % 65536);
++ ppk1 = ppk1 + tkip_sbox( (ppk0 ^ ((256*key[3]) + key[2])) % 65536);
++ ppk2 = ppk2 + tkip_sbox( (ppk1 ^ ((256*key[5]) + key[4])) % 65536);
++ ppk3 = ppk3 + tkip_sbox( (ppk2 ^ ((256*key[7]) + key[6])) % 65536);
++ ppk4 = ppk4 + tkip_sbox( (ppk3 ^ ((256*key[9]) + key[8])) % 65536);
++ ppk5 = ppk5 + tkip_sbox( (ppk4 ^ ((256*key[11]) + key[10])) % 65536);
++
++ ppk0 = ppk0 + rotr1(ppk5 ^ ((256*key[13]) + key[12]));
++ ppk1 = ppk1 + rotr1(ppk0 ^ ((256*key[15]) + key[14]));
++ ppk2 = ppk2 + rotr1(ppk1);
++ ppk3 = ppk3 + rotr1(ppk2);
++ ppk4 = ppk4 + rotr1(ppk3);
++ ppk5 = ppk5 + rotr1(ppk4);
++
++ /* Phase 2, Step 3 */
++ /* Phase 2, Step 3 */
++
++ tsc0 = (unsigned int)((pnh >> 16) % 65536); /* msb */
++ tsc1 = (unsigned int)(pnh % 65536);
++ tsc2 = (unsigned int)(pnl % 65536); /* lsb */
++
++ rc4key[0] = (tsc2 >> 8) % 256;
++ rc4key[1] = (((tsc2 >> 8) % 256) | 0x20) & 0x7f;
++ rc4key[2] = tsc2 % 256;
++ rc4key[3] = ((ppk5 ^ ((256*key[1]) + key[0])) >> 1) % 256;
++
++ rc4key[4] = ppk0 % 256;
++ rc4key[5] = (ppk0 >> 8) % 256;
++
++ rc4key[6] = ppk1 % 256;
++ rc4key[7] = (ppk1 >> 8) % 256;
++
++ rc4key[8] = ppk2 % 256;
++ rc4key[9] = (ppk2 >> 8) % 256;
++
++ rc4key[10] = ppk3 % 256;
++ rc4key[11] = (ppk3 >> 8) % 256;
++
++ rc4key[12] = ppk4 % 256;
++ rc4key[13] = (ppk4 >> 8) % 256;
++
++ rc4key[14] = ppk5 % 256;
++ rc4key[15] = (ppk5 >> 8) % 256;
++}
++
++
++/************************************************/
++/* construct_mic_header1() */
++/* Builds the first MIC header block from */
++/* header fields. */
++/************************************************/
++
++void construct_mic_header1(
++ unsigned char *mic_header1,
++ int header_length,
++ unsigned char *mpdu)
++{
++ mic_header1[0] = (unsigned char)((header_length - 2) / 256);
++ mic_header1[1] = (unsigned char)((header_length - 2) % 256);
++ mic_header1[2] = mpdu[0] & 0xcf; /* Mute CF poll & CF ack bits */
++ mic_header1[3] = mpdu[1] & 0xc7; /* Mute retry, more data and pwr mgt bits */
++ mic_header1[4] = mpdu[4]; /* A1 */
++ mic_header1[5] = mpdu[5];
++ mic_header1[6] = mpdu[6];
++ mic_header1[7] = mpdu[7];
++ mic_header1[8] = mpdu[8];
++ mic_header1[9] = mpdu[9];
++ mic_header1[10] = mpdu[10]; /* A2 */
++ mic_header1[11] = mpdu[11];
++ mic_header1[12] = mpdu[12];
++ mic_header1[13] = mpdu[13];
++ mic_header1[14] = mpdu[14];
++ mic_header1[15] = mpdu[15];
++}
++
++/************************************************/
++/* construct_mic_header2() */
++/* Builds the last MIC header block from */
++/* header fields. */
++/************************************************/
++
++void construct_mic_header2(
++ unsigned char *mic_header2,
++ unsigned char *mpdu,
++ int a4_exists,
++ int qc_exists)
++{
++ int i;
++
++ for (i = 0; i<16; i++) mic_header2[i]=0x00;
++
++ mic_header2[0] = mpdu[16]; /* A3 */
++ mic_header2[1] = mpdu[17];
++ mic_header2[2] = mpdu[18];
++ mic_header2[3] = mpdu[19];
++ mic_header2[4] = mpdu[20];
++ mic_header2[5] = mpdu[21];
++
++ // In Sequence Control field, mute sequence numer bits (12-bit)
++ mic_header2[6] = mpdu[22] & 0x0f; /* SC */
++ mic_header2[7] = 0x00; /* mpdu[23]; */
++
++ if ((!qc_exists) & a4_exists)
++ {
++ for (i=0;i<6;i++) mic_header2[8+i] = mpdu[24+i]; /* A4 */
++
++ }
++
++ if (qc_exists && (!a4_exists))
++ {
++ mic_header2[8] = mpdu[24] & 0x0f; /* mute bits 15 - 4 */
++ mic_header2[9] = mpdu[25] & 0x00;
++ }
++
++ if (qc_exists && a4_exists)
++ {
++ for (i=0;i<6;i++) mic_header2[8+i] = mpdu[24+i]; /* A4 */
++
++ mic_header2[14] = mpdu[30] & 0x0f;
++ mic_header2[15] = mpdu[31] & 0x00;
++ }
++}
++
++
++/************************************************/
++/* construct_mic_iv() */
++/* Builds the MIC IV from header fields and PN */
++/************************************************/
++
++void construct_mic_iv(
++ unsigned char *mic_iv,
++ int qc_exists,
++ int a4_exists,
++ unsigned char *mpdu,
++ unsigned int payload_length,
++ unsigned char *pn_vector)
++{
++ int i;
++
++ mic_iv[0] = 0x59;
++ if (qc_exists && a4_exists)
++ mic_iv[1] = mpdu[30] & 0x0f; /* QoS_TC */
++ if (qc_exists && !a4_exists)
++ mic_iv[1] = mpdu[24] & 0x0f; /* mute bits 7-4 */
++ if (!qc_exists)
++ mic_iv[1] = 0x00;
++ for (i = 2; i < 8; i++)
++ mic_iv[i] = mpdu[i + 8]; /* mic_iv[2:7] = A2[0:5] = mpdu[10:15] */
++#ifdef CONSISTENT_PN_ORDER
++ for (i = 8; i < 14; i++)
++ mic_iv[i] = pn_vector[i - 8]; /* mic_iv[8:13] = PN[0:5] */
++#else
++ for (i = 8; i < 14; i++)
++ mic_iv[i] = pn_vector[13 - i]; /* mic_iv[8:13] = PN[5:0] */
++#endif
++ i = (payload_length / 256);
++ i = (payload_length % 256);
++ mic_iv[14] = (unsigned char) (payload_length / 256);
++ mic_iv[15] = (unsigned char) (payload_length % 256);
++
++}
++
++
++
++/************************************/
++/* bitwise_xor() */
++/* A 128 bit, bitwise exclusive or */
++/************************************/
++
++void bitwise_xor(unsigned char *ina, unsigned char *inb, unsigned char *out)
++{
++ int i;
++ for (i=0; i<16; i++)
++ {
++ out[i] = ina[i] ^ inb[i];
++ }
++}
++
++
++void aes128k128d(unsigned char *key, unsigned char *data, unsigned char *ciphertext)
++{
++ int round;
++ int i;
++ unsigned char intermediatea[16];
++ unsigned char intermediateb[16];
++ unsigned char round_key[16];
++
++ for(i=0; i<16; i++) round_key[i] = key[i];
++
++ for (round = 0; round < 11; round++)
++ {
++ if (round == 0)
++ {
++ xor_128(round_key, data, ciphertext);
++ next_key(round_key, round);
++ }
++ else if (round == 10)
++ {
++ byte_sub(ciphertext, intermediatea);
++ shift_row(intermediatea, intermediateb);
++ xor_128(intermediateb, round_key, ciphertext);
++ }
++ else /* 1 - 9 */
++ {
++ byte_sub(ciphertext, intermediatea);
++ shift_row(intermediatea, intermediateb);
++ mix_column(&intermediateb[0], &intermediatea[0]);
++ mix_column(&intermediateb[4], &intermediatea[4]);
++ mix_column(&intermediateb[8], &intermediatea[8]);
++ mix_column(&intermediateb[12], &intermediatea[12]);
++ xor_128(intermediatea, round_key, ciphertext);
++ next_key(round_key, round);
++ }
++ }
++
++}
++
++void construct_ctr_preload(
++ unsigned char *ctr_preload,
++ int a4_exists,
++ int qc_exists,
++ unsigned char *mpdu,
++ unsigned char *pn_vector,
++ int c)
++{
++
++ int i = 0;
++ for (i=0; i<16; i++) ctr_preload[i] = 0x00;
++ i = 0;
++
++ ctr_preload[0] = 0x01; /* flag */
++ if (qc_exists && a4_exists) ctr_preload[1] = mpdu[30] & 0x0f; /* QoC_Control */
++ if (qc_exists && !a4_exists) ctr_preload[1] = mpdu[24] & 0x0f;
++
++ for (i = 2; i < 8; i++)
++ ctr_preload[i] = mpdu[i + 8]; /* ctr_preload[2:7] = A2[0:5] = mpdu[10:15] */
++#ifdef CONSISTENT_PN_ORDER
++ for (i = 8; i < 14; i++)
++ ctr_preload[i] = pn_vector[i - 8]; /* ctr_preload[8:13] = PN[0:5] */
++#else
++ for (i = 8; i < 14; i++)
++ ctr_preload[i] = pn_vector[13 - i]; /* ctr_preload[8:13] = PN[5:0] */
++#endif
++ ctr_preload[14] = (unsigned char) (c / 256); // Ctr
++ ctr_preload[15] = (unsigned char) (c % 256);
++
++}
++
++
++//
++// TRUE: Success!
++// FALSE: Decrypt Error!
++//
++BOOLEAN RTMPSoftDecryptTKIP(
++ IN PRTMP_ADAPTER pAd,
++ IN PUCHAR pData,
++ IN ULONG DataByteCnt,
++ IN UCHAR UserPriority,
++ IN PCIPHER_KEY pWpaKey)
++{
++ UCHAR KeyID;
++ UINT HeaderLen;
++ UCHAR fc0;
++ UCHAR fc1;
++ USHORT fc;
++ UINT frame_type;
++ UINT frame_subtype;
++ UINT from_ds;
++ UINT to_ds;
++ INT a4_exists;
++ INT qc_exists;
++ USHORT duration;
++ USHORT seq_control;
++ USHORT qos_control;
++ UCHAR TA[MAC_ADDR_LEN];
++ UCHAR DA[MAC_ADDR_LEN];
++ UCHAR SA[MAC_ADDR_LEN];
++ UCHAR RC4Key[16];
++ UINT p1k[5]; //for mix_key;
++ ULONG pnl;/* Least significant 16 bits of PN */
++ ULONG pnh;/* Most significant 32 bits of PN */
++ UINT num_blocks;
++ UINT payload_remainder;
++ ARCFOURCONTEXT ArcFourContext;
++ UINT crc32 = 0;
++ UINT trailfcs = 0;
++ UCHAR MIC[8];
++ UCHAR TrailMIC[8];
++
++#ifdef RT_BIG_ENDIAN
++ RTMPFrameEndianChange(pAd, (PUCHAR)pData, DIR_READ, FALSE);
++#endif
++
++ fc0 = *pData;
++ fc1 = *(pData + 1);
++
++ fc = *((PUSHORT)pData);
++
++ frame_type = ((fc0 >> 2) & 0x03);
++ frame_subtype = ((fc0 >> 4) & 0x0f);
++
++ from_ds = (fc1 & 0x2) >> 1;
++ to_ds = (fc1 & 0x1);
++
++ a4_exists = (from_ds & to_ds);
++ qc_exists = ((frame_subtype == 0x08) || /* Assumed QoS subtypes */
++ (frame_subtype == 0x09) || /* Likely to change. */
++ (frame_subtype == 0x0a) ||
++ (frame_subtype == 0x0b)
++ );
++
++ HeaderLen = 24;
++ if (a4_exists)
++ HeaderLen += 6;
++
++ KeyID = *((PUCHAR)(pData+ HeaderLen + 3));
++ KeyID = KeyID >> 6;
++
++ if (pWpaKey[KeyID].KeyLen == 0)
++ {
++ DBGPRINT(RT_DEBUG_TRACE, ("RTMPSoftDecryptTKIP failed!(KeyID[%d] Length can not be 0)\n", KeyID));
++ return FALSE;
++ }
++
++ duration = *((PUSHORT)(pData+2));
++
++ seq_control = *((PUSHORT)(pData+22));
++
++ if (qc_exists)
++ {
++ if (a4_exists)
++ {
++ qos_control = *((PUSHORT)(pData+30));
++ }
++ else
++ {
++ qos_control = *((PUSHORT)(pData+24));
++ }
++ }
++
++ if (to_ds == 0 && from_ds == 1)
++ {
++ NdisMoveMemory(DA, pData+4, MAC_ADDR_LEN);
++ NdisMoveMemory(SA, pData+16, MAC_ADDR_LEN);
++ NdisMoveMemory(TA, pData+10, MAC_ADDR_LEN); //BSSID
++ }
++ else if (to_ds == 0 && from_ds == 0 )
++ {
++ NdisMoveMemory(TA, pData+10, MAC_ADDR_LEN);
++ NdisMoveMemory(DA, pData+4, MAC_ADDR_LEN);
++ NdisMoveMemory(SA, pData+10, MAC_ADDR_LEN);
++ }
++ else if (to_ds == 1 && from_ds == 0)
++ {
++ NdisMoveMemory(SA, pData+10, MAC_ADDR_LEN);
++ NdisMoveMemory(TA, pData+10, MAC_ADDR_LEN);
++ NdisMoveMemory(DA, pData+16, MAC_ADDR_LEN);
++ }
++ else if (to_ds == 1 && from_ds == 1)
++ {
++ NdisMoveMemory(TA, pData+10, MAC_ADDR_LEN);
++ NdisMoveMemory(DA, pData+16, MAC_ADDR_LEN);
++ NdisMoveMemory(SA, pData+22, MAC_ADDR_LEN);
++ }
++
++ num_blocks = (DataByteCnt - 16) / 16;
++ payload_remainder = (DataByteCnt - 16) % 16;
++
++ pnl = (*(pData + HeaderLen)) * 256 + *(pData + HeaderLen + 2);
++ pnh = *((PULONG)(pData + HeaderLen + 4));
++ pnh = cpu2le32(pnh);
++ RTMPTkipMixKey(pWpaKey[KeyID].Key, TA, pnl, pnh, RC4Key, p1k);
++
++ ARCFOUR_INIT(&ArcFourContext, RC4Key, 16);
++
++ ARCFOUR_DECRYPT(&ArcFourContext, pData + HeaderLen, pData + HeaderLen + 8, DataByteCnt - HeaderLen - 8);
++ NdisMoveMemory(&trailfcs, pData + DataByteCnt - 8 - 4, 4);
++ crc32 = RTMP_CALC_FCS32(PPPINITFCS32, pData + HeaderLen, DataByteCnt - HeaderLen - 8 - 4); //Skip IV+EIV 8 bytes & Skip last 4 bytes(FCS).
++ crc32 ^= 0xffffffff; /* complement */
++
++ if(crc32 != cpu2le32(trailfcs))
++ {
++ DBGPRINT(RT_DEBUG_TRACE, ("RTMPSoftDecryptTKIP, WEP Data ICV Error !\n")); //ICV error.
++
++ return (FALSE);
++ }
++
++ NdisMoveMemory(TrailMIC, pData + DataByteCnt - 8 - 8 - 4, 8);
++ RTMPInitMICEngine(pAd, pWpaKey[KeyID].Key, DA, SA, UserPriority, pWpaKey[KeyID].RxMic);
++ RTMPTkipAppend(&pAd->PrivateInfo.Tx, pData + HeaderLen, DataByteCnt - HeaderLen - 8 - 12);
++ RTMPTkipGetMIC(&pAd->PrivateInfo.Tx);
++ NdisMoveMemory(MIC, pAd->PrivateInfo.Tx.MIC, 8);
++
++ if (!NdisEqualMemory(MIC, TrailMIC, 8))
++ {
++ DBGPRINT(RT_DEBUG_ERROR, ("RTMPSoftDecryptTKIP, WEP Data MIC Error !\n")); //MIC error.
++ //RTMPReportMicError(pAd, &pWpaKey[KeyID]); // marked by AlbertY @ 20060630
++ return (FALSE);
++ }
++
++#ifdef RT_BIG_ENDIAN
++ RTMPFrameEndianChange(pAd, (PUCHAR)pData, DIR_READ, FALSE);
++#endif
++ //DBGPRINT(RT_DEBUG_TRACE, "RTMPSoftDecryptTKIP Decript done!!\n");
++ return TRUE;
++}
++
++
++
++
++BOOLEAN RTMPSoftDecryptAES(
++ IN PRTMP_ADAPTER pAd,
++ IN PUCHAR pData,
++ IN ULONG DataByteCnt,
++ IN PCIPHER_KEY pWpaKey)
++{
++ UCHAR KeyID;
++ UINT HeaderLen;
++ UCHAR PN[6];
++ UINT payload_len;
++ UINT num_blocks;
++ UINT payload_remainder;
++ USHORT fc;
++ UCHAR fc0;
++ UCHAR fc1;
++ UINT frame_type;
++ UINT frame_subtype;
++ UINT from_ds;
++ UINT to_ds;
++ INT a4_exists;
++ INT qc_exists;
++ UCHAR aes_out[16];
++ int payload_index;
++ UINT i;
++ UCHAR ctr_preload[16];
++ UCHAR chain_buffer[16];
++ UCHAR padded_buffer[16];
++ UCHAR mic_iv[16];
++ UCHAR mic_header1[16];
++ UCHAR mic_header2[16];
++ UCHAR MIC[8];
++ UCHAR TrailMIC[8];
++
++#ifdef RT_BIG_ENDIAN
++ RTMPFrameEndianChange(pAd, (PUCHAR)pData, DIR_READ, FALSE);
++#endif
++
++ fc0 = *pData;
++ fc1 = *(pData + 1);
++
++ fc = *((PUSHORT)pData);
++
++ frame_type = ((fc0 >> 2) & 0x03);
++ frame_subtype = ((fc0 >> 4) & 0x0f);
++
++ from_ds = (fc1 & 0x2) >> 1;
++ to_ds = (fc1 & 0x1);
++
++ a4_exists = (from_ds & to_ds);
++ qc_exists = ((frame_subtype == 0x08) || /* Assumed QoS subtypes */
++ (frame_subtype == 0x09) || /* Likely to change. */
++ (frame_subtype == 0x0a) ||
++ (frame_subtype == 0x0b)
++ );
++
++ HeaderLen = 24;
++ if (a4_exists)
++ HeaderLen += 6;
++
++ KeyID = *((PUCHAR)(pData+ HeaderLen + 3));
++ KeyID = KeyID >> 6;
++
++ if (pWpaKey[KeyID].KeyLen == 0)
++ {
++ DBGPRINT(RT_DEBUG_TRACE, ("RTMPSoftDecryptAES failed!(KeyID[%d] Length can not be 0)\n", KeyID));
++ return FALSE;
++ }
++
++ PN[0] = *(pData+ HeaderLen);
++ PN[1] = *(pData+ HeaderLen + 1);
++ PN[2] = *(pData+ HeaderLen + 4);
++ PN[3] = *(pData+ HeaderLen + 5);
++ PN[4] = *(pData+ HeaderLen + 6);
++ PN[5] = *(pData+ HeaderLen + 7);
++
++ payload_len = DataByteCnt - HeaderLen - 8 - 8; // 8 bytes for CCMP header , 8 bytes for MIC
++ payload_remainder = (payload_len) % 16;
++ num_blocks = (payload_len) / 16;
++
++
++
++ // Find start of payload
++ payload_index = HeaderLen + 8; //IV+EIV
++
++ for (i=0; i< num_blocks; i++)
++ {
++ construct_ctr_preload(ctr_preload,
++ a4_exists,
++ qc_exists,
++ pData,
++ PN,
++ i+1 );
++
++ aes128k128d(pWpaKey[KeyID].Key, ctr_preload, aes_out);
++
++ bitwise_xor(aes_out, pData + payload_index, chain_buffer);
++ NdisMoveMemory(pData + payload_index - 8, chain_buffer, 16);
++ payload_index += 16;
++ }
++
++ //
++ // If there is a short final block, then pad it
++ // encrypt it and copy the unpadded part back
++ //
++ if (payload_remainder > 0)
++ {
++ construct_ctr_preload(ctr_preload,
++ a4_exists,
++ qc_exists,
++ pData,
++ PN,
++ num_blocks + 1);
++
++ NdisZeroMemory(padded_buffer, 16);
++ NdisMoveMemory(padded_buffer, pData + payload_index, payload_remainder);
++
++ aes128k128d(pWpaKey[KeyID].Key, ctr_preload, aes_out);
++
++ bitwise_xor(aes_out, padded_buffer, chain_buffer);
++ NdisMoveMemory(pData + payload_index - 8, chain_buffer, payload_remainder);
++ payload_index += payload_remainder;
++ }
++
++ //
++ // Descrypt the MIC
++ //
++ construct_ctr_preload(ctr_preload,
++ a4_exists,
++ qc_exists,
++ pData,
++ PN,
++ 0);
++ NdisZeroMemory(padded_buffer, 16);
++ NdisMoveMemory(padded_buffer, pData + payload_index, 8);
++
++ aes128k128d(pWpaKey[KeyID].Key, ctr_preload, aes_out);
++
++ bitwise_xor(aes_out, padded_buffer, chain_buffer);
++
++ NdisMoveMemory(TrailMIC, chain_buffer, 8);
++
++ //
++ // Calculate MIC
++ //
++
++ //Force the protected frame bit on
++ *(pData + 1) = *(pData + 1) | 0x40;
++
++ // Find start of payload
++ // Because the CCMP header has been removed
++ payload_index = HeaderLen;
++
++ construct_mic_iv(
++ mic_iv,
++ qc_exists,
++ a4_exists,
++ pData,
++ payload_len,
++ PN);
++
++ construct_mic_header1(
++ mic_header1,
++ HeaderLen,
++ pData);
++
++ construct_mic_header2(
++ mic_header2,
++ pData,
++ a4_exists,
++ qc_exists);
++
++ aes128k128d(pWpaKey[KeyID].Key, mic_iv, aes_out);
++ bitwise_xor(aes_out, mic_header1, chain_buffer);
++ aes128k128d(pWpaKey[KeyID].Key, chain_buffer, aes_out);
++ bitwise_xor(aes_out, mic_header2, chain_buffer);
++ aes128k128d(pWpaKey[KeyID].Key, chain_buffer, aes_out);
++
++ // iterate through each 16 byte payload block
++ for (i = 0; i < num_blocks; i++)
++ {
++ bitwise_xor(aes_out, pData + payload_index, chain_buffer);
++ payload_index += 16;
++ aes128k128d(pWpaKey[KeyID].Key, chain_buffer, aes_out);
++ }
++
++ // Add on the final payload block if it needs padding
++ if (payload_remainder > 0)
++ {
++ NdisZeroMemory(padded_buffer, 16);
++ NdisMoveMemory(padded_buffer, pData + payload_index, payload_remainder);
++
++ bitwise_xor(aes_out, padded_buffer, chain_buffer);
++ aes128k128d(pWpaKey[KeyID].Key, chain_buffer, aes_out);
++ }
++
++ // aes_out contains padded mic, discard most significant
++ // 8 bytes to generate 64 bit MIC
++ for (i = 0 ; i < 8; i++) MIC[i] = aes_out[i];
++
++ if (!NdisEqualMemory(MIC, TrailMIC, 8))
++ {
++ DBGPRINT(RT_DEBUG_ERROR, ("RTMPSoftDecryptAES, MIC Error !\n")); //MIC error.
++ return FALSE;
++ }
++
++#ifdef RT_BIG_ENDIAN
++ RTMPFrameEndianChange(pAd, (PUCHAR)pData, DIR_READ, FALSE);
++#endif
++
++ return TRUE;
++}
++
++/****************************************/
++/* aes128k128d() */
++/* Performs a 128 bit AES encrypt with */
++/* 128 bit data. */
++/****************************************/
++VOID xor_128(
++ IN PUCHAR a,
++ IN PUCHAR b,
++ OUT PUCHAR out)
++{
++ INT i;
++
++ for (i=0;i<16; i++)
++ {
++ out[i] = a[i] ^ b[i];
++ }
++}
++
++VOID next_key(
++ IN PUCHAR key,
++ IN INT round)
++{
++ UCHAR rcon;
++ UCHAR sbox_key[4];
++ UCHAR rcon_table[12] =
++ {
++ 0x01, 0x02, 0x04, 0x08, 0x10, 0x20, 0x40, 0x80,
++ 0x1b, 0x36, 0x36, 0x36
++ };
++
++ sbox_key[0] = RTMPCkipSbox(key[13]);
++ sbox_key[1] = RTMPCkipSbox(key[14]);
++ sbox_key[2] = RTMPCkipSbox(key[15]);
++ sbox_key[3] = RTMPCkipSbox(key[12]);
++
++ rcon = rcon_table[round];
++
++ xor_32(&key[0], sbox_key, &key[0]);
++ key[0] = key[0] ^ rcon;
++
++ xor_32(&key[4], &key[0], &key[4]);
++ xor_32(&key[8], &key[4], &key[8]);
++ xor_32(&key[12], &key[8], &key[12]);
++}
++
++VOID xor_32(
++ IN PUCHAR a,
++ IN PUCHAR b,
++ OUT PUCHAR out)
++{
++ INT i;
++
++ for (i=0;i<4; i++)
++ {
++ out[i] = a[i] ^ b[i];
++ }
++}
++
++VOID byte_sub(
++ IN PUCHAR in,
++ OUT PUCHAR out)
++{
++ INT i;
++
++ for (i=0; i< 16; i++)
++ {
++ out[i] = RTMPCkipSbox(in[i]);
++ }
++}
++
++UCHAR RTMPCkipSbox(
++ IN UCHAR a)
++{
++ return SboxTable[(int)a];
++}
++
++VOID shift_row(
++ IN PUCHAR in,
++ OUT PUCHAR out)
++{
++ out[0] = in[0];
++ out[1] = in[5];
++ out[2] = in[10];
++ out[3] = in[15];
++ out[4] = in[4];
++ out[5] = in[9];
++ out[6] = in[14];
++ out[7] = in[3];
++ out[8] = in[8];
++ out[9] = in[13];
++ out[10] = in[2];
++ out[11] = in[7];
++ out[12] = in[12];
++ out[13] = in[1];
++ out[14] = in[6];
++ out[15] = in[11];
++}
++
++VOID mix_column(
++ IN PUCHAR in,
++ OUT PUCHAR out)
++{
++ INT i;
++ UCHAR add1b[4];
++ UCHAR add1bf7[4];
++ UCHAR rotl[4];
++ UCHAR swap_halfs[4];
++ UCHAR andf7[4];
++ UCHAR rotr[4];
++ UCHAR temp[4];
++ UCHAR tempb[4];
++
++ for (i=0 ; i<4; i++)
++ {
++ if ((in[i] & 0x80)== 0x80)
++ add1b[i] = 0x1b;
++ else
++ add1b[i] = 0x00;
++ }
++
++ swap_halfs[0] = in[2]; /* Swap halfs */
++ swap_halfs[1] = in[3];
++ swap_halfs[2] = in[0];
++ swap_halfs[3] = in[1];
++
++ rotl[0] = in[3]; /* Rotate left 8 bits */
++ rotl[1] = in[0];
++ rotl[2] = in[1];
++ rotl[3] = in[2];
++
++ andf7[0] = in[0] & 0x7f;
++ andf7[1] = in[1] & 0x7f;
++ andf7[2] = in[2] & 0x7f;
++ andf7[3] = in[3] & 0x7f;
++
++ for (i = 3; i>0; i--) /* logical shift left 1 bit */
++ {
++ andf7[i] = andf7[i] << 1;
++ if ((andf7[i-1] & 0x80) == 0x80)
++ {
++ andf7[i] = (andf7[i] | 0x01);
++ }
++ }
++ andf7[0] = andf7[0] << 1;
++ andf7[0] = andf7[0] & 0xfe;
++
++ xor_32(add1b, andf7, add1bf7);
++
++ xor_32(in, add1bf7, rotr);
++
++ temp[0] = rotr[0]; /* Rotate right 8 bits */
++ rotr[0] = rotr[1];
++ rotr[1] = rotr[2];
++ rotr[2] = rotr[3];
++ rotr[3] = temp[0];
++
++ xor_32(add1bf7, rotr, temp);
++ xor_32(swap_halfs, rotl,tempb);
++ xor_32(temp, tempb, out);
++}
++
+--- /dev/null
++++ b/drivers/staging/rt2870/common/rtmp_wep.c
+@@ -0,0 +1,508 @@
++/*
++ *************************************************************************
++ * Ralink Tech Inc.
++ * 5F., No.36, Taiyuan St., Jhubei City,
++ * Hsinchu County 302,
++ * Taiwan, R.O.C.
++ *
++ * (c) Copyright 2002-2007, Ralink Technology, Inc.
++ *
++ * This program is free software; you can redistribute it and/or modify *
++ * it under the terms of the GNU General Public License as published by *
++ * the Free Software Foundation; either version 2 of the License, or *
++ * (at your option) any later version. *
++ * *
++ * This program is distributed in the hope that it will be useful, *
++ * but WITHOUT ANY WARRANTY; without even the implied warranty of *
++ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the *
++ * GNU General Public License for more details. *
++ * *
++ * You should have received a copy of the GNU General Public License *
++ * along with this program; if not, write to the *
++ * Free Software Foundation, Inc., *
++ * 59 Temple Place - Suite 330, Boston, MA 02111-1307, USA. *
++ * *
++ *************************************************************************
++
++ Module Name:
++ rtmp_wep.c
++
++ Abstract:
++
++ Revision History:
++ Who When What
++ -------- ---------- ----------------------------------------------
++ Paul Wu 10-28-02 Initial
++*/
++
++#include "../rt_config.h"
++
++UINT FCSTAB_32[256] =
++{
++ 0x00000000, 0x77073096, 0xee0e612c, 0x990951ba,
++ 0x076dc419, 0x706af48f, 0xe963a535, 0x9e6495a3,
++ 0x0edb8832, 0x79dcb8a4, 0xe0d5e91e, 0x97d2d988,
++ 0x09b64c2b, 0x7eb17cbd, 0xe7b82d07, 0x90bf1d91,
++ 0x1db71064, 0x6ab020f2, 0xf3b97148, 0x84be41de,
++ 0x1adad47d, 0x6ddde4eb, 0xf4d4b551, 0x83d385c7,
++ 0x136c9856, 0x646ba8c0, 0xfd62f97a, 0x8a65c9ec,
++ 0x14015c4f, 0x63066cd9, 0xfa0f3d63, 0x8d080df5,
++ 0x3b6e20c8, 0x4c69105e, 0xd56041e4, 0xa2677172,
++ 0x3c03e4d1, 0x4b04d447, 0xd20d85fd, 0xa50ab56b,
++ 0x35b5a8fa, 0x42b2986c, 0xdbbbc9d6, 0xacbcf940,
++ 0x32d86ce3, 0x45df5c75, 0xdcd60dcf, 0xabd13d59,
++ 0x26d930ac, 0x51de003a, 0xc8d75180, 0xbfd06116,
++ 0x21b4f4b5, 0x56b3c423, 0xcfba9599, 0xb8bda50f,
++ 0x2802b89e, 0x5f058808, 0xc60cd9b2, 0xb10be924,
++ 0x2f6f7c87, 0x58684c11, 0xc1611dab, 0xb6662d3d,
++ 0x76dc4190, 0x01db7106, 0x98d220bc, 0xefd5102a,
++ 0x71b18589, 0x06b6b51f, 0x9fbfe4a5, 0xe8b8d433,
++ 0x7807c9a2, 0x0f00f934, 0x9609a88e, 0xe10e9818,
++ 0x7f6a0dbb, 0x086d3d2d, 0x91646c97, 0xe6635c01,
++ 0x6b6b51f4, 0x1c6c6162, 0x856530d8, 0xf262004e,
++ 0x6c0695ed, 0x1b01a57b, 0x8208f4c1, 0xf50fc457,
++ 0x65b0d9c6, 0x12b7e950, 0x8bbeb8ea, 0xfcb9887c,
++ 0x62dd1ddf, 0x15da2d49, 0x8cd37cf3, 0xfbd44c65,
++ 0x4db26158, 0x3ab551ce, 0xa3bc0074, 0xd4bb30e2,
++ 0x4adfa541, 0x3dd895d7, 0xa4d1c46d, 0xd3d6f4fb,
++ 0x4369e96a, 0x346ed9fc, 0xad678846, 0xda60b8d0,
++ 0x44042d73, 0x33031de5, 0xaa0a4c5f, 0xdd0d7cc9,
++ 0x5005713c, 0x270241aa, 0xbe0b1010, 0xc90c2086,
++ 0x5768b525, 0x206f85b3, 0xb966d409, 0xce61e49f,
++ 0x5edef90e, 0x29d9c998, 0xb0d09822, 0xc7d7a8b4,
++ 0x59b33d17, 0x2eb40d81, 0xb7bd5c3b, 0xc0ba6cad,
++ 0xedb88320, 0x9abfb3b6, 0x03b6e20c, 0x74b1d29a,
++ 0xead54739, 0x9dd277af, 0x04db2615, 0x73dc1683,
++ 0xe3630b12, 0x94643b84, 0x0d6d6a3e, 0x7a6a5aa8,
++ 0xe40ecf0b, 0x9309ff9d, 0x0a00ae27, 0x7d079eb1,
++ 0xf00f9344, 0x8708a3d2, 0x1e01f268, 0x6906c2fe,
++ 0xf762575d, 0x806567cb, 0x196c3671, 0x6e6b06e7,
++ 0xfed41b76, 0x89d32be0, 0x10da7a5a, 0x67dd4acc,
++ 0xf9b9df6f, 0x8ebeeff9, 0x17b7be43, 0x60b08ed5,
++ 0xd6d6a3e8, 0xa1d1937e, 0x38d8c2c4, 0x4fdff252,
++ 0xd1bb67f1, 0xa6bc5767, 0x3fb506dd, 0x48b2364b,
++ 0xd80d2bda, 0xaf0a1b4c, 0x36034af6, 0x41047a60,
++ 0xdf60efc3, 0xa867df55, 0x316e8eef, 0x4669be79,
++ 0xcb61b38c, 0xbc66831a, 0x256fd2a0, 0x5268e236,
++ 0xcc0c7795, 0xbb0b4703, 0x220216b9, 0x5505262f,
++ 0xc5ba3bbe, 0xb2bd0b28, 0x2bb45a92, 0x5cb36a04,
++ 0xc2d7ffa7, 0xb5d0cf31, 0x2cd99e8b, 0x5bdeae1d,
++ 0x9b64c2b0, 0xec63f226, 0x756aa39c, 0x026d930a,
++ 0x9c0906a9, 0xeb0e363f, 0x72076785, 0x05005713,
++ 0x95bf4a82, 0xe2b87a14, 0x7bb12bae, 0x0cb61b38,
++ 0x92d28e9b, 0xe5d5be0d, 0x7cdcefb7, 0x0bdbdf21,
++ 0x86d3d2d4, 0xf1d4e242, 0x68ddb3f8, 0x1fda836e,
++ 0x81be16cd, 0xf6b9265b, 0x6fb077e1, 0x18b74777,
++ 0x88085ae6, 0xff0f6a70, 0x66063bca, 0x11010b5c,
++ 0x8f659eff, 0xf862ae69, 0x616bffd3, 0x166ccf45,
++ 0xa00ae278, 0xd70dd2ee, 0x4e048354, 0x3903b3c2,
++ 0xa7672661, 0xd06016f7, 0x4969474d, 0x3e6e77db,
++ 0xaed16a4a, 0xd9d65adc, 0x40df0b66, 0x37d83bf0,
++ 0xa9bcae53, 0xdebb9ec5, 0x47b2cf7f, 0x30b5ffe9,
++ 0xbdbdf21c, 0xcabac28a, 0x53b39330, 0x24b4a3a6,
++ 0xbad03605, 0xcdd70693, 0x54de5729, 0x23d967bf,
++ 0xb3667a2e, 0xc4614ab8, 0x5d681b02, 0x2a6f2b94,
++ 0xb40bbe37, 0xc30c8ea1, 0x5a05df1b, 0x2d02ef8d
++};
++
++/*
++UCHAR WEPKEY[] = {
++ //IV
++ 0x00, 0x11, 0x22,
++ //WEP KEY
++ 0x00, 0x11, 0x22, 0x33, 0x44, 0x55, 0x66, 0x77, 0x88, 0x99, 0xAA, 0xBB, 0xCC
++ };
++ */
++
++/*
++ ========================================================================
++
++ Routine Description:
++ Init WEP function.
++
++ Arguments:
++ pAd Pointer to our adapter
++ pKey Pointer to the WEP KEY
++ KeyId WEP Key ID
++ KeyLen the length of WEP KEY
++ pDest Pointer to the destination which Encryption data will store in.
++
++ Return Value:
++ None
++
++ IRQL = DISPATCH_LEVEL
++
++ Note:
++
++ ========================================================================
++*/
++VOID RTMPInitWepEngine(
++ IN PRTMP_ADAPTER pAd,
++ IN PUCHAR pKey,
++ IN UCHAR KeyId,
++ IN UCHAR KeyLen,
++ IN OUT PUCHAR pDest)
++{
++ UINT i;
++ UCHAR WEPKEY[] = {
++ //IV
++ 0x00, 0x11, 0x22,
++ //WEP KEY
++ 0x00, 0x11, 0x22, 0x33, 0x44, 0x55, 0x66, 0x77, 0x88, 0x99, 0xAA, 0xBB, 0xCC
++ };
++
++ pAd->PrivateInfo.FCSCRC32 = PPPINITFCS32; //Init crc32.
++
++#ifdef CONFIG_STA_SUPPORT
++ if (pAd->StaCfg.bCkipOn && (pAd->StaCfg.CkipFlag & 0x10) && (pAd->OpMode == OPMODE_STA))
++ {
++ ARCFOUR_INIT(&pAd->PrivateInfo.WEPCONTEXT, pKey, KeyLen); //INIT SBOX, KEYLEN+3(IV)
++ NdisMoveMemory(pDest, pKey, 3); //Append Init Vector
++ }
++ else
++#endif // CONFIG_STA_SUPPORT //
++ {
++ NdisMoveMemory(WEPKEY + 3, pKey, KeyLen);
++
++ for(i = 0; i < 3; i++)
++ WEPKEY[i] = RandomByte(pAd); //Call mlme RandomByte() function.
++ ARCFOUR_INIT(&pAd->PrivateInfo.WEPCONTEXT, WEPKEY, KeyLen + 3); //INIT SBOX, KEYLEN+3(IV)
++
++ NdisMoveMemory(pDest, WEPKEY, 3); //Append Init Vector
++ }
++ *(pDest+3) = (KeyId << 6); //Append KEYID
++
++}
++
++/*
++ ========================================================================
++
++ Routine Description:
++ Encrypt transimitted data
++
++ Arguments:
++ pAd Pointer to our adapter
++ pSrc Pointer to the transimitted source data that will be encrypt
++ pDest Pointer to the destination where entryption data will be store in.
++ Len Indicate the length of the source data
++
++ Return Value:
++ None
++
++ IRQL = DISPATCH_LEVEL
++
++ Note:
++
++ ========================================================================
++*/
++VOID RTMPEncryptData(
++ IN PRTMP_ADAPTER pAd,
++ IN PUCHAR pSrc,
++ IN PUCHAR pDest,
++ IN UINT Len)
++{
++ pAd->PrivateInfo.FCSCRC32 = RTMP_CALC_FCS32(pAd->PrivateInfo.FCSCRC32, pSrc, Len);
++ ARCFOUR_ENCRYPT(&pAd->PrivateInfo.WEPCONTEXT, pDest, pSrc, Len);
++}
++
++
++/*
++ ========================================================================
++
++ Routine Description:
++ Decrypt received WEP data
++
++ Arguments:
++ pAdapter Pointer to our adapter
++ pSrc Pointer to the received data
++ Len the length of the received data
++
++ Return Value:
++ TRUE Decrypt WEP data success
++ FALSE Decrypt WEP data failed
++
++ Note:
++
++ ========================================================================
++*/
++BOOLEAN RTMPSoftDecryptWEP(
++ IN PRTMP_ADAPTER pAd,
++ IN PUCHAR pData,
++ IN ULONG DataByteCnt,
++ IN PCIPHER_KEY pGroupKey)
++{
++ UINT trailfcs;
++ UINT crc32;
++ UCHAR KeyIdx;
++ UCHAR WEPKEY[] = {
++ //IV
++ 0x00, 0x11, 0x22,
++ //WEP KEY
++ 0x00, 0x11, 0x22, 0x33, 0x44, 0x55, 0x66, 0x77, 0x88, 0x99, 0xAA, 0xBB, 0xCC
++ };
++ UCHAR *pPayload = (UCHAR *)pData + LENGTH_802_11;
++ ULONG payload_len = DataByteCnt - LENGTH_802_11;
++
++ NdisMoveMemory(WEPKEY, pPayload, 3); //Get WEP IV
++
++ KeyIdx = (*(pPayload + 3) & 0xc0) >> 6;
++ if (pGroupKey[KeyIdx].KeyLen == 0)
++ return (FALSE);
++
++ NdisMoveMemory(WEPKEY + 3, pGroupKey[KeyIdx].Key, pGroupKey[KeyIdx].KeyLen);
++ ARCFOUR_INIT(&pAd->PrivateInfo.WEPCONTEXT, WEPKEY, pGroupKey[KeyIdx].KeyLen + 3);
++ ARCFOUR_DECRYPT(&pAd->PrivateInfo.WEPCONTEXT, pPayload, pPayload + 4, payload_len - 4);
++ NdisMoveMemory(&trailfcs, pPayload + payload_len - 8, 4);
++ crc32 = RTMP_CALC_FCS32(PPPINITFCS32, pPayload, payload_len - 8); //Skip last 4 bytes(FCS).
++ crc32 ^= 0xffffffff; /* complement */
++
++ if(crc32 != cpu2le32(trailfcs))
++ {
++ DBGPRINT(RT_DEBUG_TRACE, ("! WEP Data CRC Error !\n")); //CRC error.
++ return (FALSE);
++ }
++ return (TRUE);
++}
++
++/*
++ ========================================================================
++
++ Routine Description:
++ The Stream Cipher Encryption Algorithm "ARCFOUR" initialize
++
++ Arguments:
++ Ctx Pointer to ARCFOUR CONTEXT (SBOX)
++ pKey Pointer to the WEP KEY
++ KeyLen Indicate the length fo the WEP KEY
++
++ Return Value:
++ None
++
++ IRQL = DISPATCH_LEVEL
++
++ Note:
++
++ ========================================================================
++*/
++VOID ARCFOUR_INIT(
++ IN PARCFOURCONTEXT Ctx,
++ IN PUCHAR pKey,
++ IN UINT KeyLen)
++{
++ UCHAR t, u;
++ UINT keyindex;
++ UINT stateindex;
++ PUCHAR state;
++ UINT counter;
++
++ state = Ctx->STATE;
++ Ctx->X = 0;
++ Ctx->Y = 0;
++ for (counter = 0; counter < 256; counter++)
++ state[counter] = (UCHAR)counter;
++ keyindex = 0;
++ stateindex = 0;
++ for (counter = 0; counter < 256; counter++)
++ {
++ t = state[counter];
++ stateindex = (stateindex + pKey[keyindex] + t) & 0xff;
++ u = state[stateindex];
++ state[stateindex] = t;
++ state[counter] = u;
++ if (++keyindex >= KeyLen)
++ keyindex = 0;
++ }
++}
++
++/*
++ ========================================================================
++
++ Routine Description:
++ Get bytes from ARCFOUR CONTEXT (S-BOX)
++
++ Arguments:
++ Ctx Pointer to ARCFOUR CONTEXT (SBOX)
++
++ Return Value:
++ UCHAR - the value of the ARCFOUR CONTEXT (S-BOX)
++
++ Note:
++
++ ========================================================================
++*/
++UCHAR ARCFOUR_BYTE(
++ IN PARCFOURCONTEXT Ctx)
++{
++ UINT x;
++ UINT y;
++ UCHAR sx, sy;
++ PUCHAR state;
++
++ state = Ctx->STATE;
++ x = (Ctx->X + 1) & 0xff;
++ sx = state[x];
++ y = (sx + Ctx->Y) & 0xff;
++ sy = state[y];
++ Ctx->X = x;
++ Ctx->Y = y;
++ state[y] = sx;
++ state[x] = sy;
++
++ return(state[(sx + sy) & 0xff]);
++
++}
++
++/*
++ ========================================================================
++
++ Routine Description:
++ The Stream Cipher Decryption Algorithm
++
++ Arguments:
++ Ctx Pointer to ARCFOUR CONTEXT (SBOX)
++ pDest Pointer to the Destination
++ pSrc Pointer to the Source data
++ Len Indicate the length of the Source data
++
++ Return Value:
++ None
++
++ Note:
++
++ ========================================================================
++*/
++VOID ARCFOUR_DECRYPT(
++ IN PARCFOURCONTEXT Ctx,
++ IN PUCHAR pDest,
++ IN PUCHAR pSrc,
++ IN UINT Len)
++{
++ UINT i;
++
++ for (i = 0; i < Len; i++)
++ pDest[i] = pSrc[i] ^ ARCFOUR_BYTE(Ctx);
++}
++
++/*
++ ========================================================================
++
++ Routine Description:
++ The Stream Cipher Encryption Algorithm
++
++ Arguments:
++ Ctx Pointer to ARCFOUR CONTEXT (SBOX)
++ pDest Pointer to the Destination
++ pSrc Pointer to the Source data
++ Len Indicate the length of the Source dta
++
++ Return Value:
++ None
++
++ IRQL = DISPATCH_LEVEL
++
++ Note:
++
++ ========================================================================
++*/
++VOID ARCFOUR_ENCRYPT(
++ IN PARCFOURCONTEXT Ctx,
++ IN PUCHAR pDest,
++ IN PUCHAR pSrc,
++ IN UINT Len)
++{
++ UINT i;
++
++ for (i = 0; i < Len; i++)
++ pDest[i] = pSrc[i] ^ ARCFOUR_BYTE(Ctx);
++}
++
++/*
++ ========================================================================
++
++ Routine Description:
++ The Stream Cipher Encryption Algorithm which conform to the special requirement to encrypt GTK.
++
++ Arguments:
++ Ctx Pointer to ARCFOUR CONTEXT (SBOX)
++ pDest Pointer to the Destination
++ pSrc Pointer to the Source data
++ Len Indicate the length of the Source dta
++
++
++ ========================================================================
++*/
++
++VOID WPAARCFOUR_ENCRYPT(
++ IN PARCFOURCONTEXT Ctx,
++ IN PUCHAR pDest,
++ IN PUCHAR pSrc,
++ IN UINT Len)
++{
++ UINT i;
++ //discard first 256 bytes
++ for (i = 0; i < 256; i++)
++ ARCFOUR_BYTE(Ctx);
++
++ for (i = 0; i < Len; i++)
++ pDest[i] = pSrc[i] ^ ARCFOUR_BYTE(Ctx);
++}
++
++
++/*
++ ========================================================================
++
++ Routine Description:
++ Calculate a new FCS given the current FCS and the new data.
++
++ Arguments:
++ Fcs the original FCS value
++ Cp pointer to the data which will be calculate the FCS
++ Len the length of the data
++
++ Return Value:
++ UINT - FCS 32 bits
++
++ IRQL = DISPATCH_LEVEL
++
++ Note:
++
++ ========================================================================
++*/
++UINT RTMP_CALC_FCS32(
++ IN UINT Fcs,
++ IN PUCHAR Cp,
++ IN INT Len)
++{
++ while (Len--)
++ Fcs = (((Fcs) >> 8) ^ FCSTAB_32[((Fcs) ^ (*Cp++)) & 0xff]);
++
++ return (Fcs);
++}
++
++
++/*
++ ========================================================================
++
++ Routine Description:
++ Get last FCS and encrypt it to the destination
++
++ Arguments:
++ pDest Pointer to the Destination
++
++ Return Value:
++ None
++
++ Note:
++
++ ========================================================================
++*/
++VOID RTMPSetICV(
++ IN PRTMP_ADAPTER pAd,
++ IN PUCHAR pDest)
++{
++ pAd->PrivateInfo.FCSCRC32 ^= 0xffffffff; /* complement */
++ pAd->PrivateInfo.FCSCRC32 = cpu2le32(pAd->PrivateInfo.FCSCRC32);
++
++ ARCFOUR_ENCRYPT(&pAd->PrivateInfo.WEPCONTEXT, pDest, (PUCHAR) &pAd->PrivateInfo.FCSCRC32, 4);
++}
++
+--- /dev/null
++++ b/drivers/staging/rt2870/common/rtusb_bulk.c
+@@ -0,0 +1,1981 @@
++ /*
++ *************************************************************************
++ * Ralink Tech Inc.
++ * 5F., No.36, Taiyuan St., Jhubei City,
++ * Hsinchu County 302,
++ * Taiwan, R.O.C.
++ *
++ * (c) Copyright 2002-2007, Ralink Technology, Inc.
++ *
++ * This program is free software; you can redistribute it and/or modify *
++ * it under the terms of the GNU General Public License as published by *
++ * the Free Software Foundation; either version 2 of the License, or *
++ * (at your option) any later version. *
++ * *
++ * This program is distributed in the hope that it will be useful, *
++ * but WITHOUT ANY WARRANTY; without even the implied warranty of *
++ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the *
++ * GNU General Public License for more details. *
++ * *
++ * You should have received a copy of the GNU General Public License *
++ * along with this program; if not, write to the *
++ * Free Software Foundation, Inc., *
++ * 59 Temple Place - Suite 330, Boston, MA 02111-1307, USA. *
++ * *
++ *************************************************************************
++
++ Module Name:
++ rtusb_bulk.c
++
++ Abstract:
++
++ Revision History:
++ Who When What
++ -------- ---------- ----------------------------------------------
++ Name Date Modification logs
++ Paul Lin 06-25-2004 created
++
++*/
++
++#include "../rt_config.h"
++// Match total 6 bulkout endpoint to corresponding queue.
++UCHAR EpToQueue[6]={FIFO_EDCA, FIFO_EDCA, FIFO_EDCA, FIFO_EDCA, FIFO_EDCA, FIFO_MGMT};
++
++//static BOOLEAN SingleBulkOut = FALSE;
++
++void RTUSB_FILL_BULK_URB (struct urb *pUrb,
++ struct usb_device *pUsb_Dev,
++ unsigned int bulkpipe,
++ void *pTransferBuf,
++ int BufSize,
++ usb_complete_t Complete,
++ void *pContext)
++{
++
++#if LINUX_VERSION_CODE >= KERNEL_VERSION(2,5,0)
++ usb_fill_bulk_urb(pUrb, pUsb_Dev, bulkpipe, pTransferBuf, BufSize, (usb_complete_t)Complete, pContext);
++#else
++ FILL_BULK_URB(pUrb, pUsb_Dev, bulkpipe, pTransferBuf, BufSize, Complete, pContext);
++#endif
++
++}
++
++VOID RTUSBInitTxDesc(
++ IN PRTMP_ADAPTER pAd,
++ IN PTX_CONTEXT pTxContext,
++ IN UCHAR BulkOutPipeId,
++ IN usb_complete_t Func)
++{
++ PURB pUrb;
++ PUCHAR pSrc = NULL;
++ POS_COOKIE pObj = (POS_COOKIE) pAd->OS_Cookie;
++
++ pUrb = pTxContext->pUrb;
++ ASSERT(pUrb);
++
++ // Store BulkOut PipeId
++ pTxContext->BulkOutPipeId = BulkOutPipeId;
++
++ if (pTxContext->bAggregatible)
++ {
++ pSrc = &pTxContext->TransferBuffer->Aggregation[2];
++ }
++ else
++ {
++ pSrc = (PUCHAR) pTxContext->TransferBuffer->field.WirelessPacket;
++ }
++
++
++ //Initialize a tx bulk urb
++ RTUSB_FILL_BULK_URB(pUrb,
++ pObj->pUsb_Dev,
++ usb_sndbulkpipe(pObj->pUsb_Dev, pAd->BulkOutEpAddr[BulkOutPipeId]),
++ pSrc,
++ pTxContext->BulkOutSize,
++ Func,
++ pTxContext);
++
++#if LINUX_VERSION_CODE >= KERNEL_VERSION(2,5,0)
++ if (pTxContext->bAggregatible)
++ pUrb->transfer_dma = (pTxContext->data_dma + TX_BUFFER_NORMSIZE + 2);
++ else
++ pUrb->transfer_dma = pTxContext->data_dma;
++
++ pUrb->transfer_flags |= URB_NO_TRANSFER_DMA_MAP;
++#endif
++
++}
++
++VOID RTUSBInitHTTxDesc(
++ IN PRTMP_ADAPTER pAd,
++ IN PHT_TX_CONTEXT pTxContext,
++ IN UCHAR BulkOutPipeId,
++ IN ULONG BulkOutSize,
++ IN usb_complete_t Func)
++{
++ PURB pUrb;
++ PUCHAR pSrc = NULL;
++ POS_COOKIE pObj = (POS_COOKIE) pAd->OS_Cookie;
++
++ pUrb = pTxContext->pUrb;
++ ASSERT(pUrb);
++
++ // Store BulkOut PipeId
++ pTxContext->BulkOutPipeId = BulkOutPipeId;
++
++ pSrc = &pTxContext->TransferBuffer->field.WirelessPacket[pTxContext->NextBulkOutPosition];
++
++
++ //Initialize a tx bulk urb
++ RTUSB_FILL_BULK_URB(pUrb,
++ pObj->pUsb_Dev,
++ usb_sndbulkpipe(pObj->pUsb_Dev, pAd->BulkOutEpAddr[BulkOutPipeId]),
++ pSrc,
++ BulkOutSize,
++ Func,
++ pTxContext);
++
++#if LINUX_VERSION_CODE >= KERNEL_VERSION(2,5,0)
++ pUrb->transfer_dma = (pTxContext->data_dma + pTxContext->NextBulkOutPosition);
++ pUrb->transfer_flags |= URB_NO_TRANSFER_DMA_MAP;
++#endif
++
++}
++
++VOID RTUSBInitRxDesc(
++ IN PRTMP_ADAPTER pAd,
++ IN PRX_CONTEXT pRxContext)
++{
++ PURB pUrb;
++ POS_COOKIE pObj = (POS_COOKIE) pAd->OS_Cookie;
++ ULONG RX_bulk_size;
++
++
++ pUrb = pRxContext->pUrb;
++ ASSERT(pUrb);
++
++ if ( pAd->BulkInMaxPacketSize == 64)
++ RX_bulk_size = 4096;
++ else
++ RX_bulk_size = MAX_RXBULK_SIZE;
++
++ //Initialize a rx bulk urb
++ RTUSB_FILL_BULK_URB(pUrb,
++ pObj->pUsb_Dev,
++ usb_rcvbulkpipe(pObj->pUsb_Dev, pAd->BulkInEpAddr),
++ &(pRxContext->TransferBuffer[pAd->NextRxBulkInPosition]),
++ RX_bulk_size - (pAd->NextRxBulkInPosition),
++ (usb_complete_t)RTUSBBulkRxComplete,
++ (void *)pRxContext);
++
++#if LINUX_VERSION_CODE >= KERNEL_VERSION(2,5,0)
++ pUrb->transfer_dma = pRxContext->data_dma + pAd->NextRxBulkInPosition;
++ pUrb->transfer_flags |= URB_NO_TRANSFER_DMA_MAP;
++#endif
++
++
++}
++
++/*
++ ========================================================================
++
++ Routine Description:
++
++ Arguments:
++
++ Return Value:
++
++ Note:
++
++ ========================================================================
++*/
++
++#define BULK_OUT_LOCK(pLock, IrqFlags) \
++ if(1 /*!(in_interrupt() & 0xffff0000)*/) \
++ RTMP_IRQ_LOCK((pLock), IrqFlags);
++
++#define BULK_OUT_UNLOCK(pLock, IrqFlags) \
++ if(1 /*!(in_interrupt() & 0xffff0000)*/) \
++ RTMP_IRQ_UNLOCK((pLock), IrqFlags);
++
++
++VOID RTUSBBulkOutDataPacket(
++ IN PRTMP_ADAPTER pAd,
++ IN UCHAR BulkOutPipeId,
++ IN UCHAR Index)
++{
++
++ PHT_TX_CONTEXT pHTTXContext;
++ PURB pUrb;
++ int ret = 0;
++ PTXINFO_STRUC pTxInfo, pLastTxInfo = NULL;
++ PTXWI_STRUC pTxWI;
++ ULONG TmpBulkEndPos, ThisBulkSize;
++ unsigned long IrqFlags = 0, IrqFlags2 = 0;
++ PUCHAR pWirelessPkt, pAppendant;
++ BOOLEAN bTxQLastRound = FALSE;
++ UCHAR allzero[4]= {0x0,0x0,0x0,0x0};
++
++ BULK_OUT_LOCK(&pAd->BulkOutLock[BulkOutPipeId], IrqFlags);
++ if ((pAd->BulkOutPending[BulkOutPipeId] == TRUE) || RTMP_TEST_FLAG(pAd, fRTMP_ADAPTER_NEED_STOP_TX))
++ {
++ BULK_OUT_UNLOCK(&pAd->BulkOutLock[BulkOutPipeId], IrqFlags);
++ return;
++ }
++ pAd->BulkOutPending[BulkOutPipeId] = TRUE;
++
++ if (!OPSTATUS_TEST_FLAG(pAd, fOP_STATUS_MEDIA_STATE_CONNECTED)
++ )
++ {
++ pAd->BulkOutPending[BulkOutPipeId] = FALSE;
++ BULK_OUT_UNLOCK(&pAd->BulkOutLock[BulkOutPipeId], IrqFlags);
++ return;
++ }
++ BULK_OUT_UNLOCK(&pAd->BulkOutLock[BulkOutPipeId], IrqFlags);
++
++
++ pHTTXContext = &(pAd->TxContext[BulkOutPipeId]);
++
++ BULK_OUT_LOCK(&pAd->TxContextQueueLock[BulkOutPipeId], IrqFlags2);
++ if ((pHTTXContext->ENextBulkOutPosition == pHTTXContext->CurWritePosition)
++ || ((pHTTXContext->ENextBulkOutPosition-8) == pHTTXContext->CurWritePosition))
++ {
++ BULK_OUT_UNLOCK(&pAd->TxContextQueueLock[BulkOutPipeId], IrqFlags2);
++
++ BULK_OUT_LOCK(&pAd->BulkOutLock[BulkOutPipeId], IrqFlags);
++ pAd->BulkOutPending[BulkOutPipeId] = FALSE;
++
++ // Clear Data flag
++ RTUSB_CLEAR_BULK_FLAG(pAd, (fRTUSB_BULK_OUT_DATA_FRAG << BulkOutPipeId));
++ RTUSB_CLEAR_BULK_FLAG(pAd, (fRTUSB_BULK_OUT_DATA_NORMAL << BulkOutPipeId));
++
++ BULK_OUT_UNLOCK(&pAd->BulkOutLock[BulkOutPipeId], IrqFlags);
++ return;
++ }
++
++ // Clear Data flag
++ RTUSB_CLEAR_BULK_FLAG(pAd, (fRTUSB_BULK_OUT_DATA_FRAG << BulkOutPipeId));
++ RTUSB_CLEAR_BULK_FLAG(pAd, (fRTUSB_BULK_OUT_DATA_NORMAL << BulkOutPipeId));
++
++ //DBGPRINT(RT_DEBUG_TRACE,("BulkOut-B:I=0x%lx, CWPos=%ld, CWRPos=%ld, NBPos=%ld, ENBPos=%ld, bCopy=%d!\n", in_interrupt(),
++ // pHTTXContext->CurWritePosition, pHTTXContext->CurWriteRealPos, pHTTXContext->NextBulkOutPosition,
++ // pHTTXContext->ENextBulkOutPosition, pHTTXContext->bCopySavePad));
++ pHTTXContext->NextBulkOutPosition = pHTTXContext->ENextBulkOutPosition;
++ ThisBulkSize = 0;
++ TmpBulkEndPos = pHTTXContext->NextBulkOutPosition;
++ pWirelessPkt = &pHTTXContext->TransferBuffer->field.WirelessPacket[0];
++
++ if ((pHTTXContext->bCopySavePad == TRUE))
++ {
++ if (RTMPEqualMemory(pHTTXContext->SavedPad, allzero,4))
++ {
++ DBGPRINT_RAW(RT_DEBUG_ERROR,("e1, allzero : %x %x %x %x %x %x %x %x \n",
++ pHTTXContext->SavedPad[0], pHTTXContext->SavedPad[1], pHTTXContext->SavedPad[2],pHTTXContext->SavedPad[3]
++ ,pHTTXContext->SavedPad[4], pHTTXContext->SavedPad[5], pHTTXContext->SavedPad[6],pHTTXContext->SavedPad[7]));
++ }
++ NdisMoveMemory(&pWirelessPkt[TmpBulkEndPos], pHTTXContext->SavedPad, 8);
++ pHTTXContext->bCopySavePad = FALSE;
++ if (pAd->bForcePrintTX == TRUE)
++ DBGPRINT(RT_DEBUG_TRACE,("RTUSBBulkOutDataPacket --> COPY PAD. CurWrite = %ld, NextBulk = %ld. ENextBulk = %ld.\n", pHTTXContext->CurWritePosition, pHTTXContext->NextBulkOutPosition, pHTTXContext->ENextBulkOutPosition));
++ }
++
++ do
++ {
++ pTxInfo = (PTXINFO_STRUC)&pWirelessPkt[TmpBulkEndPos];
++ pTxWI = (PTXWI_STRUC)&pWirelessPkt[TmpBulkEndPos + TXINFO_SIZE];
++
++ if (pAd->bForcePrintTX == TRUE)
++ DBGPRINT(RT_DEBUG_TRACE, ("RTUSBBulkOutDataPacket AMPDU = %d.\n", pTxWI->AMPDU));
++
++ // add by Iverson, limit BulkOut size to 4k to pass WMM b mode 2T1R test items
++ //if ((ThisBulkSize != 0) && (pTxWI->AMPDU == 0))
++ if ((ThisBulkSize != 0) && (pTxWI->PHYMODE == MODE_CCK))
++ {
++ if (((ThisBulkSize&0xffff8000) != 0) || ((ThisBulkSize&0x1000) == 0x1000))
++ {
++ // Limit BulkOut size to about 4k bytes.
++ pHTTXContext->ENextBulkOutPosition = TmpBulkEndPos;
++ break;
++ }
++ else if (((pAd->BulkOutMaxPacketSize < 512) && ((ThisBulkSize&0xfffff800) != 0) ) /*|| ( (ThisBulkSize != 0) && (pTxWI->AMPDU == 0))*/)
++ {
++ // For USB 1.1 or peer which didn't support AMPDU, limit the BulkOut size.
++ // For performence in b/g mode, now just check for USB 1.1 and didn't care about the APMDU or not! 2008/06/04.
++ pHTTXContext->ENextBulkOutPosition = TmpBulkEndPos;
++ break;
++ }
++ }
++ // end Iverson
++ else
++ {
++ if (((ThisBulkSize&0xffff8000) != 0) || ((ThisBulkSize&0x6000) == 0x6000))
++ { // Limit BulkOut size to about 24k bytes.
++ pHTTXContext->ENextBulkOutPosition = TmpBulkEndPos;
++ break;
++ }
++ else if (((pAd->BulkOutMaxPacketSize < 512) && ((ThisBulkSize&0xfffff800) != 0) ) /*|| ( (ThisBulkSize != 0) && (pTxWI->AMPDU == 0))*/)
++ { // For USB 1.1 or peer which didn't support AMPDU, limit the BulkOut size.
++ // For performence in b/g mode, now just check for USB 1.1 and didn't care about the APMDU or not! 2008/06/04.
++ pHTTXContext->ENextBulkOutPosition = TmpBulkEndPos;
++ break;
++ }
++ }
++
++ if (TmpBulkEndPos == pHTTXContext->CurWritePosition)
++ {
++ pHTTXContext->ENextBulkOutPosition = TmpBulkEndPos;
++ break;
++ }
++
++ if (pTxInfo->QSEL != FIFO_EDCA)
++ {
++ printk("%s(): ====> pTxInfo->QueueSel(%d)!= FIFO_EDCA!!!!\n", __FUNCTION__, pTxInfo->QSEL);
++ printk("\tCWPos=%ld, NBPos=%ld, ENBPos=%ld, bCopy=%d!\n", pHTTXContext->CurWritePosition, pHTTXContext->NextBulkOutPosition, pHTTXContext->ENextBulkOutPosition, pHTTXContext->bCopySavePad);
++ hex_dump("Wrong QSel Pkt:", (PUCHAR)&pWirelessPkt[TmpBulkEndPos], (pHTTXContext->CurWritePosition - pHTTXContext->NextBulkOutPosition));
++ }
++
++ if (pTxInfo->USBDMATxPktLen <= 8)
++ {
++ BULK_OUT_UNLOCK(&pAd->TxContextQueueLock[BulkOutPipeId], IrqFlags2);
++ DBGPRINT(RT_DEBUG_ERROR /*RT_DEBUG_TRACE*/,("e2, USBDMATxPktLen==0, Size=%ld, bCSPad=%d, CWPos=%ld, NBPos=%ld, CWRPos=%ld!\n",
++ pHTTXContext->BulkOutSize, pHTTXContext->bCopySavePad, pHTTXContext->CurWritePosition, pHTTXContext->NextBulkOutPosition, pHTTXContext->CurWriteRealPos));
++ {
++ DBGPRINT_RAW(RT_DEBUG_ERROR /*RT_DEBUG_TRACE*/,("%x %x %x %x %x %x %x %x \n",
++ pHTTXContext->SavedPad[0], pHTTXContext->SavedPad[1], pHTTXContext->SavedPad[2],pHTTXContext->SavedPad[3]
++ ,pHTTXContext->SavedPad[4], pHTTXContext->SavedPad[5], pHTTXContext->SavedPad[6],pHTTXContext->SavedPad[7]));
++ }
++ pAd->bForcePrintTX = TRUE;
++ BULK_OUT_LOCK(&pAd->BulkOutLock[BulkOutPipeId], IrqFlags);
++ pAd->BulkOutPending[BulkOutPipeId] = FALSE;
++ BULK_OUT_UNLOCK(&pAd->BulkOutLock[BulkOutPipeId], IrqFlags);
++ //DBGPRINT(RT_DEBUG_LOUD,("Out:pTxInfo->USBDMATxPktLen=%d!\n", pTxInfo->USBDMATxPktLen));
++ return;
++ }
++
++ // Increase Total transmit byte counter
++ pAd->RalinkCounters.OneSecTransmittedByteCount += pTxWI->MPDUtotalByteCount;
++ pAd->RalinkCounters.TransmittedByteCount += pTxWI->MPDUtotalByteCount;
++
++ pLastTxInfo = pTxInfo;
++
++ // Make sure we use EDCA QUEUE.
++ pTxInfo->QSEL = FIFO_EDCA;
++ ThisBulkSize += (pTxInfo->USBDMATxPktLen+4);
++ TmpBulkEndPos += (pTxInfo->USBDMATxPktLen+4);
++
++ if (TmpBulkEndPos != pHTTXContext->CurWritePosition)
++ pTxInfo->USBDMANextVLD = 1;
++
++ if (pTxInfo->SwUseLastRound == 1)
++ {
++ if (pHTTXContext->CurWritePosition == 8)
++ pTxInfo->USBDMANextVLD = 0;
++ pTxInfo->SwUseLastRound = 0;
++
++ bTxQLastRound = TRUE;
++ pHTTXContext->ENextBulkOutPosition = 8;
++
++ #ifdef RT_BIG_ENDIAN
++ RTMPDescriptorEndianChange((PUCHAR)pTxInfo, TYPE_TXINFO);
++ RTMPWIEndianChange((PUCHAR)pTxWI, TYPE_TXWI);
++ #endif // RT_BIG_ENDIAN //
++
++ break;
++ }
++
++#ifdef RT_BIG_ENDIAN
++ RTMPDescriptorEndianChange((PUCHAR)pTxInfo, TYPE_TXINFO);
++ RTMPWIEndianChange((PUCHAR)pTxWI, TYPE_TXWI);
++#endif // RT_BIG_ENDIAN //
++
++ }while (TRUE);
++
++ // adjust the pTxInfo->USBDMANextVLD value of last pTxInfo.
++ if (pLastTxInfo)
++ {
++#ifdef RT_BIG_ENDIAN
++ RTMPDescriptorEndianChange((PUCHAR)pLastTxInfo, TYPE_TXINFO);
++#endif // RT_BIG_ENDIAN //
++ pLastTxInfo->USBDMANextVLD = 0;
++#ifdef RT_BIG_ENDIAN
++ RTMPDescriptorEndianChange((PUCHAR)pLastTxInfo, TYPE_TXINFO);
++#endif // RT_BIG_ENDIAN //
++ }
++
++ /*
++ We need to copy SavedPad when following condition matched!
++ 1. Not the last round of the TxQueue and
++ 2. any match of following cases:
++ (1). The End Position of this bulk out is reach to the Currenct Write position and
++ the TxInfo and related header already write to the CurWritePosition.
++ =>(ENextBulkOutPosition == CurWritePosition) && (CurWriteRealPos > CurWritePosition)
++
++ (2). The EndPosition of the bulk out is not reach to the Current Write Position.
++ =>(ENextBulkOutPosition != CurWritePosition)
++ */
++ if ((bTxQLastRound == FALSE) &&
++ (((pHTTXContext->ENextBulkOutPosition == pHTTXContext->CurWritePosition) && (pHTTXContext->CurWriteRealPos > pHTTXContext->CurWritePosition)) ||
++ (pHTTXContext->ENextBulkOutPosition != pHTTXContext->CurWritePosition))
++ )
++ {
++ NdisMoveMemory(pHTTXContext->SavedPad, &pWirelessPkt[pHTTXContext->ENextBulkOutPosition], 8);
++ pHTTXContext->bCopySavePad = TRUE;
++ if (RTMPEqualMemory(pHTTXContext->SavedPad, allzero,4))
++ {
++ PUCHAR pBuf = &pHTTXContext->SavedPad[0];
++ DBGPRINT_RAW(RT_DEBUG_ERROR,("WARNING-Zero-3:%02x%02x%02x%02x%02x%02x%02x%02x,CWPos=%ld, CWRPos=%ld, bCW=%d, NBPos=%ld, TBPos=%ld, TBSize=%ld\n",
++ pBuf[0], pBuf[1], pBuf[2],pBuf[3],pBuf[4], pBuf[5], pBuf[6],pBuf[7], pHTTXContext->CurWritePosition, pHTTXContext->CurWriteRealPos,
++ pHTTXContext->bCurWriting, pHTTXContext->NextBulkOutPosition, TmpBulkEndPos, ThisBulkSize));
++
++ pBuf = &pWirelessPkt[pHTTXContext->CurWritePosition];
++ DBGPRINT_RAW(RT_DEBUG_ERROR,("\tCWPos=%02x%02x%02x%02x%02x%02x%02x%02x\n", pBuf[0], pBuf[1], pBuf[2],pBuf[3],pBuf[4], pBuf[5], pBuf[6],pBuf[7]));
++ }
++ //DBGPRINT(RT_DEBUG_LOUD,("ENPos==CWPos=%ld, CWRPos=%ld, bCSPad=%d!\n", pHTTXContext->CurWritePosition, pHTTXContext->CurWriteRealPos, pHTTXContext->bCopySavePad));
++ }
++
++ if (pAd->bForcePrintTX == TRUE)
++ DBGPRINT(RT_DEBUG_TRACE,("BulkOut-A:Size=%ld, CWPos=%ld, NBPos=%ld, ENBPos=%ld, bCopy=%d!\n", ThisBulkSize, pHTTXContext->CurWritePosition, pHTTXContext->NextBulkOutPosition, pHTTXContext->ENextBulkOutPosition, pHTTXContext->bCopySavePad));
++ //DBGPRINT(RT_DEBUG_LOUD,("BulkOut-A:Size=%ld, CWPos=%ld, CWRPos=%ld, NBPos=%ld, ENBPos=%ld, bCopy=%d, bLRound=%d!\n", ThisBulkSize, pHTTXContext->CurWritePosition, pHTTXContext->CurWriteRealPos, pHTTXContext->NextBulkOutPosition, pHTTXContext->ENextBulkOutPosition, pHTTXContext->bCopySavePad, bTxQLastRound));
++
++ // USB DMA engine requires to pad extra 4 bytes. This pad doesn't count into real bulkoutsize.
++ pAppendant = &pWirelessPkt[TmpBulkEndPos];
++ NdisZeroMemory(pAppendant, 8);
++ ThisBulkSize += 4;
++ pHTTXContext->LastOne = TRUE;
++ if ((ThisBulkSize % pAd->BulkOutMaxPacketSize) == 0)
++ ThisBulkSize += 4;
++ pHTTXContext->BulkOutSize = ThisBulkSize;
++
++ pAd->watchDogTxPendingCnt[BulkOutPipeId] = 1;
++ BULK_OUT_UNLOCK(&pAd->TxContextQueueLock[BulkOutPipeId], IrqFlags2);
++
++ // Init Tx context descriptor
++ RTUSBInitHTTxDesc(pAd, pHTTXContext, BulkOutPipeId, ThisBulkSize, (usb_complete_t)RTUSBBulkOutDataPacketComplete);
++
++ pUrb = pHTTXContext->pUrb;
++ if((ret = RTUSB_SUBMIT_URB(pUrb))!=0)
++ {
++ DBGPRINT(RT_DEBUG_ERROR, ("RTUSBBulkOutDataPacket: Submit Tx URB failed %d\n", ret));
++
++ BULK_OUT_LOCK(&pAd->BulkOutLock[BulkOutPipeId], IrqFlags);
++ pAd->BulkOutPending[BulkOutPipeId] = FALSE;
++ pAd->watchDogTxPendingCnt[BulkOutPipeId] = 0;
++ BULK_OUT_UNLOCK(&pAd->BulkOutLock[BulkOutPipeId], IrqFlags);
++
++ return;
++ }
++
++ BULK_OUT_LOCK(&pAd->BulkOutLock[BulkOutPipeId], IrqFlags);
++ pHTTXContext->IRPPending = TRUE;
++ BULK_OUT_UNLOCK(&pAd->BulkOutLock[BulkOutPipeId], IrqFlags);
++ pAd->BulkOutReq++;
++
++}
++
++
++VOID RTUSBBulkOutDataPacketComplete(purbb_t pUrb, struct pt_regs *pt_regs)
++{
++#if 0 // sample, IRQ LOCK
++ PRTMP_ADAPTER pAd;
++ POS_COOKIE pObj;
++ PHT_TX_CONTEXT pHTTXContext;
++ UCHAR BulkOutPipeId;
++ NTSTATUS Status;
++ unsigned long IrqFlags;
++
++ DBGPRINT_RAW(RT_DEBUG_INFO, ("--->RTUSBBulkOutDataPacketComplete\n"));
++
++ pHTTXContext = (PHT_TX_CONTEXT)pUrb->context;
++ pAd = pHTTXContext->pAd;
++ pObj = (POS_COOKIE) pAd->OS_Cookie;
++ Status = pUrb->status;
++
++ // Store BulkOut PipeId
++ BulkOutPipeId = pHTTXContext->BulkOutPipeId;
++ pAd->BulkOutDataOneSecCount++;
++
++ //DBGPRINT(RT_DEBUG_LOUD, ("Done-B(%d):I=0x%lx, CWPos=%ld, NBPos=%ld, ENBPos=%ld, bCopy=%d!\n", BulkOutPipeId, in_interrupt(), pHTTXContext->CurWritePosition,
++ // pHTTXContext->NextBulkOutPosition, pHTTXContext->ENextBulkOutPosition, pHTTXContext->bCopySavePad));
++
++ RTMP_IRQ_LOCK(&pAd->BulkOutLock[BulkOutPipeId], IrqFlags);
++ pAd->BulkOutPending[BulkOutPipeId] = FALSE;
++ pHTTXContext->IRPPending = FALSE;
++ RTMP_IRQ_UNLOCK(&pAd->BulkOutLock[BulkOutPipeId], IrqFlags);
++
++ if (Status == USB_ST_NOERROR)
++ {
++ pAd->BulkOutComplete++;
++
++ pAd->Counters8023.GoodTransmits++;
++ //RTMP_IRQ_LOCK(&pAd->TxContextQueueLock[BulkOutPipeId], IrqFlags);
++ FREE_HTTX_RING(pAd, BulkOutPipeId, pHTTXContext);
++ //RTMP_IRQ_UNLOCK(&pAd->TxContextQueueLock[BulkOutPipeId], IrqFlags);
++
++
++ }
++ else // STATUS_OTHER
++ {
++ PUCHAR pBuf;
++
++ pAd->BulkOutCompleteOther++;
++
++ pBuf = &pHTTXContext->TransferBuffer->WirelessPacket[pHTTXContext->NextBulkOutPosition];
++
++ DBGPRINT_RAW(RT_DEBUG_ERROR, ("BulkOutDataPacket failed: ReasonCode=%d!\n", Status));
++ DBGPRINT_RAW(RT_DEBUG_ERROR, (">>BulkOut Req=0x%lx, Complete=0x%lx, Other=0x%lx\n", pAd->BulkOutReq, pAd->BulkOutComplete, pAd->BulkOutCompleteOther));
++ DBGPRINT_RAW(RT_DEBUG_ERROR, (">>BulkOut Header:%x %x %x %x %x %x %x %x\n", pBuf[0], pBuf[1], pBuf[2], pBuf[3], pBuf[4], pBuf[5], pBuf[6], pBuf[7]));
++ //DBGPRINT_RAW(RT_DEBUG_ERROR, (">>BulkOutCompleteCancel=0x%x, BulkOutCompleteOther=0x%x\n", pAd->BulkOutCompleteCancel, pAd->BulkOutCompleteOther));
++
++ if (!RTMP_TEST_FLAG(pAd, (fRTMP_ADAPTER_RESET_IN_PROGRESS |
++ fRTMP_ADAPTER_HALT_IN_PROGRESS |
++ fRTMP_ADAPTER_NIC_NOT_EXIST |
++ fRTMP_ADAPTER_BULKOUT_RESET)))
++ {
++ RTMP_SET_FLAG(pAd, fRTMP_ADAPTER_BULKOUT_RESET);
++ pAd->bulkResetPipeid = BulkOutPipeId;
++ }
++ }
++
++ //
++ // bInUse = TRUE, means some process are filling TX data, after that must turn on bWaitingBulkOut
++ // bWaitingBulkOut = TRUE, means the TX data are waiting for bulk out.
++ //
++ //RTMP_IRQ_LOCK(&pAd->TxContextQueueLock[BulkOutPipeId], IrqFlags);
++ if ((pHTTXContext->ENextBulkOutPosition != pHTTXContext->CurWritePosition) &&
++ (pHTTXContext->ENextBulkOutPosition != (pHTTXContext->CurWritePosition+8)) &&
++ !RTUSB_TEST_BULK_FLAG(pAd, (fRTUSB_BULK_OUT_DATA_FRAG << BulkOutPipeId)))
++ {
++ // Indicate There is data avaliable
++ RTUSB_SET_BULK_FLAG(pAd, (fRTUSB_BULK_OUT_DATA_NORMAL << BulkOutPipeId));
++ }
++ //RTMP_IRQ_UNLOCK(&pAd->TxContextQueueLock[BulkOutPipeId], IrqFlags);
++
++ // Always call Bulk routine, even reset bulk.
++ // The protection of rest bulk should be in BulkOut routine
++ RTUSBKickBulkOut(pAd);
++
++
++ //DBGPRINT(RT_DEBUG_LOUD,("Done-A(%d):I=0x%lx, CWPos=%ld, NBPos=%ld, ENBPos=%ld, bCopy=%d\n", BulkOutPipeId, in_interrupt(),
++ // pHTTXContext->CurWritePosition, pHTTXContext->NextBulkOutPosition, pHTTXContext->ENextBulkOutPosition, pHTTXContext->bCopySavePad));
++
++ switch (BulkOutPipeId)
++ {
++ case 0:
++ pObj->ac0_dma_done_task.data = (unsigned long)pAd;
++ tasklet_hi_schedule(&pObj->ac0_dma_done_task);
++ break;
++ case 1:
++ pObj->ac1_dma_done_task.data = (unsigned long)pAd;
++ tasklet_hi_schedule(&pObj->ac1_dma_done_task);
++ break;
++ case 2:
++ pObj->ac2_dma_done_task.data = (unsigned long)pAd;
++ tasklet_hi_schedule(&pObj->ac2_dma_done_task);
++ break;
++ case 3:
++ pObj->ac3_dma_done_task.data = (unsigned long)pAd;
++ tasklet_hi_schedule(&pObj->ac3_dma_done_task);
++ break;
++ case 4:
++ pObj->hcca_dma_done_task.data = (unsigned long)pAd;
++ tasklet_hi_schedule(&pObj->hcca_dma_done_task);
++ break;
++ }
++#else
++
++{
++ PHT_TX_CONTEXT pHTTXContext;
++ PRTMP_ADAPTER pAd;
++ POS_COOKIE pObj;
++ UCHAR BulkOutPipeId;
++
++
++ pHTTXContext = (PHT_TX_CONTEXT)pUrb->context;
++ pAd = pHTTXContext->pAd;
++ pObj = (POS_COOKIE) pAd->OS_Cookie;
++
++ // Store BulkOut PipeId
++ BulkOutPipeId = pHTTXContext->BulkOutPipeId;
++ pAd->BulkOutDataOneSecCount++;
++
++ switch (BulkOutPipeId)
++ {
++ case 0:
++ pObj->ac0_dma_done_task.data = (unsigned long)pUrb;
++ tasklet_hi_schedule(&pObj->ac0_dma_done_task);
++ break;
++ case 1:
++ pObj->ac1_dma_done_task.data = (unsigned long)pUrb;
++ tasklet_hi_schedule(&pObj->ac1_dma_done_task);
++ break;
++ case 2:
++ pObj->ac2_dma_done_task.data = (unsigned long)pUrb;
++ tasklet_hi_schedule(&pObj->ac2_dma_done_task);
++ break;
++ case 3:
++ pObj->ac3_dma_done_task.data = (unsigned long)pUrb;
++ tasklet_hi_schedule(&pObj->ac3_dma_done_task);
++ break;
++ case 4:
++ pObj->hcca_dma_done_task.data = (unsigned long)pUrb;
++ tasklet_hi_schedule(&pObj->hcca_dma_done_task);
++ break;
++ }
++}
++#endif
++
++
++}
++
++
++/*
++ ========================================================================
++
++ Routine Description:
++
++ Arguments:
++
++ Return Value:
++
++ Note: NULL frame use BulkOutPipeId = 0
++
++ ========================================================================
++*/
++VOID RTUSBBulkOutNullFrame(
++ IN PRTMP_ADAPTER pAd)
++{
++ PTX_CONTEXT pNullContext = &(pAd->NullContext);
++ PURB pUrb;
++ int ret = 0;
++ unsigned long IrqFlags;
++
++ RTMP_IRQ_LOCK(&pAd->BulkOutLock[0], IrqFlags);
++ if ((pAd->BulkOutPending[0] == TRUE) || RTMP_TEST_FLAG(pAd, fRTMP_ADAPTER_NEED_STOP_TX))
++ {
++ RTMP_IRQ_UNLOCK(&pAd->BulkOutLock[0], IrqFlags);
++ return;
++ }
++ pAd->BulkOutPending[0] = TRUE;
++ pAd->watchDogTxPendingCnt[0] = 1;
++ pNullContext->IRPPending = TRUE;
++ RTMP_IRQ_UNLOCK(&pAd->BulkOutLock[0], IrqFlags);
++
++ // Increase Total transmit byte counter
++ pAd->RalinkCounters.TransmittedByteCount += pNullContext->BulkOutSize;
++
++
++ // Clear Null frame bulk flag
++ RTUSB_CLEAR_BULK_FLAG(pAd, fRTUSB_BULK_OUT_DATA_NULL);
++
++#ifdef RT_BIG_ENDIAN
++ RTMPDescriptorEndianChange((PUCHAR)pNullContext->TransferBuffer, TYPE_TXINFO);
++#endif // RT_BIG_ENDIAN //
++
++ // Init Tx context descriptor
++ RTUSBInitTxDesc(pAd, pNullContext, 0, (usb_complete_t)RTUSBBulkOutNullFrameComplete);
++
++ pUrb = pNullContext->pUrb;
++ if((ret = RTUSB_SUBMIT_URB(pUrb))!=0)
++ {
++ RTMP_IRQ_LOCK(&pAd->BulkOutLock[0], IrqFlags);
++ pAd->BulkOutPending[0] = FALSE;
++ pAd->watchDogTxPendingCnt[0] = 0;
++ pNullContext->IRPPending = FALSE;
++ RTMP_IRQ_UNLOCK(&pAd->BulkOutLock[0], IrqFlags);
++
++ DBGPRINT(RT_DEBUG_ERROR, ("RTUSBBulkOutNullFrame: Submit Tx URB failed %d\n", ret));
++ return;
++ }
++
++}
++
++// NULL frame use BulkOutPipeId = 0
++VOID RTUSBBulkOutNullFrameComplete(purbb_t pUrb, struct pt_regs *pt_regs)
++{
++ PRTMP_ADAPTER pAd;
++ PTX_CONTEXT pNullContext;
++ NTSTATUS Status;
++#if 0 // sample, IRQ LOCK
++ unsigned long IrqFlags;
++#endif
++ POS_COOKIE pObj;
++
++
++ pNullContext = (PTX_CONTEXT)pUrb->context;
++ pAd = pNullContext->pAd;
++ Status = pUrb->status;
++
++#if 0 // sample, IRQ LOCK
++ // Reset Null frame context flags
++ pNullContext->IRPPending = FALSE;
++ pNullContext->InUse = FALSE;
++
++ if (Status == USB_ST_NOERROR)
++ {
++ // Don't worry about the queue is empty or not, this function will check itself
++ //RTMPUSBDeQueuePacket(pAd, 0);
++ RTMPDeQueuePacket(pAd, TRUE, NUM_OF_TX_RING, MAX_TX_PROCESS);
++ }
++ else // STATUS_OTHER
++ {
++ if ((!RTMP_TEST_FLAG(pAd, fRTMP_ADAPTER_RESET_IN_PROGRESS)) &&
++ (!RTMP_TEST_FLAG(pAd, fRTMP_ADAPTER_HALT_IN_PROGRESS)) &&
++ (!RTMP_TEST_FLAG(pAd, fRTMP_ADAPTER_NIC_NOT_EXIST)) &&
++ (!RTMP_TEST_FLAG(pAd, fRTMP_ADAPTER_BULKOUT_RESET)))
++ {
++ DBGPRINT_RAW(RT_DEBUG_ERROR, ("Bulk Out Null Frame Failed\n"));
++ RTMP_SET_FLAG(pAd, fRTMP_ADAPTER_BULKOUT_RESET);
++ RTUSBEnqueueInternalCmd(pAd, CMDTHREAD_RESET_BULK_OUT, NULL, 0);
++ }
++ }
++
++ RTMP_IRQ_LOCK(&pAd->BulkOutLock[0], IrqFlags);
++ pAd->BulkOutPending[0] = FALSE;
++ RTMP_IRQ_UNLOCK(&pAd->BulkOutLock[0], IrqFlags);
++
++ // Always call Bulk routine, even reset bulk.
++ // The protectioon of rest bulk should be in BulkOut routine
++ RTUSBKickBulkOut(pAd);
++#else
++
++ pObj = (POS_COOKIE) pAd->OS_Cookie;
++ pObj->null_frame_complete_task.data = (unsigned long)pUrb;
++ tasklet_hi_schedule(&pObj->null_frame_complete_task);
++#endif
++
++}
++
++#if 0 // For RT2870, RTS frame not used now, but maybe will use it latter.
++/*
++ ========================================================================
++
++ Routine Description:
++
++ Arguments:
++
++ Return Value:
++
++ Note: RTS frame use BulkOutPipeId = 0
++
++ ========================================================================
++*/
++VOID RTUSBBulkOutRTSFrame(
++ IN PRTMP_ADAPTER pAd)
++{
++ PTX_CONTEXT pRTSContext = &(pAd->RTSContext);
++ PURB pUrb;
++ int ret = 0;
++ unsigned long IrqFlags;
++ UCHAR PipeID=0;
++
++ if (RTUSB_TEST_BULK_FLAG(pAd, fRTUSB_BULK_OUT_DATA_NORMAL_4))
++ PipeID= 3;
++ else if (RTUSB_TEST_BULK_FLAG(pAd, fRTUSB_BULK_OUT_DATA_NORMAL_3))
++ PipeID= 2;
++ else if (RTUSB_TEST_BULK_FLAG(pAd, fRTUSB_BULK_OUT_DATA_NORMAL_2))
++ PipeID= 1;
++ else if (RTUSB_TEST_BULK_FLAG(pAd, fRTUSB_BULK_OUT_DATA_NORMAL))
++ PipeID= 0;
++
++ RTMP_IRQ_LOCK(&pAd->BulkOutLock[PipeID], IrqFlags);
++ if ((pAd->BulkOutPending[PipeID] == TRUE) || RTMP_TEST_FLAG(pAd, fRTMP_ADAPTER_NEED_STOP_TX))
++ {
++ RTMP_IRQ_UNLOCK(&pAd->BulkOutLock[PipeID], IrqFlags);
++ return;
++ }
++ pAd->BulkOutPending[PipeID] = TRUE;
++ RTMP_IRQ_UNLOCK(&pAd->BulkOutLock[PipeID], IrqFlags);
++
++ // Increase Total transmit byte counter
++ pAd->RalinkCounters.TransmittedByteCount += pRTSContext->BulkOutSize;
++
++ DBGPRINT_RAW(RT_DEBUG_INFO, ("--->RTUSBBulkOutRTSFrame \n"));
++
++ // Clear RTS frame bulk flag
++ RTUSB_CLEAR_BULK_FLAG(pAd, fRTUSB_BULK_OUT_RTS);
++
++#ifdef RT_BIG_ENDIAN
++ RTMPDescriptorEndianChange((PUCHAR)pRTSContext->TransferBuffer, TYPE_TXINFO);
++#endif // RT_BIG_ENDIAN //
++
++ // Init Tx context descriptor
++ RTUSBInitTxDesc(pAd, pRTSContext, PipeID, (usb_complete_t)RTUSBBulkOutRTSFrameComplete);
++ pRTSContext->IRPPending = TRUE;
++
++ pUrb = pRTSContext->pUrb;
++ if((ret = RTUSB_SUBMIT_URB(pUrb))!=0)
++ {
++ DBGPRINT(RT_DEBUG_ERROR, ("RTUSBBulkOutRTSFrame: Submit Tx URB failed %d\n", ret));
++ return;
++ }
++
++ DBGPRINT_RAW(RT_DEBUG_INFO, ("<---RTUSBBulkOutRTSFrame \n"));
++
++}
++
++// RTS frame use BulkOutPipeId = 0
++VOID RTUSBBulkOutRTSFrameComplete(purbb_t pUrb, struct pt_regs *pt_regs)
++{
++ PRTMP_ADAPTER pAd;
++ PTX_CONTEXT pRTSContext;
++ NTSTATUS Status;
++#if 0 // sample, IRQ LOCK
++ unsigned long IrqFlags;
++#endif
++ POS_COOKIE pObj;
++
++ DBGPRINT_RAW(RT_DEBUG_INFO, ("--->RTUSBBulkOutRTSFrameComplete\n"));
++
++ pRTSContext = (PTX_CONTEXT)pUrb->context;
++ pAd = pRTSContext->pAd;
++ Status = pUrb->status;
++
++#if 0 // sample, IRQ LOCK
++ // Reset RTS frame context flags
++ pRTSContext->IRPPending = FALSE;
++ pRTSContext->InUse = FALSE;
++
++ if (Status == USB_ST_NOERROR)
++ {
++ // Don't worry about the queue is empty or not, this function will check itself
++ //RTMPUSBDeQueuePacket(pAd, pRTSContext->BulkOutPipeId);
++ RTMPDeQueuePacket(pAd, TRUE, NUM_OF_TX_RING, MAX_TX_PROCESS);
++ }
++ else // STATUS_OTHER
++ {
++ if ((!RTMP_TEST_FLAG(pAd, fRTMP_ADAPTER_RESET_IN_PROGRESS)) &&
++ (!RTMP_TEST_FLAG(pAd, fRTMP_ADAPTER_HALT_IN_PROGRESS)) &&
++ (!RTMP_TEST_FLAG(pAd, fRTMP_ADAPTER_NIC_NOT_EXIST)) &&
++ (!RTMP_TEST_FLAG(pAd, fRTMP_ADAPTER_BULKOUT_RESET)))
++ {
++ DBGPRINT_RAW(RT_DEBUG_ERROR, ("Bulk Out RTS Frame Failed\n"));
++ RTMP_SET_FLAG(pAd, fRTMP_ADAPTER_BULKOUT_RESET);
++ RTUSBEnqueueInternalCmd(pAd, CMDTHREAD_RESET_BULK_OUT, NULL, 0);
++ }
++ }
++
++ RTMP_IRQ_LOCK(&pAd->BulkOutLock[pRTSContext->BulkOutPipeId], IrqFlags);
++ pAd->BulkOutPending[pRTSContext->BulkOutPipeId] = FALSE;
++ RTMP_IRQ_UNLOCK(&pAd->BulkOutLock[pRTSContext->BulkOutPipeId], IrqFlags);
++
++ // Always call Bulk routine, even reset bulk.
++ // The protectioon of rest bulk should be in BulkOut routine
++ RTUSBKickBulkOut(pAd);
++#else
++
++ pObj = (POS_COOKIE) pAd->OS_Cookie;
++ pObj->rts_frame_complete_task.data = (unsigned long)pUrb;
++ tasklet_hi_schedule(&pObj->rts_frame_complete_task);
++#endif
++
++ DBGPRINT_RAW(RT_DEBUG_INFO, ("<---RTUSBBulkOutRTSFrameComplete\n"));
++
++}
++#endif
++
++/*
++ ========================================================================
++
++ Routine Description:
++
++ Arguments:
++
++ Return Value:
++
++ Note: MLME use BulkOutPipeId = 0
++
++ ========================================================================
++*/
++VOID RTUSBBulkOutMLMEPacket(
++ IN PRTMP_ADAPTER pAd,
++ IN UCHAR Index)
++{
++ PTX_CONTEXT pMLMEContext;
++ PURB pUrb;
++ int ret = 0;
++ unsigned long IrqFlags;
++
++ pMLMEContext = (PTX_CONTEXT)pAd->MgmtRing.Cell[pAd->MgmtRing.TxDmaIdx].AllocVa;
++ pUrb = pMLMEContext->pUrb;
++
++ if ((pAd->MgmtRing.TxSwFreeIdx >= MGMT_RING_SIZE) ||
++ (pMLMEContext->InUse == FALSE) ||
++ (pMLMEContext->bWaitingBulkOut == FALSE))
++ {
++
++
++ // Clear MLME bulk flag
++ RTUSB_CLEAR_BULK_FLAG(pAd, fRTUSB_BULK_OUT_MLME);
++
++ return;
++ }
++
++
++ RTMP_IRQ_LOCK(&pAd->BulkOutLock[MGMTPIPEIDX], IrqFlags);
++ if ((pAd->BulkOutPending[MGMTPIPEIDX] == TRUE) || RTMP_TEST_FLAG(pAd, fRTMP_ADAPTER_NEED_STOP_TX))
++ {
++ RTMP_IRQ_UNLOCK(&pAd->BulkOutLock[MGMTPIPEIDX], IrqFlags);
++ return;
++ }
++
++ pAd->BulkOutPending[MGMTPIPEIDX] = TRUE;
++ pAd->watchDogTxPendingCnt[MGMTPIPEIDX] = 1;
++ pMLMEContext->IRPPending = TRUE;
++ pMLMEContext->bWaitingBulkOut = FALSE;
++ RTMP_IRQ_UNLOCK(&pAd->BulkOutLock[MGMTPIPEIDX], IrqFlags);
++
++ // Increase Total transmit byte counter
++ pAd->RalinkCounters.TransmittedByteCount += pMLMEContext->BulkOutSize;
++
++ // Clear MLME bulk flag
++ RTUSB_CLEAR_BULK_FLAG(pAd, fRTUSB_BULK_OUT_MLME);
++
++
++ //DBGPRINT_RAW(RT_DEBUG_INFO, ("--->RTUSBBulkOutMLMEPacket\n"));
++#if 0 // for debug
++{
++ printk("MLME-Out, C=%d!, D=%d, F=%d!\n", pAd->MgmtRing.TxCpuIdx, pAd->MgmtRing.TxDmaIdx, pAd->MgmtRing.TxSwFreeIdx);
++
++ //TODO: Need to remove it when formal release
++ PTXINFO_STRUC pTxInfo;
++
++ pTxInfo = (PTXINFO_STRUC)pMLMEContext->TransferBuffer;
++ if (pTxInfo->QSEL != FIFO_EDCA)
++ {
++ printk("%s(): ====> pTxInfo->QueueSel(%d)!= FIFO_EDCA!!!!\n", __FUNCTION__, pTxInfo->QSEL);
++ printk("\tMLME_Index=%d!\n", Index);
++ hex_dump("Wrong QSel Pkt:", (PUCHAR)pMLMEContext->TransferBuffer, pTxInfo->USBDMATxPktLen);
++ }
++}
++#endif
++
++#ifdef RT_BIG_ENDIAN
++ RTMPDescriptorEndianChange((PUCHAR)pMLMEContext->TransferBuffer, TYPE_TXINFO);
++#endif // RT_BIG_ENDIAN //
++
++ // Init Tx context descriptor
++ RTUSBInitTxDesc(pAd, pMLMEContext, MGMTPIPEIDX, (usb_complete_t)RTUSBBulkOutMLMEPacketComplete);
++
++#if LINUX_VERSION_CODE >= KERNEL_VERSION(2,5,0)
++ //For mgmt urb buffer, because we use sk_buff, so we need to notify the USB controller do dma mapping.
++ pUrb->transfer_dma = 0;
++ pUrb->transfer_flags &= (~URB_NO_TRANSFER_DMA_MAP);
++#endif
++
++ pUrb = pMLMEContext->pUrb;
++ if((ret = RTUSB_SUBMIT_URB(pUrb))!=0)
++ {
++ DBGPRINT(RT_DEBUG_ERROR, ("RTUSBBulkOutMLMEPacket: Submit MLME URB failed %d\n", ret));
++ RTMP_IRQ_LOCK(&pAd->BulkOutLock[MGMTPIPEIDX], IrqFlags);
++ pAd->BulkOutPending[MGMTPIPEIDX] = FALSE;
++ pAd->watchDogTxPendingCnt[MGMTPIPEIDX] = 0;
++ pMLMEContext->IRPPending = FALSE;
++ pMLMEContext->bWaitingBulkOut = TRUE;
++ RTMP_IRQ_UNLOCK(&pAd->BulkOutLock[MGMTPIPEIDX], IrqFlags);
++
++ return;
++ }
++
++ //DBGPRINT_RAW(RT_DEBUG_INFO, ("<---RTUSBBulkOutMLMEPacket \n"));
++// printk("<---RTUSBBulkOutMLMEPacket,Cpu=%d!, Dma=%d, SwIdx=%d!\n", pAd->MgmtRing.TxCpuIdx, pAd->MgmtRing.TxDmaIdx, pAd->MgmtRing.TxSwFreeIdx);
++}
++
++
++VOID RTUSBBulkOutMLMEPacketComplete(purbb_t pUrb, struct pt_regs *pt_regs)
++{
++ PTX_CONTEXT pMLMEContext;
++ PRTMP_ADAPTER pAd;
++ NTSTATUS Status;
++ POS_COOKIE pObj;
++ int index;
++#if 0 // sample, IRQ LOCK
++ unsigned long IrqFlags;
++ PNDIS_PACKET pPacket;
++#endif
++
++
++ //DBGPRINT_RAW(RT_DEBUG_INFO, ("--->RTUSBBulkOutMLMEPacketComplete\n"));
++ pMLMEContext = (PTX_CONTEXT)pUrb->context;
++ pAd = pMLMEContext->pAd;
++ pObj = (POS_COOKIE)pAd->OS_Cookie;
++ Status = pUrb->status;
++ index = pMLMEContext->SelfIdx;
++
++
++#if 0 // sample, IRQ LOCK
++ ASSERT((pAd->MgmtRing.TxDmaIdx == index));
++ //printk("MLME-Done-B: C=%d, D=%d, F=%d, Self=%d!\n", pAd->MgmtRing.TxCpuIdx, pAd->MgmtRing.TxDmaIdx, pAd->MgmtRing.TxSwFreeIdx, pMLMEContext->SelfIdx);
++
++ RTMP_IRQ_LOCK(&pAd->BulkOutLock[MGMTPIPEIDX], IrqFlags);
++
++
++ if (Status != USB_ST_NOERROR)
++ {
++ //Bulk-Out fail status handle
++ if ((!RTMP_TEST_FLAG(pAd, fRTMP_ADAPTER_RESET_IN_PROGRESS)) &&
++ (!RTMP_TEST_FLAG(pAd, fRTMP_ADAPTER_HALT_IN_PROGRESS)) &&
++ (!RTMP_TEST_FLAG(pAd, fRTMP_ADAPTER_NIC_NOT_EXIST)) &&
++ (!RTMP_TEST_FLAG(pAd, fRTMP_ADAPTER_BULKOUT_RESET)))
++ {
++ DBGPRINT_RAW(RT_DEBUG_ERROR, ("Bulk Out MLME Failed, Status=%d!\n", Status));
++ // TODO: How to handle about the MLMEBulkOut failed issue. Need to resend the mgmt pkt?
++ RTMP_SET_FLAG(pAd, fRTMP_ADAPTER_BULKOUT_RESET);
++ pAd->bulkResetPipeid = (MGMTPIPEIDX | BULKOUT_MGMT_RESET_FLAG);
++ }
++ }
++ pAd->BulkOutPending[MGMTPIPEIDX] = FALSE;
++ RTMP_IRQ_UNLOCK(&pAd->BulkOutLock[MGMTPIPEIDX], IrqFlags);
++
++ RTMP_IRQ_LOCK(&pAd->MLMEBulkOutLock, IrqFlags);
++ // Reset MLME context flags
++ pMLMEContext->IRPPending = FALSE;
++ pMLMEContext->InUse = FALSE;
++ pMLMEContext->bWaitingBulkOut = FALSE;
++ pMLMEContext->BulkOutSize = 0;
++
++ pPacket = pAd->MgmtRing.Cell[index].pNdisPacket;
++ pAd->MgmtRing.Cell[index].pNdisPacket = NULL;
++
++ // Increase MgmtRing Index
++ INC_RING_INDEX(pAd->MgmtRing.TxDmaIdx, MGMT_RING_SIZE);
++ pAd->MgmtRing.TxSwFreeIdx++;
++
++ RTMP_IRQ_UNLOCK(&pAd->MLMEBulkOutLock, IrqFlags);
++
++ // No-matter success or fail, we free the mgmt packet.
++ if (pPacket)
++ RTMPFreeNdisPacket(pAd, pPacket);
++
++#if 0
++ //Bulk-Out fail status handle
++ if (Status != USB_ST_NOERROR)
++ {
++ if ((!RTMP_TEST_FLAG(pAd, fRTMP_ADAPTER_RESET_IN_PROGRESS)) &&
++ (!RTMP_TEST_FLAG(pAd, fRTMP_ADAPTER_HALT_IN_PROGRESS)) &&
++ (!RTMP_TEST_FLAG(pAd, fRTMP_ADAPTER_NIC_NOT_EXIST)) &&
++ (!RTMP_TEST_FLAG(pAd, fRTMP_ADAPTER_BULKOUT_RESET)))
++ {
++ DBGPRINT_RAW(RT_DEBUG_ERROR, ("Bulk Out MLME Failed, Status=%d!\n", Status));
++ // TODO: How to handle about the MLMEBulkOut failed issue. Need to reset the endpoint?
++ RTMP_SET_FLAG(pAd, fRTMP_ADAPTER_BULKOUT_RESET);
++ pAd->bulkResetPipeid = (MGMTPIPEIDX | BULKOUT_MGMT_RESET_FLAG);
++ }
++ }
++#endif
++
++ //printk("MLME-Done-A: C=%d, D=%d, F=%d!\n", pAd->MgmtRing.TxCpuIdx, pAd->MgmtRing.TxDmaIdx, pAd->MgmtRing.TxSwFreeIdx);
++
++ pObj->mgmt_dma_done_task.data = (unsigned long)pAd;
++ tasklet_hi_schedule(&pObj->mgmt_dma_done_task);
++
++ //DBGPRINT_RAW(RT_DEBUG_INFO, ("<---RTUSBBulkOutMLMEPacketComplete\n"));
++// printk("<---RTUSBBulkOutMLMEPacketComplete, Cpu=%d, Dma=%d, SwIdx=%d!\n",
++// pAd->MgmtRing.TxCpuIdx, pAd->MgmtRing.TxDmaIdx, pAd->MgmtRing.TxSwFreeIdx);
++
++#else
++
++ pObj->mgmt_dma_done_task.data = (unsigned long)pUrb;
++ tasklet_hi_schedule(&pObj->mgmt_dma_done_task);
++#endif
++}
++
++
++/*
++ ========================================================================
++
++ Routine Description:
++
++ Arguments:
++
++ Return Value:
++
++ Note: PsPoll use BulkOutPipeId = 0
++
++ ========================================================================
++*/
++VOID RTUSBBulkOutPsPoll(
++ IN PRTMP_ADAPTER pAd)
++{
++ PTX_CONTEXT pPsPollContext = &(pAd->PsPollContext);
++ PURB pUrb;
++ int ret = 0;
++ unsigned long IrqFlags;
++
++ RTMP_IRQ_LOCK(&pAd->BulkOutLock[0], IrqFlags);
++ if ((pAd->BulkOutPending[0] == TRUE) || RTMP_TEST_FLAG(pAd, fRTMP_ADAPTER_NEED_STOP_TX))
++ {
++ RTMP_IRQ_UNLOCK(&pAd->BulkOutLock[0], IrqFlags);
++ return;
++ }
++ pAd->BulkOutPending[0] = TRUE;
++ pAd->watchDogTxPendingCnt[0] = 1;
++ pPsPollContext->IRPPending = TRUE;
++ RTMP_IRQ_UNLOCK(&pAd->BulkOutLock[0], IrqFlags);
++
++
++ // Clear PS-Poll bulk flag
++ RTUSB_CLEAR_BULK_FLAG(pAd, fRTUSB_BULK_OUT_PSPOLL);
++
++#ifdef RT_BIG_ENDIAN
++ RTMPDescriptorEndianChange((PUCHAR)pPsPollContext->TransferBuffer, TYPE_TXINFO);
++#endif // RT_BIG_ENDIAN //
++
++ // Init Tx context descriptor
++ RTUSBInitTxDesc(pAd, pPsPollContext, MGMTPIPEIDX, (usb_complete_t)RTUSBBulkOutPsPollComplete);
++
++ pUrb = pPsPollContext->pUrb;
++ if((ret = RTUSB_SUBMIT_URB(pUrb))!=0)
++ {
++ RTMP_IRQ_LOCK(&pAd->BulkOutLock[0], IrqFlags);
++ pAd->BulkOutPending[0] = FALSE;
++ pAd->watchDogTxPendingCnt[0] = 0;
++ pPsPollContext->IRPPending = FALSE;
++ RTMP_IRQ_UNLOCK(&pAd->BulkOutLock[0], IrqFlags);
++
++ DBGPRINT(RT_DEBUG_ERROR, ("RTUSBBulkOutPsPoll: Submit Tx URB failed %d\n", ret));
++ return;
++ }
++
++}
++
++// PS-Poll frame use BulkOutPipeId = 0
++VOID RTUSBBulkOutPsPollComplete(purbb_t pUrb,struct pt_regs *pt_regs)
++{
++ PRTMP_ADAPTER pAd;
++ PTX_CONTEXT pPsPollContext;
++ NTSTATUS Status;
++#if 0 // sample, IRQ LOCK
++ unsigned long IrqFlags;
++#endif
++ POS_COOKIE pObj;
++
++
++ pPsPollContext= (PTX_CONTEXT)pUrb->context;
++ pAd = pPsPollContext->pAd;
++ Status = pUrb->status;
++
++#if 0 // sample, IRQ LOCK
++ // Reset PsPoll context flags
++ pPsPollContext->IRPPending = FALSE;
++ pPsPollContext->InUse = FALSE;
++
++ if (Status == USB_ST_NOERROR)
++ {
++ // Don't worry about the queue is empty or not, this function will check itself
++ RTMPDeQueuePacket(pAd, TRUE, NUM_OF_TX_RING, MAX_TX_PROCESS);
++ }
++ else // STATUS_OTHER
++ {
++ if ((!RTMP_TEST_FLAG(pAd, fRTMP_ADAPTER_RESET_IN_PROGRESS)) &&
++ (!RTMP_TEST_FLAG(pAd, fRTMP_ADAPTER_HALT_IN_PROGRESS)) &&
++ (!RTMP_TEST_FLAG(pAd, fRTMP_ADAPTER_NIC_NOT_EXIST)) &&
++ (!RTMP_TEST_FLAG(pAd, fRTMP_ADAPTER_BULKOUT_RESET)))
++ {
++ DBGPRINT_RAW(RT_DEBUG_ERROR, ("Bulk Out PSPoll Failed\n"));
++ RTMP_SET_FLAG(pAd, fRTMP_ADAPTER_BULKOUT_RESET);
++ RTUSBEnqueueInternalCmd(pAd, CMDTHREAD_RESET_BULK_OUT, NULL, 0);
++ }
++ }
++
++ RTMP_IRQ_LOCK(&pAd->BulkOutLock[0], IrqFlags);
++ pAd->BulkOutPending[0] = FALSE;
++ RTMP_IRQ_UNLOCK(&pAd->BulkOutLock[0], IrqFlags);
++
++ // Always call Bulk routine, even reset bulk.
++ // The protectioon of rest bulk should be in BulkOut routine
++ RTUSBKickBulkOut(pAd);
++#else
++
++ pObj = (POS_COOKIE) pAd->OS_Cookie;
++ pObj->pspoll_frame_complete_task.data = (unsigned long)pUrb;
++ tasklet_hi_schedule(&pObj->pspoll_frame_complete_task);
++#endif
++}
++
++
++#if 0
++/*
++ ========================================================================
++
++ Routine Description:
++ USB_RxPacket initializes a URB and uses the Rx IRP to submit it
++ to USB. It checks if an Rx Descriptor is available and passes the
++ the coresponding buffer to be filled. If no descriptor is available
++ fails the request. When setting the completion routine we pass our
++ Adapter Object as Context.
++
++ Arguments:
++
++ Return Value:
++ TRUE found matched tuple cache
++ FALSE no matched found
++
++ Note:
++
++ ========================================================================
++*/
++VOID RTUSBBulkReceive(
++ IN PRTMP_ADAPTER pAd)
++{
++ PRX_CONTEXT pRxContext;
++ PURB pUrb;
++ int ret = 0;
++ unsigned long IrqFlags;
++
++
++ /* device had been closed */
++ if (RTMP_TEST_FLAG(pAd, fRTMP_ADAPTER_REMOVE_IN_PROGRESS))
++ return;
++
++ RTMP_IRQ_LOCK(&pAd->BulkInLock, IrqFlags);
++
++ // Last is time point between 2 separate URB.
++ if (pAd->NextRxBulkInPosition == 0)
++ {
++ //pAd->NextRxBulkInIndex = (pAd->NextRxBulkInIndex + 1) % (RX_RING_SIZE);
++ INC_RING_INDEX(pAd->NextRxBulkInIndex, RX_RING_SIZE);
++ }
++ else if ((pAd->NextRxBulkInPosition&0x1ff) != 0)
++ {
++ //pAd->NextRxBulkInIndex = (pAd->NextRxBulkInIndex + 1) % (RX_RING_SIZE);
++ INC_RING_INDEX(pAd->NextRxBulkInIndex, RX_RING_SIZE);
++ DBGPRINT_RAW(RT_DEBUG_TRACE, ("pAd->NextRxBulkInPosition = 0x%lx. End of URB.\n", pAd->NextRxBulkInPosition ));
++ pAd->NextRxBulkInPosition = 0;
++ }
++
++ if (pAd->NextRxBulkInPosition == MAX_RXBULK_SIZE)
++ pAd->NextRxBulkInPosition = 0;
++
++ pRxContext = &(pAd->RxContext[pAd->NextRxBulkInIndex]);
++
++ // TODO: Why need to check if pRxContext->InUsed == TRUE?
++ //if ((pRxContext->InUse == TRUE) || (pRxContext->Readable == TRUE))
++ if ((pRxContext->InUse == FALSE) && (pRxContext->Readable == TRUE))
++ {
++ DBGPRINT_RAW(RT_DEBUG_TRACE, ("pRxContext[%d] InUse = %d.pRxContext->Readable = %d. Return.\n", pAd->NextRxBulkInIndex,pRxContext->InUse, pRxContext->Readable ));
++ RTMP_IRQ_UNLOCK(&pAd->BulkInLock, IrqFlags);
++
++ // read RxContext, Since not
++#ifdef CONFIG_STA_SUPPORT
++ STARxDoneInterruptHandle(pAd, TRUE);
++#endif // CONFIG_STA_SUPPORT //
++
++ //return;
++ }
++ pRxContext->InUse = TRUE;
++ pRxContext->IRPPending= TRUE;
++
++ RTMP_IRQ_UNLOCK(&pAd->BulkInLock, IrqFlags);
++
++ // Init Rx context descriptor
++ NdisZeroMemory(pRxContext->TransferBuffer, BUFFER_SIZE);
++ RTUSBInitRxDesc(pAd, pRxContext);
++
++ pUrb = pRxContext->pUrb;
++ if ((ret = RTUSB_SUBMIT_URB(pUrb))!=0)
++ {
++ DBGPRINT(RT_DEBUG_ERROR, ("RTUSBBulkReceive: Submit Rx URB failed %d\n", ret));
++ return;
++ }
++ else // success
++ {
++ NdisInterlockedIncrement(&pAd->PendingRx);
++ pAd->BulkInReq++;
++ }
++
++ // read RxContext, Since not
++#ifdef CONFIG_STA_SUPPORT
++ STARxDoneInterruptHandle(pAd, FALSE);
++#endif // CONFIG_STA_SUPPORT //
++}
++
++/*
++ ========================================================================
++
++ Routine Description:
++ This routine process Rx Irp and call rx complete function.
++
++ Arguments:
++ DeviceObject Pointer to the device object for next lower
++ device. DeviceObject passed in here belongs to
++ the next lower driver in the stack because we
++ were invoked via IoCallDriver in USB_RxPacket
++ AND it is not OUR device object
++ Irp Ptr to completed IRP
++ Context Ptr to our Adapter object (context specified
++ in IoSetCompletionRoutine
++
++ Return Value:
++ Always returns STATUS_MORE_PROCESSING_REQUIRED
++
++ Note:
++ Always returns STATUS_MORE_PROCESSING_REQUIRED
++ ========================================================================
++*/
++VOID RTUSBBulkRxComplete(purbb_t pUrb, struct pt_regs *pt_regs)
++{
++#if 0
++ PRX_CONTEXT pRxContext;
++ PRTMP_ADAPTER pAd;
++ NTSTATUS Status;
++// POS_COOKIE pObj;
++
++ pRxContext = (PRX_CONTEXT)pUrb->context;
++ pAd = pRxContext->pAd;
++// pObj = (POS_COOKIE) pAd->OS_Cookie;
++
++
++ Status = pUrb->status;
++ //pRxContext->pIrp = NULL;
++
++ pRxContext->InUse = FALSE;
++ pRxContext->IRPPending = FALSE;
++
++ if (Status == USB_ST_NOERROR)
++ {
++ pAd->BulkInComplete++;
++ pRxContext->Readable = TRUE;
++ pAd->NextRxBulkInPosition = 0;
++
++ }
++ else // STATUS_OTHER
++ {
++ pAd->BulkInCompleteFail++;
++ // Still read this packet although it may comtain wrong bytes.
++ pRxContext->Readable = FALSE;
++ // Parsing all packets. because after reset, the index will reset to all zero.
++
++ if ((!RTMP_TEST_FLAG(pAd, fRTMP_ADAPTER_RESET_IN_PROGRESS)) &&
++ (!RTMP_TEST_FLAG(pAd, fRTMP_ADAPTER_BULKIN_RESET)) &&
++ (!RTMP_TEST_FLAG(pAd, fRTMP_ADAPTER_HALT_IN_PROGRESS)) &&
++ (!RTMP_TEST_FLAG(pAd, fRTMP_ADAPTER_NIC_NOT_EXIST)))
++ {
++
++ DBGPRINT_RAW(RT_DEBUG_ERROR, ("Bulk In Failed. Status = %d\n", Status));
++ DBGPRINT_RAW(RT_DEBUG_ERROR, ("==>NextRxBulkInIndex=0x%x, NextRxBulkInReadIndex=0x%x, TransferBufferLength= 0x%x\n",
++ pAd->NextRxBulkInIndex, pAd->NextRxBulkInReadIndex, pRxContext->pUrb->actual_length));
++
++ RTMP_SET_FLAG(pAd, fRTMP_ADAPTER_BULKIN_RESET);
++ RTUSBEnqueueInternalCmd(pAd, CMDTHREAD_RESET_BULK_IN, NULL, 0);
++ }
++ //pUrb = NULL;
++ }
++
++ if ((!RTMP_TEST_FLAG(pAd, fRTMP_ADAPTER_RESET_IN_PROGRESS)) &&
++ (!RTMP_TEST_FLAG(pAd, fRTMP_ADAPTER_BULKIN_RESET)) &&
++// (!RTMP_TEST_FLAG(pAd, fRTMP_ADAPTER_BULKOUT_RESET)) &&
++ (!RTMP_TEST_FLAG(pAd, fRTMP_ADAPTER_RADIO_OFF)) &&
++ (!RTMP_TEST_FLAG(pAd, fRTMP_ADAPTER_HALT_IN_PROGRESS)) &&
++ (!RTMP_TEST_FLAG(pAd, fRTMP_ADAPTER_NIC_NOT_EXIST)))
++ {
++ RTUSBBulkReceive(pAd);
++#if 0
++#if 1
++ STARxDoneInterruptHandle(pAd, FALSE);
++#else
++ pObj->rx_bh.data = (unsigned long)pUrb;
++ tasklet_schedule(&pObj->rx_bh);
++#endif
++#endif
++ }
++
++ // Call RxPacket to process packet and return the status
++ NdisInterlockedDecrement(&pAd->PendingRx);
++#else
++
++
++ // use a receive tasklet to handle received packets;
++ // or sometimes hardware IRQ will be disabled here, so we can not
++ // use spin_lock_bh()/spin_unlock_bh() after IRQ is disabled. :<
++ PRX_CONTEXT pRxContext;
++ PRTMP_ADAPTER pAd;
++ POS_COOKIE pObj;
++
++
++ pRxContext = (PRX_CONTEXT)pUrb->context;
++ pAd = pRxContext->pAd;
++ pObj = (POS_COOKIE) pAd->OS_Cookie;
++
++ pObj->rx_done_task.data = (unsigned long)pUrb;
++ tasklet_hi_schedule(&pObj->rx_done_task);
++#endif
++}
++
++#else
++
++VOID DoBulkIn(IN RTMP_ADAPTER *pAd)
++{
++ PRX_CONTEXT pRxContext;
++ PURB pUrb;
++ int ret = 0;
++ unsigned long IrqFlags;
++
++ RTMP_IRQ_LOCK(&pAd->BulkInLock, IrqFlags);
++ pRxContext = &(pAd->RxContext[pAd->NextRxBulkInIndex]);
++ if ((pAd->PendingRx > 0) || (pRxContext->Readable == TRUE) || (pRxContext->InUse == TRUE))
++ {
++ RTMP_IRQ_UNLOCK(&pAd->BulkInLock, IrqFlags);
++ return;
++ }
++ pRxContext->InUse = TRUE;
++ pRxContext->IRPPending = TRUE;
++ pAd->PendingRx++;
++ pAd->BulkInReq++;
++ RTMP_IRQ_UNLOCK(&pAd->BulkInLock, IrqFlags);
++
++ // Init Rx context descriptor
++ NdisZeroMemory(pRxContext->TransferBuffer, pRxContext->BulkInOffset);
++ RTUSBInitRxDesc(pAd, pRxContext);
++
++ pUrb = pRxContext->pUrb;
++ if ((ret = RTUSB_SUBMIT_URB(pUrb))!=0)
++ { // fail
++
++ RTMP_IRQ_LOCK(&pAd->BulkInLock, IrqFlags);
++ pRxContext->InUse = FALSE;
++ pRxContext->IRPPending = FALSE;
++ pAd->PendingRx--;
++ pAd->BulkInReq--;
++ RTMP_IRQ_UNLOCK(&pAd->BulkInLock, IrqFlags);
++ DBGPRINT(RT_DEBUG_ERROR, ("RTUSBBulkReceive: Submit Rx URB failed %d\n", ret));
++ }
++ else
++ { // success
++#if 0
++ RTMP_IRQ_LOCK(&pAd->BulkInLock, IrqFlags);
++ pRxContext->IRPPending = TRUE;
++ //NdisInterlockedIncrement(&pAd->PendingRx);
++ pAd->PendingRx++;
++ RTMP_IRQ_UNLOCK(&pAd->BulkInLock, IrqFlags);
++ pAd->BulkInReq++;
++#endif
++ ASSERT((pRxContext->InUse == pRxContext->IRPPending));
++ //printk("BIDone, Pend=%d,BIIdx=%d,BIRIdx=%d!\n", pAd->PendingRx, pAd->NextRxBulkInIndex, pAd->NextRxBulkInReadIndex);
++ }
++}
++
++
++/*
++ ========================================================================
++
++ Routine Description:
++ USB_RxPacket initializes a URB and uses the Rx IRP to submit it
++ to USB. It checks if an Rx Descriptor is available and passes the
++ the coresponding buffer to be filled. If no descriptor is available
++ fails the request. When setting the completion routine we pass our
++ Adapter Object as Context.
++
++ Arguments:
++
++ Return Value:
++ TRUE found matched tuple cache
++ FALSE no matched found
++
++ Note:
++
++ ========================================================================
++*/
++#define fRTMP_ADAPTER_NEED_STOP_RX \
++ (fRTMP_ADAPTER_NIC_NOT_EXIST | fRTMP_ADAPTER_HALT_IN_PROGRESS | \
++ fRTMP_ADAPTER_RADIO_OFF | fRTMP_ADAPTER_RESET_IN_PROGRESS | \
++ fRTMP_ADAPTER_REMOVE_IN_PROGRESS | fRTMP_ADAPTER_BULKIN_RESET)
++
++#define fRTMP_ADAPTER_NEED_STOP_HANDLE_RX \
++ (fRTMP_ADAPTER_NIC_NOT_EXIST | fRTMP_ADAPTER_HALT_IN_PROGRESS | \
++ fRTMP_ADAPTER_RADIO_OFF | fRTMP_ADAPTER_RESET_IN_PROGRESS | \
++ fRTMP_ADAPTER_REMOVE_IN_PROGRESS)
++
++VOID RTUSBBulkReceive(
++ IN PRTMP_ADAPTER pAd)
++{
++ PRX_CONTEXT pRxContext;
++ unsigned long IrqFlags;
++
++
++ /* sanity check */
++ if (RTMP_TEST_FLAG(pAd, fRTMP_ADAPTER_NEED_STOP_HANDLE_RX))
++ return;
++
++ while(1)
++ {
++
++ RTMP_IRQ_LOCK(&pAd->BulkInLock, IrqFlags);
++ pRxContext = &(pAd->RxContext[pAd->NextRxBulkInReadIndex]);
++ if (((pRxContext->InUse == FALSE) && (pRxContext->Readable == TRUE)) &&
++ (pRxContext->bRxHandling == FALSE))
++ {
++ pRxContext->bRxHandling = TRUE;
++ RTMP_IRQ_UNLOCK(&pAd->BulkInLock, IrqFlags);
++
++ // read RxContext, Since not
++#ifdef CONFIG_STA_SUPPORT
++ IF_DEV_CONFIG_OPMODE_ON_STA(pAd)
++ STARxDoneInterruptHandle(pAd, TRUE);
++#endif // CONFIG_STA_SUPPORT //
++
++ // Finish to handle this bulkIn buffer.
++ RTMP_IRQ_LOCK(&pAd->BulkInLock, IrqFlags);
++ pRxContext->BulkInOffset = 0;
++ pRxContext->Readable = FALSE;
++ pRxContext->bRxHandling = FALSE;
++ pAd->ReadPosition = 0;
++ pAd->TransferBufferLength = 0;
++ INC_RING_INDEX(pAd->NextRxBulkInReadIndex, RX_RING_SIZE);
++ RTMP_IRQ_UNLOCK(&pAd->BulkInLock, IrqFlags);
++
++ }
++ else
++ {
++ RTMP_IRQ_UNLOCK(&pAd->BulkInLock, IrqFlags);
++ break;
++ }
++ }
++
++ if (!(RTMP_TEST_FLAG(pAd, fRTMP_ADAPTER_NEED_STOP_RX)))
++ DoBulkIn(pAd);
++
++}
++
++
++/*
++ ========================================================================
++
++ Routine Description:
++ This routine process Rx Irp and call rx complete function.
++
++ Arguments:
++ DeviceObject Pointer to the device object for next lower
++ device. DeviceObject passed in here belongs to
++ the next lower driver in the stack because we
++ were invoked via IoCallDriver in USB_RxPacket
++ AND it is not OUR device object
++ Irp Ptr to completed IRP
++ Context Ptr to our Adapter object (context specified
++ in IoSetCompletionRoutine
++
++ Return Value:
++ Always returns STATUS_MORE_PROCESSING_REQUIRED
++
++ Note:
++ Always returns STATUS_MORE_PROCESSING_REQUIRED
++ ========================================================================
++*/
++VOID RTUSBBulkRxComplete(purbb_t pUrb, struct pt_regs *pt_regs)
++{
++ // use a receive tasklet to handle received packets;
++ // or sometimes hardware IRQ will be disabled here, so we can not
++ // use spin_lock_bh()/spin_unlock_bh() after IRQ is disabled. :<
++ PRX_CONTEXT pRxContext;
++ PRTMP_ADAPTER pAd;
++ POS_COOKIE pObj;
++
++
++ pRxContext = (PRX_CONTEXT)pUrb->context;
++ pAd = pRxContext->pAd;
++ pObj = (POS_COOKIE) pAd->OS_Cookie;
++
++ pObj->rx_done_task.data = (unsigned long)pUrb;
++ tasklet_hi_schedule(&pObj->rx_done_task);
++
++}
++
++#endif
++
++
++
++/*
++ ========================================================================
++
++ Routine Description:
++
++ Arguments:
++
++ Return Value:
++
++ Note:
++
++ ========================================================================
++*/
++VOID RTUSBKickBulkOut(
++ IN PRTMP_ADAPTER pAd)
++{
++ // BulkIn Reset will reset whole USB PHY. So we need to make sure fRTMP_ADAPTER_BULKIN_RESET not flaged.
++ if (!RTMP_TEST_FLAG(pAd ,fRTMP_ADAPTER_NEED_STOP_TX)
++#ifdef RALINK_ATE
++ && !(ATE_ON(pAd))
++#endif // RALINK_ATE //
++ )
++ {
++#if 0 // not used now in RT28xx, but may used latter.
++ // 1. Data Fragment has highest priority
++ if (RTUSB_TEST_BULK_FLAG(pAd, fRTUSB_BULK_OUT_DATA_FRAG))
++ {
++ if (((!RTMP_TEST_FLAG(pAd, fRTMP_ADAPTER_BSS_SCAN_IN_PROGRESS)) ||
++ (!OPSTATUS_TEST_FLAG(pAd, fOP_STATUS_MEDIA_STATE_CONNECTED))
++ ))
++ {
++ RTUSBBulkOutDataPacket(pAd, 0, pAd->NextBulkOutIndex[0]);
++ }
++ }
++ if (RTUSB_TEST_BULK_FLAG(pAd, fRTUSB_BULK_OUT_DATA_FRAG_2))
++ {
++ if (((!RTMP_TEST_FLAG(pAd, fRTMP_ADAPTER_BSS_SCAN_IN_PROGRESS)) ||
++ (!OPSTATUS_TEST_FLAG(pAd, fOP_STATUS_MEDIA_STATE_CONNECTED))
++ ))
++ {
++ RTUSBBulkOutDataPacket(pAd, 1, pAd->NextBulkOutIndex[1]);
++ }
++ }
++ if (RTUSB_TEST_BULK_FLAG(pAd, fRTUSB_BULK_OUT_DATA_FRAG_3))
++ {
++ if (((!RTMP_TEST_FLAG(pAd, fRTMP_ADAPTER_BSS_SCAN_IN_PROGRESS)) ||
++ (!OPSTATUS_TEST_FLAG(pAd, fOP_STATUS_MEDIA_STATE_CONNECTED))
++ ))
++ {
++ RTUSBBulkOutDataPacket(pAd, 2, pAd->NextBulkOutIndex[2]);
++ }
++ }
++ if (RTUSB_TEST_BULK_FLAG(pAd, fRTUSB_BULK_OUT_DATA_FRAG_4))
++ {
++ if (((!RTMP_TEST_FLAG(pAd, fRTMP_ADAPTER_BSS_SCAN_IN_PROGRESS)) ||
++ (!OPSTATUS_TEST_FLAG(pAd, fOP_STATUS_MEDIA_STATE_CONNECTED))
++ ))
++ {
++ RTUSBBulkOutDataPacket(pAd, 3, pAd->NextBulkOutIndex[3]);
++ }
++ }
++#endif
++
++ // 2. PS-Poll frame is next
++ if (RTUSB_TEST_BULK_FLAG(pAd, fRTUSB_BULK_OUT_PSPOLL))
++ {
++ RTUSBBulkOutPsPoll(pAd);
++ }
++
++ // 5. Mlme frame is next
++ else if ((RTUSB_TEST_BULK_FLAG(pAd, fRTUSB_BULK_OUT_MLME)) &&
++ (pAd->MgmtRing.TxSwFreeIdx < MGMT_RING_SIZE))
++ {
++ RTUSBBulkOutMLMEPacket(pAd, pAd->MgmtRing.TxDmaIdx);
++ }
++
++ // 6. Data frame normal is next
++ if (RTUSB_TEST_BULK_FLAG(pAd, fRTUSB_BULK_OUT_DATA_NORMAL))
++ {
++ if (((!RTMP_TEST_FLAG(pAd, fRTMP_ADAPTER_BSS_SCAN_IN_PROGRESS)) ||
++ (!OPSTATUS_TEST_FLAG(pAd, fOP_STATUS_MEDIA_STATE_CONNECTED))
++ ))
++ {
++ RTUSBBulkOutDataPacket(pAd, 0, pAd->NextBulkOutIndex[0]);
++ }
++ }
++ if (RTUSB_TEST_BULK_FLAG(pAd, fRTUSB_BULK_OUT_DATA_NORMAL_2))
++ {
++ if (((!RTMP_TEST_FLAG(pAd, fRTMP_ADAPTER_BSS_SCAN_IN_PROGRESS)) ||
++ (!OPSTATUS_TEST_FLAG(pAd, fOP_STATUS_MEDIA_STATE_CONNECTED))
++ ))
++ {
++ RTUSBBulkOutDataPacket(pAd, 1, pAd->NextBulkOutIndex[1]);
++ }
++ }
++ if (RTUSB_TEST_BULK_FLAG(pAd, fRTUSB_BULK_OUT_DATA_NORMAL_3))
++ {
++ if (((!RTMP_TEST_FLAG(pAd, fRTMP_ADAPTER_BSS_SCAN_IN_PROGRESS)) ||
++ (!OPSTATUS_TEST_FLAG(pAd, fOP_STATUS_MEDIA_STATE_CONNECTED))
++ ))
++ {
++ RTUSBBulkOutDataPacket(pAd, 2, pAd->NextBulkOutIndex[2]);
++ }
++ }
++ if (RTUSB_TEST_BULK_FLAG(pAd, fRTUSB_BULK_OUT_DATA_NORMAL_4))
++ {
++ if (((!RTMP_TEST_FLAG(pAd, fRTMP_ADAPTER_BSS_SCAN_IN_PROGRESS)) ||
++ (!OPSTATUS_TEST_FLAG(pAd, fOP_STATUS_MEDIA_STATE_CONNECTED))
++ ))
++ {
++ RTUSBBulkOutDataPacket(pAd, 3, pAd->NextBulkOutIndex[3]);
++ }
++ }
++
++ // 7. Null frame is the last
++ else if (RTUSB_TEST_BULK_FLAG(pAd, fRTUSB_BULK_OUT_DATA_NULL))
++ {
++ if (!RTMP_TEST_FLAG(pAd, fRTMP_ADAPTER_BSS_SCAN_IN_PROGRESS))
++ {
++ RTUSBBulkOutNullFrame(pAd);
++ }
++ }
++
++ // 8. No data avaliable
++ else
++ {
++
++ }
++ }
++#ifdef RALINK_ATE
++ /* If the mode is in ATE mode. */
++ else if((ATE_ON(pAd)) &&
++ !RTMP_TEST_FLAG(pAd ,fRTMP_ADAPTER_NEED_STOP_TX))// PETER : watch out !
++ {
++ if (RTUSB_TEST_BULK_FLAG(pAd, fRTUSB_BULK_OUT_DATA_ATE))
++ {
++ ATE_RTUSBBulkOutDataPacket(pAd, 0);
++ }
++ }
++#endif // RALINK_ATE //
++
++}
++
++/*
++ ========================================================================
++
++ Routine Description:
++ Call from Reset action after BulkOut failed.
++ Arguments:
++
++ Return Value:
++
++ Note:
++
++ ========================================================================
++*/
++VOID RTUSBCleanUpDataBulkOutQueue(
++ IN PRTMP_ADAPTER pAd)
++{
++ UCHAR Idx;
++ PHT_TX_CONTEXT pTxContext;
++
++ DBGPRINT(RT_DEBUG_TRACE, ("--->CleanUpDataBulkOutQueue\n"));
++
++ for (Idx = 0; Idx < 4; Idx++)
++ {
++ pTxContext = &pAd->TxContext[Idx];
++
++ pTxContext->CurWritePosition = pTxContext->NextBulkOutPosition;
++ pTxContext->LastOne = FALSE;
++ NdisAcquireSpinLock(&pAd->BulkOutLock[Idx]);
++ pAd->BulkOutPending[Idx] = FALSE;
++ NdisReleaseSpinLock(&pAd->BulkOutLock[Idx]);
++ }
++
++ DBGPRINT(RT_DEBUG_TRACE, ("<---CleanUpDataBulkOutQueue\n"));
++}
++
++/*
++ ========================================================================
++
++ Routine Description:
++
++ Arguments:
++
++ Return Value:
++
++ Note:
++
++ ========================================================================
++*/
++VOID RTUSBCleanUpMLMEBulkOutQueue(
++ IN PRTMP_ADAPTER pAd)
++{
++ DBGPRINT(RT_DEBUG_TRACE, ("--->CleanUpMLMEBulkOutQueue\n"));
++
++#if 0 // Do nothing!
++ NdisAcquireSpinLock(&pAd->MLMEBulkOutLock);
++ while (pAd->PrioRingTxCnt > 0)
++ {
++ pAd->MLMEContext[pAd->PrioRingFirstIndex].InUse = FALSE;
++
++ pAd->PrioRingFirstIndex++;
++ if (pAd->PrioRingFirstIndex >= MGMT_RING_SIZE)
++ {
++ pAd->PrioRingFirstIndex = 0;
++ }
++
++ pAd->PrioRingTxCnt--;
++ }
++ NdisReleaseSpinLock(&pAd->MLMEBulkOutLock);
++#endif
++
++ DBGPRINT(RT_DEBUG_TRACE, ("<---CleanUpMLMEBulkOutQueue\n"));
++}
++
++
++/*
++ ========================================================================
++
++ Routine Description:
++
++ Arguments:
++
++ Return Value:
++
++
++ Note:
++
++ ========================================================================
++*/
++VOID RTUSBCancelPendingIRPs(
++ IN PRTMP_ADAPTER pAd)
++{
++ RTUSBCancelPendingBulkInIRP(pAd);
++ RTUSBCancelPendingBulkOutIRP(pAd);
++}
++
++/*
++ ========================================================================
++
++ Routine Description:
++
++ Arguments:
++
++ Return Value:
++
++ Note:
++
++ ========================================================================
++*/
++VOID RTUSBCancelPendingBulkInIRP(
++ IN PRTMP_ADAPTER pAd)
++{
++ PRX_CONTEXT pRxContext;
++ UINT i;
++
++ DBGPRINT_RAW(RT_DEBUG_TRACE, ("--->RTUSBCancelPendingBulkInIRP\n"));
++ for ( i = 0; i < (RX_RING_SIZE); i++)
++ {
++ pRxContext = &(pAd->RxContext[i]);
++ if(pRxContext->IRPPending == TRUE)
++ {
++ RTUSB_UNLINK_URB(pRxContext->pUrb);
++ pRxContext->IRPPending = FALSE;
++ pRxContext->InUse = FALSE;
++ //NdisInterlockedDecrement(&pAd->PendingRx);
++ //pAd->PendingRx--;
++ }
++ }
++ DBGPRINT_RAW(RT_DEBUG_TRACE, ("<---RTUSBCancelPendingBulkInIRP\n"));
++}
++
++
++/*
++ ========================================================================
++
++ Routine Description:
++
++ Arguments:
++
++ Return Value:
++
++ Note:
++
++ ========================================================================
++*/
++VOID RTUSBCancelPendingBulkOutIRP(
++ IN PRTMP_ADAPTER pAd)
++{
++ PHT_TX_CONTEXT pHTTXContext;
++ PTX_CONTEXT pMLMEContext;
++ PTX_CONTEXT pBeaconContext;
++ PTX_CONTEXT pNullContext;
++ PTX_CONTEXT pPsPollContext;
++ PTX_CONTEXT pRTSContext;
++ UINT i, Idx;
++// unsigned int IrqFlags;
++// NDIS_SPIN_LOCK *pLock;
++// BOOLEAN *pPending;
++
++
++// pLock = &pAd->BulkOutLock[MGMTPIPEIDX];
++// pPending = &pAd->BulkOutPending[MGMTPIPEIDX];
++
++ for (Idx = 0; Idx < 4; Idx++)
++ {
++ pHTTXContext = &(pAd->TxContext[Idx]);
++
++ if (pHTTXContext->IRPPending == TRUE)
++ {
++
++ // Get the USB_CONTEXT and cancel it's IRP; the completion routine will itself
++ // remove it from the HeadPendingSendList and NULL out HeadPendingSendList
++ // when the last IRP on the list has been cancelled; that's how we exit this loop
++ //
++
++ RTUSB_UNLINK_URB(pHTTXContext->pUrb);
++
++ // Sleep 200 microseconds to give cancellation time to work
++ RTMPusecDelay(200);
++ }
++
++#ifdef RALINK_ATE
++ pHTTXContext->bCopySavePad = 0;
++ pHTTXContext->CurWritePosition = 0;
++ pHTTXContext->CurWriteRealPos = 0;
++ pHTTXContext->bCurWriting = FALSE;
++ pHTTXContext->NextBulkOutPosition = 0;
++ pHTTXContext->ENextBulkOutPosition = 0;
++#endif // RALINK_ATE //
++ pAd->BulkOutPending[Idx] = FALSE;
++ }
++
++ //RTMP_IRQ_LOCK(pLock, IrqFlags);
++ for (i = 0; i < MGMT_RING_SIZE; i++)
++ {
++ pMLMEContext = (PTX_CONTEXT)pAd->MgmtRing.Cell[i].AllocVa;
++ if(pMLMEContext && (pMLMEContext->IRPPending == TRUE))
++ {
++
++ // Get the USB_CONTEXT and cancel it's IRP; the completion routine will itself
++ // remove it from the HeadPendingSendList and NULL out HeadPendingSendList
++ // when the last IRP on the list has been cancelled; that's how we exit this loop
++ //
++
++ RTUSB_UNLINK_URB(pMLMEContext->pUrb);
++ pMLMEContext->IRPPending = FALSE;
++
++ // Sleep 200 microsecs to give cancellation time to work
++ RTMPusecDelay(200);
++ }
++ }
++ pAd->BulkOutPending[MGMTPIPEIDX] = FALSE;
++ //RTMP_IRQ_UNLOCK(pLock, IrqFlags);
++
++
++ for (i = 0; i < BEACON_RING_SIZE; i++)
++ {
++ pBeaconContext = &(pAd->BeaconContext[i]);
++
++ if(pBeaconContext->IRPPending == TRUE)
++ {
++
++ // Get the USB_CONTEXT and cancel it's IRP; the completion routine will itself
++ // remove it from the HeadPendingSendList and NULL out HeadPendingSendList
++ // when the last IRP on the list has been cancelled; that's how we exit this loop
++ //
++
++ RTUSB_UNLINK_URB(pBeaconContext->pUrb);
++
++ // Sleep 200 microsecs to give cancellation time to work
++ RTMPusecDelay(200);
++ }
++ }
++
++ pNullContext = &(pAd->NullContext);
++ if (pNullContext->IRPPending == TRUE)
++ RTUSB_UNLINK_URB(pNullContext->pUrb);
++
++ pRTSContext = &(pAd->RTSContext);
++ if (pRTSContext->IRPPending == TRUE)
++ RTUSB_UNLINK_URB(pRTSContext->pUrb);
++
++ pPsPollContext = &(pAd->PsPollContext);
++ if (pPsPollContext->IRPPending == TRUE)
++ RTUSB_UNLINK_URB(pPsPollContext->pUrb);
++
++ for (Idx = 0; Idx < 4; Idx++)
++ {
++ NdisAcquireSpinLock(&pAd->BulkOutLock[Idx]);
++ pAd->BulkOutPending[Idx] = FALSE;
++ NdisReleaseSpinLock(&pAd->BulkOutLock[Idx]);
++ }
++}
++
+--- /dev/null
++++ b/drivers/staging/rt2870/common/rtusb_data.c
+@@ -0,0 +1,229 @@
++/*
++ *************************************************************************
++ * Ralink Tech Inc.
++ * 5F., No.36, Taiyuan St., Jhubei City,
++ * Hsinchu County 302,
++ * Taiwan, R.O.C.
++ *
++ * (c) Copyright 2002-2007, Ralink Technology, Inc.
++ *
++ * This program is free software; you can redistribute it and/or modify *
++ * it under the terms of the GNU General Public License as published by *
++ * the Free Software Foundation; either version 2 of the License, or *
++ * (at your option) any later version. *
++ * *
++ * This program is distributed in the hope that it will be useful, *
++ * but WITHOUT ANY WARRANTY; without even the implied warranty of *
++ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the *
++ * GNU General Public License for more details. *
++ * *
++ * You should have received a copy of the GNU General Public License *
++ * along with this program; if not, write to the *
++ * Free Software Foundation, Inc., *
++ * 59 Temple Place - Suite 330, Boston, MA 02111-1307, USA. *
++ * *
++ *************************************************************************
++
++ Module Name:
++ rtusb_data.c
++
++ Abstract:
++ Ralink USB driver Tx/Rx functions.
++
++ Revision History:
++ Who When What
++ -------- ---------- ----------------------------------------------
++ Jan 03-25-2006 created
++
++*/
++#include "../rt_config.h"
++
++extern UCHAR Phy11BGNextRateUpward[]; // defined in mlme.c
++extern UCHAR EpToQueue[];
++
++VOID REPORT_AMSDU_FRAMES_TO_LLC(
++ IN PRTMP_ADAPTER pAd,
++ IN PUCHAR pData,
++ IN ULONG DataSize)
++{
++ PNDIS_PACKET pPacket;
++ UINT nMSDU;
++ struct sk_buff *pSkb;
++
++ nMSDU = 0;
++ /* allocate a rx packet */
++ pSkb = dev_alloc_skb(RX_BUFFER_AGGRESIZE);
++ pPacket = (PNDIS_PACKET)OSPKT_TO_RTPKT(pSkb);
++ if (pSkb)
++ {
++
++ /* convert 802.11 to 802.3 packet */
++ pSkb->dev = get_netdev_from_bssid(pAd, BSS0);
++ RTMP_SET_PACKET_SOURCE(pPacket, PKTSRC_NDIS);
++ deaggregate_AMSDU_announce(pAd, pPacket, pData, DataSize);
++ }
++ else
++ {
++ DBGPRINT(RT_DEBUG_ERROR,("Can't allocate skb\n"));
++ }
++}
++
++NDIS_STATUS RTUSBFreeDescriptorRequest(
++ IN PRTMP_ADAPTER pAd,
++ IN UCHAR BulkOutPipeId,
++ IN UINT32 NumberRequired)
++{
++// UCHAR FreeNumber = 0;
++// UINT Index;
++ NDIS_STATUS Status = NDIS_STATUS_FAILURE;
++ unsigned long IrqFlags;
++ HT_TX_CONTEXT *pHTTXContext;
++
++
++ pHTTXContext = &pAd->TxContext[BulkOutPipeId];
++ RTMP_IRQ_LOCK(&pAd->TxContextQueueLock[BulkOutPipeId], IrqFlags);
++ if ((pHTTXContext->CurWritePosition < pHTTXContext->NextBulkOutPosition) && ((pHTTXContext->CurWritePosition + NumberRequired + LOCAL_TXBUF_SIZE) > pHTTXContext->NextBulkOutPosition))
++ {
++
++ RTUSB_SET_BULK_FLAG(pAd, (fRTUSB_BULK_OUT_DATA_NORMAL << BulkOutPipeId));
++ }
++ else if ((pHTTXContext->CurWritePosition == 8) && (pHTTXContext->NextBulkOutPosition < (NumberRequired + LOCAL_TXBUF_SIZE)))
++ {
++ RTUSB_SET_BULK_FLAG(pAd, (fRTUSB_BULK_OUT_DATA_NORMAL << BulkOutPipeId));
++ }
++ else if (pHTTXContext->bCurWriting == TRUE)
++ {
++ DBGPRINT(RT_DEBUG_TRACE,("RTUSBFreeD c3 --> QueIdx=%d, CWPos=%ld, NBOutPos=%ld!\n", BulkOutPipeId, pHTTXContext->CurWritePosition, pHTTXContext->NextBulkOutPosition));
++ RTUSB_SET_BULK_FLAG(pAd, (fRTUSB_BULK_OUT_DATA_NORMAL << BulkOutPipeId));
++ }
++ else
++ {
++ Status = NDIS_STATUS_SUCCESS;
++ }
++ RTMP_IRQ_UNLOCK(&pAd->TxContextQueueLock[BulkOutPipeId], IrqFlags);
++
++
++ return (Status);
++}
++
++NDIS_STATUS RTUSBFreeDescriptorRelease(
++ IN RTMP_ADAPTER *pAd,
++ IN UCHAR BulkOutPipeId)
++{
++ unsigned long IrqFlags;
++ HT_TX_CONTEXT *pHTTXContext;
++
++ pHTTXContext = &pAd->TxContext[BulkOutPipeId];
++ RTMP_IRQ_LOCK(&pAd->TxContextQueueLock[BulkOutPipeId], IrqFlags);
++ pHTTXContext->bCurWriting = FALSE;
++ RTMP_IRQ_UNLOCK(&pAd->TxContextQueueLock[BulkOutPipeId], IrqFlags);
++
++ return (NDIS_STATUS_SUCCESS);
++}
++
++
++BOOLEAN RTUSBNeedQueueBackForAgg(
++ IN RTMP_ADAPTER *pAd,
++ IN UCHAR BulkOutPipeId)
++{
++ unsigned long IrqFlags;
++ HT_TX_CONTEXT *pHTTXContext;
++ BOOLEAN needQueBack = FALSE;
++
++ pHTTXContext = &pAd->TxContext[BulkOutPipeId];
++
++ RTMP_IRQ_LOCK(&pAd->TxContextQueueLock[BulkOutPipeId], IrqFlags);
++ if ((pHTTXContext->IRPPending == TRUE) /*&& (pAd->TxSwQueue[BulkOutPipeId].Number == 0) */)
++ {
++#if 0
++ if ((pHTTXContext->CurWritePosition <= 8) &&
++ (pHTTXContext->NextBulkOutPosition > 8 && (pHTTXContext->NextBulkOutPosition+MAX_AGGREGATION_SIZE) < MAX_TXBULK_LIMIT))
++ {
++ needQueBack = TRUE;
++ }
++ else if ((pHTTXContext->CurWritePosition < pHTTXContext->NextBulkOutPosition) &&
++ ((pHTTXContext->NextBulkOutPosition + MAX_AGGREGATION_SIZE) < MAX_TXBULK_LIMIT))
++ {
++ needQueBack = TRUE;
++ }
++#else
++ if ((pHTTXContext->CurWritePosition < pHTTXContext->ENextBulkOutPosition) &&
++ (((pHTTXContext->ENextBulkOutPosition+MAX_AGGREGATION_SIZE) < MAX_TXBULK_LIMIT) || (pHTTXContext->CurWritePosition > MAX_AGGREGATION_SIZE)))
++ {
++ needQueBack = TRUE;
++ }
++#endif
++ else if ((pHTTXContext->CurWritePosition > pHTTXContext->ENextBulkOutPosition) &&
++ ((pHTTXContext->ENextBulkOutPosition + MAX_AGGREGATION_SIZE) < pHTTXContext->CurWritePosition))
++ {
++ needQueBack = TRUE;
++ }
++ }
++ RTMP_IRQ_UNLOCK(&pAd->TxContextQueueLock[BulkOutPipeId], IrqFlags);
++
++ return needQueBack;
++
++}
++
++
++/*
++ ========================================================================
++
++ Routine Description:
++
++ Arguments:
++
++ Return Value:
++
++ IRQL =
++
++ Note:
++
++ ========================================================================
++*/
++VOID RTUSBRejectPendingPackets(
++ IN PRTMP_ADAPTER pAd)
++{
++ UCHAR Index;
++ PQUEUE_ENTRY pEntry;
++ PNDIS_PACKET pPacket;
++ PQUEUE_HEADER pQueue;
++
++
++ for (Index = 0; Index < 4; Index++)
++ {
++ NdisAcquireSpinLock(&pAd->TxSwQueueLock[Index]);
++ while (pAd->TxSwQueue[Index].Head != NULL)
++ {
++ pQueue = (PQUEUE_HEADER) &(pAd->TxSwQueue[Index]);
++ pEntry = RemoveHeadQueue(pQueue);
++ pPacket = QUEUE_ENTRY_TO_PACKET(pEntry);
++ RELEASE_NDIS_PACKET(pAd, pPacket, NDIS_STATUS_FAILURE);
++ }
++ NdisReleaseSpinLock(&pAd->TxSwQueueLock[Index]);
++
++ }
++
++}
++
++VOID RTMPWriteTxInfo(
++ IN PRTMP_ADAPTER pAd,
++ IN PTXINFO_STRUC pTxInfo,
++ IN USHORT USBDMApktLen,
++ IN BOOLEAN bWiv,
++ IN UCHAR QueueSel,
++ IN UCHAR NextValid,
++ IN UCHAR TxBurst)
++{
++ pTxInfo->USBDMATxPktLen = USBDMApktLen;
++ pTxInfo->QSEL = QueueSel;
++ if (QueueSel != FIFO_EDCA)
++ DBGPRINT(RT_DEBUG_TRACE, ("====> QueueSel != FIFO_EDCA<============\n"));
++ pTxInfo->USBDMANextVLD = FALSE; //NextValid; // Need to check with Jan about this.
++ pTxInfo->USBDMATxburst = TxBurst;
++ pTxInfo->WIV = bWiv;
++ pTxInfo->SwUseLastRound = 0;
++ pTxInfo->rsv = 0;
++ pTxInfo->rsv2 = 0;
++}
++
+--- /dev/null
++++ b/drivers/staging/rt2870/common/rtusb_io.c
+@@ -0,0 +1,2006 @@
++/*
++ *************************************************************************
++ * Ralink Tech Inc.
++ * 5F., No.36, Taiyuan St., Jhubei City,
++ * Hsinchu County 302,
++ * Taiwan, R.O.C.
++ *
++ * (c) Copyright 2002-2007, Ralink Technology, Inc.
++ *
++ * This program is free software; you can redistribute it and/or modify *
++ * it under the terms of the GNU General Public License as published by *
++ * the Free Software Foundation; either version 2 of the License, or *
++ * (at your option) any later version. *
++ * *
++ * This program is distributed in the hope that it will be useful, *
++ * but WITHOUT ANY WARRANTY; without even the implied warranty of *
++ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the *
++ * GNU General Public License for more details. *
++ * *
++ * You should have received a copy of the GNU General Public License *
++ * along with this program; if not, write to the *
++ * Free Software Foundation, Inc., *
++ * 59 Temple Place - Suite 330, Boston, MA 02111-1307, USA. *
++ * *
++ *************************************************************************
++
++ Module Name:
++ rtusb_io.c
++
++ Abstract:
++
++ Revision History:
++ Who When What
++ -------- ---------- ----------------------------------------------
++ Name Date Modification logs
++ Paul Lin 06-25-2004 created
++*/
++
++#include "../rt_config.h"
++
++
++/*
++ ========================================================================
++
++ Routine Description: NIC initialization complete
++
++ Arguments:
++
++ Return Value:
++
++ IRQL =
++
++ Note:
++
++ ========================================================================
++*/
++
++NTSTATUS RTUSBFirmwareRun(
++ IN PRTMP_ADAPTER pAd)
++{
++ NTSTATUS Status;
++
++ Status = RTUSB_VendorRequest(
++ pAd,
++ USBD_TRANSFER_DIRECTION_OUT,
++ DEVICE_VENDOR_REQUEST_OUT,
++ 0x01,
++ 0x8,
++ 0,
++ NULL,
++ 0);
++
++ return Status;
++}
++
++
++
++/*
++ ========================================================================
++
++ Routine Description: Write Firmware to NIC.
++
++ Arguments:
++
++ Return Value:
++
++ IRQL =
++
++ Note:
++
++ ========================================================================
++*/
++NTSTATUS RTUSBFirmwareWrite(
++ IN PRTMP_ADAPTER pAd,
++ IN PUCHAR pFwImage,
++ IN ULONG FwLen)
++{
++ UINT32 MacReg;
++ NTSTATUS Status;
++// ULONG i;
++ USHORT writeLen;
++
++ Status = RTUSBReadMACRegister(pAd, MAC_CSR0, &MacReg);
++
++
++ writeLen = FwLen;
++ RTUSBMultiWrite(pAd, FIRMWARE_IMAGE_BASE, pFwImage, writeLen);
++
++ Status = RTUSBWriteMACRegister(pAd, 0x7014, 0xffffffff);
++ Status = RTUSBWriteMACRegister(pAd, 0x701c, 0xffffffff);
++ Status = RTUSBFirmwareRun(pAd);
++
++ return Status;
++}
++
++
++/*
++ ========================================================================
++
++ Routine Description: Get current firmware operation mode (Return Value)
++
++ Arguments:
++
++ Return Value:
++ 0 or 1 = Downloaded by host driver
++ others = Driver doesn't download firmware
++
++ IRQL =
++
++ Note:
++
++ ========================================================================
++*/
++NTSTATUS RTUSBFirmwareOpmode(
++ IN PRTMP_ADAPTER pAd,
++ OUT PUINT32 pValue)
++{
++ NTSTATUS Status;
++
++ Status = RTUSB_VendorRequest(
++ pAd,
++ (USBD_TRANSFER_DIRECTION_IN | USBD_SHORT_TRANSFER_OK),
++ DEVICE_VENDOR_REQUEST_IN,
++ 0x1,
++ 0x11,
++ 0,
++ pValue,
++ 4);
++ return Status;
++}
++NTSTATUS RTUSBVenderReset(
++ IN PRTMP_ADAPTER pAd)
++{
++ NTSTATUS Status;
++ DBGPRINT_RAW(RT_DEBUG_ERROR, ("-->RTUSBVenderReset\n"));
++ Status = RTUSB_VendorRequest(
++ pAd,
++ USBD_TRANSFER_DIRECTION_OUT,
++ DEVICE_VENDOR_REQUEST_OUT,
++ 0x01,
++ 0x1,
++ 0,
++ NULL,
++ 0);
++
++ DBGPRINT_RAW(RT_DEBUG_ERROR, ("<--RTUSBVenderReset\n"));
++ return Status;
++}
++/*
++ ========================================================================
++
++ Routine Description: Read various length data from RT2573
++
++ Arguments:
++
++ Return Value:
++
++ IRQL =
++
++ Note:
++
++ ========================================================================
++*/
++NTSTATUS RTUSBMultiRead(
++ IN PRTMP_ADAPTER pAd,
++ IN USHORT Offset,
++ OUT PUCHAR pData,
++ IN USHORT length)
++{
++ NTSTATUS Status;
++
++ Status = RTUSB_VendorRequest(
++ pAd,
++ (USBD_TRANSFER_DIRECTION_IN | USBD_SHORT_TRANSFER_OK),
++ DEVICE_VENDOR_REQUEST_IN,
++ 0x7,
++ 0,
++ Offset,
++ pData,
++ length);
++
++ return Status;
++}
++
++/*
++ ========================================================================
++
++ Routine Description: Write various length data to RT2573
++
++ Arguments:
++
++ Return Value:
++
++ IRQL =
++
++ Note:
++
++ ========================================================================
++*/
++NTSTATUS RTUSBMultiWrite_OneByte(
++ IN PRTMP_ADAPTER pAd,
++ IN USHORT Offset,
++ IN PUCHAR pData)
++{
++ NTSTATUS Status;
++
++ // TODO: In 2870, use this funciton carefully cause it's not stable.
++ Status = RTUSB_VendorRequest(
++ pAd,
++ USBD_TRANSFER_DIRECTION_OUT,
++ DEVICE_VENDOR_REQUEST_OUT,
++ 0x6,
++ 0,
++ Offset,
++ pData,
++ 1);
++
++ return Status;
++}
++
++NTSTATUS RTUSBMultiWrite(
++ IN PRTMP_ADAPTER pAd,
++ IN USHORT Offset,
++ IN PUCHAR pData,
++ IN USHORT length)
++{
++ NTSTATUS Status;
++
++
++ USHORT index = 0,Value;
++ PUCHAR pSrc = pData;
++ USHORT resude = 0;
++
++ resude = length % 2;
++ length += resude;
++ do
++ {
++ Value =(USHORT)( *pSrc | (*(pSrc + 1) << 8));
++ Status = RTUSBSingleWrite(pAd,Offset + index,Value);
++ index +=2;
++ length -= 2;
++ pSrc = pSrc + 2;
++ }while(length > 0);
++
++ return Status;
++}
++
++
++NTSTATUS RTUSBSingleWrite(
++ IN RTMP_ADAPTER *pAd,
++ IN USHORT Offset,
++ IN USHORT Value)
++{
++ NTSTATUS Status;
++
++ Status = RTUSB_VendorRequest(
++ pAd,
++ USBD_TRANSFER_DIRECTION_OUT,
++ DEVICE_VENDOR_REQUEST_OUT,
++ 0x2,
++ Value,
++ Offset,
++ NULL,
++ 0);
++
++ return Status;
++
++}
++
++
++/*
++ ========================================================================
++
++ Routine Description: Read 32-bit MAC register
++
++ Arguments:
++
++ Return Value:
++
++ IRQL =
++
++ Note:
++
++ ========================================================================
++*/
++NTSTATUS RTUSBReadMACRegister(
++ IN PRTMP_ADAPTER pAd,
++ IN USHORT Offset,
++ OUT PUINT32 pValue)
++{
++ NTSTATUS Status;
++ UINT32 localVal;
++
++ Status = RTUSB_VendorRequest(
++ pAd,
++ (USBD_TRANSFER_DIRECTION_IN | USBD_SHORT_TRANSFER_OK),
++ DEVICE_VENDOR_REQUEST_IN,
++ 0x7,
++ 0,
++ Offset,
++ &localVal,
++ 4);
++
++ *pValue = le2cpu32(localVal);
++
++
++ if (Status < 0)
++ *pValue = 0xffffffff;
++
++ return Status;
++}
++
++
++/*
++ ========================================================================
++
++ Routine Description: Write 32-bit MAC register
++
++ Arguments:
++
++ Return Value:
++
++ IRQL =
++
++ Note:
++
++ ========================================================================
++*/
++NTSTATUS RTUSBWriteMACRegister(
++ IN PRTMP_ADAPTER pAd,
++ IN USHORT Offset,
++ IN UINT32 Value)
++{
++ NTSTATUS Status;
++ UINT32 localVal;
++
++ localVal = Value;
++
++ Status = RTUSBSingleWrite(pAd, Offset, (USHORT)(localVal & 0xffff));
++ Status = RTUSBSingleWrite(pAd, Offset + 2, (USHORT)((localVal & 0xffff0000) >> 16));
++
++ return Status;
++}
++
++
++
++#if 1
++/*
++ ========================================================================
++
++ Routine Description: Read 8-bit BBP register
++
++ Arguments:
++
++ Return Value:
++
++ IRQL =
++
++ Note:
++
++ ========================================================================
++*/
++NTSTATUS RTUSBReadBBPRegister(
++ IN PRTMP_ADAPTER pAd,
++ IN UCHAR Id,
++ IN PUCHAR pValue)
++{
++ BBP_CSR_CFG_STRUC BbpCsr;
++ UINT i = 0;
++ NTSTATUS status;
++
++ // Verify the busy condition
++ do
++ {
++ status = RTUSBReadMACRegister(pAd, BBP_CSR_CFG, &BbpCsr.word);
++ if(status >= 0)
++ {
++ if (!(BbpCsr.field.Busy == BUSY))
++ break;
++ }
++ printk("RTUSBReadBBPRegister(BBP_CSR_CFG_1):retry count=%d!\n", i);
++ i++;
++ }
++ while ((i < RETRY_LIMIT) && (!RTMP_TEST_FLAG(pAd, fRTMP_ADAPTER_NIC_NOT_EXIST)));
++
++ if ((i == RETRY_LIMIT) || (RTMP_TEST_FLAG(pAd, fRTMP_ADAPTER_NIC_NOT_EXIST)))
++ {
++ //
++ // Read failed then Return Default value.
++ //
++ *pValue = pAd->BbpWriteLatch[Id];
++
++ DBGPRINT_RAW(RT_DEBUG_ERROR, ("Retry count exhausted or device removed!!!\n"));
++ return STATUS_UNSUCCESSFUL;
++ }
++
++ // Prepare for write material
++ BbpCsr.word = 0;
++ BbpCsr.field.fRead = 1;
++ BbpCsr.field.Busy = 1;
++ BbpCsr.field.RegNum = Id;
++ RTUSBWriteMACRegister(pAd, BBP_CSR_CFG, BbpCsr.word);
++
++ i = 0;
++ // Verify the busy condition
++ do
++ {
++ status = RTUSBReadMACRegister(pAd, BBP_CSR_CFG, &BbpCsr.word);
++ if (status >= 0)
++ {
++ if (!(BbpCsr.field.Busy == BUSY))
++ {
++ *pValue = (UCHAR)BbpCsr.field.Value;
++ break;
++ }
++ }
++ printk("RTUSBReadBBPRegister(BBP_CSR_CFG_2):retry count=%d!\n", i);
++ i++;
++ }
++ while ((i < RETRY_LIMIT) && (!RTMP_TEST_FLAG(pAd, fRTMP_ADAPTER_NIC_NOT_EXIST)));
++
++ if ((i == RETRY_LIMIT) || (RTMP_TEST_FLAG(pAd, fRTMP_ADAPTER_NIC_NOT_EXIST)))
++ {
++ //
++ // Read failed then Return Default value.
++ //
++ *pValue = pAd->BbpWriteLatch[Id];
++
++ DBGPRINT_RAW(RT_DEBUG_ERROR, ("Retry count exhausted or device removed!!!\n"));
++ return STATUS_UNSUCCESSFUL;
++ }
++
++ return STATUS_SUCCESS;
++}
++#else
++/*
++ ========================================================================
++
++ Routine Description: Read 8-bit BBP register via firmware
++
++ Arguments:
++
++ Return Value:
++
++ IRQL =
++
++ Note:
++
++ ========================================================================
++*/
++NTSTATUS RTUSBReadBBPRegister(
++ IN PRTMP_ADAPTER pAd,
++ IN UCHAR Id,
++ IN PUCHAR pValue)
++{
++ BBP_CSR_CFG_STRUC BbpCsr;
++ int i, k;
++ for (i=0; i<MAX_BUSY_COUNT; i++)
++ {
++ RTUSBReadMACRegister(pAd, H2M_BBP_AGENT, &BbpCsr.word);
++ if (BbpCsr.field.Busy == BUSY)
++ {
++ continue;
++ }
++ BbpCsr.word = 0;
++ BbpCsr.field.fRead = 1;
++ BbpCsr.field.BBP_RW_MODE = 1;
++ BbpCsr.field.Busy = 1;
++ BbpCsr.field.RegNum = Id;
++ RTUSBWriteMACRegister(pAd, H2M_BBP_AGENT, BbpCsr.word);
++ AsicSendCommandToMcu(pAd, 0x80, 0xff, 0x0, 0x0);
++ for (k=0; k<MAX_BUSY_COUNT; k++)
++ {
++ RTUSBReadMACRegister(pAd, H2M_BBP_AGENT, &BbpCsr.word);
++ if (BbpCsr.field.Busy == IDLE)
++ break;
++ }
++ if ((BbpCsr.field.Busy == IDLE) &&
++ (BbpCsr.field.RegNum == Id))
++ {
++ *pValue = (UCHAR)BbpCsr.field.Value;
++ break;
++ }
++ }
++ if (BbpCsr.field.Busy == BUSY)
++ {
++ DBGPRINT_ERR(("BBP read R%d=0x%x fail\n", Id, BbpCsr.word));
++ *pValue = pAd->BbpWriteLatch[Id];
++ return STATUS_UNSUCCESSFUL;
++ }
++ return STATUS_SUCCESS;
++}
++#endif
++
++#if 1
++/*
++ ========================================================================
++
++ Routine Description: Write 8-bit BBP register
++
++ Arguments:
++
++ Return Value:
++
++ IRQL =
++
++ Note:
++
++ ========================================================================
++*/
++NTSTATUS RTUSBWriteBBPRegister(
++ IN PRTMP_ADAPTER pAd,
++ IN UCHAR Id,
++ IN UCHAR Value)
++{
++ BBP_CSR_CFG_STRUC BbpCsr;
++ UINT i = 0;
++ NTSTATUS status;
++ // Verify the busy condition
++ do
++ {
++ status = RTUSBReadMACRegister(pAd, BBP_CSR_CFG, &BbpCsr.word);
++ if (status >= 0)
++ {
++ if (!(BbpCsr.field.Busy == BUSY))
++ break;
++ }
++ printk("RTUSBWriteBBPRegister(BBP_CSR_CFG):retry count=%d!\n", i);
++ i++;
++ }
++ while ((i < RETRY_LIMIT) && (!RTMP_TEST_FLAG(pAd, fRTMP_ADAPTER_NIC_NOT_EXIST)));
++
++ if ((i == RETRY_LIMIT) || (RTMP_TEST_FLAG(pAd, fRTMP_ADAPTER_NIC_NOT_EXIST)))
++ {
++ DBGPRINT_RAW(RT_DEBUG_ERROR, ("Retry count exhausted or device removed!!!\n"));
++ return STATUS_UNSUCCESSFUL;
++ }
++
++ // Prepare for write material
++ BbpCsr.word = 0;
++ BbpCsr.field.fRead = 0;
++ BbpCsr.field.Value = Value;
++ BbpCsr.field.Busy = 1;
++ BbpCsr.field.RegNum = Id;
++ RTUSBWriteMACRegister(pAd, BBP_CSR_CFG, BbpCsr.word);
++
++ pAd->BbpWriteLatch[Id] = Value;
++
++ return STATUS_SUCCESS;
++}
++#else
++/*
++ ========================================================================
++
++ Routine Description: Write 8-bit BBP register via firmware
++
++ Arguments:
++
++ Return Value:
++
++ IRQL =
++
++ Note:
++
++ ========================================================================
++*/
++
++NTSTATUS RTUSBWriteBBPRegister(
++ IN PRTMP_ADAPTER pAd,
++ IN UCHAR Id,
++ IN UCHAR Value)
++
++{
++ BBP_CSR_CFG_STRUC BbpCsr;
++ int BusyCnt;
++ for (BusyCnt=0; BusyCnt<MAX_BUSY_COUNT; BusyCnt++)
++ {
++ RTMP_IO_READ32(pAd, H2M_BBP_AGENT, &BbpCsr.word);
++ if (BbpCsr.field.Busy == BUSY)
++ continue;
++ BbpCsr.word = 0;
++ BbpCsr.field.fRead = 0;
++ BbpCsr.field.BBP_RW_MODE = 1;
++ BbpCsr.field.Busy = 1;
++ BbpCsr.field.Value = Value;
++ BbpCsr.field.RegNum = Id;
++ RTMP_IO_WRITE32(pAd, H2M_BBP_AGENT, BbpCsr.word);
++ AsicSendCommandToMcu(pAd, 0x80, 0xff, 0x0, 0x0);
++ pAd->BbpWriteLatch[Id] = Value;
++ break;
++ }
++ if (BusyCnt == MAX_BUSY_COUNT)
++ {
++ DBGPRINT_ERR(("BBP write R%d=0x%x fail\n", Id, BbpCsr.word));
++ return STATUS_UNSUCCESSFUL;
++ }
++ return STATUS_SUCCESS;
++}
++#endif
++/*
++ ========================================================================
++
++ Routine Description: Write RF register through MAC
++
++ Arguments:
++
++ Return Value:
++
++ IRQL =
++
++ Note:
++
++ ========================================================================
++*/
++NTSTATUS RTUSBWriteRFRegister(
++ IN PRTMP_ADAPTER pAd,
++ IN UINT32 Value)
++{
++ PHY_CSR4_STRUC PhyCsr4;
++ UINT i = 0;
++ NTSTATUS status;
++
++ NdisZeroMemory(&PhyCsr4, sizeof(PHY_CSR4_STRUC));
++ do
++ {
++ status = RTUSBReadMACRegister(pAd, RF_CSR_CFG0, &PhyCsr4.word);
++ if (status >= 0)
++ {
++ if (!(PhyCsr4.field.Busy))
++ break;
++ }
++ printk("RTUSBWriteRFRegister(RF_CSR_CFG0):retry count=%d!\n", i);
++ i++;
++ }
++ while ((i < RETRY_LIMIT) && (!RTMP_TEST_FLAG(pAd, fRTMP_ADAPTER_NIC_NOT_EXIST)));
++
++ if ((i == RETRY_LIMIT) || (RTMP_TEST_FLAG(pAd, fRTMP_ADAPTER_NIC_NOT_EXIST)))
++ {
++ DBGPRINT_RAW(RT_DEBUG_ERROR, ("Retry count exhausted or device removed!!!\n"));
++ return STATUS_UNSUCCESSFUL;
++ }
++
++ RTUSBWriteMACRegister(pAd, RF_CSR_CFG0, Value);
++
++ return STATUS_SUCCESS;
++}
++
++/*
++ ========================================================================
++
++ Routine Description: Write RT3070 RF register through MAC
++
++ Arguments:
++
++ Return Value:
++
++ IRQL =
++
++ Note:
++
++ ========================================================================
++*/
++NTSTATUS RT30xxWriteRFRegister(
++ IN PRTMP_ADAPTER pAd,
++ IN UCHAR RegID,
++ IN UCHAR Value)
++{
++ RF_CSR_CFG_STRUC rfcsr;
++ UINT i = 0;
++
++ do
++ {
++ RTUSBReadMACRegister(pAd, RF_CSR_CFG, &rfcsr.word);
++
++ if (!rfcsr.field.RF_CSR_KICK)
++ break;
++ i++;
++ }
++ while ((i < RETRY_LIMIT) && (!RTMP_TEST_FLAG(pAd, fRTMP_ADAPTER_NIC_NOT_EXIST)));
++
++ if ((i == RETRY_LIMIT) || (RTMP_TEST_FLAG(pAd, fRTMP_ADAPTER_NIC_NOT_EXIST)))
++ {
++ DBGPRINT_RAW(RT_DEBUG_ERROR, ("Retry count exhausted or device removed!!!\n"));
++ return STATUS_UNSUCCESSFUL;
++ }
++
++ rfcsr.field.RF_CSR_WR = 1;
++ rfcsr.field.RF_CSR_KICK = 1;
++ rfcsr.field.TESTCSR_RFACC_REGNUM = RegID;
++ rfcsr.field.RF_CSR_DATA = Value;
++
++ RTUSBWriteMACRegister(pAd, RF_CSR_CFG, rfcsr.word);
++
++ return STATUS_SUCCESS;
++}
++
++/*
++ ========================================================================
++
++ Routine Description: Read RT3070 RF register through MAC
++
++ Arguments:
++
++ Return Value:
++
++ IRQL =
++
++ Note:
++
++ ========================================================================
++*/
++NTSTATUS RT30xxReadRFRegister(
++ IN PRTMP_ADAPTER pAd,
++ IN UCHAR RegID,
++ IN PUCHAR pValue)
++{
++ RF_CSR_CFG_STRUC rfcsr;
++ UINT i=0, k;
++
++ for (i=0; i<MAX_BUSY_COUNT; i++)
++ {
++ RTUSBReadMACRegister(pAd, RF_CSR_CFG, &rfcsr.word);
++
++ if (rfcsr.field.RF_CSR_KICK == BUSY)
++ {
++ continue;
++ }
++ rfcsr.word = 0;
++ rfcsr.field.RF_CSR_WR = 0;
++ rfcsr.field.RF_CSR_KICK = 1;
++ rfcsr.field.TESTCSR_RFACC_REGNUM = RegID;
++ RTUSBWriteMACRegister(pAd, RF_CSR_CFG, rfcsr.word);
++ for (k=0; k<MAX_BUSY_COUNT; k++)
++ {
++ RTUSBReadMACRegister(pAd, RF_CSR_CFG, &rfcsr.word);
++
++ if (rfcsr.field.RF_CSR_KICK == IDLE)
++ break;
++ }
++ if ((rfcsr.field.RF_CSR_KICK == IDLE) &&
++ (rfcsr.field.TESTCSR_RFACC_REGNUM == RegID))
++ {
++ *pValue = (UCHAR)rfcsr.field.RF_CSR_DATA;
++ break;
++ }
++ }
++ if (rfcsr.field.RF_CSR_KICK == BUSY)
++ {
++ DBGPRINT_ERR(("RF read R%d=0x%x fail\n", RegID, rfcsr.word));
++ return STATUS_UNSUCCESSFUL;
++ }
++
++ return STATUS_SUCCESS;
++}
++
++/*
++ ========================================================================
++
++ Routine Description:
++
++ Arguments:
++
++ Return Value:
++
++ IRQL =
++
++ Note:
++
++ ========================================================================
++*/
++NTSTATUS RTUSBReadEEPROM(
++ IN PRTMP_ADAPTER pAd,
++ IN USHORT Offset,
++ OUT PUCHAR pData,
++ IN USHORT length)
++{
++ NTSTATUS Status = STATUS_SUCCESS;
++
++ Status = RTUSB_VendorRequest(
++ pAd,
++ (USBD_TRANSFER_DIRECTION_IN | USBD_SHORT_TRANSFER_OK),
++ DEVICE_VENDOR_REQUEST_IN,
++ 0x9,
++ 0,
++ Offset,
++ pData,
++ length);
++
++ return Status;
++}
++
++/*
++ ========================================================================
++
++ Routine Description:
++
++ Arguments:
++
++ Return Value:
++
++ IRQL =
++
++ Note:
++
++ ========================================================================
++*/
++NTSTATUS RTUSBWriteEEPROM(
++ IN PRTMP_ADAPTER pAd,
++ IN USHORT Offset,
++ IN PUCHAR pData,
++ IN USHORT length)
++{
++ NTSTATUS Status = STATUS_SUCCESS;
++
++ Status = RTUSB_VendorRequest(
++ pAd,
++ USBD_TRANSFER_DIRECTION_OUT,
++ DEVICE_VENDOR_REQUEST_OUT,
++ 0x8,
++ 0,
++ Offset,
++ pData,
++ length);
++
++ return Status;
++}
++
++/*
++ ========================================================================
++
++ Routine Description:
++
++ Arguments:
++
++ Return Value:
++
++ IRQL =
++
++ Note:
++
++ ========================================================================
++*/
++VOID RTUSBPutToSleep(
++ IN PRTMP_ADAPTER pAd)
++{
++ UINT32 value;
++
++ // Timeout 0x40 x 50us
++ value = (SLEEPCID<<16)+(OWNERMCU<<24)+ (0x40<<8)+1;
++ RTUSBWriteMACRegister(pAd, 0x7010, value);
++ RTUSBWriteMACRegister(pAd, 0x404, 0x30);
++ //RTMP_SET_FLAG(pAd, fRTMP_ADAPTER_HALT_IN_PROGRESS);
++ DBGPRINT_RAW(RT_DEBUG_ERROR, ("Sleep Mailbox testvalue %x\n", value));
++
++}
++
++/*
++ ========================================================================
++
++ Routine Description:
++
++ Arguments:
++
++ Return Value:
++
++ IRQL =
++
++ Note:
++
++ ========================================================================
++*/
++NTSTATUS RTUSBWakeUp(
++ IN PRTMP_ADAPTER pAd)
++{
++ NTSTATUS Status;
++
++ Status = RTUSB_VendorRequest(
++ pAd,
++ USBD_TRANSFER_DIRECTION_OUT,
++ DEVICE_VENDOR_REQUEST_OUT,
++ 0x01,
++ 0x09,
++ 0,
++ NULL,
++ 0);
++
++ return Status;
++}
++
++/*
++ ========================================================================
++
++ Routine Description:
++
++ Arguments:
++
++ Return Value:
++
++ IRQL =
++
++ Note:
++
++ ========================================================================
++*/
++VOID RTUSBInitializeCmdQ(
++ IN PCmdQ cmdq)
++{
++ cmdq->head = NULL;
++ cmdq->tail = NULL;
++ cmdq->size = 0;
++ cmdq->CmdQState = RT2870_THREAD_INITED;
++}
++
++/*
++ ========================================================================
++
++ Routine Description:
++
++ Arguments:
++
++ Return Value:
++
++ IRQL =
++
++ Note:
++
++ ========================================================================
++*/
++NDIS_STATUS RTUSBEnqueueCmdFromNdis(
++ IN PRTMP_ADAPTER pAd,
++ IN NDIS_OID Oid,
++ IN BOOLEAN SetInformation,
++ IN PVOID pInformationBuffer,
++ IN UINT32 InformationBufferLength)
++{
++ NDIS_STATUS status;
++ PCmdQElmt cmdqelmt = NULL;
++ POS_COOKIE pObj = (POS_COOKIE) pAd->OS_Cookie;
++
++
++ CHECK_PID_LEGALITY(pObj->RTUSBCmdThr_pid)
++ return (NDIS_STATUS_RESOURCES);
++
++ status = RTMPAllocateMemory((PVOID *)&cmdqelmt, sizeof(CmdQElmt));
++ if ((status != NDIS_STATUS_SUCCESS) || (cmdqelmt == NULL))
++ return (NDIS_STATUS_RESOURCES);
++
++ cmdqelmt->buffer = NULL;
++ if (pInformationBuffer != NULL)
++ {
++ status = RTMPAllocateMemory((PVOID *)&cmdqelmt->buffer, InformationBufferLength);
++ if ((status != NDIS_STATUS_SUCCESS) || (cmdqelmt->buffer == NULL))
++ {
++ kfree(cmdqelmt);
++ return (NDIS_STATUS_RESOURCES);
++ }
++ else
++ {
++ NdisMoveMemory(cmdqelmt->buffer, pInformationBuffer, InformationBufferLength);
++ cmdqelmt->bufferlength = InformationBufferLength;
++ }
++ }
++ else
++ cmdqelmt->bufferlength = 0;
++
++ cmdqelmt->command = Oid;
++ cmdqelmt->CmdFromNdis = TRUE;
++ if (SetInformation == TRUE)
++ cmdqelmt->SetOperation = TRUE;
++ else
++ cmdqelmt->SetOperation = FALSE;
++
++ NdisAcquireSpinLock(&pAd->CmdQLock);
++ if (pAd->CmdQ.CmdQState & RT2870_THREAD_CAN_DO_INSERT)
++ {
++ EnqueueCmd((&pAd->CmdQ), cmdqelmt);
++ status = NDIS_STATUS_SUCCESS;
++ }
++ else
++ {
++ status = NDIS_STATUS_FAILURE;
++ }
++ NdisReleaseSpinLock(&pAd->CmdQLock);
++
++ if (status == NDIS_STATUS_FAILURE)
++ {
++ if (cmdqelmt->buffer)
++ NdisFreeMemory(cmdqelmt->buffer, cmdqelmt->bufferlength, 0);
++ NdisFreeMemory(cmdqelmt, sizeof(CmdQElmt), 0);
++ }
++ else
++ RTUSBCMDUp(pAd);
++
++
++ return(NDIS_STATUS_SUCCESS);
++}
++
++/*
++ ========================================================================
++
++ Routine Description:
++
++ Arguments:
++
++ Return Value:
++
++ IRQL =
++
++ Note:
++
++ ========================================================================
++*/
++NDIS_STATUS RTUSBEnqueueInternalCmd(
++ IN PRTMP_ADAPTER pAd,
++ IN NDIS_OID Oid,
++ IN PVOID pInformationBuffer,
++ IN UINT32 InformationBufferLength)
++{
++ NDIS_STATUS status;
++ PCmdQElmt cmdqelmt = NULL;
++
++
++ status = RTMPAllocateMemory((PVOID *)&cmdqelmt, sizeof(CmdQElmt));
++ if ((status != NDIS_STATUS_SUCCESS) || (cmdqelmt == NULL))
++ return (NDIS_STATUS_RESOURCES);
++ NdisZeroMemory(cmdqelmt, sizeof(CmdQElmt));
++
++ if(InformationBufferLength > 0)
++ {
++ status = RTMPAllocateMemory((PVOID *)&cmdqelmt->buffer, InformationBufferLength);
++ if ((status != NDIS_STATUS_SUCCESS) || (cmdqelmt->buffer == NULL))
++ {
++ NdisFreeMemory(cmdqelmt, sizeof(CmdQElmt), 0);
++ return (NDIS_STATUS_RESOURCES);
++ }
++ else
++ {
++ NdisMoveMemory(cmdqelmt->buffer, pInformationBuffer, InformationBufferLength);
++ cmdqelmt->bufferlength = InformationBufferLength;
++ }
++ }
++ else
++ {
++ cmdqelmt->buffer = NULL;
++ cmdqelmt->bufferlength = 0;
++ }
++
++ cmdqelmt->command = Oid;
++ cmdqelmt->CmdFromNdis = FALSE;
++
++ if (cmdqelmt != NULL)
++ {
++ NdisAcquireSpinLock(&pAd->CmdQLock);
++ if (pAd->CmdQ.CmdQState & RT2870_THREAD_CAN_DO_INSERT)
++ {
++ EnqueueCmd((&pAd->CmdQ), cmdqelmt);
++ status = NDIS_STATUS_SUCCESS;
++ }
++ else
++ {
++ status = NDIS_STATUS_FAILURE;
++ }
++ NdisReleaseSpinLock(&pAd->CmdQLock);
++
++ if (status == NDIS_STATUS_FAILURE)
++ {
++ if (cmdqelmt->buffer)
++ NdisFreeMemory(cmdqelmt->buffer, cmdqelmt->bufferlength, 0);
++ NdisFreeMemory(cmdqelmt, sizeof(CmdQElmt), 0);
++ }
++ else
++ RTUSBCMDUp(pAd);
++ }
++ return(NDIS_STATUS_SUCCESS);
++}
++
++/*
++ ========================================================================
++
++ Routine Description:
++
++ Arguments:
++
++ Return Value:
++
++ IRQL =
++
++ Note:
++
++ ========================================================================
++*/
++VOID RTUSBDequeueCmd(
++ IN PCmdQ cmdq,
++ OUT PCmdQElmt *pcmdqelmt)
++{
++ *pcmdqelmt = cmdq->head;
++
++ if (*pcmdqelmt != NULL)
++ {
++ cmdq->head = cmdq->head->next;
++ cmdq->size--;
++ if (cmdq->size == 0)
++ cmdq->tail = NULL;
++ }
++}
++
++/*
++ ========================================================================
++ usb_control_msg - Builds a control urb, sends it off and waits for completion
++ @dev: pointer to the usb device to send the message to
++ @pipe: endpoint "pipe" to send the message to
++ @request: USB message request value
++ @requesttype: USB message request type value
++ @value: USB message value
++ @index: USB message index value
++ @data: pointer to the data to send
++ @size: length in bytes of the data to send
++ @timeout: time in jiffies to wait for the message to complete before
++ timing out (if 0 the wait is forever)
++ Context: !in_interrupt ()
++
++ This function sends a simple control message to a specified endpoint
++ and waits for the message to complete, or timeout.
++ If successful, it returns the number of bytes transferred, otherwise a negative error number.
++
++ Don't use this function from within an interrupt context, like a
++ bottom half handler. If you need an asynchronous message, or need to send
++ a message from within interrupt context, use usb_submit_urb()
++ If a thread in your driver uses this call, make sure your disconnect()
++ method can wait for it to complete. Since you don't have a handle on
++ the URB used, you can't cancel the request.
++
++
++ Routine Description:
++
++ Arguments:
++
++ Return Value:
++
++ Note:
++
++ ========================================================================
++*/
++NTSTATUS RTUSB_VendorRequest(
++ IN PRTMP_ADAPTER pAd,
++ IN UINT32 TransferFlags,
++ IN UCHAR RequestType,
++ IN UCHAR Request,
++ IN USHORT Value,
++ IN USHORT Index,
++ IN PVOID TransferBuffer,
++ IN UINT32 TransferBufferLength)
++{
++ int ret;
++ POS_COOKIE pObj = (POS_COOKIE) pAd->OS_Cookie;
++
++ if (RTMP_TEST_FLAG(pAd, fRTMP_ADAPTER_NIC_NOT_EXIST))
++ {
++ DBGPRINT(RT_DEBUG_ERROR, ("device disconnected\n"));
++ return -1;
++ }
++ else if (in_interrupt())
++ {
++ DBGPRINT(RT_DEBUG_ERROR, ("in_interrupt, RTUSB_VendorRequest Request%02x Value%04x Offset%04x\n",Request,Value,Index));
++
++ return -1;
++ }
++ else
++ {
++#define MAX_RETRY_COUNT 10
++
++ int retryCount = 0;
++ void *tmpBuf = TransferBuffer;
++
++ // Acquire Control token
++#ifdef INF_AMAZON_SE
++ //Semaphore fix INF_AMAZON_SE hang
++ //pAd->UsbVendorReqBuf is the swap for DEVICE_VENDOR_REQUEST_IN to fix dma bug.
++ ret = down_interruptible(&(pAd->UsbVendorReq_semaphore));
++ if (pAd->UsbVendorReqBuf)
++ {
++ ASSERT(TransferBufferLength <MAX_PARAM_BUFFER_SIZE);
++
++ tmpBuf = (void *)pAd->UsbVendorReqBuf;
++ NdisZeroMemory(pAd->UsbVendorReqBuf, TransferBufferLength);
++
++ if (RequestType == DEVICE_VENDOR_REQUEST_OUT)
++ NdisMoveMemory(tmpBuf, TransferBuffer, TransferBufferLength);
++ }
++#endif // INF_AMAZON_SE //
++ do {
++ if( RequestType == DEVICE_VENDOR_REQUEST_OUT)
++ ret=usb_control_msg(pObj->pUsb_Dev, usb_sndctrlpipe( pObj->pUsb_Dev, 0 ), Request, RequestType, Value,Index, tmpBuf, TransferBufferLength, CONTROL_TIMEOUT_JIFFIES);
++ else if(RequestType == DEVICE_VENDOR_REQUEST_IN)
++ ret=usb_control_msg(pObj->pUsb_Dev, usb_rcvctrlpipe( pObj->pUsb_Dev, 0 ), Request, RequestType, Value,Index, tmpBuf, TransferBufferLength, CONTROL_TIMEOUT_JIFFIES);
++ else
++ {
++ DBGPRINT(RT_DEBUG_ERROR, ("vendor request direction is failed\n"));
++ ret = -1;
++ }
++
++ retryCount++;
++ if (ret < 0) {
++ printk("#\n");
++ RTMPusecDelay(5000);
++ }
++ } while((ret < 0) && (retryCount < MAX_RETRY_COUNT));
++
++#ifdef INF_AMAZON_SE
++ if ((pAd->UsbVendorReqBuf) && (RequestType == DEVICE_VENDOR_REQUEST_IN))
++ NdisMoveMemory(TransferBuffer, tmpBuf, TransferBufferLength);
++ up(&(pAd->UsbVendorReq_semaphore));
++#endif // INF_AMAZON_SE //
++
++ if (ret < 0) {
++// DBGPRINT(RT_DEBUG_ERROR, ("USBVendorRequest failed ret=%d \n",ret));
++ DBGPRINT(RT_DEBUG_ERROR, ("RTUSB_VendorRequest failed(%d),TxFlags=0x%x, ReqType=%s, Req=0x%x, Index=0x%x\n",
++ ret, TransferFlags, (RequestType == DEVICE_VENDOR_REQUEST_OUT ? "OUT" : "IN"), Request, Index));
++ if (Request == 0x2)
++ DBGPRINT(RT_DEBUG_ERROR, ("\tRequest Value=0x%04x!\n", Value));
++
++ if ((TransferBuffer!= NULL) && (TransferBufferLength > 0))
++ hex_dump("Failed TransferBuffer value", TransferBuffer, TransferBufferLength);
++ }
++
++#if 0
++ // retry
++ if (ret < 0) {
++ int temp_i=0;
++ DBGPRINT(RT_DEBUG_ERROR, ("USBVendorRequest failed ret=%d, \n",ret));
++ ret = 0;
++ do
++ {
++ if( RequestType == DEVICE_VENDOR_REQUEST_OUT)
++ ret=usb_control_msg(pObj->pUsb_Dev, usb_sndctrlpipe( pObj->pUsb_Dev, 0 ), Request, RequestType, Value,Index, TransferBuffer, TransferBufferLength, CONTROL_TIMEOUT_JIFFIES);
++ else if(RequestType == DEVICE_VENDOR_REQUEST_IN)
++ ret=usb_control_msg(pObj->pUsb_Dev, usb_rcvctrlpipe( pObj->pUsb_Dev, 0 ), Request, RequestType, Value,Index, TransferBuffer, TransferBufferLength, CONTROL_TIMEOUT_JIFFIES);
++ temp_i++;
++ } while( (ret < 0) && (temp_i <= 1) );
++
++ if( ret >= 0)
++ return ret;
++
++ }
++#endif
++
++ }
++ return ret;
++}
++
++/*
++ ========================================================================
++
++ Routine Description:
++ Creates an IRP to submite an IOCTL_INTERNAL_USB_RESET_PORT
++ synchronously. Callers of this function must be running at
++ PASSIVE LEVEL.
++
++ Arguments:
++
++ Return Value:
++
++ Note:
++
++ ========================================================================
++*/
++NTSTATUS RTUSB_ResetDevice(
++ IN PRTMP_ADAPTER pAd)
++{
++ NTSTATUS Status = TRUE;
++
++ DBGPRINT_RAW(RT_DEBUG_TRACE, ("--->USB_ResetDevice\n"));
++ //RTMP_SET_FLAG(pAd, fRTMP_ADAPTER_RESET_IN_PROGRESS);
++ return Status;
++}
++
++VOID CMDHandler(
++ IN PRTMP_ADAPTER pAd)
++{
++ PCmdQElmt cmdqelmt;
++ PUCHAR pData;
++ NDIS_STATUS NdisStatus = NDIS_STATUS_SUCCESS;
++// ULONG Now = 0;
++ NTSTATUS ntStatus;
++// unsigned long IrqFlags;
++
++ while (pAd->CmdQ.size > 0)
++ {
++ NdisStatus = NDIS_STATUS_SUCCESS;
++
++ NdisAcquireSpinLock(&pAd->CmdQLock);
++ RTUSBDequeueCmd(&pAd->CmdQ, &cmdqelmt);
++ NdisReleaseSpinLock(&pAd->CmdQLock);
++
++ if (cmdqelmt == NULL)
++ break;
++
++ pData = cmdqelmt->buffer;
++
++ if(!(RTMP_TEST_FLAG(pAd, fRTMP_ADAPTER_NIC_NOT_EXIST) || RTMP_TEST_FLAG(pAd, fRTMP_ADAPTER_HALT_IN_PROGRESS)))
++ {
++ switch (cmdqelmt->command)
++ {
++ case CMDTHREAD_CHECK_GPIO:
++ {
++#ifdef CONFIG_STA_SUPPORT
++ UINT32 data;
++#endif // CONFIG_STA_SUPPORT //
++#ifdef RALINK_ATE
++ if(ATE_ON(pAd))
++ {
++ DBGPRINT(RT_DEBUG_TRACE, ("The driver is in ATE mode now\n"));
++ break;
++ }
++#endif // RALINK_ATE //
++
++#ifdef CONFIG_STA_SUPPORT
++
++
++ IF_DEV_CONFIG_OPMODE_ON_STA(pAd)
++ {
++ // Read GPIO pin2 as Hardware controlled radio state
++
++ RTUSBReadMACRegister( pAd, GPIO_CTRL_CFG, &data);
++
++ if (data & 0x04)
++ {
++ pAd->StaCfg.bHwRadio = TRUE;
++ }
++ else
++ {
++ pAd->StaCfg.bHwRadio = FALSE;
++ }
++
++ if(pAd->StaCfg.bRadio != (pAd->StaCfg.bHwRadio && pAd->StaCfg.bSwRadio))
++ {
++ pAd->StaCfg.bRadio = (pAd->StaCfg.bHwRadio && pAd->StaCfg.bSwRadio);
++ if(pAd->StaCfg.bRadio == TRUE)
++ {
++ DBGPRINT_RAW(RT_DEBUG_ERROR, ("!!! Radio On !!!\n"));
++
++ MlmeRadioOn(pAd);
++ // Update extra information
++ pAd->ExtraInfo = EXTRA_INFO_CLEAR;
++ }
++ else
++ {
++ DBGPRINT_RAW(RT_DEBUG_ERROR, ("!!! Radio Off !!!\n"));
++
++ MlmeRadioOff(pAd);
++ // Update extra information
++ pAd->ExtraInfo = HW_RADIO_OFF;
++ }
++ }
++ }
++#endif // CONFIG_STA_SUPPORT //
++ }
++ break;
++
++#ifdef CONFIG_STA_SUPPORT
++ case CMDTHREAD_QKERIODIC_EXECUT:
++ {
++ StaQuickResponeForRateUpExec(NULL, pAd, NULL, NULL);
++ }
++ break;
++#endif // CONFIG_STA_SUPPORT //
++
++ case CMDTHREAD_RESET_BULK_OUT:
++ {
++ UINT32 MACValue;
++ UCHAR Index;
++ int ret=0;
++ PHT_TX_CONTEXT pHTTXContext;
++// RTMP_TX_RING *pTxRing;
++ unsigned long IrqFlags;
++#ifdef RALINK_ATE
++ PTX_CONTEXT pNullContext = &(pAd->NullContext);
++#endif // RALINK_ATE //
++ DBGPRINT_RAW(RT_DEBUG_TRACE, ("CmdThread : CMDTHREAD_RESET_BULK_OUT(ResetPipeid=0x%0x)===>\n", pAd->bulkResetPipeid));
++ // All transfers must be aborted or cancelled before attempting to reset the pipe.
++ //RTUSBCancelPendingBulkOutIRP(pAd);
++ // Wait 10ms to let previous packet that are already in HW FIFO to clear. by MAXLEE 12-25-2007
++ Index = 0;
++ do
++ {
++ RTUSBReadMACRegister(pAd, TXRXQ_PCNT, &MACValue);
++ if ((MACValue & 0xf00000/*0x800000*/) == 0)
++ break;
++ Index++;
++ RTMPusecDelay(10000);
++ }while(Index < 100);
++ MACValue = 0;
++ RTUSBReadMACRegister(pAd, USB_DMA_CFG, &MACValue);
++ // To prevent Read Register error, we 2nd check the validity.
++ if ((MACValue & 0xc00000) == 0)
++ RTUSBReadMACRegister(pAd, USB_DMA_CFG, &MACValue);
++ // To prevent Read Register error, we 3rd check the validity.
++ if ((MACValue & 0xc00000) == 0)
++ RTUSBReadMACRegister(pAd, USB_DMA_CFG, &MACValue);
++ MACValue |= 0x80000;
++ RTUSBWriteMACRegister(pAd, USB_DMA_CFG, MACValue);
++
++ // Wait 1ms to prevent next URB to bulkout before HW reset. by MAXLEE 12-25-2007
++ RTMPusecDelay(1000);
++
++ MACValue &= (~0x80000);
++ RTUSBWriteMACRegister(pAd, USB_DMA_CFG, MACValue);
++ DBGPRINT_RAW(RT_DEBUG_TRACE, ("\tSet 0x2a0 bit19. Clear USB DMA TX path\n"));
++
++ // Wait 5ms to prevent next URB to bulkout before HW reset. by MAXLEE 12-25-2007
++ //RTMPusecDelay(5000);
++
++ if ((pAd->bulkResetPipeid & BULKOUT_MGMT_RESET_FLAG) == BULKOUT_MGMT_RESET_FLAG)
++ {
++ RTMP_CLEAR_FLAG(pAd, fRTMP_ADAPTER_BULKOUT_RESET);
++ if (pAd->MgmtRing.TxSwFreeIdx < MGMT_RING_SIZE /* pMLMEContext->bWaitingBulkOut == TRUE */)
++ {
++ RTUSB_SET_BULK_FLAG(pAd, fRTUSB_BULK_OUT_MLME);
++ }
++ RTUSBKickBulkOut(pAd);
++
++ DBGPRINT_RAW(RT_DEBUG_TRACE, ("\tTX MGMT RECOVER Done!\n"));
++ }
++ else
++ {
++ pHTTXContext = &(pAd->TxContext[pAd->bulkResetPipeid]);
++ //NdisAcquireSpinLock(&pAd->BulkOutLock[pAd->bulkResetPipeid]);
++ RTMP_INT_LOCK(&pAd->BulkOutLock[pAd->bulkResetPipeid], IrqFlags);
++ if ( pAd->BulkOutPending[pAd->bulkResetPipeid] == FALSE)
++ {
++ pAd->BulkOutPending[pAd->bulkResetPipeid] = TRUE;
++ pHTTXContext->IRPPending = TRUE;
++ pAd->watchDogTxPendingCnt[pAd->bulkResetPipeid] = 1;
++
++ // no matter what, clean the flag
++ RTMP_CLEAR_FLAG(pAd, fRTMP_ADAPTER_BULKOUT_RESET);
++
++ //NdisReleaseSpinLock(&pAd->BulkOutLock[pAd->bulkResetPipeid]);
++ RTMP_INT_UNLOCK(&pAd->BulkOutLock[pAd->bulkResetPipeid], IrqFlags);
++/*-----------------------------------------------------------------------------------------------*/
++#ifdef RALINK_ATE
++ if(ATE_ON(pAd))
++ {
++ pNullContext->IRPPending = TRUE;
++ //
++ // If driver is still in ATE TXFRAME mode,
++ // keep on transmitting ATE frames.
++ //
++ DBGPRINT_RAW(RT_DEBUG_TRACE, ("pAd->ate.Mode == %d\npAd->ContinBulkOut == %d\npAd->BulkOutRemained == %d\n", pAd->ate.Mode, pAd->ContinBulkOut, atomic_read(&pAd->BulkOutRemained)));
++ if((pAd->ate.Mode == ATE_TXFRAME) && ((pAd->ContinBulkOut == TRUE) || (atomic_read(&pAd->BulkOutRemained) > 0)))
++ {
++ DBGPRINT_RAW(RT_DEBUG_TRACE, ("After CMDTHREAD_RESET_BULK_OUT, continue to bulk out frames !\n"));
++
++ // Init Tx context descriptor
++ RTUSBInitTxDesc(pAd, pNullContext, 0/* pAd->bulkResetPipeid */, (usb_complete_t)ATE_RTUSBBulkOutDataPacketComplete);
++
++ if((ret = RTUSB_SUBMIT_URB(pNullContext->pUrb))!=0)
++ {
++ DBGPRINT(RT_DEBUG_ERROR, ("ATE_RTUSBBulkOutDataPacket: Submit Tx URB failed %d\n", ret));
++ }
++
++ pAd->BulkOutReq++;
++ }
++ }
++ else
++#endif // RALINK_ATE //
++/*-----------------------------------------------------------------------------------------------*/
++ {
++ RTUSBInitHTTxDesc(pAd, pHTTXContext, pAd->bulkResetPipeid, pHTTXContext->BulkOutSize, (usb_complete_t)RTUSBBulkOutDataPacketComplete);
++
++ if((ret = RTUSB_SUBMIT_URB(pHTTXContext->pUrb))!=0)
++ {
++ RTMP_INT_LOCK(&pAd->BulkOutLock[pAd->bulkResetPipeid], IrqFlags);
++ pAd->BulkOutPending[pAd->bulkResetPipeid] = FALSE;
++ pHTTXContext->IRPPending = FALSE;
++ pAd->watchDogTxPendingCnt[pAd->bulkResetPipeid] = 0;
++ RTMP_INT_UNLOCK(&pAd->BulkOutLock[pAd->bulkResetPipeid], IrqFlags);
++
++ DBGPRINT(RT_DEBUG_ERROR, ("CmdThread : CMDTHREAD_RESET_BULK_OUT: Submit Tx URB failed %d\n", ret));
++ }
++ else
++ {
++ RTMP_IRQ_LOCK(&pAd->BulkOutLock[pAd->bulkResetPipeid], IrqFlags);
++ DBGPRINT_RAW(RT_DEBUG_TRACE,("\tCMDTHREAD_RESET_BULK_OUT: TxContext[%d]:CWPos=%ld, NBPos=%ld, ENBPos=%ld, bCopy=%d, pending=%d!\n",
++ pAd->bulkResetPipeid, pHTTXContext->CurWritePosition, pHTTXContext->NextBulkOutPosition,
++ pHTTXContext->ENextBulkOutPosition, pHTTXContext->bCopySavePad, pAd->BulkOutPending[pAd->bulkResetPipeid]));
++ DBGPRINT_RAW(RT_DEBUG_TRACE,("\t\tBulkOut Req=0x%lx, Complete=0x%lx, Other=0x%lx\n",
++ pAd->BulkOutReq, pAd->BulkOutComplete, pAd->BulkOutCompleteOther));
++ RTMP_IRQ_UNLOCK(&pAd->BulkOutLock[pAd->bulkResetPipeid], IrqFlags);
++ DBGPRINT_RAW(RT_DEBUG_TRACE, ("\tCMDTHREAD_RESET_BULK_OUT: Submit Tx DATA URB for failed BulkReq(0x%lx) Done, status=%d!\n", pAd->bulkResetReq[pAd->bulkResetPipeid], pHTTXContext->pUrb->status));
++
++ }
++ }
++ }
++ else
++ {
++ //NdisReleaseSpinLock(&pAd->BulkOutLock[pAd->bulkResetPipeid]);
++ //RTMP_INT_UNLOCK(&pAd->BulkOutLock[pAd->bulkResetPipeid], IrqFlags);
++
++ DBGPRINT_RAW(RT_DEBUG_ERROR, ("CmdThread : TX DATA RECOVER FAIL for BulkReq(0x%lx) because BulkOutPending[%d] is TRUE!\n", pAd->bulkResetReq[pAd->bulkResetPipeid], pAd->bulkResetPipeid));
++ if (pAd->bulkResetPipeid == 0)
++ {
++ UCHAR pendingContext = 0;
++ PHT_TX_CONTEXT pHTTXContext = (PHT_TX_CONTEXT)(&pAd->TxContext[pAd->bulkResetPipeid ]);
++ PTX_CONTEXT pMLMEContext = (PTX_CONTEXT)(pAd->MgmtRing.Cell[pAd->MgmtRing.TxDmaIdx].AllocVa);
++ PTX_CONTEXT pNULLContext = (PTX_CONTEXT)(&pAd->PsPollContext);
++ PTX_CONTEXT pPsPollContext = (PTX_CONTEXT)(&pAd->NullContext);
++
++ if (pHTTXContext->IRPPending)
++ pendingContext |= 1;
++ else if (pMLMEContext->IRPPending)
++ pendingContext |= 2;
++ else if (pNULLContext->IRPPending)
++ pendingContext |= 4;
++ else if (pPsPollContext->IRPPending)
++ pendingContext |= 8;
++ else
++ pendingContext = 0;
++
++ DBGPRINT_RAW(RT_DEBUG_ERROR, ("\tTX Occupied by %d!\n", pendingContext));
++ }
++
++ // no matter what, clean the flag
++ RTMP_CLEAR_FLAG(pAd, fRTMP_ADAPTER_BULKOUT_RESET);
++
++ RTMP_INT_UNLOCK(&pAd->BulkOutLock[pAd->bulkResetPipeid], IrqFlags);
++
++ RTUSB_SET_BULK_FLAG(pAd, (fRTUSB_BULK_OUT_DATA_NORMAL << pAd->bulkResetPipeid));
++ }
++
++ RTMPDeQueuePacket(pAd, FALSE, NUM_OF_TX_RING, MAX_TX_PROCESS);
++ //RTUSBKickBulkOut(pAd);
++ }
++
++ }
++ /*
++ // Don't cancel BULKIN.
++ while ((atomic_read(&pAd->PendingRx) > 0) &&
++ (!RTMP_TEST_FLAG(pAd, fRTMP_ADAPTER_NIC_NOT_EXIST)))
++ {
++ if (atomic_read(&pAd->PendingRx) > 0)
++ {
++ DBGPRINT_RAW(RT_DEBUG_ERROR, ("BulkIn IRP Pending!!cancel it!\n"));
++ RTUSBCancelPendingBulkInIRP(pAd);
++ }
++ RTMPusecDelay(100000);
++ }
++
++ if ((atomic_read(&pAd->PendingRx) == 0) && (!RTMP_TEST_FLAG(pAd, fRTMP_ADAPTER_HALT_IN_PROGRESS)))
++ {
++ UCHAR i;
++ RTUSBRxPacket(pAd);
++ pAd->NextRxBulkInReadIndex = 0; // Next Rx Read index
++ pAd->NextRxBulkInIndex = 0; // Rx Bulk pointer
++ for (i = 0; i < (RX_RING_SIZE); i++)
++ {
++ PRX_CONTEXT pRxContext = &(pAd->RxContext[i]);
++
++ pRxContext->pAd = pAd;
++ pRxContext->InUse = FALSE;
++ pRxContext->IRPPending = FALSE;
++ pRxContext->Readable = FALSE;
++ pRxContext->ReorderInUse = FALSE;
++
++ }
++ RTUSBBulkReceive(pAd);
++ DBGPRINT_RAW(RT_DEBUG_ERROR, ("RTUSBBulkReceive\n"));
++ }*/
++ DBGPRINT_RAW(RT_DEBUG_TRACE, ("CmdThread : CMDTHREAD_RESET_BULK_OUT<===\n"));
++ break;
++
++ case CMDTHREAD_RESET_BULK_IN:
++ DBGPRINT_RAW(RT_DEBUG_TRACE, ("CmdThread : CMDTHREAD_RESET_BULK_IN === >\n"));
++
++ // All transfers must be aborted or cancelled before attempting to reset the pipe.
++ {
++ UINT32 MACValue;
++/*-----------------------------------------------------------------------------------------------*/
++#ifdef RALINK_ATE
++ if (ATE_ON(pAd))
++ {
++ if((pAd->PendingRx > 0) && (!RTMP_TEST_FLAG(pAd, fRTMP_ADAPTER_NIC_NOT_EXIST)))
++ {
++ DBGPRINT_RAW(RT_DEBUG_ERROR, ("ATE : BulkIn IRP Pending!!!\n"));
++ ATE_RTUSBCancelPendingBulkInIRP(pAd);
++ RTMPusecDelay(100000);
++ pAd->PendingRx = 0;
++ }
++ }
++ else
++#endif // RALINK_ATE //
++/*-----------------------------------------------------------------------------------------------*/
++ {
++ //while ((atomic_read(&pAd->PendingRx) > 0) && (!RTMP_TEST_FLAG(pAd, fRTMP_ADAPTER_NIC_NOT_EXIST)))
++ if((pAd->PendingRx > 0) && (!RTMP_TEST_FLAG(pAd, fRTMP_ADAPTER_NIC_NOT_EXIST)))
++ {
++ DBGPRINT_RAW(RT_DEBUG_ERROR, ("BulkIn IRP Pending!!!\n"));
++ RTUSBCancelPendingBulkInIRP(pAd);
++ RTMPusecDelay(100000);
++ pAd->PendingRx = 0;
++ }
++ }
++
++ // Wait 10ms before reading register.
++ RTMPusecDelay(10000);
++ ntStatus = RTUSBReadMACRegister(pAd, MAC_CSR0, &MACValue);
++
++ if ((NT_SUCCESS(ntStatus) == TRUE) &&
++ (!(RTMP_TEST_FLAG(pAd, (fRTMP_ADAPTER_RESET_IN_PROGRESS | fRTMP_ADAPTER_RADIO_OFF |
++ fRTMP_ADAPTER_HALT_IN_PROGRESS | fRTMP_ADAPTER_NIC_NOT_EXIST)))))
++ {
++ UCHAR i;
++
++ if (RTMP_TEST_FLAG(pAd, (fRTMP_ADAPTER_RESET_IN_PROGRESS | fRTMP_ADAPTER_RADIO_OFF |
++ fRTMP_ADAPTER_HALT_IN_PROGRESS | fRTMP_ADAPTER_NIC_NOT_EXIST)))
++ break;
++ pAd->NextRxBulkInPosition = pAd->RxContext[pAd->NextRxBulkInIndex].BulkInOffset;
++ DBGPRINT(RT_DEBUG_TRACE, ("BULK_IN_RESET: NBIIdx=0x%x,NBIRIdx=0x%x, BIRPos=0x%lx. BIReq=x%lx, BIComplete=0x%lx, BICFail0x%lx\n",
++ pAd->NextRxBulkInIndex, pAd->NextRxBulkInReadIndex, pAd->NextRxBulkInPosition, pAd->BulkInReq, pAd->BulkInComplete, pAd->BulkInCompleteFail));
++ for (i = 0; i < RX_RING_SIZE; i++)
++ {
++ DBGPRINT(RT_DEBUG_TRACE, ("\tRxContext[%d]: IRPPending=%d, InUse=%d, Readable=%d!\n"
++ , i, pAd->RxContext[i].IRPPending, pAd->RxContext[i].InUse, pAd->RxContext[i].Readable));
++ }
++ /*
++
++ DBGPRINT_RAW(RT_DEBUG_ERROR, ("==========================================\n"));
++
++ pAd->NextRxBulkInReadIndex = 0; // Next Rx Read index
++ pAd->NextRxBulkInIndex = 0; // Rx Bulk pointer
++ for (i = 0; i < (RX_RING_SIZE); i++)
++ {
++ PRX_CONTEXT pRxContext = &(pAd->RxContext[i]);
++
++ pRxContext->pAd = pAd;
++ pRxContext->InUse = FALSE;
++ pRxContext->IRPPending = FALSE;
++ pRxContext->Readable = FALSE;
++ pRxContext->ReorderInUse = FALSE;
++
++ }*/
++ RTMP_CLEAR_FLAG(pAd, fRTMP_ADAPTER_BULKIN_RESET);
++ for (i = 0; i < pAd->CommonCfg.NumOfBulkInIRP; i++)
++ {
++ //RTUSBBulkReceive(pAd);
++ PRX_CONTEXT pRxContext;
++ PURB pUrb;
++ int ret = 0;
++ unsigned long IrqFlags;
++
++
++ RTMP_IRQ_LOCK(&pAd->BulkInLock, IrqFlags);
++ pRxContext = &(pAd->RxContext[pAd->NextRxBulkInIndex]);
++ if ((pAd->PendingRx > 0) || (pRxContext->Readable == TRUE) || (pRxContext->InUse == TRUE))
++ {
++ RTMP_IRQ_UNLOCK(&pAd->BulkInLock, IrqFlags);
++ break;
++ }
++ pRxContext->InUse = TRUE;
++ pRxContext->IRPPending = TRUE;
++ pAd->PendingRx++;
++ pAd->BulkInReq++;
++ RTMP_IRQ_UNLOCK(&pAd->BulkInLock, IrqFlags);
++
++ // Init Rx context descriptor
++ RTUSBInitRxDesc(pAd, pRxContext);
++ pUrb = pRxContext->pUrb;
++ if ((ret = RTUSB_SUBMIT_URB(pUrb))!=0)
++ { // fail
++
++ RTMP_IRQ_LOCK(&pAd->BulkInLock, IrqFlags);
++ pRxContext->InUse = FALSE;
++ pRxContext->IRPPending = FALSE;
++ pAd->PendingRx--;
++ pAd->BulkInReq--;
++ RTMP_IRQ_UNLOCK(&pAd->BulkInLock, IrqFlags);
++ DBGPRINT(RT_DEBUG_ERROR, ("CMDTHREAD_RESET_BULK_IN: Submit Rx URB failed(%d), status=%d\n", ret, pUrb->status));
++ }
++ else
++ { // success
++#if 0
++ RTMP_IRQ_LOCK(&pAd->BulkInLock, IrqFlags);
++ pRxContext->IRPPending = TRUE;
++ //NdisInterlockedIncrement(&pAd->PendingRx);
++ pAd->PendingRx++;
++ RTMP_IRQ_UNLOCK(&pAd->BulkInLock, IrqFlags);
++ pAd->BulkInReq++;
++#endif
++ //printk("BIDone, Pend=%d,BIIdx=%d,BIRIdx=%d!\n", pAd->PendingRx, pAd->NextRxBulkInIndex, pAd->NextRxBulkInReadIndex);
++ DBGPRINT_RAW(RT_DEBUG_TRACE, ("CMDTHREAD_RESET_BULK_IN: Submit Rx URB Done, status=%d!\n", pUrb->status));
++ ASSERT((pRxContext->InUse == pRxContext->IRPPending));
++ }
++ }
++
++ }
++ else
++ {
++ // Card must be removed
++ if (NT_SUCCESS(ntStatus) != TRUE)
++ {
++ RTMP_SET_FLAG(pAd, fRTMP_ADAPTER_NIC_NOT_EXIST);
++ DBGPRINT_RAW(RT_DEBUG_ERROR, ("CMDTHREAD_RESET_BULK_IN: Read Register Failed!Card must be removed!!\n\n"));
++ }
++ else
++ {
++ DBGPRINT_RAW(RT_DEBUG_ERROR, ("CMDTHREAD_RESET_BULK_IN: Cannot do bulk in because flags(0x%lx) on !\n", pAd->Flags));
++ }
++ }
++ }
++ DBGPRINT_RAW(RT_DEBUG_TRACE, ("CmdThread : CMDTHREAD_RESET_BULK_IN <===\n"));
++ break;
++
++ case CMDTHREAD_SET_ASIC_WCID:
++ {
++ RT_SET_ASIC_WCID SetAsicWcid;
++ USHORT offset;
++ UINT32 MACValue, MACRValue = 0;
++ SetAsicWcid = *((PRT_SET_ASIC_WCID)(pData));
++
++ if (SetAsicWcid.WCID >= MAX_LEN_OF_MAC_TABLE)
++ return;
++
++ offset = MAC_WCID_BASE + ((UCHAR)SetAsicWcid.WCID)*HW_WCID_ENTRY_SIZE;
++
++ DBGPRINT_RAW(RT_DEBUG_TRACE, ("CmdThread : CMDTHREAD_SET_ASIC_WCID : WCID = %ld, SetTid = %lx, DeleteTid = %lx.\n", SetAsicWcid.WCID, SetAsicWcid.SetTid, SetAsicWcid.DeleteTid));
++ MACValue = (pAd->MacTab.Content[SetAsicWcid.WCID].Addr[3]<<24)+(pAd->MacTab.Content[SetAsicWcid.WCID].Addr[2]<<16)+(pAd->MacTab.Content[SetAsicWcid.WCID].Addr[1]<<8)+(pAd->MacTab.Content[SetAsicWcid.WCID].Addr[0]);
++ DBGPRINT_RAW(RT_DEBUG_TRACE, ("1-MACValue= %x,\n", MACValue));
++ RTUSBWriteMACRegister(pAd, offset, MACValue);
++ // Read bitmask
++ RTUSBReadMACRegister(pAd, offset+4, &MACRValue);
++ if ( SetAsicWcid.DeleteTid != 0xffffffff)
++ MACRValue &= (~SetAsicWcid.DeleteTid);
++ if (SetAsicWcid.SetTid != 0xffffffff)
++ MACRValue |= (SetAsicWcid.SetTid);
++ MACRValue &= 0xffff0000;
++
++ MACValue = (pAd->MacTab.Content[SetAsicWcid.WCID].Addr[5]<<8)+pAd->MacTab.Content[SetAsicWcid.WCID].Addr[4];
++ MACValue |= MACRValue;
++ RTUSBWriteMACRegister(pAd, offset+4, MACValue);
++
++ DBGPRINT_RAW(RT_DEBUG_TRACE, ("2-MACValue= %x,\n", MACValue));
++ }
++ break;
++
++ case CMDTHREAD_SET_ASIC_WCID_CIPHER:
++ {
++#ifdef CONFIG_STA_SUPPORT
++ RT_SET_ASIC_WCID_ATTRI SetAsicWcidAttri;
++ USHORT offset;
++ UINT32 MACRValue = 0;
++ SHAREDKEY_MODE_STRUC csr1;
++ SetAsicWcidAttri = *((PRT_SET_ASIC_WCID_ATTRI)(pData));
++
++ if (SetAsicWcidAttri.WCID >= MAX_LEN_OF_MAC_TABLE)
++ return;
++
++ offset = MAC_WCID_ATTRIBUTE_BASE + ((UCHAR)SetAsicWcidAttri.WCID)*HW_WCID_ATTRI_SIZE;
++
++ DBGPRINT_RAW(RT_DEBUG_TRACE, ("Cmd : CMDTHREAD_SET_ASIC_WCID_CIPHER : WCID = %ld, Cipher = %lx.\n", SetAsicWcidAttri.WCID, SetAsicWcidAttri.Cipher));
++ // Read bitmask
++ RTUSBReadMACRegister(pAd, offset, &MACRValue);
++ MACRValue = 0;
++ MACRValue |= (((UCHAR)SetAsicWcidAttri.Cipher) << 1);
++
++ RTUSBWriteMACRegister(pAd, offset, MACRValue);
++ DBGPRINT_RAW(RT_DEBUG_TRACE, ("2-offset = %x , MACValue= %x,\n", offset, MACRValue));
++
++ offset = PAIRWISE_IVEIV_TABLE_BASE + ((UCHAR)SetAsicWcidAttri.WCID)*HW_IVEIV_ENTRY_SIZE;
++ MACRValue = 0;
++ if ( (SetAsicWcidAttri.Cipher <= CIPHER_WEP128))
++ MACRValue |= ( pAd->StaCfg.DefaultKeyId << 30);
++ else
++ MACRValue |= (0x20000000);
++ RTUSBWriteMACRegister(pAd, offset, MACRValue);
++ DBGPRINT_RAW(RT_DEBUG_TRACE, ("2-offset = %x , MACValue= %x,\n", offset, MACRValue));
++
++ //
++ // Update cipher algorithm. WSTA always use BSS0
++ //
++ // for adhoc mode only ,because wep status slow than add key, when use zero config
++ if (pAd->StaCfg.BssType == BSS_ADHOC )
++ {
++ offset = MAC_WCID_ATTRIBUTE_BASE;
++
++ RTUSBReadMACRegister(pAd, offset, &MACRValue);
++ MACRValue &= (~0xe);
++ MACRValue |= (((UCHAR)SetAsicWcidAttri.Cipher) << 1);
++
++ RTUSBWriteMACRegister(pAd, offset, MACRValue);
++
++ //Update group key cipher,,because wep status slow than add key, when use zero config
++ RTUSBReadMACRegister(pAd, SHARED_KEY_MODE_BASE+4*(0/2), &csr1.word);
++
++ csr1.field.Bss0Key0CipherAlg = SetAsicWcidAttri.Cipher;
++ csr1.field.Bss0Key1CipherAlg = SetAsicWcidAttri.Cipher;
++
++ RTUSBWriteMACRegister(pAd, SHARED_KEY_MODE_BASE+4*(0/2), csr1.word);
++ }
++#endif // CONFIG_STA_SUPPORT //
++ }
++ break;
++
++#ifdef CONFIG_STA_SUPPORT
++#ifdef QOS_DLS_SUPPORT
++ // avoid in interrupt when write key
++ case RT_CMD_SET_KEY_TABLE: //General call for AsicAddPairwiseKeyEntry()
++ {
++ RT_ADD_PAIRWISE_KEY_ENTRY KeyInfo;
++ KeyInfo = *((PRT_ADD_PAIRWISE_KEY_ENTRY)(pData));
++ AsicAddPairwiseKeyEntry(pAd,
++ KeyInfo.MacAddr,
++ (UCHAR)KeyInfo.MacTabMatchWCID,
++ &KeyInfo.CipherKey);
++ }
++ break;
++
++ case RT_CMD_SET_RX_WCID_TABLE: //General call for RTMPAddWcidAttributeEntry()
++ {
++ PMAC_TABLE_ENTRY pEntry ;
++ pEntry = (PMAC_TABLE_ENTRY)(pData);
++ RTMPAddWcidAttributeEntry(pAd,
++ BSS0,
++ 0,
++ pEntry->PairwiseKey.CipherAlg,
++ pEntry);
++ }
++ break;
++#endif // QOS_DLS_SUPPORT //
++#endif // CONFIG_STA_SUPPORT //
++
++ case CMDTHREAD_SET_CLIENT_MAC_ENTRY:
++ {
++ MAC_TABLE_ENTRY *pEntry;
++ pEntry = (MAC_TABLE_ENTRY *)pData;
++
++
++#ifdef CONFIG_STA_SUPPORT
++ IF_DEV_CONFIG_OPMODE_ON_STA(pAd)
++ {
++ AsicRemovePairwiseKeyEntry(pAd, pEntry->apidx, (UCHAR)pEntry->Aid);
++ if ((pEntry->AuthMode <= Ndis802_11AuthModeAutoSwitch) && (pEntry->WepStatus == Ndis802_11Encryption1Enabled))
++ {
++ UINT32 uIV = 0;
++ PUCHAR ptr;
++
++ ptr = (PUCHAR) &uIV;
++ *(ptr + 3) = (pAd->StaCfg.DefaultKeyId << 6);
++ AsicUpdateWCIDIVEIV(pAd, pEntry->Aid, uIV, 0);
++ AsicUpdateWCIDAttribute(pAd, pEntry->Aid, BSS0, pAd->SharedKey[BSS0][pAd->StaCfg.DefaultKeyId].CipherAlg, FALSE);
++ }
++ else if (pEntry->AuthMode == Ndis802_11AuthModeWPANone)
++ {
++ UINT32 uIV = 0;
++ PUCHAR ptr;
++
++ ptr = (PUCHAR) &uIV;
++ *(ptr + 3) = (pAd->StaCfg.DefaultKeyId << 6);
++ AsicUpdateWCIDIVEIV(pAd, pEntry->Aid, uIV, 0);
++ AsicUpdateWCIDAttribute(pAd, pEntry->Aid, BSS0, pAd->SharedKey[BSS0][pAd->StaCfg.DefaultKeyId].CipherAlg, FALSE);
++ }
++ else
++ {
++ //
++ // Other case, disable engine.
++ // Don't worry WPA key, we will add WPA Key after 4-Way handshaking.
++ //
++ USHORT offset;
++ offset = MAC_WCID_ATTRIBUTE_BASE + (pEntry->Aid * HW_WCID_ATTRI_SIZE);
++ // RX_PKEY_MODE:0 for no security; RX_KEY_TAB:0 for shared key table; BSS_IDX:0
++ RTUSBWriteMACRegister(pAd, offset, 0);
++ }
++ }
++#endif // CONFIG_STA_SUPPORT //
++
++ AsicUpdateRxWCIDTable(pAd, pEntry->Aid, pEntry->Addr);
++ printk("UpdateRxWCIDTable(): Aid=%d, Addr=%02x:%02x:%02x:%02x:%02x:%02x!\n", pEntry->Aid,
++ pEntry->Addr[0], pEntry->Addr[1], pEntry->Addr[2], pEntry->Addr[3], pEntry->Addr[4], pEntry->Addr[5]);
++ }
++ break;
++
++ case OID_802_11_ADD_WEP:
++ {
++#ifdef CONFIG_STA_SUPPORT
++ UINT i;
++ UINT32 KeyIdx;
++ PNDIS_802_11_WEP pWepKey;
++
++ DBGPRINT(RT_DEBUG_TRACE, ("CmdThread::OID_802_11_ADD_WEP \n"));
++
++ pWepKey = (PNDIS_802_11_WEP)pData;
++ KeyIdx = pWepKey->KeyIndex & 0x0fffffff;
++
++ // it is a shared key
++ if ((KeyIdx >= 4) || ((pWepKey->KeyLength != 5) && (pWepKey->KeyLength != 13)))
++ {
++ NdisStatus = NDIS_STATUS_INVALID_DATA;
++ DBGPRINT(RT_DEBUG_ERROR, ("CmdThread::OID_802_11_ADD_WEP, INVALID_DATA!!\n"));
++ }
++ else
++ {
++ UCHAR CipherAlg;
++ pAd->SharedKey[BSS0][KeyIdx].KeyLen = (UCHAR) pWepKey->KeyLength;
++ NdisMoveMemory(pAd->SharedKey[BSS0][KeyIdx].Key, &pWepKey->KeyMaterial, pWepKey->KeyLength);
++ CipherAlg = (pAd->SharedKey[BSS0][KeyIdx].KeyLen == 5)? CIPHER_WEP64 : CIPHER_WEP128;
++
++ //
++ // Change the WEP cipher to CKIP cipher if CKIP KP on.
++ // Funk UI or Meetinghouse UI will add ckip key from this path.
++ //
++
++ if (pAd->OpMode == OPMODE_STA)
++ {
++ pAd->MacTab.Content[BSSID_WCID].PairwiseKey.CipherAlg = pAd->SharedKey[BSS0][KeyIdx].CipherAlg;
++ pAd->MacTab.Content[BSSID_WCID].PairwiseKey.KeyLen = pAd->SharedKey[BSS0][KeyIdx].KeyLen;
++ }
++ pAd->SharedKey[BSS0][KeyIdx].CipherAlg = CipherAlg;
++ if (pWepKey->KeyIndex & 0x80000000)
++ {
++ // Default key for tx (shared key)
++ UCHAR IVEIV[8];
++ UINT32 WCIDAttri, Value;
++ USHORT offset, offset2;
++ NdisZeroMemory(IVEIV, 8);
++ pAd->StaCfg.DefaultKeyId = (UCHAR) KeyIdx;
++ // Add BSSID to WCTable. because this is Tx wep key.
++ // WCID Attribute UDF:3, BSSIdx:3, Alg:3, Keytable:1=PAIRWISE KEY, BSSIdx is 0
++ WCIDAttri = (CipherAlg<<1)|SHAREDKEYTABLE;
++
++ offset = MAC_WCID_ATTRIBUTE_BASE + (BSSID_WCID* HW_WCID_ATTRI_SIZE);
++ RTUSBWriteMACRegister(pAd, offset, WCIDAttri);
++ // 1. IV/EIV
++ // Specify key index to find shared key.
++ IVEIV[3] = (UCHAR)(KeyIdx<< 6); //WEP Eiv bit off. groupkey index is not 0
++ offset = PAIRWISE_IVEIV_TABLE_BASE + (BSS0Mcast_WCID * HW_IVEIV_ENTRY_SIZE);
++ offset2 = PAIRWISE_IVEIV_TABLE_BASE + (BSSID_WCID* HW_IVEIV_ENTRY_SIZE);
++ for (i=0; i<8;)
++ {
++ Value = IVEIV[i];
++ Value += (IVEIV[i+1]<<8);
++ Value += (IVEIV[i+2]<<16);
++ Value += (IVEIV[i+3]<<24);
++ RTUSBWriteMACRegister(pAd, offset+i, Value);
++ RTUSBWriteMACRegister(pAd, offset2+i, Value);
++ i+=4;
++ }
++
++ // 2. WCID Attribute UDF:3, BSSIdx:3, Alg:3, Keytable:use share key, BSSIdx is 0
++ WCIDAttri = (pAd->SharedKey[BSS0][KeyIdx].CipherAlg<<1)|SHAREDKEYTABLE;
++ offset = MAC_WCID_ATTRIBUTE_BASE + (BSS0Mcast_WCID* HW_WCID_ATTRI_SIZE);
++ DBGPRINT(RT_DEBUG_TRACE, ("BSS0Mcast_WCID : offset = %x, WCIDAttri = %x\n", offset, WCIDAttri));
++ RTUSBWriteMACRegister(pAd, offset, WCIDAttri);
++
++ }
++ AsicAddSharedKeyEntry(pAd, BSS0, (UCHAR)KeyIdx, CipherAlg, pWepKey->KeyMaterial, NULL, NULL);
++ DBGPRINT(RT_DEBUG_TRACE, ("CmdThread::OID_802_11_ADD_WEP (KeyIdx=%d, Len=%d-byte)\n", KeyIdx, pWepKey->KeyLength));
++ }
++#endif // CONFIG_STA_SUPPORT //
++ }
++ break;
++
++ case CMDTHREAD_802_11_COUNTER_MEASURE:
++ break;
++ default:
++ DBGPRINT(RT_DEBUG_ERROR, ("--> Control Thread !! ERROR !! Unknown(cmdqelmt->command=0x%x) !! \n", cmdqelmt->command));
++ break;
++ }
++ }
++
++ if (cmdqelmt->CmdFromNdis == TRUE)
++ {
++ if (cmdqelmt->buffer != NULL)
++ NdisFreeMemory(cmdqelmt->buffer, cmdqelmt->bufferlength, 0);
++
++ NdisFreeMemory(cmdqelmt, sizeof(CmdQElmt), 0);
++ }
++ else
++ {
++ if ((cmdqelmt->buffer != NULL) && (cmdqelmt->bufferlength != 0))
++ NdisFreeMemory(cmdqelmt->buffer, cmdqelmt->bufferlength, 0);
++ {
++ NdisFreeMemory(cmdqelmt, sizeof(CmdQElmt), 0);
++ }
++ }
++ } /* end of while */
++}
++
+--- /dev/null
++++ b/drivers/staging/rt2870/common/spectrum.c
+@@ -0,0 +1,1876 @@
++/*
++ *************************************************************************
++ * Ralink Tech Inc.
++ * 5F., No.36, Taiyuan St., Jhubei City,
++ * Hsinchu County 302,
++ * Taiwan, R.O.C.
++ *
++ * (c) Copyright 2002-2007, Ralink Technology, Inc.
++ *
++ * This program is free software; you can redistribute it and/or modify *
++ * it under the terms of the GNU General Public License as published by *
++ * the Free Software Foundation; either version 2 of the License, or *
++ * (at your option) any later version. *
++ * *
++ * This program is distributed in the hope that it will be useful, *
++ * but WITHOUT ANY WARRANTY; without even the implied warranty of *
++ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the *
++ * GNU General Public License for more details. *
++ * *
++ * You should have received a copy of the GNU General Public License *
++ * along with this program; if not, write to the *
++ * Free Software Foundation, Inc., *
++ * 59 Temple Place - Suite 330, Boston, MA 02111-1307, USA. *
++ * *
++ *************************************************************************
++
++ Module Name:
++ action.c
++
++ Abstract:
++ Handle association related requests either from WSTA or from local MLME
++
++ Revision History:
++ Who When What
++ --------- ---------- ----------------------------------------------
++ Fonchi Wu 2008 created for 802.11h
++ */
++
++#include "../rt_config.h"
++#include "action.h"
++
++VOID MeasureReqTabInit(
++ IN PRTMP_ADAPTER pAd)
++{
++ NdisAllocateSpinLock(&pAd->CommonCfg.MeasureReqTabLock);
++
++ pAd->CommonCfg.pMeasureReqTab = kmalloc(sizeof(MEASURE_REQ_TAB), GFP_ATOMIC);
++ if (pAd->CommonCfg.pMeasureReqTab)
++ NdisZeroMemory(pAd->CommonCfg.pMeasureReqTab, sizeof(MEASURE_REQ_TAB));
++ else
++ DBGPRINT(RT_DEBUG_ERROR, ("%s Fail to alloc memory for pAd->CommonCfg.pMeasureReqTab.\n", __FUNCTION__));
++
++ return;
++}
++
++VOID MeasureReqTabExit(
++ IN PRTMP_ADAPTER pAd)
++{
++ NdisFreeSpinLock(pAd->CommonCfg.MeasureReqTabLock);
++
++ if (pAd->CommonCfg.pMeasureReqTab)
++ kfree(pAd->CommonCfg.pMeasureReqTab);
++ pAd->CommonCfg.pMeasureReqTab = NULL;
++
++ return;
++}
++
++static PMEASURE_REQ_ENTRY MeasureReqLookUp(
++ IN PRTMP_ADAPTER pAd,
++ IN UINT8 DialogToken)
++{
++ UINT HashIdx;
++ PMEASURE_REQ_TAB pTab = pAd->CommonCfg.pMeasureReqTab;
++ PMEASURE_REQ_ENTRY pEntry = NULL;
++ PMEASURE_REQ_ENTRY pPrevEntry = NULL;
++
++ if (pTab == NULL)
++ {
++ DBGPRINT(RT_DEBUG_ERROR, ("%s: pMeasureReqTab doesn't exist.\n", __FUNCTION__));
++ return NULL;
++ }
++
++ RTMP_SEM_LOCK(&pAd->CommonCfg.MeasureReqTabLock);
++
++ HashIdx = MQ_DIALOGTOKEN_HASH_INDEX(DialogToken);
++ pEntry = pTab->Hash[HashIdx];
++
++ while (pEntry)
++ {
++ if (pEntry->DialogToken == DialogToken)
++ break;
++ else
++ {
++ pPrevEntry = pEntry;
++ pEntry = pEntry->pNext;
++ }
++ }
++
++ RTMP_SEM_UNLOCK(&pAd->CommonCfg.MeasureReqTabLock);
++
++ return pEntry;
++}
++
++static PMEASURE_REQ_ENTRY MeasureReqInsert(
++ IN PRTMP_ADAPTER pAd,
++ IN UINT8 DialogToken)
++{
++ INT i;
++ ULONG HashIdx;
++ PMEASURE_REQ_TAB pTab = pAd->CommonCfg.pMeasureReqTab;
++ PMEASURE_REQ_ENTRY pEntry = NULL, pCurrEntry;
++ ULONG Now;
++
++ if(pTab == NULL)
++ {
++ DBGPRINT(RT_DEBUG_ERROR, ("%s: pMeasureReqTab doesn't exist.\n", __FUNCTION__));
++ return NULL;
++ }
++
++ pEntry = MeasureReqLookUp(pAd, DialogToken);
++ if (pEntry == NULL)
++ {
++ RTMP_SEM_LOCK(&pAd->CommonCfg.MeasureReqTabLock);
++ for (i = 0; i < MAX_MEASURE_REQ_TAB_SIZE; i++)
++ {
++ NdisGetSystemUpTime(&Now);
++ pEntry = &pTab->Content[i];
++
++ if ((pEntry->Valid == TRUE)
++ && RTMP_TIME_AFTER((unsigned long)Now, (unsigned long)(pEntry->lastTime + MQ_REQ_AGE_OUT)))
++ {
++ PMEASURE_REQ_ENTRY pPrevEntry = NULL;
++ ULONG HashIdx = MQ_DIALOGTOKEN_HASH_INDEX(pEntry->DialogToken);
++ PMEASURE_REQ_ENTRY pProbeEntry = pTab->Hash[HashIdx];
++
++ // update Hash list
++ do
++ {
++ if (pProbeEntry == pEntry)
++ {
++ if (pPrevEntry == NULL)
++ {
++ pTab->Hash[HashIdx] = pEntry->pNext;
++ }
++ else
++ {
++ pPrevEntry->pNext = pEntry->pNext;
++ }
++ break;
++ }
++
++ pPrevEntry = pProbeEntry;
++ pProbeEntry = pProbeEntry->pNext;
++ } while (pProbeEntry);
++
++ NdisZeroMemory(pEntry, sizeof(MEASURE_REQ_ENTRY));
++ pTab->Size--;
++
++ break;
++ }
++
++ if (pEntry->Valid == FALSE)
++ break;
++ }
++
++ if (i < MAX_MEASURE_REQ_TAB_SIZE)
++ {
++ NdisGetSystemUpTime(&Now);
++ pEntry->lastTime = Now;
++ pEntry->Valid = TRUE;
++ pEntry->DialogToken = DialogToken;
++ pTab->Size++;
++ }
++ else
++ {
++ pEntry = NULL;
++ DBGPRINT(RT_DEBUG_ERROR, ("%s: pMeasureReqTab tab full.\n", __FUNCTION__));
++ }
++
++ // add this Neighbor entry into HASH table
++ if (pEntry)
++ {
++ HashIdx = MQ_DIALOGTOKEN_HASH_INDEX(DialogToken);
++ if (pTab->Hash[HashIdx] == NULL)
++ {
++ pTab->Hash[HashIdx] = pEntry;
++ }
++ else
++ {
++ pCurrEntry = pTab->Hash[HashIdx];
++ while (pCurrEntry->pNext != NULL)
++ pCurrEntry = pCurrEntry->pNext;
++ pCurrEntry->pNext = pEntry;
++ }
++ }
++
++ RTMP_SEM_UNLOCK(&pAd->CommonCfg.MeasureReqTabLock);
++ }
++
++ return pEntry;
++}
++
++static VOID MeasureReqDelete(
++ IN PRTMP_ADAPTER pAd,
++ IN UINT8 DialogToken)
++{
++ PMEASURE_REQ_TAB pTab = pAd->CommonCfg.pMeasureReqTab;
++ PMEASURE_REQ_ENTRY pEntry = NULL;
++
++ if(pTab == NULL)
++ {
++ DBGPRINT(RT_DEBUG_ERROR, ("%s: pMeasureReqTab doesn't exist.\n", __FUNCTION__));
++ return;
++ }
++
++ // if empty, return
++ if (pTab->Size == 0)
++ {
++ DBGPRINT(RT_DEBUG_ERROR, ("pMeasureReqTab empty.\n"));
++ return;
++ }
++
++ pEntry = MeasureReqLookUp(pAd, DialogToken);
++ if (pEntry != NULL)
++ {
++ PMEASURE_REQ_ENTRY pPrevEntry = NULL;
++ ULONG HashIdx = MQ_DIALOGTOKEN_HASH_INDEX(pEntry->DialogToken);
++ PMEASURE_REQ_ENTRY pProbeEntry = pTab->Hash[HashIdx];
++
++ RTMP_SEM_LOCK(&pAd->CommonCfg.MeasureReqTabLock);
++ // update Hash list
++ do
++ {
++ if (pProbeEntry == pEntry)
++ {
++ if (pPrevEntry == NULL)
++ {
++ pTab->Hash[HashIdx] = pEntry->pNext;
++ }
++ else
++ {
++ pPrevEntry->pNext = pEntry->pNext;
++ }
++ break;
++ }
++
++ pPrevEntry = pProbeEntry;
++ pProbeEntry = pProbeEntry->pNext;
++ } while (pProbeEntry);
++
++ NdisZeroMemory(pEntry, sizeof(MEASURE_REQ_ENTRY));
++ pTab->Size--;
++
++ RTMP_SEM_UNLOCK(&pAd->CommonCfg.MeasureReqTabLock);
++ }
++
++ return;
++}
++
++VOID TpcReqTabInit(
++ IN PRTMP_ADAPTER pAd)
++{
++ NdisAllocateSpinLock(&pAd->CommonCfg.TpcReqTabLock);
++
++ pAd->CommonCfg.pTpcReqTab = kmalloc(sizeof(TPC_REQ_TAB), GFP_ATOMIC);
++ if (pAd->CommonCfg.pTpcReqTab)
++ NdisZeroMemory(pAd->CommonCfg.pTpcReqTab, sizeof(TPC_REQ_TAB));
++ else
++ DBGPRINT(RT_DEBUG_ERROR, ("%s Fail to alloc memory for pAd->CommonCfg.pTpcReqTab.\n", __FUNCTION__));
++
++ return;
++}
++
++VOID TpcReqTabExit(
++ IN PRTMP_ADAPTER pAd)
++{
++ NdisFreeSpinLock(pAd->CommonCfg.TpcReqTabLock);
++
++ if (pAd->CommonCfg.pTpcReqTab)
++ kfree(pAd->CommonCfg.pTpcReqTab);
++ pAd->CommonCfg.pTpcReqTab = NULL;
++
++ return;
++}
++
++static PTPC_REQ_ENTRY TpcReqLookUp(
++ IN PRTMP_ADAPTER pAd,
++ IN UINT8 DialogToken)
++{
++ UINT HashIdx;
++ PTPC_REQ_TAB pTab = pAd->CommonCfg.pTpcReqTab;
++ PTPC_REQ_ENTRY pEntry = NULL;
++ PTPC_REQ_ENTRY pPrevEntry = NULL;
++
++ if (pTab == NULL)
++ {
++ DBGPRINT(RT_DEBUG_ERROR, ("%s: pTpcReqTab doesn't exist.\n", __FUNCTION__));
++ return NULL;
++ }
++
++ RTMP_SEM_LOCK(&pAd->CommonCfg.TpcReqTabLock);
++
++ HashIdx = TPC_DIALOGTOKEN_HASH_INDEX(DialogToken);
++ pEntry = pTab->Hash[HashIdx];
++
++ while (pEntry)
++ {
++ if (pEntry->DialogToken == DialogToken)
++ break;
++ else
++ {
++ pPrevEntry = pEntry;
++ pEntry = pEntry->pNext;
++ }
++ }
++
++ RTMP_SEM_UNLOCK(&pAd->CommonCfg.TpcReqTabLock);
++
++ return pEntry;
++}
++
++
++static PTPC_REQ_ENTRY TpcReqInsert(
++ IN PRTMP_ADAPTER pAd,
++ IN UINT8 DialogToken)
++{
++ INT i;
++ ULONG HashIdx;
++ PTPC_REQ_TAB pTab = pAd->CommonCfg.pTpcReqTab;
++ PTPC_REQ_ENTRY pEntry = NULL, pCurrEntry;
++ ULONG Now;
++
++ if(pTab == NULL)
++ {
++ DBGPRINT(RT_DEBUG_ERROR, ("%s: pTpcReqTab doesn't exist.\n", __FUNCTION__));
++ return NULL;
++ }
++
++ pEntry = TpcReqLookUp(pAd, DialogToken);
++ if (pEntry == NULL)
++ {
++ RTMP_SEM_LOCK(&pAd->CommonCfg.TpcReqTabLock);
++ for (i = 0; i < MAX_TPC_REQ_TAB_SIZE; i++)
++ {
++ NdisGetSystemUpTime(&Now);
++ pEntry = &pTab->Content[i];
++
++ if ((pEntry->Valid == TRUE)
++ && RTMP_TIME_AFTER((unsigned long)Now, (unsigned long)(pEntry->lastTime + TPC_REQ_AGE_OUT)))
++ {
++ PTPC_REQ_ENTRY pPrevEntry = NULL;
++ ULONG HashIdx = TPC_DIALOGTOKEN_HASH_INDEX(pEntry->DialogToken);
++ PTPC_REQ_ENTRY pProbeEntry = pTab->Hash[HashIdx];
++
++ // update Hash list
++ do
++ {
++ if (pProbeEntry == pEntry)
++ {
++ if (pPrevEntry == NULL)
++ {
++ pTab->Hash[HashIdx] = pEntry->pNext;
++ }
++ else
++ {
++ pPrevEntry->pNext = pEntry->pNext;
++ }
++ break;
++ }
++
++ pPrevEntry = pProbeEntry;
++ pProbeEntry = pProbeEntry->pNext;
++ } while (pProbeEntry);
++
++ NdisZeroMemory(pEntry, sizeof(TPC_REQ_ENTRY));
++ pTab->Size--;
++
++ break;
++ }
++
++ if (pEntry->Valid == FALSE)
++ break;
++ }
++
++ if (i < MAX_TPC_REQ_TAB_SIZE)
++ {
++ NdisGetSystemUpTime(&Now);
++ pEntry->lastTime = Now;
++ pEntry->Valid = TRUE;
++ pEntry->DialogToken = DialogToken;
++ pTab->Size++;
++ }
++ else
++ {
++ pEntry = NULL;
++ DBGPRINT(RT_DEBUG_ERROR, ("%s: pTpcReqTab tab full.\n", __FUNCTION__));
++ }
++
++ // add this Neighbor entry into HASH table
++ if (pEntry)
++ {
++ HashIdx = TPC_DIALOGTOKEN_HASH_INDEX(DialogToken);
++ if (pTab->Hash[HashIdx] == NULL)
++ {
++ pTab->Hash[HashIdx] = pEntry;
++ }
++ else
++ {
++ pCurrEntry = pTab->Hash[HashIdx];
++ while (pCurrEntry->pNext != NULL)
++ pCurrEntry = pCurrEntry->pNext;
++ pCurrEntry->pNext = pEntry;
++ }
++ }
++
++ RTMP_SEM_UNLOCK(&pAd->CommonCfg.TpcReqTabLock);
++ }
++
++ return pEntry;
++}
++
++static VOID TpcReqDelete(
++ IN PRTMP_ADAPTER pAd,
++ IN UINT8 DialogToken)
++{
++ PTPC_REQ_TAB pTab = pAd->CommonCfg.pTpcReqTab;
++ PTPC_REQ_ENTRY pEntry = NULL;
++
++ if(pTab == NULL)
++ {
++ DBGPRINT(RT_DEBUG_ERROR, ("%s: pTpcReqTab doesn't exist.\n", __FUNCTION__));
++ return;
++ }
++
++ // if empty, return
++ if (pTab->Size == 0)
++ {
++ DBGPRINT(RT_DEBUG_ERROR, ("pTpcReqTab empty.\n"));
++ return;
++ }
++
++ pEntry = TpcReqLookUp(pAd, DialogToken);
++ if (pEntry != NULL)
++ {
++ PTPC_REQ_ENTRY pPrevEntry = NULL;
++ ULONG HashIdx = TPC_DIALOGTOKEN_HASH_INDEX(pEntry->DialogToken);
++ PTPC_REQ_ENTRY pProbeEntry = pTab->Hash[HashIdx];
++
++ RTMP_SEM_LOCK(&pAd->CommonCfg.TpcReqTabLock);
++ // update Hash list
++ do
++ {
++ if (pProbeEntry == pEntry)
++ {
++ if (pPrevEntry == NULL)
++ {
++ pTab->Hash[HashIdx] = pEntry->pNext;
++ }
++ else
++ {
++ pPrevEntry->pNext = pEntry->pNext;
++ }
++ break;
++ }
++
++ pPrevEntry = pProbeEntry;
++ pProbeEntry = pProbeEntry->pNext;
++ } while (pProbeEntry);
++
++ NdisZeroMemory(pEntry, sizeof(TPC_REQ_ENTRY));
++ pTab->Size--;
++
++ RTMP_SEM_UNLOCK(&pAd->CommonCfg.TpcReqTabLock);
++ }
++
++ return;
++}
++
++/*
++ ==========================================================================
++ Description:
++ Get Current TimeS tamp.
++
++ Parametrs:
++
++ Return : Current Time Stamp.
++ ==========================================================================
++ */
++static UINT64 GetCurrentTimeStamp(
++ IN PRTMP_ADAPTER pAd)
++{
++ // get current time stamp.
++ return 0;
++}
++
++/*
++ ==========================================================================
++ Description:
++ Get Current Transmit Power.
++
++ Parametrs:
++
++ Return : Current Time Stamp.
++ ==========================================================================
++ */
++static UINT8 GetCurTxPwr(
++ IN PRTMP_ADAPTER pAd,
++ IN UINT8 Wcid)
++{
++ return 16; /* 16 dBm */
++}
++
++/*
++ ==========================================================================
++ Description:
++ Insert Dialog Token into frame.
++
++ Parametrs:
++ 1. frame buffer pointer.
++ 2. frame length.
++ 3. Dialog token.
++
++ Return : None.
++ ==========================================================================
++ */
++static VOID InsertDialogToken(
++ IN PRTMP_ADAPTER pAd,
++ OUT PUCHAR pFrameBuf,
++ OUT PULONG pFrameLen,
++ IN UINT8 DialogToken)
++{
++ ULONG TempLen;
++ MakeOutgoingFrame(pFrameBuf, &TempLen,
++ 1, &DialogToken,
++ END_OF_ARGS);
++
++ *pFrameLen = *pFrameLen + TempLen;
++
++ return;
++}
++
++/*
++ ==========================================================================
++ Description:
++ Insert TPC Request IE into frame.
++
++ Parametrs:
++ 1. frame buffer pointer.
++ 2. frame length.
++
++ Return : None.
++ ==========================================================================
++ */
++ static VOID InsertTpcReqIE(
++ IN PRTMP_ADAPTER pAd,
++ OUT PUCHAR pFrameBuf,
++ OUT PULONG pFrameLen)
++{
++ ULONG TempLen;
++ ULONG Len = 0;
++ UINT8 ElementID = IE_TPC_REQUEST;
++
++ MakeOutgoingFrame(pFrameBuf, &TempLen,
++ 1, &ElementID,
++ 1, &Len,
++ END_OF_ARGS);
++
++ *pFrameLen = *pFrameLen + TempLen;
++
++ return;
++}
++
++/*
++ ==========================================================================
++ Description:
++ Insert TPC Report IE into frame.
++
++ Parametrs:
++ 1. frame buffer pointer.
++ 2. frame length.
++ 3. Transmit Power.
++ 4. Link Margin.
++
++ Return : None.
++ ==========================================================================
++ */
++ static VOID InsertTpcReportIE(
++ IN PRTMP_ADAPTER pAd,
++ OUT PUCHAR pFrameBuf,
++ OUT PULONG pFrameLen,
++ IN UINT8 TxPwr,
++ IN UINT8 LinkMargin)
++{
++ ULONG TempLen;
++ ULONG Len = sizeof(TPC_REPORT_INFO);
++ UINT8 ElementID = IE_TPC_REPORT;
++ TPC_REPORT_INFO TpcReportIE;
++
++ TpcReportIE.TxPwr = TxPwr;
++ TpcReportIE.LinkMargin = LinkMargin;
++
++ MakeOutgoingFrame(pFrameBuf, &TempLen,
++ 1, &ElementID,
++ 1, &Len,
++ Len, &TpcReportIE,
++ END_OF_ARGS);
++
++ *pFrameLen = *pFrameLen + TempLen;
++
++
++ return;
++}
++
++/*
++ ==========================================================================
++ Description:
++ Insert Channel Switch Announcement IE into frame.
++
++ Parametrs:
++ 1. frame buffer pointer.
++ 2. frame length.
++ 3. channel switch announcement mode.
++ 4. new selected channel.
++ 5. channel switch announcement count.
++
++ Return : None.
++ ==========================================================================
++ */
++static VOID InsertChSwAnnIE(
++ IN PRTMP_ADAPTER pAd,
++ OUT PUCHAR pFrameBuf,
++ OUT PULONG pFrameLen,
++ IN UINT8 ChSwMode,
++ IN UINT8 NewChannel,
++ IN UINT8 ChSwCnt)
++{
++ ULONG TempLen;
++ ULONG Len = sizeof(CH_SW_ANN_INFO);
++ UINT8 ElementID = IE_CHANNEL_SWITCH_ANNOUNCEMENT;
++ CH_SW_ANN_INFO ChSwAnnIE;
++
++ ChSwAnnIE.ChSwMode = ChSwMode;
++ ChSwAnnIE.Channel = NewChannel;
++ ChSwAnnIE.ChSwCnt = ChSwCnt;
++
++ MakeOutgoingFrame(pFrameBuf, &TempLen,
++ 1, &ElementID,
++ 1, &Len,
++ Len, &ChSwAnnIE,
++ END_OF_ARGS);
++
++ *pFrameLen = *pFrameLen + TempLen;
++
++
++ return;
++}
++
++/*
++ ==========================================================================
++ Description:
++ Insert Measure Request IE into frame.
++
++ Parametrs:
++ 1. frame buffer pointer.
++ 2. frame length.
++ 3. Measure Token.
++ 4. Measure Request Mode.
++ 5. Measure Request Type.
++ 6. Measure Channel.
++ 7. Measure Start time.
++ 8. Measure Duration.
++
++
++ Return : None.
++ ==========================================================================
++ */
++static VOID InsertMeasureReqIE(
++ IN PRTMP_ADAPTER pAd,
++ OUT PUCHAR pFrameBuf,
++ OUT PULONG pFrameLen,
++ IN PMEASURE_REQ_INFO pMeasureReqIE)
++{
++ ULONG TempLen;
++ UINT8 Len = sizeof(MEASURE_REQ_INFO);
++ UINT8 ElementID = IE_MEASUREMENT_REQUEST;
++
++ MakeOutgoingFrame(pFrameBuf, &TempLen,
++ 1, &ElementID,
++ 1, &Len,
++ Len, pMeasureReqIE,
++ END_OF_ARGS);
++
++ *pFrameLen = *pFrameLen + TempLen;
++
++ return;
++}
++
++/*
++ ==========================================================================
++ Description:
++ Insert Measure Report IE into frame.
++
++ Parametrs:
++ 1. frame buffer pointer.
++ 2. frame length.
++ 3. Measure Token.
++ 4. Measure Request Mode.
++ 5. Measure Request Type.
++ 6. Length of Report Infomation
++ 7. Pointer of Report Infomation Buffer.
++
++ Return : None.
++ ==========================================================================
++ */
++static VOID InsertMeasureReportIE(
++ IN PRTMP_ADAPTER pAd,
++ OUT PUCHAR pFrameBuf,
++ OUT PULONG pFrameLen,
++ IN PMEASURE_REPORT_INFO pMeasureReportIE,
++ IN UINT8 ReportLnfoLen,
++ IN PUINT8 pReportInfo)
++{
++ ULONG TempLen;
++ ULONG Len;
++ UINT8 ElementID = IE_MEASUREMENT_REPORT;
++
++ Len = sizeof(MEASURE_REPORT_INFO) + ReportLnfoLen;
++
++ MakeOutgoingFrame(pFrameBuf, &TempLen,
++ 1, &ElementID,
++ 1, &Len,
++ Len, pMeasureReportIE,
++ END_OF_ARGS);
++
++ *pFrameLen = *pFrameLen + TempLen;
++
++ if ((ReportLnfoLen > 0) && (pReportInfo != NULL))
++ {
++ MakeOutgoingFrame(pFrameBuf + *pFrameLen, &TempLen,
++ ReportLnfoLen, pReportInfo,
++ END_OF_ARGS);
++
++ *pFrameLen = *pFrameLen + TempLen;
++ }
++ return;
++}
++
++/*
++ ==========================================================================
++ Description:
++ Prepare Measurement request action frame and enqueue it into
++ management queue waiting for transmition.
++
++ Parametrs:
++ 1. the destination mac address of the frame.
++
++ Return : None.
++ ==========================================================================
++ */
++VOID EnqueueMeasurementReq(
++ IN PRTMP_ADAPTER pAd,
++ IN PUCHAR pDA,
++ IN UINT8 MeasureToken,
++ IN UINT8 MeasureReqMode,
++ IN UINT8 MeasureReqType,
++ IN UINT8 MeasureCh,
++ IN UINT16 MeasureDuration)
++{
++ PUCHAR pOutBuffer = NULL;
++ NDIS_STATUS NStatus;
++ ULONG FrameLen;
++ HEADER_802_11 ActHdr;
++ MEASURE_REQ_INFO MeasureReqIE;
++ UINT8 RmReqDailogToken = RandomByte(pAd);
++ UINT64 MeasureStartTime = GetCurrentTimeStamp(pAd);
++
++ // build action frame header.
++ MgtMacHeaderInit(pAd, &ActHdr, SUBTYPE_ACTION, 0, pDA,
++ pAd->CurrentAddress);
++
++ NStatus = MlmeAllocateMemory(pAd, (PVOID)&pOutBuffer); //Get an unused nonpaged memory
++ if(NStatus != NDIS_STATUS_SUCCESS)
++ {
++ DBGPRINT(RT_DEBUG_TRACE, ("%s() allocate memory failed \n", __FUNCTION__));
++ return;
++ }
++ NdisMoveMemory(pOutBuffer, (PCHAR)&ActHdr, sizeof(HEADER_802_11));
++ FrameLen = sizeof(HEADER_802_11);
++
++ InsertActField(pAd, (pOutBuffer + FrameLen), &FrameLen, CATEGORY_SPECTRUM, SPEC_MRQ);
++
++ // fill Dialog Token
++ InsertDialogToken(pAd, (pOutBuffer + FrameLen), &FrameLen, MeasureToken);
++
++ // prepare Measurement IE.
++ NdisZeroMemory(&MeasureReqIE, sizeof(MEASURE_REQ_INFO));
++ MeasureReqIE.Token = RmReqDailogToken;
++ MeasureReqIE.ReqMode.word = MeasureReqMode;
++ MeasureReqIE.ReqType = MeasureReqType;
++ MeasureReqIE.MeasureReq.ChNum = MeasureCh;
++ MeasureReqIE.MeasureReq.MeasureStartTime = cpu2le64(MeasureStartTime);
++ MeasureReqIE.MeasureReq.MeasureDuration = cpu2le16(MeasureDuration);
++ InsertMeasureReqIE(pAd, (pOutBuffer + FrameLen), &FrameLen, &MeasureReqIE);
++
++ MiniportMMRequest(pAd, QID_AC_BE, pOutBuffer, FrameLen);
++ MlmeFreeMemory(pAd, pOutBuffer);
++
++ return;
++}
++
++/*
++ ==========================================================================
++ Description:
++ Prepare Measurement report action frame and enqueue it into
++ management queue waiting for transmition.
++
++ Parametrs:
++ 1. the destination mac address of the frame.
++
++ Return : None.
++ ==========================================================================
++ */
++VOID EnqueueMeasurementRep(
++ IN PRTMP_ADAPTER pAd,
++ IN PUCHAR pDA,
++ IN UINT8 DialogToken,
++ IN UINT8 MeasureToken,
++ IN UINT8 MeasureReqMode,
++ IN UINT8 MeasureReqType,
++ IN UINT8 ReportInfoLen,
++ IN PUINT8 pReportInfo)
++{
++ PUCHAR pOutBuffer = NULL;
++ NDIS_STATUS NStatus;
++ ULONG FrameLen;
++ HEADER_802_11 ActHdr;
++ MEASURE_REPORT_INFO MeasureRepIE;
++
++ // build action frame header.
++ MgtMacHeaderInit(pAd, &ActHdr, SUBTYPE_ACTION, 0, pDA,
++ pAd->CurrentAddress);
++
++ NStatus = MlmeAllocateMemory(pAd, (PVOID)&pOutBuffer); //Get an unused nonpaged memory
++ if(NStatus != NDIS_STATUS_SUCCESS)
++ {
++ DBGPRINT(RT_DEBUG_TRACE, ("%s() allocate memory failed \n", __FUNCTION__));
++ return;
++ }
++ NdisMoveMemory(pOutBuffer, (PCHAR)&ActHdr, sizeof(HEADER_802_11));
++ FrameLen = sizeof(HEADER_802_11);
++
++ InsertActField(pAd, (pOutBuffer + FrameLen), &FrameLen, CATEGORY_SPECTRUM, SPEC_MRP);
++
++ // fill Dialog Token
++ InsertDialogToken(pAd, (pOutBuffer + FrameLen), &FrameLen, DialogToken);
++
++ // prepare Measurement IE.
++ NdisZeroMemory(&MeasureRepIE, sizeof(MEASURE_REPORT_INFO));
++ MeasureRepIE.Token = MeasureToken;
++ MeasureRepIE.ReportMode.word = MeasureReqMode;
++ MeasureRepIE.ReportType = MeasureReqType;
++ InsertMeasureReportIE(pAd, (pOutBuffer + FrameLen), &FrameLen, &MeasureRepIE, ReportInfoLen, pReportInfo);
++
++ MiniportMMRequest(pAd, QID_AC_BE, pOutBuffer, FrameLen);
++ MlmeFreeMemory(pAd, pOutBuffer);
++
++ return;
++}
++
++/*
++ ==========================================================================
++ Description:
++ Prepare TPC Request action frame and enqueue it into
++ management queue waiting for transmition.
++
++ Parametrs:
++ 1. the destination mac address of the frame.
++
++ Return : None.
++ ==========================================================================
++ */
++VOID EnqueueTPCReq(
++ IN PRTMP_ADAPTER pAd,
++ IN PUCHAR pDA,
++ IN UCHAR DialogToken)
++{
++ PUCHAR pOutBuffer = NULL;
++ NDIS_STATUS NStatus;
++ ULONG FrameLen;
++
++ HEADER_802_11 ActHdr;
++
++ // build action frame header.
++ MgtMacHeaderInit(pAd, &ActHdr, SUBTYPE_ACTION, 0, pDA,
++ pAd->CurrentAddress);
++
++ NStatus = MlmeAllocateMemory(pAd, (PVOID)&pOutBuffer); //Get an unused nonpaged memory
++ if(NStatus != NDIS_STATUS_SUCCESS)
++ {
++ DBGPRINT(RT_DEBUG_TRACE, ("%s() allocate memory failed \n", __FUNCTION__));
++ return;
++ }
++ NdisMoveMemory(pOutBuffer, (PCHAR)&ActHdr, sizeof(HEADER_802_11));
++ FrameLen = sizeof(HEADER_802_11);
++
++ InsertActField(pAd, (pOutBuffer + FrameLen), &FrameLen, CATEGORY_SPECTRUM, SPEC_TPCRQ);
++
++ // fill Dialog Token
++ InsertDialogToken(pAd, (pOutBuffer + FrameLen), &FrameLen, DialogToken);
++
++ // Insert TPC Request IE.
++ InsertTpcReqIE(pAd, (pOutBuffer + FrameLen), &FrameLen);
++
++ MiniportMMRequest(pAd, QID_AC_BE, pOutBuffer, FrameLen);
++ MlmeFreeMemory(pAd, pOutBuffer);
++
++ return;
++}
++
++/*
++ ==========================================================================
++ Description:
++ Prepare TPC Report action frame and enqueue it into
++ management queue waiting for transmition.
++
++ Parametrs:
++ 1. the destination mac address of the frame.
++
++ Return : None.
++ ==========================================================================
++ */
++VOID EnqueueTPCRep(
++ IN PRTMP_ADAPTER pAd,
++ IN PUCHAR pDA,
++ IN UINT8 DialogToken,
++ IN UINT8 TxPwr,
++ IN UINT8 LinkMargin)
++{
++ PUCHAR pOutBuffer = NULL;
++ NDIS_STATUS NStatus;
++ ULONG FrameLen;
++
++ HEADER_802_11 ActHdr;
++
++ // build action frame header.
++ MgtMacHeaderInit(pAd, &ActHdr, SUBTYPE_ACTION, 0, pDA,
++ pAd->CurrentAddress);
++
++ NStatus = MlmeAllocateMemory(pAd, (PVOID)&pOutBuffer); //Get an unused nonpaged memory
++ if(NStatus != NDIS_STATUS_SUCCESS)
++ {
++ DBGPRINT(RT_DEBUG_TRACE, ("%s() allocate memory failed \n", __FUNCTION__));
++ return;
++ }
++ NdisMoveMemory(pOutBuffer, (PCHAR)&ActHdr, sizeof(HEADER_802_11));
++ FrameLen = sizeof(HEADER_802_11);
++
++ InsertActField(pAd, (pOutBuffer + FrameLen), &FrameLen, CATEGORY_SPECTRUM, SPEC_TPCRP);
++
++ // fill Dialog Token
++ InsertDialogToken(pAd, (pOutBuffer + FrameLen), &FrameLen, DialogToken);
++
++ // Insert TPC Request IE.
++ InsertTpcReportIE(pAd, (pOutBuffer + FrameLen), &FrameLen, TxPwr, LinkMargin);
++
++ MiniportMMRequest(pAd, QID_AC_BE, pOutBuffer, FrameLen);
++ MlmeFreeMemory(pAd, pOutBuffer);
++
++ return;
++}
++
++/*
++ ==========================================================================
++ Description:
++ Prepare Channel Switch Announcement action frame and enqueue it into
++ management queue waiting for transmition.
++
++ Parametrs:
++ 1. the destination mac address of the frame.
++ 2. Channel switch announcement mode.
++ 2. a New selected channel.
++
++ Return : None.
++ ==========================================================================
++ */
++VOID EnqueueChSwAnn(
++ IN PRTMP_ADAPTER pAd,
++ IN PUCHAR pDA,
++ IN UINT8 ChSwMode,
++ IN UINT8 NewCh)
++{
++ PUCHAR pOutBuffer = NULL;
++ NDIS_STATUS NStatus;
++ ULONG FrameLen;
++
++ HEADER_802_11 ActHdr;
++
++ // build action frame header.
++ MgtMacHeaderInit(pAd, &ActHdr, SUBTYPE_ACTION, 0, pDA,
++ pAd->CurrentAddress);
++
++ NStatus = MlmeAllocateMemory(pAd, (PVOID)&pOutBuffer); //Get an unused nonpaged memory
++ if(NStatus != NDIS_STATUS_SUCCESS)
++ {
++ DBGPRINT(RT_DEBUG_TRACE, ("%s() allocate memory failed \n", __FUNCTION__));
++ return;
++ }
++ NdisMoveMemory(pOutBuffer, (PCHAR)&ActHdr, sizeof(HEADER_802_11));
++ FrameLen = sizeof(HEADER_802_11);
++
++ InsertActField(pAd, (pOutBuffer + FrameLen), &FrameLen, CATEGORY_SPECTRUM, SPEC_CHANNEL_SWITCH);
++
++ InsertChSwAnnIE(pAd, (pOutBuffer + FrameLen), &FrameLen, ChSwMode, NewCh, 0);
++
++ MiniportMMRequest(pAd, QID_AC_BE, pOutBuffer, FrameLen);
++ MlmeFreeMemory(pAd, pOutBuffer);
++
++ return;
++}
++
++static BOOLEAN DfsRequirementCheck(
++ IN PRTMP_ADAPTER pAd,
++ IN UINT8 Channel)
++{
++ BOOLEAN Result = FALSE;
++ INT i;
++
++ do
++ {
++ // check DFS procedure is running.
++ // make sure DFS procedure won't start twice.
++ if (pAd->CommonCfg.RadarDetect.RDMode != RD_NORMAL_MODE)
++ {
++ Result = FALSE;
++ break;
++ }
++
++ // check the new channel carried from Channel Switch Announcemnet is valid.
++ for (i=0; i<pAd->ChannelListNum; i++)
++ {
++ if ((Channel == pAd->ChannelList[i].Channel)
++ &&(pAd->ChannelList[i].RemainingTimeForUse == 0))
++ {
++ // found radar signal in the channel. the channel can't use at least for 30 minutes.
++ pAd->ChannelList[i].RemainingTimeForUse = 1800;//30 min = 1800 sec
++ Result = TRUE;
++ break;
++ }
++ }
++ } while(FALSE);
++
++ return Result;
++}
++
++VOID NotifyChSwAnnToPeerAPs(
++ IN PRTMP_ADAPTER pAd,
++ IN PUCHAR pRA,
++ IN PUCHAR pTA,
++ IN UINT8 ChSwMode,
++ IN UINT8 Channel)
++{
++#ifdef WDS_SUPPORT
++ if (!((pRA[0] & 0xff) == 0xff)) // is pRA a broadcase address.
++ {
++ INT i;
++ // info neighbor APs that Radar signal found throgh WDS link.
++ for (i = 0; i < MAX_WDS_ENTRY; i++)
++ {
++ if (ValidWdsEntry(pAd, i))
++ {
++ PUCHAR pDA = pAd->WdsTab.WdsEntry[i].PeerWdsAddr;
++
++ // DA equal to SA. have no necessary orignal AP which found Radar signal.
++ if (MAC_ADDR_EQUAL(pTA, pDA))
++ continue;
++
++ // send Channel Switch Action frame to info Neighbro APs.
++ EnqueueChSwAnn(pAd, pDA, ChSwMode, Channel);
++ }
++ }
++ }
++#endif // WDS_SUPPORT //
++}
++
++static VOID StartDFSProcedure(
++ IN PRTMP_ADAPTER pAd,
++ IN UCHAR Channel,
++ IN UINT8 ChSwMode)
++{
++ // start DFS procedure
++ pAd->CommonCfg.Channel = Channel;
++#ifdef DOT11_N_SUPPORT
++ N_ChannelCheck(pAd);
++#endif // DOT11_N_SUPPORT //
++ pAd->CommonCfg.RadarDetect.RDMode = RD_SWITCHING_MODE;
++ pAd->CommonCfg.RadarDetect.CSCount = 0;
++}
++
++/*
++ ==========================================================================
++ Description:
++ Channel Switch Announcement action frame sanity check.
++
++ Parametrs:
++ 1. MLME message containing the received frame
++ 2. message length.
++ 3. Channel switch announcement infomation buffer.
++
++
++ Return : None.
++ ==========================================================================
++ */
++
++/*
++ Channel Switch Announcement IE.
++ +----+-----+-----------+------------+-----------+
++ | ID | Len |Ch Sw Mode | New Ch Num | Ch Sw Cnt |
++ +----+-----+-----------+------------+-----------+
++ 1 1 1 1 1
++*/
++static BOOLEAN PeerChSwAnnSanity(
++ IN PRTMP_ADAPTER pAd,
++ IN VOID *pMsg,
++ IN ULONG MsgLen,
++ OUT PCH_SW_ANN_INFO pChSwAnnInfo)
++{
++ PFRAME_802_11 Fr = (PFRAME_802_11)pMsg;
++ PUCHAR pFramePtr = Fr->Octet;
++ BOOLEAN result = FALSE;
++ PEID_STRUCT eid_ptr;
++
++ // skip 802.11 header.
++ MsgLen -= sizeof(HEADER_802_11);
++
++ // skip category and action code.
++ pFramePtr += 2;
++ MsgLen -= 2;
++
++ if (pChSwAnnInfo == NULL)
++ return result;
++
++ eid_ptr = (PEID_STRUCT)pFramePtr;
++ while (((UCHAR*)eid_ptr + eid_ptr->Len + 1) < ((PUCHAR)pFramePtr + MsgLen))
++ {
++ switch(eid_ptr->Eid)
++ {
++ case IE_CHANNEL_SWITCH_ANNOUNCEMENT:
++ NdisMoveMemory(&pChSwAnnInfo->ChSwMode, eid_ptr->Octet, 1);
++ NdisMoveMemory(&pChSwAnnInfo->Channel, eid_ptr->Octet + 1, 1);
++ NdisMoveMemory(&pChSwAnnInfo->ChSwCnt, eid_ptr->Octet + 2, 1);
++
++ result = TRUE;
++ break;
++
++ default:
++ break;
++ }
++ eid_ptr = (PEID_STRUCT)((UCHAR*)eid_ptr + 2 + eid_ptr->Len);
++ }
++
++ return result;
++}
++
++/*
++ ==========================================================================
++ Description:
++ Measurement request action frame sanity check.
++
++ Parametrs:
++ 1. MLME message containing the received frame
++ 2. message length.
++ 3. Measurement request infomation buffer.
++
++ Return : None.
++ ==========================================================================
++ */
++static BOOLEAN PeerMeasureReqSanity(
++ IN PRTMP_ADAPTER pAd,
++ IN VOID *pMsg,
++ IN ULONG MsgLen,
++ OUT PUINT8 pDialogToken,
++ OUT PMEASURE_REQ_INFO pMeasureReqInfo)
++{
++ PFRAME_802_11 Fr = (PFRAME_802_11)pMsg;
++ PUCHAR pFramePtr = Fr->Octet;
++ BOOLEAN result = FALSE;
++ PEID_STRUCT eid_ptr;
++ PUCHAR ptr;
++ UINT64 MeasureStartTime;
++ UINT16 MeasureDuration;
++
++ // skip 802.11 header.
++ MsgLen -= sizeof(HEADER_802_11);
++
++ // skip category and action code.
++ pFramePtr += 2;
++ MsgLen -= 2;
++
++ if (pMeasureReqInfo == NULL)
++ return result;
++
++ NdisMoveMemory(pDialogToken, pFramePtr, 1);
++ pFramePtr += 1;
++ MsgLen -= 1;
++
++ eid_ptr = (PEID_STRUCT)pFramePtr;
++ while (((UCHAR*)eid_ptr + eid_ptr->Len + 1) < ((PUCHAR)pFramePtr + MsgLen))
++ {
++ switch(eid_ptr->Eid)
++ {
++ case IE_MEASUREMENT_REQUEST:
++ NdisMoveMemory(&pMeasureReqInfo->Token, eid_ptr->Octet, 1);
++ NdisMoveMemory(&pMeasureReqInfo->ReqMode.word, eid_ptr->Octet + 1, 1);
++ NdisMoveMemory(&pMeasureReqInfo->ReqType, eid_ptr->Octet + 2, 1);
++ ptr = eid_ptr->Octet + 3;
++ NdisMoveMemory(&pMeasureReqInfo->MeasureReq.ChNum, ptr, 1);
++ NdisMoveMemory(&MeasureStartTime, ptr + 1, 8);
++ pMeasureReqInfo->MeasureReq.MeasureStartTime = SWAP64(MeasureStartTime);
++ NdisMoveMemory(&MeasureDuration, ptr + 9, 2);
++ pMeasureReqInfo->MeasureReq.MeasureDuration = SWAP16(MeasureDuration);
++
++ result = TRUE;
++ break;
++
++ default:
++ break;
++ }
++ eid_ptr = (PEID_STRUCT)((UCHAR*)eid_ptr + 2 + eid_ptr->Len);
++ }
++
++ return result;
++}
++
++/*
++ ==========================================================================
++ Description:
++ Measurement report action frame sanity check.
++
++ Parametrs:
++ 1. MLME message containing the received frame
++ 2. message length.
++ 3. Measurement report infomation buffer.
++ 4. basic report infomation buffer.
++
++ Return : None.
++ ==========================================================================
++ */
++
++/*
++ Measurement Report IE.
++ +----+-----+-------+-------------+--------------+----------------+
++ | ID | Len | Token | Report Mode | Measure Type | Measure Report |
++ +----+-----+-------+-------------+--------------+----------------+
++ 1 1 1 1 1 variable
++
++ Basic Report.
++ +--------+------------+----------+-----+
++ | Ch Num | Start Time | Duration | Map |
++ +--------+------------+----------+-----+
++ 1 8 2 1
++
++ Map Field Bit Format.
++ +-----+---------------+---------------------+-------+------------+----------+
++ | Bss | OFDM Preamble | Unidentified signal | Radar | Unmeasured | Reserved |
++ +-----+---------------+---------------------+-------+------------+----------+
++ 0 1 2 3 4 5-7
++*/
++static BOOLEAN PeerMeasureReportSanity(
++ IN PRTMP_ADAPTER pAd,
++ IN VOID *pMsg,
++ IN ULONG MsgLen,
++ OUT PUINT8 pDialogToken,
++ OUT PMEASURE_REPORT_INFO pMeasureReportInfo,
++ OUT PUINT8 pReportBuf)
++{
++ PFRAME_802_11 Fr = (PFRAME_802_11)pMsg;
++ PUCHAR pFramePtr = Fr->Octet;
++ BOOLEAN result = FALSE;
++ PEID_STRUCT eid_ptr;
++ PUCHAR ptr;
++
++ // skip 802.11 header.
++ MsgLen -= sizeof(HEADER_802_11);
++
++ // skip category and action code.
++ pFramePtr += 2;
++ MsgLen -= 2;
++
++ if (pMeasureReportInfo == NULL)
++ return result;
++
++ NdisMoveMemory(pDialogToken, pFramePtr, 1);
++ pFramePtr += 1;
++ MsgLen -= 1;
++
++ eid_ptr = (PEID_STRUCT)pFramePtr;
++ while (((UCHAR*)eid_ptr + eid_ptr->Len + 1) < ((PUCHAR)pFramePtr + MsgLen))
++ {
++ switch(eid_ptr->Eid)
++ {
++ case IE_MEASUREMENT_REPORT:
++ NdisMoveMemory(&pMeasureReportInfo->Token, eid_ptr->Octet, 1);
++ NdisMoveMemory(&pMeasureReportInfo->ReportMode, eid_ptr->Octet + 1, 1);
++ NdisMoveMemory(&pMeasureReportInfo->ReportType, eid_ptr->Octet + 2, 1);
++ if (pMeasureReportInfo->ReportType == RM_BASIC)
++ {
++ PMEASURE_BASIC_REPORT pReport = (PMEASURE_BASIC_REPORT)pReportBuf;
++ ptr = eid_ptr->Octet + 3;
++ NdisMoveMemory(&pReport->ChNum, ptr, 1);
++ NdisMoveMemory(&pReport->MeasureStartTime, ptr + 1, 8);
++ NdisMoveMemory(&pReport->MeasureDuration, ptr + 9, 2);
++ NdisMoveMemory(&pReport->Map, ptr + 11, 1);
++
++ }
++ else if (pMeasureReportInfo->ReportType == RM_CCA)
++ {
++ PMEASURE_CCA_REPORT pReport = (PMEASURE_CCA_REPORT)pReportBuf;
++ ptr = eid_ptr->Octet + 3;
++ NdisMoveMemory(&pReport->ChNum, ptr, 1);
++ NdisMoveMemory(&pReport->MeasureStartTime, ptr + 1, 8);
++ NdisMoveMemory(&pReport->MeasureDuration, ptr + 9, 2);
++ NdisMoveMemory(&pReport->CCA_Busy_Fraction, ptr + 11, 1);
++
++ }
++ else if (pMeasureReportInfo->ReportType == RM_RPI_HISTOGRAM)
++ {
++ PMEASURE_RPI_REPORT pReport = (PMEASURE_RPI_REPORT)pReportBuf;
++ ptr = eid_ptr->Octet + 3;
++ NdisMoveMemory(&pReport->ChNum, ptr, 1);
++ NdisMoveMemory(&pReport->MeasureStartTime, ptr + 1, 8);
++ NdisMoveMemory(&pReport->MeasureDuration, ptr + 9, 2);
++ NdisMoveMemory(&pReport->RPI_Density, ptr + 11, 8);
++ }
++ result = TRUE;
++ break;
++
++ default:
++ break;
++ }
++ eid_ptr = (PEID_STRUCT)((UCHAR*)eid_ptr + 2 + eid_ptr->Len);
++ }
++
++ return result;
++}
++
++/*
++ ==========================================================================
++ Description:
++ TPC Request action frame sanity check.
++
++ Parametrs:
++ 1. MLME message containing the received frame
++ 2. message length.
++ 3. Dialog Token.
++
++ Return : None.
++ ==========================================================================
++ */
++static BOOLEAN PeerTpcReqSanity(
++ IN PRTMP_ADAPTER pAd,
++ IN VOID *pMsg,
++ IN ULONG MsgLen,
++ OUT PUINT8 pDialogToken)
++{
++ PFRAME_802_11 Fr = (PFRAME_802_11)pMsg;
++ PUCHAR pFramePtr = Fr->Octet;
++ BOOLEAN result = FALSE;
++ PEID_STRUCT eid_ptr;
++
++ MsgLen -= sizeof(HEADER_802_11);
++
++ // skip category and action code.
++ pFramePtr += 2;
++ MsgLen -= 2;
++
++ if (pDialogToken == NULL)
++ return result;
++
++ NdisMoveMemory(pDialogToken, pFramePtr, 1);
++ pFramePtr += 1;
++ MsgLen -= 1;
++
++ eid_ptr = (PEID_STRUCT)pFramePtr;
++ while (((UCHAR*)eid_ptr + eid_ptr->Len + 1) < ((PUCHAR)pFramePtr + MsgLen))
++ {
++ switch(eid_ptr->Eid)
++ {
++ case IE_TPC_REQUEST:
++ result = TRUE;
++ break;
++
++ default:
++ break;
++ }
++ eid_ptr = (PEID_STRUCT)((UCHAR*)eid_ptr + 2 + eid_ptr->Len);
++ }
++
++ return result;
++}
++
++/*
++ ==========================================================================
++ Description:
++ TPC Report action frame sanity check.
++
++ Parametrs:
++ 1. MLME message containing the received frame
++ 2. message length.
++ 3. Dialog Token.
++ 4. TPC Report IE.
++
++ Return : None.
++ ==========================================================================
++ */
++static BOOLEAN PeerTpcRepSanity(
++ IN PRTMP_ADAPTER pAd,
++ IN VOID *pMsg,
++ IN ULONG MsgLen,
++ OUT PUINT8 pDialogToken,
++ OUT PTPC_REPORT_INFO pTpcRepInfo)
++{
++ PFRAME_802_11 Fr = (PFRAME_802_11)pMsg;
++ PUCHAR pFramePtr = Fr->Octet;
++ BOOLEAN result = FALSE;
++ PEID_STRUCT eid_ptr;
++
++ MsgLen -= sizeof(HEADER_802_11);
++
++ // skip category and action code.
++ pFramePtr += 2;
++ MsgLen -= 2;
++
++ if (pDialogToken == NULL)
++ return result;
++
++ NdisMoveMemory(pDialogToken, pFramePtr, 1);
++ pFramePtr += 1;
++ MsgLen -= 1;
++
++ eid_ptr = (PEID_STRUCT)pFramePtr;
++ while (((UCHAR*)eid_ptr + eid_ptr->Len + 1) < ((PUCHAR)pFramePtr + MsgLen))
++ {
++ switch(eid_ptr->Eid)
++ {
++ case IE_TPC_REPORT:
++ NdisMoveMemory(&pTpcRepInfo->TxPwr, eid_ptr->Octet, 1);
++ NdisMoveMemory(&pTpcRepInfo->LinkMargin, eid_ptr->Octet + 1, 1);
++ result = TRUE;
++ break;
++
++ default:
++ break;
++ }
++ eid_ptr = (PEID_STRUCT)((UCHAR*)eid_ptr + 2 + eid_ptr->Len);
++ }
++
++ return result;
++}
++
++/*
++ ==========================================================================
++ Description:
++ Channel Switch Announcement action frame handler.
++
++ Parametrs:
++ Elme - MLME message containing the received frame
++
++ Return : None.
++ ==========================================================================
++ */
++static VOID PeerChSwAnnAction(
++ IN PRTMP_ADAPTER pAd,
++ IN MLME_QUEUE_ELEM *Elem)
++{
++ CH_SW_ANN_INFO ChSwAnnInfo;
++ PFRAME_802_11 pFr = (PFRAME_802_11)Elem->Msg;
++#ifdef CONFIG_STA_SUPPORT
++ UCHAR index = 0, Channel = 0, NewChannel = 0;
++ ULONG Bssidx = 0;
++#endif // CONFIG_STA_SUPPORT //
++
++ NdisZeroMemory(&ChSwAnnInfo, sizeof(CH_SW_ANN_INFO));
++ if (! PeerChSwAnnSanity(pAd, Elem->Msg, Elem->MsgLen, &ChSwAnnInfo))
++ {
++ DBGPRINT(RT_DEBUG_TRACE, ("Invalid Channel Switch Action Frame.\n"));
++ return;
++ }
++
++
++#ifdef CONFIG_STA_SUPPORT
++ if (pAd->OpMode == OPMODE_STA)
++ {
++ Bssidx = BssTableSearch(&pAd->ScanTab, pFr->Hdr.Addr3, pAd->CommonCfg.Channel);
++ if (Bssidx == BSS_NOT_FOUND)
++ {
++ DBGPRINT(RT_DEBUG_TRACE, ("PeerChSwAnnAction - Bssidx is not found\n"));
++ return;
++ }
++
++ DBGPRINT(RT_DEBUG_TRACE, ("\n****Bssidx is %d, Channel = %d\n", index, pAd->ScanTab.BssEntry[Bssidx].Channel));
++ hex_dump("SSID",pAd->ScanTab.BssEntry[Bssidx].Bssid ,6);
++
++ Channel = pAd->CommonCfg.Channel;
++ NewChannel = ChSwAnnInfo.Channel;
++
++ if ((pAd->CommonCfg.bIEEE80211H == 1) && (NewChannel != 0) && (Channel != NewChannel))
++ {
++ // Switching to channel 1 can prevent from rescanning the current channel immediately (by auto reconnection).
++ // In addition, clear the MLME queue and the scan table to discard the RX packets and previous scanning results.
++ AsicSwitchChannel(pAd, 1, FALSE);
++ AsicLockChannel(pAd, 1);
++ LinkDown(pAd, FALSE);
++ MlmeQueueInit(&pAd->Mlme.Queue);
++ BssTableInit(&pAd->ScanTab);
++ RTMPusecDelay(1000000); // use delay to prevent STA do reassoc
++
++ // channel sanity check
++ for (index = 0 ; index < pAd->ChannelListNum; index++)
++ {
++ if (pAd->ChannelList[index].Channel == NewChannel)
++ {
++ pAd->ScanTab.BssEntry[Bssidx].Channel = NewChannel;
++ pAd->CommonCfg.Channel = NewChannel;
++ AsicSwitchChannel(pAd, pAd->CommonCfg.Channel, FALSE);
++ AsicLockChannel(pAd, pAd->CommonCfg.Channel);
++ DBGPRINT(RT_DEBUG_TRACE, ("&&&&&&&&&&&&&&&&PeerChSwAnnAction - STA receive channel switch announcement IE (New Channel =%d)\n", NewChannel));
++ break;
++ }
++ }
++
++ if (index >= pAd->ChannelListNum)
++ {
++ DBGPRINT_ERR(("&&&&&&&&&&&&&&&&&&&&&&&&&&PeerChSwAnnAction(can not find New Channel=%d in ChannelList[%d]\n", pAd->CommonCfg.Channel, pAd->ChannelListNum));
++ }
++ }
++ }
++#endif // CONFIG_STA_SUPPORT //
++
++ return;
++}
++
++
++/*
++ ==========================================================================
++ Description:
++ Measurement Request action frame handler.
++
++ Parametrs:
++ Elme - MLME message containing the received frame
++
++ Return : None.
++ ==========================================================================
++ */
++static VOID PeerMeasureReqAction(
++ IN PRTMP_ADAPTER pAd,
++ IN MLME_QUEUE_ELEM *Elem)
++{
++ PFRAME_802_11 pFr = (PFRAME_802_11)Elem->Msg;
++ UINT8 DialogToken;
++ MEASURE_REQ_INFO MeasureReqInfo;
++ MEASURE_REPORT_MODE ReportMode;
++
++ if(PeerMeasureReqSanity(pAd, Elem->Msg, Elem->MsgLen, &DialogToken, &MeasureReqInfo))
++ {
++ ReportMode.word = 0;
++ ReportMode.field.Incapable = 1;
++ EnqueueMeasurementRep(pAd, pFr->Hdr.Addr2, DialogToken, MeasureReqInfo.Token, ReportMode.word, MeasureReqInfo.ReqType, 0, NULL);
++ }
++
++ return;
++}
++
++/*
++ ==========================================================================
++ Description:
++ Measurement Report action frame handler.
++
++ Parametrs:
++ Elme - MLME message containing the received frame
++
++ Return : None.
++ ==========================================================================
++ */
++static VOID PeerMeasureReportAction(
++ IN PRTMP_ADAPTER pAd,
++ IN MLME_QUEUE_ELEM *Elem)
++{
++ MEASURE_REPORT_INFO MeasureReportInfo;
++ PFRAME_802_11 pFr = (PFRAME_802_11)Elem->Msg;
++ UINT8 DialogToken;
++ PUINT8 pMeasureReportInfo;
++
++// if (pAd->CommonCfg.bIEEE80211H != TRUE)
++// return;
++
++ if ((pMeasureReportInfo = kmalloc(sizeof(MEASURE_RPI_REPORT), GFP_ATOMIC)) == NULL)
++ {
++ DBGPRINT(RT_DEBUG_ERROR, ("%s unable to alloc memory for measure report buffer (size=%d).\n", __FUNCTION__, sizeof(MEASURE_RPI_REPORT)));
++ return;
++ }
++
++ NdisZeroMemory(&MeasureReportInfo, sizeof(MEASURE_REPORT_INFO));
++ NdisZeroMemory(pMeasureReportInfo, sizeof(MEASURE_RPI_REPORT));
++ if (PeerMeasureReportSanity(pAd, Elem->Msg, Elem->MsgLen, &DialogToken, &MeasureReportInfo, pMeasureReportInfo))
++ {
++ do {
++ PMEASURE_REQ_ENTRY pEntry = NULL;
++
++ // Not a autonomous measure report.
++ // check the dialog token field. drop it if the dialog token doesn't match.
++ if ((DialogToken != 0)
++ && ((pEntry = MeasureReqLookUp(pAd, DialogToken)) == NULL))
++ break;
++
++ if (pEntry != NULL)
++ MeasureReqDelete(pAd, pEntry->DialogToken);
++
++ if (MeasureReportInfo.ReportType == RM_BASIC)
++ {
++ PMEASURE_BASIC_REPORT pBasicReport = (PMEASURE_BASIC_REPORT)pMeasureReportInfo;
++ if ((pBasicReport->Map.field.Radar)
++ && (DfsRequirementCheck(pAd, pBasicReport->ChNum) == TRUE))
++ {
++ NotifyChSwAnnToPeerAPs(pAd, pFr->Hdr.Addr1, pFr->Hdr.Addr2, 1, pBasicReport->ChNum);
++ StartDFSProcedure(pAd, pBasicReport->ChNum, 1);
++ }
++ }
++ } while (FALSE);
++ }
++ else
++ DBGPRINT(RT_DEBUG_TRACE, ("Invalid Measurement Report Frame.\n"));
++
++ kfree(pMeasureReportInfo);
++
++ return;
++}
++
++/*
++ ==========================================================================
++ Description:
++ TPC Request action frame handler.
++
++ Parametrs:
++ Elme - MLME message containing the received frame
++
++ Return : None.
++ ==========================================================================
++ */
++static VOID PeerTpcReqAction(
++ IN PRTMP_ADAPTER pAd,
++ IN MLME_QUEUE_ELEM *Elem)
++{
++ PFRAME_802_11 pFr = (PFRAME_802_11)Elem->Msg;
++ PUCHAR pFramePtr = pFr->Octet;
++ UINT8 DialogToken;
++ UINT8 TxPwr = GetCurTxPwr(pAd, Elem->Wcid);
++ UINT8 LinkMargin = 0;
++ CHAR RealRssi;
++
++ // link margin: Ratio of the received signal power to the minimum desired by the station (STA). The
++ // STA may incorporate rate information and channel conditions, including interference, into its computation
++ // of link margin.
++
++ RealRssi = RTMPMaxRssi(pAd, ConvertToRssi(pAd, Elem->Rssi0, RSSI_0),
++ ConvertToRssi(pAd, Elem->Rssi1, RSSI_1),
++ ConvertToRssi(pAd, Elem->Rssi2, RSSI_2));
++
++ // skip Category and action code.
++ pFramePtr += 2;
++
++ // Dialog token.
++ NdisMoveMemory(&DialogToken, pFramePtr, 1);
++
++ LinkMargin = (RealRssi / MIN_RCV_PWR);
++ if (PeerTpcReqSanity(pAd, Elem->Msg, Elem->MsgLen, &DialogToken))
++ EnqueueTPCRep(pAd, pFr->Hdr.Addr2, DialogToken, TxPwr, LinkMargin);
++
++ return;
++}
++
++/*
++ ==========================================================================
++ Description:
++ TPC Report action frame handler.
++
++ Parametrs:
++ Elme - MLME message containing the received frame
++
++ Return : None.
++ ==========================================================================
++ */
++static VOID PeerTpcRepAction(
++ IN PRTMP_ADAPTER pAd,
++ IN MLME_QUEUE_ELEM *Elem)
++{
++ UINT8 DialogToken;
++ TPC_REPORT_INFO TpcRepInfo;
++ PTPC_REQ_ENTRY pEntry = NULL;
++
++ NdisZeroMemory(&TpcRepInfo, sizeof(TPC_REPORT_INFO));
++ if (PeerTpcRepSanity(pAd, Elem->Msg, Elem->MsgLen, &DialogToken, &TpcRepInfo))
++ {
++ if ((pEntry = TpcReqLookUp(pAd, DialogToken)) != NULL)
++ {
++ TpcReqDelete(pAd, pEntry->DialogToken);
++ DBGPRINT(RT_DEBUG_TRACE, ("%s: DialogToken=%x, TxPwr=%d, LinkMargin=%d\n",
++ __FUNCTION__, DialogToken, TpcRepInfo.TxPwr, TpcRepInfo.LinkMargin));
++ }
++ }
++
++ return;
++}
++
++/*
++ ==========================================================================
++ Description:
++ Spectrun action frames Handler such as channel switch annoucement,
++ measurement report, measurement request actions frames.
++
++ Parametrs:
++ Elme - MLME message containing the received frame
++
++ Return : None.
++ ==========================================================================
++ */
++VOID PeerSpectrumAction(
++ IN PRTMP_ADAPTER pAd,
++ IN MLME_QUEUE_ELEM *Elem)
++{
++
++ UCHAR Action = Elem->Msg[LENGTH_802_11+1];
++
++ if (pAd->CommonCfg.bIEEE80211H != TRUE)
++ return;
++
++ switch(Action)
++ {
++ case SPEC_MRQ:
++ // current rt2860 unable do such measure specified in Measurement Request.
++ // reject all measurement request.
++ PeerMeasureReqAction(pAd, Elem);
++ break;
++
++ case SPEC_MRP:
++ PeerMeasureReportAction(pAd, Elem);
++ break;
++
++ case SPEC_TPCRQ:
++ PeerTpcReqAction(pAd, Elem);
++ break;
++
++ case SPEC_TPCRP:
++ PeerTpcRepAction(pAd, Elem);
++ break;
++
++ case SPEC_CHANNEL_SWITCH:
++{
++#ifdef DOT11N_DRAFT3
++ SEC_CHA_OFFSET_IE Secondary;
++ CHA_SWITCH_ANNOUNCE_IE ChannelSwitch;
++
++ // 802.11h only has Channel Switch Announcement IE.
++ RTMPMoveMemory(&ChannelSwitch, &Elem->Msg[LENGTH_802_11+4], sizeof (CHA_SWITCH_ANNOUNCE_IE));
++
++ // 802.11n D3.03 adds secondary channel offset element in the end.
++ if (Elem->MsgLen == (LENGTH_802_11 + 2 + sizeof (CHA_SWITCH_ANNOUNCE_IE) + sizeof (SEC_CHA_OFFSET_IE)))
++ {
++ RTMPMoveMemory(&Secondary, &Elem->Msg[LENGTH_802_11+9], sizeof (SEC_CHA_OFFSET_IE));
++ }
++ else
++ {
++ Secondary.SecondaryChannelOffset = 0;
++ }
++
++ if ((Elem->Msg[LENGTH_802_11+2] == IE_CHANNEL_SWITCH_ANNOUNCEMENT) && (Elem->Msg[LENGTH_802_11+3] == 3))
++ {
++ ChannelSwitchAction(pAd, Elem->Wcid, ChannelSwitch.NewChannel, Secondary.SecondaryChannelOffset);
++ }
++#endif // DOT11N_DRAFT3 //
++}
++ PeerChSwAnnAction(pAd, Elem);
++ break;
++ }
++
++ return;
++}
++
++/*
++ ==========================================================================
++ Description:
++
++ Parametrs:
++
++ Return : None.
++ ==========================================================================
++ */
++INT Set_MeasureReq_Proc(
++ IN PRTMP_ADAPTER pAd,
++ IN PUCHAR arg)
++{
++ UINT Aid = 1;
++ UINT ArgIdx;
++ PUCHAR thisChar;
++
++ MEASURE_REQ_MODE MeasureReqMode;
++ UINT8 MeasureReqToken = RandomByte(pAd);
++ UINT8 MeasureReqType = RM_BASIC;
++ UINT8 MeasureCh = 1;
++
++ ArgIdx = 1;
++ while ((thisChar = strsep((char **)&arg, "-")) != NULL)
++ {
++ switch(ArgIdx)
++ {
++ case 1: // Aid.
++ Aid = simple_strtol(thisChar, 0, 16);
++ break;
++
++ case 2: // Measurement Request Type.
++ MeasureReqType = simple_strtol(thisChar, 0, 16);
++ if (MeasureReqType > 3)
++ {
++ DBGPRINT(RT_DEBUG_ERROR, ("%s: unknow MeasureReqType(%d)\n", __FUNCTION__, MeasureReqType));
++ return TRUE;
++ }
++ break;
++
++ case 3: // Measurement channel.
++ MeasureCh = simple_strtol(thisChar, 0, 16);
++ break;
++ }
++ ArgIdx++;
++ }
++
++ DBGPRINT(RT_DEBUG_TRACE, ("%s::Aid = %d, MeasureReqType=%d MeasureCh=%d\n", __FUNCTION__, Aid, MeasureReqType, MeasureCh));
++ if (!VALID_WCID(Aid))
++ {
++ DBGPRINT(RT_DEBUG_ERROR, ("%s: unknow sta of Aid(%d)\n", __FUNCTION__, Aid));
++ return TRUE;
++ }
++
++ MeasureReqMode.word = 0;
++ MeasureReqMode.field.Enable = 1;
++
++ MeasureReqInsert(pAd, MeasureReqToken);
++
++ EnqueueMeasurementReq(pAd, pAd->MacTab.Content[Aid].Addr,
++ MeasureReqToken, MeasureReqMode.word, MeasureReqType, MeasureCh, 2000);
++
++ return TRUE;
++}
++
++INT Set_TpcReq_Proc(
++ IN PRTMP_ADAPTER pAd,
++ IN PUCHAR arg)
++{
++ UINT Aid;
++
++ UINT8 TpcReqToken = RandomByte(pAd);
++
++ Aid = simple_strtol(arg, 0, 16);
++
++ DBGPRINT(RT_DEBUG_TRACE, ("%s::Aid = %d\n", __FUNCTION__, Aid));
++ if (!VALID_WCID(Aid))
++ {
++ DBGPRINT(RT_DEBUG_ERROR, ("%s: unknow sta of Aid(%d)\n", __FUNCTION__, Aid));
++ return TRUE;
++ }
++
++ TpcReqInsert(pAd, TpcReqToken);
++
++ EnqueueTPCReq(pAd, pAd->MacTab.Content[Aid].Addr, TpcReqToken);
++
++ return TRUE;
++}
++
+--- /dev/null
++++ b/drivers/staging/rt2870/dfs.h
+@@ -0,0 +1,100 @@
++/*
++ *************************************************************************
++ * Ralink Tech Inc.
++ * 5F., No.36, Taiyuan St., Jhubei City,
++ * Hsinchu County 302,
++ * Taiwan, R.O.C.
++ *
++ * (c) Copyright 2002-2007, Ralink Technology, Inc.
++ *
++ * This program is free software; you can redistribute it and/or modify *
++ * it under the terms of the GNU General Public License as published by *
++ * the Free Software Foundation; either version 2 of the License, or *
++ * (at your option) any later version. *
++ * *
++ * This program is distributed in the hope that it will be useful, *
++ * but WITHOUT ANY WARRANTY; without even the implied warranty of *
++ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the *
++ * GNU General Public License for more details. *
++ * *
++ * You should have received a copy of the GNU General Public License *
++ * along with this program; if not, write to the *
++ * Free Software Foundation, Inc., *
++ * 59 Temple Place - Suite 330, Boston, MA 02111-1307, USA. *
++ * *
++ *************************************************************************
++
++ Module Name:
++ dfs.h
++
++ Abstract:
++ Support DFS function.
++
++ Revision History:
++ Who When What
++ -------- ---------- ----------------------------------------------
++ Fonchi 03-12-2007 created
++*/
++
++#define RADAR_PULSE 1
++#define RADAR_WIDTH 2
++
++#define WIDTH_RD_IDLE 0
++#define WIDTH_RD_CHECK 1
++
++
++VOID BbpRadarDetectionStart(
++ IN PRTMP_ADAPTER pAd);
++
++VOID BbpRadarDetectionStop(
++ IN PRTMP_ADAPTER pAd);
++
++VOID RadarDetectionStart(
++ IN PRTMP_ADAPTER pAd,
++ IN BOOLEAN CTS_Protect,
++ IN UINT8 CTSPeriod);
++
++VOID RadarDetectionStop(
++ IN PRTMP_ADAPTER pAd);
++
++VOID RadarDetectPeriodic(
++ IN PRTMP_ADAPTER pAd);
++
++
++BOOLEAN RadarChannelCheck(
++ IN PRTMP_ADAPTER pAd,
++ IN UCHAR Ch);
++
++ULONG JapRadarType(
++ IN PRTMP_ADAPTER pAd);
++
++ULONG RTMPBbpReadRadarDuration(
++ IN PRTMP_ADAPTER pAd);
++
++ULONG RTMPReadRadarDuration(
++ IN PRTMP_ADAPTER pAd);
++
++VOID RTMPCleanRadarDuration(
++ IN PRTMP_ADAPTER pAd);
++
++VOID RTMPPrepareRDCTSFrame(
++ IN PRTMP_ADAPTER pAd,
++ IN PUCHAR pDA,
++ IN ULONG Duration,
++ IN UCHAR RTSRate,
++ IN ULONG CTSBaseAddr,
++ IN UCHAR FrameGap);
++
++VOID RTMPPrepareRadarDetectParams(
++ IN PRTMP_ADAPTER pAd);
++
++
++INT Set_ChMovingTime_Proc(
++ IN PRTMP_ADAPTER pAd,
++ IN PUCHAR arg);
++
++INT Set_LongPulseRadarTh_Proc(
++ IN PRTMP_ADAPTER pAd,
++ IN PUCHAR arg);
++
++
+--- /dev/null
++++ b/drivers/staging/rt2870/Kconfig
+@@ -0,0 +1,6 @@
++config RT2870
++ tristate "Ralink 2870 wireless support"
++ depends on USB && X86 && WLAN_80211
++ ---help---
++ This is an experimental driver for the Ralink 2870 wireless chip.
++
+--- /dev/null
++++ b/drivers/staging/rt2870/leap.h
+@@ -0,0 +1,215 @@
++/*
++ *************************************************************************
++ * Ralink Tech Inc.
++ * 5F., No.36, Taiyuan St., Jhubei City,
++ * Hsinchu County 302,
++ * Taiwan, R.O.C.
++ *
++ * (c) Copyright 2002-2007, Ralink Technology, Inc.
++ *
++ * This program is free software; you can redistribute it and/or modify *
++ * it under the terms of the GNU General Public License as published by *
++ * the Free Software Foundation; either version 2 of the License, or *
++ * (at your option) any later version. *
++ * *
++ * This program is distributed in the hope that it will be useful, *
++ * but WITHOUT ANY WARRANTY; without even the implied warranty of *
++ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the *
++ * GNU General Public License for more details. *
++ * *
++ * You should have received a copy of the GNU General Public License *
++ * along with this program; if not, write to the *
++ * Free Software Foundation, Inc., *
++ * 59 Temple Place - Suite 330, Boston, MA 02111-1307, USA. *
++ * *
++ *************************************************************************
++
++ Module Name:
++ leap.h
++
++ Abstract:
++
++ Revision History:
++ Who When What
++ -------- ---------- ----------------------------------------------
++ Name Date Modification logs
++*/
++#ifndef __LEAP_H__
++#define __LEAP_H__
++
++// Messages for Associate state machine
++#define LEAP_MACHINE_BASE 30
++
++#define LEAP_MSG_REQUEST_IDENTITY 31
++#define LEAP_MSG_REQUEST_LEAP 32
++#define LEAP_MSG_SUCCESS 33
++#define LEAP_MSG_FAILED 34
++#define LEAP_MSG_RESPONSE_LEAP 35
++#define LEAP_MSG_EAPOLKEY 36
++#define LEAP_MSG_UNKNOWN 37
++#define LEAP_MSG 38
++//! assoc state-machine states
++#define LEAP_IDLE 0
++#define LEAP_WAIT_IDENTITY_REQUEST 1
++#define LEAP_WAIT_CHANLLENGE_REQUEST 2
++#define LEAP_WAIT_SUCCESS 3
++#define LEAP_WAIT_CHANLLENGE_RESPONSE 4
++#define LEAP_WAIT_EAPOLKEY 5
++
++#define LEAP_REASON_INVALID_AUTH 0x01
++#define LEAP_REASON_AUTH_TIMEOUT 0x02
++#define LEAP_REASON_CHALLENGE_FROM_AP_FAILED 0x03
++#define LEAP_REASON_CHALLENGE_TO_AP_FAILED 0x04
++
++#define CISCO_AuthModeLEAP 0x80
++#define CISCO_AuthModeLEAPNone 0x00
++#define LEAP_AUTH_TIMEOUT 30000
++#define LEAP_CHALLENGE_RESPONSE_LENGTH 24
++#define LEAP_CHALLENGE_REQUEST_LENGTH 8
++
++typedef struct _LEAP_EAPOL_HEADER_ {
++ UCHAR Version;
++ UCHAR Type;
++ UCHAR Length[2];
++} LEAP_EAPOL_HEADER, *PLEAP_EAPOL_HEADER;
++
++typedef struct _LEAP_EAPOL_PACKET_ {
++ UCHAR Code;
++ UCHAR Identifier;
++ UCHAR Length[2];
++ UCHAR Type;
++} LEAP_EAPOL_PACKET, *PLEAP_EAPOL_PACKET;
++
++typedef struct _LEAP_EAP_CONTENTS_ {
++ UCHAR Version;
++ UCHAR Reserved;
++ UCHAR Length;
++} LEAP_EAP_CONTENTS, *PLEAP_EAP_CONTENTS;
++
++/*** EAPOL key ***/
++typedef struct _EAPOL_KEY_HEADER_ {
++ UCHAR Type;
++ UCHAR Length[2];
++ UCHAR Counter[8];
++ UCHAR IV[16];
++ UCHAR Index;
++ UCHAR Signature[16];
++} EAPOL_KEY_HEADER, *PEAPOL_KEY_HEADER;
++
++BOOLEAN LeapMsgTypeSubst(
++ IN UCHAR EAPType,
++ OUT ULONG *MsgType);
++
++VOID LeapMachinePerformAction(
++ IN PRTMP_ADAPTER pAd,
++ IN STATE_MACHINE *S,
++ IN MLME_QUEUE_ELEM *Elem);
++
++VOID LeapMacHeaderInit(
++ IN PRTMP_ADAPTER pAd,
++ IN OUT PHEADER_802_11 pHdr80211,
++ IN UCHAR wep,
++ IN PUCHAR pAddr3);
++
++VOID LeapStartAction(
++ IN PRTMP_ADAPTER pAd,
++ IN MLME_QUEUE_ELEM *Elem);
++
++VOID LeapIdentityAction(
++ IN PRTMP_ADAPTER pAd,
++ IN MLME_QUEUE_ELEM *Elem);
++
++VOID LeapPeerChallengeAction(
++ IN PRTMP_ADAPTER pAd,
++ IN MLME_QUEUE_ELEM *Elem);
++
++VOID HashPwd(
++ IN PUCHAR pwd,
++ IN INT pwdlen,
++ OUT PUCHAR hash);
++
++VOID PeerChallengeResponse(
++ IN PUCHAR szChallenge,
++ IN PUCHAR smbPasswd,
++ OUT PUCHAR szResponse);
++
++VOID ParityKey(
++ OUT PUCHAR szOut,
++ IN PUCHAR szIn);
++
++VOID DesKey(
++ OUT ULONG k[16][2],
++ IN PUCHAR key,
++ IN INT decrypt);
++
++VOID Des(
++ IN ULONG ks[16][2],
++ OUT UCHAR block[8]);
++
++VOID DesEncrypt(
++ IN PUCHAR szClear,
++ IN PUCHAR szKey,
++ OUT PUCHAR szOut);
++
++VOID LeapNetworkChallengeAction(
++ IN PRTMP_ADAPTER pAd,
++ IN MLME_QUEUE_ELEM *Elem);
++
++VOID LeapNetworkChallengeResponse(
++ IN PRTMP_ADAPTER pAd,
++ IN MLME_QUEUE_ELEM *Elem);
++
++VOID HashpwdHash(
++ IN PUCHAR hash,
++ IN PUCHAR hashhash);
++
++VOID ProcessSessionKey(
++ OUT PUCHAR SessionKey,
++ IN PUCHAR hash2,
++ IN PUCHAR ChallengeToRadius,
++ IN PUCHAR ChallengeResponseFromRadius,
++ IN PUCHAR ChallengeFromRadius,
++ IN PUCHAR ChallengeResponseToRadius);
++
++VOID LeapEapolKeyAction(
++ IN PRTMP_ADAPTER pAd,
++ IN MLME_QUEUE_ELEM *Elem);
++
++VOID RogueApTableInit(
++ IN ROGUEAP_TABLE *Tab);
++
++ULONG RogueApTableSearch(
++ IN ROGUEAP_TABLE *Tab,
++ IN PUCHAR pAddr);
++
++VOID RogueApEntrySet(
++ IN PRTMP_ADAPTER pAd,
++ OUT ROGUEAP_ENTRY *pRogueAp,
++ IN PUCHAR pAddr,
++ IN UCHAR FaileCode);
++
++ULONG RogueApTableSetEntry(
++ IN PRTMP_ADAPTER pAd,
++ OUT ROGUEAP_TABLE *Tab,
++ IN PUCHAR pAddr,
++ IN UCHAR FaileCode);
++
++VOID RogueApTableDeleteEntry(
++ IN OUT ROGUEAP_TABLE *Tab,
++ IN PUCHAR pAddr);
++
++VOID LeapAuthTimeout(
++ IN PVOID SystemSpecific1,
++ IN PVOID FunctionContext,
++ IN PVOID SystemSpecific2,
++ IN PVOID SystemSpecific3);
++
++VOID LeapSendRogueAPReport(
++ IN PRTMP_ADAPTER pAd);
++
++BOOLEAN CCKMAssocRspSanity(
++ IN PRTMP_ADAPTER pAd,
++ IN VOID *Msg,
++ IN ULONG MsgLen);
++
++#endif // __LEAP_H__
+--- /dev/null
++++ b/drivers/staging/rt2870/link_list.h
+@@ -0,0 +1,134 @@
++/*
++ *************************************************************************
++ * Ralink Tech Inc.
++ * 5F., No.36, Taiyuan St., Jhubei City,
++ * Hsinchu County 302,
++ * Taiwan, R.O.C.
++ *
++ * (c) Copyright 2002-2007, Ralink Technology, Inc.
++ *
++ * This program is free software; you can redistribute it and/or modify *
++ * it under the terms of the GNU General Public License as published by *
++ * the Free Software Foundation; either version 2 of the License, or *
++ * (at your option) any later version. *
++ * *
++ * This program is distributed in the hope that it will be useful, *
++ * but WITHOUT ANY WARRANTY; without even the implied warranty of *
++ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the *
++ * GNU General Public License for more details. *
++ * *
++ * You should have received a copy of the GNU General Public License *
++ * along with this program; if not, write to the *
++ * Free Software Foundation, Inc., *
++ * 59 Temple Place - Suite 330, Boston, MA 02111-1307, USA. *
++ * *
++ *************************************************************************
++ */
++
++#ifndef __LINK_LIST_H__
++#define __LINK_LIST_H__
++
++typedef struct _LIST_ENTRY
++{
++ struct _LIST_ENTRY *pNext;
++} LIST_ENTRY, *PLIST_ENTRY;
++
++typedef struct _LIST_HEADR
++{
++ PLIST_ENTRY pHead;
++ PLIST_ENTRY pTail;
++ UCHAR size;
++} LIST_HEADER, *PLIST_HEADER;
++
++static inline VOID initList(
++ IN PLIST_HEADER pList)
++{
++ pList->pHead = pList->pTail = NULL;
++ pList->size = 0;
++ return;
++}
++
++static inline VOID insertTailList(
++ IN PLIST_HEADER pList,
++ IN PLIST_ENTRY pEntry)
++{
++ pEntry->pNext = NULL;
++ if (pList->pTail)
++ pList->pTail->pNext = pEntry;
++ else
++ pList->pHead = pEntry;
++ pList->pTail = pEntry;
++ pList->size++;
++
++ return;
++}
++
++static inline PLIST_ENTRY removeHeadList(
++ IN PLIST_HEADER pList)
++{
++ PLIST_ENTRY pNext;
++ PLIST_ENTRY pEntry;
++
++ pEntry = pList->pHead;
++ if (pList->pHead != NULL)
++ {
++ pNext = pList->pHead->pNext;
++ pList->pHead = pNext;
++ if (pNext == NULL)
++ pList->pTail = NULL;
++ pList->size--;
++ }
++ return pEntry;
++}
++
++static inline int getListSize(
++ IN PLIST_HEADER pList)
++{
++ return pList->size;
++}
++
++static inline PLIST_ENTRY delEntryList(
++ IN PLIST_HEADER pList,
++ IN PLIST_ENTRY pEntry)
++{
++ PLIST_ENTRY pCurEntry;
++ PLIST_ENTRY pPrvEntry;
++
++ if(pList->pHead == NULL)
++ return NULL;
++
++ if(pEntry == pList->pHead)
++ {
++ pCurEntry = pList->pHead;
++ pList->pHead = pCurEntry->pNext;
++
++ if(pList->pHead == NULL)
++ pList->pTail = NULL;
++
++ pList->size--;
++ return pCurEntry;
++ }
++
++ pPrvEntry = pList->pHead;
++ pCurEntry = pPrvEntry->pNext;
++ while(pCurEntry != NULL)
++ {
++ if (pEntry == pCurEntry)
++ {
++ pPrvEntry->pNext = pCurEntry->pNext;
++
++ if(pEntry == pList->pTail)
++ pList->pTail = pPrvEntry;
++
++ pList->size--;
++ break;
++ }
++ pPrvEntry = pCurEntry;
++ pCurEntry = pPrvEntry->pNext;
++ }
++
++ return pCurEntry;
++}
++
++#endif // ___LINK_LIST_H__ //
++
+--- /dev/null
++++ b/drivers/staging/rt2870/Makefile
+@@ -0,0 +1,47 @@
++obj-$(CONFIG_RT2870) += rt2870sta.o
++
++# TODO: all of these should be removed
++EXTRA_CFLAGS += -DLINUX -DAGGREGATION_SUPPORT -DPIGGYBACK_SUPPORT -DWMM_SUPPORT
++EXTRA_CFLAGS += -DRT2870
++EXTRA_CFLAGS += -DCONFIG_STA_SUPPORT
++EXTRA_CFLAGS += -DDBG
++EXTRA_CFLAGS += -DDOT11_N_SUPPORT
++EXTRA_CFLAGS += -DWPA_SUPPLICANT_SUPPORT
++EXTRA_CFLAGS += -DNATIVE_WPA_SUPPLICANT_SUPPORT
++
++rt2870sta-objs := \
++ common/md5.o \
++ common/mlme.o \
++ common/rtmp_wep.o \
++ common/action.o \
++ common/cmm_data.o \
++ common/rtmp_init.o \
++ common/rtmp_tkip.o \
++ common/cmm_sync.o \
++ common/eeprom.o \
++ common/cmm_sanity.o \
++ common/cmm_info.o \
++ common/cmm_wpa.o \
++ common/dfs.o \
++ common/spectrum.o \
++ sta/assoc.o \
++ sta/aironet.o \
++ sta/auth.o \
++ sta/auth_rsp.o \
++ sta/sync.o \
++ sta/sanity.o \
++ sta/rtmp_data.o \
++ sta/connect.o \
++ sta/wpa.o \
++ rt_linux.o \
++ rt_profile.o \
++ rt_main_dev.o \
++ sta_ioctl.o \
++ common/ba_action.o \
++ 2870_main_dev.o \
++ common/2870_rtmp_init.o \
++ common/rtusb_io.o \
++ common/rtusb_bulk.o \
++ common/rtusb_data.o \
++ common/cmm_data_2870.o
++
+--- /dev/null
++++ b/drivers/staging/rt2870/md4.h
+@@ -0,0 +1,42 @@
++/*
++ *************************************************************************
++ * Ralink Tech Inc.
++ * 5F., No.36, Taiyuan St., Jhubei City,
++ * Hsinchu County 302,
++ * Taiwan, R.O.C.
++ *
++ * (c) Copyright 2002-2007, Ralink Technology, Inc.
++ *
++ * This program is free software; you can redistribute it and/or modify *
++ * it under the terms of the GNU General Public License as published by *
++ * the Free Software Foundation; either version 2 of the License, or *
++ * (at your option) any later version. *
++ * *
++ * This program is distributed in the hope that it will be useful, *
++ * but WITHOUT ANY WARRANTY; without even the implied warranty of *
++ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the *
++ * GNU General Public License for more details. *
++ * *
++ * You should have received a copy of the GNU General Public License *
++ * along with this program; if not, write to the *
++ * Free Software Foundation, Inc., *
++ * 59 Temple Place - Suite 330, Boston, MA 02111-1307, USA. *
++ * *
++ *************************************************************************
++ */
++
++#ifndef __MD4_H__
++#define __MD4_H__
++
++/* MD4 context. */
++typedef struct _MD4_CTX_ {
++ ULONG state[4]; /* state (ABCD) */
++ ULONG count[2]; /* number of bits, modulo 2^64 (lsb first) */
++ UCHAR buffer[64]; /* input buffer */
++} MD4_CTX;
++
++VOID MD4Init (MD4_CTX *);
++VOID MD4Update (MD4_CTX *, PUCHAR, UINT);
++VOID MD4Final (UCHAR [16], MD4_CTX *);
++
++#endif //__MD4_H__
+\ No newline at end of file
+--- /dev/null
++++ b/drivers/staging/rt2870/md5.h
+@@ -0,0 +1,107 @@
++/*
++ *************************************************************************
++ * Ralink Tech Inc.
++ * 5F., No.36, Taiyuan St., Jhubei City,
++ * Hsinchu County 302,
++ * Taiwan, R.O.C.
++ *
++ * (c) Copyright 2002-2007, Ralink Technology, Inc.
++ *
++ * This program is free software; you can redistribute it and/or modify *
++ * it under the terms of the GNU General Public License as published by *
++ * the Free Software Foundation; either version 2 of the License, or *
++ * (at your option) any later version. *
++ * *
++ * This program is distributed in the hope that it will be useful, *
++ * but WITHOUT ANY WARRANTY; without even the implied warranty of *
++ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the *
++ * GNU General Public License for more details. *
++ * *
++ * You should have received a copy of the GNU General Public License *
++ * along with this program; if not, write to the *
++ * Free Software Foundation, Inc., *
++ * 59 Temple Place - Suite 330, Boston, MA 02111-1307, USA. *
++ * *
++ *************************************************************************
++
++ Module Name:
++ md5.h
++
++ Abstract:
++
++ Revision History:
++ Who When What
++ -------- ---------- ----------------------------------------------
++ Name Date Modification logs
++ jan 10-28-03 Initial
++ Rita 11-23-04 Modify MD5 and SHA-1
++*/
++
++#ifndef uint8
++#define uint8 unsigned char
++#endif
++
++#ifndef uint32
++#define uint32 unsigned long int
++#endif
++
++
++#ifndef __MD5_H__
++#define __MD5_H__
++
++#define MD5_MAC_LEN 16
++
++typedef struct _MD5_CTX {
++ UINT32 Buf[4]; // buffers of four states
++ UCHAR Input[64]; // input message
++ UINT32 LenInBitCount[2]; // length counter for input message, 0 up to 64 bits
++} MD5_CTX;
++
++VOID MD5Init(MD5_CTX *pCtx);
++VOID MD5Update(MD5_CTX *pCtx, UCHAR *pData, UINT32 LenInBytes);
++VOID MD5Final(UCHAR Digest[16], MD5_CTX *pCtx);
++VOID MD5Transform(UINT32 Buf[4], UINT32 Mes[16]);
++
++void md5_mac(u8 *key, size_t key_len, u8 *data, size_t data_len, u8 *mac);
++void hmac_md5(u8 *key, size_t key_len, u8 *data, size_t data_len, u8 *mac);
++
++//
++// SHA context
++//
++typedef struct _SHA_CTX
++{
++ UINT32 Buf[5]; // buffers of five states
++ UCHAR Input[80]; // input message
++ UINT32 LenInBitCount[2]; // length counter for input message, 0 up to 64 bits
++
++} SHA_CTX;
++
++VOID SHAInit(SHA_CTX *pCtx);
++UCHAR SHAUpdate(SHA_CTX *pCtx, UCHAR *pData, UINT32 LenInBytes);
++VOID SHAFinal(SHA_CTX *pCtx, UCHAR Digest[20]);
++VOID SHATransform(UINT32 Buf[5], UINT32 Mes[20]);
++
++#define SHA_DIGEST_LEN 20
++#endif // __MD5_H__
++
++/******************************************************************************/
++#ifndef _AES_H
++#define _AES_H
++
++typedef struct
++{
++ uint32 erk[64]; /* encryption round keys */
++ uint32 drk[64]; /* decryption round keys */
++ int nr; /* number of rounds */
++}
++aes_context;
++
++int rtmp_aes_set_key( aes_context *ctx, uint8 *key, int nbits );
++void rtmp_aes_encrypt( aes_context *ctx, uint8 input[16], uint8 output[16] );
++void rtmp_aes_decrypt( aes_context *ctx, uint8 input[16], uint8 output[16] );
++
++void F(char *password, unsigned char *ssid, int ssidlength, int iterations, int count, unsigned char *output);
++int PasswordHash(char *password, unsigned char *ssid, int ssidlength, unsigned char *output);
++
++#endif /* aes.h */
++
+--- /dev/null
++++ b/drivers/staging/rt2870/mlme.h
+@@ -0,0 +1,1471 @@
++/*
++ *************************************************************************
++ * Ralink Tech Inc.
++ * 5F., No.36, Taiyuan St., Jhubei City,
++ * Hsinchu County 302,
++ * Taiwan, R.O.C.
++ *
++ * (c) Copyright 2002-2007, Ralink Technology, Inc.
++ *
++ * This program is free software; you can redistribute it and/or modify *
++ * it under the terms of the GNU General Public License as published by *
++ * the Free Software Foundation; either version 2 of the License, or *
++ * (at your option) any later version. *
++ * *
++ * This program is distributed in the hope that it will be useful, *
++ * but WITHOUT ANY WARRANTY; without even the implied warranty of *
++ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the *
++ * GNU General Public License for more details. *
++ * *
++ * You should have received a copy of the GNU General Public License *
++ * along with this program; if not, write to the *
++ * Free Software Foundation, Inc., *
++ * 59 Temple Place - Suite 330, Boston, MA 02111-1307, USA. *
++ * *
++ *************************************************************************
++
++ Module Name:
++ mlme.h
++
++ Abstract:
++
++ Revision History:
++ Who When What
++ -------- ---------- ----------------------------------------------
++ John Chang 2003-08-28 Created
++ John Chang 2004-09-06 modified for RT2600
++
++*/
++#ifndef __MLME_H__
++#define __MLME_H__
++
++//extern UCHAR BROADCAST_ADDR[];
++
++// maximum supported capability information -
++// ESS, IBSS, Privacy, Short Preamble, Spectrum mgmt, Short Slot
++#define SUPPORTED_CAPABILITY_INFO 0x0533
++
++#define END_OF_ARGS -1
++#define LFSR_MASK 0x80000057
++#define MLME_TASK_EXEC_INTV 100/*200*/ //
++#define LEAD_TIME 5
++#define MLME_TASK_EXEC_MULTIPLE 10 /*5*/ // MLME_TASK_EXEC_MULTIPLE * MLME_TASK_EXEC_INTV = 1 sec
++#define REORDER_EXEC_INTV 100 // 0.1 sec
++//#define TBTT_PRELOAD_TIME 384 // usec. LomgPreamble + 24-byte at 1Mbps
++
++// The definition of Radar detection duration region
++#define CE 0
++#define FCC 1
++#define JAP 2
++#define JAP_W53 3
++#define JAP_W56 4
++#define MAX_RD_REGION 5
++
++#ifdef NDIS51_MINIPORT
++#define BEACON_LOST_TIME 4000 // 2048 msec = 2 sec
++#else
++#define BEACON_LOST_TIME 4 * OS_HZ // 2048 msec = 2 sec
++#endif
++
++#define DLS_TIMEOUT 1200 // unit: msec
++#define AUTH_TIMEOUT 300 // unit: msec
++#define ASSOC_TIMEOUT 300 // unit: msec
++#define JOIN_TIMEOUT 2 * OS_HZ // unit: msec
++#define SHORT_CHANNEL_TIME 90 // unit: msec
++#define MIN_CHANNEL_TIME 110 // unit: msec, for dual band scan
++#define MAX_CHANNEL_TIME 140 // unit: msec, for single band scan
++#define FAST_ACTIVE_SCAN_TIME 30 // Active scan waiting for probe response time
++#define CW_MIN_IN_BITS 4 // actual CwMin = 2^CW_MIN_IN_BITS - 1
++
++
++#ifdef CONFIG_STA_SUPPORT
++#ifndef CONFIG_AP_SUPPORT
++#define CW_MAX_IN_BITS 10 // actual CwMax = 2^CW_MAX_IN_BITS - 1
++#endif
++#endif // CONFIG_STA_SUPPORT //
++
++#ifdef CONFIG_APSTA_MIXED_SUPPORT
++extern UINT32 CW_MAX_IN_BITS;
++#endif // CONFIG_APSTA_MIXED_SUPPORT //
++
++// Note: RSSI_TO_DBM_OFFSET has been changed to variable for new RF (2004-0720).
++// SHould not refer to this constant anymore
++//#define RSSI_TO_DBM_OFFSET 120 // for RT2530 RSSI-115 = dBm
++#define RSSI_FOR_MID_TX_POWER -55 // -55 db is considered mid-distance
++#define RSSI_FOR_LOW_TX_POWER -45 // -45 db is considered very short distance and
++ // eligible to use a lower TX power
++#define RSSI_FOR_LOWEST_TX_POWER -30
++//#define MID_TX_POWER_DELTA 0 // 0 db from full TX power upon mid-distance to AP
++#define LOW_TX_POWER_DELTA 6 // -3 db from full TX power upon very short distance. 1 grade is 0.5 db
++#define LOWEST_TX_POWER_DELTA 16 // -8 db from full TX power upon shortest distance. 1 grade is 0.5 db
++
++#define RSSI_TRIGGERED_UPON_BELOW_THRESHOLD 0
++#define RSSI_TRIGGERED_UPON_EXCCEED_THRESHOLD 1
++#define RSSI_THRESHOLD_FOR_ROAMING 25
++#define RSSI_DELTA 5
++
++// Channel Quality Indication
++#define CQI_IS_GOOD(cqi) ((cqi) >= 50)
++//#define CQI_IS_FAIR(cqi) (((cqi) >= 20) && ((cqi) < 50))
++#define CQI_IS_POOR(cqi) (cqi < 50) //(((cqi) >= 5) && ((cqi) < 20))
++#define CQI_IS_BAD(cqi) (cqi < 5)
++#define CQI_IS_DEAD(cqi) (cqi == 0)
++
++// weighting factor to calculate Channel quality, total should be 100%
++#define RSSI_WEIGHTING 50
++#define TX_WEIGHTING 30
++#define RX_WEIGHTING 20
++
++//#define PEER_KEY_NOT_USED 0
++//#define PEER_KEY_64_BIT 64
++//#define PEER_KEY_128_BIT 128
++
++//#define PEER_KEY_64BIT_LEN 8
++//#define PEER_KEY_128BIT_LEN 16
++
++#define BSS_NOT_FOUND 0xFFFFFFFF
++
++
++#ifdef CONFIG_STA_SUPPORT
++#define MAX_LEN_OF_MLME_QUEUE 40 //10
++#endif // CONFIG_STA_SUPPORT //
++
++#define SCAN_PASSIVE 18 // scan with no probe request, only wait beacon and probe response
++#define SCAN_ACTIVE 19 // scan with probe request, and wait beacon and probe response
++#define SCAN_CISCO_PASSIVE 20 // Single channel passive scan
++#define SCAN_CISCO_ACTIVE 21 // Single channel active scan
++#define SCAN_CISCO_NOISE 22 // Single channel passive scan for noise histogram collection
++#define SCAN_CISCO_CHANNEL_LOAD 23 // Single channel passive scan for channel load collection
++#define FAST_SCAN_ACTIVE 24 // scan with probe request, and wait beacon and probe response
++
++#ifdef DOT11N_DRAFT3
++#define SCAN_2040_BSS_COEXIST 26
++#endif // DOT11N_DRAFT3 //
++
++//#define BSS_TABLE_EMPTY(x) ((x).BssNr == 0)
++#define MAC_ADDR_IS_GROUP(Addr) (((Addr[0]) & 0x01))
++#define MAC_ADDR_HASH(Addr) (Addr[0] ^ Addr[1] ^ Addr[2] ^ Addr[3] ^ Addr[4] ^ Addr[5])
++#define MAC_ADDR_HASH_INDEX(Addr) (MAC_ADDR_HASH(Addr) % HASH_TABLE_SIZE)
++#define TID_MAC_HASH(Addr,TID) (TID^Addr[0] ^ Addr[1] ^ Addr[2] ^ Addr[3] ^ Addr[4] ^ Addr[5])
++#define TID_MAC_HASH_INDEX(Addr,TID) (TID_MAC_HASH(Addr,TID) % HASH_TABLE_SIZE)
++
++// LED Control
++// assoiation ON. one LED ON. another blinking when TX, OFF when idle
++// no association, both LED off
++#define ASIC_LED_ACT_ON(pAd) RTMP_IO_WRITE32(pAd, MAC_CSR14, 0x00031e46)
++#define ASIC_LED_ACT_OFF(pAd) RTMP_IO_WRITE32(pAd, MAC_CSR14, 0x00001e46)
++
++// bit definition of the 2-byte pBEACON->Capability field
++#define CAP_IS_ESS_ON(x) (((x) & 0x0001) != 0)
++#define CAP_IS_IBSS_ON(x) (((x) & 0x0002) != 0)
++#define CAP_IS_CF_POLLABLE_ON(x) (((x) & 0x0004) != 0)
++#define CAP_IS_CF_POLL_REQ_ON(x) (((x) & 0x0008) != 0)
++#define CAP_IS_PRIVACY_ON(x) (((x) & 0x0010) != 0)
++#define CAP_IS_SHORT_PREAMBLE_ON(x) (((x) & 0x0020) != 0)
++#define CAP_IS_PBCC_ON(x) (((x) & 0x0040) != 0)
++#define CAP_IS_AGILITY_ON(x) (((x) & 0x0080) != 0)
++#define CAP_IS_SPECTRUM_MGMT(x) (((x) & 0x0100) != 0) // 802.11e d9
++#define CAP_IS_QOS(x) (((x) & 0x0200) != 0) // 802.11e d9
++#define CAP_IS_SHORT_SLOT(x) (((x) & 0x0400) != 0)
++#define CAP_IS_APSD(x) (((x) & 0x0800) != 0) // 802.11e d9
++#define CAP_IS_IMMED_BA(x) (((x) & 0x1000) != 0) // 802.11e d9
++#define CAP_IS_DSSS_OFDM(x) (((x) & 0x2000) != 0)
++#define CAP_IS_DELAY_BA(x) (((x) & 0x4000) != 0) // 802.11e d9
++
++#define CAP_GENERATE(ess,ibss,priv,s_pre,s_slot,spectrum) (((ess) ? 0x0001 : 0x0000) | ((ibss) ? 0x0002 : 0x0000) | ((priv) ? 0x0010 : 0x0000) | ((s_pre) ? 0x0020 : 0x0000) | ((s_slot) ? 0x0400 : 0x0000) | ((spectrum) ? 0x0100 : 0x0000))
++
++//#define STA_QOS_CAPABILITY 0 // 1-byte. see 802.11e d9.0 for bit definition
++
++#define ERP_IS_NON_ERP_PRESENT(x) (((x) & 0x01) != 0) // 802.11g
++#define ERP_IS_USE_PROTECTION(x) (((x) & 0x02) != 0) // 802.11g
++#define ERP_IS_USE_BARKER_PREAMBLE(x) (((x) & 0x04) != 0) // 802.11g
++
++#define DRS_TX_QUALITY_WORST_BOUND 8// 3 // just test by gary
++#define DRS_PENALTY 8
++
++#define BA_NOTUSE 2
++//BA Policy subfiled value in ADDBA frame
++#define IMMED_BA 1
++#define DELAY_BA 0
++
++// BA Initiator subfield in DELBA frame
++#define ORIGINATOR 1
++#define RECIPIENT 0
++
++// ADDBA Status Code
++#define ADDBA_RESULTCODE_SUCCESS 0
++#define ADDBA_RESULTCODE_REFUSED 37
++#define ADDBA_RESULTCODE_INVALID_PARAMETERS 38
++
++// DELBA Reason Code
++#define DELBA_REASONCODE_QSTA_LEAVING 36
++#define DELBA_REASONCODE_END_BA 37
++#define DELBA_REASONCODE_UNKNOWN_BA 38
++#define DELBA_REASONCODE_TIMEOUT 39
++
++// reset all OneSecTx counters
++#define RESET_ONE_SEC_TX_CNT(__pEntry) \
++if (((__pEntry)) != NULL) \
++{ \
++ (__pEntry)->OneSecTxRetryOkCount = 0; \
++ (__pEntry)->OneSecTxFailCount = 0; \
++ (__pEntry)->OneSecTxNoRetryOkCount = 0; \
++}
++
++//
++// 802.11 frame formats
++//
++// HT Capability INFO field in HT Cap IE .
++typedef struct PACKED {
++#ifdef RT_BIG_ENDIAN
++ USHORT LSIGTxopProSup:1;
++ USHORT Forty_Mhz_Intolerant:1;
++ USHORT PSMP:1;
++ USHORT CCKmodein40:1;
++ USHORT AMsduSize:1;
++ USHORT DelayedBA:1; //rt2860c not support
++ USHORT RxSTBC:2;
++ USHORT TxSTBC:1;
++ USHORT ShortGIfor40:1; //for40MHz
++ USHORT ShortGIfor20:1;
++ USHORT GF:1; //green field
++ USHORT MimoPs:2;//momi power safe
++ USHORT ChannelWidth:1;
++ USHORT AdvCoding:1;
++#else
++ USHORT AdvCoding:1;
++ USHORT ChannelWidth:1;
++ USHORT MimoPs:2;//momi power safe
++ USHORT GF:1; //green field
++ USHORT ShortGIfor20:1;
++ USHORT ShortGIfor40:1; //for40MHz
++ USHORT TxSTBC:1;
++ USHORT RxSTBC:2;
++ USHORT DelayedBA:1; //rt2860c not support
++ USHORT AMsduSize:1; // only support as zero
++ USHORT CCKmodein40:1;
++ USHORT PSMP:1;
++ USHORT Forty_Mhz_Intolerant:1;
++ USHORT LSIGTxopProSup:1;
++#endif /* !RT_BIG_ENDIAN */
++} HT_CAP_INFO, *PHT_CAP_INFO;
++
++// HT Capability INFO field in HT Cap IE .
++typedef struct PACKED {
++#ifdef RT_BIG_ENDIAN
++ UCHAR rsv:3;//momi power safe
++ UCHAR MpduDensity:3;
++ UCHAR MaxRAmpduFactor:2;
++#else
++ UCHAR MaxRAmpduFactor:2;
++ UCHAR MpduDensity:3;
++ UCHAR rsv:3;//momi power safe
++#endif /* !RT_BIG_ENDIAN */
++} HT_CAP_PARM, *PHT_CAP_PARM;
++
++// HT Capability INFO field in HT Cap IE .
++typedef struct PACKED {
++ UCHAR MCSSet[10];
++ UCHAR SupRate[2]; // unit : 1Mbps
++#ifdef RT_BIG_ENDIAN
++ UCHAR rsv:3;
++ UCHAR MpduDensity:1;
++ UCHAR TxStream:2;
++ UCHAR TxRxNotEqual:1;
++ UCHAR TxMCSSetDefined:1;
++#else
++ UCHAR TxMCSSetDefined:1;
++ UCHAR TxRxNotEqual:1;
++ UCHAR TxStream:2;
++ UCHAR MpduDensity:1;
++ UCHAR rsv:3;
++#endif // RT_BIG_ENDIAN //
++ UCHAR rsv3[3];
++} HT_MCS_SET, *PHT_MCS_SET;
++
++// HT Capability INFO field in HT Cap IE .
++typedef struct PACKED {
++#ifdef RT_BIG_ENDIAN
++ USHORT rsv2:4;
++ USHORT RDGSupport:1; //reverse Direction Grant support
++ USHORT PlusHTC:1; //+HTC control field support
++ USHORT MCSFeedback:2; //0:no MCS feedback, 2:unsolicited MCS feedback, 3:Full MCS feedback, 1:rsv.
++ USHORT rsv:5;//momi power safe
++ USHORT TranTime:2;
++ USHORT Pco:1;
++#else
++ USHORT Pco:1;
++ USHORT TranTime:2;
++ USHORT rsv:5;//momi power safe
++ USHORT MCSFeedback:2; //0:no MCS feedback, 2:unsolicited MCS feedback, 3:Full MCS feedback, 1:rsv.
++ USHORT PlusHTC:1; //+HTC control field support
++ USHORT RDGSupport:1; //reverse Direction Grant support
++ USHORT rsv2:4;
++#endif /* RT_BIG_ENDIAN */
++} EXT_HT_CAP_INFO, *PEXT_HT_CAP_INFO;
++
++// HT Beamforming field in HT Cap IE .
++typedef struct PACKED _HT_BF_CAP{
++#ifdef RT_BIG_ENDIAN
++ ULONG rsv:3;
++ ULONG ChanEstimation:2;
++ ULONG CSIRowBFSup:2;
++ ULONG ComSteerBFAntSup:2;
++ ULONG NoComSteerBFAntSup:2;
++ ULONG CSIBFAntSup:2;
++ ULONG MinGrouping:2;
++ ULONG ExpComBF:2;
++ ULONG ExpNoComBF:2;
++ ULONG ExpCSIFbk:2;
++ ULONG ExpComSteerCapable:1;
++ ULONG ExpNoComSteerCapable:1;
++ ULONG ExpCSICapable:1;
++ ULONG Calibration:2;
++ ULONG ImpTxBFCapable:1;
++ ULONG TxNDPCapable:1;
++ ULONG RxNDPCapable:1;
++ ULONG TxSoundCapable:1;
++ ULONG RxSoundCapable:1;
++ ULONG TxBFRecCapable:1;
++#else
++ ULONG TxBFRecCapable:1;
++ ULONG RxSoundCapable:1;
++ ULONG TxSoundCapable:1;
++ ULONG RxNDPCapable:1;
++ ULONG TxNDPCapable:1;
++ ULONG ImpTxBFCapable:1;
++ ULONG Calibration:2;
++ ULONG ExpCSICapable:1;
++ ULONG ExpNoComSteerCapable:1;
++ ULONG ExpComSteerCapable:1;
++ ULONG ExpCSIFbk:2;
++ ULONG ExpNoComBF:2;
++ ULONG ExpComBF:2;
++ ULONG MinGrouping:2;
++ ULONG CSIBFAntSup:2;
++ ULONG NoComSteerBFAntSup:2;
++ ULONG ComSteerBFAntSup:2;
++ ULONG CSIRowBFSup:2;
++ ULONG ChanEstimation:2;
++ ULONG rsv:3;
++#endif // RT_BIG_ENDIAN //
++} HT_BF_CAP, *PHT_BF_CAP;
++
++// HT antenna selection field in HT Cap IE .
++typedef struct PACKED _HT_AS_CAP{
++#ifdef RT_BIG_ENDIAN
++ UCHAR rsv:1;
++ UCHAR TxSoundPPDU:1;
++ UCHAR RxASel:1;
++ UCHAR AntIndFbk:1;
++ UCHAR ExpCSIFbk:1;
++ UCHAR AntIndFbkTxASEL:1;
++ UCHAR ExpCSIFbkTxASEL:1;
++ UCHAR AntSelect:1;
++#else
++ UCHAR AntSelect:1;
++ UCHAR ExpCSIFbkTxASEL:1;
++ UCHAR AntIndFbkTxASEL:1;
++ UCHAR ExpCSIFbk:1;
++ UCHAR AntIndFbk:1;
++ UCHAR RxASel:1;
++ UCHAR TxSoundPPDU:1;
++ UCHAR rsv:1;
++#endif // RT_BIG_ENDIAN //
++} HT_AS_CAP, *PHT_AS_CAP;
++
++// Draft 1.0 set IE length 26, but is extensible..
++#define SIZE_HT_CAP_IE 26
++// The structure for HT Capability IE.
++typedef struct PACKED _HT_CAPABILITY_IE{
++ HT_CAP_INFO HtCapInfo;
++ HT_CAP_PARM HtCapParm;
++// HT_MCS_SET HtMCSSet;
++ UCHAR MCSSet[16];
++ EXT_HT_CAP_INFO ExtHtCapInfo;
++ HT_BF_CAP TxBFCap; // beamforming cap. rt2860c not support beamforming.
++ HT_AS_CAP ASCap; //antenna selection.
++} HT_CAPABILITY_IE, *PHT_CAPABILITY_IE;
++
++
++// 802.11n draft3 related structure definitions.
++// 7.3.2.60
++#define dot11OBSSScanPassiveDwell 20 // in TU. min amount of time that the STA continously scans each channel when performing an active OBSS scan.
++#define dot11OBSSScanActiveDwell 10 // in TU.min amount of time that the STA continously scans each channel when performing an passive OBSS scan.
++#define dot11BSSWidthTriggerScanInterval 300 // in sec. max interval between scan operations to be performed to detect BSS channel width trigger events.
++#define dot11OBSSScanPassiveTotalPerChannel 200 // in TU. min total amount of time that the STA scans each channel when performing a passive OBSS scan.
++#define dot11OBSSScanActiveTotalPerChannel 20 //in TU. min total amount of time that the STA scans each channel when performing a active OBSS scan
++#define dot11BSSWidthChannelTransactionDelayFactor 5 // min ratio between the delay time in performing a switch from 20MHz BSS to 20/40 BSS operation and the maxima
++ // interval between overlapping BSS scan operations.
++#define dot11BSSScanActivityThreshold 25 // in %%, max total time that a STA may be active on the medium during a period of
++ // (dot11BSSWidthChannelTransactionDelayFactor * dot11BSSWidthTriggerScanInterval) seconds without
++ // being obligated to perform OBSS Scan operations. default is 25(== 0.25%)
++
++typedef struct PACKED _OVERLAP_BSS_SCAN_IE{
++ USHORT ScanPassiveDwell;
++ USHORT ScanActiveDwell;
++ USHORT TriggerScanInt; // Trigger scan interval
++ USHORT PassiveTalPerChannel; // passive total per channel
++ USHORT ActiveTalPerChannel; // active total per channel
++ USHORT DelayFactor; // BSS width channel transition delay factor
++ USHORT ScanActThre; // Scan Activity threshold
++}OVERLAP_BSS_SCAN_IE, *POVERLAP_BSS_SCAN_IE;
++
++
++// 7.3.2.56. 20/40 Coexistence element used in Element ID = 72 = IE_2040_BSS_COEXIST
++typedef union PACKED _BSS_2040_COEXIST_IE{
++ struct PACKED {
++ #ifdef RT_BIG_ENDIAN
++ UCHAR rsv:5;
++ UCHAR BSS20WidthReq:1;
++ UCHAR Intolerant40:1;
++ UCHAR InfoReq:1;
++ #else
++ UCHAR InfoReq:1;
++ UCHAR Intolerant40:1; // Inter-BSS. set 1 when prohibits a receiving BSS from operating as a 20/40 Mhz BSS.
++ UCHAR BSS20WidthReq:1; // Intra-BSS set 1 when prohibits a receiving AP from operating its BSS as a 20/40MHz BSS.
++ UCHAR rsv:5;
++#endif // RT_BIG_ENDIAN //
++ } field;
++ UCHAR word;
++} BSS_2040_COEXIST_IE, *PBSS_2040_COEXIST_IE;
++
++
++typedef struct _TRIGGER_EVENTA{
++ BOOLEAN bValid;
++ UCHAR BSSID[6];
++ UCHAR RegClass; // Regulatory Class
++ USHORT Channel;
++ ULONG CDCounter; // Maintain a seperate count down counter for each Event A.
++} TRIGGER_EVENTA, *PTRIGGER_EVENTA;
++
++// 20/40 trigger event table
++// If one Event A delete or created, or if Event B is detected or not detected, STA should send 2040BSSCoexistence to AP.
++#define MAX_TRIGGER_EVENT 64
++typedef struct _TRIGGER_EVENT_TAB{
++ UCHAR EventANo;
++ TRIGGER_EVENTA EventA[MAX_TRIGGER_EVENT];
++ ULONG EventBCountDown; // Count down counter for Event B.
++} TRIGGER_EVENT_TAB, *PTRIGGER_EVENT_TAB;
++
++// 7.3.27 20/40 Bss Coexistence Mgmt capability used in extended capabilities information IE( ID = 127 = IE_EXT_CAPABILITY).
++// This is the first octet and was defined in 802.11n D3.03 and 802.11yD9.0
++typedef struct PACKED _EXT_CAP_INFO_ELEMENT{
++#ifdef RT_BIG_ENDIAN
++ UCHAR rsv2:5;
++ UCHAR ExtendChannelSwitch:1;
++ UCHAR rsv:1;
++ UCHAR BssCoexistMgmtSupport:1;
++#else
++ UCHAR BssCoexistMgmtSupport:1;
++ UCHAR rsv:1;
++ UCHAR ExtendChannelSwitch:1;
++ UCHAR rsv2:5;
++#endif // RT_BIG_ENDIAN //
++}EXT_CAP_INFO_ELEMENT, *PEXT_CAP_INFO_ELEMENT;
++
++
++// 802.11n 7.3.2.61
++typedef struct PACKED _BSS_2040_COEXIST_ELEMENT{
++ UCHAR ElementID; // ID = IE_2040_BSS_COEXIST = 72
++ UCHAR Len;
++ BSS_2040_COEXIST_IE BssCoexistIe;
++}BSS_2040_COEXIST_ELEMENT, *PBSS_2040_COEXIST_ELEMENT;
++
++
++//802.11n 7.3.2.59
++typedef struct PACKED _BSS_2040_INTOLERANT_CH_REPORT{
++ UCHAR ElementID; // ID = IE_2040_BSS_INTOLERANT_REPORT = 73
++ UCHAR Len;
++ UCHAR RegulatoryClass;
++ UCHAR ChList[0];
++}BSS_2040_INTOLERANT_CH_REPORT, *PBSS_2040_INTOLERANT_CH_REPORT;
++
++
++// The structure for channel switch annoucement IE. This is in 802.11n D3.03
++typedef struct PACKED _CHA_SWITCH_ANNOUNCE_IE{
++ UCHAR SwitchMode; //channel switch mode
++ UCHAR NewChannel; //
++ UCHAR SwitchCount; //
++} CHA_SWITCH_ANNOUNCE_IE, *PCHA_SWITCH_ANNOUNCE_IE;
++
++
++// The structure for channel switch annoucement IE. This is in 802.11n D3.03
++typedef struct PACKED _SEC_CHA_OFFSET_IE{
++ UCHAR SecondaryChannelOffset; // 1: Secondary above, 3: Secondary below, 0: no Secondary
++} SEC_CHA_OFFSET_IE, *PSEC_CHA_OFFSET_IE;
++
++
++// This structure is extracted from struct RT_HT_CAPABILITY
++typedef struct {
++ BOOLEAN bHtEnable; // If we should use ht rate.
++ BOOLEAN bPreNHt; // If we should use ht rate.
++ //Substract from HT Capability IE
++ UCHAR MCSSet[16]; //only supoort MCS=0-15,32 ,
++} RT_HT_PHY_INFO, *PRT_HT_PHY_INFO;
++
++//This structure substracts ralink supports from all 802.11n-related features.
++//Features not listed here but contained in 802.11n spec are not supported in rt2860.
++typedef struct {
++#if 0 // move to
++ BOOLEAN bHtEnable; // If we should use ht rate.
++ BOOLEAN bPreNHt; // If we should use ht rate.
++ //Substract from HT Capability IE
++ UCHAR MCSSet[16]; //only supoort MCS=0-15,32 ,
++#endif
++#ifdef RT_BIG_ENDIAN
++ USHORT rsv:5;
++ USHORT AmsduSize:1; // Max receiving A-MSDU size
++ USHORT AmsduEnable:1; // Enable to transmit A-MSDU. Suggest disable. We should use A-MPDU to gain best benifit of 802.11n
++ USHORT RxSTBC:2; // 2 bits
++ USHORT TxSTBC:1;
++ USHORT ShortGIfor40:1; //for40MHz
++ USHORT ShortGIfor20:1;
++ USHORT GF:1; //green field
++ USHORT MimoPs:2;//mimo power safe MMPS_
++ USHORT ChannelWidth:1;
++#else
++ USHORT ChannelWidth:1;
++ USHORT MimoPs:2;//mimo power safe MMPS_
++ USHORT GF:1; //green field
++ USHORT ShortGIfor20:1;
++ USHORT ShortGIfor40:1; //for40MHz
++ USHORT TxSTBC:1;
++ USHORT RxSTBC:2; // 2 bits
++ USHORT AmsduEnable:1; // Enable to transmit A-MSDU. Suggest disable. We should use A-MPDU to gain best benifit of 802.11n
++ USHORT AmsduSize:1; // Max receiving A-MSDU size
++ USHORT rsv:5;
++#endif
++
++ //Substract from Addiont HT INFO IE
++#ifdef RT_BIG_ENDIAN
++ UCHAR RecomWidth:1;
++ UCHAR ExtChanOffset:2; // Please not the difference with following UCHAR NewExtChannelOffset; from 802.11n
++ UCHAR MpduDensity:3;
++ UCHAR MaxRAmpduFactor:2;
++#else
++ UCHAR MaxRAmpduFactor:2;
++ UCHAR MpduDensity:3;
++ UCHAR ExtChanOffset:2; // Please not the difference with following UCHAR NewExtChannelOffset; from 802.11n
++ UCHAR RecomWidth:1;
++#endif
++
++#ifdef RT_BIG_ENDIAN
++ USHORT rsv2:11;
++ USHORT OBSS_NonHTExist:1;
++ USHORT rsv3:1;
++ USHORT NonGfPresent:1;
++ USHORT OperaionMode:2;
++#else
++ USHORT OperaionMode:2;
++ USHORT NonGfPresent:1;
++ USHORT rsv3:1;
++ USHORT OBSS_NonHTExist:1;
++ USHORT rsv2:11;
++#endif
++
++ // New Extension Channel Offset IE
++ UCHAR NewExtChannelOffset;
++ // Extension Capability IE = 127
++ UCHAR BSSCoexist2040;
++} RT_HT_CAPABILITY, *PRT_HT_CAPABILITY;
++
++// field in Addtional HT Information IE .
++typedef struct PACKED {
++#ifdef RT_BIG_ENDIAN
++ UCHAR SerInterGranu:3;
++ UCHAR S_PSMPSup:1;
++ UCHAR RifsMode:1;
++ UCHAR RecomWidth:1;
++ UCHAR ExtChanOffset:2;
++#else
++ UCHAR ExtChanOffset:2;
++ UCHAR RecomWidth:1;
++ UCHAR RifsMode:1;
++ UCHAR S_PSMPSup:1; //Indicate support for scheduled PSMP
++ UCHAR SerInterGranu:3; //service interval granularity
++#endif
++} ADD_HTINFO, *PADD_HTINFO;
++
++typedef struct PACKED{
++#ifdef RT_BIG_ENDIAN
++ USHORT rsv2:11;
++ USHORT OBSS_NonHTExist:1;
++ USHORT rsv:1;
++ USHORT NonGfPresent:1;
++ USHORT OperaionMode:2;
++#else
++ USHORT OperaionMode:2;
++ USHORT NonGfPresent:1;
++ USHORT rsv:1;
++ USHORT OBSS_NonHTExist:1;
++ USHORT rsv2:11;
++#endif
++} ADD_HTINFO2, *PADD_HTINFO2;
++
++
++// TODO: Need sync with spec about the definition of StbcMcs. In Draft 3.03, it's reserved.
++typedef struct PACKED{
++#ifdef RT_BIG_ENDIAN
++ USHORT rsv:4;
++ USHORT PcoPhase:1;
++ USHORT PcoActive:1;
++ USHORT LsigTxopProt:1;
++ USHORT STBCBeacon:1;
++ USHORT DualCTSProtect:1;
++ USHORT DualBeacon:1;
++ USHORT StbcMcs:6;
++#else
++ USHORT StbcMcs:6;
++ USHORT DualBeacon:1;
++ USHORT DualCTSProtect:1;
++ USHORT STBCBeacon:1;
++ USHORT LsigTxopProt:1; // L-SIG TXOP protection full support
++ USHORT PcoActive:1;
++ USHORT PcoPhase:1;
++ USHORT rsv:4;
++#endif // RT_BIG_ENDIAN //
++} ADD_HTINFO3, *PADD_HTINFO3;
++
++#define SIZE_ADD_HT_INFO_IE 22
++typedef struct PACKED{
++ UCHAR ControlChan;
++ ADD_HTINFO AddHtInfo;
++ ADD_HTINFO2 AddHtInfo2;
++ ADD_HTINFO3 AddHtInfo3;
++ UCHAR MCSSet[16]; // Basic MCS set
++} ADD_HT_INFO_IE, *PADD_HT_INFO_IE;
++
++typedef struct PACKED{
++ UCHAR NewExtChanOffset;
++} NEW_EXT_CHAN_IE, *PNEW_EXT_CHAN_IE;
++
++
++// 4-byte HTC field. maybe included in any frame except non-QOS data frame. The Order bit must set 1.
++typedef struct PACKED {
++#ifdef RT_BIG_ENDIAN
++ UINT32 RDG:1; //RDG / More PPDU
++ UINT32 ACConstraint:1; //feedback request
++ UINT32 rsv:5; //calibration sequence
++ UINT32 ZLFAnnouce:1; // ZLF announcement
++ UINT32 CSISTEERING:2; //CSI/ STEERING
++ UINT32 FBKReq:2; //feedback request
++ UINT32 CalSeq:2; //calibration sequence
++ UINT32 CalPos:2; // calibration position
++ UINT32 MFBorASC:7; //Link adaptation feedback containing recommended MCS. 0x7f for no feedback or not available
++ UINT32 MFS:3; //SET to the received value of MRS. 0x111 for unsolicited MFB.
++ UINT32 MRSorASI:3; // MRQ Sequence identifier. unchanged during entire procedure. 0x000-0x110.
++ UINT32 MRQ:1; //MCS feedback. Request for a MCS feedback
++ UINT32 TRQ:1; //sounding request
++ UINT32 MA:1; //management action payload exist in (QoS Null+HTC)
++#else
++ UINT32 MA:1; //management action payload exist in (QoS Null+HTC)
++ UINT32 TRQ:1; //sounding request
++ UINT32 MRQ:1; //MCS feedback. Request for a MCS feedback
++ UINT32 MRSorASI:3; // MRQ Sequence identifier. unchanged during entire procedure. 0x000-0x110.
++ UINT32 MFS:3; //SET to the received value of MRS. 0x111 for unsolicited MFB.
++ UINT32 MFBorASC:7; //Link adaptation feedback containing recommended MCS. 0x7f for no feedback or not available
++ UINT32 CalPos:2; // calibration position
++ UINT32 CalSeq:2; //calibration sequence
++ UINT32 FBKReq:2; //feedback request
++ UINT32 CSISTEERING:2; //CSI/ STEERING
++ UINT32 ZLFAnnouce:1; // ZLF announcement
++ UINT32 rsv:5; //calibration sequence
++ UINT32 ACConstraint:1; //feedback request
++ UINT32 RDG:1; //RDG / More PPDU
++#endif /* !RT_BIG_ENDIAN */
++} HT_CONTROL, *PHT_CONTROL;
++
++// 2-byte QOS CONTROL field
++typedef struct PACKED {
++#ifdef RT_BIG_ENDIAN
++ USHORT Txop_QueueSize:8;
++ USHORT AMsduPresent:1;
++ USHORT AckPolicy:2; //0: normal ACK 1:No ACK 2:scheduled under MTBA/PSMP 3: BA
++ USHORT EOSP:1;
++ USHORT TID:4;
++#else
++ USHORT TID:4;
++ USHORT EOSP:1;
++ USHORT AckPolicy:2; //0: normal ACK 1:No ACK 2:scheduled under MTBA/PSMP 3: BA
++ USHORT AMsduPresent:1;
++ USHORT Txop_QueueSize:8;
++#endif /* !RT_BIG_ENDIAN */
++} QOS_CONTROL, *PQOS_CONTROL;
++
++// 2-byte Frame control field
++typedef struct PACKED {
++#ifdef RT_BIG_ENDIAN
++ USHORT Order:1; // Strict order expected
++ USHORT Wep:1; // Wep data
++ USHORT MoreData:1; // More data bit
++ USHORT PwrMgmt:1; // Power management bit
++ USHORT Retry:1; // Retry status bit
++ USHORT MoreFrag:1; // More fragment bit
++ USHORT FrDs:1; // From DS indication
++ USHORT ToDs:1; // To DS indication
++ USHORT SubType:4; // MSDU subtype
++ USHORT Type:2; // MSDU type
++ USHORT Ver:2; // Protocol version
++#else
++ USHORT Ver:2; // Protocol version
++ USHORT Type:2; // MSDU type
++ USHORT SubType:4; // MSDU subtype
++ USHORT ToDs:1; // To DS indication
++ USHORT FrDs:1; // From DS indication
++ USHORT MoreFrag:1; // More fragment bit
++ USHORT Retry:1; // Retry status bit
++ USHORT PwrMgmt:1; // Power management bit
++ USHORT MoreData:1; // More data bit
++ USHORT Wep:1; // Wep data
++ USHORT Order:1; // Strict order expected
++#endif /* !RT_BIG_ENDIAN */
++} FRAME_CONTROL, *PFRAME_CONTROL;
++
++typedef struct PACKED _HEADER_802_11 {
++ FRAME_CONTROL FC;
++ USHORT Duration;
++ UCHAR Addr1[MAC_ADDR_LEN];
++ UCHAR Addr2[MAC_ADDR_LEN];
++ UCHAR Addr3[MAC_ADDR_LEN];
++#ifdef RT_BIG_ENDIAN
++ USHORT Sequence:12;
++ USHORT Frag:4;
++#else
++ USHORT Frag:4;
++ USHORT Sequence:12;
++#endif /* !RT_BIG_ENDIAN */
++ UCHAR Octet[0];
++} HEADER_802_11, *PHEADER_802_11;
++
++typedef struct PACKED _FRAME_802_11 {
++ HEADER_802_11 Hdr;
++ UCHAR Octet[1];
++} FRAME_802_11, *PFRAME_802_11;
++
++// QoSNull embedding of management action. When HT Control MA field set to 1.
++typedef struct PACKED _MA_BODY {
++ UCHAR Category;
++ UCHAR Action;
++ UCHAR Octet[1];
++} MA_BODY, *PMA_BODY;
++
++typedef struct PACKED _HEADER_802_3 {
++ UCHAR DAAddr1[MAC_ADDR_LEN];
++ UCHAR SAAddr2[MAC_ADDR_LEN];
++ UCHAR Octet[2];
++} HEADER_802_3, *PHEADER_802_3;
++////Block ACK related format
++// 2-byte BA Parameter field in DELBA frames to terminate an already set up bA
++typedef struct PACKED{
++#ifdef RT_BIG_ENDIAN
++ USHORT TID:4; // value of TC os TS
++ USHORT Initiator:1; // 1: originator 0:recipient
++ USHORT Rsv:11; // always set to 0
++#else
++ USHORT Rsv:11; // always set to 0
++ USHORT Initiator:1; // 1: originator 0:recipient
++ USHORT TID:4; // value of TC os TS
++#endif /* !RT_BIG_ENDIAN */
++} DELBA_PARM, *PDELBA_PARM;
++
++// 2-byte BA Parameter Set field in ADDBA frames to signal parm for setting up a BA
++typedef struct PACKED {
++#ifdef RT_BIG_ENDIAN
++ USHORT BufSize:10; // number of buffe of size 2304 octetsr
++ USHORT TID:4; // value of TC os TS
++ USHORT BAPolicy:1; // 1: immediately BA 0:delayed BA
++ USHORT AMSDUSupported:1; // 0: not permitted 1: permitted
++#else
++ USHORT AMSDUSupported:1; // 0: not permitted 1: permitted
++ USHORT BAPolicy:1; // 1: immediately BA 0:delayed BA
++ USHORT TID:4; // value of TC os TS
++ USHORT BufSize:10; // number of buffe of size 2304 octetsr
++#endif /* !RT_BIG_ENDIAN */
++} BA_PARM, *PBA_PARM;
++
++// 2-byte BA Starting Seq CONTROL field
++typedef union PACKED {
++ struct PACKED {
++#ifdef RT_BIG_ENDIAN
++ USHORT StartSeq:12; // sequence number of the 1st MSDU for which this BAR is sent
++ USHORT FragNum:4; // always set to 0
++#else
++ USHORT FragNum:4; // always set to 0
++ USHORT StartSeq:12; // sequence number of the 1st MSDU for which this BAR is sent
++#endif /* RT_BIG_ENDIAN */
++ } field;
++ USHORT word;
++} BASEQ_CONTROL, *PBASEQ_CONTROL;
++
++//BAControl and BARControl are the same
++// 2-byte BA CONTROL field in BA frame
++typedef struct PACKED {
++#ifdef RT_BIG_ENDIAN
++ USHORT TID:4;
++ USHORT Rsv:9;
++ USHORT Compressed:1;
++ USHORT MTID:1; //EWC V1.24
++ USHORT ACKPolicy:1; // only related to N-Delayed BA. But not support in RT2860b. 0:NormalACK 1:No ACK
++#else
++ USHORT ACKPolicy:1; // only related to N-Delayed BA. But not support in RT2860b. 0:NormalACK 1:No ACK
++ USHORT MTID:1; //EWC V1.24
++ USHORT Compressed:1;
++ USHORT Rsv:9;
++ USHORT TID:4;
++#endif /* !RT_BIG_ENDIAN */
++} BA_CONTROL, *PBA_CONTROL;
++
++// 2-byte BAR CONTROL field in BAR frame
++typedef struct PACKED {
++#ifdef RT_BIG_ENDIAN
++ USHORT TID:4;
++ USHORT Rsv1:9;
++ USHORT Compressed:1;
++ USHORT MTID:1; //if this bit1, use FRAME_MTBA_REQ, if 0, use FRAME_BA_REQ
++ USHORT ACKPolicy:1;
++#else
++ USHORT ACKPolicy:1; // 0:normal ack, 1:no ack.
++ USHORT MTID:1; //if this bit1, use FRAME_MTBA_REQ, if 0, use FRAME_BA_REQ
++ USHORT Compressed:1;
++ USHORT Rsv1:9;
++ USHORT TID:4;
++#endif /* !RT_BIG_ENDIAN */
++} BAR_CONTROL, *PBAR_CONTROL;
++
++// BARControl in MTBAR frame
++typedef struct PACKED {
++#ifdef RT_BIG_ENDIAN
++ USHORT NumTID:4;
++ USHORT Rsv1:9;
++ USHORT Compressed:1;
++ USHORT MTID:1;
++ USHORT ACKPolicy:1;
++#else
++ USHORT ACKPolicy:1;
++ USHORT MTID:1;
++ USHORT Compressed:1;
++ USHORT Rsv1:9;
++ USHORT NumTID:4;
++#endif /* !RT_BIG_ENDIAN */
++} MTBAR_CONTROL, *PMTBAR_CONTROL;
++
++typedef struct PACKED {
++#ifdef RT_BIG_ENDIAN
++ USHORT TID:4;
++ USHORT Rsv1:12;
++#else
++ USHORT Rsv1:12;
++ USHORT TID:4;
++#endif /* !RT_BIG_ENDIAN */
++} PER_TID_INFO, *PPER_TID_INFO;
++
++typedef struct {
++ PER_TID_INFO PerTID;
++ BASEQ_CONTROL BAStartingSeq;
++} EACH_TID, *PEACH_TID;
++
++
++typedef struct PACKED _PSPOLL_FRAME {
++ FRAME_CONTROL FC;
++ USHORT Aid;
++ UCHAR Bssid[MAC_ADDR_LEN];
++ UCHAR Ta[MAC_ADDR_LEN];
++} PSPOLL_FRAME, *PPSPOLL_FRAME;
++
++typedef struct PACKED _RTS_FRAME {
++ FRAME_CONTROL FC;
++ USHORT Duration;
++ UCHAR Addr1[MAC_ADDR_LEN];
++ UCHAR Addr2[MAC_ADDR_LEN];
++}RTS_FRAME, *PRTS_FRAME;
++
++// BAREQ AND MTBAREQ have the same subtype BAR, 802.11n BAR use compressed bitmap.
++typedef struct PACKED _FRAME_BA_REQ {
++ FRAME_CONTROL FC;
++ USHORT Duration;
++ UCHAR Addr1[MAC_ADDR_LEN];
++ UCHAR Addr2[MAC_ADDR_LEN];
++ BAR_CONTROL BARControl;
++ BASEQ_CONTROL BAStartingSeq;
++} FRAME_BA_REQ, *PFRAME_BA_REQ;
++
++typedef struct PACKED _FRAME_MTBA_REQ {
++ FRAME_CONTROL FC;
++ USHORT Duration;
++ UCHAR Addr1[MAC_ADDR_LEN];
++ UCHAR Addr2[MAC_ADDR_LEN];
++ MTBAR_CONTROL MTBARControl;
++ PER_TID_INFO PerTIDInfo;
++ BASEQ_CONTROL BAStartingSeq;
++} FRAME_MTBA_REQ, *PFRAME_MTBA_REQ;
++
++// Compressed format is mandantory in HT STA
++typedef struct PACKED _FRAME_MTBA {
++ FRAME_CONTROL FC;
++ USHORT Duration;
++ UCHAR Addr1[MAC_ADDR_LEN];
++ UCHAR Addr2[MAC_ADDR_LEN];
++ BA_CONTROL BAControl;
++ BASEQ_CONTROL BAStartingSeq;
++ UCHAR BitMap[8];
++} FRAME_MTBA, *PFRAME_MTBA;
++
++typedef struct PACKED _FRAME_PSMP_ACTION {
++ HEADER_802_11 Hdr;
++ UCHAR Category;
++ UCHAR Action;
++ UCHAR Psmp; // 7.3.1.25
++} FRAME_PSMP_ACTION, *PFRAME_PSMP_ACTION;
++
++typedef struct PACKED _FRAME_ACTION_HDR {
++ HEADER_802_11 Hdr;
++ UCHAR Category;
++ UCHAR Action;
++} FRAME_ACTION_HDR, *PFRAME_ACTION_HDR;
++
++//Action Frame
++//Action Frame Category:Spectrum, Action:Channel Switch. 7.3.2.20
++typedef struct PACKED _CHAN_SWITCH_ANNOUNCE {
++ UCHAR ElementID; // ID = IE_CHANNEL_SWITCH_ANNOUNCEMENT = 37
++ UCHAR Len;
++ CHA_SWITCH_ANNOUNCE_IE CSAnnounceIe;
++} CHAN_SWITCH_ANNOUNCE, *PCHAN_SWITCH_ANNOUNCE;
++
++
++//802.11n : 7.3.2.20a
++typedef struct PACKED _SECOND_CHAN_OFFSET {
++ UCHAR ElementID; // ID = IE_SECONDARY_CH_OFFSET = 62
++ UCHAR Len;
++ SEC_CHA_OFFSET_IE SecChOffsetIe;
++} SECOND_CHAN_OFFSET, *PSECOND_CHAN_OFFSET;
++
++
++typedef struct PACKED _FRAME_SPETRUM_CS {
++ HEADER_802_11 Hdr;
++ UCHAR Category;
++ UCHAR Action;
++ CHAN_SWITCH_ANNOUNCE CSAnnounce;
++ SECOND_CHAN_OFFSET SecondChannel;
++} FRAME_SPETRUM_CS, *PFRAME_SPETRUM_CS;
++
++
++typedef struct PACKED _FRAME_ADDBA_REQ {
++ HEADER_802_11 Hdr;
++ UCHAR Category;
++ UCHAR Action;
++ UCHAR Token; // 1
++ BA_PARM BaParm; // 2 - 10
++ USHORT TimeOutValue; // 0 - 0
++ BASEQ_CONTROL BaStartSeq; // 0-0
++} FRAME_ADDBA_REQ, *PFRAME_ADDBA_REQ;
++
++typedef struct PACKED _FRAME_ADDBA_RSP {
++ HEADER_802_11 Hdr;
++ UCHAR Category;
++ UCHAR Action;
++ UCHAR Token;
++ USHORT StatusCode;
++ BA_PARM BaParm; //0 - 2
++ USHORT TimeOutValue;
++} FRAME_ADDBA_RSP, *PFRAME_ADDBA_RSP;
++
++typedef struct PACKED _FRAME_DELBA_REQ {
++ HEADER_802_11 Hdr;
++ UCHAR Category;
++ UCHAR Action;
++ DELBA_PARM DelbaParm;
++ USHORT ReasonCode;
++} FRAME_DELBA_REQ, *PFRAME_DELBA_REQ;
++
++
++//7.2.1.7
++typedef struct PACKED _FRAME_BAR {
++ FRAME_CONTROL FC;
++ USHORT Duration;
++ UCHAR Addr1[MAC_ADDR_LEN];
++ UCHAR Addr2[MAC_ADDR_LEN];
++ BAR_CONTROL BarControl;
++ BASEQ_CONTROL StartingSeq;
++} FRAME_BAR, *PFRAME_BAR;
++
++//7.2.1.7
++typedef struct PACKED _FRAME_BA {
++ FRAME_CONTROL FC;
++ USHORT Duration;
++ UCHAR Addr1[MAC_ADDR_LEN];
++ UCHAR Addr2[MAC_ADDR_LEN];
++ BAR_CONTROL BarControl;
++ BASEQ_CONTROL StartingSeq;
++ UCHAR bitmask[8];
++} FRAME_BA, *PFRAME_BA;
++
++
++// Radio Measuement Request Frame Format
++typedef struct PACKED _FRAME_RM_REQ_ACTION {
++ HEADER_802_11 Hdr;
++ UCHAR Category;
++ UCHAR Action;
++ UCHAR Token;
++ USHORT Repetition;
++ UCHAR data[0];
++} FRAME_RM_REQ_ACTION, *PFRAME_RM_REQ_ACTION;
++
++typedef struct PACKED {
++ UCHAR ID;
++ UCHAR Length;
++ UCHAR ChannelSwitchMode;
++ UCHAR NewRegClass;
++ UCHAR NewChannelNum;
++ UCHAR ChannelSwitchCount;
++} HT_EXT_CHANNEL_SWITCH_ANNOUNCEMENT_IE, *PHT_EXT_CHANNEL_SWITCH_ANNOUNCEMENT_IE;
++
++
++//
++// _Limit must be the 2**n - 1
++// _SEQ1 , _SEQ2 must be within 0 ~ _Limit
++//
++#define SEQ_STEPONE(_SEQ1, _SEQ2, _Limit) ((_SEQ1 == ((_SEQ2+1) & _Limit)))
++#define SEQ_SMALLER(_SEQ1, _SEQ2, _Limit) (((_SEQ1-_SEQ2) & ((_Limit+1)>>1)))
++#define SEQ_LARGER(_SEQ1, _SEQ2, _Limit) ((_SEQ1 != _SEQ2) && !(((_SEQ1-_SEQ2) & ((_Limit+1)>>1))))
++#define SEQ_WITHIN_WIN(_SEQ1, _SEQ2, _WIN, _Limit) (SEQ_LARGER(_SEQ1, _SEQ2, _Limit) && \
++ SEQ_SMALLER(_SEQ1, ((_SEQ2+_WIN+1)&_Limit), _Limit))
++
++//
++// Contention-free parameter (without ID and Length)
++//
++typedef struct PACKED {
++ BOOLEAN bValid; // 1: variable contains valid value
++ UCHAR CfpCount;
++ UCHAR CfpPeriod;
++ USHORT CfpMaxDuration;
++ USHORT CfpDurRemaining;
++} CF_PARM, *PCF_PARM;
++
++typedef struct _CIPHER_SUITE {
++ NDIS_802_11_ENCRYPTION_STATUS PairCipher; // Unicast cipher 1, this one has more secured cipher suite
++ NDIS_802_11_ENCRYPTION_STATUS PairCipherAux; // Unicast cipher 2 if AP announce two unicast cipher suite
++ NDIS_802_11_ENCRYPTION_STATUS GroupCipher; // Group cipher
++ USHORT RsnCapability; // RSN capability from beacon
++ BOOLEAN bMixMode; // Indicate Pair & Group cipher might be different
++} CIPHER_SUITE, *PCIPHER_SUITE;
++
++// EDCA configuration from AP's BEACON/ProbeRsp
++typedef struct {
++ BOOLEAN bValid; // 1: variable contains valid value
++ BOOLEAN bAdd; // 1: variable contains valid value
++ BOOLEAN bQAck;
++ BOOLEAN bQueueRequest;
++ BOOLEAN bTxopRequest;
++ BOOLEAN bAPSDCapable;
++// BOOLEAN bMoreDataAck;
++ UCHAR EdcaUpdateCount;
++ UCHAR Aifsn[4]; // 0:AC_BK, 1:AC_BE, 2:AC_VI, 3:AC_VO
++ UCHAR Cwmin[4];
++ UCHAR Cwmax[4];
++ USHORT Txop[4]; // in unit of 32-us
++ BOOLEAN bACM[4]; // 1: Admission Control of AC_BK is mandattory
++} EDCA_PARM, *PEDCA_PARM;
++
++// QBSS LOAD information from QAP's BEACON/ProbeRsp
++typedef struct {
++ BOOLEAN bValid; // 1: variable contains valid value
++ USHORT StaNum;
++ UCHAR ChannelUtilization;
++ USHORT RemainingAdmissionControl; // in unit of 32-us
++} QBSS_LOAD_PARM, *PQBSS_LOAD_PARM;
++
++// QBSS Info field in QSTA's assoc req
++typedef struct PACKED {
++#ifdef RT_BIG_ENDIAN
++ UCHAR Rsv2:1;
++ UCHAR MaxSPLength:2;
++ UCHAR Rsv1:1;
++ UCHAR UAPSD_AC_BE:1;
++ UCHAR UAPSD_AC_BK:1;
++ UCHAR UAPSD_AC_VI:1;
++ UCHAR UAPSD_AC_VO:1;
++#else
++ UCHAR UAPSD_AC_VO:1;
++ UCHAR UAPSD_AC_VI:1;
++ UCHAR UAPSD_AC_BK:1;
++ UCHAR UAPSD_AC_BE:1;
++ UCHAR Rsv1:1;
++ UCHAR MaxSPLength:2;
++ UCHAR Rsv2:1;
++#endif /* !RT_BIG_ENDIAN */
++} QBSS_STA_INFO_PARM, *PQBSS_STA_INFO_PARM;
++
++// QBSS Info field in QAP's Beacon/ProbeRsp
++typedef struct PACKED {
++#ifdef RT_BIG_ENDIAN
++ UCHAR UAPSD:1;
++ UCHAR Rsv:3;
++ UCHAR ParamSetCount:4;
++#else
++ UCHAR ParamSetCount:4;
++ UCHAR Rsv:3;
++ UCHAR UAPSD:1;
++#endif /* !RT_BIG_ENDIAN */
++} QBSS_AP_INFO_PARM, *PQBSS_AP_INFO_PARM;
++
++// QOS Capability reported in QAP's BEACON/ProbeRsp
++// QOS Capability sent out in QSTA's AssociateReq/ReAssociateReq
++typedef struct {
++ BOOLEAN bValid; // 1: variable contains valid value
++ BOOLEAN bQAck;
++ BOOLEAN bQueueRequest;
++ BOOLEAN bTxopRequest;
++// BOOLEAN bMoreDataAck;
++ UCHAR EdcaUpdateCount;
++} QOS_CAPABILITY_PARM, *PQOS_CAPABILITY_PARM;
++
++#ifdef CONFIG_STA_SUPPORT
++typedef struct {
++ UCHAR IELen;
++ UCHAR IE[MAX_CUSTOM_LEN];
++} WPA_IE_;
++#endif // CONFIG_STA_SUPPORT //
++
++
++typedef struct {
++ UCHAR Bssid[MAC_ADDR_LEN];
++ UCHAR Channel;
++ UCHAR CentralChannel; //Store the wide-band central channel for 40MHz. .used in 40MHz AP. Or this is the same as Channel.
++ UCHAR BssType;
++ USHORT AtimWin;
++ USHORT BeaconPeriod;
++
++ UCHAR SupRate[MAX_LEN_OF_SUPPORTED_RATES];
++ UCHAR SupRateLen;
++ UCHAR ExtRate[MAX_LEN_OF_SUPPORTED_RATES];
++ UCHAR ExtRateLen;
++ HT_CAPABILITY_IE HtCapability;
++ UCHAR HtCapabilityLen;
++ ADD_HT_INFO_IE AddHtInfo; // AP might use this additional ht info IE
++ UCHAR AddHtInfoLen;
++ UCHAR NewExtChanOffset;
++ CHAR Rssi;
++ UCHAR Privacy; // Indicate security function ON/OFF. Don't mess up with auth mode.
++ UCHAR Hidden;
++
++ USHORT DtimPeriod;
++ USHORT CapabilityInfo;
++
++ USHORT CfpCount;
++ USHORT CfpPeriod;
++ USHORT CfpMaxDuration;
++ USHORT CfpDurRemaining;
++ UCHAR SsidLen;
++ CHAR Ssid[MAX_LEN_OF_SSID];
++
++ ULONG LastBeaconRxTime; // OS's timestamp
++
++ BOOLEAN bSES;
++
++ // New for WPA2
++ CIPHER_SUITE WPA; // AP announced WPA cipher suite
++ CIPHER_SUITE WPA2; // AP announced WPA2 cipher suite
++
++ // New for microsoft WPA support
++ NDIS_802_11_FIXED_IEs FixIEs;
++ NDIS_802_11_AUTHENTICATION_MODE AuthModeAux; // Addition mode for WPA2 / WPA capable AP
++ NDIS_802_11_AUTHENTICATION_MODE AuthMode;
++ NDIS_802_11_WEP_STATUS WepStatus; // Unicast Encryption Algorithm extract from VAR_IE
++ USHORT VarIELen; // Length of next VIE include EID & Length
++ UCHAR VarIEs[MAX_VIE_LEN];
++
++ // CCX Ckip information
++ UCHAR CkipFlag;
++
++ // CCX 2 TSF
++ UCHAR PTSF[4]; // Parent TSF
++ UCHAR TTSF[8]; // Target TSF
++
++ // 802.11e d9, and WMM
++ EDCA_PARM EdcaParm;
++ QOS_CAPABILITY_PARM QosCapability;
++ QBSS_LOAD_PARM QbssLoad;
++#ifdef CONFIG_STA_SUPPORT
++ WPA_IE_ WpaIE;
++ WPA_IE_ RsnIE;
++#ifdef EXT_BUILD_CHANNEL_LIST
++ UCHAR CountryString[3];
++ BOOLEAN bHasCountryIE;
++#endif // EXT_BUILD_CHANNEL_LIST //
++#endif // CONFIG_STA_SUPPORT //
++} BSS_ENTRY, *PBSS_ENTRY;
++
++typedef struct {
++ UCHAR BssNr;
++ UCHAR BssOverlapNr;
++ BSS_ENTRY BssEntry[MAX_LEN_OF_BSS_TABLE];
++} BSS_TABLE, *PBSS_TABLE;
++
++
++typedef struct _MLME_QUEUE_ELEM {
++ ULONG Machine;
++ ULONG MsgType;
++ ULONG MsgLen;
++ UCHAR Msg[MGMT_DMA_BUFFER_SIZE];
++ LARGE_INTEGER TimeStamp;
++ UCHAR Rssi0;
++ UCHAR Rssi1;
++ UCHAR Rssi2;
++ UCHAR Signal;
++ UCHAR Channel;
++ UCHAR Wcid;
++ BOOLEAN Occupied;
++} MLME_QUEUE_ELEM, *PMLME_QUEUE_ELEM;
++
++typedef struct _MLME_QUEUE {
++ ULONG Num;
++ ULONG Head;
++ ULONG Tail;
++ NDIS_SPIN_LOCK Lock;
++ MLME_QUEUE_ELEM Entry[MAX_LEN_OF_MLME_QUEUE];
++} MLME_QUEUE, *PMLME_QUEUE;
++
++typedef VOID (*STATE_MACHINE_FUNC)(VOID *Adaptor, MLME_QUEUE_ELEM *Elem);
++
++typedef struct _STATE_MACHINE {
++ ULONG Base;
++ ULONG NrState;
++ ULONG NrMsg;
++ ULONG CurrState;
++ STATE_MACHINE_FUNC *TransFunc;
++} STATE_MACHINE, *PSTATE_MACHINE;
++
++
++// MLME AUX data structure that hold temporarliy settings during a connection attempt.
++// Once this attemp succeeds, all settings will be copy to pAd->StaActive.
++// A connection attempt (user set OID, roaming, CCX fast roaming,..) consists of
++// several steps (JOIN, AUTH, ASSOC or REASSOC) and may fail at any step. We purposely
++// separate this under-trial settings away from pAd->StaActive so that once
++// this new attempt failed, driver can auto-recover back to the active settings.
++typedef struct _MLME_AUX {
++ UCHAR BssType;
++ UCHAR Ssid[MAX_LEN_OF_SSID];
++ UCHAR SsidLen;
++ UCHAR Bssid[MAC_ADDR_LEN];
++ UCHAR AutoReconnectSsid[MAX_LEN_OF_SSID];
++ UCHAR AutoReconnectSsidLen;
++ USHORT Alg;
++ UCHAR ScanType;
++ UCHAR Channel;
++ UCHAR CentralChannel;
++ USHORT Aid;
++ USHORT CapabilityInfo;
++ USHORT BeaconPeriod;
++ USHORT CfpMaxDuration;
++ USHORT CfpPeriod;
++ USHORT AtimWin;
++
++ // Copy supported rate from desired AP's beacon. We are trying to match
++ // AP's supported and extended rate settings.
++ UCHAR SupRate[MAX_LEN_OF_SUPPORTED_RATES];
++ UCHAR ExtRate[MAX_LEN_OF_SUPPORTED_RATES];
++ UCHAR SupRateLen;
++ UCHAR ExtRateLen;
++ HT_CAPABILITY_IE HtCapability;
++ UCHAR HtCapabilityLen;
++ ADD_HT_INFO_IE AddHtInfo; // AP might use this additional ht info IE
++ UCHAR NewExtChannelOffset;
++ //RT_HT_CAPABILITY SupportedHtPhy;
++
++ // new for QOS
++ QOS_CAPABILITY_PARM APQosCapability; // QOS capability of the current associated AP
++ EDCA_PARM APEdcaParm; // EDCA parameters of the current associated AP
++ QBSS_LOAD_PARM APQbssLoad; // QBSS load of the current associated AP
++
++ // new to keep Ralink specific feature
++ ULONG APRalinkIe;
++
++ BSS_TABLE SsidBssTab; // AP list for the same SSID
++ BSS_TABLE RoamTab; // AP list eligible for roaming
++ ULONG BssIdx;
++ ULONG RoamIdx;
++
++ BOOLEAN CurrReqIsFromNdis;
++
++ RALINK_TIMER_STRUCT BeaconTimer, ScanTimer;
++ RALINK_TIMER_STRUCT AuthTimer;
++ RALINK_TIMER_STRUCT AssocTimer, ReassocTimer, DisassocTimer;
++} MLME_AUX, *PMLME_AUX;
++
++typedef struct _MLME_ADDBA_REQ_STRUCT{
++ UCHAR Wcid; //
++ UCHAR pAddr[MAC_ADDR_LEN];
++ UCHAR BaBufSize;
++ USHORT TimeOutValue;
++ UCHAR TID;
++ UCHAR Token;
++ USHORT BaStartSeq;
++} MLME_ADDBA_REQ_STRUCT, *PMLME_ADDBA_REQ_STRUCT;
++
++
++typedef struct _MLME_DELBA_REQ_STRUCT{
++ UCHAR Wcid; //
++ UCHAR Addr[MAC_ADDR_LEN];
++ UCHAR TID;
++ UCHAR Initiator;
++} MLME_DELBA_REQ_STRUCT, *PMLME_DELBA_REQ_STRUCT;
++
++// assoc struct is equal to reassoc
++typedef struct _MLME_ASSOC_REQ_STRUCT{
++ UCHAR Addr[MAC_ADDR_LEN];
++ USHORT CapabilityInfo;
++ USHORT ListenIntv;
++ ULONG Timeout;
++} MLME_ASSOC_REQ_STRUCT, *PMLME_ASSOC_REQ_STRUCT, MLME_REASSOC_REQ_STRUCT, *PMLME_REASSOC_REQ_STRUCT;
++
++typedef struct _MLME_DISASSOC_REQ_STRUCT{
++ UCHAR Addr[MAC_ADDR_LEN];
++ USHORT Reason;
++} MLME_DISASSOC_REQ_STRUCT, *PMLME_DISASSOC_REQ_STRUCT;
++
++typedef struct _MLME_AUTH_REQ_STRUCT {
++ UCHAR Addr[MAC_ADDR_LEN];
++ USHORT Alg;
++ ULONG Timeout;
++} MLME_AUTH_REQ_STRUCT, *PMLME_AUTH_REQ_STRUCT;
++
++typedef struct _MLME_DEAUTH_REQ_STRUCT {
++ UCHAR Addr[MAC_ADDR_LEN];
++ USHORT Reason;
++} MLME_DEAUTH_REQ_STRUCT, *PMLME_DEAUTH_REQ_STRUCT;
++
++typedef struct {
++ ULONG BssIdx;
++} MLME_JOIN_REQ_STRUCT;
++
++typedef struct _MLME_SCAN_REQ_STRUCT {
++ UCHAR Bssid[MAC_ADDR_LEN];
++ UCHAR BssType;
++ UCHAR ScanType;
++ UCHAR SsidLen;
++ CHAR Ssid[MAX_LEN_OF_SSID];
++} MLME_SCAN_REQ_STRUCT, *PMLME_SCAN_REQ_STRUCT;
++
++typedef struct _MLME_START_REQ_STRUCT {
++ CHAR Ssid[MAX_LEN_OF_SSID];
++ UCHAR SsidLen;
++} MLME_START_REQ_STRUCT, *PMLME_START_REQ_STRUCT;
++
++#ifdef CONFIG_STA_SUPPORT
++#ifdef QOS_DLS_SUPPORT
++// structure for DLS
++typedef struct _RT_802_11_DLS {
++ USHORT TimeOut; // Use to time out while slience, unit: second , set by UI
++ USHORT CountDownTimer; // Use to time out while slience,unit: second , used by driver only
++ NDIS_802_11_MAC_ADDRESS MacAddr; // set by UI
++ UCHAR Status; // 0: none , 1: wait STAkey, 2: finish DLS setup , set by driver only
++ BOOLEAN Valid; // 1: valid , 0: invalid , set by UI, use to setup or tear down DLS link
++ RALINK_TIMER_STRUCT Timer; // Use to time out while handshake
++ USHORT Sequence;
++ USHORT MacTabMatchWCID; // ASIC
++ BOOLEAN bHTCap;
++ PVOID pAd;
++} RT_802_11_DLS, *PRT_802_11_DLS;
++
++typedef struct _MLME_DLS_REQ_STRUCT {
++ PRT_802_11_DLS pDLS;
++ USHORT Reason;
++} MLME_DLS_REQ_STRUCT, *PMLME_DLS_REQ_STRUCT;
++#endif // QOS_DLS_SUPPORT //
++#endif // CONFIG_STA_SUPPORT //
++
++typedef struct PACKED {
++ UCHAR Eid;
++ UCHAR Len;
++ CHAR Octet[1];
++} EID_STRUCT,*PEID_STRUCT, BEACON_EID_STRUCT, *PBEACON_EID_STRUCT;
++
++typedef struct PACKED _RTMP_TX_RATE_SWITCH
++{
++ UCHAR ItemNo;
++#ifdef RT_BIG_ENDIAN
++ UCHAR Rsv2:2;
++ UCHAR Mode:2;
++ UCHAR Rsv1:1;
++ UCHAR BW:1;
++ UCHAR ShortGI:1;
++ UCHAR STBC:1;
++#else
++ UCHAR STBC:1;
++ UCHAR ShortGI:1;
++ UCHAR BW:1;
++ UCHAR Rsv1:1;
++ UCHAR Mode:2;
++ UCHAR Rsv2:2;
++#endif
++ UCHAR CurrMCS;
++ UCHAR TrainUp;
++ UCHAR TrainDown;
++} RRTMP_TX_RATE_SWITCH, *PRTMP_TX_RATE_SWITCH;
++
++// ========================== AP mlme.h ===============================
++#define TBTT_PRELOAD_TIME 384 // usec. LomgPreamble + 24-byte at 1Mbps
++#define DEFAULT_DTIM_PERIOD 1
++
++// weighting factor to calculate Channel quality, total should be 100%
++//#define RSSI_WEIGHTING 0
++//#define TX_WEIGHTING 40
++//#define RX_WEIGHTING 60
++
++#define MAC_TABLE_AGEOUT_TIME 300 // unit: sec
++#define MAC_TABLE_ASSOC_TIMEOUT 5 // unit: sec
++#define MAC_TABLE_FULL(Tab) ((Tab).size == MAX_LEN_OF_MAC_TABLE)
++
++// AP shall drop the sta if contine Tx fail count reach it.
++#define MAC_ENTRY_LIFE_CHECK_CNT 20 // packet cnt.
++
++// Value domain of pMacEntry->Sst
++typedef enum _Sst {
++ SST_NOT_AUTH, // 0: equivalent to IEEE 802.11/1999 state 1
++ SST_AUTH, // 1: equivalent to IEEE 802.11/1999 state 2
++ SST_ASSOC // 2: equivalent to IEEE 802.11/1999 state 3
++} SST;
++
++// value domain of pMacEntry->AuthState
++typedef enum _AuthState {
++ AS_NOT_AUTH,
++ AS_AUTH_OPEN, // STA has been authenticated using OPEN SYSTEM
++ AS_AUTH_KEY, // STA has been authenticated using SHARED KEY
++ AS_AUTHENTICATING // STA is waiting for AUTH seq#3 using SHARED KEY
++} AUTH_STATE;
++
++//for-wpa value domain of pMacEntry->WpaState 802.1i D3 p.114
++typedef enum _ApWpaState {
++ AS_NOTUSE, // 0
++ AS_DISCONNECT, // 1
++ AS_DISCONNECTED, // 2
++ AS_INITIALIZE, // 3
++ AS_AUTHENTICATION, // 4
++ AS_AUTHENTICATION2, // 5
++ AS_INITPMK, // 6
++ AS_INITPSK, // 7
++ AS_PTKSTART, // 8
++ AS_PTKINIT_NEGOTIATING, // 9
++ AS_PTKINITDONE, // 10
++ AS_UPDATEKEYS, // 11
++ AS_INTEGRITY_FAILURE, // 12
++ AS_KEYUPDATE, // 13
++} AP_WPA_STATE;
++
++// for-wpa value domain of pMacEntry->WpaState 802.1i D3 p.114
++typedef enum _GTKState {
++ REKEY_NEGOTIATING,
++ REKEY_ESTABLISHED,
++ KEYERROR,
++} GTK_STATE;
++
++// for-wpa value domain of pMacEntry->WpaState 802.1i D3 p.114
++typedef enum _WpaGTKState {
++ SETKEYS,
++ SETKEYS_DONE,
++} WPA_GTK_STATE;
++// ====================== end of AP mlme.h ============================
++
++
++#endif // MLME_H__
+--- /dev/null
++++ b/drivers/staging/rt2870/netif_block.h
+@@ -0,0 +1,58 @@
++/*
++ *************************************************************************
++ * Ralink Tech Inc.
++ * 5F., No.36, Taiyuan St., Jhubei City,
++ * Hsinchu County 302,
++ * Taiwan, R.O.C.
++ *
++ * (c) Copyright 2002-2007, Ralink Technology, Inc.
++ *
++ * This program is free software; you can redistribute it and/or modify *
++ * it under the terms of the GNU General Public License as published by *
++ * the Free Software Foundation; either version 2 of the License, or *
++ * (at your option) any later version. *
++ * *
++ * This program is distributed in the hope that it will be useful, *
++ * but WITHOUT ANY WARRANTY; without even the implied warranty of *
++ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the *
++ * GNU General Public License for more details. *
++ * *
++ * You should have received a copy of the GNU General Public License *
++ * along with this program; if not, write to the *
++ * Free Software Foundation, Inc., *
++ * 59 Temple Place - Suite 330, Boston, MA 02111-1307, USA. *
++ * *
++ *************************************************************************
++ */
++
++#ifndef __NET_IF_BLOCK_H__
++#define __NET_IF_BLOCK_H__
++
++//#include <linux/device.h>
++#include "link_list.h"
++#include "rtmp.h"
++
++#define FREE_NETIF_POOL_SIZE 32
++
++typedef struct _NETIF_ENTRY
++{
++ struct _NETIF_ENTRY *pNext;
++ PNET_DEV pNetDev;
++} NETIF_ENTRY, *PNETIF_ENTRY;
++
++void initblockQueueTab(
++ IN PRTMP_ADAPTER pAd);
++
++BOOLEAN blockNetIf(
++ IN PBLOCK_QUEUE_ENTRY pBlockQueueEntry,
++ IN PNET_DEV pNetDev);
++
++VOID releaseNetIf(
++ IN PBLOCK_QUEUE_ENTRY pBlockQueueEntry);
++
++VOID StopNetIfQueue(
++ IN PRTMP_ADAPTER pAd,
++ IN UCHAR QueIdx,
++ IN PNDIS_PACKET pPacket);
++#endif // __NET_IF_BLOCK_H__
++
+--- /dev/null
++++ b/drivers/staging/rt2870/oid.h
+@@ -0,0 +1,1091 @@
++/*
++ *************************************************************************
++ * Ralink Tech Inc.
++ * 5F., No.36, Taiyuan St., Jhubei City,
++ * Hsinchu County 302,
++ * Taiwan, R.O.C.
++ *
++ * (c) Copyright 2002-2007, Ralink Technology, Inc.
++ *
++ * This program is free software; you can redistribute it and/or modify *
++ * it under the terms of the GNU General Public License as published by *
++ * the Free Software Foundation; either version 2 of the License, or *
++ * (at your option) any later version. *
++ * *
++ * This program is distributed in the hope that it will be useful, *
++ * but WITHOUT ANY WARRANTY; without even the implied warranty of *
++ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the *
++ * GNU General Public License for more details. *
++ * *
++ * You should have received a copy of the GNU General Public License *
++ * along with this program; if not, write to the *
++ * Free Software Foundation, Inc., *
++ * 59 Temple Place - Suite 330, Boston, MA 02111-1307, USA. *
++ * *
++ *************************************************************************
++
++ Module Name:
++ oid.h
++
++ Abstract:
++
++ Revision History:
++ Who When What
++ -------- ---------- ----------------------------------------------
++ Name Date Modification logs
++*/
++#ifndef _OID_H_
++#define _OID_H_
++
++#define TRUE 1
++#define FALSE 0
++//
++// IEEE 802.11 Structures and definitions
++//
++#define MAX_TX_POWER_LEVEL 100 /* mW */
++#define MAX_RSSI_TRIGGER -10 /* dBm */
++#define MIN_RSSI_TRIGGER -200 /* dBm */
++#define MAX_FRAG_THRESHOLD 2346 /* byte count */
++#define MIN_FRAG_THRESHOLD 256 /* byte count */
++#define MAX_RTS_THRESHOLD 2347 /* byte count */
++
++// new types for Media Specific Indications
++// Extension channel offset
++#define EXTCHA_NONE 0
++#define EXTCHA_ABOVE 0x1
++#define EXTCHA_BELOW 0x3
++
++// BW
++#define BAND_WIDTH_20 0
++#define BAND_WIDTH_40 1
++#define BAND_WIDTH_BOTH 2
++#define BAND_WIDTH_10 3 // 802.11j has 10MHz. This definition is for internal usage. doesn't fill in the IE or other field.
++// SHORTGI
++#define GAP_INTERVAL_400 1 // only support in HT mode
++#define GAP_INTERVAL_800 0
++#define GAP_INTERVAL_BOTH 2
++
++#define NdisMediaStateConnected 1
++#define NdisMediaStateDisconnected 0
++
++#define NDIS_802_11_LENGTH_SSID 32
++#define NDIS_802_11_LENGTH_RATES 8
++#define NDIS_802_11_LENGTH_RATES_EX 16
++#define MAC_ADDR_LENGTH 6
++#define MAX_NUM_OF_CHS 49 // 14 channels @2.4G + 12@UNII + 4 @MMAC + 11 @HiperLAN2 + 7 @Japan + 1 as NULL terminationc
++#define MAX_NUMBER_OF_EVENT 10 // entry # in EVENT table
++#define MAX_NUMBER_OF_MAC 32 // if MAX_MBSSID_NUM is 8, this value can't be larger than 211
++#define MAX_NUMBER_OF_ACL 64
++#define MAX_LENGTH_OF_SUPPORT_RATES 12 // 1, 2, 5.5, 11, 6, 9, 12, 18, 24, 36, 48, 54
++#define MAX_NUMBER_OF_DLS_ENTRY 4
++
++#ifndef UNDER_CE
++// OID definition, since NDIS 5.0 didn't define these, we need to define for our own
++//#if _WIN32_WINNT<=0x0500
++
++#define OID_GEN_MACHINE_NAME 0x0001021A
++
++#ifdef RALINK_ATE
++#define RT_QUERY_ATE_TXDONE_COUNT 0x0401
++#endif // RALINK_ATE //
++#define RT_QUERY_SIGNAL_CONTEXT 0x0402
++#define RT_SET_IAPP_PID 0x0404
++#define RT_SET_APD_PID 0x0405
++#define RT_SET_DEL_MAC_ENTRY 0x0406
++
++//
++// IEEE 802.11 OIDs
++//
++#define OID_GET_SET_TOGGLE 0x8000
++
++#define OID_802_11_NETWORK_TYPES_SUPPORTED 0x0103
++#define OID_802_11_NETWORK_TYPE_IN_USE 0x0104
++#define OID_802_11_RSSI_TRIGGER 0x0107
++#define RT_OID_802_11_RSSI 0x0108 //rt2860 only , kathy
++#define RT_OID_802_11_RSSI_1 0x0109 //rt2860 only , kathy
++#define RT_OID_802_11_RSSI_2 0x010A //rt2860 only , kathy
++#define OID_802_11_NUMBER_OF_ANTENNAS 0x010B
++#define OID_802_11_RX_ANTENNA_SELECTED 0x010C
++#define OID_802_11_TX_ANTENNA_SELECTED 0x010D
++#define OID_802_11_SUPPORTED_RATES 0x010E
++#define OID_802_11_ADD_WEP 0x0112
++#define OID_802_11_REMOVE_WEP 0x0113
++#define OID_802_11_DISASSOCIATE 0x0114
++#define OID_802_11_PRIVACY_FILTER 0x0118
++#define OID_802_11_ASSOCIATION_INFORMATION 0x011E
++#define OID_802_11_TEST 0x011F
++#define RT_OID_802_11_COUNTRY_REGION 0x0507
++#define OID_802_11_BSSID_LIST_SCAN 0x0508
++#define OID_802_11_SSID 0x0509
++#define OID_802_11_BSSID 0x050A
++#define RT_OID_802_11_RADIO 0x050B
++#define RT_OID_802_11_PHY_MODE 0x050C
++#define RT_OID_802_11_STA_CONFIG 0x050D
++#define OID_802_11_DESIRED_RATES 0x050E
++#define RT_OID_802_11_PREAMBLE 0x050F
++#define OID_802_11_WEP_STATUS 0x0510
++#define OID_802_11_AUTHENTICATION_MODE 0x0511
++#define OID_802_11_INFRASTRUCTURE_MODE 0x0512
++#define RT_OID_802_11_RESET_COUNTERS 0x0513
++#define OID_802_11_RTS_THRESHOLD 0x0514
++#define OID_802_11_FRAGMENTATION_THRESHOLD 0x0515
++#define OID_802_11_POWER_MODE 0x0516
++#define OID_802_11_TX_POWER_LEVEL 0x0517
++#define RT_OID_802_11_ADD_WPA 0x0518
++#define OID_802_11_REMOVE_KEY 0x0519
++#define OID_802_11_ADD_KEY 0x0520
++#define OID_802_11_CONFIGURATION 0x0521
++#define OID_802_11_TX_PACKET_BURST 0x0522
++#define RT_OID_802_11_QUERY_NOISE_LEVEL 0x0523
++#define RT_OID_802_11_EXTRA_INFO 0x0524
++#ifdef DBG
++#define RT_OID_802_11_HARDWARE_REGISTER 0x0525
++#endif
++#define OID_802_11_ENCRYPTION_STATUS OID_802_11_WEP_STATUS
++#define OID_802_11_DEAUTHENTICATION 0x0526
++#define OID_802_11_DROP_UNENCRYPTED 0x0527
++#define OID_802_11_MIC_FAILURE_REPORT_FRAME 0x0528
++
++// For 802.1x daemin using to require current driver configuration
++#define OID_802_11_RADIUS_QUERY_SETTING 0x0540
++
++#define RT_OID_DEVICE_NAME 0x0607
++#define RT_OID_VERSION_INFO 0x0608
++#define OID_802_11_BSSID_LIST 0x0609
++#define OID_802_3_CURRENT_ADDRESS 0x060A
++#define OID_GEN_MEDIA_CONNECT_STATUS 0x060B
++#define RT_OID_802_11_QUERY_LINK_STATUS 0x060C
++#define OID_802_11_RSSI 0x060D
++#define OID_802_11_STATISTICS 0x060E
++#define OID_GEN_RCV_OK 0x060F
++#define OID_GEN_RCV_NO_BUFFER 0x0610
++#define RT_OID_802_11_QUERY_EEPROM_VERSION 0x0611
++#define RT_OID_802_11_QUERY_FIRMWARE_VERSION 0x0612
++#define RT_OID_802_11_QUERY_LAST_RX_RATE 0x0613
++#define RT_OID_802_11_TX_POWER_LEVEL_1 0x0614
++#define RT_OID_802_11_QUERY_PIDVID 0x0615
++//for WPA_SUPPLICANT_SUPPORT
++#define OID_SET_COUNTERMEASURES 0x0616
++#define OID_802_11_SET_IEEE8021X 0x0617
++#define OID_802_11_SET_IEEE8021X_REQUIRE_KEY 0x0618
++#define OID_802_11_PMKID 0x0620
++#define RT_OID_WPA_SUPPLICANT_SUPPORT 0x0621
++#define RT_OID_WE_VERSION_COMPILED 0x0622
++#define RT_OID_NEW_DRIVER 0x0623
++
++
++//rt2860 , kathy
++#define RT_OID_802_11_SNR_0 0x0630
++#define RT_OID_802_11_SNR_1 0x0631
++#define RT_OID_802_11_QUERY_LAST_TX_RATE 0x0632
++#define RT_OID_802_11_QUERY_HT_PHYMODE 0x0633
++#define RT_OID_802_11_SET_HT_PHYMODE 0x0634
++#define OID_802_11_RELOAD_DEFAULTS 0x0635
++#define RT_OID_802_11_QUERY_APSD_SETTING 0x0636
++#define RT_OID_802_11_SET_APSD_SETTING 0x0637
++#define RT_OID_802_11_QUERY_APSD_PSM 0x0638
++#define RT_OID_802_11_SET_APSD_PSM 0x0639
++#define RT_OID_802_11_QUERY_DLS 0x063A
++#define RT_OID_802_11_SET_DLS 0x063B
++#define RT_OID_802_11_QUERY_DLS_PARAM 0x063C
++#define RT_OID_802_11_SET_DLS_PARAM 0x063D
++#define RT_OID_802_11_QUERY_WMM 0x063E
++#define RT_OID_802_11_SET_WMM 0x063F
++#define RT_OID_802_11_QUERY_IMME_BA_CAP 0x0640
++#define RT_OID_802_11_SET_IMME_BA_CAP 0x0641
++#define RT_OID_802_11_QUERY_BATABLE 0x0642
++#define RT_OID_802_11_ADD_IMME_BA 0x0643
++#define RT_OID_802_11_TEAR_IMME_BA 0x0644
++#define RT_OID_DRIVER_DEVICE_NAME 0x0645
++#define RT_OID_802_11_QUERY_DAT_HT_PHYMODE 0x0646
++#define RT_OID_QUERY_MULTIPLE_CARD_SUPPORT 0x0647
++
++// Ralink defined OIDs
++// Dennis Lee move to platform specific
++
++#define RT_OID_802_11_BSSID (OID_GET_SET_TOGGLE | OID_802_11_BSSID)
++#define RT_OID_802_11_SSID (OID_GET_SET_TOGGLE | OID_802_11_SSID)
++#define RT_OID_802_11_INFRASTRUCTURE_MODE (OID_GET_SET_TOGGLE | OID_802_11_INFRASTRUCTURE_MODE)
++#define RT_OID_802_11_ADD_WEP (OID_GET_SET_TOGGLE | OID_802_11_ADD_WEP)
++#define RT_OID_802_11_ADD_KEY (OID_GET_SET_TOGGLE | OID_802_11_ADD_KEY)
++#define RT_OID_802_11_REMOVE_WEP (OID_GET_SET_TOGGLE | OID_802_11_REMOVE_WEP)
++#define RT_OID_802_11_REMOVE_KEY (OID_GET_SET_TOGGLE | OID_802_11_REMOVE_KEY)
++#define RT_OID_802_11_DISASSOCIATE (OID_GET_SET_TOGGLE | OID_802_11_DISASSOCIATE)
++#define RT_OID_802_11_AUTHENTICATION_MODE (OID_GET_SET_TOGGLE | OID_802_11_AUTHENTICATION_MODE)
++#define RT_OID_802_11_PRIVACY_FILTER (OID_GET_SET_TOGGLE | OID_802_11_PRIVACY_FILTER)
++#define RT_OID_802_11_BSSID_LIST_SCAN (OID_GET_SET_TOGGLE | OID_802_11_BSSID_LIST_SCAN)
++#define RT_OID_802_11_WEP_STATUS (OID_GET_SET_TOGGLE | OID_802_11_WEP_STATUS)
++#define RT_OID_802_11_RELOAD_DEFAULTS (OID_GET_SET_TOGGLE | OID_802_11_RELOAD_DEFAULTS)
++#define RT_OID_802_11_NETWORK_TYPE_IN_USE (OID_GET_SET_TOGGLE | OID_802_11_NETWORK_TYPE_IN_USE)
++#define RT_OID_802_11_TX_POWER_LEVEL (OID_GET_SET_TOGGLE | OID_802_11_TX_POWER_LEVEL)
++#define RT_OID_802_11_RSSI_TRIGGER (OID_GET_SET_TOGGLE | OID_802_11_RSSI_TRIGGER)
++#define RT_OID_802_11_FRAGMENTATION_THRESHOLD (OID_GET_SET_TOGGLE | OID_802_11_FRAGMENTATION_THRESHOLD)
++#define RT_OID_802_11_RTS_THRESHOLD (OID_GET_SET_TOGGLE | OID_802_11_RTS_THRESHOLD)
++#define RT_OID_802_11_RX_ANTENNA_SELECTED (OID_GET_SET_TOGGLE | OID_802_11_RX_ANTENNA_SELECTED)
++#define RT_OID_802_11_TX_ANTENNA_SELECTED (OID_GET_SET_TOGGLE | OID_802_11_TX_ANTENNA_SELECTED)
++#define RT_OID_802_11_SUPPORTED_RATES (OID_GET_SET_TOGGLE | OID_802_11_SUPPORTED_RATES)
++#define RT_OID_802_11_DESIRED_RATES (OID_GET_SET_TOGGLE | OID_802_11_DESIRED_RATES)
++#define RT_OID_802_11_CONFIGURATION (OID_GET_SET_TOGGLE | OID_802_11_CONFIGURATION)
++#define RT_OID_802_11_POWER_MODE (OID_GET_SET_TOGGLE | OID_802_11_POWER_MODE)
++
++typedef enum _NDIS_802_11_STATUS_TYPE
++{
++ Ndis802_11StatusType_Authentication,
++ Ndis802_11StatusType_MediaStreamMode,
++ Ndis802_11StatusType_PMKID_CandidateList,
++ Ndis802_11StatusTypeMax // not a real type, defined as an upper bound
++} NDIS_802_11_STATUS_TYPE, *PNDIS_802_11_STATUS_TYPE;
++
++typedef UCHAR NDIS_802_11_MAC_ADDRESS[6];
++
++typedef struct _NDIS_802_11_STATUS_INDICATION
++{
++ NDIS_802_11_STATUS_TYPE StatusType;
++} NDIS_802_11_STATUS_INDICATION, *PNDIS_802_11_STATUS_INDICATION;
++
++// mask for authentication/integrity fields
++#define NDIS_802_11_AUTH_REQUEST_AUTH_FIELDS 0x0f
++
++#define NDIS_802_11_AUTH_REQUEST_REAUTH 0x01
++#define NDIS_802_11_AUTH_REQUEST_KEYUPDATE 0x02
++#define NDIS_802_11_AUTH_REQUEST_PAIRWISE_ERROR 0x06
++#define NDIS_802_11_AUTH_REQUEST_GROUP_ERROR 0x0E
++
++typedef struct _NDIS_802_11_AUTHENTICATION_REQUEST
++{
++ ULONG Length; // Length of structure
++ NDIS_802_11_MAC_ADDRESS Bssid;
++ ULONG Flags;
++} NDIS_802_11_AUTHENTICATION_REQUEST, *PNDIS_802_11_AUTHENTICATION_REQUEST;
++
++//Added new types for PMKID Candidate lists.
++typedef struct _PMKID_CANDIDATE {
++ NDIS_802_11_MAC_ADDRESS BSSID;
++ ULONG Flags;
++} PMKID_CANDIDATE, *PPMKID_CANDIDATE;
++
++typedef struct _NDIS_802_11_PMKID_CANDIDATE_LIST
++{
++ ULONG Version; // Version of the structure
++ ULONG NumCandidates; // No. of pmkid candidates
++ PMKID_CANDIDATE CandidateList[1];
++} NDIS_802_11_PMKID_CANDIDATE_LIST, *PNDIS_802_11_PMKID_CANDIDATE_LIST;
++
++//Flags for PMKID Candidate list structure
++#define NDIS_802_11_PMKID_CANDIDATE_PREAUTH_ENABLED 0x01
++
++// Added new types for OFDM 5G and 2.4G
++typedef enum _NDIS_802_11_NETWORK_TYPE
++{
++ Ndis802_11FH,
++ Ndis802_11DS,
++ Ndis802_11OFDM5,
++ Ndis802_11OFDM5_N,
++ Ndis802_11OFDM24,
++ Ndis802_11OFDM24_N,
++ Ndis802_11Automode,
++ Ndis802_11NetworkTypeMax // not a real type, defined as an upper bound
++} NDIS_802_11_NETWORK_TYPE, *PNDIS_802_11_NETWORK_TYPE;
++
++typedef struct _NDIS_802_11_NETWORK_TYPE_LIST
++{
++ UINT NumberOfItems; // in list below, at least 1
++ NDIS_802_11_NETWORK_TYPE NetworkType [1];
++} NDIS_802_11_NETWORK_TYPE_LIST, *PNDIS_802_11_NETWORK_TYPE_LIST;
++
++typedef enum _NDIS_802_11_POWER_MODE
++{
++ Ndis802_11PowerModeCAM,
++ Ndis802_11PowerModeMAX_PSP,
++ Ndis802_11PowerModeFast_PSP,
++ Ndis802_11PowerModeLegacy_PSP,
++ Ndis802_11PowerModeMax // not a real mode, defined as an upper bound
++} NDIS_802_11_POWER_MODE, *PNDIS_802_11_POWER_MODE;
++
++typedef ULONG NDIS_802_11_TX_POWER_LEVEL; // in milliwatts
++
++//
++// Received Signal Strength Indication
++//
++typedef LONG NDIS_802_11_RSSI; // in dBm
++
++typedef struct _NDIS_802_11_CONFIGURATION_FH
++{
++ ULONG Length; // Length of structure
++ ULONG HopPattern; // As defined by 802.11, MSB set
++ ULONG HopSet; // to one if non-802.11
++ ULONG DwellTime; // units are Kusec
++} NDIS_802_11_CONFIGURATION_FH, *PNDIS_802_11_CONFIGURATION_FH;
++
++typedef struct _NDIS_802_11_CONFIGURATION
++{
++ ULONG Length; // Length of structure
++ ULONG BeaconPeriod; // units are Kusec
++ ULONG ATIMWindow; // units are Kusec
++ ULONG DSConfig; // Frequency, units are kHz
++ NDIS_802_11_CONFIGURATION_FH FHConfig;
++} NDIS_802_11_CONFIGURATION, *PNDIS_802_11_CONFIGURATION;
++
++typedef struct _NDIS_802_11_STATISTICS
++{
++ ULONG Length; // Length of structure
++ LARGE_INTEGER TransmittedFragmentCount;
++ LARGE_INTEGER MulticastTransmittedFrameCount;
++ LARGE_INTEGER FailedCount;
++ LARGE_INTEGER RetryCount;
++ LARGE_INTEGER MultipleRetryCount;
++ LARGE_INTEGER RTSSuccessCount;
++ LARGE_INTEGER RTSFailureCount;
++ LARGE_INTEGER ACKFailureCount;
++ LARGE_INTEGER FrameDuplicateCount;
++ LARGE_INTEGER ReceivedFragmentCount;
++ LARGE_INTEGER MulticastReceivedFrameCount;
++ LARGE_INTEGER FCSErrorCount;
++ LARGE_INTEGER TKIPLocalMICFailures;
++ LARGE_INTEGER TKIPRemoteMICErrors;
++ LARGE_INTEGER TKIPICVErrors;
++ LARGE_INTEGER TKIPCounterMeasuresInvoked;
++ LARGE_INTEGER TKIPReplays;
++ LARGE_INTEGER CCMPFormatErrors;
++ LARGE_INTEGER CCMPReplays;
++ LARGE_INTEGER CCMPDecryptErrors;
++ LARGE_INTEGER FourWayHandshakeFailures;
++} NDIS_802_11_STATISTICS, *PNDIS_802_11_STATISTICS;
++
++typedef ULONG NDIS_802_11_KEY_INDEX;
++typedef ULONGLONG NDIS_802_11_KEY_RSC;
++
++#define MAX_RADIUS_SRV_NUM 2 // 802.1x failover number
++
++typedef struct PACKED _RADIUS_SRV_INFO {
++ UINT32 radius_ip;
++ UINT32 radius_port;
++ UCHAR radius_key[64];
++ UCHAR radius_key_len;
++} RADIUS_SRV_INFO, *PRADIUS_SRV_INFO;
++
++typedef struct PACKED _RADIUS_KEY_INFO
++{
++ UCHAR radius_srv_num;
++ RADIUS_SRV_INFO radius_srv_info[MAX_RADIUS_SRV_NUM];
++ UCHAR ieee8021xWEP; // dynamic WEP
++ UCHAR key_index;
++ UCHAR key_length; // length of key in bytes
++ UCHAR key_material[13];
++} RADIUS_KEY_INFO, *PRADIUS_KEY_INFO;
++
++// It's used by 802.1x daemon to require relative configuration
++typedef struct PACKED _RADIUS_CONF
++{
++ UINT32 Length; // Length of this structure
++ UCHAR mbss_num; // indicate multiple BSS number
++ UINT32 own_ip_addr;
++ UINT32 retry_interval;
++ UINT32 session_timeout_interval;
++ UCHAR EAPifname[IFNAMSIZ];
++ UCHAR EAPifname_len;
++ UCHAR PreAuthifname[IFNAMSIZ];
++ UCHAR PreAuthifname_len;
++ RADIUS_KEY_INFO RadiusInfo[8/*MAX_MBSSID_NUM*/];
++} RADIUS_CONF, *PRADIUS_CONF;
++
++
++
++#ifdef CONFIG_STA_SUPPORT
++// Key mapping keys require a BSSID
++typedef struct _NDIS_802_11_KEY
++{
++ UINT Length; // Length of this structure
++ UINT KeyIndex;
++ UINT KeyLength; // length of key in bytes
++ NDIS_802_11_MAC_ADDRESS BSSID;
++ NDIS_802_11_KEY_RSC KeyRSC;
++ UCHAR KeyMaterial[1]; // variable length depending on above field
++} NDIS_802_11_KEY, *PNDIS_802_11_KEY;
++#endif // CONFIG_STA_SUPPORT //
++
++typedef struct _NDIS_802_11_REMOVE_KEY
++{
++ UINT Length; // Length of this structure
++ UINT KeyIndex;
++ NDIS_802_11_MAC_ADDRESS BSSID;
++} NDIS_802_11_REMOVE_KEY, *PNDIS_802_11_REMOVE_KEY;
++
++typedef struct _NDIS_802_11_WEP
++{
++ UINT Length; // Length of this structure
++ UINT KeyIndex; // 0 is the per-client key, 1-N are the
++ // global keys
++ UINT KeyLength; // length of key in bytes
++ UCHAR KeyMaterial[1];// variable length depending on above field
++} NDIS_802_11_WEP, *PNDIS_802_11_WEP;
++
++
++typedef enum _NDIS_802_11_NETWORK_INFRASTRUCTURE
++{
++ Ndis802_11IBSS,
++ Ndis802_11Infrastructure,
++ Ndis802_11AutoUnknown,
++ Ndis802_11Monitor,
++ Ndis802_11InfrastructureMax // Not a real value, defined as upper bound
++} NDIS_802_11_NETWORK_INFRASTRUCTURE, *PNDIS_802_11_NETWORK_INFRASTRUCTURE;
++
++// Add new authentication modes
++typedef enum _NDIS_802_11_AUTHENTICATION_MODE
++{
++ Ndis802_11AuthModeOpen,
++ Ndis802_11AuthModeShared,
++ Ndis802_11AuthModeAutoSwitch,
++ Ndis802_11AuthModeWPA,
++ Ndis802_11AuthModeWPAPSK,
++ Ndis802_11AuthModeWPANone,
++ Ndis802_11AuthModeWPA2,
++ Ndis802_11AuthModeWPA2PSK,
++ Ndis802_11AuthModeWPA1WPA2,
++ Ndis802_11AuthModeWPA1PSKWPA2PSK,
++ Ndis802_11AuthModeMax // Not a real mode, defined as upper bound
++} NDIS_802_11_AUTHENTICATION_MODE, *PNDIS_802_11_AUTHENTICATION_MODE;
++
++typedef UCHAR NDIS_802_11_RATES[NDIS_802_11_LENGTH_RATES]; // Set of 8 data rates
++typedef UCHAR NDIS_802_11_RATES_EX[NDIS_802_11_LENGTH_RATES_EX]; // Set of 16 data rates
++
++typedef struct PACKED _NDIS_802_11_SSID
++{
++ UINT SsidLength; // length of SSID field below, in bytes;
++ // this can be zero.
++ UCHAR Ssid[NDIS_802_11_LENGTH_SSID]; // SSID information field
++} NDIS_802_11_SSID, *PNDIS_802_11_SSID;
++
++
++typedef struct PACKED _NDIS_WLAN_BSSID
++{
++ ULONG Length; // Length of this structure
++ NDIS_802_11_MAC_ADDRESS MacAddress; // BSSID
++ UCHAR Reserved[2];
++ NDIS_802_11_SSID Ssid; // SSID
++ ULONG Privacy; // WEP encryption requirement
++ NDIS_802_11_RSSI Rssi; // receive signal strength in dBm
++ NDIS_802_11_NETWORK_TYPE NetworkTypeInUse;
++ NDIS_802_11_CONFIGURATION Configuration;
++ NDIS_802_11_NETWORK_INFRASTRUCTURE InfrastructureMode;
++ NDIS_802_11_RATES SupportedRates;
++} NDIS_WLAN_BSSID, *PNDIS_WLAN_BSSID;
++
++typedef struct PACKED _NDIS_802_11_BSSID_LIST
++{
++ UINT NumberOfItems; // in list below, at least 1
++ NDIS_WLAN_BSSID Bssid[1];
++} NDIS_802_11_BSSID_LIST, *PNDIS_802_11_BSSID_LIST;
++
++// Added Capabilities, IELength and IEs for each BSSID
++typedef struct PACKED _NDIS_WLAN_BSSID_EX
++{
++ ULONG Length; // Length of this structure
++ NDIS_802_11_MAC_ADDRESS MacAddress; // BSSID
++ UCHAR Reserved[2];
++ NDIS_802_11_SSID Ssid; // SSID
++ UINT Privacy; // WEP encryption requirement
++ NDIS_802_11_RSSI Rssi; // receive signal
++ // strength in dBm
++ NDIS_802_11_NETWORK_TYPE NetworkTypeInUse;
++ NDIS_802_11_CONFIGURATION Configuration;
++ NDIS_802_11_NETWORK_INFRASTRUCTURE InfrastructureMode;
++ NDIS_802_11_RATES_EX SupportedRates;
++ ULONG IELength;
++ UCHAR IEs[1];
++} NDIS_WLAN_BSSID_EX, *PNDIS_WLAN_BSSID_EX;
++
++typedef struct PACKED _NDIS_802_11_BSSID_LIST_EX
++{
++ UINT NumberOfItems; // in list below, at least 1
++ NDIS_WLAN_BSSID_EX Bssid[1];
++} NDIS_802_11_BSSID_LIST_EX, *PNDIS_802_11_BSSID_LIST_EX;
++
++typedef struct PACKED _NDIS_802_11_FIXED_IEs
++{
++ UCHAR Timestamp[8];
++ USHORT BeaconInterval;
++ USHORT Capabilities;
++} NDIS_802_11_FIXED_IEs, *PNDIS_802_11_FIXED_IEs;
++
++typedef struct _NDIS_802_11_VARIABLE_IEs
++{
++ UCHAR ElementID;
++ UCHAR Length; // Number of bytes in data field
++ UCHAR data[1];
++} NDIS_802_11_VARIABLE_IEs, *PNDIS_802_11_VARIABLE_IEs;
++
++typedef ULONG NDIS_802_11_FRAGMENTATION_THRESHOLD;
++
++typedef ULONG NDIS_802_11_RTS_THRESHOLD;
++
++typedef ULONG NDIS_802_11_ANTENNA;
++
++typedef enum _NDIS_802_11_PRIVACY_FILTER
++{
++ Ndis802_11PrivFilterAcceptAll,
++ Ndis802_11PrivFilter8021xWEP
++} NDIS_802_11_PRIVACY_FILTER, *PNDIS_802_11_PRIVACY_FILTER;
++
++// Added new encryption types
++// Also aliased typedef to new name
++typedef enum _NDIS_802_11_WEP_STATUS
++{
++ Ndis802_11WEPEnabled,
++ Ndis802_11Encryption1Enabled = Ndis802_11WEPEnabled,
++ Ndis802_11WEPDisabled,
++ Ndis802_11EncryptionDisabled = Ndis802_11WEPDisabled,
++ Ndis802_11WEPKeyAbsent,
++ Ndis802_11Encryption1KeyAbsent = Ndis802_11WEPKeyAbsent,
++ Ndis802_11WEPNotSupported,
++ Ndis802_11EncryptionNotSupported = Ndis802_11WEPNotSupported,
++ Ndis802_11Encryption2Enabled,
++ Ndis802_11Encryption2KeyAbsent,
++ Ndis802_11Encryption3Enabled,
++ Ndis802_11Encryption3KeyAbsent,
++ Ndis802_11Encryption4Enabled, // TKIP or AES mix
++ Ndis802_11Encryption4KeyAbsent,
++ Ndis802_11GroupWEP40Enabled,
++ Ndis802_11GroupWEP104Enabled,
++} NDIS_802_11_WEP_STATUS, *PNDIS_802_11_WEP_STATUS,
++ NDIS_802_11_ENCRYPTION_STATUS, *PNDIS_802_11_ENCRYPTION_STATUS;
++
++typedef enum _NDIS_802_11_RELOAD_DEFAULTS
++{
++ Ndis802_11ReloadWEPKeys
++} NDIS_802_11_RELOAD_DEFAULTS, *PNDIS_802_11_RELOAD_DEFAULTS;
++
++#define NDIS_802_11_AI_REQFI_CAPABILITIES 1
++#define NDIS_802_11_AI_REQFI_LISTENINTERVAL 2
++#define NDIS_802_11_AI_REQFI_CURRENTAPADDRESS 4
++
++#define NDIS_802_11_AI_RESFI_CAPABILITIES 1
++#define NDIS_802_11_AI_RESFI_STATUSCODE 2
++#define NDIS_802_11_AI_RESFI_ASSOCIATIONID 4
++
++typedef struct _NDIS_802_11_AI_REQFI
++{
++ USHORT Capabilities;
++ USHORT ListenInterval;
++ NDIS_802_11_MAC_ADDRESS CurrentAPAddress;
++} NDIS_802_11_AI_REQFI, *PNDIS_802_11_AI_REQFI;
++
++typedef struct _NDIS_802_11_AI_RESFI
++{
++ USHORT Capabilities;
++ USHORT StatusCode;
++ USHORT AssociationId;
++} NDIS_802_11_AI_RESFI, *PNDIS_802_11_AI_RESFI;
++
++typedef struct _NDIS_802_11_ASSOCIATION_INFORMATION
++{
++ ULONG Length;
++ USHORT AvailableRequestFixedIEs;
++ NDIS_802_11_AI_REQFI RequestFixedIEs;
++ ULONG RequestIELength;
++ ULONG OffsetRequestIEs;
++ USHORT AvailableResponseFixedIEs;
++ NDIS_802_11_AI_RESFI ResponseFixedIEs;
++ ULONG ResponseIELength;
++ ULONG OffsetResponseIEs;
++} NDIS_802_11_ASSOCIATION_INFORMATION, *PNDIS_802_11_ASSOCIATION_INFORMATION;
++
++typedef struct _NDIS_802_11_AUTHENTICATION_EVENT
++{
++ NDIS_802_11_STATUS_INDICATION Status;
++ NDIS_802_11_AUTHENTICATION_REQUEST Request[1];
++} NDIS_802_11_AUTHENTICATION_EVENT, *PNDIS_802_11_AUTHENTICATION_EVENT;
++
++/*
++typedef struct _NDIS_802_11_TEST
++{
++ ULONG Length;
++ ULONG Type;
++ union
++ {
++ NDIS_802_11_AUTHENTICATION_EVENT AuthenticationEvent;
++ NDIS_802_11_RSSI RssiTrigger;
++ };
++} NDIS_802_11_TEST, *PNDIS_802_11_TEST;
++ */
++
++// 802.11 Media stream constraints, associated with OID_802_11_MEDIA_STREAM_MODE
++typedef enum _NDIS_802_11_MEDIA_STREAM_MODE
++{
++ Ndis802_11MediaStreamOff,
++ Ndis802_11MediaStreamOn,
++} NDIS_802_11_MEDIA_STREAM_MODE, *PNDIS_802_11_MEDIA_STREAM_MODE;
++
++// PMKID Structures
++typedef UCHAR NDIS_802_11_PMKID_VALUE[16];
++
++#ifdef CONFIG_STA_SUPPORT
++typedef struct _BSSID_INFO
++{
++ NDIS_802_11_MAC_ADDRESS BSSID;
++ NDIS_802_11_PMKID_VALUE PMKID;
++} BSSID_INFO, *PBSSID_INFO;
++
++typedef struct _NDIS_802_11_PMKID
++{
++ UINT Length;
++ UINT BSSIDInfoCount;
++ BSSID_INFO BSSIDInfo[1];
++} NDIS_802_11_PMKID, *PNDIS_802_11_PMKID;
++#endif // CONFIG_STA_SUPPORT //
++
++
++typedef struct _NDIS_802_11_AUTHENTICATION_ENCRYPTION
++{
++ NDIS_802_11_AUTHENTICATION_MODE AuthModeSupported;
++ NDIS_802_11_ENCRYPTION_STATUS EncryptStatusSupported;
++} NDIS_802_11_AUTHENTICATION_ENCRYPTION, *PNDIS_802_11_AUTHENTICATION_ENCRYPTION;
++
++typedef struct _NDIS_802_11_CAPABILITY
++{
++ ULONG Length;
++ ULONG Version;
++ ULONG NoOfPMKIDs;
++ ULONG NoOfAuthEncryptPairsSupported;
++ NDIS_802_11_AUTHENTICATION_ENCRYPTION AuthenticationEncryptionSupported[1];
++} NDIS_802_11_CAPABILITY, *PNDIS_802_11_CAPABILITY;
++
++//#endif //of WIN 2k
++#endif //UNDER_CE
++
++#if WIRELESS_EXT <= 11
++#ifndef SIOCDEVPRIVATE
++#define SIOCDEVPRIVATE 0x8BE0
++#endif
++#define SIOCIWFIRSTPRIV SIOCDEVPRIVATE
++#endif
++
++#ifdef CONFIG_STA_SUPPORT
++#define RTPRIV_IOCTL_SET (SIOCIWFIRSTPRIV + 0x02)
++
++#ifdef DBG
++#define RTPRIV_IOCTL_BBP (SIOCIWFIRSTPRIV + 0x03)
++#define RTPRIV_IOCTL_MAC (SIOCIWFIRSTPRIV + 0x05)
++#define RTPRIV_IOCTL_E2P (SIOCIWFIRSTPRIV + 0x07)
++#endif
++
++#ifdef RALINK_ATE
++#ifdef RALINK_28xx_QA
++#define RTPRIV_IOCTL_ATE (SIOCIWFIRSTPRIV + 0x08)
++#endif // RALINK_28xx_QA //
++#endif // RALINK_ATE //
++
++#define RTPRIV_IOCTL_STATISTICS (SIOCIWFIRSTPRIV + 0x09)
++#define RTPRIV_IOCTL_ADD_PMKID_CACHE (SIOCIWFIRSTPRIV + 0x0A)
++#define RTPRIV_IOCTL_RADIUS_DATA (SIOCIWFIRSTPRIV + 0x0C)
++#define RTPRIV_IOCTL_GSITESURVEY (SIOCIWFIRSTPRIV + 0x0D)
++#define RT_PRIV_IOCTL (SIOCIWFIRSTPRIV + 0x0E) // Sync. with RT61 (for wpa_supplicant)
++#define RTPRIV_IOCTL_GET_MAC_TABLE (SIOCIWFIRSTPRIV + 0x0F)
++
++#define RTPRIV_IOCTL_SHOW (SIOCIWFIRSTPRIV + 0x11)
++enum {
++ SHOW_CONN_STATUS = 4,
++ SHOW_DRVIER_VERION = 5,
++ SHOW_BA_INFO = 6,
++ SHOW_DESC_INFO = 7,
++#ifdef RT2870
++ SHOW_RXBULK_INFO = 8,
++ SHOW_TXBULK_INFO = 9,
++#endif // RT2870 //
++ RAIO_OFF = 10,
++ RAIO_ON = 11,
++#ifdef QOS_DLS_SUPPORT
++ SHOW_DLS_ENTRY_INFO = 19,
++#endif // QOS_DLS_SUPPORT //
++ SHOW_CFG_VALUE = 20,
++ SHOW_ADHOC_ENTRY_INFO = 21,
++};
++
++
++#endif // CONFIG_STA_SUPPORT //
++
++#ifdef SNMP_SUPPORT
++//SNMP ieee 802dot11, kathy , 2008_0220
++// dot11res(3)
++#define RT_OID_802_11_MANUFACTUREROUI 0x0700
++#define RT_OID_802_11_MANUFACTURERNAME 0x0701
++#define RT_OID_802_11_RESOURCETYPEIDNAME 0x0702
++
++// dot11smt(1)
++#define RT_OID_802_11_PRIVACYOPTIONIMPLEMENTED 0x0703
++#define RT_OID_802_11_POWERMANAGEMENTMODE 0x0704
++#define OID_802_11_WEPDEFAULTKEYVALUE 0x0705 // read , write
++#define OID_802_11_WEPDEFAULTKEYID 0x0706
++#define RT_OID_802_11_WEPKEYMAPPINGLENGTH 0x0707
++#define OID_802_11_SHORTRETRYLIMIT 0x0708
++#define OID_802_11_LONGRETRYLIMIT 0x0709
++#define RT_OID_802_11_PRODUCTID 0x0710
++#define RT_OID_802_11_MANUFACTUREID 0x0711
++
++// //dot11Phy(4)
++#define OID_802_11_CURRENTCHANNEL 0x0712
++
++//dot11mac
++#define RT_OID_802_11_MAC_ADDRESS 0x0713
++#endif // SNMP_SUPPORT //
++
++#define OID_802_11_BUILD_CHANNEL_EX 0x0714
++#define OID_802_11_GET_CH_LIST 0x0715
++#define OID_802_11_GET_COUNTRY_CODE 0x0716
++#define OID_802_11_GET_CHANNEL_GEOGRAPHY 0x0717
++
++#ifdef LLTD_SUPPORT
++// for consistency with RT61
++#define RT_OID_GET_PHY_MODE 0x761
++#endif // LLTD_SUPPORT //
++
++// MIMO Tx parameter, ShortGI, MCS, STBC, etc. these are fields in TXWI. Don't change this definition!!!
++typedef union _HTTRANSMIT_SETTING {
++#ifdef RT_BIG_ENDIAN
++ struct {
++ USHORT MODE:2; // Use definition MODE_xxx.
++// USHORT rsv:3;
++ USHORT TxBF:1;
++ USHORT rsv:2;
++ USHORT STBC:2; //SPACE
++ USHORT ShortGI:1;
++ USHORT BW:1; //channel bandwidth 20MHz or 40 MHz
++ USHORT MCS:7; // MCS
++ } field;
++#else
++ struct {
++ USHORT MCS:7; // MCS
++ USHORT BW:1; //channel bandwidth 20MHz or 40 MHz
++ USHORT ShortGI:1;
++ USHORT STBC:2; //SPACE
++// USHORT rsv:3;
++ USHORT rsv:2;
++ USHORT TxBF:1;
++ USHORT MODE:2; // Use definition MODE_xxx.
++ } field;
++#endif
++ USHORT word;
++ } HTTRANSMIT_SETTING, *PHTTRANSMIT_SETTING;
++
++typedef enum _RT_802_11_PREAMBLE {
++ Rt802_11PreambleLong,
++ Rt802_11PreambleShort,
++ Rt802_11PreambleAuto
++} RT_802_11_PREAMBLE, *PRT_802_11_PREAMBLE;
++
++// Only for STA, need to sync with AP
++typedef enum _RT_802_11_PHY_MODE {
++ PHY_11BG_MIXED = 0,
++ PHY_11B,
++ PHY_11A,
++ PHY_11ABG_MIXED,
++ PHY_11G,
++#ifdef DOT11_N_SUPPORT
++ PHY_11ABGN_MIXED, // both band 5
++ PHY_11N_2_4G, // 11n-only with 2.4G band 6
++ PHY_11GN_MIXED, // 2.4G band 7
++ PHY_11AN_MIXED, // 5G band 8
++ PHY_11BGN_MIXED, // if check 802.11b. 9
++ PHY_11AGN_MIXED, // if check 802.11b. 10
++ PHY_11N_5G, // 11n-only with 5G band 11
++#endif // DOT11_N_SUPPORT //
++} RT_802_11_PHY_MODE;
++
++// put all proprietery for-query objects here to reduce # of Query_OID
++typedef struct _RT_802_11_LINK_STATUS {
++ ULONG CurrTxRate; // in units of 0.5Mbps
++ ULONG ChannelQuality; // 0..100 %
++ ULONG TxByteCount; // both ok and fail
++ ULONG RxByteCount; // both ok and fail
++ ULONG CentralChannel; // 40MHz central channel number
++} RT_802_11_LINK_STATUS, *PRT_802_11_LINK_STATUS;
++
++typedef struct _RT_802_11_EVENT_LOG {
++ LARGE_INTEGER SystemTime; // timestammp via NdisGetCurrentSystemTime()
++ UCHAR Addr[MAC_ADDR_LENGTH];
++ USHORT Event; // EVENT_xxx
++} RT_802_11_EVENT_LOG, *PRT_802_11_EVENT_LOG;
++
++typedef struct _RT_802_11_EVENT_TABLE {
++ ULONG Num;
++ ULONG Rsv; // to align Log[] at LARGE_INEGER boundary
++ RT_802_11_EVENT_LOG Log[MAX_NUMBER_OF_EVENT];
++} RT_802_11_EVENT_TABLE, PRT_802_11_EVENT_TABLE;
++
++// MIMO Tx parameter, ShortGI, MCS, STBC, etc. these are fields in TXWI. Don't change this definition!!!
++typedef union _MACHTTRANSMIT_SETTING {
++ struct {
++ USHORT MCS:7; // MCS
++ USHORT BW:1; //channel bandwidth 20MHz or 40 MHz
++ USHORT ShortGI:1;
++ USHORT STBC:2; //SPACE
++ USHORT rsv:3;
++ USHORT MODE:2; // Use definition MODE_xxx.
++ } field;
++ USHORT word;
++ } MACHTTRANSMIT_SETTING, *PMACHTTRANSMIT_SETTING;
++
++typedef struct _RT_802_11_MAC_ENTRY {
++ UCHAR Addr[MAC_ADDR_LENGTH];
++ UCHAR Aid;
++ UCHAR Psm; // 0:PWR_ACTIVE, 1:PWR_SAVE
++ UCHAR MimoPs; // 0:MMPS_STATIC, 1:MMPS_DYNAMIC, 3:MMPS_Enabled
++ CHAR AvgRssi0;
++ CHAR AvgRssi1;
++ CHAR AvgRssi2;
++ UINT32 ConnectedTime;
++ MACHTTRANSMIT_SETTING TxRate;
++} RT_802_11_MAC_ENTRY, *PRT_802_11_MAC_ENTRY;
++
++typedef struct _RT_802_11_MAC_TABLE {
++ ULONG Num;
++ RT_802_11_MAC_ENTRY Entry[MAX_NUMBER_OF_MAC];
++} RT_802_11_MAC_TABLE, *PRT_802_11_MAC_TABLE;
++
++// structure for query/set hardware register - MAC, BBP, RF register
++typedef struct _RT_802_11_HARDWARE_REGISTER {
++ ULONG HardwareType; // 0:MAC, 1:BBP, 2:RF register, 3:EEPROM
++ ULONG Offset; // Q/S register offset addr
++ ULONG Data; // R/W data buffer
++} RT_802_11_HARDWARE_REGISTER, *PRT_802_11_HARDWARE_REGISTER;
++
++// structure to tune BBP R17 "RX AGC VGC init"
++//typedef struct _RT_802_11_RX_AGC_VGC_TUNING {
++// UCHAR FalseCcaLowerThreshold; // 0-255, def 10
++// UCHAR FalseCcaUpperThreshold; // 0-255, def 100
++// UCHAR VgcDelta; // R17 +-= VgcDelta whenever flase CCA over UpprThreshold
++// // or lower than LowerThresholdupper threshold
++// UCHAR VgcUpperBound; // max value of R17
++//} RT_802_11_RX_AGC_VGC_TUNING, *PRT_802_11_RX_AGC_VGC_TUNING;
++
++typedef struct _RT_802_11_AP_CONFIG {
++ ULONG EnableTxBurst; // 0-disable, 1-enable
++ ULONG EnableTurboRate; // 0-disable, 1-enable 72/100mbps turbo rate
++ ULONG IsolateInterStaTraffic; // 0-disable, 1-enable isolation
++ ULONG HideSsid; // 0-disable, 1-enable hiding
++ ULONG UseBGProtection; // 0-AUTO, 1-always ON, 2-always OFF
++ ULONG UseShortSlotTime; // 0-no use, 1-use 9-us short slot time
++ ULONG Rsv1; // must be 0
++ ULONG SystemErrorBitmap; // ignore upon SET, return system error upon QUERY
++} RT_802_11_AP_CONFIG, *PRT_802_11_AP_CONFIG;
++
++// structure to query/set STA_CONFIG
++typedef struct _RT_802_11_STA_CONFIG {
++ ULONG EnableTxBurst; // 0-disable, 1-enable
++ ULONG EnableTurboRate; // 0-disable, 1-enable 72/100mbps turbo rate
++ ULONG UseBGProtection; // 0-AUTO, 1-always ON, 2-always OFF
++ ULONG UseShortSlotTime; // 0-no use, 1-use 9-us short slot time when applicable
++ ULONG AdhocMode; // 0-11b rates only (WIFI spec), 1 - b/g mixed, 2 - g only
++ ULONG HwRadioStatus; // 0-OFF, 1-ON, default is 1, Read-Only
++ ULONG Rsv1; // must be 0
++ ULONG SystemErrorBitmap; // ignore upon SET, return system error upon QUERY
++} RT_802_11_STA_CONFIG, *PRT_802_11_STA_CONFIG;
++
++//
++// For OID Query or Set about BA structure
++//
++typedef struct _OID_BACAP_STRUC {
++ UCHAR RxBAWinLimit;
++ UCHAR TxBAWinLimit;
++ UCHAR Policy; // 0: DELAY_BA 1:IMMED_BA (//BA Policy subfiled value in ADDBA frame) 2:BA-not use. other value invalid
++ UCHAR MpduDensity; // 0: DELAY_BA 1:IMMED_BA (//BA Policy subfiled value in ADDBA frame) 2:BA-not use. other value invalid
++ UCHAR AmsduEnable; //Enable AMSDU transmisstion
++ UCHAR AmsduSize; // 0:3839, 1:7935 bytes. UINT MSDUSizeToBytes[] = { 3839, 7935};
++ UCHAR MMPSmode; // MIMO power save more, 0:static, 1:dynamic, 2:rsv, 3:mimo enable
++ BOOLEAN AutoBA; // Auto BA will automatically
++} OID_BACAP_STRUC, *POID_BACAP_STRUC;
++
++typedef struct _RT_802_11_ACL_ENTRY {
++ UCHAR Addr[MAC_ADDR_LENGTH];
++ USHORT Rsv;
++} RT_802_11_ACL_ENTRY, *PRT_802_11_ACL_ENTRY;
++
++typedef struct PACKED _RT_802_11_ACL {
++ ULONG Policy; // 0-disable, 1-positive list, 2-negative list
++ ULONG Num;
++ RT_802_11_ACL_ENTRY Entry[MAX_NUMBER_OF_ACL];
++} RT_802_11_ACL, *PRT_802_11_ACL;
++
++typedef struct _RT_802_11_WDS {
++ ULONG Num;
++ NDIS_802_11_MAC_ADDRESS Entry[24/*MAX_NUM_OF_WDS_LINK*/];
++ ULONG KeyLength;
++ UCHAR KeyMaterial[32];
++} RT_802_11_WDS, *PRT_802_11_WDS;
++
++typedef struct _RT_802_11_TX_RATES_ {
++ UCHAR SupRateLen;
++ UCHAR SupRate[MAX_LENGTH_OF_SUPPORT_RATES];
++ UCHAR ExtRateLen;
++ UCHAR ExtRate[MAX_LENGTH_OF_SUPPORT_RATES];
++} RT_802_11_TX_RATES, *PRT_802_11_TX_RATES;
++
++
++// Definition of extra information code
++#define GENERAL_LINK_UP 0x0 // Link is Up
++#define GENERAL_LINK_DOWN 0x1 // Link is Down
++#define HW_RADIO_OFF 0x2 // Hardware radio off
++#define SW_RADIO_OFF 0x3 // Software radio off
++#define AUTH_FAIL 0x4 // Open authentication fail
++#define AUTH_FAIL_KEYS 0x5 // Shared authentication fail
++#define ASSOC_FAIL 0x6 // Association failed
++#define EAP_MIC_FAILURE 0x7 // Deauthencation because MIC failure
++#define EAP_4WAY_TIMEOUT 0x8 // Deauthencation on 4-way handshake timeout
++#define EAP_GROUP_KEY_TIMEOUT 0x9 // Deauthencation on group key handshake timeout
++#define EAP_SUCCESS 0xa // EAP succeed
++#define DETECT_RADAR_SIGNAL 0xb // Radar signal occur in current channel
++#define EXTRA_INFO_MAX 0xb // Indicate Last OID
++
++#define EXTRA_INFO_CLEAR 0xffffffff
++
++// This is OID setting structure. So only GF or MM as Mode. This is valid when our wirelss mode has 802.11n in use.
++typedef struct {
++ RT_802_11_PHY_MODE PhyMode; //
++ UCHAR TransmitNo;
++ UCHAR HtMode; //HTMODE_GF or HTMODE_MM
++ UCHAR ExtOffset; //extension channel above or below
++ UCHAR MCS;
++ UCHAR BW;
++ UCHAR STBC;
++ UCHAR SHORTGI;
++ UCHAR rsv;
++} OID_SET_HT_PHYMODE, *POID_SET_HT_PHYMODE;
++
++#ifdef NINTENDO_AP
++#define NINTENDO_MAX_ENTRY 16
++#define NINTENDO_SSID_NAME_LN 8
++#define NINTENDO_SSID_NAME "NWCUSBAP"
++#define NINTENDO_PROBE_REQ_FLAG_MASK 0x03
++#define NINTENDO_PROBE_REQ_ON 0x01
++#define NINTENDO_PROBE_REQ_SIGNAL 0x02
++#define NINTENDO_PROBE_RSP_ON 0x01
++#define NINTENDO_SSID_NICKNAME_LN 20
++
++#define NINTENDO_WEPKEY_LN 13
++
++typedef struct _NINTENDO_SSID
++{
++ UCHAR NINTENDOFixChar[NINTENDO_SSID_NAME_LN];
++ UCHAR zero1;
++ UCHAR registe;
++ UCHAR ID;
++ UCHAR zero2;
++ UCHAR NICKname[NINTENDO_SSID_NICKNAME_LN];
++} RT_NINTENDO_SSID, *PRT_NINTENDO_SSID;
++
++typedef struct _NINTENDO_ENTRY
++{
++ UCHAR NICKname[NINTENDO_SSID_NICKNAME_LN];
++ UCHAR DS_Addr[ETH_LENGTH_OF_ADDRESS];
++ UCHAR registe;
++ UCHAR UserSpaceAck;
++} RT_NINTENDO_ENTRY, *PRT_NINTENDO_ENTRY;
++
++//RTPRIV_IOCTL_NINTENDO_GET_TABLE
++//RTPRIV_IOCTL_NINTENDO_SET_TABLE
++typedef struct _NINTENDO_TABLE
++{
++ UINT number;
++ RT_NINTENDO_ENTRY entry[NINTENDO_MAX_ENTRY];
++} RT_NINTENDO_TABLE, *PRT_NINTENDO_TABLE;
++
++//RTPRIV_IOCTL_NINTENDO_SEED_WEPKEY
++typedef struct _NINTENDO_SEED_WEPKEY
++{
++ UCHAR seed[NINTENDO_SSID_NICKNAME_LN];
++ UCHAR wepkey[16];//use 13 for 104 bits wep key
++} RT_NINTENDO_SEED_WEPKEY, *PRT_NINTENDO_SEED_WEPKEY;
++#endif // NINTENDO_AP //
++
++#ifdef LLTD_SUPPORT
++typedef struct _RT_LLTD_ASSOICATION_ENTRY {
++ UCHAR Addr[ETH_LENGTH_OF_ADDRESS];
++ unsigned short MOR; // maximum operational rate
++ UCHAR phyMode;
++} RT_LLTD_ASSOICATION_ENTRY, *PRT_LLTD_ASSOICATION_ENTRY;
++
++typedef struct _RT_LLTD_ASSOICATION_TABLE {
++ unsigned int Num;
++ RT_LLTD_ASSOICATION_ENTRY Entry[MAX_NUMBER_OF_MAC];
++} RT_LLTD_ASSOICATION_TABLE, *PRT_LLTD_ASSOICATION_TABLE;
++#endif // LLTD_SUPPORT //
++
++#ifdef CONFIG_STA_SUPPORT
++#ifdef QOS_DLS_SUPPORT
++//rt2860, kathy 2007-0118
++// structure for DLS
++typedef struct _RT_802_11_DLS_UI {
++ USHORT TimeOut; // unit: second , set by UI
++ USHORT CountDownTimer; // unit: second , used by driver only
++ NDIS_802_11_MAC_ADDRESS MacAddr; // set by UI
++ UCHAR Status; // 0: none , 1: wait STAkey, 2: finish DLS setup , set by driver only
++ BOOLEAN Valid; // 1: valid , 0: invalid , set by UI, use to setup or tear down DLS link
++} RT_802_11_DLS_UI, *PRT_802_11_DLS_UI;
++
++typedef struct _RT_802_11_DLS_INFO {
++ RT_802_11_DLS_UI Entry[MAX_NUMBER_OF_DLS_ENTRY];
++ UCHAR num;
++} RT_802_11_DLS_INFO, *PRT_802_11_DLS_INFO;
++
++typedef enum _RT_802_11_DLS_MODE {
++ DLS_NONE,
++ DLS_WAIT_KEY,
++ DLS_FINISH
++} RT_802_11_DLS_MODE;
++#endif // QOS_DLS_SUPPORT //
++
++#ifdef WPA_SUPPLICANT_SUPPORT
++#ifndef NATIVE_WPA_SUPPLICANT_SUPPORT
++#define RT_ASSOC_EVENT_FLAG 0x0101
++#define RT_DISASSOC_EVENT_FLAG 0x0102
++#define RT_REQIE_EVENT_FLAG 0x0103
++#define RT_RESPIE_EVENT_FLAG 0x0104
++#define RT_ASSOCINFO_EVENT_FLAG 0x0105
++#define RT_PMKIDCAND_FLAG 0x0106
++#define RT_INTERFACE_DOWN 0x0107
++#define RT_INTERFACE_UP 0x0108
++#endif // NATIVE_WPA_SUPPLICANT_SUPPORT //
++#endif // WPA_SUPPLICANT_SUPPORT //
++#endif // CONFIG_STA_SUPPORT //
++
++
++#define MAX_CUSTOM_LEN 128
++
++#ifdef CONFIG_STA_SUPPORT
++typedef enum _RT_802_11_D_CLIENT_MODE
++{
++ Rt802_11_D_None,
++ Rt802_11_D_Flexible,
++ Rt802_11_D_Strict,
++} RT_802_11_D_CLIENT_MODE, *PRT_802_11_D_CLIENT_MODE;
++#endif // CONFIG_STA_SUPPORT //
++
++typedef struct _RT_CHANNEL_LIST_INFO
++{
++ UCHAR ChannelList[MAX_NUM_OF_CHS]; // list all supported channels for site survey
++ UCHAR ChannelListNum; // number of channel in ChannelList[]
++} RT_CHANNEL_LIST_INFO, *PRT_CHANNEL_LIST_INFO;
++
++// WSC configured credential
++typedef struct _WSC_CREDENTIAL
++{
++ NDIS_802_11_SSID SSID; // mandatory
++ USHORT AuthType; // mandatory, 1: open, 2: wpa-psk, 4: shared, 8:wpa, 0x10: wpa2, 0x20: wpa2-psk
++ USHORT EncrType; // mandatory, 1: none, 2: wep, 4: tkip, 8: aes
++ UCHAR Key[64]; // mandatory, Maximum 64 byte
++ USHORT KeyLength;
++ UCHAR MacAddr[6]; // mandatory, AP MAC address
++ UCHAR KeyIndex; // optional, default is 1
++ UCHAR Rsvd[3]; // Make alignment
++} WSC_CREDENTIAL, *PWSC_CREDENTIAL;
++
++// WSC configured profiles
++typedef struct _WSC_PROFILE
++{
++ UINT ProfileCnt;
++ WSC_CREDENTIAL Profile[8]; // Support up to 8 profiles
++} WSC_PROFILE, *PWSC_PROFILE;
++
++
++#endif // _OID_H_
++
+--- /dev/null
++++ b/drivers/staging/rt2870/rt2870.h
+@@ -0,0 +1,761 @@
++/*
++ *************************************************************************
++ * Ralink Tech Inc.
++ * 5F., No.36, Taiyuan St., Jhubei City,
++ * Hsinchu County 302,
++ * Taiwan, R.O.C.
++ *
++ * (c) Copyright 2002-2007, Ralink Technology, Inc.
++ *
++ * This program is free software; you can redistribute it and/or modify *
++ * it under the terms of the GNU General Public License as published by *
++ * the Free Software Foundation; either version 2 of the License, or *
++ * (at your option) any later version. *
++ * *
++ * This program is distributed in the hope that it will be useful, *
++ * but WITHOUT ANY WARRANTY; without even the implied warranty of *
++ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the *
++ * GNU General Public License for more details. *
++ * *
++ * You should have received a copy of the GNU General Public License *
++ * along with this program; if not, write to the *
++ * Free Software Foundation, Inc., *
++ * 59 Temple Place - Suite 330, Boston, MA 02111-1307, USA. *
++ * *
++ *************************************************************************
++ */
++
++#ifndef __RT2870_H__
++#define __RT2870_H__
++
++//usb header files
++#include <linux/usb.h>
++
++/* rtmp_def.h */
++//
++#if LINUX_VERSION_CODE >= KERNEL_VERSION(2,5,0)
++#define BULKAGGRE_ZISE 100
++#define RT28XX_DRVDATA_SET(_a) usb_set_intfdata(_a, pAd);
++#define RT28XX_PUT_DEVICE usb_put_dev
++#define RTUSB_ALLOC_URB(iso) usb_alloc_urb(iso, GFP_ATOMIC)
++#define RTUSB_SUBMIT_URB(pUrb) usb_submit_urb(pUrb, GFP_ATOMIC)
++#define RTUSB_URB_ALLOC_BUFFER(pUsb_Dev, BufSize, pDma_addr) usb_buffer_alloc(pUsb_Dev, BufSize, GFP_ATOMIC, pDma_addr)
++#define RTUSB_URB_FREE_BUFFER(pUsb_Dev, BufSize, pTransferBuf, Dma_addr) usb_buffer_free(pUsb_Dev, BufSize, pTransferBuf, Dma_addr)
++#else
++#define BULKAGGRE_ZISE 60
++#define RT28XX_DRVDATA_SET(_a)
++#define RT28XX_PUT_DEVICE(dev_p)
++#define RTUSB_ALLOC_URB(iso) usb_alloc_urb(iso)
++#define RTUSB_SUBMIT_URB(pUrb) usb_submit_urb(pUrb)
++#define RTUSB_URB_ALLOC_BUFFER(pUsb_Dev, BufSize, pDma_addr) kmalloc(BufSize, GFP_ATOMIC)
++#define RTUSB_URB_FREE_BUFFER(pUsb_Dev, BufSize, pTransferBuf, Dma_addr) kfree(pTransferBuf)
++#endif
++
++#define RXBULKAGGRE_ZISE 12
++#define MAX_TXBULK_LIMIT (LOCAL_TXBUF_SIZE*(BULKAGGRE_ZISE-1))
++#define MAX_TXBULK_SIZE (LOCAL_TXBUF_SIZE*BULKAGGRE_ZISE)
++#define MAX_RXBULK_SIZE (LOCAL_TXBUF_SIZE*RXBULKAGGRE_ZISE)
++#define MAX_MLME_HANDLER_MEMORY 20
++#define RETRY_LIMIT 10
++#define BUFFER_SIZE 2400 //2048
++#define TX_RING 0xa
++#define PRIO_RING 0xc
++
++
++// Flags for Bulkflags control for bulk out data
++//
++#define fRTUSB_BULK_OUT_DATA_NULL 0x00000001
++#define fRTUSB_BULK_OUT_RTS 0x00000002
++#define fRTUSB_BULK_OUT_MLME 0x00000004
++
++#define fRTUSB_BULK_OUT_DATA_NORMAL 0x00010000
++#define fRTUSB_BULK_OUT_DATA_NORMAL_2 0x00020000
++#define fRTUSB_BULK_OUT_DATA_NORMAL_3 0x00040000
++#define fRTUSB_BULK_OUT_DATA_NORMAL_4 0x00080000
++
++#define fRTUSB_BULK_OUT_PSPOLL 0x00000020
++#define fRTUSB_BULK_OUT_DATA_FRAG 0x00000040
++#define fRTUSB_BULK_OUT_DATA_FRAG_2 0x00000080
++#define fRTUSB_BULK_OUT_DATA_FRAG_3 0x00000100
++#define fRTUSB_BULK_OUT_DATA_FRAG_4 0x00000200
++
++#ifdef RALINK_ATE
++#define fRTUSB_BULK_OUT_DATA_ATE 0x00100000
++#endif // RALINK_ATE //
++
++#define RT2870_USB_DEVICES \
++{ \
++ {USB_DEVICE(0x148F,0x2770)}, /* Ralink */ \
++ {USB_DEVICE(0x148F,0x2870)}, /* Ralink */ \
++ {USB_DEVICE(0x148F,0x3070)}, /* Ralink */ \
++ {USB_DEVICE(0x0B05,0x1731)}, /* Asus */ \
++ {USB_DEVICE(0x0B05,0x1732)}, /* Asus */ \
++ {USB_DEVICE(0x0B05,0x1742)}, /* Asus */ \
++ {USB_DEVICE(0x0DF6,0x0017)}, /* Sitecom */ \
++ {USB_DEVICE(0x0DF6,0x002B)}, /* Sitecom */ \
++ {USB_DEVICE(0x0DF6,0x002C)}, /* Sitecom */ \
++ {USB_DEVICE(0x0DF6,0x002D)}, /* Sitecom */ \
++ {USB_DEVICE(0x14B2,0x3C06)}, /* Conceptronic */ \
++ {USB_DEVICE(0x14B2,0x3C28)}, /* Conceptronic */ \
++ {USB_DEVICE(0x2019,0xED06)}, /* Planex Communications, Inc. */ \
++ {USB_DEVICE(0x2019,0xAB25)}, /* Planex Communications, Inc. RT3070 */ \
++ {USB_DEVICE(0x07D1,0x3C09)}, /* D-Link */ \
++ {USB_DEVICE(0x07D1,0x3C11)}, /* D-Link */ \
++ {USB_DEVICE(0x14B2,0x3C07)}, /* AL */ \
++ {USB_DEVICE(0x14B2,0x3C12)}, /* AL */ \
++ {USB_DEVICE(0x050D,0x8053)}, /* Belkin */ \
++ {USB_DEVICE(0x14B2,0x3C23)}, /* Airlink */ \
++ {USB_DEVICE(0x14B2,0x3C27)}, /* Airlink */ \
++ {USB_DEVICE(0x07AA,0x002F)}, /* Corega */ \
++ {USB_DEVICE(0x07AA,0x003C)}, /* Corega */ \
++ {USB_DEVICE(0x07AA,0x003F)}, /* Corega */ \
++ {USB_DEVICE(0x18C5,0x0012)}, /* Corega */ \
++ {USB_DEVICE(0x1044,0x800B)}, /* Gigabyte */ \
++ {USB_DEVICE(0x15A9,0x0006)}, /* Sparklan */ \
++ {USB_DEVICE(0x083A,0xB522)}, /* SMC */ \
++ {USB_DEVICE(0x083A,0xA618)}, /* SMC */ \
++ {USB_DEVICE(0x083A,0x7522)}, /* Arcadyan */ \
++ {USB_DEVICE(0x0CDE,0x0022)}, /* ZCOM */ \
++ {USB_DEVICE(0x0586,0x3416)}, /* Zyxel */ \
++ {USB_DEVICE(0x0CDE,0x0025)}, /* Zyxel */ \
++ {USB_DEVICE(0x1740,0x9701)}, /* EnGenius */ \
++ {USB_DEVICE(0x1740,0x9702)}, /* EnGenius */ \
++ {USB_DEVICE(0x0471,0x200f)}, /* Philips */ \
++ {USB_DEVICE(0x14B2,0x3C25)}, /* Draytek */ \
++ {USB_DEVICE(0x13D3,0x3247)}, /* AzureWave */ \
++ {USB_DEVICE(0x083A,0x6618)}, /* Accton */ \
++ {USB_DEVICE(0x15c5,0x0008)}, /* Amit */ \
++ {USB_DEVICE(0x0E66,0x0001)}, /* Hawking */ \
++ {USB_DEVICE(0x0E66,0x0003)}, /* Hawking */ \
++ {USB_DEVICE(0x129B,0x1828)}, /* Siemens */ \
++ {USB_DEVICE(0x157E,0x300E)}, /* U-Media */ \
++ {USB_DEVICE(0x050d,0x805c)}, \
++ {USB_DEVICE(0x1482,0x3C09)}, /* Abocom*/ \
++ {USB_DEVICE(0x14B2,0x3C09)}, /* Alpha */ \
++ {USB_DEVICE(0x04E8,0x2018)}, /* samsung */ \
++ {USB_DEVICE(0x07B8,0x3070)}, /* AboCom */ \
++ {USB_DEVICE(0x07B8,0x3071)}, /* AboCom */ \
++ {USB_DEVICE(0x07B8,0x2870)}, /* AboCom */ \
++ {USB_DEVICE(0x07B8,0x2770)}, /* AboCom */ \
++ {USB_DEVICE(0x7392,0x7711)}, /* Edimax */ \
++ {USB_DEVICE(0x5A57,0x0280)}, /* Zinwell */ \
++ {USB_DEVICE(0x5A57,0x0282)}, /* Zinwell */ \
++ {USB_DEVICE(0x0789,0x0162)}, /* Logitec */ \
++ {USB_DEVICE(0x0789,0x0163)}, /* Logitec */ \
++ {USB_DEVICE(0x0789,0x0164)}, /* Logitec */ \
++ { }/* Terminating entry */ \
++}
++
++#define FREE_HTTX_RING(_p, _b, _t) \
++{ \
++ if ((_t)->ENextBulkOutPosition == (_t)->CurWritePosition) \
++ { \
++ (_t)->bRingEmpty = TRUE; \
++ } \
++ /*NdisInterlockedDecrement(&(_p)->TxCount); */\
++}
++
++//
++// RXINFO appends at the end of each rx packet.
++//
++#ifdef RT_BIG_ENDIAN
++typedef struct PACKED _RXINFO_STRUC {
++ UINT32 PlcpSignal:12;
++ UINT32 LastAMSDU:1;
++ UINT32 CipherAlg:1;
++ UINT32 PlcpRssil:1;
++ UINT32 Decrypted:1;
++ UINT32 AMPDU:1; // To be moved
++ UINT32 L2PAD:1;
++ UINT32 RSSI:1;
++ UINT32 HTC:1;
++ UINT32 AMSDU:1; // rx with 802.3 header, not 802.11 header.
++ UINT32 CipherErr:2; // 0: decryption okay, 1:ICV error, 2:MIC error, 3:KEY not valid
++ UINT32 Crc:1; // 1: CRC error
++ UINT32 MyBss:1; // 1: this frame belongs to the same BSSID
++ UINT32 Bcast:1; // 1: this is a broadcast frame
++ UINT32 Mcast:1; // 1: this is a multicast frame
++ UINT32 U2M:1; // 1: this RX frame is unicast to me
++ UINT32 FRAG:1;
++ UINT32 NULLDATA:1;
++ UINT32 DATA:1;
++ UINT32 BA:1;
++} RXINFO_STRUC, *PRXINFO_STRUC, RT28XX_RXD_STRUC, *PRT28XX_RXD_STRUC;
++#else
++typedef struct PACKED _RXINFO_STRUC {
++ UINT32 BA:1;
++ UINT32 DATA:1;
++ UINT32 NULLDATA:1;
++ UINT32 FRAG:1;
++ UINT32 U2M:1; // 1: this RX frame is unicast to me
++ UINT32 Mcast:1; // 1: this is a multicast frame
++ UINT32 Bcast:1; // 1: this is a broadcast frame
++ UINT32 MyBss:1; // 1: this frame belongs to the same BSSID
++ UINT32 Crc:1; // 1: CRC error
++ UINT32 CipherErr:2; // 0: decryption okay, 1:ICV error, 2:MIC error, 3:KEY not valid
++ UINT32 AMSDU:1; // rx with 802.3 header, not 802.11 header.
++ UINT32 HTC:1;
++ UINT32 RSSI:1;
++ UINT32 L2PAD:1;
++ UINT32 AMPDU:1; // To be moved
++ UINT32 Decrypted:1;
++ UINT32 PlcpRssil:1;
++ UINT32 CipherAlg:1;
++ UINT32 LastAMSDU:1;
++ UINT32 PlcpSignal:12;
++} RXINFO_STRUC, *PRXINFO_STRUC, RT28XX_RXD_STRUC, *PRT28XX_RXD_STRUC;
++#endif
++
++
++//
++// TXINFO
++//
++#ifdef RT_BIG_ENDIAN
++typedef struct _TXINFO_STRUC {
++ // Word 0
++ UINT32 USBDMATxburst:1;//used ONLY in USB bulk Aggre. Force USB DMA transmit frame from current selected endpoint
++ UINT32 USBDMANextVLD:1; //used ONLY in USB bulk Aggregation, NextValid
++ UINT32 rsv2:2; // Software use.
++ UINT32 SwUseLastRound:1; // Software use.
++ UINT32 QSEL:2; // select on-chip FIFO ID for 2nd-stage output scheduler.0:MGMT, 1:HCCA 2:EDCA
++ UINT32 WIV:1; // Wireless Info Valid. 1 if Driver already fill WI, o if DMA needs to copy WI to correctposition
++ UINT32 rsv:8;
++ UINT32 USBDMATxPktLen:16; //used ONLY in USB bulk Aggregation, Total byte counts of all sub-frame.
++} TXINFO_STRUC, *PTXINFO_STRUC;
++#else
++typedef struct _TXINFO_STRUC {
++ // Word 0
++ UINT32 USBDMATxPktLen:16; //used ONLY in USB bulk Aggregation, Total byte counts of all sub-frame.
++ UINT32 rsv:8;
++ UINT32 WIV:1; // Wireless Info Valid. 1 if Driver already fill WI, o if DMA needs to copy WI to correctposition
++ UINT32 QSEL:2; // select on-chip FIFO ID for 2nd-stage output scheduler.0:MGMT, 1:HCCA 2:EDCA
++ UINT32 SwUseLastRound:1; // Software use.
++ UINT32 rsv2:2; // Software use.
++ UINT32 USBDMANextVLD:1; //used ONLY in USB bulk Aggregation, NextValid
++ UINT32 USBDMATxburst:1;//used ONLY in USB bulk Aggre. Force USB DMA transmit frame from current selected endpoint
++} TXINFO_STRUC, *PTXINFO_STRUC;
++#endif
++
++#define TXINFO_SIZE 4
++#define RXINFO_SIZE 4
++#define TXPADDING_SIZE 11
++
++//
++// Management ring buffer format
++//
++typedef struct _MGMT_STRUC {
++ BOOLEAN Valid;
++ PUCHAR pBuffer;
++ ULONG Length;
++} MGMT_STRUC, *PMGMT_STRUC;
++
++
++/* ----------------- EEPROM Related MACRO ----------------- */
++#define RT28xx_EEPROM_READ16(pAd, offset, var) \
++ do { \
++ RTUSBReadEEPROM(pAd, offset, (PUCHAR)&(var), 2); \
++ var = le2cpu16(var); \
++ }while(0)
++
++#define RT28xx_EEPROM_WRITE16(pAd, offset, var) \
++ do{ \
++ USHORT _tmpVar; \
++ _tmpVar = cpu2le16(var); \
++ RTUSBWriteEEPROM(pAd, offset, (PUCHAR)&(_tmpVar), 2); \
++ }while(0)
++
++/* ----------------- TASK/THREAD Related MACRO ----------------- */
++#define RT28XX_TASK_THREAD_INIT(pAd, Status) \
++ Status = CreateThreads(net_dev);
++
++
++/* ----------------- Frimware Related MACRO ----------------- */
++#if 0
++#define RT28XX_FIRMUD_INIT(pAd) \
++ { UINT32 MacReg; \
++ RTUSBReadMACRegister(pAd, MAC_CSR0, &MacReg); }
++
++#define RT28XX_FIRMUD_END(pAd) \
++ RTUSBWriteMACRegister(pAd, 0x7014, 0xffffffff); \
++ RTUSBWriteMACRegister(pAd, 0x701c, 0xffffffff); \
++ RTUSBFirmwareRun(pAd);
++#else
++#define RT28XX_WRITE_FIRMWARE(_pAd, _pFwImage, _FwLen) \
++ RTUSBFirmwareWrite(_pAd, _pFwImage, _FwLen)
++#endif
++
++/* ----------------- TX Related MACRO ----------------- */
++#define RT28XX_START_DEQUEUE(pAd, QueIdx, irqFlags) \
++ { \
++ RTMP_IRQ_LOCK(&pAd->DeQueueLock[QueIdx], irqFlags); \
++ if (pAd->DeQueueRunning[QueIdx]) \
++ { \
++ RTMP_IRQ_UNLOCK(&pAd->DeQueueLock[QueIdx], irqFlags);\
++ printk("DeQueueRunning[%d]= TRUE!\n", QueIdx); \
++ continue; \
++ } \
++ else \
++ { \
++ pAd->DeQueueRunning[QueIdx] = TRUE; \
++ RTMP_IRQ_UNLOCK(&pAd->DeQueueLock[QueIdx], irqFlags);\
++ } \
++ }
++#define RT28XX_STOP_DEQUEUE(pAd, QueIdx, irqFlags) \
++ do{ \
++ RTMP_IRQ_LOCK(&pAd->DeQueueLock[QueIdx], irqFlags); \
++ pAd->DeQueueRunning[QueIdx] = FALSE; \
++ RTMP_IRQ_UNLOCK(&pAd->DeQueueLock[QueIdx], irqFlags); \
++ }while(0)
++
++
++#define RT28XX_HAS_ENOUGH_FREE_DESC(pAd, pTxBlk, freeNum, pPacket) \
++ (RTUSBFreeDescriptorRequest(pAd, pTxBlk->QueIdx, (pTxBlk->TotalFrameLen + GET_OS_PKT_LEN(pPacket))) == NDIS_STATUS_SUCCESS)
++
++#define RT28XX_RELEASE_DESC_RESOURCE(pAd, QueIdx) \
++ do{}while(0)
++
++#define NEED_QUEUE_BACK_FOR_AGG(_pAd, _QueIdx, _freeNum, _TxFrameType) \
++ ((_TxFrameType == TX_RALINK_FRAME) && (RTUSBNeedQueueBackForAgg(_pAd, _QueIdx)))
++
++
++
++#define fRTMP_ADAPTER_NEED_STOP_TX \
++ (fRTMP_ADAPTER_NIC_NOT_EXIST | fRTMP_ADAPTER_HALT_IN_PROGRESS | \
++ fRTMP_ADAPTER_RESET_IN_PROGRESS | fRTMP_ADAPTER_BULKOUT_RESET | \
++ fRTMP_ADAPTER_RADIO_OFF | fRTMP_ADAPTER_REMOVE_IN_PROGRESS)
++
++
++#define HAL_WriteSubTxResource(pAd, pTxBlk, bIsLast, pFreeNumber) \
++ RtmpUSB_WriteSubTxResource(pAd, pTxBlk, bIsLast, pFreeNumber)
++
++#define HAL_WriteTxResource(pAd, pTxBlk,bIsLast, pFreeNumber) \
++ RtmpUSB_WriteSingleTxResource(pAd, pTxBlk,bIsLast, pFreeNumber)
++
++#define HAL_WriteFragTxResource(pAd, pTxBlk, fragNum, pFreeNumber) \
++ RtmpUSB_WriteFragTxResource(pAd, pTxBlk, fragNum, pFreeNumber)
++
++#define HAL_WriteMultiTxResource(pAd, pTxBlk,frameNum, pFreeNumber) \
++ RtmpUSB_WriteMultiTxResource(pAd, pTxBlk,frameNum, pFreeNumber)
++
++#define HAL_FinalWriteTxResource(pAd, pTxBlk, totalMPDUSize, TxIdx) \
++ RtmpUSB_FinalWriteTxResource(pAd, pTxBlk, totalMPDUSize, TxIdx)
++
++#define HAL_LastTxIdx(pAd, QueIdx,TxIdx) \
++ /*RtmpUSBDataLastTxIdx(pAd, QueIdx,TxIdx)*/
++
++#define HAL_KickOutTx(pAd, pTxBlk, QueIdx) \
++ RtmpUSBDataKickOut(pAd, pTxBlk, QueIdx)
++
++
++#define HAL_KickOutMgmtTx(pAd, QueIdx, pPacket, pSrcBufVA, SrcBufLen) \
++ RtmpUSBMgmtKickOut(pAd, QueIdx, pPacket, pSrcBufVA, SrcBufLen)
++
++#define HAL_KickOutNullFrameTx(_pAd, _QueIdx, _pNullFrame, _frameLen) \
++ RtmpUSBNullFrameKickOut(_pAd, _QueIdx, _pNullFrame, _frameLen)
++
++#define RTMP_PKT_TAIL_PADDING 11 // 3(max 4 byte padding) + 4 (last packet padding) + 4 (MaxBulkOutsize align padding)
++
++extern UCHAR EpToQueue[6];
++
++
++#ifdef RT2870
++#define GET_TXRING_FREENO(_pAd, _QueIdx) (_QueIdx) //(_pAd->TxRing[_QueIdx].TxSwFreeIdx)
++#define GET_MGMTRING_FREENO(_pAd) (_pAd->MgmtRing.TxSwFreeIdx)
++#endif // RT2870 //
++
++
++/* ----------------- RX Related MACRO ----------------- */
++//#define RT28XX_RX_ERROR_CHECK RTMPCheckRxWI
++
++#if 0
++#define RT28XX_RCV_INIT(pAd) \
++ pAd->TransferBufferLength = 0; \
++ pAd->ReadPosition = 0; \
++ pAd->pCurrRxContext = NULL;
++#endif
++
++#define RT28XX_RV_ALL_BUF_END(bBulkReceive) \
++ /* We return STATUS_MORE_PROCESSING_REQUIRED so that the completion */ \
++ /* routine (IofCompleteRequest) will stop working on the irp. */ \
++ if (bBulkReceive == TRUE) RTUSBBulkReceive(pAd);
++
++
++/* ----------------- ASIC Related MACRO ----------------- */
++#if 0
++#define RT28XX_DMA_WRITE_INIT(GloCfg) \
++ { GloCfg.field.EnTXWriteBackDDONE = 1; \
++ GloCfg.field.EnableRxDMA = 1; \
++ GloCfg.field.EnableTxDMA = 1; }
++
++#define RT28XX_DMA_POST_WRITE(_pAd) \
++ do{ USB_DMA_CFG_STRUC UsbCfg; \
++ UsbCfg.word = 0; \
++ /* for last packet, PBF might use more than limited, so minus 2 to prevent from error */ \
++ UsbCfg.field.RxBulkAggLmt = (MAX_RXBULK_SIZE /1024)-3; \
++ UsbCfg.field.phyclear = 0; \
++ /* usb version is 1.1,do not use bulk in aggregation */ \
++ if (_pAd->BulkInMaxPacketSize == 512) \
++ UsbCfg.field.RxBulkAggEn = 1; \
++ UsbCfg.field.RxBulkEn = 1; \
++ UsbCfg.field.TxBulkEn = 1; \
++ UsbCfg.field.RxBulkAggTOut = 0x80; /* 2006-10-18 */ \
++ RTUSBWriteMACRegister(_pAd, USB_DMA_CFG, UsbCfg.word); \
++ }while(0)
++#endif
++
++// reset MAC of a station entry to 0xFFFFFFFFFFFF
++#define RT28XX_STA_ENTRY_MAC_RESET(pAd, Wcid) \
++ { RT_SET_ASIC_WCID SetAsicWcid; \
++ SetAsicWcid.WCID = Wcid; \
++ SetAsicWcid.SetTid = 0xffffffff; \
++ SetAsicWcid.DeleteTid = 0xffffffff; \
++ RTUSBEnqueueInternalCmd(pAd, CMDTHREAD_SET_ASIC_WCID, \
++ &SetAsicWcid, sizeof(RT_SET_ASIC_WCID)); }
++
++// add this entry into ASIC RX WCID search table
++#define RT28XX_STA_ENTRY_ADD(pAd, pEntry) \
++ RTUSBEnqueueInternalCmd(pAd, CMDTHREAD_SET_CLIENT_MAC_ENTRY, \
++ pEntry, sizeof(MAC_TABLE_ENTRY));
++
++// remove Pair-wise key material from ASIC
++// yet implement
++#define RT28XX_STA_ENTRY_KEY_DEL(pAd, BssIdx, Wcid)
++
++// add Client security information into ASIC WCID table and IVEIV table
++#define RT28XX_STA_SECURITY_INFO_ADD(pAd, apidx, KeyID, pEntry) \
++ { RT28XX_STA_ENTRY_MAC_RESET(pAd, pEntry->Aid); \
++ if (pEntry->Aid >= 1) { \
++ RT_SET_ASIC_WCID_ATTRI SetAsicWcidAttri; \
++ SetAsicWcidAttri.WCID = pEntry->Aid; \
++ if ((pEntry->AuthMode <= Ndis802_11AuthModeAutoSwitch) && \
++ (pEntry->WepStatus == Ndis802_11Encryption1Enabled)) \
++ { \
++ SetAsicWcidAttri.Cipher = pAd->SharedKey[apidx][KeyID].CipherAlg; \
++ } \
++ else if (pEntry->AuthMode == Ndis802_11AuthModeWPANone) \
++ { \
++ SetAsicWcidAttri.Cipher = pAd->SharedKey[apidx][KeyID].CipherAlg; \
++ } \
++ else SetAsicWcidAttri.Cipher = 0; \
++ DBGPRINT(RT_DEBUG_TRACE, ("aid cipher = %ld\n",SetAsicWcidAttri.Cipher)); \
++ RTUSBEnqueueInternalCmd(pAd, CMDTHREAD_SET_ASIC_WCID_CIPHER, \
++ &SetAsicWcidAttri, sizeof(RT_SET_ASIC_WCID_ATTRI)); } }
++
++// Insert the BA bitmap to ASIC for the Wcid entry
++#define RT28XX_ADD_BA_SESSION_TO_ASIC(_pAd, _Aid, _TID) \
++ do{ \
++ RT_SET_ASIC_WCID SetAsicWcid; \
++ SetAsicWcid.WCID = (_Aid); \
++ SetAsicWcid.SetTid = (0x10000<<(_TID)); \
++ SetAsicWcid.DeleteTid = 0xffffffff; \
++ RTUSBEnqueueInternalCmd((_pAd), CMDTHREAD_SET_ASIC_WCID, &SetAsicWcid, sizeof(RT_SET_ASIC_WCID)); \
++ }while(0)
++
++// Remove the BA bitmap from ASIC for the Wcid entry
++#define RT28XX_DEL_BA_SESSION_FROM_ASIC(_pAd, _Wcid, _TID) \
++ do{ \
++ RT_SET_ASIC_WCID SetAsicWcid; \
++ SetAsicWcid.WCID = (_Wcid); \
++ SetAsicWcid.SetTid = (0xffffffff); \
++ SetAsicWcid.DeleteTid = (0x10000<<(_TID) ); \
++ RTUSBEnqueueInternalCmd((_pAd), CMDTHREAD_SET_ASIC_WCID, &SetAsicWcid, sizeof(RT_SET_ASIC_WCID)); \
++ }while(0)
++
++
++/* ----------------- PCI/USB Related MACRO ----------------- */
++#define RT28XX_HANDLE_DEV_ASSIGN(handle, dev_p) \
++ ((POS_COOKIE)handle)->pUsb_Dev = dev_p;
++
++// no use
++#define RT28XX_UNMAP()
++#define RT28XX_IRQ_REQUEST(net_dev)
++#define RT28XX_IRQ_RELEASE(net_dev)
++#define RT28XX_IRQ_INIT(pAd)
++#define RT28XX_IRQ_ENABLE(pAd)
++
++
++/* ----------------- MLME Related MACRO ----------------- */
++#define RT28XX_MLME_HANDLER(pAd) RTUSBMlmeUp(pAd)
++
++#define RT28XX_MLME_PRE_SANITY_CHECK(pAd) \
++ { if ((pAd->CommonCfg.bHardwareRadio == TRUE) && \
++ (!RTMP_TEST_FLAG(pAd, fRTMP_ADAPTER_NIC_NOT_EXIST)) && \
++ (!RTMP_TEST_FLAG(pAd, fRTMP_ADAPTER_HALT_IN_PROGRESS))) { \
++ RTUSBEnqueueInternalCmd(pAd, CMDTHREAD_CHECK_GPIO, NULL, 0); } }
++
++#define RT28XX_MLME_STA_QUICK_RSP_WAKE_UP(pAd) \
++ { RTUSBEnqueueInternalCmd(pAd, CMDTHREAD_QKERIODIC_EXECUT, NULL, 0); \
++ RTUSBMlmeUp(pAd); }
++
++#define RT28XX_MLME_RESET_STATE_MACHINE(pAd) \
++ MlmeEnqueue(pAd, MLME_CNTL_STATE_MACHINE, MT2_RESET_CONF, 0, NULL); \
++ RTUSBMlmeUp(pAd);
++
++#define RT28XX_HANDLE_COUNTER_MEASURE(_pAd, _pEntry) \
++ { RTUSBEnqueueInternalCmd(_pAd, CMDTHREAD_802_11_COUNTER_MEASURE, _pEntry, sizeof(MAC_TABLE_ENTRY)); \
++ RTUSBMlmeUp(_pAd); \
++ }
++
++
++/* ----------------- Power Save Related MACRO ----------------- */
++#define RT28XX_PS_POLL_ENQUEUE(pAd) \
++ { RTUSB_SET_BULK_FLAG(pAd, fRTUSB_BULK_OUT_PSPOLL); \
++ RTUSBKickBulkOut(pAd); }
++
++#define RT28xx_CHIP_NAME "RT2870"
++#define USB_CYC_CFG 0x02a4
++#define STATUS_SUCCESS 0x00
++#define STATUS_UNSUCCESSFUL 0x01
++#define NT_SUCCESS(status) (((status) > 0) ? (1):(0))
++#define InterlockedIncrement atomic_inc
++#define NdisInterlockedIncrement atomic_inc
++#define InterlockedDecrement atomic_dec
++#define NdisInterlockedDecrement atomic_dec
++#define InterlockedExchange atomic_set
++//#define NdisMSendComplete RTMP_SendComplete
++#define NdisMCancelTimer RTMPCancelTimer
++#define NdisAllocMemory(_ptr, _size, _flag) \
++ do{_ptr = kmalloc((_size),(_flag));}while(0)
++#define NdisFreeMemory(a, b, c) kfree((a))
++#define NdisMSleep RTMPusecDelay /* unit: microsecond */
++
++
++#define USBD_TRANSFER_DIRECTION_OUT 0
++#define USBD_TRANSFER_DIRECTION_IN 0
++#define USBD_SHORT_TRANSFER_OK 0
++#define PURB purbb_t
++
++#define RTUSB_FREE_URB(pUrb) usb_free_urb(pUrb)
++
++//#undef MlmeAllocateMemory
++//#undef MlmeFreeMemory
++
++typedef int NTSTATUS;
++typedef struct usb_device * PUSB_DEV;
++
++/* MACRO for linux usb */
++typedef struct urb *purbb_t;
++typedef struct usb_ctrlrequest devctrlrequest;
++#define PIRP PVOID
++#define PMDL PVOID
++#define NDIS_OID UINT
++#ifndef USB_ST_NOERROR
++#define USB_ST_NOERROR 0
++#endif
++
++// vendor-specific control operations
++#define CONTROL_TIMEOUT_JIFFIES ( (100 * HZ) / 1000)
++#define UNLINK_TIMEOUT_MS 3
++
++/* unlink urb */
++#if LINUX_VERSION_CODE >= KERNEL_VERSION(2,6,7)
++#define RTUSB_UNLINK_URB(pUrb) usb_kill_urb(pUrb)
++#else
++#define RTUSB_UNLINK_URB(pUrb) usb_unlink_urb(pUrb)
++#endif
++
++// Prototypes of completion funuc.
++#if LINUX_VERSION_CODE < KERNEL_VERSION(2,5,0)
++#define RTUSBBulkOutDataPacketComplete(purb, pt_regs) RTUSBBulkOutDataPacketComplete(purb)
++#define RTUSBBulkOutMLMEPacketComplete(pUrb, pt_regs) RTUSBBulkOutMLMEPacketComplete(pUrb)
++#define RTUSBBulkOutNullFrameComplete(pUrb, pt_regs) RTUSBBulkOutNullFrameComplete(pUrb)
++#define RTUSBBulkOutRTSFrameComplete(pUrb, pt_regs) RTUSBBulkOutRTSFrameComplete(pUrb)
++#define RTUSBBulkOutPsPollComplete(pUrb, pt_regs) RTUSBBulkOutPsPollComplete(pUrb)
++#define RTUSBBulkRxComplete(pUrb, pt_regs) RTUSBBulkRxComplete(pUrb)
++#endif
++
++
++VOID RTUSBBulkOutDataPacketComplete(purbb_t purb, struct pt_regs *pt_regs);
++VOID RTUSBBulkOutMLMEPacketComplete(purbb_t pUrb, struct pt_regs *pt_regs);
++VOID RTUSBBulkOutNullFrameComplete(purbb_t pUrb, struct pt_regs *pt_regs);
++VOID RTUSBBulkOutRTSFrameComplete(purbb_t pUrb, struct pt_regs *pt_regs);
++VOID RTUSBBulkOutPsPollComplete(purbb_t pUrb, struct pt_regs *pt_regs);
++VOID RTUSBBulkRxComplete(purbb_t pUrb, struct pt_regs *pt_regs);
++
++
++#define RTUSBMlmeUp(pAd) \
++{ \
++ POS_COOKIE pObj = (POS_COOKIE) pAd->OS_Cookie; \
++ CHECK_PID_LEGALITY(pObj->MLMEThr_pid) \
++ up(&(pAd->mlme_semaphore)); \
++}
++
++#define RTUSBCMDUp(pAd) \
++{ \
++ POS_COOKIE pObj = (POS_COOKIE) pAd->OS_Cookie; \
++ CHECK_PID_LEGALITY(pObj->RTUSBCmdThr_pid) \
++ up(&(pAd->RTUSBCmd_semaphore)); \
++}
++
++
++static inline NDIS_STATUS RTMPAllocateMemory(
++ OUT PVOID *ptr,
++ IN size_t size)
++{
++ *ptr = kmalloc(size, GFP_ATOMIC);
++ if(*ptr)
++ return NDIS_STATUS_SUCCESS;
++ else
++ return NDIS_STATUS_RESOURCES;
++}
++
++/* rtmp.h */
++#define BEACON_RING_SIZE 2
++#define DEVICE_VENDOR_REQUEST_OUT 0x40
++#define DEVICE_VENDOR_REQUEST_IN 0xc0
++#define INTERFACE_VENDOR_REQUEST_OUT 0x41
++#define INTERFACE_VENDOR_REQUEST_IN 0xc1
++#define MGMTPIPEIDX 0 // EP6 is highest priority
++
++#define BULKOUT_MGMT_RESET_FLAG 0x80
++
++#define RTUSB_SET_BULK_FLAG(_M, _F) ((_M)->BulkFlags |= (_F))
++#define RTUSB_CLEAR_BULK_FLAG(_M, _F) ((_M)->BulkFlags &= ~(_F))
++#define RTUSB_TEST_BULK_FLAG(_M, _F) (((_M)->BulkFlags & (_F)) != 0)
++
++#define EnqueueCmd(cmdq, cmdqelmt) \
++{ \
++ if (cmdq->size == 0) \
++ cmdq->head = cmdqelmt; \
++ else \
++ cmdq->tail->next = cmdqelmt; \
++ cmdq->tail = cmdqelmt; \
++ cmdqelmt->next = NULL; \
++ cmdq->size++; \
++}
++
++typedef struct _RT_SET_ASIC_WCID {
++ ULONG WCID; // mechanism for rekeying: 0:disable, 1: time-based, 2: packet-based
++ ULONG SetTid; // time-based: seconds, packet-based: kilo-packets
++ ULONG DeleteTid; // time-based: seconds, packet-based: kilo-packets
++ UCHAR Addr[MAC_ADDR_LEN]; // avoid in interrupt when write key
++} RT_SET_ASIC_WCID,*PRT_SET_ASIC_WCID;
++
++typedef struct _RT_SET_ASIC_WCID_ATTRI {
++ ULONG WCID; // mechanism for rekeying: 0:disable, 1: time-based, 2: packet-based
++ ULONG Cipher; // ASIC Cipher definition
++ UCHAR Addr[ETH_LENGTH_OF_ADDRESS];
++} RT_SET_ASIC_WCID_ATTRI,*PRT_SET_ASIC_WCID_ATTRI;
++
++typedef struct _MLME_MEMORY_STRUCT {
++ PVOID AllocVa; //Pointer to the base virtual address of the allocated memory
++ struct _MLME_MEMORY_STRUCT *Next; //Pointer to the next virtual address of the allocated memory
++} MLME_MEMORY_STRUCT, *PMLME_MEMORY_STRUCT;
++
++typedef struct _MLME_MEMORY_HANDLER {
++ BOOLEAN MemRunning; //The flag of the Mlme memory handler's status
++ UINT MemoryCount; //Total nonpaged system-space memory not size
++ UINT InUseCount; //Nonpaged system-space memory in used counts
++ UINT UnUseCount; //Nonpaged system-space memory available counts
++ INT PendingCount; //Nonpaged system-space memory for free counts
++ PMLME_MEMORY_STRUCT pInUseHead; //Pointer to the first nonpaed memory not used
++ PMLME_MEMORY_STRUCT pInUseTail; //Pointer to the last nonpaged memory not used
++ PMLME_MEMORY_STRUCT pUnUseHead; //Pointer to the first nonpaged memory in used
++ PMLME_MEMORY_STRUCT pUnUseTail; //Pointer to the last nonpaged memory in used
++ PULONG MemFreePending[MAX_MLME_HANDLER_MEMORY]; //an array to keep pending free-memory's pointer (32bits)
++} MLME_MEMORY_HANDLER, *PMLME_MEMORY_HANDLER;
++
++typedef struct _CmdQElmt {
++ UINT command;
++ PVOID buffer;
++ ULONG bufferlength;
++ BOOLEAN CmdFromNdis;
++ BOOLEAN SetOperation;
++ struct _CmdQElmt *next;
++} CmdQElmt, *PCmdQElmt;
++
++typedef struct _CmdQ {
++ UINT size;
++ CmdQElmt *head;
++ CmdQElmt *tail;
++ UINT32 CmdQState;
++}CmdQ, *PCmdQ;
++
++//
++// For WPA SUPPLICANT: WIRELESS EXT support wireless events: v14 or newer
++//
++#if WIRELESS_EXT >= 14
++//#define WPA_SUPPLICANT_SUPPORT 1
++#endif
++
++/* oid.h */
++// Cipher suite type for mixed mode group cipher, P802.11i-2004
++typedef enum _RT_802_11_CIPHER_SUITE_TYPE {
++ Cipher_Type_NONE,
++ Cipher_Type_WEP40,
++ Cipher_Type_TKIP,
++ Cipher_Type_RSVD,
++ Cipher_Type_CCMP,
++ Cipher_Type_WEP104
++} RT_802_11_CIPHER_SUITE_TYPE, *PRT_802_11_CIPHER_SUITE_TYPE;
++
++//CMDTHREAD_MULTI_READ_MAC
++//CMDTHREAD_MULTI_WRITE_MAC
++//CMDTHREAD_VENDOR_EEPROM_READ
++//CMDTHREAD_VENDOR_EEPROM_WRITE
++typedef struct _CMDHandler_TLV {
++ USHORT Offset;
++ USHORT Length;
++ UCHAR DataFirst;
++} CMDHandler_TLV, *PCMDHandler_TLV;
++
++// New for MeetingHouse Api support
++#define CMDTHREAD_VENDOR_RESET 0x0D730101 // cmd
++#define CMDTHREAD_VENDOR_UNPLUG 0x0D730102 // cmd
++#define CMDTHREAD_VENDOR_SWITCH_FUNCTION 0x0D730103 // cmd
++#define CMDTHREAD_MULTI_WRITE_MAC 0x0D730107 // cmd
++#define CMDTHREAD_MULTI_READ_MAC 0x0D730108 // cmd
++#define CMDTHREAD_VENDOR_EEPROM_WRITE 0x0D73010A // cmd
++#define CMDTHREAD_VENDOR_EEPROM_READ 0x0D73010B // cmd
++#define CMDTHREAD_VENDOR_ENTER_TESTMODE 0x0D73010C // cmd
++#define CMDTHREAD_VENDOR_EXIT_TESTMODE 0x0D73010D // cmd
++#define CMDTHREAD_VENDOR_WRITE_BBP 0x0D730119 // cmd
++#define CMDTHREAD_VENDOR_READ_BBP 0x0D730118 // cmd
++#define CMDTHREAD_VENDOR_WRITE_RF 0x0D73011A // cmd
++#define CMDTHREAD_VENDOR_FLIP_IQ 0x0D73011D // cmd
++#define CMDTHREAD_RESET_BULK_OUT 0x0D730210 // cmd
++#define CMDTHREAD_RESET_BULK_IN 0x0D730211 // cmd
++#define CMDTHREAD_SET_PSM_BIT_SAVE 0x0D730212 // cmd
++#define CMDTHREAD_SET_RADIO 0x0D730214 // cmd
++#define CMDTHREAD_UPDATE_TX_RATE 0x0D730216 // cmd
++#define CMDTHREAD_802_11_ADD_KEY_WEP 0x0D730218 // cmd
++#define CMDTHREAD_RESET_FROM_ERROR 0x0D73021A // cmd
++#define CMDTHREAD_LINK_DOWN 0x0D73021B // cmd
++#define CMDTHREAD_RESET_FROM_NDIS 0x0D73021C // cmd
++#define CMDTHREAD_CHECK_GPIO 0x0D730215 // cmd
++#define CMDTHREAD_FORCE_WAKE_UP 0x0D730222 // cmd
++#define CMDTHREAD_SET_BW 0x0D730225 // cmd
++#define CMDTHREAD_SET_ASIC_WCID 0x0D730226 // cmd
++#define CMDTHREAD_SET_ASIC_WCID_CIPHER 0x0D730227 // cmd
++#define CMDTHREAD_QKERIODIC_EXECUT 0x0D73023D // cmd
++#define RT_CMD_SET_KEY_TABLE 0x0D730228 // cmd
++#define RT_CMD_SET_RX_WCID_TABLE 0x0D730229 // cmd
++#define CMDTHREAD_SET_CLIENT_MAC_ENTRY 0x0D73023E // cmd
++#define CMDTHREAD_802_11_QUERY_HARDWARE_REGISTER 0x0D710105 // cmd
++#define CMDTHREAD_802_11_SET_PHY_MODE 0x0D79010C // cmd
++#define CMDTHREAD_802_11_SET_STA_CONFIG 0x0D790111 // cmd
++#define CMDTHREAD_802_11_SET_PREAMBLE 0x0D790101 // cmd
++#define CMDTHREAD_802_11_COUNTER_MEASURE 0x0D790102 // cmd
++
++
++#define WPA1AKMBIT 0x01
++#define WPA2AKMBIT 0x02
++#define WPA1PSKAKMBIT 0x04
++#define WPA2PSKAKMBIT 0x08
++#define TKIPBIT 0x01
++#define CCMPBIT 0x02
++
++
++#define RT28XX_STA_FORCE_WAKEUP(pAd, bFromTx) \
++ RT28xxUsbStaAsicForceWakeup(pAd, bFromTx);
++
++#define RT28XX_STA_SLEEP_THEN_AUTO_WAKEUP(pAd, TbttNumToNextWakeUp) \
++ RT28xxUsbStaAsicSleepThenAutoWakeup(pAd, TbttNumToNextWakeUp);
++
++#define RT28XX_MLME_RADIO_ON(pAd) \
++ RT28xxUsbMlmeRadioOn(pAd);
++
++#define RT28XX_MLME_RADIO_OFF(pAd) \
++ RT28xxUsbMlmeRadioOFF(pAd);
++
++#endif //__RT2870_H__
+--- /dev/null
++++ b/drivers/staging/rt2870/rt28xx.h
+@@ -0,0 +1,2689 @@
++/*
++ *************************************************************************
++ * Ralink Tech Inc.
++ * 5F., No.36, Taiyuan St., Jhubei City,
++ * Hsinchu County 302,
++ * Taiwan, R.O.C.
++ *
++ * (c) Copyright 2002-2007, Ralink Technology, Inc.
++ *
++ * This program is free software; you can redistribute it and/or modify *
++ * it under the terms of the GNU General Public License as published by *
++ * the Free Software Foundation; either version 2 of the License, or *
++ * (at your option) any later version. *
++ * *
++ * This program is distributed in the hope that it will be useful, *
++ * but WITHOUT ANY WARRANTY; without even the implied warranty of *
++ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the *
++ * GNU General Public License for more details. *
++ * *
++ * You should have received a copy of the GNU General Public License *
++ * along with this program; if not, write to the *
++ * Free Software Foundation, Inc., *
++ * 59 Temple Place - Suite 330, Boston, MA 02111-1307, USA. *
++ * *
++ *************************************************************************
++
++ Module Name:
++ rt28xx.h
++
++ Abstract:
++ RT28xx ASIC related definition & structures
++
++ Revision History:
++ Who When What
++ -------- ---------- ----------------------------------------------
++ Jan Lee Jan-3-2006 created for RT2860c
++*/
++
++#ifndef __RT28XX_H__
++#define __RT28XX_H__
++
++
++//
++// PCI registers - base address 0x0000
++//
++#define PCI_CFG 0x0000
++#define PCI_EECTRL 0x0004
++#define PCI_MCUCTRL 0x0008
++
++//
++// SCH/DMA registers - base address 0x0200
++//
++// INT_SOURCE_CSR: Interrupt source register. Write one to clear corresponding bit
++//
++#define DMA_CSR0 0x200
++#define INT_SOURCE_CSR 0x200
++#ifdef RT_BIG_ENDIAN
++typedef union _INT_SOURCE_CSR_STRUC {
++ struct {
++ UINT32 :14;
++ UINT32 TxCoherent:1;
++ UINT32 RxCoherent:1;
++ UINT32 GPTimer:1;
++ UINT32 AutoWakeup:1;//bit14
++ UINT32 TXFifoStatusInt:1;//FIFO Statistics is full, sw should read 0x171c
++ UINT32 PreTBTT:1;
++ UINT32 TBTTInt:1;
++ UINT32 RxTxCoherent:1;
++ UINT32 MCUCommandINT:1;
++ UINT32 MgmtDmaDone:1;
++ UINT32 HccaDmaDone:1;
++ UINT32 Ac3DmaDone:1;
++ UINT32 Ac2DmaDone:1;
++ UINT32 Ac1DmaDone:1;
++ UINT32 Ac0DmaDone:1;
++ UINT32 RxDone:1;
++ UINT32 TxDelayINT:1; //delayed interrupt, not interrupt until several int or time limit hit
++ UINT32 RxDelayINT:1; //dealyed interrupt
++ } field;
++ UINT32 word;
++} INT_SOURCE_CSR_STRUC, *PINT_SOURCE_CSR_STRUC;
++#else
++typedef union _INT_SOURCE_CSR_STRUC {
++ struct {
++ UINT32 RxDelayINT:1;
++ UINT32 TxDelayINT:1;
++ UINT32 RxDone:1;
++ UINT32 Ac0DmaDone:1;//4
++ UINT32 Ac1DmaDone:1;
++ UINT32 Ac2DmaDone:1;
++ UINT32 Ac3DmaDone:1;
++ UINT32 HccaDmaDone:1; // bit7
++ UINT32 MgmtDmaDone:1;
++ UINT32 MCUCommandINT:1;//bit 9
++ UINT32 RxTxCoherent:1;
++ UINT32 TBTTInt:1;
++ UINT32 PreTBTT:1;
++ UINT32 TXFifoStatusInt:1;//FIFO Statistics is full, sw should read 0x171c
++ UINT32 AutoWakeup:1;//bit14
++ UINT32 GPTimer:1;
++ UINT32 RxCoherent:1;//bit16
++ UINT32 TxCoherent:1;
++ UINT32 :14;
++ } field;
++ UINT32 word;
++} INT_SOURCE_CSR_STRUC, *PINT_SOURCE_CSR_STRUC;
++#endif
++
++//
++// INT_MASK_CSR: Interrupt MASK register. 1: the interrupt is mask OFF
++//
++#define INT_MASK_CSR 0x204
++#ifdef RT_BIG_ENDIAN
++typedef union _INT_MASK_CSR_STRUC {
++ struct {
++ UINT32 TxCoherent:1;
++ UINT32 RxCoherent:1;
++ UINT32 :20;
++ UINT32 MCUCommandINT:1;
++ UINT32 MgmtDmaDone:1;
++ UINT32 HccaDmaDone:1;
++ UINT32 Ac3DmaDone:1;
++ UINT32 Ac2DmaDone:1;
++ UINT32 Ac1DmaDone:1;
++ UINT32 Ac0DmaDone:1;
++ UINT32 RxDone:1;
++ UINT32 TxDelay:1;
++ UINT32 RXDelay_INT_MSK:1;
++ } field;
++ UINT32 word;
++}INT_MASK_CSR_STRUC, *PINT_MASK_CSR_STRUC;
++#else
++typedef union _INT_MASK_CSR_STRUC {
++ struct {
++ UINT32 RXDelay_INT_MSK:1;
++ UINT32 TxDelay:1;
++ UINT32 RxDone:1;
++ UINT32 Ac0DmaDone:1;
++ UINT32 Ac1DmaDone:1;
++ UINT32 Ac2DmaDone:1;
++ UINT32 Ac3DmaDone:1;
++ UINT32 HccaDmaDone:1;
++ UINT32 MgmtDmaDone:1;
++ UINT32 MCUCommandINT:1;
++ UINT32 :20;
++ UINT32 RxCoherent:1;
++ UINT32 TxCoherent:1;
++ } field;
++ UINT32 word;
++} INT_MASK_CSR_STRUC, *PINT_MASK_CSR_STRUC;
++#endif
++#define WPDMA_GLO_CFG 0x208
++#ifdef RT_BIG_ENDIAN
++typedef union _WPDMA_GLO_CFG_STRUC {
++ struct {
++ UINT32 HDR_SEG_LEN:16;
++ UINT32 RXHdrScater:8;
++ UINT32 BigEndian:1;
++ UINT32 EnTXWriteBackDDONE:1;
++ UINT32 WPDMABurstSIZE:2;
++ UINT32 RxDMABusy:1;
++ UINT32 EnableRxDMA:1;
++ UINT32 TxDMABusy:1;
++ UINT32 EnableTxDMA:1;
++ } field;
++ UINT32 word;
++}WPDMA_GLO_CFG_STRUC, *PWPDMA_GLO_CFG_STRUC;
++#else
++typedef union _WPDMA_GLO_CFG_STRUC {
++ struct {
++ UINT32 EnableTxDMA:1;
++ UINT32 TxDMABusy:1;
++ UINT32 EnableRxDMA:1;
++ UINT32 RxDMABusy:1;
++ UINT32 WPDMABurstSIZE:2;
++ UINT32 EnTXWriteBackDDONE:1;
++ UINT32 BigEndian:1;
++ UINT32 RXHdrScater:8;
++ UINT32 HDR_SEG_LEN:16;
++ } field;
++ UINT32 word;
++} WPDMA_GLO_CFG_STRUC, *PWPDMA_GLO_CFG_STRUC;
++#endif
++#define WPDMA_RST_IDX 0x20c
++#ifdef RT_BIG_ENDIAN
++typedef union _WPDMA_RST_IDX_STRUC {
++ struct {
++ UINT32 :15;
++ UINT32 RST_DRX_IDX0:1;
++ UINT32 rsv:10;
++ UINT32 RST_DTX_IDX5:1;
++ UINT32 RST_DTX_IDX4:1;
++ UINT32 RST_DTX_IDX3:1;
++ UINT32 RST_DTX_IDX2:1;
++ UINT32 RST_DTX_IDX1:1;
++ UINT32 RST_DTX_IDX0:1;
++ } field;
++ UINT32 word;
++}WPDMA_RST_IDX_STRUC, *PWPDMA_RST_IDX_STRUC;
++#else
++typedef union _WPDMA_RST_IDX_STRUC {
++ struct {
++ UINT32 RST_DTX_IDX0:1;
++ UINT32 RST_DTX_IDX1:1;
++ UINT32 RST_DTX_IDX2:1;
++ UINT32 RST_DTX_IDX3:1;
++ UINT32 RST_DTX_IDX4:1;
++ UINT32 RST_DTX_IDX5:1;
++ UINT32 rsv:10;
++ UINT32 RST_DRX_IDX0:1;
++ UINT32 :15;
++ } field;
++ UINT32 word;
++} WPDMA_RST_IDX_STRUC, *PWPDMA_RST_IDX_STRUC;
++#endif
++#define DELAY_INT_CFG 0x0210
++#ifdef RT_BIG_ENDIAN
++typedef union _DELAY_INT_CFG_STRUC {
++ struct {
++ UINT32 TXDLY_INT_EN:1;
++ UINT32 TXMAX_PINT:7;
++ UINT32 TXMAX_PTIME:8;
++ UINT32 RXDLY_INT_EN:1;
++ UINT32 RXMAX_PINT:7;
++ UINT32 RXMAX_PTIME:8;
++ } field;
++ UINT32 word;
++}DELAY_INT_CFG_STRUC, *PDELAY_INT_CFG_STRUC;
++#else
++typedef union _DELAY_INT_CFG_STRUC {
++ struct {
++ UINT32 RXMAX_PTIME:8;
++ UINT32 RXMAX_PINT:7;
++ UINT32 RXDLY_INT_EN:1;
++ UINT32 TXMAX_PTIME:8;
++ UINT32 TXMAX_PINT:7;
++ UINT32 TXDLY_INT_EN:1;
++ } field;
++ UINT32 word;
++} DELAY_INT_CFG_STRUC, *PDELAY_INT_CFG_STRUC;
++#endif
++#define WMM_AIFSN_CFG 0x0214
++#ifdef RT_BIG_ENDIAN
++typedef union _AIFSN_CSR_STRUC {
++ struct {
++ UINT32 Rsv:16;
++ UINT32 Aifsn3:4; // for AC_VO
++ UINT32 Aifsn2:4; // for AC_VI
++ UINT32 Aifsn1:4; // for AC_BK
++ UINT32 Aifsn0:4; // for AC_BE
++ } field;
++ UINT32 word;
++} AIFSN_CSR_STRUC, *PAIFSN_CSR_STRUC;
++#else
++typedef union _AIFSN_CSR_STRUC {
++ struct {
++ UINT32 Aifsn0:4; // for AC_BE
++ UINT32 Aifsn1:4; // for AC_BK
++ UINT32 Aifsn2:4; // for AC_VI
++ UINT32 Aifsn3:4; // for AC_VO
++ UINT32 Rsv:16;
++ } field;
++ UINT32 word;
++} AIFSN_CSR_STRUC, *PAIFSN_CSR_STRUC;
++#endif
++//
++// CWMIN_CSR: CWmin for each EDCA AC
++//
++#define WMM_CWMIN_CFG 0x0218
++#ifdef RT_BIG_ENDIAN
++typedef union _CWMIN_CSR_STRUC {
++ struct {
++ UINT32 Rsv:16;
++ UINT32 Cwmin3:4; // for AC_VO
++ UINT32 Cwmin2:4; // for AC_VI
++ UINT32 Cwmin1:4; // for AC_BK
++ UINT32 Cwmin0:4; // for AC_BE
++ } field;
++ UINT32 word;
++} CWMIN_CSR_STRUC, *PCWMIN_CSR_STRUC;
++#else
++typedef union _CWMIN_CSR_STRUC {
++ struct {
++ UINT32 Cwmin0:4; // for AC_BE
++ UINT32 Cwmin1:4; // for AC_BK
++ UINT32 Cwmin2:4; // for AC_VI
++ UINT32 Cwmin3:4; // for AC_VO
++ UINT32 Rsv:16;
++ } field;
++ UINT32 word;
++} CWMIN_CSR_STRUC, *PCWMIN_CSR_STRUC;
++#endif
++
++//
++// CWMAX_CSR: CWmin for each EDCA AC
++//
++#define WMM_CWMAX_CFG 0x021c
++#ifdef RT_BIG_ENDIAN
++typedef union _CWMAX_CSR_STRUC {
++ struct {
++ UINT32 Rsv:16;
++ UINT32 Cwmax3:4; // for AC_VO
++ UINT32 Cwmax2:4; // for AC_VI
++ UINT32 Cwmax1:4; // for AC_BK
++ UINT32 Cwmax0:4; // for AC_BE
++ } field;
++ UINT32 word;
++} CWMAX_CSR_STRUC, *PCWMAX_CSR_STRUC;
++#else
++typedef union _CWMAX_CSR_STRUC {
++ struct {
++ UINT32 Cwmax0:4; // for AC_BE
++ UINT32 Cwmax1:4; // for AC_BK
++ UINT32 Cwmax2:4; // for AC_VI
++ UINT32 Cwmax3:4; // for AC_VO
++ UINT32 Rsv:16;
++ } field;
++ UINT32 word;
++} CWMAX_CSR_STRUC, *PCWMAX_CSR_STRUC;
++#endif
++
++
++//
++// AC_TXOP_CSR0: AC_BK/AC_BE TXOP register
++//
++#define WMM_TXOP0_CFG 0x0220
++#ifdef RT_BIG_ENDIAN
++typedef union _AC_TXOP_CSR0_STRUC {
++ struct {
++ USHORT Ac1Txop; // for AC_BE, in unit of 32us
++ USHORT Ac0Txop; // for AC_BK, in unit of 32us
++ } field;
++ UINT32 word;
++} AC_TXOP_CSR0_STRUC, *PAC_TXOP_CSR0_STRUC;
++#else
++typedef union _AC_TXOP_CSR0_STRUC {
++ struct {
++ USHORT Ac0Txop; // for AC_BK, in unit of 32us
++ USHORT Ac1Txop; // for AC_BE, in unit of 32us
++ } field;
++ UINT32 word;
++} AC_TXOP_CSR0_STRUC, *PAC_TXOP_CSR0_STRUC;
++#endif
++
++//
++// AC_TXOP_CSR1: AC_VO/AC_VI TXOP register
++//
++#define WMM_TXOP1_CFG 0x0224
++#ifdef RT_BIG_ENDIAN
++typedef union _AC_TXOP_CSR1_STRUC {
++ struct {
++ USHORT Ac3Txop; // for AC_VO, in unit of 32us
++ USHORT Ac2Txop; // for AC_VI, in unit of 32us
++ } field;
++ UINT32 word;
++} AC_TXOP_CSR1_STRUC, *PAC_TXOP_CSR1_STRUC;
++#else
++typedef union _AC_TXOP_CSR1_STRUC {
++ struct {
++ USHORT Ac2Txop; // for AC_VI, in unit of 32us
++ USHORT Ac3Txop; // for AC_VO, in unit of 32us
++ } field;
++ UINT32 word;
++} AC_TXOP_CSR1_STRUC, *PAC_TXOP_CSR1_STRUC;
++#endif
++#define RINGREG_DIFF 0x10
++#define GPIO_CTRL_CFG 0x0228 //MAC_CSR13
++#define MCU_CMD_CFG 0x022c
++#define TX_BASE_PTR0 0x0230 //AC_BK base address
++#define TX_MAX_CNT0 0x0234
++#define TX_CTX_IDX0 0x0238
++#define TX_DTX_IDX0 0x023c
++#define TX_BASE_PTR1 0x0240 //AC_BE base address
++#define TX_MAX_CNT1 0x0244
++#define TX_CTX_IDX1 0x0248
++#define TX_DTX_IDX1 0x024c
++#define TX_BASE_PTR2 0x0250 //AC_VI base address
++#define TX_MAX_CNT2 0x0254
++#define TX_CTX_IDX2 0x0258
++#define TX_DTX_IDX2 0x025c
++#define TX_BASE_PTR3 0x0260 //AC_VO base address
++#define TX_MAX_CNT3 0x0264
++#define TX_CTX_IDX3 0x0268
++#define TX_DTX_IDX3 0x026c
++#define TX_BASE_PTR4 0x0270 //HCCA base address
++#define TX_MAX_CNT4 0x0274
++#define TX_CTX_IDX4 0x0278
++#define TX_DTX_IDX4 0x027c
++#define TX_BASE_PTR5 0x0280 //MGMT base address
++#define TX_MAX_CNT5 0x0284
++#define TX_CTX_IDX5 0x0288
++#define TX_DTX_IDX5 0x028c
++#define TX_MGMTMAX_CNT TX_MAX_CNT5
++#define TX_MGMTCTX_IDX TX_CTX_IDX5
++#define TX_MGMTDTX_IDX TX_DTX_IDX5
++#define RX_BASE_PTR 0x0290 //RX base address
++#define RX_MAX_CNT 0x0294
++#define RX_CRX_IDX 0x0298
++#define RX_DRX_IDX 0x029c
++#define USB_DMA_CFG 0x02a0
++#ifdef RT_BIG_ENDIAN
++typedef union _USB_DMA_CFG_STRUC {
++ struct {
++ UINT32 TxBusy:1; //USB DMA TX FSM busy . debug only
++ UINT32 RxBusy:1; //USB DMA RX FSM busy . debug only
++ UINT32 EpoutValid:6; //OUT endpoint data valid. debug only
++ UINT32 TxBulkEn:1; //Enable USB DMA Tx
++ UINT32 RxBulkEn:1; //Enable USB DMA Rx
++ UINT32 RxBulkAggEn:1; //Enable Rx Bulk Aggregation
++ UINT32 TxopHalt:1; //Halt TXOP count down when TX buffer is full.
++ UINT32 TxClear:1; //Clear USB DMA TX path
++ UINT32 rsv:2;
++ UINT32 phyclear:1; //phy watch dog enable. write 1
++ UINT32 RxBulkAggLmt:8; //Rx Bulk Aggregation Limit in unit of 1024 bytes
++ UINT32 RxBulkAggTOut:8; //Rx Bulk Aggregation TimeOut in unit of 33ns
++ } field;
++ UINT32 word;
++} USB_DMA_CFG_STRUC, *PUSB_DMA_CFG_STRUC;
++#else
++typedef union _USB_DMA_CFG_STRUC {
++ struct {
++ UINT32 RxBulkAggTOut:8; //Rx Bulk Aggregation TimeOut in unit of 33ns
++ UINT32 RxBulkAggLmt:8; //Rx Bulk Aggregation Limit in unit of 256 bytes
++ UINT32 phyclear:1; //phy watch dog enable. write 1
++ UINT32 rsv:2;
++ UINT32 TxClear:1; //Clear USB DMA TX path
++ UINT32 TxopHalt:1; //Halt TXOP count down when TX buffer is full.
++ UINT32 RxBulkAggEn:1; //Enable Rx Bulk Aggregation
++ UINT32 RxBulkEn:1; //Enable USB DMA Rx
++ UINT32 TxBulkEn:1; //Enable USB DMA Tx
++ UINT32 EpoutValid:6; //OUT endpoint data valid
++ UINT32 RxBusy:1; //USB DMA RX FSM busy
++ UINT32 TxBusy:1; //USB DMA TX FSM busy
++ } field;
++ UINT32 word;
++} USB_DMA_CFG_STRUC, *PUSB_DMA_CFG_STRUC;
++#endif
++
++//
++// 3 PBF registers
++//
++//
++// Most are for debug. Driver doesn't touch PBF register.
++#define PBF_SYS_CTRL 0x0400
++#define PBF_CFG 0x0408
++#define PBF_MAX_PCNT 0x040C
++#define PBF_CTRL 0x0410
++#define PBF_INT_STA 0x0414
++#define PBF_INT_ENA 0x0418
++#define TXRXQ_PCNT 0x0438
++#define PBF_DBG 0x043c
++#define PBF_CAP_CTRL 0x0440
++
++//
++// 4 MAC registers
++//
++//
++// 4.1 MAC SYSTEM configuration registers (offset:0x1000)
++//
++#define MAC_CSR0 0x1000
++#ifdef RT_BIG_ENDIAN
++typedef union _ASIC_VER_ID_STRUC {
++ struct {
++ USHORT ASICVer; // version : 2860
++ USHORT ASICRev; // reversion : 0
++ } field;
++ UINT32 word;
++} ASIC_VER_ID_STRUC, *PASIC_VER_ID_STRUC;
++#else
++typedef union _ASIC_VER_ID_STRUC {
++ struct {
++ USHORT ASICRev; // reversion : 0
++ USHORT ASICVer; // version : 2860
++ } field;
++ UINT32 word;
++} ASIC_VER_ID_STRUC, *PASIC_VER_ID_STRUC;
++#endif
++#define MAC_SYS_CTRL 0x1004 //MAC_CSR1
++#define MAC_ADDR_DW0 0x1008 // MAC ADDR DW0
++#define MAC_ADDR_DW1 0x100c // MAC ADDR DW1
++//
++// MAC_CSR2: STA MAC register 0
++//
++#ifdef RT_BIG_ENDIAN
++typedef union _MAC_DW0_STRUC {
++ struct {
++ UCHAR Byte3; // MAC address byte 3
++ UCHAR Byte2; // MAC address byte 2
++ UCHAR Byte1; // MAC address byte 1
++ UCHAR Byte0; // MAC address byte 0
++ } field;
++ UINT32 word;
++} MAC_DW0_STRUC, *PMAC_DW0_STRUC;
++#else
++typedef union _MAC_DW0_STRUC {
++ struct {
++ UCHAR Byte0; // MAC address byte 0
++ UCHAR Byte1; // MAC address byte 1
++ UCHAR Byte2; // MAC address byte 2
++ UCHAR Byte3; // MAC address byte 3
++ } field;
++ UINT32 word;
++} MAC_DW0_STRUC, *PMAC_DW0_STRUC;
++#endif
++
++//
++// MAC_CSR3: STA MAC register 1
++//
++#ifdef RT_BIG_ENDIAN
++typedef union _MAC_DW1_STRUC {
++ struct {
++ UCHAR Rsvd1;
++ UCHAR U2MeMask;
++ UCHAR Byte5; // MAC address byte 5
++ UCHAR Byte4; // MAC address byte 4
++ } field;
++ UINT32 word;
++} MAC_DW1_STRUC, *PMAC_DW1_STRUC;
++#else
++typedef union _MAC_DW1_STRUC {
++ struct {
++ UCHAR Byte4; // MAC address byte 4
++ UCHAR Byte5; // MAC address byte 5
++ UCHAR U2MeMask;
++ UCHAR Rsvd1;
++ } field;
++ UINT32 word;
++} MAC_DW1_STRUC, *PMAC_DW1_STRUC;
++#endif
++
++#define MAC_BSSID_DW0 0x1010 // MAC BSSID DW0
++#define MAC_BSSID_DW1 0x1014 // MAC BSSID DW1
++
++//
++// MAC_CSR5: BSSID register 1
++//
++#ifdef RT_BIG_ENDIAN
++typedef union _MAC_CSR5_STRUC {
++ struct {
++ USHORT Rsvd:11;
++ USHORT MBssBcnNum:3;
++ USHORT BssIdMode:2; // 0: one BSSID, 10: 4 BSSID, 01: 2 BSSID , 11: 8BSSID
++ UCHAR Byte5; // BSSID byte 5
++ UCHAR Byte4; // BSSID byte 4
++ } field;
++ UINT32 word;
++} MAC_CSR5_STRUC, *PMAC_CSR5_STRUC;
++#else
++typedef union _MAC_CSR5_STRUC {
++ struct {
++ UCHAR Byte4; // BSSID byte 4
++ UCHAR Byte5; // BSSID byte 5
++ USHORT BssIdMask:2; // 0: one BSSID, 10: 4 BSSID, 01: 2 BSSID , 11: 8BSSID
++ USHORT MBssBcnNum:3;
++ USHORT Rsvd:11;
++ } field;
++ UINT32 word;
++} MAC_CSR5_STRUC, *PMAC_CSR5_STRUC;
++#endif
++
++#define MAX_LEN_CFG 0x1018 // rt2860b max 16k bytes. bit12:13 Maximum PSDU length (power factor) 0:2^13, 1:2^14, 2:2^15, 3:2^16
++#define BBP_CSR_CFG 0x101c //
++//
++// BBP_CSR_CFG: BBP serial control register
++//
++#ifdef RT_BIG_ENDIAN
++typedef union _BBP_CSR_CFG_STRUC {
++ struct {
++ UINT32 :12;
++ UINT32 BBP_RW_MODE:1; // 0: use serial mode 1:parallel
++ UINT32 BBP_PAR_DUR:1; // 0: 4 MAC clock cycles 1: 8 MAC clock cycles
++ UINT32 Busy:1; // 1: ASIC is busy execute BBP programming.
++ UINT32 fRead:1; // 0: Write BBP, 1: Read BBP
++ UINT32 RegNum:8; // Selected BBP register
++ UINT32 Value:8; // Register value to program into BBP
++ } field;
++ UINT32 word;
++} BBP_CSR_CFG_STRUC, *PBBP_CSR_CFG_STRUC;
++#else
++typedef union _BBP_CSR_CFG_STRUC {
++ struct {
++ UINT32 Value:8; // Register value to program into BBP
++ UINT32 RegNum:8; // Selected BBP register
++ UINT32 fRead:1; // 0: Write BBP, 1: Read BBP
++ UINT32 Busy:1; // 1: ASIC is busy execute BBP programming.
++ UINT32 BBP_PAR_DUR:1; // 0: 4 MAC clock cycles 1: 8 MAC clock cycles
++ UINT32 BBP_RW_MODE:1; // 0: use serial mode 1:parallel
++ UINT32 :12;
++ } field;
++ UINT32 word;
++} BBP_CSR_CFG_STRUC, *PBBP_CSR_CFG_STRUC;
++#endif
++#define RF_CSR_CFG0 0x1020
++//
++// RF_CSR_CFG: RF control register
++//
++#ifdef RT_BIG_ENDIAN
++typedef union _RF_CSR_CFG0_STRUC {
++ struct {
++ UINT32 Busy:1; // 0: idle 1: 8busy
++ UINT32 Sel:1; // 0:RF_LE0 activate 1:RF_LE1 activate
++ UINT32 StandbyMode:1; // 0: high when stand by 1: low when standby
++ UINT32 bitwidth:5; // Selected BBP register
++ UINT32 RegIdAndContent:24; // Register value to program into BBP
++ } field;
++ UINT32 word;
++} RF_CSR_CFG0_STRUC, *PRF_CSR_CFG0_STRUC;
++#else
++typedef union _RF_CSR_CFG0_STRUC {
++ struct {
++ UINT32 RegIdAndContent:24; // Register value to program into BBP
++ UINT32 bitwidth:5; // Selected BBP register
++ UINT32 StandbyMode:1; // 0: high when stand by 1: low when standby
++ UINT32 Sel:1; // 0:RF_LE0 activate 1:RF_LE1 activate
++ UINT32 Busy:1; // 0: idle 1: 8busy
++ } field;
++ UINT32 word;
++} RF_CSR_CFG0_STRUC, *PRF_CSR_CFG0_STRUC;
++#endif
++#define RF_CSR_CFG1 0x1024
++#ifdef RT_BIG_ENDIAN
++typedef union _RF_CSR_CFG1_STRUC {
++ struct {
++ UINT32 rsv:7; // 0: idle 1: 8busy
++ UINT32 RFGap:5; // Gap between BB_CONTROL_RF and RF_LE. 0: 3 system clock cycle (37.5usec) 1: 5 system clock cycle (62.5usec)
++ UINT32 RegIdAndContent:24; // Register value to program into BBP
++ } field;
++ UINT32 word;
++} RF_CSR_CFG1_STRUC, *PRF_CSR_CFG1_STRUC;
++#else
++typedef union _RF_CSR_CFG1_STRUC {
++ struct {
++ UINT32 RegIdAndContent:24; // Register value to program into BBP
++ UINT32 RFGap:5; // Gap between BB_CONTROL_RF and RF_LE. 0: 3 system clock cycle (37.5usec) 1: 5 system clock cycle (62.5usec)
++ UINT32 rsv:7; // 0: idle 1: 8busy
++ } field;
++ UINT32 word;
++} RF_CSR_CFG1_STRUC, *PRF_CSR_CFG1_STRUC;
++#endif
++#define RF_CSR_CFG2 0x1028 //
++#ifdef RT_BIG_ENDIAN
++typedef union _RF_CSR_CFG2_STRUC {
++ struct {
++ UINT32 rsv:8; // 0: idle 1: 8busy
++ UINT32 RegIdAndContent:24; // Register value to program into BBP
++ } field;
++ UINT32 word;
++} RF_CSR_CFG2_STRUC, *PRF_CSR_CFG2_STRUC;
++#else
++typedef union _RF_CSR_CFG2_STRUC {
++ struct {
++ UINT32 RegIdAndContent:24; // Register value to program into BBP
++ UINT32 rsv:8; // 0: idle 1: 8busy
++ } field;
++ UINT32 word;
++} RF_CSR_CFG2_STRUC, *PRF_CSR_CFG2_STRUC;
++#endif
++#define LED_CFG 0x102c // MAC_CSR14
++#ifdef RT_BIG_ENDIAN
++typedef union _LED_CFG_STRUC {
++ struct {
++ UINT32 :1;
++ UINT32 LedPolar:1; // Led Polarity. 0: active low1: active high
++ UINT32 YLedMode:2; // yellow Led Mode
++ UINT32 GLedMode:2; // green Led Mode
++ UINT32 RLedMode:2; // red Led Mode 0: off1: blinking upon TX2: periodic slow blinking3: always on
++ UINT32 rsv:2;
++ UINT32 SlowBlinkPeriod:6; // slow blinking period. unit:1ms
++ UINT32 OffPeriod:8; // blinking off period unit 1ms
++ UINT32 OnPeriod:8; // blinking on period unit 1ms
++ } field;
++ UINT32 word;
++} LED_CFG_STRUC, *PLED_CFG_STRUC;
++#else
++typedef union _LED_CFG_STRUC {
++ struct {
++ UINT32 OnPeriod:8; // blinking on period unit 1ms
++ UINT32 OffPeriod:8; // blinking off period unit 1ms
++ UINT32 SlowBlinkPeriod:6; // slow blinking period. unit:1ms
++ UINT32 rsv:2;
++ UINT32 RLedMode:2; // red Led Mode 0: off1: blinking upon TX2: periodic slow blinking3: always on
++ UINT32 GLedMode:2; // green Led Mode
++ UINT32 YLedMode:2; // yellow Led Mode
++ UINT32 LedPolar:1; // Led Polarity. 0: active low1: active high
++ UINT32 :1;
++ } field;
++ UINT32 word;
++} LED_CFG_STRUC, *PLED_CFG_STRUC;
++#endif
++//
++// 4.2 MAC TIMING configuration registers (offset:0x1100)
++//
++#define XIFS_TIME_CFG 0x1100 // MAC_CSR8 MAC_CSR9
++#ifdef RT_BIG_ENDIAN
++typedef union _IFS_SLOT_CFG_STRUC {
++ struct {
++ UINT32 rsv:2;
++ UINT32 BBRxendEnable:1; // reference RXEND signal to begin XIFS defer
++ UINT32 EIFS:9; // unit 1us
++ UINT32 OfdmXifsTime:4; //OFDM SIFS. unit 1us. Applied after OFDM RX when MAC doesn't reference BBP signal BBRXEND
++ UINT32 OfdmSifsTime:8; // unit 1us. Applied after OFDM RX/TX
++ UINT32 CckmSifsTime:8; // unit 1us. Applied after CCK RX/TX
++ } field;
++ UINT32 word;
++} IFS_SLOT_CFG_STRUC, *PIFS_SLOT_CFG_STRUC;
++#else
++typedef union _IFS_SLOT_CFG_STRUC {
++ struct {
++ UINT32 CckmSifsTime:8; // unit 1us. Applied after CCK RX/TX
++ UINT32 OfdmSifsTime:8; // unit 1us. Applied after OFDM RX/TX
++ UINT32 OfdmXifsTime:4; //OFDM SIFS. unit 1us. Applied after OFDM RX when MAC doesn't reference BBP signal BBRXEND
++ UINT32 EIFS:9; // unit 1us
++ UINT32 BBRxendEnable:1; // reference RXEND signal to begin XIFS defer
++ UINT32 rsv:2;
++ } field;
++ UINT32 word;
++} IFS_SLOT_CFG_STRUC, *PIFS_SLOT_CFG_STRUC;
++#endif
++
++#define BKOFF_SLOT_CFG 0x1104 // mac_csr9 last 8 bits
++#define NAV_TIME_CFG 0x1108 // NAV (MAC_CSR15)
++#define CH_TIME_CFG 0x110C // Count as channel busy
++#define PBF_LIFE_TIMER 0x1110 //TX/RX MPDU timestamp timer (free run)Unit: 1us
++#define BCN_TIME_CFG 0x1114 // TXRX_CSR9
++
++#define BCN_OFFSET0 0x042C
++#define BCN_OFFSET1 0x0430
++
++//
++// BCN_TIME_CFG : Synchronization control register
++//
++#ifdef RT_BIG_ENDIAN
++typedef union _BCN_TIME_CFG_STRUC {
++ struct {
++ UINT32 TxTimestampCompensate:8;
++ UINT32 :3;
++ UINT32 bBeaconGen:1; // Enable beacon generator
++ UINT32 bTBTTEnable:1;
++ UINT32 TsfSyncMode:2; // Enable TSF sync, 00: disable, 01: infra mode, 10: ad-hoc mode
++ UINT32 bTsfTicking:1; // Enable TSF auto counting
++ UINT32 BeaconInterval:16; // in unit of 1/16 TU
++ } field;
++ UINT32 word;
++} BCN_TIME_CFG_STRUC, *PBCN_TIME_CFG_STRUC;
++#else
++typedef union _BCN_TIME_CFG_STRUC {
++ struct {
++ UINT32 BeaconInterval:16; // in unit of 1/16 TU
++ UINT32 bTsfTicking:1; // Enable TSF auto counting
++ UINT32 TsfSyncMode:2; // Enable TSF sync, 00: disable, 01: infra mode, 10: ad-hoc mode
++ UINT32 bTBTTEnable:1;
++ UINT32 bBeaconGen:1; // Enable beacon generator
++ UINT32 :3;
++ UINT32 TxTimestampCompensate:8;
++ } field;
++ UINT32 word;
++} BCN_TIME_CFG_STRUC, *PBCN_TIME_CFG_STRUC;
++#endif
++#define TBTT_SYNC_CFG 0x1118 // txrx_csr10
++#define TSF_TIMER_DW0 0x111C // Local TSF timer lsb 32 bits. Read-only
++#define TSF_TIMER_DW1 0x1120 // msb 32 bits. Read-only.
++#define TBTT_TIMER 0x1124 // TImer remains till next TBTT. Read-only. TXRX_CSR14
++#define INT_TIMER_CFG 0x1128 //
++#define INT_TIMER_EN 0x112c // GP-timer and pre-tbtt Int enable
++#define CH_IDLE_STA 0x1130 // channel idle time
++#define CH_BUSY_STA 0x1134 // channle busy time
++//
++// 4.2 MAC POWER configuration registers (offset:0x1200)
++//
++#define MAC_STATUS_CFG 0x1200 // old MAC_CSR12
++#define PWR_PIN_CFG 0x1204 // old MAC_CSR12
++#define AUTO_WAKEUP_CFG 0x1208 // old MAC_CSR10
++//
++// AUTO_WAKEUP_CFG: Manual power control / status register
++//
++#ifdef RT_BIG_ENDIAN
++typedef union _AUTO_WAKEUP_STRUC {
++ struct {
++ UINT32 :16;
++ UINT32 EnableAutoWakeup:1; // 0:sleep, 1:awake
++ UINT32 NumofSleepingTbtt:7; // ForceWake has high privilege than PutToSleep when both set
++ UINT32 AutoLeadTime:8;
++ } field;
++ UINT32 word;
++} AUTO_WAKEUP_STRUC, *PAUTO_WAKEUP_STRUC;
++#else
++typedef union _AUTO_WAKEUP_STRUC {
++ struct {
++ UINT32 AutoLeadTime:8;
++ UINT32 NumofSleepingTbtt:7; // ForceWake has high privilege than PutToSleep when both set
++ UINT32 EnableAutoWakeup:1; // 0:sleep, 1:awake
++ UINT32 :16;
++ } field;
++ UINT32 word;
++} AUTO_WAKEUP_STRUC, *PAUTO_WAKEUP_STRUC;
++#endif
++//
++// 4.3 MAC TX configuration registers (offset:0x1300)
++//
++
++#define EDCA_AC0_CFG 0x1300 //AC_TXOP_CSR0 0x3474
++#define EDCA_AC1_CFG 0x1304
++#define EDCA_AC2_CFG 0x1308
++#define EDCA_AC3_CFG 0x130c
++#ifdef RT_BIG_ENDIAN
++typedef union _EDCA_AC_CFG_STRUC {
++ struct {
++ UINT32 :12; //
++ UINT32 Cwmax:4; //unit power of 2
++ UINT32 Cwmin:4; //
++ UINT32 Aifsn:4; // # of slot time
++ UINT32 AcTxop:8; // in unit of 32us
++ } field;
++ UINT32 word;
++} EDCA_AC_CFG_STRUC, *PEDCA_AC_CFG_STRUC;
++#else
++typedef union _EDCA_AC_CFG_STRUC {
++ struct {
++ UINT32 AcTxop:8; // in unit of 32us
++ UINT32 Aifsn:4; // # of slot time
++ UINT32 Cwmin:4; //
++ UINT32 Cwmax:4; //unit power of 2
++ UINT32 :12; //
++ } field;
++ UINT32 word;
++} EDCA_AC_CFG_STRUC, *PEDCA_AC_CFG_STRUC;
++#endif
++
++#define EDCA_TID_AC_MAP 0x1310
++#define TX_PWR_CFG_0 0x1314
++#define TX_PWR_CFG_1 0x1318
++#define TX_PWR_CFG_2 0x131C
++#define TX_PWR_CFG_3 0x1320
++#define TX_PWR_CFG_4 0x1324
++#define TX_PIN_CFG 0x1328
++#define TX_BAND_CFG 0x132c // 0x1 use upper 20MHz. 0 juse lower 20MHz
++#define TX_SW_CFG0 0x1330
++#define TX_SW_CFG1 0x1334
++#define TX_SW_CFG2 0x1338
++#define TXOP_THRES_CFG 0x133c
++#define TXOP_CTRL_CFG 0x1340
++#define TX_RTS_CFG 0x1344
++
++#ifdef RT_BIG_ENDIAN
++typedef union _TX_RTS_CFG_STRUC {
++ struct {
++ UINT32 rsv:7;
++ UINT32 RtsFbkEn:1; // enable rts rate fallback
++ UINT32 RtsThres:16; // unit:byte
++ UINT32 AutoRtsRetryLimit:8;
++ } field;
++ UINT32 word;
++} TX_RTS_CFG_STRUC, *PTX_RTS_CFG_STRUC;
++#else
++typedef union _TX_RTS_CFG_STRUC {
++ struct {
++ UINT32 AutoRtsRetryLimit:8;
++ UINT32 RtsThres:16; // unit:byte
++ UINT32 RtsFbkEn:1; // enable rts rate fallback
++ UINT32 rsv:7; // 1: HT non-STBC control frame enable
++ } field;
++ UINT32 word;
++} TX_RTS_CFG_STRUC, *PTX_RTS_CFG_STRUC;
++#endif
++#define TX_TIMEOUT_CFG 0x1348
++#ifdef RT_BIG_ENDIAN
++typedef union _TX_TIMEOUT_CFG_STRUC {
++ struct {
++ UINT32 rsv2:8;
++ UINT32 TxopTimeout:8; //TXOP timeout value for TXOP truncation. It is recommended that (SLOT_TIME) > (TX_OP_TIMEOUT) > (RX_ACK_TIMEOUT)
++ UINT32 RxAckTimeout:8; // unit:slot. Used for TX precedure
++ UINT32 MpduLifeTime:4; // expiration time = 2^(9+MPDU LIFE TIME) us
++ UINT32 rsv:4;
++ } field;
++ UINT32 word;
++} TX_TIMEOUT_CFG_STRUC, *PTX_TIMEOUT_CFG_STRUC;
++#else
++typedef union _TX_TIMEOUT_CFG_STRUC {
++ struct {
++ UINT32 rsv:4;
++ UINT32 MpduLifeTime:4; // expiration time = 2^(9+MPDU LIFE TIME) us
++ UINT32 RxAckTimeout:8; // unit:slot. Used for TX precedure
++ UINT32 TxopTimeout:8; //TXOP timeout value for TXOP truncation. It is recommended that (SLOT_TIME) > (TX_OP_TIMEOUT) > (RX_ACK_TIMEOUT)
++ UINT32 rsv2:8; // 1: HT non-STBC control frame enable
++ } field;
++ UINT32 word;
++} TX_TIMEOUT_CFG_STRUC, *PTX_TIMEOUT_CFG_STRUC;
++#endif
++#define TX_RTY_CFG 0x134c
++#ifdef RT_BIG_ENDIAN
++typedef union PACKED _TX_RTY_CFG_STRUC {
++ struct {
++ UINT32 rsv:1;
++ UINT32 TxautoFBEnable:1; // Tx retry PHY rate auto fallback enable
++ UINT32 AggRtyMode:1; // Aggregate MPDU retry mode. 0:expired by retry limit, 1: expired by mpdu life timer
++ UINT32 NonAggRtyMode:1; // Non-Aggregate MPDU retry mode. 0:expired by retry limit, 1: expired by mpdu life timer
++ UINT32 LongRtyThre:12; // Long retry threshoold
++ UINT32 LongRtyLimit:8; //long retry limit
++ UINT32 ShortRtyLimit:8; // short retry limit
++
++ } field;
++ UINT32 word;
++} TX_RTY_CFG_STRUC, *PTX_RTY_CFG_STRUC;
++#else
++typedef union PACKED _TX_RTY_CFG_STRUC {
++ struct {
++ UINT32 ShortRtyLimit:8; // short retry limit
++ UINT32 LongRtyLimit:8; //long retry limit
++ UINT32 LongRtyThre:12; // Long retry threshoold
++ UINT32 NonAggRtyMode:1; // Non-Aggregate MPDU retry mode. 0:expired by retry limit, 1: expired by mpdu life timer
++ UINT32 AggRtyMode:1; // Aggregate MPDU retry mode. 0:expired by retry limit, 1: expired by mpdu life timer
++ UINT32 TxautoFBEnable:1; // Tx retry PHY rate auto fallback enable
++ UINT32 rsv:1; // 1: HT non-STBC control frame enable
++ } field;
++ UINT32 word;
++} TX_RTY_CFG_STRUC, *PTX_RTY_CFG_STRUC;
++#endif
++#define TX_LINK_CFG 0x1350
++#ifdef RT_BIG_ENDIAN
++typedef union PACKED _TX_LINK_CFG_STRUC {
++ struct PACKED {
++ UINT32 RemotMFS:8; //remote MCS feedback sequence number
++ UINT32 RemotMFB:8; // remote MCS feedback
++ UINT32 rsv:3; //
++ UINT32 TxCFAckEn:1; // Piggyback CF-ACK enable
++ UINT32 TxRDGEn:1; // RDG TX enable
++ UINT32 TxMRQEn:1; // MCS request TX enable
++ UINT32 RemoteUMFSEnable:1; // remote unsolicit MFB enable. 0: not apply remote remote unsolicit (MFS=7)
++ UINT32 MFBEnable:1; // TX apply remote MFB 1:enable
++ UINT32 RemoteMFBLifeTime:8; //remote MFB life time. unit : 32us
++ } field;
++ UINT32 word;
++} TX_LINK_CFG_STRUC, *PTX_LINK_CFG_STRUC;
++#else
++typedef union PACKED _TX_LINK_CFG_STRUC {
++ struct PACKED {
++ UINT32 RemoteMFBLifeTime:8; //remote MFB life time. unit : 32us
++ UINT32 MFBEnable:1; // TX apply remote MFB 1:enable
++ UINT32 RemoteUMFSEnable:1; // remote unsolicit MFB enable. 0: not apply remote remote unsolicit (MFS=7)
++ UINT32 TxMRQEn:1; // MCS request TX enable
++ UINT32 TxRDGEn:1; // RDG TX enable
++ UINT32 TxCFAckEn:1; // Piggyback CF-ACK enable
++ UINT32 rsv:3; //
++ UINT32 RemotMFB:8; // remote MCS feedback
++ UINT32 RemotMFS:8; //remote MCS feedback sequence number
++ } field;
++ UINT32 word;
++} TX_LINK_CFG_STRUC, *PTX_LINK_CFG_STRUC;
++#endif
++#define HT_FBK_CFG0 0x1354
++#ifdef RT_BIG_ENDIAN
++typedef union PACKED _HT_FBK_CFG0_STRUC {
++ struct {
++ UINT32 HTMCS7FBK:4;
++ UINT32 HTMCS6FBK:4;
++ UINT32 HTMCS5FBK:4;
++ UINT32 HTMCS4FBK:4;
++ UINT32 HTMCS3FBK:4;
++ UINT32 HTMCS2FBK:4;
++ UINT32 HTMCS1FBK:4;
++ UINT32 HTMCS0FBK:4;
++ } field;
++ UINT32 word;
++} HT_FBK_CFG0_STRUC, *PHT_FBK_CFG0_STRUC;
++#else
++typedef union PACKED _HT_FBK_CFG0_STRUC {
++ struct {
++ UINT32 HTMCS0FBK:4;
++ UINT32 HTMCS1FBK:4;
++ UINT32 HTMCS2FBK:4;
++ UINT32 HTMCS3FBK:4;
++ UINT32 HTMCS4FBK:4;
++ UINT32 HTMCS5FBK:4;
++ UINT32 HTMCS6FBK:4;
++ UINT32 HTMCS7FBK:4;
++ } field;
++ UINT32 word;
++} HT_FBK_CFG0_STRUC, *PHT_FBK_CFG0_STRUC;
++#endif
++#define HT_FBK_CFG1 0x1358
++#ifdef RT_BIG_ENDIAN
++typedef union _HT_FBK_CFG1_STRUC {
++ struct {
++ UINT32 HTMCS15FBK:4;
++ UINT32 HTMCS14FBK:4;
++ UINT32 HTMCS13FBK:4;
++ UINT32 HTMCS12FBK:4;
++ UINT32 HTMCS11FBK:4;
++ UINT32 HTMCS10FBK:4;
++ UINT32 HTMCS9FBK:4;
++ UINT32 HTMCS8FBK:4;
++ } field;
++ UINT32 word;
++} HT_FBK_CFG1_STRUC, *PHT_FBK_CFG1_STRUC;
++#else
++typedef union _HT_FBK_CFG1_STRUC {
++ struct {
++ UINT32 HTMCS8FBK:4;
++ UINT32 HTMCS9FBK:4;
++ UINT32 HTMCS10FBK:4;
++ UINT32 HTMCS11FBK:4;
++ UINT32 HTMCS12FBK:4;
++ UINT32 HTMCS13FBK:4;
++ UINT32 HTMCS14FBK:4;
++ UINT32 HTMCS15FBK:4;
++ } field;
++ UINT32 word;
++} HT_FBK_CFG1_STRUC, *PHT_FBK_CFG1_STRUC;
++#endif
++#define LG_FBK_CFG0 0x135c
++#ifdef RT_BIG_ENDIAN
++typedef union _LG_FBK_CFG0_STRUC {
++ struct {
++ UINT32 OFDMMCS7FBK:4; //initial value is 6
++ UINT32 OFDMMCS6FBK:4; //initial value is 5
++ UINT32 OFDMMCS5FBK:4; //initial value is 4
++ UINT32 OFDMMCS4FBK:4; //initial value is 3
++ UINT32 OFDMMCS3FBK:4; //initial value is 2
++ UINT32 OFDMMCS2FBK:4; //initial value is 1
++ UINT32 OFDMMCS1FBK:4; //initial value is 0
++ UINT32 OFDMMCS0FBK:4; //initial value is 0
++ } field;
++ UINT32 word;
++} LG_FBK_CFG0_STRUC, *PLG_FBK_CFG0_STRUC;
++#else
++typedef union _LG_FBK_CFG0_STRUC {
++ struct {
++ UINT32 OFDMMCS0FBK:4; //initial value is 0
++ UINT32 OFDMMCS1FBK:4; //initial value is 0
++ UINT32 OFDMMCS2FBK:4; //initial value is 1
++ UINT32 OFDMMCS3FBK:4; //initial value is 2
++ UINT32 OFDMMCS4FBK:4; //initial value is 3
++ UINT32 OFDMMCS5FBK:4; //initial value is 4
++ UINT32 OFDMMCS6FBK:4; //initial value is 5
++ UINT32 OFDMMCS7FBK:4; //initial value is 6
++ } field;
++ UINT32 word;
++} LG_FBK_CFG0_STRUC, *PLG_FBK_CFG0_STRUC;
++#endif
++#define LG_FBK_CFG1 0x1360
++#ifdef RT_BIG_ENDIAN
++typedef union _LG_FBK_CFG1_STRUC {
++ struct {
++ UINT32 rsv:16;
++ UINT32 CCKMCS3FBK:4; //initial value is 2
++ UINT32 CCKMCS2FBK:4; //initial value is 1
++ UINT32 CCKMCS1FBK:4; //initial value is 0
++ UINT32 CCKMCS0FBK:4; //initial value is 0
++ } field;
++ UINT32 word;
++} LG_FBK_CFG1_STRUC, *PLG_FBK_CFG1_STRUC;
++#else
++typedef union _LG_FBK_CFG1_STRUC {
++ struct {
++ UINT32 CCKMCS0FBK:4; //initial value is 0
++ UINT32 CCKMCS1FBK:4; //initial value is 0
++ UINT32 CCKMCS2FBK:4; //initial value is 1
++ UINT32 CCKMCS3FBK:4; //initial value is 2
++ UINT32 rsv:16;
++ } field;
++ UINT32 word;
++} LG_FBK_CFG1_STRUC, *PLG_FBK_CFG1_STRUC;
++#endif
++
++//=======================================================
++//================ Protection Paramater================================
++//=======================================================
++#define CCK_PROT_CFG 0x1364 //CCK Protection
++#define ASIC_SHORTNAV 1
++#define ASIC_LONGNAV 2
++#define ASIC_RTS 1
++#define ASIC_CTS 2
++#ifdef RT_BIG_ENDIAN
++typedef union _PROT_CFG_STRUC {
++ struct {
++ UINT32 rsv:5;
++ UINT32 RTSThEn:1; //RTS threshold enable on CCK TX
++ UINT32 TxopAllowGF40:1; //CCK TXOP allowance.0:disallow.
++ UINT32 TxopAllowGF20:1; //CCK TXOP allowance.0:disallow.
++ UINT32 TxopAllowMM40:1; //CCK TXOP allowance.0:disallow.
++ UINT32 TxopAllowMM20:1; //CCK TXOP allowance. 0:disallow.
++ UINT32 TxopAllowOfdm:1; //CCK TXOP allowance.0:disallow.
++ UINT32 TxopAllowCck:1; //CCK TXOP allowance.0:disallow.
++ UINT32 ProtectNav:2; //TXOP protection type for CCK TX. 0:None, 1:ShortNAVprotect, 2:LongNAVProtect, 3:rsv
++ UINT32 ProtectCtrl:2; //Protection control frame type for CCK TX. 1:RTS/CTS, 2:CTS-to-self, 0:None, 3:rsv
++ UINT32 ProtectRate:16; //Protection control frame rate for CCK TX(RTS/CTS/CFEnd).
++ } field;
++ UINT32 word;
++} PROT_CFG_STRUC, *PPROT_CFG_STRUC;
++#else
++typedef union _PROT_CFG_STRUC {
++ struct {
++ UINT32 ProtectRate:16; //Protection control frame rate for CCK TX(RTS/CTS/CFEnd).
++ UINT32 ProtectCtrl:2; //Protection control frame type for CCK TX. 1:RTS/CTS, 2:CTS-to-self, 0:None, 3:rsv
++ UINT32 ProtectNav:2; //TXOP protection type for CCK TX. 0:None, 1:ShortNAVprotect, 2:LongNAVProtect, 3:rsv
++ UINT32 TxopAllowCck:1; //CCK TXOP allowance.0:disallow.
++ UINT32 TxopAllowOfdm:1; //CCK TXOP allowance.0:disallow.
++ UINT32 TxopAllowMM20:1; //CCK TXOP allowance. 0:disallow.
++ UINT32 TxopAllowMM40:1; //CCK TXOP allowance.0:disallow.
++ UINT32 TxopAllowGF20:1; //CCK TXOP allowance.0:disallow.
++ UINT32 TxopAllowGF40:1; //CCK TXOP allowance.0:disallow.
++ UINT32 RTSThEn:1; //RTS threshold enable on CCK TX
++ UINT32 rsv:5;
++ } field;
++ UINT32 word;
++} PROT_CFG_STRUC, *PPROT_CFG_STRUC;
++#endif
++
++#define OFDM_PROT_CFG 0x1368 //OFDM Protection
++#define MM20_PROT_CFG 0x136C //MM20 Protection
++#define MM40_PROT_CFG 0x1370 //MM40 Protection
++#define GF20_PROT_CFG 0x1374 //GF20 Protection
++#define GF40_PROT_CFG 0x1378 //GR40 Protection
++#define EXP_CTS_TIME 0x137C //
++#define EXP_ACK_TIME 0x1380 //
++
++//
++// 4.4 MAC RX configuration registers (offset:0x1400)
++//
++#define RX_FILTR_CFG 0x1400 //TXRX_CSR0
++#define AUTO_RSP_CFG 0x1404 //TXRX_CSR4
++//
++// TXRX_CSR4: Auto-Responder/
++//
++#ifdef RT_BIG_ENDIAN
++typedef union _AUTO_RSP_CFG_STRUC {
++ struct {
++ UINT32 :24;
++ UINT32 AckCtsPsmBit:1; // Power bit value in conrtrol frame
++ UINT32 DualCTSEn:1; // Power bit value in conrtrol frame
++ UINT32 rsv:1; // Power bit value in conrtrol frame
++ UINT32 AutoResponderPreamble:1; // 0:long, 1:short preamble
++ UINT32 CTS40MRef:1; // Response CTS 40MHz duplicate mode
++ UINT32 CTS40MMode:1; // Response CTS 40MHz duplicate mode
++ UINT32 BACAckPolicyEnable:1; // 0:long, 1:short preamble
++ UINT32 AutoResponderEnable:1;
++ } field;
++ UINT32 word;
++} AUTO_RSP_CFG_STRUC, *PAUTO_RSP_CFG_STRUC;
++#else
++typedef union _AUTO_RSP_CFG_STRUC {
++ struct {
++ UINT32 AutoResponderEnable:1;
++ UINT32 BACAckPolicyEnable:1; // 0:long, 1:short preamble
++ UINT32 CTS40MMode:1; // Response CTS 40MHz duplicate mode
++ UINT32 CTS40MRef:1; // Response CTS 40MHz duplicate mode
++ UINT32 AutoResponderPreamble:1; // 0:long, 1:short preamble
++ UINT32 rsv:1; // Power bit value in conrtrol frame
++ UINT32 DualCTSEn:1; // Power bit value in conrtrol frame
++ UINT32 AckCtsPsmBit:1; // Power bit value in conrtrol frame
++ UINT32 :24;
++ } field;
++ UINT32 word;
++} AUTO_RSP_CFG_STRUC, *PAUTO_RSP_CFG_STRUC;
++#endif
++
++#define LEGACY_BASIC_RATE 0x1408 // TXRX_CSR5 0x3054
++#define HT_BASIC_RATE 0x140c
++#define HT_CTRL_CFG 0x1410
++#define SIFS_COST_CFG 0x1414
++#define RX_PARSER_CFG 0x1418 //Set NAV for all received frames
++
++//
++// 4.5 MAC Security configuration (offset:0x1500)
++//
++#define TX_SEC_CNT0 0x1500 //
++#define RX_SEC_CNT0 0x1504 //
++#define CCMP_FC_MUTE 0x1508 //
++//
++// 4.6 HCCA/PSMP (offset:0x1600)
++//
++#define TXOP_HLDR_ADDR0 0x1600
++#define TXOP_HLDR_ADDR1 0x1604
++#define TXOP_HLDR_ET 0x1608
++#define QOS_CFPOLL_RA_DW0 0x160c
++#define QOS_CFPOLL_A1_DW1 0x1610
++#define QOS_CFPOLL_QC 0x1614
++//
++// 4.7 MAC Statistis registers (offset:0x1700)
++//
++#define RX_STA_CNT0 0x1700 //
++#define RX_STA_CNT1 0x1704 //
++#define RX_STA_CNT2 0x1708 //
++
++//
++// RX_STA_CNT0_STRUC: RX PLCP error count & RX CRC error count
++//
++#ifdef RT_BIG_ENDIAN
++typedef union _RX_STA_CNT0_STRUC {
++ struct {
++ USHORT PhyErr;
++ USHORT CrcErr;
++ } field;
++ UINT32 word;
++} RX_STA_CNT0_STRUC, *PRX_STA_CNT0_STRUC;
++#else
++typedef union _RX_STA_CNT0_STRUC {
++ struct {
++ USHORT CrcErr;
++ USHORT PhyErr;
++ } field;
++ UINT32 word;
++} RX_STA_CNT0_STRUC, *PRX_STA_CNT0_STRUC;
++#endif
++
++//
++// RX_STA_CNT1_STRUC: RX False CCA count & RX LONG frame count
++//
++#ifdef RT_BIG_ENDIAN
++typedef union _RX_STA_CNT1_STRUC {
++ struct {
++ USHORT PlcpErr;
++ USHORT FalseCca;
++ } field;
++ UINT32 word;
++} RX_STA_CNT1_STRUC, *PRX_STA_CNT1_STRUC;
++#else
++typedef union _RX_STA_CNT1_STRUC {
++ struct {
++ USHORT FalseCca;
++ USHORT PlcpErr;
++ } field;
++ UINT32 word;
++} RX_STA_CNT1_STRUC, *PRX_STA_CNT1_STRUC;
++#endif
++
++//
++// RX_STA_CNT2_STRUC:
++//
++#ifdef RT_BIG_ENDIAN
++typedef union _RX_STA_CNT2_STRUC {
++ struct {
++ USHORT RxFifoOverflowCount;
++ USHORT RxDupliCount;
++ } field;
++ UINT32 word;
++} RX_STA_CNT2_STRUC, *PRX_STA_CNT2_STRUC;
++#else
++typedef union _RX_STA_CNT2_STRUC {
++ struct {
++ USHORT RxDupliCount;
++ USHORT RxFifoOverflowCount;
++ } field;
++ UINT32 word;
++} RX_STA_CNT2_STRUC, *PRX_STA_CNT2_STRUC;
++#endif
++#define TX_STA_CNT0 0x170C //
++//
++// STA_CSR3: TX Beacon count
++//
++#ifdef RT_BIG_ENDIAN
++typedef union _TX_STA_CNT0_STRUC {
++ struct {
++ USHORT TxBeaconCount;
++ USHORT TxFailCount;
++ } field;
++ UINT32 word;
++} TX_STA_CNT0_STRUC, *PTX_STA_CNT0_STRUC;
++#else
++typedef union _TX_STA_CNT0_STRUC {
++ struct {
++ USHORT TxFailCount;
++ USHORT TxBeaconCount;
++ } field;
++ UINT32 word;
++} TX_STA_CNT0_STRUC, *PTX_STA_CNT0_STRUC;
++#endif
++#define TX_STA_CNT1 0x1710 //
++//
++// TX_STA_CNT1: TX tx count
++//
++#ifdef RT_BIG_ENDIAN
++typedef union _TX_STA_CNT1_STRUC {
++ struct {
++ USHORT TxRetransmit;
++ USHORT TxSuccess;
++ } field;
++ UINT32 word;
++} TX_STA_CNT1_STRUC, *PTX_STA_CNT1_STRUC;
++#else
++typedef union _TX_STA_CNT1_STRUC {
++ struct {
++ USHORT TxSuccess;
++ USHORT TxRetransmit;
++ } field;
++ UINT32 word;
++} TX_STA_CNT1_STRUC, *PTX_STA_CNT1_STRUC;
++#endif
++#define TX_STA_CNT2 0x1714 //
++//
++// TX_STA_CNT2: TX tx count
++//
++#ifdef RT_BIG_ENDIAN
++typedef union _TX_STA_CNT2_STRUC {
++ struct {
++ USHORT TxUnderFlowCount;
++ USHORT TxZeroLenCount;
++ } field;
++ UINT32 word;
++} TX_STA_CNT2_STRUC, *PTX_STA_CNT2_STRUC;
++#else
++typedef union _TX_STA_CNT2_STRUC {
++ struct {
++ USHORT TxZeroLenCount;
++ USHORT TxUnderFlowCount;
++ } field;
++ UINT32 word;
++} TX_STA_CNT2_STRUC, *PTX_STA_CNT2_STRUC;
++#endif
++#define TX_STA_FIFO 0x1718 //
++//
++// TX_STA_FIFO_STRUC: TX Result for specific PID status fifo register
++//
++#ifdef RT_BIG_ENDIAN
++typedef union PACKED _TX_STA_FIFO_STRUC {
++ struct {
++ UINT32 Reserve:2;
++ UINT32 TxBF:1; // 3*3
++ UINT32 SuccessRate:13; //include MCS, mode ,shortGI, BW settingSame format as TXWI Word 0 Bit 31-16.
++// UINT32 SuccessRate:16; //include MCS, mode ,shortGI, BW settingSame format as TXWI Word 0 Bit 31-16.
++ UINT32 wcid:8; //wireless client index
++ UINT32 TxAckRequired:1; // ack required
++ UINT32 TxAggre:1; // Tx is aggregated
++ UINT32 TxSuccess:1; // Tx success. whether success or not
++ UINT32 PidType:4;
++ UINT32 bValid:1; // 1:This register contains a valid TX result
++ } field;
++ UINT32 word;
++} TX_STA_FIFO_STRUC, *PTX_STA_FIFO_STRUC;
++#else
++typedef union PACKED _TX_STA_FIFO_STRUC {
++ struct {
++ UINT32 bValid:1; // 1:This register contains a valid TX result
++ UINT32 PidType:4;
++ UINT32 TxSuccess:1; // Tx No retry success
++ UINT32 TxAggre:1; // Tx Retry Success
++ UINT32 TxAckRequired:1; // Tx fail
++ UINT32 wcid:8; //wireless client index
++// UINT32 SuccessRate:16; //include MCS, mode ,shortGI, BW settingSame format as TXWI Word 0 Bit 31-16.
++ UINT32 SuccessRate:13; //include MCS, mode ,shortGI, BW settingSame format as TXWI Word 0 Bit 31-16.
++ UINT32 TxBF:1;
++ UINT32 Reserve:2;
++ } field;
++ UINT32 word;
++} TX_STA_FIFO_STRUC, *PTX_STA_FIFO_STRUC;
++#endif
++// Debug counter
++#define TX_AGG_CNT 0x171c
++#ifdef RT_BIG_ENDIAN
++typedef union _TX_AGG_CNT_STRUC {
++ struct {
++ USHORT AggTxCount;
++ USHORT NonAggTxCount;
++ } field;
++ UINT32 word;
++} TX_AGG_CNT_STRUC, *PTX_AGG_CNT_STRUC;
++#else
++typedef union _TX_AGG_CNT_STRUC {
++ struct {
++ USHORT NonAggTxCount;
++ USHORT AggTxCount;
++ } field;
++ UINT32 word;
++} TX_AGG_CNT_STRUC, *PTX_AGG_CNT_STRUC;
++#endif
++// Debug counter
++#define TX_AGG_CNT0 0x1720
++#ifdef RT_BIG_ENDIAN
++typedef union _TX_AGG_CNT0_STRUC {
++ struct {
++ USHORT AggSize2Count;
++ USHORT AggSize1Count;
++ } field;
++ UINT32 word;
++} TX_AGG_CNT0_STRUC, *PTX_AGG_CNT0_STRUC;
++#else
++typedef union _TX_AGG_CNT0_STRUC {
++ struct {
++ USHORT AggSize1Count;
++ USHORT AggSize2Count;
++ } field;
++ UINT32 word;
++} TX_AGG_CNT0_STRUC, *PTX_AGG_CNT0_STRUC;
++#endif
++// Debug counter
++#define TX_AGG_CNT1 0x1724
++#ifdef RT_BIG_ENDIAN
++typedef union _TX_AGG_CNT1_STRUC {
++ struct {
++ USHORT AggSize4Count;
++ USHORT AggSize3Count;
++ } field;
++ UINT32 word;
++} TX_AGG_CNT1_STRUC, *PTX_AGG_CNT1_STRUC;
++#else
++typedef union _TX_AGG_CNT1_STRUC {
++ struct {
++ USHORT AggSize3Count;
++ USHORT AggSize4Count;
++ } field;
++ UINT32 word;
++} TX_AGG_CNT1_STRUC, *PTX_AGG_CNT1_STRUC;
++#endif
++#define TX_AGG_CNT2 0x1728
++#ifdef RT_BIG_ENDIAN
++typedef union _TX_AGG_CNT2_STRUC {
++ struct {
++ USHORT AggSize6Count;
++ USHORT AggSize5Count;
++ } field;
++ UINT32 word;
++} TX_AGG_CNT2_STRUC, *PTX_AGG_CNT2_STRUC;
++#else
++typedef union _TX_AGG_CNT2_STRUC {
++ struct {
++ USHORT AggSize5Count;
++ USHORT AggSize6Count;
++ } field;
++ UINT32 word;
++} TX_AGG_CNT2_STRUC, *PTX_AGG_CNT2_STRUC;
++#endif
++// Debug counter
++#define TX_AGG_CNT3 0x172c
++#ifdef RT_BIG_ENDIAN
++typedef union _TX_AGG_CNT3_STRUC {
++ struct {
++ USHORT AggSize8Count;
++ USHORT AggSize7Count;
++ } field;
++ UINT32 word;
++} TX_AGG_CNT3_STRUC, *PTX_AGG_CNT3_STRUC;
++#else
++typedef union _TX_AGG_CNT3_STRUC {
++ struct {
++ USHORT AggSize7Count;
++ USHORT AggSize8Count;
++ } field;
++ UINT32 word;
++} TX_AGG_CNT3_STRUC, *PTX_AGG_CNT3_STRUC;
++#endif
++// Debug counter
++#define TX_AGG_CNT4 0x1730
++#ifdef RT_BIG_ENDIAN
++typedef union _TX_AGG_CNT4_STRUC {
++ struct {
++ USHORT AggSize10Count;
++ USHORT AggSize9Count;
++ } field;
++ UINT32 word;
++} TX_AGG_CNT4_STRUC, *PTX_AGG_CNT4_STRUC;
++#else
++typedef union _TX_AGG_CNT4_STRUC {
++ struct {
++ USHORT AggSize9Count;
++ USHORT AggSize10Count;
++ } field;
++ UINT32 word;
++} TX_AGG_CNT4_STRUC, *PTX_AGG_CNT4_STRUC;
++#endif
++#define TX_AGG_CNT5 0x1734
++#ifdef RT_BIG_ENDIAN
++typedef union _TX_AGG_CNT5_STRUC {
++ struct {
++ USHORT AggSize12Count;
++ USHORT AggSize11Count;
++ } field;
++ UINT32 word;
++} TX_AGG_CNT5_STRUC, *PTX_AGG_CNT5_STRUC;
++#else
++typedef union _TX_AGG_CNT5_STRUC {
++ struct {
++ USHORT AggSize11Count;
++ USHORT AggSize12Count;
++ } field;
++ UINT32 word;
++} TX_AGG_CNT5_STRUC, *PTX_AGG_CNT5_STRUC;
++#endif
++#define TX_AGG_CNT6 0x1738
++#ifdef RT_BIG_ENDIAN
++typedef union _TX_AGG_CNT6_STRUC {
++ struct {
++ USHORT AggSize14Count;
++ USHORT AggSize13Count;
++ } field;
++ UINT32 word;
++} TX_AGG_CNT6_STRUC, *PTX_AGG_CNT6_STRUC;
++#else
++typedef union _TX_AGG_CNT6_STRUC {
++ struct {
++ USHORT AggSize13Count;
++ USHORT AggSize14Count;
++ } field;
++ UINT32 word;
++} TX_AGG_CNT6_STRUC, *PTX_AGG_CNT6_STRUC;
++#endif
++#define TX_AGG_CNT7 0x173c
++#ifdef RT_BIG_ENDIAN
++typedef union _TX_AGG_CNT7_STRUC {
++ struct {
++ USHORT AggSize16Count;
++ USHORT AggSize15Count;
++ } field;
++ UINT32 word;
++} TX_AGG_CNT7_STRUC, *PTX_AGG_CNT7_STRUC;
++#else
++typedef union _TX_AGG_CNT7_STRUC {
++ struct {
++ USHORT AggSize15Count;
++ USHORT AggSize16Count;
++ } field;
++ UINT32 word;
++} TX_AGG_CNT7_STRUC, *PTX_AGG_CNT7_STRUC;
++#endif
++#define MPDU_DENSITY_CNT 0x1740
++#ifdef RT_BIG_ENDIAN
++typedef union _MPDU_DEN_CNT_STRUC {
++ struct {
++ USHORT RXZeroDelCount; //RX zero length delimiter count
++ USHORT TXZeroDelCount; //TX zero length delimiter count
++ } field;
++ UINT32 word;
++} MPDU_DEN_CNT_STRUC, *PMPDU_DEN_CNT_STRUC;
++#else
++typedef union _MPDU_DEN_CNT_STRUC {
++ struct {
++ USHORT TXZeroDelCount; //TX zero length delimiter count
++ USHORT RXZeroDelCount; //RX zero length delimiter count
++ } field;
++ UINT32 word;
++} MPDU_DEN_CNT_STRUC, *PMPDU_DEN_CNT_STRUC;
++#endif
++//
++// TXRX control registers - base address 0x3000
++//
++// rt2860b UNKNOWN reg use R/O Reg Addr 0x77d0 first..
++#define TXRX_CSR1 0x77d0
++
++//
++// Security key table memory, base address = 0x1000
++//
++#define MAC_WCID_BASE 0x1800 //8-bytes(use only 6-bytes) * 256 entry =
++#define HW_WCID_ENTRY_SIZE 8
++#define PAIRWISE_KEY_TABLE_BASE 0x4000 // 32-byte * 256-entry = -byte
++#define HW_KEY_ENTRY_SIZE 0x20
++#define PAIRWISE_IVEIV_TABLE_BASE 0x6000 // 8-byte * 256-entry = -byte
++#define MAC_IVEIV_TABLE_BASE 0x6000 // 8-byte * 256-entry = -byte
++#define HW_IVEIV_ENTRY_SIZE 8
++#define MAC_WCID_ATTRIBUTE_BASE 0x6800 // 4-byte * 256-entry = -byte
++#define HW_WCID_ATTRI_SIZE 4
++#define WCID_RESERVED 0x6bfc
++#define SHARED_KEY_TABLE_BASE 0x6c00 // 32-byte * 16-entry = 512-byte
++#define SHARED_KEY_MODE_BASE 0x7000 // 32-byte * 16-entry = 512-byte
++#define HW_SHARED_KEY_MODE_SIZE 4
++#define SHAREDKEYTABLE 0
++#define PAIRWISEKEYTABLE 1
++
++
++#ifdef RT_BIG_ENDIAN
++typedef union _SHAREDKEY_MODE_STRUC {
++ struct {
++ UINT32 :1;
++ UINT32 Bss1Key3CipherAlg:3;
++ UINT32 :1;
++ UINT32 Bss1Key2CipherAlg:3;
++ UINT32 :1;
++ UINT32 Bss1Key1CipherAlg:3;
++ UINT32 :1;
++ UINT32 Bss1Key0CipherAlg:3;
++ UINT32 :1;
++ UINT32 Bss0Key3CipherAlg:3;
++ UINT32 :1;
++ UINT32 Bss0Key2CipherAlg:3;
++ UINT32 :1;
++ UINT32 Bss0Key1CipherAlg:3;
++ UINT32 :1;
++ UINT32 Bss0Key0CipherAlg:3;
++ } field;
++ UINT32 word;
++} SHAREDKEY_MODE_STRUC, *PSHAREDKEY_MODE_STRUC;
++#else
++typedef union _SHAREDKEY_MODE_STRUC {
++ struct {
++ UINT32 Bss0Key0CipherAlg:3;
++ UINT32 :1;
++ UINT32 Bss0Key1CipherAlg:3;
++ UINT32 :1;
++ UINT32 Bss0Key2CipherAlg:3;
++ UINT32 :1;
++ UINT32 Bss0Key3CipherAlg:3;
++ UINT32 :1;
++ UINT32 Bss1Key0CipherAlg:3;
++ UINT32 :1;
++ UINT32 Bss1Key1CipherAlg:3;
++ UINT32 :1;
++ UINT32 Bss1Key2CipherAlg:3;
++ UINT32 :1;
++ UINT32 Bss1Key3CipherAlg:3;
++ UINT32 :1;
++ } field;
++ UINT32 word;
++} SHAREDKEY_MODE_STRUC, *PSHAREDKEY_MODE_STRUC;
++#endif
++// 64-entry for pairwise key table
++typedef struct _HW_WCID_ENTRY { // 8-byte per entry
++ UCHAR Address[6];
++ UCHAR Rsv[2];
++} HW_WCID_ENTRY, PHW_WCID_ENTRY;
++
++
++
++//
++// Other on-chip shared memory space, base = 0x2000
++//
++
++// CIS space - base address = 0x2000
++#define HW_CIS_BASE 0x2000
++
++// Carrier-sense CTS frame base address. It's where mac stores carrier-sense frame for carrier-sense function.
++#define HW_CS_CTS_BASE 0x7700
++// DFS CTS frame base address. It's where mac stores CTS frame for DFS.
++#define HW_DFS_CTS_BASE 0x7780
++#define HW_CTS_FRAME_SIZE 0x80
++
++// 2004-11-08 john - since NULL frame won't be that long (256 byte). We steal 16 tail bytes
++// to save debugging settings
++#define HW_DEBUG_SETTING_BASE 0x77f0 // 0x77f0~0x77ff total 16 bytes
++#define HW_DEBUG_SETTING_BASE2 0x7770 // 0x77f0~0x77ff total 16 bytes
++
++#if 0
++// on-chip BEACON frame space - base address = 0x7800
++#define HW_BEACON_MAX_SIZE 0x0800 /* unit: byte */
++#define HW_BEACON_BASE0 0x7800
++#define HW_BEACON_BASE1 0x7900
++#define HW_BEACON_BASE2 0x7a00
++#define HW_BEACON_BASE3 0x7b00
++#define HW_BEACON_BASE4 0x7c00
++#define HW_BEACON_BASE5 0x7d00
++#define HW_BEACON_BASE6 0x7e00
++#define HW_BEACON_BASE7 0x7f00
++/* 1. HW_BEACON_OFFSET/64B must be 0;
++ 2. BCN_OFFSET0 must also be changed in NICInitializeAsic();
++ 3. max 0x0800 for 8 beacon frames; */
++#else
++// In order to support maximum 8 MBSS and its maximum length is 512 for each beacon
++// Three section discontinue memory segments will be used.
++// 1. The original region for BCN 0~3
++// 2. Extract memory from FCE table for BCN 4~5
++// 3. Extract memory from Pair-wise key table for BCN 6~7
++// It occupied those memory of wcid 238~253 for BCN 6
++// and wcid 222~237 for BCN 7
++#define HW_BEACON_MAX_SIZE 0x1000 /* unit: byte */
++#define HW_BEACON_BASE0 0x7800
++#define HW_BEACON_BASE1 0x7A00
++#define HW_BEACON_BASE2 0x7C00
++#define HW_BEACON_BASE3 0x7E00
++#define HW_BEACON_BASE4 0x7200
++#define HW_BEACON_BASE5 0x7400
++#define HW_BEACON_BASE6 0x5DC0
++#define HW_BEACON_BASE7 0x5BC0
++#endif
++
++#define HW_BEACON_MAX_COUNT 8
++#define HW_BEACON_OFFSET 0x0200
++#define HW_BEACON_CONTENT_LEN (HW_BEACON_OFFSET - TXWI_SIZE)
++
++// HOST-MCU shared memory - base address = 0x2100
++#define HOST_CMD_CSR 0x404
++#define H2M_MAILBOX_CSR 0x7010
++#define H2M_MAILBOX_CID 0x7014
++#define H2M_MAILBOX_STATUS 0x701c
++#define H2M_INT_SRC 0x7024
++#define H2M_BBP_AGENT 0x7028
++#define M2H_CMD_DONE_CSR 0x000c
++#define MCU_TXOP_ARRAY_BASE 0x000c // TODO: to be provided by Albert
++#define MCU_TXOP_ENTRY_SIZE 32 // TODO: to be provided by Albert
++#define MAX_NUM_OF_TXOP_ENTRY 16 // TODO: must be same with 8051 firmware
++#define MCU_MBOX_VERSION 0x01 // TODO: to be confirmed by Albert
++#define MCU_MBOX_VERSION_OFFSET 5 // TODO: to be provided by Albert
++
++//
++// Host DMA registers - base address 0x200 . TX0-3=EDCAQid0-3, TX4=HCCA, TX5=MGMT,
++//
++//
++// DMA RING DESCRIPTOR
++//
++#define E2PROM_CSR 0x0004
++#define IO_CNTL_CSR 0x77d0
++
++#ifdef RT2870
++// 8051 firmware image for usb - use last-half base address = 0x3000
++#define FIRMWARE_IMAGE_BASE 0x3000
++#define MAX_FIRMWARE_IMAGE_SIZE 0x1000 // 4kbyte
++#endif // RT2870 //
++
++// TODO: ????? old RT2560 registers. to keep them or remove them?
++//#define MCAST0 0x0178 // multicast filter register 0
++//#define MCAST1 0x017c // multicast filter register 1
++
++
++// ================================================================
++// Tx / Rx / Mgmt ring descriptor definition
++// ================================================================
++
++// the following PID values are used to mark outgoing frame type in TXD->PID so that
++// proper TX statistics can be collected based on these categories
++// b3-2 of PID field -
++#define PID_MGMT 0x05
++#define PID_BEACON 0x0c
++#define PID_DATA_NORMALUCAST 0x02
++#define PID_DATA_AMPDU 0x04
++#define PID_DATA_NO_ACK 0x08
++#define PID_DATA_NOT_NORM_ACK 0x03
++#if 0
++#define PTYPE_DATA_REQUIRE_ACK 0x00 // b7-6:00, b5-0: 0~59 is MAC table index (AID?), 60~63 is WDS index
++#define PTYPE_NULL_AT_HIGH_RATE 0x04 // b7-6:01, b5-0: 0~59 is MAC table index (AID?), 60~63 is WDS index
++#define PTYPE_RESERVED 0x08 // b7-6:10
++#define PTYPE_SPECIAL 0x0c // b7-6:11
++
++// when b3-2=11 (PTYPE_SPECIAL), b1-0 coube be ...
++#define PSUBTYPE_DATA_NO_ACK 0x00
++#define PSUBTYPE_MGMT 0x01
++#define PSUBTYPE_OTHER_CNTL 0x02
++#define PSUBTYPE_RTS 0x03
++#endif
++// value domain of pTxD->HostQId (4-bit: 0~15)
++#define QID_AC_BK 1 // meet ACI definition in 802.11e
++#define QID_AC_BE 0 // meet ACI definition in 802.11e
++#define QID_AC_VI 2
++#define QID_AC_VO 3
++#define QID_HCCA 4
++#define NUM_OF_TX_RING 5
++#define QID_MGMT 13
++#define QID_RX 14
++#define QID_OTHER 15
++
++
++// ------------------------------------------------------
++// BBP & RF definition
++// ------------------------------------------------------
++#define BUSY 1
++#define IDLE 0
++
++#define RF_R00 0
++#define RF_R01 1
++#define RF_R02 2
++#define RF_R03 3
++#define RF_R04 4
++#define RF_R05 5
++#define RF_R06 6
++#define RF_R07 7
++#define RF_R08 8
++#define RF_R09 9
++#define RF_R10 10
++#define RF_R11 11
++#define RF_R12 12
++#define RF_R13 13
++#define RF_R14 14
++#define RF_R15 15
++#define RF_R16 16
++#define RF_R17 17
++#define RF_R18 18
++#define RF_R19 19
++#define RF_R20 20
++#define RF_R21 21
++#define RF_R22 22
++#define RF_R23 23
++#define RF_R24 24
++#define RF_R25 25
++#define RF_R26 26
++#define RF_R27 27
++#define RF_R28 28
++#define RF_R29 29
++#define RF_R30 30
++#define RF_R31 31
++
++#define BBP_R0 0 // version
++#define BBP_R1 1 // TSSI
++#define BBP_R2 2 // TX configure
++#define BBP_R3 3
++#define BBP_R4 4
++#define BBP_R5 5
++#define BBP_R6 6
++#define BBP_R14 14 // RX configure
++#define BBP_R16 16
++#define BBP_R17 17 // RX sensibility
++#define BBP_R18 18
++#define BBP_R21 21
++#define BBP_R22 22
++#define BBP_R24 24
++#define BBP_R25 25
++#define BBP_R49 49 //TSSI
++#define BBP_R50 50
++#define BBP_R51 51
++#define BBP_R52 52
++#define BBP_R55 55
++#define BBP_R62 62 // Rx SQ0 Threshold HIGH
++#define BBP_R63 63
++#define BBP_R64 64
++#define BBP_R65 65
++#define BBP_R66 66
++#define BBP_R67 67
++#define BBP_R68 68
++#define BBP_R69 69
++#define BBP_R70 70 // Rx AGC SQ CCK Xcorr threshold
++#define BBP_R73 73
++#define BBP_R75 75
++#define BBP_R77 77
++#define BBP_R81 81
++#define BBP_R82 82
++#define BBP_R83 83
++#define BBP_R84 84
++#define BBP_R86 86
++#define BBP_R91 91
++#define BBP_R92 92
++#define BBP_R94 94 // Tx Gain Control
++#define BBP_R103 103
++#define BBP_R105 105
++#define BBP_R113 113
++#define BBP_R114 114
++#define BBP_R115 115
++#define BBP_R116 116
++#define BBP_R117 117
++#define BBP_R118 118
++#define BBP_R119 119
++#define BBP_R120 120
++#define BBP_R121 121
++#define BBP_R122 122
++#define BBP_R123 123
++
++
++#define BBPR94_DEFAULT 0x06 // Add 1 value will gain 1db
++
++//#define PHY_TR_SWITCH_TIME 5 // usec
++
++//#define BBP_R17_LOW_SENSIBILITY 0x50
++//#define BBP_R17_MID_SENSIBILITY 0x41
++//#define BBP_R17_DYNAMIC_UP_BOUND 0x40
++#define RSSI_FOR_VERY_LOW_SENSIBILITY -35
++#define RSSI_FOR_LOW_SENSIBILITY -58
++#define RSSI_FOR_MID_LOW_SENSIBILITY -80
++#define RSSI_FOR_MID_SENSIBILITY -90
++
++//-------------------------------------------------------------------------
++// EEPROM definition
++//-------------------------------------------------------------------------
++#define EEDO 0x08
++#define EEDI 0x04
++#define EECS 0x02
++#define EESK 0x01
++#define EERL 0x80
++
++#define EEPROM_WRITE_OPCODE 0x05
++#define EEPROM_READ_OPCODE 0x06
++#define EEPROM_EWDS_OPCODE 0x10
++#define EEPROM_EWEN_OPCODE 0x13
++
++#define NUM_EEPROM_BBP_PARMS 19 // Include NIC Config 0, 1, CR, TX ALC step, BBPs
++#define NUM_EEPROM_TX_G_PARMS 7
++#define EEPROM_NIC1_OFFSET 0x34 // The address is from NIC config 0, not BBP register ID
++#define EEPROM_NIC2_OFFSET 0x36 // The address is from NIC config 0, not BBP register ID
++#define EEPROM_BBP_BASE_OFFSET 0xf0 // The address is from NIC config 0, not BBP register ID
++#define EEPROM_G_TX_PWR_OFFSET 0x52
++#define EEPROM_G_TX2_PWR_OFFSET 0x60
++#define EEPROM_LED1_OFFSET 0x3c
++#define EEPROM_LED2_OFFSET 0x3e
++#define EEPROM_LED3_OFFSET 0x40
++#define EEPROM_LNA_OFFSET 0x44
++#define EEPROM_RSSI_BG_OFFSET 0x46
++#define EEPROM_RSSI_A_OFFSET 0x4a
++#define EEPROM_DEFINE_MAX_TXPWR 0x4e
++#define EEPROM_TXPOWER_BYRATE_20MHZ_2_4G 0xde // 20MHZ 2.4G tx power.
++#define EEPROM_TXPOWER_BYRATE_40MHZ_2_4G 0xee // 40MHZ 2.4G tx power.
++#define EEPROM_TXPOWER_BYRATE_20MHZ_5G 0xfa // 20MHZ 5G tx power.
++#define EEPROM_TXPOWER_BYRATE_40MHZ_5G 0x10a // 40MHZ 5G tx power.
++#define EEPROM_A_TX_PWR_OFFSET 0x78
++#define EEPROM_A_TX2_PWR_OFFSET 0xa6
++//#define EEPROM_Japan_TX_PWR_OFFSET 0x90 // 802.11j
++//#define EEPROM_Japan_TX2_PWR_OFFSET 0xbe
++//#define EEPROM_TSSI_REF_OFFSET 0x54
++//#define EEPROM_TSSI_DELTA_OFFSET 0x24
++//#define EEPROM_CCK_TX_PWR_OFFSET 0x62
++//#define EEPROM_CALIBRATE_OFFSET 0x7c
++#define EEPROM_VERSION_OFFSET 0x02
++#define EEPROM_FREQ_OFFSET 0x3a
++#define EEPROM_TXPOWER_BYRATE 0xde // 20MHZ power.
++#define EEPROM_TXPOWER_DELTA 0x50 // 20MHZ AND 40 MHZ use different power. This is delta in 40MHZ.
++#define VALID_EEPROM_VERSION 1
++
++// PairKeyMode definition
++#define PKMODE_NONE 0
++#define PKMODE_WEP64 1
++#define PKMODE_WEP128 2
++#define PKMODE_TKIP 3
++#define PKMODE_AES 4
++#define PKMODE_CKIP64 5
++#define PKMODE_CKIP128 6
++#define PKMODE_TKIP_NO_MIC 7 // MIC appended by driver: not a valid value in hardware key table
++
++// =================================================================================
++// WCID format
++// =================================================================================
++//7.1 WCID ENTRY format : 8bytes
++typedef struct _WCID_ENTRY_STRUC {
++ UCHAR RXBABitmap7; // bit0 for TID8, bit7 for TID 15
++ UCHAR RXBABitmap0; // bit0 for TID0, bit7 for TID 7
++ UCHAR MAC[6]; // 0 for shared key table. 1 for pairwise key table
++} WCID_ENTRY_STRUC, *PWCID_ENTRY_STRUC;
++
++//8.1.1 SECURITY KEY format : 8DW
++// 32-byte per entry, total 16-entry for shared key table, 64-entry for pairwise key table
++typedef struct _HW_KEY_ENTRY { // 32-byte per entry
++ UCHAR Key[16];
++ UCHAR TxMic[8];
++ UCHAR RxMic[8];
++} HW_KEY_ENTRY, *PHW_KEY_ENTRY;
++
++//8.1.2 IV/EIV format : 2DW
++
++//8.1.3 RX attribute entry format : 1DW
++#ifdef RT_BIG_ENDIAN
++typedef struct _MAC_ATTRIBUTE_STRUC {
++ UINT32 rsv:22;
++ UINT32 RXWIUDF:3;
++ UINT32 BSSIDIdx:3; //multipleBSS index for the WCID
++ UINT32 PairKeyMode:3;
++ UINT32 KeyTab:1; // 0 for shared key table. 1 for pairwise key table
++} MAC_ATTRIBUTE_STRUC, *PMAC_ATTRIBUTE_STRUC;
++#else
++typedef struct _MAC_ATTRIBUTE_STRUC {
++ UINT32 KeyTab:1; // 0 for shared key table. 1 for pairwise key table
++ UINT32 PairKeyMode:3;
++ UINT32 BSSIDIdx:3; //multipleBSS index for the WCID
++ UINT32 RXWIUDF:3;
++ UINT32 rsv:22;
++} MAC_ATTRIBUTE_STRUC, *PMAC_ATTRIBUTE_STRUC;
++#endif
++
++
++// =================================================================================
++// TX / RX ring descriptor format
++// =================================================================================
++
++// the first 24-byte in TXD is called TXINFO and will be DMAed to MAC block through TXFIFO.
++// MAC block use this TXINFO to control the transmission behavior of this frame.
++#define FIFO_MGMT 0
++#define FIFO_HCCA 1
++#define FIFO_EDCA 2
++
++//
++// TX descriptor format, Tx ring, Mgmt Ring
++//
++#ifdef RT_BIG_ENDIAN
++typedef struct PACKED _TXD_STRUC {
++ // Word 0
++ UINT32 SDPtr0;
++ // Word 1
++ UINT32 DMADONE:1;
++ UINT32 LastSec0:1;
++ UINT32 SDLen0:14;
++ UINT32 Burst:1;
++ UINT32 LastSec1:1;
++ UINT32 SDLen1:14;
++ // Word 2
++ UINT32 SDPtr1;
++ // Word 3
++ UINT32 ICO:1;
++ UINT32 UCO:1;
++ UINT32 TCO:1;
++ UINT32 rsv:2;
++ UINT32 QSEL:2; // select on-chip FIFO ID for 2nd-stage output scheduler.0:MGMT, 1:HCCA 2:EDCA
++ UINT32 WIV:1; // Wireless Info Valid. 1 if Driver already fill WI, o if DMA needs to copy WI to correctposition
++ UINT32 rsv2:24;
++} TXD_STRUC, *PTXD_STRUC;
++#else
++typedef struct PACKED _TXD_STRUC {
++ // Word 0
++ UINT32 SDPtr0;
++ // Word 1
++ UINT32 SDLen1:14;
++ UINT32 LastSec1:1;
++ UINT32 Burst:1;
++ UINT32 SDLen0:14;
++ UINT32 LastSec0:1;
++ UINT32 DMADONE:1;
++ //Word2
++ UINT32 SDPtr1;
++ //Word3
++ UINT32 rsv2:24;
++ UINT32 WIV:1; // Wireless Info Valid. 1 if Driver already fill WI, o if DMA needs to copy WI to correctposition
++ UINT32 QSEL:2; // select on-chip FIFO ID for 2nd-stage output scheduler.0:MGMT, 1:HCCA 2:EDCA
++ UINT32 rsv:2;
++ UINT32 TCO:1; //
++ UINT32 UCO:1; //
++ UINT32 ICO:1; //
++} TXD_STRUC, *PTXD_STRUC;
++#endif
++
++
++//
++// TXD Wireless Information format for Tx ring and Mgmt Ring
++//
++//txop : for txop mode
++// 0:txop for the MPDU frame will be handles by ASIC by register
++// 1/2/3:the MPDU frame is send after PIFS/backoff/SIFS
++#ifdef RT_BIG_ENDIAN
++typedef struct PACKED _TXWI_STRUC {
++ // Word 0
++ UINT32 PHYMODE:2;
++ UINT32 TxBF:1; // 3*3
++ UINT32 rsv2:1;
++// UINT32 rsv2:2;
++ UINT32 Ifs:1; //
++ UINT32 STBC:2; //channel bandwidth 20MHz or 40 MHz
++ UINT32 ShortGI:1;
++ UINT32 BW:1; //channel bandwidth 20MHz or 40 MHz
++ UINT32 MCS:7;
++
++ UINT32 rsv:6;
++ UINT32 txop:2; //tx back off mode 0:HT TXOP rule , 1:PIFS TX ,2:Backoff, 3:sifs only when previous frame exchange is successful.
++ UINT32 MpduDensity:3;
++ UINT32 AMPDU:1;
++
++ UINT32 TS:1;
++ UINT32 CFACK:1;
++ UINT32 MIMOps:1; // the remote peer is in dynamic MIMO-PS mode
++ UINT32 FRAG:1; // 1 to inform TKIP engine this is a fragment.
++ // Word 1
++ UINT32 PacketId:4;
++ UINT32 MPDUtotalByteCount:12;
++ UINT32 WirelessCliID:8;
++ UINT32 BAWinSize:6;
++ UINT32 NSEQ:1;
++ UINT32 ACK:1;
++ // Word 2
++ UINT32 IV;
++ // Word 3
++ UINT32 EIV;
++} TXWI_STRUC, *PTXWI_STRUC;
++#else
++typedef struct PACKED _TXWI_STRUC {
++ // Word 0
++ UINT32 FRAG:1; // 1 to inform TKIP engine this is a fragment.
++ UINT32 MIMOps:1; // the remote peer is in dynamic MIMO-PS mode
++ UINT32 CFACK:1;
++ UINT32 TS:1;
++
++ UINT32 AMPDU:1;
++ UINT32 MpduDensity:3;
++ UINT32 txop:2; //FOR "THIS" frame. 0:HT TXOP rule , 1:PIFS TX ,2:Backoff, 3:sifs only when previous frame exchange is successful.
++ UINT32 rsv:6;
++
++ UINT32 MCS:7;
++ UINT32 BW:1; //channel bandwidth 20MHz or 40 MHz
++ UINT32 ShortGI:1;
++ UINT32 STBC:2; // 1: STBC support MCS =0-7, 2,3 : RESERVE
++ UINT32 Ifs:1; //
++// UINT32 rsv2:2; //channel bandwidth 20MHz or 40 MHz
++ UINT32 rsv2:1;
++ UINT32 TxBF:1; // 3*3
++ UINT32 PHYMODE:2;
++ // Word 1
++ UINT32 ACK:1;
++ UINT32 NSEQ:1;
++ UINT32 BAWinSize:6;
++ UINT32 WirelessCliID:8;
++ UINT32 MPDUtotalByteCount:12;
++ UINT32 PacketId:4;
++ //Word2
++ UINT32 IV;
++ //Word3
++ UINT32 EIV;
++} TXWI_STRUC, *PTXWI_STRUC;
++#endif
++//
++// Rx descriptor format, Rx Ring
++//
++//
++// RXWI wireless information format, in PBF. invisible in driver.
++//
++#ifdef RT_BIG_ENDIAN
++typedef struct PACKED _RXWI_STRUC {
++ // Word 0
++ UINT32 TID:4;
++ UINT32 MPDUtotalByteCount:12;
++ UINT32 UDF:3;
++ UINT32 BSSID:3;
++ UINT32 KeyIndex:2;
++ UINT32 WirelessCliID:8;
++ // Word 1
++ UINT32 PHYMODE:2; // 1: this RX frame is unicast to me
++ UINT32 rsv:3;
++ UINT32 STBC:2;
++ UINT32 ShortGI:1;
++ UINT32 BW:1;
++ UINT32 MCS:7;
++ UINT32 SEQUENCE:12;
++ UINT32 FRAG:4;
++ // Word 2
++ UINT32 rsv1:8;
++ UINT32 RSSI2:8;
++ UINT32 RSSI1:8;
++ UINT32 RSSI0:8;
++ // Word 3
++ UINT32 rsv2:16;
++ UINT32 SNR1:8;
++ UINT32 SNR0:8;
++} RXWI_STRUC, *PRXWI_STRUC;
++#else
++typedef struct PACKED _RXWI_STRUC {
++ // Word 0
++ UINT32 WirelessCliID:8;
++ UINT32 KeyIndex:2;
++ UINT32 BSSID:3;
++ UINT32 UDF:3;
++ UINT32 MPDUtotalByteCount:12;
++ UINT32 TID:4;
++ // Word 1
++ UINT32 FRAG:4;
++ UINT32 SEQUENCE:12;
++ UINT32 MCS:7;
++ UINT32 BW:1;
++ UINT32 ShortGI:1;
++ UINT32 STBC:2;
++ UINT32 rsv:3;
++ UINT32 PHYMODE:2; // 1: this RX frame is unicast to me
++ //Word2
++ UINT32 RSSI0:8;
++ UINT32 RSSI1:8;
++ UINT32 RSSI2:8;
++ UINT32 rsv1:8;
++ //Word3
++ UINT32 SNR0:8;
++ UINT32 SNR1:8;
++ UINT32 rsv2:16;
++} RXWI_STRUC, *PRXWI_STRUC;
++#endif
++
++
++// =================================================================================
++// HOST-MCU communication data structure
++// =================================================================================
++
++//
++// H2M_MAILBOX_CSR: Host-to-MCU Mailbox
++//
++#ifdef RT_BIG_ENDIAN
++typedef union _H2M_MAILBOX_STRUC {
++ struct {
++ UINT32 Owner:8;
++ UINT32 CmdToken:8; // 0xff tells MCU not to report CmdDoneInt after excuting the command
++ UINT32 HighByte:8;
++ UINT32 LowByte:8;
++ } field;
++ UINT32 word;
++} H2M_MAILBOX_STRUC, *PH2M_MAILBOX_STRUC;
++#else
++typedef union _H2M_MAILBOX_STRUC {
++ struct {
++ UINT32 LowByte:8;
++ UINT32 HighByte:8;
++ UINT32 CmdToken:8;
++ UINT32 Owner:8;
++ } field;
++ UINT32 word;
++} H2M_MAILBOX_STRUC, *PH2M_MAILBOX_STRUC;
++#endif
++
++//
++// M2H_CMD_DONE_CSR: MCU-to-Host command complete indication
++//
++#ifdef RT_BIG_ENDIAN
++typedef union _M2H_CMD_DONE_STRUC {
++ struct {
++ UINT32 CmdToken3;
++ UINT32 CmdToken2;
++ UINT32 CmdToken1;
++ UINT32 CmdToken0;
++ } field;
++ UINT32 word;
++} M2H_CMD_DONE_STRUC, *PM2H_CMD_DONE_STRUC;
++#else
++typedef union _M2H_CMD_DONE_STRUC {
++ struct {
++ UINT32 CmdToken0;
++ UINT32 CmdToken1;
++ UINT32 CmdToken2;
++ UINT32 CmdToken3;
++ } field;
++ UINT32 word;
++} M2H_CMD_DONE_STRUC, *PM2H_CMD_DONE_STRUC;
++#endif
++
++
++
++//
++// MCU_LEDCS: MCU LED Control Setting.
++//
++#ifdef RT_BIG_ENDIAN
++typedef union _MCU_LEDCS_STRUC {
++ struct {
++ UCHAR Polarity:1;
++ UCHAR LedMode:7;
++ } field;
++ UCHAR word;
++} MCU_LEDCS_STRUC, *PMCU_LEDCS_STRUC;
++#else
++typedef union _MCU_LEDCS_STRUC {
++ struct {
++ UCHAR LedMode:7;
++ UCHAR Polarity:1;
++ } field;
++ UCHAR word;
++} MCU_LEDCS_STRUC, *PMCU_LEDCS_STRUC;
++#endif
++// =================================================================================
++// Register format
++// =================================================================================
++
++
++
++//NAV_TIME_CFG :NAV
++#ifdef RT_BIG_ENDIAN
++typedef union _NAV_TIME_CFG_STRUC {
++ struct {
++ USHORT rsv:6;
++ USHORT ZeroSifs:1; // Applied zero SIFS timer after OFDM RX 0: disable
++ USHORT Eifs:9; // in unit of 1-us
++ UCHAR SlotTime; // in unit of 1-us
++ UCHAR Sifs; // in unit of 1-us
++ } field;
++ UINT32 word;
++} NAV_TIME_CFG_STRUC, *PNAV_TIME_CFG_STRUC;
++#else
++typedef union _NAV_TIME_CFG_STRUC {
++ struct {
++ UCHAR Sifs; // in unit of 1-us
++ UCHAR SlotTime; // in unit of 1-us
++ USHORT Eifs:9; // in unit of 1-us
++ USHORT ZeroSifs:1; // Applied zero SIFS timer after OFDM RX 0: disable
++ USHORT rsv:6;
++ } field;
++ UINT32 word;
++} NAV_TIME_CFG_STRUC, *PNAV_TIME_CFG_STRUC;
++#endif
++
++
++
++
++
++//
++// RX_FILTR_CFG: /RX configuration register
++//
++#ifdef RT_BIG_ENDIAN
++typedef union RX_FILTR_CFG_STRUC {
++ struct {
++ UINT32 :15;
++ UINT32 DropRsvCntlType:1;
++
++ UINT32 DropBAR:1; //
++ UINT32 DropBA:1; //
++ UINT32 DropPsPoll:1; // Drop Ps-Poll
++ UINT32 DropRts:1; // Drop Ps-Poll
++
++ UINT32 DropCts:1; // Drop Ps-Poll
++ UINT32 DropAck:1; // Drop Ps-Poll
++ UINT32 DropCFEnd:1; // Drop Ps-Poll
++ UINT32 DropCFEndAck:1; // Drop Ps-Poll
++
++ UINT32 DropDuplicate:1; // Drop duplicate frame
++ UINT32 DropBcast:1; // Drop broadcast frames
++ UINT32 DropMcast:1; // Drop multicast frames
++ UINT32 DropVerErr:1; // Drop version error frame
++
++ UINT32 DropNotMyBSSID:1; // Drop fram ToDs bit is true
++ UINT32 DropNotToMe:1; // Drop not to me unicast frame
++ UINT32 DropPhyErr:1; // Drop physical error
++ UINT32 DropCRCErr:1; // Drop CRC error
++ } field;
++ UINT32 word;
++} RX_FILTR_CFG_STRUC, *PRX_FILTR_CFG_STRUC;
++#else
++typedef union _RX_FILTR_CFG_STRUC {
++ struct {
++ UINT32 DropCRCErr:1; // Drop CRC error
++ UINT32 DropPhyErr:1; // Drop physical error
++ UINT32 DropNotToMe:1; // Drop not to me unicast frame
++ UINT32 DropNotMyBSSID:1; // Drop fram ToDs bit is true
++
++ UINT32 DropVerErr:1; // Drop version error frame
++ UINT32 DropMcast:1; // Drop multicast frames
++ UINT32 DropBcast:1; // Drop broadcast frames
++ UINT32 DropDuplicate:1; // Drop duplicate frame
++
++ UINT32 DropCFEndAck:1; // Drop Ps-Poll
++ UINT32 DropCFEnd:1; // Drop Ps-Poll
++ UINT32 DropAck:1; // Drop Ps-Poll
++ UINT32 DropCts:1; // Drop Ps-Poll
++
++ UINT32 DropRts:1; // Drop Ps-Poll
++ UINT32 DropPsPoll:1; // Drop Ps-Poll
++ UINT32 DropBA:1; //
++ UINT32 DropBAR:1; //
++
++ UINT32 DropRsvCntlType:1;
++ UINT32 :15;
++ } field;
++ UINT32 word;
++} RX_FILTR_CFG_STRUC, *PRX_FILTR_CFG_STRUC;
++#endif
++
++
++
++
++//
++// PHY_CSR4: RF serial control register
++//
++#ifdef RT_BIG_ENDIAN
++typedef union _PHY_CSR4_STRUC {
++ struct {
++ UINT32 Busy:1; // 1: ASIC is busy execute RF programming.
++ UINT32 PLL_LD:1; // RF PLL_LD status
++ UINT32 IFSelect:1; // 1: select IF to program, 0: select RF to program
++ UINT32 NumberOfBits:5; // Number of bits used in RFRegValue (I:20, RFMD:22)
++ UINT32 RFRegValue:24; // Register value (include register id) serial out to RF/IF chip.
++ } field;
++ UINT32 word;
++} PHY_CSR4_STRUC, *PPHY_CSR4_STRUC;
++#else
++typedef union _PHY_CSR4_STRUC {
++ struct {
++ UINT32 RFRegValue:24; // Register value (include register id) serial out to RF/IF chip.
++ UINT32 NumberOfBits:5; // Number of bits used in RFRegValue (I:20, RFMD:22)
++ UINT32 IFSelect:1; // 1: select IF to program, 0: select RF to program
++ UINT32 PLL_LD:1; // RF PLL_LD status
++ UINT32 Busy:1; // 1: ASIC is busy execute RF programming.
++ } field;
++ UINT32 word;
++} PHY_CSR4_STRUC, *PPHY_CSR4_STRUC;
++#endif
++
++
++//
++// SEC_CSR5: shared key table security mode register
++//
++#ifdef RT_BIG_ENDIAN
++typedef union _SEC_CSR5_STRUC {
++ struct {
++ UINT32 :1;
++ UINT32 Bss3Key3CipherAlg:3;
++ UINT32 :1;
++ UINT32 Bss3Key2CipherAlg:3;
++ UINT32 :1;
++ UINT32 Bss3Key1CipherAlg:3;
++ UINT32 :1;
++ UINT32 Bss3Key0CipherAlg:3;
++ UINT32 :1;
++ UINT32 Bss2Key3CipherAlg:3;
++ UINT32 :1;
++ UINT32 Bss2Key2CipherAlg:3;
++ UINT32 :1;
++ UINT32 Bss2Key1CipherAlg:3;
++ UINT32 :1;
++ UINT32 Bss2Key0CipherAlg:3;
++ } field;
++ UINT32 word;
++} SEC_CSR5_STRUC, *PSEC_CSR5_STRUC;
++#else
++typedef union _SEC_CSR5_STRUC {
++ struct {
++ UINT32 Bss2Key0CipherAlg:3;
++ UINT32 :1;
++ UINT32 Bss2Key1CipherAlg:3;
++ UINT32 :1;
++ UINT32 Bss2Key2CipherAlg:3;
++ UINT32 :1;
++ UINT32 Bss2Key3CipherAlg:3;
++ UINT32 :1;
++ UINT32 Bss3Key0CipherAlg:3;
++ UINT32 :1;
++ UINT32 Bss3Key1CipherAlg:3;
++ UINT32 :1;
++ UINT32 Bss3Key2CipherAlg:3;
++ UINT32 :1;
++ UINT32 Bss3Key3CipherAlg:3;
++ UINT32 :1;
++ } field;
++ UINT32 word;
++} SEC_CSR5_STRUC, *PSEC_CSR5_STRUC;
++#endif
++
++
++//
++// HOST_CMD_CSR: For HOST to interrupt embedded processor
++//
++#ifdef RT_BIG_ENDIAN
++typedef union _HOST_CMD_CSR_STRUC {
++ struct {
++ UINT32 Rsv:24;
++ UINT32 HostCommand:8;
++ } field;
++ UINT32 word;
++} HOST_CMD_CSR_STRUC, *PHOST_CMD_CSR_STRUC;
++#else
++typedef union _HOST_CMD_CSR_STRUC {
++ struct {
++ UINT32 HostCommand:8;
++ UINT32 Rsv:24;
++ } field;
++ UINT32 word;
++} HOST_CMD_CSR_STRUC, *PHOST_CMD_CSR_STRUC;
++#endif
++
++
++//
++// AIFSN_CSR: AIFSN for each EDCA AC
++//
++
++
++
++//
++// E2PROM_CSR: EEPROM control register
++//
++#ifdef RT_BIG_ENDIAN
++typedef union _E2PROM_CSR_STRUC {
++ struct {
++ UINT32 Rsvd:25;
++ UINT32 LoadStatus:1; // 1:loading, 0:done
++ UINT32 Type:1; // 1: 93C46, 0:93C66
++ UINT32 EepromDO:1;
++ UINT32 EepromDI:1;
++ UINT32 EepromCS:1;
++ UINT32 EepromSK:1;
++ UINT32 Reload:1; // Reload EEPROM content, write one to reload, self-cleared.
++ } field;
++ UINT32 word;
++} E2PROM_CSR_STRUC, *PE2PROM_CSR_STRUC;
++#else
++typedef union _E2PROM_CSR_STRUC {
++ struct {
++ UINT32 Reload:1; // Reload EEPROM content, write one to reload, self-cleared.
++ UINT32 EepromSK:1;
++ UINT32 EepromCS:1;
++ UINT32 EepromDI:1;
++ UINT32 EepromDO:1;
++ UINT32 Type:1; // 1: 93C46, 0:93C66
++ UINT32 LoadStatus:1; // 1:loading, 0:done
++ UINT32 Rsvd:25;
++ } field;
++ UINT32 word;
++} E2PROM_CSR_STRUC, *PE2PROM_CSR_STRUC;
++#endif
++
++
++// -------------------------------------------------------------------
++// E2PROM data layout
++// -------------------------------------------------------------------
++
++//
++// EEPROM antenna select format
++//
++#ifdef RT_BIG_ENDIAN
++typedef union _EEPROM_ANTENNA_STRUC {
++ struct {
++ USHORT Rsv:4;
++ USHORT RfIcType:4; // see E2PROM document
++ USHORT TxPath:4; // 1: 1T, 2: 2T
++ USHORT RxPath:4; // 1: 1R, 2: 2R, 3: 3R
++ } field;
++ USHORT word;
++} EEPROM_ANTENNA_STRUC, *PEEPROM_ANTENNA_STRUC;
++#else
++typedef union _EEPROM_ANTENNA_STRUC {
++ struct {
++ USHORT RxPath:4; // 1: 1R, 2: 2R, 3: 3R
++ USHORT TxPath:4; // 1: 1T, 2: 2T
++ USHORT RfIcType:4; // see E2PROM document
++ USHORT Rsv:4;
++ } field;
++ USHORT word;
++} EEPROM_ANTENNA_STRUC, *PEEPROM_ANTENNA_STRUC;
++#endif
++
++#ifdef RT_BIG_ENDIAN
++typedef union _EEPROM_NIC_CINFIG2_STRUC {
++ struct {
++ USHORT Rsv2:6; // must be 0
++ USHORT BW40MAvailForA:1; // 0:enable, 1:disable
++ USHORT BW40MAvailForG:1; // 0:enable, 1:disable
++ USHORT EnableWPSPBC:1; // WPS PBC Control bit
++ USHORT BW40MSidebandForA:1;
++ USHORT BW40MSidebandForG:1;
++ USHORT CardbusAcceleration:1; // !!! NOTE: 0 - enable, 1 - disable
++ USHORT ExternalLNAForA:1; // external LNA enable for 5G
++ USHORT ExternalLNAForG:1; // external LNA enable for 2.4G
++ USHORT DynamicTxAgcControl:1; //
++ USHORT HardwareRadioControl:1; // Whether RF is controlled by driver or HW. 1:enable hw control, 0:disable
++ } field;
++ USHORT word;
++} EEPROM_NIC_CONFIG2_STRUC, *PEEPROM_NIC_CONFIG2_STRUC;
++#else
++typedef union _EEPROM_NIC_CINFIG2_STRUC {
++ struct {
++ USHORT HardwareRadioControl:1; // 1:enable, 0:disable
++ USHORT DynamicTxAgcControl:1; //
++ USHORT ExternalLNAForG:1; //
++ USHORT ExternalLNAForA:1; // external LNA enable for 2.4G
++ USHORT CardbusAcceleration:1; // !!! NOTE: 0 - enable, 1 - disable
++ USHORT BW40MSidebandForG:1;
++ USHORT BW40MSidebandForA:1;
++ USHORT EnableWPSPBC:1; // WPS PBC Control bit
++ USHORT BW40MAvailForG:1; // 0:enable, 1:disable
++ USHORT BW40MAvailForA:1; // 0:enable, 1:disable
++ USHORT Rsv2:6; // must be 0
++ } field;
++ USHORT word;
++} EEPROM_NIC_CONFIG2_STRUC, *PEEPROM_NIC_CONFIG2_STRUC;
++#endif
++
++//
++// TX_PWR Value valid range 0xFA(-6) ~ 0x24(36)
++//
++#ifdef RT_BIG_ENDIAN
++typedef union _EEPROM_TX_PWR_STRUC {
++ struct {
++ CHAR Byte1; // High Byte
++ CHAR Byte0; // Low Byte
++ } field;
++ USHORT word;
++} EEPROM_TX_PWR_STRUC, *PEEPROM_TX_PWR_STRUC;
++#else
++typedef union _EEPROM_TX_PWR_STRUC {
++ struct {
++ CHAR Byte0; // Low Byte
++ CHAR Byte1; // High Byte
++ } field;
++ USHORT word;
++} EEPROM_TX_PWR_STRUC, *PEEPROM_TX_PWR_STRUC;
++#endif
++
++#ifdef RT_BIG_ENDIAN
++typedef union _EEPROM_VERSION_STRUC {
++ struct {
++ UCHAR Version; // High Byte
++ UCHAR FaeReleaseNumber; // Low Byte
++ } field;
++ USHORT word;
++} EEPROM_VERSION_STRUC, *PEEPROM_VERSION_STRUC;
++#else
++typedef union _EEPROM_VERSION_STRUC {
++ struct {
++ UCHAR FaeReleaseNumber; // Low Byte
++ UCHAR Version; // High Byte
++ } field;
++ USHORT word;
++} EEPROM_VERSION_STRUC, *PEEPROM_VERSION_STRUC;
++#endif
++
++#ifdef RT_BIG_ENDIAN
++typedef union _EEPROM_LED_STRUC {
++ struct {
++ USHORT Rsvd:3; // Reserved
++ USHORT LedMode:5; // Led mode.
++ USHORT PolarityGPIO_4:1; // Polarity GPIO#4 setting.
++ USHORT PolarityGPIO_3:1; // Polarity GPIO#3 setting.
++ USHORT PolarityGPIO_2:1; // Polarity GPIO#2 setting.
++ USHORT PolarityGPIO_1:1; // Polarity GPIO#1 setting.
++ USHORT PolarityGPIO_0:1; // Polarity GPIO#0 setting.
++ USHORT PolarityACT:1; // Polarity ACT setting.
++ USHORT PolarityRDY_A:1; // Polarity RDY_A setting.
++ USHORT PolarityRDY_G:1; // Polarity RDY_G setting.
++ } field;
++ USHORT word;
++} EEPROM_LED_STRUC, *PEEPROM_LED_STRUC;
++#else
++typedef union _EEPROM_LED_STRUC {
++ struct {
++ USHORT PolarityRDY_G:1; // Polarity RDY_G setting.
++ USHORT PolarityRDY_A:1; // Polarity RDY_A setting.
++ USHORT PolarityACT:1; // Polarity ACT setting.
++ USHORT PolarityGPIO_0:1; // Polarity GPIO#0 setting.
++ USHORT PolarityGPIO_1:1; // Polarity GPIO#1 setting.
++ USHORT PolarityGPIO_2:1; // Polarity GPIO#2 setting.
++ USHORT PolarityGPIO_3:1; // Polarity GPIO#3 setting.
++ USHORT PolarityGPIO_4:1; // Polarity GPIO#4 setting.
++ USHORT LedMode:5; // Led mode.
++ USHORT Rsvd:3; // Reserved
++ } field;
++ USHORT word;
++} EEPROM_LED_STRUC, *PEEPROM_LED_STRUC;
++#endif
++
++#ifdef RT_BIG_ENDIAN
++typedef union _EEPROM_TXPOWER_DELTA_STRUC {
++ struct {
++ UCHAR TxPowerEnable:1;// Enable
++ UCHAR Type:1; // 1: plus the delta value, 0: minus the delta value
++ UCHAR DeltaValue:6; // Tx Power dalta value (MAX=4)
++ } field;
++ UCHAR value;
++} EEPROM_TXPOWER_DELTA_STRUC, *PEEPROM_TXPOWER_DELTA_STRUC;
++#else
++typedef union _EEPROM_TXPOWER_DELTA_STRUC {
++ struct {
++ UCHAR DeltaValue:6; // Tx Power dalta value (MAX=4)
++ UCHAR Type:1; // 1: plus the delta value, 0: minus the delta value
++ UCHAR TxPowerEnable:1;// Enable
++ } field;
++ UCHAR value;
++} EEPROM_TXPOWER_DELTA_STRUC, *PEEPROM_TXPOWER_DELTA_STRUC;
++#endif
++
++//
++// QOS_CSR0: TXOP holder address0 register
++//
++#ifdef RT_BIG_ENDIAN
++typedef union _QOS_CSR0_STRUC {
++ struct {
++ UCHAR Byte3; // MAC address byte 3
++ UCHAR Byte2; // MAC address byte 2
++ UCHAR Byte1; // MAC address byte 1
++ UCHAR Byte0; // MAC address byte 0
++ } field;
++ UINT32 word;
++} QOS_CSR0_STRUC, *PQOS_CSR0_STRUC;
++#else
++typedef union _QOS_CSR0_STRUC {
++ struct {
++ UCHAR Byte0; // MAC address byte 0
++ UCHAR Byte1; // MAC address byte 1
++ UCHAR Byte2; // MAC address byte 2
++ UCHAR Byte3; // MAC address byte 3
++ } field;
++ UINT32 word;
++} QOS_CSR0_STRUC, *PQOS_CSR0_STRUC;
++#endif
++
++//
++// QOS_CSR1: TXOP holder address1 register
++//
++#ifdef RT_BIG_ENDIAN
++typedef union _QOS_CSR1_STRUC {
++ struct {
++ UCHAR Rsvd1;
++ UCHAR Rsvd0;
++ UCHAR Byte5; // MAC address byte 5
++ UCHAR Byte4; // MAC address byte 4
++ } field;
++ UINT32 word;
++} QOS_CSR1_STRUC, *PQOS_CSR1_STRUC;
++#else
++typedef union _QOS_CSR1_STRUC {
++ struct {
++ UCHAR Byte4; // MAC address byte 4
++ UCHAR Byte5; // MAC address byte 5
++ UCHAR Rsvd0;
++ UCHAR Rsvd1;
++ } field;
++ UINT32 word;
++} QOS_CSR1_STRUC, *PQOS_CSR1_STRUC;
++#endif
++
++#define RF_CSR_CFG 0x500
++#ifdef RT_BIG_ENDIAN
++typedef union _RF_CSR_CFG_STRUC {
++ struct {
++ UINT Rsvd1:14; // Reserved
++ UINT RF_CSR_KICK:1; // kick RF register read/write
++ UINT RF_CSR_WR:1; // 0: read 1: write
++ UINT Rsvd2:3; // Reserved
++ UINT TESTCSR_RFACC_REGNUM:5; // RF register ID
++ UINT RF_CSR_DATA:8; // DATA
++ } field;
++ UINT word;
++} RF_CSR_CFG_STRUC, *PRF_CSR_CFG_STRUC;
++#else
++typedef union _RF_CSR_CFG_STRUC {
++ struct {
++ UINT RF_CSR_DATA:8; // DATA
++ UINT TESTCSR_RFACC_REGNUM:5; // RF register ID
++ UINT Rsvd2:3; // Reserved
++ UINT RF_CSR_WR:1; // 0: read 1: write
++ UINT RF_CSR_KICK:1; // kick RF register read/write
++ UINT Rsvd1:14; // Reserved
++ } field;
++ UINT word;
++} RF_CSR_CFG_STRUC, *PRF_CSR_CFG_STRUC;
++#endif
++
++#endif // __RT28XX_H__
+--- /dev/null
++++ b/drivers/staging/rt2870/rt_ate.c
+@@ -0,0 +1,6452 @@
++/*
++ *************************************************************************
++ * Ralink Tech Inc.
++ * 5F., No.36, Taiyuan St., Jhubei City,
++ * Hsinchu County 302,
++ * Taiwan, R.O.C.
++ *
++ * (c) Copyright 2002-2007, Ralink Technology, Inc.
++ *
++ * This program is free software; you can redistribute it and/or modify *
++ * it under the terms of the GNU General Public License as published by *
++ * the Free Software Foundation; either version 2 of the License, or *
++ * (at your option) any later version. *
++ * *
++ * This program is distributed in the hope that it will be useful, *
++ * but WITHOUT ANY WARRANTY; without even the implied warranty of *
++ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the *
++ * GNU General Public License for more details. *
++ * *
++ * You should have received a copy of the GNU General Public License *
++ * along with this program; if not, write to the *
++ * Free Software Foundation, Inc., *
++ * 59 Temple Place - Suite 330, Boston, MA 02111-1307, USA. *
++ * *
++ *************************************************************************
++ */
++
++#include "rt_config.h"
++
++#ifdef UCOS
++INT IoctlResponse(PUCHAR payload, PUCHAR msg, INT len);
++#endif // UCOS //
++
++#ifdef RALINK_ATE
++UCHAR TemplateFrame[24] = {0x08/* Data type */,0x00,0x00,0x00,0xFF,0xFF,0xFF,0xFF,0xFF,0xFF,0x00,0xAA,0xBB,0x12,0x34,0x56,0x00,0x11,0x22,0xAA,0xBB,0xCC,0x00,0x00}; // 802.11 MAC Header, Type:Data, Length:24bytes
++extern RTMP_RF_REGS RF2850RegTable[];
++extern UCHAR NUM_OF_2850_CHNL;
++
++#ifdef RT2870
++extern UCHAR EpToQueue[];
++extern VOID RTUSBRejectPendingPackets( IN PRTMP_ADAPTER pAd);
++#endif // RT2870 //
++
++#ifdef UCOS
++extern INT ConsoleResponse(IN PUCHAR buff);
++extern int (*remote_display)(char *);
++#endif // UCOS //
++
++static CHAR CCKRateTable[] = {0, 1, 2, 3, 8, 9, 10, 11, -1}; /* CCK Mode. */
++static CHAR OFDMRateTable[] = {0, 1, 2, 3, 4, 5, 6, 7, -1}; /* OFDM Mode. */
++static CHAR HTMIXRateTable[] = {0, 1, 2, 3, 4, 5, 6, 7, 8, 9, 10, 11, 12, 13, 14, 15, -1}; /* HT Mix Mode. */
++
++static INT TxDmaBusy(
++ IN PRTMP_ADAPTER pAd);
++
++static INT RxDmaBusy(
++ IN PRTMP_ADAPTER pAd);
++
++static VOID RtmpDmaEnable(
++ IN PRTMP_ADAPTER pAd,
++ IN INT Enable);
++
++static VOID BbpSoftReset(
++ IN PRTMP_ADAPTER pAd);
++
++static VOID RtmpRfIoWrite(
++ IN PRTMP_ADAPTER pAd);
++
++static INT ATESetUpFrame(
++ IN PRTMP_ADAPTER pAd,
++ IN UINT32 TxIdx);
++
++static INT ATETxPwrHandler(
++ IN PRTMP_ADAPTER pAd,
++ IN char index);
++
++static INT ATECmdHandler(
++ IN PRTMP_ADAPTER pAd,
++ IN PUCHAR arg);
++
++static int CheckMCSValid(
++ IN UCHAR Mode,
++ IN UCHAR Mcs);
++
++
++#ifdef RT2870
++static VOID ATEWriteTxInfo(
++ IN PRTMP_ADAPTER pAd,
++ IN PTXINFO_STRUC pTxInfo,
++ IN USHORT USBDMApktLen,
++ IN BOOLEAN bWiv,
++ IN UCHAR QueueSel,
++ IN UCHAR NextValid,
++ IN UCHAR TxBurst);
++
++static VOID ATEWriteTxWI(
++ IN PRTMP_ADAPTER pAd,
++ IN PTXWI_STRUC pTxWI,
++ IN BOOLEAN FRAG,
++ IN BOOLEAN InsTimestamp,
++ IN BOOLEAN AMPDU,
++ IN BOOLEAN Ack,
++ IN BOOLEAN NSeq, // HW new a sequence.
++ IN UCHAR BASize,
++ IN UCHAR WCID,
++ IN ULONG Length,
++ IN UCHAR PID,
++ IN UCHAR MIMOps,
++ IN UCHAR Txopmode,
++ IN BOOLEAN CfAck,
++ IN HTTRANSMIT_SETTING Transmit);
++
++#endif // RT2870 //
++
++static VOID SetJapanFilter(
++ IN PRTMP_ADAPTER pAd);
++
++/*=========================end of prototype=========================*/
++
++
++#ifdef RT2870
++static INT TxDmaBusy(
++ IN PRTMP_ADAPTER pAd)
++{
++ INT result;
++ USB_DMA_CFG_STRUC UsbCfg;
++
++ RTMP_IO_READ32(pAd, USB_DMA_CFG, &UsbCfg.word); // disable DMA
++ if (UsbCfg.field.TxBusy)
++ result = 1;
++ else
++ result = 0;
++
++ return result;
++}
++
++static INT RxDmaBusy(
++ IN PRTMP_ADAPTER pAd)
++{
++ INT result;
++ USB_DMA_CFG_STRUC UsbCfg;
++
++ RTMP_IO_READ32(pAd, USB_DMA_CFG, &UsbCfg.word); // disable DMA
++ if (UsbCfg.field.RxBusy)
++ result = 1;
++ else
++ result = 0;
++
++ return result;
++}
++
++static VOID RtmpDmaEnable(
++ IN PRTMP_ADAPTER pAd,
++ IN INT Enable)
++{
++ BOOLEAN value;
++ ULONG WaitCnt;
++ USB_DMA_CFG_STRUC UsbCfg;
++
++ value = Enable > 0 ? 1 : 0;
++
++ // check DMA is in busy mode.
++ WaitCnt = 0;
++ while (TxDmaBusy(pAd) || RxDmaBusy(pAd))
++ {
++ RTMPusecDelay(10);
++ if (WaitCnt++ > 100)
++ break;
++ }
++
++ //Why not to clear USB DMA TX path first ???
++ RTMP_IO_READ32(pAd, USB_DMA_CFG, &UsbCfg.word); // disable DMA
++ UsbCfg.field.TxBulkEn = value;
++ UsbCfg.field.RxBulkEn = value;
++ RTMP_IO_WRITE32(pAd, USB_DMA_CFG, UsbCfg.word); // abort all TX rings
++ RTMPusecDelay(5000);
++
++ return;
++}
++#endif // RT2870 //
++
++static VOID BbpSoftReset(
++ IN PRTMP_ADAPTER pAd)
++{
++ UCHAR BbpData = 0;
++
++ // Soft reset, set BBP R21 bit0=1->0
++ ATE_BBP_IO_READ8_BY_REG_ID(pAd, BBP_R21, &BbpData);
++ BbpData |= 0x00000001; //set bit0=1
++ ATE_BBP_IO_WRITE8_BY_REG_ID(pAd, BBP_R21, BbpData);
++
++ ATE_BBP_IO_READ8_BY_REG_ID(pAd, BBP_R21, &BbpData);
++ BbpData &= ~(0x00000001); //set bit0=0
++ ATE_BBP_IO_WRITE8_BY_REG_ID(pAd, BBP_R21, BbpData);
++
++ return;
++}
++
++static VOID RtmpRfIoWrite(
++ IN PRTMP_ADAPTER pAd)
++{
++ // Set RF value 1's set R3[bit2] = [0]
++ RTMP_RF_IO_WRITE32(pAd, pAd->LatchRfRegs.R1);
++ RTMP_RF_IO_WRITE32(pAd, pAd->LatchRfRegs.R2);
++ RTMP_RF_IO_WRITE32(pAd, (pAd->LatchRfRegs.R3 & (~0x04)));
++ RTMP_RF_IO_WRITE32(pAd, pAd->LatchRfRegs.R4);
++
++ RTMPusecDelay(200);
++
++ // Set RF value 2's set R3[bit2] = [1]
++ RTMP_RF_IO_WRITE32(pAd, pAd->LatchRfRegs.R1);
++ RTMP_RF_IO_WRITE32(pAd, pAd->LatchRfRegs.R2);
++ RTMP_RF_IO_WRITE32(pAd, (pAd->LatchRfRegs.R3 | 0x04));
++ RTMP_RF_IO_WRITE32(pAd, pAd->LatchRfRegs.R4);
++
++ RTMPusecDelay(200);
++
++ // Set RF value 3's set R3[bit2] = [0]
++ RTMP_RF_IO_WRITE32(pAd, pAd->LatchRfRegs.R1);
++ RTMP_RF_IO_WRITE32(pAd, pAd->LatchRfRegs.R2);
++ RTMP_RF_IO_WRITE32(pAd, (pAd->LatchRfRegs.R3 & (~0x04)));
++ RTMP_RF_IO_WRITE32(pAd, pAd->LatchRfRegs.R4);
++
++ return;
++}
++
++static int CheckMCSValid(
++ UCHAR Mode,
++ UCHAR Mcs)
++{
++ int i;
++ PCHAR pRateTab;
++
++ switch(Mode)
++ {
++ case 0:
++ pRateTab = CCKRateTable;
++ break;
++ case 1:
++ pRateTab = OFDMRateTable;
++ break;
++ case 2:
++ case 3:
++ pRateTab = HTMIXRateTable;
++ break;
++ default:
++ ATEDBGPRINT(RT_DEBUG_ERROR, ("unrecognizable Tx Mode %d\n", Mode));
++ return -1;
++ break;
++ }
++
++ i = 0;
++ while(pRateTab[i] != -1)
++ {
++ if (pRateTab[i] == Mcs)
++ return 0;
++ i++;
++ }
++
++ return -1;
++}
++
++#if 1
++static INT ATETxPwrHandler(
++ IN PRTMP_ADAPTER pAd,
++ IN char index)
++{
++ ULONG R;
++ CHAR TxPower;
++ UCHAR Bbp94 = 0;
++ BOOLEAN bPowerReduce = FALSE;
++
++#ifdef RALINK_28xx_QA
++ if ((pAd->ate.bQATxStart == TRUE) || (pAd->ate.bQARxStart == TRUE))
++ {
++ /* When QA is used for Tx, pAd->ate.TxPower0/1 and real tx power
++ ** are not synchronized.
++ */
++/*
++ pAd->ate.TxPower0 = pAd->LatchRfRegs.xxx;
++ pAd->ate.TxPower1 = pAd->LatchRfRegs.xxx;
++*/
++ return 0;
++ }
++ else
++#endif // RALINK_28xx_QA //
++ {
++ TxPower = index == 0 ? pAd->ate.TxPower0 : pAd->ate.TxPower1;
++
++ if (pAd->ate.Channel <= 14)
++ {
++ if (TxPower > 31)
++ {
++ //
++ // R3, R4 can't large than 31 (0x24), 31 ~ 36 used by BBP 94
++ //
++ R = 31;
++ if (TxPower <= 36)
++ Bbp94 = BBPR94_DEFAULT + (UCHAR)(TxPower - 31);
++ }
++ else if (TxPower < 0)
++ {
++ //
++ // R3, R4 can't less than 0, -1 ~ -6 used by BBP 94
++ //
++ R = 0;
++ if (TxPower >= -6)
++ Bbp94 = BBPR94_DEFAULT + TxPower;
++ }
++ else
++ {
++ // 0 ~ 31
++ R = (ULONG) TxPower;
++ Bbp94 = BBPR94_DEFAULT;
++ }
++
++ ATEDBGPRINT(RT_DEBUG_TRACE, ("%s (TxPower=%d, R=%ld, BBP_R94=%d)\n", __FUNCTION__, TxPower, R, Bbp94));
++ }
++ else// 5.5 GHz
++ {
++ if (TxPower > 15)
++ {
++ //
++ // R3, R4 can't large than 15 (0x0F)
++ //
++ R = 15;
++ }
++ else if (TxPower < 0)
++ {
++ //
++ // R3, R4 can't less than 0
++ //
++ // -1 ~ -7
++ ASSERT((TxPower >= -7));
++ R = (ULONG)(TxPower + 7);
++ bPowerReduce = TRUE;
++ }
++ else
++ {
++ // 0 ~ 15
++ R = (ULONG) TxPower;
++ }
++
++ ATEDBGPRINT(RT_DEBUG_TRACE, ("%s (TxPower=%d, R=%lu)\n", __FUNCTION__, TxPower, R));
++ }
++
++ if (pAd->ate.Channel <= 14)
++ {
++ if (index == 0)
++ {
++ R = R << 9; // shift TX power control to correct RF(R3) register bit position
++ R |= (pAd->LatchRfRegs.R3 & 0xffffc1ff);
++ pAd->LatchRfRegs.R3 = R;
++ }
++ else
++ {
++ R = R << 6; // shift TX power control to correct RF(R4) register bit position
++ R |= (pAd->LatchRfRegs.R4 & 0xfffff83f);
++ pAd->LatchRfRegs.R4 = R;
++ }
++ }
++ else// 5.5GHz
++ {
++ if (bPowerReduce == FALSE)
++ {
++ if (index == 0)
++ {
++ R = (R << 10) | (1 << 9); // shift TX power control to correct RF(R3) register bit position
++ R |= (pAd->LatchRfRegs.R3 & 0xffffc1ff);
++ pAd->LatchRfRegs.R3 = R;
++ }
++ else
++ {
++ R = (R << 7) | (1 << 6); // shift TX power control to correct RF(R4) register bit position
++ R |= (pAd->LatchRfRegs.R4 & 0xfffff83f);
++ pAd->LatchRfRegs.R4 = R;
++ }
++ }
++ else
++ {
++ if (index == 0)
++ {
++ R = (R << 10); // shift TX power control to correct RF(R3) register bit position
++ R |= (pAd->LatchRfRegs.R3 & 0xffffc1ff);
++
++ /* Clear bit 9 of R3 to reduce 7dB. */
++ pAd->LatchRfRegs.R3 = (R & (~(1 << 9)));
++ }
++ else
++ {
++ R = (R << 7); // shift TX power control to correct RF(R4) register bit position
++ R |= (pAd->LatchRfRegs.R4 & 0xfffff83f);
++
++ /* Clear bit 6 of R4 to reduce 7dB. */
++ pAd->LatchRfRegs.R4 = (R & (~(1 << 6)));
++ }
++ }
++ }
++
++ RtmpRfIoWrite(pAd);
++
++ return 0;
++ }
++}
++#else// 1 //
++static INT ATETxPwrHandler(
++ IN PRTMP_ADAPTER pAd,
++ IN char index)
++{
++ ULONG R;
++ CHAR TxPower;
++ UCHAR Bbp94 = 0;
++
++#ifdef RALINK_28xx_QA
++ if ((pAd->ate.bQATxStart == TRUE) || (pAd->ate.bQARxStart == TRUE))
++ {
++ // TODO: how to get current TxPower0/1 from pAd->LatchRfRegs ?
++ /* When QA is used for Tx, pAd->ate.TxPower0/1 and real tx power
++ ** are not synchronized.
++ */
++/*
++ pAd->ate.TxPower0 = pAd->LatchRfRegs.xxx;
++ pAd->ate.TxPower1 = pAd->LatchRfRegs.xxx;
++*/
++ return 0;
++ }
++ else
++#endif // RALINK_28xx_QA //
++ {
++ TxPower = index == 0 ? pAd->ate.TxPower0 : pAd->ate.TxPower1;
++
++ if (TxPower > 31)
++ {
++ //
++ // R3, R4 can't large than 36 (0x24), 31 ~ 36 used by BBP 94
++ //
++ R = 31;
++ if (TxPower <= 36)
++ Bbp94 = BBPR94_DEFAULT + (UCHAR)(TxPower - 31);
++ }
++ else if (TxPower < 0)
++ {
++ //
++ // R3, R4 can't less than 0, -1 ~ -6 used by BBP 94
++ //
++ R = 0;
++ if (TxPower >= -6)
++ Bbp94 = BBPR94_DEFAULT + TxPower;
++ }
++ else
++ {
++ // 0 ~ 31
++ R = (ULONG) TxPower;
++ Bbp94 = BBPR94_DEFAULT;
++ }
++
++ ATEDBGPRINT(RT_DEBUG_TRACE, ("%s (TxPower=%d, R3=%ld, BBP_R94=%d)\n", __FUNCTION__, TxPower, R, Bbp94));
++
++ if (pAd->ate.Channel <= 14)
++ {
++ if (index == 0)
++ {
++ R = R << 9; // shift TX power control to correct RF(R3) register bit position
++ R |= (pAd->LatchRfRegs.R3 & 0xffffc1ff);
++ pAd->LatchRfRegs.R3 = R;
++ }
++ else
++ {
++ R = R << 6; // shift TX power control to correct RF(R4) register bit position
++ R |= (pAd->LatchRfRegs.R4 & 0xfffff83f);
++ pAd->LatchRfRegs.R4 = R;
++ }
++ }
++ else
++ {
++ if (index == 0)
++ {
++ R = (R << 10) | (1 << 9); // shift TX power control to correct RF(R3) register bit position
++ R |= (pAd->LatchRfRegs.R3 & 0xffffc1ff);
++ pAd->LatchRfRegs.R3 = R;
++ }
++ else
++ {
++ R = (R << 7) | (1 << 6); // shift TX power control to correct RF(R4) register bit position
++ R |= (pAd->LatchRfRegs.R4 & 0xfffff83f);
++ pAd->LatchRfRegs.R4 = R;
++ }
++ }
++
++ RtmpRfIoWrite(pAd);
++
++ return 0;
++ }
++}
++#endif // 1 //
++/*
++ ==========================================================================
++ Description:
++ Set ATE operation mode to
++ 0. ATESTART = Start ATE Mode
++ 1. ATESTOP = Stop ATE Mode
++ 2. TXCONT = Continuous Transmit
++ 3. TXCARR = Transmit Carrier
++ 4. TXFRAME = Transmit Frames
++ 5. RXFRAME = Receive Frames
++#ifdef RALINK_28xx_QA
++ 6. TXSTOP = Stop Any Type of Transmition
++ 7. RXSTOP = Stop Receiving Frames
++#endif // RALINK_28xx_QA //
++ Return:
++ TRUE if all parameters are OK, FALSE otherwise
++ ==========================================================================
++*/
++/* */
++/* */
++/*=======================End of RT2860=======================*/
++
++
++/*======================Start of RT2870======================*/
++/* */
++/* */
++
++#ifdef RT2870
++static INT ATECmdHandler(
++ IN PRTMP_ADAPTER pAd,
++ IN PUCHAR arg)
++{
++ UINT32 Value;
++ UCHAR BbpData;
++ UINT32 MacData;
++ UINT i=0, atemode;
++ //NDIS_STATUS Status = NDIS_STATUS_SUCCESS;
++ //PUCHAR pDest;
++ UINT32 temp;
++ ULONG IrqFlags;
++
++ ATEDBGPRINT(RT_DEBUG_TRACE, ("===> ATECmdHandler()\n"));
++ ATEAsicSwitchChannel(pAd);
++ /* AsicLockChannel() is empty function so far in fact */
++ AsicLockChannel(pAd, pAd->ate.Channel);
++
++ RTMPusecDelay(5000);
++
++ // Default value in BBP R22 is 0x0.
++ BbpData = 0;
++
++ /* Enter ATE mode and set Tx/Rx Idle */
++ if (!strcmp(arg, "ATESTART"))
++ {
++#ifdef CONFIG_STA_SUPPORT
++ BOOLEAN Cancelled;
++#endif // CONFIG_STA_SUPPORT //
++ ATEDBGPRINT(RT_DEBUG_TRACE, ("ATE: ATESTART\n"));
++
++ netif_stop_queue(pAd->net_dev);
++
++ atemode = pAd->ate.Mode;
++ pAd->ate.Mode = ATE_START;
++// pAd->ate.TxDoneCount = pAd->ate.TxCount;
++ // Disable Rx
++ RTMP_IO_READ32(pAd, MAC_SYS_CTRL, &Value);
++ Value &= ~(1 << 3);
++ RTMP_IO_WRITE32(pAd, MAC_SYS_CTRL, Value);
++
++ // Disable auto responder
++ RTMP_IO_READ32(pAd, AUTO_RSP_CFG, &temp);
++ temp = temp & 0xFFFFFFFE;
++ RTMP_IO_WRITE32(pAd, AUTO_RSP_CFG, temp);
++
++ // read MAC_SYS_CTRL and backup MAC_SYS_CTRL value.
++ RTMP_IO_READ32(pAd, MAC_SYS_CTRL, &MacData);
++ // clean bit4 to stop continuous Tx production test.
++ MacData &= 0xFFFFFFEF;
++ // Stop continuous TX production test.
++ RTMP_IO_WRITE32(pAd, MAC_SYS_CTRL, MacData);//disable or cancel pending irp first ???
++
++ if (atemode & ATE_TXCARR)
++ {
++ // No Carrier Test set BBP R22 bit7=0, bit6=0, bit[5~0]=0x0
++ ATE_BBP_IO_READ8_BY_REG_ID(pAd, BBP_R22, &BbpData);
++ BbpData &= 0xFFFFFF00; //clear bit7, bit6, bit[5~0]
++ ATE_BBP_IO_WRITE8_BY_REG_ID(pAd, BBP_R22, BbpData);
++ }
++ else if (atemode & ATE_TXCARRSUPP)
++ {
++ // No Cont. TX set BBP R22 bit7=0
++ ATE_BBP_IO_READ8_BY_REG_ID(pAd, BBP_R22, &BbpData);
++ BbpData &= ~(1 << 7); //set bit7=0
++ ATE_BBP_IO_WRITE8_BY_REG_ID(pAd, BBP_R22, BbpData);
++
++ // No Carrier Suppression set BBP R24 bit0=0
++ ATE_BBP_IO_READ8_BY_REG_ID(pAd, BBP_R24, &BbpData);
++ BbpData &= 0xFFFFFFFE; //clear bit0
++ ATE_BBP_IO_WRITE8_BY_REG_ID(pAd, BBP_R24, BbpData);
++ }
++ // We should free some resource which allocate when ATE_TXFRAME , ATE_STOP, and ATE_TXCONT.
++ // TODO:Should we free some resource which was allocated when LoopBack and ATE_STOP ?
++ else if ((atemode & ATE_TXFRAME) || (atemode == ATE_STOP))
++ {
++ if (atemode & ATE_TXCONT)
++ {
++ // Not Cont. TX anymore, so set BBP R22 bit7=0
++ ATE_BBP_IO_READ8_BY_REG_ID(pAd, BBP_R22, &BbpData);
++ BbpData &= ~(1 << 7); //set bit7=0
++ ATE_BBP_IO_WRITE8_BY_REG_ID(pAd, BBP_R22, BbpData);
++ }
++ // Abort Tx, Rx DMA.
++ RtmpDmaEnable(pAd, 0);
++
++ {
++ // It seems nothing to free,
++ // because we didn't allocate any resource when we entered ATE_TXFRAME mode latestly.
++ }
++
++ // Start Tx, RX DMA
++ RtmpDmaEnable(pAd, 1);
++ }
++
++ RTUSBRejectPendingPackets(pAd);
++ RTUSBCleanUpDataBulkOutQueue(pAd);
++
++#ifdef CONFIG_STA_SUPPORT
++ //
++ // It will be called in MlmeSuspend().
++ //
++ // Cancel pending timers
++ RTMPCancelTimer(&pAd->MlmeAux.AssocTimer, &Cancelled);
++ RTMPCancelTimer(&pAd->MlmeAux.ReassocTimer, &Cancelled);
++ RTMPCancelTimer(&pAd->MlmeAux.DisassocTimer, &Cancelled);
++ RTMPCancelTimer(&pAd->MlmeAux.AuthTimer, &Cancelled);
++ RTMPCancelTimer(&pAd->MlmeAux.BeaconTimer, &Cancelled);
++ RTMPCancelTimer(&pAd->MlmeAux.ScanTimer, &Cancelled);
++#endif // CONFIG_STA_SUPPORT //
++
++ //RTUSBCleanUpMLMEWaitQueue(pAd); /* not used in RT28xx */
++ RTUSBCleanUpMLMEBulkOutQueue(pAd);
++
++ // Sometimes kernel will hang on, so we avoid calling MlmeSuspend().
++// MlmeSuspend(pAd, TRUE);
++ //RTMPCancelTimer(&pAd->Mlme.PeriodicTimer, &Cancelled);
++
++ // Disable Rx
++ RTMP_IO_READ32(pAd, MAC_SYS_CTRL, &Value);
++ Value &= ~(1 << 3);
++ RTMP_IO_WRITE32(pAd, MAC_SYS_CTRL, Value);
++
++ // Abort Tx, RX DMA.
++ RtmpDmaEnable(pAd, 0);
++
++ // Disable Tx
++ RTMP_IO_READ32(pAd, MAC_SYS_CTRL, &Value);
++ Value &= ~(1 << 2);
++ RTMP_IO_WRITE32(pAd, MAC_SYS_CTRL, Value);
++
++ // Make sure there are no pending bulk in/out IRPs before we go on.
++/*=========================================================================*/
++ /* pAd->PendingRx is not of type atomic_t anymore in 28xx */
++// while ((atomic_read(&pAd->PendingRx) > 0)) //pAd->BulkFlags != 0 wait bulk out finish
++ while ((pAd->PendingRx > 0)) //pAd->BulkFlags != 0 wait bulk out finish
++ {
++#if 1
++ ATE_RTUSBCancelPendingBulkInIRP(pAd);
++#else
++ NdisInterlockedDecrement(&pAd->PendingRx);
++#endif
++ /* delay 0.5 seconds */
++ RTMPusecDelay(500000);
++ pAd->PendingRx = 0;
++ }
++ /* peter : why don't we have to get BulkOutLock first ? */
++ while (((pAd->BulkOutPending[0] == TRUE) ||
++ (pAd->BulkOutPending[1] == TRUE) ||
++ (pAd->BulkOutPending[2] == TRUE) ||
++ (pAd->BulkOutPending[3] == TRUE)) && (pAd->BulkFlags != 0)) //pAd->BulkFlags != 0 wait bulk out finish
++ {
++ do
++ {
++ /* pAd->BulkOutPending[y] will be set to FALSE in RTUSBCancelPendingBulkOutIRP(pAd) */
++ RTUSBCancelPendingBulkOutIRP(pAd);
++ } while (FALSE);
++
++ /* we have enough time delay in RTUSBCancelPendingBulkOutIRP(pAd)
++ ** so this is not necessary
++ */
++// RTMPusecDelay(500000);
++ }
++
++ /* pAd->PendingRx is not of type atomic_t anymore in 28xx */
++// ASSERT(atomic_read(&pAd->PendingRx) == 0);
++ ASSERT(pAd->PendingRx == 0);
++/*=========================================================================*/
++
++ // reset Rx statistics.
++ pAd->ate.LastSNR0 = 0;
++ pAd->ate.LastSNR1 = 0;
++ pAd->ate.LastRssi0 = 0;
++ pAd->ate.LastRssi1 = 0;
++ pAd->ate.LastRssi2 = 0;
++ pAd->ate.AvgRssi0 = 0;
++ pAd->ate.AvgRssi1 = 0;
++ pAd->ate.AvgRssi2 = 0;
++ pAd->ate.AvgRssi0X8 = 0;
++ pAd->ate.AvgRssi1X8 = 0;
++ pAd->ate.AvgRssi2X8 = 0;
++ pAd->ate.NumOfAvgRssiSample = 0;
++
++#ifdef RALINK_28xx_QA
++ // Tx frame
++ pAd->ate.bQATxStart = FALSE;
++ pAd->ate.bQARxStart = FALSE;
++ pAd->ate.seq = 0;
++
++ // counters
++ pAd->ate.U2M = 0;
++ pAd->ate.OtherData = 0;
++ pAd->ate.Beacon = 0;
++ pAd->ate.OtherCount = 0;
++ pAd->ate.TxAc0 = 0;
++ pAd->ate.TxAc1 = 0;
++ pAd->ate.TxAc2 = 0;
++ pAd->ate.TxAc3 = 0;
++ pAd->ate.TxHCCA = 0;
++ pAd->ate.TxMgmt = 0;
++ pAd->ate.RSSI0 = 0;
++ pAd->ate.RSSI1 = 0;
++ pAd->ate.RSSI2 = 0;
++ pAd->ate.SNR0 = 0;
++ pAd->ate.SNR1 = 0;
++
++ // control
++ pAd->ate.TxDoneCount = 0;
++ pAd->ate.TxStatus = 0; // task Tx status // 0 --> task is idle, 1 --> task is running
++#endif // RALINK_28xx_QA //
++
++ // Soft reset BBP.
++ BbpSoftReset(pAd);
++
++
++#ifdef CONFIG_STA_SUPPORT
++ AsicDisableSync(pAd);
++
++ /*
++ ** If we skip "LinkDown()", we should disable protection
++ ** to prevent from sending out RTS or CTS-to-self.
++ */
++ ATEDisableAsicProtect(pAd);
++ RTMPStationStop(pAd);
++#endif // CONFIG_STA_SUPPORT //
++
++ // Default value in BBP R22 is 0x0.
++ BbpData = 0;
++ RTMP_IO_READ32(pAd, MAC_SYS_CTRL, &MacData);
++
++ // Clean bit4 to stop continuous Tx production test.
++ MacData &= 0xFFFFFFEF;
++ ATE_BBP_IO_WRITE8_BY_REG_ID(pAd, BBP_R22, BbpData);
++ RTMP_IO_WRITE32(pAd, MAC_SYS_CTRL, MacData);
++ //Clean ATE Bulk in/out counter and continue setup
++ InterlockedExchange(&pAd->BulkOutRemained, 0);
++
++ /* NdisAcquireSpinLock()/NdisReleaseSpinLock() need only one argument in RT28xx */
++ NdisAcquireSpinLock(&pAd->GenericLock);
++ pAd->ContinBulkOut = FALSE;
++ pAd->ContinBulkIn = FALSE;
++ NdisReleaseSpinLock(&pAd->GenericLock);
++
++ RTUSB_CLEAR_BULK_FLAG(pAd, fRTUSB_BULK_OUT_DATA_ATE);
++ }
++ else if (!strcmp(arg, "ATESTOP"))
++ {
++ ATEDBGPRINT(RT_DEBUG_TRACE, ("ATE : ATESTOP ===>\n"));
++
++ // Default value in BBP R22 is 0x0.
++ BbpData = 0;
++ RTMP_IO_READ32(pAd, MAC_SYS_CTRL, &MacData);//0820
++ // Clean bit4 to stop continuous Tx production test.
++ MacData &= 0xFFFFFFEF;
++ ATE_BBP_IO_WRITE8_BY_REG_ID(pAd, BBP_R22, BbpData);
++ RTMP_IO_WRITE32(pAd, MAC_SYS_CTRL, MacData); // recover the MAC_SYS_CTRL register back.
++
++ // Disable Rx
++ RTMP_IO_READ32(pAd, MAC_SYS_CTRL, &Value);
++ Value &= ~(1 << 3);
++ RTMP_IO_WRITE32(pAd, MAC_SYS_CTRL, Value);
++
++ /*
++ ** Abort Tx, RX DMA.
++ ** Q : How to do the following I/O if Tx, Rx DMA is aborted ?
++ ** Ans : Bulk endpoints are aborted, while the control endpoint is not.
++ */
++ RtmpDmaEnable(pAd, 0);
++
++ // Disable Tx
++ RTMP_IO_READ32(pAd, MAC_SYS_CTRL, &Value);
++ Value &= ~(1 << 2);
++ RTMP_IO_WRITE32(pAd, MAC_SYS_CTRL, Value);
++
++ /* Make sure there are no pending bulk in/out IRPs before we go on. */
++/*=========================================================================*/
++// while ((atomic_read(&pAd->PendingRx) > 0)) //pAd->BulkFlags != 0 wait bulk out finish
++ while (pAd->PendingRx > 0)
++ {
++#if 1
++ ATE_RTUSBCancelPendingBulkInIRP(pAd);
++#else
++// NdisInterlockedDecrement(&pAd->PendingRx);
++ pAd->PendingRx--;
++#endif
++ RTMPusecDelay(500000);
++ }
++
++ while (((pAd->BulkOutPending[0] == TRUE) ||
++ (pAd->BulkOutPending[1] == TRUE) ||
++ (pAd->BulkOutPending[2] == TRUE) ||
++ (pAd->BulkOutPending[3] == TRUE)) && (pAd->BulkFlags != 0)) //pAd->BulkFlags != 0 wait bulk out finish
++ {
++ do
++ {
++ RTUSBCancelPendingBulkOutIRP(pAd);
++ } while (FALSE);
++
++ RTMPusecDelay(500000);
++ }
++
++// ASSERT(atomic_read(&pAd->PendingRx) == 0);
++ ASSERT(pAd->PendingRx == 0);
++/*=========================================================================*/
++/* Reset Rx RING */
++/*=========================================================================*/
++// InterlockedExchange(&pAd->PendingRx, 0);
++ pAd->PendingRx = 0;
++ pAd->NextRxBulkInReadIndex = 0; // Next Rx Read index
++ pAd->NextRxBulkInIndex = RX_RING_SIZE - 1; // Rx Bulk pointer
++ pAd->NextRxBulkInPosition = 0;
++ for (i = 0; i < (RX_RING_SIZE); i++)
++ {
++ PRX_CONTEXT pRxContext = &(pAd->RxContext[i]);
++ NdisZeroMemory(pRxContext->TransferBuffer, MAX_RXBULK_SIZE);
++ /* peter : why don't we have to get BulkInLock first ? */
++ pRxContext->pAd = pAd;
++ pRxContext->pIrp = NULL;
++ /* peter debug ++ */
++ pRxContext->BulkInOffset = 0;
++ pRxContext->bRxHandling = FALSE;
++ /* peter debug -- */
++ pRxContext->InUse = FALSE;
++ pRxContext->IRPPending = FALSE;
++ pRxContext->Readable = FALSE;
++// pRxContext->ReorderInUse = FALSE;
++// pRxContext->ReadPosOffset = 0;
++ }
++
++/*=========================================================================*/
++/* Reset Tx RING */
++/*=========================================================================*/
++ do
++ {
++ RTUSBCancelPendingBulkOutIRP(pAd);
++ } while (FALSE);
++
++/*=========================================================================*/
++ // Enable auto responder.
++ RTMP_IO_READ32(pAd, AUTO_RSP_CFG, &temp);
++ temp = temp | (0x01);
++ RTMP_IO_WRITE32(pAd, AUTO_RSP_CFG, temp);
++
++/*================================================*/
++ AsicEnableBssSync(pAd);
++
++ /* Soft reset BBP.*/
++ /* In 2870 chipset, ATE_BBP_IO_READ8_BY_REG_ID() == RTMP_BBP_IO_READ8_BY_REG_ID() */
++ /* Both rt2870ap and rt2870sta use BbpSoftReset(pAd) to do BBP soft reset */
++ BbpSoftReset(pAd);
++/*================================================*/
++ {
++#ifdef CONFIG_STA_SUPPORT
++ // Set all state machines back IDLE
++ pAd->Mlme.CntlMachine.CurrState = CNTL_IDLE;
++ pAd->Mlme.AssocMachine.CurrState = ASSOC_IDLE;
++ pAd->Mlme.AuthMachine.CurrState = AUTH_REQ_IDLE;
++ pAd->Mlme.AuthRspMachine.CurrState = AUTH_RSP_IDLE;
++ pAd->Mlme.SyncMachine.CurrState = SYNC_IDLE;
++ pAd->Mlme.ActMachine.CurrState = ACT_IDLE;
++#endif // CONFIG_STA_SUPPORT //
++
++ //
++ // ===> refer to MlmeRestartStateMachine().
++ // When we entered ATE_START mode, PeriodicTimer was not cancelled.
++ // So we don't have to set it here.
++ //
++ //RTMPSetTimer(pAd, &pAd->Mlme.PeriodicTimer, MLME_TASK_EXEC_INTV);
++
++ ASSERT(pAd->CommonCfg.Channel != 0);
++
++ AsicSwitchChannel(pAd, pAd->CommonCfg.Channel, FALSE);
++ AsicLockChannel(pAd, pAd->CommonCfg.Channel);
++
++
++#ifdef CONFIG_STA_SUPPORT
++ RTMPStationStart(pAd);
++#endif // CONFIG_STA_SUPPORT //
++ }
++//
++// These two steps have been done when entering ATE_STOP mode.
++//
++#if 0
++ RTUSBWriteBBPRegister(pAd, BBP_R22, BbpData);
++ RTUSBWriteMACRegister(pAd, MAC_SYS_CTRL, MacData);
++#endif
++ // Clean ATE Bulk in/out counter and continue setup.
++ InterlockedExchange(&pAd->BulkOutRemained, 0);
++ NdisAcquireSpinLock(&pAd->GenericLock);
++ pAd->ContinBulkOut = FALSE;
++ pAd->ContinBulkIn = FALSE;
++ NdisReleaseSpinLock(&pAd->GenericLock);
++
++ /* Wait 50ms to prevent next URB to bulkout during HW reset. */
++ /* todo : remove this if not necessary */
++ NdisMSleep(50000);
++
++ pAd->ate.Mode = ATE_STOP;
++
++ // Enable Tx
++ RTMP_IO_READ32(pAd, MAC_SYS_CTRL, &Value);
++ Value |= (1 << 2);
++ RTMP_IO_WRITE32(pAd, MAC_SYS_CTRL, Value);
++
++/*=========================================================================*/
++ /* restore RX_FILTR_CFG */
++#ifdef CONFIG_STA_SUPPORT
++ /* restore RX_FILTR_CFG in order that QA maybe set it to 0x3 */
++ RTMP_IO_WRITE32(pAd, RX_FILTR_CFG, STANORMAL);
++#endif // CONFIG_STA_SUPPORT //
++/*=========================================================================*/
++
++ // Enable Tx, RX DMA.
++ RtmpDmaEnable(pAd, 1);
++
++ // Enable Rx
++ RTMP_IO_READ32(pAd, MAC_SYS_CTRL, &Value);
++ Value |= (1 << 3);
++ RTMP_IO_WRITE32(pAd, MAC_SYS_CTRL, Value);
++
++ // Wait 10ms to wait all of the bulk-in URBs to complete.
++ /* todo : remove this if not necessary */
++ NdisMSleep(10000);
++
++ // Everything is ready to start normal Tx/Rx.
++ RTUSBBulkReceive(pAd);
++ netif_start_queue(pAd->net_dev);
++
++ ATEDBGPRINT(RT_DEBUG_TRACE, ("<=== ATE : ATESTOP \n"));
++ }
++ else if (!strcmp(arg, "TXCARR")) // Tx Carrier
++ {
++ ATEDBGPRINT(RT_DEBUG_TRACE, ("ATE: TXCARR\n"));
++ pAd->ate.Mode |= ATE_TXCARR;
++
++ // Disable Rx
++ // May be we need not to do this, because these have been done in ATE_START mode ???
++ RTMP_IO_READ32(pAd, MAC_SYS_CTRL, &Value);
++ Value &= ~(1 << 3);
++ RTMP_IO_WRITE32(pAd, MAC_SYS_CTRL, Value);
++
++ // QA has done the following steps if it is used.
++ if (pAd->ate.bQATxStart == FALSE)
++ {
++ // Soft reset BBP.
++ BbpSoftReset(pAd);
++
++ // Carrier Test set BBP R22 bit7=1, bit6=1, bit[5~0]=0x01
++ ATE_BBP_IO_READ8_BY_REG_ID(pAd, BBP_R22, &BbpData);
++ BbpData &= 0xFFFFFF00; //clear bit7, bit6, bit[5~0]
++ BbpData |= 0x000000C1; //set bit7=1, bit6=1, bit[5~0]=0x01
++ ATE_BBP_IO_WRITE8_BY_REG_ID(pAd, BBP_R22, BbpData);
++
++ // set MAC_SYS_CTRL(0x1004) Continuous Tx Production Test (bit4) = 1
++ RTMP_IO_READ32(pAd, MAC_SYS_CTRL, &Value);
++ Value = Value | 0x00000010;
++ RTMP_IO_WRITE32(pAd, MAC_SYS_CTRL, Value);
++ }
++ }
++ else if (!strcmp(arg, "TXCONT")) // Tx Continue
++ {
++ if (pAd->ate.bQATxStart == TRUE)
++ {
++ /* set MAC_SYS_CTRL(0x1004) bit4(Continuous Tx Production Test)
++ and bit2(MAC TX enable) back to zero. */
++ RTMP_IO_READ32(pAd, MAC_SYS_CTRL, &MacData);
++ MacData &= 0xFFFFFFEB;
++ RTMP_IO_WRITE32(pAd, MAC_SYS_CTRL, MacData);
++
++ // set BBP R22 bit7=0
++ ATE_BBP_IO_READ8_BY_REG_ID(pAd, BBP_R22, &BbpData);
++ BbpData &= 0xFFFFFF7F; //set bit7=0
++ ATE_BBP_IO_WRITE8_BY_REG_ID(pAd, BBP_R22, BbpData);
++ }
++
++ /* for TxCont mode.
++ ** Step 1: Send 50 packets first then wait for a moment.
++ ** Step 2: Send more 50 packet then start continue mode.
++ */
++ ATEDBGPRINT(RT_DEBUG_TRACE, ("ATE: TXCONT\n"));
++ // Step 1: send 50 packets first.
++ pAd->ate.Mode |= ATE_TXCONT;
++ pAd->ate.TxCount = 50;
++ pAd->ate.TxDoneCount = 0;
++
++ // Soft reset BBP.
++ BbpSoftReset(pAd);
++
++ // Abort Tx, RX DMA.
++ RtmpDmaEnable(pAd, 0);
++
++
++ /* Only needed if we have to send some normal frames. */
++ SetJapanFilter(pAd);
++
++ // Setup frame format.
++ ATESetUpFrame(pAd, 0);
++
++ // Enable Tx
++ RTMP_IO_READ32(pAd, MAC_SYS_CTRL, &Value);
++ Value |= (1 << 2);
++ RTMP_IO_WRITE32(pAd, MAC_SYS_CTRL, Value);
++
++ // Disable Rx
++ RTMP_IO_READ32(pAd, MAC_SYS_CTRL, &Value);
++ Value &= ~(1 << 3);
++ RTMP_IO_WRITE32(pAd, MAC_SYS_CTRL, Value);
++
++ // Start Tx, RX DMA.
++ RtmpDmaEnable(pAd, 1);
++
++ InterlockedExchange(&pAd->BulkOutRemained, pAd->ate.TxCount);
++
++#ifdef RALINK_28xx_QA
++ if (pAd->ate.bQATxStart == TRUE)
++ {
++ pAd->ate.TxStatus = 1;
++ //pAd->ate.Repeat = 0;
++ }
++#endif // RALINK_28xx_QA //
++
++ NdisAcquireSpinLock(&pAd->GenericLock);//0820
++ pAd->ContinBulkOut = FALSE;
++ NdisReleaseSpinLock(&pAd->GenericLock);
++
++ RTUSB_SET_BULK_FLAG(pAd, fRTUSB_BULK_OUT_DATA_ATE);
++
++ // Kick bulk out
++ RTUSBKickBulkOut(pAd);
++
++ /* To make sure all the 50 frames have been bulk out before executing step 2 */
++ while (atomic_read(&pAd->BulkOutRemained) > 0)
++ {
++ RTMPusecDelay(5000);
++ }
++
++ // Step 2: send more 50 packets then start continue mode.
++ // Abort Tx, RX DMA.
++ RtmpDmaEnable(pAd, 0);
++
++ // Cont. TX set BBP R22 bit7=1
++ ATE_BBP_IO_READ8_BY_REG_ID(pAd, BBP_R22, &BbpData);
++ BbpData |= 0x00000080; //set bit7=1
++ ATE_BBP_IO_WRITE8_BY_REG_ID(pAd, BBP_R22, BbpData);
++
++ pAd->ate.TxCount = 50;
++ pAd->ate.TxDoneCount = 0;
++
++ SetJapanFilter(pAd);
++
++ // Setup frame format.
++ ATESetUpFrame(pAd, 0);
++
++ // Enable Tx
++ RTMP_IO_READ32(pAd, MAC_SYS_CTRL, &Value);
++ Value |= (1 << 2);
++ RTMP_IO_WRITE32(pAd, MAC_SYS_CTRL, Value);
++
++ // Disable Rx
++ RTMP_IO_READ32(pAd, MAC_SYS_CTRL, &Value);
++ Value &= ~(1 << 3);
++
++ // Start Tx, RX DMA.
++ RtmpDmaEnable(pAd, 1);
++
++ InterlockedExchange(&pAd->BulkOutRemained, pAd->ate.TxCount);
++
++#ifdef RALINK_28xx_QA
++ if (pAd->ate.bQATxStart == TRUE)
++ {
++ pAd->ate.TxStatus = 1;
++ //pAd->ate.Repeat = 0;
++ }
++#endif // RALINK_28xx_QA //
++
++ NdisAcquireSpinLock(&pAd->GenericLock);//0820
++ pAd->ContinBulkOut = FALSE;
++ NdisReleaseSpinLock(&pAd->GenericLock);
++
++ RTUSB_SET_BULK_FLAG(pAd, fRTUSB_BULK_OUT_DATA_ATE);
++ // Kick bulk out
++ RTUSBKickBulkOut(pAd);
++
++#if 1
++ RTMPusecDelay(500);
++#else
++ while (atomic_read(&pAd->BulkOutRemained) > 0)
++ {
++ RTMPusecDelay(5000);
++ }
++#endif // 1 //
++
++ // Set MAC_SYS_CTRL(0x1004) Continuous Tx Production Test (bit4) = 1.
++ RTMP_IO_READ32(pAd, MAC_SYS_CTRL, &MacData);
++ MacData |= 0x00000010;
++ RTMP_IO_WRITE32(pAd, MAC_SYS_CTRL, MacData);
++ }
++ else if (!strcmp(arg, "TXFRAME")) // Tx Frames
++ {
++ ATEDBGPRINT(RT_DEBUG_TRACE, ("ATE: TXFRAME(Count=0x%08x)\n", pAd->ate.TxCount));
++ pAd->ate.Mode |= ATE_TXFRAME;
++
++ // Soft reset BBP.
++ BbpSoftReset(pAd);
++
++ // Default value in BBP R22 is 0x0.
++ BbpData = 0;
++
++ RTMP_IO_READ32(pAd, MAC_SYS_CTRL, &MacData);
++
++ // Clean bit4 to stop continuous Tx production test.
++ MacData &= 0xFFFFFFEF;
++
++ ATE_BBP_IO_WRITE8_BY_REG_ID(pAd, BBP_R22, BbpData);
++ RTMP_IO_WRITE32(pAd, MAC_SYS_CTRL, MacData);
++
++#ifdef RALINK_28xx_QA
++ // add this for LoopBack mode
++ if (pAd->ate.bQARxStart == FALSE)
++ {
++ // Disable Rx
++ RTMP_IO_READ32(pAd, MAC_SYS_CTRL, &Value);
++ Value &= ~(1 << 3);
++ RTMP_IO_WRITE32(pAd, MAC_SYS_CTRL, Value);
++ }
++
++ if (pAd->ate.bQATxStart == TRUE)
++ {
++ pAd->ate.TxStatus = 1;
++ //pAd->ate.Repeat = 0;
++ }
++#else
++ // Disable Rx
++ RTMP_IO_READ32(pAd, MAC_SYS_CTRL, &Value);
++ Value &= ~(1 << 3);
++ RTMP_IO_WRITE32(pAd, MAC_SYS_CTRL, Value);
++#endif // RALINK_28xx_QA //
++
++ // Enable Tx
++ RTMP_IO_READ32(pAd, MAC_SYS_CTRL, &Value);
++ Value |= (1 << 2);
++ RTMP_IO_WRITE32(pAd, MAC_SYS_CTRL, Value);
++
++ SetJapanFilter(pAd);
++
++ // Abort Tx, RX DMA.
++ RtmpDmaEnable(pAd, 0);
++
++ pAd->ate.TxDoneCount = 0;
++
++ // Setup frame format
++ ATESetUpFrame(pAd, 0);
++
++ // Start Tx, RX DMA.
++ RtmpDmaEnable(pAd, 1);
++
++ // Check count is continuous or not yet.
++ //
++ // Due to the type mismatch between "pAd->BulkOutRemained"(atomic_t) and "pAd->ate.TxCount"(UINT32)
++ //
++ if (pAd->ate.TxCount == 0)
++ {
++ InterlockedExchange(&pAd->BulkOutRemained, 0);
++ }
++ else
++ {
++ InterlockedExchange(&pAd->BulkOutRemained, pAd->ate.TxCount);
++ }
++ ATEDBGPRINT(RT_DEBUG_TRACE, ("bulk out count = %d\n", atomic_read(&pAd->BulkOutRemained)));
++ ASSERT((atomic_read(&pAd->BulkOutRemained) >= 0));
++
++ if (atomic_read(&pAd->BulkOutRemained) == 0)
++ {
++ ATEDBGPRINT(RT_DEBUG_TRACE, ("Send packet countinuously\n"));
++
++ /* In 28xx, NdisAcquireSpinLock() == spin_lock_bh() */
++ /* NdisAcquireSpinLock only need one argument in 28xx. */
++ NdisAcquireSpinLock(&pAd->GenericLock);
++ pAd->ContinBulkOut = TRUE;
++ NdisReleaseSpinLock(&pAd->GenericLock);
++
++ /* In 28xx, BULK_OUT_LOCK() == spin_lock_irqsave() */
++ BULK_OUT_LOCK(&pAd->BulkOutLock[0], IrqFlags);// peter : NdisAcquireSpinLock ==> BULK_OUT_LOCK
++ pAd->BulkOutPending[0] = FALSE;
++ BULK_OUT_UNLOCK(&pAd->BulkOutLock[0], IrqFlags);// peter : NdisAcquireSpinLock ==> BULK_OUT_LOCK
++ }
++ else
++ {
++ ATEDBGPRINT(RT_DEBUG_TRACE, ("Send packets depend on counter\n"));
++
++ NdisAcquireSpinLock(&pAd->GenericLock);
++ pAd->ContinBulkOut = FALSE;
++ NdisReleaseSpinLock(&pAd->GenericLock);
++
++ BULK_OUT_LOCK(&pAd->BulkOutLock[0], IrqFlags);
++ pAd->BulkOutPending[0] = FALSE;
++ BULK_OUT_UNLOCK(&pAd->BulkOutLock[0], IrqFlags);
++ }
++
++ RTUSB_SET_BULK_FLAG(pAd, fRTUSB_BULK_OUT_DATA_ATE);
++
++ // Kick bulk out
++ RTUSBKickBulkOut(pAd);
++ }
++#ifdef RALINK_28xx_QA
++ else if (!strcmp(arg, "TXSTOP")) //Enter ATE mode and set Tx/Rx Idle
++ {
++ ATEDBGPRINT(RT_DEBUG_TRACE, ("ATE: TXSTOP\n"));
++
++ atemode = pAd->ate.Mode;
++ pAd->ate.Mode &= ATE_TXSTOP;
++ pAd->ate.bQATxStart = FALSE;
++// pAd->ate.TxDoneCount = pAd->ate.TxCount;
++
++/*=========================================================================*/
++ if (atemode & ATE_TXCARR)
++ {
++ // No Carrier Test set BBP R22 bit7=0, bit6=0, bit[5~0]=0x0
++ ATE_BBP_IO_READ8_BY_REG_ID(pAd, BBP_R22, &BbpData);
++ BbpData &= 0xFFFFFF00; //clear bit7, bit6, bit[5~0]
++ ATE_BBP_IO_WRITE8_BY_REG_ID(pAd, BBP_R22, BbpData);
++ }
++ else if (atemode & ATE_TXCARRSUPP)
++ {
++ // No Cont. TX set BBP R22 bit7=0
++ ATE_BBP_IO_READ8_BY_REG_ID(pAd, BBP_R22, &BbpData);
++ BbpData &= ~(1 << 7); //set bit7=0
++ ATE_BBP_IO_WRITE8_BY_REG_ID(pAd, BBP_R22, BbpData);
++
++ // No Carrier Suppression set BBP R24 bit0=0
++ ATE_BBP_IO_READ8_BY_REG_ID(pAd, BBP_R24, &BbpData);
++ BbpData &= 0xFFFFFFFE; //clear bit0
++ ATE_BBP_IO_WRITE8_BY_REG_ID(pAd, BBP_R24, BbpData);
++ }
++ else if ((atemode & ATE_TXFRAME) || (atemode == ATE_STOP))
++ {
++ if (atemode & ATE_TXCONT)
++ {
++ // No Cont. TX set BBP R22 bit7=0
++ ATE_BBP_IO_READ8_BY_REG_ID(pAd, BBP_R22, &BbpData);
++ BbpData &= ~(1 << 7); //set bit7=0
++ ATE_BBP_IO_WRITE8_BY_REG_ID(pAd, BBP_R22, BbpData);
++ }
++ }
++
++/*=========================================================================*/
++ RTUSBRejectPendingPackets(pAd);
++ RTUSBCleanUpDataBulkOutQueue(pAd);
++
++ /* not used in RT28xx */
++ //RTUSBCleanUpMLMEWaitQueue(pAd);
++ /* empty function so far */
++ RTUSBCleanUpMLMEBulkOutQueue(pAd);
++/*=========================================================================*/
++ // Abort Tx, RX DMA.
++ RtmpDmaEnable(pAd, 0);
++/*=========================================================================*/
++
++ /* In 28xx, pAd->PendingRx is not of type atomic_t anymore */
++// while ((atomic_read(&pAd->PendingRx) > 0)) //pAd->BulkFlags != 0 wait bulk out finish
++ /* peter todo : BulkInLock */
++ while (pAd->PendingRx > 0)
++ {
++#if 1
++ ATE_RTUSBCancelPendingBulkInIRP(pAd);
++#else
++// NdisInterlockedDecrement(&pAd->PendingRx);
++ pAd->PendingRx--;
++#endif
++ RTMPusecDelay(500000);
++ }
++
++ while (((pAd->BulkOutPending[0] == TRUE) ||
++ (pAd->BulkOutPending[1] == TRUE) ||
++ (pAd->BulkOutPending[2] == TRUE) ||
++ (pAd->BulkOutPending[3] == TRUE)) && (pAd->BulkFlags != 0)) //pAd->BulkFlags != 0 wait bulk out finish
++ {
++ do
++ {
++ RTUSBCancelPendingBulkOutIRP(pAd);
++ } while (FALSE);
++
++ RTMPusecDelay(500000);
++ }
++
++ ASSERT(pAd->PendingRx == 0);
++/*=========================================================================*/
++ // Enable Tx, Rx DMA.
++ RtmpDmaEnable(pAd, 1);
++
++ /* task Tx status : 0 --> task is idle, 1 --> task is running */
++ pAd->ate.TxStatus = 0;
++
++ // Soft reset BBP.
++ BbpSoftReset(pAd);
++
++ // Disable Tx
++ RTMP_IO_READ32(pAd, MAC_SYS_CTRL, &MacData);
++ MacData &= (0xfffffffb);
++ RTMP_IO_WRITE32(pAd, MAC_SYS_CTRL, MacData);
++
++ //Clean ATE Bulk in/out counter and continue setup
++ InterlockedExchange(&pAd->BulkOutRemained, 0);
++
++ pAd->ContinBulkOut = FALSE;
++ }
++ else if (!strcmp(arg, "RXSTOP"))
++ {
++ ATEDBGPRINT(RT_DEBUG_TRACE, ("ATE: RXSTOP\n"));
++ atemode = pAd->ate.Mode;
++
++ // Disable Rx
++ RTMP_IO_READ32(pAd, MAC_SYS_CTRL, &Value);
++ Value &= ~(1 << 3);
++ RTMP_IO_WRITE32(pAd, MAC_SYS_CTRL, Value);
++
++ pAd->ate.Mode &= ATE_RXSTOP;
++ pAd->ate.bQARxStart = FALSE;
++// pAd->ate.TxDoneCount = pAd->ate.TxCount;
++
++/*=========================================================================*/
++ RTUSBRejectPendingPackets(pAd);
++ RTUSBCleanUpDataBulkOutQueue(pAd);
++
++ /* not used in RT28xx */
++ //RTUSBCleanUpMLMEWaitQueue(pAd);
++ RTUSBCleanUpMLMEBulkOutQueue(pAd);
++/*=========================================================================*/
++
++ // Abort Tx, RX DMA.
++ RtmpDmaEnable(pAd, 0);
++/*=========================================================================*/
++// while ((atomic_read(&pAd->PendingRx) > 0))
++ while (pAd->PendingRx > 0)
++ {
++#if 1
++ ATE_RTUSBCancelPendingBulkInIRP(pAd);
++#else
++// NdisInterlockedDecrement(&pAd->PendingRx);
++ pAd->PendingRx--;
++#endif
++ RTMPusecDelay(500000);
++ }
++
++ while (((pAd->BulkOutPending[0] == TRUE) ||
++ (pAd->BulkOutPending[1] == TRUE) ||
++ (pAd->BulkOutPending[2] == TRUE) ||
++ (pAd->BulkOutPending[3] == TRUE)) && (pAd->BulkFlags != 0)) //pAd->BulkFlags != 0 wait bulk out finish
++ {
++ do
++ {
++ RTUSBCancelPendingBulkOutIRP(pAd);
++ } while (FALSE);
++
++ RTMPusecDelay(500000);
++ }
++
++ ASSERT(pAd->PendingRx == 0);
++/*=========================================================================*/
++
++ // Soft reset BBP.
++ BbpSoftReset(pAd);
++ pAd->ContinBulkIn = FALSE;
++ }
++#endif // RALINK_28xx_QA //
++ else if (!strcmp(arg, "RXFRAME")) // Rx Frames
++ {
++ ATEDBGPRINT(RT_DEBUG_TRACE, ("ATE: RXFRAME\n"));
++
++ // Disable Rx of MAC block
++ RTMP_IO_READ32(pAd, MAC_SYS_CTRL, &Value);
++ Value &= ~(1 << 3);
++ RTMP_IO_WRITE32(pAd, MAC_SYS_CTRL, Value);
++
++ // Default value in BBP R22 is 0x0.
++ BbpData = 0;
++
++ RTMP_IO_READ32(pAd, MAC_SYS_CTRL, &MacData);
++ // Clean bit4 to stop continuous Tx production test.
++ MacData &= 0xFFFFFFEF;
++
++ ATE_BBP_IO_WRITE8_BY_REG_ID(pAd, BBP_R22, BbpData);
++ RTMP_IO_WRITE32(pAd, MAC_SYS_CTRL, MacData);
++
++ pAd->ate.Mode |= ATE_RXFRAME;
++
++ // Abort Tx, RX DMA.
++ RtmpDmaEnable(pAd, 0);
++
++ // Disable TX of MAC block
++ RTMP_IO_READ32(pAd, MAC_SYS_CTRL, &Value);
++ Value &= ~(1 << 2);
++ RTMP_IO_WRITE32(pAd, MAC_SYS_CTRL, Value);
++
++ // Reset Rx RING.
++ for ( i = 0; i < (RX_RING_SIZE); i++)
++ {
++ PRX_CONTEXT pRxContext = &(pAd->RxContext[i]);
++
++ pRxContext->InUse = FALSE;
++ pRxContext->IRPPending = FALSE;
++ pRxContext->Readable = FALSE;
++
++ //
++ // Get the urb from kernel back to driver.
++ //
++ RTUSB_UNLINK_URB(pRxContext->pUrb);
++
++ /* Sleep 200 microsecs to give cancellation time to work. */
++ NdisMSleep(200);
++ pAd->BulkInReq = 0;
++
++// InterlockedExchange(&pAd->PendingRx, 0);
++ pAd->PendingRx = 0;
++ pAd->NextRxBulkInReadIndex = 0; // Next Rx Read index
++ pAd->NextRxBulkInIndex = RX_RING_SIZE - 1; // Rx Bulk pointer
++ pAd->NextRxBulkInPosition = 0;
++ }
++
++ // read to clear counters
++ RTUSBReadMACRegister(pAd, RX_STA_CNT0, &temp); //RX PHY & RX CRC count
++ RTUSBReadMACRegister(pAd, RX_STA_CNT1, &temp); //RX PLCP error count & CCA false alarm count
++ RTUSBReadMACRegister(pAd, RX_STA_CNT2, &temp); //RX FIFO overflow frame count & RX duplicated filtered frame count
++
++ pAd->ContinBulkIn = TRUE;
++
++ // Enable Tx, RX DMA.
++ RtmpDmaEnable(pAd, 1);
++
++ // Enable RX of MAC block
++ RTMP_IO_READ32(pAd, MAC_SYS_CTRL, &Value);
++ Value |= (1 << 3);
++ RTMP_IO_WRITE32(pAd, MAC_SYS_CTRL, Value);
++
++ // Kick bulk in
++ RTUSBBulkReceive(pAd);
++ }
++ else
++ {
++ ATEDBGPRINT(RT_DEBUG_TRACE, ("ATE: Invalid arg!\n"));
++ return FALSE;
++ }
++ RTMPusecDelay(5000);
++
++ ATEDBGPRINT(RT_DEBUG_TRACE, ("<=== ATECmdHandler()\n"));
++
++ return TRUE;
++}
++#endif // RT2870 //
++
++INT Set_ATE_Proc(
++ IN PRTMP_ADAPTER pAd,
++ IN PUCHAR arg)
++{
++ if (ATECmdHandler(pAd, arg))
++ {
++ ATEDBGPRINT(RT_DEBUG_TRACE, ("Ralink: Set_ATE_Proc Success\n"));
++
++
++ return TRUE;
++ }
++ else
++ {
++ ATEDBGPRINT(RT_DEBUG_TRACE, ("Ralink: Set_ATE_Proc Failed\n"));
++ return FALSE;
++ }
++}
++
++/*
++ ==========================================================================
++ Description:
++ Set ATE ADDR1=DA for TxFrame(AP : To DS = 0 ; From DS = 1)
++ or
++ Set ATE ADDR3=DA for TxFrame(STA : To DS = 1 ; From DS = 0)
++
++ Return:
++ TRUE if all parameters are OK, FALSE otherwise
++ ==========================================================================
++*/
++INT Set_ATE_DA_Proc(
++ IN PRTMP_ADAPTER pAd,
++ IN PUCHAR arg)
++{
++ CHAR *value;
++ INT i;
++
++ if(strlen(arg) != 17) //Mac address acceptable format 01:02:03:04:05:06 length 17
++ return FALSE;
++
++ for (i=0, value = rstrtok(arg, ":"); value; value = rstrtok(NULL, ":"))
++ {
++ if((strlen(value) != 2) || (!isxdigit(*value)) || (!isxdigit(*(value+1))) )
++ return FALSE; //Invalid
++
++
++#ifdef CONFIG_STA_SUPPORT
++ AtoH(value, &pAd->ate.Addr3[i++], 1);
++#endif // CONFIG_STA_SUPPORT //
++ }
++
++ if(i != 6)
++ return FALSE; //Invalid
++
++
++#ifdef CONFIG_STA_SUPPORT
++ ATEDBGPRINT(RT_DEBUG_TRACE, ("Set_ATE_DA_Proc (DA = %2X:%2X:%2X:%2X:%2X:%2X)\n", pAd->ate.Addr3[0],
++ pAd->ate.Addr3[1], pAd->ate.Addr3[2], pAd->ate.Addr3[3], pAd->ate.Addr3[4], pAd->ate.Addr3[5]));
++#endif // CONFIG_STA_SUPPORT //
++
++ ATEDBGPRINT(RT_DEBUG_TRACE, ("Ralink: Set_ATE_DA_Proc Success\n"));
++
++ return TRUE;
++}
++
++/*
++ ==========================================================================
++ Description:
++ Set ATE ADDR3=SA for TxFrame(AP : To DS = 0 ; From DS = 1)
++ or
++ Set ATE ADDR2=SA for TxFrame(STA : To DS = 1 ; From DS = 0)
++
++ Return:
++ TRUE if all parameters are OK, FALSE otherwise
++ ==========================================================================
++*/
++INT Set_ATE_SA_Proc(
++ IN PRTMP_ADAPTER pAd,
++ IN PUCHAR arg)
++{
++ CHAR *value;
++ INT i;
++
++ if(strlen(arg) != 17) //Mac address acceptable format 01:02:03:04:05:06 length 17
++ return FALSE;
++
++ for (i=0, value = rstrtok(arg, ":"); value; value = rstrtok(NULL, ":"))
++ {
++ if((strlen(value) != 2) || (!isxdigit(*value)) || (!isxdigit(*(value+1))) )
++ return FALSE; //Invalid
++
++
++#ifdef CONFIG_STA_SUPPORT
++ AtoH(value, &pAd->ate.Addr2[i++], 1);
++#endif // CONFIG_STA_SUPPORT //
++ }
++
++ if(i != 6)
++ return FALSE; //Invalid
++
++
++#ifdef CONFIG_STA_SUPPORT
++ ATEDBGPRINT(RT_DEBUG_TRACE, ("Set_ATE_SA_Proc (SA = %2X:%2X:%2X:%2X:%2X:%2X)\n", pAd->ate.Addr2[0],
++ pAd->ate.Addr2[1], pAd->ate.Addr2[2], pAd->ate.Addr2[3], pAd->ate.Addr2[4], pAd->ate.Addr2[5]));
++#endif // CONFIG_STA_SUPPORT //
++
++ ATEDBGPRINT(RT_DEBUG_TRACE, ("Ralink: Set_ATE_SA_Proc Success\n"));
++
++ return TRUE;
++}
++
++/*
++ ==========================================================================
++ Description:
++ Set ATE ADDR2=BSSID for TxFrame(AP : To DS = 0 ; From DS = 1)
++ or
++ Set ATE ADDR1=BSSID for TxFrame(STA : To DS = 1 ; From DS = 0)
++
++ Return:
++ TRUE if all parameters are OK, FALSE otherwise
++ ==========================================================================
++*/
++INT Set_ATE_BSSID_Proc(
++ IN PRTMP_ADAPTER pAd,
++ IN PUCHAR arg)
++{
++ CHAR *value;
++ INT i;
++
++ if(strlen(arg) != 17) //Mac address acceptable format 01:02:03:04:05:06 length 17
++ return FALSE;
++
++ for (i=0, value = rstrtok(arg, ":"); value; value = rstrtok(NULL, ":"))
++ {
++ if((strlen(value) != 2) || (!isxdigit(*value)) || (!isxdigit(*(value+1))) )
++ return FALSE; //Invalid
++
++
++#ifdef CONFIG_STA_SUPPORT
++ AtoH(value, &pAd->ate.Addr1[i++], 1);
++#endif // CONFIG_STA_SUPPORT //
++ }
++
++ if(i != 6)
++ return FALSE; //Invalid
++
++
++#ifdef CONFIG_STA_SUPPORT
++ ATEDBGPRINT(RT_DEBUG_TRACE, ("Set_ATE_BSSID_Proc (BSSID = %2X:%2X:%2X:%2X:%2X:%2X)\n", pAd->ate.Addr1[0],
++ pAd->ate.Addr1[1], pAd->ate.Addr1[2], pAd->ate.Addr1[3], pAd->ate.Addr1[4], pAd->ate.Addr1[5]));
++#endif // CONFIG_STA_SUPPORT //
++
++ ATEDBGPRINT(RT_DEBUG_TRACE, ("Ralink: Set_ATE_BSSID_Proc Success\n"));
++
++ return TRUE;
++}
++
++/*
++ ==========================================================================
++ Description:
++ Set ATE Tx Channel
++
++ Return:
++ TRUE if all parameters are OK, FALSE otherwise
++ ==========================================================================
++*/
++INT Set_ATE_CHANNEL_Proc(
++ IN PRTMP_ADAPTER pAd,
++ IN PUCHAR arg)
++{
++ UCHAR channel;
++
++ channel = simple_strtol(arg, 0, 10);
++
++ if ((channel < 1) || (channel > 216))// to allow A band channel : ((channel < 1) || (channel > 14))
++ {
++ ATEDBGPRINT(RT_DEBUG_ERROR, ("Set_ATE_CHANNEL_Proc::Out of range, it should be in range of 1~14.\n"));
++ return FALSE;
++ }
++ pAd->ate.Channel = channel;
++
++ ATEDBGPRINT(RT_DEBUG_TRACE, ("Set_ATE_CHANNEL_Proc (ATE Channel = %d)\n", pAd->ate.Channel));
++ ATEDBGPRINT(RT_DEBUG_TRACE, ("Ralink: Set_ATE_CHANNEL_Proc Success\n"));
++
++
++ return TRUE;
++}
++
++/*
++ ==========================================================================
++ Description:
++ Set ATE Tx Power0
++
++ Return:
++ TRUE if all parameters are OK, FALSE otherwise
++ ==========================================================================
++*/
++INT Set_ATE_TX_POWER0_Proc(
++ IN PRTMP_ADAPTER pAd,
++ IN PUCHAR arg)
++{
++ CHAR TxPower;
++
++ TxPower = simple_strtol(arg, 0, 10);
++
++ if (pAd->ate.Channel <= 14)
++ {
++ if ((TxPower > 31) || (TxPower < 0))
++ {
++ ATEDBGPRINT(RT_DEBUG_ERROR, ("Set_ATE_TX_POWER0_Proc::Out of range (Value=%d)\n", TxPower));
++ return FALSE;
++ }
++ }
++ else// 5.5GHz
++ {
++ if ((TxPower > 15) || (TxPower < -7))
++ {
++ ATEDBGPRINT(RT_DEBUG_ERROR, ("Set_ATE_TX_POWER0_Proc::Out of range (Value=%d)\n", TxPower));
++ return FALSE;
++ }
++ }
++
++ pAd->ate.TxPower0 = TxPower;
++ ATETxPwrHandler(pAd, 0);
++ ATEDBGPRINT(RT_DEBUG_TRACE, ("Ralink: Set_ATE_TX_POWER0_Proc Success\n"));
++
++
++ return TRUE;
++}
++
++/*
++ ==========================================================================
++ Description:
++ Set ATE Tx Power1
++
++ Return:
++ TRUE if all parameters are OK, FALSE otherwise
++ ==========================================================================
++*/
++INT Set_ATE_TX_POWER1_Proc(
++ IN PRTMP_ADAPTER pAd,
++ IN PUCHAR arg)
++{
++ CHAR TxPower;
++
++ TxPower = simple_strtol(arg, 0, 10);
++
++ if (pAd->ate.Channel <= 14)
++ {
++ if ((TxPower > 31) || (TxPower < 0))
++ {
++ ATEDBGPRINT(RT_DEBUG_ERROR, ("Set_ATE_TX_POWER1_Proc::Out of range (Value=%d)\n", TxPower));
++ return FALSE;
++ }
++ }
++ else
++ {
++ if ((TxPower > 15) || (TxPower < -7))
++ {
++ ATEDBGPRINT(RT_DEBUG_ERROR, ("Set_ATE_TX_POWER1_Proc::Out of range (Value=%d)\n", TxPower));
++ return FALSE;
++ }
++ }
++
++ pAd->ate.TxPower1 = TxPower;
++ ATETxPwrHandler(pAd, 1);
++ ATEDBGPRINT(RT_DEBUG_TRACE, ("Ralink: Set_ATE_TX_POWER1_Proc Success\n"));
++
++
++ return TRUE;
++}
++
++/*
++ ==========================================================================
++ Description:
++ Set ATE Tx Antenna
++
++ Return:
++ TRUE if all parameters are OK, FALSE otherwise
++ ==========================================================================
++*/
++INT Set_ATE_TX_Antenna_Proc(
++ IN PRTMP_ADAPTER pAd,
++ IN PUCHAR arg)
++{
++ CHAR value;
++
++ value = simple_strtol(arg, 0, 10);
++
++ if ((value > 2) || (value < 0))
++ {
++ ATEDBGPRINT(RT_DEBUG_ERROR, ("Set_ATE_TX_Antenna_Proc::Out of range (Value=%d)\n", value));
++ return FALSE;
++ }
++
++ pAd->ate.TxAntennaSel = value;
++
++ ATEDBGPRINT(RT_DEBUG_TRACE, ("Set_ATE_TX_Antenna_Proc (Antenna = %d)\n", pAd->ate.TxAntennaSel));
++ ATEDBGPRINT(RT_DEBUG_TRACE,("Ralink: Set_ATE_TX_Antenna_Proc Success\n"));
++
++
++ return TRUE;
++}
++
++/*
++ ==========================================================================
++ Description:
++ Set ATE Rx Antenna
++
++ Return:
++ TRUE if all parameters are OK, FALSE otherwise
++ ==========================================================================
++*/
++INT Set_ATE_RX_Antenna_Proc(
++ IN PRTMP_ADAPTER pAd,
++ IN PUCHAR arg)
++{
++ CHAR value;
++
++ value = simple_strtol(arg, 0, 10);
++
++ if ((value > 3) || (value < 0))
++ {
++ ATEDBGPRINT(RT_DEBUG_ERROR, ("Set_ATE_RX_Antenna_Proc::Out of range (Value=%d)\n", value));
++ return FALSE;
++ }
++
++ pAd->ate.RxAntennaSel = value;
++
++ ATEDBGPRINT(RT_DEBUG_TRACE, ("Set_ATE_RX_Antenna_Proc (Antenna = %d)\n", pAd->ate.RxAntennaSel));
++ ATEDBGPRINT(RT_DEBUG_TRACE, ("Ralink: Set_ATE_RX_Antenna_Proc Success\n"));
++
++
++ return TRUE;
++}
++
++/*
++ ==========================================================================
++ Description:
++ Set ATE RF frequence offset
++
++ Return:
++ TRUE if all parameters are OK, FALSE otherwise
++ ==========================================================================
++*/
++INT Set_ATE_TX_FREQOFFSET_Proc(
++ IN PRTMP_ADAPTER pAd,
++ IN PUCHAR arg)
++{
++ UCHAR RFFreqOffset;
++ ULONG R4;
++
++ RFFreqOffset = simple_strtol(arg, 0, 10);
++
++ if(RFFreqOffset >= 64)
++ {
++ ATEDBGPRINT(RT_DEBUG_ERROR, ("Set_ATE_TX_FREQOFFSET_Proc::Out of range, it should be in range of 0~63.\n"));
++ return FALSE;
++ }
++
++ pAd->ate.RFFreqOffset = RFFreqOffset;
++ R4 = pAd->ate.RFFreqOffset << 15; // shift TX power control to correct RF register bit position
++ R4 |= (pAd->LatchRfRegs.R4 & ((~0x001f8000)));
++ pAd->LatchRfRegs.R4 = R4;
++
++ RtmpRfIoWrite(pAd);
++
++ ATEDBGPRINT(RT_DEBUG_TRACE, ("Set_ATE_TX_FREQOFFSET_Proc (RFFreqOffset = %d)\n", pAd->ate.RFFreqOffset));
++ ATEDBGPRINT(RT_DEBUG_TRACE, ("Ralink: Set_ATE_TX_FREQOFFSET_Proc Success\n"));
++
++
++ return TRUE;
++}
++
++/*
++ ==========================================================================
++ Description:
++ Set ATE RF BW
++
++ Return:
++ TRUE if all parameters are OK, FALSE otherwise
++ ==========================================================================
++*/
++INT Set_ATE_TX_BW_Proc(
++ IN PRTMP_ADAPTER pAd,
++ IN PUCHAR arg)
++{
++ int i;
++ UCHAR value = 0;
++ UCHAR BBPCurrentBW;
++
++ BBPCurrentBW = simple_strtol(arg, 0, 10);
++
++ if(BBPCurrentBW == 0)
++ pAd->ate.TxWI.BW = BW_20;
++ else
++ pAd->ate.TxWI.BW = BW_40;
++
++ if(pAd->ate.TxWI.BW == BW_20)
++ {
++ if(pAd->ate.Channel <= 14)
++ {
++ for (i=0; i<5; i++)
++ {
++ if (pAd->Tx20MPwrCfgGBand[i] != 0xffffffff)
++ {
++ RTMP_IO_WRITE32(pAd, TX_PWR_CFG_0 + i*4, pAd->Tx20MPwrCfgGBand[i]);
++ RTMPusecDelay(5000);
++ }
++ }
++ }
++ else
++ {
++ for (i=0; i<5; i++)
++ {
++ if (pAd->Tx20MPwrCfgABand[i] != 0xffffffff)
++ {
++ RTMP_IO_WRITE32(pAd, TX_PWR_CFG_0 + i*4, pAd->Tx20MPwrCfgABand[i]);
++ RTMPusecDelay(5000);
++ }
++ }
++ }
++
++ //Set BBP R4 bit[4:3]=0:0
++ ATE_BBP_IO_READ8_BY_REG_ID(pAd, BBP_R4, &value);
++ value &= (~0x18);
++ ATE_BBP_IO_WRITE8_BY_REG_ID(pAd, BBP_R4, value);
++
++ //Set BBP R66=0x3C
++ value = 0x3C;
++ ATE_BBP_IO_WRITE8_BY_REG_ID(pAd, BBP_R66, value);
++ //Set BBP R68=0x0B
++ //to improve Rx sensitivity.
++ value = 0x0B;
++ ATE_BBP_IO_WRITE8_BY_REG_ID(pAd, BBP_R68, value);
++ //Set BBP R69=0x16
++ value = 0x16;
++ ATE_BBP_IO_WRITE8_BY_REG_ID(pAd, BBP_R69, value);
++ //Set BBP R70=0x08
++ value = 0x08;
++ ATE_BBP_IO_WRITE8_BY_REG_ID(pAd, BBP_R70, value);
++ //Set BBP R73=0x11
++ value = 0x11;
++ ATE_BBP_IO_WRITE8_BY_REG_ID(pAd, BBP_R73, value);
++
++ // If Channel=14, Bandwidth=20M and Mode=CCK, Set BBP R4 bit5=1
++ // (Japan filter coefficients)
++ // This segment of code will only works when ATETXMODE and ATECHANNEL
++ // were set to MODE_CCK and 14 respectively before ATETXBW is set to 0.
++ //=====================================================================
++ if (pAd->ate.Channel == 14)
++ {
++ int TxMode = pAd->ate.TxWI.PHYMODE;
++ if (TxMode == MODE_CCK)
++ {
++ // when Channel==14 && Mode==CCK && BandWidth==20M, BBP R4 bit5=1
++ ATE_BBP_IO_READ8_BY_REG_ID(pAd, BBP_R4, &value);
++ value |= 0x20; //set bit5=1
++ ATE_BBP_IO_WRITE8_BY_REG_ID(pAd, BBP_R4, value);
++ }
++ }
++
++ //=====================================================================
++ // If bandwidth != 40M, RF Reg4 bit 21 = 0.
++ pAd->LatchRfRegs.R4 &= ~0x00200000;
++ RtmpRfIoWrite(pAd);
++ }
++ else if(pAd->ate.TxWI.BW == BW_40)
++ {
++ if(pAd->ate.Channel <= 14)
++ {
++ for (i=0; i<5; i++)
++ {
++ if (pAd->Tx40MPwrCfgGBand[i] != 0xffffffff)
++ {
++ RTMP_IO_WRITE32(pAd, TX_PWR_CFG_0 + i*4, pAd->Tx40MPwrCfgGBand[i]);
++ RTMPusecDelay(5000);
++ }
++ }
++ }
++ else
++ {
++ for (i=0; i<5; i++)
++ {
++ if (pAd->Tx40MPwrCfgABand[i] != 0xffffffff)
++ {
++ RTMP_IO_WRITE32(pAd, TX_PWR_CFG_0 + i*4, pAd->Tx40MPwrCfgABand[i]);
++ RTMPusecDelay(5000);
++ }
++ }
++#ifdef DOT11_N_SUPPORT
++ if ((pAd->ate.TxWI.PHYMODE >= MODE_HTMIX) && (pAd->ate.TxWI.MCS == 7))
++ {
++ value = 0x28;
++ ATE_BBP_IO_WRITE8_BY_REG_ID(pAd, BBP_R67, value);
++ }
++#endif // DOT11_N_SUPPORT //
++ }
++
++ //Set BBP R4 bit[4:3]=1:0
++ ATE_BBP_IO_READ8_BY_REG_ID(pAd, BBP_R4, &value);
++ value &= (~0x18);
++ value |= 0x10;
++ ATE_BBP_IO_WRITE8_BY_REG_ID(pAd, BBP_R4, value);
++
++ //Set BBP R66=0x3C
++ value = 0x3C;
++ ATE_BBP_IO_WRITE8_BY_REG_ID(pAd, BBP_R66, value);
++ //Set BBP R68=0x0C
++ //to improve Rx sensitivity.
++ value = 0x0C;
++ ATE_BBP_IO_WRITE8_BY_REG_ID(pAd, BBP_R68, value);
++ //Set BBP R69=0x1A
++ value = 0x1A;
++ ATE_BBP_IO_WRITE8_BY_REG_ID(pAd, BBP_R69, value);
++ //Set BBP R70=0x0A
++ value = 0x0A;
++ ATE_BBP_IO_WRITE8_BY_REG_ID(pAd, BBP_R70, value);
++ //Set BBP R73=0x16
++ value = 0x16;
++ ATE_BBP_IO_WRITE8_BY_REG_ID(pAd, BBP_R73, value);
++
++ // If bandwidth = 40M, set RF Reg4 bit 21 = 1.
++ pAd->LatchRfRegs.R4 |= 0x00200000;
++ RtmpRfIoWrite(pAd);
++ }
++
++ ATEDBGPRINT(RT_DEBUG_TRACE, ("Set_ATE_TX_BW_Proc (BBPCurrentBW = %d)\n", pAd->ate.TxWI.BW));
++ ATEDBGPRINT(RT_DEBUG_TRACE, ("Ralink: Set_ATE_TX_BW_Proc Success\n"));
++
++
++ return TRUE;
++}
++
++/*
++ ==========================================================================
++ Description:
++ Set ATE Tx frame length
++
++ Return:
++ TRUE if all parameters are OK, FALSE otherwise
++ ==========================================================================
++*/
++INT Set_ATE_TX_LENGTH_Proc(
++ IN PRTMP_ADAPTER pAd,
++ IN PUCHAR arg)
++{
++ pAd->ate.TxLength = simple_strtol(arg, 0, 10);
++
++ if((pAd->ate.TxLength < 24) || (pAd->ate.TxLength > (MAX_FRAME_SIZE - 34/* == 2312 */)))
++ {
++ pAd->ate.TxLength = (MAX_FRAME_SIZE - 34/* == 2312 */);
++ ATEDBGPRINT(RT_DEBUG_ERROR, ("Set_ATE_TX_LENGTH_Proc::Out of range, it should be in range of 24~%d.\n", (MAX_FRAME_SIZE - 34/* == 2312 */)));
++ return FALSE;
++ }
++
++ ATEDBGPRINT(RT_DEBUG_TRACE, ("Set_ATE_TX_LENGTH_Proc (TxLength = %d)\n", pAd->ate.TxLength));
++ ATEDBGPRINT(RT_DEBUG_TRACE, ("Ralink: Set_ATE_TX_LENGTH_Proc Success\n"));
++
++
++ return TRUE;
++}
++
++/*
++ ==========================================================================
++ Description:
++ Set ATE Tx frame count
++
++ Return:
++ TRUE if all parameters are OK, FALSE otherwise
++ ==========================================================================
++*/
++INT Set_ATE_TX_COUNT_Proc(
++ IN PRTMP_ADAPTER pAd,
++ IN PUCHAR arg)
++{
++ pAd->ate.TxCount = simple_strtol(arg, 0, 10);
++
++ ATEDBGPRINT(RT_DEBUG_TRACE, ("Set_ATE_TX_COUNT_Proc (TxCount = %d)\n", pAd->ate.TxCount));
++ ATEDBGPRINT(RT_DEBUG_TRACE, ("Ralink: Set_ATE_TX_COUNT_Proc Success\n"));
++
++
++ return TRUE;
++}
++
++/*
++ ==========================================================================
++ Description:
++ Set ATE Tx frame MCS
++
++ Return:
++ TRUE if all parameters are OK, FALSE otherwise
++ ==========================================================================
++*/
++INT Set_ATE_TX_MCS_Proc(
++ IN PRTMP_ADAPTER pAd,
++ IN PUCHAR arg)
++{
++ UCHAR MCS;
++ int result;
++
++ MCS = simple_strtol(arg, 0, 10);
++ result = CheckMCSValid(pAd->ate.TxWI.PHYMODE, MCS);
++
++ if (result != -1)
++ {
++ pAd->ate.TxWI.MCS = (UCHAR)MCS;
++ }
++ else
++ {
++ ATEDBGPRINT(RT_DEBUG_ERROR, ("Set_ATE_TX_MCS_Proc::Out of range, refer to rate table.\n"));
++ return FALSE;
++ }
++
++ ATEDBGPRINT(RT_DEBUG_TRACE, ("Set_ATE_TX_MCS_Proc (MCS = %d)\n", pAd->ate.TxWI.MCS));
++ ATEDBGPRINT(RT_DEBUG_TRACE, ("Ralink: Set_ATE_TX_MCS_Proc Success\n"));
++
++
++ return TRUE;
++}
++
++/*
++ ==========================================================================
++ Description:
++ Set ATE Tx frame Mode
++ 0: MODE_CCK
++ 1: MODE_OFDM
++ 2: MODE_HTMIX
++ 3: MODE_HTGREENFIELD
++
++ Return:
++ TRUE if all parameters are OK, FALSE otherwise
++ ==========================================================================
++*/
++INT Set_ATE_TX_MODE_Proc(
++ IN PRTMP_ADAPTER pAd,
++ IN PUCHAR arg)
++{
++ pAd->ate.TxWI.PHYMODE = simple_strtol(arg, 0, 10);
++
++ if(pAd->ate.TxWI.PHYMODE > 3)
++ {
++ pAd->ate.TxWI.PHYMODE = 0;
++ ATEDBGPRINT(RT_DEBUG_ERROR, ("Set_ATE_TX_MODE_Proc::Out of range. it should be in range of 0~3\n"));
++ ATEDBGPRINT(RT_DEBUG_ERROR, ("0: CCK, 1: OFDM, 2: HT_MIX, 3: HT_GREEN_FIELD.\n"));
++ return FALSE;
++ }
++
++ ATEDBGPRINT(RT_DEBUG_TRACE, ("Set_ATE_TX_MODE_Proc (TxMode = %d)\n", pAd->ate.TxWI.PHYMODE));
++ ATEDBGPRINT(RT_DEBUG_TRACE, ("Ralink: Set_ATE_TX_MODE_Proc Success\n"));
++
++
++ return TRUE;
++}
++
++/*
++ ==========================================================================
++ Description:
++ Set ATE Tx frame GI
++
++ Return:
++ TRUE if all parameters are OK, FALSE otherwise
++ ==========================================================================
++*/
++INT Set_ATE_TX_GI_Proc(
++ IN PRTMP_ADAPTER pAd,
++ IN PUCHAR arg)
++{
++ pAd->ate.TxWI.ShortGI = simple_strtol(arg, 0, 10);
++
++ if(pAd->ate.TxWI.ShortGI > 1)
++ {
++ pAd->ate.TxWI.ShortGI = 0;
++ ATEDBGPRINT(RT_DEBUG_ERROR, ("Set_ATE_TX_GI_Proc::Out of range\n"));
++ return FALSE;
++ }
++
++ ATEDBGPRINT(RT_DEBUG_TRACE, ("Set_ATE_TX_GI_Proc (GI = %d)\n", pAd->ate.TxWI.ShortGI));
++ ATEDBGPRINT(RT_DEBUG_TRACE, ("Ralink: Set_ATE_TX_GI_Proc Success\n"));
++
++
++ return TRUE;
++}
++
++/*
++ ==========================================================================
++ Description:
++ ==========================================================================
++ */
++INT Set_ATE_RX_FER_Proc(
++ IN PRTMP_ADAPTER pAd,
++ IN PUCHAR arg)
++{
++ pAd->ate.bRxFer = simple_strtol(arg, 0, 10);
++
++ if (pAd->ate.bRxFer == 1)
++ {
++ pAd->ate.RxCntPerSec = 0;
++ pAd->ate.RxTotalCnt = 0;
++ }
++
++ ATEDBGPRINT(RT_DEBUG_TRACE, ("Set_ATE_RX_FER_Proc (bRxFer = %d)\n", pAd->ate.bRxFer));
++ ATEDBGPRINT(RT_DEBUG_TRACE, ("Ralink: Set_ATE_RX_FER_Proc Success\n"));
++
++
++ return TRUE;
++}
++
++INT Set_ATE_Read_RF_Proc(
++ IN PRTMP_ADAPTER pAd,
++ IN PUCHAR arg)
++{
++ ate_print(KERN_EMERG "R1 = %lx\n", pAd->LatchRfRegs.R1);
++ ate_print(KERN_EMERG "R2 = %lx\n", pAd->LatchRfRegs.R2);
++ ate_print(KERN_EMERG "R3 = %lx\n", pAd->LatchRfRegs.R3);
++ ate_print(KERN_EMERG "R4 = %lx\n", pAd->LatchRfRegs.R4);
++
++ return TRUE;
++}
++
++INT Set_ATE_Write_RF1_Proc(
++ IN PRTMP_ADAPTER pAd,
++ IN PUCHAR arg)
++{
++ UINT32 value = simple_strtol(arg, 0, 16);
++
++ pAd->LatchRfRegs.R1 = value;
++ RtmpRfIoWrite(pAd);
++
++ return TRUE;
++}
++
++INT Set_ATE_Write_RF2_Proc(
++ IN PRTMP_ADAPTER pAd,
++ IN PUCHAR arg)
++{
++ UINT32 value = simple_strtol(arg, 0, 16);
++
++ pAd->LatchRfRegs.R2 = value;
++ RtmpRfIoWrite(pAd);
++
++ return TRUE;
++}
++
++INT Set_ATE_Write_RF3_Proc(
++ IN PRTMP_ADAPTER pAd,
++ IN PUCHAR arg)
++{
++ UINT32 value = simple_strtol(arg, 0, 16);
++
++ pAd->LatchRfRegs.R3 = value;
++ RtmpRfIoWrite(pAd);
++
++ return TRUE;
++}
++
++INT Set_ATE_Write_RF4_Proc(
++ IN PRTMP_ADAPTER pAd,
++ IN PUCHAR arg)
++{
++ UINT32 value = simple_strtol(arg, 0, 16);
++
++ pAd->LatchRfRegs.R4 = value;
++ RtmpRfIoWrite(pAd);
++
++ return TRUE;
++}
++
++/*
++ ==========================================================================
++ Description:
++ Load and Write EEPROM from a binary file prepared in advance.
++
++ Return:
++ TRUE if all parameters are OK, FALSE otherwise
++ ==========================================================================
++*/
++#ifndef UCOS
++INT Set_ATE_Load_E2P_Proc(
++ IN PRTMP_ADAPTER pAd,
++ IN PUCHAR arg)
++{
++ BOOLEAN ret = FALSE;
++ PUCHAR src = EEPROM_BIN_FILE_NAME;
++ struct file *srcf;
++ INT32 retval, orgfsuid, orgfsgid;
++ mm_segment_t orgfs;
++ USHORT WriteEEPROM[(EEPROM_SIZE/2)];
++ UINT32 FileLength = 0;
++ UINT32 value = simple_strtol(arg, 0, 10);
++
++ ATEDBGPRINT(RT_DEBUG_ERROR, ("===> %s (value=%d)\n\n", __FUNCTION__, value));
++
++ if (value > 0)
++ {
++ /* zero the e2p buffer */
++ NdisZeroMemory((PUCHAR)WriteEEPROM, EEPROM_SIZE);
++
++ /* save uid and gid used for filesystem access.
++ ** set user and group to 0 (root)
++ */
++ orgfsuid = current->fsuid;
++ orgfsgid = current->fsgid;
++ /* as root */
++ current->fsuid = current->fsgid = 0;
++ orgfs = get_fs();
++ set_fs(KERNEL_DS);
++
++ do
++ {
++ /* open the bin file */
++ srcf = filp_open(src, O_RDONLY, 0);
++
++ if (IS_ERR(srcf))
++ {
++ ate_print("%s - Error %ld opening %s\n", __FUNCTION__, -PTR_ERR(srcf), src);
++ break;
++ }
++
++ /* the object must have a read method */
++ if ((srcf->f_op == NULL) || (srcf->f_op->read == NULL))
++ {
++ ate_print("%s - %s does not have a read method\n", __FUNCTION__, src);
++ break;
++ }
++
++ /* read the firmware from the file *.bin */
++ FileLength = srcf->f_op->read(srcf,
++ (PUCHAR)WriteEEPROM,
++ EEPROM_SIZE,
++ &srcf->f_pos);
++
++ if (FileLength != EEPROM_SIZE)
++ {
++ ate_print("%s: error file length (=%d) in e2p.bin\n",
++ __FUNCTION__, FileLength);
++ break;
++ }
++ else
++ {
++ /* write the content of .bin file to EEPROM */
++ rt_ee_write_all(pAd, WriteEEPROM);
++ ret = TRUE;
++ }
++ break;
++ } while(TRUE);
++
++ /* close firmware file */
++ if (IS_ERR(srcf))
++ {
++ ;
++ }
++ else
++ {
++ retval = filp_close(srcf, NULL);
++ if (retval)
++ {
++ ATEDBGPRINT(RT_DEBUG_ERROR, ("--> Error %d closing %s\n", -retval, src));
++
++ }
++ }
++
++ /* restore */
++ set_fs(orgfs);
++ current->fsuid = orgfsuid;
++ current->fsgid = orgfsgid;
++ }
++ ATEDBGPRINT(RT_DEBUG_ERROR, ("<=== %s (ret=%d)\n", __FUNCTION__, ret));
++
++ return ret;
++
++}
++#else
++INT Set_ATE_Load_E2P_Proc(
++ IN PRTMP_ADAPTER pAd,
++ IN PUCHAR arg)
++{
++ USHORT WriteEEPROM[(EEPROM_SIZE/2)];
++ struct iwreq *wrq = (struct iwreq *)arg;
++
++ ATEDBGPRINT(RT_DEBUG_TRACE, ("===> %s (wrq->u.data.length = %d)\n\n", __FUNCTION__, wrq->u.data.length));
++
++ if (wrq->u.data.length != EEPROM_SIZE)
++ {
++ ate_print("%s: error length (=%d) from host\n",
++ __FUNCTION__, wrq->u.data.length);
++ return FALSE;
++ }
++ else/* (wrq->u.data.length == EEPROM_SIZE) */
++ {
++ /* zero the e2p buffer */
++ NdisZeroMemory((PUCHAR)WriteEEPROM, EEPROM_SIZE);
++
++ /* fill the local buffer */
++ NdisMoveMemory((PUCHAR)WriteEEPROM, wrq->u.data.pointer, wrq->u.data.length);
++
++ do
++ {
++ /* write the content of .bin file to EEPROM */
++ rt_ee_write_all(pAd, WriteEEPROM);
++
++ } while(FALSE);
++ }
++
++ ATEDBGPRINT(RT_DEBUG_TRACE, ("<=== %s\n", __FUNCTION__));
++
++ return TRUE;
++
++}
++#endif // !UCOS //
++
++INT Set_ATE_Read_E2P_Proc(
++ IN PRTMP_ADAPTER pAd,
++ IN PUCHAR arg)
++{
++ USHORT buffer[EEPROM_SIZE/2];
++ USHORT *p;
++ int i;
++
++ rt_ee_read_all(pAd, (USHORT *)buffer);
++ p = buffer;
++ for (i = 0; i < (EEPROM_SIZE/2); i++)
++ {
++ ate_print("%4.4x ", *p);
++ if (((i+1) % 16) == 0)
++ ate_print("\n");
++ p++;
++ }
++ return TRUE;
++}
++
++INT Set_ATE_Show_Proc(
++ IN PRTMP_ADAPTER pAd,
++ IN PUCHAR arg)
++{
++ ate_print("Mode=%d\n", pAd->ate.Mode);
++ ate_print("TxPower0=%d\n", pAd->ate.TxPower0);
++ ate_print("TxPower1=%d\n", pAd->ate.TxPower1);
++ ate_print("TxAntennaSel=%d\n", pAd->ate.TxAntennaSel);
++ ate_print("RxAntennaSel=%d\n", pAd->ate.RxAntennaSel);
++ ate_print("BBPCurrentBW=%d\n", pAd->ate.TxWI.BW);
++ ate_print("GI=%d\n", pAd->ate.TxWI.ShortGI);
++ ate_print("MCS=%d\n", pAd->ate.TxWI.MCS);
++ ate_print("TxMode=%d\n", pAd->ate.TxWI.PHYMODE);
++ ate_print("Addr1=%02x:%02x:%02x:%02x:%02x:%02x\n",
++ pAd->ate.Addr1[0], pAd->ate.Addr1[1], pAd->ate.Addr1[2], pAd->ate.Addr1[3], pAd->ate.Addr1[4], pAd->ate.Addr1[5]);
++ ate_print("Addr2=%02x:%02x:%02x:%02x:%02x:%02x\n",
++ pAd->ate.Addr2[0], pAd->ate.Addr2[1], pAd->ate.Addr2[2], pAd->ate.Addr2[3], pAd->ate.Addr2[4], pAd->ate.Addr2[5]);
++ ate_print("Addr3=%02x:%02x:%02x:%02x:%02x:%02x\n",
++ pAd->ate.Addr3[0], pAd->ate.Addr3[1], pAd->ate.Addr3[2], pAd->ate.Addr3[3], pAd->ate.Addr3[4], pAd->ate.Addr3[5]);
++ ate_print("Channel=%d\n", pAd->ate.Channel);
++ ate_print("TxLength=%d\n", pAd->ate.TxLength);
++ ate_print("TxCount=%u\n", pAd->ate.TxCount);
++ ate_print("RFFreqOffset=%d\n", pAd->ate.RFFreqOffset);
++ ate_print(KERN_EMERG "Set_ATE_Show_Proc Success\n");
++ return TRUE;
++}
++
++INT Set_ATE_Help_Proc(
++ IN PRTMP_ADAPTER pAd,
++ IN PUCHAR arg)
++{
++ ate_print("ATE=ATESTART, ATESTOP, TXCONT, TXCARR, TXFRAME, RXFRAME\n");
++ ate_print("ATEDA\n");
++ ate_print("ATESA\n");
++ ate_print("ATEBSSID\n");
++ ate_print("ATECHANNEL, range:0~14(unless A band !)\n");
++ ate_print("ATETXPOW0, set power level of antenna 1.\n");
++ ate_print("ATETXPOW1, set power level of antenna 2.\n");
++ ate_print("ATETXANT, set TX antenna. 0:all, 1:antenna one, 2:antenna two.\n");
++ ate_print("ATERXANT, set RX antenna.0:all, 1:antenna one, 2:antenna two, 3:antenna three.\n");
++ ate_print("ATETXFREQOFFSET, set frequency offset, range 0~63\n");
++ ate_print("ATETXBW, set BandWidth, 0:20MHz, 1:40MHz.\n");
++ ate_print("ATETXLEN, set Frame length, range 24~%d\n", (MAX_FRAME_SIZE - 34/* == 2312 */));
++ ate_print("ATETXCNT, set how many frame going to transmit.\n");
++ ate_print("ATETXMCS, set MCS, reference to rate table.\n");
++ ate_print("ATETXMODE, set Mode 0:CCK, 1:OFDM, 2:HT-Mix, 3:GreenField, reference to rate table.\n");
++ ate_print("ATETXGI, set GI interval, 0:Long, 1:Short\n");
++ ate_print("ATERXFER, 0:disable Rx Frame error rate. 1:enable Rx Frame error rate.\n");
++ ate_print("ATERRF, show all RF registers.\n");
++ ate_print("ATEWRF1, set RF1 register.\n");
++ ate_print("ATEWRF2, set RF2 register.\n");
++ ate_print("ATEWRF3, set RF3 register.\n");
++ ate_print("ATEWRF4, set RF4 register.\n");
++ ate_print("ATELDE2P, load EEPROM from .bin file.\n");
++ ate_print("ATERE2P, display all EEPROM content.\n");
++ ate_print("ATESHOW, display all parameters of ATE.\n");
++ ate_print("ATEHELP, online help.\n");
++
++ return TRUE;
++}
++
++/*
++ ==========================================================================
++ Description:
++
++ AsicSwitchChannel() dedicated for ATE.
++
++ ==========================================================================
++*/
++VOID ATEAsicSwitchChannel(
++ IN PRTMP_ADAPTER pAd)
++{
++ UINT32 R2 = 0, R3 = DEFAULT_RF_TX_POWER, R4 = 0, Value = 0;
++ CHAR TxPwer = 0, TxPwer2 = 0;
++ UCHAR index, BbpValue = 0, R66 = 0x30;
++ RTMP_RF_REGS *RFRegTable;
++ UCHAR Channel;
++
++#ifdef RALINK_28xx_QA
++ if ((pAd->ate.bQATxStart == TRUE) || (pAd->ate.bQARxStart == TRUE))
++ {
++ if (pAd->ate.Channel != pAd->LatchRfRegs.Channel)
++ {
++ pAd->ate.Channel = pAd->LatchRfRegs.Channel;
++ }
++ return;
++ }
++ else
++#endif // RALINK_28xx_QA //
++ Channel = pAd->ate.Channel;
++
++ // Select antenna
++ AsicAntennaSelect(pAd, Channel);
++
++ // fill Tx power value
++ TxPwer = pAd->ate.TxPower0;
++ TxPwer2 = pAd->ate.TxPower1;
++
++ RFRegTable = RF2850RegTable;
++
++ switch (pAd->RfIcType)
++ {
++ /* But only 2850 and 2750 support 5.5GHz band... */
++ case RFIC_2820:
++ case RFIC_2850:
++ case RFIC_2720:
++ case RFIC_2750:
++
++ for (index = 0; index < NUM_OF_2850_CHNL; index++)
++ {
++ if (Channel == RFRegTable[index].Channel)
++ {
++ R2 = RFRegTable[index].R2;
++ if (pAd->Antenna.field.TxPath == 1)
++ {
++ R2 |= 0x4000; // If TXpath is 1, bit 14 = 1;
++ }
++
++ if (pAd->Antenna.field.RxPath == 2)
++ {
++ switch (pAd->ate.RxAntennaSel)
++ {
++ case 1:
++ R2 |= 0x20040;
++ ATE_BBP_IO_READ8_BY_REG_ID(pAd, BBP_R3, &BbpValue);
++ BbpValue &= 0xE4;
++ BbpValue |= 0x00;
++ ATE_BBP_IO_WRITE8_BY_REG_ID(pAd, BBP_R3, BbpValue);
++ break;
++ case 2:
++ R2 |= 0x10040;
++ ATE_BBP_IO_READ8_BY_REG_ID(pAd, BBP_R3, &BbpValue);
++ BbpValue &= 0xE4;
++ BbpValue |= 0x01;
++ ATE_BBP_IO_WRITE8_BY_REG_ID(pAd, BBP_R3, BbpValue);
++ break;
++ default:
++ R2 |= 0x40;
++ ATE_BBP_IO_READ8_BY_REG_ID(pAd, BBP_R3, &BbpValue);
++ BbpValue &= 0xE4;
++ /* Only enable two Antenna to receive. */
++ BbpValue |= 0x08;
++ ATE_BBP_IO_WRITE8_BY_REG_ID(pAd, BBP_R3, BbpValue);
++ break;
++ }
++ }
++ else if (pAd->Antenna.field.RxPath == 1)
++ {
++ R2 |= 0x20040; // write 1 to off RxPath
++ }
++
++ if (pAd->Antenna.field.TxPath == 2)
++ {
++ if (pAd->ate.TxAntennaSel == 1)
++ {
++ R2 |= 0x4000; // If TX Antenna select is 1 , bit 14 = 1; Disable Ant 2
++ ATE_BBP_IO_READ8_BY_REG_ID(pAd, BBP_R1, &BbpValue);
++ BbpValue &= 0xE7; //11100111B
++ ATE_BBP_IO_WRITE8_BY_REG_ID(pAd, BBP_R1, BbpValue);
++ }
++ else if (pAd->ate.TxAntennaSel == 2)
++ {
++ R2 |= 0x8000; // If TX Antenna select is 2 , bit 15 = 1; Disable Ant 1
++ ATE_BBP_IO_READ8_BY_REG_ID(pAd, BBP_R1, &BbpValue);
++ BbpValue &= 0xE7;
++ BbpValue |= 0x08;
++ ATE_BBP_IO_WRITE8_BY_REG_ID(pAd, BBP_R1, BbpValue);
++ }
++ else
++ {
++ ATE_BBP_IO_READ8_BY_REG_ID(pAd, BBP_R1, &BbpValue);
++ BbpValue &= 0xE7;
++ BbpValue |= 0x10;
++ ATE_BBP_IO_WRITE8_BY_REG_ID(pAd, BBP_R1, BbpValue);
++ }
++ }
++ if (pAd->Antenna.field.RxPath == 3)
++ {
++ switch (pAd->ate.RxAntennaSel)
++ {
++ case 1:
++ R2 |= 0x20040;
++ ATE_BBP_IO_READ8_BY_REG_ID(pAd, BBP_R3, &BbpValue);
++ BbpValue &= 0xE4;
++ BbpValue |= 0x00;
++ ATE_BBP_IO_WRITE8_BY_REG_ID(pAd, BBP_R3, BbpValue);
++ break;
++ case 2:
++ R2 |= 0x10040;
++ ATE_BBP_IO_READ8_BY_REG_ID(pAd, BBP_R3, &BbpValue);
++ BbpValue &= 0xE4;
++ BbpValue |= 0x01;
++ ATE_BBP_IO_WRITE8_BY_REG_ID(pAd, BBP_R3, BbpValue);
++ break;
++ case 3:
++ R2 |= 0x30000;
++ ATE_BBP_IO_READ8_BY_REG_ID(pAd, BBP_R3, &BbpValue);
++ BbpValue &= 0xE4;
++ BbpValue |= 0x02;
++ ATE_BBP_IO_WRITE8_BY_REG_ID(pAd, BBP_R3, BbpValue);
++ break;
++ default:
++ ATE_BBP_IO_READ8_BY_REG_ID(pAd, BBP_R3, &BbpValue);
++ BbpValue &= 0xE4;
++ BbpValue |= 0x10;
++ ATE_BBP_IO_WRITE8_BY_REG_ID(pAd, BBP_R3, BbpValue);
++ break;
++ }
++ }
++
++ if (Channel > 14)
++ {
++ // initialize R3, R4
++ R3 = (RFRegTable[index].R3 & 0xffffc1ff);
++ R4 = (RFRegTable[index].R4 & (~0x001f87c0)) | (pAd->ate.RFFreqOffset << 15);
++
++ // According the Rory's suggestion to solve the middle range issue.
++ // 5.5G band power range: 0xF9~0X0F, TX0 Reg3 bit9/TX1 Reg4 bit6="0" means the TX power reduce 7dB
++ // R3
++ if ((TxPwer >= -7) && (TxPwer < 0))
++ {
++ TxPwer = (7+TxPwer);
++ TxPwer = (TxPwer > 0xF) ? (0xF) : (TxPwer);
++ R3 |= (TxPwer << 10);
++ ATEDBGPRINT(RT_DEBUG_TRACE, ("ATEAsicSwitchChannel: TxPwer=%d \n", TxPwer));
++ }
++ else
++ {
++ TxPwer = (TxPwer > 0xF) ? (0xF) : (TxPwer);
++ R3 |= (TxPwer << 10) | (1 << 9);
++ }
++
++ // R4
++ if ((TxPwer2 >= -7) && (TxPwer2 < 0))
++ {
++ TxPwer2 = (7+TxPwer2);
++ TxPwer2 = (TxPwer2 > 0xF) ? (0xF) : (TxPwer2);
++ R4 |= (TxPwer2 << 7);
++ ATEDBGPRINT(RT_DEBUG_TRACE, ("ATEAsicSwitchChannel: TxPwer2=%d \n", TxPwer2));
++ }
++ else
++ {
++ TxPwer2 = (TxPwer2 > 0xF) ? (0xF) : (TxPwer2);
++ R4 |= (TxPwer2 << 7) | (1 << 6);
++ }
++ }
++ else
++ {
++ R3 = (RFRegTable[index].R3 & 0xffffc1ff) | (TxPwer << 9); // set TX power0
++ R4 = (RFRegTable[index].R4 & (~0x001f87c0)) | (pAd->ate.RFFreqOffset << 15) | (TxPwer2 <<6);// Set freq offset & TxPwr1
++ }
++
++ // Based on BBP current mode before changing RF channel.
++ if (pAd->ate.TxWI.BW == BW_40)
++ {
++ R4 |=0x200000;
++ }
++
++ // Update variables
++ pAd->LatchRfRegs.Channel = Channel;
++ pAd->LatchRfRegs.R1 = RFRegTable[index].R1;
++ pAd->LatchRfRegs.R2 = R2;
++ pAd->LatchRfRegs.R3 = R3;
++ pAd->LatchRfRegs.R4 = R4;
++
++ RtmpRfIoWrite(pAd);
++
++ break;
++ }
++ }
++ break;
++
++ default:
++ break;
++ }
++
++ // Change BBP setting during switch from a->g, g->a
++ if (Channel <= 14)
++ {
++ ULONG TxPinCfg = 0x00050F0A;// 2007.10.09 by Brian : 0x0005050A ==> 0x00050F0A
++
++ ATE_BBP_IO_WRITE8_BY_REG_ID(pAd, BBP_R62, (0x37 - GET_LNA_GAIN(pAd)));
++ ATE_BBP_IO_WRITE8_BY_REG_ID(pAd, BBP_R63, (0x37 - GET_LNA_GAIN(pAd)));
++ ATE_BBP_IO_WRITE8_BY_REG_ID(pAd, BBP_R64, (0x37 - GET_LNA_GAIN(pAd)));
++
++ /* For 1T/2R chip only... */
++ if (pAd->NicConfig2.field.ExternalLNAForG)
++ {
++ ATE_BBP_IO_WRITE8_BY_REG_ID(pAd, BBP_R82, 0x62);
++ }
++ else
++ {
++ ATE_BBP_IO_WRITE8_BY_REG_ID(pAd, BBP_R82, 0x84);
++ }
++
++ // According the Rory's suggestion to solve the middle range issue.
++ ATE_BBP_IO_READ8_BY_REG_ID(pAd, BBP_R86, &BbpValue);
++ ASSERT((BbpValue == 0x00));
++ if ((BbpValue != 0x00))
++ {
++ ATE_BBP_IO_WRITE8_BY_REG_ID(pAd, BBP_R86, 0x00);
++ }
++
++ // 5.5GHz band selection PIN, bit1 and bit2 are complement
++ RTMP_IO_READ32(pAd, TX_BAND_CFG, &Value);
++ Value &= (~0x6);
++ Value |= (0x04);
++ RTMP_IO_WRITE32(pAd, TX_BAND_CFG, Value);
++
++ // Turn off unused PA or LNA when only 1T or 1R.
++ if (pAd->Antenna.field.TxPath == 1)
++ {
++ TxPinCfg &= 0xFFFFFFF3;
++ }
++ if (pAd->Antenna.field.RxPath == 1)
++ {
++ TxPinCfg &= 0xFFFFF3FF;
++ }
++
++ RTMP_IO_WRITE32(pAd, TX_PIN_CFG, TxPinCfg);
++ }
++ else
++ {
++ ULONG TxPinCfg = 0x00050F05;//2007.10.09 by Brian : 0x00050505 ==> 0x00050F05
++
++ ATE_BBP_IO_WRITE8_BY_REG_ID(pAd, BBP_R62, (0x37 - GET_LNA_GAIN(pAd)));
++ ATE_BBP_IO_WRITE8_BY_REG_ID(pAd, BBP_R63, (0x37 - GET_LNA_GAIN(pAd)));
++ ATE_BBP_IO_WRITE8_BY_REG_ID(pAd, BBP_R64, (0x37 - GET_LNA_GAIN(pAd)));
++ ATE_BBP_IO_WRITE8_BY_REG_ID(pAd, BBP_R82, 0xF2);
++
++ // According the Rory's suggestion to solve the middle range issue.
++ ATE_BBP_IO_READ8_BY_REG_ID(pAd, BBP_R86, &BbpValue);
++ ASSERT((BbpValue == 0x00));
++ if ((BbpValue != 0x00))
++ {
++ ATE_BBP_IO_WRITE8_BY_REG_ID(pAd, BBP_R86, 0x00);
++ }
++ ATE_BBP_IO_READ8_BY_REG_ID(pAd, BBP_R91, &BbpValue);
++ ASSERT((BbpValue == 0x04));
++
++ ATE_BBP_IO_READ8_BY_REG_ID(pAd, BBP_R92, &BbpValue);
++ ASSERT((BbpValue == 0x00));
++
++ // 5.5GHz band selection PIN, bit1 and bit2 are complement
++ RTMP_IO_READ32(pAd, TX_BAND_CFG, &Value);
++ Value &= (~0x6);
++ Value |= (0x02);
++ RTMP_IO_WRITE32(pAd, TX_BAND_CFG, Value);
++
++ // Turn off unused PA or LNA when only 1T or 1R.
++ if (pAd->Antenna.field.TxPath == 1)
++ {
++ TxPinCfg &= 0xFFFFFFF3;
++ }
++ if (pAd->Antenna.field.RxPath == 1)
++ {
++ TxPinCfg &= 0xFFFFF3FF;
++ }
++
++ RTMP_IO_WRITE32(pAd, TX_PIN_CFG, TxPinCfg);
++ }
++
++ // R66 should be set according to Channel and use 20MHz when scanning
++ if (Channel <= 14)
++ {
++ // BG band
++ R66 = 0x2E + GET_LNA_GAIN(pAd);
++ ATE_BBP_IO_WRITE8_BY_REG_ID(pAd, BBP_R66, R66);
++ }
++ else
++ {
++ // 5.5 GHz band
++ if (pAd->ate.TxWI.BW == BW_20)
++ {
++ R66 = (UCHAR)(0x32 + (GET_LNA_GAIN(pAd)*5)/3);
++ ATE_BBP_IO_WRITE8_BY_REG_ID(pAd, BBP_R66, R66);
++ }
++ else
++ {
++ R66 = (UCHAR)(0x3A + (GET_LNA_GAIN(pAd)*5)/3);
++ ATE_BBP_IO_WRITE8_BY_REG_ID(pAd, BBP_R66, R66);
++ }
++ }
++
++ //
++ // On 11A, We should delay and wait RF/BBP to be stable
++ // and the appropriate time should be 1000 micro seconds
++ // 2005/06/05 - On 11G, We also need this delay time. Otherwise it's difficult to pass the WHQL.
++ //
++ RTMPusecDelay(1000);
++
++ if (Channel > 14)
++ {
++ // When 5.5GHz band the LSB of TxPwr will be used to reduced 7dB or not.
++ ATEDBGPRINT(RT_DEBUG_TRACE, ("SwitchChannel#%d(RF=%d, %dT) to , R1=0x%08lx, R2=0x%08lx, R3=0x%08lx, R4=0x%08lx\n",
++ Channel,
++ pAd->RfIcType,
++ pAd->Antenna.field.TxPath,
++ pAd->LatchRfRegs.R1,
++ pAd->LatchRfRegs.R2,
++ pAd->LatchRfRegs.R3,
++ pAd->LatchRfRegs.R4));
++ }
++ else
++ {
++ ATEDBGPRINT(RT_DEBUG_TRACE, ("SwitchChannel#%d(RF=%d, Pwr0=%u, Pwr1=%u, %dT) to , R1=0x%08lx, R2=0x%08lx, R3=0x%08lx, R4=0x%08lx\n",
++ Channel,
++ pAd->RfIcType,
++ (R3 & 0x00003e00) >> 9,
++ (R4 & 0x000007c0) >> 6,
++ pAd->Antenna.field.TxPath,
++ pAd->LatchRfRegs.R1,
++ pAd->LatchRfRegs.R2,
++ pAd->LatchRfRegs.R3,
++ pAd->LatchRfRegs.R4));
++ }
++}
++
++//
++// In fact, no one will call this routine so far !
++//
++/*
++ ==========================================================================
++ Description:
++ Gives CCK TX rate 2 more dB TX power.
++ This routine works only in ATE mode.
++
++ calculate desired Tx power in RF R3.Tx0~5, should consider -
++ 0. if current radio is a noisy environment (pAd->DrsCounters.fNoisyEnvironment)
++ 1. TxPowerPercentage
++ 2. auto calibration based on TSSI feedback
++ 3. extra 2 db for CCK
++ 4. -10 db upon very-short distance (AvgRSSI >= -40db) to AP
++
++ NOTE: Since this routine requires the value of (pAd->DrsCounters.fNoisyEnvironment),
++ it should be called AFTER MlmeDynamicTxRateSwitching()
++ ==========================================================================
++ */
++VOID ATEAsicAdjustTxPower(
++ IN PRTMP_ADAPTER pAd)
++{
++ INT i, j;
++ CHAR DeltaPwr = 0;
++ BOOLEAN bAutoTxAgc = FALSE;
++ UCHAR TssiRef, *pTssiMinusBoundary, *pTssiPlusBoundary, TxAgcStep;
++ UCHAR BbpR49 = 0, idx;
++ PCHAR pTxAgcCompensate;
++ ULONG TxPwr[5];
++ CHAR Value;
++
++ /* no one calls this procedure so far */
++ if (pAd->ate.TxWI.BW == BW_40)
++ {
++ if (pAd->ate.Channel > 14)
++ {
++ TxPwr[0] = pAd->Tx40MPwrCfgABand[0];
++ TxPwr[1] = pAd->Tx40MPwrCfgABand[1];
++ TxPwr[2] = pAd->Tx40MPwrCfgABand[2];
++ TxPwr[3] = pAd->Tx40MPwrCfgABand[3];
++ TxPwr[4] = pAd->Tx40MPwrCfgABand[4];
++ }
++ else
++ {
++ TxPwr[0] = pAd->Tx40MPwrCfgGBand[0];
++ TxPwr[1] = pAd->Tx40MPwrCfgGBand[1];
++ TxPwr[2] = pAd->Tx40MPwrCfgGBand[2];
++ TxPwr[3] = pAd->Tx40MPwrCfgGBand[3];
++ TxPwr[4] = pAd->Tx40MPwrCfgGBand[4];
++ }
++ }
++ else
++ {
++ if (pAd->ate.Channel > 14)
++ {
++ TxPwr[0] = pAd->Tx20MPwrCfgABand[0];
++ TxPwr[1] = pAd->Tx20MPwrCfgABand[1];
++ TxPwr[2] = pAd->Tx20MPwrCfgABand[2];
++ TxPwr[3] = pAd->Tx20MPwrCfgABand[3];
++ TxPwr[4] = pAd->Tx20MPwrCfgABand[4];
++ }
++ else
++ {
++ TxPwr[0] = pAd->Tx20MPwrCfgGBand[0];
++ TxPwr[1] = pAd->Tx20MPwrCfgGBand[1];
++ TxPwr[2] = pAd->Tx20MPwrCfgGBand[2];
++ TxPwr[3] = pAd->Tx20MPwrCfgGBand[3];
++ TxPwr[4] = pAd->Tx20MPwrCfgGBand[4];
++ }
++ }
++
++ // TX power compensation for temperature variation based on TSSI.
++ // Do it per 4 seconds.
++ if (pAd->Mlme.OneSecPeriodicRound % 4 == 0)
++ {
++ if (pAd->ate.Channel <= 14)
++ {
++ /* bg channel */
++ bAutoTxAgc = pAd->bAutoTxAgcG;
++ TssiRef = pAd->TssiRefG;
++ pTssiMinusBoundary = &pAd->TssiMinusBoundaryG[0];
++ pTssiPlusBoundary = &pAd->TssiPlusBoundaryG[0];
++ TxAgcStep = pAd->TxAgcStepG;
++ pTxAgcCompensate = &pAd->TxAgcCompensateG;
++ }
++ else
++ {
++ /* a channel */
++ bAutoTxAgc = pAd->bAutoTxAgcA;
++ TssiRef = pAd->TssiRefA;
++ pTssiMinusBoundary = &pAd->TssiMinusBoundaryA[0];
++ pTssiPlusBoundary = &pAd->TssiPlusBoundaryA[0];
++ TxAgcStep = pAd->TxAgcStepA;
++ pTxAgcCompensate = &pAd->TxAgcCompensateA;
++ }
++
++ if (bAutoTxAgc)
++ {
++ /* BbpR49 is unsigned char */
++ ATE_BBP_IO_READ8_BY_REG_ID(pAd, BBP_R49, &BbpR49);
++
++ /* (p) TssiPlusBoundaryG[0] = 0 = (m) TssiMinusBoundaryG[0] */
++ /* compensate: +4 +3 +2 +1 0 -1 -2 -3 -4 * steps */
++ /* step value is defined in pAd->TxAgcStepG for tx power value */
++
++ /* [4]+1+[4] p4 p3 p2 p1 o1 m1 m2 m3 m4 */
++ /* ex: 0x00 0x15 0x25 0x45 0x88 0xA0 0xB5 0xD0 0xF0
++ above value are examined in mass factory production */
++ /* [4] [3] [2] [1] [0] [1] [2] [3] [4] */
++
++ /* plus is 0x10 ~ 0x40, minus is 0x60 ~ 0x90 */
++ /* if value is between p1 ~ o1 or o1 ~ s1, no need to adjust tx power */
++ /* if value is 0x65, tx power will be -= TxAgcStep*(2-1) */
++
++ if (BbpR49 > pTssiMinusBoundary[1])
++ {
++ // Reading is larger than the reference value.
++ // Check for how large we need to decrease the Tx power.
++ for (idx = 1; idx < 5; idx++)
++ {
++ if (BbpR49 <= pTssiMinusBoundary[idx]) // Found the range
++ break;
++ }
++ // The index is the step we should decrease, idx = 0 means there is nothing to compensate
++// if (R3 > (ULONG) (TxAgcStep * (idx-1)))
++ *pTxAgcCompensate = -(TxAgcStep * (idx-1));
++// else
++// *pTxAgcCompensate = -((UCHAR)R3);
++
++ DeltaPwr += (*pTxAgcCompensate);
++ ATEDBGPRINT(RT_DEBUG_TRACE, ("-- Tx Power, BBP R1=%x, TssiRef=%x, TxAgcStep=%x, step = -%d\n",
++ BbpR49, TssiRef, TxAgcStep, idx-1));
++ }
++ else if (BbpR49 < pTssiPlusBoundary[1])
++ {
++ // Reading is smaller than the reference value
++ // check for how large we need to increase the Tx power
++ for (idx = 1; idx < 5; idx++)
++ {
++ if (BbpR49 >= pTssiPlusBoundary[idx]) // Found the range
++ break;
++ }
++ // The index is the step we should increase, idx = 0 means there is nothing to compensate
++ *pTxAgcCompensate = TxAgcStep * (idx-1);
++ DeltaPwr += (*pTxAgcCompensate);
++ ATEDBGPRINT(RT_DEBUG_TRACE, ("++ Tx Power, BBP R1=%x, TssiRef=%x, TxAgcStep=%x, step = +%d\n",
++ BbpR49, TssiRef, TxAgcStep, idx-1));
++ }
++ else
++ {
++ *pTxAgcCompensate = 0;
++ ATEDBGPRINT(RT_DEBUG_TRACE, (" Tx Power, BBP R1=%x, TssiRef=%x, TxAgcStep=%x, step = +%d\n",
++ BbpR49, TssiRef, TxAgcStep, 0));
++ }
++ }
++ }
++ else
++ {
++ if (pAd->ate.Channel <= 14)
++ {
++ bAutoTxAgc = pAd->bAutoTxAgcG;
++ pTxAgcCompensate = &pAd->TxAgcCompensateG;
++ }
++ else
++ {
++ bAutoTxAgc = pAd->bAutoTxAgcA;
++ pTxAgcCompensate = &pAd->TxAgcCompensateA;
++ }
++
++ if (bAutoTxAgc)
++ DeltaPwr += (*pTxAgcCompensate);
++ }
++
++ /* calculate delta power based on the percentage specified from UI */
++ // E2PROM setting is calibrated for maximum TX power (i.e. 100%)
++ // We lower TX power here according to the percentage specified from UI
++ if (pAd->CommonCfg.TxPowerPercentage == 0xffffffff) // AUTO TX POWER control
++ ;
++ else if (pAd->CommonCfg.TxPowerPercentage > 90) // 91 ~ 100% & AUTO, treat as 100% in terms of mW
++ ;
++ else if (pAd->CommonCfg.TxPowerPercentage > 60) // 61 ~ 90%, treat as 75% in terms of mW
++ {
++ DeltaPwr -= 1;
++ }
++ else if (pAd->CommonCfg.TxPowerPercentage > 30) // 31 ~ 60%, treat as 50% in terms of mW
++ {
++ DeltaPwr -= 3;
++ }
++ else if (pAd->CommonCfg.TxPowerPercentage > 15) // 16 ~ 30%, treat as 25% in terms of mW
++ {
++ DeltaPwr -= 6;
++ }
++ else if (pAd->CommonCfg.TxPowerPercentage > 9) // 10 ~ 15%, treat as 12.5% in terms of mW
++ {
++ DeltaPwr -= 9;
++ }
++ else // 0 ~ 9 %, treat as MIN(~3%) in terms of mW
++ {
++ DeltaPwr -= 12;
++ }
++
++ /* reset different new tx power for different TX rate */
++ for(i=0; i<5; i++)
++ {
++ if (TxPwr[i] != 0xffffffff)
++ {
++ for (j=0; j<8; j++)
++ {
++ Value = (CHAR)((TxPwr[i] >> j*4) & 0x0F); /* 0 ~ 15 */
++
++ if ((Value + DeltaPwr) < 0)
++ {
++ Value = 0; /* min */
++ }
++ else if ((Value + DeltaPwr) > 0xF)
++ {
++ Value = 0xF; /* max */
++ }
++ else
++ {
++ Value += DeltaPwr; /* temperature compensation */
++ }
++
++ /* fill new value to CSR offset */
++ TxPwr[i] = (TxPwr[i] & ~(0x0000000F << j*4)) | (Value << j*4);
++ }
++
++ /* write tx power value to CSR */
++ /* TX_PWR_CFG_0 (8 tx rate) for TX power for OFDM 12M/18M
++ TX power for OFDM 6M/9M
++ TX power for CCK5.5M/11M
++ TX power for CCK1M/2M */
++ /* TX_PWR_CFG_1 ~ TX_PWR_CFG_4 */
++ RTMP_IO_WRITE32(pAd, TX_PWR_CFG_0 + i*4, TxPwr[i]);
++
++
++ }
++ }
++
++}
++
++/*
++ ========================================================================
++ Routine Description:
++ Write TxWI for ATE mode.
++
++ Return Value:
++ None
++ ========================================================================
++*/
++
++#ifdef RT2870
++static VOID ATEWriteTxWI(
++ IN PRTMP_ADAPTER pAd,
++ IN PTXWI_STRUC pTxWI,
++ IN BOOLEAN FRAG,
++ IN BOOLEAN InsTimestamp,
++ IN BOOLEAN AMPDU,
++ IN BOOLEAN Ack,
++ IN BOOLEAN NSeq, // HW new a sequence.
++ IN UCHAR BASize,
++ IN UCHAR WCID,
++ IN ULONG Length,
++ IN UCHAR PID,
++ IN UCHAR MIMOps,
++ IN UCHAR Txopmode,
++ IN BOOLEAN CfAck,
++ IN HTTRANSMIT_SETTING Transmit)
++{
++ //
++ // Always use Long preamble before verifiation short preamble functionality works well.
++ // Todo: remove the following line if short preamble functionality works
++ //
++ OPSTATUS_CLEAR_FLAG(pAd, fOP_STATUS_SHORT_PREAMBLE_INUSED);
++ pTxWI->FRAG= FRAG;
++ pTxWI->TS= InsTimestamp;
++ pTxWI->AMPDU = AMPDU;
++
++ pTxWI->MIMOps = PWR_ACTIVE;
++ pTxWI->MpduDensity = 4;
++ pTxWI->ACK = Ack;
++ pTxWI->txop = Txopmode;
++ pTxWI->NSEQ = NSeq;
++ pTxWI->BAWinSize = BASize;
++
++ pTxWI->WirelessCliID = WCID;
++ pTxWI->MPDUtotalByteCount = Length;
++ pTxWI->PacketId = PID;
++
++ pTxWI->BW = Transmit.field.BW;
++ pTxWI->ShortGI = Transmit.field.ShortGI;
++ pTxWI->STBC= Transmit.field.STBC;
++
++ pTxWI->MCS = Transmit.field.MCS;
++ pTxWI->PHYMODE= Transmit.field.MODE;
++
++#ifdef DOT11_N_SUPPORT
++ //
++ // MMPS is 802.11n features. Because TxWI->MCS > 7 must be HT mode,
++ // so need not check if it's HT rate.
++ //
++ if ((MIMOps == MMPS_STATIC) && (pTxWI->MCS > 7))
++ pTxWI->MCS = 7;
++
++ if ((MIMOps == MMPS_DYNAMIC) && (pTxWI->MCS > 7)) // SMPS protect 2 spatial.
++ pTxWI->MIMOps = 1;
++#endif // DOT11_N_SUPPORT //
++
++ pTxWI->CFACK = CfAck;
++
++ return;
++}
++#endif // RT2870 //
++/*
++ ========================================================================
++
++ Routine Description:
++ Disable protection for ATE.
++ ========================================================================
++*/
++VOID ATEDisableAsicProtect(
++ IN PRTMP_ADAPTER pAd)
++{
++ PROT_CFG_STRUC ProtCfg, ProtCfg4;
++ UINT32 Protect[6];
++ USHORT offset;
++ UCHAR i;
++ UINT32 MacReg = 0;
++
++ // Config ASIC RTS threshold register
++ RTMP_IO_READ32(pAd, TX_RTS_CFG, &MacReg);
++ MacReg &= 0xFF0000FF;
++ MacReg |= (pAd->CommonCfg.RtsThreshold << 8);
++ RTMP_IO_WRITE32(pAd, TX_RTS_CFG, MacReg);
++
++ // Initial common protection settings
++ RTMPZeroMemory(Protect, sizeof(Protect));
++ ProtCfg4.word = 0;
++ ProtCfg.word = 0;
++ ProtCfg.field.TxopAllowGF40 = 1;
++ ProtCfg.field.TxopAllowGF20 = 1;
++ ProtCfg.field.TxopAllowMM40 = 1;
++ ProtCfg.field.TxopAllowMM20 = 1;
++ ProtCfg.field.TxopAllowOfdm = 1;
++ ProtCfg.field.TxopAllowCck = 1;
++ ProtCfg.field.RTSThEn = 1;
++ ProtCfg.field.ProtectNav = ASIC_SHORTNAV;
++
++ // Handle legacy(B/G) protection
++ ProtCfg.field.ProtectRate = pAd->CommonCfg.RtsRate;
++ ProtCfg.field.ProtectCtrl = 0;
++ Protect[0] = ProtCfg.word;
++ Protect[1] = ProtCfg.word;
++
++ // NO PROTECT
++ // 1.All STAs in the BSS are 20/40 MHz HT
++ // 2. in ai 20/40MHz BSS
++ // 3. all STAs are 20MHz in a 20MHz BSS
++ // Pure HT. no protection.
++
++ // MM20_PROT_CFG
++ // Reserved (31:27)
++ // PROT_TXOP(25:20) -- 010111
++ // PROT_NAV(19:18) -- 01 (Short NAV protection)
++ // PROT_CTRL(17:16) -- 00 (None)
++ // PROT_RATE(15:0) -- 0x4004 (OFDM 24M)
++ Protect[2] = 0x01744004;
++
++ // MM40_PROT_CFG
++ // Reserved (31:27)
++ // PROT_TXOP(25:20) -- 111111
++ // PROT_NAV(19:18) -- 01 (Short NAV protection)
++ // PROT_CTRL(17:16) -- 00 (None)
++ // PROT_RATE(15:0) -- 0x4084 (duplicate OFDM 24M)
++ Protect[3] = 0x03f44084;
++
++ // CF20_PROT_CFG
++ // Reserved (31:27)
++ // PROT_TXOP(25:20) -- 010111
++ // PROT_NAV(19:18) -- 01 (Short NAV protection)
++ // PROT_CTRL(17:16) -- 00 (None)
++ // PROT_RATE(15:0) -- 0x4004 (OFDM 24M)
++ Protect[4] = 0x01744004;
++
++ // CF40_PROT_CFG
++ // Reserved (31:27)
++ // PROT_TXOP(25:20) -- 111111
++ // PROT_NAV(19:18) -- 01 (Short NAV protection)
++ // PROT_CTRL(17:16) -- 00 (None)
++ // PROT_RATE(15:0) -- 0x4084 (duplicate OFDM 24M)
++ Protect[5] = 0x03f44084;
++
++ pAd->CommonCfg.IOTestParm.bRTSLongProtOn = FALSE;
++
++ offset = CCK_PROT_CFG;
++ for (i = 0;i < 6;i++)
++ RTMP_IO_WRITE32(pAd, offset + i*4, Protect[i]);
++
++}
++
++#ifdef RT2870
++/*
++ ========================================================================
++ Routine Description:
++ Write TxInfo for ATE mode.
++
++ Return Value:
++ None
++ ========================================================================
++*/
++static VOID ATEWriteTxInfo(
++ IN PRTMP_ADAPTER pAd,
++ IN PTXINFO_STRUC pTxInfo,
++ IN USHORT USBDMApktLen,
++ IN BOOLEAN bWiv,
++ IN UCHAR QueueSel,
++ IN UCHAR NextValid,
++ IN UCHAR TxBurst)
++{
++ pTxInfo->USBDMATxPktLen = USBDMApktLen;
++ pTxInfo->QSEL = QueueSel;
++
++ if (QueueSel != FIFO_EDCA)
++ ATEDBGPRINT(RT_DEBUG_TRACE, ("=======> QueueSel != FIFO_EDCA<=======\n"));
++
++ pTxInfo->USBDMANextVLD = NextValid;
++ pTxInfo->USBDMATxburst = TxBurst;
++ pTxInfo->WIV = bWiv;
++ pTxInfo->SwUseLastRound = 0;
++ pTxInfo->rsv = 0;
++ pTxInfo->rsv2 = 0;
++
++ return;
++}
++#endif // RT2870 //
++
++/* There are two ways to convert Rssi */
++#if 1
++//
++// The way used with GET_LNA_GAIN().
++//
++CHAR ATEConvertToRssi(
++ IN PRTMP_ADAPTER pAd,
++ IN CHAR Rssi,
++ IN UCHAR RssiNumber)
++{
++ UCHAR RssiOffset, LNAGain;
++
++ // Rssi equals to zero should be an invalid value
++ if (Rssi == 0)
++ return -99;
++
++ LNAGain = GET_LNA_GAIN(pAd);
++ if (pAd->LatchRfRegs.Channel > 14)
++ {
++ if (RssiNumber == 0)
++ RssiOffset = pAd->ARssiOffset0;
++ else if (RssiNumber == 1)
++ RssiOffset = pAd->ARssiOffset1;
++ else
++ RssiOffset = pAd->ARssiOffset2;
++ }
++ else
++ {
++ if (RssiNumber == 0)
++ RssiOffset = pAd->BGRssiOffset0;
++ else if (RssiNumber == 1)
++ RssiOffset = pAd->BGRssiOffset1;
++ else
++ RssiOffset = pAd->BGRssiOffset2;
++ }
++
++ return (-12 - RssiOffset - LNAGain - Rssi);
++}
++#else
++//
++// The way originally used in ATE of rt2860ap.
++//
++CHAR ATEConvertToRssi(
++ IN PRTMP_ADAPTER pAd,
++ IN CHAR Rssi,
++ IN UCHAR RssiNumber)
++{
++ UCHAR RssiOffset, LNAGain;
++
++ // Rssi equals to zero should be an invalid value
++ if (Rssi == 0)
++ return -99;
++
++ if (pAd->LatchRfRegs.Channel > 14)
++ {
++ LNAGain = pAd->ALNAGain;
++ if (RssiNumber == 0)
++ RssiOffset = pAd->ARssiOffset0;
++ else if (RssiNumber == 1)
++ RssiOffset = pAd->ARssiOffset1;
++ else
++ RssiOffset = pAd->ARssiOffset2;
++ }
++ else
++ {
++ LNAGain = pAd->BLNAGain;
++ if (RssiNumber == 0)
++ RssiOffset = pAd->BGRssiOffset0;
++ else if (RssiNumber == 1)
++ RssiOffset = pAd->BGRssiOffset1;
++ else
++ RssiOffset = pAd->BGRssiOffset2;
++ }
++
++ return (-32 - RssiOffset + LNAGain - Rssi);
++}
++#endif /* end of #if 1 */
++
++/*
++ ========================================================================
++
++ Routine Description:
++ Set Japan filter coefficients if needed.
++ Note:
++ This routine should only be called when
++ entering TXFRAME mode or TXCONT mode.
++
++ ========================================================================
++*/
++static VOID SetJapanFilter(
++ IN PRTMP_ADAPTER pAd)
++{
++ UCHAR BbpData = 0;
++
++ //
++ // If Channel=14 and Bandwidth=20M and Mode=CCK, set BBP R4 bit5=1
++ // (Japan Tx filter coefficients)when (TXFRAME or TXCONT).
++ //
++ ATE_BBP_IO_READ8_BY_REG_ID(pAd, BBP_R4, &BbpData);
++
++ if ((pAd->ate.TxWI.PHYMODE == MODE_CCK) && (pAd->ate.Channel == 14) && (pAd->ate.TxWI.BW == BW_20))
++ {
++ BbpData |= 0x20; // turn on
++ ATEDBGPRINT(RT_DEBUG_TRACE, ("SetJapanFilter!!!\n"));
++ }
++ else
++ {
++ BbpData &= 0xdf; // turn off
++ ATEDBGPRINT(RT_DEBUG_TRACE, ("ClearJapanFilter!!!\n"));
++ }
++
++ ATE_BBP_IO_WRITE8_BY_REG_ID(pAd, BBP_R4, BbpData);
++}
++
++VOID ATESampleRssi(
++ IN PRTMP_ADAPTER pAd,
++ IN PRXWI_STRUC pRxWI)
++{
++ /* There are two ways to collect RSSI. */
++#if 1
++ //pAd->LastRxRate = (USHORT)((pRxWI->MCS) + (pRxWI->BW <<7) + (pRxWI->ShortGI <<8)+ (pRxWI->PHYMODE <<14)) ;
++ if (pRxWI->RSSI0 != 0)
++ {
++ pAd->ate.LastRssi0 = ATEConvertToRssi(pAd, (CHAR) pRxWI->RSSI0, RSSI_0);
++ pAd->ate.AvgRssi0X8 = (pAd->ate.AvgRssi0X8 - pAd->ate.AvgRssi0) + pAd->ate.LastRssi0;
++ pAd->ate.AvgRssi0 = pAd->ate.AvgRssi0X8 >> 3;
++ }
++ if (pRxWI->RSSI1 != 0)
++ {
++ pAd->ate.LastRssi1 = ATEConvertToRssi(pAd, (CHAR) pRxWI->RSSI1, RSSI_1);
++ pAd->ate.AvgRssi1X8 = (pAd->ate.AvgRssi1X8 - pAd->ate.AvgRssi1) + pAd->ate.LastRssi1;
++ pAd->ate.AvgRssi1 = pAd->ate.AvgRssi1X8 >> 3;
++ }
++ if (pRxWI->RSSI2 != 0)
++ {
++ pAd->ate.LastRssi2 = ATEConvertToRssi(pAd, (CHAR) pRxWI->RSSI2, RSSI_2);
++ pAd->ate.AvgRssi2X8 = (pAd->ate.AvgRssi2X8 - pAd->ate.AvgRssi2) + pAd->ate.LastRssi2;
++ pAd->ate.AvgRssi2 = pAd->ate.AvgRssi2X8 >> 3;
++ }
++
++ pAd->ate.LastSNR0 = (CHAR)(pRxWI->SNR0);// CHAR ==> UCHAR ?
++ pAd->ate.LastSNR1 = (CHAR)(pRxWI->SNR1);// CHAR ==> UCHAR ?
++
++ pAd->ate.NumOfAvgRssiSample ++;
++#else
++ pAd->ate.LastSNR0 = (CHAR)(pRxWI->SNR0);
++ pAd->ate.LastSNR1 = (CHAR)(pRxWI->SNR1);
++ pAd->ate.RxCntPerSec++;
++ pAd->ate.LastRssi0 = ATEConvertToRssi(pAd, (CHAR) pRxWI->RSSI0, RSSI_0);
++ pAd->ate.LastRssi1 = ATEConvertToRssi(pAd, (CHAR) pRxWI->RSSI1, RSSI_1);
++ pAd->ate.LastRssi2 = ATEConvertToRssi(pAd, (CHAR) pRxWI->RSSI2, RSSI_2);
++ pAd->ate.AvgRssi0X8 = (pAd->ate.AvgRssi0X8 - pAd->ate.AvgRssi0) + pAd->ate.LastRssi0;
++ pAd->ate.AvgRssi0 = pAd->ate.AvgRssi0X8 >> 3;
++ pAd->ate.AvgRssi1X8 = (pAd->ate.AvgRssi1X8 - pAd->ate.AvgRssi1) + pAd->ate.LastRssi1;
++ pAd->ate.AvgRssi1 = pAd->ate.AvgRssi1X8 >> 3;
++ pAd->ate.AvgRssi2X8 = (pAd->ate.AvgRssi2X8 - pAd->ate.AvgRssi2) + pAd->ate.LastRssi2;
++ pAd->ate.AvgRssi2 = pAd->ate.AvgRssi2X8 >> 3;
++ pAd->ate.NumOfAvgRssiSample ++;
++#endif
++}
++
++#ifdef CONFIG_STA_SUPPORT
++VOID RTMPStationStop(
++ IN PRTMP_ADAPTER pAd)
++{
++// BOOLEAN Cancelled;
++
++ ATEDBGPRINT(RT_DEBUG_TRACE, ("==> RTMPStationStop\n"));
++
++#if 0
++ RTMPCancelTimer(&pAd->MlmeAux.AssocTimer, &Cancelled);
++ RTMPCancelTimer(&pAd->MlmeAux.ReassocTimer, &Cancelled);
++ RTMPCancelTimer(&pAd->MlmeAux.DisassocTimer, &Cancelled);
++ RTMPCancelTimer(&pAd->MlmeAux.AuthTimer, &Cancelled);
++ RTMPCancelTimer(&pAd->MlmeAux.BeaconTimer, &Cancelled);
++ RTMPCancelTimer(&pAd->MlmeAux.ScanTimer, &Cancelled);
++#endif
++ // For rx statistics, we need to keep this timer running.
++// RTMPCancelTimer(&pAd->Mlme.PeriodicTimer, &Cancelled);
++
++ ATEDBGPRINT(RT_DEBUG_TRACE, ("<== RTMPStationStop\n"));
++}
++
++VOID RTMPStationStart(
++ IN PRTMP_ADAPTER pAd)
++{
++ ATEDBGPRINT(RT_DEBUG_TRACE, ("==> RTMPStationStart\n"));
++ ATEDBGPRINT(RT_DEBUG_TRACE, ("<== RTMPStationStart\n"));
++}
++#endif // CONFIG_STA_SUPPORT //
++
++/*
++ ==========================================================================
++ Description:
++ Setup Frame format.
++ NOTE:
++ This routine should only be used in ATE mode.
++ ==========================================================================
++ */
++
++#ifdef RT2870
++/*======================Start of RT2870======================*/
++/* */
++/* */
++static INT ATESetUpFrame(
++ IN PRTMP_ADAPTER pAd,
++ IN UINT32 TxIdx)
++{
++ UINT j;
++ PTX_CONTEXT pNullContext;
++ PUCHAR pDest;
++ HTTRANSMIT_SETTING TxHTPhyMode;
++ PTXWI_STRUC pTxWI;
++ PTXINFO_STRUC pTxInfo;
++ UINT32 TransferBufferLength, OrgBufferLength = 0;
++ UCHAR padLen = 0;
++#ifdef RALINK_28xx_QA
++ PHEADER_802_11 pHeader80211 = NULL;
++#endif // RALINK_28xx_QA //
++
++ if ((RTMP_TEST_FLAG(pAd, fRTMP_ADAPTER_RESET_IN_PROGRESS)) ||
++ (RTMP_TEST_FLAG(pAd, fRTMP_ADAPTER_BULKOUT_RESET)) ||
++ (RTMP_TEST_FLAG(pAd, fRTMP_ADAPTER_HALT_IN_PROGRESS)) ||
++ (RTMP_TEST_FLAG(pAd, fRTMP_ADAPTER_NIC_NOT_EXIST)))
++ {
++ return -1;
++ }
++
++ /* We always use QID_AC_BE and FIFO_EDCA in ATE mode. */
++
++ pNullContext = &(pAd->NullContext);
++ ASSERT(pNullContext != NULL);
++
++ if (pNullContext->InUse == FALSE)
++ {
++ // Set the in use bit
++ pNullContext->InUse = TRUE;
++ NdisZeroMemory(&(pAd->NullFrame), sizeof(HEADER_802_11));
++
++ // Fill 802.11 header.
++#ifdef RALINK_28xx_QA
++ if (pAd->ate.bQATxStart == TRUE)
++ {
++ pHeader80211 = NdisMoveMemory(&(pAd->NullFrame), pAd->ate.Header, pAd->ate.HLen);
++// pDest = NdisMoveMemory(&(pAd->NullFrame), pAd->ate.Header, pAd->ate.HLen);
++// pHeader80211 = (PHEADER_802_11)pDest;
++ }
++ else
++#endif // RALINK_28xx_QA //
++ {
++ // Fill 802.11 header.
++ NdisMoveMemory(&(pAd->NullFrame), TemplateFrame, sizeof(HEADER_802_11));
++ }
++#ifdef RT_BIG_ENDIAN
++ RTMPFrameEndianChange(pAd, (PUCHAR)&(pAd->NullFrame), DIR_READ, FALSE);
++#endif // RT_BIG_ENDIAN //
++
++#ifdef RALINK_28xx_QA
++ if (pAd->ate.bQATxStart == TRUE)
++ {
++ /* modify sequence number.... */
++ if (pAd->ate.TxDoneCount == 0)
++ {
++ pAd->ate.seq = pHeader80211->Sequence;
++ }
++ else
++ {
++ pHeader80211->Sequence = ++pAd->ate.seq;
++ }
++ /* We already got all the addr. fields from QA GUI. */
++ }
++ else
++#endif // RALINK_28xx_QA //
++ {
++ COPY_MAC_ADDR(pAd->NullFrame.Addr1, pAd->ate.Addr1);
++ COPY_MAC_ADDR(pAd->NullFrame.Addr2, pAd->ate.Addr2);
++ COPY_MAC_ADDR(pAd->NullFrame.Addr3, pAd->ate.Addr3);
++ }
++
++ RTMPZeroMemory(&pAd->NullContext.TransferBuffer->field.WirelessPacket[0], TX_BUFFER_NORMSIZE);//???
++ pTxInfo = (PTXINFO_STRUC)&pAd->NullContext.TransferBuffer->field.WirelessPacket[0];
++
++#ifdef RALINK_28xx_QA
++ if (pAd->ate.bQATxStart == TRUE)
++ {
++ // Avoid to exceed the range of WirelessPacket[].
++ ASSERT(pAd->ate.TxInfo.USBDMATxPktLen <= (MAX_FRAME_SIZE - 34/* == 2312 */));
++ NdisMoveMemory(pTxInfo, &(pAd->ate.TxInfo), sizeof(pAd->ate.TxInfo));
++ }
++ else
++#endif // RALINK_28xx_QA //
++ {
++ // Avoid to exceed the range of WirelessPacket[].
++ ASSERT(pAd->ate.TxLength <= (MAX_FRAME_SIZE - 34/* == 2312 */));
++
++ // pTxInfo->USBDMATxPktLen will be updated to include padding later.
++ ATEWriteTxInfo(pAd, pTxInfo, (USHORT)(TXWI_SIZE + pAd->ate.TxLength), TRUE, EpToQueue[MGMTPIPEIDX], FALSE, FALSE);
++ pTxInfo->QSEL = FIFO_EDCA;
++ }
++
++ pTxWI = (PTXWI_STRUC)&pAd->NullContext.TransferBuffer->field.WirelessPacket[TXINFO_SIZE];
++
++ // Fill TxWI.
++ if (pAd->ate.bQATxStart == TRUE)
++ {
++ TxHTPhyMode.field.BW = pAd->ate.TxWI.BW;
++ TxHTPhyMode.field.ShortGI = pAd->ate.TxWI.ShortGI;
++ TxHTPhyMode.field.STBC = pAd->ate.TxWI.STBC;
++ TxHTPhyMode.field.MCS = pAd->ate.TxWI.MCS;
++ TxHTPhyMode.field.MODE = pAd->ate.TxWI.PHYMODE;
++ ATEWriteTxWI(pAd, pTxWI, pAd->ate.TxWI.FRAG, pAd->ate.TxWI.TS, pAd->ate.TxWI.AMPDU, pAd->ate.TxWI.ACK, pAd->ate.TxWI.NSEQ,
++ pAd->ate.TxWI.BAWinSize, BSSID_WCID, pAd->ate.TxWI.MPDUtotalByteCount/* include 802.11 header */, pAd->ate.TxWI.PacketId, 0, pAd->ate.TxWI.txop/*IFS_HTTXOP*/, pAd->ate.TxWI.CFACK/*FALSE*/, TxHTPhyMode);
++ }
++ else
++ {
++ TxHTPhyMode.field.BW = pAd->ate.TxWI.BW;
++ TxHTPhyMode.field.ShortGI = pAd->ate.TxWI.ShortGI;
++ TxHTPhyMode.field.STBC = 0;
++ TxHTPhyMode.field.MCS = pAd->ate.TxWI.MCS;
++ TxHTPhyMode.field.MODE = pAd->ate.TxWI.PHYMODE;
++
++ ATEWriteTxWI(pAd, pTxWI, FALSE, FALSE, FALSE, FALSE/* No ack required. */, FALSE, 0, BSSID_WCID, pAd->ate.TxLength,
++ 0, 0, IFS_HTTXOP, FALSE, TxHTPhyMode);// "MMPS_STATIC" instead of "MMPS_DYNAMIC" ???
++ }
++
++ RTMPMoveMemory(&pAd->NullContext.TransferBuffer->field.WirelessPacket[TXINFO_SIZE+TXWI_SIZE], &pAd->NullFrame, sizeof(HEADER_802_11));
++
++ pDest = &(pAd->NullContext.TransferBuffer->field.WirelessPacket[TXINFO_SIZE+TXWI_SIZE+sizeof(HEADER_802_11)]);
++
++ // Prepare frame payload
++#ifdef RALINK_28xx_QA
++ if (pAd->ate.bQATxStart == TRUE)
++ {
++ // copy pattern
++ if ((pAd->ate.PLen != 0))
++ {
++ for (j = 0; j < pAd->ate.DLen; j+=pAd->ate.PLen)
++ {
++ RTMPMoveMemory(pDest, pAd->ate.Pattern, pAd->ate.PLen);
++ pDest += pAd->ate.PLen;
++ }
++ }
++ TransferBufferLength = TXINFO_SIZE + TXWI_SIZE + pAd->ate.TxWI.MPDUtotalByteCount;
++ }
++ else
++#endif // RALINK_28xx_QA //
++ {
++ for (j = 0; j < (pAd->ate.TxLength - sizeof(HEADER_802_11)); j++)
++ {
++ *pDest = 0xA5;
++ pDest += 1;
++ }
++ TransferBufferLength = TXINFO_SIZE + TXWI_SIZE + pAd->ate.TxLength;
++ }
++
++#if 1
++ OrgBufferLength = TransferBufferLength;
++ TransferBufferLength = (TransferBufferLength + 3) & (~3);
++
++ // Always add 4 extra bytes at every packet.
++ padLen = TransferBufferLength - OrgBufferLength + 4;/* 4 == last packet padding */
++ ASSERT((padLen <= (RTMP_PKT_TAIL_PADDING - 4/* 4 == MaxBulkOutsize alignment padding */)));
++
++ /* Now memzero all extra padding bytes. */
++ NdisZeroMemory(pDest, padLen);
++ pDest += padLen;
++#else
++ if ((TransferBufferLength % 4) == 1)
++ {
++ NdisZeroMemory(pDest, 7);
++ pDest += 7;
++ TransferBufferLength += 3;
++ }
++ else if ((TransferBufferLength % 4) == 2)
++ {
++ NdisZeroMemory(pDest, 6);
++ pDest += 6;
++ TransferBufferLength += 2;
++ }
++ else if ((TransferBufferLength % 4) == 3)
++ {
++ NdisZeroMemory(pDest, 5);
++ pDest += 5;
++ TransferBufferLength += 1;
++ }
++#endif // 1 //
++
++ // Update pTxInfo->USBDMATxPktLen to include padding.
++ pTxInfo->USBDMATxPktLen = TransferBufferLength - TXINFO_SIZE;
++
++ TransferBufferLength += 4;
++
++ // If TransferBufferLength is multiple of 64, add extra 4 bytes again.
++ if ((TransferBufferLength % pAd->BulkOutMaxPacketSize) == 0)
++ {
++ NdisZeroMemory(pDest, 4);
++ TransferBufferLength += 4;
++ }
++
++ // Fill out frame length information for global Bulk out arbitor
++ pAd->NullContext.BulkOutSize = TransferBufferLength;
++ }
++#ifdef RT_BIG_ENDIAN
++ RTMPWIEndianChange((PUCHAR)pTxWI, TYPE_TXWI);
++ RTMPFrameEndianChange(pAd, (((PUCHAR)pTxInfo)+TXWI_SIZE+TXINFO_SIZE), DIR_WRITE, FALSE);
++ RTMPDescriptorEndianChange((PUCHAR)pTxInfo, TYPE_TXINFO);
++#endif // RT_BIG_ENDIAN //
++ return 0;
++}
++
++VOID ATE_RTUSBBulkOutDataPacketComplete(purbb_t pUrb, struct pt_regs *pt_regs)
++{
++ PRTMP_ADAPTER pAd;
++ PTX_CONTEXT pNullContext;
++ UCHAR BulkOutPipeId;
++ NTSTATUS Status;
++ unsigned long IrqFlags;
++ ULONG OldValue;
++
++ pNullContext = (PTX_CONTEXT)pUrb->context;
++ pAd = pNullContext->pAd;
++
++
++ // Reset Null frame context flags
++ pNullContext->IRPPending = FALSE;
++ pNullContext->InUse = FALSE;
++ Status = pUrb->status;
++
++ // Store BulkOut PipeId
++ BulkOutPipeId = pNullContext->BulkOutPipeId;
++ pAd->BulkOutDataOneSecCount++;
++
++ if (Status == USB_ST_NOERROR)
++ {
++#ifdef RALINK_28xx_QA
++ if ((ATE_ON(pAd)) && (pAd->ate.bQATxStart == TRUE))
++ {
++ if (pAd->ate.QID == BulkOutPipeId)
++ {
++ // Let Rx can have a chance to break in during Tx process,
++ // especially for loopback mode in QA ATE.
++ // To trade off between tx performance and loopback mode integrity.
++ /* Q : Now Rx is handled by tasklet, do we still need this delay ? */
++ /* Ans : Even tasklet is used, Rx/Tx < 1 if we do not delay for a while right here. */
++ RTMPusecDelay(500);
++ pAd->ate.TxDoneCount++;
++ pAd->RalinkCounters.KickTxCount++;
++ ASSERT(pAd->ate.QID == 0);
++ pAd->ate.TxAc0++;
++ }
++ }
++#endif // RALINK_28xx_QA //
++ pAd->BulkOutComplete++;
++
++ pAd->Counters8023.GoodTransmits++;
++
++ /* Don't worry about the queue is empty or not. This function will check itself. */
++ RTMPDeQueuePacket(pAd, TRUE, BulkOutPipeId, MAX_TX_PROCESS);
++
++ /* In 28xx, SendTxWaitQueue ==> TxSwQueue */
++/*
++ if (pAd->SendTxWaitQueue[BulkOutPipeId].Number > 0)
++ {
++ RTMPDeQueuePacket(pAd, BulkOutPipeId);
++ }
++*/
++ }
++ else // STATUS_OTHER
++ {
++ pAd->BulkOutCompleteOther++;
++
++ ATEDBGPRINT(RT_DEBUG_ERROR, ("BulkOutDataPacket Failed STATUS_OTHER = 0x%x . \n", Status));
++ ATEDBGPRINT(RT_DEBUG_ERROR, (">>BulkOutReq=0x%lx, BulkOutComplete=0x%lx\n", pAd->BulkOutReq, pAd->BulkOutComplete));
++
++ if ((!RTMP_TEST_FLAG(pAd, fRTMP_ADAPTER_RESET_IN_PROGRESS)) &&
++ (!RTMP_TEST_FLAG(pAd, fRTMP_ADAPTER_HALT_IN_PROGRESS)) &&
++ (!RTMP_TEST_FLAG(pAd, fRTMP_ADAPTER_NIC_NOT_EXIST)) &&
++ (!RTMP_TEST_FLAG(pAd, fRTMP_ADAPTER_BULKOUT_RESET)))
++ {
++ RTMP_SET_FLAG(pAd, fRTMP_ADAPTER_BULKOUT_RESET);
++ /* In 28xx, RT_OID_USB_RESET_BULK_OUT ==> CMDTHREAD_RESET_BULK_OUT */
++ RTUSBEnqueueInternalCmd(pAd, CMDTHREAD_RESET_BULK_OUT, NULL, 0);
++ // Check
++ BULK_OUT_LOCK(&pAd->BulkOutLock[BulkOutPipeId], IrqFlags);
++ pAd->BulkOutPending[BulkOutPipeId] = FALSE;
++ pAd->bulkResetPipeid = BulkOutPipeId;
++ BULK_OUT_UNLOCK(&pAd->BulkOutLock[BulkOutPipeId], IrqFlags);
++ return;
++ }
++ }
++
++
++
++ if (atomic_read(&pAd->BulkOutRemained) > 0)
++ {
++ atomic_dec(&pAd->BulkOutRemained);
++ }
++
++ // 1st - Transmit Success
++ OldValue = pAd->WlanCounters.TransmittedFragmentCount.u.LowPart;
++ pAd->WlanCounters.TransmittedFragmentCount.u.LowPart++;
++
++ if (pAd->WlanCounters.TransmittedFragmentCount.u.LowPart < OldValue)
++ {
++ pAd->WlanCounters.TransmittedFragmentCount.u.HighPart++;
++ }
++
++ if(((pAd->ContinBulkOut == TRUE ) ||(atomic_read(&pAd->BulkOutRemained) > 0)) && (pAd->ate.Mode & ATE_TXFRAME))
++ {
++ RTUSB_SET_BULK_FLAG(pAd, fRTUSB_BULK_OUT_DATA_ATE);
++ }
++ else
++ {
++ RTUSB_CLEAR_BULK_FLAG(pAd, fRTUSB_BULK_OUT_DATA_ATE);
++#ifdef RALINK_28xx_QA
++ pAd->ate.TxStatus = 0;
++#endif // RALINK_28xx_QA //
++ }
++
++ BULK_OUT_LOCK(&pAd->BulkOutLock[BulkOutPipeId], IrqFlags);
++ pAd->BulkOutPending[BulkOutPipeId] = FALSE;
++ BULK_OUT_UNLOCK(&pAd->BulkOutLock[BulkOutPipeId], IrqFlags);
++
++ // Always call Bulk routine, even reset bulk.
++ // The protection of rest bulk should be in BulkOut routine.
++ RTUSBKickBulkOut(pAd);
++}
++
++/*
++ ========================================================================
++
++ Routine Description:
++
++ Arguments:
++
++ Return Value:
++
++ Note:
++
++ ========================================================================
++*/
++VOID ATE_RTUSBBulkOutDataPacket(
++ IN PRTMP_ADAPTER pAd,
++ IN UCHAR BulkOutPipeId)
++{
++ PTX_CONTEXT pNullContext = &(pAd->NullContext);
++ PURB pUrb;
++ int ret = 0;
++ unsigned long IrqFlags;
++
++
++ ASSERT(BulkOutPipeId == 0);
++
++ /* Build up the frame first. */
++// ATESetUpFrame(pAd, 0);
++
++ BULK_OUT_LOCK(&pAd->BulkOutLock[BulkOutPipeId], IrqFlags);
++
++ if (pAd->BulkOutPending[BulkOutPipeId] == TRUE)
++ {
++ BULK_OUT_UNLOCK(&pAd->BulkOutLock[BulkOutPipeId], IrqFlags);
++ return;
++ }
++
++ pAd->BulkOutPending[BulkOutPipeId] = TRUE;
++ BULK_OUT_UNLOCK(&pAd->BulkOutLock[BulkOutPipeId], IrqFlags);
++
++ // Increase Total transmit byte counter
++ pAd->RalinkCounters.OneSecTransmittedByteCount += pNullContext->BulkOutSize;
++ pAd->RalinkCounters.TransmittedByteCount += pNullContext->BulkOutSize;
++
++ // Clear ATE frame bulk out flag
++ RTUSB_CLEAR_BULK_FLAG(pAd, fRTUSB_BULK_OUT_DATA_ATE);
++
++ // Init Tx context descriptor
++ pNullContext->IRPPending = TRUE;
++ RTUSBInitTxDesc(pAd, pNullContext, BulkOutPipeId, (usb_complete_t)ATE_RTUSBBulkOutDataPacketComplete);
++ pUrb = pNullContext->pUrb;
++
++ if((ret = RTUSB_SUBMIT_URB(pUrb))!=0)
++ {
++ ATEDBGPRINT(RT_DEBUG_ERROR, ("ATE_RTUSBBulkOutDataPacket: Submit Tx URB failed %d\n", ret));
++ return;
++ }
++
++ pAd->BulkOutReq++;
++ return;
++
++}
++
++/*
++ ========================================================================
++
++ Routine Description:
++
++ Arguments:
++
++ Return Value:
++
++ Note:
++
++ ========================================================================
++*/
++VOID ATE_RTUSBCancelPendingBulkInIRP(
++ IN PRTMP_ADAPTER pAd)
++{
++ PRX_CONTEXT pRxContext;
++ UINT i;
++
++ ATEDBGPRINT(RT_DEBUG_TRACE, ("--->ATE_RTUSBCancelPendingBulkInIRP\n"));
++#if 1
++ for ( i = 0; i < (RX_RING_SIZE); i++)
++ {
++ pRxContext = &(pAd->RxContext[i]);
++ if(pRxContext->IRPPending == TRUE)
++ {
++ RTUSB_UNLINK_URB(pRxContext->pUrb);
++ pRxContext->IRPPending = FALSE;
++ pRxContext->InUse = FALSE;
++ //NdisInterlockedDecrement(&pAd->PendingRx);
++ //pAd->PendingRx--;
++ }
++ }
++#else
++ for ( i = 0; i < (RX_RING_SIZE); i++)
++ {
++ pRxContext = &(pAd->RxContext[i]);
++ if(atomic_read(&pRxContext->IrpLock) == IRPLOCK_CANCELABLE)
++ {
++ RTUSB_UNLINK_URB(pRxContext->pUrb);
++ }
++ InterlockedExchange(&pRxContext->IrpLock, IRPLOCK_CANCE_START);
++ }
++#endif // 1 //
++ ATEDBGPRINT(RT_DEBUG_TRACE, ("<---ATE_RTUSBCancelPendingBulkInIRP\n"));
++ return;
++}
++#endif // RT2870 //
++
++VOID rt_ee_read_all(PRTMP_ADAPTER pAd, USHORT *Data)
++{
++ USHORT i;
++ USHORT value;
++
++ for (i = 0 ; i < EEPROM_SIZE/2 ; )
++ {
++ /* "value" is expecially for some compilers... */
++ RT28xx_EEPROM_READ16(pAd, i*2, value);
++ Data[i] = value;
++ i++;
++ }
++}
++
++VOID rt_ee_write_all(PRTMP_ADAPTER pAd, USHORT *Data)
++{
++ USHORT i;
++ USHORT value;
++
++ for (i = 0 ; i < EEPROM_SIZE/2 ; )
++ {
++ /* "value" is expecially for some compilers... */
++ value = Data[i];
++ RT28xx_EEPROM_WRITE16(pAd, i*2, value);
++ i ++;
++ }
++}
++#ifdef RALINK_28xx_QA
++VOID ATE_QA_Statistics(
++ IN PRTMP_ADAPTER pAd,
++ IN PRXWI_STRUC pRxWI,
++ IN PRT28XX_RXD_STRUC pRxD,
++ IN PHEADER_802_11 pHeader)
++{
++ // update counter first
++ if (pHeader != NULL)
++ {
++ if (pHeader->FC.Type == BTYPE_DATA)
++ {
++ if (pRxD->U2M)
++ pAd->ate.U2M++;
++ else
++ pAd->ate.OtherData++;
++ }
++ else if (pHeader->FC.Type == BTYPE_MGMT)
++ {
++ if (pHeader->FC.SubType == SUBTYPE_BEACON)
++ pAd->ate.Beacon++;
++ else
++ pAd->ate.OtherCount++;
++ }
++ else if (pHeader->FC.Type == BTYPE_CNTL)
++ {
++ pAd->ate.OtherCount++;
++ }
++ }
++ pAd->ate.RSSI0 = pRxWI->RSSI0;
++ pAd->ate.RSSI1 = pRxWI->RSSI1;
++ pAd->ate.RSSI2 = pRxWI->RSSI2;
++ pAd->ate.SNR0 = pRxWI->SNR0;
++ pAd->ate.SNR1 = pRxWI->SNR1;
++}
++
++/* command id with Cmd Type == 0x0008(for 28xx)/0x0005(for iNIC) */
++#define RACFG_CMD_RF_WRITE_ALL 0x0000
++#define RACFG_CMD_E2PROM_READ16 0x0001
++#define RACFG_CMD_E2PROM_WRITE16 0x0002
++#define RACFG_CMD_E2PROM_READ_ALL 0x0003
++#define RACFG_CMD_E2PROM_WRITE_ALL 0x0004
++#define RACFG_CMD_IO_READ 0x0005
++#define RACFG_CMD_IO_WRITE 0x0006
++#define RACFG_CMD_IO_READ_BULK 0x0007
++#define RACFG_CMD_BBP_READ8 0x0008
++#define RACFG_CMD_BBP_WRITE8 0x0009
++#define RACFG_CMD_BBP_READ_ALL 0x000a
++#define RACFG_CMD_GET_COUNTER 0x000b
++#define RACFG_CMD_CLEAR_COUNTER 0x000c
++
++#define RACFG_CMD_RSV1 0x000d
++#define RACFG_CMD_RSV2 0x000e
++#define RACFG_CMD_RSV3 0x000f
++
++#define RACFG_CMD_TX_START 0x0010
++#define RACFG_CMD_GET_TX_STATUS 0x0011
++#define RACFG_CMD_TX_STOP 0x0012
++#define RACFG_CMD_RX_START 0x0013
++#define RACFG_CMD_RX_STOP 0x0014
++#define RACFG_CMD_GET_NOISE_LEVEL 0x0015
++
++#define RACFG_CMD_ATE_START 0x0080
++#define RACFG_CMD_ATE_STOP 0x0081
++
++#define RACFG_CMD_ATE_START_TX_CARRIER 0x0100
++#define RACFG_CMD_ATE_START_TX_CONT 0x0101
++#define RACFG_CMD_ATE_START_TX_FRAME 0x0102
++#define RACFG_CMD_ATE_SET_BW 0x0103
++#define RACFG_CMD_ATE_SET_TX_POWER0 0x0104
++#define RACFG_CMD_ATE_SET_TX_POWER1 0x0105
++#define RACFG_CMD_ATE_SET_FREQ_OFFSET 0x0106
++#define RACFG_CMD_ATE_GET_STATISTICS 0x0107
++#define RACFG_CMD_ATE_RESET_COUNTER 0x0108
++#define RACFG_CMD_ATE_SEL_TX_ANTENNA 0x0109
++#define RACFG_CMD_ATE_SEL_RX_ANTENNA 0x010a
++#define RACFG_CMD_ATE_SET_PREAMBLE 0x010b
++#define RACFG_CMD_ATE_SET_CHANNEL 0x010c
++#define RACFG_CMD_ATE_SET_ADDR1 0x010d
++#define RACFG_CMD_ATE_SET_ADDR2 0x010e
++#define RACFG_CMD_ATE_SET_ADDR3 0x010f
++#define RACFG_CMD_ATE_SET_RATE 0x0110
++#define RACFG_CMD_ATE_SET_TX_FRAME_LEN 0x0111
++#define RACFG_CMD_ATE_SET_TX_FRAME_COUNT 0x0112
++#define RACFG_CMD_ATE_START_RX_FRAME 0x0113
++#define RACFG_CMD_ATE_E2PROM_READ_BULK 0x0114
++#define RACFG_CMD_ATE_E2PROM_WRITE_BULK 0x0115
++#define RACFG_CMD_ATE_IO_WRITE_BULK 0x0116
++#define RACFG_CMD_ATE_BBP_READ_BULK 0x0117
++#define RACFG_CMD_ATE_BBP_WRITE_BULK 0x0118
++#define RACFG_CMD_ATE_RF_READ_BULK 0x0119
++#define RACFG_CMD_ATE_RF_WRITE_BULK 0x011a
++
++
++
++#define A2Hex(_X, _p) \
++{ \
++ UCHAR *p; \
++ _X = 0; \
++ p = _p; \
++ while (((*p >= 'a') && (*p <= 'f')) || ((*p >= 'A') && (*p <= 'F')) || ((*p >= '0') && (*p <= '9'))) \
++ { \
++ if ((*p >= 'a') && (*p <= 'f')) \
++ _X = _X * 16 + *p - 87; \
++ else if ((*p >= 'A') && (*p <= 'F')) \
++ _X = _X * 16 + *p - 55; \
++ else if ((*p >= '0') && (*p <= '9')) \
++ _X = _X * 16 + *p - 48; \
++ p++; \
++ } \
++}
++
++
++static VOID memcpy_exl(PRTMP_ADAPTER pAd, UCHAR *dst, UCHAR *src, ULONG len);
++static VOID memcpy_exs(PRTMP_ADAPTER pAd, UCHAR *dst, UCHAR *src, ULONG len);
++static VOID RTMP_IO_READ_BULK(PRTMP_ADAPTER pAd, UCHAR *dst, UCHAR *src, UINT32 len);
++
++#ifdef UCOS
++int ate_copy_to_user(
++ IN PUCHAR payload,
++ IN PUCHAR msg,
++ IN INT len)
++{
++ memmove(payload, msg, len);
++ return 0;
++}
++
++#undef copy_to_user
++#define copy_to_user(x,y,z) ate_copy_to_user((PUCHAR)x, (PUCHAR)y, z)
++#endif // UCOS //
++
++#define LEN_OF_ARG 16
++
++VOID RtmpDoAte(
++ IN PRTMP_ADAPTER pAdapter,
++ IN struct iwreq *wrq)
++{
++ unsigned short Command_Id;
++ struct ate_racfghdr *pRaCfg;
++ INT Status = NDIS_STATUS_SUCCESS;
++
++
++
++ if((pRaCfg = kmalloc(sizeof(struct ate_racfghdr), GFP_KERNEL)) == NULL)
++ {
++ Status = -EINVAL;
++ return;
++ }
++
++ NdisZeroMemory(pRaCfg, sizeof(struct ate_racfghdr));
++
++ if (copy_from_user((PUCHAR)pRaCfg, wrq->u.data.pointer, wrq->u.data.length))
++ {
++ Status = -EFAULT;
++ kfree(pRaCfg);
++ return;
++ }
++
++
++ Command_Id = ntohs(pRaCfg->command_id);
++
++ ATEDBGPRINT(RT_DEBUG_TRACE,("\n%s: Command_Id = 0x%04x !\n", __FUNCTION__, Command_Id));
++
++ switch (Command_Id)
++ {
++ // We will get this command when QA starts.
++ case RACFG_CMD_ATE_START:
++ {
++ ATEDBGPRINT(RT_DEBUG_TRACE,("RACFG_CMD_ATE_START\n"));
++
++ // prepare feedback as soon as we can to avoid QA timeout.
++ pRaCfg->length = htons(2);
++ pRaCfg->status = htons(0);
++
++ wrq->u.data.length = sizeof(pRaCfg->magic_no) + sizeof(pRaCfg->command_type)
++ + sizeof(pRaCfg->command_id) + sizeof(pRaCfg->length)
++ + sizeof(pRaCfg->sequence) + ntohs(pRaCfg->length);
++
++ ATEDBGPRINT(RT_DEBUG_TRACE, ("wrq->u.data.length = %d\n", wrq->u.data.length));
++
++ if (copy_to_user(wrq->u.data.pointer, pRaCfg, wrq->u.data.length))
++ {
++ ATEDBGPRINT(RT_DEBUG_TRACE, ("copy_to_user() fail in case RACFG_CMD_ATE_START\n"));
++ Status = -EFAULT;
++ }
++ else
++ {
++ ATEDBGPRINT(RT_DEBUG_TRACE, ("RACFG_CMD_ATE_START is done !\n"));
++ }
++ Set_ATE_Proc(pAdapter, "ATESTART");
++ }
++ break;
++
++ // We will get this command either QA is closed or ated is killed by user.
++ case RACFG_CMD_ATE_STOP:
++ {
++#ifndef UCOS
++ INT32 ret;
++#endif // !UCOS //
++
++ ATEDBGPRINT(RT_DEBUG_TRACE,("RACFG_CMD_ATE_STOP\n"));
++
++ // Distinguish this command came from QA(via ated)
++ // or ate daemon according to the existence of pid in payload.
++ // No need to prepare feedback if this cmd came directly from ate daemon.
++ pRaCfg->length = ntohs(pRaCfg->length);
++
++ if (pRaCfg->length == sizeof(pAdapter->ate.AtePid))
++ {
++ // This command came from QA.
++ // Get the pid of ATE daemon.
++ memcpy((UCHAR *)&pAdapter->ate.AtePid,
++ (&pRaCfg->data[0]) - 2/* == &(pRaCfg->status) */,
++ sizeof(pAdapter->ate.AtePid));
++
++ // prepare feedback as soon as we can to avoid QA timeout.
++ pRaCfg->length = htons(2);
++ pRaCfg->status = htons(0);
++
++ wrq->u.data.length = sizeof(pRaCfg->magic_no) + sizeof(pRaCfg->command_type)
++ + sizeof(pRaCfg->command_id) + sizeof(pRaCfg->length)
++ + sizeof(pRaCfg->sequence) + ntohs(pRaCfg->length);
++
++ ATEDBGPRINT(RT_DEBUG_TRACE, ("wrq->u.data.length = %d\n", wrq->u.data.length));
++
++ if (copy_to_user(wrq->u.data.pointer, pRaCfg, wrq->u.data.length))
++ {
++ ATEDBGPRINT(RT_DEBUG_ERROR, ("copy_to_user() fail in case RACFG_CMD_ATE_STOP\n"));
++ Status = -EFAULT;
++ }
++
++ //
++ // kill ATE daemon when leaving ATE mode.
++ // We must kill ATE daemon first before setting ATESTOP,
++ // or Microsoft will report sth. wrong.
++#ifndef UCOS
++ ret = KILL_THREAD_PID(pAdapter->ate.AtePid, SIGTERM, 1);
++ if (ret)
++ {
++ ATEDBGPRINT(RT_DEBUG_ERROR, ("%s: unable to signal thread\n", pAdapter->net_dev->name));
++ }
++#endif // !UCOS //
++ }
++
++ // AP might have in ATE_STOP mode due to cmd from QA.
++ if (ATE_ON(pAdapter))
++ {
++ // Someone has killed ate daemon while QA GUI is still open.
++ Set_ATE_Proc(pAdapter, "ATESTOP");
++ ATEDBGPRINT(RT_DEBUG_TRACE, ("RACFG_CMD_AP_START is done !\n"));
++ }
++ }
++ break;
++
++ case RACFG_CMD_RF_WRITE_ALL:
++ {
++ UINT32 R1, R2, R3, R4;
++ USHORT channel;
++
++ memcpy(&R1, pRaCfg->data-2, 4);
++ memcpy(&R2, pRaCfg->data+2, 4);
++ memcpy(&R3, pRaCfg->data+6, 4);
++ memcpy(&R4, pRaCfg->data+10, 4);
++ memcpy(&channel, pRaCfg->data+14, 2);
++
++ pAdapter->LatchRfRegs.R1 = ntohl(R1);
++ pAdapter->LatchRfRegs.R2 = ntohl(R2);
++ pAdapter->LatchRfRegs.R3 = ntohl(R3);
++ pAdapter->LatchRfRegs.R4 = ntohl(R4);
++ pAdapter->LatchRfRegs.Channel = ntohs(channel);
++
++ RTMP_RF_IO_WRITE32(pAdapter, pAdapter->LatchRfRegs.R1);
++ RTMP_RF_IO_WRITE32(pAdapter, pAdapter->LatchRfRegs.R2);
++ RTMP_RF_IO_WRITE32(pAdapter, pAdapter->LatchRfRegs.R3);
++ RTMP_RF_IO_WRITE32(pAdapter, pAdapter->LatchRfRegs.R4);
++
++ // prepare feedback
++ pRaCfg->length = htons(2);
++ pRaCfg->status = htons(0);
++
++ wrq->u.data.length = sizeof(pRaCfg->magic_no) + sizeof(pRaCfg->command_type)
++ + sizeof(pRaCfg->command_id) + sizeof(pRaCfg->length)
++ + sizeof(pRaCfg->sequence) + ntohs(pRaCfg->length);
++
++ ATEDBGPRINT(RT_DEBUG_TRACE, ("wrq->u.data.length = %d\n", wrq->u.data.length));
++ if (copy_to_user(wrq->u.data.pointer, pRaCfg, wrq->u.data.length))
++ {
++ ATEDBGPRINT(RT_DEBUG_ERROR, ("copy_to_user() fail in case RACFG_CMD_RF_WRITE_ALL\n"));
++ Status = -EFAULT;
++ }
++ else
++ {
++ ATEDBGPRINT(RT_DEBUG_TRACE, ("RACFG_CMD_RF_WRITE_ALL is done !\n"));
++ }
++ }
++ break;
++
++ case RACFG_CMD_E2PROM_READ16:
++ {
++ USHORT offset, value, tmp;
++
++ offset = ntohs(pRaCfg->status);
++ /* "tmp" is expecially for some compilers... */
++ RT28xx_EEPROM_READ16(pAdapter, offset, tmp);
++ value = tmp;
++ value = htons(value);
++
++ ATEDBGPRINT(RT_DEBUG_TRACE,("EEPROM Read offset = 0x%04x, value = 0x%04x\n", offset, value));
++
++ // prepare feedback
++ pRaCfg->length = htons(4);
++ pRaCfg->status = htons(0);
++ memcpy(pRaCfg->data, &value, 2);
++
++ wrq->u.data.length = sizeof(pRaCfg->magic_no) + sizeof(pRaCfg->command_type)
++ + sizeof(pRaCfg->command_id) + sizeof(pRaCfg->length)
++ + sizeof(pRaCfg->sequence) + ntohs(pRaCfg->length);
++
++ ATEDBGPRINT(RT_DEBUG_TRACE, ("sizeof(struct ate_racfghdr) = %d\n", sizeof(struct ate_racfghdr)));
++ ATEDBGPRINT(RT_DEBUG_TRACE, ("wrq->u.data.length = %d\n", wrq->u.data.length));
++
++ if (copy_to_user(wrq->u.data.pointer, pRaCfg, wrq->u.data.length))
++ {
++ ATEDBGPRINT(RT_DEBUG_ERROR, ("copy_to_user() fail in case RACFG_CMD_E2PROM_READ16\n"));
++ Status = -EFAULT;
++ }
++ else
++ {
++ ATEDBGPRINT(RT_DEBUG_TRACE, ("RACFG_CMD_E2PROM_READ16 is done !\n"));
++ }
++ }
++ break;
++
++ case RACFG_CMD_E2PROM_WRITE16:
++ {
++ USHORT offset, value;
++
++ offset = ntohs(pRaCfg->status);
++ memcpy(&value, pRaCfg->data, 2);
++ value = ntohs(value);
++ RT28xx_EEPROM_WRITE16(pAdapter, offset, value);
++
++ // prepare feedback
++ pRaCfg->length = htons(2);
++ pRaCfg->status = htons(0);
++ wrq->u.data.length = sizeof(pRaCfg->magic_no) + sizeof(pRaCfg->command_type)
++ + sizeof(pRaCfg->command_id) + sizeof(pRaCfg->length)
++ + sizeof(pRaCfg->sequence) + ntohs(pRaCfg->length);
++
++ if (copy_to_user(wrq->u.data.pointer, pRaCfg, wrq->u.data.length))
++ {
++ ATEDBGPRINT(RT_DEBUG_ERROR, ("copy_to_user() fail in case RACFG_CMD_E2PROM_WRITE16\n"));
++ Status = -EFAULT;
++ }
++ else
++ {
++ ATEDBGPRINT(RT_DEBUG_TRACE, ("RACFG_CMD_E2PROM_WRITE16 is done !\n"));
++ }
++ }
++ break;
++
++ case RACFG_CMD_E2PROM_READ_ALL:
++ {
++ USHORT buffer[EEPROM_SIZE/2];
++
++ rt_ee_read_all(pAdapter,(USHORT *)buffer);
++ memcpy_exs(pAdapter, pRaCfg->data, (UCHAR *)buffer, EEPROM_SIZE);
++
++ // prepare feedback
++ pRaCfg->length = htons(2+EEPROM_SIZE);
++ pRaCfg->status = htons(0);
++ wrq->u.data.length = sizeof(pRaCfg->magic_no) + sizeof(pRaCfg->command_type)
++ + sizeof(pRaCfg->command_id) + sizeof(pRaCfg->length)
++ + sizeof(pRaCfg->sequence) + ntohs(pRaCfg->length);
++
++ if (copy_to_user(wrq->u.data.pointer, pRaCfg, wrq->u.data.length))
++ {
++ ATEDBGPRINT(RT_DEBUG_ERROR, ("copy_to_user() fail in case RACFG_CMD_E2PROM_READ_ALL\n"));
++ Status = -EFAULT;
++ }
++ else
++ {
++ ATEDBGPRINT(RT_DEBUG_TRACE, ("RACFG_CMD_E2PROM_READ_ALL is done !\n"));
++ }
++ }
++ break;
++
++ case RACFG_CMD_E2PROM_WRITE_ALL:
++ {
++ USHORT buffer[EEPROM_SIZE/2];
++
++ NdisZeroMemory((UCHAR *)buffer, EEPROM_SIZE);
++ memcpy_exs(pAdapter, (UCHAR *)buffer, (UCHAR *)&pRaCfg->status, EEPROM_SIZE);
++ rt_ee_write_all(pAdapter,(USHORT *)buffer);
++
++ // prepare feedback
++ pRaCfg->length = htons(2);
++ pRaCfg->status = htons(0);
++ wrq->u.data.length = sizeof(pRaCfg->magic_no) + sizeof(pRaCfg->command_type)
++ + sizeof(pRaCfg->command_id) + sizeof(pRaCfg->length)
++ + sizeof(pRaCfg->sequence) + ntohs(pRaCfg->length);
++
++ if (copy_to_user(wrq->u.data.pointer, pRaCfg, wrq->u.data.length))
++ {
++ ATEDBGPRINT(RT_DEBUG_ERROR, ("copy_to_user() fail in case RACFG_CMD_E2PROM_WRITE_ALL\n"));
++ Status = -EFAULT;
++ }
++ else
++ {
++ ATEDBGPRINT(RT_DEBUG_ERROR, ("RACFG_CMD_E2PROM_WRITE_ALL is done !\n"));
++ }
++
++ }
++ break;
++
++ case RACFG_CMD_IO_READ:
++ {
++ UINT32 offset;
++ UINT32 value;
++
++ memcpy(&offset, &pRaCfg->status, 4);
++ offset = ntohl(offset);
++
++ // We do not need the base address.
++ // So just extract the offset out.
++ offset &= 0x0000FFFF;
++ RTMP_IO_READ32(pAdapter, offset, &value);
++ value = htonl(value);
++
++ // prepare feedback
++ pRaCfg->length = htons(6);
++ pRaCfg->status = htons(0);
++ memcpy(pRaCfg->data, &value, 4);
++
++ wrq->u.data.length = sizeof(pRaCfg->magic_no) + sizeof(pRaCfg->command_type)
++ + sizeof(pRaCfg->command_id) + sizeof(pRaCfg->length)
++ + sizeof(pRaCfg->sequence) + ntohs(pRaCfg->length);
++
++ if (copy_to_user(wrq->u.data.pointer, pRaCfg, wrq->u.data.length))
++ {
++ ATEDBGPRINT(RT_DEBUG_ERROR, ("copy_to_user() fail in case RACFG_CMD_IO_READ\n"));
++ Status = -EFAULT;
++ }
++ else
++ {
++ ATEDBGPRINT(RT_DEBUG_TRACE, ("RACFG_CMD_IO_READ is done !\n"));
++ }
++ }
++ break;
++
++ case RACFG_CMD_IO_WRITE:
++ {
++ UINT32 offset, value;
++
++ memcpy(&offset, pRaCfg->data-2, 4);
++ memcpy(&value, pRaCfg->data+2, 4);
++
++ offset = ntohl(offset);
++
++ // We do not need the base address.
++ // So just extract out the offset.
++ offset &= 0x0000FFFF;
++ value = ntohl(value);
++ ATEDBGPRINT(RT_DEBUG_TRACE,("RACFG_CMD_IO_WRITE: offset = %x, value = %x\n", offset, value));
++ RTMP_IO_WRITE32(pAdapter, offset, value);
++
++ // prepare feedback
++ pRaCfg->length = htons(2);
++ pRaCfg->status = htons(0);
++ wrq->u.data.length = sizeof(pRaCfg->magic_no) + sizeof(pRaCfg->command_type)
++ + sizeof(pRaCfg->command_id) + sizeof(pRaCfg->length)
++ + sizeof(pRaCfg->sequence) + ntohs(pRaCfg->length);
++
++ if (copy_to_user(wrq->u.data.pointer, pRaCfg, wrq->u.data.length))
++ {
++ ATEDBGPRINT(RT_DEBUG_ERROR, ("copy_to_user() fail in case RACFG_CMD_IO_WRITE\n"));
++ Status = -EFAULT;
++ }
++ else
++ {
++ ATEDBGPRINT(RT_DEBUG_TRACE, ("RACFG_CMD_IO_WRITE is done !\n"));
++ }
++ }
++ break;
++
++ case RACFG_CMD_IO_READ_BULK:
++ {
++ UINT32 offset;
++ USHORT len;
++
++ memcpy(&offset, &pRaCfg->status, 4);
++ offset = ntohl(offset);
++
++ // We do not need the base address.
++ // So just extract the offset.
++ offset &= 0x0000FFFF;
++ memcpy(&len, pRaCfg->data+2, 2);
++ len = ntohs(len);
++
++ if (len > 371)
++ {
++ ATEDBGPRINT(RT_DEBUG_TRACE,("len is too large, make it smaller\n"));
++ pRaCfg->length = htons(2);
++ pRaCfg->status = htons(1);
++ break;
++ }
++
++ RTMP_IO_READ_BULK(pAdapter, pRaCfg->data, (UCHAR *)offset, len*4);// unit in four bytes
++
++ // prepare feedback
++ pRaCfg->length = htons(2+len*4);// unit in four bytes
++ pRaCfg->status = htons(0);
++ wrq->u.data.length = sizeof(pRaCfg->magic_no) + sizeof(pRaCfg->command_type)
++ + sizeof(pRaCfg->command_id) + sizeof(pRaCfg->length)
++ + sizeof(pRaCfg->sequence) + ntohs(pRaCfg->length);
++
++ if (copy_to_user(wrq->u.data.pointer, pRaCfg, wrq->u.data.length))
++ {
++ ATEDBGPRINT(RT_DEBUG_ERROR, ("copy_to_user() fail in case RACFG_CMD_IO_READ_BULK\n"));
++ Status = -EFAULT;
++ }
++ else
++ {
++ ATEDBGPRINT(RT_DEBUG_TRACE, ("RACFG_CMD_IO_READ_BULK is done !\n"));
++ }
++ }
++ break;
++
++ case RACFG_CMD_BBP_READ8:
++ {
++ USHORT offset;
++ UCHAR value;
++
++ value = 0;
++ offset = ntohs(pRaCfg->status);
++
++ if (ATE_ON(pAdapter))
++ {
++ ATE_BBP_IO_READ8_BY_REG_ID(pAdapter, offset, &value);
++ }
++ else
++ {
++ RTMP_BBP_IO_READ8_BY_REG_ID(pAdapter, offset, &value);
++ }
++ // prepare feedback
++ pRaCfg->length = htons(3);
++ pRaCfg->status = htons(0);
++ pRaCfg->data[0] = value;
++
++ ATEDBGPRINT(RT_DEBUG_TRACE,("BBP value = %x\n", value));
++
++ wrq->u.data.length = sizeof(pRaCfg->magic_no) + sizeof(pRaCfg->command_type)
++ + sizeof(pRaCfg->command_id) + sizeof(pRaCfg->length)
++ + sizeof(pRaCfg->sequence) + ntohs(pRaCfg->length);
++
++ if (copy_to_user(wrq->u.data.pointer, pRaCfg, wrq->u.data.length))
++ {
++ ATEDBGPRINT(RT_DEBUG_ERROR, ("copy_to_user() fail in case RACFG_CMD_BBP_READ8\n"));
++ Status = -EFAULT;
++ }
++ else
++ {
++ ATEDBGPRINT(RT_DEBUG_TRACE, ("RACFG_CMD_BBP_READ8 is done !\n"));
++ }
++ }
++ break;
++ case RACFG_CMD_BBP_WRITE8:
++ {
++ USHORT offset;
++ UCHAR value;
++
++ offset = ntohs(pRaCfg->status);
++ memcpy(&value, pRaCfg->data, 1);
++
++ if (ATE_ON(pAdapter))
++ {
++ ATE_BBP_IO_WRITE8_BY_REG_ID(pAdapter, offset, value);
++ }
++ else
++ {
++ RTMP_BBP_IO_WRITE8_BY_REG_ID(pAdapter, offset, value);
++ }
++
++ if ((offset == BBP_R1) || (offset == BBP_R3))
++ {
++ SyncTxRxConfig(pAdapter, offset, value);
++ }
++
++ // prepare feedback
++ pRaCfg->length = htons(2);
++ pRaCfg->status = htons(0);
++ wrq->u.data.length = sizeof(pRaCfg->magic_no) + sizeof(pRaCfg->command_type)
++ + sizeof(pRaCfg->command_id) + sizeof(pRaCfg->length)
++ + sizeof(pRaCfg->sequence) + ntohs(pRaCfg->length);
++
++ if (copy_to_user(wrq->u.data.pointer, pRaCfg, wrq->u.data.length))
++ {
++ ATEDBGPRINT(RT_DEBUG_ERROR, ("copy_to_user() fail in case RACFG_CMD_BBP_WRITE8\n"));
++ Status = -EFAULT;
++ }
++ else
++ {
++ ATEDBGPRINT(RT_DEBUG_TRACE, ("RACFG_CMD_BBP_WRITE8 is done !\n"));
++ }
++ }
++ break;
++
++ case RACFG_CMD_BBP_READ_ALL:
++ {
++ USHORT j;
++
++ for (j = 0; j < 137; j++)
++ {
++ pRaCfg->data[j] = 0;
++
++ if (ATE_ON(pAdapter))
++ {
++ ATE_BBP_IO_READ8_BY_REG_ID(pAdapter, j, &pRaCfg->data[j]);
++ }
++ else
++ {
++ RTMP_BBP_IO_READ8_BY_REG_ID(pAdapter, j, &pRaCfg->data[j]);
++ }
++ }
++
++ // prepare feedback
++ pRaCfg->length = htons(2+137);
++ pRaCfg->status = htons(0);
++
++ wrq->u.data.length = sizeof(pRaCfg->magic_no) + sizeof(pRaCfg->command_type)
++ + sizeof(pRaCfg->command_id) + sizeof(pRaCfg->length)
++ + sizeof(pRaCfg->sequence) + ntohs(pRaCfg->length);
++
++ if (copy_to_user(wrq->u.data.pointer, pRaCfg, wrq->u.data.length))
++ {
++ ATEDBGPRINT(RT_DEBUG_ERROR, ("copy_to_user() fail in case RACFG_CMD_BBP_READ_ALL\n"));
++ Status = -EFAULT;
++ }
++ else
++ {
++ ATEDBGPRINT(RT_DEBUG_TRACE, ("RACFG_CMD_BBP_READ_ALL is done !\n"));
++ }
++ }
++
++ break;
++
++ case RACFG_CMD_ATE_E2PROM_READ_BULK:
++ {
++ USHORT offset;
++ USHORT len;
++ USHORT buffer[EEPROM_SIZE/2];
++
++ offset = ntohs(pRaCfg->status);
++ memcpy(&len, pRaCfg->data, 2);
++ len = ntohs(len);
++
++ rt_ee_read_all(pAdapter,(USHORT *)buffer);
++ if (offset + len <= EEPROM_SIZE)
++ memcpy_exs(pAdapter, pRaCfg->data, (UCHAR *)buffer+offset, len);
++ else
++ ATEDBGPRINT(RT_DEBUG_ERROR, ("exceed EEPROM size\n"));
++
++ // prepare feedback
++ pRaCfg->length = htons(2+len);
++ pRaCfg->status = htons(0);
++ wrq->u.data.length = sizeof(pRaCfg->magic_no) + sizeof(pRaCfg->command_type)
++ + sizeof(pRaCfg->command_id) + sizeof(pRaCfg->length)
++ + sizeof(pRaCfg->sequence) + ntohs(pRaCfg->length);
++
++ if (copy_to_user(wrq->u.data.pointer, pRaCfg, wrq->u.data.length))
++ {
++ ATEDBGPRINT(RT_DEBUG_ERROR, ("copy_to_user() fail in case RACFG_CMD_ATE_E2PROM_READ_BULK\n"));
++ Status = -EFAULT;
++ }
++ else
++ {
++ ATEDBGPRINT(RT_DEBUG_TRACE, ("RACFG_CMD_ATE_E2PROM_READ_BULK is done !\n"));
++ }
++
++ }
++ break;
++
++ case RACFG_CMD_ATE_E2PROM_WRITE_BULK:
++ {
++ USHORT offset;
++ USHORT len;
++ USHORT buffer[EEPROM_SIZE/2];
++
++ offset = ntohs(pRaCfg->status);
++ memcpy(&len, pRaCfg->data, 2);
++ len = ntohs(len);
++
++ rt_ee_read_all(pAdapter,(USHORT *)buffer);
++ memcpy_exs(pAdapter, (UCHAR *)buffer + offset, (UCHAR *)pRaCfg->data + 2, len);
++ rt_ee_write_all(pAdapter,(USHORT *)buffer);
++
++ // prepare feedback
++ pRaCfg->length = htons(2);
++ pRaCfg->status = htons(0);
++ wrq->u.data.length = sizeof(pRaCfg->magic_no) + sizeof(pRaCfg->command_type)
++ + sizeof(pRaCfg->command_id) + sizeof(pRaCfg->length)
++ + sizeof(pRaCfg->sequence) + ntohs(pRaCfg->length);
++ if (copy_to_user(wrq->u.data.pointer, pRaCfg, wrq->u.data.length))
++ {
++ ATEDBGPRINT(RT_DEBUG_ERROR, ("copy_to_user() fail in case RACFG_CMD_ATE_E2PROM_WRITE_BULK\n"));
++ Status = -EFAULT;
++ }
++ else
++ {
++ ATEDBGPRINT(RT_DEBUG_ERROR, ("RACFG_CMD_ATE_E2PROM_WRITE_BULK is done !\n"));
++ }
++
++ }
++ break;
++
++ case RACFG_CMD_ATE_IO_WRITE_BULK:
++ {
++ UINT32 offset, i, value;
++ USHORT len;
++
++ memcpy(&offset, &pRaCfg->status, 4);
++ offset = ntohl(offset);
++ memcpy(&len, pRaCfg->data+2, 2);
++ len = ntohs(len);
++
++ for (i = 0; i < len; i += 4)
++ {
++ memcpy_exl(pAdapter, (UCHAR *)&value, pRaCfg->data+4+i, 4);
++ printk("Write %x %x\n", offset + i, value);
++ RTMP_IO_WRITE32(pAdapter, (offset +i) & 0xffff, value);
++ }
++
++ // prepare feedback
++ pRaCfg->length = htons(2);
++ pRaCfg->status = htons(0);
++ wrq->u.data.length = sizeof(pRaCfg->magic_no) + sizeof(pRaCfg->command_type)
++ + sizeof(pRaCfg->command_id) + sizeof(pRaCfg->length)
++ + sizeof(pRaCfg->sequence) + ntohs(pRaCfg->length);
++ if (copy_to_user(wrq->u.data.pointer, pRaCfg, wrq->u.data.length))
++ {
++ ATEDBGPRINT(RT_DEBUG_ERROR, ("copy_to_user() fail in case RACFG_CMD_ATE_IO_WRITE_BULK\n"));
++ Status = -EFAULT;
++ }
++ else
++ {
++ ATEDBGPRINT(RT_DEBUG_ERROR, ("RACFG_CMD_ATE_IO_WRITE_BULK is done !\n"));
++ }
++
++ }
++ break;
++
++ case RACFG_CMD_ATE_BBP_READ_BULK:
++ {
++ USHORT offset;
++ USHORT len;
++ USHORT j;
++
++ offset = ntohs(pRaCfg->status);
++ memcpy(&len, pRaCfg->data, 2);
++ len = ntohs(len);
++
++
++ for (j = offset; j < (offset+len); j++)
++ {
++ pRaCfg->data[j - offset] = 0;
++
++ if (pAdapter->ate.Mode == ATE_STOP)
++ {
++ RTMP_BBP_IO_READ8_BY_REG_ID(pAdapter, j, &pRaCfg->data[j - offset]);
++ }
++ else
++ {
++ ATE_BBP_IO_READ8_BY_REG_ID(pAdapter, j, &pRaCfg->data[j - offset]);
++ }
++ }
++
++ // prepare feedback
++ pRaCfg->length = htons(2+len);
++ pRaCfg->status = htons(0);
++ wrq->u.data.length = sizeof(pRaCfg->magic_no) + sizeof(pRaCfg->command_type)
++ + sizeof(pRaCfg->command_id) + sizeof(pRaCfg->length)
++ + sizeof(pRaCfg->sequence) + ntohs(pRaCfg->length);
++
++ if (copy_to_user(wrq->u.data.pointer, pRaCfg, wrq->u.data.length))
++ {
++ ATEDBGPRINT(RT_DEBUG_ERROR, ("copy_to_user() fail in case RACFG_CMD_ATE_BBP_READ_BULK\n"));
++ Status = -EFAULT;
++ }
++ else
++ {
++ ATEDBGPRINT(RT_DEBUG_TRACE, ("RACFG_CMD_ATE_BBP_READ_BULK is done !\n"));
++ }
++
++ }
++ break;
++
++ case RACFG_CMD_ATE_BBP_WRITE_BULK:
++ {
++ USHORT offset;
++ USHORT len;
++ USHORT j;
++ UCHAR *value;
++
++ offset = ntohs(pRaCfg->status);
++ memcpy(&len, pRaCfg->data, 2);
++ len = ntohs(len);
++
++ for (j = offset; j < (offset+len); j++)
++ {
++ value = pRaCfg->data + 2 + (j - offset);
++ if (pAdapter->ate.Mode == ATE_STOP)
++ {
++ RTMP_BBP_IO_WRITE8_BY_REG_ID(pAdapter, j, *value);
++ }
++ else
++ {
++ ATE_BBP_IO_WRITE8_BY_REG_ID(pAdapter, j, *value);
++ }
++ }
++
++ // prepare feedback
++ pRaCfg->length = htons(2);
++ pRaCfg->status = htons(0);
++ wrq->u.data.length = sizeof(pRaCfg->magic_no) + sizeof(pRaCfg->command_type)
++ + sizeof(pRaCfg->command_id) + sizeof(pRaCfg->length)
++ + sizeof(pRaCfg->sequence) + ntohs(pRaCfg->length);
++
++ if (copy_to_user(wrq->u.data.pointer, pRaCfg, wrq->u.data.length))
++ {
++ ATEDBGPRINT(RT_DEBUG_ERROR, ("copy_to_user() fail in case RACFG_CMD_ATE_BBP_WRITE_BULK\n"));
++ Status = -EFAULT;
++ }
++ else
++ {
++ ATEDBGPRINT(RT_DEBUG_TRACE, ("RACFG_CMD_ATE_BBP_WRITE_BULK is done !\n"));
++ }
++ }
++ break;
++
++#ifdef CONFIG_RALINK_RT3052
++ case RACFG_CMD_ATE_RF_READ_BULK:
++ {
++ USHORT offset;
++ USHORT len;
++ USHORT j;
++
++ offset = ntohs(pRaCfg->status);
++ memcpy(&len, pRaCfg->data, 2);
++ len = ntohs(len);
++
++ for (j = offset; j < (offset+len); j++)
++ {
++ pRaCfg->data[j - offset] = 0;
++ RT30xxReadRFRegister(pAdapter, j, &pRaCfg->data[j - offset]);
++ }
++
++ // prepare feedback
++ pRaCfg->length = htons(2+len);
++ pRaCfg->status = htons(0);
++ wrq->u.data.length = sizeof(pRaCfg->magic_no) + sizeof(pRaCfg->command_type)
++ + sizeof(pRaCfg->command_id) + sizeof(pRaCfg->length)
++ + sizeof(pRaCfg->sequence) + ntohs(pRaCfg->length);
++
++ if (copy_to_user(wrq->u.data.pointer, pRaCfg, wrq->u.data.length))
++ {
++ ATEDBGPRINT(RT_DEBUG_ERROR, ("copy_to_user() fail in case RACFG_CMD_ATE_RF_READ_BULK\n"));
++ Status = -EFAULT;
++ }
++ else
++ {
++ ATEDBGPRINT(RT_DEBUG_TRACE, ("RACFG_CMD_ATE_RF_READ_BULK is done !\n"));
++ }
++
++ }
++ break;
++
++ case RACFG_CMD_ATE_RF_WRITE_BULK:
++ {
++ USHORT offset;
++ USHORT len;
++ USHORT j;
++ UCHAR *value;
++
++ offset = ntohs(pRaCfg->status);
++ memcpy(&len, pRaCfg->data, 2);
++ len = ntohs(len);
++
++ for (j = offset; j < (offset+len); j++)
++ {
++ value = pRaCfg->data + 2 + (j - offset);
++ RT30xxWriteRFRegister(pAdapter, j, *value);
++ }
++
++ // prepare feedback
++ pRaCfg->length = htons(2);
++ pRaCfg->status = htons(0);
++ wrq->u.data.length = sizeof(pRaCfg->magic_no) + sizeof(pRaCfg->command_type)
++ + sizeof(pRaCfg->command_id) + sizeof(pRaCfg->length)
++ + sizeof(pRaCfg->sequence) + ntohs(pRaCfg->length);
++
++ if (copy_to_user(wrq->u.data.pointer, pRaCfg, wrq->u.data.length))
++ {
++ ATEDBGPRINT(RT_DEBUG_ERROR, ("copy_to_user() fail in case RACFG_CMD_ATE_RF_WRITE_BULK\n"));
++ Status = -EFAULT;
++ }
++ else
++ {
++ ATEDBGPRINT(RT_DEBUG_TRACE, ("RACFG_CMD_ATE_RF_WRITE_BULK is done !\n"));
++ }
++
++ }
++ break;
++#endif
++
++
++ case RACFG_CMD_GET_NOISE_LEVEL:
++ {
++ UCHAR channel;
++ INT32 buffer[3][10];/* 3 : RxPath ; 10 : no. of per rssi samples */
++
++ channel = (ntohs(pRaCfg->status) & 0x00FF);
++ CalNoiseLevel(pAdapter, channel, buffer);
++ memcpy_exl(pAdapter, (UCHAR *)pRaCfg->data, (UCHAR *)&(buffer[0][0]), (sizeof(INT32)*3*10));
++
++ // prepare feedback
++ pRaCfg->length = htons(2 + (sizeof(INT32)*3*10));
++ pRaCfg->status = htons(0);
++ wrq->u.data.length = sizeof(pRaCfg->magic_no) + sizeof(pRaCfg->command_type)
++ + sizeof(pRaCfg->command_id) + sizeof(pRaCfg->length)
++ + sizeof(pRaCfg->sequence) + ntohs(pRaCfg->length);
++
++ if (copy_to_user(wrq->u.data.pointer, pRaCfg, wrq->u.data.length))
++ {
++ ATEDBGPRINT(RT_DEBUG_ERROR, ("copy_to_user() fail in case RACFG_CMD_GET_NOISE_LEVEL\n"));
++ Status = -EFAULT;
++ }
++ else
++ {
++ ATEDBGPRINT(RT_DEBUG_TRACE, ("RACFG_CMD_GET_NOISE_LEVEL is done !\n"));
++ }
++ }
++ break;
++
++ case RACFG_CMD_GET_COUNTER:
++ {
++ memcpy_exl(pAdapter, &pRaCfg->data[0], (UCHAR *)&pAdapter->ate.U2M, 4);
++ memcpy_exl(pAdapter, &pRaCfg->data[4], (UCHAR *)&pAdapter->ate.OtherData, 4);
++ memcpy_exl(pAdapter, &pRaCfg->data[8], (UCHAR *)&pAdapter->ate.Beacon, 4);
++ memcpy_exl(pAdapter, &pRaCfg->data[12], (UCHAR *)&pAdapter->ate.OtherCount, 4);
++ memcpy_exl(pAdapter, &pRaCfg->data[16], (UCHAR *)&pAdapter->ate.TxAc0, 4);
++ memcpy_exl(pAdapter, &pRaCfg->data[20], (UCHAR *)&pAdapter->ate.TxAc1, 4);
++ memcpy_exl(pAdapter, &pRaCfg->data[24], (UCHAR *)&pAdapter->ate.TxAc2, 4);
++ memcpy_exl(pAdapter, &pRaCfg->data[28], (UCHAR *)&pAdapter->ate.TxAc3, 4);
++ memcpy_exl(pAdapter, &pRaCfg->data[32], (UCHAR *)&pAdapter->ate.TxHCCA, 4);
++ memcpy_exl(pAdapter, &pRaCfg->data[36], (UCHAR *)&pAdapter->ate.TxMgmt, 4);
++ memcpy_exl(pAdapter, &pRaCfg->data[40], (UCHAR *)&pAdapter->ate.RSSI0, 4);
++ memcpy_exl(pAdapter, &pRaCfg->data[44], (UCHAR *)&pAdapter->ate.RSSI1, 4);
++ memcpy_exl(pAdapter, &pRaCfg->data[48], (UCHAR *)&pAdapter->ate.RSSI2, 4);
++ memcpy_exl(pAdapter, &pRaCfg->data[52], (UCHAR *)&pAdapter->ate.SNR0, 4);
++ memcpy_exl(pAdapter, &pRaCfg->data[56], (UCHAR *)&pAdapter->ate.SNR1, 4);
++
++ pRaCfg->length = htons(2+60);
++ pRaCfg->status = htons(0);
++ wrq->u.data.length = sizeof(pRaCfg->magic_no) + sizeof(pRaCfg->command_type)
++ + sizeof(pRaCfg->command_id) + sizeof(pRaCfg->length)
++ + sizeof(pRaCfg->sequence) + ntohs(pRaCfg->length);
++
++ if (copy_to_user(wrq->u.data.pointer, pRaCfg, wrq->u.data.length))
++ {
++ ATEDBGPRINT(RT_DEBUG_ERROR, ("copy_to_user() fail in case RACFG_CMD_GET_COUNTER\n"));
++ Status = -EFAULT;
++ }
++ else
++ {
++ ATEDBGPRINT(RT_DEBUG_TRACE, ("RACFG_CMD_GET_COUNTER is done !\n"));
++ }
++ }
++ break;
++
++ case RACFG_CMD_CLEAR_COUNTER:
++ {
++ pAdapter->ate.U2M = 0;
++ pAdapter->ate.OtherData = 0;
++ pAdapter->ate.Beacon = 0;
++ pAdapter->ate.OtherCount = 0;
++ pAdapter->ate.TxAc0 = 0;
++ pAdapter->ate.TxAc1 = 0;
++ pAdapter->ate.TxAc2 = 0;
++ pAdapter->ate.TxAc3 = 0;
++ pAdapter->ate.TxHCCA = 0;
++ pAdapter->ate.TxMgmt = 0;
++ pAdapter->ate.TxDoneCount = 0;
++
++ pRaCfg->length = htons(2);
++ pRaCfg->status = htons(0);
++
++ wrq->u.data.length = sizeof(pRaCfg->magic_no) + sizeof(pRaCfg->command_type)
++ + sizeof(pRaCfg->command_id) + sizeof(pRaCfg->length)
++ + sizeof(pRaCfg->sequence) + ntohs(pRaCfg->length);
++
++ if (copy_to_user(wrq->u.data.pointer, pRaCfg, wrq->u.data.length))
++ {
++ ATEDBGPRINT(RT_DEBUG_ERROR, ("copy_to_user() fail in case RACFG_CMD_CLEAR_COUNTER\n"));
++ Status = -EFAULT;
++ }
++ else
++ {
++ ATEDBGPRINT(RT_DEBUG_TRACE, ("RACFG_CMD_CLEAR_COUNTER is done !\n"));
++ }
++ }
++
++ break;
++
++ case RACFG_CMD_TX_START:
++ {
++ USHORT *p;
++ USHORT err = 1;
++ UCHAR Bbp22Value = 0, Bbp24Value = 0;
++
++ if ((pAdapter->ate.TxStatus != 0) && (pAdapter->ate.Mode & ATE_TXFRAME))
++ {
++ ATEDBGPRINT(RT_DEBUG_TRACE,("Ate Tx is already running, to run next Tx, you must stop it first\n"));
++ err = 2;
++ goto TX_START_ERROR;
++ }
++ else if ((pAdapter->ate.TxStatus != 0) && !(pAdapter->ate.Mode & ATE_TXFRAME))
++ {
++ int i = 0;
++
++ while ((i++ < 10) && (pAdapter->ate.TxStatus != 0))
++ {
++ RTMPusecDelay(5000);
++ }
++
++ // force it to stop
++ pAdapter->ate.TxStatus = 0;
++ pAdapter->ate.TxDoneCount = 0;
++ //pAdapter->ate.Repeat = 0;
++ pAdapter->ate.bQATxStart = FALSE;
++ }
++
++ // If pRaCfg->length == 0, this "RACFG_CMD_TX_START" is for Carrier test or Carrier Suppression.
++ if (ntohs(pRaCfg->length) != 0)
++ {
++ // Get frame info
++#ifdef RT2870
++ NdisMoveMemory(&pAdapter->ate.TxInfo, pRaCfg->data - 2, 4);
++#ifdef RT_BIG_ENDIAN
++ RTMPDescriptorEndianChange((PUCHAR) &pAdapter->ate.TxInfo, TYPE_TXINFO);
++#endif // RT_BIG_ENDIAN //
++#endif // RT2870 //
++
++ NdisMoveMemory(&pAdapter->ate.TxWI, pRaCfg->data + 2, 16);
++#ifdef RT_BIG_ENDIAN
++ RTMPWIEndianChange((PUCHAR)&pAdapter->ate.TxWI, TYPE_TXWI);
++#endif // RT_BIG_ENDIAN //
++
++ NdisMoveMemory(&pAdapter->ate.TxCount, pRaCfg->data + 18, 4);
++ pAdapter->ate.TxCount = ntohl(pAdapter->ate.TxCount);
++
++ p = (USHORT *)(&pRaCfg->data[22]);
++ //p = pRaCfg->data + 22;
++ // always use QID_AC_BE
++ pAdapter->ate.QID = 0;
++ p = (USHORT *)(&pRaCfg->data[24]);
++ //p = pRaCfg->data + 24;
++ pAdapter->ate.HLen = ntohs(*p);
++
++ if (pAdapter->ate.HLen > 32)
++ {
++ ATEDBGPRINT(RT_DEBUG_ERROR,("pAdapter->ate.HLen > 32\n"));
++ err = 3;
++ goto TX_START_ERROR;
++ }
++
++ NdisMoveMemory(&pAdapter->ate.Header, pRaCfg->data + 26, pAdapter->ate.HLen);
++
++
++ pAdapter->ate.PLen = ntohs(pRaCfg->length) - (pAdapter->ate.HLen + 28);
++
++ if (pAdapter->ate.PLen > 32)
++ {
++ ATEDBGPRINT(RT_DEBUG_ERROR,("pAdapter->ate.PLen > 32\n"));
++ err = 4;
++ goto TX_START_ERROR;
++ }
++
++ NdisMoveMemory(&pAdapter->ate.Pattern, pRaCfg->data + 26 + pAdapter->ate.HLen, pAdapter->ate.PLen);
++ pAdapter->ate.DLen = pAdapter->ate.TxWI.MPDUtotalByteCount - pAdapter->ate.HLen;
++ }
++
++ ATE_BBP_IO_READ8_BY_REG_ID(pAdapter, BBP_R22, &Bbp22Value);
++
++ switch (Bbp22Value)
++ {
++ case BBP22_TXFRAME:
++ {
++ if (pAdapter->ate.TxCount == 0)
++ {
++ }
++ ATEDBGPRINT(RT_DEBUG_TRACE,("START TXFRAME\n"));
++ pAdapter->ate.bQATxStart = TRUE;
++ Set_ATE_Proc(pAdapter, "TXFRAME");
++ }
++ break;
++
++ case BBP22_TXCONT_OR_CARRSUPP:
++ {
++ ATEDBGPRINT(RT_DEBUG_TRACE,("BBP22_TXCONT_OR_CARRSUPP\n"));
++ ATE_BBP_IO_READ8_BY_REG_ID(pAdapter, 24, &Bbp24Value);
++
++ switch (Bbp24Value)
++ {
++ case BBP24_TXCONT:
++ {
++ ATEDBGPRINT(RT_DEBUG_TRACE,("START TXCONT\n"));
++ pAdapter->ate.bQATxStart = TRUE;
++ Set_ATE_Proc(pAdapter, "TXCONT");
++ }
++ break;
++
++ case BBP24_CARRSUPP:
++ {
++ ATEDBGPRINT(RT_DEBUG_TRACE,("START TXCARRSUPP\n"));
++ pAdapter->ate.bQATxStart = TRUE;
++ pAdapter->ate.Mode |= ATE_TXCARRSUPP;
++ }
++ break;
++
++ default:
++ {
++ ATEDBGPRINT(RT_DEBUG_ERROR,("Unknown Start TX subtype !"));
++ }
++ break;
++ }
++ }
++ break;
++
++ case BBP22_TXCARR:
++ {
++ ATEDBGPRINT(RT_DEBUG_TRACE,("START TXCARR\n"));
++ pAdapter->ate.bQATxStart = TRUE;
++ Set_ATE_Proc(pAdapter, "TXCARR");
++ }
++ break;
++
++ default:
++ {
++ ATEDBGPRINT(RT_DEBUG_ERROR,("Unknown Start TX subtype !"));
++ }
++ break;
++ }
++
++ if (pAdapter->ate.bQATxStart == TRUE)
++ {
++ // prepare feedback
++ pRaCfg->length = htons(2);
++ pRaCfg->status = htons(0);
++
++ wrq->u.data.length = sizeof(pRaCfg->magic_no) + sizeof(pRaCfg->command_type)
++ + sizeof(pRaCfg->command_id) + sizeof(pRaCfg->length)
++ + sizeof(pRaCfg->sequence) + ntohs(pRaCfg->length);
++
++ if (copy_to_user(wrq->u.data.pointer, pRaCfg, wrq->u.data.length))
++ {
++ ATEDBGPRINT(RT_DEBUG_ERROR, ("copy_to_user() was failed in case RACFG_CMD_TX_START\n"));
++ Status = -EFAULT;
++ }
++ else
++ {
++ ATEDBGPRINT(RT_DEBUG_TRACE, ("RACFG_CMD_TX_START is done !\n"));
++ }
++ break;
++ }
++
++TX_START_ERROR:
++ // prepare feedback
++ pRaCfg->length = htons(2);
++ pRaCfg->status = htons(err);
++
++ wrq->u.data.length = sizeof(pRaCfg->magic_no) + sizeof(pRaCfg->command_type)
++ + sizeof(pRaCfg->command_id) + sizeof(pRaCfg->length)
++ + sizeof(pRaCfg->sequence) + ntohs(pRaCfg->length);
++ if (copy_to_user(wrq->u.data.pointer, pRaCfg, wrq->u.data.length))
++ {
++ ATEDBGPRINT(RT_DEBUG_ERROR, ("copy_to_user() fail in case RACFG_CMD_TX_START\n"));
++ Status = -EFAULT;
++ }
++ else
++ {
++ ATEDBGPRINT(RT_DEBUG_TRACE, ("feedback of TX_START_ERROR is done !\n"));
++ }
++ }
++ break;
++
++ case RACFG_CMD_GET_TX_STATUS:
++ {
++ UINT32 count;
++
++ // prepare feedback
++ pRaCfg->length = htons(6);
++ pRaCfg->status = htons(0);
++ count = htonl(pAdapter->ate.TxDoneCount);
++ NdisMoveMemory(pRaCfg->data, &count, 4);
++ wrq->u.data.length = sizeof(pRaCfg->magic_no) + sizeof(pRaCfg->command_type)
++ + sizeof(pRaCfg->command_id) + sizeof(pRaCfg->length)
++ + sizeof(pRaCfg->sequence) + ntohs(pRaCfg->length);
++
++ if (copy_to_user(wrq->u.data.pointer, pRaCfg, wrq->u.data.length))
++ {
++ ATEDBGPRINT(RT_DEBUG_ERROR, ("copy_to_user() fail in case RACFG_CMD_GET_TX_STATUS\n"));
++ Status = -EFAULT;
++ }
++ else
++ {
++ ATEDBGPRINT(RT_DEBUG_TRACE, ("RACFG_CMD_GET_TX_STATUS is done !\n"));
++ }
++ }
++ break;
++
++ case RACFG_CMD_TX_STOP:
++ {
++ ATEDBGPRINT(RT_DEBUG_TRACE,("RACFG_CMD_TX_STOP\n"));
++
++ Set_ATE_Proc(pAdapter, "TXSTOP");
++
++ // prepare feedback
++ pRaCfg->length = htons(2);
++ pRaCfg->status = htons(0);
++ wrq->u.data.length = sizeof(pRaCfg->magic_no) + sizeof(pRaCfg->command_type)
++ + sizeof(pRaCfg->command_id) + sizeof(pRaCfg->length)
++ + sizeof(pRaCfg->sequence) + ntohs(pRaCfg->length);
++
++ if (copy_to_user(wrq->u.data.pointer, pRaCfg, wrq->u.data.length))
++ {
++ ATEDBGPRINT(RT_DEBUG_TRACE, ("copy_to_user() fail in case RACFG_CMD_TX_STOP\n"));
++ Status = -EFAULT;
++ }
++ else
++ {
++ ATEDBGPRINT(RT_DEBUG_TRACE, ("RACFG_CMD_TX_STOP is done !\n"));
++ }
++ }
++ break;
++
++ case RACFG_CMD_RX_START:
++ {
++ ATEDBGPRINT(RT_DEBUG_TRACE,("RACFG_CMD_RX_START\n"));
++
++ pAdapter->ate.bQARxStart = TRUE;
++ Set_ATE_Proc(pAdapter, "RXFRAME");
++
++ // prepare feedback
++ pRaCfg->length = htons(2);
++ pRaCfg->status = htons(0);
++ wrq->u.data.length = sizeof(pRaCfg->magic_no) + sizeof(pRaCfg->command_type)
++ + sizeof(pRaCfg->command_id) + sizeof(pRaCfg->length)
++ + sizeof(pRaCfg->sequence) + ntohs(pRaCfg->length);
++
++ if (copy_to_user(wrq->u.data.pointer, pRaCfg, wrq->u.data.length))
++ {
++ ATEDBGPRINT(RT_DEBUG_ERROR, ("copy_to_user() fail in case RACFG_CMD_RX_START\n"));
++ Status = -EFAULT;
++ }
++ else
++ {
++ ATEDBGPRINT(RT_DEBUG_TRACE, ("RACFG_CMD_RX_START is done !\n"));
++ }
++ }
++ break;
++
++ case RACFG_CMD_RX_STOP:
++ {
++ ATEDBGPRINT(RT_DEBUG_TRACE,("RACFG_CMD_RX_STOP\n"));
++
++ Set_ATE_Proc(pAdapter, "RXSTOP");
++
++ // prepare feedback
++ pRaCfg->length = htons(2);
++ pRaCfg->status = htons(0);
++ wrq->u.data.length = sizeof(pRaCfg->magic_no) + sizeof(pRaCfg->command_type)
++ + sizeof(pRaCfg->command_id) + sizeof(pRaCfg->length)
++ + sizeof(pRaCfg->sequence) + ntohs(pRaCfg->length);
++
++ if (copy_to_user(wrq->u.data.pointer, pRaCfg, wrq->u.data.length))
++ {
++ ATEDBGPRINT(RT_DEBUG_ERROR, ("copy_to_user() fail in case RACFG_CMD_RX_STOP\n"));
++ Status = -EFAULT;
++ }
++ else
++ {
++ ATEDBGPRINT(RT_DEBUG_TRACE, ("RACFG_CMD_RX_STOP is done !\n"));
++ }
++ }
++ break;
++
++ /* The following cases are for new ATE GUI(not QA). */
++ /*==================================================*/
++ case RACFG_CMD_ATE_START_TX_CARRIER:
++ {
++ ATEDBGPRINT(RT_DEBUG_TRACE,("RACFG_CMD_ATE_START_TX_CARRIER\n"));
++
++ Set_ATE_Proc(pAdapter, "TXCARR");
++
++ pRaCfg->length = htons(2);
++ pRaCfg->status = htons(0);
++
++ wrq->u.data.length = sizeof(pRaCfg->magic_no) + sizeof(pRaCfg->command_type)
++ + sizeof(pRaCfg->command_id) + sizeof(pRaCfg->length)
++ + sizeof(pRaCfg->sequence) + ntohs(pRaCfg->length);
++
++ ATEDBGPRINT(RT_DEBUG_TRACE, ("wrq->u.data.length = %d\n", wrq->u.data.length));
++
++ if (copy_to_user(wrq->u.data.pointer, pRaCfg, wrq->u.data.length))
++ {
++ ATEDBGPRINT(RT_DEBUG_ERROR, ("copy_to_user() fail in case RACFG_CMD_ATE_START_TX_CARRIER\n"));
++ Status = -EFAULT;
++ }
++ else
++ {
++ ATEDBGPRINT(RT_DEBUG_TRACE, ("RACFG_CMD_ATE_START_TX_CARRIER is done !\n"));
++ }
++ }
++ break;
++
++ case RACFG_CMD_ATE_START_TX_CONT:
++ {
++ ATEDBGPRINT(RT_DEBUG_TRACE,("RACFG_CMD_ATE_START_TX_CONT\n"));
++
++ Set_ATE_Proc(pAdapter, "TXCONT");
++
++ pRaCfg->length = htons(2);
++ pRaCfg->status = htons(0);
++
++ wrq->u.data.length = sizeof(pRaCfg->magic_no) + sizeof(pRaCfg->command_type)
++ + sizeof(pRaCfg->command_id) + sizeof(pRaCfg->length)
++ + sizeof(pRaCfg->sequence) + ntohs(pRaCfg->length);
++
++ ATEDBGPRINT(RT_DEBUG_TRACE, ("wrq->u.data.length = %d\n", wrq->u.data.length));
++
++ if (copy_to_user(wrq->u.data.pointer, pRaCfg, wrq->u.data.length))
++ {
++ ATEDBGPRINT(RT_DEBUG_ERROR, ("copy_to_user() fail in case RACFG_CMD_ATE_START_TX_CONT\n"));
++ Status = -EFAULT;
++ }
++ else
++ {
++ ATEDBGPRINT(RT_DEBUG_TRACE, ("RACFG_CMD_ATE_START_TX_CONT is done !\n"));
++ }
++ }
++ break;
++
++ case RACFG_CMD_ATE_START_TX_FRAME:
++ {
++ ATEDBGPRINT(RT_DEBUG_TRACE,("RACFG_CMD_ATE_START_TX_FRAME\n"));
++
++ Set_ATE_Proc(pAdapter, "TXFRAME");
++
++ pRaCfg->length = htons(2);
++ pRaCfg->status = htons(0);
++
++ wrq->u.data.length = sizeof(pRaCfg->magic_no) + sizeof(pRaCfg->command_type)
++ + sizeof(pRaCfg->command_id) + sizeof(pRaCfg->length)
++ + sizeof(pRaCfg->sequence) + ntohs(pRaCfg->length);
++
++ ATEDBGPRINT(RT_DEBUG_TRACE, ("wrq->u.data.length = %d\n", wrq->u.data.length));
++
++ if (copy_to_user(wrq->u.data.pointer, pRaCfg, wrq->u.data.length))
++ {
++ ATEDBGPRINT(RT_DEBUG_ERROR, ("copy_to_user() fail in case RACFG_CMD_ATE_START_TX_FRAME\n"));
++ Status = -EFAULT;
++ }
++ else
++ {
++ ATEDBGPRINT(RT_DEBUG_TRACE, ("RACFG_CMD_ATE_START_TX_FRAME is done !\n"));
++ }
++ }
++ break;
++
++ case RACFG_CMD_ATE_SET_BW:
++ {
++ SHORT value = 0;
++ UCHAR str[LEN_OF_ARG];
++
++ NdisZeroMemory(str, LEN_OF_ARG);
++
++ ATEDBGPRINT(RT_DEBUG_TRACE,("RACFG_CMD_ATE_SET_BW\n"));
++
++ memcpy((PUCHAR)&value, (PUCHAR)&(pRaCfg->status), 2);
++ value = ntohs(value);
++ sprintf((PCHAR)str, "%d", value);
++
++ Set_ATE_TX_BW_Proc(pAdapter, str);
++
++ // prepare feedback
++ pRaCfg->length = htons(2);
++ pRaCfg->status = htons(0);
++ wrq->u.data.length = sizeof(pRaCfg->magic_no) + sizeof(pRaCfg->command_type)
++ + sizeof(pRaCfg->command_id) + sizeof(pRaCfg->length)
++ + sizeof(pRaCfg->sequence) + ntohs(pRaCfg->length);
++
++ if (copy_to_user(wrq->u.data.pointer, pRaCfg, wrq->u.data.length))
++ {
++ ATEDBGPRINT(RT_DEBUG_ERROR, ("copy_to_user() fail in case RACFG_CMD_ATE_SET_BW\n"));
++ Status = -EFAULT;
++ }
++ else
++ {
++ ATEDBGPRINT(RT_DEBUG_TRACE, ("RACFG_CMD_ATE_SET_BW is done !\n"));
++ }
++ }
++ break;
++
++ case RACFG_CMD_ATE_SET_TX_POWER0:
++ {
++ SHORT value = 0;
++ UCHAR str[LEN_OF_ARG];
++
++ NdisZeroMemory(str, LEN_OF_ARG);
++
++ ATEDBGPRINT(RT_DEBUG_TRACE,("RACFG_CMD_ATE_SET_TX_POWER0\n"));
++
++ memcpy((PUCHAR)&value, (PUCHAR)&(pRaCfg->status), 2);
++ value = ntohs(value);
++ sprintf((PCHAR)str, "%d", value);
++ Set_ATE_TX_POWER0_Proc(pAdapter, str);
++
++ // prepare feedback
++ pRaCfg->length = htons(2);
++ pRaCfg->status = htons(0);
++ wrq->u.data.length = sizeof(pRaCfg->magic_no) + sizeof(pRaCfg->command_type)
++ + sizeof(pRaCfg->command_id) + sizeof(pRaCfg->length)
++ + sizeof(pRaCfg->sequence) + ntohs(pRaCfg->length);
++
++ if (copy_to_user(wrq->u.data.pointer, pRaCfg, wrq->u.data.length))
++ {
++ ATEDBGPRINT(RT_DEBUG_ERROR, ("copy_to_user() fail in case RACFG_CMD_ATE_SET_TX_POWER0\n"));
++ Status = -EFAULT;
++ }
++ else
++ {
++ ATEDBGPRINT(RT_DEBUG_TRACE, ("RACFG_CMD_ATE_SET_TX_POWER0 is done !\n"));
++ }
++ }
++ break;
++
++ case RACFG_CMD_ATE_SET_TX_POWER1:
++ {
++ SHORT value = 0;
++ UCHAR str[LEN_OF_ARG];
++
++ NdisZeroMemory(str, LEN_OF_ARG);
++
++ ATEDBGPRINT(RT_DEBUG_TRACE,("RACFG_CMD_ATE_SET_TX_POWER1\n"));
++
++ memcpy((PUCHAR)&value, (PUCHAR)&(pRaCfg->status), 2);
++ value = ntohs(value);
++ sprintf((PCHAR)str, "%d", value);
++ Set_ATE_TX_POWER1_Proc(pAdapter, str);
++
++ // prepare feedback
++ pRaCfg->length = htons(2);
++ pRaCfg->status = htons(0);
++ wrq->u.data.length = sizeof(pRaCfg->magic_no) + sizeof(pRaCfg->command_type)
++ + sizeof(pRaCfg->command_id) + sizeof(pRaCfg->length)
++ + sizeof(pRaCfg->sequence) + ntohs(pRaCfg->length);
++
++ if (copy_to_user(wrq->u.data.pointer, pRaCfg, wrq->u.data.length))
++ {
++ ATEDBGPRINT(RT_DEBUG_ERROR, ("copy_to_user() fail in case RACFG_CMD_ATE_SET_TX_POWER1\n"));
++ Status = -EFAULT;
++ }
++ else
++ {
++ ATEDBGPRINT(RT_DEBUG_TRACE, ("RACFG_CMD_ATE_SET_TX_POWER1 is done !\n"));
++ }
++ }
++ break;
++
++ case RACFG_CMD_ATE_SET_FREQ_OFFSET:
++ {
++ SHORT value = 0;
++ UCHAR str[LEN_OF_ARG];
++
++ NdisZeroMemory(str, LEN_OF_ARG);
++
++ ATEDBGPRINT(RT_DEBUG_TRACE,("RACFG_CMD_ATE_SET_FREQ_OFFSET\n"));
++
++ memcpy((PUCHAR)&value, (PUCHAR)&(pRaCfg->status), 2);
++ value = ntohs(value);
++ sprintf((PCHAR)str, "%d", value);
++ Set_ATE_TX_FREQOFFSET_Proc(pAdapter, str);
++
++ // prepare feedback
++ pRaCfg->length = htons(2);
++ pRaCfg->status = htons(0);
++ wrq->u.data.length = sizeof(pRaCfg->magic_no) + sizeof(pRaCfg->command_type)
++ + sizeof(pRaCfg->command_id) + sizeof(pRaCfg->length)
++ + sizeof(pRaCfg->sequence) + ntohs(pRaCfg->length);
++
++ if (copy_to_user(wrq->u.data.pointer, pRaCfg, wrq->u.data.length))
++ {
++ ATEDBGPRINT(RT_DEBUG_ERROR, ("copy_to_user() fail in case RACFG_CMD_ATE_SET_FREQ_OFFSET\n"));
++ Status = -EFAULT;
++ }
++ else
++ {
++ ATEDBGPRINT(RT_DEBUG_TRACE, ("RACFG_CMD_ATE_SET_FREQ_OFFSET is done !\n"));
++ }
++ }
++ break;
++
++ case RACFG_CMD_ATE_GET_STATISTICS:
++ {
++ ATEDBGPRINT(RT_DEBUG_TRACE,("RACFG_CMD_ATE_GET_STATISTICS\n"));
++
++ memcpy_exl(pAdapter, &pRaCfg->data[0], (UCHAR *)&pAdapter->ate.TxDoneCount, 4);
++ memcpy_exl(pAdapter, &pRaCfg->data[4], (UCHAR *)&pAdapter->WlanCounters.RetryCount.u.LowPart, 4);
++ memcpy_exl(pAdapter, &pRaCfg->data[8], (UCHAR *)&pAdapter->WlanCounters.FailedCount.u.LowPart, 4);
++ memcpy_exl(pAdapter, &pRaCfg->data[12], (UCHAR *)&pAdapter->WlanCounters.RTSSuccessCount.u.LowPart, 4);
++ memcpy_exl(pAdapter, &pRaCfg->data[16], (UCHAR *)&pAdapter->WlanCounters.RTSFailureCount.u.LowPart, 4);
++ memcpy_exl(pAdapter, &pRaCfg->data[20], (UCHAR *)&pAdapter->WlanCounters.ReceivedFragmentCount.QuadPart, 4);
++ memcpy_exl(pAdapter, &pRaCfg->data[24], (UCHAR *)&pAdapter->WlanCounters.FCSErrorCount.u.LowPart, 4);
++ memcpy_exl(pAdapter, &pRaCfg->data[28], (UCHAR *)&pAdapter->Counters8023.RxNoBuffer, 4);
++ memcpy_exl(pAdapter, &pRaCfg->data[32], (UCHAR *)&pAdapter->WlanCounters.FrameDuplicateCount.u.LowPart, 4);
++ memcpy_exl(pAdapter, &pRaCfg->data[36], (UCHAR *)&pAdapter->RalinkCounters.OneSecFalseCCACnt, 4);
++
++ if (pAdapter->ate.RxAntennaSel == 0)
++ {
++ INT32 RSSI0 = 0;
++ INT32 RSSI1 = 0;
++ INT32 RSSI2 = 0;
++
++ RSSI0 = (INT32)(pAdapter->ate.LastRssi0 - pAdapter->BbpRssiToDbmDelta);
++ RSSI1 = (INT32)(pAdapter->ate.LastRssi1 - pAdapter->BbpRssiToDbmDelta);
++ RSSI2 = (INT32)(pAdapter->ate.LastRssi2 - pAdapter->BbpRssiToDbmDelta);
++ memcpy_exl(pAdapter, &pRaCfg->data[40], (UCHAR *)&RSSI0, 4);
++ memcpy_exl(pAdapter, &pRaCfg->data[44], (UCHAR *)&RSSI1, 4);
++ memcpy_exl(pAdapter, &pRaCfg->data[48], (UCHAR *)&RSSI2, 4);
++ pRaCfg->length = htons(2+52);
++ }
++ else
++ {
++ INT32 RSSI0 = 0;
++
++ RSSI0 = (INT32)(pAdapter->ate.LastRssi0 - pAdapter->BbpRssiToDbmDelta);
++ memcpy_exl(pAdapter, &pRaCfg->data[40], (UCHAR *)&RSSI0, 4);
++ pRaCfg->length = htons(2+44);
++ }
++ pRaCfg->status = htons(0);
++ wrq->u.data.length = sizeof(pRaCfg->magic_no) + sizeof(pRaCfg->command_type)
++ + sizeof(pRaCfg->command_id) + sizeof(pRaCfg->length)
++ + sizeof(pRaCfg->sequence) + ntohs(pRaCfg->length);
++
++ if (copy_to_user(wrq->u.data.pointer, pRaCfg, wrq->u.data.length))
++ {
++ ATEDBGPRINT(RT_DEBUG_ERROR, ("copy_to_user() fail in case RACFG_CMD_ATE_GET_STATISTICS\n"));
++ Status = -EFAULT;
++ }
++ else
++ {
++ ATEDBGPRINT(RT_DEBUG_TRACE, ("RACFG_CMD_ATE_GET_STATISTICS is done !\n"));
++ }
++ }
++ break;
++
++ case RACFG_CMD_ATE_RESET_COUNTER:
++ {
++ SHORT value = 1;
++ UCHAR str[LEN_OF_ARG];
++
++ NdisZeroMemory(str, LEN_OF_ARG);
++
++ ATEDBGPRINT(RT_DEBUG_TRACE,("RACFG_CMD_ATE_RESET_COUNTER\n"));
++
++ sprintf((PCHAR)str, "%d", value);
++ Set_ResetStatCounter_Proc(pAdapter, str);
++
++ pAdapter->ate.TxDoneCount = 0;
++
++ pRaCfg->length = htons(2);
++ pRaCfg->status = htons(0);
++
++ wrq->u.data.length = sizeof(pRaCfg->magic_no) + sizeof(pRaCfg->command_type)
++ + sizeof(pRaCfg->command_id) + sizeof(pRaCfg->length)
++ + sizeof(pRaCfg->sequence) + ntohs(pRaCfg->length);
++
++ if (copy_to_user(wrq->u.data.pointer, pRaCfg, wrq->u.data.length))
++ {
++ ATEDBGPRINT(RT_DEBUG_ERROR, ("copy_to_user() fail in case RACFG_CMD_ATE_RESET_COUNTER\n"));
++ Status = -EFAULT;
++ }
++ else
++ {
++ ATEDBGPRINT(RT_DEBUG_TRACE, ("RACFG_CMD_ATE_RESET_COUNTER is done !\n"));
++ }
++ }
++
++ break;
++
++ case RACFG_CMD_ATE_SEL_TX_ANTENNA:
++ {
++ SHORT value = 0;
++ UCHAR str[LEN_OF_ARG];
++
++ NdisZeroMemory(str, LEN_OF_ARG);
++
++ ATEDBGPRINT(RT_DEBUG_TRACE,("RACFG_CMD_ATE_SEL_TX_ANTENNA\n"));
++
++ memcpy((PUCHAR)&value, (PUCHAR)&(pRaCfg->status), 2);
++ value = ntohs(value);
++ sprintf((PCHAR)str, "%d", value);
++ Set_ATE_TX_Antenna_Proc(pAdapter, str);
++
++ // prepare feedback
++ pRaCfg->length = htons(2);
++ pRaCfg->status = htons(0);
++ wrq->u.data.length = sizeof(pRaCfg->magic_no) + sizeof(pRaCfg->command_type)
++ + sizeof(pRaCfg->command_id) + sizeof(pRaCfg->length)
++ + sizeof(pRaCfg->sequence) + ntohs(pRaCfg->length);
++
++ if (copy_to_user(wrq->u.data.pointer, pRaCfg, wrq->u.data.length))
++ {
++ ATEDBGPRINT(RT_DEBUG_ERROR, ("copy_to_user() fail in case RACFG_CMD_ATE_SEL_TX_ANTENNA\n"));
++ Status = -EFAULT;
++ }
++ else
++ {
++ ATEDBGPRINT(RT_DEBUG_TRACE, ("RACFG_CMD_ATE_SEL_TX_ANTENNA is done !\n"));
++ }
++ }
++ break;
++
++ case RACFG_CMD_ATE_SEL_RX_ANTENNA:
++ {
++ SHORT value = 0;
++ UCHAR str[LEN_OF_ARG];
++
++ NdisZeroMemory(str, LEN_OF_ARG);
++
++ ATEDBGPRINT(RT_DEBUG_TRACE,("RACFG_CMD_ATE_SEL_RX_ANTENNA\n"));
++
++ memcpy((PUCHAR)&value, (PUCHAR)&(pRaCfg->status), 2);
++ value = ntohs(value);
++ sprintf((PCHAR)str, "%d", value);
++ Set_ATE_RX_Antenna_Proc(pAdapter, str);
++
++ // prepare feedback
++ pRaCfg->length = htons(2);
++ pRaCfg->status = htons(0);
++ wrq->u.data.length = sizeof(pRaCfg->magic_no) + sizeof(pRaCfg->command_type)
++ + sizeof(pRaCfg->command_id) + sizeof(pRaCfg->length)
++ + sizeof(pRaCfg->sequence) + ntohs(pRaCfg->length);
++
++ if (copy_to_user(wrq->u.data.pointer, pRaCfg, wrq->u.data.length))
++ {
++ ATEDBGPRINT(RT_DEBUG_ERROR, ("copy_to_user() fail in case RACFG_CMD_ATE_SEL_RX_ANTENNA\n"));
++ Status = -EFAULT;
++ }
++ else
++ {
++ ATEDBGPRINT(RT_DEBUG_TRACE, ("RACFG_CMD_ATE_SEL_RX_ANTENNA is done !\n"));
++ }
++ }
++ break;
++
++ case RACFG_CMD_ATE_SET_PREAMBLE:
++ {
++ SHORT value = 0;
++ UCHAR str[LEN_OF_ARG];
++
++ NdisZeroMemory(str, LEN_OF_ARG);
++
++ ATEDBGPRINT(RT_DEBUG_TRACE,("RACFG_CMD_ATE_SET_PREAMBLE\n"));
++
++ memcpy((PUCHAR)&value, (PUCHAR)&(pRaCfg->status), 2);
++ value = ntohs(value);
++ sprintf((PCHAR)str, "%d", value);
++ Set_ATE_TX_MODE_Proc(pAdapter, str);
++
++ // prepare feedback
++ pRaCfg->length = htons(2);
++ pRaCfg->status = htons(0);
++ wrq->u.data.length = sizeof(pRaCfg->magic_no) + sizeof(pRaCfg->command_type)
++ + sizeof(pRaCfg->command_id) + sizeof(pRaCfg->length)
++ + sizeof(pRaCfg->sequence) + ntohs(pRaCfg->length);
++
++ if (copy_to_user(wrq->u.data.pointer, pRaCfg, wrq->u.data.length))
++ {
++ ATEDBGPRINT(RT_DEBUG_ERROR, ("copy_to_user() fail in case RACFG_CMD_ATE_SET_PREAMBLE\n"));
++ Status = -EFAULT;
++ }
++ else
++ {
++ ATEDBGPRINT(RT_DEBUG_TRACE, ("RACFG_CMD_ATE_SET_PREAMBLE is done !\n"));
++ }
++ }
++ break;
++
++ case RACFG_CMD_ATE_SET_CHANNEL:
++ {
++ SHORT value = 0;
++ UCHAR str[LEN_OF_ARG];
++
++ NdisZeroMemory(str, LEN_OF_ARG);
++
++ ATEDBGPRINT(RT_DEBUG_TRACE,("RACFG_CMD_ATE_SET_CHANNEL\n"));
++
++ memcpy((PUCHAR)&value, (PUCHAR)&(pRaCfg->status), 2);
++ value = ntohs(value);
++ sprintf((PCHAR)str, "%d", value);
++ Set_ATE_CHANNEL_Proc(pAdapter, str);
++
++ // prepare feedback
++ pRaCfg->length = htons(2);
++ pRaCfg->status = htons(0);
++ wrq->u.data.length = sizeof(pRaCfg->magic_no) + sizeof(pRaCfg->command_type)
++ + sizeof(pRaCfg->command_id) + sizeof(pRaCfg->length)
++ + sizeof(pRaCfg->sequence) + ntohs(pRaCfg->length);
++
++ if (copy_to_user(wrq->u.data.pointer, pRaCfg, wrq->u.data.length))
++ {
++ ATEDBGPRINT(RT_DEBUG_ERROR, ("copy_to_user() fail in case RACFG_CMD_ATE_SET_CHANNEL\n"));
++ Status = -EFAULT;
++ }
++ else
++ {
++ ATEDBGPRINT(RT_DEBUG_TRACE, ("RACFG_CMD_ATE_SET_CHANNEL is done !\n"));
++ }
++ }
++ break;
++
++ case RACFG_CMD_ATE_SET_ADDR1:
++ {
++ ATEDBGPRINT(RT_DEBUG_TRACE,("RACFG_CMD_ATE_SET_ADDR1\n"));
++
++ // Addr is an array of UCHAR,
++ // so no need to perform endian swap.
++ memcpy(pAdapter->ate.Addr1, (PUCHAR)(pRaCfg->data - 2), MAC_ADDR_LEN);
++
++ // prepare feedback
++ pRaCfg->length = htons(2);
++ pRaCfg->status = htons(0);
++ wrq->u.data.length = sizeof(pRaCfg->magic_no) + sizeof(pRaCfg->command_type)
++ + sizeof(pRaCfg->command_id) + sizeof(pRaCfg->length)
++ + sizeof(pRaCfg->sequence) + ntohs(pRaCfg->length);
++
++ if (copy_to_user(wrq->u.data.pointer, pRaCfg, wrq->u.data.length))
++ {
++ ATEDBGPRINT(RT_DEBUG_ERROR, ("copy_to_user() fail in case RACFG_CMD_ATE_SET_ADDR1\n"));
++ Status = -EFAULT;
++ }
++ else
++ {
++ ATEDBGPRINT(RT_DEBUG_TRACE, ("RACFG_CMD_ATE_SET_ADDR1 is done !\n (ADDR1 = %2X:%2X:%2X:%2X:%2X:%2X)\n", pAdapter->ate.Addr1[0],
++ pAdapter->ate.Addr1[1], pAdapter->ate.Addr1[2], pAdapter->ate.Addr1[3], pAdapter->ate.Addr1[4], pAdapter->ate.Addr1[5]));
++ }
++ }
++ break;
++
++ case RACFG_CMD_ATE_SET_ADDR2:
++ {
++ ATEDBGPRINT(RT_DEBUG_TRACE,("RACFG_CMD_ATE_SET_ADDR2\n"));
++
++ // Addr is an array of UCHAR,
++ // so no need to perform endian swap.
++ memcpy(pAdapter->ate.Addr2, (PUCHAR)(pRaCfg->data - 2), MAC_ADDR_LEN);
++
++ // prepare feedback
++ pRaCfg->length = htons(2);
++ pRaCfg->status = htons(0);
++ wrq->u.data.length = sizeof(pRaCfg->magic_no) + sizeof(pRaCfg->command_type)
++ + sizeof(pRaCfg->command_id) + sizeof(pRaCfg->length)
++ + sizeof(pRaCfg->sequence) + ntohs(pRaCfg->length);
++
++ if (copy_to_user(wrq->u.data.pointer, pRaCfg, wrq->u.data.length))
++ {
++ ATEDBGPRINT(RT_DEBUG_ERROR, ("copy_to_user() fail in case RACFG_CMD_ATE_SET_ADDR2\n"));
++ Status = -EFAULT;
++ }
++ else
++ {
++ ATEDBGPRINT(RT_DEBUG_TRACE, ("RACFG_CMD_ATE_SET_ADDR2 is done !\n (ADDR2 = %2X:%2X:%2X:%2X:%2X:%2X)\n", pAdapter->ate.Addr2[0],
++ pAdapter->ate.Addr2[1], pAdapter->ate.Addr2[2], pAdapter->ate.Addr2[3], pAdapter->ate.Addr2[4], pAdapter->ate.Addr2[5]));
++ }
++ }
++ break;
++
++ case RACFG_CMD_ATE_SET_ADDR3:
++ {
++ ATEDBGPRINT(RT_DEBUG_TRACE,("RACFG_CMD_ATE_SET_ADDR3\n"));
++
++ // Addr is an array of UCHAR,
++ // so no need to perform endian swap.
++ memcpy(pAdapter->ate.Addr3, (PUCHAR)(pRaCfg->data - 2), MAC_ADDR_LEN);
++
++ // prepare feedback
++ pRaCfg->length = htons(2);
++ pRaCfg->status = htons(0);
++ wrq->u.data.length = sizeof(pRaCfg->magic_no) + sizeof(pRaCfg->command_type)
++ + sizeof(pRaCfg->command_id) + sizeof(pRaCfg->length)
++ + sizeof(pRaCfg->sequence) + ntohs(pRaCfg->length);
++
++ if (copy_to_user(wrq->u.data.pointer, pRaCfg, wrq->u.data.length))
++ {
++ ATEDBGPRINT(RT_DEBUG_ERROR, ("copy_to_user() fail in case RACFG_CMD_ATE_SET_ADDR3\n"));
++ Status = -EFAULT;
++ }
++ else
++ {
++ ATEDBGPRINT(RT_DEBUG_TRACE, ("RACFG_CMD_ATE_SET_ADDR3 is done !\n (ADDR3 = %2X:%2X:%2X:%2X:%2X:%2X)\n", pAdapter->ate.Addr3[0],
++ pAdapter->ate.Addr3[1], pAdapter->ate.Addr3[2], pAdapter->ate.Addr3[3], pAdapter->ate.Addr3[4], pAdapter->ate.Addr3[5]));
++ }
++ }
++ break;
++
++ case RACFG_CMD_ATE_SET_RATE:
++ {
++ SHORT value = 0;
++ UCHAR str[LEN_OF_ARG];
++
++ NdisZeroMemory(str, LEN_OF_ARG);
++
++ ATEDBGPRINT(RT_DEBUG_TRACE,("RACFG_CMD_ATE_SET_RATE\n"));
++
++ memcpy((PUCHAR)&value, (PUCHAR)&(pRaCfg->status), 2);
++ value = ntohs(value);
++ sprintf((PCHAR)str, "%d", value);
++ Set_ATE_TX_MCS_Proc(pAdapter, str);
++
++ // prepare feedback
++ pRaCfg->length = htons(2);
++ pRaCfg->status = htons(0);
++ wrq->u.data.length = sizeof(pRaCfg->magic_no) + sizeof(pRaCfg->command_type)
++ + sizeof(pRaCfg->command_id) + sizeof(pRaCfg->length)
++ + sizeof(pRaCfg->sequence) + ntohs(pRaCfg->length);
++
++ if (copy_to_user(wrq->u.data.pointer, pRaCfg, wrq->u.data.length))
++ {
++ ATEDBGPRINT(RT_DEBUG_ERROR, ("copy_to_user() fail in case RACFG_CMD_ATE_SET_RATE\n"));
++ Status = -EFAULT;
++ }
++ else
++ {
++ ATEDBGPRINT(RT_DEBUG_TRACE, ("RACFG_CMD_ATE_SET_RATE is done !\n"));
++ }
++ }
++ break;
++
++ case RACFG_CMD_ATE_SET_TX_FRAME_LEN:
++ {
++ SHORT value = 0;
++ UCHAR str[LEN_OF_ARG];
++
++ NdisZeroMemory(str, LEN_OF_ARG);
++
++ ATEDBGPRINT(RT_DEBUG_TRACE,("RACFG_CMD_ATE_SET_TX_FRAME_LEN\n"));
++
++ memcpy((PUCHAR)&value, (PUCHAR)&(pRaCfg->status), 2);
++ value = ntohs(value);
++ sprintf((PCHAR)str, "%d", value);
++ Set_ATE_TX_LENGTH_Proc(pAdapter, str);
++
++ // prepare feedback
++ pRaCfg->length = htons(2);
++ pRaCfg->status = htons(0);
++ wrq->u.data.length = sizeof(pRaCfg->magic_no) + sizeof(pRaCfg->command_type)
++ + sizeof(pRaCfg->command_id) + sizeof(pRaCfg->length)
++ + sizeof(pRaCfg->sequence) + ntohs(pRaCfg->length);
++
++ if (copy_to_user(wrq->u.data.pointer, pRaCfg, wrq->u.data.length))
++ {
++ ATEDBGPRINT(RT_DEBUG_ERROR, ("copy_to_user() fail in case RACFG_CMD_ATE_SET_TX_FRAME_LEN\n"));
++ Status = -EFAULT;
++ }
++ else
++ {
++ ATEDBGPRINT(RT_DEBUG_TRACE, ("RACFG_CMD_ATE_SET_TX_FRAME_LEN is done !\n"));
++ }
++ }
++ break;
++
++ case RACFG_CMD_ATE_SET_TX_FRAME_COUNT:
++ {
++ USHORT value = 0;
++ UCHAR str[LEN_OF_ARG];
++
++ NdisZeroMemory(str, LEN_OF_ARG);
++
++ ATEDBGPRINT(RT_DEBUG_TRACE,("RACFG_CMD_ATE_SET_TX_FRAME_COUNT\n"));
++
++ memcpy((PUCHAR)&value, (PUCHAR)&(pRaCfg->status), 2);
++ value = ntohs(value);
++ {
++ sprintf((PCHAR)str, "%d", value);
++ Set_ATE_TX_COUNT_Proc(pAdapter, str);
++ }
++
++ // prepare feedback
++ pRaCfg->length = htons(2);
++ pRaCfg->status = htons(0);
++ wrq->u.data.length = sizeof(pRaCfg->magic_no) + sizeof(pRaCfg->command_type)
++ + sizeof(pRaCfg->command_id) + sizeof(pRaCfg->length)
++ + sizeof(pRaCfg->sequence) + ntohs(pRaCfg->length);
++
++ if (copy_to_user(wrq->u.data.pointer, pRaCfg, wrq->u.data.length))
++ {
++ ATEDBGPRINT(RT_DEBUG_ERROR, ("copy_to_user() fail in case RACFG_CMD_ATE_SET_TX_FRAME_COUNT\n"));
++ Status = -EFAULT;
++ }
++ else
++ {
++ ATEDBGPRINT(RT_DEBUG_TRACE, ("RACFG_CMD_ATE_SET_TX_FRAME_COUNT is done !\n"));
++ }
++ }
++ break;
++
++ case RACFG_CMD_ATE_START_RX_FRAME:
++ {
++ ATEDBGPRINT(RT_DEBUG_TRACE,("RACFG_CMD_RX_START\n"));
++
++ Set_ATE_Proc(pAdapter, "RXFRAME");
++
++ // prepare feedback
++ pRaCfg->length = htons(2);
++ pRaCfg->status = htons(0);
++ wrq->u.data.length = sizeof(pRaCfg->magic_no) + sizeof(pRaCfg->command_type)
++ + sizeof(pRaCfg->command_id) + sizeof(pRaCfg->length)
++ + sizeof(pRaCfg->sequence) + ntohs(pRaCfg->length);
++
++ if (copy_to_user(wrq->u.data.pointer, pRaCfg, wrq->u.data.length))
++ {
++ ATEDBGPRINT(RT_DEBUG_ERROR, ("copy_to_user() fail in case RACFG_CMD_RX_START\n"));
++ Status = -EFAULT;
++ }
++ else
++ {
++ ATEDBGPRINT(RT_DEBUG_TRACE, ("RACFG_CMD_RX_START is done !\n"));
++ }
++ }
++ break;
++ default:
++ break;
++ }
++ ASSERT(pRaCfg != NULL);
++ if (pRaCfg != NULL)
++ {
++ kfree(pRaCfg);
++ }
++ return;
++}
++
++VOID BubbleSort(INT32 n, INT32 a[])
++{
++ INT32 k, j, temp;
++
++ for (k = n-1; k>0; k--)
++ {
++ for (j = 0; j<k; j++)
++ {
++ if(a[j] > a[j+1])
++ {
++ temp = a[j];
++ a[j]=a[j+1];
++ a[j+1]=temp;
++ }
++ }
++ }
++}
++
++VOID CalNoiseLevel(PRTMP_ADAPTER pAd, UCHAR channel, INT32 RSSI[3][10])
++{
++ INT32 RSSI0, RSSI1, RSSI2;
++ CHAR Rssi0Offset, Rssi1Offset, Rssi2Offset;
++ UCHAR BbpR50Rssi0 = 0, BbpR51Rssi1 = 0, BbpR52Rssi2 = 0;
++ UCHAR Org_BBP66value = 0, Org_BBP69value = 0, Org_BBP70value = 0, data = 0;
++ USHORT LNA_Gain = 0;
++ INT32 j = 0;
++ UCHAR Org_Channel = pAd->ate.Channel;
++ USHORT GainValue = 0, OffsetValue = 0;
++
++ ATE_BBP_IO_READ8_BY_REG_ID(pAd, BBP_R66, &Org_BBP66value);
++ ATE_BBP_IO_READ8_BY_REG_ID(pAd, BBP_R69, &Org_BBP69value);
++ ATE_BBP_IO_READ8_BY_REG_ID(pAd, BBP_R70, &Org_BBP70value);
++
++ //**********************************************************************
++ // Read the value of LNA gain and Rssi offset
++ //**********************************************************************
++ RT28xx_EEPROM_READ16(pAd, EEPROM_LNA_OFFSET, GainValue);
++
++ // for Noise Level
++ if (channel <= 14)
++ {
++ LNA_Gain = GainValue & 0x00FF;
++
++ RT28xx_EEPROM_READ16(pAd, EEPROM_RSSI_BG_OFFSET, OffsetValue);
++ Rssi0Offset = OffsetValue & 0x00FF;
++ Rssi1Offset = (OffsetValue & 0xFF00) >> 8;
++ RT28xx_EEPROM_READ16(pAd, (EEPROM_RSSI_BG_OFFSET + 2)/* 0x48 */, OffsetValue);
++ Rssi2Offset = OffsetValue & 0x00FF;
++ }
++ else
++ {
++ LNA_Gain = (GainValue & 0xFF00) >> 8;
++
++ RT28xx_EEPROM_READ16(pAd, EEPROM_RSSI_A_OFFSET, OffsetValue);
++ Rssi0Offset = OffsetValue & 0x00FF;
++ Rssi1Offset = (OffsetValue & 0xFF00) >> 8;
++ RT28xx_EEPROM_READ16(pAd, (EEPROM_RSSI_A_OFFSET + 2)/* 0x4C */, OffsetValue);
++ Rssi2Offset = OffsetValue & 0x00FF;
++ }
++ //**********************************************************************
++ {
++ pAd->ate.Channel = channel;
++ ATEAsicSwitchChannel(pAd);
++ mdelay(5);
++
++ data = 0x10;
++ ATE_BBP_IO_WRITE8_BY_REG_ID(pAd, BBP_R66, data);
++ data = 0x40;
++ ATE_BBP_IO_WRITE8_BY_REG_ID(pAd, BBP_R69, data);
++ data = 0x40;
++ ATE_BBP_IO_WRITE8_BY_REG_ID(pAd, BBP_R70, data);
++ mdelay(5);
++
++ // Start Rx
++ pAd->ate.bQARxStart = TRUE;
++ Set_ATE_Proc(pAd, "RXFRAME");
++
++ mdelay(5);
++
++ for (j = 0; j < 10; j++)
++ {
++ ATE_BBP_IO_READ8_BY_REG_ID(pAd, BBP_R50, &BbpR50Rssi0);
++ ATE_BBP_IO_READ8_BY_REG_ID(pAd, BBP_R51, &BbpR51Rssi1);
++ ATE_BBP_IO_READ8_BY_REG_ID(pAd, BBP_R52, &BbpR52Rssi2);
++
++ mdelay(10);
++
++ // Calculate RSSI 0
++ if (BbpR50Rssi0 == 0)
++ {
++ RSSI0 = -100;
++ }
++ else
++ {
++ RSSI0 = (INT32)(-12 - BbpR50Rssi0 - LNA_Gain - Rssi0Offset);
++ }
++ RSSI[0][j] = RSSI0;
++
++ if ( pAd->Antenna.field.RxPath >= 2 ) // 2R
++ {
++ // Calculate RSSI 1
++ if (BbpR51Rssi1 == 0)
++ {
++ RSSI1 = -100;
++ }
++ else
++ {
++ RSSI1 = (INT32)(-12 - BbpR51Rssi1 - LNA_Gain - Rssi1Offset);
++ }
++ RSSI[1][j] = RSSI1;
++ }
++
++ if ( pAd->Antenna.field.RxPath >= 3 ) // 3R
++ {
++ // Calculate RSSI 2
++ if (BbpR52Rssi2 == 0)
++ RSSI2 = -100;
++ else
++ RSSI2 = (INT32)(-12 - BbpR52Rssi2 - LNA_Gain - Rssi2Offset);
++
++ RSSI[2][j] = RSSI2;
++ }
++ }
++
++ // Stop Rx
++ Set_ATE_Proc(pAd, "RXSTOP");
++
++ mdelay(5);
++
++#if 0// Debug Message................
++ ate_print("\n**********************************************************\n");
++ ate_print("Noise Level: Channel %d\n", channel);
++ ate_print("RSSI0 = %d, %d, %d, %d, %d, %d, %d, %d, %d, %d\n",
++ RSSI[0][0], RSSI[0][1], RSSI[0][2],
++ RSSI[0][3], RSSI[0][4], RSSI[0][5],
++ RSSI[0][6], RSSI[0][7], RSSI[0][8],
++ RSSI[0][9]);
++ if ( pAd->Antenna.field.RxPath >= 2 ) // 2R
++ {
++ ate_print("RSSI1 = %d, %d, %d, %d, %d, %d, %d, %d, %d, %d\n",
++ RSSI[1][0], RSSI[1][1], RSSI[1][2],
++ RSSI[1][3], RSSI[1][4], RSSI[1][5],
++ RSSI[1][6], RSSI[1][7], RSSI[1][8],
++ RSSI[1][9]);
++ }
++ if ( pAd->Antenna.field.RxPath >= 3 ) // 3R
++ {
++ ate_print("RSSI2 = %d, %d, %d, %d, %d, %d, %d, %d, %d, %d\n",
++ RSSI[2][0], RSSI[2][1], RSSI[2][2],
++ RSSI[2][3], RSSI[2][4], RSSI[2][5],
++ RSSI[2][6], RSSI[2][7], RSSI[2][8],
++ RSSI[2][9]);
++ }
++#endif // 0 //
++ BubbleSort(10, RSSI[0]); // 1R
++
++ if ( pAd->Antenna.field.RxPath >= 2 ) // 2R
++ {
++ BubbleSort(10, RSSI[1]);
++ }
++
++ if ( pAd->Antenna.field.RxPath >= 3 ) // 3R
++ {
++ BubbleSort(10, RSSI[2]);
++ }
++
++#if 0// Debug Message................
++ ate_print("\nAfter Sorting....Channel %d\n", channel);
++ ate_print("RSSI0 = %d, %d, %d, %d, %d, %d, %d, %d, %d, %d\n",
++ RSSI[0][0], RSSI[0][1], RSSI[0][2],
++ RSSI[0][3], RSSI[0][4], RSSI[0][5],
++ RSSI[0][6], RSSI[0][7], RSSI[0][8],
++ RSSI[0][9]);
++ if ( pAd->Antenna.field.RxPath >= 2 ) // 2R
++ {
++ ate_print("RSSI1 = %d, %d, %d, %d, %d, %d, %d, %d, %d, %d\n",
++ RSSI[1][0], RSSI[1][1], RSSI[1][2],
++ RSSI[1][3], RSSI[1][4], RSSI[1][5],
++ RSSI[1][6], RSSI[1][7], RSSI[1][8],
++ RSSI[1][9]);
++ }
++ if ( pAd->Antenna.field.RxPath >= 3 ) // 3R
++ {
++ ate_print("RSSI2 = %d, %d, %d, %d, %d, %d, %d, %d, %d, %d\n",
++ RSSI[2][0], RSSI[2][1], RSSI[2][2],
++ RSSI[2][3], RSSI[2][4], RSSI[2][5],
++ RSSI[2][6], RSSI[2][7], RSSI[2][8],
++ RSSI[2][9]);
++ }
++ ate_print("**********************************************************\n");
++#endif // 0 //
++ }
++
++ pAd->ate.Channel = Org_Channel;
++ ATEAsicSwitchChannel(pAd);
++
++ // Restore original value
++ ATE_BBP_IO_WRITE8_BY_REG_ID(pAd, BBP_R66, Org_BBP66value);
++ ATE_BBP_IO_WRITE8_BY_REG_ID(pAd, BBP_R69, Org_BBP69value);
++ ATE_BBP_IO_WRITE8_BY_REG_ID(pAd, BBP_R70, Org_BBP70value);
++
++ return;
++}
++
++BOOLEAN SyncTxRxConfig(PRTMP_ADAPTER pAd, USHORT offset, UCHAR value)
++{
++ UCHAR tmp = 0, bbp_data = 0;
++
++ if (ATE_ON(pAd))
++ {
++ ATE_BBP_IO_READ8_BY_REG_ID(pAd, offset, &bbp_data);
++ }
++ else
++ {
++ RTMP_BBP_IO_READ8_BY_REG_ID(pAd, offset, &bbp_data);
++ }
++
++ /* confirm again */
++ ASSERT(bbp_data == value);
++
++ switch(offset)
++ {
++ case BBP_R1:
++ /* Need to sync. tx configuration with legacy ATE. */
++ tmp = (bbp_data & ((1 << 4) | (1 << 3))/* 0x18 */) >> 3;
++ switch(tmp)
++ {
++ /* The BBP R1 bit[4:3] = 2 :: Both DACs will be used by QA. */
++ case 2:
++ /* All */
++ pAd->ate.TxAntennaSel = 0;
++ break;
++ /* The BBP R1 bit[4:3] = 0 :: DAC 0 will be used by QA. */
++ case 0:
++ /* Antenna one */
++ pAd->ate.TxAntennaSel = 1;
++ break;
++ /* The BBP R1 bit[4:3] = 1 :: DAC 1 will be used by QA. */
++ case 1:
++ /* Antenna two */
++ pAd->ate.TxAntennaSel = 2;
++ break;
++ default:
++ DBGPRINT(RT_DEBUG_TRACE, ("%s -- Sth. wrong! : return FALSE; \n", __FUNCTION__));
++ return FALSE;
++ }
++ break;/* case BBP_R1 */
++
++ case BBP_R3:
++ /* Need to sync. rx configuration with legacy ATE. */
++ tmp = (bbp_data & ((1 << 1) | (1 << 0))/* 0x03 */);
++ switch(tmp)
++ {
++ /* The BBP R3 bit[1:0] = 3 :: All ADCs will be used by QA. */
++ case 3:
++ /* All */
++ pAd->ate.RxAntennaSel = 0;
++ break;
++ /* The BBP R3 bit[1:0] = 0 :: ADC 0 will be used by QA, */
++ /* unless the BBP R3 bit[4:3] = 2 */
++ case 0:
++ /* Antenna one */
++ pAd->ate.RxAntennaSel = 1;
++ tmp = ((bbp_data & ((1 << 4) | (1 << 3))/* 0x03 */) >> 3);
++ if (tmp == 2)// 3R
++ {
++ /* Default : All ADCs will be used by QA */
++ pAd->ate.RxAntennaSel = 0;
++ }
++ break;
++ /* The BBP R3 bit[1:0] = 1 :: ADC 1 will be used by QA. */
++ case 1:
++ /* Antenna two */
++ pAd->ate.RxAntennaSel = 2;
++ break;
++ /* The BBP R3 bit[1:0] = 2 :: ADC 2 will be used by QA. */
++ case 2:
++ /* Antenna three */
++ pAd->ate.RxAntennaSel = 3;
++ break;
++ default:
++ DBGPRINT(RT_DEBUG_ERROR, ("%s -- Impossible! : return FALSE; \n", __FUNCTION__));
++ return FALSE;
++ }
++ break;/* case BBP_R3 */
++
++ default:
++ DBGPRINT(RT_DEBUG_ERROR, ("%s -- Sth. wrong! : return FALSE; \n", __FUNCTION__));
++ return FALSE;
++
++ }
++ return TRUE;
++}
++
++static VOID memcpy_exl(PRTMP_ADAPTER pAd, UCHAR *dst, UCHAR *src, ULONG len)
++{
++ ULONG i, Value = 0;
++ ULONG *pDst, *pSrc;
++ UCHAR *p8;
++
++ p8 = src;
++ pDst = (ULONG *) dst;
++ pSrc = (ULONG *) src;
++
++ for (i = 0 ; i < (len/4); i++)
++ {
++ /* For alignment issue, we need a variable "Value". */
++ memmove(&Value, pSrc, 4);
++ Value = htonl(Value);
++ memmove(pDst, &Value, 4);
++ pDst++;
++ pSrc++;
++ }
++ if ((len % 4) != 0)
++ {
++ /* wish that it will never reach here */
++ memmove(&Value, pSrc, (len % 4));
++ Value = htonl(Value);
++ memmove(pDst, &Value, (len % 4));
++ }
++}
++
++static VOID memcpy_exs(PRTMP_ADAPTER pAd, UCHAR *dst, UCHAR *src, ULONG len)
++{
++ ULONG i;
++ UCHAR *pDst, *pSrc;
++
++ pDst = dst;
++ pSrc = src;
++
++ for (i = 0; i < (len/2); i++)
++ {
++ memmove(pDst, pSrc, 2);
++ *((USHORT *)pDst) = htons(*((USHORT *)pDst));
++ pDst+=2;
++ pSrc+=2;
++ }
++
++ if ((len % 2) != 0)
++ {
++ memmove(pDst, pSrc, 1);
++ }
++}
++
++static VOID RTMP_IO_READ_BULK(PRTMP_ADAPTER pAd, UCHAR *dst, UCHAR *src, UINT32 len)
++{
++ UINT32 i, Value;
++ UINT32 *pDst, *pSrc;
++
++ pDst = (UINT32 *) dst;
++ pSrc = (UINT32 *) src;
++
++ for (i = 0 ; i < (len/4); i++)
++ {
++ RTMP_IO_READ32(pAd, (ULONG)pSrc, &Value);
++ Value = htonl(Value);
++ memmove(pDst, &Value, 4);
++ pDst++;
++ pSrc++;
++ }
++ return;
++}
++
++// TODO:
++#if 0
++/* These work only when RALINK_ATE is defined */
++INT Set_TxStart_Proc(
++ IN PRTMP_ADAPTER pAd,
++ IN PUCHAR arg)
++{
++ ULONG value = simple_strtol(arg, 0, 10);
++ UCHAR buffer[26] = {0x88, 0x02, 0x2c, 0x00, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0x00, 0x11, 0x22, 0x33, 0x44, 0x55, 0x00, 0x55, 0x44, 0x33, 0x22, 0x11, 0xc0, 0x22, 0x00, 0x00};
++ POS_COOKIE pObj;
++
++ if (pAd->ate.TxStatus != 0)
++ return FALSE;
++
++ pAd->ate.TxInfo = 0x04000000;
++ bzero(&pAd->ate.TxWI, sizeof(TXWI_STRUC));
++ pAd->ate.TxWI.PHYMODE = 0;// MODE_CCK
++ pAd->ate.TxWI.MPDUtotalByteCount = 1226;
++ pAd->ate.TxWI.MCS = 3;
++ //pAd->ate.Mode = ATE_START;
++ pAd->ate.Mode |= ATE_TXFRAME;
++ pAd->ate.TxCount = value;
++ pAd->ate.QID = 0;
++ pAd->ate.HLen = 26;
++ pAd->ate.PLen = 0;
++ pAd->ate.DLen = 1200;
++ memcpy(pAd->ate.Header, buffer, 26);
++ pAd->ate.bQATxStart = TRUE;
++ //pObj = (POS_COOKIE) pAd->OS_Cookie;
++ //tasklet_hi_schedule(&pObj->AteTxTask);
++ return TRUE;
++}
++#endif /* end of #if 0 */
++
++INT Set_TxStop_Proc(
++ IN PRTMP_ADAPTER pAd,
++ IN PUCHAR arg)
++{
++ ATEDBGPRINT(RT_DEBUG_TRACE,("Set_TxStop_Proc\n"));
++
++ if (Set_ATE_Proc(pAd, "TXSTOP"))
++ {
++ return TRUE;
++}
++ else
++ {
++ return FALSE;
++ }
++}
++
++INT Set_RxStop_Proc(
++ IN PRTMP_ADAPTER pAd,
++ IN PUCHAR arg)
++{
++ ATEDBGPRINT(RT_DEBUG_TRACE,("Set_RxStop_Proc\n"));
++
++ if (Set_ATE_Proc(pAd, "RXSTOP"))
++ {
++ return TRUE;
++}
++ else
++ {
++ return FALSE;
++ }
++}
++
++#if 0
++INT Set_EEWrite_Proc(
++ IN PRTMP_ADAPTER pAd,
++ IN PUCHAR arg)
++{
++ USHORT offset = 0, value;
++ PUCHAR p2 = arg;
++
++ while((*p2 != ':') && (*p2 != '\0'))
++ {
++ p2++;
++ }
++
++ if (*p2 == ':')
++ {
++ A2Hex(offset, arg);
++ A2Hex(value, p2+ 1);
++ }
++ else
++ {
++ A2Hex(value, arg);
++ }
++
++ if (offset >= EEPROM_SIZE)
++ {
++ ate_print("Offset can not exceed EEPROM_SIZE( == 0x%04x)\n", EEPROM_SIZE);
++ return FALSE;
++ }
++
++ RTMP_EEPROM_WRITE16(pAd, offset, value);
++
++ return TRUE;
++}
++
++INT Set_BBPRead_Proc(
++ IN PRTMP_ADAPTER pAd,
++ IN PUCHAR arg)
++{
++ UCHAR value = 0, offset;
++
++ A2Hex(offset, arg);
++
++ if (ATE_ON(pAd))
++ {
++ ATE_BBP_IO_READ8_BY_REG_ID(pAd, offset, &value);
++ }
++ else
++ {
++ RTMP_BBP_IO_READ8_BY_REG_ID(pAd, offset, &value);
++ }
++
++ ate_print("%x\n", value);
++
++ return TRUE;
++}
++
++
++INT Set_BBPWrite_Proc(
++ IN PRTMP_ADAPTER pAd,
++ IN PUCHAR arg)
++{
++ USHORT offset = 0;
++ PUCHAR p2 = arg;
++ UCHAR value;
++
++ while((*p2 != ':') && (*p2 != '\0'))
++ {
++ p2++;
++ }
++
++ if (*p2 == ':')
++ {
++ A2Hex(offset, arg);
++ A2Hex(value, p2+ 1);
++ }
++ else
++ {
++ A2Hex(value, arg);
++ }
++
++ if (ATE_ON(pAd))
++ {
++ ATE_BBP_IO_WRITE8_BY_REG_ID(pAd, offset, value);
++ }
++ else
++ {
++ RTNP_BBP_IO_WRITE8_BY_REG_ID(pAd, offset, value);
++ }
++
++ return TRUE;
++}
++
++INT Set_RFWrite_Proc(
++ IN PRTMP_ADAPTER pAd,
++ IN PUCHAR arg)
++{
++ PUCHAR p2, p3, p4;
++ ULONG R1, R2, R3, R4;
++
++ p2 = arg;
++
++ while((*p2 != ':') && (*p2 != '\0'))
++ {
++ p2++;
++ }
++
++ if (*p2 != ':')
++ return FALSE;
++
++ p3 = p2 + 1;
++
++ while((*p3 != ':') && (*p3 != '\0'))
++ {
++ p3++;
++ }
++
++ if (*p3 != ':')
++ return FALSE;
++
++ p4 = p3 + 1;
++
++ while((*p4 != ':') && (*p4 != '\0'))
++ {
++ p4++;
++ }
++
++ if (*p4 != ':')
++ return FALSE;
++
++
++ A2Hex(R1, arg);
++ A2Hex(R2, p2 + 1);
++ A2Hex(R3, p3 + 1);
++ A2Hex(R4, p4 + 1);
++
++ RTMP_RF_IO_WRITE32(pAd, R1);
++ RTMP_RF_IO_WRITE32(pAd, R2);
++ RTMP_RF_IO_WRITE32(pAd, R3);
++ RTMP_RF_IO_WRITE32(pAd, R4);
++
++ return TRUE;
++}
++#endif // end of #if 0 //
++#endif // RALINK_28xx_QA //
++
++#endif // RALINK_ATE //
++
+--- /dev/null
++++ b/drivers/staging/rt2870/rt_ate.h
+@@ -0,0 +1,315 @@
++/*
++ *************************************************************************
++ * Ralink Tech Inc.
++ * 5F., No.36, Taiyuan St., Jhubei City,
++ * Hsinchu County 302,
++ * Taiwan, R.O.C.
++ *
++ * (c) Copyright 2002-2007, Ralink Technology, Inc.
++ *
++ * This program is free software; you can redistribute it and/or modify *
++ * it under the terms of the GNU General Public License as published by *
++ * the Free Software Foundation; either version 2 of the License, or *
++ * (at your option) any later version. *
++ * *
++ * This program is distributed in the hope that it will be useful, *
++ * but WITHOUT ANY WARRANTY; without even the implied warranty of *
++ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the *
++ * GNU General Public License for more details. *
++ * *
++ * You should have received a copy of the GNU General Public License *
++ * along with this program; if not, write to the *
++ * Free Software Foundation, Inc., *
++ * 59 Temple Place - Suite 330, Boston, MA 02111-1307, USA. *
++ * *
++ *************************************************************************
++ */
++
++#ifndef __ATE_H__
++#define __ATE_H__
++
++#ifndef UCOS
++#define ate_print printk
++#define ATEDBGPRINT DBGPRINT
++
++#ifdef RT2870
++#define EEPROM_SIZE 0x400
++#ifdef CONFIG_STA_SUPPORT
++#define EEPROM_BIN_FILE_NAME "/etc/Wireless/RT2870STA/e2p.bin"
++#endif // CONFIG_STA_SUPPORT //
++#endif // RT2870 //
++#else // !UCOS //
++#define fATE_LOAD_EEPROM 0x0C43
++#ifdef CONFIG_PRINTK
++extern INT ConsoleResponse(IN PUCHAR buff);
++extern int (*remote_display)(char *);
++extern void puts (const char *s);
++
++/* specificly defined to redirect and show ate-related messages to host. */
++/* Try to define ate_print as a macro. */
++#define ate_print(fmt, args...) \
++do{ int (*org_remote_display)(char *) = NULL; \
++ org_remote_display = remote_display;\
++ /* Save original "remote_display" */\
++ remote_display = (int (*)(char *))ConsoleResponse; \
++ printk(fmt, ## args); \
++ /* Restore the remote_display function pointer */ \
++ remote_display = org_remote_display; }while(0)
++
++#define ATEDBGPRINT(Level, Fmt) \
++{ \
++ if ((Level) <= RTDebugLevel) \
++ { \
++ ate_print Fmt; \
++ } \
++}
++#endif // CONFIG_PRINTK //
++#endif // !UCOS //
++
++#define ATE_ON(_p) (((_p)->ate.Mode) != ATE_STOP)
++
++/* RT2880_iNIC will define "RT2860". */
++
++/* RT2880_iNIC will define RT2860. */
++
++#ifdef RT2870
++#define EEPROM_SIZE 0x400
++#ifdef CONFIG_STA_SUPPORT
++#define EEPROM_BIN_FILE_NAME "/etc/Wireless/RT2870STA/e2p.bin"
++#endif // CONFIG_STA_SUPPORT //
++#endif // RT2870 //
++
++#ifdef RT2870
++#define ATE_BBP_IO_READ8_BY_REG_ID(_A, _I, _pV) RTMP_BBP_IO_READ8_BY_REG_ID(_A, _I, _pV)
++#define ATE_BBP_IO_WRITE8_BY_REG_ID(_A, _I, _V) RTMP_BBP_IO_WRITE8_BY_REG_ID(_A, _I, _V)
++
++#define BULK_OUT_LOCK(pLock, IrqFlags) \
++ if(1 /*!(in_interrupt() & 0xffff0000)*/) \
++ RTMP_IRQ_LOCK((pLock), IrqFlags);
++
++#define BULK_OUT_UNLOCK(pLock, IrqFlags) \
++ if(1 /*!(in_interrupt() & 0xffff0000)*/) \
++ RTMP_IRQ_UNLOCK((pLock), IrqFlags);
++
++// Prototypes of completion funuc.
++#if LINUX_VERSION_CODE < KERNEL_VERSION(2,5,0)
++#define ATE_RTUSBBulkOutDataPacketComplete(purb, pt_regs) ATE_RTUSBBulkOutDataPacketComplete(purb)
++#endif
++
++VOID ATE_RTUSBBulkOutDataPacketComplete(
++ IN purbb_t purb,
++ OUT struct pt_regs *pt_regs);
++
++VOID ATE_RTUSBBulkOutDataPacket(
++ IN PRTMP_ADAPTER pAd,
++ IN UCHAR BulkOutPipeId);
++
++VOID ATE_RTUSBCancelPendingBulkInIRP(
++ IN PRTMP_ADAPTER pAd);
++#endif // RT2870 //
++
++VOID rt_ee_read_all(
++ IN PRTMP_ADAPTER pAd,
++ OUT USHORT *Data);
++
++
++VOID rt_ee_write_all(
++ IN PRTMP_ADAPTER pAd,
++ IN USHORT *Data);
++
++INT Set_ATE_Proc(
++ IN PRTMP_ADAPTER pAd,
++ IN PUCHAR arg);
++
++INT Set_ATE_DA_Proc(
++ IN PRTMP_ADAPTER pAd,
++ IN PUCHAR arg);
++
++INT Set_ATE_SA_Proc(
++ IN PRTMP_ADAPTER pAd,
++ IN PUCHAR arg);
++
++INT Set_ATE_BSSID_Proc(
++ IN PRTMP_ADAPTER pAd,
++ IN PUCHAR arg);
++
++INT Set_ATE_CHANNEL_Proc(
++ IN PRTMP_ADAPTER pAd,
++ IN PUCHAR arg);
++
++INT Set_ATE_TX_POWER0_Proc(
++ IN PRTMP_ADAPTER pAd,
++ IN PUCHAR arg);
++
++INT Set_ATE_TX_POWER1_Proc(
++ IN PRTMP_ADAPTER pAd,
++ IN PUCHAR arg);
++
++INT Set_ATE_TX_Antenna_Proc(
++ IN PRTMP_ADAPTER pAd,
++ IN PUCHAR arg);
++
++INT Set_ATE_RX_Antenna_Proc(
++ IN PRTMP_ADAPTER pAd,
++ IN PUCHAR arg);
++
++INT Set_ATE_TX_FREQOFFSET_Proc(
++ IN PRTMP_ADAPTER pAd,
++ IN PUCHAR arg);
++
++INT Set_ATE_TX_BW_Proc(
++ IN PRTMP_ADAPTER pAd,
++ IN PUCHAR arg);
++
++INT Set_ATE_TX_LENGTH_Proc(
++ IN PRTMP_ADAPTER pAd,
++ IN PUCHAR arg);
++
++INT Set_ATE_TX_COUNT_Proc(
++ IN PRTMP_ADAPTER pAd,
++ IN PUCHAR arg);
++
++INT Set_ATE_TX_MCS_Proc(
++ IN PRTMP_ADAPTER pAd,
++ IN PUCHAR arg);
++
++INT Set_ATE_TX_MODE_Proc(
++ IN PRTMP_ADAPTER pAd,
++ IN PUCHAR arg);
++
++INT Set_ATE_TX_GI_Proc(
++ IN PRTMP_ADAPTER pAd,
++ IN PUCHAR arg);
++
++
++INT Set_ATE_RX_FER_Proc(
++ IN PRTMP_ADAPTER pAd,
++ IN PUCHAR arg);
++
++INT Set_ATE_Read_RF_Proc(
++ IN PRTMP_ADAPTER pAd,
++ IN PUCHAR arg);
++
++INT Set_ATE_Write_RF1_Proc(
++ IN PRTMP_ADAPTER pAd,
++ IN PUCHAR arg);
++
++INT Set_ATE_Write_RF2_Proc(
++ IN PRTMP_ADAPTER pAd,
++ IN PUCHAR arg);
++
++INT Set_ATE_Write_RF3_Proc(
++ IN PRTMP_ADAPTER pAd,
++ IN PUCHAR arg);
++
++INT Set_ATE_Write_RF4_Proc(
++ IN PRTMP_ADAPTER pAd,
++ IN PUCHAR arg);
++
++INT Set_ATE_Load_E2P_Proc(
++ IN PRTMP_ADAPTER pAd,
++ IN PUCHAR arg);
++
++INT Set_ATE_Read_E2P_Proc(
++ IN PRTMP_ADAPTER pAd,
++ IN PUCHAR arg);
++
++INT Set_ATE_Show_Proc(
++ IN PRTMP_ADAPTER pAd,
++ IN PUCHAR arg);
++
++INT Set_ATE_Help_Proc(
++ IN PRTMP_ADAPTER pAd,
++ IN PUCHAR arg);
++
++#ifdef RALINK_ATE
++#ifdef RALINK_28xx_QA
++VOID ATE_QA_Statistics(
++ IN PRTMP_ADAPTER pAd,
++ IN PRXWI_STRUC pRxWI,
++ IN PRT28XX_RXD_STRUC p28xxRxD,
++ IN PHEADER_802_11 pHeader);
++
++VOID RtmpDoAte(
++ IN PRTMP_ADAPTER pAdapter,
++ IN struct iwreq *wrq);
++
++VOID BubbleSort(
++ IN INT32 n,
++ IN INT32 a[]);
++
++VOID CalNoiseLevel(
++ IN PRTMP_ADAPTER pAdapter,
++ IN UCHAR channel,
++ OUT INT32 buffer[3][10]);
++
++BOOLEAN SyncTxRxConfig(
++ IN PRTMP_ADAPTER pAdapter,
++ IN USHORT offset,
++ IN UCHAR value);
++
++#if 0
++INT Set_TxStart_Proc(
++ IN PRTMP_ADAPTER pAd,
++ IN PUCHAR arg);
++#endif // 0 //
++
++INT Set_TxStop_Proc(
++ IN PRTMP_ADAPTER pAd,
++ IN PUCHAR arg);
++
++INT Set_RxStop_Proc(
++ IN PRTMP_ADAPTER pAd,
++ IN PUCHAR arg);
++
++#if 0
++INT Set_EERead_Proc(
++ IN PRTMP_ADAPTER pAd,
++ IN PUCHAR arg);
++
++INT Set_EEWrite_Proc(
++ IN PRTMP_ADAPTER pAd,
++ IN PUCHAR arg);
++
++INT Set_BBPRead_Proc(
++ IN PRTMP_ADAPTER pAd,
++ IN PUCHAR arg);
++
++INT Set_BBPWrite_Proc(
++ IN PRTMP_ADAPTER pAd,
++ IN PUCHAR arg);
++
++INT Set_RFWrite_Proc(
++ IN PRTMP_ADAPTER pAd,
++ IN PUCHAR arg);
++#endif // end of #if 0 //
++#endif // RALINK_28xx_QA //
++#endif // RALINK_ATE //
++
++VOID ATEAsicSwitchChannel(
++ IN PRTMP_ADAPTER pAd);
++
++VOID ATEAsicAdjustTxPower(
++ IN PRTMP_ADAPTER pAd);
++
++VOID ATEDisableAsicProtect(
++ IN PRTMP_ADAPTER pAd);
++
++CHAR ATEConvertToRssi(
++ IN PRTMP_ADAPTER pAd,
++ IN CHAR Rssi,
++ IN UCHAR RssiNumber);
++
++VOID ATESampleRssi(
++ IN PRTMP_ADAPTER pAd,
++ IN PRXWI_STRUC pRxWI);
++
++
++#ifdef CONFIG_STA_SUPPORT
++VOID RTMPStationStop(
++ IN PRTMP_ADAPTER pAd);
++
++VOID RTMPStationStart(
++ IN PRTMP_ADAPTER pAd);
++#endif // CONFIG_STA_SUPPORT //
++#endif // __ATE_H__ //
+--- /dev/null
++++ b/drivers/staging/rt2870/rt_config.h
+@@ -0,0 +1,104 @@
++/*
++ *************************************************************************
++ * Ralink Tech Inc.
++ * 5F., No.36, Taiyuan St., Jhubei City,
++ * Hsinchu County 302,
++ * Taiwan, R.O.C.
++ *
++ * (c) Copyright 2002-2007, Ralink Technology, Inc.
++ *
++ * This program is free software; you can redistribute it and/or modify *
++ * it under the terms of the GNU General Public License as published by *
++ * the Free Software Foundation; either version 2 of the License, or *
++ * (at your option) any later version. *
++ * *
++ * This program is distributed in the hope that it will be useful, *
++ * but WITHOUT ANY WARRANTY; without even the implied warranty of *
++ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the *
++ * GNU General Public License for more details. *
++ * *
++ * You should have received a copy of the GNU General Public License *
++ * along with this program; if not, write to the *
++ * Free Software Foundation, Inc., *
++ * 59 Temple Place - Suite 330, Boston, MA 02111-1307, USA. *
++ * *
++ *************************************************************************
++
++ Module Name:
++ rt_config.h
++
++ Abstract:
++ Central header file to maintain all include files for all NDIS
++ miniport driver routines.
++
++ Revision History:
++ Who When What
++ -------- ---------- ----------------------------------------------
++ Paul Lin 08-01-2002 created
++
++*/
++#ifndef __RT_CONFIG_H__
++#define __RT_CONFIG_H__
++
++#include "rtmp_type.h"
++#ifdef UCOS
++#include "includes.h"
++#include <stdio.h>
++#include "rt_ucos.h"
++#endif
++
++#ifdef LINUX
++#include "rt_linux.h"
++#endif
++#include "rtmp_def.h"
++#include "rt28xx.h"
++
++
++#ifdef RT2870
++#include "rt2870.h"
++#endif // RT2870 //
++
++#include "oid.h"
++#include "mlme.h"
++#include "wpa.h"
++#include "md5.h"
++#include "rtmp.h"
++#include "ap.h"
++#include "dfs.h"
++#include "chlist.h"
++#include "spectrum.h"
++
++
++#ifdef LEAP_SUPPORT
++#include "leap.h"
++#endif // LEAP_SUPPORT //
++
++#ifdef BLOCK_NET_IF
++#include "netif_block.h"
++#endif // BLOCK_NET_IF //
++
++#ifdef IGMP_SNOOP_SUPPORT
++#include "igmp_snoop.h"
++#endif // IGMP_SNOOP_SUPPORT //
++
++#ifdef RALINK_ATE
++#include "rt_ate.h"
++#endif // RALINK_ATE //
++
++
++
++#ifdef CONFIG_STA_SUPPORT
++#ifdef NATIVE_WPA_SUPPLICANT_SUPPORT
++#ifndef WPA_SUPPLICANT_SUPPORT
++#error "Build for being controlled by NetworkManager or wext, please set HAS_WPA_SUPPLICANT=y and HAS_NATIVE_WPA_SUPPLICANT_SUPPORT=y"
++#endif // WPA_SUPPLICANT_SUPPORT //
++#endif // NATIVE_WPA_SUPPLICANT_SUPPORT //
++
++#endif // CONFIG_STA_SUPPORT //
++
++#ifdef IKANOS_VX_1X0
++#include "vr_ikans.h"
++#endif // IKANOS_VX_1X0 //
++
++#endif // __RT_CONFIG_H__
++
+--- /dev/null
++++ b/drivers/staging/rt2870/rt_linux.c
+@@ -0,0 +1,1095 @@
++/*
++ *************************************************************************
++ * Ralink Tech Inc.
++ * 5F., No.36, Taiyuan St., Jhubei City,
++ * Hsinchu County 302,
++ * Taiwan, R.O.C.
++ *
++ * (c) Copyright 2002-2007, Ralink Technology, Inc.
++ *
++ * This program is free software; you can redistribute it and/or modify *
++ * it under the terms of the GNU General Public License as published by *
++ * the Free Software Foundation; either version 2 of the License, or *
++ * (at your option) any later version. *
++ * *
++ * This program is distributed in the hope that it will be useful, *
++ * but WITHOUT ANY WARRANTY; without even the implied warranty of *
++ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the *
++ * GNU General Public License for more details. *
++ * *
++ * You should have received a copy of the GNU General Public License *
++ * along with this program; if not, write to the *
++ * Free Software Foundation, Inc., *
++ * 59 Temple Place - Suite 330, Boston, MA 02111-1307, USA. *
++ * *
++ *************************************************************************
++ */
++
++#include "rt_config.h"
++
++ULONG RTDebugLevel = RT_DEBUG_ERROR;
++
++BUILD_TIMER_FUNCTION(MlmePeriodicExec);
++//BUILD_TIMER_FUNCTION(MlmeRssiReportExec);
++BUILD_TIMER_FUNCTION(AsicRxAntEvalTimeout);
++BUILD_TIMER_FUNCTION(APSDPeriodicExec);
++BUILD_TIMER_FUNCTION(AsicRfTuningExec);
++#ifdef RT2870
++BUILD_TIMER_FUNCTION(BeaconUpdateExec);
++#endif // RT2870 //
++
++
++#ifdef CONFIG_STA_SUPPORT
++BUILD_TIMER_FUNCTION(BeaconTimeout);
++BUILD_TIMER_FUNCTION(ScanTimeout);
++BUILD_TIMER_FUNCTION(AuthTimeout);
++BUILD_TIMER_FUNCTION(AssocTimeout);
++BUILD_TIMER_FUNCTION(ReassocTimeout);
++BUILD_TIMER_FUNCTION(DisassocTimeout);
++BUILD_TIMER_FUNCTION(LinkDownExec);
++#ifdef LEAP_SUPPORT
++BUILD_TIMER_FUNCTION(LeapAuthTimeout);
++#endif
++BUILD_TIMER_FUNCTION(StaQuickResponeForRateUpExec);
++BUILD_TIMER_FUNCTION(WpaDisassocApAndBlockAssoc);
++#ifdef QOS_DLS_SUPPORT
++BUILD_TIMER_FUNCTION(DlsTimeoutAction);
++#endif // QOS_DLS_SUPPORT //
++#endif // CONFIG_STA_SUPPORT //
++
++// for wireless system event message
++char const *pWirelessSysEventText[IW_SYS_EVENT_TYPE_NUM] = {
++ // system status event
++ "had associated successfully", /* IW_ASSOC_EVENT_FLAG */
++ "had disassociated", /* IW_DISASSOC_EVENT_FLAG */
++ "had deauthenticated", /* IW_DEAUTH_EVENT_FLAG */
++ "had been aged-out and disassociated", /* IW_AGEOUT_EVENT_FLAG */
++ "occurred CounterMeasures attack", /* IW_COUNTER_MEASURES_EVENT_FLAG */
++ "occurred replay counter different in Key Handshaking", /* IW_REPLAY_COUNTER_DIFF_EVENT_FLAG */
++ "occurred RSNIE different in Key Handshaking", /* IW_RSNIE_DIFF_EVENT_FLAG */
++ "occurred MIC different in Key Handshaking", /* IW_MIC_DIFF_EVENT_FLAG */
++ "occurred ICV error in RX", /* IW_ICV_ERROR_EVENT_FLAG */
++ "occurred MIC error in RX", /* IW_MIC_ERROR_EVENT_FLAG */
++ "Group Key Handshaking timeout", /* IW_GROUP_HS_TIMEOUT_EVENT_FLAG */
++ "Pairwise Key Handshaking timeout", /* IW_PAIRWISE_HS_TIMEOUT_EVENT_FLAG */
++ "RSN IE sanity check failure", /* IW_RSNIE_SANITY_FAIL_EVENT_FLAG */
++ "set key done in WPA/WPAPSK", /* IW_SET_KEY_DONE_WPA1_EVENT_FLAG */
++ "set key done in WPA2/WPA2PSK", /* IW_SET_KEY_DONE_WPA2_EVENT_FLAG */
++ "connects with our wireless client", /* IW_STA_LINKUP_EVENT_FLAG */
++ "disconnects with our wireless client", /* IW_STA_LINKDOWN_EVENT_FLAG */
++ "scan completed" /* IW_SCAN_COMPLETED_EVENT_FLAG */
++ "scan terminate!! Busy!! Enqueue fail!!" /* IW_SCAN_ENQUEUE_FAIL_EVENT_FLAG */
++ };
++
++// for wireless IDS_spoof_attack event message
++char const *pWirelessSpoofEventText[IW_SPOOF_EVENT_TYPE_NUM] = {
++ "detected conflict SSID", /* IW_CONFLICT_SSID_EVENT_FLAG */
++ "detected spoofed association response", /* IW_SPOOF_ASSOC_RESP_EVENT_FLAG */
++ "detected spoofed reassociation responses", /* IW_SPOOF_REASSOC_RESP_EVENT_FLAG */
++ "detected spoofed probe response", /* IW_SPOOF_PROBE_RESP_EVENT_FLAG */
++ "detected spoofed beacon", /* IW_SPOOF_BEACON_EVENT_FLAG */
++ "detected spoofed disassociation", /* IW_SPOOF_DISASSOC_EVENT_FLAG */
++ "detected spoofed authentication", /* IW_SPOOF_AUTH_EVENT_FLAG */
++ "detected spoofed deauthentication", /* IW_SPOOF_DEAUTH_EVENT_FLAG */
++ "detected spoofed unknown management frame", /* IW_SPOOF_UNKNOWN_MGMT_EVENT_FLAG */
++ "detected replay attack" /* IW_REPLAY_ATTACK_EVENT_FLAG */
++ };
++
++// for wireless IDS_flooding_attack event message
++char const *pWirelessFloodEventText[IW_FLOOD_EVENT_TYPE_NUM] = {
++ "detected authentication flooding", /* IW_FLOOD_AUTH_EVENT_FLAG */
++ "detected association request flooding", /* IW_FLOOD_ASSOC_REQ_EVENT_FLAG */
++ "detected reassociation request flooding", /* IW_FLOOD_REASSOC_REQ_EVENT_FLAG */
++ "detected probe request flooding", /* IW_FLOOD_PROBE_REQ_EVENT_FLAG */
++ "detected disassociation flooding", /* IW_FLOOD_DISASSOC_EVENT_FLAG */
++ "detected deauthentication flooding", /* IW_FLOOD_DEAUTH_EVENT_FLAG */
++ "detected 802.1x eap-request flooding" /* IW_FLOOD_EAP_REQ_EVENT_FLAG */
++ };
++
++/* timeout -- ms */
++VOID RTMP_SetPeriodicTimer(
++ IN NDIS_MINIPORT_TIMER *pTimer,
++ IN unsigned long timeout)
++{
++ timeout = ((timeout*HZ) / 1000);
++ pTimer->expires = jiffies + timeout;
++ add_timer(pTimer);
++}
++
++/* convert NdisMInitializeTimer --> RTMP_OS_Init_Timer */
++VOID RTMP_OS_Init_Timer(
++ IN PRTMP_ADAPTER pAd,
++ IN NDIS_MINIPORT_TIMER *pTimer,
++ IN TIMER_FUNCTION function,
++ IN PVOID data)
++{
++ init_timer(pTimer);
++ pTimer->data = (unsigned long)data;
++ pTimer->function = function;
++}
++
++
++VOID RTMP_OS_Add_Timer(
++ IN NDIS_MINIPORT_TIMER *pTimer,
++ IN unsigned long timeout)
++{
++ if (timer_pending(pTimer))
++ return;
++
++ timeout = ((timeout*HZ) / 1000);
++ pTimer->expires = jiffies + timeout;
++ add_timer(pTimer);
++}
++
++VOID RTMP_OS_Mod_Timer(
++ IN NDIS_MINIPORT_TIMER *pTimer,
++ IN unsigned long timeout)
++{
++ timeout = ((timeout*HZ) / 1000);
++ mod_timer(pTimer, jiffies + timeout);
++}
++
++VOID RTMP_OS_Del_Timer(
++ IN NDIS_MINIPORT_TIMER *pTimer,
++ OUT BOOLEAN *pCancelled)
++{
++ if (timer_pending(pTimer))
++ {
++ *pCancelled = del_timer_sync(pTimer);
++ }
++ else
++ {
++ *pCancelled = TRUE;
++ }
++
++}
++
++VOID RTMP_OS_Release_Packet(
++ IN PRTMP_ADAPTER pAd,
++ IN PQUEUE_ENTRY pEntry)
++{
++ //RTMPFreeNdisPacket(pAd, (struct sk_buff *)pEntry);
++}
++
++// Unify all delay routine by using udelay
++VOID RTMPusecDelay(
++ IN ULONG usec)
++{
++ ULONG i;
++
++ for (i = 0; i < (usec / 50); i++)
++ udelay(50);
++
++ if (usec % 50)
++ udelay(usec % 50);
++}
++
++void RTMP_GetCurrentSystemTime(LARGE_INTEGER *time)
++{
++ time->u.LowPart = jiffies;
++}
++
++// pAd MUST allow to be NULL
++NDIS_STATUS os_alloc_mem(
++ IN PRTMP_ADAPTER pAd,
++ OUT PUCHAR *mem,
++ IN ULONG size)
++{
++ *mem = (PUCHAR) kmalloc(size, GFP_ATOMIC);
++ if (*mem)
++ return (NDIS_STATUS_SUCCESS);
++ else
++ return (NDIS_STATUS_FAILURE);
++}
++
++// pAd MUST allow to be NULL
++NDIS_STATUS os_free_mem(
++ IN PRTMP_ADAPTER pAd,
++ IN PUCHAR mem)
++{
++
++ ASSERT(mem);
++ kfree(mem);
++ return (NDIS_STATUS_SUCCESS);
++}
++
++
++PNDIS_PACKET RTMP_AllocateFragPacketBuffer(
++ IN PRTMP_ADAPTER pAd,
++ IN ULONG Length)
++{
++ struct sk_buff *pkt;
++
++ pkt = dev_alloc_skb(Length);
++
++ if (pkt == NULL)
++ {
++ DBGPRINT(RT_DEBUG_ERROR, ("can't allocate frag rx %ld size packet\n",Length));
++ }
++
++ if (pkt)
++ {
++ RTMP_SET_PACKET_SOURCE(OSPKT_TO_RTPKT(pkt), PKTSRC_NDIS);
++ }
++
++ return (PNDIS_PACKET) pkt;
++}
++
++
++PNDIS_PACKET RTMP_AllocateTxPacketBuffer(
++ IN PRTMP_ADAPTER pAd,
++ IN ULONG Length,
++ IN BOOLEAN Cached,
++ OUT PVOID *VirtualAddress)
++{
++ struct sk_buff *pkt;
++
++ pkt = dev_alloc_skb(Length);
++
++ if (pkt == NULL)
++ {
++ DBGPRINT(RT_DEBUG_ERROR, ("can't allocate tx %ld size packet\n",Length));
++ }
++
++ if (pkt)
++ {
++ RTMP_SET_PACKET_SOURCE(OSPKT_TO_RTPKT(pkt), PKTSRC_NDIS);
++ *VirtualAddress = (PVOID) pkt->data;
++ }
++ else
++ {
++ *VirtualAddress = (PVOID) NULL;
++ }
++
++ return (PNDIS_PACKET) pkt;
++}
++
++
++VOID build_tx_packet(
++ IN PRTMP_ADAPTER pAd,
++ IN PNDIS_PACKET pPacket,
++ IN PUCHAR pFrame,
++ IN ULONG FrameLen)
++{
++
++ struct sk_buff *pTxPkt;
++
++ ASSERT(pPacket);
++ pTxPkt = RTPKT_TO_OSPKT(pPacket);
++
++ NdisMoveMemory(skb_put(pTxPkt, FrameLen), pFrame, FrameLen);
++}
++
++VOID RTMPFreeAdapter(
++ IN PRTMP_ADAPTER pAd)
++{
++ POS_COOKIE os_cookie;
++ int index;
++
++ os_cookie=(POS_COOKIE)pAd->OS_Cookie;
++
++ kfree(pAd->BeaconBuf);
++
++
++ NdisFreeSpinLock(&pAd->MgmtRingLock);
++
++
++ for (index =0 ; index < NUM_OF_TX_RING; index++)
++ {
++ NdisFreeSpinLock(&pAd->TxSwQueueLock[index]);
++ NdisFreeSpinLock(&pAd->DeQueueLock[index]);
++ pAd->DeQueueRunning[index] = FALSE;
++ }
++
++ NdisFreeSpinLock(&pAd->irq_lock);
++
++
++ vfree(pAd); // pci_free_consistent(os_cookie->pci_dev,sizeof(RTMP_ADAPTER),pAd,os_cookie->pAd_pa);
++ kfree(os_cookie);
++}
++
++BOOLEAN OS_Need_Clone_Packet(void)
++{
++ return (FALSE);
++}
++
++
++
++/*
++ ========================================================================
++
++ Routine Description:
++ clone an input NDIS PACKET to another one. The new internally created NDIS PACKET
++ must have only one NDIS BUFFER
++ return - byte copied. 0 means can't create NDIS PACKET
++ NOTE: internally created NDIS_PACKET should be destroyed by RTMPFreeNdisPacket
++
++ Arguments:
++ pAd Pointer to our adapter
++ pInsAMSDUHdr EWC A-MSDU format has extra 14-bytes header. if TRUE, insert this 14-byte hdr in front of MSDU.
++ *pSrcTotalLen return total packet length. This lenght is calculated with 802.3 format packet.
++
++ Return Value:
++ NDIS_STATUS_SUCCESS
++ NDIS_STATUS_FAILURE
++
++ Note:
++
++ ========================================================================
++*/
++NDIS_STATUS RTMPCloneNdisPacket(
++ IN PRTMP_ADAPTER pAd,
++ IN BOOLEAN pInsAMSDUHdr,
++ IN PNDIS_PACKET pInPacket,
++ OUT PNDIS_PACKET *ppOutPacket)
++{
++
++ struct sk_buff *pkt;
++
++ ASSERT(pInPacket);
++ ASSERT(ppOutPacket);
++
++ // 1. Allocate a packet
++ pkt = dev_alloc_skb(2048);
++
++ if (pkt == NULL)
++ {
++ return NDIS_STATUS_FAILURE;
++ }
++
++ skb_put(pkt, GET_OS_PKT_LEN(pInPacket));
++ NdisMoveMemory(pkt->data, GET_OS_PKT_DATAPTR(pInPacket), GET_OS_PKT_LEN(pInPacket));
++ *ppOutPacket = OSPKT_TO_RTPKT(pkt);
++
++
++ RTMP_SET_PACKET_SOURCE(OSPKT_TO_RTPKT(pkt), PKTSRC_NDIS);
++
++ printk("###Clone###\n");
++
++ return NDIS_STATUS_SUCCESS;
++}
++
++
++// the allocated NDIS PACKET must be freed via RTMPFreeNdisPacket()
++NDIS_STATUS RTMPAllocateNdisPacket(
++ IN PRTMP_ADAPTER pAd,
++ OUT PNDIS_PACKET *ppPacket,
++ IN PUCHAR pHeader,
++ IN UINT HeaderLen,
++ IN PUCHAR pData,
++ IN UINT DataLen)
++{
++ PNDIS_PACKET pPacket;
++ ASSERT(pData);
++ ASSERT(DataLen);
++
++ // 1. Allocate a packet
++ pPacket = (PNDIS_PACKET *) dev_alloc_skb(HeaderLen + DataLen + TXPADDING_SIZE);
++ if (pPacket == NULL)
++ {
++ *ppPacket = NULL;
++#ifdef DEBUG
++ printk("RTMPAllocateNdisPacket Fail\n\n");
++#endif
++ return NDIS_STATUS_FAILURE;
++ }
++
++ // 2. clone the frame content
++ if (HeaderLen > 0)
++ NdisMoveMemory(GET_OS_PKT_DATAPTR(pPacket), pHeader, HeaderLen);
++ if (DataLen > 0)
++ NdisMoveMemory(GET_OS_PKT_DATAPTR(pPacket) + HeaderLen, pData, DataLen);
++
++ // 3. update length of packet
++ skb_put(GET_OS_PKT_TYPE(pPacket), HeaderLen+DataLen);
++
++ RTMP_SET_PACKET_SOURCE(pPacket, PKTSRC_NDIS);
++// printk("%s : pPacket = %p, len = %d\n", __FUNCTION__, pPacket, GET_OS_PKT_LEN(pPacket));
++ *ppPacket = pPacket;
++ return NDIS_STATUS_SUCCESS;
++}
++
++/*
++ ========================================================================
++ Description:
++ This routine frees a miniport internally allocated NDIS_PACKET and its
++ corresponding NDIS_BUFFER and allocated memory.
++ ========================================================================
++*/
++VOID RTMPFreeNdisPacket(
++ IN PRTMP_ADAPTER pAd,
++ IN PNDIS_PACKET pPacket)
++{
++ dev_kfree_skb_any(RTPKT_TO_OSPKT(pPacket));
++}
++
++
++// IRQL = DISPATCH_LEVEL
++// NOTE: we do have an assumption here, that Byte0 and Byte1 always reasid at the same
++// scatter gather buffer
++NDIS_STATUS Sniff2BytesFromNdisBuffer(
++ IN PNDIS_BUFFER pFirstBuffer,
++ IN UCHAR DesiredOffset,
++ OUT PUCHAR pByte0,
++ OUT PUCHAR pByte1)
++{
++ *pByte0 = *(PUCHAR)(pFirstBuffer + DesiredOffset);
++ *pByte1 = *(PUCHAR)(pFirstBuffer + DesiredOffset + 1);
++
++ return NDIS_STATUS_SUCCESS;
++}
++
++
++void RTMP_QueryPacketInfo(
++ IN PNDIS_PACKET pPacket,
++ OUT PACKET_INFO *pPacketInfo,
++ OUT PUCHAR *pSrcBufVA,
++ OUT UINT *pSrcBufLen)
++{
++ pPacketInfo->BufferCount = 1;
++ pPacketInfo->pFirstBuffer = GET_OS_PKT_DATAPTR(pPacket);
++ pPacketInfo->PhysicalBufferCount = 1;
++ pPacketInfo->TotalPacketLength = GET_OS_PKT_LEN(pPacket);
++
++ *pSrcBufVA = GET_OS_PKT_DATAPTR(pPacket);
++ *pSrcBufLen = GET_OS_PKT_LEN(pPacket);
++}
++
++void RTMP_QueryNextPacketInfo(
++ IN PNDIS_PACKET *ppPacket,
++ OUT PACKET_INFO *pPacketInfo,
++ OUT PUCHAR *pSrcBufVA,
++ OUT UINT *pSrcBufLen)
++{
++ PNDIS_PACKET pPacket = NULL;
++
++ if (*ppPacket)
++ pPacket = GET_OS_PKT_NEXT(*ppPacket);
++
++ if (pPacket)
++ {
++ pPacketInfo->BufferCount = 1;
++ pPacketInfo->pFirstBuffer = GET_OS_PKT_DATAPTR(pPacket);
++ pPacketInfo->PhysicalBufferCount = 1;
++ pPacketInfo->TotalPacketLength = GET_OS_PKT_LEN(pPacket);
++
++ *pSrcBufVA = GET_OS_PKT_DATAPTR(pPacket);
++ *pSrcBufLen = GET_OS_PKT_LEN(pPacket);
++ *ppPacket = GET_OS_PKT_NEXT(pPacket);
++ }
++ else
++ {
++ pPacketInfo->BufferCount = 0;
++ pPacketInfo->pFirstBuffer = NULL;
++ pPacketInfo->PhysicalBufferCount = 0;
++ pPacketInfo->TotalPacketLength = 0;
++
++ *pSrcBufVA = NULL;
++ *pSrcBufLen = 0;
++ *ppPacket = NULL;
++ }
++}
++
++// not yet support MBSS
++PNET_DEV get_netdev_from_bssid(
++ IN PRTMP_ADAPTER pAd,
++ IN UCHAR FromWhichBSSID)
++{
++ PNET_DEV dev_p = NULL;
++
++
++#ifdef CONFIG_STA_SUPPORT
++ IF_DEV_CONFIG_OPMODE_ON_STA(pAd)
++ {
++ dev_p = pAd->net_dev;
++ }
++#endif // CONFIG_STA_SUPPORT //
++
++ ASSERT(dev_p);
++ return dev_p; /* return one of MBSS */
++}
++
++PNDIS_PACKET DuplicatePacket(
++ IN PRTMP_ADAPTER pAd,
++ IN PNDIS_PACKET pPacket,
++ IN UCHAR FromWhichBSSID)
++{
++ struct sk_buff *skb;
++ PNDIS_PACKET pRetPacket = NULL;
++ USHORT DataSize;
++ UCHAR *pData;
++
++ DataSize = (USHORT) GET_OS_PKT_LEN(pPacket);
++ pData = (PUCHAR) GET_OS_PKT_DATAPTR(pPacket);
++
++
++ skb = skb_clone(RTPKT_TO_OSPKT(pPacket), MEM_ALLOC_FLAG);
++ if (skb)
++ {
++ skb->dev = get_netdev_from_bssid(pAd, FromWhichBSSID);
++ pRetPacket = OSPKT_TO_RTPKT(skb);
++ }
++
++#if 0
++ if ((skb = __dev_alloc_skb(DataSize + 2+32, MEM_ALLOC_FLAG)) != NULL)
++ {
++ skb_reserve(skb, 2+32);
++ NdisMoveMemory(skb->tail, pData, DataSize);
++ skb_put(skb, DataSize);
++ skb->dev = get_netdev_from_bssid(pAd, FromWhichBSSID);
++ pRetPacket = OSPKT_TO_RTPKT(skb);
++ }
++#endif
++
++ return pRetPacket;
++
++}
++
++PNDIS_PACKET duplicate_pkt(
++ IN PRTMP_ADAPTER pAd,
++ IN PUCHAR pHeader802_3,
++ IN UINT HdrLen,
++ IN PUCHAR pData,
++ IN ULONG DataSize,
++ IN UCHAR FromWhichBSSID)
++{
++ struct sk_buff *skb;
++ PNDIS_PACKET pPacket = NULL;
++
++
++ if ((skb = __dev_alloc_skb(HdrLen + DataSize + 2, MEM_ALLOC_FLAG)) != NULL)
++ {
++ skb_reserve(skb, 2);
++ NdisMoveMemory(skb->tail, pHeader802_3, HdrLen);
++ skb_put(skb, HdrLen);
++ NdisMoveMemory(skb->tail, pData, DataSize);
++ skb_put(skb, DataSize);
++ skb->dev = get_netdev_from_bssid(pAd, FromWhichBSSID);
++ pPacket = OSPKT_TO_RTPKT(skb);
++ }
++
++ return pPacket;
++}
++
++
++#define TKIP_TX_MIC_SIZE 8
++PNDIS_PACKET duplicate_pkt_with_TKIP_MIC(
++ IN PRTMP_ADAPTER pAd,
++ IN PNDIS_PACKET pPacket)
++{
++ struct sk_buff *skb, *newskb;
++
++
++ skb = RTPKT_TO_OSPKT(pPacket);
++ if (skb_tailroom(skb) < TKIP_TX_MIC_SIZE)
++ {
++ // alloc a new skb and copy the packet
++ newskb = skb_copy_expand(skb, skb_headroom(skb), TKIP_TX_MIC_SIZE, GFP_ATOMIC);
++ dev_kfree_skb_any(skb);
++ if (newskb == NULL)
++ {
++ DBGPRINT(RT_DEBUG_ERROR, ("Extend Tx.MIC for packet failed!, dropping packet!\n"));
++ return NULL;
++ }
++ skb = newskb;
++ }
++
++ return OSPKT_TO_RTPKT(skb);
++
++#if 0
++ if ((data = skb_put(skb, TKIP_TX_MIC_SIZE)) != NULL)
++ { // If we can extend it, well, copy it first.
++ NdisMoveMemory(data, pAd->PrivateInfo.Tx.MIC, TKIP_TX_MIC_SIZE);
++ }
++ else
++ {
++ // Otherwise, copy the packet.
++ newskb = skb_copy_expand(skb, skb_headroom(skb), TKIP_TX_MIC_SIZE, GFP_ATOMIC);
++ dev_kfree_skb_any(skb);
++ if (newskb == NULL)
++ {
++ DBGPRINT(RT_DEBUG_ERROR, ("Extend Tx.MIC to packet failed!, dropping packet\n"));
++ return NULL;
++ }
++ skb = newskb;
++
++ NdisMoveMemory(skb->tail, pAd->PrivateInfo.Tx.MIC, TKIP_TX_MIC_SIZE);
++ skb_put(skb, TKIP_TX_MIC_SIZE);
++ }
++
++ return OSPKT_TO_RTPKT(skb);
++#endif
++
++}
++
++
++
++
++PNDIS_PACKET ClonePacket(
++ IN PRTMP_ADAPTER pAd,
++ IN PNDIS_PACKET pPacket,
++ IN PUCHAR pData,
++ IN ULONG DataSize)
++{
++ struct sk_buff *pRxPkt;
++ struct sk_buff *pClonedPkt;
++
++ ASSERT(pPacket);
++ pRxPkt = RTPKT_TO_OSPKT(pPacket);
++
++ // clone the packet
++ pClonedPkt = skb_clone(pRxPkt, MEM_ALLOC_FLAG);
++
++ if (pClonedPkt)
++ {
++ // set the correct dataptr and data len
++ pClonedPkt->dev = pRxPkt->dev;
++ pClonedPkt->data = pData;
++ pClonedPkt->len = DataSize;
++ pClonedPkt->tail = pClonedPkt->data + pClonedPkt->len;
++ ASSERT(DataSize < 1530);
++ }
++ return pClonedPkt;
++}
++
++//
++// change OS packet DataPtr and DataLen
++//
++void update_os_packet_info(
++ IN PRTMP_ADAPTER pAd,
++ IN RX_BLK *pRxBlk,
++ IN UCHAR FromWhichBSSID)
++{
++ struct sk_buff *pOSPkt;
++
++ ASSERT(pRxBlk->pRxPacket);
++ pOSPkt = RTPKT_TO_OSPKT(pRxBlk->pRxPacket);
++
++ pOSPkt->dev = get_netdev_from_bssid(pAd, FromWhichBSSID);
++ pOSPkt->data = pRxBlk->pData;
++ pOSPkt->len = pRxBlk->DataSize;
++ pOSPkt->tail = pOSPkt->data + pOSPkt->len;
++}
++
++
++void wlan_802_11_to_802_3_packet(
++ IN PRTMP_ADAPTER pAd,
++ IN RX_BLK *pRxBlk,
++ IN PUCHAR pHeader802_3,
++ IN UCHAR FromWhichBSSID)
++{
++ struct sk_buff *pOSPkt;
++
++ ASSERT(pRxBlk->pRxPacket);
++ ASSERT(pHeader802_3);
++
++ pOSPkt = RTPKT_TO_OSPKT(pRxBlk->pRxPacket);
++
++ pOSPkt->dev = get_netdev_from_bssid(pAd, FromWhichBSSID);
++ pOSPkt->data = pRxBlk->pData;
++ pOSPkt->len = pRxBlk->DataSize;
++ pOSPkt->tail = pOSPkt->data + pOSPkt->len;
++
++ //
++ // copy 802.3 header
++ //
++ //
++
++#ifdef CONFIG_STA_SUPPORT
++ IF_DEV_CONFIG_OPMODE_ON_STA(pAd)
++ NdisMoveMemory(skb_push(pOSPkt, LENGTH_802_3), pHeader802_3, LENGTH_802_3);
++#endif // CONFIG_STA_SUPPORT //
++ }
++
++
++
++void announce_802_3_packet(
++ IN PRTMP_ADAPTER pAd,
++ IN PNDIS_PACKET pPacket)
++{
++
++ struct sk_buff *pRxPkt;
++
++ ASSERT(pPacket);
++
++ pRxPkt = RTPKT_TO_OSPKT(pPacket);
++
++#ifdef CONFIG_STA_SUPPORT
++#endif // CONFIG_STA_SUPPORT //
++
++ /* Push up the protocol stack */
++#ifdef IKANOS_VX_1X0
++ IKANOS_DataFrameRx(pAd, pRxPkt->dev, pRxPkt, pRxPkt->len);
++#else
++ pRxPkt->protocol = eth_type_trans(pRxPkt, pRxPkt->dev);
++
++//#ifdef CONFIG_5VT_ENHANCE
++// *(int*)(pRxPkt->cb) = BRIDGE_TAG;
++//#endif
++ netif_rx(pRxPkt);
++#endif // IKANOS_VX_1X0 //
++}
++
++
++PRTMP_SCATTER_GATHER_LIST
++rt_get_sg_list_from_packet(PNDIS_PACKET pPacket, RTMP_SCATTER_GATHER_LIST *sg)
++{
++ sg->NumberOfElements = 1;
++ sg->Elements[0].Address = GET_OS_PKT_DATAPTR(pPacket);
++ sg->Elements[0].Length = GET_OS_PKT_LEN(pPacket);
++ return (sg);
++}
++
++void hex_dump(char *str, unsigned char *pSrcBufVA, unsigned int SrcBufLen)
++{
++ unsigned char *pt;
++ int x;
++
++ if (RTDebugLevel < RT_DEBUG_TRACE)
++ return;
++
++ pt = pSrcBufVA;
++ printk("%s: %p, len = %d\n",str, pSrcBufVA, SrcBufLen);
++ for (x=0; x<SrcBufLen; x++)
++ {
++ if (x % 16 == 0)
++ printk("0x%04x : ", x);
++ printk("%02x ", ((unsigned char)pt[x]));
++ if (x%16 == 15) printk("\n");
++ }
++ printk("\n");
++}
++
++/*
++ ========================================================================
++
++ Routine Description:
++ Send log message through wireless event
++
++ Support standard iw_event with IWEVCUSTOM. It is used below.
++
++ iwreq_data.data.flags is used to store event_flag that is defined by user.
++ iwreq_data.data.length is the length of the event log.
++
++ The format of the event log is composed of the entry's MAC address and
++ the desired log message (refer to pWirelessEventText).
++
++ ex: 11:22:33:44:55:66 has associated successfully
++
++ p.s. The requirement of Wireless Extension is v15 or newer.
++
++ ========================================================================
++*/
++VOID RTMPSendWirelessEvent(
++ IN PRTMP_ADAPTER pAd,
++ IN USHORT Event_flag,
++ IN PUCHAR pAddr,
++ IN UCHAR BssIdx,
++ IN CHAR Rssi)
++{
++#if WIRELESS_EXT >= 15
++
++ union iwreq_data wrqu;
++ PUCHAR pBuf = NULL, pBufPtr = NULL;
++ USHORT event, type, BufLen;
++ UCHAR event_table_len = 0;
++
++ type = Event_flag & 0xFF00;
++ event = Event_flag & 0x00FF;
++
++ switch (type)
++ {
++ case IW_SYS_EVENT_FLAG_START:
++ event_table_len = IW_SYS_EVENT_TYPE_NUM;
++ break;
++
++ case IW_SPOOF_EVENT_FLAG_START:
++ event_table_len = IW_SPOOF_EVENT_TYPE_NUM;
++ break;
++
++ case IW_FLOOD_EVENT_FLAG_START:
++ event_table_len = IW_FLOOD_EVENT_TYPE_NUM;
++ break;
++ }
++
++ if (event_table_len == 0)
++ {
++ DBGPRINT(RT_DEBUG_ERROR, ("%s : The type(%0x02x) is not valid.\n", __FUNCTION__, type));
++ return;
++ }
++
++ if (event >= event_table_len)
++ {
++ DBGPRINT(RT_DEBUG_ERROR, ("%s : The event(%0x02x) is not valid.\n", __FUNCTION__, event));
++ return;
++ }
++
++ //Allocate memory and copy the msg.
++ if((pBuf = kmalloc(IW_CUSTOM_MAX_LEN, GFP_ATOMIC)) != NULL)
++ {
++ //Prepare the payload
++ memset(pBuf, 0, IW_CUSTOM_MAX_LEN);
++
++ pBufPtr = pBuf;
++
++ if (pAddr)
++ pBufPtr += sprintf(pBufPtr, "(RT2860) STA(%02x:%02x:%02x:%02x:%02x:%02x) ", PRINT_MAC(pAddr));
++ else if (BssIdx < MAX_MBSSID_NUM)
++ pBufPtr += sprintf(pBufPtr, "(RT2860) BSS(ra%d) ", BssIdx);
++ else
++ pBufPtr += sprintf(pBufPtr, "(RT2860) ");
++
++ if (type == IW_SYS_EVENT_FLAG_START)
++ pBufPtr += sprintf(pBufPtr, "%s", pWirelessSysEventText[event]);
++ else if (type == IW_SPOOF_EVENT_FLAG_START)
++ pBufPtr += sprintf(pBufPtr, "%s (RSSI=%d)", pWirelessSpoofEventText[event], Rssi);
++ else if (type == IW_FLOOD_EVENT_FLAG_START)
++ pBufPtr += sprintf(pBufPtr, "%s", pWirelessFloodEventText[event]);
++ else
++ pBufPtr += sprintf(pBufPtr, "%s", "unknown event");
++
++ pBufPtr[pBufPtr - pBuf] = '\0';
++ BufLen = pBufPtr - pBuf;
++
++ memset(&wrqu, 0, sizeof(wrqu));
++ wrqu.data.flags = Event_flag;
++ wrqu.data.length = BufLen;
++
++ //send wireless event
++ wireless_send_event(pAd->net_dev, IWEVCUSTOM, &wrqu, pBuf);
++
++ //DBGPRINT(RT_DEBUG_TRACE, ("%s : %s\n", __FUNCTION__, pBuf));
++
++ kfree(pBuf);
++ }
++ else
++ DBGPRINT(RT_DEBUG_ERROR, ("%s : Can't allocate memory for wireless event.\n", __FUNCTION__));
++#else
++ DBGPRINT(RT_DEBUG_ERROR, ("%s : The Wireless Extension MUST be v15 or newer.\n", __FUNCTION__));
++#endif /* WIRELESS_EXT >= 15 */
++}
++
++
++#ifdef CONFIG_STA_SUPPORT
++void send_monitor_packets(
++ IN PRTMP_ADAPTER pAd,
++ IN RX_BLK *pRxBlk)
++{
++ struct sk_buff *pOSPkt;
++ wlan_ng_prism2_header *ph;
++ int rate_index = 0;
++ USHORT header_len = 0;
++ UCHAR temp_header[40] = {0};
++
++ u_int32_t ralinkrate[256] = {2,4,11,22, 12,18,24,36,48,72,96, 108, 109, 110, 111, 112, 13, 26, 39, 52,78,104, 117, 130, 26, 52, 78,104, 156, 208, 234, 260, 27, 54,81,108,162, 216, 243, 270, // Last 38
++ 54, 108, 162, 216, 324, 432, 486, 540, 14, 29, 43, 57, 87, 115, 130, 144, 29, 59,87,115, 173, 230,260, 288, 30, 60,90,120,180,240,270,300,60,120,180,240,360,480,540,600, 0,1,2,3,4,5,6,7,8,9,10,
++ 11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32,33,34,35,36,37,38,39,40,41,42,43,44,45,46,47,48,49,50,51,52,53,54,55,56,57,58,59,60,61,62,63,64,65,66,67,68,69,70,71,72,73,74,75,76,77,78,79,80};
++
++
++ ASSERT(pRxBlk->pRxPacket);
++ if (pRxBlk->DataSize < 10)
++ {
++ DBGPRINT(RT_DEBUG_ERROR, ("%s : Size is too small! (%d)\n", __FUNCTION__, pRxBlk->DataSize));
++ goto err_free_sk_buff;
++ }
++
++ if (pRxBlk->DataSize + sizeof(wlan_ng_prism2_header) > RX_BUFFER_AGGRESIZE)
++ {
++ DBGPRINT(RT_DEBUG_ERROR, ("%s : Size is too large! (%d)\n", __FUNCTION__, pRxBlk->DataSize + sizeof(wlan_ng_prism2_header)));
++ goto err_free_sk_buff;
++ }
++
++ pOSPkt = RTPKT_TO_OSPKT(pRxBlk->pRxPacket);
++ pOSPkt->dev = get_netdev_from_bssid(pAd, BSS0);
++ if (pRxBlk->pHeader->FC.Type == BTYPE_DATA)
++ {
++ pRxBlk->DataSize -= LENGTH_802_11;
++ if ((pRxBlk->pHeader->FC.ToDs == 1) &&
++ (pRxBlk->pHeader->FC.FrDs == 1))
++ header_len = LENGTH_802_11_WITH_ADDR4;
++ else
++ header_len = LENGTH_802_11;
++
++ // QOS
++ if (pRxBlk->pHeader->FC.SubType & 0x08)
++ {
++ header_len += 2;
++ // Data skip QOS contorl field
++ pRxBlk->DataSize -=2;
++ }
++
++ // Order bit: A-Ralink or HTC+
++ if (pRxBlk->pHeader->FC.Order)
++ {
++ header_len += 4;
++ // Data skip HTC contorl field
++ pRxBlk->DataSize -= 4;
++ }
++
++ // Copy Header
++ if (header_len <= 40)
++ NdisMoveMemory(temp_header, pRxBlk->pData, header_len);
++
++ // skip HW padding
++ if (pRxBlk->RxD.L2PAD)
++ pRxBlk->pData += (header_len + 2);
++ else
++ pRxBlk->pData += header_len;
++ } //end if
++
++
++ if (pRxBlk->DataSize < pOSPkt->len) {
++ skb_trim(pOSPkt,pRxBlk->DataSize);
++ } else {
++ skb_put(pOSPkt,(pRxBlk->DataSize - pOSPkt->len));
++ } //end if
++
++ if ((pRxBlk->pData - pOSPkt->data) > 0) {
++ skb_put(pOSPkt,(pRxBlk->pData - pOSPkt->data));
++ skb_pull(pOSPkt,(pRxBlk->pData - pOSPkt->data));
++ } //end if
++
++ if (skb_headroom(pOSPkt) < (sizeof(wlan_ng_prism2_header)+ header_len)) {
++ if (pskb_expand_head(pOSPkt, (sizeof(wlan_ng_prism2_header) + header_len), 0, GFP_ATOMIC)) {
++ DBGPRINT(RT_DEBUG_ERROR, ("%s : Reallocate header size of sk_buff fail!\n", __FUNCTION__));
++ goto err_free_sk_buff;
++ } //end if
++ } //end if
++
++ if (header_len > 0)
++ NdisMoveMemory(skb_push(pOSPkt, header_len), temp_header, header_len);
++
++ ph = (wlan_ng_prism2_header *) skb_push(pOSPkt, sizeof(wlan_ng_prism2_header));
++ NdisZeroMemory(ph, sizeof(wlan_ng_prism2_header));
++
++ ph->msgcode = DIDmsg_lnxind_wlansniffrm;
++ ph->msglen = sizeof(wlan_ng_prism2_header);
++ strcpy(ph->devname, pAd->net_dev->name);
++
++ ph->hosttime.did = DIDmsg_lnxind_wlansniffrm_hosttime;
++ ph->hosttime.status = 0;
++ ph->hosttime.len = 4;
++ ph->hosttime.data = jiffies;
++
++ ph->mactime.did = DIDmsg_lnxind_wlansniffrm_mactime;
++ ph->mactime.status = 0;
++ ph->mactime.len = 0;
++ ph->mactime.data = 0;
++
++ ph->istx.did = DIDmsg_lnxind_wlansniffrm_istx;
++ ph->istx.status = 0;
++ ph->istx.len = 0;
++ ph->istx.data = 0;
++
++ ph->channel.did = DIDmsg_lnxind_wlansniffrm_channel;
++ ph->channel.status = 0;
++ ph->channel.len = 4;
++
++ ph->channel.data = (u_int32_t)pAd->CommonCfg.Channel;
++
++ ph->rssi.did = DIDmsg_lnxind_wlansniffrm_rssi;
++ ph->rssi.status = 0;
++ ph->rssi.len = 4;
++ ph->rssi.data = (u_int32_t)RTMPMaxRssi(pAd, ConvertToRssi(pAd, pRxBlk->pRxWI->RSSI0, RSSI_0), ConvertToRssi(pAd, pRxBlk->pRxWI->RSSI1, RSSI_1), ConvertToRssi(pAd, pRxBlk->pRxWI->RSSI2, RSSI_2));;
++
++ ph->signal.did = DIDmsg_lnxind_wlansniffrm_signal;
++ ph->signal.status = 0;
++ ph->signal.len = 4;
++ ph->signal.data = 0; //rssi + noise;
++
++ ph->noise.did = DIDmsg_lnxind_wlansniffrm_noise;
++ ph->noise.status = 0;
++ ph->noise.len = 4;
++ ph->noise.data = 0;
++
++#ifdef DOT11_N_SUPPORT
++ if (pRxBlk->pRxWI->PHYMODE >= MODE_HTMIX)
++ {
++ rate_index = 16 + ((UCHAR)pRxBlk->pRxWI->BW *16) + ((UCHAR)pRxBlk->pRxWI->ShortGI *32) + ((UCHAR)pRxBlk->pRxWI->MCS);
++ }
++ else
++#endif // DOT11_N_SUPPORT //
++ if (pRxBlk->pRxWI->PHYMODE == MODE_OFDM)
++ rate_index = (UCHAR)(pRxBlk->pRxWI->MCS) + 4;
++ else
++ rate_index = (UCHAR)(pRxBlk->pRxWI->MCS);
++ if (rate_index < 0)
++ rate_index = 0;
++ if (rate_index > 255)
++ rate_index = 255;
++
++ ph->rate.did = DIDmsg_lnxind_wlansniffrm_rate;
++ ph->rate.status = 0;
++ ph->rate.len = 4;
++ ph->rate.data = ralinkrate[rate_index];
++
++ ph->frmlen.did = DIDmsg_lnxind_wlansniffrm_frmlen;
++ ph->frmlen.status = 0;
++ ph->frmlen.len = 4;
++ ph->frmlen.data = (u_int32_t)pRxBlk->DataSize;
++
++
++ pOSPkt->pkt_type = PACKET_OTHERHOST;
++ pOSPkt->protocol = eth_type_trans(pOSPkt, pOSPkt->dev);
++ pOSPkt->ip_summed = CHECKSUM_NONE;
++ netif_rx(pOSPkt);
++
++ return;
++
++err_free_sk_buff:
++ RELEASE_NDIS_PACKET(pAd, pRxBlk->pRxPacket, NDIS_STATUS_FAILURE);
++ return;
++
++}
++#endif // CONFIG_STA_SUPPORT //
++
++
++void rtmp_os_thread_init(PUCHAR pThreadName, PVOID pNotify)
++{
++
++#if LINUX_VERSION_CODE >= KERNEL_VERSION(2,5,0)
++ daemonize(pThreadName /*"%s",pAd->net_dev->name*/);
++
++ allow_signal(SIGTERM);
++ allow_signal(SIGKILL);
++ current->flags |= PF_NOFREEZE;
++#else
++ unsigned long flags;
++
++ daemonize();
++ reparent_to_init();
++ strcpy(current->comm, pThreadName);
++
++ siginitsetinv(¤t->blocked, sigmask(SIGTERM) | sigmask(SIGKILL));
++
++ /* Allow interception of SIGKILL only
++ * Don't allow other signals to interrupt the transmission */
++#if LINUX_VERSION_CODE > KERNEL_VERSION(2,4,22)
++ spin_lock_irqsave(¤t->sigmask_lock, flags);
++ flush_signals(current);
++ recalc_sigpending(current);
++ spin_unlock_irqrestore(¤t->sigmask_lock, flags);
++#endif
++#endif
++
++ /* signal that we've started the thread */
++ complete(pNotify);
++
++}
++
++void RTMP_IndicateMediaState(
++ IN PRTMP_ADAPTER pAd)
++{
++ if (pAd->CommonCfg.bWirelessEvent)
++ {
++ if (pAd->IndicateMediaState == NdisMediaStateConnected)
++ {
++ RTMPSendWirelessEvent(pAd, IW_STA_LINKUP_EVENT_FLAG, pAd->MacTab.Content[BSSID_WCID].Addr, BSS0, 0);
++ }
++ else
++ {
++ RTMPSendWirelessEvent(pAd, IW_STA_LINKDOWN_EVENT_FLAG, pAd->MacTab.Content[BSSID_WCID].Addr, BSS0, 0);
++ }
++ }
++}
++
+--- /dev/null
++++ b/drivers/staging/rt2870/rt_linux.h
+@@ -0,0 +1,908 @@
++/*
++ *************************************************************************
++ * Ralink Tech Inc.
++ * 5F., No.36, Taiyuan St., Jhubei City,
++ * Hsinchu County 302,
++ * Taiwan, R.O.C.
++ *
++ * (c) Copyright 2002-2007, Ralink Technology, Inc.
++ *
++ * This program is free software; you can redistribute it and/or modify *
++ * it under the terms of the GNU General Public License as published by *
++ * the Free Software Foundation; either version 2 of the License, or *
++ * (at your option) any later version. *
++ * *
++ * This program is distributed in the hope that it will be useful, *
++ * but WITHOUT ANY WARRANTY; without even the implied warranty of *
++ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the *
++ * GNU General Public License for more details. *
++ * *
++ * You should have received a copy of the GNU General Public License *
++ * along with this program; if not, write to the *
++ * Free Software Foundation, Inc., *
++ * 59 Temple Place - Suite 330, Boston, MA 02111-1307, USA. *
++ * *
++ *************************************************************************
++ */
++
++/***********************************************************************/
++/* */
++/* Program: rt_linux.c */
++/* Created: 4/21/2006 1:17:38 PM */
++/* Author: Wu Xi-Kun */
++/* Comments: `description` */
++/* */
++/*---------------------------------------------------------------------*/
++/* */
++/* History: */
++/* Revision 1.1 4/21/2006 1:17:38 PM xsikun */
++/* Initial revision */
++/* */
++/***********************************************************************/
++
++#include "rtmp_type.h"
++#include <linux/module.h>
++#include <linux/version.h>
++#include <linux/kernel.h>
++
++#include <linux/spinlock.h>
++#include <linux/init.h>
++#include <linux/string.h>
++#include <linux/timer.h>
++#include <linux/errno.h>
++#include <linux/slab.h>
++#include <linux/interrupt.h>
++#include <linux/pci.h>
++#include <linux/netdevice.h>
++#include <linux/etherdevice.h>
++#include <linux/skbuff.h>
++#include <linux/ethtool.h>
++#include <linux/wireless.h>
++#include <linux/proc_fs.h>
++#include <linux/delay.h>
++#include <linux/if_arp.h>
++#include <linux/ctype.h>
++#include <linux/vmalloc.h>
++
++
++#include <linux/wireless.h>
++#include <net/iw_handler.h>
++
++// load firmware
++#define __KERNEL_SYSCALLS__
++#include <linux/unistd.h>
++#include <asm/uaccess.h>
++
++
++#define MEM_ALLOC_FLAG (GFP_ATOMIC) //(GFP_DMA | GFP_ATOMIC)
++
++#ifndef IFNAMSIZ
++#define IFNAMSIZ 16
++#endif
++
++//#define CONFIG_CKIP_SUPPORT
++
++#undef __inline
++#define __inline static inline
++
++typedef int (*HARD_START_XMIT_FUNC)(struct sk_buff *skb, struct net_device *net_dev);
++
++// add by kathy
++
++#ifdef CONFIG_STA_SUPPORT
++
++#ifdef RT2870
++#define STA_PROFILE_PATH "/etc/Wireless/RT2870STA/RT2870STA.dat"
++#define STA_RT2870_IMAGE_FILE_NAME "/etc/Wireless/RT2870STA/rt2870.bin"
++#define STA_NIC_DEVICE_NAME "RT2870STA"
++#define STA_DRIVER_VERSION "1.4.0.0"
++#ifdef MULTIPLE_CARD_SUPPORT
++#define CARD_INFO_PATH "/etc/Wireless/RT2870STA/RT2870STACard.dat"
++#endif // MULTIPLE_CARD_SUPPORT //
++#endif // RT2870 //
++
++#endif // CONFIG_STA_SUPPORT //
++
++
++#if LINUX_VERSION_CODE >= KERNEL_VERSION(2,5,0)
++
++#define RTMP_TIME_AFTER(a,b) \
++ (typecheck(unsigned long, (unsigned long)a) && \
++ typecheck(unsigned long, (unsigned long)b) && \
++ ((long)(b) - (long)(a) < 0))
++
++#define RTMP_TIME_AFTER_EQ(a,b) \
++ (typecheck(unsigned long, (unsigned long)a) && \
++ typecheck(unsigned long, (unsigned long)b) && \
++ ((long)(a) - (long)(b) >= 0))
++#define RTMP_TIME_BEFORE(a,b) RTMP_TIME_AFTER_EQ(b,a)
++#else
++#define RTMP_TIME_AFTER(a,b) time_after(a, b)
++#endif
++
++#if LINUX_VERSION_CODE >= KERNEL_VERSION(2,5,0)
++#define RT_MOD_INC_USE_COUNT() \
++ if (!try_module_get(THIS_MODULE)) \
++ { \
++ DBGPRINT(RT_DEBUG_ERROR, ("%s: cannot reserve module\n", __FUNCTION__)); \
++ return -1; \
++ }
++
++#define RT_MOD_DEC_USE_COUNT() module_put(THIS_MODULE);
++#else
++#define RT_MOD_INC_USE_COUNT() MOD_INC_USE_COUNT;
++#define RT_MOD_DEC_USE_COUNT() MOD_DEC_USE_COUNT;
++#endif
++
++#define OS_HZ HZ
++
++#define ETH_LENGTH_OF_ADDRESS 6
++
++#define IN
++#define OUT
++
++#define NDIS_STATUS INT
++#define NDIS_STATUS_SUCCESS 0x00
++#define NDIS_STATUS_FAILURE 0x01
++#define NDIS_STATUS_INVALID_DATA 0x02
++#define NDIS_STATUS_RESOURCES 0x03
++
++#define MIN_NET_DEVICE_FOR_AID 0x00 //0x00~0x3f
++#define MIN_NET_DEVICE_FOR_MBSSID 0x00 //0x00,0x10,0x20,0x30
++#define MIN_NET_DEVICE_FOR_WDS 0x10 //0x40,0x50,0x60,0x70
++#define MIN_NET_DEVICE_FOR_APCLI 0x20
++#define MIN_NET_DEVICE_FOR_MESH 0x30
++#ifdef CONFIG_STA_SUPPORT
++#define MIN_NET_DEVICE_FOR_DLS 0x40
++#endif // CONFIG_STA_SUPPORT //
++
++
++#ifdef CONFIG_STA_SUPPORT
++#define NDIS_PACKET_TYPE_DIRECTED 0
++#define NDIS_PACKET_TYPE_MULTICAST 1
++#define NDIS_PACKET_TYPE_BROADCAST 2
++#define NDIS_PACKET_TYPE_ALL_MULTICAST 3
++#endif // CONFIG_STA_SUPPORT //
++
++#if LINUX_VERSION_CODE >= KERNEL_VERSION(2,6,27)
++typedef struct pid * THREAD_PID;
++#define THREAD_PID_INIT_VALUE NULL
++#define GET_PID(_v) find_get_pid(_v)
++#define GET_PID_NUMBER(_v) pid_nr(_v)
++#define CHECK_PID_LEGALITY(_pid) if (pid_nr(_pid) >= 0)
++#define KILL_THREAD_PID(_A, _B, _C) kill_pid(_A, _B, _C)
++#else
++typedef pid_t THREAD_PID;
++#define THREAD_PID_INIT_VALUE -1
++#define GET_PID(_v) _v
++#define GET_PID_NUMBER(_v) _v
++#define CHECK_PID_LEGALITY(_pid) if (_pid >= 0)
++#define KILL_THREAD_PID(_A, _B, _C) kill_proc(_A, _B, _C)
++#endif
++
++struct os_lock {
++ spinlock_t lock;
++ unsigned long flags;
++};
++
++
++struct os_cookie {
++
++#ifdef RT2870
++ struct usb_device *pUsb_Dev;
++
++ THREAD_PID MLMEThr_pid;
++ THREAD_PID RTUSBCmdThr_pid;
++ THREAD_PID TimerQThr_pid;
++#endif // RT2870 //
++
++ struct tasklet_struct rx_done_task;
++ struct tasklet_struct mgmt_dma_done_task;
++ struct tasklet_struct ac0_dma_done_task;
++ struct tasklet_struct ac1_dma_done_task;
++ struct tasklet_struct ac2_dma_done_task;
++ struct tasklet_struct ac3_dma_done_task;
++ struct tasklet_struct hcca_dma_done_task;
++ struct tasklet_struct tbtt_task;
++#ifdef RT2870
++ struct tasklet_struct null_frame_complete_task;
++ struct tasklet_struct rts_frame_complete_task;
++ struct tasklet_struct pspoll_frame_complete_task;
++#endif // RT2870 //
++
++
++ unsigned long apd_pid; //802.1x daemon pid
++ INT ioctl_if_type;
++ INT ioctl_if;
++};
++
++typedef struct _VIRTUAL_ADAPTER
++{
++ struct net_device *RtmpDev;
++ struct net_device *VirtualDev;
++} VIRTUAL_ADAPTER, PVIRTUAL_ADAPTER;
++
++#undef ASSERT
++#define ASSERT(x) \
++{ \
++ if (!(x)) \
++ { \
++ printk(KERN_WARNING __FILE__ ":%d assert " #x "failed\n", __LINE__); \
++ } \
++}
++
++typedef struct os_cookie * POS_COOKIE;
++typedef struct pci_dev * PPCI_DEV;
++typedef struct net_device * PNET_DEV;
++typedef void * PNDIS_PACKET;
++typedef char NDIS_PACKET;
++typedef PNDIS_PACKET * PPNDIS_PACKET;
++typedef dma_addr_t NDIS_PHYSICAL_ADDRESS;
++typedef dma_addr_t * PNDIS_PHYSICAL_ADDRESS;
++//typedef struct timer_list RALINK_TIMER_STRUCT;
++//typedef struct timer_list * PRALINK_TIMER_STRUCT;
++//typedef struct os_lock NDIS_SPIN_LOCK;
++typedef spinlock_t NDIS_SPIN_LOCK;
++typedef struct timer_list NDIS_MINIPORT_TIMER;
++typedef void * NDIS_HANDLE;
++typedef char * PNDIS_BUFFER;
++
++
++
++void hex_dump(char *str, unsigned char *pSrcBufVA, unsigned int SrcBufLen);
++
++dma_addr_t linux_pci_map_single(void *handle, void *ptr, size_t size, int sd_idx, int direction);
++void linux_pci_unmap_single(void *handle, dma_addr_t dma_addr, size_t size, int direction);
++
++
++////////////////////////////////////////
++// MOVE TO rtmp.h ?
++/////////////////////////////////////////
++#define PKTSRC_NDIS 0x7f
++#define PKTSRC_DRIVER 0x0f
++#define PRINT_MAC(addr) \
++ addr[0], addr[1], addr[2], addr[3], addr[4], addr[5]
++
++
++#define RT2860_PCI_DEVICE_ID 0x0601
++
++
++#ifdef RT2870
++#define PCI_MAP_SINGLE(_handle, _ptr, _size, _dir) (ULONG)0
++
++#define PCI_UNMAP_SINGLE(_handle, _ptr, _size, _dir)
++#endif // RT2870 //
++
++
++#define BEACON_FRAME_DMA_CACHE_WBACK(_ptr, _size) \
++ dma_cache_wback(_ptr, _size)
++
++
++//////////////////////////////////////////
++//
++//////////////////////////////////////////
++
++
++#define NdisMIndicateStatus(_w, _x, _y, _z)
++
++typedef struct timer_list RTMP_OS_TIMER;
++
++#ifdef RT2870
++/* ----------------- Timer Related MARCO ---------------*/
++// In RT2870, we have a lot of timer functions and will read/write register, it's
++// not allowed in Linux USB sub-system to do it ( because of sleep issue when submit
++// to ctrl pipe). So we need a wrapper function to take care it.
++
++typedef VOID (*RT2870_TIMER_HANDLE)(
++ IN PVOID SystemSpecific1,
++ IN PVOID FunctionContext,
++ IN PVOID SystemSpecific2,
++ IN PVOID SystemSpecific3);
++#endif // RT2870 //
++
++
++typedef struct _RALINK_TIMER_STRUCT {
++ RTMP_OS_TIMER TimerObj; // Ndis Timer object
++ BOOLEAN Valid; // Set to True when call RTMPInitTimer
++ BOOLEAN State; // True if timer cancelled
++ BOOLEAN PeriodicType; // True if timer is periodic timer
++ BOOLEAN Repeat; // True if periodic timer
++ ULONG TimerValue; // Timer value in milliseconds
++ ULONG cookie; // os specific object
++#ifdef RT2870
++ RT2870_TIMER_HANDLE handle;
++ void *pAd;
++#endif // RT2870 //
++} RALINK_TIMER_STRUCT, *PRALINK_TIMER_STRUCT;
++
++
++#ifdef RT2870
++
++typedef enum _RT2870_KERNEL_THREAD_STATUS_
++{
++ RT2870_THREAD_UNKNOWN = 0,
++ RT2870_THREAD_INITED = 1,
++ RT2870_THREAD_RUNNING = 2,
++ RT2870_THREAD_STOPED = 4,
++}RT2870_KERNEL_THREAD_STATUS;
++
++#define RT2870_THREAD_CAN_DO_INSERT (RT2870_THREAD_INITED |RT2870_THREAD_RUNNING)
++
++typedef struct _RT2870_TIMER_ENTRY_
++{
++ RALINK_TIMER_STRUCT *pRaTimer;
++ struct _RT2870_TIMER_ENTRY_ *pNext;
++}RT2870_TIMER_ENTRY;
++
++
++#define TIMER_QUEUE_SIZE_MAX 128
++typedef struct _RT2870_TIMER_QUEUE_
++{
++ unsigned int status;
++ //wait_queue_head_t timerWaitQ;
++ //atomic_t count;
++ UCHAR *pTimerQPoll;
++ RT2870_TIMER_ENTRY *pQPollFreeList;
++ RT2870_TIMER_ENTRY *pQHead;
++ RT2870_TIMER_ENTRY *pQTail;
++}RT2870_TIMER_QUEUE;
++#endif // RT2870 //
++
++
++//#define DBG 1
++
++//
++// MACRO for debugging information
++//
++
++#ifdef DBG
++extern ULONG RTDebugLevel;
++
++#define DBGPRINT_RAW(Level, Fmt) \
++{ \
++ if (Level <= RTDebugLevel) \
++ { \
++ printk Fmt; \
++ } \
++}
++
++#define DBGPRINT(Level, Fmt) DBGPRINT_RAW(Level, Fmt)
++
++
++#define DBGPRINT_ERR(Fmt) \
++{ \
++ printk("ERROR!!! "); \
++ printk Fmt; \
++}
++
++#define DBGPRINT_S(Status, Fmt) \
++{ \
++ printk Fmt; \
++}
++
++
++#else
++#define DBGPRINT(Level, Fmt)
++#define DBGPRINT_RAW(Level, Fmt)
++#define DBGPRINT_S(Status, Fmt)
++#define DBGPRINT_ERR(Fmt)
++#endif
++
++
++//
++// spin_lock enhanced for Nested spin lock
++//
++#define NdisAllocateSpinLock(__lock) \
++{ \
++ spin_lock_init((spinlock_t *)(__lock)); \
++}
++
++#define NdisFreeSpinLock(lock) \
++{ \
++}
++
++
++#define RTMP_SEM_LOCK(__lock) \
++{ \
++ spin_lock_bh((spinlock_t *)(__lock)); \
++}
++
++#define RTMP_SEM_UNLOCK(__lock) \
++{ \
++ spin_unlock_bh((spinlock_t *)(__lock)); \
++}
++
++#if 0 // sample, IRQ LOCK
++#define RTMP_IRQ_LOCK(__lock, __irqflags) \
++{ \
++ spin_lock_irqsave((spinlock_t *)__lock, __irqflags); \
++ pAd->irq_disabled |= 1; \
++}
++
++#define RTMP_IRQ_UNLOCK(__lock, __irqflag) \
++{ \
++ pAd->irq_disabled &= 0; \
++ spin_unlock_irqrestore((spinlock_t *)(__lock), ((unsigned long)__irqflag)); \
++}
++#else
++
++// sample, use semaphore lock to replace IRQ lock, 2007/11/15
++#define RTMP_IRQ_LOCK(__lock, __irqflags) \
++{ \
++ __irqflags = 0; \
++ spin_lock_bh((spinlock_t *)(__lock)); \
++ pAd->irq_disabled |= 1; \
++}
++
++#define RTMP_IRQ_UNLOCK(__lock, __irqflag) \
++{ \
++ pAd->irq_disabled &= 0; \
++ spin_unlock_bh((spinlock_t *)(__lock)); \
++}
++
++#define RTMP_INT_LOCK(__lock, __irqflags) \
++{ \
++ spin_lock_irqsave((spinlock_t *)__lock, __irqflags); \
++}
++
++#define RTMP_INT_UNLOCK(__lock, __irqflag) \
++{ \
++ spin_unlock_irqrestore((spinlock_t *)(__lock), ((unsigned long)__irqflag)); \
++}
++#endif
++
++
++
++#ifdef RT2870
++//Patch for ASIC turst read/write bug, needs to remove after metel fix
++#define RTMP_IO_READ32(_A, _R, _pV) \
++ RTUSBReadMACRegister(_A, _R, _pV)
++
++#define RTMP_IO_READ8(_A, _R, _pV) \
++{ \
++}
++
++#define RTMP_IO_WRITE32(_A, _R, _V) \
++ RTUSBWriteMACRegister(_A, _R, _V)
++
++
++#define RTMP_IO_WRITE8(_A, _R, _V) \
++{ \
++ USHORT _Val = _V; \
++ RTUSBSingleWrite(_A, _R, _Val); \
++}
++
++
++#define RTMP_IO_WRITE16(_A, _R, _V) \
++{ \
++ RTUSBSingleWrite(_A, _R, _V); \
++}
++#endif // RT2870 //
++
++#ifndef wait_event_interruptible_timeout
++#define __wait_event_interruptible_timeout(wq, condition, ret) \
++do { \
++ wait_queue_t __wait; \
++ init_waitqueue_entry(&__wait, current); \
++ add_wait_queue(&wq, &__wait); \
++ for (;;) { \
++ set_current_state(TASK_INTERRUPTIBLE); \
++ if (condition) \
++ break; \
++ if (!signal_pending(current)) { \
++ ret = schedule_timeout(ret); \
++ if (!ret) \
++ break; \
++ continue; \
++ } \
++ ret = -ERESTARTSYS; \
++ break; \
++ } \
++ current->state = TASK_RUNNING; \
++ remove_wait_queue(&wq, &__wait); \
++} while (0)
++
++#define wait_event_interruptible_timeout(wq, condition, timeout) \
++({ \
++ long __ret = timeout; \
++ if (!(condition)) \
++ __wait_event_interruptible_timeout(wq, condition, __ret); \
++ __ret; \
++})
++#endif
++#define ONE_TICK 1
++#define OS_WAIT(_time) \
++{ int _i; \
++ long _loop = ((_time)/(1000/OS_HZ)) > 0 ? ((_time)/(1000/OS_HZ)) : 1;\
++ wait_queue_head_t _wait; \
++ init_waitqueue_head(&_wait); \
++ for (_i=0; _i<(_loop); _i++) \
++ wait_event_interruptible_timeout(_wait, 0, ONE_TICK); }
++
++
++typedef void (*TIMER_FUNCTION)(unsigned long);
++
++#define COPY_MAC_ADDR(Addr1, Addr2) memcpy((Addr1), (Addr2), MAC_ADDR_LEN)
++
++#define MlmeAllocateMemory(_pAd, _ppVA) os_alloc_mem(_pAd, _ppVA, MGMT_DMA_BUFFER_SIZE)
++#define MlmeFreeMemory(_pAd, _pVA) os_free_mem(_pAd, _pVA)
++
++
++#ifdef RT2870
++#define BUILD_TIMER_FUNCTION(_func) \
++void linux_##_func(unsigned long data) \
++{ \
++ PRALINK_TIMER_STRUCT _pTimer = (PRALINK_TIMER_STRUCT)data; \
++ RT2870_TIMER_ENTRY *_pQNode; \
++ RTMP_ADAPTER *_pAd; \
++ \
++ _pTimer->handle = _func; \
++ _pAd = (RTMP_ADAPTER *)_pTimer->pAd; \
++ _pQNode = RT2870_TimerQ_Insert(_pAd, _pTimer); \
++ if ((_pQNode == NULL) && (_pAd->TimerQ.status & RT2870_THREAD_CAN_DO_INSERT)) \
++ RTMP_OS_Add_Timer(&_pTimer->TimerObj, HZ); \
++}
++#endif // RT2870 //
++
++
++#define DECLARE_TIMER_FUNCTION(_func) \
++void linux_##_func(unsigned long data)
++
++#define GET_TIMER_FUNCTION(_func) \
++ linux_##_func
++
++DECLARE_TIMER_FUNCTION(MlmePeriodicExec);
++DECLARE_TIMER_FUNCTION(MlmeRssiReportExec);
++DECLARE_TIMER_FUNCTION(AsicRxAntEvalTimeout);
++DECLARE_TIMER_FUNCTION(APSDPeriodicExec);
++DECLARE_TIMER_FUNCTION(AsicRfTuningExec);
++#ifdef RT2870
++DECLARE_TIMER_FUNCTION(BeaconUpdateExec);
++#endif // RT2870 //
++
++
++#ifdef CONFIG_STA_SUPPORT
++DECLARE_TIMER_FUNCTION(BeaconTimeout);
++DECLARE_TIMER_FUNCTION(ScanTimeout);
++DECLARE_TIMER_FUNCTION(AuthTimeout);
++DECLARE_TIMER_FUNCTION(AssocTimeout);
++DECLARE_TIMER_FUNCTION(ReassocTimeout);
++DECLARE_TIMER_FUNCTION(DisassocTimeout);
++DECLARE_TIMER_FUNCTION(LinkDownExec);
++#ifdef LEAP_SUPPORT
++DECLARE_TIMER_FUNCTION(LeapAuthTimeout);
++#endif
++DECLARE_TIMER_FUNCTION(StaQuickResponeForRateUpExec);
++DECLARE_TIMER_FUNCTION(WpaDisassocApAndBlockAssoc);
++DECLARE_TIMER_FUNCTION(PsPollWakeExec);
++DECLARE_TIMER_FUNCTION(RadioOnExec);
++
++#ifdef QOS_DLS_SUPPORT
++DECLARE_TIMER_FUNCTION(DlsTimeoutAction);
++#endif // QOS_DLS_SUPPORT //
++#endif // CONFIG_STA_SUPPORT //
++
++void RTMP_GetCurrentSystemTime(LARGE_INTEGER *time);
++
++
++/*
++ * packet helper
++ * - convert internal rt packet to os packet or
++ * os packet to rt packet
++ */
++#define RTPKT_TO_OSPKT(_p) ((struct sk_buff *)(_p))
++#define OSPKT_TO_RTPKT(_p) ((PNDIS_PACKET)(_p))
++
++#define GET_OS_PKT_DATAPTR(_pkt) \
++ (RTPKT_TO_OSPKT(_pkt)->data)
++
++#define GET_OS_PKT_LEN(_pkt) \
++ (RTPKT_TO_OSPKT(_pkt)->len)
++
++#define GET_OS_PKT_DATATAIL(_pkt) \
++ (RTPKT_TO_OSPKT(_pkt)->tail)
++
++#define GET_OS_PKT_HEAD(_pkt) \
++ (RTPKT_TO_OSPKT(_pkt)->head)
++
++#define GET_OS_PKT_END(_pkt) \
++ (RTPKT_TO_OSPKT(_pkt)->end)
++
++#define GET_OS_PKT_NETDEV(_pkt) \
++ (RTPKT_TO_OSPKT(_pkt)->dev)
++
++#define GET_OS_PKT_TYPE(_pkt) \
++ (RTPKT_TO_OSPKT(_pkt))
++
++#define GET_OS_PKT_NEXT(_pkt) \
++ (RTPKT_TO_OSPKT(_pkt)->next)
++
++
++#define OS_NTOHS(_Val) \
++ (ntohs(_Val))
++#define OS_HTONS(_Val) \
++ (htons(_Val))
++#define OS_NTOHL(_Val) \
++ (ntohl(_Val))
++#define OS_HTONL(_Val) \
++ (htonl(_Val))
++
++/* statistics counter */
++#define STATS_INC_RX_PACKETS(_pAd, _dev)
++#define STATS_INC_TX_PACKETS(_pAd, _dev)
++
++#define STATS_INC_RX_BYTESS(_pAd, _dev, len)
++#define STATS_INC_TX_BYTESS(_pAd, _dev, len)
++
++#define STATS_INC_RX_ERRORS(_pAd, _dev)
++#define STATS_INC_TX_ERRORS(_pAd, _dev)
++
++#define STATS_INC_RX_DROPPED(_pAd, _dev)
++#define STATS_INC_TX_DROPPED(_pAd, _dev)
++
++
++#define CB_OFF 10
++
++
++// check DDK NDIS_PACKET data structure and find out only MiniportReservedEx[0..7] can be used by our driver without
++// ambiguity. Fields after pPacket->MiniportReservedEx[8] may be used by other wrapper layer thus crashes the driver
++//
++//#define RTMP_GET_PACKET_MR(_p) (RTPKT_TO_OSPKT(_p))
++
++// User Priority
++#define RTMP_SET_PACKET_UP(_p, _prio) (RTPKT_TO_OSPKT(_p)->cb[CB_OFF+0] = _prio)
++#define RTMP_GET_PACKET_UP(_p) (RTPKT_TO_OSPKT(_p)->cb[CB_OFF+0])
++
++// Fragment #
++#define RTMP_SET_PACKET_FRAGMENTS(_p, _num) (RTPKT_TO_OSPKT(_p)->cb[CB_OFF+1] = _num)
++#define RTMP_GET_PACKET_FRAGMENTS(_p) (RTPKT_TO_OSPKT(_p)->cb[CB_OFF+1])
++
++// 0x0 ~0x7f: TX to AP's own BSS which has the specified AID. if AID>127, set bit 7 in RTMP_SET_PACKET_EMACTAB too.
++//(this value also as MAC(on-chip WCID) table index)
++// 0x80~0xff: TX to a WDS link. b0~6: WDS index
++#define RTMP_SET_PACKET_WCID(_p, _wdsidx) (RTPKT_TO_OSPKT(_p)->cb[CB_OFF+2] = _wdsidx)
++#define RTMP_GET_PACKET_WCID(_p) ((UCHAR)(RTPKT_TO_OSPKT(_p)->cb[CB_OFF+2]))
++
++// 0xff: PKTSRC_NDIS, others: local TX buffer index. This value affects how to a packet
++#define RTMP_SET_PACKET_SOURCE(_p, _pktsrc) (RTPKT_TO_OSPKT(_p)->cb[CB_OFF+3] = _pktsrc)
++#define RTMP_GET_PACKET_SOURCE(_p) (RTPKT_TO_OSPKT(_p)->cb[CB_OFF+3])
++
++// RTS/CTS-to-self protection method
++#define RTMP_SET_PACKET_RTS(_p, _num) (RTPKT_TO_OSPKT(_p)->cb[CB_OFF+4] = _num)
++#define RTMP_GET_PACKET_RTS(_p) (RTPKT_TO_OSPKT(_p)->cb[CB_OFF+4])
++// see RTMP_S(G)ET_PACKET_EMACTAB
++
++// TX rate index
++#define RTMP_SET_PACKET_TXRATE(_p, _rate) (RTPKT_TO_OSPKT(_p)->cb[CB_OFF+5] = _rate)
++#define RTMP_GET_PACKET_TXRATE(_p) (RTPKT_TO_OSPKT(_p)->cb[CB_OFF+5])
++
++// From which Interface
++#define RTMP_SET_PACKET_IF(_p, _ifdx) (RTPKT_TO_OSPKT(_p)->cb[CB_OFF+6] = _ifdx)
++#define RTMP_GET_PACKET_IF(_p) (RTPKT_TO_OSPKT(_p)->cb[CB_OFF+6])
++#define RTMP_SET_PACKET_NET_DEVICE_MBSSID(_p, _bss) RTMP_SET_PACKET_IF((_p), (_bss))
++#define RTMP_SET_PACKET_NET_DEVICE_WDS(_p, _bss) RTMP_SET_PACKET_IF((_p), ((_bss) + MIN_NET_DEVICE_FOR_WDS))
++#define RTMP_SET_PACKET_NET_DEVICE_APCLI(_p, _idx) RTMP_SET_PACKET_IF((_p), ((_idx) + MIN_NET_DEVICE_FOR_APCLI))
++#define RTMP_SET_PACKET_NET_DEVICE_MESH(_p, _idx) RTMP_SET_PACKET_IF((_p), ((_idx) + MIN_NET_DEVICE_FOR_MESH))
++#define RTMP_GET_PACKET_NET_DEVICE_MBSSID(_p) RTMP_GET_PACKET_IF((_p))
++#define RTMP_GET_PACKET_NET_DEVICE(_p) RTMP_GET_PACKET_IF((_p))
++
++#define RTMP_SET_PACKET_MOREDATA(_p, _morebit) (RTPKT_TO_OSPKT(_p)->cb[CB_OFF+7] = _morebit)
++#define RTMP_GET_PACKET_MOREDATA(_p) (RTPKT_TO_OSPKT(_p)->cb[CB_OFF+7])
++
++//#define RTMP_SET_PACKET_NET_DEVICE_MBSSID(_p, _bss) (RTPKT_TO_OSPKT(_p)->cb[8] = _bss)
++//#define RTMP_GET_PACKET_NET_DEVICE_MBSSID(_p) (RTPKT_TO_OSPKT(_p)->cb[8])
++
++
++
++
++#if 0
++//#define RTMP_SET_PACKET_DHCP(_p, _flg) (RTPKT_TO_OSPKT(_p)->cb[CB_OFF+11] = _flg)
++//#define RTMP_GET_PACKET_DHCP(_p) (RTPKT_TO_OSPKT(_p)->cb[CB_OFF+11])
++#else
++//
++// Sepcific Pakcet Type definition
++//
++#define RTMP_PACKET_SPECIFIC_CB_OFFSET 11
++
++#define RTMP_PACKET_SPECIFIC_DHCP 0x01
++#define RTMP_PACKET_SPECIFIC_EAPOL 0x02
++#define RTMP_PACKET_SPECIFIC_IPV4 0x04
++#define RTMP_PACKET_SPECIFIC_WAI 0x08
++#define RTMP_PACKET_SPECIFIC_VLAN 0x10
++#define RTMP_PACKET_SPECIFIC_LLCSNAP 0x20
++
++//Specific
++#define RTMP_SET_PACKET_SPECIFIC(_p, _flg) (RTPKT_TO_OSPKT(_p)->cb[CB_OFF+11] = _flg)
++
++//DHCP
++#define RTMP_SET_PACKET_DHCP(_p, _flg) \
++ do{ \
++ if (_flg) \
++ (RTPKT_TO_OSPKT(_p)->cb[CB_OFF+11]) |= (RTMP_PACKET_SPECIFIC_DHCP); \
++ else \
++ (RTPKT_TO_OSPKT(_p)->cb[CB_OFF+11]) &= (!RTMP_PACKET_SPECIFIC_DHCP); \
++ }while(0)
++#define RTMP_GET_PACKET_DHCP(_p) (RTPKT_TO_OSPKT(_p)->cb[CB_OFF+11] & RTMP_PACKET_SPECIFIC_DHCP)
++
++//EAPOL
++#define RTMP_SET_PACKET_EAPOL(_p, _flg) \
++ do{ \
++ if (_flg) \
++ (RTPKT_TO_OSPKT(_p)->cb[CB_OFF+11]) |= (RTMP_PACKET_SPECIFIC_EAPOL); \
++ else \
++ (RTPKT_TO_OSPKT(_p)->cb[CB_OFF+11]) &= (!RTMP_PACKET_SPECIFIC_EAPOL); \
++ }while(0)
++#define RTMP_GET_PACKET_EAPOL(_p) (RTPKT_TO_OSPKT(_p)->cb[CB_OFF+11] & RTMP_PACKET_SPECIFIC_EAPOL)
++
++//WAI
++#define RTMP_SET_PACKET_WAI(_p, _flg) \
++ do{ \
++ if (_flg) \
++ (RTPKT_TO_OSPKT(_p)->cb[CB_OFF+11]) |= (RTMP_PACKET_SPECIFIC_WAI); \
++ else \
++ (RTPKT_TO_OSPKT(_p)->cb[CB_OFF+11]) &= (!RTMP_PACKET_SPECIFIC_WAI); \
++ }while(0)
++#define RTMP_GET_PACKET_WAI(_p) (RTPKT_TO_OSPKT(_p)->cb[CB_OFF+11] & RTMP_PACKET_SPECIFIC_WAI)
++
++#define RTMP_GET_PACKET_LOWRATE(_p) (RTPKT_TO_OSPKT(_p)->cb[CB_OFF+11] & (RTMP_PACKET_SPECIFIC_EAPOL | RTMP_PACKET_SPECIFIC_DHCP | RTMP_PACKET_SPECIFIC_WAI))
++
++//VLAN
++#define RTMP_SET_PACKET_VLAN(_p, _flg) \
++ do{ \
++ if (_flg) \
++ (RTPKT_TO_OSPKT(_p)->cb[CB_OFF+11]) |= (RTMP_PACKET_SPECIFIC_VLAN); \
++ else \
++ (RTPKT_TO_OSPKT(_p)->cb[CB_OFF+11]) &= (!RTMP_PACKET_SPECIFIC_VLAN); \
++ }while(0)
++#define RTMP_GET_PACKET_VLAN(_p) (RTPKT_TO_OSPKT(_p)->cb[CB_OFF+11] & RTMP_PACKET_SPECIFIC_VLAN)
++
++//LLC/SNAP
++#define RTMP_SET_PACKET_LLCSNAP(_p, _flg) \
++ do{ \
++ if (_flg) \
++ (RTPKT_TO_OSPKT(_p)->cb[CB_OFF+11]) |= (RTMP_PACKET_SPECIFIC_LLCSNAP); \
++ else \
++ (RTPKT_TO_OSPKT(_p)->cb[CB_OFF+11]) &= (!RTMP_PACKET_SPECIFIC_LLCSNAP); \
++ }while(0)
++
++#define RTMP_GET_PACKET_LLCSNAP(_p) (RTPKT_TO_OSPKT(_p)->cb[CB_OFF+11] & RTMP_PACKET_SPECIFIC_LLCSNAP)
++
++// IP
++#define RTMP_SET_PACKET_IPV4(_p, _flg) \
++ do{ \
++ if (_flg) \
++ (RTPKT_TO_OSPKT(_p)->cb[CB_OFF+11]) |= (RTMP_PACKET_SPECIFIC_IPV4); \
++ else \
++ (RTPKT_TO_OSPKT(_p)->cb[CB_OFF+11]) &= (!RTMP_PACKET_SPECIFIC_IPV4); \
++ }while(0)
++
++#define RTMP_GET_PACKET_IPV4(_p) (RTPKT_TO_OSPKT(_p)->cb[CB_OFF+11] & RTMP_PACKET_SPECIFIC_IPV4)
++
++#endif
++
++
++// If this flag is set, it indicates that this EAPoL frame MUST be clear.
++#define RTMP_SET_PACKET_CLEAR_EAP_FRAME(_p, _flg) (RTPKT_TO_OSPKT(_p)->cb[CB_OFF+12] = _flg)
++#define RTMP_GET_PACKET_CLEAR_EAP_FRAME(_p) (RTPKT_TO_OSPKT(_p)->cb[CB_OFF+12])
++
++#define RTMP_SET_PACKET_5VT(_p, _flg) (RTPKT_TO_OSPKT(_p)->cb[CB_OFF+22] = _flg)
++#define RTMP_GET_PACKET_5VT(_p) (RTPKT_TO_OSPKT(_p)->cb[CB_OFF+22])
++
++
++#ifdef CONFIG_5VT_ENHANCE
++#define BRIDGE_TAG 0x35564252 // depends on 5VT define in br_input.c
++#endif
++
++
++#define NDIS_SET_PACKET_STATUS(_p, _status)
++
++
++#define GET_SG_LIST_FROM_PACKET(_p, _sc) \
++ rt_get_sg_list_from_packet(_p, _sc)
++
++
++#define NdisMoveMemory(Destination, Source, Length) memmove(Destination, Source, Length)
++#define NdisZeroMemory(Destination, Length) memset(Destination, 0, Length)
++#define NdisFillMemory(Destination, Length, Fill) memset(Destination, Fill, Length)
++#define NdisEqualMemory(Source1, Source2, Length) (!memcmp(Source1, Source2, Length))
++#define RTMPEqualMemory(Source1, Source2, Length) (!memcmp(Source1, Source2, Length))
++
++
++#define RTMP_INC_REF(_A) 0
++#define RTMP_DEC_REF(_A) 0
++#define RTMP_GET_REF(_A) 0
++
++
++
++/*
++ * ULONG
++ * RTMP_GetPhysicalAddressLow(
++ * IN NDIS_PHYSICAL_ADDRESS PhysicalAddress);
++ */
++#define RTMP_GetPhysicalAddressLow(PhysicalAddress) (PhysicalAddress)
++
++/*
++ * ULONG
++ * RTMP_GetPhysicalAddressHigh(
++ * IN NDIS_PHYSICAL_ADDRESS PhysicalAddress);
++ */
++#define RTMP_GetPhysicalAddressHigh(PhysicalAddress) (0)
++
++/*
++ * VOID
++ * RTMP_SetPhysicalAddressLow(
++ * IN NDIS_PHYSICAL_ADDRESS PhysicalAddress,
++ * IN ULONG Value);
++ */
++#define RTMP_SetPhysicalAddressLow(PhysicalAddress, Value) \
++ PhysicalAddress = Value;
++
++/*
++ * VOID
++ * RTMP_SetPhysicalAddressHigh(
++ * IN NDIS_PHYSICAL_ADDRESS PhysicalAddress,
++ * IN ULONG Value);
++ */
++#define RTMP_SetPhysicalAddressHigh(PhysicalAddress, Value)
++
++
++//CONTAINING_RECORD(pEntry, NDIS_PACKET, MiniportReservedEx);
++#define QUEUE_ENTRY_TO_PACKET(pEntry) \
++ (PNDIS_PACKET)(pEntry)
++
++#define PACKET_TO_QUEUE_ENTRY(pPacket) \
++ (PQUEUE_ENTRY)(pPacket)
++
++
++#ifndef CONTAINING_RECORD
++#define CONTAINING_RECORD(address, type, field) \
++((type *)((PCHAR)(address) - offsetof(type, field)))
++#endif
++
++
++#define RELEASE_NDIS_PACKET(_pAd, _pPacket, _Status) \
++{ \
++ RTMPFreeNdisPacket(_pAd, _pPacket); \
++}
++
++
++#define SWITCH_PhyAB(_pAA, _pBB) \
++{ \
++ ULONG AABasePaHigh; \
++ ULONG AABasePaLow; \
++ ULONG BBBasePaHigh; \
++ ULONG BBBasePaLow; \
++ BBBasePaHigh = RTMP_GetPhysicalAddressHigh(_pBB); \
++ BBBasePaLow = RTMP_GetPhysicalAddressLow(_pBB); \
++ AABasePaHigh = RTMP_GetPhysicalAddressHigh(_pAA); \
++ AABasePaLow = RTMP_GetPhysicalAddressLow(_pAA); \
++ RTMP_SetPhysicalAddressHigh(_pAA, BBBasePaHigh); \
++ RTMP_SetPhysicalAddressLow(_pAA, BBBasePaLow); \
++ RTMP_SetPhysicalAddressHigh(_pBB, AABasePaHigh); \
++ RTMP_SetPhysicalAddressLow(_pBB, AABasePaLow); \
++}
++
++
++#define NdisWriteErrorLogEntry(_a, _b, _c, _d)
++#define NdisMAllocateMapRegisters(_a, _b, _c, _d, _e) NDIS_STATUS_SUCCESS
++
++
++#define NdisAcquireSpinLock RTMP_SEM_LOCK
++#define NdisReleaseSpinLock RTMP_SEM_UNLOCK
++
++static inline void NdisGetSystemUpTime(ULONG *time)
++{
++ *time = jiffies;
++}
++
++//pPacket = CONTAINING_RECORD(pEntry, NDIS_PACKET, MiniportReservedEx);
++#define QUEUE_ENTRY_TO_PKT(pEntry) \
++ ((PNDIS_PACKET) (pEntry))
++
++int rt28xx_packet_xmit(struct sk_buff *skb);
++
++
++
++void rtmp_os_thread_init(PUCHAR pThreadName, PVOID pNotify);
++
++
+--- /dev/null
++++ b/drivers/staging/rt2870/rt_main_dev.c
+@@ -0,0 +1,1863 @@
++/*
++ *************************************************************************
++ * Ralink Tech Inc.
++ * 5F., No.36, Taiyuan St., Jhubei City,
++ * Hsinchu County 302,
++ * Taiwan, R.O.C.
++ *
++ * (c) Copyright 2002-2007, Ralink Technology, Inc.
++ *
++ * This program is free software; you can redistribute it and/or modify *
++ * it under the terms of the GNU General Public License as published by *
++ * the Free Software Foundation; either version 2 of the License, or *
++ * (at your option) any later version. *
++ * *
++ * This program is distributed in the hope that it will be useful, *
++ * but WITHOUT ANY WARRANTY; without even the implied warranty of *
++ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the *
++ * GNU General Public License for more details. *
++ * *
++ * You should have received a copy of the GNU General Public License *
++ * along with this program; if not, write to the *
++ * Free Software Foundation, Inc., *
++ * 59 Temple Place - Suite 330, Boston, MA 02111-1307, USA. *
++ * *
++ *************************************************************************
++
++ Module Name:
++ rt_main_dev.c
++
++ Abstract:
++ Create and register network interface.
++
++ Revision History:
++ Who When What
++ -------- ---------- ----------------------------------------------
++ Sample Mar/21/07 Merge RT2870 and RT2860 drivers.
++*/
++
++#include "rt_config.h"
++
++#define FORTY_MHZ_INTOLERANT_INTERVAL (60*1000) // 1 min
++
++#ifdef MULTIPLE_CARD_SUPPORT
++// record whether the card in the card list is used in the card file
++UINT8 MC_CardUsed[MAX_NUM_OF_MULTIPLE_CARD];
++// record used card mac address in the card list
++static UINT8 MC_CardMac[MAX_NUM_OF_MULTIPLE_CARD][6];
++#endif // MULTIPLE_CARD_SUPPORT //
++
++/*---------------------------------------------------------------------*/
++/* Private Variables Used */
++/*---------------------------------------------------------------------*/
++//static RALINK_TIMER_STRUCT PeriodicTimer;
++
++char *mac = ""; // default 00:00:00:00:00:00
++char *hostname = "";
++#if LINUX_VERSION_CODE <= KERNEL_VERSION(2,6,12)
++MODULE_PARM (mac, "s");
++#else
++module_param (mac, charp, 0);
++#endif
++MODULE_PARM_DESC (mac, "rt28xx: wireless mac addr");
++
++
++/*---------------------------------------------------------------------*/
++/* Prototypes of Functions Used */
++/*---------------------------------------------------------------------*/
++#ifdef DOT11_N_SUPPORT
++extern BOOLEAN ba_reordering_resource_init(PRTMP_ADAPTER pAd, int num);
++extern void ba_reordering_resource_release(PRTMP_ADAPTER pAd);
++#endif // DOT11_N_SUPPORT //
++extern NDIS_STATUS NICLoadRateSwitchingParams(IN PRTMP_ADAPTER pAd);
++
++
++// public function prototype
++INT __devinit rt28xx_probe(IN void *_dev_p, IN void *_dev_id_p,
++ IN UINT argc, OUT PRTMP_ADAPTER *ppAd);
++
++// private function prototype
++static int rt28xx_init(IN struct net_device *net_dev);
++INT rt28xx_send_packets(IN struct sk_buff *skb_p, IN struct net_device *net_dev);
++
++#if LINUX_VERSION_CODE <= 0x20402 // Red Hat 7.1
++struct net_device *alloc_netdev(
++ int sizeof_priv,
++ const char *mask,
++ void (*setup)(struct net_device *));
++#endif // LINUX_VERSION_CODE //
++
++static void CfgInitHook(PRTMP_ADAPTER pAd);
++//static BOOLEAN RT28XXAvailRANameAssign(IN CHAR *name_p);
++
++#ifdef CONFIG_STA_SUPPORT
++extern const struct iw_handler_def rt28xx_iw_handler_def;
++#endif // CONFIG_STA_SUPPORT //
++
++#if WIRELESS_EXT >= 12
++// This function will be called when query /proc
++struct iw_statistics *rt28xx_get_wireless_stats(
++ IN struct net_device *net_dev);
++#endif
++
++struct net_device_stats *RT28xx_get_ether_stats(
++ IN struct net_device *net_dev);
++
++/*
++========================================================================
++Routine Description:
++ Close raxx interface.
++
++Arguments:
++ *net_dev the raxx interface pointer
++
++Return Value:
++ 0 Open OK
++ otherwise Open Fail
++
++Note:
++ 1. if open fail, kernel will not call the close function.
++ 2. Free memory for
++ (1) Mlme Memory Handler: MlmeHalt()
++ (2) TX & RX: RTMPFreeTxRxRingMemory()
++ (3) BA Reordering: ba_reordering_resource_release()
++========================================================================
++*/
++int MainVirtualIF_close(IN struct net_device *net_dev)
++{
++ RTMP_ADAPTER *pAd = net_dev->priv;
++
++ // Sanity check for pAd
++ if (pAd == NULL)
++ return 0; // close ok
++
++ netif_carrier_off(pAd->net_dev);
++ netif_stop_queue(pAd->net_dev);
++
++
++
++ VIRTUAL_IF_DOWN(pAd);
++
++ RT_MOD_DEC_USE_COUNT();
++
++ return 0; // close ok
++}
++
++/*
++========================================================================
++Routine Description:
++ Open raxx interface.
++
++Arguments:
++ *net_dev the raxx interface pointer
++
++Return Value:
++ 0 Open OK
++ otherwise Open Fail
++
++Note:
++ 1. if open fail, kernel will not call the close function.
++ 2. Free memory for
++ (1) Mlme Memory Handler: MlmeHalt()
++ (2) TX & RX: RTMPFreeTxRxRingMemory()
++ (3) BA Reordering: ba_reordering_resource_release()
++========================================================================
++*/
++int MainVirtualIF_open(IN struct net_device *net_dev)
++{
++ RTMP_ADAPTER *pAd = net_dev->priv;
++
++ // Sanity check for pAd
++ if (pAd == NULL)
++ return 0; // close ok
++
++ if (VIRTUAL_IF_UP(pAd) != 0)
++ return -1;
++
++ // increase MODULE use count
++ RT_MOD_INC_USE_COUNT();
++
++ netif_start_queue(net_dev);
++ netif_carrier_on(net_dev);
++ netif_wake_queue(net_dev);
++
++ return 0;
++}
++
++/*
++========================================================================
++Routine Description:
++ Close raxx interface.
++
++Arguments:
++ *net_dev the raxx interface pointer
++
++Return Value:
++ 0 Open OK
++ otherwise Open Fail
++
++Note:
++ 1. if open fail, kernel will not call the close function.
++ 2. Free memory for
++ (1) Mlme Memory Handler: MlmeHalt()
++ (2) TX & RX: RTMPFreeTxRxRingMemory()
++ (3) BA Reordering: ba_reordering_resource_release()
++========================================================================
++*/
++int rt28xx_close(IN PNET_DEV dev)
++{
++ struct net_device * net_dev = (struct net_device *)dev;
++ RTMP_ADAPTER *pAd = net_dev->priv;
++ BOOLEAN Cancelled = FALSE;
++ UINT32 i = 0;
++#ifdef RT2870
++ DECLARE_WAIT_QUEUE_HEAD(unlink_wakeup);
++ DECLARE_WAITQUEUE(wait, current);
++
++ //RTMP_SET_FLAG(pAd, fRTMP_ADAPTER_REMOVE_IN_PROGRESS);
++#endif // RT2870 //
++
++
++ DBGPRINT(RT_DEBUG_TRACE, ("===> rt28xx_close\n"));
++
++ // Sanity check for pAd
++ if (pAd == NULL)
++ return 0; // close ok
++
++
++#ifdef CONFIG_STA_SUPPORT
++ IF_DEV_CONFIG_OPMODE_ON_STA(pAd)
++ {
++
++ // If dirver doesn't wake up firmware here,
++ // NICLoadFirmware will hang forever when interface is up again.
++ if (OPSTATUS_TEST_FLAG(pAd, fOP_STATUS_DOZE))
++ {
++ AsicForceWakeup(pAd, TRUE);
++ }
++
++#ifdef QOS_DLS_SUPPORT
++ // send DLS-TEAR_DOWN message,
++ if (pAd->CommonCfg.bDLSCapable)
++ {
++ UCHAR i;
++
++ // tear down local dls table entry
++ for (i=0; i<MAX_NUM_OF_INIT_DLS_ENTRY; i++)
++ {
++ if (pAd->StaCfg.DLSEntry[i].Valid && (pAd->StaCfg.DLSEntry[i].Status == DLS_FINISH))
++ {
++ RTMPSendDLSTearDownFrame(pAd, pAd->StaCfg.DLSEntry[i].MacAddr);
++ pAd->StaCfg.DLSEntry[i].Status = DLS_NONE;
++ pAd->StaCfg.DLSEntry[i].Valid = FALSE;
++ }
++ }
++
++ // tear down peer dls table entry
++ for (i=MAX_NUM_OF_INIT_DLS_ENTRY; i<MAX_NUM_OF_DLS_ENTRY; i++)
++ {
++ if (pAd->StaCfg.DLSEntry[i].Valid && (pAd->StaCfg.DLSEntry[i].Status == DLS_FINISH))
++ {
++ RTMPSendDLSTearDownFrame(pAd, pAd->StaCfg.DLSEntry[i].MacAddr);
++ pAd->StaCfg.DLSEntry[i].Status = DLS_NONE;
++ pAd->StaCfg.DLSEntry[i].Valid = FALSE;
++ }
++ }
++ RT28XX_MLME_HANDLER(pAd);
++ }
++#endif // QOS_DLS_SUPPORT //
++
++ if (INFRA_ON(pAd) &&
++ (!RTMP_TEST_FLAG(pAd, fRTMP_ADAPTER_NIC_NOT_EXIST)))
++ {
++ MLME_DISASSOC_REQ_STRUCT DisReq;
++ MLME_QUEUE_ELEM *MsgElem = (MLME_QUEUE_ELEM *) kmalloc(sizeof(MLME_QUEUE_ELEM), MEM_ALLOC_FLAG);
++
++ COPY_MAC_ADDR(DisReq.Addr, pAd->CommonCfg.Bssid);
++ DisReq.Reason = REASON_DEAUTH_STA_LEAVING;
++
++ MsgElem->Machine = ASSOC_STATE_MACHINE;
++ MsgElem->MsgType = MT2_MLME_DISASSOC_REQ;
++ MsgElem->MsgLen = sizeof(MLME_DISASSOC_REQ_STRUCT);
++ NdisMoveMemory(MsgElem->Msg, &DisReq, sizeof(MLME_DISASSOC_REQ_STRUCT));
++
++ // Prevent to connect AP again in STAMlmePeriodicExec
++ pAd->MlmeAux.AutoReconnectSsidLen= 32;
++ NdisZeroMemory(pAd->MlmeAux.AutoReconnectSsid, pAd->MlmeAux.AutoReconnectSsidLen);
++
++ pAd->Mlme.CntlMachine.CurrState = CNTL_WAIT_OID_DISASSOC;
++ MlmeDisassocReqAction(pAd, MsgElem);
++ kfree(MsgElem);
++
++ RTMPusecDelay(1000);
++ }
++
++#ifdef RT2870
++ RTMP_SET_FLAG(pAd, fRTMP_ADAPTER_REMOVE_IN_PROGRESS);
++#endif // RT2870 //
++
++#ifdef CCX_SUPPORT
++ RTMPCancelTimer(&pAd->StaCfg.LeapAuthTimer, &Cancelled);
++#endif
++
++ RTMPCancelTimer(&pAd->StaCfg.StaQuickResponeForRateUpTimer, &Cancelled);
++ RTMPCancelTimer(&pAd->StaCfg.WpaDisassocAndBlockAssocTimer, &Cancelled);
++
++#ifdef WPA_SUPPLICANT_SUPPORT
++#ifndef NATIVE_WPA_SUPPLICANT_SUPPORT
++ {
++ union iwreq_data wrqu;
++ // send wireless event to wpa_supplicant for infroming interface down.
++ memset(&wrqu, 0, sizeof(wrqu));
++ wrqu.data.flags = RT_INTERFACE_DOWN;
++ wireless_send_event(pAd->net_dev, IWEVCUSTOM, &wrqu, NULL);
++ }
++#endif // NATIVE_WPA_SUPPLICANT_SUPPORT //
++#endif // WPA_SUPPLICANT_SUPPORT //
++
++ MlmeRadioOff(pAd);
++ }
++#endif // CONFIG_STA_SUPPORT //
++
++ RTMP_SET_FLAG(pAd, fRTMP_ADAPTER_HALT_IN_PROGRESS);
++
++ for (i = 0 ; i < NUM_OF_TX_RING; i++)
++ {
++ while (pAd->DeQueueRunning[i] == TRUE)
++ {
++ printk("Waiting for TxQueue[%d] done..........\n", i);
++ RTMPusecDelay(1000);
++ }
++ }
++
++#ifdef RT2870
++ // ensure there are no more active urbs.
++ add_wait_queue (&unlink_wakeup, &wait);
++ pAd->wait = &unlink_wakeup;
++
++ // maybe wait for deletions to finish.
++ i = 0;
++ //while((i < 25) && atomic_read(&pAd->PendingRx) > 0)
++ while(i < 25)
++ {
++ unsigned long IrqFlags;
++
++ RTMP_IRQ_LOCK(&pAd->BulkInLock, IrqFlags);
++ if (pAd->PendingRx == 0)
++ {
++ RTMP_IRQ_UNLOCK(&pAd->BulkInLock, IrqFlags);
++ break;
++ }
++ RTMP_IRQ_UNLOCK(&pAd->BulkInLock, IrqFlags);
++
++#if LINUX_VERSION_CODE > KERNEL_VERSION(2,6,9)
++ msleep(UNLINK_TIMEOUT_MS); //Time in millisecond
++#else
++ RTMPusecDelay(UNLINK_TIMEOUT_MS*1000); //Time in microsecond
++#endif
++ i++;
++ }
++ pAd->wait = NULL;
++ remove_wait_queue (&unlink_wakeup, &wait);
++#endif // RT2870 //
++
++ //RTUSBCleanUpMLMEWaitQueue(pAd); /*not used in RT28xx*/
++
++
++#ifdef RT2870
++ // We need clear timerQ related structure before exits of the timer thread.
++ RT2870_TimerQ_Exit(pAd);
++ // Close kernel threads or tasklets
++ RT28xxThreadTerminate(pAd);
++#endif // RT2870 //
++
++ // Stop Mlme state machine
++ MlmeHalt(pAd);
++
++ // Close kernel threads or tasklets
++ kill_thread_task(pAd);
++
++
++#ifdef CONFIG_STA_SUPPORT
++ IF_DEV_CONFIG_OPMODE_ON_STA(pAd)
++ {
++ MacTableReset(pAd);
++ }
++#endif // CONFIG_STA_SUPPORT //
++
++
++ MeasureReqTabExit(pAd);
++ TpcReqTabExit(pAd);
++
++
++
++
++ // Free Ring or USB buffers
++ RTMPFreeTxRxRingMemory(pAd);
++
++ RTMP_CLEAR_FLAG(pAd, fRTMP_ADAPTER_HALT_IN_PROGRESS);
++
++#ifdef DOT11_N_SUPPORT
++ // Free BA reorder resource
++ ba_reordering_resource_release(pAd);
++#endif // DOT11_N_SUPPORT //
++
++#ifdef RT2870
++#ifdef INF_AMAZON_SE
++ if (pAd->UsbVendorReqBuf)
++ os_free_mem(pAd, pAd->UsbVendorReqBuf);
++#endif // INF_AMAZON_SE //
++#endif // RT2870 //
++
++ RTMP_CLEAR_FLAG(pAd, fRTMP_ADAPTER_START_UP);
++
++ return 0; // close ok
++} /* End of rt28xx_close */
++
++static int rt28xx_init(IN struct net_device *net_dev)
++{
++ PRTMP_ADAPTER pAd = (PRTMP_ADAPTER)net_dev->priv;
++ UINT index;
++ UCHAR TmpPhy;
++ NDIS_STATUS Status;
++ UINT32 MacCsr0 = 0;
++
++#ifdef RT2870
++#ifdef INF_AMAZON_SE
++ init_MUTEX(&(pAd->UsbVendorReq_semaphore));
++ os_alloc_mem(pAd, (PUCHAR)&pAd->UsbVendorReqBuf, MAX_PARAM_BUFFER_SIZE - 1);
++ if (pAd->UsbVendorReqBuf == NULL)
++ {
++ DBGPRINT(RT_DEBUG_ERROR, ("Allocate vendor request temp buffer failed!\n"));
++ goto err0;
++ }
++#endif // INF_AMAZON_SE //
++#endif // RT2870 //
++
++#ifdef DOT11_N_SUPPORT
++ // Allocate BA Reordering memory
++ ba_reordering_resource_init(pAd, MAX_REORDERING_MPDU_NUM);
++#endif // DOT11_N_SUPPORT //
++
++ // Make sure MAC gets ready.
++ index = 0;
++ do
++ {
++ RTMP_IO_READ32(pAd, MAC_CSR0, &MacCsr0);
++ pAd->MACVersion = MacCsr0;
++
++ if ((pAd->MACVersion != 0x00) && (pAd->MACVersion != 0xFFFFFFFF))
++ break;
++
++ RTMPusecDelay(10);
++ } while (index++ < 100);
++
++ DBGPRINT(RT_DEBUG_TRACE, ("MAC_CSR0 [ Ver:Rev=0x%08x]\n", pAd->MACVersion));
++
++ // Disable DMA
++ RT28XXDMADisable(pAd);
++
++
++ // Load 8051 firmware
++ Status = NICLoadFirmware(pAd);
++ if (Status != NDIS_STATUS_SUCCESS)
++ {
++ DBGPRINT_ERR(("NICLoadFirmware failed, Status[=0x%08x]\n", Status));
++ goto err1;
++ }
++
++ NICLoadRateSwitchingParams(pAd);
++
++ // Disable interrupts here which is as soon as possible
++ // This statement should never be true. We might consider to remove it later
++
++ Status = RTMPAllocTxRxRingMemory(pAd);
++ if (Status != NDIS_STATUS_SUCCESS)
++ {
++ DBGPRINT_ERR(("RTMPAllocDMAMemory failed, Status[=0x%08x]\n", Status));
++ goto err1;
++ }
++
++ RTMP_SET_FLAG(pAd, fRTMP_ADAPTER_INTERRUPT_IN_USE);
++
++ // initialize MLME
++ //
++
++ Status = MlmeInit(pAd);
++ if (Status != NDIS_STATUS_SUCCESS)
++ {
++ DBGPRINT_ERR(("MlmeInit failed, Status[=0x%08x]\n", Status));
++ goto err2;
++ }
++
++ // Initialize pAd->StaCfg, pAd->ApCfg, pAd->CommonCfg to manufacture default
++ //
++ UserCfgInit(pAd);
++
++#ifdef RT2870
++ // We need init timerQ related structure before create the timer thread.
++ RT2870_TimerQ_Init(pAd);
++#endif // RT2870 //
++
++ RT28XX_TASK_THREAD_INIT(pAd, Status);
++ if (Status != NDIS_STATUS_SUCCESS)
++ goto err1;
++
++// COPY_MAC_ADDR(pAd->ApCfg.MBSSID[apidx].Bssid, netif->hwaddr);
++// pAd->bForcePrintTX = TRUE;
++
++ CfgInitHook(pAd);
++
++
++#ifdef BLOCK_NET_IF
++ initblockQueueTab(pAd);
++#endif // BLOCK_NET_IF //
++
++#ifdef CONFIG_STA_SUPPORT
++ IF_DEV_CONFIG_OPMODE_ON_STA(pAd)
++ NdisAllocateSpinLock(&pAd->MacTabLock);
++#endif // CONFIG_STA_SUPPORT //
++
++ MeasureReqTabInit(pAd);
++ TpcReqTabInit(pAd);
++
++ //
++ // Init the hardware, we need to init asic before read registry, otherwise mac register will be reset
++ //
++ Status = NICInitializeAdapter(pAd, TRUE);
++ if (Status != NDIS_STATUS_SUCCESS)
++ {
++ DBGPRINT_ERR(("NICInitializeAdapter failed, Status[=0x%08x]\n", Status));
++ if (Status != NDIS_STATUS_SUCCESS)
++ goto err3;
++ }
++
++ // Read parameters from Config File
++ Status = RTMPReadParametersHook(pAd);
++
++ printk("1. Phy Mode = %d\n", pAd->CommonCfg.PhyMode);
++ if (Status != NDIS_STATUS_SUCCESS)
++ {
++ DBGPRINT_ERR(("NICReadRegParameters failed, Status[=0x%08x]\n",Status));
++ goto err4;
++ }
++
++#ifdef RT2870
++ pAd->CommonCfg.bMultipleIRP = FALSE;
++
++ if (pAd->CommonCfg.bMultipleIRP)
++ pAd->CommonCfg.NumOfBulkInIRP = RX_RING_SIZE;
++ else
++ pAd->CommonCfg.NumOfBulkInIRP = 1;
++#endif // RT2870 //
++
++
++ //Init Ba Capability parameters.
++// RT28XX_BA_INIT(pAd);
++#ifdef DOT11_N_SUPPORT
++ pAd->CommonCfg.DesiredHtPhy.MpduDensity = (UCHAR)pAd->CommonCfg.BACapability.field.MpduDensity;
++ pAd->CommonCfg.DesiredHtPhy.AmsduEnable = (USHORT)pAd->CommonCfg.BACapability.field.AmsduEnable;
++ pAd->CommonCfg.DesiredHtPhy.AmsduSize = (USHORT)pAd->CommonCfg.BACapability.field.AmsduSize;
++ pAd->CommonCfg.DesiredHtPhy.MimoPs = (USHORT)pAd->CommonCfg.BACapability.field.MMPSmode;
++ // UPdata to HT IE
++ pAd->CommonCfg.HtCapability.HtCapInfo.MimoPs = (USHORT)pAd->CommonCfg.BACapability.field.MMPSmode;
++ pAd->CommonCfg.HtCapability.HtCapInfo.AMsduSize = (USHORT)pAd->CommonCfg.BACapability.field.AmsduSize;
++ pAd->CommonCfg.HtCapability.HtCapParm.MpduDensity = (UCHAR)pAd->CommonCfg.BACapability.field.MpduDensity;
++#endif // DOT11_N_SUPPORT //
++
++ // after reading Registry, we now know if in AP mode or STA mode
++
++ // Load 8051 firmware; crash when FW image not existent
++ // Status = NICLoadFirmware(pAd);
++ // if (Status != NDIS_STATUS_SUCCESS)
++ // break;
++
++ printk("2. Phy Mode = %d\n", pAd->CommonCfg.PhyMode);
++
++ // We should read EEPROM for all cases. rt2860b
++ NICReadEEPROMParameters(pAd, mac);
++#ifdef CONFIG_STA_SUPPORT
++#endif // CONFIG_STA_SUPPORT //
++
++ printk("3. Phy Mode = %d\n", pAd->CommonCfg.PhyMode);
++
++ NICInitAsicFromEEPROM(pAd); //rt2860b
++
++ // Set PHY to appropriate mode
++ TmpPhy = pAd->CommonCfg.PhyMode;
++ pAd->CommonCfg.PhyMode = 0xff;
++ RTMPSetPhyMode(pAd, TmpPhy);
++#ifdef DOT11_N_SUPPORT
++ SetCommonHT(pAd);
++#endif // DOT11_N_SUPPORT //
++
++ // No valid channels.
++ if (pAd->ChannelListNum == 0)
++ {
++ printk("Wrong configuration. No valid channel found. Check \"ContryCode\" and \"ChannelGeography\" setting.\n");
++ goto err4;
++ }
++
++#ifdef DOT11_N_SUPPORT
++ printk("MCS Set = %02x %02x %02x %02x %02x\n", pAd->CommonCfg.HtCapability.MCSSet[0],
++ pAd->CommonCfg.HtCapability.MCSSet[1], pAd->CommonCfg.HtCapability.MCSSet[2],
++ pAd->CommonCfg.HtCapability.MCSSet[3], pAd->CommonCfg.HtCapability.MCSSet[4]);
++#endif // DOT11_N_SUPPORT //
++
++#ifdef RT2870
++ //Init RT30xx RFRegisters after read RFIC type from EEPROM
++ NICInitRT30xxRFRegisters(pAd);
++#endif // RT2870 //
++
++#if 0
++ // Patch cardbus controller if EEPROM said so.
++ if (pAd->bTest1 == FALSE)
++ RTMPPatchCardBus(pAd);
++#endif
++
++
++// APInitialize(pAd);
++
++#ifdef IKANOS_VX_1X0
++ VR_IKANOS_FP_Init(pAd->ApCfg.BssidNum, pAd->PermanentAddress);
++#endif // IKANOS_VX_1X0 //
++
++ //
++ // Initialize RF register to default value
++ //
++ AsicSwitchChannel(pAd, pAd->CommonCfg.Channel, FALSE);
++ AsicLockChannel(pAd, pAd->CommonCfg.Channel);
++
++ // 8051 firmware require the signal during booting time.
++ AsicSendCommandToMcu(pAd, 0x72, 0xFF, 0x00, 0x00);
++
++ if (pAd && (Status != NDIS_STATUS_SUCCESS))
++ {
++ //
++ // Undo everything if it failed
++ //
++ if (RTMP_TEST_FLAG(pAd, fRTMP_ADAPTER_INTERRUPT_IN_USE))
++ {
++// NdisMDeregisterInterrupt(&pAd->Interrupt);
++ RTMP_CLEAR_FLAG(pAd, fRTMP_ADAPTER_INTERRUPT_IN_USE);
++ }
++// RTMPFreeAdapter(pAd); // we will free it in disconnect()
++ }
++ else if (pAd)
++ {
++ // Microsoft HCT require driver send a disconnect event after driver initialization.
++ OPSTATUS_CLEAR_FLAG(pAd, fOP_STATUS_MEDIA_STATE_CONNECTED);
++// pAd->IndicateMediaState = NdisMediaStateDisconnected;
++ RTMP_SET_FLAG(pAd, fRTMP_ADAPTER_MEDIA_STATE_CHANGE);
++
++ DBGPRINT(RT_DEBUG_TRACE, ("NDIS_STATUS_MEDIA_DISCONNECT Event B!\n"));
++
++
++#ifdef RT2870
++ RTMP_CLEAR_FLAG(pAd, fRTMP_ADAPTER_RESET_IN_PROGRESS);
++ RTMP_CLEAR_FLAG(pAd, fRTMP_ADAPTER_REMOVE_IN_PROGRESS);
++
++ //
++ // Support multiple BulkIn IRP,
++ // the value on pAd->CommonCfg.NumOfBulkInIRP may be large than 1.
++ //
++ for(index=0; index<pAd->CommonCfg.NumOfBulkInIRP; index++)
++ {
++ RTUSBBulkReceive(pAd);
++ DBGPRINT(RT_DEBUG_TRACE, ("RTUSBBulkReceive!\n" ));
++ }
++#endif // RT2870 //
++ }// end of else
++
++
++ DBGPRINT_S(Status, ("<==== RTMPInitialize, Status=%x\n", Status));
++
++ return TRUE;
++
++
++err4:
++err3:
++ MlmeHalt(pAd);
++err2:
++ RTMPFreeTxRxRingMemory(pAd);
++// RTMPFreeAdapter(pAd);
++err1:
++
++#ifdef DOT11_N_SUPPORT
++ os_free_mem(pAd, pAd->mpdu_blk_pool.mem); // free BA pool
++#endif // DOT11_N_SUPPORT //
++ RT28XX_IRQ_RELEASE(net_dev);
++
++ // shall not set priv to NULL here because the priv didn't been free yet.
++ //net_dev->priv = 0;
++#ifdef INF_AMAZON_SE
++err0:
++#endif // INF_AMAZON_SE //
++ printk("!!! %s Initialized fail !!!\n", RT28xx_CHIP_NAME);
++ return FALSE;
++} /* End of rt28xx_init */
++
++
++/*
++========================================================================
++Routine Description:
++ Open raxx interface.
++
++Arguments:
++ *net_dev the raxx interface pointer
++
++Return Value:
++ 0 Open OK
++ otherwise Open Fail
++
++Note:
++========================================================================
++*/
++int rt28xx_open(IN PNET_DEV dev)
++{
++ struct net_device * net_dev = (struct net_device *)dev;
++ PRTMP_ADAPTER pAd = (PRTMP_ADAPTER)net_dev->priv;
++ int retval = 0;
++ POS_COOKIE pObj;
++
++
++ // Sanity check for pAd
++ if (pAd == NULL)
++ {
++ /* if 1st open fail, pAd will be free;
++ So the net_dev->priv will be NULL in 2rd open */
++ return -1;
++ }
++
++#ifdef CONFIG_APSTA_MIXED_SUPPORT
++ if (pAd->OpMode == OPMODE_AP)
++ {
++ CW_MAX_IN_BITS = 6;
++ }
++ else if (pAd->OpMode == OPMODE_STA)
++ {
++ CW_MAX_IN_BITS = 10;
++ }
++
++#if WIRELESS_EXT >= 12
++ if (net_dev->priv_flags == INT_MAIN)
++ {
++ if (pAd->OpMode == OPMODE_AP)
++ net_dev->wireless_handlers = (struct iw_handler_def *) &rt28xx_ap_iw_handler_def;
++ else if (pAd->OpMode == OPMODE_STA)
++ net_dev->wireless_handlers = (struct iw_handler_def *) &rt28xx_iw_handler_def;
++ }
++#endif // WIRELESS_EXT >= 12 //
++#endif // CONFIG_APSTA_MIXED_SUPPORT //
++
++#ifdef CONFIG_STA_SUPPORT
++#endif // CONFIG_STA_SUPPORT //
++
++ // Init
++ pObj = (POS_COOKIE)pAd->OS_Cookie;
++
++ // reset Adapter flags
++ RTMP_CLEAR_FLAGS(pAd);
++
++ // Request interrupt service routine for PCI device
++ // register the interrupt routine with the os
++ RT28XX_IRQ_REQUEST(net_dev);
++
++
++ // Init BssTab & ChannelInfo tabbles for auto channel select.
++
++
++ // Chip & other init
++ if (rt28xx_init(net_dev) == FALSE)
++ goto err;
++
++#ifdef CONFIG_STA_SUPPORT
++ IF_DEV_CONFIG_OPMODE_ON_STA(pAd)
++ {
++ NdisZeroMemory(pAd->StaCfg.dev_name, 16);
++ NdisMoveMemory(pAd->StaCfg.dev_name, net_dev->name, strlen(net_dev->name));
++ }
++#endif // CONFIG_STA_SUPPORT //
++
++ // Set up the Mac address
++ NdisMoveMemory(net_dev->dev_addr, (void *) pAd->CurrentAddress, 6);
++
++ // Init IRQ parameters
++ RT28XX_IRQ_INIT(pAd);
++
++ // Various AP function init
++
++#ifdef CONFIG_STA_SUPPORT
++ IF_DEV_CONFIG_OPMODE_ON_STA(pAd)
++ {
++#ifdef WPA_SUPPLICANT_SUPPORT
++#ifndef NATIVE_WPA_SUPPLICANT_SUPPORT
++ {
++ union iwreq_data wrqu;
++ // send wireless event to wpa_supplicant for infroming interface down.
++ memset(&wrqu, 0, sizeof(wrqu));
++ wrqu.data.flags = RT_INTERFACE_UP;
++ wireless_send_event(pAd->net_dev, IWEVCUSTOM, &wrqu, NULL);
++ }
++#endif // NATIVE_WPA_SUPPLICANT_SUPPORT //
++#endif // WPA_SUPPLICANT_SUPPORT //
++
++ }
++#endif // CONFIG_STA_SUPPORT //
++
++ // Enable Interrupt
++ RT28XX_IRQ_ENABLE(pAd);
++
++ // Now Enable RxTx
++ RTMPEnableRxTx(pAd);
++ RTMP_SET_FLAG(pAd, fRTMP_ADAPTER_START_UP);
++
++ {
++ UINT32 reg = 0;
++ RTMP_IO_READ32(pAd, 0x1300, ®); // clear garbage interrupts
++ printk("0x1300 = %08x\n", reg);
++ }
++
++ {
++// u32 reg;
++// u8 byte;
++// u16 tmp;
++
++// RTMP_IO_READ32(pAd, XIFS_TIME_CFG, ®);
++
++// tmp = 0x0805;
++// reg = (reg & 0xffff0000) | tmp;
++// RTMP_IO_WRITE32(pAd, XIFS_TIME_CFG, reg);
++
++ }
++
++#if 0
++ /*
++ * debugging helper
++ * show the size of main table in Adapter structure
++ * MacTab -- 185K
++ * BATable -- 137K
++ * Total -- 385K !!!!! (5/26/2006)
++ */
++ printk("sizeof(pAd->MacTab) = %ld\n", sizeof(pAd->MacTab));
++ printk("sizeof(pAd->AccessControlList) = %ld\n", sizeof(pAd->AccessControlList));
++ printk("sizeof(pAd->ApCfg) = %ld\n", sizeof(pAd->ApCfg));
++ printk("sizeof(pAd->BATable) = %ld\n", sizeof(pAd->BATable));
++ BUG();
++#endif
++
++#ifdef CONFIG_STA_SUPPORT
++#endif // CONFIG_STA_SUPPORT //
++
++ return (retval);
++
++err:
++ return (-1);
++} /* End of rt28xx_open */
++
++
++/* Must not be called for mdev and apdev */
++static NDIS_STATUS rt_ieee80211_if_setup(struct net_device *dev, PRTMP_ADAPTER pAd)
++{
++ NDIS_STATUS Status;
++ INT i=0;
++ CHAR slot_name[IFNAMSIZ];
++ struct net_device *device;
++
++
++ //ether_setup(dev);
++ dev->hard_start_xmit = rt28xx_send_packets;
++
++#ifdef IKANOS_VX_1X0
++ dev->hard_start_xmit = IKANOS_DataFramesTx;
++#endif // IKANOS_VX_1X0 //
++
++// dev->set_multicast_list = ieee80211_set_multicast_list;
++// dev->change_mtu = ieee80211_change_mtu;
++#ifdef CONFIG_STA_SUPPORT
++#if WIRELESS_EXT >= 12
++ if (pAd->OpMode == OPMODE_STA)
++ {
++ dev->wireless_handlers = &rt28xx_iw_handler_def;
++ }
++#endif //WIRELESS_EXT >= 12
++#endif // CONFIG_STA_SUPPORT //
++
++#ifdef CONFIG_APSTA_MIXED_SUPPORT
++#if WIRELESS_EXT >= 12
++ if (pAd->OpMode == OPMODE_AP)
++ {
++ dev->wireless_handlers = &rt28xx_ap_iw_handler_def;
++ }
++#endif //WIRELESS_EXT >= 12
++#endif // CONFIG_APSTA_MIXED_SUPPORT //
++
++#if WIRELESS_EXT < 21
++ dev->get_wireless_stats = rt28xx_get_wireless_stats;
++#endif
++ dev->get_stats = RT28xx_get_ether_stats;
++ dev->open = MainVirtualIF_open; //rt28xx_open;
++ dev->stop = MainVirtualIF_close; //rt28xx_close;
++// dev->uninit = ieee80211_if_reinit;
++// dev->destructor = ieee80211_if_free;
++ dev->priv_flags = INT_MAIN;
++ dev->do_ioctl = rt28xx_ioctl;
++#if LINUX_VERSION_CODE >= KERNEL_VERSION(2,6,24)
++ dev->validate_addr = NULL;
++#endif
++ // find available device name
++ for (i = 0; i < 8; i++)
++ {
++#ifdef MULTIPLE_CARD_SUPPORT
++ if (pAd->MC_RowID >= 0)
++ sprintf(slot_name, "ra%02d_%d", pAd->MC_RowID, i);
++ else
++#endif // MULTIPLE_CARD_SUPPORT //
++ sprintf(slot_name, "ra%d", i);
++
++#if LINUX_VERSION_CODE >= KERNEL_VERSION(2,5,0)
++#if LINUX_VERSION_CODE >= KERNEL_VERSION(2,6,24)
++#if LINUX_VERSION_CODE >= KERNEL_VERSION(2,6,26)
++ device = dev_get_by_name(dev_net(dev), slot_name);
++#else
++ device = dev_get_by_name(dev->nd_net, slot_name);
++#endif
++#else
++ device = dev_get_by_name(slot_name);
++#endif
++ if (device != NULL) dev_put(device);
++#else
++ for (device = dev_base; device != NULL; device = device->next)
++ {
++ if (strncmp(device->name, slot_name, 4) == 0)
++ break;
++ }
++#endif
++ if(device == NULL)
++ break;
++ }
++
++ if(i == 8)
++ {
++ DBGPRINT(RT_DEBUG_ERROR, ("No available slot name\n"));
++ Status = NDIS_STATUS_FAILURE;
++ }
++ else
++ {
++#ifdef MULTIPLE_CARD_SUPPORT
++ if (pAd->MC_RowID >= 0)
++ sprintf(dev->name, "ra%02d_%d", pAd->MC_RowID, i);
++ else
++#endif // MULTIPLE_CARD_SUPPORT //
++ sprintf(dev->name, "ra%d", i);
++ Status = NDIS_STATUS_SUCCESS;
++ }
++
++ return Status;
++
++}
++
++
++#ifdef MULTIPLE_CARD_SUPPORT
++/*
++========================================================================
++Routine Description:
++ Get card profile path.
++
++Arguments:
++ pAd
++
++Return Value:
++ TRUE - Find a card profile
++ FALSE - use default profile
++
++Note:
++========================================================================
++*/
++extern INT RTMPGetKeyParameter(
++ IN PCHAR key,
++ OUT PCHAR dest,
++ IN INT destsize,
++ IN PCHAR buffer);
++
++BOOLEAN RTMP_CardInfoRead(
++ IN PRTMP_ADAPTER pAd)
++{
++#define MC_SELECT_CARDID 0 /* use CARD ID (0 ~ 31) to identify different cards */
++#define MC_SELECT_MAC 1 /* use CARD MAC to identify different cards */
++#define MC_SELECT_CARDTYPE 2 /* use CARD type (abgn or bgn) to identify different cards */
++
++#define LETTER_CASE_TRANSLATE(txt_p, card_id) \
++ { UINT32 _len; char _char; \
++ for(_len=0; _len<strlen(card_id); _len++) { \
++ _char = *(txt_p + _len); \
++ if (('A' <= _char) && (_char <= 'Z')) \
++ *(txt_p+_len) = 'a'+(_char-'A'); \
++ } }
++
++ struct file *srcf;
++ INT retval, orgfsuid, orgfsgid;
++ mm_segment_t orgfs;
++ CHAR *buffer, *tmpbuf, card_id_buf[30], RFIC_word[30];
++ BOOLEAN flg_match_ok = FALSE;
++ INT32 card_select_method;
++ INT32 card_free_id, card_nouse_id, card_same_mac_id, card_match_id;
++ EEPROM_ANTENNA_STRUC antenna;
++ USHORT addr01, addr23, addr45;
++ UINT8 mac[6];
++ UINT32 data, card_index;
++ UCHAR *start_ptr;
++
++
++ // init
++ buffer = kmalloc(MAX_INI_BUFFER_SIZE, MEM_ALLOC_FLAG);
++ if (buffer == NULL)
++ return FALSE;
++
++ tmpbuf = kmalloc(MAX_PARAM_BUFFER_SIZE, MEM_ALLOC_FLAG);
++ if(tmpbuf == NULL)
++ {
++ kfree(buffer);
++ return NDIS_STATUS_FAILURE;
++ }
++
++ orgfsuid = current->fsuid;
++ orgfsgid = current->fsgid;
++ current->fsuid = current->fsgid = 0;
++ orgfs = get_fs();
++ set_fs(KERNEL_DS);
++
++ // get RF IC type
++ RTMP_IO_READ32(pAd, E2PROM_CSR, &data);
++
++ if ((data & 0x30) == 0)
++ pAd->EEPROMAddressNum = 6; // 93C46
++ else if ((data & 0x30) == 0x10)
++ pAd->EEPROMAddressNum = 8; // 93C66
++ else
++ pAd->EEPROMAddressNum = 8; // 93C86
++
++ //antenna.word = RTMP_EEPROM_READ16(pAd, EEPROM_NIC1_OFFSET);
++ RT28xx_EEPROM_READ16(pAd, EEPROM_NIC1_OFFSET, antenna.word);
++
++ if ((antenna.field.RfIcType == RFIC_2850) ||
++ (antenna.field.RfIcType == RFIC_2750))
++ {
++ /* ABGN card */
++ strcpy(RFIC_word, "abgn");
++ }
++ else
++ {
++ /* BGN card */
++ strcpy(RFIC_word, "bgn");
++ }
++
++ // get MAC address
++ //addr01 = RTMP_EEPROM_READ16(pAd, 0x04);
++ //addr23 = RTMP_EEPROM_READ16(pAd, 0x06);
++ //addr45 = RTMP_EEPROM_READ16(pAd, 0x08);
++ RT28xx_EEPROM_READ16(pAd, 0x04, addr01);
++ RT28xx_EEPROM_READ16(pAd, 0x06, addr23);
++ RT28xx_EEPROM_READ16(pAd, 0x08, addr45);
++
++ mac[0] = (UCHAR)(addr01 & 0xff);
++ mac[1] = (UCHAR)(addr01 >> 8);
++ mac[2] = (UCHAR)(addr23 & 0xff);
++ mac[3] = (UCHAR)(addr23 >> 8);
++ mac[4] = (UCHAR)(addr45 & 0xff);
++ mac[5] = (UCHAR)(addr45 >> 8);
++
++ // open card information file
++ srcf = filp_open(CARD_INFO_PATH, O_RDONLY, 0);
++ if (IS_ERR(srcf))
++ {
++ /* card information file does not exist */
++ DBGPRINT(RT_DEBUG_TRACE,
++ ("--> Error %ld opening %s\n", -PTR_ERR(srcf), CARD_INFO_PATH));
++ return FALSE;
++ }
++
++ if (srcf->f_op && srcf->f_op->read)
++ {
++ /* card information file exists so reading the card information */
++ memset(buffer, 0x00, MAX_INI_BUFFER_SIZE);
++ retval = srcf->f_op->read(srcf, buffer, MAX_INI_BUFFER_SIZE, &srcf->f_pos);
++ if (retval < 0)
++ {
++ /* read fail */
++ DBGPRINT(RT_DEBUG_TRACE,
++ ("--> Read %s error %d\n", CARD_INFO_PATH, -retval));
++ }
++ else
++ {
++ /* get card selection method */
++ memset(tmpbuf, 0x00, MAX_PARAM_BUFFER_SIZE);
++ card_select_method = MC_SELECT_CARDTYPE; // default
++
++ if (RTMPGetKeyParameter("SELECT", tmpbuf, 256, buffer))
++ {
++ if (strcmp(tmpbuf, "CARDID") == 0)
++ card_select_method = MC_SELECT_CARDID;
++ else if (strcmp(tmpbuf, "MAC") == 0)
++ card_select_method = MC_SELECT_MAC;
++ else if (strcmp(tmpbuf, "CARDTYPE") == 0)
++ card_select_method = MC_SELECT_CARDTYPE;
++ }
++
++ DBGPRINT(RT_DEBUG_TRACE,
++ ("MC> Card Selection = %d\n", card_select_method));
++
++ // init
++ card_free_id = -1;
++ card_nouse_id = -1;
++ card_same_mac_id = -1;
++ card_match_id = -1;
++
++ // search current card information records
++ for(card_index=0;
++ card_index<MAX_NUM_OF_MULTIPLE_CARD;
++ card_index++)
++ {
++ if ((*(UINT32 *)&MC_CardMac[card_index][0] == 0) &&
++ (*(UINT16 *)&MC_CardMac[card_index][4] == 0))
++ {
++ // MAC is all-0 so the entry is available
++ MC_CardUsed[card_index] = 0;
++
++ if (card_free_id < 0)
++ card_free_id = card_index; // 1st free entry
++ }
++ else
++ {
++ if (memcmp(MC_CardMac[card_index], mac, 6) == 0)
++ {
++ // we find the entry with same MAC
++ if (card_same_mac_id < 0)
++ card_same_mac_id = card_index; // 1st same entry
++ }
++ else
++ {
++ // MAC is not all-0 but used flag == 0
++ if ((MC_CardUsed[card_index] == 0) &&
++ (card_nouse_id < 0))
++ {
++ card_nouse_id = card_index; // 1st available entry
++ }
++ }
++ }
++ }
++
++ DBGPRINT(RT_DEBUG_TRACE,
++ ("MC> Free = %d, Same = %d, NOUSE = %d\n",
++ card_free_id, card_same_mac_id, card_nouse_id));
++
++ if ((card_same_mac_id >= 0) &&
++ ((card_select_method == MC_SELECT_CARDID) ||
++ (card_select_method == MC_SELECT_CARDTYPE)))
++ {
++ // same MAC entry is found
++ card_match_id = card_same_mac_id;
++
++ if (card_select_method == MC_SELECT_CARDTYPE)
++ {
++ // for CARDTYPE
++ sprintf(card_id_buf, "%02dCARDTYPE%s",
++ card_match_id, RFIC_word);
++
++ if ((start_ptr=rtstrstruncasecmp(buffer, card_id_buf)) != NULL)
++ {
++ // we found the card ID
++ LETTER_CASE_TRANSLATE(start_ptr, card_id_buf);
++ }
++ }
++ }
++ else
++ {
++ // the card is 1st plug-in, try to find the match card profile
++ switch(card_select_method)
++ {
++ case MC_SELECT_CARDID: // CARDID
++ default:
++ if (card_free_id >= 0)
++ card_match_id = card_free_id;
++ else
++ card_match_id = card_nouse_id;
++ break;
++
++ case MC_SELECT_MAC: // MAC
++ sprintf(card_id_buf, "MAC%02x:%02x:%02x:%02x:%02x:%02x",
++ mac[0], mac[1], mac[2],
++ mac[3], mac[4], mac[5]);
++
++ /* try to find the key word in the card file */
++ if ((start_ptr=rtstrstruncasecmp(buffer, card_id_buf)) != NULL)
++ {
++ LETTER_CASE_TRANSLATE(start_ptr, card_id_buf);
++
++ /* get the row ID (2 ASCII characters) */
++ start_ptr -= 2;
++ card_id_buf[0] = *(start_ptr);
++ card_id_buf[1] = *(start_ptr+1);
++ card_id_buf[2] = 0x00;
++
++ card_match_id = simple_strtol(card_id_buf, 0, 10);
++ }
++ break;
++
++ case MC_SELECT_CARDTYPE: // CARDTYPE
++ card_nouse_id = -1;
++
++ for(card_index=0;
++ card_index<MAX_NUM_OF_MULTIPLE_CARD;
++ card_index++)
++ {
++ sprintf(card_id_buf, "%02dCARDTYPE%s",
++ card_index, RFIC_word);
++
++ if ((start_ptr=rtstrstruncasecmp(buffer,
++ card_id_buf)) != NULL)
++ {
++ LETTER_CASE_TRANSLATE(start_ptr, card_id_buf);
++
++ if (MC_CardUsed[card_index] == 0)
++ {
++ /* current the card profile is not used */
++ if ((*(UINT32 *)&MC_CardMac[card_index][0] == 0) &&
++ (*(UINT16 *)&MC_CardMac[card_index][4] == 0))
++ {
++ // find it and no previous card use it
++ card_match_id = card_index;
++ break;
++ }
++ else
++ {
++ // ever a card use it
++ if (card_nouse_id < 0)
++ card_nouse_id = card_index;
++ }
++ }
++ }
++ }
++
++ // if not find a free one, use the available one
++ if (card_match_id < 0)
++ card_match_id = card_nouse_id;
++ break;
++ }
++ }
++
++ if (card_match_id >= 0)
++ {
++ // make up search keyword
++ switch(card_select_method)
++ {
++ case MC_SELECT_CARDID: // CARDID
++ sprintf(card_id_buf, "%02dCARDID", card_match_id);
++ break;
++
++ case MC_SELECT_MAC: // MAC
++ sprintf(card_id_buf,
++ "%02dmac%02x:%02x:%02x:%02x:%02x:%02x",
++ card_match_id,
++ mac[0], mac[1], mac[2],
++ mac[3], mac[4], mac[5]);
++ break;
++
++ case MC_SELECT_CARDTYPE: // CARDTYPE
++ default:
++ sprintf(card_id_buf, "%02dcardtype%s",
++ card_match_id, RFIC_word);
++ break;
++ }
++
++ DBGPRINT(RT_DEBUG_TRACE, ("Search Keyword = %s\n", card_id_buf));
++
++ // read card file path
++ if (RTMPGetKeyParameter(card_id_buf, tmpbuf, 256, buffer))
++ {
++ if (strlen(tmpbuf) < sizeof(pAd->MC_FileName))
++ {
++ // backup card information
++ pAd->MC_RowID = card_match_id; /* base 0 */
++ MC_CardUsed[card_match_id] = 1;
++ memcpy(MC_CardMac[card_match_id], mac, sizeof(mac));
++
++ // backup card file path
++ NdisMoveMemory(pAd->MC_FileName, tmpbuf , strlen(tmpbuf));
++ pAd->MC_FileName[strlen(tmpbuf)] = '\0';
++ flg_match_ok = TRUE;
++
++ DBGPRINT(RT_DEBUG_TRACE,
++ ("Card Profile Name = %s\n", pAd->MC_FileName));
++ }
++ else
++ {
++ DBGPRINT(RT_DEBUG_ERROR,
++ ("Card Profile Name length too large!\n"));
++ }
++ }
++ else
++ {
++ DBGPRINT(RT_DEBUG_ERROR,
++ ("Can not find search key word in card.dat!\n"));
++ }
++
++ if ((flg_match_ok != TRUE) &&
++ (card_match_id < MAX_NUM_OF_MULTIPLE_CARD))
++ {
++ MC_CardUsed[card_match_id] = 0;
++ memset(MC_CardMac[card_match_id], 0, sizeof(mac));
++ }
++ } // if (card_match_id >= 0)
++ }
++ }
++
++ // close file
++ retval = filp_close(srcf, NULL);
++ set_fs(orgfs);
++ current->fsuid = orgfsuid;
++ current->fsgid = orgfsgid;
++ kfree(buffer);
++ kfree(tmpbuf);
++ return flg_match_ok;
++}
++#endif // MULTIPLE_CARD_SUPPORT //
++
++
++/*
++========================================================================
++Routine Description:
++ Probe RT28XX chipset.
++
++Arguments:
++ _dev_p Point to the PCI or USB device
++ _dev_id_p Point to the PCI or USB device ID
++
++Return Value:
++ 0 Probe OK
++ -ENODEV Probe Fail
++
++Note:
++========================================================================
++*/
++INT __devinit rt28xx_probe(
++ IN void *_dev_p,
++ IN void *_dev_id_p,
++ IN UINT argc,
++ OUT PRTMP_ADAPTER *ppAd)
++{
++ struct net_device *net_dev;
++ PRTMP_ADAPTER pAd = (PRTMP_ADAPTER) NULL;
++ INT status;
++ PVOID handle;
++#ifdef RT2870
++#if LINUX_VERSION_CODE < KERNEL_VERSION(2,5,0) /* kernel 2.4 series */
++ struct usb_device *dev_p = (struct usb_device *)_dev_p;
++#else
++ struct usb_interface *intf = (struct usb_interface *)_dev_p;
++ struct usb_device *dev_p = interface_to_usbdev(intf);
++
++ dev_p = usb_get_dev(dev_p);
++#endif // LINUX_VERSION_CODE //
++#endif // RT2870 //
++
++
++#ifdef CONFIG_STA_SUPPORT
++ DBGPRINT(RT_DEBUG_TRACE, ("STA Driver version-%s\n", STA_DRIVER_VERSION));
++#endif // CONFIG_STA_SUPPORT //
++
++ // Check chipset vendor/product ID
++// if (RT28XXChipsetCheck(_dev_p) == FALSE)
++// goto err_out;
++
++#if LINUX_VERSION_CODE <= 0x20402 // Red Hat 7.1
++ net_dev = alloc_netdev(sizeof(PRTMP_ADAPTER), "eth%d", ether_setup);
++#else
++ net_dev = alloc_etherdev(sizeof(PRTMP_ADAPTER));
++#endif
++ if (net_dev == NULL)
++ {
++ printk("alloc_netdev failed\n");
++
++#if LINUX_VERSION_CODE >= KERNEL_VERSION(2,5,0)
++#if LINUX_VERSION_CODE < KERNEL_VERSION(2,6,15)
++ module_put(THIS_MODULE);
++#endif //LINUX_VERSION_CODE < KERNEL_VERSION(2,6,15)
++#else
++ MOD_DEC_USE_COUNT;
++#endif
++ goto err_out;
++ }
++
++// sample
++// if (rt_ieee80211_if_setup(net_dev) != NDIS_STATUS_SUCCESS)
++// goto err_out;
++
++#if LINUX_VERSION_CODE < KERNEL_VERSION(2,6,24)
++ SET_MODULE_OWNER(net_dev);
++#endif
++
++ netif_stop_queue(net_dev);
++#ifdef NATIVE_WPA_SUPPLICANT_SUPPORT
++/* for supporting Network Manager */
++/* Set the sysfs physical device reference for the network logical device
++ * if set prior to registration will cause a symlink during initialization.
++ */
++#if (LINUX_VERSION_CODE >= KERNEL_VERSION(2,6,0))
++ SET_NETDEV_DEV(net_dev, &(dev_p->dev));
++#endif
++#endif // NATIVE_WPA_SUPPLICANT_SUPPORT //
++
++ // Allocate RTMP_ADAPTER miniport adapter structure
++ handle = kmalloc(sizeof(struct os_cookie), GFP_KERNEL);
++ RT28XX_HANDLE_DEV_ASSIGN(handle, dev_p);
++
++ status = RTMPAllocAdapterBlock(handle, &pAd);
++ if (status != NDIS_STATUS_SUCCESS)
++ goto err_out_free_netdev;
++
++ net_dev->priv = (PVOID)pAd;
++ pAd->net_dev = net_dev; // must be before RT28XXNetDevInit()
++
++ RT28XXNetDevInit(_dev_p, net_dev, pAd);
++
++#ifdef CONFIG_STA_SUPPORT
++ pAd->StaCfg.OriDevType = net_dev->type;
++#endif // CONFIG_STA_SUPPORT //
++
++ // Find and assign a free interface name, raxx
++// RT28XXAvailRANameAssign(net_dev->name);
++
++ // Post config
++#if LINUX_VERSION_CODE < KERNEL_VERSION(2,5,0)
++ if (RT28XXProbePostConfig(_dev_p, pAd, argc) == FALSE)
++ goto err_out_unmap;
++#else
++ if (RT28XXProbePostConfig(_dev_p, pAd, 0) == FALSE)
++ goto err_out_unmap;
++#endif // LINUX_VERSION_CODE //
++
++#ifdef CONFIG_STA_SUPPORT
++ pAd->OpMode = OPMODE_STA;
++#endif // CONFIG_STA_SUPPORT //
++
++
++#ifdef MULTIPLE_CARD_SUPPORT
++ // find its profile path
++ pAd->MC_RowID = -1; // use default profile path
++ RTMP_CardInfoRead(pAd);
++
++ if (pAd->MC_RowID == -1)
++#ifdef CONFIG_STA_SUPPORT
++ strcpy(pAd->MC_FileName, STA_PROFILE_PATH);
++#endif // CONFIG_STA_SUPPORT //
++
++ DBGPRINT(RT_DEBUG_TRACE,
++ ("MC> ROW = %d, PATH = %s\n", pAd->MC_RowID, pAd->MC_FileName));
++#endif // MULTIPLE_CARD_SUPPORT //
++
++ // sample move
++ if (rt_ieee80211_if_setup(net_dev, pAd) != NDIS_STATUS_SUCCESS)
++ goto err_out_unmap;
++
++ // Register this device
++ status = register_netdev(net_dev);
++ if (status)
++ goto err_out_unmap;
++
++ // Set driver data
++ RT28XX_DRVDATA_SET(_dev_p);
++
++
++
++ *ppAd = pAd;
++ return 0; // probe ok
++
++
++ /* --------------------------- ERROR HANDLE --------------------------- */
++err_out_unmap:
++ RTMPFreeAdapter(pAd);
++ RT28XX_UNMAP();
++
++err_out_free_netdev:
++#if LINUX_VERSION_CODE >= KERNEL_VERSION(2,5,0)
++ free_netdev(net_dev);
++#else
++ kfree(net_dev);
++#endif
++
++err_out:
++ RT28XX_PUT_DEVICE(dev_p);
++
++#if LINUX_VERSION_CODE < KERNEL_VERSION(2,5,0)
++ return (LONG)NULL;
++#else
++ return -ENODEV; /* probe fail */
++#endif // LINUX_VERSION_CODE //
++} /* End of rt28xx_probe */
++
++
++/*
++========================================================================
++Routine Description:
++ The entry point for Linux kernel sent packet to our driver.
++
++Arguments:
++ sk_buff *skb the pointer refer to a sk_buffer.
++
++Return Value:
++ 0
++
++Note:
++ This function is the entry point of Tx Path for Os delivery packet to
++ our driver. You only can put OS-depened & STA/AP common handle procedures
++ in here.
++========================================================================
++*/
++int rt28xx_packet_xmit(struct sk_buff *skb)
++{
++ struct net_device *net_dev = skb->dev;
++ PRTMP_ADAPTER pAd = (PRTMP_ADAPTER) net_dev->priv;
++ int status = 0;
++ PNDIS_PACKET pPacket = (PNDIS_PACKET) skb;
++
++ /* RT2870STA does this in RTMPSendPackets() */
++#ifdef RALINK_ATE
++ if (ATE_ON(pAd))
++ {
++ RELEASE_NDIS_PACKET(pAd, pPacket, NDIS_STATUS_RESOURCES);
++ return 0;
++ }
++#endif // RALINK_ATE //
++
++#ifdef CONFIG_STA_SUPPORT
++ IF_DEV_CONFIG_OPMODE_ON_STA(pAd)
++ {
++ // Drop send request since we are in monitor mode
++ if (MONITOR_ON(pAd))
++ {
++ RELEASE_NDIS_PACKET(pAd, pPacket, NDIS_STATUS_FAILURE);
++ goto done;
++ }
++ }
++#endif // CONFIG_STA_SUPPORT //
++
++ // EapolStart size is 18
++ if (skb->len < 14)
++ {
++ //printk("bad packet size: %d\n", pkt->len);
++ hex_dump("bad packet", skb->data, skb->len);
++ RELEASE_NDIS_PACKET(pAd, pPacket, NDIS_STATUS_FAILURE);
++ goto done;
++ }
++
++#if 0
++// if ((pkt->data[0] & 0x1) == 0)
++ {
++ //hex_dump(__FUNCTION__, pkt->data, pkt->len);
++ printk("pPacket = %x\n", pPacket);
++ }
++#endif
++
++ RTMP_SET_PACKET_5VT(pPacket, 0);
++// MiniportMMRequest(pAd, pkt->data, pkt->len);
++#ifdef CONFIG_5VT_ENHANCE
++ if (*(int*)(skb->cb) == BRIDGE_TAG) {
++ RTMP_SET_PACKET_5VT(pPacket, 1);
++ }
++#endif
++
++
++
++#ifdef CONFIG_STA_SUPPORT
++ IF_DEV_CONFIG_OPMODE_ON_STA(pAd)
++ {
++
++ STASendPackets((NDIS_HANDLE)pAd, (PPNDIS_PACKET) &pPacket, 1);
++ }
++
++#endif // CONFIG_STA_SUPPORT //
++
++ status = 0;
++done:
++
++ return status;
++}
++
++
++/*
++========================================================================
++Routine Description:
++ Send a packet to WLAN.
++
++Arguments:
++ skb_p points to our adapter
++ dev_p which WLAN network interface
++
++Return Value:
++ 0: transmit successfully
++ otherwise: transmit fail
++
++Note:
++========================================================================
++*/
++INT rt28xx_send_packets(
++ IN struct sk_buff *skb_p,
++ IN struct net_device *net_dev)
++{
++ RTMP_ADAPTER *pAd = net_dev->priv;
++
++ if (!(net_dev->flags & IFF_UP))
++ {
++ RELEASE_NDIS_PACKET(pAd, (PNDIS_PACKET)skb_p, NDIS_STATUS_FAILURE);
++ return 0;
++ }
++
++ NdisZeroMemory((PUCHAR)&skb_p->cb[CB_OFF], 15);
++ RTMP_SET_PACKET_NET_DEVICE_MBSSID(skb_p, MAIN_MBSSID);
++
++ return rt28xx_packet_xmit(skb_p);
++} /* End of MBSS_VirtualIF_PacketSend */
++
++
++
++
++#if LINUX_VERSION_CODE <= 0x20402 // Red Hat 7.1
++//static struct net_device *alloc_netdev(int sizeof_priv, const char *mask, void (*setup)(struct net_device *)) //sample
++struct net_device *alloc_netdev(
++ int sizeof_priv,
++ const char *mask,
++ void (*setup)(struct net_device *))
++{
++ struct net_device *dev;
++ INT alloc_size;
++
++
++ /* ensure 32-byte alignment of the private area */
++ alloc_size = sizeof (*dev) + sizeof_priv + 31;
++
++ dev = (struct net_device *) kmalloc(alloc_size, GFP_KERNEL);
++ if (dev == NULL)
++ {
++ DBGPRINT(RT_DEBUG_ERROR,
++ ("alloc_netdev: Unable to allocate device memory.\n"));
++ return NULL;
++ }
++
++ memset(dev, 0, alloc_size);
++
++ if (sizeof_priv)
++ dev->priv = (void *) (((long)(dev + 1) + 31) & ~31);
++
++ setup(dev);
++ strcpy(dev->name, mask);
++
++ return dev;
++}
++#endif // LINUX_VERSION_CODE //
++
++
++void CfgInitHook(PRTMP_ADAPTER pAd)
++{
++ pAd->bBroadComHT = TRUE;
++} /* End of CfgInitHook */
++
++
++#if 0 // Not used now, should keep it in our source tree??
++/*
++========================================================================
++Routine Description:
++ Find and assign a free interface name (raxx).
++
++Arguments:
++ *name_p the interface name pointer
++
++Return Value:
++ TRUE OK
++ FALSE FAIL
++
++Note:
++========================================================================
++*/
++static BOOLEAN RT28XXAvailRANameAssign(
++ IN CHAR *name_p)
++{
++ CHAR slot_name[IFNAMSIZ];
++ struct net_device *device;
++ UINT32 if_id;
++
++
++ for(if_id=0; if_id<8; if_id++)
++ {
++ sprintf(slot_name, "ra%d", if_id);
++
++ for(device=dev_base; device!=NULL; device=device->next)
++ {
++ if (strncmp(device->name, slot_name, 4) == 0)
++ break;
++ }
++
++ if (device == NULL)
++ break;
++ }
++
++ if (if_id == 8)
++ {
++ DBGPRINT(RT_DEBUG_ERROR, ("No available slot name\n"));
++ return FALSE;
++ }
++
++ sprintf(name_p, "ra%d", if_id);
++ return TRUE;
++} /* End of RT28XXAvailRANameAssign */
++#endif
++
++#if WIRELESS_EXT >= 12
++// This function will be called when query /proc
++struct iw_statistics *rt28xx_get_wireless_stats(
++ IN struct net_device *net_dev)
++{
++ PRTMP_ADAPTER pAd = (PRTMP_ADAPTER) net_dev->priv;
++
++
++ DBGPRINT(RT_DEBUG_TRACE, ("rt28xx_get_wireless_stats --->\n"));
++
++ pAd->iw_stats.status = 0; // Status - device dependent for now
++
++ // link quality
++ pAd->iw_stats.qual.qual = ((pAd->Mlme.ChannelQuality * 12)/10 + 10);
++ if(pAd->iw_stats.qual.qual > 100)
++ pAd->iw_stats.qual.qual = 100;
++
++#ifdef CONFIG_STA_SUPPORT
++ if (pAd->OpMode == OPMODE_STA)
++ pAd->iw_stats.qual.level = RTMPMaxRssi(pAd, pAd->StaCfg.RssiSample.LastRssi0, pAd->StaCfg.RssiSample.LastRssi1, pAd->StaCfg.RssiSample.LastRssi2);
++#endif // CONFIG_STA_SUPPORT //
++
++ pAd->iw_stats.qual.noise = pAd->BbpWriteLatch[66]; // noise level (dBm)
++
++ pAd->iw_stats.qual.noise += 256 - 143;
++ pAd->iw_stats.qual.updated = 1; // Flags to know if updated
++#ifdef IW_QUAL_DBM
++ pAd->iw_stats.qual.updated |= IW_QUAL_DBM; // Level + Noise are dBm
++#endif // IW_QUAL_DBM //
++
++ pAd->iw_stats.discard.nwid = 0; // Rx : Wrong nwid/essid
++ pAd->iw_stats.miss.beacon = 0; // Missed beacons/superframe
++
++ DBGPRINT(RT_DEBUG_TRACE, ("<--- rt28xx_get_wireless_stats\n"));
++ return &pAd->iw_stats;
++} /* End of rt28xx_get_wireless_stats */
++#endif // WIRELESS_EXT //
++
++
++
++void tbtt_tasklet(unsigned long data)
++{
++#define MAX_TX_IN_TBTT (16)
++
++}
++
++INT rt28xx_ioctl(
++ IN struct net_device *net_dev,
++ IN OUT struct ifreq *rq,
++ IN INT cmd)
++{
++ VIRTUAL_ADAPTER *pVirtualAd = NULL;
++ RTMP_ADAPTER *pAd = NULL;
++ INT ret = 0;
++
++ if (net_dev->priv_flags == INT_MAIN)
++ {
++ pAd = net_dev->priv;
++ }
++ else
++ {
++ pVirtualAd = net_dev->priv;
++ pAd = pVirtualAd->RtmpDev->priv;
++ }
++
++ if (pAd == NULL)
++ {
++ /* if 1st open fail, pAd will be free;
++ So the net_dev->priv will be NULL in 2rd open */
++ return -ENETDOWN;
++ }
++
++
++#ifdef CONFIG_STA_SUPPORT
++ IF_DEV_CONFIG_OPMODE_ON_STA(pAd)
++ {
++ ret = rt28xx_sta_ioctl(net_dev, rq, cmd);
++ }
++#endif // CONFIG_STA_SUPPORT //
++
++ return ret;
++}
++
++/*
++ ========================================================================
++
++ Routine Description:
++ return ethernet statistics counter
++
++ Arguments:
++ net_dev Pointer to net_device
++
++ Return Value:
++ net_device_stats*
++
++ Note:
++
++ ========================================================================
++*/
++struct net_device_stats *RT28xx_get_ether_stats(
++ IN struct net_device *net_dev)
++{
++ RTMP_ADAPTER *pAd = NULL;
++
++ if (net_dev)
++ pAd = net_dev->priv;
++
++ if (pAd)
++ {
++
++ pAd->stats.rx_packets = pAd->WlanCounters.ReceivedFragmentCount.QuadPart;
++ pAd->stats.tx_packets = pAd->WlanCounters.TransmittedFragmentCount.QuadPart;
++
++ pAd->stats.rx_bytes = pAd->RalinkCounters.ReceivedByteCount;
++ pAd->stats.tx_bytes = pAd->RalinkCounters.TransmittedByteCount;
++
++ pAd->stats.rx_errors = pAd->Counters8023.RxErrors;
++ pAd->stats.tx_errors = pAd->Counters8023.TxErrors;
++
++ pAd->stats.rx_dropped = 0;
++ pAd->stats.tx_dropped = 0;
++
++ pAd->stats.multicast = pAd->WlanCounters.MulticastReceivedFrameCount.QuadPart; // multicast packets received
++ pAd->stats.collisions = pAd->Counters8023.OneCollision + pAd->Counters8023.MoreCollisions; // Collision packets
++
++ pAd->stats.rx_length_errors = 0;
++ pAd->stats.rx_over_errors = pAd->Counters8023.RxNoBuffer; // receiver ring buff overflow
++ pAd->stats.rx_crc_errors = 0;//pAd->WlanCounters.FCSErrorCount; // recved pkt with crc error
++ pAd->stats.rx_frame_errors = pAd->Counters8023.RcvAlignmentErrors; // recv'd frame alignment error
++ pAd->stats.rx_fifo_errors = pAd->Counters8023.RxNoBuffer; // recv'r fifo overrun
++ pAd->stats.rx_missed_errors = 0; // receiver missed packet
++
++ // detailed tx_errors
++ pAd->stats.tx_aborted_errors = 0;
++ pAd->stats.tx_carrier_errors = 0;
++ pAd->stats.tx_fifo_errors = 0;
++ pAd->stats.tx_heartbeat_errors = 0;
++ pAd->stats.tx_window_errors = 0;
++
++ // for cslip etc
++ pAd->stats.rx_compressed = 0;
++ pAd->stats.tx_compressed = 0;
++
++ return &pAd->stats;
++ }
++ else
++ return NULL;
++}
++
+--- /dev/null
++++ b/drivers/staging/rt2870/rtmp_ckipmic.h
+@@ -0,0 +1,113 @@
++/*
++ *************************************************************************
++ * Ralink Tech Inc.
++ * 5F., No.36, Taiyuan St., Jhubei City,
++ * Hsinchu County 302,
++ * Taiwan, R.O.C.
++ *
++ * (c) Copyright 2002-2007, Ralink Technology, Inc.
++ *
++ * This program is free software; you can redistribute it and/or modify *
++ * it under the terms of the GNU General Public License as published by *
++ * the Free Software Foundation; either version 2 of the License, or *
++ * (at your option) any later version. *
++ * *
++ * This program is distributed in the hope that it will be useful, *
++ * but WITHOUT ANY WARRANTY; without even the implied warranty of *
++ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the *
++ * GNU General Public License for more details. *
++ * *
++ * You should have received a copy of the GNU General Public License *
++ * along with this program; if not, write to the *
++ * Free Software Foundation, Inc., *
++ * 59 Temple Place - Suite 330, Boston, MA 02111-1307, USA. *
++ * *
++ *************************************************************************
++
++ Module Name:
++ rtmp_ckipmic.h
++
++ Abstract:
++
++ Revision History:
++ Who When What
++ -------- ---------- ----------------------------------------------
++ Name Date Modification logs
++*/
++#ifndef __RTMP_CKIPMIC_H__
++#define __RTMP_CKIPMIC_H__
++
++typedef struct _MIC_CONTEXT {
++ /* --- MMH context */
++ UCHAR CK[16]; /* the key */
++ UCHAR coefficient[16]; /* current aes counter mode coefficients */
++ ULONGLONG accum; /* accumulated mic, reduced to u32 in final() */
++ UINT position; /* current position (byte offset) in message */
++ UCHAR part[4]; /* for conversion of message to u32 for mmh */
++} MIC_CONTEXT, *PMIC_CONTEXT;
++
++VOID CKIP_key_permute(
++ OUT UCHAR *PK, /* output permuted key */
++ IN UCHAR *CK, /* input CKIP key */
++ IN UCHAR toDsFromDs, /* input toDs/FromDs bits */
++ IN UCHAR *piv); /* input pointer to IV */
++
++VOID RTMPCkipMicInit(
++ IN PMIC_CONTEXT pContext,
++ IN PUCHAR CK);
++
++VOID RTMPMicUpdate(
++ IN PMIC_CONTEXT pContext,
++ IN PUCHAR pOctets,
++ IN INT len);
++
++ULONG RTMPMicGetCoefficient(
++ IN PMIC_CONTEXT pContext);
++
++VOID xor_128(
++ IN PUCHAR a,
++ IN PUCHAR b,
++ OUT PUCHAR out);
++
++UCHAR RTMPCkipSbox(
++ IN UCHAR a);
++
++VOID xor_32(
++ IN PUCHAR a,
++ IN PUCHAR b,
++ OUT PUCHAR out);
++
++VOID next_key(
++ IN PUCHAR key,
++ IN INT round);
++
++VOID byte_sub(
++ IN PUCHAR in,
++ OUT PUCHAR out);
++
++VOID shift_row(
++ IN PUCHAR in,
++ OUT PUCHAR out);
++
++VOID mix_column(
++ IN PUCHAR in,
++ OUT PUCHAR out);
++
++VOID RTMPAesEncrypt(
++ IN PUCHAR key,
++ IN PUCHAR data,
++ IN PUCHAR ciphertext);
++
++VOID RTMPMicFinal(
++ IN PMIC_CONTEXT pContext,
++ OUT UCHAR digest[4]);
++
++VOID RTMPCkipInsertCMIC(
++ IN PRTMP_ADAPTER pAd,
++ OUT PUCHAR pMIC,
++ IN PUCHAR p80211hdr,
++ IN PNDIS_PACKET pPacket,
++ IN PCIPHER_KEY pKey,
++ IN PUCHAR mic_snap);
++
++#endif //__RTMP_CKIPMIC_H__
+--- /dev/null
++++ b/drivers/staging/rt2870/rtmp_def.h
+@@ -0,0 +1,1622 @@
++/*
++ *************************************************************************
++ * Ralink Tech Inc.
++ * 5F., No.36, Taiyuan St., Jhubei City,
++ * Hsinchu County 302,
++ * Taiwan, R.O.C.
++ *
++ * (c) Copyright 2002-2007, Ralink Technology, Inc.
++ *
++ * This program is free software; you can redistribute it and/or modify *
++ * it under the terms of the GNU General Public License as published by *
++ * the Free Software Foundation; either version 2 of the License, or *
++ * (at your option) any later version. *
++ * *
++ * This program is distributed in the hope that it will be useful, *
++ * but WITHOUT ANY WARRANTY; without even the implied warranty of *
++ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the *
++ * GNU General Public License for more details. *
++ * *
++ * You should have received a copy of the GNU General Public License *
++ * along with this program; if not, write to the *
++ * Free Software Foundation, Inc., *
++ * 59 Temple Place - Suite 330, Boston, MA 02111-1307, USA. *
++ * *
++ *************************************************************************
++
++ Module Name:
++ rtmp_def.h
++
++ Abstract:
++ Miniport related definition header
++
++ Revision History:
++ Who When What
++ -------- ---------- ----------------------------------------------
++ Paul Lin 08-01-2002 created
++ John Chang 08-05-2003 add definition for 11g & other drafts
++*/
++#ifndef __RTMP_DEF_H__
++#define __RTMP_DEF_H__
++
++#include "oid.h"
++
++//
++// Debug information verbosity: lower values indicate higher urgency
++//
++#define RT_DEBUG_OFF 0
++#define RT_DEBUG_ERROR 1
++#define RT_DEBUG_WARN 2
++#define RT_DEBUG_TRACE 3
++#define RT_DEBUG_INFO 4
++#define RT_DEBUG_LOUD 5
++
++#define NIC_TAG ((ULONG)'0682')
++#define NIC_DBG_STRING ("**RT28xx**")
++
++#ifdef SNMP_SUPPORT
++// for snmp
++// to get manufacturer OUI, kathy, 2008_0220
++#define ManufacturerOUI_LEN 3
++#define ManufacturerNAME ("Ralink Technology Company.")
++#define ResourceTypeIdName ("Ralink_ID")
++#endif
++
++
++//#define PACKED
++
++#define RALINK_2883_VERSION ((UINT32)0x28830300)
++#define RALINK_2880E_VERSION ((UINT32)0x28720200)
++#define RALINK_3070_VERSION ((UINT32)0x30700200)
++
++//
++// NDIS version in use by the NIC driver.
++// The high byte is the major version. The low byte is the minor version.
++//
++#ifdef NDIS51_MINIPORT
++#define NIC_DRIVER_VERSION 0x0501
++#else
++#define NIC_DRIVER_VERSION 0x0500
++#endif
++
++//
++// NDIS media type, current is ethernet, change if native wireless supported
++//
++#define NIC_MEDIA_TYPE NdisMedium802_3
++#define NIC_PCI_HDR_LENGTH 0xe2
++#define NIC_MAX_PACKET_SIZE 2304
++#define NIC_HEADER_SIZE 14
++#define MAX_MAP_REGISTERS_NEEDED 32
++#define MIN_MAP_REGISTERS_NEEDED 2 //Todo: should consider fragment issue.
++
++//
++// interface type, we use PCI
++//
++#define NIC_INTERFACE_TYPE NdisInterfacePci
++#define NIC_INTERRUPT_MODE NdisInterruptLevelSensitive
++
++//
++// buffer size passed in NdisMQueryAdapterResources
++// We should only need three adapter resources (IO, interrupt and memory),
++// Some devices get extra resources, so have room for 10 resources
++// UF_SIZE (sizeof(NDIS_RESOURCE_LIST) + (10*sizeof(CM_PARTIAL_RESOURCE_DESCRIPTOR)))
++
++
++#define NIC_RESOURCE_B//
++// IO space length
++//
++#define NIC_MAP_IOSPACE_LENGTH sizeof(CSR_STRUC)
++
++#define MAX_RX_PKT_LEN 1520
++
++//
++// Entry number for each DMA descriptor ring
++//
++
++
++#ifdef RT2870
++#define TX_RING_SIZE 8 // 1
++#define PRIO_RING_SIZE 8
++#define MGMT_RING_SIZE 32 // PRIO_RING_SIZE
++#define RX_RING_SIZE 8
++#define MAX_TX_PROCESS 4
++#define LOCAL_TXBUF_SIZE 2048
++#endif // RT2870 //
++
++#ifdef MULTIPLE_CARD_SUPPORT
++// MC: Multple Cards
++#define MAX_NUM_OF_MULTIPLE_CARD 32
++#endif // MULTIPLE_CARD_SUPPORT //
++
++#define MAX_RX_PROCESS 128 //64 //32
++#define NUM_OF_LOCAL_TXBUF 2
++#define TXD_SIZE 16
++#define TXWI_SIZE 16
++#define RXD_SIZE 16
++#define RXWI_SIZE 16
++// TXINFO_SIZE + TXWI_SIZE + 802.11 Header Size + AMSDU sub frame header
++#define TX_DMA_1ST_BUFFER_SIZE 96 // only the 1st physical buffer is pre-allocated
++#define MGMT_DMA_BUFFER_SIZE 1536 //2048
++#define RX_BUFFER_AGGRESIZE 3840 //3904 //3968 //4096 //2048 //4096
++#define RX_BUFFER_NORMSIZE 3840 //3904 //3968 //4096 //2048 //4096
++#define TX_BUFFER_NORMSIZE RX_BUFFER_NORMSIZE
++#define MAX_FRAME_SIZE 2346 // Maximum 802.11 frame size
++#define MAX_AGGREGATION_SIZE 3840 //3904 //3968 //4096
++#define MAX_NUM_OF_TUPLE_CACHE 2
++#define MAX_MCAST_LIST_SIZE 32
++#define MAX_LEN_OF_VENDOR_DESC 64
++//#define MAX_SIZE_OF_MCAST_PSQ (NUM_OF_LOCAL_TXBUF >> 2) // AP won't spend more than 1/4 of total buffers on M/BCAST PSQ
++#define MAX_SIZE_OF_MCAST_PSQ 32
++
++#define MAX_RX_PROCESS_CNT (RX_RING_SIZE)
++
++
++#define MAX_PACKETS_IN_QUEUE (512) //(512) // to pass WMM A5-WPAPSK
++#define MAX_PACKETS_IN_MCAST_PS_QUEUE 32
++#define MAX_PACKETS_IN_PS_QUEUE 128 //32
++#define WMM_NUM_OF_AC 4 /* AC0, AC1, AC2, and AC3 */
++
++
++
++// RxFilter
++#define STANORMAL 0x17f97
++#define APNORMAL 0x15f97
++//
++// RTMP_ADAPTER flags
++//
++#define fRTMP_ADAPTER_MAP_REGISTER 0x00000001
++#define fRTMP_ADAPTER_INTERRUPT_IN_USE 0x00000002
++#define fRTMP_ADAPTER_HARDWARE_ERROR 0x00000004
++#define fRTMP_ADAPTER_SCATTER_GATHER 0x00000008
++#define fRTMP_ADAPTER_SEND_PACKET_ERROR 0x00000010
++#define fRTMP_ADAPTER_MLME_RESET_IN_PROGRESS 0x00000020
++#define fRTMP_ADAPTER_HALT_IN_PROGRESS 0x00000040
++#define fRTMP_ADAPTER_RESET_IN_PROGRESS 0x00000080
++#define fRTMP_ADAPTER_NIC_NOT_EXIST 0x00000100
++#define fRTMP_ADAPTER_TX_RING_ALLOCATED 0x00000200
++#define fRTMP_ADAPTER_REMOVE_IN_PROGRESS 0x00000400
++#define fRTMP_ADAPTER_MIMORATE_INUSED 0x00000800
++#define fRTMP_ADAPTER_RX_RING_ALLOCATED 0x00001000
++#define fRTMP_ADAPTER_INTERRUPT_ACTIVE 0x00002000
++#define fRTMP_ADAPTER_BSS_SCAN_IN_PROGRESS 0x00004000
++#define fRTMP_ADAPTER_REASSOC_IN_PROGRESS 0x00008000
++#define fRTMP_ADAPTER_MEDIA_STATE_PENDING 0x00010000
++#define fRTMP_ADAPTER_RADIO_OFF 0x00020000
++#define fRTMP_ADAPTER_BULKOUT_RESET 0x00040000
++#define fRTMP_ADAPTER_BULKIN_RESET 0x00080000
++#define fRTMP_ADAPTER_RDG_ACTIVE 0x00100000
++#define fRTMP_ADAPTER_DYNAMIC_BE_TXOP_ACTIVE 0x00200000
++#define fRTMP_ADAPTER_SCAN_2040 0x04000000
++#define fRTMP_ADAPTER_RADIO_MEASUREMENT 0x08000000
++
++#define fRTMP_ADAPTER_START_UP 0x10000000 //Devive already initialized and enabled Tx/Rx.
++#define fRTMP_ADAPTER_MEDIA_STATE_CHANGE 0x20000000
++#define fRTMP_ADAPTER_IDLE_RADIO_OFF 0x40000000
++
++// Lock bit for accessing different ring buffers
++//#define fRTMP_ADAPTER_TX_RING_BUSY 0x80000000
++//#define fRTMP_ADAPTER_MGMT_RING_BUSY 0x40000000
++//#define fRTMP_ADAPTER_ATIM_RING_BUSY 0x20000000
++//#define fRTMP_ADAPTER_RX_RING_BUSY 0x10000000
++
++// Lock bit for accessing different queue
++//#define fRTMP_ADAPTER_TX_QUEUE_BUSY 0x08000000
++//#define fRTMP_ADAPTER_MGMT_QUEUE_BUSY 0x04000000
++
++//
++// STA operation status flags
++//
++#define fOP_STATUS_INFRA_ON 0x00000001
++#define fOP_STATUS_ADHOC_ON 0x00000002
++#define fOP_STATUS_BG_PROTECTION_INUSED 0x00000004
++#define fOP_STATUS_SHORT_SLOT_INUSED 0x00000008
++#define fOP_STATUS_SHORT_PREAMBLE_INUSED 0x00000010
++#define fOP_STATUS_RECEIVE_DTIM 0x00000020
++//#define fOP_STATUS_TX_RATE_SWITCH_ENABLED 0x00000040
++#define fOP_STATUS_MEDIA_STATE_CONNECTED 0x00000080
++#define fOP_STATUS_WMM_INUSED 0x00000100
++#define fOP_STATUS_AGGREGATION_INUSED 0x00000200
++#define fOP_STATUS_DOZE 0x00000400 // debug purpose
++#define fOP_STATUS_PIGGYBACK_INUSED 0x00000800 // piggy-back, and aggregation
++#define fOP_STATUS_APSD_INUSED 0x00001000
++#define fOP_STATUS_TX_AMSDU_INUSED 0x00002000
++#define fOP_STATUS_MAX_RETRY_ENABLED 0x00004000
++#define fOP_STATUS_WAKEUP_NOW 0x00008000
++#define fOP_STATUS_ADVANCE_POWER_SAVE_PCIE_DEVICE 0x00020000
++
++#ifdef DOT11N_DRAFT3
++#define fOP_STATUS_SCAN_2040 0x00040000
++#endif // DOT11N_DRAFT3 //
++
++#define CCKSETPROTECT 0x1
++#define OFDMSETPROTECT 0x2
++#define MM20SETPROTECT 0x4
++#define MM40SETPROTECT 0x8
++#define GF20SETPROTECT 0x10
++#define GR40SETPROTECT 0x20
++#define ALLN_SETPROTECT (GR40SETPROTECT | GF20SETPROTECT | MM40SETPROTECT | MM20SETPROTECT)
++
++//
++// AP's client table operation status flags
++//
++#define fCLIENT_STATUS_WMM_CAPABLE 0x00000001 // CLIENT can parse QOS DATA frame
++#define fCLIENT_STATUS_AGGREGATION_CAPABLE 0x00000002 // CLIENT can receive Ralink's proprietary TX aggregation frame
++#define fCLIENT_STATUS_PIGGYBACK_CAPABLE 0x00000004 // CLIENT support piggy-back
++#define fCLIENT_STATUS_AMSDU_INUSED 0x00000008
++#define fCLIENT_STATUS_SGI20_CAPABLE 0x00000010
++#define fCLIENT_STATUS_SGI40_CAPABLE 0x00000020
++#define fCLIENT_STATUS_TxSTBC_CAPABLE 0x00000040
++#define fCLIENT_STATUS_RxSTBC_CAPABLE 0x00000080
++#define fCLIENT_STATUS_HTC_CAPABLE 0x00000100
++#define fCLIENT_STATUS_RDG_CAPABLE 0x00000200
++#define fCLIENT_STATUS_MCSFEEDBACK_CAPABLE 0x00000400
++#define fCLIENT_STATUS_APSD_CAPABLE 0x00000800 /* UAPSD STATION */
++
++#ifdef DOT11N_DRAFT3
++#define fCLIENT_STATUS_BSSCOEXIST_CAPABLE 0x00001000
++#endif // DOT11N_DRAFT3 //
++
++#define fCLIENT_STATUS_RALINK_CHIPSET 0x00100000
++//
++// STA configuration flags
++//
++//#define fSTA_CFG_ENABLE_TX_BURST 0x00000001
++
++// 802.11n Operating Mode Definition. 0-3 also used in ASICUPdateProtect switch case
++#define HT_NO_PROTECT 0
++#define HT_LEGACY_PROTECT 1
++#define HT_40_PROTECT 2
++#define HT_2040_PROTECT 3
++#define HT_RTSCTS_6M 7
++//following is our own definition in order to turn on our ASIC protection register in INFRASTRUCTURE.
++#define HT_ATHEROS 8 // rt2860c has problem with atheros chip. we need to turn on RTS/CTS .
++#define HT_FORCERTSCTS 9 // Force turn on RTS/CTS first. then go to evaluate if this force RTS is necessary.
++
++//
++// RX Packet Filter control flags. Apply on pAd->PacketFilter
++//
++#define fRX_FILTER_ACCEPT_DIRECT NDIS_PACKET_TYPE_DIRECTED
++#define fRX_FILTER_ACCEPT_MULTICAST NDIS_PACKET_TYPE_MULTICAST
++#define fRX_FILTER_ACCEPT_BROADCAST NDIS_PACKET_TYPE_BROADCAST
++#define fRX_FILTER_ACCEPT_ALL_MULTICAST NDIS_PACKET_TYPE_ALL_MULTICAST
++
++//
++// Error code section
++//
++// NDIS_ERROR_CODE_ADAPTER_NOT_FOUND
++#define ERRLOG_READ_PCI_SLOT_FAILED 0x00000101L
++#define ERRLOG_WRITE_PCI_SLOT_FAILED 0x00000102L
++#define ERRLOG_VENDOR_DEVICE_NOMATCH 0x00000103L
++
++// NDIS_ERROR_CODE_ADAPTER_DISABLED
++#define ERRLOG_BUS_MASTER_DISABLED 0x00000201L
++
++// NDIS_ERROR_CODE_UNSUPPORTED_CONFIGURATION
++#define ERRLOG_INVALID_SPEED_DUPLEX 0x00000301L
++#define ERRLOG_SET_SECONDARY_FAILED 0x00000302L
++
++// NDIS_ERROR_CODE_OUT_OF_RESOURCES
++#define ERRLOG_OUT_OF_MEMORY 0x00000401L
++#define ERRLOG_OUT_OF_SHARED_MEMORY 0x00000402L
++#define ERRLOG_OUT_OF_MAP_REGISTERS 0x00000403L
++#define ERRLOG_OUT_OF_BUFFER_POOL 0x00000404L
++#define ERRLOG_OUT_OF_NDIS_BUFFER 0x00000405L
++#define ERRLOG_OUT_OF_PACKET_POOL 0x00000406L
++#define ERRLOG_OUT_OF_NDIS_PACKET 0x00000407L
++#define ERRLOG_OUT_OF_LOOKASIDE_MEMORY 0x00000408L
++
++// NDIS_ERROR_CODE_HARDWARE_FAILURE
++#define ERRLOG_SELFTEST_FAILED 0x00000501L
++#define ERRLOG_INITIALIZE_ADAPTER 0x00000502L
++#define ERRLOG_REMOVE_MINIPORT 0x00000503L
++
++// NDIS_ERROR_CODE_RESOURCE_CONFLICT
++#define ERRLOG_MAP_IO_SPACE 0x00000601L
++#define ERRLOG_QUERY_ADAPTER_RESOURCES 0x00000602L
++#define ERRLOG_NO_IO_RESOURCE 0x00000603L
++#define ERRLOG_NO_INTERRUPT_RESOURCE 0x00000604L
++#define ERRLOG_NO_MEMORY_RESOURCE 0x00000605L
++
++
++// WDS definition
++#define MAX_WDS_ENTRY 4
++#define WDS_PAIRWISE_KEY_OFFSET 60 // WDS links uses pairwise key#60 ~ 63 in ASIC pairwise key table
++
++#define WDS_DISABLE_MODE 0
++#define WDS_RESTRICT_MODE 1
++#define WDS_BRIDGE_MODE 2
++#define WDS_REPEATER_MODE 3
++#define WDS_LAZY_MODE 4
++
++
++#define MAX_MESH_NUM 0
++
++#define MAX_APCLI_NUM 0
++#ifdef APCLI_SUPPORT
++#undef MAX_APCLI_NUM
++#define MAX_APCLI_NUM 1
++#endif // APCLI_SUPPORT //
++
++#define MAX_MBSSID_NUM 1
++
++/* sanity check for apidx */
++#define MBSS_MR_APIDX_SANITY_CHECK(apidx) \
++ { if (apidx > MAX_MBSSID_NUM) { \
++ printk("%s> Error! apidx = %d > MAX_MBSSID_NUM!\n", __FUNCTION__, apidx); \
++ apidx = MAIN_MBSSID; } }
++
++#define VALID_WCID(_wcid) ((_wcid) > 0 && (_wcid) < MAX_LEN_OF_MAC_TABLE )
++
++#define MAIN_MBSSID 0
++#define FIRST_MBSSID 1
++
++
++#define MAX_BEACON_SIZE 512
++// If the MAX_MBSSID_NUM is larger than 6,
++// it shall reserve some WCID space(wcid 222~253) for beacon frames.
++// - these wcid 238~253 are reserved for beacon#6(ra6).
++// - these wcid 222~237 are reserved for beacon#7(ra7).
++#if defined(MAX_MBSSID_NUM) && (MAX_MBSSID_NUM == 8)
++#define HW_RESERVED_WCID 222
++#elif defined(MAX_MBSSID_NUM) && (MAX_MBSSID_NUM == 7)
++#define HW_RESERVED_WCID 238
++#else
++#define HW_RESERVED_WCID 255
++#endif
++
++// Then dedicate wcid of DFS and Carrier-Sense.
++#define DFS_CTS_WCID (HW_RESERVED_WCID - 1)
++#define CS_CTS_WCID (HW_RESERVED_WCID - 2)
++#define LAST_SPECIFIC_WCID (HW_RESERVED_WCID - 2)
++
++// If MAX_MBSSID_NUM is 8, the maximum available wcid for the associated STA is 211.
++// If MAX_MBSSID_NUM is 7, the maximum available wcid for the associated STA is 228.
++#define MAX_AVAILABLE_CLIENT_WCID (LAST_SPECIFIC_WCID - MAX_MBSSID_NUM - 1)
++
++// TX need WCID to find Cipher Key
++// these wcid 212 ~ 219 are reserved for bc/mc packets if MAX_MBSSID_NUM is 8.
++#define GET_GroupKey_WCID(__wcid, __bssidx) \
++ { \
++ __wcid = LAST_SPECIFIC_WCID - (MAX_MBSSID_NUM) + __bssidx; \
++ }
++
++#define IsGroupKeyWCID(__wcid) (((__wcid) < LAST_SPECIFIC_WCID) && ((__wcid) >= (LAST_SPECIFIC_WCID - (MAX_MBSSID_NUM))))
++
++
++// definition to support multiple BSSID
++#define BSS0 0
++#define BSS1 1
++#define BSS2 2
++#define BSS3 3
++#define BSS4 4
++#define BSS5 5
++#define BSS6 6
++#define BSS7 7
++
++
++//============================================================
++// Length definitions
++#define PEER_KEY_NO 2
++#define MAC_ADDR_LEN 6
++#define TIMESTAMP_LEN 8
++#define MAX_LEN_OF_SUPPORTED_RATES MAX_LENGTH_OF_SUPPORT_RATES // 1, 2, 5.5, 11, 6, 9, 12, 18, 24, 36, 48, 54
++#define MAX_LEN_OF_KEY 32 // 32 octets == 256 bits, Redefine for WPA
++#define MAX_NUM_OF_CHANNELS MAX_NUM_OF_CHS // 14 channels @2.4G + 12@UNII + 4 @MMAC + 11 @HiperLAN2 + 7 @Japan + 1 as NULL termination
++#define MAX_NUM_OF_11JCHANNELS 20 // 14 channels @2.4G + 12@UNII + 4 @MMAC + 11 @HiperLAN2 + 7 @Japan + 1 as NULL termination
++#define MAX_LEN_OF_SSID 32
++#define CIPHER_TEXT_LEN 128
++#define HASH_TABLE_SIZE 256
++#define MAX_VIE_LEN 1024 // New for WPA cipher suite variable IE sizes.
++#define MAX_SUPPORT_MCS 32
++
++//============================================================
++// ASIC WCID Table definition.
++//============================================================
++#define BSSID_WCID 1 // in infra mode, always put bssid with this WCID
++#define MCAST_WCID 0x0
++#define BSS0Mcast_WCID 0x0
++#define BSS1Mcast_WCID 0xf8
++#define BSS2Mcast_WCID 0xf9
++#define BSS3Mcast_WCID 0xfa
++#define BSS4Mcast_WCID 0xfb
++#define BSS5Mcast_WCID 0xfc
++#define BSS6Mcast_WCID 0xfd
++#define BSS7Mcast_WCID 0xfe
++#define RESERVED_WCID 0xff
++
++#define MAX_NUM_OF_ACL_LIST MAX_NUMBER_OF_ACL
++
++#define MAX_LEN_OF_MAC_TABLE MAX_NUMBER_OF_MAC // if MAX_MBSSID_NUM is 8, this value can't be larger than 211
++
++#if MAX_LEN_OF_MAC_TABLE>MAX_AVAILABLE_CLIENT_WCID
++#error MAX_LEN_OF_MAC_TABLE can not be larger than MAX_AVAILABLE_CLIENT_WCID!!!!
++#endif
++
++#define MAX_NUM_OF_WDS_LINK_PERBSSID 3
++#define MAX_NUM_OF_WDS_LINK (MAX_NUM_OF_WDS_LINK_PERBSSID*MAX_MBSSID_NUM)
++#define MAX_NUM_OF_EVENT MAX_NUMBER_OF_EVENT
++#define WDS_LINK_START_WCID (MAX_LEN_OF_MAC_TABLE-1)
++
++#define NUM_OF_TID 8
++#define MAX_AID_BA 4
++#define MAX_LEN_OF_BA_REC_TABLE ((NUM_OF_TID * MAX_LEN_OF_MAC_TABLE)/2)// (NUM_OF_TID*MAX_AID_BA + 32) //Block ACK recipient
++#define MAX_LEN_OF_BA_ORI_TABLE ((NUM_OF_TID * MAX_LEN_OF_MAC_TABLE)/2)// (NUM_OF_TID*MAX_AID_BA + 32) // Block ACK originator
++#define MAX_LEN_OF_BSS_TABLE 64
++#define MAX_REORDERING_MPDU_NUM 512
++
++// key related definitions
++#define SHARE_KEY_NUM 4
++#define MAX_LEN_OF_SHARE_KEY 16 // byte count
++#define MAX_LEN_OF_PEER_KEY 16 // byte count
++#define PAIRWISE_KEY_NUM 64 // in MAC ASIC pairwise key table
++#define GROUP_KEY_NUM 4
++#define PMK_LEN 32
++#define WDS_PAIRWISE_KEY_OFFSET 60 // WDS links uses pairwise key#60 ~ 63 in ASIC pairwise key table
++#define PMKID_NO 4 // Number of PMKID saved supported
++#define MAX_LEN_OF_MLME_BUFFER 2048
++
++// power status related definitions
++#define PWR_ACTIVE 0
++#define PWR_SAVE 1
++#define PWR_MMPS 2 //MIMO power save
++//#define PWR_UNKNOWN 2
++
++// Auth and Assoc mode related definitions
++#define AUTH_MODE_OPEN 0x00
++#define AUTH_MODE_KEY 0x01
++//#define AUTH_MODE_AUTO_SWITCH 0x03
++//#define AUTH_MODE_DEAUTH 0x04
++//#define AUTH_MODE_UPLAYER 0x05 // reserved for 802.11i use
++
++// BSS Type definitions
++#define BSS_ADHOC 0 // = Ndis802_11IBSS
++#define BSS_INFRA 1 // = Ndis802_11Infrastructure
++#define BSS_ANY 2 // = Ndis802_11AutoUnknown
++#define BSS_MONITOR 3 // = Ndis802_11Monitor
++
++
++// Reason code definitions
++#define REASON_RESERVED 0
++#define REASON_UNSPECIFY 1
++#define REASON_NO_LONGER_VALID 2
++#define REASON_DEAUTH_STA_LEAVING 3
++#define REASON_DISASSOC_INACTIVE 4
++#define REASON_DISASSPC_AP_UNABLE 5
++#define REASON_CLS2ERR 6
++#define REASON_CLS3ERR 7
++#define REASON_DISASSOC_STA_LEAVING 8
++#define REASON_STA_REQ_ASSOC_NOT_AUTH 9
++#define REASON_INVALID_IE 13
++#define REASON_MIC_FAILURE 14
++#define REASON_4_WAY_TIMEOUT 15
++#define REASON_GROUP_KEY_HS_TIMEOUT 16
++#define REASON_IE_DIFFERENT 17
++#define REASON_MCIPHER_NOT_VALID 18
++#define REASON_UCIPHER_NOT_VALID 19
++#define REASON_AKMP_NOT_VALID 20
++#define REASON_UNSUPPORT_RSNE_VER 21
++#define REASON_INVALID_RSNE_CAP 22
++#define REASON_8021X_AUTH_FAIL 23
++#define REASON_CIPHER_SUITE_REJECTED 24
++#define REASON_DECLINED 37
++
++#define REASON_QOS_UNSPECIFY 32
++#define REASON_QOS_LACK_BANDWIDTH 33
++#define REASON_POOR_CHANNEL_CONDITION 34
++#define REASON_QOS_OUTSIDE_TXOP_LIMITION 35
++#define REASON_QOS_QSTA_LEAVING_QBSS 36
++#define REASON_QOS_UNWANTED_MECHANISM 37
++#define REASON_QOS_MECH_SETUP_REQUIRED 38
++#define REASON_QOS_REQUEST_TIMEOUT 39
++#define REASON_QOS_CIPHER_NOT_SUPPORT 45
++
++// Status code definitions
++#define MLME_SUCCESS 0
++#define MLME_UNSPECIFY_FAIL 1
++#define MLME_CANNOT_SUPPORT_CAP 10
++#define MLME_REASSOC_DENY_ASSOC_EXIST 11
++#define MLME_ASSOC_DENY_OUT_SCOPE 12
++#define MLME_ALG_NOT_SUPPORT 13
++#define MLME_SEQ_NR_OUT_OF_SEQUENCE 14
++#define MLME_REJ_CHALLENGE_FAILURE 15
++#define MLME_REJ_TIMEOUT 16
++#define MLME_ASSOC_REJ_UNABLE_HANDLE_STA 17
++#define MLME_ASSOC_REJ_DATA_RATE 18
++
++#define MLME_ASSOC_REJ_NO_EXT_RATE 22
++#define MLME_ASSOC_REJ_NO_EXT_RATE_PBCC 23
++#define MLME_ASSOC_REJ_NO_CCK_OFDM 24
++
++#define MLME_QOS_UNSPECIFY 32
++#define MLME_REQUEST_DECLINED 37
++#define MLME_REQUEST_WITH_INVALID_PARAM 38
++#define MLME_DLS_NOT_ALLOW_IN_QBSS 48
++#define MLME_DEST_STA_NOT_IN_QBSS 49
++#define MLME_DEST_STA_IS_NOT_A_QSTA 50
++
++#define MLME_INVALID_FORMAT 0x51
++#define MLME_FAIL_NO_RESOURCE 0x52
++#define MLME_STATE_MACHINE_REJECT 0x53
++#define MLME_MAC_TABLE_FAIL 0x54
++
++// IE code
++#define IE_SSID 0
++#define IE_SUPP_RATES 1
++#define IE_FH_PARM 2
++#define IE_DS_PARM 3
++#define IE_CF_PARM 4
++#define IE_TIM 5
++#define IE_IBSS_PARM 6
++#define IE_COUNTRY 7 // 802.11d
++#define IE_802_11D_REQUEST 10 // 802.11d
++#define IE_QBSS_LOAD 11 // 802.11e d9
++#define IE_EDCA_PARAMETER 12 // 802.11e d9
++#define IE_TSPEC 13 // 802.11e d9
++#define IE_TCLAS 14 // 802.11e d9
++#define IE_SCHEDULE 15 // 802.11e d9
++#define IE_CHALLENGE_TEXT 16
++#define IE_POWER_CONSTRAINT 32 // 802.11h d3.3
++#define IE_POWER_CAPABILITY 33 // 802.11h d3.3
++#define IE_TPC_REQUEST 34 // 802.11h d3.3
++#define IE_TPC_REPORT 35 // 802.11h d3.3
++#define IE_SUPP_CHANNELS 36 // 802.11h d3.3
++#define IE_CHANNEL_SWITCH_ANNOUNCEMENT 37 // 802.11h d3.3
++#define IE_MEASUREMENT_REQUEST 38 // 802.11h d3.3
++#define IE_MEASUREMENT_REPORT 39 // 802.11h d3.3
++#define IE_QUIET 40 // 802.11h d3.3
++#define IE_IBSS_DFS 41 // 802.11h d3.3
++#define IE_ERP 42 // 802.11g
++#define IE_TS_DELAY 43 // 802.11e d9
++#define IE_TCLAS_PROCESSING 44 // 802.11e d9
++#define IE_QOS_CAPABILITY 46 // 802.11e d6
++#define IE_HT_CAP 45 // 802.11n d1. HT CAPABILITY. ELEMENT ID TBD
++#define IE_AP_CHANNEL_REPORT 51 // 802.11k d6
++#define IE_HT_CAP2 52 // 802.11n d1. HT CAPABILITY. ELEMENT ID TBD
++#define IE_RSN 48 // 802.11i d3.0
++#define IE_WPA2 48 // WPA2
++#define IE_EXT_SUPP_RATES 50 // 802.11g
++#define IE_SUPP_REG_CLASS 59 // 802.11y. Supported regulatory classes.
++#define IE_EXT_CHANNEL_SWITCH_ANNOUNCEMENT 60 // 802.11n
++#define IE_ADD_HT 61 // 802.11n d1. ADDITIONAL HT CAPABILITY. ELEMENT ID TBD
++#define IE_ADD_HT2 53 // 802.11n d1. ADDITIONAL HT CAPABILITY. ELEMENT ID TBD
++
++
++// For 802.11n D3.03
++//#define IE_NEW_EXT_CHA_OFFSET 62 // 802.11n d1. New extension channel offset elemet
++#define IE_SECONDARY_CH_OFFSET 62 // 802.11n D3.03 Secondary Channel Offset element
++#define IE_WAPI 68 // WAPI information element
++#define IE_2040_BSS_COEXIST 72 // 802.11n D3.0.3
++#define IE_2040_BSS_INTOLERANT_REPORT 73 // 802.11n D3.03
++#define IE_OVERLAPBSS_SCAN_PARM 74 // 802.11n D3.03
++#define IE_EXT_CAPABILITY 127 // 802.11n D3.03
++
++
++#define IE_WPA 221 // WPA
++#define IE_VENDOR_SPECIFIC 221 // Wifi WMM (WME)
++
++#define OUI_BROADCOM_HT 51 //
++#define OUI_BROADCOM_HTADD 52 //
++#define OUI_PREN_HT_CAP 51 //
++#define OUI_PREN_ADD_HT 52 //
++
++// CCX information
++#define IE_AIRONET_CKIP 133 // CCX1.0 ID 85H for CKIP
++#define IE_AP_TX_POWER 150 // CCX 2.0 for AP transmit power
++#define IE_MEASUREMENT_CAPABILITY 221 // CCX 2.0
++#define IE_CCX_V2 221
++#define IE_AIRONET_IPADDRESS 149 // CCX ID 95H for IP Address
++#define IE_AIRONET_CCKMREASSOC 156 // CCX ID 9CH for CCKM Reassociation Request element
++#define CKIP_NEGOTIATION_LENGTH 30
++#define AIRONET_IPADDRESS_LENGTH 10
++#define AIRONET_CCKMREASSOC_LENGTH 24
++
++// ========================================================
++// MLME state machine definition
++// ========================================================
++
++// STA MLME state mahcines
++#define ASSOC_STATE_MACHINE 1
++#define AUTH_STATE_MACHINE 2
++#define AUTH_RSP_STATE_MACHINE 3
++#define SYNC_STATE_MACHINE 4
++#define MLME_CNTL_STATE_MACHINE 5
++#define WPA_PSK_STATE_MACHINE 6
++#define LEAP_STATE_MACHINE 7
++#define AIRONET_STATE_MACHINE 8
++#define ACTION_STATE_MACHINE 9
++
++// AP MLME state machines
++#define AP_ASSOC_STATE_MACHINE 11
++#define AP_AUTH_STATE_MACHINE 12
++#define AP_AUTH_RSP_STATE_MACHINE 13
++#define AP_SYNC_STATE_MACHINE 14
++#define AP_CNTL_STATE_MACHINE 15
++#define AP_WPA_STATE_MACHINE 16
++
++#ifdef QOS_DLS_SUPPORT
++#define DLS_STATE_MACHINE 26
++#endif // QOS_DLS_SUPPORT //
++
++//
++// STA's CONTROL/CONNECT state machine: states, events, total function #
++//
++#define CNTL_IDLE 0
++#define CNTL_WAIT_DISASSOC 1
++#define CNTL_WAIT_JOIN 2
++#define CNTL_WAIT_REASSOC 3
++#define CNTL_WAIT_START 4
++#define CNTL_WAIT_AUTH 5
++#define CNTL_WAIT_ASSOC 6
++#define CNTL_WAIT_AUTH2 7
++#define CNTL_WAIT_OID_LIST_SCAN 8
++#define CNTL_WAIT_OID_DISASSOC 9
++#ifdef RT2870
++#define CNTL_WAIT_SCAN_FOR_CONNECT 10
++#endif // RT2870 //
++
++#define MT2_ASSOC_CONF 34
++#define MT2_AUTH_CONF 35
++#define MT2_DEAUTH_CONF 36
++#define MT2_DISASSOC_CONF 37
++#define MT2_REASSOC_CONF 38
++#define MT2_PWR_MGMT_CONF 39
++#define MT2_JOIN_CONF 40
++#define MT2_SCAN_CONF 41
++#define MT2_START_CONF 42
++#define MT2_GET_CONF 43
++#define MT2_SET_CONF 44
++#define MT2_RESET_CONF 45
++#define MT2_MLME_ROAMING_REQ 52
++
++#define CNTL_FUNC_SIZE 1
++
++//
++// STA's ASSOC state machine: states, events, total function #
++//
++#define ASSOC_IDLE 0
++#define ASSOC_WAIT_RSP 1
++#define REASSOC_WAIT_RSP 2
++#define DISASSOC_WAIT_RSP 3
++#define MAX_ASSOC_STATE 4
++
++#define ASSOC_MACHINE_BASE 0
++#define MT2_MLME_ASSOC_REQ 0
++#define MT2_MLME_REASSOC_REQ 1
++#define MT2_MLME_DISASSOC_REQ 2
++#define MT2_PEER_DISASSOC_REQ 3
++#define MT2_PEER_ASSOC_REQ 4
++#define MT2_PEER_ASSOC_RSP 5
++#define MT2_PEER_REASSOC_REQ 6
++#define MT2_PEER_REASSOC_RSP 7
++#define MT2_DISASSOC_TIMEOUT 8
++#define MT2_ASSOC_TIMEOUT 9
++#define MT2_REASSOC_TIMEOUT 10
++#define MAX_ASSOC_MSG 11
++
++#define ASSOC_FUNC_SIZE (MAX_ASSOC_STATE * MAX_ASSOC_MSG)
++
++//
++// ACT state machine: states, events, total function #
++//
++#define ACT_IDLE 0
++#define MAX_ACT_STATE 1
++
++#define ACT_MACHINE_BASE 0
++
++//Those PEER_xx_CATE number is based on real Categary value in IEEE spec. Please don'es modify it by your self.
++//Category
++#define MT2_PEER_SPECTRUM_CATE 0
++#define MT2_PEER_QOS_CATE 1
++#define MT2_PEER_DLS_CATE 2
++#define MT2_PEER_BA_CATE 3
++#define MT2_PEER_PUBLIC_CATE 4
++#define MT2_PEER_RM_CATE 5
++#define MT2_PEER_HT_CATE 7 // 7.4.7
++#define MAX_PEER_CATE_MSG 7
++#define MT2_MLME_ADD_BA_CATE 8
++#define MT2_MLME_ORI_DELBA_CATE 9
++#define MT2_MLME_REC_DELBA_CATE 10
++#define MT2_MLME_QOS_CATE 11
++#define MT2_MLME_DLS_CATE 12
++#define MT2_ACT_INVALID 13
++#define MAX_ACT_MSG 14
++
++//Category field
++#define CATEGORY_SPECTRUM 0
++#define CATEGORY_QOS 1
++#define CATEGORY_DLS 2
++#define CATEGORY_BA 3
++#define CATEGORY_PUBLIC 4
++#define CATEGORY_RM 5
++#define CATEGORY_HT 7
++
++
++// DLS Action frame definition
++#define ACTION_DLS_REQUEST 0
++#define ACTION_DLS_RESPONSE 1
++#define ACTION_DLS_TEARDOWN 2
++
++//Spectrum Action field value 802.11h 7.4.1
++#define SPEC_MRQ 0 // Request
++#define SPEC_MRP 1 //Report
++#define SPEC_TPCRQ 2
++#define SPEC_TPCRP 3
++#define SPEC_CHANNEL_SWITCH 4
++
++
++//BA Action field value
++#define ADDBA_REQ 0
++#define ADDBA_RESP 1
++#define DELBA 2
++
++//Public's Action field value in Public Category. Some in 802.11y and some in 11n
++#define ACTION_BSS_2040_COEXIST 0 // 11n
++#define ACTION_DSE_ENABLEMENT 1 // 11y D9.0
++#define ACTION_DSE_DEENABLEMENT 2 // 11y D9.0
++#define ACTION_DSE_REG_LOCATION_ANNOUNCE 3 // 11y D9.0
++#define ACTION_EXT_CH_SWITCH_ANNOUNCE 4 // 11y D9.0
++#define ACTION_DSE_MEASUREMENT_REQ 5 // 11y D9.0
++#define ACTION_DSE_MEASUREMENT_REPORT 6 // 11y D9.0
++#define ACTION_MEASUREMENT_PILOT_ACTION 7 // 11y D9.0
++#define ACTION_DSE_POWER_CONSTRAINT 8 // 11y D9.0
++
++
++//HT Action field value
++#define NOTIFY_BW_ACTION 0
++#define SMPS_ACTION 1
++#define PSMP_ACTION 2
++#define SETPCO_ACTION 3
++#define MIMO_CHA_MEASURE_ACTION 4
++#define MIMO_N_BEACONFORM 5
++#define MIMO_BEACONFORM 6
++#define ANTENNA_SELECT 7
++#define HT_INFO_EXCHANGE 8
++
++#define ACT_FUNC_SIZE (MAX_ACT_STATE * MAX_ACT_MSG)
++//
++// STA's AUTHENTICATION state machine: states, evvents, total function #
++//
++#define AUTH_REQ_IDLE 0
++#define AUTH_WAIT_SEQ2 1
++#define AUTH_WAIT_SEQ4 2
++#define MAX_AUTH_STATE 3
++
++#define AUTH_MACHINE_BASE 0
++#define MT2_MLME_AUTH_REQ 0
++#define MT2_PEER_AUTH_EVEN 1
++#define MT2_AUTH_TIMEOUT 2
++#define MAX_AUTH_MSG 3
++
++#define AUTH_FUNC_SIZE (MAX_AUTH_STATE * MAX_AUTH_MSG)
++
++//
++// STA's AUTH_RSP state machine: states, events, total function #
++//
++#define AUTH_RSP_IDLE 0
++#define AUTH_RSP_WAIT_CHAL 1
++#define MAX_AUTH_RSP_STATE 2
++
++#define AUTH_RSP_MACHINE_BASE 0
++#define MT2_AUTH_CHALLENGE_TIMEOUT 0
++#define MT2_PEER_AUTH_ODD 1
++#define MT2_PEER_DEAUTH 2
++#define MAX_AUTH_RSP_MSG 3
++
++#define AUTH_RSP_FUNC_SIZE (MAX_AUTH_RSP_STATE * MAX_AUTH_RSP_MSG)
++
++//
++// STA's SYNC state machine: states, events, total function #
++//
++#define SYNC_IDLE 0 // merge NO_BSS,IBSS_IDLE,IBSS_ACTIVE and BSS in to 1 state
++#define JOIN_WAIT_BEACON 1
++#define SCAN_LISTEN 2
++#define MAX_SYNC_STATE 3
++
++#define SYNC_MACHINE_BASE 0
++#define MT2_MLME_SCAN_REQ 0
++#define MT2_MLME_JOIN_REQ 1
++#define MT2_MLME_START_REQ 2
++#define MT2_PEER_BEACON 3
++#define MT2_PEER_PROBE_RSP 4
++#define MT2_PEER_ATIM 5
++#define MT2_SCAN_TIMEOUT 6
++#define MT2_BEACON_TIMEOUT 7
++#define MT2_ATIM_TIMEOUT 8
++#define MT2_PEER_PROBE_REQ 9
++#define MAX_SYNC_MSG 10
++
++#define SYNC_FUNC_SIZE (MAX_SYNC_STATE * MAX_SYNC_MSG)
++
++//Messages for the DLS state machine
++#define DLS_IDLE 0
++#define MAX_DLS_STATE 1
++
++#define DLS_MACHINE_BASE 0
++#define MT2_MLME_DLS_REQ 0
++#define MT2_PEER_DLS_REQ 1
++#define MT2_PEER_DLS_RSP 2
++#define MT2_MLME_DLS_TEAR_DOWN 3
++#define MT2_PEER_DLS_TEAR_DOWN 4
++#define MAX_DLS_MSG 5
++
++#define DLS_FUNC_SIZE (MAX_DLS_STATE * MAX_DLS_MSG)
++
++//
++// STA's WPA-PSK State machine: states, events, total function #
++//
++#define WPA_PSK_IDLE 0
++#define MAX_WPA_PSK_STATE 1
++
++#define WPA_MACHINE_BASE 0
++#define MT2_EAPPacket 0
++#define MT2_EAPOLStart 1
++#define MT2_EAPOLLogoff 2
++#define MT2_EAPOLKey 3
++#define MT2_EAPOLASFAlert 4
++#define MAX_WPA_PSK_MSG 5
++
++#define WPA_PSK_FUNC_SIZE (MAX_WPA_PSK_STATE * MAX_WPA_PSK_MSG)
++
++//
++// STA's CISCO-AIRONET State machine: states, events, total function #
++//
++#define AIRONET_IDLE 0
++#define AIRONET_SCANNING 1
++#define MAX_AIRONET_STATE 2
++
++#define AIRONET_MACHINE_BASE 0
++#define MT2_AIRONET_MSG 0
++#define MT2_AIRONET_SCAN_REQ 1
++#define MT2_AIRONET_SCAN_DONE 2
++#define MAX_AIRONET_MSG 3
++
++#define AIRONET_FUNC_SIZE (MAX_AIRONET_STATE * MAX_AIRONET_MSG)
++
++//
++// AP's CONTROL/CONNECT state machine: states, events, total function #
++//
++#define AP_CNTL_FUNC_SIZE 1
++
++//
++// AP's ASSOC state machine: states, events, total function #
++//
++#define AP_ASSOC_IDLE 0
++#define AP_MAX_ASSOC_STATE 1
++
++#define AP_ASSOC_MACHINE_BASE 0
++#define APMT2_MLME_DISASSOC_REQ 0
++#define APMT2_PEER_DISASSOC_REQ 1
++#define APMT2_PEER_ASSOC_REQ 2
++#define APMT2_PEER_REASSOC_REQ 3
++#define APMT2_CLS3ERR 4
++#define AP_MAX_ASSOC_MSG 5
++
++#define AP_ASSOC_FUNC_SIZE (AP_MAX_ASSOC_STATE * AP_MAX_ASSOC_MSG)
++
++//
++// AP's AUTHENTICATION state machine: states, events, total function #
++//
++#define AP_AUTH_REQ_IDLE 0
++#define AP_MAX_AUTH_STATE 1
++
++#define AP_AUTH_MACHINE_BASE 0
++#define APMT2_MLME_DEAUTH_REQ 0
++#define APMT2_CLS2ERR 1
++#define AP_MAX_AUTH_MSG 2
++
++#define AP_AUTH_FUNC_SIZE (AP_MAX_AUTH_STATE * AP_MAX_AUTH_MSG)
++
++//
++// AP's AUTH-RSP state machine: states, events, total function #
++//
++#define AP_AUTH_RSP_IDLE 0
++#define AP_MAX_AUTH_RSP_STATE 1
++
++#define AP_AUTH_RSP_MACHINE_BASE 0
++#define APMT2_AUTH_CHALLENGE_TIMEOUT 0
++#define APMT2_PEER_AUTH_ODD 1
++#define APMT2_PEER_DEAUTH 2
++#define AP_MAX_AUTH_RSP_MSG 3
++
++#define AP_AUTH_RSP_FUNC_SIZE (AP_MAX_AUTH_RSP_STATE * AP_MAX_AUTH_RSP_MSG)
++
++//
++// AP's SYNC state machine: states, events, total function #
++//
++#define AP_SYNC_IDLE 0
++#define AP_SCAN_LISTEN 1
++#define AP_MAX_SYNC_STATE 2
++
++#define AP_SYNC_MACHINE_BASE 0
++#define APMT2_PEER_PROBE_REQ 0
++#define APMT2_PEER_BEACON 1
++#define APMT2_MLME_SCAN_REQ 2
++#define APMT2_PEER_PROBE_RSP 3
++#define APMT2_SCAN_TIMEOUT 4
++#define APMT2_MLME_SCAN_CNCL 5
++#define AP_MAX_SYNC_MSG 6
++
++#define AP_SYNC_FUNC_SIZE (AP_MAX_SYNC_STATE * AP_MAX_SYNC_MSG)
++
++//
++// AP's WPA state machine: states, events, total function #
++//
++#define AP_WPA_PTK 0
++#define AP_MAX_WPA_PTK_STATE 1
++
++#define AP_WPA_MACHINE_BASE 0
++#define APMT2_EAPPacket 0
++#define APMT2_EAPOLStart 1
++#define APMT2_EAPOLLogoff 2
++#define APMT2_EAPOLKey 3
++#define APMT2_EAPOLASFAlert 4
++#define AP_MAX_WPA_MSG 5
++
++#define AP_WPA_FUNC_SIZE (AP_MAX_WPA_PTK_STATE * AP_MAX_WPA_MSG)
++
++#ifdef APCLI_SUPPORT
++//ApCli authentication state machine
++#define APCLI_AUTH_REQ_IDLE 0
++#define APCLI_AUTH_WAIT_SEQ2 1
++#define APCLI_AUTH_WAIT_SEQ4 2
++#define APCLI_MAX_AUTH_STATE 3
++
++#define APCLI_AUTH_MACHINE_BASE 0
++#define APCLI_MT2_MLME_AUTH_REQ 0
++#define APCLI_MT2_MLME_DEAUTH_REQ 1
++#define APCLI_MT2_PEER_AUTH_EVEN 2
++#define APCLI_MT2_PEER_DEAUTH 3
++#define APCLI_MT2_AUTH_TIMEOUT 4
++#define APCLI_MAX_AUTH_MSG 5
++
++#define APCLI_AUTH_FUNC_SIZE (APCLI_MAX_AUTH_STATE * APCLI_MAX_AUTH_MSG)
++
++//ApCli association state machine
++#define APCLI_ASSOC_IDLE 0
++#define APCLI_ASSOC_WAIT_RSP 1
++#define APCLI_MAX_ASSOC_STATE 2
++
++#define APCLI_ASSOC_MACHINE_BASE 0
++#define APCLI_MT2_MLME_ASSOC_REQ 0
++#define APCLI_MT2_MLME_DISASSOC_REQ 1
++#define APCLI_MT2_PEER_DISASSOC_REQ 2
++#define APCLI_MT2_PEER_ASSOC_RSP 3
++#define APCLI_MT2_ASSOC_TIMEOUT 4
++#define APCLI_MAX_ASSOC_MSG 5
++
++#define APCLI_ASSOC_FUNC_SIZE (APCLI_MAX_ASSOC_STATE * APCLI_MAX_ASSOC_MSG)
++
++//ApCli sync state machine
++#define APCLI_SYNC_IDLE 0 // merge NO_BSS,IBSS_IDLE,IBSS_ACTIVE and BSS in to 1 state
++#define APCLI_JOIN_WAIT_PROBE_RSP 1
++#define APCLI_MAX_SYNC_STATE 2
++
++#define APCLI_SYNC_MACHINE_BASE 0
++#define APCLI_MT2_MLME_PROBE_REQ 0
++#define APCLI_MT2_PEER_PROBE_RSP 1
++#define APCLI_MT2_PROBE_TIMEOUT 2
++#define APCLI_MAX_SYNC_MSG 3
++
++#define APCLI_SYNC_FUNC_SIZE (APCLI_MAX_SYNC_STATE * APCLI_MAX_SYNC_MSG)
++
++//ApCli ctrl state machine
++#define APCLI_CTRL_DISCONNECTED 0 // merge NO_BSS,IBSS_IDLE,IBSS_ACTIVE and BSS in to 1 state
++#define APCLI_CTRL_PROBE 1
++#define APCLI_CTRL_AUTH 2
++#define APCLI_CTRL_AUTH_2 3
++#define APCLI_CTRL_ASSOC 4
++#define APCLI_CTRL_DEASSOC 5
++#define APCLI_CTRL_CONNECTED 6
++#define APCLI_MAX_CTRL_STATE 7
++
++#define APCLI_CTRL_MACHINE_BASE 0
++#define APCLI_CTRL_JOIN_REQ 0
++#define APCLI_CTRL_PROBE_RSP 1
++#define APCLI_CTRL_AUTH_RSP 2
++#define APCLI_CTRL_DISCONNECT_REQ 3
++#define APCLI_CTRL_PEER_DISCONNECT_REQ 4
++#define APCLI_CTRL_ASSOC_RSP 5
++#define APCLI_CTRL_DEASSOC_RSP 6
++#define APCLI_CTRL_JOIN_REQ_TIMEOUT 7
++#define APCLI_CTRL_AUTH_REQ_TIMEOUT 8
++#define APCLI_CTRL_ASSOC_REQ_TIMEOUT 9
++#define APCLI_MAX_CTRL_MSG 10
++
++#define APCLI_CTRL_FUNC_SIZE (APCLI_MAX_CTRL_STATE * APCLI_MAX_CTRL_MSG)
++
++#if 0 // remove those variables by AlbertY
++// ApCli WPA state machine
++#define APCLI_WPA_PSK_IDLE 0
++#define APCLI_MAX_WPA_PSK_STATE 1
++
++// ApCli WPA MSG Type
++#define APCLI_WPA_MACHINE_BASE 0
++#define APCLI_MT2_EAPPacket 0
++#define APCLI_MT2_EAPOLStart 1
++#define APCLI_MT2_EAPOLLogoff 2
++#define APCLI_MT2_EAPOLKey 3
++#define APCLI_MT2_EAPOLASFAlert 4
++#define APCLI_MAX_WPA_PSK_MSG 5
++
++#define APCLI_WPA_PSK_FUNC_SIZE (APCLI_MAX_WPA_PSK_STATE * APCLI_MAX_WPA_PSK_MSG)
++#endif // end - 0 //
++
++#endif // APCLI_SUPPORT //
++
++
++// =============================================================================
++
++// value domain of 802.11 header FC.Tyte, which is b3..b2 of the 1st-byte of MAC header
++#define BTYPE_MGMT 0
++#define BTYPE_CNTL 1
++#define BTYPE_DATA 2
++
++// value domain of 802.11 MGMT frame's FC.subtype, which is b7..4 of the 1st-byte of MAC header
++#define SUBTYPE_ASSOC_REQ 0
++#define SUBTYPE_ASSOC_RSP 1
++#define SUBTYPE_REASSOC_REQ 2
++#define SUBTYPE_REASSOC_RSP 3
++#define SUBTYPE_PROBE_REQ 4
++#define SUBTYPE_PROBE_RSP 5
++#define SUBTYPE_BEACON 8
++#define SUBTYPE_ATIM 9
++#define SUBTYPE_DISASSOC 10
++#define SUBTYPE_AUTH 11
++#define SUBTYPE_DEAUTH 12
++#define SUBTYPE_ACTION 13
++#define SUBTYPE_ACTION_NO_ACK 14
++
++// value domain of 802.11 CNTL frame's FC.subtype, which is b7..4 of the 1st-byte of MAC header
++#define SUBTYPE_WRAPPER 7
++#define SUBTYPE_BLOCK_ACK_REQ 8
++#define SUBTYPE_BLOCK_ACK 9
++#define SUBTYPE_PS_POLL 10
++#define SUBTYPE_RTS 11
++#define SUBTYPE_CTS 12
++#define SUBTYPE_ACK 13
++#define SUBTYPE_CFEND 14
++#define SUBTYPE_CFEND_CFACK 15
++
++// value domain of 802.11 DATA frame's FC.subtype, which is b7..4 of the 1st-byte of MAC header
++#define SUBTYPE_DATA 0
++#define SUBTYPE_DATA_CFACK 1
++#define SUBTYPE_DATA_CFPOLL 2
++#define SUBTYPE_DATA_CFACK_CFPOLL 3
++#define SUBTYPE_NULL_FUNC 4
++#define SUBTYPE_CFACK 5
++#define SUBTYPE_CFPOLL 6
++#define SUBTYPE_CFACK_CFPOLL 7
++#define SUBTYPE_QDATA 8
++#define SUBTYPE_QDATA_CFACK 9
++#define SUBTYPE_QDATA_CFPOLL 10
++#define SUBTYPE_QDATA_CFACK_CFPOLL 11
++#define SUBTYPE_QOS_NULL 12
++#define SUBTYPE_QOS_CFACK 13
++#define SUBTYPE_QOS_CFPOLL 14
++#define SUBTYPE_QOS_CFACK_CFPOLL 15
++
++// ACK policy of QOS Control field bit 6:5
++#define NORMAL_ACK 0x00 // b6:5 = 00
++#define NO_ACK 0x20 // b6:5 = 01
++#define NO_EXPLICIT_ACK 0x40 // b6:5 = 10
++#define BLOCK_ACK 0x60 // b6:5 = 11
++
++//
++// rtmp_data.c use these definition
++//
++#define LENGTH_802_11 24
++#define LENGTH_802_11_AND_H 30
++#define LENGTH_802_11_CRC_H 34
++#define LENGTH_802_11_CRC 28
++#define LENGTH_802_11_WITH_ADDR4 30
++#define LENGTH_802_3 14
++#define LENGTH_802_3_TYPE 2
++#define LENGTH_802_1_H 8
++#define LENGTH_EAPOL_H 4
++#define LENGTH_WMMQOS_H 2
++#define LENGTH_CRC 4
++#define MAX_SEQ_NUMBER 0x0fff
++#define LENGTH_802_3_NO_TYPE 12
++#define LENGTH_802_1Q 4 /* VLAN related */
++
++// STA_CSR4.field.TxResult
++#define TX_RESULT_SUCCESS 0
++#define TX_RESULT_ZERO_LENGTH 1
++#define TX_RESULT_UNDER_RUN 2
++#define TX_RESULT_OHY_ERROR 4
++#define TX_RESULT_RETRY_FAIL 6
++
++// All PHY rate summary in TXD
++// Preamble MODE in TxD
++#define MODE_CCK 0
++#define MODE_OFDM 1
++#ifdef DOT11_N_SUPPORT
++#define MODE_HTMIX 2
++#define MODE_HTGREENFIELD 3
++#endif // DOT11_N_SUPPORT //
++// MCS for CCK. BW.SGI.STBC are reserved
++#define MCS_LONGP_RATE_1 0 // long preamble CCK 1Mbps
++#define MCS_LONGP_RATE_2 1 // long preamble CCK 1Mbps
++#define MCS_LONGP_RATE_5_5 2
++#define MCS_LONGP_RATE_11 3
++#define MCS_SHORTP_RATE_1 4 // long preamble CCK 1Mbps. short is forbidden in 1Mbps
++#define MCS_SHORTP_RATE_2 5 // short preamble CCK 2Mbps
++#define MCS_SHORTP_RATE_5_5 6
++#define MCS_SHORTP_RATE_11 7
++// To send duplicate legacy OFDM. set BW=BW_40. SGI.STBC are reserved
++#define MCS_RATE_6 0 // legacy OFDM
++#define MCS_RATE_9 1 // OFDM
++#define MCS_RATE_12 2 // OFDM
++#define MCS_RATE_18 3 // OFDM
++#define MCS_RATE_24 4 // OFDM
++#define MCS_RATE_36 5 // OFDM
++#define MCS_RATE_48 6 // OFDM
++#define MCS_RATE_54 7 // OFDM
++// HT
++#define MCS_0 0 // 1S
++#define MCS_1 1
++#define MCS_2 2
++#define MCS_3 3
++#define MCS_4 4
++#define MCS_5 5
++#define MCS_6 6
++#define MCS_7 7
++#define MCS_8 8 // 2S
++#define MCS_9 9
++#define MCS_10 10
++#define MCS_11 11
++#define MCS_12 12
++#define MCS_13 13
++#define MCS_14 14
++#define MCS_15 15
++#define MCS_16 16 // 3*3
++#define MCS_17 17
++#define MCS_18 18
++#define MCS_19 19
++#define MCS_20 20
++#define MCS_21 21
++#define MCS_22 22
++#define MCS_23 23
++#define MCS_32 32
++#define MCS_AUTO 33
++
++#ifdef DOT11_N_SUPPORT
++// OID_HTPHYMODE
++// MODE
++#define HTMODE_MM 0
++#define HTMODE_GF 1
++#endif // DOT11_N_SUPPORT //
++
++// Fixed Tx MODE - HT, CCK or OFDM
++#define FIXED_TXMODE_HT 0
++#define FIXED_TXMODE_CCK 1
++#define FIXED_TXMODE_OFDM 2
++// BW
++#define BW_20 BAND_WIDTH_20
++#define BW_40 BAND_WIDTH_40
++#define BW_BOTH BAND_WIDTH_BOTH
++#define BW_10 BAND_WIDTH_10 // 802.11j has 10MHz. This definition is for internal usage. doesn't fill in the IE or other field.
++
++#ifdef DOT11_N_SUPPORT
++// SHORTGI
++#define GI_400 GAP_INTERVAL_400 // only support in HT mode
++#define GI_BOTH GAP_INTERVAL_BOTH
++#endif // DOT11_N_SUPPORT //
++#define GI_800 GAP_INTERVAL_800
++// STBC
++#define STBC_NONE 0
++#ifdef DOT11_N_SUPPORT
++#define STBC_USE 1 // limited use in rt2860b phy
++#define RXSTBC_ONE 1 // rx support of one spatial stream
++#define RXSTBC_TWO 2 // rx support of 1 and 2 spatial stream
++#define RXSTBC_THR 3 // rx support of 1~3 spatial stream
++// MCS FEEDBACK
++#define MCSFBK_NONE 0 // not support mcs feedback /
++#define MCSFBK_RSV 1 // reserved
++#define MCSFBK_UNSOLICIT 2 // only support unsolict mcs feedback
++#define MCSFBK_MRQ 3 // response to both MRQ and unsolict mcs feedback
++
++// MIMO power safe
++#define MMPS_STATIC 0
++#define MMPS_DYNAMIC 1
++#define MMPS_RSV 2
++#define MMPS_ENABLE 3
++
++
++// A-MSDU size
++#define AMSDU_0 0
++#define AMSDU_1 1
++
++#endif // DOT11_N_SUPPORT //
++
++// MCS use 7 bits
++#define TXRATEMIMO 0x80
++#define TXRATEMCS 0x7F
++#define TXRATEOFDM 0x7F
++#define RATE_1 0
++#define RATE_2 1
++#define RATE_5_5 2
++#define RATE_11 3
++#define RATE_6 4 // OFDM
++#define RATE_9 5 // OFDM
++#define RATE_12 6 // OFDM
++#define RATE_18 7 // OFDM
++#define RATE_24 8 // OFDM
++#define RATE_36 9 // OFDM
++#define RATE_48 10 // OFDM
++#define RATE_54 11 // OFDM
++#define RATE_FIRST_OFDM_RATE RATE_6
++#define RATE_LAST_OFDM_RATE RATE_54
++#define RATE_6_5 12 // HT mix
++#define RATE_13 13 // HT mix
++#define RATE_19_5 14 // HT mix
++#define RATE_26 15 // HT mix
++#define RATE_39 16 // HT mix
++#define RATE_52 17 // HT mix
++#define RATE_58_5 18 // HT mix
++#define RATE_65 19 // HT mix
++#define RATE_78 20 // HT mix
++#define RATE_104 21 // HT mix
++#define RATE_117 22 // HT mix
++#define RATE_130 23 // HT mix
++//#define RATE_AUTO_SWITCH 255 // for StaCfg.FixedTxRate only
++#define HTRATE_0 12
++#define RATE_FIRST_MM_RATE HTRATE_0
++#define RATE_FIRST_HT_RATE HTRATE_0
++#define RATE_LAST_HT_RATE HTRATE_0
++
++// pTxWI->txop
++#define IFS_HTTXOP 0 // The txop will be handles by ASIC.
++#define IFS_PIFS 1
++#define IFS_SIFS 2
++#define IFS_BACKOFF 3
++
++// pTxD->RetryMode
++#define LONG_RETRY 1
++#define SHORT_RETRY 0
++
++// Country Region definition
++#define REGION_MINIMUM_BG_BAND 0
++#define REGION_0_BG_BAND 0 // 1-11
++#define REGION_1_BG_BAND 1 // 1-13
++#define REGION_2_BG_BAND 2 // 10-11
++#define REGION_3_BG_BAND 3 // 10-13
++#define REGION_4_BG_BAND 4 // 14
++#define REGION_5_BG_BAND 5 // 1-14
++#define REGION_6_BG_BAND 6 // 3-9
++#define REGION_7_BG_BAND 7 // 5-13
++#define REGION_31_BG_BAND 31 // 5-13
++#define REGION_MAXIMUM_BG_BAND 7
++
++#define REGION_MINIMUM_A_BAND 0
++#define REGION_0_A_BAND 0 // 36, 40, 44, 48, 52, 56, 60, 64, 149, 153, 157, 161, 165
++#define REGION_1_A_BAND 1 // 36, 40, 44, 48, 52, 56, 60, 64, 100, 104, 108, 112, 116, 120, 124, 128, 132, 136, 140
++#define REGION_2_A_BAND 2 // 36, 40, 44, 48, 52, 56, 60, 64
++#define REGION_3_A_BAND 3 // 52, 56, 60, 64, 149, 153, 157, 161
++#define REGION_4_A_BAND 4 // 149, 153, 157, 161, 165
++#define REGION_5_A_BAND 5 // 149, 153, 157, 161
++#define REGION_6_A_BAND 6 // 36, 40, 44, 48
++#define REGION_7_A_BAND 7 // 36, 40, 44, 48, 52, 56, 60, 64, 100, 104, 108, 112, 116, 120, 124, 128, 132, 136, 140, 149, 153, 157, 161, 165
++#define REGION_8_A_BAND 8 // 52, 56, 60, 64
++#define REGION_9_A_BAND 9 // 36, 40, 44, 48, 52, 56, 60, 64, 100, 104, 108, 112, 116, 132, 136, 140, 149, 153, 157, 161, 165
++#define REGION_10_A_BAND 10 // 36, 40, 44, 48, 149, 153, 157, 161, 165
++#define REGION_11_A_BAND 11 // 36, 40, 44, 48, 52, 56, 60, 64, 100, 104, 108, 112, 116, 120, 149, 153, 157, 161
++#define REGION_MAXIMUM_A_BAND 11
++
++// pTxD->CipherAlg
++#define CIPHER_NONE 0
++#define CIPHER_WEP64 1
++#define CIPHER_WEP128 2
++#define CIPHER_TKIP 3
++#define CIPHER_AES 4
++#define CIPHER_CKIP64 5
++#define CIPHER_CKIP128 6
++#define CIPHER_TKIP_NO_MIC 7 // MIC appended by driver: not a valid value in hardware key table
++#define CIPHER_SMS4 8
++
++// value domain of pAd->RfIcType
++#define RFIC_2820 1 // 2.4G 2T3R
++#define RFIC_2850 2 // 2.4G/5G 2T3R
++#define RFIC_2720 3 // 2.4G 1T2R
++#define RFIC_2750 4 // 2.4G/5G 1T2R
++#define RFIC_3020 5 // 2.4G 1T1R
++#define RFIC_2020 6 // 2.4G B/G
++
++// LED Status.
++#define LED_LINK_DOWN 0
++#define LED_LINK_UP 1
++#define LED_RADIO_OFF 2
++#define LED_RADIO_ON 3
++#define LED_HALT 4
++#define LED_WPS 5
++#define LED_ON_SITE_SURVEY 6
++#define LED_POWER_UP 7
++
++// value domain of pAd->LedCntl.LedMode and E2PROM
++#define LED_MODE_DEFAULT 0
++#define LED_MODE_TWO_LED 1
++#define LED_MODE_SIGNAL_STREGTH 8 // EEPROM define =8
++
++// RC4 init value, used fro WEP & TKIP
++#define PPPINITFCS32 0xffffffff /* Initial FCS value */
++
++// value domain of pAd->StaCfg.PortSecured. 802.1X controlled port definition
++#define WPA_802_1X_PORT_SECURED 1
++#define WPA_802_1X_PORT_NOT_SECURED 2
++
++#define PAIRWISE_KEY 1
++#define GROUP_KEY 2
++
++//definition of DRS
++#define MAX_STEP_OF_TX_RATE_SWITCH 32
++
++
++// pre-allocated free NDIS PACKET/BUFFER poll for internal usage
++#define MAX_NUM_OF_FREE_NDIS_PACKET 128
++
++//Block ACK
++#define MAX_TX_REORDERBUF 64
++#define MAX_RX_REORDERBUF 64
++#define DEFAULT_TX_TIMEOUT 30
++#define DEFAULT_RX_TIMEOUT 30
++
++// definition of Recipient or Originator
++#define I_RECIPIENT TRUE
++#define I_ORIGINATOR FALSE
++
++#define DEFAULT_BBP_TX_POWER 0
++#define DEFAULT_RF_TX_POWER 5
++
++#define MAX_INI_BUFFER_SIZE 4096
++#define MAX_PARAM_BUFFER_SIZE (2048) // enough for ACL (18*64)
++ //18 : the length of Mac address acceptable format "01:02:03:04:05:06;")
++ //64 : MAX_NUM_OF_ACL_LIST
++// definition of pAd->OpMode
++#define OPMODE_STA 0
++#define OPMODE_AP 1
++//#define OPMODE_L3_BRG 2 // as AP and STA at the same time
++
++#ifdef RT_BIG_ENDIAN
++#define DIR_READ 0
++#define DIR_WRITE 1
++#define TYPE_TXD 0
++#define TYPE_RXD 1
++#define TYPE_TXINFO 0
++#define TYPE_RXINFO 1
++#define TYPE_TXWI 0
++#define TYPE_RXWI 1
++#endif
++
++// ========================= AP rtmp_def.h ===========================
++// value domain for pAd->EventTab.Log[].Event
++#define EVENT_RESET_ACCESS_POINT 0 // Log = "hh:mm:ss Restart Access Point"
++#define EVENT_ASSOCIATED 1 // Log = "hh:mm:ss STA 00:01:02:03:04:05 associated"
++#define EVENT_DISASSOCIATED 2 // Log = "hh:mm:ss STA 00:01:02:03:04:05 left this BSS"
++#define EVENT_AGED_OUT 3 // Log = "hh:mm:ss STA 00:01:02:03:04:05 was aged-out and removed from this BSS"
++#define EVENT_COUNTER_M 4
++#define EVENT_INVALID_PSK 5
++#define EVENT_MAX_EVENT_TYPE 6
++// ==== end of AP rtmp_def.h ============
++
++// definition RSSI Number
++#define RSSI_0 0
++#define RSSI_1 1
++#define RSSI_2 2
++
++// definition of radar detection
++#define RD_NORMAL_MODE 0 // Not found radar signal
++#define RD_SWITCHING_MODE 1 // Found radar signal, and doing channel switch
++#define RD_SILENCE_MODE 2 // After channel switch, need to be silence a while to ensure radar not found
++
++//Driver defined cid for mapping status and command.
++#define SLEEPCID 0x11
++#define WAKECID 0x22
++#define QUERYPOWERCID 0x33
++#define OWNERMCU 0x1
++#define OWNERCPU 0x0
++
++// MBSSID definition
++#define ENTRY_NOT_FOUND 0xFF
++
++
++/* After Linux 2.6.9,
++ * VLAN module use Private (from user) interface flags (netdevice->priv_flags).
++ * #define IFF_802_1Q_VLAN 0x1 -- 802.1Q VLAN device. in if.h
++ * ref to ip_sabotage_out() [ out->priv_flags & IFF_802_1Q_VLAN ] in br_netfilter.c
++ *
++ * For this reason, we MUST use EVEN value in priv_flags
++ */
++#define INT_MAIN 0x0100
++#define INT_MBSSID 0x0200
++#define INT_WDS 0x0300
++#define INT_APCLI 0x0400
++#define INT_MESH 0x0500
++
++// Use bitmap to allow coexist of ATE_TXFRAME and ATE_RXFRAME(i.e.,to support LoopBack mode)
++#ifdef RALINK_ATE
++#define ATE_START 0x00 // Start ATE
++#define ATE_STOP 0x80 // Stop ATE
++#define ATE_TXCONT 0x05 // Continuous Transmit
++#define ATE_TXCARR 0x09 // Transmit Carrier
++#define ATE_TXCARRSUPP 0x11 // Transmit Carrier Suppression
++#define ATE_TXFRAME 0x01 // Transmit Frames
++#define ATE_RXFRAME 0x02 // Receive Frames
++#ifdef RALINK_28xx_QA
++#define ATE_TXSTOP 0xe2 // Stop Transmition(i.e., TXCONT, TXCARR, TXCARRSUPP, and TXFRAME)
++#define ATE_RXSTOP 0xfd // Stop receiving Frames
++#define BBP22_TXFRAME 0x00 // Transmit Frames
++#define BBP22_TXCONT_OR_CARRSUPP 0x80 // Continuous Transmit or Carrier Suppression
++#define BBP22_TXCARR 0xc1 // Transmit Carrier
++#define BBP24_TXCONT 0x00 // Continuous Transmit
++#define BBP24_CARRSUPP 0x01 // Carrier Suppression
++#endif // RALINK_28xx_QA //
++#endif // RALINK_ATE //
++
++// WEP Key TYPE
++#define WEP_HEXADECIMAL_TYPE 0
++#define WEP_ASCII_TYPE 1
++
++
++
++// WIRELESS EVENTS definition
++/* Max number of char in custom event, refer to wireless_tools.28/wireless.20.h */
++#define IW_CUSTOM_MAX_LEN 255 /* In bytes */
++
++// For system event - start
++#define IW_SYS_EVENT_FLAG_START 0x0200
++#define IW_ASSOC_EVENT_FLAG 0x0200
++#define IW_DISASSOC_EVENT_FLAG 0x0201
++#define IW_DEAUTH_EVENT_FLAG 0x0202
++#define IW_AGEOUT_EVENT_FLAG 0x0203
++#define IW_COUNTER_MEASURES_EVENT_FLAG 0x0204
++#define IW_REPLAY_COUNTER_DIFF_EVENT_FLAG 0x0205
++#define IW_RSNIE_DIFF_EVENT_FLAG 0x0206
++#define IW_MIC_DIFF_EVENT_FLAG 0x0207
++#define IW_ICV_ERROR_EVENT_FLAG 0x0208
++#define IW_MIC_ERROR_EVENT_FLAG 0x0209
++#define IW_GROUP_HS_TIMEOUT_EVENT_FLAG 0x020A
++#define IW_PAIRWISE_HS_TIMEOUT_EVENT_FLAG 0x020B
++#define IW_RSNIE_SANITY_FAIL_EVENT_FLAG 0x020C
++#define IW_SET_KEY_DONE_WPA1_EVENT_FLAG 0x020D
++#define IW_SET_KEY_DONE_WPA2_EVENT_FLAG 0x020E
++#define IW_STA_LINKUP_EVENT_FLAG 0x020F
++#define IW_STA_LINKDOWN_EVENT_FLAG 0x0210
++#define IW_SCAN_COMPLETED_EVENT_FLAG 0x0211
++#define IW_SCAN_ENQUEUE_FAIL_EVENT_FLAG 0x0212
++// if add new system event flag, please upadte the IW_SYS_EVENT_FLAG_END
++#define IW_SYS_EVENT_FLAG_END 0x0212
++#define IW_SYS_EVENT_TYPE_NUM (IW_SYS_EVENT_FLAG_END - IW_SYS_EVENT_FLAG_START + 1)
++// For system event - end
++
++// For spoof attack event - start
++#define IW_SPOOF_EVENT_FLAG_START 0x0300
++#define IW_CONFLICT_SSID_EVENT_FLAG 0x0300
++#define IW_SPOOF_ASSOC_RESP_EVENT_FLAG 0x0301
++#define IW_SPOOF_REASSOC_RESP_EVENT_FLAG 0x0302
++#define IW_SPOOF_PROBE_RESP_EVENT_FLAG 0x0303
++#define IW_SPOOF_BEACON_EVENT_FLAG 0x0304
++#define IW_SPOOF_DISASSOC_EVENT_FLAG 0x0305
++#define IW_SPOOF_AUTH_EVENT_FLAG 0x0306
++#define IW_SPOOF_DEAUTH_EVENT_FLAG 0x0307
++#define IW_SPOOF_UNKNOWN_MGMT_EVENT_FLAG 0x0308
++#define IW_REPLAY_ATTACK_EVENT_FLAG 0x0309
++// if add new spoof attack event flag, please upadte the IW_SPOOF_EVENT_FLAG_END
++#define IW_SPOOF_EVENT_FLAG_END 0x0309
++#define IW_SPOOF_EVENT_TYPE_NUM (IW_SPOOF_EVENT_FLAG_END - IW_SPOOF_EVENT_FLAG_START + 1)
++// For spoof attack event - end
++
++// For flooding attack event - start
++#define IW_FLOOD_EVENT_FLAG_START 0x0400
++#define IW_FLOOD_AUTH_EVENT_FLAG 0x0400
++#define IW_FLOOD_ASSOC_REQ_EVENT_FLAG 0x0401
++#define IW_FLOOD_REASSOC_REQ_EVENT_FLAG 0x0402
++#define IW_FLOOD_PROBE_REQ_EVENT_FLAG 0x0403
++#define IW_FLOOD_DISASSOC_EVENT_FLAG 0x0404
++#define IW_FLOOD_DEAUTH_EVENT_FLAG 0x0405
++#define IW_FLOOD_EAP_REQ_EVENT_FLAG 0x0406
++// if add new flooding attack event flag, please upadte the IW_FLOOD_EVENT_FLAG_END
++#define IW_FLOOD_EVENT_FLAG_END 0x0406
++#define IW_FLOOD_EVENT_TYPE_NUM (IW_FLOOD_EVENT_FLAG_END - IW_FLOOD_EVENT_FLAG_START + 1)
++// For flooding attack - end
++
++// End - WIRELESS EVENTS definition
++
++#ifdef CONFIG_STA_SUPPORT
++// definition for DLS, kathy
++#define MAX_NUM_OF_INIT_DLS_ENTRY 1
++#define MAX_NUM_OF_DLS_ENTRY MAX_NUMBER_OF_DLS_ENTRY
++
++//Block ACK , rt2860, kathy
++#define MAX_TX_REORDERBUF 64
++#define MAX_RX_REORDERBUF 64
++#define DEFAULT_TX_TIMEOUT 30
++#define DEFAULT_RX_TIMEOUT 30
++#ifndef CONFIG_AP_SUPPORT
++#define MAX_BARECI_SESSION 8
++#endif
++
++#ifndef IW_ESSID_MAX_SIZE
++/* Maximum size of the ESSID and pAd->nickname strings */
++#define IW_ESSID_MAX_SIZE 32
++#endif
++#endif // CONFIG_STA_SUPPORT //
++
++#ifdef MCAST_RATE_SPECIFIC
++#define MCAST_DISABLE 0
++#define MCAST_CCK 1
++#define MCAST_OFDM 2
++#define MCAST_HTMIX 3
++#endif // MCAST_RATE_SPECIFIC //
++
++// For AsicRadioOff/AsicRadioOn function
++#define DOT11POWERSAVE 0
++#define GUIRADIO_OFF 1
++#define RTMP_HALT 2
++#define GUI_IDLE_POWER_SAVE 3
++// --
++
++
++// definition for WpaSupport flag
++#define WPA_SUPPLICANT_DISABLE 0
++#define WPA_SUPPLICANT_ENABLE 1
++#define WPA_SUPPLICANT_ENABLE_WITH_WEB_UI 2
++
++// Endian byte swapping codes
++#define SWAP16(x) \
++ ((UINT16)( \
++ (((UINT16)(x) & (UINT16) 0x00ffU) << 8) | \
++ (((UINT16)(x) & (UINT16) 0xff00U) >> 8) ))
++
++#define SWAP32(x) \
++ ((UINT32)( \
++ (((UINT32)(x) & (UINT32) 0x000000ffUL) << 24) | \
++ (((UINT32)(x) & (UINT32) 0x0000ff00UL) << 8) | \
++ (((UINT32)(x) & (UINT32) 0x00ff0000UL) >> 8) | \
++ (((UINT32)(x) & (UINT32) 0xff000000UL) >> 24) ))
++
++#define SWAP64(x) \
++ ((UINT64)( \
++ (UINT64)(((UINT64)(x) & (UINT64) 0x00000000000000ffULL) << 56) | \
++ (UINT64)(((UINT64)(x) & (UINT64) 0x000000000000ff00ULL) << 40) | \
++ (UINT64)(((UINT64)(x) & (UINT64) 0x0000000000ff0000ULL) << 24) | \
++ (UINT64)(((UINT64)(x) & (UINT64) 0x00000000ff000000ULL) << 8) | \
++ (UINT64)(((UINT64)(x) & (UINT64) 0x000000ff00000000ULL) >> 8) | \
++ (UINT64)(((UINT64)(x) & (UINT64) 0x0000ff0000000000ULL) >> 24) | \
++ (UINT64)(((UINT64)(x) & (UINT64) 0x00ff000000000000ULL) >> 40) | \
++ (UINT64)(((UINT64)(x) & (UINT64) 0xff00000000000000ULL) >> 56) ))
++
++#ifdef RT_BIG_ENDIAN
++
++#define cpu2le64(x) SWAP64((x))
++#define le2cpu64(x) SWAP64((x))
++#define cpu2le32(x) SWAP32((x))
++#define le2cpu32(x) SWAP32((x))
++#define cpu2le16(x) SWAP16((x))
++#define le2cpu16(x) SWAP16((x))
++#define cpu2be64(x) ((UINT64)(x))
++#define be2cpu64(x) ((UINT64)(x))
++#define cpu2be32(x) ((UINT32)(x))
++#define be2cpu32(x) ((UINT32)(x))
++#define cpu2be16(x) ((UINT16)(x))
++#define be2cpu16(x) ((UINT16)(x))
++
++#else // Little_Endian
++
++#define cpu2le64(x) ((UINT64)(x))
++#define le2cpu64(x) ((UINT64)(x))
++#define cpu2le32(x) ((UINT32)(x))
++#define le2cpu32(x) ((UINT32)(x))
++#define cpu2le16(x) ((UINT16)(x))
++#define le2cpu16(x) ((UINT16)(x))
++#define cpu2be64(x) SWAP64((x))
++#define be2cpu64(x) SWAP64((x))
++#define cpu2be32(x) SWAP32((x))
++#define be2cpu32(x) SWAP32((x))
++#define cpu2be16(x) SWAP16((x))
++#define be2cpu16(x) SWAP16((x))
++
++#endif // RT_BIG_ENDIAN
++
++#endif // __RTMP_DEF_H__
++
++
+--- /dev/null
++++ b/drivers/staging/rt2870/rtmp.h
+@@ -0,0 +1,7586 @@
++/*
++ *************************************************************************
++ * Ralink Tech Inc.
++ * 5F., No.36, Taiyuan St., Jhubei City,
++ * Hsinchu County 302,
++ * Taiwan, R.O.C.
++ *
++ * (c) Copyright 2002-2007, Ralink Technology, Inc.
++ *
++ * This program is free software; you can redistribute it and/or modify *
++ * it under the terms of the GNU General Public License as published by *
++ * the Free Software Foundation; either version 2 of the License, or *
++ * (at your option) any later version. *
++ * *
++ * This program is distributed in the hope that it will be useful, *
++ * but WITHOUT ANY WARRANTY; without even the implied warranty of *
++ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the *
++ * GNU General Public License for more details. *
++ * *
++ * You should have received a copy of the GNU General Public License *
++ * along with this program; if not, write to the *
++ * Free Software Foundation, Inc., *
++ * 59 Temple Place - Suite 330, Boston, MA 02111-1307, USA. *
++ * *
++ *************************************************************************
++
++ Module Name:
++ rtmp.h
++
++ Abstract:
++ Miniport generic portion header file
++
++ Revision History:
++ Who When What
++ -------- ---------- ----------------------------------------------
++ Paul Lin 2002-08-01 created
++ James Tan 2002-09-06 modified (Revise NTCRegTable)
++ John Chang 2004-09-06 modified for RT2600
++*/
++#ifndef __RTMP_H__
++#define __RTMP_H__
++
++#include "link_list.h"
++#include "spectrum_def.h"
++
++
++#ifdef CONFIG_STA_SUPPORT
++#include "aironet.h"
++#endif // CONFIG_STA_SUPPORT //
++
++//#define DBG 1
++
++//#define DBG_DIAGNOSE 1
++
++#if defined(CONFIG_AP_SUPPORT) && defined(CONFIG_STA_SUPPORT)
++#define IF_DEV_CONFIG_OPMODE_ON_AP(_pAd) if(_pAd->OpMode == OPMODE_AP)
++#define IF_DEV_CONFIG_OPMODE_ON_STA(_pAd) if(_pAd->OpMode == OPMODE_STA)
++#else
++#define IF_DEV_CONFIG_OPMODE_ON_AP(_pAd)
++#define IF_DEV_CONFIG_OPMODE_ON_STA(_pAd)
++#endif
++
++#define VIRTUAL_IF_INC(__pAd) ((__pAd)->VirtualIfCnt++)
++#define VIRTUAL_IF_DEC(__pAd) ((__pAd)->VirtualIfCnt--)
++#define VIRTUAL_IF_NUM(__pAd) ((__pAd)->VirtualIfCnt)
++
++#ifdef RT2870
++////////////////////////////////////////////////////////////////////////////
++// The TX_BUFFER structure forms the transmitted USB packet to the device
++////////////////////////////////////////////////////////////////////////////
++typedef struct __TX_BUFFER{
++ union {
++ UCHAR WirelessPacket[TX_BUFFER_NORMSIZE];
++ HEADER_802_11 NullFrame;
++ PSPOLL_FRAME PsPollPacket;
++ RTS_FRAME RTSFrame;
++ }field;
++ UCHAR Aggregation[4]; //Buffer for save Aggregation size.
++} TX_BUFFER, *PTX_BUFFER;
++
++typedef struct __HTTX_BUFFER{
++ union {
++ UCHAR WirelessPacket[MAX_TXBULK_SIZE];
++ HEADER_802_11 NullFrame;
++ PSPOLL_FRAME PsPollPacket;
++ RTS_FRAME RTSFrame;
++ }field;
++ UCHAR Aggregation[4]; //Buffer for save Aggregation size.
++} HTTX_BUFFER, *PHTTX_BUFFER;
++
++
++// used to track driver-generated write irps
++typedef struct _TX_CONTEXT
++{
++ PVOID pAd; //Initialized in MiniportInitialize
++ PURB pUrb; //Initialized in MiniportInitialize
++ PIRP pIrp; //used to cancel pending bulk out.
++ //Initialized in MiniportInitialize
++ PTX_BUFFER TransferBuffer; //Initialized in MiniportInitialize
++ ULONG BulkOutSize;
++ UCHAR BulkOutPipeId;
++ UCHAR SelfIdx;
++ BOOLEAN InUse;
++ BOOLEAN bWaitingBulkOut; // at least one packet is in this TxContext, ready for making IRP anytime.
++ BOOLEAN bFullForBulkOut; // all tx buffer are full , so waiting for tx bulkout.
++ BOOLEAN IRPPending;
++ BOOLEAN LastOne;
++ BOOLEAN bAggregatible;
++ UCHAR Header_802_3[LENGTH_802_3];
++ UCHAR Rsv[2];
++ ULONG DataOffset;
++ UINT TxRate;
++ dma_addr_t data_dma; // urb dma on linux
++
++} TX_CONTEXT, *PTX_CONTEXT, **PPTX_CONTEXT;
++
++
++// used to track driver-generated write irps
++typedef struct _HT_TX_CONTEXT
++{
++ PVOID pAd; //Initialized in MiniportInitialize
++ PURB pUrb; //Initialized in MiniportInitialize
++ PIRP pIrp; //used to cancel pending bulk out.
++ //Initialized in MiniportInitialize
++ PHTTX_BUFFER TransferBuffer; //Initialized in MiniportInitialize
++ ULONG BulkOutSize; // Indicate the total bulk-out size in bytes in one bulk-transmission
++ UCHAR BulkOutPipeId;
++ BOOLEAN IRPPending;
++ BOOLEAN LastOne;
++ BOOLEAN bCurWriting;
++ BOOLEAN bRingEmpty;
++ BOOLEAN bCopySavePad;
++ UCHAR SavedPad[8];
++ UCHAR Header_802_3[LENGTH_802_3];
++ ULONG CurWritePosition; // Indicate the buffer offset which packet will be inserted start from.
++ ULONG CurWriteRealPos; // Indicate the buffer offset which packet now are writing to.
++ ULONG NextBulkOutPosition; // Indicate the buffer start offset of a bulk-transmission
++ ULONG ENextBulkOutPosition; // Indicate the buffer end offset of a bulk-transmission
++ UINT TxRate;
++ dma_addr_t data_dma; // urb dma on linux
++} HT_TX_CONTEXT, *PHT_TX_CONTEXT, **PPHT_TX_CONTEXT;
++
++
++//
++// Structure to keep track of receive packets and buffers to indicate
++// receive data to the protocol.
++//
++typedef struct _RX_CONTEXT
++{
++ PUCHAR TransferBuffer;
++ PVOID pAd;
++ PIRP pIrp;//used to cancel pending bulk in.
++ PURB pUrb;
++ //These 2 Boolean shouldn't both be 1 at the same time.
++ ULONG BulkInOffset; // number of packets waiting for reordering .
++// BOOLEAN ReorderInUse; // At least one packet in this buffer are in reordering buffer and wait for receive indication
++ BOOLEAN bRxHandling; // Notify this packet is being process now.
++ BOOLEAN InUse; // USB Hardware Occupied. Wait for USB HW to put packet.
++ BOOLEAN Readable; // Receive Complete back. OK for driver to indicate receiving packet.
++ BOOLEAN IRPPending; // TODO: To be removed
++ atomic_t IrpLock;
++ NDIS_SPIN_LOCK RxContextLock;
++ dma_addr_t data_dma; // urb dma on linux
++} RX_CONTEXT, *PRX_CONTEXT;
++#endif // RT2870 //
++
++
++//
++// NDIS Version definitions
++//
++#ifdef NDIS50_MINIPORT
++#define RTMP_NDIS_MAJOR_VERSION 5
++#define RTMP_NDIS_MINOR_VERSION 0
++#endif
++
++#ifdef NDIS51_MINIPORT
++#define RTMP_NDIS_MAJOR_VERSION 5
++#define RTMP_NDIS_MINOR_VERSION 1
++#endif
++
++extern char NIC_VENDOR_DESC[];
++extern int NIC_VENDOR_DESC_LEN;
++
++extern unsigned char SNAP_AIRONET[];
++extern unsigned char CipherSuiteCiscoCCKM[];
++extern unsigned char CipherSuiteCiscoCCKMLen;
++extern unsigned char CipherSuiteCiscoCCKM24[];
++extern unsigned char CipherSuiteCiscoCCKM24Len;
++extern unsigned char CipherSuiteCCXTkip[];
++extern unsigned char CipherSuiteCCXTkipLen;
++extern unsigned char CISCO_OUI[];
++extern UCHAR BaSizeArray[4];
++
++extern UCHAR BROADCAST_ADDR[MAC_ADDR_LEN];
++extern UCHAR MULTICAST_ADDR[MAC_ADDR_LEN];
++extern UCHAR ZERO_MAC_ADDR[MAC_ADDR_LEN];
++extern ULONG BIT32[32];
++extern UCHAR BIT8[8];
++extern char* CipherName[];
++extern char* MCSToMbps[];
++extern UCHAR RxwiMCSToOfdmRate[12];
++extern UCHAR SNAP_802_1H[6];
++extern UCHAR SNAP_BRIDGE_TUNNEL[6];
++extern UCHAR SNAP_AIRONET[8];
++extern UCHAR CKIP_LLC_SNAP[8];
++extern UCHAR EAPOL_LLC_SNAP[8];
++extern UCHAR EAPOL[2];
++extern UCHAR IPX[2];
++extern UCHAR APPLE_TALK[2];
++extern UCHAR RateIdToPlcpSignal[12]; // see IEEE802.11a-1999 p.14
++extern UCHAR OfdmRateToRxwiMCS[];
++extern UCHAR OfdmSignalToRateId[16] ;
++extern UCHAR default_cwmin[4];
++extern UCHAR default_cwmax[4];
++extern UCHAR default_sta_aifsn[4];
++extern UCHAR MapUserPriorityToAccessCategory[8];
++
++extern USHORT RateUpPER[];
++extern USHORT RateDownPER[];
++extern UCHAR Phy11BNextRateDownward[];
++extern UCHAR Phy11BNextRateUpward[];
++extern UCHAR Phy11BGNextRateDownward[];
++extern UCHAR Phy11BGNextRateUpward[];
++extern UCHAR Phy11ANextRateDownward[];
++extern UCHAR Phy11ANextRateUpward[];
++extern CHAR RssiSafeLevelForTxRate[];
++extern UCHAR RateIdToMbps[];
++extern USHORT RateIdTo500Kbps[];
++
++extern UCHAR CipherSuiteWpaNoneTkip[];
++extern UCHAR CipherSuiteWpaNoneTkipLen;
++
++extern UCHAR CipherSuiteWpaNoneAes[];
++extern UCHAR CipherSuiteWpaNoneAesLen;
++
++extern UCHAR SsidIe;
++extern UCHAR SupRateIe;
++extern UCHAR ExtRateIe;
++
++#ifdef DOT11_N_SUPPORT
++extern UCHAR HtCapIe;
++extern UCHAR AddHtInfoIe;
++extern UCHAR NewExtChanIe;
++#ifdef DOT11N_DRAFT3
++extern UCHAR ExtHtCapIe;
++#endif // DOT11N_DRAFT3 //
++#endif // DOT11_N_SUPPORT //
++
++extern UCHAR ErpIe;
++extern UCHAR DsIe;
++extern UCHAR TimIe;
++extern UCHAR WpaIe;
++extern UCHAR Wpa2Ie;
++extern UCHAR IbssIe;
++extern UCHAR Ccx2Ie;
++
++extern UCHAR WPA_OUI[];
++extern UCHAR RSN_OUI[];
++extern UCHAR WME_INFO_ELEM[];
++extern UCHAR WME_PARM_ELEM[];
++extern UCHAR Ccx2QosInfo[];
++extern UCHAR Ccx2IeInfo[];
++extern UCHAR RALINK_OUI[];
++extern UCHAR PowerConstraintIE[];
++
++
++extern UCHAR RateSwitchTable[];
++extern UCHAR RateSwitchTable11B[];
++extern UCHAR RateSwitchTable11G[];
++extern UCHAR RateSwitchTable11BG[];
++
++#ifdef DOT11_N_SUPPORT
++extern UCHAR RateSwitchTable11BGN1S[];
++extern UCHAR RateSwitchTable11BGN2S[];
++extern UCHAR RateSwitchTable11BGN2SForABand[];
++extern UCHAR RateSwitchTable11N1S[];
++extern UCHAR RateSwitchTable11N2S[];
++extern UCHAR RateSwitchTable11N2SForABand[];
++
++#ifdef CONFIG_STA_SUPPORT
++extern UCHAR PRE_N_HT_OUI[];
++#endif // CONFIG_STA_SUPPORT //
++#endif // DOT11_N_SUPPORT //
++
++#define MAXSEQ (0xFFF)
++
++#ifdef RALINK_ATE
++typedef struct _ATE_INFO {
++ UCHAR Mode;
++ CHAR TxPower0;
++ CHAR TxPower1;
++ CHAR TxAntennaSel;
++ CHAR RxAntennaSel;
++ TXWI_STRUC TxWI; // TXWI
++ USHORT QID;
++ UCHAR Addr1[MAC_ADDR_LEN];
++ UCHAR Addr2[MAC_ADDR_LEN];
++ UCHAR Addr3[MAC_ADDR_LEN];
++ UCHAR Channel;
++ UINT32 TxLength;
++ UINT32 TxCount;
++ UINT32 TxDoneCount; // Tx DMA Done
++ UINT32 RFFreqOffset;
++ BOOLEAN bRxFer;
++ BOOLEAN bQATxStart; // Have compiled QA in and use it to ATE tx.
++ BOOLEAN bQARxStart; // Have compiled QA in and use it to ATE rx.
++ UINT32 RxTotalCnt;
++ UINT32 RxCntPerSec;
++
++ CHAR LastSNR0; // last received SNR
++ CHAR LastSNR1; // last received SNR for 2nd antenna
++ CHAR LastRssi0; // last received RSSI
++ CHAR LastRssi1; // last received RSSI for 2nd antenna
++ CHAR LastRssi2; // last received RSSI for 3rd antenna
++ CHAR AvgRssi0; // last 8 frames' average RSSI
++ CHAR AvgRssi1; // last 8 frames' average RSSI
++ CHAR AvgRssi2; // last 8 frames' average RSSI
++ SHORT AvgRssi0X8; // sum of last 8 frames' RSSI
++ SHORT AvgRssi1X8; // sum of last 8 frames' RSSI
++ SHORT AvgRssi2X8; // sum of last 8 frames' RSSI
++
++ UINT32 NumOfAvgRssiSample;
++
++#ifdef RALINK_28xx_QA
++ // Tx frame
++#ifdef RT2870
++ /* not used in RT2860 */
++ TXINFO_STRUC TxInfo; // TxInfo
++#endif // RT2870 //
++ USHORT HLen; // Header Length
++ USHORT PLen; // Pattern Length
++ UCHAR Header[32]; // Header buffer
++ UCHAR Pattern[32]; // Pattern buffer
++ USHORT DLen; // Data Length
++ USHORT seq;
++ UINT32 CID;
++ THREAD_PID AtePid;
++ // counters
++ UINT32 U2M;
++ UINT32 OtherData;
++ UINT32 Beacon;
++ UINT32 OtherCount;
++ UINT32 TxAc0;
++ UINT32 TxAc1;
++ UINT32 TxAc2;
++ UINT32 TxAc3;
++ UINT32 TxHCCA;
++ UINT32 TxMgmt;
++ UINT32 RSSI0;
++ UINT32 RSSI1;
++ UINT32 RSSI2;
++ UINT32 SNR0;
++ UINT32 SNR1;
++ // control
++ //UINT32 Repeat; // Tx Cpu count
++ UCHAR TxStatus; // task Tx status // 0 --> task is idle, 1 --> task is running
++#endif // RALINK_28xx_QA //
++} ATE_INFO, *PATE_INFO;
++
++#ifdef RALINK_28xx_QA
++struct ate_racfghdr {
++ UINT32 magic_no;
++ USHORT command_type;
++ USHORT command_id;
++ USHORT length;
++ USHORT sequence;
++ USHORT status;
++ UCHAR data[2046];
++} __attribute__((packed));
++#endif // RALINK_28xx_QA //
++#endif // RALINK_ATE //
++
++#ifdef DOT11_N_SUPPORT
++struct reordering_mpdu
++{
++ struct reordering_mpdu *next;
++ PNDIS_PACKET pPacket; /* coverted to 802.3 frame */
++ int Sequence; /* sequence number of MPDU */
++ BOOLEAN bAMSDU;
++};
++
++struct reordering_list
++{
++ struct reordering_mpdu *next;
++ int qlen;
++};
++
++struct reordering_mpdu_pool
++{
++ PVOID mem;
++ NDIS_SPIN_LOCK lock;
++ struct reordering_list freelist;
++};
++#endif // DOT11_N_SUPPORT //
++
++typedef struct _RSSI_SAMPLE {
++ CHAR LastRssi0; // last received RSSI
++ CHAR LastRssi1; // last received RSSI
++ CHAR LastRssi2; // last received RSSI
++ CHAR AvgRssi0;
++ CHAR AvgRssi1;
++ CHAR AvgRssi2;
++ SHORT AvgRssi0X8;
++ SHORT AvgRssi1X8;
++ SHORT AvgRssi2X8;
++} RSSI_SAMPLE;
++
++//
++// Queue structure and macros
++//
++typedef struct _QUEUE_ENTRY {
++ struct _QUEUE_ENTRY *Next;
++} QUEUE_ENTRY, *PQUEUE_ENTRY;
++
++// Queue structure
++typedef struct _QUEUE_HEADER {
++ PQUEUE_ENTRY Head;
++ PQUEUE_ENTRY Tail;
++ ULONG Number;
++} QUEUE_HEADER, *PQUEUE_HEADER;
++
++#define InitializeQueueHeader(QueueHeader) \
++{ \
++ (QueueHeader)->Head = (QueueHeader)->Tail = NULL; \
++ (QueueHeader)->Number = 0; \
++}
++
++#define RemoveHeadQueue(QueueHeader) \
++(QueueHeader)->Head; \
++{ \
++ PQUEUE_ENTRY pNext; \
++ if ((QueueHeader)->Head != NULL) \
++ { \
++ pNext = (QueueHeader)->Head->Next; \
++ (QueueHeader)->Head = pNext; \
++ if (pNext == NULL) \
++ (QueueHeader)->Tail = NULL; \
++ (QueueHeader)->Number--; \
++ } \
++}
++
++#define InsertHeadQueue(QueueHeader, QueueEntry) \
++{ \
++ ((PQUEUE_ENTRY)QueueEntry)->Next = (QueueHeader)->Head; \
++ (QueueHeader)->Head = (PQUEUE_ENTRY)(QueueEntry); \
++ if ((QueueHeader)->Tail == NULL) \
++ (QueueHeader)->Tail = (PQUEUE_ENTRY)(QueueEntry); \
++ (QueueHeader)->Number++; \
++}
++
++#define InsertTailQueue(QueueHeader, QueueEntry) \
++{ \
++ ((PQUEUE_ENTRY)QueueEntry)->Next = NULL; \
++ if ((QueueHeader)->Tail) \
++ (QueueHeader)->Tail->Next = (PQUEUE_ENTRY)(QueueEntry); \
++ else \
++ (QueueHeader)->Head = (PQUEUE_ENTRY)(QueueEntry); \
++ (QueueHeader)->Tail = (PQUEUE_ENTRY)(QueueEntry); \
++ (QueueHeader)->Number++; \
++}
++
++//
++// Macros for flag and ref count operations
++//
++#define RTMP_SET_FLAG(_M, _F) ((_M)->Flags |= (_F))
++#define RTMP_CLEAR_FLAG(_M, _F) ((_M)->Flags &= ~(_F))
++#define RTMP_CLEAR_FLAGS(_M) ((_M)->Flags = 0)
++#define RTMP_TEST_FLAG(_M, _F) (((_M)->Flags & (_F)) != 0)
++#define RTMP_TEST_FLAGS(_M, _F) (((_M)->Flags & (_F)) == (_F))
++
++#define OPSTATUS_SET_FLAG(_pAd, _F) ((_pAd)->CommonCfg.OpStatusFlags |= (_F))
++#define OPSTATUS_CLEAR_FLAG(_pAd, _F) ((_pAd)->CommonCfg.OpStatusFlags &= ~(_F))
++#define OPSTATUS_TEST_FLAG(_pAd, _F) (((_pAd)->CommonCfg.OpStatusFlags & (_F)) != 0)
++
++#define CLIENT_STATUS_SET_FLAG(_pEntry,_F) ((_pEntry)->ClientStatusFlags |= (_F))
++#define CLIENT_STATUS_CLEAR_FLAG(_pEntry,_F) ((_pEntry)->ClientStatusFlags &= ~(_F))
++#define CLIENT_STATUS_TEST_FLAG(_pEntry,_F) (((_pEntry)->ClientStatusFlags & (_F)) != 0)
++
++#define RX_FILTER_SET_FLAG(_pAd, _F) ((_pAd)->CommonCfg.PacketFilter |= (_F))
++#define RX_FILTER_CLEAR_FLAG(_pAd, _F) ((_pAd)->CommonCfg.PacketFilter &= ~(_F))
++#define RX_FILTER_TEST_FLAG(_pAd, _F) (((_pAd)->CommonCfg.PacketFilter & (_F)) != 0)
++
++#ifdef CONFIG_STA_SUPPORT
++#define STA_NO_SECURITY_ON(_p) (_p->StaCfg.WepStatus == Ndis802_11EncryptionDisabled)
++#define STA_WEP_ON(_p) (_p->StaCfg.WepStatus == Ndis802_11Encryption1Enabled)
++#define STA_TKIP_ON(_p) (_p->StaCfg.WepStatus == Ndis802_11Encryption2Enabled)
++#define STA_AES_ON(_p) (_p->StaCfg.WepStatus == Ndis802_11Encryption3Enabled)
++
++#define STA_TGN_WIFI_ON(_p) (_p->StaCfg.bTGnWifiTest == TRUE)
++#endif // CONFIG_STA_SUPPORT //
++
++#define CKIP_KP_ON(_p) ((((_p)->StaCfg.CkipFlag) & 0x10) && ((_p)->StaCfg.bCkipCmicOn == TRUE))
++#define CKIP_CMIC_ON(_p) ((((_p)->StaCfg.CkipFlag) & 0x08) && ((_p)->StaCfg.bCkipCmicOn == TRUE))
++
++
++#define INC_RING_INDEX(_idx, _RingSize) \
++{ \
++ (_idx) = (_idx+1) % (_RingSize); \
++}
++
++#define IS_RT3070(_pAd) (((_pAd)->MACVersion & 0xffff0000) == 0x30700000)
++
++#define RING_PACKET_INIT(_TxRing, _idx) \
++{ \
++ _TxRing->Cell[_idx].pNdisPacket = NULL; \
++ _TxRing->Cell[_idx].pNextNdisPacket = NULL; \
++}
++
++#define TXDT_INIT(_TxD) \
++{ \
++ NdisZeroMemory(_TxD, TXD_SIZE); \
++ _TxD->DMADONE = 1; \
++}
++
++//Set last data segment
++#define RING_SET_LASTDS(_TxD, _IsSD0) \
++{ \
++ if (_IsSD0) {_TxD->LastSec0 = 1;} \
++ else {_TxD->LastSec1 = 1;} \
++}
++
++// Increase TxTsc value for next transmission
++// TODO:
++// When i==6, means TSC has done one full cycle, do re-keying stuff follow specs
++// Should send a special event microsoft defined to request re-key
++#define INC_TX_TSC(_tsc) \
++{ \
++ int i=0; \
++ while (++_tsc[i] == 0x0) \
++ { \
++ i++; \
++ if (i == 6) \
++ break; \
++ } \
++}
++
++#ifdef DOT11_N_SUPPORT
++// StaActive.SupportedHtPhy.MCSSet is copied from AP beacon. Don't need to update here.
++#define COPY_HTSETTINGS_FROM_MLME_AUX_TO_ACTIVE_CFG(_pAd) \
++{ \
++ _pAd->StaActive.SupportedHtPhy.ChannelWidth = _pAd->MlmeAux.HtCapability.HtCapInfo.ChannelWidth; \
++ _pAd->StaActive.SupportedHtPhy.MimoPs = _pAd->MlmeAux.HtCapability.HtCapInfo.MimoPs; \
++ _pAd->StaActive.SupportedHtPhy.GF = _pAd->MlmeAux.HtCapability.HtCapInfo.GF; \
++ _pAd->StaActive.SupportedHtPhy.ShortGIfor20 = _pAd->MlmeAux.HtCapability.HtCapInfo.ShortGIfor20; \
++ _pAd->StaActive.SupportedHtPhy.ShortGIfor40 = _pAd->MlmeAux.HtCapability.HtCapInfo.ShortGIfor40; \
++ _pAd->StaActive.SupportedHtPhy.TxSTBC = _pAd->MlmeAux.HtCapability.HtCapInfo.TxSTBC; \
++ _pAd->StaActive.SupportedHtPhy.RxSTBC = _pAd->MlmeAux.HtCapability.HtCapInfo.RxSTBC; \
++ _pAd->StaActive.SupportedHtPhy.ExtChanOffset = _pAd->MlmeAux.AddHtInfo.AddHtInfo.ExtChanOffset; \
++ _pAd->StaActive.SupportedHtPhy.RecomWidth = _pAd->MlmeAux.AddHtInfo.AddHtInfo.RecomWidth; \
++ _pAd->StaActive.SupportedHtPhy.OperaionMode = _pAd->MlmeAux.AddHtInfo.AddHtInfo2.OperaionMode; \
++ _pAd->StaActive.SupportedHtPhy.NonGfPresent = _pAd->MlmeAux.AddHtInfo.AddHtInfo2.NonGfPresent; \
++ NdisMoveMemory((_pAd)->MacTab.Content[BSSID_WCID].HTCapability.MCSSet, (_pAd)->StaActive.SupportedPhyInfo.MCSSet, sizeof(UCHAR) * 16);\
++}
++
++#define COPY_AP_HTSETTINGS_FROM_BEACON(_pAd, _pHtCapability) \
++{ \
++ _pAd->MacTab.Content[BSSID_WCID].AMsduSize = (UCHAR)(_pHtCapability->HtCapInfo.AMsduSize); \
++ _pAd->MacTab.Content[BSSID_WCID].MmpsMode= (UCHAR)(_pHtCapability->HtCapInfo.MimoPs); \
++ _pAd->MacTab.Content[BSSID_WCID].MaxRAmpduFactor = (UCHAR)(_pHtCapability->HtCapParm.MaxRAmpduFactor); \
++}
++#endif // DOT11_N_SUPPORT //
++
++//
++// BBP & RF are using indirect access. Before write any value into it.
++// We have to make sure there is no outstanding command pending via checking busy bit.
++//
++#define MAX_BUSY_COUNT 100 // Number of retry before failing access BBP & RF indirect register
++//
++
++#ifdef RT2870
++#define RTMP_RF_IO_WRITE32(_A, _V) RTUSBWriteRFRegister(_A, _V)
++#define RTMP_BBP_IO_READ8_BY_REG_ID(_A, _I, _pV) RTUSBReadBBPRegister(_A, _I, _pV)
++#define RTMP_BBP_IO_WRITE8_BY_REG_ID(_A, _I, _V) RTUSBWriteBBPRegister(_A, _I, _V)
++
++#define BBP_IO_WRITE8_BY_REG_ID(_A, _I, _V) RTUSBWriteBBPRegister(_A, _I, _V)
++#define BBP_IO_READ8_BY_REG_ID(_A, _I, _pV) RTUSBReadBBPRegister(_A, _I, _pV)
++#endif // RT2870 //
++
++#define MAP_CHANNEL_ID_TO_KHZ(ch, khz) { \
++ switch (ch) \
++ { \
++ case 1: khz = 2412000; break; \
++ case 2: khz = 2417000; break; \
++ case 3: khz = 2422000; break; \
++ case 4: khz = 2427000; break; \
++ case 5: khz = 2432000; break; \
++ case 6: khz = 2437000; break; \
++ case 7: khz = 2442000; break; \
++ case 8: khz = 2447000; break; \
++ case 9: khz = 2452000; break; \
++ case 10: khz = 2457000; break; \
++ case 11: khz = 2462000; break; \
++ case 12: khz = 2467000; break; \
++ case 13: khz = 2472000; break; \
++ case 14: khz = 2484000; break; \
++ case 36: /* UNII */ khz = 5180000; break; \
++ case 40: /* UNII */ khz = 5200000; break; \
++ case 44: /* UNII */ khz = 5220000; break; \
++ case 48: /* UNII */ khz = 5240000; break; \
++ case 52: /* UNII */ khz = 5260000; break; \
++ case 56: /* UNII */ khz = 5280000; break; \
++ case 60: /* UNII */ khz = 5300000; break; \
++ case 64: /* UNII */ khz = 5320000; break; \
++ case 149: /* UNII */ khz = 5745000; break; \
++ case 153: /* UNII */ khz = 5765000; break; \
++ case 157: /* UNII */ khz = 5785000; break; \
++ case 161: /* UNII */ khz = 5805000; break; \
++ case 165: /* UNII */ khz = 5825000; break; \
++ case 100: /* HiperLAN2 */ khz = 5500000; break; \
++ case 104: /* HiperLAN2 */ khz = 5520000; break; \
++ case 108: /* HiperLAN2 */ khz = 5540000; break; \
++ case 112: /* HiperLAN2 */ khz = 5560000; break; \
++ case 116: /* HiperLAN2 */ khz = 5580000; break; \
++ case 120: /* HiperLAN2 */ khz = 5600000; break; \
++ case 124: /* HiperLAN2 */ khz = 5620000; break; \
++ case 128: /* HiperLAN2 */ khz = 5640000; break; \
++ case 132: /* HiperLAN2 */ khz = 5660000; break; \
++ case 136: /* HiperLAN2 */ khz = 5680000; break; \
++ case 140: /* HiperLAN2 */ khz = 5700000; break; \
++ case 34: /* Japan MMAC */ khz = 5170000; break; \
++ case 38: /* Japan MMAC */ khz = 5190000; break; \
++ case 42: /* Japan MMAC */ khz = 5210000; break; \
++ case 46: /* Japan MMAC */ khz = 5230000; break; \
++ case 184: /* Japan */ khz = 4920000; break; \
++ case 188: /* Japan */ khz = 4940000; break; \
++ case 192: /* Japan */ khz = 4960000; break; \
++ case 196: /* Japan */ khz = 4980000; break; \
++ case 208: /* Japan, means J08 */ khz = 5040000; break; \
++ case 212: /* Japan, means J12 */ khz = 5060000; break; \
++ case 216: /* Japan, means J16 */ khz = 5080000; break; \
++ default: khz = 2412000; break; \
++ } \
++ }
++
++#define MAP_KHZ_TO_CHANNEL_ID(khz, ch) { \
++ switch (khz) \
++ { \
++ case 2412000: ch = 1; break; \
++ case 2417000: ch = 2; break; \
++ case 2422000: ch = 3; break; \
++ case 2427000: ch = 4; break; \
++ case 2432000: ch = 5; break; \
++ case 2437000: ch = 6; break; \
++ case 2442000: ch = 7; break; \
++ case 2447000: ch = 8; break; \
++ case 2452000: ch = 9; break; \
++ case 2457000: ch = 10; break; \
++ case 2462000: ch = 11; break; \
++ case 2467000: ch = 12; break; \
++ case 2472000: ch = 13; break; \
++ case 2484000: ch = 14; break; \
++ case 5180000: ch = 36; /* UNII */ break; \
++ case 5200000: ch = 40; /* UNII */ break; \
++ case 5220000: ch = 44; /* UNII */ break; \
++ case 5240000: ch = 48; /* UNII */ break; \
++ case 5260000: ch = 52; /* UNII */ break; \
++ case 5280000: ch = 56; /* UNII */ break; \
++ case 5300000: ch = 60; /* UNII */ break; \
++ case 5320000: ch = 64; /* UNII */ break; \
++ case 5745000: ch = 149; /* UNII */ break; \
++ case 5765000: ch = 153; /* UNII */ break; \
++ case 5785000: ch = 157; /* UNII */ break; \
++ case 5805000: ch = 161; /* UNII */ break; \
++ case 5825000: ch = 165; /* UNII */ break; \
++ case 5500000: ch = 100; /* HiperLAN2 */ break; \
++ case 5520000: ch = 104; /* HiperLAN2 */ break; \
++ case 5540000: ch = 108; /* HiperLAN2 */ break; \
++ case 5560000: ch = 112; /* HiperLAN2 */ break; \
++ case 5580000: ch = 116; /* HiperLAN2 */ break; \
++ case 5600000: ch = 120; /* HiperLAN2 */ break; \
++ case 5620000: ch = 124; /* HiperLAN2 */ break; \
++ case 5640000: ch = 128; /* HiperLAN2 */ break; \
++ case 5660000: ch = 132; /* HiperLAN2 */ break; \
++ case 5680000: ch = 136; /* HiperLAN2 */ break; \
++ case 5700000: ch = 140; /* HiperLAN2 */ break; \
++ case 5170000: ch = 34; /* Japan MMAC */ break; \
++ case 5190000: ch = 38; /* Japan MMAC */ break; \
++ case 5210000: ch = 42; /* Japan MMAC */ break; \
++ case 5230000: ch = 46; /* Japan MMAC */ break; \
++ case 4920000: ch = 184; /* Japan */ break; \
++ case 4940000: ch = 188; /* Japan */ break; \
++ case 4960000: ch = 192; /* Japan */ break; \
++ case 4980000: ch = 196; /* Japan */ break; \
++ case 5040000: ch = 208; /* Japan, means J08 */ break; \
++ case 5060000: ch = 212; /* Japan, means J12 */ break; \
++ case 5080000: ch = 216; /* Japan, means J16 */ break; \
++ default: ch = 1; break; \
++ } \
++ }
++
++//
++// Common fragment list structure - Identical to the scatter gather frag list structure
++//
++//#define RTMP_SCATTER_GATHER_ELEMENT SCATTER_GATHER_ELEMENT
++//#define PRTMP_SCATTER_GATHER_ELEMENT PSCATTER_GATHER_ELEMENT
++#define NIC_MAX_PHYS_BUF_COUNT 8
++
++typedef struct _RTMP_SCATTER_GATHER_ELEMENT {
++ PVOID Address;
++ ULONG Length;
++ PULONG Reserved;
++} RTMP_SCATTER_GATHER_ELEMENT, *PRTMP_SCATTER_GATHER_ELEMENT;
++
++
++typedef struct _RTMP_SCATTER_GATHER_LIST {
++ ULONG NumberOfElements;
++ PULONG Reserved;
++ RTMP_SCATTER_GATHER_ELEMENT Elements[NIC_MAX_PHYS_BUF_COUNT];
++} RTMP_SCATTER_GATHER_LIST, *PRTMP_SCATTER_GATHER_LIST;
++
++//
++// Some utility macros
++//
++#ifndef min
++#define min(_a, _b) (((_a) < (_b)) ? (_a) : (_b))
++#endif
++
++#ifndef max
++#define max(_a, _b) (((_a) > (_b)) ? (_a) : (_b))
++#endif
++
++#define GET_LNA_GAIN(_pAd) ((_pAd->LatchRfRegs.Channel <= 14) ? (_pAd->BLNAGain) : ((_pAd->LatchRfRegs.Channel <= 64) ? (_pAd->ALNAGain0) : ((_pAd->LatchRfRegs.Channel <= 128) ? (_pAd->ALNAGain1) : (_pAd->ALNAGain2))))
++
++#define INC_COUNTER64(Val) (Val.QuadPart++)
++
++#define INFRA_ON(_p) (OPSTATUS_TEST_FLAG(_p, fOP_STATUS_INFRA_ON))
++#define ADHOC_ON(_p) (OPSTATUS_TEST_FLAG(_p, fOP_STATUS_ADHOC_ON))
++#define MONITOR_ON(_p) (((_p)->StaCfg.BssType) == BSS_MONITOR)
++#define IDLE_ON(_p) (!INFRA_ON(_p) && !ADHOC_ON(_p))
++
++// Check LEAP & CCKM flags
++#define LEAP_ON(_p) (((_p)->StaCfg.LeapAuthMode) == CISCO_AuthModeLEAP)
++#define LEAP_CCKM_ON(_p) ((((_p)->StaCfg.LeapAuthMode) == CISCO_AuthModeLEAP) && ((_p)->StaCfg.LeapAuthInfo.CCKM == TRUE))
++
++// if orginal Ethernet frame contains no LLC/SNAP, then an extra LLC/SNAP encap is required
++#define EXTRA_LLCSNAP_ENCAP_FROM_PKT_START(_pBufVA, _pExtraLlcSnapEncap) \
++{ \
++ if (((*(_pBufVA + 12) << 8) + *(_pBufVA + 13)) > 1500) \
++ { \
++ _pExtraLlcSnapEncap = SNAP_802_1H; \
++ if (NdisEqualMemory(IPX, _pBufVA + 12, 2) || \
++ NdisEqualMemory(APPLE_TALK, _pBufVA + 12, 2)) \
++ { \
++ _pExtraLlcSnapEncap = SNAP_BRIDGE_TUNNEL; \
++ } \
++ } \
++ else \
++ { \
++ _pExtraLlcSnapEncap = NULL; \
++ } \
++}
++
++// New Define for new Tx Path.
++#define EXTRA_LLCSNAP_ENCAP_FROM_PKT_OFFSET(_pBufVA, _pExtraLlcSnapEncap) \
++{ \
++ if (((*(_pBufVA) << 8) + *(_pBufVA + 1)) > 1500) \
++ { \
++ _pExtraLlcSnapEncap = SNAP_802_1H; \
++ if (NdisEqualMemory(IPX, _pBufVA, 2) || \
++ NdisEqualMemory(APPLE_TALK, _pBufVA, 2)) \
++ { \
++ _pExtraLlcSnapEncap = SNAP_BRIDGE_TUNNEL; \
++ } \
++ } \
++ else \
++ { \
++ _pExtraLlcSnapEncap = NULL; \
++ } \
++}
++
++
++#define MAKE_802_3_HEADER(_p, _pMac1, _pMac2, _pType) \
++{ \
++ NdisMoveMemory(_p, _pMac1, MAC_ADDR_LEN); \
++ NdisMoveMemory((_p + MAC_ADDR_LEN), _pMac2, MAC_ADDR_LEN); \
++ NdisMoveMemory((_p + MAC_ADDR_LEN * 2), _pType, LENGTH_802_3_TYPE); \
++}
++
++// if pData has no LLC/SNAP (neither RFC1042 nor Bridge tunnel), keep it that way.
++// else if the received frame is LLC/SNAP-encaped IPX or APPLETALK, preserve the LLC/SNAP field
++// else remove the LLC/SNAP field from the result Ethernet frame
++// Patch for WHQL only, which did not turn on Netbios but use IPX within its payload
++// Note:
++// _pData & _DataSize may be altered (remove 8-byte LLC/SNAP) by this MACRO
++// _pRemovedLLCSNAP: pointer to removed LLC/SNAP; NULL is not removed
++#define CONVERT_TO_802_3(_p8023hdr, _pDA, _pSA, _pData, _DataSize, _pRemovedLLCSNAP) \
++{ \
++ char LLC_Len[2]; \
++ \
++ _pRemovedLLCSNAP = NULL; \
++ if (NdisEqualMemory(SNAP_802_1H, _pData, 6) || \
++ NdisEqualMemory(SNAP_BRIDGE_TUNNEL, _pData, 6)) \
++ { \
++ PUCHAR pProto = _pData + 6; \
++ \
++ if ((NdisEqualMemory(IPX, pProto, 2) || NdisEqualMemory(APPLE_TALK, pProto, 2)) && \
++ NdisEqualMemory(SNAP_802_1H, _pData, 6)) \
++ { \
++ LLC_Len[0] = (UCHAR)(_DataSize / 256); \
++ LLC_Len[1] = (UCHAR)(_DataSize % 256); \
++ MAKE_802_3_HEADER(_p8023hdr, _pDA, _pSA, LLC_Len); \
++ } \
++ else \
++ { \
++ MAKE_802_3_HEADER(_p8023hdr, _pDA, _pSA, pProto); \
++ _pRemovedLLCSNAP = _pData; \
++ _DataSize -= LENGTH_802_1_H; \
++ _pData += LENGTH_802_1_H; \
++ } \
++ } \
++ else \
++ { \
++ LLC_Len[0] = (UCHAR)(_DataSize / 256); \
++ LLC_Len[1] = (UCHAR)(_DataSize % 256); \
++ MAKE_802_3_HEADER(_p8023hdr, _pDA, _pSA, LLC_Len); \
++ } \
++}
++
++#define SWITCH_AB( _pAA, _pBB) \
++{ \
++ PVOID pCC; \
++ pCC = _pBB; \
++ _pBB = _pAA; \
++ _pAA = pCC; \
++}
++
++// Enqueue this frame to MLME engine
++// We need to enqueue the whole frame because MLME need to pass data type
++// information from 802.11 header
++#ifdef RT2870
++#define REPORT_MGMT_FRAME_TO_MLME(_pAd, Wcid, _pFrame, _FrameSize, _Rssi0, _Rssi1, _Rssi2, _PlcpSignal) \
++{ \
++ UINT32 High32TSF=0, Low32TSF=0; \
++ MlmeEnqueueForRecv(_pAd, Wcid, High32TSF, Low32TSF, (UCHAR)_Rssi0, (UCHAR)_Rssi1,(UCHAR)_Rssi2,_FrameSize, _pFrame, (UCHAR)_PlcpSignal); \
++}
++#endif // RT2870 //
++
++#define NDIS_QUERY_BUFFER(_NdisBuf, _ppVA, _pBufLen) \
++ NdisQueryBuffer(_NdisBuf, _ppVA, _pBufLen)
++
++#define MAC_ADDR_EQUAL(pAddr1,pAddr2) RTMPEqualMemory((PVOID)(pAddr1), (PVOID)(pAddr2), MAC_ADDR_LEN)
++#define SSID_EQUAL(ssid1, len1, ssid2, len2) ((len1==len2) && (RTMPEqualMemory(ssid1, ssid2, len1)))
++
++//
++// Check if it is Japan W53(ch52,56,60,64) channel.
++//
++#define JapanChannelCheck(channel) ((channel == 52) || (channel == 56) || (channel == 60) || (channel == 64))
++
++#ifdef CONFIG_STA_SUPPORT
++#define STA_PORT_SECURED(_pAd) \
++{ \
++ _pAd->StaCfg.PortSecured = WPA_802_1X_PORT_SECURED; \
++ NdisAcquireSpinLock(&_pAd->MacTabLock); \
++ _pAd->MacTab.Content[BSSID_WCID].PortSecured = _pAd->StaCfg.PortSecured; \
++ NdisReleaseSpinLock(&_pAd->MacTabLock); \
++}
++#endif // CONFIG_STA_SUPPORT //
++
++
++//
++// Register set pair for initialzation register set definition
++//
++typedef struct _RTMP_REG_PAIR
++{
++ ULONG Register;
++ ULONG Value;
++} RTMP_REG_PAIR, *PRTMP_REG_PAIR;
++
++typedef struct _REG_PAIR
++{
++ UCHAR Register;
++ UCHAR Value;
++} REG_PAIR, *PREG_PAIR;
++
++//
++// Register set pair for initialzation register set definition
++//
++typedef struct _RTMP_RF_REGS
++{
++ UCHAR Channel;
++ ULONG R1;
++ ULONG R2;
++ ULONG R3;
++ ULONG R4;
++} RTMP_RF_REGS, *PRTMP_RF_REGS;
++
++typedef struct _FREQUENCY_ITEM {
++ UCHAR Channel;
++ UCHAR N;
++ UCHAR R;
++ UCHAR K;
++} FREQUENCY_ITEM, *PFREQUENCY_ITEM;
++
++//
++// Data buffer for DMA operation, the buffer must be contiguous physical memory
++// Both DMA to / from CPU use the same structure.
++//
++typedef struct _RTMP_DMABUF
++{
++ ULONG AllocSize;
++ PVOID AllocVa; // TxBuf virtual address
++ NDIS_PHYSICAL_ADDRESS AllocPa; // TxBuf physical address
++} RTMP_DMABUF, *PRTMP_DMABUF;
++
++
++typedef union _HEADER_802_11_SEQ{
++#ifdef RT_BIG_ENDIAN
++ struct {
++ USHORT Sequence:12;
++ USHORT Frag:4;
++ } field;
++#else
++ struct {
++ USHORT Frag:4;
++ USHORT Sequence:12;
++ } field;
++#endif
++ USHORT value;
++} HEADER_802_11_SEQ, *PHEADER_802_11_SEQ;
++
++//
++// Data buffer for DMA operation, the buffer must be contiguous physical memory
++// Both DMA to / from CPU use the same structure.
++//
++typedef struct _RTMP_REORDERBUF
++{
++ BOOLEAN IsFull;
++ PVOID AllocVa; // TxBuf virtual address
++ UCHAR Header802_3[14];
++ HEADER_802_11_SEQ Sequence; //support compressed bitmap BA, so no consider fragment in BA
++ UCHAR DataOffset;
++ USHORT Datasize;
++ ULONG AllocSize;
++#ifdef RT2870
++ PUCHAR AllocPa;
++#endif // RT2870 //
++} RTMP_REORDERBUF, *PRTMP_REORDERBUF;
++
++//
++// Control block (Descriptor) for all ring descriptor DMA operation, buffer must be
++// contiguous physical memory. NDIS_PACKET stored the binding Rx packet descriptor
++// which won't be released, driver has to wait until upper layer return the packet
++// before giveing up this rx ring descriptor to ASIC. NDIS_BUFFER is assocaited pair
++// to describe the packet buffer. For Tx, NDIS_PACKET stored the tx packet descriptor
++// which driver should ACK upper layer when the tx is physically done or failed.
++//
++typedef struct _RTMP_DMACB
++{
++ ULONG AllocSize; // Control block size
++ PVOID AllocVa; // Control block virtual address
++ NDIS_PHYSICAL_ADDRESS AllocPa; // Control block physical address
++ PNDIS_PACKET pNdisPacket;
++ PNDIS_PACKET pNextNdisPacket;
++
++ RTMP_DMABUF DmaBuf; // Associated DMA buffer structure
++} RTMP_DMACB, *PRTMP_DMACB;
++
++typedef struct _RTMP_TX_BUF
++{
++ PQUEUE_ENTRY Next;
++ UCHAR Index;
++ ULONG AllocSize; // Control block size
++ PVOID AllocVa; // Control block virtual address
++ NDIS_PHYSICAL_ADDRESS AllocPa; // Control block physical address
++} RTMP_TXBUF, *PRTMP_TXBUF;
++
++typedef struct _RTMP_RX_BUF
++{
++ BOOLEAN InUse;
++ ULONG ByBaRecIndex;
++ RTMP_REORDERBUF MAP_RXBuf[MAX_RX_REORDERBUF];
++} RTMP_RXBUF, *PRTMP_RXBUF;
++typedef struct _RTMP_TX_RING
++{
++ RTMP_DMACB Cell[TX_RING_SIZE];
++ UINT32 TxCpuIdx;
++ UINT32 TxDmaIdx;
++ UINT32 TxSwFreeIdx; // software next free tx index
++} RTMP_TX_RING, *PRTMP_TX_RING;
++
++typedef struct _RTMP_RX_RING
++{
++ RTMP_DMACB Cell[RX_RING_SIZE];
++ UINT32 RxCpuIdx;
++ UINT32 RxDmaIdx;
++ INT32 RxSwReadIdx; // software next read index
++} RTMP_RX_RING, *PRTMP_RX_RING;
++
++typedef struct _RTMP_MGMT_RING
++{
++ RTMP_DMACB Cell[MGMT_RING_SIZE];
++ UINT32 TxCpuIdx;
++ UINT32 TxDmaIdx;
++ UINT32 TxSwFreeIdx; // software next free tx index
++} RTMP_MGMT_RING, *PRTMP_MGMT_RING;
++
++//
++// Statistic counter structure
++//
++typedef struct _COUNTER_802_3
++{
++ // General Stats
++ ULONG GoodTransmits;
++ ULONG GoodReceives;
++ ULONG TxErrors;
++ ULONG RxErrors;
++ ULONG RxNoBuffer;
++
++ // Ethernet Stats
++ ULONG RcvAlignmentErrors;
++ ULONG OneCollision;
++ ULONG MoreCollisions;
++
++} COUNTER_802_3, *PCOUNTER_802_3;
++
++typedef struct _COUNTER_802_11 {
++ ULONG Length;
++ LARGE_INTEGER LastTransmittedFragmentCount;
++ LARGE_INTEGER TransmittedFragmentCount;
++ LARGE_INTEGER MulticastTransmittedFrameCount;
++ LARGE_INTEGER FailedCount;
++ LARGE_INTEGER RetryCount;
++ LARGE_INTEGER MultipleRetryCount;
++ LARGE_INTEGER RTSSuccessCount;
++ LARGE_INTEGER RTSFailureCount;
++ LARGE_INTEGER ACKFailureCount;
++ LARGE_INTEGER FrameDuplicateCount;
++ LARGE_INTEGER ReceivedFragmentCount;
++ LARGE_INTEGER MulticastReceivedFrameCount;
++ LARGE_INTEGER FCSErrorCount;
++} COUNTER_802_11, *PCOUNTER_802_11;
++
++typedef struct _COUNTER_RALINK {
++ ULONG TransmittedByteCount; // both successful and failure, used to calculate TX throughput
++ ULONG ReceivedByteCount; // both CRC okay and CRC error, used to calculate RX throughput
++ ULONG BeenDisassociatedCount;
++ ULONG BadCQIAutoRecoveryCount;
++ ULONG PoorCQIRoamingCount;
++ ULONG MgmtRingFullCount;
++ ULONG RxCountSinceLastNULL;
++ ULONG RxCount;
++ ULONG RxRingErrCount;
++ ULONG KickTxCount;
++ ULONG TxRingErrCount;
++ LARGE_INTEGER RealFcsErrCount;
++ ULONG PendingNdisPacketCount;
++
++ ULONG OneSecOsTxCount[NUM_OF_TX_RING];
++ ULONG OneSecDmaDoneCount[NUM_OF_TX_RING];
++ UINT32 OneSecTxDoneCount;
++ ULONG OneSecRxCount;
++ UINT32 OneSecTxAggregationCount;
++ UINT32 OneSecRxAggregationCount;
++
++ UINT32 OneSecFrameDuplicateCount;
++
++#ifdef RT2870
++ ULONG OneSecTransmittedByteCount; // both successful and failure, used to calculate TX throughput
++#endif // RT2870 //
++
++ UINT32 OneSecTxNoRetryOkCount;
++ UINT32 OneSecTxRetryOkCount;
++ UINT32 OneSecTxFailCount;
++ UINT32 OneSecFalseCCACnt; // CCA error count, for debug purpose, might move to global counter
++ UINT32 OneSecRxOkCnt; // RX without error
++ UINT32 OneSecRxOkDataCnt; // unicast-to-me DATA frame count
++ UINT32 OneSecRxFcsErrCnt; // CRC error
++ UINT32 OneSecBeaconSentCnt;
++ UINT32 LastOneSecTotalTxCount; // OneSecTxNoRetryOkCount + OneSecTxRetryOkCount + OneSecTxFailCount
++ UINT32 LastOneSecRxOkDataCnt; // OneSecRxOkDataCnt
++ ULONG DuplicateRcv;
++ ULONG TxAggCount;
++ ULONG TxNonAggCount;
++ ULONG TxAgg1MPDUCount;
++ ULONG TxAgg2MPDUCount;
++ ULONG TxAgg3MPDUCount;
++ ULONG TxAgg4MPDUCount;
++ ULONG TxAgg5MPDUCount;
++ ULONG TxAgg6MPDUCount;
++ ULONG TxAgg7MPDUCount;
++ ULONG TxAgg8MPDUCount;
++ ULONG TxAgg9MPDUCount;
++ ULONG TxAgg10MPDUCount;
++ ULONG TxAgg11MPDUCount;
++ ULONG TxAgg12MPDUCount;
++ ULONG TxAgg13MPDUCount;
++ ULONG TxAgg14MPDUCount;
++ ULONG TxAgg15MPDUCount;
++ ULONG TxAgg16MPDUCount;
++
++ LARGE_INTEGER TransmittedOctetsInAMSDU;
++ LARGE_INTEGER TransmittedAMSDUCount;
++ LARGE_INTEGER ReceivedOctesInAMSDUCount;
++ LARGE_INTEGER ReceivedAMSDUCount;
++ LARGE_INTEGER TransmittedAMPDUCount;
++ LARGE_INTEGER TransmittedMPDUsInAMPDUCount;
++ LARGE_INTEGER TransmittedOctetsInAMPDUCount;
++ LARGE_INTEGER MPDUInReceivedAMPDUCount;
++} COUNTER_RALINK, *PCOUNTER_RALINK;
++
++typedef struct _PID_COUNTER {
++ ULONG TxAckRequiredCount; // CRC error
++ ULONG TxAggreCount;
++ ULONG TxSuccessCount; // OneSecTxNoRetryOkCount + OneSecTxRetryOkCount + OneSecTxFailCount
++ ULONG LastSuccessRate;
++} PID_COUNTER, *PPID_COUNTER;
++
++typedef struct _COUNTER_DRS {
++ // to record the each TX rate's quality. 0 is best, the bigger the worse.
++ USHORT TxQuality[MAX_STEP_OF_TX_RATE_SWITCH];
++ UCHAR PER[MAX_STEP_OF_TX_RATE_SWITCH];
++ UCHAR TxRateUpPenalty; // extra # of second penalty due to last unstable condition
++ ULONG CurrTxRateStableTime; // # of second in current TX rate
++ BOOLEAN fNoisyEnvironment;
++ BOOLEAN fLastSecAccordingRSSI;
++ UCHAR LastSecTxRateChangeAction; // 0: no change, 1:rate UP, 2:rate down
++ UCHAR LastTimeTxRateChangeAction; //Keep last time value of LastSecTxRateChangeAction
++ ULONG LastTxOkCount;
++} COUNTER_DRS, *PCOUNTER_DRS;
++
++//
++// Arcfour Structure Added by PaulWu
++//
++typedef struct _ARCFOUR
++{
++ UINT X;
++ UINT Y;
++ UCHAR STATE[256];
++} ARCFOURCONTEXT, *PARCFOURCONTEXT;
++
++// MIMO Tx parameter, ShortGI, MCS, STBC, etc. these are fields in TXWI too. just copy to TXWI.
++typedef struct _RECEIVE_SETTING {
++#ifdef RT_BIG_ENDIAN
++ USHORT MIMO:1;
++ USHORT OFDM:1;
++ USHORT rsv:3;
++ USHORT STBC:2; //SPACE
++ USHORT ShortGI:1;
++ USHORT Mode:2; //channel bandwidth 20MHz or 40 MHz
++ USHORT NumOfRX:2; // MIMO. WE HAVE 3R
++#else
++ USHORT NumOfRX:2; // MIMO. WE HAVE 3R
++ USHORT Mode:2; //channel bandwidth 20MHz or 40 MHz
++ USHORT ShortGI:1;
++ USHORT STBC:2; //SPACE
++ USHORT rsv:3;
++ USHORT OFDM:1;
++ USHORT MIMO:1;
++#endif
++ } RECEIVE_SETTING, *PRECEIVE_SETTING;
++
++// Shared key data structure
++typedef struct _WEP_KEY {
++ UCHAR KeyLen; // Key length for each key, 0: entry is invalid
++ UCHAR Key[MAX_LEN_OF_KEY]; // right now we implement 4 keys, 128 bits max
++} WEP_KEY, *PWEP_KEY;
++
++typedef struct _CIPHER_KEY {
++ UCHAR Key[16]; // right now we implement 4 keys, 128 bits max
++ UCHAR RxMic[8]; // make alignment
++ UCHAR TxMic[8];
++ UCHAR TxTsc[6]; // 48bit TSC value
++ UCHAR RxTsc[6]; // 48bit TSC value
++ UCHAR CipherAlg; // 0-none, 1:WEP64, 2:WEP128, 3:TKIP, 4:AES, 5:CKIP64, 6:CKIP128
++ UCHAR KeyLen;
++#ifdef CONFIG_STA_SUPPORT
++ UCHAR BssId[6];
++#endif // CONFIG_STA_SUPPORT //
++ // Key length for each key, 0: entry is invalid
++ UCHAR Type; // Indicate Pairwise/Group when reporting MIC error
++} CIPHER_KEY, *PCIPHER_KEY;
++
++typedef struct _BBP_TUNING_STRUCT {
++ BOOLEAN Enable;
++ UCHAR FalseCcaCountUpperBound; // 100 per sec
++ UCHAR FalseCcaCountLowerBound; // 10 per sec
++ UCHAR R17LowerBound; // specified in E2PROM
++ UCHAR R17UpperBound; // 0x68 according to David Tung
++ UCHAR CurrentR17Value;
++} BBP_TUNING, *PBBP_TUNING;
++
++typedef struct _SOFT_RX_ANT_DIVERSITY_STRUCT {
++ UCHAR EvaluatePeriod; // 0:not evalute status, 1: evaluate status, 2: switching status
++ UCHAR Pair1PrimaryRxAnt; // 0:Ant-E1, 1:Ant-E2
++ UCHAR Pair1SecondaryRxAnt; // 0:Ant-E1, 1:Ant-E2
++ UCHAR Pair2PrimaryRxAnt; // 0:Ant-E3, 1:Ant-E4
++ UCHAR Pair2SecondaryRxAnt; // 0:Ant-E3, 1:Ant-E4
++ SHORT Pair1AvgRssi[2]; // AvgRssi[0]:E1, AvgRssi[1]:E2
++ SHORT Pair2AvgRssi[2]; // AvgRssi[0]:E3, AvgRssi[1]:E4
++ SHORT Pair1LastAvgRssi; //
++ SHORT Pair2LastAvgRssi; //
++ ULONG RcvPktNumWhenEvaluate;
++ BOOLEAN FirstPktArrivedWhenEvaluate;
++ RALINK_TIMER_STRUCT RxAntDiversityTimer;
++} SOFT_RX_ANT_DIVERSITY, *PSOFT_RX_ANT_DIVERSITY;
++
++typedef struct _LEAP_AUTH_INFO {
++ BOOLEAN Enabled; //Ture: Enable LEAP Authentication
++ BOOLEAN CCKM; //Ture: Use Fast Reauthentication with CCKM
++ UCHAR Reserve[2];
++ UCHAR UserName[256]; //LEAP, User name
++ ULONG UserNameLen;
++ UCHAR Password[256]; //LEAP, User Password
++ ULONG PasswordLen;
++} LEAP_AUTH_INFO, *PLEAP_AUTH_INFO;
++
++typedef struct {
++ UCHAR Addr[MAC_ADDR_LEN];
++ UCHAR ErrorCode[2]; //00 01-Invalid authentication type
++ //00 02-Authentication timeout
++ //00 03-Challenge from AP failed
++ //00 04-Challenge to AP failed
++ BOOLEAN Reported;
++} ROGUEAP_ENTRY, *PROGUEAP_ENTRY;
++
++typedef struct {
++ UCHAR RogueApNr;
++ ROGUEAP_ENTRY RogueApEntry[MAX_LEN_OF_BSS_TABLE];
++} ROGUEAP_TABLE, *PROGUEAP_TABLE;
++
++typedef struct {
++ BOOLEAN Enable;
++ UCHAR Delta;
++ BOOLEAN PlusSign;
++} CCK_TX_POWER_CALIBRATE, *PCCK_TX_POWER_CALIBRATE;
++
++//
++// Receive Tuple Cache Format
++//
++typedef struct _TUPLE_CACHE {
++ BOOLEAN Valid;
++ UCHAR MacAddress[MAC_ADDR_LEN];
++ USHORT Sequence;
++ USHORT Frag;
++} TUPLE_CACHE, *PTUPLE_CACHE;
++
++//
++// Fragment Frame structure
++//
++typedef struct _FRAGMENT_FRAME {
++ PNDIS_PACKET pFragPacket;
++ ULONG RxSize;
++ USHORT Sequence;
++ USHORT LastFrag;
++ ULONG Flags; // Some extra frame information. bit 0: LLC presented
++} FRAGMENT_FRAME, *PFRAGMENT_FRAME;
++
++
++//
++// Packet information for NdisQueryPacket
++//
++typedef struct _PACKET_INFO {
++ UINT PhysicalBufferCount; // Physical breaks of buffer descripor chained
++ UINT BufferCount ; // Number of Buffer descriptor chained
++ UINT TotalPacketLength ; // Self explained
++ PNDIS_BUFFER pFirstBuffer; // Pointer to first buffer descriptor
++} PACKET_INFO, *PPACKET_INFO;
++
++//
++// Tkip Key structure which RC4 key & MIC calculation
++//
++typedef struct _TKIP_KEY_INFO {
++ UINT nBytesInM; // # bytes in M for MICKEY
++ ULONG IV16;
++ ULONG IV32;
++ ULONG K0; // for MICKEY Low
++ ULONG K1; // for MICKEY Hig
++ ULONG L; // Current state for MICKEY
++ ULONG R; // Current state for MICKEY
++ ULONG M; // Message accumulator for MICKEY
++ UCHAR RC4KEY[16];
++ UCHAR MIC[8];
++} TKIP_KEY_INFO, *PTKIP_KEY_INFO;
++
++//
++// Private / Misc data, counters for driver internal use
++//
++typedef struct __PRIVATE_STRUC {
++ UINT SystemResetCnt; // System reset counter
++ UINT TxRingFullCnt; // Tx ring full occurrance number
++ UINT PhyRxErrCnt; // PHY Rx error count, for debug purpose, might move to global counter
++ // Variables for WEP encryption / decryption in rtmp_wep.c
++ UINT FCSCRC32;
++ ARCFOURCONTEXT WEPCONTEXT;
++ // Tkip stuff
++ TKIP_KEY_INFO Tx;
++ TKIP_KEY_INFO Rx;
++} PRIVATE_STRUC, *PPRIVATE_STRUC;
++
++// structure to tune BBP R66 (BBP TUNING)
++typedef struct _BBP_R66_TUNING {
++ BOOLEAN bEnable;
++ USHORT FalseCcaLowerThreshold; // default 100
++ USHORT FalseCcaUpperThreshold; // default 512
++ UCHAR R66Delta;
++ UCHAR R66CurrentValue;
++ BOOLEAN R66LowerUpperSelect; //Before LinkUp, Used LowerBound or UpperBound as R66 value.
++} BBP_R66_TUNING, *PBBP_R66_TUNING;
++
++// structure to store channel TX power
++typedef struct _CHANNEL_TX_POWER {
++ USHORT RemainingTimeForUse; //unit: sec
++ UCHAR Channel;
++#ifdef DOT11N_DRAFT3
++ BOOLEAN bEffectedChannel; // For BW 40 operating in 2.4GHz , the "effected channel" is the channel that is covered in 40Mhz.
++#endif // DOT11N_DRAFT3 //
++ CHAR Power;
++ CHAR Power2;
++ UCHAR MaxTxPwr;
++ UCHAR DfsReq;
++} CHANNEL_TX_POWER, *PCHANNEL_TX_POWER;
++
++// structure to store 802.11j channel TX power
++typedef struct _CHANNEL_11J_TX_POWER {
++ UCHAR Channel;
++ UCHAR BW; // BW_10 or BW_20
++ CHAR Power;
++ CHAR Power2;
++ USHORT RemainingTimeForUse; //unit: sec
++} CHANNEL_11J_TX_POWER, *PCHANNEL_11J_TX_POWER;
++
++typedef enum _ABGBAND_STATE_ {
++ UNKNOWN_BAND,
++ BG_BAND,
++ A_BAND,
++} ABGBAND_STATE;
++
++typedef struct _MLME_STRUCT {
++#ifdef CONFIG_STA_SUPPORT
++ // STA state machines
++ STATE_MACHINE CntlMachine;
++ STATE_MACHINE AssocMachine;
++ STATE_MACHINE AuthMachine;
++ STATE_MACHINE AuthRspMachine;
++ STATE_MACHINE SyncMachine;
++ STATE_MACHINE WpaPskMachine;
++ STATE_MACHINE LeapMachine;
++ STATE_MACHINE AironetMachine;
++ STATE_MACHINE_FUNC AssocFunc[ASSOC_FUNC_SIZE];
++ STATE_MACHINE_FUNC AuthFunc[AUTH_FUNC_SIZE];
++ STATE_MACHINE_FUNC AuthRspFunc[AUTH_RSP_FUNC_SIZE];
++ STATE_MACHINE_FUNC SyncFunc[SYNC_FUNC_SIZE];
++ STATE_MACHINE_FUNC WpaPskFunc[WPA_PSK_FUNC_SIZE];
++ STATE_MACHINE_FUNC AironetFunc[AIRONET_FUNC_SIZE];
++#endif // CONFIG_STA_SUPPORT //
++ STATE_MACHINE_FUNC ActFunc[ACT_FUNC_SIZE];
++ // Action
++ STATE_MACHINE ActMachine;
++
++
++#ifdef QOS_DLS_SUPPORT
++ STATE_MACHINE DlsMachine;
++ STATE_MACHINE_FUNC DlsFunc[DLS_FUNC_SIZE];
++#endif // QOS_DLS_SUPPORT //
++
++
++
++
++ ULONG ChannelQuality; // 0..100, Channel Quality Indication for Roaming
++ ULONG Now32; // latch the value of NdisGetSystemUpTime()
++ ULONG LastSendNULLpsmTime;
++
++ BOOLEAN bRunning;
++ NDIS_SPIN_LOCK TaskLock;
++ MLME_QUEUE Queue;
++
++ UINT ShiftReg;
++
++ RALINK_TIMER_STRUCT PeriodicTimer;
++ RALINK_TIMER_STRUCT APSDPeriodicTimer;
++ RALINK_TIMER_STRUCT LinkDownTimer;
++ RALINK_TIMER_STRUCT LinkUpTimer;
++ ULONG PeriodicRound;
++ ULONG OneSecPeriodicRound;
++
++ UCHAR RealRxPath;
++ BOOLEAN bLowThroughput;
++ BOOLEAN bEnableAutoAntennaCheck;
++ RALINK_TIMER_STRUCT RxAntEvalTimer;
++
++#ifdef RT2870
++ UCHAR CaliBW40RfR24;
++ UCHAR CaliBW20RfR24;
++#endif // RT2870 //
++
++} MLME_STRUCT, *PMLME_STRUCT;
++
++// structure for radar detection and channel switch
++typedef struct _RADAR_DETECT_STRUCT {
++ //BOOLEAN IEEE80211H; // 0: disable, 1: enable IEEE802.11h
++ UCHAR CSCount; //Channel switch counter
++ UCHAR CSPeriod; //Channel switch period (beacon count)
++ UCHAR RDCount; //Radar detection counter
++ UCHAR RDMode; //Radar Detection mode
++ UCHAR RDDurRegion; //Radar detection duration region
++ UCHAR BBPR16;
++ UCHAR BBPR17;
++ UCHAR BBPR18;
++ UCHAR BBPR21;
++ UCHAR BBPR22;
++ UCHAR BBPR64;
++ ULONG InServiceMonitorCount; // unit: sec
++ UINT8 DfsSessionTime;
++ BOOLEAN bFastDfs;
++ UINT8 ChMovingTime;
++ UINT8 LongPulseRadarTh;
++} RADAR_DETECT_STRUCT, *PRADAR_DETECT_STRUCT;
++
++#ifdef CARRIER_DETECTION_SUPPORT
++typedef enum CD_STATE_n
++{
++ CD_NORMAL,
++ CD_SILENCE,
++ CD_MAX_STATE
++} CD_STATE;
++
++typedef struct CARRIER_DETECTION_s
++{
++ BOOLEAN Enable;
++ UINT8 CDSessionTime;
++ UINT8 CDPeriod;
++ CD_STATE CD_State;
++} CARRIER_DETECTION, *PCARRIER_DETECTION;
++#endif // CARRIER_DETECTION_SUPPORT //
++
++typedef enum _REC_BLOCKACK_STATUS
++{
++ Recipient_NONE=0,
++ Recipient_USED,
++ Recipient_HandleRes,
++ Recipient_Accept
++} REC_BLOCKACK_STATUS, *PREC_BLOCKACK_STATUS;
++
++typedef enum _ORI_BLOCKACK_STATUS
++{
++ Originator_NONE=0,
++ Originator_USED,
++ Originator_WaitRes,
++ Originator_Done
++} ORI_BLOCKACK_STATUS, *PORI_BLOCKACK_STATUS;
++
++#ifdef DOT11_N_SUPPORT
++typedef struct _BA_ORI_ENTRY{
++ UCHAR Wcid;
++ UCHAR TID;
++ UCHAR BAWinSize;
++ UCHAR Token;
++// Sequence is to fill every outgoing QoS DATA frame's sequence field in 802.11 header.
++ USHORT Sequence;
++ USHORT TimeOutValue;
++ ORI_BLOCKACK_STATUS ORI_BA_Status;
++ RALINK_TIMER_STRUCT ORIBATimer;
++ PVOID pAdapter;
++} BA_ORI_ENTRY, *PBA_ORI_ENTRY;
++
++typedef struct _BA_REC_ENTRY {
++ UCHAR Wcid;
++ UCHAR TID;
++ UCHAR BAWinSize; // 7.3.1.14. each buffer is capable of holding a max AMSDU or MSDU.
++ //UCHAR NumOfRxPkt;
++ //UCHAR Curindidx; // the head in the RX reordering buffer
++ USHORT LastIndSeq;
++// USHORT LastIndSeqAtTimer;
++ USHORT TimeOutValue;
++ RALINK_TIMER_STRUCT RECBATimer;
++ ULONG LastIndSeqAtTimer;
++ ULONG nDropPacket;
++ ULONG rcvSeq;
++ REC_BLOCKACK_STATUS REC_BA_Status;
++// UCHAR RxBufIdxUsed;
++ // corresponding virtual address for RX reordering packet storage.
++ //RTMP_REORDERDMABUF MAP_RXBuf[MAX_RX_REORDERBUF];
++ NDIS_SPIN_LOCK RxReRingLock; // Rx Ring spinlock
++// struct _BA_REC_ENTRY *pNext;
++ PVOID pAdapter;
++ struct reordering_list list;
++} BA_REC_ENTRY, *PBA_REC_ENTRY;
++
++
++typedef struct {
++ ULONG numAsRecipient; // I am recipient of numAsRecipient clients. These client are in the BARecEntry[]
++ ULONG numAsOriginator; // I am originator of numAsOriginator clients. These clients are in the BAOriEntry[]
++ BA_ORI_ENTRY BAOriEntry[MAX_LEN_OF_BA_ORI_TABLE];
++ BA_REC_ENTRY BARecEntry[MAX_LEN_OF_BA_REC_TABLE];
++} BA_TABLE, *PBA_TABLE;
++
++//For QureyBATableOID use;
++typedef struct PACKED _OID_BA_REC_ENTRY{
++ UCHAR MACAddr[MAC_ADDR_LEN];
++ UCHAR BaBitmap; // if (BaBitmap&(1<<TID)), this session with{MACAddr, TID}exists, so read BufSize[TID] for BufferSize
++ UCHAR rsv;
++ UCHAR BufSize[8];
++ REC_BLOCKACK_STATUS REC_BA_Status[8];
++} OID_BA_REC_ENTRY, *POID_BA_REC_ENTRY;
++
++//For QureyBATableOID use;
++typedef struct PACKED _OID_BA_ORI_ENTRY{
++ UCHAR MACAddr[MAC_ADDR_LEN];
++ UCHAR BaBitmap; // if (BaBitmap&(1<<TID)), this session with{MACAddr, TID}exists, so read BufSize[TID] for BufferSize, read ORI_BA_Status[TID] for status
++ UCHAR rsv;
++ UCHAR BufSize[8];
++ ORI_BLOCKACK_STATUS ORI_BA_Status[8];
++} OID_BA_ORI_ENTRY, *POID_BA_ORI_ENTRY;
++
++typedef struct _QUERYBA_TABLE{
++ OID_BA_ORI_ENTRY BAOriEntry[32];
++ OID_BA_REC_ENTRY BARecEntry[32];
++ UCHAR OriNum;// Number of below BAOriEntry
++ UCHAR RecNum;// Number of below BARecEntry
++} QUERYBA_TABLE, *PQUERYBA_TABLE;
++
++typedef union _BACAP_STRUC {
++#ifdef RT_BIG_ENDIAN
++ struct {
++ UINT32 :4;
++ UINT32 b2040CoexistScanSup:1; //As Sta, support do 2040 coexistence scan for AP. As Ap, support monitor trigger event to check if can use BW 40MHz.
++ UINT32 bHtAdhoc:1; // adhoc can use ht rate.
++ UINT32 MMPSmode:2; // MIMO power save more, 0:static, 1:dynamic, 2:rsv, 3:mimo enable
++ UINT32 AmsduSize:1; // 0:3839, 1:7935 bytes. UINT MSDUSizeToBytes[] = { 3839, 7935};
++ UINT32 AmsduEnable:1; //Enable AMSDU transmisstion
++ UINT32 MpduDensity:3;
++ UINT32 Policy:2; // 0: DELAY_BA 1:IMMED_BA (//BA Policy subfiled value in ADDBA frame) 2:BA-not use
++ UINT32 AutoBA:1; // automatically BA
++ UINT32 TxBAWinLimit:8;
++ UINT32 RxBAWinLimit:8;
++ } field;
++#else
++ struct {
++ UINT32 RxBAWinLimit:8;
++ UINT32 TxBAWinLimit:8;
++ UINT32 AutoBA:1; // automatically BA
++ UINT32 Policy:2; // 0: DELAY_BA 1:IMMED_BA (//BA Policy subfiled value in ADDBA frame) 2:BA-not use
++ UINT32 MpduDensity:3;
++ UINT32 AmsduEnable:1; //Enable AMSDU transmisstion
++ UINT32 AmsduSize:1; // 0:3839, 1:7935 bytes. UINT MSDUSizeToBytes[] = { 3839, 7935};
++ UINT32 MMPSmode:2; // MIMO power save more, 0:static, 1:dynamic, 2:rsv, 3:mimo enable
++ UINT32 bHtAdhoc:1; // adhoc can use ht rate.
++ UINT32 b2040CoexistScanSup:1; //As Sta, support do 2040 coexistence scan for AP. As Ap, support monitor trigger event to check if can use BW 40MHz.
++ UINT32 :4;
++ } field;
++#endif
++ UINT32 word;
++} BACAP_STRUC, *PBACAP_STRUC;
++#endif // DOT11_N_SUPPORT //
++
++//This structure is for all 802.11n card InterOptibilityTest action. Reset all Num every n second. (Details see MLMEPeriodic)
++typedef struct _IOT_STRUC {
++ UCHAR Threshold[2];
++ UCHAR ReorderTimeOutNum[MAX_LEN_OF_BA_REC_TABLE]; // compare with threshold[0]
++ UCHAR RefreshNum[MAX_LEN_OF_BA_REC_TABLE]; // compare with threshold[1]
++ ULONG OneSecInWindowCount;
++ ULONG OneSecFrameDuplicateCount;
++ ULONG OneSecOutWindowCount;
++ UCHAR DelOriAct;
++ UCHAR DelRecAct;
++ UCHAR RTSShortProt;
++ UCHAR RTSLongProt;
++ BOOLEAN bRTSLongProtOn;
++#ifdef CONFIG_STA_SUPPORT
++ BOOLEAN bLastAtheros;
++ BOOLEAN bCurrentAtheros;
++ BOOLEAN bNowAtherosBurstOn;
++ BOOLEAN bNextDisableRxBA;
++ BOOLEAN bToggle;
++#endif // CONFIG_STA_SUPPORT //
++} IOT_STRUC, *PIOT_STRUC;
++
++// This is the registry setting for 802.11n transmit setting. Used in advanced page.
++typedef union _REG_TRANSMIT_SETTING {
++#ifdef RT_BIG_ENDIAN
++ struct {
++ UINT32 rsv:13;
++ UINT32 EXTCHA:2;
++ UINT32 HTMODE:1;
++ UINT32 TRANSNO:2;
++ UINT32 STBC:1; //SPACE
++ UINT32 ShortGI:1;
++ UINT32 BW:1; //channel bandwidth 20MHz or 40 MHz
++ UINT32 TxBF:1; // 3*3
++ UINT32 rsv0:10;
++ //UINT32 MCS:7; // MCS
++ //UINT32 PhyMode:4;
++ } field;
++#else
++ struct {
++ //UINT32 PhyMode:4;
++ //UINT32 MCS:7; // MCS
++ UINT32 rsv0:10;
++ UINT32 TxBF:1;
++ UINT32 BW:1; //channel bandwidth 20MHz or 40 MHz
++ UINT32 ShortGI:1;
++ UINT32 STBC:1; //SPACE
++ UINT32 TRANSNO:2;
++ UINT32 HTMODE:1;
++ UINT32 EXTCHA:2;
++ UINT32 rsv:13;
++ } field;
++#endif
++ UINT32 word;
++} REG_TRANSMIT_SETTING, *PREG_TRANSMIT_SETTING;
++
++typedef union _DESIRED_TRANSMIT_SETTING {
++#ifdef RT_BIG_ENDIAN
++ struct {
++ USHORT rsv:3;
++ USHORT FixedTxMode:2; // If MCS isn't AUTO, fix rate in CCK, OFDM or HT mode.
++ USHORT PhyMode:4;
++ USHORT MCS:7; // MCS
++ } field;
++#else
++ struct {
++ USHORT MCS:7; // MCS
++ USHORT PhyMode:4;
++ USHORT FixedTxMode:2; // If MCS isn't AUTO, fix rate in CCK, OFDM or HT mode.
++ USHORT rsv:3;
++ } field;
++#endif
++ USHORT word;
++ } DESIRED_TRANSMIT_SETTING, *PDESIRED_TRANSMIT_SETTING;
++
++typedef struct {
++ BOOLEAN IsRecipient;
++ UCHAR MACAddr[MAC_ADDR_LEN];
++ UCHAR TID;
++ UCHAR nMSDU;
++ USHORT TimeOut;
++ BOOLEAN bAllTid; // If True, delete all TID for BA sessions with this MACaddr.
++} OID_ADD_BA_ENTRY, *POID_ADD_BA_ENTRY;
++
++//
++// Multiple SSID structure
++//
++#define WLAN_MAX_NUM_OF_TIM ((MAX_LEN_OF_MAC_TABLE >> 3) + 1) /* /8 + 1 */
++#define WLAN_CT_TIM_BCMC_OFFSET 0 /* unit: 32B */
++
++/* clear bcmc TIM bit */
++#define WLAN_MR_TIM_BCMC_CLEAR(apidx) \
++ pAd->ApCfg.MBSSID[apidx].TimBitmaps[WLAN_CT_TIM_BCMC_OFFSET] &= ~BIT8[0];
++
++/* set bcmc TIM bit */
++#define WLAN_MR_TIM_BCMC_SET(apidx) \
++ pAd->ApCfg.MBSSID[apidx].TimBitmaps[WLAN_CT_TIM_BCMC_OFFSET] |= BIT8[0];
++
++/* clear a station PS TIM bit */
++#define WLAN_MR_TIM_BIT_CLEAR(ad_p, apidx, wcid) \
++ { UCHAR tim_offset = wcid >> 3; \
++ UCHAR bit_offset = wcid & 0x7; \
++ ad_p->ApCfg.MBSSID[apidx].TimBitmaps[tim_offset] &= (~BIT8[bit_offset]); }
++
++/* set a station PS TIM bit */
++#define WLAN_MR_TIM_BIT_SET(ad_p, apidx, wcid) \
++ { UCHAR tim_offset = wcid >> 3; \
++ UCHAR bit_offset = wcid & 0x7; \
++ ad_p->ApCfg.MBSSID[apidx].TimBitmaps[tim_offset] |= BIT8[bit_offset]; }
++
++#ifdef RT2870
++#define BEACON_BITMAP_MASK 0xff
++typedef struct _BEACON_SYNC_STRUCT_
++{
++ UCHAR BeaconBuf[HW_BEACON_MAX_COUNT][HW_BEACON_OFFSET];
++ UCHAR BeaconTxWI[HW_BEACON_MAX_COUNT][TXWI_SIZE];
++ ULONG TimIELocationInBeacon[HW_BEACON_MAX_COUNT];
++ ULONG CapabilityInfoLocationInBeacon[HW_BEACON_MAX_COUNT];
++ BOOLEAN EnableBeacon; // trigger to enable beacon transmission.
++ UCHAR BeaconBitMap; // NOTE: If the MAX_MBSSID_NUM is larger than 8, this parameter need to change.
++ UCHAR DtimBitOn; // NOTE: If the MAX_MBSSID_NUM is larger than 8, this parameter need to change.
++}BEACON_SYNC_STRUCT;
++#endif // RT2870 //
++
++typedef struct _MULTISSID_STRUCT {
++ UCHAR Bssid[MAC_ADDR_LEN];
++ UCHAR SsidLen;
++ CHAR Ssid[MAX_LEN_OF_SSID];
++ USHORT CapabilityInfo;
++
++ PNET_DEV MSSIDDev;
++
++ NDIS_802_11_AUTHENTICATION_MODE AuthMode;
++ NDIS_802_11_WEP_STATUS WepStatus;
++ NDIS_802_11_WEP_STATUS GroupKeyWepStatus;
++ WPA_MIX_PAIR_CIPHER WpaMixPairCipher;
++
++ ULONG TxCount;
++ ULONG RxCount;
++ ULONG ReceivedByteCount;
++ ULONG TransmittedByteCount;
++ ULONG RxErrorCount;
++ ULONG RxDropCount;
++
++ HTTRANSMIT_SETTING HTPhyMode, MaxHTPhyMode, MinHTPhyMode;// For transmit phy setting in TXWI.
++ RT_HT_PHY_INFO DesiredHtPhyInfo;
++ DESIRED_TRANSMIT_SETTING DesiredTransmitSetting; // Desired transmit setting. this is for reading registry setting only. not useful.
++ BOOLEAN bAutoTxRateSwitch;
++
++ //CIPHER_KEY SharedKey[SHARE_KEY_NUM]; // ref pAd->SharedKey[BSS][4]
++ UCHAR DefaultKeyId;
++
++ UCHAR TxRate; // RATE_1, RATE_2, RATE_5_5, RATE_11, ...
++ UCHAR DesiredRates[MAX_LEN_OF_SUPPORTED_RATES];// OID_802_11_DESIRED_RATES
++ UCHAR DesiredRatesIndex;
++ UCHAR MaxTxRate; // RATE_1, RATE_2, RATE_5_5, RATE_11
++
++// ULONG TimBitmap; // bit0 for broadcast, 1 for AID1, 2 for AID2, ...so on
++// ULONG TimBitmap2; // b0 for AID32, b1 for AID33, ... and so on
++ UCHAR TimBitmaps[WLAN_MAX_NUM_OF_TIM];
++
++ // WPA
++ UCHAR GMK[32];
++ UCHAR PMK[32];
++ UCHAR GTK[32];
++ BOOLEAN IEEE8021X;
++ BOOLEAN PreAuth;
++ UCHAR GNonce[32];
++ UCHAR PortSecured;
++ NDIS_802_11_PRIVACY_FILTER PrivacyFilter;
++ UCHAR BANClass3Data;
++ ULONG IsolateInterStaTraffic;
++
++ UCHAR RSNIE_Len[2];
++ UCHAR RSN_IE[2][MAX_LEN_OF_RSNIE];
++
++
++ UCHAR TimIELocationInBeacon;
++ UCHAR CapabilityInfoLocationInBeacon;
++ // outgoing BEACON frame buffer and corresponding TXWI
++ // PTXWI_STRUC BeaconTxWI; //
++ CHAR BeaconBuf[MAX_BEACON_SIZE]; // NOTE: BeaconBuf should be 4-byte aligned
++
++ BOOLEAN bHideSsid;
++ UINT16 StationKeepAliveTime; // unit: second
++
++ USHORT VLAN_VID;
++ USHORT VLAN_Priority;
++
++ RT_802_11_ACL AccessControlList;
++
++ // EDCA Qos
++ BOOLEAN bWmmCapable; // 0:disable WMM, 1:enable WMM
++ BOOLEAN bDLSCapable; // 0:disable DLS, 1:enable DLS
++
++ UCHAR DlsPTK[64]; // Due to windows dirver count on meetinghouse to handle 4-way shake
++
++ // For 802.1x daemon setting per BSS
++ UCHAR radius_srv_num;
++ RADIUS_SRV_INFO radius_srv_info[MAX_RADIUS_SRV_NUM];
++
++#ifdef RTL865X_SOC
++ unsigned int mylinkid;
++#endif
++
++
++ UINT32 RcvdConflictSsidCount;
++ UINT32 RcvdSpoofedAssocRespCount;
++ UINT32 RcvdSpoofedReassocRespCount;
++ UINT32 RcvdSpoofedProbeRespCount;
++ UINT32 RcvdSpoofedBeaconCount;
++ UINT32 RcvdSpoofedDisassocCount;
++ UINT32 RcvdSpoofedAuthCount;
++ UINT32 RcvdSpoofedDeauthCount;
++ UINT32 RcvdSpoofedUnknownMgmtCount;
++ UINT32 RcvdReplayAttackCount;
++
++ CHAR RssiOfRcvdConflictSsid;
++ CHAR RssiOfRcvdSpoofedAssocResp;
++ CHAR RssiOfRcvdSpoofedReassocResp;
++ CHAR RssiOfRcvdSpoofedProbeResp;
++ CHAR RssiOfRcvdSpoofedBeacon;
++ CHAR RssiOfRcvdSpoofedDisassoc;
++ CHAR RssiOfRcvdSpoofedAuth;
++ CHAR RssiOfRcvdSpoofedDeauth;
++ CHAR RssiOfRcvdSpoofedUnknownMgmt;
++ CHAR RssiOfRcvdReplayAttack;
++
++ BOOLEAN bBcnSntReq;
++ UCHAR BcnBufIdx;
++} MULTISSID_STRUCT, *PMULTISSID_STRUCT;
++
++
++
++#ifdef DOT11N_DRAFT3
++typedef enum _BSS2040COEXIST_FLAG{
++ BSS_2040_COEXIST_DISABLE = 0,
++ BSS_2040_COEXIST_TIMER_FIRED = 1,
++ BSS_2040_COEXIST_INFO_SYNC = 2,
++ BSS_2040_COEXIST_INFO_NOTIFY = 4,
++}BSS2040COEXIST_FLAG;
++#endif // DOT11N_DRAFT3 //
++
++// configuration common to OPMODE_AP as well as OPMODE_STA
++typedef struct _COMMON_CONFIG {
++
++ BOOLEAN bCountryFlag;
++ UCHAR CountryCode[3];
++ UCHAR Geography;
++ UCHAR CountryRegion; // Enum of country region, 0:FCC, 1:IC, 2:ETSI, 3:SPAIN, 4:France, 5:MKK, 6:MKK1, 7:Israel
++ UCHAR CountryRegionForABand; // Enum of country region for A band
++ UCHAR PhyMode; // PHY_11A, PHY_11B, PHY_11BG_MIXED, PHY_ABG_MIXED
++ USHORT Dsifs; // in units of usec
++ ULONG PacketFilter; // Packet filter for receiving
++
++ CHAR Ssid[MAX_LEN_OF_SSID]; // NOT NULL-terminated
++ UCHAR SsidLen; // the actual ssid length in used
++ UCHAR LastSsidLen; // the actual ssid length in used
++ CHAR LastSsid[MAX_LEN_OF_SSID]; // NOT NULL-terminated
++ UCHAR LastBssid[MAC_ADDR_LEN];
++
++ UCHAR Bssid[MAC_ADDR_LEN];
++ USHORT BeaconPeriod;
++ UCHAR Channel;
++ UCHAR CentralChannel; // Central Channel when using 40MHz is indicating. not real channel.
++
++#if 0 // move to STA_ADMIN_CONFIG
++ UCHAR DefaultKeyId;
++
++ NDIS_802_11_PRIVACY_FILTER PrivacyFilter; // PrivacyFilter enum for 802.1X
++ NDIS_802_11_AUTHENTICATION_MODE AuthMode; // This should match to whatever microsoft defined
++ NDIS_802_11_WEP_STATUS WepStatus;
++ NDIS_802_11_WEP_STATUS OrigWepStatus; // Original wep status set from OID
++
++ // Add to support different cipher suite for WPA2/WPA mode
++ NDIS_802_11_ENCRYPTION_STATUS GroupCipher; // Multicast cipher suite
++ NDIS_802_11_ENCRYPTION_STATUS PairCipher; // Unicast cipher suite
++ BOOLEAN bMixCipher; // Indicate current Pair & Group use different cipher suites
++ USHORT RsnCapability;
++
++ NDIS_802_11_WEP_STATUS GroupKeyWepStatus;
++#endif
++
++ UCHAR SupRate[MAX_LEN_OF_SUPPORTED_RATES];
++ UCHAR SupRateLen;
++ UCHAR ExtRate[MAX_LEN_OF_SUPPORTED_RATES];
++ UCHAR ExtRateLen;
++ UCHAR DesireRate[MAX_LEN_OF_SUPPORTED_RATES]; // OID_802_11_DESIRED_RATES
++ UCHAR MaxDesiredRate;
++ UCHAR ExpectedACKRate[MAX_LEN_OF_SUPPORTED_RATES];
++
++ ULONG BasicRateBitmap; // backup basic ratebitmap
++
++ BOOLEAN bAPSDCapable;
++ BOOLEAN bInServicePeriod;
++ BOOLEAN bAPSDAC_BE;
++ BOOLEAN bAPSDAC_BK;
++ BOOLEAN bAPSDAC_VI;
++ BOOLEAN bAPSDAC_VO;
++ BOOLEAN bNeedSendTriggerFrame;
++ BOOLEAN bAPSDForcePowerSave; // Force power save mode, should only use in APSD-STAUT
++ ULONG TriggerTimerCount;
++ UCHAR MaxSPLength;
++ UCHAR BBPCurrentBW; // BW_10, BW_20, BW_40
++ // move to MULTISSID_STRUCT for MBSS
++ //HTTRANSMIT_SETTING HTPhyMode, MaxHTPhyMode, MinHTPhyMode;// For transmit phy setting in TXWI.
++ REG_TRANSMIT_SETTING RegTransmitSetting; //registry transmit setting. this is for reading registry setting only. not useful.
++ //UCHAR FixedTxMode; // Fixed Tx Mode (CCK, OFDM), for HT fixed tx mode (GF, MIX) , refer to RegTransmitSetting.field.HTMode
++ UCHAR TxRate; // Same value to fill in TXD. TxRate is 6-bit
++ UCHAR MaxTxRate; // RATE_1, RATE_2, RATE_5_5, RATE_11
++ UCHAR TxRateIndex; // Tx rate index in RateSwitchTable
++ UCHAR TxRateTableSize; // Valid Tx rate table size in RateSwitchTable
++ //BOOLEAN bAutoTxRateSwitch;
++ UCHAR MinTxRate; // RATE_1, RATE_2, RATE_5_5, RATE_11
++ UCHAR RtsRate; // RATE_xxx
++ HTTRANSMIT_SETTING MlmeTransmit; // MGMT frame PHY rate setting when operatin at Ht rate.
++ UCHAR MlmeRate; // RATE_xxx, used to send MLME frames
++ UCHAR BasicMlmeRate; // Default Rate for sending MLME frames
++
++ USHORT RtsThreshold; // in unit of BYTE
++ USHORT FragmentThreshold; // in unit of BYTE
++
++ UCHAR TxPower; // in unit of mW
++ ULONG TxPowerPercentage; // 0~100 %
++ ULONG TxPowerDefault; // keep for TxPowerPercentage
++
++#ifdef DOT11_N_SUPPORT
++ BACAP_STRUC BACapability; // NO USE = 0XFF ; IMMED_BA =1 ; DELAY_BA=0
++ BACAP_STRUC REGBACapability; // NO USE = 0XFF ; IMMED_BA =1 ; DELAY_BA=0
++#endif // DOT11_N_SUPPORT //
++ IOT_STRUC IOTestParm; // 802.11n InterOpbility Test Parameter;
++ ULONG TxPreamble; // Rt802_11PreambleLong, Rt802_11PreambleShort, Rt802_11PreambleAuto
++ BOOLEAN bUseZeroToDisableFragment; // Microsoft use 0 as disable
++ ULONG UseBGProtection; // 0: auto, 1: always use, 2: always not use
++ BOOLEAN bUseShortSlotTime; // 0: disable, 1 - use short slot (9us)
++ BOOLEAN bEnableTxBurst; // 1: enble TX PACKET BURST, 0: disable TX PACKET BURST
++ BOOLEAN bAggregationCapable; // 1: enable TX aggregation when the peer supports it
++ BOOLEAN bPiggyBackCapable; // 1: enable TX piggy-back according MAC's version
++ BOOLEAN bIEEE80211H; // 1: enable IEEE802.11h spec.
++ ULONG DisableOLBCDetect; // 0: enable OLBC detect; 1 disable OLBC detect
++
++#ifdef DOT11_N_SUPPORT
++ BOOLEAN bRdg;
++#endif // DOT11_N_SUPPORT //
++ BOOLEAN bWmmCapable; // 0:disable WMM, 1:enable WMM
++ QOS_CAPABILITY_PARM APQosCapability; // QOS capability of the current associated AP
++ EDCA_PARM APEdcaParm; // EDCA parameters of the current associated AP
++ QBSS_LOAD_PARM APQbssLoad; // QBSS load of the current associated AP
++ UCHAR AckPolicy[4]; // ACK policy of the specified AC. see ACK_xxx
++#ifdef CONFIG_STA_SUPPORT
++ BOOLEAN bDLSCapable; // 0:disable DLS, 1:enable DLS
++#endif // CONFIG_STA_SUPPORT //
++ // a bitmap of BOOLEAN flags. each bit represent an operation status of a particular
++ // BOOLEAN control, either ON or OFF. These flags should always be accessed via
++ // OPSTATUS_TEST_FLAG(), OPSTATUS_SET_FLAG(), OP_STATUS_CLEAR_FLAG() macros.
++ // see fOP_STATUS_xxx in RTMP_DEF.C for detail bit definition
++ ULONG OpStatusFlags;
++
++ BOOLEAN NdisRadioStateOff; //For HCT 12.0, set this flag to TRUE instead of called MlmeRadioOff.
++ ABGBAND_STATE BandState; // For setting BBP used on B/G or A mode.
++
++ // IEEE802.11H--DFS.
++ RADAR_DETECT_STRUCT RadarDetect;
++
++#ifdef CARRIER_DETECTION_SUPPORT
++ CARRIER_DETECTION CarrierDetect;
++#endif // CARRIER_DETECTION_SUPPORT //
++
++#ifdef DOT11_N_SUPPORT
++ // HT
++ UCHAR BASize; // USer desired BAWindowSize. Should not exceed our max capability
++ //RT_HT_CAPABILITY SupportedHtPhy;
++ RT_HT_CAPABILITY DesiredHtPhy;
++ HT_CAPABILITY_IE HtCapability;
++ ADD_HT_INFO_IE AddHTInfo; // Useful as AP.
++ //This IE is used with channel switch announcement element when changing to a new 40MHz.
++ //This IE is included in channel switch ammouncement frames 7.4.1.5, beacons, probe Rsp.
++ NEW_EXT_CHAN_IE NewExtChanOffset; //7.3.2.20A, 1 if extension channel is above the control channel, 3 if below, 0 if not present
++
++#ifdef DOT11N_DRAFT3
++ UCHAR Bss2040CoexistFlag; // bit 0: bBssCoexistTimerRunning, bit 1: NeedSyncAddHtInfo.
++ RALINK_TIMER_STRUCT Bss2040CoexistTimer;
++
++ //This IE is used for 20/40 BSS Coexistence.
++ BSS_2040_COEXIST_IE BSS2040CoexistInfo;
++ // ====== 11n D3.0 =======================>
++ USHORT Dot11OBssScanPassiveDwell; // Unit : TU. 5~1000
++ USHORT Dot11OBssScanActiveDwell; // Unit : TU. 10~1000
++ USHORT Dot11BssWidthTriggerScanInt; // Unit : Second
++ USHORT Dot11OBssScanPassiveTotalPerChannel; // Unit : TU. 200~10000
++ USHORT Dot11OBssScanActiveTotalPerChannel; // Unit : TU. 20~10000
++ USHORT Dot11BssWidthChanTranDelayFactor;
++ USHORT Dot11OBssScanActivityThre; // Unit : percentage
++
++ ULONG Dot11BssWidthChanTranDelay; // multiple of (Dot11BssWidthTriggerScanInt * Dot11BssWidthChanTranDelayFactor)
++ ULONG CountDownCtr; // CountDown Counter from (Dot11BssWidthTriggerScanInt * Dot11BssWidthChanTranDelayFactor)
++
++ NDIS_SPIN_LOCK TriggerEventTabLock;
++ BSS_2040_COEXIST_IE LastBSSCoexist2040;
++ BSS_2040_COEXIST_IE BSSCoexist2040;
++ TRIGGER_EVENT_TAB TriggerEventTab;
++ UCHAR ChannelListIdx;
++ // <====== 11n D3.0 =======================
++ BOOLEAN bOverlapScanning;
++#endif // DOT11N_DRAFT3 //
++
++ BOOLEAN bHTProtect;
++ BOOLEAN bMIMOPSEnable;
++ BOOLEAN bBADecline;
++ BOOLEAN bDisableReordering;
++ BOOLEAN bForty_Mhz_Intolerant;
++ BOOLEAN bExtChannelSwitchAnnouncement;
++ BOOLEAN bRcvBSSWidthTriggerEvents;
++ ULONG LastRcvBSSWidthTriggerEventsTime;
++
++ UCHAR TxBASize;
++#endif // DOT11_N_SUPPORT //
++
++ // Enable wireless event
++ BOOLEAN bWirelessEvent;
++ BOOLEAN bWiFiTest; // Enable this parameter for WiFi test
++
++ // Tx & Rx Stream number selection
++ UCHAR TxStream;
++ UCHAR RxStream;
++
++ // transmit phy mode, trasmit rate for Multicast.
++#ifdef MCAST_RATE_SPECIFIC
++ UCHAR McastTransmitMcs;
++ UCHAR McastTransmitPhyMode;
++#endif // MCAST_RATE_SPECIFIC //
++
++ BOOLEAN bHardwareRadio; // Hardware controlled Radio enabled
++
++#ifdef RT2870
++ BOOLEAN bMultipleIRP; // Multiple Bulk IN flag
++ UCHAR NumOfBulkInIRP; // if bMultipleIRP == TRUE, NumOfBulkInIRP will be 4 otherwise be 1
++ RT_HT_CAPABILITY SupportedHtPhy;
++ ULONG MaxPktOneTxBulk;
++ UCHAR TxBulkFactor;
++ UCHAR RxBulkFactor;
++
++ BEACON_SYNC_STRUCT *pBeaconSync;
++ RALINK_TIMER_STRUCT BeaconUpdateTimer;
++ UINT32 BeaconAdjust;
++ UINT32 BeaconFactor;
++ UINT32 BeaconRemain;
++#endif // RT2870 //
++
++
++ NDIS_SPIN_LOCK MeasureReqTabLock;
++ PMEASURE_REQ_TAB pMeasureReqTab;
++
++ NDIS_SPIN_LOCK TpcReqTabLock;
++ PTPC_REQ_TAB pTpcReqTab;
++
++ // transmit phy mode, trasmit rate for Multicast.
++#ifdef MCAST_RATE_SPECIFIC
++ HTTRANSMIT_SETTING MCastPhyMode;
++#endif // MCAST_RATE_SPECIFIC //
++
++#ifdef SINGLE_SKU
++ UINT16 DefineMaxTxPwr;
++#endif // SINGLE_SKU //
++
++
++} COMMON_CONFIG, *PCOMMON_CONFIG;
++
++
++#ifdef CONFIG_STA_SUPPORT
++/* Modified by Wu Xi-Kun 4/21/2006 */
++// STA configuration and status
++typedef struct _STA_ADMIN_CONFIG {
++ // GROUP 1 -
++ // User configuration loaded from Registry, E2PROM or OID_xxx. These settings describe
++ // the user intended configuration, but not necessary fully equal to the final
++ // settings in ACTIVE BSS after negotiation/compromize with the BSS holder (either
++ // AP or IBSS holder).
++ // Once initialized, user configuration can only be changed via OID_xxx
++ UCHAR BssType; // BSS_INFRA or BSS_ADHOC
++ USHORT AtimWin; // used when starting a new IBSS
++
++ // GROUP 2 -
++ // User configuration loaded from Registry, E2PROM or OID_xxx. These settings describe
++ // the user intended configuration, and should be always applied to the final
++ // settings in ACTIVE BSS without compromising with the BSS holder.
++ // Once initialized, user configuration can only be changed via OID_xxx
++ UCHAR RssiTrigger;
++ UCHAR RssiTriggerMode; // RSSI_TRIGGERED_UPON_BELOW_THRESHOLD or RSSI_TRIGGERED_UPON_EXCCEED_THRESHOLD
++ USHORT DefaultListenCount; // default listen count;
++ ULONG WindowsPowerMode; // Power mode for AC power
++ ULONG WindowsBatteryPowerMode; // Power mode for battery if exists
++ BOOLEAN bWindowsACCAMEnable; // Enable CAM power mode when AC on
++ BOOLEAN bAutoReconnect; // Set to TRUE when setting OID_802_11_SSID with no matching BSSID
++ ULONG WindowsPowerProfile; // Windows power profile, for NDIS5.1 PnP
++
++ // MIB:ieee802dot11.dot11smt(1).dot11StationConfigTable(1)
++ USHORT Psm; // power management mode (PWR_ACTIVE|PWR_SAVE)
++ USHORT DisassocReason;
++ UCHAR DisassocSta[MAC_ADDR_LEN];
++ USHORT DeauthReason;
++ UCHAR DeauthSta[MAC_ADDR_LEN];
++ USHORT AuthFailReason;
++ UCHAR AuthFailSta[MAC_ADDR_LEN];
++
++ NDIS_802_11_PRIVACY_FILTER PrivacyFilter; // PrivacyFilter enum for 802.1X
++ NDIS_802_11_AUTHENTICATION_MODE AuthMode; // This should match to whatever microsoft defined
++ NDIS_802_11_WEP_STATUS WepStatus;
++ NDIS_802_11_WEP_STATUS OrigWepStatus; // Original wep status set from OID
++
++ // Add to support different cipher suite for WPA2/WPA mode
++ NDIS_802_11_ENCRYPTION_STATUS GroupCipher; // Multicast cipher suite
++ NDIS_802_11_ENCRYPTION_STATUS PairCipher; // Unicast cipher suite
++ BOOLEAN bMixCipher; // Indicate current Pair & Group use different cipher suites
++ USHORT RsnCapability;
++
++ NDIS_802_11_WEP_STATUS GroupKeyWepStatus;
++
++ UCHAR PMK[32]; // WPA PSK mode PMK
++ UCHAR PTK[64]; // WPA PSK mode PTK
++ UCHAR GTK[32]; // GTK from authenticator
++ BSSID_INFO SavedPMK[PMKID_NO];
++ UINT SavedPMKNum; // Saved PMKID number
++
++ UCHAR DefaultKeyId;
++
++
++ // WPA 802.1x port control, WPA_802_1X_PORT_SECURED, WPA_802_1X_PORT_NOT_SECURED
++ UCHAR PortSecured;
++
++ // For WPA countermeasures
++ ULONG LastMicErrorTime; // record last MIC error time
++ ULONG MicErrCnt; // Should be 0, 1, 2, then reset to zero (after disassoiciation).
++ BOOLEAN bBlockAssoc; // Block associate attempt for 60 seconds after counter measure occurred.
++ // For WPA-PSK supplicant state
++ WPA_STATE WpaState; // Default is SS_NOTUSE and handled by microsoft 802.1x
++ UCHAR ReplayCounter[8];
++ UCHAR ANonce[32]; // ANonce for WPA-PSK from aurhenticator
++ UCHAR SNonce[32]; // SNonce for WPA-PSK
++
++ UCHAR LastSNR0; // last received BEACON's SNR
++ UCHAR LastSNR1; // last received BEACON's SNR for 2nd antenna
++ RSSI_SAMPLE RssiSample;
++ ULONG NumOfAvgRssiSample;
++
++ ULONG LastBeaconRxTime; // OS's timestamp of the last BEACON RX time
++ ULONG Last11bBeaconRxTime; // OS's timestamp of the last 11B BEACON RX time
++ ULONG Last11gBeaconRxTime; // OS's timestamp of the last 11G BEACON RX time
++ ULONG Last20NBeaconRxTime; // OS's timestamp of the last 20MHz N BEACON RX time
++
++ ULONG LastScanTime; // Record last scan time for issue BSSID_SCAN_LIST
++ ULONG ScanCnt; // Scan counts since most recent SSID, BSSID, SCAN OID request
++ BOOLEAN bSwRadio; // Software controlled Radio On/Off, TRUE: On
++ BOOLEAN bHwRadio; // Hardware controlled Radio On/Off, TRUE: On
++ BOOLEAN bRadio; // Radio state, And of Sw & Hw radio state
++ BOOLEAN bHardwareRadio; // Hardware controlled Radio enabled
++ BOOLEAN bShowHiddenSSID; // Show all known SSID in SSID list get operation
++
++
++ // New for WPA, windows want us to to keep association information and
++ // Fixed IEs from last association response
++ NDIS_802_11_ASSOCIATION_INFORMATION AssocInfo;
++ USHORT ReqVarIELen; // Length of next VIE include EID & Length
++ UCHAR ReqVarIEs[MAX_VIE_LEN]; // The content saved here should be little-endian format.
++ USHORT ResVarIELen; // Length of next VIE include EID & Length
++ UCHAR ResVarIEs[MAX_VIE_LEN];
++
++ UCHAR RSNIE_Len;
++ UCHAR RSN_IE[MAX_LEN_OF_RSNIE]; // The content saved here should be little-endian format.
++
++ // New variables used for CCX 1.0
++ BOOLEAN bCkipOn;
++ BOOLEAN bCkipCmicOn;
++ UCHAR CkipFlag;
++ UCHAR GIV[3]; //for CCX iv
++ UCHAR RxSEQ[4];
++ UCHAR TxSEQ[4];
++ UCHAR CKIPMIC[4];
++ UCHAR LeapAuthMode;
++ LEAP_AUTH_INFO LeapAuthInfo;
++ UCHAR HashPwd[16];
++ UCHAR NetworkChallenge[8];
++ UCHAR NetworkChallengeResponse[24];
++ UCHAR PeerChallenge[8];
++
++ UCHAR PeerChallengeResponse[24];
++ UCHAR SessionKey[16]; //Network session keys (NSK)
++ RALINK_TIMER_STRUCT LeapAuthTimer;
++ ROGUEAP_TABLE RogueApTab; //Cisco CCX1 Rogue AP Detection
++
++ // New control flags for CCX
++ CCX_CONTROL CCXControl; // Master administration state
++ BOOLEAN CCXEnable; // Actual CCX state
++ UCHAR CCXScanChannel; // Selected channel for CCX beacon request
++ USHORT CCXScanTime; // Time out to wait for beacon and probe response
++ UCHAR CCXReqType; // Current processing CCX request type
++ BSS_TABLE CCXBssTab; // BSS Table
++ UCHAR FrameReportBuf[2048]; // Buffer for creating frame report
++ USHORT FrameReportLen; // Current Frame report length
++ ULONG CLBusyBytes; // Save the total bytes received durning channel load scan time
++ USHORT RPIDensity[8]; // Array for RPI density collection
++ // Start address of each BSS table within FrameReportBuf
++ // It's important to update the RxPower of the corresponding Bss
++ USHORT BssReportOffset[MAX_LEN_OF_BSS_TABLE];
++ USHORT BeaconToken; // Token for beacon report
++ ULONG LastBssIndex; // Most current reported Bss index
++ RM_REQUEST_ACTION MeasurementRequest[16]; // Saved measurement request
++ UCHAR RMReqCnt; // Number of measurement request saved.
++ UCHAR CurrentRMReqIdx; // Number of measurement request saved.
++ BOOLEAN ParallelReq; // Parallel measurement, only one request performed,
++ // It must be the same channel with maximum duration
++ USHORT ParallelDuration; // Maximum duration for parallel measurement
++ UCHAR ParallelChannel; // Only one channel with parallel measurement
++ USHORT IAPPToken; // IAPP dialog token
++ UCHAR CCXQosECWMin; // Cisco QOS ECWMin for AC 0
++ UCHAR CCXQosECWMax; // Cisco QOS ECWMax for AC 0
++ // Hack for channel load and noise histogram parameters
++ UCHAR NHFactor; // Parameter for Noise histogram
++ UCHAR CLFactor; // Parameter for channel load
++
++ UCHAR KRK[16]; //Key Refresh Key.
++ UCHAR BTK[32]; //Base Transient Key
++ BOOLEAN CCKMLinkUpFlag;
++ ULONG CCKMRN; //(Re)Association request number.
++ LARGE_INTEGER CCKMBeaconAtJoinTimeStamp; //TSF timer for Re-assocaite to the new AP
++ UCHAR AironetCellPowerLimit; //in dBm
++ UCHAR AironetIPAddress[4]; //eg. 192.168.1.1
++ BOOLEAN CCXAdjacentAPReportFlag; //flag for determining report Assoc Lost time
++ CHAR CCXAdjacentAPSsid[MAX_LEN_OF_SSID]; //Adjacent AP's SSID report
++ UCHAR CCXAdjacentAPSsidLen; // the actual ssid length in used
++ UCHAR CCXAdjacentAPBssid[MAC_ADDR_LEN]; //Adjacent AP's BSSID report
++ USHORT CCXAdjacentAPChannel;
++ ULONG CCXAdjacentAPLinkDownTime; //for Spec S32.
++
++ RALINK_TIMER_STRUCT StaQuickResponeForRateUpTimer;
++ BOOLEAN StaQuickResponeForRateUpTimerRunning;
++
++ UCHAR DtimCount; // 0.. DtimPeriod-1
++ UCHAR DtimPeriod; // default = 3
++
++#ifdef QOS_DLS_SUPPORT
++ RT_802_11_DLS DLSEntry[MAX_NUM_OF_DLS_ENTRY];
++ UCHAR DlsReplayCounter[8];
++#endif // QOS_DLS_SUPPORT //
++ ////////////////////////////////////////////////////////////////////////////////////////
++ // This is only for WHQL test.
++ BOOLEAN WhqlTest;
++ ////////////////////////////////////////////////////////////////////////////////////////
++
++ RALINK_TIMER_STRUCT WpaDisassocAndBlockAssocTimer;
++ // Fast Roaming
++ BOOLEAN bFastRoaming; // 0:disable fast roaming, 1:enable fast roaming
++ CHAR dBmToRoam; // the condition to roam when receiving Rssi less than this value. It's negative value.
++
++#ifdef WPA_SUPPLICANT_SUPPORT
++ BOOLEAN IEEE8021X;
++ BOOLEAN IEEE8021x_required_keys;
++ CIPHER_KEY DesireSharedKey[4]; // Record user desired WEP keys
++ UCHAR DesireSharedKeyId;
++
++ // 0: driver ignores wpa_supplicant
++ // 1: wpa_supplicant initiates scanning and AP selection
++ // 2: driver takes care of scanning, AP selection, and IEEE 802.11 association parameters
++ UCHAR WpaSupplicantUP;
++ UCHAR WpaSupplicantScanCount;
++#endif // WPA_SUPPLICANT_SUPPORT //
++
++ CHAR dev_name[16];
++ USHORT OriDevType;
++
++ BOOLEAN bTGnWifiTest;
++ BOOLEAN bScanReqIsFromWebUI;
++
++ HTTRANSMIT_SETTING HTPhyMode, MaxHTPhyMode, MinHTPhyMode;// For transmit phy setting in TXWI.
++ DESIRED_TRANSMIT_SETTING DesiredTransmitSetting;
++ RT_HT_PHY_INFO DesiredHtPhyInfo;
++ BOOLEAN bAutoTxRateSwitch;
++
++
++#ifdef EXT_BUILD_CHANNEL_LIST
++ UCHAR IEEE80211dClientMode;
++ UCHAR StaOriCountryCode[3];
++ UCHAR StaOriGeography;
++#endif // EXT_BUILD_CHANNEL_LIST //
++} STA_ADMIN_CONFIG, *PSTA_ADMIN_CONFIG;
++
++// This data structure keep the current active BSS/IBSS's configuration that this STA
++// had agreed upon joining the network. Which means these parameters are usually decided
++// by the BSS/IBSS creator instead of user configuration. Data in this data structurre
++// is valid only when either ADHOC_ON(pAd) or INFRA_ON(pAd) is TRUE.
++// Normally, after SCAN or failed roaming attempts, we need to recover back to
++// the current active settings.
++typedef struct _STA_ACTIVE_CONFIG {
++ USHORT Aid;
++ USHORT AtimWin; // in kusec; IBSS parameter set element
++ USHORT CapabilityInfo;
++ USHORT CfpMaxDuration;
++ USHORT CfpPeriod;
++
++ // Copy supported rate from desired AP's beacon. We are trying to match
++ // AP's supported and extended rate settings.
++ UCHAR SupRate[MAX_LEN_OF_SUPPORTED_RATES];
++ UCHAR ExtRate[MAX_LEN_OF_SUPPORTED_RATES];
++ UCHAR SupRateLen;
++ UCHAR ExtRateLen;
++ // Copy supported ht from desired AP's beacon. We are trying to match
++ RT_HT_PHY_INFO SupportedPhyInfo;
++ RT_HT_CAPABILITY SupportedHtPhy;
++} STA_ACTIVE_CONFIG, *PSTA_ACTIVE_CONFIG;
++
++#ifdef RT2870
++// for USB interface, avoid in interrupt when write key
++typedef struct RT_ADD_PAIRWISE_KEY_ENTRY {
++ NDIS_802_11_MAC_ADDRESS MacAddr;
++ USHORT MacTabMatchWCID; // ASIC
++ CIPHER_KEY CipherKey;
++} RT_ADD_PAIRWISE_KEY_ENTRY,*PRT_ADD_PAIRWISE_KEY_ENTRY;
++#endif // RT2870 //
++#endif // CONFIG_STA_SUPPORT //
++
++// ----------- start of AP --------------------------
++// AUTH-RSP State Machine Aux data structure
++typedef struct _AP_MLME_AUX {
++ UCHAR Addr[MAC_ADDR_LEN];
++ USHORT Alg;
++ CHAR Challenge[CIPHER_TEXT_LEN];
++} AP_MLME_AUX, *PAP_MLME_AUX;
++
++// structure to define WPA Group Key Rekey Interval
++typedef struct PACKED _RT_802_11_WPA_REKEY {
++ ULONG ReKeyMethod; // mechanism for rekeying: 0:disable, 1: time-based, 2: packet-based
++ ULONG ReKeyInterval; // time-based: seconds, packet-based: kilo-packets
++} RT_WPA_REKEY,*PRT_WPA_REKEY, RT_802_11_WPA_REKEY, *PRT_802_11_WPA_REKEY;
++
++typedef struct _MAC_TABLE_ENTRY {
++ //Choose 1 from ValidAsWDS and ValidAsCLI to validize.
++ BOOLEAN ValidAsCLI; // Sta mode, set this TRUE after Linkup,too.
++ BOOLEAN ValidAsWDS; // This is WDS Entry. only for AP mode.
++ BOOLEAN ValidAsApCli; //This is a AP-Client entry, only for AP mode which enable AP-Client functions.
++ BOOLEAN ValidAsMesh;
++ BOOLEAN ValidAsDls; // This is DLS Entry. only for STA mode.
++ BOOLEAN isCached;
++ BOOLEAN bIAmBadAtheros; // Flag if this is Atheros chip that has IOT problem. We need to turn on RTS/CTS protection.
++
++ UCHAR EnqueueEapolStartTimerRunning; // Enqueue EAPoL-Start for triggering EAP SM
++ //jan for wpa
++ // record which entry revoke MIC Failure , if it leaves the BSS itself, AP won't update aMICFailTime MIB
++ UCHAR CMTimerRunning;
++ UCHAR apidx; // MBSS number
++ UCHAR RSNIE_Len;
++ UCHAR RSN_IE[MAX_LEN_OF_RSNIE];
++ UCHAR ANonce[LEN_KEY_DESC_NONCE];
++ UCHAR R_Counter[LEN_KEY_DESC_REPLAY];
++ UCHAR PTK[64];
++ UCHAR ReTryCounter;
++ RALINK_TIMER_STRUCT RetryTimer;
++ RALINK_TIMER_STRUCT EnqueueStartForPSKTimer; // A timer which enqueue EAPoL-Start for triggering PSK SM
++ NDIS_802_11_AUTHENTICATION_MODE AuthMode; // This should match to whatever microsoft defined
++ NDIS_802_11_WEP_STATUS WepStatus;
++ AP_WPA_STATE WpaState;
++ GTK_STATE GTKState;
++ USHORT PortSecured;
++ NDIS_802_11_PRIVACY_FILTER PrivacyFilter; // PrivacyFilter enum for 802.1X
++ CIPHER_KEY PairwiseKey;
++ PVOID pAd;
++ INT PMKID_CacheIdx;
++ UCHAR PMKID[LEN_PMKID];
++
++
++ UCHAR Addr[MAC_ADDR_LEN];
++ UCHAR PsMode;
++ SST Sst;
++ AUTH_STATE AuthState; // for SHARED KEY authentication state machine used only
++ BOOLEAN IsReassocSta; // Indicate whether this is a reassociation procedure
++ USHORT Aid;
++ USHORT CapabilityInfo;
++ UCHAR LastRssi;
++ ULONG NoDataIdleCount;
++ UINT16 StationKeepAliveCount; // unit: second
++ ULONG PsQIdleCount;
++ QUEUE_HEADER PsQueue;
++
++ UINT32 StaConnectTime; // the live time of this station since associated with AP
++
++
++#ifdef DOT11_N_SUPPORT
++ BOOLEAN bSendBAR;
++ USHORT NoBADataCountDown;
++
++ UINT32 CachedBuf[16]; // UINT (4 bytes) for alignment
++ UINT TxBFCount; // 3*3
++#endif // DOT11_N_SUPPORT //
++ UINT FIFOCount;
++ UINT DebugFIFOCount;
++ UINT DebugTxCount;
++ BOOLEAN bDlsInit;
++
++
++//====================================================
++//WDS entry needs these
++// rt2860 add this. if ValidAsWDS==TRUE, MatchWDSTabIdx is the index in WdsTab.MacTab
++ UINT MatchWDSTabIdx;
++ UCHAR MaxSupportedRate;
++ UCHAR CurrTxRate;
++ UCHAR CurrTxRateIndex;
++ // to record the each TX rate's quality. 0 is best, the bigger the worse.
++ USHORT TxQuality[MAX_STEP_OF_TX_RATE_SWITCH];
++// USHORT OneSecTxOkCount;
++ UINT32 OneSecTxNoRetryOkCount;
++ UINT32 OneSecTxRetryOkCount;
++ UINT32 OneSecTxFailCount;
++ UINT32 ContinueTxFailCnt;
++ UINT32 CurrTxRateStableTime; // # of second in current TX rate
++ UCHAR TxRateUpPenalty; // extra # of second penalty due to last unstable condition
++//====================================================
++
++
++
++#ifdef CONFIG_STA_SUPPORT
++#ifdef QOS_DLS_SUPPORT
++ UINT MatchDlsEntryIdx; // indicate the index in pAd->StaCfg.DLSEntry
++#endif // QOS_DLS_SUPPORT //
++#endif // CONFIG_STA_SUPPORT //
++
++ BOOLEAN fNoisyEnvironment;
++ BOOLEAN fLastSecAccordingRSSI;
++ UCHAR LastSecTxRateChangeAction; // 0: no change, 1:rate UP, 2:rate down
++ CHAR LastTimeTxRateChangeAction; //Keep last time value of LastSecTxRateChangeAction
++ ULONG LastTxOkCount;
++ UCHAR PER[MAX_STEP_OF_TX_RATE_SWITCH];
++
++ // a bitmap of BOOLEAN flags. each bit represent an operation status of a particular
++ // BOOLEAN control, either ON or OFF. These flags should always be accessed via
++ // CLIENT_STATUS_TEST_FLAG(), CLIENT_STATUS_SET_FLAG(), CLIENT_STATUS_CLEAR_FLAG() macros.
++ // see fOP_STATUS_xxx in RTMP_DEF.C for detail bit definition. fCLIENT_STATUS_AMSDU_INUSED
++ ULONG ClientStatusFlags;
++
++ // TODO: Shall we move that to DOT11_N_SUPPORT???
++ HTTRANSMIT_SETTING HTPhyMode, MaxHTPhyMode, MinHTPhyMode;// For transmit phy setting in TXWI.
++
++#ifdef DOT11_N_SUPPORT
++ // HT EWC MIMO-N used parameters
++ USHORT RXBAbitmap; // fill to on-chip RXWI_BA_BITMASK in 8.1.3RX attribute entry format
++ USHORT TXBAbitmap; // This bitmap as originator, only keep in software used to mark AMPDU bit in TXWI
++ USHORT TXAutoBAbitmap;
++ USHORT BADeclineBitmap;
++ USHORT BARecWcidArray[NUM_OF_TID]; // The mapping wcid of recipient session. if RXBAbitmap bit is masked
++ USHORT BAOriWcidArray[NUM_OF_TID]; // The mapping wcid of originator session. if TXBAbitmap bit is masked
++ USHORT BAOriSequence[NUM_OF_TID]; // The mapping wcid of originator session. if TXBAbitmap bit is masked
++
++ // 802.11n features.
++ UCHAR MpduDensity;
++ UCHAR MaxRAmpduFactor;
++ UCHAR AMsduSize;
++ UCHAR MmpsMode; // MIMO power save more.
++
++ HT_CAPABILITY_IE HTCapability;
++
++#ifdef DOT11N_DRAFT3
++ UCHAR BSS2040CoexistenceMgmtSupport;
++#endif // DOT11N_DRAFT3 //
++#endif // DOT11_N_SUPPORT //
++
++ BOOLEAN bAutoTxRateSwitch;
++
++ UCHAR RateLen;
++ struct _MAC_TABLE_ENTRY *pNext;
++ USHORT TxSeq[NUM_OF_TID];
++ USHORT NonQosDataSeq;
++
++ RSSI_SAMPLE RssiSample;
++
++ UINT32 TXMCSExpected[16];
++ UINT32 TXMCSSuccessful[16];
++ UINT32 TXMCSFailed[16];
++ UINT32 TXMCSAutoFallBack[16][16];
++
++#ifdef CONFIG_STA_SUPPORT
++ ULONG LastBeaconRxTime;
++#endif // CONFIG_STA_SUPPORT //
++} MAC_TABLE_ENTRY, *PMAC_TABLE_ENTRY;
++
++typedef struct _MAC_TABLE {
++ USHORT Size;
++ MAC_TABLE_ENTRY *Hash[HASH_TABLE_SIZE];
++ MAC_TABLE_ENTRY Content[MAX_LEN_OF_MAC_TABLE];
++ QUEUE_HEADER McastPsQueue;
++ ULONG PsQIdleCount;
++ BOOLEAN fAnyStationInPsm;
++ BOOLEAN fAnyStationBadAtheros; // Check if any Station is atheros 802.11n Chip. We need to use RTS/CTS with Atheros 802,.11n chip.
++ BOOLEAN fAnyTxOPForceDisable; // Check if it is necessary to disable BE TxOP
++ BOOLEAN fAllStationAsRalink; // Check if all stations are ralink-chipset
++#ifdef DOT11_N_SUPPORT
++ BOOLEAN fAnyStationIsLegacy; // Check if I use legacy rate to transmit to my BSS Station/
++ BOOLEAN fAnyStationNonGF; // Check if any Station can't support GF.
++ BOOLEAN fAnyStation20Only; // Check if any Station can't support GF.
++ BOOLEAN fAnyStationMIMOPSDynamic; // Check if any Station is MIMO Dynamic
++ BOOLEAN fAnyBASession; // Check if there is BA session. Force turn on RTS/CTS
++#endif // DOT11_N_SUPPORT //
++} MAC_TABLE, *PMAC_TABLE;
++
++#ifdef DOT11_N_SUPPORT
++#define IS_HT_STA(_pMacEntry) \
++ (_pMacEntry->MaxHTPhyMode.field.MODE >= MODE_HTMIX)
++
++#define IS_HT_RATE(_pMacEntry) \
++ (_pMacEntry->HTPhyMode.field.MODE >= MODE_HTMIX)
++
++#define PEER_IS_HT_RATE(_pMacEntry) \
++ (_pMacEntry->HTPhyMode.field.MODE >= MODE_HTMIX)
++#endif // DOT11_N_SUPPORT //
++
++typedef struct _WDS_ENTRY {
++ BOOLEAN Valid;
++ UCHAR Addr[MAC_ADDR_LEN];
++ ULONG NoDataIdleCount;
++ struct _WDS_ENTRY *pNext;
++} WDS_ENTRY, *PWDS_ENTRY;
++
++typedef struct _WDS_TABLE_ENTRY {
++ USHORT Size;
++ UCHAR WdsAddr[MAC_ADDR_LEN];
++ WDS_ENTRY *Hash[HASH_TABLE_SIZE];
++ WDS_ENTRY Content[MAX_LEN_OF_MAC_TABLE];
++ UCHAR MaxSupportedRate;
++ UCHAR CurrTxRate;
++ USHORT TxQuality[MAX_LEN_OF_SUPPORTED_RATES];
++ USHORT OneSecTxOkCount;
++ USHORT OneSecTxRetryOkCount;
++ USHORT OneSecTxFailCount;
++ ULONG CurrTxRateStableTime; // # of second in current TX rate
++ UCHAR TxRateUpPenalty; // extra # of second penalty due to last unstable condition
++} WDS_TABLE_ENTRY, *PWDS_TABLE_ENTRY;
++
++typedef struct _RT_802_11_WDS_ENTRY {
++ PNET_DEV dev;
++ UCHAR Valid;
++ UCHAR PhyMode;
++ UCHAR PeerWdsAddr[MAC_ADDR_LEN];
++ UCHAR MacTabMatchWCID; // ASIC
++ NDIS_802_11_WEP_STATUS WepStatus;
++ UCHAR KeyIdx;
++ CIPHER_KEY WdsKey;
++ HTTRANSMIT_SETTING HTPhyMode, MaxHTPhyMode, MinHTPhyMode;
++ RT_HT_PHY_INFO DesiredHtPhyInfo;
++ BOOLEAN bAutoTxRateSwitch;
++ DESIRED_TRANSMIT_SETTING DesiredTransmitSetting; // Desired transmit setting.
++} RT_802_11_WDS_ENTRY, *PRT_802_11_WDS_ENTRY;
++
++typedef struct _WDS_TABLE {
++ UCHAR Mode;
++ ULONG Size;
++ RT_802_11_WDS_ENTRY WdsEntry[MAX_WDS_ENTRY];
++} WDS_TABLE, *PWDS_TABLE;
++
++typedef struct _APCLI_STRUCT {
++ PNET_DEV dev;
++#ifdef RTL865X_SOC
++ unsigned int mylinkid;
++#endif
++ BOOLEAN Enable; // Set it as 1 if the apcli interface was configured to "1" or by iwpriv cmd "ApCliEnable"
++ BOOLEAN Valid; // Set it as 1 if the apcli interface associated success to remote AP.
++ UCHAR MacTabWCID; //WCID value, which point to the entry of ASIC Mac table.
++ UCHAR SsidLen;
++ CHAR Ssid[MAX_LEN_OF_SSID];
++
++ UCHAR CfgSsidLen;
++ CHAR CfgSsid[MAX_LEN_OF_SSID];
++ UCHAR CfgApCliBssid[ETH_LENGTH_OF_ADDRESS];
++ UCHAR CurrentAddress[ETH_LENGTH_OF_ADDRESS];
++
++ ULONG ApCliRcvBeaconTime;
++
++ ULONG CtrlCurrState;
++ ULONG SyncCurrState;
++ ULONG AuthCurrState;
++ ULONG AssocCurrState;
++ ULONG WpaPskCurrState;
++
++ USHORT AuthReqCnt;
++ USHORT AssocReqCnt;
++
++ ULONG ClientStatusFlags;
++ UCHAR MpduDensity;
++
++ NDIS_802_11_AUTHENTICATION_MODE AuthMode; // This should match to whatever microsoft defined
++ NDIS_802_11_WEP_STATUS WepStatus;
++
++ // Add to support different cipher suite for WPA2/WPA mode
++ NDIS_802_11_ENCRYPTION_STATUS GroupCipher; // Multicast cipher suite
++ NDIS_802_11_ENCRYPTION_STATUS PairCipher; // Unicast cipher suite
++ BOOLEAN bMixCipher; // Indicate current Pair & Group use different cipher suites
++ USHORT RsnCapability;
++
++ UCHAR PSK[100]; // reserve PSK key material
++ UCHAR PSKLen;
++ UCHAR PMK[32]; // WPA PSK mode PMK
++ //UCHAR PTK[64]; // WPA PSK mode PTK
++ UCHAR GTK[32]; // GTK from authenticator
++
++ //CIPHER_KEY PairwiseKey;
++ CIPHER_KEY SharedKey[SHARE_KEY_NUM];
++ UCHAR DefaultKeyId;
++
++ // WPA 802.1x port control, WPA_802_1X_PORT_SECURED, WPA_802_1X_PORT_NOT_SECURED
++ //UCHAR PortSecured;
++
++ // store RSN_IE built by driver
++ UCHAR RSN_IE[MAX_LEN_OF_RSNIE]; // The content saved here should be convert to little-endian format.
++ UCHAR RSNIE_Len;
++
++ // For WPA countermeasures
++ ULONG LastMicErrorTime; // record last MIC error time
++ //ULONG MicErrCnt; // Should be 0, 1, 2, then reset to zero (after disassoiciation).
++ BOOLEAN bBlockAssoc; // Block associate attempt for 60 seconds after counter measure occurred.
++
++ // For WPA-PSK supplicant state
++ //WPA_STATE WpaState; // Default is SS_NOTUSE
++ //UCHAR ReplayCounter[8];
++ //UCHAR ANonce[32]; // ANonce for WPA-PSK from authenticator
++ UCHAR SNonce[32]; // SNonce for WPA-PSK
++ UCHAR GNonce[32]; // GNonce for WPA-PSK from authenticator
++
++ HTTRANSMIT_SETTING HTPhyMode, MaxHTPhyMode, MinHTPhyMode;
++ RT_HT_PHY_INFO DesiredHtPhyInfo;
++ BOOLEAN bAutoTxRateSwitch;
++ DESIRED_TRANSMIT_SETTING DesiredTransmitSetting; // Desired transmit setting.
++} APCLI_STRUCT, *PAPCLI_STRUCT;
++
++// ----------- end of AP ----------------------------
++
++#ifdef BLOCK_NET_IF
++typedef struct _BLOCK_QUEUE_ENTRY
++{
++ BOOLEAN SwTxQueueBlockFlag;
++ LIST_HEADER NetIfList;
++} BLOCK_QUEUE_ENTRY, *PBLOCK_QUEUE_ENTRY;
++#endif // BLOCK_NET_IF //
++
++struct wificonf
++{
++ BOOLEAN bShortGI;
++ BOOLEAN bGreenField;
++};
++
++
++
++typedef struct _INF_PCI_CONFIG
++{
++ PUCHAR CSRBaseAddress; // PCI MMIO Base Address, all access will use
++}INF_PCI_CONFIG;
++
++typedef struct _INF_USB_CONFIG
++{
++ UINT BulkInEpAddr; // bulk-in endpoint address
++ UINT BulkOutEpAddr[6]; // bulk-out endpoint address
++
++}INF_USB_CONFIG;
++
++#ifdef IKANOS_VX_1X0
++ typedef void (*IkanosWlanTxCbFuncP)(void *, void *);
++
++ struct IKANOS_TX_INFO
++ {
++ struct net_device *netdev;
++ IkanosWlanTxCbFuncP *fp;
++ };
++#endif // IKANOS_VX_1X0 //
++
++#ifdef NINTENDO_AP
++typedef struct _NINDO_CTRL_BLOCK {
++
++ RT_NINTENDO_TABLE DS_TABLE;
++
++#ifdef CHIP25XX
++ spinlock_t NINTENDO_TABLE_Lock;
++#else
++ NDIS_SPIN_LOCK NINTENDO_TABLE_Lock;
++#endif // CHIP25XX //
++
++ UCHAR NINTENDO_UP_BUFFER[512];
++ UCHAR Local_KeyIdx;
++ CIPHER_KEY Local_SharedKey;
++ UCHAR Local_bHideSsid;
++ UCHAR Local_AuthMode;
++ UCHAR Local_WepStatus;
++ USHORT Local_CapabilityInfo;
++} NINDO_CTRL_BLOCK;
++#endif // NINTENDO_AP //
++
++
++#ifdef DBG_DIAGNOSE
++#define DIAGNOSE_TIME 10 // 10 sec
++typedef struct _RtmpDiagStrcut_
++{ // Diagnosis Related element
++ unsigned char inited;
++ unsigned char qIdx;
++ unsigned char ArrayStartIdx;
++ unsigned char ArrayCurIdx;
++ // Tx Related Count
++ USHORT TxDataCnt[DIAGNOSE_TIME];
++ USHORT TxFailCnt[DIAGNOSE_TIME];
++// USHORT TxDescCnt[DIAGNOSE_TIME][16]; // TxDesc queue length in scale of 0~14, >=15
++ USHORT TxDescCnt[DIAGNOSE_TIME][24]; // 3*3 // TxDesc queue length in scale of 0~14, >=15
++// USHORT TxMcsCnt[DIAGNOSE_TIME][16]; // TxDate MCS Count in range from 0 to 15, step in 1.
++ USHORT TxMcsCnt[DIAGNOSE_TIME][24]; // 3*3
++ USHORT TxSWQueCnt[DIAGNOSE_TIME][9]; // TxSwQueue length in scale of 0, 1, 2, 3, 4, 5, 6, 7, >=8
++
++ USHORT TxAggCnt[DIAGNOSE_TIME];
++ USHORT TxNonAggCnt[DIAGNOSE_TIME];
++// USHORT TxAMPDUCnt[DIAGNOSE_TIME][16]; // 10 sec, TxDMA APMDU Aggregation count in range from 0 to 15, in setp of 1.
++ USHORT TxAMPDUCnt[DIAGNOSE_TIME][24]; // 3*3 // 10 sec, TxDMA APMDU Aggregation count in range from 0 to 15, in setp of 1.
++ USHORT TxRalinkCnt[DIAGNOSE_TIME]; // TxRalink Aggregation Count in 1 sec scale.
++ USHORT TxAMSDUCnt[DIAGNOSE_TIME]; // TxAMSUD Aggregation Count in 1 sec scale.
++
++ // Rx Related Count
++ USHORT RxDataCnt[DIAGNOSE_TIME]; // Rx Total Data count.
++ USHORT RxCrcErrCnt[DIAGNOSE_TIME];
++// USHORT RxMcsCnt[DIAGNOSE_TIME][16]; // Rx MCS Count in range from 0 to 15, step in 1.
++ USHORT RxMcsCnt[DIAGNOSE_TIME][24]; // 3*3
++}RtmpDiagStruct;
++#endif // DBG_DIAGNOSE //
++
++
++//
++// The miniport adapter structure
++//
++typedef struct _RTMP_ADAPTER
++{
++ PVOID OS_Cookie; // save specific structure relative to OS
++ PNET_DEV net_dev;
++ ULONG VirtualIfCnt;
++
++
++
++ NDIS_SPIN_LOCK irq_lock;
++ UCHAR irq_disabled;
++
++#ifdef RT2870
++/*****************************************************************************************/
++/* USB related parameters */
++/*****************************************************************************************/
++ struct usb_config_descriptor *config;
++ UINT BulkInEpAddr; // bulk-in endpoint address
++ UINT BulkOutEpAddr[6]; // bulk-out endpoint address
++
++ UINT NumberOfPipes;
++ USHORT BulkOutMaxPacketSize;
++ USHORT BulkInMaxPacketSize;
++
++ //======Control Flags
++ LONG PendingIoCount;
++ ULONG BulkFlags;
++ BOOLEAN bUsbTxBulkAggre; // Flags for bulk out data priority
++
++
++ //======Timer Thread
++ RT2870_TIMER_QUEUE TimerQ;
++ NDIS_SPIN_LOCK TimerQLock;
++
++
++ //======Cmd Thread
++ CmdQ CmdQ;
++ NDIS_SPIN_LOCK CmdQLock; // CmdQLock spinlock
++
++ BOOLEAN TimerFunc_kill;
++ BOOLEAN mlme_kill;
++
++
++ //======Semaphores (event)
++ struct semaphore mlme_semaphore; /* to sleep thread on */
++ struct semaphore RTUSBCmd_semaphore; /* to sleep thread on */
++ struct semaphore RTUSBTimer_semaphore;
++#ifdef INF_AMAZON_SE
++ struct semaphore UsbVendorReq_semaphore;
++ PVOID UsbVendorReqBuf;
++#endif // INF_AMAZON_SE //
++ struct completion TimerQComplete;
++ struct completion mlmeComplete;
++ struct completion CmdQComplete;
++ wait_queue_head_t *wait;
++
++ //======Lock for 2870 ATE
++#ifdef RALINK_ATE
++ NDIS_SPIN_LOCK GenericLock; // ATE Tx/Rx generic spinlock
++#endif // RALINK_ATE //
++
++#endif // RT2870 //
++
++
++/*****************************************************************************************/
++ /* Both PCI/USB related parameters */
++/*****************************************************************************************/
++
++
++/*****************************************************************************************/
++/* Tx related parameters */
++/*****************************************************************************************/
++ BOOLEAN DeQueueRunning[NUM_OF_TX_RING]; // for ensuring RTUSBDeQueuePacket get call once
++ NDIS_SPIN_LOCK DeQueueLock[NUM_OF_TX_RING];
++
++#ifdef RT2870
++ // Data related context and AC specified, 4 AC supported
++ NDIS_SPIN_LOCK BulkOutLock[6]; // BulkOut spinlock for 4 ACs
++ NDIS_SPIN_LOCK MLMEBulkOutLock; // MLME BulkOut lock
++
++ HT_TX_CONTEXT TxContext[NUM_OF_TX_RING];
++ NDIS_SPIN_LOCK TxContextQueueLock[NUM_OF_TX_RING]; // TxContextQueue spinlock
++
++ // 4 sets of Bulk Out index and pending flag
++ UCHAR NextBulkOutIndex[4]; // only used for 4 EDCA bulkout pipe
++
++ BOOLEAN BulkOutPending[6]; // used for total 6 bulkout pipe
++ UCHAR bulkResetPipeid;
++ BOOLEAN MgmtBulkPending;
++ ULONG bulkResetReq[6];
++#endif // RT2870 //
++
++ // resource for software backlog queues
++ QUEUE_HEADER TxSwQueue[NUM_OF_TX_RING]; // 4 AC + 1 HCCA
++ NDIS_SPIN_LOCK TxSwQueueLock[NUM_OF_TX_RING]; // TxSwQueue spinlock
++
++ RTMP_DMABUF MgmtDescRing; // Shared memory for MGMT descriptors
++ RTMP_MGMT_RING MgmtRing;
++ NDIS_SPIN_LOCK MgmtRingLock; // Prio Ring spinlock
++
++
++/*****************************************************************************************/
++/* Rx related parameters */
++/*****************************************************************************************/
++
++
++#ifdef RT2870
++ RX_CONTEXT RxContext[RX_RING_SIZE]; // 1 for redundant multiple IRP bulk in.
++ NDIS_SPIN_LOCK BulkInLock; // BulkIn spinlock for 4 ACs
++ UCHAR PendingRx; // The Maxima pending Rx value should be RX_RING_SIZE.
++ UCHAR NextRxBulkInIndex; // Indicate the current RxContext Index which hold by Host controller.
++ UCHAR NextRxBulkInReadIndex; // Indicate the current RxContext Index which driver can read & process it.
++ ULONG NextRxBulkInPosition; // Want to contatenate 2 URB buffer while 1st is bulkin failed URB. This Position is 1st URB TransferLength.
++ ULONG TransferBufferLength; // current length of the packet buffer
++ ULONG ReadPosition; // current read position in a packet buffer
++#endif // RT2870 //
++
++
++/*****************************************************************************************/
++/* ASIC related parameters */
++/*****************************************************************************************/
++ UINT32 MACVersion; // MAC version. Record rt2860C(0x28600100) or rt2860D (0x28600101)..
++
++ // ---------------------------
++ // E2PROM
++ // ---------------------------
++ ULONG EepromVersion; // byte 0: version, byte 1: revision, byte 2~3: unused
++ UCHAR EEPROMAddressNum; // 93c46=6 93c66=8
++ USHORT EEPROMDefaultValue[NUM_EEPROM_BBP_PARMS];
++ ULONG FirmwareVersion; // byte 0: Minor version, byte 1: Major version, otherwise unused.
++
++ // ---------------------------
++ // BBP Control
++ // ---------------------------
++ UCHAR BbpWriteLatch[140]; // record last BBP register value written via BBP_IO_WRITE/BBP_IO_WRITE_VY_REG_ID
++ UCHAR BbpRssiToDbmDelta;
++ BBP_R66_TUNING BbpTuning;
++
++ // ----------------------------
++ // RFIC control
++ // ----------------------------
++ UCHAR RfIcType; // RFIC_xxx
++ ULONG RfFreqOffset; // Frequency offset for channel switching
++ RTMP_RF_REGS LatchRfRegs; // latch th latest RF programming value since RF IC doesn't support READ
++
++ EEPROM_ANTENNA_STRUC Antenna; // Since ANtenna definition is different for a & g. We need to save it for future reference.
++ EEPROM_NIC_CONFIG2_STRUC NicConfig2;
++
++ // This soft Rx Antenna Diversity mechanism is used only when user set
++ // RX Antenna = DIVERSITY ON
++ SOFT_RX_ANT_DIVERSITY RxAnt;
++
++ UCHAR RFProgSeq;
++ CHANNEL_TX_POWER TxPower[MAX_NUM_OF_CHANNELS]; // Store Tx power value for all channels.
++ CHANNEL_TX_POWER ChannelList[MAX_NUM_OF_CHANNELS]; // list all supported channels for site survey
++ CHANNEL_11J_TX_POWER TxPower11J[MAX_NUM_OF_11JCHANNELS]; // 802.11j channel and bw
++ CHANNEL_11J_TX_POWER ChannelList11J[MAX_NUM_OF_11JCHANNELS]; // list all supported channels for site survey
++
++ UCHAR ChannelListNum; // number of channel in ChannelList[]
++ UCHAR Bbp94;
++ BOOLEAN BbpForCCK;
++ ULONG Tx20MPwrCfgABand[5];
++ ULONG Tx20MPwrCfgGBand[5];
++ ULONG Tx40MPwrCfgABand[5];
++ ULONG Tx40MPwrCfgGBand[5];
++
++ BOOLEAN bAutoTxAgcA; // Enable driver auto Tx Agc control
++ UCHAR TssiRefA; // Store Tssi reference value as 25 temperature.
++ UCHAR TssiPlusBoundaryA[5]; // Tssi boundary for increase Tx power to compensate.
++ UCHAR TssiMinusBoundaryA[5]; // Tssi boundary for decrease Tx power to compensate.
++ UCHAR TxAgcStepA; // Store Tx TSSI delta increment / decrement value
++ CHAR TxAgcCompensateA; // Store the compensation (TxAgcStep * (idx-1))
++
++ BOOLEAN bAutoTxAgcG; // Enable driver auto Tx Agc control
++ UCHAR TssiRefG; // Store Tssi reference value as 25 temperature.
++ UCHAR TssiPlusBoundaryG[5]; // Tssi boundary for increase Tx power to compensate.
++ UCHAR TssiMinusBoundaryG[5]; // Tssi boundary for decrease Tx power to compensate.
++ UCHAR TxAgcStepG; // Store Tx TSSI delta increment / decrement value
++ CHAR TxAgcCompensateG; // Store the compensation (TxAgcStep * (idx-1))
++
++ //+++For RT2870, the parameteres is start from BGRssiOffset1 ~ BGRssiOffset3
++ CHAR BGRssiOffset0; // Store B/G RSSI#0 Offset value on EEPROM 0x46h
++ CHAR BGRssiOffset1; // Store B/G RSSI#1 Offset value
++ CHAR BGRssiOffset2; // Store B/G RSSI#2 Offset value
++ //---
++
++ //+++For RT2870, the parameteres is start from ARssiOffset1 ~ ARssiOffset3
++ CHAR ARssiOffset0; // Store A RSSI#0 Offset value on EEPROM 0x4Ah
++ CHAR ARssiOffset1; // Store A RSSI#1 Offset value
++ CHAR ARssiOffset2; // Store A RSSI#2 Offset value
++ //---
++
++ CHAR BLNAGain; // Store B/G external LNA#0 value on EEPROM 0x44h
++ CHAR ALNAGain0; // Store A external LNA#0 value for ch36~64
++ CHAR ALNAGain1; // Store A external LNA#1 value for ch100~128
++ CHAR ALNAGain2; // Store A external LNA#2 value for ch132~165
++
++ // ----------------------------
++ // LED control
++ // ----------------------------
++ MCU_LEDCS_STRUC LedCntl;
++ USHORT Led1; // read from EEPROM 0x3c
++ USHORT Led2; // EEPROM 0x3e
++ USHORT Led3; // EEPROM 0x40
++ UCHAR LedIndicatorStregth;
++ UCHAR RssiSingalstrengthOffet;
++ BOOLEAN bLedOnScanning;
++ UCHAR LedStatus;
++
++/*****************************************************************************************/
++/* 802.11 related parameters */
++/*****************************************************************************************/
++ // outgoing BEACON frame buffer and corresponding TXD
++ TXWI_STRUC BeaconTxWI;
++ PUCHAR BeaconBuf;
++ USHORT BeaconOffset[HW_BEACON_MAX_COUNT];
++
++ // pre-build PS-POLL and NULL frame upon link up. for efficiency purpose.
++ PSPOLL_FRAME PsPollFrame;
++ HEADER_802_11 NullFrame;
++
++#ifdef RT2870
++ TX_CONTEXT BeaconContext[BEACON_RING_SIZE];
++ TX_CONTEXT NullContext;
++ TX_CONTEXT PsPollContext;
++ TX_CONTEXT RTSContext;
++#endif // RT2870 //
++
++
++
++//=========AP===========
++
++
++//=======STA===========
++#ifdef CONFIG_STA_SUPPORT
++/* Modified by Wu Xi-Kun 4/21/2006 */
++ // -----------------------------------------------
++ // STA specific configuration & operation status
++ // used only when pAd->OpMode == OPMODE_STA
++ // -----------------------------------------------
++ STA_ADMIN_CONFIG StaCfg; // user desired settings
++ STA_ACTIVE_CONFIG StaActive; // valid only when ADHOC_ON(pAd) || INFRA_ON(pAd)
++ CHAR nickname[IW_ESSID_MAX_SIZE+1]; // nickname, only used in the iwconfig i/f
++ NDIS_MEDIA_STATE PreMediaState;
++#endif // CONFIG_STA_SUPPORT //
++
++//=======Common===========
++ // OP mode: either AP or STA
++ UCHAR OpMode; // OPMODE_STA, OPMODE_AP
++
++ NDIS_MEDIA_STATE IndicateMediaState; // Base on Indication state, default is NdisMediaStateDisConnected
++
++
++ // configuration: read from Registry & E2PROM
++ BOOLEAN bLocalAdminMAC; // Use user changed MAC
++ UCHAR PermanentAddress[MAC_ADDR_LEN]; // Factory default MAC address
++ UCHAR CurrentAddress[MAC_ADDR_LEN]; // User changed MAC address
++
++ // ------------------------------------------------------
++ // common configuration to both OPMODE_STA and OPMODE_AP
++ // ------------------------------------------------------
++ COMMON_CONFIG CommonCfg;
++ MLME_STRUCT Mlme;
++
++ // AP needs those vaiables for site survey feature.
++ MLME_AUX MlmeAux; // temporary settings used during MLME state machine
++ BSS_TABLE ScanTab; // store the latest SCAN result
++
++ //About MacTab, the sta driver will use #0 and #1 for multicast and AP.
++ MAC_TABLE MacTab; // ASIC on-chip WCID entry table. At TX, ASIC always use key according to this on-chip table.
++ NDIS_SPIN_LOCK MacTabLock;
++
++#ifdef DOT11_N_SUPPORT
++ BA_TABLE BATable;
++#endif // DOT11_N_SUPPORT //
++ NDIS_SPIN_LOCK BATabLock;
++ RALINK_TIMER_STRUCT RECBATimer;
++
++ // encryption/decryption KEY tables
++ CIPHER_KEY SharedKey[MAX_MBSSID_NUM][4]; // STA always use SharedKey[BSS0][0..3]
++
++ // RX re-assembly buffer for fragmentation
++ FRAGMENT_FRAME FragFrame; // Frame storage for fragment frame
++
++ // various Counters
++ COUNTER_802_3 Counters8023; // 802.3 counters
++ COUNTER_802_11 WlanCounters; // 802.11 MIB counters
++ COUNTER_RALINK RalinkCounters; // Ralink propriety counters
++ COUNTER_DRS DrsCounters; // counters for Dynamic TX Rate Switching
++ PRIVATE_STRUC PrivateInfo; // Private information & counters
++
++ // flags, see fRTMP_ADAPTER_xxx flags
++ ULONG Flags; // Represent current device status
++
++ // current TX sequence #
++ USHORT Sequence;
++
++ // Control disconnect / connect event generation
++ //+++Didn't used anymore
++ ULONG LinkDownTime;
++ //---
++ ULONG LastRxRate;
++ ULONG LastTxRate;
++ //+++Used only for Station
++ BOOLEAN bConfigChanged; // Config Change flag for the same SSID setting
++ //---
++
++ ULONG ExtraInfo; // Extra information for displaying status
++ ULONG SystemErrorBitmap; // b0: E2PROM version error
++
++ //+++Didn't used anymore
++ ULONG MacIcVersion; // MAC/BBP serial interface issue solved after ver.D
++ //---
++
++ // ---------------------------
++ // System event log
++ // ---------------------------
++ RT_802_11_EVENT_TABLE EventTab;
++
++
++ BOOLEAN HTCEnable;
++
++ /*****************************************************************************************/
++ /* Statistic related parameters */
++ /*****************************************************************************************/
++#ifdef RT2870
++ ULONG BulkOutDataOneSecCount;
++ ULONG BulkInDataOneSecCount;
++ ULONG BulkLastOneSecCount; // BulkOutDataOneSecCount + BulkInDataOneSecCount
++ ULONG watchDogRxCnt;
++ ULONG watchDogRxOverFlowCnt;
++ ULONG watchDogTxPendingCnt[NUM_OF_TX_RING];
++#endif // RT2870 //
++
++ BOOLEAN bUpdateBcnCntDone;
++ ULONG watchDogMacDeadlock; // prevent MAC/BBP into deadlock condition
++ // ----------------------------
++ // DEBUG paramerts
++ // ----------------------------
++ //ULONG DebugSetting[4];
++ BOOLEAN bBanAllBaSetup;
++ BOOLEAN bPromiscuous;
++
++ // ----------------------------
++ // rt2860c emulation-use Parameters
++ // ----------------------------
++ ULONG rtsaccu[30];
++ ULONG ctsaccu[30];
++ ULONG cfendaccu[30];
++ ULONG bacontent[16];
++ ULONG rxint[RX_RING_SIZE+1];
++ UCHAR rcvba[60];
++ BOOLEAN bLinkAdapt;
++ BOOLEAN bForcePrintTX;
++ BOOLEAN bForcePrintRX;
++ BOOLEAN bDisablescanning; //defined in RT2870 USB
++ BOOLEAN bStaFifoTest;
++ BOOLEAN bProtectionTest;
++ BOOLEAN bHCCATest;
++ BOOLEAN bGenOneHCCA;
++ BOOLEAN bBroadComHT;
++ //+++Following add from RT2870 USB.
++ ULONG BulkOutReq;
++ ULONG BulkOutComplete;
++ ULONG BulkOutCompleteOther;
++ ULONG BulkOutCompleteCancel; // seems not use now?
++ ULONG BulkInReq;
++ ULONG BulkInComplete;
++ ULONG BulkInCompleteFail;
++ //---
++
++ struct wificonf WIFItestbed;
++
++#ifdef RALINK_ATE
++ ATE_INFO ate;
++#ifdef RT2870
++ BOOLEAN ContinBulkOut; //ATE bulk out control
++ BOOLEAN ContinBulkIn; //ATE bulk in control
++ atomic_t BulkOutRemained;
++ atomic_t BulkInRemained;
++#endif // RT2870 //
++#endif // RALINK_ATE //
++
++#ifdef DOT11_N_SUPPORT
++ struct reordering_mpdu_pool mpdu_blk_pool;
++#endif // DOT11_N_SUPPORT //
++
++ ULONG OneSecondnonBEpackets; // record non BE packets per second
++
++#if WIRELESS_EXT >= 12
++ struct iw_statistics iw_stats;
++#endif
++
++ struct net_device_stats stats;
++
++#ifdef BLOCK_NET_IF
++ BLOCK_QUEUE_ENTRY blockQueueTab[NUM_OF_TX_RING];
++#endif // BLOCK_NET_IF //
++
++
++
++#ifdef MULTIPLE_CARD_SUPPORT
++ INT32 MC_RowID;
++ UCHAR MC_FileName[256];
++#endif // MULTIPLE_CARD_SUPPORT //
++
++ ULONG TbttTickCount;
++#ifdef PCI_MSI_SUPPORT
++ BOOLEAN HaveMsi;
++#endif // PCI_MSI_SUPPORT //
++
++
++ UCHAR is_on;
++
++#define TIME_BASE (1000000/OS_HZ)
++#define TIME_ONE_SECOND (1000000/TIME_BASE)
++ UCHAR flg_be_adjust;
++ ULONG be_adjust_last_time;
++
++
++#ifdef IKANOS_VX_1X0
++ struct IKANOS_TX_INFO IkanosTxInfo;
++ struct IKANOS_TX_INFO IkanosRxInfo[MAX_MBSSID_NUM + MAX_WDS_ENTRY + MAX_APCLI_NUM + MAX_MESH_NUM];
++#endif // IKANOS_VX_1X0 //
++
++
++#ifdef DBG_DIAGNOSE
++ RtmpDiagStruct DiagStruct;
++#endif // DBG_DIAGNOSE //
++
++
++ UINT8 PM_FlgSuspend;
++} RTMP_ADAPTER, *PRTMP_ADAPTER;
++
++//
++// Cisco IAPP format
++//
++typedef struct _CISCO_IAPP_CONTENT_
++{
++ USHORT Length; //IAPP Length
++ UCHAR MessageType; //IAPP type
++ UCHAR FunctionCode; //IAPP function type
++ UCHAR DestinaionMAC[MAC_ADDR_LEN];
++ UCHAR SourceMAC[MAC_ADDR_LEN];
++ USHORT Tag; //Tag(element IE) - Adjacent AP report
++ USHORT TagLength; //Length of element not including 4 byte header
++ UCHAR OUI[4]; //0x00, 0x40, 0x96, 0x00
++ UCHAR PreviousAP[MAC_ADDR_LEN]; //MAC Address of access point
++ USHORT Channel;
++ USHORT SsidLen;
++ UCHAR Ssid[MAX_LEN_OF_SSID];
++ USHORT Seconds; //Seconds that the client has been disassociated.
++} CISCO_IAPP_CONTENT, *PCISCO_IAPP_CONTENT;
++
++#define DELAYINTMASK 0x0003fffb
++#define INTMASK 0x0003fffb
++#define IndMask 0x0003fffc
++#define RxINT 0x00000005 // Delayed Rx or indivi rx
++#define TxDataInt 0x000000fa // Delayed Tx or indivi tx
++#define TxMgmtInt 0x00000102 // Delayed Tx or indivi tx
++#define TxCoherent 0x00020000 // tx coherent
++#define RxCoherent 0x00010000 // rx coherent
++#define McuCommand 0x00000200 // mcu
++#define PreTBTTInt 0x00001000 // Pre-TBTT interrupt
++#define TBTTInt 0x00000800 // TBTT interrupt
++#define GPTimeOutInt 0x00008000 // GPtimeout interrupt
++#define AutoWakeupInt 0x00004000 // AutoWakeupInt interrupt
++#define FifoStaFullInt 0x00002000 // fifo statistics full interrupt
++
++
++typedef struct _RX_BLK_
++{
++// RXD_STRUC RxD; // sample
++ RT28XX_RXD_STRUC RxD;
++ PRXWI_STRUC pRxWI;
++ PHEADER_802_11 pHeader;
++ PNDIS_PACKET pRxPacket;
++ UCHAR *pData;
++ USHORT DataSize;
++ USHORT Flags;
++ UCHAR UserPriority; // for calculate TKIP MIC using
++} RX_BLK;
++
++
++#define RX_BLK_SET_FLAG(_pRxBlk, _flag) (_pRxBlk->Flags |= _flag)
++#define RX_BLK_TEST_FLAG(_pRxBlk, _flag) (_pRxBlk->Flags & _flag)
++#define RX_BLK_CLEAR_FLAG(_pRxBlk, _flag) (_pRxBlk->Flags &= ~(_flag))
++
++
++#define fRX_WDS 0x0001
++#define fRX_AMSDU 0x0002
++#define fRX_ARALINK 0x0004
++#define fRX_HTC 0x0008
++#define fRX_PAD 0x0010
++#define fRX_AMPDU 0x0020
++#define fRX_QOS 0x0040
++#define fRX_INFRA 0x0080
++#define fRX_EAP 0x0100
++#define fRX_MESH 0x0200
++#define fRX_APCLI 0x0400
++#define fRX_DLS 0x0800
++#define fRX_WPI 0x1000
++
++#define LENGTH_AMSDU_SUBFRAMEHEAD 14
++#define LENGTH_ARALINK_SUBFRAMEHEAD 14
++#define LENGTH_ARALINK_HEADER_FIELD 2
++
++#define TX_UNKOWN_FRAME 0x00
++#define TX_MCAST_FRAME 0x01
++#define TX_LEGACY_FRAME 0x02
++#define TX_AMPDU_FRAME 0x04
++#define TX_AMSDU_FRAME 0x08
++#define TX_RALINK_FRAME 0x10
++#define TX_FRAG_FRAME 0x20
++
++
++// Currently the sizeof(TX_BLK) is 148 bytes.
++typedef struct _TX_BLK_
++{
++ UCHAR QueIdx;
++ UCHAR TxFrameType; // Indicate the Transmission type of the all frames in one batch
++ UCHAR TotalFrameNum; // Total frame number want to send-out in one batch
++ USHORT TotalFragNum; // Total frame fragments required in one batch
++ USHORT TotalFrameLen; // Total length of all frames want to send-out in one batch
++
++ QUEUE_HEADER TxPacketList;
++ MAC_TABLE_ENTRY *pMacEntry; // NULL: packet with 802.11 RA field is multicast/broadcast address
++ HTTRANSMIT_SETTING *pTransmit;
++
++ // Following structure used for the characteristics of a specific packet.
++ PNDIS_PACKET pPacket;
++ PUCHAR pSrcBufHeader; // Reference to the head of sk_buff->data
++ PUCHAR pSrcBufData; // Reference to the sk_buff->data, will changed depends on hanlding progresss
++ UINT SrcBufLen; // Length of packet payload which not including Layer 2 header
++ PUCHAR pExtraLlcSnapEncap; // NULL means no extra LLC/SNAP is required
++ UCHAR HeaderBuf[80]; // TempBuffer for TX_INFO + TX_WI + 802.11 Header + padding + AMSDU SubHeader + LLC/SNAP
++ UCHAR MpduHeaderLen; // 802.11 header length NOT including the padding
++ UCHAR HdrPadLen; // recording Header Padding Length;
++ UCHAR apidx; // The interface associated to this packet
++ UCHAR Wcid; // The MAC entry associated to this packet
++ UCHAR UserPriority; // priority class of packet
++ UCHAR FrameGap; // what kind of IFS this packet use
++ UCHAR MpduReqNum; // number of fragments of this frame
++ UCHAR TxRate; // TODO: Obsoleted? Should change to MCS?
++ UCHAR CipherAlg; // cipher alogrithm
++ PCIPHER_KEY pKey;
++
++
++
++ USHORT Flags; //See following definitions for detail.
++
++ //YOU SHOULD NOT TOUCH IT! Following parameters are used for hardware-depended layer.
++ ULONG Priv; // Hardware specific value saved in here.
++} TX_BLK, *PTX_BLK;
++
++
++#define fTX_bRtsRequired 0x0001 // Indicate if need send RTS frame for protection. Not used in RT2860/RT2870.
++#define fTX_bAckRequired 0x0002 // the packet need ack response
++#define fTX_bPiggyBack 0x0004 // Legacy device use Piggback or not
++#define fTX_bHTRate 0x0008 // allow to use HT rate
++//#define fTX_bForceLowRate 0x0010 // force to use Low Rate
++#define fTX_bForceNonQoS 0x0010 // force to transmit frame without WMM-QoS in HT mode
++#define fTX_bAllowFrag 0x0020 // allow to fragment the packet, A-MPDU, A-MSDU, A-Ralink is not allowed to fragment
++#define fTX_bMoreData 0x0040 // there are more data packets in PowerSave Queue
++#define fTX_bWMM 0x0080 // QOS Data
++
++#define fTX_bClearEAPFrame 0x0100
++
++
++#ifdef CONFIG_STA_SUPPORT
++#endif // CONFIG_STA_SUPPORT //
++
++
++
++#define TX_BLK_ASSIGN_FLAG(_pTxBlk, _flag, value) \
++ do { \
++ if (value) \
++ (_pTxBlk->Flags |= _flag) \
++ else \
++ (_pTxBlk->Flags &= ~(_flag)) \
++ }while(0)
++
++#define TX_BLK_SET_FLAG(_pTxBlk, _flag) (_pTxBlk->Flags |= _flag)
++#define TX_BLK_TEST_FLAG(_pTxBlk, _flag) (((_pTxBlk->Flags & _flag) == _flag) ? 1 : 0)
++#define TX_BLK_CLEAR_FLAG(_pTxBlk, _flag) (_pTxBlk->Flags &= ~(_flag))
++
++
++
++
++
++//------------------------------------------------------------------------------------------
++
++
++
++#ifdef RT_BIG_ENDIAN
++static inline VOID WriteBackToDescriptor(
++ IN PUCHAR Dest,
++ IN PUCHAR Src,
++ IN BOOLEAN DoEncrypt,
++ IN ULONG DescriptorType)
++{
++ UINT32 *p1, *p2;
++
++ p1 = ((UINT32 *)Dest);
++ p2 = ((UINT32 *)Src);
++
++ *p1 = *p2;
++ *(p1+2) = *(p2+2);
++ *(p1+3) = *(p2+3);
++ *(p1+1) = *(p2+1); // Word 1; this must be written back last
++}
++
++/*
++ ========================================================================
++
++ Routine Description:
++ Endian conversion of Tx/Rx descriptor .
++
++ Arguments:
++ pAd Pointer to our adapter
++ pData Pointer to Tx/Rx descriptor
++ DescriptorType Direction of the frame
++
++ Return Value:
++ None
++
++ Note:
++ Call this function when read or update descriptor
++ ========================================================================
++*/
++static inline VOID RTMPWIEndianChange(
++ IN PUCHAR pData,
++ IN ULONG DescriptorType)
++{
++ int size;
++ int i;
++
++ size = ((DescriptorType == TYPE_TXWI) ? TXWI_SIZE : RXWI_SIZE);
++
++ if(DescriptorType == TYPE_TXWI)
++ {
++ *((UINT32 *)(pData)) = SWAP32(*((UINT32 *)(pData))); // Byte 0~3
++ *((UINT32 *)(pData + 4)) = SWAP32(*((UINT32 *)(pData+4))); // Byte 4~7
++ }
++ else
++ {
++ for(i=0; i < size/4 ; i++)
++ *(((UINT32 *)pData) +i) = SWAP32(*(((UINT32 *)pData)+i));
++ }
++}
++
++/*
++ ========================================================================
++
++ Routine Description:
++ Endian conversion of Tx/Rx descriptor .
++
++ Arguments:
++ pAd Pointer to our adapter
++ pData Pointer to Tx/Rx descriptor
++ DescriptorType Direction of the frame
++
++ Return Value:
++ None
++
++ Note:
++ Call this function when read or update descriptor
++ ========================================================================
++*/
++
++#ifdef RT2870
++static inline VOID RTMPDescriptorEndianChange(
++ IN PUCHAR pData,
++ IN ULONG DescriptorType)
++{
++ *((UINT32 *)(pData)) = SWAP32(*((UINT32 *)(pData)));
++}
++#endif // RT2870 //
++/*
++ ========================================================================
++
++ Routine Description:
++ Endian conversion of all kinds of 802.11 frames .
++
++ Arguments:
++ pAd Pointer to our adapter
++ pData Pointer to the 802.11 frame structure
++ Dir Direction of the frame
++ FromRxDoneInt Caller is from RxDone interrupt
++
++ Return Value:
++ None
++
++ Note:
++ Call this function when read or update buffer data
++ ========================================================================
++*/
++static inline VOID RTMPFrameEndianChange(
++ IN PRTMP_ADAPTER pAd,
++ IN PUCHAR pData,
++ IN ULONG Dir,
++ IN BOOLEAN FromRxDoneInt)
++{
++ PHEADER_802_11 pFrame;
++ PUCHAR pMacHdr;
++
++ // swab 16 bit fields - Frame Control field
++ if(Dir == DIR_READ)
++ {
++ *(USHORT *)pData = SWAP16(*(USHORT *)pData);
++ }
++
++ pFrame = (PHEADER_802_11) pData;
++ pMacHdr = (PUCHAR) pFrame;
++
++ // swab 16 bit fields - Duration/ID field
++ *(USHORT *)(pMacHdr + 2) = SWAP16(*(USHORT *)(pMacHdr + 2));
++
++ // swab 16 bit fields - Sequence Control field
++ *(USHORT *)(pMacHdr + 22) = SWAP16(*(USHORT *)(pMacHdr + 22));
++
++ if(pFrame->FC.Type == BTYPE_MGMT)
++ {
++ switch(pFrame->FC.SubType)
++ {
++ case SUBTYPE_ASSOC_REQ:
++ case SUBTYPE_REASSOC_REQ:
++ // swab 16 bit fields - CapabilityInfo field
++ pMacHdr += sizeof(HEADER_802_11);
++ *(USHORT *)pMacHdr = SWAP16(*(USHORT *)pMacHdr);
++
++ // swab 16 bit fields - Listen Interval field
++ pMacHdr += 2;
++ *(USHORT *)pMacHdr = SWAP16(*(USHORT *)pMacHdr);
++ break;
++
++ case SUBTYPE_ASSOC_RSP:
++ case SUBTYPE_REASSOC_RSP:
++ // swab 16 bit fields - CapabilityInfo field
++ pMacHdr += sizeof(HEADER_802_11);
++ *(USHORT *)pMacHdr = SWAP16(*(USHORT *)pMacHdr);
++
++ // swab 16 bit fields - Status Code field
++ pMacHdr += 2;
++ *(USHORT *)pMacHdr = SWAP16(*(USHORT *)pMacHdr);
++
++ // swab 16 bit fields - AID field
++ pMacHdr += 2;
++ *(USHORT *)pMacHdr = SWAP16(*(USHORT *)pMacHdr);
++ break;
++
++ case SUBTYPE_AUTH:
++ // If from APHandleRxDoneInterrupt routine, it is still a encrypt format.
++ // The convertion is delayed to RTMPHandleDecryptionDoneInterrupt.
++ if(!FromRxDoneInt && pFrame->FC.Wep == 1)
++ break;
++ else
++ {
++ // swab 16 bit fields - Auth Alg No. field
++ pMacHdr += sizeof(HEADER_802_11);
++ *(USHORT *)pMacHdr = SWAP16(*(USHORT *)pMacHdr);
++
++ // swab 16 bit fields - Auth Seq No. field
++ pMacHdr += 2;
++ *(USHORT *)pMacHdr = SWAP16(*(USHORT *)pMacHdr);
++
++ // swab 16 bit fields - Status Code field
++ pMacHdr += 2;
++ *(USHORT *)pMacHdr = SWAP16(*(USHORT *)pMacHdr);
++ }
++ break;
++
++ case SUBTYPE_BEACON:
++ case SUBTYPE_PROBE_RSP:
++ // swab 16 bit fields - BeaconInterval field
++ pMacHdr += (sizeof(HEADER_802_11) + TIMESTAMP_LEN);
++ *(USHORT *)pMacHdr = SWAP16(*(USHORT *)pMacHdr);
++
++ // swab 16 bit fields - CapabilityInfo field
++ pMacHdr += sizeof(USHORT);
++ *(USHORT *)pMacHdr = SWAP16(*(USHORT *)pMacHdr);
++ break;
++
++ case SUBTYPE_DEAUTH:
++ case SUBTYPE_DISASSOC:
++ // swab 16 bit fields - Reason code field
++ pMacHdr += sizeof(HEADER_802_11);
++ *(USHORT *)pMacHdr = SWAP16(*(USHORT *)pMacHdr);
++ break;
++ }
++ }
++ else if( pFrame->FC.Type == BTYPE_DATA )
++ {
++ }
++ else if(pFrame->FC.Type == BTYPE_CNTL)
++ {
++ switch(pFrame->FC.SubType)
++ {
++ case SUBTYPE_BLOCK_ACK_REQ:
++ {
++ PFRAME_BA_REQ pBAReq = (PFRAME_BA_REQ)pFrame;
++ *(USHORT *)(&pBAReq->BARControl) = SWAP16(*(USHORT *)(&pBAReq->BARControl));
++ pBAReq->BAStartingSeq.word = SWAP16(pBAReq->BAStartingSeq.word);
++ }
++ break;
++ case SUBTYPE_BLOCK_ACK:
++ // For Block Ack packet, the HT_CONTROL field is in the same offset with Addr3
++ *(UINT32 *)(&pFrame->Addr3[0]) = SWAP32(*(UINT32 *)(&pFrame->Addr3[0]));
++ break;
++
++ case SUBTYPE_ACK:
++ //For ACK packet, the HT_CONTROL field is in the same offset with Addr2
++ *(UINT32 *)(&pFrame->Addr2[0])= SWAP32(*(UINT32 *)(&pFrame->Addr2[0]));
++ break;
++ }
++ }
++ else
++ {
++ DBGPRINT(RT_DEBUG_ERROR,("Invalid Frame Type!!!\n"));
++ }
++
++ // swab 16 bit fields - Frame Control
++ if(Dir == DIR_WRITE)
++ {
++ *(USHORT *)pData = SWAP16(*(USHORT *)pData);
++ }
++}
++#endif // RT_BIG_ENDIAN //
++
++
++static inline VOID ConvertMulticastIP2MAC(
++ IN PUCHAR pIpAddr,
++ IN PUCHAR *ppMacAddr,
++ IN UINT16 ProtoType)
++{
++ if (pIpAddr == NULL)
++ return;
++
++ if (ppMacAddr == NULL || *ppMacAddr == NULL)
++ return;
++
++ switch (ProtoType)
++ {
++ case ETH_P_IPV6:
++// memset(*ppMacAddr, 0, ETH_LENGTH_OF_ADDRESS);
++ *(*ppMacAddr) = 0x33;
++ *(*ppMacAddr + 1) = 0x33;
++ *(*ppMacAddr + 2) = pIpAddr[12];
++ *(*ppMacAddr + 3) = pIpAddr[13];
++ *(*ppMacAddr + 4) = pIpAddr[14];
++ *(*ppMacAddr + 5) = pIpAddr[15];
++ break;
++
++ case ETH_P_IP:
++ default:
++// memset(*ppMacAddr, 0, ETH_LENGTH_OF_ADDRESS);
++ *(*ppMacAddr) = 0x01;
++ *(*ppMacAddr + 1) = 0x00;
++ *(*ppMacAddr + 2) = 0x5e;
++ *(*ppMacAddr + 3) = pIpAddr[1] & 0x7f;
++ *(*ppMacAddr + 4) = pIpAddr[2];
++ *(*ppMacAddr + 5) = pIpAddr[3];
++ break;
++ }
++
++ return;
++}
++
++BOOLEAN RTMPCheckForHang(
++ IN NDIS_HANDLE MiniportAdapterContext
++ );
++
++VOID RTMPHalt(
++ IN NDIS_HANDLE MiniportAdapterContext
++ );
++
++//
++// Private routines in rtmp_init.c
++//
++NDIS_STATUS RTMPAllocAdapterBlock(
++ IN PVOID handle,
++ OUT PRTMP_ADAPTER *ppAdapter
++ );
++
++NDIS_STATUS RTMPAllocTxRxRingMemory(
++ IN PRTMP_ADAPTER pAd
++ );
++
++NDIS_STATUS RTMPFindAdapter(
++ IN PRTMP_ADAPTER pAd,
++ IN NDIS_HANDLE WrapperConfigurationContext
++ );
++
++NDIS_STATUS RTMPReadParametersHook(
++ IN PRTMP_ADAPTER pAd
++ );
++
++VOID RTMPFreeAdapter(
++ IN PRTMP_ADAPTER pAd
++ );
++
++NDIS_STATUS NICReadRegParameters(
++ IN PRTMP_ADAPTER pAd,
++ IN NDIS_HANDLE WrapperConfigurationContext
++ );
++
++#ifdef RT2870
++VOID NICInitRT30xxRFRegisters(
++ IN PRTMP_ADAPTER pAd);
++#endif // RT2870 //
++
++VOID NICReadEEPROMParameters(
++ IN PRTMP_ADAPTER pAd,
++ IN PUCHAR mac_addr);
++
++VOID NICInitAsicFromEEPROM(
++ IN PRTMP_ADAPTER pAd);
++
++VOID NICInitTxRxRingAndBacklogQueue(
++ IN PRTMP_ADAPTER pAd);
++
++NDIS_STATUS NICInitializeAdapter(
++ IN PRTMP_ADAPTER pAd,
++ IN BOOLEAN bHardReset);
++
++NDIS_STATUS NICInitializeAsic(
++ IN PRTMP_ADAPTER pAd,
++ IN BOOLEAN bHardReset);
++
++VOID NICIssueReset(
++ IN PRTMP_ADAPTER pAd);
++
++VOID RTMPRingCleanUp(
++ IN PRTMP_ADAPTER pAd,
++ IN UCHAR RingType);
++
++VOID RxTest(
++ IN PRTMP_ADAPTER pAd);
++
++NDIS_STATUS DbgSendPacket(
++ IN PRTMP_ADAPTER pAd,
++ IN PNDIS_PACKET pPacket);
++
++VOID UserCfgInit(
++ IN PRTMP_ADAPTER pAd);
++
++VOID NICResetFromError(
++ IN PRTMP_ADAPTER pAd);
++
++VOID NICEraseFirmware(
++ IN PRTMP_ADAPTER pAd);
++
++NDIS_STATUS NICLoadFirmware(
++ IN PRTMP_ADAPTER pAd);
++
++NDIS_STATUS NICLoadRateSwitchingParams(
++ IN PRTMP_ADAPTER pAd);
++
++BOOLEAN NICCheckForHang(
++ IN PRTMP_ADAPTER pAd);
++
++VOID NICUpdateFifoStaCounters(
++ IN PRTMP_ADAPTER pAd);
++
++VOID NICUpdateRawCounters(
++ IN PRTMP_ADAPTER pAd);
++
++#if 0
++ULONG RTMPEqualMemory(
++ IN PVOID pSrc1,
++ IN PVOID pSrc2,
++ IN ULONG Length);
++#endif
++
++ULONG RTMPNotAllZero(
++ IN PVOID pSrc1,
++ IN ULONG Length);
++
++VOID RTMPZeroMemory(
++ IN PVOID pSrc,
++ IN ULONG Length);
++
++ULONG RTMPCompareMemory(
++ IN PVOID pSrc1,
++ IN PVOID pSrc2,
++ IN ULONG Length);
++
++VOID RTMPMoveMemory(
++ OUT PVOID pDest,
++ IN PVOID pSrc,
++ IN ULONG Length);
++
++VOID AtoH(
++ char *src,
++ UCHAR *dest,
++ int destlen);
++
++UCHAR BtoH(
++ char ch);
++
++VOID RTMPPatchMacBbpBug(
++ IN PRTMP_ADAPTER pAd);
++
++VOID RTMPPatchCardBus(
++ IN PRTMP_ADAPTER pAdapter);
++
++VOID RTMPPatchRalinkCardBus(
++ IN PRTMP_ADAPTER pAdapter,
++ IN ULONG Bus);
++
++ULONG RTMPReadCBConfig(
++ IN ULONG Bus,
++ IN ULONG Slot,
++ IN ULONG Func,
++ IN ULONG Offset);
++
++VOID RTMPWriteCBConfig(
++ IN ULONG Bus,
++ IN ULONG Slot,
++ IN ULONG Func,
++ IN ULONG Offset,
++ IN ULONG Value);
++
++VOID RTMPInitTimer(
++ IN PRTMP_ADAPTER pAd,
++ IN PRALINK_TIMER_STRUCT pTimer,
++ IN PVOID pTimerFunc,
++ IN PVOID pData,
++ IN BOOLEAN Repeat);
++
++VOID RTMPSetTimer(
++ IN PRALINK_TIMER_STRUCT pTimer,
++ IN ULONG Value);
++
++
++VOID RTMPModTimer(
++ IN PRALINK_TIMER_STRUCT pTimer,
++ IN ULONG Value);
++
++VOID RTMPCancelTimer(
++ IN PRALINK_TIMER_STRUCT pTimer,
++ OUT BOOLEAN *pCancelled);
++
++VOID RTMPSetLED(
++ IN PRTMP_ADAPTER pAd,
++ IN UCHAR Status);
++
++VOID RTMPSetSignalLED(
++ IN PRTMP_ADAPTER pAd,
++ IN NDIS_802_11_RSSI Dbm);
++
++VOID RTMPEnableRxTx(
++ IN PRTMP_ADAPTER pAd);
++
++//
++// prototype in action.c
++//
++VOID ActionStateMachineInit(
++ IN PRTMP_ADAPTER pAd,
++ IN STATE_MACHINE *S,
++ OUT STATE_MACHINE_FUNC Trans[]);
++
++VOID MlmeADDBAAction(
++ IN PRTMP_ADAPTER pAd,
++ IN MLME_QUEUE_ELEM *Elem);
++
++VOID MlmeDELBAAction(
++ IN PRTMP_ADAPTER pAd,
++ IN MLME_QUEUE_ELEM *Elem);
++
++VOID MlmeDLSAction(
++ IN PRTMP_ADAPTER pAd,
++ IN MLME_QUEUE_ELEM *Elem);
++
++VOID MlmeInvalidAction(
++ IN PRTMP_ADAPTER pAd,
++ IN MLME_QUEUE_ELEM *Elem);
++
++VOID MlmeQOSAction(
++ IN PRTMP_ADAPTER pAd,
++ IN MLME_QUEUE_ELEM *Elem);
++
++#ifdef DOT11_N_SUPPORT
++VOID PeerAddBAReqAction(
++ IN PRTMP_ADAPTER pAd,
++ IN MLME_QUEUE_ELEM *Elem);
++
++VOID PeerAddBARspAction(
++ IN PRTMP_ADAPTER pAd,
++ IN MLME_QUEUE_ELEM *Elem);
++
++VOID PeerDelBAAction(
++ IN PRTMP_ADAPTER pAd,
++ IN MLME_QUEUE_ELEM *Elem);
++
++VOID PeerBAAction(
++ IN PRTMP_ADAPTER pAd,
++ IN MLME_QUEUE_ELEM *Elem);
++#endif // DOT11_N_SUPPORT //
++
++VOID SendPSMPAction(
++ IN PRTMP_ADAPTER pAd,
++ IN UCHAR Wcid,
++ IN UCHAR Psmp);
++
++
++#ifdef DOT11N_DRAFT3
++VOID SendBSS2040CoexistMgmtAction(
++ IN PRTMP_ADAPTER pAd,
++ IN UCHAR Wcid,
++ IN UCHAR apidx,
++ IN UCHAR InfoReq);
++
++VOID SendNotifyBWActionFrame(
++ IN PRTMP_ADAPTER pAd,
++ IN UCHAR Wcid,
++ IN UCHAR apidx);
++
++BOOLEAN ChannelSwitchSanityCheck(
++ IN PRTMP_ADAPTER pAd,
++ IN UCHAR Wcid,
++ IN UCHAR NewChannel,
++ IN UCHAR Secondary);
++
++VOID ChannelSwitchAction(
++ IN PRTMP_ADAPTER pAd,
++ IN UCHAR Wcid,
++ IN UCHAR Channel,
++ IN UCHAR Secondary);
++
++ULONG BuildIntolerantChannelRep(
++ IN PRTMP_ADAPTER pAd,
++ IN PUCHAR pDest);
++
++VOID Update2040CoexistFrameAndNotify(
++ IN PRTMP_ADAPTER pAd,
++ IN UCHAR Wcid,
++ IN BOOLEAN bAddIntolerantCha);
++
++VOID Send2040CoexistAction(
++ IN PRTMP_ADAPTER pAd,
++ IN UCHAR Wcid,
++ IN BOOLEAN bAddIntolerantCha);
++#endif // DOT11N_DRAFT3 //
++
++VOID PeerRMAction(
++ IN PRTMP_ADAPTER pAd,
++ IN MLME_QUEUE_ELEM *Elem);
++
++VOID PeerPublicAction(
++ IN PRTMP_ADAPTER pAd,
++ IN MLME_QUEUE_ELEM *Elem);
++
++#ifdef CONFIG_STA_SUPPORT
++VOID StaPublicAction(
++ IN PRTMP_ADAPTER pAd,
++ IN UCHAR Bss2040Coexist);
++#endif // CONFIG_STA_SUPPORT //
++
++
++VOID PeerBSSTranAction(
++ IN PRTMP_ADAPTER pAd,
++ IN MLME_QUEUE_ELEM *Elem);
++
++#ifdef DOT11_N_SUPPORT
++VOID PeerHTAction(
++ IN PRTMP_ADAPTER pAd,
++ IN MLME_QUEUE_ELEM *Elem);
++#endif // DOT11_N_SUPPORT //
++
++VOID PeerQOSAction(
++ IN PRTMP_ADAPTER pAd,
++ IN MLME_QUEUE_ELEM *Elem);
++
++#ifdef QOS_DLS_SUPPORT
++VOID PeerDLSAction(
++ IN PRTMP_ADAPTER pAd,
++ IN MLME_QUEUE_ELEM *Elem);
++#endif // QOS_DLS_SUPPORT //
++
++#ifdef CONFIG_STA_SUPPORT
++#ifdef QOS_DLS_SUPPORT
++VOID DlsParmFill(
++ IN PRTMP_ADAPTER pAd,
++ IN OUT MLME_DLS_REQ_STRUCT *pDlsReq,
++ IN PRT_802_11_DLS pDls,
++ IN USHORT reason);
++#endif // QOS_DLS_SUPPORT //
++#endif // CONFIG_STA_SUPPORT //
++
++#ifdef DOT11_N_SUPPORT
++VOID RECBATimerTimeout(
++ IN PVOID SystemSpecific1,
++ IN PVOID FunctionContext,
++ IN PVOID SystemSpecific2,
++ IN PVOID SystemSpecific3);
++
++VOID ORIBATimerTimeout(
++ IN PRTMP_ADAPTER pAd);
++
++VOID SendRefreshBAR(
++ IN PRTMP_ADAPTER pAd,
++ IN MAC_TABLE_ENTRY *pEntry);
++#endif // DOT11_N_SUPPORT //
++
++VOID ActHeaderInit(
++ IN PRTMP_ADAPTER pAd,
++ IN OUT PHEADER_802_11 pHdr80211,
++ IN PUCHAR Addr1,
++ IN PUCHAR Addr2,
++ IN PUCHAR Addr3);
++
++VOID BarHeaderInit(
++ IN PRTMP_ADAPTER pAd,
++ IN OUT PFRAME_BAR pCntlBar,
++ IN PUCHAR pDA,
++ IN PUCHAR pSA);
++
++VOID InsertActField(
++ IN PRTMP_ADAPTER pAd,
++ OUT PUCHAR pFrameBuf,
++ OUT PULONG pFrameLen,
++ IN UINT8 Category,
++ IN UINT8 ActCode);
++
++BOOLEAN QosBADataParse(
++ IN PRTMP_ADAPTER pAd,
++ IN BOOLEAN bAMSDU,
++ IN PUCHAR p8023Header,
++ IN UCHAR WCID,
++ IN UCHAR TID,
++ IN USHORT Sequence,
++ IN UCHAR DataOffset,
++ IN USHORT Datasize,
++ IN UINT CurRxIndex);
++
++#ifdef DOT11_N_SUPPORT
++BOOLEAN CntlEnqueueForRecv(
++ IN PRTMP_ADAPTER pAd,
++ IN ULONG Wcid,
++ IN ULONG MsgLen,
++ IN PFRAME_BA_REQ pMsg);
++
++VOID BaAutoManSwitch(
++ IN PRTMP_ADAPTER pAd);
++#endif // DOT11_N_SUPPORT //
++
++VOID HTIOTCheck(
++ IN PRTMP_ADAPTER pAd,
++ IN UCHAR BatRecIdx);
++
++//
++// Private routines in rtmp_data.c
++//
++BOOLEAN RTMPHandleRxDoneInterrupt(
++ IN PRTMP_ADAPTER pAd);
++
++VOID RTMPHandleTxDoneInterrupt(
++ IN PRTMP_ADAPTER pAd);
++
++BOOLEAN RTMPHandleTxRingDmaDoneInterrupt(
++ IN PRTMP_ADAPTER pAd,
++ IN INT_SOURCE_CSR_STRUC TxRingBitmap);
++
++VOID RTMPHandleMgmtRingDmaDoneInterrupt(
++ IN PRTMP_ADAPTER pAd);
++
++VOID RTMPHandleTBTTInterrupt(
++ IN PRTMP_ADAPTER pAd);
++
++VOID RTMPHandlePreTBTTInterrupt(
++ IN PRTMP_ADAPTER pAd);
++
++void RTMPHandleTwakeupInterrupt(
++ IN PRTMP_ADAPTER pAd);
++
++VOID RTMPHandleRxCoherentInterrupt(
++ IN PRTMP_ADAPTER pAd);
++
++BOOLEAN TxFrameIsAggregatible(
++ IN PRTMP_ADAPTER pAd,
++ IN PUCHAR pPrevAddr1,
++ IN PUCHAR p8023hdr);
++
++BOOLEAN PeerIsAggreOn(
++ IN PRTMP_ADAPTER pAd,
++ IN ULONG TxRate,
++ IN PMAC_TABLE_ENTRY pMacEntry);
++
++#if 0 // It's not be used
++HTTRANSMIT_SETTING *GetTxMode(
++ IN PRTMP_ADAPTER pAd,
++ IN TX_BLK *pTxBlk);
++#endif
++
++NDIS_STATUS Sniff2BytesFromNdisBuffer(
++ IN PNDIS_BUFFER pFirstBuffer,
++ IN UCHAR DesiredOffset,
++ OUT PUCHAR pByte0,
++ OUT PUCHAR pByte1);
++
++NDIS_STATUS STASendPacket(
++ IN PRTMP_ADAPTER pAd,
++ IN PNDIS_PACKET pPacket);
++
++VOID STASendPackets(
++ IN NDIS_HANDLE MiniportAdapterContext,
++ IN PPNDIS_PACKET ppPacketArray,
++ IN UINT NumberOfPackets);
++
++VOID RTMPDeQueuePacket(
++ IN PRTMP_ADAPTER pAd,
++ IN BOOLEAN bIntContext,
++ IN UCHAR QueIdx,
++ IN UCHAR Max_Tx_Packets);
++
++NDIS_STATUS RTMPHardTransmit(
++ IN PRTMP_ADAPTER pAd,
++ IN PNDIS_PACKET pPacket,
++ IN UCHAR QueIdx,
++ OUT PULONG pFreeTXDLeft);
++
++NDIS_STATUS STAHardTransmit(
++ IN PRTMP_ADAPTER pAd,
++ IN TX_BLK *pTxBlk,
++ IN UCHAR QueIdx);
++
++VOID STARxEAPOLFrameIndicate(
++ IN PRTMP_ADAPTER pAd,
++ IN MAC_TABLE_ENTRY *pEntry,
++ IN RX_BLK *pRxBlk,
++ IN UCHAR FromWhichBSSID);
++
++NDIS_STATUS RTMPFreeTXDRequest(
++ IN PRTMP_ADAPTER pAd,
++ IN UCHAR RingType,
++ IN UCHAR NumberRequired,
++ IN PUCHAR FreeNumberIs);
++
++NDIS_STATUS MlmeHardTransmit(
++ IN PRTMP_ADAPTER pAd,
++ IN UCHAR QueIdx,
++ IN PNDIS_PACKET pPacket);
++
++NDIS_STATUS MlmeHardTransmitMgmtRing(
++ IN PRTMP_ADAPTER pAd,
++ IN UCHAR QueIdx,
++ IN PNDIS_PACKET pPacket);
++
++NDIS_STATUS MlmeHardTransmitTxRing(
++ IN PRTMP_ADAPTER pAd,
++ IN UCHAR QueIdx,
++ IN PNDIS_PACKET pPacket);
++
++USHORT RTMPCalcDuration(
++ IN PRTMP_ADAPTER pAd,
++ IN UCHAR Rate,
++ IN ULONG Size);
++
++VOID RTMPWriteTxWI(
++ IN PRTMP_ADAPTER pAd,
++ IN PTXWI_STRUC pTxWI,
++ IN BOOLEAN FRAG,
++ IN BOOLEAN CFACK,
++ IN BOOLEAN InsTimestamp,
++ IN BOOLEAN AMPDU,
++ IN BOOLEAN Ack,
++ IN BOOLEAN NSeq, // HW new a sequence.
++ IN UCHAR BASize,
++ IN UCHAR WCID,
++ IN ULONG Length,
++ IN UCHAR PID,
++ IN UCHAR TID,
++ IN UCHAR TxRate,
++ IN UCHAR Txopmode,
++ IN BOOLEAN CfAck,
++ IN HTTRANSMIT_SETTING *pTransmit);
++
++
++VOID RTMPWriteTxWI_Data(
++ IN PRTMP_ADAPTER pAd,
++ IN OUT PTXWI_STRUC pTxWI,
++ IN TX_BLK *pTxBlk);
++
++
++VOID RTMPWriteTxWI_Cache(
++ IN PRTMP_ADAPTER pAd,
++ IN OUT PTXWI_STRUC pTxWI,
++ IN TX_BLK *pTxBlk);
++
++VOID RTMPWriteTxDescriptor(
++ IN PRTMP_ADAPTER pAd,
++ IN PTXD_STRUC pTxD,
++ IN BOOLEAN bWIV,
++ IN UCHAR QSEL);
++
++VOID RTMPSuspendMsduTransmission(
++ IN PRTMP_ADAPTER pAd);
++
++VOID RTMPResumeMsduTransmission(
++ IN PRTMP_ADAPTER pAd);
++
++NDIS_STATUS MiniportMMRequest(
++ IN PRTMP_ADAPTER pAd,
++ IN UCHAR QueIdx,
++ IN PUCHAR pData,
++ IN UINT Length);
++
++NDIS_STATUS MiniportDataMMRequest(
++ IN PRTMP_ADAPTER pAd,
++ IN UCHAR QueIdx,
++ IN PUCHAR pData,
++ IN UINT Length);
++
++VOID RTMPSendNullFrame(
++ IN PRTMP_ADAPTER pAd,
++ IN UCHAR TxRate,
++ IN BOOLEAN bQosNull);
++
++VOID RTMPSendDisassociationFrame(
++ IN PRTMP_ADAPTER pAd);
++
++VOID RTMPSendRTSFrame(
++ IN PRTMP_ADAPTER pAd,
++ IN PUCHAR pDA,
++ IN unsigned int NextMpduSize,
++ IN UCHAR TxRate,
++ IN UCHAR RTSRate,
++ IN USHORT AckDuration,
++ IN UCHAR QueIdx,
++ IN UCHAR FrameGap);
++
++
++NDIS_STATUS RTMPApplyPacketFilter(
++ IN PRTMP_ADAPTER pAd,
++ IN PRT28XX_RXD_STRUC pRxD,
++ IN PHEADER_802_11 pHeader);
++
++PQUEUE_HEADER RTMPCheckTxSwQueue(
++ IN PRTMP_ADAPTER pAd,
++ OUT UCHAR *QueIdx);
++
++#ifdef CONFIG_STA_SUPPORT
++VOID RTMPReportMicError(
++ IN PRTMP_ADAPTER pAd,
++ IN PCIPHER_KEY pWpaKey);
++
++VOID WpaMicFailureReportFrame(
++ IN PRTMP_ADAPTER pAd,
++ IN MLME_QUEUE_ELEM *Elem);
++
++VOID WpaDisassocApAndBlockAssoc(
++ IN PVOID SystemSpecific1,
++ IN PVOID FunctionContext,
++ IN PVOID SystemSpecific2,
++ IN PVOID SystemSpecific3);
++#endif // CONFIG_STA_SUPPORT //
++
++NDIS_STATUS RTMPCloneNdisPacket(
++ IN PRTMP_ADAPTER pAd,
++ IN BOOLEAN pInsAMSDUHdr,
++ IN PNDIS_PACKET pInPacket,
++ OUT PNDIS_PACKET *ppOutPacket);
++
++NDIS_STATUS RTMPAllocateNdisPacket(
++ IN PRTMP_ADAPTER pAd,
++ IN PNDIS_PACKET *pPacket,
++ IN PUCHAR pHeader,
++ IN UINT HeaderLen,
++ IN PUCHAR pData,
++ IN UINT DataLen);
++
++VOID RTMPFreeNdisPacket(
++ IN PRTMP_ADAPTER pAd,
++ IN PNDIS_PACKET pPacket);
++
++BOOLEAN RTMPFreeTXDUponTxDmaDone(
++ IN PRTMP_ADAPTER pAd,
++ IN UCHAR QueIdx);
++
++BOOLEAN RTMPCheckDHCPFrame(
++ IN PRTMP_ADAPTER pAd,
++ IN PNDIS_PACKET pPacket);
++
++
++BOOLEAN RTMPCheckEtherType(
++ IN PRTMP_ADAPTER pAd,
++ IN PNDIS_PACKET pPacket);
++
++
++VOID RTMPCckBbpTuning(
++ IN PRTMP_ADAPTER pAd,
++ IN UINT TxRate);
++
++//
++// Private routines in rtmp_wep.c
++//
++VOID RTMPInitWepEngine(
++ IN PRTMP_ADAPTER pAd,
++ IN PUCHAR pKey,
++ IN UCHAR KeyId,
++ IN UCHAR KeyLen,
++ IN PUCHAR pDest);
++
++VOID RTMPEncryptData(
++ IN PRTMP_ADAPTER pAd,
++ IN PUCHAR pSrc,
++ IN PUCHAR pDest,
++ IN UINT Len);
++
++BOOLEAN RTMPDecryptData(
++ IN PRTMP_ADAPTER pAdapter,
++ IN PUCHAR pSrc,
++ IN UINT Len,
++ IN UINT idx);
++
++BOOLEAN RTMPSoftDecryptWEP(
++ IN PRTMP_ADAPTER pAd,
++ IN PUCHAR pData,
++ IN ULONG DataByteCnt,
++ IN PCIPHER_KEY pGroupKey);
++
++VOID RTMPSetICV(
++ IN PRTMP_ADAPTER pAd,
++ IN PUCHAR pDest);
++
++VOID ARCFOUR_INIT(
++ IN PARCFOURCONTEXT Ctx,
++ IN PUCHAR pKey,
++ IN UINT KeyLen);
++
++UCHAR ARCFOUR_BYTE(
++ IN PARCFOURCONTEXT Ctx);
++
++VOID ARCFOUR_DECRYPT(
++ IN PARCFOURCONTEXT Ctx,
++ IN PUCHAR pDest,
++ IN PUCHAR pSrc,
++ IN UINT Len);
++
++VOID ARCFOUR_ENCRYPT(
++ IN PARCFOURCONTEXT Ctx,
++ IN PUCHAR pDest,
++ IN PUCHAR pSrc,
++ IN UINT Len);
++
++VOID WPAARCFOUR_ENCRYPT(
++ IN PARCFOURCONTEXT Ctx,
++ IN PUCHAR pDest,
++ IN PUCHAR pSrc,
++ IN UINT Len);
++
++UINT RTMP_CALC_FCS32(
++ IN UINT Fcs,
++ IN PUCHAR Cp,
++ IN INT Len);
++
++//
++// MLME routines
++//
++
++// Asic/RF/BBP related functions
++
++VOID AsicAdjustTxPower(
++ IN PRTMP_ADAPTER pAd);
++
++VOID AsicUpdateProtect(
++ IN PRTMP_ADAPTER pAd,
++ IN USHORT OperaionMode,
++ IN UCHAR SetMask,
++ IN BOOLEAN bDisableBGProtect,
++ IN BOOLEAN bNonGFExist);
++
++VOID AsicSwitchChannel(
++ IN PRTMP_ADAPTER pAd,
++ IN UCHAR Channel,
++ IN BOOLEAN bScan);
++
++VOID AsicLockChannel(
++ IN PRTMP_ADAPTER pAd,
++ IN UCHAR Channel) ;
++
++VOID AsicAntennaSelect(
++ IN PRTMP_ADAPTER pAd,
++ IN UCHAR Channel);
++
++VOID AsicAntennaSetting(
++ IN PRTMP_ADAPTER pAd,
++ IN ABGBAND_STATE BandState);
++
++VOID AsicRfTuningExec(
++ IN PVOID SystemSpecific1,
++ IN PVOID FunctionContext,
++ IN PVOID SystemSpecific2,
++ IN PVOID SystemSpecific3);
++
++#ifdef CONFIG_STA_SUPPORT
++VOID AsicSleepThenAutoWakeup(
++ IN PRTMP_ADAPTER pAd,
++ IN USHORT TbttNumToNextWakeUp);
++
++VOID AsicForceSleep(
++ IN PRTMP_ADAPTER pAd);
++
++VOID AsicForceWakeup(
++ IN PRTMP_ADAPTER pAd,
++ IN BOOLEAN bFromTx);
++#endif // CONFIG_STA_SUPPORT //
++
++VOID AsicSetBssid(
++ IN PRTMP_ADAPTER pAd,
++ IN PUCHAR pBssid);
++
++VOID AsicSetMcastWC(
++ IN PRTMP_ADAPTER pAd);
++
++#if 0 // removed by AlbertY
++VOID AsicSetBssidWC(
++ IN PRTMP_ADAPTER pAd,
++ IN PUCHAR pBssid);
++#endif
++
++VOID AsicDelWcidTab(
++ IN PRTMP_ADAPTER pAd,
++ IN UCHAR Wcid);
++
++VOID AsicEnableRDG(
++ IN PRTMP_ADAPTER pAd);
++
++VOID AsicDisableRDG(
++ IN PRTMP_ADAPTER pAd);
++
++VOID AsicDisableSync(
++ IN PRTMP_ADAPTER pAd);
++
++VOID AsicEnableBssSync(
++ IN PRTMP_ADAPTER pAd);
++
++VOID AsicEnableIbssSync(
++ IN PRTMP_ADAPTER pAd);
++
++VOID AsicSetEdcaParm(
++ IN PRTMP_ADAPTER pAd,
++ IN PEDCA_PARM pEdcaParm);
++
++VOID AsicSetSlotTime(
++ IN PRTMP_ADAPTER pAd,
++ IN BOOLEAN bUseShortSlotTime);
++
++#if 0
++VOID AsicAddWcidCipherEntry(
++ IN PRTMP_ADAPTER pAd,
++ IN UCHAR WCID,
++ IN UCHAR BssIndex,
++ IN UCHAR KeyTable,
++ IN UCHAR CipherAlg,
++ IN PUCHAR pAddr,
++ IN CIPHER_KEY *pCipherKey);
++#endif
++
++VOID AsicAddSharedKeyEntry(
++ IN PRTMP_ADAPTER pAd,
++ IN UCHAR BssIndex,
++ IN UCHAR KeyIdx,
++ IN UCHAR CipherAlg,
++ IN PUCHAR pKey,
++ IN PUCHAR pTxMic,
++ IN PUCHAR pRxMic);
++
++VOID AsicRemoveSharedKeyEntry(
++ IN PRTMP_ADAPTER pAd,
++ IN UCHAR BssIndex,
++ IN UCHAR KeyIdx);
++
++VOID AsicUpdateWCIDAttribute(
++ IN PRTMP_ADAPTER pAd,
++ IN USHORT WCID,
++ IN UCHAR BssIndex,
++ IN UCHAR CipherAlg,
++ IN BOOLEAN bUsePairewiseKeyTable);
++
++VOID AsicUpdateWCIDIVEIV(
++ IN PRTMP_ADAPTER pAd,
++ IN USHORT WCID,
++ IN ULONG uIV,
++ IN ULONG uEIV);
++
++VOID AsicUpdateRxWCIDTable(
++ IN PRTMP_ADAPTER pAd,
++ IN USHORT WCID,
++ IN PUCHAR pAddr);
++
++VOID AsicAddKeyEntry(
++ IN PRTMP_ADAPTER pAd,
++ IN USHORT WCID,
++ IN UCHAR BssIndex,
++ IN UCHAR KeyIdx,
++ IN PCIPHER_KEY pCipherKey,
++ IN BOOLEAN bUsePairewiseKeyTable,
++ IN BOOLEAN bTxKey);
++
++VOID AsicAddPairwiseKeyEntry(
++ IN PRTMP_ADAPTER pAd,
++ IN PUCHAR pAddr,
++ IN UCHAR WCID,
++ IN CIPHER_KEY *pCipherKey);
++
++VOID AsicRemovePairwiseKeyEntry(
++ IN PRTMP_ADAPTER pAd,
++ IN UCHAR BssIdx,
++ IN UCHAR Wcid);
++
++BOOLEAN AsicSendCommandToMcu(
++ IN PRTMP_ADAPTER pAd,
++ IN UCHAR Command,
++ IN UCHAR Token,
++ IN UCHAR Arg0,
++ IN UCHAR Arg1);
++
++
++VOID MacAddrRandomBssid(
++ IN PRTMP_ADAPTER pAd,
++ OUT PUCHAR pAddr);
++
++VOID MgtMacHeaderInit(
++ IN PRTMP_ADAPTER pAd,
++ IN OUT PHEADER_802_11 pHdr80211,
++ IN UCHAR SubType,
++ IN UCHAR ToDs,
++ IN PUCHAR pDA,
++ IN PUCHAR pBssid);
++
++VOID MlmeRadioOff(
++ IN PRTMP_ADAPTER pAd);
++
++VOID MlmeRadioOn(
++ IN PRTMP_ADAPTER pAd);
++
++
++VOID BssTableInit(
++ IN BSS_TABLE *Tab);
++
++#ifdef DOT11_N_SUPPORT
++VOID BATableInit(
++ IN PRTMP_ADAPTER pAd,
++ IN BA_TABLE *Tab);
++#endif // DOT11_N_SUPPORT //
++
++ULONG BssTableSearch(
++ IN BSS_TABLE *Tab,
++ IN PUCHAR pBssid,
++ IN UCHAR Channel);
++
++ULONG BssSsidTableSearch(
++ IN BSS_TABLE *Tab,
++ IN PUCHAR pBssid,
++ IN PUCHAR pSsid,
++ IN UCHAR SsidLen,
++ IN UCHAR Channel);
++
++ULONG BssTableSearchWithSSID(
++ IN BSS_TABLE *Tab,
++ IN PUCHAR Bssid,
++ IN PUCHAR pSsid,
++ IN UCHAR SsidLen,
++ IN UCHAR Channel);
++
++VOID BssTableDeleteEntry(
++ IN OUT PBSS_TABLE pTab,
++ IN PUCHAR pBssid,
++ IN UCHAR Channel);
++
++#ifdef DOT11_N_SUPPORT
++VOID BATableDeleteORIEntry(
++ IN OUT PRTMP_ADAPTER pAd,
++ IN BA_ORI_ENTRY *pBAORIEntry);
++
++VOID BATableDeleteRECEntry(
++ IN OUT PRTMP_ADAPTER pAd,
++ IN BA_REC_ENTRY *pBARECEntry);
++
++VOID BATableTearORIEntry(
++ IN OUT PRTMP_ADAPTER pAd,
++ IN UCHAR TID,
++ IN UCHAR Wcid,
++ IN BOOLEAN bForceDelete,
++ IN BOOLEAN ALL);
++
++VOID BATableTearRECEntry(
++ IN OUT PRTMP_ADAPTER pAd,
++ IN UCHAR TID,
++ IN UCHAR WCID,
++ IN BOOLEAN ALL);
++#endif // DOT11_N_SUPPORT //
++
++VOID BssEntrySet(
++ IN PRTMP_ADAPTER pAd,
++ OUT PBSS_ENTRY pBss,
++ IN PUCHAR pBssid,
++ IN CHAR Ssid[],
++ IN UCHAR SsidLen,
++ IN UCHAR BssType,
++ IN USHORT BeaconPeriod,
++ IN PCF_PARM CfParm,
++ IN USHORT AtimWin,
++ IN USHORT CapabilityInfo,
++ IN UCHAR SupRate[],
++ IN UCHAR SupRateLen,
++ IN UCHAR ExtRate[],
++ IN UCHAR ExtRateLen,
++ IN HT_CAPABILITY_IE *pHtCapability,
++ IN ADD_HT_INFO_IE *pAddHtInfo, // AP might use this additional ht info IE
++ IN UCHAR HtCapabilityLen,
++ IN UCHAR AddHtInfoLen,
++ IN UCHAR NewExtChanOffset,
++ IN UCHAR Channel,
++ IN CHAR Rssi,
++ IN LARGE_INTEGER TimeStamp,
++ IN UCHAR CkipFlag,
++ IN PEDCA_PARM pEdcaParm,
++ IN PQOS_CAPABILITY_PARM pQosCapability,
++ IN PQBSS_LOAD_PARM pQbssLoad,
++ IN USHORT LengthVIE,
++ IN PNDIS_802_11_VARIABLE_IEs pVIE);
++
++ULONG BssTableSetEntry(
++ IN PRTMP_ADAPTER pAd,
++ OUT PBSS_TABLE pTab,
++ IN PUCHAR pBssid,
++ IN CHAR Ssid[],
++ IN UCHAR SsidLen,
++ IN UCHAR BssType,
++ IN USHORT BeaconPeriod,
++ IN CF_PARM *CfParm,
++ IN USHORT AtimWin,
++ IN USHORT CapabilityInfo,
++ IN UCHAR SupRate[],
++ IN UCHAR SupRateLen,
++ IN UCHAR ExtRate[],
++ IN UCHAR ExtRateLen,
++ IN HT_CAPABILITY_IE *pHtCapability,
++ IN ADD_HT_INFO_IE *pAddHtInfo, // AP might use this additional ht info IE
++ IN UCHAR HtCapabilityLen,
++ IN UCHAR AddHtInfoLen,
++ IN UCHAR NewExtChanOffset,
++ IN UCHAR Channel,
++ IN CHAR Rssi,
++ IN LARGE_INTEGER TimeStamp,
++ IN UCHAR CkipFlag,
++ IN PEDCA_PARM pEdcaParm,
++ IN PQOS_CAPABILITY_PARM pQosCapability,
++ IN PQBSS_LOAD_PARM pQbssLoad,
++ IN USHORT LengthVIE,
++ IN PNDIS_802_11_VARIABLE_IEs pVIE);
++
++#ifdef DOT11_N_SUPPORT
++VOID BATableInsertEntry(
++ IN PRTMP_ADAPTER pAd,
++ IN USHORT Aid,
++ IN USHORT TimeOutValue,
++ IN USHORT StartingSeq,
++ IN UCHAR TID,
++ IN UCHAR BAWinSize,
++ IN UCHAR OriginatorStatus,
++ IN BOOLEAN IsRecipient);
++
++#ifdef DOT11N_DRAFT3
++VOID Bss2040CoexistTimeOut(
++ IN PVOID SystemSpecific1,
++ IN PVOID FunctionContext,
++ IN PVOID SystemSpecific2,
++ IN PVOID SystemSpecific3);
++
++
++VOID TriEventInit(
++ IN PRTMP_ADAPTER pAd);
++
++ULONG TriEventTableSetEntry(
++ IN PRTMP_ADAPTER pAd,
++ OUT TRIGGER_EVENT_TAB *Tab,
++ IN PUCHAR pBssid,
++ IN HT_CAPABILITY_IE *pHtCapability,
++ IN UCHAR HtCapabilityLen,
++ IN UCHAR RegClass,
++ IN UCHAR ChannelNo);
++
++VOID TriEventCounterMaintenance(
++ IN PRTMP_ADAPTER pAd);
++#endif // DOT11N_DRAFT3 //
++#endif // DOT11_N_SUPPORT //
++
++VOID BssTableSsidSort(
++ IN PRTMP_ADAPTER pAd,
++ OUT BSS_TABLE *OutTab,
++ IN CHAR Ssid[],
++ IN UCHAR SsidLen);
++
++VOID BssTableSortByRssi(
++ IN OUT BSS_TABLE *OutTab);
++
++VOID BssCipherParse(
++ IN OUT PBSS_ENTRY pBss);
++
++NDIS_STATUS MlmeQueueInit(
++ IN MLME_QUEUE *Queue);
++
++VOID MlmeQueueDestroy(
++ IN MLME_QUEUE *Queue);
++
++BOOLEAN MlmeEnqueue(
++ IN PRTMP_ADAPTER pAd,
++ IN ULONG Machine,
++ IN ULONG MsgType,
++ IN ULONG MsgLen,
++ IN VOID *Msg);
++
++BOOLEAN MlmeEnqueueForRecv(
++ IN PRTMP_ADAPTER pAd,
++ IN ULONG Wcid,
++ IN ULONG TimeStampHigh,
++ IN ULONG TimeStampLow,
++ IN UCHAR Rssi0,
++ IN UCHAR Rssi1,
++ IN UCHAR Rssi2,
++ IN ULONG MsgLen,
++ IN PVOID Msg,
++ IN UCHAR Signal);
++
++
++BOOLEAN MlmeDequeue(
++ IN MLME_QUEUE *Queue,
++ OUT MLME_QUEUE_ELEM **Elem);
++
++VOID MlmeRestartStateMachine(
++ IN PRTMP_ADAPTER pAd);
++
++BOOLEAN MlmeQueueEmpty(
++ IN MLME_QUEUE *Queue);
++
++BOOLEAN MlmeQueueFull(
++ IN MLME_QUEUE *Queue);
++
++BOOLEAN MsgTypeSubst(
++ IN PRTMP_ADAPTER pAd,
++ IN PFRAME_802_11 pFrame,
++ OUT INT *Machine,
++ OUT INT *MsgType);
++
++VOID StateMachineInit(
++ IN STATE_MACHINE *Sm,
++ IN STATE_MACHINE_FUNC Trans[],
++ IN ULONG StNr,
++ IN ULONG MsgNr,
++ IN STATE_MACHINE_FUNC DefFunc,
++ IN ULONG InitState,
++ IN ULONG Base);
++
++VOID StateMachineSetAction(
++ IN STATE_MACHINE *S,
++ IN ULONG St,
++ ULONG Msg,
++ IN STATE_MACHINE_FUNC F);
++
++VOID StateMachinePerformAction(
++ IN PRTMP_ADAPTER pAd,
++ IN STATE_MACHINE *S,
++ IN MLME_QUEUE_ELEM *Elem);
++
++VOID Drop(
++ IN PRTMP_ADAPTER pAd,
++ IN MLME_QUEUE_ELEM *Elem);
++
++VOID AssocStateMachineInit(
++ IN PRTMP_ADAPTER pAd,
++ IN STATE_MACHINE *Sm,
++ OUT STATE_MACHINE_FUNC Trans[]);
++
++VOID ReassocTimeout(
++ IN PVOID SystemSpecific1,
++ IN PVOID FunctionContext,
++ IN PVOID SystemSpecific2,
++ IN PVOID SystemSpecific3);
++
++VOID AssocTimeout(
++ IN PVOID SystemSpecific1,
++ IN PVOID FunctionContext,
++ IN PVOID SystemSpecific2,
++ IN PVOID SystemSpecific3);
++
++VOID DisassocTimeout(
++ IN PVOID SystemSpecific1,
++ IN PVOID FunctionContext,
++ IN PVOID SystemSpecific2,
++ IN PVOID SystemSpecific3);
++
++//----------------------------------------------
++VOID MlmeDisassocReqAction(
++ IN PRTMP_ADAPTER pAd,
++ IN MLME_QUEUE_ELEM *Elem);
++
++VOID MlmeAssocReqAction(
++ IN PRTMP_ADAPTER pAd,
++ IN MLME_QUEUE_ELEM *Elem);
++
++VOID MlmeReassocReqAction(
++ IN PRTMP_ADAPTER pAd,
++ IN MLME_QUEUE_ELEM *Elem);
++
++VOID MlmeDisassocReqAction(
++ IN PRTMP_ADAPTER pAd,
++ IN MLME_QUEUE_ELEM *Elem);
++
++VOID PeerAssocRspAction(
++ IN PRTMP_ADAPTER pAd,
++ IN MLME_QUEUE_ELEM *Elem);
++
++VOID PeerReassocRspAction(
++ IN PRTMP_ADAPTER pAd,
++ IN MLME_QUEUE_ELEM *Elem);
++
++VOID PeerDisassocAction(
++ IN PRTMP_ADAPTER pAd,
++ IN MLME_QUEUE_ELEM *Elem);
++
++VOID DisassocTimeoutAction(
++ IN PRTMP_ADAPTER pAd,
++ IN MLME_QUEUE_ELEM *Elem);
++
++VOID AssocTimeoutAction(
++ IN PRTMP_ADAPTER pAd,
++ IN MLME_QUEUE_ELEM *Elem);
++
++VOID ReassocTimeoutAction(
++ IN PRTMP_ADAPTER pAd,
++ IN MLME_QUEUE_ELEM *Elem);
++
++VOID Cls3errAction(
++ IN PRTMP_ADAPTER pAd,
++ IN PUCHAR pAddr);
++
++VOID SwitchBetweenWepAndCkip(
++ IN PRTMP_ADAPTER pAd);
++
++VOID InvalidStateWhenAssoc(
++ IN PRTMP_ADAPTER pAd,
++ IN MLME_QUEUE_ELEM *Elem);
++
++VOID InvalidStateWhenReassoc(
++ IN PRTMP_ADAPTER pAd,
++ IN MLME_QUEUE_ELEM *Elem);
++
++VOID InvalidStateWhenDisassociate(
++ IN PRTMP_ADAPTER pAd,
++ IN MLME_QUEUE_ELEM *Elem);
++
++#ifdef RT2870
++VOID MlmeCntlConfirm(
++ IN PRTMP_ADAPTER pAd,
++ IN ULONG MsgType,
++ IN USHORT Msg);
++#endif // RT2870 //
++
++VOID ComposePsPoll(
++ IN PRTMP_ADAPTER pAd);
++
++VOID ComposeNullFrame(
++ IN PRTMP_ADAPTER pAd);
++
++VOID AssocPostProc(
++ IN PRTMP_ADAPTER pAd,
++ IN PUCHAR pAddr2,
++ IN USHORT CapabilityInfo,
++ IN USHORT Aid,
++ IN UCHAR SupRate[],
++ IN UCHAR SupRateLen,
++ IN UCHAR ExtRate[],
++ IN UCHAR ExtRateLen,
++ IN PEDCA_PARM pEdcaParm,
++ IN HT_CAPABILITY_IE *pHtCapability,
++ IN UCHAR HtCapabilityLen,
++ IN ADD_HT_INFO_IE *pAddHtInfo);
++
++VOID AuthStateMachineInit(
++ IN PRTMP_ADAPTER pAd,
++ IN PSTATE_MACHINE sm,
++ OUT STATE_MACHINE_FUNC Trans[]);
++
++VOID AuthTimeout(
++ IN PVOID SystemSpecific1,
++ IN PVOID FunctionContext,
++ IN PVOID SystemSpecific2,
++ IN PVOID SystemSpecific3);
++
++VOID MlmeAuthReqAction(
++ IN PRTMP_ADAPTER pAd,
++ IN MLME_QUEUE_ELEM *Elem);
++
++VOID PeerAuthRspAtSeq2Action(
++ IN PRTMP_ADAPTER pAd,
++ IN MLME_QUEUE_ELEM *Elem);
++
++VOID PeerAuthRspAtSeq4Action(
++ IN PRTMP_ADAPTER pAd,
++ IN MLME_QUEUE_ELEM *Elem);
++
++VOID AuthTimeoutAction(
++ IN PRTMP_ADAPTER pAd,
++ IN MLME_QUEUE_ELEM *Elem);
++
++VOID Cls2errAction(
++ IN PRTMP_ADAPTER pAd,
++ IN PUCHAR pAddr);
++
++VOID MlmeDeauthReqAction(
++ IN PRTMP_ADAPTER pAd,
++ IN MLME_QUEUE_ELEM *Elem);
++
++VOID InvalidStateWhenAuth(
++ IN PRTMP_ADAPTER pAd,
++ IN MLME_QUEUE_ELEM *Elem);
++
++//=============================================
++
++VOID AuthRspStateMachineInit(
++ IN PRTMP_ADAPTER pAd,
++ IN PSTATE_MACHINE Sm,
++ IN STATE_MACHINE_FUNC Trans[]);
++
++VOID PeerDeauthAction(
++ IN PRTMP_ADAPTER pAd,
++ IN MLME_QUEUE_ELEM *Elem);
++
++VOID PeerAuthSimpleRspGenAndSend(
++ IN PRTMP_ADAPTER pAd,
++ IN PHEADER_802_11 pHdr80211,
++ IN USHORT Alg,
++ IN USHORT Seq,
++ IN USHORT Reason,
++ IN USHORT Status);
++
++//
++// Private routines in dls.c
++//
++
++#ifdef CONFIG_STA_SUPPORT
++#ifdef QOS_DLS_SUPPORT
++void DlsStateMachineInit(
++ IN PRTMP_ADAPTER pAd,
++ IN STATE_MACHINE *Sm,
++ OUT STATE_MACHINE_FUNC Trans[]);
++
++VOID MlmeDlsReqAction(
++ IN PRTMP_ADAPTER pAd,
++ IN MLME_QUEUE_ELEM *Elem);
++
++VOID PeerDlsReqAction(
++ IN PRTMP_ADAPTER pAd,
++ IN MLME_QUEUE_ELEM *Elem);
++
++VOID PeerDlsRspAction(
++ IN PRTMP_ADAPTER pAd,
++ IN MLME_QUEUE_ELEM *Elem);
++
++VOID MlmeDlsTearDownAction(
++ IN PRTMP_ADAPTER pAd,
++ IN MLME_QUEUE_ELEM *Elem);
++
++VOID PeerDlsTearDownAction(
++ IN PRTMP_ADAPTER pAd,
++ IN MLME_QUEUE_ELEM *Elem);
++
++VOID RTMPCheckDLSTimeOut(
++ IN PRTMP_ADAPTER pAd);
++
++BOOLEAN RTMPRcvFrameDLSCheck(
++ IN PRTMP_ADAPTER pAd,
++ IN PHEADER_802_11 pHeader,
++ IN ULONG Len,
++ IN PRT28XX_RXD_STRUC pRxD);
++
++INT RTMPCheckDLSFrame(
++ IN PRTMP_ADAPTER pAd,
++ IN PUCHAR pDA);
++
++VOID RTMPSendDLSTearDownFrame(
++ IN PRTMP_ADAPTER pAd,
++ IN PUCHAR pDA);
++
++NDIS_STATUS RTMPSendSTAKeyRequest(
++ IN PRTMP_ADAPTER pAd,
++ IN PUCHAR pDA);
++
++NDIS_STATUS RTMPSendSTAKeyHandShake(
++ IN PRTMP_ADAPTER pAd,
++ IN PUCHAR pDA);
++
++VOID DlsTimeoutAction(
++ IN PVOID SystemSpecific1,
++ IN PVOID FunctionContext,
++ IN PVOID SystemSpecific2,
++ IN PVOID SystemSpecific3);
++
++BOOLEAN MlmeDlsReqSanity(
++ IN PRTMP_ADAPTER pAd,
++ IN VOID *Msg,
++ IN ULONG MsgLen,
++ OUT PRT_802_11_DLS *pDLS,
++ OUT PUSHORT pReason);
++
++INT Set_DlsEntryInfo_Display_Proc(
++ IN PRTMP_ADAPTER pAd,
++ IN PUCHAR arg);
++
++MAC_TABLE_ENTRY *MacTableInsertDlsEntry(
++ IN PRTMP_ADAPTER pAd,
++ IN PUCHAR pAddr,
++ IN UINT DlsEntryIdx);
++
++BOOLEAN MacTableDeleteDlsEntry(
++ IN PRTMP_ADAPTER pAd,
++ IN USHORT wcid,
++ IN PUCHAR pAddr);
++
++MAC_TABLE_ENTRY *DlsEntryTableLookup(
++ IN PRTMP_ADAPTER pAd,
++ IN PUCHAR pAddr,
++ IN BOOLEAN bResetIdelCount);
++
++MAC_TABLE_ENTRY *DlsEntryTableLookupByWcid(
++ IN PRTMP_ADAPTER pAd,
++ IN UCHAR wcid,
++ IN PUCHAR pAddr,
++ IN BOOLEAN bResetIdelCount);
++
++INT Set_DlsAddEntry_Proc(
++ IN PRTMP_ADAPTER pAd,
++ IN PUCHAR arg);
++
++INT Set_DlsTearDownEntry_Proc(
++ IN PRTMP_ADAPTER pAd,
++ IN PUCHAR arg);
++#endif // QOS_DLS_SUPPORT //
++#endif // CONFIG_STA_SUPPORT //
++
++#ifdef QOS_DLS_SUPPORT
++BOOLEAN PeerDlsReqSanity(
++ IN PRTMP_ADAPTER pAd,
++ IN VOID *Msg,
++ IN ULONG MsgLen,
++ OUT PUCHAR pDA,
++ OUT PUCHAR pSA,
++ OUT USHORT *pCapabilityInfo,
++ OUT USHORT *pDlsTimeout,
++ OUT UCHAR *pRatesLen,
++ OUT UCHAR Rates[],
++ OUT UCHAR *pHtCapabilityLen,
++ OUT HT_CAPABILITY_IE *pHtCapability);
++
++BOOLEAN PeerDlsRspSanity(
++ IN PRTMP_ADAPTER pAd,
++ IN VOID *Msg,
++ IN ULONG MsgLen,
++ OUT PUCHAR pDA,
++ OUT PUCHAR pSA,
++ OUT USHORT *pCapabilityInfo,
++ OUT USHORT *pStatus,
++ OUT UCHAR *pRatesLen,
++ OUT UCHAR Rates[],
++ OUT UCHAR *pHtCapabilityLen,
++ OUT HT_CAPABILITY_IE *pHtCapability);
++
++BOOLEAN PeerDlsTearDownSanity(
++ IN PRTMP_ADAPTER pAd,
++ IN VOID *Msg,
++ IN ULONG MsgLen,
++ OUT PUCHAR pDA,
++ OUT PUCHAR pSA,
++ OUT USHORT *pReason);
++#endif // QOS_DLS_SUPPORT //
++
++//========================================
++
++VOID SyncStateMachineInit(
++ IN PRTMP_ADAPTER pAd,
++ IN STATE_MACHINE *Sm,
++ OUT STATE_MACHINE_FUNC Trans[]);
++
++VOID BeaconTimeout(
++ IN PVOID SystemSpecific1,
++ IN PVOID FunctionContext,
++ IN PVOID SystemSpecific2,
++ IN PVOID SystemSpecific3);
++
++VOID ScanTimeout(
++ IN PVOID SystemSpecific1,
++ IN PVOID FunctionContext,
++ IN PVOID SystemSpecific2,
++ IN PVOID SystemSpecific3);
++
++VOID MlmeScanReqAction(
++ IN PRTMP_ADAPTER pAd,
++ IN MLME_QUEUE_ELEM *Elem);
++
++VOID InvalidStateWhenScan(
++ IN PRTMP_ADAPTER pAd,
++ IN MLME_QUEUE_ELEM *Elem);
++
++VOID InvalidStateWhenJoin(
++ IN PRTMP_ADAPTER pAd,
++ IN MLME_QUEUE_ELEM *Elem);
++
++VOID InvalidStateWhenStart(
++ IN PRTMP_ADAPTER pAd,
++ IN MLME_QUEUE_ELEM *Elem);
++
++VOID PeerBeacon(
++ IN PRTMP_ADAPTER pAd,
++ IN MLME_QUEUE_ELEM *Elem);
++
++VOID EnqueueProbeRequest(
++ IN PRTMP_ADAPTER pAd);
++
++BOOLEAN ScanRunning(
++ IN PRTMP_ADAPTER pAd);
++//=========================================
++
++VOID MlmeCntlInit(
++ IN PRTMP_ADAPTER pAd,
++ IN STATE_MACHINE *S,
++ OUT STATE_MACHINE_FUNC Trans[]);
++
++VOID MlmeCntlMachinePerformAction(
++ IN PRTMP_ADAPTER pAd,
++ IN STATE_MACHINE *S,
++ IN MLME_QUEUE_ELEM *Elem);
++
++VOID CntlIdleProc(
++ IN PRTMP_ADAPTER pAd,
++ IN MLME_QUEUE_ELEM *Elem);
++
++VOID CntlOidScanProc(
++ IN PRTMP_ADAPTER pAd,
++ IN MLME_QUEUE_ELEM *Elem);
++
++VOID CntlOidSsidProc(
++ IN PRTMP_ADAPTER pAd,
++ IN MLME_QUEUE_ELEM * Elem);
++
++VOID CntlOidRTBssidProc(
++ IN PRTMP_ADAPTER pAd,
++ IN MLME_QUEUE_ELEM * Elem);
++
++VOID CntlMlmeRoamingProc(
++ IN PRTMP_ADAPTER pAd,
++ IN MLME_QUEUE_ELEM * Elem);
++
++VOID CntlWaitDisassocProc(
++ IN PRTMP_ADAPTER pAd,
++ IN MLME_QUEUE_ELEM *Elem);
++
++VOID CntlWaitJoinProc(
++ IN PRTMP_ADAPTER pAd,
++ IN MLME_QUEUE_ELEM *Elem);
++
++VOID CntlWaitReassocProc(
++ IN PRTMP_ADAPTER pAd,
++ IN MLME_QUEUE_ELEM *Elem);
++
++VOID CntlWaitStartProc(
++ IN PRTMP_ADAPTER pAd,
++ IN MLME_QUEUE_ELEM *Elem);
++
++VOID CntlWaitAuthProc(
++ IN PRTMP_ADAPTER pAd,
++ IN MLME_QUEUE_ELEM *Elem);
++
++VOID CntlWaitAuthProc2(
++ IN PRTMP_ADAPTER pAd,
++ IN MLME_QUEUE_ELEM *Elem);
++
++VOID CntlWaitAssocProc(
++ IN PRTMP_ADAPTER pAd,
++ IN MLME_QUEUE_ELEM *Elem);
++
++#ifdef QOS_DLS_SUPPORT
++VOID CntlOidDLSSetupProc(
++ IN PRTMP_ADAPTER pAd,
++ IN MLME_QUEUE_ELEM *Elem);
++#endif // QOS_DLS_SUPPORT //
++
++VOID LinkUp(
++ IN PRTMP_ADAPTER pAd,
++ IN UCHAR BssType);
++
++VOID LinkDown(
++ IN PRTMP_ADAPTER pAd,
++ IN BOOLEAN IsReqFromAP);
++
++VOID IterateOnBssTab(
++ IN PRTMP_ADAPTER pAd);
++
++VOID IterateOnBssTab2(
++ IN PRTMP_ADAPTER pAd);;
++
++VOID JoinParmFill(
++ IN PRTMP_ADAPTER pAd,
++ IN OUT MLME_JOIN_REQ_STRUCT *JoinReq,
++ IN ULONG BssIdx);
++
++VOID AssocParmFill(
++ IN PRTMP_ADAPTER pAd,
++ IN OUT MLME_ASSOC_REQ_STRUCT *AssocReq,
++ IN PUCHAR pAddr,
++ IN USHORT CapabilityInfo,
++ IN ULONG Timeout,
++ IN USHORT ListenIntv);
++
++VOID ScanParmFill(
++ IN PRTMP_ADAPTER pAd,
++ IN OUT MLME_SCAN_REQ_STRUCT *ScanReq,
++ IN CHAR Ssid[],
++ IN UCHAR SsidLen,
++ IN UCHAR BssType,
++ IN UCHAR ScanType);
++
++VOID DisassocParmFill(
++ IN PRTMP_ADAPTER pAd,
++ IN OUT MLME_DISASSOC_REQ_STRUCT *DisassocReq,
++ IN PUCHAR pAddr,
++ IN USHORT Reason);
++
++VOID StartParmFill(
++ IN PRTMP_ADAPTER pAd,
++ IN OUT MLME_START_REQ_STRUCT *StartReq,
++ IN CHAR Ssid[],
++ IN UCHAR SsidLen);
++
++VOID AuthParmFill(
++ IN PRTMP_ADAPTER pAd,
++ IN OUT MLME_AUTH_REQ_STRUCT *AuthReq,
++ IN PUCHAR pAddr,
++ IN USHORT Alg);
++
++VOID EnqueuePsPoll(
++ IN PRTMP_ADAPTER pAd);
++
++VOID EnqueueBeaconFrame(
++ IN PRTMP_ADAPTER pAd);
++
++VOID MlmeJoinReqAction(
++ IN PRTMP_ADAPTER pAd,
++ IN MLME_QUEUE_ELEM *Elem);
++
++VOID MlmeScanReqAction(
++ IN PRTMP_ADAPTER pAd,
++ IN MLME_QUEUE_ELEM *Elem);
++
++VOID MlmeStartReqAction(
++ IN PRTMP_ADAPTER pAd,
++ IN MLME_QUEUE_ELEM *Elem);
++
++VOID ScanTimeoutAction(
++ IN PRTMP_ADAPTER pAd,
++ IN MLME_QUEUE_ELEM *Elem);
++
++VOID BeaconTimeoutAtJoinAction(
++ IN PRTMP_ADAPTER pAd,
++ IN MLME_QUEUE_ELEM *Elem);
++
++VOID PeerBeaconAtScanAction(
++ IN PRTMP_ADAPTER pAd,
++ IN MLME_QUEUE_ELEM *Elem);
++
++VOID PeerBeaconAtJoinAction(
++ IN PRTMP_ADAPTER pAd,
++ IN MLME_QUEUE_ELEM *Elem);
++
++VOID PeerBeacon(
++ IN PRTMP_ADAPTER pAd,
++ IN MLME_QUEUE_ELEM *Elem);
++
++VOID PeerProbeReqAction(
++ IN PRTMP_ADAPTER pAd,
++ IN MLME_QUEUE_ELEM *Elem);
++
++VOID ScanNextChannel(
++ IN PRTMP_ADAPTER pAd);
++
++ULONG MakeIbssBeacon(
++ IN PRTMP_ADAPTER pAd);
++
++VOID CCXAdjacentAPReport(
++ IN PRTMP_ADAPTER pAd);
++
++BOOLEAN MlmeScanReqSanity(
++ IN PRTMP_ADAPTER pAd,
++ IN VOID *Msg,
++ IN ULONG MsgLen,
++ OUT UCHAR *BssType,
++ OUT CHAR ssid[],
++ OUT UCHAR *SsidLen,
++ OUT UCHAR *ScanType);
++
++BOOLEAN PeerBeaconAndProbeRspSanity(
++ IN PRTMP_ADAPTER pAd,
++ IN VOID *Msg,
++ IN ULONG MsgLen,
++ IN UCHAR MsgChannel,
++ OUT PUCHAR pAddr2,
++ OUT PUCHAR pBssid,
++ OUT CHAR Ssid[],
++ OUT UCHAR *pSsidLen,
++ OUT UCHAR *pBssType,
++ OUT USHORT *pBeaconPeriod,
++ OUT UCHAR *pChannel,
++ OUT UCHAR *pNewChannel,
++ OUT LARGE_INTEGER *pTimestamp,
++ OUT CF_PARM *pCfParm,
++ OUT USHORT *pAtimWin,
++ OUT USHORT *pCapabilityInfo,
++ OUT UCHAR *pErp,
++ OUT UCHAR *pDtimCount,
++ OUT UCHAR *pDtimPeriod,
++ OUT UCHAR *pBcastFlag,
++ OUT UCHAR *pMessageToMe,
++ OUT UCHAR SupRate[],
++ OUT UCHAR *pSupRateLen,
++ OUT UCHAR ExtRate[],
++ OUT UCHAR *pExtRateLen,
++ OUT UCHAR *pCkipFlag,
++ OUT UCHAR *pAironetCellPowerLimit,
++ OUT PEDCA_PARM pEdcaParm,
++ OUT PQBSS_LOAD_PARM pQbssLoad,
++ OUT PQOS_CAPABILITY_PARM pQosCapability,
++ OUT ULONG *pRalinkIe,
++ OUT UCHAR *pHtCapabilityLen,
++#ifdef CONFIG_STA_SUPPORT
++ OUT UCHAR *pPreNHtCapabilityLen,
++#endif // CONFIG_STA_SUPPORT //
++ OUT HT_CAPABILITY_IE *pHtCapability,
++ OUT UCHAR *AddHtInfoLen,
++ OUT ADD_HT_INFO_IE *AddHtInfo,
++ OUT UCHAR *NewExtChannel,
++ OUT USHORT *LengthVIE,
++ OUT PNDIS_802_11_VARIABLE_IEs pVIE);
++
++BOOLEAN PeerAddBAReqActionSanity(
++ IN PRTMP_ADAPTER pAd,
++ IN VOID *pMsg,
++ IN ULONG MsgLen,
++ OUT PUCHAR pAddr2);
++
++BOOLEAN PeerAddBARspActionSanity(
++ IN PRTMP_ADAPTER pAd,
++ IN VOID *pMsg,
++ IN ULONG MsgLen);
++
++BOOLEAN PeerDelBAActionSanity(
++ IN PRTMP_ADAPTER pAd,
++ IN UCHAR Wcid,
++ IN VOID *pMsg,
++ IN ULONG MsgLen);
++
++BOOLEAN MlmeAssocReqSanity(
++ IN PRTMP_ADAPTER pAd,
++ IN VOID *Msg,
++ IN ULONG MsgLen,
++ OUT PUCHAR pApAddr,
++ OUT USHORT *CapabilityInfo,
++ OUT ULONG *Timeout,
++ OUT USHORT *ListenIntv);
++
++BOOLEAN MlmeAuthReqSanity(
++ IN PRTMP_ADAPTER pAd,
++ IN VOID *Msg,
++ IN ULONG MsgLen,
++ OUT PUCHAR pAddr,
++ OUT ULONG *Timeout,
++ OUT USHORT *Alg);
++
++BOOLEAN MlmeStartReqSanity(
++ IN PRTMP_ADAPTER pAd,
++ IN VOID *Msg,
++ IN ULONG MsgLen,
++ OUT CHAR Ssid[],
++ OUT UCHAR *Ssidlen);
++
++BOOLEAN PeerAuthSanity(
++ IN PRTMP_ADAPTER pAd,
++ IN VOID *Msg,
++ IN ULONG MsgLen,
++ OUT PUCHAR pAddr,
++ OUT USHORT *Alg,
++ OUT USHORT *Seq,
++ OUT USHORT *Status,
++ OUT CHAR ChlgText[]);
++
++BOOLEAN PeerAssocRspSanity(
++ IN PRTMP_ADAPTER pAd,
++ IN VOID *pMsg,
++ IN ULONG MsgLen,
++ OUT PUCHAR pAddr2,
++ OUT USHORT *pCapabilityInfo,
++ OUT USHORT *pStatus,
++ OUT USHORT *pAid,
++ OUT UCHAR SupRate[],
++ OUT UCHAR *pSupRateLen,
++ OUT UCHAR ExtRate[],
++ OUT UCHAR *pExtRateLen,
++ OUT HT_CAPABILITY_IE *pHtCapability,
++ OUT ADD_HT_INFO_IE *pAddHtInfo, // AP might use this additional ht info IE
++ OUT UCHAR *pHtCapabilityLen,
++ OUT UCHAR *pAddHtInfoLen,
++ OUT UCHAR *pNewExtChannelOffset,
++ OUT PEDCA_PARM pEdcaParm,
++ OUT UCHAR *pCkipFlag);
++
++BOOLEAN PeerDisassocSanity(
++ IN PRTMP_ADAPTER pAd,
++ IN VOID *Msg,
++ IN ULONG MsgLen,
++ OUT PUCHAR pAddr2,
++ OUT USHORT *Reason);
++
++BOOLEAN PeerWpaMessageSanity(
++ IN PRTMP_ADAPTER pAd,
++ IN PEAPOL_PACKET pMsg,
++ IN ULONG MsgLen,
++ IN UCHAR MsgType,
++ IN MAC_TABLE_ENTRY *pEntry);
++
++BOOLEAN PeerDeauthSanity(
++ IN PRTMP_ADAPTER pAd,
++ IN VOID *Msg,
++ IN ULONG MsgLen,
++ OUT PUCHAR pAddr2,
++ OUT USHORT *Reason);
++
++BOOLEAN PeerProbeReqSanity(
++ IN PRTMP_ADAPTER pAd,
++ IN VOID *Msg,
++ IN ULONG MsgLen,
++ OUT PUCHAR pAddr2,
++ OUT CHAR Ssid[],
++ OUT UCHAR *pSsidLen);
++
++BOOLEAN GetTimBit(
++ IN CHAR *Ptr,
++ IN USHORT Aid,
++ OUT UCHAR *TimLen,
++ OUT UCHAR *BcastFlag,
++ OUT UCHAR *DtimCount,
++ OUT UCHAR *DtimPeriod,
++ OUT UCHAR *MessageToMe);
++
++UCHAR ChannelSanity(
++ IN PRTMP_ADAPTER pAd,
++ IN UCHAR channel);
++
++NDIS_802_11_NETWORK_TYPE NetworkTypeInUseSanity(
++ IN PBSS_ENTRY pBss);
++
++#if 0 // It's omitted
++NDIS_STATUS RTMPWepKeySanity(
++ IN PRTMP_ADAPTER pAdapter,
++ IN PVOID pBuf);
++#endif
++
++BOOLEAN MlmeDelBAReqSanity(
++ IN PRTMP_ADAPTER pAd,
++ IN VOID *Msg,
++ IN ULONG MsgLen);
++
++BOOLEAN MlmeAddBAReqSanity(
++ IN PRTMP_ADAPTER pAd,
++ IN VOID *Msg,
++ IN ULONG MsgLen,
++ OUT PUCHAR pAddr2);
++
++ULONG MakeOutgoingFrame(
++ OUT CHAR *Buffer,
++ OUT ULONG *Length, ...);
++
++VOID LfsrInit(
++ IN PRTMP_ADAPTER pAd,
++ IN ULONG Seed);
++
++UCHAR RandomByte(
++ IN PRTMP_ADAPTER pAd);
++
++VOID AsicUpdateAutoFallBackTable(
++ IN PRTMP_ADAPTER pAd,
++ IN PUCHAR pTxRate);
++
++VOID MlmePeriodicExec(
++ IN PVOID SystemSpecific1,
++ IN PVOID FunctionContext,
++ IN PVOID SystemSpecific2,
++ IN PVOID SystemSpecific3);
++
++VOID LinkDownExec(
++ IN PVOID SystemSpecific1,
++ IN PVOID FunctionContext,
++ IN PVOID SystemSpecific2,
++ IN PVOID SystemSpecific3);
++
++VOID LinkUpExec(
++ IN PVOID SystemSpecific1,
++ IN PVOID FunctionContext,
++ IN PVOID SystemSpecific2,
++ IN PVOID SystemSpecific3);
++
++VOID STAMlmePeriodicExec(
++ PRTMP_ADAPTER pAd);
++
++VOID MlmeAutoScan(
++ IN PRTMP_ADAPTER pAd);
++
++VOID MlmeAutoReconnectLastSSID(
++ IN PRTMP_ADAPTER pAd);
++
++BOOLEAN MlmeValidateSSID(
++ IN PUCHAR pSsid,
++ IN UCHAR SsidLen);
++
++VOID MlmeCheckForRoaming(
++ IN PRTMP_ADAPTER pAd,
++ IN ULONG Now32);
++
++VOID MlmeCheckForFastRoaming(
++ IN PRTMP_ADAPTER pAd,
++ IN ULONG Now);
++
++VOID MlmeDynamicTxRateSwitching(
++ IN PRTMP_ADAPTER pAd);
++
++VOID MlmeSetTxRate(
++ IN PRTMP_ADAPTER pAd,
++ IN PMAC_TABLE_ENTRY pEntry,
++ IN PRTMP_TX_RATE_SWITCH pTxRate);
++
++VOID MlmeSelectTxRateTable(
++ IN PRTMP_ADAPTER pAd,
++ IN PMAC_TABLE_ENTRY pEntry,
++ IN PUCHAR *ppTable,
++ IN PUCHAR pTableSize,
++ IN PUCHAR pInitTxRateIdx);
++
++VOID MlmeCalculateChannelQuality(
++ IN PRTMP_ADAPTER pAd,
++ IN ULONG Now);
++
++VOID MlmeCheckPsmChange(
++ IN PRTMP_ADAPTER pAd,
++ IN ULONG Now32);
++
++VOID MlmeSetPsmBit(
++ IN PRTMP_ADAPTER pAd,
++ IN USHORT psm);
++
++VOID MlmeSetTxPreamble(
++ IN PRTMP_ADAPTER pAd,
++ IN USHORT TxPreamble);
++
++VOID UpdateBasicRateBitmap(
++ IN PRTMP_ADAPTER pAd);
++
++VOID MlmeUpdateTxRates(
++ IN PRTMP_ADAPTER pAd,
++ IN BOOLEAN bLinkUp,
++ IN UCHAR apidx);
++
++#ifdef DOT11_N_SUPPORT
++VOID MlmeUpdateHtTxRates(
++ IN PRTMP_ADAPTER pAd,
++ IN UCHAR apidx);
++#endif // DOT11_N_SUPPORT //
++
++VOID RTMPCheckRates(
++ IN PRTMP_ADAPTER pAd,
++ IN OUT UCHAR SupRate[],
++ IN OUT UCHAR *SupRateLen);
++
++#ifdef CONFIG_STA_SUPPORT
++BOOLEAN RTMPCheckChannel(
++ IN PRTMP_ADAPTER pAd,
++ IN UCHAR CentralChannel,
++ IN UCHAR Channel);
++#endif // CONFIG_STA_SUPPORT //
++
++BOOLEAN RTMPCheckHt(
++ IN PRTMP_ADAPTER pAd,
++ IN UCHAR Wcid,
++ IN OUT HT_CAPABILITY_IE *pHtCapability,
++ IN OUT ADD_HT_INFO_IE *pAddHtInfo);
++
++VOID StaQuickResponeForRateUpExec(
++ IN PVOID SystemSpecific1,
++ IN PVOID FunctionContext,
++ IN PVOID SystemSpecific2,
++ IN PVOID SystemSpecific3);
++
++VOID AsicBbpTuning1(
++ IN PRTMP_ADAPTER pAd);
++
++VOID AsicBbpTuning2(
++ IN PRTMP_ADAPTER pAd);
++
++VOID RTMPUpdateMlmeRate(
++ IN PRTMP_ADAPTER pAd);
++
++CHAR RTMPMaxRssi(
++ IN PRTMP_ADAPTER pAd,
++ IN CHAR Rssi0,
++ IN CHAR Rssi1,
++ IN CHAR Rssi2);
++
++VOID AsicEvaluateRxAnt(
++ IN PRTMP_ADAPTER pAd);
++
++VOID AsicRxAntEvalTimeout(
++ IN PVOID SystemSpecific1,
++ IN PVOID FunctionContext,
++ IN PVOID SystemSpecific2,
++ IN PVOID SystemSpecific3);
++
++VOID APSDPeriodicExec(
++ IN PVOID SystemSpecific1,
++ IN PVOID FunctionContext,
++ IN PVOID SystemSpecific2,
++ IN PVOID SystemSpecific3);
++
++BOOLEAN RTMPCheckEntryEnableAutoRateSwitch(
++ IN PRTMP_ADAPTER pAd,
++ IN PMAC_TABLE_ENTRY pEntry);
++
++UCHAR RTMPStaFixedTxMode(
++ IN PRTMP_ADAPTER pAd,
++ IN PMAC_TABLE_ENTRY pEntry);
++
++VOID RTMPUpdateLegacyTxSetting(
++ UCHAR fixed_tx_mode,
++ PMAC_TABLE_ENTRY pEntry);
++
++BOOLEAN RTMPAutoRateSwitchCheck(
++ IN PRTMP_ADAPTER pAd);
++
++NDIS_STATUS MlmeInit(
++ IN PRTMP_ADAPTER pAd);
++
++VOID MlmeHandler(
++ IN PRTMP_ADAPTER pAd);
++
++VOID MlmeHalt(
++ IN PRTMP_ADAPTER pAd);
++
++VOID MlmeResetRalinkCounters(
++ IN PRTMP_ADAPTER pAd);
++
++VOID BuildChannelList(
++ IN PRTMP_ADAPTER pAd);
++
++UCHAR FirstChannel(
++ IN PRTMP_ADAPTER pAd);
++
++UCHAR NextChannel(
++ IN PRTMP_ADAPTER pAd,
++ IN UCHAR channel);
++
++VOID ChangeToCellPowerLimit(
++ IN PRTMP_ADAPTER pAd,
++ IN UCHAR AironetCellPowerLimit);
++
++VOID RaiseClock(
++ IN PRTMP_ADAPTER pAd,
++ IN UINT32 *x);
++
++VOID LowerClock(
++ IN PRTMP_ADAPTER pAd,
++ IN UINT32 *x);
++
++USHORT ShiftInBits(
++ IN PRTMP_ADAPTER pAd);
++
++VOID ShiftOutBits(
++ IN PRTMP_ADAPTER pAd,
++ IN USHORT data,
++ IN USHORT count);
++
++VOID EEpromCleanup(
++ IN PRTMP_ADAPTER pAd);
++
++VOID EWDS(
++ IN PRTMP_ADAPTER pAd);
++
++VOID EWEN(
++ IN PRTMP_ADAPTER pAd);
++
++USHORT RTMP_EEPROM_READ16(
++ IN PRTMP_ADAPTER pAd,
++ IN USHORT Offset);
++
++VOID RTMP_EEPROM_WRITE16(
++ IN PRTMP_ADAPTER pAd,
++ IN USHORT Offset,
++ IN USHORT Data);
++
++//
++// Prototypes of function definition in rtmp_tkip.c
++//
++VOID RTMPInitTkipEngine(
++ IN PRTMP_ADAPTER pAd,
++ IN PUCHAR pTKey,
++ IN UCHAR KeyId,
++ IN PUCHAR pTA,
++ IN PUCHAR pMICKey,
++ IN PUCHAR pTSC,
++ OUT PULONG pIV16,
++ OUT PULONG pIV32);
++
++VOID RTMPInitMICEngine(
++ IN PRTMP_ADAPTER pAd,
++ IN PUCHAR pKey,
++ IN PUCHAR pDA,
++ IN PUCHAR pSA,
++ IN UCHAR UserPriority,
++ IN PUCHAR pMICKey);
++
++BOOLEAN RTMPTkipCompareMICValue(
++ IN PRTMP_ADAPTER pAd,
++ IN PUCHAR pSrc,
++ IN PUCHAR pDA,
++ IN PUCHAR pSA,
++ IN PUCHAR pMICKey,
++ IN UCHAR UserPriority,
++ IN UINT Len);
++
++VOID RTMPCalculateMICValue(
++ IN PRTMP_ADAPTER pAd,
++ IN PNDIS_PACKET pPacket,
++ IN PUCHAR pEncap,
++ IN PCIPHER_KEY pKey,
++ IN UCHAR apidx);
++
++BOOLEAN RTMPTkipCompareMICValueWithLLC(
++ IN PRTMP_ADAPTER pAd,
++ IN PUCHAR pLLC,
++ IN PUCHAR pSrc,
++ IN PUCHAR pDA,
++ IN PUCHAR pSA,
++ IN PUCHAR pMICKey,
++ IN UINT Len);
++
++VOID RTMPTkipAppendByte(
++ IN PTKIP_KEY_INFO pTkip,
++ IN UCHAR uChar);
++
++VOID RTMPTkipAppend(
++ IN PTKIP_KEY_INFO pTkip,
++ IN PUCHAR pSrc,
++ IN UINT nBytes);
++
++VOID RTMPTkipGetMIC(
++ IN PTKIP_KEY_INFO pTkip);
++
++BOOLEAN RTMPSoftDecryptTKIP(
++ IN PRTMP_ADAPTER pAd,
++ IN PUCHAR pData,
++ IN ULONG DataByteCnt,
++ IN UCHAR UserPriority,
++ IN PCIPHER_KEY pWpaKey);
++
++BOOLEAN RTMPSoftDecryptAES(
++ IN PRTMP_ADAPTER pAd,
++ IN PUCHAR pData,
++ IN ULONG DataByteCnt,
++ IN PCIPHER_KEY pWpaKey);
++
++#if 0 // removed by AlbertY
++NDIS_STATUS RTMPWPAAddKeyProc(
++ IN PRTMP_ADAPTER pAd,
++ IN PVOID pBuf);
++#endif
++
++//
++// Prototypes of function definition in cmm_info.c
++//
++NDIS_STATUS RTMPWPARemoveKeyProc(
++ IN PRTMP_ADAPTER pAd,
++ IN PVOID pBuf);
++
++VOID RTMPWPARemoveAllKeys(
++ IN PRTMP_ADAPTER pAd);
++
++BOOLEAN RTMPCheckStrPrintAble(
++ IN CHAR *pInPutStr,
++ IN UCHAR strLen);
++
++VOID RTMPSetPhyMode(
++ IN PRTMP_ADAPTER pAd,
++ IN ULONG phymode);
++
++VOID RTMPUpdateHTIE(
++ IN RT_HT_CAPABILITY *pRtHt,
++ IN UCHAR *pMcsSet,
++ OUT HT_CAPABILITY_IE *pHtCapability,
++ OUT ADD_HT_INFO_IE *pAddHtInfo);
++
++VOID RTMPAddWcidAttributeEntry(
++ IN PRTMP_ADAPTER pAd,
++ IN UCHAR BssIdx,
++ IN UCHAR KeyIdx,
++ IN UCHAR CipherAlg,
++ IN MAC_TABLE_ENTRY *pEntry);
++
++CHAR *GetEncryptType(
++ CHAR enc);
++
++CHAR *GetAuthMode(
++ CHAR auth);
++
++VOID RTMPIoctlGetSiteSurvey(
++ IN PRTMP_ADAPTER pAdapter,
++ IN struct iwreq *wrq);
++
++VOID RTMPIoctlGetMacTable(
++ IN PRTMP_ADAPTER pAd,
++ IN struct iwreq *wrq);
++
++VOID RTMPIndicateWPA2Status(
++ IN PRTMP_ADAPTER pAdapter);
++
++VOID RTMPOPModeSwitching(
++ IN PRTMP_ADAPTER pAd);
++
++#ifdef CONFIG_STA_SUPPORT
++VOID RTMPAddBSSIDCipher(
++ IN PRTMP_ADAPTER pAd,
++ IN UCHAR Aid,
++ IN PNDIS_802_11_KEY pKey,
++ IN UCHAR CipherAlg);
++#endif // CONFIG_STA_SUPPORT //
++
++#ifdef DOT11_N_SUPPORT
++VOID RTMPSetHT(
++ IN PRTMP_ADAPTER pAd,
++ IN OID_SET_HT_PHYMODE *pHTPhyMode);
++
++VOID RTMPSetIndividualHT(
++ IN PRTMP_ADAPTER pAd,
++ IN UCHAR apidx);
++#endif // DOT11_N_SUPPORT //
++
++VOID RTMPSendWirelessEvent(
++ IN PRTMP_ADAPTER pAd,
++ IN USHORT Event_flag,
++ IN PUCHAR pAddr,
++ IN UCHAR BssIdx,
++ IN CHAR Rssi);
++
++VOID NICUpdateCntlCounters(
++ IN PRTMP_ADAPTER pAd,
++ IN PHEADER_802_11 pHeader,
++ IN UCHAR SubType,
++ IN PRXWI_STRUC pRxWI);
++//
++// prototype in wpa.c
++//
++BOOLEAN WpaMsgTypeSubst(
++ IN UCHAR EAPType,
++ OUT INT *MsgType);
++
++VOID WpaPskStateMachineInit(
++ IN PRTMP_ADAPTER pAd,
++ IN STATE_MACHINE *S,
++ OUT STATE_MACHINE_FUNC Trans[]);
++
++VOID WpaEAPOLKeyAction(
++ IN PRTMP_ADAPTER pAd,
++ IN MLME_QUEUE_ELEM *Elem);
++
++VOID WpaPairMsg1Action(
++ IN PRTMP_ADAPTER pAd,
++ IN MLME_QUEUE_ELEM *Elem);
++
++VOID WpaPairMsg3Action(
++ IN PRTMP_ADAPTER pAd,
++ IN MLME_QUEUE_ELEM *Elem);
++
++VOID WpaGroupMsg1Action(
++ IN PRTMP_ADAPTER pAd,
++ IN MLME_QUEUE_ELEM *Elem);
++
++VOID WpaMacHeaderInit(
++ IN PRTMP_ADAPTER pAd,
++ IN OUT PHEADER_802_11 pHdr80211,
++ IN UCHAR wep,
++ IN PUCHAR pAddr1);
++
++VOID Wpa2PairMsg1Action(
++ IN PRTMP_ADAPTER pAd,
++ IN MLME_QUEUE_ELEM *Elem);
++
++VOID Wpa2PairMsg3Action(
++ IN PRTMP_ADAPTER pAd,
++ IN MLME_QUEUE_ELEM *Elem);
++
++BOOLEAN ParseKeyData(
++ IN PRTMP_ADAPTER pAd,
++ IN PUCHAR pKeyData,
++ IN UCHAR KeyDataLen,
++ IN UCHAR bPairewise);
++
++VOID RTMPToWirelessSta(
++ IN PRTMP_ADAPTER pAd,
++ IN PUCHAR pHeader802_3,
++ IN UINT HdrLen,
++ IN PUCHAR pData,
++ IN UINT DataLen,
++ IN BOOLEAN is4wayFrame);
++
++VOID HMAC_SHA1(
++ IN UCHAR *text,
++ IN UINT text_len,
++ IN UCHAR *key,
++ IN UINT key_len,
++ IN UCHAR *digest);
++
++VOID PRF(
++ IN UCHAR *key,
++ IN INT key_len,
++ IN UCHAR *prefix,
++ IN INT prefix_len,
++ IN UCHAR *data,
++ IN INT data_len,
++ OUT UCHAR *output,
++ IN INT len);
++
++VOID CCKMPRF(
++ IN UCHAR *key,
++ IN INT key_len,
++ IN UCHAR *data,
++ IN INT data_len,
++ OUT UCHAR *output,
++ IN INT len);
++
++VOID WpaCountPTK(
++ IN PRTMP_ADAPTER pAd,
++ IN UCHAR *PMK,
++ IN UCHAR *ANonce,
++ IN UCHAR *AA,
++ IN UCHAR *SNonce,
++ IN UCHAR *SA,
++ OUT UCHAR *output,
++ IN UINT len);
++
++VOID GenRandom(
++ IN PRTMP_ADAPTER pAd,
++ IN UCHAR *macAddr,
++ OUT UCHAR *random);
++
++//
++// prototype in aironet.c
++//
++VOID AironetStateMachineInit(
++ IN PRTMP_ADAPTER pAd,
++ IN STATE_MACHINE *S,
++ OUT STATE_MACHINE_FUNC Trans[]);
++
++VOID AironetMsgAction(
++ IN PRTMP_ADAPTER pAd,
++ IN MLME_QUEUE_ELEM *Elem);
++
++VOID AironetRequestAction(
++ IN PRTMP_ADAPTER pAd,
++ IN MLME_QUEUE_ELEM *Elem);
++
++VOID ChannelLoadRequestAction(
++ IN PRTMP_ADAPTER pAd,
++ IN UCHAR Index);
++
++VOID NoiseHistRequestAction(
++ IN PRTMP_ADAPTER pAd,
++ IN UCHAR Index);
++
++VOID BeaconRequestAction(
++ IN PRTMP_ADAPTER pAd,
++ IN UCHAR Index);
++
++VOID AironetReportAction(
++ IN PRTMP_ADAPTER pAd,
++ IN MLME_QUEUE_ELEM *Elem);
++
++VOID ChannelLoadReportAction(
++ IN PRTMP_ADAPTER pAd,
++ IN UCHAR Index);
++
++VOID NoiseHistReportAction(
++ IN PRTMP_ADAPTER pAd,
++ IN UCHAR Index);
++
++VOID AironetFinalReportAction(
++ IN PRTMP_ADAPTER pAd);
++
++VOID BeaconReportAction(
++ IN PRTMP_ADAPTER pAd,
++ IN UCHAR Index);
++
++VOID AironetAddBeaconReport(
++ IN PRTMP_ADAPTER pAd,
++ IN ULONG Index,
++ IN PMLME_QUEUE_ELEM pElem);
++
++VOID AironetCreateBeaconReportFromBssTable(
++ IN PRTMP_ADAPTER pAd);
++
++VOID DBGPRINT_TX_RING(
++ IN PRTMP_ADAPTER pAd,
++ IN UCHAR QueIdx);
++
++VOID DBGPRINT_RX_RING(
++ IN PRTMP_ADAPTER pAd);
++
++CHAR ConvertToRssi(
++ IN PRTMP_ADAPTER pAd,
++ IN CHAR Rssi,
++ IN UCHAR RssiNumber);
++
++
++#ifdef DOT11N_DRAFT3
++VOID BuildEffectedChannelList(
++ IN PRTMP_ADAPTER pAd);
++#endif // DOT11N_DRAFT3 //
++
++
++VOID APAsicEvaluateRxAnt(
++ IN PRTMP_ADAPTER pAd);
++
++
++VOID APAsicRxAntEvalTimeout(
++ IN PRTMP_ADAPTER pAd);
++
++//
++// function prototype in cmm_wpa.c
++//
++BOOLEAN RTMPCheckWPAframe(
++ IN PRTMP_ADAPTER pAd,
++ IN PMAC_TABLE_ENTRY pEntry,
++ IN PUCHAR pData,
++ IN ULONG DataByteCount,
++ IN UCHAR FromWhichBSSID);
++
++VOID AES_GTK_KEY_UNWRAP(
++ IN UCHAR *key,
++ OUT UCHAR *plaintext,
++ IN UCHAR c_len,
++ IN UCHAR *ciphertext);
++
++BOOLEAN RTMPCheckRSNIE(
++ IN PRTMP_ADAPTER pAd,
++ IN PUCHAR pData,
++ IN UCHAR DataLen,
++ IN MAC_TABLE_ENTRY *pEntry,
++ OUT UCHAR *Offset);
++
++BOOLEAN RTMPParseEapolKeyData(
++ IN PRTMP_ADAPTER pAd,
++ IN PUCHAR pKeyData,
++ IN UCHAR KeyDataLen,
++ IN UCHAR GroupKeyIndex,
++ IN UCHAR MsgType,
++ IN BOOLEAN bWPA2,
++ IN MAC_TABLE_ENTRY *pEntry);
++
++VOID ConstructEapolMsg(
++ IN PRTMP_ADAPTER pAd,
++ IN UCHAR PeerAuthMode,
++ IN UCHAR PeerWepStatus,
++ IN UCHAR MyGroupKeyWepStatus,
++ IN UCHAR MsgType,
++ IN UCHAR DefaultKeyIdx,
++ IN UCHAR *ReplayCounter,
++ IN UCHAR *KeyNonce,
++ IN UCHAR *TxRSC,
++ IN UCHAR *PTK,
++ IN UCHAR *GTK,
++ IN UCHAR *RSNIE,
++ IN UCHAR RSNIE_Len,
++ OUT PEAPOL_PACKET pMsg);
++
++VOID CalculateMIC(
++ IN PRTMP_ADAPTER pAd,
++ IN UCHAR PeerWepStatus,
++ IN UCHAR *PTK,
++ OUT PEAPOL_PACKET pMsg);
++
++NDIS_STATUS RTMPSoftDecryptBroadCastData(
++ IN PRTMP_ADAPTER pAd,
++ IN RX_BLK *pRxBlk,
++ IN NDIS_802_11_ENCRYPTION_STATUS GroupCipher,
++ IN PCIPHER_KEY pShard_key);
++
++VOID ConstructEapolKeyData(
++ IN PRTMP_ADAPTER pAd,
++ IN UCHAR PeerAuthMode,
++ IN UCHAR PeerWepStatus,
++ IN UCHAR GroupKeyWepStatus,
++ IN UCHAR MsgType,
++ IN UCHAR DefaultKeyIdx,
++ IN BOOLEAN bWPA2Capable,
++ IN UCHAR *PTK,
++ IN UCHAR *GTK,
++ IN UCHAR *RSNIE,
++ IN UCHAR RSNIE_LEN,
++ OUT PEAPOL_PACKET pMsg);
++
++VOID RTMPMakeRSNIE(
++ IN PRTMP_ADAPTER pAd,
++ IN UINT AuthMode,
++ IN UINT WepStatus,
++ IN UCHAR apidx);
++
++//
++// function prototype in ap_wpa.c
++//
++
++BOOLEAN APWpaMsgTypeSubst(
++ IN UCHAR EAPType,
++ OUT INT *MsgType) ;
++
++MAC_TABLE_ENTRY *PACInquiry(
++ IN PRTMP_ADAPTER pAd,
++ IN ULONG Wcid);
++
++BOOLEAN RTMPCheckMcast(
++ IN PRTMP_ADAPTER pAd,
++ IN PEID_STRUCT eid_ptr,
++ IN MAC_TABLE_ENTRY *pEntry);
++
++BOOLEAN RTMPCheckUcast(
++ IN PRTMP_ADAPTER pAd,
++ IN PEID_STRUCT eid_ptr,
++ IN MAC_TABLE_ENTRY *pEntry);
++
++BOOLEAN RTMPCheckAUTH(
++ IN PRTMP_ADAPTER pAd,
++ IN PEID_STRUCT eid_ptr,
++ IN MAC_TABLE_ENTRY *pEntry);
++
++VOID WPAStart4WayHS(
++ IN PRTMP_ADAPTER pAd,
++ IN MAC_TABLE_ENTRY *pEntry,
++ IN ULONG TimeInterval);
++
++VOID WPAStart2WayGroupHS(
++ IN PRTMP_ADAPTER pAd,
++ IN MAC_TABLE_ENTRY *pEntry);
++
++VOID APWpaEAPPacketAction(
++ IN PRTMP_ADAPTER pAd,
++ IN MLME_QUEUE_ELEM *Elem);
++
++VOID APWpaEAPOLStartAction(
++ IN PRTMP_ADAPTER pAd,
++ IN MLME_QUEUE_ELEM *Elem);
++
++VOID APWpaEAPOLLogoffAction(
++ IN PRTMP_ADAPTER pAd,
++ IN MLME_QUEUE_ELEM *Elem);
++
++VOID APWpaEAPOLKeyAction(
++ IN PRTMP_ADAPTER pAd,
++ IN MLME_QUEUE_ELEM *Elem);
++
++VOID APWpaEAPOLASFAlertAction(
++ IN PRTMP_ADAPTER pAd,
++ IN MLME_QUEUE_ELEM *Elem);
++
++VOID HandleCounterMeasure(
++ IN PRTMP_ADAPTER pAd,
++ IN MAC_TABLE_ENTRY *pEntry);
++
++VOID PeerPairMsg2Action(
++ IN PRTMP_ADAPTER pAd,
++ IN MAC_TABLE_ENTRY *pEntry,
++ IN MLME_QUEUE_ELEM *Elem);
++
++VOID PeerPairMsg4Action(
++ IN PRTMP_ADAPTER pAd,
++ IN MAC_TABLE_ENTRY *pEntry,
++ IN MLME_QUEUE_ELEM *Elem);
++
++VOID CMTimerExec(
++ IN PVOID SystemSpecific1,
++ IN PVOID FunctionContext,
++ IN PVOID SystemSpecific2,
++ IN PVOID SystemSpecific3);
++
++VOID WPARetryExec(
++ IN PVOID SystemSpecific1,
++ IN PVOID FunctionContext,
++ IN PVOID SystemSpecific2,
++ IN PVOID SystemSpecific3);
++
++VOID EnqueueStartForPSKExec(
++ IN PVOID SystemSpecific1,
++ IN PVOID FunctionContext,
++ IN PVOID SystemSpecific2,
++ IN PVOID SystemSpecific3);
++
++VOID RTMPHandleSTAKey(
++ IN PRTMP_ADAPTER pAdapter,
++ IN MAC_TABLE_ENTRY *pEntry,
++ IN MLME_QUEUE_ELEM *Elem);
++
++#if 0 // merge into PeerPairMsg4Action
++VOID Wpa1PeerPairMsg4Action(
++ IN PRTMP_ADAPTER pAd,
++ IN MAC_TABLE_ENTRY *pEntry,
++ IN MLME_QUEUE_ELEM *Elem);
++
++VOID Wpa2PeerPairMsg4Action(
++ IN PRTMP_ADAPTER pAd,
++ IN PMAC_TABLE_ENTRY pEntry,
++ IN MLME_QUEUE_ELEM *Elem);
++#endif // 0 //
++
++VOID PeerGroupMsg2Action(
++ IN PRTMP_ADAPTER pAd,
++ IN PMAC_TABLE_ENTRY pEntry,
++ IN VOID *Msg,
++ IN UINT MsgLen);
++
++#if 0 // replaced by WPAStart2WayGroupHS
++NDIS_STATUS APWpaHardTransmit(
++ IN PRTMP_ADAPTER pAd,
++ IN PMAC_TABLE_ENTRY pEntry);
++#endif // 0 //
++
++VOID PairDisAssocAction(
++ IN PRTMP_ADAPTER pAd,
++ IN PMAC_TABLE_ENTRY pEntry,
++ IN USHORT Reason);
++
++VOID MlmeDeAuthAction(
++ IN PRTMP_ADAPTER pAd,
++ IN PMAC_TABLE_ENTRY pEntry,
++ IN USHORT Reason);
++
++VOID GREKEYPeriodicExec(
++ IN PVOID SystemSpecific1,
++ IN PVOID FunctionContext,
++ IN PVOID SystemSpecific2,
++ IN PVOID SystemSpecific3);
++
++VOID CountGTK(
++ IN UCHAR *PMK,
++ IN UCHAR *GNonce,
++ IN UCHAR *AA,
++ OUT UCHAR *output,
++ IN UINT len);
++
++VOID GetSmall(
++ IN PVOID pSrc1,
++ IN PVOID pSrc2,
++ OUT PUCHAR out,
++ IN ULONG Length);
++
++VOID GetLarge(
++ IN PVOID pSrc1,
++ IN PVOID pSrc2,
++ OUT PUCHAR out,
++ IN ULONG Length);
++
++VOID APGenRandom(
++ IN PRTMP_ADAPTER pAd,
++ OUT UCHAR *random);
++
++VOID AES_GTK_KEY_WRAP(
++ IN UCHAR *key,
++ IN UCHAR *plaintext,
++ IN UCHAR p_len,
++ OUT UCHAR *ciphertext);
++
++VOID WpaSend(
++ IN PRTMP_ADAPTER pAdapter,
++ IN PUCHAR pPacket,
++ IN ULONG Len);
++
++VOID APToWirelessSta(
++ IN PRTMP_ADAPTER pAd,
++ IN MAC_TABLE_ENTRY *pEntry,
++ IN PUCHAR pHeader802_3,
++ IN UINT HdrLen,
++ IN PUCHAR pData,
++ IN UINT DataLen,
++ IN BOOLEAN bClearFrame);
++
++VOID RTMPAddPMKIDCache(
++ IN PRTMP_ADAPTER pAd,
++ IN INT apidx,
++ IN PUCHAR pAddr,
++ IN UCHAR *PMKID,
++ IN UCHAR *PMK);
++
++INT RTMPSearchPMKIDCache(
++ IN PRTMP_ADAPTER pAd,
++ IN INT apidx,
++ IN PUCHAR pAddr);
++
++VOID RTMPDeletePMKIDCache(
++ IN PRTMP_ADAPTER pAd,
++ IN INT apidx,
++ IN INT idx);
++
++VOID RTMPMaintainPMKIDCache(
++ IN PRTMP_ADAPTER pAd);
++
++VOID RTMPSendTriggerFrame(
++ IN PRTMP_ADAPTER pAd,
++ IN PVOID pBuffer,
++ IN ULONG Length,
++ IN UCHAR TxRate,
++ IN BOOLEAN bQosNull);
++
++
++//typedef void (*TIMER_FUNCTION)(unsigned long);
++
++
++/* timeout -- ms */
++VOID RTMP_SetPeriodicTimer(
++ IN NDIS_MINIPORT_TIMER *pTimer,
++ IN unsigned long timeout);
++
++VOID RTMP_OS_Init_Timer(
++ IN PRTMP_ADAPTER pAd,
++ IN NDIS_MINIPORT_TIMER *pTimer,
++ IN TIMER_FUNCTION function,
++ IN PVOID data);
++
++VOID RTMP_OS_Add_Timer(
++ IN NDIS_MINIPORT_TIMER *pTimer,
++ IN unsigned long timeout);
++
++VOID RTMP_OS_Mod_Timer(
++ IN NDIS_MINIPORT_TIMER *pTimer,
++ IN unsigned long timeout);
++
++
++VOID RTMP_OS_Del_Timer(
++ IN NDIS_MINIPORT_TIMER *pTimer,
++ OUT BOOLEAN *pCancelled);
++
++
++VOID RTMP_OS_Release_Packet(
++ IN PRTMP_ADAPTER pAd,
++ IN PQUEUE_ENTRY pEntry);
++
++VOID RTMPusecDelay(
++ IN ULONG usec);
++
++NDIS_STATUS os_alloc_mem(
++ IN PRTMP_ADAPTER pAd,
++ OUT PUCHAR *mem,
++ IN ULONG size);
++
++NDIS_STATUS os_free_mem(
++ IN PRTMP_ADAPTER pAd,
++ IN PUCHAR mem);
++
++
++void RTMP_AllocateSharedMemory(
++ IN PRTMP_ADAPTER pAd,
++ IN ULONG Length,
++ IN BOOLEAN Cached,
++ OUT PVOID *VirtualAddress,
++ OUT PNDIS_PHYSICAL_ADDRESS PhysicalAddress);
++
++VOID RTMPFreeTxRxRingMemory(
++ IN PRTMP_ADAPTER pAd);
++
++NDIS_STATUS AdapterBlockAllocateMemory(
++ IN PVOID handle,
++ OUT PVOID *ppAd);
++
++void RTMP_AllocateTxDescMemory(
++ IN PRTMP_ADAPTER pAd,
++ IN UINT Index,
++ IN ULONG Length,
++ IN BOOLEAN Cached,
++ OUT PVOID *VirtualAddress,
++ OUT PNDIS_PHYSICAL_ADDRESS PhysicalAddress);
++
++void RTMP_AllocateFirstTxBuffer(
++ IN PRTMP_ADAPTER pAd,
++ IN UINT Index,
++ IN ULONG Length,
++ IN BOOLEAN Cached,
++ OUT PVOID *VirtualAddress,
++ OUT PNDIS_PHYSICAL_ADDRESS PhysicalAddress);
++
++void RTMP_AllocateMgmtDescMemory(
++ IN PRTMP_ADAPTER pAd,
++ IN ULONG Length,
++ IN BOOLEAN Cached,
++ OUT PVOID *VirtualAddress,
++ OUT PNDIS_PHYSICAL_ADDRESS PhysicalAddress);
++
++void RTMP_AllocateRxDescMemory(
++ IN PRTMP_ADAPTER pAd,
++ IN ULONG Length,
++ IN BOOLEAN Cached,
++ OUT PVOID *VirtualAddress,
++ OUT PNDIS_PHYSICAL_ADDRESS PhysicalAddress);
++
++PNDIS_PACKET RTMP_AllocateRxPacketBuffer(
++ IN PRTMP_ADAPTER pAd,
++ IN ULONG Length,
++ IN BOOLEAN Cached,
++ OUT PVOID *VirtualAddress,
++ OUT PNDIS_PHYSICAL_ADDRESS PhysicalAddress);
++
++PNDIS_PACKET RTMP_AllocateTxPacketBuffer(
++ IN PRTMP_ADAPTER pAd,
++ IN ULONG Length,
++ IN BOOLEAN Cached,
++ OUT PVOID *VirtualAddress);
++
++PNDIS_PACKET RTMP_AllocateFragPacketBuffer(
++ IN PRTMP_ADAPTER pAd,
++ IN ULONG Length);
++
++void RTMP_QueryPacketInfo(
++ IN PNDIS_PACKET pPacket,
++ OUT PACKET_INFO *pPacketInfo,
++ OUT PUCHAR *pSrcBufVA,
++ OUT UINT *pSrcBufLen);
++
++void RTMP_QueryNextPacketInfo(
++ IN PNDIS_PACKET *ppPacket,
++ OUT PACKET_INFO *pPacketInfo,
++ OUT PUCHAR *pSrcBufVA,
++ OUT UINT *pSrcBufLen);
++
++
++BOOLEAN RTMP_FillTxBlkInfo(
++ IN RTMP_ADAPTER *pAd,
++ IN TX_BLK *pTxBlk);
++
++
++PRTMP_SCATTER_GATHER_LIST
++rt_get_sg_list_from_packet(PNDIS_PACKET pPacket, RTMP_SCATTER_GATHER_LIST *sg);
++
++
++ void announce_802_3_packet(
++ IN PRTMP_ADAPTER pAd,
++ IN PNDIS_PACKET pPacket);
++
++
++UINT BA_Reorder_AMSDU_Annnounce(
++ IN PRTMP_ADAPTER pAd,
++ IN PNDIS_PACKET pPacket);
++
++
++UINT Handle_AMSDU_Packet(
++ IN PRTMP_ADAPTER pAd,
++ IN PUCHAR pData,
++ IN ULONG DataSize,
++ IN UCHAR FromWhichBSSID);
++
++
++void convert_802_11_to_802_3_packet(
++ IN PRTMP_ADAPTER pAd,
++ IN PNDIS_PACKET pPacket,
++ IN PUCHAR p8023hdr,
++ IN PUCHAR pData,
++ IN ULONG DataSize,
++ IN UCHAR FromWhichBSSID);
++
++
++PNET_DEV get_netdev_from_bssid(
++ IN PRTMP_ADAPTER pAd,
++ IN UCHAR FromWhichBSSID);
++
++
++PNDIS_PACKET duplicate_pkt(
++ IN PRTMP_ADAPTER pAd,
++ IN PUCHAR pHeader802_3,
++ IN UINT HdrLen,
++ IN PUCHAR pData,
++ IN ULONG DataSize,
++ IN UCHAR FromWhichBSSID);
++
++
++PNDIS_PACKET duplicate_pkt_with_TKIP_MIC(
++ IN PRTMP_ADAPTER pAd,
++ IN PNDIS_PACKET pOldPkt);
++
++PNDIS_PACKET duplicate_pkt_with_VLAN(
++ IN PRTMP_ADAPTER pAd,
++ IN PUCHAR pHeader802_3,
++ IN UINT HdrLen,
++ IN PUCHAR pData,
++ IN ULONG DataSize,
++ IN UCHAR FromWhichBSSID);
++
++PNDIS_PACKET duplicate_pkt_with_WPI(
++ IN PRTMP_ADAPTER pAd,
++ IN PNDIS_PACKET pPacket,
++ IN UINT32 ext_head_len,
++ IN UINT32 ext_tail_len);
++
++UCHAR VLAN_8023_Header_Copy(
++ IN PRTMP_ADAPTER pAd,
++ IN PUCHAR pHeader802_3,
++ IN UINT HdrLen,
++ OUT PUCHAR pData,
++ IN UCHAR FromWhichBSSID);
++
++#ifdef DOT11_N_SUPPORT
++void ba_flush_reordering_timeout_mpdus(
++ IN PRTMP_ADAPTER pAd,
++ IN PBA_REC_ENTRY pBAEntry,
++ IN ULONG Now32);
++
++
++VOID BAOriSessionSetUp(
++ IN PRTMP_ADAPTER pAd,
++ IN MAC_TABLE_ENTRY *pEntry,
++ IN UCHAR TID,
++ IN USHORT TimeOut,
++ IN ULONG DelayTime,
++ IN BOOLEAN isForced);
++
++VOID BASessionTearDownALL(
++ IN OUT PRTMP_ADAPTER pAd,
++ IN UCHAR Wcid);
++#endif // DOT11_N_SUPPORT //
++
++BOOLEAN OS_Need_Clone_Packet(void);
++
++
++VOID build_tx_packet(
++ IN PRTMP_ADAPTER pAd,
++ IN PNDIS_PACKET pPacket,
++ IN PUCHAR pFrame,
++ IN ULONG FrameLen);
++
++
++VOID BAOriSessionTearDown(
++ IN OUT PRTMP_ADAPTER pAd,
++ IN UCHAR Wcid,
++ IN UCHAR TID,
++ IN BOOLEAN bPassive,
++ IN BOOLEAN bForceSend);
++
++VOID BARecSessionTearDown(
++ IN OUT PRTMP_ADAPTER pAd,
++ IN UCHAR Wcid,
++ IN UCHAR TID,
++ IN BOOLEAN bPassive);
++
++BOOLEAN ba_reordering_resource_init(PRTMP_ADAPTER pAd, int num);
++void ba_reordering_resource_release(PRTMP_ADAPTER pAd);
++
++ULONG AutoChBssInsertEntry(
++ IN PRTMP_ADAPTER pAd,
++ IN PUCHAR pBssid,
++ IN CHAR Ssid[],
++ IN UCHAR SsidLen,
++ IN UCHAR ChannelNo,
++ IN CHAR Rssi);
++
++void AutoChBssTableInit(
++ IN PRTMP_ADAPTER pAd);
++
++void ChannelInfoInit(
++ IN PRTMP_ADAPTER pAd);
++
++void AutoChBssTableDestroy(
++ IN PRTMP_ADAPTER pAd);
++
++void ChannelInfoDestroy(
++ IN PRTMP_ADAPTER pAd);
++
++UCHAR New_ApAutoSelectChannel(
++ IN PRTMP_ADAPTER pAd);
++
++BOOLEAN rtstrmactohex(
++ IN char *s1,
++ IN char *s2);
++
++BOOLEAN rtstrcasecmp(
++ IN char *s1,
++ IN char *s2);
++
++char *rtstrstruncasecmp(
++ IN char *s1,
++ IN char *s2);
++
++char *rtstrstr(
++ IN const char * s1,
++ IN const char * s2);
++
++char *rstrtok(
++ IN char * s,
++ IN const char * ct);
++
++int rtinet_aton(
++ const char *cp,
++ unsigned int *addr);
++
++////////// common ioctl functions //////////
++INT Set_DriverVersion_Proc(
++ IN PRTMP_ADAPTER pAd,
++ IN PUCHAR arg);
++
++INT Set_CountryRegion_Proc(
++ IN PRTMP_ADAPTER pAd,
++ IN PUCHAR arg);
++
++INT Set_CountryRegionABand_Proc(
++ IN PRTMP_ADAPTER pAd,
++ IN PUCHAR arg);
++
++INT Set_WirelessMode_Proc(
++ IN PRTMP_ADAPTER pAd,
++ IN PUCHAR arg);
++
++INT Set_Channel_Proc(
++ IN PRTMP_ADAPTER pAd,
++ IN PUCHAR arg);
++
++INT Set_ShortSlot_Proc(
++ IN PRTMP_ADAPTER pAd,
++ IN PUCHAR arg);
++
++INT Set_TxPower_Proc(
++ IN PRTMP_ADAPTER pAd,
++ IN PUCHAR arg);
++
++INT Set_BGProtection_Proc(
++ IN PRTMP_ADAPTER pAd,
++ IN PUCHAR arg);
++
++INT Set_TxPreamble_Proc(
++ IN PRTMP_ADAPTER pAd,
++ IN PUCHAR arg);
++
++INT Set_RTSThreshold_Proc(
++ IN PRTMP_ADAPTER pAd,
++ IN PUCHAR arg);
++
++INT Set_FragThreshold_Proc(
++ IN PRTMP_ADAPTER pAd,
++ IN PUCHAR arg);
++
++INT Set_TxBurst_Proc(
++ IN PRTMP_ADAPTER pAd,
++ IN PUCHAR arg);
++
++#ifdef AGGREGATION_SUPPORT
++INT Set_PktAggregate_Proc(
++ IN PRTMP_ADAPTER pAd,
++ IN PUCHAR arg);
++#endif
++
++INT Set_IEEE80211H_Proc(
++ IN PRTMP_ADAPTER pAd,
++ IN PUCHAR arg);
++
++#ifdef DBG
++INT Set_Debug_Proc(
++ IN PRTMP_ADAPTER pAd,
++ IN PUCHAR arg);
++#endif
++
++INT Show_DescInfo_Proc(
++ IN PRTMP_ADAPTER pAd,
++ IN PUCHAR arg);
++
++INT Set_ResetStatCounter_Proc(
++ IN PRTMP_ADAPTER pAd,
++ IN PUCHAR arg);
++
++#ifdef DOT11_N_SUPPORT
++INT Set_BASetup_Proc(
++ IN PRTMP_ADAPTER pAd,
++ IN PUCHAR arg);
++
++INT Set_BADecline_Proc(
++ IN PRTMP_ADAPTER pAd,
++ IN PUCHAR arg);
++
++INT Set_BAOriTearDown_Proc(
++ IN PRTMP_ADAPTER pAd,
++ IN PUCHAR arg);
++
++INT Set_BARecTearDown_Proc(
++ IN PRTMP_ADAPTER pAd,
++ IN PUCHAR arg);
++
++INT Set_HtBw_Proc(
++ IN PRTMP_ADAPTER pAd,
++ IN PUCHAR arg);
++
++INT Set_HtMcs_Proc(
++ IN PRTMP_ADAPTER pAd,
++ IN PUCHAR arg);
++
++INT Set_HtGi_Proc(
++ IN PRTMP_ADAPTER pAd,
++ IN PUCHAR arg);
++
++INT Set_HtOpMode_Proc(
++ IN PRTMP_ADAPTER pAd,
++ IN PUCHAR arg);
++
++INT Set_HtStbc_Proc(
++ IN PRTMP_ADAPTER pAd,
++ IN PUCHAR arg);
++
++INT Set_HtHtc_Proc(
++ IN PRTMP_ADAPTER pAd,
++ IN PUCHAR arg);
++
++INT Set_HtExtcha_Proc(
++ IN PRTMP_ADAPTER pAd,
++ IN PUCHAR arg);
++
++INT Set_HtMpduDensity_Proc(
++ IN PRTMP_ADAPTER pAd,
++ IN PUCHAR arg);
++
++INT Set_HtBaWinSize_Proc(
++ IN PRTMP_ADAPTER pAd,
++ IN PUCHAR arg);
++
++INT Set_HtRdg_Proc(
++ IN PRTMP_ADAPTER pAd,
++ IN PUCHAR arg);
++
++INT Set_HtLinkAdapt_Proc(
++ IN PRTMP_ADAPTER pAd,
++ IN PUCHAR arg);
++
++INT Set_HtAmsdu_Proc(
++ IN PRTMP_ADAPTER pAd,
++ IN PUCHAR arg);
++
++INT Set_HtAutoBa_Proc(
++ IN PRTMP_ADAPTER pAd,
++ IN PUCHAR arg);
++
++INT Set_HtProtect_Proc(
++ IN PRTMP_ADAPTER pAd,
++ IN PUCHAR arg);
++
++INT Set_HtMimoPs_Proc(
++ IN PRTMP_ADAPTER pAd,
++ IN PUCHAR arg);
++
++
++INT Set_ForceShortGI_Proc(
++ IN PRTMP_ADAPTER pAd,
++ IN PUCHAR arg);
++
++INT Set_ForceGF_Proc(
++ IN PRTMP_ADAPTER pAd,
++ IN PUCHAR arg);
++
++INT SetCommonHT(
++ IN PRTMP_ADAPTER pAd);
++
++INT Set_SendPSMPAction_Proc(
++ IN PRTMP_ADAPTER pAd,
++ IN PUCHAR arg);
++
++INT Set_HtMIMOPSmode_Proc(
++ IN PRTMP_ADAPTER pAd,
++ IN PUCHAR arg);
++
++
++INT Set_HtTxBASize_Proc(
++ IN PRTMP_ADAPTER pAd,
++ IN PUCHAR arg);
++#endif // DOT11_N_SUPPORT //
++
++
++
++#ifdef CONFIG_STA_SUPPORT
++//Dls , kathy
++VOID RTMPSendDLSTearDownFrame(
++ IN PRTMP_ADAPTER pAd,
++ IN PUCHAR pDA);
++
++#ifdef DOT11_N_SUPPORT
++//Block ACK
++VOID QueryBATABLE(
++ IN PRTMP_ADAPTER pAd,
++ OUT PQUERYBA_TABLE pBAT);
++#endif // DOT11_N_SUPPORT //
++
++#ifdef WPA_SUPPLICANT_SUPPORT
++INT WpaCheckEapCode(
++ IN PRTMP_ADAPTER pAd,
++ IN PUCHAR pFrame,
++ IN USHORT FrameLen,
++ IN USHORT OffSet);
++
++VOID WpaSendMicFailureToWpaSupplicant(
++ IN PRTMP_ADAPTER pAd,
++ IN BOOLEAN bUnicast);
++
++VOID SendAssocIEsToWpaSupplicant(
++ IN PRTMP_ADAPTER pAd);
++#endif // WPA_SUPPLICANT_SUPPORT //
++
++#ifdef NATIVE_WPA_SUPPLICANT_SUPPORT
++int wext_notify_event_assoc(
++ IN RTMP_ADAPTER *pAd);
++#endif // NATIVE_WPA_SUPPLICANT_SUPPORT //
++
++#endif // CONFIG_STA_SUPPORT //
++
++
++
++#ifdef DOT11_N_SUPPORT
++VOID Handle_BSS_Width_Trigger_Events(
++ IN PRTMP_ADAPTER pAd);
++
++void build_ext_channel_switch_ie(
++ IN PRTMP_ADAPTER pAd,
++ IN HT_EXT_CHANNEL_SWITCH_ANNOUNCEMENT_IE *pIE);
++#endif // DOT11_N_SUPPORT //
++
++
++BOOLEAN APRxDoneInterruptHandle(
++ IN PRTMP_ADAPTER pAd);
++
++BOOLEAN STARxDoneInterruptHandle(
++ IN PRTMP_ADAPTER pAd,
++ IN BOOLEAN argc);
++
++#ifdef DOT11_N_SUPPORT
++// AMPDU packet indication
++VOID Indicate_AMPDU_Packet(
++ IN PRTMP_ADAPTER pAd,
++ IN RX_BLK *pRxBlk,
++ IN UCHAR FromWhichBSSID);
++
++// AMSDU packet indication
++VOID Indicate_AMSDU_Packet(
++ IN PRTMP_ADAPTER pAd,
++ IN RX_BLK *pRxBlk,
++ IN UCHAR FromWhichBSSID);
++#endif // DOT11_N_SUPPORT //
++
++// Normal legacy Rx packet indication
++VOID Indicate_Legacy_Packet(
++ IN PRTMP_ADAPTER pAd,
++ IN RX_BLK *pRxBlk,
++ IN UCHAR FromWhichBSSID);
++
++VOID Indicate_EAPOL_Packet(
++ IN PRTMP_ADAPTER pAd,
++ IN RX_BLK *pRxBlk,
++ IN UCHAR FromWhichBSSID);
++
++void update_os_packet_info(
++ IN PRTMP_ADAPTER pAd,
++ IN RX_BLK *pRxBlk,
++ IN UCHAR FromWhichBSSID);
++
++void wlan_802_11_to_802_3_packet(
++ IN PRTMP_ADAPTER pAd,
++ IN RX_BLK *pRxBlk,
++ IN PUCHAR pHeader802_3,
++ IN UCHAR FromWhichBSSID);
++
++UINT deaggregate_AMSDU_announce(
++ IN PRTMP_ADAPTER pAd,
++ PNDIS_PACKET pPacket,
++ IN PUCHAR pData,
++ IN ULONG DataSize);
++
++
++#ifdef CONFIG_STA_SUPPORT
++// remove LLC and get 802_3 Header
++#define RTMP_802_11_REMOVE_LLC_AND_CONVERT_TO_802_3(_pRxBlk, _pHeader802_3) \
++{ \
++ PUCHAR _pRemovedLLCSNAP = NULL, _pDA, _pSA; \
++ \
++ if (RX_BLK_TEST_FLAG(_pRxBlk, fRX_MESH)) \
++ { \
++ _pDA = _pRxBlk->pHeader->Addr3; \
++ _pSA = (PUCHAR)_pRxBlk->pHeader + sizeof(HEADER_802_11); \
++ } \
++ else \
++ { \
++ if (RX_BLK_TEST_FLAG(_pRxBlk, fRX_INFRA)) \
++ { \
++ _pDA = _pRxBlk->pHeader->Addr1; \
++ if (RX_BLK_TEST_FLAG(_pRxBlk, fRX_DLS)) \
++ _pSA = _pRxBlk->pHeader->Addr2; \
++ else \
++ _pSA = _pRxBlk->pHeader->Addr3; \
++ } \
++ else \
++ { \
++ _pDA = _pRxBlk->pHeader->Addr1; \
++ _pSA = _pRxBlk->pHeader->Addr2; \
++ } \
++ } \
++ \
++ CONVERT_TO_802_3(_pHeader802_3, _pDA, _pSA, _pRxBlk->pData, \
++ _pRxBlk->DataSize, _pRemovedLLCSNAP); \
++}
++#endif // CONFIG_STA_SUPPORT //
++
++
++BOOLEAN APFowardWirelessStaToWirelessSta(
++ IN PRTMP_ADAPTER pAd,
++ IN PNDIS_PACKET pPacket,
++ IN ULONG FromWhichBSSID);
++
++VOID Announce_or_Forward_802_3_Packet(
++ IN PRTMP_ADAPTER pAd,
++ IN PNDIS_PACKET pPacket,
++ IN UCHAR FromWhichBSSID);
++
++VOID Sta_Announce_or_Forward_802_3_Packet(
++ IN PRTMP_ADAPTER pAd,
++ IN PNDIS_PACKET pPacket,
++ IN UCHAR FromWhichBSSID);
++
++
++#ifdef CONFIG_STA_SUPPORT
++#define ANNOUNCE_OR_FORWARD_802_3_PACKET(_pAd, _pPacket, _FromWhichBSS)\
++ Sta_Announce_or_Forward_802_3_Packet(_pAd, _pPacket, _FromWhichBSS);
++ //announce_802_3_packet(_pAd, _pPacket);
++#endif // CONFIG_STA_SUPPORT //
++
++
++PNDIS_PACKET DuplicatePacket(
++ IN PRTMP_ADAPTER pAd,
++ IN PNDIS_PACKET pPacket,
++ IN UCHAR FromWhichBSSID);
++
++
++PNDIS_PACKET ClonePacket(
++ IN PRTMP_ADAPTER pAd,
++ IN PNDIS_PACKET pPacket,
++ IN PUCHAR pData,
++ IN ULONG DataSize);
++
++
++// Normal, AMPDU or AMSDU
++VOID CmmRxnonRalinkFrameIndicate(
++ IN PRTMP_ADAPTER pAd,
++ IN RX_BLK *pRxBlk,
++ IN UCHAR FromWhichBSSID);
++
++VOID CmmRxRalinkFrameIndicate(
++ IN PRTMP_ADAPTER pAd,
++ IN MAC_TABLE_ENTRY *pEntry,
++ IN RX_BLK *pRxBlk,
++ IN UCHAR FromWhichBSSID);
++
++VOID Update_Rssi_Sample(
++ IN PRTMP_ADAPTER pAd,
++ IN RSSI_SAMPLE *pRssi,
++ IN PRXWI_STRUC pRxWI);
++
++PNDIS_PACKET GetPacketFromRxRing(
++ IN PRTMP_ADAPTER pAd,
++ OUT PRT28XX_RXD_STRUC pSaveRxD,
++ OUT BOOLEAN *pbReschedule,
++ IN OUT UINT32 *pRxPending);
++
++PNDIS_PACKET RTMPDeFragmentDataFrame(
++ IN PRTMP_ADAPTER pAd,
++ IN RX_BLK *pRxBlk);
++
++////////////////////////////////////////
++
++
++
++
++
++#ifdef SNMP_SUPPORT
++//for snmp , kathy
++typedef struct _DefaultKeyIdxValue
++{
++ UCHAR KeyIdx;
++ UCHAR Value[16];
++} DefaultKeyIdxValue, *PDefaultKeyIdxValue;
++#endif
++
++
++#ifdef CONFIG_STA_SUPPORT
++enum {
++ DIDmsg_lnxind_wlansniffrm = 0x00000044,
++ DIDmsg_lnxind_wlansniffrm_hosttime = 0x00010044,
++ DIDmsg_lnxind_wlansniffrm_mactime = 0x00020044,
++ DIDmsg_lnxind_wlansniffrm_channel = 0x00030044,
++ DIDmsg_lnxind_wlansniffrm_rssi = 0x00040044,
++ DIDmsg_lnxind_wlansniffrm_sq = 0x00050044,
++ DIDmsg_lnxind_wlansniffrm_signal = 0x00060044,
++ DIDmsg_lnxind_wlansniffrm_noise = 0x00070044,
++ DIDmsg_lnxind_wlansniffrm_rate = 0x00080044,
++ DIDmsg_lnxind_wlansniffrm_istx = 0x00090044,
++ DIDmsg_lnxind_wlansniffrm_frmlen = 0x000A0044
++};
++enum {
++ P80211ENUM_msgitem_status_no_value = 0x00
++};
++enum {
++ P80211ENUM_truth_false = 0x00,
++ P80211ENUM_truth_true = 0x01
++};
++
++/* Definition from madwifi */
++typedef struct {
++ UINT32 did;
++ UINT16 status;
++ UINT16 len;
++ UINT32 data;
++} p80211item_uint32_t;
++
++typedef struct {
++ UINT32 msgcode;
++ UINT32 msglen;
++#define WLAN_DEVNAMELEN_MAX 16
++ UINT8 devname[WLAN_DEVNAMELEN_MAX];
++ p80211item_uint32_t hosttime;
++ p80211item_uint32_t mactime;
++ p80211item_uint32_t channel;
++ p80211item_uint32_t rssi;
++ p80211item_uint32_t sq;
++ p80211item_uint32_t signal;
++ p80211item_uint32_t noise;
++ p80211item_uint32_t rate;
++ p80211item_uint32_t istx;
++ p80211item_uint32_t frmlen;
++} wlan_ng_prism2_header;
++
++/* The radio capture header precedes the 802.11 header. */
++typedef struct PACKED _ieee80211_radiotap_header {
++ UINT8 it_version; /* Version 0. Only increases
++ * for drastic changes,
++ * introduction of compatible
++ * new fields does not count.
++ */
++ UINT8 it_pad;
++ UINT16 it_len; /* length of the whole
++ * header in bytes, including
++ * it_version, it_pad,
++ * it_len, and data fields.
++ */
++ UINT32 it_present; /* A bitmap telling which
++ * fields are present. Set bit 31
++ * (0x80000000) to extend the
++ * bitmap by another 32 bits.
++ * Additional extensions are made
++ * by setting bit 31.
++ */
++}ieee80211_radiotap_header ;
++
++enum ieee80211_radiotap_type {
++ IEEE80211_RADIOTAP_TSFT = 0,
++ IEEE80211_RADIOTAP_FLAGS = 1,
++ IEEE80211_RADIOTAP_RATE = 2,
++ IEEE80211_RADIOTAP_CHANNEL = 3,
++ IEEE80211_RADIOTAP_FHSS = 4,
++ IEEE80211_RADIOTAP_DBM_ANTSIGNAL = 5,
++ IEEE80211_RADIOTAP_DBM_ANTNOISE = 6,
++ IEEE80211_RADIOTAP_LOCK_QUALITY = 7,
++ IEEE80211_RADIOTAP_TX_ATTENUATION = 8,
++ IEEE80211_RADIOTAP_DB_TX_ATTENUATION = 9,
++ IEEE80211_RADIOTAP_DBM_TX_POWER = 10,
++ IEEE80211_RADIOTAP_ANTENNA = 11,
++ IEEE80211_RADIOTAP_DB_ANTSIGNAL = 12,
++ IEEE80211_RADIOTAP_DB_ANTNOISE = 13
++};
++
++#define WLAN_RADIOTAP_PRESENT ( \
++ (1 << IEEE80211_RADIOTAP_TSFT) | \
++ (1 << IEEE80211_RADIOTAP_FLAGS) | \
++ (1 << IEEE80211_RADIOTAP_RATE) | \
++ 0)
++
++typedef struct _wlan_radiotap_header {
++ ieee80211_radiotap_header wt_ihdr;
++ INT64 wt_tsft;
++ UINT8 wt_flags;
++ UINT8 wt_rate;
++} wlan_radiotap_header;
++/* Definition from madwifi */
++
++void send_monitor_packets(
++ IN PRTMP_ADAPTER pAd,
++ IN RX_BLK *pRxBlk);
++
++#if WIRELESS_EXT >= 12
++// This function will be called when query /proc
++struct iw_statistics *rt28xx_get_wireless_stats(
++ IN struct net_device *net_dev);
++#endif
++
++VOID RTMPSetDesiredRates(
++ IN PRTMP_ADAPTER pAdapter,
++ IN LONG Rates);
++#endif // CONFIG_STA_SUPPORT //
++
++INT Set_FixedTxMode_Proc(
++ IN PRTMP_ADAPTER pAd,
++ IN PUCHAR arg);
++
++#ifdef CONFIG_APSTA_MIXED_SUPPORT
++INT Set_OpMode_Proc(
++ IN PRTMP_ADAPTER pAd,
++ IN PUCHAR arg);
++#endif // CONFIG_APSTA_MIXED_SUPPORT //
++
++static inline char* GetPhyMode(
++ int Mode)
++{
++ switch(Mode)
++ {
++ case MODE_CCK:
++ return "CCK";
++
++ case MODE_OFDM:
++ return "OFDM";
++#ifdef DOT11_N_SUPPORT
++ case MODE_HTMIX:
++ return "HTMIX";
++
++ case MODE_HTGREENFIELD:
++ return "GREEN";
++#endif // DOT11_N_SUPPORT //
++ default:
++ return "N/A";
++ }
++}
++
++
++static inline char* GetBW(
++ int BW)
++{
++ switch(BW)
++ {
++ case BW_10:
++ return "10M";
++
++ case BW_20:
++ return "20M";
++#ifdef DOT11_N_SUPPORT
++ case BW_40:
++ return "40M";
++#endif // DOT11_N_SUPPORT //
++ default:
++ return "N/A";
++ }
++}
++
++
++VOID RT28xxThreadTerminate(
++ IN RTMP_ADAPTER *pAd);
++
++BOOLEAN RT28XXChipsetCheck(
++ IN void *_dev_p);
++
++BOOLEAN RT28XXNetDevInit(
++ IN void *_dev_p,
++ IN struct net_device *net_dev,
++ IN RTMP_ADAPTER *pAd);
++
++BOOLEAN RT28XXProbePostConfig(
++ IN void *_dev_p,
++ IN RTMP_ADAPTER *pAd,
++ IN INT32 argc);
++
++VOID RT28XXDMADisable(
++ IN RTMP_ADAPTER *pAd);
++
++VOID RT28XXDMAEnable(
++ IN RTMP_ADAPTER *pAd);
++
++VOID RT28xx_UpdateBeaconToAsic(
++ IN RTMP_ADAPTER * pAd,
++ IN INT apidx,
++ IN ULONG BeaconLen,
++ IN ULONG UpdatePos);
++
++INT rt28xx_ioctl(
++ IN struct net_device *net_dev,
++ IN OUT struct ifreq *rq,
++ IN INT cmd);
++
++
++#ifdef CONFIG_STA_SUPPORT
++INT rt28xx_sta_ioctl(
++ IN struct net_device *net_dev,
++ IN OUT struct ifreq *rq,
++ IN INT cmd);
++#endif // CONFIG_STA_SUPPORT //
++
++BOOLEAN RT28XXSecurityKeyAdd(
++ IN PRTMP_ADAPTER pAd,
++ IN ULONG apidx,
++ IN ULONG KeyIdx,
++ IN MAC_TABLE_ENTRY *pEntry);
++
++////////////////////////////////////////
++PNDIS_PACKET GetPacketFromRxRing(
++ IN PRTMP_ADAPTER pAd,
++ OUT PRT28XX_RXD_STRUC pSaveRxD,
++ OUT BOOLEAN *pbReschedule,
++ IN OUT UINT32 *pRxPending);
++
++
++void kill_thread_task(PRTMP_ADAPTER pAd);
++
++void tbtt_tasklet(unsigned long data);
++
++
++VOID AsicTurnOffRFClk(
++ IN PRTMP_ADAPTER pAd,
++ IN UCHAR Channel);
++
++VOID AsicTurnOnRFClk(
++ IN PRTMP_ADAPTER pAd,
++ IN UCHAR Channel);
++
++#ifdef RT2870
++//
++// Function Prototype in rtusb_bulk.c
++//
++VOID RTUSBInitTxDesc(
++ IN PRTMP_ADAPTER pAd,
++ IN PTX_CONTEXT pTxContext,
++ IN UCHAR BulkOutPipeId,
++ IN usb_complete_t Func);
++
++VOID RTUSBInitHTTxDesc(
++ IN PRTMP_ADAPTER pAd,
++ IN PHT_TX_CONTEXT pTxContext,
++ IN UCHAR BulkOutPipeId,
++ IN ULONG BulkOutSize,
++ IN usb_complete_t Func);
++
++VOID RTUSBInitRxDesc(
++ IN PRTMP_ADAPTER pAd,
++ IN PRX_CONTEXT pRxContext);
++
++VOID RTUSBCleanUpDataBulkOutQueue(
++ IN PRTMP_ADAPTER pAd);
++
++VOID RTUSBCancelPendingBulkOutIRP(
++ IN PRTMP_ADAPTER pAd);
++
++VOID RTUSBBulkOutDataPacket(
++ IN PRTMP_ADAPTER pAd,
++ IN UCHAR BulkOutPipeId,
++ IN UCHAR Index);
++
++VOID RTUSBBulkOutNullFrame(
++ IN PRTMP_ADAPTER pAd);
++
++VOID RTUSBBulkOutRTSFrame(
++ IN PRTMP_ADAPTER pAd);
++
++VOID RTUSBCancelPendingBulkInIRP(
++ IN PRTMP_ADAPTER pAd);
++
++VOID RTUSBCancelPendingIRPs(
++ IN PRTMP_ADAPTER pAd);
++
++VOID RTUSBBulkOutMLMEPacket(
++ IN PRTMP_ADAPTER pAd,
++ IN UCHAR Index);
++
++VOID RTUSBBulkOutPsPoll(
++ IN PRTMP_ADAPTER pAd);
++
++VOID RTUSBCleanUpMLMEBulkOutQueue(
++ IN PRTMP_ADAPTER pAd);
++
++VOID RTUSBKickBulkOut(
++ IN PRTMP_ADAPTER pAd);
++
++VOID RTUSBBulkReceive(
++ IN PRTMP_ADAPTER pAd);
++
++VOID DoBulkIn(
++ IN RTMP_ADAPTER *pAd);
++
++VOID RTUSBInitRxDesc(
++ IN PRTMP_ADAPTER pAd,
++ IN PRX_CONTEXT pRxContext);
++
++VOID RTUSBBulkRxHandle(
++ IN unsigned long data);
++
++//
++// Function Prototype in rtusb_io.c
++//
++NTSTATUS RTUSBMultiRead(
++ IN PRTMP_ADAPTER pAd,
++ IN USHORT Offset,
++ OUT PUCHAR pData,
++ IN USHORT length);
++
++NTSTATUS RTUSBMultiWrite(
++ IN PRTMP_ADAPTER pAd,
++ IN USHORT Offset,
++ IN PUCHAR pData,
++ IN USHORT length);
++
++NTSTATUS RTUSBMultiWrite_OneByte(
++ IN PRTMP_ADAPTER pAd,
++ IN USHORT Offset,
++ IN PUCHAR pData);
++
++NTSTATUS RTUSBReadBBPRegister(
++ IN PRTMP_ADAPTER pAd,
++ IN UCHAR Id,
++ IN PUCHAR pValue);
++
++NTSTATUS RTUSBWriteBBPRegister(
++ IN PRTMP_ADAPTER pAd,
++ IN UCHAR Id,
++ IN UCHAR Value);
++
++NTSTATUS RTUSBWriteRFRegister(
++ IN PRTMP_ADAPTER pAd,
++ IN UINT32 Value);
++
++NTSTATUS RT30xxWriteRFRegister(
++ IN PRTMP_ADAPTER pAd,
++ IN UCHAR RegID,
++ IN UCHAR Value);
++
++NTSTATUS RT30xxReadRFRegister(
++ IN PRTMP_ADAPTER pAd,
++ IN UCHAR RegID,
++ IN PUCHAR pValue);
++
++NTSTATUS RTUSB_VendorRequest(
++ IN PRTMP_ADAPTER pAd,
++ IN UINT32 TransferFlags,
++ IN UCHAR ReservedBits,
++ IN UCHAR Request,
++ IN USHORT Value,
++ IN USHORT Index,
++ IN PVOID TransferBuffer,
++ IN UINT32 TransferBufferLength);
++
++NTSTATUS RTUSBReadEEPROM(
++ IN PRTMP_ADAPTER pAd,
++ IN USHORT Offset,
++ OUT PUCHAR pData,
++ IN USHORT length);
++
++NTSTATUS RTUSBWriteEEPROM(
++ IN PRTMP_ADAPTER pAd,
++ IN USHORT Offset,
++ IN PUCHAR pData,
++ IN USHORT length);
++
++VOID RTUSBPutToSleep(
++ IN PRTMP_ADAPTER pAd);
++
++NTSTATUS RTUSBWakeUp(
++ IN PRTMP_ADAPTER pAd);
++
++VOID RTUSBInitializeCmdQ(
++ IN PCmdQ cmdq);
++
++NDIS_STATUS RTUSBEnqueueCmdFromNdis(
++ IN PRTMP_ADAPTER pAd,
++ IN NDIS_OID Oid,
++ IN BOOLEAN SetInformation,
++ IN PVOID pInformationBuffer,
++ IN UINT32 InformationBufferLength);
++
++NDIS_STATUS RTUSBEnqueueInternalCmd(
++ IN PRTMP_ADAPTER pAd,
++ IN NDIS_OID Oid,
++ IN PVOID pInformationBuffer,
++ IN UINT32 InformationBufferLength);
++
++VOID RTUSBDequeueCmd(
++ IN PCmdQ cmdq,
++ OUT PCmdQElmt *pcmdqelmt);
++
++INT RTUSBCmdThread(
++ IN OUT PVOID Context);
++
++INT TimerQThread(
++ IN OUT PVOID Context);
++
++RT2870_TIMER_ENTRY *RT2870_TimerQ_Insert(
++ IN RTMP_ADAPTER *pAd,
++ IN RALINK_TIMER_STRUCT *pTimer);
++
++BOOLEAN RT2870_TimerQ_Remove(
++ IN RTMP_ADAPTER *pAd,
++ IN RALINK_TIMER_STRUCT *pTimer);
++
++void RT2870_TimerQ_Exit(
++ IN RTMP_ADAPTER *pAd);
++
++void RT2870_TimerQ_Init(
++ IN RTMP_ADAPTER *pAd);
++
++VOID RT2870_BssBeaconExit(
++ IN RTMP_ADAPTER *pAd);
++
++VOID RT2870_BssBeaconStop(
++ IN RTMP_ADAPTER *pAd);
++
++VOID RT2870_BssBeaconStart(
++ IN RTMP_ADAPTER * pAd);
++
++VOID RT2870_BssBeaconInit(
++ IN RTMP_ADAPTER *pAd);
++
++VOID RT2870_WatchDog(
++ IN RTMP_ADAPTER *pAd);
++
++NTSTATUS RTUSBWriteMACRegister(
++ IN PRTMP_ADAPTER pAd,
++ IN USHORT Offset,
++ IN UINT32 Value);
++
++NTSTATUS RTUSBReadMACRegister(
++ IN PRTMP_ADAPTER pAd,
++ IN USHORT Offset,
++ OUT PUINT32 pValue);
++
++NTSTATUS RTUSBSingleWrite(
++ IN RTMP_ADAPTER *pAd,
++ IN USHORT Offset,
++ IN USHORT Value);
++
++NTSTATUS RTUSBFirmwareRun(
++ IN PRTMP_ADAPTER pAd);
++
++NTSTATUS RTUSBFirmwareWrite(
++ IN PRTMP_ADAPTER pAd,
++ IN PUCHAR pFwImage,
++ IN ULONG FwLen);
++
++NTSTATUS RTUSBFirmwareOpmode(
++ IN PRTMP_ADAPTER pAd,
++ OUT PUINT32 pValue);
++
++NTSTATUS RTUSBVenderReset(
++ IN PRTMP_ADAPTER pAd);
++
++NDIS_STATUS RTUSBSetHardWareRegister(
++ IN PRTMP_ADAPTER pAdapter,
++ IN PVOID pBuf);
++
++NDIS_STATUS RTUSBQueryHardWareRegister(
++ IN PRTMP_ADAPTER pAdapter,
++ IN PVOID pBuf);
++
++VOID CMDHandler(
++ IN PRTMP_ADAPTER pAd);
++
++
++NDIS_STATUS CreateThreads(
++ IN struct net_device *net_dev );
++
++
++VOID MacTableInitialize(
++ IN PRTMP_ADAPTER pAd);
++
++VOID MlmeSetPsm(
++ IN PRTMP_ADAPTER pAd,
++ IN USHORT psm);
++
++NDIS_STATUS RTMPWPAAddKeyProc(
++ IN PRTMP_ADAPTER pAd,
++ IN PVOID pBuf);
++
++VOID AsicRxAntEvalAction(
++ IN PRTMP_ADAPTER pAd);
++
++#if 0 // Mark because not used in RT28xx.
++NTSTATUS RTUSBRxPacket(
++ IN PRTMP_ADAPTER pAd,
++ IN BOOLEAN bBulkReceive);
++
++VOID RTUSBDequeueMLMEPacket(
++ IN PRTMP_ADAPTER pAd);
++
++VOID RTUSBCleanUpMLMEWaitQueue(
++ IN PRTMP_ADAPTER pAd);
++#endif
++
++void append_pkt(
++ IN PRTMP_ADAPTER pAd,
++ IN PUCHAR pHeader802_3,
++ IN UINT HdrLen,
++ IN PUCHAR pData,
++ IN ULONG DataSize,
++ OUT PNDIS_PACKET *ppPacket);
++
++UINT deaggregate_AMSDU_announce(
++ IN PRTMP_ADAPTER pAd,
++ PNDIS_PACKET pPacket,
++ IN PUCHAR pData,
++ IN ULONG DataSize);
++
++NDIS_STATUS RTMPCheckRxError(
++ IN PRTMP_ADAPTER pAd,
++ IN PHEADER_802_11 pHeader,
++ IN PRXWI_STRUC pRxWI,
++ IN PRT28XX_RXD_STRUC pRxINFO);
++
++
++VOID RTUSBMlmeHardTransmit(
++ IN PRTMP_ADAPTER pAd,
++ IN PMGMT_STRUC pMgmt);
++
++INT MlmeThread(
++ IN PVOID Context);
++
++#if 0
++VOID RTUSBResumeMsduTransmission(
++ IN PRTMP_ADAPTER pAd);
++
++VOID RTUSBSuspendMsduTransmission(
++ IN PRTMP_ADAPTER pAd);
++#endif
++
++//
++// Function Prototype in rtusb_data.c
++//
++NDIS_STATUS RTUSBFreeDescriptorRequest(
++ IN PRTMP_ADAPTER pAd,
++ IN UCHAR BulkOutPipeId,
++ IN UINT32 NumberRequired);
++
++
++BOOLEAN RTUSBNeedQueueBackForAgg(
++ IN RTMP_ADAPTER *pAd,
++ IN UCHAR BulkOutPipeId);
++
++
++VOID RTMPWriteTxInfo(
++ IN PRTMP_ADAPTER pAd,
++ IN PTXINFO_STRUC pTxInfo,
++ IN USHORT USBDMApktLen,
++ IN BOOLEAN bWiv,
++ IN UCHAR QueueSel,
++ IN UCHAR NextValid,
++ IN UCHAR TxBurst);
++
++//
++// Function Prototype in cmm_data_2870.c
++//
++USHORT RtmpUSB_WriteSubTxResource(
++ IN PRTMP_ADAPTER pAd,
++ IN TX_BLK *pTxBlk,
++ IN BOOLEAN bIsLast,
++ OUT USHORT *FreeNumber);
++
++USHORT RtmpUSB_WriteSingleTxResource(
++ IN PRTMP_ADAPTER pAd,
++ IN TX_BLK *pTxBlk,
++ IN BOOLEAN bIsLast,
++ OUT USHORT *FreeNumber);
++
++USHORT RtmpUSB_WriteFragTxResource(
++ IN PRTMP_ADAPTER pAd,
++ IN TX_BLK *pTxBlk,
++ IN UCHAR fragNum,
++ OUT USHORT *FreeNumber);
++
++USHORT RtmpUSB_WriteMultiTxResource(
++ IN PRTMP_ADAPTER pAd,
++ IN TX_BLK *pTxBlk,
++ IN UCHAR frameNum,
++ OUT USHORT *FreeNumber);
++
++VOID RtmpUSB_FinalWriteTxResource(
++ IN PRTMP_ADAPTER pAd,
++ IN TX_BLK *pTxBlk,
++ IN USHORT totalMPDUSize,
++ IN USHORT TxIdx);
++
++VOID RtmpUSBDataLastTxIdx(
++ IN PRTMP_ADAPTER pAd,
++ IN UCHAR QueIdx,
++ IN USHORT TxIdx);
++
++VOID RtmpUSBDataKickOut(
++ IN PRTMP_ADAPTER pAd,
++ IN TX_BLK *pTxBlk,
++ IN UCHAR QueIdx);
++
++
++int RtmpUSBMgmtKickOut(
++ IN RTMP_ADAPTER *pAd,
++ IN UCHAR QueIdx,
++ IN PNDIS_PACKET pPacket,
++ IN PUCHAR pSrcBufVA,
++ IN UINT SrcBufLen);
++
++VOID RtmpUSBNullFrameKickOut(
++ IN RTMP_ADAPTER *pAd,
++ IN UCHAR QueIdx,
++ IN UCHAR *pNullFrame,
++ IN UINT32 frameLen);
++
++VOID RT28xxUsbStaAsicForceWakeup(
++ IN PRTMP_ADAPTER pAd,
++ IN BOOLEAN bFromTx);
++
++VOID RT28xxUsbStaAsicSleepThenAutoWakeup(
++ IN PRTMP_ADAPTER pAd,
++ IN USHORT TbttNumToNextWakeUp);
++
++VOID RT28xxUsbMlmeRadioOn(
++ IN PRTMP_ADAPTER pAd);
++
++VOID RT28xxUsbMlmeRadioOFF(
++ IN PRTMP_ADAPTER pAd);
++#endif // RT2870 //
++
++////////////////////////////////////////
++
++VOID QBSS_LoadInit(
++ IN RTMP_ADAPTER *pAd);
++
++UINT32 QBSS_LoadElementAppend(
++ IN RTMP_ADAPTER *pAd,
++ OUT UINT8 *buf_p);
++
++VOID QBSS_LoadUpdate(
++ IN RTMP_ADAPTER *pAd);
++
++///////////////////////////////////////
++INT RTMPShowCfgValue(
++ IN PRTMP_ADAPTER pAd,
++ IN PUCHAR pName,
++ IN PUCHAR pBuf);
++
++PCHAR RTMPGetRalinkAuthModeStr(
++ IN NDIS_802_11_AUTHENTICATION_MODE authMode);
++
++PCHAR RTMPGetRalinkEncryModeStr(
++ IN USHORT encryMode);
++//////////////////////////////////////
++
++#ifdef CONFIG_STA_SUPPORT
++VOID AsicStaBbpTuning(
++ IN PRTMP_ADAPTER pAd);
++
++BOOLEAN StaAddMacTableEntry(
++ IN PRTMP_ADAPTER pAd,
++ IN PMAC_TABLE_ENTRY pEntry,
++ IN UCHAR MaxSupportedRateIn500Kbps,
++ IN HT_CAPABILITY_IE *pHtCapability,
++ IN UCHAR HtCapabilityLen,
++ IN USHORT CapabilityInfo);
++#endif // CONFIG_STA_SUPPORT //
++
++void RTMP_IndicateMediaState(
++ IN PRTMP_ADAPTER pAd);
++
++VOID ReSyncBeaconTime(
++ IN PRTMP_ADAPTER pAd);
++
++VOID RTMPSetAGCInitValue(
++ IN PRTMP_ADAPTER pAd,
++ IN UCHAR BandWidth);
++
++int rt28xx_close(IN PNET_DEV dev);
++int rt28xx_open(IN PNET_DEV dev);
++
++__inline INT VIRTUAL_IF_UP(PRTMP_ADAPTER pAd)
++{
++extern VOID MeshMakeBeacon(IN PRTMP_ADAPTER pAd, IN UCHAR idx);
++extern VOID MeshUpdateBeaconFrame(IN PRTMP_ADAPTER pAd, IN UCHAR idx);
++
++ if (VIRTUAL_IF_NUM(pAd) == 0)
++ {
++ if (rt28xx_open(pAd->net_dev) != 0)
++ return -1;
++ }
++ else
++ {
++ }
++ VIRTUAL_IF_INC(pAd);
++ return 0;
++}
++
++__inline VOID VIRTUAL_IF_DOWN(PRTMP_ADAPTER pAd)
++{
++ VIRTUAL_IF_DEC(pAd);
++ if (VIRTUAL_IF_NUM(pAd) == 0)
++ rt28xx_close(pAd->net_dev);
++ return;
++}
++
++
++#endif // __RTMP_H__
++
+--- /dev/null
++++ b/drivers/staging/rt2870/rtmp_type.h
+@@ -0,0 +1,94 @@
++/*
++ *************************************************************************
++ * Ralink Tech Inc.
++ * 5F., No.36, Taiyuan St., Jhubei City,
++ * Hsinchu County 302,
++ * Taiwan, R.O.C.
++ *
++ * (c) Copyright 2002-2007, Ralink Technology, Inc.
++ *
++ * This program is free software; you can redistribute it and/or modify *
++ * it under the terms of the GNU General Public License as published by *
++ * the Free Software Foundation; either version 2 of the License, or *
++ * (at your option) any later version. *
++ * *
++ * This program is distributed in the hope that it will be useful, *
++ * but WITHOUT ANY WARRANTY; without even the implied warranty of *
++ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the *
++ * GNU General Public License for more details. *
++ * *
++ * You should have received a copy of the GNU General Public License *
++ * along with this program; if not, write to the *
++ * Free Software Foundation, Inc., *
++ * 59 Temple Place - Suite 330, Boston, MA 02111-1307, USA. *
++ * *
++ *************************************************************************
++
++ Module Name:
++ rtmp_type.h
++
++ Abstract:
++
++ Revision History:
++ Who When What
++ -------- ---------- ----------------------------------------------
++ Name Date Modification logs
++ Paul Lin 1-2-2004
++*/
++#ifndef __RTMP_TYPE_H__
++#define __RTMP_TYPE_H__
++
++#define PACKED __attribute__ ((packed))
++
++// Put platform dependent declaration here
++// For example, linux type definition
++typedef unsigned char UINT8;
++typedef unsigned short UINT16;
++typedef unsigned int UINT32;
++typedef unsigned long long UINT64;
++typedef int INT32;
++typedef long long INT64;
++
++typedef unsigned char * PUINT8;
++typedef unsigned short * PUINT16;
++typedef unsigned int * PUINT32;
++typedef unsigned long long * PUINT64;
++typedef int * PINT32;
++typedef long long * PINT64;
++
++typedef signed char CHAR;
++typedef signed short SHORT;
++typedef signed int INT;
++typedef signed long LONG;
++typedef signed long long LONGLONG;
++
++
++typedef unsigned char UCHAR;
++typedef unsigned short USHORT;
++typedef unsigned int UINT;
++typedef unsigned long ULONG;
++typedef unsigned long long ULONGLONG;
++
++typedef unsigned char BOOLEAN;
++typedef void VOID;
++
++typedef VOID * PVOID;
++typedef CHAR * PCHAR;
++typedef UCHAR * PUCHAR;
++typedef USHORT * PUSHORT;
++typedef LONG * PLONG;
++typedef ULONG * PULONG;
++typedef UINT * PUINT;
++
++typedef unsigned int NDIS_MEDIA_STATE;
++
++typedef union _LARGE_INTEGER {
++ struct {
++ UINT LowPart;
++ INT32 HighPart;
++ } u;
++ INT64 QuadPart;
++} LARGE_INTEGER;
++
++#endif // __RTMP_TYPE_H__
++
+--- /dev/null
++++ b/drivers/staging/rt2870/rt_profile.c
+@@ -0,0 +1,2016 @@
++/*
++ *************************************************************************
++ * Ralink Tech Inc.
++ * 5F., No.36, Taiyuan St., Jhubei City,
++ * Hsinchu County 302,
++ * Taiwan, R.O.C.
++ *
++ * (c) Copyright 2002-2007, Ralink Technology, Inc.
++ *
++ * This program is free software; you can redistribute it and/or modify *
++ * it under the terms of the GNU General Public License as published by *
++ * the Free Software Foundation; either version 2 of the License, or *
++ * (at your option) any later version. *
++ * *
++ * This program is distributed in the hope that it will be useful, *
++ * but WITHOUT ANY WARRANTY; without even the implied warranty of *
++ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the *
++ * GNU General Public License for more details. *
++ * *
++ * You should have received a copy of the GNU General Public License *
++ * along with this program; if not, write to the *
++ * Free Software Foundation, Inc., *
++ * 59 Temple Place - Suite 330, Boston, MA 02111-1307, USA. *
++ * *
++ *************************************************************************
++ */
++
++#include "rt_config.h"
++
++#ifdef DOT11_N_SUPPORT
++static void HTParametersHook(
++ IN PRTMP_ADAPTER pAd,
++ IN CHAR *pValueStr,
++ IN CHAR *pInput);
++#endif // DOT11_N_SUPPORT //
++
++#define ETH_MAC_ADDR_STR_LEN 17 // in format of xx:xx:xx:xx:xx:xx
++
++// We assume the s1 is a sting, s2 is a memory space with 6 bytes. and content of s1 will be changed.
++BOOLEAN rtstrmactohex(char *s1, char *s2)
++{
++ int i = 0;
++ char *ptokS = s1, *ptokE = s1;
++
++ if (strlen(s1) != ETH_MAC_ADDR_STR_LEN)
++ return FALSE;
++
++ while((*ptokS) != '\0')
++ {
++ if((ptokE = strchr(ptokS, ':')) != NULL)
++ *ptokE++ = '\0';
++ if ((strlen(ptokS) != 2) || (!isxdigit(*ptokS)) || (!isxdigit(*(ptokS+1))))
++ break; // fail
++ AtoH(ptokS, &s2[i++], 1);
++ ptokS = ptokE;
++ if (i == 6)
++ break; // parsing finished
++ }
++
++ return ( i == 6 ? TRUE : FALSE);
++
++}
++
++
++// we assume the s1 and s2 both are strings.
++BOOLEAN rtstrcasecmp(char *s1, char *s2)
++{
++ char *p1 = s1, *p2 = s2;
++
++ if (strlen(s1) != strlen(s2))
++ return FALSE;
++
++ while(*p1 != '\0')
++ {
++ if((*p1 != *p2) && ((*p1 ^ *p2) != 0x20))
++ return FALSE;
++ p1++;
++ p2++;
++ }
++
++ return TRUE;
++}
++
++// we assume the s1 (buffer) and s2 (key) both are strings.
++char * rtstrstruncasecmp(char * s1, char * s2)
++{
++ INT l1, l2, i;
++ char temp1, temp2;
++
++ l2 = strlen(s2);
++ if (!l2)
++ return (char *) s1;
++
++ l1 = strlen(s1);
++
++ while (l1 >= l2)
++ {
++ l1--;
++
++ for(i=0; i<l2; i++)
++ {
++ temp1 = *(s1+i);
++ temp2 = *(s2+i);
++
++ if (('a' <= temp1) && (temp1 <= 'z'))
++ temp1 = 'A'+(temp1-'a');
++ if (('a' <= temp2) && (temp2 <= 'z'))
++ temp2 = 'A'+(temp2-'a');
++
++ if (temp1 != temp2)
++ break;
++ }
++
++ if (i == l2)
++ return (char *) s1;
++
++ s1++;
++ }
++
++ return NULL; // not found
++}
++
++//add by kathy
++
++ /**
++ * strstr - Find the first substring in a %NUL terminated string
++ * @s1: The string to be searched
++ * @s2: The string to search for
++ */
++char * rtstrstr(const char * s1,const char * s2)
++{
++ INT l1, l2;
++
++ l2 = strlen(s2);
++ if (!l2)
++ return (char *) s1;
++
++ l1 = strlen(s1);
++
++ while (l1 >= l2)
++ {
++ l1--;
++ if (!memcmp(s1,s2,l2))
++ return (char *) s1;
++ s1++;
++ }
++
++ return NULL;
++}
++
++/**
++ * rstrtok - Split a string into tokens
++ * @s: The string to be searched
++ * @ct: The characters to search for
++ * * WARNING: strtok is deprecated, use strsep instead. However strsep is not compatible with old architecture.
++ */
++char * __rstrtok;
++char * rstrtok(char * s,const char * ct)
++{
++ char *sbegin, *send;
++
++ sbegin = s ? s : __rstrtok;
++ if (!sbegin)
++ {
++ return NULL;
++ }
++
++ sbegin += strspn(sbegin,ct);
++ if (*sbegin == '\0')
++ {
++ __rstrtok = NULL;
++ return( NULL );
++ }
++
++ send = strpbrk( sbegin, ct);
++ if (send && *send != '\0')
++ *send++ = '\0';
++
++ __rstrtok = send;
++
++ return (sbegin);
++}
++
++/**
++ * delimitcnt - return the count of a given delimiter in a given string.
++ * @s: The string to be searched.
++ * @ct: The delimiter to search for.
++ * Notice : We suppose the delimiter is a single-char string(for example : ";").
++ */
++INT delimitcnt(char * s,const char * ct)
++{
++ INT count = 0;
++ /* point to the beginning of the line */
++ const char *token = s;
++
++ for ( ;; )
++ {
++ token = strpbrk(token, ct); /* search for delimiters */
++
++ if ( token == NULL )
++ {
++ /* advanced to the terminating null character */
++ break;
++ }
++ /* skip the delimiter */
++ ++token;
++
++ /*
++ * Print the found text: use len with %.*s to specify field width.
++ */
++
++ /* accumulate delimiter count */
++ ++count;
++ }
++ return count;
++}
++
++/*
++ * converts the Internet host address from the standard numbers-and-dots notation
++ * into binary data.
++ * returns nonzero if the address is valid, zero if not.
++ */
++int rtinet_aton(const char *cp, unsigned int *addr)
++{
++ unsigned int val;
++ int base, n;
++ char c;
++ unsigned int parts[4];
++ unsigned int *pp = parts;
++
++ for (;;)
++ {
++ /*
++ * Collect number up to ``.''.
++ * Values are specified as for C:
++ * 0x=hex, 0=octal, other=decimal.
++ */
++ val = 0;
++ base = 10;
++ if (*cp == '0')
++ {
++ if (*++cp == 'x' || *cp == 'X')
++ base = 16, cp++;
++ else
++ base = 8;
++ }
++ while ((c = *cp) != '\0')
++ {
++ if (isdigit((unsigned char) c))
++ {
++ val = (val * base) + (c - '0');
++ cp++;
++ continue;
++ }
++ if (base == 16 && isxdigit((unsigned char) c))
++ {
++ val = (val << 4) +
++ (c + 10 - (islower((unsigned char) c) ? 'a' : 'A'));
++ cp++;
++ continue;
++ }
++ break;
++ }
++ if (*cp == '.')
++ {
++ /*
++ * Internet format: a.b.c.d a.b.c (with c treated as 16-bits)
++ * a.b (with b treated as 24 bits)
++ */
++ if (pp >= parts + 3 || val > 0xff)
++ return 0;
++ *pp++ = val, cp++;
++ }
++ else
++ break;
++ }
++
++ /*
++ * Check for trailing junk.
++ */
++ while (*cp)
++ if (!isspace((unsigned char) *cp++))
++ return 0;
++
++ /*
++ * Concoct the address according to the number of parts specified.
++ */
++ n = pp - parts + 1;
++ switch (n)
++ {
++
++ case 1: /* a -- 32 bits */
++ break;
++
++ case 2: /* a.b -- 8.24 bits */
++ if (val > 0xffffff)
++ return 0;
++ val |= parts[0] << 24;
++ break;
++
++ case 3: /* a.b.c -- 8.8.16 bits */
++ if (val > 0xffff)
++ return 0;
++ val |= (parts[0] << 24) | (parts[1] << 16);
++ break;
++
++ case 4: /* a.b.c.d -- 8.8.8.8 bits */
++ if (val > 0xff)
++ return 0;
++ val |= (parts[0] << 24) | (parts[1] << 16) | (parts[2] << 8);
++ break;
++ }
++
++ *addr = htonl(val);
++ return 1;
++
++}
++
++/*
++ ========================================================================
++
++ Routine Description:
++ Find key section for Get key parameter.
++
++ Arguments:
++ buffer Pointer to the buffer to start find the key section
++ section the key of the secion to be find
++
++ Return Value:
++ NULL Fail
++ Others Success
++ ========================================================================
++*/
++PUCHAR RTMPFindSection(
++ IN PCHAR buffer)
++{
++ CHAR temp_buf[32];
++ PUCHAR ptr;
++
++ strcpy(temp_buf, "Default");
++
++ if((ptr = rtstrstr(buffer, temp_buf)) != NULL)
++ return (ptr+strlen("\n"));
++ else
++ return NULL;
++}
++
++/*
++ ========================================================================
++
++ Routine Description:
++ Get key parameter.
++
++ Arguments:
++ key Pointer to key string
++ dest Pointer to destination
++ destsize The datasize of the destination
++ buffer Pointer to the buffer to start find the key
++
++ Return Value:
++ TRUE Success
++ FALSE Fail
++
++ Note:
++ This routine get the value with the matched key (case case-sensitive)
++ ========================================================================
++*/
++INT RTMPGetKeyParameter(
++ IN PCHAR key,
++ OUT PCHAR dest,
++ IN INT destsize,
++ IN PCHAR buffer)
++{
++ UCHAR *temp_buf1 = NULL;
++ UCHAR *temp_buf2 = NULL;
++ CHAR *start_ptr;
++ CHAR *end_ptr;
++ CHAR *ptr;
++ CHAR *offset = 0;
++ INT len;
++
++ //temp_buf1 = kmalloc(MAX_PARAM_BUFFER_SIZE, MEM_ALLOC_FLAG);
++ os_alloc_mem(NULL, &temp_buf1, MAX_PARAM_BUFFER_SIZE);
++
++ if(temp_buf1 == NULL)
++ return (FALSE);
++
++ //temp_buf2 = kmalloc(MAX_PARAM_BUFFER_SIZE, MEM_ALLOC_FLAG);
++ os_alloc_mem(NULL, &temp_buf2, MAX_PARAM_BUFFER_SIZE);
++ if(temp_buf2 == NULL)
++ {
++ os_free_mem(NULL, temp_buf1);
++ return (FALSE);
++ }
++
++ //find section
++ if((offset = RTMPFindSection(buffer)) == NULL)
++ {
++ os_free_mem(NULL, temp_buf1);
++ os_free_mem(NULL, temp_buf2);
++ return (FALSE);
++ }
++
++ strcpy(temp_buf1, "\n");
++ strcat(temp_buf1, key);
++ strcat(temp_buf1, "=");
++
++ //search key
++ if((start_ptr=rtstrstr(offset, temp_buf1))==NULL)
++ {
++ os_free_mem(NULL, temp_buf1);
++ os_free_mem(NULL, temp_buf2);
++ return (FALSE);
++ }
++
++ start_ptr+=strlen("\n");
++ if((end_ptr=rtstrstr(start_ptr, "\n"))==NULL)
++ end_ptr=start_ptr+strlen(start_ptr);
++
++ if (end_ptr<start_ptr)
++ {
++ os_free_mem(NULL, temp_buf1);
++ os_free_mem(NULL, temp_buf2);
++ return (FALSE);
++ }
++
++ NdisMoveMemory(temp_buf2, start_ptr, end_ptr-start_ptr);
++ temp_buf2[end_ptr-start_ptr]='\0';
++ len = strlen(temp_buf2);
++ strcpy(temp_buf1, temp_buf2);
++ if((start_ptr=rtstrstr(temp_buf1, "=")) == NULL)
++ {
++ os_free_mem(NULL, temp_buf1);
++ os_free_mem(NULL, temp_buf2);
++ return (FALSE);
++ }
++
++ strcpy(temp_buf2, start_ptr+1);
++ ptr = temp_buf2;
++ //trim space or tab
++ while(*ptr != 0x00)
++ {
++ if( (*ptr == ' ') || (*ptr == '\t') )
++ ptr++;
++ else
++ break;
++ }
++
++ len = strlen(ptr);
++ memset(dest, 0x00, destsize);
++ strncpy(dest, ptr, len >= destsize ? destsize: len);
++
++ os_free_mem(NULL, temp_buf1);
++ os_free_mem(NULL, temp_buf2);
++ return TRUE;
++}
++
++/*
++ ========================================================================
++
++ Routine Description:
++ Get key parameter.
++
++ Arguments:
++ key Pointer to key string
++ dest Pointer to destination
++ destsize The datasize of the destination
++ buffer Pointer to the buffer to start find the key
++
++ Return Value:
++ TRUE Success
++ FALSE Fail
++
++ Note:
++ This routine get the value with the matched key (case case-sensitive).
++ It is called for parsing SSID and any key string.
++ ========================================================================
++*/
++INT RTMPGetCriticalParameter(
++ IN PCHAR key,
++ OUT PCHAR dest,
++ IN INT destsize,
++ IN PCHAR buffer)
++{
++ UCHAR *temp_buf1 = NULL;
++ UCHAR *temp_buf2 = NULL;
++ CHAR *start_ptr;
++ CHAR *end_ptr;
++ CHAR *ptr;
++ CHAR *offset = 0;
++ INT len;
++
++ //temp_buf1 = kmalloc(MAX_PARAM_BUFFER_SIZE, MEM_ALLOC_FLAG);
++ os_alloc_mem(NULL, &temp_buf1, MAX_PARAM_BUFFER_SIZE);
++
++ if(temp_buf1 == NULL)
++ return (FALSE);
++
++ //temp_buf2 = kmalloc(MAX_PARAM_BUFFER_SIZE, MEM_ALLOC_FLAG);
++ os_alloc_mem(NULL, &temp_buf2, MAX_PARAM_BUFFER_SIZE);
++ if(temp_buf2 == NULL)
++ {
++ os_free_mem(NULL, temp_buf1);
++ return (FALSE);
++ }
++
++ //find section
++ if((offset = RTMPFindSection(buffer)) == NULL)
++ {
++ os_free_mem(NULL, temp_buf1);
++ os_free_mem(NULL, temp_buf2);
++ return (FALSE);
++ }
++
++ strcpy(temp_buf1, "\n");
++ strcat(temp_buf1, key);
++ strcat(temp_buf1, "=");
++
++ //search key
++ if((start_ptr=rtstrstr(offset, temp_buf1))==NULL)
++ {
++ os_free_mem(NULL, temp_buf1);
++ os_free_mem(NULL, temp_buf2);
++ return (FALSE);
++ }
++
++ start_ptr+=strlen("\n");
++ if((end_ptr=rtstrstr(start_ptr, "\n"))==NULL)
++ end_ptr=start_ptr+strlen(start_ptr);
++
++ if (end_ptr<start_ptr)
++ {
++ os_free_mem(NULL, temp_buf1);
++ os_free_mem(NULL, temp_buf2);
++ return (FALSE);
++ }
++
++ NdisMoveMemory(temp_buf2, start_ptr, end_ptr-start_ptr);
++ temp_buf2[end_ptr-start_ptr]='\0';
++ len = strlen(temp_buf2);
++ strcpy(temp_buf1, temp_buf2);
++ if((start_ptr=rtstrstr(temp_buf1, "=")) == NULL)
++ {
++ os_free_mem(NULL, temp_buf1);
++ os_free_mem(NULL, temp_buf2);
++ return (FALSE);
++ }
++
++ strcpy(temp_buf2, start_ptr+1);
++ ptr = temp_buf2;
++
++ //trim tab
++ /* We cannot trim space(' ') for SSID and key string. */
++ while(*ptr != 0x00)
++ {
++ //if( (*ptr == ' ') || (*ptr == '\t') )
++ if( (*ptr == '\t') )
++ ptr++;
++ else
++ break;
++ }
++
++ len = strlen(ptr);
++ memset(dest, 0x00, destsize);
++ strncpy(dest, ptr, len >= destsize ? destsize: len);
++
++ os_free_mem(NULL, temp_buf1);
++ os_free_mem(NULL, temp_buf2);
++ return TRUE;
++}
++
++/*
++ ========================================================================
++
++ Routine Description:
++ Get multiple key parameter.
++
++ Arguments:
++ key Pointer to key string
++ dest Pointer to destination
++ destsize The datasize of the destination
++ buffer Pointer to the buffer to start find the key
++
++ Return Value:
++ TRUE Success
++ FALSE Fail
++
++ Note:
++ This routine get the value with the matched key (case case-sensitive)
++ ========================================================================
++*/
++INT RTMPGetKeyParameterWithOffset(
++ IN PCHAR key,
++ OUT PCHAR dest,
++ OUT USHORT *end_offset,
++ IN INT destsize,
++ IN PCHAR buffer,
++ IN BOOLEAN bTrimSpace)
++{
++ UCHAR *temp_buf1 = NULL;
++ UCHAR *temp_buf2 = NULL;
++ CHAR *start_ptr;
++ CHAR *end_ptr;
++ CHAR *ptr;
++ CHAR *offset = 0;
++ INT len;
++
++ if (*end_offset >= MAX_INI_BUFFER_SIZE)
++ return (FALSE);
++
++ os_alloc_mem(NULL, &temp_buf1, MAX_PARAM_BUFFER_SIZE);
++
++ if(temp_buf1 == NULL)
++ return (FALSE);
++
++ os_alloc_mem(NULL, &temp_buf2, MAX_PARAM_BUFFER_SIZE);
++ if(temp_buf2 == NULL)
++ {
++ os_free_mem(NULL, temp_buf1);
++ return (FALSE);
++ }
++
++ //find section
++ if(*end_offset == 0)
++ {
++ if ((offset = RTMPFindSection(buffer)) == NULL)
++ {
++ os_free_mem(NULL, temp_buf1);
++ os_free_mem(NULL, temp_buf2);
++ return (FALSE);
++ }
++ }
++ else
++ offset = buffer + (*end_offset);
++
++ strcpy(temp_buf1, "\n");
++ strcat(temp_buf1, key);
++ strcat(temp_buf1, "=");
++
++ //search key
++ if((start_ptr=rtstrstr(offset, temp_buf1))==NULL)
++ {
++ os_free_mem(NULL, temp_buf1);
++ os_free_mem(NULL, temp_buf2);
++ return (FALSE);
++ }
++
++ start_ptr+=strlen("\n");
++ if((end_ptr=rtstrstr(start_ptr, "\n"))==NULL)
++ end_ptr=start_ptr+strlen(start_ptr);
++
++ if (end_ptr<start_ptr)
++ {
++ os_free_mem(NULL, temp_buf1);
++ os_free_mem(NULL, temp_buf2);
++ return (FALSE);
++ }
++
++ *end_offset = end_ptr - buffer;
++
++ NdisMoveMemory(temp_buf2, start_ptr, end_ptr-start_ptr);
++ temp_buf2[end_ptr-start_ptr]='\0';
++ len = strlen(temp_buf2);
++ strcpy(temp_buf1, temp_buf2);
++ if((start_ptr=rtstrstr(temp_buf1, "=")) == NULL)
++ {
++ os_free_mem(NULL, temp_buf1);
++ os_free_mem(NULL, temp_buf2);
++ return (FALSE);
++ }
++
++ strcpy(temp_buf2, start_ptr+1);
++ ptr = temp_buf2;
++ //trim space or tab
++ while(*ptr != 0x00)
++ {
++ if((bTrimSpace && (*ptr == ' ')) || (*ptr == '\t') )
++ ptr++;
++ else
++ break;
++ }
++
++ len = strlen(ptr);
++ memset(dest, 0x00, destsize);
++ strncpy(dest, ptr, len >= destsize ? destsize: len);
++
++ os_free_mem(NULL, temp_buf1);
++ os_free_mem(NULL, temp_buf2);
++ return TRUE;
++}
++
++
++static int rtmp_parse_key_buffer_from_file(IN PRTMP_ADAPTER pAd,IN char *buffer,IN ULONG KeyType,IN INT BSSIdx,IN INT KeyIdx)
++{
++ PUCHAR keybuff;
++ INT i = BSSIdx, idx = KeyIdx;
++ ULONG KeyLen;
++ UCHAR CipherAlg = CIPHER_WEP64;
++
++ keybuff = buffer;
++ KeyLen = strlen(keybuff);
++
++ if (KeyType == 1)
++ {//Ascii
++ if( (KeyLen == 5) || (KeyLen == 13))
++ {
++ pAd->SharedKey[i][idx].KeyLen = KeyLen;
++ NdisMoveMemory(pAd->SharedKey[i][idx].Key, keybuff, KeyLen);
++ if (KeyLen == 5)
++ CipherAlg = CIPHER_WEP64;
++ else
++ CipherAlg = CIPHER_WEP128;
++ pAd->SharedKey[i][idx].CipherAlg = CipherAlg;
++
++ DBGPRINT(RT_DEBUG_TRACE, ("I/F(ra%d) Key%dStr=%s and type=%s\n", i, idx+1, keybuff, (KeyType == 0) ? "Hex":"Ascii"));
++ return 1;
++ }
++ else
++ {//Invalid key length
++ DBGPRINT(RT_DEBUG_ERROR, ("Key%dStr is Invalid key length! KeyLen = %ld!\n", idx+1, KeyLen));
++ return 0;
++ }
++ }
++ else
++ {//Hex type
++ if( (KeyLen == 10) || (KeyLen == 26))
++ {
++ pAd->SharedKey[i][idx].KeyLen = KeyLen / 2;
++ AtoH(keybuff, pAd->SharedKey[i][idx].Key, KeyLen / 2);
++ if (KeyLen == 10)
++ CipherAlg = CIPHER_WEP64;
++ else
++ CipherAlg = CIPHER_WEP128;
++ pAd->SharedKey[i][idx].CipherAlg = CipherAlg;
++
++ DBGPRINT(RT_DEBUG_TRACE, ("I/F(ra%d) Key%dStr=%s and type=%s\n", i, idx+1, keybuff, (KeyType == 0) ? "Hex":"Ascii"));
++ return 1;
++ }
++ else
++ {//Invalid key length
++ DBGPRINT(RT_DEBUG_ERROR, ("I/F(ra%d) Key%dStr is Invalid key length! KeyLen = %ld!\n", i, idx+1, KeyLen));
++ return 0;
++ }
++ }
++}
++static void rtmp_read_key_parms_from_file(IN PRTMP_ADAPTER pAd, char *tmpbuf, char *buffer)
++{
++ char tok_str[16];
++ PUCHAR macptr;
++ INT i = 0, idx;
++ ULONG KeyType[MAX_MBSSID_NUM];
++ ULONG KeyIdx;
++
++ NdisZeroMemory(KeyType, MAX_MBSSID_NUM);
++
++ //DefaultKeyID
++ if(RTMPGetKeyParameter("DefaultKeyID", tmpbuf, 25, buffer))
++ {
++
++#ifdef CONFIG_STA_SUPPORT
++ IF_DEV_CONFIG_OPMODE_ON_STA(pAd)
++ {
++ KeyIdx = simple_strtol(tmpbuf, 0, 10);
++ if((KeyIdx >= 1 ) && (KeyIdx <= 4))
++ pAd->StaCfg.DefaultKeyId = (UCHAR) (KeyIdx - 1);
++ else
++ pAd->StaCfg.DefaultKeyId = 0;
++
++ DBGPRINT(RT_DEBUG_TRACE, ("DefaultKeyID(0~3)=%d\n", pAd->StaCfg.DefaultKeyId));
++ }
++#endif // CONFIG_STA_SUPPORT //
++ }
++
++
++ for (idx = 0; idx < 4; idx++)
++ {
++ sprintf(tok_str, "Key%dType", idx + 1);
++ //Key1Type
++ if (RTMPGetKeyParameter(tok_str, tmpbuf, 128, buffer))
++ {
++ for (i = 0, macptr = rstrtok(tmpbuf,";"); macptr; macptr = rstrtok(NULL,";"), i++)
++ {
++ KeyType[i] = simple_strtol(macptr, 0, 10);
++ }
++
++#ifdef CONFIG_STA_SUPPORT
++ IF_DEV_CONFIG_OPMODE_ON_STA(pAd)
++ {
++ sprintf(tok_str, "Key%dStr", idx + 1);
++ if (RTMPGetCriticalParameter(tok_str, tmpbuf, 128, buffer))
++ {
++ rtmp_parse_key_buffer_from_file(pAd, tmpbuf, KeyType[BSS0], BSS0, idx);
++ }
++ }
++#endif // CONFIG_STA_SUPPORT //
++ }
++ }
++}
++
++
++#ifdef CONFIG_STA_SUPPORT
++static void rtmp_read_sta_wmm_parms_from_file(IN PRTMP_ADAPTER pAd, char *tmpbuf, char *buffer)
++{
++ PUCHAR macptr;
++ INT i=0;
++ BOOLEAN bWmmEnable = FALSE;
++
++ //WmmCapable
++ if(RTMPGetKeyParameter("WmmCapable", tmpbuf, 32, buffer))
++ {
++ if(simple_strtol(tmpbuf, 0, 10) != 0) //Enable
++ {
++ pAd->CommonCfg.bWmmCapable = TRUE;
++ bWmmEnable = TRUE;
++ }
++ else //Disable
++ {
++ pAd->CommonCfg.bWmmCapable = FALSE;
++ }
++
++ DBGPRINT(RT_DEBUG_TRACE, ("WmmCapable=%d\n", pAd->CommonCfg.bWmmCapable));
++ }
++
++#ifdef QOS_DLS_SUPPORT
++ //DLSCapable
++ if(RTMPGetKeyParameter("DLSCapable", tmpbuf, 32, buffer))
++ {
++ if(simple_strtol(tmpbuf, 0, 10) != 0) //Enable
++ {
++ pAd->CommonCfg.bDLSCapable = TRUE;
++ }
++ else //Disable
++ {
++ pAd->CommonCfg.bDLSCapable = FALSE;
++ }
++
++ DBGPRINT(RT_DEBUG_TRACE, ("bDLSCapable=%d\n", pAd->CommonCfg.bDLSCapable));
++ }
++#endif // QOS_DLS_SUPPORT //
++
++ //AckPolicy for AC_BK, AC_BE, AC_VI, AC_VO
++ if(RTMPGetKeyParameter("AckPolicy", tmpbuf, 32, buffer))
++ {
++ for (i = 0, macptr = rstrtok(tmpbuf,";"); macptr; macptr = rstrtok(NULL,";"), i++)
++ {
++ pAd->CommonCfg.AckPolicy[i] = (UCHAR)simple_strtol(macptr, 0, 10);
++
++ DBGPRINT(RT_DEBUG_TRACE, ("AckPolicy[%d]=%d\n", i, pAd->CommonCfg.AckPolicy[i]));
++ }
++ }
++
++ if (bWmmEnable)
++ {
++ //APSDCapable
++ if(RTMPGetKeyParameter("APSDCapable", tmpbuf, 10, buffer))
++ {
++ if(simple_strtol(tmpbuf, 0, 10) != 0) //Enable
++ pAd->CommonCfg.bAPSDCapable = TRUE;
++ else
++ pAd->CommonCfg.bAPSDCapable = FALSE;
++
++ DBGPRINT(RT_DEBUG_TRACE, ("APSDCapable=%d\n", pAd->CommonCfg.bAPSDCapable));
++ }
++
++ //APSDAC for AC_BE, AC_BK, AC_VI, AC_VO
++ if(RTMPGetKeyParameter("APSDAC", tmpbuf, 32, buffer))
++ {
++ BOOLEAN apsd_ac[4];
++
++ for (i = 0, macptr = rstrtok(tmpbuf,";"); macptr; macptr = rstrtok(NULL,";"), i++)
++ {
++ apsd_ac[i] = (BOOLEAN)simple_strtol(macptr, 0, 10);
++
++ DBGPRINT(RT_DEBUG_TRACE, ("APSDAC%d %d\n", i, apsd_ac[i]));
++ }
++
++ pAd->CommonCfg.bAPSDAC_BE = apsd_ac[0];
++ pAd->CommonCfg.bAPSDAC_BK = apsd_ac[1];
++ pAd->CommonCfg.bAPSDAC_VI = apsd_ac[2];
++ pAd->CommonCfg.bAPSDAC_VO = apsd_ac[3];
++ }
++ }
++
++}
++#endif // CONFIG_STA_SUPPORT //
++
++
++NDIS_STATUS RTMPReadParametersHook(
++ IN PRTMP_ADAPTER pAd)
++{
++ PUCHAR src = NULL;
++ struct file *srcf;
++ INT retval, orgfsuid, orgfsgid;
++ mm_segment_t orgfs;
++ CHAR *buffer;
++ CHAR *tmpbuf;
++ ULONG RtsThresh;
++ ULONG FragThresh;
++#ifdef CONFIG_STA_SUPPORT
++ UCHAR keyMaterial[40];
++#endif // CONFIG_STA_SUPPORT //
++
++
++ PUCHAR macptr;
++ INT i = 0;
++
++ buffer = kmalloc(MAX_INI_BUFFER_SIZE, MEM_ALLOC_FLAG);
++ if(buffer == NULL)
++ return NDIS_STATUS_FAILURE;
++
++ tmpbuf = kmalloc(MAX_PARAM_BUFFER_SIZE, MEM_ALLOC_FLAG);
++ if(tmpbuf == NULL)
++ {
++ kfree(buffer);
++ return NDIS_STATUS_FAILURE;
++ }
++
++#ifdef CONFIG_STA_SUPPORT
++ IF_DEV_CONFIG_OPMODE_ON_STA(pAd)
++ src = STA_PROFILE_PATH;
++#endif // CONFIG_STA_SUPPORT //
++#ifdef MULTIPLE_CARD_SUPPORT
++ src = pAd->MC_FileName;
++#endif // MULTIPLE_CARD_SUPPORT //
++
++ // Save uid and gid used for filesystem access.
++ // Set user and group to 0 (root)
++ orgfsuid = current->fsuid;
++ orgfsgid = current->fsgid;
++ current->fsuid=current->fsgid = 0;
++ orgfs = get_fs();
++ set_fs(KERNEL_DS);
++
++ if (src && *src)
++ {
++ srcf = filp_open(src, O_RDONLY, 0);
++ if (IS_ERR(srcf))
++ {
++ DBGPRINT(RT_DEBUG_ERROR, ("--> Error %ld opening %s\n", -PTR_ERR(srcf),src));
++ }
++ else
++ {
++ // The object must have a read method
++ if (srcf->f_op && srcf->f_op->read)
++ {
++ memset(buffer, 0x00, MAX_INI_BUFFER_SIZE);
++ retval=srcf->f_op->read(srcf, buffer, MAX_INI_BUFFER_SIZE, &srcf->f_pos);
++ if (retval < 0)
++ {
++ DBGPRINT(RT_DEBUG_TRACE, ("--> Read %s error %d\n", src, -retval));
++ }
++ else
++ {
++ // set file parameter to portcfg
++ //CountryRegion
++ if(RTMPGetKeyParameter("CountryRegion", tmpbuf, 25, buffer))
++ {
++ pAd->CommonCfg.CountryRegion = (UCHAR) simple_strtol(tmpbuf, 0, 10);
++ DBGPRINT(RT_DEBUG_TRACE, ("CountryRegion=%d\n", pAd->CommonCfg.CountryRegion));
++ }
++ //CountryRegionABand
++ if(RTMPGetKeyParameter("CountryRegionABand", tmpbuf, 25, buffer))
++ {
++ pAd->CommonCfg.CountryRegionForABand= (UCHAR) simple_strtol(tmpbuf, 0, 10);
++ DBGPRINT(RT_DEBUG_TRACE, ("CountryRegionABand=%d\n", pAd->CommonCfg.CountryRegionForABand));
++ }
++ //CountryCode
++ if(RTMPGetKeyParameter("CountryCode", tmpbuf, 25, buffer))
++ {
++ NdisMoveMemory(pAd->CommonCfg.CountryCode, tmpbuf , 2);
++#ifdef CONFIG_STA_SUPPORT
++#ifdef EXT_BUILD_CHANNEL_LIST
++ IF_DEV_CONFIG_OPMODE_ON_STA(pAd)
++ NdisMoveMemory(pAd->StaCfg.StaOriCountryCode, tmpbuf , 2);
++#endif // EXT_BUILD_CHANNEL_LIST //
++#endif // CONFIG_STA_SUPPORT //
++ if (strlen(pAd->CommonCfg.CountryCode) != 0)
++ {
++ pAd->CommonCfg.bCountryFlag = TRUE;
++ }
++ DBGPRINT(RT_DEBUG_TRACE, ("CountryCode=%s\n", pAd->CommonCfg.CountryCode));
++ }
++ //ChannelGeography
++ if(RTMPGetKeyParameter("ChannelGeography", tmpbuf, 25, buffer))
++ {
++ UCHAR Geography = (UCHAR) simple_strtol(tmpbuf, 0, 10);
++ if (Geography <= BOTH)
++ {
++ pAd->CommonCfg.Geography = Geography;
++ pAd->CommonCfg.CountryCode[2] =
++ (pAd->CommonCfg.Geography == BOTH) ? ' ' : ((pAd->CommonCfg.Geography == IDOR) ? 'I' : 'O');
++#ifdef CONFIG_STA_SUPPORT
++#ifdef EXT_BUILD_CHANNEL_LIST
++ IF_DEV_CONFIG_OPMODE_ON_STA(pAd)
++ pAd->StaCfg.StaOriGeography = pAd->CommonCfg.Geography;
++#endif // EXT_BUILD_CHANNEL_LIST //
++#endif // CONFIG_STA_SUPPORT //
++ DBGPRINT(RT_DEBUG_TRACE, ("ChannelGeography=%d\n", pAd->CommonCfg.Geography));
++ }
++ }
++ else
++ {
++ pAd->CommonCfg.Geography = BOTH;
++ pAd->CommonCfg.CountryCode[2] = ' ';
++ }
++
++
++#ifdef CONFIG_STA_SUPPORT
++ IF_DEV_CONFIG_OPMODE_ON_STA(pAd)
++ {
++ //SSID
++ if (RTMPGetCriticalParameter("SSID", tmpbuf, 256, buffer))
++ {
++ if (strlen(tmpbuf) <= 32)
++ {
++ pAd->CommonCfg.SsidLen = (UCHAR) strlen(tmpbuf);
++ NdisZeroMemory(pAd->CommonCfg.Ssid, NDIS_802_11_LENGTH_SSID);
++ NdisMoveMemory(pAd->CommonCfg.Ssid, tmpbuf, pAd->CommonCfg.SsidLen);
++ pAd->MlmeAux.AutoReconnectSsidLen = pAd->CommonCfg.SsidLen;
++ NdisZeroMemory(pAd->MlmeAux.AutoReconnectSsid, NDIS_802_11_LENGTH_SSID);
++ NdisMoveMemory(pAd->MlmeAux.AutoReconnectSsid, tmpbuf, pAd->MlmeAux.AutoReconnectSsidLen);
++ pAd->MlmeAux.SsidLen = pAd->CommonCfg.SsidLen;
++ NdisZeroMemory(pAd->MlmeAux.Ssid, NDIS_802_11_LENGTH_SSID);
++ NdisMoveMemory(pAd->MlmeAux.Ssid, tmpbuf, pAd->MlmeAux.SsidLen);
++ DBGPRINT(RT_DEBUG_TRACE, ("%s::(SSID=%s)\n", __FUNCTION__, tmpbuf));
++ }
++ }
++ }
++#endif // CONFIG_STA_SUPPORT //
++
++#ifdef CONFIG_STA_SUPPORT
++ IF_DEV_CONFIG_OPMODE_ON_STA(pAd)
++ {
++ //NetworkType
++ if (RTMPGetKeyParameter("NetworkType", tmpbuf, 25, buffer))
++ {
++ pAd->bConfigChanged = TRUE;
++ if (strcmp(tmpbuf, "Adhoc") == 0)
++ pAd->StaCfg.BssType = BSS_ADHOC;
++ else //Default Infrastructure mode
++ pAd->StaCfg.BssType = BSS_INFRA;
++ // Reset Ralink supplicant to not use, it will be set to start when UI set PMK key
++ pAd->StaCfg.WpaState = SS_NOTUSE;
++ DBGPRINT(RT_DEBUG_TRACE, ("%s::(NetworkType=%d)\n", __FUNCTION__, pAd->StaCfg.BssType));
++ }
++ }
++#endif // CONFIG_STA_SUPPORT //
++ //Channel
++ if(RTMPGetKeyParameter("Channel", tmpbuf, 10, buffer))
++ {
++ pAd->CommonCfg.Channel = (UCHAR) simple_strtol(tmpbuf, 0, 10);
++ DBGPRINT(RT_DEBUG_TRACE, ("Channel=%d\n", pAd->CommonCfg.Channel));
++ }
++ //WirelessMode
++ if(RTMPGetKeyParameter("WirelessMode", tmpbuf, 10, buffer))
++ {
++ int value = 0, maxPhyMode = PHY_11G;
++
++#ifdef DOT11_N_SUPPORT
++ maxPhyMode = PHY_11N_5G;
++#endif // DOT11_N_SUPPORT //
++
++ value = simple_strtol(tmpbuf, 0, 10);
++
++ if (value <= maxPhyMode)
++ {
++ pAd->CommonCfg.PhyMode = value;
++ }
++ DBGPRINT(RT_DEBUG_TRACE, ("PhyMode=%d\n", pAd->CommonCfg.PhyMode));
++ }
++ //BasicRate
++ if(RTMPGetKeyParameter("BasicRate", tmpbuf, 10, buffer))
++ {
++ pAd->CommonCfg.BasicRateBitmap = (ULONG) simple_strtol(tmpbuf, 0, 10);
++ DBGPRINT(RT_DEBUG_TRACE, ("BasicRate=%ld\n", pAd->CommonCfg.BasicRateBitmap));
++ }
++ //BeaconPeriod
++ if(RTMPGetKeyParameter("BeaconPeriod", tmpbuf, 10, buffer))
++ {
++ pAd->CommonCfg.BeaconPeriod = (USHORT) simple_strtol(tmpbuf, 0, 10);
++ DBGPRINT(RT_DEBUG_TRACE, ("BeaconPeriod=%d\n", pAd->CommonCfg.BeaconPeriod));
++ }
++ //TxPower
++ if(RTMPGetKeyParameter("TxPower", tmpbuf, 10, buffer))
++ {
++ pAd->CommonCfg.TxPowerPercentage = (ULONG) simple_strtol(tmpbuf, 0, 10);
++#ifdef CONFIG_STA_SUPPORT
++ IF_DEV_CONFIG_OPMODE_ON_STA(pAd)
++ pAd->CommonCfg.TxPowerDefault = pAd->CommonCfg.TxPowerPercentage;
++#endif // CONFIG_STA_SUPPORT //
++ DBGPRINT(RT_DEBUG_TRACE, ("TxPower=%ld\n", pAd->CommonCfg.TxPowerPercentage));
++ }
++ //BGProtection
++ if(RTMPGetKeyParameter("BGProtection", tmpbuf, 10, buffer))
++ {
++ switch (simple_strtol(tmpbuf, 0, 10))
++ {
++ case 1: //Always On
++ pAd->CommonCfg.UseBGProtection = 1;
++ break;
++ case 2: //Always OFF
++ pAd->CommonCfg.UseBGProtection = 2;
++ break;
++ case 0: //AUTO
++ default:
++ pAd->CommonCfg.UseBGProtection = 0;
++ break;
++ }
++ DBGPRINT(RT_DEBUG_TRACE, ("BGProtection=%ld\n", pAd->CommonCfg.UseBGProtection));
++ }
++ //OLBCDetection
++ if(RTMPGetKeyParameter("DisableOLBC", tmpbuf, 10, buffer))
++ {
++ switch (simple_strtol(tmpbuf, 0, 10))
++ {
++ case 1: //disable OLBC Detection
++ pAd->CommonCfg.DisableOLBCDetect = 1;
++ break;
++ case 0: //enable OLBC Detection
++ pAd->CommonCfg.DisableOLBCDetect = 0;
++ break;
++ default:
++ pAd->CommonCfg.DisableOLBCDetect= 0;
++ break;
++ }
++ DBGPRINT(RT_DEBUG_TRACE, ("OLBCDetection=%ld\n", pAd->CommonCfg.DisableOLBCDetect));
++ }
++ //TxPreamble
++ if(RTMPGetKeyParameter("TxPreamble", tmpbuf, 10, buffer))
++ {
++ switch (simple_strtol(tmpbuf, 0, 10))
++ {
++ case Rt802_11PreambleShort:
++ pAd->CommonCfg.TxPreamble = Rt802_11PreambleShort;
++ break;
++ case Rt802_11PreambleLong:
++ default:
++ pAd->CommonCfg.TxPreamble = Rt802_11PreambleLong;
++ break;
++ }
++ DBGPRINT(RT_DEBUG_TRACE, ("TxPreamble=%ld\n", pAd->CommonCfg.TxPreamble));
++ }
++ //RTSThreshold
++ if(RTMPGetKeyParameter("RTSThreshold", tmpbuf, 10, buffer))
++ {
++ RtsThresh = simple_strtol(tmpbuf, 0, 10);
++ if( (RtsThresh >= 1) && (RtsThresh <= MAX_RTS_THRESHOLD) )
++ pAd->CommonCfg.RtsThreshold = (USHORT)RtsThresh;
++ else
++ pAd->CommonCfg.RtsThreshold = MAX_RTS_THRESHOLD;
++
++ DBGPRINT(RT_DEBUG_TRACE, ("RTSThreshold=%d\n", pAd->CommonCfg.RtsThreshold));
++ }
++ //FragThreshold
++ if(RTMPGetKeyParameter("FragThreshold", tmpbuf, 10, buffer))
++ {
++ FragThresh = simple_strtol(tmpbuf, 0, 10);
++ pAd->CommonCfg.bUseZeroToDisableFragment = FALSE;
++
++ if (FragThresh > MAX_FRAG_THRESHOLD || FragThresh < MIN_FRAG_THRESHOLD)
++ { //illegal FragThresh so we set it to default
++ pAd->CommonCfg.FragmentThreshold = MAX_FRAG_THRESHOLD;
++ pAd->CommonCfg.bUseZeroToDisableFragment = TRUE;
++ }
++ else if (FragThresh % 2 == 1)
++ {
++ // The length of each fragment shall always be an even number of octets, except for the last fragment
++ // of an MSDU or MMPDU, which may be either an even or an odd number of octets.
++ pAd->CommonCfg.FragmentThreshold = (USHORT)(FragThresh - 1);
++ }
++ else
++ {
++ pAd->CommonCfg.FragmentThreshold = (USHORT)FragThresh;
++ }
++ //pAd->CommonCfg.AllowFragSize = (pAd->CommonCfg.FragmentThreshold) - LENGTH_802_11 - LENGTH_CRC;
++ DBGPRINT(RT_DEBUG_TRACE, ("FragThreshold=%d\n", pAd->CommonCfg.FragmentThreshold));
++ }
++ //TxBurst
++ if(RTMPGetKeyParameter("TxBurst", tmpbuf, 10, buffer))
++ {
++//#ifdef WIFI_TEST
++// pAd->CommonCfg.bEnableTxBurst = FALSE;
++//#else
++ if(simple_strtol(tmpbuf, 0, 10) != 0) //Enable
++ pAd->CommonCfg.bEnableTxBurst = TRUE;
++ else //Disable
++ pAd->CommonCfg.bEnableTxBurst = FALSE;
++//#endif
++ DBGPRINT(RT_DEBUG_TRACE, ("TxBurst=%d\n", pAd->CommonCfg.bEnableTxBurst));
++ }
++
++#ifdef AGGREGATION_SUPPORT
++ //PktAggregate
++ if(RTMPGetKeyParameter("PktAggregate", tmpbuf, 10, buffer))
++ {
++ if(simple_strtol(tmpbuf, 0, 10) != 0) //Enable
++ pAd->CommonCfg.bAggregationCapable = TRUE;
++ else //Disable
++ pAd->CommonCfg.bAggregationCapable = FALSE;
++#ifdef PIGGYBACK_SUPPORT
++ pAd->CommonCfg.bPiggyBackCapable = pAd->CommonCfg.bAggregationCapable;
++#endif // PIGGYBACK_SUPPORT //
++ DBGPRINT(RT_DEBUG_TRACE, ("PktAggregate=%d\n", pAd->CommonCfg.bAggregationCapable));
++ }
++#else
++ pAd->CommonCfg.bAggregationCapable = FALSE;
++ pAd->CommonCfg.bPiggyBackCapable = FALSE;
++#endif // AGGREGATION_SUPPORT //
++
++ // WmmCapable
++
++#ifdef CONFIG_STA_SUPPORT
++ IF_DEV_CONFIG_OPMODE_ON_STA(pAd)
++ rtmp_read_sta_wmm_parms_from_file(pAd, tmpbuf, buffer);
++#endif // CONFIG_STA_SUPPORT //
++
++ //ShortSlot
++ if(RTMPGetKeyParameter("ShortSlot", tmpbuf, 10, buffer))
++ {
++ if(simple_strtol(tmpbuf, 0, 10) != 0) //Enable
++ pAd->CommonCfg.bUseShortSlotTime = TRUE;
++ else //Disable
++ pAd->CommonCfg.bUseShortSlotTime = FALSE;
++
++ DBGPRINT(RT_DEBUG_TRACE, ("ShortSlot=%d\n", pAd->CommonCfg.bUseShortSlotTime));
++ }
++ //IEEE80211H
++ if(RTMPGetKeyParameter("IEEE80211H", tmpbuf, 10, buffer))
++ {
++ for (i = 0, macptr = rstrtok(tmpbuf,";"); macptr; macptr = rstrtok(NULL,";"), i++)
++ {
++ if(simple_strtol(macptr, 0, 10) != 0) //Enable
++ pAd->CommonCfg.bIEEE80211H = TRUE;
++ else //Disable
++ pAd->CommonCfg.bIEEE80211H = FALSE;
++
++ DBGPRINT(RT_DEBUG_TRACE, ("IEEE80211H=%d\n", pAd->CommonCfg.bIEEE80211H));
++ }
++ }
++ //CSPeriod
++ if(RTMPGetKeyParameter("CSPeriod", tmpbuf, 10, buffer))
++ {
++ if(simple_strtol(tmpbuf, 0, 10) != 0)
++ pAd->CommonCfg.RadarDetect.CSPeriod = simple_strtol(tmpbuf, 0, 10);
++ else
++ pAd->CommonCfg.RadarDetect.CSPeriod = 0;
++
++ DBGPRINT(RT_DEBUG_TRACE, ("CSPeriod=%d\n", pAd->CommonCfg.RadarDetect.CSPeriod));
++ }
++
++ //RDRegion
++ if(RTMPGetKeyParameter("RDRegion", tmpbuf, 128, buffer))
++ {
++ if ((strncmp(tmpbuf, "JAP_W53", 7) == 0) || (strncmp(tmpbuf, "jap_w53", 7) == 0))
++ {
++ pAd->CommonCfg.RadarDetect.RDDurRegion = JAP_W53;
++ pAd->CommonCfg.RadarDetect.DfsSessionTime = 15;
++ }
++ else if ((strncmp(tmpbuf, "JAP_W56", 7) == 0) || (strncmp(tmpbuf, "jap_w56", 7) == 0))
++ {
++ pAd->CommonCfg.RadarDetect.RDDurRegion = JAP_W56;
++ pAd->CommonCfg.RadarDetect.DfsSessionTime = 13;
++ }
++ else if ((strncmp(tmpbuf, "JAP", 3) == 0) || (strncmp(tmpbuf, "jap", 3) == 0))
++ {
++ pAd->CommonCfg.RadarDetect.RDDurRegion = JAP;
++ pAd->CommonCfg.RadarDetect.DfsSessionTime = 5;
++ }
++ else if ((strncmp(tmpbuf, "FCC", 3) == 0) || (strncmp(tmpbuf, "fcc", 3) == 0))
++ {
++ pAd->CommonCfg.RadarDetect.RDDurRegion = FCC;
++ pAd->CommonCfg.RadarDetect.DfsSessionTime = 5;
++ }
++ else if ((strncmp(tmpbuf, "CE", 2) == 0) || (strncmp(tmpbuf, "ce", 2) == 0))
++ {
++ pAd->CommonCfg.RadarDetect.RDDurRegion = CE;
++ pAd->CommonCfg.RadarDetect.DfsSessionTime = 13;
++ }
++ else
++ {
++ pAd->CommonCfg.RadarDetect.RDDurRegion = CE;
++ pAd->CommonCfg.RadarDetect.DfsSessionTime = 13;
++ }
++
++ DBGPRINT(RT_DEBUG_TRACE, ("RDRegion=%d\n", pAd->CommonCfg.RadarDetect.RDDurRegion));
++ }
++ else
++ {
++ pAd->CommonCfg.RadarDetect.RDDurRegion = CE;
++ pAd->CommonCfg.RadarDetect.DfsSessionTime = 13;
++ }
++
++ //WirelessEvent
++ if(RTMPGetKeyParameter("WirelessEvent", tmpbuf, 10, buffer))
++ {
++#if WIRELESS_EXT >= 15
++ if(simple_strtol(tmpbuf, 0, 10) != 0)
++ pAd->CommonCfg.bWirelessEvent = simple_strtol(tmpbuf, 0, 10);
++ else
++ pAd->CommonCfg.bWirelessEvent = 0; // disable
++#else
++ pAd->CommonCfg.bWirelessEvent = 0; // disable
++#endif
++ DBGPRINT(RT_DEBUG_TRACE, ("WirelessEvent=%d\n", pAd->CommonCfg.bWirelessEvent));
++ }
++ if(RTMPGetKeyParameter("WiFiTest", tmpbuf, 10, buffer))
++ {
++ if(simple_strtol(tmpbuf, 0, 10) != 0)
++ pAd->CommonCfg.bWiFiTest= simple_strtol(tmpbuf, 0, 10);
++ else
++ pAd->CommonCfg.bWiFiTest = 0; // disable
++
++ DBGPRINT(RT_DEBUG_TRACE, ("WiFiTest=%d\n", pAd->CommonCfg.bWiFiTest));
++ }
++ //AuthMode
++ if(RTMPGetKeyParameter("AuthMode", tmpbuf, 128, buffer))
++ {
++#ifdef CONFIG_STA_SUPPORT
++ IF_DEV_CONFIG_OPMODE_ON_STA(pAd)
++ {
++ if ((strcmp(tmpbuf, "WEPAUTO") == 0) || (strcmp(tmpbuf, "wepauto") == 0))
++ pAd->StaCfg.AuthMode = Ndis802_11AuthModeAutoSwitch;
++ else if ((strcmp(tmpbuf, "SHARED") == 0) || (strcmp(tmpbuf, "shared") == 0))
++ pAd->StaCfg.AuthMode = Ndis802_11AuthModeShared;
++ else if ((strcmp(tmpbuf, "WPAPSK") == 0) || (strcmp(tmpbuf, "wpapsk") == 0))
++ pAd->StaCfg.AuthMode = Ndis802_11AuthModeWPAPSK;
++ else if ((strcmp(tmpbuf, "WPANONE") == 0) || (strcmp(tmpbuf, "wpanone") == 0))
++ pAd->StaCfg.AuthMode = Ndis802_11AuthModeWPANone;
++ else if ((strcmp(tmpbuf, "WPA2PSK") == 0) || (strcmp(tmpbuf, "wpa2psk") == 0))
++ pAd->StaCfg.AuthMode = Ndis802_11AuthModeWPA2PSK;
++#ifdef WPA_SUPPLICANT_SUPPORT
++ else if ((strcmp(tmpbuf, "WPA") == 0) || (strcmp(tmpbuf, "wpa") == 0))
++ pAd->StaCfg.AuthMode = Ndis802_11AuthModeWPA;
++ else if ((strcmp(tmpbuf, "WPA2") == 0) || (strcmp(tmpbuf, "wpa2") == 0))
++ pAd->StaCfg.AuthMode = Ndis802_11AuthModeWPA2;
++#endif // WPA_SUPPLICANT_SUPPORT //
++ else
++ pAd->StaCfg.AuthMode = Ndis802_11AuthModeOpen;
++
++ pAd->StaCfg.PortSecured = WPA_802_1X_PORT_NOT_SECURED;
++
++ DBGPRINT(RT_DEBUG_TRACE, ("%s::(EncrypType=%d)\n", __FUNCTION__, pAd->StaCfg.WepStatus));
++ }
++#endif // CONFIG_STA_SUPPORT //
++ }
++ //EncrypType
++ if(RTMPGetKeyParameter("EncrypType", tmpbuf, 128, buffer))
++ {
++
++#ifdef CONFIG_STA_SUPPORT
++ IF_DEV_CONFIG_OPMODE_ON_STA(pAd)
++ {
++ if ((strcmp(tmpbuf, "WEP") == 0) || (strcmp(tmpbuf, "wep") == 0))
++ pAd->StaCfg.WepStatus = Ndis802_11WEPEnabled;
++ else if ((strcmp(tmpbuf, "TKIP") == 0) || (strcmp(tmpbuf, "tkip") == 0))
++ pAd->StaCfg.WepStatus = Ndis802_11Encryption2Enabled;
++ else if ((strcmp(tmpbuf, "AES") == 0) || (strcmp(tmpbuf, "aes") == 0))
++ pAd->StaCfg.WepStatus = Ndis802_11Encryption3Enabled;
++ else
++ pAd->StaCfg.WepStatus = Ndis802_11WEPDisabled;
++
++ // Update all wepstatus related
++ pAd->StaCfg.PairCipher = pAd->StaCfg.WepStatus;
++ pAd->StaCfg.GroupCipher = pAd->StaCfg.WepStatus;
++ pAd->StaCfg.OrigWepStatus = pAd->StaCfg.WepStatus;
++ pAd->StaCfg.bMixCipher = FALSE;
++
++ //RTMPMakeRSNIE(pAd, pAd->StaCfg.AuthMode, pAd->StaCfg.WepStatus, 0);
++ DBGPRINT(RT_DEBUG_TRACE, ("%s::(EncrypType=%d)\n", __FUNCTION__, pAd->StaCfg.WepStatus));
++ }
++#endif // CONFIG_STA_SUPPORT //
++ }
++
++
++
++#ifdef CONFIG_STA_SUPPORT
++ IF_DEV_CONFIG_OPMODE_ON_STA(pAd)
++ {
++ if(RTMPGetCriticalParameter("WPAPSK", tmpbuf, 512, buffer))
++ {
++ int err=0;
++
++ tmpbuf[strlen(tmpbuf)] = '\0'; // make STA can process .$^& for WPAPSK input
++
++ if ((pAd->StaCfg.AuthMode != Ndis802_11AuthModeWPAPSK) &&
++ (pAd->StaCfg.AuthMode != Ndis802_11AuthModeWPA2PSK) &&
++ (pAd->StaCfg.AuthMode != Ndis802_11AuthModeWPANone)
++ )
++ {
++ err = 1;
++ }
++ else if ((strlen(tmpbuf) >= 8) && (strlen(tmpbuf) < 64))
++ {
++ PasswordHash((char *)tmpbuf, pAd->CommonCfg.Ssid, pAd->CommonCfg.SsidLen, keyMaterial);
++ NdisMoveMemory(pAd->StaCfg.PMK, keyMaterial, 32);
++
++ }
++ else if (strlen(tmpbuf) == 64)
++ {
++ AtoH(tmpbuf, keyMaterial, 32);
++ NdisMoveMemory(pAd->StaCfg.PMK, keyMaterial, 32);
++ }
++ else
++ {
++ err = 1;
++ DBGPRINT(RT_DEBUG_ERROR, ("%s::(WPAPSK key-string required 8 ~ 64 characters!)\n", __FUNCTION__));
++ }
++
++ if (err == 0)
++ {
++ if ((pAd->StaCfg.AuthMode == Ndis802_11AuthModeWPAPSK) ||
++ (pAd->StaCfg.AuthMode == Ndis802_11AuthModeWPA2PSK))
++ {
++ // Start STA supplicant state machine
++ pAd->StaCfg.WpaState = SS_START;
++ }
++ else if (pAd->StaCfg.AuthMode == Ndis802_11AuthModeWPANone)
++ {
++ /*
++ NdisZeroMemory(&pAd->SharedKey[BSS0][0], sizeof(CIPHER_KEY));
++ pAd->SharedKey[BSS0][0].KeyLen = LEN_TKIP_EK;
++ NdisMoveMemory(pAd->SharedKey[BSS0][0].Key, pAd->StaCfg.PMK, LEN_TKIP_EK);
++ NdisMoveMemory(pAd->SharedKey[BSS0][0].RxMic, &pAd->StaCfg.PMK[16], LEN_TKIP_RXMICK);
++ NdisMoveMemory(pAd->SharedKey[BSS0][0].TxMic, &pAd->StaCfg.PMK[16], LEN_TKIP_TXMICK);
++
++ // Decide its ChiperAlg
++ if (pAd->StaCfg.PairCipher == Ndis802_11Encryption2Enabled)
++ pAd->SharedKey[BSS0][0].CipherAlg = CIPHER_TKIP;
++ else if (pAd->StaCfg.PairCipher == Ndis802_11Encryption3Enabled)
++ pAd->SharedKey[BSS0][0].CipherAlg = CIPHER_AES;
++ else
++ pAd->SharedKey[BSS0][0].CipherAlg = CIPHER_NONE;
++ */
++ pAd->StaCfg.WpaState = SS_NOTUSE;
++ }
++
++ DBGPRINT(RT_DEBUG_TRACE, ("%s::(WPAPSK=%s)\n", __FUNCTION__, tmpbuf));
++ }
++ }
++ }
++#endif // CONFIG_STA_SUPPORT //
++
++ //DefaultKeyID, KeyType, KeyStr
++ rtmp_read_key_parms_from_file(pAd, tmpbuf, buffer);
++
++
++ //HSCounter
++ /*if(RTMPGetKeyParameter("HSCounter", tmpbuf, 10, buffer))
++ {
++ switch (simple_strtol(tmpbuf, 0, 10))
++ {
++ case 1: //Enable
++ pAd->CommonCfg.bEnableHSCounter = TRUE;
++ break;
++ case 0: //Disable
++ default:
++ pAd->CommonCfg.bEnableHSCounter = FALSE;
++ break;
++ }
++ DBGPRINT(RT_DEBUG_TRACE, "HSCounter=%d\n", pAd->CommonCfg.bEnableHSCounter);
++ }*/
++
++#ifdef DOT11_N_SUPPORT
++ HTParametersHook(pAd, tmpbuf, buffer);
++#endif // DOT11_N_SUPPORT //
++
++
++#ifdef CARRIER_DETECTION_SUPPORT
++ //CarrierDetect
++ if(RTMPGetKeyParameter("CarrierDetect", tmpbuf, 128, buffer))
++ {
++ if ((strncmp(tmpbuf, "0", 1) == 0))
++ pAd->CommonCfg.CarrierDetect.Enable = FALSE;
++ else if ((strncmp(tmpbuf, "1", 1) == 0))
++ pAd->CommonCfg.CarrierDetect.Enable = TRUE;
++ else
++ pAd->CommonCfg.CarrierDetect.Enable = FALSE;
++
++ DBGPRINT(RT_DEBUG_TRACE, ("CarrierDetect.Enable=%d\n", pAd->CommonCfg.CarrierDetect.Enable));
++ }
++ else
++ pAd->CommonCfg.CarrierDetect.Enable = FALSE;
++#endif // CARRIER_DETECTION_SUPPORT //
++
++#ifdef CONFIG_STA_SUPPORT
++ IF_DEV_CONFIG_OPMODE_ON_STA(pAd)
++ {
++ //PSMode
++ if (RTMPGetKeyParameter("PSMode", tmpbuf, 10, buffer))
++ {
++ if (pAd->StaCfg.BssType == BSS_INFRA)
++ {
++ if ((strcmp(tmpbuf, "MAX_PSP") == 0) || (strcmp(tmpbuf, "max_psp") == 0))
++ {
++ // do NOT turn on PSM bit here, wait until MlmeCheckForPsmChange()
++ // to exclude certain situations.
++ // MlmeSetPsm(pAd, PWR_SAVE);
++ OPSTATUS_SET_FLAG(pAd, fOP_STATUS_RECEIVE_DTIM);
++ if (pAd->StaCfg.bWindowsACCAMEnable == FALSE)
++ pAd->StaCfg.WindowsPowerMode = Ndis802_11PowerModeMAX_PSP;
++ pAd->StaCfg.WindowsBatteryPowerMode = Ndis802_11PowerModeMAX_PSP;
++ pAd->StaCfg.DefaultListenCount = 5;
++ }
++ else if ((strcmp(tmpbuf, "Fast_PSP") == 0) || (strcmp(tmpbuf, "fast_psp") == 0)
++ || (strcmp(tmpbuf, "FAST_PSP") == 0))
++ {
++ // do NOT turn on PSM bit here, wait until MlmeCheckForPsmChange()
++ // to exclude certain situations.
++ // MlmeSetPsmBit(pAd, PWR_SAVE);
++ OPSTATUS_SET_FLAG(pAd, fOP_STATUS_RECEIVE_DTIM);
++ if (pAd->StaCfg.bWindowsACCAMEnable == FALSE)
++ pAd->StaCfg.WindowsPowerMode = Ndis802_11PowerModeFast_PSP;
++ pAd->StaCfg.WindowsBatteryPowerMode = Ndis802_11PowerModeFast_PSP;
++ pAd->StaCfg.DefaultListenCount = 3;
++ }
++ else if ((strcmp(tmpbuf, "Legacy_PSP") == 0) || (strcmp(tmpbuf, "legacy_psp") == 0)
++ || (strcmp(tmpbuf, "LEGACY_PSP") == 0))
++ {
++ // do NOT turn on PSM bit here, wait until MlmeCheckForPsmChange()
++ // to exclude certain situations.
++ // MlmeSetPsmBit(pAd, PWR_SAVE);
++ OPSTATUS_SET_FLAG(pAd, fOP_STATUS_RECEIVE_DTIM);
++ if (pAd->StaCfg.bWindowsACCAMEnable == FALSE)
++ pAd->StaCfg.WindowsPowerMode = Ndis802_11PowerModeLegacy_PSP;
++ pAd->StaCfg.WindowsBatteryPowerMode = Ndis802_11PowerModeLegacy_PSP;
++ pAd->StaCfg.DefaultListenCount = 3;
++ }
++ else
++ { //Default Ndis802_11PowerModeCAM
++ // clear PSM bit immediately
++ MlmeSetPsmBit(pAd, PWR_ACTIVE);
++ OPSTATUS_SET_FLAG(pAd, fOP_STATUS_RECEIVE_DTIM);
++ if (pAd->StaCfg.bWindowsACCAMEnable == FALSE)
++ pAd->StaCfg.WindowsPowerMode = Ndis802_11PowerModeCAM;
++ pAd->StaCfg.WindowsBatteryPowerMode = Ndis802_11PowerModeCAM;
++ }
++ DBGPRINT(RT_DEBUG_TRACE, ("PSMode=%ld\n", pAd->StaCfg.WindowsPowerMode));
++ }
++ }
++ // FastRoaming
++ if (RTMPGetKeyParameter("FastRoaming", tmpbuf, 32, buffer))
++ {
++ if (simple_strtol(tmpbuf, 0, 10) == 0)
++ pAd->StaCfg.bFastRoaming = FALSE;
++ else
++ pAd->StaCfg.bFastRoaming = TRUE;
++
++ DBGPRINT(RT_DEBUG_TRACE, ("FastRoaming=%d\n", pAd->StaCfg.bFastRoaming));
++ }
++ // RoamThreshold
++ if (RTMPGetKeyParameter("RoamThreshold", tmpbuf, 32, buffer))
++ {
++ long lInfo = simple_strtol(tmpbuf, 0, 10);
++
++ if (lInfo > 90 || lInfo < 60)
++ pAd->StaCfg.dBmToRoam = -70;
++ else
++ pAd->StaCfg.dBmToRoam = (CHAR)(-1)*lInfo;
++
++ DBGPRINT(RT_DEBUG_TRACE, ("RoamThreshold=%d dBm\n", pAd->StaCfg.dBmToRoam));
++ }
++
++ if(RTMPGetKeyParameter("TGnWifiTest", tmpbuf, 10, buffer))
++ {
++ if(simple_strtol(tmpbuf, 0, 10) == 0)
++ pAd->StaCfg.bTGnWifiTest = FALSE;
++ else
++ pAd->StaCfg.bTGnWifiTest = TRUE;
++ DBGPRINT(RT_DEBUG_TRACE, ("TGnWifiTest=%d\n", pAd->StaCfg.bTGnWifiTest));
++ }
++ }
++#endif // CONFIG_STA_SUPPORT //
++
++
++
++ }
++ }
++ else
++ {
++ DBGPRINT(RT_DEBUG_TRACE, ("--> %s does not have a write method\n", src));
++ }
++
++ retval=filp_close(srcf,NULL);
++
++ if (retval)
++ {
++ DBGPRINT(RT_DEBUG_TRACE, ("--> Error %d closing %s\n", -retval, src));
++ }
++ }
++ }
++
++ set_fs(orgfs);
++ current->fsuid = orgfsuid;
++ current->fsgid = orgfsgid;
++
++ kfree(buffer);
++ kfree(tmpbuf);
++
++ return (NDIS_STATUS_SUCCESS);
++}
++
++#ifdef DOT11_N_SUPPORT
++static void HTParametersHook(
++ IN PRTMP_ADAPTER pAd,
++ IN CHAR *pValueStr,
++ IN CHAR *pInput)
++{
++
++ INT Value;
++
++ if (RTMPGetKeyParameter("HT_PROTECT", pValueStr, 25, pInput))
++ {
++ Value = simple_strtol(pValueStr, 0, 10);
++ if (Value == 0)
++ {
++ pAd->CommonCfg.bHTProtect = FALSE;
++ }
++ else
++ {
++ pAd->CommonCfg.bHTProtect = TRUE;
++ }
++ DBGPRINT(RT_DEBUG_TRACE, ("HT: Protection = %s\n", (Value==0) ? "Disable" : "Enable"));
++ }
++
++ if (RTMPGetKeyParameter("HT_MIMOPSEnable", pValueStr, 25, pInput))
++ {
++ Value = simple_strtol(pValueStr, 0, 10);
++ if (Value == 0)
++ {
++ pAd->CommonCfg.bMIMOPSEnable = FALSE;
++ }
++ else
++ {
++ pAd->CommonCfg.bMIMOPSEnable = TRUE;
++ }
++ DBGPRINT(RT_DEBUG_TRACE, ("HT: MIMOPSEnable = %s\n", (Value==0) ? "Disable" : "Enable"));
++ }
++
++
++ if (RTMPGetKeyParameter("HT_MIMOPSMode", pValueStr, 25, pInput))
++ {
++ Value = simple_strtol(pValueStr, 0, 10);
++ if (Value > MMPS_ENABLE)
++ {
++ pAd->CommonCfg.BACapability.field.MMPSmode = MMPS_ENABLE;
++ }
++ else
++ {
++ //TODO: add mimo power saving mechanism
++ pAd->CommonCfg.BACapability.field.MMPSmode = MMPS_ENABLE;
++ //pAd->CommonCfg.BACapability.field.MMPSmode = Value;
++ }
++ DBGPRINT(RT_DEBUG_TRACE, ("HT: MIMOPS Mode = %d\n", Value));
++ }
++
++ if (RTMPGetKeyParameter("HT_BADecline", pValueStr, 25, pInput))
++ {
++ Value = simple_strtol(pValueStr, 0, 10);
++ if (Value == 0)
++ {
++ pAd->CommonCfg.bBADecline = FALSE;
++ }
++ else
++ {
++ pAd->CommonCfg.bBADecline = TRUE;
++ }
++ DBGPRINT(RT_DEBUG_TRACE, ("HT: BA Decline = %s\n", (Value==0) ? "Disable" : "Enable"));
++ }
++
++
++ if (RTMPGetKeyParameter("HT_DisableReordering", pValueStr, 25, pInput))
++ {
++ Value = simple_strtol(pValueStr, 0, 10);
++ if (Value == 0)
++ {
++ pAd->CommonCfg.bDisableReordering = FALSE;
++ }
++ else
++ {
++ pAd->CommonCfg.bDisableReordering = TRUE;
++ }
++ DBGPRINT(RT_DEBUG_TRACE, ("HT: DisableReordering = %s\n", (Value==0) ? "Disable" : "Enable"));
++ }
++
++ if (RTMPGetKeyParameter("HT_AutoBA", pValueStr, 25, pInput))
++ {
++ Value = simple_strtol(pValueStr, 0, 10);
++ if (Value == 0)
++ {
++ pAd->CommonCfg.BACapability.field.AutoBA = FALSE;
++ }
++ else
++ {
++ pAd->CommonCfg.BACapability.field.AutoBA = TRUE;
++ }
++ pAd->CommonCfg.REGBACapability.field.AutoBA = pAd->CommonCfg.BACapability.field.AutoBA;
++ DBGPRINT(RT_DEBUG_TRACE, ("HT: Auto BA = %s\n", (Value==0) ? "Disable" : "Enable"));
++ }
++
++ // Tx_+HTC frame
++ if (RTMPGetKeyParameter("HT_HTC", pValueStr, 25, pInput))
++ {
++ Value = simple_strtol(pValueStr, 0, 10);
++ if (Value == 0)
++ {
++ pAd->HTCEnable = FALSE;
++ }
++ else
++ {
++ pAd->HTCEnable = TRUE;
++ }
++ DBGPRINT(RT_DEBUG_TRACE, ("HT: Tx +HTC frame = %s\n", (Value==0) ? "Disable" : "Enable"));
++ }
++
++ // Enable HT Link Adaptation Control
++ if (RTMPGetKeyParameter("HT_LinkAdapt", pValueStr, 25, pInput))
++ {
++ Value = simple_strtol(pValueStr, 0, 10);
++ if (Value == 0)
++ {
++ pAd->bLinkAdapt = FALSE;
++ }
++ else
++ {
++ pAd->HTCEnable = TRUE;
++ pAd->bLinkAdapt = TRUE;
++ }
++ DBGPRINT(RT_DEBUG_TRACE, ("HT: Link Adaptation Control = %s\n", (Value==0) ? "Disable" : "Enable(+HTC)"));
++ }
++
++ // Reverse Direction Mechanism
++ if (RTMPGetKeyParameter("HT_RDG", pValueStr, 25, pInput))
++ {
++ Value = simple_strtol(pValueStr, 0, 10);
++ if (Value == 0)
++ {
++ pAd->CommonCfg.bRdg = FALSE;
++ }
++ else
++ {
++ pAd->HTCEnable = TRUE;
++ pAd->CommonCfg.bRdg = TRUE;
++ }
++ DBGPRINT(RT_DEBUG_TRACE, ("HT: RDG = %s\n", (Value==0) ? "Disable" : "Enable(+HTC)"));
++ }
++
++
++
++
++ // Tx A-MSUD ?
++ if (RTMPGetKeyParameter("HT_AMSDU", pValueStr, 25, pInput))
++ {
++ Value = simple_strtol(pValueStr, 0, 10);
++ if (Value == 0)
++ {
++ pAd->CommonCfg.BACapability.field.AmsduEnable = FALSE;
++ }
++ else
++ {
++ pAd->CommonCfg.BACapability.field.AmsduEnable = TRUE;
++ }
++ DBGPRINT(RT_DEBUG_TRACE, ("HT: Tx A-MSDU = %s\n", (Value==0) ? "Disable" : "Enable"));
++ }
++
++ // MPDU Density
++ if (RTMPGetKeyParameter("HT_MpduDensity", pValueStr, 25, pInput))
++ {
++ Value = simple_strtol(pValueStr, 0, 10);
++ if (Value <=7 && Value >= 0)
++ {
++ pAd->CommonCfg.BACapability.field.MpduDensity = Value;
++ DBGPRINT(RT_DEBUG_TRACE, ("HT: MPDU Density = %d\n", Value));
++ }
++ else
++ {
++ pAd->CommonCfg.BACapability.field.MpduDensity = 4;
++ DBGPRINT(RT_DEBUG_TRACE, ("HT: MPDU Density = %d (Default)\n", 4));
++ }
++ }
++
++ // Max Rx BA Window Size
++ if (RTMPGetKeyParameter("HT_BAWinSize", pValueStr, 25, pInput))
++ {
++ Value = simple_strtol(pValueStr, 0, 10);
++
++ if (Value >=1 && Value <= 64)
++ {
++ pAd->CommonCfg.REGBACapability.field.RxBAWinLimit = Value;
++ pAd->CommonCfg.BACapability.field.RxBAWinLimit = Value;
++ DBGPRINT(RT_DEBUG_TRACE, ("HT: BA Windw Size = %d\n", Value));
++ }
++ else
++ {
++ pAd->CommonCfg.REGBACapability.field.RxBAWinLimit = 64;
++ pAd->CommonCfg.BACapability.field.RxBAWinLimit = 64;
++ DBGPRINT(RT_DEBUG_TRACE, ("HT: BA Windw Size = 64 (Defualt)\n"));
++ }
++
++ }
++
++ // Guard Interval
++ if (RTMPGetKeyParameter("HT_GI", pValueStr, 25, pInput))
++ {
++ Value = simple_strtol(pValueStr, 0, 10);
++
++ if (Value == GI_400)
++ {
++ pAd->CommonCfg.RegTransmitSetting.field.ShortGI = GI_400;
++ }
++ else
++ {
++ pAd->CommonCfg.RegTransmitSetting.field.ShortGI = GI_800;
++ }
++
++ DBGPRINT(RT_DEBUG_TRACE, ("HT: Guard Interval = %s\n", (Value==GI_400) ? "400" : "800" ));
++ }
++
++ // HT Operation Mode : Mixed Mode , Green Field
++ if (RTMPGetKeyParameter("HT_OpMode", pValueStr, 25, pInput))
++ {
++ Value = simple_strtol(pValueStr, 0, 10);
++
++ if (Value == HTMODE_GF)
++ {
++
++ pAd->CommonCfg.RegTransmitSetting.field.HTMODE = HTMODE_GF;
++ }
++ else
++ {
++ pAd->CommonCfg.RegTransmitSetting.field.HTMODE = HTMODE_MM;
++ }
++
++ DBGPRINT(RT_DEBUG_TRACE, ("HT: Operate Mode = %s\n", (Value==HTMODE_GF) ? "Green Field" : "Mixed Mode" ));
++ }
++
++ // Fixed Tx mode : CCK, OFDM
++ if (RTMPGetKeyParameter("FixedTxMode", pValueStr, 25, pInput))
++ {
++ UCHAR fix_tx_mode;
++
++#ifdef CONFIG_STA_SUPPORT
++ IF_DEV_CONFIG_OPMODE_ON_STA(pAd)
++ {
++ fix_tx_mode = FIXED_TXMODE_HT;
++
++ if (strcmp(pValueStr, "OFDM") == 0 || strcmp(pValueStr, "ofdm") == 0)
++ {
++ fix_tx_mode = FIXED_TXMODE_OFDM;
++ }
++ else if (strcmp(pValueStr, "CCK") == 0 || strcmp(pValueStr, "cck") == 0)
++ {
++ fix_tx_mode = FIXED_TXMODE_CCK;
++ }
++ else if (strcmp(pValueStr, "HT") == 0 || strcmp(pValueStr, "ht") == 0)
++ {
++ fix_tx_mode = FIXED_TXMODE_HT;
++ }
++ else
++ {
++ Value = simple_strtol(pValueStr, 0, 10);
++ // 1 : CCK
++ // 2 : OFDM
++ // otherwise : HT
++ if (Value == FIXED_TXMODE_CCK || Value == FIXED_TXMODE_OFDM)
++ fix_tx_mode = Value;
++ else
++ fix_tx_mode = FIXED_TXMODE_HT;
++ }
++
++ pAd->StaCfg.DesiredTransmitSetting.field.FixedTxMode = fix_tx_mode;
++ DBGPRINT(RT_DEBUG_TRACE, ("Fixed Tx Mode = %d\n", fix_tx_mode));
++
++ }
++#endif // CONFIG_STA_SUPPORT //
++ }
++
++
++ // Channel Width
++ if (RTMPGetKeyParameter("HT_BW", pValueStr, 25, pInput))
++ {
++ Value = simple_strtol(pValueStr, 0, 10);
++
++ if (Value == BW_40)
++ {
++ pAd->CommonCfg.RegTransmitSetting.field.BW = BW_40;
++ }
++ else
++ {
++ pAd->CommonCfg.RegTransmitSetting.field.BW = BW_20;
++ }
++
++#ifdef MCAST_RATE_SPECIFIC
++ pAd->CommonCfg.MCastPhyMode.field.BW = pAd->CommonCfg.RegTransmitSetting.field.BW;
++#endif // MCAST_RATE_SPECIFIC //
++
++ DBGPRINT(RT_DEBUG_TRACE, ("HT: Channel Width = %s\n", (Value==BW_40) ? "40 MHz" : "20 MHz" ));
++ }
++
++ if (RTMPGetKeyParameter("HT_EXTCHA", pValueStr, 25, pInput))
++ {
++ Value = simple_strtol(pValueStr, 0, 10);
++
++ if (Value == 0)
++ {
++
++ pAd->CommonCfg.RegTransmitSetting.field.EXTCHA = EXTCHA_BELOW;
++ }
++ else
++ {
++ pAd->CommonCfg.RegTransmitSetting.field.EXTCHA = EXTCHA_ABOVE;
++ }
++
++ DBGPRINT(RT_DEBUG_TRACE, ("HT: Ext Channel = %s\n", (Value==0) ? "BELOW" : "ABOVE" ));
++ }
++
++ // MSC
++ if (RTMPGetKeyParameter("HT_MCS", pValueStr, 50, pInput))
++ {
++
++#ifdef CONFIG_STA_SUPPORT
++ IF_DEV_CONFIG_OPMODE_ON_STA(pAd)
++ {
++ Value = simple_strtol(pValueStr, 0, 10);
++
++// if ((Value >= 0 && Value <= 15) || (Value == 32))
++ if ((Value >= 0 && Value <= 23) || (Value == 32)) // 3*3
++ {
++ pAd->StaCfg.DesiredTransmitSetting.field.MCS = Value;
++ pAd->StaCfg.bAutoTxRateSwitch = FALSE;
++ DBGPRINT(RT_DEBUG_TRACE, ("HT: MCS = %d\n", pAd->StaCfg.DesiredTransmitSetting.field.MCS));
++ }
++ else
++ {
++ pAd->StaCfg.DesiredTransmitSetting.field.MCS = MCS_AUTO;
++ pAd->StaCfg.bAutoTxRateSwitch = TRUE;
++ DBGPRINT(RT_DEBUG_TRACE, ("HT: MCS = AUTO\n"));
++ }
++ }
++#endif // CONFIG_STA_SUPPORT //
++ }
++
++ // STBC
++ if (RTMPGetKeyParameter("HT_STBC", pValueStr, 25, pInput))
++ {
++ Value = simple_strtol(pValueStr, 0, 10);
++ if (Value == STBC_USE)
++ {
++ pAd->CommonCfg.RegTransmitSetting.field.STBC = STBC_USE;
++ }
++ else
++ {
++ pAd->CommonCfg.RegTransmitSetting.field.STBC = STBC_NONE;
++ }
++ DBGPRINT(RT_DEBUG_TRACE, ("HT: STBC = %d\n", pAd->CommonCfg.RegTransmitSetting.field.STBC));
++ }
++
++ // 40_Mhz_Intolerant
++ if (RTMPGetKeyParameter("HT_40MHZ_INTOLERANT", pValueStr, 25, pInput))
++ {
++ Value = simple_strtol(pValueStr, 0, 10);
++ if (Value == 0)
++ {
++ pAd->CommonCfg.bForty_Mhz_Intolerant = FALSE;
++ }
++ else
++ {
++ pAd->CommonCfg.bForty_Mhz_Intolerant = TRUE;
++ }
++ DBGPRINT(RT_DEBUG_TRACE, ("HT: 40MHZ INTOLERANT = %d\n", pAd->CommonCfg.bForty_Mhz_Intolerant));
++ }
++ //HT_TxStream
++ if(RTMPGetKeyParameter("HT_TxStream", pValueStr, 10, pInput))
++ {
++ switch (simple_strtol(pValueStr, 0, 10))
++ {
++ case 1:
++ pAd->CommonCfg.TxStream = 1;
++ break;
++ case 2:
++ pAd->CommonCfg.TxStream = 2;
++ break;
++ case 3: // 3*3
++ default:
++ pAd->CommonCfg.TxStream = 3;
++
++ if (pAd->MACVersion < RALINK_2883_VERSION)
++ pAd->CommonCfg.TxStream = 2; // only 2 tx streams for RT2860 series
++ break;
++ }
++ DBGPRINT(RT_DEBUG_TRACE, ("HT: Tx Stream = %d\n", pAd->CommonCfg.TxStream));
++ }
++ //HT_RxStream
++ if(RTMPGetKeyParameter("HT_RxStream", pValueStr, 10, pInput))
++ {
++ switch (simple_strtol(pValueStr, 0, 10))
++ {
++ case 1:
++ pAd->CommonCfg.RxStream = 1;
++ break;
++ case 2:
++ pAd->CommonCfg.RxStream = 2;
++ break;
++ case 3:
++ default:
++ pAd->CommonCfg.RxStream = 3;
++
++ if (pAd->MACVersion < RALINK_2883_VERSION)
++ pAd->CommonCfg.RxStream = 2; // only 2 rx streams for RT2860 series
++ break;
++ }
++ DBGPRINT(RT_DEBUG_TRACE, ("HT: Rx Stream = %d\n", pAd->CommonCfg.RxStream));
++ }
++
++}
++#endif // DOT11_N_SUPPORT //
++
+--- /dev/null
++++ b/drivers/staging/rt2870/spectrum_def.h
+@@ -0,0 +1,95 @@
++/*
++ *************************************************************************
++ * Ralink Tech Inc.
++ * 5F., No.36, Taiyuan St., Jhubei City,
++ * Hsinchu County 302,
++ * Taiwan, R.O.C.
++ *
++ * (c) Copyright 2002-2007, Ralink Technology, Inc.
++ *
++ * This program is free software; you can redistribute it and/or modify *
++ * it under the terms of the GNU General Public License as published by *
++ * the Free Software Foundation; either version 2 of the License, or *
++ * (at your option) any later version. *
++ * *
++ * This program is distributed in the hope that it will be useful, *
++ * but WITHOUT ANY WARRANTY; without even the implied warranty of *
++ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the *
++ * GNU General Public License for more details. *
++ * *
++ * You should have received a copy of the GNU General Public License *
++ * along with this program; if not, write to the *
++ * Free Software Foundation, Inc., *
++ * 59 Temple Place - Suite 330, Boston, MA 02111-1307, USA. *
++ * *
++ *************************************************************************
++
++ Module Name:
++ spectrum_def.h
++
++ Abstract:
++ Handle association related requests either from WSTA or from local MLME
++
++ Revision History:
++ Who When What
++ --------- ---------- ----------------------------------------------
++ Fonchi Wu 2008 created for 802.11h
++ */
++
++#ifndef __SPECTRUM_DEF_H__
++#define __SPECTRUM_DEF_H__
++
++#define MAX_MEASURE_REQ_TAB_SIZE 3
++#define MAX_HASH_MEASURE_REQ_TAB_SIZE MAX_MEASURE_REQ_TAB_SIZE
++
++#define MAX_TPC_REQ_TAB_SIZE 3
++#define MAX_HASH_TPC_REQ_TAB_SIZE MAX_TPC_REQ_TAB_SIZE
++
++#define MIN_RCV_PWR 100 /* Negative value ((dBm) */
++
++#define RM_TPC_REQ 0
++#define RM_MEASURE_REQ 1
++
++#define RM_BASIC 0
++#define RM_CCA 1
++#define RM_RPI_HISTOGRAM 2
++
++#define TPC_REQ_AGE_OUT 500 /* ms */
++#define MQ_REQ_AGE_OUT 500 /* ms */
++
++#define TPC_DIALOGTOKEN_HASH_INDEX(_DialogToken) ((_DialogToken) % MAX_HASH_TPC_REQ_TAB_SIZE)
++#define MQ_DIALOGTOKEN_HASH_INDEX(_DialogToken) ((_DialogToken) % MAX_MEASURE_REQ_TAB_SIZE)
++
++typedef struct _MEASURE_REQ_ENTRY
++{
++ struct _MEASURE_REQ_ENTRY *pNext;
++ ULONG lastTime;
++ BOOLEAN Valid;
++ UINT8 DialogToken;
++ UINT8 MeasureDialogToken[3]; // 0:basic measure, 1: CCA measure, 2: RPI_Histogram measure.
++} MEASURE_REQ_ENTRY, *PMEASURE_REQ_ENTRY;
++
++typedef struct _MEASURE_REQ_TAB
++{
++ UCHAR Size;
++ PMEASURE_REQ_ENTRY Hash[MAX_HASH_MEASURE_REQ_TAB_SIZE];
++ MEASURE_REQ_ENTRY Content[MAX_MEASURE_REQ_TAB_SIZE];
++} MEASURE_REQ_TAB, *PMEASURE_REQ_TAB;
++
++typedef struct _TPC_REQ_ENTRY
++{
++ struct _TPC_REQ_ENTRY *pNext;
++ ULONG lastTime;
++ BOOLEAN Valid;
++ UINT8 DialogToken;
++} TPC_REQ_ENTRY, *PTPC_REQ_ENTRY;
++
++typedef struct _TPC_REQ_TAB
++{
++ UCHAR Size;
++ PTPC_REQ_ENTRY Hash[MAX_HASH_TPC_REQ_TAB_SIZE];
++ TPC_REQ_ENTRY Content[MAX_TPC_REQ_TAB_SIZE];
++} TPC_REQ_TAB, *PTPC_REQ_TAB;
++
++#endif // __SPECTRUM_DEF_H__ //
++
+--- /dev/null
++++ b/drivers/staging/rt2870/spectrum.h
+@@ -0,0 +1,322 @@
++/*
++ *************************************************************************
++ * Ralink Tech Inc.
++ * 5F., No.36, Taiyuan St., Jhubei City,
++ * Hsinchu County 302,
++ * Taiwan, R.O.C.
++ *
++ * (c) Copyright 2002-2007, Ralink Technology, Inc.
++ *
++ * This program is free software; you can redistribute it and/or modify *
++ * it under the terms of the GNU General Public License as published by *
++ * the Free Software Foundation; either version 2 of the License, or *
++ * (at your option) any later version. *
++ * *
++ * This program is distributed in the hope that it will be useful, *
++ * but WITHOUT ANY WARRANTY; without even the implied warranty of *
++ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the *
++ * GNU General Public License for more details. *
++ * *
++ * You should have received a copy of the GNU General Public License *
++ * along with this program; if not, write to the *
++ * Free Software Foundation, Inc., *
++ * 59 Temple Place - Suite 330, Boston, MA 02111-1307, USA. *
++ * *
++ *************************************************************************
++ */
++
++#ifndef __SPECTRUM_H__
++#define __SPECTRUM_H__
++
++#include "rtmp_type.h"
++#include "spectrum_def.h"
++
++typedef struct PACKED _TPC_REPORT_INFO
++{
++ UINT8 TxPwr;
++ UINT8 LinkMargin;
++} TPC_REPORT_INFO, *PTPC_REPORT_INFO;
++
++typedef struct PACKED _CH_SW_ANN_INFO
++{
++ UINT8 ChSwMode;
++ UINT8 Channel;
++ UINT8 ChSwCnt;
++} CH_SW_ANN_INFO, *PCH_SW_ANN_INFO;
++
++typedef union PACKED _MEASURE_REQ_MODE
++{
++#ifdef RT_BIG_ENDIAN
++ struct PACKED
++ {
++ UINT8 Rev1:4;
++ UINT8 Report:1;
++ UINT8 Request:1;
++ UINT8 Enable:1;
++ UINT8 Rev0:1;
++ } field;
++#else
++ struct PACKED
++ {
++ UINT8 Rev0:1;
++ UINT8 Enable:1;
++ UINT8 Request:1;
++ UINT8 Report:1;
++ UINT8 Rev1:4;
++ } field;
++#endif // RT_BIG_ENDIAN //
++ UINT8 word;
++} MEASURE_REQ_MODE, *PMEASURE_REQ_MODE;
++
++typedef struct PACKED _MEASURE_REQ
++{
++ UINT8 ChNum;
++ UINT64 MeasureStartTime;
++ UINT16 MeasureDuration;
++} MEASURE_REQ, *PMEASURE_REQ;
++
++typedef struct PACKED _MEASURE_REQ_INFO
++{
++ UINT8 Token;
++ MEASURE_REQ_MODE ReqMode;
++ UINT8 ReqType;
++ MEASURE_REQ MeasureReq;
++} MEASURE_REQ_INFO, *PMEASURE_REQ_INFO;
++
++typedef union PACKED _MEASURE_BASIC_REPORT_MAP
++{
++#ifdef RT_BIG_ENDIAN
++ struct PACKED
++ {
++ UINT8 Rev:3;
++ UINT8 Unmeasure:1;
++ UINT8 Radar:1;
++ UINT8 UnidentifiedSignal:1;
++ UINT8 OfdmPreamble:1;
++ UINT8 BSS:1;
++ } field;
++#else
++ struct PACKED
++ {
++ UINT8 BSS:1;
++ UINT8 OfdmPreamble:1;
++ UINT8 UnidentifiedSignal:1;
++ UINT8 Radar:1;
++ UINT8 Unmeasure:1;
++ UINT8 Rev:3;
++ } field;
++#endif // RT_BIG_ENDIAN //
++ UINT8 word;
++} MEASURE_BASIC_REPORT_MAP, *PMEASURE_BASIC_REPORT_MAP;
++
++typedef struct PACKED _MEASURE_BASIC_REPORT
++{
++ UINT8 ChNum;
++ UINT64 MeasureStartTime;
++ UINT16 MeasureDuration;
++ MEASURE_BASIC_REPORT_MAP Map;
++} MEASURE_BASIC_REPORT, *PMEASURE_BASIC_REPORT;
++
++typedef struct PACKED _MEASURE_CCA_REPORT
++{
++ UINT8 ChNum;
++ UINT64 MeasureStartTime;
++ UINT16 MeasureDuration;
++ UINT8 CCA_Busy_Fraction;
++} MEASURE_CCA_REPORT, *PMEASURE_CCA_REPORT;
++
++typedef struct PACKED _MEASURE_RPI_REPORT
++{
++ UINT8 ChNum;
++ UINT64 MeasureStartTime;
++ UINT16 MeasureDuration;
++ UINT8 RPI_Density[8];
++} MEASURE_RPI_REPORT, *PMEASURE_RPI_REPORT;
++
++typedef union PACKED _MEASURE_REPORT_MODE
++{
++ struct PACKED
++ {
++#ifdef RT_BIG_ENDIAN
++ UINT8 Rev:5;
++ UINT8 Refused:1;
++ UINT8 Incapable:1;
++ UINT8 Late:1;
++#else
++ UINT8 Late:1;
++ UINT8 Incapable:1;
++ UINT8 Refused:1;
++ UINT8 Rev:5;
++#endif // RT_BIG_ENDIAN //
++ } field;
++ UINT8 word;
++} MEASURE_REPORT_MODE, *PMEASURE_REPORT_MODE;
++
++typedef struct PACKED _MEASURE_REPORT_INFO
++{
++ UINT8 Token;
++ MEASURE_REPORT_MODE ReportMode;
++ UINT8 ReportType;
++ UINT8 Octect[0];
++} MEASURE_REPORT_INFO, *PMEASURE_REPORT_INFO;
++
++typedef struct PACKED _QUIET_INFO
++{
++ UINT8 QuietCnt;
++ UINT8 QuietPeriod;
++ UINT8 QuietDuration;
++ UINT8 QuietOffset;
++} QUIET_INFO, *PQUIET_INFO;
++
++/*
++ ==========================================================================
++ Description:
++ Prepare Measurement request action frame and enqueue it into
++ management queue waiting for transmition.
++
++ Parametrs:
++ 1. the destination mac address of the frame.
++
++ Return : None.
++ ==========================================================================
++ */
++VOID EnqueueMeasurementReq(
++ IN PRTMP_ADAPTER pAd,
++ IN PUCHAR pDA,
++ IN UINT8 MeasureToken,
++ IN UINT8 MeasureReqMode,
++ IN UINT8 MeasureReqType,
++ IN UINT8 MeasureCh,
++ IN UINT16 MeasureDuration);
++
++/*
++ ==========================================================================
++ Description:
++ Prepare Measurement report action frame and enqueue it into
++ management queue waiting for transmition.
++
++ Parametrs:
++ 1. the destination mac address of the frame.
++
++ Return : None.
++ ==========================================================================
++ */
++VOID EnqueueMeasurementRep(
++ IN PRTMP_ADAPTER pAd,
++ IN PUCHAR pDA,
++ IN UINT8 DialogToken,
++ IN UINT8 MeasureToken,
++ IN UINT8 MeasureReqMode,
++ IN UINT8 MeasureReqType,
++ IN UINT8 ReportInfoLen,
++ IN PUINT8 pReportInfo);
++
++/*
++ ==========================================================================
++ Description:
++ Prepare TPC Request action frame and enqueue it into
++ management queue waiting for transmition.
++
++ Parametrs:
++ 1. the destination mac address of the frame.
++
++ Return : None.
++ ==========================================================================
++ */
++VOID EnqueueTPCReq(
++ IN PRTMP_ADAPTER pAd,
++ IN PUCHAR pDA,
++ IN UCHAR DialogToken);
++
++/*
++ ==========================================================================
++ Description:
++ Prepare TPC Report action frame and enqueue it into
++ management queue waiting for transmition.
++
++ Parametrs:
++ 1. the destination mac address of the frame.
++
++ Return : None.
++ ==========================================================================
++ */
++VOID EnqueueTPCRep(
++ IN PRTMP_ADAPTER pAd,
++ IN PUCHAR pDA,
++ IN UINT8 DialogToken,
++ IN UINT8 TxPwr,
++ IN UINT8 LinkMargin);
++
++/*
++ ==========================================================================
++ Description:
++ Prepare Channel Switch Announcement action frame and enqueue it into
++ management queue waiting for transmition.
++
++ Parametrs:
++ 1. the destination mac address of the frame.
++ 2. Channel switch announcement mode.
++ 2. a New selected channel.
++
++ Return : None.
++ ==========================================================================
++ */
++VOID EnqueueChSwAnn(
++ IN PRTMP_ADAPTER pAd,
++ IN PUCHAR pDA,
++ IN UINT8 ChSwMode,
++ IN UINT8 NewCh);
++
++/*
++ ==========================================================================
++ Description:
++ Spectrun action frames Handler such as channel switch annoucement,
++ measurement report, measurement request actions frames.
++
++ Parametrs:
++ Elme - MLME message containing the received frame
++
++ Return : None.
++ ==========================================================================
++ */
++VOID PeerSpectrumAction(
++ IN PRTMP_ADAPTER pAd,
++ IN MLME_QUEUE_ELEM *Elem);
++
++/*
++ ==========================================================================
++ Description:
++
++ Parametrs:
++
++ Return : None.
++ ==========================================================================
++ */
++INT Set_MeasureReq_Proc(
++ IN PRTMP_ADAPTER pAd,
++ IN PUCHAR arg);
++
++INT Set_TpcReq_Proc(
++ IN PRTMP_ADAPTER pAd,
++ IN PUCHAR arg);
++
++VOID MeasureReqTabInit(
++ IN PRTMP_ADAPTER pAd);
++
++VOID MeasureReqTabExit(
++ IN PRTMP_ADAPTER pAd);
++
++VOID TpcReqTabInit(
++ IN PRTMP_ADAPTER pAd);
++
++VOID TpcReqTabExit(
++ IN PRTMP_ADAPTER pAd);
++
++VOID NotifyChSwAnnToPeerAPs(
++ IN PRTMP_ADAPTER pAd,
++ IN PUCHAR pRA,
++ IN PUCHAR pTA,
++ IN UINT8 ChSwMode,
++ IN UINT8 Channel);
++#endif // __SPECTRUM_H__ //
++
+--- /dev/null
++++ b/drivers/staging/rt2870/sta/aironet.c
+@@ -0,0 +1,1312 @@
++/*
++ *************************************************************************
++ * Ralink Tech Inc.
++ * 5F., No.36, Taiyuan St., Jhubei City,
++ * Hsinchu County 302,
++ * Taiwan, R.O.C.
++ *
++ * (c) Copyright 2002-2007, Ralink Technology, Inc.
++ *
++ * This program is free software; you can redistribute it and/or modify *
++ * it under the terms of the GNU General Public License as published by *
++ * the Free Software Foundation; either version 2 of the License, or *
++ * (at your option) any later version. *
++ * *
++ * This program is distributed in the hope that it will be useful, *
++ * but WITHOUT ANY WARRANTY; without even the implied warranty of *
++ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the *
++ * GNU General Public License for more details. *
++ * *
++ * You should have received a copy of the GNU General Public License *
++ * along with this program; if not, write to the *
++ * Free Software Foundation, Inc., *
++ * 59 Temple Place - Suite 330, Boston, MA 02111-1307, USA. *
++ * *
++ *************************************************************************
++
++ Module Name:
++ aironet.c
++
++ Abstract:
++
++ Revision History:
++ Who When What
++ -------- ---------- ----------------------------------------------
++ Paul Lin 04-06-15 Initial
++*/
++#include "../rt_config.h"
++
++/*
++ ==========================================================================
++ Description:
++ association state machine init, including state transition and timer init
++ Parameters:
++ S - pointer to the association state machine
++ ==========================================================================
++ */
++VOID AironetStateMachineInit(
++ IN PRTMP_ADAPTER pAd,
++ IN STATE_MACHINE *S,
++ OUT STATE_MACHINE_FUNC Trans[])
++{
++ StateMachineInit(S, Trans, MAX_AIRONET_STATE, MAX_AIRONET_MSG, (STATE_MACHINE_FUNC)Drop, AIRONET_IDLE, AIRONET_MACHINE_BASE);
++ StateMachineSetAction(S, AIRONET_IDLE, MT2_AIRONET_MSG, (STATE_MACHINE_FUNC)AironetMsgAction);
++ StateMachineSetAction(S, AIRONET_IDLE, MT2_AIRONET_SCAN_REQ, (STATE_MACHINE_FUNC)AironetRequestAction);
++ StateMachineSetAction(S, AIRONET_SCANNING, MT2_AIRONET_SCAN_DONE, (STATE_MACHINE_FUNC)AironetReportAction);
++}
++
++/*
++ ==========================================================================
++ Description:
++ This is state machine function.
++ When receiving EAPOL packets which is for 802.1x key management.
++ Use both in WPA, and WPAPSK case.
++ In this function, further dispatch to different functions according to the received packet. 3 categories are :
++ 1. normal 4-way pairwisekey and 2-way groupkey handshake
++ 2. MIC error (Countermeasures attack) report packet from STA.
++ 3. Request for pairwise/group key update from STA
++ Return:
++ ==========================================================================
++*/
++VOID AironetMsgAction(
++ IN PRTMP_ADAPTER pAd,
++ IN MLME_QUEUE_ELEM *Elem)
++{
++ USHORT Length;
++ UCHAR Index, i;
++ PUCHAR pData;
++ PAIRONET_RM_REQUEST_FRAME pRMReq;
++ PRM_REQUEST_ACTION pReqElem;
++
++ DBGPRINT(RT_DEBUG_TRACE, ("-----> AironetMsgAction\n"));
++
++ // 0. Get Aironet IAPP header first
++ pRMReq = (PAIRONET_RM_REQUEST_FRAME) &Elem->Msg[LENGTH_802_11];
++ pData = (PUCHAR) &Elem->Msg[LENGTH_802_11];
++
++ // 1. Change endian format form network to little endian
++ Length = be2cpu16(pRMReq->IAPP.Length);
++
++ // 2.0 Sanity check, this should only happen when CCX 2.0 support is enabled
++ if (pAd->StaCfg.CCXEnable != TRUE)
++ return;
++
++ // 2.1 Radio measurement must be on
++ if (pAd->StaCfg.CCXControl.field.RMEnable != 1)
++ return;
++
++ // 2.2. Debug print all bit information
++ DBGPRINT(RT_DEBUG_TRACE, ("IAPP ID & Length %d\n", Length));
++ DBGPRINT(RT_DEBUG_TRACE, ("IAPP Type %x\n", pRMReq->IAPP.Type));
++ DBGPRINT(RT_DEBUG_TRACE, ("IAPP SubType %x\n", pRMReq->IAPP.SubType));
++ DBGPRINT(RT_DEBUG_TRACE, ("IAPP Dialog Token %x\n", pRMReq->IAPP.Token));
++ DBGPRINT(RT_DEBUG_TRACE, ("IAPP Activation Delay %x\n", pRMReq->Delay));
++ DBGPRINT(RT_DEBUG_TRACE, ("IAPP Measurement Offset %x\n", pRMReq->Offset));
++
++ // 3. Check IAPP frame type, it must be 0x32 for Cisco Aironet extension
++ if (pRMReq->IAPP.Type != AIRONET_IAPP_TYPE)
++ {
++ DBGPRINT(RT_DEBUG_ERROR, ("Wrong IAPP type for Cisco Aironet extension\n"));
++ return;
++ }
++
++ // 4. Check IAPP frame subtype, it must be 0x01 for Cisco Aironet extension request.
++ // Since we are acting as client only, we will disregards reply subtype.
++ if (pRMReq->IAPP.SubType != AIRONET_IAPP_SUBTYPE_REQUEST)
++ {
++ DBGPRINT(RT_DEBUG_ERROR, ("Wrong IAPP subtype for Cisco Aironet extension\n"));
++ return;
++ }
++
++ // 5. Verify Destination MAC and Source MAC, both should be all zeros.
++ if (! MAC_ADDR_EQUAL(pRMReq->IAPP.DA, ZERO_MAC_ADDR))
++ {
++ DBGPRINT(RT_DEBUG_ERROR, ("Wrong IAPP DA for Cisco Aironet extension, it's not Zero\n"));
++ return;
++ }
++
++ if (! MAC_ADDR_EQUAL(pRMReq->IAPP.SA, ZERO_MAC_ADDR))
++ {
++ DBGPRINT(RT_DEBUG_ERROR, ("Wrong IAPP SA for Cisco Aironet extension, it's not Zero\n"));
++ return;
++ }
++
++ // 6. Reinit all report related fields
++ NdisZeroMemory(pAd->StaCfg.FrameReportBuf, 2048);
++ NdisZeroMemory(pAd->StaCfg.BssReportOffset, sizeof(USHORT) * MAX_LEN_OF_BSS_TABLE);
++ NdisZeroMemory(pAd->StaCfg.MeasurementRequest, sizeof(RM_REQUEST_ACTION) * 4);
++
++ // 7. Point to the start of first element report element
++ pAd->StaCfg.FrameReportLen = LENGTH_802_11 + sizeof(AIRONET_IAPP_HEADER);
++ DBGPRINT(RT_DEBUG_TRACE, ("FR len = %d\n", pAd->StaCfg.FrameReportLen));
++ pAd->StaCfg.LastBssIndex = 0xff;
++ pAd->StaCfg.RMReqCnt = 0;
++ pAd->StaCfg.ParallelReq = FALSE;
++ pAd->StaCfg.ParallelDuration = 0;
++ pAd->StaCfg.ParallelChannel = 0;
++ pAd->StaCfg.IAPPToken = pRMReq->IAPP.Token;
++ pAd->StaCfg.CurrentRMReqIdx = 0;
++ pAd->StaCfg.CLBusyBytes = 0;
++ // Reset the statistics
++ for (i = 0; i < 8; i++)
++ pAd->StaCfg.RPIDensity[i] = 0;
++
++ Index = 0;
++
++ // 8. Save dialog token for report
++ pAd->StaCfg.IAPPToken = pRMReq->IAPP.Token;
++
++ // Save Activation delay & measurement offset, Not really needed
++
++ // 9. Point to the first request element
++ pData += sizeof(AIRONET_RM_REQUEST_FRAME);
++ // Length should exclude the CISCO Aironet SNAP header
++ Length -= (sizeof(AIRONET_RM_REQUEST_FRAME) - LENGTH_802_1_H);
++
++ // 10. Start Parsing the Measurement elements.
++ // Be careful about multiple MR elements within one frames.
++ while (Length > 0)
++ {
++ pReqElem = (PRM_REQUEST_ACTION) pData;
++ switch (pReqElem->ReqElem.Eid)
++ {
++ case IE_MEASUREMENT_REQUEST:
++ // From the example, it seems we only need to support one request in one frame
++ // There is no multiple request in one frame.
++ // Besides, looks like we need to take care the measurement request only.
++ // The measurement request is always 4 bytes.
++
++ // Start parsing this type of request.
++ // 0. Eid is IE_MEASUREMENT_REQUEST
++ // 1. Length didn't include Eid and Length field, it always be 8.
++ // 2. Measurement Token, we nned to save it for the corresponding report.
++ // 3. Measurement Mode, Although there are definitions, but we din't see value other than
++ // 0 from test specs examples.
++ // 4. Measurement Type, this is what we need to do.
++ switch (pReqElem->ReqElem.Type)
++ {
++ case MSRN_TYPE_CHANNEL_LOAD_REQ:
++ case MSRN_TYPE_NOISE_HIST_REQ:
++ case MSRN_TYPE_BEACON_REQ:
++ // Check the Enable non-serving channel measurement control
++ if (pAd->StaCfg.CCXControl.field.DCRMEnable == 0)
++ {
++ // Check channel before enqueue the action
++ if (pReqElem->Measurement.Channel != pAd->CommonCfg.Channel)
++ break;
++ }
++ else
++ {
++ // If off channel measurement, check the TU duration limit
++ if (pReqElem->Measurement.Channel != pAd->CommonCfg.Channel)
++ if (pReqElem->Measurement.Duration > pAd->StaCfg.CCXControl.field.TuLimit)
++ break;
++ }
++
++ // Save requests and execute actions later
++ NdisMoveMemory(&pAd->StaCfg.MeasurementRequest[Index], pReqElem, sizeof(RM_REQUEST_ACTION));
++ Index += 1;
++ break;
++
++ case MSRN_TYPE_FRAME_REQ:
++ // Since it's option, we will support later
++ // FrameRequestAction(pAd, pData);
++ break;
++
++ default:
++ break;
++ }
++
++ // Point to next Measurement request
++ pData += sizeof(RM_REQUEST_ACTION);
++ Length -= sizeof(RM_REQUEST_ACTION);
++ break;
++
++ // We accept request only, all others are dropped
++ case IE_MEASUREMENT_REPORT:
++ case IE_AP_TX_POWER:
++ case IE_MEASUREMENT_CAPABILITY:
++ default:
++ return;
++ }
++ }
++
++ // 11. Update some flags and index
++ pAd->StaCfg.RMReqCnt = Index;
++
++ if (Index)
++ {
++ MlmeEnqueue(pAd, AIRONET_STATE_MACHINE, MT2_AIRONET_SCAN_REQ, 0, NULL);
++ RT28XX_MLME_HANDLER(pAd);
++ }
++
++ DBGPRINT(RT_DEBUG_TRACE, ("<----- AironetMsgAction\n"));
++}
++
++/*
++ ========================================================================
++
++ Routine Description:
++
++ Arguments:
++
++ Return Value:
++ None
++
++ Note:
++
++ ========================================================================
++*/
++VOID AironetRequestAction(
++ IN PRTMP_ADAPTER pAd,
++ IN MLME_QUEUE_ELEM *Elem)
++{
++ PRM_REQUEST_ACTION pReq;
++
++ // 1. Point to next request element
++ pReq = (PRM_REQUEST_ACTION) &pAd->StaCfg.MeasurementRequest[pAd->StaCfg.CurrentRMReqIdx];
++
++ // 2. Parse measurement type and call appropriate functions
++ if (pReq->ReqElem.Type == MSRN_TYPE_CHANNEL_LOAD_REQ)
++ // Channel Load measurement request
++ ChannelLoadRequestAction(pAd, pAd->StaCfg.CurrentRMReqIdx);
++ else if (pReq->ReqElem.Type == MSRN_TYPE_NOISE_HIST_REQ)
++ // Noise Histogram measurement request
++ NoiseHistRequestAction(pAd, pAd->StaCfg.CurrentRMReqIdx);
++ else if (pReq->ReqElem.Type == MSRN_TYPE_BEACON_REQ)
++ // Beacon measurement request
++ BeaconRequestAction(pAd, pAd->StaCfg.CurrentRMReqIdx);
++ else
++ // Unknown. Do nothing and return, this should never happen
++ return;
++
++ // 3. Peek into the next request, if it's parallel, we will update the scan time to the largest one
++ if ((pAd->StaCfg.CurrentRMReqIdx + 1) < pAd->StaCfg.RMReqCnt)
++ {
++ pReq = (PRM_REQUEST_ACTION) &pAd->StaCfg.MeasurementRequest[pAd->StaCfg.CurrentRMReqIdx + 1];
++ // Check for parallel bit
++ if ((pReq->ReqElem.Mode & 0x01) && (pReq->Measurement.Channel == pAd->StaCfg.CCXScanChannel))
++ {
++ // Update parallel mode request information
++ pAd->StaCfg.ParallelReq = TRUE;
++ pAd->StaCfg.CCXScanTime = ((pReq->Measurement.Duration > pAd->StaCfg.CCXScanTime) ?
++ (pReq->Measurement.Duration) : (pAd->StaCfg.CCXScanTime));
++ }
++ }
++
++ // 4. Call RT28XX_MLME_HANDLER to execute the request mlme commands, Scan request is the only one used
++ RT28XX_MLME_HANDLER(pAd);
++
++}
++
++
++/*
++ ========================================================================
++
++ Routine Description:
++ Prepare channel load report action, special scan operation added
++ to support
++
++ Arguments:
++ pAd Pointer to our adapter
++ pData Start from element ID
++
++ Return Value:
++ None
++
++ Note:
++
++ ========================================================================
++*/
++VOID ChannelLoadRequestAction(
++ IN PRTMP_ADAPTER pAd,
++ IN UCHAR Index)
++{
++ PRM_REQUEST_ACTION pReq;
++ MLME_SCAN_REQ_STRUCT ScanReq;
++ UCHAR ZeroSsid[32];
++ NDIS_STATUS NStatus;
++ PUCHAR pOutBuffer = NULL;
++ PHEADER_802_11 pNullFrame;
++
++ DBGPRINT(RT_DEBUG_TRACE, ("ChannelLoadRequestAction ----->\n"));
++
++ pReq = (PRM_REQUEST_ACTION) &pAd->StaCfg.MeasurementRequest[Index];
++ NdisZeroMemory(ZeroSsid, 32);
++
++ // Prepare for special scan request
++ // The scan definition is different with our Active, Passive scan definition.
++ // For CCX2, Active means send out probe request with broadcast BSSID.
++ // Passive means no probe request sent, only listen to the beacons.
++ // The channel scanned is fixed as specified, no need to scan all channels.
++ // The scan wait time is specified in the request too.
++ // Passive scan Mode
++
++ // Control state machine is not idle, reject the request
++ if ((pAd->Mlme.CntlMachine.CurrState != CNTL_IDLE) && (Index == 0))
++ return;
++
++ // Fill out stuff for scan request
++ ScanParmFill(pAd, &ScanReq, ZeroSsid, 0, BSS_ANY, SCAN_CISCO_CHANNEL_LOAD);
++ MlmeEnqueue(pAd, SYNC_STATE_MACHINE, MT2_MLME_SCAN_REQ, sizeof(MLME_SCAN_REQ_STRUCT), &ScanReq);
++ pAd->Mlme.CntlMachine.CurrState = CNTL_WAIT_OID_LIST_SCAN;
++
++ // Reset some internal control flags to make sure this scan works.
++ BssTableInit(&pAd->StaCfg.CCXBssTab);
++ pAd->StaCfg.ScanCnt = 0;
++ pAd->StaCfg.CCXScanChannel = pReq->Measurement.Channel;
++ pAd->StaCfg.CCXScanTime = pReq->Measurement.Duration;
++
++ DBGPRINT(RT_DEBUG_TRACE, ("Duration %d, Channel %d!\n", pReq->Measurement.Duration, pReq->Measurement.Channel));
++
++ // If it's non serving channel scan, send out a null frame with PSM bit on.
++ if (pAd->StaCfg.CCXScanChannel != pAd->CommonCfg.Channel)
++ {
++ // Use MLME enqueue method
++ NStatus = MlmeAllocateMemory(pAd, (PVOID)&pOutBuffer); //Get an unused nonpaged memory
++ if (NStatus != NDIS_STATUS_SUCCESS)
++ return;
++
++ pNullFrame = (PHEADER_802_11) pOutBuffer;;
++ // Make the power save Null frame with PSM bit on
++ MgtMacHeaderInit(pAd, pNullFrame, SUBTYPE_NULL_FUNC, 1, pAd->CommonCfg.Bssid, pAd->CommonCfg.Bssid);
++ pNullFrame->Duration = 0;
++ pNullFrame->FC.Type = BTYPE_DATA;
++ pNullFrame->FC.PwrMgmt = PWR_SAVE;
++
++ // Send using priority queue
++ MiniportMMRequest(pAd, 0, pOutBuffer, sizeof(HEADER_802_11));
++ MlmeFreeMemory(pAd, pOutBuffer);
++ DBGPRINT(RT_DEBUG_TRACE, ("Send PSM Data frame for off channel RM\n"));
++ RTMPusecDelay(5000);
++ }
++
++ pAd->StaCfg.CCXReqType = MSRN_TYPE_CHANNEL_LOAD_REQ;
++ pAd->StaCfg.CLBusyBytes = 0;
++ // Enable Rx with promiscuous reception
++ RTMP_IO_WRITE32(pAd, RX_FILTR_CFG, 0x1010);
++
++ // Set channel load measurement flag
++ RTMP_SET_FLAG(pAd, fRTMP_ADAPTER_RADIO_MEASUREMENT);
++
++ pAd->Mlme.AironetMachine.CurrState = AIRONET_SCANNING;
++
++ DBGPRINT(RT_DEBUG_TRACE, ("ChannelLoadRequestAction <-----\n"));
++}
++
++/*
++ ========================================================================
++
++ Routine Description:
++ Prepare noise histogram report action, special scan operation added
++ to support
++
++ Arguments:
++ pAd Pointer to our adapter
++ pData Start from element ID
++
++ Return Value:
++ None
++
++ Note:
++
++ ========================================================================
++*/
++VOID NoiseHistRequestAction(
++ IN PRTMP_ADAPTER pAd,
++ IN UCHAR Index)
++{
++ PRM_REQUEST_ACTION pReq;
++ MLME_SCAN_REQ_STRUCT ScanReq;
++ UCHAR ZeroSsid[32], i;
++ NDIS_STATUS NStatus;
++ PUCHAR pOutBuffer = NULL;
++ PHEADER_802_11 pNullFrame;
++
++ DBGPRINT(RT_DEBUG_TRACE, ("NoiseHistRequestAction ----->\n"));
++
++ pReq = (PRM_REQUEST_ACTION) &pAd->StaCfg.MeasurementRequest[Index];
++ NdisZeroMemory(ZeroSsid, 32);
++
++ // Prepare for special scan request
++ // The scan definition is different with our Active, Passive scan definition.
++ // For CCX2, Active means send out probe request with broadcast BSSID.
++ // Passive means no probe request sent, only listen to the beacons.
++ // The channel scanned is fixed as specified, no need to scan all channels.
++ // The scan wait time is specified in the request too.
++ // Passive scan Mode
++
++ // Control state machine is not idle, reject the request
++ if ((pAd->Mlme.CntlMachine.CurrState != CNTL_IDLE) && (Index == 0))
++ return;
++
++ // Fill out stuff for scan request
++ ScanParmFill(pAd, &ScanReq, ZeroSsid, 0, BSS_ANY, SCAN_CISCO_NOISE);
++ MlmeEnqueue(pAd, SYNC_STATE_MACHINE, MT2_MLME_SCAN_REQ, sizeof(MLME_SCAN_REQ_STRUCT), &ScanReq);
++ pAd->Mlme.CntlMachine.CurrState = CNTL_WAIT_OID_LIST_SCAN;
++
++ // Reset some internal control flags to make sure this scan works.
++ BssTableInit(&pAd->StaCfg.CCXBssTab);
++ pAd->StaCfg.ScanCnt = 0;
++ pAd->StaCfg.CCXScanChannel = pReq->Measurement.Channel;
++ pAd->StaCfg.CCXScanTime = pReq->Measurement.Duration;
++ pAd->StaCfg.CCXReqType = MSRN_TYPE_NOISE_HIST_REQ;
++
++ DBGPRINT(RT_DEBUG_TRACE, ("Duration %d, Channel %d!\n", pReq->Measurement.Duration, pReq->Measurement.Channel));
++
++ // If it's non serving channel scan, send out a null frame with PSM bit on.
++ if (pAd->StaCfg.CCXScanChannel != pAd->CommonCfg.Channel)
++ {
++ // Use MLME enqueue method
++ NStatus = MlmeAllocateMemory(pAd, (PVOID)&pOutBuffer); //Get an unused nonpaged memory
++ if (NStatus != NDIS_STATUS_SUCCESS)
++ return;
++
++ pNullFrame = (PHEADER_802_11) pOutBuffer;
++ // Make the power save Null frame with PSM bit on
++ MgtMacHeaderInit(pAd, pNullFrame, SUBTYPE_NULL_FUNC, 1, pAd->CommonCfg.Bssid, pAd->CommonCfg.Bssid);
++ pNullFrame->Duration = 0;
++ pNullFrame->FC.Type = BTYPE_DATA;
++ pNullFrame->FC.PwrMgmt = PWR_SAVE;
++
++ // Send using priority queue
++ MiniportMMRequest(pAd, 0, pOutBuffer, sizeof(HEADER_802_11));
++ MlmeFreeMemory(pAd, pOutBuffer);
++ DBGPRINT(RT_DEBUG_TRACE, ("Send PSM Data frame for off channel RM\n"));
++ RTMPusecDelay(5000);
++ }
++
++ // Reset the statistics
++ for (i = 0; i < 8; i++)
++ pAd->StaCfg.RPIDensity[i] = 0;
++
++ // Enable Rx with promiscuous reception
++ RTMP_IO_WRITE32(pAd, RX_FILTR_CFG, 0x1010);
++
++ // Set channel load measurement flag
++ RTMP_SET_FLAG(pAd, fRTMP_ADAPTER_RADIO_MEASUREMENT);
++
++ pAd->Mlme.AironetMachine.CurrState = AIRONET_SCANNING;
++
++ DBGPRINT(RT_DEBUG_TRACE, ("NoiseHistRequestAction <-----\n"));
++}
++
++/*
++ ========================================================================
++
++ Routine Description:
++ Prepare Beacon report action, special scan operation added
++ to support
++
++ Arguments:
++ pAd Pointer to our adapter
++ pData Start from element ID
++
++ Return Value:
++ None
++
++ Note:
++
++ ========================================================================
++*/
++VOID BeaconRequestAction(
++ IN PRTMP_ADAPTER pAd,
++ IN UCHAR Index)
++{
++ PRM_REQUEST_ACTION pReq;
++ NDIS_STATUS NStatus;
++ PUCHAR pOutBuffer = NULL;
++ PHEADER_802_11 pNullFrame;
++ MLME_SCAN_REQ_STRUCT ScanReq;
++ UCHAR ZeroSsid[32];
++
++ DBGPRINT(RT_DEBUG_TRACE, ("BeaconRequestAction ----->\n"));
++
++ pReq = (PRM_REQUEST_ACTION) &pAd->StaCfg.MeasurementRequest[Index];
++ NdisZeroMemory(ZeroSsid, 32);
++
++ // Prepare for special scan request
++ // The scan definition is different with our Active, Passive scan definition.
++ // For CCX2, Active means send out probe request with broadcast BSSID.
++ // Passive means no probe request sent, only listen to the beacons.
++ // The channel scanned is fixed as specified, no need to scan all channels.
++ // The scan wait time is specified in the request too.
++ if (pReq->Measurement.ScanMode == MSRN_SCAN_MODE_PASSIVE)
++ {
++ // Passive scan Mode
++ DBGPRINT(RT_DEBUG_TRACE, ("Passive Scan Mode!\n"));
++
++ // Control state machine is not idle, reject the request
++ if ((pAd->Mlme.CntlMachine.CurrState != CNTL_IDLE) && (Index == 0))
++ return;
++
++ // Fill out stuff for scan request
++ ScanParmFill(pAd, &ScanReq, ZeroSsid, 0, BSS_ANY, SCAN_CISCO_PASSIVE);
++ MlmeEnqueue(pAd, SYNC_STATE_MACHINE, MT2_MLME_SCAN_REQ, sizeof(MLME_SCAN_REQ_STRUCT), &ScanReq);
++ pAd->Mlme.CntlMachine.CurrState = CNTL_WAIT_OID_LIST_SCAN;
++
++ // Reset some internal control flags to make sure this scan works.
++ BssTableInit(&pAd->StaCfg.CCXBssTab);
++ pAd->StaCfg.ScanCnt = 0;
++ pAd->StaCfg.CCXScanChannel = pReq->Measurement.Channel;
++ pAd->StaCfg.CCXScanTime = pReq->Measurement.Duration;
++ pAd->StaCfg.CCXReqType = MSRN_TYPE_BEACON_REQ;
++ DBGPRINT(RT_DEBUG_TRACE, ("Duration %d!\n", pReq->Measurement.Duration));
++
++ // If it's non serving channel scan, send out a null frame with PSM bit on.
++ if (pAd->StaCfg.CCXScanChannel != pAd->CommonCfg.Channel)
++ {
++ // Use MLME enqueue method
++ NStatus = MlmeAllocateMemory(pAd, (PVOID)&pOutBuffer); //Get an unused nonpaged memory
++ if (NStatus != NDIS_STATUS_SUCCESS)
++ return;
++
++ pNullFrame = (PHEADER_802_11) pOutBuffer;
++ // Make the power save Null frame with PSM bit on
++ MgtMacHeaderInit(pAd, pNullFrame, SUBTYPE_NULL_FUNC, 1, pAd->CommonCfg.Bssid, pAd->CommonCfg.Bssid);
++ pNullFrame->Duration = 0;
++ pNullFrame->FC.Type = BTYPE_DATA;
++ pNullFrame->FC.PwrMgmt = PWR_SAVE;
++
++ // Send using priority queue
++ MiniportMMRequest(pAd, 0, pOutBuffer, sizeof(HEADER_802_11));
++ MlmeFreeMemory(pAd, pOutBuffer);
++ DBGPRINT(RT_DEBUG_TRACE, ("Send PSM Data frame for off channel RM\n"));
++ RTMPusecDelay(5000);
++ }
++
++ pAd->Mlme.AironetMachine.CurrState = AIRONET_SCANNING;
++ }
++ else if (pReq->Measurement.ScanMode == MSRN_SCAN_MODE_ACTIVE)
++ {
++ // Active scan Mode
++ DBGPRINT(RT_DEBUG_TRACE, ("Active Scan Mode!\n"));
++
++ // Control state machine is not idle, reject the request
++ if (pAd->Mlme.CntlMachine.CurrState != CNTL_IDLE)
++ return;
++
++ // Fill out stuff for scan request
++ ScanParmFill(pAd, &ScanReq, ZeroSsid, 0, BSS_ANY, SCAN_CISCO_ACTIVE);
++ MlmeEnqueue(pAd, SYNC_STATE_MACHINE, MT2_MLME_SCAN_REQ, sizeof(MLME_SCAN_REQ_STRUCT), &ScanReq);
++ pAd->Mlme.CntlMachine.CurrState = CNTL_WAIT_OID_LIST_SCAN;
++
++ // Reset some internal control flags to make sure this scan works.
++ BssTableInit(&pAd->StaCfg.CCXBssTab);
++ pAd->StaCfg.ScanCnt = 0;
++ pAd->StaCfg.CCXScanChannel = pReq->Measurement.Channel;
++ pAd->StaCfg.CCXScanTime = pReq->Measurement.Duration;
++ pAd->StaCfg.CCXReqType = MSRN_TYPE_BEACON_REQ;
++ DBGPRINT(RT_DEBUG_TRACE, ("Duration %d!\n", pReq->Measurement.Duration));
++
++ // If it's non serving channel scan, send out a null frame with PSM bit on.
++ if (pAd->StaCfg.CCXScanChannel != pAd->CommonCfg.Channel)
++ {
++ // Use MLME enqueue method
++ NStatus = MlmeAllocateMemory(pAd, (PVOID)&pOutBuffer); //Get an unused nonpaged memory
++ if (NStatus != NDIS_STATUS_SUCCESS)
++ return;
++
++ pNullFrame = (PHEADER_802_11) pOutBuffer;
++ // Make the power save Null frame with PSM bit on
++ MgtMacHeaderInit(pAd, pNullFrame, SUBTYPE_NULL_FUNC, 1, pAd->CommonCfg.Bssid, pAd->CommonCfg.Bssid);
++ pNullFrame->Duration = 0;
++ pNullFrame->FC.Type = BTYPE_DATA;
++ pNullFrame->FC.PwrMgmt = PWR_SAVE;
++
++ // Send using priority queue
++ MiniportMMRequest(pAd, 0, pOutBuffer, sizeof(HEADER_802_11));
++ MlmeFreeMemory(pAd, pOutBuffer);
++ DBGPRINT(RT_DEBUG_TRACE, ("Send PSM Data frame for off channel RM\n"));
++ RTMPusecDelay(5000);
++ }
++
++ pAd->Mlme.AironetMachine.CurrState = AIRONET_SCANNING;
++ }
++ else if (pReq->Measurement.ScanMode == MSRN_SCAN_MODE_BEACON_TABLE)
++ {
++ // Beacon report Mode, report all the APS in current bss table
++ DBGPRINT(RT_DEBUG_TRACE, ("Beacon Report Mode!\n"));
++
++ // Copy current BSS table to CCX table, we can omit this step later on.
++ NdisMoveMemory(&pAd->StaCfg.CCXBssTab, &pAd->ScanTab, sizeof(BSS_TABLE));
++
++ // Create beacon report from Bss table
++ AironetCreateBeaconReportFromBssTable(pAd);
++
++ // Set state to scanning
++ pAd->Mlme.AironetMachine.CurrState = AIRONET_SCANNING;
++
++ // Enqueue report request
++ // Cisco scan request is finished, prepare beacon report
++ MlmeEnqueue(pAd, AIRONET_STATE_MACHINE, MT2_AIRONET_SCAN_DONE, 0, NULL);
++ }
++ else
++ {
++ // Wrong scan Mode
++ DBGPRINT(RT_DEBUG_TRACE, ("Wrong Scan Mode!\n"));
++ }
++
++ DBGPRINT(RT_DEBUG_TRACE, ("BeaconRequestAction <-----\n"));
++}
++
++/*
++ ========================================================================
++
++ Routine Description:
++
++ Arguments:
++
++ Return Value:
++ None
++
++ Note:
++
++ ========================================================================
++*/
++VOID AironetReportAction(
++ IN PRTMP_ADAPTER pAd,
++ IN MLME_QUEUE_ELEM *Elem)
++{
++ PRM_REQUEST_ACTION pReq;
++ ULONG Now32;
++
++ NdisGetSystemUpTime(&Now32);
++ pAd->StaCfg.LastBeaconRxTime = Now32;
++
++ pReq = (PRM_REQUEST_ACTION) &pAd->StaCfg.MeasurementRequest[pAd->StaCfg.CurrentRMReqIdx];
++
++ DBGPRINT(RT_DEBUG_TRACE, ("AironetReportAction ----->\n"));
++
++ // 1. Parse measurement type and call appropriate functions
++ if (pReq->ReqElem.Type == MSRN_TYPE_CHANNEL_LOAD_REQ)
++ // Channel Load measurement request
++ ChannelLoadReportAction(pAd, pAd->StaCfg.CurrentRMReqIdx);
++ else if (pReq->ReqElem.Type == MSRN_TYPE_NOISE_HIST_REQ)
++ // Noise Histogram measurement request
++ NoiseHistReportAction(pAd, pAd->StaCfg.CurrentRMReqIdx);
++ else if (pReq->ReqElem.Type == MSRN_TYPE_BEACON_REQ)
++ // Beacon measurement request
++ BeaconReportAction(pAd, pAd->StaCfg.CurrentRMReqIdx);
++ else
++ // Unknown. Do nothing and return
++ ;
++
++ // 2. Point to the correct index of action element, start from 0
++ pAd->StaCfg.CurrentRMReqIdx++;
++
++ // 3. Check for parallel actions
++ if (pAd->StaCfg.ParallelReq == TRUE)
++ {
++ pReq = (PRM_REQUEST_ACTION) &pAd->StaCfg.MeasurementRequest[pAd->StaCfg.CurrentRMReqIdx];
++
++ // Process next action right away
++ if (pReq->ReqElem.Type == MSRN_TYPE_CHANNEL_LOAD_REQ)
++ // Channel Load measurement request
++ ChannelLoadReportAction(pAd, pAd->StaCfg.CurrentRMReqIdx);
++ else if (pReq->ReqElem.Type == MSRN_TYPE_NOISE_HIST_REQ)
++ // Noise Histogram measurement request
++ NoiseHistReportAction(pAd, pAd->StaCfg.CurrentRMReqIdx);
++
++ pAd->StaCfg.ParallelReq = FALSE;
++ pAd->StaCfg.CurrentRMReqIdx++;
++ }
++
++ if (pAd->StaCfg.CurrentRMReqIdx >= pAd->StaCfg.RMReqCnt)
++ {
++ // 4. There is no more unprocessed measurement request, go for transmit this report
++ AironetFinalReportAction(pAd);
++ pAd->Mlme.AironetMachine.CurrState = AIRONET_IDLE;
++ }
++ else
++ {
++ pReq = (PRM_REQUEST_ACTION) &pAd->StaCfg.MeasurementRequest[pAd->StaCfg.CurrentRMReqIdx];
++
++ if (pReq->Measurement.Channel != pAd->CommonCfg.Channel)
++ {
++ RTMPusecDelay(100000);
++ }
++
++ // 5. There are more requests to be measure
++ MlmeEnqueue(pAd, AIRONET_STATE_MACHINE, MT2_AIRONET_SCAN_REQ, 0, NULL);
++ RT28XX_MLME_HANDLER(pAd);
++ }
++
++ DBGPRINT(RT_DEBUG_TRACE, ("AironetReportAction <-----\n"));
++}
++
++/*
++ ========================================================================
++
++ Routine Description:
++
++ Arguments:
++
++ Return Value:
++ None
++
++ Note:
++
++ ========================================================================
++*/
++VOID AironetFinalReportAction(
++ IN PRTMP_ADAPTER pAd)
++{
++ PUCHAR pDest;
++ PAIRONET_IAPP_HEADER pIAPP;
++ PHEADER_802_11 pHeader;
++ UCHAR AckRate = RATE_2;
++ USHORT AckDuration = 0;
++ NDIS_STATUS NStatus;
++ PUCHAR pOutBuffer = NULL;
++ ULONG FrameLen = 0;
++
++ DBGPRINT(RT_DEBUG_TRACE, ("AironetFinalReportAction ----->\n"));
++
++ // 0. Set up the frame pointer, Frame was inited at the end of message action
++ pDest = &pAd->StaCfg.FrameReportBuf[LENGTH_802_11];
++
++ // 1. Update report IAPP fields
++ pIAPP = (PAIRONET_IAPP_HEADER) pDest;
++
++ // 2. Copy Cisco SNAP header
++ NdisMoveMemory(pIAPP->CiscoSnapHeader, SNAP_AIRONET, LENGTH_802_1_H);
++
++ // 3. network order for this 16bit length
++ pIAPP->Length = cpu2be16(pAd->StaCfg.FrameReportLen - LENGTH_802_11 - LENGTH_802_1_H);
++
++ // 3.1 sanity check the report length, ignore it if there is nothing to report
++ if (be2cpu16(pIAPP->Length) <= 18)
++ return;
++
++ // 4. Type must be 0x32
++ pIAPP->Type = AIRONET_IAPP_TYPE;
++
++ // 5. SubType for report must be 0x81
++ pIAPP->SubType = AIRONET_IAPP_SUBTYPE_REPORT;
++
++ // 6. DA is not used and must be zero, although the whole frame was cleared at the start of function
++ // We will do it again here. We can use BSSID instead
++ COPY_MAC_ADDR(pIAPP->DA, pAd->CommonCfg.Bssid);
++
++ // 7. SA is the client reporting which must be our MAC
++ COPY_MAC_ADDR(pIAPP->SA, pAd->CurrentAddress);
++
++ // 8. Copy the saved dialog token
++ pIAPP->Token = pAd->StaCfg.IAPPToken;
++
++ // 9. Make the Report frame 802.11 header
++ // Reuse function in wpa.c
++ pHeader = (PHEADER_802_11) pAd->StaCfg.FrameReportBuf;
++ pAd->Sequence ++;
++ WpaMacHeaderInit(pAd, pHeader, 0, pAd->CommonCfg.Bssid);
++
++ // ACK size is 14 include CRC, and its rate is based on real time information
++ AckRate = pAd->CommonCfg.ExpectedACKRate[pAd->CommonCfg.MlmeRate];
++ AckDuration = RTMPCalcDuration(pAd, AckRate, 14);
++ pHeader->Duration = pAd->CommonCfg.Dsifs + AckDuration;
++
++ // Use MLME enqueue method
++ NStatus = MlmeAllocateMemory(pAd, &pOutBuffer); //Get an unused nonpaged memory
++ if (NStatus != NDIS_STATUS_SUCCESS)
++ return;
++
++ // 10. Prepare report frame with dynamic outbuffer. Just simply copy everything.
++ MakeOutgoingFrame(pOutBuffer, &FrameLen,
++ pAd->StaCfg.FrameReportLen, pAd->StaCfg.FrameReportBuf,
++ END_OF_ARGS);
++
++ // 11. Send using priority queue
++ MiniportMMRequest(pAd, 0, pOutBuffer, FrameLen);
++ MlmeFreeMemory(pAd, pOutBuffer);
++
++ pAd->StaCfg.CCXReqType = MSRN_TYPE_UNUSED;
++
++ DBGPRINT(RT_DEBUG_TRACE, ("AironetFinalReportAction <-----\n"));
++}
++
++/*
++ ========================================================================
++
++ Routine Description:
++
++ Arguments:
++
++ Return Value:
++ None
++
++ Note:
++
++ ========================================================================
++*/
++VOID ChannelLoadReportAction(
++ IN PRTMP_ADAPTER pAd,
++ IN UCHAR Index)
++{
++ PMEASUREMENT_REPORT_ELEMENT pReport;
++ PCHANNEL_LOAD_REPORT pLoad;
++ PUCHAR pDest;
++ UCHAR CCABusyFraction;
++
++ DBGPRINT(RT_DEBUG_TRACE, ("ChannelLoadReportAction ----->\n"));
++
++ // Disable Rx with promiscuous reception, make it back to normal
++ RTMP_IO_WRITE32(pAd, RX_FILTR_CFG, STANORMAL); // Staion not drop control frame will fail WiFi Certification.
++
++ // 0. Setup pointer for processing beacon & probe response
++ pDest = (PUCHAR) &pAd->StaCfg.FrameReportBuf[pAd->StaCfg.FrameReportLen];
++ pReport = (PMEASUREMENT_REPORT_ELEMENT) pDest;
++
++ // 1. Fill Measurement report element field.
++ pReport->Eid = IE_MEASUREMENT_REPORT;
++ // Fixed Length at 9, not include Eid and length fields
++ pReport->Length = 9;
++ pReport->Token = pAd->StaCfg.MeasurementRequest[Index].ReqElem.Token;
++ pReport->Mode = pAd->StaCfg.MeasurementRequest[Index].ReqElem.Mode;
++ pReport->Type = MSRN_TYPE_CHANNEL_LOAD_REQ;
++
++ // 2. Fill channel report measurement data
++ pDest += sizeof(MEASUREMENT_REPORT_ELEMENT);
++ pLoad = (PCHANNEL_LOAD_REPORT) pDest;
++ pLoad->Channel = pAd->StaCfg.MeasurementRequest[Index].Measurement.Channel;
++ pLoad->Spare = 0;
++ pLoad->Duration = pAd->StaCfg.MeasurementRequest[Index].Measurement.Duration;
++
++ // 3. Calculate the CCA Busy Fraction
++ // (Bytes + ACK size) * 8 / Tx speed * 255 / 1000 / measurement duration, use 24 us Tx speed
++ // = (Bytes + ACK) / 12 / duration
++ // 9 is the good value for pAd->StaCfg.CLFactor
++ // CCABusyFraction = (UCHAR) (pAd->StaCfg.CLBusyBytes / 9 / pLoad->Duration);
++ CCABusyFraction = (UCHAR) (pAd->StaCfg.CLBusyBytes / pAd->StaCfg.CLFactor / pLoad->Duration);
++ if (CCABusyFraction < 10)
++ CCABusyFraction = (UCHAR) (pAd->StaCfg.CLBusyBytes / 3 / pLoad->Duration) + 1;
++
++ pLoad->CCABusy = CCABusyFraction;
++ DBGPRINT(RT_DEBUG_TRACE, ("CLBusyByte %ld, Duration %d, Result, %d\n", pAd->StaCfg.CLBusyBytes, pLoad->Duration, CCABusyFraction));
++
++ DBGPRINT(RT_DEBUG_TRACE, ("FrameReportLen %d\n", pAd->StaCfg.FrameReportLen));
++ pAd->StaCfg.FrameReportLen += (sizeof(MEASUREMENT_REPORT_ELEMENT) + sizeof(CHANNEL_LOAD_REPORT));
++ DBGPRINT(RT_DEBUG_TRACE, ("FrameReportLen %d\n", pAd->StaCfg.FrameReportLen));
++
++ // 4. Clear channel load measurement flag
++ RTMP_CLEAR_FLAG(pAd, fRTMP_ADAPTER_RADIO_MEASUREMENT);
++
++ // 5. reset to idle state
++ pAd->Mlme.AironetMachine.CurrState = AIRONET_IDLE;
++
++ DBGPRINT(RT_DEBUG_TRACE, ("ChannelLoadReportAction <-----\n"));
++}
++
++/*
++ ========================================================================
++
++ Routine Description:
++
++ Arguments:
++
++ Return Value:
++ None
++
++ Note:
++
++ ========================================================================
++*/
++VOID NoiseHistReportAction(
++ IN PRTMP_ADAPTER pAd,
++ IN UCHAR Index)
++{
++ PMEASUREMENT_REPORT_ELEMENT pReport;
++ PNOISE_HIST_REPORT pNoise;
++ PUCHAR pDest;
++ UCHAR i,NoiseCnt;
++ USHORT TotalRPICnt, TotalRPISum;
++
++ DBGPRINT(RT_DEBUG_TRACE, ("NoiseHistReportAction ----->\n"));
++
++ // 0. Disable Rx with promiscuous reception, make it back to normal
++ RTMP_IO_WRITE32(pAd, RX_FILTR_CFG, STANORMAL); // Staion not drop control frame will fail WiFi Certification.
++ // 1. Setup pointer for processing beacon & probe response
++ pDest = (PUCHAR) &pAd->StaCfg.FrameReportBuf[pAd->StaCfg.FrameReportLen];
++ pReport = (PMEASUREMENT_REPORT_ELEMENT) pDest;
++
++ // 2. Fill Measurement report element field.
++ pReport->Eid = IE_MEASUREMENT_REPORT;
++ // Fixed Length at 16, not include Eid and length fields
++ pReport->Length = 16;
++ pReport->Token = pAd->StaCfg.MeasurementRequest[Index].ReqElem.Token;
++ pReport->Mode = pAd->StaCfg.MeasurementRequest[Index].ReqElem.Mode;
++ pReport->Type = MSRN_TYPE_NOISE_HIST_REQ;
++
++ // 3. Fill noise histogram report measurement data
++ pDest += sizeof(MEASUREMENT_REPORT_ELEMENT);
++ pNoise = (PNOISE_HIST_REPORT) pDest;
++ pNoise->Channel = pAd->StaCfg.MeasurementRequest[Index].Measurement.Channel;
++ pNoise->Spare = 0;
++ pNoise->Duration = pAd->StaCfg.MeasurementRequest[Index].Measurement.Duration;
++ // 4. Fill Noise histogram, the total RPI counts should be 0.4 * TU
++ // We estimate 4000 normal packets received durning 10 seconds test.
++ // Adjust it if required.
++ // 3 is a good value for pAd->StaCfg.NHFactor
++ // TotalRPICnt = pNoise->Duration * 3 / 10;
++ TotalRPICnt = pNoise->Duration * pAd->StaCfg.NHFactor / 10;
++ TotalRPISum = 0;
++
++ for (i = 0; i < 8; i++)
++ {
++ TotalRPISum += pAd->StaCfg.RPIDensity[i];
++ DBGPRINT(RT_DEBUG_TRACE, ("RPI %d Conuts %d\n", i, pAd->StaCfg.RPIDensity[i]));
++ }
++
++ // Double check if the counter is larger than our expectation.
++ // We will replace it with the total number plus a fraction.
++ if (TotalRPISum > TotalRPICnt)
++ TotalRPICnt = TotalRPISum + pNoise->Duration / 20;
++
++ DBGPRINT(RT_DEBUG_TRACE, ("Total RPI Conuts %d\n", TotalRPICnt));
++
++ // 5. Initialize noise count for the total summation of 0xff
++ NoiseCnt = 0;
++ for (i = 1; i < 8; i++)
++ {
++ pNoise->Density[i] = (UCHAR) (pAd->StaCfg.RPIDensity[i] * 255 / TotalRPICnt);
++ if ((pNoise->Density[i] == 0) && (pAd->StaCfg.RPIDensity[i] != 0))
++ pNoise->Density[i]++;
++ NoiseCnt += pNoise->Density[i];
++ DBGPRINT(RT_DEBUG_TRACE, ("Reported RPI[%d] = 0x%02x\n", i, pNoise->Density[i]));
++ }
++
++ // 6. RPI[0] represents the rest of counts
++ pNoise->Density[0] = 0xff - NoiseCnt;
++ DBGPRINT(RT_DEBUG_TRACE, ("Reported RPI[0] = 0x%02x\n", pNoise->Density[0]));
++
++ pAd->StaCfg.FrameReportLen += (sizeof(MEASUREMENT_REPORT_ELEMENT) + sizeof(NOISE_HIST_REPORT));
++
++ // 7. Clear channel load measurement flag
++ RTMP_CLEAR_FLAG(pAd, fRTMP_ADAPTER_RADIO_MEASUREMENT);
++
++ // 8. reset to idle state
++ pAd->Mlme.AironetMachine.CurrState = AIRONET_IDLE;
++
++ DBGPRINT(RT_DEBUG_TRACE, ("NoiseHistReportAction <-----\n"));
++}
++
++/*
++ ========================================================================
++
++ Routine Description:
++ Prepare Beacon report action,
++
++ Arguments:
++ pAd Pointer to our adapter
++
++ Return Value:
++ None
++
++ Note:
++
++ ========================================================================
++*/
++VOID BeaconReportAction(
++ IN PRTMP_ADAPTER pAd,
++ IN UCHAR Index)
++{
++ DBGPRINT(RT_DEBUG_TRACE, ("BeaconReportAction ----->\n"));
++
++ // Looks like we don't have anything thing need to do here.
++ // All measurement report already finished in AddBeaconReport
++ // The length is in the FrameReportLen
++
++ // reset Beacon index for next beacon request
++ pAd->StaCfg.LastBssIndex = 0xff;
++
++ // reset to idle state
++ pAd->Mlme.AironetMachine.CurrState = AIRONET_IDLE;
++
++ DBGPRINT(RT_DEBUG_TRACE, ("BeaconReportAction <-----\n"));
++}
++
++/*
++ ========================================================================
++
++ Routine Description:
++
++ Arguments:
++ Index Current BSSID in CCXBsstab entry index
++
++ Return Value:
++
++ Note:
++
++ ========================================================================
++*/
++VOID AironetAddBeaconReport(
++ IN PRTMP_ADAPTER pAd,
++ IN ULONG Index,
++ IN PMLME_QUEUE_ELEM pElem)
++{
++ PVOID pMsg;
++ PUCHAR pSrc, pDest;
++ UCHAR ReqIdx;
++ ULONG MsgLen;
++ USHORT Length;
++ PFRAME_802_11 pFrame;
++ PMEASUREMENT_REPORT_ELEMENT pReport;
++ PEID_STRUCT pEid;
++ PBEACON_REPORT pBeaconReport;
++ PBSS_ENTRY pBss;
++
++ // 0. Setup pointer for processing beacon & probe response
++ pMsg = pElem->Msg;
++ MsgLen = pElem->MsgLen;
++ pFrame = (PFRAME_802_11) pMsg;
++ pSrc = pFrame->Octet; // Start from AP TSF
++ pBss = (PBSS_ENTRY) &pAd->StaCfg.CCXBssTab.BssEntry[Index];
++ ReqIdx = pAd->StaCfg.CurrentRMReqIdx;
++
++ // 1 Check the Index, if we already create this entry, only update the average RSSI
++ if ((Index <= pAd->StaCfg.LastBssIndex) && (pAd->StaCfg.LastBssIndex != 0xff))
++ {
++ pDest = (PUCHAR) &pAd->StaCfg.FrameReportBuf[pAd->StaCfg.BssReportOffset[Index]];
++ // Point to bss report information
++ pDest += sizeof(MEASUREMENT_REPORT_ELEMENT);
++ pBeaconReport = (PBEACON_REPORT) pDest;
++
++ // Update Rx power, in dBm
++ // Get the original RSSI readback from BBP
++ pBeaconReport->RxPower += pAd->BbpRssiToDbmDelta;
++ // Average the Rssi reading
++ pBeaconReport->RxPower = (pBeaconReport->RxPower + pBss->Rssi) / 2;
++ // Get to dBm format
++ pBeaconReport->RxPower -= pAd->BbpRssiToDbmDelta;
++
++ DBGPRINT(RT_DEBUG_TRACE, ("Bssid %02x:%02x:%02x:%02x:%02x:%02x ",
++ pBss->Bssid[0], pBss->Bssid[1], pBss->Bssid[2],
++ pBss->Bssid[3], pBss->Bssid[4], pBss->Bssid[5]));
++ DBGPRINT(RT_DEBUG_TRACE, ("RxPower[%ld] Rssi %d, Avg Rssi %d\n", Index, (pBss->Rssi - pAd->BbpRssiToDbmDelta), pBeaconReport->RxPower - 256));
++ DBGPRINT(RT_DEBUG_TRACE, ("FrameReportLen = %d\n", pAd->StaCfg.BssReportOffset[Index]));
++
++ // Update other information here
++
++ // Done
++ return;
++ }
++
++ // 2. Update reported Index
++ pAd->StaCfg.LastBssIndex = Index;
++
++ // 3. Setup the buffer address for copying this BSSID into reporting frame
++ // The offset should start after 802.11 header and report frame header.
++ pDest = (PUCHAR) &pAd->StaCfg.FrameReportBuf[pAd->StaCfg.FrameReportLen];
++
++ // 4. Save the start offset of each Bss in report frame
++ pAd->StaCfg.BssReportOffset[Index] = pAd->StaCfg.FrameReportLen;
++
++ // 5. Fill Measurement report fields
++ pReport = (PMEASUREMENT_REPORT_ELEMENT) pDest;
++ pReport->Eid = IE_MEASUREMENT_REPORT;
++ pReport->Length = 0;
++ pReport->Token = pAd->StaCfg.MeasurementRequest[ReqIdx].ReqElem.Token;
++ pReport->Mode = pAd->StaCfg.MeasurementRequest[ReqIdx].ReqElem.Mode;
++ pReport->Type = MSRN_TYPE_BEACON_REQ;
++ Length = sizeof(MEASUREMENT_REPORT_ELEMENT);
++ pDest += sizeof(MEASUREMENT_REPORT_ELEMENT);
++
++ // 6. Start thebeacon report format
++ pBeaconReport = (PBEACON_REPORT) pDest;
++ pDest += sizeof(BEACON_REPORT);
++ Length += sizeof(BEACON_REPORT);
++
++ // 7. Copy Channel number
++ pBeaconReport->Channel = pBss->Channel;
++ pBeaconReport->Spare = 0;
++ pBeaconReport->Duration = pAd->StaCfg.MeasurementRequest[ReqIdx].Measurement.Duration;
++ pBeaconReport->PhyType = ((pBss->SupRateLen+pBss->ExtRateLen > 4) ? PHY_ERP : PHY_DSS);
++ // 8. Rx power, in dBm
++ pBeaconReport->RxPower = pBss->Rssi - pAd->BbpRssiToDbmDelta;
++
++ DBGPRINT(RT_DEBUG_TRACE, ("Bssid %02x:%02x:%02x:%02x:%02x:%02x ",
++ pBss->Bssid[0], pBss->Bssid[1], pBss->Bssid[2],
++ pBss->Bssid[3], pBss->Bssid[4], pBss->Bssid[5]));
++ DBGPRINT(RT_DEBUG_TRACE, ("RxPower[%ld], Rssi %d\n", Index, pBeaconReport->RxPower - 256));
++ DBGPRINT(RT_DEBUG_TRACE, ("FrameReportLen = %d\n", pAd->StaCfg.FrameReportLen));
++
++ pBeaconReport->BeaconInterval = pBss->BeaconPeriod;
++ COPY_MAC_ADDR(pBeaconReport->BSSID, pFrame->Hdr.Addr3);
++ NdisMoveMemory(pBeaconReport->ParentTSF, pSrc, 4);
++ NdisMoveMemory(pBeaconReport->TargetTSF, &pElem->TimeStamp.u.LowPart, 4);
++ NdisMoveMemory(&pBeaconReport->TargetTSF[4], &pElem->TimeStamp.u.HighPart, 4);
++
++ // 9. Skip the beacon frame and offset to start of capabilityinfo since we already processed capabilityinfo
++ pSrc += (TIMESTAMP_LEN + 2);
++ pBeaconReport->CapabilityInfo = *(USHORT *)pSrc;
++
++ // 10. Point to start of element ID
++ pSrc += 2;
++ pEid = (PEID_STRUCT) pSrc;
++
++ // 11. Start process all variable Eid oayload and add the appropriate to the frame report
++ while (((PUCHAR) pEid + pEid->Len + 1) < ((PUCHAR) pFrame + MsgLen))
++ {
++ // Only limited EID are required to report for CCX 2. It includes SSID, Supported rate,
++ // FH paramenter set, DS parameter set, CF parameter set, IBSS parameter set,
++ // TIM (report first 4 bytes only, radio measurement capability
++ switch (pEid->Eid)
++ {
++ case IE_SSID:
++ case IE_SUPP_RATES:
++ case IE_FH_PARM:
++ case IE_DS_PARM:
++ case IE_CF_PARM:
++ case IE_IBSS_PARM:
++ NdisMoveMemory(pDest, pEid, pEid->Len + 2);
++ pDest += (pEid->Len + 2);
++ Length += (pEid->Len + 2);
++ break;
++
++ case IE_MEASUREMENT_CAPABILITY:
++ // Since this IE is duplicated with WPA security IE, we has to do sanity check before
++ // recognize it.
++ // 1. It also has fixed 6 bytes IE length.
++ if (pEid->Len != 6)
++ break;
++ // 2. Check the Cisco Aironet OUI
++ if (NdisEqualMemory(CISCO_OUI, (pSrc + 2), 3))
++ {
++ // Matched, this is what we want
++ NdisMoveMemory(pDest, pEid, pEid->Len + 2);
++ pDest += (pEid->Len + 2);
++ Length += (pEid->Len + 2);
++ }
++ break;
++
++ case IE_TIM:
++ if (pEid->Len > 4)
++ {
++ // May truncate and report the first 4 bytes only, with the eid & len, total should be 6
++ NdisMoveMemory(pDest, pEid, 6);
++ pDest += 6;
++ Length += 6;
++ }
++ else
++ {
++ NdisMoveMemory(pDest, pEid, pEid->Len + 2);
++ pDest += (pEid->Len + 2);
++ Length += (pEid->Len + 2);
++ }
++ break;
++
++ default:
++ break;
++ }
++ // 12. Move to next element ID
++ pSrc += (2 + pEid->Len);
++ pEid = (PEID_STRUCT) pSrc;
++ }
++
++ // 13. Update the length in the header, not include EID and length
++ pReport->Length = Length - 4;
++
++ // 14. Update the frame report buffer data length
++ pAd->StaCfg.FrameReportLen += Length;
++ DBGPRINT(RT_DEBUG_TRACE, ("FR len = %d\n", pAd->StaCfg.FrameReportLen));
++}
++
++/*
++ ========================================================================
++
++ Routine Description:
++
++ Arguments:
++ Index Current BSSID in CCXBsstab entry index
++
++ Return Value:
++
++ Note:
++
++ ========================================================================
++*/
++VOID AironetCreateBeaconReportFromBssTable(
++ IN PRTMP_ADAPTER pAd)
++{
++ PMEASUREMENT_REPORT_ELEMENT pReport;
++ PBEACON_REPORT pBeaconReport;
++ UCHAR Index, ReqIdx;
++ USHORT Length;
++ PUCHAR pDest;
++ PBSS_ENTRY pBss;
++
++ // 0. setup base pointer
++ ReqIdx = pAd->StaCfg.CurrentRMReqIdx;
++
++ for (Index = 0; Index < pAd->StaCfg.CCXBssTab.BssNr; Index++)
++ {
++ // 1. Setup the buffer address for copying this BSSID into reporting frame
++ // The offset should start after 802.11 header and report frame header.
++ pDest = (PUCHAR) &pAd->StaCfg.FrameReportBuf[pAd->StaCfg.FrameReportLen];
++ pBss = (PBSS_ENTRY) &pAd->StaCfg.CCXBssTab.BssEntry[Index];
++ Length = 0;
++
++ // 2. Fill Measurement report fields
++ pReport = (PMEASUREMENT_REPORT_ELEMENT) pDest;
++ pReport->Eid = IE_MEASUREMENT_REPORT;
++ pReport->Length = 0;
++ pReport->Token = pAd->StaCfg.MeasurementRequest[ReqIdx].ReqElem.Token;
++ pReport->Mode = pAd->StaCfg.MeasurementRequest[ReqIdx].ReqElem.Mode;
++ pReport->Type = MSRN_TYPE_BEACON_REQ;
++ Length = sizeof(MEASUREMENT_REPORT_ELEMENT);
++ pDest += sizeof(MEASUREMENT_REPORT_ELEMENT);
++
++ // 3. Start the beacon report format
++ pBeaconReport = (PBEACON_REPORT) pDest;
++ pDest += sizeof(BEACON_REPORT);
++ Length += sizeof(BEACON_REPORT);
++
++ // 4. Copy Channel number
++ pBeaconReport->Channel = pBss->Channel;
++ pBeaconReport->Spare = 0;
++ pBeaconReport->Duration = pAd->StaCfg.MeasurementRequest[ReqIdx].Measurement.Duration;
++ pBeaconReport->PhyType = ((pBss->SupRateLen+pBss->ExtRateLen > 4) ? PHY_ERP : PHY_DSS);
++ pBeaconReport->RxPower = pBss->Rssi - pAd->BbpRssiToDbmDelta;
++ pBeaconReport->BeaconInterval = pBss->BeaconPeriod;
++ pBeaconReport->CapabilityInfo = pBss->CapabilityInfo;
++ COPY_MAC_ADDR(pBeaconReport->BSSID, pBss->Bssid);
++ NdisMoveMemory(pBeaconReport->ParentTSF, pBss->PTSF, 4);
++ NdisMoveMemory(pBeaconReport->TargetTSF, pBss->TTSF, 8);
++
++ // 5. Create SSID
++ *pDest++ = 0x00;
++ *pDest++ = pBss->SsidLen;
++ NdisMoveMemory(pDest, pBss->Ssid, pBss->SsidLen);
++ pDest += pBss->SsidLen;
++ Length += (2 + pBss->SsidLen);
++
++ // 6. Create SupportRates
++ *pDest++ = 0x01;
++ *pDest++ = pBss->SupRateLen;
++ NdisMoveMemory(pDest, pBss->SupRate, pBss->SupRateLen);
++ pDest += pBss->SupRateLen;
++ Length += (2 + pBss->SupRateLen);
++
++ // 7. DS Parameter
++ *pDest++ = 0x03;
++ *pDest++ = 1;
++ *pDest++ = pBss->Channel;
++ Length += 3;
++
++ // 8. IBSS parameter if presents
++ if (pBss->BssType == BSS_ADHOC)
++ {
++ *pDest++ = 0x06;
++ *pDest++ = 2;
++ *(PUSHORT) pDest = pBss->AtimWin;
++ pDest += 2;
++ Length += 4;
++ }
++
++ // 9. Update length field, not include EID and length
++ pReport->Length = Length - 4;
++
++ // 10. Update total frame size
++ pAd->StaCfg.FrameReportLen += Length;
++ }
++}
+--- /dev/null
++++ b/drivers/staging/rt2870/sta/assoc.c
+@@ -0,0 +1,2039 @@
++/*
++ *************************************************************************
++ * Ralink Tech Inc.
++ * 5F., No.36, Taiyuan St., Jhubei City,
++ * Hsinchu County 302,
++ * Taiwan, R.O.C.
++ *
++ * (c) Copyright 2002-2007, Ralink Technology, Inc.
++ *
++ * This program is free software; you can redistribute it and/or modify *
++ * it under the terms of the GNU General Public License as published by *
++ * the Free Software Foundation; either version 2 of the License, or *
++ * (at your option) any later version. *
++ * *
++ * This program is distributed in the hope that it will be useful, *
++ * but WITHOUT ANY WARRANTY; without even the implied warranty of *
++ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the *
++ * GNU General Public License for more details. *
++ * *
++ * You should have received a copy of the GNU General Public License *
++ * along with this program; if not, write to the *
++ * Free Software Foundation, Inc., *
++ * 59 Temple Place - Suite 330, Boston, MA 02111-1307, USA. *
++ * *
++ *************************************************************************
++
++ Module Name:
++ assoc.c
++
++ Abstract:
++
++ Revision History:
++ Who When What
++ -------- ---------- ----------------------------------------------
++ John 2004-9-3 porting from RT2500
++*/
++#include "../rt_config.h"
++
++UCHAR CipherWpaTemplate[] = {
++ 0xdd, // WPA IE
++ 0x16, // Length
++ 0x00, 0x50, 0xf2, 0x01, // oui
++ 0x01, 0x00, // Version
++ 0x00, 0x50, 0xf2, 0x02, // Multicast
++ 0x01, 0x00, // Number of unicast
++ 0x00, 0x50, 0xf2, 0x02, // unicast
++ 0x01, 0x00, // number of authentication method
++ 0x00, 0x50, 0xf2, 0x01 // authentication
++ };
++
++UCHAR CipherWpa2Template[] = {
++ 0x30, // RSN IE
++ 0x14, // Length
++ 0x01, 0x00, // Version
++ 0x00, 0x0f, 0xac, 0x02, // group cipher, TKIP
++ 0x01, 0x00, // number of pairwise
++ 0x00, 0x0f, 0xac, 0x02, // unicast
++ 0x01, 0x00, // number of authentication method
++ 0x00, 0x0f, 0xac, 0x02, // authentication
++ 0x00, 0x00, // RSN capability
++ };
++
++UCHAR Ccx2IeInfo[] = { 0x00, 0x40, 0x96, 0x03, 0x02};
++
++/*
++ ==========================================================================
++ Description:
++ association state machine init, including state transition and timer init
++ Parameters:
++ S - pointer to the association state machine
++
++ IRQL = PASSIVE_LEVEL
++
++ ==========================================================================
++ */
++VOID AssocStateMachineInit(
++ IN PRTMP_ADAPTER pAd,
++ IN STATE_MACHINE *S,
++ OUT STATE_MACHINE_FUNC Trans[])
++{
++ StateMachineInit(S, Trans, MAX_ASSOC_STATE, MAX_ASSOC_MSG, (STATE_MACHINE_FUNC)Drop, ASSOC_IDLE, ASSOC_MACHINE_BASE);
++
++ // first column
++ StateMachineSetAction(S, ASSOC_IDLE, MT2_MLME_ASSOC_REQ, (STATE_MACHINE_FUNC)MlmeAssocReqAction);
++ StateMachineSetAction(S, ASSOC_IDLE, MT2_MLME_REASSOC_REQ, (STATE_MACHINE_FUNC)MlmeReassocReqAction);
++ StateMachineSetAction(S, ASSOC_IDLE, MT2_MLME_DISASSOC_REQ, (STATE_MACHINE_FUNC)MlmeDisassocReqAction);
++ StateMachineSetAction(S, ASSOC_IDLE, MT2_PEER_DISASSOC_REQ, (STATE_MACHINE_FUNC)PeerDisassocAction);
++
++ // second column
++ StateMachineSetAction(S, ASSOC_WAIT_RSP, MT2_MLME_ASSOC_REQ, (STATE_MACHINE_FUNC)InvalidStateWhenAssoc);
++ StateMachineSetAction(S, ASSOC_WAIT_RSP, MT2_MLME_REASSOC_REQ, (STATE_MACHINE_FUNC)InvalidStateWhenReassoc);
++ StateMachineSetAction(S, ASSOC_WAIT_RSP, MT2_MLME_DISASSOC_REQ, (STATE_MACHINE_FUNC)InvalidStateWhenDisassociate);
++ StateMachineSetAction(S, ASSOC_WAIT_RSP, MT2_PEER_DISASSOC_REQ, (STATE_MACHINE_FUNC)PeerDisassocAction);
++ StateMachineSetAction(S, ASSOC_WAIT_RSP, MT2_PEER_ASSOC_RSP, (STATE_MACHINE_FUNC)PeerAssocRspAction);
++ //
++ // Patch 3Com AP MOde:3CRWE454G72
++ // We send Assoc request frame to this AP, it always send Reassoc Rsp not Associate Rsp.
++ //
++ StateMachineSetAction(S, ASSOC_WAIT_RSP, MT2_PEER_REASSOC_RSP, (STATE_MACHINE_FUNC)PeerAssocRspAction);
++ StateMachineSetAction(S, ASSOC_WAIT_RSP, MT2_ASSOC_TIMEOUT, (STATE_MACHINE_FUNC)AssocTimeoutAction);
++
++ // third column
++ StateMachineSetAction(S, REASSOC_WAIT_RSP, MT2_MLME_ASSOC_REQ, (STATE_MACHINE_FUNC)InvalidStateWhenAssoc);
++ StateMachineSetAction(S, REASSOC_WAIT_RSP, MT2_MLME_REASSOC_REQ, (STATE_MACHINE_FUNC)InvalidStateWhenReassoc);
++ StateMachineSetAction(S, REASSOC_WAIT_RSP, MT2_MLME_DISASSOC_REQ, (STATE_MACHINE_FUNC)InvalidStateWhenDisassociate);
++ StateMachineSetAction(S, REASSOC_WAIT_RSP, MT2_PEER_DISASSOC_REQ, (STATE_MACHINE_FUNC)PeerDisassocAction);
++ StateMachineSetAction(S, REASSOC_WAIT_RSP, MT2_PEER_REASSOC_RSP, (STATE_MACHINE_FUNC)PeerReassocRspAction);
++ //
++ // Patch, AP doesn't send Reassociate Rsp frame to Station.
++ //
++ StateMachineSetAction(S, REASSOC_WAIT_RSP, MT2_PEER_ASSOC_RSP, (STATE_MACHINE_FUNC)PeerReassocRspAction);
++ StateMachineSetAction(S, REASSOC_WAIT_RSP, MT2_REASSOC_TIMEOUT, (STATE_MACHINE_FUNC)ReassocTimeoutAction);
++
++ // fourth column
++ StateMachineSetAction(S, DISASSOC_WAIT_RSP, MT2_MLME_ASSOC_REQ, (STATE_MACHINE_FUNC)InvalidStateWhenAssoc);
++ StateMachineSetAction(S, DISASSOC_WAIT_RSP, MT2_MLME_REASSOC_REQ, (STATE_MACHINE_FUNC)InvalidStateWhenReassoc);
++ StateMachineSetAction(S, DISASSOC_WAIT_RSP, MT2_MLME_DISASSOC_REQ, (STATE_MACHINE_FUNC)InvalidStateWhenDisassociate);
++ StateMachineSetAction(S, DISASSOC_WAIT_RSP, MT2_PEER_DISASSOC_REQ, (STATE_MACHINE_FUNC)PeerDisassocAction);
++ StateMachineSetAction(S, DISASSOC_WAIT_RSP, MT2_DISASSOC_TIMEOUT, (STATE_MACHINE_FUNC)DisassocTimeoutAction);
++
++ // initialize the timer
++ RTMPInitTimer(pAd, &pAd->MlmeAux.AssocTimer, GET_TIMER_FUNCTION(AssocTimeout), pAd, FALSE);
++ RTMPInitTimer(pAd, &pAd->MlmeAux.ReassocTimer, GET_TIMER_FUNCTION(ReassocTimeout), pAd, FALSE);
++ RTMPInitTimer(pAd, &pAd->MlmeAux.DisassocTimer, GET_TIMER_FUNCTION(DisassocTimeout), pAd, FALSE);
++}
++
++/*
++ ==========================================================================
++ Description:
++ Association timeout procedure. After association timeout, this function
++ will be called and it will put a message into the MLME queue
++ Parameters:
++ Standard timer parameters
++
++ IRQL = DISPATCH_LEVEL
++
++ ==========================================================================
++ */
++VOID AssocTimeout(IN PVOID SystemSpecific1,
++ IN PVOID FunctionContext,
++ IN PVOID SystemSpecific2,
++ IN PVOID SystemSpecific3)
++{
++ RTMP_ADAPTER *pAd = (RTMP_ADAPTER *)FunctionContext;
++
++ // Do nothing if the driver is starting halt state.
++ // This might happen when timer already been fired before cancel timer with mlmehalt
++ if (RTMP_TEST_FLAG(pAd, fRTMP_ADAPTER_HALT_IN_PROGRESS | fRTMP_ADAPTER_NIC_NOT_EXIST))
++ return;
++
++ MlmeEnqueue(pAd, ASSOC_STATE_MACHINE, MT2_ASSOC_TIMEOUT, 0, NULL);
++ RT28XX_MLME_HANDLER(pAd);
++}
++
++/*
++ ==========================================================================
++ Description:
++ Reassociation timeout procedure. After reassociation timeout, this
++ function will be called and put a message into the MLME queue
++ Parameters:
++ Standard timer parameters
++
++ IRQL = DISPATCH_LEVEL
++
++ ==========================================================================
++ */
++VOID ReassocTimeout(IN PVOID SystemSpecific1,
++ IN PVOID FunctionContext,
++ IN PVOID SystemSpecific2,
++ IN PVOID SystemSpecific3)
++{
++ RTMP_ADAPTER *pAd = (RTMP_ADAPTER *)FunctionContext;
++
++ // Do nothing if the driver is starting halt state.
++ // This might happen when timer already been fired before cancel timer with mlmehalt
++ if (RTMP_TEST_FLAG(pAd, fRTMP_ADAPTER_HALT_IN_PROGRESS | fRTMP_ADAPTER_NIC_NOT_EXIST))
++ return;
++
++ MlmeEnqueue(pAd, ASSOC_STATE_MACHINE, MT2_REASSOC_TIMEOUT, 0, NULL);
++ RT28XX_MLME_HANDLER(pAd);
++}
++
++/*
++ ==========================================================================
++ Description:
++ Disassociation timeout procedure. After disassociation timeout, this
++ function will be called and put a message into the MLME queue
++ Parameters:
++ Standard timer parameters
++
++ IRQL = DISPATCH_LEVEL
++
++ ==========================================================================
++ */
++VOID DisassocTimeout(IN PVOID SystemSpecific1,
++ IN PVOID FunctionContext,
++ IN PVOID SystemSpecific2,
++ IN PVOID SystemSpecific3)
++{
++ RTMP_ADAPTER *pAd = (RTMP_ADAPTER *)FunctionContext;
++
++ // Do nothing if the driver is starting halt state.
++ // This might happen when timer already been fired before cancel timer with mlmehalt
++ if (RTMP_TEST_FLAG(pAd, fRTMP_ADAPTER_HALT_IN_PROGRESS | fRTMP_ADAPTER_NIC_NOT_EXIST))
++ return;
++
++ MlmeEnqueue(pAd, ASSOC_STATE_MACHINE, MT2_DISASSOC_TIMEOUT, 0, NULL);
++ RT28XX_MLME_HANDLER(pAd);
++}
++
++/*
++ ==========================================================================
++ Description:
++ mlme assoc req handling procedure
++ Parameters:
++ Adapter - Adapter pointer
++ Elem - MLME Queue Element
++ Pre:
++ the station has been authenticated and the following information is stored in the config
++ -# SSID
++ -# supported rates and their length
++ -# listen interval (Adapter->StaCfg.default_listen_count)
++ -# Transmit power (Adapter->StaCfg.tx_power)
++ Post :
++ -# An association request frame is generated and sent to the air
++ -# Association timer starts
++ -# Association state -> ASSOC_WAIT_RSP
++
++ IRQL = DISPATCH_LEVEL
++
++ ==========================================================================
++ */
++VOID MlmeAssocReqAction(
++ IN PRTMP_ADAPTER pAd,
++ IN MLME_QUEUE_ELEM *Elem)
++{
++ UCHAR ApAddr[6];
++ HEADER_802_11 AssocHdr;
++ UCHAR Ccx2Len = 5;
++ UCHAR WmeIe[9] = {IE_VENDOR_SPECIFIC, 0x07, 0x00, 0x50, 0xf2, 0x02, 0x00, 0x01, 0x00};
++ USHORT ListenIntv;
++ ULONG Timeout;
++ USHORT CapabilityInfo;
++ BOOLEAN TimerCancelled;
++ PUCHAR pOutBuffer = NULL;
++ NDIS_STATUS NStatus;
++ ULONG FrameLen = 0;
++ ULONG tmp;
++ USHORT VarIesOffset;
++ UCHAR CkipFlag;
++ UCHAR CkipNegotiationBuffer[CKIP_NEGOTIATION_LENGTH];
++ UCHAR AironetCkipIe = IE_AIRONET_CKIP;
++ UCHAR AironetCkipLen = CKIP_NEGOTIATION_LENGTH;
++ UCHAR AironetIPAddressIE = IE_AIRONET_IPADDRESS;
++ UCHAR AironetIPAddressLen = AIRONET_IPADDRESS_LENGTH;
++ UCHAR AironetIPAddressBuffer[AIRONET_IPADDRESS_LENGTH] = {0x00, 0x40, 0x96, 0x00, 0x00, 0x00, 0x00, 0x00, 0x02, 0x00};
++ USHORT Status;
++
++ // Block all authentication request durning WPA block period
++ if (pAd->StaCfg.bBlockAssoc == TRUE)
++ {
++ DBGPRINT(RT_DEBUG_TRACE, ("ASSOC - Block Assoc request durning WPA block period!\n"));
++ pAd->Mlme.AssocMachine.CurrState = ASSOC_IDLE;
++ Status = MLME_STATE_MACHINE_REJECT;
++ MlmeEnqueue(pAd, MLME_CNTL_STATE_MACHINE, MT2_ASSOC_CONF, 2, &Status);
++ }
++ // check sanity first
++ else if (MlmeAssocReqSanity(pAd, Elem->Msg, Elem->MsgLen, ApAddr, &CapabilityInfo, &Timeout, &ListenIntv))
++ {
++ RTMPCancelTimer(&pAd->MlmeAux.AssocTimer, &TimerCancelled);
++ COPY_MAC_ADDR(pAd->MlmeAux.Bssid, ApAddr);
++
++ // Get an unused nonpaged memory
++ NStatus = MlmeAllocateMemory(pAd, &pOutBuffer);
++ if (NStatus != NDIS_STATUS_SUCCESS)
++ {
++ DBGPRINT(RT_DEBUG_TRACE,("ASSOC - MlmeAssocReqAction() allocate memory failed \n"));
++ pAd->Mlme.AssocMachine.CurrState = ASSOC_IDLE;
++ Status = MLME_FAIL_NO_RESOURCE;
++ MlmeEnqueue(pAd, MLME_CNTL_STATE_MACHINE, MT2_ASSOC_CONF, 2, &Status);
++ return;
++ }
++
++ // Add by James 03/06/27
++ pAd->StaCfg.AssocInfo.Length = sizeof(NDIS_802_11_ASSOCIATION_INFORMATION);
++ // Association don't need to report MAC address
++ pAd->StaCfg.AssocInfo.AvailableRequestFixedIEs =
++ NDIS_802_11_AI_REQFI_CAPABILITIES | NDIS_802_11_AI_REQFI_LISTENINTERVAL;
++ pAd->StaCfg.AssocInfo.RequestFixedIEs.Capabilities = CapabilityInfo;
++ pAd->StaCfg.AssocInfo.RequestFixedIEs.ListenInterval = ListenIntv;
++ // Only reassociate need this
++ //COPY_MAC_ADDR(pAd->StaCfg.AssocInfo.RequestFixedIEs.CurrentAPAddress, ApAddr);
++ pAd->StaCfg.AssocInfo.OffsetRequestIEs = sizeof(NDIS_802_11_ASSOCIATION_INFORMATION);
++
++ NdisZeroMemory(pAd->StaCfg.ReqVarIEs, MAX_VIE_LEN);
++ // First add SSID
++ VarIesOffset = 0;
++ NdisMoveMemory(pAd->StaCfg.ReqVarIEs + VarIesOffset, &SsidIe, 1);
++ VarIesOffset += 1;
++ NdisMoveMemory(pAd->StaCfg.ReqVarIEs + VarIesOffset, &pAd->MlmeAux.SsidLen, 1);
++ VarIesOffset += 1;
++ NdisMoveMemory(pAd->StaCfg.ReqVarIEs + VarIesOffset, pAd->MlmeAux.Ssid, pAd->MlmeAux.SsidLen);
++ VarIesOffset += pAd->MlmeAux.SsidLen;
++
++ // Second add Supported rates
++ NdisMoveMemory(pAd->StaCfg.ReqVarIEs + VarIesOffset, &SupRateIe, 1);
++ VarIesOffset += 1;
++ NdisMoveMemory(pAd->StaCfg.ReqVarIEs + VarIesOffset, &pAd->MlmeAux.SupRateLen, 1);
++ VarIesOffset += 1;
++ NdisMoveMemory(pAd->StaCfg.ReqVarIEs + VarIesOffset, pAd->MlmeAux.SupRate, pAd->MlmeAux.SupRateLen);
++ VarIesOffset += pAd->MlmeAux.SupRateLen;
++ // End Add by James
++
++ if ((pAd->CommonCfg.Channel > 14) &&
++ (pAd->CommonCfg.bIEEE80211H == TRUE))
++ CapabilityInfo |= 0x0100;
++
++ DBGPRINT(RT_DEBUG_TRACE, ("ASSOC - Send ASSOC request...\n"));
++ MgtMacHeaderInit(pAd, &AssocHdr, SUBTYPE_ASSOC_REQ, 0, ApAddr, ApAddr);
++
++ // Build basic frame first
++ MakeOutgoingFrame(pOutBuffer, &FrameLen,
++ sizeof(HEADER_802_11), &AssocHdr,
++ 2, &CapabilityInfo,
++ 2, &ListenIntv,
++ 1, &SsidIe,
++ 1, &pAd->MlmeAux.SsidLen,
++ pAd->MlmeAux.SsidLen, pAd->MlmeAux.Ssid,
++ 1, &SupRateIe,
++ 1, &pAd->MlmeAux.SupRateLen,
++ pAd->MlmeAux.SupRateLen, pAd->MlmeAux.SupRate,
++ END_OF_ARGS);
++
++ if (pAd->MlmeAux.ExtRateLen != 0)
++ {
++ MakeOutgoingFrame(pOutBuffer + FrameLen, &tmp,
++ 1, &ExtRateIe,
++ 1, &pAd->MlmeAux.ExtRateLen,
++ pAd->MlmeAux.ExtRateLen, pAd->MlmeAux.ExtRate,
++ END_OF_ARGS);
++ FrameLen += tmp;
++ }
++
++#ifdef DOT11_N_SUPPORT
++ // HT
++ if ((pAd->MlmeAux.HtCapabilityLen > 0) && (pAd->CommonCfg.PhyMode >= PHY_11ABGN_MIXED))
++ {
++ ULONG TmpLen;
++ UCHAR HtLen;
++ UCHAR BROADCOM[4] = {0x0, 0x90, 0x4c, 0x33};
++ if (pAd->StaActive.SupportedPhyInfo.bPreNHt == TRUE)
++ {
++ HtLen = SIZE_HT_CAP_IE + 4;
++ MakeOutgoingFrame(pOutBuffer + FrameLen, &TmpLen,
++ 1, &WpaIe,
++ 1, &HtLen,
++ 4, &BROADCOM[0],
++ pAd->MlmeAux.HtCapabilityLen, &pAd->MlmeAux.HtCapability,
++ END_OF_ARGS);
++ }
++ else
++ {
++#ifdef RT_BIG_ENDIAN
++ HT_CAPABILITY_IE HtCapabilityTmp;
++#endif
++
++#ifndef RT_BIG_ENDIAN
++ MakeOutgoingFrame(pOutBuffer + FrameLen, &TmpLen,
++ 1, &HtCapIe,
++ 1, &pAd->MlmeAux.HtCapabilityLen,
++ pAd->MlmeAux.HtCapabilityLen, &pAd->MlmeAux.HtCapability,
++ END_OF_ARGS);
++#else
++ NdisZeroMemory(&HtCapabilityTmp, sizeof(HT_CAPABILITY_IE));
++ NdisMoveMemory(&HtCapabilityTmp, &pAd->MlmeAux.HtCapability, pAd->MlmeAux.HtCapabilityLen);
++ *(USHORT *)(&HtCapabilityTmp.HtCapInfo) = SWAP16(*(USHORT *)(&HtCapabilityTmp.HtCapInfo));
++ *(USHORT *)(&HtCapabilityTmp.ExtHtCapInfo) = SWAP16(*(USHORT *)(&HtCapabilityTmp.ExtHtCapInfo));
++
++ MakeOutgoingFrame(pOutBuffer + FrameLen, &TmpLen,
++ 1, &HtCapIe,
++ 1, &pAd->MlmeAux.HtCapabilityLen,
++ pAd->MlmeAux.HtCapabilityLen,&HtCapabilityTmp,
++ END_OF_ARGS);
++#endif
++ }
++ FrameLen += TmpLen;
++ }
++#endif // DOT11_N_SUPPORT //
++
++ // add Ralink proprietary IE to inform AP this STA is going to use AGGREGATION or PIGGY-BACK+AGGREGATION
++ // Case I: (Aggregation + Piggy-Back)
++ // 1. user enable aggregation, AND
++ // 2. Mac support piggy-back
++ // 3. AP annouces it's PIGGY-BACK+AGGREGATION-capable in BEACON
++ // Case II: (Aggregation)
++ // 1. user enable aggregation, AND
++ // 2. AP annouces it's AGGREGATION-capable in BEACON
++ if (pAd->CommonCfg.bAggregationCapable)
++ {
++ if ((pAd->CommonCfg.bPiggyBackCapable) && ((pAd->MlmeAux.APRalinkIe & 0x00000003) == 3))
++ {
++ ULONG TmpLen;
++ UCHAR RalinkIe[9] = {IE_VENDOR_SPECIFIC, 7, 0x00, 0x0c, 0x43, 0x03, 0x00, 0x00, 0x00};
++ MakeOutgoingFrame(pOutBuffer+FrameLen, &TmpLen,
++ 9, RalinkIe,
++ END_OF_ARGS);
++ FrameLen += TmpLen;
++ }
++ else if (pAd->MlmeAux.APRalinkIe & 0x00000001)
++ {
++ ULONG TmpLen;
++ UCHAR RalinkIe[9] = {IE_VENDOR_SPECIFIC, 7, 0x00, 0x0c, 0x43, 0x01, 0x00, 0x00, 0x00};
++ MakeOutgoingFrame(pOutBuffer+FrameLen, &TmpLen,
++ 9, RalinkIe,
++ END_OF_ARGS);
++ FrameLen += TmpLen;
++ }
++ }
++ else
++ {
++ ULONG TmpLen;
++ UCHAR RalinkIe[9] = {IE_VENDOR_SPECIFIC, 7, 0x00, 0x0c, 0x43, 0x06, 0x00, 0x00, 0x00};
++ MakeOutgoingFrame(pOutBuffer+FrameLen, &TmpLen,
++ 9, RalinkIe,
++ END_OF_ARGS);
++ FrameLen += TmpLen;
++ }
++
++ if (pAd->MlmeAux.APEdcaParm.bValid)
++ {
++ if (pAd->CommonCfg.bAPSDCapable && pAd->MlmeAux.APEdcaParm.bAPSDCapable)
++ {
++ QBSS_STA_INFO_PARM QosInfo;
++
++ NdisZeroMemory(&QosInfo, sizeof(QBSS_STA_INFO_PARM));
++ QosInfo.UAPSD_AC_BE = pAd->CommonCfg.bAPSDAC_BE;
++ QosInfo.UAPSD_AC_BK = pAd->CommonCfg.bAPSDAC_BK;
++ QosInfo.UAPSD_AC_VI = pAd->CommonCfg.bAPSDAC_VI;
++ QosInfo.UAPSD_AC_VO = pAd->CommonCfg.bAPSDAC_VO;
++ QosInfo.MaxSPLength = pAd->CommonCfg.MaxSPLength;
++ WmeIe[8] |= *(PUCHAR)&QosInfo;
++ }
++ else
++ {
++ // The Parameter Set Count is set to ¡§0¡¨ in the association request frames
++ // WmeIe[8] |= (pAd->MlmeAux.APEdcaParm.EdcaUpdateCount & 0x0f);
++ }
++
++ MakeOutgoingFrame(pOutBuffer + FrameLen, &tmp,
++ 9, &WmeIe[0],
++ END_OF_ARGS);
++ FrameLen += tmp;
++ }
++
++ //
++ // Let WPA(#221) Element ID on the end of this association frame.
++ // Otherwise some AP will fail on parsing Element ID and set status fail on Assoc Rsp.
++ // For example: Put Vendor Specific IE on the front of WPA IE.
++ // This happens on AP (Model No:Linksys WRK54G)
++ //
++ if (((pAd->StaCfg.AuthMode == Ndis802_11AuthModeWPAPSK) ||
++ (pAd->StaCfg.AuthMode == Ndis802_11AuthModeWPA2PSK) ||
++ (pAd->StaCfg.AuthMode == Ndis802_11AuthModeWPA) ||
++ (pAd->StaCfg.AuthMode == Ndis802_11AuthModeWPA2)
++ )
++ )
++ {
++ UCHAR RSNIe = IE_WPA;
++
++ if ((pAd->StaCfg.AuthMode == Ndis802_11AuthModeWPA2PSK) ||
++ (pAd->StaCfg.AuthMode == Ndis802_11AuthModeWPA2))
++ {
++ RSNIe = IE_WPA2;
++ }
++
++ RTMPMakeRSNIE(pAd, pAd->StaCfg.AuthMode, pAd->StaCfg.WepStatus, BSS0);
++
++ // Check for WPA PMK cache list
++ if (pAd->StaCfg.AuthMode == Ndis802_11AuthModeWPA2)
++ {
++ INT idx;
++ BOOLEAN FoundPMK = FALSE;
++ // Search chched PMKID, append it if existed
++ for (idx = 0; idx < PMKID_NO; idx++)
++ {
++ if (NdisEqualMemory(ApAddr, &pAd->StaCfg.SavedPMK[idx].BSSID, 6))
++ {
++ FoundPMK = TRUE;
++ break;
++ }
++ }
++
++ if (FoundPMK)
++ {
++ // Set PMK number
++ *(PUSHORT) &pAd->StaCfg.RSN_IE[pAd->StaCfg.RSNIE_Len] = 1;
++ NdisMoveMemory(&pAd->StaCfg.RSN_IE[pAd->StaCfg.RSNIE_Len + 2], &pAd->StaCfg.SavedPMK[idx].PMKID, 16);
++ pAd->StaCfg.RSNIE_Len += 18;
++ }
++ }
++
++ {
++ MakeOutgoingFrame(pOutBuffer + FrameLen, &tmp,
++ 1, &RSNIe,
++ 1, &pAd->StaCfg.RSNIE_Len,
++ pAd->StaCfg.RSNIE_Len, pAd->StaCfg.RSN_IE,
++ END_OF_ARGS);
++ }
++
++ FrameLen += tmp;
++
++ {
++ // Append Variable IE
++ NdisMoveMemory(pAd->StaCfg.ReqVarIEs + VarIesOffset, &RSNIe, 1);
++ VarIesOffset += 1;
++ NdisMoveMemory(pAd->StaCfg.ReqVarIEs + VarIesOffset, &pAd->StaCfg.RSNIE_Len, 1);
++ VarIesOffset += 1;
++ }
++ NdisMoveMemory(pAd->StaCfg.ReqVarIEs + VarIesOffset, pAd->StaCfg.RSN_IE, pAd->StaCfg.RSNIE_Len);
++ VarIesOffset += pAd->StaCfg.RSNIE_Len;
++
++ // Set Variable IEs Length
++ pAd->StaCfg.ReqVarIELen = VarIesOffset;
++ }
++
++ // We have update that at PeerBeaconAtJoinRequest()
++ CkipFlag = pAd->StaCfg.CkipFlag;
++ if (CkipFlag != 0)
++ {
++ NdisZeroMemory(CkipNegotiationBuffer, CKIP_NEGOTIATION_LENGTH);
++ CkipNegotiationBuffer[2] = 0x66;
++ // Make it try KP & MIC, since we have to follow the result from AssocRsp
++ CkipNegotiationBuffer[8] = 0x18;
++ CkipNegotiationBuffer[CKIP_NEGOTIATION_LENGTH - 1] = 0x22;
++ CkipFlag = 0x18;
++
++ MakeOutgoingFrame(pOutBuffer + FrameLen, &tmp,
++ 1, &AironetCkipIe,
++ 1, &AironetCkipLen,
++ AironetCkipLen, CkipNegotiationBuffer,
++ END_OF_ARGS);
++ FrameLen += tmp;
++ }
++
++ // Add CCX v2 request if CCX2 admin state is on
++ if (pAd->StaCfg.CCXControl.field.Enable == 1)
++ {
++
++ //
++ // Add AironetIPAddressIE for Cisco CCX 2.X
++ // Add CCX Version
++ //
++ MakeOutgoingFrame(pOutBuffer + FrameLen, &tmp,
++ 1, &AironetIPAddressIE,
++ 1, &AironetIPAddressLen,
++ AironetIPAddressLen, AironetIPAddressBuffer,
++ 1, &Ccx2Ie,
++ 1, &Ccx2Len,
++ Ccx2Len, Ccx2IeInfo,
++ END_OF_ARGS);
++ FrameLen += tmp;
++
++ //
++ // Add CipherSuite CCKM or LeapTkip if setting.
++ //
++#ifdef LEAP_SUPPORT
++ if (LEAP_CCKM_ON(pAd))
++ {
++ MakeOutgoingFrame(pOutBuffer + FrameLen, &tmp,
++ CipherSuiteCiscoCCKMLen, CipherSuiteCiscoCCKM,
++ END_OF_ARGS);
++ FrameLen += tmp;
++
++ // Third add RSN
++ NdisMoveMemory(pAd->StaCfg.ReqVarIEs + VarIesOffset, CipherSuiteCiscoCCKM, CipherSuiteCiscoCCKMLen); //Save CipherSuite
++ VarIesOffset += CipherSuiteCiscoCCKMLen;
++ }
++ else if ((pAd->StaCfg.LeapAuthMode == CISCO_AuthModeLEAP) && (pAd->StaCfg.WepStatus == Ndis802_11Encryption2Enabled))
++ {
++ MakeOutgoingFrame(pOutBuffer + FrameLen, &tmp,
++ CipherSuiteCCXTkipLen, CipherSuiteCCXTkip,
++ END_OF_ARGS);
++ FrameLen += tmp;
++
++ // Third add RSN
++ NdisMoveMemory(pAd->StaCfg.ReqVarIEs + VarIesOffset, CipherSuiteCCXTkip, CipherSuiteCCXTkipLen);
++ VarIesOffset += CipherSuiteCCXTkipLen;
++ }
++#endif // LEAP_SUPPORT //
++
++ // Add by James 03/06/27
++ // Set Variable IEs Length
++ pAd->StaCfg.ReqVarIELen = VarIesOffset;
++ pAd->StaCfg.AssocInfo.RequestIELength = VarIesOffset;
++
++ // OffsetResponseIEs follow ReqVarIE
++ pAd->StaCfg.AssocInfo.OffsetResponseIEs = sizeof(NDIS_802_11_ASSOCIATION_INFORMATION) + pAd->StaCfg.ReqVarIELen;
++ // End Add by James
++ }
++
++
++ MiniportMMRequest(pAd, 0, pOutBuffer, FrameLen);
++ MlmeFreeMemory(pAd, pOutBuffer);
++
++ RTMPSetTimer(&pAd->MlmeAux.AssocTimer, Timeout);
++ pAd->Mlme.AssocMachine.CurrState = ASSOC_WAIT_RSP;
++ }
++ else
++ {
++ DBGPRINT(RT_DEBUG_TRACE,("ASSOC - MlmeAssocReqAction() sanity check failed. BUG!!!!!! \n"));
++ pAd->Mlme.AssocMachine.CurrState = ASSOC_IDLE;
++ Status = MLME_INVALID_FORMAT;
++ MlmeEnqueue(pAd, MLME_CNTL_STATE_MACHINE, MT2_ASSOC_CONF, 2, &Status);
++ }
++
++}
++
++/*
++ ==========================================================================
++ Description:
++ mlme reassoc req handling procedure
++ Parameters:
++ Elem -
++ Pre:
++ -# SSID (Adapter->StaCfg.ssid[])
++ -# BSSID (AP address, Adapter->StaCfg.bssid)
++ -# Supported rates (Adapter->StaCfg.supported_rates[])
++ -# Supported rates length (Adapter->StaCfg.supported_rates_len)
++ -# Tx power (Adapter->StaCfg.tx_power)
++
++ IRQL = DISPATCH_LEVEL
++
++ ==========================================================================
++ */
++VOID MlmeReassocReqAction(
++ IN PRTMP_ADAPTER pAd,
++ IN MLME_QUEUE_ELEM *Elem)
++{
++ UCHAR ApAddr[6];
++ HEADER_802_11 ReassocHdr;
++ UCHAR Ccx2Len = 5;
++ UCHAR WmeIe[9] = {IE_VENDOR_SPECIFIC, 0x07, 0x00, 0x50, 0xf2, 0x02, 0x00, 0x01, 0x00};
++ USHORT CapabilityInfo, ListenIntv;
++ ULONG Timeout;
++ ULONG FrameLen = 0;
++ BOOLEAN TimerCancelled;
++ NDIS_STATUS NStatus;
++ ULONG tmp;
++ PUCHAR pOutBuffer = NULL;
++//CCX 2.X
++#ifdef LEAP_SUPPORT
++ UCHAR CkipFlag;
++ UCHAR CkipNegotiationBuffer[CKIP_NEGOTIATION_LENGTH];
++ UCHAR AironetCkipIe = IE_AIRONET_CKIP;
++ UCHAR AironetCkipLen = CKIP_NEGOTIATION_LENGTH;
++ UCHAR AironetIPAddressIE = IE_AIRONET_IPADDRESS;
++ UCHAR AironetIPAddressLen = AIRONET_IPADDRESS_LENGTH;
++ UCHAR AironetIPAddressBuffer[AIRONET_IPADDRESS_LENGTH] = {0x00, 0x40, 0x96, 0x00, 0x00, 0x00, 0x00, 0x00, 0x02, 0x00};
++ UCHAR AironetCCKMReassocIE = IE_AIRONET_CCKMREASSOC;
++ UCHAR AironetCCKMReassocLen = AIRONET_CCKMREASSOC_LENGTH;
++ UCHAR AironetCCKMReassocBuffer[AIRONET_CCKMREASSOC_LENGTH];
++ UCHAR AironetOUI[] = {0x00, 0x40, 0x96, 0x00};
++ UCHAR MICMN[16];
++ UCHAR CalcMicBuffer[80];
++ ULONG CalcMicBufferLen = 0;
++#endif // LEAP_SUPPORT //
++ USHORT Status;
++
++ // Block all authentication request durning WPA block period
++ if (pAd->StaCfg.bBlockAssoc == TRUE)
++ {
++ DBGPRINT(RT_DEBUG_TRACE, ("ASSOC - Block ReAssoc request durning WPA block period!\n"));
++ pAd->Mlme.AssocMachine.CurrState = ASSOC_IDLE;
++ Status = MLME_STATE_MACHINE_REJECT;
++ MlmeEnqueue(pAd, MLME_CNTL_STATE_MACHINE, MT2_REASSOC_CONF, 2, &Status);
++ }
++ // the parameters are the same as the association
++ else if(MlmeAssocReqSanity(pAd, Elem->Msg, Elem->MsgLen, ApAddr, &CapabilityInfo, &Timeout, &ListenIntv))
++ {
++ RTMPCancelTimer(&pAd->MlmeAux.ReassocTimer, &TimerCancelled);
++
++ NStatus = MlmeAllocateMemory(pAd, &pOutBuffer); //Get an unused nonpaged memory
++ if(NStatus != NDIS_STATUS_SUCCESS)
++ {
++ DBGPRINT(RT_DEBUG_TRACE,("ASSOC - MlmeReassocReqAction() allocate memory failed \n"));
++ pAd->Mlme.AssocMachine.CurrState = ASSOC_IDLE;
++ Status = MLME_FAIL_NO_RESOURCE;
++ MlmeEnqueue(pAd, MLME_CNTL_STATE_MACHINE, MT2_REASSOC_CONF, 2, &Status);
++ return;
++ }
++
++ COPY_MAC_ADDR(pAd->MlmeAux.Bssid, ApAddr);
++
++ // make frame, use bssid as the AP address??
++ DBGPRINT(RT_DEBUG_TRACE, ("ASSOC - Send RE-ASSOC request...\n"));
++ MgtMacHeaderInit(pAd, &ReassocHdr, SUBTYPE_REASSOC_REQ, 0, ApAddr, ApAddr);
++ MakeOutgoingFrame(pOutBuffer, &FrameLen,
++ sizeof(HEADER_802_11), &ReassocHdr,
++ 2, &CapabilityInfo,
++ 2, &ListenIntv,
++ MAC_ADDR_LEN, ApAddr,
++ 1, &SsidIe,
++ 1, &pAd->MlmeAux.SsidLen,
++ pAd->MlmeAux.SsidLen, pAd->MlmeAux.Ssid,
++ 1, &SupRateIe,
++ 1, &pAd->MlmeAux.SupRateLen,
++ pAd->MlmeAux.SupRateLen, pAd->MlmeAux.SupRate,
++ END_OF_ARGS);
++
++ if (pAd->MlmeAux.ExtRateLen != 0)
++ {
++ MakeOutgoingFrame(pOutBuffer + FrameLen, &tmp,
++ 1, &ExtRateIe,
++ 1, &pAd->MlmeAux.ExtRateLen,
++ pAd->MlmeAux.ExtRateLen, pAd->MlmeAux.ExtRate,
++ END_OF_ARGS);
++ FrameLen += tmp;
++ }
++
++ if (pAd->MlmeAux.APEdcaParm.bValid)
++ {
++ if (pAd->CommonCfg.bAPSDCapable && pAd->MlmeAux.APEdcaParm.bAPSDCapable)
++ {
++ QBSS_STA_INFO_PARM QosInfo;
++
++ NdisZeroMemory(&QosInfo, sizeof(QBSS_STA_INFO_PARM));
++ QosInfo.UAPSD_AC_BE = pAd->CommonCfg.bAPSDAC_BE;
++ QosInfo.UAPSD_AC_BK = pAd->CommonCfg.bAPSDAC_BK;
++ QosInfo.UAPSD_AC_VI = pAd->CommonCfg.bAPSDAC_VI;
++ QosInfo.UAPSD_AC_VO = pAd->CommonCfg.bAPSDAC_VO;
++ QosInfo.MaxSPLength = pAd->CommonCfg.MaxSPLength;
++ WmeIe[8] |= *(PUCHAR)&QosInfo;
++ }
++
++ MakeOutgoingFrame(pOutBuffer + FrameLen, &tmp,
++ 9, &WmeIe[0],
++ END_OF_ARGS);
++ FrameLen += tmp;
++ }
++
++#ifdef DOT11_N_SUPPORT
++ // HT
++ if ((pAd->MlmeAux.HtCapabilityLen > 0) && (pAd->CommonCfg.PhyMode >= PHY_11ABGN_MIXED))
++ {
++ ULONG TmpLen;
++ UCHAR HtLen;
++ UCHAR BROADCOM[4] = {0x0, 0x90, 0x4c, 0x33};
++ if (pAd->StaActive.SupportedPhyInfo.bPreNHt == TRUE)
++ {
++ HtLen = SIZE_HT_CAP_IE + 4;
++ MakeOutgoingFrame(pOutBuffer + FrameLen, &TmpLen,
++ 1, &WpaIe,
++ 1, &HtLen,
++ 4, &BROADCOM[0],
++ pAd->MlmeAux.HtCapabilityLen, &pAd->MlmeAux.HtCapability,
++ END_OF_ARGS);
++ }
++ else
++ {
++ MakeOutgoingFrame(pOutBuffer + FrameLen, &TmpLen,
++ 1, &HtCapIe,
++ 1, &pAd->MlmeAux.HtCapabilityLen,
++ pAd->MlmeAux.HtCapabilityLen, &pAd->MlmeAux.HtCapability,
++ END_OF_ARGS);
++ }
++ FrameLen += TmpLen;
++ }
++#endif // DOT11_N_SUPPORT //
++
++ // add Ralink proprietary IE to inform AP this STA is going to use AGGREGATION or PIGGY-BACK+AGGREGATION
++ // Case I: (Aggregation + Piggy-Back)
++ // 1. user enable aggregation, AND
++ // 2. Mac support piggy-back
++ // 3. AP annouces it's PIGGY-BACK+AGGREGATION-capable in BEACON
++ // Case II: (Aggregation)
++ // 1. user enable aggregation, AND
++ // 2. AP annouces it's AGGREGATION-capable in BEACON
++ if (pAd->CommonCfg.bAggregationCapable)
++ {
++ if ((pAd->CommonCfg.bPiggyBackCapable) && ((pAd->MlmeAux.APRalinkIe & 0x00000003) == 3))
++ {
++ ULONG TmpLen;
++ UCHAR RalinkIe[9] = {IE_VENDOR_SPECIFIC, 7, 0x00, 0x0c, 0x43, 0x03, 0x00, 0x00, 0x00};
++ MakeOutgoingFrame(pOutBuffer+FrameLen, &TmpLen,
++ 9, RalinkIe,
++ END_OF_ARGS);
++ FrameLen += TmpLen;
++ }
++ else if (pAd->MlmeAux.APRalinkIe & 0x00000001)
++ {
++ ULONG TmpLen;
++ UCHAR RalinkIe[9] = {IE_VENDOR_SPECIFIC, 7, 0x00, 0x0c, 0x43, 0x01, 0x00, 0x00, 0x00};
++ MakeOutgoingFrame(pOutBuffer+FrameLen, &TmpLen,
++ 9, RalinkIe,
++ END_OF_ARGS);
++ FrameLen += TmpLen;
++ }
++ }
++ else
++ {
++ ULONG TmpLen;
++ UCHAR RalinkIe[9] = {IE_VENDOR_SPECIFIC, 7, 0x00, 0x0c, 0x43, 0x04, 0x00, 0x00, 0x00};
++ MakeOutgoingFrame(pOutBuffer+FrameLen, &TmpLen,
++ 9, RalinkIe,
++ END_OF_ARGS);
++ FrameLen += TmpLen;
++ }
++#ifdef LEAP_SUPPORT
++ if (LEAP_CCKM_ON(pAd) && (pAd->StaCfg.CCKMLinkUpFlag == TRUE))
++ {
++ CkipFlag = pAd->StaCfg.CkipFlag; // We have update that at PeerBeaconAtJoinRequest()
++ if (CkipFlag != 0)
++ {
++ NdisZeroMemory(CkipNegotiationBuffer, CKIP_NEGOTIATION_LENGTH);
++ CkipNegotiationBuffer[2] = 0x66;
++ // Make it try KP & MIC, since we have to follow the result from AssocRsp
++ CkipNegotiationBuffer[8] = 0x18;
++ CkipNegotiationBuffer[CKIP_NEGOTIATION_LENGTH - 1] = 0x22;
++
++ MakeOutgoingFrame(pOutBuffer + FrameLen, &tmp,
++ 1, &AironetCkipIe,
++ 1, &AironetCkipLen,
++ AironetCkipLen, CkipNegotiationBuffer,
++ END_OF_ARGS);
++ FrameLen += tmp;
++ }
++
++ MakeOutgoingFrame(pOutBuffer + FrameLen, &tmp,
++ 1, &AironetIPAddressIE,
++ 1, &AironetIPAddressLen,
++ AironetIPAddressLen, AironetIPAddressBuffer,
++ END_OF_ARGS);
++ FrameLen += tmp;
++
++ //
++ // The RN is incremented before each reassociation request.
++ //
++ pAd->StaCfg.CCKMRN++;
++ //
++ // Calculate MIC = hmac-md5(krk, STA-ID|BSSID|RSNIE|TSF|RN);
++ //
++ COPY_MAC_ADDR(CalcMicBuffer, pAd->CurrentAddress);
++ CalcMicBufferLen = MAC_ADDR_LEN;
++ COPY_MAC_ADDR(CalcMicBuffer + CalcMicBufferLen, pAd->MlmeAux.Bssid);
++ CalcMicBufferLen += MAC_ADDR_LEN;
++ NdisMoveMemory(CalcMicBuffer + CalcMicBufferLen, CipherSuiteCiscoCCKM, CipherSuiteCiscoCCKMLen);
++ CalcMicBufferLen += CipherSuiteCiscoCCKMLen;
++ NdisMoveMemory(CalcMicBuffer + CalcMicBufferLen, (PUCHAR) &pAd->StaCfg.CCKMBeaconAtJoinTimeStamp, sizeof(pAd->StaCfg.CCKMBeaconAtJoinTimeStamp));
++ CalcMicBufferLen += sizeof(pAd->StaCfg.CCKMBeaconAtJoinTimeStamp);
++ NdisMoveMemory(CalcMicBuffer + CalcMicBufferLen, (PUCHAR)&pAd->StaCfg.CCKMRN, sizeof(pAd->StaCfg.CCKMRN));
++ CalcMicBufferLen += sizeof(pAd->StaCfg.CCKMRN);
++ hmac_md5(pAd->StaCfg.KRK, LEN_EAP_MICK, CalcMicBuffer, CalcMicBufferLen, MICMN);
++
++ //
++ // fill up CCKM reassociation request element
++ //
++ NdisMoveMemory(AironetCCKMReassocBuffer, AironetOUI, 4);
++ NdisMoveMemory(AironetCCKMReassocBuffer + 4, (PUCHAR)&pAd->StaCfg.CCKMBeaconAtJoinTimeStamp, 8);
++ NdisMoveMemory(AironetCCKMReassocBuffer + 12, (PUCHAR) &pAd->StaCfg.CCKMRN, 4);
++ NdisMoveMemory(AironetCCKMReassocBuffer +16, MICMN, 8);
++
++ MakeOutgoingFrame(pOutBuffer + FrameLen, &tmp,
++ 1, &AironetCCKMReassocIE,
++ 1, &AironetCCKMReassocLen,
++ AironetCCKMReassocLen, AironetCCKMReassocBuffer,
++ END_OF_ARGS);
++ FrameLen += tmp;
++
++ MakeOutgoingFrame(pOutBuffer + FrameLen, &tmp,
++ CipherSuiteCiscoCCKMLen,CipherSuiteCiscoCCKM,
++ END_OF_ARGS);
++ FrameLen += tmp;
++ }
++#endif // LEAP_SUPPORT //
++
++ // Add CCX v2 request if CCX2 admin state is on
++ if (pAd->StaCfg.CCXControl.field.Enable == 1)
++ {
++ //
++ // Add CCX Version
++ //
++ MakeOutgoingFrame(pOutBuffer + FrameLen, &tmp,
++ 1, &Ccx2Ie,
++ 1, &Ccx2Len,
++ Ccx2Len, Ccx2IeInfo,
++ END_OF_ARGS);
++ FrameLen += tmp;
++ }
++
++ MiniportMMRequest(pAd, 0, pOutBuffer, FrameLen);
++ MlmeFreeMemory(pAd, pOutBuffer);
++
++ RTMPSetTimer(&pAd->MlmeAux.ReassocTimer, Timeout); /* in mSec */
++ pAd->Mlme.AssocMachine.CurrState = REASSOC_WAIT_RSP;
++ }
++ else
++ {
++ DBGPRINT(RT_DEBUG_TRACE,("ASSOC - MlmeReassocReqAction() sanity check failed. BUG!!!! \n"));
++ pAd->Mlme.AssocMachine.CurrState = ASSOC_IDLE;
++ Status = MLME_INVALID_FORMAT;
++ MlmeEnqueue(pAd, MLME_CNTL_STATE_MACHINE, MT2_REASSOC_CONF, 2, &Status);
++ }
++}
++
++/*
++ ==========================================================================
++ Description:
++ Upper layer issues disassoc request
++ Parameters:
++ Elem -
++
++ IRQL = PASSIVE_LEVEL
++
++ ==========================================================================
++ */
++VOID MlmeDisassocReqAction(
++ IN PRTMP_ADAPTER pAd,
++ IN MLME_QUEUE_ELEM *Elem)
++{
++ PMLME_DISASSOC_REQ_STRUCT pDisassocReq;
++ HEADER_802_11 DisassocHdr;
++ PHEADER_802_11 pDisassocHdr;
++ PUCHAR pOutBuffer = NULL;
++ ULONG FrameLen = 0;
++ NDIS_STATUS NStatus;
++ BOOLEAN TimerCancelled;
++ ULONG Timeout = 0;
++ USHORT Status;
++
++#ifdef QOS_DLS_SUPPORT
++ // send DLS-TEAR_DOWN message,
++ if (pAd->CommonCfg.bDLSCapable)
++ {
++ UCHAR i;
++
++ // tear down local dls table entry
++ for (i=0; i<MAX_NUM_OF_INIT_DLS_ENTRY; i++)
++ {
++ if (pAd->StaCfg.DLSEntry[i].Valid && (pAd->StaCfg.DLSEntry[i].Status == DLS_FINISH))
++ {
++ RTMPSendDLSTearDownFrame(pAd, pAd->StaCfg.DLSEntry[i].MacAddr);
++ pAd->StaCfg.DLSEntry[i].Status = DLS_NONE;
++ pAd->StaCfg.DLSEntry[i].Valid = FALSE;
++ }
++ }
++
++ // tear down peer dls table entry
++ for (i=MAX_NUM_OF_INIT_DLS_ENTRY; i<MAX_NUM_OF_DLS_ENTRY; i++)
++ {
++ if (pAd->StaCfg.DLSEntry[i].Valid && (pAd->StaCfg.DLSEntry[i].Status == DLS_FINISH))
++ {
++ RTMPSendDLSTearDownFrame(pAd, pAd->StaCfg.DLSEntry[i].MacAddr);
++ pAd->StaCfg.DLSEntry[i].Status = DLS_NONE;
++ pAd->StaCfg.DLSEntry[i].Valid = FALSE;
++ }
++ }
++ }
++#endif // QOS_DLS_SUPPORT //
++
++ // skip sanity check
++ pDisassocReq = (PMLME_DISASSOC_REQ_STRUCT)(Elem->Msg);
++
++ NStatus = MlmeAllocateMemory(pAd, &pOutBuffer); //Get an unused nonpaged memory
++ if (NStatus != NDIS_STATUS_SUCCESS)
++ {
++ DBGPRINT(RT_DEBUG_TRACE, ("ASSOC - MlmeDisassocReqAction() allocate memory failed\n"));
++ pAd->Mlme.AssocMachine.CurrState = ASSOC_IDLE;
++ Status = MLME_FAIL_NO_RESOURCE;
++ MlmeEnqueue(pAd, MLME_CNTL_STATE_MACHINE, MT2_DISASSOC_CONF, 2, &Status);
++ return;
++ }
++
++
++
++ RTMPCancelTimer(&pAd->MlmeAux.DisassocTimer, &TimerCancelled);
++
++ DBGPRINT(RT_DEBUG_TRACE, ("ASSOC - Send DISASSOC request[BSSID::%02x:%02x:%02x:%02x:%02x:%02x (Reason=%d)\n",
++ pDisassocReq->Addr[0], pDisassocReq->Addr[1], pDisassocReq->Addr[2],
++ pDisassocReq->Addr[3], pDisassocReq->Addr[4], pDisassocReq->Addr[5], pDisassocReq->Reason));
++ MgtMacHeaderInit(pAd, &DisassocHdr, SUBTYPE_DISASSOC, 0, pDisassocReq->Addr, pDisassocReq->Addr); // patch peap ttls switching issue
++ MakeOutgoingFrame(pOutBuffer, &FrameLen,
++ sizeof(HEADER_802_11),&DisassocHdr,
++ 2, &pDisassocReq->Reason,
++ END_OF_ARGS);
++ MiniportMMRequest(pAd, 0, pOutBuffer, FrameLen);
++
++ // To patch Instance and Buffalo(N) AP
++ // Driver has to send deauth to Instance AP, but Buffalo(N) needs to send disassoc to reset Authenticator's state machine
++ // Therefore, we send both of them.
++ pDisassocHdr = (PHEADER_802_11)pOutBuffer;
++ pDisassocHdr->FC.SubType = SUBTYPE_DEAUTH;
++ MiniportMMRequest(pAd, 0, pOutBuffer, FrameLen);
++
++ MlmeFreeMemory(pAd, pOutBuffer);
++
++ pAd->StaCfg.DisassocReason = REASON_DISASSOC_STA_LEAVING;
++ COPY_MAC_ADDR(pAd->StaCfg.DisassocSta, pDisassocReq->Addr);
++
++ RTMPSetTimer(&pAd->MlmeAux.DisassocTimer, Timeout); /* in mSec */
++ pAd->Mlme.AssocMachine.CurrState = DISASSOC_WAIT_RSP;
++
++#ifdef WPA_SUPPLICANT_SUPPORT
++#ifndef NATIVE_WPA_SUPPLICANT_SUPPORT
++ if (pAd->StaCfg.WpaSupplicantUP != WPA_SUPPLICANT_DISABLE)
++ {
++ union iwreq_data wrqu;
++ //send disassociate event to wpa_supplicant
++ memset(&wrqu, 0, sizeof(wrqu));
++ wrqu.data.flags = RT_DISASSOC_EVENT_FLAG;
++ wireless_send_event(pAd->net_dev, IWEVCUSTOM, &wrqu, NULL);
++ }
++#endif // NATIVE_WPA_SUPPLICANT_SUPPORT //
++#endif // WPA_SUPPLICANT_SUPPORT //
++
++#ifdef NATIVE_WPA_SUPPLICANT_SUPPORT
++ {
++ union iwreq_data wrqu;
++ memset(wrqu.ap_addr.sa_data, 0, MAC_ADDR_LEN);
++ wireless_send_event(pAd->net_dev, SIOCGIWAP, &wrqu, NULL);
++ }
++#endif // NATIVE_WPA_SUPPLICANT_SUPPORT //
++
++}
++
++/*
++ ==========================================================================
++ Description:
++ peer sends assoc rsp back
++ Parameters:
++ Elme - MLME message containing the received frame
++
++ IRQL = DISPATCH_LEVEL
++
++ ==========================================================================
++ */
++VOID PeerAssocRspAction(
++ IN PRTMP_ADAPTER pAd,
++ IN MLME_QUEUE_ELEM *Elem)
++{
++ USHORT CapabilityInfo, Status, Aid;
++ UCHAR SupRate[MAX_LEN_OF_SUPPORTED_RATES], SupRateLen;
++ UCHAR ExtRate[MAX_LEN_OF_SUPPORTED_RATES], ExtRateLen;
++ UCHAR Addr2[MAC_ADDR_LEN];
++ BOOLEAN TimerCancelled;
++ UCHAR CkipFlag;
++ EDCA_PARM EdcaParm;
++ HT_CAPABILITY_IE HtCapability;
++ ADD_HT_INFO_IE AddHtInfo; // AP might use this additional ht info IE
++ UCHAR HtCapabilityLen;
++ UCHAR AddHtInfoLen;
++ UCHAR NewExtChannelOffset = 0xff;
++
++ if (PeerAssocRspSanity(pAd, Elem->Msg, Elem->MsgLen, Addr2, &CapabilityInfo, &Status, &Aid, SupRate, &SupRateLen, ExtRate, &ExtRateLen,
++ &HtCapability,&AddHtInfo, &HtCapabilityLen,&AddHtInfoLen,&NewExtChannelOffset, &EdcaParm, &CkipFlag))
++ {
++ // The frame is for me ?
++ if(MAC_ADDR_EQUAL(Addr2, pAd->MlmeAux.Bssid))
++ {
++ DBGPRINT(RT_DEBUG_TRACE, ("PeerAssocRspAction():ASSOC - receive ASSOC_RSP to me (status=%d)\n", Status));
++#ifdef DOT11_N_SUPPORT
++ DBGPRINT(RT_DEBUG_TRACE, ("PeerAssocRspAction():MacTable [%d].AMsduSize = %d. ClientStatusFlags = 0x%lx \n",Elem->Wcid, pAd->MacTab.Content[BSSID_WCID].AMsduSize, pAd->MacTab.Content[BSSID_WCID].ClientStatusFlags));
++#endif // DOT11_N_SUPPORT //
++ RTMPCancelTimer(&pAd->MlmeAux.AssocTimer, &TimerCancelled);
++ if(Status == MLME_SUCCESS)
++ {
++ UCHAR MaxSupportedRateIn500Kbps = 0;
++ UCHAR idx;
++
++ // supported rates array may not be sorted. sort it and find the maximum rate
++ for (idx=0; idx<SupRateLen; idx++)
++ {
++ if (MaxSupportedRateIn500Kbps < (SupRate[idx] & 0x7f))
++ MaxSupportedRateIn500Kbps = SupRate[idx] & 0x7f;
++ }
++
++ for (idx=0; idx<ExtRateLen; idx++)
++ {
++ if (MaxSupportedRateIn500Kbps < (ExtRate[idx] & 0x7f))
++ MaxSupportedRateIn500Kbps = ExtRate[idx] & 0x7f;
++ }
++ // go to procedure listed on page 376
++ AssocPostProc(pAd, Addr2, CapabilityInfo, Aid, SupRate, SupRateLen, ExtRate, ExtRateLen,
++ &EdcaParm, &HtCapability, HtCapabilityLen, &AddHtInfo);
++
++ StaAddMacTableEntry(pAd, &pAd->MacTab.Content[BSSID_WCID], MaxSupportedRateIn500Kbps, &HtCapability, HtCapabilityLen, CapabilityInfo);
++
++ pAd->StaCfg.CkipFlag = CkipFlag;
++ if (CkipFlag & 0x18)
++ {
++ NdisZeroMemory(pAd->StaCfg.TxSEQ, 4);
++ NdisZeroMemory(pAd->StaCfg.RxSEQ, 4);
++ NdisZeroMemory(pAd->StaCfg.CKIPMIC, 4);
++ pAd->StaCfg.GIV[0] = RandomByte(pAd);
++ pAd->StaCfg.GIV[1] = RandomByte(pAd);
++ pAd->StaCfg.GIV[2] = RandomByte(pAd);
++ pAd->StaCfg.bCkipOn = TRUE;
++ DBGPRINT(RT_DEBUG_TRACE, ("<CCX> pAd->StaCfg.CkipFlag = 0x%02x\n", pAd->StaCfg.CkipFlag));
++ }
++ }
++ else
++ {
++ // Faile on Association, we need to check the status code
++ // Is that a Rogue AP?
++#ifdef LEAP_SUPPORT
++ if ((pAd->StaCfg.LeapAuthMode == CISCO_AuthModeLEAP) && (Status == MLME_ALG_NOT_SUPPORT))
++ { //Possibly Rogue AP
++ RogueApTableSetEntry(pAd, &pAd->StaCfg.RogueApTab, pAd->MlmeAux.Bssid, LEAP_REASON_INVALID_AUTH);
++ }
++#endif // LEAP_SUPPORT //
++ }
++ pAd->Mlme.AssocMachine.CurrState = ASSOC_IDLE;
++ MlmeEnqueue(pAd, MLME_CNTL_STATE_MACHINE, MT2_ASSOC_CONF, 2, &Status);
++ }
++ }
++ else
++ {
++ DBGPRINT(RT_DEBUG_TRACE, ("ASSOC - PeerAssocRspAction() sanity check fail\n"));
++ }
++}
++
++/*
++ ==========================================================================
++ Description:
++ peer sends reassoc rsp
++ Parametrs:
++ Elem - MLME message cntaining the received frame
++
++ IRQL = DISPATCH_LEVEL
++
++ ==========================================================================
++ */
++VOID PeerReassocRspAction(
++ IN PRTMP_ADAPTER pAd,
++ IN MLME_QUEUE_ELEM *Elem)
++{
++ USHORT CapabilityInfo;
++ USHORT Status;
++ USHORT Aid;
++ UCHAR SupRate[MAX_LEN_OF_SUPPORTED_RATES], SupRateLen;
++ UCHAR ExtRate[MAX_LEN_OF_SUPPORTED_RATES], ExtRateLen;
++ UCHAR Addr2[MAC_ADDR_LEN];
++ UCHAR CkipFlag;
++ BOOLEAN TimerCancelled;
++ EDCA_PARM EdcaParm;
++ HT_CAPABILITY_IE HtCapability;
++ ADD_HT_INFO_IE AddHtInfo; // AP might use this additional ht info IE
++ UCHAR HtCapabilityLen;
++ UCHAR AddHtInfoLen;
++ UCHAR NewExtChannelOffset = 0xff;
++
++ if(PeerAssocRspSanity(pAd, Elem->Msg, Elem->MsgLen, Addr2, &CapabilityInfo, &Status, &Aid, SupRate, &SupRateLen, ExtRate, &ExtRateLen,
++ &HtCapability, &AddHtInfo, &HtCapabilityLen, &AddHtInfoLen,&NewExtChannelOffset, &EdcaParm, &CkipFlag))
++ {
++ if(MAC_ADDR_EQUAL(Addr2, pAd->MlmeAux.Bssid)) // The frame is for me ?
++ {
++ DBGPRINT(RT_DEBUG_TRACE, ("ASSOC - receive REASSOC_RSP to me (status=%d)\n", Status));
++ RTMPCancelTimer(&pAd->MlmeAux.ReassocTimer, &TimerCancelled);
++
++ if(Status == MLME_SUCCESS)
++ {
++ // go to procedure listed on page 376
++ AssocPostProc(pAd, Addr2, CapabilityInfo, Aid, SupRate, SupRateLen, ExtRate, ExtRateLen,
++ &EdcaParm, &HtCapability, HtCapabilityLen, &AddHtInfo);
++
++#ifdef WPA_SUPPLICANT_SUPPORT
++#ifndef NATIVE_WPA_SUPPLICANT_SUPPORT
++ if (pAd->StaCfg.WpaSupplicantUP != WPA_SUPPLICANT_DISABLE)
++ {
++ union iwreq_data wrqu;
++
++ SendAssocIEsToWpaSupplicant(pAd);
++ memset(&wrqu, 0, sizeof(wrqu));
++ wrqu.data.flags = RT_ASSOC_EVENT_FLAG;
++ wireless_send_event(pAd->net_dev, IWEVCUSTOM, &wrqu, NULL);
++ }
++#endif // NATIVE_WPA_SUPPLICANT_SUPPORT //
++#endif // WPA_SUPPLICANT_SUPPORT //
++
++#ifdef NATIVE_WPA_SUPPLICANT_SUPPORT
++ {
++ union iwreq_data wrqu;
++ wext_notify_event_assoc(pAd);
++
++ memset(wrqu.ap_addr.sa_data, 0, MAC_ADDR_LEN);
++ memcpy(wrqu.ap_addr.sa_data, pAd->MlmeAux.Bssid, MAC_ADDR_LEN);
++ wireless_send_event(pAd->net_dev, SIOCGIWAP, &wrqu, NULL);
++
++ }
++#endif // NATIVE_WPA_SUPPLICANT_SUPPORT //
++
++ }
++
++ //
++ // Cisco Leap CCKM supported Re-association.
++ //
++#ifdef LEAP_SUPPORT
++ if (LEAP_CCKM_ON(pAd) && (pAd->StaCfg.CCKMLinkUpFlag == TRUE))
++ {
++ if (CCKMAssocRspSanity(pAd, Elem->Msg, Elem->MsgLen) == TRUE)
++ {
++ pAd->StaCfg.CkipFlag = CkipFlag;
++ if (CkipFlag & 0x18)
++ {
++ NdisZeroMemory(pAd->StaCfg.TxSEQ, 4);
++ NdisZeroMemory(pAd->StaCfg.RxSEQ, 4);
++ NdisZeroMemory(pAd->StaCfg.CKIPMIC, 4);
++ pAd->StaCfg.GIV[0] = RandomByte(pAd);
++ pAd->StaCfg.GIV[1] = RandomByte(pAd);
++ pAd->StaCfg.GIV[2] = RandomByte(pAd);
++ pAd->StaCfg.bCkipOn = TRUE;
++ DBGPRINT(RT_DEBUG_TRACE, ("<CCX> pAd->StaCfg.CkipFlag = 0x%02x\n", pAd->StaCfg.CkipFlag));
++ }
++
++ pAd->Mlme.AssocMachine.CurrState = ASSOC_IDLE;
++ MlmeEnqueue(pAd, MLME_CNTL_STATE_MACHINE, MT2_REASSOC_CONF, 2, &Status);
++ }
++ else
++ {
++ DBGPRINT(RT_DEBUG_TRACE, ("ASSOC - CCKMAssocRspSanity() sanity check fail\n"));
++ }
++ }
++ else
++#endif // LEAP_SUPPORT //
++ {
++ // CkipFlag is no use for reassociate
++ pAd->Mlme.AssocMachine.CurrState = ASSOC_IDLE;
++ MlmeEnqueue(pAd, MLME_CNTL_STATE_MACHINE, MT2_REASSOC_CONF, 2, &Status);
++ }
++ }
++ }
++ else
++ {
++ DBGPRINT(RT_DEBUG_TRACE, ("ASSOC - PeerReassocRspAction() sanity check fail\n"));
++ }
++
++}
++
++/*
++ ==========================================================================
++ Description:
++ procedures on IEEE 802.11/1999 p.376
++ Parametrs:
++
++ IRQL = DISPATCH_LEVEL
++
++ ==========================================================================
++ */
++VOID AssocPostProc(
++ IN PRTMP_ADAPTER pAd,
++ IN PUCHAR pAddr2,
++ IN USHORT CapabilityInfo,
++ IN USHORT Aid,
++ IN UCHAR SupRate[],
++ IN UCHAR SupRateLen,
++ IN UCHAR ExtRate[],
++ IN UCHAR ExtRateLen,
++ IN PEDCA_PARM pEdcaParm,
++ IN HT_CAPABILITY_IE *pHtCapability,
++ IN UCHAR HtCapabilityLen,
++ IN ADD_HT_INFO_IE *pAddHtInfo) // AP might use this additional ht info IE
++{
++ ULONG Idx;
++
++ pAd->MlmeAux.BssType = BSS_INFRA;
++ COPY_MAC_ADDR(pAd->MlmeAux.Bssid, pAddr2);
++ pAd->MlmeAux.Aid = Aid;
++ pAd->MlmeAux.CapabilityInfo = CapabilityInfo & SUPPORTED_CAPABILITY_INFO;
++#ifdef DOT11_N_SUPPORT
++ // Some HT AP might lost WMM IE. We add WMM ourselves. beacuase HT requires QoS on.
++ if ((HtCapabilityLen > 0) && (pEdcaParm->bValid == FALSE))
++ {
++ pEdcaParm->bValid = TRUE;
++ pEdcaParm->Aifsn[0] = 3;
++ pEdcaParm->Aifsn[1] = 7;
++ pEdcaParm->Aifsn[2] = 2;
++ pEdcaParm->Aifsn[3] = 2;
++
++ pEdcaParm->Cwmin[0] = 4;
++ pEdcaParm->Cwmin[1] = 4;
++ pEdcaParm->Cwmin[2] = 3;
++ pEdcaParm->Cwmin[3] = 2;
++
++ pEdcaParm->Cwmax[0] = 10;
++ pEdcaParm->Cwmax[1] = 10;
++ pEdcaParm->Cwmax[2] = 4;
++ pEdcaParm->Cwmax[3] = 3;
++
++ pEdcaParm->Txop[0] = 0;
++ pEdcaParm->Txop[1] = 0;
++ pEdcaParm->Txop[2] = 96;
++ pEdcaParm->Txop[3] = 48;
++
++ }
++#endif // DOT11_N_SUPPORT //
++
++ NdisMoveMemory(&pAd->MlmeAux.APEdcaParm, pEdcaParm, sizeof(EDCA_PARM));
++
++ // filter out un-supported rates
++ pAd->MlmeAux.SupRateLen = SupRateLen;
++ NdisMoveMemory(pAd->MlmeAux.SupRate, SupRate, SupRateLen);
++ RTMPCheckRates(pAd, pAd->MlmeAux.SupRate, &pAd->MlmeAux.SupRateLen);
++
++ // filter out un-supported rates
++ pAd->MlmeAux.ExtRateLen = ExtRateLen;
++ NdisMoveMemory(pAd->MlmeAux.ExtRate, ExtRate, ExtRateLen);
++ RTMPCheckRates(pAd, pAd->MlmeAux.ExtRate, &pAd->MlmeAux.ExtRateLen);
++
++#ifdef DOT11_N_SUPPORT
++ if (HtCapabilityLen > 0)
++ {
++ RTMPCheckHt(pAd, BSSID_WCID, pHtCapability, pAddHtInfo);
++ }
++ DBGPRINT(RT_DEBUG_TRACE, ("AssocPostProc===> AP.AMsduSize = %d. ClientStatusFlags = 0x%lx \n", pAd->MacTab.Content[BSSID_WCID].AMsduSize, pAd->MacTab.Content[BSSID_WCID].ClientStatusFlags));
++
++ DBGPRINT(RT_DEBUG_TRACE, ("AssocPostProc===> (Mmps=%d, AmsduSize=%d, )\n",
++ pAd->MacTab.Content[BSSID_WCID].MmpsMode, pAd->MacTab.Content[BSSID_WCID].AMsduSize));
++#endif // DOT11_N_SUPPORT //
++
++ // Set New WPA information
++ Idx = BssTableSearch(&pAd->ScanTab, pAddr2, pAd->MlmeAux.Channel);
++ if (Idx == BSS_NOT_FOUND)
++ {
++ DBGPRINT_ERR(("ASSOC - Can't find BSS after receiving Assoc response\n"));
++ }
++ else
++ {
++ // Init variable
++ pAd->MacTab.Content[BSSID_WCID].RSNIE_Len = 0;
++ NdisZeroMemory(pAd->MacTab.Content[BSSID_WCID].RSN_IE, MAX_LEN_OF_RSNIE);
++
++ // Store appropriate RSN_IE for WPA SM negotiation later
++ if ((pAd->StaCfg.AuthMode >= Ndis802_11AuthModeWPA) && (pAd->ScanTab.BssEntry[Idx].VarIELen != 0))
++ {
++ PUCHAR pVIE;
++ USHORT len;
++ PEID_STRUCT pEid;
++
++ pVIE = pAd->ScanTab.BssEntry[Idx].VarIEs;
++ len = pAd->ScanTab.BssEntry[Idx].VarIELen;
++
++ while (len > 0)
++ {
++ pEid = (PEID_STRUCT) pVIE;
++ // For WPA/WPAPSK
++ if ((pEid->Eid == IE_WPA) && (NdisEqualMemory(pEid->Octet, WPA_OUI, 4))
++ && (pAd->StaCfg.AuthMode == Ndis802_11AuthModeWPA || pAd->StaCfg.AuthMode == Ndis802_11AuthModeWPAPSK))
++ {
++ NdisMoveMemory(pAd->MacTab.Content[BSSID_WCID].RSN_IE, pVIE, (pEid->Len + 2));
++ pAd->MacTab.Content[BSSID_WCID].RSNIE_Len = (pEid->Len + 2);
++ DBGPRINT(RT_DEBUG_TRACE, ("AssocPostProc===> Store RSN_IE for WPA SM negotiation \n"));
++ }
++ // For WPA2/WPA2PSK
++ else if ((pEid->Eid == IE_RSN) && (NdisEqualMemory(pEid->Octet + 2, RSN_OUI, 3))
++ && (pAd->StaCfg.AuthMode == Ndis802_11AuthModeWPA2 || pAd->StaCfg.AuthMode == Ndis802_11AuthModeWPA2PSK))
++ {
++ NdisMoveMemory(pAd->MacTab.Content[BSSID_WCID].RSN_IE, pVIE, (pEid->Len + 2));
++ pAd->MacTab.Content[BSSID_WCID].RSNIE_Len = (pEid->Len + 2);
++ DBGPRINT(RT_DEBUG_TRACE, ("AssocPostProc===> Store RSN_IE for WPA2 SM negotiation \n"));
++ }
++
++ pVIE += (pEid->Len + 2);
++ len -= (pEid->Len + 2);
++ }
++ }
++
++ if (pAd->MacTab.Content[BSSID_WCID].RSNIE_Len == 0)
++ {
++ DBGPRINT(RT_DEBUG_TRACE, ("AssocPostProc===> no RSN_IE \n"));
++ }
++ else
++ {
++ hex_dump("RSN_IE", pAd->MacTab.Content[BSSID_WCID].RSN_IE, pAd->MacTab.Content[BSSID_WCID].RSNIE_Len);
++ }
++ }
++}
++
++/*
++ ==========================================================================
++ Description:
++ left part of IEEE 802.11/1999 p.374
++ Parameters:
++ Elem - MLME message containing the received frame
++
++ IRQL = DISPATCH_LEVEL
++
++ ==========================================================================
++ */
++VOID PeerDisassocAction(
++ IN PRTMP_ADAPTER pAd,
++ IN MLME_QUEUE_ELEM *Elem)
++{
++ UCHAR Addr2[MAC_ADDR_LEN];
++ USHORT Reason;
++
++ DBGPRINT(RT_DEBUG_TRACE, ("ASSOC - PeerDisassocAction()\n"));
++ if(PeerDisassocSanity(pAd, Elem->Msg, Elem->MsgLen, Addr2, &Reason))
++ {
++ DBGPRINT(RT_DEBUG_TRACE, ("ASSOC - PeerDisassocAction() Reason = %d\n", Reason));
++ if (INFRA_ON(pAd) && MAC_ADDR_EQUAL(pAd->CommonCfg.Bssid, Addr2))
++ {
++
++ if (pAd->CommonCfg.bWirelessEvent)
++ {
++ RTMPSendWirelessEvent(pAd, IW_DISASSOC_EVENT_FLAG, pAd->MacTab.Content[BSSID_WCID].Addr, BSS0, 0);
++ }
++
++
++#ifdef LEAP_SUPPORT
++ if (pAd->StaCfg.LeapAuthMode == CISCO_AuthModeLEAP)
++ {
++ // Cisco_LEAP has start a timer
++ // We should cancel it if using LEAP
++ RTMPCancelTimer(&pAd->StaCfg.LeapAuthTimer, &TimerCancelled);
++ //Check is it mach the LEAP Authentication failed as possible a Rogue AP
++ //on it's PortSecured not equal to WPA_802_1X_PORT_SECURED while process the Association.
++ if ((pAd->Mlme.LeapMachine.CurrState != LEAP_IDLE) && (pAd->StaCfg.PortSecured != WPA_802_1X_PORT_SECURED))
++ {
++ RogueApTableSetEntry(pAd, &pAd->StaCfg.RogueApTab, Addr2, LEAP_REASON_AUTH_TIMEOUT);
++ }
++ }
++#endif // LEAP_SUPPORT //
++ //
++ // Get Current System time and Turn on AdjacentAPReport
++ //
++ NdisGetSystemUpTime(&pAd->StaCfg.CCXAdjacentAPLinkDownTime);
++ pAd->StaCfg.CCXAdjacentAPReportFlag = TRUE;
++ LinkDown(pAd, TRUE);
++ pAd->Mlme.AssocMachine.CurrState = ASSOC_IDLE;
++
++#ifdef WPA_SUPPLICANT_SUPPORT
++#ifndef NATIVE_WPA_SUPPLICANT_SUPPORT
++ if (pAd->StaCfg.WpaSupplicantUP != WPA_SUPPLICANT_DISABLE)
++ {
++ union iwreq_data wrqu;
++ //send disassociate event to wpa_supplicant
++ memset(&wrqu, 0, sizeof(wrqu));
++ wrqu.data.flags = RT_DISASSOC_EVENT_FLAG;
++ wireless_send_event(pAd->net_dev, IWEVCUSTOM, &wrqu, NULL);
++ }
++#endif // NATIVE_WPA_SUPPLICANT_SUPPORT //
++#endif // WPA_SUPPLICANT_SUPPORT //
++
++#ifdef NATIVE_WPA_SUPPLICANT_SUPPORT
++ {
++ union iwreq_data wrqu;
++ memset(wrqu.ap_addr.sa_data, 0, MAC_ADDR_LEN);
++ wireless_send_event(pAd->net_dev, SIOCGIWAP, &wrqu, NULL);
++ }
++#endif // NATIVE_WPA_SUPPLICANT_SUPPORT //
++ }
++ }
++ else
++ {
++ DBGPRINT(RT_DEBUG_TRACE, ("ASSOC - PeerDisassocAction() sanity check fail\n"));
++ }
++
++}
++
++/*
++ ==========================================================================
++ Description:
++ what the state machine will do after assoc timeout
++ Parameters:
++ Elme -
++
++ IRQL = DISPATCH_LEVEL
++
++ ==========================================================================
++ */
++VOID AssocTimeoutAction(
++ IN PRTMP_ADAPTER pAd,
++ IN MLME_QUEUE_ELEM *Elem)
++{
++ USHORT Status;
++ DBGPRINT(RT_DEBUG_TRACE, ("ASSOC - AssocTimeoutAction\n"));
++ pAd->Mlme.AssocMachine.CurrState = ASSOC_IDLE;
++ Status = MLME_REJ_TIMEOUT;
++ MlmeEnqueue(pAd, MLME_CNTL_STATE_MACHINE, MT2_ASSOC_CONF, 2, &Status);
++}
++
++/*
++ ==========================================================================
++ Description:
++ what the state machine will do after reassoc timeout
++
++ IRQL = DISPATCH_LEVEL
++
++ ==========================================================================
++ */
++VOID ReassocTimeoutAction(
++ IN PRTMP_ADAPTER pAd,
++ IN MLME_QUEUE_ELEM *Elem)
++{
++ USHORT Status;
++ DBGPRINT(RT_DEBUG_TRACE, ("ASSOC - ReassocTimeoutAction\n"));
++ pAd->Mlme.AssocMachine.CurrState = ASSOC_IDLE;
++ Status = MLME_REJ_TIMEOUT;
++ MlmeEnqueue(pAd, MLME_CNTL_STATE_MACHINE, MT2_REASSOC_CONF, 2, &Status);
++}
++
++/*
++ ==========================================================================
++ Description:
++ what the state machine will do after disassoc timeout
++
++ IRQL = DISPATCH_LEVEL
++
++ ==========================================================================
++ */
++VOID DisassocTimeoutAction(
++ IN PRTMP_ADAPTER pAd,
++ IN MLME_QUEUE_ELEM *Elem)
++{
++ USHORT Status;
++ DBGPRINT(RT_DEBUG_TRACE, ("ASSOC - DisassocTimeoutAction\n"));
++ pAd->Mlme.AssocMachine.CurrState = ASSOC_IDLE;
++ Status = MLME_SUCCESS;
++ MlmeEnqueue(pAd, MLME_CNTL_STATE_MACHINE, MT2_DISASSOC_CONF, 2, &Status);
++}
++
++VOID InvalidStateWhenAssoc(
++ IN PRTMP_ADAPTER pAd,
++ IN MLME_QUEUE_ELEM *Elem)
++{
++ USHORT Status;
++ DBGPRINT(RT_DEBUG_TRACE, ("ASSOC - InvalidStateWhenAssoc(state=%ld), reset ASSOC state machine\n",
++ pAd->Mlme.AssocMachine.CurrState));
++ pAd->Mlme.AssocMachine.CurrState = ASSOC_IDLE;
++ Status = MLME_STATE_MACHINE_REJECT;
++ MlmeEnqueue(pAd, MLME_CNTL_STATE_MACHINE, MT2_ASSOC_CONF, 2, &Status);
++}
++
++VOID InvalidStateWhenReassoc(
++ IN PRTMP_ADAPTER pAd,
++ IN MLME_QUEUE_ELEM *Elem)
++{
++ USHORT Status;
++ DBGPRINT(RT_DEBUG_TRACE, ("ASSOC - InvalidStateWhenReassoc(state=%ld), reset ASSOC state machine\n",
++ pAd->Mlme.AssocMachine.CurrState));
++ pAd->Mlme.AssocMachine.CurrState = ASSOC_IDLE;
++ Status = MLME_STATE_MACHINE_REJECT;
++ MlmeEnqueue(pAd, MLME_CNTL_STATE_MACHINE, MT2_REASSOC_CONF, 2, &Status);
++}
++
++VOID InvalidStateWhenDisassociate(
++ IN PRTMP_ADAPTER pAd,
++ IN MLME_QUEUE_ELEM *Elem)
++{
++ USHORT Status;
++ DBGPRINT(RT_DEBUG_TRACE, ("ASSOC - InvalidStateWhenDisassoc(state=%ld), reset ASSOC state machine\n",
++ pAd->Mlme.AssocMachine.CurrState));
++ pAd->Mlme.AssocMachine.CurrState = ASSOC_IDLE;
++ Status = MLME_STATE_MACHINE_REJECT;
++ MlmeEnqueue(pAd, MLME_CNTL_STATE_MACHINE, MT2_DISASSOC_CONF, 2, &Status);
++}
++
++/*
++ ==========================================================================
++ Description:
++ right part of IEEE 802.11/1999 page 374
++ Note:
++ This event should never cause ASSOC state machine perform state
++ transition, and has no relationship with CNTL machine. So we separate
++ this routine as a service outside of ASSOC state transition table.
++
++ IRQL = DISPATCH_LEVEL
++
++ ==========================================================================
++ */
++VOID Cls3errAction(
++ IN PRTMP_ADAPTER pAd,
++ IN PUCHAR pAddr)
++{
++ HEADER_802_11 DisassocHdr;
++ PHEADER_802_11 pDisassocHdr;
++ PUCHAR pOutBuffer = NULL;
++ ULONG FrameLen = 0;
++ NDIS_STATUS NStatus;
++ USHORT Reason = REASON_CLS3ERR;
++
++ NStatus = MlmeAllocateMemory(pAd, &pOutBuffer); //Get an unused nonpaged memory
++ if (NStatus != NDIS_STATUS_SUCCESS)
++ return;
++
++ DBGPRINT(RT_DEBUG_TRACE, ("ASSOC - Class 3 Error, Send DISASSOC frame\n"));
++ MgtMacHeaderInit(pAd, &DisassocHdr, SUBTYPE_DISASSOC, 0, pAddr, pAd->CommonCfg.Bssid); // patch peap ttls switching issue
++ MakeOutgoingFrame(pOutBuffer, &FrameLen,
++ sizeof(HEADER_802_11),&DisassocHdr,
++ 2, &Reason,
++ END_OF_ARGS);
++ MiniportMMRequest(pAd, 0, pOutBuffer, FrameLen);
++
++ // To patch Instance and Buffalo(N) AP
++ // Driver has to send deauth to Instance AP, but Buffalo(N) needs to send disassoc to reset Authenticator's state machine
++ // Therefore, we send both of them.
++ pDisassocHdr = (PHEADER_802_11)pOutBuffer;
++ pDisassocHdr->FC.SubType = SUBTYPE_DEAUTH;
++ MiniportMMRequest(pAd, 0, pOutBuffer, FrameLen);
++
++ MlmeFreeMemory(pAd, pOutBuffer);
++
++ pAd->StaCfg.DisassocReason = REASON_CLS3ERR;
++ COPY_MAC_ADDR(pAd->StaCfg.DisassocSta, pAddr);
++}
++
++ /*
++ ==========================================================================
++ Description:
++ Switch between WEP and CKIP upon new association up.
++ Parameters:
++
++ IRQL = DISPATCH_LEVEL
++
++ ==========================================================================
++ */
++VOID SwitchBetweenWepAndCkip(
++ IN PRTMP_ADAPTER pAd)
++{
++ int i;
++ SHAREDKEY_MODE_STRUC csr1;
++
++ // if KP is required. change the CipherAlg in hardware shard key table from WEP
++ // to CKIP. else remain as WEP
++ if (pAd->StaCfg.bCkipOn && (pAd->StaCfg.CkipFlag & 0x10))
++ {
++ // modify hardware key table so that MAC use correct algorithm to decrypt RX
++ RTMP_IO_READ32(pAd, SHARED_KEY_MODE_BASE, &csr1.word);
++ if (csr1.field.Bss0Key0CipherAlg == CIPHER_WEP64)
++ csr1.field.Bss0Key0CipherAlg = CIPHER_CKIP64;
++ else if (csr1.field.Bss0Key0CipherAlg == CIPHER_WEP128)
++ csr1.field.Bss0Key0CipherAlg = CIPHER_CKIP128;
++
++ if (csr1.field.Bss0Key1CipherAlg == CIPHER_WEP64)
++ csr1.field.Bss0Key1CipherAlg = CIPHER_CKIP64;
++ else if (csr1.field.Bss0Key1CipherAlg == CIPHER_WEP128)
++ csr1.field.Bss0Key1CipherAlg = CIPHER_CKIP128;
++
++ if (csr1.field.Bss0Key2CipherAlg == CIPHER_WEP64)
++ csr1.field.Bss0Key2CipherAlg = CIPHER_CKIP64;
++ else if (csr1.field.Bss0Key2CipherAlg == CIPHER_WEP128)
++ csr1.field.Bss0Key2CipherAlg = CIPHER_CKIP128;
++
++ if (csr1.field.Bss0Key3CipherAlg == CIPHER_WEP64)
++ csr1.field.Bss0Key3CipherAlg = CIPHER_CKIP64;
++ else if (csr1.field.Bss0Key3CipherAlg == CIPHER_WEP128)
++ csr1.field.Bss0Key3CipherAlg = CIPHER_CKIP128;
++ RTMP_IO_WRITE32(pAd, SHARED_KEY_MODE_BASE, csr1.word);
++ DBGPRINT(RT_DEBUG_TRACE, ("SwitchBetweenWepAndCkip: modify BSS0 cipher to %s\n", CipherName[csr1.field.Bss0Key0CipherAlg]));
++
++ // modify software key table so that driver can specify correct algorithm in TXD upon TX
++ for (i=0; i<SHARE_KEY_NUM; i++)
++ {
++ if (pAd->SharedKey[BSS0][i].CipherAlg == CIPHER_WEP64)
++ pAd->SharedKey[BSS0][i].CipherAlg = CIPHER_CKIP64;
++ else if (pAd->SharedKey[BSS0][i].CipherAlg == CIPHER_WEP128)
++ pAd->SharedKey[BSS0][i].CipherAlg = CIPHER_CKIP128;
++ }
++ }
++
++ // else if KP NOT inused. change the CipherAlg in hardware shard key table from CKIP
++ // to WEP.
++ else
++ {
++ // modify hardware key table so that MAC use correct algorithm to decrypt RX
++ RTMP_IO_READ32(pAd, SHARED_KEY_MODE_BASE, &csr1.word);
++ if (csr1.field.Bss0Key0CipherAlg == CIPHER_CKIP64)
++ csr1.field.Bss0Key0CipherAlg = CIPHER_WEP64;
++ else if (csr1.field.Bss0Key0CipherAlg == CIPHER_CKIP128)
++ csr1.field.Bss0Key0CipherAlg = CIPHER_WEP128;
++
++ if (csr1.field.Bss0Key1CipherAlg == CIPHER_CKIP64)
++ csr1.field.Bss0Key1CipherAlg = CIPHER_WEP64;
++ else if (csr1.field.Bss0Key1CipherAlg == CIPHER_CKIP128)
++ csr1.field.Bss0Key1CipherAlg = CIPHER_WEP128;
++
++ if (csr1.field.Bss0Key2CipherAlg == CIPHER_CKIP64)
++ csr1.field.Bss0Key2CipherAlg = CIPHER_WEP64;
++ else if (csr1.field.Bss0Key2CipherAlg == CIPHER_CKIP128)
++ csr1.field.Bss0Key2CipherAlg = CIPHER_WEP128;
++
++ if (csr1.field.Bss0Key3CipherAlg == CIPHER_CKIP64)
++ csr1.field.Bss0Key3CipherAlg = CIPHER_WEP64;
++ else if (csr1.field.Bss0Key3CipherAlg == CIPHER_CKIP128)
++ csr1.field.Bss0Key3CipherAlg = CIPHER_WEP128;
++
++ // modify software key table so that driver can specify correct algorithm in TXD upon TX
++ for (i=0; i<SHARE_KEY_NUM; i++)
++ {
++ if (pAd->SharedKey[BSS0][i].CipherAlg == CIPHER_CKIP64)
++ pAd->SharedKey[BSS0][i].CipherAlg = CIPHER_WEP64;
++ else if (pAd->SharedKey[BSS0][i].CipherAlg == CIPHER_CKIP128)
++ pAd->SharedKey[BSS0][i].CipherAlg = CIPHER_WEP128;
++ }
++
++ //
++ // On WPA-NONE, must update CipherAlg.
++ // Because the OID_802_11_WEP_STATUS was been set after OID_802_11_ADD_KEY
++ // and CipherAlg will be CIPHER_NONE by Windows ZeroConfig.
++ // So we need to update CipherAlg after connect.
++ //
++ if (pAd->StaCfg.AuthMode == Ndis802_11AuthModeWPANone)
++ {
++ for (i = 0; i < SHARE_KEY_NUM; i++)
++ {
++ if (pAd->SharedKey[BSS0][i].KeyLen != 0)
++ {
++ if (pAd->StaCfg.WepStatus == Ndis802_11Encryption2Enabled)
++ {
++ pAd->SharedKey[BSS0][i].CipherAlg = CIPHER_TKIP;
++ }
++ else if (pAd->StaCfg.WepStatus == Ndis802_11Encryption3Enabled)
++ {
++ pAd->SharedKey[BSS0][i].CipherAlg = CIPHER_AES;
++ }
++ }
++ else
++ {
++ pAd->SharedKey[BSS0][i].CipherAlg = CIPHER_NONE;
++ }
++ }
++
++ csr1.field.Bss0Key0CipherAlg = pAd->SharedKey[BSS0][0].CipherAlg;
++ csr1.field.Bss0Key1CipherAlg = pAd->SharedKey[BSS0][1].CipherAlg;
++ csr1.field.Bss0Key2CipherAlg = pAd->SharedKey[BSS0][2].CipherAlg;
++ csr1.field.Bss0Key3CipherAlg = pAd->SharedKey[BSS0][3].CipherAlg;
++ }
++ RTMP_IO_WRITE32(pAd, SHARED_KEY_MODE_BASE, csr1.word);
++ DBGPRINT(RT_DEBUG_TRACE, ("SwitchBetweenWepAndCkip: modify BSS0 cipher to %s\n", CipherName[csr1.field.Bss0Key0CipherAlg]));
++ }
++}
++
++#ifdef WPA_SUPPLICANT_SUPPORT
++#ifndef NATIVE_WPA_SUPPLICANT_SUPPORT
++VOID SendAssocIEsToWpaSupplicant(
++ IN PRTMP_ADAPTER pAd)
++{
++ union iwreq_data wrqu;
++ unsigned char custom[IW_CUSTOM_MAX] = {0};
++
++ if ((pAd->StaCfg.ReqVarIELen + 17) <= IW_CUSTOM_MAX)
++ {
++ sprintf(custom, "ASSOCINFO_ReqIEs=");
++ NdisMoveMemory(custom+17, pAd->StaCfg.ReqVarIEs, pAd->StaCfg.ReqVarIELen);
++ memset(&wrqu, 0, sizeof(wrqu));
++ wrqu.data.length = pAd->StaCfg.ReqVarIELen + 17;
++ wrqu.data.flags = RT_REQIE_EVENT_FLAG;
++ wireless_send_event(pAd->net_dev, IWEVCUSTOM, &wrqu, custom);
++
++ memset(&wrqu, 0, sizeof(wrqu));
++ wrqu.data.flags = RT_ASSOCINFO_EVENT_FLAG;
++ wireless_send_event(pAd->net_dev, IWEVCUSTOM, &wrqu, NULL);
++ }
++ else
++ DBGPRINT(RT_DEBUG_TRACE, ("pAd->StaCfg.ReqVarIELen + 17 > MAX_CUSTOM_LEN\n"));
++
++ return;
++}
++#endif // NATIVE_WPA_SUPPLICANT_SUPPORT //
++#endif // WPA_SUPPLICANT_SUPPORT //
++
++#ifdef NATIVE_WPA_SUPPLICANT_SUPPORT
++int wext_notify_event_assoc(
++ IN RTMP_ADAPTER *pAd)
++{
++ union iwreq_data wrqu;
++ char custom[IW_CUSTOM_MAX] = {0};
++
++#if WIRELESS_EXT > 17
++ if (pAd->StaCfg.ReqVarIELen <= IW_CUSTOM_MAX)
++ {
++ wrqu.data.length = pAd->StaCfg.ReqVarIELen;
++ memcpy(custom, pAd->StaCfg.ReqVarIEs, pAd->StaCfg.ReqVarIELen);
++ wireless_send_event(pAd->net_dev, IWEVASSOCREQIE, &wrqu, custom);
++ }
++ else
++ DBGPRINT(RT_DEBUG_TRACE, ("pAd->StaCfg.ReqVarIELen > MAX_CUSTOM_LEN\n"));
++#else
++ if (((pAd->StaCfg.ReqVarIELen*2) + 17) <= IW_CUSTOM_MAX)
++ {
++ UCHAR idx;
++ wrqu.data.length = (pAd->StaCfg.ReqVarIELen*2) + 17;
++ sprintf(custom, "ASSOCINFO(ReqIEs=");
++ for (idx=0; idx<pAd->StaCfg.ReqVarIELen; idx++)
++ sprintf(custom, "%s%02x", custom, pAd->StaCfg.ReqVarIEs[idx]);
++ wireless_send_event(pAd->net_dev, IWEVCUSTOM, &wrqu, custom);
++ }
++ else
++ DBGPRINT(RT_DEBUG_TRACE, ("(pAd->StaCfg.ReqVarIELen*2) + 17 > MAX_CUSTOM_LEN\n"));
++#endif
++
++ return 0;
++
++}
++#endif // NATIVE_WPA_SUPPLICANT_SUPPORT //
++
++
++BOOLEAN StaAddMacTableEntry(
++ IN PRTMP_ADAPTER pAd,
++ IN PMAC_TABLE_ENTRY pEntry,
++ IN UCHAR MaxSupportedRateIn500Kbps,
++ IN HT_CAPABILITY_IE *pHtCapability,
++ IN UCHAR HtCapabilityLen,
++ IN USHORT CapabilityInfo)
++{
++ UCHAR MaxSupportedRate = RATE_11;
++
++ if (ADHOC_ON(pAd))
++ CLIENT_STATUS_CLEAR_FLAG(pEntry, fCLIENT_STATUS_WMM_CAPABLE);
++
++ switch (MaxSupportedRateIn500Kbps)
++ {
++ case 108: MaxSupportedRate = RATE_54; break;
++ case 96: MaxSupportedRate = RATE_48; break;
++ case 72: MaxSupportedRate = RATE_36; break;
++ case 48: MaxSupportedRate = RATE_24; break;
++ case 36: MaxSupportedRate = RATE_18; break;
++ case 24: MaxSupportedRate = RATE_12; break;
++ case 18: MaxSupportedRate = RATE_9; break;
++ case 12: MaxSupportedRate = RATE_6; break;
++ case 22: MaxSupportedRate = RATE_11; break;
++ case 11: MaxSupportedRate = RATE_5_5; break;
++ case 4: MaxSupportedRate = RATE_2; break;
++ case 2: MaxSupportedRate = RATE_1; break;
++ default: MaxSupportedRate = RATE_11; break;
++ }
++
++ if ((pAd->CommonCfg.PhyMode == PHY_11G) && (MaxSupportedRate < RATE_FIRST_OFDM_RATE))
++ return FALSE;
++
++#ifdef DOT11_N_SUPPORT
++ // 11n only
++ if (((pAd->CommonCfg.PhyMode == PHY_11N_2_4G) || (pAd->CommonCfg.PhyMode == PHY_11N_5G))&& (HtCapabilityLen == 0))
++ return FALSE;
++#endif // DOT11_N_SUPPORT //
++
++ if (!pEntry)
++ return FALSE;
++
++ NdisAcquireSpinLock(&pAd->MacTabLock);
++ if (pEntry)
++ {
++ pEntry->PortSecured = WPA_802_1X_PORT_SECURED;
++ if ((MaxSupportedRate < RATE_FIRST_OFDM_RATE) ||
++ (pAd->CommonCfg.PhyMode == PHY_11B))
++ {
++ pEntry->RateLen = 4;
++ if (MaxSupportedRate >= RATE_FIRST_OFDM_RATE)
++ MaxSupportedRate = RATE_11;
++ }
++ else
++ pEntry->RateLen = 12;
++
++ pEntry->MaxHTPhyMode.word = 0;
++ pEntry->MinHTPhyMode.word = 0;
++ pEntry->HTPhyMode.word = 0;
++ pEntry->MaxSupportedRate = MaxSupportedRate;
++ if (pEntry->MaxSupportedRate < RATE_FIRST_OFDM_RATE)
++ {
++ pEntry->MaxHTPhyMode.field.MODE = MODE_CCK;
++ pEntry->MaxHTPhyMode.field.MCS = pEntry->MaxSupportedRate;
++ pEntry->MinHTPhyMode.field.MODE = MODE_CCK;
++ pEntry->MinHTPhyMode.field.MCS = pEntry->MaxSupportedRate;
++ pEntry->HTPhyMode.field.MODE = MODE_CCK;
++ pEntry->HTPhyMode.field.MCS = pEntry->MaxSupportedRate;
++ }
++ else
++ {
++ pEntry->MaxHTPhyMode.field.MODE = MODE_OFDM;
++ pEntry->MaxHTPhyMode.field.MCS = OfdmRateToRxwiMCS[pEntry->MaxSupportedRate];
++ pEntry->MinHTPhyMode.field.MODE = MODE_OFDM;
++ pEntry->MinHTPhyMode.field.MCS = OfdmRateToRxwiMCS[pEntry->MaxSupportedRate];
++ pEntry->HTPhyMode.field.MODE = MODE_OFDM;
++ pEntry->HTPhyMode.field.MCS = OfdmRateToRxwiMCS[pEntry->MaxSupportedRate];
++ }
++ pEntry->CapabilityInfo = CapabilityInfo;
++ CLIENT_STATUS_CLEAR_FLAG(pEntry, fCLIENT_STATUS_AGGREGATION_CAPABLE);
++ CLIENT_STATUS_CLEAR_FLAG(pEntry, fCLIENT_STATUS_PIGGYBACK_CAPABLE);
++ }
++
++#ifdef DOT11_N_SUPPORT
++ // If this Entry supports 802.11n, upgrade to HT rate.
++ if ((HtCapabilityLen != 0) && (pAd->CommonCfg.PhyMode >= PHY_11ABGN_MIXED))
++ {
++ UCHAR j, bitmask; //k,bitmask;
++ CHAR i;
++
++ if (ADHOC_ON(pAd))
++ CLIENT_STATUS_SET_FLAG(pEntry, fCLIENT_STATUS_WMM_CAPABLE);
++ if ((pHtCapability->HtCapInfo.GF) && (pAd->CommonCfg.DesiredHtPhy.GF))
++ {
++ pEntry->MaxHTPhyMode.field.MODE = MODE_HTGREENFIELD;
++ }
++ else
++ {
++ pEntry->MaxHTPhyMode.field.MODE = MODE_HTMIX;
++ pAd->MacTab.fAnyStationNonGF = TRUE;
++ pAd->CommonCfg.AddHTInfo.AddHtInfo2.NonGfPresent = 1;
++ }
++
++ if ((pHtCapability->HtCapInfo.ChannelWidth) && (pAd->CommonCfg.DesiredHtPhy.ChannelWidth))
++ {
++ pEntry->MaxHTPhyMode.field.BW= BW_40;
++ pEntry->MaxHTPhyMode.field.ShortGI = ((pAd->CommonCfg.DesiredHtPhy.ShortGIfor40)&(pHtCapability->HtCapInfo.ShortGIfor40));
++ }
++ else
++ {
++ pEntry->MaxHTPhyMode.field.BW = BW_20;
++ pEntry->MaxHTPhyMode.field.ShortGI = ((pAd->CommonCfg.DesiredHtPhy.ShortGIfor20)&(pHtCapability->HtCapInfo.ShortGIfor20));
++ pAd->MacTab.fAnyStation20Only = TRUE;
++ }
++
++ // 3*3
++ if (pAd->MACVersion >= RALINK_2883_VERSION && pAd->MACVersion < RALINK_3070_VERSION)
++ pEntry->MaxHTPhyMode.field.TxBF = pAd->CommonCfg.RegTransmitSetting.field.TxBF;
++
++ // find max fixed rate
++ for (i=23; i>=0; i--) // 3*3
++ {
++ j = i/8;
++ bitmask = (1<<(i-(j*8)));
++ if ((pAd->StaCfg.DesiredHtPhyInfo.MCSSet[j] & bitmask) && (pHtCapability->MCSSet[j] & bitmask))
++ {
++ pEntry->MaxHTPhyMode.field.MCS = i;
++ break;
++ }
++ if (i==0)
++ break;
++ }
++
++
++ if (pAd->StaCfg.DesiredTransmitSetting.field.MCS != MCS_AUTO)
++ {
++ if (pAd->StaCfg.DesiredTransmitSetting.field.MCS == 32)
++ {
++ // Fix MCS as HT Duplicated Mode
++ pEntry->MaxHTPhyMode.field.BW = 1;
++ pEntry->MaxHTPhyMode.field.MODE = MODE_HTMIX;
++ pEntry->MaxHTPhyMode.field.STBC = 0;
++ pEntry->MaxHTPhyMode.field.ShortGI = 0;
++ pEntry->MaxHTPhyMode.field.MCS = 32;
++ }
++ else if (pEntry->MaxHTPhyMode.field.MCS > pAd->StaCfg.HTPhyMode.field.MCS)
++ {
++ // STA supports fixed MCS
++ pEntry->MaxHTPhyMode.field.MCS = pAd->StaCfg.HTPhyMode.field.MCS;
++ }
++ }
++
++ pEntry->MaxHTPhyMode.field.STBC = (pHtCapability->HtCapInfo.RxSTBC & (pAd->CommonCfg.DesiredHtPhy.TxSTBC));
++ pEntry->MpduDensity = pHtCapability->HtCapParm.MpduDensity;
++ pEntry->MaxRAmpduFactor = pHtCapability->HtCapParm.MaxRAmpduFactor;
++ pEntry->MmpsMode = (UCHAR)pHtCapability->HtCapInfo.MimoPs;
++ pEntry->AMsduSize = (UCHAR)pHtCapability->HtCapInfo.AMsduSize;
++ pEntry->HTPhyMode.word = pEntry->MaxHTPhyMode.word;
++
++ if (pAd->CommonCfg.DesiredHtPhy.AmsduEnable && (pAd->CommonCfg.REGBACapability.field.AutoBA == FALSE))
++ CLIENT_STATUS_SET_FLAG(pEntry, fCLIENT_STATUS_AMSDU_INUSED);
++ if (pHtCapability->HtCapInfo.ShortGIfor20)
++ CLIENT_STATUS_SET_FLAG(pEntry, fCLIENT_STATUS_SGI20_CAPABLE);
++ if (pHtCapability->HtCapInfo.ShortGIfor40)
++ CLIENT_STATUS_SET_FLAG(pEntry, fCLIENT_STATUS_SGI40_CAPABLE);
++ if (pHtCapability->HtCapInfo.TxSTBC)
++ CLIENT_STATUS_SET_FLAG(pEntry, fCLIENT_STATUS_TxSTBC_CAPABLE);
++ if (pHtCapability->HtCapInfo.RxSTBC)
++ CLIENT_STATUS_SET_FLAG(pEntry, fCLIENT_STATUS_RxSTBC_CAPABLE);
++ if (pHtCapability->ExtHtCapInfo.PlusHTC)
++ CLIENT_STATUS_SET_FLAG(pEntry, fCLIENT_STATUS_HTC_CAPABLE);
++ if (pAd->CommonCfg.bRdg && pHtCapability->ExtHtCapInfo.RDGSupport)
++ CLIENT_STATUS_SET_FLAG(pEntry, fCLIENT_STATUS_RDG_CAPABLE);
++ if (pHtCapability->ExtHtCapInfo.MCSFeedback == 0x03)
++ CLIENT_STATUS_SET_FLAG(pEntry, fCLIENT_STATUS_MCSFEEDBACK_CAPABLE);
++ }
++ else
++ {
++ pAd->MacTab.fAnyStationIsLegacy = TRUE;
++ }
++
++ NdisMoveMemory(&pEntry->HTCapability, pHtCapability, sizeof(HT_CAPABILITY_IE));
++#endif // DOT11_N_SUPPORT //
++
++ pEntry->HTPhyMode.word = pEntry->MaxHTPhyMode.word;
++ pEntry->CurrTxRate = pEntry->MaxSupportedRate;
++
++ // Set asic auto fall back
++ if (pAd->StaCfg.bAutoTxRateSwitch == TRUE)
++ {
++ PUCHAR pTable;
++ UCHAR TableSize = 0;
++
++ MlmeSelectTxRateTable(pAd, pEntry, &pTable, &TableSize, &pEntry->CurrTxRateIndex);
++ pEntry->bAutoTxRateSwitch = TRUE;
++ }
++ else
++ {
++ pEntry->HTPhyMode.field.MODE = pAd->StaCfg.HTPhyMode.field.MODE;
++ pEntry->HTPhyMode.field.MCS = pAd->StaCfg.HTPhyMode.field.MCS;
++ pEntry->bAutoTxRateSwitch = FALSE;
++
++ // If the legacy mode is set, overwrite the transmit setting of this entry.
++ RTMPUpdateLegacyTxSetting((UCHAR)pAd->StaCfg.DesiredTransmitSetting.field.FixedTxMode, pEntry);
++ }
++
++ pEntry->PortSecured = WPA_802_1X_PORT_SECURED;
++ pEntry->Sst = SST_ASSOC;
++ pEntry->AuthState = AS_AUTH_OPEN;
++ pEntry->AuthMode = pAd->StaCfg.AuthMode;
++ pEntry->WepStatus = pAd->StaCfg.WepStatus;
++
++ NdisReleaseSpinLock(&pAd->MacTabLock);
++
++#ifdef WPA_SUPPLICANT_SUPPORT
++#ifndef NATIVE_WPA_SUPPLICANT_SUPPORT
++ if (pAd->StaCfg.WpaSupplicantUP)
++ {
++ union iwreq_data wrqu;
++
++ SendAssocIEsToWpaSupplicant(pAd);
++ memset(&wrqu, 0, sizeof(wrqu));
++ wrqu.data.flags = RT_ASSOC_EVENT_FLAG;
++ wireless_send_event(pAd->net_dev, IWEVCUSTOM, &wrqu, NULL);
++ }
++#endif // NATIVE_WPA_SUPPLICANT_SUPPORT //
++#endif // WPA_SUPPLICANT_SUPPORT //
++
++#ifdef NATIVE_WPA_SUPPLICANT_SUPPORT
++ {
++ union iwreq_data wrqu;
++ wext_notify_event_assoc(pAd);
++
++ memset(wrqu.ap_addr.sa_data, 0, MAC_ADDR_LEN);
++ memcpy(wrqu.ap_addr.sa_data, pAd->MlmeAux.Bssid, MAC_ADDR_LEN);
++ wireless_send_event(pAd->net_dev, SIOCGIWAP, &wrqu, NULL);
++
++ }
++#endif // NATIVE_WPA_SUPPLICANT_SUPPORT //
++ return TRUE;
++}
++
++
+--- /dev/null
++++ b/drivers/staging/rt2870/sta/auth.c
+@@ -0,0 +1,474 @@
++/*
++ *************************************************************************
++ * Ralink Tech Inc.
++ * 5F., No.36, Taiyuan St., Jhubei City,
++ * Hsinchu County 302,
++ * Taiwan, R.O.C.
++ *
++ * (c) Copyright 2002-2007, Ralink Technology, Inc.
++ *
++ * This program is free software; you can redistribute it and/or modify *
++ * it under the terms of the GNU General Public License as published by *
++ * the Free Software Foundation; either version 2 of the License, or *
++ * (at your option) any later version. *
++ * *
++ * This program is distributed in the hope that it will be useful, *
++ * but WITHOUT ANY WARRANTY; without even the implied warranty of *
++ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the *
++ * GNU General Public License for more details. *
++ * *
++ * You should have received a copy of the GNU General Public License *
++ * along with this program; if not, write to the *
++ * Free Software Foundation, Inc., *
++ * 59 Temple Place - Suite 330, Boston, MA 02111-1307, USA. *
++ * *
++ *************************************************************************
++
++ Module Name:
++ auth.c
++
++ Abstract:
++
++ Revision History:
++ Who When What
++ -------- ---------- ----------------------------------------------
++ John 2004-9-3 porting from RT2500
++*/
++#include "../rt_config.h"
++
++/*
++ ==========================================================================
++ Description:
++ authenticate state machine init, including state transition and timer init
++ Parameters:
++ Sm - pointer to the auth state machine
++ Note:
++ The state machine looks like this
++
++ AUTH_REQ_IDLE AUTH_WAIT_SEQ2 AUTH_WAIT_SEQ4
++ MT2_MLME_AUTH_REQ mlme_auth_req_action invalid_state_when_auth invalid_state_when_auth
++ MT2_PEER_AUTH_EVEN drop peer_auth_even_at_seq2_action peer_auth_even_at_seq4_action
++ MT2_AUTH_TIMEOUT Drop auth_timeout_action auth_timeout_action
++
++ IRQL = PASSIVE_LEVEL
++
++ ==========================================================================
++ */
++
++void AuthStateMachineInit(
++ IN PRTMP_ADAPTER pAd,
++ IN STATE_MACHINE *Sm,
++ OUT STATE_MACHINE_FUNC Trans[])
++{
++ StateMachineInit(Sm, Trans, MAX_AUTH_STATE, MAX_AUTH_MSG, (STATE_MACHINE_FUNC)Drop, AUTH_REQ_IDLE, AUTH_MACHINE_BASE);
++
++ // the first column
++ StateMachineSetAction(Sm, AUTH_REQ_IDLE, MT2_MLME_AUTH_REQ, (STATE_MACHINE_FUNC)MlmeAuthReqAction);
++
++ // the second column
++ StateMachineSetAction(Sm, AUTH_WAIT_SEQ2, MT2_MLME_AUTH_REQ, (STATE_MACHINE_FUNC)InvalidStateWhenAuth);
++ StateMachineSetAction(Sm, AUTH_WAIT_SEQ2, MT2_PEER_AUTH_EVEN, (STATE_MACHINE_FUNC)PeerAuthRspAtSeq2Action);
++ StateMachineSetAction(Sm, AUTH_WAIT_SEQ2, MT2_AUTH_TIMEOUT, (STATE_MACHINE_FUNC)AuthTimeoutAction);
++
++ // the third column
++ StateMachineSetAction(Sm, AUTH_WAIT_SEQ4, MT2_MLME_AUTH_REQ, (STATE_MACHINE_FUNC)InvalidStateWhenAuth);
++ StateMachineSetAction(Sm, AUTH_WAIT_SEQ4, MT2_PEER_AUTH_EVEN, (STATE_MACHINE_FUNC)PeerAuthRspAtSeq4Action);
++ StateMachineSetAction(Sm, AUTH_WAIT_SEQ4, MT2_AUTH_TIMEOUT, (STATE_MACHINE_FUNC)AuthTimeoutAction);
++
++ RTMPInitTimer(pAd, &pAd->MlmeAux.AuthTimer, GET_TIMER_FUNCTION(AuthTimeout), pAd, FALSE);
++}
++
++/*
++ ==========================================================================
++ Description:
++ function to be executed at timer thread when auth timer expires
++
++ IRQL = DISPATCH_LEVEL
++
++ ==========================================================================
++ */
++VOID AuthTimeout(
++ IN PVOID SystemSpecific1,
++ IN PVOID FunctionContext,
++ IN PVOID SystemSpecific2,
++ IN PVOID SystemSpecific3)
++{
++ RTMP_ADAPTER *pAd = (RTMP_ADAPTER *)FunctionContext;
++
++ DBGPRINT(RT_DEBUG_TRACE,("AUTH - AuthTimeout\n"));
++
++ // Do nothing if the driver is starting halt state.
++ // This might happen when timer already been fired before cancel timer with mlmehalt
++ if (RTMP_TEST_FLAG(pAd, fRTMP_ADAPTER_HALT_IN_PROGRESS | fRTMP_ADAPTER_NIC_NOT_EXIST))
++ return;
++
++ // send a de-auth to reset AP's state machine (Patch AP-Dir635)
++ if (pAd->Mlme.AuthMachine.CurrState == AUTH_WAIT_SEQ2)
++ Cls2errAction(pAd, pAd->MlmeAux.Bssid);
++
++
++ MlmeEnqueue(pAd, AUTH_STATE_MACHINE, MT2_AUTH_TIMEOUT, 0, NULL);
++ RT28XX_MLME_HANDLER(pAd);
++}
++
++
++/*
++ ==========================================================================
++ Description:
++
++ IRQL = DISPATCH_LEVEL
++
++ ==========================================================================
++ */
++VOID MlmeAuthReqAction(
++ IN PRTMP_ADAPTER pAd,
++ IN MLME_QUEUE_ELEM *Elem)
++{
++ UCHAR Addr[6];
++ USHORT Alg, Seq, Status;
++ ULONG Timeout;
++ HEADER_802_11 AuthHdr;
++ BOOLEAN TimerCancelled;
++ NDIS_STATUS NStatus;
++ PUCHAR pOutBuffer = NULL;
++ ULONG FrameLen = 0;
++
++ // Block all authentication request durning WPA block period
++ if (pAd->StaCfg.bBlockAssoc == TRUE)
++ {
++ DBGPRINT(RT_DEBUG_TRACE, ("AUTH - Block Auth request durning WPA block period!\n"));
++ pAd->Mlme.AuthMachine.CurrState = AUTH_REQ_IDLE;
++ Status = MLME_STATE_MACHINE_REJECT;
++ MlmeEnqueue(pAd, MLME_CNTL_STATE_MACHINE, MT2_AUTH_CONF, 2, &Status);
++ }
++ else if(MlmeAuthReqSanity(pAd, Elem->Msg, Elem->MsgLen, Addr, &Timeout, &Alg))
++ {
++ // reset timer
++ RTMPCancelTimer(&pAd->MlmeAux.AuthTimer, &TimerCancelled);
++ COPY_MAC_ADDR(pAd->MlmeAux.Bssid, Addr);
++ pAd->MlmeAux.Alg = Alg;
++ Seq = 1;
++ Status = MLME_SUCCESS;
++
++ NStatus = MlmeAllocateMemory(pAd, &pOutBuffer); //Get an unused nonpaged memory
++ if(NStatus != NDIS_STATUS_SUCCESS)
++ {
++ DBGPRINT(RT_DEBUG_TRACE, ("AUTH - MlmeAuthReqAction(Alg:%d) allocate memory failed\n", Alg));
++ pAd->Mlme.AuthMachine.CurrState = AUTH_REQ_IDLE;
++ Status = MLME_FAIL_NO_RESOURCE;
++ MlmeEnqueue(pAd, MLME_CNTL_STATE_MACHINE, MT2_AUTH_CONF, 2, &Status);
++ return;
++ }
++
++ DBGPRINT(RT_DEBUG_TRACE, ("AUTH - Send AUTH request seq#1 (Alg=%d)...\n", Alg));
++ MgtMacHeaderInit(pAd, &AuthHdr, SUBTYPE_AUTH, 0, Addr, pAd->MlmeAux.Bssid);
++ MakeOutgoingFrame(pOutBuffer, &FrameLen,
++ sizeof(HEADER_802_11),&AuthHdr,
++ 2, &Alg,
++ 2, &Seq,
++ 2, &Status,
++ END_OF_ARGS);
++ MiniportMMRequest(pAd, 0, pOutBuffer, FrameLen);
++ MlmeFreeMemory(pAd, pOutBuffer);
++
++ RTMPSetTimer(&pAd->MlmeAux.AuthTimer, Timeout);
++ pAd->Mlme.AuthMachine.CurrState = AUTH_WAIT_SEQ2;
++ }
++ else
++ {
++ DBGPRINT_ERR(("AUTH - MlmeAuthReqAction() sanity check failed\n"));
++ pAd->Mlme.AuthMachine.CurrState = AUTH_REQ_IDLE;
++ Status = MLME_INVALID_FORMAT;
++ MlmeEnqueue(pAd, MLME_CNTL_STATE_MACHINE, MT2_AUTH_CONF, 2, &Status);
++ }
++}
++
++/*
++ ==========================================================================
++ Description:
++
++ IRQL = DISPATCH_LEVEL
++
++ ==========================================================================
++ */
++VOID PeerAuthRspAtSeq2Action(
++ IN PRTMP_ADAPTER pAd,
++ IN MLME_QUEUE_ELEM *Elem)
++{
++ UCHAR Addr2[MAC_ADDR_LEN];
++ USHORT Seq, Status, RemoteStatus, Alg;
++ UCHAR ChlgText[CIPHER_TEXT_LEN];
++ UCHAR CyperChlgText[CIPHER_TEXT_LEN + 8 + 8];
++ UCHAR Element[2];
++ HEADER_802_11 AuthHdr;
++ BOOLEAN TimerCancelled;
++ PUCHAR pOutBuffer = NULL;
++ NDIS_STATUS NStatus;
++ ULONG FrameLen = 0;
++ USHORT Status2;
++
++ if (PeerAuthSanity(pAd, Elem->Msg, Elem->MsgLen, Addr2, &Alg, &Seq, &Status, ChlgText))
++ {
++ if (MAC_ADDR_EQUAL(pAd->MlmeAux.Bssid, Addr2) && Seq == 2)
++ {
++ DBGPRINT(RT_DEBUG_TRACE, ("AUTH - Receive AUTH_RSP seq#2 to me (Alg=%d, Status=%d)\n", Alg, Status));
++ RTMPCancelTimer(&pAd->MlmeAux.AuthTimer, &TimerCancelled);
++
++ if (Status == MLME_SUCCESS)
++ {
++ // Authentication Mode "LEAP" has allow for CCX 1.X
++ if ((pAd->MlmeAux.Alg == Ndis802_11AuthModeOpen)
++#ifdef LEAP_SUPPORT
++ || (pAd->StaCfg.LeapAuthMode == CISCO_AuthModeLEAP)
++#endif // LEAP_SUPPORT //
++ )
++ {
++ pAd->Mlme.AuthMachine.CurrState = AUTH_REQ_IDLE;
++#ifdef LEAP_SUPPORT
++ pAd->Mlme.LeapMachine.CurrState = LEAP_IDLE;
++#endif // LEAP_SUPPORT //
++ MlmeEnqueue(pAd, MLME_CNTL_STATE_MACHINE, MT2_AUTH_CONF, 2, &Status);
++ }
++ else
++ {
++ // 2. shared key, need to be challenged
++ Seq++;
++ RemoteStatus = MLME_SUCCESS;
++
++ // Get an unused nonpaged memory
++ NStatus = MlmeAllocateMemory(pAd, &pOutBuffer);
++ if(NStatus != NDIS_STATUS_SUCCESS)
++ {
++ DBGPRINT(RT_DEBUG_TRACE, ("AUTH - PeerAuthRspAtSeq2Action() allocate memory fail\n"));
++ pAd->Mlme.AuthMachine.CurrState = AUTH_REQ_IDLE;
++ Status2 = MLME_FAIL_NO_RESOURCE;
++ MlmeEnqueue(pAd, MLME_CNTL_STATE_MACHINE, MT2_AUTH_CONF, 2, &Status2);
++ return;
++ }
++
++ DBGPRINT(RT_DEBUG_TRACE, ("AUTH - Send AUTH request seq#3...\n"));
++ MgtMacHeaderInit(pAd, &AuthHdr, SUBTYPE_AUTH, 0, Addr2, pAd->MlmeAux.Bssid);
++ AuthHdr.FC.Wep = 1;
++ // Encrypt challenge text & auth information
++ RTMPInitWepEngine(
++ pAd,
++ pAd->SharedKey[BSS0][pAd->StaCfg.DefaultKeyId].Key,
++ pAd->StaCfg.DefaultKeyId,
++ pAd->SharedKey[BSS0][pAd->StaCfg.DefaultKeyId].KeyLen,
++ CyperChlgText);
++
++ Alg = cpu2le16(*(USHORT *)&Alg);
++ Seq = cpu2le16(*(USHORT *)&Seq);
++ RemoteStatus= cpu2le16(*(USHORT *)&RemoteStatus);
++
++ RTMPEncryptData(pAd, (PUCHAR) &Alg, CyperChlgText + 4, 2);
++ RTMPEncryptData(pAd, (PUCHAR) &Seq, CyperChlgText + 6, 2);
++ RTMPEncryptData(pAd, (PUCHAR) &RemoteStatus, CyperChlgText + 8, 2);
++ Element[0] = 16;
++ Element[1] = 128;
++ RTMPEncryptData(pAd, Element, CyperChlgText + 10, 2);
++ RTMPEncryptData(pAd, ChlgText, CyperChlgText + 12, 128);
++ RTMPSetICV(pAd, CyperChlgText + 140);
++ MakeOutgoingFrame(pOutBuffer, &FrameLen,
++ sizeof(HEADER_802_11), &AuthHdr,
++ CIPHER_TEXT_LEN + 16, CyperChlgText,
++ END_OF_ARGS);
++ MiniportMMRequest(pAd, 0, pOutBuffer, FrameLen);
++ MlmeFreeMemory(pAd, pOutBuffer);
++
++ RTMPSetTimer(&pAd->MlmeAux.AuthTimer, AUTH_TIMEOUT);
++ pAd->Mlme.AuthMachine.CurrState = AUTH_WAIT_SEQ4;
++ }
++ }
++ else
++ {
++#ifdef LEAP_SUPPORT
++ if (pAd->StaCfg.LeapAuthMode == CISCO_AuthModeLEAP)
++ {
++ //Invalid Authentication possible rogue AP
++ //Add this Ap to Rogue AP.
++ RogueApTableSetEntry(pAd, &pAd->StaCfg.RogueApTab, Addr2, LEAP_REASON_INVALID_AUTH);
++ }
++#endif // LEAP_SUPPORT //
++ pAd->StaCfg.AuthFailReason = Status;
++ COPY_MAC_ADDR(pAd->StaCfg.AuthFailSta, Addr2);
++ pAd->Mlme.AuthMachine.CurrState = AUTH_REQ_IDLE;
++ MlmeEnqueue(pAd, MLME_CNTL_STATE_MACHINE, MT2_AUTH_CONF, 2, &Status);
++ }
++ }
++ }
++ else
++ {
++ DBGPRINT(RT_DEBUG_TRACE, ("AUTH - PeerAuthSanity() sanity check fail\n"));
++ }
++}
++
++/*
++ ==========================================================================
++ Description:
++
++ IRQL = DISPATCH_LEVEL
++
++ ==========================================================================
++ */
++VOID PeerAuthRspAtSeq4Action(
++ IN PRTMP_ADAPTER pAd,
++ IN MLME_QUEUE_ELEM *Elem)
++{
++ UCHAR Addr2[MAC_ADDR_LEN];
++ USHORT Alg, Seq, Status;
++ CHAR ChlgText[CIPHER_TEXT_LEN];
++ BOOLEAN TimerCancelled;
++
++ if(PeerAuthSanity(pAd, Elem->Msg, Elem->MsgLen, Addr2, &Alg, &Seq, &Status, ChlgText))
++ {
++ if(MAC_ADDR_EQUAL(pAd->MlmeAux.Bssid, Addr2) && Seq == 4)
++ {
++ DBGPRINT(RT_DEBUG_TRACE, ("AUTH - Receive AUTH_RSP seq#4 to me\n"));
++ RTMPCancelTimer(&pAd->MlmeAux.AuthTimer, &TimerCancelled);
++
++ if (Status != MLME_SUCCESS)
++ {
++ pAd->StaCfg.AuthFailReason = Status;
++ COPY_MAC_ADDR(pAd->StaCfg.AuthFailSta, Addr2);
++ }
++
++ pAd->Mlme.AuthMachine.CurrState = AUTH_REQ_IDLE;
++ MlmeEnqueue(pAd, MLME_CNTL_STATE_MACHINE, MT2_AUTH_CONF, 2, &Status);
++ }
++ }
++ else
++ {
++ DBGPRINT(RT_DEBUG_TRACE, ("AUTH - PeerAuthRspAtSeq4Action() sanity check fail\n"));
++ }
++}
++
++/*
++ ==========================================================================
++ Description:
++
++ IRQL = DISPATCH_LEVEL
++
++ ==========================================================================
++ */
++VOID MlmeDeauthReqAction(
++ IN PRTMP_ADAPTER pAd,
++ IN MLME_QUEUE_ELEM *Elem)
++{
++ MLME_DEAUTH_REQ_STRUCT *pInfo;
++ HEADER_802_11 DeauthHdr;
++ PUCHAR pOutBuffer = NULL;
++ NDIS_STATUS NStatus;
++ ULONG FrameLen = 0;
++ USHORT Status;
++
++ pInfo = (MLME_DEAUTH_REQ_STRUCT *)Elem->Msg;
++
++ NStatus = MlmeAllocateMemory(pAd, &pOutBuffer); //Get an unused nonpaged memory
++ if (NStatus != NDIS_STATUS_SUCCESS)
++ {
++ DBGPRINT(RT_DEBUG_TRACE, ("AUTH - MlmeDeauthReqAction() allocate memory fail\n"));
++ pAd->Mlme.AuthMachine.CurrState = AUTH_REQ_IDLE;
++ Status = MLME_FAIL_NO_RESOURCE;
++ MlmeEnqueue(pAd, MLME_CNTL_STATE_MACHINE, MT2_DEAUTH_CONF, 2, &Status);
++ return;
++ }
++
++ DBGPRINT(RT_DEBUG_TRACE, ("AUTH - Send DE-AUTH request (Reason=%d)...\n", pInfo->Reason));
++ MgtMacHeaderInit(pAd, &DeauthHdr, SUBTYPE_DEAUTH, 0, pInfo->Addr, pAd->MlmeAux.Bssid);
++ MakeOutgoingFrame(pOutBuffer, &FrameLen,
++ sizeof(HEADER_802_11),&DeauthHdr,
++ 2, &pInfo->Reason,
++ END_OF_ARGS);
++ MiniportMMRequest(pAd, 0, pOutBuffer, FrameLen);
++ MlmeFreeMemory(pAd, pOutBuffer);
++
++ pAd->StaCfg.DeauthReason = pInfo->Reason;
++ COPY_MAC_ADDR(pAd->StaCfg.DeauthSta, pInfo->Addr);
++ pAd->Mlme.AuthMachine.CurrState = AUTH_REQ_IDLE;
++ Status = MLME_SUCCESS;
++ MlmeEnqueue(pAd, MLME_CNTL_STATE_MACHINE, MT2_DEAUTH_CONF, 2, &Status);
++
++ // send wireless event - for deauthentication
++ if (pAd->CommonCfg.bWirelessEvent)
++ RTMPSendWirelessEvent(pAd, IW_DEAUTH_EVENT_FLAG, pAd->MacTab.Content[BSSID_WCID].Addr, BSS0, 0);
++}
++
++/*
++ ==========================================================================
++ Description:
++
++ IRQL = DISPATCH_LEVEL
++
++ ==========================================================================
++ */
++VOID AuthTimeoutAction(
++ IN PRTMP_ADAPTER pAd,
++ IN MLME_QUEUE_ELEM *Elem)
++{
++ USHORT Status;
++ DBGPRINT(RT_DEBUG_TRACE, ("AUTH - AuthTimeoutAction\n"));
++ pAd->Mlme.AuthMachine.CurrState = AUTH_REQ_IDLE;
++ Status = MLME_REJ_TIMEOUT;
++ MlmeEnqueue(pAd, MLME_CNTL_STATE_MACHINE, MT2_AUTH_CONF, 2, &Status);
++}
++
++/*
++ ==========================================================================
++ Description:
++
++ IRQL = DISPATCH_LEVEL
++
++ ==========================================================================
++ */
++VOID InvalidStateWhenAuth(
++ IN PRTMP_ADAPTER pAd,
++ IN MLME_QUEUE_ELEM *Elem)
++{
++ USHORT Status;
++ DBGPRINT(RT_DEBUG_TRACE, ("AUTH - InvalidStateWhenAuth (state=%ld), reset AUTH state machine\n", pAd->Mlme.AuthMachine.CurrState));
++ pAd->Mlme.AuthMachine.CurrState = AUTH_REQ_IDLE;
++ Status = MLME_STATE_MACHINE_REJECT;
++ MlmeEnqueue(pAd, MLME_CNTL_STATE_MACHINE, MT2_AUTH_CONF, 2, &Status);
++}
++
++/*
++ ==========================================================================
++ Description:
++ Some STA/AP
++ Note:
++ This action should never trigger AUTH state transition, therefore we
++ separate it from AUTH state machine, and make it as a standalone service
++
++ IRQL = DISPATCH_LEVEL
++
++ ==========================================================================
++ */
++VOID Cls2errAction(
++ IN PRTMP_ADAPTER pAd,
++ IN PUCHAR pAddr)
++{
++ HEADER_802_11 DeauthHdr;
++ PUCHAR pOutBuffer = NULL;
++ NDIS_STATUS NStatus;
++ ULONG FrameLen = 0;
++ USHORT Reason = REASON_CLS2ERR;
++
++ NStatus = MlmeAllocateMemory(pAd, &pOutBuffer); //Get an unused nonpaged memory
++ if (NStatus != NDIS_STATUS_SUCCESS)
++ return;
++
++ DBGPRINT(RT_DEBUG_TRACE, ("AUTH - Class 2 error, Send DEAUTH frame...\n"));
++ MgtMacHeaderInit(pAd, &DeauthHdr, SUBTYPE_DEAUTH, 0, pAddr, pAd->MlmeAux.Bssid);
++ MakeOutgoingFrame(pOutBuffer, &FrameLen,
++ sizeof(HEADER_802_11),&DeauthHdr,
++ 2, &Reason,
++ END_OF_ARGS);
++ MiniportMMRequest(pAd, 0, pOutBuffer, FrameLen);
++ MlmeFreeMemory(pAd, pOutBuffer);
++
++ pAd->StaCfg.DeauthReason = Reason;
++ COPY_MAC_ADDR(pAd->StaCfg.DeauthSta, pAddr);
++}
++
++
+--- /dev/null
++++ b/drivers/staging/rt2870/sta/auth_rsp.c
+@@ -0,0 +1,166 @@
++/*
++ *************************************************************************
++ * Ralink Tech Inc.
++ * 5F., No.36, Taiyuan St., Jhubei City,
++ * Hsinchu County 302,
++ * Taiwan, R.O.C.
++ *
++ * (c) Copyright 2002-2007, Ralink Technology, Inc.
++ *
++ * This program is free software; you can redistribute it and/or modify *
++ * it under the terms of the GNU General Public License as published by *
++ * the Free Software Foundation; either version 2 of the License, or *
++ * (at your option) any later version. *
++ * *
++ * This program is distributed in the hope that it will be useful, *
++ * but WITHOUT ANY WARRANTY; without even the implied warranty of *
++ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the *
++ * GNU General Public License for more details. *
++ * *
++ * You should have received a copy of the GNU General Public License *
++ * along with this program; if not, write to the *
++ * Free Software Foundation, Inc., *
++ * 59 Temple Place - Suite 330, Boston, MA 02111-1307, USA. *
++ * *
++ *************************************************************************
++
++ Module Name:
++ auth_rsp.c
++
++ Abstract:
++
++ Revision History:
++ Who When What
++ -------- ---------- ----------------------------------------------
++ John 2004-10-1 copy from RT2560
++*/
++#include "../rt_config.h"
++
++/*
++ ==========================================================================
++ Description:
++ authentication state machine init procedure
++ Parameters:
++ Sm - the state machine
++
++ IRQL = PASSIVE_LEVEL
++
++ ==========================================================================
++ */
++VOID AuthRspStateMachineInit(
++ IN PRTMP_ADAPTER pAd,
++ IN PSTATE_MACHINE Sm,
++ IN STATE_MACHINE_FUNC Trans[])
++{
++ StateMachineInit(Sm, Trans, MAX_AUTH_RSP_STATE, MAX_AUTH_RSP_MSG, (STATE_MACHINE_FUNC)Drop, AUTH_RSP_IDLE, AUTH_RSP_MACHINE_BASE);
++
++ // column 1
++ StateMachineSetAction(Sm, AUTH_RSP_IDLE, MT2_PEER_DEAUTH, (STATE_MACHINE_FUNC)PeerDeauthAction);
++
++ // column 2
++ StateMachineSetAction(Sm, AUTH_RSP_WAIT_CHAL, MT2_PEER_DEAUTH, (STATE_MACHINE_FUNC)PeerDeauthAction);
++
++}
++
++/*
++ ==========================================================================
++ Description:
++
++ IRQL = DISPATCH_LEVEL
++
++ ==========================================================================
++*/
++VOID PeerAuthSimpleRspGenAndSend(
++ IN PRTMP_ADAPTER pAd,
++ IN PHEADER_802_11 pHdr80211,
++ IN USHORT Alg,
++ IN USHORT Seq,
++ IN USHORT Reason,
++ IN USHORT Status)
++{
++ HEADER_802_11 AuthHdr;
++ ULONG FrameLen = 0;
++ PUCHAR pOutBuffer = NULL;
++ NDIS_STATUS NStatus;
++
++ if (Reason != MLME_SUCCESS)
++ {
++ DBGPRINT(RT_DEBUG_TRACE, ("Peer AUTH fail...\n"));
++ return;
++ }
++
++ //Get an unused nonpaged memory
++ NStatus = MlmeAllocateMemory(pAd, &pOutBuffer);
++ if (NStatus != NDIS_STATUS_SUCCESS)
++ return;
++
++ DBGPRINT(RT_DEBUG_TRACE, ("Send AUTH response (seq#2)...\n"));
++ MgtMacHeaderInit(pAd, &AuthHdr, SUBTYPE_AUTH, 0, pHdr80211->Addr2, pAd->MlmeAux.Bssid);
++ MakeOutgoingFrame(pOutBuffer, &FrameLen,
++ sizeof(HEADER_802_11), &AuthHdr,
++ 2, &Alg,
++ 2, &Seq,
++ 2, &Reason,
++ END_OF_ARGS);
++ MiniportMMRequest(pAd, 0, pOutBuffer, FrameLen);
++ MlmeFreeMemory(pAd, pOutBuffer);
++}
++
++/*
++ ==========================================================================
++ Description:
++
++ IRQL = DISPATCH_LEVEL
++
++ ==========================================================================
++*/
++VOID PeerDeauthAction(
++ IN PRTMP_ADAPTER pAd,
++ IN PMLME_QUEUE_ELEM Elem)
++{
++ UCHAR Addr2[MAC_ADDR_LEN];
++ USHORT Reason;
++
++ if (PeerDeauthSanity(pAd, Elem->Msg, Elem->MsgLen, Addr2, &Reason))
++ {
++ if (INFRA_ON(pAd) && MAC_ADDR_EQUAL(Addr2, pAd->CommonCfg.Bssid))
++ {
++ DBGPRINT(RT_DEBUG_TRACE,("AUTH_RSP - receive DE-AUTH from our AP (Reason=%d)\n", Reason));
++
++#ifdef NATIVE_WPA_SUPPLICANT_SUPPORT
++ {
++ union iwreq_data wrqu;
++ memset(wrqu.ap_addr.sa_data, 0, MAC_ADDR_LEN);
++ wireless_send_event(pAd->net_dev, SIOCGIWAP, &wrqu, NULL);
++ }
++#endif // NATIVE_WPA_SUPPLICANT_SUPPORT //
++
++
++ // send wireless event - for deauthentication
++ if (pAd->CommonCfg.bWirelessEvent)
++ RTMPSendWirelessEvent(pAd, IW_DEAUTH_EVENT_FLAG, pAd->MacTab.Content[BSSID_WCID].Addr, BSS0, 0);
++
++ LinkDown(pAd, TRUE);
++
++ // Authentication Mode Cisco_LEAP has start a timer
++ // We should cancel it if using LEAP
++#ifdef LEAP_SUPPORT
++ if (pAd->StaCfg.LeapAuthMode == CISCO_AuthModeLEAP)
++ {
++ RTMPCancelTimer(&pAd->StaCfg.LeapAuthTimer, &TimerCancelled);
++ //Check is it mach the LEAP Authentication failed as possible a Rogue AP
++ //on it's PortSecured not equal to WPA_802_1X_PORT_SECURED while process the Authenticaton.
++ if ((pAd->StaCfg.PortSecured != WPA_802_1X_PORT_SECURED) && (pAd->Mlme.LeapMachine.CurrState != LEAP_IDLE))
++ {
++ RogueApTableSetEntry(pAd, &pAd->StaCfg.RogueApTab, Addr2, LEAP_REASON_AUTH_TIMEOUT);
++ }
++ }
++#endif // LEAP_SUPPORT //
++ }
++ }
++ else
++ {
++ DBGPRINT(RT_DEBUG_TRACE,("AUTH_RSP - PeerDeauthAction() sanity check fail\n"));
++ }
++}
++
+--- /dev/null
++++ b/drivers/staging/rt2870/sta/connect.c
+@@ -0,0 +1,2822 @@
++/*
++ *************************************************************************
++ * Ralink Tech Inc.
++ * 5F., No.36, Taiyuan St., Jhubei City,
++ * Hsinchu County 302,
++ * Taiwan, R.O.C.
++ *
++ * (c) Copyright 2002-2007, Ralink Technology, Inc.
++ *
++ * This program is free software; you can redistribute it and/or modify *
++ * it under the terms of the GNU General Public License as published by *
++ * the Free Software Foundation; either version 2 of the License, or *
++ * (at your option) any later version. *
++ * *
++ * This program is distributed in the hope that it will be useful, *
++ * but WITHOUT ANY WARRANTY; without even the implied warranty of *
++ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the *
++ * GNU General Public License for more details. *
++ * *
++ * You should have received a copy of the GNU General Public License *
++ * along with this program; if not, write to the *
++ * Free Software Foundation, Inc., *
++ * 59 Temple Place - Suite 330, Boston, MA 02111-1307, USA. *
++ * *
++ *************************************************************************
++
++ Module Name:
++ connect.c
++
++ Abstract:
++
++ Revision History:
++ Who When What
++ -------- ---------- ----------------------------------------------
++ John 2004-08-08 Major modification from RT2560
++*/
++#include "../rt_config.h"
++
++UCHAR CipherSuiteWpaNoneTkip[] = {
++ 0x00, 0x50, 0xf2, 0x01, // oui
++ 0x01, 0x00, // Version
++ 0x00, 0x50, 0xf2, 0x02, // Multicast
++ 0x01, 0x00, // Number of unicast
++ 0x00, 0x50, 0xf2, 0x02, // unicast
++ 0x01, 0x00, // number of authentication method
++ 0x00, 0x50, 0xf2, 0x00 // authentication
++ };
++UCHAR CipherSuiteWpaNoneTkipLen = (sizeof(CipherSuiteWpaNoneTkip) / sizeof(UCHAR));
++
++UCHAR CipherSuiteWpaNoneAes[] = {
++ 0x00, 0x50, 0xf2, 0x01, // oui
++ 0x01, 0x00, // Version
++ 0x00, 0x50, 0xf2, 0x04, // Multicast
++ 0x01, 0x00, // Number of unicast
++ 0x00, 0x50, 0xf2, 0x04, // unicast
++ 0x01, 0x00, // number of authentication method
++ 0x00, 0x50, 0xf2, 0x00 // authentication
++ };
++UCHAR CipherSuiteWpaNoneAesLen = (sizeof(CipherSuiteWpaNoneAes) / sizeof(UCHAR));
++
++// The following MACRO is called after 1. starting an new IBSS, 2. succesfully JOIN an IBSS,
++// or 3. succesfully ASSOCIATE to a BSS, 4. successfully RE_ASSOCIATE to a BSS
++// All settings successfuly negotiated furing MLME state machines become final settings
++// and are copied to pAd->StaActive
++#define COPY_SETTINGS_FROM_MLME_AUX_TO_ACTIVE_CFG(_pAd) \
++{ \
++ (_pAd)->CommonCfg.SsidLen = (_pAd)->MlmeAux.SsidLen; \
++ NdisMoveMemory((_pAd)->CommonCfg.Ssid, (_pAd)->MlmeAux.Ssid, (_pAd)->MlmeAux.SsidLen); \
++ COPY_MAC_ADDR((_pAd)->CommonCfg.Bssid, (_pAd)->MlmeAux.Bssid); \
++ (_pAd)->CommonCfg.Channel = (_pAd)->MlmeAux.Channel; \
++ (_pAd)->CommonCfg.CentralChannel = (_pAd)->MlmeAux.CentralChannel; \
++ (_pAd)->StaActive.Aid = (_pAd)->MlmeAux.Aid; \
++ (_pAd)->StaActive.AtimWin = (_pAd)->MlmeAux.AtimWin; \
++ (_pAd)->StaActive.CapabilityInfo = (_pAd)->MlmeAux.CapabilityInfo; \
++ (_pAd)->CommonCfg.BeaconPeriod = (_pAd)->MlmeAux.BeaconPeriod; \
++ (_pAd)->StaActive.CfpMaxDuration = (_pAd)->MlmeAux.CfpMaxDuration; \
++ (_pAd)->StaActive.CfpPeriod = (_pAd)->MlmeAux.CfpPeriod; \
++ (_pAd)->StaActive.SupRateLen = (_pAd)->MlmeAux.SupRateLen; \
++ NdisMoveMemory((_pAd)->StaActive.SupRate, (_pAd)->MlmeAux.SupRate, (_pAd)->MlmeAux.SupRateLen);\
++ (_pAd)->StaActive.ExtRateLen = (_pAd)->MlmeAux.ExtRateLen; \
++ NdisMoveMemory((_pAd)->StaActive.ExtRate, (_pAd)->MlmeAux.ExtRate, (_pAd)->MlmeAux.ExtRateLen);\
++ NdisMoveMemory(&(_pAd)->CommonCfg.APEdcaParm, &(_pAd)->MlmeAux.APEdcaParm, sizeof(EDCA_PARM));\
++ NdisMoveMemory(&(_pAd)->CommonCfg.APQosCapability, &(_pAd)->MlmeAux.APQosCapability, sizeof(QOS_CAPABILITY_PARM));\
++ NdisMoveMemory(&(_pAd)->CommonCfg.APQbssLoad, &(_pAd)->MlmeAux.APQbssLoad, sizeof(QBSS_LOAD_PARM));\
++ COPY_MAC_ADDR((_pAd)->MacTab.Content[BSSID_WCID].Addr, (_pAd)->MlmeAux.Bssid); \
++ (_pAd)->MacTab.Content[BSSID_WCID].Aid = (_pAd)->MlmeAux.Aid; \
++ (_pAd)->MacTab.Content[BSSID_WCID].PairwiseKey.CipherAlg = (_pAd)->StaCfg.PairCipher;\
++ COPY_MAC_ADDR((_pAd)->MacTab.Content[BSSID_WCID].PairwiseKey.BssId, (_pAd)->MlmeAux.Bssid);\
++ (_pAd)->MacTab.Content[BSSID_WCID].RateLen = (_pAd)->StaActive.SupRateLen + (_pAd)->StaActive.ExtRateLen;\
++}
++
++/*
++ ==========================================================================
++ Description:
++
++ IRQL = PASSIVE_LEVEL
++
++ ==========================================================================
++*/
++VOID MlmeCntlInit(
++ IN PRTMP_ADAPTER pAd,
++ IN STATE_MACHINE *S,
++ OUT STATE_MACHINE_FUNC Trans[])
++{
++ // Control state machine differs from other state machines, the interface
++ // follows the standard interface
++ pAd->Mlme.CntlMachine.CurrState = CNTL_IDLE;
++}
++
++/*
++ ==========================================================================
++ Description:
++
++ IRQL = DISPATCH_LEVEL
++
++ ==========================================================================
++*/
++VOID MlmeCntlMachinePerformAction(
++ IN PRTMP_ADAPTER pAd,
++ IN STATE_MACHINE *S,
++ IN MLME_QUEUE_ELEM *Elem)
++{
++ switch(pAd->Mlme.CntlMachine.CurrState)
++ {
++ case CNTL_IDLE:
++ CntlIdleProc(pAd, Elem);
++ break;
++ case CNTL_WAIT_DISASSOC:
++ CntlWaitDisassocProc(pAd, Elem);
++ break;
++ case CNTL_WAIT_JOIN:
++ CntlWaitJoinProc(pAd, Elem);
++ break;
++
++ // CNTL_WAIT_REASSOC is the only state in CNTL machine that does
++ // not triggered directly or indirectly by "RTMPSetInformation(OID_xxx)".
++ // Therefore not protected by NDIS's "only one outstanding OID request"
++ // rule. Which means NDIS may SET OID in the middle of ROAMing attempts.
++ // Current approach is to block new SET request at RTMPSetInformation()
++ // when CntlMachine.CurrState is not CNTL_IDLE
++ case CNTL_WAIT_REASSOC:
++ CntlWaitReassocProc(pAd, Elem);
++ break;
++
++ case CNTL_WAIT_START:
++ CntlWaitStartProc(pAd, Elem);
++ break;
++ case CNTL_WAIT_AUTH:
++ CntlWaitAuthProc(pAd, Elem);
++ break;
++ case CNTL_WAIT_AUTH2:
++ CntlWaitAuthProc2(pAd, Elem);
++ break;
++ case CNTL_WAIT_ASSOC:
++ CntlWaitAssocProc(pAd, Elem);
++ break;
++
++ case CNTL_WAIT_OID_LIST_SCAN:
++ if(Elem->MsgType == MT2_SCAN_CONF)
++ {
++ // Resume TxRing after SCANING complete. We hope the out-of-service time
++ // won't be too long to let upper layer time-out the waiting frames
++ RTMPResumeMsduTransmission(pAd);
++ if (pAd->StaCfg.CCXReqType != MSRN_TYPE_UNUSED)
++ {
++ // Cisco scan request is finished, prepare beacon report
++ MlmeEnqueue(pAd, AIRONET_STATE_MACHINE, MT2_AIRONET_SCAN_DONE, 0, NULL);
++ }
++ pAd->Mlme.CntlMachine.CurrState = CNTL_IDLE;
++
++ //
++ // Set LED status to previous status.
++ //
++ if (pAd->bLedOnScanning)
++ {
++ pAd->bLedOnScanning = FALSE;
++ RTMPSetLED(pAd, pAd->LedStatus);
++ }
++#ifdef DOT11N_DRAFT3
++ // AP sent a 2040Coexistence mgmt frame, then station perform a scan, and then send back the respone.
++ if (pAd->CommonCfg.BSSCoexist2040.field.InfoReq == 1)
++ {
++ Update2040CoexistFrameAndNotify(pAd, BSSID_WCID, TRUE);
++ }
++#endif // DOT11N_DRAFT3 //
++ }
++ break;
++
++ case CNTL_WAIT_OID_DISASSOC:
++ if (Elem->MsgType == MT2_DISASSOC_CONF)
++ {
++ LinkDown(pAd, FALSE);
++ pAd->Mlme.CntlMachine.CurrState = CNTL_IDLE;
++ }
++ break;
++#ifdef RT2870
++ //
++ // This state is for that we want to connect to an AP but
++ // it didn't find on BSS List table. So we need to scan the air first,
++ // after that we can try to connect to the desired AP if available.
++ //
++ case CNTL_WAIT_SCAN_FOR_CONNECT:
++ if(Elem->MsgType == MT2_SCAN_CONF)
++ {
++ // Resume TxRing after SCANING complete. We hope the out-of-service time
++ // won't be too long to let upper layer time-out the waiting frames
++ RTMPResumeMsduTransmission(pAd);
++#ifdef CCX_SUPPORT
++ if (pAd->StaCfg.CCXReqType != MSRN_TYPE_UNUSED)
++ {
++ // Cisco scan request is finished, prepare beacon report
++ MlmeEnqueue(pAd, AIRONET_STATE_MACHINE, MT2_AIRONET_SCAN_DONE, 0, NULL);
++ }
++#endif // CCX_SUPPORT //
++ pAd->Mlme.CntlMachine.CurrState = CNTL_IDLE;
++
++ //
++ // Check if we can connect to.
++ //
++ BssTableSsidSort(pAd, &pAd->MlmeAux.SsidBssTab, pAd->MlmeAux.AutoReconnectSsid, pAd->MlmeAux.AutoReconnectSsidLen);
++ if (pAd->MlmeAux.SsidBssTab.BssNr > 0)
++ {
++ MlmeAutoReconnectLastSSID(pAd);
++ }
++ }
++ break;
++#endif // RT2870 //
++ default:
++ DBGPRINT_ERR(("!ERROR! CNTL - Illegal message type(=%ld)", Elem->MsgType));
++ break;
++ }
++}
++
++
++/*
++ ==========================================================================
++ Description:
++
++ IRQL = DISPATCH_LEVEL
++
++ ==========================================================================
++*/
++VOID CntlIdleProc(
++ IN PRTMP_ADAPTER pAd,
++ IN MLME_QUEUE_ELEM *Elem)
++{
++ MLME_DISASSOC_REQ_STRUCT DisassocReq;
++
++ if (RTMP_TEST_FLAG(pAd, fRTMP_ADAPTER_RADIO_OFF))
++ return;
++
++ switch(Elem->MsgType)
++ {
++ case OID_802_11_SSID:
++ CntlOidSsidProc(pAd, Elem);
++ break;
++
++ case OID_802_11_BSSID:
++ CntlOidRTBssidProc(pAd,Elem);
++ break;
++
++ case OID_802_11_BSSID_LIST_SCAN:
++ CntlOidScanProc(pAd,Elem);
++ break;
++
++ case OID_802_11_DISASSOCIATE:
++#ifdef RALINK_ATE
++ if(ATE_ON(pAd))
++ {
++ DBGPRINT(RT_DEBUG_TRACE, ("The driver is in ATE mode now\n"));
++ break;
++ }
++#endif // RALINK_ATE //
++ DisassocParmFill(pAd, &DisassocReq, pAd->CommonCfg.Bssid, REASON_DISASSOC_STA_LEAVING);
++ MlmeEnqueue(pAd, ASSOC_STATE_MACHINE, MT2_MLME_DISASSOC_REQ, sizeof(MLME_DISASSOC_REQ_STRUCT), &DisassocReq);
++ pAd->Mlme.CntlMachine.CurrState = CNTL_WAIT_OID_DISASSOC;
++#ifdef WPA_SUPPLICANT_SUPPORT
++ if (pAd->StaCfg.WpaSupplicantUP != WPA_SUPPLICANT_ENABLE_WITH_WEB_UI)
++#endif // WPA_SUPPLICANT_SUPPORT //
++ {
++ // Set the AutoReconnectSsid to prevent it reconnect to old SSID
++ // Since calling this indicate user don't want to connect to that SSID anymore.
++ pAd->MlmeAux.AutoReconnectSsidLen= 32;
++ NdisZeroMemory(pAd->MlmeAux.AutoReconnectSsid, pAd->MlmeAux.AutoReconnectSsidLen);
++ }
++ break;
++
++ case MT2_MLME_ROAMING_REQ:
++ CntlMlmeRoamingProc(pAd, Elem);
++ break;
++
++ case OID_802_11_MIC_FAILURE_REPORT_FRAME:
++ WpaMicFailureReportFrame(pAd, Elem);
++ break;
++
++#ifdef QOS_DLS_SUPPORT
++ case RT_OID_802_11_SET_DLS_PARAM:
++ CntlOidDLSSetupProc(pAd, Elem);
++ break;
++#endif // QOS_DLS_SUPPORT //
++
++ default:
++ DBGPRINT(RT_DEBUG_TRACE, ("CNTL - Illegal message in CntlIdleProc(MsgType=%ld)\n",Elem->MsgType));
++ break;
++ }
++}
++
++VOID CntlOidScanProc(
++ IN PRTMP_ADAPTER pAd,
++ IN MLME_QUEUE_ELEM *Elem)
++{
++ MLME_SCAN_REQ_STRUCT ScanReq;
++ ULONG BssIdx = BSS_NOT_FOUND;
++ BSS_ENTRY CurrBss;
++
++#ifdef RALINK_ATE
++/* Disable scanning when ATE is running. */
++ if (ATE_ON(pAd))
++ return;
++#endif // RALINK_ATE //
++
++
++ // record current BSS if network is connected.
++ // 2003-2-13 do not include current IBSS if this is the only STA in this IBSS.
++ if (OPSTATUS_TEST_FLAG(pAd, fOP_STATUS_MEDIA_STATE_CONNECTED))
++ {
++ BssIdx = BssSsidTableSearch(&pAd->ScanTab, pAd->CommonCfg.Bssid, pAd->CommonCfg.Ssid, pAd->CommonCfg.SsidLen, pAd->CommonCfg.Channel);
++ if (BssIdx != BSS_NOT_FOUND)
++ {
++ NdisMoveMemory(&CurrBss, &pAd->ScanTab.BssEntry[BssIdx], sizeof(BSS_ENTRY));
++ }
++ }
++
++ // clean up previous SCAN result, add current BSS back to table if any
++ BssTableInit(&pAd->ScanTab);
++ if (BssIdx != BSS_NOT_FOUND)
++ {
++ // DDK Note: If the NIC is associated with a particular BSSID and SSID
++ // that are not contained in the list of BSSIDs generated by this scan, the
++ // BSSID description of the currently associated BSSID and SSID should be
++ // appended to the list of BSSIDs in the NIC's database.
++ // To ensure this, we append this BSS as the first entry in SCAN result
++ NdisMoveMemory(&pAd->ScanTab.BssEntry[0], &CurrBss, sizeof(BSS_ENTRY));
++ pAd->ScanTab.BssNr = 1;
++ }
++
++ ScanParmFill(pAd, &ScanReq, "", 0, BSS_ANY, SCAN_ACTIVE);
++ MlmeEnqueue(pAd, SYNC_STATE_MACHINE, MT2_MLME_SCAN_REQ,
++ sizeof(MLME_SCAN_REQ_STRUCT), &ScanReq);
++ pAd->Mlme.CntlMachine.CurrState = CNTL_WAIT_OID_LIST_SCAN;
++}
++
++/*
++ ==========================================================================
++ Description:
++ Before calling this routine, user desired SSID should already been
++ recorded in CommonCfg.Ssid[]
++ IRQL = DISPATCH_LEVEL
++
++ ==========================================================================
++*/
++VOID CntlOidSsidProc(
++ IN PRTMP_ADAPTER pAd,
++ IN MLME_QUEUE_ELEM * Elem)
++{
++ PNDIS_802_11_SSID pOidSsid = (NDIS_802_11_SSID *)Elem->Msg;
++ MLME_DISASSOC_REQ_STRUCT DisassocReq;
++ ULONG Now;
++
++ // Step 1. record the desired user settings to MlmeAux
++ NdisZeroMemory(pAd->MlmeAux.Ssid, MAX_LEN_OF_SSID);
++ NdisMoveMemory(pAd->MlmeAux.Ssid, pOidSsid->Ssid, pOidSsid->SsidLength);
++ pAd->MlmeAux.SsidLen = (UCHAR)pOidSsid->SsidLength;
++ NdisZeroMemory(pAd->MlmeAux.Bssid, MAC_ADDR_LEN);
++ pAd->MlmeAux.BssType = pAd->StaCfg.BssType;
++
++
++ //
++ // Update Reconnect Ssid, that user desired to connect.
++ //
++ NdisZeroMemory(pAd->MlmeAux.AutoReconnectSsid, MAX_LEN_OF_SSID);
++ NdisMoveMemory(pAd->MlmeAux.AutoReconnectSsid, pAd->MlmeAux.Ssid, pAd->MlmeAux.SsidLen);
++ pAd->MlmeAux.AutoReconnectSsidLen = pAd->MlmeAux.SsidLen;
++
++ // step 2. find all matching BSS in the lastest SCAN result (inBssTab)
++ // & log them into MlmeAux.SsidBssTab for later-on iteration. Sort by RSSI order
++ BssTableSsidSort(pAd, &pAd->MlmeAux.SsidBssTab, pAd->MlmeAux.Ssid, pAd->MlmeAux.SsidLen);
++
++ DBGPRINT(RT_DEBUG_TRACE, ("CntlOidSsidProc():CNTL - %d BSS of %d BSS match the desire (%d)SSID - %s\n",
++ pAd->MlmeAux.SsidBssTab.BssNr, pAd->ScanTab.BssNr, pAd->MlmeAux.SsidLen, pAd->MlmeAux.Ssid));
++ NdisGetSystemUpTime(&Now);
++
++ if (OPSTATUS_TEST_FLAG(pAd, fOP_STATUS_MEDIA_STATE_CONNECTED) &&
++ (pAd->CommonCfg.SsidLen == pAd->MlmeAux.SsidBssTab.BssEntry[0].SsidLen) &&
++ NdisEqualMemory(pAd->CommonCfg.Ssid, pAd->MlmeAux.SsidBssTab.BssEntry[0].Ssid, pAd->CommonCfg.SsidLen) &&
++ MAC_ADDR_EQUAL(pAd->CommonCfg.Bssid, pAd->MlmeAux.SsidBssTab.BssEntry[0].Bssid))
++ {
++ // Case 1. already connected with an AP who has the desired SSID
++ // with highest RSSI
++
++ // Add checking Mode "LEAP" for CCX 1.0
++ if (((pAd->StaCfg.AuthMode == Ndis802_11AuthModeWPA) ||
++ (pAd->StaCfg.AuthMode == Ndis802_11AuthModeWPAPSK) ||
++ (pAd->StaCfg.AuthMode == Ndis802_11AuthModeWPA2) ||
++ (pAd->StaCfg.AuthMode == Ndis802_11AuthModeWPA2PSK)
++#ifdef LEAP_SUPPORT
++ || (pAd->StaCfg.LeapAuthMode == CISCO_AuthModeLEAP)
++#endif // LEAP_SUPPORT //
++ ) &&
++ (pAd->StaCfg.PortSecured == WPA_802_1X_PORT_NOT_SECURED))
++ {
++ // case 1.1 For WPA, WPA-PSK, if the 1x port is not secured, we have to redo
++ // connection process
++ DBGPRINT(RT_DEBUG_TRACE, ("CntlOidSsidProc():CNTL - disassociate with current AP...\n"));
++ DisassocParmFill(pAd, &DisassocReq, pAd->CommonCfg.Bssid, REASON_DISASSOC_STA_LEAVING);
++ MlmeEnqueue(pAd, ASSOC_STATE_MACHINE, MT2_MLME_DISASSOC_REQ,
++ sizeof(MLME_DISASSOC_REQ_STRUCT), &DisassocReq);
++ pAd->Mlme.CntlMachine.CurrState = CNTL_WAIT_DISASSOC;
++ }
++ else if (pAd->bConfigChanged == TRUE)
++ {
++ // case 1.2 Important Config has changed, we have to reconnect to the same AP
++ DBGPRINT(RT_DEBUG_TRACE, ("CntlOidSsidProc():CNTL - disassociate with current AP Because config changed...\n"));
++ DisassocParmFill(pAd, &DisassocReq, pAd->CommonCfg.Bssid, REASON_DISASSOC_STA_LEAVING);
++ MlmeEnqueue(pAd, ASSOC_STATE_MACHINE, MT2_MLME_DISASSOC_REQ,
++ sizeof(MLME_DISASSOC_REQ_STRUCT), &DisassocReq);
++ pAd->Mlme.CntlMachine.CurrState = CNTL_WAIT_DISASSOC;
++ }
++ else
++ {
++ // case 1.3. already connected to the SSID with highest RSSI.
++ DBGPRINT(RT_DEBUG_TRACE, ("CntlOidSsidProc():CNTL - already with this BSSID. ignore this SET_SSID request\n"));
++ //
++ // (HCT 12.1) 1c_wlan_mediaevents required
++ // media connect events are indicated when associating with the same AP
++ //
++ if (INFRA_ON(pAd))
++ {
++ //
++ // Since MediaState already is NdisMediaStateConnected
++ // We just indicate the connect event again to meet the WHQL required.
++ //
++ pAd->IndicateMediaState = NdisMediaStateConnected;
++ RTMP_IndicateMediaState(pAd);
++ pAd->ExtraInfo = GENERAL_LINK_UP; // Update extra information to link is up
++ }
++
++ pAd->Mlme.CntlMachine.CurrState = CNTL_IDLE;
++#ifdef NATIVE_WPA_SUPPLICANT_SUPPORT
++ {
++ union iwreq_data wrqu;
++
++ memset(wrqu.ap_addr.sa_data, 0, MAC_ADDR_LEN);
++ memcpy(wrqu.ap_addr.sa_data, pAd->MlmeAux.Bssid, MAC_ADDR_LEN);
++ wireless_send_event(pAd->net_dev, SIOCGIWAP, &wrqu, NULL);
++
++ }
++#endif // NATIVE_WPA_SUPPLICANT_SUPPORT //
++ }
++ }
++ else if (INFRA_ON(pAd))
++ {
++ //
++ // For RT61
++ // [88888] OID_802_11_SSID should have returned NDTEST_WEP_AP2(Returned: )
++ // RT61 may lost SSID, and not connect to NDTEST_WEP_AP2 and will connect to NDTEST_WEP_AP2 by Autoreconnect
++ // But media status is connected, so the SSID not report correctly.
++ //
++ if (!SSID_EQUAL(pAd->CommonCfg.Ssid, pAd->CommonCfg.SsidLen, pAd->MlmeAux.Ssid, pAd->MlmeAux.SsidLen))
++ {
++ //
++ // Different SSID means not Roaming case, so we let LinkDown() to Indicate a disconnect event.
++ //
++ pAd->MlmeAux.CurrReqIsFromNdis = TRUE;
++ }
++ // case 2. active INFRA association existent
++ // roaming is done within miniport driver, nothing to do with configuration
++ // utility. so upon a new SET(OID_802_11_SSID) is received, we just
++ // disassociate with the current associated AP,
++ // then perform a new association with this new SSID, no matter the
++ // new/old SSID are the same or not.
++ DBGPRINT(RT_DEBUG_TRACE, ("CntlOidSsidProc():CNTL - disassociate with current AP...\n"));
++ DisassocParmFill(pAd, &DisassocReq, pAd->CommonCfg.Bssid, REASON_DISASSOC_STA_LEAVING);
++ MlmeEnqueue(pAd, ASSOC_STATE_MACHINE, MT2_MLME_DISASSOC_REQ,
++ sizeof(MLME_DISASSOC_REQ_STRUCT), &DisassocReq);
++ pAd->Mlme.CntlMachine.CurrState = CNTL_WAIT_DISASSOC;
++ }
++ else
++ {
++ if (ADHOC_ON(pAd))
++ {
++ DBGPRINT(RT_DEBUG_TRACE, ("CntlOidSsidProc():CNTL - drop current ADHOC\n"));
++ LinkDown(pAd, FALSE);
++ OPSTATUS_CLEAR_FLAG(pAd, fOP_STATUS_MEDIA_STATE_CONNECTED);
++ pAd->IndicateMediaState = NdisMediaStateDisconnected;
++ RTMP_IndicateMediaState(pAd);
++ pAd->ExtraInfo = GENERAL_LINK_DOWN;
++ DBGPRINT(RT_DEBUG_TRACE, ("CntlOidSsidProc():NDIS_STATUS_MEDIA_DISCONNECT Event C!\n"));
++ }
++
++ if ((pAd->MlmeAux.SsidBssTab.BssNr == 0) &&
++ (pAd->StaCfg.bAutoReconnect == TRUE) &&
++ (pAd->MlmeAux.BssType == BSS_INFRA) &&
++ (MlmeValidateSSID(pAd->MlmeAux.Ssid, pAd->MlmeAux.SsidLen) == TRUE)
++ )
++ {
++ MLME_SCAN_REQ_STRUCT ScanReq;
++
++ DBGPRINT(RT_DEBUG_TRACE, ("CntlOidSsidProc():CNTL - No matching BSS, start a new scan\n"));
++ ScanParmFill(pAd, &ScanReq, pAd->MlmeAux.Ssid, pAd->MlmeAux.SsidLen, BSS_ANY, SCAN_ACTIVE);
++ MlmeEnqueue(pAd, SYNC_STATE_MACHINE, MT2_MLME_SCAN_REQ, sizeof(MLME_SCAN_REQ_STRUCT), &ScanReq);
++ pAd->Mlme.CntlMachine.CurrState = CNTL_WAIT_OID_LIST_SCAN;
++ // Reset Missed scan number
++ pAd->StaCfg.LastScanTime = Now;
++ }
++ else
++ {
++ pAd->MlmeAux.BssIdx = 0;
++ IterateOnBssTab(pAd);
++ }
++ }
++}
++
++
++/*
++ ==========================================================================
++ Description:
++
++ IRQL = DISPATCH_LEVEL
++
++ ==========================================================================
++*/
++VOID CntlOidRTBssidProc(
++ IN PRTMP_ADAPTER pAd,
++ IN MLME_QUEUE_ELEM * Elem)
++{
++ ULONG BssIdx;
++ PUCHAR pOidBssid = (PUCHAR)Elem->Msg;
++ MLME_DISASSOC_REQ_STRUCT DisassocReq;
++ MLME_JOIN_REQ_STRUCT JoinReq;
++
++#ifdef RALINK_ATE
++/* No need to perform this routine when ATE is running. */
++ if (ATE_ON(pAd))
++ return;
++#endif // RALINK_ATE //
++
++ // record user desired settings
++ COPY_MAC_ADDR(pAd->MlmeAux.Bssid, pOidBssid);
++ pAd->MlmeAux.BssType = pAd->StaCfg.BssType;
++
++ //
++ // Update Reconnect Ssid, that user desired to connect.
++ //
++ NdisZeroMemory(pAd->MlmeAux.AutoReconnectSsid, MAX_LEN_OF_SSID);
++ pAd->MlmeAux.AutoReconnectSsidLen = pAd->MlmeAux.SsidLen;
++ NdisMoveMemory(pAd->MlmeAux.AutoReconnectSsid, pAd->MlmeAux.Ssid, pAd->MlmeAux.SsidLen);
++
++ // find the desired BSS in the latest SCAN result table
++ BssIdx = BssTableSearch(&pAd->ScanTab, pOidBssid, pAd->MlmeAux.Channel);
++ if (BssIdx == BSS_NOT_FOUND)
++ {
++ DBGPRINT(RT_DEBUG_TRACE, ("CNTL - BSSID not found. reply NDIS_STATUS_NOT_ACCEPTED\n"));
++ pAd->Mlme.CntlMachine.CurrState = CNTL_IDLE;
++ return;
++ }
++
++ // copy the matched BSS entry from ScanTab to MlmeAux.SsidBssTab. Why?
++ // Because we need this entry to become the JOIN target in later on SYNC state machine
++ pAd->MlmeAux.BssIdx = 0;
++ pAd->MlmeAux.SsidBssTab.BssNr = 1;
++ NdisMoveMemory(&pAd->MlmeAux.SsidBssTab.BssEntry[0], &pAd->ScanTab.BssEntry[BssIdx], sizeof(BSS_ENTRY));
++
++ //pAd->MlmeAux.AutoReconnectSsidLen = pAd->ScanTab.BssEntry[BssIdx].SsidLen;
++ //NdisMoveMemory(pAd->MlmeAux.AutoReconnectSsid, pAd->ScanTab.BssEntry[BssIdx].Ssid, pAd->ScanTab.BssEntry[BssIdx].SsidLen);
++
++ // Add SSID into MlmeAux for site surey joining hidden SSID
++ //pAd->MlmeAux.SsidLen = pAd->ScanTab.BssEntry[BssIdx].SsidLen;
++ //NdisMoveMemory(pAd->MlmeAux.Ssid, pAd->ScanTab.BssEntry[BssIdx].Ssid, pAd->MlmeAux.SsidLen);
++
++ // 2002-11-26 skip the following checking. i.e. if user wants to re-connect to same AP
++ // we just follow normal procedure. The reason of user doing this may because he/she changed
++ // AP to another channel, but we still received BEACON from it thus don't claim Link Down.
++ // Since user knows he's changed AP channel, he'll re-connect again. By skipping the following
++ // checking, we'll disassociate then re-do normal association with this AP at the new channel.
++ // 2003-1-6 Re-enable this feature based on microsoft requirement which prefer not to re-do
++ // connection when setting the same BSSID.
++ if (OPSTATUS_TEST_FLAG(pAd, fOP_STATUS_MEDIA_STATE_CONNECTED) &&
++ MAC_ADDR_EQUAL(pAd->CommonCfg.Bssid, pOidBssid))
++ {
++ // already connected to the same BSSID, go back to idle state directly
++ DBGPRINT(RT_DEBUG_TRACE, ("CNTL - already in this BSSID. ignore this SET_BSSID request\n"));
++ pAd->Mlme.CntlMachine.CurrState = CNTL_IDLE;
++#ifdef NATIVE_WPA_SUPPLICANT_SUPPORT
++ {
++ union iwreq_data wrqu;
++
++ memset(wrqu.ap_addr.sa_data, 0, MAC_ADDR_LEN);
++ memcpy(wrqu.ap_addr.sa_data, pAd->MlmeAux.Bssid, MAC_ADDR_LEN);
++ wireless_send_event(pAd->net_dev, SIOCGIWAP, &wrqu, NULL);
++
++ }
++#endif // NATIVE_WPA_SUPPLICANT_SUPPORT //
++ }
++ else
++ {
++ if (INFRA_ON(pAd))
++ {
++ // disassoc from current AP first
++ DBGPRINT(RT_DEBUG_TRACE, ("CNTL - disassociate with current AP ...\n"));
++ DisassocParmFill(pAd, &DisassocReq, pAd->CommonCfg.Bssid, REASON_DISASSOC_STA_LEAVING);
++ MlmeEnqueue(pAd, ASSOC_STATE_MACHINE, MT2_MLME_DISASSOC_REQ,
++ sizeof(MLME_DISASSOC_REQ_STRUCT), &DisassocReq);
++
++ pAd->Mlme.CntlMachine.CurrState = CNTL_WAIT_DISASSOC;
++ }
++ else
++ {
++ if (ADHOC_ON(pAd))
++ {
++ DBGPRINT(RT_DEBUG_TRACE, ("CNTL - drop current ADHOC\n"));
++ LinkDown(pAd, FALSE);
++ OPSTATUS_CLEAR_FLAG(pAd, fOP_STATUS_MEDIA_STATE_CONNECTED);
++ pAd->IndicateMediaState = NdisMediaStateDisconnected;
++ RTMP_IndicateMediaState(pAd);
++ pAd->ExtraInfo = GENERAL_LINK_DOWN;
++ DBGPRINT(RT_DEBUG_TRACE, ("NDIS_STATUS_MEDIA_DISCONNECT Event C!\n"));
++ }
++
++ // Change the wepstatus to original wepstatus
++ pAd->StaCfg.WepStatus = pAd->StaCfg.OrigWepStatus;
++ pAd->StaCfg.PairCipher = pAd->StaCfg.OrigWepStatus;
++ pAd->StaCfg.GroupCipher = pAd->StaCfg.OrigWepStatus;
++
++ // Check cipher suite, AP must have more secured cipher than station setting
++ // Set the Pairwise and Group cipher to match the intended AP setting
++ // We can only connect to AP with less secured cipher setting
++ if ((pAd->StaCfg.AuthMode == Ndis802_11AuthModeWPA) || (pAd->StaCfg.AuthMode == Ndis802_11AuthModeWPAPSK))
++ {
++ pAd->StaCfg.GroupCipher = pAd->ScanTab.BssEntry[BssIdx].WPA.GroupCipher;
++
++ if (pAd->StaCfg.WepStatus == pAd->ScanTab.BssEntry[BssIdx].WPA.PairCipher)
++ pAd->StaCfg.PairCipher = pAd->ScanTab.BssEntry[BssIdx].WPA.PairCipher;
++ else if (pAd->ScanTab.BssEntry[BssIdx].WPA.PairCipherAux != Ndis802_11WEPDisabled)
++ pAd->StaCfg.PairCipher = pAd->ScanTab.BssEntry[BssIdx].WPA.PairCipherAux;
++ else // There is no PairCipher Aux, downgrade our capability to TKIP
++ pAd->StaCfg.PairCipher = Ndis802_11Encryption2Enabled;
++ }
++ else if ((pAd->StaCfg.AuthMode == Ndis802_11AuthModeWPA2) || (pAd->StaCfg.AuthMode == Ndis802_11AuthModeWPA2PSK))
++ {
++ pAd->StaCfg.GroupCipher = pAd->ScanTab.BssEntry[BssIdx].WPA2.GroupCipher;
++
++ if (pAd->StaCfg.WepStatus == pAd->ScanTab.BssEntry[BssIdx].WPA2.PairCipher)
++ pAd->StaCfg.PairCipher = pAd->ScanTab.BssEntry[BssIdx].WPA2.PairCipher;
++ else if (pAd->ScanTab.BssEntry[BssIdx].WPA2.PairCipherAux != Ndis802_11WEPDisabled)
++ pAd->StaCfg.PairCipher = pAd->ScanTab.BssEntry[BssIdx].WPA2.PairCipherAux;
++ else // There is no PairCipher Aux, downgrade our capability to TKIP
++ pAd->StaCfg.PairCipher = Ndis802_11Encryption2Enabled;
++
++ // RSN capability
++ pAd->StaCfg.RsnCapability = pAd->ScanTab.BssEntry[BssIdx].WPA2.RsnCapability;
++ }
++
++ // Set Mix cipher flag
++ pAd->StaCfg.bMixCipher = (pAd->StaCfg.PairCipher == pAd->StaCfg.GroupCipher) ? FALSE : TRUE;
++ if (pAd->StaCfg.bMixCipher == TRUE)
++ {
++ // If mix cipher, re-build RSNIE
++ RTMPMakeRSNIE(pAd, pAd->StaCfg.AuthMode, pAd->StaCfg.WepStatus, 0);
++ }
++ // No active association, join the BSS immediately
++ DBGPRINT(RT_DEBUG_TRACE, ("CNTL - joining %02x:%02x:%02x:%02x:%02x:%02x ...\n",
++ pOidBssid[0],pOidBssid[1],pOidBssid[2],pOidBssid[3],pOidBssid[4],pOidBssid[5]));
++
++ JoinParmFill(pAd, &JoinReq, pAd->MlmeAux.BssIdx);
++ MlmeEnqueue(pAd, SYNC_STATE_MACHINE, MT2_MLME_JOIN_REQ, sizeof(MLME_JOIN_REQ_STRUCT), &JoinReq);
++
++ pAd->Mlme.CntlMachine.CurrState = CNTL_WAIT_JOIN;
++ }
++ }
++}
++
++// Roaming is the only external request triggering CNTL state machine
++// despite of other "SET OID" operation. All "SET OID" related oerations
++// happen in sequence, because no other SET OID will be sent to this device
++// until the the previous SET operation is complete (successful o failed).
++// So, how do we quarantee this ROAMING request won't corrupt other "SET OID"?
++// or been corrupted by other "SET OID"?
++//
++// IRQL = DISPATCH_LEVEL
++VOID CntlMlmeRoamingProc(
++ IN PRTMP_ADAPTER pAd,
++ IN MLME_QUEUE_ELEM *Elem)
++{
++ // TODO:
++ // AP in different channel may show lower RSSI than actual value??
++ // should we add a weighting factor to compensate it?
++ DBGPRINT(RT_DEBUG_TRACE,("CNTL - Roaming in MlmeAux.RoamTab...\n"));
++
++ NdisMoveMemory(&pAd->MlmeAux.SsidBssTab, &pAd->MlmeAux.RoamTab, sizeof(pAd->MlmeAux.RoamTab));
++ pAd->MlmeAux.SsidBssTab.BssNr = pAd->MlmeAux.RoamTab.BssNr;
++
++ BssTableSortByRssi(&pAd->MlmeAux.SsidBssTab);
++ pAd->MlmeAux.BssIdx = 0;
++ IterateOnBssTab(pAd);
++}
++
++#ifdef QOS_DLS_SUPPORT
++/*
++ ==========================================================================
++ Description:
++
++ IRQL = DISPATCH_LEVEL
++
++ ==========================================================================
++*/
++VOID CntlOidDLSSetupProc(
++ IN PRTMP_ADAPTER pAd,
++ IN MLME_QUEUE_ELEM *Elem)
++{
++ PRT_802_11_DLS pDLS = (PRT_802_11_DLS)Elem->Msg;
++ MLME_DLS_REQ_STRUCT MlmeDlsReq;
++ INT i;
++ USHORT reason = REASON_UNSPECIFY;
++
++ DBGPRINT(RT_DEBUG_TRACE,("CNTL - (OID set %02x:%02x:%02x:%02x:%02x:%02x with Valid=%d, Status=%d, TimeOut=%d, CountDownTimer=%d)\n",
++ pDLS->MacAddr[0], pDLS->MacAddr[1], pDLS->MacAddr[2], pDLS->MacAddr[3], pDLS->MacAddr[4], pDLS->MacAddr[5],
++ pDLS->Valid, pDLS->Status, pDLS->TimeOut, pDLS->CountDownTimer));
++
++ if (!pAd->CommonCfg.bDLSCapable)
++ return;
++
++ // DLS will not be supported when Adhoc mode
++ if (INFRA_ON(pAd))
++ {
++ for (i = 0; i < MAX_NUM_OF_DLS_ENTRY; i++)
++ {
++ if (pDLS->Valid && pAd->StaCfg.DLSEntry[i].Valid && (pAd->StaCfg.DLSEntry[i].Status == DLS_FINISH) &&
++ (pDLS->TimeOut == pAd->StaCfg.DLSEntry[i].TimeOut) && MAC_ADDR_EQUAL(pDLS->MacAddr, pAd->StaCfg.DLSEntry[i].MacAddr))
++ {
++ // 1. Same setting, just drop it
++ DBGPRINT(RT_DEBUG_TRACE,("CNTL - setting unchanged\n"));
++ break;
++ }
++ else if (!pDLS->Valid && pAd->StaCfg.DLSEntry[i].Valid && (pAd->StaCfg.DLSEntry[i].Status == DLS_FINISH) &&
++ MAC_ADDR_EQUAL(pDLS->MacAddr, pAd->StaCfg.DLSEntry[i].MacAddr))
++ {
++ // 2. Disable DLS link case, just tear down DLS link
++ reason = REASON_QOS_UNWANTED_MECHANISM;
++ pAd->StaCfg.DLSEntry[i].Valid = FALSE;
++ pAd->StaCfg.DLSEntry[i].Status = DLS_NONE;
++ DlsParmFill(pAd, &MlmeDlsReq, &pAd->StaCfg.DLSEntry[i], reason);
++ MlmeEnqueue(pAd, DLS_STATE_MACHINE, MT2_MLME_DLS_TEAR_DOWN, sizeof(MLME_DLS_REQ_STRUCT), &MlmeDlsReq);
++ DBGPRINT(RT_DEBUG_TRACE,("CNTL - start tear down procedure\n"));
++ break;
++ }
++ else if ((i < MAX_NUM_OF_DLS_ENTRY) && pDLS->Valid && !pAd->StaCfg.DLSEntry[i].Valid)
++ {
++ // 3. Enable case, start DLS setup procedure
++ NdisMoveMemory(&pAd->StaCfg.DLSEntry[i], pDLS, sizeof(RT_802_11_DLS_UI));
++
++ //Update countdown timer
++ pAd->StaCfg.DLSEntry[i].CountDownTimer = pAd->StaCfg.DLSEntry[i].TimeOut;
++ DlsParmFill(pAd, &MlmeDlsReq, &pAd->StaCfg.DLSEntry[i], reason);
++ MlmeEnqueue(pAd, DLS_STATE_MACHINE, MT2_MLME_DLS_REQ, sizeof(MLME_DLS_REQ_STRUCT), &MlmeDlsReq);
++ DBGPRINT(RT_DEBUG_TRACE,("CNTL - DLS setup case\n"));
++ break;
++ }
++ else if ((i < MAX_NUM_OF_DLS_ENTRY) && pDLS->Valid && pAd->StaCfg.DLSEntry[i].Valid &&
++ (pAd->StaCfg.DLSEntry[i].Status == DLS_FINISH) && !MAC_ADDR_EQUAL(pDLS->MacAddr, pAd->StaCfg.DLSEntry[i].MacAddr))
++ {
++ // 4. update mac case, tear down old DLS and setup new DLS
++ reason = REASON_QOS_UNWANTED_MECHANISM;
++ pAd->StaCfg.DLSEntry[i].Valid = FALSE;
++ pAd->StaCfg.DLSEntry[i].Status = DLS_NONE;
++ DlsParmFill(pAd, &MlmeDlsReq, &pAd->StaCfg.DLSEntry[i], reason);
++ MlmeEnqueue(pAd, DLS_STATE_MACHINE, MT2_MLME_DLS_TEAR_DOWN, sizeof(MLME_DLS_REQ_STRUCT), &MlmeDlsReq);
++ NdisMoveMemory(&pAd->StaCfg.DLSEntry[i], pDLS, sizeof(RT_802_11_DLS_UI));
++ DlsParmFill(pAd, &MlmeDlsReq, &pAd->StaCfg.DLSEntry[i], reason);
++ MlmeEnqueue(pAd, DLS_STATE_MACHINE, MT2_MLME_DLS_REQ, sizeof(MLME_DLS_REQ_STRUCT), &MlmeDlsReq);
++ DBGPRINT(RT_DEBUG_TRACE,("CNTL - DLS tear down and restart case\n"));
++ break;
++ }
++ else if (pDLS->Valid && pAd->StaCfg.DLSEntry[i].Valid &&
++ MAC_ADDR_EQUAL(pDLS->MacAddr, pAd->StaCfg.DLSEntry[i].MacAddr) && (pAd->StaCfg.DLSEntry[i].TimeOut != pDLS->TimeOut))
++ {
++ // 5. update timeout case, start DLS setup procedure (no tear down)
++ pAd->StaCfg.DLSEntry[i].TimeOut = pDLS->TimeOut;
++ //Update countdown timer
++ pAd->StaCfg.DLSEntry[i].CountDownTimer = pAd->StaCfg.DLSEntry[i].TimeOut;
++ DlsParmFill(pAd, &MlmeDlsReq, &pAd->StaCfg.DLSEntry[i], reason);
++ MlmeEnqueue(pAd, DLS_STATE_MACHINE, MT2_MLME_DLS_REQ, sizeof(MLME_DLS_REQ_STRUCT), &MlmeDlsReq);
++ DBGPRINT(RT_DEBUG_TRACE,("CNTL - DLS update timeout case\n"));
++ break;
++ }
++ else if (pDLS->Valid && pAd->StaCfg.DLSEntry[i].Valid &&
++ (pAd->StaCfg.DLSEntry[i].Status != DLS_FINISH) && MAC_ADDR_EQUAL(pDLS->MacAddr, pAd->StaCfg.DLSEntry[i].MacAddr))
++ {
++ // 6. re-setup case, start DLS setup procedure (no tear down)
++ DlsParmFill(pAd, &MlmeDlsReq, &pAd->StaCfg.DLSEntry[i], reason);
++ MlmeEnqueue(pAd, DLS_STATE_MACHINE, MT2_MLME_DLS_REQ, sizeof(MLME_DLS_REQ_STRUCT), &MlmeDlsReq);
++ DBGPRINT(RT_DEBUG_TRACE,("CNTL - DLS retry setup procedure\n"));
++ break;
++ }
++ else
++ {
++ DBGPRINT(RT_DEBUG_WARN,("CNTL - DLS not changed in entry - %d - Valid=%d, Status=%d, TimeOut=%d\n",
++ i, pAd->StaCfg.DLSEntry[i].Valid, pAd->StaCfg.DLSEntry[i].Status, pAd->StaCfg.DLSEntry[i].TimeOut));
++ }
++ }
++ }
++}
++#endif // QOS_DLS_SUPPORT //
++
++/*
++ ==========================================================================
++ Description:
++
++ IRQL = DISPATCH_LEVEL
++
++ ==========================================================================
++*/
++VOID CntlWaitDisassocProc(
++ IN PRTMP_ADAPTER pAd,
++ IN MLME_QUEUE_ELEM *Elem)
++{
++ MLME_START_REQ_STRUCT StartReq;
++
++ if (Elem->MsgType == MT2_DISASSOC_CONF)
++ {
++ DBGPRINT(RT_DEBUG_TRACE, ("CNTL - Dis-associate successful\n"));
++
++ if (pAd->CommonCfg.bWirelessEvent)
++ {
++ RTMPSendWirelessEvent(pAd, IW_DISASSOC_EVENT_FLAG, pAd->MacTab.Content[BSSID_WCID].Addr, BSS0, 0);
++ }
++
++ LinkDown(pAd, FALSE);
++
++ // case 1. no matching BSS, and user wants ADHOC, so we just start a new one
++ if ((pAd->MlmeAux.SsidBssTab.BssNr==0) && (pAd->StaCfg.BssType == BSS_ADHOC))
++ {
++ DBGPRINT(RT_DEBUG_TRACE, ("CNTL - No matching BSS, start a new ADHOC (Ssid=%s)...\n",pAd->MlmeAux.Ssid));
++ StartParmFill(pAd, &StartReq, pAd->MlmeAux.Ssid, pAd->MlmeAux.SsidLen);
++ MlmeEnqueue(pAd, SYNC_STATE_MACHINE, MT2_MLME_START_REQ, sizeof(MLME_START_REQ_STRUCT), &StartReq);
++ pAd->Mlme.CntlMachine.CurrState = CNTL_WAIT_START;
++ }
++ // case 2. try each matched BSS
++ else
++ {
++ pAd->MlmeAux.BssIdx = 0;
++
++ IterateOnBssTab(pAd);
++ }
++ }
++}
++
++/*
++ ==========================================================================
++ Description:
++
++ IRQL = DISPATCH_LEVEL
++
++ ==========================================================================
++*/
++VOID CntlWaitJoinProc(
++ IN PRTMP_ADAPTER pAd,
++ IN MLME_QUEUE_ELEM *Elem)
++{
++ USHORT Reason;
++ MLME_AUTH_REQ_STRUCT AuthReq;
++
++ if (Elem->MsgType == MT2_JOIN_CONF)
++ {
++ NdisMoveMemory(&Reason, Elem->Msg, sizeof(USHORT));
++ if (Reason == MLME_SUCCESS)
++ {
++ // 1. joined an IBSS, we are pretty much done here
++ if (pAd->MlmeAux.BssType == BSS_ADHOC)
++ {
++ //
++ // 5G bands rules of Japan:
++ // Ad hoc must be disabled in W53(ch52,56,60,64) channels.
++ //
++ if ( (pAd->CommonCfg.bIEEE80211H == 1) &&
++ RadarChannelCheck(pAd, pAd->CommonCfg.Channel)
++ )
++ {
++ pAd->Mlme.CntlMachine.CurrState = CNTL_IDLE;
++ DBGPRINT(RT_DEBUG_TRACE, ("CNTL - Channel=%d, Join adhoc on W53(52,56,60,64) Channels are not accepted\n", pAd->CommonCfg.Channel));
++ return;
++ }
++
++ LinkUp(pAd, BSS_ADHOC);
++ pAd->Mlme.CntlMachine.CurrState = CNTL_IDLE;
++ DBGPRINT(RT_DEBUG_TRACE, ("CNTL - join the IBSS = %02x:%02x:%02x:%02x:%02x:%02x ...\n",
++ pAd->CommonCfg.Bssid[0],pAd->CommonCfg.Bssid[1],pAd->CommonCfg.Bssid[2],
++ pAd->CommonCfg.Bssid[3],pAd->CommonCfg.Bssid[4],pAd->CommonCfg.Bssid[5]));
++
++ pAd->IndicateMediaState = NdisMediaStateConnected;
++ pAd->ExtraInfo = GENERAL_LINK_UP;
++ }
++ // 2. joined a new INFRA network, start from authentication
++ else
++ {
++#ifdef LEAP_SUPPORT
++ // Add AuthMode "LEAP" for CCX 1.X
++ if (pAd->StaCfg.LeapAuthMode == CISCO_AuthModeLEAP)
++ {
++ AuthParmFill(pAd, &AuthReq, pAd->MlmeAux.Bssid, CISCO_AuthModeLEAP);
++ }
++ else
++#endif // LEAP_SUPPORT //
++ {
++ // either Ndis802_11AuthModeShared or Ndis802_11AuthModeAutoSwitch, try shared key first
++ if ((pAd->StaCfg.AuthMode == Ndis802_11AuthModeShared) ||
++ (pAd->StaCfg.AuthMode == Ndis802_11AuthModeAutoSwitch))
++ {
++ AuthParmFill(pAd, &AuthReq, pAd->MlmeAux.Bssid, Ndis802_11AuthModeShared);
++ }
++ else
++ {
++ AuthParmFill(pAd, &AuthReq, pAd->MlmeAux.Bssid, Ndis802_11AuthModeOpen);
++ }
++ }
++ MlmeEnqueue(pAd, AUTH_STATE_MACHINE, MT2_MLME_AUTH_REQ,
++ sizeof(MLME_AUTH_REQ_STRUCT), &AuthReq);
++
++ pAd->Mlme.CntlMachine.CurrState = CNTL_WAIT_AUTH;
++ }
++ }
++ else
++ {
++ // 3. failed, try next BSS
++ pAd->MlmeAux.BssIdx++;
++ IterateOnBssTab(pAd);
++ }
++ }
++}
++
++
++/*
++ ==========================================================================
++ Description:
++
++ IRQL = DISPATCH_LEVEL
++
++ ==========================================================================
++*/
++VOID CntlWaitStartProc(
++ IN PRTMP_ADAPTER pAd,
++ IN MLME_QUEUE_ELEM *Elem)
++{
++ USHORT Result;
++
++ if (Elem->MsgType == MT2_START_CONF)
++ {
++ NdisMoveMemory(&Result, Elem->Msg, sizeof(USHORT));
++ if (Result == MLME_SUCCESS)
++ {
++ //
++ // 5G bands rules of Japan:
++ // Ad hoc must be disabled in W53(ch52,56,60,64) channels.
++ //
++ if ( (pAd->CommonCfg.bIEEE80211H == 1) &&
++ RadarChannelCheck(pAd, pAd->CommonCfg.Channel)
++ )
++ {
++ pAd->Mlme.CntlMachine.CurrState = CNTL_IDLE;
++ DBGPRINT(RT_DEBUG_TRACE, ("CNTL - Channel=%d, Start adhoc on W53(52,56,60,64) Channels are not accepted\n", pAd->CommonCfg.Channel));
++ return;
++ }
++#ifdef DOT11_N_SUPPORT
++ if (pAd->CommonCfg.PhyMode >= PHY_11ABGN_MIXED)
++ {
++ N_ChannelCheck(pAd);
++ SetCommonHT(pAd);
++ NdisMoveMemory(&pAd->MlmeAux.AddHtInfo, &pAd->CommonCfg.AddHTInfo, sizeof(ADD_HT_INFO_IE));
++ RTMPCheckHt(pAd, BSSID_WCID, &pAd->CommonCfg.HtCapability, &pAd->CommonCfg.AddHTInfo);
++ pAd->StaActive.SupportedPhyInfo.bHtEnable = TRUE;
++ NdisZeroMemory(&pAd->StaActive.SupportedPhyInfo.MCSSet[0], 16);
++ NdisMoveMemory(&pAd->StaActive.SupportedPhyInfo.MCSSet[0], &pAd->CommonCfg.HtCapability.MCSSet[0], 16);
++ COPY_HTSETTINGS_FROM_MLME_AUX_TO_ACTIVE_CFG(pAd);
++
++ if ((pAd->CommonCfg.HtCapability.HtCapInfo.ChannelWidth == BW_40) &&
++ (pAd->CommonCfg.AddHTInfo.AddHtInfo.ExtChanOffset == EXTCHA_ABOVE))
++ {
++ pAd->MlmeAux.CentralChannel = pAd->CommonCfg.Channel + 2;
++ }
++ else if ((pAd->CommonCfg.HtCapability.HtCapInfo.ChannelWidth == BW_40) &&
++ (pAd->CommonCfg.AddHTInfo.AddHtInfo.ExtChanOffset == EXTCHA_BELOW))
++ {
++ pAd->MlmeAux.CentralChannel = pAd->CommonCfg.Channel - 2;
++ }
++ }
++ else
++#endif // DOT11_N_SUPPORT //
++ {
++ pAd->StaActive.SupportedPhyInfo.bHtEnable = FALSE;
++ }
++ LinkUp(pAd, BSS_ADHOC);
++ pAd->Mlme.CntlMachine.CurrState = CNTL_IDLE;
++ // Before send beacon, driver need do radar detection
++ if ((pAd->CommonCfg.Channel > 14 )
++ && (pAd->CommonCfg.bIEEE80211H == 1)
++ && RadarChannelCheck(pAd, pAd->CommonCfg.Channel))
++ {
++ pAd->CommonCfg.RadarDetect.RDMode = RD_SILENCE_MODE;
++ pAd->CommonCfg.RadarDetect.RDCount = 0;
++#ifdef DFS_SUPPORT
++ BbpRadarDetectionStart(pAd);
++#endif // DFS_SUPPORT //
++ }
++
++ DBGPRINT(RT_DEBUG_TRACE, ("CNTL - start a new IBSS = %02x:%02x:%02x:%02x:%02x:%02x ...\n",
++ pAd->CommonCfg.Bssid[0],pAd->CommonCfg.Bssid[1],pAd->CommonCfg.Bssid[2],
++ pAd->CommonCfg.Bssid[3],pAd->CommonCfg.Bssid[4],pAd->CommonCfg.Bssid[5]));
++ }
++ else
++ {
++ DBGPRINT(RT_DEBUG_TRACE, ("CNTL - Start IBSS fail. BUG!!!!!\n"));
++ pAd->Mlme.CntlMachine.CurrState = CNTL_IDLE;
++ }
++ }
++}
++
++/*
++ ==========================================================================
++ Description:
++
++ IRQL = DISPATCH_LEVEL
++
++ ==========================================================================
++*/
++VOID CntlWaitAuthProc(
++ IN PRTMP_ADAPTER pAd,
++ IN MLME_QUEUE_ELEM *Elem)
++{
++ USHORT Reason;
++ MLME_ASSOC_REQ_STRUCT AssocReq;
++ MLME_AUTH_REQ_STRUCT AuthReq;
++
++ if (Elem->MsgType == MT2_AUTH_CONF)
++ {
++ NdisMoveMemory(&Reason, Elem->Msg, sizeof(USHORT));
++ if (Reason == MLME_SUCCESS)
++ {
++ DBGPRINT(RT_DEBUG_TRACE, ("CNTL - AUTH OK\n"));
++ AssocParmFill(pAd, &AssocReq, pAd->MlmeAux.Bssid, pAd->MlmeAux.CapabilityInfo,
++ ASSOC_TIMEOUT, pAd->StaCfg.DefaultListenCount);
++
++#ifdef LEAP_SUPPORT
++ //
++ // Cisco Leap CCKM supported Re-association.
++ //
++ if (LEAP_CCKM_ON(pAd) && (pAd->StaCfg.CCKMLinkUpFlag == TRUE))
++ {
++ //if CCKM is turn on , that's mean Fast Reauthentication
++ //Use CCKM Reassociation instead of normal association for Fast Roaming.
++ MlmeEnqueue(pAd, ASSOC_STATE_MACHINE, MT2_MLME_REASSOC_REQ,
++ sizeof(MLME_ASSOC_REQ_STRUCT), &AssocReq);
++
++ pAd->Mlme.CntlMachine.CurrState = CNTL_WAIT_REASSOC;
++ }
++ else
++#endif // LEAP_SUPPORT //
++ {
++ MlmeEnqueue(pAd, ASSOC_STATE_MACHINE, MT2_MLME_ASSOC_REQ,
++ sizeof(MLME_ASSOC_REQ_STRUCT), &AssocReq);
++
++ pAd->Mlme.CntlMachine.CurrState = CNTL_WAIT_ASSOC;
++ }
++ }
++ else
++ {
++ // This fail may because of the AP already keep us in its MAC table without
++ // ageing-out. The previous authentication attempt must have let it remove us.
++ // so try Authentication again may help. For D-Link DWL-900AP+ compatibility.
++ DBGPRINT(RT_DEBUG_TRACE, ("CNTL - AUTH FAIL, try again...\n"));
++#ifdef LEAP_SUPPORT
++ //Add AuthMode "LEAP" for CCX 1.X
++ if (pAd->StaCfg.LeapAuthMode == CISCO_AuthModeLEAP)
++ {
++ AuthParmFill(pAd, &AuthReq, pAd->MlmeAux.Bssid, CISCO_AuthModeLEAP);
++ }
++ else
++#endif // LEAP_SUPPORT //
++ {
++ if ((pAd->StaCfg.AuthMode == Ndis802_11AuthModeShared) ||
++ (pAd->StaCfg.AuthMode == Ndis802_11AuthModeAutoSwitch))
++ {
++ // either Ndis802_11AuthModeShared or Ndis802_11AuthModeAutoSwitch, try shared key first
++ AuthParmFill(pAd, &AuthReq, pAd->MlmeAux.Bssid, Ndis802_11AuthModeShared);
++ }
++ else
++ {
++ AuthParmFill(pAd, &AuthReq, pAd->MlmeAux.Bssid, Ndis802_11AuthModeOpen);
++ }
++ }
++ MlmeEnqueue(pAd, AUTH_STATE_MACHINE, MT2_MLME_AUTH_REQ,
++ sizeof(MLME_AUTH_REQ_STRUCT), &AuthReq);
++
++ pAd->Mlme.CntlMachine.CurrState = CNTL_WAIT_AUTH2;
++ }
++ }
++}
++
++/*
++ ==========================================================================
++ Description:
++
++ IRQL = DISPATCH_LEVEL
++
++ ==========================================================================
++*/
++VOID CntlWaitAuthProc2(
++ IN PRTMP_ADAPTER pAd,
++ IN MLME_QUEUE_ELEM *Elem)
++{
++ USHORT Reason;
++ MLME_ASSOC_REQ_STRUCT AssocReq;
++ MLME_AUTH_REQ_STRUCT AuthReq;
++
++ if (Elem->MsgType == MT2_AUTH_CONF)
++ {
++ NdisMoveMemory(&Reason, Elem->Msg, sizeof(USHORT));
++ if (Reason == MLME_SUCCESS)
++ {
++ DBGPRINT(RT_DEBUG_TRACE, ("CNTL - AUTH OK\n"));
++ AssocParmFill(pAd, &AssocReq, pAd->MlmeAux.Bssid, pAd->MlmeAux.CapabilityInfo,
++ ASSOC_TIMEOUT, pAd->StaCfg.DefaultListenCount);
++ MlmeEnqueue(pAd, ASSOC_STATE_MACHINE, MT2_MLME_ASSOC_REQ,
++ sizeof(MLME_ASSOC_REQ_STRUCT), &AssocReq);
++
++ pAd->Mlme.CntlMachine.CurrState = CNTL_WAIT_ASSOC;
++ }
++ else
++ {
++#ifdef LEAP_SUPPORT
++ // Process LEAP first, since it use different control variable
++ // We don't want to affect other poven operation
++ if (pAd->StaCfg.LeapAuthMode == CISCO_AuthModeLEAP)
++ {
++ // LEAP Auth not success, try next BSS
++ DBGPRINT(RT_DEBUG_TRACE, ("CNTL - *LEAP* AUTH FAIL, give up; try next BSS\n"));
++ DBGPRINT(RT_DEBUG_TRACE, ("Total match BSSID [=%d]\n", pAd->MlmeAux.SsidBssTab.BssNr));
++ pAd->Mlme.CntlMachine.CurrState = CNTL_IDLE;
++ pAd->MlmeAux.BssIdx++;
++ IterateOnBssTab(pAd);
++ }
++ else
++#endif // LEAP_SUPPORT //
++ if ((pAd->StaCfg.AuthMode == Ndis802_11AuthModeAutoSwitch) &&
++ (pAd->MlmeAux.Alg == Ndis802_11AuthModeShared))
++ {
++ DBGPRINT(RT_DEBUG_TRACE, ("CNTL - AUTH FAIL, try OPEN system...\n"));
++ AuthParmFill(pAd, &AuthReq, pAd->MlmeAux.Bssid, Ndis802_11AuthModeOpen);
++ MlmeEnqueue(pAd, AUTH_STATE_MACHINE, MT2_MLME_AUTH_REQ,
++ sizeof(MLME_AUTH_REQ_STRUCT), &AuthReq);
++
++ pAd->Mlme.CntlMachine.CurrState = CNTL_WAIT_AUTH2;
++ }
++ else
++ {
++ // not success, try next BSS
++ DBGPRINT(RT_DEBUG_TRACE, ("CNTL - AUTH FAIL, give up; try next BSS\n"));
++ pAd->Mlme.CntlMachine.CurrState = CNTL_IDLE; //???????
++ pAd->MlmeAux.BssIdx++;
++ IterateOnBssTab(pAd);
++ }
++ }
++ }
++}
++
++/*
++ ==========================================================================
++ Description:
++
++ IRQL = DISPATCH_LEVEL
++
++ ==========================================================================
++*/
++VOID CntlWaitAssocProc(
++ IN PRTMP_ADAPTER pAd,
++ IN MLME_QUEUE_ELEM *Elem)
++{
++ USHORT Reason;
++
++ if (Elem->MsgType == MT2_ASSOC_CONF)
++ {
++ NdisMoveMemory(&Reason, Elem->Msg, sizeof(USHORT));
++ if (Reason == MLME_SUCCESS)
++ {
++ LinkUp(pAd, BSS_INFRA);
++ pAd->Mlme.CntlMachine.CurrState = CNTL_IDLE;
++ DBGPRINT(RT_DEBUG_TRACE, ("CNTL - Association successful on BSS #%ld\n",pAd->MlmeAux.BssIdx));
++
++ if (pAd->CommonCfg.bWirelessEvent)
++ {
++ RTMPSendWirelessEvent(pAd, IW_ASSOC_EVENT_FLAG, pAd->MacTab.Content[BSSID_WCID].Addr, BSS0, 0);
++ }
++ }
++ else
++ {
++ // not success, try next BSS
++ DBGPRINT(RT_DEBUG_TRACE, ("CNTL - Association fails on BSS #%ld\n",pAd->MlmeAux.BssIdx));
++ pAd->MlmeAux.BssIdx++;
++ IterateOnBssTab(pAd);
++ }
++ }
++}
++
++/*
++ ==========================================================================
++ Description:
++
++ IRQL = DISPATCH_LEVEL
++
++ ==========================================================================
++*/
++VOID CntlWaitReassocProc(
++ IN PRTMP_ADAPTER pAd,
++ IN MLME_QUEUE_ELEM *Elem)
++{
++ USHORT Result;
++
++ if (Elem->MsgType == MT2_REASSOC_CONF)
++ {
++ NdisMoveMemory(&Result, Elem->Msg, sizeof(USHORT));
++ if (Result == MLME_SUCCESS)
++ {
++ //
++ // NDIS requires a new Link UP indication but no Link Down for RE-ASSOC
++ //
++ LinkUp(pAd, BSS_INFRA);
++
++ // send wireless event - for association
++ if (pAd->CommonCfg.bWirelessEvent)
++ RTMPSendWirelessEvent(pAd, IW_ASSOC_EVENT_FLAG, pAd->MacTab.Content[BSSID_WCID].Addr, BSS0, 0);
++
++
++#ifdef LEAP_SUPPORT
++ if (LEAP_CCKM_ON(pAd))
++ {
++ STA_PORT_SECURED(pAd);
++ pAd->StaCfg.WpaState = SS_FINISH;
++ }
++#endif // LEAP_SUPPORT //
++ pAd->Mlme.CntlMachine.CurrState = CNTL_IDLE;
++ DBGPRINT(RT_DEBUG_TRACE, ("CNTL - Re-assocition successful on BSS #%ld\n", pAd->MlmeAux.RoamIdx));
++ }
++ else
++ {
++ // reassoc failed, try to pick next BSS in the BSS Table
++ DBGPRINT(RT_DEBUG_TRACE, ("CNTL - Re-assocition fails on BSS #%ld\n", pAd->MlmeAux.RoamIdx));
++ pAd->MlmeAux.RoamIdx++;
++ IterateOnBssTab2(pAd);
++ }
++ }
++}
++
++
++VOID AdhocTurnOnQos(
++ IN PRTMP_ADAPTER pAd)
++{
++#define AC0_DEF_TXOP 0
++#define AC1_DEF_TXOP 0
++#define AC2_DEF_TXOP 94
++#define AC3_DEF_TXOP 47
++
++ // Turn on QOs if use HT rate.
++ if (pAd->CommonCfg.APEdcaParm.bValid == FALSE)
++ {
++ pAd->CommonCfg.APEdcaParm.bValid = TRUE;
++ pAd->CommonCfg.APEdcaParm.Aifsn[0] = 3;
++ pAd->CommonCfg.APEdcaParm.Aifsn[1] = 7;
++ pAd->CommonCfg.APEdcaParm.Aifsn[2] = 1;
++ pAd->CommonCfg.APEdcaParm.Aifsn[3] = 1;
++
++ pAd->CommonCfg.APEdcaParm.Cwmin[0] = 4;
++ pAd->CommonCfg.APEdcaParm.Cwmin[1] = 4;
++ pAd->CommonCfg.APEdcaParm.Cwmin[2] = 3;
++ pAd->CommonCfg.APEdcaParm.Cwmin[3] = 2;
++
++ pAd->CommonCfg.APEdcaParm.Cwmax[0] = 10;
++ pAd->CommonCfg.APEdcaParm.Cwmax[1] = 6;
++ pAd->CommonCfg.APEdcaParm.Cwmax[2] = 4;
++ pAd->CommonCfg.APEdcaParm.Cwmax[3] = 3;
++
++ pAd->CommonCfg.APEdcaParm.Txop[0] = 0;
++ pAd->CommonCfg.APEdcaParm.Txop[1] = 0;
++ pAd->CommonCfg.APEdcaParm.Txop[2] = AC2_DEF_TXOP;
++ pAd->CommonCfg.APEdcaParm.Txop[3] = AC3_DEF_TXOP;
++ }
++ AsicSetEdcaParm(pAd, &pAd->CommonCfg.APEdcaParm);
++}
++
++/*
++ ==========================================================================
++ Description:
++
++ IRQL = DISPATCH_LEVEL
++
++ ==========================================================================
++*/
++VOID LinkUp(
++ IN PRTMP_ADAPTER pAd,
++ IN UCHAR BssType)
++{
++ ULONG Now;
++ UINT32 Data;
++ BOOLEAN Cancelled;
++ UCHAR Value = 0, idx;
++ MAC_TABLE_ENTRY *pEntry = NULL, *pCurrEntry;
++
++ pEntry = &pAd->MacTab.Content[BSSID_WCID];
++
++ //
++ // ASSOC - DisassocTimeoutAction
++ // CNTL - Dis-associate successful
++ // !!! LINK DOWN !!!
++ // [88888] OID_802_11_SSID should have returned NDTEST_WEP_AP2(Returned: )
++ //
++ // To prevent DisassocTimeoutAction to call Link down after we link up,
++ // cancel the DisassocTimer no matter what it start or not.
++ //
++ RTMPCancelTimer(&pAd->MlmeAux.DisassocTimer, &Cancelled);
++
++ COPY_SETTINGS_FROM_MLME_AUX_TO_ACTIVE_CFG(pAd);
++
++#ifdef DOT11_N_SUPPORT
++ COPY_HTSETTINGS_FROM_MLME_AUX_TO_ACTIVE_CFG(pAd);
++#endif // DOT11_N_SUPPORT //
++ // It's quite difficult to tell if a newly added KEY is WEP or CKIP until a new BSS
++ // is formed (either ASSOC/RE-ASSOC done or IBSS started. LinkUP should be a safe place
++ // to examine if cipher algorithm switching is required.
++ //rt2860b. Don't know why need this
++ SwitchBetweenWepAndCkip(pAd);
++
++
++ if (BssType == BSS_ADHOC)
++ {
++ OPSTATUS_SET_FLAG(pAd, fOP_STATUS_ADHOC_ON);
++ OPSTATUS_CLEAR_FLAG(pAd, fOP_STATUS_INFRA_ON);
++
++#ifdef CARRIER_DETECTION_SUPPORT // Roger sync Carrier
++ // No carrier detection when adhoc
++ // CarrierDetectionStop(pAd);
++ pAd->CommonCfg.CarrierDetect.CD_State = CD_NORMAL;
++#endif // CARRIER_DETECTION_SUPPORT //
++
++#ifdef DOT11_N_SUPPORT
++ if (pAd->CommonCfg.PhyMode >= PHY_11ABGN_MIXED)
++ AdhocTurnOnQos(pAd);
++#endif // DOT11_N_SUPPORT //
++
++ DBGPRINT(RT_DEBUG_TRACE, ("!!!Adhoc LINK UP !!! \n" ));
++ }
++ else
++ {
++ OPSTATUS_SET_FLAG(pAd, fOP_STATUS_INFRA_ON);
++ OPSTATUS_CLEAR_FLAG(pAd, fOP_STATUS_ADHOC_ON);
++
++ DBGPRINT(RT_DEBUG_TRACE, ("!!!Infra LINK UP !!! \n" ));
++ }
++
++ // 3*3
++ // reset Tx beamforming bit
++ RTMP_BBP_IO_READ8_BY_REG_ID(pAd, BBP_R4, &Value);
++ Value &= (~0x01);
++ Value |= pAd->CommonCfg.RegTransmitSetting.field.TxBF;
++ RTMP_BBP_IO_WRITE8_BY_REG_ID(pAd, BBP_R4, Value);
++
++#ifdef DOT11_N_SUPPORT
++ // Change to AP channel
++ if ((pAd->CommonCfg.CentralChannel > pAd->CommonCfg.Channel) && (pAd->MlmeAux.HtCapability.HtCapInfo.ChannelWidth == BW_40))
++ {
++ // Must using 40MHz.
++ pAd->CommonCfg.BBPCurrentBW = BW_40;
++ AsicSwitchChannel(pAd, pAd->CommonCfg.CentralChannel, FALSE);
++ AsicLockChannel(pAd, pAd->CommonCfg.CentralChannel);
++
++ RTMP_BBP_IO_READ8_BY_REG_ID(pAd, BBP_R4, &Value);
++ Value &= (~0x18);
++ Value |= 0x10;
++ RTMP_BBP_IO_WRITE8_BY_REG_ID(pAd, BBP_R4, Value);
++
++ // RX : control channel at lower
++ RTMP_BBP_IO_READ8_BY_REG_ID(pAd, BBP_R3, &Value);
++ Value &= (~0x20);
++ RTMP_BBP_IO_WRITE8_BY_REG_ID(pAd, BBP_R3, Value);
++
++ RTMP_IO_READ32(pAd, TX_BAND_CFG, &Data);
++ Data &= 0xfffffffe;
++ RTMP_IO_WRITE32(pAd, TX_BAND_CFG, Data);
++
++ if (pAd->MACVersion == 0x28600100)
++ {
++ RTMP_BBP_IO_WRITE8_BY_REG_ID(pAd, BBP_R69, 0x1A);
++ RTMP_BBP_IO_WRITE8_BY_REG_ID(pAd, BBP_R70, 0x0A);
++ RTMP_BBP_IO_WRITE8_BY_REG_ID(pAd, BBP_R73, 0x16);
++ DBGPRINT(RT_DEBUG_TRACE, ("!!!rt2860C !!! \n" ));
++ }
++
++ DBGPRINT(RT_DEBUG_TRACE, ("!!!40MHz Lower LINK UP !!! Control Channel at Below. Central = %d \n", pAd->CommonCfg.CentralChannel ));
++ }
++ else if ((pAd->CommonCfg.CentralChannel < pAd->CommonCfg.Channel) && (pAd->MlmeAux.HtCapability.HtCapInfo.ChannelWidth == BW_40))
++ {
++ // Must using 40MHz.
++ pAd->CommonCfg.BBPCurrentBW = BW_40;
++ AsicSwitchChannel(pAd, pAd->CommonCfg.CentralChannel, FALSE);
++ AsicLockChannel(pAd, pAd->CommonCfg.CentralChannel);
++
++ RTMP_BBP_IO_READ8_BY_REG_ID(pAd, BBP_R4, &Value);
++ Value &= (~0x18);
++ Value |= 0x10;
++ RTMP_BBP_IO_WRITE8_BY_REG_ID(pAd, BBP_R4, Value);
++
++ RTMP_IO_READ32(pAd, TX_BAND_CFG, &Data);
++ Data |= 0x1;
++ RTMP_IO_WRITE32(pAd, TX_BAND_CFG, Data);
++
++ RTMP_BBP_IO_READ8_BY_REG_ID(pAd, BBP_R3, &Value);
++ Value |= (0x20);
++ RTMP_BBP_IO_WRITE8_BY_REG_ID(pAd, BBP_R3, Value);
++
++ if (pAd->MACVersion == 0x28600100)
++ {
++ RTMP_BBP_IO_WRITE8_BY_REG_ID(pAd, BBP_R69, 0x1A);
++ RTMP_BBP_IO_WRITE8_BY_REG_ID(pAd, BBP_R70, 0x0A);
++ RTMP_BBP_IO_WRITE8_BY_REG_ID(pAd, BBP_R73, 0x16);
++ DBGPRINT(RT_DEBUG_TRACE, ("!!!rt2860C !!! \n" ));
++ }
++
++ DBGPRINT(RT_DEBUG_TRACE, ("!!! 40MHz Upper LINK UP !!! Control Channel at UpperCentral = %d \n", pAd->CommonCfg.CentralChannel ));
++ }
++ else
++#endif // DOT11_N_SUPPORT //
++ {
++ pAd->CommonCfg.BBPCurrentBW = BW_20;
++ pAd->CommonCfg.CentralChannel = pAd->CommonCfg.Channel;
++ AsicSwitchChannel(pAd, pAd->CommonCfg.Channel, FALSE);
++ AsicLockChannel(pAd, pAd->CommonCfg.Channel);
++
++ RTMP_BBP_IO_READ8_BY_REG_ID(pAd, BBP_R4, &Value);
++ Value &= (~0x18);
++ RTMP_BBP_IO_WRITE8_BY_REG_ID(pAd, BBP_R4, Value);
++
++ RTMP_IO_READ32(pAd, TX_BAND_CFG, &Data);
++ Data &= 0xfffffffe;
++ RTMP_IO_WRITE32(pAd, TX_BAND_CFG, Data);
++
++ RTMP_BBP_IO_READ8_BY_REG_ID(pAd, BBP_R3, &Value);
++ Value &= (~0x20);
++ RTMP_BBP_IO_WRITE8_BY_REG_ID(pAd, BBP_R3, Value);
++
++ if (pAd->MACVersion == 0x28600100)
++ {
++ RTMP_BBP_IO_WRITE8_BY_REG_ID(pAd, BBP_R69, 0x16);
++ RTMP_BBP_IO_WRITE8_BY_REG_ID(pAd, BBP_R70, 0x08);
++ RTMP_BBP_IO_WRITE8_BY_REG_ID(pAd, BBP_R73, 0x11);
++ DBGPRINT(RT_DEBUG_TRACE, ("!!!rt2860C !!! \n" ));
++ }
++
++ DBGPRINT(RT_DEBUG_TRACE, ("!!! 20MHz LINK UP !!! \n" ));
++ }
++
++ RTMPSetAGCInitValue(pAd, pAd->CommonCfg.BBPCurrentBW);
++ //
++ // Save BBP_R66 value, it will be used in RTUSBResumeMsduTransmission
++ //
++ RTMP_BBP_IO_READ8_BY_REG_ID(pAd, BBP_R66, &pAd->BbpTuning.R66CurrentValue);
++
++ DBGPRINT(RT_DEBUG_TRACE, ("!!! LINK UP !!! (BssType=%d, AID=%d, ssid=%s, Channel=%d, CentralChannel = %d)\n",
++ BssType, pAd->StaActive.Aid, pAd->CommonCfg.Ssid, pAd->CommonCfg.Channel, pAd->CommonCfg.CentralChannel));
++
++#ifdef DOT11_N_SUPPORT
++ DBGPRINT(RT_DEBUG_TRACE, ("!!! LINK UP !!! (Density =%d, )\n", pAd->MacTab.Content[BSSID_WCID].MpduDensity));
++#endif // DOT11_N_SUPPORT //
++
++ AsicSetBssid(pAd, pAd->CommonCfg.Bssid);
++
++ AsicSetSlotTime(pAd, TRUE);
++ AsicSetEdcaParm(pAd, &pAd->CommonCfg.APEdcaParm);
++
++ // Call this for RTS protectionfor legacy rate, we will always enable RTS threshold, but normally it will not hit
++ AsicUpdateProtect(pAd, 0, (OFDMSETPROTECT | CCKSETPROTECT), TRUE, FALSE);
++
++#ifdef DOT11_N_SUPPORT
++ if ((pAd->StaActive.SupportedPhyInfo.bHtEnable == TRUE))
++ {
++ // Update HT protectionfor based on AP's operating mode.
++ if (pAd->MlmeAux.AddHtInfo.AddHtInfo2.NonGfPresent == 1)
++ {
++ AsicUpdateProtect(pAd, pAd->MlmeAux.AddHtInfo.AddHtInfo2.OperaionMode, ALLN_SETPROTECT, FALSE, TRUE);
++ }
++ else
++ AsicUpdateProtect(pAd, pAd->MlmeAux.AddHtInfo.AddHtInfo2.OperaionMode, ALLN_SETPROTECT, FALSE, FALSE);
++ }
++#endif // DOT11_N_SUPPORT //
++
++ NdisZeroMemory(&pAd->DrsCounters, sizeof(COUNTER_DRS));
++
++ NdisGetSystemUpTime(&Now);
++ pAd->StaCfg.LastBeaconRxTime = Now; // last RX timestamp
++
++ if ((pAd->CommonCfg.TxPreamble != Rt802_11PreambleLong) &&
++ CAP_IS_SHORT_PREAMBLE_ON(pAd->StaActive.CapabilityInfo))
++ {
++ MlmeSetTxPreamble(pAd, Rt802_11PreambleShort);
++ }
++
++ OPSTATUS_CLEAR_FLAG(pAd, fOP_STATUS_AGGREGATION_INUSED);
++
++ if (pAd->CommonCfg.RadarDetect.RDMode == RD_SILENCE_MODE)
++ {
++#ifdef DFS_SUPPORT
++ RadarDetectionStop(pAd);
++#endif // DFS_SUPPORT //
++ }
++ pAd->CommonCfg.RadarDetect.RDMode = RD_NORMAL_MODE;
++
++ if (BssType == BSS_ADHOC)
++ {
++ MakeIbssBeacon(pAd);
++ if ((pAd->CommonCfg.Channel > 14)
++ && (pAd->CommonCfg.bIEEE80211H == 1)
++ && RadarChannelCheck(pAd, pAd->CommonCfg.Channel))
++ {
++ ; //Do nothing
++ }
++ else
++ {
++ AsicEnableIbssSync(pAd);
++ }
++
++ // In ad hoc mode, use MAC table from index 1.
++ // p.s ASIC use all 0xff as termination of WCID table search.To prevent it's 0xff-ff-ff-ff-ff-ff, Write 0 here.
++ RTMP_IO_WRITE32(pAd, MAC_WCID_BASE, 0x00);
++ RTMP_IO_WRITE32(pAd, 0x1808, 0x00);
++
++ // If WEP is enabled, add key material and cipherAlg into Asic
++ // Fill in Shared Key Table(offset: 0x6c00) and Shared Key Mode(offset: 0x7000)
++
++ if (pAd->StaCfg.WepStatus == Ndis802_11WEPEnabled)
++ {
++ PUCHAR Key;
++ UCHAR CipherAlg;
++
++ for (idx=0; idx < SHARE_KEY_NUM; idx++)
++ {
++ CipherAlg = pAd->SharedKey[BSS0][idx].CipherAlg;
++ Key = pAd->SharedKey[BSS0][idx].Key;
++
++ if (pAd->SharedKey[BSS0][idx].KeyLen > 0)
++ {
++ // Set key material and cipherAlg to Asic
++ AsicAddSharedKeyEntry(pAd, BSS0, idx, CipherAlg, Key, NULL, NULL);
++
++ if (idx == pAd->StaCfg.DefaultKeyId)
++ {
++ // Update WCID attribute table and IVEIV table for this group key table
++ RTMPAddWcidAttributeEntry(pAd, BSS0, idx, CipherAlg, NULL);
++ }
++ }
++
++
++ }
++ }
++ // If WPANone is enabled, add key material and cipherAlg into Asic
++ // Fill in Shared Key Table(offset: 0x6c00) and Shared Key Mode(offset: 0x7000)
++ else if (pAd->StaCfg.AuthMode == Ndis802_11AuthModeWPANone)
++ {
++ pAd->StaCfg.DefaultKeyId = 0; // always be zero
++
++ NdisZeroMemory(&pAd->SharedKey[BSS0][0], sizeof(CIPHER_KEY));
++ pAd->SharedKey[BSS0][0].KeyLen = LEN_TKIP_EK;
++ NdisMoveMemory(pAd->SharedKey[BSS0][0].Key, pAd->StaCfg.PMK, LEN_TKIP_EK);
++
++ if (pAd->StaCfg.PairCipher == Ndis802_11Encryption2Enabled)
++ {
++ NdisMoveMemory(pAd->SharedKey[BSS0][0].RxMic, &pAd->StaCfg.PMK[16], LEN_TKIP_RXMICK);
++ NdisMoveMemory(pAd->SharedKey[BSS0][0].TxMic, &pAd->StaCfg.PMK[16], LEN_TKIP_TXMICK);
++ }
++
++ // Decide its ChiperAlg
++ if (pAd->StaCfg.PairCipher == Ndis802_11Encryption2Enabled)
++ pAd->SharedKey[BSS0][0].CipherAlg = CIPHER_TKIP;
++ else if (pAd->StaCfg.PairCipher == Ndis802_11Encryption3Enabled)
++ pAd->SharedKey[BSS0][0].CipherAlg = CIPHER_AES;
++ else
++ {
++ DBGPRINT(RT_DEBUG_TRACE, ("Unknow Cipher (=%d), set Cipher to AES\n", pAd->StaCfg.PairCipher));
++ pAd->SharedKey[BSS0][0].CipherAlg = CIPHER_AES;
++ }
++
++ // Set key material and cipherAlg to Asic
++ AsicAddSharedKeyEntry(pAd,
++ BSS0,
++ 0,
++ pAd->SharedKey[BSS0][0].CipherAlg,
++ pAd->SharedKey[BSS0][0].Key,
++ pAd->SharedKey[BSS0][0].TxMic,
++ pAd->SharedKey[BSS0][0].RxMic);
++
++ // Update WCID attribute table and IVEIV table for this group key table
++ RTMPAddWcidAttributeEntry(pAd, BSS0, 0, pAd->SharedKey[BSS0][0].CipherAlg, NULL);
++
++ }
++
++ }
++ else // BSS_INFRA
++ {
++ // Check the new SSID with last SSID
++ while (Cancelled == TRUE)
++ {
++ if (pAd->CommonCfg.LastSsidLen == pAd->CommonCfg.SsidLen)
++ {
++ if (RTMPCompareMemory(pAd->CommonCfg.LastSsid, pAd->CommonCfg.Ssid, pAd->CommonCfg.LastSsidLen) == 0)
++ {
++ // Link to the old one no linkdown is required.
++ break;
++ }
++ }
++ // Send link down event before set to link up
++ pAd->IndicateMediaState = NdisMediaStateDisconnected;
++ RTMP_IndicateMediaState(pAd);
++ pAd->ExtraInfo = GENERAL_LINK_DOWN;
++ DBGPRINT(RT_DEBUG_TRACE, ("NDIS_STATUS_MEDIA_DISCONNECT Event AA!\n"));
++ break;
++ }
++
++ //
++ // On WPA mode, Remove All Keys if not connect to the last BSSID
++ // Key will be set after 4-way handshake.
++ //
++ if ((pAd->StaCfg.AuthMode >= Ndis802_11AuthModeWPA))
++ {
++ ULONG IV;
++
++ // Remove all WPA keys
++ RTMPWPARemoveAllKeys(pAd);
++ pAd->StaCfg.PortSecured = WPA_802_1X_PORT_NOT_SECURED;
++ pAd->StaCfg.PrivacyFilter = Ndis802_11PrivFilter8021xWEP;
++
++ // Fixed connection failed with Range Maximizer - 515 AP (Marvell Chip) when security is WPAPSK/TKIP
++ // If IV related values are too large in GroupMsg2, AP would ignore this message.
++ IV = 0;
++ IV |= (pAd->StaCfg.DefaultKeyId << 30);
++ AsicUpdateWCIDIVEIV(pAd, BSSID_WCID, IV, 0);
++ }
++ // NOTE:
++ // the decision of using "short slot time" or not may change dynamically due to
++ // new STA association to the AP. so we have to decide that upon parsing BEACON, not here
++
++ // NOTE:
++ // the decision to use "RTC/CTS" or "CTS-to-self" protection or not may change dynamically
++ // due to new STA association to the AP. so we have to decide that upon parsing BEACON, not here
++
++ ComposePsPoll(pAd);
++ ComposeNullFrame(pAd);
++
++ AsicEnableBssSync(pAd);
++
++ // Add BSSID to WCID search table
++ AsicUpdateRxWCIDTable(pAd, BSSID_WCID, pAd->CommonCfg.Bssid);
++
++ NdisAcquireSpinLock(&pAd->MacTabLock);
++ // add this BSSID entry into HASH table
++ {
++ UCHAR HashIdx;
++
++ //pEntry = &pAd->MacTab.Content[BSSID_WCID];
++ HashIdx = MAC_ADDR_HASH_INDEX(pAd->CommonCfg.Bssid);
++ if (pAd->MacTab.Hash[HashIdx] == NULL)
++ {
++ pAd->MacTab.Hash[HashIdx] = pEntry;
++ }
++ else
++ {
++ pCurrEntry = pAd->MacTab.Hash[HashIdx];
++ while (pCurrEntry->pNext != NULL)
++ pCurrEntry = pCurrEntry->pNext;
++ pCurrEntry->pNext = pEntry;
++ }
++ }
++ NdisReleaseSpinLock(&pAd->MacTabLock);
++
++
++ // If WEP is enabled, add paiewise and shared key
++#ifdef WPA_SUPPLICANT_SUPPORT
++ if (((pAd->StaCfg.WpaSupplicantUP)&&
++ (pAd->StaCfg.WepStatus == Ndis802_11WEPEnabled)&&
++ (pAd->StaCfg.PortSecured == WPA_802_1X_PORT_SECURED)) ||
++ ((pAd->StaCfg.WpaSupplicantUP == WPA_SUPPLICANT_DISABLE)&&
++ (pAd->StaCfg.WepStatus == Ndis802_11WEPEnabled)))
++#else
++ if (pAd->StaCfg.WepStatus == Ndis802_11WEPEnabled)
++#endif // WPA_SUPPLICANT_SUPPORT //
++ {
++ PUCHAR Key;
++ UCHAR CipherAlg;
++
++ for (idx=0; idx < SHARE_KEY_NUM; idx++)
++ {
++ CipherAlg = pAd->SharedKey[BSS0][idx].CipherAlg;
++ Key = pAd->SharedKey[BSS0][idx].Key;
++
++ if (pAd->SharedKey[BSS0][idx].KeyLen > 0)
++ {
++ // Set key material and cipherAlg to Asic
++ AsicAddSharedKeyEntry(pAd, BSS0, idx, CipherAlg, Key, NULL, NULL);
++
++ if (idx == pAd->StaCfg.DefaultKeyId)
++ {
++ // Assign group key info
++ RTMPAddWcidAttributeEntry(pAd, BSS0, idx, CipherAlg, NULL);
++
++ // Assign pairwise key info
++ RTMPAddWcidAttributeEntry(pAd, BSS0, idx, CipherAlg, pEntry);
++ }
++ }
++ }
++ }
++
++ // only INFRASTRUCTURE mode need to indicate connectivity immediately; ADHOC mode
++ // should wait until at least 2 active nodes in this BSSID.
++ OPSTATUS_SET_FLAG(pAd, fOP_STATUS_MEDIA_STATE_CONNECTED);
++
++ // For GUI ++
++ if (pAd->StaCfg.AuthMode < Ndis802_11AuthModeWPA)
++ {
++ pAd->IndicateMediaState = NdisMediaStateConnected;
++ pAd->ExtraInfo = GENERAL_LINK_UP;
++ RTMP_IndicateMediaState(pAd);
++ }
++ // --
++
++ // Add BSSID in my MAC Table.
++ NdisAcquireSpinLock(&pAd->MacTabLock);
++ RTMPMoveMemory(pAd->MacTab.Content[BSSID_WCID].Addr, pAd->CommonCfg.Bssid, MAC_ADDR_LEN);
++ pAd->MacTab.Content[BSSID_WCID].Aid = BSSID_WCID;
++ pAd->MacTab.Content[BSSID_WCID].pAd = pAd;
++ pAd->MacTab.Content[BSSID_WCID].ValidAsCLI = TRUE; //Although this is bssid..still set ValidAsCl
++ pAd->MacTab.Size = 1; // infra mode always set MACtab size =1.
++ pAd->MacTab.Content[BSSID_WCID].Sst = SST_ASSOC;
++ pAd->MacTab.Content[BSSID_WCID].AuthState = SST_ASSOC;
++ pAd->MacTab.Content[BSSID_WCID].WepStatus = pAd->StaCfg.WepStatus;
++ NdisReleaseSpinLock(&pAd->MacTabLock);
++
++ DBGPRINT(RT_DEBUG_TRACE, ("!!! LINK UP !!! ClientStatusFlags=%lx)\n",
++ pAd->MacTab.Content[BSSID_WCID].ClientStatusFlags));
++
++ MlmeUpdateTxRates(pAd, TRUE, BSS0);
++#ifdef DOT11_N_SUPPORT
++ MlmeUpdateHtTxRates(pAd, BSS0);
++ DBGPRINT(RT_DEBUG_TRACE, ("!!! LINK UP !! (StaActive.bHtEnable =%d, )\n", pAd->StaActive.SupportedPhyInfo.bHtEnable));
++#endif // DOT11_N_SUPPORT //
++
++ //
++ // Report Adjacent AP report.
++ //
++#ifdef LEAP_SUPPORT
++ CCXAdjacentAPReport(pAd);
++#endif // LEAP_SUPPORT //
++
++ if (pAd->CommonCfg.bAggregationCapable)
++ {
++ if ((pAd->CommonCfg.bPiggyBackCapable) && (pAd->MlmeAux.APRalinkIe & 0x00000003) == 3)
++ {
++
++ OPSTATUS_SET_FLAG(pAd, fOP_STATUS_PIGGYBACK_INUSED);
++ OPSTATUS_SET_FLAG(pAd, fOP_STATUS_AGGREGATION_INUSED);
++ RTMPSetPiggyBack(pAd, TRUE);
++ DBGPRINT(RT_DEBUG_TRACE, ("Turn on Piggy-Back\n"));
++ }
++ else if (pAd->MlmeAux.APRalinkIe & 0x00000001)
++ {
++ OPSTATUS_SET_FLAG(pAd, fOP_STATUS_AGGREGATION_INUSED);
++ }
++ }
++
++ if (pAd->MlmeAux.APRalinkIe != 0x0)
++ {
++#ifdef DOT11_N_SUPPORT
++ if (CLIENT_STATUS_TEST_FLAG(&pAd->MacTab.Content[BSSID_WCID], fCLIENT_STATUS_RDG_CAPABLE))
++ {
++ AsicEnableRDG(pAd);
++ }
++#endif // DOT11_N_SUPPORT //
++ OPSTATUS_SET_FLAG(pAd, fCLIENT_STATUS_RALINK_CHIPSET);
++ CLIENT_STATUS_SET_FLAG(&pAd->MacTab.Content[BSSID_WCID], fCLIENT_STATUS_RALINK_CHIPSET);
++ }
++ else
++ {
++ OPSTATUS_CLEAR_FLAG(pAd, fCLIENT_STATUS_RALINK_CHIPSET);
++ CLIENT_STATUS_CLEAR_FLAG(&pAd->MacTab.Content[BSSID_WCID], fCLIENT_STATUS_RALINK_CHIPSET);
++ }
++ }
++
++#ifdef DOT11_N_SUPPORT
++ DBGPRINT(RT_DEBUG_TRACE, ("NDIS_STATUS_MEDIA_CONNECT Event B!.BACapability = %x. ClientStatusFlags = %lx\n", pAd->CommonCfg.BACapability.word, pAd->MacTab.Content[BSSID_WCID].ClientStatusFlags));
++#endif // DOT11_N_SUPPORT //
++
++ // Set LED
++ RTMPSetLED(pAd, LED_LINK_UP);
++
++ pAd->Mlme.PeriodicRound = 0;
++ pAd->Mlme.OneSecPeriodicRound = 0;
++ pAd->bConfigChanged = FALSE; // Reset config flag
++ pAd->ExtraInfo = GENERAL_LINK_UP; // Update extra information to link is up
++
++ // Set asic auto fall back
++ {
++ PUCHAR pTable;
++ UCHAR TableSize = 0;
++
++ MlmeSelectTxRateTable(pAd, &pAd->MacTab.Content[BSSID_WCID], &pTable, &TableSize, &pAd->CommonCfg.TxRateIndex);
++ AsicUpdateAutoFallBackTable(pAd, pTable);
++ }
++
++ NdisAcquireSpinLock(&pAd->MacTabLock);
++ pEntry->HTPhyMode.word = pAd->StaCfg.HTPhyMode.word;
++ pEntry->MaxHTPhyMode.word = pAd->StaCfg.HTPhyMode.word;
++ if (pAd->StaCfg.bAutoTxRateSwitch == FALSE)
++ {
++ pEntry->bAutoTxRateSwitch = FALSE;
++#ifdef DOT11_N_SUPPORT
++ if (pEntry->HTPhyMode.field.MCS == 32)
++ pEntry->HTPhyMode.field.ShortGI = GI_800;
++
++ if ((pEntry->HTPhyMode.field.MCS > MCS_7) || (pEntry->HTPhyMode.field.MCS == 32))
++ pEntry->HTPhyMode.field.STBC = STBC_NONE;
++#endif // DOT11_N_SUPPORT //
++ // If the legacy mode is set, overwrite the transmit setting of this entry.
++ if (pEntry->HTPhyMode.field.MODE <= MODE_OFDM)
++ RTMPUpdateLegacyTxSetting((UCHAR)pAd->StaCfg.DesiredTransmitSetting.field.FixedTxMode, pEntry);
++ }
++ else
++ pEntry->bAutoTxRateSwitch = TRUE;
++ NdisReleaseSpinLock(&pAd->MacTabLock);
++
++ // Let Link Status Page display first initial rate.
++ pAd->LastTxRate = (USHORT)(pEntry->HTPhyMode.word);
++ // Select DAC according to HT or Legacy
++ if (pAd->StaActive.SupportedPhyInfo.MCSSet[0] != 0x00)
++ {
++ RTMP_BBP_IO_READ8_BY_REG_ID(pAd, BBP_R1, &Value);
++ Value &= (~0x18);
++ if (pAd->Antenna.field.TxPath == 2)
++ {
++ Value |= 0x10;
++ }
++ RTMP_BBP_IO_WRITE8_BY_REG_ID(pAd, BBP_R1, Value);
++ }
++ else
++ {
++ RTMP_BBP_IO_READ8_BY_REG_ID(pAd, BBP_R1, &Value);
++ Value &= (~0x18);
++ RTMP_BBP_IO_WRITE8_BY_REG_ID(pAd, BBP_R1, Value);
++ }
++
++#ifdef DOT11_N_SUPPORT
++ if (pAd->StaActive.SupportedPhyInfo.bHtEnable == FALSE)
++ {
++ }
++ else if (pEntry->MaxRAmpduFactor == 0)
++ {
++ // If HT AP doesn't support MaxRAmpduFactor = 1, we need to set max PSDU to 0.
++ // Because our Init value is 1 at MACRegTable.
++ RTMP_IO_WRITE32(pAd, MAX_LEN_CFG, 0x0fff);
++ }
++#endif // DOT11_N_SUPPORT //
++
++ // Patch for Marvel AP to gain high throughput
++ // Need to set as following,
++ // 1. Set txop in register-EDCA_AC0_CFG as 0x60
++ // 2. Set EnTXWriteBackDDONE in register-WPDMA_GLO_CFG as zero
++ // 3. PBF_MAX_PCNT as 0x1F3FBF9F
++ // 4. kick per two packets when dequeue
++ //
++ // Txop can only be modified when RDG is off, WMM is disable and TxBurst is enable
++ //
++ // if 1. Legacy AP WMM on, or 2. 11n AP, AMPDU disable. Force turn off burst no matter what bEnableTxBurst is.
++#ifdef DOT11_N_SUPPORT
++ if (((pAd->StaActive.SupportedPhyInfo.bHtEnable == FALSE) && (OPSTATUS_TEST_FLAG(pAd, fOP_STATUS_WMM_INUSED)))
++ || ((pAd->StaActive.SupportedPhyInfo.bHtEnable == TRUE) && (pAd->CommonCfg.BACapability.field.Policy == BA_NOTUSE)))
++ {
++ RTMP_IO_READ32(pAd, EDCA_AC0_CFG, &Data);
++ Data &= 0xFFFFFF00;
++ RTMP_IO_WRITE32(pAd, EDCA_AC0_CFG, Data);
++
++ RTMP_IO_WRITE32(pAd, PBF_MAX_PCNT, 0x1F3F7F9F);
++ DBGPRINT(RT_DEBUG_TRACE, ("Txburst 1\n"));
++ }
++ else
++#endif // DOT11_N_SUPPORT //
++ if (pAd->CommonCfg.bEnableTxBurst)
++ {
++ RTMP_IO_READ32(pAd, EDCA_AC0_CFG, &Data);
++ Data &= 0xFFFFFF00;
++ Data |= 0x60;
++ RTMP_IO_WRITE32(pAd, EDCA_AC0_CFG, Data);
++ pAd->CommonCfg.IOTestParm.bNowAtherosBurstOn = TRUE;
++
++ RTMP_IO_WRITE32(pAd, PBF_MAX_PCNT, 0x1F3FBF9F);
++ DBGPRINT(RT_DEBUG_TRACE, ("Txburst 2\n"));
++ }
++ else
++ {
++ RTMP_IO_READ32(pAd, EDCA_AC0_CFG, &Data);
++ Data &= 0xFFFFFF00;
++ RTMP_IO_WRITE32(pAd, EDCA_AC0_CFG, Data);
++
++ RTMP_IO_WRITE32(pAd, PBF_MAX_PCNT, 0x1F3F7F9F);
++ DBGPRINT(RT_DEBUG_TRACE, ("Txburst 3\n"));
++ }
++
++#ifdef DOT11_N_SUPPORT
++ // Re-check to turn on TX burst or not.
++ if ((pAd->CommonCfg.IOTestParm.bLastAtheros == TRUE) && ((STA_WEP_ON(pAd))||(STA_TKIP_ON(pAd))))
++ {
++ pAd->CommonCfg.IOTestParm.bNextDisableRxBA = TRUE;
++ if (pAd->CommonCfg.bEnableTxBurst)
++ {
++ UINT32 MACValue = 0;
++ // Force disable TXOP value in this case. The same action in MLMEUpdateProtect too.
++ // I didn't change PBF_MAX_PCNT setting.
++ RTMP_IO_READ32(pAd, EDCA_AC0_CFG, &MACValue);
++ MACValue &= 0xFFFFFF00;
++ RTMP_IO_WRITE32(pAd, EDCA_AC0_CFG, MACValue);
++ pAd->CommonCfg.IOTestParm.bNowAtherosBurstOn = FALSE;
++ }
++ }
++ else
++ {
++ pAd->CommonCfg.IOTestParm.bNextDisableRxBA = FALSE;
++ }
++#endif // DOT11_N_SUPPORT //
++
++ pAd->CommonCfg.IOTestParm.bLastAtheros = FALSE;
++ COPY_MAC_ADDR(pAd->CommonCfg.LastBssid, pAd->CommonCfg.Bssid);
++ DBGPRINT(RT_DEBUG_TRACE, ("!!!pAd->bNextDisableRxBA= %d \n", pAd->CommonCfg.IOTestParm.bNextDisableRxBA));
++ // BSSID add in one MAC entry too. Because in Tx, ASIC need to check Cipher and IV/EIV, BAbitmap
++ // Pther information in MACTab.Content[BSSID_WCID] is not necessary for driver.
++ // Note: As STA, The MACTab.Content[BSSID_WCID]. PairwiseKey and Shared Key for BSS0 are the same.
++
++ if (pAd->StaCfg.WepStatus <= Ndis802_11WEPDisabled)
++ {
++ pAd->StaCfg.PortSecured = WPA_802_1X_PORT_SECURED;
++ pAd->StaCfg.PrivacyFilter = Ndis802_11PrivFilterAcceptAll;
++ }
++
++ NdisAcquireSpinLock(&pAd->MacTabLock);
++ pEntry->PortSecured = pAd->StaCfg.PortSecured;
++ NdisReleaseSpinLock(&pAd->MacTabLock);
++
++ //
++ // Patch Atheros AP TX will breakdown issue.
++ // AP Model: DLink DWL-8200AP
++ //
++ if (INFRA_ON(pAd) && OPSTATUS_TEST_FLAG(pAd, fOP_STATUS_WMM_INUSED) && STA_TKIP_ON(pAd))
++ {
++ RTMP_IO_WRITE32(pAd, RX_PARSER_CFG, 0x01);
++ }
++ else
++ {
++ RTMP_IO_WRITE32(pAd, RX_PARSER_CFG, 0x00);
++ }
++
++ RTMP_CLEAR_FLAG(pAd, fRTMP_ADAPTER_BSS_SCAN_IN_PROGRESS);
++
++
++#ifdef DOT11_N_SUPPORT
++#ifdef DOT11N_DRAFT3
++ if ((pAd->CommonCfg.BACapability.field.b2040CoexistScanSup) && (pAd->CommonCfg.Channel <= 11))
++ {
++ OPSTATUS_SET_FLAG(pAd, fOP_STATUS_SCAN_2040);
++ BuildEffectedChannelList(pAd);
++ }
++#endif // DOT11N_DRAFT3 //
++#endif // DOT11_N_SUPPORT //
++}
++
++/*
++ ==========================================================================
++
++ Routine Description:
++ Disconnect current BSSID
++
++ Arguments:
++ pAd - Pointer to our adapter
++ IsReqFromAP - Request from AP
++
++ Return Value:
++ None
++
++ IRQL = DISPATCH_LEVEL
++
++ Note:
++ We need more information to know it's this requst from AP.
++ If yes! we need to do extra handling, for example, remove the WPA key.
++ Otherwise on 4-way handshaking will faied, since the WPA key didn't be
++ remove while auto reconnect.
++ Disconnect request from AP, it means we will start afresh 4-way handshaking
++ on WPA mode.
++
++ ==========================================================================
++*/
++VOID LinkDown(
++ IN PRTMP_ADAPTER pAd,
++ IN BOOLEAN IsReqFromAP)
++{
++ UCHAR i, ByteValue = 0;
++
++ // Do nothing if monitor mode is on
++ if (MONITOR_ON(pAd))
++ return;
++
++#ifdef RALINK_ATE
++ // Nothing to do in ATE mode.
++ if (ATE_ON(pAd))
++ return;
++#endif // RALINK_ATE //
++
++ if (pAd->CommonCfg.bWirelessEvent)
++ {
++ RTMPSendWirelessEvent(pAd, IW_STA_LINKDOWN_EVENT_FLAG, pAd->MacTab.Content[BSSID_WCID].Addr, BSS0, 0);
++ }
++
++ DBGPRINT(RT_DEBUG_TRACE, ("!!! LINK DOWN !!!\n"));
++ OPSTATUS_CLEAR_FLAG(pAd, fOP_STATUS_AGGREGATION_INUSED);
++
++ if (ADHOC_ON(pAd)) // Adhoc mode link down
++ {
++ DBGPRINT(RT_DEBUG_TRACE, ("!!! LINK DOWN 1!!!\n"));
++
++ OPSTATUS_CLEAR_FLAG(pAd, fOP_STATUS_ADHOC_ON);
++ OPSTATUS_CLEAR_FLAG(pAd, fOP_STATUS_MEDIA_STATE_CONNECTED);
++ pAd->IndicateMediaState = NdisMediaStateDisconnected;
++ RTMP_IndicateMediaState(pAd);
++ pAd->ExtraInfo = GENERAL_LINK_DOWN;
++ BssTableDeleteEntry(&pAd->ScanTab, pAd->CommonCfg.Bssid, pAd->CommonCfg.Channel);
++ DBGPRINT(RT_DEBUG_TRACE, ("!!! MacTab.Size=%d !!!\n", pAd->MacTab.Size));
++ }
++ else // Infra structure mode
++ {
++ DBGPRINT(RT_DEBUG_TRACE, ("!!! LINK DOWN 2!!!\n"));
++
++#ifdef QOS_DLS_SUPPORT
++ // DLS tear down frame must be sent before link down
++ // send DLS-TEAR_DOWN message
++ if (pAd->CommonCfg.bDLSCapable)
++ {
++ // tear down local dls table entry
++ for (i=0; i<MAX_NUM_OF_INIT_DLS_ENTRY; i++)
++ {
++ if (pAd->StaCfg.DLSEntry[i].Valid && (pAd->StaCfg.DLSEntry[i].Status == DLS_FINISH))
++ {
++ pAd->StaCfg.DLSEntry[i].Status = DLS_NONE;
++ RTMPSendDLSTearDownFrame(pAd, pAd->StaCfg.DLSEntry[i].MacAddr);
++ }
++ }
++
++ // tear down peer dls table entry
++ for (i=MAX_NUM_OF_INIT_DLS_ENTRY; i<MAX_NUM_OF_DLS_ENTRY; i++)
++ {
++ if (pAd->StaCfg.DLSEntry[i].Valid && (pAd->StaCfg.DLSEntry[i].Status == DLS_FINISH))
++ {
++ pAd->StaCfg.DLSEntry[i].Status = DLS_NONE;
++ RTMPSendDLSTearDownFrame(pAd, pAd->StaCfg.DLSEntry[i].MacAddr);
++ }
++ }
++ }
++#endif // QOS_DLS_SUPPORT //
++
++ OPSTATUS_CLEAR_FLAG(pAd, fOP_STATUS_INFRA_ON);
++ OPSTATUS_CLEAR_FLAG(pAd, fOP_STATUS_MEDIA_STATE_CONNECTED);
++
++ // Saved last SSID for linkup comparison
++ pAd->CommonCfg.LastSsidLen = pAd->CommonCfg.SsidLen;
++ NdisMoveMemory(pAd->CommonCfg.LastSsid, pAd->CommonCfg.Ssid, pAd->CommonCfg.LastSsidLen);
++ COPY_MAC_ADDR(pAd->CommonCfg.LastBssid, pAd->CommonCfg.Bssid);
++ if (pAd->MlmeAux.CurrReqIsFromNdis == TRUE)
++ {
++ pAd->IndicateMediaState = NdisMediaStateDisconnected;
++ RTMP_IndicateMediaState(pAd);
++ pAd->ExtraInfo = GENERAL_LINK_DOWN;
++ DBGPRINT(RT_DEBUG_TRACE, ("NDIS_STATUS_MEDIA_DISCONNECT Event A!\n"));
++ pAd->MlmeAux.CurrReqIsFromNdis = FALSE;
++ }
++ else
++ {
++ //
++ // If disassociation request is from NDIS, then we don't need to delete BSSID from entry.
++ // Otherwise lost beacon or receive De-Authentication from AP,
++ // then we should delete BSSID from BssTable.
++ // If we don't delete from entry, roaming will fail.
++ //
++ BssTableDeleteEntry(&pAd->ScanTab, pAd->CommonCfg.Bssid, pAd->CommonCfg.Channel);
++ }
++
++ // restore back to -
++ // 1. long slot (20 us) or short slot (9 us) time
++ // 2. turn on/off RTS/CTS and/or CTS-to-self protection
++ // 3. short preamble
++ OPSTATUS_CLEAR_FLAG(pAd, fOP_STATUS_BG_PROTECTION_INUSED);
++
++ if (pAd->StaCfg.CCXAdjacentAPReportFlag == TRUE)
++ {
++ //
++ // Record current AP's information.
++ // for later used reporting Adjacent AP report.
++ //
++ pAd->StaCfg.CCXAdjacentAPChannel = pAd->CommonCfg.Channel;
++ pAd->StaCfg.CCXAdjacentAPSsidLen = pAd->CommonCfg.SsidLen;
++ NdisMoveMemory(pAd->StaCfg.CCXAdjacentAPSsid, pAd->CommonCfg.Ssid, pAd->StaCfg.CCXAdjacentAPSsidLen);
++ COPY_MAC_ADDR(pAd->StaCfg.CCXAdjacentAPBssid, pAd->CommonCfg.Bssid);
++ }
++
++#ifdef EXT_BUILD_CHANNEL_LIST
++ // Country IE of the AP will be evaluated and will be used.
++ if (pAd->StaCfg.IEEE80211dClientMode != Rt802_11_D_None)
++ {
++ NdisMoveMemory(&pAd->CommonCfg.CountryCode[0], &pAd->StaCfg.StaOriCountryCode[0], 2);
++ pAd->CommonCfg.Geography = pAd->StaCfg.StaOriGeography;
++ BuildChannelListEx(pAd);
++ }
++#endif // EXT_BUILD_CHANNEL_LIST //
++
++ }
++
++ for (i=1; i<MAX_LEN_OF_MAC_TABLE; i++)
++ {
++ if (pAd->MacTab.Content[i].ValidAsCLI == TRUE)
++ MacTableDeleteEntry(pAd, pAd->MacTab.Content[i].Aid, pAd->MacTab.Content[i].Addr);
++ }
++
++ pAd->StaCfg.CCXQosECWMin = 4;
++ pAd->StaCfg.CCXQosECWMax = 10;
++
++ AsicSetSlotTime(pAd, TRUE); //FALSE);
++ AsicSetEdcaParm(pAd, NULL);
++
++ // Set LED
++ RTMPSetLED(pAd, LED_LINK_DOWN);
++ pAd->LedIndicatorStregth = 0xF0;
++ RTMPSetSignalLED(pAd, -100); // Force signal strength Led to be turned off, firmware is not done it.
++
++ AsicDisableSync(pAd);
++
++ pAd->Mlme.PeriodicRound = 0;
++ pAd->Mlme.OneSecPeriodicRound = 0;
++
++ if (pAd->StaCfg.BssType == BSS_INFRA)
++ {
++ // Remove StaCfg Information after link down
++ NdisZeroMemory(pAd->CommonCfg.Bssid, MAC_ADDR_LEN);
++ NdisZeroMemory(pAd->CommonCfg.Ssid, MAX_LEN_OF_SSID);
++ pAd->CommonCfg.SsidLen = 0;
++ }
++#ifdef DOT11_N_SUPPORT
++ NdisZeroMemory(&pAd->MlmeAux.HtCapability, sizeof(HT_CAPABILITY_IE));
++ NdisZeroMemory(&pAd->MlmeAux.AddHtInfo, sizeof(ADD_HT_INFO_IE));
++ pAd->MlmeAux.HtCapabilityLen = 0;
++ pAd->MlmeAux.NewExtChannelOffset = 0xff;
++#endif // DOT11_N_SUPPORT //
++
++ // Reset WPA-PSK state. Only reset when supplicant enabled
++ if (pAd->StaCfg.WpaState != SS_NOTUSE)
++ {
++ pAd->StaCfg.WpaState = SS_START;
++ // Clear Replay counter
++ NdisZeroMemory(pAd->StaCfg.ReplayCounter, 8);
++
++#ifdef QOS_DLS_SUPPORT
++ if (pAd->CommonCfg.bDLSCapable)
++ NdisZeroMemory(pAd->StaCfg.DlsReplayCounter, 8);
++#endif // QOS_DLS_SUPPORT //
++ }
++
++
++ //
++ // if link down come from AP, we need to remove all WPA keys on WPA mode.
++ // otherwise will cause 4-way handshaking failed, since the WPA key not empty.
++ //
++ if ((IsReqFromAP) && (pAd->StaCfg.AuthMode >= Ndis802_11AuthModeWPA))
++ {
++ // Remove all WPA keys
++ RTMPWPARemoveAllKeys(pAd);
++ }
++
++ // 802.1x port control
++#ifdef WPA_SUPPLICANT_SUPPORT
++ // Prevent clear PortSecured here with static WEP
++ // NetworkManger set security policy first then set SSID to connect AP.
++ if (pAd->StaCfg.WpaSupplicantUP &&
++ (pAd->StaCfg.WepStatus == Ndis802_11WEPEnabled) &&
++ (pAd->StaCfg.IEEE8021X == FALSE))
++ {
++ pAd->StaCfg.PortSecured = WPA_802_1X_PORT_SECURED;
++ }
++ else
++#endif // WPA_SUPPLICANT_SUPPORT //
++ {
++ pAd->StaCfg.PortSecured = WPA_802_1X_PORT_NOT_SECURED;
++ pAd->StaCfg.PrivacyFilter = Ndis802_11PrivFilter8021xWEP;
++ }
++
++ NdisAcquireSpinLock(&pAd->MacTabLock);
++ pAd->MacTab.Content[BSSID_WCID].PortSecured = pAd->StaCfg.PortSecured;
++ NdisReleaseSpinLock(&pAd->MacTabLock);
++
++ pAd->StaCfg.MicErrCnt = 0;
++
++ // Turn off Ckip control flag
++ pAd->StaCfg.bCkipOn = FALSE;
++ pAd->StaCfg.CCXEnable = FALSE;
++
++ pAd->IndicateMediaState = NdisMediaStateDisconnected;
++ // Update extra information to link is up
++ pAd->ExtraInfo = GENERAL_LINK_DOWN;
++
++ //pAd->StaCfg.AdhocBOnlyJoined = FALSE;
++ //pAd->StaCfg.AdhocBGJoined = FALSE;
++ //pAd->StaCfg.Adhoc20NJoined = FALSE;
++ pAd->StaActive.SupportedPhyInfo.bHtEnable = FALSE;
++
++ // Reset the Current AP's IP address
++ NdisZeroMemory(pAd->StaCfg.AironetIPAddress, 4);
++#ifdef RT2870
++ pAd->bUsbTxBulkAggre = FALSE;
++#endif // RT2870 //
++
++ // Clean association information
++ NdisZeroMemory(&pAd->StaCfg.AssocInfo, sizeof(NDIS_802_11_ASSOCIATION_INFORMATION));
++ pAd->StaCfg.AssocInfo.Length = sizeof(NDIS_802_11_ASSOCIATION_INFORMATION);
++ pAd->StaCfg.ReqVarIELen = 0;
++ pAd->StaCfg.ResVarIELen = 0;
++
++ //
++ // Reset RSSI value after link down
++ //
++ pAd->StaCfg.RssiSample.AvgRssi0 = 0;
++ pAd->StaCfg.RssiSample.AvgRssi0X8 = 0;
++ pAd->StaCfg.RssiSample.AvgRssi1 = 0;
++ pAd->StaCfg.RssiSample.AvgRssi1X8 = 0;
++ pAd->StaCfg.RssiSample.AvgRssi2 = 0;
++ pAd->StaCfg.RssiSample.AvgRssi2X8 = 0;
++
++ // Restore MlmeRate
++ pAd->CommonCfg.MlmeRate = pAd->CommonCfg.BasicMlmeRate;
++ pAd->CommonCfg.RtsRate = pAd->CommonCfg.BasicMlmeRate;
++
++#ifdef DOT11_N_SUPPORT
++ //
++ // After Link down, reset piggy-back setting in ASIC. Disable RDG.
++ //
++ if (pAd->CommonCfg.BBPCurrentBW == BW_40)
++ {
++ pAd->CommonCfg.BBPCurrentBW = BW_20;
++ RTMP_BBP_IO_READ8_BY_REG_ID(pAd, BBP_R4, &ByteValue);
++ ByteValue &= (~0x18);
++ RTMP_BBP_IO_WRITE8_BY_REG_ID(pAd, BBP_R4, ByteValue);
++ }
++#endif // DOT11_N_SUPPORT //
++ // Reset DAC
++ RTMP_BBP_IO_READ8_BY_REG_ID(pAd, BBP_R1, &ByteValue);
++ ByteValue &= (~0x18);
++ if (pAd->Antenna.field.TxPath == 2)
++ {
++ ByteValue |= 0x10;
++ }
++ RTMP_BBP_IO_WRITE8_BY_REG_ID(pAd, BBP_R1, ByteValue);
++
++ RTMPSetPiggyBack(pAd,FALSE);
++ OPSTATUS_CLEAR_FLAG(pAd, fOP_STATUS_PIGGYBACK_INUSED);
++
++#ifdef DOT11_N_SUPPORT
++ pAd->CommonCfg.BACapability.word = pAd->CommonCfg.REGBACapability.word;
++#endif // DOT11_N_SUPPORT //
++
++ // Restore all settings in the following.
++ AsicUpdateProtect(pAd, 0, (ALLN_SETPROTECT|CCKSETPROTECT|OFDMSETPROTECT), TRUE, FALSE);
++ AsicDisableRDG(pAd);
++ pAd->CommonCfg.IOTestParm.bCurrentAtheros = FALSE;
++ pAd->CommonCfg.IOTestParm.bNowAtherosBurstOn = FALSE;
++
++#ifdef DOT11_N_SUPPORT
++#ifdef DOT11N_DRAFT3
++ OPSTATUS_CLEAR_FLAG(pAd, fOP_STATUS_SCAN_2040);
++ pAd->CommonCfg.BSSCoexist2040.word = 0;
++ TriEventInit(pAd);
++ for (i = 0; i < (pAd->ChannelListNum - 1); i++)
++ {
++ pAd->ChannelList[i].bEffectedChannel = FALSE;
++ }
++#endif // DOT11N_DRAFT3 //
++#endif // DOT11_N_SUPPORT //
++
++ RTMP_IO_WRITE32(pAd, MAX_LEN_CFG, 0x1fff);
++ RTMP_CLEAR_FLAG(pAd, fRTMP_ADAPTER_BSS_SCAN_IN_PROGRESS);
++
++#ifdef WPA_SUPPLICANT_SUPPORT
++#ifndef NATIVE_WPA_SUPPLICANT_SUPPORT
++ if (pAd->StaCfg.WpaSupplicantUP) {
++ union iwreq_data wrqu;
++ //send disassociate event to wpa_supplicant
++ memset(&wrqu, 0, sizeof(wrqu));
++ wrqu.data.flags = RT_DISASSOC_EVENT_FLAG;
++ wireless_send_event(pAd->net_dev, IWEVCUSTOM, &wrqu, NULL);
++ }
++#endif // NATIVE_WPA_SUPPLICANT_SUPPORT //
++#endif // WPA_SUPPLICANT_SUPPORT //
++
++#ifdef NATIVE_WPA_SUPPLICANT_SUPPORT
++ {
++ union iwreq_data wrqu;
++ memset(wrqu.ap_addr.sa_data, 0, MAC_ADDR_LEN);
++ wireless_send_event(pAd->net_dev, SIOCGIWAP, &wrqu, NULL);
++ }
++#endif // NATIVE_WPA_SUPPLICANT_SUPPORT //
++}
++
++/*
++ ==========================================================================
++ Description:
++
++ IRQL = DISPATCH_LEVEL
++
++ ==========================================================================
++*/
++VOID IterateOnBssTab(
++ IN PRTMP_ADAPTER pAd)
++{
++ MLME_START_REQ_STRUCT StartReq;
++ MLME_JOIN_REQ_STRUCT JoinReq;
++ ULONG BssIdx;
++
++ // Change the wepstatus to original wepstatus
++ pAd->StaCfg.WepStatus = pAd->StaCfg.OrigWepStatus;
++ pAd->StaCfg.PairCipher = pAd->StaCfg.OrigWepStatus;
++ pAd->StaCfg.GroupCipher = pAd->StaCfg.OrigWepStatus;
++
++ BssIdx = pAd->MlmeAux.BssIdx;
++ if (BssIdx < pAd->MlmeAux.SsidBssTab.BssNr)
++ {
++ // Check cipher suite, AP must have more secured cipher than station setting
++ // Set the Pairwise and Group cipher to match the intended AP setting
++ // We can only connect to AP with less secured cipher setting
++ if ((pAd->StaCfg.AuthMode == Ndis802_11AuthModeWPA) || (pAd->StaCfg.AuthMode == Ndis802_11AuthModeWPAPSK))
++ {
++ pAd->StaCfg.GroupCipher = pAd->MlmeAux.SsidBssTab.BssEntry[BssIdx].WPA.GroupCipher;
++
++ if (pAd->StaCfg.WepStatus == pAd->MlmeAux.SsidBssTab.BssEntry[BssIdx].WPA.PairCipher)
++ pAd->StaCfg.PairCipher = pAd->MlmeAux.SsidBssTab.BssEntry[BssIdx].WPA.PairCipher;
++ else if (pAd->MlmeAux.SsidBssTab.BssEntry[BssIdx].WPA.PairCipherAux != Ndis802_11WEPDisabled)
++ pAd->StaCfg.PairCipher = pAd->MlmeAux.SsidBssTab.BssEntry[BssIdx].WPA.PairCipherAux;
++ else // There is no PairCipher Aux, downgrade our capability to TKIP
++ pAd->StaCfg.PairCipher = Ndis802_11Encryption2Enabled;
++ }
++ else if ((pAd->StaCfg.AuthMode == Ndis802_11AuthModeWPA2) || (pAd->StaCfg.AuthMode == Ndis802_11AuthModeWPA2PSK))
++ {
++ pAd->StaCfg.GroupCipher = pAd->MlmeAux.SsidBssTab.BssEntry[BssIdx].WPA2.GroupCipher;
++
++ if (pAd->StaCfg.WepStatus == pAd->MlmeAux.SsidBssTab.BssEntry[BssIdx].WPA2.PairCipher)
++ pAd->StaCfg.PairCipher = pAd->MlmeAux.SsidBssTab.BssEntry[BssIdx].WPA2.PairCipher;
++ else if (pAd->MlmeAux.SsidBssTab.BssEntry[BssIdx].WPA2.PairCipherAux != Ndis802_11WEPDisabled)
++ pAd->StaCfg.PairCipher = pAd->MlmeAux.SsidBssTab.BssEntry[BssIdx].WPA2.PairCipherAux;
++ else // There is no PairCipher Aux, downgrade our capability to TKIP
++ pAd->StaCfg.PairCipher = Ndis802_11Encryption2Enabled;
++
++ // RSN capability
++ pAd->StaCfg.RsnCapability = pAd->MlmeAux.SsidBssTab.BssEntry[BssIdx].WPA2.RsnCapability;
++ }
++
++ // Set Mix cipher flag
++ pAd->StaCfg.bMixCipher = (pAd->StaCfg.PairCipher == pAd->StaCfg.GroupCipher) ? FALSE : TRUE;
++ if (pAd->StaCfg.bMixCipher == TRUE)
++ {
++ // If mix cipher, re-build RSNIE
++ RTMPMakeRSNIE(pAd, pAd->StaCfg.AuthMode, pAd->StaCfg.WepStatus, 0);
++ }
++
++ DBGPRINT(RT_DEBUG_TRACE, ("CNTL - iterate BSS %ld of %d\n", BssIdx, pAd->MlmeAux.SsidBssTab.BssNr));
++ JoinParmFill(pAd, &JoinReq, BssIdx);
++ MlmeEnqueue(pAd, SYNC_STATE_MACHINE, MT2_MLME_JOIN_REQ, sizeof(MLME_JOIN_REQ_STRUCT),
++ &JoinReq);
++ pAd->Mlme.CntlMachine.CurrState = CNTL_WAIT_JOIN;
++ }
++ else if (pAd->StaCfg.BssType == BSS_ADHOC)
++ {
++ DBGPRINT(RT_DEBUG_TRACE, ("CNTL - All BSS fail; start a new ADHOC (Ssid=%s)...\n",pAd->MlmeAux.Ssid));
++ StartParmFill(pAd, &StartReq, pAd->MlmeAux.Ssid, pAd->MlmeAux.SsidLen);
++ MlmeEnqueue(pAd, SYNC_STATE_MACHINE, MT2_MLME_START_REQ, sizeof(MLME_START_REQ_STRUCT), &StartReq);
++ pAd->Mlme.CntlMachine.CurrState = CNTL_WAIT_START;
++ }
++ else // no more BSS
++ {
++ DBGPRINT(RT_DEBUG_TRACE, ("CNTL - All roaming failed, stay @ ch #%d\n", pAd->CommonCfg.Channel));
++ AsicSwitchChannel(pAd, pAd->CommonCfg.Channel, FALSE);
++ AsicLockChannel(pAd, pAd->CommonCfg.Channel);
++ pAd->Mlme.CntlMachine.CurrState = CNTL_IDLE;
++ }
++}
++
++// for re-association only
++// IRQL = DISPATCH_LEVEL
++VOID IterateOnBssTab2(
++ IN PRTMP_ADAPTER pAd)
++{
++ MLME_REASSOC_REQ_STRUCT ReassocReq;
++ ULONG BssIdx;
++ BSS_ENTRY *pBss;
++
++ BssIdx = pAd->MlmeAux.RoamIdx;
++ pBss = &pAd->MlmeAux.RoamTab.BssEntry[BssIdx];
++
++ if (BssIdx < pAd->MlmeAux.RoamTab.BssNr)
++ {
++ DBGPRINT(RT_DEBUG_TRACE, ("CNTL - iterate BSS %ld of %d\n", BssIdx, pAd->MlmeAux.RoamTab.BssNr));
++
++ AsicSwitchChannel(pAd, pBss->Channel, FALSE);
++ AsicLockChannel(pAd, pBss->Channel);
++
++ // reassociate message has the same structure as associate message
++ AssocParmFill(pAd, &ReassocReq, pBss->Bssid, pBss->CapabilityInfo,
++ ASSOC_TIMEOUT, pAd->StaCfg.DefaultListenCount);
++ MlmeEnqueue(pAd, ASSOC_STATE_MACHINE, MT2_MLME_REASSOC_REQ,
++ sizeof(MLME_REASSOC_REQ_STRUCT), &ReassocReq);
++
++ pAd->Mlme.CntlMachine.CurrState = CNTL_WAIT_REASSOC;
++ }
++ else // no more BSS
++ {
++ DBGPRINT(RT_DEBUG_TRACE, ("CNTL - All fast roaming failed, back to ch #%d\n",pAd->CommonCfg.Channel));
++ AsicSwitchChannel(pAd, pAd->CommonCfg.Channel, FALSE);
++ AsicLockChannel(pAd, pAd->CommonCfg.Channel);
++ pAd->Mlme.CntlMachine.CurrState = CNTL_IDLE;
++ }
++}
++
++/*
++ ==========================================================================
++ Description:
++
++ IRQL = DISPATCH_LEVEL
++
++ ==========================================================================
++*/
++VOID JoinParmFill(
++ IN PRTMP_ADAPTER pAd,
++ IN OUT MLME_JOIN_REQ_STRUCT *JoinReq,
++ IN ULONG BssIdx)
++{
++ JoinReq->BssIdx = BssIdx;
++}
++
++/*
++ ==========================================================================
++ Description:
++
++ IRQL = DISPATCH_LEVEL
++
++ ==========================================================================
++*/
++VOID ScanParmFill(
++ IN PRTMP_ADAPTER pAd,
++ IN OUT MLME_SCAN_REQ_STRUCT *ScanReq,
++ IN CHAR Ssid[],
++ IN UCHAR SsidLen,
++ IN UCHAR BssType,
++ IN UCHAR ScanType)
++{
++ NdisZeroMemory(ScanReq->Ssid, MAX_LEN_OF_SSID);
++ ScanReq->SsidLen = SsidLen;
++ NdisMoveMemory(ScanReq->Ssid, Ssid, SsidLen);
++ ScanReq->BssType = BssType;
++ ScanReq->ScanType = ScanType;
++}
++
++#ifdef QOS_DLS_SUPPORT
++/*
++ ==========================================================================
++ Description:
++
++ IRQL = DISPATCH_LEVEL
++
++ ==========================================================================
++*/
++VOID DlsParmFill(
++ IN PRTMP_ADAPTER pAd,
++ IN OUT MLME_DLS_REQ_STRUCT *pDlsReq,
++ IN PRT_802_11_DLS pDls,
++ IN USHORT reason)
++{
++ pDlsReq->pDLS = pDls;
++ pDlsReq->Reason = reason;
++}
++#endif // QOS_DLS_SUPPORT //
++
++/*
++ ==========================================================================
++ Description:
++
++ IRQL = DISPATCH_LEVEL
++
++ ==========================================================================
++*/
++VOID StartParmFill(
++ IN PRTMP_ADAPTER pAd,
++ IN OUT MLME_START_REQ_STRUCT *StartReq,
++ IN CHAR Ssid[],
++ IN UCHAR SsidLen)
++{
++ ASSERT(SsidLen <= MAX_LEN_OF_SSID);
++ NdisMoveMemory(StartReq->Ssid, Ssid, SsidLen);
++ StartReq->SsidLen = SsidLen;
++}
++
++/*
++ ==========================================================================
++ Description:
++
++ IRQL = DISPATCH_LEVEL
++
++ ==========================================================================
++*/
++VOID AuthParmFill(
++ IN PRTMP_ADAPTER pAd,
++ IN OUT MLME_AUTH_REQ_STRUCT *AuthReq,
++ IN PUCHAR pAddr,
++ IN USHORT Alg)
++{
++ COPY_MAC_ADDR(AuthReq->Addr, pAddr);
++ AuthReq->Alg = Alg;
++ AuthReq->Timeout = AUTH_TIMEOUT;
++}
++
++/*
++ ==========================================================================
++ Description:
++
++ IRQL = DISPATCH_LEVEL
++
++ ==========================================================================
++ */
++
++
++#ifdef RT2870
++
++VOID MlmeCntlConfirm(
++ IN PRTMP_ADAPTER pAd,
++ IN ULONG MsgType,
++ IN USHORT Msg)
++{
++ MlmeEnqueue(pAd, MLME_CNTL_STATE_MACHINE, MsgType, sizeof(USHORT), &Msg);
++}
++
++VOID ComposePsPoll(
++ IN PRTMP_ADAPTER pAd)
++{
++ PTXINFO_STRUC pTxInfo;
++ PTXWI_STRUC pTxWI;
++
++ DBGPRINT(RT_DEBUG_TRACE, ("ComposePsPoll\n"));
++ NdisZeroMemory(&pAd->PsPollFrame, sizeof(PSPOLL_FRAME));
++
++ pAd->PsPollFrame.FC.PwrMgmt = 0;
++ pAd->PsPollFrame.FC.Type = BTYPE_CNTL;
++ pAd->PsPollFrame.FC.SubType = SUBTYPE_PS_POLL;
++ pAd->PsPollFrame.Aid = pAd->StaActive.Aid | 0xC000;
++ COPY_MAC_ADDR(pAd->PsPollFrame.Bssid, pAd->CommonCfg.Bssid);
++ COPY_MAC_ADDR(pAd->PsPollFrame.Ta, pAd->CurrentAddress);
++
++ RTMPZeroMemory(&pAd->PsPollContext.TransferBuffer->field.WirelessPacket[0], 100);
++ pTxInfo = (PTXINFO_STRUC)&pAd->PsPollContext.TransferBuffer->field.WirelessPacket[0];
++ RTMPWriteTxInfo(pAd, pTxInfo, (USHORT)(sizeof(PSPOLL_FRAME)+TXWI_SIZE), TRUE, EpToQueue[MGMTPIPEIDX], FALSE, FALSE);
++ pTxWI = (PTXWI_STRUC)&pAd->PsPollContext.TransferBuffer->field.WirelessPacket[TXINFO_SIZE];
++ RTMPWriteTxWI(pAd, pTxWI, FALSE, FALSE, FALSE, FALSE, TRUE, FALSE, 0, BSSID_WCID, (sizeof(PSPOLL_FRAME)),
++ 0, 0, (UCHAR)pAd->CommonCfg.MlmeTransmit.field.MCS, IFS_BACKOFF, FALSE, &pAd->CommonCfg.MlmeTransmit);
++ RTMPMoveMemory(&pAd->PsPollContext.TransferBuffer->field.WirelessPacket[TXWI_SIZE+TXINFO_SIZE], &pAd->PsPollFrame, sizeof(PSPOLL_FRAME));
++ // Append 4 extra zero bytes.
++ pAd->PsPollContext.BulkOutSize = TXINFO_SIZE + TXWI_SIZE + sizeof(PSPOLL_FRAME) + 4;
++}
++
++// IRQL = DISPATCH_LEVEL
++VOID ComposeNullFrame(
++ IN PRTMP_ADAPTER pAd)
++{
++ PTXINFO_STRUC pTxInfo;
++ PTXWI_STRUC pTxWI;
++
++ NdisZeroMemory(&pAd->NullFrame, sizeof(HEADER_802_11));
++ pAd->NullFrame.FC.Type = BTYPE_DATA;
++ pAd->NullFrame.FC.SubType = SUBTYPE_NULL_FUNC;
++ pAd->NullFrame.FC.ToDs = 1;
++ COPY_MAC_ADDR(pAd->NullFrame.Addr1, pAd->CommonCfg.Bssid);
++ COPY_MAC_ADDR(pAd->NullFrame.Addr2, pAd->CurrentAddress);
++ COPY_MAC_ADDR(pAd->NullFrame.Addr3, pAd->CommonCfg.Bssid);
++ RTMPZeroMemory(&pAd->NullContext.TransferBuffer->field.WirelessPacket[0], 100);
++ pTxInfo = (PTXINFO_STRUC)&pAd->NullContext.TransferBuffer->field.WirelessPacket[0];
++ RTMPWriteTxInfo(pAd, pTxInfo, (USHORT)(sizeof(HEADER_802_11)+TXWI_SIZE), TRUE, EpToQueue[MGMTPIPEIDX], FALSE, FALSE);
++ pTxWI = (PTXWI_STRUC)&pAd->NullContext.TransferBuffer->field.WirelessPacket[TXINFO_SIZE];
++ RTMPWriteTxWI(pAd, pTxWI, FALSE, FALSE, FALSE, FALSE, TRUE, FALSE, 0, BSSID_WCID, (sizeof(HEADER_802_11)),
++ 0, 0, (UCHAR)pAd->CommonCfg.MlmeTransmit.field.MCS, IFS_BACKOFF, FALSE, &pAd->CommonCfg.MlmeTransmit);
++ RTMPMoveMemory(&pAd->NullContext.TransferBuffer->field.WirelessPacket[TXWI_SIZE+TXINFO_SIZE], &pAd->NullFrame, sizeof(HEADER_802_11));
++ pAd->NullContext.BulkOutSize = TXINFO_SIZE + TXWI_SIZE + sizeof(pAd->NullFrame) + 4;
++}
++#endif // RT2870 //
++
++
++/*
++ ==========================================================================
++ Description:
++ Pre-build a BEACON frame in the shared memory
++
++ IRQL = PASSIVE_LEVEL
++ IRQL = DISPATCH_LEVEL
++
++ ==========================================================================
++*/
++ULONG MakeIbssBeacon(
++ IN PRTMP_ADAPTER pAd)
++{
++ UCHAR DsLen = 1, IbssLen = 2;
++ UCHAR LocalErpIe[3] = {IE_ERP, 1, 0x04};
++ HEADER_802_11 BcnHdr;
++ USHORT CapabilityInfo;
++ LARGE_INTEGER FakeTimestamp;
++ ULONG FrameLen = 0;
++ PTXWI_STRUC pTxWI = &pAd->BeaconTxWI;
++ CHAR *pBeaconFrame = pAd->BeaconBuf;
++ BOOLEAN Privacy;
++ UCHAR SupRate[MAX_LEN_OF_SUPPORTED_RATES];
++ UCHAR SupRateLen = 0;
++ UCHAR ExtRate[MAX_LEN_OF_SUPPORTED_RATES];
++ UCHAR ExtRateLen = 0;
++ UCHAR RSNIe = IE_WPA;
++
++ if ((pAd->CommonCfg.PhyMode == PHY_11B) && (pAd->CommonCfg.Channel <= 14))
++ {
++ SupRate[0] = 0x82; // 1 mbps
++ SupRate[1] = 0x84; // 2 mbps
++ SupRate[2] = 0x8b; // 5.5 mbps
++ SupRate[3] = 0x96; // 11 mbps
++ SupRateLen = 4;
++ ExtRateLen = 0;
++ }
++ else if (pAd->CommonCfg.Channel > 14)
++ {
++ SupRate[0] = 0x8C; // 6 mbps, in units of 0.5 Mbps, basic rate
++ SupRate[1] = 0x12; // 9 mbps, in units of 0.5 Mbps
++ SupRate[2] = 0x98; // 12 mbps, in units of 0.5 Mbps, basic rate
++ SupRate[3] = 0x24; // 18 mbps, in units of 0.5 Mbps
++ SupRate[4] = 0xb0; // 24 mbps, in units of 0.5 Mbps, basic rate
++ SupRate[5] = 0x48; // 36 mbps, in units of 0.5 Mbps
++ SupRate[6] = 0x60; // 48 mbps, in units of 0.5 Mbps
++ SupRate[7] = 0x6c; // 54 mbps, in units of 0.5 Mbps
++ SupRateLen = 8;
++ ExtRateLen = 0;
++
++ //
++ // Also Update MlmeRate & RtsRate for G only & A only
++ //
++ pAd->CommonCfg.MlmeRate = RATE_6;
++ pAd->CommonCfg.RtsRate = RATE_6;
++ pAd->CommonCfg.MlmeTransmit.field.MODE = MODE_OFDM;
++ pAd->CommonCfg.MlmeTransmit.field.MCS = OfdmRateToRxwiMCS[pAd->CommonCfg.MlmeRate];
++ pAd->MacTab.Content[BSS0Mcast_WCID].HTPhyMode.field.MODE = MODE_OFDM;
++ pAd->MacTab.Content[BSS0Mcast_WCID].HTPhyMode.field.MCS = OfdmRateToRxwiMCS[pAd->CommonCfg.MlmeRate];
++ }
++ else
++ {
++ SupRate[0] = 0x82; // 1 mbps
++ SupRate[1] = 0x84; // 2 mbps
++ SupRate[2] = 0x8b; // 5.5 mbps
++ SupRate[3] = 0x96; // 11 mbps
++ SupRateLen = 4;
++
++ ExtRate[0] = 0x0C; // 6 mbps, in units of 0.5 Mbps,
++ ExtRate[1] = 0x12; // 9 mbps, in units of 0.5 Mbps
++ ExtRate[2] = 0x18; // 12 mbps, in units of 0.5 Mbps,
++ ExtRate[3] = 0x24; // 18 mbps, in units of 0.5 Mbps
++ ExtRate[4] = 0x30; // 24 mbps, in units of 0.5 Mbps,
++ ExtRate[5] = 0x48; // 36 mbps, in units of 0.5 Mbps
++ ExtRate[6] = 0x60; // 48 mbps, in units of 0.5 Mbps
++ ExtRate[7] = 0x6c; // 54 mbps, in units of 0.5 Mbps
++ ExtRateLen = 8;
++ }
++
++ pAd->StaActive.SupRateLen = SupRateLen;
++ NdisMoveMemory(pAd->StaActive.SupRate, SupRate, SupRateLen);
++ pAd->StaActive.ExtRateLen = ExtRateLen;
++ NdisMoveMemory(pAd->StaActive.ExtRate, ExtRate, ExtRateLen);
++
++ // compose IBSS beacon frame
++ MgtMacHeaderInit(pAd, &BcnHdr, SUBTYPE_BEACON, 0, BROADCAST_ADDR, pAd->CommonCfg.Bssid);
++ Privacy = (pAd->StaCfg.WepStatus == Ndis802_11Encryption1Enabled) ||
++ (pAd->StaCfg.WepStatus == Ndis802_11Encryption2Enabled) ||
++ (pAd->StaCfg.WepStatus == Ndis802_11Encryption3Enabled);
++ CapabilityInfo = CAP_GENERATE(0, 1, Privacy, (pAd->CommonCfg.TxPreamble == Rt802_11PreambleShort), 0, 0);
++
++ MakeOutgoingFrame(pBeaconFrame, &FrameLen,
++ sizeof(HEADER_802_11), &BcnHdr,
++ TIMESTAMP_LEN, &FakeTimestamp,
++ 2, &pAd->CommonCfg.BeaconPeriod,
++ 2, &CapabilityInfo,
++ 1, &SsidIe,
++ 1, &pAd->CommonCfg.SsidLen,
++ pAd->CommonCfg.SsidLen, pAd->CommonCfg.Ssid,
++ 1, &SupRateIe,
++ 1, &SupRateLen,
++ SupRateLen, SupRate,
++ 1, &DsIe,
++ 1, &DsLen,
++ 1, &pAd->CommonCfg.Channel,
++ 1, &IbssIe,
++ 1, &IbssLen,
++ 2, &pAd->StaActive.AtimWin,
++ END_OF_ARGS);
++
++ // add ERP_IE and EXT_RAE IE of in 802.11g
++ if (ExtRateLen)
++ {
++ ULONG tmp;
++
++ MakeOutgoingFrame(pBeaconFrame + FrameLen, &tmp,
++ 3, LocalErpIe,
++ 1, &ExtRateIe,
++ 1, &ExtRateLen,
++ ExtRateLen, ExtRate,
++ END_OF_ARGS);
++ FrameLen += tmp;
++ }
++
++ // If adhoc secruity is set for WPA-None, append the cipher suite IE
++ if (pAd->StaCfg.AuthMode == Ndis802_11AuthModeWPANone)
++ {
++ ULONG tmp;
++ RTMPMakeRSNIE(pAd, pAd->StaCfg.AuthMode, pAd->StaCfg.WepStatus, BSS0);
++
++ MakeOutgoingFrame(pBeaconFrame + FrameLen, &tmp,
++ 1, &RSNIe,
++ 1, &pAd->StaCfg.RSNIE_Len,
++ pAd->StaCfg.RSNIE_Len, pAd->StaCfg.RSN_IE,
++ END_OF_ARGS);
++ FrameLen += tmp;
++ }
++
++#ifdef DOT11_N_SUPPORT
++ if ((pAd->CommonCfg.PhyMode >= PHY_11ABGN_MIXED))
++ {
++ ULONG TmpLen;
++ UCHAR HtLen, HtLen1;
++
++#ifdef RT_BIG_ENDIAN
++ HT_CAPABILITY_IE HtCapabilityTmp;
++ ADD_HT_INFO_IE addHTInfoTmp;
++ USHORT b2lTmp, b2lTmp2;
++#endif
++
++ // add HT Capability IE
++ HtLen = sizeof(pAd->CommonCfg.HtCapability);
++ HtLen1 = sizeof(pAd->CommonCfg.AddHTInfo);
++#ifndef RT_BIG_ENDIAN
++ MakeOutgoingFrame(pBeaconFrame+FrameLen, &TmpLen,
++ 1, &HtCapIe,
++ 1, &HtLen,
++ HtLen, &pAd->CommonCfg.HtCapability,
++ 1, &AddHtInfoIe,
++ 1, &HtLen1,
++ HtLen1, &pAd->CommonCfg.AddHTInfo,
++ END_OF_ARGS);
++#else
++ NdisMoveMemory(&HtCapabilityTmp, &pAd->CommonCfg.HtCapability, HtLen);
++ *(USHORT *)(&HtCapabilityTmp.HtCapInfo) = SWAP16(*(USHORT *)(&HtCapabilityTmp.HtCapInfo));
++ *(USHORT *)(&HtCapabilityTmp.ExtHtCapInfo) = SWAP16(*(USHORT *)(&HtCapabilityTmp.ExtHtCapInfo));
++
++ NdisMoveMemory(&addHTInfoTmp, &pAd->CommonCfg.AddHTInfo, HtLen1);
++ *(USHORT *)(&addHTInfoTmp.AddHtInfo2) = SWAP16(*(USHORT *)(&addHTInfoTmp.AddHtInfo2));
++ *(USHORT *)(&addHTInfoTmp.AddHtInfo3) = SWAP16(*(USHORT *)(&addHTInfoTmp.AddHtInfo3));
++
++ MakeOutgoingFrame(pBeaconFrame+FrameLen, &TmpLen,
++ 1, &HtCapIe,
++ 1, &HtLen,
++ HtLen, &HtCapabilityTmp,
++ 1, &AddHtInfoIe,
++ 1, &HtLen1,
++ HtLen1, &addHTInfoTmp,
++ END_OF_ARGS);
++#endif
++ FrameLen += TmpLen;
++ }
++#endif // DOT11_N_SUPPORT //
++
++ //beacon use reserved WCID 0xff
++ if (pAd->CommonCfg.Channel > 14)
++ {
++ RTMPWriteTxWI(pAd, pTxWI, FALSE, FALSE, TRUE, FALSE, FALSE, TRUE, 0, 0xff, FrameLen,
++ PID_MGMT, PID_BEACON, RATE_1, IFS_HTTXOP, FALSE, &pAd->CommonCfg.MlmeTransmit);
++ }
++ else
++ {
++ // Set to use 1Mbps for Adhoc beacon.
++ HTTRANSMIT_SETTING Transmit;
++ Transmit.word = 0;
++ RTMPWriteTxWI(pAd, pTxWI, FALSE, FALSE, TRUE, FALSE, FALSE, TRUE, 0, 0xff, FrameLen,
++ PID_MGMT, PID_BEACON, RATE_1, IFS_HTTXOP, FALSE, &Transmit);
++ }
++
++#ifdef RT_BIG_ENDIAN
++ RTMPFrameEndianChange(pAd, pBeaconFrame, DIR_WRITE, FALSE);
++ RTMPWIEndianChange((PUCHAR)pTxWI, TYPE_TXWI);
++#endif
++
++ DBGPRINT(RT_DEBUG_TRACE, ("MakeIbssBeacon (len=%ld), SupRateLen=%d, ExtRateLen=%d, Channel=%d, PhyMode=%d\n",
++ FrameLen, SupRateLen, ExtRateLen, pAd->CommonCfg.Channel, pAd->CommonCfg.PhyMode));
++ return FrameLen;
++}
++
++
+--- /dev/null
++++ b/drivers/staging/rt2870/sta/dls.c
+@@ -0,0 +1,2210 @@
++/*
++ *************************************************************************
++ * Ralink Tech Inc.
++ * 5F., No.36, Taiyuan St., Jhubei City,
++ * Hsinchu County 302,
++ * Taiwan, R.O.C.
++ *
++ * (c) Copyright 2002-2007, Ralink Technology, Inc.
++ *
++ * This program is free software; you can redistribute it and/or modify *
++ * it under the terms of the GNU General Public License as published by *
++ * the Free Software Foundation; either version 2 of the License, or *
++ * (at your option) any later version. *
++ * *
++ * This program is distributed in the hope that it will be useful, *
++ * but WITHOUT ANY WARRANTY; without even the implied warranty of *
++ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the *
++ * GNU General Public License for more details. *
++ * *
++ * You should have received a copy of the GNU General Public License *
++ * along with this program; if not, write to the *
++ * Free Software Foundation, Inc., *
++ * 59 Temple Place - Suite 330, Boston, MA 02111-1307, USA. *
++ * *
++ *************************************************************************
++
++ Module Name:
++ dls.c
++
++ Abstract:
++ Handle WMM-DLS state machine
++
++ Revision History:
++ Who When What
++ -------- ---------- ----------------------------------------------
++ Rory Chen 02-14-2006
++ Arvin Tai 06-03-2008 Modified for RT28xx
++ */
++
++#include "../rt_config.h"
++
++/*
++ ==========================================================================
++ Description:
++ dls state machine init, including state transition and timer init
++ Parameters:
++ Sm - pointer to the dls state machine
++ Note:
++ The state machine looks like this
++
++ DLS_IDLE
++ MT2_MLME_DLS_REQUEST MlmeDlsReqAction
++ MT2_PEER_DLS_REQUEST PeerDlsReqAction
++ MT2_PEER_DLS_RESPONSE PeerDlsRspAction
++ MT2_MLME_DLS_TEARDOWN MlmeTearDownAction
++ MT2_PEER_DLS_TEARDOWN PeerTearDownAction
++
++ IRQL = PASSIVE_LEVEL
++
++ ==========================================================================
++ */
++void DlsStateMachineInit(
++ IN PRTMP_ADAPTER pAd,
++ IN STATE_MACHINE *Sm,
++ OUT STATE_MACHINE_FUNC Trans[])
++{
++ UCHAR i;
++
++ StateMachineInit(Sm, (STATE_MACHINE_FUNC*)Trans, MAX_DLS_STATE, MAX_DLS_MSG, (STATE_MACHINE_FUNC)Drop, DLS_IDLE, DLS_MACHINE_BASE);
++
++ // the first column
++ StateMachineSetAction(Sm, DLS_IDLE, MT2_MLME_DLS_REQ, (STATE_MACHINE_FUNC)MlmeDlsReqAction);
++ StateMachineSetAction(Sm, DLS_IDLE, MT2_PEER_DLS_REQ, (STATE_MACHINE_FUNC)PeerDlsReqAction);
++ StateMachineSetAction(Sm, DLS_IDLE, MT2_PEER_DLS_RSP, (STATE_MACHINE_FUNC)PeerDlsRspAction);
++ StateMachineSetAction(Sm, DLS_IDLE, MT2_MLME_DLS_TEAR_DOWN, (STATE_MACHINE_FUNC)MlmeDlsTearDownAction);
++ StateMachineSetAction(Sm, DLS_IDLE, MT2_PEER_DLS_TEAR_DOWN, (STATE_MACHINE_FUNC)PeerDlsTearDownAction);
++
++ for (i=0; i<MAX_NUM_OF_DLS_ENTRY; i++)
++ {
++ pAd->StaCfg.DLSEntry[i].pAd = pAd;
++ RTMPInitTimer(pAd, &pAd->StaCfg.DLSEntry[i].Timer, GET_TIMER_FUNCTION(DlsTimeoutAction), pAd, FALSE);
++ }
++}
++
++/*
++ ==========================================================================
++ Description:
++
++ IRQL = DISPATCH_LEVEL
++
++ ==========================================================================
++ */
++VOID MlmeDlsReqAction(
++ IN PRTMP_ADAPTER pAd,
++ IN MLME_QUEUE_ELEM *Elem)
++{
++ PUCHAR pOutBuffer = NULL;
++ NDIS_STATUS NStatus;
++ ULONG FrameLen = 0;
++ HEADER_802_11 DlsReqHdr;
++ PRT_802_11_DLS pDLS = NULL;
++ UCHAR Category = CATEGORY_DLS;
++ UCHAR Action = ACTION_DLS_REQUEST;
++ ULONG tmp;
++ USHORT reason;
++ ULONG Timeout;
++ BOOLEAN TimerCancelled;
++
++ if(!MlmeDlsReqSanity(pAd, Elem->Msg, Elem->MsgLen, &pDLS, &reason))
++ return;
++
++ DBGPRINT(RT_DEBUG_TRACE,("DLS - MlmeDlsReqAction() \n"));
++
++ NStatus = MlmeAllocateMemory(pAd, &pOutBuffer); //Get an unused nonpaged memory
++ if (NStatus != NDIS_STATUS_SUCCESS)
++ {
++ DBGPRINT(RT_DEBUG_ERROR,("DLS - MlmeDlsReqAction() allocate memory failed \n"));
++ return;
++ }
++
++ ActHeaderInit(pAd, &DlsReqHdr, pAd->CommonCfg.Bssid, pAd->CurrentAddress, pAd->CommonCfg.Bssid);
++
++ // Build basic frame first
++ MakeOutgoingFrame(pOutBuffer, &FrameLen,
++ sizeof(HEADER_802_11), &DlsReqHdr,
++ 1, &Category,
++ 1, &Action,
++ 6, &pDLS->MacAddr,
++ 6, pAd->CurrentAddress,
++ 2, &pAd->StaActive.CapabilityInfo,
++ 2, &pDLS->TimeOut,
++ 1, &SupRateIe,
++ 1, &pAd->MlmeAux.SupRateLen,
++ pAd->MlmeAux.SupRateLen, pAd->MlmeAux.SupRate,
++ END_OF_ARGS);
++
++ if (pAd->MlmeAux.ExtRateLen != 0)
++ {
++ MakeOutgoingFrame(pOutBuffer + FrameLen, &tmp,
++ 1, &ExtRateIe,
++ 1, &pAd->MlmeAux.ExtRateLen,
++ pAd->MlmeAux.ExtRateLen, pAd->MlmeAux.ExtRate,
++ END_OF_ARGS);
++ FrameLen += tmp;
++ }
++
++#ifdef DOT11_N_SUPPORT
++ if ((pAd->CommonCfg.PhyMode >= PHY_11ABGN_MIXED))
++ {
++ UCHAR HtLen;
++
++#ifdef RT_BIG_ENDIAN
++ HT_CAPABILITY_IE HtCapabilityTmp;
++#endif
++
++ // add HT Capability IE
++ HtLen = sizeof(HT_CAPABILITY_IE);
++#ifndef RT_BIG_ENDIAN
++ MakeOutgoingFrame(pOutBuffer + FrameLen, &tmp,
++ 1, &HtCapIe,
++ 1, &HtLen,
++ HtLen, &pAd->CommonCfg.HtCapability,
++ END_OF_ARGS);
++#else
++ NdisMoveMemory(&HtCapabilityTmp, &pAd->CommonCfg.HtCapability, HtLen);
++ *(USHORT *)(&HtCapabilityTmp.HtCapInfo) = SWAP16(*(USHORT *)(&HtCapabilityTmp.HtCapInfo));
++ *(USHORT *)(&HtCapabilityTmp.ExtHtCapInfo) = SWAP16(*(USHORT *)(&HtCapabilityTmp.ExtHtCapInfo));
++
++ MakeOutgoingFrame(pOutBuffer + FrameLen, &tmp,
++ 1, &HtCapIe,
++ 1, &HtLen,
++ HtLen, &HtCapabilityTmp,
++ END_OF_ARGS);
++#endif
++ FrameLen = FrameLen + tmp;
++ }
++#endif // DOT11_N_SUPPORT //
++
++ RTMPCancelTimer(&pDLS->Timer, &TimerCancelled);
++ Timeout = DLS_TIMEOUT;
++ RTMPSetTimer(&pDLS->Timer, Timeout);
++
++ MiniportMMRequest(pAd, QID_AC_BE, pOutBuffer, FrameLen);
++ MlmeFreeMemory(pAd, pOutBuffer);
++}
++
++/*
++ ==========================================================================
++ Description:
++
++ IRQL = DISPATCH_LEVEL
++
++ ==========================================================================
++ */
++VOID PeerDlsReqAction(
++ IN PRTMP_ADAPTER pAd,
++ IN MLME_QUEUE_ELEM *Elem)
++{
++ PUCHAR pOutBuffer = NULL;
++ NDIS_STATUS NStatus;
++ ULONG FrameLen = 0;
++ USHORT StatusCode = MLME_SUCCESS;
++ HEADER_802_11 DlsRspHdr;
++ UCHAR Category = CATEGORY_DLS;
++ UCHAR Action = ACTION_DLS_RESPONSE;
++ ULONG tmp;
++ USHORT CapabilityInfo;
++ UCHAR DA[MAC_ADDR_LEN], SA[MAC_ADDR_LEN];
++ USHORT DLSTimeOut;
++ SHORT i;
++ ULONG Timeout;
++ BOOLEAN TimerCancelled;
++ PRT_802_11_DLS pDLS = NULL;
++ UCHAR MaxSupportedRateIn500Kbps = 0;
++ UCHAR SupportedRatesLen;
++ UCHAR SupportedRates[MAX_LEN_OF_SUPPORTED_RATES];
++ UCHAR HtCapabilityLen;
++ HT_CAPABILITY_IE HtCapability;
++
++ if (!PeerDlsReqSanity(pAd, Elem->Msg, Elem->MsgLen, DA, SA, &CapabilityInfo, &DLSTimeOut,
++ &SupportedRatesLen, &SupportedRates[0], &HtCapabilityLen, &HtCapability))
++ return;
++
++ // supported rates array may not be sorted. sort it and find the maximum rate
++ for (i = 0; i < SupportedRatesLen; i++)
++ {
++ if (MaxSupportedRateIn500Kbps < (SupportedRates[i] & 0x7f))
++ MaxSupportedRateIn500Kbps = SupportedRates[i] & 0x7f;
++ }
++
++ DBGPRINT(RT_DEBUG_TRACE,("DLS - PeerDlsReqAction() from %02x:%02x:%02x:%02x:%02x:%02x\n", SA[0], SA[1], SA[2], SA[3], SA[4], SA[5]));
++
++ NStatus = MlmeAllocateMemory(pAd, &pOutBuffer); //Get an unused nonpaged memory
++ if (NStatus != NDIS_STATUS_SUCCESS)
++ {
++ DBGPRINT(RT_DEBUG_ERROR,("DLS - PeerDlsReqAction() allocate memory failed \n"));
++ return;
++ }
++
++ if (!INFRA_ON(pAd))
++ {
++ StatusCode = MLME_REQUEST_DECLINED;
++ }
++ else if (!pAd->CommonCfg.bWmmCapable)
++ {
++ StatusCode = MLME_DEST_STA_IS_NOT_A_QSTA;
++ }
++ else if (!pAd->CommonCfg.bDLSCapable)
++ {
++ StatusCode = MLME_REQUEST_DECLINED;
++ }
++ else
++ {
++ // find table to update parameters
++ for (i = (MAX_NUM_OF_DLS_ENTRY-1); i >= 0; i--)
++ {
++ if (pAd->StaCfg.DLSEntry[i].Valid && MAC_ADDR_EQUAL(SA, pAd->StaCfg.DLSEntry[i].MacAddr))
++ {
++ if (pAd->StaCfg.AuthMode >= Ndis802_11AuthModeWPA)
++ pAd->StaCfg.DLSEntry[i].Status = DLS_WAIT_KEY;
++ else
++ {
++ RTMPCancelTimer(&pAd->StaCfg.DLSEntry[i].Timer, &TimerCancelled);
++ pAd->StaCfg.DLSEntry[i].Status = DLS_FINISH;
++ }
++
++ pAd->StaCfg.DLSEntry[i].Sequence = 0;
++ pAd->StaCfg.DLSEntry[i].TimeOut = DLSTimeOut;
++ pAd->StaCfg.DLSEntry[i].CountDownTimer = DLSTimeOut;
++ if (HtCapabilityLen != 0)
++ pAd->StaCfg.DLSEntry[i].bHTCap = TRUE;
++ else
++ pAd->StaCfg.DLSEntry[i].bHTCap = FALSE;
++ pDLS = &pAd->StaCfg.DLSEntry[i];
++ break;
++ }
++ }
++
++ // can not find in table, create a new one
++ if (i < 0)
++ {
++ DBGPRINT(RT_DEBUG_TRACE,("DLS - PeerDlsReqAction() can not find same entry \n"));
++ for (i=(MAX_NUM_OF_DLS_ENTRY - 1); i >= MAX_NUM_OF_INIT_DLS_ENTRY; i--)
++ {
++ if (!pAd->StaCfg.DLSEntry[i].Valid)
++ {
++ MAC_TABLE_ENTRY *pEntry;
++ UCHAR MaxSupportedRate = RATE_11;
++
++ if (pAd->StaCfg.AuthMode >= Ndis802_11AuthModeWPA)
++ {
++ pAd->StaCfg.DLSEntry[i].Status = DLS_WAIT_KEY;
++ }
++ else
++ {
++ RTMPCancelTimer(&pAd->StaCfg.DLSEntry[i].Timer, &TimerCancelled);
++ pAd->StaCfg.DLSEntry[i].Status = DLS_FINISH;
++ }
++
++ pAd->StaCfg.DLSEntry[i].Sequence = 0;
++ pAd->StaCfg.DLSEntry[i].Valid = TRUE;
++ pAd->StaCfg.DLSEntry[i].TimeOut = DLSTimeOut;
++ pAd->StaCfg.DLSEntry[i].CountDownTimer = DLSTimeOut;
++ NdisMoveMemory(pAd->StaCfg.DLSEntry[i].MacAddr, SA, MAC_ADDR_LEN);
++ if (HtCapabilityLen != 0)
++ pAd->StaCfg.DLSEntry[i].bHTCap = TRUE;
++ else
++ pAd->StaCfg.DLSEntry[i].bHTCap = FALSE;
++ pDLS = &pAd->StaCfg.DLSEntry[i];
++ pEntry = MacTableInsertDlsEntry(pAd, SA, i);
++
++ switch (MaxSupportedRateIn500Kbps)
++ {
++ case 108: MaxSupportedRate = RATE_54; break;
++ case 96: MaxSupportedRate = RATE_48; break;
++ case 72: MaxSupportedRate = RATE_36; break;
++ case 48: MaxSupportedRate = RATE_24; break;
++ case 36: MaxSupportedRate = RATE_18; break;
++ case 24: MaxSupportedRate = RATE_12; break;
++ case 18: MaxSupportedRate = RATE_9; break;
++ case 12: MaxSupportedRate = RATE_6; break;
++ case 22: MaxSupportedRate = RATE_11; break;
++ case 11: MaxSupportedRate = RATE_5_5; break;
++ case 4: MaxSupportedRate = RATE_2; break;
++ case 2: MaxSupportedRate = RATE_1; break;
++ default: MaxSupportedRate = RATE_11; break;
++ }
++
++ pEntry->MaxSupportedRate = min(pAd->CommonCfg.MaxTxRate, MaxSupportedRate);
++
++ if (pEntry->MaxSupportedRate < RATE_FIRST_OFDM_RATE)
++ {
++ pEntry->MaxHTPhyMode.field.MODE = MODE_CCK;
++ pEntry->MaxHTPhyMode.field.MCS = pEntry->MaxSupportedRate;
++ pEntry->MinHTPhyMode.field.MODE = MODE_CCK;
++ pEntry->MinHTPhyMode.field.MCS = pEntry->MaxSupportedRate;
++ pEntry->HTPhyMode.field.MODE = MODE_CCK;
++ pEntry->HTPhyMode.field.MCS = pEntry->MaxSupportedRate;
++ }
++ else
++ {
++ pEntry->MaxHTPhyMode.field.MODE = MODE_OFDM;
++ pEntry->MaxHTPhyMode.field.MCS = OfdmRateToRxwiMCS[pEntry->MaxSupportedRate];
++ pEntry->MinHTPhyMode.field.MODE = MODE_OFDM;
++ pEntry->MinHTPhyMode.field.MCS = OfdmRateToRxwiMCS[pEntry->MaxSupportedRate];
++ pEntry->HTPhyMode.field.MODE = MODE_OFDM;
++ pEntry->HTPhyMode.field.MCS = OfdmRateToRxwiMCS[pEntry->MaxSupportedRate];
++ }
++
++ pEntry->MaxHTPhyMode.field.BW = BW_20;
++ pEntry->MinHTPhyMode.field.BW = BW_20;
++
++#ifdef DOT11_N_SUPPORT
++ pEntry->HTCapability.MCSSet[0] = 0;
++ pEntry->HTCapability.MCSSet[1] = 0;
++
++ // If this Entry supports 802.11n, upgrade to HT rate.
++ if ((HtCapabilityLen != 0) && (pAd->CommonCfg.PhyMode >= PHY_11ABGN_MIXED))
++ {
++ UCHAR j, bitmask; //k,bitmask;
++ CHAR ii;
++
++ DBGPRINT(RT_DEBUG_OFF, ("DLS - PeerDlsReqAction() Receive Peer HT Capable STA from %02x:%02x:%02x:%02x:%02x:%02x\n",
++ SA[0], SA[1], SA[2], SA[3], SA[4], SA[5]));
++
++ if ((HtCapability.HtCapInfo.GF) && (pAd->CommonCfg.DesiredHtPhy.GF))
++ {
++ pEntry->MaxHTPhyMode.field.MODE = MODE_HTGREENFIELD;
++ }
++ else
++ {
++ pEntry->MaxHTPhyMode.field.MODE = MODE_HTMIX;
++ pAd->MacTab.fAnyStationNonGF = TRUE;
++ pAd->CommonCfg.AddHTInfo.AddHtInfo2.NonGfPresent = 1;
++ }
++
++ if ((HtCapability.HtCapInfo.ChannelWidth) && (pAd->CommonCfg.DesiredHtPhy.ChannelWidth))
++ {
++ pEntry->MaxHTPhyMode.field.BW= BW_40;
++ pEntry->MaxHTPhyMode.field.ShortGI = ((pAd->CommonCfg.DesiredHtPhy.ShortGIfor40)&(HtCapability.HtCapInfo.ShortGIfor40));
++ }
++ else
++ {
++ pEntry->MaxHTPhyMode.field.BW = BW_20;
++ pEntry->MaxHTPhyMode.field.ShortGI = ((pAd->CommonCfg.DesiredHtPhy.ShortGIfor20)&(HtCapability.HtCapInfo.ShortGIfor20));
++ pAd->MacTab.fAnyStation20Only = TRUE;
++ }
++
++ // find max fixed rate
++ for (ii=15; ii>=0; ii--)
++ {
++ j = ii/8;
++ bitmask = (1<<(ii-(j*8)));
++ if ( (pAd->StaCfg.DesiredHtPhyInfo.MCSSet[j]&bitmask) && (HtCapability.MCSSet[j]&bitmask))
++ {
++ pEntry->MaxHTPhyMode.field.MCS = ii;
++ break;
++ }
++ if (ii==0)
++ break;
++ }
++
++
++ if (pAd->StaCfg.DesiredTransmitSetting.field.MCS != MCS_AUTO)
++ {
++
++ printk("@@@ pAd->CommonCfg.RegTransmitSetting.field.MCS = %d\n",
++ pAd->StaCfg.DesiredTransmitSetting.field.MCS);
++ if (pAd->StaCfg.DesiredTransmitSetting.field.MCS == 32)
++ {
++ // Fix MCS as HT Duplicated Mode
++ pEntry->MaxHTPhyMode.field.BW = 1;
++ pEntry->MaxHTPhyMode.field.MODE = MODE_HTMIX;
++ pEntry->MaxHTPhyMode.field.STBC = 0;
++ pEntry->MaxHTPhyMode.field.ShortGI = 0;
++ pEntry->MaxHTPhyMode.field.MCS = 32;
++ }
++ else if (pEntry->MaxHTPhyMode.field.MCS > pAd->StaCfg.HTPhyMode.field.MCS)
++ {
++ // STA supports fixed MCS
++ pEntry->MaxHTPhyMode.field.MCS = pAd->StaCfg.HTPhyMode.field.MCS;
++ }
++ }
++
++ pEntry->MaxHTPhyMode.field.STBC = (HtCapability.HtCapInfo.RxSTBC & (pAd->CommonCfg.DesiredHtPhy.TxSTBC));
++ pEntry->MpduDensity = HtCapability.HtCapParm.MpduDensity;
++ pEntry->MaxRAmpduFactor = HtCapability.HtCapParm.MaxRAmpduFactor;
++ pEntry->MmpsMode = (UCHAR)HtCapability.HtCapInfo.MimoPs;
++ pEntry->AMsduSize = (UCHAR)HtCapability.HtCapInfo.AMsduSize;
++ pEntry->HTPhyMode.word = pEntry->MaxHTPhyMode.word;
++
++ if (HtCapability.HtCapInfo.ShortGIfor20)
++ CLIENT_STATUS_SET_FLAG(pEntry, fCLIENT_STATUS_SGI20_CAPABLE);
++ if (HtCapability.HtCapInfo.ShortGIfor40)
++ CLIENT_STATUS_SET_FLAG(pEntry, fCLIENT_STATUS_SGI40_CAPABLE);
++ if (HtCapability.HtCapInfo.TxSTBC)
++ CLIENT_STATUS_SET_FLAG(pEntry, fCLIENT_STATUS_TxSTBC_CAPABLE);
++ if (HtCapability.HtCapInfo.RxSTBC)
++ CLIENT_STATUS_SET_FLAG(pEntry, fCLIENT_STATUS_RxSTBC_CAPABLE);
++ if (HtCapability.ExtHtCapInfo.PlusHTC)
++ CLIENT_STATUS_SET_FLAG(pEntry, fCLIENT_STATUS_HTC_CAPABLE);
++ if (pAd->CommonCfg.bRdg && HtCapability.ExtHtCapInfo.RDGSupport)
++ CLIENT_STATUS_SET_FLAG(pEntry, fCLIENT_STATUS_RDG_CAPABLE);
++ if (HtCapability.ExtHtCapInfo.MCSFeedback == 0x03)
++ CLIENT_STATUS_SET_FLAG(pEntry, fCLIENT_STATUS_MCSFEEDBACK_CAPABLE);
++
++ NdisMoveMemory(&pEntry->HTCapability, &HtCapability, sizeof(HT_CAPABILITY_IE));
++ }
++#endif // DOT11_N_SUPPORT //
++
++ pEntry->HTPhyMode.word = pEntry->MaxHTPhyMode.word;
++ pEntry->CurrTxRate = pEntry->MaxSupportedRate;
++ CLIENT_STATUS_SET_FLAG(pEntry, fCLIENT_STATUS_WMM_CAPABLE);
++
++ if (pAd->StaCfg.bAutoTxRateSwitch == TRUE)
++ {
++ PUCHAR pTable;
++ UCHAR TableSize = 0;
++
++ MlmeSelectTxRateTable(pAd, pEntry, &pTable, &TableSize, &pEntry->CurrTxRateIndex);
++ pEntry->bAutoTxRateSwitch = TRUE;
++ }
++ else
++ {
++ pEntry->HTPhyMode.field.MODE = pAd->StaCfg.HTPhyMode.field.MODE;
++ pEntry->HTPhyMode.field.MCS = pAd->StaCfg.HTPhyMode.field.MCS;
++ pEntry->bAutoTxRateSwitch = FALSE;
++
++ RTMPUpdateLegacyTxSetting((UCHAR)pAd->StaCfg.DesiredTransmitSetting.field.FixedTxMode, pEntry);
++ }
++ pEntry->RateLen = SupportedRatesLen;
++
++ break;
++ }
++ }
++ }
++ StatusCode = MLME_SUCCESS;
++
++ // can not find in table, create a new one
++ if (i < 0)
++ {
++ StatusCode = MLME_QOS_UNSPECIFY;
++ DBGPRINT(RT_DEBUG_ERROR,("DLS - PeerDlsReqAction() DLSEntry table full(only can support %d DLS session) \n", MAX_NUM_OF_DLS_ENTRY - MAX_NUM_OF_INIT_DLS_ENTRY));
++ }
++ else
++ {
++ DBGPRINT(RT_DEBUG_TRACE,("DLS - PeerDlsReqAction() use entry(%d) %02x:%02x:%02x:%02x:%02x:%02x\n",
++ i, SA[0], SA[1], SA[2], SA[3], SA[4], SA[5]));
++ }
++ }
++
++ ActHeaderInit(pAd, &DlsRspHdr, pAd->CommonCfg.Bssid, pAd->CurrentAddress, pAd->CommonCfg.Bssid);
++
++ // Build basic frame first
++ if (StatusCode == MLME_SUCCESS)
++ {
++ MakeOutgoingFrame(pOutBuffer, &FrameLen,
++ sizeof(HEADER_802_11), &DlsRspHdr,
++ 1, &Category,
++ 1, &Action,
++ 2, &StatusCode,
++ 6, SA,
++ 6, pAd->CurrentAddress,
++ 2, &pAd->StaActive.CapabilityInfo,
++ 1, &SupRateIe,
++ 1, &pAd->MlmeAux.SupRateLen,
++ pAd->MlmeAux.SupRateLen, pAd->MlmeAux.SupRate,
++ END_OF_ARGS);
++
++ if (pAd->MlmeAux.ExtRateLen != 0)
++ {
++ MakeOutgoingFrame(pOutBuffer + FrameLen, &tmp,
++ 1, &ExtRateIe,
++ 1, &pAd->MlmeAux.ExtRateLen,
++ pAd->MlmeAux.ExtRateLen, pAd->MlmeAux.ExtRate,
++ END_OF_ARGS);
++ FrameLen += tmp;
++ }
++
++#ifdef DOT11_N_SUPPORT
++ if ((pAd->CommonCfg.PhyMode >= PHY_11ABGN_MIXED))
++ {
++ UCHAR HtLen;
++
++#ifdef RT_BIG_ENDIAN
++ HT_CAPABILITY_IE HtCapabilityTmp;
++#endif
++
++ // add HT Capability IE
++ HtLen = sizeof(HT_CAPABILITY_IE);
++#ifndef RT_BIG_ENDIAN
++ MakeOutgoingFrame(pOutBuffer + FrameLen, &tmp,
++ 1, &HtCapIe,
++ 1, &HtLen,
++ HtLen, &pAd->CommonCfg.HtCapability,
++ END_OF_ARGS);
++#else
++ NdisMoveMemory(&HtCapabilityTmp, &pAd->CommonCfg.HtCapability, HtLen);
++ *(USHORT *)(&HtCapabilityTmp.HtCapInfo) = SWAP16(*(USHORT *)(&HtCapabilityTmp.HtCapInfo));
++ *(USHORT *)(&HtCapabilityTmp.ExtHtCapInfo) = SWAP16(*(USHORT *)(&HtCapabilityTmp.ExtHtCapInfo));
++
++ MakeOutgoingFrame(pOutBuffer + FrameLen, &tmp,
++ 1, &HtCapIe,
++ 1, &HtLen,
++ HtLen, &HtCapabilityTmp,
++ END_OF_ARGS);
++#endif
++ FrameLen = FrameLen + tmp;
++ }
++#endif // DOT11_N_SUPPORT //
++
++ if (pDLS && (pDLS->Status != DLS_FINISH))
++ {
++ RTMPCancelTimer(&pDLS->Timer, &TimerCancelled);
++ Timeout = DLS_TIMEOUT;
++ RTMPSetTimer(&pDLS->Timer, Timeout);
++ }
++ }
++ else
++ {
++ MakeOutgoingFrame(pOutBuffer, &FrameLen,
++ sizeof(HEADER_802_11), &DlsRspHdr,
++ 1, &Category,
++ 1, &Action,
++ 2, &StatusCode,
++ 6, SA,
++ 6, pAd->CurrentAddress,
++ END_OF_ARGS);
++ }
++
++ MiniportMMRequest(pAd, QID_AC_BE, pOutBuffer, FrameLen);
++ MlmeFreeMemory(pAd, pOutBuffer);
++}
++
++/*
++ ==========================================================================
++ Description:
++
++ IRQL = DISPATCH_LEVEL
++
++ ==========================================================================
++ */
++VOID PeerDlsRspAction(
++ IN PRTMP_ADAPTER pAd,
++ IN MLME_QUEUE_ELEM *Elem)
++{
++ USHORT CapabilityInfo;
++ UCHAR DA[MAC_ADDR_LEN], SA[MAC_ADDR_LEN];
++ USHORT StatusCode;
++ SHORT i;
++ BOOLEAN TimerCancelled;
++ UCHAR MaxSupportedRateIn500Kbps = 0;
++ UCHAR SupportedRatesLen;
++ UCHAR SupportedRates[MAX_LEN_OF_SUPPORTED_RATES];
++ UCHAR HtCapabilityLen;
++ HT_CAPABILITY_IE HtCapability;
++
++ if (!pAd->CommonCfg.bDLSCapable)
++ return;
++
++ if (!INFRA_ON(pAd))
++ return;
++
++ if (!PeerDlsRspSanity(pAd, Elem->Msg, Elem->MsgLen, DA, SA, &CapabilityInfo, &StatusCode,
++ &SupportedRatesLen, &SupportedRates[0], &HtCapabilityLen, &HtCapability))
++ return;
++
++ // supported rates array may not be sorted. sort it and find the maximum rate
++ for (i=0; i<SupportedRatesLen; i++)
++ {
++ if (MaxSupportedRateIn500Kbps < (SupportedRates[i] & 0x7f))
++ MaxSupportedRateIn500Kbps = SupportedRates[i] & 0x7f;
++ }
++
++ DBGPRINT(RT_DEBUG_TRACE,("DLS - PeerDlsRspAction() from %02x:%02x:%02x:%02x:%02x:%02x with StatusCode=%d, CapabilityInfo=0x%x\n",
++ SA[0], SA[1], SA[2], SA[3], SA[4], SA[5], StatusCode, CapabilityInfo));
++
++ for (i = 0; i < MAX_NUM_OF_INIT_DLS_ENTRY; i++)
++ {
++ if (pAd->StaCfg.DLSEntry[i].Valid && MAC_ADDR_EQUAL(SA, pAd->StaCfg.DLSEntry[i].MacAddr))
++ {
++ if (StatusCode == MLME_SUCCESS)
++ {
++ MAC_TABLE_ENTRY *pEntry;
++ UCHAR MaxSupportedRate = RATE_11;
++
++ pEntry = MacTableInsertDlsEntry(pAd, SA, i);
++
++ switch (MaxSupportedRateIn500Kbps)
++ {
++ case 108: MaxSupportedRate = RATE_54; break;
++ case 96: MaxSupportedRate = RATE_48; break;
++ case 72: MaxSupportedRate = RATE_36; break;
++ case 48: MaxSupportedRate = RATE_24; break;
++ case 36: MaxSupportedRate = RATE_18; break;
++ case 24: MaxSupportedRate = RATE_12; break;
++ case 18: MaxSupportedRate = RATE_9; break;
++ case 12: MaxSupportedRate = RATE_6; break;
++ case 22: MaxSupportedRate = RATE_11; break;
++ case 11: MaxSupportedRate = RATE_5_5; break;
++ case 4: MaxSupportedRate = RATE_2; break;
++ case 2: MaxSupportedRate = RATE_1; break;
++ default: MaxSupportedRate = RATE_11; break;
++ }
++
++ pEntry->MaxSupportedRate = min(pAd->CommonCfg.MaxTxRate, MaxSupportedRate);
++
++ if (pEntry->MaxSupportedRate < RATE_FIRST_OFDM_RATE)
++ {
++ pEntry->MaxHTPhyMode.field.MODE = MODE_CCK;
++ pEntry->MaxHTPhyMode.field.MCS = pEntry->MaxSupportedRate;
++ pEntry->MinHTPhyMode.field.MODE = MODE_CCK;
++ pEntry->MinHTPhyMode.field.MCS = pEntry->MaxSupportedRate;
++ pEntry->HTPhyMode.field.MODE = MODE_CCK;
++ pEntry->HTPhyMode.field.MCS = pEntry->MaxSupportedRate;
++ }
++ else
++ {
++ pEntry->MaxHTPhyMode.field.MODE = MODE_OFDM;
++ pEntry->MaxHTPhyMode.field.MCS = OfdmRateToRxwiMCS[pEntry->MaxSupportedRate];
++ pEntry->MinHTPhyMode.field.MODE = MODE_OFDM;
++ pEntry->MinHTPhyMode.field.MCS = OfdmRateToRxwiMCS[pEntry->MaxSupportedRate];
++ pEntry->HTPhyMode.field.MODE = MODE_OFDM;
++ pEntry->HTPhyMode.field.MCS = OfdmRateToRxwiMCS[pEntry->MaxSupportedRate];
++ }
++
++ pEntry->MaxHTPhyMode.field.BW = BW_20;
++ pEntry->MinHTPhyMode.field.BW = BW_20;
++
++#ifdef DOT11_N_SUPPORT
++ pEntry->HTCapability.MCSSet[0] = 0;
++ pEntry->HTCapability.MCSSet[1] = 0;
++
++ // If this Entry supports 802.11n, upgrade to HT rate.
++ if ((HtCapabilityLen != 0) && (pAd->CommonCfg.PhyMode >= PHY_11ABGN_MIXED))
++ {
++ UCHAR j, bitmask; //k,bitmask;
++ CHAR ii;
++
++ DBGPRINT(RT_DEBUG_OFF, ("DLS - PeerDlsRspAction Receive Peer HT Capable STA from %02x:%02x:%02x:%02x:%02x:%02x\n",
++ SA[0], SA[1], SA[2], SA[3], SA[4], SA[5]));
++
++ if ((HtCapability.HtCapInfo.GF) && (pAd->CommonCfg.DesiredHtPhy.GF))
++ {
++ pEntry->MaxHTPhyMode.field.MODE = MODE_HTGREENFIELD;
++ }
++ else
++ {
++ pEntry->MaxHTPhyMode.field.MODE = MODE_HTMIX;
++ pAd->MacTab.fAnyStationNonGF = TRUE;
++ pAd->CommonCfg.AddHTInfo.AddHtInfo2.NonGfPresent = 1;
++ }
++
++ if ((HtCapability.HtCapInfo.ChannelWidth) && (pAd->CommonCfg.DesiredHtPhy.ChannelWidth))
++ {
++ pEntry->MaxHTPhyMode.field.BW= BW_40;
++ pEntry->MaxHTPhyMode.field.ShortGI = ((pAd->CommonCfg.DesiredHtPhy.ShortGIfor40)&(HtCapability.HtCapInfo.ShortGIfor40));
++ }
++ else
++ {
++ pEntry->MaxHTPhyMode.field.BW = BW_20;
++ pEntry->MaxHTPhyMode.field.ShortGI = ((pAd->CommonCfg.DesiredHtPhy.ShortGIfor20)&(HtCapability.HtCapInfo.ShortGIfor20));
++ pAd->MacTab.fAnyStation20Only = TRUE;
++ }
++
++ // find max fixed rate
++ for (ii=15; ii>=0; ii--)
++ {
++ j = ii/8;
++ bitmask = (1<<(ii-(j*8)));
++ if ( (pAd->StaCfg.DesiredHtPhyInfo.MCSSet[j]&bitmask) && (HtCapability.MCSSet[j]&bitmask))
++ {
++ pEntry->MaxHTPhyMode.field.MCS = ii;
++ break;
++ }
++ if (ii==0)
++ break;
++ }
++
++ if (pAd->StaCfg.DesiredTransmitSetting.field.MCS != MCS_AUTO)
++ {
++ if (pAd->StaCfg.DesiredTransmitSetting.field.MCS == 32)
++ {
++ // Fix MCS as HT Duplicated Mode
++ pEntry->MaxHTPhyMode.field.BW = 1;
++ pEntry->MaxHTPhyMode.field.MODE = MODE_HTMIX;
++ pEntry->MaxHTPhyMode.field.STBC = 0;
++ pEntry->MaxHTPhyMode.field.ShortGI = 0;
++ pEntry->MaxHTPhyMode.field.MCS = 32;
++ }
++ else if (pEntry->MaxHTPhyMode.field.MCS > pAd->StaCfg.HTPhyMode.field.MCS)
++ {
++ // STA supports fixed MCS
++ pEntry->MaxHTPhyMode.field.MCS = pAd->StaCfg.HTPhyMode.field.MCS;
++ }
++ }
++
++ pEntry->MaxHTPhyMode.field.STBC = (HtCapability.HtCapInfo.RxSTBC & (pAd->CommonCfg.DesiredHtPhy.TxSTBC));
++ pEntry->MpduDensity = HtCapability.HtCapParm.MpduDensity;
++ pEntry->MaxRAmpduFactor = HtCapability.HtCapParm.MaxRAmpduFactor;
++ pEntry->MmpsMode = (UCHAR)HtCapability.HtCapInfo.MimoPs;
++ pEntry->AMsduSize = (UCHAR)HtCapability.HtCapInfo.AMsduSize;
++ pEntry->HTPhyMode.word = pEntry->MaxHTPhyMode.word;
++
++ if (HtCapability.HtCapInfo.ShortGIfor20)
++ CLIENT_STATUS_SET_FLAG(pEntry, fCLIENT_STATUS_SGI20_CAPABLE);
++ if (HtCapability.HtCapInfo.ShortGIfor40)
++ CLIENT_STATUS_SET_FLAG(pEntry, fCLIENT_STATUS_SGI40_CAPABLE);
++ if (HtCapability.HtCapInfo.TxSTBC)
++ CLIENT_STATUS_SET_FLAG(pEntry, fCLIENT_STATUS_TxSTBC_CAPABLE);
++ if (HtCapability.HtCapInfo.RxSTBC)
++ CLIENT_STATUS_SET_FLAG(pEntry, fCLIENT_STATUS_RxSTBC_CAPABLE);
++ if (HtCapability.ExtHtCapInfo.PlusHTC)
++ CLIENT_STATUS_SET_FLAG(pEntry, fCLIENT_STATUS_HTC_CAPABLE);
++ if (pAd->CommonCfg.bRdg && HtCapability.ExtHtCapInfo.RDGSupport)
++ CLIENT_STATUS_SET_FLAG(pEntry, fCLIENT_STATUS_RDG_CAPABLE);
++ if (HtCapability.ExtHtCapInfo.MCSFeedback == 0x03)
++ CLIENT_STATUS_SET_FLAG(pEntry, fCLIENT_STATUS_MCSFEEDBACK_CAPABLE);
++
++ NdisMoveMemory(&pEntry->HTCapability, &HtCapability, sizeof(HT_CAPABILITY_IE));
++ }
++#endif // DOT11_N_SUPPORT //
++ pEntry->HTPhyMode.word = pEntry->MaxHTPhyMode.word;
++ pEntry->CurrTxRate = pEntry->MaxSupportedRate;
++ CLIENT_STATUS_SET_FLAG(pEntry, fCLIENT_STATUS_WMM_CAPABLE);
++
++ if (pAd->StaCfg.bAutoTxRateSwitch == TRUE)
++ {
++ PUCHAR pTable;
++ UCHAR TableSize = 0;
++
++ MlmeSelectTxRateTable(pAd, pEntry, &pTable, &TableSize, &pEntry->CurrTxRateIndex);
++ pEntry->bAutoTxRateSwitch = TRUE;
++ }
++ else
++ {
++ pEntry->HTPhyMode.field.MODE = pAd->StaCfg.HTPhyMode.field.MODE;
++ pEntry->HTPhyMode.field.MCS = pAd->StaCfg.HTPhyMode.field.MCS;
++ pEntry->bAutoTxRateSwitch = FALSE;
++
++ RTMPUpdateLegacyTxSetting((UCHAR)pAd->StaCfg.DesiredTransmitSetting.field.FixedTxMode, pEntry);
++ }
++ pEntry->RateLen = SupportedRatesLen;
++
++ if (pAd->StaCfg.AuthMode >= Ndis802_11AuthModeWPA)
++ {
++ // If support WPA or WPA2, start STAKey hand shake,
++ // If failed hand shake, just tear down peer DLS
++ if (RTMPSendSTAKeyRequest(pAd, pAd->StaCfg.DLSEntry[i].MacAddr) != NDIS_STATUS_SUCCESS)
++ {
++ MLME_DLS_REQ_STRUCT MlmeDlsReq;
++ USHORT reason = REASON_QOS_CIPHER_NOT_SUPPORT;
++
++ DlsParmFill(pAd, &MlmeDlsReq, &pAd->StaCfg.DLSEntry[i], reason);
++ MlmeEnqueue(pAd, DLS_STATE_MACHINE, MT2_MLME_DLS_TEAR_DOWN, sizeof(MLME_DLS_REQ_STRUCT), &MlmeDlsReq);
++ pAd->StaCfg.DLSEntry[i].Status = DLS_NONE;
++ pAd->StaCfg.DLSEntry[i].Valid = FALSE;
++ DBGPRINT(RT_DEBUG_ERROR,("DLS - PeerDlsRspAction failed when call RTMPSendSTAKeyRequest \n"));
++ }
++ else
++ {
++ pAd->StaCfg.DLSEntry[i].Status = DLS_WAIT_KEY;
++ DBGPRINT(RT_DEBUG_TRACE,("DLS - waiting for STAKey handshake procedure\n"));
++ }
++ }
++ else
++ {
++ RTMPCancelTimer(&pAd->StaCfg.DLSEntry[i].Timer, &TimerCancelled);
++ pAd->StaCfg.DLSEntry[i].Status = DLS_FINISH;
++ DBGPRINT(RT_DEBUG_TRACE,("DLS - PeerDlsRspAction() from %02x:%02x:%02x:%02x:%02x:%02x Succeed with WEP or no security\n", SA[0], SA[1], SA[2], SA[3], SA[4], SA[5]));
++ }
++
++ //initialize seq no for DLS frames.
++ pAd->StaCfg.DLSEntry[i].Sequence = 0;
++ if (HtCapabilityLen != 0)
++ pAd->StaCfg.DLSEntry[i].bHTCap = TRUE;
++ else
++ pAd->StaCfg.DLSEntry[i].bHTCap = FALSE;
++ }
++ else
++ {
++ // DLS setup procedure failed.
++ pAd->StaCfg.DLSEntry[i].Status = DLS_NONE;
++ pAd->StaCfg.DLSEntry[i].Valid = FALSE;
++ RTMPCancelTimer(&pAd->StaCfg.DLSEntry[i].Timer, &TimerCancelled);
++ DBGPRINT(RT_DEBUG_ERROR,("DLS - PeerDlsRspAction failed with StatusCode=%d \n", StatusCode));
++ }
++ }
++ }
++
++ if (i >= MAX_NUM_OF_INIT_DLS_ENTRY)
++ {
++ DBGPRINT(RT_DEBUG_TRACE,("DLS - PeerDlsRspAction() update timeout value \n"));
++ for (i=(MAX_NUM_OF_DLS_ENTRY-1); i>=MAX_NUM_OF_INIT_DLS_ENTRY; i--)
++ {
++ if (pAd->StaCfg.DLSEntry[i].Valid && MAC_ADDR_EQUAL(SA, pAd->StaCfg.DLSEntry[i].MacAddr))
++ {
++ if (StatusCode == MLME_SUCCESS)
++ {
++ MAC_TABLE_ENTRY *pEntry;
++ UCHAR MaxSupportedRate = RATE_11;
++
++ pEntry = MacTableInsertDlsEntry(pAd, SA, i);
++
++ switch (MaxSupportedRateIn500Kbps)
++ {
++ case 108: MaxSupportedRate = RATE_54; break;
++ case 96: MaxSupportedRate = RATE_48; break;
++ case 72: MaxSupportedRate = RATE_36; break;
++ case 48: MaxSupportedRate = RATE_24; break;
++ case 36: MaxSupportedRate = RATE_18; break;
++ case 24: MaxSupportedRate = RATE_12; break;
++ case 18: MaxSupportedRate = RATE_9; break;
++ case 12: MaxSupportedRate = RATE_6; break;
++ case 22: MaxSupportedRate = RATE_11; break;
++ case 11: MaxSupportedRate = RATE_5_5; break;
++ case 4: MaxSupportedRate = RATE_2; break;
++ case 2: MaxSupportedRate = RATE_1; break;
++ default: MaxSupportedRate = RATE_11; break;
++ }
++
++ pEntry->MaxSupportedRate = min(pAd->CommonCfg.MaxTxRate, MaxSupportedRate);
++
++ if (pEntry->MaxSupportedRate < RATE_FIRST_OFDM_RATE)
++ {
++ pEntry->MaxHTPhyMode.field.MODE = MODE_CCK;
++ pEntry->MaxHTPhyMode.field.MCS = pEntry->MaxSupportedRate;
++ pEntry->MinHTPhyMode.field.MODE = MODE_CCK;
++ pEntry->MinHTPhyMode.field.MCS = pEntry->MaxSupportedRate;
++ pEntry->HTPhyMode.field.MODE = MODE_CCK;
++ pEntry->HTPhyMode.field.MCS = pEntry->MaxSupportedRate;
++ }
++ else
++ {
++ pEntry->MaxHTPhyMode.field.MODE = MODE_OFDM;
++ pEntry->MaxHTPhyMode.field.MCS = OfdmRateToRxwiMCS[pEntry->MaxSupportedRate];
++ pEntry->MinHTPhyMode.field.MODE = MODE_OFDM;
++ pEntry->MinHTPhyMode.field.MCS = OfdmRateToRxwiMCS[pEntry->MaxSupportedRate];
++ pEntry->HTPhyMode.field.MODE = MODE_OFDM;
++ pEntry->HTPhyMode.field.MCS = OfdmRateToRxwiMCS[pEntry->MaxSupportedRate];
++ }
++
++ pEntry->MaxHTPhyMode.field.BW = BW_20;
++ pEntry->MinHTPhyMode.field.BW = BW_20;
++
++#ifdef DOT11_N_SUPPORT
++ pEntry->HTCapability.MCSSet[0] = 0;
++ pEntry->HTCapability.MCSSet[1] = 0;
++
++ // If this Entry supports 802.11n, upgrade to HT rate.
++ if ((HtCapabilityLen != 0) && (pAd->CommonCfg.PhyMode >= PHY_11ABGN_MIXED))
++ {
++ UCHAR j, bitmask; //k,bitmask;
++ CHAR ii;
++
++ DBGPRINT(RT_DEBUG_OFF, ("DLS - PeerDlsRspAction Receive Peer HT Capable STA from %02x:%02x:%02x:%02x:%02x:%02x\n",
++ SA[0], SA[1], SA[2], SA[3], SA[4], SA[5]));
++
++ if ((HtCapability.HtCapInfo.GF) && (pAd->CommonCfg.DesiredHtPhy.GF))
++ {
++ pEntry->MaxHTPhyMode.field.MODE = MODE_HTGREENFIELD;
++ }
++ else
++ {
++ pEntry->MaxHTPhyMode.field.MODE = MODE_HTMIX;
++ pAd->MacTab.fAnyStationNonGF = TRUE;
++ pAd->CommonCfg.AddHTInfo.AddHtInfo2.NonGfPresent = 1;
++ }
++
++ if ((HtCapability.HtCapInfo.ChannelWidth) && (pAd->CommonCfg.DesiredHtPhy.ChannelWidth))
++ {
++ pEntry->MaxHTPhyMode.field.BW= BW_40;
++ pEntry->MaxHTPhyMode.field.ShortGI = ((pAd->CommonCfg.DesiredHtPhy.ShortGIfor40)&(HtCapability.HtCapInfo.ShortGIfor40));
++ }
++ else
++ {
++ pEntry->MaxHTPhyMode.field.BW = BW_20;
++ pEntry->MaxHTPhyMode.field.ShortGI = ((pAd->CommonCfg.DesiredHtPhy.ShortGIfor20)&(HtCapability.HtCapInfo.ShortGIfor20));
++ pAd->MacTab.fAnyStation20Only = TRUE;
++ }
++
++ // find max fixed rate
++ for (ii=15; ii>=0; ii--)
++ {
++ j = ii/8;
++ bitmask = (1<<(ii-(j*8)));
++ if ( (pAd->StaCfg.DesiredHtPhyInfo.MCSSet[j]&bitmask) && (HtCapability.MCSSet[j]&bitmask))
++ {
++ pEntry->MaxHTPhyMode.field.MCS = ii;
++ break;
++ }
++ if (ii==0)
++ break;
++ }
++
++ if (pAd->StaCfg.DesiredTransmitSetting.field.MCS != MCS_AUTO)
++ {
++ printk("@@@ pAd->CommonCfg.RegTransmitSetting.field.MCS = %d\n",
++ pAd->StaCfg.DesiredTransmitSetting.field.MCS);
++ if (pAd->StaCfg.DesiredTransmitSetting.field.MCS == 32)
++ {
++ // Fix MCS as HT Duplicated Mode
++ pEntry->MaxHTPhyMode.field.BW = 1;
++ pEntry->MaxHTPhyMode.field.MODE = MODE_HTMIX;
++ pEntry->MaxHTPhyMode.field.STBC = 0;
++ pEntry->MaxHTPhyMode.field.ShortGI = 0;
++ pEntry->MaxHTPhyMode.field.MCS = 32;
++ }
++ else if (pEntry->MaxHTPhyMode.field.MCS > pAd->StaCfg.HTPhyMode.field.MCS)
++ {
++ // STA supports fixed MCS
++ pEntry->MaxHTPhyMode.field.MCS = pAd->StaCfg.HTPhyMode.field.MCS;
++ }
++ }
++
++ pEntry->MaxHTPhyMode.field.STBC = (HtCapability.HtCapInfo.RxSTBC & (pAd->CommonCfg.DesiredHtPhy.TxSTBC));
++ pEntry->MpduDensity = HtCapability.HtCapParm.MpduDensity;
++ pEntry->MaxRAmpduFactor = HtCapability.HtCapParm.MaxRAmpduFactor;
++ pEntry->MmpsMode = (UCHAR)HtCapability.HtCapInfo.MimoPs;
++ pEntry->AMsduSize = (UCHAR)HtCapability.HtCapInfo.AMsduSize;
++ pEntry->HTPhyMode.word = pEntry->MaxHTPhyMode.word;
++
++ if (HtCapability.HtCapInfo.ShortGIfor20)
++ CLIENT_STATUS_SET_FLAG(pEntry, fCLIENT_STATUS_SGI20_CAPABLE);
++ if (HtCapability.HtCapInfo.ShortGIfor40)
++ CLIENT_STATUS_SET_FLAG(pEntry, fCLIENT_STATUS_SGI40_CAPABLE);
++ if (HtCapability.HtCapInfo.TxSTBC)
++ CLIENT_STATUS_SET_FLAG(pEntry, fCLIENT_STATUS_TxSTBC_CAPABLE);
++ if (HtCapability.HtCapInfo.RxSTBC)
++ CLIENT_STATUS_SET_FLAG(pEntry, fCLIENT_STATUS_RxSTBC_CAPABLE);
++ if (HtCapability.ExtHtCapInfo.PlusHTC)
++ CLIENT_STATUS_SET_FLAG(pEntry, fCLIENT_STATUS_HTC_CAPABLE);
++ if (pAd->CommonCfg.bRdg && HtCapability.ExtHtCapInfo.RDGSupport)
++ CLIENT_STATUS_SET_FLAG(pEntry, fCLIENT_STATUS_RDG_CAPABLE);
++ if (HtCapability.ExtHtCapInfo.MCSFeedback == 0x03)
++ CLIENT_STATUS_SET_FLAG(pEntry, fCLIENT_STATUS_MCSFEEDBACK_CAPABLE);
++
++ NdisMoveMemory(&pEntry->HTCapability, &HtCapability, sizeof(HT_CAPABILITY_IE));
++ }
++#endif // DOT11_N_SUPPORT //
++
++ pEntry->HTPhyMode.word = pEntry->MaxHTPhyMode.word;
++ pEntry->CurrTxRate = pEntry->MaxSupportedRate;
++ CLIENT_STATUS_SET_FLAG(pEntry, fCLIENT_STATUS_WMM_CAPABLE);
++
++ if (pAd->StaCfg.bAutoTxRateSwitch == TRUE)
++ {
++ PUCHAR pTable;
++ UCHAR TableSize = 0;
++
++ MlmeSelectTxRateTable(pAd, pEntry, &pTable, &TableSize, &pEntry->CurrTxRateIndex);
++ pEntry->bAutoTxRateSwitch = TRUE;
++ }
++ else
++ {
++ pEntry->HTPhyMode.field.MODE = pAd->StaCfg.HTPhyMode.field.MODE;
++ pEntry->HTPhyMode.field.MCS = pAd->StaCfg.HTPhyMode.field.MCS;
++ pEntry->bAutoTxRateSwitch = FALSE;
++
++ RTMPUpdateLegacyTxSetting((UCHAR)pAd->StaCfg.DesiredTransmitSetting.field.FixedTxMode, pEntry);
++ }
++ pEntry->RateLen = SupportedRatesLen;
++
++ if (pAd->StaCfg.AuthMode >= Ndis802_11AuthModeWPA)
++ {
++ // If support WPA or WPA2, start STAKey hand shake,
++ // If failed hand shake, just tear down peer DLS
++ if (RTMPSendSTAKeyRequest(pAd, pAd->StaCfg.DLSEntry[i].MacAddr) != NDIS_STATUS_SUCCESS)
++ {
++ MLME_DLS_REQ_STRUCT MlmeDlsReq;
++ USHORT reason = REASON_QOS_CIPHER_NOT_SUPPORT;
++
++ DlsParmFill(pAd, &MlmeDlsReq, &pAd->StaCfg.DLSEntry[i], reason);
++ MlmeEnqueue(pAd, DLS_STATE_MACHINE, MT2_MLME_DLS_TEAR_DOWN, sizeof(MLME_DLS_REQ_STRUCT), &MlmeDlsReq);
++ pAd->StaCfg.DLSEntry[i].Status = DLS_NONE;
++ pAd->StaCfg.DLSEntry[i].Valid = FALSE;
++ DBGPRINT(RT_DEBUG_ERROR,("DLS - PeerDlsRspAction failed when call RTMPSendSTAKeyRequest \n"));
++ }
++ else
++ {
++ pAd->StaCfg.DLSEntry[i].Status = DLS_WAIT_KEY;
++ DBGPRINT(RT_DEBUG_TRACE,("DLS - waiting for STAKey handshake procedure\n"));
++ }
++ }
++ else
++ {
++ RTMPCancelTimer(&pAd->StaCfg.DLSEntry[i].Timer, &TimerCancelled);
++ pAd->StaCfg.DLSEntry[i].Status = DLS_FINISH;
++ DBGPRINT(RT_DEBUG_TRACE,("DLS - PeerDlsRspAction() from %02x:%02x:%02x:%02x:%02x:%02x Succeed with WEP or no security\n", SA[0], SA[1], SA[2], SA[3], SA[4], SA[5]));
++ }
++ pAd->StaCfg.DLSEntry[i].Sequence = 0;
++ if (HtCapabilityLen != 0)
++ pAd->StaCfg.DLSEntry[i].bHTCap = TRUE;
++ else
++ pAd->StaCfg.DLSEntry[i].bHTCap = FALSE;
++ }
++ else
++ {
++ // DLS setup procedure failed.
++ pAd->StaCfg.DLSEntry[i].Status = DLS_NONE;
++ pAd->StaCfg.DLSEntry[i].Valid = FALSE;
++ RTMPCancelTimer(&pAd->StaCfg.DLSEntry[i].Timer, &TimerCancelled);
++ DBGPRINT(RT_DEBUG_ERROR,("DLS - PeerDlsRspAction failed with StatusCode=%d \n", StatusCode));
++ }
++ }
++ }
++ }
++}
++
++/*
++ ==========================================================================
++ Description:
++
++ IRQL = DISPATCH_LEVEL
++
++ ==========================================================================
++ */
++VOID MlmeDlsTearDownAction(
++ IN PRTMP_ADAPTER pAd,
++ IN MLME_QUEUE_ELEM *Elem)
++{
++ PUCHAR pOutBuffer = NULL;
++ NDIS_STATUS NStatus;
++ ULONG FrameLen = 0;
++ UCHAR Category = CATEGORY_DLS;
++ UCHAR Action = ACTION_DLS_TEARDOWN;
++ USHORT ReasonCode = REASON_QOS_UNSPECIFY;
++ HEADER_802_11 DlsTearDownHdr;
++ PRT_802_11_DLS pDLS;
++ BOOLEAN TimerCancelled;
++ UCHAR i;
++
++ if(!MlmeDlsReqSanity(pAd, Elem->Msg, Elem->MsgLen, &pDLS, &ReasonCode))
++ return;
++
++ DBGPRINT(RT_DEBUG_TRACE,("DLS - MlmeDlsTearDownAction() with ReasonCode=%d \n", ReasonCode));
++
++ NStatus = MlmeAllocateMemory(pAd, &pOutBuffer); //Get an unused nonpaged memory
++ if (NStatus != NDIS_STATUS_SUCCESS)
++ {
++ DBGPRINT(RT_DEBUG_ERROR,("DLS - MlmeDlsTearDownAction() allocate memory failed \n"));
++ return;
++ }
++
++ ActHeaderInit(pAd, &DlsTearDownHdr, pAd->CommonCfg.Bssid, pAd->CurrentAddress, pAd->CommonCfg.Bssid);
++
++ // Build basic frame first
++ MakeOutgoingFrame(pOutBuffer, &FrameLen,
++ sizeof(HEADER_802_11), &DlsTearDownHdr,
++ 1, &Category,
++ 1, &Action,
++ 6, &pDLS->MacAddr,
++ 6, pAd->CurrentAddress,
++ 2, &ReasonCode,
++ END_OF_ARGS);
++
++ MiniportMMRequest(pAd, QID_AC_BE, pOutBuffer, FrameLen);
++ MlmeFreeMemory(pAd, pOutBuffer);
++ RTMPCancelTimer(&pDLS->Timer, &TimerCancelled);
++
++ // Remove key in local dls table entry
++ for (i = 0; i < MAX_NUM_OF_INIT_DLS_ENTRY; i++)
++ {
++ if (MAC_ADDR_EQUAL(pDLS->MacAddr, pAd->StaCfg.DLSEntry[i].MacAddr))
++ {
++ MacTableDeleteDlsEntry(pAd, pAd->StaCfg.DLSEntry[i].MacTabMatchWCID, pAd->StaCfg.DLSEntry[i].MacAddr);
++ }
++ }
++
++ // clear peer dls table entry
++ for (i = MAX_NUM_OF_INIT_DLS_ENTRY; i < MAX_NUM_OF_DLS_ENTRY; i++)
++ {
++ if (MAC_ADDR_EQUAL(pDLS->MacAddr, pAd->StaCfg.DLSEntry[i].MacAddr))
++ {
++ pAd->StaCfg.DLSEntry[i].Status = DLS_NONE;
++ pAd->StaCfg.DLSEntry[i].Valid = FALSE;
++ RTMPCancelTimer(&pAd->StaCfg.DLSEntry[i].Timer, &TimerCancelled);
++ MacTableDeleteDlsEntry(pAd, pAd->StaCfg.DLSEntry[i].MacTabMatchWCID, pAd->StaCfg.DLSEntry[i].MacAddr);
++ }
++ }
++}
++
++/*
++ ==========================================================================
++ Description:
++
++ IRQL = DISPATCH_LEVEL
++
++ ==========================================================================
++ */
++VOID PeerDlsTearDownAction(
++ IN PRTMP_ADAPTER pAd,
++ IN MLME_QUEUE_ELEM *Elem)
++{
++ UCHAR DA[MAC_ADDR_LEN], SA[MAC_ADDR_LEN];
++ USHORT ReasonCode;
++ UINT i;
++ BOOLEAN TimerCancelled;
++
++ if (!pAd->CommonCfg.bDLSCapable)
++ return;
++
++ if (!INFRA_ON(pAd))
++ return;
++
++ if (!PeerDlsTearDownSanity(pAd, Elem->Msg, Elem->MsgLen, DA, SA, &ReasonCode))
++ return;
++
++ DBGPRINT(RT_DEBUG_TRACE,("DLS - PeerDlsTearDownAction() from %02x:%02x:%02x:%02x:%02x:%02x with ReasonCode=%d\n", SA[0], SA[1], SA[2], SA[3], SA[4], SA[5], ReasonCode));
++
++ // clear local dls table entry
++ for (i=0; i<MAX_NUM_OF_INIT_DLS_ENTRY; i++)
++ {
++ if (pAd->StaCfg.DLSEntry[i].Valid && MAC_ADDR_EQUAL(SA, pAd->StaCfg.DLSEntry[i].MacAddr))
++ {
++ pAd->StaCfg.DLSEntry[i].Status = DLS_NONE;
++ pAd->StaCfg.DLSEntry[i].Valid = FALSE;
++ RTMPCancelTimer(&pAd->StaCfg.DLSEntry[i].Timer, &TimerCancelled);
++ //AsicDelWcidTab(pAd, pAd->StaCfg.DLSEntry[i].MacTabMatchWCID);
++ //AsicRemovePairwiseKeyEntry(pAd, BSS0, pAd->StaCfg.DLSEntry[i].MacTabMatchWCID);
++ MacTableDeleteDlsEntry(pAd, pAd->StaCfg.DLSEntry[i].MacTabMatchWCID, pAd->StaCfg.DLSEntry[i].MacAddr);
++ }
++ }
++
++ // clear peer dls table entry
++ for (i=MAX_NUM_OF_INIT_DLS_ENTRY; i<MAX_NUM_OF_DLS_ENTRY; i++)
++ {
++ if (pAd->StaCfg.DLSEntry[i].Valid && MAC_ADDR_EQUAL(SA, pAd->StaCfg.DLSEntry[i].MacAddr))
++ {
++ pAd->StaCfg.DLSEntry[i].Status = DLS_NONE;
++ pAd->StaCfg.DLSEntry[i].Valid = FALSE;
++ RTMPCancelTimer(&pAd->StaCfg.DLSEntry[i].Timer, &TimerCancelled);
++ //AsicDelWcidTab(pAd, pAd->StaCfg.DLSEntry[i].MacTabMatchWCID);
++ //AsicRemovePairwiseKeyEntry(pAd, BSS0, pAd->StaCfg.DLSEntry[i].MacTabMatchWCID);
++ MacTableDeleteDlsEntry(pAd, pAd->StaCfg.DLSEntry[i].MacTabMatchWCID, pAd->StaCfg.DLSEntry[i].MacAddr);
++ }
++ }
++}
++
++/*
++ ==========================================================================
++ Description:
++
++ IRQL = DISPATCH_LEVEL
++
++ ==========================================================================
++ */
++VOID RTMPCheckDLSTimeOut(
++ IN PRTMP_ADAPTER pAd)
++{
++ ULONG i;
++ MLME_DLS_REQ_STRUCT MlmeDlsReq;
++ USHORT reason = REASON_QOS_UNSPECIFY;
++
++ if (! pAd->CommonCfg.bDLSCapable)
++ return;
++
++ if (! INFRA_ON(pAd))
++ return;
++
++ // If timeout value is equaled to zero, it means always not be timeout.
++
++ // update local dls table entry
++ for (i=0; i<MAX_NUM_OF_INIT_DLS_ENTRY; i++)
++ {
++ if ((pAd->StaCfg.DLSEntry[i].Valid) && (pAd->StaCfg.DLSEntry[i].Status == DLS_FINISH)
++ && (pAd->StaCfg.DLSEntry[i].TimeOut != 0))
++ {
++ pAd->StaCfg.DLSEntry[i].CountDownTimer --;
++
++ if (pAd->StaCfg.DLSEntry[i].CountDownTimer == 0)
++ {
++ reason = REASON_QOS_REQUEST_TIMEOUT;
++ pAd->StaCfg.DLSEntry[i].Valid = FALSE;
++ pAd->StaCfg.DLSEntry[i].Status = DLS_NONE;
++ DlsParmFill(pAd, &MlmeDlsReq, &pAd->StaCfg.DLSEntry[i], reason);
++ MlmeEnqueue(pAd, DLS_STATE_MACHINE, MT2_MLME_DLS_TEAR_DOWN, sizeof(MLME_DLS_REQ_STRUCT), &MlmeDlsReq);
++ }
++ }
++ }
++
++ // update peer dls table entry
++ for (i=MAX_NUM_OF_INIT_DLS_ENTRY; i<MAX_NUM_OF_DLS_ENTRY; i++)
++ {
++ if ((pAd->StaCfg.DLSEntry[i].Valid) && (pAd->StaCfg.DLSEntry[i].Status == DLS_FINISH)
++ && (pAd->StaCfg.DLSEntry[i].TimeOut != 0))
++ {
++ pAd->StaCfg.DLSEntry[i].CountDownTimer --;
++
++ if (pAd->StaCfg.DLSEntry[i].CountDownTimer == 0)
++ {
++ reason = REASON_QOS_REQUEST_TIMEOUT;
++ pAd->StaCfg.DLSEntry[i].Valid = FALSE;
++ pAd->StaCfg.DLSEntry[i].Status = DLS_NONE;
++ DlsParmFill(pAd, &MlmeDlsReq, &pAd->StaCfg.DLSEntry[i], reason);
++ MlmeEnqueue(pAd, DLS_STATE_MACHINE, MT2_MLME_DLS_TEAR_DOWN, sizeof(MLME_DLS_REQ_STRUCT), &MlmeDlsReq);
++ }
++ }
++ }
++}
++
++/*
++ ==========================================================================
++ Description:
++
++ IRQL = DISPATCH_LEVEL
++
++ ==========================================================================
++ */
++BOOLEAN RTMPRcvFrameDLSCheck(
++ IN PRTMP_ADAPTER pAd,
++ IN PHEADER_802_11 pHeader,
++ IN ULONG Len,
++ IN PRT28XX_RXD_STRUC pRxD)
++{
++ ULONG i;
++ BOOLEAN bFindEntry = FALSE;
++ BOOLEAN bSTAKeyFrame = FALSE;
++ PEAPOL_PACKET pEap;
++ PUCHAR pProto, pAddr = NULL;
++ PUCHAR pSTAKey = NULL;
++ UCHAR ZeroReplay[LEN_KEY_DESC_REPLAY];
++ UCHAR Mic[16], OldMic[16];
++ UCHAR digest[80];
++ UCHAR DlsPTK[80];
++ UCHAR temp[64];
++ BOOLEAN TimerCancelled;
++ CIPHER_KEY PairwiseKey;
++
++
++ if (! pAd->CommonCfg.bDLSCapable)
++ return bSTAKeyFrame;
++
++ if (! INFRA_ON(pAd))
++ return bSTAKeyFrame;
++
++ if (! (pHeader->FC.SubType & 0x08))
++ return bSTAKeyFrame;
++
++ if (Len < LENGTH_802_11 + 6 + 2 + 2)
++ return bSTAKeyFrame;
++
++ pProto = (PUCHAR)pHeader + LENGTH_802_11 + 2 + 6; // QOS Control field , 0xAA 0xAA 0xAA 0x00 0x00 0x00
++ pAddr = pHeader->Addr2;
++
++ // L2PAD bit on will pad 2 bytes at LLC
++ if (pRxD->L2PAD)
++ {
++ pProto += 2;
++ }
++
++ if (RTMPEqualMemory(EAPOL, pProto, 2) && (pAd->StaCfg.AuthMode >= Ndis802_11AuthModeWPA))
++ {
++ pEap = (PEAPOL_PACKET) (pProto + 2);
++
++ DBGPRINT(RT_DEBUG_TRACE,("DLS - Sniff Len=%ld, DataLen=%d, KeyMic=%d, Install=%d, KeyAck=%d, Secure=%d, EKD_DL=%d, Error=%d, Request=%d\n", Len,
++ (LENGTH_802_11 + 6 + 2 + 2 + sizeof(EAPOL_PACKET) - MAX_LEN_OF_RSNIE + 16),
++ pEap->KeyDesc.KeyInfo.KeyMic,
++ pEap->KeyDesc.KeyInfo.Install,
++ pEap->KeyDesc.KeyInfo.KeyAck,
++ pEap->KeyDesc.KeyInfo.Secure,
++ pEap->KeyDesc.KeyInfo.EKD_DL,
++ pEap->KeyDesc.KeyInfo.Error,
++ pEap->KeyDesc.KeyInfo.Request));
++
++ if ((Len >= (LENGTH_802_11 + 6 + 2 + 2 + sizeof(EAPOL_PACKET) - MAX_LEN_OF_RSNIE + 16)) && pEap->KeyDesc.KeyInfo.KeyMic
++ && pEap->KeyDesc.KeyInfo.Install && pEap->KeyDesc.KeyInfo.KeyAck && pEap->KeyDesc.KeyInfo.Secure
++ && pEap->KeyDesc.KeyInfo.EKD_DL && !pEap->KeyDesc.KeyInfo.Error && !pEap->KeyDesc.KeyInfo.Request)
++ {
++ // First validate replay counter, only accept message with larger replay counter
++ // Let equal pass, some AP start with all zero replay counter
++ NdisZeroMemory(ZeroReplay, LEN_KEY_DESC_REPLAY);
++ if ((RTMPCompareMemory(pEap->KeyDesc.ReplayCounter, pAd->StaCfg.ReplayCounter, LEN_KEY_DESC_REPLAY) != 1) &&
++ (RTMPCompareMemory(pEap->KeyDesc.ReplayCounter, ZeroReplay, LEN_KEY_DESC_REPLAY) != 0))
++ return bSTAKeyFrame;
++
++ //RTMPMoveMemory(pAd->StaCfg.ReplayCounter, pEap->KeyDesc.ReplayCounter, LEN_KEY_DESC_REPLAY);
++ RTMPMoveMemory(pAd->StaCfg.DlsReplayCounter, pEap->KeyDesc.ReplayCounter, LEN_KEY_DESC_REPLAY);
++ DBGPRINT(RT_DEBUG_TRACE,("DLS - Sniff replay counter (%02x-%02x-%02x-%02x-%02x-%02x-%02x-%02x) Len=%ld, KeyDataLen=%d\n",
++ pAd->StaCfg.ReplayCounter[0], pAd->StaCfg.ReplayCounter[1], pAd->StaCfg.ReplayCounter[2],
++ pAd->StaCfg.ReplayCounter[3], pAd->StaCfg.ReplayCounter[4], pAd->StaCfg.ReplayCounter[5],
++ pAd->StaCfg.ReplayCounter[6], pAd->StaCfg.ReplayCounter[7], Len, pEap->KeyDesc.KeyData[1]));
++
++ // put these code segment to get the replay counter
++ if (pAd->StaCfg.PortSecured == WPA_802_1X_PORT_NOT_SECURED)
++ return bSTAKeyFrame;
++
++ // Check MIC value
++ // Save the MIC and replace with zero
++ // use proprietary PTK
++ NdisZeroMemory(temp, 64);
++ NdisMoveMemory(temp, "IEEE802.11 WIRELESS ACCESS POINT", 32);
++ WpaCountPTK(pAd, temp, temp, pAd->CommonCfg.Bssid, temp, pAd->CurrentAddress, DlsPTK, LEN_PTK);
++
++ NdisMoveMemory(OldMic, pEap->KeyDesc.KeyMic, LEN_KEY_DESC_MIC);
++ NdisZeroMemory(pEap->KeyDesc.KeyMic, LEN_KEY_DESC_MIC);
++ if (pAd->StaCfg.WepStatus == Ndis802_11Encryption3Enabled)
++ {
++ // AES
++ HMAC_SHA1((PUCHAR) pEap, pEap->Body_Len[1] + 4, DlsPTK, LEN_EAP_MICK, digest);
++ NdisMoveMemory(Mic, digest, LEN_KEY_DESC_MIC);
++ }
++ else
++ {
++ hmac_md5(DlsPTK, LEN_EAP_MICK, (PUCHAR) pEap, pEap->Body_Len[1] + 4, Mic);
++ }
++
++ if (!NdisEqualMemory(OldMic, Mic, LEN_KEY_DESC_MIC))
++ {
++ DBGPRINT(RT_DEBUG_ERROR, ("MIC Different in Msg1 of STAKey handshake! \n"));
++ return bSTAKeyFrame;
++ }
++ else
++ DBGPRINT(RT_DEBUG_TRACE, ("MIC VALID in Msg1 of STAKey handshake! \n"));
++#if 1
++ if ((pEap->KeyDesc.KeyData[0] == 0xDD) && (pEap->KeyDesc.KeyData[2] == 0x00) && (pEap->KeyDesc.KeyData[3] == 0x0C)
++ && (pEap->KeyDesc.KeyData[4] == 0x43) && (pEap->KeyDesc.KeyData[5] == 0x02))
++ {
++ pAddr = pEap->KeyDesc.KeyData + 8; // Tpe(1), Len(1), OUI(3), DataType(1), Reserved(2)
++ pSTAKey = pEap->KeyDesc.KeyData + 14; // Tpe(1), Len(1), OUI(3), DataType(1), Reserved(2), STAKey_Mac_Addr(6)
++
++ DBGPRINT(RT_DEBUG_TRACE,("DLS - Receive STAKey Message-1 from %02x:%02x:%02x:%02x:%02x:%02x Len=%ld, KeyDataLen=%d\n",
++ pAddr[0], pAddr[1], pAddr[2], pAddr[3], pAddr[4], pAddr[5], Len, pEap->KeyDesc.KeyData[1]));
++
++ bSTAKeyFrame = TRUE;
++ }
++#else
++ if ((pEap->KeyDesc.KeyData[0] == 0xDD) && (pEap->KeyDesc.KeyData[2] == 0x00) && (pEap->KeyDesc.KeyData[3] == 0x0F)
++ && (pEap->KeyDesc.KeyData[4] == 0xAC) && (pEap->KeyDesc.KeyData[5] == 0x02))
++ {
++ pAddr = pEap->KeyDesc.KeyData + 8; // Tpe(1), Len(1), OUI(3), DataType(1), Reserved(2)
++ pSTAKey = pEap->KeyDesc.KeyData + 14; // Tpe(1), Len(1), OUI(3), DataType(1), Reserved(2), STAKey_Mac_Addr(6)
++
++ DBGPRINT(RT_DEBUG_TRACE,("DLS - Receive STAKey Message-1 from %02x:%02x:%02x:%02x:%02x:%02x Len=%d, KeyDataLen=%d\n",
++ pAddr[0], pAddr[1], pAddr[2], pAddr[3], pAddr[4], pAddr[5], Len, pEap->KeyDesc.KeyData[1]));
++
++ bSTAKeyFrame = TRUE;
++ }
++#endif
++
++ }
++ else if (Len >= (LENGTH_802_11 + 6 + 2 + 2 + sizeof(EAPOL_PACKET) - MAX_LEN_OF_RSNIE))
++ {
++#if 0
++ RTMPMoveMemory(pAd->StaCfg.ReplayCounter, pEap->KeyDesc.ReplayCounter, LEN_KEY_DESC_REPLAY);
++
++#endif
++ RTMPMoveMemory(pAd->StaCfg.DlsReplayCounter, pEap->KeyDesc.ReplayCounter, LEN_KEY_DESC_REPLAY);
++ DBGPRINT(RT_DEBUG_TRACE,("DLS - Sniff replay counter 2(%02x-%02x-%02x-%02x-%02x-%02x-%02x-%02x) Len=%ld, KeyDataLen=%d\n",
++ pAd->StaCfg.ReplayCounter[0], pAd->StaCfg.ReplayCounter[1], pAd->StaCfg.ReplayCounter[2],
++ pAd->StaCfg.ReplayCounter[3], pAd->StaCfg.ReplayCounter[4], pAd->StaCfg.ReplayCounter[5],
++ pAd->StaCfg.ReplayCounter[6], pAd->StaCfg.ReplayCounter[7], Len, pEap->KeyDesc.KeyData[1]));
++
++ }
++ }
++
++ // If timeout value is equaled to zero, it means always not be timeout.
++ // update local dls table entry
++ for (i= 0; i < MAX_NUM_OF_INIT_DLS_ENTRY; i++)
++ {
++ if (pAd->StaCfg.DLSEntry[i].Valid && MAC_ADDR_EQUAL(pAddr, pAd->StaCfg.DLSEntry[i].MacAddr))
++ {
++ if (bSTAKeyFrame)
++ {
++ PMAC_TABLE_ENTRY pEntry;
++
++ // STAKey frame, add pairwise key table
++ pAd->StaCfg.DLSEntry[i].Status = DLS_FINISH;
++ RTMPCancelTimer(&pAd->StaCfg.DLSEntry[i].Timer, &TimerCancelled);
++
++ PairwiseKey.KeyLen = LEN_TKIP_EK;
++ NdisMoveMemory(PairwiseKey.Key, &pSTAKey[0], LEN_TKIP_EK);
++ NdisMoveMemory(PairwiseKey.TxMic, &pSTAKey[16], LEN_TKIP_RXMICK);
++ NdisMoveMemory(PairwiseKey.RxMic, &pSTAKey[24], LEN_TKIP_TXMICK);
++
++ PairwiseKey.CipherAlg = pAd->SharedKey[BSS0][pAd->StaCfg.DefaultKeyId].CipherAlg;
++
++ pEntry = DlsEntryTableLookup(pAd, pAd->StaCfg.DLSEntry[i].MacAddr, TRUE);
++ //AsicAddKeyEntry(pAd, (USHORT)(i + 2), BSS0, 0, &PairwiseKey, TRUE, TRUE); // reserve 0 for multicast, 1 for unicast
++ //AsicUpdateRxWCIDTable(pAd, (USHORT)(i + 2), pAddr);
++ // Add Pair-wise key to Asic
++#ifdef RT2870
++ {
++ RT_ADD_PAIRWISE_KEY_ENTRY KeyInfo;
++ COPY_MAC_ADDR(KeyInfo.MacAddr,pAd->StaCfg.DLSEntry[i].MacAddr);
++ KeyInfo.MacTabMatchWCID=pAd->StaCfg.DLSEntry[i].MacTabMatchWCID;
++ NdisMoveMemory(&KeyInfo.CipherKey, &PairwiseKey,sizeof(CIPHER_KEY));
++ RTUSBEnqueueInternalCmd(pAd, RT_CMD_SET_KEY_TABLE, &KeyInfo, sizeof(RT_ADD_PAIRWISE_KEY_ENTRY));
++ }
++ {
++ PMAC_TABLE_ENTRY pDLSEntry;
++ pDLSEntry = DlsEntryTableLookup(pAd, pAd->StaCfg.DLSEntry[i].MacAddr, TRUE);
++ pDLSEntry->PairwiseKey.CipherAlg=PairwiseKey.CipherAlg;
++ RTUSBEnqueueInternalCmd(pAd, RT_CMD_SET_RX_WCID_TABLE, pDLSEntry, sizeof(MAC_TABLE_ENTRY));
++ }
++#endif // RT2870 //
++ NdisMoveMemory(&pEntry->PairwiseKey, &PairwiseKey, sizeof(CIPHER_KEY));
++ DBGPRINT(RT_DEBUG_TRACE,("DLS - Receive STAKey Message-1 (Peer STA MAC Address STAKey) \n"));
++
++ RTMPSendSTAKeyHandShake(pAd, pAd->StaCfg.DLSEntry[i].MacAddr);
++
++ DBGPRINT(RT_DEBUG_TRACE,("DLS - Finish STAKey handshake procedure (Initiator side)\n"));
++ }
++ else
++ {
++ // Data frame, update timeout value
++ if (pAd->StaCfg.DLSEntry[i].Status == DLS_FINISH)
++ {
++ pAd->StaCfg.DLSEntry[i].CountDownTimer = pAd->StaCfg.DLSEntry[i].TimeOut;
++ //AsicUpdateRxWCIDTable(pAd, (USHORT)(i + 2), pAddr);
++ }
++ }
++
++ bFindEntry = TRUE;
++ }
++ }
++
++ // update peer dls table entry
++ for (i=MAX_NUM_OF_INIT_DLS_ENTRY; i<MAX_NUM_OF_DLS_ENTRY; i++)
++ {
++ if (pAd->StaCfg.DLSEntry[i].Valid && MAC_ADDR_EQUAL(pAddr, pAd->StaCfg.DLSEntry[i].MacAddr))
++ {
++ if (bSTAKeyFrame)
++ {
++ PMAC_TABLE_ENTRY pEntry = NULL;
++
++ // STAKey frame, add pairwise key table, and send STAkey Msg-2
++ pAd->StaCfg.DLSEntry[i].Status = DLS_FINISH;
++ RTMPCancelTimer(&pAd->StaCfg.DLSEntry[i].Timer, &TimerCancelled);
++
++ PairwiseKey.KeyLen = LEN_TKIP_EK;
++ NdisMoveMemory(PairwiseKey.Key, &pSTAKey[0], LEN_TKIP_EK);
++ NdisMoveMemory(PairwiseKey.TxMic, &pSTAKey[16], LEN_TKIP_RXMICK);
++ NdisMoveMemory(PairwiseKey.RxMic, &pSTAKey[24], LEN_TKIP_TXMICK);
++
++ PairwiseKey.CipherAlg = pAd->SharedKey[BSS0][pAd->StaCfg.DefaultKeyId].CipherAlg;
++
++ pEntry = DlsEntryTableLookup(pAd, pAd->StaCfg.DLSEntry[i].MacAddr, TRUE);
++ //AsicAddKeyEntry(pAd, (USHORT)(i + 2), BSS0, 0, &PairwiseKey, TRUE, TRUE); // reserve 0 for multicast, 1 for unicast
++ //AsicUpdateRxWCIDTable(pAd, (USHORT)(i + 2), pAddr);
++ // Add Pair-wise key to Asic
++#ifdef RT2870
++ {
++ RT_ADD_PAIRWISE_KEY_ENTRY KeyInfo;
++ COPY_MAC_ADDR(KeyInfo.MacAddr,pAd->StaCfg.DLSEntry[i].MacAddr);
++ KeyInfo.MacTabMatchWCID=pAd->StaCfg.DLSEntry[i].MacTabMatchWCID;
++ NdisMoveMemory(&KeyInfo.CipherKey, &PairwiseKey,sizeof(CIPHER_KEY));
++ RTUSBEnqueueInternalCmd(pAd, RT_CMD_SET_KEY_TABLE, &KeyInfo, sizeof(RT_ADD_PAIRWISE_KEY_ENTRY));
++ }
++ {
++ PMAC_TABLE_ENTRY pDLSEntry;
++ pDLSEntry = DlsEntryTableLookup(pAd, pAd->StaCfg.DLSEntry[i].MacAddr, TRUE);
++ pDLSEntry->PairwiseKey.CipherAlg=PairwiseKey.CipherAlg;
++ RTUSBEnqueueInternalCmd(pAd, RT_CMD_SET_RX_WCID_TABLE, pDLSEntry, sizeof(MAC_TABLE_ENTRY));
++ }
++#endif // RT2870 //
++ NdisMoveMemory(&pEntry->PairwiseKey, &PairwiseKey, sizeof(CIPHER_KEY));
++ DBGPRINT(RT_DEBUG_TRACE,("DLS - Receive STAKey Message-1 (Initiator STA MAC Address STAKey)\n"));
++
++ // If support WPA or WPA2, start STAKey hand shake,
++ // If failed hand shake, just tear down peer DLS
++ if (RTMPSendSTAKeyHandShake(pAd, pAddr) != NDIS_STATUS_SUCCESS)
++ {
++ MLME_DLS_REQ_STRUCT MlmeDlsReq;
++ USHORT reason = REASON_QOS_CIPHER_NOT_SUPPORT;
++
++ pAd->StaCfg.DLSEntry[i].Valid = FALSE;
++ pAd->StaCfg.DLSEntry[i].Status = DLS_NONE;
++ DlsParmFill(pAd, &MlmeDlsReq, &pAd->StaCfg.DLSEntry[i], reason);
++ MlmeEnqueue(pAd, DLS_STATE_MACHINE, MT2_MLME_DLS_TEAR_DOWN, sizeof(MLME_DLS_REQ_STRUCT), &MlmeDlsReq);
++ }
++ else
++ {
++ DBGPRINT(RT_DEBUG_TRACE,("DLS - Finish STAKey handshake procedure (Peer side)\n"));
++ }
++ }
++ else
++ {
++ // Data frame, update timeout value
++ if (pAd->StaCfg.DLSEntry[i].Status == DLS_FINISH)
++ {
++ pAd->StaCfg.DLSEntry[i].CountDownTimer = pAd->StaCfg.DLSEntry[i].TimeOut;
++ }
++ }
++
++ bFindEntry = TRUE;
++ }
++ }
++
++
++ return bSTAKeyFrame;
++}
++
++/*
++ ========================================================================
++
++ Routine Description:
++ Check if the frame can be sent through DLS direct link interface
++
++ Arguments:
++ pAd Pointer to adapter
++
++ Return Value:
++ DLS entry index
++
++ Note:
++
++ ========================================================================
++*/
++INT RTMPCheckDLSFrame(
++ IN PRTMP_ADAPTER pAd,
++ IN PUCHAR pDA)
++{
++ INT rval = -1;
++ INT i;
++
++ if (!pAd->CommonCfg.bDLSCapable)
++ return rval;
++
++ if (!INFRA_ON(pAd))
++ return rval;
++
++ do{
++ // check local dls table entry
++ for (i=0; i<MAX_NUM_OF_INIT_DLS_ENTRY; i++)
++ {
++ if (pAd->StaCfg.DLSEntry[i].Valid && (pAd->StaCfg.DLSEntry[i].Status == DLS_FINISH) &&
++ MAC_ADDR_EQUAL(pDA, pAd->StaCfg.DLSEntry[i].MacAddr))
++ {
++ rval = i;
++ break;
++ }
++ }
++
++ // check peer dls table entry
++ for (i=MAX_NUM_OF_INIT_DLS_ENTRY; i<MAX_NUM_OF_DLS_ENTRY; i++)
++ {
++ if (pAd->StaCfg.DLSEntry[i].Valid && (pAd->StaCfg.DLSEntry[i].Status == DLS_FINISH) &&
++ MAC_ADDR_EQUAL(pDA, pAd->StaCfg.DLSEntry[i].MacAddr))
++ {
++ rval = i;
++ break;
++ }
++ }
++ } while (FALSE);
++
++ return rval;
++}
++
++/*
++ ==========================================================================
++ Description:
++
++ IRQL = DISPATCH_LEVEL
++
++ ==========================================================================
++ */
++VOID RTMPSendDLSTearDownFrame(
++ IN PRTMP_ADAPTER pAd,
++ IN PUCHAR pDA)
++{
++ PUCHAR pOutBuffer = NULL;
++ NDIS_STATUS NStatus;
++ HEADER_802_11 DlsTearDownHdr;
++ ULONG FrameLen = 0;
++ USHORT Reason = REASON_QOS_QSTA_LEAVING_QBSS;
++ UCHAR Category = CATEGORY_DLS;
++ UCHAR Action = ACTION_DLS_TEARDOWN;
++ UCHAR i = 0;
++
++ if (RTMP_TEST_FLAG(pAd, fRTMP_ADAPTER_RESET_IN_PROGRESS) ||
++ RTMP_TEST_FLAG(pAd, fRTMP_ADAPTER_HALT_IN_PROGRESS))
++ return;
++
++ DBGPRINT(RT_DEBUG_TRACE, ("Send DLS TearDown Frame \n"));
++
++ NStatus = MlmeAllocateMemory(pAd, &pOutBuffer); //Get an unused nonpaged memory
++ if (NStatus != NDIS_STATUS_SUCCESS)
++ {
++ DBGPRINT(RT_DEBUG_ERROR,("ASSOC - RTMPSendDLSTearDownFrame() allocate memory failed \n"));
++ return;
++ }
++
++ ActHeaderInit(pAd, &DlsTearDownHdr, pAd->CommonCfg.Bssid, pAd->CurrentAddress, pAd->CommonCfg.Bssid);
++ MakeOutgoingFrame(pOutBuffer, &FrameLen,
++ sizeof(HEADER_802_11), &DlsTearDownHdr,
++ 1, &Category,
++ 1, &Action,
++ 6, pDA,
++ 6, pAd->CurrentAddress,
++ 2, &Reason,
++ END_OF_ARGS);
++
++ MiniportMMRequest(pAd, 0, pOutBuffer, FrameLen);
++ MlmeFreeMemory(pAd, pOutBuffer);
++
++ // Remove key in local dls table entry
++ for (i = 0; i < MAX_NUM_OF_INIT_DLS_ENTRY; i++)
++ {
++ if (pAd->StaCfg.DLSEntry[i].Valid && (pAd->StaCfg.DLSEntry[i].Status == DLS_FINISH)
++ && MAC_ADDR_EQUAL(pDA, pAd->StaCfg.DLSEntry[i].MacAddr))
++ {
++ MacTableDeleteDlsEntry(pAd, pAd->StaCfg.DLSEntry[i].MacTabMatchWCID, pAd->StaCfg.DLSEntry[i].MacAddr);
++ }
++ }
++
++ // Remove key in peer dls table entry
++ for (i=MAX_NUM_OF_INIT_DLS_ENTRY; i<MAX_NUM_OF_DLS_ENTRY; i++)
++ {
++ if (pAd->StaCfg.DLSEntry[i].Valid && (pAd->StaCfg.DLSEntry[i].Status == DLS_FINISH)
++ && MAC_ADDR_EQUAL(pDA, pAd->StaCfg.DLSEntry[i].MacAddr))
++ {
++ MacTableDeleteDlsEntry(pAd, pAd->StaCfg.DLSEntry[i].MacTabMatchWCID, pAd->StaCfg.DLSEntry[i].MacAddr);
++ }
++ }
++
++ DBGPRINT(RT_DEBUG_TRACE, ("Send DLS TearDown Frame and remove key in (i=%d) \n", i));
++}
++
++/*
++ ==========================================================================
++ Description:
++
++ IRQL = DISPATCH_LEVEL
++
++ ==========================================================================
++ */
++NDIS_STATUS RTMPSendSTAKeyRequest(
++ IN PRTMP_ADAPTER pAd,
++ IN PUCHAR pDA)
++{
++ UCHAR Header802_3[14];
++ NDIS_STATUS NStatus;
++ ULONG FrameLen = 0;
++ EAPOL_PACKET Packet;
++ UCHAR Mic[16];
++ UCHAR digest[80];
++ PUCHAR pOutBuffer = NULL;
++ PNDIS_PACKET pNdisPacket;
++ UCHAR temp[64];
++ UCHAR DlsPTK[80];
++
++ DBGPRINT(RT_DEBUG_TRACE,("DLS - RTMPSendSTAKeyRequest() to %02x:%02x:%02x:%02x:%02x:%02x\n", pDA[0], pDA[1], pDA[2], pDA[3], pDA[4], pDA[5]));
++
++ pAd->Sequence ++;
++ MAKE_802_3_HEADER(Header802_3, pAd->CommonCfg.Bssid, pAd->CurrentAddress, EAPOL);
++
++ // Zero message body
++ NdisZeroMemory(&Packet, sizeof(Packet));
++ Packet.ProVer = EAPOL_VER;
++ Packet.ProType = EAPOLKey;
++ Packet.Body_Len[1] = sizeof(KEY_DESCRIPTER) - MAX_LEN_OF_RSNIE + 6 + MAC_ADDR_LEN; // data field contain KDE andPeer MAC address
++
++ // STAKey Message is as EAPOL-Key(1,1,0,0,G/0,0,0, MIC, 0,Peer MAC KDE)
++ if ((pAd->StaCfg.AuthMode == Ndis802_11AuthModeWPA) || (pAd->StaCfg.AuthMode == Ndis802_11AuthModeWPAPSK))
++ {
++ Packet.KeyDesc.Type = WPA1_KEY_DESC;
++ }
++ else if ((pAd->StaCfg.AuthMode == Ndis802_11AuthModeWPA2) || (pAd->StaCfg.AuthMode == Ndis802_11AuthModeWPA2PSK))
++ {
++ Packet.KeyDesc.Type = WPA2_KEY_DESC;
++ }
++
++ // Key descriptor version
++ Packet.KeyDesc.KeyInfo.KeyDescVer =
++ (((pAd->StaCfg.PairCipher == Ndis802_11Encryption3Enabled) || (pAd->StaCfg.GroupCipher == Ndis802_11Encryption3Enabled)) ? (DESC_TYPE_AES) : (DESC_TYPE_TKIP));
++
++ Packet.KeyDesc.KeyInfo.KeyMic = 1;
++ Packet.KeyDesc.KeyInfo.Secure = 1;
++ Packet.KeyDesc.KeyInfo.Request = 1;
++
++ Packet.KeyDesc.KeyDataLen[1] = 12;
++
++ // use our own OUI to distinguish proprietary with standard.
++ Packet.KeyDesc.KeyData[0] = 0xDD;
++ Packet.KeyDesc.KeyData[1] = 0x0A;
++ Packet.KeyDesc.KeyData[2] = 0x00;
++ Packet.KeyDesc.KeyData[3] = 0x0C;
++ Packet.KeyDesc.KeyData[4] = 0x43;
++ Packet.KeyDesc.KeyData[5] = 0x03;
++ NdisMoveMemory(&Packet.KeyDesc.KeyData[6], pDA, MAC_ADDR_LEN);
++
++ NdisMoveMemory(Packet.KeyDesc.ReplayCounter, pAd->StaCfg.DlsReplayCounter, LEN_KEY_DESC_REPLAY);
++
++ // Allocate buffer for transmitting message
++ NStatus = MlmeAllocateMemory(pAd, &pOutBuffer);
++ if (NStatus != NDIS_STATUS_SUCCESS)
++ return NStatus;
++
++ // Prepare EAPOL frame for MIC calculation
++ // Be careful, only EAPOL frame is counted for MIC calculation
++ MakeOutgoingFrame(pOutBuffer, &FrameLen,
++ Packet.Body_Len[1] + 4, &Packet,
++ END_OF_ARGS);
++
++ // use proprietary PTK
++ NdisZeroMemory(temp, 64);
++ NdisMoveMemory(temp, "IEEE802.11 WIRELESS ACCESS POINT", 32);
++ WpaCountPTK(pAd, temp, temp, pAd->CommonCfg.Bssid, temp, pAd->CurrentAddress, DlsPTK, LEN_PTK);
++
++ // calculate MIC
++ if (pAd->StaCfg.WepStatus == Ndis802_11Encryption3Enabled)
++ {
++ // AES
++ NdisZeroMemory(digest, sizeof(digest));
++ HMAC_SHA1(pOutBuffer, FrameLen, DlsPTK, LEN_EAP_MICK, digest);
++ NdisMoveMemory(Packet.KeyDesc.KeyMic, digest, LEN_KEY_DESC_MIC);
++ }
++ else
++ {
++ NdisZeroMemory(Mic, sizeof(Mic));
++ hmac_md5(DlsPTK, LEN_EAP_MICK, pOutBuffer, FrameLen, Mic);
++ NdisMoveMemory(Packet.KeyDesc.KeyMic, Mic, LEN_KEY_DESC_MIC);
++ }
++
++ MakeOutgoingFrame(pOutBuffer, &FrameLen,
++ sizeof(Header802_3), Header802_3,
++ Packet.Body_Len[1] + 4, &Packet,
++ END_OF_ARGS);
++
++ NStatus = RTMPAllocateNdisPacket(pAd, &pNdisPacket, NULL, 0, pOutBuffer, FrameLen);
++ if (NStatus == NDIS_STATUS_SUCCESS)
++ {
++ RTMP_SET_PACKET_WCID(pNdisPacket, BSSID_WCID);
++ STASendPacket(pAd, pNdisPacket);
++ RTMPDeQueuePacket(pAd, FALSE, NUM_OF_TX_RING, MAX_TX_PROCESS);
++ }
++
++ MlmeFreeMemory(pAd, pOutBuffer);
++
++ DBGPRINT(RT_DEBUG_TRACE, ("RTMPSendSTAKeyRequest- Send STAKey request (NStatus=%x, FrameLen=%ld)\n", NStatus, FrameLen));
++
++ return NStatus;
++}
++
++/*
++ ==========================================================================
++ Description:
++
++ IRQL = DISPATCH_LEVEL
++
++ ==========================================================================
++ */
++NDIS_STATUS RTMPSendSTAKeyHandShake(
++ IN PRTMP_ADAPTER pAd,
++ IN PUCHAR pDA)
++{
++ UCHAR Header802_3[14];
++ NDIS_STATUS NStatus;
++ ULONG FrameLen = 0;
++ EAPOL_PACKET Packet;
++ UCHAR Mic[16];
++ UCHAR digest[80];
++ PUCHAR pOutBuffer = NULL;
++ PNDIS_PACKET pNdisPacket;
++ UCHAR temp[64];
++ UCHAR DlsPTK[80]; // Due to dirver can not get PTK, use proprietary PTK
++
++ DBGPRINT(RT_DEBUG_TRACE,("DLS - RTMPSendSTAKeyHandShake() to %02x:%02x:%02x:%02x:%02x:%02x\n", pDA[0], pDA[1], pDA[2], pDA[3], pDA[4], pDA[5]));
++
++ pAd->Sequence ++;
++ MAKE_802_3_HEADER(Header802_3, pAd->CommonCfg.Bssid, pAd->CurrentAddress, EAPOL);
++
++ // Zero message body
++ NdisZeroMemory(&Packet, sizeof(Packet));
++ Packet.ProVer = EAPOL_VER;
++ Packet.ProType = EAPOLKey;
++ Packet.Body_Len[1] = sizeof(KEY_DESCRIPTER) - MAX_LEN_OF_RSNIE + 6 + MAC_ADDR_LEN; // data field contain KDE and Peer MAC address
++
++ // STAKey Message is as EAPOL-Key(1,1,0,0,G/0,0,0, MIC, 0,Peer MAC KDE)
++ if ((pAd->StaCfg.AuthMode == Ndis802_11AuthModeWPA) || (pAd->StaCfg.AuthMode == Ndis802_11AuthModeWPAPSK))
++ {
++ Packet.KeyDesc.Type = WPA1_KEY_DESC;
++ }
++ else if ((pAd->StaCfg.AuthMode == Ndis802_11AuthModeWPA2) || (pAd->StaCfg.AuthMode == Ndis802_11AuthModeWPA2PSK))
++ {
++ Packet.KeyDesc.Type = WPA2_KEY_DESC;
++ }
++
++ // Key descriptor version
++ Packet.KeyDesc.KeyInfo.KeyDescVer =
++ (((pAd->StaCfg.PairCipher == Ndis802_11Encryption3Enabled) || (pAd->StaCfg.GroupCipher == Ndis802_11Encryption3Enabled)) ? (DESC_TYPE_AES) : (DESC_TYPE_TKIP));
++
++ Packet.KeyDesc.KeyInfo.KeyMic = 1;
++ Packet.KeyDesc.KeyInfo.Secure = 1;
++
++ Packet.KeyDesc.KeyDataLen[1] = 12;
++
++ // use our own OUI to distinguish proprietary with standard.
++ Packet.KeyDesc.KeyData[0] = 0xDD;
++ Packet.KeyDesc.KeyData[1] = 0x0A;
++ Packet.KeyDesc.KeyData[2] = 0x00;
++ Packet.KeyDesc.KeyData[3] = 0x0C;
++ Packet.KeyDesc.KeyData[4] = 0x43;
++ Packet.KeyDesc.KeyData[5] = 0x03;
++ NdisMoveMemory(&Packet.KeyDesc.KeyData[6], pDA, MAC_ADDR_LEN);
++
++ NdisMoveMemory(Packet.KeyDesc.ReplayCounter, pAd->StaCfg.DlsReplayCounter, LEN_KEY_DESC_REPLAY);
++
++ // Allocate buffer for transmitting message
++ NStatus = MlmeAllocateMemory(pAd, &pOutBuffer);
++ if (NStatus != NDIS_STATUS_SUCCESS)
++ return NStatus;
++
++ // Prepare EAPOL frame for MIC calculation
++ // Be careful, only EAPOL frame is counted for MIC calculation
++ MakeOutgoingFrame(pOutBuffer, &FrameLen,
++ Packet.Body_Len[1] + 4, &Packet,
++ END_OF_ARGS);
++
++ // use proprietary PTK
++ NdisZeroMemory(temp, 64);
++ NdisMoveMemory(temp, "IEEE802.11 WIRELESS ACCESS POINT", 32);
++ WpaCountPTK(pAd, temp, temp, pAd->CommonCfg.Bssid, temp, pAd->CurrentAddress, DlsPTK, LEN_PTK);
++
++ // calculate MIC
++ if (pAd->StaCfg.WepStatus == Ndis802_11Encryption3Enabled)
++ {
++ // AES
++ NdisZeroMemory(digest, sizeof(digest));
++ HMAC_SHA1(pOutBuffer, FrameLen, DlsPTK, LEN_EAP_MICK, digest);
++ NdisMoveMemory(Packet.KeyDesc.KeyMic, digest, LEN_KEY_DESC_MIC);
++ }
++ else
++ {
++ NdisZeroMemory(Mic, sizeof(Mic));
++ hmac_md5(DlsPTK, LEN_EAP_MICK, pOutBuffer, FrameLen, Mic);
++ NdisMoveMemory(Packet.KeyDesc.KeyMic, Mic, LEN_KEY_DESC_MIC);
++ }
++
++ MakeOutgoingFrame(pOutBuffer, &FrameLen,
++ sizeof(Header802_3), Header802_3,
++ Packet.Body_Len[1] + 4, &Packet,
++ END_OF_ARGS);
++
++ NStatus = RTMPAllocateNdisPacket(pAd, &pNdisPacket, NULL, 0, pOutBuffer, FrameLen);
++ if (NStatus == NDIS_STATUS_SUCCESS)
++ {
++ RTMP_SET_PACKET_WCID(pNdisPacket, BSSID_WCID);
++ STASendPacket(pAd, pNdisPacket);
++ RTMPDeQueuePacket(pAd, FALSE, NUM_OF_TX_RING, MAX_TX_PROCESS);
++ }
++
++ MlmeFreeMemory(pAd, pOutBuffer);
++
++ DBGPRINT(RT_DEBUG_TRACE, ("RTMPSendSTAKeyHandShake- Send STAKey Message-2 (NStatus=%x, FrameLen=%ld)\n", NStatus, FrameLen));
++
++ return NStatus;
++}
++
++VOID DlsTimeoutAction(
++ IN PVOID SystemSpecific1,
++ IN PVOID FunctionContext,
++ IN PVOID SystemSpecific2,
++ IN PVOID SystemSpecific3)
++{
++ MLME_DLS_REQ_STRUCT MlmeDlsReq;
++ USHORT reason;
++ PRT_802_11_DLS pDLS = (PRT_802_11_DLS)FunctionContext;
++ PRTMP_ADAPTER pAd = pDLS->pAd;
++
++ DBGPRINT(RT_DEBUG_TRACE, ("DlsTimeout - Tear down DLS links (%02x:%02x:%02x:%02x:%02x:%02x)\n",
++ pDLS->MacAddr[0], pDLS->MacAddr[1], pDLS->MacAddr[2], pDLS->MacAddr[3], pDLS->MacAddr[4], pDLS->MacAddr[5]));
++
++ if ((pDLS) && (pDLS->Valid))
++ {
++ reason = REASON_QOS_REQUEST_TIMEOUT;
++ pDLS->Valid = FALSE;
++ pDLS->Status = DLS_NONE;
++ DlsParmFill(pAd, &MlmeDlsReq, pDLS, reason);
++ MlmeEnqueue(pAd, DLS_STATE_MACHINE, MT2_MLME_DLS_TEAR_DOWN, sizeof(MLME_DLS_REQ_STRUCT), &MlmeDlsReq);
++ RT28XX_MLME_HANDLER(pAd);
++ }
++}
++
++/*
++================================================================
++Description : because DLS and CLI share the same WCID table in ASIC.
++Mesh entry also insert to pAd->MacTab.content[]. Such is marked as ValidAsDls = TRUE.
++Also fills the pairwise key.
++Because front MAX_AID_BA entries have direct mapping to BAEntry, which is only used as CLI. So we insert Dls
++from index MAX_AID_BA.
++================================================================
++*/
++MAC_TABLE_ENTRY *MacTableInsertDlsEntry(
++ IN PRTMP_ADAPTER pAd,
++ IN PUCHAR pAddr,
++ IN UINT DlsEntryIdx)
++{
++ PMAC_TABLE_ENTRY pEntry = NULL;
++
++ DBGPRINT(RT_DEBUG_TRACE, ("====> MacTableInsertDlsEntry\n"));
++ // if FULL, return
++ if (pAd->MacTab.Size >= MAX_LEN_OF_MAC_TABLE)
++ return NULL;
++
++ do
++ {
++ if((pEntry = DlsEntryTableLookup(pAd, pAddr, TRUE)) != NULL)
++ break;
++
++ // allocate one MAC entry
++ pEntry = MacTableInsertEntry(pAd, pAddr, DlsEntryIdx + MIN_NET_DEVICE_FOR_DLS, TRUE);
++ if (pEntry)
++ {
++ pAd->StaCfg.DLSEntry[DlsEntryIdx].MacTabMatchWCID = pEntry->Aid;
++ pEntry->MatchDlsEntryIdx = DlsEntryIdx;
++ pEntry->AuthMode = pAd->StaCfg.AuthMode;
++ pEntry->WepStatus = pAd->StaCfg.WepStatus;
++ pEntry->PortSecured = WPA_802_1X_PORT_SECURED;
++
++ DBGPRINT(RT_DEBUG_TRACE, ("MacTableInsertDlsEntry - allocate entry #%d, Total= %d\n",pEntry->Aid, pAd->MacTab.Size));
++
++ // If legacy WEP is used, set pair-wise cipherAlg into WCID attribute table for this entry
++ if ((pEntry->ValidAsDls) && (pEntry->WepStatus == Ndis802_11WEPEnabled))
++ {
++ UCHAR KeyIdx = 0;
++ UCHAR CipherAlg = 0;
++
++ KeyIdx = pAd->StaCfg.DefaultKeyId;
++
++ CipherAlg = pAd->SharedKey[BSS0][KeyIdx].CipherAlg;
++
++ RTMPAddWcidAttributeEntry(pAd,
++ BSS0,
++ pAd->StaCfg.DefaultKeyId,
++ pAd->SharedKey[BSS0][pAd->StaCfg.DefaultKeyId].CipherAlg,
++ pEntry);
++ }
++
++ break;
++ }
++ } while(FALSE);
++
++ DBGPRINT(RT_DEBUG_TRACE, ("<==== MacTableInsertDlsEntry\n"));
++
++ return pEntry;
++}
++
++
++/*
++ ==========================================================================
++ Description:
++ Delete all Mesh Entry in pAd->MacTab
++ ==========================================================================
++ */
++BOOLEAN MacTableDeleteDlsEntry(
++ IN PRTMP_ADAPTER pAd,
++ IN USHORT wcid,
++ IN PUCHAR pAddr)
++{
++ DBGPRINT(RT_DEBUG_TRACE, ("====> MacTableDeleteDlsEntry\n"));
++
++ if (!VALID_WCID(wcid))
++ return FALSE;
++
++ MacTableDeleteEntry(pAd, wcid, pAddr);
++
++ DBGPRINT(RT_DEBUG_TRACE, ("<==== MacTableDeleteDlsEntry\n"));
++
++ return TRUE;
++}
++
++MAC_TABLE_ENTRY *DlsEntryTableLookup(
++ IN PRTMP_ADAPTER pAd,
++ IN PUCHAR pAddr,
++ IN BOOLEAN bResetIdelCount)
++{
++ ULONG HashIdx;
++ MAC_TABLE_ENTRY *pEntry = NULL;
++
++ RTMP_SEM_LOCK(&pAd->MacTabLock);
++ HashIdx = MAC_ADDR_HASH_INDEX(pAddr);
++ pEntry = pAd->MacTab.Hash[HashIdx];
++
++ while (pEntry)
++ {
++ if ((pEntry->ValidAsDls == TRUE)
++ && MAC_ADDR_EQUAL(pEntry->Addr, pAddr))
++ {
++ if(bResetIdelCount)
++ pEntry->NoDataIdleCount = 0;
++ break;
++ }
++ else
++ pEntry = pEntry->pNext;
++ }
++
++ RTMP_SEM_UNLOCK(&pAd->MacTabLock);
++ return pEntry;
++}
++
++MAC_TABLE_ENTRY *DlsEntryTableLookupByWcid(
++ IN PRTMP_ADAPTER pAd,
++ IN UCHAR wcid,
++ IN PUCHAR pAddr,
++ IN BOOLEAN bResetIdelCount)
++{
++ ULONG DLsIndex;
++ PMAC_TABLE_ENTRY pCurEntry = NULL;
++ PMAC_TABLE_ENTRY pEntry = NULL;
++
++ if (!VALID_WCID(wcid))
++ return NULL;
++
++ RTMP_SEM_LOCK(&pAd->MacTabLock);
++
++ do
++ {
++ pCurEntry = &pAd->MacTab.Content[wcid];
++
++ DLsIndex = 0xff;
++ if ((pCurEntry) && (pCurEntry->ValidAsDls== TRUE))
++ {
++ DLsIndex = pCurEntry->MatchDlsEntryIdx;
++ }
++
++ if (DLsIndex == 0xff)
++ break;
++
++ if (MAC_ADDR_EQUAL(pCurEntry->Addr, pAddr))
++ {
++ if(bResetIdelCount)
++ pCurEntry->NoDataIdleCount = 0;
++ pEntry = pCurEntry;
++ break;
++ }
++ } while(FALSE);
++
++ RTMP_SEM_UNLOCK(&pAd->MacTabLock);
++
++ return pEntry;
++}
++
++INT Set_DlsEntryInfo_Display_Proc(
++ IN PRTMP_ADAPTER pAd,
++ IN PUCHAR arg)
++{
++ INT i;
++
++ printk("\n%-19s%-8s\n", "MAC", "TIMEOUT\n");
++ for (i=0; i<MAX_NUM_OF_DLS_ENTRY; i++)
++ {
++ if ((pAd->StaCfg.DLSEntry[i].Valid) && (pAd->StaCfg.DLSEntry[i].Status == DLS_FINISH))
++ {
++ PMAC_TABLE_ENTRY pEntry = &pAd->MacTab.Content[pAd->StaCfg.DLSEntry[i].MacTabMatchWCID];
++
++ printk("%02x:%02x:%02x:%02x:%02x:%02x ",
++ pAd->StaCfg.DLSEntry[i].MacAddr[0], pAd->StaCfg.DLSEntry[i].MacAddr[1], pAd->StaCfg.DLSEntry[i].MacAddr[2],
++ pAd->StaCfg.DLSEntry[i].MacAddr[3], pAd->StaCfg.DLSEntry[i].MacAddr[4], pAd->StaCfg.DLSEntry[i].MacAddr[5]);
++ printk("%-8d\n", pAd->StaCfg.DLSEntry[i].TimeOut);
++
++ printk("\n");
++ printk("\n%-19s%-4s%-4s%-4s%-4s%-7s%-7s%-7s","MAC", "AID", "BSS", "PSM", "WMM", "RSSI0", "RSSI1", "RSSI2");
++#ifdef DOT11_N_SUPPORT
++ printk("%-8s%-10s%-6s%-6s%-6s%-6s", "MIMOPS", "PhMd", "BW", "MCS", "SGI", "STBC");
++#endif // DOT11_N_SUPPORT //
++ printk("\n%02X:%02X:%02X:%02X:%02X:%02X ",
++ pEntry->Addr[0], pEntry->Addr[1], pEntry->Addr[2],
++ pEntry->Addr[3], pEntry->Addr[4], pEntry->Addr[5]);
++ printk("%-4d", (int)pEntry->Aid);
++ printk("%-4d", (int)pEntry->apidx);
++ printk("%-4d", (int)pEntry->PsMode);
++ printk("%-4d", (int)CLIENT_STATUS_TEST_FLAG(pEntry, fCLIENT_STATUS_WMM_CAPABLE));
++ printk("%-7d", pEntry->RssiSample.AvgRssi0);
++ printk("%-7d", pEntry->RssiSample.AvgRssi1);
++ printk("%-7d", pEntry->RssiSample.AvgRssi2);
++#ifdef DOT11_N_SUPPORT
++ printk("%-8d", (int)pEntry->MmpsMode);
++ printk("%-10s", GetPhyMode(pEntry->HTPhyMode.field.MODE));
++ printk("%-6s", GetBW(pEntry->HTPhyMode.field.BW));
++ printk("%-6d", pEntry->HTPhyMode.field.MCS);
++ printk("%-6d", pEntry->HTPhyMode.field.ShortGI);
++ printk("%-6d", pEntry->HTPhyMode.field.STBC);
++#endif // DOT11_N_SUPPORT //
++ printk("%-10d, %d, %d%%\n", pEntry->DebugFIFOCount, pEntry->DebugTxCount,
++ (pEntry->DebugTxCount) ? ((pEntry->DebugTxCount-pEntry->DebugFIFOCount)*100/pEntry->DebugTxCount) : 0);
++ printk("\n");
++
++ }
++ }
++
++ return TRUE;
++}
++
++INT Set_DlsAddEntry_Proc(
++ IN PRTMP_ADAPTER pAd,
++ IN PUCHAR arg)
++{
++ UCHAR mac[MAC_ADDR_LEN];
++ USHORT Timeout;
++ char *token, sepValue[] = ":", DASH = '-';
++ INT i;
++ RT_802_11_DLS Dls;
++
++ if(strlen(arg) < 19) //Mac address acceptable format 01:02:03:04:05:06 length 17 plus the "-" and timeout value in decimal format.
++ return FALSE;
++
++ token = strchr(arg, DASH);
++ if ((token != NULL) && (strlen(token)>1))
++ {
++ Timeout = simple_strtol((token+1), 0, 10);
++
++ *token = '\0';
++ for (i = 0, token = rstrtok(arg, &sepValue[0]); token; token = rstrtok(NULL, &sepValue[0]), i++)
++ {
++ if((strlen(token) != 2) || (!isxdigit(*token)) || (!isxdigit(*(token+1))))
++ return FALSE;
++ AtoH(token, (PUCHAR)(&mac[i]), 1);
++ }
++ if(i != 6)
++ return FALSE;
++
++ printk("\n%02x:%02x:%02x:%02x:%02x:%02x-%d", mac[0], mac[1],
++ mac[2], mac[3], mac[4], mac[5], (int)Timeout);
++
++ NdisZeroMemory(&Dls, sizeof(RT_802_11_DLS));
++ Dls.TimeOut = Timeout;
++ COPY_MAC_ADDR(Dls.MacAddr, mac);
++ Dls.Valid = 1;
++
++ MlmeEnqueue(pAd,
++ MLME_CNTL_STATE_MACHINE,
++ RT_OID_802_11_SET_DLS_PARAM,
++ sizeof(RT_802_11_DLS),
++ &Dls);
++
++ return TRUE;
++ }
++
++ return FALSE;
++
++}
++
++INT Set_DlsTearDownEntry_Proc(
++ IN PRTMP_ADAPTER pAd,
++ IN PUCHAR arg)
++{
++ UCHAR macAddr[MAC_ADDR_LEN];
++ CHAR *value;
++ INT i;
++ RT_802_11_DLS Dls;
++
++ if(strlen(arg) != 17) //Mac address acceptable format 01:02:03:04:05:06 length 17
++ return FALSE;
++
++ for (i=0, value = rstrtok(arg,":"); value; value = rstrtok(NULL,":"))
++ {
++ if((strlen(value) != 2) || (!isxdigit(*value)) || (!isxdigit(*(value+1))) )
++ return FALSE; //Invalid
++
++ AtoH(value, &macAddr[i++], 2);
++ }
++
++ printk("\n%02x:%02x:%02x:%02x:%02x:%02x", macAddr[0], macAddr[1],
++ macAddr[2], macAddr[3], macAddr[4], macAddr[5]);
++
++ NdisZeroMemory(&Dls, sizeof(RT_802_11_DLS));
++ COPY_MAC_ADDR(Dls.MacAddr, macAddr);
++ Dls.Valid = 0;
++
++ MlmeEnqueue(pAd,
++ MLME_CNTL_STATE_MACHINE,
++ RT_OID_802_11_SET_DLS_PARAM,
++ sizeof(RT_802_11_DLS),
++ &Dls);
++
++ return TRUE;
++}
++
+--- /dev/null
++++ b/drivers/staging/rt2870/sta_ioctl.c
+@@ -0,0 +1,7068 @@
++/*
++ *************************************************************************
++ * Ralink Tech Inc.
++ * 5F., No.36, Taiyuan St., Jhubei City,
++ * Hsinchu County 302,
++ * Taiwan, R.O.C.
++ *
++ * (c) Copyright 2002-2007, Ralink Technology, Inc.
++ *
++ * This program is free software; you can redistribute it and/or modify *
++ * it under the terms of the GNU General Public License as published by *
++ * the Free Software Foundation; either version 2 of the License, or *
++ * (at your option) any later version. *
++ * *
++ * This program is distributed in the hope that it will be useful, *
++ * but WITHOUT ANY WARRANTY; without even the implied warranty of *
++ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the *
++ * GNU General Public License for more details. *
++ * *
++ * You should have received a copy of the GNU General Public License *
++ * along with this program; if not, write to the *
++ * Free Software Foundation, Inc., *
++ * 59 Temple Place - Suite 330, Boston, MA 02111-1307, USA. *
++ * *
++ *************************************************************************
++
++ Module Name:
++ sta_ioctl.c
++
++ Abstract:
++ IOCTL related subroutines
++
++ Revision History:
++ Who When What
++ -------- ---------- ----------------------------------------------
++ Rory Chen 01-03-2003 created
++ Rory Chen 02-14-2005 modify to support RT61
++*/
++
++#include "rt_config.h"
++
++#ifdef DBG
++extern ULONG RTDebugLevel;
++#endif
++
++#define NR_WEP_KEYS 4
++#define WEP_SMALL_KEY_LEN (40/8)
++#define WEP_LARGE_KEY_LEN (104/8)
++
++#define GROUP_KEY_NO 4
++
++#if LINUX_VERSION_CODE >= KERNEL_VERSION(2,6,27)
++#define IWE_STREAM_ADD_EVENT(_A, _B, _C, _D, _E) iwe_stream_add_event(_A, _B, _C, _D, _E)
++#define IWE_STREAM_ADD_POINT(_A, _B, _C, _D, _E) iwe_stream_add_point(_A, _B, _C, _D, _E)
++#define IWE_STREAM_ADD_VALUE(_A, _B, _C, _D, _E, _F) iwe_stream_add_value(_A, _B, _C, _D, _E, _F)
++#else
++#define IWE_STREAM_ADD_EVENT(_A, _B, _C, _D, _E) iwe_stream_add_event(_B, _C, _D, _E)
++#define IWE_STREAM_ADD_POINT(_A, _B, _C, _D, _E) iwe_stream_add_point(_B, _C, _D, _E)
++#define IWE_STREAM_ADD_VALUE(_A, _B, _C, _D, _E, _F) iwe_stream_add_value(_B, _C, _D, _E, _F)
++#endif
++
++extern UCHAR CipherWpa2Template[];
++extern UCHAR CipherWpaPskTkip[];
++extern UCHAR CipherWpaPskTkipLen;
++
++typedef struct PACKED _RT_VERSION_INFO{
++ UCHAR DriverVersionW;
++ UCHAR DriverVersionX;
++ UCHAR DriverVersionY;
++ UCHAR DriverVersionZ;
++ UINT DriverBuildYear;
++ UINT DriverBuildMonth;
++ UINT DriverBuildDay;
++} RT_VERSION_INFO, *PRT_VERSION_INFO;
++
++struct iw_priv_args privtab[] = {
++{ RTPRIV_IOCTL_SET,
++ IW_PRIV_TYPE_CHAR | 1024, 0,
++ "set"},
++
++{ RTPRIV_IOCTL_SHOW, 0, IW_PRIV_TYPE_CHAR | IW_PRIV_SIZE_MASK,
++ ""},
++{ RTPRIV_IOCTL_SHOW, IW_PRIV_TYPE_CHAR | 1024, IW_PRIV_TYPE_CHAR | IW_PRIV_SIZE_MASK,
++ ""},
++/* --- sub-ioctls definitions --- */
++ { SHOW_CONN_STATUS,
++ 0, IW_PRIV_TYPE_CHAR | IW_PRIV_SIZE_MASK, "connStatus" },
++ { SHOW_DRVIER_VERION,
++ 0, IW_PRIV_TYPE_CHAR | IW_PRIV_SIZE_MASK, "driverVer" },
++ { SHOW_BA_INFO,
++ 0, IW_PRIV_TYPE_CHAR | IW_PRIV_SIZE_MASK, "bainfo" },
++ { SHOW_DESC_INFO,
++ 0, IW_PRIV_TYPE_CHAR | IW_PRIV_SIZE_MASK, "descinfo" },
++ { RAIO_OFF,
++ 0, IW_PRIV_TYPE_CHAR | IW_PRIV_SIZE_MASK, "radio_off" },
++ { RAIO_ON,
++ 0, IW_PRIV_TYPE_CHAR | IW_PRIV_SIZE_MASK, "radio_on" },
++#ifdef QOS_DLS_SUPPORT
++ { SHOW_DLS_ENTRY_INFO,
++ 0, IW_PRIV_TYPE_CHAR | IW_PRIV_SIZE_MASK, "dlsentryinfo" },
++#endif // QOS_DLS_SUPPORT //
++ { SHOW_CFG_VALUE,
++ IW_PRIV_TYPE_CHAR | 1024, IW_PRIV_TYPE_CHAR | IW_PRIV_SIZE_MASK, "show" },
++ { SHOW_ADHOC_ENTRY_INFO,
++ 0, IW_PRIV_TYPE_CHAR | IW_PRIV_SIZE_MASK, "adhocEntry" },
++
++/* --- sub-ioctls relations --- */
++
++#ifdef DBG
++{ RTPRIV_IOCTL_BBP,
++ IW_PRIV_TYPE_CHAR | IW_PRIV_SIZE_MASK, IW_PRIV_TYPE_CHAR | IW_PRIV_SIZE_MASK,
++ "bbp"},
++{ RTPRIV_IOCTL_MAC,
++ IW_PRIV_TYPE_CHAR | 1024, IW_PRIV_TYPE_CHAR | 1024,
++ "mac"},
++{ RTPRIV_IOCTL_E2P,
++ IW_PRIV_TYPE_CHAR | 1024, IW_PRIV_TYPE_CHAR | 1024,
++ "e2p"},
++#endif /* DBG */
++
++{ RTPRIV_IOCTL_STATISTICS,
++ 0, IW_PRIV_TYPE_CHAR | IW_PRIV_SIZE_MASK,
++ "stat"},
++{ RTPRIV_IOCTL_GSITESURVEY,
++ 0, IW_PRIV_TYPE_CHAR | 1024,
++ "get_site_survey"},
++};
++
++INT Set_SSID_Proc(
++ IN PRTMP_ADAPTER pAdapter,
++ IN PUCHAR arg);
++
++#ifdef WMM_SUPPORT
++INT Set_WmmCapable_Proc(
++ IN PRTMP_ADAPTER pAd,
++ IN PUCHAR arg);
++#endif
++
++INT Set_NetworkType_Proc(
++ IN PRTMP_ADAPTER pAdapter,
++ IN PUCHAR arg);
++
++INT Set_AuthMode_Proc(
++ IN PRTMP_ADAPTER pAdapter,
++ IN PUCHAR arg);
++
++INT Set_EncrypType_Proc(
++ IN PRTMP_ADAPTER pAdapter,
++ IN PUCHAR arg);
++
++INT Set_DefaultKeyID_Proc(
++ IN PRTMP_ADAPTER pAdapter,
++ IN PUCHAR arg);
++
++INT Set_Key1_Proc(
++ IN PRTMP_ADAPTER pAdapter,
++ IN PUCHAR arg);
++
++INT Set_Key2_Proc(
++ IN PRTMP_ADAPTER pAdapter,
++ IN PUCHAR arg);
++
++INT Set_Key3_Proc(
++ IN PRTMP_ADAPTER pAdapter,
++ IN PUCHAR arg);
++
++INT Set_Key4_Proc(
++ IN PRTMP_ADAPTER pAdapter,
++ IN PUCHAR arg);
++
++INT Set_WPAPSK_Proc(
++ IN PRTMP_ADAPTER pAdapter,
++ IN PUCHAR arg);
++
++
++INT Set_PSMode_Proc(
++ IN PRTMP_ADAPTER pAdapter,
++ IN PUCHAR arg);
++
++#ifdef WPA_SUPPLICANT_SUPPORT
++INT Set_Wpa_Support(
++ IN PRTMP_ADAPTER pAd,
++ IN PUCHAR arg);
++#endif // WPA_SUPPLICANT_SUPPORT //
++
++#ifdef DBG
++VOID RTMPIoctlBBP(
++ IN PRTMP_ADAPTER pAdapter,
++ IN struct iwreq *wrq);
++
++VOID RTMPIoctlMAC(
++ IN PRTMP_ADAPTER pAdapter,
++ IN struct iwreq *wrq);
++
++VOID RTMPIoctlE2PROM(
++ IN PRTMP_ADAPTER pAdapter,
++ IN struct iwreq *wrq);
++#endif // DBG //
++
++
++NDIS_STATUS RTMPWPANoneAddKeyProc(
++ IN PRTMP_ADAPTER pAd,
++ IN PVOID pBuf);
++
++INT Set_FragTest_Proc(
++ IN PRTMP_ADAPTER pAdapter,
++ IN PUCHAR arg);
++
++#ifdef DOT11_N_SUPPORT
++INT Set_TGnWifiTest_Proc(
++ IN PRTMP_ADAPTER pAd,
++ IN PUCHAR arg);
++#endif // DOT11_N_SUPPORT //
++
++INT Set_LongRetryLimit_Proc(
++ IN PRTMP_ADAPTER pAdapter,
++ IN PUCHAR arg);
++
++INT Set_ShortRetryLimit_Proc(
++ IN PRTMP_ADAPTER pAdapter,
++ IN PUCHAR arg);
++
++#ifdef EXT_BUILD_CHANNEL_LIST
++INT Set_Ieee80211dClientMode_Proc(
++ IN PRTMP_ADAPTER pAdapter,
++ IN PUCHAR arg);
++#endif // EXT_BUILD_CHANNEL_LIST //
++
++#ifdef CARRIER_DETECTION_SUPPORT
++INT Set_CarrierDetect_Proc(
++ IN PRTMP_ADAPTER pAd,
++ IN PUCHAR arg);
++#endif // CARRIER_DETECTION_SUPPORT //
++
++INT Show_Adhoc_MacTable_Proc(
++ IN PRTMP_ADAPTER pAd,
++ IN PCHAR extra);
++
++static struct {
++ CHAR *name;
++ INT (*set_proc)(PRTMP_ADAPTER pAdapter, PUCHAR arg);
++} *PRTMP_PRIVATE_SET_PROC, RTMP_PRIVATE_SUPPORT_PROC[] = {
++ {"DriverVersion", Set_DriverVersion_Proc},
++ {"CountryRegion", Set_CountryRegion_Proc},
++ {"CountryRegionABand", Set_CountryRegionABand_Proc},
++ {"SSID", Set_SSID_Proc},
++ {"WirelessMode", Set_WirelessMode_Proc},
++ {"TxBurst", Set_TxBurst_Proc},
++ {"TxPreamble", Set_TxPreamble_Proc},
++ {"TxPower", Set_TxPower_Proc},
++ {"Channel", Set_Channel_Proc},
++ {"BGProtection", Set_BGProtection_Proc},
++ {"RTSThreshold", Set_RTSThreshold_Proc},
++ {"FragThreshold", Set_FragThreshold_Proc},
++#ifdef DOT11_N_SUPPORT
++ {"HtBw", Set_HtBw_Proc},
++ {"HtMcs", Set_HtMcs_Proc},
++ {"HtGi", Set_HtGi_Proc},
++ {"HtOpMode", Set_HtOpMode_Proc},
++ {"HtExtcha", Set_HtExtcha_Proc},
++ {"HtMpduDensity", Set_HtMpduDensity_Proc},
++ {"HtBaWinSize", Set_HtBaWinSize_Proc},
++ {"HtRdg", Set_HtRdg_Proc},
++ {"HtAmsdu", Set_HtAmsdu_Proc},
++ {"HtAutoBa", Set_HtAutoBa_Proc},
++ {"HtBaDecline", Set_BADecline_Proc},
++ {"HtProtect", Set_HtProtect_Proc},
++ {"HtMimoPs", Set_HtMimoPs_Proc},
++#endif // DOT11_N_SUPPORT //
++
++#ifdef AGGREGATION_SUPPORT
++ {"PktAggregate", Set_PktAggregate_Proc},
++#endif
++
++#ifdef WMM_SUPPORT
++ {"WmmCapable", Set_WmmCapable_Proc},
++#endif
++ {"IEEE80211H", Set_IEEE80211H_Proc},
++ {"NetworkType", Set_NetworkType_Proc},
++ {"AuthMode", Set_AuthMode_Proc},
++ {"EncrypType", Set_EncrypType_Proc},
++ {"DefaultKeyID", Set_DefaultKeyID_Proc},
++ {"Key1", Set_Key1_Proc},
++ {"Key2", Set_Key2_Proc},
++ {"Key3", Set_Key3_Proc},
++ {"Key4", Set_Key4_Proc},
++ {"WPAPSK", Set_WPAPSK_Proc},
++ {"ResetCounter", Set_ResetStatCounter_Proc},
++ {"PSMode", Set_PSMode_Proc},
++#ifdef DBG
++ {"Debug", Set_Debug_Proc},
++#endif
++
++#ifdef RALINK_ATE
++ {"ATE", Set_ATE_Proc},
++ {"ATEDA", Set_ATE_DA_Proc},
++ {"ATESA", Set_ATE_SA_Proc},
++ {"ATEBSSID", Set_ATE_BSSID_Proc},
++ {"ATECHANNEL", Set_ATE_CHANNEL_Proc},
++ {"ATETXPOW0", Set_ATE_TX_POWER0_Proc},
++ {"ATETXPOW1", Set_ATE_TX_POWER1_Proc},
++ {"ATETXANT", Set_ATE_TX_Antenna_Proc},
++ {"ATERXANT", Set_ATE_RX_Antenna_Proc},
++ {"ATETXFREQOFFSET", Set_ATE_TX_FREQOFFSET_Proc},
++ {"ATETXBW", Set_ATE_TX_BW_Proc},
++ {"ATETXLEN", Set_ATE_TX_LENGTH_Proc},
++ {"ATETXCNT", Set_ATE_TX_COUNT_Proc},
++ {"ATETXMCS", Set_ATE_TX_MCS_Proc},
++ {"ATETXMODE", Set_ATE_TX_MODE_Proc},
++ {"ATETXGI", Set_ATE_TX_GI_Proc},
++ {"ATERXFER", Set_ATE_RX_FER_Proc},
++ {"ATERRF", Set_ATE_Read_RF_Proc},
++ {"ATEWRF1", Set_ATE_Write_RF1_Proc},
++ {"ATEWRF2", Set_ATE_Write_RF2_Proc},
++ {"ATEWRF3", Set_ATE_Write_RF3_Proc},
++ {"ATEWRF4", Set_ATE_Write_RF4_Proc},
++ {"ATELDE2P", Set_ATE_Load_E2P_Proc},
++ {"ATERE2P", Set_ATE_Read_E2P_Proc},
++ {"ATESHOW", Set_ATE_Show_Proc},
++ {"ATEHELP", Set_ATE_Help_Proc},
++
++#ifdef RALINK_28xx_QA
++ {"TxStop", Set_TxStop_Proc},
++ {"RxStop", Set_RxStop_Proc},
++#endif // RALINK_28xx_QA //
++#endif // RALINK_ATE //
++
++#ifdef WPA_SUPPLICANT_SUPPORT
++ {"WpaSupport", Set_Wpa_Support},
++#endif // WPA_SUPPLICANT_SUPPORT //
++
++
++
++ {"FixedTxMode", Set_FixedTxMode_Proc},
++#ifdef CONFIG_APSTA_MIXED_SUPPORT
++ {"OpMode", Set_OpMode_Proc},
++#endif // CONFIG_APSTA_MIXED_SUPPORT //
++#ifdef DOT11_N_SUPPORT
++ {"TGnWifiTest", Set_TGnWifiTest_Proc},
++ {"ForceGF", Set_ForceGF_Proc},
++#endif // DOT11_N_SUPPORT //
++#ifdef QOS_DLS_SUPPORT
++ {"DlsAddEntry", Set_DlsAddEntry_Proc},
++ {"DlsTearDownEntry", Set_DlsTearDownEntry_Proc},
++#endif // QOS_DLS_SUPPORT //
++ {"LongRetry", Set_LongRetryLimit_Proc},
++ {"ShortRetry", Set_ShortRetryLimit_Proc},
++#ifdef EXT_BUILD_CHANNEL_LIST
++ {"11dClientMode", Set_Ieee80211dClientMode_Proc},
++#endif // EXT_BUILD_CHANNEL_LIST //
++#ifdef CARRIER_DETECTION_SUPPORT
++ {"CarrierDetect", Set_CarrierDetect_Proc},
++#endif // CARRIER_DETECTION_SUPPORT //
++
++ {NULL,}
++};
++
++
++VOID RTMPAddKey(
++ IN PRTMP_ADAPTER pAd,
++ IN PNDIS_802_11_KEY pKey)
++{
++ ULONG KeyIdx;
++ MAC_TABLE_ENTRY *pEntry;
++
++ DBGPRINT(RT_DEBUG_TRACE, ("RTMPAddKey ------>\n"));
++
++ if (pAd->StaCfg.AuthMode >= Ndis802_11AuthModeWPA)
++ {
++ if (pKey->KeyIndex & 0x80000000)
++ {
++ if (pAd->StaCfg.AuthMode == Ndis802_11AuthModeWPANone)
++ {
++ NdisZeroMemory(pAd->StaCfg.PMK, 32);
++ NdisMoveMemory(pAd->StaCfg.PMK, pKey->KeyMaterial, pKey->KeyLength);
++ goto end;
++ }
++ // Update PTK
++ NdisZeroMemory(&pAd->SharedKey[BSS0][0], sizeof(CIPHER_KEY));
++ pAd->SharedKey[BSS0][0].KeyLen = LEN_TKIP_EK;
++ NdisMoveMemory(pAd->SharedKey[BSS0][0].Key, pKey->KeyMaterial, LEN_TKIP_EK);
++#ifdef WPA_SUPPLICANT_SUPPORT
++ if (pAd->StaCfg.PairCipher == Ndis802_11Encryption2Enabled)
++ {
++ NdisMoveMemory(pAd->SharedKey[BSS0][0].RxMic, pKey->KeyMaterial + LEN_TKIP_EK, LEN_TKIP_TXMICK);
++ NdisMoveMemory(pAd->SharedKey[BSS0][0].TxMic, pKey->KeyMaterial + LEN_TKIP_EK + LEN_TKIP_TXMICK, LEN_TKIP_RXMICK);
++ }
++ else
++#endif // WPA_SUPPLICANT_SUPPORT //
++ {
++ NdisMoveMemory(pAd->SharedKey[BSS0][0].TxMic, pKey->KeyMaterial + LEN_TKIP_EK, LEN_TKIP_TXMICK);
++ NdisMoveMemory(pAd->SharedKey[BSS0][0].RxMic, pKey->KeyMaterial + LEN_TKIP_EK + LEN_TKIP_TXMICK, LEN_TKIP_RXMICK);
++ }
++
++ // Decide its ChiperAlg
++ if (pAd->StaCfg.PairCipher == Ndis802_11Encryption2Enabled)
++ pAd->SharedKey[BSS0][0].CipherAlg = CIPHER_TKIP;
++ else if (pAd->StaCfg.PairCipher == Ndis802_11Encryption3Enabled)
++ pAd->SharedKey[BSS0][0].CipherAlg = CIPHER_AES;
++ else
++ pAd->SharedKey[BSS0][0].CipherAlg = CIPHER_NONE;
++
++ // Update these related information to MAC_TABLE_ENTRY
++ pEntry = &pAd->MacTab.Content[BSSID_WCID];
++ NdisMoveMemory(pEntry->PairwiseKey.Key, pAd->SharedKey[BSS0][0].Key, LEN_TKIP_EK);
++ NdisMoveMemory(pEntry->PairwiseKey.RxMic, pAd->SharedKey[BSS0][0].RxMic, LEN_TKIP_RXMICK);
++ NdisMoveMemory(pEntry->PairwiseKey.TxMic, pAd->SharedKey[BSS0][0].TxMic, LEN_TKIP_TXMICK);
++ pEntry->PairwiseKey.CipherAlg = pAd->SharedKey[BSS0][0].CipherAlg;
++
++ // Update pairwise key information to ASIC Shared Key Table
++ AsicAddSharedKeyEntry(pAd,
++ BSS0,
++ 0,
++ pAd->SharedKey[BSS0][0].CipherAlg,
++ pAd->SharedKey[BSS0][0].Key,
++ pAd->SharedKey[BSS0][0].TxMic,
++ pAd->SharedKey[BSS0][0].RxMic);
++
++ // Update ASIC WCID attribute table and IVEIV table
++ RTMPAddWcidAttributeEntry(pAd,
++ BSS0,
++ 0,
++ pAd->SharedKey[BSS0][0].CipherAlg,
++ pEntry);
++
++ if (pAd->StaCfg.AuthMode >= Ndis802_11AuthModeWPA2)
++ {
++ // set 802.1x port control
++ //pAd->StaCfg.PortSecured = WPA_802_1X_PORT_SECURED;
++ STA_PORT_SECURED(pAd);
++
++ // Indicate Connected for GUI
++ pAd->IndicateMediaState = NdisMediaStateConnected;
++ }
++ }
++ else
++ {
++ // Update GTK
++ pAd->StaCfg.DefaultKeyId = (pKey->KeyIndex & 0xFF);
++ NdisZeroMemory(&pAd->SharedKey[BSS0][pAd->StaCfg.DefaultKeyId], sizeof(CIPHER_KEY));
++ pAd->SharedKey[BSS0][pAd->StaCfg.DefaultKeyId].KeyLen = LEN_TKIP_EK;
++ NdisMoveMemory(pAd->SharedKey[BSS0][pAd->StaCfg.DefaultKeyId].Key, pKey->KeyMaterial, LEN_TKIP_EK);
++#ifdef WPA_SUPPLICANT_SUPPORT
++ if (pAd->StaCfg.GroupCipher == Ndis802_11Encryption2Enabled)
++ {
++ NdisMoveMemory(pAd->SharedKey[BSS0][pAd->StaCfg.DefaultKeyId].RxMic, pKey->KeyMaterial + LEN_TKIP_EK, LEN_TKIP_TXMICK);
++ NdisMoveMemory(pAd->SharedKey[BSS0][pAd->StaCfg.DefaultKeyId].TxMic, pKey->KeyMaterial + LEN_TKIP_EK + LEN_TKIP_TXMICK, LEN_TKIP_RXMICK);
++ }
++ else
++#endif // WPA_SUPPLICANT_SUPPORT //
++ {
++ NdisMoveMemory(pAd->SharedKey[BSS0][pAd->StaCfg.DefaultKeyId].TxMic, pKey->KeyMaterial + LEN_TKIP_EK, LEN_TKIP_TXMICK);
++ NdisMoveMemory(pAd->SharedKey[BSS0][pAd->StaCfg.DefaultKeyId].RxMic, pKey->KeyMaterial + LEN_TKIP_EK + LEN_TKIP_TXMICK, LEN_TKIP_RXMICK);
++ }
++
++ // Update Shared Key CipherAlg
++ pAd->SharedKey[BSS0][pAd->StaCfg.DefaultKeyId].CipherAlg = CIPHER_NONE;
++ if (pAd->StaCfg.GroupCipher == Ndis802_11Encryption2Enabled)
++ pAd->SharedKey[BSS0][pAd->StaCfg.DefaultKeyId].CipherAlg = CIPHER_TKIP;
++ else if (pAd->StaCfg.GroupCipher == Ndis802_11Encryption3Enabled)
++ pAd->SharedKey[BSS0][pAd->StaCfg.DefaultKeyId].CipherAlg = CIPHER_AES;
++
++ // Update group key information to ASIC Shared Key Table
++ AsicAddSharedKeyEntry(pAd,
++ BSS0,
++ pAd->StaCfg.DefaultKeyId,
++ pAd->SharedKey[BSS0][pAd->StaCfg.DefaultKeyId].CipherAlg,
++ pAd->SharedKey[BSS0][pAd->StaCfg.DefaultKeyId].Key,
++ pAd->SharedKey[BSS0][pAd->StaCfg.DefaultKeyId].TxMic,
++ pAd->SharedKey[BSS0][pAd->StaCfg.DefaultKeyId].RxMic);
++
++ // Update ASIC WCID attribute table and IVEIV table
++ RTMPAddWcidAttributeEntry(pAd,
++ BSS0,
++ pAd->StaCfg.DefaultKeyId,
++ pAd->SharedKey[BSS0][pAd->StaCfg.DefaultKeyId].CipherAlg,
++ NULL);
++
++ // set 802.1x port control
++ //pAd->StaCfg.PortSecured = WPA_802_1X_PORT_SECURED;
++ STA_PORT_SECURED(pAd);
++
++ // Indicate Connected for GUI
++ pAd->IndicateMediaState = NdisMediaStateConnected;
++ }
++ }
++ else // dynamic WEP from wpa_supplicant
++ {
++ UCHAR CipherAlg;
++ PUCHAR Key;
++
++ if(pKey->KeyLength == 32)
++ goto end;
++
++ KeyIdx = pKey->KeyIndex & 0x0fffffff;
++
++ if (KeyIdx < 4)
++ {
++ // it is a default shared key, for Pairwise key setting
++ if (pKey->KeyIndex & 0x80000000)
++ {
++ pEntry = MacTableLookup(pAd, pKey->BSSID);
++
++ if (pEntry)
++ {
++ DBGPRINT(RT_DEBUG_TRACE, ("RTMPAddKey: Set Pair-wise Key\n"));
++
++ // set key material and key length
++ pEntry->PairwiseKey.KeyLen = (UCHAR)pKey->KeyLength;
++ NdisMoveMemory(pEntry->PairwiseKey.Key, &pKey->KeyMaterial, pKey->KeyLength);
++
++ // set Cipher type
++ if (pKey->KeyLength == 5)
++ pEntry->PairwiseKey.CipherAlg = CIPHER_WEP64;
++ else
++ pEntry->PairwiseKey.CipherAlg = CIPHER_WEP128;
++
++ // Add Pair-wise key to Asic
++ AsicAddPairwiseKeyEntry(
++ pAd,
++ pEntry->Addr,
++ (UCHAR)pEntry->Aid,
++ &pEntry->PairwiseKey);
++
++ // update WCID attribute table and IVEIV table for this entry
++ RTMPAddWcidAttributeEntry(
++ pAd,
++ BSS0,
++ KeyIdx, // The value may be not zero
++ pEntry->PairwiseKey.CipherAlg,
++ pEntry);
++
++ }
++ }
++ else
++ {
++ // Default key for tx (shared key)
++ pAd->StaCfg.DefaultKeyId = (UCHAR) KeyIdx;
++
++ // set key material and key length
++ pAd->SharedKey[BSS0][KeyIdx].KeyLen = (UCHAR) pKey->KeyLength;
++ NdisMoveMemory(pAd->SharedKey[BSS0][KeyIdx].Key, &pKey->KeyMaterial, pKey->KeyLength);
++
++ // Set Ciper type
++ if (pKey->KeyLength == 5)
++ pAd->SharedKey[BSS0][KeyIdx].CipherAlg = CIPHER_WEP64;
++ else
++ pAd->SharedKey[BSS0][KeyIdx].CipherAlg = CIPHER_WEP128;
++
++ CipherAlg = pAd->SharedKey[BSS0][KeyIdx].CipherAlg;
++ Key = pAd->SharedKey[BSS0][KeyIdx].Key;
++
++ // Set Group key material to Asic
++ AsicAddSharedKeyEntry(pAd, BSS0, KeyIdx, CipherAlg, Key, NULL, NULL);
++
++ // Update WCID attribute table and IVEIV table for this group key table
++ RTMPAddWcidAttributeEntry(pAd, BSS0, KeyIdx, CipherAlg, NULL);
++
++ }
++ }
++ }
++end:
++ return;
++}
++
++char * rtstrchr(const char * s, int c)
++{
++ for(; *s != (char) c; ++s)
++ if (*s == '\0')
++ return NULL;
++ return (char *) s;
++}
++
++/*
++This is required for LinEX2004/kernel2.6.7 to provide iwlist scanning function
++*/
++
++int
++rt_ioctl_giwname(struct net_device *dev,
++ struct iw_request_info *info,
++ char *name, char *extra)
++{
++// PRTMP_ADAPTER pAdapter = (PRTMP_ADAPTER) dev->priv;
++
++#ifdef RT2870
++ strncpy(name, "RT2870 Wireless", IFNAMSIZ);
++#endif // RT2870 //
++ return 0;
++}
++
++int rt_ioctl_siwfreq(struct net_device *dev,
++ struct iw_request_info *info,
++ struct iw_freq *freq, char *extra)
++{
++ PRTMP_ADAPTER pAdapter = (PRTMP_ADAPTER) dev->priv;
++ int chan = -1;
++
++ //check if the interface is down
++ if(!RTMP_TEST_FLAG(pAdapter, fRTMP_ADAPTER_INTERRUPT_IN_USE))
++ {
++ DBGPRINT(RT_DEBUG_TRACE, ("INFO::Network is down!\n"));
++ return -ENETDOWN;
++ }
++
++
++ if (freq->e > 1)
++ return -EINVAL;
++
++ if((freq->e == 0) && (freq->m <= 1000))
++ chan = freq->m; // Setting by channel number
++ else
++ MAP_KHZ_TO_CHANNEL_ID( (freq->m /100) , chan); // Setting by frequency - search the table , like 2.412G, 2.422G,
++
++ if (ChannelSanity(pAdapter, chan) == TRUE)
++ {
++ pAdapter->CommonCfg.Channel = chan;
++ DBGPRINT(RT_DEBUG_ERROR, ("==>rt_ioctl_siwfreq::SIOCSIWFREQ[cmd=0x%x] (Channel=%d)\n", SIOCSIWFREQ, pAdapter->CommonCfg.Channel));
++ }
++ else
++ return -EINVAL;
++
++ return 0;
++}
++int rt_ioctl_giwfreq(struct net_device *dev,
++ struct iw_request_info *info,
++ struct iw_freq *freq, char *extra)
++{
++ VIRTUAL_ADAPTER *pVirtualAd = NULL;
++ PRTMP_ADAPTER pAdapter = NULL;
++ UCHAR ch;
++ ULONG m;
++
++ if (dev->priv_flags == INT_MAIN)
++ {
++ pAdapter = dev->priv;
++ }
++ else
++ {
++ pVirtualAd = dev->priv;
++ if (pVirtualAd && pVirtualAd->RtmpDev)
++ pAdapter = pVirtualAd->RtmpDev->priv;
++ }
++
++ if (pAdapter == NULL)
++ {
++ /* if 1st open fail, pAd will be free;
++ So the net_dev->priv will be NULL in 2rd open */
++ return -ENETDOWN;
++ }
++
++ ch = pAdapter->CommonCfg.Channel;
++
++ DBGPRINT(RT_DEBUG_TRACE,("==>rt_ioctl_giwfreq %d\n", ch));
++
++ MAP_CHANNEL_ID_TO_KHZ(ch, m);
++ freq->m = m * 100;
++ freq->e = 1;
++ return 0;
++}
++
++int rt_ioctl_siwmode(struct net_device *dev,
++ struct iw_request_info *info,
++ __u32 *mode, char *extra)
++{
++ PRTMP_ADAPTER pAdapter = (PRTMP_ADAPTER) dev->priv;
++
++ //check if the interface is down
++ if(!RTMP_TEST_FLAG(pAdapter, fRTMP_ADAPTER_INTERRUPT_IN_USE))
++ {
++ DBGPRINT(RT_DEBUG_TRACE, ("INFO::Network is down!\n"));
++ return -ENETDOWN;
++ }
++
++ switch (*mode)
++ {
++ case IW_MODE_ADHOC:
++ Set_NetworkType_Proc(pAdapter, "Adhoc");
++ break;
++ case IW_MODE_INFRA:
++ Set_NetworkType_Proc(pAdapter, "Infra");
++ break;
++#if (LINUX_VERSION_CODE > KERNEL_VERSION(2,4,20))
++ case IW_MODE_MONITOR:
++ Set_NetworkType_Proc(pAdapter, "Monitor");
++ break;
++#endif
++ default:
++ DBGPRINT(RT_DEBUG_TRACE, ("===>rt_ioctl_siwmode::SIOCSIWMODE (unknown %d)\n", *mode));
++ return -EINVAL;
++ }
++
++ // Reset Ralink supplicant to not use, it will be set to start when UI set PMK key
++ pAdapter->StaCfg.WpaState = SS_NOTUSE;
++
++ return 0;
++}
++
++int rt_ioctl_giwmode(struct net_device *dev,
++ struct iw_request_info *info,
++ __u32 *mode, char *extra)
++{
++ PRTMP_ADAPTER pAdapter = NULL;
++ VIRTUAL_ADAPTER *pVirtualAd = NULL;
++
++ if (dev->priv_flags == INT_MAIN)
++ {
++ pAdapter = dev->priv;
++ }
++ else
++ {
++ pVirtualAd = dev->priv;
++ if (pVirtualAd && pVirtualAd->RtmpDev)
++ pAdapter = pVirtualAd->RtmpDev->priv;
++ }
++
++ if (pAdapter == NULL)
++ {
++ /* if 1st open fail, pAd will be free;
++ So the net_dev->priv will be NULL in 2rd open */
++ return -ENETDOWN;
++ }
++
++ if (ADHOC_ON(pAdapter))
++ *mode = IW_MODE_ADHOC;
++ else if (INFRA_ON(pAdapter))
++ *mode = IW_MODE_INFRA;
++#if (LINUX_VERSION_CODE > KERNEL_VERSION(2,4,20))
++ else if (MONITOR_ON(pAdapter))
++ {
++ *mode = IW_MODE_MONITOR;
++ }
++#endif
++ else
++ *mode = IW_MODE_AUTO;
++
++ DBGPRINT(RT_DEBUG_TRACE, ("==>rt_ioctl_giwmode(mode=%d)\n", *mode));
++ return 0;
++}
++
++int rt_ioctl_siwsens(struct net_device *dev,
++ struct iw_request_info *info,
++ char *name, char *extra)
++{
++ PRTMP_ADAPTER pAdapter = (PRTMP_ADAPTER) dev->priv;
++
++ //check if the interface is down
++ if(!RTMP_TEST_FLAG(pAdapter, fRTMP_ADAPTER_INTERRUPT_IN_USE))
++ {
++ DBGPRINT(RT_DEBUG_TRACE, ("INFO::Network is down!\n"));
++ return -ENETDOWN;
++ }
++
++ return 0;
++}
++
++int rt_ioctl_giwsens(struct net_device *dev,
++ struct iw_request_info *info,
++ char *name, char *extra)
++{
++ return 0;
++}
++
++int rt_ioctl_giwrange(struct net_device *dev,
++ struct iw_request_info *info,
++ struct iw_point *data, char *extra)
++{
++ PRTMP_ADAPTER pAdapter = NULL;
++ VIRTUAL_ADAPTER *pVirtualAd = NULL;
++ struct iw_range *range = (struct iw_range *) extra;
++ u16 val;
++ int i;
++
++ if (dev->priv_flags == INT_MAIN)
++ {
++ pAdapter = dev->priv;
++ }
++ else
++ {
++ pVirtualAd = dev->priv;
++ if (pVirtualAd && pVirtualAd->RtmpDev)
++ pAdapter = pVirtualAd->RtmpDev->priv;
++ }
++
++ if (pAdapter == NULL)
++ {
++ /* if 1st open fail, pAd will be free;
++ So the net_dev->priv will be NULL in 2rd open */
++ return -ENETDOWN;
++ }
++
++ DBGPRINT(RT_DEBUG_TRACE ,("===>rt_ioctl_giwrange\n"));
++ data->length = sizeof(struct iw_range);
++ memset(range, 0, sizeof(struct iw_range));
++
++ range->txpower_capa = IW_TXPOW_DBM;
++
++ if (INFRA_ON(pAdapter)||ADHOC_ON(pAdapter))
++ {
++ range->min_pmp = 1 * 1024;
++ range->max_pmp = 65535 * 1024;
++ range->min_pmt = 1 * 1024;
++ range->max_pmt = 1000 * 1024;
++ range->pmp_flags = IW_POWER_PERIOD;
++ range->pmt_flags = IW_POWER_TIMEOUT;
++ range->pm_capa = IW_POWER_PERIOD | IW_POWER_TIMEOUT |
++ IW_POWER_UNICAST_R | IW_POWER_ALL_R;
++ }
++
++ range->we_version_compiled = WIRELESS_EXT;
++ range->we_version_source = 14;
++
++ range->retry_capa = IW_RETRY_LIMIT;
++ range->retry_flags = IW_RETRY_LIMIT;
++ range->min_retry = 0;
++ range->max_retry = 255;
++
++ range->num_channels = pAdapter->ChannelListNum;
++
++ val = 0;
++ for (i = 1; i <= range->num_channels; i++)
++ {
++ u32 m;
++ range->freq[val].i = pAdapter->ChannelList[i-1].Channel;
++ MAP_CHANNEL_ID_TO_KHZ(pAdapter->ChannelList[i-1].Channel, m);
++ range->freq[val].m = m * 100; /* HZ */
++
++ range->freq[val].e = 1;
++ val++;
++ if (val == IW_MAX_FREQUENCIES)
++ break;
++ }
++ range->num_frequency = val;
++
++ range->max_qual.qual = 100; /* what is correct max? This was not
++ * documented exactly. At least
++ * 69 has been observed. */
++ range->max_qual.level = 0; /* dB */
++ range->max_qual.noise = 0; /* dB */
++
++ /* What would be suitable values for "average/typical" qual? */
++ range->avg_qual.qual = 20;
++ range->avg_qual.level = -60;
++ range->avg_qual.noise = -95;
++ range->sensitivity = 3;
++
++ range->max_encoding_tokens = NR_WEP_KEYS;
++ range->num_encoding_sizes = 2;
++ range->encoding_size[0] = 5;
++ range->encoding_size[1] = 13;
++
++ range->min_rts = 0;
++ range->max_rts = 2347;
++ range->min_frag = 256;
++ range->max_frag = 2346;
++
++#if WIRELESS_EXT > 17
++ /* IW_ENC_CAPA_* bit field */
++ range->enc_capa = IW_ENC_CAPA_WPA | IW_ENC_CAPA_WPA2 |
++ IW_ENC_CAPA_CIPHER_TKIP | IW_ENC_CAPA_CIPHER_CCMP;
++#endif
++
++ return 0;
++}
++
++int rt_ioctl_siwap(struct net_device *dev,
++ struct iw_request_info *info,
++ struct sockaddr *ap_addr, char *extra)
++{
++ PRTMP_ADAPTER pAdapter = (PRTMP_ADAPTER) dev->priv;
++ NDIS_802_11_MAC_ADDRESS Bssid;
++
++ //check if the interface is down
++ if(!RTMP_TEST_FLAG(pAdapter, fRTMP_ADAPTER_INTERRUPT_IN_USE))
++ {
++ DBGPRINT(RT_DEBUG_TRACE, ("INFO::Network is down!\n"));
++ return -ENETDOWN;
++ }
++
++ if (pAdapter->Mlme.CntlMachine.CurrState != CNTL_IDLE)
++ {
++ RT28XX_MLME_RESET_STATE_MACHINE(pAdapter);
++ DBGPRINT(RT_DEBUG_TRACE, ("!!! MLME busy, reset MLME state machine !!!\n"));
++ }
++
++ // tell CNTL state machine to call NdisMSetInformationComplete() after completing
++ // this request, because this request is initiated by NDIS.
++ pAdapter->MlmeAux.CurrReqIsFromNdis = FALSE;
++ // Prevent to connect AP again in STAMlmePeriodicExec
++ pAdapter->MlmeAux.AutoReconnectSsidLen= 32;
++
++ memset(Bssid, 0, MAC_ADDR_LEN);
++ memcpy(Bssid, ap_addr->sa_data, MAC_ADDR_LEN);
++ MlmeEnqueue(pAdapter,
++ MLME_CNTL_STATE_MACHINE,
++ OID_802_11_BSSID,
++ sizeof(NDIS_802_11_MAC_ADDRESS),
++ (VOID *)&Bssid);
++
++ DBGPRINT(RT_DEBUG_TRACE, ("IOCTL::SIOCSIWAP %02x:%02x:%02x:%02x:%02x:%02x\n",
++ Bssid[0], Bssid[1], Bssid[2], Bssid[3], Bssid[4], Bssid[5]));
++
++ return 0;
++}
++
++int rt_ioctl_giwap(struct net_device *dev,
++ struct iw_request_info *info,
++ struct sockaddr *ap_addr, char *extra)
++{
++ PRTMP_ADAPTER pAdapter = NULL;
++ VIRTUAL_ADAPTER *pVirtualAd = NULL;
++
++ if (dev->priv_flags == INT_MAIN)
++ {
++ pAdapter = dev->priv;
++ }
++ else
++ {
++ pVirtualAd = dev->priv;
++ if (pVirtualAd && pVirtualAd->RtmpDev)
++ pAdapter = pVirtualAd->RtmpDev->priv;
++ }
++
++ if (pAdapter == NULL)
++ {
++ /* if 1st open fail, pAd will be free;
++ So the net_dev->priv will be NULL in 2rd open */
++ return -ENETDOWN;
++ }
++
++ if (INFRA_ON(pAdapter) || ADHOC_ON(pAdapter))
++ {
++ ap_addr->sa_family = ARPHRD_ETHER;
++ memcpy(ap_addr->sa_data, &pAdapter->CommonCfg.Bssid, ETH_ALEN);
++ }
++#ifdef WPA_SUPPLICANT_SUPPORT
++ // Add for RT2870
++ else if (pAdapter->StaCfg.WpaSupplicantUP != WPA_SUPPLICANT_DISABLE)
++ {
++ ap_addr->sa_family = ARPHRD_ETHER;
++ memcpy(ap_addr->sa_data, &pAdapter->MlmeAux.Bssid, ETH_ALEN);
++ }
++#endif // WPA_SUPPLICANT_SUPPORT //
++ else
++ {
++ DBGPRINT(RT_DEBUG_TRACE, ("IOCTL::SIOCGIWAP(=EMPTY)\n"));
++ return -ENOTCONN;
++ }
++
++ return 0;
++}
++
++/*
++ * Units are in db above the noise floor. That means the
++ * rssi values reported in the tx/rx descriptors in the
++ * driver are the SNR expressed in db.
++ *
++ * If you assume that the noise floor is -95, which is an
++ * excellent assumption 99.5 % of the time, then you can
++ * derive the absolute signal level (i.e. -95 + rssi).
++ * There are some other slight factors to take into account
++ * depending on whether the rssi measurement is from 11b,
++ * 11g, or 11a. These differences are at most 2db and
++ * can be documented.
++ *
++ * NB: various calculations are based on the orinoco/wavelan
++ * drivers for compatibility
++ */
++static void set_quality(PRTMP_ADAPTER pAdapter,
++ struct iw_quality *iq,
++ signed char rssi)
++{
++ __u8 ChannelQuality;
++
++ // Normalize Rssi
++ if (rssi >= -50)
++ ChannelQuality = 100;
++ else if (rssi >= -80) // between -50 ~ -80dbm
++ ChannelQuality = (__u8)(24 + ((rssi + 80) * 26)/10);
++ else if (rssi >= -90) // between -80 ~ -90dbm
++ ChannelQuality = (__u8)((rssi + 90) * 26)/10;
++ else
++ ChannelQuality = 0;
++
++ iq->qual = (__u8)ChannelQuality;
++
++ iq->level = (__u8)(rssi);
++ iq->noise = (pAdapter->BbpWriteLatch[66] > pAdapter->BbpTuning.FalseCcaUpperThreshold) ? ((__u8)pAdapter->BbpTuning.FalseCcaUpperThreshold) : ((__u8) pAdapter->BbpWriteLatch[66]); // noise level (dBm)
++ iq->noise += 256 - 143;
++ iq->updated = pAdapter->iw_stats.qual.updated;
++}
++
++int rt_ioctl_iwaplist(struct net_device *dev,
++ struct iw_request_info *info,
++ struct iw_point *data, char *extra)
++{
++ PRTMP_ADAPTER pAdapter = (PRTMP_ADAPTER) dev->priv;
++
++ struct sockaddr addr[IW_MAX_AP];
++ struct iw_quality qual[IW_MAX_AP];
++ int i;
++
++ //check if the interface is down
++ if(!RTMP_TEST_FLAG(pAdapter, fRTMP_ADAPTER_INTERRUPT_IN_USE))
++ {
++ DBGPRINT(RT_DEBUG_TRACE, ("INFO::Network is down!\n"));
++ data->length = 0;
++ return 0;
++ //return -ENETDOWN;
++ }
++
++ for (i = 0; i <IW_MAX_AP ; i++)
++ {
++ if (i >= pAdapter->ScanTab.BssNr)
++ break;
++ addr[i].sa_family = ARPHRD_ETHER;
++ memcpy(addr[i].sa_data, &pAdapter->ScanTab.BssEntry[i].Bssid, MAC_ADDR_LEN);
++ set_quality(pAdapter, &qual[i], pAdapter->ScanTab.BssEntry[i].Rssi);
++ }
++ data->length = i;
++ memcpy(extra, &addr, i*sizeof(addr[0]));
++ data->flags = 1; /* signal quality present (sort of) */
++ memcpy(extra + i*sizeof(addr[0]), &qual, i*sizeof(qual[i]));
++
++ return 0;
++}
++
++#ifdef SIOCGIWSCAN
++int rt_ioctl_siwscan(struct net_device *dev,
++ struct iw_request_info *info,
++ struct iw_point *data, char *extra)
++{
++ PRTMP_ADAPTER pAdapter = (PRTMP_ADAPTER) dev->priv;
++
++ ULONG Now;
++ int Status = NDIS_STATUS_SUCCESS;
++
++ //check if the interface is down
++ if(!RTMP_TEST_FLAG(pAdapter, fRTMP_ADAPTER_INTERRUPT_IN_USE))
++ {
++ DBGPRINT(RT_DEBUG_TRACE, ("INFO::Network is down!\n"));
++ return -ENETDOWN;
++ }
++
++ if (MONITOR_ON(pAdapter))
++ {
++ DBGPRINT(RT_DEBUG_TRACE, ("!!! Driver is in Monitor Mode now !!!\n"));
++ return -EINVAL;
++ }
++
++
++#ifdef WPA_SUPPLICANT_SUPPORT
++ if (pAdapter->StaCfg.WpaSupplicantUP == WPA_SUPPLICANT_ENABLE)
++ {
++ pAdapter->StaCfg.WpaSupplicantScanCount++;
++ }
++#endif // WPA_SUPPLICANT_SUPPORT //
++
++ pAdapter->StaCfg.bScanReqIsFromWebUI = TRUE;
++ if (RTMP_TEST_FLAG(pAdapter, fRTMP_ADAPTER_BSS_SCAN_IN_PROGRESS))
++ return 0;
++ do{
++ Now = jiffies;
++
++#ifdef WPA_SUPPLICANT_SUPPORT
++ if ((pAdapter->StaCfg.WpaSupplicantUP == WPA_SUPPLICANT_ENABLE) &&
++ (pAdapter->StaCfg.WpaSupplicantScanCount > 3))
++ {
++ DBGPRINT(RT_DEBUG_TRACE, ("!!! WpaSupplicantScanCount > 3\n"));
++ Status = NDIS_STATUS_SUCCESS;
++ break;
++ }
++#endif // WPA_SUPPLICANT_SUPPORT //
++
++ if ((OPSTATUS_TEST_FLAG(pAdapter, fOP_STATUS_MEDIA_STATE_CONNECTED)) &&
++ ((pAdapter->StaCfg.AuthMode == Ndis802_11AuthModeWPA) ||
++ (pAdapter->StaCfg.AuthMode == Ndis802_11AuthModeWPAPSK)) &&
++ (pAdapter->StaCfg.PortSecured == WPA_802_1X_PORT_NOT_SECURED))
++ {
++ DBGPRINT(RT_DEBUG_TRACE, ("!!! Link UP, Port Not Secured! ignore this set::OID_802_11_BSSID_LIST_SCAN\n"));
++ Status = NDIS_STATUS_SUCCESS;
++ break;
++ }
++
++ if (pAdapter->Mlme.CntlMachine.CurrState != CNTL_IDLE)
++ {
++ RT28XX_MLME_RESET_STATE_MACHINE(pAdapter);
++ DBGPRINT(RT_DEBUG_TRACE, ("!!! MLME busy, reset MLME state machine !!!\n"));
++ }
++
++ // tell CNTL state machine to call NdisMSetInformationComplete() after completing
++ // this request, because this request is initiated by NDIS.
++ pAdapter->MlmeAux.CurrReqIsFromNdis = FALSE;
++ // Reset allowed scan retries
++ pAdapter->StaCfg.ScanCnt = 0;
++ pAdapter->StaCfg.LastScanTime = Now;
++
++ MlmeEnqueue(pAdapter,
++ MLME_CNTL_STATE_MACHINE,
++ OID_802_11_BSSID_LIST_SCAN,
++ 0,
++ NULL);
++
++ Status = NDIS_STATUS_SUCCESS;
++ RT28XX_MLME_HANDLER(pAdapter);
++ }while(0);
++ return 0;
++}
++
++int rt_ioctl_giwscan(struct net_device *dev,
++ struct iw_request_info *info,
++ struct iw_point *data, char *extra)
++{
++
++ PRTMP_ADAPTER pAdapter = (PRTMP_ADAPTER) dev->priv;
++ int i=0;
++ char *current_ev = extra, *previous_ev = extra;
++ char *end_buf;
++ char *current_val, custom[MAX_CUSTOM_LEN] = {0};
++#ifndef IWEVGENIE
++ char idx;
++#endif // IWEVGENIE //
++ struct iw_event iwe;
++
++ if (RTMP_TEST_FLAG(pAdapter, fRTMP_ADAPTER_BSS_SCAN_IN_PROGRESS))
++ {
++ /*
++ * Still scanning, indicate the caller should try again.
++ */
++ return -EAGAIN;
++ }
++
++
++#ifdef WPA_SUPPLICANT_SUPPORT
++ if (pAdapter->StaCfg.WpaSupplicantUP == WPA_SUPPLICANT_ENABLE)
++ {
++ pAdapter->StaCfg.WpaSupplicantScanCount = 0;
++ }
++#endif // WPA_SUPPLICANT_SUPPORT //
++
++ if (pAdapter->ScanTab.BssNr == 0)
++ {
++ data->length = 0;
++ return 0;
++ }
++
++#if WIRELESS_EXT >= 17
++ if (data->length > 0)
++ end_buf = extra + data->length;
++ else
++ end_buf = extra + IW_SCAN_MAX_DATA;
++#else
++ end_buf = extra + IW_SCAN_MAX_DATA;
++#endif
++
++ for (i = 0; i < pAdapter->ScanTab.BssNr; i++)
++ {
++ if (current_ev >= end_buf)
++ {
++#if WIRELESS_EXT >= 17
++ return -E2BIG;
++#else
++ break;
++#endif
++ }
++
++ //MAC address
++ //================================
++ memset(&iwe, 0, sizeof(iwe));
++ iwe.cmd = SIOCGIWAP;
++ iwe.u.ap_addr.sa_family = ARPHRD_ETHER;
++ memcpy(iwe.u.ap_addr.sa_data, &pAdapter->ScanTab.BssEntry[i].Bssid, ETH_ALEN);
++
++ previous_ev = current_ev;
++ current_ev = IWE_STREAM_ADD_EVENT(info, current_ev,end_buf, &iwe, IW_EV_ADDR_LEN);
++ if (current_ev == previous_ev)
++#if WIRELESS_EXT >= 17
++ return -E2BIG;
++#else
++ break;
++#endif
++
++ //ESSID
++ //================================
++ memset(&iwe, 0, sizeof(iwe));
++ iwe.cmd = SIOCGIWESSID;
++ iwe.u.data.length = pAdapter->ScanTab.BssEntry[i].SsidLen;
++ iwe.u.data.flags = 1;
++
++ previous_ev = current_ev;
++ current_ev = IWE_STREAM_ADD_POINT(info, current_ev,end_buf, &iwe, pAdapter->ScanTab.BssEntry[i].Ssid);
++ if (current_ev == previous_ev)
++#if WIRELESS_EXT >= 17
++ return -E2BIG;
++#else
++ break;
++#endif
++
++ //Network Type
++ //================================
++ memset(&iwe, 0, sizeof(iwe));
++ iwe.cmd = SIOCGIWMODE;
++ if (pAdapter->ScanTab.BssEntry[i].BssType == Ndis802_11IBSS)
++ {
++ iwe.u.mode = IW_MODE_ADHOC;
++ }
++ else if (pAdapter->ScanTab.BssEntry[i].BssType == Ndis802_11Infrastructure)
++ {
++ iwe.u.mode = IW_MODE_INFRA;
++ }
++ else
++ {
++ iwe.u.mode = IW_MODE_AUTO;
++ }
++ iwe.len = IW_EV_UINT_LEN;
++
++ previous_ev = current_ev;
++ current_ev = IWE_STREAM_ADD_EVENT(info, current_ev, end_buf, &iwe, IW_EV_UINT_LEN);
++ if (current_ev == previous_ev)
++#if WIRELESS_EXT >= 17
++ return -E2BIG;
++#else
++ break;
++#endif
++
++ //Channel and Frequency
++ //================================
++ memset(&iwe, 0, sizeof(iwe));
++ iwe.cmd = SIOCGIWFREQ;
++ if (INFRA_ON(pAdapter) || ADHOC_ON(pAdapter))
++ iwe.u.freq.m = pAdapter->ScanTab.BssEntry[i].Channel;
++ else
++ iwe.u.freq.m = pAdapter->ScanTab.BssEntry[i].Channel;
++ iwe.u.freq.e = 0;
++ iwe.u.freq.i = 0;
++
++ previous_ev = current_ev;
++ current_ev = IWE_STREAM_ADD_EVENT(info, current_ev,end_buf, &iwe, IW_EV_FREQ_LEN);
++ if (current_ev == previous_ev)
++#if WIRELESS_EXT >= 17
++ return -E2BIG;
++#else
++ break;
++#endif
++
++ //Add quality statistics
++ //================================
++ memset(&iwe, 0, sizeof(iwe));
++ iwe.cmd = IWEVQUAL;
++ iwe.u.qual.level = 0;
++ iwe.u.qual.noise = 0;
++ set_quality(pAdapter, &iwe.u.qual, pAdapter->ScanTab.BssEntry[i].Rssi);
++ current_ev = IWE_STREAM_ADD_EVENT(info, current_ev, end_buf, &iwe, IW_EV_QUAL_LEN);
++ if (current_ev == previous_ev)
++#if WIRELESS_EXT >= 17
++ return -E2BIG;
++#else
++ break;
++#endif
++
++ //Encyption key
++ //================================
++ memset(&iwe, 0, sizeof(iwe));
++ iwe.cmd = SIOCGIWENCODE;
++ if (CAP_IS_PRIVACY_ON (pAdapter->ScanTab.BssEntry[i].CapabilityInfo ))
++ iwe.u.data.flags =IW_ENCODE_ENABLED | IW_ENCODE_NOKEY;
++ else
++ iwe.u.data.flags = IW_ENCODE_DISABLED;
++
++ previous_ev = current_ev;
++ current_ev = IWE_STREAM_ADD_POINT(info, current_ev, end_buf,&iwe, (char *)pAdapter->SharedKey[BSS0][(iwe.u.data.flags & IW_ENCODE_INDEX)-1].Key);
++ if (current_ev == previous_ev)
++#if WIRELESS_EXT >= 17
++ return -E2BIG;
++#else
++ break;
++#endif
++
++ //Bit Rate
++ //================================
++ if (pAdapter->ScanTab.BssEntry[i].SupRateLen)
++ {
++ UCHAR tmpRate = pAdapter->ScanTab.BssEntry[i].SupRate[pAdapter->ScanTab.BssEntry[i].SupRateLen-1];
++ memset(&iwe, 0, sizeof(iwe));
++ iwe.cmd = SIOCGIWRATE;
++ current_val = current_ev + IW_EV_LCP_LEN;
++ if (tmpRate == 0x82)
++ iwe.u.bitrate.value = 1 * 1000000;
++ else if (tmpRate == 0x84)
++ iwe.u.bitrate.value = 2 * 1000000;
++ else if (tmpRate == 0x8B)
++ iwe.u.bitrate.value = 5.5 * 1000000;
++ else if (tmpRate == 0x96)
++ iwe.u.bitrate.value = 11 * 1000000;
++ else
++ iwe.u.bitrate.value = (tmpRate/2) * 1000000;
++
++ iwe.u.bitrate.disabled = 0;
++ current_val = IWE_STREAM_ADD_VALUE(info, current_ev,
++ current_val, end_buf, &iwe,
++ IW_EV_PARAM_LEN);
++
++ if((current_val-current_ev)>IW_EV_LCP_LEN)
++ current_ev = current_val;
++ else
++#if WIRELESS_EXT >= 17
++ return -E2BIG;
++#else
++ break;
++#endif
++ }
++
++#ifdef IWEVGENIE
++ //WPA IE
++ if (pAdapter->ScanTab.BssEntry[i].WpaIE.IELen > 0)
++ {
++ memset(&iwe, 0, sizeof(iwe));
++ memset(&custom[0], 0, MAX_CUSTOM_LEN);
++ memcpy(custom, &(pAdapter->ScanTab.BssEntry[i].WpaIE.IE[0]),
++ pAdapter->ScanTab.BssEntry[i].WpaIE.IELen);
++ iwe.cmd = IWEVGENIE;
++ iwe.u.data.length = pAdapter->ScanTab.BssEntry[i].WpaIE.IELen;
++ current_ev = IWE_STREAM_ADD_POINT(info, current_ev, end_buf, &iwe, custom);
++ if (current_ev == previous_ev)
++#if WIRELESS_EXT >= 17
++ return -E2BIG;
++#else
++ break;
++#endif
++ }
++
++ //WPA2 IE
++ if (pAdapter->ScanTab.BssEntry[i].RsnIE.IELen > 0)
++ {
++ memset(&iwe, 0, sizeof(iwe));
++ memset(&custom[0], 0, MAX_CUSTOM_LEN);
++ memcpy(custom, &(pAdapter->ScanTab.BssEntry[i].RsnIE.IE[0]),
++ pAdapter->ScanTab.BssEntry[i].RsnIE.IELen);
++ iwe.cmd = IWEVGENIE;
++ iwe.u.data.length = pAdapter->ScanTab.BssEntry[i].RsnIE.IELen;
++ current_ev = IWE_STREAM_ADD_POINT(info, current_ev, end_buf, &iwe, custom);
++ if (current_ev == previous_ev)
++#if WIRELESS_EXT >= 17
++ return -E2BIG;
++#else
++ break;
++#endif
++ }
++#else
++ //WPA IE
++ //================================
++ if (pAdapter->ScanTab.BssEntry[i].WpaIE.IELen > 0)
++ {
++ NdisZeroMemory(&iwe, sizeof(iwe));
++ memset(&custom[0], 0, MAX_CUSTOM_LEN);
++ iwe.cmd = IWEVCUSTOM;
++ iwe.u.data.length = (pAdapter->ScanTab.BssEntry[i].WpaIE.IELen * 2) + 7;
++ NdisMoveMemory(custom, "wpa_ie=", 7);
++ for (idx = 0; idx < pAdapter->ScanTab.BssEntry[i].WpaIE.IELen; idx++)
++ sprintf(custom, "%s%02x", custom, pAdapter->ScanTab.BssEntry[i].WpaIE.IE[idx]);
++ previous_ev = current_ev;
++ current_ev = IWE_STREAM_ADD_POINT(info, current_ev, end_buf, &iwe, custom);
++ if (current_ev == previous_ev)
++#if WIRELESS_EXT >= 17
++ return -E2BIG;
++#else
++ break;
++#endif
++ }
++
++ //WPA2 IE
++ if (pAdapter->ScanTab.BssEntry[i].RsnIE.IELen > 0)
++ {
++ NdisZeroMemory(&iwe, sizeof(iwe));
++ memset(&custom[0], 0, MAX_CUSTOM_LEN);
++ iwe.cmd = IWEVCUSTOM;
++ iwe.u.data.length = (pAdapter->ScanTab.BssEntry[i].RsnIE.IELen * 2) + 7;
++ NdisMoveMemory(custom, "rsn_ie=", 7);
++ for (idx = 0; idx < pAdapter->ScanTab.BssEntry[i].RsnIE.IELen; idx++)
++ sprintf(custom, "%s%02x", custom, pAdapter->ScanTab.BssEntry[i].RsnIE.IE[idx]);
++ previous_ev = current_ev;
++ current_ev = IWE_STREAM_ADD_POINT(info, current_ev, end_buf, &iwe, custom);
++ if (current_ev == previous_ev)
++#if WIRELESS_EXT >= 17
++ return -E2BIG;
++#else
++ break;
++#endif
++ }
++#endif // IWEVGENIE //
++ }
++
++ data->length = current_ev - extra;
++ pAdapter->StaCfg.bScanReqIsFromWebUI = FALSE;
++ DBGPRINT(RT_DEBUG_ERROR ,("===>rt_ioctl_giwscan. %d(%d) BSS returned, data->length = %d\n",i , pAdapter->ScanTab.BssNr, data->length));
++ return 0;
++}
++#endif
++
++int rt_ioctl_siwessid(struct net_device *dev,
++ struct iw_request_info *info,
++ struct iw_point *data, char *essid)
++{
++ PRTMP_ADAPTER pAdapter = (PRTMP_ADAPTER) dev->priv;
++
++ //check if the interface is down
++ if(!RTMP_TEST_FLAG(pAdapter, fRTMP_ADAPTER_INTERRUPT_IN_USE))
++ {
++ DBGPRINT(RT_DEBUG_TRACE, ("INFO::Network is down!\n"));
++ return -ENETDOWN;
++ }
++
++ if (data->flags)
++ {
++ PCHAR pSsidString = NULL;
++
++ // Includes null character.
++ if (data->length > (IW_ESSID_MAX_SIZE + 1))
++ return -E2BIG;
++
++ pSsidString = (CHAR *) kmalloc(MAX_LEN_OF_SSID+1, MEM_ALLOC_FLAG);
++ if (pSsidString)
++ {
++ NdisZeroMemory(pSsidString, MAX_LEN_OF_SSID+1);
++ NdisMoveMemory(pSsidString, essid, data->length);
++ if (Set_SSID_Proc(pAdapter, pSsidString) == FALSE)
++ return -EINVAL;
++ }
++ else
++ return -ENOMEM;
++ }
++ else
++ {
++ // ANY ssid
++ if (Set_SSID_Proc(pAdapter, "") == FALSE)
++ return -EINVAL;
++ }
++ return 0;
++}
++
++int rt_ioctl_giwessid(struct net_device *dev,
++ struct iw_request_info *info,
++ struct iw_point *data, char *essid)
++{
++ PRTMP_ADAPTER pAdapter = NULL;
++ VIRTUAL_ADAPTER *pVirtualAd = NULL;
++
++ if (dev->priv_flags == INT_MAIN)
++ {
++ pAdapter = dev->priv;
++ }
++ else
++ {
++ pVirtualAd = dev->priv;
++ if (pVirtualAd && pVirtualAd->RtmpDev)
++ pAdapter = pVirtualAd->RtmpDev->priv;
++ }
++
++ if (pAdapter == NULL)
++ {
++ /* if 1st open fail, pAd will be free;
++ So the net_dev->priv will be NULL in 2rd open */
++ return -ENETDOWN;
++ }
++
++ data->flags = 1;
++ if (MONITOR_ON(pAdapter))
++ {
++ data->length = 0;
++ return 0;
++ }
++
++ if (OPSTATUS_TEST_FLAG(pAdapter, fOP_STATUS_MEDIA_STATE_CONNECTED))
++ {
++ DBGPRINT(RT_DEBUG_TRACE ,("MediaState is connected\n"));
++ data->length = pAdapter->CommonCfg.SsidLen;
++ memcpy(essid, pAdapter->CommonCfg.Ssid, pAdapter->CommonCfg.SsidLen);
++ }
++#ifdef RT2870
++#ifdef WPA_SUPPLICANT_SUPPORT
++ // Add for RT2870
++ else if (pAdapter->StaCfg.WpaSupplicantUP != WPA_SUPPLICANT_DISABLE)
++ {
++ data->length = pAdapter->CommonCfg.SsidLen;
++ memcpy(essid, pAdapter->CommonCfg.Ssid, pAdapter->CommonCfg.SsidLen);
++ }
++#endif // WPA_SUPPLICANT_SUPPORT //
++#endif // RT2870 //
++ else
++ {//the ANY ssid was specified
++ data->length = 0;
++ DBGPRINT(RT_DEBUG_TRACE ,("MediaState is not connected, ess\n"));
++ }
++
++ return 0;
++
++}
++
++int rt_ioctl_siwnickn(struct net_device *dev,
++ struct iw_request_info *info,
++ struct iw_point *data, char *nickname)
++{
++ PRTMP_ADAPTER pAdapter = (PRTMP_ADAPTER) dev->priv;
++
++ //check if the interface is down
++ if(!RTMP_TEST_FLAG(pAdapter, fRTMP_ADAPTER_INTERRUPT_IN_USE))
++ {
++ DBGPRINT(RT_DEBUG_TRACE ,("INFO::Network is down!\n"));
++ return -ENETDOWN;
++ }
++
++ if (data->length > IW_ESSID_MAX_SIZE)
++ return -EINVAL;
++
++ memset(pAdapter->nickname, 0, IW_ESSID_MAX_SIZE + 1);
++ memcpy(pAdapter->nickname, nickname, data->length);
++
++
++ return 0;
++}
++
++int rt_ioctl_giwnickn(struct net_device *dev,
++ struct iw_request_info *info,
++ struct iw_point *data, char *nickname)
++{
++ PRTMP_ADAPTER pAdapter = NULL;
++ VIRTUAL_ADAPTER *pVirtualAd = NULL;
++
++ if (dev->priv_flags == INT_MAIN)
++ {
++ pAdapter = dev->priv;
++ }
++ else
++ {
++ pVirtualAd = dev->priv;
++ if (pVirtualAd && pVirtualAd->RtmpDev)
++ pAdapter = pVirtualAd->RtmpDev->priv;
++ }
++
++ if (pAdapter == NULL)
++ {
++ /* if 1st open fail, pAd will be free;
++ So the net_dev->priv will be NULL in 2rd open */
++ return -ENETDOWN;
++ }
++
++ if (data->length > strlen(pAdapter->nickname) + 1)
++ data->length = strlen(pAdapter->nickname) + 1;
++ if (data->length > 0) {
++ memcpy(nickname, pAdapter->nickname, data->length-1);
++ nickname[data->length-1] = '\0';
++ }
++ return 0;
++}
++
++int rt_ioctl_siwrts(struct net_device *dev,
++ struct iw_request_info *info,
++ struct iw_param *rts, char *extra)
++{
++ PRTMP_ADAPTER pAdapter = (PRTMP_ADAPTER) dev->priv;
++ u16 val;
++
++ //check if the interface is down
++ if(!RTMP_TEST_FLAG(pAdapter, fRTMP_ADAPTER_INTERRUPT_IN_USE))
++ {
++ DBGPRINT(RT_DEBUG_TRACE, ("INFO::Network is down!\n"));
++ return -ENETDOWN;
++ }
++
++ if (rts->disabled)
++ val = MAX_RTS_THRESHOLD;
++ else if (rts->value < 0 || rts->value > MAX_RTS_THRESHOLD)
++ return -EINVAL;
++ else if (rts->value == 0)
++ val = MAX_RTS_THRESHOLD;
++ else
++ val = rts->value;
++
++ if (val != pAdapter->CommonCfg.RtsThreshold)
++ pAdapter->CommonCfg.RtsThreshold = val;
++
++ return 0;
++}
++
++int rt_ioctl_giwrts(struct net_device *dev,
++ struct iw_request_info *info,
++ struct iw_param *rts, char *extra)
++{
++ PRTMP_ADAPTER pAdapter = NULL;
++ VIRTUAL_ADAPTER *pVirtualAd = NULL;
++
++ if (dev->priv_flags == INT_MAIN)
++ {
++ pAdapter = dev->priv;
++ }
++ else
++ {
++ pVirtualAd = dev->priv;
++ if (pVirtualAd && pVirtualAd->RtmpDev)
++ pAdapter = pVirtualAd->RtmpDev->priv;
++ }
++
++ if (pAdapter == NULL)
++ {
++ /* if 1st open fail, pAd will be free;
++ So the net_dev->priv will be NULL in 2rd open */
++ return -ENETDOWN;
++ }
++
++ //check if the interface is down
++ if(!RTMP_TEST_FLAG(pAdapter, fRTMP_ADAPTER_INTERRUPT_IN_USE))
++ {
++ DBGPRINT(RT_DEBUG_TRACE, ("INFO::Network is down!\n"));
++ return -ENETDOWN;
++ }
++
++ rts->value = pAdapter->CommonCfg.RtsThreshold;
++ rts->disabled = (rts->value == MAX_RTS_THRESHOLD);
++ rts->fixed = 1;
++
++ return 0;
++}
++
++int rt_ioctl_siwfrag(struct net_device *dev,
++ struct iw_request_info *info,
++ struct iw_param *frag, char *extra)
++{
++ PRTMP_ADAPTER pAdapter = (PRTMP_ADAPTER) dev->priv;
++ u16 val;
++
++ //check if the interface is down
++ if(!RTMP_TEST_FLAG(pAdapter, fRTMP_ADAPTER_INTERRUPT_IN_USE))
++ {
++ DBGPRINT(RT_DEBUG_TRACE, ("INFO::Network is down!\n"));
++ return -ENETDOWN;
++ }
++
++ if (frag->disabled)
++ val = MAX_FRAG_THRESHOLD;
++ else if (frag->value >= MIN_FRAG_THRESHOLD || frag->value <= MAX_FRAG_THRESHOLD)
++ val = __cpu_to_le16(frag->value & ~0x1); /* even numbers only */
++ else if (frag->value == 0)
++ val = MAX_FRAG_THRESHOLD;
++ else
++ return -EINVAL;
++
++ pAdapter->CommonCfg.FragmentThreshold = val;
++ return 0;
++}
++
++int rt_ioctl_giwfrag(struct net_device *dev,
++ struct iw_request_info *info,
++ struct iw_param *frag, char *extra)
++{
++ PRTMP_ADAPTER pAdapter = NULL;
++ VIRTUAL_ADAPTER *pVirtualAd = NULL;
++
++ if (dev->priv_flags == INT_MAIN)
++ {
++ pAdapter = dev->priv;
++ }
++ else
++ {
++ pVirtualAd = dev->priv;
++ if (pVirtualAd && pVirtualAd->RtmpDev)
++ pAdapter = pVirtualAd->RtmpDev->priv;
++ }
++
++ if (pAdapter == NULL)
++ {
++ /* if 1st open fail, pAd will be free;
++ So the net_dev->priv will be NULL in 2rd open */
++ return -ENETDOWN;
++ }
++
++ //check if the interface is down
++ if(!RTMP_TEST_FLAG(pAdapter, fRTMP_ADAPTER_INTERRUPT_IN_USE))
++ {
++ DBGPRINT(RT_DEBUG_TRACE, ("INFO::Network is down!\n"));
++ return -ENETDOWN;
++ }
++
++ frag->value = pAdapter->CommonCfg.FragmentThreshold;
++ frag->disabled = (frag->value == MAX_FRAG_THRESHOLD);
++ frag->fixed = 1;
++
++ return 0;
++}
++
++#define MAX_WEP_KEY_SIZE 13
++#define MIN_WEP_KEY_SIZE 5
++int rt_ioctl_siwencode(struct net_device *dev,
++ struct iw_request_info *info,
++ struct iw_point *erq, char *extra)
++{
++ PRTMP_ADAPTER pAdapter = (PRTMP_ADAPTER) dev->priv;
++
++ //check if the interface is down
++ if(!RTMP_TEST_FLAG(pAdapter, fRTMP_ADAPTER_INTERRUPT_IN_USE))
++ {
++ DBGPRINT(RT_DEBUG_TRACE, ("INFO::Network is down!\n"));
++ return -ENETDOWN;
++ }
++
++ if ((erq->length == 0) &&
++ (erq->flags & IW_ENCODE_DISABLED))
++ {
++ pAdapter->StaCfg.PairCipher = Ndis802_11WEPDisabled;
++ pAdapter->StaCfg.GroupCipher = Ndis802_11WEPDisabled;
++ pAdapter->StaCfg.WepStatus = Ndis802_11WEPDisabled;
++ pAdapter->StaCfg.OrigWepStatus = pAdapter->StaCfg.WepStatus;
++ pAdapter->StaCfg.AuthMode = Ndis802_11AuthModeOpen;
++ goto done;
++ }
++ else if ((erq->length == 0) &&
++ (erq->flags & IW_ENCODE_RESTRICTED || erq->flags & IW_ENCODE_OPEN))
++ {
++ //pAdapter->StaCfg.PortSecured = WPA_802_1X_PORT_SECURED;
++ STA_PORT_SECURED(pAdapter);
++ pAdapter->StaCfg.PairCipher = Ndis802_11WEPEnabled;
++ pAdapter->StaCfg.GroupCipher = Ndis802_11WEPEnabled;
++ pAdapter->StaCfg.WepStatus = Ndis802_11WEPEnabled;
++ pAdapter->StaCfg.OrigWepStatus = pAdapter->StaCfg.WepStatus;
++ if (erq->flags & IW_ENCODE_RESTRICTED)
++ pAdapter->StaCfg.AuthMode = Ndis802_11AuthModeShared;
++ else
++ pAdapter->StaCfg.AuthMode = Ndis802_11AuthModeOpen;
++ goto done;
++ }
++
++ if (erq->length > 0)
++ {
++ int keyIdx = (erq->flags & IW_ENCODE_INDEX) - 1;
++ /* Check the size of the key */
++ if (erq->length > MAX_WEP_KEY_SIZE) {
++ return -EINVAL;
++ }
++ /* Check key index */
++ if ((keyIdx < 0) || (keyIdx >= NR_WEP_KEYS))
++ {
++ DBGPRINT(RT_DEBUG_TRACE ,("==>rt_ioctl_siwencode::Wrong keyIdx=%d! Using default key instead (%d)\n",
++ keyIdx, pAdapter->StaCfg.DefaultKeyId));
++
++ //Using default key
++ keyIdx = pAdapter->StaCfg.DefaultKeyId;
++ }
++
++ NdisZeroMemory(pAdapter->SharedKey[BSS0][keyIdx].Key, 16);
++
++ if (erq->length == MAX_WEP_KEY_SIZE)
++ {
++ pAdapter->SharedKey[BSS0][keyIdx].KeyLen = MAX_WEP_KEY_SIZE;
++ pAdapter->SharedKey[BSS0][keyIdx].CipherAlg = CIPHER_WEP128;
++ }
++ else if (erq->length == MIN_WEP_KEY_SIZE)
++ {
++ pAdapter->SharedKey[BSS0][keyIdx].KeyLen = MIN_WEP_KEY_SIZE;
++ pAdapter->SharedKey[BSS0][keyIdx].CipherAlg = CIPHER_WEP64;
++ }
++ else
++ /* Disable the key */
++ pAdapter->SharedKey[BSS0][keyIdx].KeyLen = 0;
++
++ /* Check if the key is not marked as invalid */
++ if(!(erq->flags & IW_ENCODE_NOKEY)) {
++ /* Copy the key in the driver */
++ NdisMoveMemory(pAdapter->SharedKey[BSS0][keyIdx].Key, extra, erq->length);
++ }
++ }
++ else
++ {
++ /* Do we want to just set the transmit key index ? */
++ int index = (erq->flags & IW_ENCODE_INDEX) - 1;
++ if ((index >= 0) && (index < 4))
++ {
++ pAdapter->StaCfg.DefaultKeyId = index;
++ }
++ else
++ /* Don't complain if only change the mode */
++ if(!erq->flags & IW_ENCODE_MODE) {
++ return -EINVAL;
++ }
++ }
++
++done:
++ DBGPRINT(RT_DEBUG_TRACE ,("==>rt_ioctl_siwencode::erq->flags=%x\n",erq->flags));
++ DBGPRINT(RT_DEBUG_TRACE ,("==>rt_ioctl_siwencode::AuthMode=%x\n",pAdapter->StaCfg.AuthMode));
++ DBGPRINT(RT_DEBUG_TRACE ,("==>rt_ioctl_siwencode::DefaultKeyId=%x, KeyLen = %d\n",pAdapter->StaCfg.DefaultKeyId , pAdapter->SharedKey[BSS0][pAdapter->StaCfg.DefaultKeyId].KeyLen));
++ DBGPRINT(RT_DEBUG_TRACE ,("==>rt_ioctl_siwencode::WepStatus=%x\n",pAdapter->StaCfg.WepStatus));
++ return 0;
++}
++
++int
++rt_ioctl_giwencode(struct net_device *dev,
++ struct iw_request_info *info,
++ struct iw_point *erq, char *key)
++{
++ int kid;
++ PRTMP_ADAPTER pAdapter = NULL;
++ VIRTUAL_ADAPTER *pVirtualAd = NULL;
++
++ if (dev->priv_flags == INT_MAIN)
++ {
++ pAdapter = dev->priv;
++ }
++ else
++ {
++ pVirtualAd = dev->priv;
++ if (pVirtualAd && pVirtualAd->RtmpDev)
++ pAdapter = pVirtualAd->RtmpDev->priv;
++ }
++
++ if (pAdapter == NULL)
++ {
++ /* if 1st open fail, pAd will be free;
++ So the net_dev->priv will be NULL in 2rd open */
++ return -ENETDOWN;
++ }
++
++ //check if the interface is down
++ if(!RTMP_TEST_FLAG(pAdapter, fRTMP_ADAPTER_INTERRUPT_IN_USE))
++ {
++ DBGPRINT(RT_DEBUG_TRACE, ("INFO::Network is down!\n"));
++ return -ENETDOWN;
++ }
++
++ kid = erq->flags & IW_ENCODE_INDEX;
++ DBGPRINT(RT_DEBUG_TRACE, ("===>rt_ioctl_giwencode %d\n", erq->flags & IW_ENCODE_INDEX));
++
++ if (pAdapter->StaCfg.WepStatus == Ndis802_11WEPDisabled)
++ {
++ erq->length = 0;
++ erq->flags = IW_ENCODE_DISABLED;
++ }
++ else if ((kid > 0) && (kid <=4))
++ {
++ // copy wep key
++ erq->flags = kid ; /* NB: base 1 */
++ if (erq->length > pAdapter->SharedKey[BSS0][kid-1].KeyLen)
++ erq->length = pAdapter->SharedKey[BSS0][kid-1].KeyLen;
++ memcpy(key, pAdapter->SharedKey[BSS0][kid-1].Key, erq->length);
++ //if ((kid == pAdapter->PortCfg.DefaultKeyId))
++ //erq->flags |= IW_ENCODE_ENABLED; /* XXX */
++ if (pAdapter->StaCfg.AuthMode == Ndis802_11AuthModeShared)
++ erq->flags |= IW_ENCODE_RESTRICTED; /* XXX */
++ else
++ erq->flags |= IW_ENCODE_OPEN; /* XXX */
++
++ }
++ else if (kid == 0)
++ {
++ if (pAdapter->StaCfg.AuthMode == Ndis802_11AuthModeShared)
++ erq->flags |= IW_ENCODE_RESTRICTED; /* XXX */
++ else
++ erq->flags |= IW_ENCODE_OPEN; /* XXX */
++ erq->length = pAdapter->SharedKey[BSS0][pAdapter->StaCfg.DefaultKeyId].KeyLen;
++ memcpy(key, pAdapter->SharedKey[BSS0][pAdapter->StaCfg.DefaultKeyId].Key, erq->length);
++ // copy default key ID
++ if (pAdapter->StaCfg.AuthMode == Ndis802_11AuthModeShared)
++ erq->flags |= IW_ENCODE_RESTRICTED; /* XXX */
++ else
++ erq->flags |= IW_ENCODE_OPEN; /* XXX */
++ erq->flags = pAdapter->StaCfg.DefaultKeyId + 1; /* NB: base 1 */
++ erq->flags |= IW_ENCODE_ENABLED; /* XXX */
++ }
++
++ return 0;
++
++}
++
++static int
++rt_ioctl_setparam(struct net_device *dev, struct iw_request_info *info,
++ void *w, char *extra)
++{
++ VIRTUAL_ADAPTER *pVirtualAd = NULL;
++ PRTMP_ADAPTER pAdapter;
++ POS_COOKIE pObj;
++ char *this_char = extra;
++ char *value;
++ int Status=0;
++
++ if (dev->priv_flags == INT_MAIN)
++ {
++ pAdapter = dev->priv;
++ }
++ else
++ {
++ pVirtualAd = dev->priv;
++ pAdapter = pVirtualAd->RtmpDev->priv;
++ }
++ pObj = (POS_COOKIE) pAdapter->OS_Cookie;
++
++ if (pAdapter == NULL)
++ {
++ /* if 1st open fail, pAd will be free;
++ So the net_dev->priv will be NULL in 2rd open */
++ return -ENETDOWN;
++ }
++
++ {
++ pObj->ioctl_if_type = INT_MAIN;
++ pObj->ioctl_if = MAIN_MBSSID;
++ }
++
++ //check if the interface is down
++ if(!RTMP_TEST_FLAG(pAdapter, fRTMP_ADAPTER_INTERRUPT_IN_USE))
++ {
++ DBGPRINT(RT_DEBUG_TRACE, ("INFO::Network is down!\n"));
++ return -ENETDOWN;
++ }
++
++ if (!*this_char)
++ return -EINVAL;
++
++ if ((value = rtstrchr(this_char, '=')) != NULL)
++ *value++ = 0;
++
++ if (!value)
++ return -EINVAL;
++
++ // reject setting nothing besides ANY ssid(ssidLen=0)
++ if (!*value && (strcmp(this_char, "SSID") != 0))
++ return -EINVAL;
++
++ for (PRTMP_PRIVATE_SET_PROC = RTMP_PRIVATE_SUPPORT_PROC; PRTMP_PRIVATE_SET_PROC->name; PRTMP_PRIVATE_SET_PROC++)
++ {
++ if (strcmp(this_char, PRTMP_PRIVATE_SET_PROC->name) == 0)
++ {
++ if(!PRTMP_PRIVATE_SET_PROC->set_proc(pAdapter, value))
++ { //FALSE:Set private failed then return Invalid argument
++ Status = -EINVAL;
++ }
++ break; //Exit for loop.
++ }
++ }
++
++ if(PRTMP_PRIVATE_SET_PROC->name == NULL)
++ { //Not found argument
++ Status = -EINVAL;
++ DBGPRINT(RT_DEBUG_TRACE, ("===>rt_ioctl_setparam:: (iwpriv) Not Support Set Command [%s=%s]\n", this_char, value));
++ }
++
++ return Status;
++}
++
++
++static int
++rt_private_get_statistics(struct net_device *dev, struct iw_request_info *info,
++ struct iw_point *wrq, char *extra)
++{
++ INT Status = 0;
++ PRTMP_ADAPTER pAd = (PRTMP_ADAPTER) dev->priv;
++
++ if (extra == NULL)
++ {
++ wrq->length = 0;
++ return -EIO;
++ }
++
++ memset(extra, 0x00, IW_PRIV_SIZE_MASK);
++ sprintf(extra, "\n\n");
++
++#ifdef RALINK_ATE
++ if (ATE_ON(pAd))
++ {
++ sprintf(extra+strlen(extra), "Tx success = %ld\n", (ULONG)pAd->ate.TxDoneCount);
++ //sprintf(extra+strlen(extra), "Tx success without retry = %ld\n", (ULONG)pAd->ate.TxDoneCount);
++ }
++ else
++#endif // RALINK_ATE //
++ {
++ sprintf(extra+strlen(extra), "Tx success = %ld\n", (ULONG)pAd->WlanCounters.TransmittedFragmentCount.QuadPart);
++ sprintf(extra+strlen(extra), "Tx success without retry = %ld\n", (ULONG)pAd->WlanCounters.TransmittedFragmentCount.QuadPart - (ULONG)pAd->WlanCounters.RetryCount.QuadPart);
++ }
++ sprintf(extra+strlen(extra), "Tx success after retry = %ld\n", (ULONG)pAd->WlanCounters.RetryCount.QuadPart);
++ sprintf(extra+strlen(extra), "Tx fail to Rcv ACK after retry = %ld\n", (ULONG)pAd->WlanCounters.FailedCount.QuadPart);
++ sprintf(extra+strlen(extra), "RTS Success Rcv CTS = %ld\n", (ULONG)pAd->WlanCounters.RTSSuccessCount.QuadPart);
++ sprintf(extra+strlen(extra), "RTS Fail Rcv CTS = %ld\n", (ULONG)pAd->WlanCounters.RTSFailureCount.QuadPart);
++
++ sprintf(extra+strlen(extra), "Rx success = %ld\n", (ULONG)pAd->WlanCounters.ReceivedFragmentCount.QuadPart);
++ sprintf(extra+strlen(extra), "Rx with CRC = %ld\n", (ULONG)pAd->WlanCounters.FCSErrorCount.QuadPart);
++ sprintf(extra+strlen(extra), "Rx drop due to out of resource = %ld\n", (ULONG)pAd->Counters8023.RxNoBuffer);
++ sprintf(extra+strlen(extra), "Rx duplicate frame = %ld\n", (ULONG)pAd->WlanCounters.FrameDuplicateCount.QuadPart);
++
++ sprintf(extra+strlen(extra), "False CCA (one second) = %ld\n", (ULONG)pAd->RalinkCounters.OneSecFalseCCACnt);
++#ifdef RALINK_ATE
++ if (ATE_ON(pAd))
++ {
++ if (pAd->ate.RxAntennaSel == 0)
++ {
++ sprintf(extra+strlen(extra), "RSSI-A = %ld\n", (LONG)(pAd->ate.LastRssi0 - pAd->BbpRssiToDbmDelta));
++ sprintf(extra+strlen(extra), "RSSI-B (if available) = %ld\n", (LONG)(pAd->ate.LastRssi1 - pAd->BbpRssiToDbmDelta));
++ sprintf(extra+strlen(extra), "RSSI-C (if available) = %ld\n\n", (LONG)(pAd->ate.LastRssi2 - pAd->BbpRssiToDbmDelta));
++ }
++ else
++ {
++ sprintf(extra+strlen(extra), "RSSI = %ld\n", (LONG)(pAd->ate.LastRssi0 - pAd->BbpRssiToDbmDelta));
++ }
++ }
++ else
++#endif // RALINK_ATE //
++ {
++ sprintf(extra+strlen(extra), "RSSI-A = %ld\n", (LONG)(pAd->StaCfg.RssiSample.LastRssi0 - pAd->BbpRssiToDbmDelta));
++ sprintf(extra+strlen(extra), "RSSI-B (if available) = %ld\n", (LONG)(pAd->StaCfg.RssiSample.LastRssi1 - pAd->BbpRssiToDbmDelta));
++ sprintf(extra+strlen(extra), "RSSI-C (if available) = %ld\n\n", (LONG)(pAd->StaCfg.RssiSample.LastRssi2 - pAd->BbpRssiToDbmDelta));
++ }
++#ifdef WPA_SUPPLICANT_SUPPORT
++ sprintf(extra+strlen(extra), "WpaSupplicantUP = %d\n\n", pAd->StaCfg.WpaSupplicantUP);
++#endif // WPA_SUPPLICANT_SUPPORT //
++
++
++ wrq->length = strlen(extra) + 1; // 1: size of '\0'
++ DBGPRINT(RT_DEBUG_TRACE, ("<== rt_private_get_statistics, wrq->length = %d\n", wrq->length));
++
++ return Status;
++}
++
++#ifdef DOT11_N_SUPPORT
++void getBaInfo(
++ IN PRTMP_ADAPTER pAd,
++ IN PUCHAR pOutBuf)
++{
++ INT i, j;
++ BA_ORI_ENTRY *pOriBAEntry;
++ BA_REC_ENTRY *pRecBAEntry;
++
++ for (i=0; i<MAX_LEN_OF_MAC_TABLE; i++)
++ {
++ PMAC_TABLE_ENTRY pEntry = &pAd->MacTab.Content[i];
++ if (((pEntry->ValidAsCLI || pEntry->ValidAsApCli) && (pEntry->Sst == SST_ASSOC))
++ || (pEntry->ValidAsWDS) || (pEntry->ValidAsMesh))
++ {
++ sprintf(pOutBuf, "%s\n%02X:%02X:%02X:%02X:%02X:%02X (Aid = %d) (AP) -\n",
++ pOutBuf,
++ pEntry->Addr[0], pEntry->Addr[1], pEntry->Addr[2],
++ pEntry->Addr[3], pEntry->Addr[4], pEntry->Addr[5], pEntry->Aid);
++
++ sprintf(pOutBuf, "%s[Recipient]\n", pOutBuf);
++ for (j=0; j < NUM_OF_TID; j++)
++ {
++ if (pEntry->BARecWcidArray[j] != 0)
++ {
++ pRecBAEntry =&pAd->BATable.BARecEntry[pEntry->BARecWcidArray[j]];
++ sprintf(pOutBuf, "%sTID=%d, BAWinSize=%d, LastIndSeq=%d, ReorderingPkts=%d\n", pOutBuf, j, pRecBAEntry->BAWinSize, pRecBAEntry->LastIndSeq, pRecBAEntry->list.qlen);
++ }
++ }
++ sprintf(pOutBuf, "%s\n", pOutBuf);
++
++ sprintf(pOutBuf, "%s[Originator]\n", pOutBuf);
++ for (j=0; j < NUM_OF_TID; j++)
++ {
++ if (pEntry->BAOriWcidArray[j] != 0)
++ {
++ pOriBAEntry =&pAd->BATable.BAOriEntry[pEntry->BAOriWcidArray[j]];
++ sprintf(pOutBuf, "%sTID=%d, BAWinSize=%d, StartSeq=%d, CurTxSeq=%d\n", pOutBuf, j, pOriBAEntry->BAWinSize, pOriBAEntry->Sequence, pEntry->TxSeq[j]);
++ }
++ }
++ sprintf(pOutBuf, "%s\n\n", pOutBuf);
++ }
++ if (strlen(pOutBuf) > (IW_PRIV_SIZE_MASK - 30))
++ break;
++ }
++
++ return;
++}
++#endif // DOT11_N_SUPPORT //
++
++static int
++rt_private_show(struct net_device *dev, struct iw_request_info *info,
++ struct iw_point *wrq, char *extra)
++{
++ INT Status = 0;
++ VIRTUAL_ADAPTER *pVirtualAd = NULL;
++ PRTMP_ADAPTER pAd;
++ POS_COOKIE pObj;
++ u32 subcmd = wrq->flags;
++
++ if (dev->priv_flags == INT_MAIN)
++ pAd = dev->priv;
++ else
++ {
++ pVirtualAd = dev->priv;
++ pAd = pVirtualAd->RtmpDev->priv;
++ }
++ pObj = (POS_COOKIE) pAd->OS_Cookie;
++
++ if (pAd == NULL)
++ {
++ /* if 1st open fail, pAd will be free;
++ So the net_dev->priv will be NULL in 2rd open */
++ return -ENETDOWN;
++ }
++
++ if (extra == NULL)
++ {
++ wrq->length = 0;
++ return -EIO;
++ }
++ memset(extra, 0x00, IW_PRIV_SIZE_MASK);
++
++ {
++ pObj->ioctl_if_type = INT_MAIN;
++ pObj->ioctl_if = MAIN_MBSSID;
++ }
++
++ switch(subcmd)
++ {
++
++ case SHOW_CONN_STATUS:
++ if (MONITOR_ON(pAd))
++ {
++#ifdef DOT11_N_SUPPORT
++ if (pAd->CommonCfg.PhyMode >= PHY_11ABGN_MIXED &&
++ pAd->CommonCfg.RegTransmitSetting.field.BW)
++ sprintf(extra, "Monitor Mode(CentralChannel %d)\n", pAd->CommonCfg.CentralChannel);
++ else
++#endif // DOT11_N_SUPPORT //
++ sprintf(extra, "Monitor Mode(Channel %d)\n", pAd->CommonCfg.Channel);
++ }
++ else
++ {
++ if (pAd->IndicateMediaState == NdisMediaStateConnected)
++ {
++ if (INFRA_ON(pAd))
++ {
++ sprintf(extra, "Connected(AP: %s[%02X:%02X:%02X:%02X:%02X:%02X])\n",
++ pAd->CommonCfg.Ssid,
++ pAd->CommonCfg.Bssid[0],
++ pAd->CommonCfg.Bssid[1],
++ pAd->CommonCfg.Bssid[2],
++ pAd->CommonCfg.Bssid[3],
++ pAd->CommonCfg.Bssid[4],
++ pAd->CommonCfg.Bssid[5]);
++ DBGPRINT(RT_DEBUG_TRACE ,("Ssid=%s ,Ssidlen = %d\n",pAd->CommonCfg.Ssid, pAd->CommonCfg.SsidLen));
++ }
++ else if (ADHOC_ON(pAd))
++ sprintf(extra, "Connected\n");
++ }
++ else
++ {
++ sprintf(extra, "Disconnected\n");
++ DBGPRINT(RT_DEBUG_TRACE ,("ConnStatus is not connected\n"));
++ }
++ }
++ wrq->length = strlen(extra) + 1; // 1: size of '\0'
++ break;
++ case SHOW_DRVIER_VERION:
++ sprintf(extra, "Driver version-%s, %s %s\n", STA_DRIVER_VERSION, __DATE__, __TIME__ );
++ wrq->length = strlen(extra) + 1; // 1: size of '\0'
++ break;
++#ifdef DOT11_N_SUPPORT
++ case SHOW_BA_INFO:
++ getBaInfo(pAd, extra);
++ wrq->length = strlen(extra) + 1; // 1: size of '\0'
++ break;
++#endif // DOT11_N_SUPPORT //
++ case SHOW_DESC_INFO:
++ {
++ Show_DescInfo_Proc(pAd, NULL);
++ wrq->length = 0; // 1: size of '\0'
++ }
++ break;
++ case RAIO_OFF:
++ if (RTMP_TEST_FLAG(pAd, fRTMP_ADAPTER_BSS_SCAN_IN_PROGRESS))
++ {
++ sprintf(extra, "Scanning\n");
++ wrq->length = strlen(extra) + 1; // 1: size of '\0'
++ break;
++ }
++ pAd->StaCfg.bSwRadio = FALSE;
++ if (pAd->StaCfg.bRadio != (pAd->StaCfg.bHwRadio && pAd->StaCfg.bSwRadio))
++ {
++ pAd->StaCfg.bRadio = (pAd->StaCfg.bHwRadio && pAd->StaCfg.bSwRadio);
++ if (pAd->StaCfg.bRadio == FALSE)
++ {
++ MlmeRadioOff(pAd);
++ // Update extra information
++ pAd->ExtraInfo = SW_RADIO_OFF;
++ }
++ }
++ sprintf(extra, "Radio Off\n");
++ wrq->length = strlen(extra) + 1; // 1: size of '\0'
++ break;
++ case RAIO_ON:
++ if (RTMP_TEST_FLAG(pAd, fRTMP_ADAPTER_BSS_SCAN_IN_PROGRESS))
++ {
++ sprintf(extra, "Scanning\n");
++ wrq->length = strlen(extra) + 1; // 1: size of '\0'
++ break;
++ }
++ pAd->StaCfg.bSwRadio = TRUE;
++ //if (pAd->StaCfg.bRadio != (pAd->StaCfg.bHwRadio && pAd->StaCfg.bSwRadio))
++ {
++ pAd->StaCfg.bRadio = (pAd->StaCfg.bHwRadio && pAd->StaCfg.bSwRadio);
++ if (pAd->StaCfg.bRadio == TRUE)
++ {
++ MlmeRadioOn(pAd);
++ // Update extra information
++ pAd->ExtraInfo = EXTRA_INFO_CLEAR;
++ }
++ }
++ sprintf(extra, "Radio On\n");
++ wrq->length = strlen(extra) + 1; // 1: size of '\0'
++ break;
++
++
++#ifdef QOS_DLS_SUPPORT
++ case SHOW_DLS_ENTRY_INFO:
++ {
++ Set_DlsEntryInfo_Display_Proc(pAd, NULL);
++ wrq->length = 0; // 1: size of '\0'
++ }
++ break;
++#endif // QOS_DLS_SUPPORT //
++
++ case SHOW_CFG_VALUE:
++ {
++ Status = RTMPShowCfgValue(pAd, wrq->pointer, extra);
++ if (Status == 0)
++ wrq->length = strlen(extra) + 1; // 1: size of '\0'
++ }
++ break;
++ case SHOW_ADHOC_ENTRY_INFO:
++ Show_Adhoc_MacTable_Proc(pAd, extra);
++ wrq->length = strlen(extra) + 1; // 1: size of '\0'
++ break;
++ default:
++ DBGPRINT(RT_DEBUG_TRACE, ("%s - unknow subcmd = %d\n", __FUNCTION__, subcmd));
++ break;
++ }
++
++ return Status;
++}
++
++#ifdef SIOCSIWMLME
++int rt_ioctl_siwmlme(struct net_device *dev,
++ struct iw_request_info *info,
++ union iwreq_data *wrqu,
++ char *extra)
++{
++ PRTMP_ADAPTER pAd = (PRTMP_ADAPTER) dev->priv;
++ struct iw_mlme *pMlme = (struct iw_mlme *)wrqu->data.pointer;
++ MLME_QUEUE_ELEM MsgElem;
++ MLME_DISASSOC_REQ_STRUCT DisAssocReq;
++ MLME_DEAUTH_REQ_STRUCT DeAuthReq;
++
++ DBGPRINT(RT_DEBUG_TRACE, ("====> %s\n", __FUNCTION__));
++
++ if (pMlme == NULL)
++ return -EINVAL;
++
++ switch(pMlme->cmd)
++ {
++#ifdef IW_MLME_DEAUTH
++ case IW_MLME_DEAUTH:
++ DBGPRINT(RT_DEBUG_TRACE, ("====> %s - IW_MLME_DEAUTH\n", __FUNCTION__));
++ COPY_MAC_ADDR(DeAuthReq.Addr, pAd->CommonCfg.Bssid);
++ DeAuthReq.Reason = pMlme->reason_code;
++ MsgElem.MsgLen = sizeof(MLME_DEAUTH_REQ_STRUCT);
++ NdisMoveMemory(MsgElem.Msg, &DeAuthReq, sizeof(MLME_DEAUTH_REQ_STRUCT));
++ MlmeDeauthReqAction(pAd, &MsgElem);
++ if (INFRA_ON(pAd))
++ {
++ LinkDown(pAd, FALSE);
++ pAd->Mlme.AssocMachine.CurrState = ASSOC_IDLE;
++ }
++ break;
++#endif // IW_MLME_DEAUTH //
++#ifdef IW_MLME_DISASSOC
++ case IW_MLME_DISASSOC:
++ DBGPRINT(RT_DEBUG_TRACE, ("====> %s - IW_MLME_DISASSOC\n", __FUNCTION__));
++ COPY_MAC_ADDR(DisAssocReq.Addr, pAd->CommonCfg.Bssid);
++ DisAssocReq.Reason = pMlme->reason_code;
++
++ MsgElem.Machine = ASSOC_STATE_MACHINE;
++ MsgElem.MsgType = MT2_MLME_DISASSOC_REQ;
++ MsgElem.MsgLen = sizeof(MLME_DISASSOC_REQ_STRUCT);
++ NdisMoveMemory(MsgElem.Msg, &DisAssocReq, sizeof(MLME_DISASSOC_REQ_STRUCT));
++
++ pAd->Mlme.CntlMachine.CurrState = CNTL_WAIT_OID_DISASSOC;
++ MlmeDisassocReqAction(pAd, &MsgElem);
++ break;
++#endif // IW_MLME_DISASSOC //
++ default:
++ DBGPRINT(RT_DEBUG_TRACE, ("====> %s - Unknow Command\n", __FUNCTION__));
++ break;
++ }
++
++ return 0;
++}
++#endif // SIOCSIWMLME //
++
++#if WIRELESS_EXT > 17
++int rt_ioctl_siwauth(struct net_device *dev,
++ struct iw_request_info *info,
++ union iwreq_data *wrqu, char *extra)
++{
++ PRTMP_ADAPTER pAdapter = (PRTMP_ADAPTER) dev->priv;
++ struct iw_param *param = &wrqu->param;
++
++ //check if the interface is down
++ if(!RTMP_TEST_FLAG(pAdapter, fRTMP_ADAPTER_INTERRUPT_IN_USE))
++ {
++ DBGPRINT(RT_DEBUG_TRACE, ("INFO::Network is down!\n"));
++ return -ENETDOWN;
++ }
++ switch (param->flags & IW_AUTH_INDEX) {
++ case IW_AUTH_WPA_VERSION:
++ if (param->value == IW_AUTH_WPA_VERSION_WPA)
++ {
++ pAdapter->StaCfg.AuthMode = Ndis802_11AuthModeWPAPSK;
++ if (pAdapter->StaCfg.BssType == BSS_ADHOC)
++ pAdapter->StaCfg.AuthMode = Ndis802_11AuthModeWPANone;
++ }
++ else if (param->value == IW_AUTH_WPA_VERSION_WPA2)
++ pAdapter->StaCfg.AuthMode = Ndis802_11AuthModeWPA2PSK;
++
++ DBGPRINT(RT_DEBUG_TRACE, ("%s::IW_AUTH_WPA_VERSION - param->value = %d!\n", __FUNCTION__, param->value));
++ break;
++ case IW_AUTH_CIPHER_PAIRWISE:
++ if (param->value == IW_AUTH_CIPHER_NONE)
++ {
++ pAdapter->StaCfg.WepStatus = Ndis802_11WEPDisabled;
++ pAdapter->StaCfg.OrigWepStatus = pAdapter->StaCfg.WepStatus;
++ pAdapter->StaCfg.PairCipher = Ndis802_11WEPDisabled;
++ }
++ else if (param->value == IW_AUTH_CIPHER_WEP40 ||
++ param->value == IW_AUTH_CIPHER_WEP104)
++ {
++ pAdapter->StaCfg.WepStatus = Ndis802_11WEPEnabled;
++ pAdapter->StaCfg.OrigWepStatus = pAdapter->StaCfg.WepStatus;
++ pAdapter->StaCfg.PairCipher = Ndis802_11WEPEnabled;
++#ifdef WPA_SUPPLICANT_SUPPORT
++ pAdapter->StaCfg.IEEE8021X = FALSE;
++#endif // WPA_SUPPLICANT_SUPPORT //
++ }
++ else if (param->value == IW_AUTH_CIPHER_TKIP)
++ {
++ pAdapter->StaCfg.WepStatus = Ndis802_11Encryption2Enabled;
++ pAdapter->StaCfg.OrigWepStatus = pAdapter->StaCfg.WepStatus;
++ pAdapter->StaCfg.PairCipher = Ndis802_11Encryption2Enabled;
++ }
++ else if (param->value == IW_AUTH_CIPHER_CCMP)
++ {
++ pAdapter->StaCfg.WepStatus = Ndis802_11Encryption3Enabled;
++ pAdapter->StaCfg.OrigWepStatus = pAdapter->StaCfg.WepStatus;
++ pAdapter->StaCfg.PairCipher = Ndis802_11Encryption3Enabled;
++ }
++ DBGPRINT(RT_DEBUG_TRACE, ("%s::IW_AUTH_CIPHER_PAIRWISE - param->value = %d!\n", __FUNCTION__, param->value));
++ break;
++ case IW_AUTH_CIPHER_GROUP:
++ if (param->value == IW_AUTH_CIPHER_NONE)
++ {
++ pAdapter->StaCfg.GroupCipher = Ndis802_11WEPDisabled;
++ }
++ else if (param->value == IW_AUTH_CIPHER_WEP40 ||
++ param->value == IW_AUTH_CIPHER_WEP104)
++ {
++ pAdapter->StaCfg.GroupCipher = Ndis802_11WEPEnabled;
++ }
++ else if (param->value == IW_AUTH_CIPHER_TKIP)
++ {
++ pAdapter->StaCfg.GroupCipher = Ndis802_11Encryption2Enabled;
++ }
++ else if (param->value == IW_AUTH_CIPHER_CCMP)
++ {
++ pAdapter->StaCfg.GroupCipher = Ndis802_11Encryption3Enabled;
++ }
++ DBGPRINT(RT_DEBUG_TRACE, ("%s::IW_AUTH_CIPHER_GROUP - param->value = %d!\n", __FUNCTION__, param->value));
++ break;
++ case IW_AUTH_KEY_MGMT:
++ if (param->value == IW_AUTH_KEY_MGMT_802_1X)
++ {
++ if (pAdapter->StaCfg.AuthMode == Ndis802_11AuthModeWPAPSK)
++ {
++ pAdapter->StaCfg.AuthMode = Ndis802_11AuthModeWPA;
++#ifdef WPA_SUPPLICANT_SUPPORT
++ pAdapter->StaCfg.IEEE8021X = FALSE;
++#endif // WPA_SUPPLICANT_SUPPORT //
++ }
++ else if (pAdapter->StaCfg.AuthMode == Ndis802_11AuthModeWPA2PSK)
++ {
++ pAdapter->StaCfg.AuthMode = Ndis802_11AuthModeWPA2;
++#ifdef WPA_SUPPLICANT_SUPPORT
++ pAdapter->StaCfg.IEEE8021X = FALSE;
++#endif // WPA_SUPPLICANT_SUPPORT //
++ }
++#ifdef WPA_SUPPLICANT_SUPPORT
++ else
++ // WEP 1x
++ pAdapter->StaCfg.IEEE8021X = TRUE;
++#endif // WPA_SUPPLICANT_SUPPORT //
++ }
++ else if (param->value == 0)
++ {
++ //pAdapter->StaCfg.PortSecured = WPA_802_1X_PORT_SECURED;
++ STA_PORT_SECURED(pAdapter);
++ }
++ DBGPRINT(RT_DEBUG_TRACE, ("%s::IW_AUTH_KEY_MGMT - param->value = %d!\n", __FUNCTION__, param->value));
++ break;
++ case IW_AUTH_RX_UNENCRYPTED_EAPOL:
++ break;
++ case IW_AUTH_PRIVACY_INVOKED:
++ /*if (param->value == 0)
++ {
++ pAdapter->StaCfg.AuthMode = Ndis802_11AuthModeOpen;
++ pAdapter->StaCfg.WepStatus = Ndis802_11WEPDisabled;
++ pAdapter->StaCfg.OrigWepStatus = pAdapter->StaCfg.WepStatus;
++ pAdapter->StaCfg.PairCipher = Ndis802_11WEPDisabled;
++ pAdapter->StaCfg.GroupCipher = Ndis802_11WEPDisabled;
++ }*/
++ DBGPRINT(RT_DEBUG_TRACE, ("%s::IW_AUTH_PRIVACY_INVOKED - param->value = %d!\n", __FUNCTION__, param->value));
++ break;
++ case IW_AUTH_DROP_UNENCRYPTED:
++ if (param->value != 0)
++ pAdapter->StaCfg.PortSecured = WPA_802_1X_PORT_NOT_SECURED;
++ else
++ {
++ //pAdapter->StaCfg.PortSecured = WPA_802_1X_PORT_SECURED;
++ STA_PORT_SECURED(pAdapter);
++ }
++ DBGPRINT(RT_DEBUG_TRACE, ("%s::IW_AUTH_WPA_VERSION - param->value = %d!\n", __FUNCTION__, param->value));
++ break;
++ case IW_AUTH_80211_AUTH_ALG:
++ if (param->value & IW_AUTH_ALG_SHARED_KEY)
++ {
++ pAdapter->StaCfg.AuthMode = Ndis802_11AuthModeShared;
++ }
++ else if (param->value & IW_AUTH_ALG_OPEN_SYSTEM)
++ {
++ pAdapter->StaCfg.AuthMode = Ndis802_11AuthModeOpen;
++ }
++ else
++ return -EINVAL;
++ DBGPRINT(RT_DEBUG_TRACE, ("%s::IW_AUTH_80211_AUTH_ALG - param->value = %d!\n", __FUNCTION__, param->value));
++ break;
++ case IW_AUTH_WPA_ENABLED:
++ DBGPRINT(RT_DEBUG_TRACE, ("%s::IW_AUTH_WPA_ENABLED - Driver supports WPA!(param->value = %d)\n", __FUNCTION__, param->value));
++ break;
++ default:
++ return -EOPNOTSUPP;
++}
++
++ return 0;
++}
++
++int rt_ioctl_giwauth(struct net_device *dev,
++ struct iw_request_info *info,
++ union iwreq_data *wrqu, char *extra)
++{
++ PRTMP_ADAPTER pAdapter = (PRTMP_ADAPTER) dev->priv;
++ struct iw_param *param = &wrqu->param;
++
++ //check if the interface is down
++ if(!RTMP_TEST_FLAG(pAdapter, fRTMP_ADAPTER_INTERRUPT_IN_USE))
++ {
++ DBGPRINT(RT_DEBUG_TRACE, ("INFO::Network is down!\n"));
++ return -ENETDOWN;
++ }
++
++ switch (param->flags & IW_AUTH_INDEX) {
++ case IW_AUTH_DROP_UNENCRYPTED:
++ param->value = (pAdapter->StaCfg.WepStatus == Ndis802_11WEPDisabled) ? 0 : 1;
++ break;
++
++ case IW_AUTH_80211_AUTH_ALG:
++ param->value = (pAdapter->StaCfg.AuthMode == Ndis802_11AuthModeShared) ? IW_AUTH_ALG_SHARED_KEY : IW_AUTH_ALG_OPEN_SYSTEM;
++ break;
++
++ case IW_AUTH_WPA_ENABLED:
++ param->value = (pAdapter->StaCfg.AuthMode >= Ndis802_11AuthModeWPA) ? 1 : 0;
++ break;
++
++ default:
++ return -EOPNOTSUPP;
++ }
++ DBGPRINT(RT_DEBUG_TRACE, ("rt_ioctl_giwauth::param->value = %d!\n", param->value));
++ return 0;
++}
++
++void fnSetCipherKey(
++ IN PRTMP_ADAPTER pAdapter,
++ IN INT keyIdx,
++ IN UCHAR CipherAlg,
++ IN BOOLEAN bGTK,
++ IN struct iw_encode_ext *ext)
++{
++ NdisZeroMemory(&pAdapter->SharedKey[BSS0][keyIdx], sizeof(CIPHER_KEY));
++ pAdapter->SharedKey[BSS0][keyIdx].KeyLen = LEN_TKIP_EK;
++ NdisMoveMemory(pAdapter->SharedKey[BSS0][keyIdx].Key, ext->key, LEN_TKIP_EK);
++ NdisMoveMemory(pAdapter->SharedKey[BSS0][keyIdx].TxMic, ext->key + LEN_TKIP_EK, LEN_TKIP_TXMICK);
++ NdisMoveMemory(pAdapter->SharedKey[BSS0][keyIdx].RxMic, ext->key + LEN_TKIP_EK + LEN_TKIP_TXMICK, LEN_TKIP_RXMICK);
++ pAdapter->SharedKey[BSS0][keyIdx].CipherAlg = CipherAlg;
++
++ // Update group key information to ASIC Shared Key Table
++ AsicAddSharedKeyEntry(pAdapter,
++ BSS0,
++ keyIdx,
++ pAdapter->SharedKey[BSS0][keyIdx].CipherAlg,
++ pAdapter->SharedKey[BSS0][keyIdx].Key,
++ pAdapter->SharedKey[BSS0][keyIdx].TxMic,
++ pAdapter->SharedKey[BSS0][keyIdx].RxMic);
++
++ if (bGTK)
++ // Update ASIC WCID attribute table and IVEIV table
++ RTMPAddWcidAttributeEntry(pAdapter,
++ BSS0,
++ keyIdx,
++ pAdapter->SharedKey[BSS0][keyIdx].CipherAlg,
++ NULL);
++ else
++ // Update ASIC WCID attribute table and IVEIV table
++ RTMPAddWcidAttributeEntry(pAdapter,
++ BSS0,
++ keyIdx,
++ pAdapter->SharedKey[BSS0][keyIdx].CipherAlg,
++ &pAdapter->MacTab.Content[BSSID_WCID]);
++}
++
++int rt_ioctl_siwencodeext(struct net_device *dev,
++ struct iw_request_info *info,
++ union iwreq_data *wrqu,
++ char *extra)
++ {
++ PRTMP_ADAPTER pAdapter = (PRTMP_ADAPTER) dev->priv;
++ struct iw_point *encoding = &wrqu->encoding;
++ struct iw_encode_ext *ext = (struct iw_encode_ext *)extra;
++ int keyIdx, alg = ext->alg;
++
++ //check if the interface is down
++ if(!RTMP_TEST_FLAG(pAdapter, fRTMP_ADAPTER_INTERRUPT_IN_USE))
++ {
++ DBGPRINT(RT_DEBUG_TRACE, ("INFO::Network is down!\n"));
++ return -ENETDOWN;
++ }
++
++ if (encoding->flags & IW_ENCODE_DISABLED)
++ {
++ keyIdx = (encoding->flags & IW_ENCODE_INDEX) - 1;
++ // set BSSID wcid entry of the Pair-wise Key table as no-security mode
++ AsicRemovePairwiseKeyEntry(pAdapter, BSS0, BSSID_WCID);
++ pAdapter->SharedKey[BSS0][keyIdx].KeyLen = 0;
++ pAdapter->SharedKey[BSS0][keyIdx].CipherAlg = CIPHER_NONE;
++ AsicRemoveSharedKeyEntry(pAdapter, 0, (UCHAR)keyIdx);
++ NdisZeroMemory(&pAdapter->SharedKey[BSS0][keyIdx], sizeof(CIPHER_KEY));
++ DBGPRINT(RT_DEBUG_TRACE, ("%s::Remove all keys!(encoding->flags = %x)\n", __FUNCTION__, encoding->flags));
++ }
++ else
++ {
++ // Get Key Index and convet to our own defined key index
++ keyIdx = (encoding->flags & IW_ENCODE_INDEX) - 1;
++ if((keyIdx < 0) || (keyIdx >= NR_WEP_KEYS))
++ return -EINVAL;
++
++ if (ext->ext_flags & IW_ENCODE_EXT_SET_TX_KEY)
++ {
++ pAdapter->StaCfg.DefaultKeyId = keyIdx;
++ DBGPRINT(RT_DEBUG_TRACE, ("%s::DefaultKeyId = %d\n", __FUNCTION__, pAdapter->StaCfg.DefaultKeyId));
++ }
++
++ switch (alg) {
++ case IW_ENCODE_ALG_NONE:
++ DBGPRINT(RT_DEBUG_TRACE, ("%s::IW_ENCODE_ALG_NONE\n", __FUNCTION__));
++ break;
++ case IW_ENCODE_ALG_WEP:
++ DBGPRINT(RT_DEBUG_TRACE, ("%s::IW_ENCODE_ALG_WEP - ext->key_len = %d, keyIdx = %d\n", __FUNCTION__, ext->key_len, keyIdx));
++ if (ext->key_len == MAX_WEP_KEY_SIZE)
++ {
++ pAdapter->SharedKey[BSS0][keyIdx].KeyLen = MAX_WEP_KEY_SIZE;
++ pAdapter->SharedKey[BSS0][keyIdx].CipherAlg = CIPHER_WEP128;
++ }
++ else if (ext->key_len == MIN_WEP_KEY_SIZE)
++ {
++ pAdapter->SharedKey[BSS0][keyIdx].KeyLen = MIN_WEP_KEY_SIZE;
++ pAdapter->SharedKey[BSS0][keyIdx].CipherAlg = CIPHER_WEP64;
++ }
++ else
++ return -EINVAL;
++
++ NdisZeroMemory(pAdapter->SharedKey[BSS0][keyIdx].Key, 16);
++ NdisMoveMemory(pAdapter->SharedKey[BSS0][keyIdx].Key, ext->key, ext->key_len);
++
++ if (pAdapter->StaCfg.GroupCipher == Ndis802_11GroupWEP40Enabled ||
++ pAdapter->StaCfg.GroupCipher == Ndis802_11GroupWEP104Enabled)
++ {
++ // Set Group key material to Asic
++ AsicAddSharedKeyEntry(pAdapter, BSS0, keyIdx, pAdapter->SharedKey[BSS0][keyIdx].CipherAlg, pAdapter->SharedKey[BSS0][keyIdx].Key, NULL, NULL);
++
++ // Update WCID attribute table and IVEIV table for this group key table
++ RTMPAddWcidAttributeEntry(pAdapter, BSS0, keyIdx, pAdapter->SharedKey[BSS0][keyIdx].CipherAlg, NULL);
++
++ STA_PORT_SECURED(pAdapter);
++
++ // Indicate Connected for GUI
++ pAdapter->IndicateMediaState = NdisMediaStateConnected;
++ }
++ break;
++ case IW_ENCODE_ALG_TKIP:
++ DBGPRINT(RT_DEBUG_TRACE, ("%s::IW_ENCODE_ALG_TKIP - keyIdx = %d, ext->key_len = %d\n", __FUNCTION__, keyIdx, ext->key_len));
++ if (ext->key_len == 32)
++ {
++ if (ext->ext_flags & IW_ENCODE_EXT_SET_TX_KEY)
++ {
++ fnSetCipherKey(pAdapter, keyIdx, CIPHER_TKIP, FALSE, ext);
++ if (pAdapter->StaCfg.AuthMode >= Ndis802_11AuthModeWPA2)
++ {
++ //pAdapter->StaCfg.PortSecured = WPA_802_1X_PORT_SECURED;
++ STA_PORT_SECURED(pAdapter);
++ }
++ }
++ else if (ext->ext_flags & IW_ENCODE_EXT_GROUP_KEY)
++ {
++ fnSetCipherKey(pAdapter, keyIdx, CIPHER_TKIP, TRUE, ext);
++
++ // set 802.1x port control
++ //pAdapter->StaCfg.PortSecured = WPA_802_1X_PORT_SECURED;
++ STA_PORT_SECURED(pAdapter);
++ }
++ }
++ else
++ return -EINVAL;
++ break;
++ case IW_ENCODE_ALG_CCMP:
++ if (ext->ext_flags & IW_ENCODE_EXT_SET_TX_KEY)
++ {
++ fnSetCipherKey(pAdapter, keyIdx, CIPHER_AES, FALSE, ext);
++ if (pAdapter->StaCfg.AuthMode >= Ndis802_11AuthModeWPA2)
++ //pAdapter->StaCfg.PortSecured = WPA_802_1X_PORT_SECURED;
++ STA_PORT_SECURED(pAdapter);
++ }
++ else if (ext->ext_flags & IW_ENCODE_EXT_GROUP_KEY)
++ {
++ fnSetCipherKey(pAdapter, keyIdx, CIPHER_AES, TRUE, ext);
++
++ // set 802.1x port control
++ //pAdapter->StaCfg.PortSecured = WPA_802_1X_PORT_SECURED;
++ STA_PORT_SECURED(pAdapter);
++ }
++ break;
++ default:
++ return -EINVAL;
++ }
++ }
++
++ return 0;
++}
++
++int
++rt_ioctl_giwencodeext(struct net_device *dev,
++ struct iw_request_info *info,
++ union iwreq_data *wrqu, char *extra)
++{
++ PRTMP_ADAPTER pAd = (PRTMP_ADAPTER) dev->priv;
++ PCHAR pKey = NULL;
++ struct iw_point *encoding = &wrqu->encoding;
++ struct iw_encode_ext *ext = (struct iw_encode_ext *)extra;
++ int idx, max_key_len;
++
++ DBGPRINT(RT_DEBUG_TRACE ,("===> rt_ioctl_giwencodeext\n"));
++
++ max_key_len = encoding->length - sizeof(*ext);
++ if (max_key_len < 0)
++ return -EINVAL;
++
++ idx = encoding->flags & IW_ENCODE_INDEX;
++ if (idx)
++ {
++ if (idx < 1 || idx > 4)
++ return -EINVAL;
++ idx--;
++
++ if ((pAd->StaCfg.WepStatus == Ndis802_11Encryption2Enabled) ||
++ (pAd->StaCfg.WepStatus == Ndis802_11Encryption3Enabled))
++ {
++ if (idx != pAd->StaCfg.DefaultKeyId)
++ {
++ ext->key_len = 0;
++ return 0;
++ }
++ }
++ }
++ else
++ idx = pAd->StaCfg.DefaultKeyId;
++
++ encoding->flags = idx + 1;
++ memset(ext, 0, sizeof(*ext));
++
++ ext->key_len = 0;
++ switch(pAd->StaCfg.WepStatus) {
++ case Ndis802_11WEPDisabled:
++ ext->alg = IW_ENCODE_ALG_NONE;
++ encoding->flags |= IW_ENCODE_DISABLED;
++ break;
++ case Ndis802_11WEPEnabled:
++ ext->alg = IW_ENCODE_ALG_WEP;
++ if (pAd->SharedKey[BSS0][idx].KeyLen > max_key_len)
++ return -E2BIG;
++ else
++ {
++ ext->key_len = pAd->SharedKey[BSS0][idx].KeyLen;
++ pKey = &(pAd->SharedKey[BSS0][idx].Key[0]);
++ }
++ break;
++ case Ndis802_11Encryption2Enabled:
++ case Ndis802_11Encryption3Enabled:
++ if (pAd->StaCfg.WepStatus == Ndis802_11Encryption2Enabled)
++ ext->alg = IW_ENCODE_ALG_TKIP;
++ else
++ ext->alg = IW_ENCODE_ALG_CCMP;
++
++ if (max_key_len < 32)
++ return -E2BIG;
++ else
++ {
++ ext->key_len = 32;
++ pKey = &pAd->StaCfg.PMK[0];
++ }
++ break;
++ default:
++ return -EINVAL;
++ }
++
++ if (ext->key_len && pKey)
++ {
++ encoding->flags |= IW_ENCODE_ENABLED;
++ memcpy(ext->key, pKey, ext->key_len);
++ }
++
++ return 0;
++}
++
++#ifdef SIOCSIWGENIE
++int rt_ioctl_siwgenie(struct net_device *dev,
++ struct iw_request_info *info,
++ union iwreq_data *wrqu, char *extra)
++{
++ PRTMP_ADAPTER pAd = (PRTMP_ADAPTER) dev->priv;
++
++ if (wrqu->data.length > MAX_LEN_OF_RSNIE ||
++ (wrqu->data.length && extra == NULL))
++ return -EINVAL;
++
++ if (wrqu->data.length)
++ {
++ pAd->StaCfg.RSNIE_Len = wrqu->data.length;
++ NdisMoveMemory(&pAd->StaCfg.RSN_IE[0], extra, pAd->StaCfg.RSNIE_Len);
++ }
++ else
++ {
++ pAd->StaCfg.RSNIE_Len = 0;
++ NdisZeroMemory(&pAd->StaCfg.RSN_IE[0], MAX_LEN_OF_RSNIE);
++ }
++
++ return 0;
++}
++#endif // SIOCSIWGENIE //
++
++int rt_ioctl_giwgenie(struct net_device *dev,
++ struct iw_request_info *info,
++ union iwreq_data *wrqu, char *extra)
++{
++ PRTMP_ADAPTER pAd = (PRTMP_ADAPTER) dev->priv;
++
++ if ((pAd->StaCfg.RSNIE_Len == 0) ||
++ (pAd->StaCfg.AuthMode < Ndis802_11AuthModeWPA))
++ {
++ wrqu->data.length = 0;
++ return 0;
++ }
++
++#ifdef NATIVE_WPA_SUPPLICANT_SUPPORT
++#ifdef SIOCSIWGENIE
++ if (pAd->StaCfg.WpaSupplicantUP == WPA_SUPPLICANT_ENABLE)
++ {
++ if (wrqu->data.length < pAd->StaCfg.RSNIE_Len)
++ return -E2BIG;
++
++ wrqu->data.length = pAd->StaCfg.RSNIE_Len;
++ memcpy(extra, &pAd->StaCfg.RSN_IE[0], pAd->StaCfg.RSNIE_Len);
++ }
++ else
++#endif // SIOCSIWGENIE //
++#endif // NATIVE_WPA_SUPPLICANT_SUPPORT //
++ {
++ UCHAR RSNIe = IE_WPA;
++
++ if (wrqu->data.length < (pAd->StaCfg.RSNIE_Len + 2)) // ID, Len
++ return -E2BIG;
++ wrqu->data.length = pAd->StaCfg.RSNIE_Len + 2;
++
++ if ((pAd->StaCfg.AuthMode == Ndis802_11AuthModeWPA2PSK) ||
++ (pAd->StaCfg.AuthMode == Ndis802_11AuthModeWPA2))
++ RSNIe = IE_RSN;
++
++ extra[0] = (char)RSNIe;
++ extra[1] = pAd->StaCfg.RSNIE_Len;
++ memcpy(extra+2, &pAd->StaCfg.RSN_IE[0], pAd->StaCfg.RSNIE_Len);
++ }
++
++ return 0;
++}
++
++int rt_ioctl_siwpmksa(struct net_device *dev,
++ struct iw_request_info *info,
++ union iwreq_data *wrqu,
++ char *extra)
++{
++ PRTMP_ADAPTER pAd = (PRTMP_ADAPTER) dev->priv;
++ struct iw_pmksa *pPmksa = (struct iw_pmksa *)wrqu->data.pointer;
++ INT CachedIdx = 0, idx = 0;
++
++ if (pPmksa == NULL)
++ return -EINVAL;
++
++ DBGPRINT(RT_DEBUG_TRACE ,("===> rt_ioctl_siwpmksa\n"));
++ switch(pPmksa->cmd)
++ {
++ case IW_PMKSA_FLUSH:
++ NdisZeroMemory(pAd->StaCfg.SavedPMK, sizeof(BSSID_INFO)*PMKID_NO);
++ DBGPRINT(RT_DEBUG_TRACE ,("rt_ioctl_siwpmksa - IW_PMKSA_FLUSH\n"));
++ break;
++ case IW_PMKSA_REMOVE:
++ for (CachedIdx = 0; CachedIdx < pAd->StaCfg.SavedPMKNum; CachedIdx++)
++ {
++ // compare the BSSID
++ if (NdisEqualMemory(pPmksa->bssid.sa_data, pAd->StaCfg.SavedPMK[CachedIdx].BSSID, MAC_ADDR_LEN))
++ {
++ NdisZeroMemory(pAd->StaCfg.SavedPMK[CachedIdx].BSSID, MAC_ADDR_LEN);
++ NdisZeroMemory(pAd->StaCfg.SavedPMK[CachedIdx].PMKID, 16);
++ for (idx = CachedIdx; idx < (pAd->StaCfg.SavedPMKNum - 1); idx++)
++ {
++ NdisMoveMemory(&pAd->StaCfg.SavedPMK[idx].BSSID[0], &pAd->StaCfg.SavedPMK[idx+1].BSSID[0], MAC_ADDR_LEN);
++ NdisMoveMemory(&pAd->StaCfg.SavedPMK[idx].PMKID[0], &pAd->StaCfg.SavedPMK[idx+1].PMKID[0], 16);
++ }
++ pAd->StaCfg.SavedPMKNum--;
++ break;
++ }
++ }
++
++ DBGPRINT(RT_DEBUG_TRACE ,("rt_ioctl_siwpmksa - IW_PMKSA_REMOVE\n"));
++ break;
++ case IW_PMKSA_ADD:
++ for (CachedIdx = 0; CachedIdx < pAd->StaCfg.SavedPMKNum; CachedIdx++)
++ {
++ // compare the BSSID
++ if (NdisEqualMemory(pPmksa->bssid.sa_data, pAd->StaCfg.SavedPMK[CachedIdx].BSSID, MAC_ADDR_LEN))
++ break;
++ }
++
++ // Found, replace it
++ if (CachedIdx < PMKID_NO)
++ {
++ DBGPRINT(RT_DEBUG_OFF, ("Update PMKID, idx = %d\n", CachedIdx));
++ NdisMoveMemory(&pAd->StaCfg.SavedPMK[CachedIdx].BSSID[0], pPmksa->bssid.sa_data, MAC_ADDR_LEN);
++ NdisMoveMemory(&pAd->StaCfg.SavedPMK[CachedIdx].PMKID[0], pPmksa->pmkid, 16);
++ pAd->StaCfg.SavedPMKNum++;
++ }
++ // Not found, replace the last one
++ else
++ {
++ // Randomly replace one
++ CachedIdx = (pPmksa->bssid.sa_data[5] % PMKID_NO);
++ DBGPRINT(RT_DEBUG_OFF, ("Update PMKID, idx = %d\n", CachedIdx));
++ NdisMoveMemory(&pAd->StaCfg.SavedPMK[CachedIdx].BSSID[0], pPmksa->bssid.sa_data, MAC_ADDR_LEN);
++ NdisMoveMemory(&pAd->StaCfg.SavedPMK[CachedIdx].PMKID[0], pPmksa->pmkid, 16);
++ }
++
++ DBGPRINT(RT_DEBUG_TRACE ,("rt_ioctl_siwpmksa - IW_PMKSA_ADD\n"));
++ break;
++ default:
++ DBGPRINT(RT_DEBUG_TRACE ,("rt_ioctl_siwpmksa - Unknow Command!!\n"));
++ break;
++ }
++
++ return 0;
++}
++#endif // #if WIRELESS_EXT > 17
++
++#ifdef DBG
++static int
++rt_private_ioctl_bbp(struct net_device *dev, struct iw_request_info *info,
++ struct iw_point *wrq, char *extra)
++ {
++ CHAR *this_char;
++ CHAR *value = NULL;
++ UCHAR regBBP = 0;
++// CHAR arg[255]={0};
++ UINT32 bbpId;
++ UINT32 bbpValue;
++ BOOLEAN bIsPrintAllBBP = FALSE;
++ INT Status = 0;
++ PRTMP_ADAPTER pAdapter = (PRTMP_ADAPTER) dev->priv;
++
++
++ memset(extra, 0x00, IW_PRIV_SIZE_MASK);
++
++ if (wrq->length > 1) //No parameters.
++ {
++ sprintf(extra, "\n");
++
++ //Parsing Read or Write
++ this_char = wrq->pointer;
++ DBGPRINT(RT_DEBUG_TRACE, ("this_char=%s\n", this_char));
++ if (!*this_char)
++ goto next;
++
++ if ((value = rtstrchr(this_char, '=')) != NULL)
++ *value++ = 0;
++
++ if (!value || !*value)
++ { //Read
++ DBGPRINT(RT_DEBUG_TRACE, ("this_char=%s, value=%s\n", this_char, value));
++ if (sscanf(this_char, "%d", &(bbpId)) == 1)
++ {
++ if (bbpId <= 136)
++ {
++#ifdef RALINK_ATE
++ if (ATE_ON(pAdapter))
++ {
++ ATE_BBP_IO_READ8_BY_REG_ID(pAdapter, bbpId, ®BBP);
++ }
++ else
++#endif // RALINK_ATE //
++ {
++ RTMP_BBP_IO_READ8_BY_REG_ID(pAdapter, bbpId, ®BBP);
++ }
++ sprintf(extra+strlen(extra), "R%02d[0x%02X]:%02X\n", bbpId, bbpId*2, regBBP);
++ wrq->length = strlen(extra) + 1; // 1: size of '\0'
++ DBGPRINT(RT_DEBUG_TRACE, ("msg=%s\n", extra));
++ }
++ else
++ {//Invalid parametes, so default printk all bbp
++ bIsPrintAllBBP = TRUE;
++ goto next;
++ }
++ }
++ else
++ { //Invalid parametes, so default printk all bbp
++ bIsPrintAllBBP = TRUE;
++ goto next;
++ }
++ }
++ else
++ { //Write
++ if ((sscanf(this_char, "%d", &(bbpId)) == 1) && (sscanf(value, "%x", &(bbpValue)) == 1))
++ {
++ if (bbpId <= 136)
++ {
++#ifdef RALINK_ATE
++ if (ATE_ON(pAdapter))
++ {
++ ATE_BBP_IO_WRITE8_BY_REG_ID(pAdapter, bbpId, bbpValue);
++ //Read it back for showing
++ ATE_BBP_IO_READ8_BY_REG_ID(pAdapter, bbpId, ®BBP);
++ }
++ else
++#endif // RALINK_ATE //
++ {
++ RTMP_BBP_IO_WRITE8_BY_REG_ID(pAdapter, bbpId, bbpValue);
++ //Read it back for showing
++ RTMP_BBP_IO_READ8_BY_REG_ID(pAdapter, bbpId, ®BBP);
++ }
++ sprintf(extra+strlen(extra), "R%02d[0x%02X]:%02X\n", bbpId, bbpId*2, regBBP);
++ wrq->length = strlen(extra) + 1; // 1: size of '\0'
++ DBGPRINT(RT_DEBUG_TRACE, ("msg=%s\n", extra));
++ }
++ else
++ {//Invalid parametes, so default printk all bbp
++ bIsPrintAllBBP = TRUE;
++ goto next;
++ }
++ }
++ else
++ { //Invalid parametes, so default printk all bbp
++ bIsPrintAllBBP = TRUE;
++ goto next;
++ }
++ }
++ }
++ else
++ bIsPrintAllBBP = TRUE;
++
++next:
++ if (bIsPrintAllBBP)
++ {
++ memset(extra, 0x00, IW_PRIV_SIZE_MASK);
++ sprintf(extra, "\n");
++ for (bbpId = 0; bbpId <= 136; bbpId++)
++ {
++ if (strlen(extra) >= (IW_PRIV_SIZE_MASK - 10))
++ break;
++#ifdef RALINK_ATE
++ if (ATE_ON(pAdapter))
++ {
++ ATE_BBP_IO_READ8_BY_REG_ID(pAdapter, bbpId, ®BBP);
++ }
++ else
++#endif // RALINK_ATE //
++ RTMP_BBP_IO_READ8_BY_REG_ID(pAdapter, bbpId, ®BBP);
++ sprintf(extra+strlen(extra), "R%02d[0x%02X]:%02X ", bbpId, bbpId*2, regBBP);
++ if (bbpId%5 == 4)
++ sprintf(extra+strlen(extra), "\n");
++ }
++
++ wrq->length = strlen(extra) + 1; // 1: size of '\0'
++ DBGPRINT(RT_DEBUG_TRACE, ("wrq->length = %d\n", wrq->length));
++ }
++
++ DBGPRINT(RT_DEBUG_TRACE, ("<==rt_private_ioctl_bbp\n\n"));
++
++ return Status;
++}
++#endif // DBG //
++
++int rt_ioctl_siwrate(struct net_device *dev,
++ struct iw_request_info *info,
++ union iwreq_data *wrqu, char *extra)
++{
++ PRTMP_ADAPTER pAd = (PRTMP_ADAPTER) dev->priv;
++ UINT32 rate = wrqu->bitrate.value, fixed = wrqu->bitrate.fixed;
++
++ //check if the interface is down
++ if(!RTMP_TEST_FLAG(pAd, fRTMP_ADAPTER_INTERRUPT_IN_USE))
++ {
++ DBGPRINT(RT_DEBUG_TRACE, ("rt_ioctl_siwrate::Network is down!\n"));
++ return -ENETDOWN;
++ }
++
++ DBGPRINT(RT_DEBUG_TRACE, ("rt_ioctl_siwrate::(rate = %d, fixed = %d)\n", rate, fixed));
++ /* rate = -1 => auto rate
++ rate = X, fixed = 1 => (fixed rate X)
++ */
++ if (rate == -1)
++ {
++ //Auto Rate
++ pAd->StaCfg.DesiredTransmitSetting.field.MCS = MCS_AUTO;
++ pAd->StaCfg.bAutoTxRateSwitch = TRUE;
++ if ((pAd->CommonCfg.PhyMode <= PHY_11G) ||
++ (pAd->MacTab.Content[BSSID_WCID].HTPhyMode.field.MODE <= MODE_OFDM))
++ RTMPSetDesiredRates(pAd, -1);
++
++#ifdef DOT11_N_SUPPORT
++ SetCommonHT(pAd);
++#endif // DOT11_N_SUPPORT //
++ }
++ else
++ {
++ if (fixed)
++ {
++ pAd->StaCfg.bAutoTxRateSwitch = FALSE;
++ if ((pAd->CommonCfg.PhyMode <= PHY_11G) ||
++ (pAd->MacTab.Content[BSSID_WCID].HTPhyMode.field.MODE <= MODE_OFDM))
++ RTMPSetDesiredRates(pAd, rate);
++ else
++ {
++ pAd->StaCfg.DesiredTransmitSetting.field.MCS = MCS_AUTO;
++#ifdef DOT11_N_SUPPORT
++ SetCommonHT(pAd);
++#endif // DOT11_N_SUPPORT //
++ }
++ DBGPRINT(RT_DEBUG_TRACE, ("rt_ioctl_siwrate::(HtMcs=%d)\n",pAd->StaCfg.DesiredTransmitSetting.field.MCS));
++ }
++ else
++ {
++ // TODO: rate = X, fixed = 0 => (rates <= X)
++ return -EOPNOTSUPP;
++ }
++ }
++
++ return 0;
++}
++
++int rt_ioctl_giwrate(struct net_device *dev,
++ struct iw_request_info *info,
++ union iwreq_data *wrqu, char *extra)
++{
++ PRTMP_ADAPTER pAd = (PRTMP_ADAPTER) dev->priv;
++ int rate_index = 0, rate_count = 0;
++ HTTRANSMIT_SETTING ht_setting;
++ __s32 ralinkrate[] =
++ {2, 4, 11, 22, // CCK
++ 12, 18, 24, 36, 48, 72, 96, 108, // OFDM
++ 13, 26, 39, 52, 78, 104, 117, 130, 26, 52, 78, 104, 156, 208, 234, 260, // 20MHz, 800ns GI, MCS: 0 ~ 15
++ 39, 78, 117, 156, 234, 312, 351, 390, // 20MHz, 800ns GI, MCS: 16 ~ 23
++ 27, 54, 81, 108, 162, 216, 243, 270, 54, 108, 162, 216, 324, 432, 486, 540, // 40MHz, 800ns GI, MCS: 0 ~ 15
++ 81, 162, 243, 324, 486, 648, 729, 810, // 40MHz, 800ns GI, MCS: 16 ~ 23
++ 14, 29, 43, 57, 87, 115, 130, 144, 29, 59, 87, 115, 173, 230, 260, 288, // 20MHz, 400ns GI, MCS: 0 ~ 15
++ 43, 87, 130, 173, 260, 317, 390, 433, // 20MHz, 400ns GI, MCS: 16 ~ 23
++ 30, 60, 90, 120, 180, 240, 270, 300, 60, 120, 180, 240, 360, 480, 540, 600, // 40MHz, 400ns GI, MCS: 0 ~ 15
++ 90, 180, 270, 360, 540, 720, 810, 900}; // 40MHz, 400ns GI, MCS: 16 ~ 23
++
++ rate_count = sizeof(ralinkrate)/sizeof(__s32);
++ //check if the interface is down
++ if(!RTMP_TEST_FLAG(pAd, fRTMP_ADAPTER_INTERRUPT_IN_USE))
++ {
++ DBGPRINT(RT_DEBUG_TRACE, ("INFO::Network is down!\n"));
++ return -ENETDOWN;
++ }
++
++ if ((pAd->StaCfg.bAutoTxRateSwitch == FALSE) &&
++ (INFRA_ON(pAd)) &&
++ ((pAd->CommonCfg.PhyMode <= PHY_11G) || (pAd->MacTab.Content[BSSID_WCID].HTPhyMode.field.MODE <= MODE_OFDM)))
++ ht_setting.word = pAd->StaCfg.HTPhyMode.word;
++ else
++ ht_setting.word = pAd->MacTab.Content[BSSID_WCID].HTPhyMode.word;
++
++#ifdef DOT11_N_SUPPORT
++ if (ht_setting.field.MODE >= MODE_HTMIX)
++ {
++// rate_index = 12 + ((UCHAR)ht_setting.field.BW *16) + ((UCHAR)ht_setting.field.ShortGI *32) + ((UCHAR)ht_setting.field.MCS);
++ rate_index = 12 + ((UCHAR)ht_setting.field.BW *24) + ((UCHAR)ht_setting.field.ShortGI *48) + ((UCHAR)ht_setting.field.MCS);
++ }
++ else
++#endif // DOT11_N_SUPPORT //
++ if (ht_setting.field.MODE == MODE_OFDM)
++ rate_index = (UCHAR)(ht_setting.field.MCS) + 4;
++ else if (ht_setting.field.MODE == MODE_CCK)
++ rate_index = (UCHAR)(ht_setting.field.MCS);
++
++ if (rate_index < 0)
++ rate_index = 0;
++
++ if (rate_index > rate_count)
++ rate_index = rate_count;
++
++ wrqu->bitrate.value = ralinkrate[rate_index] * 500000;
++ wrqu->bitrate.disabled = 0;
++
++ return 0;
++}
++
++static const iw_handler rt_handler[] =
++{
++ (iw_handler) NULL, /* SIOCSIWCOMMIT */
++ (iw_handler) rt_ioctl_giwname, /* SIOCGIWNAME */
++ (iw_handler) NULL, /* SIOCSIWNWID */
++ (iw_handler) NULL, /* SIOCGIWNWID */
++ (iw_handler) rt_ioctl_siwfreq, /* SIOCSIWFREQ */
++ (iw_handler) rt_ioctl_giwfreq, /* SIOCGIWFREQ */
++ (iw_handler) rt_ioctl_siwmode, /* SIOCSIWMODE */
++ (iw_handler) rt_ioctl_giwmode, /* SIOCGIWMODE */
++ (iw_handler) NULL, /* SIOCSIWSENS */
++ (iw_handler) NULL, /* SIOCGIWSENS */
++ (iw_handler) NULL /* not used */, /* SIOCSIWRANGE */
++ (iw_handler) rt_ioctl_giwrange, /* SIOCGIWRANGE */
++ (iw_handler) NULL /* not used */, /* SIOCSIWPRIV */
++ (iw_handler) NULL /* kernel code */, /* SIOCGIWPRIV */
++ (iw_handler) NULL /* not used */, /* SIOCSIWSTATS */
++ (iw_handler) rt28xx_get_wireless_stats /* kernel code */, /* SIOCGIWSTATS */
++ (iw_handler) NULL, /* SIOCSIWSPY */
++ (iw_handler) NULL, /* SIOCGIWSPY */
++ (iw_handler) NULL, /* SIOCSIWTHRSPY */
++ (iw_handler) NULL, /* SIOCGIWTHRSPY */
++ (iw_handler) rt_ioctl_siwap, /* SIOCSIWAP */
++ (iw_handler) rt_ioctl_giwap, /* SIOCGIWAP */
++#ifdef SIOCSIWMLME
++ (iw_handler) rt_ioctl_siwmlme, /* SIOCSIWMLME */
++#else
++ (iw_handler) NULL, /* SIOCSIWMLME */
++#endif // SIOCSIWMLME //
++ (iw_handler) rt_ioctl_iwaplist, /* SIOCGIWAPLIST */
++#ifdef SIOCGIWSCAN
++ (iw_handler) rt_ioctl_siwscan, /* SIOCSIWSCAN */
++ (iw_handler) rt_ioctl_giwscan, /* SIOCGIWSCAN */
++#else
++ (iw_handler) NULL, /* SIOCSIWSCAN */
++ (iw_handler) NULL, /* SIOCGIWSCAN */
++#endif /* SIOCGIWSCAN */
++ (iw_handler) rt_ioctl_siwessid, /* SIOCSIWESSID */
++ (iw_handler) rt_ioctl_giwessid, /* SIOCGIWESSID */
++ (iw_handler) rt_ioctl_siwnickn, /* SIOCSIWNICKN */
++ (iw_handler) rt_ioctl_giwnickn, /* SIOCGIWNICKN */
++ (iw_handler) NULL, /* -- hole -- */
++ (iw_handler) NULL, /* -- hole -- */
++ (iw_handler) rt_ioctl_siwrate, /* SIOCSIWRATE */
++ (iw_handler) rt_ioctl_giwrate, /* SIOCGIWRATE */
++ (iw_handler) rt_ioctl_siwrts, /* SIOCSIWRTS */
++ (iw_handler) rt_ioctl_giwrts, /* SIOCGIWRTS */
++ (iw_handler) rt_ioctl_siwfrag, /* SIOCSIWFRAG */
++ (iw_handler) rt_ioctl_giwfrag, /* SIOCGIWFRAG */
++ (iw_handler) NULL, /* SIOCSIWTXPOW */
++ (iw_handler) NULL, /* SIOCGIWTXPOW */
++ (iw_handler) NULL, /* SIOCSIWRETRY */
++ (iw_handler) NULL, /* SIOCGIWRETRY */
++ (iw_handler) rt_ioctl_siwencode, /* SIOCSIWENCODE */
++ (iw_handler) rt_ioctl_giwencode, /* SIOCGIWENCODE */
++ (iw_handler) NULL, /* SIOCSIWPOWER */
++ (iw_handler) NULL, /* SIOCGIWPOWER */
++ (iw_handler) NULL, /* -- hole -- */
++ (iw_handler) NULL, /* -- hole -- */
++#if WIRELESS_EXT > 17
++ (iw_handler) rt_ioctl_siwgenie, /* SIOCSIWGENIE */
++ (iw_handler) rt_ioctl_giwgenie, /* SIOCGIWGENIE */
++ (iw_handler) rt_ioctl_siwauth, /* SIOCSIWAUTH */
++ (iw_handler) rt_ioctl_giwauth, /* SIOCGIWAUTH */
++ (iw_handler) rt_ioctl_siwencodeext, /* SIOCSIWENCODEEXT */
++ (iw_handler) rt_ioctl_giwencodeext, /* SIOCGIWENCODEEXT */
++ (iw_handler) rt_ioctl_siwpmksa, /* SIOCSIWPMKSA */
++#endif
++};
++
++static const iw_handler rt_priv_handlers[] = {
++ (iw_handler) NULL, /* + 0x00 */
++ (iw_handler) NULL, /* + 0x01 */
++#ifndef CONFIG_AP_SUPPORT
++ (iw_handler) rt_ioctl_setparam, /* + 0x02 */
++#else
++ (iw_handler) NULL, /* + 0x02 */
++#endif // CONFIG_AP_SUPPORT //
++#ifdef DBG
++ (iw_handler) rt_private_ioctl_bbp, /* + 0x03 */
++#else
++ (iw_handler) NULL, /* + 0x03 */
++#endif
++ (iw_handler) NULL, /* + 0x04 */
++ (iw_handler) NULL, /* + 0x05 */
++ (iw_handler) NULL, /* + 0x06 */
++ (iw_handler) NULL, /* + 0x07 */
++ (iw_handler) NULL, /* + 0x08 */
++ (iw_handler) rt_private_get_statistics, /* + 0x09 */
++ (iw_handler) NULL, /* + 0x0A */
++ (iw_handler) NULL, /* + 0x0B */
++ (iw_handler) NULL, /* + 0x0C */
++ (iw_handler) NULL, /* + 0x0D */
++ (iw_handler) NULL, /* + 0x0E */
++ (iw_handler) NULL, /* + 0x0F */
++ (iw_handler) NULL, /* + 0x10 */
++ (iw_handler) rt_private_show, /* + 0x11 */
++ (iw_handler) NULL, /* + 0x12 */
++ (iw_handler) NULL, /* + 0x13 */
++ (iw_handler) NULL, /* + 0x15 */
++ (iw_handler) NULL, /* + 0x17 */
++ (iw_handler) NULL, /* + 0x18 */
++};
++
++const struct iw_handler_def rt28xx_iw_handler_def =
++{
++#define N(a) (sizeof (a) / sizeof (a[0]))
++ .standard = (iw_handler *) rt_handler,
++ .num_standard = sizeof(rt_handler) / sizeof(iw_handler),
++ .private = (iw_handler *) rt_priv_handlers,
++ .num_private = N(rt_priv_handlers),
++ .private_args = (struct iw_priv_args *) privtab,
++ .num_private_args = N(privtab),
++#if IW_HANDLER_VERSION >= 7
++ .get_wireless_stats = rt28xx_get_wireless_stats,
++#endif
++};
++
++INT RTMPSetInformation(
++ IN PRTMP_ADAPTER pAdapter,
++ IN OUT struct ifreq *rq,
++ IN INT cmd)
++{
++ struct iwreq *wrq = (struct iwreq *) rq;
++ NDIS_802_11_SSID Ssid;
++ NDIS_802_11_MAC_ADDRESS Bssid;
++ RT_802_11_PHY_MODE PhyMode;
++ RT_802_11_STA_CONFIG StaConfig;
++ NDIS_802_11_RATES aryRates;
++ RT_802_11_PREAMBLE Preamble;
++ NDIS_802_11_WEP_STATUS WepStatus;
++ NDIS_802_11_AUTHENTICATION_MODE AuthMode = Ndis802_11AuthModeMax;
++ NDIS_802_11_NETWORK_INFRASTRUCTURE BssType;
++ NDIS_802_11_RTS_THRESHOLD RtsThresh;
++ NDIS_802_11_FRAGMENTATION_THRESHOLD FragThresh;
++ NDIS_802_11_POWER_MODE PowerMode;
++ PNDIS_802_11_KEY pKey = NULL;
++ PNDIS_802_11_WEP pWepKey =NULL;
++ PNDIS_802_11_REMOVE_KEY pRemoveKey = NULL;
++ NDIS_802_11_CONFIGURATION Config, *pConfig = NULL;
++ NDIS_802_11_NETWORK_TYPE NetType;
++ ULONG Now;
++ UINT KeyIdx = 0;
++ INT Status = NDIS_STATUS_SUCCESS, MaxPhyMode = PHY_11G;
++ ULONG PowerTemp;
++ BOOLEAN RadioState;
++ BOOLEAN StateMachineTouched = FALSE;
++#ifdef DOT11_N_SUPPORT
++ OID_SET_HT_PHYMODE HT_PhyMode; //11n ,kathy
++#endif // DOT11_N_SUPPORT //
++#ifdef WPA_SUPPLICANT_SUPPORT
++ PNDIS_802_11_PMKID pPmkId = NULL;
++ BOOLEAN IEEE8021xState = FALSE;
++ BOOLEAN IEEE8021x_required_keys = FALSE;
++ UCHAR wpa_supplicant_enable = 0;
++#endif // WPA_SUPPLICANT_SUPPORT //
++
++#ifdef SNMP_SUPPORT
++ TX_RTY_CFG_STRUC tx_rty_cfg;
++ ULONG ShortRetryLimit, LongRetryLimit;
++ UCHAR ctmp;
++#endif // SNMP_SUPPORT //
++
++
++
++#ifdef DOT11_N_SUPPORT
++ MaxPhyMode = PHY_11N_5G;
++#endif // DOT11_N_SUPPORT //
++
++
++ DBGPRINT(RT_DEBUG_TRACE, ("-->RTMPSetInformation(), 0x%08x\n", cmd&0x7FFF));
++ switch(cmd & 0x7FFF) {
++ case RT_OID_802_11_COUNTRY_REGION:
++ if (wrq->u.data.length < sizeof(UCHAR))
++ Status = -EINVAL;
++ // Only avaliable when EEPROM not programming
++ else if (!(pAdapter->CommonCfg.CountryRegion & 0x80) && !(pAdapter->CommonCfg.CountryRegionForABand & 0x80))
++ {
++ ULONG Country;
++ UCHAR TmpPhy;
++
++ Status = copy_from_user(&Country, wrq->u.data.pointer, wrq->u.data.length);
++ pAdapter->CommonCfg.CountryRegion = (UCHAR)(Country & 0x000000FF);
++ pAdapter->CommonCfg.CountryRegionForABand = (UCHAR)((Country >> 8) & 0x000000FF);
++ TmpPhy = pAdapter->CommonCfg.PhyMode;
++ pAdapter->CommonCfg.PhyMode = 0xff;
++ // Build all corresponding channel information
++ RTMPSetPhyMode(pAdapter, TmpPhy);
++#ifdef DOT11_N_SUPPORT
++ SetCommonHT(pAdapter);
++#endif // DOT11_N_SUPPORT //
++ DBGPRINT(RT_DEBUG_TRACE, ("Set::RT_OID_802_11_COUNTRY_REGION (A:%d B/G:%d)\n", pAdapter->CommonCfg.CountryRegionForABand,
++ pAdapter->CommonCfg.CountryRegion));
++ }
++ break;
++ case OID_802_11_BSSID_LIST_SCAN:
++ #ifdef RALINK_ATE
++ if (ATE_ON(pAdapter))
++ {
++ DBGPRINT(RT_DEBUG_TRACE, ("The driver is in ATE mode now\n"));
++ break;
++ }
++#endif // RALINK_ATE //
++ Now = jiffies;
++ DBGPRINT(RT_DEBUG_TRACE, ("Set::OID_802_11_BSSID_LIST_SCAN, TxCnt = %d \n", pAdapter->RalinkCounters.LastOneSecTotalTxCount));
++
++ if (MONITOR_ON(pAdapter))
++ {
++ DBGPRINT(RT_DEBUG_TRACE, ("!!! Driver is in Monitor Mode now !!!\n"));
++ break;
++ }
++
++ //Benson add 20080527, when radio off, sta don't need to scan
++ if (RTMP_TEST_FLAG(pAdapter, fRTMP_ADAPTER_RADIO_OFF))
++ break;
++
++ if (RTMP_TEST_FLAG(pAdapter, fRTMP_ADAPTER_BSS_SCAN_IN_PROGRESS))
++ {
++ DBGPRINT(RT_DEBUG_TRACE, ("!!! Driver is scanning now !!!\n"));
++ pAdapter->StaCfg.bScanReqIsFromWebUI = TRUE;
++ Status = NDIS_STATUS_SUCCESS;
++ break;
++ }
++
++ if (pAdapter->RalinkCounters.LastOneSecTotalTxCount > 100)
++ {
++ DBGPRINT(RT_DEBUG_TRACE, ("!!! Link UP, ignore this set::OID_802_11_BSSID_LIST_SCAN\n"));
++ Status = NDIS_STATUS_SUCCESS;
++ pAdapter->StaCfg.ScanCnt = 99; // Prevent auto scan triggered by this OID
++ break;
++ }
++
++ if ((OPSTATUS_TEST_FLAG(pAdapter, fOP_STATUS_MEDIA_STATE_CONNECTED)) &&
++ ((pAdapter->StaCfg.AuthMode == Ndis802_11AuthModeWPA) ||
++ (pAdapter->StaCfg.AuthMode == Ndis802_11AuthModeWPAPSK) ||
++ (pAdapter->StaCfg.AuthMode == Ndis802_11AuthModeWPA2) ||
++ (pAdapter->StaCfg.AuthMode == Ndis802_11AuthModeWPA2PSK)) &&
++ (pAdapter->StaCfg.PortSecured == WPA_802_1X_PORT_NOT_SECURED))
++ {
++ DBGPRINT(RT_DEBUG_TRACE, ("!!! Link UP, Port Not Secured! ignore this set::OID_802_11_BSSID_LIST_SCAN\n"));
++ Status = NDIS_STATUS_SUCCESS;
++ pAdapter->StaCfg.ScanCnt = 99; // Prevent auto scan triggered by this OID
++ break;
++ }
++
++
++ if (pAdapter->Mlme.CntlMachine.CurrState != CNTL_IDLE)
++ {
++ RT28XX_MLME_RESET_STATE_MACHINE(pAdapter);
++ DBGPRINT(RT_DEBUG_TRACE, ("!!! MLME busy, reset MLME state machine !!!\n"));
++ }
++
++ // tell CNTL state machine to call NdisMSetInformationComplete() after completing
++ // this request, because this request is initiated by NDIS.
++ pAdapter->MlmeAux.CurrReqIsFromNdis = FALSE;
++ // Reset allowed scan retries
++ pAdapter->StaCfg.ScanCnt = 0;
++ pAdapter->StaCfg.LastScanTime = Now;
++
++ pAdapter->StaCfg.bScanReqIsFromWebUI = TRUE;
++ RTMP_SET_FLAG(pAdapter, fRTMP_ADAPTER_BSS_SCAN_IN_PROGRESS);
++ MlmeEnqueue(pAdapter,
++ MLME_CNTL_STATE_MACHINE,
++ OID_802_11_BSSID_LIST_SCAN,
++ 0,
++ NULL);
++
++ Status = NDIS_STATUS_SUCCESS;
++ StateMachineTouched = TRUE;
++ break;
++ case OID_802_11_SSID:
++ if (wrq->u.data.length != sizeof(NDIS_802_11_SSID))
++ Status = -EINVAL;
++ else
++ {
++ PCHAR pSsidString = NULL;
++ Status = copy_from_user(&Ssid, wrq->u.data.pointer, wrq->u.data.length);
++
++ DBGPRINT(RT_DEBUG_TRACE, ("Set::OID_802_11_SSID (Len=%d,Ssid=%s)\n", Ssid.SsidLength, Ssid.Ssid));
++ if (Ssid.SsidLength > MAX_LEN_OF_SSID)
++ Status = -EINVAL;
++ else
++ {
++ if (Ssid.SsidLength == 0)
++ {
++ Set_SSID_Proc(pAdapter, "");
++ }
++ else
++ {
++ pSsidString = (CHAR *) kmalloc(MAX_LEN_OF_SSID+1, MEM_ALLOC_FLAG);
++ if (pSsidString)
++ {
++ NdisZeroMemory(pSsidString, MAX_LEN_OF_SSID+1);
++ NdisMoveMemory(pSsidString, Ssid.Ssid, Ssid.SsidLength);
++ Set_SSID_Proc(pAdapter, pSsidString);
++ kfree(pSsidString);
++ }
++ else
++ Status = -ENOMEM;
++ }
++ }
++ }
++ break;
++ case OID_802_11_BSSID:
++#ifdef RALINK_ATE
++ if (ATE_ON(pAdapter))
++ {
++ DBGPRINT(RT_DEBUG_TRACE, ("The driver is in ATE mode now\n"));
++ break;
++ }
++#endif // RALINK_ATE //
++ if (wrq->u.data.length != sizeof(NDIS_802_11_MAC_ADDRESS))
++ Status = -EINVAL;
++ else
++ {
++ Status = copy_from_user(&Bssid, wrq->u.data.pointer, wrq->u.data.length);
++
++ // tell CNTL state machine to call NdisMSetInformationComplete() after completing
++ // this request, because this request is initiated by NDIS.
++ pAdapter->MlmeAux.CurrReqIsFromNdis = FALSE;
++
++ // Prevent to connect AP again in STAMlmePeriodicExec
++ pAdapter->MlmeAux.AutoReconnectSsidLen= 32;
++
++ // Reset allowed scan retries
++ pAdapter->StaCfg.ScanCnt = 0;
++
++ if (pAdapter->Mlme.CntlMachine.CurrState != CNTL_IDLE)
++ {
++ RT28XX_MLME_RESET_STATE_MACHINE(pAdapter);
++ DBGPRINT(RT_DEBUG_TRACE, ("!!! MLME busy, reset MLME state machine !!!\n"));
++ }
++ MlmeEnqueue(pAdapter,
++ MLME_CNTL_STATE_MACHINE,
++ OID_802_11_BSSID,
++ sizeof(NDIS_802_11_MAC_ADDRESS),
++ (VOID *)&Bssid);
++ Status = NDIS_STATUS_SUCCESS;
++ StateMachineTouched = TRUE;
++
++ DBGPRINT(RT_DEBUG_TRACE, ("Set::OID_802_11_BSSID %02x:%02x:%02x:%02x:%02x:%02x\n",
++ Bssid[0], Bssid[1], Bssid[2], Bssid[3], Bssid[4], Bssid[5]));
++ }
++ break;
++ case RT_OID_802_11_RADIO:
++ if (wrq->u.data.length != sizeof(BOOLEAN))
++ Status = -EINVAL;
++ else
++ {
++ Status = copy_from_user(&RadioState, wrq->u.data.pointer, wrq->u.data.length);
++ DBGPRINT(RT_DEBUG_TRACE, ("Set::RT_OID_802_11_RADIO (=%d)\n", RadioState));
++ if (pAdapter->StaCfg.bSwRadio != RadioState)
++ {
++ pAdapter->StaCfg.bSwRadio = RadioState;
++ if (pAdapter->StaCfg.bRadio != (pAdapter->StaCfg.bHwRadio && pAdapter->StaCfg.bSwRadio))
++ {
++ pAdapter->StaCfg.bRadio = (pAdapter->StaCfg.bHwRadio && pAdapter->StaCfg.bSwRadio);
++ if (pAdapter->StaCfg.bRadio == TRUE)
++ {
++ MlmeRadioOn(pAdapter);
++ // Update extra information
++ pAdapter->ExtraInfo = EXTRA_INFO_CLEAR;
++ }
++ else
++ {
++ MlmeRadioOff(pAdapter);
++ // Update extra information
++ pAdapter->ExtraInfo = SW_RADIO_OFF;
++ }
++ }
++ }
++ }
++ break;
++ case RT_OID_802_11_PHY_MODE:
++ if (wrq->u.data.length != sizeof(RT_802_11_PHY_MODE))
++ Status = -EINVAL;
++ else
++ {
++ Status = copy_from_user(&PhyMode, wrq->u.data.pointer, wrq->u.data.length);
++ if (PhyMode <= MaxPhyMode)
++ {
++ RTMPSetPhyMode(pAdapter, PhyMode);
++#ifdef DOT11_N_SUPPORT
++ SetCommonHT(pAdapter);
++#endif // DOT11_N_SUPPORT //
++ }
++ DBGPRINT(RT_DEBUG_TRACE, ("Set::RT_OID_802_11_PHY_MODE (=%d)\n", PhyMode));
++ }
++ break;
++ case RT_OID_802_11_STA_CONFIG:
++ if (wrq->u.data.length != sizeof(RT_802_11_STA_CONFIG))
++ Status = -EINVAL;
++ else
++ {
++ Status = copy_from_user(&StaConfig, wrq->u.data.pointer, wrq->u.data.length);
++ pAdapter->CommonCfg.bEnableTxBurst = StaConfig.EnableTxBurst;
++ pAdapter->CommonCfg.UseBGProtection = StaConfig.UseBGProtection;
++ pAdapter->CommonCfg.bUseShortSlotTime = 1; // 2003-10-30 always SHORT SLOT capable
++ if ((pAdapter->CommonCfg.PhyMode != StaConfig.AdhocMode) &&
++ (StaConfig.AdhocMode <= MaxPhyMode))
++ {
++ // allow dynamic change of "USE OFDM rate or not" in ADHOC mode
++ // if setting changed, need to reset current TX rate as well as BEACON frame format
++ if (pAdapter->StaCfg.BssType == BSS_ADHOC)
++ {
++ pAdapter->CommonCfg.PhyMode = StaConfig.AdhocMode;
++ RTMPSetPhyMode(pAdapter, PhyMode);
++ MlmeUpdateTxRates(pAdapter, FALSE, 0);
++ MakeIbssBeacon(pAdapter); // re-build BEACON frame
++ AsicEnableIbssSync(pAdapter); // copy to on-chip memory
++ }
++ }
++ DBGPRINT(RT_DEBUG_TRACE, ("Set::RT_OID_802_11_SET_STA_CONFIG (Burst=%d, Protection=%ld,ShortSlot=%d\n",
++ pAdapter->CommonCfg.bEnableTxBurst,
++ pAdapter->CommonCfg.UseBGProtection,
++ pAdapter->CommonCfg.bUseShortSlotTime));
++ }
++ break;
++ case OID_802_11_DESIRED_RATES:
++ if (wrq->u.data.length != sizeof(NDIS_802_11_RATES))
++ Status = -EINVAL;
++ else
++ {
++ Status = copy_from_user(&aryRates, wrq->u.data.pointer, wrq->u.data.length);
++ NdisZeroMemory(pAdapter->CommonCfg.DesireRate, MAX_LEN_OF_SUPPORTED_RATES);
++ NdisMoveMemory(pAdapter->CommonCfg.DesireRate, &aryRates, sizeof(NDIS_802_11_RATES));
++ DBGPRINT(RT_DEBUG_TRACE, ("Set::OID_802_11_DESIRED_RATES (%02x,%02x,%02x,%02x,%02x,%02x,%02x,%02x)\n",
++ pAdapter->CommonCfg.DesireRate[0],pAdapter->CommonCfg.DesireRate[1],
++ pAdapter->CommonCfg.DesireRate[2],pAdapter->CommonCfg.DesireRate[3],
++ pAdapter->CommonCfg.DesireRate[4],pAdapter->CommonCfg.DesireRate[5],
++ pAdapter->CommonCfg.DesireRate[6],pAdapter->CommonCfg.DesireRate[7] ));
++ // Changing DesiredRate may affect the MAX TX rate we used to TX frames out
++ MlmeUpdateTxRates(pAdapter, FALSE, 0);
++ }
++ break;
++ case RT_OID_802_11_PREAMBLE:
++ if (wrq->u.data.length != sizeof(RT_802_11_PREAMBLE))
++ Status = -EINVAL;
++ else
++ {
++ Status = copy_from_user(&Preamble, wrq->u.data.pointer, wrq->u.data.length);
++ if (Preamble == Rt802_11PreambleShort)
++ {
++ pAdapter->CommonCfg.TxPreamble = Preamble;
++ MlmeSetTxPreamble(pAdapter, Rt802_11PreambleShort);
++ }
++ else if ((Preamble == Rt802_11PreambleLong) || (Preamble == Rt802_11PreambleAuto))
++ {
++ // if user wants AUTO, initialize to LONG here, then change according to AP's
++ // capability upon association.
++ pAdapter->CommonCfg.TxPreamble = Preamble;
++ MlmeSetTxPreamble(pAdapter, Rt802_11PreambleLong);
++ }
++ else
++ {
++ Status = -EINVAL;
++ break;
++ }
++ DBGPRINT(RT_DEBUG_TRACE, ("Set::RT_OID_802_11_PREAMBLE (=%d)\n", Preamble));
++ }
++ break;
++ case OID_802_11_WEP_STATUS:
++ if (wrq->u.data.length != sizeof(NDIS_802_11_WEP_STATUS))
++ Status = -EINVAL;
++ else
++ {
++ Status = copy_from_user(&WepStatus, wrq->u.data.pointer, wrq->u.data.length);
++ // Since TKIP, AES, WEP are all supported. It should not have any invalid setting
++ if (WepStatus <= Ndis802_11Encryption3KeyAbsent)
++ {
++ if (pAdapter->StaCfg.WepStatus != WepStatus)
++ {
++ // Config has changed
++ pAdapter->bConfigChanged = TRUE;
++ }
++ pAdapter->StaCfg.WepStatus = WepStatus;
++ pAdapter->StaCfg.OrigWepStatus = WepStatus;
++ pAdapter->StaCfg.PairCipher = WepStatus;
++ pAdapter->StaCfg.GroupCipher = WepStatus;
++ }
++ else
++ {
++ Status = -EINVAL;
++ break;
++ }
++ DBGPRINT(RT_DEBUG_TRACE, ("Set::OID_802_11_WEP_STATUS (=%d)\n",WepStatus));
++ }
++ break;
++ case OID_802_11_AUTHENTICATION_MODE:
++ if (wrq->u.data.length != sizeof(NDIS_802_11_AUTHENTICATION_MODE))
++ Status = -EINVAL;
++ else
++ {
++ Status = copy_from_user(&AuthMode, wrq->u.data.pointer, wrq->u.data.length);
++ if (AuthMode > Ndis802_11AuthModeMax)
++ {
++ Status = -EINVAL;
++ break;
++ }
++ else
++ {
++ if (pAdapter->StaCfg.AuthMode != AuthMode)
++ {
++ // Config has changed
++ pAdapter->bConfigChanged = TRUE;
++ }
++ pAdapter->StaCfg.AuthMode = AuthMode;
++ }
++ pAdapter->StaCfg.PortSecured = WPA_802_1X_PORT_NOT_SECURED;
++ DBGPRINT(RT_DEBUG_TRACE, ("Set::OID_802_11_AUTHENTICATION_MODE (=%d) \n",pAdapter->StaCfg.AuthMode));
++ }
++ break;
++ case OID_802_11_INFRASTRUCTURE_MODE:
++ if (wrq->u.data.length != sizeof(NDIS_802_11_NETWORK_INFRASTRUCTURE))
++ Status = -EINVAL;
++ else
++ {
++ Status = copy_from_user(&BssType, wrq->u.data.pointer, wrq->u.data.length);
++
++ if (BssType == Ndis802_11IBSS)
++ Set_NetworkType_Proc(pAdapter, "Adhoc");
++ else if (BssType == Ndis802_11Infrastructure)
++ Set_NetworkType_Proc(pAdapter, "Infra");
++ else if (BssType == Ndis802_11Monitor)
++ Set_NetworkType_Proc(pAdapter, "Monitor");
++ else
++ {
++ Status = -EINVAL;
++ DBGPRINT(RT_DEBUG_TRACE, ("Set::OID_802_11_INFRASTRUCTURE_MODE (unknown)\n"));
++ }
++ }
++ break;
++ case OID_802_11_REMOVE_WEP:
++ DBGPRINT(RT_DEBUG_TRACE, ("Set::OID_802_11_REMOVE_WEP\n"));
++ if (wrq->u.data.length != sizeof(NDIS_802_11_KEY_INDEX))
++ {
++ Status = -EINVAL;
++ }
++ else
++ {
++ KeyIdx = *(NDIS_802_11_KEY_INDEX *) wrq->u.data.pointer;
++
++ if (KeyIdx & 0x80000000)
++ {
++ // Should never set default bit when remove key
++ Status = -EINVAL;
++ }
++ else
++ {
++ KeyIdx = KeyIdx & 0x0fffffff;
++ if (KeyIdx >= 4){
++ Status = -EINVAL;
++ }
++ else
++ {
++ pAdapter->SharedKey[BSS0][KeyIdx].KeyLen = 0;
++ pAdapter->SharedKey[BSS0][KeyIdx].CipherAlg = CIPHER_NONE;
++ AsicRemoveSharedKeyEntry(pAdapter, 0, (UCHAR)KeyIdx);
++ }
++ }
++ }
++ break;
++ case RT_OID_802_11_RESET_COUNTERS:
++ NdisZeroMemory(&pAdapter->WlanCounters, sizeof(COUNTER_802_11));
++ NdisZeroMemory(&pAdapter->Counters8023, sizeof(COUNTER_802_3));
++ NdisZeroMemory(&pAdapter->RalinkCounters, sizeof(COUNTER_RALINK));
++ pAdapter->Counters8023.RxNoBuffer = 0;
++ pAdapter->Counters8023.GoodReceives = 0;
++ pAdapter->Counters8023.RxNoBuffer = 0;
++#ifdef RT2870
++ pAdapter->BulkOutComplete = 0;
++ pAdapter->BulkOutCompleteOther= 0;
++ pAdapter->BulkOutCompleteCancel = 0;
++ pAdapter->BulkOutReq = 0;
++ pAdapter->BulkInReq= 0;
++ pAdapter->BulkInComplete = 0;
++ pAdapter->BulkInCompleteFail = 0;
++#endif // RT2870 //
++ DBGPRINT(RT_DEBUG_TRACE, ("Set::RT_OID_802_11_RESET_COUNTERS \n"));
++ break;
++ case OID_802_11_RTS_THRESHOLD:
++ if (wrq->u.data.length != sizeof(NDIS_802_11_RTS_THRESHOLD))
++ Status = -EINVAL;
++ else
++ {
++ Status = copy_from_user(&RtsThresh, wrq->u.data.pointer, wrq->u.data.length);
++ if (RtsThresh > MAX_RTS_THRESHOLD)
++ Status = -EINVAL;
++ else
++ pAdapter->CommonCfg.RtsThreshold = (USHORT)RtsThresh;
++ }
++ DBGPRINT(RT_DEBUG_TRACE, ("Set::OID_802_11_RTS_THRESHOLD (=%ld)\n",RtsThresh));
++ break;
++ case OID_802_11_FRAGMENTATION_THRESHOLD:
++ if (wrq->u.data.length != sizeof(NDIS_802_11_FRAGMENTATION_THRESHOLD))
++ Status = -EINVAL;
++ else
++ {
++ Status = copy_from_user(&FragThresh, wrq->u.data.pointer, wrq->u.data.length);
++ pAdapter->CommonCfg.bUseZeroToDisableFragment = FALSE;
++ if (FragThresh > MAX_FRAG_THRESHOLD || FragThresh < MIN_FRAG_THRESHOLD)
++ {
++ if (FragThresh == 0)
++ {
++ pAdapter->CommonCfg.FragmentThreshold = MAX_FRAG_THRESHOLD;
++ pAdapter->CommonCfg.bUseZeroToDisableFragment = TRUE;
++ }
++ else
++ Status = -EINVAL;
++ }
++ else
++ pAdapter->CommonCfg.FragmentThreshold = (USHORT)FragThresh;
++ }
++ DBGPRINT(RT_DEBUG_TRACE, ("Set::OID_802_11_FRAGMENTATION_THRESHOLD (=%ld) \n",FragThresh));
++ break;
++ case OID_802_11_POWER_MODE:
++ if (wrq->u.data.length != sizeof(NDIS_802_11_POWER_MODE))
++ Status = -EINVAL;
++ else
++ {
++ Status = copy_from_user(&PowerMode, wrq->u.data.pointer, wrq->u.data.length);
++ if (PowerMode == Ndis802_11PowerModeCAM)
++ Set_PSMode_Proc(pAdapter, "CAM");
++ else if (PowerMode == Ndis802_11PowerModeMAX_PSP)
++ Set_PSMode_Proc(pAdapter, "Max_PSP");
++ else if (PowerMode == Ndis802_11PowerModeFast_PSP)
++ Set_PSMode_Proc(pAdapter, "Fast_PSP");
++ else if (PowerMode == Ndis802_11PowerModeLegacy_PSP)
++ Set_PSMode_Proc(pAdapter, "Legacy_PSP");
++ else
++ Status = -EINVAL;
++ }
++ DBGPRINT(RT_DEBUG_TRACE, ("Set::OID_802_11_POWER_MODE (=%d)\n",PowerMode));
++ break;
++ case RT_OID_802_11_TX_POWER_LEVEL_1:
++ if (wrq->u.data.length < sizeof(ULONG))
++ Status = -EINVAL;
++ else
++ {
++ Status = copy_from_user(&PowerTemp, wrq->u.data.pointer, wrq->u.data.length);
++ if (PowerTemp > 100)
++ PowerTemp = 0xffffffff; // AUTO
++ pAdapter->CommonCfg.TxPowerDefault = PowerTemp; //keep current setting.
++ pAdapter->CommonCfg.TxPowerPercentage = pAdapter->CommonCfg.TxPowerDefault;
++ DBGPRINT(RT_DEBUG_TRACE, ("Set::RT_OID_802_11_TX_POWER_LEVEL_1 (=%ld)\n", pAdapter->CommonCfg.TxPowerPercentage));
++ }
++ break;
++ case OID_802_11_NETWORK_TYPE_IN_USE:
++ if (wrq->u.data.length != sizeof(NDIS_802_11_NETWORK_TYPE))
++ Status = -EINVAL;
++ else
++ {
++ Status = copy_from_user(&NetType, wrq->u.data.pointer, wrq->u.data.length);
++
++ if (NetType == Ndis802_11DS)
++ RTMPSetPhyMode(pAdapter, PHY_11B);
++ else if (NetType == Ndis802_11OFDM24)
++ RTMPSetPhyMode(pAdapter, PHY_11BG_MIXED);
++ else if (NetType == Ndis802_11OFDM5)
++ RTMPSetPhyMode(pAdapter, PHY_11A);
++ else
++ Status = -EINVAL;
++#ifdef DOT11_N_SUPPORT
++ if (Status == NDIS_STATUS_SUCCESS)
++ SetCommonHT(pAdapter);
++#endif // DOT11_N_SUPPORT //
++ DBGPRINT(RT_DEBUG_TRACE, ("Set::OID_802_11_NETWORK_TYPE_IN_USE (=%d)\n",NetType));
++ }
++ break;
++ // For WPA PSK PMK key
++ case RT_OID_802_11_ADD_WPA:
++ pKey = kmalloc(wrq->u.data.length, MEM_ALLOC_FLAG);
++ if(pKey == NULL)
++ {
++ Status = -ENOMEM;
++ break;
++ }
++
++ Status = copy_from_user(pKey, wrq->u.data.pointer, wrq->u.data.length);
++ if (pKey->Length != wrq->u.data.length)
++ {
++ Status = -EINVAL;
++ DBGPRINT(RT_DEBUG_TRACE, ("Set::RT_OID_802_11_ADD_WPA, Failed!!\n"));
++ }
++ else
++ {
++ if ((pAdapter->StaCfg.AuthMode != Ndis802_11AuthModeWPAPSK) &&
++ (pAdapter->StaCfg.AuthMode != Ndis802_11AuthModeWPA2PSK) &&
++ (pAdapter->StaCfg.AuthMode != Ndis802_11AuthModeWPANone) )
++ {
++ Status = -EOPNOTSUPP;
++ DBGPRINT(RT_DEBUG_TRACE, ("Set::RT_OID_802_11_ADD_WPA, Failed!! [AuthMode != WPAPSK/WPA2PSK/WPANONE]\n"));
++ }
++ else if ((pAdapter->StaCfg.AuthMode == Ndis802_11AuthModeWPAPSK) ||
++ (pAdapter->StaCfg.AuthMode == Ndis802_11AuthModeWPA2PSK) ||
++ (pAdapter->StaCfg.AuthMode == Ndis802_11AuthModeWPANone) ) // Only for WPA PSK mode
++ {
++ NdisMoveMemory(pAdapter->StaCfg.PMK, &pKey->KeyMaterial, pKey->KeyLength);
++ // Use RaConfig as PSK agent.
++ // Start STA supplicant state machine
++ if (pAdapter->StaCfg.AuthMode != Ndis802_11AuthModeWPANone)
++ pAdapter->StaCfg.WpaState = SS_START;
++
++ DBGPRINT(RT_DEBUG_TRACE, ("Set::RT_OID_802_11_ADD_WPA (id=0x%x, Len=%d-byte)\n", pKey->KeyIndex, pKey->KeyLength));
++ }
++ else
++ {
++ pAdapter->StaCfg.WpaState = SS_NOTUSE;
++ DBGPRINT(RT_DEBUG_TRACE, ("Set::RT_OID_802_11_ADD_WPA (id=0x%x, Len=%d-byte)\n", pKey->KeyIndex, pKey->KeyLength));
++ }
++ }
++ kfree(pKey);
++ break;
++ case OID_802_11_REMOVE_KEY:
++ pRemoveKey = kmalloc(wrq->u.data.length, MEM_ALLOC_FLAG);
++ if(pRemoveKey == NULL)
++ {
++ Status = -ENOMEM;
++ break;
++ }
++
++ Status = copy_from_user(pRemoveKey, wrq->u.data.pointer, wrq->u.data.length);
++ if (pRemoveKey->Length != wrq->u.data.length)
++ {
++ Status = -EINVAL;
++ DBGPRINT(RT_DEBUG_TRACE, ("Set::OID_802_11_REMOVE_KEY, Failed!!\n"));
++ }
++ else
++ {
++ if (pAdapter->StaCfg.AuthMode >= Ndis802_11AuthModeWPA)
++ {
++ RTMPWPARemoveKeyProc(pAdapter, pRemoveKey);
++ DBGPRINT(RT_DEBUG_TRACE, ("Set::OID_802_11_REMOVE_KEY, Remove WPA Key!!\n"));
++ }
++ else
++ {
++ KeyIdx = pRemoveKey->KeyIndex;
++
++ if (KeyIdx & 0x80000000)
++ {
++ // Should never set default bit when remove key
++ Status = -EINVAL;
++ DBGPRINT(RT_DEBUG_TRACE, ("Set::OID_802_11_REMOVE_KEY, Failed!!(Should never set default bit when remove key)\n"));
++ }
++ else
++ {
++ KeyIdx = KeyIdx & 0x0fffffff;
++ if (KeyIdx > 3)
++ {
++ Status = -EINVAL;
++ DBGPRINT(RT_DEBUG_TRACE, ("Set::OID_802_11_REMOVE_KEY, Failed!!(KeyId[%d] out of range)\n", KeyIdx));
++ }
++ else
++ {
++ pAdapter->SharedKey[BSS0][KeyIdx].KeyLen = 0;
++ pAdapter->SharedKey[BSS0][KeyIdx].CipherAlg = CIPHER_NONE;
++ AsicRemoveSharedKeyEntry(pAdapter, 0, (UCHAR)KeyIdx);
++ DBGPRINT(RT_DEBUG_TRACE, ("Set::OID_802_11_REMOVE_KEY (id=0x%x, Len=%d-byte)\n", pRemoveKey->KeyIndex, pRemoveKey->Length));
++ }
++ }
++ }
++ }
++ kfree(pRemoveKey);
++ break;
++ // New for WPA
++ case OID_802_11_ADD_KEY:
++ pKey = kmalloc(wrq->u.data.length, MEM_ALLOC_FLAG);
++ if(pKey == NULL)
++ {
++ Status = -ENOMEM;
++ break;
++ }
++ Status = copy_from_user(pKey, wrq->u.data.pointer, wrq->u.data.length);
++ if (pKey->Length != wrq->u.data.length)
++ {
++ Status = -EINVAL;
++ DBGPRINT(RT_DEBUG_TRACE, ("Set::OID_802_11_ADD_KEY, Failed!!\n"));
++ }
++ else
++ {
++ RTMPAddKey(pAdapter, pKey);
++ DBGPRINT(RT_DEBUG_TRACE, ("Set::OID_802_11_ADD_KEY (id=0x%x, Len=%d-byte)\n", pKey->KeyIndex, pKey->KeyLength));
++ }
++ kfree(pKey);
++ break;
++ case OID_802_11_CONFIGURATION:
++ if (wrq->u.data.length != sizeof(NDIS_802_11_CONFIGURATION))
++ Status = -EINVAL;
++ else
++ {
++ Status = copy_from_user(&Config, wrq->u.data.pointer, wrq->u.data.length);
++ pConfig = &Config;
++
++ if ((pConfig->BeaconPeriod >= 20) && (pConfig->BeaconPeriod <=400))
++ pAdapter->CommonCfg.BeaconPeriod = (USHORT) pConfig->BeaconPeriod;
++
++ pAdapter->StaActive.AtimWin = (USHORT) pConfig->ATIMWindow;
++ MAP_KHZ_TO_CHANNEL_ID(pConfig->DSConfig, pAdapter->CommonCfg.Channel);
++ //
++ // Save the channel on MlmeAux for CntlOidRTBssidProc used.
++ //
++ pAdapter->MlmeAux.Channel = pAdapter->CommonCfg.Channel;
++
++ DBGPRINT(RT_DEBUG_TRACE, ("Set::OID_802_11_CONFIGURATION (BeacnPeriod=%ld,AtimW=%ld,Ch=%d)\n",
++ pConfig->BeaconPeriod, pConfig->ATIMWindow, pAdapter->CommonCfg.Channel));
++ // Config has changed
++ pAdapter->bConfigChanged = TRUE;
++ }
++ break;
++#ifdef DOT11_N_SUPPORT
++ case RT_OID_802_11_SET_HT_PHYMODE:
++ if (wrq->u.data.length != sizeof(OID_SET_HT_PHYMODE))
++ Status = -EINVAL;
++ else
++ {
++ POID_SET_HT_PHYMODE pHTPhyMode = &HT_PhyMode;
++
++ Status = copy_from_user(&HT_PhyMode, wrq->u.data.pointer, wrq->u.data.length);
++ DBGPRINT(RT_DEBUG_TRACE, ("Set::pHTPhyMode (PhyMode = %d,TransmitNo = %d, HtMode = %d, ExtOffset = %d , MCS = %d, BW = %d, STBC = %d, SHORTGI = %d) \n",
++ pHTPhyMode->PhyMode, pHTPhyMode->TransmitNo,pHTPhyMode->HtMode,pHTPhyMode->ExtOffset,
++ pHTPhyMode->MCS, pHTPhyMode->BW, pHTPhyMode->STBC, pHTPhyMode->SHORTGI));
++ if (pAdapter->CommonCfg.PhyMode >= PHY_11ABGN_MIXED)
++ RTMPSetHT(pAdapter, pHTPhyMode);
++ }
++ DBGPRINT(RT_DEBUG_TRACE, ("Set::RT_OID_802_11_SET_HT_PHYMODE(MCS=%d,BW=%d,SGI=%d,STBC=%d)\n",
++ pAdapter->StaCfg.HTPhyMode.field.MCS, pAdapter->StaCfg.HTPhyMode.field.BW, pAdapter->StaCfg.HTPhyMode.field.ShortGI,
++ pAdapter->StaCfg.HTPhyMode.field.STBC));
++ break;
++#endif // DOT11_N_SUPPORT //
++ case RT_OID_802_11_SET_APSD_SETTING:
++ if (wrq->u.data.length != sizeof(ULONG))
++ Status = -EINVAL;
++ else
++ {
++ ULONG apsd ;
++ Status = copy_from_user(&apsd, wrq->u.data.pointer, wrq->u.data.length);
++
++ /*-------------------------------------------------------------------
++ |B31~B7 | B6~B5 | B4 | B3 | B2 | B1 | B0 |
++ ---------------------------------------------------------------------
++ | Rsvd | Max SP Len | AC_VO | AC_VI | AC_BK | AC_BE | APSD Capable |
++ ---------------------------------------------------------------------*/
++ pAdapter->CommonCfg.bAPSDCapable = (apsd & 0x00000001) ? TRUE : FALSE;
++ pAdapter->CommonCfg.bAPSDAC_BE = ((apsd & 0x00000002) >> 1) ? TRUE : FALSE;
++ pAdapter->CommonCfg.bAPSDAC_BK = ((apsd & 0x00000004) >> 2) ? TRUE : FALSE;
++ pAdapter->CommonCfg.bAPSDAC_VI = ((apsd & 0x00000008) >> 3) ? TRUE : FALSE;
++ pAdapter->CommonCfg.bAPSDAC_VO = ((apsd & 0x00000010) >> 4) ? TRUE : FALSE;
++ pAdapter->CommonCfg.MaxSPLength = (UCHAR)((apsd & 0x00000060) >> 5);
++
++ DBGPRINT(RT_DEBUG_TRACE, ("Set::RT_OID_802_11_SET_APSD_SETTING (apsd=0x%lx, APSDCap=%d, [BE,BK,VI,VO]=[%d/%d/%d/%d], MaxSPLen=%d)\n", apsd, pAdapter->CommonCfg.bAPSDCapable,
++ pAdapter->CommonCfg.bAPSDAC_BE, pAdapter->CommonCfg.bAPSDAC_BK, pAdapter->CommonCfg.bAPSDAC_VI, pAdapter->CommonCfg.bAPSDAC_VO, pAdapter->CommonCfg.MaxSPLength));
++ }
++ break;
++
++ case RT_OID_802_11_SET_APSD_PSM:
++ if (wrq->u.data.length != sizeof(ULONG))
++ Status = -EINVAL;
++ else
++ {
++ // Driver needs to notify AP when PSM changes
++ Status = copy_from_user(&pAdapter->CommonCfg.bAPSDForcePowerSave, wrq->u.data.pointer, wrq->u.data.length);
++ if (pAdapter->CommonCfg.bAPSDForcePowerSave != pAdapter->StaCfg.Psm)
++ {
++ MlmeSetPsmBit(pAdapter, pAdapter->CommonCfg.bAPSDForcePowerSave);
++ RTMPSendNullFrame(pAdapter, pAdapter->CommonCfg.TxRate, TRUE);
++ }
++ DBGPRINT(RT_DEBUG_TRACE, ("Set::RT_OID_802_11_SET_APSD_PSM (bAPSDForcePowerSave:%d)\n", pAdapter->CommonCfg.bAPSDForcePowerSave));
++ }
++ break;
++#ifdef QOS_DLS_SUPPORT
++ case RT_OID_802_11_SET_DLS:
++ if (wrq->u.data.length != sizeof(ULONG))
++ Status = -EINVAL;
++ else
++ {
++ BOOLEAN oldvalue = pAdapter->CommonCfg.bDLSCapable;
++ Status = copy_from_user(&pAdapter->CommonCfg.bDLSCapable, wrq->u.data.pointer, wrq->u.data.length);
++ if (oldvalue && !pAdapter->CommonCfg.bDLSCapable)
++ {
++ int i;
++ // tear down local dls table entry
++ for (i=0; i<MAX_NUM_OF_INIT_DLS_ENTRY; i++)
++ {
++ if (pAdapter->StaCfg.DLSEntry[i].Valid && (pAdapter->StaCfg.DLSEntry[i].Status == DLS_FINISH))
++ {
++ pAdapter->StaCfg.DLSEntry[i].Status = DLS_NONE;
++ pAdapter->StaCfg.DLSEntry[i].Valid = FALSE;
++ RTMPSendDLSTearDownFrame(pAdapter, pAdapter->StaCfg.DLSEntry[i].MacAddr);
++ }
++ }
++
++ // tear down peer dls table entry
++ for (i=MAX_NUM_OF_INIT_DLS_ENTRY; i<MAX_NUM_OF_DLS_ENTRY; i++)
++ {
++ if (pAdapter->StaCfg.DLSEntry[i].Valid && (pAdapter->StaCfg.DLSEntry[i].Status == DLS_FINISH))
++ {
++ pAdapter->StaCfg.DLSEntry[i].Status = DLS_NONE;
++ pAdapter->StaCfg.DLSEntry[i].Valid = FALSE;
++ RTMPSendDLSTearDownFrame(pAdapter, pAdapter->StaCfg.DLSEntry[i].MacAddr);
++ }
++ }
++ }
++
++ DBGPRINT(RT_DEBUG_TRACE,("Set::RT_OID_802_11_SET_DLS (=%d)\n", pAdapter->CommonCfg.bDLSCapable));
++ }
++ break;
++
++ case RT_OID_802_11_SET_DLS_PARAM:
++ if (wrq->u.data.length != sizeof(RT_802_11_DLS_UI))
++ Status = -EINVAL;
++ else
++ {
++ RT_802_11_DLS Dls;
++
++ NdisZeroMemory(&Dls, sizeof(RT_802_11_DLS));
++ RTMPMoveMemory(&Dls, wrq->u.data.pointer, sizeof(RT_802_11_DLS_UI));
++ MlmeEnqueue(pAdapter,
++ MLME_CNTL_STATE_MACHINE,
++ RT_OID_802_11_SET_DLS_PARAM,
++ sizeof(RT_802_11_DLS),
++ &Dls);
++ DBGPRINT(RT_DEBUG_TRACE,("Set::RT_OID_802_11_SET_DLS_PARAM \n"));
++ }
++ break;
++#endif // QOS_DLS_SUPPORT //
++ case RT_OID_802_11_SET_WMM:
++ if (wrq->u.data.length != sizeof(BOOLEAN))
++ Status = -EINVAL;
++ else
++ {
++ Status = copy_from_user(&pAdapter->CommonCfg.bWmmCapable, wrq->u.data.pointer, wrq->u.data.length);
++ DBGPRINT(RT_DEBUG_TRACE, ("Set::RT_OID_802_11_SET_WMM (=%d) \n", pAdapter->CommonCfg.bWmmCapable));
++ }
++ break;
++
++ case OID_802_11_DISASSOCIATE:
++#ifdef RALINK_ATE
++ if (ATE_ON(pAdapter))
++ {
++ DBGPRINT(RT_DEBUG_TRACE, ("The driver is in ATE mode now\n"));
++ break;
++ }
++#endif // RALINK_ATE //
++ //
++ // Set NdisRadioStateOff to TRUE, instead of called MlmeRadioOff.
++ // Later on, NDIS_802_11_BSSID_LIST_EX->NumberOfItems should be 0
++ // when query OID_802_11_BSSID_LIST.
++ //
++ // TRUE: NumberOfItems will set to 0.
++ // FALSE: NumberOfItems no change.
++ //
++ pAdapter->CommonCfg.NdisRadioStateOff = TRUE;
++ // Set to immediately send the media disconnect event
++ pAdapter->MlmeAux.CurrReqIsFromNdis = TRUE;
++ DBGPRINT(RT_DEBUG_TRACE, ("Set::OID_802_11_DISASSOCIATE \n"));
++
++ if (INFRA_ON(pAdapter))
++ {
++ if (pAdapter->Mlme.CntlMachine.CurrState != CNTL_IDLE)
++ {
++ RT28XX_MLME_RESET_STATE_MACHINE(pAdapter);
++ DBGPRINT(RT_DEBUG_TRACE, ("!!! MLME busy, reset MLME state machine !!!\n"));
++ }
++
++ MlmeEnqueue(pAdapter,
++ MLME_CNTL_STATE_MACHINE,
++ OID_802_11_DISASSOCIATE,
++ 0,
++ NULL);
++
++ StateMachineTouched = TRUE;
++ }
++ break;
++
++#ifdef DOT11_N_SUPPORT
++ case RT_OID_802_11_SET_IMME_BA_CAP:
++ if (wrq->u.data.length != sizeof(OID_BACAP_STRUC))
++ Status = -EINVAL;
++ else
++ {
++ OID_BACAP_STRUC Orde ;
++ Status = copy_from_user(&Orde, wrq->u.data.pointer, wrq->u.data.length);
++ if (Orde.Policy > BA_NOTUSE)
++ {
++ Status = NDIS_STATUS_INVALID_DATA;
++ }
++ else if (Orde.Policy == BA_NOTUSE)
++ {
++ pAdapter->CommonCfg.BACapability.field.Policy = BA_NOTUSE;
++ pAdapter->CommonCfg.BACapability.field.MpduDensity = Orde.MpduDensity;
++ pAdapter->CommonCfg.DesiredHtPhy.MpduDensity = Orde.MpduDensity;
++ pAdapter->CommonCfg.DesiredHtPhy.AmsduEnable = Orde.AmsduEnable;
++ pAdapter->CommonCfg.DesiredHtPhy.AmsduSize= Orde.AmsduSize;
++ pAdapter->CommonCfg.DesiredHtPhy.MimoPs= Orde.MMPSmode;
++ pAdapter->CommonCfg.BACapability.field.MMPSmode = Orde.MMPSmode;
++ // UPdata to HT IE
++ pAdapter->CommonCfg.HtCapability.HtCapInfo.MimoPs = Orde.MMPSmode;
++ pAdapter->CommonCfg.HtCapability.HtCapInfo.AMsduSize = Orde.AmsduSize;
++ pAdapter->CommonCfg.HtCapability.HtCapParm.MpduDensity = Orde.MpduDensity;
++ }
++ else
++ {
++ pAdapter->CommonCfg.BACapability.field.AutoBA = Orde.AutoBA;
++ pAdapter->CommonCfg.BACapability.field.Policy = IMMED_BA; // we only support immediate BA.
++ pAdapter->CommonCfg.BACapability.field.MpduDensity = Orde.MpduDensity;
++ pAdapter->CommonCfg.DesiredHtPhy.MpduDensity = Orde.MpduDensity;
++ pAdapter->CommonCfg.DesiredHtPhy.AmsduEnable = Orde.AmsduEnable;
++ pAdapter->CommonCfg.DesiredHtPhy.AmsduSize= Orde.AmsduSize;
++ pAdapter->CommonCfg.DesiredHtPhy.MimoPs = Orde.MMPSmode;
++ pAdapter->CommonCfg.BACapability.field.MMPSmode = Orde.MMPSmode;
++
++ // UPdata to HT IE
++ pAdapter->CommonCfg.HtCapability.HtCapInfo.MimoPs = Orde.MMPSmode;
++ pAdapter->CommonCfg.HtCapability.HtCapInfo.AMsduSize = Orde.AmsduSize;
++ pAdapter->CommonCfg.HtCapability.HtCapParm.MpduDensity = Orde.MpduDensity;
++
++ if (pAdapter->CommonCfg.BACapability.field.RxBAWinLimit > MAX_RX_REORDERBUF)
++ pAdapter->CommonCfg.BACapability.field.RxBAWinLimit = MAX_RX_REORDERBUF;
++
++ }
++
++ pAdapter->CommonCfg.REGBACapability.word = pAdapter->CommonCfg.BACapability.word;
++ DBGPRINT(RT_DEBUG_TRACE, ("Set::(Orde.AutoBA = %d) (Policy=%d)(ReBAWinLimit=%d)(TxBAWinLimit=%d)(AutoMode=%d)\n",Orde.AutoBA, pAdapter->CommonCfg.BACapability.field.Policy,
++ pAdapter->CommonCfg.BACapability.field.RxBAWinLimit,pAdapter->CommonCfg.BACapability.field.TxBAWinLimit, pAdapter->CommonCfg.BACapability.field.AutoBA));
++ DBGPRINT(RT_DEBUG_TRACE, ("Set::(MimoPs = %d)(AmsduEnable = %d) (AmsduSize=%d)(MpduDensity=%d)\n",pAdapter->CommonCfg.DesiredHtPhy.MimoPs, pAdapter->CommonCfg.DesiredHtPhy.AmsduEnable,
++ pAdapter->CommonCfg.DesiredHtPhy.AmsduSize, pAdapter->CommonCfg.DesiredHtPhy.MpduDensity));
++ }
++
++ break;
++ case RT_OID_802_11_ADD_IMME_BA:
++ DBGPRINT(RT_DEBUG_TRACE, (" Set :: RT_OID_802_11_ADD_IMME_BA \n"));
++ if (wrq->u.data.length != sizeof(OID_ADD_BA_ENTRY))
++ Status = -EINVAL;
++ else
++ {
++ UCHAR index;
++ OID_ADD_BA_ENTRY BA;
++ MAC_TABLE_ENTRY *pEntry;
++
++ Status = copy_from_user(&BA, wrq->u.data.pointer, wrq->u.data.length);
++ if (BA.TID > 15)
++ {
++ Status = NDIS_STATUS_INVALID_DATA;
++ break;
++ }
++ else
++ {
++ //BATableInsertEntry
++ //As ad-hoc mode, BA pair is not limited to only BSSID. so add via OID.
++ index = BA.TID;
++ // in ad hoc mode, when adding BA pair, we should insert this entry into MACEntry too
++ pEntry = MacTableLookup(pAdapter, BA.MACAddr);
++ if (!pEntry)
++ {
++ DBGPRINT(RT_DEBUG_TRACE, ("RT_OID_802_11_ADD_IMME_BA. break on no connection.----:%x:%x\n", BA.MACAddr[4], BA.MACAddr[5]));
++ break;
++ }
++ if (BA.IsRecipient == FALSE)
++ {
++ if (pEntry->bIAmBadAtheros == TRUE)
++ pAdapter->CommonCfg.BACapability.field.RxBAWinLimit = 0x10;
++
++ BAOriSessionSetUp(pAdapter, pEntry, index, 0, 100, TRUE);
++ }
++ else
++ {
++ //BATableInsertEntry(pAdapter, pEntry->Aid, BA.MACAddr, 0, 0xffff, BA.TID, BA.nMSDU, BA.IsRecipient);
++ }
++
++ DBGPRINT(RT_DEBUG_TRACE, ("Set::RT_OID_802_11_ADD_IMME_BA. Rec = %d. Mac = %x:%x:%x:%x:%x:%x . \n",
++ BA.IsRecipient, BA.MACAddr[0], BA.MACAddr[1], BA.MACAddr[2], BA.MACAddr[2]
++ , BA.MACAddr[4], BA.MACAddr[5]));
++ }
++ }
++ break;
++
++ case RT_OID_802_11_TEAR_IMME_BA:
++ DBGPRINT(RT_DEBUG_TRACE, ("Set :: RT_OID_802_11_TEAR_IMME_BA \n"));
++ if (wrq->u.data.length != sizeof(OID_ADD_BA_ENTRY))
++ Status = -EINVAL;
++ else
++ {
++ POID_ADD_BA_ENTRY pBA;
++ MAC_TABLE_ENTRY *pEntry;
++
++ pBA = kmalloc(wrq->u.data.length, MEM_ALLOC_FLAG);
++
++ if (pBA == NULL)
++ {
++ DBGPRINT(RT_DEBUG_TRACE, ("Set :: RT_OID_802_11_TEAR_IMME_BA kmalloc() can't allocate enough memory\n"));
++ Status = NDIS_STATUS_FAILURE;
++ }
++ else
++ {
++ Status = copy_from_user(pBA, wrq->u.data.pointer, wrq->u.data.length);
++ DBGPRINT(RT_DEBUG_TRACE, ("Set :: RT_OID_802_11_TEAR_IMME_BA(TID=%d, bAllTid=%d)\n", pBA->TID, pBA->bAllTid));
++
++ if (!pBA->bAllTid && (pBA->TID > NUM_OF_TID))
++ {
++ Status = NDIS_STATUS_INVALID_DATA;
++ break;
++ }
++
++ if (pBA->IsRecipient == FALSE)
++ {
++ pEntry = MacTableLookup(pAdapter, pBA->MACAddr);
++ DBGPRINT(RT_DEBUG_TRACE, (" pBA->IsRecipient == FALSE\n"));
++ if (pEntry)
++ {
++ DBGPRINT(RT_DEBUG_TRACE, (" pBA->pEntry\n"));
++ BAOriSessionTearDown(pAdapter, pEntry->Aid, pBA->TID, FALSE, TRUE);
++ }
++ else
++ DBGPRINT(RT_DEBUG_TRACE, ("Set :: Not found pEntry \n"));
++ }
++ else
++ {
++ pEntry = MacTableLookup(pAdapter, pBA->MACAddr);
++ if (pEntry)
++ {
++ BARecSessionTearDown( pAdapter, (UCHAR)pEntry->Aid, pBA->TID, TRUE);
++ }
++ else
++ DBGPRINT(RT_DEBUG_TRACE, ("Set :: Not found pEntry \n"));
++ }
++ kfree(pBA);
++ }
++ }
++ break;
++#endif // DOT11_N_SUPPORT //
++
++ // For WPA_SUPPLICANT to set static wep key
++ case OID_802_11_ADD_WEP:
++ pWepKey = kmalloc(wrq->u.data.length, MEM_ALLOC_FLAG);
++
++ if(pWepKey == NULL)
++ {
++ Status = -ENOMEM;
++ DBGPRINT(RT_DEBUG_TRACE, ("Set::OID_802_11_ADD_WEP, Failed!!\n"));
++ break;
++ }
++ Status = copy_from_user(pWepKey, wrq->u.data.pointer, wrq->u.data.length);
++ if (Status)
++ {
++ Status = -EINVAL;
++ DBGPRINT(RT_DEBUG_TRACE, ("Set::OID_802_11_ADD_WEP, Failed (length mismatch)!!\n"));
++ }
++ else
++ {
++ KeyIdx = pWepKey->KeyIndex & 0x0fffffff;
++ // KeyIdx must be 0 ~ 3
++ if (KeyIdx > 4)
++ {
++ Status = -EINVAL;
++ DBGPRINT(RT_DEBUG_TRACE, ("Set::OID_802_11_ADD_WEP, Failed (KeyIdx must be smaller than 4)!!\n"));
++ }
++ else
++ {
++ UCHAR CipherAlg = 0;
++ PUCHAR Key;
++
++ // set key material and key length
++ NdisZeroMemory(pAdapter->SharedKey[BSS0][KeyIdx].Key, 16);
++ pAdapter->SharedKey[BSS0][KeyIdx].KeyLen = (UCHAR) pWepKey->KeyLength;
++ NdisMoveMemory(pAdapter->SharedKey[BSS0][KeyIdx].Key, &pWepKey->KeyMaterial, pWepKey->KeyLength);
++
++ switch(pWepKey->KeyLength)
++ {
++ case 5:
++ CipherAlg = CIPHER_WEP64;
++ break;
++ case 13:
++ CipherAlg = CIPHER_WEP128;
++ break;
++ default:
++ DBGPRINT(RT_DEBUG_TRACE, ("Set::OID_802_11_ADD_WEP, only support CIPHER_WEP64(len:5) & CIPHER_WEP128(len:13)!!\n"));
++ Status = -EINVAL;
++ break;
++ }
++ pAdapter->SharedKey[BSS0][KeyIdx].CipherAlg = CipherAlg;
++
++ // Default key for tx (shared key)
++ if (pWepKey->KeyIndex & 0x80000000)
++ {
++#ifdef WPA_SUPPLICANT_SUPPORT
++ // set key material and key length
++ NdisZeroMemory(pAdapter->StaCfg.DesireSharedKey[KeyIdx].Key, 16);
++ pAdapter->StaCfg.DesireSharedKey[KeyIdx].KeyLen = (UCHAR) pWepKey->KeyLength;
++ NdisMoveMemory(pAdapter->StaCfg.DesireSharedKey[KeyIdx].Key, &pWepKey->KeyMaterial, pWepKey->KeyLength);
++ pAdapter->StaCfg.DesireSharedKeyId = KeyIdx;
++ pAdapter->StaCfg.DesireSharedKey[KeyIdx].CipherAlg = CipherAlg;
++#endif // WPA_SUPPLICANT_SUPPORT //
++ pAdapter->StaCfg.DefaultKeyId = (UCHAR) KeyIdx;
++ }
++
++#ifdef WPA_SUPPLICANT_SUPPORT
++ if ((pAdapter->StaCfg.WpaSupplicantUP != WPA_SUPPLICANT_DISABLE) &&
++ (pAdapter->StaCfg.AuthMode >= Ndis802_11AuthModeWPA))
++ {
++ Key = pWepKey->KeyMaterial;
++
++ // Set Group key material to Asic
++ AsicAddSharedKeyEntry(pAdapter, BSS0, KeyIdx, CipherAlg, Key, NULL, NULL);
++
++ // Update WCID attribute table and IVEIV table for this group key table
++ RTMPAddWcidAttributeEntry(pAdapter, BSS0, KeyIdx, CipherAlg, NULL);
++
++ STA_PORT_SECURED(pAdapter);
++
++ // Indicate Connected for GUI
++ pAdapter->IndicateMediaState = NdisMediaStateConnected;
++ }
++ else if (pAdapter->StaCfg.PortSecured == WPA_802_1X_PORT_SECURED)
++#endif // WPA_SUPPLICANT_SUPPORT
++ {
++ Key = pAdapter->SharedKey[BSS0][KeyIdx].Key;
++
++ // Set key material and cipherAlg to Asic
++ AsicAddSharedKeyEntry(pAdapter, BSS0, KeyIdx, CipherAlg, Key, NULL, NULL);
++
++ if (pWepKey->KeyIndex & 0x80000000)
++ {
++ PMAC_TABLE_ENTRY pEntry = &pAdapter->MacTab.Content[BSSID_WCID];
++ // Assign group key info
++ RTMPAddWcidAttributeEntry(pAdapter, BSS0, KeyIdx, CipherAlg, NULL);
++ // Assign pairwise key info
++ RTMPAddWcidAttributeEntry(pAdapter, BSS0, KeyIdx, CipherAlg, pEntry);
++ }
++ }
++ DBGPRINT(RT_DEBUG_TRACE, ("Set::OID_802_11_ADD_WEP (id=0x%x, Len=%d-byte), %s\n", pWepKey->KeyIndex, pWepKey->KeyLength, (pAdapter->StaCfg.PortSecured == WPA_802_1X_PORT_SECURED) ? "Port Secured":"Port NOT Secured"));
++ }
++ }
++ kfree(pWepKey);
++ break;
++#ifdef WPA_SUPPLICANT_SUPPORT
++ case OID_SET_COUNTERMEASURES:
++ if (wrq->u.data.length != sizeof(int))
++ Status = -EINVAL;
++ else
++ {
++ int enabled = 0;
++ Status = copy_from_user(&enabled, wrq->u.data.pointer, wrq->u.data.length);
++ if (enabled == 1)
++ pAdapter->StaCfg.bBlockAssoc = TRUE;
++ else
++ // WPA MIC error should block association attempt for 60 seconds
++ pAdapter->StaCfg.bBlockAssoc = FALSE;
++ DBGPRINT(RT_DEBUG_TRACE, ("Set::OID_SET_COUNTERMEASURES bBlockAssoc=%s\n", pAdapter->StaCfg.bBlockAssoc ? "TRUE":"FALSE"));
++ }
++ break;
++ case RT_OID_WPA_SUPPLICANT_SUPPORT:
++ if (wrq->u.data.length != sizeof(UCHAR))
++ Status = -EINVAL;
++ else
++ {
++ Status = copy_from_user(&wpa_supplicant_enable, wrq->u.data.pointer, wrq->u.data.length);
++ pAdapter->StaCfg.WpaSupplicantUP = wpa_supplicant_enable;
++ DBGPRINT(RT_DEBUG_TRACE, ("Set::RT_OID_WPA_SUPPLICANT_SUPPORT (=%d)\n", pAdapter->StaCfg.WpaSupplicantUP));
++ }
++ break;
++ case OID_802_11_DEAUTHENTICATION:
++ if (wrq->u.data.length != sizeof(MLME_DEAUTH_REQ_STRUCT))
++ Status = -EINVAL;
++ else
++ {
++ MLME_DEAUTH_REQ_STRUCT *pInfo;
++ MLME_QUEUE_ELEM *MsgElem = (MLME_QUEUE_ELEM *) kmalloc(sizeof(MLME_QUEUE_ELEM), MEM_ALLOC_FLAG);
++
++ pInfo = (MLME_DEAUTH_REQ_STRUCT *) MsgElem->Msg;
++ Status = copy_from_user(pInfo, wrq->u.data.pointer, wrq->u.data.length);
++ MlmeDeauthReqAction(pAdapter, MsgElem);
++ kfree(MsgElem);
++
++ if (INFRA_ON(pAdapter))
++ {
++ LinkDown(pAdapter, FALSE);
++ pAdapter->Mlme.AssocMachine.CurrState = ASSOC_IDLE;
++ }
++ DBGPRINT(RT_DEBUG_TRACE, ("Set::OID_802_11_DEAUTHENTICATION (Reason=%d)\n", pInfo->Reason));
++ }
++ break;
++ case OID_802_11_DROP_UNENCRYPTED:
++ if (wrq->u.data.length != sizeof(int))
++ Status = -EINVAL;
++ else
++ {
++ int enabled = 0;
++ Status = copy_from_user(&enabled, wrq->u.data.pointer, wrq->u.data.length);
++ if (enabled == 1)
++ pAdapter->StaCfg.PortSecured = WPA_802_1X_PORT_NOT_SECURED;
++ else
++ pAdapter->StaCfg.PortSecured = WPA_802_1X_PORT_SECURED;
++ NdisAcquireSpinLock(&pAdapter->MacTabLock);
++ pAdapter->MacTab.Content[BSSID_WCID].PortSecured = pAdapter->StaCfg.PortSecured;
++ NdisReleaseSpinLock(&pAdapter->MacTabLock);
++ DBGPRINT(RT_DEBUG_TRACE, ("Set::OID_802_11_DROP_UNENCRYPTED (=%d)\n", enabled));
++ }
++ break;
++ case OID_802_11_SET_IEEE8021X:
++ if (wrq->u.data.length != sizeof(BOOLEAN))
++ Status = -EINVAL;
++ else
++ {
++ Status = copy_from_user(&IEEE8021xState, wrq->u.data.pointer, wrq->u.data.length);
++ pAdapter->StaCfg.IEEE8021X = IEEE8021xState;
++ DBGPRINT(RT_DEBUG_TRACE, ("Set::OID_802_11_SET_IEEE8021X (=%d)\n", IEEE8021xState));
++ }
++ break;
++ case OID_802_11_SET_IEEE8021X_REQUIRE_KEY:
++ if (wrq->u.data.length != sizeof(BOOLEAN))
++ Status = -EINVAL;
++ else
++ {
++ Status = copy_from_user(&IEEE8021x_required_keys, wrq->u.data.pointer, wrq->u.data.length);
++ pAdapter->StaCfg.IEEE8021x_required_keys = IEEE8021x_required_keys;
++ DBGPRINT(RT_DEBUG_TRACE, ("Set::OID_802_11_SET_IEEE8021X_REQUIRE_KEY (%d)\n", IEEE8021x_required_keys));
++ }
++ break;
++ case OID_802_11_PMKID:
++ pPmkId = kmalloc(wrq->u.data.length, MEM_ALLOC_FLAG);
++
++ if(pPmkId == NULL) {
++ Status = -ENOMEM;
++ break;
++ }
++ Status = copy_from_user(pPmkId, wrq->u.data.pointer, wrq->u.data.length);
++
++ // check the PMKID information
++ if (pPmkId->BSSIDInfoCount == 0)
++ NdisZeroMemory(pAdapter->StaCfg.SavedPMK, sizeof(BSSID_INFO)*PMKID_NO);
++ else
++ {
++ PBSSID_INFO pBssIdInfo;
++ UINT BssIdx;
++ UINT CachedIdx;
++
++ for (BssIdx = 0; BssIdx < pPmkId->BSSIDInfoCount; BssIdx++)
++ {
++ // point to the indexed BSSID_INFO structure
++ pBssIdInfo = (PBSSID_INFO) ((PUCHAR) pPmkId + 2 * sizeof(UINT) + BssIdx * sizeof(BSSID_INFO));
++ // Find the entry in the saved data base.
++ for (CachedIdx = 0; CachedIdx < pAdapter->StaCfg.SavedPMKNum; CachedIdx++)
++ {
++ // compare the BSSID
++ if (NdisEqualMemory(pBssIdInfo->BSSID, pAdapter->StaCfg.SavedPMK[CachedIdx].BSSID, sizeof(NDIS_802_11_MAC_ADDRESS)))
++ break;
++ }
++
++ // Found, replace it
++ if (CachedIdx < PMKID_NO)
++ {
++ DBGPRINT(RT_DEBUG_OFF, ("Update OID_802_11_PMKID, idx = %d\n", CachedIdx));
++ NdisMoveMemory(&pAdapter->StaCfg.SavedPMK[CachedIdx], pBssIdInfo, sizeof(BSSID_INFO));
++ pAdapter->StaCfg.SavedPMKNum++;
++ }
++ // Not found, replace the last one
++ else
++ {
++ // Randomly replace one
++ CachedIdx = (pBssIdInfo->BSSID[5] % PMKID_NO);
++ DBGPRINT(RT_DEBUG_OFF, ("Update OID_802_11_PMKID, idx = %d\n", CachedIdx));
++ NdisMoveMemory(&pAdapter->StaCfg.SavedPMK[CachedIdx], pBssIdInfo, sizeof(BSSID_INFO));
++ }
++ }
++ }
++ if(pPmkId)
++ kfree(pPmkId);
++ break;
++#endif // WPA_SUPPLICANT_SUPPORT //
++
++
++
++#ifdef SNMP_SUPPORT
++ case OID_802_11_SHORTRETRYLIMIT:
++ if (wrq->u.data.length != sizeof(ULONG))
++ Status = -EINVAL;
++ else
++ {
++ Status = copy_from_user(&ShortRetryLimit, wrq->u.data.pointer, wrq->u.data.length);
++ RTMP_IO_READ32(pAdapter, TX_RTY_CFG, &tx_rty_cfg.word);
++ tx_rty_cfg.field.ShortRtyLimit = ShortRetryLimit;
++ RTMP_IO_WRITE32(pAdapter, TX_RTY_CFG, tx_rty_cfg.word);
++ DBGPRINT(RT_DEBUG_TRACE, ("Set::OID_802_11_SHORTRETRYLIMIT (tx_rty_cfg.field.ShortRetryLimit=%d, ShortRetryLimit=%ld)\n", tx_rty_cfg.field.ShortRtyLimit, ShortRetryLimit));
++ }
++ break;
++
++ case OID_802_11_LONGRETRYLIMIT:
++ DBGPRINT(RT_DEBUG_TRACE, ("Set::OID_802_11_LONGRETRYLIMIT \n"));
++ if (wrq->u.data.length != sizeof(ULONG))
++ Status = -EINVAL;
++ else
++ {
++ Status = copy_from_user(&LongRetryLimit, wrq->u.data.pointer, wrq->u.data.length);
++ RTMP_IO_READ32(pAdapter, TX_RTY_CFG, &tx_rty_cfg.word);
++ tx_rty_cfg.field.LongRtyLimit = LongRetryLimit;
++ RTMP_IO_WRITE32(pAdapter, TX_RTY_CFG, tx_rty_cfg.word);
++ DBGPRINT(RT_DEBUG_TRACE, ("Set::OID_802_11_LONGRETRYLIMIT (tx_rty_cfg.field.LongRetryLimit= %d,LongRetryLimit=%ld)\n", tx_rty_cfg.field.LongRtyLimit, LongRetryLimit));
++ }
++ break;
++
++ case OID_802_11_WEPDEFAULTKEYVALUE:
++ DBGPRINT(RT_DEBUG_TRACE, ("Set::OID_802_11_WEPDEFAULTKEYVALUE\n"));
++ pKey = kmalloc(wrq->u.data.length, GFP_KERNEL);
++ Status = copy_from_user(pKey, wrq->u.data.pointer, wrq->u.data.length);
++ //pKey = &WepKey;
++
++ if ( pKey->Length != wrq->u.data.length)
++ {
++ Status = -EINVAL;
++ DBGPRINT(RT_DEBUG_TRACE, ("Set::OID_802_11_WEPDEFAULTKEYVALUE, Failed!!\n"));
++ }
++ KeyIdx = pKey->KeyIndex & 0x0fffffff;
++ DBGPRINT(RT_DEBUG_TRACE,("pKey->KeyIndex =%d, pKey->KeyLength=%d\n", pKey->KeyIndex, pKey->KeyLength));
++
++ // it is a shared key
++ if (KeyIdx > 4)
++ Status = -EINVAL;
++ else
++ {
++ pAdapter->SharedKey[BSS0][pAdapter->StaCfg.DefaultKeyId].KeyLen = (UCHAR) pKey->KeyLength;
++ NdisMoveMemory(&pAdapter->SharedKey[BSS0][pAdapter->StaCfg.DefaultKeyId].Key, &pKey->KeyMaterial, pKey->KeyLength);
++ if (pKey->KeyIndex & 0x80000000)
++ {
++ // Default key for tx (shared key)
++ pAdapter->StaCfg.DefaultKeyId = (UCHAR) KeyIdx;
++ }
++ //RestartAPIsRequired = TRUE;
++ }
++ break;
++
++
++ case OID_802_11_WEPDEFAULTKEYID:
++ DBGPRINT(RT_DEBUG_TRACE, ("Set::OID_802_11_WEPDEFAULTKEYID \n"));
++
++ if (wrq->u.data.length != sizeof(UCHAR))
++ Status = -EINVAL;
++ else
++ Status = copy_from_user(&pAdapter->StaCfg.DefaultKeyId, wrq->u.data.pointer, wrq->u.data.length);
++
++ break;
++
++
++ case OID_802_11_CURRENTCHANNEL:
++ DBGPRINT(RT_DEBUG_TRACE, ("Set::OID_802_11_CURRENTCHANNEL \n"));
++ if (wrq->u.data.length != sizeof(UCHAR))
++ Status = -EINVAL;
++ else
++ {
++ Status = copy_from_user(&ctmp, wrq->u.data.pointer, wrq->u.data.length);
++ sprintf(&ctmp,"%d", ctmp);
++ Set_Channel_Proc(pAdapter, &ctmp);
++ }
++ break;
++#endif
++
++
++
++ default:
++ DBGPRINT(RT_DEBUG_TRACE, ("Set::unknown IOCTL's subcmd = 0x%08x\n", cmd));
++ Status = -EOPNOTSUPP;
++ break;
++ }
++
++
++ return Status;
++}
++
++INT RTMPQueryInformation(
++ IN PRTMP_ADAPTER pAdapter,
++ IN OUT struct ifreq *rq,
++ IN INT cmd)
++{
++ struct iwreq *wrq = (struct iwreq *) rq;
++ NDIS_802_11_BSSID_LIST_EX *pBssidList = NULL;
++ PNDIS_WLAN_BSSID_EX pBss;
++ NDIS_802_11_SSID Ssid;
++ NDIS_802_11_CONFIGURATION *pConfiguration = NULL;
++ RT_802_11_LINK_STATUS *pLinkStatus = NULL;
++ RT_802_11_STA_CONFIG *pStaConfig = NULL;
++ NDIS_802_11_STATISTICS *pStatistics = NULL;
++ NDIS_802_11_RTS_THRESHOLD RtsThresh;
++ NDIS_802_11_FRAGMENTATION_THRESHOLD FragThresh;
++ NDIS_802_11_POWER_MODE PowerMode;
++ NDIS_802_11_NETWORK_INFRASTRUCTURE BssType;
++ RT_802_11_PREAMBLE PreamType;
++ NDIS_802_11_AUTHENTICATION_MODE AuthMode;
++ NDIS_802_11_WEP_STATUS WepStatus;
++ NDIS_MEDIA_STATE MediaState;
++ ULONG BssBufSize, ulInfo=0, NetworkTypeList[4], apsd = 0;
++ USHORT BssLen = 0;
++ PUCHAR pBuf = NULL, pPtr;
++ INT Status = NDIS_STATUS_SUCCESS;
++ UINT we_version_compiled;
++ UCHAR i, Padding = 0;
++ BOOLEAN RadioState;
++ UCHAR driverVersion[8];
++ OID_SET_HT_PHYMODE *pHTPhyMode = NULL;
++
++
++#ifdef SNMP_SUPPORT
++ //for snmp, kathy
++ DefaultKeyIdxValue *pKeyIdxValue;
++ INT valueLen;
++ TX_RTY_CFG_STRUC tx_rty_cfg;
++ ULONG ShortRetryLimit, LongRetryLimit;
++ UCHAR tmp[64];
++#endif //SNMP
++
++ switch(cmd)
++ {
++ case RT_OID_DEVICE_NAME:
++ wrq->u.data.length = sizeof(STA_NIC_DEVICE_NAME);
++ Status = copy_to_user(wrq->u.data.pointer, STA_NIC_DEVICE_NAME, wrq->u.data.length);
++ break;
++ case RT_OID_VERSION_INFO:
++ DBGPRINT(RT_DEBUG_TRACE, ("Query::RT_OID_VERSION_INFO \n"));
++ wrq->u.data.length = 8*sizeof(UCHAR);
++ sprintf(&driverVersion[0], "%s", STA_DRIVER_VERSION);
++ driverVersion[7] = '\0';
++ if (copy_to_user(wrq->u.data.pointer, &driverVersion, wrq->u.data.length))
++ {
++ Status = -EFAULT;
++ }
++ break;
++#ifdef RALINK_ATE
++ case RT_QUERY_ATE_TXDONE_COUNT:
++ DBGPRINT(RT_DEBUG_TRACE, ("Query::RT_QUERY_ATE_TXDONE_COUNT \n"));
++ wrq->u.data.length = sizeof(UINT32);
++ if (copy_to_user(wrq->u.data.pointer, &pAdapter->ate.TxDoneCount, wrq->u.data.length))
++ {
++ Status = -EFAULT;
++ }
++ break;
++#endif // RALINK_ATE //
++ case OID_802_11_BSSID_LIST:
++ if (RTMP_TEST_FLAG(pAdapter, fRTMP_ADAPTER_BSS_SCAN_IN_PROGRESS))
++ {
++ /*
++ * Still scanning, indicate the caller should try again.
++ */
++ DBGPRINT(RT_DEBUG_TRACE, ("Query::OID_802_11_BSSID_LIST (Still scanning)\n"));
++ return -EAGAIN;
++ }
++ DBGPRINT(RT_DEBUG_TRACE, ("Query::OID_802_11_BSSID_LIST (%d BSS returned)\n",pAdapter->ScanTab.BssNr));
++ pAdapter->StaCfg.bScanReqIsFromWebUI = FALSE;
++ // Claculate total buffer size required
++ BssBufSize = sizeof(ULONG);
++
++ for (i = 0; i < pAdapter->ScanTab.BssNr; i++)
++ {
++ // Align pointer to 4 bytes boundary.
++ //Padding = 4 - (pAdapter->ScanTab.BssEntry[i].VarIELen & 0x0003);
++ //if (Padding == 4)
++ // Padding = 0;
++ BssBufSize += (sizeof(NDIS_WLAN_BSSID_EX) - 1 + sizeof(NDIS_802_11_FIXED_IEs) + pAdapter->ScanTab.BssEntry[i].VarIELen + Padding);
++ }
++
++ // For safety issue, we add 256 bytes just in case
++ BssBufSize += 256;
++ // Allocate the same size as passed from higher layer
++ pBuf = kmalloc(BssBufSize, MEM_ALLOC_FLAG);
++ if(pBuf == NULL)
++ {
++ Status = -ENOMEM;
++ break;
++ }
++ // Init 802_11_BSSID_LIST_EX structure
++ NdisZeroMemory(pBuf, BssBufSize);
++ pBssidList = (PNDIS_802_11_BSSID_LIST_EX) pBuf;
++ pBssidList->NumberOfItems = pAdapter->ScanTab.BssNr;
++
++ // Calculate total buffer length
++ BssLen = 4; // Consist of NumberOfItems
++ // Point to start of NDIS_WLAN_BSSID_EX
++ // pPtr = pBuf + sizeof(ULONG);
++ pPtr = (PUCHAR) &pBssidList->Bssid[0];
++ for (i = 0; i < pAdapter->ScanTab.BssNr; i++)
++ {
++ pBss = (PNDIS_WLAN_BSSID_EX) pPtr;
++ NdisMoveMemory(&pBss->MacAddress, &pAdapter->ScanTab.BssEntry[i].Bssid, MAC_ADDR_LEN);
++ if ((pAdapter->ScanTab.BssEntry[i].Hidden == 1) && (pAdapter->StaCfg.bShowHiddenSSID == FALSE))
++ {
++ //
++ // We must return this SSID during 4way handshaking, otherwise Aegis will failed to parse WPA infomation
++ // and then failed to send EAPOl farame.
++ //
++ if ((pAdapter->StaCfg.AuthMode >= Ndis802_11AuthModeWPA) && (pAdapter->StaCfg.PortSecured != WPA_802_1X_PORT_SECURED))
++ {
++ pBss->Ssid.SsidLength = pAdapter->ScanTab.BssEntry[i].SsidLen;
++ NdisMoveMemory(pBss->Ssid.Ssid, pAdapter->ScanTab.BssEntry[i].Ssid, pAdapter->ScanTab.BssEntry[i].SsidLen);
++ }
++ else
++ pBss->Ssid.SsidLength = 0;
++ }
++ else
++ {
++ pBss->Ssid.SsidLength = pAdapter->ScanTab.BssEntry[i].SsidLen;
++ NdisMoveMemory(pBss->Ssid.Ssid, pAdapter->ScanTab.BssEntry[i].Ssid, pAdapter->ScanTab.BssEntry[i].SsidLen);
++ }
++ pBss->Privacy = pAdapter->ScanTab.BssEntry[i].Privacy;
++ pBss->Rssi = pAdapter->ScanTab.BssEntry[i].Rssi - pAdapter->BbpRssiToDbmDelta;
++ pBss->NetworkTypeInUse = NetworkTypeInUseSanity(&pAdapter->ScanTab.BssEntry[i]);
++ pBss->Configuration.Length = sizeof(NDIS_802_11_CONFIGURATION);
++ pBss->Configuration.BeaconPeriod = pAdapter->ScanTab.BssEntry[i].BeaconPeriod;
++ pBss->Configuration.ATIMWindow = pAdapter->ScanTab.BssEntry[i].AtimWin;
++
++ MAP_CHANNEL_ID_TO_KHZ(pAdapter->ScanTab.BssEntry[i].Channel, pBss->Configuration.DSConfig);
++
++ if (pAdapter->ScanTab.BssEntry[i].BssType == BSS_INFRA)
++ pBss->InfrastructureMode = Ndis802_11Infrastructure;
++ else
++ pBss->InfrastructureMode = Ndis802_11IBSS;
++
++ NdisMoveMemory(pBss->SupportedRates, pAdapter->ScanTab.BssEntry[i].SupRate, pAdapter->ScanTab.BssEntry[i].SupRateLen);
++ NdisMoveMemory(pBss->SupportedRates + pAdapter->ScanTab.BssEntry[i].SupRateLen,
++ pAdapter->ScanTab.BssEntry[i].ExtRate,
++ pAdapter->ScanTab.BssEntry[i].ExtRateLen);
++
++ if (pAdapter->ScanTab.BssEntry[i].VarIELen == 0)
++ {
++ pBss->IELength = sizeof(NDIS_802_11_FIXED_IEs);
++ NdisMoveMemory(pBss->IEs, &pAdapter->ScanTab.BssEntry[i].FixIEs, sizeof(NDIS_802_11_FIXED_IEs));
++ pPtr = pPtr + sizeof(NDIS_WLAN_BSSID_EX) - 1 + sizeof(NDIS_802_11_FIXED_IEs);
++ }
++ else
++ {
++ pBss->IELength = (ULONG)(sizeof(NDIS_802_11_FIXED_IEs) + pAdapter->ScanTab.BssEntry[i].VarIELen);
++ pPtr = pPtr + sizeof(NDIS_WLAN_BSSID_EX) - 1 + sizeof(NDIS_802_11_FIXED_IEs);
++ NdisMoveMemory(pBss->IEs, &pAdapter->ScanTab.BssEntry[i].FixIEs, sizeof(NDIS_802_11_FIXED_IEs));
++ NdisMoveMemory(pBss->IEs + sizeof(NDIS_802_11_FIXED_IEs), pAdapter->ScanTab.BssEntry[i].VarIEs, pAdapter->ScanTab.BssEntry[i].VarIELen);
++ pPtr += pAdapter->ScanTab.BssEntry[i].VarIELen;
++ }
++ pBss->Length = (ULONG)(sizeof(NDIS_WLAN_BSSID_EX) - 1 + sizeof(NDIS_802_11_FIXED_IEs) + pAdapter->ScanTab.BssEntry[i].VarIELen + Padding);
++
++#if WIRELESS_EXT < 17
++ if ((BssLen + pBss->Length) < wrq->u.data.length)
++ BssLen += pBss->Length;
++ else
++ {
++ pBssidList->NumberOfItems = i;
++ break;
++ }
++#else
++ BssLen += pBss->Length;
++#endif
++ }
++
++#if WIRELESS_EXT < 17
++ wrq->u.data.length = BssLen;
++#else
++ if (BssLen > wrq->u.data.length)
++ {
++ kfree(pBssidList);
++ return -E2BIG;
++ }
++ else
++ wrq->u.data.length = BssLen;
++#endif
++ Status = copy_to_user(wrq->u.data.pointer, pBssidList, BssLen);
++ kfree(pBssidList);
++ break;
++ case OID_802_3_CURRENT_ADDRESS:
++ wrq->u.data.length = MAC_ADDR_LEN;
++ Status = copy_to_user(wrq->u.data.pointer, &pAdapter->CurrentAddress, wrq->u.data.length);
++ break;
++ case OID_GEN_MEDIA_CONNECT_STATUS:
++ if (pAdapter->IndicateMediaState == NdisMediaStateConnected)
++ MediaState = NdisMediaStateConnected;
++ else
++ MediaState = NdisMediaStateDisconnected;
++
++ wrq->u.data.length = sizeof(NDIS_MEDIA_STATE);
++ Status = copy_to_user(wrq->u.data.pointer, &MediaState, wrq->u.data.length);
++ break;
++ case OID_802_11_BSSID:
++#ifdef RALINK_ATE
++ if (ATE_ON(pAdapter))
++ {
++ DBGPRINT(RT_DEBUG_TRACE, ("The driver is in ATE mode now\n"));
++ Status = NDIS_STATUS_RESOURCES;
++ break;
++ }
++#endif // RALINK_ATE //
++ if (INFRA_ON(pAdapter) || ADHOC_ON(pAdapter))
++ {
++ Status = copy_to_user(wrq->u.data.pointer, &pAdapter->CommonCfg.Bssid, sizeof(NDIS_802_11_MAC_ADDRESS));
++
++ }
++ else
++ {
++ DBGPRINT(RT_DEBUG_TRACE, ("Query::OID_802_11_BSSID(=EMPTY)\n"));
++ Status = -ENOTCONN;
++ }
++ break;
++ case OID_802_11_SSID:
++ NdisZeroMemory(&Ssid, sizeof(NDIS_802_11_SSID));
++ NdisZeroMemory(Ssid.Ssid, MAX_LEN_OF_SSID);
++ Ssid.SsidLength = pAdapter->CommonCfg.SsidLen;
++ memcpy(Ssid.Ssid, pAdapter->CommonCfg.Ssid, Ssid.SsidLength);
++ wrq->u.data.length = sizeof(NDIS_802_11_SSID);
++ Status = copy_to_user(wrq->u.data.pointer, &Ssid, wrq->u.data.length);
++ DBGPRINT(RT_DEBUG_TRACE, ("Query::OID_802_11_SSID (Len=%d, ssid=%s)\n", Ssid.SsidLength,Ssid.Ssid));
++ break;
++ case RT_OID_802_11_QUERY_LINK_STATUS:
++ pLinkStatus = (RT_802_11_LINK_STATUS *) kmalloc(sizeof(RT_802_11_LINK_STATUS), MEM_ALLOC_FLAG);
++ if (pLinkStatus)
++ {
++ pLinkStatus->CurrTxRate = RateIdTo500Kbps[pAdapter->CommonCfg.TxRate]; // unit : 500 kbps
++ pLinkStatus->ChannelQuality = pAdapter->Mlme.ChannelQuality;
++ pLinkStatus->RxByteCount = pAdapter->RalinkCounters.ReceivedByteCount;
++ pLinkStatus->TxByteCount = pAdapter->RalinkCounters.TransmittedByteCount;
++ pLinkStatus->CentralChannel = pAdapter->CommonCfg.CentralChannel;
++ wrq->u.data.length = sizeof(RT_802_11_LINK_STATUS);
++ Status = copy_to_user(wrq->u.data.pointer, pLinkStatus, wrq->u.data.length);
++ kfree(pLinkStatus);
++ DBGPRINT(RT_DEBUG_TRACE, ("Query::RT_OID_802_11_QUERY_LINK_STATUS\n"));
++ }
++ else
++ {
++ DBGPRINT(RT_DEBUG_TRACE, ("Query::RT_OID_802_11_QUERY_LINK_STATUS(kmalloc failed)\n"));
++ Status = -EFAULT;
++ }
++ break;
++ case OID_802_11_CONFIGURATION:
++ pConfiguration = (NDIS_802_11_CONFIGURATION *) kmalloc(sizeof(NDIS_802_11_CONFIGURATION), MEM_ALLOC_FLAG);
++ if (pConfiguration)
++ {
++ pConfiguration->Length = sizeof(NDIS_802_11_CONFIGURATION);
++ pConfiguration->BeaconPeriod = pAdapter->CommonCfg.BeaconPeriod;
++ pConfiguration->ATIMWindow = pAdapter->StaActive.AtimWin;
++ MAP_CHANNEL_ID_TO_KHZ(pAdapter->CommonCfg.Channel, pConfiguration->DSConfig);
++ wrq->u.data.length = sizeof(NDIS_802_11_CONFIGURATION);
++ Status = copy_to_user(wrq->u.data.pointer, pConfiguration, wrq->u.data.length);
++ DBGPRINT(RT_DEBUG_TRACE, ("Query::OID_802_11_CONFIGURATION(BeaconPeriod=%ld,AtimW=%ld,Channel=%d) \n",
++ pConfiguration->BeaconPeriod, pConfiguration->ATIMWindow, pAdapter->CommonCfg.Channel));
++ kfree(pConfiguration);
++ }
++ else
++ {
++ DBGPRINT(RT_DEBUG_TRACE, ("Query::OID_802_11_CONFIGURATION(kmalloc failed)\n"));
++ Status = -EFAULT;
++ }
++ break;
++ case RT_OID_802_11_SNR_0:
++ if ((pAdapter->StaCfg.LastSNR0 > 0))
++ {
++ ulInfo = ((0xeb - pAdapter->StaCfg.LastSNR0) * 3) / 16 ;
++ wrq->u.data.length = sizeof(ulInfo);
++ Status = copy_to_user(wrq->u.data.pointer, &ulInfo, wrq->u.data.length);
++ DBGPRINT(RT_DEBUG_TRACE, ("Query::RT_OID_802_11_SNR_0(0x=%lx)\n", ulInfo));
++ }
++ else
++ Status = -EFAULT;
++ break;
++ case RT_OID_802_11_SNR_1:
++ if ((pAdapter->Antenna.field.RxPath > 1) &&
++ (pAdapter->StaCfg.LastSNR1 > 0))
++ {
++ ulInfo = ((0xeb - pAdapter->StaCfg.LastSNR1) * 3) / 16 ;
++ wrq->u.data.length = sizeof(ulInfo);
++ Status = copy_to_user(wrq->u.data.pointer, &ulInfo, wrq->u.data.length);
++ DBGPRINT(RT_DEBUG_TRACE,("Query::RT_OID_802_11_SNR_1(0x=%lx)\n",ulInfo));
++ }
++ else
++ Status = -EFAULT;
++ DBGPRINT(RT_DEBUG_TRACE,("Query::RT_OID_802_11_SNR_1(pAdapter->StaCfg.LastSNR1=%d)\n",pAdapter->StaCfg.LastSNR1));
++ break;
++ case OID_802_11_RSSI_TRIGGER:
++ ulInfo = pAdapter->StaCfg.RssiSample.LastRssi0 - pAdapter->BbpRssiToDbmDelta;
++ wrq->u.data.length = sizeof(ulInfo);
++ Status = copy_to_user(wrq->u.data.pointer, &ulInfo, wrq->u.data.length);
++ DBGPRINT(RT_DEBUG_TRACE, ("Query::OID_802_11_RSSI_TRIGGER(=%ld)\n", ulInfo));
++ break;
++ case OID_802_11_RSSI:
++ case RT_OID_802_11_RSSI:
++ ulInfo = pAdapter->StaCfg.RssiSample.LastRssi0;
++ wrq->u.data.length = sizeof(ulInfo);
++ Status = copy_to_user(wrq->u.data.pointer, &ulInfo, wrq->u.data.length);
++ break;
++ case RT_OID_802_11_RSSI_1:
++ ulInfo = pAdapter->StaCfg.RssiSample.LastRssi1;
++ wrq->u.data.length = sizeof(ulInfo);
++ Status = copy_to_user(wrq->u.data.pointer, &ulInfo, wrq->u.data.length);
++ break;
++ case RT_OID_802_11_RSSI_2:
++ ulInfo = pAdapter->StaCfg.RssiSample.LastRssi2;
++ wrq->u.data.length = sizeof(ulInfo);
++ Status = copy_to_user(wrq->u.data.pointer, &ulInfo, wrq->u.data.length);
++ break;
++ case OID_802_11_STATISTICS:
++ pStatistics = (NDIS_802_11_STATISTICS *) kmalloc(sizeof(NDIS_802_11_STATISTICS), MEM_ALLOC_FLAG);
++ if (pStatistics)
++ {
++ DBGPRINT(RT_DEBUG_TRACE, ("Query::OID_802_11_STATISTICS \n"));
++ // add the most up-to-date h/w raw counters into software counters
++ NICUpdateRawCounters(pAdapter);
++
++ // Sanity check for calculation of sucessful count
++ if (pAdapter->WlanCounters.TransmittedFragmentCount.QuadPart < pAdapter->WlanCounters.RetryCount.QuadPart)
++ pAdapter->WlanCounters.TransmittedFragmentCount.QuadPart = pAdapter->WlanCounters.RetryCount.QuadPart;
++
++ pStatistics->TransmittedFragmentCount.QuadPart = pAdapter->WlanCounters.TransmittedFragmentCount.QuadPart;
++ pStatistics->MulticastTransmittedFrameCount.QuadPart = pAdapter->WlanCounters.MulticastTransmittedFrameCount.QuadPart;
++ pStatistics->FailedCount.QuadPart = pAdapter->WlanCounters.FailedCount.QuadPart;
++ pStatistics->RetryCount.QuadPart = pAdapter->WlanCounters.RetryCount.QuadPart;
++ pStatistics->MultipleRetryCount.QuadPart = pAdapter->WlanCounters.MultipleRetryCount.QuadPart;
++ pStatistics->RTSSuccessCount.QuadPart = pAdapter->WlanCounters.RTSSuccessCount.QuadPart;
++ pStatistics->RTSFailureCount.QuadPart = pAdapter->WlanCounters.RTSFailureCount.QuadPart;
++ pStatistics->ACKFailureCount.QuadPart = pAdapter->WlanCounters.ACKFailureCount.QuadPart;
++ pStatistics->FrameDuplicateCount.QuadPart = pAdapter->WlanCounters.FrameDuplicateCount.QuadPart;
++ pStatistics->ReceivedFragmentCount.QuadPart = pAdapter->WlanCounters.ReceivedFragmentCount.QuadPart;
++ pStatistics->MulticastReceivedFrameCount.QuadPart = pAdapter->WlanCounters.MulticastReceivedFrameCount.QuadPart;
++#ifdef DBG
++ pStatistics->FCSErrorCount = pAdapter->RalinkCounters.RealFcsErrCount;
++#else
++ pStatistics->FCSErrorCount.QuadPart = pAdapter->WlanCounters.FCSErrorCount.QuadPart;
++ pStatistics->FrameDuplicateCount.u.LowPart = pAdapter->WlanCounters.FrameDuplicateCount.u.LowPart / 100;
++#endif
++ wrq->u.data.length = sizeof(NDIS_802_11_STATISTICS);
++ Status = copy_to_user(wrq->u.data.pointer, pStatistics, wrq->u.data.length);
++ kfree(pStatistics);
++ }
++ else
++ {
++ DBGPRINT(RT_DEBUG_TRACE, ("Query::OID_802_11_STATISTICS(kmalloc failed)\n"));
++ Status = -EFAULT;
++ }
++ break;
++ case OID_GEN_RCV_OK:
++ ulInfo = pAdapter->Counters8023.GoodReceives;
++ wrq->u.data.length = sizeof(ulInfo);
++ Status = copy_to_user(wrq->u.data.pointer, &ulInfo, wrq->u.data.length);
++ break;
++ case OID_GEN_RCV_NO_BUFFER:
++ ulInfo = pAdapter->Counters8023.RxNoBuffer;
++ wrq->u.data.length = sizeof(ulInfo);
++ Status = copy_to_user(wrq->u.data.pointer, &ulInfo, wrq->u.data.length);
++ break;
++ case RT_OID_802_11_PHY_MODE:
++ ulInfo = (ULONG)pAdapter->CommonCfg.PhyMode;
++ wrq->u.data.length = sizeof(ulInfo);
++ Status = copy_to_user(wrq->u.data.pointer, &ulInfo, wrq->u.data.length);
++ DBGPRINT(RT_DEBUG_TRACE, ("Query::RT_OID_802_11_PHY_MODE (=%ld)\n", ulInfo));
++ break;
++ case RT_OID_802_11_STA_CONFIG:
++ pStaConfig = (RT_802_11_STA_CONFIG *) kmalloc(sizeof(RT_802_11_STA_CONFIG), MEM_ALLOC_FLAG);
++ if (pStaConfig)
++ {
++ DBGPRINT(RT_DEBUG_TRACE, ("Query::RT_OID_802_11_STA_CONFIG\n"));
++ pStaConfig->EnableTxBurst = pAdapter->CommonCfg.bEnableTxBurst;
++ pStaConfig->EnableTurboRate = 0;
++ pStaConfig->UseBGProtection = pAdapter->CommonCfg.UseBGProtection;
++ pStaConfig->UseShortSlotTime = pAdapter->CommonCfg.bUseShortSlotTime;
++ //pStaConfig->AdhocMode = pAdapter->StaCfg.AdhocMode;
++ pStaConfig->HwRadioStatus = (pAdapter->StaCfg.bHwRadio == TRUE) ? 1 : 0;
++ pStaConfig->Rsv1 = 0;
++ pStaConfig->SystemErrorBitmap = pAdapter->SystemErrorBitmap;
++ wrq->u.data.length = sizeof(RT_802_11_STA_CONFIG);
++ Status = copy_to_user(wrq->u.data.pointer, pStaConfig, wrq->u.data.length);
++ kfree(pStaConfig);
++ }
++ else
++ {
++ DBGPRINT(RT_DEBUG_TRACE, ("Query::RT_OID_802_11_STA_CONFIG(kmalloc failed)\n"));
++ Status = -EFAULT;
++ }
++ break;
++ case OID_802_11_RTS_THRESHOLD:
++ RtsThresh = pAdapter->CommonCfg.RtsThreshold;
++ wrq->u.data.length = sizeof(RtsThresh);
++ Status = copy_to_user(wrq->u.data.pointer, &RtsThresh, wrq->u.data.length);
++ DBGPRINT(RT_DEBUG_TRACE, ("Query::OID_802_11_RTS_THRESHOLD(=%ld)\n", RtsThresh));
++ break;
++ case OID_802_11_FRAGMENTATION_THRESHOLD:
++ FragThresh = pAdapter->CommonCfg.FragmentThreshold;
++ if (pAdapter->CommonCfg.bUseZeroToDisableFragment == TRUE)
++ FragThresh = 0;
++ wrq->u.data.length = sizeof(FragThresh);
++ Status = copy_to_user(wrq->u.data.pointer, &FragThresh, wrq->u.data.length);
++ DBGPRINT(RT_DEBUG_TRACE, ("Query::OID_802_11_FRAGMENTATION_THRESHOLD(=%ld)\n", FragThresh));
++ break;
++ case OID_802_11_POWER_MODE:
++ PowerMode = pAdapter->StaCfg.WindowsPowerMode;
++ wrq->u.data.length = sizeof(PowerMode);
++ Status = copy_to_user(wrq->u.data.pointer, &PowerMode, wrq->u.data.length);
++ DBGPRINT(RT_DEBUG_TRACE, ("Query::OID_802_11_POWER_MODE(=%d)\n", PowerMode));
++ break;
++ case RT_OID_802_11_RADIO:
++ RadioState = (BOOLEAN) pAdapter->StaCfg.bSwRadio;
++ wrq->u.data.length = sizeof(RadioState);
++ Status = copy_to_user(wrq->u.data.pointer, &RadioState, wrq->u.data.length);
++ DBGPRINT(RT_DEBUG_TRACE, ("Query::RT_OID_802_11_QUERY_RADIO (=%d)\n", RadioState));
++ break;
++ case OID_802_11_INFRASTRUCTURE_MODE:
++ if (pAdapter->StaCfg.BssType == BSS_ADHOC)
++ BssType = Ndis802_11IBSS;
++ else if (pAdapter->StaCfg.BssType == BSS_INFRA)
++ BssType = Ndis802_11Infrastructure;
++ else if (pAdapter->StaCfg.BssType == BSS_MONITOR)
++ BssType = Ndis802_11Monitor;
++ else
++ BssType = Ndis802_11AutoUnknown;
++
++ wrq->u.data.length = sizeof(BssType);
++ Status = copy_to_user(wrq->u.data.pointer, &BssType, wrq->u.data.length);
++ DBGPRINT(RT_DEBUG_TRACE, ("Query::OID_802_11_INFRASTRUCTURE_MODE(=%d)\n", BssType));
++ break;
++ case RT_OID_802_11_PREAMBLE:
++ PreamType = pAdapter->CommonCfg.TxPreamble;
++ wrq->u.data.length = sizeof(PreamType);
++ Status = copy_to_user(wrq->u.data.pointer, &PreamType, wrq->u.data.length);
++ DBGPRINT(RT_DEBUG_TRACE, ("Query::RT_OID_802_11_PREAMBLE(=%d)\n", PreamType));
++ break;
++ case OID_802_11_AUTHENTICATION_MODE:
++ AuthMode = pAdapter->StaCfg.AuthMode;
++ wrq->u.data.length = sizeof(AuthMode);
++ Status = copy_to_user(wrq->u.data.pointer, &AuthMode, wrq->u.data.length);
++ DBGPRINT(RT_DEBUG_TRACE, ("Query::OID_802_11_AUTHENTICATION_MODE(=%d)\n", AuthMode));
++ break;
++ case OID_802_11_WEP_STATUS:
++ WepStatus = pAdapter->StaCfg.WepStatus;
++ wrq->u.data.length = sizeof(WepStatus);
++ Status = copy_to_user(wrq->u.data.pointer, &WepStatus, wrq->u.data.length);
++ DBGPRINT(RT_DEBUG_TRACE, ("Query::OID_802_11_WEP_STATUS(=%d)\n", WepStatus));
++ break;
++ case OID_802_11_TX_POWER_LEVEL:
++ wrq->u.data.length = sizeof(ULONG);
++ Status = copy_to_user(wrq->u.data.pointer, &pAdapter->CommonCfg.TxPower, wrq->u.data.length);
++ DBGPRINT(RT_DEBUG_TRACE, ("Query::OID_802_11_TX_POWER_LEVEL %x\n",pAdapter->CommonCfg.TxPower));
++ break;
++ case RT_OID_802_11_TX_POWER_LEVEL_1:
++ wrq->u.data.length = sizeof(ULONG);
++ Status = copy_to_user(wrq->u.data.pointer, &pAdapter->CommonCfg.TxPowerPercentage, wrq->u.data.length);
++ DBGPRINT(RT_DEBUG_TRACE, ("Query::RT_OID_802_11_TX_POWER_LEVEL_1 (=%ld)\n", pAdapter->CommonCfg.TxPowerPercentage));
++ break;
++ case OID_802_11_NETWORK_TYPES_SUPPORTED:
++ if ((pAdapter->RfIcType == RFIC_2850) || (pAdapter->RfIcType == RFIC_2750))
++ {
++ NetworkTypeList[0] = 3; // NumberOfItems = 3
++ NetworkTypeList[1] = Ndis802_11DS; // NetworkType[1] = 11b
++ NetworkTypeList[2] = Ndis802_11OFDM24; // NetworkType[2] = 11g
++ NetworkTypeList[3] = Ndis802_11OFDM5; // NetworkType[3] = 11a
++ wrq->u.data.length = 16;
++ Status = copy_to_user(wrq->u.data.pointer, &NetworkTypeList[0], wrq->u.data.length);
++ }
++ else
++ {
++ NetworkTypeList[0] = 2; // NumberOfItems = 2
++ NetworkTypeList[1] = Ndis802_11DS; // NetworkType[1] = 11b
++ NetworkTypeList[2] = Ndis802_11OFDM24; // NetworkType[2] = 11g
++ wrq->u.data.length = 12;
++ Status = copy_to_user(wrq->u.data.pointer, &NetworkTypeList[0], wrq->u.data.length);
++ }
++ DBGPRINT(RT_DEBUG_TRACE, ("Query::OID_802_11_NETWORK_TYPES_SUPPORTED\n"));
++ break;
++ case OID_802_11_NETWORK_TYPE_IN_USE:
++ wrq->u.data.length = sizeof(ULONG);
++ if (pAdapter->CommonCfg.PhyMode == PHY_11A)
++ ulInfo = Ndis802_11OFDM5;
++ else if ((pAdapter->CommonCfg.PhyMode == PHY_11BG_MIXED) || (pAdapter->CommonCfg.PhyMode == PHY_11G))
++ ulInfo = Ndis802_11OFDM24;
++ else
++ ulInfo = Ndis802_11DS;
++ Status = copy_to_user(wrq->u.data.pointer, &ulInfo, wrq->u.data.length);
++ break;
++ case RT_OID_802_11_QUERY_LAST_RX_RATE:
++ ulInfo = (ULONG)pAdapter->LastRxRate;
++ wrq->u.data.length = sizeof(ulInfo);
++ Status = copy_to_user(wrq->u.data.pointer, &ulInfo, wrq->u.data.length);
++ DBGPRINT(RT_DEBUG_TRACE, ("Query::RT_OID_802_11_QUERY_LAST_RX_RATE (=%ld)\n", ulInfo));
++ break;
++ case RT_OID_802_11_QUERY_LAST_TX_RATE:
++ //ulInfo = (ULONG)pAdapter->LastTxRate;
++ ulInfo = (ULONG)pAdapter->MacTab.Content[BSSID_WCID].HTPhyMode.word;
++ wrq->u.data.length = sizeof(ulInfo);
++ Status = copy_to_user(wrq->u.data.pointer, &ulInfo, wrq->u.data.length);
++ DBGPRINT(RT_DEBUG_TRACE, ("Query::RT_OID_802_11_QUERY_LAST_TX_RATE (=%lx)\n", ulInfo));
++ break;
++ case RT_OID_802_11_QUERY_EEPROM_VERSION:
++ wrq->u.data.length = sizeof(ULONG);
++ Status = copy_to_user(wrq->u.data.pointer, &pAdapter->EepromVersion, wrq->u.data.length);
++ break;
++ case RT_OID_802_11_QUERY_FIRMWARE_VERSION:
++ wrq->u.data.length = sizeof(ULONG);
++ Status = copy_to_user(wrq->u.data.pointer, &pAdapter->FirmwareVersion, wrq->u.data.length);
++ break;
++ case RT_OID_802_11_QUERY_NOISE_LEVEL:
++ wrq->u.data.length = sizeof(UCHAR);
++ Status = copy_to_user(wrq->u.data.pointer, &pAdapter->BbpWriteLatch[66], wrq->u.data.length);
++ DBGPRINT(RT_DEBUG_TRACE, ("Query::RT_OID_802_11_QUERY_NOISE_LEVEL (=%d)\n", pAdapter->BbpWriteLatch[66]));
++ break;
++ case RT_OID_802_11_EXTRA_INFO:
++ wrq->u.data.length = sizeof(ULONG);
++ Status = copy_to_user(wrq->u.data.pointer, &pAdapter->ExtraInfo, wrq->u.data.length);
++ DBGPRINT(RT_DEBUG_TRACE, ("Query::RT_OID_802_11_EXTRA_INFO (=%ld)\n", pAdapter->ExtraInfo));
++ break;
++ case RT_OID_WE_VERSION_COMPILED:
++ wrq->u.data.length = sizeof(UINT);
++ we_version_compiled = WIRELESS_EXT;
++ Status = copy_to_user(wrq->u.data.pointer, &we_version_compiled, wrq->u.data.length);
++ break;
++ case RT_OID_802_11_QUERY_APSD_SETTING:
++ apsd = (pAdapter->CommonCfg.bAPSDCapable | (pAdapter->CommonCfg.bAPSDAC_BE << 1) | (pAdapter->CommonCfg.bAPSDAC_BK << 2)
++ | (pAdapter->CommonCfg.bAPSDAC_VI << 3) | (pAdapter->CommonCfg.bAPSDAC_VO << 4) | (pAdapter->CommonCfg.MaxSPLength << 5));
++
++ wrq->u.data.length = sizeof(ULONG);
++ Status = copy_to_user(wrq->u.data.pointer, &apsd, wrq->u.data.length);
++ DBGPRINT(RT_DEBUG_TRACE, ("Query::RT_OID_802_11_QUERY_APSD_SETTING (=0x%lx,APSDCap=%d,AC_BE=%d,AC_BK=%d,AC_VI=%d,AC_VO=%d,MAXSPLen=%d)\n",
++ apsd,pAdapter->CommonCfg.bAPSDCapable,pAdapter->CommonCfg.bAPSDAC_BE,pAdapter->CommonCfg.bAPSDAC_BK,pAdapter->CommonCfg.bAPSDAC_VI,pAdapter->CommonCfg.bAPSDAC_VO,pAdapter->CommonCfg.MaxSPLength));
++ break;
++ case RT_OID_802_11_QUERY_APSD_PSM:
++ wrq->u.data.length = sizeof(ULONG);
++ Status = copy_to_user(wrq->u.data.pointer, &pAdapter->CommonCfg.bAPSDForcePowerSave, wrq->u.data.length);
++ DBGPRINT(RT_DEBUG_TRACE, ("Query::RT_OID_802_11_QUERY_APSD_PSM (=%d)\n", pAdapter->CommonCfg.bAPSDForcePowerSave));
++ break;
++ case RT_OID_802_11_QUERY_WMM:
++ wrq->u.data.length = sizeof(BOOLEAN);
++ Status = copy_to_user(wrq->u.data.pointer, &pAdapter->CommonCfg.bWmmCapable, wrq->u.data.length);
++ DBGPRINT(RT_DEBUG_TRACE, ("Query::RT_OID_802_11_QUERY_WMM (=%d)\n", pAdapter->CommonCfg.bWmmCapable));
++ break;
++#ifdef WPA_SUPPLICANT_SUPPORT
++ case RT_OID_NEW_DRIVER:
++ {
++ UCHAR enabled = 1;
++ wrq->u.data.length = sizeof(UCHAR);
++ Status = copy_to_user(wrq->u.data.pointer, &enabled, wrq->u.data.length);
++ DBGPRINT(RT_DEBUG_TRACE, ("Query::RT_OID_NEW_DRIVER (=%d)\n", enabled));
++ }
++ break;
++ case RT_OID_WPA_SUPPLICANT_SUPPORT:
++ wrq->u.data.length = sizeof(UCHAR);
++ Status = copy_to_user(wrq->u.data.pointer, &pAdapter->StaCfg.WpaSupplicantUP, wrq->u.data.length);
++ DBGPRINT(RT_DEBUG_TRACE, ("Query::RT_OID_WPA_SUPPLICANT_SUPPORT (=%d)\n", pAdapter->StaCfg.WpaSupplicantUP));
++ break;
++#endif // WPA_SUPPLICANT_SUPPORT //
++
++ case RT_OID_DRIVER_DEVICE_NAME:
++ DBGPRINT(RT_DEBUG_TRACE, ("Query::RT_OID_DRIVER_DEVICE_NAME \n"));
++ wrq->u.data.length = 16;
++ if (copy_to_user(wrq->u.data.pointer, pAdapter->StaCfg.dev_name, wrq->u.data.length))
++ {
++ Status = -EFAULT;
++ }
++ break;
++ case RT_OID_802_11_QUERY_HT_PHYMODE:
++ pHTPhyMode = (OID_SET_HT_PHYMODE *) kmalloc(sizeof(OID_SET_HT_PHYMODE), MEM_ALLOC_FLAG);
++ if (pHTPhyMode)
++ {
++ pHTPhyMode->PhyMode = pAdapter->CommonCfg.PhyMode;
++ pHTPhyMode->HtMode = (UCHAR)pAdapter->MacTab.Content[BSSID_WCID].HTPhyMode.field.MODE;
++ pHTPhyMode->BW = (UCHAR)pAdapter->MacTab.Content[BSSID_WCID].HTPhyMode.field.BW;
++ pHTPhyMode->MCS= (UCHAR)pAdapter->MacTab.Content[BSSID_WCID].HTPhyMode.field.MCS;
++ pHTPhyMode->SHORTGI= (UCHAR)pAdapter->MacTab.Content[BSSID_WCID].HTPhyMode.field.ShortGI;
++ pHTPhyMode->STBC= (UCHAR)pAdapter->MacTab.Content[BSSID_WCID].HTPhyMode.field.STBC;
++
++ pHTPhyMode->ExtOffset = ((pAdapter->CommonCfg.CentralChannel < pAdapter->CommonCfg.Channel) ? (EXTCHA_BELOW) : (EXTCHA_ABOVE));
++ wrq->u.data.length = sizeof(OID_SET_HT_PHYMODE);
++ if (copy_to_user(wrq->u.data.pointer, pHTPhyMode, wrq->u.data.length))
++ {
++ Status = -EFAULT;
++ }
++ DBGPRINT(RT_DEBUG_TRACE, ("Query::RT_OID_802_11_QUERY_HT_PHYMODE (PhyMode = %d, MCS =%d, BW = %d, STBC = %d, ExtOffset=%d)\n",
++ pHTPhyMode->HtMode, pHTPhyMode->MCS, pHTPhyMode->BW, pHTPhyMode->STBC, pHTPhyMode->ExtOffset));
++ DBGPRINT(RT_DEBUG_TRACE, (" MlmeUpdateTxRates (.word = %x )\n", pAdapter->MacTab.Content[BSSID_WCID].HTPhyMode.word));
++ }
++ else
++ {
++ DBGPRINT(RT_DEBUG_TRACE, ("Query::RT_OID_802_11_STA_CONFIG(kmalloc failed)\n"));
++ Status = -EFAULT;
++ }
++ break;
++ case RT_OID_802_11_COUNTRY_REGION:
++ DBGPRINT(RT_DEBUG_TRACE, ("Query::RT_OID_802_11_COUNTRY_REGION \n"));
++ wrq->u.data.length = sizeof(ulInfo);
++ ulInfo = pAdapter->CommonCfg.CountryRegionForABand;
++ ulInfo = (ulInfo << 8)|(pAdapter->CommonCfg.CountryRegion);
++ if (copy_to_user(wrq->u.data.pointer, &ulInfo, wrq->u.data.length))
++ {
++ Status = -EFAULT;
++ }
++ break;
++ case RT_OID_802_11_QUERY_DAT_HT_PHYMODE:
++ pHTPhyMode = (OID_SET_HT_PHYMODE *) kmalloc(sizeof(OID_SET_HT_PHYMODE), MEM_ALLOC_FLAG);
++ if (pHTPhyMode)
++ {
++ pHTPhyMode->PhyMode = pAdapter->CommonCfg.PhyMode;
++ pHTPhyMode->HtMode = (UCHAR)pAdapter->CommonCfg.RegTransmitSetting.field.HTMODE;
++ pHTPhyMode->BW = (UCHAR)pAdapter->CommonCfg.RegTransmitSetting.field.BW;
++ pHTPhyMode->MCS= (UCHAR)pAdapter->StaCfg.DesiredTransmitSetting.field.MCS;
++ pHTPhyMode->SHORTGI= (UCHAR)pAdapter->CommonCfg.RegTransmitSetting.field.ShortGI;
++ pHTPhyMode->STBC= (UCHAR)pAdapter->CommonCfg.RegTransmitSetting.field.STBC;
++
++ wrq->u.data.length = sizeof(OID_SET_HT_PHYMODE);
++ if (copy_to_user(wrq->u.data.pointer, pHTPhyMode, wrq->u.data.length))
++ {
++ Status = -EFAULT;
++ }
++ DBGPRINT(RT_DEBUG_TRACE, ("Query::RT_OID_802_11_QUERY_HT_PHYMODE (PhyMode = %d, MCS =%d, BW = %d, STBC = %d, ExtOffset=%d)\n",
++ pHTPhyMode->HtMode, pHTPhyMode->MCS, pHTPhyMode->BW, pHTPhyMode->STBC, pHTPhyMode->ExtOffset));
++ DBGPRINT(RT_DEBUG_TRACE, (" MlmeUpdateTxRates (.word = %x )\n", pAdapter->MacTab.Content[BSSID_WCID].HTPhyMode.word));
++ }
++ else
++ {
++ DBGPRINT(RT_DEBUG_TRACE, ("Query::RT_OID_802_11_STA_CONFIG(kmalloc failed)\n"));
++ Status = -EFAULT;
++ }
++ break;
++ case RT_OID_QUERY_MULTIPLE_CARD_SUPPORT:
++ wrq->u.data.length = sizeof(UCHAR);
++ i = 0;
++#ifdef MULTIPLE_CARD_SUPPORT
++ i = 1;
++#endif // MULTIPLE_CARD_SUPPORT //
++ if (copy_to_user(wrq->u.data.pointer, &i, wrq->u.data.length))
++ {
++ Status = -EFAULT;
++ }
++ DBGPRINT(RT_DEBUG_TRACE, ("Query::RT_OID_QUERY_MULTIPLE_CARD_SUPPORT(=%d) \n", i));
++ break;
++#ifdef SNMP_SUPPORT
++ case RT_OID_802_11_MAC_ADDRESS:
++ wrq->u.data.length = MAC_ADDR_LEN;
++ Status = copy_to_user(wrq->u.data.pointer, &pAdapter->CurrentAddress, wrq->u.data.length);
++ break;
++
++ case RT_OID_802_11_MANUFACTUREROUI:
++ DBGPRINT(RT_DEBUG_TRACE, ("Query::RT_OID_802_11_MANUFACTUREROUI \n"));
++ wrq->u.data.length = ManufacturerOUI_LEN;
++ Status = copy_to_user(wrq->u.data.pointer, &pAdapter->CurrentAddress, wrq->u.data.length);
++ break;
++
++ case RT_OID_802_11_MANUFACTURERNAME:
++ DBGPRINT(RT_DEBUG_TRACE, ("Query::RT_OID_802_11_MANUFACTURERNAME \n"));
++ wrq->u.data.length = strlen(ManufacturerNAME);
++ Status = copy_to_user(wrq->u.data.pointer, ManufacturerNAME, wrq->u.data.length);
++ break;
++
++ case RT_OID_802_11_RESOURCETYPEIDNAME:
++ DBGPRINT(RT_DEBUG_TRACE, ("Query::RT_OID_802_11_RESOURCETYPEIDNAME \n"));
++ wrq->u.data.length = strlen(ResourceTypeIdName);
++ Status = copy_to_user(wrq->u.data.pointer, ResourceTypeIdName, wrq->u.data.length);
++ break;
++
++ case RT_OID_802_11_PRIVACYOPTIONIMPLEMENTED:
++ DBGPRINT(RT_DEBUG_TRACE, ("Query::RT_OID_802_11_PRIVACYOPTIONIMPLEMENTED \n"));
++ ulInfo = 1; // 1 is support wep else 2 is not support.
++ wrq->u.data.length = sizeof(ulInfo);
++ Status = copy_to_user(wrq->u.data.pointer, &ulInfo, wrq->u.data.length);
++ break;
++
++ case RT_OID_802_11_POWERMANAGEMENTMODE:
++ DBGPRINT(RT_DEBUG_TRACE, ("Query::RT_OID_802_11_POWERMANAGEMENTMODE \n"));
++ if (pAdapter->StaCfg.Psm == PSMP_ACTION)
++ ulInfo = 1; // 1 is power active else 2 is power save.
++ else
++ ulInfo = 2;
++
++ wrq->u.data.length = sizeof(ulInfo);
++ Status = copy_to_user(wrq->u.data.pointer, &ulInfo, wrq->u.data.length);
++ break;
++
++ case OID_802_11_WEPDEFAULTKEYVALUE:
++ DBGPRINT(RT_DEBUG_TRACE, ("Query::OID_802_11_WEPDEFAULTKEYVALUE \n"));
++ //KeyIdxValue.KeyIdx = pAd->PortCfg.MBSSID[pAd->IoctlIF].DefaultKeyId;
++ pKeyIdxValue = wrq->u.data.pointer;
++ DBGPRINT(RT_DEBUG_TRACE,("KeyIdxValue.KeyIdx = %d, \n",pKeyIdxValue->KeyIdx));
++ valueLen = pAdapter->SharedKey[BSS0][pAdapter->StaCfg.DefaultKeyId].KeyLen;
++ NdisMoveMemory(pKeyIdxValue->Value,
++ &pAdapter->SharedKey[BSS0][pAdapter->StaCfg.DefaultKeyId].Key,
++ valueLen);
++ pKeyIdxValue->Value[valueLen]='\0';
++
++ wrq->u.data.length = sizeof(DefaultKeyIdxValue);
++
++ Status = copy_to_user(wrq->u.data.pointer, pKeyIdxValue, wrq->u.data.length);
++ DBGPRINT(RT_DEBUG_TRACE,("DefaultKeyId = %d, total len = %d, str len=%d, KeyValue= %02x %02x %02x %02x \n", pAdapter->StaCfg.DefaultKeyId, wrq->u.data.length, pAdapter->SharedKey[BSS0][pAdapter->StaCfg.DefaultKeyId].KeyLen,
++ pAdapter->SharedKey[BSS0][0].Key[0],
++ pAdapter->SharedKey[BSS0][1].Key[0],
++ pAdapter->SharedKey[BSS0][2].Key[0],
++ pAdapter->SharedKey[BSS0][3].Key[0]));
++ break;
++
++ case OID_802_11_WEPDEFAULTKEYID:
++ DBGPRINT(RT_DEBUG_TRACE, ("Query::RT_OID_802_11_WEPDEFAULTKEYID \n"));
++ wrq->u.data.length = sizeof(UCHAR);
++ Status = copy_to_user(wrq->u.data.pointer, &pAdapter->StaCfg.DefaultKeyId, wrq->u.data.length);
++ DBGPRINT(RT_DEBUG_TRACE, ("DefaultKeyId =%d \n", pAdapter->StaCfg.DefaultKeyId));
++ break;
++
++ case RT_OID_802_11_WEPKEYMAPPINGLENGTH:
++ DBGPRINT(RT_DEBUG_TRACE, ("Query::RT_OID_802_11_WEPKEYMAPPINGLENGTH \n"));
++ wrq->u.data.length = sizeof(UCHAR);
++ Status = copy_to_user(wrq->u.data.pointer,
++ &pAdapter->SharedKey[BSS0][pAdapter->StaCfg.DefaultKeyId].KeyLen,
++ wrq->u.data.length);
++ break;
++
++ case OID_802_11_SHORTRETRYLIMIT:
++ DBGPRINT(RT_DEBUG_TRACE, ("Query::OID_802_11_SHORTRETRYLIMIT \n"));
++ wrq->u.data.length = sizeof(ULONG);
++ RTMP_IO_READ32(pAdapter, TX_RTY_CFG, &tx_rty_cfg.word);
++ ShortRetryLimit = tx_rty_cfg.field.ShortRtyLimit;
++ DBGPRINT(RT_DEBUG_TRACE, ("ShortRetryLimit =%ld, tx_rty_cfg.field.ShortRetryLimit=%d\n", ShortRetryLimit, tx_rty_cfg.field.ShortRtyLimit));
++ Status = copy_to_user(wrq->u.data.pointer, &ShortRetryLimit, wrq->u.data.length);
++ break;
++
++ case OID_802_11_LONGRETRYLIMIT:
++ DBGPRINT(RT_DEBUG_TRACE, ("Query::OID_802_11_LONGRETRYLIMIT \n"));
++ wrq->u.data.length = sizeof(ULONG);
++ RTMP_IO_READ32(pAdapter, TX_RTY_CFG, &tx_rty_cfg.word);
++ LongRetryLimit = tx_rty_cfg.field.LongRtyLimit;
++ DBGPRINT(RT_DEBUG_TRACE, ("LongRetryLimit =%ld, tx_rty_cfg.field.LongRtyLimit=%d\n", LongRetryLimit, tx_rty_cfg.field.LongRtyLimit));
++ Status = copy_to_user(wrq->u.data.pointer, &LongRetryLimit, wrq->u.data.length);
++ break;
++
++ case RT_OID_802_11_PRODUCTID:
++ DBGPRINT(RT_DEBUG_TRACE, ("Query::RT_OID_802_11_PRODUCTID \n"));
++
++#ifdef RT2870
++ sprintf(tmp, "%04x %04x\n", ((POS_COOKIE)pAdapter->OS_Cookie)->pUsb_Dev->descriptor.idVendor ,((POS_COOKIE)pAdapter->OS_Cookie)->pUsb_Dev->descriptor.idProduct);
++
++#endif // RT2870 //
++ wrq->u.data.length = strlen(tmp);
++ Status = copy_to_user(wrq->u.data.pointer, tmp, wrq->u.data.length);
++ break;
++
++ case RT_OID_802_11_MANUFACTUREID:
++ DBGPRINT(RT_DEBUG_TRACE, ("Query::RT_OID_802_11_MANUFACTUREID \n"));
++ wrq->u.data.length = strlen(ManufacturerNAME);
++ Status = copy_to_user(wrq->u.data.pointer, ManufacturerNAME, wrq->u.data.length);
++ break;
++
++ case OID_802_11_CURRENTCHANNEL:
++ DBGPRINT(RT_DEBUG_TRACE, ("Query::OID_802_11_CURRENTCHANNEL \n"));
++ wrq->u.data.length = sizeof(UCHAR);
++ DBGPRINT(RT_DEBUG_TRACE, ("sizeof UCHAR=%d, channel=%d \n", sizeof(UCHAR), pAdapter->CommonCfg.Channel));
++ Status = copy_to_user(wrq->u.data.pointer, &pAdapter->CommonCfg.Channel, wrq->u.data.length);
++ DBGPRINT(RT_DEBUG_TRACE, ("Status=%d\n", Status));
++ break;
++#endif //SNMP_SUPPORT
++
++ case OID_802_11_BUILD_CHANNEL_EX:
++ {
++ UCHAR value;
++ DBGPRINT(RT_DEBUG_TRACE, ("Query::OID_802_11_BUILD_CHANNEL_EX \n"));
++ wrq->u.data.length = sizeof(UCHAR);
++#ifdef EXT_BUILD_CHANNEL_LIST
++ DBGPRINT(RT_DEBUG_TRACE, ("Support EXT_BUILD_CHANNEL_LIST.\n"));
++ value = 1;
++#else
++ DBGPRINT(RT_DEBUG_TRACE, ("Doesn't support EXT_BUILD_CHANNEL_LIST.\n"));
++ value = 0;
++#endif // EXT_BUILD_CHANNEL_LIST //
++ Status = copy_to_user(wrq->u.data.pointer, &value, 1);
++ DBGPRINT(RT_DEBUG_TRACE, ("Status=%d\n", Status));
++ }
++ break;
++
++ case OID_802_11_GET_CH_LIST:
++ {
++ PRT_CHANNEL_LIST_INFO pChListBuf;
++
++ DBGPRINT(RT_DEBUG_TRACE, ("Query::OID_802_11_GET_CH_LIST \n"));
++ if (pAdapter->ChannelListNum == 0)
++ {
++ wrq->u.data.length = 0;
++ break;
++ }
++
++ pChListBuf = (RT_CHANNEL_LIST_INFO *) kmalloc(sizeof(RT_CHANNEL_LIST_INFO), MEM_ALLOC_FLAG);
++ if (pChListBuf == NULL)
++ {
++ wrq->u.data.length = 0;
++ break;
++ }
++
++ pChListBuf->ChannelListNum = pAdapter->ChannelListNum;
++ for (i = 0; i < pChListBuf->ChannelListNum; i++)
++ pChListBuf->ChannelList[i] = pAdapter->ChannelList[i].Channel;
++
++ wrq->u.data.length = sizeof(RT_CHANNEL_LIST_INFO);
++ Status = copy_to_user(wrq->u.data.pointer, pChListBuf, sizeof(RT_CHANNEL_LIST_INFO));
++ DBGPRINT(RT_DEBUG_TRACE, ("Status=%d\n", Status));
++
++ if (pChListBuf)
++ kfree(pChListBuf);
++ }
++ break;
++
++ case OID_802_11_GET_COUNTRY_CODE:
++ DBGPRINT(RT_DEBUG_TRACE, ("Query::OID_802_11_GET_COUNTRY_CODE \n"));
++ wrq->u.data.length = 2;
++ Status = copy_to_user(wrq->u.data.pointer, &pAdapter->CommonCfg.CountryCode, 2);
++ DBGPRINT(RT_DEBUG_TRACE, ("Status=%d\n", Status));
++ break;
++
++ case OID_802_11_GET_CHANNEL_GEOGRAPHY:
++ DBGPRINT(RT_DEBUG_TRACE, ("Query::OID_802_11_GET_CHANNEL_GEOGRAPHY \n"));
++ wrq->u.data.length = 1;
++ Status = copy_to_user(wrq->u.data.pointer, &pAdapter->CommonCfg.Geography, 1);
++ DBGPRINT(RT_DEBUG_TRACE, ("Status=%d\n", Status));
++ break;
++
++
++#ifdef QOS_DLS_SUPPORT
++ case RT_OID_802_11_QUERY_DLS:
++ wrq->u.data.length = sizeof(BOOLEAN);
++ Status = copy_to_user(wrq->u.data.pointer, &pAdapter->CommonCfg.bDLSCapable, wrq->u.data.length);
++ DBGPRINT(RT_DEBUG_TRACE, ("Query::RT_OID_802_11_QUERY_DLS(=%d)\n", pAdapter->CommonCfg.bDLSCapable));
++ break;
++
++ case RT_OID_802_11_QUERY_DLS_PARAM:
++ {
++ PRT_802_11_DLS_INFO pDlsInfo = kmalloc(sizeof(RT_802_11_DLS_INFO), GFP_ATOMIC);
++ if (pDlsInfo == NULL)
++ break;
++
++ for (i=0; i<MAX_NUM_OF_DLS_ENTRY; i++)
++ {
++ RTMPMoveMemory(&pDlsInfo->Entry[i], &pAdapter->StaCfg.DLSEntry[i], sizeof(RT_802_11_DLS_UI));
++ }
++
++ pDlsInfo->num = MAX_NUM_OF_DLS_ENTRY;
++ wrq->u.data.length = sizeof(RT_802_11_DLS_INFO);
++ Status = copy_to_user(wrq->u.data.pointer, pDlsInfo, wrq->u.data.length);
++ DBGPRINT(RT_DEBUG_TRACE, ("Query::RT_OID_802_11_QUERY_DLS_PARAM\n"));
++
++ if (pDlsInfo)
++ kfree(pDlsInfo);
++ }
++ break;
++#endif // QOS_DLS_SUPPORT //
++ default:
++ DBGPRINT(RT_DEBUG_TRACE, ("Query::unknown IOCTL's subcmd = 0x%08x\n", cmd));
++ Status = -EOPNOTSUPP;
++ break;
++ }
++ return Status;
++}
++
++INT rt28xx_sta_ioctl(
++ IN struct net_device *net_dev,
++ IN OUT struct ifreq *rq,
++ IN INT cmd)
++{
++ POS_COOKIE pObj;
++ VIRTUAL_ADAPTER *pVirtualAd = NULL;
++ RTMP_ADAPTER *pAd = NULL;
++ struct iwreq *wrq = (struct iwreq *) rq;
++ BOOLEAN StateMachineTouched = FALSE;
++ INT Status = NDIS_STATUS_SUCCESS;
++ USHORT subcmd;
++
++ if (net_dev->priv_flags == INT_MAIN)
++ {
++ pAd = net_dev->priv;
++ }
++ else
++ {
++ pVirtualAd = net_dev->priv;
++ pAd = pVirtualAd->RtmpDev->priv;
++ }
++ pObj = (POS_COOKIE) pAd->OS_Cookie;
++
++ if (pAd == NULL)
++ {
++ /* if 1st open fail, pAd will be free;
++ So the net_dev->priv will be NULL in 2rd open */
++ return -ENETDOWN;
++ }
++
++ //check if the interface is down
++ if(!RTMP_TEST_FLAG(pAd, fRTMP_ADAPTER_INTERRUPT_IN_USE))
++ {
++#ifdef CONFIG_APSTA_MIXED_SUPPORT
++ if (wrq->u.data.pointer == NULL)
++ {
++ return Status;
++ }
++
++ if (strstr(wrq->u.data.pointer, "OpMode") == NULL)
++#endif // CONFIG_APSTA_MIXED_SUPPORT //
++ {
++ DBGPRINT(RT_DEBUG_TRACE, ("INFO::Network is down!\n"));
++ return -ENETDOWN;
++ }
++ }
++
++ { // determine this ioctl command is comming from which interface.
++ pObj->ioctl_if_type = INT_MAIN;
++ pObj->ioctl_if = MAIN_MBSSID;
++ }
++
++ switch(cmd)
++ {
++#ifdef RALINK_ATE
++#ifdef RALINK_28xx_QA
++ case RTPRIV_IOCTL_ATE:
++ {
++ RtmpDoAte(pAd, wrq);
++ }
++ break;
++#endif // RALINK_28xx_QA //
++#endif // RALINK_ATE //
++ case SIOCGIFHWADDR:
++ DBGPRINT(RT_DEBUG_TRACE, ("IOCTL::SIOCGIFHWADDR\n"));
++ memcpy(wrq->u.name, pAd->CurrentAddress, ETH_ALEN);
++ break;
++ case SIOCGIWNAME:
++ {
++ char *name=&wrq->u.name[0];
++ rt_ioctl_giwname(net_dev, NULL, name, NULL);
++ break;
++ }
++ case SIOCGIWESSID: //Get ESSID
++ {
++ struct iw_point *essid=&wrq->u.essid;
++ rt_ioctl_giwessid(net_dev, NULL, essid, essid->pointer);
++ break;
++ }
++ case SIOCSIWESSID: //Set ESSID
++ {
++ struct iw_point *essid=&wrq->u.essid;
++ rt_ioctl_siwessid(net_dev, NULL, essid, essid->pointer);
++ break;
++ }
++ case SIOCSIWNWID: // set network id (the cell)
++ case SIOCGIWNWID: // get network id
++ Status = -EOPNOTSUPP;
++ break;
++ case SIOCSIWFREQ: //set channel/frequency (Hz)
++ {
++ struct iw_freq *freq=&wrq->u.freq;
++ rt_ioctl_siwfreq(net_dev, NULL, freq, NULL);
++ break;
++ }
++ case SIOCGIWFREQ: // get channel/frequency (Hz)
++ {
++ struct iw_freq *freq=&wrq->u.freq;
++ rt_ioctl_giwfreq(net_dev, NULL, freq, NULL);
++ break;
++ }
++ case SIOCSIWNICKN: //set node name/nickname
++ {
++ struct iw_point *data=&wrq->u.data;
++ rt_ioctl_siwnickn(net_dev, NULL, data, NULL);
++ break;
++ }
++ case SIOCGIWNICKN: //get node name/nickname
++ {
++ struct iw_point *data=&wrq->u.data;
++ rt_ioctl_giwnickn(net_dev, NULL, data, NULL);
++ break;
++ }
++ case SIOCGIWRATE: //get default bit rate (bps)
++ rt_ioctl_giwrate(net_dev, NULL, &wrq->u, NULL);
++ break;
++ case SIOCSIWRATE: //set default bit rate (bps)
++ rt_ioctl_siwrate(net_dev, NULL, &wrq->u, NULL);
++ break;
++ case SIOCGIWRTS: // get RTS/CTS threshold (bytes)
++ {
++ struct iw_param *rts=&wrq->u.rts;
++ rt_ioctl_giwrts(net_dev, NULL, rts, NULL);
++ break;
++ }
++ case SIOCSIWRTS: //set RTS/CTS threshold (bytes)
++ {
++ struct iw_param *rts=&wrq->u.rts;
++ rt_ioctl_siwrts(net_dev, NULL, rts, NULL);
++ break;
++ }
++ case SIOCGIWFRAG: //get fragmentation thr (bytes)
++ {
++ struct iw_param *frag=&wrq->u.frag;
++ rt_ioctl_giwfrag(net_dev, NULL, frag, NULL);
++ break;
++ }
++ case SIOCSIWFRAG: //set fragmentation thr (bytes)
++ {
++ struct iw_param *frag=&wrq->u.frag;
++ rt_ioctl_siwfrag(net_dev, NULL, frag, NULL);
++ break;
++ }
++ case SIOCGIWENCODE: //get encoding token & mode
++ {
++ struct iw_point *erq=&wrq->u.encoding;
++ if(erq->pointer)
++ rt_ioctl_giwencode(net_dev, NULL, erq, erq->pointer);
++ break;
++ }
++ case SIOCSIWENCODE: //set encoding token & mode
++ {
++ struct iw_point *erq=&wrq->u.encoding;
++ if(erq->pointer)
++ rt_ioctl_siwencode(net_dev, NULL, erq, erq->pointer);
++ break;
++ }
++ case SIOCGIWAP: //get access point MAC addresses
++ {
++ struct sockaddr *ap_addr=&wrq->u.ap_addr;
++ rt_ioctl_giwap(net_dev, NULL, ap_addr, ap_addr->sa_data);
++ break;
++ }
++ case SIOCSIWAP: //set access point MAC addresses
++ {
++ struct sockaddr *ap_addr=&wrq->u.ap_addr;
++ rt_ioctl_siwap(net_dev, NULL, ap_addr, ap_addr->sa_data);
++ break;
++ }
++ case SIOCGIWMODE: //get operation mode
++ {
++ __u32 *mode=&wrq->u.mode;
++ rt_ioctl_giwmode(net_dev, NULL, mode, NULL);
++ break;
++ }
++ case SIOCSIWMODE: //set operation mode
++ {
++ __u32 *mode=&wrq->u.mode;
++ rt_ioctl_siwmode(net_dev, NULL, mode, NULL);
++ break;
++ }
++ case SIOCGIWSENS: //get sensitivity (dBm)
++ case SIOCSIWSENS: //set sensitivity (dBm)
++ case SIOCGIWPOWER: //get Power Management settings
++ case SIOCSIWPOWER: //set Power Management settings
++ case SIOCGIWTXPOW: //get transmit power (dBm)
++ case SIOCSIWTXPOW: //set transmit power (dBm)
++ case SIOCGIWRANGE: //Get range of parameters
++ case SIOCGIWRETRY: //get retry limits and lifetime
++ case SIOCSIWRETRY: //set retry limits and lifetime
++ Status = -EOPNOTSUPP;
++ break;
++ case RT_PRIV_IOCTL:
++ subcmd = wrq->u.data.flags;
++ if( subcmd & OID_GET_SET_TOGGLE)
++ Status = RTMPSetInformation(pAd, rq, subcmd);
++ else
++ Status = RTMPQueryInformation(pAd, rq, subcmd);
++ break;
++ case SIOCGIWPRIV:
++ if (wrq->u.data.pointer)
++ {
++ if ( access_ok(VERIFY_WRITE, wrq->u.data.pointer, sizeof(privtab)) != TRUE)
++ break;
++ wrq->u.data.length = sizeof(privtab) / sizeof(privtab[0]);
++ if (copy_to_user(wrq->u.data.pointer, privtab, sizeof(privtab)))
++ Status = -EFAULT;
++ }
++ break;
++ case RTPRIV_IOCTL_SET:
++ if(access_ok(VERIFY_READ, wrq->u.data.pointer, wrq->u.data.length) != TRUE)
++ break;
++ rt_ioctl_setparam(net_dev, NULL, NULL, wrq->u.data.pointer);
++ break;
++ case RTPRIV_IOCTL_GSITESURVEY:
++ RTMPIoctlGetSiteSurvey(pAd, wrq);
++ break;
++#ifdef DBG
++ case RTPRIV_IOCTL_MAC:
++ RTMPIoctlMAC(pAd, wrq);
++ break;
++ case RTPRIV_IOCTL_E2P:
++ RTMPIoctlE2PROM(pAd, wrq);
++ break;
++#endif // DBG //
++ case SIOCETHTOOL:
++ break;
++ default:
++ DBGPRINT(RT_DEBUG_ERROR, ("IOCTL::unknown IOCTL's cmd = 0x%08x\n", cmd));
++ Status = -EOPNOTSUPP;
++ break;
++ }
++
++ if(StateMachineTouched) // Upper layer sent a MLME-related operations
++ RT28XX_MLME_HANDLER(pAd);
++
++ return Status;
++}
++
++/*
++ ==========================================================================
++ Description:
++ Set SSID
++ Return:
++ TRUE if all parameters are OK, FALSE otherwise
++ ==========================================================================
++*/
++INT Set_SSID_Proc(
++ IN PRTMP_ADAPTER pAdapter,
++ IN PUCHAR arg)
++{
++ NDIS_802_11_SSID Ssid, *pSsid=NULL;
++ BOOLEAN StateMachineTouched = FALSE;
++ int success = TRUE;
++
++ if( strlen(arg) <= MAX_LEN_OF_SSID)
++ {
++ NdisZeroMemory(&Ssid, sizeof(NDIS_802_11_SSID));
++ if (strlen(arg) != 0)
++ {
++ NdisMoveMemory(Ssid.Ssid, arg, strlen(arg));
++ Ssid.SsidLength = strlen(arg);
++ }
++ else //ANY ssid
++ {
++ Ssid.SsidLength = 0;
++ memcpy(Ssid.Ssid, "", 0);
++ pAdapter->StaCfg.BssType = BSS_INFRA;
++ pAdapter->StaCfg.AuthMode = Ndis802_11AuthModeOpen;
++ pAdapter->StaCfg.WepStatus = Ndis802_11EncryptionDisabled;
++ }
++ pSsid = &Ssid;
++
++ if (pAdapter->Mlme.CntlMachine.CurrState != CNTL_IDLE)
++ {
++ RT28XX_MLME_RESET_STATE_MACHINE(pAdapter);
++ DBGPRINT(RT_DEBUG_TRACE, ("!!! MLME busy, reset MLME state machine !!!\n"));
++ }
++
++ pAdapter->MlmeAux.CurrReqIsFromNdis = TRUE;
++ pAdapter->StaCfg.bScanReqIsFromWebUI = FALSE;
++ pAdapter->bConfigChanged = TRUE;
++
++ MlmeEnqueue(pAdapter,
++ MLME_CNTL_STATE_MACHINE,
++ OID_802_11_SSID,
++ sizeof(NDIS_802_11_SSID),
++ (VOID *)pSsid);
++
++ StateMachineTouched = TRUE;
++ DBGPRINT(RT_DEBUG_TRACE, ("Set_SSID_Proc::(Len=%d,Ssid=%s)\n", Ssid.SsidLength, Ssid.Ssid));
++ }
++ else
++ success = FALSE;
++
++ if (StateMachineTouched) // Upper layer sent a MLME-related operations
++ RT28XX_MLME_HANDLER(pAdapter);
++
++ return success;
++}
++
++#ifdef WMM_SUPPORT
++/*
++ ==========================================================================
++ Description:
++ Set WmmCapable Enable or Disable
++ Return:
++ TRUE if all parameters are OK, FALSE otherwise
++ ==========================================================================
++*/
++INT Set_WmmCapable_Proc(
++ IN PRTMP_ADAPTER pAd,
++ IN PUCHAR arg)
++{
++ BOOLEAN bWmmCapable;
++
++ bWmmCapable = simple_strtol(arg, 0, 10);
++
++ if ((bWmmCapable == 1)
++#ifdef RT2870
++ && (pAd->NumberOfPipes >= 5)
++#endif // RT2870 //
++ )
++ pAd->CommonCfg.bWmmCapable = TRUE;
++ else if (bWmmCapable == 0)
++ pAd->CommonCfg.bWmmCapable = FALSE;
++ else
++ return FALSE; //Invalid argument
++
++ DBGPRINT(RT_DEBUG_TRACE, ("Set_WmmCapable_Proc::(bWmmCapable=%d)\n",
++ pAd->CommonCfg.bWmmCapable));
++
++ return TRUE;
++}
++#endif // WMM_SUPPORT //
++
++/*
++ ==========================================================================
++ Description:
++ Set Network Type(Infrastructure/Adhoc mode)
++ Return:
++ TRUE if all parameters are OK, FALSE otherwise
++ ==========================================================================
++*/
++INT Set_NetworkType_Proc(
++ IN PRTMP_ADAPTER pAdapter,
++ IN PUCHAR arg)
++{
++ UINT32 Value = 0;
++
++ if (strcmp(arg, "Adhoc") == 0)
++ {
++ if (pAdapter->StaCfg.BssType != BSS_ADHOC)
++ {
++ // Config has changed
++ pAdapter->bConfigChanged = TRUE;
++ if (MONITOR_ON(pAdapter))
++ {
++ RTMP_IO_WRITE32(pAdapter, RX_FILTR_CFG, STANORMAL);
++ RTMP_IO_READ32(pAdapter, MAC_SYS_CTRL, &Value);
++ Value &= (~0x80);
++ RTMP_IO_WRITE32(pAdapter, MAC_SYS_CTRL, Value);
++ OPSTATUS_CLEAR_FLAG(pAdapter, fOP_STATUS_MEDIA_STATE_CONNECTED);
++ pAdapter->StaCfg.bAutoReconnect = TRUE;
++ LinkDown(pAdapter, FALSE);
++ }
++ if (INFRA_ON(pAdapter))
++ {
++ //BOOLEAN Cancelled;
++ // Set the AutoReconnectSsid to prevent it reconnect to old SSID
++ // Since calling this indicate user don't want to connect to that SSID anymore.
++ pAdapter->MlmeAux.AutoReconnectSsidLen= 32;
++ NdisZeroMemory(pAdapter->MlmeAux.AutoReconnectSsid, pAdapter->MlmeAux.AutoReconnectSsidLen);
++
++ LinkDown(pAdapter, FALSE);
++
++ DBGPRINT(RT_DEBUG_TRACE, ("NDIS_STATUS_MEDIA_DISCONNECT Event BB!\n"));
++ }
++ }
++ pAdapter->StaCfg.BssType = BSS_ADHOC;
++ pAdapter->net_dev->type = pAdapter->StaCfg.OriDevType;
++ DBGPRINT(RT_DEBUG_TRACE, ("===>Set_NetworkType_Proc::(AD-HOC)\n"));
++ }
++ else if (strcmp(arg, "Infra") == 0)
++ {
++ if (pAdapter->StaCfg.BssType != BSS_INFRA)
++ {
++ // Config has changed
++ pAdapter->bConfigChanged = TRUE;
++ if (MONITOR_ON(pAdapter))
++ {
++ RTMP_IO_WRITE32(pAdapter, RX_FILTR_CFG, STANORMAL);
++ RTMP_IO_READ32(pAdapter, MAC_SYS_CTRL, &Value);
++ Value &= (~0x80);
++ RTMP_IO_WRITE32(pAdapter, MAC_SYS_CTRL, Value);
++ OPSTATUS_CLEAR_FLAG(pAdapter, fOP_STATUS_MEDIA_STATE_CONNECTED);
++ pAdapter->StaCfg.bAutoReconnect = TRUE;
++ LinkDown(pAdapter, FALSE);
++ }
++ if (ADHOC_ON(pAdapter))
++ {
++ // Set the AutoReconnectSsid to prevent it reconnect to old SSID
++ // Since calling this indicate user don't want to connect to that SSID anymore.
++ pAdapter->MlmeAux.AutoReconnectSsidLen= 32;
++ NdisZeroMemory(pAdapter->MlmeAux.AutoReconnectSsid, pAdapter->MlmeAux.AutoReconnectSsidLen);
++
++ LinkDown(pAdapter, FALSE);
++ }
++ }
++ pAdapter->StaCfg.BssType = BSS_INFRA;
++ pAdapter->net_dev->type = pAdapter->StaCfg.OriDevType;
++ DBGPRINT(RT_DEBUG_TRACE, ("===>Set_NetworkType_Proc::(INFRA)\n"));
++
++ pAdapter->StaCfg.BssType = BSS_INFRA;
++ }
++ else if (strcmp(arg, "Monitor") == 0)
++ {
++ UCHAR bbpValue = 0;
++ BCN_TIME_CFG_STRUC csr;
++ OPSTATUS_CLEAR_FLAG(pAdapter, fOP_STATUS_INFRA_ON);
++ OPSTATUS_CLEAR_FLAG(pAdapter, fOP_STATUS_ADHOC_ON);
++ OPSTATUS_SET_FLAG(pAdapter, fOP_STATUS_MEDIA_STATE_CONNECTED);
++ // disable all periodic state machine
++ pAdapter->StaCfg.bAutoReconnect = FALSE;
++ // reset all mlme state machine
++ RT28XX_MLME_RESET_STATE_MACHINE(pAdapter);
++ DBGPRINT(RT_DEBUG_TRACE, ("fOP_STATUS_MEDIA_STATE_CONNECTED \n"));
++ if (pAdapter->CommonCfg.CentralChannel == 0)
++ {
++#ifdef DOT11_N_SUPPORT
++ if (pAdapter->CommonCfg.PhyMode == PHY_11AN_MIXED)
++ pAdapter->CommonCfg.CentralChannel = 36;
++ else
++#endif // DOT11_N_SUPPORT //
++ pAdapter->CommonCfg.CentralChannel = 6;
++ }
++#ifdef DOT11_N_SUPPORT
++ else
++ N_ChannelCheck(pAdapter);
++#endif // DOT11_N_SUPPORT //
++
++#ifdef DOT11_N_SUPPORT
++ if (pAdapter->CommonCfg.PhyMode >= PHY_11ABGN_MIXED &&
++ pAdapter->CommonCfg.RegTransmitSetting.field.BW == BW_40 &&
++ pAdapter->CommonCfg.RegTransmitSetting.field.EXTCHA == EXTCHA_ABOVE)
++ {
++ // 40MHz ,control channel at lower
++ RTMP_BBP_IO_READ8_BY_REG_ID(pAdapter, BBP_R4, &bbpValue);
++ bbpValue &= (~0x18);
++ bbpValue |= 0x10;
++ RTMP_BBP_IO_WRITE8_BY_REG_ID(pAdapter, BBP_R4, bbpValue);
++ pAdapter->CommonCfg.BBPCurrentBW = BW_40;
++ // RX : control channel at lower
++ RTMP_BBP_IO_READ8_BY_REG_ID(pAdapter, BBP_R3, &bbpValue);
++ bbpValue &= (~0x20);
++ RTMP_BBP_IO_WRITE8_BY_REG_ID(pAdapter, BBP_R3, bbpValue);
++
++ RTMP_IO_READ32(pAdapter, TX_BAND_CFG, &Value);
++ Value &= 0xfffffffe;
++ RTMP_IO_WRITE32(pAdapter, TX_BAND_CFG, Value);
++ pAdapter->CommonCfg.CentralChannel = pAdapter->CommonCfg.Channel + 2;
++ AsicSwitchChannel(pAdapter, pAdapter->CommonCfg.CentralChannel, FALSE);
++ AsicLockChannel(pAdapter, pAdapter->CommonCfg.CentralChannel);
++ DBGPRINT(RT_DEBUG_TRACE, ("BW_40 ,control_channel(%d), CentralChannel(%d) \n",
++ pAdapter->CommonCfg.Channel,
++ pAdapter->CommonCfg.CentralChannel));
++ }
++ else if (pAdapter->CommonCfg.PhyMode >= PHY_11ABGN_MIXED &&
++ pAdapter->CommonCfg.RegTransmitSetting.field.BW == BW_40 &&
++ pAdapter->CommonCfg.RegTransmitSetting.field.EXTCHA == EXTCHA_BELOW)
++ {
++ // 40MHz ,control channel at upper
++ RTMP_BBP_IO_READ8_BY_REG_ID(pAdapter, BBP_R4, &bbpValue);
++ bbpValue &= (~0x18);
++ bbpValue |= 0x10;
++ RTMP_BBP_IO_WRITE8_BY_REG_ID(pAdapter, BBP_R4, bbpValue);
++ pAdapter->CommonCfg.BBPCurrentBW = BW_40;
++ RTMP_IO_READ32(pAdapter, TX_BAND_CFG, &Value);
++ Value |= 0x1;
++ RTMP_IO_WRITE32(pAdapter, TX_BAND_CFG, Value);
++
++ RTMP_BBP_IO_READ8_BY_REG_ID(pAdapter, BBP_R3, &bbpValue);
++ bbpValue |= (0x20);
++ RTMP_BBP_IO_WRITE8_BY_REG_ID(pAdapter, BBP_R3, bbpValue);
++ pAdapter->CommonCfg.CentralChannel = pAdapter->CommonCfg.Channel - 2;
++ AsicSwitchChannel(pAdapter, pAdapter->CommonCfg.CentralChannel, FALSE);
++ AsicLockChannel(pAdapter, pAdapter->CommonCfg.CentralChannel);
++ DBGPRINT(RT_DEBUG_TRACE, ("BW_40 ,control_channel(%d), CentralChannel(%d) \n",
++ pAdapter->CommonCfg.Channel,
++ pAdapter->CommonCfg.CentralChannel));
++ }
++ else
++#endif // DOT11_N_SUPPORT //
++ {
++ // 20MHz
++ RTMP_BBP_IO_READ8_BY_REG_ID(pAdapter, BBP_R4, &bbpValue);
++ bbpValue &= (~0x18);
++ RTMP_BBP_IO_WRITE8_BY_REG_ID(pAdapter, BBP_R4, bbpValue);
++ pAdapter->CommonCfg.BBPCurrentBW = BW_20;
++ AsicSwitchChannel(pAdapter, pAdapter->CommonCfg.Channel, FALSE);
++ AsicLockChannel(pAdapter, pAdapter->CommonCfg.Channel);
++ DBGPRINT(RT_DEBUG_TRACE, ("BW_20, Channel(%d)\n", pAdapter->CommonCfg.Channel));
++ }
++ // Enable Rx with promiscuous reception
++ RTMP_IO_WRITE32(pAdapter, RX_FILTR_CFG, 0x3);
++ // ASIC supporsts sniffer function with replacing RSSI with timestamp.
++ //RTMP_IO_READ32(pAdapter, MAC_SYS_CTRL, &Value);
++ //Value |= (0x80);
++ //RTMP_IO_WRITE32(pAdapter, MAC_SYS_CTRL, Value);
++ // disable sync
++ RTMP_IO_READ32(pAdapter, BCN_TIME_CFG, &csr.word);
++ csr.field.bBeaconGen = 0;
++ csr.field.bTBTTEnable = 0;
++ csr.field.TsfSyncMode = 0;
++ RTMP_IO_WRITE32(pAdapter, BCN_TIME_CFG, csr.word);
++
++ pAdapter->StaCfg.BssType = BSS_MONITOR;
++ pAdapter->net_dev->type = ARPHRD_IEEE80211_PRISM; //ARPHRD_IEEE80211; // IEEE80211
++ DBGPRINT(RT_DEBUG_TRACE, ("===>Set_NetworkType_Proc::(MONITOR)\n"));
++ }
++
++ // Reset Ralink supplicant to not use, it will be set to start when UI set PMK key
++ pAdapter->StaCfg.WpaState = SS_NOTUSE;
++
++ DBGPRINT(RT_DEBUG_TRACE, ("Set_NetworkType_Proc::(NetworkType=%d)\n", pAdapter->StaCfg.BssType));
++
++ return TRUE;
++}
++
++/*
++ ==========================================================================
++ Description:
++ Set Authentication mode
++ Return:
++ TRUE if all parameters are OK, FALSE otherwise
++ ==========================================================================
++*/
++INT Set_AuthMode_Proc(
++ IN PRTMP_ADAPTER pAdapter,
++ IN PUCHAR arg)
++{
++ if ((strcmp(arg, "WEPAUTO") == 0) || (strcmp(arg, "wepauto") == 0))
++ pAdapter->StaCfg.AuthMode = Ndis802_11AuthModeAutoSwitch;
++ else if ((strcmp(arg, "OPEN") == 0) || (strcmp(arg, "open") == 0))
++ pAdapter->StaCfg.AuthMode = Ndis802_11AuthModeOpen;
++ else if ((strcmp(arg, "SHARED") == 0) || (strcmp(arg, "shared") == 0))
++ pAdapter->StaCfg.AuthMode = Ndis802_11AuthModeShared;
++ else if ((strcmp(arg, "WPAPSK") == 0) || (strcmp(arg, "wpapsk") == 0))
++ pAdapter->StaCfg.AuthMode = Ndis802_11AuthModeWPAPSK;
++ else if ((strcmp(arg, "WPANONE") == 0) || (strcmp(arg, "wpanone") == 0))
++ pAdapter->StaCfg.AuthMode = Ndis802_11AuthModeWPANone;
++ else if ((strcmp(arg, "WPA2PSK") == 0) || (strcmp(arg, "wpa2psk") == 0))
++ pAdapter->StaCfg.AuthMode = Ndis802_11AuthModeWPA2PSK;
++#ifdef WPA_SUPPLICANT_SUPPORT
++ else if ((strcmp(arg, "WPA") == 0) || (strcmp(arg, "wpa") == 0))
++ pAdapter->StaCfg.AuthMode = Ndis802_11AuthModeWPA;
++ else if ((strcmp(arg, "WPA2") == 0) || (strcmp(arg, "wpa2") == 0))
++ pAdapter->StaCfg.AuthMode = Ndis802_11AuthModeWPA2;
++#endif // WPA_SUPPLICANT_SUPPORT //
++ else
++ return FALSE;
++
++ pAdapter->StaCfg.PortSecured = WPA_802_1X_PORT_NOT_SECURED;
++
++ DBGPRINT(RT_DEBUG_TRACE, ("Set_AuthMode_Proc::(AuthMode=%d)\n", pAdapter->StaCfg.AuthMode));
++
++ return TRUE;
++}
++
++/*
++ ==========================================================================
++ Description:
++ Set Encryption Type
++ Return:
++ TRUE if all parameters are OK, FALSE otherwise
++ ==========================================================================
++*/
++INT Set_EncrypType_Proc(
++ IN PRTMP_ADAPTER pAdapter,
++ IN PUCHAR arg)
++{
++ if ((strcmp(arg, "NONE") == 0) || (strcmp(arg, "none") == 0))
++ {
++ if (pAdapter->StaCfg.AuthMode >= Ndis802_11AuthModeWPA)
++ return TRUE; // do nothing
++
++ pAdapter->StaCfg.WepStatus = Ndis802_11WEPDisabled;
++ pAdapter->StaCfg.PairCipher = Ndis802_11WEPDisabled;
++ pAdapter->StaCfg.GroupCipher = Ndis802_11WEPDisabled;
++ }
++ else if ((strcmp(arg, "WEP") == 0) || (strcmp(arg, "wep") == 0))
++ {
++ if (pAdapter->StaCfg.AuthMode >= Ndis802_11AuthModeWPA)
++ return TRUE; // do nothing
++
++ pAdapter->StaCfg.WepStatus = Ndis802_11WEPEnabled;
++ pAdapter->StaCfg.PairCipher = Ndis802_11WEPEnabled;
++ pAdapter->StaCfg.GroupCipher = Ndis802_11WEPEnabled;
++ }
++ else if ((strcmp(arg, "TKIP") == 0) || (strcmp(arg, "tkip") == 0))
++ {
++ if (pAdapter->StaCfg.AuthMode < Ndis802_11AuthModeWPA)
++ return TRUE; // do nothing
++
++ pAdapter->StaCfg.WepStatus = Ndis802_11Encryption2Enabled;
++ pAdapter->StaCfg.PairCipher = Ndis802_11Encryption2Enabled;
++ pAdapter->StaCfg.GroupCipher = Ndis802_11Encryption2Enabled;
++ }
++ else if ((strcmp(arg, "AES") == 0) || (strcmp(arg, "aes") == 0))
++ {
++ if (pAdapter->StaCfg.AuthMode < Ndis802_11AuthModeWPA)
++ return TRUE; // do nothing
++
++ pAdapter->StaCfg.WepStatus = Ndis802_11Encryption3Enabled;
++ pAdapter->StaCfg.PairCipher = Ndis802_11Encryption3Enabled;
++ pAdapter->StaCfg.GroupCipher = Ndis802_11Encryption3Enabled;
++ }
++ else
++ return FALSE;
++
++ pAdapter->StaCfg.OrigWepStatus = pAdapter->StaCfg.WepStatus;
++
++ DBGPRINT(RT_DEBUG_TRACE, ("Set_EncrypType_Proc::(EncrypType=%d)\n", pAdapter->StaCfg.WepStatus));
++
++ return TRUE;
++}
++
++/*
++ ==========================================================================
++ Description:
++ Set Default Key ID
++ Return:
++ TRUE if all parameters are OK, FALSE otherwise
++ ==========================================================================
++*/
++INT Set_DefaultKeyID_Proc(
++ IN PRTMP_ADAPTER pAdapter,
++ IN PUCHAR arg)
++{
++ ULONG KeyIdx;
++
++ KeyIdx = simple_strtol(arg, 0, 10);
++ if((KeyIdx >= 1 ) && (KeyIdx <= 4))
++ pAdapter->StaCfg.DefaultKeyId = (UCHAR) (KeyIdx - 1 );
++ else
++ return FALSE; //Invalid argument
++
++ DBGPRINT(RT_DEBUG_TRACE, ("Set_DefaultKeyID_Proc::(DefaultKeyID=%d)\n", pAdapter->StaCfg.DefaultKeyId));
++
++ return TRUE;
++}
++
++/*
++ ==========================================================================
++ Description:
++ Set WEP KEY1
++ Return:
++ TRUE if all parameters are OK, FALSE otherwise
++ ==========================================================================
++*/
++INT Set_Key1_Proc(
++ IN PRTMP_ADAPTER pAdapter,
++ IN PUCHAR arg)
++{
++ int KeyLen;
++ int i;
++ UCHAR CipherAlg=CIPHER_WEP64;
++
++ if (pAdapter->StaCfg.AuthMode >= Ndis802_11AuthModeWPA)
++ return TRUE; // do nothing
++
++ KeyLen = strlen(arg);
++
++ switch (KeyLen)
++ {
++ case 5: //wep 40 Ascii type
++ pAdapter->SharedKey[BSS0][0].KeyLen = KeyLen;
++ memcpy(pAdapter->SharedKey[BSS0][0].Key, arg, KeyLen);
++ CipherAlg = CIPHER_WEP64;
++ DBGPRINT(RT_DEBUG_TRACE, ("Set_Key1_Proc::(Key1=%s and type=%s)\n", arg, "Ascii"));
++ break;
++ case 10: //wep 40 Hex type
++ for(i=0; i < KeyLen; i++)
++ {
++ if( !isxdigit(*(arg+i)) )
++ return FALSE; //Not Hex value;
++ }
++ pAdapter->SharedKey[BSS0][0].KeyLen = KeyLen / 2 ;
++ AtoH(arg, pAdapter->SharedKey[BSS0][0].Key, KeyLen / 2);
++ CipherAlg = CIPHER_WEP64;
++ DBGPRINT(RT_DEBUG_TRACE, ("Set_Key1_Proc::(Key1=%s and type=%s)\n", arg, "Hex"));
++ break;
++ case 13: //wep 104 Ascii type
++ pAdapter->SharedKey[BSS0][0].KeyLen = KeyLen;
++ memcpy(pAdapter->SharedKey[BSS0][0].Key, arg, KeyLen);
++ CipherAlg = CIPHER_WEP128;
++ DBGPRINT(RT_DEBUG_TRACE, ("Set_Key1_Proc::(Key1=%s and type=%s)\n", arg, "Ascii"));
++ break;
++ case 26: //wep 104 Hex type
++ for(i=0; i < KeyLen; i++)
++ {
++ if( !isxdigit(*(arg+i)) )
++ return FALSE; //Not Hex value;
++ }
++ pAdapter->SharedKey[BSS0][0].KeyLen = KeyLen / 2 ;
++ AtoH(arg, pAdapter->SharedKey[BSS0][0].Key, KeyLen / 2);
++ CipherAlg = CIPHER_WEP128;
++ DBGPRINT(RT_DEBUG_TRACE, ("Set_Key1_Proc::(Key1=%s and type=%s)\n", arg, "Hex"));
++ break;
++ default: //Invalid argument
++ DBGPRINT(RT_DEBUG_TRACE, ("Set_Key1_Proc::Invalid argument (=%s)\n", arg));
++ return FALSE;
++ }
++
++ pAdapter->SharedKey[BSS0][0].CipherAlg = CipherAlg;
++
++ // Set keys (into ASIC)
++ if (pAdapter->StaCfg.AuthMode >= Ndis802_11AuthModeWPA)
++ ; // not support
++ else // Old WEP stuff
++ {
++ AsicAddSharedKeyEntry(pAdapter,
++ 0,
++ 0,
++ pAdapter->SharedKey[BSS0][0].CipherAlg,
++ pAdapter->SharedKey[BSS0][0].Key,
++ NULL,
++ NULL);
++ }
++
++ return TRUE;
++}
++/*
++ ==========================================================================
++
++ Description:
++ Set WEP KEY2
++ Return:
++ TRUE if all parameters are OK, FALSE otherwise
++ ==========================================================================
++*/
++INT Set_Key2_Proc(
++ IN PRTMP_ADAPTER pAdapter,
++ IN PUCHAR arg)
++{
++ int KeyLen;
++ int i;
++ UCHAR CipherAlg=CIPHER_WEP64;
++
++ if (pAdapter->StaCfg.AuthMode >= Ndis802_11AuthModeWPA)
++ return TRUE; // do nothing
++
++ KeyLen = strlen(arg);
++
++ switch (KeyLen)
++ {
++ case 5: //wep 40 Ascii type
++ pAdapter->SharedKey[BSS0][1].KeyLen = KeyLen;
++ memcpy(pAdapter->SharedKey[BSS0][1].Key, arg, KeyLen);
++ CipherAlg = CIPHER_WEP64;
++ DBGPRINT(RT_DEBUG_TRACE, ("Set_Key2_Proc::(Key2=%s and type=%s)\n", arg, "Ascii"));
++ break;
++ case 10: //wep 40 Hex type
++ for(i=0; i < KeyLen; i++)
++ {
++ if( !isxdigit(*(arg+i)) )
++ return FALSE; //Not Hex value;
++ }
++ pAdapter->SharedKey[BSS0][1].KeyLen = KeyLen / 2 ;
++ AtoH(arg, pAdapter->SharedKey[BSS0][1].Key, KeyLen / 2);
++ CipherAlg = CIPHER_WEP64;
++ DBGPRINT(RT_DEBUG_TRACE, ("Set_Key2_Proc::(Key2=%s and type=%s)\n", arg, "Hex"));
++ break;
++ case 13: //wep 104 Ascii type
++ pAdapter->SharedKey[BSS0][1].KeyLen = KeyLen;
++ memcpy(pAdapter->SharedKey[BSS0][1].Key, arg, KeyLen);
++ CipherAlg = CIPHER_WEP128;
++ DBGPRINT(RT_DEBUG_TRACE, ("Set_Key2_Proc::(Key2=%s and type=%s)\n", arg, "Ascii"));
++ break;
++ case 26: //wep 104 Hex type
++ for(i=0; i < KeyLen; i++)
++ {
++ if( !isxdigit(*(arg+i)) )
++ return FALSE; //Not Hex value;
++ }
++ pAdapter->SharedKey[BSS0][1].KeyLen = KeyLen / 2 ;
++ AtoH(arg, pAdapter->SharedKey[BSS0][1].Key, KeyLen / 2);
++ CipherAlg = CIPHER_WEP128;
++ DBGPRINT(RT_DEBUG_TRACE, ("Set_Key2_Proc::(Key2=%s and type=%s)\n", arg, "Hex"));
++ break;
++ default: //Invalid argument
++ DBGPRINT(RT_DEBUG_TRACE, ("Set_Key2_Proc::Invalid argument (=%s)\n", arg));
++ return FALSE;
++ }
++ pAdapter->SharedKey[BSS0][1].CipherAlg = CipherAlg;
++
++ // Set keys (into ASIC)
++ if (pAdapter->StaCfg.AuthMode >= Ndis802_11AuthModeWPA)
++ ; // not support
++ else // Old WEP stuff
++ {
++ AsicAddSharedKeyEntry(pAdapter,
++ 0,
++ 1,
++ pAdapter->SharedKey[BSS0][1].CipherAlg,
++ pAdapter->SharedKey[BSS0][1].Key,
++ NULL,
++ NULL);
++ }
++
++ return TRUE;
++}
++/*
++ ==========================================================================
++ Description:
++ Set WEP KEY3
++ Return:
++ TRUE if all parameters are OK, FALSE otherwise
++ ==========================================================================
++*/
++INT Set_Key3_Proc(
++ IN PRTMP_ADAPTER pAdapter,
++ IN PUCHAR arg)
++{
++ int KeyLen;
++ int i;
++ UCHAR CipherAlg=CIPHER_WEP64;
++
++ if (pAdapter->StaCfg.AuthMode >= Ndis802_11AuthModeWPA)
++ return TRUE; // do nothing
++
++ KeyLen = strlen(arg);
++
++ switch (KeyLen)
++ {
++ case 5: //wep 40 Ascii type
++ pAdapter->SharedKey[BSS0][2].KeyLen = KeyLen;
++ memcpy(pAdapter->SharedKey[BSS0][2].Key, arg, KeyLen);
++ CipherAlg = CIPHER_WEP64;
++ DBGPRINT(RT_DEBUG_TRACE, ("Set_Key3_Proc::(Key3=%s and type=Ascii)\n", arg));
++ break;
++ case 10: //wep 40 Hex type
++ for(i=0; i < KeyLen; i++)
++ {
++ if( !isxdigit(*(arg+i)) )
++ return FALSE; //Not Hex value;
++ }
++ pAdapter->SharedKey[BSS0][2].KeyLen = KeyLen / 2 ;
++ AtoH(arg, pAdapter->SharedKey[BSS0][2].Key, KeyLen / 2);
++ CipherAlg = CIPHER_WEP64;
++ DBGPRINT(RT_DEBUG_TRACE, ("Set_Key3_Proc::(Key3=%s and type=Hex)\n", arg));
++ break;
++ case 13: //wep 104 Ascii type
++ pAdapter->SharedKey[BSS0][2].KeyLen = KeyLen;
++ memcpy(pAdapter->SharedKey[BSS0][2].Key, arg, KeyLen);
++ CipherAlg = CIPHER_WEP128;
++ DBGPRINT(RT_DEBUG_TRACE, ("Set_Key3_Proc::(Key3=%s and type=Ascii)\n", arg));
++ break;
++ case 26: //wep 104 Hex type
++ for(i=0; i < KeyLen; i++)
++ {
++ if( !isxdigit(*(arg+i)) )
++ return FALSE; //Not Hex value;
++ }
++ pAdapter->SharedKey[BSS0][2].KeyLen = KeyLen / 2 ;
++ AtoH(arg, pAdapter->SharedKey[BSS0][2].Key, KeyLen / 2);
++ CipherAlg = CIPHER_WEP128;
++ DBGPRINT(RT_DEBUG_TRACE, ("Set_Key3_Proc::(Key3=%s and type=Hex)\n", arg));
++ break;
++ default: //Invalid argument
++ DBGPRINT(RT_DEBUG_TRACE, ("Set_Key3_Proc::Invalid argument (=%s)\n", arg));
++ return FALSE;
++ }
++ pAdapter->SharedKey[BSS0][2].CipherAlg = CipherAlg;
++
++ // Set keys (into ASIC)
++ if (pAdapter->StaCfg.AuthMode >= Ndis802_11AuthModeWPA)
++ ; // not support
++ else // Old WEP stuff
++ {
++ AsicAddSharedKeyEntry(pAdapter,
++ 0,
++ 2,
++ pAdapter->SharedKey[BSS0][2].CipherAlg,
++ pAdapter->SharedKey[BSS0][2].Key,
++ NULL,
++ NULL);
++ }
++
++ return TRUE;
++}
++/*
++ ==========================================================================
++ Description:
++ Set WEP KEY4
++ Return:
++ TRUE if all parameters are OK, FALSE otherwise
++ ==========================================================================
++*/
++INT Set_Key4_Proc(
++ IN PRTMP_ADAPTER pAdapter,
++ IN PUCHAR arg)
++{
++ int KeyLen;
++ int i;
++ UCHAR CipherAlg=CIPHER_WEP64;
++
++ if (pAdapter->StaCfg.AuthMode >= Ndis802_11AuthModeWPA)
++ return TRUE; // do nothing
++
++ KeyLen = strlen(arg);
++
++ switch (KeyLen)
++ {
++ case 5: //wep 40 Ascii type
++ pAdapter->SharedKey[BSS0][3].KeyLen = KeyLen;
++ memcpy(pAdapter->SharedKey[BSS0][3].Key, arg, KeyLen);
++ CipherAlg = CIPHER_WEP64;
++ DBGPRINT(RT_DEBUG_TRACE, ("Set_Key4_Proc::(Key4=%s and type=%s)\n", arg, "Ascii"));
++ break;
++ case 10: //wep 40 Hex type
++ for(i=0; i < KeyLen; i++)
++ {
++ if( !isxdigit(*(arg+i)) )
++ return FALSE; //Not Hex value;
++ }
++ pAdapter->SharedKey[BSS0][3].KeyLen = KeyLen / 2 ;
++ AtoH(arg, pAdapter->SharedKey[BSS0][3].Key, KeyLen / 2);
++ CipherAlg = CIPHER_WEP64;
++ DBGPRINT(RT_DEBUG_TRACE, ("Set_Key4_Proc::(Key4=%s and type=%s)\n", arg, "Hex"));
++ break;
++ case 13: //wep 104 Ascii type
++ pAdapter->SharedKey[BSS0][3].KeyLen = KeyLen;
++ memcpy(pAdapter->SharedKey[BSS0][3].Key, arg, KeyLen);
++ CipherAlg = CIPHER_WEP128;
++ DBGPRINT(RT_DEBUG_TRACE, ("Set_Key4_Proc::(Key4=%s and type=%s)\n", arg, "Ascii"));
++ break;
++ case 26: //wep 104 Hex type
++ for(i=0; i < KeyLen; i++)
++ {
++ if( !isxdigit(*(arg+i)) )
++ return FALSE; //Not Hex value;
++ }
++ pAdapter->SharedKey[BSS0][3].KeyLen = KeyLen / 2 ;
++ AtoH(arg, pAdapter->SharedKey[BSS0][3].Key, KeyLen / 2);
++ CipherAlg = CIPHER_WEP128;
++ DBGPRINT(RT_DEBUG_TRACE, ("Set_Key4_Proc::(Key4=%s and type=%s)\n", arg, "Hex"));
++ break;
++ default: //Invalid argument
++ DBGPRINT(RT_DEBUG_TRACE, ("Set_Key4_Proc::Invalid argument (=%s)\n", arg));
++ return FALSE;
++ }
++ pAdapter->SharedKey[BSS0][3].CipherAlg = CipherAlg;
++
++ // Set keys (into ASIC)
++ if (pAdapter->StaCfg.AuthMode >= Ndis802_11AuthModeWPA)
++ ; // not support
++ else // Old WEP stuff
++ {
++ AsicAddSharedKeyEntry(pAdapter,
++ 0,
++ 3,
++ pAdapter->SharedKey[BSS0][3].CipherAlg,
++ pAdapter->SharedKey[BSS0][3].Key,
++ NULL,
++ NULL);
++ }
++
++ return TRUE;
++}
++
++/*
++ ==========================================================================
++ Description:
++ Set WPA PSK key
++ Return:
++ TRUE if all parameters are OK, FALSE otherwise
++ ==========================================================================
++*/
++INT Set_WPAPSK_Proc(
++ IN PRTMP_ADAPTER pAdapter,
++ IN PUCHAR arg)
++{
++ UCHAR keyMaterial[40];
++
++ if ((pAdapter->StaCfg.AuthMode != Ndis802_11AuthModeWPAPSK) &&
++ (pAdapter->StaCfg.AuthMode != Ndis802_11AuthModeWPA2PSK) &&
++ (pAdapter->StaCfg.AuthMode != Ndis802_11AuthModeWPANone)
++ )
++ return TRUE; // do nothing
++
++ DBGPRINT(RT_DEBUG_TRACE, ("Set_WPAPSK_Proc::(WPAPSK=%s)\n", arg));
++
++ NdisZeroMemory(keyMaterial, 40);
++
++ if ((strlen(arg) < 8) || (strlen(arg) > 64))
++ {
++ DBGPRINT(RT_DEBUG_TRACE, ("Set failed!!(WPAPSK=%s), WPAPSK key-string required 8 ~ 64 characters \n", arg));
++ return FALSE;
++ }
++
++ if (strlen(arg) == 64)
++ {
++ AtoH(arg, keyMaterial, 32);
++ NdisMoveMemory(pAdapter->StaCfg.PMK, keyMaterial, 32);
++
++ }
++ else
++ {
++ PasswordHash((char *)arg, pAdapter->MlmeAux.Ssid, pAdapter->MlmeAux.SsidLen, keyMaterial);
++ NdisMoveMemory(pAdapter->StaCfg.PMK, keyMaterial, 32);
++ }
++
++
++
++ if(pAdapter->StaCfg.BssType == BSS_ADHOC &&
++ pAdapter->StaCfg.AuthMode == Ndis802_11AuthModeWPANone)
++ {
++ pAdapter->StaCfg.WpaState = SS_NOTUSE;
++ }
++ else
++ {
++ // Start STA supplicant state machine
++ pAdapter->StaCfg.WpaState = SS_START;
++ }
++
++ return TRUE;
++}
++
++/*
++ ==========================================================================
++ Description:
++ Set Power Saving mode
++ Return:
++ TRUE if all parameters are OK, FALSE otherwise
++ ==========================================================================
++*/
++INT Set_PSMode_Proc(
++ IN PRTMP_ADAPTER pAdapter,
++ IN PUCHAR arg)
++{
++ if (pAdapter->StaCfg.BssType == BSS_INFRA)
++ {
++ if ((strcmp(arg, "Max_PSP") == 0) ||
++ (strcmp(arg, "max_psp") == 0) ||
++ (strcmp(arg, "MAX_PSP") == 0))
++ {
++ // do NOT turn on PSM bit here, wait until MlmeCheckForPsmChange()
++ // to exclude certain situations.
++ if (pAdapter->StaCfg.bWindowsACCAMEnable == FALSE)
++ pAdapter->StaCfg.WindowsPowerMode = Ndis802_11PowerModeMAX_PSP;
++ pAdapter->StaCfg.WindowsBatteryPowerMode = Ndis802_11PowerModeMAX_PSP;
++ OPSTATUS_SET_FLAG(pAdapter, fOP_STATUS_RECEIVE_DTIM);
++ pAdapter->StaCfg.DefaultListenCount = 5;
++
++ }
++ else if ((strcmp(arg, "Fast_PSP") == 0) ||
++ (strcmp(arg, "fast_psp") == 0) ||
++ (strcmp(arg, "FAST_PSP") == 0))
++ {
++ // do NOT turn on PSM bit here, wait until MlmeCheckForPsmChange()
++ // to exclude certain situations.
++ OPSTATUS_SET_FLAG(pAdapter, fOP_STATUS_RECEIVE_DTIM);
++ if (pAdapter->StaCfg.bWindowsACCAMEnable == FALSE)
++ pAdapter->StaCfg.WindowsPowerMode = Ndis802_11PowerModeFast_PSP;
++ pAdapter->StaCfg.WindowsBatteryPowerMode = Ndis802_11PowerModeFast_PSP;
++ pAdapter->StaCfg.DefaultListenCount = 3;
++ }
++ else if ((strcmp(arg, "Legacy_PSP") == 0) ||
++ (strcmp(arg, "legacy_psp") == 0) ||
++ (strcmp(arg, "LEGACY_PSP") == 0))
++ {
++ // do NOT turn on PSM bit here, wait until MlmeCheckForPsmChange()
++ // to exclude certain situations.
++ OPSTATUS_SET_FLAG(pAdapter, fOP_STATUS_RECEIVE_DTIM);
++ if (pAdapter->StaCfg.bWindowsACCAMEnable == FALSE)
++ pAdapter->StaCfg.WindowsPowerMode = Ndis802_11PowerModeLegacy_PSP;
++ pAdapter->StaCfg.WindowsBatteryPowerMode = Ndis802_11PowerModeLegacy_PSP;
++ pAdapter->StaCfg.DefaultListenCount = 3;
++ }
++ else
++ {
++ //Default Ndis802_11PowerModeCAM
++ // clear PSM bit immediately
++ MlmeSetPsmBit(pAdapter, PWR_ACTIVE);
++ OPSTATUS_SET_FLAG(pAdapter, fOP_STATUS_RECEIVE_DTIM);
++ if (pAdapter->StaCfg.bWindowsACCAMEnable == FALSE)
++ pAdapter->StaCfg.WindowsPowerMode = Ndis802_11PowerModeCAM;
++ pAdapter->StaCfg.WindowsBatteryPowerMode = Ndis802_11PowerModeCAM;
++ }
++
++ DBGPRINT(RT_DEBUG_TRACE, ("Set_PSMode_Proc::(PSMode=%ld)\n", pAdapter->StaCfg.WindowsPowerMode));
++ }
++ else
++ return FALSE;
++
++
++ return TRUE;
++}
++
++#ifdef WPA_SUPPLICANT_SUPPORT
++/*
++ ==========================================================================
++ Description:
++ Set WpaSupport flag.
++ Value:
++ 0: Driver ignore wpa_supplicant.
++ 1: wpa_supplicant initiates scanning and AP selection.
++ 2: driver takes care of scanning, AP selection, and IEEE 802.11 association parameters.
++ Return:
++ TRUE if all parameters are OK, FALSE otherwise
++ ==========================================================================
++*/
++INT Set_Wpa_Support(
++ IN PRTMP_ADAPTER pAd,
++ IN PUCHAR arg)
++{
++
++ if ( simple_strtol(arg, 0, 10) == 0)
++ pAd->StaCfg.WpaSupplicantUP = WPA_SUPPLICANT_DISABLE;
++ else if ( simple_strtol(arg, 0, 10) == 1)
++ pAd->StaCfg.WpaSupplicantUP = WPA_SUPPLICANT_ENABLE;
++ else if ( simple_strtol(arg, 0, 10) == 2)
++ pAd->StaCfg.WpaSupplicantUP = WPA_SUPPLICANT_ENABLE_WITH_WEB_UI;
++ else
++ pAd->StaCfg.WpaSupplicantUP = WPA_SUPPLICANT_DISABLE;
++
++ DBGPRINT(RT_DEBUG_TRACE, ("Set_Wpa_Support::(WpaSupplicantUP=%d)\n", pAd->StaCfg.WpaSupplicantUP));
++
++ return TRUE;
++}
++#endif // WPA_SUPPLICANT_SUPPORT //
++
++#ifdef DBG
++/*
++ ==========================================================================
++ Description:
++ Read / Write MAC
++ Arguments:
++ pAdapter Pointer to our adapter
++ wrq Pointer to the ioctl argument
++
++ Return Value:
++ None
++
++ Note:
++ Usage:
++ 1.) iwpriv ra0 mac 0 ==> read MAC where Addr=0x0
++ 2.) iwpriv ra0 mac 0=12 ==> write MAC where Addr=0x0, value=12
++ ==========================================================================
++*/
++VOID RTMPIoctlMAC(
++ IN PRTMP_ADAPTER pAdapter,
++ IN struct iwreq *wrq)
++{
++ CHAR *this_char;
++ CHAR *value;
++ INT j = 0, k = 0;
++ CHAR msg[1024];
++ CHAR arg[255];
++ ULONG macAddr = 0;
++ UCHAR temp[16], temp2[16];
++ UINT32 macValue = 0;
++ INT Status;
++
++
++ memset(msg, 0x00, 1024);
++ if (wrq->u.data.length > 1) //No parameters.
++ {
++ Status = copy_from_user(arg, wrq->u.data.pointer, (wrq->u.data.length > 255) ? 255 : wrq->u.data.length);
++ sprintf(msg, "\n");
++
++ //Parsing Read or Write
++ this_char = arg;
++ if (!*this_char)
++ goto next;
++
++ if ((value = rtstrchr(this_char, '=')) != NULL)
++ *value++ = 0;
++
++ if (!value || !*value)
++ { //Read
++ // Sanity check
++ if(strlen(this_char) > 4)
++ goto next;
++
++ j = strlen(this_char);
++ while(j-- > 0)
++ {
++ if(this_char[j] > 'f' || this_char[j] < '0')
++ return;
++ }
++
++ // Mac Addr
++ k = j = strlen(this_char);
++ while(j-- > 0)
++ {
++ this_char[4-k+j] = this_char[j];
++ }
++
++ while(k < 4)
++ this_char[3-k++]='0';
++ this_char[4]='\0';
++
++ if(strlen(this_char) == 4)
++ {
++ AtoH(this_char, temp, 2);
++ macAddr = *temp*256 + temp[1];
++ if (macAddr < 0xFFFF)
++ {
++ RTMP_IO_READ32(pAdapter, macAddr, &macValue);
++ DBGPRINT(RT_DEBUG_TRACE, ("MacAddr=%lx, MacValue=%x\n", macAddr, macValue));
++ sprintf(msg+strlen(msg), "[0x%08lX]:%08X ", macAddr , macValue);
++ }
++ else
++ {//Invalid parametes, so default printk all bbp
++ goto next;
++ }
++ }
++ }
++ else
++ { //Write
++ memcpy(&temp2, value, strlen(value));
++ temp2[strlen(value)] = '\0';
++
++ // Sanity check
++ if((strlen(this_char) > 4) || strlen(temp2) > 8)
++ goto next;
++
++ j = strlen(this_char);
++ while(j-- > 0)
++ {
++ if(this_char[j] > 'f' || this_char[j] < '0')
++ return;
++ }
++
++ j = strlen(temp2);
++ while(j-- > 0)
++ {
++ if(temp2[j] > 'f' || temp2[j] < '0')
++ return;
++ }
++
++ //MAC Addr
++ k = j = strlen(this_char);
++ while(j-- > 0)
++ {
++ this_char[4-k+j] = this_char[j];
++ }
++
++ while(k < 4)
++ this_char[3-k++]='0';
++ this_char[4]='\0';
++
++ //MAC value
++ k = j = strlen(temp2);
++ while(j-- > 0)
++ {
++ temp2[8-k+j] = temp2[j];
++ }
++
++ while(k < 8)
++ temp2[7-k++]='0';
++ temp2[8]='\0';
++
++ {
++ AtoH(this_char, temp, 2);
++ macAddr = *temp*256 + temp[1];
++
++ AtoH(temp2, temp, 4);
++ macValue = *temp*256*256*256 + temp[1]*256*256 + temp[2]*256 + temp[3];
++
++ // debug mode
++ if (macAddr == (HW_DEBUG_SETTING_BASE + 4))
++ {
++ // 0x2bf4: byte0 non-zero: enable R17 tuning, 0: disable R17 tuning
++ if (macValue & 0x000000ff)
++ {
++ pAdapter->BbpTuning.bEnable = TRUE;
++ DBGPRINT(RT_DEBUG_TRACE,("turn on R17 tuning\n"));
++ }
++ else
++ {
++ UCHAR R66;
++ pAdapter->BbpTuning.bEnable = FALSE;
++ R66 = 0x26 + GET_LNA_GAIN(pAdapter);
++#ifdef RALINK_ATE
++ if (ATE_ON(pAdapter))
++ {
++ ATE_BBP_IO_WRITE8_BY_REG_ID(pAdapter, BBP_R66, (0x26 + GET_LNA_GAIN(pAdapter)));
++ }
++ else
++#endif // RALINK_ATE //
++ RTMP_BBP_IO_WRITE8_BY_REG_ID(pAdapter, BBP_R66, (0x26 + GET_LNA_GAIN(pAdapter)));
++ DBGPRINT(RT_DEBUG_TRACE,("turn off R17 tuning, restore to 0x%02x\n", R66));
++ }
++ return;
++ }
++
++ DBGPRINT(RT_DEBUG_TRACE, ("MacAddr=%02lx, MacValue=0x%x\n", macAddr, macValue));
++
++ RTMP_IO_WRITE32(pAdapter, macAddr, macValue);
++ sprintf(msg+strlen(msg), "[0x%08lX]:%08X ", macAddr, macValue);
++ }
++ }
++ }
++next:
++ if(strlen(msg) == 1)
++ sprintf(msg+strlen(msg), "===>Error command format!");
++
++ // Copy the information into the user buffer
++ wrq->u.data.length = strlen(msg);
++ Status = copy_to_user(wrq->u.data.pointer, msg, wrq->u.data.length);
++
++ DBGPRINT(RT_DEBUG_TRACE, ("<==RTMPIoctlMAC\n\n"));
++}
++
++/*
++ ==========================================================================
++ Description:
++ Read / Write E2PROM
++ Arguments:
++ pAdapter Pointer to our adapter
++ wrq Pointer to the ioctl argument
++
++ Return Value:
++ None
++
++ Note:
++ Usage:
++ 1.) iwpriv ra0 e2p 0 ==> read E2PROM where Addr=0x0
++ 2.) iwpriv ra0 e2p 0=1234 ==> write E2PROM where Addr=0x0, value=1234
++ ==========================================================================
++*/
++VOID RTMPIoctlE2PROM(
++ IN PRTMP_ADAPTER pAdapter,
++ IN struct iwreq *wrq)
++{
++ CHAR *this_char;
++ CHAR *value;
++ INT j = 0, k = 0;
++ CHAR msg[1024];
++ CHAR arg[255];
++ USHORT eepAddr = 0;
++ UCHAR temp[16], temp2[16];
++ USHORT eepValue;
++ int Status;
++
++
++ memset(msg, 0x00, 1024);
++ if (wrq->u.data.length > 1) //No parameters.
++ {
++ Status = copy_from_user(arg, wrq->u.data.pointer, (wrq->u.data.length > 255) ? 255 : wrq->u.data.length);
++ sprintf(msg, "\n");
++
++ //Parsing Read or Write
++ this_char = arg;
++
++
++ if (!*this_char)
++ goto next;
++
++ if ((value = rtstrchr(this_char, '=')) != NULL)
++ *value++ = 0;
++
++ if (!value || !*value)
++ { //Read
++
++ // Sanity check
++ if(strlen(this_char) > 4)
++ goto next;
++
++ j = strlen(this_char);
++ while(j-- > 0)
++ {
++ if(this_char[j] > 'f' || this_char[j] < '0')
++ return;
++ }
++
++ // E2PROM addr
++ k = j = strlen(this_char);
++ while(j-- > 0)
++ {
++ this_char[4-k+j] = this_char[j];
++ }
++
++ while(k < 4)
++ this_char[3-k++]='0';
++ this_char[4]='\0';
++
++ if(strlen(this_char) == 4)
++ {
++ AtoH(this_char, temp, 2);
++ eepAddr = *temp*256 + temp[1];
++ if (eepAddr < 0xFFFF)
++ {
++ RT28xx_EEPROM_READ16(pAdapter, eepAddr, eepValue);
++ sprintf(msg+strlen(msg), "[0x%04X]:0x%04X ", eepAddr , eepValue);
++ }
++ else
++ {//Invalid parametes, so default printk all bbp
++ goto next;
++ }
++ }
++ }
++ else
++ { //Write
++ memcpy(&temp2, value, strlen(value));
++ temp2[strlen(value)] = '\0';
++
++ // Sanity check
++ if((strlen(this_char) > 4) || strlen(temp2) > 8)
++ goto next;
++
++ j = strlen(this_char);
++ while(j-- > 0)
++ {
++ if(this_char[j] > 'f' || this_char[j] < '0')
++ return;
++ }
++ j = strlen(temp2);
++ while(j-- > 0)
++ {
++ if(temp2[j] > 'f' || temp2[j] < '0')
++ return;
++ }
++
++ //MAC Addr
++ k = j = strlen(this_char);
++ while(j-- > 0)
++ {
++ this_char[4-k+j] = this_char[j];
++ }
++
++ while(k < 4)
++ this_char[3-k++]='0';
++ this_char[4]='\0';
++
++ //MAC value
++ k = j = strlen(temp2);
++ while(j-- > 0)
++ {
++ temp2[4-k+j] = temp2[j];
++ }
++
++ while(k < 4)
++ temp2[3-k++]='0';
++ temp2[4]='\0';
++
++ AtoH(this_char, temp, 2);
++ eepAddr = *temp*256 + temp[1];
++
++ AtoH(temp2, temp, 2);
++ eepValue = *temp*256 + temp[1];
++
++ RT28xx_EEPROM_WRITE16(pAdapter, eepAddr, eepValue);
++ sprintf(msg+strlen(msg), "[0x%02X]:%02X ", eepAddr, eepValue);
++ }
++ }
++next:
++ if(strlen(msg) == 1)
++ sprintf(msg+strlen(msg), "===>Error command format!");
++
++
++ // Copy the information into the user buffer
++ wrq->u.data.length = strlen(msg);
++ Status = copy_to_user(wrq->u.data.pointer, msg, wrq->u.data.length);
++
++ DBGPRINT(RT_DEBUG_TRACE, ("<==RTMPIoctlE2PROM\n"));
++}
++#endif // DBG //
++
++
++
++
++INT Set_TGnWifiTest_Proc(
++ IN PRTMP_ADAPTER pAd,
++ IN PUCHAR arg)
++{
++ if (simple_strtol(arg, 0, 10) == 0)
++ pAd->StaCfg.bTGnWifiTest = FALSE;
++ else
++ pAd->StaCfg.bTGnWifiTest = TRUE;
++
++ DBGPRINT(RT_DEBUG_TRACE, ("IF Set_TGnWifiTest_Proc::(bTGnWifiTest=%d)\n", pAd->StaCfg.bTGnWifiTest));
++ return TRUE;
++}
++
++INT Set_LongRetryLimit_Proc(
++ IN PRTMP_ADAPTER pAdapter,
++ IN PUCHAR arg)
++{
++ TX_RTY_CFG_STRUC tx_rty_cfg;
++ UCHAR LongRetryLimit = (UCHAR)simple_strtol(arg, 0, 10);
++
++ RTMP_IO_READ32(pAdapter, TX_RTY_CFG, &tx_rty_cfg.word);
++ tx_rty_cfg.field.LongRtyLimit = LongRetryLimit;
++ RTMP_IO_WRITE32(pAdapter, TX_RTY_CFG, tx_rty_cfg.word);
++ DBGPRINT(RT_DEBUG_TRACE, ("IF Set_LongRetryLimit_Proc::(tx_rty_cfg=0x%x)\n", tx_rty_cfg.word));
++ return TRUE;
++}
++
++INT Set_ShortRetryLimit_Proc(
++ IN PRTMP_ADAPTER pAdapter,
++ IN PUCHAR arg)
++{
++ TX_RTY_CFG_STRUC tx_rty_cfg;
++ UCHAR ShortRetryLimit = (UCHAR)simple_strtol(arg, 0, 10);
++
++ RTMP_IO_READ32(pAdapter, TX_RTY_CFG, &tx_rty_cfg.word);
++ tx_rty_cfg.field.ShortRtyLimit = ShortRetryLimit;
++ RTMP_IO_WRITE32(pAdapter, TX_RTY_CFG, tx_rty_cfg.word);
++ DBGPRINT(RT_DEBUG_TRACE, ("IF Set_ShortRetryLimit_Proc::(tx_rty_cfg=0x%x)\n", tx_rty_cfg.word));
++ return TRUE;
++}
++
++#ifdef EXT_BUILD_CHANNEL_LIST
++INT Set_Ieee80211dClientMode_Proc(
++ IN PRTMP_ADAPTER pAdapter,
++ IN PUCHAR arg)
++{
++ if (simple_strtol(arg, 0, 10) == 0)
++ pAdapter->StaCfg.IEEE80211dClientMode = Rt802_11_D_None;
++ else if (simple_strtol(arg, 0, 10) == 1)
++ pAdapter->StaCfg.IEEE80211dClientMode = Rt802_11_D_Flexible;
++ else if (simple_strtol(arg, 0, 10) == 2)
++ pAdapter->StaCfg.IEEE80211dClientMode = Rt802_11_D_Strict;
++ else
++ return FALSE;
++
++ DBGPRINT(RT_DEBUG_TRACE, ("Set_Ieee802dMode_Proc::(IEEEE0211dMode=%d)\n", pAdapter->StaCfg.IEEE80211dClientMode));
++ return TRUE;
++}
++#endif // EXT_BUILD_CHANNEL_LIST //
++
++#ifdef CARRIER_DETECTION_SUPPORT
++INT Set_CarrierDetect_Proc(
++ IN PRTMP_ADAPTER pAd,
++ IN PUCHAR arg)
++{
++ if (simple_strtol(arg, 0, 10) == 0)
++ pAd->CommonCfg.CarrierDetect.Enable = FALSE;
++ else
++ pAd->CommonCfg.CarrierDetect.Enable = TRUE;
++
++ DBGPRINT(RT_DEBUG_TRACE, ("IF Set_CarrierDetect_Proc::(CarrierDetect.Enable=%d)\n", pAd->CommonCfg.CarrierDetect.Enable));
++ return TRUE;
++}
++#endif // CARRIER_DETECTION_SUPPORT //
++
++
++INT Show_Adhoc_MacTable_Proc(
++ IN PRTMP_ADAPTER pAd,
++ IN PCHAR extra)
++{
++ INT i;
++
++ sprintf(extra, "\n");
++
++#ifdef DOT11_N_SUPPORT
++ sprintf(extra, "%sHT Operating Mode : %d\n", extra, pAd->CommonCfg.AddHTInfo.AddHtInfo2.OperaionMode);
++#endif // DOT11_N_SUPPORT //
++
++ sprintf(extra, "%s\n%-19s%-4s%-4s%-7s%-7s%-7s%-10s%-6s%-6s%-6s%-6s\n", extra,
++ "MAC", "AID", "BSS", "RSSI0", "RSSI1", "RSSI2", "PhMd", "BW", "MCS", "SGI", "STBC");
++
++ for (i=1; i<MAX_LEN_OF_MAC_TABLE; i++)
++ {
++ PMAC_TABLE_ENTRY pEntry = &pAd->MacTab.Content[i];
++
++ if (strlen(extra) > (IW_PRIV_SIZE_MASK - 30))
++ break;
++ if ((pEntry->ValidAsCLI || pEntry->ValidAsApCli) && (pEntry->Sst == SST_ASSOC))
++ {
++ sprintf(extra, "%s%02X:%02X:%02X:%02X:%02X:%02X ", extra,
++ pEntry->Addr[0], pEntry->Addr[1], pEntry->Addr[2],
++ pEntry->Addr[3], pEntry->Addr[4], pEntry->Addr[5]);
++ sprintf(extra, "%s%-4d", extra, (int)pEntry->Aid);
++ sprintf(extra, "%s%-4d", extra, (int)pEntry->apidx);
++ sprintf(extra, "%s%-7d", extra, pEntry->RssiSample.AvgRssi0);
++ sprintf(extra, "%s%-7d", extra, pEntry->RssiSample.AvgRssi1);
++ sprintf(extra, "%s%-7d", extra, pEntry->RssiSample.AvgRssi2);
++ sprintf(extra, "%s%-10s", extra, GetPhyMode(pEntry->HTPhyMode.field.MODE));
++ sprintf(extra, "%s%-6s", extra, GetBW(pEntry->HTPhyMode.field.BW));
++ sprintf(extra, "%s%-6d", extra, pEntry->HTPhyMode.field.MCS);
++ sprintf(extra, "%s%-6d", extra, pEntry->HTPhyMode.field.ShortGI);
++ sprintf(extra, "%s%-6d", extra, pEntry->HTPhyMode.field.STBC);
++ sprintf(extra, "%s%-10d, %d, %d%%\n", extra, pEntry->DebugFIFOCount, pEntry->DebugTxCount,
++ (pEntry->DebugTxCount) ? ((pEntry->DebugTxCount-pEntry->DebugFIFOCount)*100/pEntry->DebugTxCount) : 0);
++ sprintf(extra, "%s\n", extra);
++ }
++ }
++
++ return TRUE;
++}
++
++
+--- /dev/null
++++ b/drivers/staging/rt2870/sta_ioctl.c.patch
+@@ -0,0 +1,18 @@
++--- sta_ioctl.c 2008-09-19 14:37:52.000000000 +0800
+++++ sta_ioctl.c.fc9 2008-09-19 14:38:20.000000000 +0800
++@@ -49,15 +49,9 @@
++
++ #define GROUP_KEY_NO 4
++
++-#if LINUX_VERSION_CODE >= KERNEL_VERSION(2,6,27)
++ #define IWE_STREAM_ADD_EVENT(_A, _B, _C, _D, _E) iwe_stream_add_event(_A, _B, _C, _D, _E)
++ #define IWE_STREAM_ADD_POINT(_A, _B, _C, _D, _E) iwe_stream_add_point(_A, _B, _C, _D, _E)
++ #define IWE_STREAM_ADD_VALUE(_A, _B, _C, _D, _E, _F) iwe_stream_add_value(_A, _B, _C, _D, _E, _F)
++-#else
++-#define IWE_STREAM_ADD_EVENT(_A, _B, _C, _D, _E) iwe_stream_add_event(_B, _C, _D, _E)
++-#define IWE_STREAM_ADD_POINT(_A, _B, _C, _D, _E) iwe_stream_add_point(_B, _C, _D, _E)
++-#define IWE_STREAM_ADD_VALUE(_A, _B, _C, _D, _E, _F) iwe_stream_add_value(_B, _C, _D, _E, _F)
++-#endif
++
++ extern UCHAR CipherWpa2Template[];
++ extern UCHAR CipherWpaPskTkip[];
+--- /dev/null
++++ b/drivers/staging/rt2870/sta/rtmp_data.c
+@@ -0,0 +1,2619 @@
++/*
++ *************************************************************************
++ * Ralink Tech Inc.
++ * 5F., No.36, Taiyuan St., Jhubei City,
++ * Hsinchu County 302,
++ * Taiwan, R.O.C.
++ *
++ * (c) Copyright 2002-2007, Ralink Technology, Inc.
++ *
++ * This program is free software; you can redistribute it and/or modify *
++ * it under the terms of the GNU General Public License as published by *
++ * the Free Software Foundation; either version 2 of the License, or *
++ * (at your option) any later version. *
++ * *
++ * This program is distributed in the hope that it will be useful, *
++ * but WITHOUT ANY WARRANTY; without even the implied warranty of *
++ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the *
++ * GNU General Public License for more details. *
++ * *
++ * You should have received a copy of the GNU General Public License *
++ * along with this program; if not, write to the *
++ * Free Software Foundation, Inc., *
++ * 59 Temple Place - Suite 330, Boston, MA 02111-1307, USA. *
++ * *
++ *************************************************************************
++
++ Module Name:
++ rtmp_data.c
++
++ Abstract:
++ Data path subroutines
++
++ Revision History:
++ Who When What
++ -------- ---------- ----------------------------------------------
++ John Aug/17/04 major modification for RT2561/2661
++ Jan Lee Mar/17/06 major modification for RT2860 New Ring Design
++*/
++#include "../rt_config.h"
++
++
++VOID STARxEAPOLFrameIndicate(
++ IN PRTMP_ADAPTER pAd,
++ IN MAC_TABLE_ENTRY *pEntry,
++ IN RX_BLK *pRxBlk,
++ IN UCHAR FromWhichBSSID)
++{
++ PRT28XX_RXD_STRUC pRxD = &(pRxBlk->RxD);
++ PRXWI_STRUC pRxWI = pRxBlk->pRxWI;
++ UCHAR *pTmpBuf;
++
++#ifdef WPA_SUPPLICANT_SUPPORT
++ if (pAd->StaCfg.WpaSupplicantUP)
++ {
++ // All EAPoL frames have to pass to upper layer (ex. WPA_SUPPLICANT daemon)
++ // TBD : process fragmented EAPol frames
++ {
++ // In 802.1x mode, if the received frame is EAP-SUCCESS packet, turn on the PortSecured variable
++ if ( pAd->StaCfg.IEEE8021X == TRUE &&
++ (EAP_CODE_SUCCESS == WpaCheckEapCode(pAd, pRxBlk->pData, pRxBlk->DataSize, LENGTH_802_1_H)))
++ {
++ PUCHAR Key;
++ UCHAR CipherAlg;
++ int idx = 0;
++
++ DBGPRINT_RAW(RT_DEBUG_TRACE, ("Receive EAP-SUCCESS Packet\n"));
++ //pAd->StaCfg.PortSecured = WPA_802_1X_PORT_SECURED;
++ STA_PORT_SECURED(pAd);
++
++ if (pAd->StaCfg.IEEE8021x_required_keys == FALSE)
++ {
++ idx = pAd->StaCfg.DesireSharedKeyId;
++ CipherAlg = pAd->StaCfg.DesireSharedKey[idx].CipherAlg;
++ Key = pAd->StaCfg.DesireSharedKey[idx].Key;
++
++ if (pAd->StaCfg.DesireSharedKey[idx].KeyLen > 0)
++ {
++#ifdef RT2870
++ union
++ {
++ char buf[sizeof(NDIS_802_11_WEP)+MAX_LEN_OF_KEY- 1];
++ NDIS_802_11_WEP keyinfo;
++ } WepKey;
++ int len;
++
++
++ NdisZeroMemory(&WepKey, sizeof(WepKey));
++ len =pAd->StaCfg.DesireSharedKey[idx].KeyLen;
++
++ NdisMoveMemory(WepKey.keyinfo.KeyMaterial,
++ pAd->StaCfg.DesireSharedKey[idx].Key,
++ pAd->StaCfg.DesireSharedKey[idx].KeyLen);
++
++ WepKey.keyinfo.KeyIndex = 0x80000000 + idx;
++ WepKey.keyinfo.KeyLength = len;
++ pAd->SharedKey[BSS0][idx].KeyLen =(UCHAR) (len <= 5 ? 5 : 13);
++
++ pAd->IndicateMediaState = NdisMediaStateConnected;
++ pAd->ExtraInfo = GENERAL_LINK_UP;
++ // need to enqueue cmd to thread
++ RTUSBEnqueueCmdFromNdis(pAd, OID_802_11_ADD_WEP, TRUE, &WepKey, sizeof(WepKey.keyinfo) + len - 1);
++#endif // RT2870 //
++ // For Preventing ShardKey Table is cleared by remove key procedure.
++ pAd->SharedKey[BSS0][idx].CipherAlg = CipherAlg;
++ pAd->SharedKey[BSS0][idx].KeyLen = pAd->StaCfg.DesireSharedKey[idx].KeyLen;
++ NdisMoveMemory(pAd->SharedKey[BSS0][idx].Key,
++ pAd->StaCfg.DesireSharedKey[idx].Key,
++ pAd->StaCfg.DesireSharedKey[idx].KeyLen);
++ }
++ }
++ }
++
++ Indicate_Legacy_Packet(pAd, pRxBlk, FromWhichBSSID);
++ return;
++ }
++ }
++ else
++#endif // WPA_SUPPLICANT_SUPPORT //
++ {
++ // Special DATA frame that has to pass to MLME
++ // 1. Cisco Aironet frames for CCX2. We need pass it to MLME for special process
++ // 2. EAPOL handshaking frames when driver supplicant enabled, pass to MLME for special process
++ {
++ pTmpBuf = pRxBlk->pData - LENGTH_802_11;
++ NdisMoveMemory(pTmpBuf, pRxBlk->pHeader, LENGTH_802_11);
++ REPORT_MGMT_FRAME_TO_MLME(pAd, pRxWI->WirelessCliID, pTmpBuf, pRxBlk->DataSize + LENGTH_802_11, pRxWI->RSSI0, pRxWI->RSSI1, pRxWI->RSSI2, pRxD->PlcpSignal);
++ DBGPRINT_RAW(RT_DEBUG_TRACE, ("!!! report EAPOL/AIRONET DATA to MLME (len=%d) !!!\n", pRxBlk->DataSize));
++ }
++ }
++
++ RELEASE_NDIS_PACKET(pAd, pRxBlk->pRxPacket, NDIS_STATUS_FAILURE);
++ return;
++
++}
++
++VOID STARxDataFrameAnnounce(
++ IN PRTMP_ADAPTER pAd,
++ IN MAC_TABLE_ENTRY *pEntry,
++ IN RX_BLK *pRxBlk,
++ IN UCHAR FromWhichBSSID)
++{
++
++ // non-EAP frame
++ if (!RTMPCheckWPAframe(pAd, pEntry, pRxBlk->pData, pRxBlk->DataSize, FromWhichBSSID))
++ {
++ {
++ // drop all non-EAP DATA frame before
++ // this client's Port-Access-Control is secured
++ if (pRxBlk->pHeader->FC.Wep)
++ {
++ // unsupported cipher suite
++ if (pAd->StaCfg.WepStatus == Ndis802_11EncryptionDisabled)
++ {
++ // release packet
++ RELEASE_NDIS_PACKET(pAd, pRxBlk->pRxPacket, NDIS_STATUS_FAILURE);
++ return;
++ }
++ }
++ else
++ {
++ // encryption in-use but receive a non-EAPOL clear text frame, drop it
++ if ((pAd->StaCfg.WepStatus != Ndis802_11EncryptionDisabled) &&
++ (pAd->StaCfg.PortSecured == WPA_802_1X_PORT_NOT_SECURED))
++ {
++ // release packet
++ RELEASE_NDIS_PACKET(pAd, pRxBlk->pRxPacket, NDIS_STATUS_FAILURE);
++ return;
++ }
++ }
++ }
++ RX_BLK_CLEAR_FLAG(pRxBlk, fRX_EAP);
++ if (!RX_BLK_TEST_FLAG(pRxBlk, fRX_ARALINK))
++ {
++ // Normal legacy, AMPDU or AMSDU
++ CmmRxnonRalinkFrameIndicate(pAd, pRxBlk, FromWhichBSSID);
++
++ }
++ else
++ {
++ // ARALINK
++ CmmRxRalinkFrameIndicate(pAd, pEntry, pRxBlk, FromWhichBSSID);
++ }
++#ifdef QOS_DLS_SUPPORT
++ RX_BLK_CLEAR_FLAG(pRxBlk, fRX_DLS);
++#endif // QOS_DLS_SUPPORT //
++ }
++ else
++ {
++ RX_BLK_SET_FLAG(pRxBlk, fRX_EAP);
++#ifdef DOT11_N_SUPPORT
++ if (RX_BLK_TEST_FLAG(pRxBlk, fRX_AMPDU) && (pAd->CommonCfg.bDisableReordering == 0))
++ {
++ Indicate_AMPDU_Packet(pAd, pRxBlk, FromWhichBSSID);
++ }
++ else
++#endif // DOT11_N_SUPPORT //
++ {
++ // Determin the destination of the EAP frame
++ // to WPA state machine or upper layer
++ STARxEAPOLFrameIndicate(pAd, pEntry, pRxBlk, FromWhichBSSID);
++ }
++ }
++}
++
++
++// For TKIP frame, calculate the MIC value
++BOOLEAN STACheckTkipMICValue(
++ IN PRTMP_ADAPTER pAd,
++ IN MAC_TABLE_ENTRY *pEntry,
++ IN RX_BLK *pRxBlk)
++{
++ PHEADER_802_11 pHeader = pRxBlk->pHeader;
++ UCHAR *pData = pRxBlk->pData;
++ USHORT DataSize = pRxBlk->DataSize;
++ UCHAR UserPriority = pRxBlk->UserPriority;
++ PCIPHER_KEY pWpaKey;
++ UCHAR *pDA, *pSA;
++
++ pWpaKey = &pAd->SharedKey[BSS0][pRxBlk->pRxWI->KeyIndex];
++
++ pDA = pHeader->Addr1;
++ if (RX_BLK_TEST_FLAG(pRxBlk, fRX_INFRA))
++ {
++ pSA = pHeader->Addr3;
++ }
++ else
++ {
++ pSA = pHeader->Addr2;
++ }
++
++ if (RTMPTkipCompareMICValue(pAd,
++ pData,
++ pDA,
++ pSA,
++ pWpaKey->RxMic,
++ UserPriority,
++ DataSize) == FALSE)
++ {
++ DBGPRINT_RAW(RT_DEBUG_ERROR,("Rx MIC Value error 2\n"));
++
++#ifdef WPA_SUPPLICANT_SUPPORT
++ if (pAd->StaCfg.WpaSupplicantUP)
++ {
++ WpaSendMicFailureToWpaSupplicant(pAd, (pWpaKey->Type == PAIRWISEKEY) ? TRUE : FALSE);
++ }
++ else
++#endif // WPA_SUPPLICANT_SUPPORT //
++ {
++ RTMPReportMicError(pAd, pWpaKey);
++ }
++
++ // release packet
++ RELEASE_NDIS_PACKET(pAd, pRxBlk->pRxPacket, NDIS_STATUS_FAILURE);
++ return FALSE;
++ }
++
++ return TRUE;
++}
++
++
++//
++// All Rx routines use RX_BLK structure to hande rx events
++// It is very important to build pRxBlk attributes
++// 1. pHeader pointer to 802.11 Header
++// 2. pData pointer to payload including LLC (just skip Header)
++// 3. set payload size including LLC to DataSize
++// 4. set some flags with RX_BLK_SET_FLAG()
++//
++VOID STAHandleRxDataFrame(
++ IN PRTMP_ADAPTER pAd,
++ IN RX_BLK *pRxBlk)
++{
++ PRT28XX_RXD_STRUC pRxD = &(pRxBlk->RxD);
++ PRXWI_STRUC pRxWI = pRxBlk->pRxWI;
++ PHEADER_802_11 pHeader = pRxBlk->pHeader;
++ PNDIS_PACKET pRxPacket = pRxBlk->pRxPacket;
++ BOOLEAN bFragment = FALSE;
++ MAC_TABLE_ENTRY *pEntry = NULL;
++ UCHAR FromWhichBSSID = BSS0;
++ UCHAR UserPriority = 0;
++
++ {
++ // before LINK UP, all DATA frames are rejected
++ if (!OPSTATUS_TEST_FLAG(pAd, fOP_STATUS_MEDIA_STATE_CONNECTED))
++ {
++ // release packet
++ RELEASE_NDIS_PACKET(pAd, pRxPacket, NDIS_STATUS_FAILURE);
++ return;
++ }
++
++#ifdef QOS_DLS_SUPPORT
++ //if ((pHeader->FC.FrDs == 0) && (pHeader->FC.ToDs == 0))
++ if (RTMPRcvFrameDLSCheck(pAd, pHeader, pRxWI->MPDUtotalByteCount, pRxD))
++ {
++ return;
++ }
++#endif // QOS_DLS_SUPPORT //
++
++ // Drop not my BSS frames
++ if (pRxD->MyBss == 0)
++ {
++ {
++ // release packet
++ RELEASE_NDIS_PACKET(pAd, pRxPacket, NDIS_STATUS_FAILURE);
++ return;
++ }
++ }
++
++ pAd->RalinkCounters.RxCountSinceLastNULL++;
++ if (pAd->CommonCfg.bAPSDCapable && pAd->CommonCfg.APEdcaParm.bAPSDCapable && (pHeader->FC.SubType & 0x08))
++ {
++ UCHAR *pData;
++ DBGPRINT(RT_DEBUG_TRACE,("bAPSDCapable\n"));
++
++ // Qos bit 4
++ pData = (PUCHAR)pHeader + LENGTH_802_11;
++ if ((*pData >> 4) & 0x01)
++ {
++ DBGPRINT(RT_DEBUG_TRACE,("RxDone- Rcv EOSP frame, driver may fall into sleep\n"));
++ pAd->CommonCfg.bInServicePeriod = FALSE;
++
++ // Force driver to fall into sleep mode when rcv EOSP frame
++ if (!OPSTATUS_TEST_FLAG(pAd, fOP_STATUS_DOZE))
++ {
++ USHORT TbttNumToNextWakeUp;
++ USHORT NextDtim = pAd->StaCfg.DtimPeriod;
++ ULONG Now;
++
++ NdisGetSystemUpTime(&Now);
++ NextDtim -= (USHORT)(Now - pAd->StaCfg.LastBeaconRxTime)/pAd->CommonCfg.BeaconPeriod;
++
++ TbttNumToNextWakeUp = pAd->StaCfg.DefaultListenCount;
++ if (OPSTATUS_TEST_FLAG(pAd, fOP_STATUS_RECEIVE_DTIM) && (TbttNumToNextWakeUp > NextDtim))
++ TbttNumToNextWakeUp = NextDtim;
++
++ MlmeSetPsmBit(pAd, PWR_SAVE);
++ // if WMM-APSD is failed, try to disable following line
++ AsicSleepThenAutoWakeup(pAd, TbttNumToNextWakeUp);
++ }
++ }
++
++ if ((pHeader->FC.MoreData) && (pAd->CommonCfg.bInServicePeriod))
++ {
++ DBGPRINT(RT_DEBUG_TRACE,("Sending another trigger frame when More Data bit is set to 1\n"));
++ }
++ }
++
++ // Drop NULL, CF-ACK(no data), CF-POLL(no data), and CF-ACK+CF-POLL(no data) data frame
++ if ((pHeader->FC.SubType & 0x04)) // bit 2 : no DATA
++ {
++ // release packet
++ RELEASE_NDIS_PACKET(pAd, pRxPacket, NDIS_STATUS_FAILURE);
++ return;
++ }
++
++ // Drop not my BSS frame (we can not only check the MyBss bit in RxD)
++#ifdef QOS_DLS_SUPPORT
++ if (!pAd->CommonCfg.bDLSCapable)
++ {
++#endif // QOS_DLS_SUPPORT //
++ if (INFRA_ON(pAd))
++ {
++ // Infrastructure mode, check address 2 for BSSID
++ if (!RTMPEqualMemory(&pHeader->Addr2, &pAd->CommonCfg.Bssid, 6))
++ {
++ // Receive frame not my BSSID
++ // release packet
++ RELEASE_NDIS_PACKET(pAd, pRxPacket, NDIS_STATUS_FAILURE);
++ return;
++ }
++ }
++ else // Ad-Hoc mode or Not associated
++ {
++ // Ad-Hoc mode, check address 3 for BSSID
++ if (!RTMPEqualMemory(&pHeader->Addr3, &pAd->CommonCfg.Bssid, 6))
++ {
++ // Receive frame not my BSSID
++ // release packet
++ RELEASE_NDIS_PACKET(pAd, pRxPacket, NDIS_STATUS_FAILURE);
++ return;
++ }
++ }
++#ifdef QOS_DLS_SUPPORT
++ }
++#endif // QOS_DLS_SUPPORT //
++
++ //
++ // find pEntry
++ //
++ if (pRxWI->WirelessCliID < MAX_LEN_OF_MAC_TABLE)
++ {
++ pEntry = &pAd->MacTab.Content[pRxWI->WirelessCliID];
++ }
++ else
++ {
++ // 1. release packet if infra mode
++ // 2. new a pEntry if ad-hoc mode
++ RELEASE_NDIS_PACKET(pAd, pRxPacket, NDIS_STATUS_FAILURE);
++ return;
++ }
++
++ // infra or ad-hoc
++ if (INFRA_ON(pAd))
++ {
++ RX_BLK_SET_FLAG(pRxBlk, fRX_INFRA);
++#ifdef QOS_DLS_SUPPORT
++ if ((pHeader->FC.FrDs == 0) && (pHeader->FC.ToDs == 0))
++ RX_BLK_SET_FLAG(pRxBlk, fRX_DLS);
++ else
++#endif // QOS_DLS_SUPPORT //
++ ASSERT(pRxWI->WirelessCliID == BSSID_WCID);
++ }
++
++ // check Atheros Client
++ if ((pEntry->bIAmBadAtheros == FALSE) && (pRxD->AMPDU == 1) && (pHeader->FC.Retry ))
++ {
++ pEntry->bIAmBadAtheros = TRUE;
++ pAd->CommonCfg.IOTestParm.bCurrentAtheros = TRUE;
++ pAd->CommonCfg.IOTestParm.bLastAtheros = TRUE;
++ if (!STA_AES_ON(pAd))
++ {
++ AsicUpdateProtect(pAd, 8, ALLN_SETPROTECT, TRUE, FALSE);
++ }
++ }
++ }
++
++ pRxBlk->pData = (UCHAR *)pHeader;
++
++ //
++ // update RxBlk->pData, DataSize
++ // 802.11 Header, QOS, HTC, Hw Padding
++ //
++
++ // 1. skip 802.11 HEADER
++ {
++ pRxBlk->pData += LENGTH_802_11;
++ pRxBlk->DataSize -= LENGTH_802_11;
++ }
++
++ // 2. QOS
++ if (pHeader->FC.SubType & 0x08)
++ {
++ RX_BLK_SET_FLAG(pRxBlk, fRX_QOS);
++ UserPriority = *(pRxBlk->pData) & 0x0f;
++ // bit 7 in QoS Control field signals the HT A-MSDU format
++ if ((*pRxBlk->pData) & 0x80)
++ {
++ RX_BLK_SET_FLAG(pRxBlk, fRX_AMSDU);
++ }
++
++ // skip QOS contorl field
++ pRxBlk->pData += 2;
++ pRxBlk->DataSize -=2;
++ }
++ pRxBlk->UserPriority = UserPriority;
++
++ // 3. Order bit: A-Ralink or HTC+
++ if (pHeader->FC.Order)
++ {
++#ifdef AGGREGATION_SUPPORT
++ if ((pRxWI->PHYMODE <= MODE_OFDM) && (OPSTATUS_TEST_FLAG(pAd, fOP_STATUS_AGGREGATION_INUSED)))
++ {
++ RX_BLK_SET_FLAG(pRxBlk, fRX_ARALINK);
++ }
++ else
++#endif
++ {
++#ifdef DOT11_N_SUPPORT
++ RX_BLK_SET_FLAG(pRxBlk, fRX_HTC);
++ // skip HTC contorl field
++ pRxBlk->pData += 4;
++ pRxBlk->DataSize -= 4;
++#endif // DOT11_N_SUPPORT //
++ }
++ }
++
++ // 4. skip HW padding
++ if (pRxD->L2PAD)
++ {
++ // just move pData pointer
++ // because DataSize excluding HW padding
++ RX_BLK_SET_FLAG(pRxBlk, fRX_PAD);
++ pRxBlk->pData += 2;
++ }
++
++#ifdef DOT11_N_SUPPORT
++ if (pRxD->BA)
++ {
++ RX_BLK_SET_FLAG(pRxBlk, fRX_AMPDU);
++ }
++#endif // DOT11_N_SUPPORT //
++
++
++ //
++ // Case I Process Broadcast & Multicast data frame
++ //
++ if (pRxD->Bcast || pRxD->Mcast)
++ {
++ INC_COUNTER64(pAd->WlanCounters.MulticastReceivedFrameCount);
++
++ // Drop Mcast/Bcast frame with fragment bit on
++ if (pHeader->FC.MoreFrag)
++ {
++ // release packet
++ RELEASE_NDIS_PACKET(pAd, pRxPacket, NDIS_STATUS_FAILURE);
++ return;
++ }
++
++ // Filter out Bcast frame which AP relayed for us
++ if (pHeader->FC.FrDs && MAC_ADDR_EQUAL(pHeader->Addr3, pAd->CurrentAddress))
++ {
++ // release packet
++ RELEASE_NDIS_PACKET(pAd, pRxPacket, NDIS_STATUS_FAILURE);
++ return;
++ }
++
++ Indicate_Legacy_Packet(pAd, pRxBlk, FromWhichBSSID);
++ return;
++ }
++ else if (pRxD->U2M)
++ {
++ pAd->LastRxRate = (USHORT)((pRxWI->MCS) + (pRxWI->BW <<7) + (pRxWI->ShortGI <<8)+ (pRxWI->PHYMODE <<14)) ;
++
++
++#ifdef QOS_DLS_SUPPORT
++ if (RX_BLK_TEST_FLAG(pRxBlk, fRX_DLS))
++ {
++ MAC_TABLE_ENTRY *pDlsEntry = NULL;
++
++ pDlsEntry = DlsEntryTableLookupByWcid(pAd, pRxWI->WirelessCliID, pHeader->Addr2, TRUE);
++ if(pDlsEntry)
++ Update_Rssi_Sample(pAd, &pDlsEntry->RssiSample, pRxWI);
++ }
++ else
++#endif // QOS_DLS_SUPPORT //
++ if (ADHOC_ON(pAd))
++ {
++ pEntry = MacTableLookup(pAd, pHeader->Addr2);
++ if (pEntry)
++ Update_Rssi_Sample(pAd, &pEntry->RssiSample, pRxWI);
++ }
++
++
++ Update_Rssi_Sample(pAd, &pAd->StaCfg.RssiSample, pRxWI);
++
++ pAd->StaCfg.LastSNR0 = (UCHAR)(pRxWI->SNR0);
++ pAd->StaCfg.LastSNR1 = (UCHAR)(pRxWI->SNR1);
++
++ pAd->RalinkCounters.OneSecRxOkDataCnt++;
++
++
++ if (!((pHeader->Frag == 0) && (pHeader->FC.MoreFrag == 0)))
++ {
++ // re-assemble the fragmented packets
++ // return complete frame (pRxPacket) or NULL
++ bFragment = TRUE;
++ pRxPacket = RTMPDeFragmentDataFrame(pAd, pRxBlk);
++ }
++
++ if (pRxPacket)
++ {
++ pEntry = &pAd->MacTab.Content[pRxWI->WirelessCliID];
++
++ // process complete frame
++ if (bFragment && (pRxD->Decrypted) && (pEntry->WepStatus == Ndis802_11Encryption2Enabled))
++ {
++ // Minus MIC length
++ pRxBlk->DataSize -= 8;
++
++ // For TKIP frame, calculate the MIC value
++ if (STACheckTkipMICValue(pAd, pEntry, pRxBlk) == FALSE)
++ {
++ return;
++ }
++ }
++
++ STARxDataFrameAnnounce(pAd, pEntry, pRxBlk, FromWhichBSSID);
++ return;
++ }
++ else
++ {
++ // just return
++ // because RTMPDeFragmentDataFrame() will release rx packet,
++ // if packet is fragmented
++ return;
++ }
++ }
++
++ ASSERT(0);
++ // release packet
++ RELEASE_NDIS_PACKET(pAd, pRxPacket, NDIS_STATUS_FAILURE);
++}
++
++VOID STAHandleRxMgmtFrame(
++ IN PRTMP_ADAPTER pAd,
++ IN RX_BLK *pRxBlk)
++{
++ PRT28XX_RXD_STRUC pRxD = &(pRxBlk->RxD);
++ PRXWI_STRUC pRxWI = pRxBlk->pRxWI;
++ PHEADER_802_11 pHeader = pRxBlk->pHeader;
++ PNDIS_PACKET pRxPacket = pRxBlk->pRxPacket;
++
++ do
++ {
++
++ // We should collect RSSI not only U2M data but also my beacon
++ if ((pHeader->FC.SubType == SUBTYPE_BEACON) && (MAC_ADDR_EQUAL(&pAd->CommonCfg.Bssid, &pHeader->Addr2)))
++ {
++ Update_Rssi_Sample(pAd, &pAd->StaCfg.RssiSample, pRxWI);
++
++ pAd->StaCfg.LastSNR0 = (UCHAR)(pRxWI->SNR0);
++ pAd->StaCfg.LastSNR1 = (UCHAR)(pRxWI->SNR1);
++ }
++
++ // First check the size, it MUST not exceed the mlme queue size
++ if (pRxWI->MPDUtotalByteCount > MGMT_DMA_BUFFER_SIZE)
++ {
++ DBGPRINT_ERR(("STAHandleRxMgmtFrame: frame too large, size = %d \n", pRxWI->MPDUtotalByteCount));
++ break;
++ }
++
++ REPORT_MGMT_FRAME_TO_MLME(pAd, pRxWI->WirelessCliID, pHeader, pRxWI->MPDUtotalByteCount,
++ pRxWI->RSSI0, pRxWI->RSSI1, pRxWI->RSSI2, pRxD->PlcpSignal);
++ } while (FALSE);
++
++ RELEASE_NDIS_PACKET(pAd, pRxPacket, NDIS_STATUS_SUCCESS);
++}
++
++VOID STAHandleRxControlFrame(
++ IN PRTMP_ADAPTER pAd,
++ IN RX_BLK *pRxBlk)
++{
++#ifdef DOT11_N_SUPPORT
++ PRXWI_STRUC pRxWI = pRxBlk->pRxWI;
++#endif // DOT11_N_SUPPORT //
++ PHEADER_802_11 pHeader = pRxBlk->pHeader;
++ PNDIS_PACKET pRxPacket = pRxBlk->pRxPacket;
++
++ switch (pHeader->FC.SubType)
++ {
++ case SUBTYPE_BLOCK_ACK_REQ:
++#ifdef DOT11_N_SUPPORT
++ {
++ CntlEnqueueForRecv(pAd, pRxWI->WirelessCliID, (pRxWI->MPDUtotalByteCount), (PFRAME_BA_REQ)pHeader);
++ }
++ break;
++#endif // DOT11_N_SUPPORT //
++ case SUBTYPE_BLOCK_ACK:
++ case SUBTYPE_ACK:
++ default:
++ break;
++ }
++
++ RELEASE_NDIS_PACKET(pAd, pRxPacket, NDIS_STATUS_FAILURE);
++}
++
++
++/*
++ ========================================================================
++
++ Routine Description:
++ Process RxDone interrupt, running in DPC level
++
++ Arguments:
++ pAd Pointer to our adapter
++
++ Return Value:
++ None
++
++ IRQL = DISPATCH_LEVEL
++
++ Note:
++ This routine has to maintain Rx ring read pointer.
++ Need to consider QOS DATA format when converting to 802.3
++ ========================================================================
++*/
++BOOLEAN STARxDoneInterruptHandle(
++ IN PRTMP_ADAPTER pAd,
++ IN BOOLEAN argc)
++{
++ NDIS_STATUS Status;
++ UINT32 RxProcessed, RxPending;
++ BOOLEAN bReschedule = FALSE;
++ RT28XX_RXD_STRUC *pRxD;
++ UCHAR *pData;
++ PRXWI_STRUC pRxWI;
++ PNDIS_PACKET pRxPacket;
++ PHEADER_802_11 pHeader;
++ RX_BLK RxCell;
++
++ RxProcessed = RxPending = 0;
++
++ // process whole rx ring
++ while (1)
++ {
++
++ if (RTMP_TEST_FLAG(pAd, fRTMP_ADAPTER_RADIO_OFF |
++ fRTMP_ADAPTER_RESET_IN_PROGRESS |
++ fRTMP_ADAPTER_HALT_IN_PROGRESS |
++ fRTMP_ADAPTER_NIC_NOT_EXIST) ||
++ !RTMP_TEST_FLAG(pAd,fRTMP_ADAPTER_START_UP))
++ {
++ break;
++ }
++
++
++ RxProcessed ++; // test
++
++ // 1. allocate a new data packet into rx ring to replace received packet
++ // then processing the received packet
++ // 2. the callee must take charge of release of packet
++ // 3. As far as driver is concerned ,
++ // the rx packet must
++ // a. be indicated to upper layer or
++ // b. be released if it is discarded
++ pRxPacket = GetPacketFromRxRing(pAd, &(RxCell.RxD), &bReschedule, &RxPending);
++ if (pRxPacket == NULL)
++ {
++ // no more packet to process
++ break;
++ }
++
++ // get rx ring descriptor
++ pRxD = &(RxCell.RxD);
++ // get rx data buffer
++ pData = GET_OS_PKT_DATAPTR(pRxPacket);
++ pRxWI = (PRXWI_STRUC) pData;
++ pHeader = (PHEADER_802_11) (pData+RXWI_SIZE) ;
++
++#ifdef RT_BIG_ENDIAN
++ RTMPFrameEndianChange(pAd, (PUCHAR)pHeader, DIR_READ, TRUE);
++ RTMPWIEndianChange((PUCHAR)pRxWI, TYPE_RXWI);
++#endif
++
++ // build RxCell
++ RxCell.pRxWI = pRxWI;
++ RxCell.pHeader = pHeader;
++ RxCell.pRxPacket = pRxPacket;
++ RxCell.pData = (UCHAR *) pHeader;
++ RxCell.DataSize = pRxWI->MPDUtotalByteCount;
++ RxCell.Flags = 0;
++
++ // Increase Total receive byte counter after real data received no mater any error or not
++ pAd->RalinkCounters.ReceivedByteCount += pRxWI->MPDUtotalByteCount;
++ pAd->RalinkCounters.RxCount ++;
++
++ INC_COUNTER64(pAd->WlanCounters.ReceivedFragmentCount);
++
++ if (pRxWI->MPDUtotalByteCount < 14)
++ Status = NDIS_STATUS_FAILURE;
++
++ if (MONITOR_ON(pAd))
++ {
++ send_monitor_packets(pAd, &RxCell);
++ break;
++ }
++ /* RT2870 invokes STARxDoneInterruptHandle() in rtusb_bulk.c */
++#ifdef RALINK_ATE
++ if (ATE_ON(pAd))
++ {
++ pAd->ate.RxCntPerSec++;
++ ATESampleRssi(pAd, pRxWI);
++#ifdef RALINK_28xx_QA
++ if (pAd->ate.bQARxStart == TRUE)
++ {
++ /* (*pRxD) has been swapped in GetPacketFromRxRing() */
++ ATE_QA_Statistics(pAd, pRxWI, pRxD, pHeader);
++ }
++#endif // RALINK_28xx_QA //
++ RELEASE_NDIS_PACKET(pAd, pRxPacket, NDIS_STATUS_SUCCESS);
++ continue;
++ }
++#endif // RALINK_ATE //
++
++ // Check for all RxD errors
++ Status = RTMPCheckRxError(pAd, pHeader, pRxWI, pRxD);
++
++ // Handle the received frame
++ if (Status == NDIS_STATUS_SUCCESS)
++ {
++ switch (pHeader->FC.Type)
++ {
++ // CASE I, receive a DATA frame
++ case BTYPE_DATA:
++ {
++ // process DATA frame
++ STAHandleRxDataFrame(pAd, &RxCell);
++ }
++ break;
++ // CASE II, receive a MGMT frame
++ case BTYPE_MGMT:
++ {
++ STAHandleRxMgmtFrame(pAd, &RxCell);
++ }
++ break;
++ // CASE III. receive a CNTL frame
++ case BTYPE_CNTL:
++ {
++ STAHandleRxControlFrame(pAd, &RxCell);
++ }
++ break;
++ // discard other type
++ default:
++ RELEASE_NDIS_PACKET(pAd, pRxPacket, NDIS_STATUS_FAILURE);
++ break;
++ }
++ }
++ else
++ {
++ pAd->Counters8023.RxErrors++;
++ // discard this frame
++ RELEASE_NDIS_PACKET(pAd, pRxPacket, NDIS_STATUS_FAILURE);
++ }
++ }
++
++ return bReschedule;
++}
++
++/*
++ ========================================================================
++
++ Routine Description:
++ Arguments:
++ pAd Pointer to our adapter
++
++ IRQL = DISPATCH_LEVEL
++
++ ========================================================================
++*/
++VOID RTMPHandleTwakeupInterrupt(
++ IN PRTMP_ADAPTER pAd)
++{
++ AsicForceWakeup(pAd, FALSE);
++}
++
++/*
++========================================================================
++Routine Description:
++ Early checking and OS-depened parsing for Tx packet send to our STA driver.
++
++Arguments:
++ NDIS_HANDLE MiniportAdapterContext Pointer refer to the device handle, i.e., the pAd.
++ PPNDIS_PACKET ppPacketArray The packet array need to do transmission.
++ UINT NumberOfPackets Number of packet in packet array.
++
++Return Value:
++ NONE
++
++Note:
++ This function do early checking and classification for send-out packet.
++ You only can put OS-depened & STA related code in here.
++========================================================================
++*/
++VOID STASendPackets(
++ IN NDIS_HANDLE MiniportAdapterContext,
++ IN PPNDIS_PACKET ppPacketArray,
++ IN UINT NumberOfPackets)
++{
++ UINT Index;
++ PRTMP_ADAPTER pAd = (PRTMP_ADAPTER) MiniportAdapterContext;
++ PNDIS_PACKET pPacket;
++ BOOLEAN allowToSend = FALSE;
++
++
++ for (Index = 0; Index < NumberOfPackets; Index++)
++ {
++ pPacket = ppPacketArray[Index];
++
++ do
++ {
++ if (RTMP_TEST_FLAG(pAd, fRTMP_ADAPTER_RESET_IN_PROGRESS) ||
++ RTMP_TEST_FLAG(pAd, fRTMP_ADAPTER_HALT_IN_PROGRESS) ||
++ RTMP_TEST_FLAG(pAd, fRTMP_ADAPTER_RADIO_OFF))
++ {
++ // Drop send request since hardware is in reset state
++ break;
++ }
++ else if (!INFRA_ON(pAd) && !ADHOC_ON(pAd))
++ {
++ // Drop send request since there are no physical connection yet
++ break;
++ }
++ else
++ {
++ // Record that orignal packet source is from NDIS layer,so that
++ // later on driver knows how to release this NDIS PACKET
++#ifdef QOS_DLS_SUPPORT
++ MAC_TABLE_ENTRY *pEntry;
++ PUCHAR pSrcBufVA = GET_OS_PKT_DATAPTR(pPacket);
++
++ pEntry = MacTableLookup(pAd, pSrcBufVA);
++ if (pEntry && (pEntry->ValidAsDls == TRUE))
++ {
++ RTMP_SET_PACKET_WCID(pPacket, pEntry->Aid);
++ }
++ else
++#endif // QOS_DLS_SUPPORT //
++ RTMP_SET_PACKET_WCID(pPacket, 0); // this field is useless when in STA mode
++ RTMP_SET_PACKET_SOURCE(pPacket, PKTSRC_NDIS);
++ NDIS_SET_PACKET_STATUS(pPacket, NDIS_STATUS_PENDING);
++ pAd->RalinkCounters.PendingNdisPacketCount++;
++
++ allowToSend = TRUE;
++ }
++ } while(FALSE);
++
++ if (allowToSend == TRUE)
++ STASendPacket(pAd, pPacket);
++ else
++ RELEASE_NDIS_PACKET(pAd, pPacket, NDIS_STATUS_FAILURE);
++ }
++
++ // Dequeue outgoing frames from TxSwQueue[] and process it
++ RTMPDeQueuePacket(pAd, FALSE, NUM_OF_TX_RING, MAX_TX_PROCESS);
++
++}
++
++
++/*
++========================================================================
++Routine Description:
++ This routine is used to do packet parsing and classification for Tx packet
++ to STA device, and it will en-queue packets to our TxSwQueue depends on AC
++ class.
++
++Arguments:
++ pAd Pointer to our adapter
++ pPacket Pointer to send packet
++
++Return Value:
++ NDIS_STATUS_SUCCESS If succes to queue the packet into TxSwQueue.
++ NDIS_STATUS_FAILURE If failed to do en-queue.
++
++Note:
++ You only can put OS-indepened & STA related code in here.
++========================================================================
++*/
++NDIS_STATUS STASendPacket(
++ IN PRTMP_ADAPTER pAd,
++ IN PNDIS_PACKET pPacket)
++{
++ PACKET_INFO PacketInfo;
++ PUCHAR pSrcBufVA;
++ UINT SrcBufLen;
++ UINT AllowFragSize;
++ UCHAR NumberOfFrag;
++// UCHAR RTSRequired;
++ UCHAR QueIdx, UserPriority;
++ MAC_TABLE_ENTRY *pEntry = NULL;
++ unsigned int IrqFlags;
++ UCHAR FlgIsIP = 0;
++ UCHAR Rate;
++
++ // Prepare packet information structure for buffer descriptor
++ // chained within a single NDIS packet.
++ RTMP_QueryPacketInfo(pPacket, &PacketInfo, &pSrcBufVA, &SrcBufLen);
++
++ if (pSrcBufVA == NULL)
++ {
++ DBGPRINT(RT_DEBUG_ERROR,("STASendPacket --> pSrcBufVA == NULL !!!SrcBufLen=%x\n",SrcBufLen));
++ // Resourece is low, system did not allocate virtual address
++ // return NDIS_STATUS_FAILURE directly to upper layer
++ RELEASE_NDIS_PACKET(pAd, pPacket, NDIS_STATUS_FAILURE);
++ return NDIS_STATUS_FAILURE;
++ }
++
++
++ if (SrcBufLen < 14)
++ {
++ DBGPRINT(RT_DEBUG_ERROR,("STASendPacket --> Ndis Packet buffer error !!!\n"));
++ RELEASE_NDIS_PACKET(pAd, pPacket, NDIS_STATUS_FAILURE);
++ return (NDIS_STATUS_FAILURE);
++ }
++
++ // In HT rate adhoc mode, A-MPDU is often used. So need to lookup BA Table and MAC Entry.
++ // Note multicast packets in adhoc also use BSSID_WCID index.
++ {
++ if(INFRA_ON(pAd))
++ {
++#ifdef QOS_DLS_SUPPORT
++ USHORT tmpWcid;
++
++ tmpWcid = RTMP_GET_PACKET_WCID(pPacket);
++ if (VALID_WCID(tmpWcid) &&
++ (pAd->MacTab.Content[tmpWcid].ValidAsDls== TRUE))
++ {
++ pEntry = &pAd->MacTab.Content[tmpWcid];
++ Rate = pAd->MacTab.Content[tmpWcid].CurrTxRate;
++ }
++ else
++#endif // QOS_DLS_SUPPORT //
++ {
++ pEntry = &pAd->MacTab.Content[BSSID_WCID];
++ RTMP_SET_PACKET_WCID(pPacket, BSSID_WCID);
++ Rate = pAd->CommonCfg.TxRate;
++ }
++ }
++ else if (ADHOC_ON(pAd))
++ {
++ if (*pSrcBufVA & 0x01)
++ {
++ RTMP_SET_PACKET_WCID(pPacket, MCAST_WCID);
++ pEntry = &pAd->MacTab.Content[MCAST_WCID];
++ }
++ else
++ {
++ pEntry = MacTableLookup(pAd, pSrcBufVA);
++ }
++ Rate = pAd->CommonCfg.TxRate;
++ }
++ }
++
++ if (!pEntry)
++ {
++ DBGPRINT(RT_DEBUG_ERROR,("STASendPacket->Cannot find pEntry(%2x:%2x:%2x:%2x:%2x:%2x) in MacTab!\n", PRINT_MAC(pSrcBufVA)));
++ // Resourece is low, system did not allocate virtual address
++ // return NDIS_STATUS_FAILURE directly to upper layer
++ RELEASE_NDIS_PACKET(pAd, pPacket, NDIS_STATUS_FAILURE);
++ return NDIS_STATUS_FAILURE;
++ }
++
++ if (ADHOC_ON(pAd)
++ )
++ {
++ RTMP_SET_PACKET_WCID(pPacket, (UCHAR)pEntry->Aid);
++ }
++
++ //
++ // Check the Ethernet Frame type of this packet, and set the RTMP_SET_PACKET_SPECIFIC flags.
++ // Here we set the PACKET_SPECIFIC flags(LLC, VLAN, DHCP/ARP, EAPOL).
++ RTMPCheckEtherType(pAd, pPacket);
++
++
++
++ //
++ // WPA 802.1x secured port control - drop all non-802.1x frame before port secured
++ //
++ if (((pAd->StaCfg.AuthMode == Ndis802_11AuthModeWPA) ||
++ (pAd->StaCfg.AuthMode == Ndis802_11AuthModeWPAPSK) ||
++ (pAd->StaCfg.AuthMode == Ndis802_11AuthModeWPA2) ||
++ (pAd->StaCfg.AuthMode == Ndis802_11AuthModeWPA2PSK)
++#ifdef WPA_SUPPLICANT_SUPPORT
++ || (pAd->StaCfg.IEEE8021X == TRUE)
++#endif // WPA_SUPPLICANT_SUPPORT //
++#ifdef LEAP_SUPPORT
++ || (pAd->StaCfg.LeapAuthMode == CISCO_AuthModeLEAP)
++#endif // LEAP_SUPPORT //
++ )
++ && ((pAd->StaCfg.PortSecured == WPA_802_1X_PORT_NOT_SECURED) || (pAd->StaCfg.MicErrCnt >= 2))
++ && (RTMP_GET_PACKET_EAPOL(pPacket)== FALSE)
++ )
++ {
++ DBGPRINT(RT_DEBUG_TRACE,("STASendPacket --> Drop packet before port secured !!!\n"));
++ RELEASE_NDIS_PACKET(pAd, pPacket, NDIS_STATUS_FAILURE);
++
++ return (NDIS_STATUS_FAILURE);
++ }
++
++
++ // STEP 1. Decide number of fragments required to deliver this MSDU.
++ // The estimation here is not very accurate because difficult to
++ // take encryption overhead into consideration here. The result
++ // "NumberOfFrag" is then just used to pre-check if enough free
++ // TXD are available to hold this MSDU.
++
++
++ if (*pSrcBufVA & 0x01) // fragmentation not allowed on multicast & broadcast
++ NumberOfFrag = 1;
++ else if (OPSTATUS_TEST_FLAG(pAd, fOP_STATUS_AGGREGATION_INUSED))
++ NumberOfFrag = 1; // Aggregation overwhelms fragmentation
++ else if (CLIENT_STATUS_TEST_FLAG(pEntry, fCLIENT_STATUS_AMSDU_INUSED))
++ NumberOfFrag = 1; // Aggregation overwhelms fragmentation
++#ifdef DOT11_N_SUPPORT
++ else if ((pAd->StaCfg.HTPhyMode.field.MODE == MODE_HTMIX) || (pAd->StaCfg.HTPhyMode.field.MODE == MODE_HTGREENFIELD))
++ NumberOfFrag = 1; // MIMO RATE overwhelms fragmentation
++#endif // DOT11_N_SUPPORT //
++ else
++ {
++ // The calculated "NumberOfFrag" is a rough estimation because of various
++ // encryption/encapsulation overhead not taken into consideration. This number is just
++ // used to make sure enough free TXD are available before fragmentation takes place.
++ // In case the actual required number of fragments of an NDIS packet
++ // excceeds "NumberOfFrag"caculated here and not enough free TXD available, the
++ // last fragment (i.e. last MPDU) will be dropped in RTMPHardTransmit() due to out of
++ // resource, and the NDIS packet will be indicated NDIS_STATUS_FAILURE. This should
++ // rarely happen and the penalty is just like a TX RETRY fail. Affordable.
++
++ AllowFragSize = (pAd->CommonCfg.FragmentThreshold) - LENGTH_802_11 - LENGTH_CRC;
++ NumberOfFrag = ((PacketInfo.TotalPacketLength - LENGTH_802_3 + LENGTH_802_1_H) / AllowFragSize) + 1;
++ // To get accurate number of fragmentation, Minus 1 if the size just match to allowable fragment size
++ if (((PacketInfo.TotalPacketLength - LENGTH_802_3 + LENGTH_802_1_H) % AllowFragSize) == 0)
++ {
++ NumberOfFrag--;
++ }
++ }
++
++ // Save fragment number to Ndis packet reserved field
++ RTMP_SET_PACKET_FRAGMENTS(pPacket, NumberOfFrag);
++
++
++ // STEP 2. Check the requirement of RTS:
++ // If multiple fragment required, RTS is required only for the first fragment
++ // if the fragment size large than RTS threshold
++ // For RT28xx, Let ASIC send RTS/CTS
++ RTMP_SET_PACKET_RTS(pPacket, 0);
++ RTMP_SET_PACKET_TXRATE(pPacket, pAd->CommonCfg.TxRate);
++
++ //
++ // STEP 3. Traffic classification. outcome = <UserPriority, QueIdx>
++ //
++ UserPriority = 0;
++ QueIdx = QID_AC_BE;
++ if (OPSTATUS_TEST_FLAG(pAd, fOP_STATUS_WMM_INUSED) &&
++ CLIENT_STATUS_TEST_FLAG(pEntry, fCLIENT_STATUS_WMM_CAPABLE))
++ {
++ USHORT Protocol;
++ UCHAR LlcSnapLen = 0, Byte0, Byte1;
++ do
++ {
++ // get Ethernet protocol field
++ Protocol = (USHORT)((pSrcBufVA[12] << 8) + pSrcBufVA[13]);
++ if (Protocol <= 1500)
++ {
++ // get Ethernet protocol field from LLC/SNAP
++ if (Sniff2BytesFromNdisBuffer(PacketInfo.pFirstBuffer, LENGTH_802_3 + 6, &Byte0, &Byte1) != NDIS_STATUS_SUCCESS)
++ break;
++
++ Protocol = (USHORT)((Byte0 << 8) + Byte1);
++ LlcSnapLen = 8;
++ }
++
++ // always AC_BE for non-IP packet
++ if (Protocol != 0x0800)
++ break;
++
++ // get IP header
++ if (Sniff2BytesFromNdisBuffer(PacketInfo.pFirstBuffer, LENGTH_802_3 + LlcSnapLen, &Byte0, &Byte1) != NDIS_STATUS_SUCCESS)
++ break;
++
++ // return AC_BE if packet is not IPv4
++ if ((Byte0 & 0xf0) != 0x40)
++ break;
++
++ FlgIsIP = 1;
++ UserPriority = (Byte1 & 0xe0) >> 5;
++ QueIdx = MapUserPriorityToAccessCategory[UserPriority];
++
++ // TODO: have to check ACM bit. apply TSPEC if ACM is ON
++ // TODO: downgrade UP & QueIdx before passing ACM
++ if (pAd->CommonCfg.APEdcaParm.bACM[QueIdx])
++ {
++ UserPriority = 0;
++ QueIdx = QID_AC_BE;
++ }
++ } while (FALSE);
++ }
++
++ RTMP_SET_PACKET_UP(pPacket, UserPriority);
++
++
++
++ // Make sure SendTxWait queue resource won't be used by other threads
++ RTMP_IRQ_LOCK(&pAd->irq_lock, IrqFlags);
++ if (pAd->TxSwQueue[QueIdx].Number >= MAX_PACKETS_IN_QUEUE)
++ {
++ RTMP_IRQ_UNLOCK(&pAd->irq_lock, IrqFlags);
++#ifdef BLOCK_NET_IF
++ StopNetIfQueue(pAd, QueIdx, pPacket);
++#endif // BLOCK_NET_IF //
++ RELEASE_NDIS_PACKET(pAd, pPacket, NDIS_STATUS_FAILURE);
++
++ return NDIS_STATUS_FAILURE;
++ }
++ else
++ {
++ InsertTailQueue(&pAd->TxSwQueue[QueIdx], PACKET_TO_QUEUE_ENTRY(pPacket));
++ }
++ RTMP_IRQ_UNLOCK(&pAd->irq_lock, IrqFlags);
++
++#ifdef DOT11_N_SUPPORT
++ if ((pAd->CommonCfg.BACapability.field.AutoBA == TRUE)&&
++ IS_HT_STA(pEntry))
++ {
++ //PMAC_TABLE_ENTRY pMacEntry = &pAd->MacTab.Content[BSSID_WCID];
++ if (((pEntry->TXBAbitmap & (1<<UserPriority)) == 0) &&
++ ((pEntry->BADeclineBitmap & (1<<UserPriority)) == 0) &&
++ (pEntry->PortSecured == WPA_802_1X_PORT_SECURED)
++ // For IOT compatibility, if
++ // 1. It is Ralink chip or
++ // 2. It is OPEN or AES mode,
++ // then BA session can be bulit.
++ && ((pEntry->ValidAsCLI && pAd->MlmeAux.APRalinkIe != 0x0) ||
++ (pEntry->WepStatus == Ndis802_11WEPDisabled || pEntry->WepStatus == Ndis802_11Encryption3Enabled))
++ )
++ {
++ BAOriSessionSetUp(pAd, pEntry, 0, 0, 10, FALSE);
++ }
++ }
++#endif // DOT11_N_SUPPORT //
++
++ pAd->RalinkCounters.OneSecOsTxCount[QueIdx]++; // TODO: for debug only. to be removed
++ return NDIS_STATUS_SUCCESS;
++}
++
++
++/*
++ ========================================================================
++
++ Routine Description:
++ This subroutine will scan through releative ring descriptor to find
++ out avaliable free ring descriptor and compare with request size.
++
++ Arguments:
++ pAd Pointer to our adapter
++ QueIdx Selected TX Ring
++
++ Return Value:
++ NDIS_STATUS_FAILURE Not enough free descriptor
++ NDIS_STATUS_SUCCESS Enough free descriptor
++
++ IRQL = PASSIVE_LEVEL
++ IRQL = DISPATCH_LEVEL
++
++ Note:
++
++ ========================================================================
++*/
++
++#ifdef RT2870
++/*
++ Actually, this function used to check if the TxHardware Queue still has frame need to send.
++ If no frame need to send, go to sleep, else, still wake up.
++*/
++NDIS_STATUS RTMPFreeTXDRequest(
++ IN PRTMP_ADAPTER pAd,
++ IN UCHAR QueIdx,
++ IN UCHAR NumberRequired,
++ IN PUCHAR FreeNumberIs)
++{
++ //ULONG FreeNumber = 0;
++ NDIS_STATUS Status = NDIS_STATUS_FAILURE;
++ unsigned long IrqFlags;
++ HT_TX_CONTEXT *pHTTXContext;
++
++ switch (QueIdx)
++ {
++ case QID_AC_BK:
++ case QID_AC_BE:
++ case QID_AC_VI:
++ case QID_AC_VO:
++ case QID_HCCA:
++ {
++ pHTTXContext = &pAd->TxContext[QueIdx];
++ RTMP_IRQ_LOCK(&pAd->TxContextQueueLock[QueIdx], IrqFlags);
++ if ((pHTTXContext->CurWritePosition != pHTTXContext->ENextBulkOutPosition) ||
++ (pHTTXContext->IRPPending == TRUE))
++ {
++ Status = NDIS_STATUS_FAILURE;
++ }
++ else
++ {
++ Status = NDIS_STATUS_SUCCESS;
++ }
++ RTMP_IRQ_UNLOCK(&pAd->TxContextQueueLock[QueIdx], IrqFlags);
++ }
++ break;
++
++ case QID_MGMT:
++ if (pAd->MgmtRing.TxSwFreeIdx != MGMT_RING_SIZE)
++ Status = NDIS_STATUS_FAILURE;
++ else
++ Status = NDIS_STATUS_SUCCESS;
++ break;
++
++ default:
++ DBGPRINT(RT_DEBUG_ERROR,("RTMPFreeTXDRequest::Invalid QueIdx(=%d)\n", QueIdx));
++ break;
++ }
++
++ return (Status);
++
++}
++#endif // RT2870 //
++
++
++VOID RTMPSendDisassociationFrame(
++ IN PRTMP_ADAPTER pAd)
++{
++}
++
++VOID RTMPSendNullFrame(
++ IN PRTMP_ADAPTER pAd,
++ IN UCHAR TxRate,
++ IN BOOLEAN bQosNull)
++{
++ UCHAR NullFrame[48];
++ ULONG Length;
++ PHEADER_802_11 pHeader_802_11;
++
++
++#ifdef RALINK_ATE
++ if(ATE_ON(pAd))
++ {
++ return;
++ }
++#endif // RALINK_ATE //
++
++ // WPA 802.1x secured port control
++ if (((pAd->StaCfg.AuthMode == Ndis802_11AuthModeWPA) ||
++ (pAd->StaCfg.AuthMode == Ndis802_11AuthModeWPAPSK) ||
++ (pAd->StaCfg.AuthMode == Ndis802_11AuthModeWPA2) ||
++ (pAd->StaCfg.AuthMode == Ndis802_11AuthModeWPA2PSK)
++#ifdef WPA_SUPPLICANT_SUPPORT
++ || (pAd->StaCfg.IEEE8021X == TRUE)
++#endif
++ ) &&
++ (pAd->StaCfg.PortSecured == WPA_802_1X_PORT_NOT_SECURED))
++ {
++ return;
++ }
++
++ NdisZeroMemory(NullFrame, 48);
++ Length = sizeof(HEADER_802_11);
++
++ pHeader_802_11 = (PHEADER_802_11) NullFrame;
++
++ pHeader_802_11->FC.Type = BTYPE_DATA;
++ pHeader_802_11->FC.SubType = SUBTYPE_NULL_FUNC;
++ pHeader_802_11->FC.ToDs = 1;
++ COPY_MAC_ADDR(pHeader_802_11->Addr1, pAd->CommonCfg.Bssid);
++ COPY_MAC_ADDR(pHeader_802_11->Addr2, pAd->CurrentAddress);
++ COPY_MAC_ADDR(pHeader_802_11->Addr3, pAd->CommonCfg.Bssid);
++
++ if (pAd->CommonCfg.bAPSDForcePowerSave)
++ {
++ pHeader_802_11->FC.PwrMgmt = PWR_SAVE;
++ }
++ else
++ {
++ pHeader_802_11->FC.PwrMgmt = (pAd->StaCfg.Psm == PWR_SAVE) ? 1: 0;
++ }
++ pHeader_802_11->Duration = pAd->CommonCfg.Dsifs + RTMPCalcDuration(pAd, TxRate, 14);
++
++ pAd->Sequence++;
++ pHeader_802_11->Sequence = pAd->Sequence;
++
++ // Prepare QosNull function frame
++ if (bQosNull)
++ {
++ pHeader_802_11->FC.SubType = SUBTYPE_QOS_NULL;
++
++ // copy QOS control bytes
++ NullFrame[Length] = 0;
++ NullFrame[Length+1] = 0;
++ Length += 2;// if pad with 2 bytes for alignment, APSD will fail
++ }
++
++ HAL_KickOutNullFrameTx(pAd, 0, NullFrame, Length);
++
++}
++
++// IRQL = DISPATCH_LEVEL
++VOID RTMPSendRTSFrame(
++ IN PRTMP_ADAPTER pAd,
++ IN PUCHAR pDA,
++ IN unsigned int NextMpduSize,
++ IN UCHAR TxRate,
++ IN UCHAR RTSRate,
++ IN USHORT AckDuration,
++ IN UCHAR QueIdx,
++ IN UCHAR FrameGap)
++{
++}
++
++
++
++// --------------------------------------------------------
++// FIND ENCRYPT KEY AND DECIDE CIPHER ALGORITHM
++// Find the WPA key, either Group or Pairwise Key
++// LEAP + TKIP also use WPA key.
++// --------------------------------------------------------
++// Decide WEP bit and cipher suite to be used. Same cipher suite should be used for whole fragment burst
++// In Cisco CCX 2.0 Leap Authentication
++// WepStatus is Ndis802_11Encryption1Enabled but the key will use PairwiseKey
++// Instead of the SharedKey, SharedKey Length may be Zero.
++VOID STAFindCipherAlgorithm(
++ IN PRTMP_ADAPTER pAd,
++ IN TX_BLK *pTxBlk)
++{
++ NDIS_802_11_ENCRYPTION_STATUS Cipher; // To indicate cipher used for this packet
++ UCHAR CipherAlg = CIPHER_NONE; // cipher alogrithm
++ UCHAR KeyIdx = 0xff;
++ PUCHAR pSrcBufVA;
++ PCIPHER_KEY pKey = NULL;
++
++ pSrcBufVA = GET_OS_PKT_DATAPTR(pTxBlk->pPacket);
++
++ {
++ // Select Cipher
++ if ((*pSrcBufVA & 0x01) && (ADHOC_ON(pAd)))
++ Cipher = pAd->StaCfg.GroupCipher; // Cipher for Multicast or Broadcast
++ else
++ Cipher = pAd->StaCfg.PairCipher; // Cipher for Unicast
++
++ if (RTMP_GET_PACKET_EAPOL(pTxBlk->pPacket))
++ {
++ ASSERT(pAd->SharedKey[BSS0][0].CipherAlg <= CIPHER_CKIP128);
++
++ // 4-way handshaking frame must be clear
++ if (!(TX_BLK_TEST_FLAG(pTxBlk, fTX_bClearEAPFrame)) && (pAd->SharedKey[BSS0][0].CipherAlg) &&
++ (pAd->SharedKey[BSS0][0].KeyLen))
++ {
++ CipherAlg = pAd->SharedKey[BSS0][0].CipherAlg;
++ KeyIdx = 0;
++ }
++ }
++ else if (Cipher == Ndis802_11Encryption1Enabled)
++ {
++#ifdef LEAP_SUPPORT
++ if (pAd->StaCfg.CkipFlag & 0x10) // Cisco CKIP KP is on
++ {
++ if (LEAP_CCKM_ON(pAd))
++ {
++ if (((*pSrcBufVA & 0x01) && (ADHOC_ON(pAd))))
++ KeyIdx = 1;
++ else
++ KeyIdx = 0;
++ }
++ else
++ KeyIdx = pAd->StaCfg.DefaultKeyId;
++ }
++ else if (pAd->StaCfg.CkipFlag & 0x08) // only CKIP CMIC
++ KeyIdx = pAd->StaCfg.DefaultKeyId;
++ else if (LEAP_CCKM_ON(pAd))
++ {
++ if ((*pSrcBufVA & 0x01) && (ADHOC_ON(pAd)))
++ KeyIdx = 1;
++ else
++ KeyIdx = 0;
++ }
++ else // standard WEP64 or WEP128
++#endif // LEAP_SUPPORT //
++ KeyIdx = pAd->StaCfg.DefaultKeyId;
++ }
++ else if ((Cipher == Ndis802_11Encryption2Enabled) ||
++ (Cipher == Ndis802_11Encryption3Enabled))
++ {
++ if ((*pSrcBufVA & 0x01) && (ADHOC_ON(pAd))) // multicast
++ KeyIdx = pAd->StaCfg.DefaultKeyId;
++ else if (pAd->SharedKey[BSS0][0].KeyLen)
++ KeyIdx = 0;
++ else
++ KeyIdx = pAd->StaCfg.DefaultKeyId;
++ }
++
++ if (KeyIdx == 0xff)
++ CipherAlg = CIPHER_NONE;
++ else if ((Cipher == Ndis802_11EncryptionDisabled) || (pAd->SharedKey[BSS0][KeyIdx].KeyLen == 0))
++ CipherAlg = CIPHER_NONE;
++#ifdef WPA_SUPPLICANT_SUPPORT
++ else if ( pAd->StaCfg.WpaSupplicantUP &&
++ (Cipher == Ndis802_11Encryption1Enabled) &&
++ (pAd->StaCfg.IEEE8021X == TRUE) &&
++ (pAd->StaCfg.PortSecured == WPA_802_1X_PORT_NOT_SECURED))
++ CipherAlg = CIPHER_NONE;
++#endif // WPA_SUPPLICANT_SUPPORT //
++ else
++ {
++ //Header_802_11.FC.Wep = 1;
++ CipherAlg = pAd->SharedKey[BSS0][KeyIdx].CipherAlg;
++ pKey = &pAd->SharedKey[BSS0][KeyIdx];
++ }
++ }
++
++ pTxBlk->CipherAlg = CipherAlg;
++ pTxBlk->pKey = pKey;
++}
++
++
++VOID STABuildCommon802_11Header(
++ IN PRTMP_ADAPTER pAd,
++ IN TX_BLK *pTxBlk)
++{
++
++ HEADER_802_11 *pHeader_802_11;
++#ifdef QOS_DLS_SUPPORT
++ BOOLEAN bDLSFrame = FALSE;
++ INT DlsEntryIndex = 0;
++#endif // QOS_DLS_SUPPORT //
++
++ //
++ // MAKE A COMMON 802.11 HEADER
++ //
++
++ // normal wlan header size : 24 octets
++ pTxBlk->MpduHeaderLen = sizeof(HEADER_802_11);
++
++ pHeader_802_11 = (HEADER_802_11 *) &pTxBlk->HeaderBuf[TXINFO_SIZE + TXWI_SIZE];
++
++ NdisZeroMemory(pHeader_802_11, sizeof(HEADER_802_11));
++
++ pHeader_802_11->FC.FrDs = 0;
++ pHeader_802_11->FC.Type = BTYPE_DATA;
++ pHeader_802_11->FC.SubType = ((TX_BLK_TEST_FLAG(pTxBlk, fTX_bWMM)) ? SUBTYPE_QDATA : SUBTYPE_DATA);
++
++#ifdef QOS_DLS_SUPPORT
++ if (INFRA_ON(pAd))
++ {
++ // Check if the frame can be sent through DLS direct link interface
++ // If packet can be sent through DLS, then force aggregation disable. (Hard to determine peer STA's capability)
++ DlsEntryIndex = RTMPCheckDLSFrame(pAd, pTxBlk->pSrcBufHeader);
++ if (DlsEntryIndex >= 0)
++ bDLSFrame = TRUE;
++ else
++ bDLSFrame = FALSE;
++ }
++#endif // QOS_DLS_SUPPORT //
++
++ if (pTxBlk->pMacEntry)
++ {
++ if (TX_BLK_TEST_FLAG(pTxBlk, fTX_bForceNonQoS))
++ {
++ pHeader_802_11->Sequence = pTxBlk->pMacEntry->NonQosDataSeq;
++ pTxBlk->pMacEntry->NonQosDataSeq = (pTxBlk->pMacEntry->NonQosDataSeq+1) & MAXSEQ;
++ }
++ else
++ {
++ pHeader_802_11->Sequence = pTxBlk->pMacEntry->TxSeq[pTxBlk->UserPriority];
++ pTxBlk->pMacEntry->TxSeq[pTxBlk->UserPriority] = (pTxBlk->pMacEntry->TxSeq[pTxBlk->UserPriority]+1) & MAXSEQ;
++ }
++ }
++ else
++ {
++ pHeader_802_11->Sequence = pAd->Sequence;
++ pAd->Sequence = (pAd->Sequence+1) & MAXSEQ; // next sequence
++ }
++
++ pHeader_802_11->Frag = 0;
++
++ pHeader_802_11->FC.MoreData = TX_BLK_TEST_FLAG(pTxBlk, fTX_bMoreData);
++
++ {
++ if (INFRA_ON(pAd))
++ {
++#ifdef QOS_DLS_SUPPORT
++ if (bDLSFrame)
++ {
++ COPY_MAC_ADDR(pHeader_802_11->Addr1, pTxBlk->pSrcBufHeader);
++ COPY_MAC_ADDR(pHeader_802_11->Addr2, pAd->CurrentAddress);
++ COPY_MAC_ADDR(pHeader_802_11->Addr3, pAd->CommonCfg.Bssid);
++ pHeader_802_11->FC.ToDs = 0;
++ }
++ else
++#endif // QOS_DLS_SUPPORT //
++ {
++ COPY_MAC_ADDR(pHeader_802_11->Addr1, pAd->CommonCfg.Bssid);
++ COPY_MAC_ADDR(pHeader_802_11->Addr2, pAd->CurrentAddress);
++ COPY_MAC_ADDR(pHeader_802_11->Addr3, pTxBlk->pSrcBufHeader);
++ pHeader_802_11->FC.ToDs = 1;
++ }
++ }
++ else if (ADHOC_ON(pAd))
++ {
++ COPY_MAC_ADDR(pHeader_802_11->Addr1, pTxBlk->pSrcBufHeader);
++ COPY_MAC_ADDR(pHeader_802_11->Addr2, pAd->CurrentAddress);
++ COPY_MAC_ADDR(pHeader_802_11->Addr3, pAd->CommonCfg.Bssid);
++ pHeader_802_11->FC.ToDs = 0;
++ }
++ }
++
++ if (pTxBlk->CipherAlg != CIPHER_NONE)
++ pHeader_802_11->FC.Wep = 1;
++
++ // -----------------------------------------------------------------
++ // STEP 2. MAKE A COMMON 802.11 HEADER SHARED BY ENTIRE FRAGMENT BURST. Fill sequence later.
++ // -----------------------------------------------------------------
++ if (pAd->CommonCfg.bAPSDForcePowerSave)
++ pHeader_802_11->FC.PwrMgmt = PWR_SAVE;
++ else
++ pHeader_802_11->FC.PwrMgmt = (pAd->StaCfg.Psm == PWR_SAVE);
++}
++
++#ifdef DOT11_N_SUPPORT
++VOID STABuildCache802_11Header(
++ IN RTMP_ADAPTER *pAd,
++ IN TX_BLK *pTxBlk,
++ IN UCHAR *pHeader)
++{
++ MAC_TABLE_ENTRY *pMacEntry;
++ PHEADER_802_11 pHeader80211;
++
++ pHeader80211 = (PHEADER_802_11)pHeader;
++ pMacEntry = pTxBlk->pMacEntry;
++
++ //
++ // Update the cached 802.11 HEADER
++ //
++
++ // normal wlan header size : 24 octets
++ pTxBlk->MpduHeaderLen = sizeof(HEADER_802_11);
++
++ // More Bit
++ pHeader80211->FC.MoreData = TX_BLK_TEST_FLAG(pTxBlk, fTX_bMoreData);
++
++ // Sequence
++ pHeader80211->Sequence = pMacEntry->TxSeq[pTxBlk->UserPriority];
++ pMacEntry->TxSeq[pTxBlk->UserPriority] = (pMacEntry->TxSeq[pTxBlk->UserPriority]+1) & MAXSEQ;
++
++ {
++ // Check if the frame can be sent through DLS direct link interface
++ // If packet can be sent through DLS, then force aggregation disable. (Hard to determine peer STA's capability)
++#ifdef QOS_DLS_SUPPORT
++ BOOLEAN bDLSFrame = FALSE;
++ INT DlsEntryIndex = 0;
++
++ DlsEntryIndex = RTMPCheckDLSFrame(pAd, pTxBlk->pSrcBufHeader);
++ if (DlsEntryIndex >= 0)
++ bDLSFrame = TRUE;
++ else
++ bDLSFrame = FALSE;
++#endif // QOS_DLS_SUPPORT //
++
++ // The addr3 of normal packet send from DS is Dest Mac address.
++#ifdef QOS_DLS_SUPPORT
++ if (bDLSFrame)
++ {
++ COPY_MAC_ADDR(pHeader80211->Addr1, pTxBlk->pSrcBufHeader);
++ COPY_MAC_ADDR(pHeader80211->Addr3, pAd->CommonCfg.Bssid);
++ pHeader80211->FC.ToDs = 0;
++ }
++ else
++#endif // QOS_DLS_SUPPORT //
++ if (ADHOC_ON(pAd))
++ COPY_MAC_ADDR(pHeader80211->Addr3, pAd->CommonCfg.Bssid);
++ else
++ COPY_MAC_ADDR(pHeader80211->Addr3, pTxBlk->pSrcBufHeader);
++ }
++
++ // -----------------------------------------------------------------
++ // STEP 2. MAKE A COMMON 802.11 HEADER SHARED BY ENTIRE FRAGMENT BURST. Fill sequence later.
++ // -----------------------------------------------------------------
++ if (pAd->CommonCfg.bAPSDForcePowerSave)
++ pHeader80211->FC.PwrMgmt = PWR_SAVE;
++ else
++ pHeader80211->FC.PwrMgmt = (pAd->StaCfg.Psm == PWR_SAVE);
++}
++#endif // DOT11_N_SUPPORT //
++
++static inline PUCHAR STA_Build_ARalink_Frame_Header(
++ IN RTMP_ADAPTER *pAd,
++ IN TX_BLK *pTxBlk)
++{
++ PUCHAR pHeaderBufPtr;
++ HEADER_802_11 *pHeader_802_11;
++ PNDIS_PACKET pNextPacket;
++ UINT32 nextBufLen;
++ PQUEUE_ENTRY pQEntry;
++
++ STAFindCipherAlgorithm(pAd, pTxBlk);
++ STABuildCommon802_11Header(pAd, pTxBlk);
++
++
++ pHeaderBufPtr = &pTxBlk->HeaderBuf[TXINFO_SIZE + TXWI_SIZE];
++ pHeader_802_11 = (HEADER_802_11 *) pHeaderBufPtr;
++
++ // steal "order" bit to mark "aggregation"
++ pHeader_802_11->FC.Order = 1;
++
++ // skip common header
++ pHeaderBufPtr += pTxBlk->MpduHeaderLen;
++
++ if (TX_BLK_TEST_FLAG(pTxBlk, fTX_bWMM))
++ {
++ //
++ // build QOS Control bytes
++ //
++ *pHeaderBufPtr = (pTxBlk->UserPriority & 0x0F);
++
++ *(pHeaderBufPtr+1) = 0;
++ pHeaderBufPtr +=2;
++ pTxBlk->MpduHeaderLen += 2;
++ }
++
++ // padding at front of LLC header. LLC header should at 4-bytes aligment.
++ pTxBlk->HdrPadLen = (ULONG)pHeaderBufPtr;
++ pHeaderBufPtr = (PCHAR)ROUND_UP(pHeaderBufPtr, 4);
++ pTxBlk->HdrPadLen = (ULONG)(pHeaderBufPtr - pTxBlk->HdrPadLen);
++
++ // For RA Aggregation,
++ // put the 2nd MSDU length(extra 2-byte field) after QOS_CONTROL in little endian format
++ pQEntry = pTxBlk->TxPacketList.Head;
++ pNextPacket = QUEUE_ENTRY_TO_PKT(pQEntry);
++ nextBufLen = GET_OS_PKT_LEN(pNextPacket);
++ if (RTMP_GET_PACKET_VLAN(pNextPacket))
++ nextBufLen -= LENGTH_802_1Q;
++
++ *pHeaderBufPtr = (UCHAR)nextBufLen & 0xff;
++ *(pHeaderBufPtr+1) = (UCHAR)(nextBufLen >> 8);
++
++ pHeaderBufPtr += 2;
++ pTxBlk->MpduHeaderLen += 2;
++
++ return pHeaderBufPtr;
++
++}
++
++#ifdef DOT11_N_SUPPORT
++static inline PUCHAR STA_Build_AMSDU_Frame_Header(
++ IN RTMP_ADAPTER *pAd,
++ IN TX_BLK *pTxBlk)
++{
++ PUCHAR pHeaderBufPtr;//, pSaveBufPtr;
++ HEADER_802_11 *pHeader_802_11;
++
++
++ STAFindCipherAlgorithm(pAd, pTxBlk);
++ STABuildCommon802_11Header(pAd, pTxBlk);
++
++ pHeaderBufPtr = &pTxBlk->HeaderBuf[TXINFO_SIZE + TXWI_SIZE];
++ pHeader_802_11 = (HEADER_802_11 *) pHeaderBufPtr;
++
++ // skip common header
++ pHeaderBufPtr += pTxBlk->MpduHeaderLen;
++
++ //
++ // build QOS Control bytes
++ //
++ *pHeaderBufPtr = (pTxBlk->UserPriority & 0x0F);
++
++ //
++ // A-MSDU packet
++ //
++ *pHeaderBufPtr |= 0x80;
++
++ *(pHeaderBufPtr+1) = 0;
++ pHeaderBufPtr +=2;
++ pTxBlk->MpduHeaderLen += 2;
++
++ //pSaveBufPtr = pHeaderBufPtr;
++
++ //
++ // padding at front of LLC header
++ // LLC header should locate at 4-octets aligment
++ //
++ // @@@ MpduHeaderLen excluding padding @@@
++ //
++ pTxBlk->HdrPadLen = (ULONG)pHeaderBufPtr;
++ pHeaderBufPtr = (PCHAR) ROUND_UP(pHeaderBufPtr, 4);
++ pTxBlk->HdrPadLen = (ULONG)(pHeaderBufPtr - pTxBlk->HdrPadLen);
++
++ return pHeaderBufPtr;
++
++}
++
++
++VOID STA_AMPDU_Frame_Tx(
++ IN PRTMP_ADAPTER pAd,
++ IN TX_BLK *pTxBlk)
++{
++ HEADER_802_11 *pHeader_802_11;
++ PUCHAR pHeaderBufPtr;
++ USHORT FreeNumber;
++ MAC_TABLE_ENTRY *pMacEntry;
++ BOOLEAN bVLANPkt;
++ PQUEUE_ENTRY pQEntry;
++
++ ASSERT(pTxBlk);
++
++ while(pTxBlk->TxPacketList.Head)
++ {
++ pQEntry = RemoveHeadQueue(&pTxBlk->TxPacketList);
++ pTxBlk->pPacket = QUEUE_ENTRY_TO_PACKET(pQEntry);
++ if ( RTMP_FillTxBlkInfo(pAd, pTxBlk) != TRUE)
++ {
++ RELEASE_NDIS_PACKET(pAd, pTxBlk->pPacket, NDIS_STATUS_FAILURE);
++ continue;
++ }
++
++ bVLANPkt = (RTMP_GET_PACKET_VLAN(pTxBlk->pPacket) ? TRUE : FALSE);
++
++ pMacEntry = pTxBlk->pMacEntry;
++ if (pMacEntry->isCached)
++ {
++ // NOTE: Please make sure the size of pMacEntry->CachedBuf[] is smaller than pTxBlk->HeaderBuf[]!!!!
++ NdisMoveMemory((PUCHAR)&pTxBlk->HeaderBuf[TXINFO_SIZE], (PUCHAR)&pMacEntry->CachedBuf[0], TXWI_SIZE + sizeof(HEADER_802_11));
++ pHeaderBufPtr = (PUCHAR)(&pTxBlk->HeaderBuf[TXINFO_SIZE + TXWI_SIZE]);
++ STABuildCache802_11Header(pAd, pTxBlk, pHeaderBufPtr);
++ }
++ else
++ {
++ STAFindCipherAlgorithm(pAd, pTxBlk);
++ STABuildCommon802_11Header(pAd, pTxBlk);
++
++ pHeaderBufPtr = &pTxBlk->HeaderBuf[TXINFO_SIZE + TXWI_SIZE];
++ }
++
++
++ pHeader_802_11 = (HEADER_802_11 *) pHeaderBufPtr;
++
++ // skip common header
++ pHeaderBufPtr += pTxBlk->MpduHeaderLen;
++
++ //
++ // build QOS Control bytes
++ //
++ *pHeaderBufPtr = (pTxBlk->UserPriority & 0x0F);
++ *(pHeaderBufPtr+1) = 0;
++ pHeaderBufPtr +=2;
++ pTxBlk->MpduHeaderLen += 2;
++
++ //
++ // build HTC+
++ // HTC control filed following QoS field
++ //
++ if ((pAd->CommonCfg.bRdg == TRUE) && CLIENT_STATUS_TEST_FLAG(pTxBlk->pMacEntry, fCLIENT_STATUS_RDG_CAPABLE))
++ {
++ if (pMacEntry->isCached == FALSE)
++ {
++ // mark HTC bit
++ pHeader_802_11->FC.Order = 1;
++
++ NdisZeroMemory(pHeaderBufPtr, 4);
++ *(pHeaderBufPtr+3) |= 0x80;
++ }
++ pHeaderBufPtr += 4;
++ pTxBlk->MpduHeaderLen += 4;
++ }
++
++ //pTxBlk->MpduHeaderLen = pHeaderBufPtr - pTxBlk->HeaderBuf - TXWI_SIZE - TXINFO_SIZE;
++ ASSERT(pTxBlk->MpduHeaderLen >= 24);
++
++ // skip 802.3 header
++ pTxBlk->pSrcBufData = pTxBlk->pSrcBufHeader + LENGTH_802_3;
++ pTxBlk->SrcBufLen -= LENGTH_802_3;
++
++ // skip vlan tag
++ if (bVLANPkt)
++ {
++ pTxBlk->pSrcBufData += LENGTH_802_1Q;
++ pTxBlk->SrcBufLen -= LENGTH_802_1Q;
++ }
++
++ //
++ // padding at front of LLC header
++ // LLC header should locate at 4-octets aligment
++ //
++ // @@@ MpduHeaderLen excluding padding @@@
++ //
++ pTxBlk->HdrPadLen = (ULONG)pHeaderBufPtr;
++ pHeaderBufPtr = (PCHAR) ROUND_UP(pHeaderBufPtr, 4);
++ pTxBlk->HdrPadLen = (ULONG)(pHeaderBufPtr - pTxBlk->HdrPadLen);
++
++ {
++
++ //
++ // Insert LLC-SNAP encapsulation - 8 octets
++ //
++ EXTRA_LLCSNAP_ENCAP_FROM_PKT_OFFSET(pTxBlk->pSrcBufData-2, pTxBlk->pExtraLlcSnapEncap);
++ if (pTxBlk->pExtraLlcSnapEncap)
++ {
++ NdisMoveMemory(pHeaderBufPtr, pTxBlk->pExtraLlcSnapEncap, 6);
++ pHeaderBufPtr += 6;
++ // get 2 octets (TypeofLen)
++ NdisMoveMemory(pHeaderBufPtr, pTxBlk->pSrcBufData-2, 2);
++ pHeaderBufPtr += 2;
++ pTxBlk->MpduHeaderLen += LENGTH_802_1_H;
++ }
++
++ }
++
++ if (pMacEntry->isCached)
++ {
++ RTMPWriteTxWI_Cache(pAd, (PTXWI_STRUC)(&pTxBlk->HeaderBuf[TXINFO_SIZE]), pTxBlk);
++ }
++ else
++ {
++ RTMPWriteTxWI_Data(pAd, (PTXWI_STRUC)(&pTxBlk->HeaderBuf[TXINFO_SIZE]), pTxBlk);
++
++ NdisZeroMemory((PUCHAR)(&pMacEntry->CachedBuf[0]), sizeof(pMacEntry->CachedBuf));
++ NdisMoveMemory((PUCHAR)(&pMacEntry->CachedBuf[0]), (PUCHAR)(&pTxBlk->HeaderBuf[TXINFO_SIZE]), (pHeaderBufPtr - (PUCHAR)(&pTxBlk->HeaderBuf[TXINFO_SIZE])));
++ pMacEntry->isCached = TRUE;
++ }
++
++ // calculate Transmitted AMPDU count and ByteCount
++ {
++ pAd->RalinkCounters.TransmittedMPDUsInAMPDUCount.u.LowPart ++;
++ pAd->RalinkCounters.TransmittedOctetsInAMPDUCount.QuadPart += pTxBlk->SrcBufLen;
++ }
++
++ //FreeNumber = GET_TXRING_FREENO(pAd, QueIdx);
++
++ HAL_WriteTxResource(pAd, pTxBlk, TRUE, &FreeNumber);
++
++ //
++ // Kick out Tx
++ //
++ HAL_KickOutTx(pAd, pTxBlk, pTxBlk->QueIdx);
++
++ pAd->RalinkCounters.KickTxCount++;
++ pAd->RalinkCounters.OneSecTxDoneCount++;
++ }
++
++}
++
++
++VOID STA_AMSDU_Frame_Tx(
++ IN PRTMP_ADAPTER pAd,
++ IN TX_BLK *pTxBlk)
++{
++ PUCHAR pHeaderBufPtr;
++ USHORT FreeNumber;
++ USHORT subFramePayloadLen = 0; // AMSDU Subframe length without AMSDU-Header / Padding.
++ USHORT totalMPDUSize=0;
++ UCHAR *subFrameHeader;
++ UCHAR padding = 0;
++ USHORT FirstTx = 0, LastTxIdx = 0;
++ BOOLEAN bVLANPkt;
++ int frameNum = 0;
++ PQUEUE_ENTRY pQEntry;
++
++
++ ASSERT(pTxBlk);
++
++ ASSERT((pTxBlk->TxPacketList.Number > 1));
++
++ while(pTxBlk->TxPacketList.Head)
++ {
++ pQEntry = RemoveHeadQueue(&pTxBlk->TxPacketList);
++ pTxBlk->pPacket = QUEUE_ENTRY_TO_PACKET(pQEntry);
++ if (RTMP_FillTxBlkInfo(pAd, pTxBlk) != TRUE)
++ {
++ RELEASE_NDIS_PACKET(pAd, pTxBlk->pPacket, NDIS_STATUS_FAILURE);
++ continue;
++ }
++
++ bVLANPkt = (RTMP_GET_PACKET_VLAN(pTxBlk->pPacket) ? TRUE : FALSE);
++
++ // skip 802.3 header
++ pTxBlk->pSrcBufData = pTxBlk->pSrcBufHeader + LENGTH_802_3;
++ pTxBlk->SrcBufLen -= LENGTH_802_3;
++
++ // skip vlan tag
++ if (bVLANPkt)
++ {
++ pTxBlk->pSrcBufData += LENGTH_802_1Q;
++ pTxBlk->SrcBufLen -= LENGTH_802_1Q;
++ }
++
++ if (frameNum == 0)
++ {
++ pHeaderBufPtr = STA_Build_AMSDU_Frame_Header(pAd, pTxBlk);
++
++ // NOTE: TxWI->MPDUtotalByteCount will be updated after final frame was handled.
++ RTMPWriteTxWI_Data(pAd, (PTXWI_STRUC)(&pTxBlk->HeaderBuf[TXINFO_SIZE]), pTxBlk);
++ }
++ else
++ {
++ pHeaderBufPtr = &pTxBlk->HeaderBuf[0];
++ padding = ROUND_UP(LENGTH_AMSDU_SUBFRAMEHEAD + subFramePayloadLen, 4) - (LENGTH_AMSDU_SUBFRAMEHEAD + subFramePayloadLen);
++ NdisZeroMemory(pHeaderBufPtr, padding + LENGTH_AMSDU_SUBFRAMEHEAD);
++ pHeaderBufPtr += padding;
++ pTxBlk->MpduHeaderLen = padding;
++ }
++
++ //
++ // A-MSDU subframe
++ // DA(6)+SA(6)+Length(2) + LLC/SNAP Encap
++ //
++ subFrameHeader = pHeaderBufPtr;
++ subFramePayloadLen = pTxBlk->SrcBufLen;
++
++ NdisMoveMemory(subFrameHeader, pTxBlk->pSrcBufHeader, 12);
++
++
++ pHeaderBufPtr += LENGTH_AMSDU_SUBFRAMEHEAD;
++ pTxBlk->MpduHeaderLen += LENGTH_AMSDU_SUBFRAMEHEAD;
++
++
++ //
++ // Insert LLC-SNAP encapsulation - 8 octets
++ //
++ EXTRA_LLCSNAP_ENCAP_FROM_PKT_OFFSET(pTxBlk->pSrcBufData-2, pTxBlk->pExtraLlcSnapEncap);
++
++ subFramePayloadLen = pTxBlk->SrcBufLen;
++
++ if (pTxBlk->pExtraLlcSnapEncap)
++ {
++ NdisMoveMemory(pHeaderBufPtr, pTxBlk->pExtraLlcSnapEncap, 6);
++ pHeaderBufPtr += 6;
++ // get 2 octets (TypeofLen)
++ NdisMoveMemory(pHeaderBufPtr, pTxBlk->pSrcBufData-2, 2);
++ pHeaderBufPtr += 2;
++ pTxBlk->MpduHeaderLen += LENGTH_802_1_H;
++ subFramePayloadLen += LENGTH_802_1_H;
++ }
++
++ // update subFrame Length field
++ subFrameHeader[12] = (subFramePayloadLen & 0xFF00) >> 8;
++ subFrameHeader[13] = subFramePayloadLen & 0xFF;
++
++ totalMPDUSize += pTxBlk->MpduHeaderLen + pTxBlk->SrcBufLen;
++
++ if (frameNum ==0)
++ FirstTx = HAL_WriteMultiTxResource(pAd, pTxBlk, frameNum, &FreeNumber);
++ else
++ LastTxIdx = HAL_WriteMultiTxResource(pAd, pTxBlk, frameNum, &FreeNumber);
++
++ frameNum++;
++
++ pAd->RalinkCounters.KickTxCount++;
++ pAd->RalinkCounters.OneSecTxDoneCount++;
++
++ // calculate Transmitted AMSDU Count and ByteCount
++ {
++ pAd->RalinkCounters.TransmittedAMSDUCount.u.LowPart ++;
++ pAd->RalinkCounters.TransmittedOctetsInAMSDU.QuadPart += totalMPDUSize;
++ }
++
++ }
++
++ HAL_FinalWriteTxResource(pAd, pTxBlk, totalMPDUSize, FirstTx);
++ HAL_LastTxIdx(pAd, pTxBlk->QueIdx, LastTxIdx);
++
++ //
++ // Kick out Tx
++ //
++ HAL_KickOutTx(pAd, pTxBlk, pTxBlk->QueIdx);
++}
++#endif // DOT11_N_SUPPORT //
++
++VOID STA_Legacy_Frame_Tx(
++ IN PRTMP_ADAPTER pAd,
++ IN TX_BLK *pTxBlk)
++{
++ HEADER_802_11 *pHeader_802_11;
++ PUCHAR pHeaderBufPtr;
++ USHORT FreeNumber;
++ BOOLEAN bVLANPkt;
++ PQUEUE_ENTRY pQEntry;
++
++ ASSERT(pTxBlk);
++
++
++ pQEntry = RemoveHeadQueue(&pTxBlk->TxPacketList);
++ pTxBlk->pPacket = QUEUE_ENTRY_TO_PACKET(pQEntry);
++ if (RTMP_FillTxBlkInfo(pAd, pTxBlk) != TRUE)
++ {
++ RELEASE_NDIS_PACKET(pAd, pTxBlk->pPacket, NDIS_STATUS_FAILURE);
++ return;
++ }
++
++ if (pTxBlk->TxFrameType == TX_MCAST_FRAME)
++ {
++ INC_COUNTER64(pAd->WlanCounters.MulticastTransmittedFrameCount);
++ }
++
++ if (RTMP_GET_PACKET_RTS(pTxBlk->pPacket))
++ TX_BLK_SET_FLAG(pTxBlk, fTX_bRtsRequired);
++ else
++ TX_BLK_CLEAR_FLAG(pTxBlk, fTX_bRtsRequired);
++
++ bVLANPkt = (RTMP_GET_PACKET_VLAN(pTxBlk->pPacket) ? TRUE : FALSE);
++
++ if (pTxBlk->TxRate < pAd->CommonCfg.MinTxRate)
++ pTxBlk->TxRate = pAd->CommonCfg.MinTxRate;
++
++ STAFindCipherAlgorithm(pAd, pTxBlk);
++ STABuildCommon802_11Header(pAd, pTxBlk);
++
++
++ // skip 802.3 header
++ pTxBlk->pSrcBufData = pTxBlk->pSrcBufHeader + LENGTH_802_3;
++ pTxBlk->SrcBufLen -= LENGTH_802_3;
++
++ // skip vlan tag
++ if (bVLANPkt)
++ {
++ pTxBlk->pSrcBufData += LENGTH_802_1Q;
++ pTxBlk->SrcBufLen -= LENGTH_802_1Q;
++ }
++
++ pHeaderBufPtr = &pTxBlk->HeaderBuf[TXINFO_SIZE + TXWI_SIZE];
++ pHeader_802_11 = (HEADER_802_11 *) pHeaderBufPtr;
++
++ // skip common header
++ pHeaderBufPtr += pTxBlk->MpduHeaderLen;
++
++ if (TX_BLK_TEST_FLAG(pTxBlk, fTX_bWMM))
++ {
++ //
++ // build QOS Control bytes
++ //
++ *pHeaderBufPtr = (pTxBlk->UserPriority & 0x0F);
++ *(pHeaderBufPtr+1) = 0;
++ pHeaderBufPtr +=2;
++ pTxBlk->MpduHeaderLen += 2;
++ }
++
++ // The remaining content of MPDU header should locate at 4-octets aligment
++ pTxBlk->HdrPadLen = (ULONG)pHeaderBufPtr;
++ pHeaderBufPtr = (PCHAR) ROUND_UP(pHeaderBufPtr, 4);
++ pTxBlk->HdrPadLen = (ULONG)(pHeaderBufPtr - pTxBlk->HdrPadLen);
++
++ {
++
++ //
++ // Insert LLC-SNAP encapsulation - 8 octets
++ //
++ //
++ // if original Ethernet frame contains no LLC/SNAP,
++ // then an extra LLC/SNAP encap is required
++ //
++ EXTRA_LLCSNAP_ENCAP_FROM_PKT_START(pTxBlk->pSrcBufHeader, pTxBlk->pExtraLlcSnapEncap);
++ if (pTxBlk->pExtraLlcSnapEncap)
++ {
++ UCHAR vlan_size;
++
++ NdisMoveMemory(pHeaderBufPtr, pTxBlk->pExtraLlcSnapEncap, 6);
++ pHeaderBufPtr += 6;
++ // skip vlan tag
++ vlan_size = (bVLANPkt) ? LENGTH_802_1Q : 0;
++ // get 2 octets (TypeofLen)
++ NdisMoveMemory(pHeaderBufPtr, pTxBlk->pSrcBufHeader+12+vlan_size, 2);
++ pHeaderBufPtr += 2;
++ pTxBlk->MpduHeaderLen += LENGTH_802_1_H;
++ }
++
++ }
++
++ //
++ // prepare for TXWI
++ // use Wcid as Key Index
++ //
++
++ RTMPWriteTxWI_Data(pAd, (PTXWI_STRUC)(&pTxBlk->HeaderBuf[TXINFO_SIZE]), pTxBlk);
++
++ //FreeNumber = GET_TXRING_FREENO(pAd, QueIdx);
++
++ HAL_WriteTxResource(pAd, pTxBlk, TRUE, &FreeNumber);
++
++ pAd->RalinkCounters.KickTxCount++;
++ pAd->RalinkCounters.OneSecTxDoneCount++;
++
++ //
++ // Kick out Tx
++ //
++ HAL_KickOutTx(pAd, pTxBlk, pTxBlk->QueIdx);
++}
++
++
++VOID STA_ARalink_Frame_Tx(
++ IN PRTMP_ADAPTER pAd,
++ IN TX_BLK *pTxBlk)
++{
++ PUCHAR pHeaderBufPtr;
++ USHORT FreeNumber;
++ USHORT totalMPDUSize=0;
++ USHORT FirstTx, LastTxIdx;
++ int frameNum = 0;
++ BOOLEAN bVLANPkt;
++ PQUEUE_ENTRY pQEntry;
++
++
++ ASSERT(pTxBlk);
++
++ ASSERT((pTxBlk->TxPacketList.Number== 2));
++
++
++ FirstTx = LastTxIdx = 0; // Is it ok init they as 0?
++ while(pTxBlk->TxPacketList.Head)
++ {
++ pQEntry = RemoveHeadQueue(&pTxBlk->TxPacketList);
++ pTxBlk->pPacket = QUEUE_ENTRY_TO_PACKET(pQEntry);
++
++ if (RTMP_FillTxBlkInfo(pAd, pTxBlk) != TRUE)
++ {
++ RELEASE_NDIS_PACKET(pAd, pTxBlk->pPacket, NDIS_STATUS_FAILURE);
++ continue;
++ }
++
++ bVLANPkt = (RTMP_GET_PACKET_VLAN(pTxBlk->pPacket) ? TRUE : FALSE);
++
++ // skip 802.3 header
++ pTxBlk->pSrcBufData = pTxBlk->pSrcBufHeader + LENGTH_802_3;
++ pTxBlk->SrcBufLen -= LENGTH_802_3;
++
++ // skip vlan tag
++ if (bVLANPkt)
++ {
++ pTxBlk->pSrcBufData += LENGTH_802_1Q;
++ pTxBlk->SrcBufLen -= LENGTH_802_1Q;
++ }
++
++ if (frameNum == 0)
++ { // For first frame, we need to create the 802.11 header + padding(optional) + RA-AGG-LEN + SNAP Header
++
++ pHeaderBufPtr = STA_Build_ARalink_Frame_Header(pAd, pTxBlk);
++
++ // It's ok write the TxWI here, because the TxWI->MPDUtotalByteCount
++ // will be updated after final frame was handled.
++ RTMPWriteTxWI_Data(pAd, (PTXWI_STRUC)(&pTxBlk->HeaderBuf[TXINFO_SIZE]), pTxBlk);
++
++
++ //
++ // Insert LLC-SNAP encapsulation - 8 octets
++ //
++ EXTRA_LLCSNAP_ENCAP_FROM_PKT_OFFSET(pTxBlk->pSrcBufData-2, pTxBlk->pExtraLlcSnapEncap);
++
++ if (pTxBlk->pExtraLlcSnapEncap)
++ {
++ NdisMoveMemory(pHeaderBufPtr, pTxBlk->pExtraLlcSnapEncap, 6);
++ pHeaderBufPtr += 6;
++ // get 2 octets (TypeofLen)
++ NdisMoveMemory(pHeaderBufPtr, pTxBlk->pSrcBufData-2, 2);
++ pHeaderBufPtr += 2;
++ pTxBlk->MpduHeaderLen += LENGTH_802_1_H;
++ }
++ }
++ else
++ { // For second aggregated frame, we need create the 802.3 header to headerBuf, because PCI will copy it to SDPtr0.
++
++ pHeaderBufPtr = &pTxBlk->HeaderBuf[0];
++ pTxBlk->MpduHeaderLen = 0;
++
++ // A-Ralink sub-sequent frame header is the same as 802.3 header.
++ // DA(6)+SA(6)+FrameType(2)
++ NdisMoveMemory(pHeaderBufPtr, pTxBlk->pSrcBufHeader, 12);
++ pHeaderBufPtr += 12;
++ // get 2 octets (TypeofLen)
++ NdisMoveMemory(pHeaderBufPtr, pTxBlk->pSrcBufData-2, 2);
++ pHeaderBufPtr += 2;
++ pTxBlk->MpduHeaderLen = LENGTH_ARALINK_SUBFRAMEHEAD;
++ }
++
++ totalMPDUSize += pTxBlk->MpduHeaderLen + pTxBlk->SrcBufLen;
++
++ //FreeNumber = GET_TXRING_FREENO(pAd, QueIdx);
++ if (frameNum ==0)
++ FirstTx = HAL_WriteMultiTxResource(pAd, pTxBlk, frameNum, &FreeNumber);
++ else
++ LastTxIdx = HAL_WriteMultiTxResource(pAd, pTxBlk, frameNum, &FreeNumber);
++
++ frameNum++;
++
++ pAd->RalinkCounters.OneSecTxAggregationCount++;
++ pAd->RalinkCounters.KickTxCount++;
++ pAd->RalinkCounters.OneSecTxDoneCount++;
++
++ }
++
++ HAL_FinalWriteTxResource(pAd, pTxBlk, totalMPDUSize, FirstTx);
++ HAL_LastTxIdx(pAd, pTxBlk->QueIdx, LastTxIdx);
++
++ //
++ // Kick out Tx
++ //
++ HAL_KickOutTx(pAd, pTxBlk, pTxBlk->QueIdx);
++
++}
++
++
++VOID STA_Fragment_Frame_Tx(
++ IN RTMP_ADAPTER *pAd,
++ IN TX_BLK *pTxBlk)
++{
++ HEADER_802_11 *pHeader_802_11;
++ PUCHAR pHeaderBufPtr;
++ USHORT FreeNumber;
++ UCHAR fragNum = 0;
++ PACKET_INFO PacketInfo;
++ USHORT EncryptionOverhead = 0;
++ UINT32 FreeMpduSize, SrcRemainingBytes;
++ USHORT AckDuration;
++ UINT NextMpduSize;
++ BOOLEAN bVLANPkt;
++ PQUEUE_ENTRY pQEntry;
++
++
++ ASSERT(pTxBlk);
++
++ pQEntry = RemoveHeadQueue(&pTxBlk->TxPacketList);
++ pTxBlk->pPacket = QUEUE_ENTRY_TO_PACKET(pQEntry);
++ if (RTMP_FillTxBlkInfo(pAd, pTxBlk) != TRUE)
++ {
++ RELEASE_NDIS_PACKET(pAd, pTxBlk->pPacket, NDIS_STATUS_FAILURE);
++ return;
++ }
++
++ ASSERT(TX_BLK_TEST_FLAG(pTxBlk, fTX_bAllowFrag));
++ bVLANPkt = (RTMP_GET_PACKET_VLAN(pTxBlk->pPacket) ? TRUE : FALSE);
++
++ STAFindCipherAlgorithm(pAd, pTxBlk);
++ STABuildCommon802_11Header(pAd, pTxBlk);
++
++ if (pTxBlk->CipherAlg == CIPHER_TKIP)
++ {
++ pTxBlk->pPacket = duplicate_pkt_with_TKIP_MIC(pAd, pTxBlk->pPacket);
++ if (pTxBlk->pPacket == NULL)
++ return;
++ RTMP_QueryPacketInfo(pTxBlk->pPacket, &PacketInfo, &pTxBlk->pSrcBufHeader, &pTxBlk->SrcBufLen);
++ }
++
++ // skip 802.3 header
++ pTxBlk->pSrcBufData = pTxBlk->pSrcBufHeader + LENGTH_802_3;
++ pTxBlk->SrcBufLen -= LENGTH_802_3;
++
++
++ // skip vlan tag
++ if (bVLANPkt)
++ {
++ pTxBlk->pSrcBufData += LENGTH_802_1Q;
++ pTxBlk->SrcBufLen -= LENGTH_802_1Q;
++ }
++
++ pHeaderBufPtr = &pTxBlk->HeaderBuf[TXINFO_SIZE + TXWI_SIZE];
++ pHeader_802_11 = (HEADER_802_11 *)pHeaderBufPtr;
++
++
++ // skip common header
++ pHeaderBufPtr += pTxBlk->MpduHeaderLen;
++
++ if (TX_BLK_TEST_FLAG(pTxBlk, fTX_bWMM))
++ {
++ //
++ // build QOS Control bytes
++ //
++ *pHeaderBufPtr = (pTxBlk->UserPriority & 0x0F);
++
++ *(pHeaderBufPtr+1) = 0;
++ pHeaderBufPtr +=2;
++ pTxBlk->MpduHeaderLen += 2;
++ }
++
++ //
++ // padding at front of LLC header
++ // LLC header should locate at 4-octets aligment
++ //
++ pTxBlk->HdrPadLen = (ULONG)pHeaderBufPtr;
++ pHeaderBufPtr = (PCHAR) ROUND_UP(pHeaderBufPtr, 4);
++ pTxBlk->HdrPadLen = (ULONG)(pHeaderBufPtr - pTxBlk->HdrPadLen);
++
++
++
++ //
++ // Insert LLC-SNAP encapsulation - 8 octets
++ //
++ //
++ // if original Ethernet frame contains no LLC/SNAP,
++ // then an extra LLC/SNAP encap is required
++ //
++ EXTRA_LLCSNAP_ENCAP_FROM_PKT_START(pTxBlk->pSrcBufHeader, pTxBlk->pExtraLlcSnapEncap);
++ if (pTxBlk->pExtraLlcSnapEncap)
++ {
++ UCHAR vlan_size;
++
++ NdisMoveMemory(pHeaderBufPtr, pTxBlk->pExtraLlcSnapEncap, 6);
++ pHeaderBufPtr += 6;
++ // skip vlan tag
++ vlan_size = (bVLANPkt) ? LENGTH_802_1Q : 0;
++ // get 2 octets (TypeofLen)
++ NdisMoveMemory(pHeaderBufPtr, pTxBlk->pSrcBufHeader+12+vlan_size, 2);
++ pHeaderBufPtr += 2;
++ pTxBlk->MpduHeaderLen += LENGTH_802_1_H;
++ }
++
++
++ // If TKIP is used and fragmentation is required. Driver has to
++ // append TKIP MIC at tail of the scatter buffer
++ // MAC ASIC will only perform IV/EIV/ICV insertion but no TKIP MIC
++ if (pTxBlk->CipherAlg == CIPHER_TKIP)
++ {
++
++ // NOTE: DON'T refer the skb->len directly after following copy. Becasue the length is not adjust
++ // to correct lenght, refer to pTxBlk->SrcBufLen for the packet length in following progress.
++ NdisMoveMemory(pTxBlk->pSrcBufData + pTxBlk->SrcBufLen, &pAd->PrivateInfo.Tx.MIC[0], 8);
++ //skb_put((RTPKT_TO_OSPKT(pTxBlk->pPacket))->tail, 8);
++ pTxBlk->SrcBufLen += 8;
++ pTxBlk->TotalFrameLen += 8;
++ pTxBlk->CipherAlg = CIPHER_TKIP_NO_MIC;
++ }
++
++ //
++ // calcuate the overhead bytes that encryption algorithm may add. This
++ // affects the calculate of "duration" field
++ //
++ if ((pTxBlk->CipherAlg == CIPHER_WEP64) || (pTxBlk->CipherAlg == CIPHER_WEP128))
++ EncryptionOverhead = 8; //WEP: IV[4] + ICV[4];
++ else if (pTxBlk->CipherAlg == CIPHER_TKIP_NO_MIC)
++ EncryptionOverhead = 12;//TKIP: IV[4] + EIV[4] + ICV[4], MIC will be added to TotalPacketLength
++ else if (pTxBlk->CipherAlg == CIPHER_TKIP)
++ EncryptionOverhead = 20;//TKIP: IV[4] + EIV[4] + ICV[4] + MIC[8]
++ else if (pTxBlk->CipherAlg == CIPHER_AES)
++ EncryptionOverhead = 16; // AES: IV[4] + EIV[4] + MIC[8]
++ else
++ EncryptionOverhead = 0;
++
++ // decide how much time an ACK/CTS frame will consume in the air
++ AckDuration = RTMPCalcDuration(pAd, pAd->CommonCfg.ExpectedACKRate[pTxBlk->TxRate], 14);
++
++ // Init the total payload length of this frame.
++ SrcRemainingBytes = pTxBlk->SrcBufLen;
++
++ pTxBlk->TotalFragNum = 0xff;
++
++ do {
++
++ FreeMpduSize = pAd->CommonCfg.FragmentThreshold - LENGTH_CRC;
++
++ FreeMpduSize -= pTxBlk->MpduHeaderLen;
++
++ if (SrcRemainingBytes <= FreeMpduSize)
++ { // this is the last or only fragment
++
++ pTxBlk->SrcBufLen = SrcRemainingBytes;
++
++ pHeader_802_11->FC.MoreFrag = 0;
++ pHeader_802_11->Duration = pAd->CommonCfg.Dsifs + AckDuration;
++
++ // Indicate the lower layer that this's the last fragment.
++ pTxBlk->TotalFragNum = fragNum;
++ }
++ else
++ { // more fragment is required
++
++ pTxBlk->SrcBufLen = FreeMpduSize;
++
++ NextMpduSize = min(((UINT)SrcRemainingBytes - pTxBlk->SrcBufLen), ((UINT)pAd->CommonCfg.FragmentThreshold));
++ pHeader_802_11->FC.MoreFrag = 1;
++ pHeader_802_11->Duration = (3 * pAd->CommonCfg.Dsifs) + (2 * AckDuration) + RTMPCalcDuration(pAd, pTxBlk->TxRate, NextMpduSize + EncryptionOverhead);
++ }
++
++ if (fragNum == 0)
++ pTxBlk->FrameGap = IFS_HTTXOP;
++ else
++ pTxBlk->FrameGap = IFS_SIFS;
++
++ RTMPWriteTxWI_Data(pAd, (PTXWI_STRUC)(&pTxBlk->HeaderBuf[TXINFO_SIZE]), pTxBlk);
++
++ HAL_WriteFragTxResource(pAd, pTxBlk, fragNum, &FreeNumber);
++
++ pAd->RalinkCounters.KickTxCount++;
++ pAd->RalinkCounters.OneSecTxDoneCount++;
++
++ // Update the frame number, remaining size of the NDIS packet payload.
++
++ // space for 802.11 header.
++ if (fragNum == 0 && pTxBlk->pExtraLlcSnapEncap)
++ pTxBlk->MpduHeaderLen -= LENGTH_802_1_H;
++
++ fragNum++;
++ SrcRemainingBytes -= pTxBlk->SrcBufLen;
++ pTxBlk->pSrcBufData += pTxBlk->SrcBufLen;
++
++ pHeader_802_11->Frag++; // increase Frag #
++
++ }while(SrcRemainingBytes > 0);
++
++ //
++ // Kick out Tx
++ //
++ HAL_KickOutTx(pAd, pTxBlk, pTxBlk->QueIdx);
++}
++
++
++#define RELEASE_FRAMES_OF_TXBLK(_pAd, _pTxBlk, _pQEntry, _Status) \
++ while(_pTxBlk->TxPacketList.Head) \
++ { \
++ _pQEntry = RemoveHeadQueue(&_pTxBlk->TxPacketList); \
++ RELEASE_NDIS_PACKET(_pAd, QUEUE_ENTRY_TO_PACKET(_pQEntry), _Status); \
++ }
++
++
++/*
++ ========================================================================
++
++ Routine Description:
++ Copy frame from waiting queue into relative ring buffer and set
++ appropriate ASIC register to kick hardware encryption before really
++ sent out to air.
++
++ Arguments:
++ pAd Pointer to our adapter
++ PNDIS_PACKET Pointer to outgoing Ndis frame
++ NumberOfFrag Number of fragment required
++
++ Return Value:
++ None
++
++ IRQL = DISPATCH_LEVEL
++
++ Note:
++
++ ========================================================================
++*/
++NDIS_STATUS STAHardTransmit(
++ IN PRTMP_ADAPTER pAd,
++ IN TX_BLK *pTxBlk,
++ IN UCHAR QueIdx)
++{
++ NDIS_PACKET *pPacket;
++ PQUEUE_ENTRY pQEntry;
++
++ // ---------------------------------------------
++ // STEP 0. DO SANITY CHECK AND SOME EARLY PREPARATION.
++ // ---------------------------------------------
++ //
++ ASSERT(pTxBlk->TxPacketList.Number);
++ if (pTxBlk->TxPacketList.Head == NULL)
++ {
++ DBGPRINT(RT_DEBUG_ERROR, ("pTxBlk->TotalFrameNum == %ld!\n", pTxBlk->TxPacketList.Number));
++ return NDIS_STATUS_FAILURE;
++ }
++
++ pPacket = QUEUE_ENTRY_TO_PACKET(pTxBlk->TxPacketList.Head);
++
++#if 0 //def CARRIER_DETECTION_SUPPORT // Roger sync Carrier
++ if ((pAd->CommonCfg.CarrierDetect.Enable == TRUE) && (isCarrierDetectExist(pAd) == TRUE))
++ {
++ DBGPRINT(RT_DEBUG_INFO,("STAHardTransmit --> radar detect not in normal mode !!!\n"));
++ RELEASE_NDIS_PACKET(pAd, pPacket, NDIS_STATUS_FAILURE);
++ return (NDIS_STATUS_FAILURE);
++ }
++#endif // CARRIER_DETECTION_SUPPORT //
++
++ // ------------------------------------------------------------------
++ // STEP 1. WAKE UP PHY
++ // outgoing frame always wakeup PHY to prevent frame lost and
++ // turn off PSM bit to improve performance
++ // ------------------------------------------------------------------
++ // not to change PSM bit, just send this frame out?
++ if ((pAd->StaCfg.Psm == PWR_SAVE) && OPSTATUS_TEST_FLAG(pAd, fOP_STATUS_DOZE))
++ {
++ DBGPRINT_RAW(RT_DEBUG_TRACE, ("AsicForceWakeup At HardTx\n"));
++ AsicForceWakeup(pAd, TRUE);
++ }
++
++ // It should not change PSM bit, when APSD turn on.
++ if ((!(pAd->CommonCfg.bAPSDCapable && pAd->CommonCfg.APEdcaParm.bAPSDCapable) && (pAd->CommonCfg.bAPSDForcePowerSave == FALSE))
++ || (RTMP_GET_PACKET_EAPOL(pTxBlk->pPacket))
++ || (RTMP_GET_PACKET_WAI(pTxBlk->pPacket)))
++ {
++ if ((pAd->StaCfg.Psm == PWR_SAVE) &&
++ (pAd->StaCfg.WindowsPowerMode == Ndis802_11PowerModeFast_PSP))
++ MlmeSetPsmBit(pAd, PWR_ACTIVE);
++ }
++
++ switch (pTxBlk->TxFrameType)
++ {
++#ifdef DOT11_N_SUPPORT
++ case TX_AMPDU_FRAME:
++ STA_AMPDU_Frame_Tx(pAd, pTxBlk);
++ break;
++ case TX_AMSDU_FRAME:
++ STA_AMSDU_Frame_Tx(pAd, pTxBlk);
++ break;
++#endif // DOT11_N_SUPPORT //
++ case TX_LEGACY_FRAME:
++ STA_Legacy_Frame_Tx(pAd, pTxBlk);
++ break;
++ case TX_MCAST_FRAME:
++ STA_Legacy_Frame_Tx(pAd, pTxBlk);
++ break;
++ case TX_RALINK_FRAME:
++ STA_ARalink_Frame_Tx(pAd, pTxBlk);
++ break;
++ case TX_FRAG_FRAME:
++ STA_Fragment_Frame_Tx(pAd, pTxBlk);
++ break;
++ default:
++ {
++ // It should not happened!
++ DBGPRINT(RT_DEBUG_ERROR, ("Send a pacekt was not classified!! It should not happen!\n"));
++ while(pTxBlk->TxPacketList.Number)
++ {
++ pQEntry = RemoveHeadQueue(&pTxBlk->TxPacketList);
++ pPacket = QUEUE_ENTRY_TO_PACKET(pQEntry);
++ if (pPacket)
++ RELEASE_NDIS_PACKET(pAd, pPacket, NDIS_STATUS_FAILURE);
++ }
++ }
++ break;
++ }
++
++ return (NDIS_STATUS_SUCCESS);
++
++}
++
++ULONG HashBytesPolynomial(UCHAR *value, unsigned int len)
++{
++ unsigned char *word = value;
++ unsigned int ret = 0;
++ unsigned int i;
++
++ for(i=0; i < len; i++)
++ {
++ int mod = i % 32;
++ ret ^=(unsigned int) (word[i]) << mod;
++ ret ^=(unsigned int) (word[i]) >> (32 - mod);
++ }
++ return ret;
++}
++
++VOID Sta_Announce_or_Forward_802_3_Packet(
++ IN PRTMP_ADAPTER pAd,
++ IN PNDIS_PACKET pPacket,
++ IN UCHAR FromWhichBSSID)
++{
++ if (TRUE
++ )
++ {
++ announce_802_3_packet(pAd, pPacket);
++ }
++ else
++ {
++ // release packet
++ RELEASE_NDIS_PACKET(pAd, pPacket, NDIS_STATUS_FAILURE);
++ }
++}
++
+--- /dev/null
++++ b/drivers/staging/rt2870/sta/sanity.c
+@@ -0,0 +1,420 @@
++/*
++ *************************************************************************
++ * Ralink Tech Inc.
++ * 5F., No.36, Taiyuan St., Jhubei City,
++ * Hsinchu County 302,
++ * Taiwan, R.O.C.
++ *
++ * (c) Copyright 2002-2007, Ralink Technology, Inc.
++ *
++ * This program is free software; you can redistribute it and/or modify *
++ * it under the terms of the GNU General Public License as published by *
++ * the Free Software Foundation; either version 2 of the License, or *
++ * (at your option) any later version. *
++ * *
++ * This program is distributed in the hope that it will be useful, *
++ * but WITHOUT ANY WARRANTY; without even the implied warranty of *
++ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the *
++ * GNU General Public License for more details. *
++ * *
++ * You should have received a copy of the GNU General Public License *
++ * along with this program; if not, write to the *
++ * Free Software Foundation, Inc., *
++ * 59 Temple Place - Suite 330, Boston, MA 02111-1307, USA. *
++ * *
++ *************************************************************************
++
++ Module Name:
++ sanity.c
++
++ Abstract:
++
++ Revision History:
++ Who When What
++ -------- ---------- ----------------------------------------------
++ John Chang 2004-09-01 add WMM support
++*/
++#include "../rt_config.h"
++
++extern UCHAR CISCO_OUI[];
++
++extern UCHAR WPA_OUI[];
++extern UCHAR RSN_OUI[];
++extern UCHAR WME_INFO_ELEM[];
++extern UCHAR WME_PARM_ELEM[];
++extern UCHAR Ccx2QosInfo[];
++extern UCHAR RALINK_OUI[];
++extern UCHAR BROADCOM_OUI[];
++
++/*
++ ==========================================================================
++ Description:
++ MLME message sanity check
++ Return:
++ TRUE if all parameters are OK, FALSE otherwise
++ ==========================================================================
++ */
++BOOLEAN MlmeStartReqSanity(
++ IN PRTMP_ADAPTER pAd,
++ IN VOID *Msg,
++ IN ULONG MsgLen,
++ OUT CHAR Ssid[],
++ OUT UCHAR *pSsidLen)
++{
++ MLME_START_REQ_STRUCT *Info;
++
++ Info = (MLME_START_REQ_STRUCT *)(Msg);
++
++ if (Info->SsidLen > MAX_LEN_OF_SSID)
++ {
++ DBGPRINT(RT_DEBUG_TRACE, ("MlmeStartReqSanity fail - wrong SSID length\n"));
++ return FALSE;
++ }
++
++ *pSsidLen = Info->SsidLen;
++ NdisMoveMemory(Ssid, Info->Ssid, *pSsidLen);
++
++ return TRUE;
++}
++
++/*
++ ==========================================================================
++ Description:
++ MLME message sanity check
++ Return:
++ TRUE if all parameters are OK, FALSE otherwise
++
++ IRQL = DISPATCH_LEVEL
++
++ ==========================================================================
++ */
++BOOLEAN PeerAssocRspSanity(
++ IN PRTMP_ADAPTER pAd,
++ IN VOID *pMsg,
++ IN ULONG MsgLen,
++ OUT PUCHAR pAddr2,
++ OUT USHORT *pCapabilityInfo,
++ OUT USHORT *pStatus,
++ OUT USHORT *pAid,
++ OUT UCHAR SupRate[],
++ OUT UCHAR *pSupRateLen,
++ OUT UCHAR ExtRate[],
++ OUT UCHAR *pExtRateLen,
++ OUT HT_CAPABILITY_IE *pHtCapability,
++ OUT ADD_HT_INFO_IE *pAddHtInfo, // AP might use this additional ht info IE
++ OUT UCHAR *pHtCapabilityLen,
++ OUT UCHAR *pAddHtInfoLen,
++ OUT UCHAR *pNewExtChannelOffset,
++ OUT PEDCA_PARM pEdcaParm,
++ OUT UCHAR *pCkipFlag)
++{
++ CHAR IeType, *Ptr;
++ PFRAME_802_11 pFrame = (PFRAME_802_11)pMsg;
++ PEID_STRUCT pEid;
++ ULONG Length = 0;
++
++ *pNewExtChannelOffset = 0xff;
++ *pHtCapabilityLen = 0;
++ *pAddHtInfoLen = 0;
++ COPY_MAC_ADDR(pAddr2, pFrame->Hdr.Addr2);
++ Ptr = pFrame->Octet;
++ Length += LENGTH_802_11;
++
++ NdisMoveMemory(pCapabilityInfo, &pFrame->Octet[0], 2);
++ Length += 2;
++ NdisMoveMemory(pStatus, &pFrame->Octet[2], 2);
++ Length += 2;
++ *pCkipFlag = 0;
++ *pExtRateLen = 0;
++ pEdcaParm->bValid = FALSE;
++
++ if (*pStatus != MLME_SUCCESS)
++ return TRUE;
++
++ NdisMoveMemory(pAid, &pFrame->Octet[4], 2);
++ Length += 2;
++
++ // Aid already swaped byte order in RTMPFrameEndianChange() for big endian platform
++ *pAid = (*pAid) & 0x3fff; // AID is low 14-bit
++
++ // -- get supported rates from payload and advance the pointer
++ IeType = pFrame->Octet[6];
++ *pSupRateLen = pFrame->Octet[7];
++ if ((IeType != IE_SUPP_RATES) || (*pSupRateLen > MAX_LEN_OF_SUPPORTED_RATES))
++ {
++ DBGPRINT(RT_DEBUG_TRACE, ("PeerAssocRspSanity fail - wrong SupportedRates IE\n"));
++ return FALSE;
++ }
++ else
++ NdisMoveMemory(SupRate, &pFrame->Octet[8], *pSupRateLen);
++
++ Length = Length + 2 + *pSupRateLen;
++
++ // many AP implement proprietary IEs in non-standard order, we'd better
++ // tolerate mis-ordered IEs to get best compatibility
++ pEid = (PEID_STRUCT) &pFrame->Octet[8 + (*pSupRateLen)];
++
++ // get variable fields from payload and advance the pointer
++ while ((Length + 2 + pEid->Len) <= MsgLen)
++ {
++ switch (pEid->Eid)
++ {
++ case IE_EXT_SUPP_RATES:
++ if (pEid->Len <= MAX_LEN_OF_SUPPORTED_RATES)
++ {
++ NdisMoveMemory(ExtRate, pEid->Octet, pEid->Len);
++ *pExtRateLen = pEid->Len;
++ }
++ break;
++
++ case IE_HT_CAP:
++ case IE_HT_CAP2:
++ if (pEid->Len >= SIZE_HT_CAP_IE) //Note: allow extension.!!
++ {
++ NdisMoveMemory(pHtCapability, pEid->Octet, SIZE_HT_CAP_IE);
++
++ *(USHORT *)(&pHtCapability->HtCapInfo) = cpu2le16(*(USHORT *)(&pHtCapability->HtCapInfo));
++ *(USHORT *)(&pHtCapability->ExtHtCapInfo) = cpu2le16(*(USHORT *)(&pHtCapability->ExtHtCapInfo));
++
++ *pHtCapabilityLen = SIZE_HT_CAP_IE;
++ }
++ else
++ {
++ DBGPRINT(RT_DEBUG_WARN, ("PeerAssocRspSanity - wrong IE_HT_CAP. \n"));
++ }
++
++ break;
++#ifdef DOT11_N_SUPPORT
++ case IE_ADD_HT:
++ case IE_ADD_HT2:
++ if (pEid->Len >= sizeof(ADD_HT_INFO_IE))
++ {
++ // This IE allows extension, but we can ignore extra bytes beyond our knowledge , so only
++ // copy first sizeof(ADD_HT_INFO_IE)
++ NdisMoveMemory(pAddHtInfo, pEid->Octet, sizeof(ADD_HT_INFO_IE));
++
++ *(USHORT *)(&pAddHtInfo->AddHtInfo2) = cpu2le16(*(USHORT *)(&pAddHtInfo->AddHtInfo2));
++ *(USHORT *)(&pAddHtInfo->AddHtInfo3) = cpu2le16(*(USHORT *)(&pAddHtInfo->AddHtInfo3));
++
++ *pAddHtInfoLen = SIZE_ADD_HT_INFO_IE;
++ }
++ else
++ {
++ DBGPRINT(RT_DEBUG_WARN, ("PeerAssocRspSanity - wrong IE_ADD_HT. \n"));
++ }
++
++ break;
++ case IE_SECONDARY_CH_OFFSET:
++ if (pEid->Len == 1)
++ {
++ *pNewExtChannelOffset = pEid->Octet[0];
++ }
++ else
++ {
++ DBGPRINT(RT_DEBUG_WARN, ("PeerAssocRspSanity - wrong IE_SECONDARY_CH_OFFSET. \n"));
++ }
++#endif // DOT11_N_SUPPORT //
++ break;
++ case IE_AIRONET_CKIP:
++ // 0. Check Aironet IE length, it must be larger or equal to 28
++ // Cisco's AP VxWork version(will not be supported) used this IE length as 28
++ // Cisco's AP IOS version used this IE length as 30
++ if (pEid->Len < (CKIP_NEGOTIATION_LENGTH - 2))
++ break;
++
++ // 1. Copy CKIP flag byte to buffer for process
++ *pCkipFlag = *(pEid->Octet + 8);
++ break;
++
++ case IE_AIRONET_IPADDRESS:
++ if (pEid->Len != 0x0A)
++ break;
++
++ // Get Cisco Aironet IP information
++ if (NdisEqualMemory(pEid->Octet, CISCO_OUI, 3) == 1)
++ NdisMoveMemory(pAd->StaCfg.AironetIPAddress, pEid->Octet + 4, 4);
++ break;
++
++ // CCX2, WMM use the same IE value
++ // case IE_CCX_V2:
++ case IE_VENDOR_SPECIFIC:
++ // handle WME PARAMTER ELEMENT
++ if (NdisEqualMemory(pEid->Octet, WME_PARM_ELEM, 6) && (pEid->Len == 24))
++ {
++ PUCHAR ptr;
++ int i;
++
++ // parsing EDCA parameters
++ pEdcaParm->bValid = TRUE;
++ pEdcaParm->bQAck = FALSE; // pEid->Octet[0] & 0x10;
++ pEdcaParm->bQueueRequest = FALSE; // pEid->Octet[0] & 0x20;
++ pEdcaParm->bTxopRequest = FALSE; // pEid->Octet[0] & 0x40;
++ //pEdcaParm->bMoreDataAck = FALSE; // pEid->Octet[0] & 0x80;
++ pEdcaParm->EdcaUpdateCount = pEid->Octet[6] & 0x0f;
++ pEdcaParm->bAPSDCapable = (pEid->Octet[6] & 0x80) ? 1 : 0;
++ ptr = &pEid->Octet[8];
++ for (i=0; i<4; i++)
++ {
++ UCHAR aci = (*ptr & 0x60) >> 5; // b5~6 is AC INDEX
++ pEdcaParm->bACM[aci] = (((*ptr) & 0x10) == 0x10); // b5 is ACM
++ pEdcaParm->Aifsn[aci] = (*ptr) & 0x0f; // b0~3 is AIFSN
++ pEdcaParm->Cwmin[aci] = *(ptr+1) & 0x0f; // b0~4 is Cwmin
++ pEdcaParm->Cwmax[aci] = *(ptr+1) >> 4; // b5~8 is Cwmax
++ pEdcaParm->Txop[aci] = *(ptr+2) + 256 * (*(ptr+3)); // in unit of 32-us
++ ptr += 4; // point to next AC
++ }
++ }
++
++ // handle CCX IE
++ else
++ {
++ // 0. Check the size and CCX admin control
++ if (pAd->StaCfg.CCXControl.field.Enable == 0)
++ break;
++ if (pEid->Len != 5)
++ break;
++
++ // Turn CCX2 if matched
++ if (NdisEqualMemory(pEid->Octet, Ccx2IeInfo, 5) == 1)
++ pAd->StaCfg.CCXEnable = TRUE;
++ break;
++ }
++ break;
++
++ default:
++ DBGPRINT(RT_DEBUG_TRACE, ("PeerAssocRspSanity - ignore unrecognized EID = %d\n", pEid->Eid));
++ break;
++ }
++
++ Length = Length + 2 + pEid->Len;
++ pEid = (PEID_STRUCT)((UCHAR*)pEid + 2 + pEid->Len);
++ }
++
++ // Force CCX2 enable to TRUE for those AP didn't replay CCX v2 IE, we still force it to be on
++ if (pAd->StaCfg.CCXControl.field.Enable == 1)
++ pAd->StaCfg.CCXEnable = TRUE;
++
++ return TRUE;
++}
++
++/*
++ ==========================================================================
++ Description:
++ MLME message sanity check
++ Return:
++ TRUE if all parameters are OK, FALSE otherwise
++
++ IRQL = DISPATCH_LEVEL
++
++ ==========================================================================
++ */
++BOOLEAN PeerProbeReqSanity(
++ IN PRTMP_ADAPTER pAd,
++ IN VOID *Msg,
++ IN ULONG MsgLen,
++ OUT PUCHAR pAddr2,
++ OUT CHAR Ssid[],
++ OUT UCHAR *pSsidLen)
++{
++ UCHAR Idx;
++ UCHAR RateLen;
++ CHAR IeType;
++ PFRAME_802_11 pFrame = (PFRAME_802_11)Msg;
++
++ COPY_MAC_ADDR(pAddr2, pFrame->Hdr.Addr2);
++
++ if ((pFrame->Octet[0] != IE_SSID) || (pFrame->Octet[1] > MAX_LEN_OF_SSID))
++ {
++ DBGPRINT(RT_DEBUG_TRACE, ("PeerProbeReqSanity fail - wrong SSID IE(Type=%d,Len=%d)\n",pFrame->Octet[0],pFrame->Octet[1]));
++ return FALSE;
++ }
++
++ *pSsidLen = pFrame->Octet[1];
++ NdisMoveMemory(Ssid, &pFrame->Octet[2], *pSsidLen);
++
++ Idx = *pSsidLen + 2;
++
++ // -- get supported rates from payload and advance the pointer
++ IeType = pFrame->Octet[Idx];
++ RateLen = pFrame->Octet[Idx + 1];
++ if (IeType != IE_SUPP_RATES)
++ {
++ DBGPRINT(RT_DEBUG_TRACE, ("PeerProbeReqSanity fail - wrong SupportRates IE(Type=%d,Len=%d)\n",pFrame->Octet[Idx],pFrame->Octet[Idx+1]));
++ return FALSE;
++ }
++ else
++ {
++ if ((pAd->CommonCfg.PhyMode == PHY_11G) && (RateLen < 8))
++ return (FALSE);
++ }
++
++ return TRUE;
++}
++
++/*
++ ==========================================================================
++ Description:
++
++ IRQL = DISPATCH_LEVEL
++
++ ==========================================================================
++ */
++BOOLEAN GetTimBit(
++ IN CHAR *Ptr,
++ IN USHORT Aid,
++ OUT UCHAR *TimLen,
++ OUT UCHAR *BcastFlag,
++ OUT UCHAR *DtimCount,
++ OUT UCHAR *DtimPeriod,
++ OUT UCHAR *MessageToMe)
++{
++ UCHAR BitCntl, N1, N2, MyByte, MyBit;
++ CHAR *IdxPtr;
++
++ IdxPtr = Ptr;
++
++ IdxPtr ++;
++ *TimLen = *IdxPtr;
++
++ // get DTIM Count from TIM element
++ IdxPtr ++;
++ *DtimCount = *IdxPtr;
++
++ // get DTIM Period from TIM element
++ IdxPtr++;
++ *DtimPeriod = *IdxPtr;
++
++ // get Bitmap Control from TIM element
++ IdxPtr++;
++ BitCntl = *IdxPtr;
++
++ if ((*DtimCount == 0) && (BitCntl & 0x01))
++ *BcastFlag = TRUE;
++ else
++ *BcastFlag = FALSE;
++
++ // Parse Partial Virtual Bitmap from TIM element
++ N1 = BitCntl & 0xfe; // N1 is the first bitmap byte#
++ N2 = *TimLen - 4 + N1; // N2 is the last bitmap byte#
++
++ if ((Aid < (N1 << 3)) || (Aid >= ((N2 + 1) << 3)))
++ *MessageToMe = FALSE;
++ else
++ {
++ MyByte = (Aid >> 3) - N1; // my byte position in the bitmap byte-stream
++ MyBit = Aid % 16 - ((MyByte & 0x01)? 8:0);
++
++ IdxPtr += (MyByte + 1);
++
++ //if (*IdxPtr)
++ // DBGPRINT(RT_DEBUG_WARN, ("TIM bitmap = 0x%02x\n", *IdxPtr));
++
++ if (*IdxPtr & (0x01 << MyBit))
++ *MessageToMe = TRUE;
++ else
++ *MessageToMe = FALSE;
++ }
++
++ return TRUE;
++}
++
+--- /dev/null
++++ b/drivers/staging/rt2870/sta/sync.c
+@@ -0,0 +1,1753 @@
++/*
++ *************************************************************************
++ * Ralink Tech Inc.
++ * 5F., No.36, Taiyuan St., Jhubei City,
++ * Hsinchu County 302,
++ * Taiwan, R.O.C.
++ *
++ * (c) Copyright 2002-2007, Ralink Technology, Inc.
++ *
++ * This program is free software; you can redistribute it and/or modify *
++ * it under the terms of the GNU General Public License as published by *
++ * the Free Software Foundation; either version 2 of the License, or *
++ * (at your option) any later version. *
++ * *
++ * This program is distributed in the hope that it will be useful, *
++ * but WITHOUT ANY WARRANTY; without even the implied warranty of *
++ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the *
++ * GNU General Public License for more details. *
++ * *
++ * You should have received a copy of the GNU General Public License *
++ * along with this program; if not, write to the *
++ * Free Software Foundation, Inc., *
++ * 59 Temple Place - Suite 330, Boston, MA 02111-1307, USA. *
++ * *
++ *************************************************************************
++
++ Module Name:
++ sync.c
++
++ Abstract:
++
++ Revision History:
++ Who When What
++ -------- ---------- ----------------------------------------------
++ John Chang 2004-09-01 modified for rt2561/2661
++ Jan Lee 2006-08-01 modified for rt2860 for 802.11n
++*/
++#include "../rt_config.h"
++
++#define ADHOC_ENTRY_BEACON_LOST_TIME (2*OS_HZ) // 2 sec
++
++/*
++ ==========================================================================
++ Description:
++ The sync state machine,
++ Parameters:
++ Sm - pointer to the state machine
++ Note:
++ the state machine looks like the following
++
++ ==========================================================================
++ */
++VOID SyncStateMachineInit(
++ IN PRTMP_ADAPTER pAd,
++ IN STATE_MACHINE *Sm,
++ OUT STATE_MACHINE_FUNC Trans[])
++{
++ StateMachineInit(Sm, Trans, MAX_SYNC_STATE, MAX_SYNC_MSG, (STATE_MACHINE_FUNC)Drop, SYNC_IDLE, SYNC_MACHINE_BASE);
++
++ // column 1
++ StateMachineSetAction(Sm, SYNC_IDLE, MT2_MLME_SCAN_REQ, (STATE_MACHINE_FUNC)MlmeScanReqAction);
++ StateMachineSetAction(Sm, SYNC_IDLE, MT2_MLME_JOIN_REQ, (STATE_MACHINE_FUNC)MlmeJoinReqAction);
++ StateMachineSetAction(Sm, SYNC_IDLE, MT2_MLME_START_REQ, (STATE_MACHINE_FUNC)MlmeStartReqAction);
++ StateMachineSetAction(Sm, SYNC_IDLE, MT2_PEER_BEACON, (STATE_MACHINE_FUNC)PeerBeacon);
++ StateMachineSetAction(Sm, SYNC_IDLE, MT2_PEER_PROBE_REQ, (STATE_MACHINE_FUNC)PeerProbeReqAction);
++
++ //column 2
++ StateMachineSetAction(Sm, JOIN_WAIT_BEACON, MT2_MLME_SCAN_REQ, (STATE_MACHINE_FUNC)InvalidStateWhenScan);
++ StateMachineSetAction(Sm, JOIN_WAIT_BEACON, MT2_MLME_JOIN_REQ, (STATE_MACHINE_FUNC)InvalidStateWhenJoin);
++ StateMachineSetAction(Sm, JOIN_WAIT_BEACON, MT2_MLME_START_REQ, (STATE_MACHINE_FUNC)InvalidStateWhenStart);
++ StateMachineSetAction(Sm, JOIN_WAIT_BEACON, MT2_PEER_BEACON, (STATE_MACHINE_FUNC)PeerBeaconAtJoinAction);
++ StateMachineSetAction(Sm, JOIN_WAIT_BEACON, MT2_BEACON_TIMEOUT, (STATE_MACHINE_FUNC)BeaconTimeoutAtJoinAction);
++
++ // column 3
++ StateMachineSetAction(Sm, SCAN_LISTEN, MT2_MLME_SCAN_REQ, (STATE_MACHINE_FUNC)InvalidStateWhenScan);
++ StateMachineSetAction(Sm, SCAN_LISTEN, MT2_MLME_JOIN_REQ, (STATE_MACHINE_FUNC)InvalidStateWhenJoin);
++ StateMachineSetAction(Sm, SCAN_LISTEN, MT2_MLME_START_REQ, (STATE_MACHINE_FUNC)InvalidStateWhenStart);
++ StateMachineSetAction(Sm, SCAN_LISTEN, MT2_PEER_BEACON, (STATE_MACHINE_FUNC)PeerBeaconAtScanAction);
++ StateMachineSetAction(Sm, SCAN_LISTEN, MT2_PEER_PROBE_RSP, (STATE_MACHINE_FUNC)PeerBeaconAtScanAction);
++ StateMachineSetAction(Sm, SCAN_LISTEN, MT2_SCAN_TIMEOUT, (STATE_MACHINE_FUNC)ScanTimeoutAction);
++
++ // timer init
++ RTMPInitTimer(pAd, &pAd->MlmeAux.BeaconTimer, GET_TIMER_FUNCTION(BeaconTimeout), pAd, FALSE);
++ RTMPInitTimer(pAd, &pAd->MlmeAux.ScanTimer, GET_TIMER_FUNCTION(ScanTimeout), pAd, FALSE);
++}
++
++/*
++ ==========================================================================
++ Description:
++ Beacon timeout handler, executed in timer thread
++
++ IRQL = DISPATCH_LEVEL
++
++ ==========================================================================
++ */
++VOID BeaconTimeout(
++ IN PVOID SystemSpecific1,
++ IN PVOID FunctionContext,
++ IN PVOID SystemSpecific2,
++ IN PVOID SystemSpecific3)
++{
++ RTMP_ADAPTER *pAd = (RTMP_ADAPTER *)FunctionContext;
++
++ DBGPRINT(RT_DEBUG_TRACE,("SYNC - BeaconTimeout\n"));
++
++ // Do nothing if the driver is starting halt state.
++ // This might happen when timer already been fired before cancel timer with mlmehalt
++ if (RTMP_TEST_FLAG(pAd, fRTMP_ADAPTER_HALT_IN_PROGRESS))
++ return;
++
++#ifdef DOT11_N_SUPPORT
++ if ((pAd->CommonCfg.BBPCurrentBW == BW_40)
++ )
++ {
++ UCHAR BBPValue = 0;
++ AsicSwitchChannel(pAd, pAd->CommonCfg.CentralChannel, FALSE);
++ AsicLockChannel(pAd, pAd->CommonCfg.CentralChannel);
++ RTMP_BBP_IO_READ8_BY_REG_ID(pAd, BBP_R4, &BBPValue);
++ BBPValue &= (~0x18);
++ BBPValue |= 0x10;
++ RTMP_BBP_IO_WRITE8_BY_REG_ID(pAd, BBP_R4, BBPValue);
++ DBGPRINT(RT_DEBUG_TRACE, ("SYNC - End of SCAN, restore to 40MHz channel %d, Total BSS[%02d]\n",pAd->CommonCfg.CentralChannel, pAd->ScanTab.BssNr));
++ }
++#endif // DOT11_N_SUPPORT //
++
++ MlmeEnqueue(pAd, SYNC_STATE_MACHINE, MT2_BEACON_TIMEOUT, 0, NULL);
++ RT28XX_MLME_HANDLER(pAd);
++}
++
++/*
++ ==========================================================================
++ Description:
++ Scan timeout handler, executed in timer thread
++
++ IRQL = DISPATCH_LEVEL
++
++ ==========================================================================
++ */
++VOID ScanTimeout(
++ IN PVOID SystemSpecific1,
++ IN PVOID FunctionContext,
++ IN PVOID SystemSpecific2,
++ IN PVOID SystemSpecific3)
++{
++ RTMP_ADAPTER *pAd = (RTMP_ADAPTER *)FunctionContext;
++
++
++ // Do nothing if the driver is starting halt state.
++ // This might happen when timer already been fired before cancel timer with mlmehalt
++ if (RTMP_TEST_FLAG(pAd, fRTMP_ADAPTER_HALT_IN_PROGRESS))
++ return;
++
++ if (MlmeEnqueue(pAd, SYNC_STATE_MACHINE, MT2_SCAN_TIMEOUT, 0, NULL))
++ {
++ RT28XX_MLME_HANDLER(pAd);
++ }
++ else
++ {
++ // To prevent SyncMachine.CurrState is SCAN_LISTEN forever.
++ pAd->MlmeAux.Channel = 0;
++ ScanNextChannel(pAd);
++ if (pAd->CommonCfg.bWirelessEvent)
++ {
++ RTMPSendWirelessEvent(pAd, IW_SCAN_ENQUEUE_FAIL_EVENT_FLAG, pAd->MacTab.Content[BSSID_WCID].Addr, BSS0, 0);
++ }
++ }
++}
++
++/*
++ ==========================================================================
++ Description:
++ MLME SCAN req state machine procedure
++ ==========================================================================
++ */
++VOID MlmeScanReqAction(
++ IN PRTMP_ADAPTER pAd,
++ IN MLME_QUEUE_ELEM *Elem)
++{
++ UCHAR Ssid[MAX_LEN_OF_SSID], SsidLen, ScanType, BssType, BBPValue = 0;
++ BOOLEAN TimerCancelled;
++ ULONG Now;
++ USHORT Status;
++ PHEADER_802_11 pHdr80211;
++ PUCHAR pOutBuffer = NULL;
++ NDIS_STATUS NStatus;
++
++ // Check the total scan tries for one single OID command
++ // If this is the CCX 2.0 Case, skip that!
++ if ( !RTMP_TEST_FLAG(pAd, fRTMP_ADAPTER_START_UP))
++ {
++ DBGPRINT(RT_DEBUG_TRACE, ("SYNC - MlmeScanReqAction before Startup\n"));
++ return;
++ }
++
++ // Increase the scan retry counters.
++ pAd->StaCfg.ScanCnt++;
++
++
++ // first check the parameter sanity
++ if (MlmeScanReqSanity(pAd,
++ Elem->Msg,
++ Elem->MsgLen,
++ &BssType,
++ Ssid,
++ &SsidLen,
++ &ScanType))
++ {
++
++ // Check for channel load and noise hist request
++ // Suspend MSDU only at scan request, not the last two mentioned
++ if ((ScanType == SCAN_CISCO_NOISE) || (ScanType == SCAN_CISCO_CHANNEL_LOAD))
++ {
++ if (pAd->StaCfg.CCXScanChannel != pAd->CommonCfg.Channel)
++ RTMPSuspendMsduTransmission(pAd); // Suspend MSDU transmission here
++ }
++ else
++ {
++ // Suspend MSDU transmission here
++ RTMPSuspendMsduTransmission(pAd);
++ }
++
++ //
++ // To prevent data lost.
++ // Send an NULL data with turned PSM bit on to current associated AP before SCAN progress.
++ // And should send an NULL data with turned PSM bit off to AP, when scan progress done
++ //
++ if (OPSTATUS_TEST_FLAG(pAd, fOP_STATUS_MEDIA_STATE_CONNECTED) && (INFRA_ON(pAd)))
++ {
++ NStatus = MlmeAllocateMemory(pAd, (PVOID)&pOutBuffer);
++ if (NStatus == NDIS_STATUS_SUCCESS)
++ {
++ pHdr80211 = (PHEADER_802_11) pOutBuffer;
++ MgtMacHeaderInit(pAd, pHdr80211, SUBTYPE_NULL_FUNC, 1, pAd->CommonCfg.Bssid, pAd->CommonCfg.Bssid);
++ pHdr80211->Duration = 0;
++ pHdr80211->FC.Type = BTYPE_DATA;
++ pHdr80211->FC.PwrMgmt = PWR_SAVE;
++
++ // Send using priority queue
++ MiniportMMRequest(pAd, 0, pOutBuffer, sizeof(HEADER_802_11));
++ DBGPRINT(RT_DEBUG_TRACE, ("MlmeScanReqAction -- Send PSM Data frame for off channel RM\n"));
++ MlmeFreeMemory(pAd, pOutBuffer);
++ RTMPusecDelay(5000);
++ }
++ }
++
++ NdisGetSystemUpTime(&Now);
++ pAd->StaCfg.LastScanTime = Now;
++ // reset all the timers
++ RTMPCancelTimer(&pAd->MlmeAux.BeaconTimer, &TimerCancelled);
++ RTMPCancelTimer(&pAd->MlmeAux.ScanTimer, &TimerCancelled);
++
++ // record desired BSS parameters
++ pAd->MlmeAux.BssType = BssType;
++ pAd->MlmeAux.ScanType = ScanType;
++ pAd->MlmeAux.SsidLen = SsidLen;
++ NdisZeroMemory(pAd->MlmeAux.Ssid, MAX_LEN_OF_SSID);
++ NdisMoveMemory(pAd->MlmeAux.Ssid, Ssid, SsidLen);
++
++ // start from the first channel
++ pAd->MlmeAux.Channel = FirstChannel(pAd);
++
++ // Change the scan channel when dealing with CCX beacon report
++ if ((ScanType == SCAN_CISCO_PASSIVE) || (ScanType == SCAN_CISCO_ACTIVE) ||
++ (ScanType == SCAN_CISCO_CHANNEL_LOAD) || (ScanType == SCAN_CISCO_NOISE))
++ pAd->MlmeAux.Channel = pAd->StaCfg.CCXScanChannel;
++
++ // Let BBP register at 20MHz to do scan
++ RTMP_BBP_IO_READ8_BY_REG_ID(pAd, BBP_R4, &BBPValue);
++ BBPValue &= (~0x18);
++ RTMP_BBP_IO_WRITE8_BY_REG_ID(pAd, BBP_R4, BBPValue);
++ DBGPRINT(RT_DEBUG_TRACE, ("SYNC - BBP R4 to 20MHz.l\n"));
++ ScanNextChannel(pAd);
++ }
++ else
++ {
++ DBGPRINT_ERR(("SYNC - MlmeScanReqAction() sanity check fail\n"));
++ pAd->Mlme.SyncMachine.CurrState = SYNC_IDLE;
++ Status = MLME_INVALID_FORMAT;
++ MlmeEnqueue(pAd, MLME_CNTL_STATE_MACHINE, MT2_SCAN_CONF, 2, &Status);
++ }
++}
++
++/*
++ ==========================================================================
++ Description:
++ MLME JOIN req state machine procedure
++ ==========================================================================
++ */
++VOID MlmeJoinReqAction(
++ IN PRTMP_ADAPTER pAd,
++ IN MLME_QUEUE_ELEM *Elem)
++{
++ UCHAR BBPValue = 0;
++ BSS_ENTRY *pBss;
++ BOOLEAN TimerCancelled;
++ HEADER_802_11 Hdr80211;
++ NDIS_STATUS NStatus;
++ ULONG FrameLen = 0;
++ PUCHAR pOutBuffer = NULL;
++ PUCHAR pSupRate = NULL;
++ UCHAR SupRateLen;
++ PUCHAR pExtRate = NULL;
++ UCHAR ExtRateLen;
++ UCHAR ASupRate[] = {0x8C, 0x12, 0x98, 0x24, 0xb0, 0x48, 0x60, 0x6C};
++ UCHAR ASupRateLen = sizeof(ASupRate)/sizeof(UCHAR);
++ MLME_JOIN_REQ_STRUCT *pInfo = (MLME_JOIN_REQ_STRUCT *)(Elem->Msg);
++
++ DBGPRINT(RT_DEBUG_TRACE, ("SYNC - MlmeJoinReqAction(BSS #%ld)\n", pInfo->BssIdx));
++
++
++ // reset all the timers
++ RTMPCancelTimer(&pAd->MlmeAux.ScanTimer, &TimerCancelled);
++ RTMPCancelTimer(&pAd->MlmeAux.BeaconTimer, &TimerCancelled);
++
++ pBss = &pAd->MlmeAux.SsidBssTab.BssEntry[pInfo->BssIdx];
++
++ // record the desired SSID & BSSID we're waiting for
++ COPY_MAC_ADDR(pAd->MlmeAux.Bssid, pBss->Bssid);
++
++ // If AP's SSID is not hidden, it is OK for updating ssid to MlmeAux again.
++ if (pBss->Hidden == 0)
++ {
++ NdisMoveMemory(pAd->MlmeAux.Ssid, pBss->Ssid, pBss->SsidLen);
++ pAd->MlmeAux.SsidLen = pBss->SsidLen;
++ }
++
++ pAd->MlmeAux.BssType = pBss->BssType;
++ pAd->MlmeAux.Channel = pBss->Channel;
++ pAd->MlmeAux.CentralChannel = pBss->CentralChannel;
++
++#ifdef EXT_BUILD_CHANNEL_LIST
++ // Country IE of the AP will be evaluated and will be used.
++ if ((pAd->StaCfg.IEEE80211dClientMode != Rt802_11_D_None) &&
++ (pBss->bHasCountryIE == TRUE))
++ {
++ NdisMoveMemory(&pAd->CommonCfg.CountryCode[0], &pBss->CountryString[0], 2);
++ if (pBss->CountryString[2] == 'I')
++ pAd->CommonCfg.Geography = IDOR;
++ else if (pBss->CountryString[2] == 'O')
++ pAd->CommonCfg.Geography = ODOR;
++ else
++ pAd->CommonCfg.Geography = BOTH;
++ BuildChannelListEx(pAd);
++ }
++#endif // EXT_BUILD_CHANNEL_LIST //
++
++ // Let BBP register at 20MHz to do scan
++ RTMP_BBP_IO_READ8_BY_REG_ID(pAd, BBP_R4, &BBPValue);
++ BBPValue &= (~0x18);
++ RTMP_BBP_IO_WRITE8_BY_REG_ID(pAd, BBP_R4, BBPValue);
++ DBGPRINT(RT_DEBUG_TRACE, ("SYNC - BBP R4 to 20MHz.l\n"));
++
++ // switch channel and waiting for beacon timer
++ AsicSwitchChannel(pAd, pAd->MlmeAux.Channel, FALSE);
++ AsicLockChannel(pAd, pAd->MlmeAux.Channel);
++ RTMPSetTimer(&pAd->MlmeAux.BeaconTimer, JOIN_TIMEOUT);
++
++ do
++ {
++ if (((pAd->CommonCfg.bIEEE80211H == 1) &&
++ (pAd->MlmeAux.Channel > 14) &&
++ RadarChannelCheck(pAd, pAd->MlmeAux.Channel))
++#ifdef CARRIER_DETECTION_SUPPORT // Roger sync Carrier
++ || (pAd->CommonCfg.CarrierDetect.Enable == TRUE)
++#endif // CARRIER_DETECTION_SUPPORT //
++ )
++ {
++ //
++ // We can't send any Probe request frame to meet 802.11h.
++ //
++ if (pBss->Hidden == 0)
++ break;
++ }
++
++ //
++ // send probe request
++ //
++ NStatus = MlmeAllocateMemory(pAd, &pOutBuffer);
++ if (NStatus == NDIS_STATUS_SUCCESS)
++ {
++ if (pAd->MlmeAux.Channel <= 14)
++ {
++ pSupRate = pAd->CommonCfg.SupRate;
++ SupRateLen = pAd->CommonCfg.SupRateLen;
++ pExtRate = pAd->CommonCfg.ExtRate;
++ ExtRateLen = pAd->CommonCfg.ExtRateLen;
++ }
++ else
++ {
++ //
++ // Overwrite Support Rate, CCK rate are not allowed
++ //
++ pSupRate = ASupRate;
++ SupRateLen = ASupRateLen;
++ ExtRateLen = 0;
++ }
++
++ if (pAd->MlmeAux.BssType == BSS_INFRA)
++ MgtMacHeaderInit(pAd, &Hdr80211, SUBTYPE_PROBE_REQ, 0, pAd->MlmeAux.Bssid, pAd->MlmeAux.Bssid);
++ else
++ MgtMacHeaderInit(pAd, &Hdr80211, SUBTYPE_PROBE_REQ, 0, BROADCAST_ADDR, BROADCAST_ADDR);
++
++ MakeOutgoingFrame(pOutBuffer, &FrameLen,
++ sizeof(HEADER_802_11), &Hdr80211,
++ 1, &SsidIe,
++ 1, &pAd->MlmeAux.SsidLen,
++ pAd->MlmeAux.SsidLen, pAd->MlmeAux.Ssid,
++ 1, &SupRateIe,
++ 1, &SupRateLen,
++ SupRateLen, pSupRate,
++ END_OF_ARGS);
++
++ if (ExtRateLen)
++ {
++ ULONG Tmp;
++ MakeOutgoingFrame(pOutBuffer + FrameLen, &Tmp,
++ 1, &ExtRateIe,
++ 1, &ExtRateLen,
++ ExtRateLen, pExtRate,
++ END_OF_ARGS);
++ FrameLen += Tmp;
++ }
++
++
++ MiniportMMRequest(pAd, 0, pOutBuffer, FrameLen);
++ MlmeFreeMemory(pAd, pOutBuffer);
++ }
++ } while (FALSE);
++
++ DBGPRINT(RT_DEBUG_TRACE, ("SYNC - Switch to ch %d, Wait BEACON from %02x:%02x:%02x:%02x:%02x:%02x\n",
++ pBss->Channel, pBss->Bssid[0], pBss->Bssid[1], pBss->Bssid[2], pBss->Bssid[3], pBss->Bssid[4], pBss->Bssid[5]));
++
++ pAd->Mlme.SyncMachine.CurrState = JOIN_WAIT_BEACON;
++}
++
++/*
++ ==========================================================================
++ Description:
++ MLME START Request state machine procedure, starting an IBSS
++ ==========================================================================
++ */
++VOID MlmeStartReqAction(
++ IN PRTMP_ADAPTER pAd,
++ IN MLME_QUEUE_ELEM *Elem)
++{
++ UCHAR Ssid[MAX_LEN_OF_SSID], SsidLen;
++ BOOLEAN TimerCancelled;
++
++ // New for WPA security suites
++ UCHAR VarIE[MAX_VIE_LEN]; // Total VIE length = MAX_VIE_LEN - -5
++ NDIS_802_11_VARIABLE_IEs *pVIE = NULL;
++ LARGE_INTEGER TimeStamp;
++ BOOLEAN Privacy;
++ USHORT Status;
++
++ // Init Variable IE structure
++ pVIE = (PNDIS_802_11_VARIABLE_IEs) VarIE;
++ pVIE->Length = 0;
++ TimeStamp.u.LowPart = 0;
++ TimeStamp.u.HighPart = 0;
++
++ if (MlmeStartReqSanity(pAd, Elem->Msg, Elem->MsgLen, Ssid, &SsidLen))
++ {
++ // reset all the timers
++ RTMPCancelTimer(&pAd->MlmeAux.ScanTimer, &TimerCancelled);
++ RTMPCancelTimer(&pAd->MlmeAux.BeaconTimer, &TimerCancelled);
++
++ //
++ // Start a new IBSS. All IBSS parameters are decided now....
++ //
++ DBGPRINT(RT_DEBUG_TRACE, ("MlmeStartReqAction - Start a new IBSS. All IBSS parameters are decided now.... \n"));
++ pAd->MlmeAux.BssType = BSS_ADHOC;
++ NdisMoveMemory(pAd->MlmeAux.Ssid, Ssid, SsidLen);
++ pAd->MlmeAux.SsidLen = SsidLen;
++
++ // generate a radom number as BSSID
++ MacAddrRandomBssid(pAd, pAd->MlmeAux.Bssid);
++ DBGPRINT(RT_DEBUG_TRACE, ("MlmeStartReqAction - generate a radom number as BSSID \n"));
++
++ Privacy = (pAd->StaCfg.WepStatus == Ndis802_11Encryption1Enabled) ||
++ (pAd->StaCfg.WepStatus == Ndis802_11Encryption2Enabled) ||
++ (pAd->StaCfg.WepStatus == Ndis802_11Encryption3Enabled);
++ pAd->MlmeAux.CapabilityInfo = CAP_GENERATE(0,1,Privacy, (pAd->CommonCfg.TxPreamble == Rt802_11PreambleShort), 1, 0);
++ pAd->MlmeAux.BeaconPeriod = pAd->CommonCfg.BeaconPeriod;
++ pAd->MlmeAux.AtimWin = pAd->StaCfg.AtimWin;
++ pAd->MlmeAux.Channel = pAd->CommonCfg.Channel;
++
++ pAd->CommonCfg.CentralChannel = pAd->CommonCfg.Channel;
++ pAd->MlmeAux.CentralChannel = pAd->CommonCfg.CentralChannel;
++
++ pAd->MlmeAux.SupRateLen= pAd->CommonCfg.SupRateLen;
++ NdisMoveMemory(pAd->MlmeAux.SupRate, pAd->CommonCfg.SupRate, MAX_LEN_OF_SUPPORTED_RATES);
++ RTMPCheckRates(pAd, pAd->MlmeAux.SupRate, &pAd->MlmeAux.SupRateLen);
++ pAd->MlmeAux.ExtRateLen = pAd->CommonCfg.ExtRateLen;
++ NdisMoveMemory(pAd->MlmeAux.ExtRate, pAd->CommonCfg.ExtRate, MAX_LEN_OF_SUPPORTED_RATES);
++ RTMPCheckRates(pAd, pAd->MlmeAux.ExtRate, &pAd->MlmeAux.ExtRateLen);
++#ifdef DOT11_N_SUPPORT
++ if (pAd->CommonCfg.PhyMode >= PHY_11ABGN_MIXED)
++ {
++ RTMPUpdateHTIE(&pAd->CommonCfg.DesiredHtPhy, &pAd->StaCfg.DesiredHtPhyInfo.MCSSet[0], &pAd->MlmeAux.HtCapability, &pAd->MlmeAux.AddHtInfo);
++ pAd->MlmeAux.HtCapabilityLen = sizeof(HT_CAPABILITY_IE);
++ // Not turn pAd->StaActive.SupportedHtPhy.bHtEnable = TRUE here.
++ DBGPRINT(RT_DEBUG_TRACE, ("SYNC -pAd->StaActive.SupportedHtPhy.bHtEnable = TRUE\n"));
++ }
++ else
++#endif // DOT11_N_SUPPORT //
++ {
++ pAd->MlmeAux.HtCapabilityLen = 0;
++ pAd->StaActive.SupportedPhyInfo.bHtEnable = FALSE;
++ }
++ // temporarily not support QOS in IBSS
++ NdisZeroMemory(&pAd->MlmeAux.APEdcaParm, sizeof(EDCA_PARM));
++ NdisZeroMemory(&pAd->MlmeAux.APQbssLoad, sizeof(QBSS_LOAD_PARM));
++ NdisZeroMemory(&pAd->MlmeAux.APQosCapability, sizeof(QOS_CAPABILITY_PARM));
++
++ AsicSwitchChannel(pAd, pAd->MlmeAux.Channel, FALSE);
++ AsicLockChannel(pAd, pAd->MlmeAux.Channel);
++
++ DBGPRINT(RT_DEBUG_TRACE, ("SYNC - MlmeStartReqAction(ch= %d,sup rates= %d, ext rates=%d)\n",
++ pAd->MlmeAux.Channel, pAd->MlmeAux.SupRateLen, pAd->MlmeAux.ExtRateLen));
++
++ pAd->Mlme.SyncMachine.CurrState = SYNC_IDLE;
++ Status = MLME_SUCCESS;
++ MlmeEnqueue(pAd, MLME_CNTL_STATE_MACHINE, MT2_START_CONF, 2, &Status);
++ }
++ else
++ {
++ DBGPRINT_ERR(("SYNC - MlmeStartReqAction() sanity check fail.\n"));
++ pAd->Mlme.SyncMachine.CurrState = SYNC_IDLE;
++ Status = MLME_INVALID_FORMAT;
++ MlmeEnqueue(pAd, MLME_CNTL_STATE_MACHINE, MT2_START_CONF, 2, &Status);
++ }
++}
++
++/*
++ ==========================================================================
++ Description:
++ peer sends beacon back when scanning
++ ==========================================================================
++ */
++VOID PeerBeaconAtScanAction(
++ IN PRTMP_ADAPTER pAd,
++ IN MLME_QUEUE_ELEM *Elem)
++{
++ UCHAR Bssid[MAC_ADDR_LEN], Addr2[MAC_ADDR_LEN];
++ UCHAR Ssid[MAX_LEN_OF_SSID], BssType, Channel, NewChannel,
++ SsidLen, DtimCount, DtimPeriod, BcastFlag, MessageToMe;
++ CF_PARM CfParm;
++ USHORT BeaconPeriod, AtimWin, CapabilityInfo;
++ PFRAME_802_11 pFrame;
++ LARGE_INTEGER TimeStamp;
++ UCHAR Erp;
++ UCHAR SupRate[MAX_LEN_OF_SUPPORTED_RATES], ExtRate[MAX_LEN_OF_SUPPORTED_RATES];
++ UCHAR SupRateLen, ExtRateLen;
++ USHORT LenVIE;
++ UCHAR CkipFlag;
++ UCHAR AironetCellPowerLimit;
++ EDCA_PARM EdcaParm;
++ QBSS_LOAD_PARM QbssLoad;
++ QOS_CAPABILITY_PARM QosCapability;
++ ULONG RalinkIe;
++ UCHAR VarIE[MAX_VIE_LEN]; // Total VIE length = MAX_VIE_LEN - -5
++ NDIS_802_11_VARIABLE_IEs *pVIE = NULL;
++ HT_CAPABILITY_IE HtCapability;
++ ADD_HT_INFO_IE AddHtInfo; // AP might use this additional ht info IE
++ UCHAR HtCapabilityLen = 0, PreNHtCapabilityLen = 0;
++ UCHAR AddHtInfoLen;
++ UCHAR NewExtChannelOffset = 0xff;
++
++
++ // NdisFillMemory(Ssid, MAX_LEN_OF_SSID, 0x00);
++ pFrame = (PFRAME_802_11) Elem->Msg;
++ // Init Variable IE structure
++ pVIE = (PNDIS_802_11_VARIABLE_IEs) VarIE;
++ pVIE->Length = 0;
++#ifdef DOT11_N_SUPPORT
++ RTMPZeroMemory(&HtCapability, sizeof(HtCapability));
++ RTMPZeroMemory(&AddHtInfo, sizeof(ADD_HT_INFO_IE));
++#endif // DOT11_N_SUPPORT //
++
++ if (PeerBeaconAndProbeRspSanity(pAd,
++ Elem->Msg,
++ Elem->MsgLen,
++ Elem->Channel,
++ Addr2,
++ Bssid,
++ Ssid,
++ &SsidLen,
++ &BssType,
++ &BeaconPeriod,
++ &Channel,
++ &NewChannel,
++ &TimeStamp,
++ &CfParm,
++ &AtimWin,
++ &CapabilityInfo,
++ &Erp,
++ &DtimCount,
++ &DtimPeriod,
++ &BcastFlag,
++ &MessageToMe,
++ SupRate,
++ &SupRateLen,
++ ExtRate,
++ &ExtRateLen,
++ &CkipFlag,
++ &AironetCellPowerLimit,
++ &EdcaParm,
++ &QbssLoad,
++ &QosCapability,
++ &RalinkIe,
++ &HtCapabilityLen,
++ &PreNHtCapabilityLen,
++ &HtCapability,
++ &AddHtInfoLen,
++ &AddHtInfo,
++ &NewExtChannelOffset,
++ &LenVIE,
++ pVIE))
++ {
++ ULONG Idx;
++ CHAR Rssi = 0;
++
++ Idx = BssTableSearch(&pAd->ScanTab, Bssid, Channel);
++ if (Idx != BSS_NOT_FOUND)
++ Rssi = pAd->ScanTab.BssEntry[Idx].Rssi;
++
++ Rssi = RTMPMaxRssi(pAd, ConvertToRssi(pAd, Elem->Rssi0, RSSI_0), ConvertToRssi(pAd, Elem->Rssi1, RSSI_1), ConvertToRssi(pAd, Elem->Rssi2, RSSI_2));
++
++
++#ifdef DOT11_N_SUPPORT
++ if ((HtCapabilityLen > 0) || (PreNHtCapabilityLen > 0))
++ HtCapabilityLen = SIZE_HT_CAP_IE;
++#endif // DOT11_N_SUPPORT //
++ if ((pAd->StaCfg.CCXReqType != MSRN_TYPE_UNUSED) && (Channel == pAd->StaCfg.CCXScanChannel))
++ {
++ Idx = BssTableSetEntry(pAd, &pAd->StaCfg.CCXBssTab, Bssid, Ssid, SsidLen, BssType, BeaconPeriod,
++ &CfParm, AtimWin, CapabilityInfo, SupRate, SupRateLen,ExtRate, ExtRateLen, &HtCapability,
++ &AddHtInfo, HtCapabilityLen, AddHtInfoLen, NewExtChannelOffset, Channel, Rssi, TimeStamp, CkipFlag,
++ &EdcaParm, &QosCapability, &QbssLoad, LenVIE, pVIE);
++ if (Idx != BSS_NOT_FOUND)
++ {
++ NdisMoveMemory(pAd->StaCfg.CCXBssTab.BssEntry[Idx].PTSF, &Elem->Msg[24], 4);
++ NdisMoveMemory(&pAd->StaCfg.CCXBssTab.BssEntry[Idx].TTSF[0], &Elem->TimeStamp.u.LowPart, 4);
++ NdisMoveMemory(&pAd->StaCfg.CCXBssTab.BssEntry[Idx].TTSF[4], &Elem->TimeStamp.u.LowPart, 4);
++ if (pAd->StaCfg.CCXReqType == MSRN_TYPE_BEACON_REQ)
++ AironetAddBeaconReport(pAd, Idx, Elem);
++ }
++ }
++ else
++ {
++ Idx = BssTableSetEntry(pAd, &pAd->ScanTab, Bssid, Ssid, SsidLen, BssType, BeaconPeriod,
++ &CfParm, AtimWin, CapabilityInfo, SupRate, SupRateLen, ExtRate, ExtRateLen, &HtCapability,
++ &AddHtInfo, HtCapabilityLen, AddHtInfoLen, NewExtChannelOffset, Channel, Rssi, TimeStamp, CkipFlag,
++ &EdcaParm, &QosCapability, &QbssLoad, LenVIE, pVIE);
++#ifdef DOT11_N_SUPPORT
++#ifdef DOT11N_DRAFT3
++ if (pAd->ChannelList[pAd->CommonCfg.ChannelListIdx].bEffectedChannel == TRUE)
++ {
++ UCHAR RegClass;
++ PeerBeaconAndProbeRspSanity2(pAd, Elem->Msg, Elem->MsgLen, &RegClass);
++ TriEventTableSetEntry(pAd, &pAd->CommonCfg.TriggerEventTab, Bssid, &HtCapability, HtCapabilityLen, RegClass, Channel);
++ }
++#endif // DOT11N_DRAFT3 //
++#endif // DOT11_N_SUPPORT //
++ if (Idx != BSS_NOT_FOUND)
++ {
++ NdisMoveMemory(pAd->ScanTab.BssEntry[Idx].PTSF, &Elem->Msg[24], 4);
++ NdisMoveMemory(&pAd->ScanTab.BssEntry[Idx].TTSF[0], &Elem->TimeStamp.u.LowPart, 4);
++ NdisMoveMemory(&pAd->ScanTab.BssEntry[Idx].TTSF[4], &Elem->TimeStamp.u.LowPart, 4);
++ }
++ }
++ }
++ // sanity check fail, ignored
++}
++
++/*
++ ==========================================================================
++ Description:
++ When waiting joining the (I)BSS, beacon received from external
++ ==========================================================================
++ */
++VOID PeerBeaconAtJoinAction(
++ IN PRTMP_ADAPTER pAd,
++ IN MLME_QUEUE_ELEM *Elem)
++{
++ UCHAR Bssid[MAC_ADDR_LEN], Addr2[MAC_ADDR_LEN];
++ UCHAR Ssid[MAX_LEN_OF_SSID], SsidLen, BssType, Channel, MessageToMe,
++ DtimCount, DtimPeriod, BcastFlag, NewChannel;
++ LARGE_INTEGER TimeStamp;
++ USHORT BeaconPeriod, AtimWin, CapabilityInfo;
++ CF_PARM Cf;
++ BOOLEAN TimerCancelled;
++ UCHAR Erp;
++ UCHAR SupRate[MAX_LEN_OF_SUPPORTED_RATES], ExtRate[MAX_LEN_OF_SUPPORTED_RATES];
++ UCHAR SupRateLen, ExtRateLen;
++ UCHAR CkipFlag;
++ USHORT LenVIE;
++ UCHAR AironetCellPowerLimit;
++ EDCA_PARM EdcaParm;
++ QBSS_LOAD_PARM QbssLoad;
++ QOS_CAPABILITY_PARM QosCapability;
++ USHORT Status;
++ UCHAR VarIE[MAX_VIE_LEN]; // Total VIE length = MAX_VIE_LEN - -5
++ NDIS_802_11_VARIABLE_IEs *pVIE = NULL;
++ ULONG RalinkIe;
++ ULONG Idx;
++ HT_CAPABILITY_IE HtCapability;
++ ADD_HT_INFO_IE AddHtInfo; // AP might use this additional ht info IE
++ UCHAR HtCapabilityLen = 0, PreNHtCapabilityLen = 0;
++ UCHAR AddHtInfoLen;
++ UCHAR NewExtChannelOffset = 0xff;
++#ifdef DOT11_N_SUPPORT
++ UCHAR CentralChannel;
++#endif // DOT11_N_SUPPORT //
++
++ // Init Variable IE structure
++ pVIE = (PNDIS_802_11_VARIABLE_IEs) VarIE;
++ pVIE->Length = 0;
++ RTMPZeroMemory(&HtCapability, sizeof(HtCapability));
++ RTMPZeroMemory(&AddHtInfo, sizeof(ADD_HT_INFO_IE));
++
++
++ if (PeerBeaconAndProbeRspSanity(pAd,
++ Elem->Msg,
++ Elem->MsgLen,
++ Elem->Channel,
++ Addr2,
++ Bssid,
++ Ssid,
++ &SsidLen,
++ &BssType,
++ &BeaconPeriod,
++ &Channel,
++ &NewChannel,
++ &TimeStamp,
++ &Cf,
++ &AtimWin,
++ &CapabilityInfo,
++ &Erp,
++ &DtimCount,
++ &DtimPeriod,
++ &BcastFlag,
++ &MessageToMe,
++ SupRate,
++ &SupRateLen,
++ ExtRate,
++ &ExtRateLen,
++ &CkipFlag,
++ &AironetCellPowerLimit,
++ &EdcaParm,
++ &QbssLoad,
++ &QosCapability,
++ &RalinkIe,
++ &HtCapabilityLen,
++ &PreNHtCapabilityLen,
++ &HtCapability,
++ &AddHtInfoLen,
++ &AddHtInfo,
++ &NewExtChannelOffset,
++ &LenVIE,
++ pVIE))
++ {
++ // Disqualify 11b only adhoc when we are in 11g only adhoc mode
++ if ((BssType == BSS_ADHOC) && (pAd->CommonCfg.PhyMode == PHY_11G) && ((SupRateLen+ExtRateLen)< 12))
++ return;
++
++ // BEACON from desired BSS/IBSS found. We should be able to decide most
++ // BSS parameters here.
++ // Q. But what happen if this JOIN doesn't conclude a successful ASSOCIATEION?
++ // Do we need to receover back all parameters belonging to previous BSS?
++ // A. Should be not. There's no back-door recover to previous AP. It still need
++ // a new JOIN-AUTH-ASSOC sequence.
++ if (MAC_ADDR_EQUAL(pAd->MlmeAux.Bssid, Bssid))
++ {
++ DBGPRINT(RT_DEBUG_TRACE, ("SYNC - receive desired BEACON at JoinWaitBeacon... Channel = %d\n", Channel));
++ RTMPCancelTimer(&pAd->MlmeAux.BeaconTimer, &TimerCancelled);
++
++ // Update RSSI to prevent No signal display when cards first initialized
++ pAd->StaCfg.RssiSample.LastRssi0 = ConvertToRssi(pAd, Elem->Rssi0, RSSI_0);
++ pAd->StaCfg.RssiSample.LastRssi1 = ConvertToRssi(pAd, Elem->Rssi1, RSSI_1);
++ pAd->StaCfg.RssiSample.LastRssi2 = ConvertToRssi(pAd, Elem->Rssi2, RSSI_2);
++ pAd->StaCfg.RssiSample.AvgRssi0 = pAd->StaCfg.RssiSample.LastRssi0;
++ pAd->StaCfg.RssiSample.AvgRssi0X8 = pAd->StaCfg.RssiSample.AvgRssi0 << 3;
++ pAd->StaCfg.RssiSample.AvgRssi1 = pAd->StaCfg.RssiSample.LastRssi1;
++ pAd->StaCfg.RssiSample.AvgRssi1X8 = pAd->StaCfg.RssiSample.AvgRssi1 << 3;
++ pAd->StaCfg.RssiSample.AvgRssi2 = pAd->StaCfg.RssiSample.LastRssi2;
++ pAd->StaCfg.RssiSample.AvgRssi2X8 = pAd->StaCfg.RssiSample.AvgRssi2 << 3;
++
++ //
++ // We need to check if SSID only set to any, then we can record the current SSID.
++ // Otherwise will cause hidden SSID association failed.
++ //
++ if (pAd->MlmeAux.SsidLen == 0)
++ {
++ NdisMoveMemory(pAd->MlmeAux.Ssid, Ssid, SsidLen);
++ pAd->MlmeAux.SsidLen = SsidLen;
++ }
++ else
++ {
++ Idx = BssSsidTableSearch(&pAd->ScanTab, Bssid, pAd->MlmeAux.Ssid, pAd->MlmeAux.SsidLen, Channel);
++
++ if (Idx != BSS_NOT_FOUND)
++ {
++ //
++ // Multiple SSID case, used correct CapabilityInfo
++ //
++ CapabilityInfo = pAd->ScanTab.BssEntry[Idx].CapabilityInfo;
++ }
++ }
++ NdisMoveMemory(pAd->MlmeAux.Bssid, Bssid, MAC_ADDR_LEN);
++ pAd->MlmeAux.CapabilityInfo = CapabilityInfo & SUPPORTED_CAPABILITY_INFO;
++ pAd->MlmeAux.BssType = BssType;
++ pAd->MlmeAux.BeaconPeriod = BeaconPeriod;
++ pAd->MlmeAux.Channel = Channel;
++ pAd->MlmeAux.AtimWin = AtimWin;
++ pAd->MlmeAux.CfpPeriod = Cf.CfpPeriod;
++ pAd->MlmeAux.CfpMaxDuration = Cf.CfpMaxDuration;
++ pAd->MlmeAux.APRalinkIe = RalinkIe;
++
++ // Copy AP's supported rate to MlmeAux for creating assoication request
++ // Also filter out not supported rate
++ pAd->MlmeAux.SupRateLen = SupRateLen;
++ NdisMoveMemory(pAd->MlmeAux.SupRate, SupRate, SupRateLen);
++ RTMPCheckRates(pAd, pAd->MlmeAux.SupRate, &pAd->MlmeAux.SupRateLen);
++ pAd->MlmeAux.ExtRateLen = ExtRateLen;
++ NdisMoveMemory(pAd->MlmeAux.ExtRate, ExtRate, ExtRateLen);
++ RTMPCheckRates(pAd, pAd->MlmeAux.ExtRate, &pAd->MlmeAux.ExtRateLen);
++
++ NdisZeroMemory(pAd->StaActive.SupportedPhyInfo.MCSSet, 16);
++#ifdef DOT11_N_SUPPORT
++ pAd->MlmeAux.NewExtChannelOffset = NewExtChannelOffset;
++ pAd->MlmeAux.HtCapabilityLen = HtCapabilityLen;
++
++ // filter out un-supported ht rates
++ if (((HtCapabilityLen > 0) || (PreNHtCapabilityLen > 0)) && (pAd->CommonCfg.PhyMode >= PHY_11ABGN_MIXED))
++ {
++ RTMPZeroMemory(&pAd->MlmeAux.HtCapability, SIZE_HT_CAP_IE);
++ RTMPMoveMemory(&pAd->MlmeAux.AddHtInfo, &AddHtInfo, SIZE_ADD_HT_INFO_IE);
++
++ // StaActive.SupportedHtPhy.MCSSet stores Peer AP's 11n Rx capability
++ NdisMoveMemory(pAd->StaActive.SupportedPhyInfo.MCSSet, HtCapability.MCSSet, 16);
++ pAd->MlmeAux.NewExtChannelOffset = NewExtChannelOffset;
++ pAd->MlmeAux.HtCapabilityLen = SIZE_HT_CAP_IE;
++ pAd->StaActive.SupportedPhyInfo.bHtEnable = TRUE;
++ if (PreNHtCapabilityLen > 0)
++ pAd->StaActive.SupportedPhyInfo.bPreNHt = TRUE;
++ RTMPCheckHt(pAd, BSSID_WCID, &HtCapability, &AddHtInfo);
++ // Copy AP Parameter to StaActive. This is also in LinkUp.
++ DBGPRINT(RT_DEBUG_TRACE, ("PeerBeaconAtJoinAction! (MpduDensity=%d, MaxRAmpduFactor=%d, BW=%d)\n",
++ pAd->StaActive.SupportedHtPhy.MpduDensity, pAd->StaActive.SupportedHtPhy.MaxRAmpduFactor, HtCapability.HtCapInfo.ChannelWidth));
++
++ if (AddHtInfoLen > 0)
++ {
++ CentralChannel = AddHtInfo.ControlChan;
++ // Check again the Bandwidth capability of this AP.
++ if ((AddHtInfo.ControlChan > 2)&& (AddHtInfo.AddHtInfo.ExtChanOffset == EXTCHA_BELOW) && (HtCapability.HtCapInfo.ChannelWidth == BW_40))
++ {
++ CentralChannel = AddHtInfo.ControlChan - 2;
++ }
++ else if ((AddHtInfo.AddHtInfo.ExtChanOffset == EXTCHA_ABOVE) && (HtCapability.HtCapInfo.ChannelWidth == BW_40))
++ {
++ CentralChannel = AddHtInfo.ControlChan + 2;
++ }
++
++ // Check Error .
++ if (pAd->MlmeAux.CentralChannel != CentralChannel)
++ DBGPRINT(RT_DEBUG_ERROR, ("PeerBeaconAtJoinAction HT===>Beacon Central Channel = %d, Control Channel = %d. Mlmeaux CentralChannel = %d\n", CentralChannel, AddHtInfo.ControlChan, pAd->MlmeAux.CentralChannel));
++
++ DBGPRINT(RT_DEBUG_TRACE, ("PeerBeaconAtJoinAction HT===>Central Channel = %d, Control Channel = %d, .\n", CentralChannel, AddHtInfo.ControlChan));
++
++ }
++
++ }
++ else
++#endif // DOT11_N_SUPPORT //
++ {
++ // To prevent error, let legacy AP must have same CentralChannel and Channel.
++ if ((HtCapabilityLen == 0) && (PreNHtCapabilityLen == 0))
++ pAd->MlmeAux.CentralChannel = pAd->MlmeAux.Channel;
++
++ pAd->StaActive.SupportedPhyInfo.bHtEnable = FALSE;
++ RTMPZeroMemory(&pAd->MlmeAux.HtCapability, SIZE_HT_CAP_IE);
++ RTMPZeroMemory(&pAd->MlmeAux.AddHtInfo, SIZE_ADD_HT_INFO_IE);
++ }
++
++ RTMPUpdateMlmeRate(pAd);
++
++ // copy QOS related information
++ if ((pAd->CommonCfg.bWmmCapable)
++#ifdef DOT11_N_SUPPORT
++ || (pAd->CommonCfg.PhyMode >= PHY_11ABGN_MIXED)
++#endif // DOT11_N_SUPPORT //
++ )
++ {
++ NdisMoveMemory(&pAd->MlmeAux.APEdcaParm, &EdcaParm, sizeof(EDCA_PARM));
++ NdisMoveMemory(&pAd->MlmeAux.APQbssLoad, &QbssLoad, sizeof(QBSS_LOAD_PARM));
++ NdisMoveMemory(&pAd->MlmeAux.APQosCapability, &QosCapability, sizeof(QOS_CAPABILITY_PARM));
++ }
++ else
++ {
++ NdisZeroMemory(&pAd->MlmeAux.APEdcaParm, sizeof(EDCA_PARM));
++ NdisZeroMemory(&pAd->MlmeAux.APQbssLoad, sizeof(QBSS_LOAD_PARM));
++ NdisZeroMemory(&pAd->MlmeAux.APQosCapability, sizeof(QOS_CAPABILITY_PARM));
++ }
++
++ DBGPRINT(RT_DEBUG_TRACE, ("SYNC - after JOIN, SupRateLen=%d, ExtRateLen=%d\n",
++ pAd->MlmeAux.SupRateLen, pAd->MlmeAux.ExtRateLen));
++
++#ifdef LEAP_SUPPORT
++ // Update CkipFlag
++ pAd->StaCfg.CkipFlag = CkipFlag;
++
++ // Keep TimeStamp for Re-Association used.
++ if (LEAP_CCKM_ON(pAd) && (pAd->StaCfg.CCKMLinkUpFlag == TRUE))
++ pAd->StaCfg.CCKMBeaconAtJoinTimeStamp = TimeStamp;
++#endif // LEAP_SUPPORT //
++
++ if (AironetCellPowerLimit != 0xFF)
++ {
++ //We need to change our TxPower for CCX 2.0 AP Control of Client Transmit Power
++ ChangeToCellPowerLimit(pAd, AironetCellPowerLimit);
++ }
++ else //Used the default TX Power Percentage.
++ pAd->CommonCfg.TxPowerPercentage = pAd->CommonCfg.TxPowerDefault;
++
++ pAd->Mlme.SyncMachine.CurrState = SYNC_IDLE;
++ Status = MLME_SUCCESS;
++ MlmeEnqueue(pAd, MLME_CNTL_STATE_MACHINE, MT2_JOIN_CONF, 2, &Status);
++ }
++ // not to me BEACON, ignored
++ }
++ // sanity check fail, ignore this frame
++}
++
++/*
++ ==========================================================================
++ Description:
++ receive BEACON from peer
++
++ IRQL = DISPATCH_LEVEL
++
++ ==========================================================================
++ */
++VOID PeerBeacon(
++ IN PRTMP_ADAPTER pAd,
++ IN MLME_QUEUE_ELEM *Elem)
++{
++ UCHAR Bssid[MAC_ADDR_LEN], Addr2[MAC_ADDR_LEN];
++ CHAR Ssid[MAX_LEN_OF_SSID];
++ CF_PARM CfParm;
++ UCHAR SsidLen, MessageToMe=0, BssType, Channel, NewChannel, index=0;
++ UCHAR DtimCount=0, DtimPeriod=0, BcastFlag=0;
++ USHORT CapabilityInfo, AtimWin, BeaconPeriod;
++ LARGE_INTEGER TimeStamp;
++ USHORT TbttNumToNextWakeUp;
++ UCHAR Erp;
++ UCHAR SupRate[MAX_LEN_OF_SUPPORTED_RATES], ExtRate[MAX_LEN_OF_SUPPORTED_RATES];
++ UCHAR SupRateLen, ExtRateLen;
++ UCHAR CkipFlag;
++ USHORT LenVIE;
++ UCHAR AironetCellPowerLimit;
++ EDCA_PARM EdcaParm;
++ QBSS_LOAD_PARM QbssLoad;
++ QOS_CAPABILITY_PARM QosCapability;
++ ULONG RalinkIe;
++ // New for WPA security suites
++ UCHAR VarIE[MAX_VIE_LEN]; // Total VIE length = MAX_VIE_LEN - -5
++ NDIS_802_11_VARIABLE_IEs *pVIE = NULL;
++ HT_CAPABILITY_IE HtCapability;
++ ADD_HT_INFO_IE AddHtInfo; // AP might use this additional ht info IE
++ UCHAR HtCapabilityLen, PreNHtCapabilityLen;
++ UCHAR AddHtInfoLen;
++ UCHAR NewExtChannelOffset = 0xff;
++
++
++#ifdef RALINK_ATE
++ if (ATE_ON(pAd))
++ {
++ return;
++ }
++#endif // RALINK_ATE //
++
++ if (!(INFRA_ON(pAd) || ADHOC_ON(pAd)
++ ))
++ return;
++
++ // Init Variable IE structure
++ pVIE = (PNDIS_802_11_VARIABLE_IEs) VarIE;
++ pVIE->Length = 0;
++ RTMPZeroMemory(&HtCapability, sizeof(HtCapability));
++ RTMPZeroMemory(&AddHtInfo, sizeof(ADD_HT_INFO_IE));
++
++ if (PeerBeaconAndProbeRspSanity(pAd,
++ Elem->Msg,
++ Elem->MsgLen,
++ Elem->Channel,
++ Addr2,
++ Bssid,
++ Ssid,
++ &SsidLen,
++ &BssType,
++ &BeaconPeriod,
++ &Channel,
++ &NewChannel,
++ &TimeStamp,
++ &CfParm,
++ &AtimWin,
++ &CapabilityInfo,
++ &Erp,
++ &DtimCount,
++ &DtimPeriod,
++ &BcastFlag,
++ &MessageToMe,
++ SupRate,
++ &SupRateLen,
++ ExtRate,
++ &ExtRateLen,
++ &CkipFlag,
++ &AironetCellPowerLimit,
++ &EdcaParm,
++ &QbssLoad,
++ &QosCapability,
++ &RalinkIe,
++ &HtCapabilityLen,
++ &PreNHtCapabilityLen,
++ &HtCapability,
++ &AddHtInfoLen,
++ &AddHtInfo,
++ &NewExtChannelOffset,
++ &LenVIE,
++ pVIE))
++ {
++ BOOLEAN is_my_bssid, is_my_ssid;
++ ULONG Bssidx, Now;
++ BSS_ENTRY *pBss;
++ CHAR RealRssi = RTMPMaxRssi(pAd, ConvertToRssi(pAd, Elem->Rssi0, RSSI_0), ConvertToRssi(pAd, Elem->Rssi1, RSSI_1), ConvertToRssi(pAd, Elem->Rssi2, RSSI_2));
++
++ is_my_bssid = MAC_ADDR_EQUAL(Bssid, pAd->CommonCfg.Bssid)? TRUE : FALSE;
++ is_my_ssid = SSID_EQUAL(Ssid, SsidLen, pAd->CommonCfg.Ssid, pAd->CommonCfg.SsidLen)? TRUE:FALSE;
++
++
++ // ignore BEACON not for my SSID
++ if ((! is_my_ssid) && (! is_my_bssid))
++ return;
++
++ // It means STA waits disassoc completely from this AP, ignores this beacon.
++ if (pAd->Mlme.CntlMachine.CurrState == CNTL_WAIT_DISASSOC)
++ return;
++
++#ifdef DOT11_N_SUPPORT
++ // Copy Control channel for this BSSID.
++ if (AddHtInfoLen != 0)
++ Channel = AddHtInfo.ControlChan;
++
++ if ((HtCapabilityLen > 0) || (PreNHtCapabilityLen > 0))
++ HtCapabilityLen = SIZE_HT_CAP_IE;
++#endif // DOT11_N_SUPPORT //
++
++ //
++ // Housekeeping "SsidBssTab" table for later-on ROAMing usage.
++ //
++ Bssidx = BssTableSearch(&pAd->ScanTab, Bssid, Channel);
++ if (Bssidx == BSS_NOT_FOUND)
++ {
++ // discover new AP of this network, create BSS entry
++ Bssidx = BssTableSetEntry(pAd, &pAd->ScanTab, Bssid, Ssid, SsidLen, BssType, BeaconPeriod,
++ &CfParm, AtimWin, CapabilityInfo, SupRate, SupRateLen, ExtRate, ExtRateLen,
++ &HtCapability, &AddHtInfo,HtCapabilityLen,AddHtInfoLen,NewExtChannelOffset, Channel,
++ RealRssi, TimeStamp, CkipFlag, &EdcaParm, &QosCapability,
++ &QbssLoad, LenVIE, pVIE);
++ if (Bssidx == BSS_NOT_FOUND) // return if BSS table full
++ return;
++
++ NdisMoveMemory(pAd->ScanTab.BssEntry[Bssidx].PTSF, &Elem->Msg[24], 4);
++ NdisMoveMemory(&pAd->ScanTab.BssEntry[Bssidx].TTSF[0], &Elem->TimeStamp.u.LowPart, 4);
++ NdisMoveMemory(&pAd->ScanTab.BssEntry[Bssidx].TTSF[4], &Elem->TimeStamp.u.LowPart, 4);
++
++
++
++ }
++
++ if ((pAd->CommonCfg.bIEEE80211H == 1) && (NewChannel != 0) && (Channel != NewChannel))
++ {
++ // Switching to channel 1 can prevent from rescanning the current channel immediately (by auto reconnection).
++ // In addition, clear the MLME queue and the scan table to discard the RX packets and previous scanning results.
++ AsicSwitchChannel(pAd, 1, FALSE);
++ AsicLockChannel(pAd, 1);
++ LinkDown(pAd, FALSE);
++ MlmeQueueInit(&pAd->Mlme.Queue);
++ BssTableInit(&pAd->ScanTab);
++ RTMPusecDelay(1000000); // use delay to prevent STA do reassoc
++
++ // channel sanity check
++ for (index = 0 ; index < pAd->ChannelListNum; index++)
++ {
++ if (pAd->ChannelList[index].Channel == NewChannel)
++ {
++ pAd->ScanTab.BssEntry[Bssidx].Channel = NewChannel;
++ pAd->CommonCfg.Channel = NewChannel;
++ AsicSwitchChannel(pAd, pAd->CommonCfg.Channel, FALSE);
++ AsicLockChannel(pAd, pAd->CommonCfg.Channel);
++ DBGPRINT(RT_DEBUG_TRACE, ("PeerBeacon - STA receive channel switch announcement IE (New Channel =%d)\n", NewChannel));
++ break;
++ }
++ }
++
++ if (index >= pAd->ChannelListNum)
++ {
++ DBGPRINT_ERR(("PeerBeacon(can not find New Channel=%d in ChannelList[%d]\n", pAd->CommonCfg.Channel, pAd->ChannelListNum));
++ }
++ }
++
++ // if the ssid matched & bssid unmatched, we should select the bssid with large value.
++ // This might happened when two STA start at the same time
++ if ((! is_my_bssid) && ADHOC_ON(pAd))
++ {
++ INT i;
++
++ // Add the safeguard against the mismatch of adhoc wep status
++ if (pAd->StaCfg.WepStatus != pAd->ScanTab.BssEntry[Bssidx].WepStatus)
++ {
++ return;
++ }
++
++ // collapse into the ADHOC network which has bigger BSSID value.
++ for (i = 0; i < 6; i++)
++ {
++ if (Bssid[i] > pAd->CommonCfg.Bssid[i])
++ {
++ DBGPRINT(RT_DEBUG_TRACE, ("SYNC - merge to the IBSS with bigger BSSID=%02x:%02x:%02x:%02x:%02x:%02x\n",
++ Bssid[0], Bssid[1], Bssid[2], Bssid[3], Bssid[4], Bssid[5]));
++ AsicDisableSync(pAd);
++ COPY_MAC_ADDR(pAd->CommonCfg.Bssid, Bssid);
++ AsicSetBssid(pAd, pAd->CommonCfg.Bssid);
++ MakeIbssBeacon(pAd); // re-build BEACON frame
++ AsicEnableIbssSync(pAd); // copy BEACON frame to on-chip memory
++ is_my_bssid = TRUE;
++ break;
++ }
++ else if (Bssid[i] < pAd->CommonCfg.Bssid[i])
++ break;
++ }
++ }
++
++
++ NdisGetSystemUpTime(&Now);
++ pBss = &pAd->ScanTab.BssEntry[Bssidx];
++ pBss->Rssi = RealRssi; // lastest RSSI
++ pBss->LastBeaconRxTime = Now; // last RX timestamp
++
++ //
++ // BEACON from my BSSID - either IBSS or INFRA network
++ //
++ if (is_my_bssid)
++ {
++ RXWI_STRUC RxWI;
++
++ pAd->StaCfg.DtimCount = DtimCount;
++ pAd->StaCfg.DtimPeriod = DtimPeriod;
++ pAd->StaCfg.LastBeaconRxTime = Now;
++
++
++ RxWI.RSSI0 = Elem->Rssi0;
++ RxWI.RSSI1 = Elem->Rssi1;
++ RxWI.RSSI2 = Elem->Rssi2;
++
++ Update_Rssi_Sample(pAd, &pAd->StaCfg.RssiSample, &RxWI);
++ if (AironetCellPowerLimit != 0xFF)
++ {
++ //
++ // We get the Cisco (ccx) "TxPower Limit" required
++ // Changed to appropriate TxPower Limit for Ciso Compatible Extensions
++ //
++ ChangeToCellPowerLimit(pAd, AironetCellPowerLimit);
++ }
++ else
++ {
++ //
++ // AironetCellPowerLimit equal to 0xFF means the Cisco (ccx) "TxPower Limit" not exist.
++ // Used the default TX Power Percentage, that set from UI.
++ //
++ pAd->CommonCfg.TxPowerPercentage = pAd->CommonCfg.TxPowerDefault;
++ }
++
++ if (ADHOC_ON(pAd) && (CAP_IS_IBSS_ON(CapabilityInfo)))
++ {
++ UCHAR MaxSupportedRateIn500Kbps = 0;
++ UCHAR idx;
++ MAC_TABLE_ENTRY *pEntry;
++
++ // supported rates array may not be sorted. sort it and find the maximum rate
++ for (idx=0; idx<SupRateLen; idx++)
++ {
++ if (MaxSupportedRateIn500Kbps < (SupRate[idx] & 0x7f))
++ MaxSupportedRateIn500Kbps = SupRate[idx] & 0x7f;
++ }
++
++ for (idx=0; idx<ExtRateLen; idx++)
++ {
++ if (MaxSupportedRateIn500Kbps < (ExtRate[idx] & 0x7f))
++ MaxSupportedRateIn500Kbps = ExtRate[idx] & 0x7f;
++ }
++
++ // look up the existing table
++ pEntry = MacTableLookup(pAd, Addr2);
++
++ // Ad-hoc mode is using MAC address as BA session. So we need to continuously find newly joined adhoc station by receiving beacon.
++ // To prevent always check this, we use wcid == RESERVED_WCID to recognize it as newly joined adhoc station.
++ if ((ADHOC_ON(pAd) && (Elem->Wcid == RESERVED_WCID)) ||
++ (pEntry && ((pEntry->LastBeaconRxTime + ADHOC_ENTRY_BEACON_LOST_TIME) < Now)))
++ {
++ if (pEntry == NULL)
++ // Another adhoc joining, add to our MAC table.
++ pEntry = MacTableInsertEntry(pAd, Addr2, BSS0, FALSE);
++
++ if (StaAddMacTableEntry(pAd, pEntry, MaxSupportedRateIn500Kbps, &HtCapability, HtCapabilityLen, CapabilityInfo) == FALSE)
++ {
++ DBGPRINT(RT_DEBUG_TRACE, ("ADHOC - Add Entry failed.\n"));
++ return;
++ }
++
++ if (pEntry &&
++ (Elem->Wcid == RESERVED_WCID))
++ {
++ idx = pAd->StaCfg.DefaultKeyId;
++ RT28XX_STA_SECURITY_INFO_ADD(pAd, BSS0, idx, pEntry);
++ }
++ }
++
++ if (pEntry && pEntry->ValidAsCLI)
++ pEntry->LastBeaconRxTime = Now;
++
++ // At least another peer in this IBSS, declare MediaState as CONNECTED
++ if (!OPSTATUS_TEST_FLAG(pAd, fOP_STATUS_MEDIA_STATE_CONNECTED))
++ {
++ OPSTATUS_SET_FLAG(pAd, fOP_STATUS_MEDIA_STATE_CONNECTED);
++
++ pAd->IndicateMediaState = NdisMediaStateConnected;
++ RTMP_IndicateMediaState(pAd);
++ pAd->ExtraInfo = GENERAL_LINK_UP;
++ AsicSetBssid(pAd, pAd->CommonCfg.Bssid);
++
++ // 2003/03/12 - john
++ // Make sure this entry in "ScanTab" table, thus complies to Microsoft's policy that
++ // "site survey" result should always include the current connected network.
++ //
++ Bssidx = BssTableSearch(&pAd->ScanTab, Bssid, Channel);
++ if (Bssidx == BSS_NOT_FOUND)
++ {
++ Bssidx = BssTableSetEntry(pAd, &pAd->ScanTab, Bssid, Ssid, SsidLen, BssType, BeaconPeriod,
++ &CfParm, AtimWin, CapabilityInfo, SupRate, SupRateLen, ExtRate, ExtRateLen, &HtCapability,
++ &AddHtInfo, HtCapabilityLen, AddHtInfoLen, NewExtChannelOffset, Channel, RealRssi, TimeStamp, 0,
++ &EdcaParm, &QosCapability, &QbssLoad, LenVIE, pVIE);
++ }
++ DBGPRINT(RT_DEBUG_TRACE, ("ADHOC fOP_STATUS_MEDIA_STATE_CONNECTED.\n"));
++ }
++ }
++
++ if (INFRA_ON(pAd))
++ {
++ BOOLEAN bUseShortSlot, bUseBGProtection;
++
++ // decide to use/change to -
++ // 1. long slot (20 us) or short slot (9 us) time
++ // 2. turn on/off RTS/CTS and/or CTS-to-self protection
++ // 3. short preamble
++
++ //bUseShortSlot = pAd->CommonCfg.bUseShortSlotTime && CAP_IS_SHORT_SLOT(CapabilityInfo);
++ bUseShortSlot = CAP_IS_SHORT_SLOT(CapabilityInfo);
++ if (bUseShortSlot != OPSTATUS_TEST_FLAG(pAd, fOP_STATUS_SHORT_SLOT_INUSED))
++ AsicSetSlotTime(pAd, bUseShortSlot);
++
++ bUseBGProtection = (pAd->CommonCfg.UseBGProtection == 1) || // always use
++ ((pAd->CommonCfg.UseBGProtection == 0) && ERP_IS_USE_PROTECTION(Erp));
++
++ if (pAd->CommonCfg.Channel > 14) // always no BG protection in A-band. falsely happened when switching A/G band to a dual-band AP
++ bUseBGProtection = FALSE;
++
++ if (bUseBGProtection != OPSTATUS_TEST_FLAG(pAd, fOP_STATUS_BG_PROTECTION_INUSED))
++ {
++ if (bUseBGProtection)
++ {
++ OPSTATUS_SET_FLAG(pAd, fOP_STATUS_BG_PROTECTION_INUSED);
++ AsicUpdateProtect(pAd, pAd->MlmeAux.AddHtInfo.AddHtInfo2.OperaionMode, (OFDMSETPROTECT|CCKSETPROTECT|ALLN_SETPROTECT),FALSE,(pAd->MlmeAux.AddHtInfo.AddHtInfo2.NonGfPresent == 1));
++ }
++ else
++ {
++ OPSTATUS_CLEAR_FLAG(pAd, fOP_STATUS_BG_PROTECTION_INUSED);
++ AsicUpdateProtect(pAd, pAd->MlmeAux.AddHtInfo.AddHtInfo2.OperaionMode, (OFDMSETPROTECT|CCKSETPROTECT|ALLN_SETPROTECT),TRUE,(pAd->MlmeAux.AddHtInfo.AddHtInfo2.NonGfPresent == 1));
++ }
++
++ DBGPRINT(RT_DEBUG_WARN, ("SYNC - AP changed B/G protection to %d\n", bUseBGProtection));
++ }
++
++#ifdef DOT11_N_SUPPORT
++ // check Ht protection mode. and adhere to the Non-GF device indication by AP.
++ if ((AddHtInfoLen != 0) &&
++ ((AddHtInfo.AddHtInfo2.OperaionMode != pAd->MlmeAux.AddHtInfo.AddHtInfo2.OperaionMode) ||
++ (AddHtInfo.AddHtInfo2.NonGfPresent != pAd->MlmeAux.AddHtInfo.AddHtInfo2.NonGfPresent)))
++ {
++ pAd->MlmeAux.AddHtInfo.AddHtInfo2.NonGfPresent = AddHtInfo.AddHtInfo2.NonGfPresent;
++ pAd->MlmeAux.AddHtInfo.AddHtInfo2.OperaionMode = AddHtInfo.AddHtInfo2.OperaionMode;
++ if (pAd->MlmeAux.AddHtInfo.AddHtInfo2.NonGfPresent == 1)
++ {
++ AsicUpdateProtect(pAd, pAd->MlmeAux.AddHtInfo.AddHtInfo2.OperaionMode, ALLN_SETPROTECT, FALSE, TRUE);
++ }
++ else
++ AsicUpdateProtect(pAd, pAd->MlmeAux.AddHtInfo.AddHtInfo2.OperaionMode, ALLN_SETPROTECT, FALSE, FALSE);
++
++ DBGPRINT(RT_DEBUG_TRACE, ("SYNC - AP changed N OperaionMode to %d\n", pAd->MlmeAux.AddHtInfo.AddHtInfo2.OperaionMode));
++ }
++#endif // DOT11_N_SUPPORT //
++
++ if (OPSTATUS_TEST_FLAG(pAd, fOP_STATUS_SHORT_PREAMBLE_INUSED) &&
++ ERP_IS_USE_BARKER_PREAMBLE(Erp))
++ {
++ MlmeSetTxPreamble(pAd, Rt802_11PreambleLong);
++ DBGPRINT(RT_DEBUG_TRACE, ("SYNC - AP forced to use LONG preamble\n"));
++ }
++
++ if (OPSTATUS_TEST_FLAG(pAd, fOP_STATUS_WMM_INUSED) &&
++ (EdcaParm.bValid == TRUE) &&
++ (EdcaParm.EdcaUpdateCount != pAd->CommonCfg.APEdcaParm.EdcaUpdateCount))
++ {
++ DBGPRINT(RT_DEBUG_TRACE, ("SYNC - AP change EDCA parameters(from %d to %d)\n",
++ pAd->CommonCfg.APEdcaParm.EdcaUpdateCount,
++ EdcaParm.EdcaUpdateCount));
++ AsicSetEdcaParm(pAd, &EdcaParm);
++ }
++
++ // copy QOS related information
++ NdisMoveMemory(&pAd->CommonCfg.APQbssLoad, &QbssLoad, sizeof(QBSS_LOAD_PARM));
++ NdisMoveMemory(&pAd->CommonCfg.APQosCapability, &QosCapability, sizeof(QOS_CAPABILITY_PARM));
++ }
++
++ // only INFRASTRUCTURE mode support power-saving feature
++ if ((INFRA_ON(pAd) && (pAd->StaCfg.Psm == PWR_SAVE)) || (pAd->CommonCfg.bAPSDForcePowerSave))
++ {
++ UCHAR FreeNumber;
++ // 1. AP has backlogged unicast-to-me frame, stay AWAKE, send PSPOLL
++ // 2. AP has backlogged broadcast/multicast frame and we want those frames, stay AWAKE
++ // 3. we have outgoing frames in TxRing or MgmtRing, better stay AWAKE
++ // 4. Psm change to PWR_SAVE, but AP not been informed yet, we better stay AWAKE
++ // 5. otherwise, put PHY back to sleep to save battery.
++ if (MessageToMe)
++ {
++ if (pAd->CommonCfg.bAPSDCapable && pAd->CommonCfg.APEdcaParm.bAPSDCapable &&
++ pAd->CommonCfg.bAPSDAC_BE && pAd->CommonCfg.bAPSDAC_BK && pAd->CommonCfg.bAPSDAC_VI && pAd->CommonCfg.bAPSDAC_VO)
++ {
++ pAd->CommonCfg.bNeedSendTriggerFrame = TRUE;
++ }
++ else
++ RT28XX_PS_POLL_ENQUEUE(pAd);
++ }
++ else if (BcastFlag && (DtimCount == 0) && OPSTATUS_TEST_FLAG(pAd, fOP_STATUS_RECEIVE_DTIM))
++ {
++ }
++ else if ((pAd->TxSwQueue[QID_AC_BK].Number != 0) ||
++ (pAd->TxSwQueue[QID_AC_BE].Number != 0) ||
++ (pAd->TxSwQueue[QID_AC_VI].Number != 0) ||
++ (pAd->TxSwQueue[QID_AC_VO].Number != 0) ||
++ (RTMPFreeTXDRequest(pAd, QID_AC_BK, TX_RING_SIZE - 1, &FreeNumber) != NDIS_STATUS_SUCCESS) ||
++ (RTMPFreeTXDRequest(pAd, QID_AC_BE, TX_RING_SIZE - 1, &FreeNumber) != NDIS_STATUS_SUCCESS) ||
++ (RTMPFreeTXDRequest(pAd, QID_AC_VI, TX_RING_SIZE - 1, &FreeNumber) != NDIS_STATUS_SUCCESS) ||
++ (RTMPFreeTXDRequest(pAd, QID_AC_VO, TX_RING_SIZE - 1, &FreeNumber) != NDIS_STATUS_SUCCESS) ||
++ (RTMPFreeTXDRequest(pAd, QID_MGMT, MGMT_RING_SIZE - 1, &FreeNumber) != NDIS_STATUS_SUCCESS))
++ {
++ // TODO: consider scheduled HCCA. might not be proper to use traditional DTIM-based power-saving scheme
++ // can we cheat here (i.e. just check MGMT & AC_BE) for better performance?
++ }
++ else
++ {
++ USHORT NextDtim = DtimCount;
++
++ if (NextDtim == 0)
++ NextDtim = DtimPeriod;
++
++ TbttNumToNextWakeUp = pAd->StaCfg.DefaultListenCount;
++ if (OPSTATUS_TEST_FLAG(pAd, fOP_STATUS_RECEIVE_DTIM) && (TbttNumToNextWakeUp > NextDtim))
++ TbttNumToNextWakeUp = NextDtim;
++
++ if (!OPSTATUS_TEST_FLAG(pAd, fOP_STATUS_DOZE))
++ {
++ AsicSleepThenAutoWakeup(pAd, TbttNumToNextWakeUp);
++ }
++ }
++ }
++ }
++ // not my BSSID, ignore it
++ }
++ // sanity check fail, ignore this frame
++}
++
++/*
++ ==========================================================================
++ Description:
++ Receive PROBE REQ from remote peer when operating in IBSS mode
++ ==========================================================================
++ */
++VOID PeerProbeReqAction(
++ IN PRTMP_ADAPTER pAd,
++ IN MLME_QUEUE_ELEM *Elem)
++{
++ UCHAR Addr2[MAC_ADDR_LEN];
++ CHAR Ssid[MAX_LEN_OF_SSID];
++ UCHAR SsidLen;
++#ifdef DOT11_N_SUPPORT
++ UCHAR HtLen, AddHtLen, NewExtLen;
++#endif // DOT11_N_SUPPORT //
++ HEADER_802_11 ProbeRspHdr;
++ NDIS_STATUS NStatus;
++ PUCHAR pOutBuffer = NULL;
++ ULONG FrameLen = 0;
++ LARGE_INTEGER FakeTimestamp;
++ UCHAR DsLen = 1, IbssLen = 2;
++ UCHAR LocalErpIe[3] = {IE_ERP, 1, 0};
++ BOOLEAN Privacy;
++ USHORT CapabilityInfo;
++ UCHAR RSNIe = IE_WPA;
++
++ if (! ADHOC_ON(pAd))
++ return;
++
++ if (PeerProbeReqSanity(pAd, Elem->Msg, Elem->MsgLen, Addr2, Ssid, &SsidLen))
++ {
++ if ((SsidLen == 0) || SSID_EQUAL(Ssid, SsidLen, pAd->CommonCfg.Ssid, pAd->CommonCfg.SsidLen))
++ {
++ // allocate and send out ProbeRsp frame
++ NStatus = MlmeAllocateMemory(pAd, &pOutBuffer); //Get an unused nonpaged memory
++ if (NStatus != NDIS_STATUS_SUCCESS)
++ return;
++
++ //pAd->StaCfg.AtimWin = 0; // ??????
++
++ Privacy = (pAd->StaCfg.WepStatus == Ndis802_11Encryption1Enabled) ||
++ (pAd->StaCfg.WepStatus == Ndis802_11Encryption2Enabled) ||
++ (pAd->StaCfg.WepStatus == Ndis802_11Encryption3Enabled);
++ CapabilityInfo = CAP_GENERATE(0, 1, Privacy, (pAd->CommonCfg.TxPreamble == Rt802_11PreambleShort), 0, 0);
++
++ MakeOutgoingFrame(pOutBuffer, &FrameLen,
++ sizeof(HEADER_802_11), &ProbeRspHdr,
++ TIMESTAMP_LEN, &FakeTimestamp,
++ 2, &pAd->CommonCfg.BeaconPeriod,
++ 2, &CapabilityInfo,
++ 1, &SsidIe,
++ 1, &pAd->CommonCfg.SsidLen,
++ pAd->CommonCfg.SsidLen, pAd->CommonCfg.Ssid,
++ 1, &SupRateIe,
++ 1, &pAd->StaActive.SupRateLen,
++ pAd->StaActive.SupRateLen, pAd->StaActive.SupRate,
++ 1, &DsIe,
++ 1, &DsLen,
++ 1, &pAd->CommonCfg.Channel,
++ 1, &IbssIe,
++ 1, &IbssLen,
++ 2, &pAd->StaActive.AtimWin,
++ END_OF_ARGS);
++
++ if (pAd->StaActive.ExtRateLen)
++ {
++ ULONG tmp;
++ MakeOutgoingFrame(pOutBuffer + FrameLen, &tmp,
++ 3, LocalErpIe,
++ 1, &ExtRateIe,
++ 1, &pAd->StaActive.ExtRateLen,
++ pAd->StaActive.ExtRateLen, &pAd->StaActive.ExtRate,
++ END_OF_ARGS);
++ FrameLen += tmp;
++ }
++
++ // If adhoc secruity is set for WPA-None, append the cipher suite IE
++ if (pAd->StaCfg.AuthMode == Ndis802_11AuthModeWPANone)
++ {
++ ULONG tmp;
++ MakeOutgoingFrame(pOutBuffer + FrameLen, &tmp,
++ 1, &RSNIe,
++ 1, &pAd->StaCfg.RSNIE_Len,
++ pAd->StaCfg.RSNIE_Len, pAd->StaCfg.RSN_IE,
++ END_OF_ARGS);
++ FrameLen += tmp;
++ }
++#ifdef DOT11_N_SUPPORT
++ if (pAd->CommonCfg.PhyMode >= PHY_11ABGN_MIXED)
++ {
++ ULONG TmpLen;
++ UCHAR BROADCOM[4] = {0x0, 0x90, 0x4c, 0x33};
++ HtLen = sizeof(pAd->CommonCfg.HtCapability);
++ AddHtLen = sizeof(pAd->CommonCfg.AddHTInfo);
++ NewExtLen = 1;
++ //New extension channel offset IE is included in Beacon, Probe Rsp or channel Switch Announcement Frame
++ if (pAd->bBroadComHT == TRUE)
++ {
++ MakeOutgoingFrame(pOutBuffer + FrameLen, &TmpLen,
++ 1, &WpaIe,
++ 4, &BROADCOM[0],
++ pAd->MlmeAux.HtCapabilityLen, &pAd->MlmeAux.HtCapability,
++ END_OF_ARGS);
++ }
++ else
++ {
++ MakeOutgoingFrame(pOutBuffer + FrameLen, &TmpLen,
++ 1, &HtCapIe,
++ 1, &HtLen,
++ sizeof(HT_CAPABILITY_IE), &pAd->CommonCfg.HtCapability,
++ 1, &AddHtInfoIe,
++ 1, &AddHtLen,
++ sizeof(ADD_HT_INFO_IE), &pAd->CommonCfg.AddHTInfo,
++ 1, &NewExtChanIe,
++ 1, &NewExtLen,
++ sizeof(NEW_EXT_CHAN_IE), &pAd->CommonCfg.NewExtChanOffset,
++ END_OF_ARGS);
++ }
++ FrameLen += TmpLen;
++ }
++#endif // DOT11_N_SUPPORT //
++ MiniportMMRequest(pAd, 0, pOutBuffer, FrameLen);
++ MlmeFreeMemory(pAd, pOutBuffer);
++ }
++ }
++}
++
++VOID BeaconTimeoutAtJoinAction(
++ IN PRTMP_ADAPTER pAd,
++ IN MLME_QUEUE_ELEM *Elem)
++{
++ USHORT Status;
++ DBGPRINT(RT_DEBUG_TRACE, ("SYNC - BeaconTimeoutAtJoinAction\n"));
++ pAd->Mlme.SyncMachine.CurrState = SYNC_IDLE;
++ Status = MLME_REJ_TIMEOUT;
++ MlmeEnqueue(pAd, MLME_CNTL_STATE_MACHINE, MT2_JOIN_CONF, 2, &Status);
++}
++
++/*
++ ==========================================================================
++ Description:
++ Scan timeout procedure. basically add channel index by 1 and rescan
++ ==========================================================================
++ */
++VOID ScanTimeoutAction(
++ IN PRTMP_ADAPTER pAd,
++ IN MLME_QUEUE_ELEM *Elem)
++{
++ pAd->MlmeAux.Channel = NextChannel(pAd, pAd->MlmeAux.Channel);
++
++ // Only one channel scanned for CISCO beacon request
++ if ((pAd->MlmeAux.ScanType == SCAN_CISCO_ACTIVE) ||
++ (pAd->MlmeAux.ScanType == SCAN_CISCO_PASSIVE) ||
++ (pAd->MlmeAux.ScanType == SCAN_CISCO_NOISE) ||
++ (pAd->MlmeAux.ScanType == SCAN_CISCO_CHANNEL_LOAD))
++ pAd->MlmeAux.Channel = 0;
++
++ // this routine will stop if pAd->MlmeAux.Channel == 0
++ ScanNextChannel(pAd);
++}
++
++/*
++ ==========================================================================
++ Description:
++ ==========================================================================
++ */
++VOID InvalidStateWhenScan(
++ IN PRTMP_ADAPTER pAd,
++ IN MLME_QUEUE_ELEM *Elem)
++{
++ USHORT Status;
++ DBGPRINT(RT_DEBUG_TRACE, ("AYNC - InvalidStateWhenScan(state=%ld). Reset SYNC machine\n", pAd->Mlme.SyncMachine.CurrState));
++ pAd->Mlme.SyncMachine.CurrState = SYNC_IDLE;
++ Status = MLME_STATE_MACHINE_REJECT;
++ MlmeEnqueue(pAd, MLME_CNTL_STATE_MACHINE, MT2_SCAN_CONF, 2, &Status);
++}
++
++/*
++ ==========================================================================
++ Description:
++ ==========================================================================
++ */
++VOID InvalidStateWhenJoin(
++ IN PRTMP_ADAPTER pAd,
++ IN MLME_QUEUE_ELEM *Elem)
++{
++ USHORT Status;
++ DBGPRINT(RT_DEBUG_TRACE, ("InvalidStateWhenJoin(state=%ld). Reset SYNC machine\n", pAd->Mlme.SyncMachine.CurrState));
++ pAd->Mlme.SyncMachine.CurrState = SYNC_IDLE;
++ Status = MLME_STATE_MACHINE_REJECT;
++ MlmeEnqueue(pAd, MLME_CNTL_STATE_MACHINE, MT2_JOIN_CONF, 2, &Status);
++}
++
++/*
++ ==========================================================================
++ Description:
++ ==========================================================================
++ */
++VOID InvalidStateWhenStart(
++ IN PRTMP_ADAPTER pAd,
++ IN MLME_QUEUE_ELEM *Elem)
++{
++ USHORT Status;
++ DBGPRINT(RT_DEBUG_TRACE, ("InvalidStateWhenStart(state=%ld). Reset SYNC machine\n", pAd->Mlme.SyncMachine.CurrState));
++ pAd->Mlme.SyncMachine.CurrState = SYNC_IDLE;
++ Status = MLME_STATE_MACHINE_REJECT;
++ MlmeEnqueue(pAd, MLME_CNTL_STATE_MACHINE, MT2_START_CONF, 2, &Status);
++}
++
++/*
++ ==========================================================================
++ Description:
++
++ IRQL = DISPATCH_LEVEL
++
++ ==========================================================================
++ */
++VOID EnqueuePsPoll(
++ IN PRTMP_ADAPTER pAd)
++{
++#ifdef RALINK_ATE
++ if (ATE_ON(pAd))
++ {
++ return;
++ }
++#endif // RALINK_ATE //
++
++
++ if (pAd->StaCfg.WindowsPowerMode == Ndis802_11PowerModeLegacy_PSP)
++ pAd->PsPollFrame.FC.PwrMgmt = PWR_SAVE;
++ MiniportMMRequest(pAd, 0, (PUCHAR)&pAd->PsPollFrame, sizeof(PSPOLL_FRAME));
++}
++
++
++/*
++ ==========================================================================
++ Description:
++ ==========================================================================
++ */
++VOID EnqueueProbeRequest(
++ IN PRTMP_ADAPTER pAd)
++{
++ NDIS_STATUS NState;
++ PUCHAR pOutBuffer;
++ ULONG FrameLen = 0;
++ HEADER_802_11 Hdr80211;
++
++ DBGPRINT(RT_DEBUG_TRACE, ("force out a ProbeRequest ...\n"));
++
++ NState = MlmeAllocateMemory(pAd, &pOutBuffer); //Get an unused nonpaged memory
++ if (NState == NDIS_STATUS_SUCCESS)
++ {
++ MgtMacHeaderInit(pAd, &Hdr80211, SUBTYPE_PROBE_REQ, 0, BROADCAST_ADDR, BROADCAST_ADDR);
++
++ // this ProbeRequest explicitly specify SSID to reduce unwanted ProbeResponse
++ MakeOutgoingFrame(pOutBuffer, &FrameLen,
++ sizeof(HEADER_802_11), &Hdr80211,
++ 1, &SsidIe,
++ 1, &pAd->CommonCfg.SsidLen,
++ pAd->CommonCfg.SsidLen, pAd->CommonCfg.Ssid,
++ 1, &SupRateIe,
++ 1, &pAd->StaActive.SupRateLen,
++ pAd->StaActive.SupRateLen, pAd->StaActive.SupRate,
++ END_OF_ARGS);
++ MiniportMMRequest(pAd, 0, pOutBuffer, FrameLen);
++ MlmeFreeMemory(pAd, pOutBuffer);
++ }
++
++}
++
++#ifdef DOT11_N_SUPPORT
++#ifdef DOT11N_DRAFT3
++VOID BuildEffectedChannelList(
++ IN PRTMP_ADAPTER pAd)
++{
++ UCHAR EChannel[11];
++ UCHAR i, j, k;
++ UCHAR UpperChannel = 0, LowerChannel = 0;
++
++ RTMPZeroMemory(EChannel, 11);
++ i = 0;
++ // Find upper channel and lower channel.
++ if (pAd->CommonCfg.CentralChannel < pAd->CommonCfg.Channel)
++ {
++ UpperChannel = pAd->CommonCfg.Channel;
++ LowerChannel = pAd->CommonCfg.CentralChannel;
++ }
++ else if (pAd->CommonCfg.CentralChannel > pAd->CommonCfg.Channel)
++ {
++ UpperChannel = pAd->CommonCfg.CentralChannel;
++ LowerChannel = pAd->CommonCfg.Channel;
++ }
++ else
++ {
++ return;
++ }
++
++ // Record channels that is below lower channel..
++ if (LowerChannel > 1)
++ {
++ EChannel[0] = LowerChannel - 1;
++ i = 1;
++ if (LowerChannel > 2)
++ {
++ EChannel[1] = LowerChannel - 2;
++ i = 2;
++ if (LowerChannel > 3)
++ {
++ EChannel[2] = LowerChannel - 3;
++ i = 3;
++ }
++ }
++ }
++ // Record channels that is between lower channel and upper channel.
++ for (k = LowerChannel;k < UpperChannel;k++)
++ {
++ EChannel[i] = k;
++ i++;
++ }
++ // Record channels that is above upper channel..
++ if (LowerChannel < 11)
++ {
++ EChannel[i] = UpperChannel + 1;
++ i++;
++ if (LowerChannel < 10)
++ {
++ EChannel[i] = LowerChannel + 2;
++ i++;
++ if (LowerChannel < 9)
++ {
++ EChannel[i] = LowerChannel + 3;
++ i++;
++ }
++ }
++ }
++ //
++ for (j = 0;j < i;j++)
++ {
++ for (k = 0;k < pAd->ChannelListNum;k++)
++ {
++ if (pAd->ChannelList[k].Channel == EChannel[j])
++ {
++ pAd->ChannelList[k].bEffectedChannel = TRUE;
++ DBGPRINT(RT_DEBUG_TRACE,(" EffectedChannel( =%d)\n", EChannel[j]));
++ break;
++ }
++ }
++ }
++}
++#endif // DOT11N_DRAFT3 //
++#endif // DOT11_N_SUPPORT //
++
++BOOLEAN ScanRunning(
++ IN PRTMP_ADAPTER pAd)
++{
++ return (pAd->Mlme.SyncMachine.CurrState == SCAN_LISTEN) ? TRUE : FALSE;
++}
++
+--- /dev/null
++++ b/drivers/staging/rt2870/sta/wpa.c
+@@ -0,0 +1,2107 @@
++/*
++ *************************************************************************
++ * Ralink Tech Inc.
++ * 5F., No.36, Taiyuan St., Jhubei City,
++ * Hsinchu County 302,
++ * Taiwan, R.O.C.
++ *
++ * (c) Copyright 2002-2007, Ralink Technology, Inc.
++ *
++ * This program is free software; you can redistribute it and/or modify *
++ * it under the terms of the GNU General Public License as published by *
++ * the Free Software Foundation; either version 2 of the License, or *
++ * (at your option) any later version. *
++ * *
++ * This program is distributed in the hope that it will be useful, *
++ * but WITHOUT ANY WARRANTY; without even the implied warranty of *
++ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the *
++ * GNU General Public License for more details. *
++ * *
++ * You should have received a copy of the GNU General Public License *
++ * along with this program; if not, write to the *
++ * Free Software Foundation, Inc., *
++ * 59 Temple Place - Suite 330, Boston, MA 02111-1307, USA. *
++ * *
++ *************************************************************************
++
++ Module Name:
++ wpa.c
++
++ Abstract:
++
++ Revision History:
++ Who When What
++ -------- ---------- ----------------------------------------------
++ Jan Lee 03-07-22 Initial
++ Paul Lin 03-11-28 Modify for supplicant
++*/
++#include "../rt_config.h"
++
++#define WPARSNIE 0xdd
++#define WPA2RSNIE 0x30
++
++//extern UCHAR BIT8[];
++UCHAR CipherWpaPskTkip[] = {
++ 0xDD, 0x16, // RSN IE
++ 0x00, 0x50, 0xf2, 0x01, // oui
++ 0x01, 0x00, // Version
++ 0x00, 0x50, 0xf2, 0x02, // Multicast
++ 0x01, 0x00, // Number of unicast
++ 0x00, 0x50, 0xf2, 0x02, // unicast
++ 0x01, 0x00, // number of authentication method
++ 0x00, 0x50, 0xf2, 0x02 // authentication
++ };
++UCHAR CipherWpaPskTkipLen = (sizeof(CipherWpaPskTkip) / sizeof(UCHAR));
++
++UCHAR CipherWpaPskAes[] = {
++ 0xDD, 0x16, // RSN IE
++ 0x00, 0x50, 0xf2, 0x01, // oui
++ 0x01, 0x00, // Version
++ 0x00, 0x50, 0xf2, 0x04, // Multicast
++ 0x01, 0x00, // Number of unicast
++ 0x00, 0x50, 0xf2, 0x04, // unicast
++ 0x01, 0x00, // number of authentication method
++ 0x00, 0x50, 0xf2, 0x02 // authentication
++ };
++UCHAR CipherWpaPskAesLen = (sizeof(CipherWpaPskAes) / sizeof(UCHAR));
++
++UCHAR CipherSuiteCiscoCCKM[] = {
++ 0xDD, 0x16, // RSN IE
++ 0x00, 0x50, 0xf2, 0x01, // oui
++ 0x01, 0x00, // Version
++ 0x00, 0x40, 0x96, 0x01, // Multicast
++ 0x01, 0x00, // Number of uicast
++ 0x00, 0x40, 0x96, 0x01, // unicast
++ 0x01, 0x00, // number of authentication method
++ 0x00, 0x40, 0x96, 0x00 // Authentication
++ };
++UCHAR CipherSuiteCiscoCCKMLen = (sizeof(CipherSuiteCiscoCCKM) / sizeof(UCHAR));
++
++UCHAR CipherSuiteCiscoCCKM24[] = {
++ 0xDD, 0x18, // RSN IE
++ 0x00, 0x50, 0xf2, 0x01, // oui
++ 0x01, 0x00, // Version
++ 0x00, 0x40, 0x96, 0x01, // Multicast
++ 0x01, 0x00, // Number of uicast
++ 0x00, 0x40, 0x96, 0x01, // unicast
++ 0x01, 0x00, // number of authentication method
++ 0x00, 0x40, 0x96, 0x00,
++ 0x28, 0x00// Authentication
++ };
++
++UCHAR CipherSuiteCiscoCCKM24Len = (sizeof(CipherSuiteCiscoCCKM24) / sizeof(UCHAR));
++
++UCHAR CipherSuiteCCXTkip[] = {
++ 0xDD, 0x16, // RSN IE
++ 0x00, 0x50, 0xf2, 0x01, // oui
++ 0x01, 0x00, // Version
++ 0x00, 0x50, 0xf2, 0x02, // Multicast
++ 0x01, 0x00, // Number of unicast
++ 0x00, 0x50, 0xf2, 0x02, // unicast
++ 0x01, 0x00, // number of authentication method
++ 0x00, 0x50, 0xf2, 0x01 // authentication
++ };
++UCHAR CipherSuiteCCXTkipLen = (sizeof(CipherSuiteCCXTkip) / sizeof(UCHAR));
++
++UCHAR CCX_LLC_HDR[] = {0xAA, 0xAA, 0x03, 0x00, 0x40, 0x96, 0x00, 0x02};
++UCHAR LLC_NORMAL[] = {0xAA, 0xAA, 0x03, 0x00, 0x00, 0x00};
++
++UCHAR EAPOL_FRAME[] = {0x88, 0x8E};
++
++BOOLEAN CheckRSNIE(
++ IN PRTMP_ADAPTER pAd,
++ IN PUCHAR pData,
++ IN UCHAR DataLen,
++ OUT UCHAR *Offset);
++
++void inc_byte_array(UCHAR *counter, int len);
++
++/*
++ ========================================================================
++
++ Routine Description:
++ Classify WPA EAP message type
++
++ Arguments:
++ EAPType Value of EAP message type
++ MsgType Internal Message definition for MLME state machine
++
++ Return Value:
++ TRUE Found appropriate message type
++ FALSE No appropriate message type
++
++ IRQL = DISPATCH_LEVEL
++
++ Note:
++ All these constants are defined in wpa.h
++ For supplicant, there is only EAPOL Key message avaliable
++
++ ========================================================================
++*/
++BOOLEAN WpaMsgTypeSubst(
++ IN UCHAR EAPType,
++ OUT INT *MsgType)
++{
++ switch (EAPType)
++ {
++ case EAPPacket:
++ *MsgType = MT2_EAPPacket;
++ break;
++ case EAPOLStart:
++ *MsgType = MT2_EAPOLStart;
++ break;
++ case EAPOLLogoff:
++ *MsgType = MT2_EAPOLLogoff;
++ break;
++ case EAPOLKey:
++ *MsgType = MT2_EAPOLKey;
++ break;
++ case EAPOLASFAlert:
++ *MsgType = MT2_EAPOLASFAlert;
++ break;
++ default:
++ return FALSE;
++ }
++ return TRUE;
++}
++
++/*
++ ==========================================================================
++ Description:
++ association state machine init, including state transition and timer init
++ Parameters:
++ S - pointer to the association state machine
++ ==========================================================================
++ */
++VOID WpaPskStateMachineInit(
++ IN PRTMP_ADAPTER pAd,
++ IN STATE_MACHINE *S,
++ OUT STATE_MACHINE_FUNC Trans[])
++{
++ StateMachineInit(S, Trans, MAX_WPA_PSK_STATE, MAX_WPA_PSK_MSG, (STATE_MACHINE_FUNC)Drop, WPA_PSK_IDLE, WPA_MACHINE_BASE);
++ StateMachineSetAction(S, WPA_PSK_IDLE, MT2_EAPOLKey, (STATE_MACHINE_FUNC)WpaEAPOLKeyAction);
++}
++
++/*
++ ==========================================================================
++ Description:
++ This is state machine function.
++ When receiving EAPOL packets which is for 802.1x key management.
++ Use both in WPA, and WPAPSK case.
++ In this function, further dispatch to different functions according to the received packet. 3 categories are :
++ 1. normal 4-way pairwisekey and 2-way groupkey handshake
++ 2. MIC error (Countermeasures attack) report packet from STA.
++ 3. Request for pairwise/group key update from STA
++ Return:
++ ==========================================================================
++*/
++VOID WpaEAPOLKeyAction(
++ IN PRTMP_ADAPTER pAd,
++ IN MLME_QUEUE_ELEM *Elem)
++
++{
++ INT MsgType = EAPOL_MSG_INVALID;
++ PKEY_DESCRIPTER pKeyDesc;
++ PHEADER_802_11 pHeader; //red
++ UCHAR ZeroReplay[LEN_KEY_DESC_REPLAY];
++ UCHAR EapolVr;
++ KEY_INFO peerKeyInfo;
++
++ DBGPRINT(RT_DEBUG_TRACE, ("-----> WpaEAPOLKeyAction\n"));
++
++ // Get 802.11 header first
++ pHeader = (PHEADER_802_11) Elem->Msg;
++
++ // Get EAPoL-Key Descriptor
++ pKeyDesc = (PKEY_DESCRIPTER) &Elem->Msg[(LENGTH_802_11 + LENGTH_802_1_H + LENGTH_EAPOL_H)];
++
++ NdisZeroMemory((PUCHAR)&peerKeyInfo, sizeof(peerKeyInfo));
++ NdisMoveMemory((PUCHAR)&peerKeyInfo, (PUCHAR)&pKeyDesc->KeyInfo, sizeof(KEY_INFO));
++
++ *((USHORT *)&peerKeyInfo) = cpu2le16(*((USHORT *)&peerKeyInfo));
++
++
++ // 1. Check EAPOL frame version and type
++ EapolVr = (UCHAR) Elem->Msg[LENGTH_802_11+LENGTH_802_1_H];
++
++ if (((EapolVr != EAPOL_VER) && (EapolVr != EAPOL_VER2)) || ((pKeyDesc->Type != WPA1_KEY_DESC) && (pKeyDesc->Type != WPA2_KEY_DESC)))
++ {
++ DBGPRINT(RT_DEBUG_ERROR, ("Key descripter does not match with WPA rule\n"));
++ return;
++ }
++
++ // First validate replay counter, only accept message with larger replay counter
++ // Let equal pass, some AP start with all zero replay counter
++ NdisZeroMemory(ZeroReplay, LEN_KEY_DESC_REPLAY);
++
++ if((RTMPCompareMemory(pKeyDesc->ReplayCounter, pAd->StaCfg.ReplayCounter, LEN_KEY_DESC_REPLAY) != 1) &&
++ (RTMPCompareMemory(pKeyDesc->ReplayCounter, ZeroReplay, LEN_KEY_DESC_REPLAY) != 0))
++ {
++ DBGPRINT(RT_DEBUG_ERROR, (" ReplayCounter not match \n"));
++ return;
++ }
++
++ // Process WPA2PSK frame
++ if(pAd->StaCfg.AuthMode == Ndis802_11AuthModeWPA2PSK)
++ {
++ if((peerKeyInfo.KeyType == PAIRWISEKEY) &&
++ (peerKeyInfo.EKD_DL == 0) &&
++ (peerKeyInfo.KeyAck == 1) &&
++ (peerKeyInfo.KeyMic == 0) &&
++ (peerKeyInfo.Secure == 0) &&
++ (peerKeyInfo.Error == 0) &&
++ (peerKeyInfo.Request == 0))
++ {
++ MsgType = EAPOL_PAIR_MSG_1;
++ DBGPRINT(RT_DEBUG_TRACE, ("Receive EAPOL Key Pairwise Message 1\n"));
++ } else if((peerKeyInfo.KeyType == PAIRWISEKEY) &&
++ (peerKeyInfo.EKD_DL == 1) &&
++ (peerKeyInfo.KeyAck == 1) &&
++ (peerKeyInfo.KeyMic == 1) &&
++ (peerKeyInfo.Secure == 1) &&
++ (peerKeyInfo.Error == 0) &&
++ (peerKeyInfo.Request == 0))
++ {
++ MsgType = EAPOL_PAIR_MSG_3;
++ DBGPRINT(RT_DEBUG_TRACE, ("Receive EAPOL Key Pairwise Message 3\n"));
++ } else if((peerKeyInfo.KeyType == GROUPKEY) &&
++ (peerKeyInfo.EKD_DL == 1) &&
++ (peerKeyInfo.KeyAck == 1) &&
++ (peerKeyInfo.KeyMic == 1) &&
++ (peerKeyInfo.Secure == 1) &&
++ (peerKeyInfo.Error == 0) &&
++ (peerKeyInfo.Request == 0))
++ {
++ MsgType = EAPOL_GROUP_MSG_1;
++ DBGPRINT(RT_DEBUG_TRACE, ("Receive EAPOL Key Group Message 1\n"));
++ }
++
++ // We will assume link is up (assoc suceess and port not secured).
++ // All state has to be able to process message from previous state
++ switch(pAd->StaCfg.WpaState)
++ {
++ case SS_START:
++ if(MsgType == EAPOL_PAIR_MSG_1)
++ {
++ Wpa2PairMsg1Action(pAd, Elem);
++ pAd->StaCfg.WpaState = SS_WAIT_MSG_3;
++ }
++ break;
++
++ case SS_WAIT_MSG_3:
++ if(MsgType == EAPOL_PAIR_MSG_1)
++ {
++ Wpa2PairMsg1Action(pAd, Elem);
++ pAd->StaCfg.WpaState = SS_WAIT_MSG_3;
++ }
++ else if(MsgType == EAPOL_PAIR_MSG_3)
++ {
++ Wpa2PairMsg3Action(pAd, Elem);
++ pAd->StaCfg.WpaState = SS_WAIT_GROUP;
++ }
++ break;
++
++ case SS_WAIT_GROUP: // When doing group key exchange
++ case SS_FINISH: // This happened when update group key
++ if(MsgType == EAPOL_PAIR_MSG_1)
++ {
++ // Reset port secured variable
++ pAd->StaCfg.PortSecured = WPA_802_1X_PORT_NOT_SECURED;
++ Wpa2PairMsg1Action(pAd, Elem);
++ pAd->StaCfg.WpaState = SS_WAIT_MSG_3;
++ }
++ else if(MsgType == EAPOL_PAIR_MSG_3)
++ {
++ // Reset port secured variable
++ pAd->StaCfg.PortSecured = WPA_802_1X_PORT_NOT_SECURED;
++ Wpa2PairMsg3Action(pAd, Elem);
++ pAd->StaCfg.WpaState = SS_WAIT_GROUP;
++ }
++ else if(MsgType == EAPOL_GROUP_MSG_1)
++ {
++ WpaGroupMsg1Action(pAd, Elem);
++ pAd->StaCfg.WpaState = SS_FINISH;
++ }
++ break;
++
++ default:
++ break;
++ }
++ }
++ // Process WPAPSK Frame
++ // Classify message Type, either pairwise message 1, 3, or group message 1 for supplicant
++ else if(pAd->StaCfg.AuthMode == Ndis802_11AuthModeWPAPSK)
++ {
++ if((peerKeyInfo.KeyType == PAIRWISEKEY) &&
++ (peerKeyInfo.KeyIndex == 0) &&
++ (peerKeyInfo.KeyAck == 1) &&
++ (peerKeyInfo.KeyMic == 0) &&
++ (peerKeyInfo.Secure == 0) &&
++ (peerKeyInfo.Error == 0) &&
++ (peerKeyInfo.Request == 0))
++ {
++ MsgType = EAPOL_PAIR_MSG_1;
++ DBGPRINT(RT_DEBUG_TRACE, ("Receive EAPOL Key Pairwise Message 1\n"));
++ }
++ else if((peerKeyInfo.KeyType == PAIRWISEKEY) &&
++ (peerKeyInfo.KeyIndex == 0) &&
++ (peerKeyInfo.KeyAck == 1) &&
++ (peerKeyInfo.KeyMic == 1) &&
++ (peerKeyInfo.Secure == 0) &&
++ (peerKeyInfo.Error == 0) &&
++ (peerKeyInfo.Request == 0))
++ {
++ MsgType = EAPOL_PAIR_MSG_3;
++ DBGPRINT(RT_DEBUG_TRACE, ("Receive EAPOL Key Pairwise Message 3\n"));
++ }
++ else if((peerKeyInfo.KeyType == GROUPKEY) &&
++ (peerKeyInfo.KeyIndex != 0) &&
++ (peerKeyInfo.KeyAck == 1) &&
++ (peerKeyInfo.KeyMic == 1) &&
++ (peerKeyInfo.Secure == 1) &&
++ (peerKeyInfo.Error == 0) &&
++ (peerKeyInfo.Request == 0))
++ {
++ MsgType = EAPOL_GROUP_MSG_1;
++ DBGPRINT(RT_DEBUG_TRACE, ("Receive EAPOL Key Group Message 1\n"));
++ }
++
++ // We will assume link is up (assoc suceess and port not secured).
++ // All state has to be able to process message from previous state
++ switch(pAd->StaCfg.WpaState)
++ {
++ case SS_START:
++ if(MsgType == EAPOL_PAIR_MSG_1)
++ {
++ WpaPairMsg1Action(pAd, Elem);
++ pAd->StaCfg.WpaState = SS_WAIT_MSG_3;
++ }
++ break;
++
++ case SS_WAIT_MSG_3:
++ if(MsgType == EAPOL_PAIR_MSG_1)
++ {
++ WpaPairMsg1Action(pAd, Elem);
++ pAd->StaCfg.WpaState = SS_WAIT_MSG_3;
++ }
++ else if(MsgType == EAPOL_PAIR_MSG_3)
++ {
++ WpaPairMsg3Action(pAd, Elem);
++ pAd->StaCfg.WpaState = SS_WAIT_GROUP;
++ }
++ break;
++
++ case SS_WAIT_GROUP: // When doing group key exchange
++ case SS_FINISH: // This happened when update group key
++ if(MsgType == EAPOL_PAIR_MSG_1)
++ {
++ WpaPairMsg1Action(pAd, Elem);
++ pAd->StaCfg.WpaState = SS_WAIT_MSG_3;
++ // Reset port secured variable
++ pAd->StaCfg.PortSecured = WPA_802_1X_PORT_NOT_SECURED;
++ }
++ else if(MsgType == EAPOL_PAIR_MSG_3)
++ {
++ WpaPairMsg3Action(pAd, Elem);
++ pAd->StaCfg.WpaState = SS_WAIT_GROUP;
++ // Reset port secured variable
++ pAd->StaCfg.PortSecured = WPA_802_1X_PORT_NOT_SECURED;
++ }
++ else if(MsgType == EAPOL_GROUP_MSG_1)
++ {
++ WpaGroupMsg1Action(pAd, Elem);
++ pAd->StaCfg.WpaState = SS_FINISH;
++ }
++ break;
++
++ default:
++ break;
++ }
++ }
++
++ DBGPRINT(RT_DEBUG_TRACE, ("<----- WpaEAPOLKeyAction\n"));
++}
++
++/*
++ ========================================================================
++
++ Routine Description:
++ Process Pairwise key 4-way handshaking
++
++ Arguments:
++ pAd Pointer to our adapter
++ Elem Message body
++
++ Return Value:
++ None
++
++ Note:
++
++ ========================================================================
++*/
++VOID WpaPairMsg1Action(
++ IN PRTMP_ADAPTER pAd,
++ IN MLME_QUEUE_ELEM *Elem)
++{
++ PHEADER_802_11 pHeader;
++ UCHAR *mpool, *PTK, *digest;
++ PUCHAR pOutBuffer = NULL;
++ UCHAR Header802_3[14];
++ ULONG FrameLen = 0;
++ PEAPOL_PACKET pMsg1;
++ EAPOL_PACKET Packet;
++ UCHAR Mic[16];
++
++ DBGPRINT(RT_DEBUG_TRACE, ("WpaPairMsg1Action ----->\n"));
++
++ // allocate memory pool
++ os_alloc_mem(pAd, (PUCHAR *)&mpool, 256);
++
++ if (mpool == NULL)
++ return;
++
++ // PTK Len = 80.
++ PTK = (UCHAR *) ROUND_UP(mpool, 4);
++ // digest Len = 80.
++ digest = (UCHAR *) ROUND_UP(PTK + 80, 4);
++
++ pHeader = (PHEADER_802_11) Elem->Msg;
++
++ // Process message 1 from authenticator
++ pMsg1 = (PEAPOL_PACKET) &Elem->Msg[LENGTH_802_11 + LENGTH_802_1_H];
++
++ // 1. Save Replay counter, it will use to verify message 3 and construct message 2
++ NdisMoveMemory(pAd->StaCfg.ReplayCounter, pMsg1->KeyDesc.ReplayCounter, LEN_KEY_DESC_REPLAY);
++
++ // 2. Save ANonce
++ NdisMoveMemory(pAd->StaCfg.ANonce, pMsg1->KeyDesc.KeyNonce, LEN_KEY_DESC_NONCE);
++
++ // Generate random SNonce
++ GenRandom(pAd, pAd->CurrentAddress, pAd->StaCfg.SNonce);
++
++ // Calc PTK(ANonce, SNonce)
++ WpaCountPTK(pAd,
++ pAd->StaCfg.PMK,
++ pAd->StaCfg.ANonce,
++ pAd->CommonCfg.Bssid,
++ pAd->StaCfg.SNonce,
++ pAd->CurrentAddress,
++ PTK,
++ LEN_PTK);
++
++ // Save key to PTK entry
++ NdisMoveMemory(pAd->StaCfg.PTK, PTK, LEN_PTK);
++
++ // init 802.3 header and Fill Packet
++ MAKE_802_3_HEADER(Header802_3, pAd->CommonCfg.Bssid, pAd->CurrentAddress, EAPOL);
++
++ // Zero Message 2 body
++ NdisZeroMemory(&Packet, sizeof(Packet));
++ Packet.ProVer = EAPOL_VER;
++ Packet.ProType = EAPOLKey;
++ //
++ // Message 2 as EAPOL-Key(0,1,0,0,0,P,0,SNonce,MIC,RSN IE)
++ //
++ Packet.KeyDesc.Type = WPA1_KEY_DESC;
++ // 1. Key descriptor version and appropriate RSN IE
++ if(pAd->StaCfg.WepStatus == Ndis802_11Encryption3Enabled)
++ {
++ Packet.KeyDesc.KeyInfo.KeyDescVer = 2;
++ }
++ else // TKIP
++ {
++ Packet.KeyDesc.KeyInfo.KeyDescVer = 1;
++ }
++
++ // fill in Data Material and its length
++ Packet.KeyDesc.KeyData[0] = IE_WPA;
++ Packet.KeyDesc.KeyData[1] = pAd->StaCfg.RSNIE_Len;
++ Packet.KeyDesc.KeyDataLen[1] = pAd->StaCfg.RSNIE_Len + 2;
++ NdisMoveMemory(&Packet.KeyDesc.KeyData[2], pAd->StaCfg.RSN_IE, pAd->StaCfg.RSNIE_Len);
++
++ // Update packet length after decide Key data payload
++ Packet.Body_Len[1] = sizeof(KEY_DESCRIPTER) - MAX_LEN_OF_RSNIE + Packet.KeyDesc.KeyDataLen[1];
++
++ // Update Key length
++ Packet.KeyDesc.KeyLength[0] = pMsg1->KeyDesc.KeyLength[0];
++ Packet.KeyDesc.KeyLength[1] = pMsg1->KeyDesc.KeyLength[1];
++ // 2. Key Type PeerKey
++ Packet.KeyDesc.KeyInfo.KeyType = PAIRWISEKEY;
++
++ // 3. KeyMic field presented
++ Packet.KeyDesc.KeyInfo.KeyMic = 1;
++
++ //Convert to little-endian format.
++ *((USHORT *)&Packet.KeyDesc.KeyInfo) = cpu2le16(*((USHORT *)&Packet.KeyDesc.KeyInfo));
++
++
++ // 4. Fill SNonce
++ NdisMoveMemory(Packet.KeyDesc.KeyNonce, pAd->StaCfg.SNonce, LEN_KEY_DESC_NONCE);
++
++ // 5. Key Replay Count
++ NdisMoveMemory(Packet.KeyDesc.ReplayCounter, pAd->StaCfg.ReplayCounter, LEN_KEY_DESC_REPLAY);
++
++ // Send EAPOL(0, 1, 0, 0, 0, P, 0, SNonce, MIC, RSN_IE)
++ // Out buffer for transmitting message 2
++ MlmeAllocateMemory(pAd, (PUCHAR *)&pOutBuffer); // allocate memory
++ if(pOutBuffer == NULL)
++ {
++ os_free_mem(pAd, mpool);
++ return;
++ }
++ // Prepare EAPOL frame for MIC calculation
++ // Be careful, only EAPOL frame is counted for MIC calculation
++ MakeOutgoingFrame(pOutBuffer, &FrameLen,
++ Packet.Body_Len[1] + 4, &Packet,
++ END_OF_ARGS);
++
++ // 6. Prepare and Fill MIC value
++ NdisZeroMemory(Mic, sizeof(Mic));
++ if(pAd->StaCfg.WepStatus == Ndis802_11Encryption3Enabled)
++ { // AES
++
++ HMAC_SHA1(pOutBuffer, FrameLen, PTK, LEN_EAP_MICK, digest);
++ NdisMoveMemory(Mic, digest, LEN_KEY_DESC_MIC);
++ }
++ else
++ { // TKIP
++ hmac_md5(PTK, LEN_EAP_MICK, pOutBuffer, FrameLen, Mic);
++ }
++ NdisMoveMemory(Packet.KeyDesc.KeyMic, Mic, LEN_KEY_DESC_MIC);
++
++ //hex_dump("MIC", Mic, LEN_KEY_DESC_MIC);
++
++ MakeOutgoingFrame(pOutBuffer, &FrameLen,
++ LENGTH_802_3, &Header802_3,
++ Packet.Body_Len[1] + 4, &Packet,
++ END_OF_ARGS);
++
++
++ // 5. Copy frame to Tx ring and send Msg 2 to authenticator
++ RTMPToWirelessSta(pAd, Header802_3, LENGTH_802_3, (PUCHAR)&Packet, Packet.Body_Len[1] + 4, TRUE);
++
++ MlmeFreeMemory(pAd, (PUCHAR)pOutBuffer);
++ os_free_mem(pAd, (PUCHAR)mpool);
++
++ DBGPRINT(RT_DEBUG_TRACE, ("WpaPairMsg1Action <-----\n"));
++}
++
++VOID Wpa2PairMsg1Action(
++ IN PRTMP_ADAPTER pAd,
++ IN MLME_QUEUE_ELEM *Elem)
++{
++ PHEADER_802_11 pHeader;
++ UCHAR *mpool, *PTK, *digest;
++ PUCHAR pOutBuffer = NULL;
++ UCHAR Header802_3[14];
++ ULONG FrameLen = 0;
++ PEAPOL_PACKET pMsg1;
++ EAPOL_PACKET Packet;
++ UCHAR Mic[16];
++
++ DBGPRINT(RT_DEBUG_TRACE, ("Wpa2PairMsg1Action ----->\n"));
++
++ // allocate memory pool
++ os_alloc_mem(pAd, (PUCHAR *)&mpool, 256);
++
++ if (mpool == NULL)
++ return;
++
++ // PTK Len = 80.
++ PTK = (UCHAR *) ROUND_UP(mpool, 4);
++ // digest Len = 80.
++ digest = (UCHAR *) ROUND_UP(PTK + 80, 4);
++
++ pHeader = (PHEADER_802_11) Elem->Msg;
++
++ // Process message 1 from authenticator
++ pMsg1 = (PEAPOL_PACKET) &Elem->Msg[LENGTH_802_11 + LENGTH_802_1_H];
++
++ // 1. Save Replay counter, it will use to verify message 3 and construct message 2
++ NdisMoveMemory(pAd->StaCfg.ReplayCounter, pMsg1->KeyDesc.ReplayCounter, LEN_KEY_DESC_REPLAY);
++
++ // 2. Save ANonce
++ NdisMoveMemory(pAd->StaCfg.ANonce, pMsg1->KeyDesc.KeyNonce, LEN_KEY_DESC_NONCE);
++
++ // Generate random SNonce
++ GenRandom(pAd, pAd->CurrentAddress, pAd->StaCfg.SNonce);
++
++ if(pMsg1->KeyDesc.KeyDataLen[1] > 0 )
++ {
++ // cached PMKID
++ }
++
++ // Calc PTK(ANonce, SNonce)
++ WpaCountPTK(pAd,
++ pAd->StaCfg.PMK,
++ pAd->StaCfg.ANonce,
++ pAd->CommonCfg.Bssid,
++ pAd->StaCfg.SNonce,
++ pAd->CurrentAddress,
++ PTK,
++ LEN_PTK);
++
++ // Save key to PTK entry
++ NdisMoveMemory(pAd->StaCfg.PTK, PTK, LEN_PTK);
++
++ // init 802.3 header and Fill Packet
++ MAKE_802_3_HEADER(Header802_3, pAd->CommonCfg.Bssid, pAd->CurrentAddress, EAPOL);
++
++ // Zero message 2 body
++ NdisZeroMemory(&Packet, sizeof(Packet));
++ Packet.ProVer = EAPOL_VER;
++ Packet.ProType = EAPOLKey;
++ //
++ // Message 2 as EAPOL-Key(0,1,0,0,0,P,0,SNonce,MIC,RSN IE)
++ //
++ Packet.KeyDesc.Type = WPA2_KEY_DESC;
++
++ // 1. Key descriptor version and appropriate RSN IE
++ if(pAd->StaCfg.WepStatus == Ndis802_11Encryption3Enabled)
++ {
++ Packet.KeyDesc.KeyInfo.KeyDescVer = 2;
++ }
++ else // TKIP
++ {
++ Packet.KeyDesc.KeyInfo.KeyDescVer = 1;
++ }
++
++ // fill in Data Material and its length
++ Packet.KeyDesc.KeyData[0] = IE_WPA2;
++ Packet.KeyDesc.KeyData[1] = pAd->StaCfg.RSNIE_Len;
++ Packet.KeyDesc.KeyDataLen[1] = pAd->StaCfg.RSNIE_Len + 2;
++ NdisMoveMemory(&Packet.KeyDesc.KeyData[2], pAd->StaCfg.RSN_IE, pAd->StaCfg.RSNIE_Len);
++
++ // Update packet length after decide Key data payload
++ Packet.Body_Len[1] = sizeof(KEY_DESCRIPTER) - MAX_LEN_OF_RSNIE + Packet.KeyDesc.KeyDataLen[1];
++
++ // 2. Key Type PeerKey
++ Packet.KeyDesc.KeyInfo.KeyType = PAIRWISEKEY;
++
++ // 3. KeyMic field presented
++ Packet.KeyDesc.KeyInfo.KeyMic = 1;
++
++ // Update Key Length
++ Packet.KeyDesc.KeyLength[0] = 0;
++ Packet.KeyDesc.KeyLength[1] = pMsg1->KeyDesc.KeyLength[1];
++
++ // 4. Fill SNonce
++ NdisMoveMemory(Packet.KeyDesc.KeyNonce, pAd->StaCfg.SNonce, LEN_KEY_DESC_NONCE);
++
++ // 5. Key Replay Count
++ NdisMoveMemory(Packet.KeyDesc.ReplayCounter, pAd->StaCfg.ReplayCounter, LEN_KEY_DESC_REPLAY);
++
++ // Convert to little-endian format.
++ *((USHORT *)&Packet.KeyDesc.KeyInfo) = cpu2le16(*((USHORT *)&Packet.KeyDesc.KeyInfo));
++
++ // Send EAPOL-Key(0,1,0,0,0,P,0,SNonce,MIC,RSN IE)
++ // Out buffer for transmitting message 2
++ MlmeAllocateMemory(pAd, (PUCHAR *)&pOutBuffer); // allocate memory
++ if(pOutBuffer == NULL)
++ {
++ os_free_mem(pAd, mpool);
++ return;
++ }
++
++ // Prepare EAPOL frame for MIC calculation
++ // Be careful, only EAPOL frame is counted for MIC calculation
++ MakeOutgoingFrame(pOutBuffer, &FrameLen,
++ Packet.Body_Len[1] + 4, &Packet,
++ END_OF_ARGS);
++
++ // 6. Prepare and Fill MIC value
++ NdisZeroMemory(Mic, sizeof(Mic));
++ if(pAd->StaCfg.WepStatus == Ndis802_11Encryption3Enabled)
++ {
++ // AES
++ HMAC_SHA1(pOutBuffer, FrameLen, PTK, LEN_EAP_MICK, digest);
++ NdisMoveMemory(Mic, digest, LEN_KEY_DESC_MIC);
++ }
++ else
++ {
++ hmac_md5(PTK, LEN_EAP_MICK, pOutBuffer, FrameLen, Mic);
++ }
++ NdisMoveMemory(Packet.KeyDesc.KeyMic, Mic, LEN_KEY_DESC_MIC);
++
++
++ // Make Transmitting frame
++ MakeOutgoingFrame(pOutBuffer, &FrameLen,
++ LENGTH_802_3, &Header802_3,
++ Packet.Body_Len[1] + 4, &Packet,
++ END_OF_ARGS);
++
++
++ // 5. Copy frame to Tx ring
++ RTMPToWirelessSta(pAd, Header802_3, LENGTH_802_3, (PUCHAR)&Packet, Packet.Body_Len[1] + 4, TRUE);
++
++ MlmeFreeMemory(pAd, pOutBuffer);
++ os_free_mem(pAd, mpool);
++
++ DBGPRINT(RT_DEBUG_TRACE, ("Wpa2PairMsg1Action <-----\n"));
++
++}
++
++/*
++ ========================================================================
++
++ Routine Description:
++ Process Pairwise key 4-way handshaking
++
++ Arguments:
++ pAd Pointer to our adapter
++ Elem Message body
++
++ Return Value:
++ None
++
++ Note:
++
++ ========================================================================
++*/
++VOID WpaPairMsg3Action(
++ IN PRTMP_ADAPTER pAd,
++ IN MLME_QUEUE_ELEM *Elem)
++
++{
++ PHEADER_802_11 pHeader;
++ PUCHAR pOutBuffer = NULL;
++ UCHAR Header802_3[14];
++ ULONG FrameLen = 0;
++ EAPOL_PACKET Packet;
++ PEAPOL_PACKET pMsg3;
++ UCHAR Mic[16], OldMic[16];
++ MAC_TABLE_ENTRY *pEntry = NULL;
++ UCHAR skip_offset;
++ KEY_INFO peerKeyInfo;
++
++ DBGPRINT(RT_DEBUG_TRACE, ("WpaPairMsg3Action ----->\n"));
++
++ // Record 802.11 header & the received EAPOL packet Msg3
++ pHeader = (PHEADER_802_11) Elem->Msg;
++ pMsg3 = (PEAPOL_PACKET) &Elem->Msg[LENGTH_802_11 + LENGTH_802_1_H];
++
++ NdisZeroMemory((PUCHAR)&peerKeyInfo, sizeof(peerKeyInfo));
++ NdisMoveMemory((PUCHAR)&peerKeyInfo, (PUCHAR)&pMsg3->KeyDesc.KeyInfo, sizeof(KEY_INFO));
++
++ *((USHORT*)&peerKeyInfo) = cpu2le16(*((USHORT*)&peerKeyInfo));
++
++
++ // 1. Verify cipher type match
++ if (pAd->StaCfg.WepStatus == Ndis802_11Encryption3Enabled && (peerKeyInfo.KeyDescVer != 2))
++ {
++ return;
++ }
++ else if(pAd->StaCfg.WepStatus == Ndis802_11Encryption2Enabled && (peerKeyInfo.KeyDescVer != 1))
++ {
++ return;
++ }
++
++ // Verify RSN IE
++ //if (!RTMPEqualMemory(pMsg3->KeyDesc.KeyData, pAd->MacTab.Content[BSSID_WCID].RSN_IE, pAd->MacTab.Content[BSSID_WCID].RSNIE_Len))
++ if (!CheckRSNIE(pAd, pMsg3->KeyDesc.KeyData, pMsg3->KeyDesc.KeyDataLen[1], &skip_offset))
++ {
++ DBGPRINT(RT_DEBUG_ERROR, ("RSN_IE Different in Msg 3 of WPA1 4-way handshake!! \n"));
++ hex_dump("The original RSN_IE", pAd->MacTab.Content[BSSID_WCID].RSN_IE, pAd->MacTab.Content[BSSID_WCID].RSNIE_Len);
++ hex_dump("The received RSN_IE", pMsg3->KeyDesc.KeyData, pMsg3->KeyDesc.KeyDataLen[1]);
++ return;
++ }
++ else
++ DBGPRINT(RT_DEBUG_TRACE, ("RSN_IE VALID in Msg 3 of WPA1 4-way handshake!! \n"));
++
++
++ // 2. Check MIC value
++ // Save the MIC and replace with zero
++ NdisMoveMemory(OldMic, pMsg3->KeyDesc.KeyMic, LEN_KEY_DESC_MIC);
++ NdisZeroMemory(pMsg3->KeyDesc.KeyMic, LEN_KEY_DESC_MIC);
++ if(pAd->StaCfg.WepStatus == Ndis802_11Encryption3Enabled)
++ {
++ // AES
++ UCHAR digest[80];
++
++ HMAC_SHA1((PUCHAR) pMsg3, pMsg3->Body_Len[1] + 4, pAd->StaCfg.PTK, LEN_EAP_MICK, digest);
++ NdisMoveMemory(Mic, digest, LEN_KEY_DESC_MIC);
++ }
++ else // TKIP
++ {
++ hmac_md5(pAd->StaCfg.PTK, LEN_EAP_MICK, (PUCHAR) pMsg3, pMsg3->Body_Len[1] + 4, Mic);
++ }
++
++ if(!NdisEqualMemory(OldMic, Mic, LEN_KEY_DESC_MIC))
++ {
++ DBGPRINT(RT_DEBUG_ERROR, (" MIC Different in msg 3 of 4-way handshake!!!!!!!!!! \n"));
++ return;
++ }
++ else
++ DBGPRINT(RT_DEBUG_TRACE, (" MIC VALID in msg 3 of 4-way handshake!!!!!!!!!! \n"));
++
++ // 3. Check Replay Counter, it has to be larger than last one. No need to be exact one larger
++ if(RTMPCompareMemory(pMsg3->KeyDesc.ReplayCounter, pAd->StaCfg.ReplayCounter, LEN_KEY_DESC_REPLAY) != 1)
++ return;
++
++ // Update new replay counter
++ NdisMoveMemory(pAd->StaCfg.ReplayCounter, pMsg3->KeyDesc.ReplayCounter, LEN_KEY_DESC_REPLAY);
++
++ // 4. Double check ANonce
++ if(!NdisEqualMemory(pAd->StaCfg.ANonce, pMsg3->KeyDesc.KeyNonce, LEN_KEY_DESC_NONCE))
++ return;
++
++ // init 802.3 header and Fill Packet
++ MAKE_802_3_HEADER(Header802_3, pAd->CommonCfg.Bssid, pAd->CurrentAddress, EAPOL);
++
++ // Zero Message 4 body
++ NdisZeroMemory(&Packet, sizeof(Packet));
++ Packet.ProVer = EAPOL_VER;
++ Packet.ProType = EAPOLKey;
++ Packet.Body_Len[1] = sizeof(KEY_DESCRIPTER) - MAX_LEN_OF_RSNIE; // No data field
++
++ //
++ // Message 4 as EAPOL-Key(0,1,0,0,0,P,0,0,MIC,0)
++ //
++ Packet.KeyDesc.Type = WPA1_KEY_DESC;
++
++ // Key descriptor version and appropriate RSN IE
++ Packet.KeyDesc.KeyInfo.KeyDescVer = peerKeyInfo.KeyDescVer;
++
++ // Update Key Length
++ Packet.KeyDesc.KeyLength[0] = pMsg3->KeyDesc.KeyLength[0];
++ Packet.KeyDesc.KeyLength[1] = pMsg3->KeyDesc.KeyLength[1];
++
++ // Key Type PeerKey
++ Packet.KeyDesc.KeyInfo.KeyType = PAIRWISEKEY;
++
++ // KeyMic field presented
++ Packet.KeyDesc.KeyInfo.KeyMic = 1;
++
++ // In Msg3, KeyInfo.secure =0 if Group Key HS to come. 1 if no group key HS
++ // Station sends Msg4 KeyInfo.secure should be the same as that in Msg.3
++ Packet.KeyDesc.KeyInfo.Secure= peerKeyInfo.Secure;
++
++ // Convert to little-endian format.
++ *((USHORT *)&Packet.KeyDesc.KeyInfo) = cpu2le16(*((USHORT *)&Packet.KeyDesc.KeyInfo));
++
++ // Key Replay count
++ NdisMoveMemory(Packet.KeyDesc.ReplayCounter, pMsg3->KeyDesc.ReplayCounter, LEN_KEY_DESC_REPLAY);
++
++ // Out buffer for transmitting message 4
++ MlmeAllocateMemory(pAd, (PUCHAR *)&pOutBuffer); // allocate memory
++ if(pOutBuffer == NULL)
++ return;
++
++ // Prepare EAPOL frame for MIC calculation
++ // Be careful, only EAPOL frame is counted for MIC calculation
++ MakeOutgoingFrame(pOutBuffer, &FrameLen,
++ Packet.Body_Len[1] + 4, &Packet,
++ END_OF_ARGS);
++
++ // Prepare and Fill MIC value
++ NdisZeroMemory(Mic, sizeof(Mic));
++ if(pAd->StaCfg.WepStatus == Ndis802_11Encryption3Enabled)
++ {
++ // AES
++ UCHAR digest[80];
++
++ HMAC_SHA1(pOutBuffer, FrameLen, pAd->StaCfg.PTK, LEN_EAP_MICK, digest);
++ NdisMoveMemory(Mic, digest, LEN_KEY_DESC_MIC);
++ }
++ else
++ {
++ hmac_md5(pAd->StaCfg.PTK, LEN_EAP_MICK, pOutBuffer, FrameLen, Mic);
++ }
++ NdisMoveMemory(Packet.KeyDesc.KeyMic, Mic, LEN_KEY_DESC_MIC);
++
++ // Update PTK
++ // Prepare pair-wise key information into shared key table
++ NdisZeroMemory(&pAd->SharedKey[BSS0][0], sizeof(CIPHER_KEY));
++ pAd->SharedKey[BSS0][0].KeyLen = LEN_TKIP_EK;
++ NdisMoveMemory(pAd->SharedKey[BSS0][0].Key, &pAd->StaCfg.PTK[32], LEN_TKIP_EK);
++ NdisMoveMemory(pAd->SharedKey[BSS0][0].RxMic, &pAd->StaCfg.PTK[48], LEN_TKIP_RXMICK);
++ NdisMoveMemory(pAd->SharedKey[BSS0][0].TxMic, &pAd->StaCfg.PTK[48+LEN_TKIP_RXMICK], LEN_TKIP_TXMICK);
++
++ // Decide its ChiperAlg
++ if (pAd->StaCfg.PairCipher == Ndis802_11Encryption2Enabled)
++ pAd->SharedKey[BSS0][0].CipherAlg = CIPHER_TKIP;
++ else if (pAd->StaCfg.PairCipher == Ndis802_11Encryption3Enabled)
++ pAd->SharedKey[BSS0][0].CipherAlg = CIPHER_AES;
++ else
++ pAd->SharedKey[BSS0][0].CipherAlg = CIPHER_NONE;
++
++ // Update these related information to MAC_TABLE_ENTRY
++ pEntry = &pAd->MacTab.Content[BSSID_WCID];
++ NdisMoveMemory(pEntry->PairwiseKey.Key, &pAd->StaCfg.PTK[32], LEN_TKIP_EK);
++ NdisMoveMemory(pEntry->PairwiseKey.RxMic, &pAd->StaCfg.PTK[48], LEN_TKIP_RXMICK);
++ NdisMoveMemory(pEntry->PairwiseKey.TxMic, &pAd->StaCfg.PTK[48+LEN_TKIP_RXMICK], LEN_TKIP_TXMICK);
++ pEntry->PairwiseKey.CipherAlg = pAd->SharedKey[BSS0][0].CipherAlg;
++
++ // Update pairwise key information to ASIC Shared Key Table
++ AsicAddSharedKeyEntry(pAd,
++ BSS0,
++ 0,
++ pAd->SharedKey[BSS0][0].CipherAlg,
++ pAd->SharedKey[BSS0][0].Key,
++ pAd->SharedKey[BSS0][0].TxMic,
++ pAd->SharedKey[BSS0][0].RxMic);
++
++ // Update ASIC WCID attribute table and IVEIV table
++ RTMPAddWcidAttributeEntry(pAd,
++ BSS0,
++ 0,
++ pAd->SharedKey[BSS0][0].CipherAlg,
++ pEntry);
++
++ // Make transmitting frame
++ MakeOutgoingFrame(pOutBuffer, &FrameLen,
++ LENGTH_802_3, &Header802_3,
++ Packet.Body_Len[1] + 4, &Packet,
++ END_OF_ARGS);
++
++
++ // Copy frame to Tx ring and Send Message 4 to authenticator
++ RTMPToWirelessSta(pAd, Header802_3, LENGTH_802_3, (PUCHAR)&Packet, Packet.Body_Len[1] + 4, TRUE);
++
++ MlmeFreeMemory(pAd, (PUCHAR)pOutBuffer);
++
++ DBGPRINT(RT_DEBUG_TRACE, ("WpaPairMsg3Action <-----\n"));
++}
++
++VOID Wpa2PairMsg3Action(
++ IN PRTMP_ADAPTER pAd,
++ IN MLME_QUEUE_ELEM *Elem)
++
++{
++ PHEADER_802_11 pHeader;
++ PUCHAR pOutBuffer = NULL;
++ UCHAR Header802_3[14];
++ ULONG FrameLen = 0;
++ EAPOL_PACKET Packet;
++ PEAPOL_PACKET pMsg3;
++ UCHAR Mic[16], OldMic[16];
++ UCHAR *mpool, *KEYDATA, *digest;
++ UCHAR Key[32];
++ MAC_TABLE_ENTRY *pEntry = NULL;
++ KEY_INFO peerKeyInfo;
++
++ // allocate memory
++ os_alloc_mem(pAd, (PUCHAR *)&mpool, 1024);
++
++ if(mpool == NULL)
++ return;
++
++ // KEYDATA Len = 512.
++ KEYDATA = (UCHAR *) ROUND_UP(mpool, 4);
++ // digest Len = 80.
++ digest = (UCHAR *) ROUND_UP(KEYDATA + 512, 4);
++
++ DBGPRINT(RT_DEBUG_TRACE, ("Wpa2PairMsg3Action ----->\n"));
++
++ pHeader = (PHEADER_802_11) Elem->Msg;
++
++ // Process message 3 frame.
++ pMsg3 = (PEAPOL_PACKET) &Elem->Msg[LENGTH_802_11 + LENGTH_802_1_H];
++
++ NdisZeroMemory((PUCHAR)&peerKeyInfo, sizeof(peerKeyInfo));
++ NdisMoveMemory((PUCHAR)&peerKeyInfo, (PUCHAR)&pMsg3->KeyDesc.KeyInfo, sizeof(KEY_INFO));
++
++ *((USHORT*)&peerKeyInfo) = cpu2le16(*((USHORT*)&peerKeyInfo));
++
++ // 1. Verify cipher type match
++ if (pAd->StaCfg.WepStatus == Ndis802_11Encryption3Enabled && (peerKeyInfo.KeyDescVer!= 2))
++ {
++ os_free_mem(pAd, (PUCHAR)mpool);
++ return;
++ }
++ else if(pAd->StaCfg.WepStatus == Ndis802_11Encryption2Enabled && (peerKeyInfo.KeyDescVer != 1))
++ {
++ os_free_mem(pAd, (PUCHAR)mpool);
++ return;
++ }
++
++ // 2. Check MIC value
++ // Save the MIC and replace with zero
++ NdisMoveMemory(OldMic, pMsg3->KeyDesc.KeyMic, LEN_KEY_DESC_MIC);
++ NdisZeroMemory(pMsg3->KeyDesc.KeyMic, LEN_KEY_DESC_MIC);
++ if (pAd->StaCfg.WepStatus == Ndis802_11Encryption3Enabled)
++ {
++ // AES
++ HMAC_SHA1((PUCHAR) pMsg3, pMsg3->Body_Len[1] + 4, pAd->StaCfg.PTK, LEN_EAP_MICK, digest);
++ NdisMoveMemory(Mic, digest, LEN_KEY_DESC_MIC);
++ }
++ else
++ {
++ hmac_md5(pAd->StaCfg.PTK, LEN_EAP_MICK, (PUCHAR) pMsg3, pMsg3->Body_Len[1] + 4, Mic);
++ }
++
++ if(!NdisEqualMemory(OldMic, Mic, LEN_KEY_DESC_MIC))
++ {
++ DBGPRINT(RT_DEBUG_ERROR, (" MIC Different in msg 3 of 4-way handshake!!!!!!!!!! \n"));
++ os_free_mem(pAd, (PUCHAR)mpool);
++ return;
++ }
++ else
++ DBGPRINT(RT_DEBUG_TRACE, (" MIC VALID in msg 3 of 4-way handshake!!!!!!!!!! \n"));
++
++ // 3. Check Replay Counter, it has to be larger than last one. No need to be exact one larger
++ if(RTMPCompareMemory(pMsg3->KeyDesc.ReplayCounter, pAd->StaCfg.ReplayCounter, LEN_KEY_DESC_REPLAY) != 1)
++ {
++ os_free_mem(pAd, (PUCHAR)mpool);
++ return;
++ }
++
++ // Update new replay counter
++ NdisMoveMemory(pAd->StaCfg.ReplayCounter, pMsg3->KeyDesc.ReplayCounter, LEN_KEY_DESC_REPLAY);
++
++ // 4. Double check ANonce
++ if(!NdisEqualMemory(pAd->StaCfg.ANonce, pMsg3->KeyDesc.KeyNonce, LEN_KEY_DESC_NONCE))
++ {
++ os_free_mem(pAd, (PUCHAR)mpool);
++ return;
++ }
++
++ // Obtain GTK
++ // 5. Decrypt GTK from Key Data
++ DBGPRINT_RAW(RT_DEBUG_TRACE, ("EKD = %d\n", peerKeyInfo.EKD_DL));
++ if(pAd->StaCfg.WepStatus == Ndis802_11Encryption3Enabled)
++ {
++ // Decrypt AES GTK
++ AES_GTK_KEY_UNWRAP(&pAd->StaCfg.PTK[16], KEYDATA, pMsg3->KeyDesc.KeyDataLen[1],pMsg3->KeyDesc.KeyData);
++ }
++ else // TKIP
++ {
++ INT i;
++ // Decrypt TKIP GTK
++ // Construct 32 bytes RC4 Key
++ NdisMoveMemory(Key, pMsg3->KeyDesc.KeyIv, 16);
++ NdisMoveMemory(&Key[16], &pAd->StaCfg.PTK[16], 16);
++ ARCFOUR_INIT(&pAd->PrivateInfo.WEPCONTEXT, Key, 32);
++ //discard first 256 bytes
++ for(i = 0; i < 256; i++)
++ ARCFOUR_BYTE(&pAd->PrivateInfo.WEPCONTEXT);
++ // Decrypt GTK. Becareful, there is no ICV to check the result is correct or not
++ ARCFOUR_DECRYPT(&pAd->PrivateInfo.WEPCONTEXT, KEYDATA, pMsg3->KeyDesc.KeyData, pMsg3->KeyDesc.KeyDataLen[1]);
++ }
++
++ if (!ParseKeyData(pAd, KEYDATA, pMsg3->KeyDesc.KeyDataLen[1], 1))
++ {
++ os_free_mem(pAd, (PUCHAR)mpool);
++ return;
++ }
++
++ // Update GTK to ASIC
++ // Update group key information to ASIC Shared Key Table
++ AsicAddSharedKeyEntry(pAd,
++ BSS0,
++ pAd->StaCfg.DefaultKeyId,
++ pAd->SharedKey[BSS0][pAd->StaCfg.DefaultKeyId].CipherAlg,
++ pAd->SharedKey[BSS0][pAd->StaCfg.DefaultKeyId].Key,
++ pAd->SharedKey[BSS0][pAd->StaCfg.DefaultKeyId].TxMic,
++ pAd->SharedKey[BSS0][pAd->StaCfg.DefaultKeyId].RxMic);
++
++ // Update ASIC WCID attribute table and IVEIV table
++ RTMPAddWcidAttributeEntry(pAd,
++ BSS0,
++ pAd->StaCfg.DefaultKeyId,
++ pAd->SharedKey[BSS0][pAd->StaCfg.DefaultKeyId].CipherAlg,
++ NULL);
++
++ // init 802.3 header and Fill Packet
++ MAKE_802_3_HEADER(Header802_3, pAd->CommonCfg.Bssid, pAd->CurrentAddress, EAPOL);
++
++ // Zero message 4 body
++ NdisZeroMemory(&Packet, sizeof(Packet));
++ Packet.ProVer = EAPOL_VER;
++ Packet.ProType = EAPOLKey;
++ Packet.Body_Len[1] = sizeof(KEY_DESCRIPTER) - MAX_LEN_OF_RSNIE; // No data field
++
++ //
++ // Message 4 as EAPOL-Key(0,1,0,0,0,P,0,0,MIC,0)
++ //
++ Packet.KeyDesc.Type = WPA2_KEY_DESC;
++
++ // Key descriptor version and appropriate RSN IE
++ Packet.KeyDesc.KeyInfo.KeyDescVer = peerKeyInfo.KeyDescVer;
++
++ // Update Key Length
++ Packet.KeyDesc.KeyLength[0] = pMsg3->KeyDesc.KeyLength[0];
++ Packet.KeyDesc.KeyLength[1] = pMsg3->KeyDesc.KeyLength[1];
++
++ // Key Type PeerKey
++ Packet.KeyDesc.KeyInfo.KeyType = PAIRWISEKEY;
++
++ // KeyMic field presented
++ Packet.KeyDesc.KeyInfo.KeyMic = 1;
++ Packet.KeyDesc.KeyInfo.Secure = 1;
++
++ // Convert to little-endian format.
++ *((USHORT *)&Packet.KeyDesc.KeyInfo) = cpu2le16(*((USHORT *)&Packet.KeyDesc.KeyInfo));
++
++ // Key Replay count
++ NdisMoveMemory(Packet.KeyDesc.ReplayCounter, pMsg3->KeyDesc.ReplayCounter, LEN_KEY_DESC_REPLAY);
++
++ // Out buffer for transmitting message 4
++ MlmeAllocateMemory(pAd, (PUCHAR *)&pOutBuffer); // allocate memory
++ if(pOutBuffer == NULL)
++ {
++ os_free_mem(pAd, (PUCHAR)mpool);
++ return;
++ }
++
++ // Prepare EAPOL frame for MIC calculation
++ // Be careful, only EAPOL frame is counted for MIC calculation
++ MakeOutgoingFrame(pOutBuffer, &FrameLen,
++ Packet.Body_Len[1] + 4, &Packet,
++ END_OF_ARGS);
++
++ // Prepare and Fill MIC value
++ NdisZeroMemory(Mic, sizeof(Mic));
++ if(pAd->StaCfg.WepStatus == Ndis802_11Encryption3Enabled)
++ {
++ // AES
++ HMAC_SHA1(pOutBuffer, FrameLen, pAd->StaCfg.PTK, LEN_EAP_MICK, digest);
++ NdisMoveMemory(Mic, digest, LEN_KEY_DESC_MIC);
++ }
++ else
++ {
++ hmac_md5(pAd->StaCfg.PTK, LEN_EAP_MICK, pOutBuffer, FrameLen, Mic);
++ }
++ NdisMoveMemory(Packet.KeyDesc.KeyMic, Mic, LEN_KEY_DESC_MIC);
++
++ // Update PTK
++ // Prepare pair-wise key information into shared key table
++ NdisZeroMemory(&pAd->SharedKey[BSS0][0], sizeof(CIPHER_KEY));
++ pAd->SharedKey[BSS0][0].KeyLen = LEN_TKIP_EK;
++ NdisMoveMemory(pAd->SharedKey[BSS0][0].Key, &pAd->StaCfg.PTK[32], LEN_TKIP_EK);
++ NdisMoveMemory(pAd->SharedKey[BSS0][0].RxMic, &pAd->StaCfg.PTK[48], LEN_TKIP_RXMICK);
++ NdisMoveMemory(pAd->SharedKey[BSS0][0].TxMic, &pAd->StaCfg.PTK[48+LEN_TKIP_RXMICK], LEN_TKIP_TXMICK);
++
++ // Decide its ChiperAlg
++ if (pAd->StaCfg.PairCipher == Ndis802_11Encryption2Enabled)
++ pAd->SharedKey[BSS0][0].CipherAlg = CIPHER_TKIP;
++ else if (pAd->StaCfg.PairCipher == Ndis802_11Encryption3Enabled)
++ pAd->SharedKey[BSS0][0].CipherAlg = CIPHER_AES;
++ else
++ pAd->SharedKey[BSS0][0].CipherAlg = CIPHER_NONE;
++
++ // Update these related information to MAC_TABLE_ENTRY
++ pEntry = &pAd->MacTab.Content[BSSID_WCID];
++ NdisMoveMemory(&pEntry->PairwiseKey.Key, &pAd->StaCfg.PTK[32], LEN_TKIP_EK);
++ NdisMoveMemory(&pEntry->PairwiseKey.RxMic, &pAd->StaCfg.PTK[48], LEN_TKIP_RXMICK);
++ NdisMoveMemory(&pEntry->PairwiseKey.TxMic, &pAd->StaCfg.PTK[48+LEN_TKIP_RXMICK], LEN_TKIP_TXMICK);
++ pEntry->PairwiseKey.CipherAlg = pAd->SharedKey[BSS0][0].CipherAlg;
++
++ // Update pairwise key information to ASIC Shared Key Table
++ AsicAddSharedKeyEntry(pAd,
++ BSS0,
++ 0,
++ pAd->SharedKey[BSS0][0].CipherAlg,
++ pAd->SharedKey[BSS0][0].Key,
++ pAd->SharedKey[BSS0][0].TxMic,
++ pAd->SharedKey[BSS0][0].RxMic);
++
++ // Update ASIC WCID attribute table and IVEIV table
++ RTMPAddWcidAttributeEntry(pAd,
++ BSS0,
++ 0,
++ pAd->SharedKey[BSS0][0].CipherAlg,
++ pEntry);
++
++ // Make Transmitting frame
++ MakeOutgoingFrame(pOutBuffer, &FrameLen,
++ LENGTH_802_3, &Header802_3,
++ Packet.Body_Len[1] + 4, &Packet,
++ END_OF_ARGS);
++
++
++ // Copy frame to Tx ring and Send Message 4 to authenticator
++ RTMPToWirelessSta(pAd, Header802_3, LENGTH_802_3, (PUCHAR)&Packet, Packet.Body_Len[1] + 4, TRUE);
++
++ // set 802.1x port control
++ //pAd->StaCfg.PortSecured = WPA_802_1X_PORT_SECURED;
++ STA_PORT_SECURED(pAd);
++
++ // Indicate Connected for GUI
++ pAd->IndicateMediaState = NdisMediaStateConnected;
++
++ MlmeFreeMemory(pAd, (PUCHAR)pOutBuffer);
++ os_free_mem(pAd, (PUCHAR)mpool);
++
++
++ // send wireless event - for set key done WPA2
++ if (pAd->CommonCfg.bWirelessEvent)
++ RTMPSendWirelessEvent(pAd, IW_SET_KEY_DONE_WPA2_EVENT_FLAG, pEntry->Addr, BSS0, 0);
++
++ DBGPRINT(RT_DEBUG_ERROR, ("Wpa2PairMsg3Action <-----\n"));
++
++}
++
++/*
++ ========================================================================
++
++ Routine Description:
++ Process Group key 2-way handshaking
++
++ Arguments:
++ pAd Pointer to our adapter
++ Elem Message body
++
++ Return Value:
++ None
++
++ Note:
++
++ ========================================================================
++*/
++VOID WpaGroupMsg1Action(
++ IN PRTMP_ADAPTER pAd,
++ IN MLME_QUEUE_ELEM *Elem)
++
++{
++ PUCHAR pOutBuffer = NULL;
++ UCHAR Header802_3[14];
++ ULONG FrameLen = 0;
++ EAPOL_PACKET Packet;
++ PEAPOL_PACKET pGroup;
++ UCHAR *mpool, *digest, *KEYDATA;
++ UCHAR Mic[16], OldMic[16];
++ UCHAR GTK[32], Key[32];
++ KEY_INFO peerKeyInfo;
++
++ // allocate memory
++ os_alloc_mem(pAd, (PUCHAR *)&mpool, 1024);
++
++ if(mpool == NULL)
++ return;
++
++ // digest Len = 80.
++ digest = (UCHAR *) ROUND_UP(mpool, 4);
++ // KEYDATA Len = 512.
++ KEYDATA = (UCHAR *) ROUND_UP(digest + 80, 4);
++
++ DBGPRINT(RT_DEBUG_TRACE, ("WpaGroupMsg1Action ----->\n"));
++
++ // Process Group Message 1 frame. skip 802.11 header(24) & LLC_SNAP header(8)
++ pGroup = (PEAPOL_PACKET) &Elem->Msg[LENGTH_802_11 + LENGTH_802_1_H];
++
++ NdisZeroMemory((PUCHAR)&peerKeyInfo, sizeof(peerKeyInfo));
++ NdisMoveMemory((PUCHAR)&peerKeyInfo, (PUCHAR)&pGroup->KeyDesc.KeyInfo, sizeof(KEY_INFO));
++
++ *((USHORT*)&peerKeyInfo) = cpu2le16(*((USHORT*)&peerKeyInfo));
++
++ // 0. Check cipher type match
++ if (pAd->StaCfg.WepStatus == Ndis802_11Encryption3Enabled && (peerKeyInfo.KeyDescVer != 2))
++ {
++ os_free_mem(pAd, (PUCHAR)mpool);
++ return;
++ }
++ else if (pAd->StaCfg.WepStatus == Ndis802_11Encryption2Enabled && (peerKeyInfo.KeyDescVer != 1))
++ {
++ os_free_mem(pAd, (PUCHAR)mpool);
++ return;
++ }
++
++ // 1. Verify Replay counter
++ // Check Replay Counter, it has to be larger than last one. No need to be exact one larger
++ if(RTMPCompareMemory(pGroup->KeyDesc.ReplayCounter, pAd->StaCfg.ReplayCounter, LEN_KEY_DESC_REPLAY) != 1)
++ {
++ os_free_mem(pAd, (PUCHAR)mpool);
++ return;
++ }
++
++ // Update new replay counter
++ NdisMoveMemory(pAd->StaCfg.ReplayCounter, pGroup->KeyDesc.ReplayCounter, LEN_KEY_DESC_REPLAY);
++
++ // 2. Verify MIC is valid
++ // Save the MIC and replace with zero
++ NdisMoveMemory(OldMic, pGroup->KeyDesc.KeyMic, LEN_KEY_DESC_MIC);
++ NdisZeroMemory(pGroup->KeyDesc.KeyMic, LEN_KEY_DESC_MIC);
++
++ if(pAd->StaCfg.WepStatus == Ndis802_11Encryption3Enabled)
++ { // AES
++ HMAC_SHA1((PUCHAR) pGroup, pGroup->Body_Len[1] + 4, pAd->StaCfg.PTK, LEN_EAP_MICK, digest);
++ NdisMoveMemory(Mic, digest, LEN_KEY_DESC_MIC);
++ }
++ else
++ { // TKIP
++ hmac_md5(pAd->StaCfg.PTK, LEN_EAP_MICK, (PUCHAR) pGroup, pGroup->Body_Len[1] + 4, Mic);
++ }
++
++ if(!NdisEqualMemory(OldMic, Mic, LEN_KEY_DESC_MIC))
++ {
++ DBGPRINT(RT_DEBUG_ERROR, (" MIC Different in group msg 1 of 2-way handshake!!!!!!!!!! \n"));
++ MlmeFreeMemory(pAd, (PUCHAR)mpool);
++ return;
++ }
++ else
++ DBGPRINT(RT_DEBUG_TRACE, (" MIC VALID in group msg 1 of 2-way handshake!!!!!!!!!! \n"));
++
++
++ // 3. Decrypt GTK from Key Data
++ if (pAd->StaCfg.WepStatus == Ndis802_11Encryption3Enabled)
++ {
++ // Decrypt AES GTK
++ AES_GTK_KEY_UNWRAP(&pAd->StaCfg.PTK[16], KEYDATA, pGroup->KeyDesc.KeyDataLen[1], pGroup->KeyDesc.KeyData);
++ }
++ else // TKIP
++ {
++ INT i;
++
++ // Decrypt TKIP GTK
++ // Construct 32 bytes RC4 Key
++ NdisMoveMemory(Key, pGroup->KeyDesc.KeyIv, 16);
++ NdisMoveMemory(&Key[16], &pAd->StaCfg.PTK[16], 16);
++ ARCFOUR_INIT(&pAd->PrivateInfo.WEPCONTEXT, Key, 32);
++ //discard first 256 bytes
++ for(i = 0; i < 256; i++)
++ ARCFOUR_BYTE(&pAd->PrivateInfo.WEPCONTEXT);
++ // Decrypt GTK. Becareful, there is no ICV to check the result is correct or not
++ ARCFOUR_DECRYPT(&pAd->PrivateInfo.WEPCONTEXT, KEYDATA, pGroup->KeyDesc.KeyData, pGroup->KeyDesc.KeyDataLen[1]);
++ }
++
++ // Process decrypted key data material
++ // Parse keyData to handle KDE format for WPA2PSK
++ if (peerKeyInfo.EKD_DL)
++ {
++ if (!ParseKeyData(pAd, KEYDATA, pGroup->KeyDesc.KeyDataLen[1], 0))
++ {
++ os_free_mem(pAd, (PUCHAR)mpool);
++ return;
++ }
++ }
++ else // WPAPSK
++ {
++ // set key material, TxMic and RxMic for WPAPSK
++ NdisMoveMemory(GTK, KEYDATA, 32);
++ NdisMoveMemory(pAd->StaCfg.GTK, GTK, 32);
++ pAd->StaCfg.DefaultKeyId = peerKeyInfo.KeyIndex;
++
++ // Prepare pair-wise key information into shared key table
++ NdisZeroMemory(&pAd->SharedKey[BSS0][pAd->StaCfg.DefaultKeyId], sizeof(CIPHER_KEY));
++ pAd->SharedKey[BSS0][pAd->StaCfg.DefaultKeyId].KeyLen = LEN_TKIP_EK;
++ NdisMoveMemory(pAd->SharedKey[BSS0][pAd->StaCfg.DefaultKeyId].Key, GTK, LEN_TKIP_EK);
++ NdisMoveMemory(pAd->SharedKey[BSS0][pAd->StaCfg.DefaultKeyId].RxMic, >K[16], LEN_TKIP_RXMICK);
++ NdisMoveMemory(pAd->SharedKey[BSS0][pAd->StaCfg.DefaultKeyId].TxMic, >K[24], LEN_TKIP_TXMICK);
++
++ // Update Shared Key CipherAlg
++ pAd->SharedKey[BSS0][pAd->StaCfg.DefaultKeyId].CipherAlg = CIPHER_NONE;
++ if (pAd->StaCfg.GroupCipher == Ndis802_11Encryption2Enabled)
++ pAd->SharedKey[BSS0][pAd->StaCfg.DefaultKeyId].CipherAlg = CIPHER_TKIP;
++ else if (pAd->StaCfg.GroupCipher == Ndis802_11Encryption3Enabled)
++ pAd->SharedKey[BSS0][pAd->StaCfg.DefaultKeyId].CipherAlg = CIPHER_AES;
++ else if (pAd->StaCfg.GroupCipher == Ndis802_11GroupWEP40Enabled)
++ pAd->SharedKey[BSS0][pAd->StaCfg.DefaultKeyId].CipherAlg = CIPHER_WEP64;
++ else if (pAd->StaCfg.GroupCipher == Ndis802_11GroupWEP104Enabled)
++ pAd->SharedKey[BSS0][pAd->StaCfg.DefaultKeyId].CipherAlg = CIPHER_WEP128;
++
++ //hex_dump("Group Key :", pAd->SharedKey[BSS0][pAd->StaCfg.DefaultKeyId].Key, LEN_TKIP_EK);
++ }
++
++ // Update group key information to ASIC Shared Key Table
++ AsicAddSharedKeyEntry(pAd,
++ BSS0,
++ pAd->StaCfg.DefaultKeyId,
++ pAd->SharedKey[BSS0][pAd->StaCfg.DefaultKeyId].CipherAlg,
++ pAd->SharedKey[BSS0][pAd->StaCfg.DefaultKeyId].Key,
++ pAd->SharedKey[BSS0][pAd->StaCfg.DefaultKeyId].TxMic,
++ pAd->SharedKey[BSS0][pAd->StaCfg.DefaultKeyId].RxMic);
++
++ // Update ASIC WCID attribute table and IVEIV table
++ RTMPAddWcidAttributeEntry(pAd,
++ BSS0,
++ pAd->StaCfg.DefaultKeyId,
++ pAd->SharedKey[BSS0][pAd->StaCfg.DefaultKeyId].CipherAlg,
++ NULL);
++
++ // set 802.1x port control
++ //pAd->StaCfg.PortSecured = WPA_802_1X_PORT_SECURED;
++ STA_PORT_SECURED(pAd);
++
++ // Indicate Connected for GUI
++ pAd->IndicateMediaState = NdisMediaStateConnected;
++
++ // init header and Fill Packet
++ MAKE_802_3_HEADER(Header802_3, pAd->CommonCfg.Bssid, pAd->CurrentAddress, EAPOL);
++
++ // Zero Group message 1 body
++ NdisZeroMemory(&Packet, sizeof(Packet));
++ Packet.ProVer = EAPOL_VER;
++ Packet.ProType = EAPOLKey;
++ Packet.Body_Len[1] = sizeof(KEY_DESCRIPTER) - MAX_LEN_OF_RSNIE; // No data field
++
++ //
++ // Group Message 2 as EAPOL-Key(1,0,0,0,G,0,0,MIC,0)
++ //
++ if (pAd->StaCfg.AuthMode == Ndis802_11AuthModeWPA2PSK)
++ {
++ Packet.KeyDesc.Type = WPA2_KEY_DESC;
++ }
++ else
++ {
++ Packet.KeyDesc.Type = WPA1_KEY_DESC;
++ }
++
++ // Key descriptor version and appropriate RSN IE
++ Packet.KeyDesc.KeyInfo.KeyDescVer = peerKeyInfo.KeyDescVer;
++
++ // Update Key Length
++ Packet.KeyDesc.KeyLength[0] = pGroup->KeyDesc.KeyLength[0];
++ Packet.KeyDesc.KeyLength[1] = pGroup->KeyDesc.KeyLength[1];
++
++ // Key Index as G-Msg 1
++ if(pAd->StaCfg.AuthMode == Ndis802_11AuthModeWPAPSK)
++ Packet.KeyDesc.KeyInfo.KeyIndex = peerKeyInfo.KeyIndex;
++
++ // Key Type Group key
++ Packet.KeyDesc.KeyInfo.KeyType = GROUPKEY;
++
++ // KeyMic field presented
++ Packet.KeyDesc.KeyInfo.KeyMic = 1;
++
++ // Secure bit
++ Packet.KeyDesc.KeyInfo.Secure = 1;
++
++ // Convert to little-endian format.
++ *((USHORT *)&Packet.KeyDesc.KeyInfo) = cpu2le16(*((USHORT *)&Packet.KeyDesc.KeyInfo));
++
++ // Key Replay count
++ NdisMoveMemory(Packet.KeyDesc.ReplayCounter, pGroup->KeyDesc.ReplayCounter, LEN_KEY_DESC_REPLAY);
++
++ // Out buffer for transmitting group message 2
++ MlmeAllocateMemory(pAd, (PUCHAR *)&pOutBuffer); // allocate memory
++ if(pOutBuffer == NULL)
++ {
++ MlmeFreeMemory(pAd, (PUCHAR)mpool);
++ return;
++ }
++
++ // Prepare EAPOL frame for MIC calculation
++ // Be careful, only EAPOL frame is counted for MIC calculation
++ MakeOutgoingFrame(pOutBuffer, &FrameLen,
++ Packet.Body_Len[1] + 4, &Packet,
++ END_OF_ARGS);
++
++ // Prepare and Fill MIC value
++ NdisZeroMemory(Mic, sizeof(Mic));
++ if(pAd->StaCfg.WepStatus == Ndis802_11Encryption3Enabled)
++ {
++ // AES
++ HMAC_SHA1(pOutBuffer, FrameLen, pAd->StaCfg.PTK, LEN_EAP_MICK, digest);
++ NdisMoveMemory(Mic, digest, LEN_KEY_DESC_MIC);
++ }
++ else
++ {
++ hmac_md5(pAd->StaCfg.PTK, LEN_EAP_MICK, pOutBuffer, FrameLen, Mic);
++ }
++ NdisMoveMemory(Packet.KeyDesc.KeyMic, Mic, LEN_KEY_DESC_MIC);
++
++
++ MakeOutgoingFrame(pOutBuffer, &FrameLen,
++ LENGTH_802_3, &Header802_3,
++ Packet.Body_Len[1] + 4, &Packet,
++ END_OF_ARGS);
++
++
++ // 5. Copy frame to Tx ring and prepare for encryption
++ RTMPToWirelessSta(pAd, Header802_3, LENGTH_802_3, (PUCHAR)&Packet, Packet.Body_Len[1] + 4, FALSE);
++
++ // 6 Free allocated memory
++ MlmeFreeMemory(pAd, (PUCHAR)pOutBuffer);
++ os_free_mem(pAd, (PUCHAR)mpool);
++
++ // send wireless event - for set key done WPA2
++ if (pAd->CommonCfg.bWirelessEvent)
++ RTMPSendWirelessEvent(pAd, IW_SET_KEY_DONE_WPA2_EVENT_FLAG, pAd->MacTab.Content[BSSID_WCID].Addr, BSS0, 0);
++
++ DBGPRINT(RT_DEBUG_TRACE, ("WpaGroupMsg1Action <-----\n"));
++}
++
++/*
++ ========================================================================
++
++ Routine Description:
++ Init WPA MAC header
++
++ Arguments:
++ pAd Pointer to our adapter
++
++ Return Value:
++ None
++
++ Note:
++
++ ========================================================================
++*/
++VOID WpaMacHeaderInit(
++ IN PRTMP_ADAPTER pAd,
++ IN OUT PHEADER_802_11 pHdr80211,
++ IN UCHAR wep,
++ IN PUCHAR pAddr1)
++{
++ NdisZeroMemory(pHdr80211, sizeof(HEADER_802_11));
++ pHdr80211->FC.Type = BTYPE_DATA;
++ pHdr80211->FC.ToDs = 1;
++ if (wep == 1)
++ pHdr80211->FC.Wep = 1;
++
++ // Addr1: BSSID, Addr2: SA, Addr3: DA
++ COPY_MAC_ADDR(pHdr80211->Addr1, pAddr1);
++ COPY_MAC_ADDR(pHdr80211->Addr2, pAd->CurrentAddress);
++ COPY_MAC_ADDR(pHdr80211->Addr3, pAd->CommonCfg.Bssid);
++ pHdr80211->Sequence = pAd->Sequence;
++}
++
++/*
++ ========================================================================
++
++ Routine Description:
++ Copy frame from waiting queue into relative ring buffer and set
++ appropriate ASIC register to kick hardware encryption before really
++ sent out to air.
++
++ Arguments:
++ pAd Pointer to our adapter
++ PNDIS_PACKET Pointer to outgoing Ndis frame
++ NumberOfFrag Number of fragment required
++
++ Return Value:
++ None
++
++ Note:
++
++ ========================================================================
++*/
++VOID RTMPToWirelessSta(
++ IN PRTMP_ADAPTER pAd,
++ IN PUCHAR pHeader802_3,
++ IN UINT HdrLen,
++ IN PUCHAR pData,
++ IN UINT DataLen,
++ IN BOOLEAN is4wayFrame)
++
++{
++ NDIS_STATUS Status;
++ PNDIS_PACKET pPacket;
++ UCHAR Index;
++
++ do
++ {
++ // 1. build a NDIS packet and call RTMPSendPacket();
++ // be careful about how/when to release this internal allocated NDIS PACKET buffer
++ Status = RTMPAllocateNdisPacket(pAd, &pPacket, pHeader802_3, HdrLen, pData, DataLen);
++ if (Status != NDIS_STATUS_SUCCESS)
++ break;
++
++ if (is4wayFrame)
++ RTMP_SET_PACKET_CLEAR_EAP_FRAME(pPacket, 1);
++ else
++ RTMP_SET_PACKET_CLEAR_EAP_FRAME(pPacket, 0);
++
++ // 2. send out the packet
++ Status = STASendPacket(pAd, pPacket);
++ if(Status == NDIS_STATUS_SUCCESS)
++ {
++ // Dequeue one frame from TxSwQueue0..3 queue and process it
++ // There are three place calling dequeue for TX ring.
++ // 1. Here, right after queueing the frame.
++ // 2. At the end of TxRingTxDone service routine.
++ // 3. Upon NDIS call RTMPSendPackets
++ if((!RTMP_TEST_FLAG(pAd, fRTMP_ADAPTER_BSS_SCAN_IN_PROGRESS)) &&
++ (!RTMP_TEST_FLAG(pAd, fRTMP_ADAPTER_RESET_IN_PROGRESS)))
++ {
++ for(Index = 0; Index < 5; Index ++)
++ if(pAd->TxSwQueue[Index].Number > 0)
++ RTMPDeQueuePacket(pAd, FALSE, Index, MAX_TX_PROCESS);
++ }
++ }
++ } while(FALSE);
++
++}
++
++/*
++ ========================================================================
++
++ Routine Description:
++ Check Sanity RSN IE form AP
++
++ Arguments:
++
++ Return Value:
++
++
++ ========================================================================
++*/
++BOOLEAN CheckRSNIE(
++ IN PRTMP_ADAPTER pAd,
++ IN PUCHAR pData,
++ IN UCHAR DataLen,
++ OUT UCHAR *Offset)
++{
++ PUCHAR pVIE;
++ UCHAR len;
++ PEID_STRUCT pEid;
++ BOOLEAN result = FALSE;
++
++ pVIE = pData;
++ len = DataLen;
++ *Offset = 0;
++
++ while (len > sizeof(RSNIE2))
++ {
++ pEid = (PEID_STRUCT) pVIE;
++ // WPA RSN IE
++ if ((pEid->Eid == IE_WPA) && (NdisEqualMemory(pEid->Octet, WPA_OUI, 4)))
++ {
++ if ((pAd->StaCfg.AuthMode == Ndis802_11AuthModeWPA || pAd->StaCfg.AuthMode == Ndis802_11AuthModeWPAPSK) &&
++ (NdisEqualMemory(pVIE, pAd->MacTab.Content[BSSID_WCID].RSN_IE, pAd->MacTab.Content[BSSID_WCID].RSNIE_Len)) &&
++ (pAd->MacTab.Content[BSSID_WCID].RSNIE_Len == (pEid->Len + 2)))
++ {
++ DBGPRINT(RT_DEBUG_TRACE, ("CheckRSNIE ==> WPA/WPAPSK RSN IE matched in Msg 3, Length(%d) \n", (pEid->Len + 2)));
++ result = TRUE;
++ }
++
++ *Offset += (pEid->Len + 2);
++ }
++ // WPA2 RSN IE
++ else if ((pEid->Eid == IE_RSN) && (NdisEqualMemory(pEid->Octet + 2, RSN_OUI, 3)))
++ {
++ if ((pAd->StaCfg.AuthMode == Ndis802_11AuthModeWPA2 || pAd->StaCfg.AuthMode == Ndis802_11AuthModeWPA2PSK) &&
++ (NdisEqualMemory(pVIE, pAd->MacTab.Content[BSSID_WCID].RSN_IE, pAd->MacTab.Content[BSSID_WCID].RSNIE_Len)) &&
++ (pAd->MacTab.Content[BSSID_WCID].RSNIE_Len == (pEid->Len + 2)))
++ {
++ DBGPRINT(RT_DEBUG_TRACE, ("CheckRSNIE ==> WPA2/WPA2PSK RSN IE matched in Msg 3, Length(%d) \n", (pEid->Len + 2)));
++ result = TRUE;
++ }
++
++ *Offset += (pEid->Len + 2);
++ }
++ else
++ {
++ break;
++ }
++
++ pVIE += (pEid->Len + 2);
++ len -= (pEid->Len + 2);
++ }
++
++ DBGPRINT(RT_DEBUG_TRACE, ("CheckRSNIE ==> skip_offset(%d) \n", *Offset));
++
++ return result;
++
++}
++
++
++/*
++ ========================================================================
++
++ Routine Description:
++ Parse KEYDATA field. KEYDATA[] May contain 2 RSN IE and optionally GTK.
++ GTK is encaptulated in KDE format at p.83 802.11i D10
++
++ Arguments:
++
++ Return Value:
++
++ Note:
++ 802.11i D10
++
++ ========================================================================
++*/
++BOOLEAN ParseKeyData(
++ IN PRTMP_ADAPTER pAd,
++ IN PUCHAR pKeyData,
++ IN UCHAR KeyDataLen,
++ IN UCHAR bPairewise)
++{
++ PKDE_ENCAP pKDE = NULL;
++ PUCHAR pMyKeyData = pKeyData;
++ UCHAR KeyDataLength = KeyDataLen;
++ UCHAR GTKLEN;
++ UCHAR skip_offset;
++
++ // Verify The RSN IE contained in Pairewise-Msg 3 and skip it
++ if (bPairewise)
++ {
++ // Check RSN IE whether it is WPA2/WPA2PSK
++ if (!CheckRSNIE(pAd, pKeyData, KeyDataLen, &skip_offset))
++ {
++ DBGPRINT(RT_DEBUG_ERROR, ("ParseKeyData ==> WPA2/WPA2PSK RSN IE mismatched \n"));
++ hex_dump("Get KEYDATA :", pKeyData, KeyDataLen);
++ return FALSE;
++ }
++ else
++ {
++ // skip RSN IE
++ pMyKeyData += skip_offset;
++ KeyDataLength -= skip_offset;
++
++ //DBGPRINT(RT_DEBUG_TRACE, ("ParseKeyData ==> WPA2/WPA2PSK RSN IE matched in Msg 3, Length(%d) \n", skip_offset));
++ }
++ }
++
++ DBGPRINT(RT_DEBUG_TRACE,("ParseKeyData ==> KeyDataLength %d without RSN_IE \n", KeyDataLength));
++
++ // Parse EKD format
++ if (KeyDataLength >= 8)
++ {
++ pKDE = (PKDE_ENCAP) pMyKeyData;
++ }
++ else
++ {
++ DBGPRINT(RT_DEBUG_ERROR, ("ERROR: KeyDataLength is too short \n"));
++ return FALSE;
++ }
++
++
++ // Sanity check - shared key index should not be 0
++ if (pKDE->GTKEncap.Kid == 0)
++ {
++ DBGPRINT(RT_DEBUG_ERROR, ("ERROR: GTK Key index zero \n"));
++ return FALSE;
++ }
++
++ // Sanity check - KED length
++ if (KeyDataLength < (pKDE->Len + 2))
++ {
++ DBGPRINT(RT_DEBUG_ERROR, ("ERROR: The len from KDE is too short \n"));
++ return FALSE;
++ }
++
++ // Get GTK length - refer to IEEE 802.11i-2004 p.82
++ GTKLEN = pKDE->Len -6;
++
++ if (GTKLEN < MIN_LEN_OF_GTK)
++ {
++ DBGPRINT(RT_DEBUG_ERROR, ("ERROR: GTK Key length is too short (%d) \n", GTKLEN));
++ return FALSE;
++ }
++ else
++ DBGPRINT(RT_DEBUG_TRACE, ("GTK Key with KDE formet got index=%d, len=%d \n", pKDE->GTKEncap.Kid, GTKLEN));
++
++ // Update GTK
++ // set key material, TxMic and RxMic for WPAPSK
++ NdisMoveMemory(pAd->StaCfg.GTK, pKDE->GTKEncap.GTK, 32);
++ pAd->StaCfg.DefaultKeyId = pKDE->GTKEncap.Kid;
++
++ // Update shared key table
++ NdisZeroMemory(&pAd->SharedKey[BSS0][pAd->StaCfg.DefaultKeyId], sizeof(CIPHER_KEY));
++ pAd->SharedKey[BSS0][pAd->StaCfg.DefaultKeyId].KeyLen = LEN_TKIP_EK;
++ NdisMoveMemory(pAd->SharedKey[BSS0][pAd->StaCfg.DefaultKeyId].Key, pKDE->GTKEncap.GTK, LEN_TKIP_EK);
++ NdisMoveMemory(pAd->SharedKey[BSS0][pAd->StaCfg.DefaultKeyId].RxMic, &pKDE->GTKEncap.GTK[16], LEN_TKIP_RXMICK);
++ NdisMoveMemory(pAd->SharedKey[BSS0][pAd->StaCfg.DefaultKeyId].TxMic, &pKDE->GTKEncap.GTK[24], LEN_TKIP_TXMICK);
++
++ // Update Shared Key CipherAlg
++ pAd->SharedKey[BSS0][pAd->StaCfg.DefaultKeyId].CipherAlg = CIPHER_NONE;
++ if (pAd->StaCfg.GroupCipher == Ndis802_11Encryption2Enabled)
++ pAd->SharedKey[BSS0][pAd->StaCfg.DefaultKeyId].CipherAlg = CIPHER_TKIP;
++ else if (pAd->StaCfg.GroupCipher == Ndis802_11Encryption3Enabled)
++ pAd->SharedKey[BSS0][pAd->StaCfg.DefaultKeyId].CipherAlg = CIPHER_AES;
++ else if (pAd->StaCfg.GroupCipher == Ndis802_11GroupWEP40Enabled)
++ pAd->SharedKey[BSS0][pAd->StaCfg.DefaultKeyId].CipherAlg = CIPHER_WEP64;
++ else if (pAd->StaCfg.GroupCipher == Ndis802_11GroupWEP104Enabled)
++ pAd->SharedKey[BSS0][pAd->StaCfg.DefaultKeyId].CipherAlg = CIPHER_WEP128;
++
++ return TRUE;
++
++}
++
++/*
++ ========================================================================
++
++ Routine Description:
++ Cisco CCKM PRF function
++
++ Arguments:
++ key Cisco Base Transient Key (BTK)
++ key_len The key length of the BTK
++ data Ruquest Number(RN) + BSSID
++ data_len The length of the data
++ output Store for PTK(Pairwise transient keys)
++ len The length of the output
++ Return Value:
++ None
++
++ Note:
++ 802.1i Annex F.9
++
++ ========================================================================
++*/
++VOID CCKMPRF(
++ IN UCHAR *key,
++ IN INT key_len,
++ IN UCHAR *data,
++ IN INT data_len,
++ OUT UCHAR *output,
++ IN INT len)
++{
++ INT i;
++ UCHAR input[1024];
++ INT currentindex = 0;
++ INT total_len;
++
++ NdisMoveMemory(input, data, data_len);
++ total_len = data_len;
++ input[total_len] = 0;
++ total_len++;
++ for (i = 0; i < (len + 19) / 20; i++)
++ {
++ HMAC_SHA1(input, total_len, key, key_len, &output[currentindex]);
++ currentindex += 20;
++ input[total_len - 1]++;
++ }
++}
++
++/*
++ ========================================================================
++
++ Routine Description:
++ Process MIC error indication and record MIC error timer.
++
++ Arguments:
++ pAd Pointer to our adapter
++ pWpaKey Pointer to the WPA key structure
++
++ Return Value:
++ None
++
++ IRQL = DISPATCH_LEVEL
++
++ Note:
++
++ ========================================================================
++*/
++VOID RTMPReportMicError(
++ IN PRTMP_ADAPTER pAd,
++ IN PCIPHER_KEY pWpaKey)
++{
++ ULONG Now;
++ UCHAR unicastKey = (pWpaKey->Type == PAIRWISE_KEY ? 1:0);
++
++ // Record Last MIC error time and count
++ Now = jiffies;
++ if (pAd->StaCfg.MicErrCnt == 0)
++ {
++ pAd->StaCfg.MicErrCnt++;
++ pAd->StaCfg.LastMicErrorTime = Now;
++ NdisZeroMemory(pAd->StaCfg.ReplayCounter, 8);
++ }
++ else if (pAd->StaCfg.MicErrCnt == 1)
++ {
++ if ((pAd->StaCfg.LastMicErrorTime + (60 * OS_HZ)) < Now)
++ {
++ // Update Last MIC error time, this did not violate two MIC errors within 60 seconds
++ pAd->StaCfg.LastMicErrorTime = Now;
++ }
++ else
++ {
++
++ if (pAd->CommonCfg.bWirelessEvent)
++ RTMPSendWirelessEvent(pAd, IW_COUNTER_MEASURES_EVENT_FLAG, pAd->MacTab.Content[BSSID_WCID].Addr, BSS0, 0);
++
++ pAd->StaCfg.LastMicErrorTime = Now;
++ // Violate MIC error counts, MIC countermeasures kicks in
++ pAd->StaCfg.MicErrCnt++;
++ // We shall block all reception
++ // We shall clean all Tx ring and disassoicate from AP after next EAPOL frame
++ //
++ // No necessary to clean all Tx ring, on RTMPHardTransmit will stop sending non-802.1X EAPOL packets
++ // if pAd->StaCfg.MicErrCnt greater than 2.
++ //
++ // RTMPRingCleanUp(pAd, QID_AC_BK);
++ // RTMPRingCleanUp(pAd, QID_AC_BE);
++ // RTMPRingCleanUp(pAd, QID_AC_VI);
++ // RTMPRingCleanUp(pAd, QID_AC_VO);
++ // RTMPRingCleanUp(pAd, QID_HCCA);
++ }
++ }
++ else
++ {
++ // MIC error count >= 2
++ // This should not happen
++ ;
++ }
++ MlmeEnqueue(pAd,
++ MLME_CNTL_STATE_MACHINE,
++ OID_802_11_MIC_FAILURE_REPORT_FRAME,
++ 1,
++ &unicastKey);
++
++ if (pAd->StaCfg.MicErrCnt == 2)
++ {
++ RTMPSetTimer(&pAd->StaCfg.WpaDisassocAndBlockAssocTimer, 100);
++ }
++}
++
++
++#ifdef WPA_SUPPLICANT_SUPPORT
++#define LENGTH_EAP_H 4
++// If the received frame is EAP-Packet ,find out its EAP-Code (Request(0x01), Response(0x02), Success(0x03), Failure(0x04)).
++INT WpaCheckEapCode(
++ IN PRTMP_ADAPTER pAd,
++ IN PUCHAR pFrame,
++ IN USHORT FrameLen,
++ IN USHORT OffSet)
++{
++
++ PUCHAR pData;
++ INT result = 0;
++
++ if( FrameLen < OffSet + LENGTH_EAPOL_H + LENGTH_EAP_H )
++ return result;
++
++ pData = pFrame + OffSet; // skip offset bytes
++
++ if(*(pData+1) == EAPPacket) // 802.1x header - Packet Type
++ {
++ result = *(pData+4); // EAP header - Code
++ }
++
++ return result;
++}
++
++VOID WpaSendMicFailureToWpaSupplicant(
++ IN PRTMP_ADAPTER pAd,
++ IN BOOLEAN bUnicast)
++{
++ union iwreq_data wrqu;
++ char custom[IW_CUSTOM_MAX] = {0};
++
++ sprintf(custom, "MLME-MICHAELMICFAILURE.indication");
++ if (bUnicast)
++ sprintf(custom, "%s unicast", custom);
++ wrqu.data.length = strlen(custom);
++ wireless_send_event(pAd->net_dev, IWEVCUSTOM, &wrqu, custom);
++
++ return;
++}
++#endif // WPA_SUPPLICANT_SUPPORT //
++
++VOID WpaMicFailureReportFrame(
++ IN PRTMP_ADAPTER pAd,
++ IN MLME_QUEUE_ELEM *Elem)
++{
++ PUCHAR pOutBuffer = NULL;
++ UCHAR Header802_3[14];
++ ULONG FrameLen = 0;
++ EAPOL_PACKET Packet;
++ UCHAR Mic[16];
++ BOOLEAN bUnicast;
++
++ DBGPRINT(RT_DEBUG_TRACE, ("WpaMicFailureReportFrame ----->\n"));
++
++ bUnicast = (Elem->Msg[0] == 1 ? TRUE:FALSE);
++ pAd->Sequence = ((pAd->Sequence) + 1) & (MAX_SEQ_NUMBER);
++
++ // init 802.3 header and Fill Packet
++ MAKE_802_3_HEADER(Header802_3, pAd->CommonCfg.Bssid, pAd->CurrentAddress, EAPOL);
++
++ NdisZeroMemory(&Packet, sizeof(Packet));
++ Packet.ProVer = EAPOL_VER;
++ Packet.ProType = EAPOLKey;
++
++ Packet.KeyDesc.Type = WPA1_KEY_DESC;
++
++ // Request field presented
++ Packet.KeyDesc.KeyInfo.Request = 1;
++
++ if(pAd->StaCfg.WepStatus == Ndis802_11Encryption3Enabled)
++ {
++ Packet.KeyDesc.KeyInfo.KeyDescVer = 2;
++ }
++ else // TKIP
++ {
++ Packet.KeyDesc.KeyInfo.KeyDescVer = 1;
++ }
++
++ Packet.KeyDesc.KeyInfo.KeyType = (bUnicast ? PAIRWISEKEY : GROUPKEY);
++
++ // KeyMic field presented
++ Packet.KeyDesc.KeyInfo.KeyMic = 1;
++
++ // Error field presented
++ Packet.KeyDesc.KeyInfo.Error = 1;
++
++ // Update packet length after decide Key data payload
++ Packet.Body_Len[1] = sizeof(KEY_DESCRIPTER) - MAX_LEN_OF_RSNIE;
++
++ // Key Replay Count
++ NdisMoveMemory(Packet.KeyDesc.ReplayCounter, pAd->StaCfg.ReplayCounter, LEN_KEY_DESC_REPLAY);
++ inc_byte_array(pAd->StaCfg.ReplayCounter, 8);
++
++ // Convert to little-endian format.
++ *((USHORT *)&Packet.KeyDesc.KeyInfo) = cpu2le16(*((USHORT *)&Packet.KeyDesc.KeyInfo));
++
++
++ MlmeAllocateMemory(pAd, (PUCHAR *)&pOutBuffer); // allocate memory
++ if(pOutBuffer == NULL)
++ {
++ return;
++ }
++
++ // Prepare EAPOL frame for MIC calculation
++ // Be careful, only EAPOL frame is counted for MIC calculation
++ MakeOutgoingFrame(pOutBuffer, &FrameLen,
++ Packet.Body_Len[1] + 4, &Packet,
++ END_OF_ARGS);
++
++ // Prepare and Fill MIC value
++ NdisZeroMemory(Mic, sizeof(Mic));
++ if(pAd->StaCfg.WepStatus == Ndis802_11Encryption3Enabled)
++ { // AES
++ UCHAR digest[20] = {0};
++ HMAC_SHA1(pOutBuffer, FrameLen, pAd->StaCfg.PTK, LEN_EAP_MICK, digest);
++ NdisMoveMemory(Mic, digest, LEN_KEY_DESC_MIC);
++ }
++ else
++ { // TKIP
++ hmac_md5(pAd->StaCfg.PTK, LEN_EAP_MICK, pOutBuffer, FrameLen, Mic);
++ }
++ NdisMoveMemory(Packet.KeyDesc.KeyMic, Mic, LEN_KEY_DESC_MIC);
++
++ MakeOutgoingFrame(pOutBuffer, &FrameLen,
++ LENGTH_802_3, &Header802_3,
++ Packet.Body_Len[1] + 4, &Packet,
++ END_OF_ARGS);
++
++ // opy frame to Tx ring and send MIC failure report frame to authenticator
++ RTMPToWirelessSta(pAd, Header802_3, LENGTH_802_3, (PUCHAR)&Packet, Packet.Body_Len[1] + 4, FALSE);
++
++ MlmeFreeMemory(pAd, (PUCHAR)pOutBuffer);
++
++ DBGPRINT(RT_DEBUG_TRACE, ("WpaMicFailureReportFrame <-----\n"));
++}
++
++/** from wpa_supplicant
++ * inc_byte_array - Increment arbitrary length byte array by one
++ * @counter: Pointer to byte array
++ * @len: Length of the counter in bytes
++ *
++ * This function increments the last byte of the counter by one and continues
++ * rolling over to more significant bytes if the byte was incremented from
++ * 0xff to 0x00.
++ */
++void inc_byte_array(UCHAR *counter, int len)
++{
++ int pos = len - 1;
++ while (pos >= 0) {
++ counter[pos]++;
++ if (counter[pos] != 0)
++ break;
++ pos--;
++ }
++}
++
++VOID WpaDisassocApAndBlockAssoc(
++ IN PVOID SystemSpecific1,
++ IN PVOID FunctionContext,
++ IN PVOID SystemSpecific2,
++ IN PVOID SystemSpecific3)
++{
++ RTMP_ADAPTER *pAd = (PRTMP_ADAPTER)FunctionContext;
++ MLME_DISASSOC_REQ_STRUCT DisassocReq;
++
++ // disassoc from current AP first
++ DBGPRINT(RT_DEBUG_TRACE, ("RTMPReportMicError - disassociate with current AP after sending second continuous EAPOL frame\n"));
++ DisassocParmFill(pAd, &DisassocReq, pAd->CommonCfg.Bssid, REASON_MIC_FAILURE);
++ MlmeEnqueue(pAd, ASSOC_STATE_MACHINE, MT2_MLME_DISASSOC_REQ, sizeof(MLME_DISASSOC_REQ_STRUCT), &DisassocReq);
++
++ pAd->Mlme.CntlMachine.CurrState = CNTL_WAIT_DISASSOC;
++ pAd->StaCfg.bBlockAssoc = TRUE;
++}
++
+--- /dev/null
++++ b/drivers/staging/rt2870/tmp60
+@@ -0,0 +1,7037 @@
++/*
++ *************************************************************************
++ * Ralink Tech Inc.
++ * 5F., No.36, Taiyuan St., Jhubei City,
++ * Hsinchu County 302,
++ * Taiwan, R.O.C.
++ *
++ * (c) Copyright 2002-2007, Ralink Technology, Inc.
++ *
++ * This program is free software; you can redistribute it and/or modify *
++ * it under the terms of the GNU General Public License as published by *
++ * the Free Software Foundation; either version 2 of the License, or *
++ * (at your option) any later version. *
++ * *
++ * This program is distributed in the hope that it will be useful, *
++ * but WITHOUT ANY WARRANTY; without even the implied warranty of *
++ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the *
++ * GNU General Public License for more details. *
++ * *
++ * You should have received a copy of the GNU General Public License *
++ * along with this program; if not, write to the *
++ * Free Software Foundation, Inc., *
++ * 59 Temple Place - Suite 330, Boston, MA 02111-1307, USA. *
++ * *
++ *************************************************************************
++
++ Module Name:
++ sta_ioctl.c
++
++ Abstract:
++ IOCTL related subroutines
++
++ Revision History:
++ Who When What
++ -------- ---------- ----------------------------------------------
++ Rory Chen 01-03-2003 created
++ Rory Chen 02-14-2005 modify to support RT61
++*/
++
++#include "rt_config.h"
++
++#ifdef DBG
++extern ULONG RTDebugLevel;
++#endif
++
++#define NR_WEP_KEYS 4
++#define WEP_SMALL_KEY_LEN (40/8)
++#define WEP_LARGE_KEY_LEN (104/8)
++
++#define GROUP_KEY_NO 4
++
++#if LINUX_VERSION_CODE >= KERNEL_VERSION(2,6,27)
++#define IWE_STREAM_ADD_EVENT(_A, _B, _C, _D, _E) iwe_stream_add_event(_A, _B, _C, _D, _E)
++#define IWE_STREAM_ADD_POINT(_A, _B, _C, _D, _E) iwe_stream_add_point(_A, _B, _C, _D, _E)
++#define IWE_STREAM_ADD_VALUE(_A, _B, _C, _D, _E, _F) iwe_stream_add_value(_A, _B, _C, _D, _E, _F)
++#else
++#define IWE_STREAM_ADD_EVENT(_A, _B, _C, _D, _E) iwe_stream_add_event(_B, _C, _D, _E)
++#define IWE_STREAM_ADD_POINT(_A, _B, _C, _D, _E) iwe_stream_add_point(_B, _C, _D, _E)
++#define IWE_STREAM_ADD_VALUE(_A, _B, _C, _D, _E, _F) iwe_stream_add_value(_B, _C, _D, _E, _F)
++#endif
++
++extern UCHAR CipherWpa2Template[];
++extern UCHAR CipherWpaPskTkip[];
++extern UCHAR CipherWpaPskTkipLen;
++
++typedef struct PACKED _RT_VERSION_INFO{
++ UCHAR DriverVersionW;
++ UCHAR DriverVersionX;
++ UCHAR DriverVersionY;
++ UCHAR DriverVersionZ;
++ UINT DriverBuildYear;
++ UINT DriverBuildMonth;
++ UINT DriverBuildDay;
++} RT_VERSION_INFO, *PRT_VERSION_INFO;
++
++struct iw_priv_args privtab[] = {
++{ RTPRIV_IOCTL_SET,
++ IW_PRIV_TYPE_CHAR | 1024, 0,
++ "set"},
++
++{ RTPRIV_IOCTL_SHOW, 0, IW_PRIV_TYPE_CHAR | IW_PRIV_SIZE_MASK,
++ ""},
++{ RTPRIV_IOCTL_SHOW, IW_PRIV_TYPE_CHAR | 1024, IW_PRIV_TYPE_CHAR | IW_PRIV_SIZE_MASK,
++ ""},
++/* --- sub-ioctls definitions --- */
++ { SHOW_CONN_STATUS,
++ 0, IW_PRIV_TYPE_CHAR | IW_PRIV_SIZE_MASK, "connStatus" },
++ { SHOW_DRVIER_VERION,
++ 0, IW_PRIV_TYPE_CHAR | IW_PRIV_SIZE_MASK, "driverVer" },
++ { SHOW_BA_INFO,
++ 0, IW_PRIV_TYPE_CHAR | IW_PRIV_SIZE_MASK, "bainfo" },
++ { SHOW_DESC_INFO,
++ 0, IW_PRIV_TYPE_CHAR | IW_PRIV_SIZE_MASK, "descinfo" },
++ { RAIO_OFF,
++ 0, IW_PRIV_TYPE_CHAR | IW_PRIV_SIZE_MASK, "radio_off" },
++ { RAIO_ON,
++ 0, IW_PRIV_TYPE_CHAR | IW_PRIV_SIZE_MASK, "radio_on" },
++#ifdef QOS_DLS_SUPPORT
++ { SHOW_DLS_ENTRY_INFO,
++ 0, IW_PRIV_TYPE_CHAR | IW_PRIV_SIZE_MASK, "dlsentryinfo" },
++#endif // QOS_DLS_SUPPORT //
++ { SHOW_CFG_VALUE,
++ IW_PRIV_TYPE_CHAR | 1024, IW_PRIV_TYPE_CHAR | IW_PRIV_SIZE_MASK, "show" },
++ { SHOW_ADHOC_ENTRY_INFO,
++ 0, IW_PRIV_TYPE_CHAR | IW_PRIV_SIZE_MASK, "adhocEntry" },
++
++/* --- sub-ioctls relations --- */
++
++#ifdef DBG
++{ RTPRIV_IOCTL_BBP,
++ IW_PRIV_TYPE_CHAR | IW_PRIV_SIZE_MASK, IW_PRIV_TYPE_CHAR | IW_PRIV_SIZE_MASK,
++ "bbp"},
++{ RTPRIV_IOCTL_MAC,
++ IW_PRIV_TYPE_CHAR | 1024, IW_PRIV_TYPE_CHAR | 1024,
++ "mac"},
++{ RTPRIV_IOCTL_E2P,
++ IW_PRIV_TYPE_CHAR | 1024, IW_PRIV_TYPE_CHAR | 1024,
++ "e2p"},
++#endif /* DBG */
++
++{ RTPRIV_IOCTL_STATISTICS,
++ 0, IW_PRIV_TYPE_CHAR | IW_PRIV_SIZE_MASK,
++ "stat"},
++{ RTPRIV_IOCTL_GSITESURVEY,
++ 0, IW_PRIV_TYPE_CHAR | 1024,
++ "get_site_survey"},
++};
++
++INT Set_SSID_Proc(
++ IN PRTMP_ADAPTER pAdapter,
++ IN PUCHAR arg);
++
++#ifdef WMM_SUPPORT
++INT Set_WmmCapable_Proc(
++ IN PRTMP_ADAPTER pAd,
++ IN PUCHAR arg);
++#endif
++
++INT Set_NetworkType_Proc(
++ IN PRTMP_ADAPTER pAdapter,
++ IN PUCHAR arg);
++
++INT Set_AuthMode_Proc(
++ IN PRTMP_ADAPTER pAdapter,
++ IN PUCHAR arg);
++
++INT Set_EncrypType_Proc(
++ IN PRTMP_ADAPTER pAdapter,
++ IN PUCHAR arg);
++
++INT Set_DefaultKeyID_Proc(
++ IN PRTMP_ADAPTER pAdapter,
++ IN PUCHAR arg);
++
++INT Set_Key1_Proc(
++ IN PRTMP_ADAPTER pAdapter,
++ IN PUCHAR arg);
++
++INT Set_Key2_Proc(
++ IN PRTMP_ADAPTER pAdapter,
++ IN PUCHAR arg);
++
++INT Set_Key3_Proc(
++ IN PRTMP_ADAPTER pAdapter,
++ IN PUCHAR arg);
++
++INT Set_Key4_Proc(
++ IN PRTMP_ADAPTER pAdapter,
++ IN PUCHAR arg);
++
++INT Set_WPAPSK_Proc(
++ IN PRTMP_ADAPTER pAdapter,
++ IN PUCHAR arg);
++
++
++INT Set_PSMode_Proc(
++ IN PRTMP_ADAPTER pAdapter,
++ IN PUCHAR arg);
++
++#ifdef WPA_SUPPLICANT_SUPPORT
++INT Set_Wpa_Support(
++ IN PRTMP_ADAPTER pAd,
++ IN PUCHAR arg);
++#endif // WPA_SUPPLICANT_SUPPORT //
++
++#ifdef DBG
++VOID RTMPIoctlBBP(
++ IN PRTMP_ADAPTER pAdapter,
++ IN struct iwreq *wrq);
++
++VOID RTMPIoctlMAC(
++ IN PRTMP_ADAPTER pAdapter,
++ IN struct iwreq *wrq);
++
++VOID RTMPIoctlE2PROM(
++ IN PRTMP_ADAPTER pAdapter,
++ IN struct iwreq *wrq);
++#endif // DBG //
++
++
++NDIS_STATUS RTMPWPANoneAddKeyProc(
++ IN PRTMP_ADAPTER pAd,
++ IN PVOID pBuf);
++
++INT Set_FragTest_Proc(
++ IN PRTMP_ADAPTER pAdapter,
++ IN PUCHAR arg);
++
++#ifdef DOT11_N_SUPPORT
++INT Set_TGnWifiTest_Proc(
++ IN PRTMP_ADAPTER pAd,
++ IN PUCHAR arg);
++#endif // DOT11_N_SUPPORT //
++
++INT Set_LongRetryLimit_Proc(
++ IN PRTMP_ADAPTER pAdapter,
++ IN PUCHAR arg);
++
++INT Set_ShortRetryLimit_Proc(
++ IN PRTMP_ADAPTER pAdapter,
++ IN PUCHAR arg);
++
++#ifdef EXT_BUILD_CHANNEL_LIST
++INT Set_Ieee80211dClientMode_Proc(
++ IN PRTMP_ADAPTER pAdapter,
++ IN PUCHAR arg);
++#endif // EXT_BUILD_CHANNEL_LIST //
++
++#ifdef CARRIER_DETECTION_SUPPORT
++INT Set_CarrierDetect_Proc(
++ IN PRTMP_ADAPTER pAd,
++ IN PUCHAR arg);
++#endif // CARRIER_DETECTION_SUPPORT //
++
++INT Show_Adhoc_MacTable_Proc(
++ IN PRTMP_ADAPTER pAd,
++ IN PCHAR extra);
++
++static struct {
++ CHAR *name;
++ INT (*set_proc)(PRTMP_ADAPTER pAdapter, PUCHAR arg);
++} *PRTMP_PRIVATE_SET_PROC, RTMP_PRIVATE_SUPPORT_PROC[] = {
++ {"DriverVersion", Set_DriverVersion_Proc},
++ {"CountryRegion", Set_CountryRegion_Proc},
++ {"CountryRegionABand", Set_CountryRegionABand_Proc},
++ {"SSID", Set_SSID_Proc},
++ {"WirelessMode", Set_WirelessMode_Proc},
++ {"TxBurst", Set_TxBurst_Proc},
++ {"TxPreamble", Set_TxPreamble_Proc},
++ {"TxPower", Set_TxPower_Proc},
++ {"Channel", Set_Channel_Proc},
++ {"BGProtection", Set_BGProtection_Proc},
++ {"RTSThreshold", Set_RTSThreshold_Proc},
++ {"FragThreshold", Set_FragThreshold_Proc},
++#ifdef DOT11_N_SUPPORT
++ {"HtBw", Set_HtBw_Proc},
++ {"HtMcs", Set_HtMcs_Proc},
++ {"HtGi", Set_HtGi_Proc},
++ {"HtOpMode", Set_HtOpMode_Proc},
++ {"HtExtcha", Set_HtExtcha_Proc},
++ {"HtMpduDensity", Set_HtMpduDensity_Proc},
++ {"HtBaWinSize", Set_HtBaWinSize_Proc},
++ {"HtRdg", Set_HtRdg_Proc},
++ {"HtAmsdu", Set_HtAmsdu_Proc},
++ {"HtAutoBa", Set_HtAutoBa_Proc},
++ {"HtBaDecline", Set_BADecline_Proc},
++ {"HtProtect", Set_HtProtect_Proc},
++ {"HtMimoPs", Set_HtMimoPs_Proc},
++#endif // DOT11_N_SUPPORT //
++
++#ifdef AGGREGATION_SUPPORT
++ {"PktAggregate", Set_PktAggregate_Proc},
++#endif
++
++#ifdef WMM_SUPPORT
++ {"WmmCapable", Set_WmmCapable_Proc},
++#endif
++ {"IEEE80211H", Set_IEEE80211H_Proc},
++ {"NetworkType", Set_NetworkType_Proc},
++ {"AuthMode", Set_AuthMode_Proc},
++ {"EncrypType", Set_EncrypType_Proc},
++ {"DefaultKeyID", Set_DefaultKeyID_Proc},
++ {"Key1", Set_Key1_Proc},
++ {"Key2", Set_Key2_Proc},
++ {"Key3", Set_Key3_Proc},
++ {"Key4", Set_Key4_Proc},
++ {"WPAPSK", Set_WPAPSK_Proc},
++ {"ResetCounter", Set_ResetStatCounter_Proc},
++ {"PSMode", Set_PSMode_Proc},
++#ifdef DBG
++ {"Debug", Set_Debug_Proc},
++#endif
++
++#ifdef RALINK_ATE
++ {"ATE", Set_ATE_Proc},
++ {"ATEDA", Set_ATE_DA_Proc},
++ {"ATESA", Set_ATE_SA_Proc},
++ {"ATEBSSID", Set_ATE_BSSID_Proc},
++ {"ATECHANNEL", Set_ATE_CHANNEL_Proc},
++ {"ATETXPOW0", Set_ATE_TX_POWER0_Proc},
++ {"ATETXPOW1", Set_ATE_TX_POWER1_Proc},
++ {"ATETXANT", Set_ATE_TX_Antenna_Proc},
++ {"ATERXANT", Set_ATE_RX_Antenna_Proc},
++ {"ATETXFREQOFFSET", Set_ATE_TX_FREQOFFSET_Proc},
++ {"ATETXBW", Set_ATE_TX_BW_Proc},
++ {"ATETXLEN", Set_ATE_TX_LENGTH_Proc},
++ {"ATETXCNT", Set_ATE_TX_COUNT_Proc},
++ {"ATETXMCS", Set_ATE_TX_MCS_Proc},
++ {"ATETXMODE", Set_ATE_TX_MODE_Proc},
++ {"ATETXGI", Set_ATE_TX_GI_Proc},
++ {"ATERXFER", Set_ATE_RX_FER_Proc},
++ {"ATERRF", Set_ATE_Read_RF_Proc},
++ {"ATEWRF1", Set_ATE_Write_RF1_Proc},
++ {"ATEWRF2", Set_ATE_Write_RF2_Proc},
++ {"ATEWRF3", Set_ATE_Write_RF3_Proc},
++ {"ATEWRF4", Set_ATE_Write_RF4_Proc},
++ {"ATELDE2P", Set_ATE_Load_E2P_Proc},
++ {"ATERE2P", Set_ATE_Read_E2P_Proc},
++ {"ATESHOW", Set_ATE_Show_Proc},
++ {"ATEHELP", Set_ATE_Help_Proc},
++
++#ifdef RALINK_28xx_QA
++ {"TxStop", Set_TxStop_Proc},
++ {"RxStop", Set_RxStop_Proc},
++#endif // RALINK_28xx_QA //
++#endif // RALINK_ATE //
++
++#ifdef WPA_SUPPLICANT_SUPPORT
++ {"WpaSupport", Set_Wpa_Support},
++#endif // WPA_SUPPLICANT_SUPPORT //
++
++
++
++ {"FixedTxMode", Set_FixedTxMode_Proc},
++#ifdef CONFIG_APSTA_MIXED_SUPPORT
++ {"OpMode", Set_OpMode_Proc},
++#endif // CONFIG_APSTA_MIXED_SUPPORT //
++#ifdef DOT11_N_SUPPORT
++ {"TGnWifiTest", Set_TGnWifiTest_Proc},
++ {"ForceGF", Set_ForceGF_Proc},
++#endif // DOT11_N_SUPPORT //
++#ifdef QOS_DLS_SUPPORT
++ {"DlsAddEntry", Set_DlsAddEntry_Proc},
++ {"DlsTearDownEntry", Set_DlsTearDownEntry_Proc},
++#endif // QOS_DLS_SUPPORT //
++ {"LongRetry", Set_LongRetryLimit_Proc},
++ {"ShortRetry", Set_ShortRetryLimit_Proc},
++#ifdef EXT_BUILD_CHANNEL_LIST
++ {"11dClientMode", Set_Ieee80211dClientMode_Proc},
++#endif // EXT_BUILD_CHANNEL_LIST //
++#ifdef CARRIER_DETECTION_SUPPORT
++ {"CarrierDetect", Set_CarrierDetect_Proc},
++#endif // CARRIER_DETECTION_SUPPORT //
++
++ {NULL,}
++};
++
++
++VOID RTMPAddKey(
++ IN PRTMP_ADAPTER pAd,
++ IN PNDIS_802_11_KEY pKey)
++{
++ ULONG KeyIdx;
++ MAC_TABLE_ENTRY *pEntry;
++
++ DBGPRINT(RT_DEBUG_TRACE, ("RTMPAddKey ------>\n"));
++
++ if (pAd->StaCfg.AuthMode >= Ndis802_11AuthModeWPA)
++ {
++ if (pKey->KeyIndex & 0x80000000)
++ {
++ if (pAd->StaCfg.AuthMode == Ndis802_11AuthModeWPANone)
++ {
++ NdisZeroMemory(pAd->StaCfg.PMK, 32);
++ NdisMoveMemory(pAd->StaCfg.PMK, pKey->KeyMaterial, pKey->KeyLength);
++ goto end;
++ }
++ // Update PTK
++ NdisZeroMemory(&pAd->SharedKey[BSS0][0], sizeof(CIPHER_KEY));
++ pAd->SharedKey[BSS0][0].KeyLen = LEN_TKIP_EK;
++ NdisMoveMemory(pAd->SharedKey[BSS0][0].Key, pKey->KeyMaterial, LEN_TKIP_EK);
++#ifdef WPA_SUPPLICANT_SUPPORT
++ if (pAd->StaCfg.PairCipher == Ndis802_11Encryption2Enabled)
++ {
++ NdisMoveMemory(pAd->SharedKey[BSS0][0].RxMic, pKey->KeyMaterial + LEN_TKIP_EK, LEN_TKIP_TXMICK);
++ NdisMoveMemory(pAd->SharedKey[BSS0][0].TxMic, pKey->KeyMaterial + LEN_TKIP_EK + LEN_TKIP_TXMICK, LEN_TKIP_RXMICK);
++ }
++ else
++#endif // WPA_SUPPLICANT_SUPPORT //
++ {
++ NdisMoveMemory(pAd->SharedKey[BSS0][0].TxMic, pKey->KeyMaterial + LEN_TKIP_EK, LEN_TKIP_TXMICK);
++ NdisMoveMemory(pAd->SharedKey[BSS0][0].RxMic, pKey->KeyMaterial + LEN_TKIP_EK + LEN_TKIP_TXMICK, LEN_TKIP_RXMICK);
++ }
++
++ // Decide its ChiperAlg
++ if (pAd->StaCfg.PairCipher == Ndis802_11Encryption2Enabled)
++ pAd->SharedKey[BSS0][0].CipherAlg = CIPHER_TKIP;
++ else if (pAd->StaCfg.PairCipher == Ndis802_11Encryption3Enabled)
++ pAd->SharedKey[BSS0][0].CipherAlg = CIPHER_AES;
++ else
++ pAd->SharedKey[BSS0][0].CipherAlg = CIPHER_NONE;
++
++ // Update these related information to MAC_TABLE_ENTRY
++ pEntry = &pAd->MacTab.Content[BSSID_WCID];
++ NdisMoveMemory(pEntry->PairwiseKey.Key, pAd->SharedKey[BSS0][0].Key, LEN_TKIP_EK);
++ NdisMoveMemory(pEntry->PairwiseKey.RxMic, pAd->SharedKey[BSS0][0].RxMic, LEN_TKIP_RXMICK);
++ NdisMoveMemory(pEntry->PairwiseKey.TxMic, pAd->SharedKey[BSS0][0].TxMic, LEN_TKIP_TXMICK);
++ pEntry->PairwiseKey.CipherAlg = pAd->SharedKey[BSS0][0].CipherAlg;
++
++ // Update pairwise key information to ASIC Shared Key Table
++ AsicAddSharedKeyEntry(pAd,
++ BSS0,
++ 0,
++ pAd->SharedKey[BSS0][0].CipherAlg,
++ pAd->SharedKey[BSS0][0].Key,
++ pAd->SharedKey[BSS0][0].TxMic,
++ pAd->SharedKey[BSS0][0].RxMic);
++
++ // Update ASIC WCID attribute table and IVEIV table
++ RTMPAddWcidAttributeEntry(pAd,
++ BSS0,
++ 0,
++ pAd->SharedKey[BSS0][0].CipherAlg,
++ pEntry);
++
++ if (pAd->StaCfg.AuthMode >= Ndis802_11AuthModeWPA2)
++ {
++ // set 802.1x port control
++ //pAd->StaCfg.PortSecured = WPA_802_1X_PORT_SECURED;
++ STA_PORT_SECURED(pAd);
++
++ // Indicate Connected for GUI
++ pAd->IndicateMediaState = NdisMediaStateConnected;
++ }
++ }
++ else
++ {
++ // Update GTK
++ pAd->StaCfg.DefaultKeyId = (pKey->KeyIndex & 0xFF);
++ NdisZeroMemory(&pAd->SharedKey[BSS0][pAd->StaCfg.DefaultKeyId], sizeof(CIPHER_KEY));
++ pAd->SharedKey[BSS0][pAd->StaCfg.DefaultKeyId].KeyLen = LEN_TKIP_EK;
++ NdisMoveMemory(pAd->SharedKey[BSS0][pAd->StaCfg.DefaultKeyId].Key, pKey->KeyMaterial, LEN_TKIP_EK);
++#ifdef WPA_SUPPLICANT_SUPPORT
++ if (pAd->StaCfg.GroupCipher == Ndis802_11Encryption2Enabled)
++ {
++ NdisMoveMemory(pAd->SharedKey[BSS0][pAd->StaCfg.DefaultKeyId].RxMic, pKey->KeyMaterial + LEN_TKIP_EK, LEN_TKIP_TXMICK);
++ NdisMoveMemory(pAd->SharedKey[BSS0][pAd->StaCfg.DefaultKeyId].TxMic, pKey->KeyMaterial + LEN_TKIP_EK + LEN_TKIP_TXMICK, LEN_TKIP_RXMICK);
++ }
++ else
++#endif // WPA_SUPPLICANT_SUPPORT //
++ {
++ NdisMoveMemory(pAd->SharedKey[BSS0][pAd->StaCfg.DefaultKeyId].TxMic, pKey->KeyMaterial + LEN_TKIP_EK, LEN_TKIP_TXMICK);
++ NdisMoveMemory(pAd->SharedKey[BSS0][pAd->StaCfg.DefaultKeyId].RxMic, pKey->KeyMaterial + LEN_TKIP_EK + LEN_TKIP_TXMICK, LEN_TKIP_RXMICK);
++ }
++
++ // Update Shared Key CipherAlg
++ pAd->SharedKey[BSS0][pAd->StaCfg.DefaultKeyId].CipherAlg = CIPHER_NONE;
++ if (pAd->StaCfg.GroupCipher == Ndis802_11Encryption2Enabled)
++ pAd->SharedKey[BSS0][pAd->StaCfg.DefaultKeyId].CipherAlg = CIPHER_TKIP;
++ else if (pAd->StaCfg.GroupCipher == Ndis802_11Encryption3Enabled)
++ pAd->SharedKey[BSS0][pAd->StaCfg.DefaultKeyId].CipherAlg = CIPHER_AES;
++
++ // Update group key information to ASIC Shared Key Table
++ AsicAddSharedKeyEntry(pAd,
++ BSS0,
++ pAd->StaCfg.DefaultKeyId,
++ pAd->SharedKey[BSS0][pAd->StaCfg.DefaultKeyId].CipherAlg,
++ pAd->SharedKey[BSS0][pAd->StaCfg.DefaultKeyId].Key,
++ pAd->SharedKey[BSS0][pAd->StaCfg.DefaultKeyId].TxMic,
++ pAd->SharedKey[BSS0][pAd->StaCfg.DefaultKeyId].RxMic);
++
++ // Update ASIC WCID attribute table and IVEIV table
++ RTMPAddWcidAttributeEntry(pAd,
++ BSS0,
++ pAd->StaCfg.DefaultKeyId,
++ pAd->SharedKey[BSS0][pAd->StaCfg.DefaultKeyId].CipherAlg,
++ NULL);
++
++ // set 802.1x port control
++ //pAd->StaCfg.PortSecured = WPA_802_1X_PORT_SECURED;
++ STA_PORT_SECURED(pAd);
++
++ // Indicate Connected for GUI
++ pAd->IndicateMediaState = NdisMediaStateConnected;
++ }
++ }
++ else // dynamic WEP from wpa_supplicant
++ {
++ UCHAR CipherAlg;
++ PUCHAR Key;
++
++ if(pKey->KeyLength == 32)
++ goto end;
++
++ KeyIdx = pKey->KeyIndex & 0x0fffffff;
++
++ if (KeyIdx < 4)
++ {
++ // it is a default shared key, for Pairwise key setting
++ if (pKey->KeyIndex & 0x80000000)
++ {
++ pEntry = MacTableLookup(pAd, pKey->BSSID);
++
++ if (pEntry)
++ {
++ DBGPRINT(RT_DEBUG_TRACE, ("RTMPAddKey: Set Pair-wise Key\n"));
++
++ // set key material and key length
++ pEntry->PairwiseKey.KeyLen = (UCHAR)pKey->KeyLength;
++ NdisMoveMemory(pEntry->PairwiseKey.Key, &pKey->KeyMaterial, pKey->KeyLength);
++
++ // set Cipher type
++ if (pKey->KeyLength == 5)
++ pEntry->PairwiseKey.CipherAlg = CIPHER_WEP64;
++ else
++ pEntry->PairwiseKey.CipherAlg = CIPHER_WEP128;
++
++ // Add Pair-wise key to Asic
++ AsicAddPairwiseKeyEntry(
++ pAd,
++ pEntry->Addr,
++ (UCHAR)pEntry->Aid,
++ &pEntry->PairwiseKey);
++
++ // update WCID attribute table and IVEIV table for this entry
++ RTMPAddWcidAttributeEntry(
++ pAd,
++ BSS0,
++ KeyIdx, // The value may be not zero
++ pEntry->PairwiseKey.CipherAlg,
++ pEntry);
++
++ }
++ }
++ else
++ {
++ // Default key for tx (shared key)
++ pAd->StaCfg.DefaultKeyId = (UCHAR) KeyIdx;
++
++ // set key material and key length
++ pAd->SharedKey[BSS0][KeyIdx].KeyLen = (UCHAR) pKey->KeyLength;
++ NdisMoveMemory(pAd->SharedKey[BSS0][KeyIdx].Key, &pKey->KeyMaterial, pKey->KeyLength);
++
++ // Set Ciper type
++ if (pKey->KeyLength == 5)
++ pAd->SharedKey[BSS0][KeyIdx].CipherAlg = CIPHER_WEP64;
++ else
++ pAd->SharedKey[BSS0][KeyIdx].CipherAlg = CIPHER_WEP128;
++
++ CipherAlg = pAd->SharedKey[BSS0][KeyIdx].CipherAlg;
++ Key = pAd->SharedKey[BSS0][KeyIdx].Key;
++
++ // Set Group key material to Asic
++ AsicAddSharedKeyEntry(pAd, BSS0, KeyIdx, CipherAlg, Key, NULL, NULL);
++
++ // Update WCID attribute table and IVEIV table for this group key table
++ RTMPAddWcidAttributeEntry(pAd, BSS0, KeyIdx, CipherAlg, NULL);
++
++ }
++ }
++ }
++end:
++ return;
++}
++
++char * rtstrchr(const char * s, int c)
++{
++ for(; *s != (char) c; ++s)
++ if (*s == '\0')
++ return NULL;
++ return (char *) s;
++}
++
++/*
++This is required for LinEX2004/kernel2.6.7 to provide iwlist scanning function
++*/
++
++int
++rt_ioctl_giwname(struct net_device *dev,
++ struct iw_request_info *info,
++ char *name, char *extra)
++{
++// PRTMP_ADAPTER pAdapter = (PRTMP_ADAPTER) dev->priv;
++
++#ifdef RT2870
++ strncpy(name, "RT2870 Wireless", IFNAMSIZ);
++#endif // RT2870 //
++ return 0;
++}
++
++int rt_ioctl_siwfreq(struct net_device *dev,
++ struct iw_request_info *info,
++ struct iw_freq *freq, char *extra)
++{
++ PRTMP_ADAPTER pAdapter = (PRTMP_ADAPTER) dev->priv;
++ int chan = -1;
++
++ //check if the interface is down
++ if(!RTMP_TEST_FLAG(pAdapter, fRTMP_ADAPTER_INTERRUPT_IN_USE))
++ {
++ DBGPRINT(RT_DEBUG_TRACE, ("INFO::Network is down!\n"));
++ return -ENETDOWN;
++ }
++
++
++ if (freq->e > 1)
++ return -EINVAL;
++
++ if((freq->e == 0) && (freq->m <= 1000))
++ chan = freq->m; // Setting by channel number
++ else
++ MAP_KHZ_TO_CHANNEL_ID( (freq->m /100) , chan); // Setting by frequency - search the table , like 2.412G, 2.422G,
++
++ if (ChannelSanity(pAdapter, chan) == TRUE)
++ {
++ pAdapter->CommonCfg.Channel = chan;
++ DBGPRINT(RT_DEBUG_ERROR, ("==>rt_ioctl_siwfreq::SIOCSIWFREQ[cmd=0x%x] (Channel=%d)\n", SIOCSIWFREQ, pAdapter->CommonCfg.Channel));
++ }
++ else
++ return -EINVAL;
++
++ return 0;
++}
++int rt_ioctl_giwfreq(struct net_device *dev,
++ struct iw_request_info *info,
++ struct iw_freq *freq, char *extra)
++{
++ VIRTUAL_ADAPTER *pVirtualAd = NULL;
++ PRTMP_ADAPTER pAdapter = NULL;
++ UCHAR ch;
++ ULONG m;
++
++ if (dev->priv_flags == INT_MAIN)
++ {
++ pAdapter = dev->priv;
++ }
++ else
++ {
++ pVirtualAd = dev->priv;
++ if (pVirtualAd && pVirtualAd->RtmpDev)
++ pAdapter = pVirtualAd->RtmpDev->priv;
++ }
++
++ if (pAdapter == NULL)
++ {
++ /* if 1st open fail, pAd will be free;
++ So the net_dev->priv will be NULL in 2rd open */
++ return -ENETDOWN;
++ }
++
++ ch = pAdapter->CommonCfg.Channel;
++
++ DBGPRINT(RT_DEBUG_TRACE,("==>rt_ioctl_giwfreq %d\n", ch));
++
++ MAP_CHANNEL_ID_TO_KHZ(ch, m);
++ freq->m = m * 100;
++ freq->e = 1;
++ return 0;
++}
++
++int rt_ioctl_siwmode(struct net_device *dev,
++ struct iw_request_info *info,
++ __u32 *mode, char *extra)
++{
++ PRTMP_ADAPTER pAdapter = (PRTMP_ADAPTER) dev->priv;
++
++ //check if the interface is down
++ if(!RTMP_TEST_FLAG(pAdapter, fRTMP_ADAPTER_INTERRUPT_IN_USE))
++ {
++ DBGPRINT(RT_DEBUG_TRACE, ("INFO::Network is down!\n"));
++ return -ENETDOWN;
++ }
++
++ switch (*mode)
++ {
++ case IW_MODE_ADHOC:
++ Set_NetworkType_Proc(pAdapter, "Adhoc");
++ break;
++ case IW_MODE_INFRA:
++ Set_NetworkType_Proc(pAdapter, "Infra");
++ break;
++#if (LINUX_VERSION_CODE > KERNEL_VERSION(2,4,20))
++ case IW_MODE_MONITOR:
++ Set_NetworkType_Proc(pAdapter, "Monitor");
++ break;
++#endif
++ default:
++ DBGPRINT(RT_DEBUG_TRACE, ("===>rt_ioctl_siwmode::SIOCSIWMODE (unknown %d)\n", *mode));
++ return -EINVAL;
++ }
++
++ // Reset Ralink supplicant to not use, it will be set to start when UI set PMK key
++ pAdapter->StaCfg.WpaState = SS_NOTUSE;
++
++ return 0;
++}
++
++int rt_ioctl_giwmode(struct net_device *dev,
++ struct iw_request_info *info,
++ __u32 *mode, char *extra)
++{
++ PRTMP_ADAPTER pAdapter = NULL;
++ VIRTUAL_ADAPTER *pVirtualAd = NULL;
++
++ if (dev->priv_flags == INT_MAIN)
++ {
++ pAdapter = dev->priv;
++ }
++ else
++ {
++ pVirtualAd = dev->priv;
++ if (pVirtualAd && pVirtualAd->RtmpDev)
++ pAdapter = pVirtualAd->RtmpDev->priv;
++ }
++
++ if (pAdapter == NULL)
++ {
++ /* if 1st open fail, pAd will be free;
++ So the net_dev->priv will be NULL in 2rd open */
++ return -ENETDOWN;
++ }
++
++ if (ADHOC_ON(pAdapter))
++ *mode = IW_MODE_ADHOC;
++ else if (INFRA_ON(pAdapter))
++ *mode = IW_MODE_INFRA;
++#if (LINUX_VERSION_CODE > KERNEL_VERSION(2,4,20))
++ else if (MONITOR_ON(pAdapter))
++ {
++ *mode = IW_MODE_MONITOR;
++ }
++#endif
++ else
++ *mode = IW_MODE_AUTO;
++
++ DBGPRINT(RT_DEBUG_TRACE, ("==>rt_ioctl_giwmode(mode=%d)\n", *mode));
++ return 0;
++}
++
++int rt_ioctl_siwsens(struct net_device *dev,
++ struct iw_request_info *info,
++ char *name, char *extra)
++{
++ PRTMP_ADAPTER pAdapter = (PRTMP_ADAPTER) dev->priv;
++
++ //check if the interface is down
++ if(!RTMP_TEST_FLAG(pAdapter, fRTMP_ADAPTER_INTERRUPT_IN_USE))
++ {
++ DBGPRINT(RT_DEBUG_TRACE, ("INFO::Network is down!\n"));
++ return -ENETDOWN;
++ }
++
++ return 0;
++}
++
++int rt_ioctl_giwsens(struct net_device *dev,
++ struct iw_request_info *info,
++ char *name, char *extra)
++{
++ return 0;
++}
++
++int rt_ioctl_giwrange(struct net_device *dev,
++ struct iw_request_info *info,
++ struct iw_point *data, char *extra)
++{
++ PRTMP_ADAPTER pAdapter = NULL;
++ VIRTUAL_ADAPTER *pVirtualAd = NULL;
++ struct iw_range *range = (struct iw_range *) extra;
++ u16 val;
++ int i;
++
++ if (dev->priv_flags == INT_MAIN)
++ {
++ pAdapter = dev->priv;
++ }
++ else
++ {
++ pVirtualAd = dev->priv;
++ if (pVirtualAd && pVirtualAd->RtmpDev)
++ pAdapter = pVirtualAd->RtmpDev->priv;
++ }
++
++ if (pAdapter == NULL)
++ {
++ /* if 1st open fail, pAd will be free;
++ So the net_dev->priv will be NULL in 2rd open */
++ return -ENETDOWN;
++ }
++
++ DBGPRINT(RT_DEBUG_TRACE ,("===>rt_ioctl_giwrange\n"));
++ data->length = sizeof(struct iw_range);
++ memset(range, 0, sizeof(struct iw_range));
++
++ range->txpower_capa = IW_TXPOW_DBM;
++
++ if (INFRA_ON(pAdapter)||ADHOC_ON(pAdapter))
++ {
++ range->min_pmp = 1 * 1024;
++ range->max_pmp = 65535 * 1024;
++ range->min_pmt = 1 * 1024;
++ range->max_pmt = 1000 * 1024;
++ range->pmp_flags = IW_POWER_PERIOD;
++ range->pmt_flags = IW_POWER_TIMEOUT;
++ range->pm_capa = IW_POWER_PERIOD | IW_POWER_TIMEOUT |
++ IW_POWER_UNICAST_R | IW_POWER_ALL_R;
++ }
++
++ range->we_version_compiled = WIRELESS_EXT;
++ range->we_version_source = 14;
++
++ range->retry_capa = IW_RETRY_LIMIT;
++ range->retry_flags = IW_RETRY_LIMIT;
++ range->min_retry = 0;
++ range->max_retry = 255;
++
++ range->num_channels = pAdapter->ChannelListNum;
++
++ val = 0;
++ for (i = 1; i <= range->num_channels; i++)
++ {
++ u32 m;
++ range->freq[val].i = pAdapter->ChannelList[i-1].Channel;
++ MAP_CHANNEL_ID_TO_KHZ(pAdapter->ChannelList[i-1].Channel, m);
++ range->freq[val].m = m * 100; /* HZ */
++
++ range->freq[val].e = 1;
++ val++;
++ if (val == IW_MAX_FREQUENCIES)
++ break;
++ }
++ range->num_frequency = val;
++
++ range->max_qual.qual = 100; /* what is correct max? This was not
++ * documented exactly. At least
++ * 69 has been observed. */
++ range->max_qual.level = 0; /* dB */
++ range->max_qual.noise = 0; /* dB */
++
++ /* What would be suitable values for "average/typical" qual? */
++ range->avg_qual.qual = 20;
++ range->avg_qual.level = -60;
++ range->avg_qual.noise = -95;
++ range->sensitivity = 3;
++
++ range->max_encoding_tokens = NR_WEP_KEYS;
++ range->num_encoding_sizes = 2;
++ range->encoding_size[0] = 5;
++ range->encoding_size[1] = 13;
++
++ range->min_rts = 0;
++ range->max_rts = 2347;
++ range->min_frag = 256;
++ range->max_frag = 2346;
++
++#if WIRELESS_EXT > 17
++ /* IW_ENC_CAPA_* bit field */
++ range->enc_capa = IW_ENC_CAPA_WPA | IW_ENC_CAPA_WPA2 |
++ IW_ENC_CAPA_CIPHER_TKIP | IW_ENC_CAPA_CIPHER_CCMP;
++#endif
++
++ return 0;
++}
++
++int rt_ioctl_siwap(struct net_device *dev,
++ struct iw_request_info *info,
++ struct sockaddr *ap_addr, char *extra)
++{
++ PRTMP_ADAPTER pAdapter = (PRTMP_ADAPTER) dev->priv;
++ NDIS_802_11_MAC_ADDRESS Bssid;
++
++ //check if the interface is down
++ if(!RTMP_TEST_FLAG(pAdapter, fRTMP_ADAPTER_INTERRUPT_IN_USE))
++ {
++ DBGPRINT(RT_DEBUG_TRACE, ("INFO::Network is down!\n"));
++ return -ENETDOWN;
++ }
++
++ if (pAdapter->Mlme.CntlMachine.CurrState != CNTL_IDLE)
++ {
++ RT28XX_MLME_RESET_STATE_MACHINE(pAdapter);
++ DBGPRINT(RT_DEBUG_TRACE, ("!!! MLME busy, reset MLME state machine !!!\n"));
++ }
++
++ // tell CNTL state machine to call NdisMSetInformationComplete() after completing
++ // this request, because this request is initiated by NDIS.
++ pAdapter->MlmeAux.CurrReqIsFromNdis = FALSE;
++ // Prevent to connect AP again in STAMlmePeriodicExec
++ pAdapter->MlmeAux.AutoReconnectSsidLen= 32;
++
++ memset(Bssid, 0, MAC_ADDR_LEN);
++ memcpy(Bssid, ap_addr->sa_data, MAC_ADDR_LEN);
++ MlmeEnqueue(pAdapter,
++ MLME_CNTL_STATE_MACHINE,
++ OID_802_11_BSSID,
++ sizeof(NDIS_802_11_MAC_ADDRESS),
++ (VOID *)&Bssid);
++
++ DBGPRINT(RT_DEBUG_TRACE, ("IOCTL::SIOCSIWAP %02x:%02x:%02x:%02x:%02x:%02x\n",
++ Bssid[0], Bssid[1], Bssid[2], Bssid[3], Bssid[4], Bssid[5]));
++
++ return 0;
++}
++
++int rt_ioctl_giwap(struct net_device *dev,
++ struct iw_request_info *info,
++ struct sockaddr *ap_addr, char *extra)
++{
++ PRTMP_ADAPTER pAdapter = NULL;
++ VIRTUAL_ADAPTER *pVirtualAd = NULL;
++
++ if (dev->priv_flags == INT_MAIN)
++ {
++ pAdapter = dev->priv;
++ }
++ else
++ {
++ pVirtualAd = dev->priv;
++ if (pVirtualAd && pVirtualAd->RtmpDev)
++ pAdapter = pVirtualAd->RtmpDev->priv;
++ }
++
++ if (pAdapter == NULL)
++ {
++ /* if 1st open fail, pAd will be free;
++ So the net_dev->priv will be NULL in 2rd open */
++ return -ENETDOWN;
++ }
++
++ if (INFRA_ON(pAdapter) || ADHOC_ON(pAdapter))
++ {
++ ap_addr->sa_family = ARPHRD_ETHER;
++ memcpy(ap_addr->sa_data, &pAdapter->CommonCfg.Bssid, ETH_ALEN);
++ }
++#ifdef WPA_SUPPLICANT_SUPPORT
++ // Add for RT2870
++ else if (pAdapter->StaCfg.WpaSupplicantUP != WPA_SUPPLICANT_DISABLE)
++ {
++ ap_addr->sa_family = ARPHRD_ETHER;
++ memcpy(ap_addr->sa_data, &pAdapter->MlmeAux.Bssid, ETH_ALEN);
++ }
++#endif // WPA_SUPPLICANT_SUPPORT //
++ else
++ {
++ DBGPRINT(RT_DEBUG_TRACE, ("IOCTL::SIOCGIWAP(=EMPTY)\n"));
++ return -ENOTCONN;
++ }
++
++ return 0;
++}
++
++/*
++ * Units are in db above the noise floor. That means the
++ * rssi values reported in the tx/rx descriptors in the
++ * driver are the SNR expressed in db.
++ *
++ * If you assume that the noise floor is -95, which is an
++ * excellent assumption 99.5 % of the time, then you can
++ * derive the absolute signal level (i.e. -95 + rssi).
++ * There are some other slight factors to take into account
++ * depending on whether the rssi measurement is from 11b,
++ * 11g, or 11a. These differences are at most 2db and
++ * can be documented.
++ *
++ * NB: various calculations are based on the orinoco/wavelan
++ * drivers for compatibility
++ */
++static void set_quality(PRTMP_ADAPTER pAdapter,
++ struct iw_quality *iq,
++ signed char rssi)
++{
++ __u8 ChannelQuality;
++
++ // Normalize Rssi
++ if (rssi >= -50)
++ ChannelQuality = 100;
++ else if (rssi >= -80) // between -50 ~ -80dbm
++ ChannelQuality = (__u8)(24 + ((rssi + 80) * 26)/10);
++ else if (rssi >= -90) // between -80 ~ -90dbm
++ ChannelQuality = (__u8)((rssi + 90) * 26)/10;
++ else
++ ChannelQuality = 0;
++
++ iq->qual = (__u8)ChannelQuality;
++
++ iq->level = (__u8)(rssi);
++ iq->noise = (pAdapter->BbpWriteLatch[66] > pAdapter->BbpTuning.FalseCcaUpperThreshold) ? ((__u8)pAdapter->BbpTuning.FalseCcaUpperThreshold) : ((__u8) pAdapter->BbpWriteLatch[66]); // noise level (dBm)
++ iq->noise += 256 - 143;
++ iq->updated = pAdapter->iw_stats.qual.updated;
++}
++
++int rt_ioctl_iwaplist(struct net_device *dev,
++ struct iw_request_info *info,
++ struct iw_point *data, char *extra)
++{
++ PRTMP_ADAPTER pAdapter = (PRTMP_ADAPTER) dev->priv;
++
++ struct sockaddr addr[IW_MAX_AP];
++ struct iw_quality qual[IW_MAX_AP];
++ int i;
++
++ //check if the interface is down
++ if(!RTMP_TEST_FLAG(pAdapter, fRTMP_ADAPTER_INTERRUPT_IN_USE))
++ {
++ DBGPRINT(RT_DEBUG_TRACE, ("INFO::Network is down!\n"));
++ data->length = 0;
++ return 0;
++ //return -ENETDOWN;
++ }
++
++ for (i = 0; i <IW_MAX_AP ; i++)
++ {
++ if (i >= pAdapter->ScanTab.BssNr)
++ break;
++ addr[i].sa_family = ARPHRD_ETHER;
++ memcpy(addr[i].sa_data, &pAdapter->ScanTab.BssEntry[i].Bssid, MAC_ADDR_LEN);
++ set_quality(pAdapter, &qual[i], pAdapter->ScanTab.BssEntry[i].Rssi);
++ }
++ data->length = i;
++ memcpy(extra, &addr, i*sizeof(addr[0]));
++ data->flags = 1; /* signal quality present (sort of) */
++ memcpy(extra + i*sizeof(addr[0]), &qual, i*sizeof(qual[i]));
++
++ return 0;
++}
++
++#ifdef SIOCGIWSCAN
++int rt_ioctl_siwscan(struct net_device *dev,
++ struct iw_request_info *info,
++ struct iw_point *data, char *extra)
++{
++ PRTMP_ADAPTER pAdapter = (PRTMP_ADAPTER) dev->priv;
++
++ ULONG Now;
++ int Status = NDIS_STATUS_SUCCESS;
++
++ //check if the interface is down
++ if(!RTMP_TEST_FLAG(pAdapter, fRTMP_ADAPTER_INTERRUPT_IN_USE))
++ {
++ DBGPRINT(RT_DEBUG_TRACE, ("INFO::Network is down!\n"));
++ return -ENETDOWN;
++ }
++
++ if (MONITOR_ON(pAdapter))
++ {
++ DBGPRINT(RT_DEBUG_TRACE, ("!!! Driver is in Monitor Mode now !!!\n"));
++ return -EINVAL;
++ }
++
++
++#ifdef WPA_SUPPLICANT_SUPPORT
++ if (pAdapter->StaCfg.WpaSupplicantUP == WPA_SUPPLICANT_ENABLE)
++ {
++ pAdapter->StaCfg.WpaSupplicantScanCount++;
++ }
++#endif // WPA_SUPPLICANT_SUPPORT //
++
++ pAdapter->StaCfg.bScanReqIsFromWebUI = TRUE;
++ if (RTMP_TEST_FLAG(pAdapter, fRTMP_ADAPTER_BSS_SCAN_IN_PROGRESS))
++ return 0;
++ do{
++ Now = jiffies;
++
++#ifdef WPA_SUPPLICANT_SUPPORT
++ if ((pAdapter->StaCfg.WpaSupplicantUP == WPA_SUPPLICANT_ENABLE) &&
++ (pAdapter->StaCfg.WpaSupplicantScanCount > 3))
++ {
++ DBGPRINT(RT_DEBUG_TRACE, ("!!! WpaSupplicantScanCount > 3\n"));
++ Status = NDIS_STATUS_SUCCESS;
++ break;
++ }
++#endif // WPA_SUPPLICANT_SUPPORT //
++
++ if ((OPSTATUS_TEST_FLAG(pAdapter, fOP_STATUS_MEDIA_STATE_CONNECTED)) &&
++ ((pAdapter->StaCfg.AuthMode == Ndis802_11AuthModeWPA) ||
++ (pAdapter->StaCfg.AuthMode == Ndis802_11AuthModeWPAPSK)) &&
++ (pAdapter->StaCfg.PortSecured == WPA_802_1X_PORT_NOT_SECURED))
++ {
++ DBGPRINT(RT_DEBUG_TRACE, ("!!! Link UP, Port Not Secured! ignore this set::OID_802_11_BSSID_LIST_SCAN\n"));
++ Status = NDIS_STATUS_SUCCESS;
++ break;
++ }
++
++ if (pAdapter->Mlme.CntlMachine.CurrState != CNTL_IDLE)
++ {
++ RT28XX_MLME_RESET_STATE_MACHINE(pAdapter);
++ DBGPRINT(RT_DEBUG_TRACE, ("!!! MLME busy, reset MLME state machine !!!\n"));
++ }
++
++ // tell CNTL state machine to call NdisMSetInformationComplete() after completing
++ // this request, because this request is initiated by NDIS.
++ pAdapter->MlmeAux.CurrReqIsFromNdis = FALSE;
++ // Reset allowed scan retries
++ pAdapter->StaCfg.ScanCnt = 0;
++ pAdapter->StaCfg.LastScanTime = Now;
++
++ MlmeEnqueue(pAdapter,
++ MLME_CNTL_STATE_MACHINE,
++ OID_802_11_BSSID_LIST_SCAN,
++ 0,
++ NULL);
++
++ Status = NDIS_STATUS_SUCCESS;
++ RT28XX_MLME_HANDLER(pAdapter);
++ }while(0);
++ return 0;
++}
++
++int rt_ioctl_giwscan(struct net_device *dev,
++ struct iw_request_info *info,
++ struct iw_point *data, char *extra)
++{
++
++ PRTMP_ADAPTER pAdapter = (PRTMP_ADAPTER) dev->priv;
++ int i=0;
++ char *current_ev = extra, *previous_ev = extra;
++ char *end_buf;
++ char *current_val, custom[MAX_CUSTOM_LEN] = {0};
++#ifndef IWEVGENIE
++ char idx;
++#endif // IWEVGENIE //
++ struct iw_event iwe;
++
++ if (RTMP_TEST_FLAG(pAdapter, fRTMP_ADAPTER_BSS_SCAN_IN_PROGRESS))
++ {
++ /*
++ * Still scanning, indicate the caller should try again.
++ */
++ return -EAGAIN;
++ }
++
++
++#ifdef WPA_SUPPLICANT_SUPPORT
++ if (pAdapter->StaCfg.WpaSupplicantUP == WPA_SUPPLICANT_ENABLE)
++ {
++ pAdapter->StaCfg.WpaSupplicantScanCount = 0;
++ }
++#endif // WPA_SUPPLICANT_SUPPORT //
++
++ if (pAdapter->ScanTab.BssNr == 0)
++ {
++ data->length = 0;
++ return 0;
++ }
++
++#if WIRELESS_EXT >= 17
++ if (data->length > 0)
++ end_buf = extra + data->length;
++ else
++ end_buf = extra + IW_SCAN_MAX_DATA;
++#else
++ end_buf = extra + IW_SCAN_MAX_DATA;
++#endif
++
++ for (i = 0; i < pAdapter->ScanTab.BssNr; i++)
++ {
++ if (current_ev >= end_buf)
++ {
++#if WIRELESS_EXT >= 17
++ return -E2BIG;
++#else
++ break;
++#endif
++ }
++
++ //MAC address
++ //================================
++ memset(&iwe, 0, sizeof(iwe));
++ iwe.cmd = SIOCGIWAP;
++ iwe.u.ap_addr.sa_family = ARPHRD_ETHER;
++ memcpy(iwe.u.ap_addr.sa_data, &pAdapter->ScanTab.BssEntry[i].Bssid, ETH_ALEN);
++
++ previous_ev = current_ev;
++ current_ev = IWE_STREAM_ADD_EVENT(info, current_ev,end_buf, &iwe, IW_EV_ADDR_LEN);
++ if (current_ev == previous_ev)
++#if WIRELESS_EXT >= 17
++ return -E2BIG;
++#else
++ break;
++#endif
++
++ //ESSID
++ //================================
++ memset(&iwe, 0, sizeof(iwe));
++ iwe.cmd = SIOCGIWESSID;
++ iwe.u.data.length = pAdapter->ScanTab.BssEntry[i].SsidLen;
++ iwe.u.data.flags = 1;
++
++ previous_ev = current_ev;
++ current_ev = IWE_STREAM_ADD_POINT(info, current_ev,end_buf, &iwe, pAdapter->ScanTab.BssEntry[i].Ssid);
++ if (current_ev == previous_ev)
++#if WIRELESS_EXT >= 17
++ return -E2BIG;
++#else
++ break;
++#endif
++
++ //Network Type
++ //================================
++ memset(&iwe, 0, sizeof(iwe));
++ iwe.cmd = SIOCGIWMODE;
++ if (pAdapter->ScanTab.BssEntry[i].BssType == Ndis802_11IBSS)
++ {
++ iwe.u.mode = IW_MODE_ADHOC;
++ }
++ else if (pAdapter->ScanTab.BssEntry[i].BssType == Ndis802_11Infrastructure)
++ {
++ iwe.u.mode = IW_MODE_INFRA;
++ }
++ else
++ {
++ iwe.u.mode = IW_MODE_AUTO;
++ }
++ iwe.len = IW_EV_UINT_LEN;
++
++ previous_ev = current_ev;
++ current_ev = IWE_STREAM_ADD_EVENT(info, current_ev, end_buf, &iwe, IW_EV_UINT_LEN);
++ if (current_ev == previous_ev)
++#if WIRELESS_EXT >= 17
++ return -E2BIG;
++#else
++ break;
++#endif
++
++ //Channel and Frequency
++ //================================
++ memset(&iwe, 0, sizeof(iwe));
++ iwe.cmd = SIOCGIWFREQ;
++ if (INFRA_ON(pAdapter) || ADHOC_ON(pAdapter))
++ iwe.u.freq.m = pAdapter->ScanTab.BssEntry[i].Channel;
++ else
++ iwe.u.freq.m = pAdapter->ScanTab.BssEntry[i].Channel;
++ iwe.u.freq.e = 0;
++ iwe.u.freq.i = 0;
++
++ previous_ev = current_ev;
++ current_ev = IWE_STREAM_ADD_EVENT(info, current_ev,end_buf, &iwe, IW_EV_FREQ_LEN);
++ if (current_ev == previous_ev)
++#if WIRELESS_EXT >= 17
++ return -E2BIG;
++#else
++ break;
++#endif
++
++ //Add quality statistics
++ //================================
++ memset(&iwe, 0, sizeof(iwe));
++ iwe.cmd = IWEVQUAL;
++ iwe.u.qual.level = 0;
++ iwe.u.qual.noise = 0;
++ set_quality(pAdapter, &iwe.u.qual, pAdapter->ScanTab.BssEntry[i].Rssi);
++ current_ev = IWE_STREAM_ADD_EVENT(info, current_ev, end_buf, &iwe, IW_EV_QUAL_LEN);
++ if (current_ev == previous_ev)
++#if WIRELESS_EXT >= 17
++ return -E2BIG;
++#else
++ break;
++#endif
++
++ //Encyption key
++ //================================
++ memset(&iwe, 0, sizeof(iwe));
++ iwe.cmd = SIOCGIWENCODE;
++ if (CAP_IS_PRIVACY_ON (pAdapter->ScanTab.BssEntry[i].CapabilityInfo ))
++ iwe.u.data.flags =IW_ENCODE_ENABLED | IW_ENCODE_NOKEY;
++ else
++ iwe.u.data.flags = IW_ENCODE_DISABLED;
++
++ previous_ev = current_ev;
++ current_ev = IWE_STREAM_ADD_POINT(info, current_ev, end_buf,&iwe, (char *)pAdapter->SharedKey[BSS0][(iwe.u.data.flags & IW_ENCODE_INDEX)-1].Key);
++ if (current_ev == previous_ev)
++#if WIRELESS_EXT >= 17
++ return -E2BIG;
++#else
++ break;
++#endif
++
++ //Bit Rate
++ //================================
++ if (pAdapter->ScanTab.BssEntry[i].SupRateLen)
++ {
++ UCHAR tmpRate = pAdapter->ScanTab.BssEntry[i].SupRate[pAdapter->ScanTab.BssEntry[i].SupRateLen-1];
++ memset(&iwe, 0, sizeof(iwe));
++ iwe.cmd = SIOCGIWRATE;
++ current_val = current_ev + IW_EV_LCP_LEN;
++ if (tmpRate == 0x82)
++ iwe.u.bitrate.value = 1 * 1000000;
++ else if (tmpRate == 0x84)
++ iwe.u.bitrate.value = 2 * 1000000;
++ else if (tmpRate == 0x8B)
++ iwe.u.bitrate.value = 5.5 * 1000000;
++ else if (tmpRate == 0x96)
++ iwe.u.bitrate.value = 11 * 1000000;
++ else
++ iwe.u.bitrate.value = (tmpRate/2) * 1000000;
++
++ iwe.u.bitrate.disabled = 0;
++ current_val = IWE_STREAM_ADD_VALUE(info, current_ev,
++ current_val, end_buf, &iwe,
++ IW_EV_PARAM_LEN);
++
++ if((current_val-current_ev)>IW_EV_LCP_LEN)
++ current_ev = current_val;
++ else
++#if WIRELESS_EXT >= 17
++ return -E2BIG;
++#else
++ break;
++#endif
++ }
++
++#ifdef IWEVGENIE
++ //WPA IE
++ if (pAdapter->ScanTab.BssEntry[i].WpaIE.IELen > 0)
++ {
++ memset(&iwe, 0, sizeof(iwe));
++ memset(&custom[0], 0, MAX_CUSTOM_LEN);
++ memcpy(custom, &(pAdapter->ScanTab.BssEntry[i].WpaIE.IE[0]),
++ pAdapter->ScanTab.BssEntry[i].WpaIE.IELen);
++ iwe.cmd = IWEVGENIE;
++ iwe.u.data.length = pAdapter->ScanTab.BssEntry[i].WpaIE.IELen;
++ current_ev = IWE_STREAM_ADD_POINT(info, current_ev, end_buf, &iwe, custom);
++ if (current_ev == previous_ev)
++#if WIRELESS_EXT >= 17
++ return -E2BIG;
++#else
++ break;
++#endif
++ }
++
++ //WPA2 IE
++ if (pAdapter->ScanTab.BssEntry[i].RsnIE.IELen > 0)
++ {
++ memset(&iwe, 0, sizeof(iwe));
++ memset(&custom[0], 0, MAX_CUSTOM_LEN);
++ memcpy(custom, &(pAdapter->ScanTab.BssEntry[i].RsnIE.IE[0]),
++ pAdapter->ScanTab.BssEntry[i].RsnIE.IELen);
++ iwe.cmd = IWEVGENIE;
++ iwe.u.data.length = pAdapter->ScanTab.BssEntry[i].RsnIE.IELen;
++ current_ev = IWE_STREAM_ADD_POINT(info, current_ev, end_buf, &iwe, custom);
++ if (current_ev == previous_ev)
++#if WIRELESS_EXT >= 17
++ return -E2BIG;
++#else
++ break;
++#endif
++ }
++#else
++ //WPA IE
++ //================================
++ if (pAdapter->ScanTab.BssEntry[i].WpaIE.IELen > 0)
++ {
++ NdisZeroMemory(&iwe, sizeof(iwe));
++ memset(&custom[0], 0, MAX_CUSTOM_LEN);
++ iwe.cmd = IWEVCUSTOM;
++ iwe.u.data.length = (pAdapter->ScanTab.BssEntry[i].WpaIE.IELen * 2) + 7;
++ NdisMoveMemory(custom, "wpa_ie=", 7);
++ for (idx = 0; idx < pAdapter->ScanTab.BssEntry[i].WpaIE.IELen; idx++)
++ sprintf(custom, "%s%02x", custom, pAdapter->ScanTab.BssEntry[i].WpaIE.IE[idx]);
++ previous_ev = current_ev;
++ current_ev = IWE_STREAM_ADD_POINT(info, current_ev, end_buf, &iwe, custom);
++ if (current_ev == previous_ev)
++#if WIRELESS_EXT >= 17
++ return -E2BIG;
++#else
++ break;
++#endif
++ }
++
++ //WPA2 IE
++ if (pAdapter->ScanTab.BssEntry[i].RsnIE.IELen > 0)
++ {
++ NdisZeroMemory(&iwe, sizeof(iwe));
++ memset(&custom[0], 0, MAX_CUSTOM_LEN);
++ iwe.cmd = IWEVCUSTOM;
++ iwe.u.data.length = (pAdapter->ScanTab.BssEntry[i].RsnIE.IELen * 2) + 7;
++ NdisMoveMemory(custom, "rsn_ie=", 7);
++ for (idx = 0; idx < pAdapter->ScanTab.BssEntry[i].RsnIE.IELen; idx++)
++ sprintf(custom, "%s%02x", custom, pAdapter->ScanTab.BssEntry[i].RsnIE.IE[idx]);
++ previous_ev = current_ev;
++ current_ev = IWE_STREAM_ADD_POINT(info, current_ev, end_buf, &iwe, custom);
++ if (current_ev == previous_ev)
++#if WIRELESS_EXT >= 17
++ return -E2BIG;
++#else
++ break;
++#endif
++ }
++#endif // IWEVGENIE //
++ }
++
++ data->length = current_ev - extra;
++ pAdapter->StaCfg.bScanReqIsFromWebUI = FALSE;
++ DBGPRINT(RT_DEBUG_ERROR ,("===>rt_ioctl_giwscan. %d(%d) BSS returned, data->length = %d\n",i , pAdapter->ScanTab.BssNr, data->length));
++ return 0;
++}
++#endif
++
++int rt_ioctl_siwessid(struct net_device *dev,
++ struct iw_request_info *info,
++ struct iw_point *data, char *essid)
++{
++ PRTMP_ADAPTER pAdapter = (PRTMP_ADAPTER) dev->priv;
++
++ //check if the interface is down
++ if(!RTMP_TEST_FLAG(pAdapter, fRTMP_ADAPTER_INTERRUPT_IN_USE))
++ {
++ DBGPRINT(RT_DEBUG_TRACE, ("INFO::Network is down!\n"));
++ return -ENETDOWN;
++ }
++
++ if (data->flags)
++ {
++ PCHAR pSsidString = NULL;
++
++ // Includes null character.
++ if (data->length > (IW_ESSID_MAX_SIZE + 1))
++ return -E2BIG;
++
++ pSsidString = (CHAR *) kmalloc(MAX_LEN_OF_SSID+1, MEM_ALLOC_FLAG);
++ if (pSsidString)
++ {
++ NdisZeroMemory(pSsidString, MAX_LEN_OF_SSID+1);
++ NdisMoveMemory(pSsidString, essid, data->length);
++ if (Set_SSID_Proc(pAdapter, pSsidString) == FALSE)
++ return -EINVAL;
++ }
++ else
++ return -ENOMEM;
++ }
++ else
++ {
++ // ANY ssid
++ if (Set_SSID_Proc(pAdapter, "") == FALSE)
++ return -EINVAL;
++ }
++ return 0;
++}
++
++int rt_ioctl_giwessid(struct net_device *dev,
++ struct iw_request_info *info,
++ struct iw_point *data, char *essid)
++{
++ PRTMP_ADAPTER pAdapter = NULL;
++ VIRTUAL_ADAPTER *pVirtualAd = NULL;
++
++ if (dev->priv_flags == INT_MAIN)
++ {
++ pAdapter = dev->priv;
++ }
++ else
++ {
++ pVirtualAd = dev->priv;
++ if (pVirtualAd && pVirtualAd->RtmpDev)
++ pAdapter = pVirtualAd->RtmpDev->priv;
++ }
++
++ if (pAdapter == NULL)
++ {
++ /* if 1st open fail, pAd will be free;
++ So the net_dev->priv will be NULL in 2rd open */
++ return -ENETDOWN;
++ }
++
++ data->flags = 1;
++ if (MONITOR_ON(pAdapter))
++ {
++ data->length = 0;
++ return 0;
++ }
++
++ if (OPSTATUS_TEST_FLAG(pAdapter, fOP_STATUS_MEDIA_STATE_CONNECTED))
++ {
++ DBGPRINT(RT_DEBUG_TRACE ,("MediaState is connected\n"));
++ data->length = pAdapter->CommonCfg.SsidLen;
++ memcpy(essid, pAdapter->CommonCfg.Ssid, pAdapter->CommonCfg.SsidLen);
++ }
++#ifdef RT2870
++#ifdef WPA_SUPPLICANT_SUPPORT
++ // Add for RT2870
++ else if (pAdapter->StaCfg.WpaSupplicantUP != WPA_SUPPLICANT_DISABLE)
++ {
++ data->length = pAdapter->CommonCfg.SsidLen;
++ memcpy(essid, pAdapter->CommonCfg.Ssid, pAdapter->CommonCfg.SsidLen);
++ }
++#endif // WPA_SUPPLICANT_SUPPORT //
++#endif // RT2870 //
++ else
++ {//the ANY ssid was specified
++ data->length = 0;
++ DBGPRINT(RT_DEBUG_TRACE ,("MediaState is not connected, ess\n"));
++ }
++
++ return 0;
++
++}
++
++int rt_ioctl_siwnickn(struct net_device *dev,
++ struct iw_request_info *info,
++ struct iw_point *data, char *nickname)
++{
++ PRTMP_ADAPTER pAdapter = (PRTMP_ADAPTER) dev->priv;
++
++ //check if the interface is down
++ if(!RTMP_TEST_FLAG(pAdapter, fRTMP_ADAPTER_INTERRUPT_IN_USE))
++ {
++ DBGPRINT(RT_DEBUG_TRACE ,("INFO::Network is down!\n"));
++ return -ENETDOWN;
++ }
++
++ if (data->length > IW_ESSID_MAX_SIZE)
++ return -EINVAL;
++
++ memset(pAdapter->nickname, 0, IW_ESSID_MAX_SIZE + 1);
++ memcpy(pAdapter->nickname, nickname, data->length);
++
++
++ return 0;
++}
++
++int rt_ioctl_giwnickn(struct net_device *dev,
++ struct iw_request_info *info,
++ struct iw_point *data, char *nickname)
++{
++ PRTMP_ADAPTER pAdapter = NULL;
++ VIRTUAL_ADAPTER *pVirtualAd = NULL;
++
++ if (dev->priv_flags == INT_MAIN)
++ {
++ pAdapter = dev->priv;
++ }
++ else
++ {
++ pVirtualAd = dev->priv;
++ if (pVirtualAd && pVirtualAd->RtmpDev)
++ pAdapter = pVirtualAd->RtmpDev->priv;
++ }
++
++ if (pAdapter == NULL)
++ {
++ /* if 1st open fail, pAd will be free;
++ So the net_dev->priv will be NULL in 2rd open */
++ return -ENETDOWN;
++ }
++
++ if (data->length > strlen(pAdapter->nickname) + 1)
++ data->length = strlen(pAdapter->nickname) + 1;
++ if (data->length > 0) {
++ memcpy(nickname, pAdapter->nickname, data->length-1);
++ nickname[data->length-1] = '\0';
++ }
++ return 0;
++}
++
++int rt_ioctl_siwrts(struct net_device *dev,
++ struct iw_request_info *info,
++ struct iw_param *rts, char *extra)
++{
++ PRTMP_ADAPTER pAdapter = (PRTMP_ADAPTER) dev->priv;
++ u16 val;
++
++ //check if the interface is down
++ if(!RTMP_TEST_FLAG(pAdapter, fRTMP_ADAPTER_INTERRUPT_IN_USE))
++ {
++ DBGPRINT(RT_DEBUG_TRACE, ("INFO::Network is down!\n"));
++ return -ENETDOWN;
++ }
++
++ if (rts->disabled)
++ val = MAX_RTS_THRESHOLD;
++ else if (rts->value < 0 || rts->value > MAX_RTS_THRESHOLD)
++ return -EINVAL;
++ else if (rts->value == 0)
++ val = MAX_RTS_THRESHOLD;
++ else
++ val = rts->value;
++
++ if (val != pAdapter->CommonCfg.RtsThreshold)
++ pAdapter->CommonCfg.RtsThreshold = val;
++
++ return 0;
++}
++
++int rt_ioctl_giwrts(struct net_device *dev,
++ struct iw_request_info *info,
++ struct iw_param *rts, char *extra)
++{
++ PRTMP_ADAPTER pAdapter = NULL;
++ VIRTUAL_ADAPTER *pVirtualAd = NULL;
++
++ if (dev->priv_flags == INT_MAIN)
++ {
++ pAdapter = dev->priv;
++ }
++ else
++ {
++ pVirtualAd = dev->priv;
++ if (pVirtualAd && pVirtualAd->RtmpDev)
++ pAdapter = pVirtualAd->RtmpDev->priv;
++ }
++
++ if (pAdapter == NULL)
++ {
++ /* if 1st open fail, pAd will be free;
++ So the net_dev->priv will be NULL in 2rd open */
++ return -ENETDOWN;
++ }
++
++ //check if the interface is down
++ if(!RTMP_TEST_FLAG(pAdapter, fRTMP_ADAPTER_INTERRUPT_IN_USE))
++ {
++ DBGPRINT(RT_DEBUG_TRACE, ("INFO::Network is down!\n"));
++ return -ENETDOWN;
++ }
++
++ rts->value = pAdapter->CommonCfg.RtsThreshold;
++ rts->disabled = (rts->value == MAX_RTS_THRESHOLD);
++ rts->fixed = 1;
++
++ return 0;
++}
++
++int rt_ioctl_siwfrag(struct net_device *dev,
++ struct iw_request_info *info,
++ struct iw_param *frag, char *extra)
++{
++ PRTMP_ADAPTER pAdapter = (PRTMP_ADAPTER) dev->priv;
++ u16 val;
++
++ //check if the interface is down
++ if(!RTMP_TEST_FLAG(pAdapter, fRTMP_ADAPTER_INTERRUPT_IN_USE))
++ {
++ DBGPRINT(RT_DEBUG_TRACE, ("INFO::Network is down!\n"));
++ return -ENETDOWN;
++ }
++
++ if (frag->disabled)
++ val = MAX_FRAG_THRESHOLD;
++ else if (frag->value >= MIN_FRAG_THRESHOLD || frag->value <= MAX_FRAG_THRESHOLD)
++ val = __cpu_to_le16(frag->value & ~0x1); /* even numbers only */
++ else if (frag->value == 0)
++ val = MAX_FRAG_THRESHOLD;
++ else
++ return -EINVAL;
++
++ pAdapter->CommonCfg.FragmentThreshold = val;
++ return 0;
++}
++
++int rt_ioctl_giwfrag(struct net_device *dev,
++ struct iw_request_info *info,
++ struct iw_param *frag, char *extra)
++{
++ PRTMP_ADAPTER pAdapter = NULL;
++ VIRTUAL_ADAPTER *pVirtualAd = NULL;
++
++ if (dev->priv_flags == INT_MAIN)
++ {
++ pAdapter = dev->priv;
++ }
++ else
++ {
++ pVirtualAd = dev->priv;
++ if (pVirtualAd && pVirtualAd->RtmpDev)
++ pAdapter = pVirtualAd->RtmpDev->priv;
++ }
++
++ if (pAdapter == NULL)
++ {
++ /* if 1st open fail, pAd will be free;
++ So the net_dev->priv will be NULL in 2rd open */
++ return -ENETDOWN;
++ }
++
++ //check if the interface is down
++ if(!RTMP_TEST_FLAG(pAdapter, fRTMP_ADAPTER_INTERRUPT_IN_USE))
++ {
++ DBGPRINT(RT_DEBUG_TRACE, ("INFO::Network is down!\n"));
++ return -ENETDOWN;
++ }
++
++ frag->value = pAdapter->CommonCfg.FragmentThreshold;
++ frag->disabled = (frag->value == MAX_FRAG_THRESHOLD);
++ frag->fixed = 1;
++
++ return 0;
++}
++
++#define MAX_WEP_KEY_SIZE 13
++#define MIN_WEP_KEY_SIZE 5
++int rt_ioctl_siwencode(struct net_device *dev,
++ struct iw_request_info *info,
++ struct iw_point *erq, char *extra)
++{
++ PRTMP_ADAPTER pAdapter = (PRTMP_ADAPTER) dev->priv;
++
++ //check if the interface is down
++ if(!RTMP_TEST_FLAG(pAdapter, fRTMP_ADAPTER_INTERRUPT_IN_USE))
++ {
++ DBGPRINT(RT_DEBUG_TRACE, ("INFO::Network is down!\n"));
++ return -ENETDOWN;
++ }
++
++ if ((erq->length == 0) &&
++ (erq->flags & IW_ENCODE_DISABLED))
++ {
++ pAdapter->StaCfg.PairCipher = Ndis802_11WEPDisabled;
++ pAdapter->StaCfg.GroupCipher = Ndis802_11WEPDisabled;
++ pAdapter->StaCfg.WepStatus = Ndis802_11WEPDisabled;
++ pAdapter->StaCfg.OrigWepStatus = pAdapter->StaCfg.WepStatus;
++ pAdapter->StaCfg.AuthMode = Ndis802_11AuthModeOpen;
++ goto done;
++ }
++ else if ((erq->length == 0) &&
++ (erq->flags & IW_ENCODE_RESTRICTED || erq->flags & IW_ENCODE_OPEN))
++ {
++ //pAdapter->StaCfg.PortSecured = WPA_802_1X_PORT_SECURED;
++ STA_PORT_SECURED(pAdapter);
++ pAdapter->StaCfg.PairCipher = Ndis802_11WEPEnabled;
++ pAdapter->StaCfg.GroupCipher = Ndis802_11WEPEnabled;
++ pAdapter->StaCfg.WepStatus = Ndis802_11WEPEnabled;
++ pAdapter->StaCfg.OrigWepStatus = pAdapter->StaCfg.WepStatus;
++ if (erq->flags & IW_ENCODE_RESTRICTED)
++ pAdapter->StaCfg.AuthMode = Ndis802_11AuthModeShared;
++ else
++ pAdapter->StaCfg.AuthMode = Ndis802_11AuthModeOpen;
++ goto done;
++ }
++
++ if (erq->length > 0)
++ {
++ int keyIdx = (erq->flags & IW_ENCODE_INDEX) - 1;
++ /* Check the size of the key */
++ if (erq->length > MAX_WEP_KEY_SIZE) {
++ return -EINVAL;
++ }
++ /* Check key index */
++ if ((keyIdx < 0) || (keyIdx >= NR_WEP_KEYS))
++ {
++ DBGPRINT(RT_DEBUG_TRACE ,("==>rt_ioctl_siwencode::Wrong keyIdx=%d! Using default key instead (%d)\n",
++ keyIdx, pAdapter->StaCfg.DefaultKeyId));
++
++ //Using default key
++ keyIdx = pAdapter->StaCfg.DefaultKeyId;
++ }
++
++ NdisZeroMemory(pAdapter->SharedKey[BSS0][keyIdx].Key, 16);
++
++ if (erq->length == MAX_WEP_KEY_SIZE)
++ {
++ pAdapter->SharedKey[BSS0][keyIdx].KeyLen = MAX_WEP_KEY_SIZE;
++ pAdapter->SharedKey[BSS0][keyIdx].CipherAlg = CIPHER_WEP128;
++ }
++ else if (erq->length == MIN_WEP_KEY_SIZE)
++ {
++ pAdapter->SharedKey[BSS0][keyIdx].KeyLen = MIN_WEP_KEY_SIZE;
++ pAdapter->SharedKey[BSS0][keyIdx].CipherAlg = CIPHER_WEP64;
++ }
++ else
++ /* Disable the key */
++ pAdapter->SharedKey[BSS0][keyIdx].KeyLen = 0;
++
++ /* Check if the key is not marked as invalid */
++ if(!(erq->flags & IW_ENCODE_NOKEY)) {
++ /* Copy the key in the driver */
++ NdisMoveMemory(pAdapter->SharedKey[BSS0][keyIdx].Key, extra, erq->length);
++ }
++ }
++ else
++ {
++ /* Do we want to just set the transmit key index ? */
++ int index = (erq->flags & IW_ENCODE_INDEX) - 1;
++ if ((index >= 0) && (index < 4))
++ {
++ pAdapter->StaCfg.DefaultKeyId = index;
++ }
++ else
++ /* Don't complain if only change the mode */
++ if(!erq->flags & IW_ENCODE_MODE) {
++ return -EINVAL;
++ }
++ }
++
++done:
++ DBGPRINT(RT_DEBUG_TRACE ,("==>rt_ioctl_siwencode::erq->flags=%x\n",erq->flags));
++ DBGPRINT(RT_DEBUG_TRACE ,("==>rt_ioctl_siwencode::AuthMode=%x\n",pAdapter->StaCfg.AuthMode));
++ DBGPRINT(RT_DEBUG_TRACE ,("==>rt_ioctl_siwencode::DefaultKeyId=%x, KeyLen = %d\n",pAdapter->StaCfg.DefaultKeyId , pAdapter->SharedKey[BSS0][pAdapter->StaCfg.DefaultKeyId].KeyLen));
++ DBGPRINT(RT_DEBUG_TRACE ,("==>rt_ioctl_siwencode::WepStatus=%x\n",pAdapter->StaCfg.WepStatus));
++ return 0;
++}
++
++int
++rt_ioctl_giwencode(struct net_device *dev,
++ struct iw_request_info *info,
++ struct iw_point *erq, char *key)
++{
++ int kid;
++ PRTMP_ADAPTER pAdapter = NULL;
++ VIRTUAL_ADAPTER *pVirtualAd = NULL;
++
++ if (dev->priv_flags == INT_MAIN)
++ {
++ pAdapter = dev->priv;
++ }
++ else
++ {
++ pVirtualAd = dev->priv;
++ if (pVirtualAd && pVirtualAd->RtmpDev)
++ pAdapter = pVirtualAd->RtmpDev->priv;
++ }
++
++ if (pAdapter == NULL)
++ {
++ /* if 1st open fail, pAd will be free;
++ So the net_dev->priv will be NULL in 2rd open */
++ return -ENETDOWN;
++ }
++
++ //check if the interface is down
++ if(!RTMP_TEST_FLAG(pAdapter, fRTMP_ADAPTER_INTERRUPT_IN_USE))
++ {
++ DBGPRINT(RT_DEBUG_TRACE, ("INFO::Network is down!\n"));
++ return -ENETDOWN;
++ }
++
++ kid = erq->flags & IW_ENCODE_INDEX;
++ DBGPRINT(RT_DEBUG_TRACE, ("===>rt_ioctl_giwencode %d\n", erq->flags & IW_ENCODE_INDEX));
++
++ if (pAdapter->StaCfg.WepStatus == Ndis802_11WEPDisabled)
++ {
++ erq->length = 0;
++ erq->flags = IW_ENCODE_DISABLED;
++ }
++ else if ((kid > 0) && (kid <=4))
++ {
++ // copy wep key
++ erq->flags = kid ; /* NB: base 1 */
++ if (erq->length > pAdapter->SharedKey[BSS0][kid-1].KeyLen)
++ erq->length = pAdapter->SharedKey[BSS0][kid-1].KeyLen;
++ memcpy(key, pAdapter->SharedKey[BSS0][kid-1].Key, erq->length);
++ //if ((kid == pAdapter->PortCfg.DefaultKeyId))
++ //erq->flags |= IW_ENCODE_ENABLED; /* XXX */
++ if (pAdapter->StaCfg.AuthMode == Ndis802_11AuthModeShared)
++ erq->flags |= IW_ENCODE_RESTRICTED; /* XXX */
++ else
++ erq->flags |= IW_ENCODE_OPEN; /* XXX */
++
++ }
++ else if (kid == 0)
++ {
++ if (pAdapter->StaCfg.AuthMode == Ndis802_11AuthModeShared)
++ erq->flags |= IW_ENCODE_RESTRICTED; /* XXX */
++ else
++ erq->flags |= IW_ENCODE_OPEN; /* XXX */
++ erq->length = pAdapter->SharedKey[BSS0][pAdapter->StaCfg.DefaultKeyId].KeyLen;
++ memcpy(key, pAdapter->SharedKey[BSS0][pAdapter->StaCfg.DefaultKeyId].Key, erq->length);
++ // copy default key ID
++ if (pAdapter->StaCfg.AuthMode == Ndis802_11AuthModeShared)
++ erq->flags |= IW_ENCODE_RESTRICTED; /* XXX */
++ else
++ erq->flags |= IW_ENCODE_OPEN; /* XXX */
++ erq->flags = pAdapter->StaCfg.DefaultKeyId + 1; /* NB: base 1 */
++ erq->flags |= IW_ENCODE_ENABLED; /* XXX */
++ }
++
++ return 0;
++
++}
++
++static int
++rt_ioctl_setparam(struct net_device *dev, struct iw_request_info *info,
++ void *w, char *extra)
++{
++ VIRTUAL_ADAPTER *pVirtualAd = NULL;
++ PRTMP_ADAPTER pAdapter;
++ POS_COOKIE pObj;
++ char *this_char = extra;
++ char *value;
++ int Status=0;
++
++ if (dev->priv_flags == INT_MAIN)
++ {
++ pAdapter = dev->priv;
++ }
++ else
++ {
++ pVirtualAd = dev->priv;
++ pAdapter = pVirtualAd->RtmpDev->priv;
++ }
++ pObj = (POS_COOKIE) pAdapter->OS_Cookie;
++
++ if (pAdapter == NULL)
++ {
++ /* if 1st open fail, pAd will be free;
++ So the net_dev->priv will be NULL in 2rd open */
++ return -ENETDOWN;
++ }
++
++ {
++ pObj->ioctl_if_type = INT_MAIN;
++ pObj->ioctl_if = MAIN_MBSSID;
++ }
++
++ //check if the interface is down
++ if(!RTMP_TEST_FLAG(pAdapter, fRTMP_ADAPTER_INTERRUPT_IN_USE))
++ {
++ DBGPRINT(RT_DEBUG_TRACE, ("INFO::Network is down!\n"));
++ return -ENETDOWN;
++ }
++
++ if (!*this_char)
++ return -EINVAL;
++
++ if ((value = rtstrchr(this_char, '=')) != NULL)
++ *value++ = 0;
++
++ if (!value)
++ return -EINVAL;
++
++ // reject setting nothing besides ANY ssid(ssidLen=0)
++ if (!*value && (strcmp(this_char, "SSID") != 0))
++ return -EINVAL;
++
++ for (PRTMP_PRIVATE_SET_PROC = RTMP_PRIVATE_SUPPORT_PROC; PRTMP_PRIVATE_SET_PROC->name; PRTMP_PRIVATE_SET_PROC++)
++ {
++ if (strcmp(this_char, PRTMP_PRIVATE_SET_PROC->name) == 0)
++ {
++ if(!PRTMP_PRIVATE_SET_PROC->set_proc(pAdapter, value))
++ { //FALSE:Set private failed then return Invalid argument
++ Status = -EINVAL;
++ }
++ break; //Exit for loop.
++ }
++ }
++
++ if(PRTMP_PRIVATE_SET_PROC->name == NULL)
++ { //Not found argument
++ Status = -EINVAL;
++ DBGPRINT(RT_DEBUG_TRACE, ("===>rt_ioctl_setparam:: (iwpriv) Not Support Set Command [%s=%s]\n", this_char, value));
++ }
++
++ return Status;
++}
++
++
++static int
++rt_private_get_statistics(struct net_device *dev, struct iw_request_info *info,
++ struct iw_point *wrq, char *extra)
++{
++ INT Status = 0;
++ PRTMP_ADAPTER pAd = (PRTMP_ADAPTER) dev->priv;
++
++ if (extra == NULL)
++ {
++ wrq->length = 0;
++ return -EIO;
++ }
++
++ memset(extra, 0x00, IW_PRIV_SIZE_MASK);
++ sprintf(extra, "\n\n");
++
++#ifdef RALINK_ATE
++ if (ATE_ON(pAd))
++ {
++ sprintf(extra+strlen(extra), "Tx success = %ld\n", (ULONG)pAd->ate.TxDoneCount);
++ //sprintf(extra+strlen(extra), "Tx success without retry = %ld\n", (ULONG)pAd->ate.TxDoneCount);
++ }
++ else
++#endif // RALINK_ATE //
++ {
++ sprintf(extra+strlen(extra), "Tx success = %ld\n", (ULONG)pAd->WlanCounters.TransmittedFragmentCount.QuadPart);
++ sprintf(extra+strlen(extra), "Tx success without retry = %ld\n", (ULONG)pAd->WlanCounters.TransmittedFragmentCount.QuadPart - (ULONG)pAd->WlanCounters.RetryCount.QuadPart);
++ }
++ sprintf(extra+strlen(extra), "Tx success after retry = %ld\n", (ULONG)pAd->WlanCounters.RetryCount.QuadPart);
++ sprintf(extra+strlen(extra), "Tx fail to Rcv ACK after retry = %ld\n", (ULONG)pAd->WlanCounters.FailedCount.QuadPart);
++ sprintf(extra+strlen(extra), "RTS Success Rcv CTS = %ld\n", (ULONG)pAd->WlanCounters.RTSSuccessCount.QuadPart);
++ sprintf(extra+strlen(extra), "RTS Fail Rcv CTS = %ld\n", (ULONG)pAd->WlanCounters.RTSFailureCount.QuadPart);
++
++ sprintf(extra+strlen(extra), "Rx success = %ld\n", (ULONG)pAd->WlanCounters.ReceivedFragmentCount.QuadPart);
++ sprintf(extra+strlen(extra), "Rx with CRC = %ld\n", (ULONG)pAd->WlanCounters.FCSErrorCount.QuadPart);
++ sprintf(extra+strlen(extra), "Rx drop due to out of resource = %ld\n", (ULONG)pAd->Counters8023.RxNoBuffer);
++ sprintf(extra+strlen(extra), "Rx duplicate frame = %ld\n", (ULONG)pAd->WlanCounters.FrameDuplicateCount.QuadPart);
++
++ sprintf(extra+strlen(extra), "False CCA (one second) = %ld\n", (ULONG)pAd->RalinkCounters.OneSecFalseCCACnt);
++#ifdef RALINK_ATE
++ if (ATE_ON(pAd))
++ {
++ if (pAd->ate.RxAntennaSel == 0)
++ {
++ sprintf(extra+strlen(extra), "RSSI-A = %ld\n", (LONG)(pAd->ate.LastRssi0 - pAd->BbpRssiToDbmDelta));
++ sprintf(extra+strlen(extra), "RSSI-B (if available) = %ld\n", (LONG)(pAd->ate.LastRssi1 - pAd->BbpRssiToDbmDelta));
++ sprintf(extra+strlen(extra), "RSSI-C (if available) = %ld\n\n", (LONG)(pAd->ate.LastRssi2 - pAd->BbpRssiToDbmDelta));
++ }
++ else
++ {
++ sprintf(extra+strlen(extra), "RSSI = %ld\n", (LONG)(pAd->ate.LastRssi0 - pAd->BbpRssiToDbmDelta));
++ }
++ }
++ else
++#endif // RALINK_ATE //
++ {
++ sprintf(extra+strlen(extra), "RSSI-A = %ld\n", (LONG)(pAd->StaCfg.RssiSample.LastRssi0 - pAd->BbpRssiToDbmDelta));
++ sprintf(extra+strlen(extra), "RSSI-B (if available) = %ld\n", (LONG)(pAd->StaCfg.RssiSample.LastRssi1 - pAd->BbpRssiToDbmDelta));
++ sprintf(extra+strlen(extra), "RSSI-C (if available) = %ld\n\n", (LONG)(pAd->StaCfg.RssiSample.LastRssi2 - pAd->BbpRssiToDbmDelta));
++ }
++#ifdef WPA_SUPPLICANT_SUPPORT
++ sprintf(extra+strlen(extra), "WpaSupplicantUP = %d\n\n", pAd->StaCfg.WpaSupplicantUP);
++#endif // WPA_SUPPLICANT_SUPPORT //
++
++
++ wrq->length = strlen(extra) + 1; // 1: size of '\0'
++ DBGPRINT(RT_DEBUG_TRACE, ("<== rt_private_get_statistics, wrq->length = %d\n", wrq->length));
++
++ return Status;
++}
++
++#ifdef DOT11_N_SUPPORT
++void getBaInfo(
++ IN PRTMP_ADAPTER pAd,
++ IN PUCHAR pOutBuf)
++{
++ INT i, j;
++ BA_ORI_ENTRY *pOriBAEntry;
++ BA_REC_ENTRY *pRecBAEntry;
++
++ for (i=0; i<MAX_LEN_OF_MAC_TABLE; i++)
++ {
++ PMAC_TABLE_ENTRY pEntry = &pAd->MacTab.Content[i];
++ if (((pEntry->ValidAsCLI || pEntry->ValidAsApCli) && (pEntry->Sst == SST_ASSOC))
++ || (pEntry->ValidAsWDS) || (pEntry->ValidAsMesh))
++ {
++ sprintf(pOutBuf, "%s\n%02X:%02X:%02X:%02X:%02X:%02X (Aid = %d) (AP) -\n",
++ pOutBuf,
++ pEntry->Addr[0], pEntry->Addr[1], pEntry->Addr[2],
++ pEntry->Addr[3], pEntry->Addr[4], pEntry->Addr[5], pEntry->Aid);
++
++ sprintf(pOutBuf, "%s[Recipient]\n", pOutBuf);
++ for (j=0; j < NUM_OF_TID; j++)
++ {
++ if (pEntry->BARecWcidArray[j] != 0)
++ {
++ pRecBAEntry =&pAd->BATable.BARecEntry[pEntry->BARecWcidArray[j]];
++ sprintf(pOutBuf, "%sTID=%d, BAWinSize=%d, LastIndSeq=%d, ReorderingPkts=%d\n", pOutBuf, j, pRecBAEntry->BAWinSize, pRecBAEntry->LastIndSeq, pRecBAEntry->list.qlen);
++ }
++ }
++ sprintf(pOutBuf, "%s\n", pOutBuf);
++
++ sprintf(pOutBuf, "%s[Originator]\n", pOutBuf);
++ for (j=0; j < NUM_OF_TID; j++)
++ {
++ if (pEntry->BAOriWcidArray[j] != 0)
++ {
++ pOriBAEntry =&pAd->BATable.BAOriEntry[pEntry->BAOriWcidArray[j]];
++ sprintf(pOutBuf, "%sTID=%d, BAWinSize=%d, StartSeq=%d, CurTxSeq=%d\n", pOutBuf, j, pOriBAEntry->BAWinSize, pOriBAEntry->Sequence, pEntry->TxSeq[j]);
++ }
++ }
++ sprintf(pOutBuf, "%s\n\n", pOutBuf);
++ }
++ if (strlen(pOutBuf) > (IW_PRIV_SIZE_MASK - 30))
++ break;
++ }
++
++ return;
++}
++#endif // DOT11_N_SUPPORT //
++
++static int
++rt_private_show(struct net_device *dev, struct iw_request_info *info,
++ struct iw_point *wrq, char *extra)
++{
++ INT Status = 0;
++ VIRTUAL_ADAPTER *pVirtualAd = NULL;
++ PRTMP_ADAPTER pAd;
++ POS_COOKIE pObj;
++ u32 subcmd = wrq->flags;
++
++ if (dev->priv_flags == INT_MAIN)
++ pAd = dev->priv;
++ else
++ {
++ pVirtualAd = dev->priv;
++ pAd = pVirtualAd->RtmpDev->priv;
++ }
++ pObj = (POS_COOKIE) pAd->OS_Cookie;
++
++ if (pAd == NULL)
++ {
++ /* if 1st open fail, pAd will be free;
++ So the net_dev->priv will be NULL in 2rd open */
++ return -ENETDOWN;
++ }
++
++ if (extra == NULL)
++ {
++ wrq->length = 0;
++ return -EIO;
++ }
++ memset(extra, 0x00, IW_PRIV_SIZE_MASK);
++
++ {
++ pObj->ioctl_if_type = INT_MAIN;
++ pObj->ioctl_if = MAIN_MBSSID;
++ }
++
++ switch(subcmd)
++ {
++
++ case SHOW_CONN_STATUS:
++ if (MONITOR_ON(pAd))
++ {
++#ifdef DOT11_N_SUPPORT
++ if (pAd->CommonCfg.PhyMode >= PHY_11ABGN_MIXED &&
++ pAd->CommonCfg.RegTransmitSetting.field.BW)
++ sprintf(extra, "Monitor Mode(CentralChannel %d)\n", pAd->CommonCfg.CentralChannel);
++ else
++#endif // DOT11_N_SUPPORT //
++ sprintf(extra, "Monitor Mode(Channel %d)\n", pAd->CommonCfg.Channel);
++ }
++ else
++ {
++ if (pAd->IndicateMediaState == NdisMediaStateConnected)
++ {
++ if (INFRA_ON(pAd))
++ {
++ sprintf(extra, "Connected(AP: %s[%02X:%02X:%02X:%02X:%02X:%02X])\n",
++ pAd->CommonCfg.Ssid,
++ pAd->CommonCfg.Bssid[0],
++ pAd->CommonCfg.Bssid[1],
++ pAd->CommonCfg.Bssid[2],
++ pAd->CommonCfg.Bssid[3],
++ pAd->CommonCfg.Bssid[4],
++ pAd->CommonCfg.Bssid[5]);
++ DBGPRINT(RT_DEBUG_TRACE ,("Ssid=%s ,Ssidlen = %d\n",pAd->CommonCfg.Ssid, pAd->CommonCfg.SsidLen));
++ }
++ else if (ADHOC_ON(pAd))
++ sprintf(extra, "Connected\n");
++ }
++ else
++ {
++ sprintf(extra, "Disconnected\n");
++ DBGPRINT(RT_DEBUG_TRACE ,("ConnStatus is not connected\n"));
++ }
++ }
++ wrq->length = strlen(extra) + 1; // 1: size of '\0'
++ break;
++ case SHOW_DRVIER_VERION:
++ sprintf(extra, "Driver version-%s, %s %s\n", STA_DRIVER_VERSION, __DATE__, __TIME__ );
++ wrq->length = strlen(extra) + 1; // 1: size of '\0'
++ break;
++#ifdef DOT11_N_SUPPORT
++ case SHOW_BA_INFO:
++ getBaInfo(pAd, extra);
++ wrq->length = strlen(extra) + 1; // 1: size of '\0'
++ break;
++#endif // DOT11_N_SUPPORT //
++ case SHOW_DESC_INFO:
++ {
++ Show_DescInfo_Proc(pAd, NULL);
++ wrq->length = 0; // 1: size of '\0'
++ }
++ break;
++ case RAIO_OFF:
++ if (RTMP_TEST_FLAG(pAd, fRTMP_ADAPTER_BSS_SCAN_IN_PROGRESS))
++ {
++ sprintf(extra, "Scanning\n");
++ wrq->length = strlen(extra) + 1; // 1: size of '\0'
++ break;
++ }
++ pAd->StaCfg.bSwRadio = FALSE;
++ if (pAd->StaCfg.bRadio != (pAd->StaCfg.bHwRadio && pAd->StaCfg.bSwRadio))
++ {
++ pAd->StaCfg.bRadio = (pAd->StaCfg.bHwRadio && pAd->StaCfg.bSwRadio);
++ if (pAd->StaCfg.bRadio == FALSE)
++ {
++ MlmeRadioOff(pAd);
++ // Update extra information
++ pAd->ExtraInfo = SW_RADIO_OFF;
++ }
++ }
++ sprintf(extra, "Radio Off\n");
++ wrq->length = strlen(extra) + 1; // 1: size of '\0'
++ break;
++ case RAIO_ON:
++ if (RTMP_TEST_FLAG(pAd, fRTMP_ADAPTER_BSS_SCAN_IN_PROGRESS))
++ {
++ sprintf(extra, "Scanning\n");
++ wrq->length = strlen(extra) + 1; // 1: size of '\0'
++ break;
++ }
++ pAd->StaCfg.bSwRadio = TRUE;
++ //if (pAd->StaCfg.bRadio != (pAd->StaCfg.bHwRadio && pAd->StaCfg.bSwRadio))
++ {
++ pAd->StaCfg.bRadio = (pAd->StaCfg.bHwRadio && pAd->StaCfg.bSwRadio);
++ if (pAd->StaCfg.bRadio == TRUE)
++ {
++ MlmeRadioOn(pAd);
++ // Update extra information
++ pAd->ExtraInfo = EXTRA_INFO_CLEAR;
++ }
++ }
++ sprintf(extra, "Radio On\n");
++ wrq->length = strlen(extra) + 1; // 1: size of '\0'
++ break;
++
++
++#ifdef QOS_DLS_SUPPORT
++ case SHOW_DLS_ENTRY_INFO:
++ {
++ Set_DlsEntryInfo_Display_Proc(pAd, NULL);
++ wrq->length = 0; // 1: size of '\0'
++ }
++ break;
++#endif // QOS_DLS_SUPPORT //
++
++ case SHOW_CFG_VALUE:
++ {
++ Status = RTMPShowCfgValue(pAd, wrq->pointer, extra);
++ if (Status == 0)
++ wrq->length = strlen(extra) + 1; // 1: size of '\0'
++ }
++ break;
++ case SHOW_ADHOC_ENTRY_INFO:
++ Show_Adhoc_MacTable_Proc(pAd, extra);
++ wrq->length = strlen(extra) + 1; // 1: size of '\0'
++ break;
++ default:
++ DBGPRINT(RT_DEBUG_TRACE, ("%s - unknow subcmd = %d\n", __FUNCTION__, subcmd));
++ break;
++ }
++
++ return Status;
++}
++
++#ifdef SIOCSIWMLME
++int rt_ioctl_siwmlme(struct net_device *dev,
++ struct iw_request_info *info,
++ union iwreq_data *wrqu,
++ char *extra)
++{
++ PRTMP_ADAPTER pAd = (PRTMP_ADAPTER) dev->priv;
++ struct iw_mlme *pMlme = (struct iw_mlme *)wrqu->data.pointer;
++ MLME_QUEUE_ELEM MsgElem;
++ MLME_DISASSOC_REQ_STRUCT DisAssocReq;
++ MLME_DEAUTH_REQ_STRUCT DeAuthReq;
++
++ DBGPRINT(RT_DEBUG_TRACE, ("====> %s\n", __FUNCTION__));
++
++ if (pMlme == NULL)
++ return -EINVAL;
++
++ switch(pMlme->cmd)
++ {
++#ifdef IW_MLME_DEAUTH
++ case IW_MLME_DEAUTH:
++ DBGPRINT(RT_DEBUG_TRACE, ("====> %s - IW_MLME_DEAUTH\n", __FUNCTION__));
++ COPY_MAC_ADDR(DeAuthReq.Addr, pAd->CommonCfg.Bssid);
++ DeAuthReq.Reason = pMlme->reason_code;
++ MsgElem.MsgLen = sizeof(MLME_DEAUTH_REQ_STRUCT);
++ NdisMoveMemory(MsgElem.Msg, &DeAuthReq, sizeof(MLME_DEAUTH_REQ_STRUCT));
++ MlmeDeauthReqAction(pAd, &MsgElem);
++ if (INFRA_ON(pAd))
++ {
++ LinkDown(pAd, FALSE);
++ pAd->Mlme.AssocMachine.CurrState = ASSOC_IDLE;
++ }
++ break;
++#endif // IW_MLME_DEAUTH //
++#ifdef IW_MLME_DISASSOC
++ case IW_MLME_DISASSOC:
++ DBGPRINT(RT_DEBUG_TRACE, ("====> %s - IW_MLME_DISASSOC\n", __FUNCTION__));
++ COPY_MAC_ADDR(DisAssocReq.Addr, pAd->CommonCfg.Bssid);
++ DisAssocReq.Reason = pMlme->reason_code;
++
++ MsgElem.Machine = ASSOC_STATE_MACHINE;
++ MsgElem.MsgType = MT2_MLME_DISASSOC_REQ;
++ MsgElem.MsgLen = sizeof(MLME_DISASSOC_REQ_STRUCT);
++ NdisMoveMemory(MsgElem.Msg, &DisAssocReq, sizeof(MLME_DISASSOC_REQ_STRUCT));
++
++ pAd->Mlme.CntlMachine.CurrState = CNTL_WAIT_OID_DISASSOC;
++ MlmeDisassocReqAction(pAd, &MsgElem);
++ break;
++#endif // IW_MLME_DISASSOC //
++ default:
++ DBGPRINT(RT_DEBUG_TRACE, ("====> %s - Unknow Command\n", __FUNCTION__));
++ break;
++ }
++
++ return 0;
++}
++#endif // SIOCSIWMLME //
++
++#if WIRELESS_EXT > 17
++int rt_ioctl_siwauth(struct net_device *dev,
++ struct iw_request_info *info,
++ union iwreq_data *wrqu, char *extra)
++{
++ PRTMP_ADAPTER pAdapter = (PRTMP_ADAPTER) dev->priv;
++ struct iw_param *param = &wrqu->param;
++
++ //check if the interface is down
++ if(!RTMP_TEST_FLAG(pAdapter, fRTMP_ADAPTER_INTERRUPT_IN_USE))
++ {
++ DBGPRINT(RT_DEBUG_TRACE, ("INFO::Network is down!\n"));
++ return -ENETDOWN;
++ }
++ switch (param->flags & IW_AUTH_INDEX) {
++ case IW_AUTH_WPA_VERSION:
++ if (param->value == IW_AUTH_WPA_VERSION_WPA)
++ {
++ pAdapter->StaCfg.AuthMode = Ndis802_11AuthModeWPAPSK;
++ if (pAdapter->StaCfg.BssType == BSS_ADHOC)
++ pAdapter->StaCfg.AuthMode = Ndis802_11AuthModeWPANone;
++ }
++ else if (param->value == IW_AUTH_WPA_VERSION_WPA2)
++ pAdapter->StaCfg.AuthMode = Ndis802_11AuthModeWPA2PSK;
++
++ DBGPRINT(RT_DEBUG_TRACE, ("%s::IW_AUTH_WPA_VERSION - param->value = %d!\n", __FUNCTION__, param->value));
++ break;
++ case IW_AUTH_CIPHER_PAIRWISE:
++ if (param->value == IW_AUTH_CIPHER_NONE)
++ {
++ pAdapter->StaCfg.WepStatus = Ndis802_11WEPDisabled;
++ pAdapter->StaCfg.OrigWepStatus = pAdapter->StaCfg.WepStatus;
++ pAdapter->StaCfg.PairCipher = Ndis802_11WEPDisabled;
++ }
++ else if (param->value == IW_AUTH_CIPHER_WEP40 ||
++ param->value == IW_AUTH_CIPHER_WEP104)
++ {
++ pAdapter->StaCfg.WepStatus = Ndis802_11WEPEnabled;
++ pAdapter->StaCfg.OrigWepStatus = pAdapter->StaCfg.WepStatus;
++ pAdapter->StaCfg.PairCipher = Ndis802_11WEPEnabled;
++#ifdef WPA_SUPPLICANT_SUPPORT
++ pAdapter->StaCfg.IEEE8021X = FALSE;
++#endif // WPA_SUPPLICANT_SUPPORT //
++ }
++ else if (param->value == IW_AUTH_CIPHER_TKIP)
++ {
++ pAdapter->StaCfg.WepStatus = Ndis802_11Encryption2Enabled;
++ pAdapter->StaCfg.OrigWepStatus = pAdapter->StaCfg.WepStatus;
++ pAdapter->StaCfg.PairCipher = Ndis802_11Encryption2Enabled;
++ }
++ else if (param->value == IW_AUTH_CIPHER_CCMP)
++ {
++ pAdapter->StaCfg.WepStatus = Ndis802_11Encryption3Enabled;
++ pAdapter->StaCfg.OrigWepStatus = pAdapter->StaCfg.WepStatus;
++ pAdapter->StaCfg.PairCipher = Ndis802_11Encryption3Enabled;
++ }
++ DBGPRINT(RT_DEBUG_TRACE, ("%s::IW_AUTH_CIPHER_PAIRWISE - param->value = %d!\n", __FUNCTION__, param->value));
++ break;
++ case IW_AUTH_CIPHER_GROUP:
++ if (param->value == IW_AUTH_CIPHER_NONE)
++ {
++ pAdapter->StaCfg.GroupCipher = Ndis802_11WEPDisabled;
++ }
++ else if (param->value == IW_AUTH_CIPHER_WEP40 ||
++ param->value == IW_AUTH_CIPHER_WEP104)
++ {
++ pAdapter->StaCfg.GroupCipher = Ndis802_11WEPEnabled;
++ }
++ else if (param->value == IW_AUTH_CIPHER_TKIP)
++ {
++ pAdapter->StaCfg.GroupCipher = Ndis802_11Encryption2Enabled;
++ }
++ else if (param->value == IW_AUTH_CIPHER_CCMP)
++ {
++ pAdapter->StaCfg.GroupCipher = Ndis802_11Encryption3Enabled;
++ }
++ DBGPRINT(RT_DEBUG_TRACE, ("%s::IW_AUTH_CIPHER_GROUP - param->value = %d!\n", __FUNCTION__, param->value));
++ break;
++ case IW_AUTH_KEY_MGMT:
++ if (param->value == IW_AUTH_KEY_MGMT_802_1X)
++ {
++ if (pAdapter->StaCfg.AuthMode == Ndis802_11AuthModeWPAPSK)
++ {
++ pAdapter->StaCfg.AuthMode = Ndis802_11AuthModeWPA;
++#ifdef WPA_SUPPLICANT_SUPPORT
++ pAdapter->StaCfg.IEEE8021X = FALSE;
++#endif // WPA_SUPPLICANT_SUPPORT //
++ }
++ else if (pAdapter->StaCfg.AuthMode == Ndis802_11AuthModeWPA2PSK)
++ {
++ pAdapter->StaCfg.AuthMode = Ndis802_11AuthModeWPA2;
++#ifdef WPA_SUPPLICANT_SUPPORT
++ pAdapter->StaCfg.IEEE8021X = FALSE;
++#endif // WPA_SUPPLICANT_SUPPORT //
++ }
++#ifdef WPA_SUPPLICANT_SUPPORT
++ else
++ // WEP 1x
++ pAdapter->StaCfg.IEEE8021X = TRUE;
++#endif // WPA_SUPPLICANT_SUPPORT //
++ }
++ else if (param->value == 0)
++ {
++ //pAdapter->StaCfg.PortSecured = WPA_802_1X_PORT_SECURED;
++ STA_PORT_SECURED(pAdapter);
++ }
++ DBGPRINT(RT_DEBUG_TRACE, ("%s::IW_AUTH_KEY_MGMT - param->value = %d!\n", __FUNCTION__, param->value));
++ break;
++ case IW_AUTH_RX_UNENCRYPTED_EAPOL:
++ break;
++ case IW_AUTH_PRIVACY_INVOKED:
++ /*if (param->value == 0)
++ {
++ pAdapter->StaCfg.AuthMode = Ndis802_11AuthModeOpen;
++ pAdapter->StaCfg.WepStatus = Ndis802_11WEPDisabled;
++ pAdapter->StaCfg.OrigWepStatus = pAdapter->StaCfg.WepStatus;
++ pAdapter->StaCfg.PairCipher = Ndis802_11WEPDisabled;
++ pAdapter->StaCfg.GroupCipher = Ndis802_11WEPDisabled;
++ }*/
++ DBGPRINT(RT_DEBUG_TRACE, ("%s::IW_AUTH_PRIVACY_INVOKED - param->value = %d!\n", __FUNCTION__, param->value));
++ break;
++ case IW_AUTH_DROP_UNENCRYPTED:
++ if (param->value != 0)
++ pAdapter->StaCfg.PortSecured = WPA_802_1X_PORT_NOT_SECURED;
++ else
++ {
++ //pAdapter->StaCfg.PortSecured = WPA_802_1X_PORT_SECURED;
++ STA_PORT_SECURED(pAdapter);
++ }
++ DBGPRINT(RT_DEBUG_TRACE, ("%s::IW_AUTH_WPA_VERSION - param->value = %d!\n", __FUNCTION__, param->value));
++ break;
++ case IW_AUTH_80211_AUTH_ALG:
++ if (param->value & IW_AUTH_ALG_SHARED_KEY)
++ {
++ pAdapter->StaCfg.AuthMode = Ndis802_11AuthModeShared;
++ }
++ else if (param->value & IW_AUTH_ALG_OPEN_SYSTEM)
++ {
++ pAdapter->StaCfg.AuthMode = Ndis802_11AuthModeOpen;
++ }
++ else
++ return -EINVAL;
++ DBGPRINT(RT_DEBUG_TRACE, ("%s::IW_AUTH_80211_AUTH_ALG - param->value = %d!\n", __FUNCTION__, param->value));
++ break;
++ case IW_AUTH_WPA_ENABLED:
++ DBGPRINT(RT_DEBUG_TRACE, ("%s::IW_AUTH_WPA_ENABLED - Driver supports WPA!(param->value = %d)\n", __FUNCTION__, param->value));
++ break;
++ default:
++ return -EOPNOTSUPP;
++}
++
++ return 0;
++}
++
++int rt_ioctl_giwauth(struct net_device *dev,
++ struct iw_request_info *info,
++ union iwreq_data *wrqu, char *extra)
++{
++ PRTMP_ADAPTER pAdapter = (PRTMP_ADAPTER) dev->priv;
++ struct iw_param *param = &wrqu->param;
++
++ //check if the interface is down
++ if(!RTMP_TEST_FLAG(pAdapter, fRTMP_ADAPTER_INTERRUPT_IN_USE))
++ {
++ DBGPRINT(RT_DEBUG_TRACE, ("INFO::Network is down!\n"));
++ return -ENETDOWN;
++ }
++
++ switch (param->flags & IW_AUTH_INDEX) {
++ case IW_AUTH_DROP_UNENCRYPTED:
++ param->value = (pAdapter->StaCfg.WepStatus == Ndis802_11WEPDisabled) ? 0 : 1;
++ break;
++
++ case IW_AUTH_80211_AUTH_ALG:
++ param->value = (pAdapter->StaCfg.AuthMode == Ndis802_11AuthModeShared) ? IW_AUTH_ALG_SHARED_KEY : IW_AUTH_ALG_OPEN_SYSTEM;
++ break;
++
++ case IW_AUTH_WPA_ENABLED:
++ param->value = (pAdapter->StaCfg.AuthMode >= Ndis802_11AuthModeWPA) ? 1 : 0;
++ break;
++
++ default:
++ return -EOPNOTSUPP;
++ }
++ DBGPRINT(RT_DEBUG_TRACE, ("rt_ioctl_giwauth::param->value = %d!\n", param->value));
++ return 0;
++}
++
++void fnSetCipherKey(
++ IN PRTMP_ADAPTER pAdapter,
++ IN INT keyIdx,
++ IN UCHAR CipherAlg,
++ IN BOOLEAN bGTK,
++ IN struct iw_encode_ext *ext)
++{
++ NdisZeroMemory(&pAdapter->SharedKey[BSS0][keyIdx], sizeof(CIPHER_KEY));
++ pAdapter->SharedKey[BSS0][keyIdx].KeyLen = LEN_TKIP_EK;
++ NdisMoveMemory(pAdapter->SharedKey[BSS0][keyIdx].Key, ext->key, LEN_TKIP_EK);
++ NdisMoveMemory(pAdapter->SharedKey[BSS0][keyIdx].TxMic, ext->key + LEN_TKIP_EK, LEN_TKIP_TXMICK);
++ NdisMoveMemory(pAdapter->SharedKey[BSS0][keyIdx].RxMic, ext->key + LEN_TKIP_EK + LEN_TKIP_TXMICK, LEN_TKIP_RXMICK);
++ pAdapter->SharedKey[BSS0][keyIdx].CipherAlg = CipherAlg;
++
++ // Update group key information to ASIC Shared Key Table
++ AsicAddSharedKeyEntry(pAdapter,
++ BSS0,
++ keyIdx,
++ pAdapter->SharedKey[BSS0][keyIdx].CipherAlg,
++ pAdapter->SharedKey[BSS0][keyIdx].Key,
++ pAdapter->SharedKey[BSS0][keyIdx].TxMic,
++ pAdapter->SharedKey[BSS0][keyIdx].RxMic);
++
++ if (bGTK)
++ // Update ASIC WCID attribute table and IVEIV table
++ RTMPAddWcidAttributeEntry(pAdapter,
++ BSS0,
++ keyIdx,
++ pAdapter->SharedKey[BSS0][keyIdx].CipherAlg,
++ NULL);
++ else
++ // Update ASIC WCID attribute table and IVEIV table
++ RTMPAddWcidAttributeEntry(pAdapter,
++ BSS0,
++ keyIdx,
++ pAdapter->SharedKey[BSS0][keyIdx].CipherAlg,
++ &pAdapter->MacTab.Content[BSSID_WCID]);
++}
++
++int rt_ioctl_siwencodeext(struct net_device *dev,
++ struct iw_request_info *info,
++ union iwreq_data *wrqu,
++ char *extra)
++ {
++ PRTMP_ADAPTER pAdapter = (PRTMP_ADAPTER) dev->priv;
++ struct iw_point *encoding = &wrqu->encoding;
++ struct iw_encode_ext *ext = (struct iw_encode_ext *)extra;
++ int keyIdx, alg = ext->alg;
++
++ //check if the interface is down
++ if(!RTMP_TEST_FLAG(pAdapter, fRTMP_ADAPTER_INTERRUPT_IN_USE))
++ {
++ DBGPRINT(RT_DEBUG_TRACE, ("INFO::Network is down!\n"));
++ return -ENETDOWN;
++ }
++
++ if (encoding->flags & IW_ENCODE_DISABLED)
++ {
++ keyIdx = (encoding->flags & IW_ENCODE_INDEX) - 1;
++ // set BSSID wcid entry of the Pair-wise Key table as no-security mode
++ AsicRemovePairwiseKeyEntry(pAdapter, BSS0, BSSID_WCID);
++ pAdapter->SharedKey[BSS0][keyIdx].KeyLen = 0;
++ pAdapter->SharedKey[BSS0][keyIdx].CipherAlg = CIPHER_NONE;
++ AsicRemoveSharedKeyEntry(pAdapter, 0, (UCHAR)keyIdx);
++ NdisZeroMemory(&pAdapter->SharedKey[BSS0][keyIdx], sizeof(CIPHER_KEY));
++ DBGPRINT(RT_DEBUG_TRACE, ("%s::Remove all keys!(encoding->flags = %x)\n", __FUNCTION__, encoding->flags));
++ }
++ else
++ {
++ // Get Key Index and convet to our own defined key index
++ keyIdx = (encoding->flags & IW_ENCODE_INDEX) - 1;
++ if((keyIdx < 0) || (keyIdx >= NR_WEP_KEYS))
++ return -EINVAL;
++
++ if (ext->ext_flags & IW_ENCODE_EXT_SET_TX_KEY)
++ {
++ pAdapter->StaCfg.DefaultKeyId = keyIdx;
++ DBGPRINT(RT_DEBUG_TRACE, ("%s::DefaultKeyId = %d\n", __FUNCTION__, pAdapter->StaCfg.DefaultKeyId));
++ }
++
++ switch (alg) {
++ case IW_ENCODE_ALG_NONE:
++ DBGPRINT(RT_DEBUG_TRACE, ("%s::IW_ENCODE_ALG_NONE\n", __FUNCTION__));
++ break;
++ case IW_ENCODE_ALG_WEP:
++ DBGPRINT(RT_DEBUG_TRACE, ("%s::IW_ENCODE_ALG_WEP - ext->key_len = %d, keyIdx = %d\n", __FUNCTION__, ext->key_len, keyIdx));
++ if (ext->key_len == MAX_WEP_KEY_SIZE)
++ {
++ pAdapter->SharedKey[BSS0][keyIdx].KeyLen = MAX_WEP_KEY_SIZE;
++ pAdapter->SharedKey[BSS0][keyIdx].CipherAlg = CIPHER_WEP128;
++ }
++ else if (ext->key_len == MIN_WEP_KEY_SIZE)
++ {
++ pAdapter->SharedKey[BSS0][keyIdx].KeyLen = MIN_WEP_KEY_SIZE;
++ pAdapter->SharedKey[BSS0][keyIdx].CipherAlg = CIPHER_WEP64;
++ }
++ else
++ return -EINVAL;
++
++ NdisZeroMemory(pAdapter->SharedKey[BSS0][keyIdx].Key, 16);
++ NdisMoveMemory(pAdapter->SharedKey[BSS0][keyIdx].Key, ext->key, ext->key_len);
++ break;
++ case IW_ENCODE_ALG_TKIP:
++ DBGPRINT(RT_DEBUG_TRACE, ("%s::IW_ENCODE_ALG_TKIP - keyIdx = %d, ext->key_len = %d\n", __FUNCTION__, keyIdx, ext->key_len));
++ if (ext->key_len == 32)
++ {
++ if (ext->ext_flags & IW_ENCODE_EXT_SET_TX_KEY)
++ {
++ fnSetCipherKey(pAdapter, keyIdx, CIPHER_TKIP, FALSE, ext);
++ if (pAdapter->StaCfg.AuthMode >= Ndis802_11AuthModeWPA2)
++ {
++ //pAdapter->StaCfg.PortSecured = WPA_802_1X_PORT_SECURED;
++ STA_PORT_SECURED(pAdapter);
++ }
++ }
++ else if (ext->ext_flags & IW_ENCODE_EXT_GROUP_KEY)
++ {
++ fnSetCipherKey(pAdapter, keyIdx, CIPHER_TKIP, TRUE, ext);
++
++ // set 802.1x port control
++ //pAdapter->StaCfg.PortSecured = WPA_802_1X_PORT_SECURED;
++ STA_PORT_SECURED(pAdapter);
++ }
++ }
++ else
++ return -EINVAL;
++ break;
++ case IW_ENCODE_ALG_CCMP:
++ if (ext->ext_flags & IW_ENCODE_EXT_SET_TX_KEY)
++ {
++ fnSetCipherKey(pAdapter, keyIdx, CIPHER_AES, FALSE, ext);
++ if (pAdapter->StaCfg.AuthMode >= Ndis802_11AuthModeWPA2)
++ //pAdapter->StaCfg.PortSecured = WPA_802_1X_PORT_SECURED;
++ STA_PORT_SECURED(pAdapter);
++ }
++ else if (ext->ext_flags & IW_ENCODE_EXT_GROUP_KEY)
++ {
++ fnSetCipherKey(pAdapter, keyIdx, CIPHER_AES, TRUE, ext);
++
++ // set 802.1x port control
++ //pAdapter->StaCfg.PortSecured = WPA_802_1X_PORT_SECURED;
++ STA_PORT_SECURED(pAdapter);
++ }
++ break;
++ default:
++ return -EINVAL;
++ }
++ }
++
++ return 0;
++}
++
++int
++rt_ioctl_giwencodeext(struct net_device *dev,
++ struct iw_request_info *info,
++ union iwreq_data *wrqu, char *extra)
++{
++ PRTMP_ADAPTER pAd = (PRTMP_ADAPTER) dev->priv;
++ PCHAR pKey = NULL;
++ struct iw_point *encoding = &wrqu->encoding;
++ struct iw_encode_ext *ext = (struct iw_encode_ext *)extra;
++ int idx, max_key_len;
++
++ DBGPRINT(RT_DEBUG_TRACE ,("===> rt_ioctl_giwencodeext\n"));
++
++ max_key_len = encoding->length - sizeof(*ext);
++ if (max_key_len < 0)
++ return -EINVAL;
++
++ idx = encoding->flags & IW_ENCODE_INDEX;
++ if (idx)
++ {
++ if (idx < 1 || idx > 4)
++ return -EINVAL;
++ idx--;
++
++ if ((pAd->StaCfg.WepStatus == Ndis802_11Encryption2Enabled) ||
++ (pAd->StaCfg.WepStatus == Ndis802_11Encryption3Enabled))
++ {
++ if (idx != pAd->StaCfg.DefaultKeyId)
++ {
++ ext->key_len = 0;
++ return 0;
++ }
++ }
++ }
++ else
++ idx = pAd->StaCfg.DefaultKeyId;
++
++ encoding->flags = idx + 1;
++ memset(ext, 0, sizeof(*ext));
++
++ ext->key_len = 0;
++ switch(pAd->StaCfg.WepStatus) {
++ case Ndis802_11WEPDisabled:
++ ext->alg = IW_ENCODE_ALG_NONE;
++ encoding->flags |= IW_ENCODE_DISABLED;
++ break;
++ case Ndis802_11WEPEnabled:
++ ext->alg = IW_ENCODE_ALG_WEP;
++ if (pAd->SharedKey[BSS0][idx].KeyLen > max_key_len)
++ return -E2BIG;
++ else
++ {
++ ext->key_len = pAd->SharedKey[BSS0][idx].KeyLen;
++ pKey = &(pAd->SharedKey[BSS0][idx].Key[0]);
++ }
++ break;
++ case Ndis802_11Encryption2Enabled:
++ case Ndis802_11Encryption3Enabled:
++ if (pAd->StaCfg.WepStatus == Ndis802_11Encryption2Enabled)
++ ext->alg = IW_ENCODE_ALG_TKIP;
++ else
++ ext->alg = IW_ENCODE_ALG_CCMP;
++
++ if (max_key_len < 32)
++ return -E2BIG;
++ else
++ {
++ ext->key_len = 32;
++ pKey = &pAd->StaCfg.PMK[0];
++ }
++ break;
++ default:
++ return -EINVAL;
++ }
++
++ if (ext->key_len && pKey)
++ {
++ encoding->flags |= IW_ENCODE_ENABLED;
++ memcpy(ext->key, pKey, ext->key_len);
++ }
++
++ return 0;
++}
++
++#ifdef SIOCSIWGENIE
++int rt_ioctl_siwgenie(struct net_device *dev,
++ struct iw_request_info *info,
++ union iwreq_data *wrqu, char *extra)
++{
++ PRTMP_ADAPTER pAd = (PRTMP_ADAPTER) dev->priv;
++
++ if (wrqu->data.length > MAX_LEN_OF_RSNIE ||
++ (wrqu->data.length && extra == NULL))
++ return -EINVAL;
++
++ if (wrqu->data.length)
++ {
++ pAd->StaCfg.RSNIE_Len = wrqu->data.length;
++ NdisMoveMemory(&pAd->StaCfg.RSN_IE[0], extra, pAd->StaCfg.RSNIE_Len);
++ }
++ else
++ {
++ pAd->StaCfg.RSNIE_Len = 0;
++ NdisZeroMemory(&pAd->StaCfg.RSN_IE[0], MAX_LEN_OF_RSNIE);
++ }
++
++ return 0;
++}
++#endif // SIOCSIWGENIE //
++
++int rt_ioctl_giwgenie(struct net_device *dev,
++ struct iw_request_info *info,
++ union iwreq_data *wrqu, char *extra)
++{
++ PRTMP_ADAPTER pAd = (PRTMP_ADAPTER) dev->priv;
++
++ if ((pAd->StaCfg.RSNIE_Len == 0) ||
++ (pAd->StaCfg.AuthMode < Ndis802_11AuthModeWPA))
++ {
++ wrqu->data.length = 0;
++ return 0;
++ }
++
++#ifdef NATIVE_WPA_SUPPLICANT_SUPPORT
++#ifdef SIOCSIWGENIE
++ if (pAd->StaCfg.WpaSupplicantUP == WPA_SUPPLICANT_ENABLE)
++ {
++ if (wrqu->data.length < pAd->StaCfg.RSNIE_Len)
++ return -E2BIG;
++
++ wrqu->data.length = pAd->StaCfg.RSNIE_Len;
++ memcpy(extra, &pAd->StaCfg.RSN_IE[0], pAd->StaCfg.RSNIE_Len);
++ }
++ else
++#endif // SIOCSIWGENIE //
++#endif // NATIVE_WPA_SUPPLICANT_SUPPORT //
++ {
++ UCHAR RSNIe = IE_WPA;
++
++ if (wrqu->data.length < (pAd->StaCfg.RSNIE_Len + 2)) // ID, Len
++ return -E2BIG;
++ wrqu->data.length = pAd->StaCfg.RSNIE_Len + 2;
++
++ if ((pAd->StaCfg.AuthMode == Ndis802_11AuthModeWPA2PSK) ||
++ (pAd->StaCfg.AuthMode == Ndis802_11AuthModeWPA2))
++ RSNIe = IE_RSN;
++
++ extra[0] = (char)RSNIe;
++ extra[1] = pAd->StaCfg.RSNIE_Len;
++ memcpy(extra+2, &pAd->StaCfg.RSN_IE[0], pAd->StaCfg.RSNIE_Len);
++ }
++
++ return 0;
++}
++
++int rt_ioctl_siwpmksa(struct net_device *dev,
++ struct iw_request_info *info,
++ union iwreq_data *wrqu,
++ char *extra)
++{
++ PRTMP_ADAPTER pAd = (PRTMP_ADAPTER) dev->priv;
++ struct iw_pmksa *pPmksa = (struct iw_pmksa *)wrqu->data.pointer;
++ INT CachedIdx = 0, idx = 0;
++
++ if (pPmksa == NULL)
++ return -EINVAL;
++
++ DBGPRINT(RT_DEBUG_TRACE ,("===> rt_ioctl_siwpmksa\n"));
++ switch(pPmksa->cmd)
++ {
++ case IW_PMKSA_FLUSH:
++ NdisZeroMemory(pAd->StaCfg.SavedPMK, sizeof(BSSID_INFO)*PMKID_NO);
++ DBGPRINT(RT_DEBUG_TRACE ,("rt_ioctl_siwpmksa - IW_PMKSA_FLUSH\n"));
++ break;
++ case IW_PMKSA_REMOVE:
++ for (CachedIdx = 0; CachedIdx < pAd->StaCfg.SavedPMKNum; CachedIdx++)
++ {
++ // compare the BSSID
++ if (NdisEqualMemory(pPmksa->bssid.sa_data, pAd->StaCfg.SavedPMK[CachedIdx].BSSID, MAC_ADDR_LEN))
++ {
++ NdisZeroMemory(pAd->StaCfg.SavedPMK[CachedIdx].BSSID, MAC_ADDR_LEN);
++ NdisZeroMemory(pAd->StaCfg.SavedPMK[CachedIdx].PMKID, 16);
++ for (idx = CachedIdx; idx < (pAd->StaCfg.SavedPMKNum - 1); idx++)
++ {
++ NdisMoveMemory(&pAd->StaCfg.SavedPMK[idx].BSSID[0], &pAd->StaCfg.SavedPMK[idx+1].BSSID[0], MAC_ADDR_LEN);
++ NdisMoveMemory(&pAd->StaCfg.SavedPMK[idx].PMKID[0], &pAd->StaCfg.SavedPMK[idx+1].PMKID[0], 16);
++ }
++ pAd->StaCfg.SavedPMKNum--;
++ break;
++ }
++ }
++
++ DBGPRINT(RT_DEBUG_TRACE ,("rt_ioctl_siwpmksa - IW_PMKSA_REMOVE\n"));
++ break;
++ case IW_PMKSA_ADD:
++ for (CachedIdx = 0; CachedIdx < pAd->StaCfg.SavedPMKNum; CachedIdx++)
++ {
++ // compare the BSSID
++ if (NdisEqualMemory(pPmksa->bssid.sa_data, pAd->StaCfg.SavedPMK[CachedIdx].BSSID, MAC_ADDR_LEN))
++ break;
++ }
++
++ // Found, replace it
++ if (CachedIdx < PMKID_NO)
++ {
++ DBGPRINT(RT_DEBUG_OFF, ("Update PMKID, idx = %d\n", CachedIdx));
++ NdisMoveMemory(&pAd->StaCfg.SavedPMK[CachedIdx].BSSID[0], pPmksa->bssid.sa_data, MAC_ADDR_LEN);
++ NdisMoveMemory(&pAd->StaCfg.SavedPMK[CachedIdx].PMKID[0], pPmksa->pmkid, 16);
++ pAd->StaCfg.SavedPMKNum++;
++ }
++ // Not found, replace the last one
++ else
++ {
++ // Randomly replace one
++ CachedIdx = (pPmksa->bssid.sa_data[5] % PMKID_NO);
++ DBGPRINT(RT_DEBUG_OFF, ("Update PMKID, idx = %d\n", CachedIdx));
++ NdisMoveMemory(&pAd->StaCfg.SavedPMK[CachedIdx].BSSID[0], pPmksa->bssid.sa_data, MAC_ADDR_LEN);
++ NdisMoveMemory(&pAd->StaCfg.SavedPMK[CachedIdx].PMKID[0], pPmksa->pmkid, 16);
++ }
++
++ DBGPRINT(RT_DEBUG_TRACE ,("rt_ioctl_siwpmksa - IW_PMKSA_ADD\n"));
++ break;
++ default:
++ DBGPRINT(RT_DEBUG_TRACE ,("rt_ioctl_siwpmksa - Unknow Command!!\n"));
++ break;
++ }
++
++ return 0;
++}
++#endif // #if WIRELESS_EXT > 17
++
++#ifdef DBG
++static int
++rt_private_ioctl_bbp(struct net_device *dev, struct iw_request_info *info,
++ struct iw_point *wrq, char *extra)
++ {
++ CHAR *this_char;
++ CHAR *value = NULL;
++ UCHAR regBBP = 0;
++// CHAR arg[255]={0};
++ UINT32 bbpId;
++ UINT32 bbpValue;
++ BOOLEAN bIsPrintAllBBP = FALSE;
++ INT Status = 0;
++ PRTMP_ADAPTER pAdapter = (PRTMP_ADAPTER) dev->priv;
++
++
++ memset(extra, 0x00, IW_PRIV_SIZE_MASK);
++
++ if (wrq->length > 1) //No parameters.
++ {
++ sprintf(extra, "\n");
++
++ //Parsing Read or Write
++ this_char = wrq->pointer;
++ DBGPRINT(RT_DEBUG_TRACE, ("this_char=%s\n", this_char));
++ if (!*this_char)
++ goto next;
++
++ if ((value = rtstrchr(this_char, '=')) != NULL)
++ *value++ = 0;
++
++ if (!value || !*value)
++ { //Read
++ DBGPRINT(RT_DEBUG_TRACE, ("this_char=%s, value=%s\n", this_char, value));
++ if (sscanf(this_char, "%d", &(bbpId)) == 1)
++ {
++ if (bbpId <= 136)
++ {
++#ifdef RALINK_ATE
++ if (ATE_ON(pAdapter))
++ {
++ ATE_BBP_IO_READ8_BY_REG_ID(pAdapter, bbpId, ®BBP);
++ }
++ else
++#endif // RALINK_ATE //
++ {
++ RTMP_BBP_IO_READ8_BY_REG_ID(pAdapter, bbpId, ®BBP);
++ }
++ sprintf(extra+strlen(extra), "R%02d[0x%02X]:%02X\n", bbpId, bbpId*2, regBBP);
++ wrq->length = strlen(extra) + 1; // 1: size of '\0'
++ DBGPRINT(RT_DEBUG_TRACE, ("msg=%s\n", extra));
++ }
++ else
++ {//Invalid parametes, so default printk all bbp
++ bIsPrintAllBBP = TRUE;
++ goto next;
++ }
++ }
++ else
++ { //Invalid parametes, so default printk all bbp
++ bIsPrintAllBBP = TRUE;
++ goto next;
++ }
++ }
++ else
++ { //Write
++ if ((sscanf(this_char, "%d", &(bbpId)) == 1) && (sscanf(value, "%x", &(bbpValue)) == 1))
++ {
++ if (bbpId <= 136)
++ {
++#ifdef RALINK_ATE
++ if (ATE_ON(pAdapter))
++ {
++ ATE_BBP_IO_WRITE8_BY_REG_ID(pAdapter, bbpId, bbpValue);
++ //Read it back for showing
++ ATE_BBP_IO_READ8_BY_REG_ID(pAdapter, bbpId, ®BBP);
++ }
++ else
++#endif // RALINK_ATE //
++ {
++ RTMP_BBP_IO_WRITE8_BY_REG_ID(pAdapter, bbpId, bbpValue);
++ //Read it back for showing
++ RTMP_BBP_IO_READ8_BY_REG_ID(pAdapter, bbpId, ®BBP);
++ }
++ sprintf(extra+strlen(extra), "R%02d[0x%02X]:%02X\n", bbpId, bbpId*2, regBBP);
++ wrq->length = strlen(extra) + 1; // 1: size of '\0'
++ DBGPRINT(RT_DEBUG_TRACE, ("msg=%s\n", extra));
++ }
++ else
++ {//Invalid parametes, so default printk all bbp
++ bIsPrintAllBBP = TRUE;
++ goto next;
++ }
++ }
++ else
++ { //Invalid parametes, so default printk all bbp
++ bIsPrintAllBBP = TRUE;
++ goto next;
++ }
++ }
++ }
++ else
++ bIsPrintAllBBP = TRUE;
++
++next:
++ if (bIsPrintAllBBP)
++ {
++ memset(extra, 0x00, IW_PRIV_SIZE_MASK);
++ sprintf(extra, "\n");
++ for (bbpId = 0; bbpId <= 136; bbpId++)
++ {
++ if (strlen(extra) >= (IW_PRIV_SIZE_MASK - 10))
++ break;
++#ifdef RALINK_ATE
++ if (ATE_ON(pAdapter))
++ {
++ ATE_BBP_IO_READ8_BY_REG_ID(pAdapter, bbpId, ®BBP);
++ }
++ else
++#endif // RALINK_ATE //
++ RTMP_BBP_IO_READ8_BY_REG_ID(pAdapter, bbpId, ®BBP);
++ sprintf(extra+strlen(extra), "R%02d[0x%02X]:%02X ", bbpId, bbpId*2, regBBP);
++ if (bbpId%5 == 4)
++ sprintf(extra+strlen(extra), "\n");
++ }
++
++ wrq->length = strlen(extra) + 1; // 1: size of '\0'
++ DBGPRINT(RT_DEBUG_TRACE, ("wrq->length = %d\n", wrq->length));
++ }
++
++ DBGPRINT(RT_DEBUG_TRACE, ("<==rt_private_ioctl_bbp\n\n"));
++
++ return Status;
++}
++#endif // DBG //
++
++int rt_ioctl_siwrate(struct net_device *dev,
++ struct iw_request_info *info,
++ union iwreq_data *wrqu, char *extra)
++{
++ PRTMP_ADAPTER pAd = (PRTMP_ADAPTER) dev->priv;
++ UINT32 rate = wrqu->bitrate.value, fixed = wrqu->bitrate.fixed;
++
++ //check if the interface is down
++ if(!RTMP_TEST_FLAG(pAd, fRTMP_ADAPTER_INTERRUPT_IN_USE))
++ {
++ DBGPRINT(RT_DEBUG_TRACE, ("rt_ioctl_siwrate::Network is down!\n"));
++ return -ENETDOWN;
++ }
++
++ DBGPRINT(RT_DEBUG_TRACE, ("rt_ioctl_siwrate::(rate = %d, fixed = %d)\n", rate, fixed));
++ /* rate = -1 => auto rate
++ rate = X, fixed = 1 => (fixed rate X)
++ */
++ if (rate == -1)
++ {
++ //Auto Rate
++ pAd->StaCfg.DesiredTransmitSetting.field.MCS = MCS_AUTO;
++ pAd->StaCfg.bAutoTxRateSwitch = TRUE;
++ if ((pAd->CommonCfg.PhyMode <= PHY_11G) ||
++ (pAd->MacTab.Content[BSSID_WCID].HTPhyMode.field.MODE <= MODE_OFDM))
++ RTMPSetDesiredRates(pAd, -1);
++
++#ifdef DOT11_N_SUPPORT
++ SetCommonHT(pAd);
++#endif // DOT11_N_SUPPORT //
++ }
++ else
++ {
++ if (fixed)
++ {
++ pAd->StaCfg.bAutoTxRateSwitch = FALSE;
++ if ((pAd->CommonCfg.PhyMode <= PHY_11G) ||
++ (pAd->MacTab.Content[BSSID_WCID].HTPhyMode.field.MODE <= MODE_OFDM))
++ RTMPSetDesiredRates(pAd, rate);
++ else
++ {
++ pAd->StaCfg.DesiredTransmitSetting.field.MCS = MCS_AUTO;
++#ifdef DOT11_N_SUPPORT
++ SetCommonHT(pAd);
++#endif // DOT11_N_SUPPORT //
++ }
++ DBGPRINT(RT_DEBUG_TRACE, ("rt_ioctl_siwrate::(HtMcs=%d)\n",pAd->StaCfg.DesiredTransmitSetting.field.MCS));
++ }
++ else
++ {
++ // TODO: rate = X, fixed = 0 => (rates <= X)
++ return -EOPNOTSUPP;
++ }
++ }
++
++ return 0;
++}
++
++int rt_ioctl_giwrate(struct net_device *dev,
++ struct iw_request_info *info,
++ union iwreq_data *wrqu, char *extra)
++{
++ PRTMP_ADAPTER pAd = (PRTMP_ADAPTER) dev->priv;
++ int rate_index = 0, rate_count = 0;
++ HTTRANSMIT_SETTING ht_setting;
++ __s32 ralinkrate[] =
++ {2, 4, 11, 22, // CCK
++ 12, 18, 24, 36, 48, 72, 96, 108, // OFDM
++ 13, 26, 39, 52, 78, 104, 117, 130, 26, 52, 78, 104, 156, 208, 234, 260, // 20MHz, 800ns GI, MCS: 0 ~ 15
++ 39, 78, 117, 156, 234, 312, 351, 390, // 20MHz, 800ns GI, MCS: 16 ~ 23
++ 27, 54, 81, 108, 162, 216, 243, 270, 54, 108, 162, 216, 324, 432, 486, 540, // 40MHz, 800ns GI, MCS: 0 ~ 15
++ 81, 162, 243, 324, 486, 648, 729, 810, // 40MHz, 800ns GI, MCS: 16 ~ 23
++ 14, 29, 43, 57, 87, 115, 130, 144, 29, 59, 87, 115, 173, 230, 260, 288, // 20MHz, 400ns GI, MCS: 0 ~ 15
++ 43, 87, 130, 173, 260, 317, 390, 433, // 20MHz, 400ns GI, MCS: 16 ~ 23
++ 30, 60, 90, 120, 180, 240, 270, 300, 60, 120, 180, 240, 360, 480, 540, 600, // 40MHz, 400ns GI, MCS: 0 ~ 15
++ 90, 180, 270, 360, 540, 720, 810, 900}; // 40MHz, 400ns GI, MCS: 16 ~ 23
++
++ rate_count = sizeof(ralinkrate)/sizeof(__s32);
++ //check if the interface is down
++ if(!RTMP_TEST_FLAG(pAd, fRTMP_ADAPTER_INTERRUPT_IN_USE))
++ {
++ DBGPRINT(RT_DEBUG_TRACE, ("INFO::Network is down!\n"));
++ return -ENETDOWN;
++ }
++
++ if ((pAd->StaCfg.bAutoTxRateSwitch == FALSE) &&
++ (INFRA_ON(pAd)) &&
++ ((pAd->CommonCfg.PhyMode <= PHY_11G) || (pAd->MacTab.Content[BSSID_WCID].HTPhyMode.field.MODE <= MODE_OFDM)))
++ ht_setting.word = pAd->StaCfg.HTPhyMode.word;
++ else
++ ht_setting.word = pAd->MacTab.Content[BSSID_WCID].HTPhyMode.word;
++
++#ifdef DOT11_N_SUPPORT
++ if (ht_setting.field.MODE >= MODE_HTMIX)
++ {
++// rate_index = 12 + ((UCHAR)ht_setting.field.BW *16) + ((UCHAR)ht_setting.field.ShortGI *32) + ((UCHAR)ht_setting.field.MCS);
++ rate_index = 12 + ((UCHAR)ht_setting.field.BW *24) + ((UCHAR)ht_setting.field.ShortGI *48) + ((UCHAR)ht_setting.field.MCS);
++ }
++ else
++#endif // DOT11_N_SUPPORT //
++ if (ht_setting.field.MODE == MODE_OFDM)
++ rate_index = (UCHAR)(ht_setting.field.MCS) + 4;
++ else if (ht_setting.field.MODE == MODE_CCK)
++ rate_index = (UCHAR)(ht_setting.field.MCS);
++
++ if (rate_index < 0)
++ rate_index = 0;
++
++ if (rate_index > rate_count)
++ rate_index = rate_count;
++
++ wrqu->bitrate.value = ralinkrate[rate_index] * 500000;
++ wrqu->bitrate.disabled = 0;
++
++ return 0;
++}
++
++static const iw_handler rt_handler[] =
++{
++ (iw_handler) NULL, /* SIOCSIWCOMMIT */
++ (iw_handler) rt_ioctl_giwname, /* SIOCGIWNAME */
++ (iw_handler) NULL, /* SIOCSIWNWID */
++ (iw_handler) NULL, /* SIOCGIWNWID */
++ (iw_handler) rt_ioctl_siwfreq, /* SIOCSIWFREQ */
++ (iw_handler) rt_ioctl_giwfreq, /* SIOCGIWFREQ */
++ (iw_handler) rt_ioctl_siwmode, /* SIOCSIWMODE */
++ (iw_handler) rt_ioctl_giwmode, /* SIOCGIWMODE */
++ (iw_handler) NULL, /* SIOCSIWSENS */
++ (iw_handler) NULL, /* SIOCGIWSENS */
++ (iw_handler) NULL /* not used */, /* SIOCSIWRANGE */
++ (iw_handler) rt_ioctl_giwrange, /* SIOCGIWRANGE */
++ (iw_handler) NULL /* not used */, /* SIOCSIWPRIV */
++ (iw_handler) NULL /* kernel code */, /* SIOCGIWPRIV */
++ (iw_handler) NULL /* not used */, /* SIOCSIWSTATS */
++ (iw_handler) rt28xx_get_wireless_stats /* kernel code */, /* SIOCGIWSTATS */
++ (iw_handler) NULL, /* SIOCSIWSPY */
++ (iw_handler) NULL, /* SIOCGIWSPY */
++ (iw_handler) NULL, /* SIOCSIWTHRSPY */
++ (iw_handler) NULL, /* SIOCGIWTHRSPY */
++ (iw_handler) rt_ioctl_siwap, /* SIOCSIWAP */
++ (iw_handler) rt_ioctl_giwap, /* SIOCGIWAP */
++#ifdef SIOCSIWMLME
++ (iw_handler) rt_ioctl_siwmlme, /* SIOCSIWMLME */
++#else
++ (iw_handler) NULL, /* SIOCSIWMLME */
++#endif // SIOCSIWMLME //
++ (iw_handler) rt_ioctl_iwaplist, /* SIOCGIWAPLIST */
++#ifdef SIOCGIWSCAN
++ (iw_handler) rt_ioctl_siwscan, /* SIOCSIWSCAN */
++ (iw_handler) rt_ioctl_giwscan, /* SIOCGIWSCAN */
++#else
++ (iw_handler) NULL, /* SIOCSIWSCAN */
++ (iw_handler) NULL, /* SIOCGIWSCAN */
++#endif /* SIOCGIWSCAN */
++ (iw_handler) rt_ioctl_siwessid, /* SIOCSIWESSID */
++ (iw_handler) rt_ioctl_giwessid, /* SIOCGIWESSID */
++ (iw_handler) rt_ioctl_siwnickn, /* SIOCSIWNICKN */
++ (iw_handler) rt_ioctl_giwnickn, /* SIOCGIWNICKN */
++ (iw_handler) NULL, /* -- hole -- */
++ (iw_handler) NULL, /* -- hole -- */
++ (iw_handler) rt_ioctl_siwrate, /* SIOCSIWRATE */
++ (iw_handler) rt_ioctl_giwrate, /* SIOCGIWRATE */
++ (iw_handler) rt_ioctl_siwrts, /* SIOCSIWRTS */
++ (iw_handler) rt_ioctl_giwrts, /* SIOCGIWRTS */
++ (iw_handler) rt_ioctl_siwfrag, /* SIOCSIWFRAG */
++ (iw_handler) rt_ioctl_giwfrag, /* SIOCGIWFRAG */
++ (iw_handler) NULL, /* SIOCSIWTXPOW */
++ (iw_handler) NULL, /* SIOCGIWTXPOW */
++ (iw_handler) NULL, /* SIOCSIWRETRY */
++ (iw_handler) NULL, /* SIOCGIWRETRY */
++ (iw_handler) rt_ioctl_siwencode, /* SIOCSIWENCODE */
++ (iw_handler) rt_ioctl_giwencode, /* SIOCGIWENCODE */
++ (iw_handler) NULL, /* SIOCSIWPOWER */
++ (iw_handler) NULL, /* SIOCGIWPOWER */
++ (iw_handler) NULL, /* -- hole -- */
++ (iw_handler) NULL, /* -- hole -- */
++#if WIRELESS_EXT > 17
++ (iw_handler) rt_ioctl_siwgenie, /* SIOCSIWGENIE */
++ (iw_handler) rt_ioctl_giwgenie, /* SIOCGIWGENIE */
++ (iw_handler) rt_ioctl_siwauth, /* SIOCSIWAUTH */
++ (iw_handler) rt_ioctl_giwauth, /* SIOCGIWAUTH */
++ (iw_handler) rt_ioctl_siwencodeext, /* SIOCSIWENCODEEXT */
++ (iw_handler) rt_ioctl_giwencodeext, /* SIOCGIWENCODEEXT */
++ (iw_handler) rt_ioctl_siwpmksa, /* SIOCSIWPMKSA */
++#endif
++};
++
++static const iw_handler rt_priv_handlers[] = {
++ (iw_handler) NULL, /* + 0x00 */
++ (iw_handler) NULL, /* + 0x01 */
++#ifndef CONFIG_AP_SUPPORT
++ (iw_handler) rt_ioctl_setparam, /* + 0x02 */
++#else
++ (iw_handler) NULL, /* + 0x02 */
++#endif // CONFIG_AP_SUPPORT //
++#ifdef DBG
++ (iw_handler) rt_private_ioctl_bbp, /* + 0x03 */
++#else
++ (iw_handler) NULL, /* + 0x03 */
++#endif
++ (iw_handler) NULL, /* + 0x04 */
++ (iw_handler) NULL, /* + 0x05 */
++ (iw_handler) NULL, /* + 0x06 */
++ (iw_handler) NULL, /* + 0x07 */
++ (iw_handler) NULL, /* + 0x08 */
++ (iw_handler) rt_private_get_statistics, /* + 0x09 */
++ (iw_handler) NULL, /* + 0x0A */
++ (iw_handler) NULL, /* + 0x0B */
++ (iw_handler) NULL, /* + 0x0C */
++ (iw_handler) NULL, /* + 0x0D */
++ (iw_handler) NULL, /* + 0x0E */
++ (iw_handler) NULL, /* + 0x0F */
++ (iw_handler) NULL, /* + 0x10 */
++ (iw_handler) rt_private_show, /* + 0x11 */
++ (iw_handler) NULL, /* + 0x12 */
++ (iw_handler) NULL, /* + 0x13 */
++ (iw_handler) NULL, /* + 0x15 */
++ (iw_handler) NULL, /* + 0x17 */
++ (iw_handler) NULL, /* + 0x18 */
++};
++
++const struct iw_handler_def rt28xx_iw_handler_def =
++{
++#define N(a) (sizeof (a) / sizeof (a[0]))
++ .standard = (iw_handler *) rt_handler,
++ .num_standard = sizeof(rt_handler) / sizeof(iw_handler),
++ .private = (iw_handler *) rt_priv_handlers,
++ .num_private = N(rt_priv_handlers),
++ .private_args = (struct iw_priv_args *) privtab,
++ .num_private_args = N(privtab),
++#if IW_HANDLER_VERSION >= 7
++ .get_wireless_stats = rt28xx_get_wireless_stats,
++#endif
++};
++
++INT RTMPSetInformation(
++ IN PRTMP_ADAPTER pAdapter,
++ IN OUT struct ifreq *rq,
++ IN INT cmd)
++{
++ struct iwreq *wrq = (struct iwreq *) rq;
++ NDIS_802_11_SSID Ssid;
++ NDIS_802_11_MAC_ADDRESS Bssid;
++ RT_802_11_PHY_MODE PhyMode;
++ RT_802_11_STA_CONFIG StaConfig;
++ NDIS_802_11_RATES aryRates;
++ RT_802_11_PREAMBLE Preamble;
++ NDIS_802_11_WEP_STATUS WepStatus;
++ NDIS_802_11_AUTHENTICATION_MODE AuthMode = Ndis802_11AuthModeMax;
++ NDIS_802_11_NETWORK_INFRASTRUCTURE BssType;
++ NDIS_802_11_RTS_THRESHOLD RtsThresh;
++ NDIS_802_11_FRAGMENTATION_THRESHOLD FragThresh;
++ NDIS_802_11_POWER_MODE PowerMode;
++ PNDIS_802_11_KEY pKey = NULL;
++ PNDIS_802_11_WEP pWepKey =NULL;
++ PNDIS_802_11_REMOVE_KEY pRemoveKey = NULL;
++ NDIS_802_11_CONFIGURATION Config, *pConfig = NULL;
++ NDIS_802_11_NETWORK_TYPE NetType;
++ ULONG Now;
++ UINT KeyIdx = 0;
++ INT Status = NDIS_STATUS_SUCCESS, MaxPhyMode = PHY_11G;
++ ULONG PowerTemp;
++ BOOLEAN RadioState;
++ BOOLEAN StateMachineTouched = FALSE;
++#ifdef DOT11_N_SUPPORT
++ OID_SET_HT_PHYMODE HT_PhyMode; //11n ,kathy
++#endif // DOT11_N_SUPPORT //
++#ifdef WPA_SUPPLICANT_SUPPORT
++ PNDIS_802_11_PMKID pPmkId = NULL;
++ BOOLEAN IEEE8021xState = FALSE;
++ BOOLEAN IEEE8021x_required_keys = FALSE;
++ UCHAR wpa_supplicant_enable = 0;
++#endif // WPA_SUPPLICANT_SUPPORT //
++
++#ifdef SNMP_SUPPORT
++ TX_RTY_CFG_STRUC tx_rty_cfg;
++ ULONG ShortRetryLimit, LongRetryLimit;
++ UCHAR ctmp;
++#endif // SNMP_SUPPORT //
++
++
++
++#ifdef DOT11_N_SUPPORT
++ MaxPhyMode = PHY_11N_5G;
++#endif // DOT11_N_SUPPORT //
++
++
++ DBGPRINT(RT_DEBUG_TRACE, ("-->RTMPSetInformation(), 0x%08x\n", cmd&0x7FFF));
++ switch(cmd & 0x7FFF) {
++ case RT_OID_802_11_COUNTRY_REGION:
++ if (wrq->u.data.length < sizeof(UCHAR))
++ Status = -EINVAL;
++ // Only avaliable when EEPROM not programming
++ else if (!(pAdapter->CommonCfg.CountryRegion & 0x80) && !(pAdapter->CommonCfg.CountryRegionForABand & 0x80))
++ {
++ ULONG Country;
++ UCHAR TmpPhy;
++
++ Status = copy_from_user(&Country, wrq->u.data.pointer, wrq->u.data.length);
++ pAdapter->CommonCfg.CountryRegion = (UCHAR)(Country & 0x000000FF);
++ pAdapter->CommonCfg.CountryRegionForABand = (UCHAR)((Country >> 8) & 0x000000FF);
++ TmpPhy = pAdapter->CommonCfg.PhyMode;
++ pAdapter->CommonCfg.PhyMode = 0xff;
++ // Build all corresponding channel information
++ RTMPSetPhyMode(pAdapter, TmpPhy);
++#ifdef DOT11_N_SUPPORT
++ SetCommonHT(pAdapter);
++#endif // DOT11_N_SUPPORT //
++ DBGPRINT(RT_DEBUG_TRACE, ("Set::RT_OID_802_11_COUNTRY_REGION (A:%d B/G:%d)\n", pAdapter->CommonCfg.CountryRegionForABand,
++ pAdapter->CommonCfg.CountryRegion));
++ }
++ break;
++ case OID_802_11_BSSID_LIST_SCAN:
++ #ifdef RALINK_ATE
++ if (ATE_ON(pAdapter))
++ {
++ DBGPRINT(RT_DEBUG_TRACE, ("The driver is in ATE mode now\n"));
++ break;
++ }
++#endif // RALINK_ATE //
++ Now = jiffies;
++ DBGPRINT(RT_DEBUG_TRACE, ("Set::OID_802_11_BSSID_LIST_SCAN, TxCnt = %d \n", pAdapter->RalinkCounters.LastOneSecTotalTxCount));
++
++ if (MONITOR_ON(pAdapter))
++ {
++ DBGPRINT(RT_DEBUG_TRACE, ("!!! Driver is in Monitor Mode now !!!\n"));
++ break;
++ }
++
++ //Benson add 20080527, when radio off, sta don't need to scan
++ if (RTMP_TEST_FLAG(pAdapter, fRTMP_ADAPTER_RADIO_OFF))
++ break;
++
++ if (RTMP_TEST_FLAG(pAdapter, fRTMP_ADAPTER_BSS_SCAN_IN_PROGRESS))
++ {
++ DBGPRINT(RT_DEBUG_TRACE, ("!!! Driver is scanning now !!!\n"));
++ pAdapter->StaCfg.bScanReqIsFromWebUI = TRUE;
++ Status = NDIS_STATUS_SUCCESS;
++ break;
++ }
++
++ if (pAdapter->RalinkCounters.LastOneSecTotalTxCount > 100)
++ {
++ DBGPRINT(RT_DEBUG_TRACE, ("!!! Link UP, ignore this set::OID_802_11_BSSID_LIST_SCAN\n"));
++ Status = NDIS_STATUS_SUCCESS;
++ pAdapter->StaCfg.ScanCnt = 99; // Prevent auto scan triggered by this OID
++ break;
++ }
++
++ if ((OPSTATUS_TEST_FLAG(pAdapter, fOP_STATUS_MEDIA_STATE_CONNECTED)) &&
++ ((pAdapter->StaCfg.AuthMode == Ndis802_11AuthModeWPA) ||
++ (pAdapter->StaCfg.AuthMode == Ndis802_11AuthModeWPAPSK) ||
++ (pAdapter->StaCfg.AuthMode == Ndis802_11AuthModeWPA2) ||
++ (pAdapter->StaCfg.AuthMode == Ndis802_11AuthModeWPA2PSK)) &&
++ (pAdapter->StaCfg.PortSecured == WPA_802_1X_PORT_NOT_SECURED))
++ {
++ DBGPRINT(RT_DEBUG_TRACE, ("!!! Link UP, Port Not Secured! ignore this set::OID_802_11_BSSID_LIST_SCAN\n"));
++ Status = NDIS_STATUS_SUCCESS;
++ pAdapter->StaCfg.ScanCnt = 99; // Prevent auto scan triggered by this OID
++ break;
++ }
++
++
++ if (pAdapter->Mlme.CntlMachine.CurrState != CNTL_IDLE)
++ {
++ RT28XX_MLME_RESET_STATE_MACHINE(pAdapter);
++ DBGPRINT(RT_DEBUG_TRACE, ("!!! MLME busy, reset MLME state machine !!!\n"));
++ }
++
++ // tell CNTL state machine to call NdisMSetInformationComplete() after completing
++ // this request, because this request is initiated by NDIS.
++ pAdapter->MlmeAux.CurrReqIsFromNdis = FALSE;
++ // Reset allowed scan retries
++ pAdapter->StaCfg.ScanCnt = 0;
++ pAdapter->StaCfg.LastScanTime = Now;
++
++ pAdapter->StaCfg.bScanReqIsFromWebUI = TRUE;
++ RTMP_SET_FLAG(pAdapter, fRTMP_ADAPTER_BSS_SCAN_IN_PROGRESS);
++ MlmeEnqueue(pAdapter,
++ MLME_CNTL_STATE_MACHINE,
++ OID_802_11_BSSID_LIST_SCAN,
++ 0,
++ NULL);
++
++ Status = NDIS_STATUS_SUCCESS;
++ StateMachineTouched = TRUE;
++ break;
++ case OID_802_11_SSID:
++ if (wrq->u.data.length != sizeof(NDIS_802_11_SSID))
++ Status = -EINVAL;
++ else
++ {
++ PCHAR pSsidString = NULL;
++ Status = copy_from_user(&Ssid, wrq->u.data.pointer, wrq->u.data.length);
++
++ DBGPRINT(RT_DEBUG_TRACE, ("Set::OID_802_11_SSID (Len=%d,Ssid=%s)\n", Ssid.SsidLength, Ssid.Ssid));
++ if (Ssid.SsidLength > MAX_LEN_OF_SSID)
++ Status = -EINVAL;
++ else
++ {
++ if (Ssid.SsidLength == 0)
++ {
++ Set_SSID_Proc(pAdapter, "");
++ }
++ else
++ {
++ pSsidString = (CHAR *) kmalloc(MAX_LEN_OF_SSID+1, MEM_ALLOC_FLAG);
++ if (pSsidString)
++ {
++ NdisZeroMemory(pSsidString, MAX_LEN_OF_SSID+1);
++ NdisMoveMemory(pSsidString, Ssid.Ssid, Ssid.SsidLength);
++ Set_SSID_Proc(pAdapter, pSsidString);
++ kfree(pSsidString);
++ }
++ else
++ Status = -ENOMEM;
++ }
++ }
++ }
++ break;
++ case OID_802_11_BSSID:
++#ifdef RALINK_ATE
++ if (ATE_ON(pAdapter))
++ {
++ DBGPRINT(RT_DEBUG_TRACE, ("The driver is in ATE mode now\n"));
++ break;
++ }
++#endif // RALINK_ATE //
++ if (wrq->u.data.length != sizeof(NDIS_802_11_MAC_ADDRESS))
++ Status = -EINVAL;
++ else
++ {
++ Status = copy_from_user(&Bssid, wrq->u.data.pointer, wrq->u.data.length);
++
++ // tell CNTL state machine to call NdisMSetInformationComplete() after completing
++ // this request, because this request is initiated by NDIS.
++ pAdapter->MlmeAux.CurrReqIsFromNdis = FALSE;
++
++ // Prevent to connect AP again in STAMlmePeriodicExec
++ pAdapter->MlmeAux.AutoReconnectSsidLen= 32;
++
++ // Reset allowed scan retries
++ pAdapter->StaCfg.ScanCnt = 0;
++
++ if (pAdapter->Mlme.CntlMachine.CurrState != CNTL_IDLE)
++ {
++ RT28XX_MLME_RESET_STATE_MACHINE(pAdapter);
++ DBGPRINT(RT_DEBUG_TRACE, ("!!! MLME busy, reset MLME state machine !!!\n"));
++ }
++ MlmeEnqueue(pAdapter,
++ MLME_CNTL_STATE_MACHINE,
++ OID_802_11_BSSID,
++ sizeof(NDIS_802_11_MAC_ADDRESS),
++ (VOID *)&Bssid);
++ Status = NDIS_STATUS_SUCCESS;
++ StateMachineTouched = TRUE;
++
++ DBGPRINT(RT_DEBUG_TRACE, ("Set::OID_802_11_BSSID %02x:%02x:%02x:%02x:%02x:%02x\n",
++ Bssid[0], Bssid[1], Bssid[2], Bssid[3], Bssid[4], Bssid[5]));
++ }
++ break;
++ case RT_OID_802_11_RADIO:
++ if (wrq->u.data.length != sizeof(BOOLEAN))
++ Status = -EINVAL;
++ else
++ {
++ Status = copy_from_user(&RadioState, wrq->u.data.pointer, wrq->u.data.length);
++ DBGPRINT(RT_DEBUG_TRACE, ("Set::RT_OID_802_11_RADIO (=%d)\n", RadioState));
++ if (pAdapter->StaCfg.bSwRadio != RadioState)
++ {
++ pAdapter->StaCfg.bSwRadio = RadioState;
++ if (pAdapter->StaCfg.bRadio != (pAdapter->StaCfg.bHwRadio && pAdapter->StaCfg.bSwRadio))
++ {
++ pAdapter->StaCfg.bRadio = (pAdapter->StaCfg.bHwRadio && pAdapter->StaCfg.bSwRadio);
++ if (pAdapter->StaCfg.bRadio == TRUE)
++ {
++ MlmeRadioOn(pAdapter);
++ // Update extra information
++ pAdapter->ExtraInfo = EXTRA_INFO_CLEAR;
++ }
++ else
++ {
++ MlmeRadioOff(pAdapter);
++ // Update extra information
++ pAdapter->ExtraInfo = SW_RADIO_OFF;
++ }
++ }
++ }
++ }
++ break;
++ case RT_OID_802_11_PHY_MODE:
++ if (wrq->u.data.length != sizeof(RT_802_11_PHY_MODE))
++ Status = -EINVAL;
++ else
++ {
++ Status = copy_from_user(&PhyMode, wrq->u.data.pointer, wrq->u.data.length);
++ if (PhyMode <= MaxPhyMode)
++ {
++ RTMPSetPhyMode(pAdapter, PhyMode);
++#ifdef DOT11_N_SUPPORT
++ SetCommonHT(pAdapter);
++#endif // DOT11_N_SUPPORT //
++ }
++ DBGPRINT(RT_DEBUG_TRACE, ("Set::RT_OID_802_11_PHY_MODE (=%d)\n", PhyMode));
++ }
++ break;
++ case RT_OID_802_11_STA_CONFIG:
++ if (wrq->u.data.length != sizeof(RT_802_11_STA_CONFIG))
++ Status = -EINVAL;
++ else
++ {
++ Status = copy_from_user(&StaConfig, wrq->u.data.pointer, wrq->u.data.length);
++ pAdapter->CommonCfg.bEnableTxBurst = StaConfig.EnableTxBurst;
++ pAdapter->CommonCfg.UseBGProtection = StaConfig.UseBGProtection;
++ pAdapter->CommonCfg.bUseShortSlotTime = 1; // 2003-10-30 always SHORT SLOT capable
++ if ((pAdapter->CommonCfg.PhyMode != StaConfig.AdhocMode) &&
++ (StaConfig.AdhocMode <= MaxPhyMode))
++ {
++ // allow dynamic change of "USE OFDM rate or not" in ADHOC mode
++ // if setting changed, need to reset current TX rate as well as BEACON frame format
++ if (pAdapter->StaCfg.BssType == BSS_ADHOC)
++ {
++ pAdapter->CommonCfg.PhyMode = StaConfig.AdhocMode;
++ RTMPSetPhyMode(pAdapter, PhyMode);
++ MlmeUpdateTxRates(pAdapter, FALSE, 0);
++ MakeIbssBeacon(pAdapter); // re-build BEACON frame
++ AsicEnableIbssSync(pAdapter); // copy to on-chip memory
++ }
++ }
++ DBGPRINT(RT_DEBUG_TRACE, ("Set::RT_OID_802_11_SET_STA_CONFIG (Burst=%d, Protection=%ld,ShortSlot=%d\n",
++ pAdapter->CommonCfg.bEnableTxBurst,
++ pAdapter->CommonCfg.UseBGProtection,
++ pAdapter->CommonCfg.bUseShortSlotTime));
++ }
++ break;
++ case OID_802_11_DESIRED_RATES:
++ if (wrq->u.data.length != sizeof(NDIS_802_11_RATES))
++ Status = -EINVAL;
++ else
++ {
++ Status = copy_from_user(&aryRates, wrq->u.data.pointer, wrq->u.data.length);
++ NdisZeroMemory(pAdapter->CommonCfg.DesireRate, MAX_LEN_OF_SUPPORTED_RATES);
++ NdisMoveMemory(pAdapter->CommonCfg.DesireRate, &aryRates, sizeof(NDIS_802_11_RATES));
++ DBGPRINT(RT_DEBUG_TRACE, ("Set::OID_802_11_DESIRED_RATES (%02x,%02x,%02x,%02x,%02x,%02x,%02x,%02x)\n",
++ pAdapter->CommonCfg.DesireRate[0],pAdapter->CommonCfg.DesireRate[1],
++ pAdapter->CommonCfg.DesireRate[2],pAdapter->CommonCfg.DesireRate[3],
++ pAdapter->CommonCfg.DesireRate[4],pAdapter->CommonCfg.DesireRate[5],
++ pAdapter->CommonCfg.DesireRate[6],pAdapter->CommonCfg.DesireRate[7] ));
++ // Changing DesiredRate may affect the MAX TX rate we used to TX frames out
++ MlmeUpdateTxRates(pAdapter, FALSE, 0);
++ }
++ break;
++ case RT_OID_802_11_PREAMBLE:
++ if (wrq->u.data.length != sizeof(RT_802_11_PREAMBLE))
++ Status = -EINVAL;
++ else
++ {
++ Status = copy_from_user(&Preamble, wrq->u.data.pointer, wrq->u.data.length);
++ if (Preamble == Rt802_11PreambleShort)
++ {
++ pAdapter->CommonCfg.TxPreamble = Preamble;
++ MlmeSetTxPreamble(pAdapter, Rt802_11PreambleShort);
++ }
++ else if ((Preamble == Rt802_11PreambleLong) || (Preamble == Rt802_11PreambleAuto))
++ {
++ // if user wants AUTO, initialize to LONG here, then change according to AP's
++ // capability upon association.
++ pAdapter->CommonCfg.TxPreamble = Preamble;
++ MlmeSetTxPreamble(pAdapter, Rt802_11PreambleLong);
++ }
++ else
++ {
++ Status = -EINVAL;
++ break;
++ }
++ DBGPRINT(RT_DEBUG_TRACE, ("Set::RT_OID_802_11_PREAMBLE (=%d)\n", Preamble));
++ }
++ break;
++ case OID_802_11_WEP_STATUS:
++ if (wrq->u.data.length != sizeof(NDIS_802_11_WEP_STATUS))
++ Status = -EINVAL;
++ else
++ {
++ Status = copy_from_user(&WepStatus, wrq->u.data.pointer, wrq->u.data.length);
++ // Since TKIP, AES, WEP are all supported. It should not have any invalid setting
++ if (WepStatus <= Ndis802_11Encryption3KeyAbsent)
++ {
++ if (pAdapter->StaCfg.WepStatus != WepStatus)
++ {
++ // Config has changed
++ pAdapter->bConfigChanged = TRUE;
++ }
++ pAdapter->StaCfg.WepStatus = WepStatus;
++ pAdapter->StaCfg.OrigWepStatus = WepStatus;
++ pAdapter->StaCfg.PairCipher = WepStatus;
++ pAdapter->StaCfg.GroupCipher = WepStatus;
++ }
++ else
++ {
++ Status = -EINVAL;
++ break;
++ }
++ DBGPRINT(RT_DEBUG_TRACE, ("Set::OID_802_11_WEP_STATUS (=%d)\n",WepStatus));
++ }
++ break;
++ case OID_802_11_AUTHENTICATION_MODE:
++ if (wrq->u.data.length != sizeof(NDIS_802_11_AUTHENTICATION_MODE))
++ Status = -EINVAL;
++ else
++ {
++ Status = copy_from_user(&AuthMode, wrq->u.data.pointer, wrq->u.data.length);
++ if (AuthMode > Ndis802_11AuthModeMax)
++ {
++ Status = -EINVAL;
++ break;
++ }
++ else
++ {
++ if (pAdapter->StaCfg.AuthMode != AuthMode)
++ {
++ // Config has changed
++ pAdapter->bConfigChanged = TRUE;
++ }
++ pAdapter->StaCfg.AuthMode = AuthMode;
++ }
++ pAdapter->StaCfg.PortSecured = WPA_802_1X_PORT_NOT_SECURED;
++ DBGPRINT(RT_DEBUG_TRACE, ("Set::OID_802_11_AUTHENTICATION_MODE (=%d) \n",pAdapter->StaCfg.AuthMode));
++ }
++ break;
++ case OID_802_11_INFRASTRUCTURE_MODE:
++ if (wrq->u.data.length != sizeof(NDIS_802_11_NETWORK_INFRASTRUCTURE))
++ Status = -EINVAL;
++ else
++ {
++ Status = copy_from_user(&BssType, wrq->u.data.pointer, wrq->u.data.length);
++
++ if (BssType == Ndis802_11IBSS)
++ Set_NetworkType_Proc(pAdapter, "Adhoc");
++ else if (BssType == Ndis802_11Infrastructure)
++ Set_NetworkType_Proc(pAdapter, "Infra");
++ else if (BssType == Ndis802_11Monitor)
++ Set_NetworkType_Proc(pAdapter, "Monitor");
++ else
++ {
++ Status = -EINVAL;
++ DBGPRINT(RT_DEBUG_TRACE, ("Set::OID_802_11_INFRASTRUCTURE_MODE (unknown)\n"));
++ }
++ }
++ break;
++ case OID_802_11_REMOVE_WEP:
++ DBGPRINT(RT_DEBUG_TRACE, ("Set::OID_802_11_REMOVE_WEP\n"));
++ if (wrq->u.data.length != sizeof(NDIS_802_11_KEY_INDEX))
++ {
++ Status = -EINVAL;
++ }
++ else
++ {
++ KeyIdx = *(NDIS_802_11_KEY_INDEX *) wrq->u.data.pointer;
++
++ if (KeyIdx & 0x80000000)
++ {
++ // Should never set default bit when remove key
++ Status = -EINVAL;
++ }
++ else
++ {
++ KeyIdx = KeyIdx & 0x0fffffff;
++ if (KeyIdx >= 4){
++ Status = -EINVAL;
++ }
++ else
++ {
++ pAdapter->SharedKey[BSS0][KeyIdx].KeyLen = 0;
++ pAdapter->SharedKey[BSS0][KeyIdx].CipherAlg = CIPHER_NONE;
++ AsicRemoveSharedKeyEntry(pAdapter, 0, (UCHAR)KeyIdx);
++ }
++ }
++ }
++ break;
++ case RT_OID_802_11_RESET_COUNTERS:
++ NdisZeroMemory(&pAdapter->WlanCounters, sizeof(COUNTER_802_11));
++ NdisZeroMemory(&pAdapter->Counters8023, sizeof(COUNTER_802_3));
++ NdisZeroMemory(&pAdapter->RalinkCounters, sizeof(COUNTER_RALINK));
++ pAdapter->Counters8023.RxNoBuffer = 0;
++ pAdapter->Counters8023.GoodReceives = 0;
++ pAdapter->Counters8023.RxNoBuffer = 0;
++#ifdef RT2870
++ pAdapter->BulkOutComplete = 0;
++ pAdapter->BulkOutCompleteOther= 0;
++ pAdapter->BulkOutCompleteCancel = 0;
++ pAdapter->BulkOutReq = 0;
++ pAdapter->BulkInReq= 0;
++ pAdapter->BulkInComplete = 0;
++ pAdapter->BulkInCompleteFail = 0;
++#endif // RT2870 //
++ DBGPRINT(RT_DEBUG_TRACE, ("Set::RT_OID_802_11_RESET_COUNTERS \n"));
++ break;
++ case OID_802_11_RTS_THRESHOLD:
++ if (wrq->u.data.length != sizeof(NDIS_802_11_RTS_THRESHOLD))
++ Status = -EINVAL;
++ else
++ {
++ Status = copy_from_user(&RtsThresh, wrq->u.data.pointer, wrq->u.data.length);
++ if (RtsThresh > MAX_RTS_THRESHOLD)
++ Status = -EINVAL;
++ else
++ pAdapter->CommonCfg.RtsThreshold = (USHORT)RtsThresh;
++ }
++ DBGPRINT(RT_DEBUG_TRACE, ("Set::OID_802_11_RTS_THRESHOLD (=%ld)\n",RtsThresh));
++ break;
++ case OID_802_11_FRAGMENTATION_THRESHOLD:
++ if (wrq->u.data.length != sizeof(NDIS_802_11_FRAGMENTATION_THRESHOLD))
++ Status = -EINVAL;
++ else
++ {
++ Status = copy_from_user(&FragThresh, wrq->u.data.pointer, wrq->u.data.length);
++ pAdapter->CommonCfg.bUseZeroToDisableFragment = FALSE;
++ if (FragThresh > MAX_FRAG_THRESHOLD || FragThresh < MIN_FRAG_THRESHOLD)
++ {
++ if (FragThresh == 0)
++ {
++ pAdapter->CommonCfg.FragmentThreshold = MAX_FRAG_THRESHOLD;
++ pAdapter->CommonCfg.bUseZeroToDisableFragment = TRUE;
++ }
++ else
++ Status = -EINVAL;
++ }
++ else
++ pAdapter->CommonCfg.FragmentThreshold = (USHORT)FragThresh;
++ }
++ DBGPRINT(RT_DEBUG_TRACE, ("Set::OID_802_11_FRAGMENTATION_THRESHOLD (=%ld) \n",FragThresh));
++ break;
++ case OID_802_11_POWER_MODE:
++ if (wrq->u.data.length != sizeof(NDIS_802_11_POWER_MODE))
++ Status = -EINVAL;
++ else
++ {
++ Status = copy_from_user(&PowerMode, wrq->u.data.pointer, wrq->u.data.length);
++ if (PowerMode == Ndis802_11PowerModeCAM)
++ Set_PSMode_Proc(pAdapter, "CAM");
++ else if (PowerMode == Ndis802_11PowerModeMAX_PSP)
++ Set_PSMode_Proc(pAdapter, "Max_PSP");
++ else if (PowerMode == Ndis802_11PowerModeFast_PSP)
++ Set_PSMode_Proc(pAdapter, "Fast_PSP");
++ else if (PowerMode == Ndis802_11PowerModeLegacy_PSP)
++ Set_PSMode_Proc(pAdapter, "Legacy_PSP");
++ else
++ Status = -EINVAL;
++ }
++ DBGPRINT(RT_DEBUG_TRACE, ("Set::OID_802_11_POWER_MODE (=%d)\n",PowerMode));
++ break;
++ case RT_OID_802_11_TX_POWER_LEVEL_1:
++ if (wrq->u.data.length < sizeof(ULONG))
++ Status = -EINVAL;
++ else
++ {
++ Status = copy_from_user(&PowerTemp, wrq->u.data.pointer, wrq->u.data.length);
++ if (PowerTemp > 100)
++ PowerTemp = 0xffffffff; // AUTO
++ pAdapter->CommonCfg.TxPowerDefault = PowerTemp; //keep current setting.
++ pAdapter->CommonCfg.TxPowerPercentage = pAdapter->CommonCfg.TxPowerDefault;
++ DBGPRINT(RT_DEBUG_TRACE, ("Set::RT_OID_802_11_TX_POWER_LEVEL_1 (=%ld)\n", pAdapter->CommonCfg.TxPowerPercentage));
++ }
++ break;
++ case OID_802_11_NETWORK_TYPE_IN_USE:
++ if (wrq->u.data.length != sizeof(NDIS_802_11_NETWORK_TYPE))
++ Status = -EINVAL;
++ else
++ {
++ Status = copy_from_user(&NetType, wrq->u.data.pointer, wrq->u.data.length);
++
++ if (NetType == Ndis802_11DS)
++ RTMPSetPhyMode(pAdapter, PHY_11B);
++ else if (NetType == Ndis802_11OFDM24)
++ RTMPSetPhyMode(pAdapter, PHY_11BG_MIXED);
++ else if (NetType == Ndis802_11OFDM5)
++ RTMPSetPhyMode(pAdapter, PHY_11A);
++ else
++ Status = -EINVAL;
++#ifdef DOT11_N_SUPPORT
++ if (Status == NDIS_STATUS_SUCCESS)
++ SetCommonHT(pAdapter);
++#endif // DOT11_N_SUPPORT //
++ DBGPRINT(RT_DEBUG_TRACE, ("Set::OID_802_11_NETWORK_TYPE_IN_USE (=%d)\n",NetType));
++ }
++ break;
++ // For WPA PSK PMK key
++ case RT_OID_802_11_ADD_WPA:
++ pKey = kmalloc(wrq->u.data.length, MEM_ALLOC_FLAG);
++ if(pKey == NULL)
++ {
++ Status = -ENOMEM;
++ break;
++ }
++
++ Status = copy_from_user(pKey, wrq->u.data.pointer, wrq->u.data.length);
++ if (pKey->Length != wrq->u.data.length)
++ {
++ Status = -EINVAL;
++ DBGPRINT(RT_DEBUG_TRACE, ("Set::RT_OID_802_11_ADD_WPA, Failed!!\n"));
++ }
++ else
++ {
++ if ((pAdapter->StaCfg.AuthMode != Ndis802_11AuthModeWPAPSK) &&
++ (pAdapter->StaCfg.AuthMode != Ndis802_11AuthModeWPA2PSK) &&
++ (pAdapter->StaCfg.AuthMode != Ndis802_11AuthModeWPANone) )
++ {
++ Status = -EOPNOTSUPP;
++ DBGPRINT(RT_DEBUG_TRACE, ("Set::RT_OID_802_11_ADD_WPA, Failed!! [AuthMode != WPAPSK/WPA2PSK/WPANONE]\n"));
++ }
++ else if ((pAdapter->StaCfg.AuthMode == Ndis802_11AuthModeWPAPSK) ||
++ (pAdapter->StaCfg.AuthMode == Ndis802_11AuthModeWPA2PSK) ||
++ (pAdapter->StaCfg.AuthMode == Ndis802_11AuthModeWPANone) ) // Only for WPA PSK mode
++ {
++ NdisMoveMemory(pAdapter->StaCfg.PMK, &pKey->KeyMaterial, pKey->KeyLength);
++ // Use RaConfig as PSK agent.
++ // Start STA supplicant state machine
++ if (pAdapter->StaCfg.AuthMode != Ndis802_11AuthModeWPANone)
++ pAdapter->StaCfg.WpaState = SS_START;
++
++ DBGPRINT(RT_DEBUG_TRACE, ("Set::RT_OID_802_11_ADD_WPA (id=0x%x, Len=%d-byte)\n", pKey->KeyIndex, pKey->KeyLength));
++ }
++ else
++ {
++ pAdapter->StaCfg.WpaState = SS_NOTUSE;
++ DBGPRINT(RT_DEBUG_TRACE, ("Set::RT_OID_802_11_ADD_WPA (id=0x%x, Len=%d-byte)\n", pKey->KeyIndex, pKey->KeyLength));
++ }
++ }
++ kfree(pKey);
++ break;
++ case OID_802_11_REMOVE_KEY:
++ pRemoveKey = kmalloc(wrq->u.data.length, MEM_ALLOC_FLAG);
++ if(pRemoveKey == NULL)
++ {
++ Status = -ENOMEM;
++ break;
++ }
++
++ Status = copy_from_user(pRemoveKey, wrq->u.data.pointer, wrq->u.data.length);
++ if (pRemoveKey->Length != wrq->u.data.length)
++ {
++ Status = -EINVAL;
++ DBGPRINT(RT_DEBUG_TRACE, ("Set::OID_802_11_REMOVE_KEY, Failed!!\n"));
++ }
++ else
++ {
++ if (pAdapter->StaCfg.AuthMode >= Ndis802_11AuthModeWPA)
++ {
++ RTMPWPARemoveKeyProc(pAdapter, pRemoveKey);
++ DBGPRINT(RT_DEBUG_TRACE, ("Set::OID_802_11_REMOVE_KEY, Remove WPA Key!!\n"));
++ }
++ else
++ {
++ KeyIdx = pRemoveKey->KeyIndex;
++
++ if (KeyIdx & 0x80000000)
++ {
++ // Should never set default bit when remove key
++ Status = -EINVAL;
++ DBGPRINT(RT_DEBUG_TRACE, ("Set::OID_802_11_REMOVE_KEY, Failed!!(Should never set default bit when remove key)\n"));
++ }
++ else
++ {
++ KeyIdx = KeyIdx & 0x0fffffff;
++ if (KeyIdx > 3)
++ {
++ Status = -EINVAL;
++ DBGPRINT(RT_DEBUG_TRACE, ("Set::OID_802_11_REMOVE_KEY, Failed!!(KeyId[%d] out of range)\n", KeyIdx));
++ }
++ else
++ {
++ pAdapter->SharedKey[BSS0][KeyIdx].KeyLen = 0;
++ pAdapter->SharedKey[BSS0][KeyIdx].CipherAlg = CIPHER_NONE;
++ AsicRemoveSharedKeyEntry(pAdapter, 0, (UCHAR)KeyIdx);
++ DBGPRINT(RT_DEBUG_TRACE, ("Set::OID_802_11_REMOVE_KEY (id=0x%x, Len=%d-byte)\n", pRemoveKey->KeyIndex, pRemoveKey->Length));
++ }
++ }
++ }
++ }
++ kfree(pRemoveKey);
++ break;
++ // New for WPA
++ case OID_802_11_ADD_KEY:
++ pKey = kmalloc(wrq->u.data.length, MEM_ALLOC_FLAG);
++ if(pKey == NULL)
++ {
++ Status = -ENOMEM;
++ break;
++ }
++ Status = copy_from_user(pKey, wrq->u.data.pointer, wrq->u.data.length);
++ if (pKey->Length != wrq->u.data.length)
++ {
++ Status = -EINVAL;
++ DBGPRINT(RT_DEBUG_TRACE, ("Set::OID_802_11_ADD_KEY, Failed!!\n"));
++ }
++ else
++ {
++ RTMPAddKey(pAdapter, pKey);
++ DBGPRINT(RT_DEBUG_TRACE, ("Set::OID_802_11_ADD_KEY (id=0x%x, Len=%d-byte)\n", pKey->KeyIndex, pKey->KeyLength));
++ }
++ kfree(pKey);
++ break;
++ case OID_802_11_CONFIGURATION:
++ if (wrq->u.data.length != sizeof(NDIS_802_11_CONFIGURATION))
++ Status = -EINVAL;
++ else
++ {
++ Status = copy_from_user(&Config, wrq->u.data.pointer, wrq->u.data.length);
++ pConfig = &Config;
++
++ if ((pConfig->BeaconPeriod >= 20) && (pConfig->BeaconPeriod <=400))
++ pAdapter->CommonCfg.BeaconPeriod = (USHORT) pConfig->BeaconPeriod;
++
++ pAdapter->StaActive.AtimWin = (USHORT) pConfig->ATIMWindow;
++ MAP_KHZ_TO_CHANNEL_ID(pConfig->DSConfig, pAdapter->CommonCfg.Channel);
++ //
++ // Save the channel on MlmeAux for CntlOidRTBssidProc used.
++ //
++ pAdapter->MlmeAux.Channel = pAdapter->CommonCfg.Channel;
++
++ DBGPRINT(RT_DEBUG_TRACE, ("Set::OID_802_11_CONFIGURATION (BeacnPeriod=%ld,AtimW=%ld,Ch=%d)\n",
++ pConfig->BeaconPeriod, pConfig->ATIMWindow, pAdapter->CommonCfg.Channel));
++ // Config has changed
++ pAdapter->bConfigChanged = TRUE;
++ }
++ break;
++#ifdef DOT11_N_SUPPORT
++ case RT_OID_802_11_SET_HT_PHYMODE:
++ if (wrq->u.data.length != sizeof(OID_SET_HT_PHYMODE))
++ Status = -EINVAL;
++ else
++ {
++ POID_SET_HT_PHYMODE pHTPhyMode = &HT_PhyMode;
++
++ Status = copy_from_user(&HT_PhyMode, wrq->u.data.pointer, wrq->u.data.length);
++ DBGPRINT(RT_DEBUG_TRACE, ("Set::pHTPhyMode (PhyMode = %d,TransmitNo = %d, HtMode = %d, ExtOffset = %d , MCS = %d, BW = %d, STBC = %d, SHORTGI = %d) \n",
++ pHTPhyMode->PhyMode, pHTPhyMode->TransmitNo,pHTPhyMode->HtMode,pHTPhyMode->ExtOffset,
++ pHTPhyMode->MCS, pHTPhyMode->BW, pHTPhyMode->STBC, pHTPhyMode->SHORTGI));
++ if (pAdapter->CommonCfg.PhyMode >= PHY_11ABGN_MIXED)
++ RTMPSetHT(pAdapter, pHTPhyMode);
++ }
++ DBGPRINT(RT_DEBUG_TRACE, ("Set::RT_OID_802_11_SET_HT_PHYMODE(MCS=%d,BW=%d,SGI=%d,STBC=%d)\n",
++ pAdapter->StaCfg.HTPhyMode.field.MCS, pAdapter->StaCfg.HTPhyMode.field.BW, pAdapter->StaCfg.HTPhyMode.field.ShortGI,
++ pAdapter->StaCfg.HTPhyMode.field.STBC));
++ break;
++#endif // DOT11_N_SUPPORT //
++ case RT_OID_802_11_SET_APSD_SETTING:
++ if (wrq->u.data.length != sizeof(ULONG))
++ Status = -EINVAL;
++ else
++ {
++ ULONG apsd ;
++ Status = copy_from_user(&apsd, wrq->u.data.pointer, wrq->u.data.length);
++
++ /*-------------------------------------------------------------------
++ |B31~B7 | B6~B5 | B4 | B3 | B2 | B1 | B0 |
++ ---------------------------------------------------------------------
++ | Rsvd | Max SP Len | AC_VO | AC_VI | AC_BK | AC_BE | APSD Capable |
++ ---------------------------------------------------------------------*/
++ pAdapter->CommonCfg.bAPSDCapable = (apsd & 0x00000001) ? TRUE : FALSE;
++ pAdapter->CommonCfg.bAPSDAC_BE = ((apsd & 0x00000002) >> 1) ? TRUE : FALSE;
++ pAdapter->CommonCfg.bAPSDAC_BK = ((apsd & 0x00000004) >> 2) ? TRUE : FALSE;
++ pAdapter->CommonCfg.bAPSDAC_VI = ((apsd & 0x00000008) >> 3) ? TRUE : FALSE;
++ pAdapter->CommonCfg.bAPSDAC_VO = ((apsd & 0x00000010) >> 4) ? TRUE : FALSE;
++ pAdapter->CommonCfg.MaxSPLength = (UCHAR)((apsd & 0x00000060) >> 5);
++
++ DBGPRINT(RT_DEBUG_TRACE, ("Set::RT_OID_802_11_SET_APSD_SETTING (apsd=0x%lx, APSDCap=%d, [BE,BK,VI,VO]=[%d/%d/%d/%d], MaxSPLen=%d)\n", apsd, pAdapter->CommonCfg.bAPSDCapable,
++ pAdapter->CommonCfg.bAPSDAC_BE, pAdapter->CommonCfg.bAPSDAC_BK, pAdapter->CommonCfg.bAPSDAC_VI, pAdapter->CommonCfg.bAPSDAC_VO, pAdapter->CommonCfg.MaxSPLength));
++ }
++ break;
++
++ case RT_OID_802_11_SET_APSD_PSM:
++ if (wrq->u.data.length != sizeof(ULONG))
++ Status = -EINVAL;
++ else
++ {
++ // Driver needs to notify AP when PSM changes
++ Status = copy_from_user(&pAdapter->CommonCfg.bAPSDForcePowerSave, wrq->u.data.pointer, wrq->u.data.length);
++ if (pAdapter->CommonCfg.bAPSDForcePowerSave != pAdapter->StaCfg.Psm)
++ {
++ MlmeSetPsmBit(pAdapter, pAdapter->CommonCfg.bAPSDForcePowerSave);
++ RTMPSendNullFrame(pAdapter, pAdapter->CommonCfg.TxRate, TRUE);
++ }
++ DBGPRINT(RT_DEBUG_TRACE, ("Set::RT_OID_802_11_SET_APSD_PSM (bAPSDForcePowerSave:%d)\n", pAdapter->CommonCfg.bAPSDForcePowerSave));
++ }
++ break;
++#ifdef QOS_DLS_SUPPORT
++ case RT_OID_802_11_SET_DLS:
++ if (wrq->u.data.length != sizeof(ULONG))
++ Status = -EINVAL;
++ else
++ {
++ BOOLEAN oldvalue = pAdapter->CommonCfg.bDLSCapable;
++ Status = copy_from_user(&pAdapter->CommonCfg.bDLSCapable, wrq->u.data.pointer, wrq->u.data.length);
++ if (oldvalue && !pAdapter->CommonCfg.bDLSCapable)
++ {
++ int i;
++ // tear down local dls table entry
++ for (i=0; i<MAX_NUM_OF_INIT_DLS_ENTRY; i++)
++ {
++ if (pAdapter->StaCfg.DLSEntry[i].Valid && (pAdapter->StaCfg.DLSEntry[i].Status == DLS_FINISH))
++ {
++ pAdapter->StaCfg.DLSEntry[i].Status = DLS_NONE;
++ pAdapter->StaCfg.DLSEntry[i].Valid = FALSE;
++ RTMPSendDLSTearDownFrame(pAdapter, pAdapter->StaCfg.DLSEntry[i].MacAddr);
++ }
++ }
++
++ // tear down peer dls table entry
++ for (i=MAX_NUM_OF_INIT_DLS_ENTRY; i<MAX_NUM_OF_DLS_ENTRY; i++)
++ {
++ if (pAdapter->StaCfg.DLSEntry[i].Valid && (pAdapter->StaCfg.DLSEntry[i].Status == DLS_FINISH))
++ {
++ pAdapter->StaCfg.DLSEntry[i].Status = DLS_NONE;
++ pAdapter->StaCfg.DLSEntry[i].Valid = FALSE;
++ RTMPSendDLSTearDownFrame(pAdapter, pAdapter->StaCfg.DLSEntry[i].MacAddr);
++ }
++ }
++ }
++
++ DBGPRINT(RT_DEBUG_TRACE,("Set::RT_OID_802_11_SET_DLS (=%d)\n", pAdapter->CommonCfg.bDLSCapable));
++ }
++ break;
++
++ case RT_OID_802_11_SET_DLS_PARAM:
++ if (wrq->u.data.length != sizeof(RT_802_11_DLS_UI))
++ Status = -EINVAL;
++ else
++ {
++ RT_802_11_DLS Dls;
++
++ NdisZeroMemory(&Dls, sizeof(RT_802_11_DLS));
++ RTMPMoveMemory(&Dls, wrq->u.data.pointer, sizeof(RT_802_11_DLS_UI));
++ MlmeEnqueue(pAdapter,
++ MLME_CNTL_STATE_MACHINE,
++ RT_OID_802_11_SET_DLS_PARAM,
++ sizeof(RT_802_11_DLS),
++ &Dls);
++ DBGPRINT(RT_DEBUG_TRACE,("Set::RT_OID_802_11_SET_DLS_PARAM \n"));
++ }
++ break;
++#endif // QOS_DLS_SUPPORT //
++ case RT_OID_802_11_SET_WMM:
++ if (wrq->u.data.length != sizeof(BOOLEAN))
++ Status = -EINVAL;
++ else
++ {
++ Status = copy_from_user(&pAdapter->CommonCfg.bWmmCapable, wrq->u.data.pointer, wrq->u.data.length);
++ DBGPRINT(RT_DEBUG_TRACE, ("Set::RT_OID_802_11_SET_WMM (=%d) \n", pAdapter->CommonCfg.bWmmCapable));
++ }
++ break;
++
++ case OID_802_11_DISASSOCIATE:
++#ifdef RALINK_ATE
++ if (ATE_ON(pAdapter))
++ {
++ DBGPRINT(RT_DEBUG_TRACE, ("The driver is in ATE mode now\n"));
++ break;
++ }
++#endif // RALINK_ATE //
++ //
++ // Set NdisRadioStateOff to TRUE, instead of called MlmeRadioOff.
++ // Later on, NDIS_802_11_BSSID_LIST_EX->NumberOfItems should be 0
++ // when query OID_802_11_BSSID_LIST.
++ //
++ // TRUE: NumberOfItems will set to 0.
++ // FALSE: NumberOfItems no change.
++ //
++ pAdapter->CommonCfg.NdisRadioStateOff = TRUE;
++ // Set to immediately send the media disconnect event
++ pAdapter->MlmeAux.CurrReqIsFromNdis = TRUE;
++ DBGPRINT(RT_DEBUG_TRACE, ("Set::OID_802_11_DISASSOCIATE \n"));
++
++ if (INFRA_ON(pAdapter))
++ {
++ if (pAdapter->Mlme.CntlMachine.CurrState != CNTL_IDLE)
++ {
++ RT28XX_MLME_RESET_STATE_MACHINE(pAdapter);
++ DBGPRINT(RT_DEBUG_TRACE, ("!!! MLME busy, reset MLME state machine !!!\n"));
++ }
++
++ MlmeEnqueue(pAdapter,
++ MLME_CNTL_STATE_MACHINE,
++ OID_802_11_DISASSOCIATE,
++ 0,
++ NULL);
++
++ StateMachineTouched = TRUE;
++ }
++ break;
++
++#ifdef DOT11_N_SUPPORT
++ case RT_OID_802_11_SET_IMME_BA_CAP:
++ if (wrq->u.data.length != sizeof(OID_BACAP_STRUC))
++ Status = -EINVAL;
++ else
++ {
++ OID_BACAP_STRUC Orde ;
++ Status = copy_from_user(&Orde, wrq->u.data.pointer, wrq->u.data.length);
++ if (Orde.Policy > BA_NOTUSE)
++ {
++ Status = NDIS_STATUS_INVALID_DATA;
++ }
++ else if (Orde.Policy == BA_NOTUSE)
++ {
++ pAdapter->CommonCfg.BACapability.field.Policy = BA_NOTUSE;
++ pAdapter->CommonCfg.BACapability.field.MpduDensity = Orde.MpduDensity;
++ pAdapter->CommonCfg.DesiredHtPhy.MpduDensity = Orde.MpduDensity;
++ pAdapter->CommonCfg.DesiredHtPhy.AmsduEnable = Orde.AmsduEnable;
++ pAdapter->CommonCfg.DesiredHtPhy.AmsduSize= Orde.AmsduSize;
++ pAdapter->CommonCfg.DesiredHtPhy.MimoPs= Orde.MMPSmode;
++ pAdapter->CommonCfg.BACapability.field.MMPSmode = Orde.MMPSmode;
++ // UPdata to HT IE
++ pAdapter->CommonCfg.HtCapability.HtCapInfo.MimoPs = Orde.MMPSmode;
++ pAdapter->CommonCfg.HtCapability.HtCapInfo.AMsduSize = Orde.AmsduSize;
++ pAdapter->CommonCfg.HtCapability.HtCapParm.MpduDensity = Orde.MpduDensity;
++ }
++ else
++ {
++ pAdapter->CommonCfg.BACapability.field.AutoBA = Orde.AutoBA;
++ pAdapter->CommonCfg.BACapability.field.Policy = IMMED_BA; // we only support immediate BA.
++ pAdapter->CommonCfg.BACapability.field.MpduDensity = Orde.MpduDensity;
++ pAdapter->CommonCfg.DesiredHtPhy.MpduDensity = Orde.MpduDensity;
++ pAdapter->CommonCfg.DesiredHtPhy.AmsduEnable = Orde.AmsduEnable;
++ pAdapter->CommonCfg.DesiredHtPhy.AmsduSize= Orde.AmsduSize;
++ pAdapter->CommonCfg.DesiredHtPhy.MimoPs = Orde.MMPSmode;
++ pAdapter->CommonCfg.BACapability.field.MMPSmode = Orde.MMPSmode;
++
++ // UPdata to HT IE
++ pAdapter->CommonCfg.HtCapability.HtCapInfo.MimoPs = Orde.MMPSmode;
++ pAdapter->CommonCfg.HtCapability.HtCapInfo.AMsduSize = Orde.AmsduSize;
++ pAdapter->CommonCfg.HtCapability.HtCapParm.MpduDensity = Orde.MpduDensity;
++
++ if (pAdapter->CommonCfg.BACapability.field.RxBAWinLimit > MAX_RX_REORDERBUF)
++ pAdapter->CommonCfg.BACapability.field.RxBAWinLimit = MAX_RX_REORDERBUF;
++
++ }
++
++ pAdapter->CommonCfg.REGBACapability.word = pAdapter->CommonCfg.BACapability.word;
++ DBGPRINT(RT_DEBUG_TRACE, ("Set::(Orde.AutoBA = %d) (Policy=%d)(ReBAWinLimit=%d)(TxBAWinLimit=%d)(AutoMode=%d)\n",Orde.AutoBA, pAdapter->CommonCfg.BACapability.field.Policy,
++ pAdapter->CommonCfg.BACapability.field.RxBAWinLimit,pAdapter->CommonCfg.BACapability.field.TxBAWinLimit, pAdapter->CommonCfg.BACapability.field.AutoBA));
++ DBGPRINT(RT_DEBUG_TRACE, ("Set::(MimoPs = %d)(AmsduEnable = %d) (AmsduSize=%d)(MpduDensity=%d)\n",pAdapter->CommonCfg.DesiredHtPhy.MimoPs, pAdapter->CommonCfg.DesiredHtPhy.AmsduEnable,
++ pAdapter->CommonCfg.DesiredHtPhy.AmsduSize, pAdapter->CommonCfg.DesiredHtPhy.MpduDensity));
++ }
++
++ break;
++ case RT_OID_802_11_ADD_IMME_BA:
++ DBGPRINT(RT_DEBUG_TRACE, (" Set :: RT_OID_802_11_ADD_IMME_BA \n"));
++ if (wrq->u.data.length != sizeof(OID_ADD_BA_ENTRY))
++ Status = -EINVAL;
++ else
++ {
++ UCHAR index;
++ OID_ADD_BA_ENTRY BA;
++ MAC_TABLE_ENTRY *pEntry;
++
++ Status = copy_from_user(&BA, wrq->u.data.pointer, wrq->u.data.length);
++ if (BA.TID > 15)
++ {
++ Status = NDIS_STATUS_INVALID_DATA;
++ break;
++ }
++ else
++ {
++ //BATableInsertEntry
++ //As ad-hoc mode, BA pair is not limited to only BSSID. so add via OID.
++ index = BA.TID;
++ // in ad hoc mode, when adding BA pair, we should insert this entry into MACEntry too
++ pEntry = MacTableLookup(pAdapter, BA.MACAddr);
++ if (!pEntry)
++ {
++ DBGPRINT(RT_DEBUG_TRACE, ("RT_OID_802_11_ADD_IMME_BA. break on no connection.----:%x:%x\n", BA.MACAddr[4], BA.MACAddr[5]));
++ break;
++ }
++ if (BA.IsRecipient == FALSE)
++ {
++ if (pEntry->bIAmBadAtheros == TRUE)
++ pAdapter->CommonCfg.BACapability.field.RxBAWinLimit = 0x10;
++
++ BAOriSessionSetUp(pAdapter, pEntry, index, 0, 100, TRUE);
++ }
++ else
++ {
++ //BATableInsertEntry(pAdapter, pEntry->Aid, BA.MACAddr, 0, 0xffff, BA.TID, BA.nMSDU, BA.IsRecipient);
++ }
++
++ DBGPRINT(RT_DEBUG_TRACE, ("Set::RT_OID_802_11_ADD_IMME_BA. Rec = %d. Mac = %x:%x:%x:%x:%x:%x . \n",
++ BA.IsRecipient, BA.MACAddr[0], BA.MACAddr[1], BA.MACAddr[2], BA.MACAddr[2]
++ , BA.MACAddr[4], BA.MACAddr[5]));
++ }
++ }
++ break;
++
++ case RT_OID_802_11_TEAR_IMME_BA:
++ DBGPRINT(RT_DEBUG_TRACE, ("Set :: RT_OID_802_11_TEAR_IMME_BA \n"));
++ if (wrq->u.data.length != sizeof(OID_ADD_BA_ENTRY))
++ Status = -EINVAL;
++ else
++ {
++ POID_ADD_BA_ENTRY pBA;
++ MAC_TABLE_ENTRY *pEntry;
++
++ pBA = kmalloc(wrq->u.data.length, MEM_ALLOC_FLAG);
++
++ if (pBA == NULL)
++ {
++ DBGPRINT(RT_DEBUG_TRACE, ("Set :: RT_OID_802_11_TEAR_IMME_BA kmalloc() can't allocate enough memory\n"));
++ Status = NDIS_STATUS_FAILURE;
++ }
++ else
++ {
++ Status = copy_from_user(pBA, wrq->u.data.pointer, wrq->u.data.length);
++ DBGPRINT(RT_DEBUG_TRACE, ("Set :: RT_OID_802_11_TEAR_IMME_BA(TID=%d, bAllTid=%d)\n", pBA->TID, pBA->bAllTid));
++
++ if (!pBA->bAllTid && (pBA->TID > NUM_OF_TID))
++ {
++ Status = NDIS_STATUS_INVALID_DATA;
++ break;
++ }
++
++ if (pBA->IsRecipient == FALSE)
++ {
++ pEntry = MacTableLookup(pAdapter, pBA->MACAddr);
++ DBGPRINT(RT_DEBUG_TRACE, (" pBA->IsRecipient == FALSE\n"));
++ if (pEntry)
++ {
++ DBGPRINT(RT_DEBUG_TRACE, (" pBA->pEntry\n"));
++ BAOriSessionTearDown(pAdapter, pEntry->Aid, pBA->TID, FALSE, TRUE);
++ }
++ else
++ DBGPRINT(RT_DEBUG_TRACE, ("Set :: Not found pEntry \n"));
++ }
++ else
++ {
++ pEntry = MacTableLookup(pAdapter, pBA->MACAddr);
++ if (pEntry)
++ {
++ BARecSessionTearDown( pAdapter, (UCHAR)pEntry->Aid, pBA->TID, TRUE);
++ }
++ else
++ DBGPRINT(RT_DEBUG_TRACE, ("Set :: Not found pEntry \n"));
++ }
++ kfree(pBA);
++ }
++ }
++ break;
++#endif // DOT11_N_SUPPORT //
++
++ // For WPA_SUPPLICANT to set static wep key
++ case OID_802_11_ADD_WEP:
++ pWepKey = kmalloc(wrq->u.data.length, MEM_ALLOC_FLAG);
++
++ if(pWepKey == NULL)
++ {
++ Status = -ENOMEM;
++ DBGPRINT(RT_DEBUG_TRACE, ("Set::OID_802_11_ADD_WEP, Failed!!\n"));
++ break;
++ }
++ Status = copy_from_user(pWepKey, wrq->u.data.pointer, wrq->u.data.length);
++ if (Status)
++ {
++ Status = -EINVAL;
++ DBGPRINT(RT_DEBUG_TRACE, ("Set::OID_802_11_ADD_WEP, Failed (length mismatch)!!\n"));
++ }
++ else
++ {
++ KeyIdx = pWepKey->KeyIndex & 0x0fffffff;
++ // KeyIdx must be 0 ~ 3
++ if (KeyIdx > 4)
++ {
++ Status = -EINVAL;
++ DBGPRINT(RT_DEBUG_TRACE, ("Set::OID_802_11_ADD_WEP, Failed (KeyIdx must be smaller than 4)!!\n"));
++ }
++ else
++ {
++ UCHAR CipherAlg = 0;
++ PUCHAR Key;
++
++ // set key material and key length
++ NdisZeroMemory(pAdapter->SharedKey[BSS0][KeyIdx].Key, 16);
++ pAdapter->SharedKey[BSS0][KeyIdx].KeyLen = (UCHAR) pWepKey->KeyLength;
++ NdisMoveMemory(pAdapter->SharedKey[BSS0][KeyIdx].Key, &pWepKey->KeyMaterial, pWepKey->KeyLength);
++
++ switch(pWepKey->KeyLength)
++ {
++ case 5:
++ CipherAlg = CIPHER_WEP64;
++ break;
++ case 13:
++ CipherAlg = CIPHER_WEP128;
++ break;
++ default:
++ DBGPRINT(RT_DEBUG_TRACE, ("Set::OID_802_11_ADD_WEP, only support CIPHER_WEP64(len:5) & CIPHER_WEP128(len:13)!!\n"));
++ Status = -EINVAL;
++ break;
++ }
++ pAdapter->SharedKey[BSS0][KeyIdx].CipherAlg = CipherAlg;
++
++ // Default key for tx (shared key)
++ if (pWepKey->KeyIndex & 0x80000000)
++ {
++#ifdef WPA_SUPPLICANT_SUPPORT
++ // set key material and key length
++ NdisZeroMemory(pAdapter->StaCfg.DesireSharedKey[KeyIdx].Key, 16);
++ pAdapter->StaCfg.DesireSharedKey[KeyIdx].KeyLen = (UCHAR) pWepKey->KeyLength;
++ NdisMoveMemory(pAdapter->StaCfg.DesireSharedKey[KeyIdx].Key, &pWepKey->KeyMaterial, pWepKey->KeyLength);
++ pAdapter->StaCfg.DesireSharedKeyId = KeyIdx;
++ pAdapter->StaCfg.DesireSharedKey[KeyIdx].CipherAlg = CipherAlg;
++#endif // WPA_SUPPLICANT_SUPPORT //
++ pAdapter->StaCfg.DefaultKeyId = (UCHAR) KeyIdx;
++ }
++
++#ifdef WPA_SUPPLICANT_SUPPORT
++ if (pAdapter->StaCfg.PortSecured == WPA_802_1X_PORT_SECURED)
++#endif // WPA_SUPPLICANT_SUPPORT
++ {
++ Key = pAdapter->SharedKey[BSS0][KeyIdx].Key;
++
++ // Set key material and cipherAlg to Asic
++ AsicAddSharedKeyEntry(pAdapter, BSS0, KeyIdx, CipherAlg, Key, NULL, NULL);
++
++ if (pWepKey->KeyIndex & 0x80000000)
++ {
++ PMAC_TABLE_ENTRY pEntry = &pAdapter->MacTab.Content[BSSID_WCID];
++ // Assign group key info
++ RTMPAddWcidAttributeEntry(pAdapter, BSS0, KeyIdx, CipherAlg, NULL);
++ // Assign pairwise key info
++ RTMPAddWcidAttributeEntry(pAdapter, BSS0, KeyIdx, CipherAlg, pEntry);
++ }
++ }
++ DBGPRINT(RT_DEBUG_TRACE, ("Set::OID_802_11_ADD_WEP (id=0x%x, Len=%d-byte), %s\n", pWepKey->KeyIndex, pWepKey->KeyLength, (pAdapter->StaCfg.PortSecured == WPA_802_1X_PORT_SECURED) ? "Port Secured":"Port NOT Secured"));
++ }
++ }
++ kfree(pWepKey);
++ break;
++#ifdef WPA_SUPPLICANT_SUPPORT
++ case OID_SET_COUNTERMEASURES:
++ if (wrq->u.data.length != sizeof(int))
++ Status = -EINVAL;
++ else
++ {
++ int enabled = 0;
++ Status = copy_from_user(&enabled, wrq->u.data.pointer, wrq->u.data.length);
++ if (enabled == 1)
++ pAdapter->StaCfg.bBlockAssoc = TRUE;
++ else
++ // WPA MIC error should block association attempt for 60 seconds
++ pAdapter->StaCfg.bBlockAssoc = FALSE;
++ DBGPRINT(RT_DEBUG_TRACE, ("Set::OID_SET_COUNTERMEASURES bBlockAssoc=%s\n", pAdapter->StaCfg.bBlockAssoc ? "TRUE":"FALSE"));
++ }
++ break;
++ case RT_OID_WPA_SUPPLICANT_SUPPORT:
++ if (wrq->u.data.length != sizeof(UCHAR))
++ Status = -EINVAL;
++ else
++ {
++ Status = copy_from_user(&wpa_supplicant_enable, wrq->u.data.pointer, wrq->u.data.length);
++ pAdapter->StaCfg.WpaSupplicantUP = wpa_supplicant_enable;
++ DBGPRINT(RT_DEBUG_TRACE, ("Set::RT_OID_WPA_SUPPLICANT_SUPPORT (=%d)\n", pAdapter->StaCfg.WpaSupplicantUP));
++ }
++ break;
++ case OID_802_11_DEAUTHENTICATION:
++ if (wrq->u.data.length != sizeof(MLME_DEAUTH_REQ_STRUCT))
++ Status = -EINVAL;
++ else
++ {
++ MLME_DEAUTH_REQ_STRUCT *pInfo;
++ MLME_QUEUE_ELEM *MsgElem = (MLME_QUEUE_ELEM *) kmalloc(sizeof(MLME_QUEUE_ELEM), MEM_ALLOC_FLAG);
++
++ pInfo = (MLME_DEAUTH_REQ_STRUCT *) MsgElem->Msg;
++ Status = copy_from_user(pInfo, wrq->u.data.pointer, wrq->u.data.length);
++ MlmeDeauthReqAction(pAdapter, MsgElem);
++ kfree(MsgElem);
++
++ if (INFRA_ON(pAdapter))
++ {
++ LinkDown(pAdapter, FALSE);
++ pAdapter->Mlme.AssocMachine.CurrState = ASSOC_IDLE;
++ }
++ DBGPRINT(RT_DEBUG_TRACE, ("Set::OID_802_11_DEAUTHENTICATION (Reason=%d)\n", pInfo->Reason));
++ }
++ break;
++ case OID_802_11_DROP_UNENCRYPTED:
++ if (wrq->u.data.length != sizeof(int))
++ Status = -EINVAL;
++ else
++ {
++ int enabled = 0;
++ Status = copy_from_user(&enabled, wrq->u.data.pointer, wrq->u.data.length);
++ if (enabled == 1)
++ pAdapter->StaCfg.PortSecured = WPA_802_1X_PORT_NOT_SECURED;
++ else
++ pAdapter->StaCfg.PortSecured = WPA_802_1X_PORT_SECURED;
++ NdisAcquireSpinLock(&pAdapter->MacTabLock);
++ pAdapter->MacTab.Content[BSSID_WCID].PortSecured = pAdapter->StaCfg.PortSecured;
++ NdisReleaseSpinLock(&pAdapter->MacTabLock);
++ DBGPRINT(RT_DEBUG_TRACE, ("Set::OID_802_11_DROP_UNENCRYPTED (=%d)\n", enabled));
++ }
++ break;
++ case OID_802_11_SET_IEEE8021X:
++ if (wrq->u.data.length != sizeof(BOOLEAN))
++ Status = -EINVAL;
++ else
++ {
++ Status = copy_from_user(&IEEE8021xState, wrq->u.data.pointer, wrq->u.data.length);
++ pAdapter->StaCfg.IEEE8021X = IEEE8021xState;
++ DBGPRINT(RT_DEBUG_TRACE, ("Set::OID_802_11_SET_IEEE8021X (=%d)\n", IEEE8021xState));
++ }
++ break;
++ case OID_802_11_SET_IEEE8021X_REQUIRE_KEY:
++ if (wrq->u.data.length != sizeof(BOOLEAN))
++ Status = -EINVAL;
++ else
++ {
++ Status = copy_from_user(&IEEE8021x_required_keys, wrq->u.data.pointer, wrq->u.data.length);
++ pAdapter->StaCfg.IEEE8021x_required_keys = IEEE8021x_required_keys;
++ DBGPRINT(RT_DEBUG_TRACE, ("Set::OID_802_11_SET_IEEE8021X_REQUIRE_KEY (%d)\n", IEEE8021x_required_keys));
++ }
++ break;
++ case OID_802_11_PMKID:
++ pPmkId = kmalloc(wrq->u.data.length, MEM_ALLOC_FLAG);
++
++ if(pPmkId == NULL) {
++ Status = -ENOMEM;
++ break;
++ }
++ Status = copy_from_user(pPmkId, wrq->u.data.pointer, wrq->u.data.length);
++
++ // check the PMKID information
++ if (pPmkId->BSSIDInfoCount == 0)
++ NdisZeroMemory(pAdapter->StaCfg.SavedPMK, sizeof(BSSID_INFO)*PMKID_NO);
++ else
++ {
++ PBSSID_INFO pBssIdInfo;
++ UINT BssIdx;
++ UINT CachedIdx;
++
++ for (BssIdx = 0; BssIdx < pPmkId->BSSIDInfoCount; BssIdx++)
++ {
++ // point to the indexed BSSID_INFO structure
++ pBssIdInfo = (PBSSID_INFO) ((PUCHAR) pPmkId + 2 * sizeof(UINT) + BssIdx * sizeof(BSSID_INFO));
++ // Find the entry in the saved data base.
++ for (CachedIdx = 0; CachedIdx < pAdapter->StaCfg.SavedPMKNum; CachedIdx++)
++ {
++ // compare the BSSID
++ if (NdisEqualMemory(pBssIdInfo->BSSID, pAdapter->StaCfg.SavedPMK[CachedIdx].BSSID, sizeof(NDIS_802_11_MAC_ADDRESS)))
++ break;
++ }
++
++ // Found, replace it
++ if (CachedIdx < PMKID_NO)
++ {
++ DBGPRINT(RT_DEBUG_OFF, ("Update OID_802_11_PMKID, idx = %d\n", CachedIdx));
++ NdisMoveMemory(&pAdapter->StaCfg.SavedPMK[CachedIdx], pBssIdInfo, sizeof(BSSID_INFO));
++ pAdapter->StaCfg.SavedPMKNum++;
++ }
++ // Not found, replace the last one
++ else
++ {
++ // Randomly replace one
++ CachedIdx = (pBssIdInfo->BSSID[5] % PMKID_NO);
++ DBGPRINT(RT_DEBUG_OFF, ("Update OID_802_11_PMKID, idx = %d\n", CachedIdx));
++ NdisMoveMemory(&pAdapter->StaCfg.SavedPMK[CachedIdx], pBssIdInfo, sizeof(BSSID_INFO));
++ }
++ }
++ }
++ if(pPmkId)
++ kfree(pPmkId);
++ break;
++#endif // WPA_SUPPLICANT_SUPPORT //
++
++
++
++#ifdef SNMP_SUPPORT
++ case OID_802_11_SHORTRETRYLIMIT:
++ if (wrq->u.data.length != sizeof(ULONG))
++ Status = -EINVAL;
++ else
++ {
++ Status = copy_from_user(&ShortRetryLimit, wrq->u.data.pointer, wrq->u.data.length);
++ RTMP_IO_READ32(pAdapter, TX_RTY_CFG, &tx_rty_cfg.word);
++ tx_rty_cfg.field.ShortRtyLimit = ShortRetryLimit;
++ RTMP_IO_WRITE32(pAdapter, TX_RTY_CFG, tx_rty_cfg.word);
++ DBGPRINT(RT_DEBUG_TRACE, ("Set::OID_802_11_SHORTRETRYLIMIT (tx_rty_cfg.field.ShortRetryLimit=%d, ShortRetryLimit=%ld)\n", tx_rty_cfg.field.ShortRtyLimit, ShortRetryLimit));
++ }
++ break;
++
++ case OID_802_11_LONGRETRYLIMIT:
++ DBGPRINT(RT_DEBUG_TRACE, ("Set::OID_802_11_LONGRETRYLIMIT \n"));
++ if (wrq->u.data.length != sizeof(ULONG))
++ Status = -EINVAL;
++ else
++ {
++ Status = copy_from_user(&LongRetryLimit, wrq->u.data.pointer, wrq->u.data.length);
++ RTMP_IO_READ32(pAdapter, TX_RTY_CFG, &tx_rty_cfg.word);
++ tx_rty_cfg.field.LongRtyLimit = LongRetryLimit;
++ RTMP_IO_WRITE32(pAdapter, TX_RTY_CFG, tx_rty_cfg.word);
++ DBGPRINT(RT_DEBUG_TRACE, ("Set::OID_802_11_LONGRETRYLIMIT (tx_rty_cfg.field.LongRetryLimit= %d,LongRetryLimit=%ld)\n", tx_rty_cfg.field.LongRtyLimit, LongRetryLimit));
++ }
++ break;
++
++ case OID_802_11_WEPDEFAULTKEYVALUE:
++ DBGPRINT(RT_DEBUG_TRACE, ("Set::OID_802_11_WEPDEFAULTKEYVALUE\n"));
++ pKey = kmalloc(wrq->u.data.length, GFP_KERNEL);
++ Status = copy_from_user(pKey, wrq->u.data.pointer, wrq->u.data.length);
++ //pKey = &WepKey;
++
++ if ( pKey->Length != wrq->u.data.length)
++ {
++ Status = -EINVAL;
++ DBGPRINT(RT_DEBUG_TRACE, ("Set::OID_802_11_WEPDEFAULTKEYVALUE, Failed!!\n"));
++ }
++ KeyIdx = pKey->KeyIndex & 0x0fffffff;
++ DBGPRINT(RT_DEBUG_TRACE,("pKey->KeyIndex =%d, pKey->KeyLength=%d\n", pKey->KeyIndex, pKey->KeyLength));
++
++ // it is a shared key
++ if (KeyIdx > 4)
++ Status = -EINVAL;
++ else
++ {
++ pAdapter->SharedKey[BSS0][pAdapter->StaCfg.DefaultKeyId].KeyLen = (UCHAR) pKey->KeyLength;
++ NdisMoveMemory(&pAdapter->SharedKey[BSS0][pAdapter->StaCfg.DefaultKeyId].Key, &pKey->KeyMaterial, pKey->KeyLength);
++ if (pKey->KeyIndex & 0x80000000)
++ {
++ // Default key for tx (shared key)
++ pAdapter->StaCfg.DefaultKeyId = (UCHAR) KeyIdx;
++ }
++ //RestartAPIsRequired = TRUE;
++ }
++ break;
++
++
++ case OID_802_11_WEPDEFAULTKEYID:
++ DBGPRINT(RT_DEBUG_TRACE, ("Set::OID_802_11_WEPDEFAULTKEYID \n"));
++
++ if (wrq->u.data.length != sizeof(UCHAR))
++ Status = -EINVAL;
++ else
++ Status = copy_from_user(&pAdapter->StaCfg.DefaultKeyId, wrq->u.data.pointer, wrq->u.data.length);
++
++ break;
++
++
++ case OID_802_11_CURRENTCHANNEL:
++ DBGPRINT(RT_DEBUG_TRACE, ("Set::OID_802_11_CURRENTCHANNEL \n"));
++ if (wrq->u.data.length != sizeof(UCHAR))
++ Status = -EINVAL;
++ else
++ {
++ Status = copy_from_user(&ctmp, wrq->u.data.pointer, wrq->u.data.length);
++ sprintf(&ctmp,"%d", ctmp);
++ Set_Channel_Proc(pAdapter, &ctmp);
++ }
++ break;
++#endif
++
++
++
++ default:
++ DBGPRINT(RT_DEBUG_TRACE, ("Set::unknown IOCTL's subcmd = 0x%08x\n", cmd));
++ Status = -EOPNOTSUPP;
++ break;
++ }
++
++
++ return Status;
++}
++
++INT RTMPQueryInformation(
++ IN PRTMP_ADAPTER pAdapter,
++ IN OUT struct ifreq *rq,
++ IN INT cmd)
++{
++ struct iwreq *wrq = (struct iwreq *) rq;
++ NDIS_802_11_BSSID_LIST_EX *pBssidList = NULL;
++ PNDIS_WLAN_BSSID_EX pBss;
++ NDIS_802_11_SSID Ssid;
++ NDIS_802_11_CONFIGURATION *pConfiguration = NULL;
++ RT_802_11_LINK_STATUS *pLinkStatus = NULL;
++ RT_802_11_STA_CONFIG *pStaConfig = NULL;
++ NDIS_802_11_STATISTICS *pStatistics = NULL;
++ NDIS_802_11_RTS_THRESHOLD RtsThresh;
++ NDIS_802_11_FRAGMENTATION_THRESHOLD FragThresh;
++ NDIS_802_11_POWER_MODE PowerMode;
++ NDIS_802_11_NETWORK_INFRASTRUCTURE BssType;
++ RT_802_11_PREAMBLE PreamType;
++ NDIS_802_11_AUTHENTICATION_MODE AuthMode;
++ NDIS_802_11_WEP_STATUS WepStatus;
++ NDIS_MEDIA_STATE MediaState;
++ ULONG BssBufSize, ulInfo=0, NetworkTypeList[4], apsd = 0;
++ USHORT BssLen = 0;
++ PUCHAR pBuf = NULL, pPtr;
++ INT Status = NDIS_STATUS_SUCCESS;
++ UINT we_version_compiled;
++ UCHAR i, Padding = 0;
++ BOOLEAN RadioState;
++ UCHAR driverVersion[8];
++ OID_SET_HT_PHYMODE *pHTPhyMode = NULL;
++
++
++#ifdef SNMP_SUPPORT
++ //for snmp, kathy
++ DefaultKeyIdxValue *pKeyIdxValue;
++ INT valueLen;
++ TX_RTY_CFG_STRUC tx_rty_cfg;
++ ULONG ShortRetryLimit, LongRetryLimit;
++ UCHAR tmp[64];
++#endif //SNMP
++
++ switch(cmd)
++ {
++ case RT_OID_DEVICE_NAME:
++ wrq->u.data.length = sizeof(STA_NIC_DEVICE_NAME);
++ Status = copy_to_user(wrq->u.data.pointer, STA_NIC_DEVICE_NAME, wrq->u.data.length);
++ break;
++ case RT_OID_VERSION_INFO:
++ DBGPRINT(RT_DEBUG_TRACE, ("Query::RT_OID_VERSION_INFO \n"));
++ wrq->u.data.length = 8*sizeof(UCHAR);
++ sprintf(&driverVersion[0], "%s", STA_DRIVER_VERSION);
++ driverVersion[7] = '\0';
++ if (copy_to_user(wrq->u.data.pointer, &driverVersion, wrq->u.data.length))
++ {
++ Status = -EFAULT;
++ }
++ break;
++#ifdef RALINK_ATE
++ case RT_QUERY_ATE_TXDONE_COUNT:
++ DBGPRINT(RT_DEBUG_TRACE, ("Query::RT_QUERY_ATE_TXDONE_COUNT \n"));
++ wrq->u.data.length = sizeof(UINT32);
++ if (copy_to_user(wrq->u.data.pointer, &pAdapter->ate.TxDoneCount, wrq->u.data.length))
++ {
++ Status = -EFAULT;
++ }
++ break;
++#endif // RALINK_ATE //
++ case OID_802_11_BSSID_LIST:
++ if (RTMP_TEST_FLAG(pAdapter, fRTMP_ADAPTER_BSS_SCAN_IN_PROGRESS))
++ {
++ /*
++ * Still scanning, indicate the caller should try again.
++ */
++ DBGPRINT(RT_DEBUG_TRACE, ("Query::OID_802_11_BSSID_LIST (Still scanning)\n"));
++ return -EAGAIN;
++ }
++ DBGPRINT(RT_DEBUG_TRACE, ("Query::OID_802_11_BSSID_LIST (%d BSS returned)\n",pAdapter->ScanTab.BssNr));
++ pAdapter->StaCfg.bScanReqIsFromWebUI = FALSE;
++ // Claculate total buffer size required
++ BssBufSize = sizeof(ULONG);
++
++ for (i = 0; i < pAdapter->ScanTab.BssNr; i++)
++ {
++ // Align pointer to 4 bytes boundary.
++ //Padding = 4 - (pAdapter->ScanTab.BssEntry[i].VarIELen & 0x0003);
++ //if (Padding == 4)
++ // Padding = 0;
++ BssBufSize += (sizeof(NDIS_WLAN_BSSID_EX) - 1 + sizeof(NDIS_802_11_FIXED_IEs) + pAdapter->ScanTab.BssEntry[i].VarIELen + Padding);
++ }
++
++ // For safety issue, we add 256 bytes just in case
++ BssBufSize += 256;
++ // Allocate the same size as passed from higher layer
++ pBuf = kmalloc(BssBufSize, MEM_ALLOC_FLAG);
++ if(pBuf == NULL)
++ {
++ Status = -ENOMEM;
++ break;
++ }
++ // Init 802_11_BSSID_LIST_EX structure
++ NdisZeroMemory(pBuf, BssBufSize);
++ pBssidList = (PNDIS_802_11_BSSID_LIST_EX) pBuf;
++ pBssidList->NumberOfItems = pAdapter->ScanTab.BssNr;
++
++ // Calculate total buffer length
++ BssLen = 4; // Consist of NumberOfItems
++ // Point to start of NDIS_WLAN_BSSID_EX
++ // pPtr = pBuf + sizeof(ULONG);
++ pPtr = (PUCHAR) &pBssidList->Bssid[0];
++ for (i = 0; i < pAdapter->ScanTab.BssNr; i++)
++ {
++ pBss = (PNDIS_WLAN_BSSID_EX) pPtr;
++ NdisMoveMemory(&pBss->MacAddress, &pAdapter->ScanTab.BssEntry[i].Bssid, MAC_ADDR_LEN);
++ if ((pAdapter->ScanTab.BssEntry[i].Hidden == 1) && (pAdapter->StaCfg.bShowHiddenSSID == FALSE))
++ {
++ //
++ // We must return this SSID during 4way handshaking, otherwise Aegis will failed to parse WPA infomation
++ // and then failed to send EAPOl farame.
++ //
++ if ((pAdapter->StaCfg.AuthMode >= Ndis802_11AuthModeWPA) && (pAdapter->StaCfg.PortSecured != WPA_802_1X_PORT_SECURED))
++ {
++ pBss->Ssid.SsidLength = pAdapter->ScanTab.BssEntry[i].SsidLen;
++ NdisMoveMemory(pBss->Ssid.Ssid, pAdapter->ScanTab.BssEntry[i].Ssid, pAdapter->ScanTab.BssEntry[i].SsidLen);
++ }
++ else
++ pBss->Ssid.SsidLength = 0;
++ }
++ else
++ {
++ pBss->Ssid.SsidLength = pAdapter->ScanTab.BssEntry[i].SsidLen;
++ NdisMoveMemory(pBss->Ssid.Ssid, pAdapter->ScanTab.BssEntry[i].Ssid, pAdapter->ScanTab.BssEntry[i].SsidLen);
++ }
++ pBss->Privacy = pAdapter->ScanTab.BssEntry[i].Privacy;
++ pBss->Rssi = pAdapter->ScanTab.BssEntry[i].Rssi - pAdapter->BbpRssiToDbmDelta;
++ pBss->NetworkTypeInUse = NetworkTypeInUseSanity(&pAdapter->ScanTab.BssEntry[i]);
++ pBss->Configuration.Length = sizeof(NDIS_802_11_CONFIGURATION);
++ pBss->Configuration.BeaconPeriod = pAdapter->ScanTab.BssEntry[i].BeaconPeriod;
++ pBss->Configuration.ATIMWindow = pAdapter->ScanTab.BssEntry[i].AtimWin;
++
++ MAP_CHANNEL_ID_TO_KHZ(pAdapter->ScanTab.BssEntry[i].Channel, pBss->Configuration.DSConfig);
++
++ if (pAdapter->ScanTab.BssEntry[i].BssType == BSS_INFRA)
++ pBss->InfrastructureMode = Ndis802_11Infrastructure;
++ else
++ pBss->InfrastructureMode = Ndis802_11IBSS;
++
++ NdisMoveMemory(pBss->SupportedRates, pAdapter->ScanTab.BssEntry[i].SupRate, pAdapter->ScanTab.BssEntry[i].SupRateLen);
++ NdisMoveMemory(pBss->SupportedRates + pAdapter->ScanTab.BssEntry[i].SupRateLen,
++ pAdapter->ScanTab.BssEntry[i].ExtRate,
++ pAdapter->ScanTab.BssEntry[i].ExtRateLen);
++
++ if (pAdapter->ScanTab.BssEntry[i].VarIELen == 0)
++ {
++ pBss->IELength = sizeof(NDIS_802_11_FIXED_IEs);
++ NdisMoveMemory(pBss->IEs, &pAdapter->ScanTab.BssEntry[i].FixIEs, sizeof(NDIS_802_11_FIXED_IEs));
++ pPtr = pPtr + sizeof(NDIS_WLAN_BSSID_EX) - 1 + sizeof(NDIS_802_11_FIXED_IEs);
++ }
++ else
++ {
++ pBss->IELength = (ULONG)(sizeof(NDIS_802_11_FIXED_IEs) + pAdapter->ScanTab.BssEntry[i].VarIELen);
++ pPtr = pPtr + sizeof(NDIS_WLAN_BSSID_EX) - 1 + sizeof(NDIS_802_11_FIXED_IEs);
++ NdisMoveMemory(pBss->IEs, &pAdapter->ScanTab.BssEntry[i].FixIEs, sizeof(NDIS_802_11_FIXED_IEs));
++ NdisMoveMemory(pBss->IEs + sizeof(NDIS_802_11_FIXED_IEs), pAdapter->ScanTab.BssEntry[i].VarIEs, pAdapter->ScanTab.BssEntry[i].VarIELen);
++ pPtr += pAdapter->ScanTab.BssEntry[i].VarIELen;
++ }
++ pBss->Length = (ULONG)(sizeof(NDIS_WLAN_BSSID_EX) - 1 + sizeof(NDIS_802_11_FIXED_IEs) + pAdapter->ScanTab.BssEntry[i].VarIELen + Padding);
++
++#if WIRELESS_EXT < 17
++ if ((BssLen + pBss->Length) < wrq->u.data.length)
++ BssLen += pBss->Length;
++ else
++ {
++ pBssidList->NumberOfItems = i;
++ break;
++ }
++#else
++ BssLen += pBss->Length;
++#endif
++ }
++
++#if WIRELESS_EXT < 17
++ wrq->u.data.length = BssLen;
++#else
++ if (BssLen > wrq->u.data.length)
++ {
++ kfree(pBssidList);
++ return -E2BIG;
++ }
++ else
++ wrq->u.data.length = BssLen;
++#endif
++ Status = copy_to_user(wrq->u.data.pointer, pBssidList, BssLen);
++ kfree(pBssidList);
++ break;
++ case OID_802_3_CURRENT_ADDRESS:
++ wrq->u.data.length = MAC_ADDR_LEN;
++ Status = copy_to_user(wrq->u.data.pointer, &pAdapter->CurrentAddress, wrq->u.data.length);
++ break;
++ case OID_GEN_MEDIA_CONNECT_STATUS:
++ if (pAdapter->IndicateMediaState == NdisMediaStateConnected)
++ MediaState = NdisMediaStateConnected;
++ else
++ MediaState = NdisMediaStateDisconnected;
++
++ wrq->u.data.length = sizeof(NDIS_MEDIA_STATE);
++ Status = copy_to_user(wrq->u.data.pointer, &MediaState, wrq->u.data.length);
++ break;
++ case OID_802_11_BSSID:
++#ifdef RALINK_ATE
++ if (ATE_ON(pAdapter))
++ {
++ DBGPRINT(RT_DEBUG_TRACE, ("The driver is in ATE mode now\n"));
++ Status = NDIS_STATUS_RESOURCES;
++ break;
++ }
++#endif // RALINK_ATE //
++ if (INFRA_ON(pAdapter) || ADHOC_ON(pAdapter))
++ {
++ Status = copy_to_user(wrq->u.data.pointer, &pAdapter->CommonCfg.Bssid, sizeof(NDIS_802_11_MAC_ADDRESS));
++
++ }
++ else
++ {
++ DBGPRINT(RT_DEBUG_TRACE, ("Query::OID_802_11_BSSID(=EMPTY)\n"));
++ Status = -ENOTCONN;
++ }
++ break;
++ case OID_802_11_SSID:
++ NdisZeroMemory(&Ssid, sizeof(NDIS_802_11_SSID));
++ NdisZeroMemory(Ssid.Ssid, MAX_LEN_OF_SSID);
++ Ssid.SsidLength = pAdapter->CommonCfg.SsidLen;
++ memcpy(Ssid.Ssid, pAdapter->CommonCfg.Ssid, Ssid.SsidLength);
++ wrq->u.data.length = sizeof(NDIS_802_11_SSID);
++ Status = copy_to_user(wrq->u.data.pointer, &Ssid, wrq->u.data.length);
++ DBGPRINT(RT_DEBUG_TRACE, ("Query::OID_802_11_SSID (Len=%d, ssid=%s)\n", Ssid.SsidLength,Ssid.Ssid));
++ break;
++ case RT_OID_802_11_QUERY_LINK_STATUS:
++ pLinkStatus = (RT_802_11_LINK_STATUS *) kmalloc(sizeof(RT_802_11_LINK_STATUS), MEM_ALLOC_FLAG);
++ if (pLinkStatus)
++ {
++ pLinkStatus->CurrTxRate = RateIdTo500Kbps[pAdapter->CommonCfg.TxRate]; // unit : 500 kbps
++ pLinkStatus->ChannelQuality = pAdapter->Mlme.ChannelQuality;
++ pLinkStatus->RxByteCount = pAdapter->RalinkCounters.ReceivedByteCount;
++ pLinkStatus->TxByteCount = pAdapter->RalinkCounters.TransmittedByteCount;
++ pLinkStatus->CentralChannel = pAdapter->CommonCfg.CentralChannel;
++ wrq->u.data.length = sizeof(RT_802_11_LINK_STATUS);
++ Status = copy_to_user(wrq->u.data.pointer, pLinkStatus, wrq->u.data.length);
++ kfree(pLinkStatus);
++ DBGPRINT(RT_DEBUG_TRACE, ("Query::RT_OID_802_11_QUERY_LINK_STATUS\n"));
++ }
++ else
++ {
++ DBGPRINT(RT_DEBUG_TRACE, ("Query::RT_OID_802_11_QUERY_LINK_STATUS(kmalloc failed)\n"));
++ Status = -EFAULT;
++ }
++ break;
++ case OID_802_11_CONFIGURATION:
++ pConfiguration = (NDIS_802_11_CONFIGURATION *) kmalloc(sizeof(NDIS_802_11_CONFIGURATION), MEM_ALLOC_FLAG);
++ if (pConfiguration)
++ {
++ pConfiguration->Length = sizeof(NDIS_802_11_CONFIGURATION);
++ pConfiguration->BeaconPeriod = pAdapter->CommonCfg.BeaconPeriod;
++ pConfiguration->ATIMWindow = pAdapter->StaActive.AtimWin;
++ MAP_CHANNEL_ID_TO_KHZ(pAdapter->CommonCfg.Channel, pConfiguration->DSConfig);
++ wrq->u.data.length = sizeof(NDIS_802_11_CONFIGURATION);
++ Status = copy_to_user(wrq->u.data.pointer, pConfiguration, wrq->u.data.length);
++ DBGPRINT(RT_DEBUG_TRACE, ("Query::OID_802_11_CONFIGURATION(BeaconPeriod=%ld,AtimW=%ld,Channel=%d) \n",
++ pConfiguration->BeaconPeriod, pConfiguration->ATIMWindow, pAdapter->CommonCfg.Channel));
++ kfree(pConfiguration);
++ }
++ else
++ {
++ DBGPRINT(RT_DEBUG_TRACE, ("Query::OID_802_11_CONFIGURATION(kmalloc failed)\n"));
++ Status = -EFAULT;
++ }
++ break;
++ case RT_OID_802_11_SNR_0:
++ if ((pAdapter->StaCfg.LastSNR0 > 0))
++ {
++ ulInfo = ((0xeb - pAdapter->StaCfg.LastSNR0) * 3) / 16 ;
++ wrq->u.data.length = sizeof(ulInfo);
++ Status = copy_to_user(wrq->u.data.pointer, &ulInfo, wrq->u.data.length);
++ DBGPRINT(RT_DEBUG_TRACE, ("Query::RT_OID_802_11_SNR_0(0x=%lx)\n", ulInfo));
++ }
++ else
++ Status = -EFAULT;
++ break;
++ case RT_OID_802_11_SNR_1:
++ if ((pAdapter->Antenna.field.RxPath > 1) &&
++ (pAdapter->StaCfg.LastSNR1 > 0))
++ {
++ ulInfo = ((0xeb - pAdapter->StaCfg.LastSNR1) * 3) / 16 ;
++ wrq->u.data.length = sizeof(ulInfo);
++ Status = copy_to_user(wrq->u.data.pointer, &ulInfo, wrq->u.data.length);
++ DBGPRINT(RT_DEBUG_TRACE,("Query::RT_OID_802_11_SNR_1(0x=%lx)\n",ulInfo));
++ }
++ else
++ Status = -EFAULT;
++ DBGPRINT(RT_DEBUG_TRACE,("Query::RT_OID_802_11_SNR_1(pAdapter->StaCfg.LastSNR1=%d)\n",pAdapter->StaCfg.LastSNR1));
++ break;
++ case OID_802_11_RSSI_TRIGGER:
++ ulInfo = pAdapter->StaCfg.RssiSample.LastRssi0 - pAdapter->BbpRssiToDbmDelta;
++ wrq->u.data.length = sizeof(ulInfo);
++ Status = copy_to_user(wrq->u.data.pointer, &ulInfo, wrq->u.data.length);
++ DBGPRINT(RT_DEBUG_TRACE, ("Query::OID_802_11_RSSI_TRIGGER(=%ld)\n", ulInfo));
++ break;
++ case OID_802_11_RSSI:
++ case RT_OID_802_11_RSSI:
++ ulInfo = pAdapter->StaCfg.RssiSample.LastRssi0;
++ wrq->u.data.length = sizeof(ulInfo);
++ Status = copy_to_user(wrq->u.data.pointer, &ulInfo, wrq->u.data.length);
++ break;
++ case RT_OID_802_11_RSSI_1:
++ ulInfo = pAdapter->StaCfg.RssiSample.LastRssi1;
++ wrq->u.data.length = sizeof(ulInfo);
++ Status = copy_to_user(wrq->u.data.pointer, &ulInfo, wrq->u.data.length);
++ break;
++ case RT_OID_802_11_RSSI_2:
++ ulInfo = pAdapter->StaCfg.RssiSample.LastRssi2;
++ wrq->u.data.length = sizeof(ulInfo);
++ Status = copy_to_user(wrq->u.data.pointer, &ulInfo, wrq->u.data.length);
++ break;
++ case OID_802_11_STATISTICS:
++ pStatistics = (NDIS_802_11_STATISTICS *) kmalloc(sizeof(NDIS_802_11_STATISTICS), MEM_ALLOC_FLAG);
++ if (pStatistics)
++ {
++ DBGPRINT(RT_DEBUG_TRACE, ("Query::OID_802_11_STATISTICS \n"));
++ // add the most up-to-date h/w raw counters into software counters
++ NICUpdateRawCounters(pAdapter);
++
++ // Sanity check for calculation of sucessful count
++ if (pAdapter->WlanCounters.TransmittedFragmentCount.QuadPart < pAdapter->WlanCounters.RetryCount.QuadPart)
++ pAdapter->WlanCounters.TransmittedFragmentCount.QuadPart = pAdapter->WlanCounters.RetryCount.QuadPart;
++
++ pStatistics->TransmittedFragmentCount.QuadPart = pAdapter->WlanCounters.TransmittedFragmentCount.QuadPart;
++ pStatistics->MulticastTransmittedFrameCount.QuadPart = pAdapter->WlanCounters.MulticastTransmittedFrameCount.QuadPart;
++ pStatistics->FailedCount.QuadPart = pAdapter->WlanCounters.FailedCount.QuadPart;
++ pStatistics->RetryCount.QuadPart = pAdapter->WlanCounters.RetryCount.QuadPart;
++ pStatistics->MultipleRetryCount.QuadPart = pAdapter->WlanCounters.MultipleRetryCount.QuadPart;
++ pStatistics->RTSSuccessCount.QuadPart = pAdapter->WlanCounters.RTSSuccessCount.QuadPart;
++ pStatistics->RTSFailureCount.QuadPart = pAdapter->WlanCounters.RTSFailureCount.QuadPart;
++ pStatistics->ACKFailureCount.QuadPart = pAdapter->WlanCounters.ACKFailureCount.QuadPart;
++ pStatistics->FrameDuplicateCount.QuadPart = pAdapter->WlanCounters.FrameDuplicateCount.QuadPart;
++ pStatistics->ReceivedFragmentCount.QuadPart = pAdapter->WlanCounters.ReceivedFragmentCount.QuadPart;
++ pStatistics->MulticastReceivedFrameCount.QuadPart = pAdapter->WlanCounters.MulticastReceivedFrameCount.QuadPart;
++#ifdef DBG
++ pStatistics->FCSErrorCount = pAdapter->RalinkCounters.RealFcsErrCount;
++#else
++ pStatistics->FCSErrorCount.QuadPart = pAdapter->WlanCounters.FCSErrorCount.QuadPart;
++ pStatistics->FrameDuplicateCount.u.LowPart = pAdapter->WlanCounters.FrameDuplicateCount.u.LowPart / 100;
++#endif
++ wrq->u.data.length = sizeof(NDIS_802_11_STATISTICS);
++ Status = copy_to_user(wrq->u.data.pointer, pStatistics, wrq->u.data.length);
++ kfree(pStatistics);
++ }
++ else
++ {
++ DBGPRINT(RT_DEBUG_TRACE, ("Query::OID_802_11_STATISTICS(kmalloc failed)\n"));
++ Status = -EFAULT;
++ }
++ break;
++ case OID_GEN_RCV_OK:
++ ulInfo = pAdapter->Counters8023.GoodReceives;
++ wrq->u.data.length = sizeof(ulInfo);
++ Status = copy_to_user(wrq->u.data.pointer, &ulInfo, wrq->u.data.length);
++ break;
++ case OID_GEN_RCV_NO_BUFFER:
++ ulInfo = pAdapter->Counters8023.RxNoBuffer;
++ wrq->u.data.length = sizeof(ulInfo);
++ Status = copy_to_user(wrq->u.data.pointer, &ulInfo, wrq->u.data.length);
++ break;
++ case RT_OID_802_11_PHY_MODE:
++ ulInfo = (ULONG)pAdapter->CommonCfg.PhyMode;
++ wrq->u.data.length = sizeof(ulInfo);
++ Status = copy_to_user(wrq->u.data.pointer, &ulInfo, wrq->u.data.length);
++ DBGPRINT(RT_DEBUG_TRACE, ("Query::RT_OID_802_11_PHY_MODE (=%ld)\n", ulInfo));
++ break;
++ case RT_OID_802_11_STA_CONFIG:
++ pStaConfig = (RT_802_11_STA_CONFIG *) kmalloc(sizeof(RT_802_11_STA_CONFIG), MEM_ALLOC_FLAG);
++ if (pStaConfig)
++ {
++ DBGPRINT(RT_DEBUG_TRACE, ("Query::RT_OID_802_11_STA_CONFIG\n"));
++ pStaConfig->EnableTxBurst = pAdapter->CommonCfg.bEnableTxBurst;
++ pStaConfig->EnableTurboRate = 0;
++ pStaConfig->UseBGProtection = pAdapter->CommonCfg.UseBGProtection;
++ pStaConfig->UseShortSlotTime = pAdapter->CommonCfg.bUseShortSlotTime;
++ //pStaConfig->AdhocMode = pAdapter->StaCfg.AdhocMode;
++ pStaConfig->HwRadioStatus = (pAdapter->StaCfg.bHwRadio == TRUE) ? 1 : 0;
++ pStaConfig->Rsv1 = 0;
++ pStaConfig->SystemErrorBitmap = pAdapter->SystemErrorBitmap;
++ wrq->u.data.length = sizeof(RT_802_11_STA_CONFIG);
++ Status = copy_to_user(wrq->u.data.pointer, pStaConfig, wrq->u.data.length);
++ kfree(pStaConfig);
++ }
++ else
++ {
++ DBGPRINT(RT_DEBUG_TRACE, ("Query::RT_OID_802_11_STA_CONFIG(kmalloc failed)\n"));
++ Status = -EFAULT;
++ }
++ break;
++ case OID_802_11_RTS_THRESHOLD:
++ RtsThresh = pAdapter->CommonCfg.RtsThreshold;
++ wrq->u.data.length = sizeof(RtsThresh);
++ Status = copy_to_user(wrq->u.data.pointer, &RtsThresh, wrq->u.data.length);
++ DBGPRINT(RT_DEBUG_TRACE, ("Query::OID_802_11_RTS_THRESHOLD(=%ld)\n", RtsThresh));
++ break;
++ case OID_802_11_FRAGMENTATION_THRESHOLD:
++ FragThresh = pAdapter->CommonCfg.FragmentThreshold;
++ if (pAdapter->CommonCfg.bUseZeroToDisableFragment == TRUE)
++ FragThresh = 0;
++ wrq->u.data.length = sizeof(FragThresh);
++ Status = copy_to_user(wrq->u.data.pointer, &FragThresh, wrq->u.data.length);
++ DBGPRINT(RT_DEBUG_TRACE, ("Query::OID_802_11_FRAGMENTATION_THRESHOLD(=%ld)\n", FragThresh));
++ break;
++ case OID_802_11_POWER_MODE:
++ PowerMode = pAdapter->StaCfg.WindowsPowerMode;
++ wrq->u.data.length = sizeof(PowerMode);
++ Status = copy_to_user(wrq->u.data.pointer, &PowerMode, wrq->u.data.length);
++ DBGPRINT(RT_DEBUG_TRACE, ("Query::OID_802_11_POWER_MODE(=%d)\n", PowerMode));
++ break;
++ case RT_OID_802_11_RADIO:
++ RadioState = (BOOLEAN) pAdapter->StaCfg.bSwRadio;
++ wrq->u.data.length = sizeof(RadioState);
++ Status = copy_to_user(wrq->u.data.pointer, &RadioState, wrq->u.data.length);
++ DBGPRINT(RT_DEBUG_TRACE, ("Query::RT_OID_802_11_QUERY_RADIO (=%d)\n", RadioState));
++ break;
++ case OID_802_11_INFRASTRUCTURE_MODE:
++ if (pAdapter->StaCfg.BssType == BSS_ADHOC)
++ BssType = Ndis802_11IBSS;
++ else if (pAdapter->StaCfg.BssType == BSS_INFRA)
++ BssType = Ndis802_11Infrastructure;
++ else if (pAdapter->StaCfg.BssType == BSS_MONITOR)
++ BssType = Ndis802_11Monitor;
++ else
++ BssType = Ndis802_11AutoUnknown;
++
++ wrq->u.data.length = sizeof(BssType);
++ Status = copy_to_user(wrq->u.data.pointer, &BssType, wrq->u.data.length);
++ DBGPRINT(RT_DEBUG_TRACE, ("Query::OID_802_11_INFRASTRUCTURE_MODE(=%d)\n", BssType));
++ break;
++ case RT_OID_802_11_PREAMBLE:
++ PreamType = pAdapter->CommonCfg.TxPreamble;
++ wrq->u.data.length = sizeof(PreamType);
++ Status = copy_to_user(wrq->u.data.pointer, &PreamType, wrq->u.data.length);
++ DBGPRINT(RT_DEBUG_TRACE, ("Query::RT_OID_802_11_PREAMBLE(=%d)\n", PreamType));
++ break;
++ case OID_802_11_AUTHENTICATION_MODE:
++ AuthMode = pAdapter->StaCfg.AuthMode;
++ wrq->u.data.length = sizeof(AuthMode);
++ Status = copy_to_user(wrq->u.data.pointer, &AuthMode, wrq->u.data.length);
++ DBGPRINT(RT_DEBUG_TRACE, ("Query::OID_802_11_AUTHENTICATION_MODE(=%d)\n", AuthMode));
++ break;
++ case OID_802_11_WEP_STATUS:
++ WepStatus = pAdapter->StaCfg.WepStatus;
++ wrq->u.data.length = sizeof(WepStatus);
++ Status = copy_to_user(wrq->u.data.pointer, &WepStatus, wrq->u.data.length);
++ DBGPRINT(RT_DEBUG_TRACE, ("Query::OID_802_11_WEP_STATUS(=%d)\n", WepStatus));
++ break;
++ case OID_802_11_TX_POWER_LEVEL:
++ wrq->u.data.length = sizeof(ULONG);
++ Status = copy_to_user(wrq->u.data.pointer, &pAdapter->CommonCfg.TxPower, wrq->u.data.length);
++ DBGPRINT(RT_DEBUG_TRACE, ("Query::OID_802_11_TX_POWER_LEVEL %x\n",pAdapter->CommonCfg.TxPower));
++ break;
++ case RT_OID_802_11_TX_POWER_LEVEL_1:
++ wrq->u.data.length = sizeof(ULONG);
++ Status = copy_to_user(wrq->u.data.pointer, &pAdapter->CommonCfg.TxPowerPercentage, wrq->u.data.length);
++ DBGPRINT(RT_DEBUG_TRACE, ("Query::RT_OID_802_11_TX_POWER_LEVEL_1 (=%ld)\n", pAdapter->CommonCfg.TxPowerPercentage));
++ break;
++ case OID_802_11_NETWORK_TYPES_SUPPORTED:
++ if ((pAdapter->RfIcType == RFIC_2850) || (pAdapter->RfIcType == RFIC_2750))
++ {
++ NetworkTypeList[0] = 3; // NumberOfItems = 3
++ NetworkTypeList[1] = Ndis802_11DS; // NetworkType[1] = 11b
++ NetworkTypeList[2] = Ndis802_11OFDM24; // NetworkType[2] = 11g
++ NetworkTypeList[3] = Ndis802_11OFDM5; // NetworkType[3] = 11a
++ wrq->u.data.length = 16;
++ Status = copy_to_user(wrq->u.data.pointer, &NetworkTypeList[0], wrq->u.data.length);
++ }
++ else
++ {
++ NetworkTypeList[0] = 2; // NumberOfItems = 2
++ NetworkTypeList[1] = Ndis802_11DS; // NetworkType[1] = 11b
++ NetworkTypeList[2] = Ndis802_11OFDM24; // NetworkType[2] = 11g
++ wrq->u.data.length = 12;
++ Status = copy_to_user(wrq->u.data.pointer, &NetworkTypeList[0], wrq->u.data.length);
++ }
++ DBGPRINT(RT_DEBUG_TRACE, ("Query::OID_802_11_NETWORK_TYPES_SUPPORTED\n"));
++ break;
++ case OID_802_11_NETWORK_TYPE_IN_USE:
++ wrq->u.data.length = sizeof(ULONG);
++ if (pAdapter->CommonCfg.PhyMode == PHY_11A)
++ ulInfo = Ndis802_11OFDM5;
++ else if ((pAdapter->CommonCfg.PhyMode == PHY_11BG_MIXED) || (pAdapter->CommonCfg.PhyMode == PHY_11G))
++ ulInfo = Ndis802_11OFDM24;
++ else
++ ulInfo = Ndis802_11DS;
++ Status = copy_to_user(wrq->u.data.pointer, &ulInfo, wrq->u.data.length);
++ break;
++ case RT_OID_802_11_QUERY_LAST_RX_RATE:
++ ulInfo = (ULONG)pAdapter->LastRxRate;
++ wrq->u.data.length = sizeof(ulInfo);
++ Status = copy_to_user(wrq->u.data.pointer, &ulInfo, wrq->u.data.length);
++ DBGPRINT(RT_DEBUG_TRACE, ("Query::RT_OID_802_11_QUERY_LAST_RX_RATE (=%ld)\n", ulInfo));
++ break;
++ case RT_OID_802_11_QUERY_LAST_TX_RATE:
++ //ulInfo = (ULONG)pAdapter->LastTxRate;
++ ulInfo = (ULONG)pAdapter->MacTab.Content[BSSID_WCID].HTPhyMode.word;
++ wrq->u.data.length = sizeof(ulInfo);
++ Status = copy_to_user(wrq->u.data.pointer, &ulInfo, wrq->u.data.length);
++ DBGPRINT(RT_DEBUG_TRACE, ("Query::RT_OID_802_11_QUERY_LAST_TX_RATE (=%lx)\n", ulInfo));
++ break;
++ case RT_OID_802_11_QUERY_EEPROM_VERSION:
++ wrq->u.data.length = sizeof(ULONG);
++ Status = copy_to_user(wrq->u.data.pointer, &pAdapter->EepromVersion, wrq->u.data.length);
++ break;
++ case RT_OID_802_11_QUERY_FIRMWARE_VERSION:
++ wrq->u.data.length = sizeof(ULONG);
++ Status = copy_to_user(wrq->u.data.pointer, &pAdapter->FirmwareVersion, wrq->u.data.length);
++ break;
++ case RT_OID_802_11_QUERY_NOISE_LEVEL:
++ wrq->u.data.length = sizeof(UCHAR);
++ Status = copy_to_user(wrq->u.data.pointer, &pAdapter->BbpWriteLatch[66], wrq->u.data.length);
++ DBGPRINT(RT_DEBUG_TRACE, ("Query::RT_OID_802_11_QUERY_NOISE_LEVEL (=%d)\n", pAdapter->BbpWriteLatch[66]));
++ break;
++ case RT_OID_802_11_EXTRA_INFO:
++ wrq->u.data.length = sizeof(ULONG);
++ Status = copy_to_user(wrq->u.data.pointer, &pAdapter->ExtraInfo, wrq->u.data.length);
++ DBGPRINT(RT_DEBUG_TRACE, ("Query::RT_OID_802_11_EXTRA_INFO (=%ld)\n", pAdapter->ExtraInfo));
++ break;
++ case RT_OID_WE_VERSION_COMPILED:
++ wrq->u.data.length = sizeof(UINT);
++ we_version_compiled = WIRELESS_EXT;
++ Status = copy_to_user(wrq->u.data.pointer, &we_version_compiled, wrq->u.data.length);
++ break;
++ case RT_OID_802_11_QUERY_APSD_SETTING:
++ apsd = (pAdapter->CommonCfg.bAPSDCapable | (pAdapter->CommonCfg.bAPSDAC_BE << 1) | (pAdapter->CommonCfg.bAPSDAC_BK << 2)
++ | (pAdapter->CommonCfg.bAPSDAC_VI << 3) | (pAdapter->CommonCfg.bAPSDAC_VO << 4) | (pAdapter->CommonCfg.MaxSPLength << 5));
++
++ wrq->u.data.length = sizeof(ULONG);
++ Status = copy_to_user(wrq->u.data.pointer, &apsd, wrq->u.data.length);
++ DBGPRINT(RT_DEBUG_TRACE, ("Query::RT_OID_802_11_QUERY_APSD_SETTING (=0x%lx,APSDCap=%d,AC_BE=%d,AC_BK=%d,AC_VI=%d,AC_VO=%d,MAXSPLen=%d)\n",
++ apsd,pAdapter->CommonCfg.bAPSDCapable,pAdapter->CommonCfg.bAPSDAC_BE,pAdapter->CommonCfg.bAPSDAC_BK,pAdapter->CommonCfg.bAPSDAC_VI,pAdapter->CommonCfg.bAPSDAC_VO,pAdapter->CommonCfg.MaxSPLength));
++ break;
++ case RT_OID_802_11_QUERY_APSD_PSM:
++ wrq->u.data.length = sizeof(ULONG);
++ Status = copy_to_user(wrq->u.data.pointer, &pAdapter->CommonCfg.bAPSDForcePowerSave, wrq->u.data.length);
++ DBGPRINT(RT_DEBUG_TRACE, ("Query::RT_OID_802_11_QUERY_APSD_PSM (=%d)\n", pAdapter->CommonCfg.bAPSDForcePowerSave));
++ break;
++ case RT_OID_802_11_QUERY_WMM:
++ wrq->u.data.length = sizeof(BOOLEAN);
++ Status = copy_to_user(wrq->u.data.pointer, &pAdapter->CommonCfg.bWmmCapable, wrq->u.data.length);
++ DBGPRINT(RT_DEBUG_TRACE, ("Query::RT_OID_802_11_QUERY_WMM (=%d)\n", pAdapter->CommonCfg.bWmmCapable));
++ break;
++#ifdef WPA_SUPPLICANT_SUPPORT
++ case RT_OID_NEW_DRIVER:
++ {
++ UCHAR enabled = 1;
++ wrq->u.data.length = sizeof(UCHAR);
++ Status = copy_to_user(wrq->u.data.pointer, &enabled, wrq->u.data.length);
++ DBGPRINT(RT_DEBUG_TRACE, ("Query::RT_OID_NEW_DRIVER (=%d)\n", enabled));
++ }
++ break;
++ case RT_OID_WPA_SUPPLICANT_SUPPORT:
++ wrq->u.data.length = sizeof(UCHAR);
++ Status = copy_to_user(wrq->u.data.pointer, &pAdapter->StaCfg.WpaSupplicantUP, wrq->u.data.length);
++ DBGPRINT(RT_DEBUG_TRACE, ("Query::RT_OID_WPA_SUPPLICANT_SUPPORT (=%d)\n", pAdapter->StaCfg.WpaSupplicantUP));
++ break;
++#endif // WPA_SUPPLICANT_SUPPORT //
++
++ case RT_OID_DRIVER_DEVICE_NAME:
++ DBGPRINT(RT_DEBUG_TRACE, ("Query::RT_OID_DRIVER_DEVICE_NAME \n"));
++ wrq->u.data.length = 16;
++ if (copy_to_user(wrq->u.data.pointer, pAdapter->StaCfg.dev_name, wrq->u.data.length))
++ {
++ Status = -EFAULT;
++ }
++ break;
++ case RT_OID_802_11_QUERY_HT_PHYMODE:
++ pHTPhyMode = (OID_SET_HT_PHYMODE *) kmalloc(sizeof(OID_SET_HT_PHYMODE), MEM_ALLOC_FLAG);
++ if (pHTPhyMode)
++ {
++ pHTPhyMode->PhyMode = pAdapter->CommonCfg.PhyMode;
++ pHTPhyMode->HtMode = (UCHAR)pAdapter->MacTab.Content[BSSID_WCID].HTPhyMode.field.MODE;
++ pHTPhyMode->BW = (UCHAR)pAdapter->MacTab.Content[BSSID_WCID].HTPhyMode.field.BW;
++ pHTPhyMode->MCS= (UCHAR)pAdapter->MacTab.Content[BSSID_WCID].HTPhyMode.field.MCS;
++ pHTPhyMode->SHORTGI= (UCHAR)pAdapter->MacTab.Content[BSSID_WCID].HTPhyMode.field.ShortGI;
++ pHTPhyMode->STBC= (UCHAR)pAdapter->MacTab.Content[BSSID_WCID].HTPhyMode.field.STBC;
++
++ pHTPhyMode->ExtOffset = ((pAdapter->CommonCfg.CentralChannel < pAdapter->CommonCfg.Channel) ? (EXTCHA_BELOW) : (EXTCHA_ABOVE));
++ wrq->u.data.length = sizeof(OID_SET_HT_PHYMODE);
++ if (copy_to_user(wrq->u.data.pointer, pHTPhyMode, wrq->u.data.length))
++ {
++ Status = -EFAULT;
++ }
++ DBGPRINT(RT_DEBUG_TRACE, ("Query::RT_OID_802_11_QUERY_HT_PHYMODE (PhyMode = %d, MCS =%d, BW = %d, STBC = %d, ExtOffset=%d)\n",
++ pHTPhyMode->HtMode, pHTPhyMode->MCS, pHTPhyMode->BW, pHTPhyMode->STBC, pHTPhyMode->ExtOffset));
++ DBGPRINT(RT_DEBUG_TRACE, (" MlmeUpdateTxRates (.word = %x )\n", pAdapter->MacTab.Content[BSSID_WCID].HTPhyMode.word));
++ }
++ else
++ {
++ DBGPRINT(RT_DEBUG_TRACE, ("Query::RT_OID_802_11_STA_CONFIG(kmalloc failed)\n"));
++ Status = -EFAULT;
++ }
++ break;
++ case RT_OID_802_11_COUNTRY_REGION:
++ DBGPRINT(RT_DEBUG_TRACE, ("Query::RT_OID_802_11_COUNTRY_REGION \n"));
++ wrq->u.data.length = sizeof(ulInfo);
++ ulInfo = pAdapter->CommonCfg.CountryRegionForABand;
++ ulInfo = (ulInfo << 8)|(pAdapter->CommonCfg.CountryRegion);
++ if (copy_to_user(wrq->u.data.pointer, &ulInfo, wrq->u.data.length))
++ {
++ Status = -EFAULT;
++ }
++ break;
++ case RT_OID_802_11_QUERY_DAT_HT_PHYMODE:
++ pHTPhyMode = (OID_SET_HT_PHYMODE *) kmalloc(sizeof(OID_SET_HT_PHYMODE), MEM_ALLOC_FLAG);
++ if (pHTPhyMode)
++ {
++ pHTPhyMode->PhyMode = pAdapter->CommonCfg.PhyMode;
++ pHTPhyMode->HtMode = (UCHAR)pAdapter->CommonCfg.RegTransmitSetting.field.HTMODE;
++ pHTPhyMode->BW = (UCHAR)pAdapter->CommonCfg.RegTransmitSetting.field.BW;
++ pHTPhyMode->MCS= (UCHAR)pAdapter->StaCfg.DesiredTransmitSetting.field.MCS;
++ pHTPhyMode->SHORTGI= (UCHAR)pAdapter->CommonCfg.RegTransmitSetting.field.ShortGI;
++ pHTPhyMode->STBC= (UCHAR)pAdapter->CommonCfg.RegTransmitSetting.field.STBC;
++
++ wrq->u.data.length = sizeof(OID_SET_HT_PHYMODE);
++ if (copy_to_user(wrq->u.data.pointer, pHTPhyMode, wrq->u.data.length))
++ {
++ Status = -EFAULT;
++ }
++ DBGPRINT(RT_DEBUG_TRACE, ("Query::RT_OID_802_11_QUERY_HT_PHYMODE (PhyMode = %d, MCS =%d, BW = %d, STBC = %d, ExtOffset=%d)\n",
++ pHTPhyMode->HtMode, pHTPhyMode->MCS, pHTPhyMode->BW, pHTPhyMode->STBC, pHTPhyMode->ExtOffset));
++ DBGPRINT(RT_DEBUG_TRACE, (" MlmeUpdateTxRates (.word = %x )\n", pAdapter->MacTab.Content[BSSID_WCID].HTPhyMode.word));
++ }
++ else
++ {
++ DBGPRINT(RT_DEBUG_TRACE, ("Query::RT_OID_802_11_STA_CONFIG(kmalloc failed)\n"));
++ Status = -EFAULT;
++ }
++ break;
++ case RT_OID_QUERY_MULTIPLE_CARD_SUPPORT:
++ wrq->u.data.length = sizeof(UCHAR);
++ i = 0;
++#ifdef MULTIPLE_CARD_SUPPORT
++ i = 1;
++#endif // MULTIPLE_CARD_SUPPORT //
++ if (copy_to_user(wrq->u.data.pointer, &i, wrq->u.data.length))
++ {
++ Status = -EFAULT;
++ }
++ DBGPRINT(RT_DEBUG_TRACE, ("Query::RT_OID_QUERY_MULTIPLE_CARD_SUPPORT(=%d) \n", i));
++ break;
++#ifdef SNMP_SUPPORT
++ case RT_OID_802_11_MAC_ADDRESS:
++ wrq->u.data.length = MAC_ADDR_LEN;
++ Status = copy_to_user(wrq->u.data.pointer, &pAdapter->CurrentAddress, wrq->u.data.length);
++ break;
++
++ case RT_OID_802_11_MANUFACTUREROUI:
++ DBGPRINT(RT_DEBUG_TRACE, ("Query::RT_OID_802_11_MANUFACTUREROUI \n"));
++ wrq->u.data.length = ManufacturerOUI_LEN;
++ Status = copy_to_user(wrq->u.data.pointer, &pAdapter->CurrentAddress, wrq->u.data.length);
++ break;
++
++ case RT_OID_802_11_MANUFACTURERNAME:
++ DBGPRINT(RT_DEBUG_TRACE, ("Query::RT_OID_802_11_MANUFACTURERNAME \n"));
++ wrq->u.data.length = strlen(ManufacturerNAME);
++ Status = copy_to_user(wrq->u.data.pointer, ManufacturerNAME, wrq->u.data.length);
++ break;
++
++ case RT_OID_802_11_RESOURCETYPEIDNAME:
++ DBGPRINT(RT_DEBUG_TRACE, ("Query::RT_OID_802_11_RESOURCETYPEIDNAME \n"));
++ wrq->u.data.length = strlen(ResourceTypeIdName);
++ Status = copy_to_user(wrq->u.data.pointer, ResourceTypeIdName, wrq->u.data.length);
++ break;
++
++ case RT_OID_802_11_PRIVACYOPTIONIMPLEMENTED:
++ DBGPRINT(RT_DEBUG_TRACE, ("Query::RT_OID_802_11_PRIVACYOPTIONIMPLEMENTED \n"));
++ ulInfo = 1; // 1 is support wep else 2 is not support.
++ wrq->u.data.length = sizeof(ulInfo);
++ Status = copy_to_user(wrq->u.data.pointer, &ulInfo, wrq->u.data.length);
++ break;
++
++ case RT_OID_802_11_POWERMANAGEMENTMODE:
++ DBGPRINT(RT_DEBUG_TRACE, ("Query::RT_OID_802_11_POWERMANAGEMENTMODE \n"));
++ if (pAdapter->StaCfg.Psm == PSMP_ACTION)
++ ulInfo = 1; // 1 is power active else 2 is power save.
++ else
++ ulInfo = 2;
++
++ wrq->u.data.length = sizeof(ulInfo);
++ Status = copy_to_user(wrq->u.data.pointer, &ulInfo, wrq->u.data.length);
++ break;
++
++ case OID_802_11_WEPDEFAULTKEYVALUE:
++ DBGPRINT(RT_DEBUG_TRACE, ("Query::OID_802_11_WEPDEFAULTKEYVALUE \n"));
++ //KeyIdxValue.KeyIdx = pAd->PortCfg.MBSSID[pAd->IoctlIF].DefaultKeyId;
++ pKeyIdxValue = wrq->u.data.pointer;
++ DBGPRINT(RT_DEBUG_TRACE,("KeyIdxValue.KeyIdx = %d, \n",pKeyIdxValue->KeyIdx));
++ valueLen = pAdapter->SharedKey[BSS0][pAdapter->StaCfg.DefaultKeyId].KeyLen;
++ NdisMoveMemory(pKeyIdxValue->Value,
++ &pAdapter->SharedKey[BSS0][pAdapter->StaCfg.DefaultKeyId].Key,
++ valueLen);
++ pKeyIdxValue->Value[valueLen]='\0';
++
++ wrq->u.data.length = sizeof(DefaultKeyIdxValue);
++
++ Status = copy_to_user(wrq->u.data.pointer, pKeyIdxValue, wrq->u.data.length);
++ DBGPRINT(RT_DEBUG_TRACE,("DefaultKeyId = %d, total len = %d, str len=%d, KeyValue= %02x %02x %02x %02x \n", pAdapter->StaCfg.DefaultKeyId, wrq->u.data.length, pAdapter->SharedKey[BSS0][pAdapter->StaCfg.DefaultKeyId].KeyLen,
++ pAdapter->SharedKey[BSS0][0].Key[0],
++ pAdapter->SharedKey[BSS0][1].Key[0],
++ pAdapter->SharedKey[BSS0][2].Key[0],
++ pAdapter->SharedKey[BSS0][3].Key[0]));
++ break;
++
++ case OID_802_11_WEPDEFAULTKEYID:
++ DBGPRINT(RT_DEBUG_TRACE, ("Query::RT_OID_802_11_WEPDEFAULTKEYID \n"));
++ wrq->u.data.length = sizeof(UCHAR);
++ Status = copy_to_user(wrq->u.data.pointer, &pAdapter->StaCfg.DefaultKeyId, wrq->u.data.length);
++ DBGPRINT(RT_DEBUG_TRACE, ("DefaultKeyId =%d \n", pAdapter->StaCfg.DefaultKeyId));
++ break;
++
++ case RT_OID_802_11_WEPKEYMAPPINGLENGTH:
++ DBGPRINT(RT_DEBUG_TRACE, ("Query::RT_OID_802_11_WEPKEYMAPPINGLENGTH \n"));
++ wrq->u.data.length = sizeof(UCHAR);
++ Status = copy_to_user(wrq->u.data.pointer,
++ &pAdapter->SharedKey[BSS0][pAdapter->StaCfg.DefaultKeyId].KeyLen,
++ wrq->u.data.length);
++ break;
++
++ case OID_802_11_SHORTRETRYLIMIT:
++ DBGPRINT(RT_DEBUG_TRACE, ("Query::OID_802_11_SHORTRETRYLIMIT \n"));
++ wrq->u.data.length = sizeof(ULONG);
++ RTMP_IO_READ32(pAdapter, TX_RTY_CFG, &tx_rty_cfg.word);
++ ShortRetryLimit = tx_rty_cfg.field.ShortRtyLimit;
++ DBGPRINT(RT_DEBUG_TRACE, ("ShortRetryLimit =%ld, tx_rty_cfg.field.ShortRetryLimit=%d\n", ShortRetryLimit, tx_rty_cfg.field.ShortRtyLimit));
++ Status = copy_to_user(wrq->u.data.pointer, &ShortRetryLimit, wrq->u.data.length);
++ break;
++
++ case OID_802_11_LONGRETRYLIMIT:
++ DBGPRINT(RT_DEBUG_TRACE, ("Query::OID_802_11_LONGRETRYLIMIT \n"));
++ wrq->u.data.length = sizeof(ULONG);
++ RTMP_IO_READ32(pAdapter, TX_RTY_CFG, &tx_rty_cfg.word);
++ LongRetryLimit = tx_rty_cfg.field.LongRtyLimit;
++ DBGPRINT(RT_DEBUG_TRACE, ("LongRetryLimit =%ld, tx_rty_cfg.field.LongRtyLimit=%d\n", LongRetryLimit, tx_rty_cfg.field.LongRtyLimit));
++ Status = copy_to_user(wrq->u.data.pointer, &LongRetryLimit, wrq->u.data.length);
++ break;
++
++ case RT_OID_802_11_PRODUCTID:
++ DBGPRINT(RT_DEBUG_TRACE, ("Query::RT_OID_802_11_PRODUCTID \n"));
++
++#ifdef RT2870
++ sprintf(tmp, "%04x %04x\n", ((POS_COOKIE)pAdapter->OS_Cookie)->pUsb_Dev->descriptor.idVendor ,((POS_COOKIE)pAdapter->OS_Cookie)->pUsb_Dev->descriptor.idProduct);
++
++#endif // RT2870 //
++ wrq->u.data.length = strlen(tmp);
++ Status = copy_to_user(wrq->u.data.pointer, tmp, wrq->u.data.length);
++ break;
++
++ case RT_OID_802_11_MANUFACTUREID:
++ DBGPRINT(RT_DEBUG_TRACE, ("Query::RT_OID_802_11_MANUFACTUREID \n"));
++ wrq->u.data.length = strlen(ManufacturerNAME);
++ Status = copy_to_user(wrq->u.data.pointer, ManufacturerNAME, wrq->u.data.length);
++ break;
++
++ case OID_802_11_CURRENTCHANNEL:
++ DBGPRINT(RT_DEBUG_TRACE, ("Query::OID_802_11_CURRENTCHANNEL \n"));
++ wrq->u.data.length = sizeof(UCHAR);
++ DBGPRINT(RT_DEBUG_TRACE, ("sizeof UCHAR=%d, channel=%d \n", sizeof(UCHAR), pAdapter->CommonCfg.Channel));
++ Status = copy_to_user(wrq->u.data.pointer, &pAdapter->CommonCfg.Channel, wrq->u.data.length);
++ DBGPRINT(RT_DEBUG_TRACE, ("Status=%d\n", Status));
++ break;
++#endif //SNMP_SUPPORT
++
++ case OID_802_11_BUILD_CHANNEL_EX:
++ {
++ UCHAR value;
++ DBGPRINT(RT_DEBUG_TRACE, ("Query::OID_802_11_BUILD_CHANNEL_EX \n"));
++ wrq->u.data.length = sizeof(UCHAR);
++#ifdef EXT_BUILD_CHANNEL_LIST
++ DBGPRINT(RT_DEBUG_TRACE, ("Support EXT_BUILD_CHANNEL_LIST.\n"));
++ value = 1;
++#else
++ DBGPRINT(RT_DEBUG_TRACE, ("Doesn't support EXT_BUILD_CHANNEL_LIST.\n"));
++ value = 0;
++#endif // EXT_BUILD_CHANNEL_LIST //
++ Status = copy_to_user(wrq->u.data.pointer, &value, 1);
++ DBGPRINT(RT_DEBUG_TRACE, ("Status=%d\n", Status));
++ }
++ break;
++
++ case OID_802_11_GET_CH_LIST:
++ {
++ PRT_CHANNEL_LIST_INFO pChListBuf;
++
++ DBGPRINT(RT_DEBUG_TRACE, ("Query::OID_802_11_GET_CH_LIST \n"));
++ if (pAdapter->ChannelListNum == 0)
++ {
++ wrq->u.data.length = 0;
++ break;
++ }
++
++ pChListBuf = (RT_CHANNEL_LIST_INFO *) kmalloc(sizeof(RT_CHANNEL_LIST_INFO), MEM_ALLOC_FLAG);
++ if (pChListBuf == NULL)
++ {
++ wrq->u.data.length = 0;
++ break;
++ }
++
++ pChListBuf->ChannelListNum = pAdapter->ChannelListNum;
++ for (i = 0; i < pChListBuf->ChannelListNum; i++)
++ pChListBuf->ChannelList[i] = pAdapter->ChannelList[i].Channel;
++
++ wrq->u.data.length = sizeof(RT_CHANNEL_LIST_INFO);
++ Status = copy_to_user(wrq->u.data.pointer, pChListBuf, sizeof(RT_CHANNEL_LIST_INFO));
++ DBGPRINT(RT_DEBUG_TRACE, ("Status=%d\n", Status));
++
++ if (pChListBuf)
++ kfree(pChListBuf);
++ }
++ break;
++
++ case OID_802_11_GET_COUNTRY_CODE:
++ DBGPRINT(RT_DEBUG_TRACE, ("Query::OID_802_11_GET_COUNTRY_CODE \n"));
++ wrq->u.data.length = 2;
++ Status = copy_to_user(wrq->u.data.pointer, &pAdapter->CommonCfg.CountryCode, 2);
++ DBGPRINT(RT_DEBUG_TRACE, ("Status=%d\n", Status));
++ break;
++
++ case OID_802_11_GET_CHANNEL_GEOGRAPHY:
++ DBGPRINT(RT_DEBUG_TRACE, ("Query::OID_802_11_GET_CHANNEL_GEOGRAPHY \n"));
++ wrq->u.data.length = 1;
++ Status = copy_to_user(wrq->u.data.pointer, &pAdapter->CommonCfg.Geography, 1);
++ DBGPRINT(RT_DEBUG_TRACE, ("Status=%d\n", Status));
++ break;
++
++
++#ifdef QOS_DLS_SUPPORT
++ case RT_OID_802_11_QUERY_DLS:
++ wrq->u.data.length = sizeof(BOOLEAN);
++ Status = copy_to_user(wrq->u.data.pointer, &pAdapter->CommonCfg.bDLSCapable, wrq->u.data.length);
++ DBGPRINT(RT_DEBUG_TRACE, ("Query::RT_OID_802_11_QUERY_DLS(=%d)\n", pAdapter->CommonCfg.bDLSCapable));
++ break;
++
++ case RT_OID_802_11_QUERY_DLS_PARAM:
++ {
++ PRT_802_11_DLS_INFO pDlsInfo = kmalloc(sizeof(RT_802_11_DLS_INFO), GFP_ATOMIC);
++ if (pDlsInfo == NULL)
++ break;
++
++ for (i=0; i<MAX_NUM_OF_DLS_ENTRY; i++)
++ {
++ RTMPMoveMemory(&pDlsInfo->Entry[i], &pAdapter->StaCfg.DLSEntry[i], sizeof(RT_802_11_DLS_UI));
++ }
++
++ pDlsInfo->num = MAX_NUM_OF_DLS_ENTRY;
++ wrq->u.data.length = sizeof(RT_802_11_DLS_INFO);
++ Status = copy_to_user(wrq->u.data.pointer, pDlsInfo, wrq->u.data.length);
++ DBGPRINT(RT_DEBUG_TRACE, ("Query::RT_OID_802_11_QUERY_DLS_PARAM\n"));
++
++ if (pDlsInfo)
++ kfree(pDlsInfo);
++ }
++ break;
++#endif // QOS_DLS_SUPPORT //
++ default:
++ DBGPRINT(RT_DEBUG_TRACE, ("Query::unknown IOCTL's subcmd = 0x%08x\n", cmd));
++ Status = -EOPNOTSUPP;
++ break;
++ }
++ return Status;
++}
++
++INT rt28xx_sta_ioctl(
++ IN struct net_device *net_dev,
++ IN OUT struct ifreq *rq,
++ IN INT cmd)
++{
++ POS_COOKIE pObj;
++ VIRTUAL_ADAPTER *pVirtualAd = NULL;
++ RTMP_ADAPTER *pAd = NULL;
++ struct iwreq *wrq = (struct iwreq *) rq;
++ BOOLEAN StateMachineTouched = FALSE;
++ INT Status = NDIS_STATUS_SUCCESS;
++ USHORT subcmd;
++
++ if (net_dev->priv_flags == INT_MAIN)
++ {
++ pAd = net_dev->priv;
++ }
++ else
++ {
++ pVirtualAd = net_dev->priv;
++ pAd = pVirtualAd->RtmpDev->priv;
++ }
++ pObj = (POS_COOKIE) pAd->OS_Cookie;
++
++ if (pAd == NULL)
++ {
++ /* if 1st open fail, pAd will be free;
++ So the net_dev->priv will be NULL in 2rd open */
++ return -ENETDOWN;
++ }
++
++ //check if the interface is down
++ if(!RTMP_TEST_FLAG(pAd, fRTMP_ADAPTER_INTERRUPT_IN_USE))
++ {
++#ifdef CONFIG_APSTA_MIXED_SUPPORT
++ if (wrq->u.data.pointer == NULL)
++ {
++ return Status;
++ }
++
++ if (strstr(wrq->u.data.pointer, "OpMode") == NULL)
++#endif // CONFIG_APSTA_MIXED_SUPPORT //
++ {
++ DBGPRINT(RT_DEBUG_TRACE, ("INFO::Network is down!\n"));
++ return -ENETDOWN;
++ }
++ }
++
++ { // determine this ioctl command is comming from which interface.
++ pObj->ioctl_if_type = INT_MAIN;
++ pObj->ioctl_if = MAIN_MBSSID;
++ }
++
++ switch(cmd)
++ {
++#ifdef RALINK_ATE
++#ifdef RALINK_28xx_QA
++ case RTPRIV_IOCTL_ATE:
++ {
++ RtmpDoAte(pAd, wrq);
++ }
++ break;
++#endif // RALINK_28xx_QA //
++#endif // RALINK_ATE //
++ case SIOCGIFHWADDR:
++ DBGPRINT(RT_DEBUG_TRACE, ("IOCTL::SIOCGIFHWADDR\n"));
++ memcpy(wrq->u.name, pAd->CurrentAddress, ETH_ALEN);
++ break;
++ case SIOCGIWNAME:
++ {
++ char *name=&wrq->u.name[0];
++ rt_ioctl_giwname(net_dev, NULL, name, NULL);
++ break;
++ }
++ case SIOCGIWESSID: //Get ESSID
++ {
++ struct iw_point *essid=&wrq->u.essid;
++ rt_ioctl_giwessid(net_dev, NULL, essid, essid->pointer);
++ break;
++ }
++ case SIOCSIWESSID: //Set ESSID
++ {
++ struct iw_point *essid=&wrq->u.essid;
++ rt_ioctl_siwessid(net_dev, NULL, essid, essid->pointer);
++ break;
++ }
++ case SIOCSIWNWID: // set network id (the cell)
++ case SIOCGIWNWID: // get network id
++ Status = -EOPNOTSUPP;
++ break;
++ case SIOCSIWFREQ: //set channel/frequency (Hz)
++ {
++ struct iw_freq *freq=&wrq->u.freq;
++ rt_ioctl_siwfreq(net_dev, NULL, freq, NULL);
++ break;
++ }
++ case SIOCGIWFREQ: // get channel/frequency (Hz)
++ {
++ struct iw_freq *freq=&wrq->u.freq;
++ rt_ioctl_giwfreq(net_dev, NULL, freq, NULL);
++ break;
++ }
++ case SIOCSIWNICKN: //set node name/nickname
++ {
++ struct iw_point *data=&wrq->u.data;
++ rt_ioctl_siwnickn(net_dev, NULL, data, NULL);
++ break;
++ }
++ case SIOCGIWNICKN: //get node name/nickname
++ {
++ struct iw_point *data=&wrq->u.data;
++ rt_ioctl_giwnickn(net_dev, NULL, data, NULL);
++ break;
++ }
++ case SIOCGIWRATE: //get default bit rate (bps)
++ rt_ioctl_giwrate(net_dev, NULL, &wrq->u, NULL);
++ break;
++ case SIOCSIWRATE: //set default bit rate (bps)
++ rt_ioctl_siwrate(net_dev, NULL, &wrq->u, NULL);
++ break;
++ case SIOCGIWRTS: // get RTS/CTS threshold (bytes)
++ {
++ struct iw_param *rts=&wrq->u.rts;
++ rt_ioctl_giwrts(net_dev, NULL, rts, NULL);
++ break;
++ }
++ case SIOCSIWRTS: //set RTS/CTS threshold (bytes)
++ {
++ struct iw_param *rts=&wrq->u.rts;
++ rt_ioctl_siwrts(net_dev, NULL, rts, NULL);
++ break;
++ }
++ case SIOCGIWFRAG: //get fragmentation thr (bytes)
++ {
++ struct iw_param *frag=&wrq->u.frag;
++ rt_ioctl_giwfrag(net_dev, NULL, frag, NULL);
++ break;
++ }
++ case SIOCSIWFRAG: //set fragmentation thr (bytes)
++ {
++ struct iw_param *frag=&wrq->u.frag;
++ rt_ioctl_siwfrag(net_dev, NULL, frag, NULL);
++ break;
++ }
++ case SIOCGIWENCODE: //get encoding token & mode
++ {
++ struct iw_point *erq=&wrq->u.encoding;
++ if(erq->pointer)
++ rt_ioctl_giwencode(net_dev, NULL, erq, erq->pointer);
++ break;
++ }
++ case SIOCSIWENCODE: //set encoding token & mode
++ {
++ struct iw_point *erq=&wrq->u.encoding;
++ if(erq->pointer)
++ rt_ioctl_siwencode(net_dev, NULL, erq, erq->pointer);
++ break;
++ }
++ case SIOCGIWAP: //get access point MAC addresses
++ {
++ struct sockaddr *ap_addr=&wrq->u.ap_addr;
++ rt_ioctl_giwap(net_dev, NULL, ap_addr, ap_addr->sa_data);
++ break;
++ }
++ case SIOCSIWAP: //set access point MAC addresses
++ {
++ struct sockaddr *ap_addr=&wrq->u.ap_addr;
++ rt_ioctl_siwap(net_dev, NULL, ap_addr, ap_addr->sa_data);
++ break;
++ }
++ case SIOCGIWMODE: //get operation mode
++ {
++ __u32 *mode=&wrq->u.mode;
++ rt_ioctl_giwmode(net_dev, NULL, mode, NULL);
++ break;
++ }
++ case SIOCSIWMODE: //set operation mode
++ {
++ __u32 *mode=&wrq->u.mode;
++ rt_ioctl_siwmode(net_dev, NULL, mode, NULL);
++ break;
++ }
++ case SIOCGIWSENS: //get sensitivity (dBm)
++ case SIOCSIWSENS: //set sensitivity (dBm)
++ case SIOCGIWPOWER: //get Power Management settings
++ case SIOCSIWPOWER: //set Power Management settings
++ case SIOCGIWTXPOW: //get transmit power (dBm)
++ case SIOCSIWTXPOW: //set transmit power (dBm)
++ case SIOCGIWRANGE: //Get range of parameters
++ case SIOCGIWRETRY: //get retry limits and lifetime
++ case SIOCSIWRETRY: //set retry limits and lifetime
++ Status = -EOPNOTSUPP;
++ break;
++ case RT_PRIV_IOCTL:
++ subcmd = wrq->u.data.flags;
++ if( subcmd & OID_GET_SET_TOGGLE)
++ Status = RTMPSetInformation(pAd, rq, subcmd);
++ else
++ Status = RTMPQueryInformation(pAd, rq, subcmd);
++ break;
++ case SIOCGIWPRIV:
++ if (wrq->u.data.pointer)
++ {
++ if ( access_ok(VERIFY_WRITE, wrq->u.data.pointer, sizeof(privtab)) != TRUE)
++ break;
++ wrq->u.data.length = sizeof(privtab) / sizeof(privtab[0]);
++ if (copy_to_user(wrq->u.data.pointer, privtab, sizeof(privtab)))
++ Status = -EFAULT;
++ }
++ break;
++ case RTPRIV_IOCTL_SET:
++ if(access_ok(VERIFY_READ, wrq->u.data.pointer, wrq->u.data.length) != TRUE)
++ break;
++ rt_ioctl_setparam(net_dev, NULL, NULL, wrq->u.data.pointer);
++ break;
++ case RTPRIV_IOCTL_GSITESURVEY:
++ RTMPIoctlGetSiteSurvey(pAd, wrq);
++ break;
++#ifdef DBG
++ case RTPRIV_IOCTL_MAC:
++ RTMPIoctlMAC(pAd, wrq);
++ break;
++ case RTPRIV_IOCTL_E2P:
++ RTMPIoctlE2PROM(pAd, wrq);
++ break;
++#endif // DBG //
++ case SIOCETHTOOL:
++ break;
++ default:
++ DBGPRINT(RT_DEBUG_ERROR, ("IOCTL::unknown IOCTL's cmd = 0x%08x\n", cmd));
++ Status = -EOPNOTSUPP;
++ break;
++ }
++
++ if(StateMachineTouched) // Upper layer sent a MLME-related operations
++ RT28XX_MLME_HANDLER(pAd);
++
++ return Status;
++}
++
++/*
++ ==========================================================================
++ Description:
++ Set SSID
++ Return:
++ TRUE if all parameters are OK, FALSE otherwise
++ ==========================================================================
++*/
++INT Set_SSID_Proc(
++ IN PRTMP_ADAPTER pAdapter,
++ IN PUCHAR arg)
++{
++ NDIS_802_11_SSID Ssid, *pSsid=NULL;
++ BOOLEAN StateMachineTouched = FALSE;
++ int success = TRUE;
++
++ if( strlen(arg) <= MAX_LEN_OF_SSID)
++ {
++ NdisZeroMemory(&Ssid, sizeof(NDIS_802_11_SSID));
++ if (strlen(arg) != 0)
++ {
++ NdisMoveMemory(Ssid.Ssid, arg, strlen(arg));
++ Ssid.SsidLength = strlen(arg);
++ }
++ else //ANY ssid
++ {
++ Ssid.SsidLength = 0;
++ memcpy(Ssid.Ssid, "", 0);
++ pAdapter->StaCfg.BssType = BSS_INFRA;
++ pAdapter->StaCfg.AuthMode = Ndis802_11AuthModeOpen;
++ pAdapter->StaCfg.WepStatus = Ndis802_11EncryptionDisabled;
++ }
++ pSsid = &Ssid;
++
++ if (pAdapter->Mlme.CntlMachine.CurrState != CNTL_IDLE)
++ {
++ RT28XX_MLME_RESET_STATE_MACHINE(pAdapter);
++ DBGPRINT(RT_DEBUG_TRACE, ("!!! MLME busy, reset MLME state machine !!!\n"));
++ }
++
++ pAdapter->MlmeAux.CurrReqIsFromNdis = TRUE;
++ pAdapter->StaCfg.bScanReqIsFromWebUI = FALSE;
++ pAdapter->bConfigChanged = TRUE;
++
++ MlmeEnqueue(pAdapter,
++ MLME_CNTL_STATE_MACHINE,
++ OID_802_11_SSID,
++ sizeof(NDIS_802_11_SSID),
++ (VOID *)pSsid);
++
++ StateMachineTouched = TRUE;
++ DBGPRINT(RT_DEBUG_TRACE, ("Set_SSID_Proc::(Len=%d,Ssid=%s)\n", Ssid.SsidLength, Ssid.Ssid));
++ }
++ else
++ success = FALSE;
++
++ if (StateMachineTouched) // Upper layer sent a MLME-related operations
++ RT28XX_MLME_HANDLER(pAdapter);
++
++ return success;
++}
++
++#ifdef WMM_SUPPORT
++/*
++ ==========================================================================
++ Description:
++ Set WmmCapable Enable or Disable
++ Return:
++ TRUE if all parameters are OK, FALSE otherwise
++ ==========================================================================
++*/
++INT Set_WmmCapable_Proc(
++ IN PRTMP_ADAPTER pAd,
++ IN PUCHAR arg)
++{
++ BOOLEAN bWmmCapable;
++
++ bWmmCapable = simple_strtol(arg, 0, 10);
++
++ if ((bWmmCapable == 1)
++#ifdef RT2870
++ && (pAd->NumberOfPipes >= 5)
++#endif // RT2870 //
++ )
++ pAd->CommonCfg.bWmmCapable = TRUE;
++ else if (bWmmCapable == 0)
++ pAd->CommonCfg.bWmmCapable = FALSE;
++ else
++ return FALSE; //Invalid argument
++
++ DBGPRINT(RT_DEBUG_TRACE, ("Set_WmmCapable_Proc::(bWmmCapable=%d)\n",
++ pAd->CommonCfg.bWmmCapable));
++
++ return TRUE;
++}
++#endif // WMM_SUPPORT //
++
++/*
++ ==========================================================================
++ Description:
++ Set Network Type(Infrastructure/Adhoc mode)
++ Return:
++ TRUE if all parameters are OK, FALSE otherwise
++ ==========================================================================
++*/
++INT Set_NetworkType_Proc(
++ IN PRTMP_ADAPTER pAdapter,
++ IN PUCHAR arg)
++{
++ UINT32 Value = 0;
++
++ if (strcmp(arg, "Adhoc") == 0)
++ {
++ if (pAdapter->StaCfg.BssType != BSS_ADHOC)
++ {
++ // Config has changed
++ pAdapter->bConfigChanged = TRUE;
++ if (MONITOR_ON(pAdapter))
++ {
++ RTMP_IO_WRITE32(pAdapter, RX_FILTR_CFG, STANORMAL);
++ RTMP_IO_READ32(pAdapter, MAC_SYS_CTRL, &Value);
++ Value &= (~0x80);
++ RTMP_IO_WRITE32(pAdapter, MAC_SYS_CTRL, Value);
++ OPSTATUS_CLEAR_FLAG(pAdapter, fOP_STATUS_MEDIA_STATE_CONNECTED);
++ pAdapter->StaCfg.bAutoReconnect = TRUE;
++ LinkDown(pAdapter, FALSE);
++ }
++ if (INFRA_ON(pAdapter))
++ {
++ //BOOLEAN Cancelled;
++ // Set the AutoReconnectSsid to prevent it reconnect to old SSID
++ // Since calling this indicate user don't want to connect to that SSID anymore.
++ pAdapter->MlmeAux.AutoReconnectSsidLen= 32;
++ NdisZeroMemory(pAdapter->MlmeAux.AutoReconnectSsid, pAdapter->MlmeAux.AutoReconnectSsidLen);
++
++ LinkDown(pAdapter, FALSE);
++
++ DBGPRINT(RT_DEBUG_TRACE, ("NDIS_STATUS_MEDIA_DISCONNECT Event BB!\n"));
++ }
++ }
++ pAdapter->StaCfg.BssType = BSS_ADHOC;
++ pAdapter->net_dev->type = pAdapter->StaCfg.OriDevType;
++ DBGPRINT(RT_DEBUG_TRACE, ("===>Set_NetworkType_Proc::(AD-HOC)\n"));
++ }
++ else if (strcmp(arg, "Infra") == 0)
++ {
++ if (pAdapter->StaCfg.BssType != BSS_INFRA)
++ {
++ // Config has changed
++ pAdapter->bConfigChanged = TRUE;
++ if (MONITOR_ON(pAdapter))
++ {
++ RTMP_IO_WRITE32(pAdapter, RX_FILTR_CFG, STANORMAL);
++ RTMP_IO_READ32(pAdapter, MAC_SYS_CTRL, &Value);
++ Value &= (~0x80);
++ RTMP_IO_WRITE32(pAdapter, MAC_SYS_CTRL, Value);
++ OPSTATUS_CLEAR_FLAG(pAdapter, fOP_STATUS_MEDIA_STATE_CONNECTED);
++ pAdapter->StaCfg.bAutoReconnect = TRUE;
++ LinkDown(pAdapter, FALSE);
++ }
++ if (ADHOC_ON(pAdapter))
++ {
++ // Set the AutoReconnectSsid to prevent it reconnect to old SSID
++ // Since calling this indicate user don't want to connect to that SSID anymore.
++ pAdapter->MlmeAux.AutoReconnectSsidLen= 32;
++ NdisZeroMemory(pAdapter->MlmeAux.AutoReconnectSsid, pAdapter->MlmeAux.AutoReconnectSsidLen);
++
++ LinkDown(pAdapter, FALSE);
++ }
++ }
++ pAdapter->StaCfg.BssType = BSS_INFRA;
++ pAdapter->net_dev->type = pAdapter->StaCfg.OriDevType;
++ DBGPRINT(RT_DEBUG_TRACE, ("===>Set_NetworkType_Proc::(INFRA)\n"));
++
++ pAdapter->StaCfg.BssType = BSS_INFRA;
++ }
++ else if (strcmp(arg, "Monitor") == 0)
++ {
++ UCHAR bbpValue = 0;
++ BCN_TIME_CFG_STRUC csr;
++ OPSTATUS_CLEAR_FLAG(pAdapter, fOP_STATUS_INFRA_ON);
++ OPSTATUS_CLEAR_FLAG(pAdapter, fOP_STATUS_ADHOC_ON);
++ OPSTATUS_SET_FLAG(pAdapter, fOP_STATUS_MEDIA_STATE_CONNECTED);
++ // disable all periodic state machine
++ pAdapter->StaCfg.bAutoReconnect = FALSE;
++ // reset all mlme state machine
++ RT28XX_MLME_RESET_STATE_MACHINE(pAdapter);
++ DBGPRINT(RT_DEBUG_TRACE, ("fOP_STATUS_MEDIA_STATE_CONNECTED \n"));
++ if (pAdapter->CommonCfg.CentralChannel == 0)
++ {
++#ifdef DOT11_N_SUPPORT
++ if (pAdapter->CommonCfg.PhyMode == PHY_11AN_MIXED)
++ pAdapter->CommonCfg.CentralChannel = 36;
++ else
++#endif // DOT11_N_SUPPORT //
++ pAdapter->CommonCfg.CentralChannel = 6;
++ }
++#ifdef DOT11_N_SUPPORT
++ else
++ N_ChannelCheck(pAdapter);
++#endif // DOT11_N_SUPPORT //
++
++#ifdef DOT11_N_SUPPORT
++ if (pAdapter->CommonCfg.PhyMode >= PHY_11ABGN_MIXED &&
++ pAdapter->CommonCfg.RegTransmitSetting.field.BW == BW_40 &&
++ pAdapter->CommonCfg.RegTransmitSetting.field.EXTCHA == EXTCHA_ABOVE)
++ {
++ // 40MHz ,control channel at lower
++ RTMP_BBP_IO_READ8_BY_REG_ID(pAdapter, BBP_R4, &bbpValue);
++ bbpValue &= (~0x18);
++ bbpValue |= 0x10;
++ RTMP_BBP_IO_WRITE8_BY_REG_ID(pAdapter, BBP_R4, bbpValue);
++ pAdapter->CommonCfg.BBPCurrentBW = BW_40;
++ // RX : control channel at lower
++ RTMP_BBP_IO_READ8_BY_REG_ID(pAdapter, BBP_R3, &bbpValue);
++ bbpValue &= (~0x20);
++ RTMP_BBP_IO_WRITE8_BY_REG_ID(pAdapter, BBP_R3, bbpValue);
++
++ RTMP_IO_READ32(pAdapter, TX_BAND_CFG, &Value);
++ Value &= 0xfffffffe;
++ RTMP_IO_WRITE32(pAdapter, TX_BAND_CFG, Value);
++ pAdapter->CommonCfg.CentralChannel = pAdapter->CommonCfg.Channel + 2;
++ AsicSwitchChannel(pAdapter, pAdapter->CommonCfg.CentralChannel, FALSE);
++ AsicLockChannel(pAdapter, pAdapter->CommonCfg.CentralChannel);
++ DBGPRINT(RT_DEBUG_TRACE, ("BW_40 ,control_channel(%d), CentralChannel(%d) \n",
++ pAdapter->CommonCfg.Channel,
++ pAdapter->CommonCfg.CentralChannel));
++ }
++ else if (pAdapter->CommonCfg.PhyMode >= PHY_11ABGN_MIXED &&
++ pAdapter->CommonCfg.RegTransmitSetting.field.BW == BW_40 &&
++ pAdapter->CommonCfg.RegTransmitSetting.field.EXTCHA == EXTCHA_BELOW)
++ {
++ // 40MHz ,control channel at upper
++ RTMP_BBP_IO_READ8_BY_REG_ID(pAdapter, BBP_R4, &bbpValue);
++ bbpValue &= (~0x18);
++ bbpValue |= 0x10;
++ RTMP_BBP_IO_WRITE8_BY_REG_ID(pAdapter, BBP_R4, bbpValue);
++ pAdapter->CommonCfg.BBPCurrentBW = BW_40;
++ RTMP_IO_READ32(pAdapter, TX_BAND_CFG, &Value);
++ Value |= 0x1;
++ RTMP_IO_WRITE32(pAdapter, TX_BAND_CFG, Value);
++
++ RTMP_BBP_IO_READ8_BY_REG_ID(pAdapter, BBP_R3, &bbpValue);
++ bbpValue |= (0x20);
++ RTMP_BBP_IO_WRITE8_BY_REG_ID(pAdapter, BBP_R3, bbpValue);
++ pAdapter->CommonCfg.CentralChannel = pAdapter->CommonCfg.Channel - 2;
++ AsicSwitchChannel(pAdapter, pAdapter->CommonCfg.CentralChannel, FALSE);
++ AsicLockChannel(pAdapter, pAdapter->CommonCfg.CentralChannel);
++ DBGPRINT(RT_DEBUG_TRACE, ("BW_40 ,control_channel(%d), CentralChannel(%d) \n",
++ pAdapter->CommonCfg.Channel,
++ pAdapter->CommonCfg.CentralChannel));
++ }
++ else
++#endif // DOT11_N_SUPPORT //
++ {
++ // 20MHz
++ RTMP_BBP_IO_READ8_BY_REG_ID(pAdapter, BBP_R4, &bbpValue);
++ bbpValue &= (~0x18);
++ RTMP_BBP_IO_WRITE8_BY_REG_ID(pAdapter, BBP_R4, bbpValue);
++ pAdapter->CommonCfg.BBPCurrentBW = BW_20;
++ AsicSwitchChannel(pAdapter, pAdapter->CommonCfg.Channel, FALSE);
++ AsicLockChannel(pAdapter, pAdapter->CommonCfg.Channel);
++ DBGPRINT(RT_DEBUG_TRACE, ("BW_20, Channel(%d)\n", pAdapter->CommonCfg.Channel));
++ }
++ // Enable Rx with promiscuous reception
++ RTMP_IO_WRITE32(pAdapter, RX_FILTR_CFG, 0x3);
++ // ASIC supporsts sniffer function with replacing RSSI with timestamp.
++ //RTMP_IO_READ32(pAdapter, MAC_SYS_CTRL, &Value);
++ //Value |= (0x80);
++ //RTMP_IO_WRITE32(pAdapter, MAC_SYS_CTRL, Value);
++ // disable sync
++ RTMP_IO_READ32(pAdapter, BCN_TIME_CFG, &csr.word);
++ csr.field.bBeaconGen = 0;
++ csr.field.bTBTTEnable = 0;
++ csr.field.TsfSyncMode = 0;
++ RTMP_IO_WRITE32(pAdapter, BCN_TIME_CFG, csr.word);
++
++ pAdapter->StaCfg.BssType = BSS_MONITOR;
++ pAdapter->net_dev->type = ARPHRD_IEEE80211_PRISM; //ARPHRD_IEEE80211; // IEEE80211
++ DBGPRINT(RT_DEBUG_TRACE, ("===>Set_NetworkType_Proc::(MONITOR)\n"));
++ }
++
++ // Reset Ralink supplicant to not use, it will be set to start when UI set PMK key
++ pAdapter->StaCfg.WpaState = SS_NOTUSE;
++
++ DBGPRINT(RT_DEBUG_TRACE, ("Set_NetworkType_Proc::(NetworkType=%d)\n", pAdapter->StaCfg.BssType));
++
++ return TRUE;
++}
++
++/*
++ ==========================================================================
++ Description:
++ Set Authentication mode
++ Return:
++ TRUE if all parameters are OK, FALSE otherwise
++ ==========================================================================
++*/
++INT Set_AuthMode_Proc(
++ IN PRTMP_ADAPTER pAdapter,
++ IN PUCHAR arg)
++{
++ if ((strcmp(arg, "WEPAUTO") == 0) || (strcmp(arg, "wepauto") == 0))
++ pAdapter->StaCfg.AuthMode = Ndis802_11AuthModeAutoSwitch;
++ else if ((strcmp(arg, "OPEN") == 0) || (strcmp(arg, "open") == 0))
++ pAdapter->StaCfg.AuthMode = Ndis802_11AuthModeOpen;
++ else if ((strcmp(arg, "SHARED") == 0) || (strcmp(arg, "shared") == 0))
++ pAdapter->StaCfg.AuthMode = Ndis802_11AuthModeShared;
++ else if ((strcmp(arg, "WPAPSK") == 0) || (strcmp(arg, "wpapsk") == 0))
++ pAdapter->StaCfg.AuthMode = Ndis802_11AuthModeWPAPSK;
++ else if ((strcmp(arg, "WPANONE") == 0) || (strcmp(arg, "wpanone") == 0))
++ pAdapter->StaCfg.AuthMode = Ndis802_11AuthModeWPANone;
++ else if ((strcmp(arg, "WPA2PSK") == 0) || (strcmp(arg, "wpa2psk") == 0))
++ pAdapter->StaCfg.AuthMode = Ndis802_11AuthModeWPA2PSK;
++#ifdef WPA_SUPPLICANT_SUPPORT
++ else if ((strcmp(arg, "WPA") == 0) || (strcmp(arg, "wpa") == 0))
++ pAdapter->StaCfg.AuthMode = Ndis802_11AuthModeWPA;
++ else if ((strcmp(arg, "WPA2") == 0) || (strcmp(arg, "wpa2") == 0))
++ pAdapter->StaCfg.AuthMode = Ndis802_11AuthModeWPA2;
++#endif // WPA_SUPPLICANT_SUPPORT //
++ else
++ return FALSE;
++
++ pAdapter->StaCfg.PortSecured = WPA_802_1X_PORT_NOT_SECURED;
++
++ DBGPRINT(RT_DEBUG_TRACE, ("Set_AuthMode_Proc::(AuthMode=%d)\n", pAdapter->StaCfg.AuthMode));
++
++ return TRUE;
++}
++
++/*
++ ==========================================================================
++ Description:
++ Set Encryption Type
++ Return:
++ TRUE if all parameters are OK, FALSE otherwise
++ ==========================================================================
++*/
++INT Set_EncrypType_Proc(
++ IN PRTMP_ADAPTER pAdapter,
++ IN PUCHAR arg)
++{
++ if ((strcmp(arg, "NONE") == 0) || (strcmp(arg, "none") == 0))
++ {
++ if (pAdapter->StaCfg.AuthMode >= Ndis802_11AuthModeWPA)
++ return TRUE; // do nothing
++
++ pAdapter->StaCfg.WepStatus = Ndis802_11WEPDisabled;
++ pAdapter->StaCfg.PairCipher = Ndis802_11WEPDisabled;
++ pAdapter->StaCfg.GroupCipher = Ndis802_11WEPDisabled;
++ }
++ else if ((strcmp(arg, "WEP") == 0) || (strcmp(arg, "wep") == 0))
++ {
++ if (pAdapter->StaCfg.AuthMode >= Ndis802_11AuthModeWPA)
++ return TRUE; // do nothing
++
++ pAdapter->StaCfg.WepStatus = Ndis802_11WEPEnabled;
++ pAdapter->StaCfg.PairCipher = Ndis802_11WEPEnabled;
++ pAdapter->StaCfg.GroupCipher = Ndis802_11WEPEnabled;
++ }
++ else if ((strcmp(arg, "TKIP") == 0) || (strcmp(arg, "tkip") == 0))
++ {
++ if (pAdapter->StaCfg.AuthMode < Ndis802_11AuthModeWPA)
++ return TRUE; // do nothing
++
++ pAdapter->StaCfg.WepStatus = Ndis802_11Encryption2Enabled;
++ pAdapter->StaCfg.PairCipher = Ndis802_11Encryption2Enabled;
++ pAdapter->StaCfg.GroupCipher = Ndis802_11Encryption2Enabled;
++ }
++ else if ((strcmp(arg, "AES") == 0) || (strcmp(arg, "aes") == 0))
++ {
++ if (pAdapter->StaCfg.AuthMode < Ndis802_11AuthModeWPA)
++ return TRUE; // do nothing
++
++ pAdapter->StaCfg.WepStatus = Ndis802_11Encryption3Enabled;
++ pAdapter->StaCfg.PairCipher = Ndis802_11Encryption3Enabled;
++ pAdapter->StaCfg.GroupCipher = Ndis802_11Encryption3Enabled;
++ }
++ else
++ return FALSE;
++
++ pAdapter->StaCfg.OrigWepStatus = pAdapter->StaCfg.WepStatus;
++
++ DBGPRINT(RT_DEBUG_TRACE, ("Set_EncrypType_Proc::(EncrypType=%d)\n", pAdapter->StaCfg.WepStatus));
++
++ return TRUE;
++}
++
++/*
++ ==========================================================================
++ Description:
++ Set Default Key ID
++ Return:
++ TRUE if all parameters are OK, FALSE otherwise
++ ==========================================================================
++*/
++INT Set_DefaultKeyID_Proc(
++ IN PRTMP_ADAPTER pAdapter,
++ IN PUCHAR arg)
++{
++ ULONG KeyIdx;
++
++ KeyIdx = simple_strtol(arg, 0, 10);
++ if((KeyIdx >= 1 ) && (KeyIdx <= 4))
++ pAdapter->StaCfg.DefaultKeyId = (UCHAR) (KeyIdx - 1 );
++ else
++ return FALSE; //Invalid argument
++
++ DBGPRINT(RT_DEBUG_TRACE, ("Set_DefaultKeyID_Proc::(DefaultKeyID=%d)\n", pAdapter->StaCfg.DefaultKeyId));
++
++ return TRUE;
++}
++
++/*
++ ==========================================================================
++ Description:
++ Set WEP KEY1
++ Return:
++ TRUE if all parameters are OK, FALSE otherwise
++ ==========================================================================
++*/
++INT Set_Key1_Proc(
++ IN PRTMP_ADAPTER pAdapter,
++ IN PUCHAR arg)
++{
++ int KeyLen;
++ int i;
++ UCHAR CipherAlg=CIPHER_WEP64;
++
++ if (pAdapter->StaCfg.AuthMode >= Ndis802_11AuthModeWPA)
++ return TRUE; // do nothing
++
++ KeyLen = strlen(arg);
++
++ switch (KeyLen)
++ {
++ case 5: //wep 40 Ascii type
++ pAdapter->SharedKey[BSS0][0].KeyLen = KeyLen;
++ memcpy(pAdapter->SharedKey[BSS0][0].Key, arg, KeyLen);
++ CipherAlg = CIPHER_WEP64;
++ DBGPRINT(RT_DEBUG_TRACE, ("Set_Key1_Proc::(Key1=%s and type=%s)\n", arg, "Ascii"));
++ break;
++ case 10: //wep 40 Hex type
++ for(i=0; i < KeyLen; i++)
++ {
++ if( !isxdigit(*(arg+i)) )
++ return FALSE; //Not Hex value;
++ }
++ pAdapter->SharedKey[BSS0][0].KeyLen = KeyLen / 2 ;
++ AtoH(arg, pAdapter->SharedKey[BSS0][0].Key, KeyLen / 2);
++ CipherAlg = CIPHER_WEP64;
++ DBGPRINT(RT_DEBUG_TRACE, ("Set_Key1_Proc::(Key1=%s and type=%s)\n", arg, "Hex"));
++ break;
++ case 13: //wep 104 Ascii type
++ pAdapter->SharedKey[BSS0][0].KeyLen = KeyLen;
++ memcpy(pAdapter->SharedKey[BSS0][0].Key, arg, KeyLen);
++ CipherAlg = CIPHER_WEP128;
++ DBGPRINT(RT_DEBUG_TRACE, ("Set_Key1_Proc::(Key1=%s and type=%s)\n", arg, "Ascii"));
++ break;
++ case 26: //wep 104 Hex type
++ for(i=0; i < KeyLen; i++)
++ {
++ if( !isxdigit(*(arg+i)) )
++ return FALSE; //Not Hex value;
++ }
++ pAdapter->SharedKey[BSS0][0].KeyLen = KeyLen / 2 ;
++ AtoH(arg, pAdapter->SharedKey[BSS0][0].Key, KeyLen / 2);
++ CipherAlg = CIPHER_WEP128;
++ DBGPRINT(RT_DEBUG_TRACE, ("Set_Key1_Proc::(Key1=%s and type=%s)\n", arg, "Hex"));
++ break;
++ default: //Invalid argument
++ DBGPRINT(RT_DEBUG_TRACE, ("Set_Key1_Proc::Invalid argument (=%s)\n", arg));
++ return FALSE;
++ }
++
++ pAdapter->SharedKey[BSS0][0].CipherAlg = CipherAlg;
++
++ // Set keys (into ASIC)
++ if (pAdapter->StaCfg.AuthMode >= Ndis802_11AuthModeWPA)
++ ; // not support
++ else // Old WEP stuff
++ {
++ AsicAddSharedKeyEntry(pAdapter,
++ 0,
++ 0,
++ pAdapter->SharedKey[BSS0][0].CipherAlg,
++ pAdapter->SharedKey[BSS0][0].Key,
++ NULL,
++ NULL);
++ }
++
++ return TRUE;
++}
++/*
++ ==========================================================================
++
++ Description:
++ Set WEP KEY2
++ Return:
++ TRUE if all parameters are OK, FALSE otherwise
++ ==========================================================================
++*/
++INT Set_Key2_Proc(
++ IN PRTMP_ADAPTER pAdapter,
++ IN PUCHAR arg)
++{
++ int KeyLen;
++ int i;
++ UCHAR CipherAlg=CIPHER_WEP64;
++
++ if (pAdapter->StaCfg.AuthMode >= Ndis802_11AuthModeWPA)
++ return TRUE; // do nothing
++
++ KeyLen = strlen(arg);
++
++ switch (KeyLen)
++ {
++ case 5: //wep 40 Ascii type
++ pAdapter->SharedKey[BSS0][1].KeyLen = KeyLen;
++ memcpy(pAdapter->SharedKey[BSS0][1].Key, arg, KeyLen);
++ CipherAlg = CIPHER_WEP64;
++ DBGPRINT(RT_DEBUG_TRACE, ("Set_Key2_Proc::(Key2=%s and type=%s)\n", arg, "Ascii"));
++ break;
++ case 10: //wep 40 Hex type
++ for(i=0; i < KeyLen; i++)
++ {
++ if( !isxdigit(*(arg+i)) )
++ return FALSE; //Not Hex value;
++ }
++ pAdapter->SharedKey[BSS0][1].KeyLen = KeyLen / 2 ;
++ AtoH(arg, pAdapter->SharedKey[BSS0][1].Key, KeyLen / 2);
++ CipherAlg = CIPHER_WEP64;
++ DBGPRINT(RT_DEBUG_TRACE, ("Set_Key2_Proc::(Key2=%s and type=%s)\n", arg, "Hex"));
++ break;
++ case 13: //wep 104 Ascii type
++ pAdapter->SharedKey[BSS0][1].KeyLen = KeyLen;
++ memcpy(pAdapter->SharedKey[BSS0][1].Key, arg, KeyLen);
++ CipherAlg = CIPHER_WEP128;
++ DBGPRINT(RT_DEBUG_TRACE, ("Set_Key2_Proc::(Key2=%s and type=%s)\n", arg, "Ascii"));
++ break;
++ case 26: //wep 104 Hex type
++ for(i=0; i < KeyLen; i++)
++ {
++ if( !isxdigit(*(arg+i)) )
++ return FALSE; //Not Hex value;
++ }
++ pAdapter->SharedKey[BSS0][1].KeyLen = KeyLen / 2 ;
++ AtoH(arg, pAdapter->SharedKey[BSS0][1].Key, KeyLen / 2);
++ CipherAlg = CIPHER_WEP128;
++ DBGPRINT(RT_DEBUG_TRACE, ("Set_Key2_Proc::(Key2=%s and type=%s)\n", arg, "Hex"));
++ break;
++ default: //Invalid argument
++ DBGPRINT(RT_DEBUG_TRACE, ("Set_Key2_Proc::Invalid argument (=%s)\n", arg));
++ return FALSE;
++ }
++ pAdapter->SharedKey[BSS0][1].CipherAlg = CipherAlg;
++
++ // Set keys (into ASIC)
++ if (pAdapter->StaCfg.AuthMode >= Ndis802_11AuthModeWPA)
++ ; // not support
++ else // Old WEP stuff
++ {
++ AsicAddSharedKeyEntry(pAdapter,
++ 0,
++ 1,
++ pAdapter->SharedKey[BSS0][1].CipherAlg,
++ pAdapter->SharedKey[BSS0][1].Key,
++ NULL,
++ NULL);
++ }
++
++ return TRUE;
++}
++/*
++ ==========================================================================
++ Description:
++ Set WEP KEY3
++ Return:
++ TRUE if all parameters are OK, FALSE otherwise
++ ==========================================================================
++*/
++INT Set_Key3_Proc(
++ IN PRTMP_ADAPTER pAdapter,
++ IN PUCHAR arg)
++{
++ int KeyLen;
++ int i;
++ UCHAR CipherAlg=CIPHER_WEP64;
++
++ if (pAdapter->StaCfg.AuthMode >= Ndis802_11AuthModeWPA)
++ return TRUE; // do nothing
++
++ KeyLen = strlen(arg);
++
++ switch (KeyLen)
++ {
++ case 5: //wep 40 Ascii type
++ pAdapter->SharedKey[BSS0][2].KeyLen = KeyLen;
++ memcpy(pAdapter->SharedKey[BSS0][2].Key, arg, KeyLen);
++ CipherAlg = CIPHER_WEP64;
++ DBGPRINT(RT_DEBUG_TRACE, ("Set_Key3_Proc::(Key3=%s and type=Ascii)\n", arg));
++ break;
++ case 10: //wep 40 Hex type
++ for(i=0; i < KeyLen; i++)
++ {
++ if( !isxdigit(*(arg+i)) )
++ return FALSE; //Not Hex value;
++ }
++ pAdapter->SharedKey[BSS0][2].KeyLen = KeyLen / 2 ;
++ AtoH(arg, pAdapter->SharedKey[BSS0][2].Key, KeyLen / 2);
++ CipherAlg = CIPHER_WEP64;
++ DBGPRINT(RT_DEBUG_TRACE, ("Set_Key3_Proc::(Key3=%s and type=Hex)\n", arg));
++ break;
++ case 13: //wep 104 Ascii type
++ pAdapter->SharedKey[BSS0][2].KeyLen = KeyLen;
++ memcpy(pAdapter->SharedKey[BSS0][2].Key, arg, KeyLen);
++ CipherAlg = CIPHER_WEP128;
++ DBGPRINT(RT_DEBUG_TRACE, ("Set_Key3_Proc::(Key3=%s and type=Ascii)\n", arg));
++ break;
++ case 26: //wep 104 Hex type
++ for(i=0; i < KeyLen; i++)
++ {
++ if( !isxdigit(*(arg+i)) )
++ return FALSE; //Not Hex value;
++ }
++ pAdapter->SharedKey[BSS0][2].KeyLen = KeyLen / 2 ;
++ AtoH(arg, pAdapter->SharedKey[BSS0][2].Key, KeyLen / 2);
++ CipherAlg = CIPHER_WEP128;
++ DBGPRINT(RT_DEBUG_TRACE, ("Set_Key3_Proc::(Key3=%s and type=Hex)\n", arg));
++ break;
++ default: //Invalid argument
++ DBGPRINT(RT_DEBUG_TRACE, ("Set_Key3_Proc::Invalid argument (=%s)\n", arg));
++ return FALSE;
++ }
++ pAdapter->SharedKey[BSS0][2].CipherAlg = CipherAlg;
++
++ // Set keys (into ASIC)
++ if (pAdapter->StaCfg.AuthMode >= Ndis802_11AuthModeWPA)
++ ; // not support
++ else // Old WEP stuff
++ {
++ AsicAddSharedKeyEntry(pAdapter,
++ 0,
++ 2,
++ pAdapter->SharedKey[BSS0][2].CipherAlg,
++ pAdapter->SharedKey[BSS0][2].Key,
++ NULL,
++ NULL);
++ }
++
++ return TRUE;
++}
++/*
++ ==========================================================================
++ Description:
++ Set WEP KEY4
++ Return:
++ TRUE if all parameters are OK, FALSE otherwise
++ ==========================================================================
++*/
++INT Set_Key4_Proc(
++ IN PRTMP_ADAPTER pAdapter,
++ IN PUCHAR arg)
++{
++ int KeyLen;
++ int i;
++ UCHAR CipherAlg=CIPHER_WEP64;
++
++ if (pAdapter->StaCfg.AuthMode >= Ndis802_11AuthModeWPA)
++ return TRUE; // do nothing
++
++ KeyLen = strlen(arg);
++
++ switch (KeyLen)
++ {
++ case 5: //wep 40 Ascii type
++ pAdapter->SharedKey[BSS0][3].KeyLen = KeyLen;
++ memcpy(pAdapter->SharedKey[BSS0][3].Key, arg, KeyLen);
++ CipherAlg = CIPHER_WEP64;
++ DBGPRINT(RT_DEBUG_TRACE, ("Set_Key4_Proc::(Key4=%s and type=%s)\n", arg, "Ascii"));
++ break;
++ case 10: //wep 40 Hex type
++ for(i=0; i < KeyLen; i++)
++ {
++ if( !isxdigit(*(arg+i)) )
++ return FALSE; //Not Hex value;
++ }
++ pAdapter->SharedKey[BSS0][3].KeyLen = KeyLen / 2 ;
++ AtoH(arg, pAdapter->SharedKey[BSS0][3].Key, KeyLen / 2);
++ CipherAlg = CIPHER_WEP64;
++ DBGPRINT(RT_DEBUG_TRACE, ("Set_Key4_Proc::(Key4=%s and type=%s)\n", arg, "Hex"));
++ break;
++ case 13: //wep 104 Ascii type
++ pAdapter->SharedKey[BSS0][3].KeyLen = KeyLen;
++ memcpy(pAdapter->SharedKey[BSS0][3].Key, arg, KeyLen);
++ CipherAlg = CIPHER_WEP128;
++ DBGPRINT(RT_DEBUG_TRACE, ("Set_Key4_Proc::(Key4=%s and type=%s)\n", arg, "Ascii"));
++ break;
++ case 26: //wep 104 Hex type
++ for(i=0; i < KeyLen; i++)
++ {
++ if( !isxdigit(*(arg+i)) )
++ return FALSE; //Not Hex value;
++ }
++ pAdapter->SharedKey[BSS0][3].KeyLen = KeyLen / 2 ;
++ AtoH(arg, pAdapter->SharedKey[BSS0][3].Key, KeyLen / 2);
++ CipherAlg = CIPHER_WEP128;
++ DBGPRINT(RT_DEBUG_TRACE, ("Set_Key4_Proc::(Key4=%s and type=%s)\n", arg, "Hex"));
++ break;
++ default: //Invalid argument
++ DBGPRINT(RT_DEBUG_TRACE, ("Set_Key4_Proc::Invalid argument (=%s)\n", arg));
++ return FALSE;
++ }
++ pAdapter->SharedKey[BSS0][3].CipherAlg = CipherAlg;
++
++ // Set keys (into ASIC)
++ if (pAdapter->StaCfg.AuthMode >= Ndis802_11AuthModeWPA)
++ ; // not support
++ else // Old WEP stuff
++ {
++ AsicAddSharedKeyEntry(pAdapter,
++ 0,
++ 3,
++ pAdapter->SharedKey[BSS0][3].CipherAlg,
++ pAdapter->SharedKey[BSS0][3].Key,
++ NULL,
++ NULL);
++ }
++
++ return TRUE;
++}
++
++/*
++ ==========================================================================
++ Description:
++ Set WPA PSK key
++ Return:
++ TRUE if all parameters are OK, FALSE otherwise
++ ==========================================================================
++*/
++INT Set_WPAPSK_Proc(
++ IN PRTMP_ADAPTER pAdapter,
++ IN PUCHAR arg)
++{
++ UCHAR keyMaterial[40];
++
++ if ((pAdapter->StaCfg.AuthMode != Ndis802_11AuthModeWPAPSK) &&
++ (pAdapter->StaCfg.AuthMode != Ndis802_11AuthModeWPA2PSK) &&
++ (pAdapter->StaCfg.AuthMode != Ndis802_11AuthModeWPANone)
++ )
++ return TRUE; // do nothing
++
++ DBGPRINT(RT_DEBUG_TRACE, ("Set_WPAPSK_Proc::(WPAPSK=%s)\n", arg));
++
++ NdisZeroMemory(keyMaterial, 40);
++
++ if ((strlen(arg) < 8) || (strlen(arg) > 64))
++ {
++ DBGPRINT(RT_DEBUG_TRACE, ("Set failed!!(WPAPSK=%s), WPAPSK key-string required 8 ~ 64 characters \n", arg));
++ return FALSE;
++ }
++
++ if (strlen(arg) == 64)
++ {
++ AtoH(arg, keyMaterial, 32);
++ NdisMoveMemory(pAdapter->StaCfg.PMK, keyMaterial, 32);
++
++ }
++ else
++ {
++ PasswordHash((char *)arg, pAdapter->MlmeAux.Ssid, pAdapter->MlmeAux.SsidLen, keyMaterial);
++ NdisMoveMemory(pAdapter->StaCfg.PMK, keyMaterial, 32);
++ }
++
++
++
++ if(pAdapter->StaCfg.BssType == BSS_ADHOC &&
++ pAdapter->StaCfg.AuthMode == Ndis802_11AuthModeWPANone)
++ {
++ pAdapter->StaCfg.WpaState = SS_NOTUSE;
++ }
++ else
++ {
++ // Start STA supplicant state machine
++ pAdapter->StaCfg.WpaState = SS_START;
++ }
++
++ return TRUE;
++}
++
++/*
++ ==========================================================================
++ Description:
++ Set Power Saving mode
++ Return:
++ TRUE if all parameters are OK, FALSE otherwise
++ ==========================================================================
++*/
++INT Set_PSMode_Proc(
++ IN PRTMP_ADAPTER pAdapter,
++ IN PUCHAR arg)
++{
++ if (pAdapter->StaCfg.BssType == BSS_INFRA)
++ {
++ if ((strcmp(arg, "Max_PSP") == 0) ||
++ (strcmp(arg, "max_psp") == 0) ||
++ (strcmp(arg, "MAX_PSP") == 0))
++ {
++ // do NOT turn on PSM bit here, wait until MlmeCheckForPsmChange()
++ // to exclude certain situations.
++ if (pAdapter->StaCfg.bWindowsACCAMEnable == FALSE)
++ pAdapter->StaCfg.WindowsPowerMode = Ndis802_11PowerModeMAX_PSP;
++ pAdapter->StaCfg.WindowsBatteryPowerMode = Ndis802_11PowerModeMAX_PSP;
++ OPSTATUS_SET_FLAG(pAdapter, fOP_STATUS_RECEIVE_DTIM);
++ pAdapter->StaCfg.DefaultListenCount = 5;
++
++ }
++ else if ((strcmp(arg, "Fast_PSP") == 0) ||
++ (strcmp(arg, "fast_psp") == 0) ||
++ (strcmp(arg, "FAST_PSP") == 0))
++ {
++ // do NOT turn on PSM bit here, wait until MlmeCheckForPsmChange()
++ // to exclude certain situations.
++ OPSTATUS_SET_FLAG(pAdapter, fOP_STATUS_RECEIVE_DTIM);
++ if (pAdapter->StaCfg.bWindowsACCAMEnable == FALSE)
++ pAdapter->StaCfg.WindowsPowerMode = Ndis802_11PowerModeFast_PSP;
++ pAdapter->StaCfg.WindowsBatteryPowerMode = Ndis802_11PowerModeFast_PSP;
++ pAdapter->StaCfg.DefaultListenCount = 3;
++ }
++ else if ((strcmp(arg, "Legacy_PSP") == 0) ||
++ (strcmp(arg, "legacy_psp") == 0) ||
++ (strcmp(arg, "LEGACY_PSP") == 0))
++ {
++ // do NOT turn on PSM bit here, wait until MlmeCheckForPsmChange()
++ // to exclude certain situations.
++ OPSTATUS_SET_FLAG(pAdapter, fOP_STATUS_RECEIVE_DTIM);
++ if (pAdapter->StaCfg.bWindowsACCAMEnable == FALSE)
++ pAdapter->StaCfg.WindowsPowerMode = Ndis802_11PowerModeLegacy_PSP;
++ pAdapter->StaCfg.WindowsBatteryPowerMode = Ndis802_11PowerModeLegacy_PSP;
++ pAdapter->StaCfg.DefaultListenCount = 3;
++ }
++ else
++ {
++ //Default Ndis802_11PowerModeCAM
++ // clear PSM bit immediately
++ MlmeSetPsmBit(pAdapter, PWR_ACTIVE);
++ OPSTATUS_SET_FLAG(pAdapter, fOP_STATUS_RECEIVE_DTIM);
++ if (pAdapter->StaCfg.bWindowsACCAMEnable == FALSE)
++ pAdapter->StaCfg.WindowsPowerMode = Ndis802_11PowerModeCAM;
++ pAdapter->StaCfg.WindowsBatteryPowerMode = Ndis802_11PowerModeCAM;
++ }
++
++ DBGPRINT(RT_DEBUG_TRACE, ("Set_PSMode_Proc::(PSMode=%ld)\n", pAdapter->StaCfg.WindowsPowerMode));
++ }
++ else
++ return FALSE;
++
++
++ return TRUE;
++}
++
++#ifdef WPA_SUPPLICANT_SUPPORT
++/*
++ ==========================================================================
++ Description:
++ Set WpaSupport flag.
++ Value:
++ 0: Driver ignore wpa_supplicant.
++ 1: wpa_supplicant initiates scanning and AP selection.
++ 2: driver takes care of scanning, AP selection, and IEEE 802.11 association parameters.
++ Return:
++ TRUE if all parameters are OK, FALSE otherwise
++ ==========================================================================
++*/
++INT Set_Wpa_Support(
++ IN PRTMP_ADAPTER pAd,
++ IN PUCHAR arg)
++{
++
++ if ( simple_strtol(arg, 0, 10) == 0)
++ pAd->StaCfg.WpaSupplicantUP = WPA_SUPPLICANT_DISABLE;
++ else if ( simple_strtol(arg, 0, 10) == 1)
++ pAd->StaCfg.WpaSupplicantUP = WPA_SUPPLICANT_ENABLE;
++ else if ( simple_strtol(arg, 0, 10) == 2)
++ pAd->StaCfg.WpaSupplicantUP = WPA_SUPPLICANT_ENABLE_WITH_WEB_UI;
++ else
++ pAd->StaCfg.WpaSupplicantUP = WPA_SUPPLICANT_DISABLE;
++
++ DBGPRINT(RT_DEBUG_TRACE, ("Set_Wpa_Support::(WpaSupplicantUP=%d)\n", pAd->StaCfg.WpaSupplicantUP));
++
++ return TRUE;
++}
++#endif // WPA_SUPPLICANT_SUPPORT //
++
++#ifdef DBG
++/*
++ ==========================================================================
++ Description:
++ Read / Write MAC
++ Arguments:
++ pAdapter Pointer to our adapter
++ wrq Pointer to the ioctl argument
++
++ Return Value:
++ None
++
++ Note:
++ Usage:
++ 1.) iwpriv ra0 mac 0 ==> read MAC where Addr=0x0
++ 2.) iwpriv ra0 mac 0=12 ==> write MAC where Addr=0x0, value=12
++ ==========================================================================
++*/
++VOID RTMPIoctlMAC(
++ IN PRTMP_ADAPTER pAdapter,
++ IN struct iwreq *wrq)
++{
++ CHAR *this_char;
++ CHAR *value;
++ INT j = 0, k = 0;
++ CHAR msg[1024];
++ CHAR arg[255];
++ ULONG macAddr = 0;
++ UCHAR temp[16], temp2[16];
++ UINT32 macValue = 0;
++ INT Status;
++
++
++ memset(msg, 0x00, 1024);
++ if (wrq->u.data.length > 1) //No parameters.
++ {
++ Status = copy_from_user(arg, wrq->u.data.pointer, (wrq->u.data.length > 255) ? 255 : wrq->u.data.length);
++ sprintf(msg, "\n");
++
++ //Parsing Read or Write
++ this_char = arg;
++ if (!*this_char)
++ goto next;
++
++ if ((value = rtstrchr(this_char, '=')) != NULL)
++ *value++ = 0;
++
++ if (!value || !*value)
++ { //Read
++ // Sanity check
++ if(strlen(this_char) > 4)
++ goto next;
++
++ j = strlen(this_char);
++ while(j-- > 0)
++ {
++ if(this_char[j] > 'f' || this_char[j] < '0')
++ return;
++ }
++
++ // Mac Addr
++ k = j = strlen(this_char);
++ while(j-- > 0)
++ {
++ this_char[4-k+j] = this_char[j];
++ }
++
++ while(k < 4)
++ this_char[3-k++]='0';
++ this_char[4]='\0';
++
++ if(strlen(this_char) == 4)
++ {
++ AtoH(this_char, temp, 2);
++ macAddr = *temp*256 + temp[1];
++ if (macAddr < 0xFFFF)
++ {
++ RTMP_IO_READ32(pAdapter, macAddr, &macValue);
++ DBGPRINT(RT_DEBUG_TRACE, ("MacAddr=%lx, MacValue=%x\n", macAddr, macValue));
++ sprintf(msg+strlen(msg), "[0x%08lX]:%08X ", macAddr , macValue);
++ }
++ else
++ {//Invalid parametes, so default printk all bbp
++ goto next;
++ }
++ }
++ }
++ else
++ { //Write
++ memcpy(&temp2, value, strlen(value));
++ temp2[strlen(value)] = '\0';
++
++ // Sanity check
++ if((strlen(this_char) > 4) || strlen(temp2) > 8)
++ goto next;
++
++ j = strlen(this_char);
++ while(j-- > 0)
++ {
++ if(this_char[j] > 'f' || this_char[j] < '0')
++ return;
++ }
++
++ j = strlen(temp2);
++ while(j-- > 0)
++ {
++ if(temp2[j] > 'f' || temp2[j] < '0')
++ return;
++ }
++
++ //MAC Addr
++ k = j = strlen(this_char);
++ while(j-- > 0)
++ {
++ this_char[4-k+j] = this_char[j];
++ }
++
++ while(k < 4)
++ this_char[3-k++]='0';
++ this_char[4]='\0';
++
++ //MAC value
++ k = j = strlen(temp2);
++ while(j-- > 0)
++ {
++ temp2[8-k+j] = temp2[j];
++ }
++
++ while(k < 8)
++ temp2[7-k++]='0';
++ temp2[8]='\0';
++
++ {
++ AtoH(this_char, temp, 2);
++ macAddr = *temp*256 + temp[1];
++
++ AtoH(temp2, temp, 4);
++ macValue = *temp*256*256*256 + temp[1]*256*256 + temp[2]*256 + temp[3];
++
++ // debug mode
++ if (macAddr == (HW_DEBUG_SETTING_BASE + 4))
++ {
++ // 0x2bf4: byte0 non-zero: enable R17 tuning, 0: disable R17 tuning
++ if (macValue & 0x000000ff)
++ {
++ pAdapter->BbpTuning.bEnable = TRUE;
++ DBGPRINT(RT_DEBUG_TRACE,("turn on R17 tuning\n"));
++ }
++ else
++ {
++ UCHAR R66;
++ pAdapter->BbpTuning.bEnable = FALSE;
++ R66 = 0x26 + GET_LNA_GAIN(pAdapter);
++#ifdef RALINK_ATE
++ if (ATE_ON(pAdapter))
++ {
++ ATE_BBP_IO_WRITE8_BY_REG_ID(pAdapter, BBP_R66, (0x26 + GET_LNA_GAIN(pAdapter)));
++ }
++ else
++#endif // RALINK_ATE //
++ RTMP_BBP_IO_WRITE8_BY_REG_ID(pAdapter, BBP_R66, (0x26 + GET_LNA_GAIN(pAdapter)));
++ DBGPRINT(RT_DEBUG_TRACE,("turn off R17 tuning, restore to 0x%02x\n", R66));
++ }
++ return;
++ }
++
++ DBGPRINT(RT_DEBUG_TRACE, ("MacAddr=%02lx, MacValue=0x%x\n", macAddr, macValue));
++
++ RTMP_IO_WRITE32(pAdapter, macAddr, macValue);
++ sprintf(msg+strlen(msg), "[0x%08lX]:%08X ", macAddr, macValue);
++ }
++ }
++ }
++next:
++ if(strlen(msg) == 1)
++ sprintf(msg+strlen(msg), "===>Error command format!");
++
++ // Copy the information into the user buffer
++ wrq->u.data.length = strlen(msg);
++ Status = copy_to_user(wrq->u.data.pointer, msg, wrq->u.data.length);
++
++ DBGPRINT(RT_DEBUG_TRACE, ("<==RTMPIoctlMAC\n\n"));
++}
++
++/*
++ ==========================================================================
++ Description:
++ Read / Write E2PROM
++ Arguments:
++ pAdapter Pointer to our adapter
++ wrq Pointer to the ioctl argument
++
++ Return Value:
++ None
++
++ Note:
++ Usage:
++ 1.) iwpriv ra0 e2p 0 ==> read E2PROM where Addr=0x0
++ 2.) iwpriv ra0 e2p 0=1234 ==> write E2PROM where Addr=0x0, value=1234
++ ==========================================================================
++*/
++VOID RTMPIoctlE2PROM(
++ IN PRTMP_ADAPTER pAdapter,
++ IN struct iwreq *wrq)
++{
++ CHAR *this_char;
++ CHAR *value;
++ INT j = 0, k = 0;
++ CHAR msg[1024];
++ CHAR arg[255];
++ USHORT eepAddr = 0;
++ UCHAR temp[16], temp2[16];
++ USHORT eepValue;
++ int Status;
++
++
++ memset(msg, 0x00, 1024);
++ if (wrq->u.data.length > 1) //No parameters.
++ {
++ Status = copy_from_user(arg, wrq->u.data.pointer, (wrq->u.data.length > 255) ? 255 : wrq->u.data.length);
++ sprintf(msg, "\n");
++
++ //Parsing Read or Write
++ this_char = arg;
++
++
++ if (!*this_char)
++ goto next;
++
++ if ((value = rtstrchr(this_char, '=')) != NULL)
++ *value++ = 0;
++
++ if (!value || !*value)
++ { //Read
++
++ // Sanity check
++ if(strlen(this_char) > 4)
++ goto next;
++
++ j = strlen(this_char);
++ while(j-- > 0)
++ {
++ if(this_char[j] > 'f' || this_char[j] < '0')
++ return;
++ }
++
++ // E2PROM addr
++ k = j = strlen(this_char);
++ while(j-- > 0)
++ {
++ this_char[4-k+j] = this_char[j];
++ }
++
++ while(k < 4)
++ this_char[3-k++]='0';
++ this_char[4]='\0';
++
++ if(strlen(this_char) == 4)
++ {
++ AtoH(this_char, temp, 2);
++ eepAddr = *temp*256 + temp[1];
++ if (eepAddr < 0xFFFF)
++ {
++ RT28xx_EEPROM_READ16(pAdapter, eepAddr, eepValue);
++ sprintf(msg+strlen(msg), "[0x%04X]:0x%04X ", eepAddr , eepValue);
++ }
++ else
++ {//Invalid parametes, so default printk all bbp
++ goto next;
++ }
++ }
++ }
++ else
++ { //Write
++ memcpy(&temp2, value, strlen(value));
++ temp2[strlen(value)] = '\0';
++
++ // Sanity check
++ if((strlen(this_char) > 4) || strlen(temp2) > 8)
++ goto next;
++
++ j = strlen(this_char);
++ while(j-- > 0)
++ {
++ if(this_char[j] > 'f' || this_char[j] < '0')
++ return;
++ }
++ j = strlen(temp2);
++ while(j-- > 0)
++ {
++ if(temp2[j] > 'f' || temp2[j] < '0')
++ return;
++ }
++
++ //MAC Addr
++ k = j = strlen(this_char);
++ while(j-- > 0)
++ {
++ this_char[4-k+j] = this_char[j];
++ }
++
++ while(k < 4)
++ this_char[3-k++]='0';
++ this_char[4]='\0';
++
++ //MAC value
++ k = j = strlen(temp2);
++ while(j-- > 0)
++ {
++ temp2[4-k+j] = temp2[j];
++ }
++
++ while(k < 4)
++ temp2[3-k++]='0';
++ temp2[4]='\0';
++
++ AtoH(this_char, temp, 2);
++ eepAddr = *temp*256 + temp[1];
++
++ AtoH(temp2, temp, 2);
++ eepValue = *temp*256 + temp[1];
++
++ RT28xx_EEPROM_WRITE16(pAdapter, eepAddr, eepValue);
++ sprintf(msg+strlen(msg), "[0x%02X]:%02X ", eepAddr, eepValue);
++ }
++ }
++next:
++ if(strlen(msg) == 1)
++ sprintf(msg+strlen(msg), "===>Error command format!");
++
++
++ // Copy the information into the user buffer
++ wrq->u.data.length = strlen(msg);
++ Status = copy_to_user(wrq->u.data.pointer, msg, wrq->u.data.length);
++
++ DBGPRINT(RT_DEBUG_TRACE, ("<==RTMPIoctlE2PROM\n"));
++}
++#endif // DBG //
++
++
++
++
++INT Set_TGnWifiTest_Proc(
++ IN PRTMP_ADAPTER pAd,
++ IN PUCHAR arg)
++{
++ if (simple_strtol(arg, 0, 10) == 0)
++ pAd->StaCfg.bTGnWifiTest = FALSE;
++ else
++ pAd->StaCfg.bTGnWifiTest = TRUE;
++
++ DBGPRINT(RT_DEBUG_TRACE, ("IF Set_TGnWifiTest_Proc::(bTGnWifiTest=%d)\n", pAd->StaCfg.bTGnWifiTest));
++ return TRUE;
++}
++
++INT Set_LongRetryLimit_Proc(
++ IN PRTMP_ADAPTER pAdapter,
++ IN PUCHAR arg)
++{
++ TX_RTY_CFG_STRUC tx_rty_cfg;
++ UCHAR LongRetryLimit = (UCHAR)simple_strtol(arg, 0, 10);
++
++ RTMP_IO_READ32(pAdapter, TX_RTY_CFG, &tx_rty_cfg.word);
++ tx_rty_cfg.field.LongRtyLimit = LongRetryLimit;
++ RTMP_IO_WRITE32(pAdapter, TX_RTY_CFG, tx_rty_cfg.word);
++ DBGPRINT(RT_DEBUG_TRACE, ("IF Set_LongRetryLimit_Proc::(tx_rty_cfg=0x%x)\n", tx_rty_cfg.word));
++ return TRUE;
++}
++
++INT Set_ShortRetryLimit_Proc(
++ IN PRTMP_ADAPTER pAdapter,
++ IN PUCHAR arg)
++{
++ TX_RTY_CFG_STRUC tx_rty_cfg;
++ UCHAR ShortRetryLimit = (UCHAR)simple_strtol(arg, 0, 10);
++
++ RTMP_IO_READ32(pAdapter, TX_RTY_CFG, &tx_rty_cfg.word);
++ tx_rty_cfg.field.ShortRtyLimit = ShortRetryLimit;
++ RTMP_IO_WRITE32(pAdapter, TX_RTY_CFG, tx_rty_cfg.word);
++ DBGPRINT(RT_DEBUG_TRACE, ("IF Set_ShortRetryLimit_Proc::(tx_rty_cfg=0x%x)\n", tx_rty_cfg.word));
++ return TRUE;
++}
++
++#ifdef EXT_BUILD_CHANNEL_LIST
++INT Set_Ieee80211dClientMode_Proc(
++ IN PRTMP_ADAPTER pAdapter,
++ IN PUCHAR arg)
++{
++ if (simple_strtol(arg, 0, 10) == 0)
++ pAdapter->StaCfg.IEEE80211dClientMode = Rt802_11_D_None;
++ else if (simple_strtol(arg, 0, 10) == 1)
++ pAdapter->StaCfg.IEEE80211dClientMode = Rt802_11_D_Flexible;
++ else if (simple_strtol(arg, 0, 10) == 2)
++ pAdapter->StaCfg.IEEE80211dClientMode = Rt802_11_D_Strict;
++ else
++ return FALSE;
++
++ DBGPRINT(RT_DEBUG_TRACE, ("Set_Ieee802dMode_Proc::(IEEEE0211dMode=%d)\n", pAdapter->StaCfg.IEEE80211dClientMode));
++ return TRUE;
++}
++#endif // EXT_BUILD_CHANNEL_LIST //
++
++#ifdef CARRIER_DETECTION_SUPPORT
++INT Set_CarrierDetect_Proc(
++ IN PRTMP_ADAPTER pAd,
++ IN PUCHAR arg)
++{
++ if (simple_strtol(arg, 0, 10) == 0)
++ pAd->CommonCfg.CarrierDetect.Enable = FALSE;
++ else
++ pAd->CommonCfg.CarrierDetect.Enable = TRUE;
++
++ DBGPRINT(RT_DEBUG_TRACE, ("IF Set_CarrierDetect_Proc::(CarrierDetect.Enable=%d)\n", pAd->CommonCfg.CarrierDetect.Enable));
++ return TRUE;
++}
++#endif // CARRIER_DETECTION_SUPPORT //
++
++
++INT Show_Adhoc_MacTable_Proc(
++ IN PRTMP_ADAPTER pAd,
++ IN PCHAR extra)
++{
++ INT i;
++
++ sprintf(extra, "\n");
++
++#ifdef DOT11_N_SUPPORT
++ sprintf(extra, "%sHT Operating Mode : %d\n", extra, pAd->CommonCfg.AddHTInfo.AddHtInfo2.OperaionMode);
++#endif // DOT11_N_SUPPORT //
++
++ sprintf(extra, "%s\n%-19s%-4s%-4s%-7s%-7s%-7s%-10s%-6s%-6s%-6s%-6s\n", extra,
++ "MAC", "AID", "BSS", "RSSI0", "RSSI1", "RSSI2", "PhMd", "BW", "MCS", "SGI", "STBC");
++
++ for (i=1; i<MAX_LEN_OF_MAC_TABLE; i++)
++ {
++ PMAC_TABLE_ENTRY pEntry = &pAd->MacTab.Content[i];
++
++ if (strlen(extra) > (IW_PRIV_SIZE_MASK - 30))
++ break;
++ if ((pEntry->ValidAsCLI || pEntry->ValidAsApCli) && (pEntry->Sst == SST_ASSOC))
++ {
++ sprintf(extra, "%s%02X:%02X:%02X:%02X:%02X:%02X ", extra,
++ pEntry->Addr[0], pEntry->Addr[1], pEntry->Addr[2],
++ pEntry->Addr[3], pEntry->Addr[4], pEntry->Addr[5]);
++ sprintf(extra, "%s%-4d", extra, (int)pEntry->Aid);
++ sprintf(extra, "%s%-4d", extra, (int)pEntry->apidx);
++ sprintf(extra, "%s%-7d", extra, pEntry->RssiSample.AvgRssi0);
++ sprintf(extra, "%s%-7d", extra, pEntry->RssiSample.AvgRssi1);
++ sprintf(extra, "%s%-7d", extra, pEntry->RssiSample.AvgRssi2);
++ sprintf(extra, "%s%-10s", extra, GetPhyMode(pEntry->HTPhyMode.field.MODE));
++ sprintf(extra, "%s%-6s", extra, GetBW(pEntry->HTPhyMode.field.BW));
++ sprintf(extra, "%s%-6d", extra, pEntry->HTPhyMode.field.MCS);
++ sprintf(extra, "%s%-6d", extra, pEntry->HTPhyMode.field.ShortGI);
++ sprintf(extra, "%s%-6d", extra, pEntry->HTPhyMode.field.STBC);
++ sprintf(extra, "%s%-10d, %d, %d%%\n", extra, pEntry->DebugFIFOCount, pEntry->DebugTxCount,
++ (pEntry->DebugTxCount) ? ((pEntry->DebugTxCount-pEntry->DebugFIFOCount)*100/pEntry->DebugTxCount) : 0);
++ sprintf(extra, "%s\n", extra);
++ }
++ }
++
++ return TRUE;
++}
++
++
+--- /dev/null
++++ b/drivers/staging/rt2870/tmp61
+@@ -0,0 +1,7037 @@
++/*
++ *************************************************************************
++ * Ralink Tech Inc.
++ * 5F., No.36, Taiyuan St., Jhubei City,
++ * Hsinchu County 302,
++ * Taiwan, R.O.C.
++ *
++ * (c) Copyright 2002-2007, Ralink Technology, Inc.
++ *
++ * This program is free software; you can redistribute it and/or modify *
++ * it under the terms of the GNU General Public License as published by *
++ * the Free Software Foundation; either version 2 of the License, or *
++ * (at your option) any later version. *
++ * *
++ * This program is distributed in the hope that it will be useful, *
++ * but WITHOUT ANY WARRANTY; without even the implied warranty of *
++ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the *
++ * GNU General Public License for more details. *
++ * *
++ * You should have received a copy of the GNU General Public License *
++ * along with this program; if not, write to the *
++ * Free Software Foundation, Inc., *
++ * 59 Temple Place - Suite 330, Boston, MA 02111-1307, USA. *
++ * *
++ *************************************************************************
++
++ Module Name:
++ sta_ioctl.c
++
++ Abstract:
++ IOCTL related subroutines
++
++ Revision History:
++ Who When What
++ -------- ---------- ----------------------------------------------
++ Rory Chen 01-03-2003 created
++ Rory Chen 02-14-2005 modify to support RT61
++*/
++
++#include "rt_config.h"
++
++#ifdef DBG
++extern ULONG RTDebugLevel;
++#endif
++
++#define NR_WEP_KEYS 4
++#define WEP_SMALL_KEY_LEN (40/8)
++#define WEP_LARGE_KEY_LEN (104/8)
++
++#define GROUP_KEY_NO 4
++
++#if LINUX_VERSION_CODE >= KERNEL_VERSION(2,6,27)
++#define IWE_STREAM_ADD_EVENT(_A, _B, _C, _D, _E) iwe_stream_add_event(_A, _B, _C, _D, _E)
++#define IWE_STREAM_ADD_POINT(_A, _B, _C, _D, _E) iwe_stream_add_point(_A, _B, _C, _D, _E)
++#define IWE_STREAM_ADD_VALUE(_A, _B, _C, _D, _E, _F) iwe_stream_add_value(_A, _B, _C, _D, _E, _F)
++#else
++#define IWE_STREAM_ADD_EVENT(_A, _B, _C, _D, _E) iwe_stream_add_event(_B, _C, _D, _E)
++#define IWE_STREAM_ADD_POINT(_A, _B, _C, _D, _E) iwe_stream_add_point(_B, _C, _D, _E)
++#define IWE_STREAM_ADD_VALUE(_A, _B, _C, _D, _E, _F) iwe_stream_add_value(_B, _C, _D, _E, _F)
++#endif
++
++extern UCHAR CipherWpa2Template[];
++extern UCHAR CipherWpaPskTkip[];
++extern UCHAR CipherWpaPskTkipLen;
++
++typedef struct PACKED _RT_VERSION_INFO{
++ UCHAR DriverVersionW;
++ UCHAR DriverVersionX;
++ UCHAR DriverVersionY;
++ UCHAR DriverVersionZ;
++ UINT DriverBuildYear;
++ UINT DriverBuildMonth;
++ UINT DriverBuildDay;
++} RT_VERSION_INFO, *PRT_VERSION_INFO;
++
++struct iw_priv_args privtab[] = {
++{ RTPRIV_IOCTL_SET,
++ IW_PRIV_TYPE_CHAR | 1024, 0,
++ "set"},
++
++{ RTPRIV_IOCTL_SHOW, 0, IW_PRIV_TYPE_CHAR | IW_PRIV_SIZE_MASK,
++ ""},
++{ RTPRIV_IOCTL_SHOW, IW_PRIV_TYPE_CHAR | 1024, IW_PRIV_TYPE_CHAR | IW_PRIV_SIZE_MASK,
++ ""},
++/* --- sub-ioctls definitions --- */
++ { SHOW_CONN_STATUS,
++ 0, IW_PRIV_TYPE_CHAR | IW_PRIV_SIZE_MASK, "connStatus" },
++ { SHOW_DRVIER_VERION,
++ 0, IW_PRIV_TYPE_CHAR | IW_PRIV_SIZE_MASK, "driverVer" },
++ { SHOW_BA_INFO,
++ 0, IW_PRIV_TYPE_CHAR | IW_PRIV_SIZE_MASK, "bainfo" },
++ { SHOW_DESC_INFO,
++ 0, IW_PRIV_TYPE_CHAR | IW_PRIV_SIZE_MASK, "descinfo" },
++ { RAIO_OFF,
++ 0, IW_PRIV_TYPE_CHAR | IW_PRIV_SIZE_MASK, "radio_off" },
++ { RAIO_ON,
++ 0, IW_PRIV_TYPE_CHAR | IW_PRIV_SIZE_MASK, "radio_on" },
++#ifdef QOS_DLS_SUPPORT
++ { SHOW_DLS_ENTRY_INFO,
++ 0, IW_PRIV_TYPE_CHAR | IW_PRIV_SIZE_MASK, "dlsentryinfo" },
++#endif // QOS_DLS_SUPPORT //
++ { SHOW_CFG_VALUE,
++ IW_PRIV_TYPE_CHAR | 1024, IW_PRIV_TYPE_CHAR | IW_PRIV_SIZE_MASK, "show" },
++ { SHOW_ADHOC_ENTRY_INFO,
++ 0, IW_PRIV_TYPE_CHAR | IW_PRIV_SIZE_MASK, "adhocEntry" },
++
++/* --- sub-ioctls relations --- */
++
++#ifdef DBG
++{ RTPRIV_IOCTL_BBP,
++ IW_PRIV_TYPE_CHAR | IW_PRIV_SIZE_MASK, IW_PRIV_TYPE_CHAR | IW_PRIV_SIZE_MASK,
++ "bbp"},
++{ RTPRIV_IOCTL_MAC,
++ IW_PRIV_TYPE_CHAR | 1024, IW_PRIV_TYPE_CHAR | 1024,
++ "mac"},
++{ RTPRIV_IOCTL_E2P,
++ IW_PRIV_TYPE_CHAR | 1024, IW_PRIV_TYPE_CHAR | 1024,
++ "e2p"},
++#endif /* DBG */
++
++{ RTPRIV_IOCTL_STATISTICS,
++ 0, IW_PRIV_TYPE_CHAR | IW_PRIV_SIZE_MASK,
++ "stat"},
++{ RTPRIV_IOCTL_GSITESURVEY,
++ 0, IW_PRIV_TYPE_CHAR | 1024,
++ "get_site_survey"},
++};
++
++INT Set_SSID_Proc(
++ IN PRTMP_ADAPTER pAdapter,
++ IN PUCHAR arg);
++
++#ifdef WMM_SUPPORT
++INT Set_WmmCapable_Proc(
++ IN PRTMP_ADAPTER pAd,
++ IN PUCHAR arg);
++#endif
++
++INT Set_NetworkType_Proc(
++ IN PRTMP_ADAPTER pAdapter,
++ IN PUCHAR arg);
++
++INT Set_AuthMode_Proc(
++ IN PRTMP_ADAPTER pAdapter,
++ IN PUCHAR arg);
++
++INT Set_EncrypType_Proc(
++ IN PRTMP_ADAPTER pAdapter,
++ IN PUCHAR arg);
++
++INT Set_DefaultKeyID_Proc(
++ IN PRTMP_ADAPTER pAdapter,
++ IN PUCHAR arg);
++
++INT Set_Key1_Proc(
++ IN PRTMP_ADAPTER pAdapter,
++ IN PUCHAR arg);
++
++INT Set_Key2_Proc(
++ IN PRTMP_ADAPTER pAdapter,
++ IN PUCHAR arg);
++
++INT Set_Key3_Proc(
++ IN PRTMP_ADAPTER pAdapter,
++ IN PUCHAR arg);
++
++INT Set_Key4_Proc(
++ IN PRTMP_ADAPTER pAdapter,
++ IN PUCHAR arg);
++
++INT Set_WPAPSK_Proc(
++ IN PRTMP_ADAPTER pAdapter,
++ IN PUCHAR arg);
++
++
++INT Set_PSMode_Proc(
++ IN PRTMP_ADAPTER pAdapter,
++ IN PUCHAR arg);
++
++#ifdef WPA_SUPPLICANT_SUPPORT
++INT Set_Wpa_Support(
++ IN PRTMP_ADAPTER pAd,
++ IN PUCHAR arg);
++#endif // WPA_SUPPLICANT_SUPPORT //
++
++#ifdef DBG
++VOID RTMPIoctlBBP(
++ IN PRTMP_ADAPTER pAdapter,
++ IN struct iwreq *wrq);
++
++VOID RTMPIoctlMAC(
++ IN PRTMP_ADAPTER pAdapter,
++ IN struct iwreq *wrq);
++
++VOID RTMPIoctlE2PROM(
++ IN PRTMP_ADAPTER pAdapter,
++ IN struct iwreq *wrq);
++#endif // DBG //
++
++
++NDIS_STATUS RTMPWPANoneAddKeyProc(
++ IN PRTMP_ADAPTER pAd,
++ IN PVOID pBuf);
++
++INT Set_FragTest_Proc(
++ IN PRTMP_ADAPTER pAdapter,
++ IN PUCHAR arg);
++
++#ifdef DOT11_N_SUPPORT
++INT Set_TGnWifiTest_Proc(
++ IN PRTMP_ADAPTER pAd,
++ IN PUCHAR arg);
++#endif // DOT11_N_SUPPORT //
++
++INT Set_LongRetryLimit_Proc(
++ IN PRTMP_ADAPTER pAdapter,
++ IN PUCHAR arg);
++
++INT Set_ShortRetryLimit_Proc(
++ IN PRTMP_ADAPTER pAdapter,
++ IN PUCHAR arg);
++
++#ifdef EXT_BUILD_CHANNEL_LIST
++INT Set_Ieee80211dClientMode_Proc(
++ IN PRTMP_ADAPTER pAdapter,
++ IN PUCHAR arg);
++#endif // EXT_BUILD_CHANNEL_LIST //
++
++#ifdef CARRIER_DETECTION_SUPPORT
++INT Set_CarrierDetect_Proc(
++ IN PRTMP_ADAPTER pAd,
++ IN PUCHAR arg);
++#endif // CARRIER_DETECTION_SUPPORT //
++
++INT Show_Adhoc_MacTable_Proc(
++ IN PRTMP_ADAPTER pAd,
++ IN PCHAR extra);
++
++static struct {
++ CHAR *name;
++ INT (*set_proc)(PRTMP_ADAPTER pAdapter, PUCHAR arg);
++} *PRTMP_PRIVATE_SET_PROC, RTMP_PRIVATE_SUPPORT_PROC[] = {
++ {"DriverVersion", Set_DriverVersion_Proc},
++ {"CountryRegion", Set_CountryRegion_Proc},
++ {"CountryRegionABand", Set_CountryRegionABand_Proc},
++ {"SSID", Set_SSID_Proc},
++ {"WirelessMode", Set_WirelessMode_Proc},
++ {"TxBurst", Set_TxBurst_Proc},
++ {"TxPreamble", Set_TxPreamble_Proc},
++ {"TxPower", Set_TxPower_Proc},
++ {"Channel", Set_Channel_Proc},
++ {"BGProtection", Set_BGProtection_Proc},
++ {"RTSThreshold", Set_RTSThreshold_Proc},
++ {"FragThreshold", Set_FragThreshold_Proc},
++#ifdef DOT11_N_SUPPORT
++ {"HtBw", Set_HtBw_Proc},
++ {"HtMcs", Set_HtMcs_Proc},
++ {"HtGi", Set_HtGi_Proc},
++ {"HtOpMode", Set_HtOpMode_Proc},
++ {"HtExtcha", Set_HtExtcha_Proc},
++ {"HtMpduDensity", Set_HtMpduDensity_Proc},
++ {"HtBaWinSize", Set_HtBaWinSize_Proc},
++ {"HtRdg", Set_HtRdg_Proc},
++ {"HtAmsdu", Set_HtAmsdu_Proc},
++ {"HtAutoBa", Set_HtAutoBa_Proc},
++ {"HtBaDecline", Set_BADecline_Proc},
++ {"HtProtect", Set_HtProtect_Proc},
++ {"HtMimoPs", Set_HtMimoPs_Proc},
++#endif // DOT11_N_SUPPORT //
++
++#ifdef AGGREGATION_SUPPORT
++ {"PktAggregate", Set_PktAggregate_Proc},
++#endif
++
++#ifdef WMM_SUPPORT
++ {"WmmCapable", Set_WmmCapable_Proc},
++#endif
++ {"IEEE80211H", Set_IEEE80211H_Proc},
++ {"NetworkType", Set_NetworkType_Proc},
++ {"AuthMode", Set_AuthMode_Proc},
++ {"EncrypType", Set_EncrypType_Proc},
++ {"DefaultKeyID", Set_DefaultKeyID_Proc},
++ {"Key1", Set_Key1_Proc},
++ {"Key2", Set_Key2_Proc},
++ {"Key3", Set_Key3_Proc},
++ {"Key4", Set_Key4_Proc},
++ {"WPAPSK", Set_WPAPSK_Proc},
++ {"ResetCounter", Set_ResetStatCounter_Proc},
++ {"PSMode", Set_PSMode_Proc},
++#ifdef DBG
++ {"Debug", Set_Debug_Proc},
++#endif
++
++#ifdef RALINK_ATE
++ {"ATE", Set_ATE_Proc},
++ {"ATEDA", Set_ATE_DA_Proc},
++ {"ATESA", Set_ATE_SA_Proc},
++ {"ATEBSSID", Set_ATE_BSSID_Proc},
++ {"ATECHANNEL", Set_ATE_CHANNEL_Proc},
++ {"ATETXPOW0", Set_ATE_TX_POWER0_Proc},
++ {"ATETXPOW1", Set_ATE_TX_POWER1_Proc},
++ {"ATETXANT", Set_ATE_TX_Antenna_Proc},
++ {"ATERXANT", Set_ATE_RX_Antenna_Proc},
++ {"ATETXFREQOFFSET", Set_ATE_TX_FREQOFFSET_Proc},
++ {"ATETXBW", Set_ATE_TX_BW_Proc},
++ {"ATETXLEN", Set_ATE_TX_LENGTH_Proc},
++ {"ATETXCNT", Set_ATE_TX_COUNT_Proc},
++ {"ATETXMCS", Set_ATE_TX_MCS_Proc},
++ {"ATETXMODE", Set_ATE_TX_MODE_Proc},
++ {"ATETXGI", Set_ATE_TX_GI_Proc},
++ {"ATERXFER", Set_ATE_RX_FER_Proc},
++ {"ATERRF", Set_ATE_Read_RF_Proc},
++ {"ATEWRF1", Set_ATE_Write_RF1_Proc},
++ {"ATEWRF2", Set_ATE_Write_RF2_Proc},
++ {"ATEWRF3", Set_ATE_Write_RF3_Proc},
++ {"ATEWRF4", Set_ATE_Write_RF4_Proc},
++ {"ATELDE2P", Set_ATE_Load_E2P_Proc},
++ {"ATERE2P", Set_ATE_Read_E2P_Proc},
++ {"ATESHOW", Set_ATE_Show_Proc},
++ {"ATEHELP", Set_ATE_Help_Proc},
++
++#ifdef RALINK_28xx_QA
++ {"TxStop", Set_TxStop_Proc},
++ {"RxStop", Set_RxStop_Proc},
++#endif // RALINK_28xx_QA //
++#endif // RALINK_ATE //
++
++#ifdef WPA_SUPPLICANT_SUPPORT
++ {"WpaSupport", Set_Wpa_Support},
++#endif // WPA_SUPPLICANT_SUPPORT //
++
++
++
++ {"FixedTxMode", Set_FixedTxMode_Proc},
++#ifdef CONFIG_APSTA_MIXED_SUPPORT
++ {"OpMode", Set_OpMode_Proc},
++#endif // CONFIG_APSTA_MIXED_SUPPORT //
++#ifdef DOT11_N_SUPPORT
++ {"TGnWifiTest", Set_TGnWifiTest_Proc},
++ {"ForceGF", Set_ForceGF_Proc},
++#endif // DOT11_N_SUPPORT //
++#ifdef QOS_DLS_SUPPORT
++ {"DlsAddEntry", Set_DlsAddEntry_Proc},
++ {"DlsTearDownEntry", Set_DlsTearDownEntry_Proc},
++#endif // QOS_DLS_SUPPORT //
++ {"LongRetry", Set_LongRetryLimit_Proc},
++ {"ShortRetry", Set_ShortRetryLimit_Proc},
++#ifdef EXT_BUILD_CHANNEL_LIST
++ {"11dClientMode", Set_Ieee80211dClientMode_Proc},
++#endif // EXT_BUILD_CHANNEL_LIST //
++#ifdef CARRIER_DETECTION_SUPPORT
++ {"CarrierDetect", Set_CarrierDetect_Proc},
++#endif // CARRIER_DETECTION_SUPPORT //
++
++ {NULL,}
++};
++
++
++VOID RTMPAddKey(
++ IN PRTMP_ADAPTER pAd,
++ IN PNDIS_802_11_KEY pKey)
++{
++ ULONG KeyIdx;
++ MAC_TABLE_ENTRY *pEntry;
++
++ DBGPRINT(RT_DEBUG_TRACE, ("RTMPAddKey ------>\n"));
++
++ if (pAd->StaCfg.AuthMode >= Ndis802_11AuthModeWPA)
++ {
++ if (pKey->KeyIndex & 0x80000000)
++ {
++ if (pAd->StaCfg.AuthMode == Ndis802_11AuthModeWPANone)
++ {
++ NdisZeroMemory(pAd->StaCfg.PMK, 32);
++ NdisMoveMemory(pAd->StaCfg.PMK, pKey->KeyMaterial, pKey->KeyLength);
++ goto end;
++ }
++ // Update PTK
++ NdisZeroMemory(&pAd->SharedKey[BSS0][0], sizeof(CIPHER_KEY));
++ pAd->SharedKey[BSS0][0].KeyLen = LEN_TKIP_EK;
++ NdisMoveMemory(pAd->SharedKey[BSS0][0].Key, pKey->KeyMaterial, LEN_TKIP_EK);
++#ifdef WPA_SUPPLICANT_SUPPORT
++ if (pAd->StaCfg.PairCipher == Ndis802_11Encryption2Enabled)
++ {
++ NdisMoveMemory(pAd->SharedKey[BSS0][0].RxMic, pKey->KeyMaterial + LEN_TKIP_EK, LEN_TKIP_TXMICK);
++ NdisMoveMemory(pAd->SharedKey[BSS0][0].TxMic, pKey->KeyMaterial + LEN_TKIP_EK + LEN_TKIP_TXMICK, LEN_TKIP_RXMICK);
++ }
++ else
++#endif // WPA_SUPPLICANT_SUPPORT //
++ {
++ NdisMoveMemory(pAd->SharedKey[BSS0][0].TxMic, pKey->KeyMaterial + LEN_TKIP_EK, LEN_TKIP_TXMICK);
++ NdisMoveMemory(pAd->SharedKey[BSS0][0].RxMic, pKey->KeyMaterial + LEN_TKIP_EK + LEN_TKIP_TXMICK, LEN_TKIP_RXMICK);
++ }
++
++ // Decide its ChiperAlg
++ if (pAd->StaCfg.PairCipher == Ndis802_11Encryption2Enabled)
++ pAd->SharedKey[BSS0][0].CipherAlg = CIPHER_TKIP;
++ else if (pAd->StaCfg.PairCipher == Ndis802_11Encryption3Enabled)
++ pAd->SharedKey[BSS0][0].CipherAlg = CIPHER_AES;
++ else
++ pAd->SharedKey[BSS0][0].CipherAlg = CIPHER_NONE;
++
++ // Update these related information to MAC_TABLE_ENTRY
++ pEntry = &pAd->MacTab.Content[BSSID_WCID];
++ NdisMoveMemory(pEntry->PairwiseKey.Key, pAd->SharedKey[BSS0][0].Key, LEN_TKIP_EK);
++ NdisMoveMemory(pEntry->PairwiseKey.RxMic, pAd->SharedKey[BSS0][0].RxMic, LEN_TKIP_RXMICK);
++ NdisMoveMemory(pEntry->PairwiseKey.TxMic, pAd->SharedKey[BSS0][0].TxMic, LEN_TKIP_TXMICK);
++ pEntry->PairwiseKey.CipherAlg = pAd->SharedKey[BSS0][0].CipherAlg;
++
++ // Update pairwise key information to ASIC Shared Key Table
++ AsicAddSharedKeyEntry(pAd,
++ BSS0,
++ 0,
++ pAd->SharedKey[BSS0][0].CipherAlg,
++ pAd->SharedKey[BSS0][0].Key,
++ pAd->SharedKey[BSS0][0].TxMic,
++ pAd->SharedKey[BSS0][0].RxMic);
++
++ // Update ASIC WCID attribute table and IVEIV table
++ RTMPAddWcidAttributeEntry(pAd,
++ BSS0,
++ 0,
++ pAd->SharedKey[BSS0][0].CipherAlg,
++ pEntry);
++
++ if (pAd->StaCfg.AuthMode >= Ndis802_11AuthModeWPA2)
++ {
++ // set 802.1x port control
++ //pAd->StaCfg.PortSecured = WPA_802_1X_PORT_SECURED;
++ STA_PORT_SECURED(pAd);
++
++ // Indicate Connected for GUI
++ pAd->IndicateMediaState = NdisMediaStateConnected;
++ }
++ }
++ else
++ {
++ // Update GTK
++ pAd->StaCfg.DefaultKeyId = (pKey->KeyIndex & 0xFF);
++ NdisZeroMemory(&pAd->SharedKey[BSS0][pAd->StaCfg.DefaultKeyId], sizeof(CIPHER_KEY));
++ pAd->SharedKey[BSS0][pAd->StaCfg.DefaultKeyId].KeyLen = LEN_TKIP_EK;
++ NdisMoveMemory(pAd->SharedKey[BSS0][pAd->StaCfg.DefaultKeyId].Key, pKey->KeyMaterial, LEN_TKIP_EK);
++#ifdef WPA_SUPPLICANT_SUPPORT
++ if (pAd->StaCfg.GroupCipher == Ndis802_11Encryption2Enabled)
++ {
++ NdisMoveMemory(pAd->SharedKey[BSS0][pAd->StaCfg.DefaultKeyId].RxMic, pKey->KeyMaterial + LEN_TKIP_EK, LEN_TKIP_TXMICK);
++ NdisMoveMemory(pAd->SharedKey[BSS0][pAd->StaCfg.DefaultKeyId].TxMic, pKey->KeyMaterial + LEN_TKIP_EK + LEN_TKIP_TXMICK, LEN_TKIP_RXMICK);
++ }
++ else
++#endif // WPA_SUPPLICANT_SUPPORT //
++ {
++ NdisMoveMemory(pAd->SharedKey[BSS0][pAd->StaCfg.DefaultKeyId].TxMic, pKey->KeyMaterial + LEN_TKIP_EK, LEN_TKIP_TXMICK);
++ NdisMoveMemory(pAd->SharedKey[BSS0][pAd->StaCfg.DefaultKeyId].RxMic, pKey->KeyMaterial + LEN_TKIP_EK + LEN_TKIP_TXMICK, LEN_TKIP_RXMICK);
++ }
++
++ // Update Shared Key CipherAlg
++ pAd->SharedKey[BSS0][pAd->StaCfg.DefaultKeyId].CipherAlg = CIPHER_NONE;
++ if (pAd->StaCfg.GroupCipher == Ndis802_11Encryption2Enabled)
++ pAd->SharedKey[BSS0][pAd->StaCfg.DefaultKeyId].CipherAlg = CIPHER_TKIP;
++ else if (pAd->StaCfg.GroupCipher == Ndis802_11Encryption3Enabled)
++ pAd->SharedKey[BSS0][pAd->StaCfg.DefaultKeyId].CipherAlg = CIPHER_AES;
++
++ // Update group key information to ASIC Shared Key Table
++ AsicAddSharedKeyEntry(pAd,
++ BSS0,
++ pAd->StaCfg.DefaultKeyId,
++ pAd->SharedKey[BSS0][pAd->StaCfg.DefaultKeyId].CipherAlg,
++ pAd->SharedKey[BSS0][pAd->StaCfg.DefaultKeyId].Key,
++ pAd->SharedKey[BSS0][pAd->StaCfg.DefaultKeyId].TxMic,
++ pAd->SharedKey[BSS0][pAd->StaCfg.DefaultKeyId].RxMic);
++
++ // Update ASIC WCID attribute table and IVEIV table
++ RTMPAddWcidAttributeEntry(pAd,
++ BSS0,
++ pAd->StaCfg.DefaultKeyId,
++ pAd->SharedKey[BSS0][pAd->StaCfg.DefaultKeyId].CipherAlg,
++ NULL);
++
++ // set 802.1x port control
++ //pAd->StaCfg.PortSecured = WPA_802_1X_PORT_SECURED;
++ STA_PORT_SECURED(pAd);
++
++ // Indicate Connected for GUI
++ pAd->IndicateMediaState = NdisMediaStateConnected;
++ }
++ }
++ else // dynamic WEP from wpa_supplicant
++ {
++ UCHAR CipherAlg;
++ PUCHAR Key;
++
++ if(pKey->KeyLength == 32)
++ goto end;
++
++ KeyIdx = pKey->KeyIndex & 0x0fffffff;
++
++ if (KeyIdx < 4)
++ {
++ // it is a default shared key, for Pairwise key setting
++ if (pKey->KeyIndex & 0x80000000)
++ {
++ pEntry = MacTableLookup(pAd, pKey->BSSID);
++
++ if (pEntry)
++ {
++ DBGPRINT(RT_DEBUG_TRACE, ("RTMPAddKey: Set Pair-wise Key\n"));
++
++ // set key material and key length
++ pEntry->PairwiseKey.KeyLen = (UCHAR)pKey->KeyLength;
++ NdisMoveMemory(pEntry->PairwiseKey.Key, &pKey->KeyMaterial, pKey->KeyLength);
++
++ // set Cipher type
++ if (pKey->KeyLength == 5)
++ pEntry->PairwiseKey.CipherAlg = CIPHER_WEP64;
++ else
++ pEntry->PairwiseKey.CipherAlg = CIPHER_WEP128;
++
++ // Add Pair-wise key to Asic
++ AsicAddPairwiseKeyEntry(
++ pAd,
++ pEntry->Addr,
++ (UCHAR)pEntry->Aid,
++ &pEntry->PairwiseKey);
++
++ // update WCID attribute table and IVEIV table for this entry
++ RTMPAddWcidAttributeEntry(
++ pAd,
++ BSS0,
++ KeyIdx, // The value may be not zero
++ pEntry->PairwiseKey.CipherAlg,
++ pEntry);
++
++ }
++ }
++ else
++ {
++ // Default key for tx (shared key)
++ pAd->StaCfg.DefaultKeyId = (UCHAR) KeyIdx;
++
++ // set key material and key length
++ pAd->SharedKey[BSS0][KeyIdx].KeyLen = (UCHAR) pKey->KeyLength;
++ NdisMoveMemory(pAd->SharedKey[BSS0][KeyIdx].Key, &pKey->KeyMaterial, pKey->KeyLength);
++
++ // Set Ciper type
++ if (pKey->KeyLength == 5)
++ pAd->SharedKey[BSS0][KeyIdx].CipherAlg = CIPHER_WEP64;
++ else
++ pAd->SharedKey[BSS0][KeyIdx].CipherAlg = CIPHER_WEP128;
++
++ CipherAlg = pAd->SharedKey[BSS0][KeyIdx].CipherAlg;
++ Key = pAd->SharedKey[BSS0][KeyIdx].Key;
++
++ // Set Group key material to Asic
++ AsicAddSharedKeyEntry(pAd, BSS0, KeyIdx, CipherAlg, Key, NULL, NULL);
++
++ // Update WCID attribute table and IVEIV table for this group key table
++ RTMPAddWcidAttributeEntry(pAd, BSS0, KeyIdx, CipherAlg, NULL);
++
++ }
++ }
++ }
++end:
++ return;
++}
++
++char * rtstrchr(const char * s, int c)
++{
++ for(; *s != (char) c; ++s)
++ if (*s == '\0')
++ return NULL;
++ return (char *) s;
++}
++
++/*
++This is required for LinEX2004/kernel2.6.7 to provide iwlist scanning function
++*/
++
++int
++rt_ioctl_giwname(struct net_device *dev,
++ struct iw_request_info *info,
++ char *name, char *extra)
++{
++// PRTMP_ADAPTER pAdapter = (PRTMP_ADAPTER) dev->priv;
++
++#ifdef RT2870
++ strncpy(name, "RT2870 Wireless", IFNAMSIZ);
++#endif // RT2870 //
++ return 0;
++}
++
++int rt_ioctl_siwfreq(struct net_device *dev,
++ struct iw_request_info *info,
++ struct iw_freq *freq, char *extra)
++{
++ PRTMP_ADAPTER pAdapter = (PRTMP_ADAPTER) dev->priv;
++ int chan = -1;
++
++ //check if the interface is down
++ if(!RTMP_TEST_FLAG(pAdapter, fRTMP_ADAPTER_INTERRUPT_IN_USE))
++ {
++ DBGPRINT(RT_DEBUG_TRACE, ("INFO::Network is down!\n"));
++ return -ENETDOWN;
++ }
++
++
++ if (freq->e > 1)
++ return -EINVAL;
++
++ if((freq->e == 0) && (freq->m <= 1000))
++ chan = freq->m; // Setting by channel number
++ else
++ MAP_KHZ_TO_CHANNEL_ID( (freq->m /100) , chan); // Setting by frequency - search the table , like 2.412G, 2.422G,
++
++ if (ChannelSanity(pAdapter, chan) == TRUE)
++ {
++ pAdapter->CommonCfg.Channel = chan;
++ DBGPRINT(RT_DEBUG_ERROR, ("==>rt_ioctl_siwfreq::SIOCSIWFREQ[cmd=0x%x] (Channel=%d)\n", SIOCSIWFREQ, pAdapter->CommonCfg.Channel));
++ }
++ else
++ return -EINVAL;
++
++ return 0;
++}
++int rt_ioctl_giwfreq(struct net_device *dev,
++ struct iw_request_info *info,
++ struct iw_freq *freq, char *extra)
++{
++ VIRTUAL_ADAPTER *pVirtualAd = NULL;
++ PRTMP_ADAPTER pAdapter = NULL;
++ UCHAR ch;
++ ULONG m;
++
++ if (dev->priv_flags == INT_MAIN)
++ {
++ pAdapter = dev->priv;
++ }
++ else
++ {
++ pVirtualAd = dev->priv;
++ if (pVirtualAd && pVirtualAd->RtmpDev)
++ pAdapter = pVirtualAd->RtmpDev->priv;
++ }
++
++ if (pAdapter == NULL)
++ {
++ /* if 1st open fail, pAd will be free;
++ So the net_dev->priv will be NULL in 2rd open */
++ return -ENETDOWN;
++ }
++
++ ch = pAdapter->CommonCfg.Channel;
++
++ DBGPRINT(RT_DEBUG_TRACE,("==>rt_ioctl_giwfreq %d\n", ch));
++
++ MAP_CHANNEL_ID_TO_KHZ(ch, m);
++ freq->m = m * 100;
++ freq->e = 1;
++ return 0;
++}
++
++int rt_ioctl_siwmode(struct net_device *dev,
++ struct iw_request_info *info,
++ __u32 *mode, char *extra)
++{
++ PRTMP_ADAPTER pAdapter = (PRTMP_ADAPTER) dev->priv;
++
++ //check if the interface is down
++ if(!RTMP_TEST_FLAG(pAdapter, fRTMP_ADAPTER_INTERRUPT_IN_USE))
++ {
++ DBGPRINT(RT_DEBUG_TRACE, ("INFO::Network is down!\n"));
++ return -ENETDOWN;
++ }
++
++ switch (*mode)
++ {
++ case IW_MODE_ADHOC:
++ Set_NetworkType_Proc(pAdapter, "Adhoc");
++ break;
++ case IW_MODE_INFRA:
++ Set_NetworkType_Proc(pAdapter, "Infra");
++ break;
++#if (LINUX_VERSION_CODE > KERNEL_VERSION(2,4,20))
++ case IW_MODE_MONITOR:
++ Set_NetworkType_Proc(pAdapter, "Monitor");
++ break;
++#endif
++ default:
++ DBGPRINT(RT_DEBUG_TRACE, ("===>rt_ioctl_siwmode::SIOCSIWMODE (unknown %d)\n", *mode));
++ return -EINVAL;
++ }
++
++ // Reset Ralink supplicant to not use, it will be set to start when UI set PMK key
++ pAdapter->StaCfg.WpaState = SS_NOTUSE;
++
++ return 0;
++}
++
++int rt_ioctl_giwmode(struct net_device *dev,
++ struct iw_request_info *info,
++ __u32 *mode, char *extra)
++{
++ PRTMP_ADAPTER pAdapter = NULL;
++ VIRTUAL_ADAPTER *pVirtualAd = NULL;
++
++ if (dev->priv_flags == INT_MAIN)
++ {
++ pAdapter = dev->priv;
++ }
++ else
++ {
++ pVirtualAd = dev->priv;
++ if (pVirtualAd && pVirtualAd->RtmpDev)
++ pAdapter = pVirtualAd->RtmpDev->priv;
++ }
++
++ if (pAdapter == NULL)
++ {
++ /* if 1st open fail, pAd will be free;
++ So the net_dev->priv will be NULL in 2rd open */
++ return -ENETDOWN;
++ }
++
++ if (ADHOC_ON(pAdapter))
++ *mode = IW_MODE_ADHOC;
++ else if (INFRA_ON(pAdapter))
++ *mode = IW_MODE_INFRA;
++#if (LINUX_VERSION_CODE > KERNEL_VERSION(2,4,20))
++ else if (MONITOR_ON(pAdapter))
++ {
++ *mode = IW_MODE_MONITOR;
++ }
++#endif
++ else
++ *mode = IW_MODE_AUTO;
++
++ DBGPRINT(RT_DEBUG_TRACE, ("==>rt_ioctl_giwmode(mode=%d)\n", *mode));
++ return 0;
++}
++
++int rt_ioctl_siwsens(struct net_device *dev,
++ struct iw_request_info *info,
++ char *name, char *extra)
++{
++ PRTMP_ADAPTER pAdapter = (PRTMP_ADAPTER) dev->priv;
++
++ //check if the interface is down
++ if(!RTMP_TEST_FLAG(pAdapter, fRTMP_ADAPTER_INTERRUPT_IN_USE))
++ {
++ DBGPRINT(RT_DEBUG_TRACE, ("INFO::Network is down!\n"));
++ return -ENETDOWN;
++ }
++
++ return 0;
++}
++
++int rt_ioctl_giwsens(struct net_device *dev,
++ struct iw_request_info *info,
++ char *name, char *extra)
++{
++ return 0;
++}
++
++int rt_ioctl_giwrange(struct net_device *dev,
++ struct iw_request_info *info,
++ struct iw_point *data, char *extra)
++{
++ PRTMP_ADAPTER pAdapter = NULL;
++ VIRTUAL_ADAPTER *pVirtualAd = NULL;
++ struct iw_range *range = (struct iw_range *) extra;
++ u16 val;
++ int i;
++
++ if (dev->priv_flags == INT_MAIN)
++ {
++ pAdapter = dev->priv;
++ }
++ else
++ {
++ pVirtualAd = dev->priv;
++ if (pVirtualAd && pVirtualAd->RtmpDev)
++ pAdapter = pVirtualAd->RtmpDev->priv;
++ }
++
++ if (pAdapter == NULL)
++ {
++ /* if 1st open fail, pAd will be free;
++ So the net_dev->priv will be NULL in 2rd open */
++ return -ENETDOWN;
++ }
++
++ DBGPRINT(RT_DEBUG_TRACE ,("===>rt_ioctl_giwrange\n"));
++ data->length = sizeof(struct iw_range);
++ memset(range, 0, sizeof(struct iw_range));
++
++ range->txpower_capa = IW_TXPOW_DBM;
++
++ if (INFRA_ON(pAdapter)||ADHOC_ON(pAdapter))
++ {
++ range->min_pmp = 1 * 1024;
++ range->max_pmp = 65535 * 1024;
++ range->min_pmt = 1 * 1024;
++ range->max_pmt = 1000 * 1024;
++ range->pmp_flags = IW_POWER_PERIOD;
++ range->pmt_flags = IW_POWER_TIMEOUT;
++ range->pm_capa = IW_POWER_PERIOD | IW_POWER_TIMEOUT |
++ IW_POWER_UNICAST_R | IW_POWER_ALL_R;
++ }
++
++ range->we_version_compiled = WIRELESS_EXT;
++ range->we_version_source = 14;
++
++ range->retry_capa = IW_RETRY_LIMIT;
++ range->retry_flags = IW_RETRY_LIMIT;
++ range->min_retry = 0;
++ range->max_retry = 255;
++
++ range->num_channels = pAdapter->ChannelListNum;
++
++ val = 0;
++ for (i = 1; i <= range->num_channels; i++)
++ {
++ u32 m;
++ range->freq[val].i = pAdapter->ChannelList[i-1].Channel;
++ MAP_CHANNEL_ID_TO_KHZ(pAdapter->ChannelList[i-1].Channel, m);
++ range->freq[val].m = m * 100; /* HZ */
++
++ range->freq[val].e = 1;
++ val++;
++ if (val == IW_MAX_FREQUENCIES)
++ break;
++ }
++ range->num_frequency = val;
++
++ range->max_qual.qual = 100; /* what is correct max? This was not
++ * documented exactly. At least
++ * 69 has been observed. */
++ range->max_qual.level = 0; /* dB */
++ range->max_qual.noise = 0; /* dB */
++
++ /* What would be suitable values for "average/typical" qual? */
++ range->avg_qual.qual = 20;
++ range->avg_qual.level = -60;
++ range->avg_qual.noise = -95;
++ range->sensitivity = 3;
++
++ range->max_encoding_tokens = NR_WEP_KEYS;
++ range->num_encoding_sizes = 2;
++ range->encoding_size[0] = 5;
++ range->encoding_size[1] = 13;
++
++ range->min_rts = 0;
++ range->max_rts = 2347;
++ range->min_frag = 256;
++ range->max_frag = 2346;
++
++#if WIRELESS_EXT > 17
++ /* IW_ENC_CAPA_* bit field */
++ range->enc_capa = IW_ENC_CAPA_WPA | IW_ENC_CAPA_WPA2 |
++ IW_ENC_CAPA_CIPHER_TKIP | IW_ENC_CAPA_CIPHER_CCMP;
++#endif
++
++ return 0;
++}
++
++int rt_ioctl_siwap(struct net_device *dev,
++ struct iw_request_info *info,
++ struct sockaddr *ap_addr, char *extra)
++{
++ PRTMP_ADAPTER pAdapter = (PRTMP_ADAPTER) dev->priv;
++ NDIS_802_11_MAC_ADDRESS Bssid;
++
++ //check if the interface is down
++ if(!RTMP_TEST_FLAG(pAdapter, fRTMP_ADAPTER_INTERRUPT_IN_USE))
++ {
++ DBGPRINT(RT_DEBUG_TRACE, ("INFO::Network is down!\n"));
++ return -ENETDOWN;
++ }
++
++ if (pAdapter->Mlme.CntlMachine.CurrState != CNTL_IDLE)
++ {
++ RT28XX_MLME_RESET_STATE_MACHINE(pAdapter);
++ DBGPRINT(RT_DEBUG_TRACE, ("!!! MLME busy, reset MLME state machine !!!\n"));
++ }
++
++ // tell CNTL state machine to call NdisMSetInformationComplete() after completing
++ // this request, because this request is initiated by NDIS.
++ pAdapter->MlmeAux.CurrReqIsFromNdis = FALSE;
++ // Prevent to connect AP again in STAMlmePeriodicExec
++ pAdapter->MlmeAux.AutoReconnectSsidLen= 32;
++
++ memset(Bssid, 0, MAC_ADDR_LEN);
++ memcpy(Bssid, ap_addr->sa_data, MAC_ADDR_LEN);
++ MlmeEnqueue(pAdapter,
++ MLME_CNTL_STATE_MACHINE,
++ OID_802_11_BSSID,
++ sizeof(NDIS_802_11_MAC_ADDRESS),
++ (VOID *)&Bssid);
++
++ DBGPRINT(RT_DEBUG_TRACE, ("IOCTL::SIOCSIWAP %02x:%02x:%02x:%02x:%02x:%02x\n",
++ Bssid[0], Bssid[1], Bssid[2], Bssid[3], Bssid[4], Bssid[5]));
++
++ return 0;
++}
++
++int rt_ioctl_giwap(struct net_device *dev,
++ struct iw_request_info *info,
++ struct sockaddr *ap_addr, char *extra)
++{
++ PRTMP_ADAPTER pAdapter = NULL;
++ VIRTUAL_ADAPTER *pVirtualAd = NULL;
++
++ if (dev->priv_flags == INT_MAIN)
++ {
++ pAdapter = dev->priv;
++ }
++ else
++ {
++ pVirtualAd = dev->priv;
++ if (pVirtualAd && pVirtualAd->RtmpDev)
++ pAdapter = pVirtualAd->RtmpDev->priv;
++ }
++
++ if (pAdapter == NULL)
++ {
++ /* if 1st open fail, pAd will be free;
++ So the net_dev->priv will be NULL in 2rd open */
++ return -ENETDOWN;
++ }
++
++ if (INFRA_ON(pAdapter) || ADHOC_ON(pAdapter))
++ {
++ ap_addr->sa_family = ARPHRD_ETHER;
++ memcpy(ap_addr->sa_data, &pAdapter->CommonCfg.Bssid, ETH_ALEN);
++ }
++#ifdef WPA_SUPPLICANT_SUPPORT
++ // Add for RT2870
++ else if (pAdapter->StaCfg.WpaSupplicantUP != WPA_SUPPLICANT_DISABLE)
++ {
++ ap_addr->sa_family = ARPHRD_ETHER;
++ memcpy(ap_addr->sa_data, &pAdapter->MlmeAux.Bssid, ETH_ALEN);
++ }
++#endif // WPA_SUPPLICANT_SUPPORT //
++ else
++ {
++ DBGPRINT(RT_DEBUG_TRACE, ("IOCTL::SIOCGIWAP(=EMPTY)\n"));
++ return -ENOTCONN;
++ }
++
++ return 0;
++}
++
++/*
++ * Units are in db above the noise floor. That means the
++ * rssi values reported in the tx/rx descriptors in the
++ * driver are the SNR expressed in db.
++ *
++ * If you assume that the noise floor is -95, which is an
++ * excellent assumption 99.5 % of the time, then you can
++ * derive the absolute signal level (i.e. -95 + rssi).
++ * There are some other slight factors to take into account
++ * depending on whether the rssi measurement is from 11b,
++ * 11g, or 11a. These differences are at most 2db and
++ * can be documented.
++ *
++ * NB: various calculations are based on the orinoco/wavelan
++ * drivers for compatibility
++ */
++static void set_quality(PRTMP_ADAPTER pAdapter,
++ struct iw_quality *iq,
++ signed char rssi)
++{
++ __u8 ChannelQuality;
++
++ // Normalize Rssi
++ if (rssi >= -50)
++ ChannelQuality = 100;
++ else if (rssi >= -80) // between -50 ~ -80dbm
++ ChannelQuality = (__u8)(24 + ((rssi + 80) * 26)/10);
++ else if (rssi >= -90) // between -80 ~ -90dbm
++ ChannelQuality = (__u8)((rssi + 90) * 26)/10;
++ else
++ ChannelQuality = 0;
++
++ iq->qual = (__u8)ChannelQuality;
++
++ iq->level = (__u8)(rssi);
++ iq->noise = (pAdapter->BbpWriteLatch[66] > pAdapter->BbpTuning.FalseCcaUpperThreshold) ? ((__u8)pAdapter->BbpTuning.FalseCcaUpperThreshold) : ((__u8) pAdapter->BbpWriteLatch[66]); // noise level (dBm)
++ iq->noise += 256 - 143;
++ iq->updated = pAdapter->iw_stats.qual.updated;
++}
++
++int rt_ioctl_iwaplist(struct net_device *dev,
++ struct iw_request_info *info,
++ struct iw_point *data, char *extra)
++{
++ PRTMP_ADAPTER pAdapter = (PRTMP_ADAPTER) dev->priv;
++
++ struct sockaddr addr[IW_MAX_AP];
++ struct iw_quality qual[IW_MAX_AP];
++ int i;
++
++ //check if the interface is down
++ if(!RTMP_TEST_FLAG(pAdapter, fRTMP_ADAPTER_INTERRUPT_IN_USE))
++ {
++ DBGPRINT(RT_DEBUG_TRACE, ("INFO::Network is down!\n"));
++ data->length = 0;
++ return 0;
++ //return -ENETDOWN;
++ }
++
++ for (i = 0; i <IW_MAX_AP ; i++)
++ {
++ if (i >= pAdapter->ScanTab.BssNr)
++ break;
++ addr[i].sa_family = ARPHRD_ETHER;
++ memcpy(addr[i].sa_data, &pAdapter->ScanTab.BssEntry[i].Bssid, MAC_ADDR_LEN);
++ set_quality(pAdapter, &qual[i], pAdapter->ScanTab.BssEntry[i].Rssi);
++ }
++ data->length = i;
++ memcpy(extra, &addr, i*sizeof(addr[0]));
++ data->flags = 1; /* signal quality present (sort of) */
++ memcpy(extra + i*sizeof(addr[0]), &qual, i*sizeof(qual[i]));
++
++ return 0;
++}
++
++#ifdef SIOCGIWSCAN
++int rt_ioctl_siwscan(struct net_device *dev,
++ struct iw_request_info *info,
++ struct iw_point *data, char *extra)
++{
++ PRTMP_ADAPTER pAdapter = (PRTMP_ADAPTER) dev->priv;
++
++ ULONG Now;
++ int Status = NDIS_STATUS_SUCCESS;
++
++ //check if the interface is down
++ if(!RTMP_TEST_FLAG(pAdapter, fRTMP_ADAPTER_INTERRUPT_IN_USE))
++ {
++ DBGPRINT(RT_DEBUG_TRACE, ("INFO::Network is down!\n"));
++ return -ENETDOWN;
++ }
++
++ if (MONITOR_ON(pAdapter))
++ {
++ DBGPRINT(RT_DEBUG_TRACE, ("!!! Driver is in Monitor Mode now !!!\n"));
++ return -EINVAL;
++ }
++
++
++#ifdef WPA_SUPPLICANT_SUPPORT
++ if (pAdapter->StaCfg.WpaSupplicantUP == WPA_SUPPLICANT_ENABLE)
++ {
++ pAdapter->StaCfg.WpaSupplicantScanCount++;
++ }
++#endif // WPA_SUPPLICANT_SUPPORT //
++
++ pAdapter->StaCfg.bScanReqIsFromWebUI = TRUE;
++ if (RTMP_TEST_FLAG(pAdapter, fRTMP_ADAPTER_BSS_SCAN_IN_PROGRESS))
++ return 0;
++ do{
++ Now = jiffies;
++
++#ifdef WPA_SUPPLICANT_SUPPORT
++ if ((pAdapter->StaCfg.WpaSupplicantUP == WPA_SUPPLICANT_ENABLE) &&
++ (pAdapter->StaCfg.WpaSupplicantScanCount > 3))
++ {
++ DBGPRINT(RT_DEBUG_TRACE, ("!!! WpaSupplicantScanCount > 3\n"));
++ Status = NDIS_STATUS_SUCCESS;
++ break;
++ }
++#endif // WPA_SUPPLICANT_SUPPORT //
++
++ if ((OPSTATUS_TEST_FLAG(pAdapter, fOP_STATUS_MEDIA_STATE_CONNECTED)) &&
++ ((pAdapter->StaCfg.AuthMode == Ndis802_11AuthModeWPA) ||
++ (pAdapter->StaCfg.AuthMode == Ndis802_11AuthModeWPAPSK)) &&
++ (pAdapter->StaCfg.PortSecured == WPA_802_1X_PORT_NOT_SECURED))
++ {
++ DBGPRINT(RT_DEBUG_TRACE, ("!!! Link UP, Port Not Secured! ignore this set::OID_802_11_BSSID_LIST_SCAN\n"));
++ Status = NDIS_STATUS_SUCCESS;
++ break;
++ }
++
++ if (pAdapter->Mlme.CntlMachine.CurrState != CNTL_IDLE)
++ {
++ RT28XX_MLME_RESET_STATE_MACHINE(pAdapter);
++ DBGPRINT(RT_DEBUG_TRACE, ("!!! MLME busy, reset MLME state machine !!!\n"));
++ }
++
++ // tell CNTL state machine to call NdisMSetInformationComplete() after completing
++ // this request, because this request is initiated by NDIS.
++ pAdapter->MlmeAux.CurrReqIsFromNdis = FALSE;
++ // Reset allowed scan retries
++ pAdapter->StaCfg.ScanCnt = 0;
++ pAdapter->StaCfg.LastScanTime = Now;
++
++ MlmeEnqueue(pAdapter,
++ MLME_CNTL_STATE_MACHINE,
++ OID_802_11_BSSID_LIST_SCAN,
++ 0,
++ NULL);
++
++ Status = NDIS_STATUS_SUCCESS;
++ RT28XX_MLME_HANDLER(pAdapter);
++ }while(0);
++ return 0;
++}
++
++int rt_ioctl_giwscan(struct net_device *dev,
++ struct iw_request_info *info,
++ struct iw_point *data, char *extra)
++{
++
++ PRTMP_ADAPTER pAdapter = (PRTMP_ADAPTER) dev->priv;
++ int i=0;
++ char *current_ev = extra, *previous_ev = extra;
++ char *end_buf;
++ char *current_val, custom[MAX_CUSTOM_LEN] = {0};
++#ifndef IWEVGENIE
++ char idx;
++#endif // IWEVGENIE //
++ struct iw_event iwe;
++
++ if (RTMP_TEST_FLAG(pAdapter, fRTMP_ADAPTER_BSS_SCAN_IN_PROGRESS))
++ {
++ /*
++ * Still scanning, indicate the caller should try again.
++ */
++ return -EAGAIN;
++ }
++
++
++#ifdef WPA_SUPPLICANT_SUPPORT
++ if (pAdapter->StaCfg.WpaSupplicantUP == WPA_SUPPLICANT_ENABLE)
++ {
++ pAdapter->StaCfg.WpaSupplicantScanCount = 0;
++ }
++#endif // WPA_SUPPLICANT_SUPPORT //
++
++ if (pAdapter->ScanTab.BssNr == 0)
++ {
++ data->length = 0;
++ return 0;
++ }
++
++#if WIRELESS_EXT >= 17
++ if (data->length > 0)
++ end_buf = extra + data->length;
++ else
++ end_buf = extra + IW_SCAN_MAX_DATA;
++#else
++ end_buf = extra + IW_SCAN_MAX_DATA;
++#endif
++
++ for (i = 0; i < pAdapter->ScanTab.BssNr; i++)
++ {
++ if (current_ev >= end_buf)
++ {
++#if WIRELESS_EXT >= 17
++ return -E2BIG;
++#else
++ break;
++#endif
++ }
++
++ //MAC address
++ //================================
++ memset(&iwe, 0, sizeof(iwe));
++ iwe.cmd = SIOCGIWAP;
++ iwe.u.ap_addr.sa_family = ARPHRD_ETHER;
++ memcpy(iwe.u.ap_addr.sa_data, &pAdapter->ScanTab.BssEntry[i].Bssid, ETH_ALEN);
++
++ previous_ev = current_ev;
++ current_ev = IWE_STREAM_ADD_EVENT(info, current_ev,end_buf, &iwe, IW_EV_ADDR_LEN);
++ if (current_ev == previous_ev)
++#if WIRELESS_EXT >= 17
++ return -E2BIG;
++#else
++ break;
++#endif
++
++ //ESSID
++ //================================
++ memset(&iwe, 0, sizeof(iwe));
++ iwe.cmd = SIOCGIWESSID;
++ iwe.u.data.length = pAdapter->ScanTab.BssEntry[i].SsidLen;
++ iwe.u.data.flags = 1;
++
++ previous_ev = current_ev;
++ current_ev = IWE_STREAM_ADD_POINT(info, current_ev,end_buf, &iwe, pAdapter->ScanTab.BssEntry[i].Ssid);
++ if (current_ev == previous_ev)
++#if WIRELESS_EXT >= 17
++ return -E2BIG;
++#else
++ break;
++#endif
++
++ //Network Type
++ //================================
++ memset(&iwe, 0, sizeof(iwe));
++ iwe.cmd = SIOCGIWMODE;
++ if (pAdapter->ScanTab.BssEntry[i].BssType == Ndis802_11IBSS)
++ {
++ iwe.u.mode = IW_MODE_ADHOC;
++ }
++ else if (pAdapter->ScanTab.BssEntry[i].BssType == Ndis802_11Infrastructure)
++ {
++ iwe.u.mode = IW_MODE_INFRA;
++ }
++ else
++ {
++ iwe.u.mode = IW_MODE_AUTO;
++ }
++ iwe.len = IW_EV_UINT_LEN;
++
++ previous_ev = current_ev;
++ current_ev = IWE_STREAM_ADD_EVENT(info, current_ev, end_buf, &iwe, IW_EV_UINT_LEN);
++ if (current_ev == previous_ev)
++#if WIRELESS_EXT >= 17
++ return -E2BIG;
++#else
++ break;
++#endif
++
++ //Channel and Frequency
++ //================================
++ memset(&iwe, 0, sizeof(iwe));
++ iwe.cmd = SIOCGIWFREQ;
++ if (INFRA_ON(pAdapter) || ADHOC_ON(pAdapter))
++ iwe.u.freq.m = pAdapter->ScanTab.BssEntry[i].Channel;
++ else
++ iwe.u.freq.m = pAdapter->ScanTab.BssEntry[i].Channel;
++ iwe.u.freq.e = 0;
++ iwe.u.freq.i = 0;
++
++ previous_ev = current_ev;
++ current_ev = IWE_STREAM_ADD_EVENT(info, current_ev,end_buf, &iwe, IW_EV_FREQ_LEN);
++ if (current_ev == previous_ev)
++#if WIRELESS_EXT >= 17
++ return -E2BIG;
++#else
++ break;
++#endif
++
++ //Add quality statistics
++ //================================
++ memset(&iwe, 0, sizeof(iwe));
++ iwe.cmd = IWEVQUAL;
++ iwe.u.qual.level = 0;
++ iwe.u.qual.noise = 0;
++ set_quality(pAdapter, &iwe.u.qual, pAdapter->ScanTab.BssEntry[i].Rssi);
++ current_ev = IWE_STREAM_ADD_EVENT(info, current_ev, end_buf, &iwe, IW_EV_QUAL_LEN);
++ if (current_ev == previous_ev)
++#if WIRELESS_EXT >= 17
++ return -E2BIG;
++#else
++ break;
++#endif
++
++ //Encyption key
++ //================================
++ memset(&iwe, 0, sizeof(iwe));
++ iwe.cmd = SIOCGIWENCODE;
++ if (CAP_IS_PRIVACY_ON (pAdapter->ScanTab.BssEntry[i].CapabilityInfo ))
++ iwe.u.data.flags =IW_ENCODE_ENABLED | IW_ENCODE_NOKEY;
++ else
++ iwe.u.data.flags = IW_ENCODE_DISABLED;
++
++ previous_ev = current_ev;
++ current_ev = IWE_STREAM_ADD_POINT(info, current_ev, end_buf,&iwe, (char *)pAdapter->SharedKey[BSS0][(iwe.u.data.flags & IW_ENCODE_INDEX)-1].Key);
++ if (current_ev == previous_ev)
++#if WIRELESS_EXT >= 17
++ return -E2BIG;
++#else
++ break;
++#endif
++
++ //Bit Rate
++ //================================
++ if (pAdapter->ScanTab.BssEntry[i].SupRateLen)
++ {
++ UCHAR tmpRate = pAdapter->ScanTab.BssEntry[i].SupRate[pAdapter->ScanTab.BssEntry[i].SupRateLen-1];
++ memset(&iwe, 0, sizeof(iwe));
++ iwe.cmd = SIOCGIWRATE;
++ current_val = current_ev + IW_EV_LCP_LEN;
++ if (tmpRate == 0x82)
++ iwe.u.bitrate.value = 1 * 1000000;
++ else if (tmpRate == 0x84)
++ iwe.u.bitrate.value = 2 * 1000000;
++ else if (tmpRate == 0x8B)
++ iwe.u.bitrate.value = 5.5 * 1000000;
++ else if (tmpRate == 0x96)
++ iwe.u.bitrate.value = 11 * 1000000;
++ else
++ iwe.u.bitrate.value = (tmpRate/2) * 1000000;
++
++ iwe.u.bitrate.disabled = 0;
++ current_val = IWE_STREAM_ADD_VALUE(info, current_ev,
++ current_val, end_buf, &iwe,
++ IW_EV_PARAM_LEN);
++
++ if((current_val-current_ev)>IW_EV_LCP_LEN)
++ current_ev = current_val;
++ else
++#if WIRELESS_EXT >= 17
++ return -E2BIG;
++#else
++ break;
++#endif
++ }
++
++#ifdef IWEVGENIE
++ //WPA IE
++ if (pAdapter->ScanTab.BssEntry[i].WpaIE.IELen > 0)
++ {
++ memset(&iwe, 0, sizeof(iwe));
++ memset(&custom[0], 0, MAX_CUSTOM_LEN);
++ memcpy(custom, &(pAdapter->ScanTab.BssEntry[i].WpaIE.IE[0]),
++ pAdapter->ScanTab.BssEntry[i].WpaIE.IELen);
++ iwe.cmd = IWEVGENIE;
++ iwe.u.data.length = pAdapter->ScanTab.BssEntry[i].WpaIE.IELen;
++ current_ev = IWE_STREAM_ADD_POINT(info, current_ev, end_buf, &iwe, custom);
++ if (current_ev == previous_ev)
++#if WIRELESS_EXT >= 17
++ return -E2BIG;
++#else
++ break;
++#endif
++ }
++
++ //WPA2 IE
++ if (pAdapter->ScanTab.BssEntry[i].RsnIE.IELen > 0)
++ {
++ memset(&iwe, 0, sizeof(iwe));
++ memset(&custom[0], 0, MAX_CUSTOM_LEN);
++ memcpy(custom, &(pAdapter->ScanTab.BssEntry[i].RsnIE.IE[0]),
++ pAdapter->ScanTab.BssEntry[i].RsnIE.IELen);
++ iwe.cmd = IWEVGENIE;
++ iwe.u.data.length = pAdapter->ScanTab.BssEntry[i].RsnIE.IELen;
++ current_ev = IWE_STREAM_ADD_POINT(info, current_ev, end_buf, &iwe, custom);
++ if (current_ev == previous_ev)
++#if WIRELESS_EXT >= 17
++ return -E2BIG;
++#else
++ break;
++#endif
++ }
++#else
++ //WPA IE
++ //================================
++ if (pAdapter->ScanTab.BssEntry[i].WpaIE.IELen > 0)
++ {
++ NdisZeroMemory(&iwe, sizeof(iwe));
++ memset(&custom[0], 0, MAX_CUSTOM_LEN);
++ iwe.cmd = IWEVCUSTOM;
++ iwe.u.data.length = (pAdapter->ScanTab.BssEntry[i].WpaIE.IELen * 2) + 7;
++ NdisMoveMemory(custom, "wpa_ie=", 7);
++ for (idx = 0; idx < pAdapter->ScanTab.BssEntry[i].WpaIE.IELen; idx++)
++ sprintf(custom, "%s%02x", custom, pAdapter->ScanTab.BssEntry[i].WpaIE.IE[idx]);
++ previous_ev = current_ev;
++ current_ev = IWE_STREAM_ADD_POINT(info, current_ev, end_buf, &iwe, custom);
++ if (current_ev == previous_ev)
++#if WIRELESS_EXT >= 17
++ return -E2BIG;
++#else
++ break;
++#endif
++ }
++
++ //WPA2 IE
++ if (pAdapter->ScanTab.BssEntry[i].RsnIE.IELen > 0)
++ {
++ NdisZeroMemory(&iwe, sizeof(iwe));
++ memset(&custom[0], 0, MAX_CUSTOM_LEN);
++ iwe.cmd = IWEVCUSTOM;
++ iwe.u.data.length = (pAdapter->ScanTab.BssEntry[i].RsnIE.IELen * 2) + 7;
++ NdisMoveMemory(custom, "rsn_ie=", 7);
++ for (idx = 0; idx < pAdapter->ScanTab.BssEntry[i].RsnIE.IELen; idx++)
++ sprintf(custom, "%s%02x", custom, pAdapter->ScanTab.BssEntry[i].RsnIE.IE[idx]);
++ previous_ev = current_ev;
++ current_ev = IWE_STREAM_ADD_POINT(info, current_ev, end_buf, &iwe, custom);
++ if (current_ev == previous_ev)
++#if WIRELESS_EXT >= 17
++ return -E2BIG;
++#else
++ break;
++#endif
++ }
++#endif // IWEVGENIE //
++ }
++
++ data->length = current_ev - extra;
++ pAdapter->StaCfg.bScanReqIsFromWebUI = FALSE;
++ DBGPRINT(RT_DEBUG_ERROR ,("===>rt_ioctl_giwscan. %d(%d) BSS returned, data->length = %d\n",i , pAdapter->ScanTab.BssNr, data->length));
++ return 0;
++}
++#endif
++
++int rt_ioctl_siwessid(struct net_device *dev,
++ struct iw_request_info *info,
++ struct iw_point *data, char *essid)
++{
++ PRTMP_ADAPTER pAdapter = (PRTMP_ADAPTER) dev->priv;
++
++ //check if the interface is down
++ if(!RTMP_TEST_FLAG(pAdapter, fRTMP_ADAPTER_INTERRUPT_IN_USE))
++ {
++ DBGPRINT(RT_DEBUG_TRACE, ("INFO::Network is down!\n"));
++ return -ENETDOWN;
++ }
++
++ if (data->flags)
++ {
++ PCHAR pSsidString = NULL;
++
++ // Includes null character.
++ if (data->length > (IW_ESSID_MAX_SIZE + 1))
++ return -E2BIG;
++
++ pSsidString = (CHAR *) kmalloc(MAX_LEN_OF_SSID+1, MEM_ALLOC_FLAG);
++ if (pSsidString)
++ {
++ NdisZeroMemory(pSsidString, MAX_LEN_OF_SSID+1);
++ NdisMoveMemory(pSsidString, essid, data->length);
++ if (Set_SSID_Proc(pAdapter, pSsidString) == FALSE)
++ return -EINVAL;
++ }
++ else
++ return -ENOMEM;
++ }
++ else
++ {
++ // ANY ssid
++ if (Set_SSID_Proc(pAdapter, "") == FALSE)
++ return -EINVAL;
++ }
++ return 0;
++}
++
++int rt_ioctl_giwessid(struct net_device *dev,
++ struct iw_request_info *info,
++ struct iw_point *data, char *essid)
++{
++ PRTMP_ADAPTER pAdapter = NULL;
++ VIRTUAL_ADAPTER *pVirtualAd = NULL;
++
++ if (dev->priv_flags == INT_MAIN)
++ {
++ pAdapter = dev->priv;
++ }
++ else
++ {
++ pVirtualAd = dev->priv;
++ if (pVirtualAd && pVirtualAd->RtmpDev)
++ pAdapter = pVirtualAd->RtmpDev->priv;
++ }
++
++ if (pAdapter == NULL)
++ {
++ /* if 1st open fail, pAd will be free;
++ So the net_dev->priv will be NULL in 2rd open */
++ return -ENETDOWN;
++ }
++
++ data->flags = 1;
++ if (MONITOR_ON(pAdapter))
++ {
++ data->length = 0;
++ return 0;
++ }
++
++ if (OPSTATUS_TEST_FLAG(pAdapter, fOP_STATUS_MEDIA_STATE_CONNECTED))
++ {
++ DBGPRINT(RT_DEBUG_TRACE ,("MediaState is connected\n"));
++ data->length = pAdapter->CommonCfg.SsidLen;
++ memcpy(essid, pAdapter->CommonCfg.Ssid, pAdapter->CommonCfg.SsidLen);
++ }
++#ifdef RT2870
++#ifdef WPA_SUPPLICANT_SUPPORT
++ // Add for RT2870
++ else if (pAdapter->StaCfg.WpaSupplicantUP != WPA_SUPPLICANT_DISABLE)
++ {
++ data->length = pAdapter->CommonCfg.SsidLen;
++ memcpy(essid, pAdapter->CommonCfg.Ssid, pAdapter->CommonCfg.SsidLen);
++ }
++#endif // WPA_SUPPLICANT_SUPPORT //
++#endif // RT2870 //
++ else
++ {//the ANY ssid was specified
++ data->length = 0;
++ DBGPRINT(RT_DEBUG_TRACE ,("MediaState is not connected, ess\n"));
++ }
++
++ return 0;
++
++}
++
++int rt_ioctl_siwnickn(struct net_device *dev,
++ struct iw_request_info *info,
++ struct iw_point *data, char *nickname)
++{
++ PRTMP_ADAPTER pAdapter = (PRTMP_ADAPTER) dev->priv;
++
++ //check if the interface is down
++ if(!RTMP_TEST_FLAG(pAdapter, fRTMP_ADAPTER_INTERRUPT_IN_USE))
++ {
++ DBGPRINT(RT_DEBUG_TRACE ,("INFO::Network is down!\n"));
++ return -ENETDOWN;
++ }
++
++ if (data->length > IW_ESSID_MAX_SIZE)
++ return -EINVAL;
++
++ memset(pAdapter->nickname, 0, IW_ESSID_MAX_SIZE + 1);
++ memcpy(pAdapter->nickname, nickname, data->length);
++
++
++ return 0;
++}
++
++int rt_ioctl_giwnickn(struct net_device *dev,
++ struct iw_request_info *info,
++ struct iw_point *data, char *nickname)
++{
++ PRTMP_ADAPTER pAdapter = NULL;
++ VIRTUAL_ADAPTER *pVirtualAd = NULL;
++
++ if (dev->priv_flags == INT_MAIN)
++ {
++ pAdapter = dev->priv;
++ }
++ else
++ {
++ pVirtualAd = dev->priv;
++ if (pVirtualAd && pVirtualAd->RtmpDev)
++ pAdapter = pVirtualAd->RtmpDev->priv;
++ }
++
++ if (pAdapter == NULL)
++ {
++ /* if 1st open fail, pAd will be free;
++ So the net_dev->priv will be NULL in 2rd open */
++ return -ENETDOWN;
++ }
++
++ if (data->length > strlen(pAdapter->nickname) + 1)
++ data->length = strlen(pAdapter->nickname) + 1;
++ if (data->length > 0) {
++ memcpy(nickname, pAdapter->nickname, data->length-1);
++ nickname[data->length-1] = '\0';
++ }
++ return 0;
++}
++
++int rt_ioctl_siwrts(struct net_device *dev,
++ struct iw_request_info *info,
++ struct iw_param *rts, char *extra)
++{
++ PRTMP_ADAPTER pAdapter = (PRTMP_ADAPTER) dev->priv;
++ u16 val;
++
++ //check if the interface is down
++ if(!RTMP_TEST_FLAG(pAdapter, fRTMP_ADAPTER_INTERRUPT_IN_USE))
++ {
++ DBGPRINT(RT_DEBUG_TRACE, ("INFO::Network is down!\n"));
++ return -ENETDOWN;
++ }
++
++ if (rts->disabled)
++ val = MAX_RTS_THRESHOLD;
++ else if (rts->value < 0 || rts->value > MAX_RTS_THRESHOLD)
++ return -EINVAL;
++ else if (rts->value == 0)
++ val = MAX_RTS_THRESHOLD;
++ else
++ val = rts->value;
++
++ if (val != pAdapter->CommonCfg.RtsThreshold)
++ pAdapter->CommonCfg.RtsThreshold = val;
++
++ return 0;
++}
++
++int rt_ioctl_giwrts(struct net_device *dev,
++ struct iw_request_info *info,
++ struct iw_param *rts, char *extra)
++{
++ PRTMP_ADAPTER pAdapter = NULL;
++ VIRTUAL_ADAPTER *pVirtualAd = NULL;
++
++ if (dev->priv_flags == INT_MAIN)
++ {
++ pAdapter = dev->priv;
++ }
++ else
++ {
++ pVirtualAd = dev->priv;
++ if (pVirtualAd && pVirtualAd->RtmpDev)
++ pAdapter = pVirtualAd->RtmpDev->priv;
++ }
++
++ if (pAdapter == NULL)
++ {
++ /* if 1st open fail, pAd will be free;
++ So the net_dev->priv will be NULL in 2rd open */
++ return -ENETDOWN;
++ }
++
++ //check if the interface is down
++ if(!RTMP_TEST_FLAG(pAdapter, fRTMP_ADAPTER_INTERRUPT_IN_USE))
++ {
++ DBGPRINT(RT_DEBUG_TRACE, ("INFO::Network is down!\n"));
++ return -ENETDOWN;
++ }
++
++ rts->value = pAdapter->CommonCfg.RtsThreshold;
++ rts->disabled = (rts->value == MAX_RTS_THRESHOLD);
++ rts->fixed = 1;
++
++ return 0;
++}
++
++int rt_ioctl_siwfrag(struct net_device *dev,
++ struct iw_request_info *info,
++ struct iw_param *frag, char *extra)
++{
++ PRTMP_ADAPTER pAdapter = (PRTMP_ADAPTER) dev->priv;
++ u16 val;
++
++ //check if the interface is down
++ if(!RTMP_TEST_FLAG(pAdapter, fRTMP_ADAPTER_INTERRUPT_IN_USE))
++ {
++ DBGPRINT(RT_DEBUG_TRACE, ("INFO::Network is down!\n"));
++ return -ENETDOWN;
++ }
++
++ if (frag->disabled)
++ val = MAX_FRAG_THRESHOLD;
++ else if (frag->value >= MIN_FRAG_THRESHOLD || frag->value <= MAX_FRAG_THRESHOLD)
++ val = __cpu_to_le16(frag->value & ~0x1); /* even numbers only */
++ else if (frag->value == 0)
++ val = MAX_FRAG_THRESHOLD;
++ else
++ return -EINVAL;
++
++ pAdapter->CommonCfg.FragmentThreshold = val;
++ return 0;
++}
++
++int rt_ioctl_giwfrag(struct net_device *dev,
++ struct iw_request_info *info,
++ struct iw_param *frag, char *extra)
++{
++ PRTMP_ADAPTER pAdapter = NULL;
++ VIRTUAL_ADAPTER *pVirtualAd = NULL;
++
++ if (dev->priv_flags == INT_MAIN)
++ {
++ pAdapter = dev->priv;
++ }
++ else
++ {
++ pVirtualAd = dev->priv;
++ if (pVirtualAd && pVirtualAd->RtmpDev)
++ pAdapter = pVirtualAd->RtmpDev->priv;
++ }
++
++ if (pAdapter == NULL)
++ {
++ /* if 1st open fail, pAd will be free;
++ So the net_dev->priv will be NULL in 2rd open */
++ return -ENETDOWN;
++ }
++
++ //check if the interface is down
++ if(!RTMP_TEST_FLAG(pAdapter, fRTMP_ADAPTER_INTERRUPT_IN_USE))
++ {
++ DBGPRINT(RT_DEBUG_TRACE, ("INFO::Network is down!\n"));
++ return -ENETDOWN;
++ }
++
++ frag->value = pAdapter->CommonCfg.FragmentThreshold;
++ frag->disabled = (frag->value == MAX_FRAG_THRESHOLD);
++ frag->fixed = 1;
++
++ return 0;
++}
++
++#define MAX_WEP_KEY_SIZE 13
++#define MIN_WEP_KEY_SIZE 5
++int rt_ioctl_siwencode(struct net_device *dev,
++ struct iw_request_info *info,
++ struct iw_point *erq, char *extra)
++{
++ PRTMP_ADAPTER pAdapter = (PRTMP_ADAPTER) dev->priv;
++
++ //check if the interface is down
++ if(!RTMP_TEST_FLAG(pAdapter, fRTMP_ADAPTER_INTERRUPT_IN_USE))
++ {
++ DBGPRINT(RT_DEBUG_TRACE, ("INFO::Network is down!\n"));
++ return -ENETDOWN;
++ }
++
++ if ((erq->length == 0) &&
++ (erq->flags & IW_ENCODE_DISABLED))
++ {
++ pAdapter->StaCfg.PairCipher = Ndis802_11WEPDisabled;
++ pAdapter->StaCfg.GroupCipher = Ndis802_11WEPDisabled;
++ pAdapter->StaCfg.WepStatus = Ndis802_11WEPDisabled;
++ pAdapter->StaCfg.OrigWepStatus = pAdapter->StaCfg.WepStatus;
++ pAdapter->StaCfg.AuthMode = Ndis802_11AuthModeOpen;
++ goto done;
++ }
++ else if ((erq->length == 0) &&
++ (erq->flags & IW_ENCODE_RESTRICTED || erq->flags & IW_ENCODE_OPEN))
++ {
++ //pAdapter->StaCfg.PortSecured = WPA_802_1X_PORT_SECURED;
++ STA_PORT_SECURED(pAdapter);
++ pAdapter->StaCfg.PairCipher = Ndis802_11WEPEnabled;
++ pAdapter->StaCfg.GroupCipher = Ndis802_11WEPEnabled;
++ pAdapter->StaCfg.WepStatus = Ndis802_11WEPEnabled;
++ pAdapter->StaCfg.OrigWepStatus = pAdapter->StaCfg.WepStatus;
++ if (erq->flags & IW_ENCODE_RESTRICTED)
++ pAdapter->StaCfg.AuthMode = Ndis802_11AuthModeShared;
++ else
++ pAdapter->StaCfg.AuthMode = Ndis802_11AuthModeOpen;
++ goto done;
++ }
++
++ if (erq->length > 0)
++ {
++ int keyIdx = (erq->flags & IW_ENCODE_INDEX) - 1;
++ /* Check the size of the key */
++ if (erq->length > MAX_WEP_KEY_SIZE) {
++ return -EINVAL;
++ }
++ /* Check key index */
++ if ((keyIdx < 0) || (keyIdx >= NR_WEP_KEYS))
++ {
++ DBGPRINT(RT_DEBUG_TRACE ,("==>rt_ioctl_siwencode::Wrong keyIdx=%d! Using default key instead (%d)\n",
++ keyIdx, pAdapter->StaCfg.DefaultKeyId));
++
++ //Using default key
++ keyIdx = pAdapter->StaCfg.DefaultKeyId;
++ }
++
++ NdisZeroMemory(pAdapter->SharedKey[BSS0][keyIdx].Key, 16);
++
++ if (erq->length == MAX_WEP_KEY_SIZE)
++ {
++ pAdapter->SharedKey[BSS0][keyIdx].KeyLen = MAX_WEP_KEY_SIZE;
++ pAdapter->SharedKey[BSS0][keyIdx].CipherAlg = CIPHER_WEP128;
++ }
++ else if (erq->length == MIN_WEP_KEY_SIZE)
++ {
++ pAdapter->SharedKey[BSS0][keyIdx].KeyLen = MIN_WEP_KEY_SIZE;
++ pAdapter->SharedKey[BSS0][keyIdx].CipherAlg = CIPHER_WEP64;
++ }
++ else
++ /* Disable the key */
++ pAdapter->SharedKey[BSS0][keyIdx].KeyLen = 0;
++
++ /* Check if the key is not marked as invalid */
++ if(!(erq->flags & IW_ENCODE_NOKEY)) {
++ /* Copy the key in the driver */
++ NdisMoveMemory(pAdapter->SharedKey[BSS0][keyIdx].Key, extra, erq->length);
++ }
++ }
++ else
++ {
++ /* Do we want to just set the transmit key index ? */
++ int index = (erq->flags & IW_ENCODE_INDEX) - 1;
++ if ((index >= 0) && (index < 4))
++ {
++ pAdapter->StaCfg.DefaultKeyId = index;
++ }
++ else
++ /* Don't complain if only change the mode */
++ if(!erq->flags & IW_ENCODE_MODE) {
++ return -EINVAL;
++ }
++ }
++
++done:
++ DBGPRINT(RT_DEBUG_TRACE ,("==>rt_ioctl_siwencode::erq->flags=%x\n",erq->flags));
++ DBGPRINT(RT_DEBUG_TRACE ,("==>rt_ioctl_siwencode::AuthMode=%x\n",pAdapter->StaCfg.AuthMode));
++ DBGPRINT(RT_DEBUG_TRACE ,("==>rt_ioctl_siwencode::DefaultKeyId=%x, KeyLen = %d\n",pAdapter->StaCfg.DefaultKeyId , pAdapter->SharedKey[BSS0][pAdapter->StaCfg.DefaultKeyId].KeyLen));
++ DBGPRINT(RT_DEBUG_TRACE ,("==>rt_ioctl_siwencode::WepStatus=%x\n",pAdapter->StaCfg.WepStatus));
++ return 0;
++}
++
++int
++rt_ioctl_giwencode(struct net_device *dev,
++ struct iw_request_info *info,
++ struct iw_point *erq, char *key)
++{
++ int kid;
++ PRTMP_ADAPTER pAdapter = NULL;
++ VIRTUAL_ADAPTER *pVirtualAd = NULL;
++
++ if (dev->priv_flags == INT_MAIN)
++ {
++ pAdapter = dev->priv;
++ }
++ else
++ {
++ pVirtualAd = dev->priv;
++ if (pVirtualAd && pVirtualAd->RtmpDev)
++ pAdapter = pVirtualAd->RtmpDev->priv;
++ }
++
++ if (pAdapter == NULL)
++ {
++ /* if 1st open fail, pAd will be free;
++ So the net_dev->priv will be NULL in 2rd open */
++ return -ENETDOWN;
++ }
++
++ //check if the interface is down
++ if(!RTMP_TEST_FLAG(pAdapter, fRTMP_ADAPTER_INTERRUPT_IN_USE))
++ {
++ DBGPRINT(RT_DEBUG_TRACE, ("INFO::Network is down!\n"));
++ return -ENETDOWN;
++ }
++
++ kid = erq->flags & IW_ENCODE_INDEX;
++ DBGPRINT(RT_DEBUG_TRACE, ("===>rt_ioctl_giwencode %d\n", erq->flags & IW_ENCODE_INDEX));
++
++ if (pAdapter->StaCfg.WepStatus == Ndis802_11WEPDisabled)
++ {
++ erq->length = 0;
++ erq->flags = IW_ENCODE_DISABLED;
++ }
++ else if ((kid > 0) && (kid <=4))
++ {
++ // copy wep key
++ erq->flags = kid ; /* NB: base 1 */
++ if (erq->length > pAdapter->SharedKey[BSS0][kid-1].KeyLen)
++ erq->length = pAdapter->SharedKey[BSS0][kid-1].KeyLen;
++ memcpy(key, pAdapter->SharedKey[BSS0][kid-1].Key, erq->length);
++ //if ((kid == pAdapter->PortCfg.DefaultKeyId))
++ //erq->flags |= IW_ENCODE_ENABLED; /* XXX */
++ if (pAdapter->StaCfg.AuthMode == Ndis802_11AuthModeShared)
++ erq->flags |= IW_ENCODE_RESTRICTED; /* XXX */
++ else
++ erq->flags |= IW_ENCODE_OPEN; /* XXX */
++
++ }
++ else if (kid == 0)
++ {
++ if (pAdapter->StaCfg.AuthMode == Ndis802_11AuthModeShared)
++ erq->flags |= IW_ENCODE_RESTRICTED; /* XXX */
++ else
++ erq->flags |= IW_ENCODE_OPEN; /* XXX */
++ erq->length = pAdapter->SharedKey[BSS0][pAdapter->StaCfg.DefaultKeyId].KeyLen;
++ memcpy(key, pAdapter->SharedKey[BSS0][pAdapter->StaCfg.DefaultKeyId].Key, erq->length);
++ // copy default key ID
++ if (pAdapter->StaCfg.AuthMode == Ndis802_11AuthModeShared)
++ erq->flags |= IW_ENCODE_RESTRICTED; /* XXX */
++ else
++ erq->flags |= IW_ENCODE_OPEN; /* XXX */
++ erq->flags = pAdapter->StaCfg.DefaultKeyId + 1; /* NB: base 1 */
++ erq->flags |= IW_ENCODE_ENABLED; /* XXX */
++ }
++
++ return 0;
++
++}
++
++static int
++rt_ioctl_setparam(struct net_device *dev, struct iw_request_info *info,
++ void *w, char *extra)
++{
++ VIRTUAL_ADAPTER *pVirtualAd = NULL;
++ PRTMP_ADAPTER pAdapter;
++ POS_COOKIE pObj;
++ char *this_char = extra;
++ char *value;
++ int Status=0;
++
++ if (dev->priv_flags == INT_MAIN)
++ {
++ pAdapter = dev->priv;
++ }
++ else
++ {
++ pVirtualAd = dev->priv;
++ pAdapter = pVirtualAd->RtmpDev->priv;
++ }
++ pObj = (POS_COOKIE) pAdapter->OS_Cookie;
++
++ if (pAdapter == NULL)
++ {
++ /* if 1st open fail, pAd will be free;
++ So the net_dev->priv will be NULL in 2rd open */
++ return -ENETDOWN;
++ }
++
++ {
++ pObj->ioctl_if_type = INT_MAIN;
++ pObj->ioctl_if = MAIN_MBSSID;
++ }
++
++ //check if the interface is down
++ if(!RTMP_TEST_FLAG(pAdapter, fRTMP_ADAPTER_INTERRUPT_IN_USE))
++ {
++ DBGPRINT(RT_DEBUG_TRACE, ("INFO::Network is down!\n"));
++ return -ENETDOWN;
++ }
++
++ if (!*this_char)
++ return -EINVAL;
++
++ if ((value = rtstrchr(this_char, '=')) != NULL)
++ *value++ = 0;
++
++ if (!value)
++ return -EINVAL;
++
++ // reject setting nothing besides ANY ssid(ssidLen=0)
++ if (!*value && (strcmp(this_char, "SSID") != 0))
++ return -EINVAL;
++
++ for (PRTMP_PRIVATE_SET_PROC = RTMP_PRIVATE_SUPPORT_PROC; PRTMP_PRIVATE_SET_PROC->name; PRTMP_PRIVATE_SET_PROC++)
++ {
++ if (strcmp(this_char, PRTMP_PRIVATE_SET_PROC->name) == 0)
++ {
++ if(!PRTMP_PRIVATE_SET_PROC->set_proc(pAdapter, value))
++ { //FALSE:Set private failed then return Invalid argument
++ Status = -EINVAL;
++ }
++ break; //Exit for loop.
++ }
++ }
++
++ if(PRTMP_PRIVATE_SET_PROC->name == NULL)
++ { //Not found argument
++ Status = -EINVAL;
++ DBGPRINT(RT_DEBUG_TRACE, ("===>rt_ioctl_setparam:: (iwpriv) Not Support Set Command [%s=%s]\n", this_char, value));
++ }
++
++ return Status;
++}
++
++
++static int
++rt_private_get_statistics(struct net_device *dev, struct iw_request_info *info,
++ struct iw_point *wrq, char *extra)
++{
++ INT Status = 0;
++ PRTMP_ADAPTER pAd = (PRTMP_ADAPTER) dev->priv;
++
++ if (extra == NULL)
++ {
++ wrq->length = 0;
++ return -EIO;
++ }
++
++ memset(extra, 0x00, IW_PRIV_SIZE_MASK);
++ sprintf(extra, "\n\n");
++
++#ifdef RALINK_ATE
++ if (ATE_ON(pAd))
++ {
++ sprintf(extra+strlen(extra), "Tx success = %ld\n", (ULONG)pAd->ate.TxDoneCount);
++ //sprintf(extra+strlen(extra), "Tx success without retry = %ld\n", (ULONG)pAd->ate.TxDoneCount);
++ }
++ else
++#endif // RALINK_ATE //
++ {
++ sprintf(extra+strlen(extra), "Tx success = %ld\n", (ULONG)pAd->WlanCounters.TransmittedFragmentCount.QuadPart);
++ sprintf(extra+strlen(extra), "Tx success without retry = %ld\n", (ULONG)pAd->WlanCounters.TransmittedFragmentCount.QuadPart - (ULONG)pAd->WlanCounters.RetryCount.QuadPart);
++ }
++ sprintf(extra+strlen(extra), "Tx success after retry = %ld\n", (ULONG)pAd->WlanCounters.RetryCount.QuadPart);
++ sprintf(extra+strlen(extra), "Tx fail to Rcv ACK after retry = %ld\n", (ULONG)pAd->WlanCounters.FailedCount.QuadPart);
++ sprintf(extra+strlen(extra), "RTS Success Rcv CTS = %ld\n", (ULONG)pAd->WlanCounters.RTSSuccessCount.QuadPart);
++ sprintf(extra+strlen(extra), "RTS Fail Rcv CTS = %ld\n", (ULONG)pAd->WlanCounters.RTSFailureCount.QuadPart);
++
++ sprintf(extra+strlen(extra), "Rx success = %ld\n", (ULONG)pAd->WlanCounters.ReceivedFragmentCount.QuadPart);
++ sprintf(extra+strlen(extra), "Rx with CRC = %ld\n", (ULONG)pAd->WlanCounters.FCSErrorCount.QuadPart);
++ sprintf(extra+strlen(extra), "Rx drop due to out of resource = %ld\n", (ULONG)pAd->Counters8023.RxNoBuffer);
++ sprintf(extra+strlen(extra), "Rx duplicate frame = %ld\n", (ULONG)pAd->WlanCounters.FrameDuplicateCount.QuadPart);
++
++ sprintf(extra+strlen(extra), "False CCA (one second) = %ld\n", (ULONG)pAd->RalinkCounters.OneSecFalseCCACnt);
++#ifdef RALINK_ATE
++ if (ATE_ON(pAd))
++ {
++ if (pAd->ate.RxAntennaSel == 0)
++ {
++ sprintf(extra+strlen(extra), "RSSI-A = %ld\n", (LONG)(pAd->ate.LastRssi0 - pAd->BbpRssiToDbmDelta));
++ sprintf(extra+strlen(extra), "RSSI-B (if available) = %ld\n", (LONG)(pAd->ate.LastRssi1 - pAd->BbpRssiToDbmDelta));
++ sprintf(extra+strlen(extra), "RSSI-C (if available) = %ld\n\n", (LONG)(pAd->ate.LastRssi2 - pAd->BbpRssiToDbmDelta));
++ }
++ else
++ {
++ sprintf(extra+strlen(extra), "RSSI = %ld\n", (LONG)(pAd->ate.LastRssi0 - pAd->BbpRssiToDbmDelta));
++ }
++ }
++ else
++#endif // RALINK_ATE //
++ {
++ sprintf(extra+strlen(extra), "RSSI-A = %ld\n", (LONG)(pAd->StaCfg.RssiSample.LastRssi0 - pAd->BbpRssiToDbmDelta));
++ sprintf(extra+strlen(extra), "RSSI-B (if available) = %ld\n", (LONG)(pAd->StaCfg.RssiSample.LastRssi1 - pAd->BbpRssiToDbmDelta));
++ sprintf(extra+strlen(extra), "RSSI-C (if available) = %ld\n\n", (LONG)(pAd->StaCfg.RssiSample.LastRssi2 - pAd->BbpRssiToDbmDelta));
++ }
++#ifdef WPA_SUPPLICANT_SUPPORT
++ sprintf(extra+strlen(extra), "WpaSupplicantUP = %d\n\n", pAd->StaCfg.WpaSupplicantUP);
++#endif // WPA_SUPPLICANT_SUPPORT //
++
++
++ wrq->length = strlen(extra) + 1; // 1: size of '\0'
++ DBGPRINT(RT_DEBUG_TRACE, ("<== rt_private_get_statistics, wrq->length = %d\n", wrq->length));
++
++ return Status;
++}
++
++#ifdef DOT11_N_SUPPORT
++void getBaInfo(
++ IN PRTMP_ADAPTER pAd,
++ IN PUCHAR pOutBuf)
++{
++ INT i, j;
++ BA_ORI_ENTRY *pOriBAEntry;
++ BA_REC_ENTRY *pRecBAEntry;
++
++ for (i=0; i<MAX_LEN_OF_MAC_TABLE; i++)
++ {
++ PMAC_TABLE_ENTRY pEntry = &pAd->MacTab.Content[i];
++ if (((pEntry->ValidAsCLI || pEntry->ValidAsApCli) && (pEntry->Sst == SST_ASSOC))
++ || (pEntry->ValidAsWDS) || (pEntry->ValidAsMesh))
++ {
++ sprintf(pOutBuf, "%s\n%02X:%02X:%02X:%02X:%02X:%02X (Aid = %d) (AP) -\n",
++ pOutBuf,
++ pEntry->Addr[0], pEntry->Addr[1], pEntry->Addr[2],
++ pEntry->Addr[3], pEntry->Addr[4], pEntry->Addr[5], pEntry->Aid);
++
++ sprintf(pOutBuf, "%s[Recipient]\n", pOutBuf);
++ for (j=0; j < NUM_OF_TID; j++)
++ {
++ if (pEntry->BARecWcidArray[j] != 0)
++ {
++ pRecBAEntry =&pAd->BATable.BARecEntry[pEntry->BARecWcidArray[j]];
++ sprintf(pOutBuf, "%sTID=%d, BAWinSize=%d, LastIndSeq=%d, ReorderingPkts=%d\n", pOutBuf, j, pRecBAEntry->BAWinSize, pRecBAEntry->LastIndSeq, pRecBAEntry->list.qlen);
++ }
++ }
++ sprintf(pOutBuf, "%s\n", pOutBuf);
++
++ sprintf(pOutBuf, "%s[Originator]\n", pOutBuf);
++ for (j=0; j < NUM_OF_TID; j++)
++ {
++ if (pEntry->BAOriWcidArray[j] != 0)
++ {
++ pOriBAEntry =&pAd->BATable.BAOriEntry[pEntry->BAOriWcidArray[j]];
++ sprintf(pOutBuf, "%sTID=%d, BAWinSize=%d, StartSeq=%d, CurTxSeq=%d\n", pOutBuf, j, pOriBAEntry->BAWinSize, pOriBAEntry->Sequence, pEntry->TxSeq[j]);
++ }
++ }
++ sprintf(pOutBuf, "%s\n\n", pOutBuf);
++ }
++ if (strlen(pOutBuf) > (IW_PRIV_SIZE_MASK - 30))
++ break;
++ }
++
++ return;
++}
++#endif // DOT11_N_SUPPORT //
++
++static int
++rt_private_show(struct net_device *dev, struct iw_request_info *info,
++ struct iw_point *wrq, char *extra)
++{
++ INT Status = 0;
++ VIRTUAL_ADAPTER *pVirtualAd = NULL;
++ PRTMP_ADAPTER pAd;
++ POS_COOKIE pObj;
++ u32 subcmd = wrq->flags;
++
++ if (dev->priv_flags == INT_MAIN)
++ pAd = dev->priv;
++ else
++ {
++ pVirtualAd = dev->priv;
++ pAd = pVirtualAd->RtmpDev->priv;
++ }
++ pObj = (POS_COOKIE) pAd->OS_Cookie;
++
++ if (pAd == NULL)
++ {
++ /* if 1st open fail, pAd will be free;
++ So the net_dev->priv will be NULL in 2rd open */
++ return -ENETDOWN;
++ }
++
++ if (extra == NULL)
++ {
++ wrq->length = 0;
++ return -EIO;
++ }
++ memset(extra, 0x00, IW_PRIV_SIZE_MASK);
++
++ {
++ pObj->ioctl_if_type = INT_MAIN;
++ pObj->ioctl_if = MAIN_MBSSID;
++ }
++
++ switch(subcmd)
++ {
++
++ case SHOW_CONN_STATUS:
++ if (MONITOR_ON(pAd))
++ {
++#ifdef DOT11_N_SUPPORT
++ if (pAd->CommonCfg.PhyMode >= PHY_11ABGN_MIXED &&
++ pAd->CommonCfg.RegTransmitSetting.field.BW)
++ sprintf(extra, "Monitor Mode(CentralChannel %d)\n", pAd->CommonCfg.CentralChannel);
++ else
++#endif // DOT11_N_SUPPORT //
++ sprintf(extra, "Monitor Mode(Channel %d)\n", pAd->CommonCfg.Channel);
++ }
++ else
++ {
++ if (pAd->IndicateMediaState == NdisMediaStateConnected)
++ {
++ if (INFRA_ON(pAd))
++ {
++ sprintf(extra, "Connected(AP: %s[%02X:%02X:%02X:%02X:%02X:%02X])\n",
++ pAd->CommonCfg.Ssid,
++ pAd->CommonCfg.Bssid[0],
++ pAd->CommonCfg.Bssid[1],
++ pAd->CommonCfg.Bssid[2],
++ pAd->CommonCfg.Bssid[3],
++ pAd->CommonCfg.Bssid[4],
++ pAd->CommonCfg.Bssid[5]);
++ DBGPRINT(RT_DEBUG_TRACE ,("Ssid=%s ,Ssidlen = %d\n",pAd->CommonCfg.Ssid, pAd->CommonCfg.SsidLen));
++ }
++ else if (ADHOC_ON(pAd))
++ sprintf(extra, "Connected\n");
++ }
++ else
++ {
++ sprintf(extra, "Disconnected\n");
++ DBGPRINT(RT_DEBUG_TRACE ,("ConnStatus is not connected\n"));
++ }
++ }
++ wrq->length = strlen(extra) + 1; // 1: size of '\0'
++ break;
++ case SHOW_DRVIER_VERION:
++ sprintf(extra, "Driver version-%s, %s %s\n", STA_DRIVER_VERSION, __DATE__, __TIME__ );
++ wrq->length = strlen(extra) + 1; // 1: size of '\0'
++ break;
++#ifdef DOT11_N_SUPPORT
++ case SHOW_BA_INFO:
++ getBaInfo(pAd, extra);
++ wrq->length = strlen(extra) + 1; // 1: size of '\0'
++ break;
++#endif // DOT11_N_SUPPORT //
++ case SHOW_DESC_INFO:
++ {
++ Show_DescInfo_Proc(pAd, NULL);
++ wrq->length = 0; // 1: size of '\0'
++ }
++ break;
++ case RAIO_OFF:
++ if (RTMP_TEST_FLAG(pAd, fRTMP_ADAPTER_BSS_SCAN_IN_PROGRESS))
++ {
++ sprintf(extra, "Scanning\n");
++ wrq->length = strlen(extra) + 1; // 1: size of '\0'
++ break;
++ }
++ pAd->StaCfg.bSwRadio = FALSE;
++ if (pAd->StaCfg.bRadio != (pAd->StaCfg.bHwRadio && pAd->StaCfg.bSwRadio))
++ {
++ pAd->StaCfg.bRadio = (pAd->StaCfg.bHwRadio && pAd->StaCfg.bSwRadio);
++ if (pAd->StaCfg.bRadio == FALSE)
++ {
++ MlmeRadioOff(pAd);
++ // Update extra information
++ pAd->ExtraInfo = SW_RADIO_OFF;
++ }
++ }
++ sprintf(extra, "Radio Off\n");
++ wrq->length = strlen(extra) + 1; // 1: size of '\0'
++ break;
++ case RAIO_ON:
++ if (RTMP_TEST_FLAG(pAd, fRTMP_ADAPTER_BSS_SCAN_IN_PROGRESS))
++ {
++ sprintf(extra, "Scanning\n");
++ wrq->length = strlen(extra) + 1; // 1: size of '\0'
++ break;
++ }
++ pAd->StaCfg.bSwRadio = TRUE;
++ //if (pAd->StaCfg.bRadio != (pAd->StaCfg.bHwRadio && pAd->StaCfg.bSwRadio))
++ {
++ pAd->StaCfg.bRadio = (pAd->StaCfg.bHwRadio && pAd->StaCfg.bSwRadio);
++ if (pAd->StaCfg.bRadio == TRUE)
++ {
++ MlmeRadioOn(pAd);
++ // Update extra information
++ pAd->ExtraInfo = EXTRA_INFO_CLEAR;
++ }
++ }
++ sprintf(extra, "Radio On\n");
++ wrq->length = strlen(extra) + 1; // 1: size of '\0'
++ break;
++
++
++#ifdef QOS_DLS_SUPPORT
++ case SHOW_DLS_ENTRY_INFO:
++ {
++ Set_DlsEntryInfo_Display_Proc(pAd, NULL);
++ wrq->length = 0; // 1: size of '\0'
++ }
++ break;
++#endif // QOS_DLS_SUPPORT //
++
++ case SHOW_CFG_VALUE:
++ {
++ Status = RTMPShowCfgValue(pAd, wrq->pointer, extra);
++ if (Status == 0)
++ wrq->length = strlen(extra) + 1; // 1: size of '\0'
++ }
++ break;
++ case SHOW_ADHOC_ENTRY_INFO:
++ Show_Adhoc_MacTable_Proc(pAd, extra);
++ wrq->length = strlen(extra) + 1; // 1: size of '\0'
++ break;
++ default:
++ DBGPRINT(RT_DEBUG_TRACE, ("%s - unknow subcmd = %d\n", __FUNCTION__, subcmd));
++ break;
++ }
++
++ return Status;
++}
++
++#ifdef SIOCSIWMLME
++int rt_ioctl_siwmlme(struct net_device *dev,
++ struct iw_request_info *info,
++ union iwreq_data *wrqu,
++ char *extra)
++{
++ PRTMP_ADAPTER pAd = (PRTMP_ADAPTER) dev->priv;
++ struct iw_mlme *pMlme = (struct iw_mlme *)wrqu->data.pointer;
++ MLME_QUEUE_ELEM MsgElem;
++ MLME_DISASSOC_REQ_STRUCT DisAssocReq;
++ MLME_DEAUTH_REQ_STRUCT DeAuthReq;
++
++ DBGPRINT(RT_DEBUG_TRACE, ("====> %s\n", __FUNCTION__));
++
++ if (pMlme == NULL)
++ return -EINVAL;
++
++ switch(pMlme->cmd)
++ {
++#ifdef IW_MLME_DEAUTH
++ case IW_MLME_DEAUTH:
++ DBGPRINT(RT_DEBUG_TRACE, ("====> %s - IW_MLME_DEAUTH\n", __FUNCTION__));
++ COPY_MAC_ADDR(DeAuthReq.Addr, pAd->CommonCfg.Bssid);
++ DeAuthReq.Reason = pMlme->reason_code;
++ MsgElem.MsgLen = sizeof(MLME_DEAUTH_REQ_STRUCT);
++ NdisMoveMemory(MsgElem.Msg, &DeAuthReq, sizeof(MLME_DEAUTH_REQ_STRUCT));
++ MlmeDeauthReqAction(pAd, &MsgElem);
++ if (INFRA_ON(pAd))
++ {
++ LinkDown(pAd, FALSE);
++ pAd->Mlme.AssocMachine.CurrState = ASSOC_IDLE;
++ }
++ break;
++#endif // IW_MLME_DEAUTH //
++#ifdef IW_MLME_DISASSOC
++ case IW_MLME_DISASSOC:
++ DBGPRINT(RT_DEBUG_TRACE, ("====> %s - IW_MLME_DISASSOC\n", __FUNCTION__));
++ COPY_MAC_ADDR(DisAssocReq.Addr, pAd->CommonCfg.Bssid);
++ DisAssocReq.Reason = pMlme->reason_code;
++
++ MsgElem.Machine = ASSOC_STATE_MACHINE;
++ MsgElem.MsgType = MT2_MLME_DISASSOC_REQ;
++ MsgElem.MsgLen = sizeof(MLME_DISASSOC_REQ_STRUCT);
++ NdisMoveMemory(MsgElem.Msg, &DisAssocReq, sizeof(MLME_DISASSOC_REQ_STRUCT));
++
++ pAd->Mlme.CntlMachine.CurrState = CNTL_WAIT_OID_DISASSOC;
++ MlmeDisassocReqAction(pAd, &MsgElem);
++ break;
++#endif // IW_MLME_DISASSOC //
++ default:
++ DBGPRINT(RT_DEBUG_TRACE, ("====> %s - Unknow Command\n", __FUNCTION__));
++ break;
++ }
++
++ return 0;
++}
++#endif // SIOCSIWMLME //
++
++#if WIRELESS_EXT > 17
++int rt_ioctl_siwauth(struct net_device *dev,
++ struct iw_request_info *info,
++ union iwreq_data *wrqu, char *extra)
++{
++ PRTMP_ADAPTER pAdapter = (PRTMP_ADAPTER) dev->priv;
++ struct iw_param *param = &wrqu->param;
++
++ //check if the interface is down
++ if(!RTMP_TEST_FLAG(pAdapter, fRTMP_ADAPTER_INTERRUPT_IN_USE))
++ {
++ DBGPRINT(RT_DEBUG_TRACE, ("INFO::Network is down!\n"));
++ return -ENETDOWN;
++ }
++ switch (param->flags & IW_AUTH_INDEX) {
++ case IW_AUTH_WPA_VERSION:
++ if (param->value == IW_AUTH_WPA_VERSION_WPA)
++ {
++ pAdapter->StaCfg.AuthMode = Ndis802_11AuthModeWPAPSK;
++ if (pAdapter->StaCfg.BssType == BSS_ADHOC)
++ pAdapter->StaCfg.AuthMode = Ndis802_11AuthModeWPANone;
++ }
++ else if (param->value == IW_AUTH_WPA_VERSION_WPA2)
++ pAdapter->StaCfg.AuthMode = Ndis802_11AuthModeWPA2PSK;
++
++ DBGPRINT(RT_DEBUG_TRACE, ("%s::IW_AUTH_WPA_VERSION - param->value = %d!\n", __FUNCTION__, param->value));
++ break;
++ case IW_AUTH_CIPHER_PAIRWISE:
++ if (param->value == IW_AUTH_CIPHER_NONE)
++ {
++ pAdapter->StaCfg.WepStatus = Ndis802_11WEPDisabled;
++ pAdapter->StaCfg.OrigWepStatus = pAdapter->StaCfg.WepStatus;
++ pAdapter->StaCfg.PairCipher = Ndis802_11WEPDisabled;
++ }
++ else if (param->value == IW_AUTH_CIPHER_WEP40 ||
++ param->value == IW_AUTH_CIPHER_WEP104)
++ {
++ pAdapter->StaCfg.WepStatus = Ndis802_11WEPEnabled;
++ pAdapter->StaCfg.OrigWepStatus = pAdapter->StaCfg.WepStatus;
++ pAdapter->StaCfg.PairCipher = Ndis802_11WEPEnabled;
++#ifdef WPA_SUPPLICANT_SUPPORT
++ pAdapter->StaCfg.IEEE8021X = FALSE;
++#endif // WPA_SUPPLICANT_SUPPORT //
++ }
++ else if (param->value == IW_AUTH_CIPHER_TKIP)
++ {
++ pAdapter->StaCfg.WepStatus = Ndis802_11Encryption2Enabled;
++ pAdapter->StaCfg.OrigWepStatus = pAdapter->StaCfg.WepStatus;
++ pAdapter->StaCfg.PairCipher = Ndis802_11Encryption2Enabled;
++ }
++ else if (param->value == IW_AUTH_CIPHER_CCMP)
++ {
++ pAdapter->StaCfg.WepStatus = Ndis802_11Encryption3Enabled;
++ pAdapter->StaCfg.OrigWepStatus = pAdapter->StaCfg.WepStatus;
++ pAdapter->StaCfg.PairCipher = Ndis802_11Encryption3Enabled;
++ }
++ DBGPRINT(RT_DEBUG_TRACE, ("%s::IW_AUTH_CIPHER_PAIRWISE - param->value = %d!\n", __FUNCTION__, param->value));
++ break;
++ case IW_AUTH_CIPHER_GROUP:
++ if (param->value == IW_AUTH_CIPHER_NONE)
++ {
++ pAdapter->StaCfg.GroupCipher = Ndis802_11WEPDisabled;
++ }
++ else if (param->value == IW_AUTH_CIPHER_WEP40 ||
++ param->value == IW_AUTH_CIPHER_WEP104)
++ {
++ pAdapter->StaCfg.GroupCipher = Ndis802_11WEPEnabled;
++ }
++ else if (param->value == IW_AUTH_CIPHER_TKIP)
++ {
++ pAdapter->StaCfg.GroupCipher = Ndis802_11Encryption2Enabled;
++ }
++ else if (param->value == IW_AUTH_CIPHER_CCMP)
++ {
++ pAdapter->StaCfg.GroupCipher = Ndis802_11Encryption3Enabled;
++ }
++ DBGPRINT(RT_DEBUG_TRACE, ("%s::IW_AUTH_CIPHER_GROUP - param->value = %d!\n", __FUNCTION__, param->value));
++ break;
++ case IW_AUTH_KEY_MGMT:
++ if (param->value == IW_AUTH_KEY_MGMT_802_1X)
++ {
++ if (pAdapter->StaCfg.AuthMode == Ndis802_11AuthModeWPAPSK)
++ {
++ pAdapter->StaCfg.AuthMode = Ndis802_11AuthModeWPA;
++#ifdef WPA_SUPPLICANT_SUPPORT
++ pAdapter->StaCfg.IEEE8021X = FALSE;
++#endif // WPA_SUPPLICANT_SUPPORT //
++ }
++ else if (pAdapter->StaCfg.AuthMode == Ndis802_11AuthModeWPA2PSK)
++ {
++ pAdapter->StaCfg.AuthMode = Ndis802_11AuthModeWPA2;
++#ifdef WPA_SUPPLICANT_SUPPORT
++ pAdapter->StaCfg.IEEE8021X = FALSE;
++#endif // WPA_SUPPLICANT_SUPPORT //
++ }
++#ifdef WPA_SUPPLICANT_SUPPORT
++ else
++ // WEP 1x
++ pAdapter->StaCfg.IEEE8021X = TRUE;
++#endif // WPA_SUPPLICANT_SUPPORT //
++ }
++ else if (param->value == 0)
++ {
++ //pAdapter->StaCfg.PortSecured = WPA_802_1X_PORT_SECURED;
++ STA_PORT_SECURED(pAdapter);
++ }
++ DBGPRINT(RT_DEBUG_TRACE, ("%s::IW_AUTH_KEY_MGMT - param->value = %d!\n", __FUNCTION__, param->value));
++ break;
++ case IW_AUTH_RX_UNENCRYPTED_EAPOL:
++ break;
++ case IW_AUTH_PRIVACY_INVOKED:
++ /*if (param->value == 0)
++ {
++ pAdapter->StaCfg.AuthMode = Ndis802_11AuthModeOpen;
++ pAdapter->StaCfg.WepStatus = Ndis802_11WEPDisabled;
++ pAdapter->StaCfg.OrigWepStatus = pAdapter->StaCfg.WepStatus;
++ pAdapter->StaCfg.PairCipher = Ndis802_11WEPDisabled;
++ pAdapter->StaCfg.GroupCipher = Ndis802_11WEPDisabled;
++ }*/
++ DBGPRINT(RT_DEBUG_TRACE, ("%s::IW_AUTH_PRIVACY_INVOKED - param->value = %d!\n", __FUNCTION__, param->value));
++ break;
++ case IW_AUTH_DROP_UNENCRYPTED:
++ if (param->value != 0)
++ pAdapter->StaCfg.PortSecured = WPA_802_1X_PORT_NOT_SECURED;
++ else
++ {
++ //pAdapter->StaCfg.PortSecured = WPA_802_1X_PORT_SECURED;
++ STA_PORT_SECURED(pAdapter);
++ }
++ DBGPRINT(RT_DEBUG_TRACE, ("%s::IW_AUTH_WPA_VERSION - param->value = %d!\n", __FUNCTION__, param->value));
++ break;
++ case IW_AUTH_80211_AUTH_ALG:
++ if (param->value & IW_AUTH_ALG_SHARED_KEY)
++ {
++ pAdapter->StaCfg.AuthMode = Ndis802_11AuthModeShared;
++ }
++ else if (param->value & IW_AUTH_ALG_OPEN_SYSTEM)
++ {
++ pAdapter->StaCfg.AuthMode = Ndis802_11AuthModeOpen;
++ }
++ else
++ return -EINVAL;
++ DBGPRINT(RT_DEBUG_TRACE, ("%s::IW_AUTH_80211_AUTH_ALG - param->value = %d!\n", __FUNCTION__, param->value));
++ break;
++ case IW_AUTH_WPA_ENABLED:
++ DBGPRINT(RT_DEBUG_TRACE, ("%s::IW_AUTH_WPA_ENABLED - Driver supports WPA!(param->value = %d)\n", __FUNCTION__, param->value));
++ break;
++ default:
++ return -EOPNOTSUPP;
++}
++
++ return 0;
++}
++
++int rt_ioctl_giwauth(struct net_device *dev,
++ struct iw_request_info *info,
++ union iwreq_data *wrqu, char *extra)
++{
++ PRTMP_ADAPTER pAdapter = (PRTMP_ADAPTER) dev->priv;
++ struct iw_param *param = &wrqu->param;
++
++ //check if the interface is down
++ if(!RTMP_TEST_FLAG(pAdapter, fRTMP_ADAPTER_INTERRUPT_IN_USE))
++ {
++ DBGPRINT(RT_DEBUG_TRACE, ("INFO::Network is down!\n"));
++ return -ENETDOWN;
++ }
++
++ switch (param->flags & IW_AUTH_INDEX) {
++ case IW_AUTH_DROP_UNENCRYPTED:
++ param->value = (pAdapter->StaCfg.WepStatus == Ndis802_11WEPDisabled) ? 0 : 1;
++ break;
++
++ case IW_AUTH_80211_AUTH_ALG:
++ param->value = (pAdapter->StaCfg.AuthMode == Ndis802_11AuthModeShared) ? IW_AUTH_ALG_SHARED_KEY : IW_AUTH_ALG_OPEN_SYSTEM;
++ break;
++
++ case IW_AUTH_WPA_ENABLED:
++ param->value = (pAdapter->StaCfg.AuthMode >= Ndis802_11AuthModeWPA) ? 1 : 0;
++ break;
++
++ default:
++ return -EOPNOTSUPP;
++ }
++ DBGPRINT(RT_DEBUG_TRACE, ("rt_ioctl_giwauth::param->value = %d!\n", param->value));
++ return 0;
++}
++
++void fnSetCipherKey(
++ IN PRTMP_ADAPTER pAdapter,
++ IN INT keyIdx,
++ IN UCHAR CipherAlg,
++ IN BOOLEAN bGTK,
++ IN struct iw_encode_ext *ext)
++{
++ NdisZeroMemory(&pAdapter->SharedKey[BSS0][keyIdx], sizeof(CIPHER_KEY));
++ pAdapter->SharedKey[BSS0][keyIdx].KeyLen = LEN_TKIP_EK;
++ NdisMoveMemory(pAdapter->SharedKey[BSS0][keyIdx].Key, ext->key, LEN_TKIP_EK);
++ NdisMoveMemory(pAdapter->SharedKey[BSS0][keyIdx].TxMic, ext->key + LEN_TKIP_EK, LEN_TKIP_TXMICK);
++ NdisMoveMemory(pAdapter->SharedKey[BSS0][keyIdx].RxMic, ext->key + LEN_TKIP_EK + LEN_TKIP_TXMICK, LEN_TKIP_RXMICK);
++ pAdapter->SharedKey[BSS0][keyIdx].CipherAlg = CipherAlg;
++
++ // Update group key information to ASIC Shared Key Table
++ AsicAddSharedKeyEntry(pAdapter,
++ BSS0,
++ keyIdx,
++ pAdapter->SharedKey[BSS0][keyIdx].CipherAlg,
++ pAdapter->SharedKey[BSS0][keyIdx].Key,
++ pAdapter->SharedKey[BSS0][keyIdx].TxMic,
++ pAdapter->SharedKey[BSS0][keyIdx].RxMic);
++
++ if (bGTK)
++ // Update ASIC WCID attribute table and IVEIV table
++ RTMPAddWcidAttributeEntry(pAdapter,
++ BSS0,
++ keyIdx,
++ pAdapter->SharedKey[BSS0][keyIdx].CipherAlg,
++ NULL);
++ else
++ // Update ASIC WCID attribute table and IVEIV table
++ RTMPAddWcidAttributeEntry(pAdapter,
++ BSS0,
++ keyIdx,
++ pAdapter->SharedKey[BSS0][keyIdx].CipherAlg,
++ &pAdapter->MacTab.Content[BSSID_WCID]);
++}
++
++int rt_ioctl_siwencodeext(struct net_device *dev,
++ struct iw_request_info *info,
++ union iwreq_data *wrqu,
++ char *extra)
++ {
++ PRTMP_ADAPTER pAdapter = (PRTMP_ADAPTER) dev->priv;
++ struct iw_point *encoding = &wrqu->encoding;
++ struct iw_encode_ext *ext = (struct iw_encode_ext *)extra;
++ int keyIdx, alg = ext->alg;
++
++ //check if the interface is down
++ if(!RTMP_TEST_FLAG(pAdapter, fRTMP_ADAPTER_INTERRUPT_IN_USE))
++ {
++ DBGPRINT(RT_DEBUG_TRACE, ("INFO::Network is down!\n"));
++ return -ENETDOWN;
++ }
++
++ if (encoding->flags & IW_ENCODE_DISABLED)
++ {
++ keyIdx = (encoding->flags & IW_ENCODE_INDEX) - 1;
++ // set BSSID wcid entry of the Pair-wise Key table as no-security mode
++ AsicRemovePairwiseKeyEntry(pAdapter, BSS0, BSSID_WCID);
++ pAdapter->SharedKey[BSS0][keyIdx].KeyLen = 0;
++ pAdapter->SharedKey[BSS0][keyIdx].CipherAlg = CIPHER_NONE;
++ AsicRemoveSharedKeyEntry(pAdapter, 0, (UCHAR)keyIdx);
++ NdisZeroMemory(&pAdapter->SharedKey[BSS0][keyIdx], sizeof(CIPHER_KEY));
++ DBGPRINT(RT_DEBUG_TRACE, ("%s::Remove all keys!(encoding->flags = %x)\n", __FUNCTION__, encoding->flags));
++ }
++ else
++ {
++ // Get Key Index and convet to our own defined key index
++ keyIdx = (encoding->flags & IW_ENCODE_INDEX) - 1;
++ if((keyIdx < 0) || (keyIdx >= NR_WEP_KEYS))
++ return -EINVAL;
++
++ if (ext->ext_flags & IW_ENCODE_EXT_SET_TX_KEY)
++ {
++ pAdapter->StaCfg.DefaultKeyId = keyIdx;
++ DBGPRINT(RT_DEBUG_TRACE, ("%s::DefaultKeyId = %d\n", __FUNCTION__, pAdapter->StaCfg.DefaultKeyId));
++ }
++
++ switch (alg) {
++ case IW_ENCODE_ALG_NONE:
++ DBGPRINT(RT_DEBUG_TRACE, ("%s::IW_ENCODE_ALG_NONE\n", __FUNCTION__));
++ break;
++ case IW_ENCODE_ALG_WEP:
++ DBGPRINT(RT_DEBUG_TRACE, ("%s::IW_ENCODE_ALG_WEP - ext->key_len = %d, keyIdx = %d\n", __FUNCTION__, ext->key_len, keyIdx));
++ if (ext->key_len == MAX_WEP_KEY_SIZE)
++ {
++ pAdapter->SharedKey[BSS0][keyIdx].KeyLen = MAX_WEP_KEY_SIZE;
++ pAdapter->SharedKey[BSS0][keyIdx].CipherAlg = CIPHER_WEP128;
++ }
++ else if (ext->key_len == MIN_WEP_KEY_SIZE)
++ {
++ pAdapter->SharedKey[BSS0][keyIdx].KeyLen = MIN_WEP_KEY_SIZE;
++ pAdapter->SharedKey[BSS0][keyIdx].CipherAlg = CIPHER_WEP64;
++ }
++ else
++ return -EINVAL;
++
++ NdisZeroMemory(pAdapter->SharedKey[BSS0][keyIdx].Key, 16);
++ NdisMoveMemory(pAdapter->SharedKey[BSS0][keyIdx].Key, ext->key, ext->key_len);
++ break;
++ case IW_ENCODE_ALG_TKIP:
++ DBGPRINT(RT_DEBUG_TRACE, ("%s::IW_ENCODE_ALG_TKIP - keyIdx = %d, ext->key_len = %d\n", __FUNCTION__, keyIdx, ext->key_len));
++ if (ext->key_len == 32)
++ {
++ if (ext->ext_flags & IW_ENCODE_EXT_SET_TX_KEY)
++ {
++ fnSetCipherKey(pAdapter, keyIdx, CIPHER_TKIP, FALSE, ext);
++ if (pAdapter->StaCfg.AuthMode >= Ndis802_11AuthModeWPA2)
++ {
++ //pAdapter->StaCfg.PortSecured = WPA_802_1X_PORT_SECURED;
++ STA_PORT_SECURED(pAdapter);
++ }
++ }
++ else if (ext->ext_flags & IW_ENCODE_EXT_GROUP_KEY)
++ {
++ fnSetCipherKey(pAdapter, keyIdx, CIPHER_TKIP, TRUE, ext);
++
++ // set 802.1x port control
++ //pAdapter->StaCfg.PortSecured = WPA_802_1X_PORT_SECURED;
++ STA_PORT_SECURED(pAdapter);
++ }
++ }
++ else
++ return -EINVAL;
++ break;
++ case IW_ENCODE_ALG_CCMP:
++ if (ext->ext_flags & IW_ENCODE_EXT_SET_TX_KEY)
++ {
++ fnSetCipherKey(pAdapter, keyIdx, CIPHER_AES, FALSE, ext);
++ if (pAdapter->StaCfg.AuthMode >= Ndis802_11AuthModeWPA2)
++ //pAdapter->StaCfg.PortSecured = WPA_802_1X_PORT_SECURED;
++ STA_PORT_SECURED(pAdapter);
++ }
++ else if (ext->ext_flags & IW_ENCODE_EXT_GROUP_KEY)
++ {
++ fnSetCipherKey(pAdapter, keyIdx, CIPHER_AES, TRUE, ext);
++
++ // set 802.1x port control
++ //pAdapter->StaCfg.PortSecured = WPA_802_1X_PORT_SECURED;
++ STA_PORT_SECURED(pAdapter);
++ }
++ break;
++ default:
++ return -EINVAL;
++ }
++ }
++
++ return 0;
++}
++
++int
++rt_ioctl_giwencodeext(struct net_device *dev,
++ struct iw_request_info *info,
++ union iwreq_data *wrqu, char *extra)
++{
++ PRTMP_ADAPTER pAd = (PRTMP_ADAPTER) dev->priv;
++ PCHAR pKey = NULL;
++ struct iw_point *encoding = &wrqu->encoding;
++ struct iw_encode_ext *ext = (struct iw_encode_ext *)extra;
++ int idx, max_key_len;
++
++ DBGPRINT(RT_DEBUG_TRACE ,("===> rt_ioctl_giwencodeext\n"));
++
++ max_key_len = encoding->length - sizeof(*ext);
++ if (max_key_len < 0)
++ return -EINVAL;
++
++ idx = encoding->flags & IW_ENCODE_INDEX;
++ if (idx)
++ {
++ if (idx < 1 || idx > 4)
++ return -EINVAL;
++ idx--;
++
++ if ((pAd->StaCfg.WepStatus == Ndis802_11Encryption2Enabled) ||
++ (pAd->StaCfg.WepStatus == Ndis802_11Encryption3Enabled))
++ {
++ if (idx != pAd->StaCfg.DefaultKeyId)
++ {
++ ext->key_len = 0;
++ return 0;
++ }
++ }
++ }
++ else
++ idx = pAd->StaCfg.DefaultKeyId;
++
++ encoding->flags = idx + 1;
++ memset(ext, 0, sizeof(*ext));
++
++ ext->key_len = 0;
++ switch(pAd->StaCfg.WepStatus) {
++ case Ndis802_11WEPDisabled:
++ ext->alg = IW_ENCODE_ALG_NONE;
++ encoding->flags |= IW_ENCODE_DISABLED;
++ break;
++ case Ndis802_11WEPEnabled:
++ ext->alg = IW_ENCODE_ALG_WEP;
++ if (pAd->SharedKey[BSS0][idx].KeyLen > max_key_len)
++ return -E2BIG;
++ else
++ {
++ ext->key_len = pAd->SharedKey[BSS0][idx].KeyLen;
++ pKey = &(pAd->SharedKey[BSS0][idx].Key[0]);
++ }
++ break;
++ case Ndis802_11Encryption2Enabled:
++ case Ndis802_11Encryption3Enabled:
++ if (pAd->StaCfg.WepStatus == Ndis802_11Encryption2Enabled)
++ ext->alg = IW_ENCODE_ALG_TKIP;
++ else
++ ext->alg = IW_ENCODE_ALG_CCMP;
++
++ if (max_key_len < 32)
++ return -E2BIG;
++ else
++ {
++ ext->key_len = 32;
++ pKey = &pAd->StaCfg.PMK[0];
++ }
++ break;
++ default:
++ return -EINVAL;
++ }
++
++ if (ext->key_len && pKey)
++ {
++ encoding->flags |= IW_ENCODE_ENABLED;
++ memcpy(ext->key, pKey, ext->key_len);
++ }
++
++ return 0;
++}
++
++#ifdef SIOCSIWGENIE
++int rt_ioctl_siwgenie(struct net_device *dev,
++ struct iw_request_info *info,
++ union iwreq_data *wrqu, char *extra)
++{
++ PRTMP_ADAPTER pAd = (PRTMP_ADAPTER) dev->priv;
++
++ if (wrqu->data.length > MAX_LEN_OF_RSNIE ||
++ (wrqu->data.length && extra == NULL))
++ return -EINVAL;
++
++ if (wrqu->data.length)
++ {
++ pAd->StaCfg.RSNIE_Len = wrqu->data.length;
++ NdisMoveMemory(&pAd->StaCfg.RSN_IE[0], extra, pAd->StaCfg.RSNIE_Len);
++ }
++ else
++ {
++ pAd->StaCfg.RSNIE_Len = 0;
++ NdisZeroMemory(&pAd->StaCfg.RSN_IE[0], MAX_LEN_OF_RSNIE);
++ }
++
++ return 0;
++}
++#endif // SIOCSIWGENIE //
++
++int rt_ioctl_giwgenie(struct net_device *dev,
++ struct iw_request_info *info,
++ union iwreq_data *wrqu, char *extra)
++{
++ PRTMP_ADAPTER pAd = (PRTMP_ADAPTER) dev->priv;
++
++ if ((pAd->StaCfg.RSNIE_Len == 0) ||
++ (pAd->StaCfg.AuthMode < Ndis802_11AuthModeWPA))
++ {
++ wrqu->data.length = 0;
++ return 0;
++ }
++
++#ifdef NATIVE_WPA_SUPPLICANT_SUPPORT
++#ifdef SIOCSIWGENIE
++ if (pAd->StaCfg.WpaSupplicantUP == WPA_SUPPLICANT_ENABLE)
++ {
++ if (wrqu->data.length < pAd->StaCfg.RSNIE_Len)
++ return -E2BIG;
++
++ wrqu->data.length = pAd->StaCfg.RSNIE_Len;
++ memcpy(extra, &pAd->StaCfg.RSN_IE[0], pAd->StaCfg.RSNIE_Len);
++ }
++ else
++#endif // SIOCSIWGENIE //
++#endif // NATIVE_WPA_SUPPLICANT_SUPPORT //
++ {
++ UCHAR RSNIe = IE_WPA;
++
++ if (wrqu->data.length < (pAd->StaCfg.RSNIE_Len + 2)) // ID, Len
++ return -E2BIG;
++ wrqu->data.length = pAd->StaCfg.RSNIE_Len + 2;
++
++ if ((pAd->StaCfg.AuthMode == Ndis802_11AuthModeWPA2PSK) ||
++ (pAd->StaCfg.AuthMode == Ndis802_11AuthModeWPA2))
++ RSNIe = IE_RSN;
++
++ extra[0] = (char)RSNIe;
++ extra[1] = pAd->StaCfg.RSNIE_Len;
++ memcpy(extra+2, &pAd->StaCfg.RSN_IE[0], pAd->StaCfg.RSNIE_Len);
++ }
++
++ return 0;
++}
++
++int rt_ioctl_siwpmksa(struct net_device *dev,
++ struct iw_request_info *info,
++ union iwreq_data *wrqu,
++ char *extra)
++{
++ PRTMP_ADAPTER pAd = (PRTMP_ADAPTER) dev->priv;
++ struct iw_pmksa *pPmksa = (struct iw_pmksa *)wrqu->data.pointer;
++ INT CachedIdx = 0, idx = 0;
++
++ if (pPmksa == NULL)
++ return -EINVAL;
++
++ DBGPRINT(RT_DEBUG_TRACE ,("===> rt_ioctl_siwpmksa\n"));
++ switch(pPmksa->cmd)
++ {
++ case IW_PMKSA_FLUSH:
++ NdisZeroMemory(pAd->StaCfg.SavedPMK, sizeof(BSSID_INFO)*PMKID_NO);
++ DBGPRINT(RT_DEBUG_TRACE ,("rt_ioctl_siwpmksa - IW_PMKSA_FLUSH\n"));
++ break;
++ case IW_PMKSA_REMOVE:
++ for (CachedIdx = 0; CachedIdx < pAd->StaCfg.SavedPMKNum; CachedIdx++)
++ {
++ // compare the BSSID
++ if (NdisEqualMemory(pPmksa->bssid.sa_data, pAd->StaCfg.SavedPMK[CachedIdx].BSSID, MAC_ADDR_LEN))
++ {
++ NdisZeroMemory(pAd->StaCfg.SavedPMK[CachedIdx].BSSID, MAC_ADDR_LEN);
++ NdisZeroMemory(pAd->StaCfg.SavedPMK[CachedIdx].PMKID, 16);
++ for (idx = CachedIdx; idx < (pAd->StaCfg.SavedPMKNum - 1); idx++)
++ {
++ NdisMoveMemory(&pAd->StaCfg.SavedPMK[idx].BSSID[0], &pAd->StaCfg.SavedPMK[idx+1].BSSID[0], MAC_ADDR_LEN);
++ NdisMoveMemory(&pAd->StaCfg.SavedPMK[idx].PMKID[0], &pAd->StaCfg.SavedPMK[idx+1].PMKID[0], 16);
++ }
++ pAd->StaCfg.SavedPMKNum--;
++ break;
++ }
++ }
++
++ DBGPRINT(RT_DEBUG_TRACE ,("rt_ioctl_siwpmksa - IW_PMKSA_REMOVE\n"));
++ break;
++ case IW_PMKSA_ADD:
++ for (CachedIdx = 0; CachedIdx < pAd->StaCfg.SavedPMKNum; CachedIdx++)
++ {
++ // compare the BSSID
++ if (NdisEqualMemory(pPmksa->bssid.sa_data, pAd->StaCfg.SavedPMK[CachedIdx].BSSID, MAC_ADDR_LEN))
++ break;
++ }
++
++ // Found, replace it
++ if (CachedIdx < PMKID_NO)
++ {
++ DBGPRINT(RT_DEBUG_OFF, ("Update PMKID, idx = %d\n", CachedIdx));
++ NdisMoveMemory(&pAd->StaCfg.SavedPMK[CachedIdx].BSSID[0], pPmksa->bssid.sa_data, MAC_ADDR_LEN);
++ NdisMoveMemory(&pAd->StaCfg.SavedPMK[CachedIdx].PMKID[0], pPmksa->pmkid, 16);
++ pAd->StaCfg.SavedPMKNum++;
++ }
++ // Not found, replace the last one
++ else
++ {
++ // Randomly replace one
++ CachedIdx = (pPmksa->bssid.sa_data[5] % PMKID_NO);
++ DBGPRINT(RT_DEBUG_OFF, ("Update PMKID, idx = %d\n", CachedIdx));
++ NdisMoveMemory(&pAd->StaCfg.SavedPMK[CachedIdx].BSSID[0], pPmksa->bssid.sa_data, MAC_ADDR_LEN);
++ NdisMoveMemory(&pAd->StaCfg.SavedPMK[CachedIdx].PMKID[0], pPmksa->pmkid, 16);
++ }
++
++ DBGPRINT(RT_DEBUG_TRACE ,("rt_ioctl_siwpmksa - IW_PMKSA_ADD\n"));
++ break;
++ default:
++ DBGPRINT(RT_DEBUG_TRACE ,("rt_ioctl_siwpmksa - Unknow Command!!\n"));
++ break;
++ }
++
++ return 0;
++}
++#endif // #if WIRELESS_EXT > 17
++
++#ifdef DBG
++static int
++rt_private_ioctl_bbp(struct net_device *dev, struct iw_request_info *info,
++ struct iw_point *wrq, char *extra)
++ {
++ CHAR *this_char;
++ CHAR *value = NULL;
++ UCHAR regBBP = 0;
++// CHAR arg[255]={0};
++ UINT32 bbpId;
++ UINT32 bbpValue;
++ BOOLEAN bIsPrintAllBBP = FALSE;
++ INT Status = 0;
++ PRTMP_ADAPTER pAdapter = (PRTMP_ADAPTER) dev->priv;
++
++
++ memset(extra, 0x00, IW_PRIV_SIZE_MASK);
++
++ if (wrq->length > 1) //No parameters.
++ {
++ sprintf(extra, "\n");
++
++ //Parsing Read or Write
++ this_char = wrq->pointer;
++ DBGPRINT(RT_DEBUG_TRACE, ("this_char=%s\n", this_char));
++ if (!*this_char)
++ goto next;
++
++ if ((value = rtstrchr(this_char, '=')) != NULL)
++ *value++ = 0;
++
++ if (!value || !*value)
++ { //Read
++ DBGPRINT(RT_DEBUG_TRACE, ("this_char=%s, value=%s\n", this_char, value));
++ if (sscanf(this_char, "%d", &(bbpId)) == 1)
++ {
++ if (bbpId <= 136)
++ {
++#ifdef RALINK_ATE
++ if (ATE_ON(pAdapter))
++ {
++ ATE_BBP_IO_READ8_BY_REG_ID(pAdapter, bbpId, ®BBP);
++ }
++ else
++#endif // RALINK_ATE //
++ {
++ RTMP_BBP_IO_READ8_BY_REG_ID(pAdapter, bbpId, ®BBP);
++ }
++ sprintf(extra+strlen(extra), "R%02d[0x%02X]:%02X\n", bbpId, bbpId*2, regBBP);
++ wrq->length = strlen(extra) + 1; // 1: size of '\0'
++ DBGPRINT(RT_DEBUG_TRACE, ("msg=%s\n", extra));
++ }
++ else
++ {//Invalid parametes, so default printk all bbp
++ bIsPrintAllBBP = TRUE;
++ goto next;
++ }
++ }
++ else
++ { //Invalid parametes, so default printk all bbp
++ bIsPrintAllBBP = TRUE;
++ goto next;
++ }
++ }
++ else
++ { //Write
++ if ((sscanf(this_char, "%d", &(bbpId)) == 1) && (sscanf(value, "%x", &(bbpValue)) == 1))
++ {
++ if (bbpId <= 136)
++ {
++#ifdef RALINK_ATE
++ if (ATE_ON(pAdapter))
++ {
++ ATE_BBP_IO_WRITE8_BY_REG_ID(pAdapter, bbpId, bbpValue);
++ //Read it back for showing
++ ATE_BBP_IO_READ8_BY_REG_ID(pAdapter, bbpId, ®BBP);
++ }
++ else
++#endif // RALINK_ATE //
++ {
++ RTMP_BBP_IO_WRITE8_BY_REG_ID(pAdapter, bbpId, bbpValue);
++ //Read it back for showing
++ RTMP_BBP_IO_READ8_BY_REG_ID(pAdapter, bbpId, ®BBP);
++ }
++ sprintf(extra+strlen(extra), "R%02d[0x%02X]:%02X\n", bbpId, bbpId*2, regBBP);
++ wrq->length = strlen(extra) + 1; // 1: size of '\0'
++ DBGPRINT(RT_DEBUG_TRACE, ("msg=%s\n", extra));
++ }
++ else
++ {//Invalid parametes, so default printk all bbp
++ bIsPrintAllBBP = TRUE;
++ goto next;
++ }
++ }
++ else
++ { //Invalid parametes, so default printk all bbp
++ bIsPrintAllBBP = TRUE;
++ goto next;
++ }
++ }
++ }
++ else
++ bIsPrintAllBBP = TRUE;
++
++next:
++ if (bIsPrintAllBBP)
++ {
++ memset(extra, 0x00, IW_PRIV_SIZE_MASK);
++ sprintf(extra, "\n");
++ for (bbpId = 0; bbpId <= 136; bbpId++)
++ {
++ if (strlen(extra) >= (IW_PRIV_SIZE_MASK - 10))
++ break;
++#ifdef RALINK_ATE
++ if (ATE_ON(pAdapter))
++ {
++ ATE_BBP_IO_READ8_BY_REG_ID(pAdapter, bbpId, ®BBP);
++ }
++ else
++#endif // RALINK_ATE //
++ RTMP_BBP_IO_READ8_BY_REG_ID(pAdapter, bbpId, ®BBP);
++ sprintf(extra+strlen(extra), "R%02d[0x%02X]:%02X ", bbpId, bbpId*2, regBBP);
++ if (bbpId%5 == 4)
++ sprintf(extra+strlen(extra), "\n");
++ }
++
++ wrq->length = strlen(extra) + 1; // 1: size of '\0'
++ DBGPRINT(RT_DEBUG_TRACE, ("wrq->length = %d\n", wrq->length));
++ }
++
++ DBGPRINT(RT_DEBUG_TRACE, ("<==rt_private_ioctl_bbp\n\n"));
++
++ return Status;
++}
++#endif // DBG //
++
++int rt_ioctl_siwrate(struct net_device *dev,
++ struct iw_request_info *info,
++ union iwreq_data *wrqu, char *extra)
++{
++ PRTMP_ADAPTER pAd = (PRTMP_ADAPTER) dev->priv;
++ UINT32 rate = wrqu->bitrate.value, fixed = wrqu->bitrate.fixed;
++
++ //check if the interface is down
++ if(!RTMP_TEST_FLAG(pAd, fRTMP_ADAPTER_INTERRUPT_IN_USE))
++ {
++ DBGPRINT(RT_DEBUG_TRACE, ("rt_ioctl_siwrate::Network is down!\n"));
++ return -ENETDOWN;
++ }
++
++ DBGPRINT(RT_DEBUG_TRACE, ("rt_ioctl_siwrate::(rate = %d, fixed = %d)\n", rate, fixed));
++ /* rate = -1 => auto rate
++ rate = X, fixed = 1 => (fixed rate X)
++ */
++ if (rate == -1)
++ {
++ //Auto Rate
++ pAd->StaCfg.DesiredTransmitSetting.field.MCS = MCS_AUTO;
++ pAd->StaCfg.bAutoTxRateSwitch = TRUE;
++ if ((pAd->CommonCfg.PhyMode <= PHY_11G) ||
++ (pAd->MacTab.Content[BSSID_WCID].HTPhyMode.field.MODE <= MODE_OFDM))
++ RTMPSetDesiredRates(pAd, -1);
++
++#ifdef DOT11_N_SUPPORT
++ SetCommonHT(pAd);
++#endif // DOT11_N_SUPPORT //
++ }
++ else
++ {
++ if (fixed)
++ {
++ pAd->StaCfg.bAutoTxRateSwitch = FALSE;
++ if ((pAd->CommonCfg.PhyMode <= PHY_11G) ||
++ (pAd->MacTab.Content[BSSID_WCID].HTPhyMode.field.MODE <= MODE_OFDM))
++ RTMPSetDesiredRates(pAd, rate);
++ else
++ {
++ pAd->StaCfg.DesiredTransmitSetting.field.MCS = MCS_AUTO;
++#ifdef DOT11_N_SUPPORT
++ SetCommonHT(pAd);
++#endif // DOT11_N_SUPPORT //
++ }
++ DBGPRINT(RT_DEBUG_TRACE, ("rt_ioctl_siwrate::(HtMcs=%d)\n",pAd->StaCfg.DesiredTransmitSetting.field.MCS));
++ }
++ else
++ {
++ // TODO: rate = X, fixed = 0 => (rates <= X)
++ return -EOPNOTSUPP;
++ }
++ }
++
++ return 0;
++}
++
++int rt_ioctl_giwrate(struct net_device *dev,
++ struct iw_request_info *info,
++ union iwreq_data *wrqu, char *extra)
++{
++ PRTMP_ADAPTER pAd = (PRTMP_ADAPTER) dev->priv;
++ int rate_index = 0, rate_count = 0;
++ HTTRANSMIT_SETTING ht_setting;
++ __s32 ralinkrate[] =
++ {2, 4, 11, 22, // CCK
++ 12, 18, 24, 36, 48, 72, 96, 108, // OFDM
++ 13, 26, 39, 52, 78, 104, 117, 130, 26, 52, 78, 104, 156, 208, 234, 260, // 20MHz, 800ns GI, MCS: 0 ~ 15
++ 39, 78, 117, 156, 234, 312, 351, 390, // 20MHz, 800ns GI, MCS: 16 ~ 23
++ 27, 54, 81, 108, 162, 216, 243, 270, 54, 108, 162, 216, 324, 432, 486, 540, // 40MHz, 800ns GI, MCS: 0 ~ 15
++ 81, 162, 243, 324, 486, 648, 729, 810, // 40MHz, 800ns GI, MCS: 16 ~ 23
++ 14, 29, 43, 57, 87, 115, 130, 144, 29, 59, 87, 115, 173, 230, 260, 288, // 20MHz, 400ns GI, MCS: 0 ~ 15
++ 43, 87, 130, 173, 260, 317, 390, 433, // 20MHz, 400ns GI, MCS: 16 ~ 23
++ 30, 60, 90, 120, 180, 240, 270, 300, 60, 120, 180, 240, 360, 480, 540, 600, // 40MHz, 400ns GI, MCS: 0 ~ 15
++ 90, 180, 270, 360, 540, 720, 810, 900}; // 40MHz, 400ns GI, MCS: 16 ~ 23
++
++ rate_count = sizeof(ralinkrate)/sizeof(__s32);
++ //check if the interface is down
++ if(!RTMP_TEST_FLAG(pAd, fRTMP_ADAPTER_INTERRUPT_IN_USE))
++ {
++ DBGPRINT(RT_DEBUG_TRACE, ("INFO::Network is down!\n"));
++ return -ENETDOWN;
++ }
++
++ if ((pAd->StaCfg.bAutoTxRateSwitch == FALSE) &&
++ (INFRA_ON(pAd)) &&
++ ((pAd->CommonCfg.PhyMode <= PHY_11G) || (pAd->MacTab.Content[BSSID_WCID].HTPhyMode.field.MODE <= MODE_OFDM)))
++ ht_setting.word = pAd->StaCfg.HTPhyMode.word;
++ else
++ ht_setting.word = pAd->MacTab.Content[BSSID_WCID].HTPhyMode.word;
++
++#ifdef DOT11_N_SUPPORT
++ if (ht_setting.field.MODE >= MODE_HTMIX)
++ {
++// rate_index = 12 + ((UCHAR)ht_setting.field.BW *16) + ((UCHAR)ht_setting.field.ShortGI *32) + ((UCHAR)ht_setting.field.MCS);
++ rate_index = 12 + ((UCHAR)ht_setting.field.BW *24) + ((UCHAR)ht_setting.field.ShortGI *48) + ((UCHAR)ht_setting.field.MCS);
++ }
++ else
++#endif // DOT11_N_SUPPORT //
++ if (ht_setting.field.MODE == MODE_OFDM)
++ rate_index = (UCHAR)(ht_setting.field.MCS) + 4;
++ else if (ht_setting.field.MODE == MODE_CCK)
++ rate_index = (UCHAR)(ht_setting.field.MCS);
++
++ if (rate_index < 0)
++ rate_index = 0;
++
++ if (rate_index > rate_count)
++ rate_index = rate_count;
++
++ wrqu->bitrate.value = ralinkrate[rate_index] * 500000;
++ wrqu->bitrate.disabled = 0;
++
++ return 0;
++}
++
++static const iw_handler rt_handler[] =
++{
++ (iw_handler) NULL, /* SIOCSIWCOMMIT */
++ (iw_handler) rt_ioctl_giwname, /* SIOCGIWNAME */
++ (iw_handler) NULL, /* SIOCSIWNWID */
++ (iw_handler) NULL, /* SIOCGIWNWID */
++ (iw_handler) rt_ioctl_siwfreq, /* SIOCSIWFREQ */
++ (iw_handler) rt_ioctl_giwfreq, /* SIOCGIWFREQ */
++ (iw_handler) rt_ioctl_siwmode, /* SIOCSIWMODE */
++ (iw_handler) rt_ioctl_giwmode, /* SIOCGIWMODE */
++ (iw_handler) NULL, /* SIOCSIWSENS */
++ (iw_handler) NULL, /* SIOCGIWSENS */
++ (iw_handler) NULL /* not used */, /* SIOCSIWRANGE */
++ (iw_handler) rt_ioctl_giwrange, /* SIOCGIWRANGE */
++ (iw_handler) NULL /* not used */, /* SIOCSIWPRIV */
++ (iw_handler) NULL /* kernel code */, /* SIOCGIWPRIV */
++ (iw_handler) NULL /* not used */, /* SIOCSIWSTATS */
++ (iw_handler) rt28xx_get_wireless_stats /* kernel code */, /* SIOCGIWSTATS */
++ (iw_handler) NULL, /* SIOCSIWSPY */
++ (iw_handler) NULL, /* SIOCGIWSPY */
++ (iw_handler) NULL, /* SIOCSIWTHRSPY */
++ (iw_handler) NULL, /* SIOCGIWTHRSPY */
++ (iw_handler) rt_ioctl_siwap, /* SIOCSIWAP */
++ (iw_handler) rt_ioctl_giwap, /* SIOCGIWAP */
++#ifdef SIOCSIWMLME
++ (iw_handler) rt_ioctl_siwmlme, /* SIOCSIWMLME */
++#else
++ (iw_handler) NULL, /* SIOCSIWMLME */
++#endif // SIOCSIWMLME //
++ (iw_handler) rt_ioctl_iwaplist, /* SIOCGIWAPLIST */
++#ifdef SIOCGIWSCAN
++ (iw_handler) rt_ioctl_siwscan, /* SIOCSIWSCAN */
++ (iw_handler) rt_ioctl_giwscan, /* SIOCGIWSCAN */
++#else
++ (iw_handler) NULL, /* SIOCSIWSCAN */
++ (iw_handler) NULL, /* SIOCGIWSCAN */
++#endif /* SIOCGIWSCAN */
++ (iw_handler) rt_ioctl_siwessid, /* SIOCSIWESSID */
++ (iw_handler) rt_ioctl_giwessid, /* SIOCGIWESSID */
++ (iw_handler) rt_ioctl_siwnickn, /* SIOCSIWNICKN */
++ (iw_handler) rt_ioctl_giwnickn, /* SIOCGIWNICKN */
++ (iw_handler) NULL, /* -- hole -- */
++ (iw_handler) NULL, /* -- hole -- */
++ (iw_handler) rt_ioctl_siwrate, /* SIOCSIWRATE */
++ (iw_handler) rt_ioctl_giwrate, /* SIOCGIWRATE */
++ (iw_handler) rt_ioctl_siwrts, /* SIOCSIWRTS */
++ (iw_handler) rt_ioctl_giwrts, /* SIOCGIWRTS */
++ (iw_handler) rt_ioctl_siwfrag, /* SIOCSIWFRAG */
++ (iw_handler) rt_ioctl_giwfrag, /* SIOCGIWFRAG */
++ (iw_handler) NULL, /* SIOCSIWTXPOW */
++ (iw_handler) NULL, /* SIOCGIWTXPOW */
++ (iw_handler) NULL, /* SIOCSIWRETRY */
++ (iw_handler) NULL, /* SIOCGIWRETRY */
++ (iw_handler) rt_ioctl_siwencode, /* SIOCSIWENCODE */
++ (iw_handler) rt_ioctl_giwencode, /* SIOCGIWENCODE */
++ (iw_handler) NULL, /* SIOCSIWPOWER */
++ (iw_handler) NULL, /* SIOCGIWPOWER */
++ (iw_handler) NULL, /* -- hole -- */
++ (iw_handler) NULL, /* -- hole -- */
++#if WIRELESS_EXT > 17
++ (iw_handler) rt_ioctl_siwgenie, /* SIOCSIWGENIE */
++ (iw_handler) rt_ioctl_giwgenie, /* SIOCGIWGENIE */
++ (iw_handler) rt_ioctl_siwauth, /* SIOCSIWAUTH */
++ (iw_handler) rt_ioctl_giwauth, /* SIOCGIWAUTH */
++ (iw_handler) rt_ioctl_siwencodeext, /* SIOCSIWENCODEEXT */
++ (iw_handler) rt_ioctl_giwencodeext, /* SIOCGIWENCODEEXT */
++ (iw_handler) rt_ioctl_siwpmksa, /* SIOCSIWPMKSA */
++#endif
++};
++
++static const iw_handler rt_priv_handlers[] = {
++ (iw_handler) NULL, /* + 0x00 */
++ (iw_handler) NULL, /* + 0x01 */
++#ifndef CONFIG_AP_SUPPORT
++ (iw_handler) rt_ioctl_setparam, /* + 0x02 */
++#else
++ (iw_handler) NULL, /* + 0x02 */
++#endif // CONFIG_AP_SUPPORT //
++#ifdef DBG
++ (iw_handler) rt_private_ioctl_bbp, /* + 0x03 */
++#else
++ (iw_handler) NULL, /* + 0x03 */
++#endif
++ (iw_handler) NULL, /* + 0x04 */
++ (iw_handler) NULL, /* + 0x05 */
++ (iw_handler) NULL, /* + 0x06 */
++ (iw_handler) NULL, /* + 0x07 */
++ (iw_handler) NULL, /* + 0x08 */
++ (iw_handler) rt_private_get_statistics, /* + 0x09 */
++ (iw_handler) NULL, /* + 0x0A */
++ (iw_handler) NULL, /* + 0x0B */
++ (iw_handler) NULL, /* + 0x0C */
++ (iw_handler) NULL, /* + 0x0D */
++ (iw_handler) NULL, /* + 0x0E */
++ (iw_handler) NULL, /* + 0x0F */
++ (iw_handler) NULL, /* + 0x10 */
++ (iw_handler) rt_private_show, /* + 0x11 */
++ (iw_handler) NULL, /* + 0x12 */
++ (iw_handler) NULL, /* + 0x13 */
++ (iw_handler) NULL, /* + 0x15 */
++ (iw_handler) NULL, /* + 0x17 */
++ (iw_handler) NULL, /* + 0x18 */
++};
++
++const struct iw_handler_def rt28xx_iw_handler_def =
++{
++#define N(a) (sizeof (a) / sizeof (a[0]))
++ .standard = (iw_handler *) rt_handler,
++ .num_standard = sizeof(rt_handler) / sizeof(iw_handler),
++ .private = (iw_handler *) rt_priv_handlers,
++ .num_private = N(rt_priv_handlers),
++ .private_args = (struct iw_priv_args *) privtab,
++ .num_private_args = N(privtab),
++#if IW_HANDLER_VERSION >= 7
++ .get_wireless_stats = rt28xx_get_wireless_stats,
++#endif
++};
++
++INT RTMPSetInformation(
++ IN PRTMP_ADAPTER pAdapter,
++ IN OUT struct ifreq *rq,
++ IN INT cmd)
++{
++ struct iwreq *wrq = (struct iwreq *) rq;
++ NDIS_802_11_SSID Ssid;
++ NDIS_802_11_MAC_ADDRESS Bssid;
++ RT_802_11_PHY_MODE PhyMode;
++ RT_802_11_STA_CONFIG StaConfig;
++ NDIS_802_11_RATES aryRates;
++ RT_802_11_PREAMBLE Preamble;
++ NDIS_802_11_WEP_STATUS WepStatus;
++ NDIS_802_11_AUTHENTICATION_MODE AuthMode = Ndis802_11AuthModeMax;
++ NDIS_802_11_NETWORK_INFRASTRUCTURE BssType;
++ NDIS_802_11_RTS_THRESHOLD RtsThresh;
++ NDIS_802_11_FRAGMENTATION_THRESHOLD FragThresh;
++ NDIS_802_11_POWER_MODE PowerMode;
++ PNDIS_802_11_KEY pKey = NULL;
++ PNDIS_802_11_WEP pWepKey =NULL;
++ PNDIS_802_11_REMOVE_KEY pRemoveKey = NULL;
++ NDIS_802_11_CONFIGURATION Config, *pConfig = NULL;
++ NDIS_802_11_NETWORK_TYPE NetType;
++ ULONG Now;
++ UINT KeyIdx = 0;
++ INT Status = NDIS_STATUS_SUCCESS, MaxPhyMode = PHY_11G;
++ ULONG PowerTemp;
++ BOOLEAN RadioState;
++ BOOLEAN StateMachineTouched = FALSE;
++#ifdef DOT11_N_SUPPORT
++ OID_SET_HT_PHYMODE HT_PhyMode; //11n ,kathy
++#endif // DOT11_N_SUPPORT //
++#ifdef WPA_SUPPLICANT_SUPPORT
++ PNDIS_802_11_PMKID pPmkId = NULL;
++ BOOLEAN IEEE8021xState = FALSE;
++ BOOLEAN IEEE8021x_required_keys = FALSE;
++ UCHAR wpa_supplicant_enable = 0;
++#endif // WPA_SUPPLICANT_SUPPORT //
++
++#ifdef SNMP_SUPPORT
++ TX_RTY_CFG_STRUC tx_rty_cfg;
++ ULONG ShortRetryLimit, LongRetryLimit;
++ UCHAR ctmp;
++#endif // SNMP_SUPPORT //
++
++
++
++#ifdef DOT11_N_SUPPORT
++ MaxPhyMode = PHY_11N_5G;
++#endif // DOT11_N_SUPPORT //
++
++
++ DBGPRINT(RT_DEBUG_TRACE, ("-->RTMPSetInformation(), 0x%08x\n", cmd&0x7FFF));
++ switch(cmd & 0x7FFF) {
++ case RT_OID_802_11_COUNTRY_REGION:
++ if (wrq->u.data.length < sizeof(UCHAR))
++ Status = -EINVAL;
++ // Only avaliable when EEPROM not programming
++ else if (!(pAdapter->CommonCfg.CountryRegion & 0x80) && !(pAdapter->CommonCfg.CountryRegionForABand & 0x80))
++ {
++ ULONG Country;
++ UCHAR TmpPhy;
++
++ Status = copy_from_user(&Country, wrq->u.data.pointer, wrq->u.data.length);
++ pAdapter->CommonCfg.CountryRegion = (UCHAR)(Country & 0x000000FF);
++ pAdapter->CommonCfg.CountryRegionForABand = (UCHAR)((Country >> 8) & 0x000000FF);
++ TmpPhy = pAdapter->CommonCfg.PhyMode;
++ pAdapter->CommonCfg.PhyMode = 0xff;
++ // Build all corresponding channel information
++ RTMPSetPhyMode(pAdapter, TmpPhy);
++#ifdef DOT11_N_SUPPORT
++ SetCommonHT(pAdapter);
++#endif // DOT11_N_SUPPORT //
++ DBGPRINT(RT_DEBUG_TRACE, ("Set::RT_OID_802_11_COUNTRY_REGION (A:%d B/G:%d)\n", pAdapter->CommonCfg.CountryRegionForABand,
++ pAdapter->CommonCfg.CountryRegion));
++ }
++ break;
++ case OID_802_11_BSSID_LIST_SCAN:
++ #ifdef RALINK_ATE
++ if (ATE_ON(pAdapter))
++ {
++ DBGPRINT(RT_DEBUG_TRACE, ("The driver is in ATE mode now\n"));
++ break;
++ }
++#endif // RALINK_ATE //
++ Now = jiffies;
++ DBGPRINT(RT_DEBUG_TRACE, ("Set::OID_802_11_BSSID_LIST_SCAN, TxCnt = %d \n", pAdapter->RalinkCounters.LastOneSecTotalTxCount));
++
++ if (MONITOR_ON(pAdapter))
++ {
++ DBGPRINT(RT_DEBUG_TRACE, ("!!! Driver is in Monitor Mode now !!!\n"));
++ break;
++ }
++
++ //Benson add 20080527, when radio off, sta don't need to scan
++ if (RTMP_TEST_FLAG(pAdapter, fRTMP_ADAPTER_RADIO_OFF))
++ break;
++
++ if (RTMP_TEST_FLAG(pAdapter, fRTMP_ADAPTER_BSS_SCAN_IN_PROGRESS))
++ {
++ DBGPRINT(RT_DEBUG_TRACE, ("!!! Driver is scanning now !!!\n"));
++ pAdapter->StaCfg.bScanReqIsFromWebUI = TRUE;
++ Status = NDIS_STATUS_SUCCESS;
++ break;
++ }
++
++ if (pAdapter->RalinkCounters.LastOneSecTotalTxCount > 100)
++ {
++ DBGPRINT(RT_DEBUG_TRACE, ("!!! Link UP, ignore this set::OID_802_11_BSSID_LIST_SCAN\n"));
++ Status = NDIS_STATUS_SUCCESS;
++ pAdapter->StaCfg.ScanCnt = 99; // Prevent auto scan triggered by this OID
++ break;
++ }
++
++ if ((OPSTATUS_TEST_FLAG(pAdapter, fOP_STATUS_MEDIA_STATE_CONNECTED)) &&
++ ((pAdapter->StaCfg.AuthMode == Ndis802_11AuthModeWPA) ||
++ (pAdapter->StaCfg.AuthMode == Ndis802_11AuthModeWPAPSK) ||
++ (pAdapter->StaCfg.AuthMode == Ndis802_11AuthModeWPA2) ||
++ (pAdapter->StaCfg.AuthMode == Ndis802_11AuthModeWPA2PSK)) &&
++ (pAdapter->StaCfg.PortSecured == WPA_802_1X_PORT_NOT_SECURED))
++ {
++ DBGPRINT(RT_DEBUG_TRACE, ("!!! Link UP, Port Not Secured! ignore this set::OID_802_11_BSSID_LIST_SCAN\n"));
++ Status = NDIS_STATUS_SUCCESS;
++ pAdapter->StaCfg.ScanCnt = 99; // Prevent auto scan triggered by this OID
++ break;
++ }
++
++
++ if (pAdapter->Mlme.CntlMachine.CurrState != CNTL_IDLE)
++ {
++ RT28XX_MLME_RESET_STATE_MACHINE(pAdapter);
++ DBGPRINT(RT_DEBUG_TRACE, ("!!! MLME busy, reset MLME state machine !!!\n"));
++ }
++
++ // tell CNTL state machine to call NdisMSetInformationComplete() after completing
++ // this request, because this request is initiated by NDIS.
++ pAdapter->MlmeAux.CurrReqIsFromNdis = FALSE;
++ // Reset allowed scan retries
++ pAdapter->StaCfg.ScanCnt = 0;
++ pAdapter->StaCfg.LastScanTime = Now;
++
++ pAdapter->StaCfg.bScanReqIsFromWebUI = TRUE;
++ RTMP_SET_FLAG(pAdapter, fRTMP_ADAPTER_BSS_SCAN_IN_PROGRESS);
++ MlmeEnqueue(pAdapter,
++ MLME_CNTL_STATE_MACHINE,
++ OID_802_11_BSSID_LIST_SCAN,
++ 0,
++ NULL);
++
++ Status = NDIS_STATUS_SUCCESS;
++ StateMachineTouched = TRUE;
++ break;
++ case OID_802_11_SSID:
++ if (wrq->u.data.length != sizeof(NDIS_802_11_SSID))
++ Status = -EINVAL;
++ else
++ {
++ PCHAR pSsidString = NULL;
++ Status = copy_from_user(&Ssid, wrq->u.data.pointer, wrq->u.data.length);
++
++ DBGPRINT(RT_DEBUG_TRACE, ("Set::OID_802_11_SSID (Len=%d,Ssid=%s)\n", Ssid.SsidLength, Ssid.Ssid));
++ if (Ssid.SsidLength > MAX_LEN_OF_SSID)
++ Status = -EINVAL;
++ else
++ {
++ if (Ssid.SsidLength == 0)
++ {
++ Set_SSID_Proc(pAdapter, "");
++ }
++ else
++ {
++ pSsidString = (CHAR *) kmalloc(MAX_LEN_OF_SSID+1, MEM_ALLOC_FLAG);
++ if (pSsidString)
++ {
++ NdisZeroMemory(pSsidString, MAX_LEN_OF_SSID+1);
++ NdisMoveMemory(pSsidString, Ssid.Ssid, Ssid.SsidLength);
++ Set_SSID_Proc(pAdapter, pSsidString);
++ kfree(pSsidString);
++ }
++ else
++ Status = -ENOMEM;
++ }
++ }
++ }
++ break;
++ case OID_802_11_BSSID:
++#ifdef RALINK_ATE
++ if (ATE_ON(pAdapter))
++ {
++ DBGPRINT(RT_DEBUG_TRACE, ("The driver is in ATE mode now\n"));
++ break;
++ }
++#endif // RALINK_ATE //
++ if (wrq->u.data.length != sizeof(NDIS_802_11_MAC_ADDRESS))
++ Status = -EINVAL;
++ else
++ {
++ Status = copy_from_user(&Bssid, wrq->u.data.pointer, wrq->u.data.length);
++
++ // tell CNTL state machine to call NdisMSetInformationComplete() after completing
++ // this request, because this request is initiated by NDIS.
++ pAdapter->MlmeAux.CurrReqIsFromNdis = FALSE;
++
++ // Prevent to connect AP again in STAMlmePeriodicExec
++ pAdapter->MlmeAux.AutoReconnectSsidLen= 32;
++
++ // Reset allowed scan retries
++ pAdapter->StaCfg.ScanCnt = 0;
++
++ if (pAdapter->Mlme.CntlMachine.CurrState != CNTL_IDLE)
++ {
++ RT28XX_MLME_RESET_STATE_MACHINE(pAdapter);
++ DBGPRINT(RT_DEBUG_TRACE, ("!!! MLME busy, reset MLME state machine !!!\n"));
++ }
++ MlmeEnqueue(pAdapter,
++ MLME_CNTL_STATE_MACHINE,
++ OID_802_11_BSSID,
++ sizeof(NDIS_802_11_MAC_ADDRESS),
++ (VOID *)&Bssid);
++ Status = NDIS_STATUS_SUCCESS;
++ StateMachineTouched = TRUE;
++
++ DBGPRINT(RT_DEBUG_TRACE, ("Set::OID_802_11_BSSID %02x:%02x:%02x:%02x:%02x:%02x\n",
++ Bssid[0], Bssid[1], Bssid[2], Bssid[3], Bssid[4], Bssid[5]));
++ }
++ break;
++ case RT_OID_802_11_RADIO:
++ if (wrq->u.data.length != sizeof(BOOLEAN))
++ Status = -EINVAL;
++ else
++ {
++ Status = copy_from_user(&RadioState, wrq->u.data.pointer, wrq->u.data.length);
++ DBGPRINT(RT_DEBUG_TRACE, ("Set::RT_OID_802_11_RADIO (=%d)\n", RadioState));
++ if (pAdapter->StaCfg.bSwRadio != RadioState)
++ {
++ pAdapter->StaCfg.bSwRadio = RadioState;
++ if (pAdapter->StaCfg.bRadio != (pAdapter->StaCfg.bHwRadio && pAdapter->StaCfg.bSwRadio))
++ {
++ pAdapter->StaCfg.bRadio = (pAdapter->StaCfg.bHwRadio && pAdapter->StaCfg.bSwRadio);
++ if (pAdapter->StaCfg.bRadio == TRUE)
++ {
++ MlmeRadioOn(pAdapter);
++ // Update extra information
++ pAdapter->ExtraInfo = EXTRA_INFO_CLEAR;
++ }
++ else
++ {
++ MlmeRadioOff(pAdapter);
++ // Update extra information
++ pAdapter->ExtraInfo = SW_RADIO_OFF;
++ }
++ }
++ }
++ }
++ break;
++ case RT_OID_802_11_PHY_MODE:
++ if (wrq->u.data.length != sizeof(RT_802_11_PHY_MODE))
++ Status = -EINVAL;
++ else
++ {
++ Status = copy_from_user(&PhyMode, wrq->u.data.pointer, wrq->u.data.length);
++ if (PhyMode <= MaxPhyMode)
++ {
++ RTMPSetPhyMode(pAdapter, PhyMode);
++#ifdef DOT11_N_SUPPORT
++ SetCommonHT(pAdapter);
++#endif // DOT11_N_SUPPORT //
++ }
++ DBGPRINT(RT_DEBUG_TRACE, ("Set::RT_OID_802_11_PHY_MODE (=%d)\n", PhyMode));
++ }
++ break;
++ case RT_OID_802_11_STA_CONFIG:
++ if (wrq->u.data.length != sizeof(RT_802_11_STA_CONFIG))
++ Status = -EINVAL;
++ else
++ {
++ Status = copy_from_user(&StaConfig, wrq->u.data.pointer, wrq->u.data.length);
++ pAdapter->CommonCfg.bEnableTxBurst = StaConfig.EnableTxBurst;
++ pAdapter->CommonCfg.UseBGProtection = StaConfig.UseBGProtection;
++ pAdapter->CommonCfg.bUseShortSlotTime = 1; // 2003-10-30 always SHORT SLOT capable
++ if ((pAdapter->CommonCfg.PhyMode != StaConfig.AdhocMode) &&
++ (StaConfig.AdhocMode <= MaxPhyMode))
++ {
++ // allow dynamic change of "USE OFDM rate or not" in ADHOC mode
++ // if setting changed, need to reset current TX rate as well as BEACON frame format
++ if (pAdapter->StaCfg.BssType == BSS_ADHOC)
++ {
++ pAdapter->CommonCfg.PhyMode = StaConfig.AdhocMode;
++ RTMPSetPhyMode(pAdapter, PhyMode);
++ MlmeUpdateTxRates(pAdapter, FALSE, 0);
++ MakeIbssBeacon(pAdapter); // re-build BEACON frame
++ AsicEnableIbssSync(pAdapter); // copy to on-chip memory
++ }
++ }
++ DBGPRINT(RT_DEBUG_TRACE, ("Set::RT_OID_802_11_SET_STA_CONFIG (Burst=%d, Protection=%ld,ShortSlot=%d\n",
++ pAdapter->CommonCfg.bEnableTxBurst,
++ pAdapter->CommonCfg.UseBGProtection,
++ pAdapter->CommonCfg.bUseShortSlotTime));
++ }
++ break;
++ case OID_802_11_DESIRED_RATES:
++ if (wrq->u.data.length != sizeof(NDIS_802_11_RATES))
++ Status = -EINVAL;
++ else
++ {
++ Status = copy_from_user(&aryRates, wrq->u.data.pointer, wrq->u.data.length);
++ NdisZeroMemory(pAdapter->CommonCfg.DesireRate, MAX_LEN_OF_SUPPORTED_RATES);
++ NdisMoveMemory(pAdapter->CommonCfg.DesireRate, &aryRates, sizeof(NDIS_802_11_RATES));
++ DBGPRINT(RT_DEBUG_TRACE, ("Set::OID_802_11_DESIRED_RATES (%02x,%02x,%02x,%02x,%02x,%02x,%02x,%02x)\n",
++ pAdapter->CommonCfg.DesireRate[0],pAdapter->CommonCfg.DesireRate[1],
++ pAdapter->CommonCfg.DesireRate[2],pAdapter->CommonCfg.DesireRate[3],
++ pAdapter->CommonCfg.DesireRate[4],pAdapter->CommonCfg.DesireRate[5],
++ pAdapter->CommonCfg.DesireRate[6],pAdapter->CommonCfg.DesireRate[7] ));
++ // Changing DesiredRate may affect the MAX TX rate we used to TX frames out
++ MlmeUpdateTxRates(pAdapter, FALSE, 0);
++ }
++ break;
++ case RT_OID_802_11_PREAMBLE:
++ if (wrq->u.data.length != sizeof(RT_802_11_PREAMBLE))
++ Status = -EINVAL;
++ else
++ {
++ Status = copy_from_user(&Preamble, wrq->u.data.pointer, wrq->u.data.length);
++ if (Preamble == Rt802_11PreambleShort)
++ {
++ pAdapter->CommonCfg.TxPreamble = Preamble;
++ MlmeSetTxPreamble(pAdapter, Rt802_11PreambleShort);
++ }
++ else if ((Preamble == Rt802_11PreambleLong) || (Preamble == Rt802_11PreambleAuto))
++ {
++ // if user wants AUTO, initialize to LONG here, then change according to AP's
++ // capability upon association.
++ pAdapter->CommonCfg.TxPreamble = Preamble;
++ MlmeSetTxPreamble(pAdapter, Rt802_11PreambleLong);
++ }
++ else
++ {
++ Status = -EINVAL;
++ break;
++ }
++ DBGPRINT(RT_DEBUG_TRACE, ("Set::RT_OID_802_11_PREAMBLE (=%d)\n", Preamble));
++ }
++ break;
++ case OID_802_11_WEP_STATUS:
++ if (wrq->u.data.length != sizeof(NDIS_802_11_WEP_STATUS))
++ Status = -EINVAL;
++ else
++ {
++ Status = copy_from_user(&WepStatus, wrq->u.data.pointer, wrq->u.data.length);
++ // Since TKIP, AES, WEP are all supported. It should not have any invalid setting
++ if (WepStatus <= Ndis802_11Encryption3KeyAbsent)
++ {
++ if (pAdapter->StaCfg.WepStatus != WepStatus)
++ {
++ // Config has changed
++ pAdapter->bConfigChanged = TRUE;
++ }
++ pAdapter->StaCfg.WepStatus = WepStatus;
++ pAdapter->StaCfg.OrigWepStatus = WepStatus;
++ pAdapter->StaCfg.PairCipher = WepStatus;
++ pAdapter->StaCfg.GroupCipher = WepStatus;
++ }
++ else
++ {
++ Status = -EINVAL;
++ break;
++ }
++ DBGPRINT(RT_DEBUG_TRACE, ("Set::OID_802_11_WEP_STATUS (=%d)\n",WepStatus));
++ }
++ break;
++ case OID_802_11_AUTHENTICATION_MODE:
++ if (wrq->u.data.length != sizeof(NDIS_802_11_AUTHENTICATION_MODE))
++ Status = -EINVAL;
++ else
++ {
++ Status = copy_from_user(&AuthMode, wrq->u.data.pointer, wrq->u.data.length);
++ if (AuthMode > Ndis802_11AuthModeMax)
++ {
++ Status = -EINVAL;
++ break;
++ }
++ else
++ {
++ if (pAdapter->StaCfg.AuthMode != AuthMode)
++ {
++ // Config has changed
++ pAdapter->bConfigChanged = TRUE;
++ }
++ pAdapter->StaCfg.AuthMode = AuthMode;
++ }
++ pAdapter->StaCfg.PortSecured = WPA_802_1X_PORT_NOT_SECURED;
++ DBGPRINT(RT_DEBUG_TRACE, ("Set::OID_802_11_AUTHENTICATION_MODE (=%d) \n",pAdapter->StaCfg.AuthMode));
++ }
++ break;
++ case OID_802_11_INFRASTRUCTURE_MODE:
++ if (wrq->u.data.length != sizeof(NDIS_802_11_NETWORK_INFRASTRUCTURE))
++ Status = -EINVAL;
++ else
++ {
++ Status = copy_from_user(&BssType, wrq->u.data.pointer, wrq->u.data.length);
++
++ if (BssType == Ndis802_11IBSS)
++ Set_NetworkType_Proc(pAdapter, "Adhoc");
++ else if (BssType == Ndis802_11Infrastructure)
++ Set_NetworkType_Proc(pAdapter, "Infra");
++ else if (BssType == Ndis802_11Monitor)
++ Set_NetworkType_Proc(pAdapter, "Monitor");
++ else
++ {
++ Status = -EINVAL;
++ DBGPRINT(RT_DEBUG_TRACE, ("Set::OID_802_11_INFRASTRUCTURE_MODE (unknown)\n"));
++ }
++ }
++ break;
++ case OID_802_11_REMOVE_WEP:
++ DBGPRINT(RT_DEBUG_TRACE, ("Set::OID_802_11_REMOVE_WEP\n"));
++ if (wrq->u.data.length != sizeof(NDIS_802_11_KEY_INDEX))
++ {
++ Status = -EINVAL;
++ }
++ else
++ {
++ KeyIdx = *(NDIS_802_11_KEY_INDEX *) wrq->u.data.pointer;
++
++ if (KeyIdx & 0x80000000)
++ {
++ // Should never set default bit when remove key
++ Status = -EINVAL;
++ }
++ else
++ {
++ KeyIdx = KeyIdx & 0x0fffffff;
++ if (KeyIdx >= 4){
++ Status = -EINVAL;
++ }
++ else
++ {
++ pAdapter->SharedKey[BSS0][KeyIdx].KeyLen = 0;
++ pAdapter->SharedKey[BSS0][KeyIdx].CipherAlg = CIPHER_NONE;
++ AsicRemoveSharedKeyEntry(pAdapter, 0, (UCHAR)KeyIdx);
++ }
++ }
++ }
++ break;
++ case RT_OID_802_11_RESET_COUNTERS:
++ NdisZeroMemory(&pAdapter->WlanCounters, sizeof(COUNTER_802_11));
++ NdisZeroMemory(&pAdapter->Counters8023, sizeof(COUNTER_802_3));
++ NdisZeroMemory(&pAdapter->RalinkCounters, sizeof(COUNTER_RALINK));
++ pAdapter->Counters8023.RxNoBuffer = 0;
++ pAdapter->Counters8023.GoodReceives = 0;
++ pAdapter->Counters8023.RxNoBuffer = 0;
++#ifdef RT2870
++ pAdapter->BulkOutComplete = 0;
++ pAdapter->BulkOutCompleteOther= 0;
++ pAdapter->BulkOutCompleteCancel = 0;
++ pAdapter->BulkOutReq = 0;
++ pAdapter->BulkInReq= 0;
++ pAdapter->BulkInComplete = 0;
++ pAdapter->BulkInCompleteFail = 0;
++#endif // RT2870 //
++ DBGPRINT(RT_DEBUG_TRACE, ("Set::RT_OID_802_11_RESET_COUNTERS \n"));
++ break;
++ case OID_802_11_RTS_THRESHOLD:
++ if (wrq->u.data.length != sizeof(NDIS_802_11_RTS_THRESHOLD))
++ Status = -EINVAL;
++ else
++ {
++ Status = copy_from_user(&RtsThresh, wrq->u.data.pointer, wrq->u.data.length);
++ if (RtsThresh > MAX_RTS_THRESHOLD)
++ Status = -EINVAL;
++ else
++ pAdapter->CommonCfg.RtsThreshold = (USHORT)RtsThresh;
++ }
++ DBGPRINT(RT_DEBUG_TRACE, ("Set::OID_802_11_RTS_THRESHOLD (=%ld)\n",RtsThresh));
++ break;
++ case OID_802_11_FRAGMENTATION_THRESHOLD:
++ if (wrq->u.data.length != sizeof(NDIS_802_11_FRAGMENTATION_THRESHOLD))
++ Status = -EINVAL;
++ else
++ {
++ Status = copy_from_user(&FragThresh, wrq->u.data.pointer, wrq->u.data.length);
++ pAdapter->CommonCfg.bUseZeroToDisableFragment = FALSE;
++ if (FragThresh > MAX_FRAG_THRESHOLD || FragThresh < MIN_FRAG_THRESHOLD)
++ {
++ if (FragThresh == 0)
++ {
++ pAdapter->CommonCfg.FragmentThreshold = MAX_FRAG_THRESHOLD;
++ pAdapter->CommonCfg.bUseZeroToDisableFragment = TRUE;
++ }
++ else
++ Status = -EINVAL;
++ }
++ else
++ pAdapter->CommonCfg.FragmentThreshold = (USHORT)FragThresh;
++ }
++ DBGPRINT(RT_DEBUG_TRACE, ("Set::OID_802_11_FRAGMENTATION_THRESHOLD (=%ld) \n",FragThresh));
++ break;
++ case OID_802_11_POWER_MODE:
++ if (wrq->u.data.length != sizeof(NDIS_802_11_POWER_MODE))
++ Status = -EINVAL;
++ else
++ {
++ Status = copy_from_user(&PowerMode, wrq->u.data.pointer, wrq->u.data.length);
++ if (PowerMode == Ndis802_11PowerModeCAM)
++ Set_PSMode_Proc(pAdapter, "CAM");
++ else if (PowerMode == Ndis802_11PowerModeMAX_PSP)
++ Set_PSMode_Proc(pAdapter, "Max_PSP");
++ else if (PowerMode == Ndis802_11PowerModeFast_PSP)
++ Set_PSMode_Proc(pAdapter, "Fast_PSP");
++ else if (PowerMode == Ndis802_11PowerModeLegacy_PSP)
++ Set_PSMode_Proc(pAdapter, "Legacy_PSP");
++ else
++ Status = -EINVAL;
++ }
++ DBGPRINT(RT_DEBUG_TRACE, ("Set::OID_802_11_POWER_MODE (=%d)\n",PowerMode));
++ break;
++ case RT_OID_802_11_TX_POWER_LEVEL_1:
++ if (wrq->u.data.length < sizeof(ULONG))
++ Status = -EINVAL;
++ else
++ {
++ Status = copy_from_user(&PowerTemp, wrq->u.data.pointer, wrq->u.data.length);
++ if (PowerTemp > 100)
++ PowerTemp = 0xffffffff; // AUTO
++ pAdapter->CommonCfg.TxPowerDefault = PowerTemp; //keep current setting.
++ pAdapter->CommonCfg.TxPowerPercentage = pAdapter->CommonCfg.TxPowerDefault;
++ DBGPRINT(RT_DEBUG_TRACE, ("Set::RT_OID_802_11_TX_POWER_LEVEL_1 (=%ld)\n", pAdapter->CommonCfg.TxPowerPercentage));
++ }
++ break;
++ case OID_802_11_NETWORK_TYPE_IN_USE:
++ if (wrq->u.data.length != sizeof(NDIS_802_11_NETWORK_TYPE))
++ Status = -EINVAL;
++ else
++ {
++ Status = copy_from_user(&NetType, wrq->u.data.pointer, wrq->u.data.length);
++
++ if (NetType == Ndis802_11DS)
++ RTMPSetPhyMode(pAdapter, PHY_11B);
++ else if (NetType == Ndis802_11OFDM24)
++ RTMPSetPhyMode(pAdapter, PHY_11BG_MIXED);
++ else if (NetType == Ndis802_11OFDM5)
++ RTMPSetPhyMode(pAdapter, PHY_11A);
++ else
++ Status = -EINVAL;
++#ifdef DOT11_N_SUPPORT
++ if (Status == NDIS_STATUS_SUCCESS)
++ SetCommonHT(pAdapter);
++#endif // DOT11_N_SUPPORT //
++ DBGPRINT(RT_DEBUG_TRACE, ("Set::OID_802_11_NETWORK_TYPE_IN_USE (=%d)\n",NetType));
++ }
++ break;
++ // For WPA PSK PMK key
++ case RT_OID_802_11_ADD_WPA:
++ pKey = kmalloc(wrq->u.data.length, MEM_ALLOC_FLAG);
++ if(pKey == NULL)
++ {
++ Status = -ENOMEM;
++ break;
++ }
++
++ Status = copy_from_user(pKey, wrq->u.data.pointer, wrq->u.data.length);
++ if (pKey->Length != wrq->u.data.length)
++ {
++ Status = -EINVAL;
++ DBGPRINT(RT_DEBUG_TRACE, ("Set::RT_OID_802_11_ADD_WPA, Failed!!\n"));
++ }
++ else
++ {
++ if ((pAdapter->StaCfg.AuthMode != Ndis802_11AuthModeWPAPSK) &&
++ (pAdapter->StaCfg.AuthMode != Ndis802_11AuthModeWPA2PSK) &&
++ (pAdapter->StaCfg.AuthMode != Ndis802_11AuthModeWPANone) )
++ {
++ Status = -EOPNOTSUPP;
++ DBGPRINT(RT_DEBUG_TRACE, ("Set::RT_OID_802_11_ADD_WPA, Failed!! [AuthMode != WPAPSK/WPA2PSK/WPANONE]\n"));
++ }
++ else if ((pAdapter->StaCfg.AuthMode == Ndis802_11AuthModeWPAPSK) ||
++ (pAdapter->StaCfg.AuthMode == Ndis802_11AuthModeWPA2PSK) ||
++ (pAdapter->StaCfg.AuthMode == Ndis802_11AuthModeWPANone) ) // Only for WPA PSK mode
++ {
++ NdisMoveMemory(pAdapter->StaCfg.PMK, &pKey->KeyMaterial, pKey->KeyLength);
++ // Use RaConfig as PSK agent.
++ // Start STA supplicant state machine
++ if (pAdapter->StaCfg.AuthMode != Ndis802_11AuthModeWPANone)
++ pAdapter->StaCfg.WpaState = SS_START;
++
++ DBGPRINT(RT_DEBUG_TRACE, ("Set::RT_OID_802_11_ADD_WPA (id=0x%x, Len=%d-byte)\n", pKey->KeyIndex, pKey->KeyLength));
++ }
++ else
++ {
++ pAdapter->StaCfg.WpaState = SS_NOTUSE;
++ DBGPRINT(RT_DEBUG_TRACE, ("Set::RT_OID_802_11_ADD_WPA (id=0x%x, Len=%d-byte)\n", pKey->KeyIndex, pKey->KeyLength));
++ }
++ }
++ kfree(pKey);
++ break;
++ case OID_802_11_REMOVE_KEY:
++ pRemoveKey = kmalloc(wrq->u.data.length, MEM_ALLOC_FLAG);
++ if(pRemoveKey == NULL)
++ {
++ Status = -ENOMEM;
++ break;
++ }
++
++ Status = copy_from_user(pRemoveKey, wrq->u.data.pointer, wrq->u.data.length);
++ if (pRemoveKey->Length != wrq->u.data.length)
++ {
++ Status = -EINVAL;
++ DBGPRINT(RT_DEBUG_TRACE, ("Set::OID_802_11_REMOVE_KEY, Failed!!\n"));
++ }
++ else
++ {
++ if (pAdapter->StaCfg.AuthMode >= Ndis802_11AuthModeWPA)
++ {
++ RTMPWPARemoveKeyProc(pAdapter, pRemoveKey);
++ DBGPRINT(RT_DEBUG_TRACE, ("Set::OID_802_11_REMOVE_KEY, Remove WPA Key!!\n"));
++ }
++ else
++ {
++ KeyIdx = pRemoveKey->KeyIndex;
++
++ if (KeyIdx & 0x80000000)
++ {
++ // Should never set default bit when remove key
++ Status = -EINVAL;
++ DBGPRINT(RT_DEBUG_TRACE, ("Set::OID_802_11_REMOVE_KEY, Failed!!(Should never set default bit when remove key)\n"));
++ }
++ else
++ {
++ KeyIdx = KeyIdx & 0x0fffffff;
++ if (KeyIdx > 3)
++ {
++ Status = -EINVAL;
++ DBGPRINT(RT_DEBUG_TRACE, ("Set::OID_802_11_REMOVE_KEY, Failed!!(KeyId[%d] out of range)\n", KeyIdx));
++ }
++ else
++ {
++ pAdapter->SharedKey[BSS0][KeyIdx].KeyLen = 0;
++ pAdapter->SharedKey[BSS0][KeyIdx].CipherAlg = CIPHER_NONE;
++ AsicRemoveSharedKeyEntry(pAdapter, 0, (UCHAR)KeyIdx);
++ DBGPRINT(RT_DEBUG_TRACE, ("Set::OID_802_11_REMOVE_KEY (id=0x%x, Len=%d-byte)\n", pRemoveKey->KeyIndex, pRemoveKey->Length));
++ }
++ }
++ }
++ }
++ kfree(pRemoveKey);
++ break;
++ // New for WPA
++ case OID_802_11_ADD_KEY:
++ pKey = kmalloc(wrq->u.data.length, MEM_ALLOC_FLAG);
++ if(pKey == NULL)
++ {
++ Status = -ENOMEM;
++ break;
++ }
++ Status = copy_from_user(pKey, wrq->u.data.pointer, wrq->u.data.length);
++ if (pKey->Length != wrq->u.data.length)
++ {
++ Status = -EINVAL;
++ DBGPRINT(RT_DEBUG_TRACE, ("Set::OID_802_11_ADD_KEY, Failed!!\n"));
++ }
++ else
++ {
++ RTMPAddKey(pAdapter, pKey);
++ DBGPRINT(RT_DEBUG_TRACE, ("Set::OID_802_11_ADD_KEY (id=0x%x, Len=%d-byte)\n", pKey->KeyIndex, pKey->KeyLength));
++ }
++ kfree(pKey);
++ break;
++ case OID_802_11_CONFIGURATION:
++ if (wrq->u.data.length != sizeof(NDIS_802_11_CONFIGURATION))
++ Status = -EINVAL;
++ else
++ {
++ Status = copy_from_user(&Config, wrq->u.data.pointer, wrq->u.data.length);
++ pConfig = &Config;
++
++ if ((pConfig->BeaconPeriod >= 20) && (pConfig->BeaconPeriod <=400))
++ pAdapter->CommonCfg.BeaconPeriod = (USHORT) pConfig->BeaconPeriod;
++
++ pAdapter->StaActive.AtimWin = (USHORT) pConfig->ATIMWindow;
++ MAP_KHZ_TO_CHANNEL_ID(pConfig->DSConfig, pAdapter->CommonCfg.Channel);
++ //
++ // Save the channel on MlmeAux for CntlOidRTBssidProc used.
++ //
++ pAdapter->MlmeAux.Channel = pAdapter->CommonCfg.Channel;
++
++ DBGPRINT(RT_DEBUG_TRACE, ("Set::OID_802_11_CONFIGURATION (BeacnPeriod=%ld,AtimW=%ld,Ch=%d)\n",
++ pConfig->BeaconPeriod, pConfig->ATIMWindow, pAdapter->CommonCfg.Channel));
++ // Config has changed
++ pAdapter->bConfigChanged = TRUE;
++ }
++ break;
++#ifdef DOT11_N_SUPPORT
++ case RT_OID_802_11_SET_HT_PHYMODE:
++ if (wrq->u.data.length != sizeof(OID_SET_HT_PHYMODE))
++ Status = -EINVAL;
++ else
++ {
++ POID_SET_HT_PHYMODE pHTPhyMode = &HT_PhyMode;
++
++ Status = copy_from_user(&HT_PhyMode, wrq->u.data.pointer, wrq->u.data.length);
++ DBGPRINT(RT_DEBUG_TRACE, ("Set::pHTPhyMode (PhyMode = %d,TransmitNo = %d, HtMode = %d, ExtOffset = %d , MCS = %d, BW = %d, STBC = %d, SHORTGI = %d) \n",
++ pHTPhyMode->PhyMode, pHTPhyMode->TransmitNo,pHTPhyMode->HtMode,pHTPhyMode->ExtOffset,
++ pHTPhyMode->MCS, pHTPhyMode->BW, pHTPhyMode->STBC, pHTPhyMode->SHORTGI));
++ if (pAdapter->CommonCfg.PhyMode >= PHY_11ABGN_MIXED)
++ RTMPSetHT(pAdapter, pHTPhyMode);
++ }
++ DBGPRINT(RT_DEBUG_TRACE, ("Set::RT_OID_802_11_SET_HT_PHYMODE(MCS=%d,BW=%d,SGI=%d,STBC=%d)\n",
++ pAdapter->StaCfg.HTPhyMode.field.MCS, pAdapter->StaCfg.HTPhyMode.field.BW, pAdapter->StaCfg.HTPhyMode.field.ShortGI,
++ pAdapter->StaCfg.HTPhyMode.field.STBC));
++ break;
++#endif // DOT11_N_SUPPORT //
++ case RT_OID_802_11_SET_APSD_SETTING:
++ if (wrq->u.data.length != sizeof(ULONG))
++ Status = -EINVAL;
++ else
++ {
++ ULONG apsd ;
++ Status = copy_from_user(&apsd, wrq->u.data.pointer, wrq->u.data.length);
++
++ /*-------------------------------------------------------------------
++ |B31~B7 | B6~B5 | B4 | B3 | B2 | B1 | B0 |
++ ---------------------------------------------------------------------
++ | Rsvd | Max SP Len | AC_VO | AC_VI | AC_BK | AC_BE | APSD Capable |
++ ---------------------------------------------------------------------*/
++ pAdapter->CommonCfg.bAPSDCapable = (apsd & 0x00000001) ? TRUE : FALSE;
++ pAdapter->CommonCfg.bAPSDAC_BE = ((apsd & 0x00000002) >> 1) ? TRUE : FALSE;
++ pAdapter->CommonCfg.bAPSDAC_BK = ((apsd & 0x00000004) >> 2) ? TRUE : FALSE;
++ pAdapter->CommonCfg.bAPSDAC_VI = ((apsd & 0x00000008) >> 3) ? TRUE : FALSE;
++ pAdapter->CommonCfg.bAPSDAC_VO = ((apsd & 0x00000010) >> 4) ? TRUE : FALSE;
++ pAdapter->CommonCfg.MaxSPLength = (UCHAR)((apsd & 0x00000060) >> 5);
++
++ DBGPRINT(RT_DEBUG_TRACE, ("Set::RT_OID_802_11_SET_APSD_SETTING (apsd=0x%lx, APSDCap=%d, [BE,BK,VI,VO]=[%d/%d/%d/%d], MaxSPLen=%d)\n", apsd, pAdapter->CommonCfg.bAPSDCapable,
++ pAdapter->CommonCfg.bAPSDAC_BE, pAdapter->CommonCfg.bAPSDAC_BK, pAdapter->CommonCfg.bAPSDAC_VI, pAdapter->CommonCfg.bAPSDAC_VO, pAdapter->CommonCfg.MaxSPLength));
++ }
++ break;
++
++ case RT_OID_802_11_SET_APSD_PSM:
++ if (wrq->u.data.length != sizeof(ULONG))
++ Status = -EINVAL;
++ else
++ {
++ // Driver needs to notify AP when PSM changes
++ Status = copy_from_user(&pAdapter->CommonCfg.bAPSDForcePowerSave, wrq->u.data.pointer, wrq->u.data.length);
++ if (pAdapter->CommonCfg.bAPSDForcePowerSave != pAdapter->StaCfg.Psm)
++ {
++ MlmeSetPsmBit(pAdapter, pAdapter->CommonCfg.bAPSDForcePowerSave);
++ RTMPSendNullFrame(pAdapter, pAdapter->CommonCfg.TxRate, TRUE);
++ }
++ DBGPRINT(RT_DEBUG_TRACE, ("Set::RT_OID_802_11_SET_APSD_PSM (bAPSDForcePowerSave:%d)\n", pAdapter->CommonCfg.bAPSDForcePowerSave));
++ }
++ break;
++#ifdef QOS_DLS_SUPPORT
++ case RT_OID_802_11_SET_DLS:
++ if (wrq->u.data.length != sizeof(ULONG))
++ Status = -EINVAL;
++ else
++ {
++ BOOLEAN oldvalue = pAdapter->CommonCfg.bDLSCapable;
++ Status = copy_from_user(&pAdapter->CommonCfg.bDLSCapable, wrq->u.data.pointer, wrq->u.data.length);
++ if (oldvalue && !pAdapter->CommonCfg.bDLSCapable)
++ {
++ int i;
++ // tear down local dls table entry
++ for (i=0; i<MAX_NUM_OF_INIT_DLS_ENTRY; i++)
++ {
++ if (pAdapter->StaCfg.DLSEntry[i].Valid && (pAdapter->StaCfg.DLSEntry[i].Status == DLS_FINISH))
++ {
++ pAdapter->StaCfg.DLSEntry[i].Status = DLS_NONE;
++ pAdapter->StaCfg.DLSEntry[i].Valid = FALSE;
++ RTMPSendDLSTearDownFrame(pAdapter, pAdapter->StaCfg.DLSEntry[i].MacAddr);
++ }
++ }
++
++ // tear down peer dls table entry
++ for (i=MAX_NUM_OF_INIT_DLS_ENTRY; i<MAX_NUM_OF_DLS_ENTRY; i++)
++ {
++ if (pAdapter->StaCfg.DLSEntry[i].Valid && (pAdapter->StaCfg.DLSEntry[i].Status == DLS_FINISH))
++ {
++ pAdapter->StaCfg.DLSEntry[i].Status = DLS_NONE;
++ pAdapter->StaCfg.DLSEntry[i].Valid = FALSE;
++ RTMPSendDLSTearDownFrame(pAdapter, pAdapter->StaCfg.DLSEntry[i].MacAddr);
++ }
++ }
++ }
++
++ DBGPRINT(RT_DEBUG_TRACE,("Set::RT_OID_802_11_SET_DLS (=%d)\n", pAdapter->CommonCfg.bDLSCapable));
++ }
++ break;
++
++ case RT_OID_802_11_SET_DLS_PARAM:
++ if (wrq->u.data.length != sizeof(RT_802_11_DLS_UI))
++ Status = -EINVAL;
++ else
++ {
++ RT_802_11_DLS Dls;
++
++ NdisZeroMemory(&Dls, sizeof(RT_802_11_DLS));
++ RTMPMoveMemory(&Dls, wrq->u.data.pointer, sizeof(RT_802_11_DLS_UI));
++ MlmeEnqueue(pAdapter,
++ MLME_CNTL_STATE_MACHINE,
++ RT_OID_802_11_SET_DLS_PARAM,
++ sizeof(RT_802_11_DLS),
++ &Dls);
++ DBGPRINT(RT_DEBUG_TRACE,("Set::RT_OID_802_11_SET_DLS_PARAM \n"));
++ }
++ break;
++#endif // QOS_DLS_SUPPORT //
++ case RT_OID_802_11_SET_WMM:
++ if (wrq->u.data.length != sizeof(BOOLEAN))
++ Status = -EINVAL;
++ else
++ {
++ Status = copy_from_user(&pAdapter->CommonCfg.bWmmCapable, wrq->u.data.pointer, wrq->u.data.length);
++ DBGPRINT(RT_DEBUG_TRACE, ("Set::RT_OID_802_11_SET_WMM (=%d) \n", pAdapter->CommonCfg.bWmmCapable));
++ }
++ break;
++
++ case OID_802_11_DISASSOCIATE:
++#ifdef RALINK_ATE
++ if (ATE_ON(pAdapter))
++ {
++ DBGPRINT(RT_DEBUG_TRACE, ("The driver is in ATE mode now\n"));
++ break;
++ }
++#endif // RALINK_ATE //
++ //
++ // Set NdisRadioStateOff to TRUE, instead of called MlmeRadioOff.
++ // Later on, NDIS_802_11_BSSID_LIST_EX->NumberOfItems should be 0
++ // when query OID_802_11_BSSID_LIST.
++ //
++ // TRUE: NumberOfItems will set to 0.
++ // FALSE: NumberOfItems no change.
++ //
++ pAdapter->CommonCfg.NdisRadioStateOff = TRUE;
++ // Set to immediately send the media disconnect event
++ pAdapter->MlmeAux.CurrReqIsFromNdis = TRUE;
++ DBGPRINT(RT_DEBUG_TRACE, ("Set::OID_802_11_DISASSOCIATE \n"));
++
++ if (INFRA_ON(pAdapter))
++ {
++ if (pAdapter->Mlme.CntlMachine.CurrState != CNTL_IDLE)
++ {
++ RT28XX_MLME_RESET_STATE_MACHINE(pAdapter);
++ DBGPRINT(RT_DEBUG_TRACE, ("!!! MLME busy, reset MLME state machine !!!\n"));
++ }
++
++ MlmeEnqueue(pAdapter,
++ MLME_CNTL_STATE_MACHINE,
++ OID_802_11_DISASSOCIATE,
++ 0,
++ NULL);
++
++ StateMachineTouched = TRUE;
++ }
++ break;
++
++#ifdef DOT11_N_SUPPORT
++ case RT_OID_802_11_SET_IMME_BA_CAP:
++ if (wrq->u.data.length != sizeof(OID_BACAP_STRUC))
++ Status = -EINVAL;
++ else
++ {
++ OID_BACAP_STRUC Orde ;
++ Status = copy_from_user(&Orde, wrq->u.data.pointer, wrq->u.data.length);
++ if (Orde.Policy > BA_NOTUSE)
++ {
++ Status = NDIS_STATUS_INVALID_DATA;
++ }
++ else if (Orde.Policy == BA_NOTUSE)
++ {
++ pAdapter->CommonCfg.BACapability.field.Policy = BA_NOTUSE;
++ pAdapter->CommonCfg.BACapability.field.MpduDensity = Orde.MpduDensity;
++ pAdapter->CommonCfg.DesiredHtPhy.MpduDensity = Orde.MpduDensity;
++ pAdapter->CommonCfg.DesiredHtPhy.AmsduEnable = Orde.AmsduEnable;
++ pAdapter->CommonCfg.DesiredHtPhy.AmsduSize= Orde.AmsduSize;
++ pAdapter->CommonCfg.DesiredHtPhy.MimoPs= Orde.MMPSmode;
++ pAdapter->CommonCfg.BACapability.field.MMPSmode = Orde.MMPSmode;
++ // UPdata to HT IE
++ pAdapter->CommonCfg.HtCapability.HtCapInfo.MimoPs = Orde.MMPSmode;
++ pAdapter->CommonCfg.HtCapability.HtCapInfo.AMsduSize = Orde.AmsduSize;
++ pAdapter->CommonCfg.HtCapability.HtCapParm.MpduDensity = Orde.MpduDensity;
++ }
++ else
++ {
++ pAdapter->CommonCfg.BACapability.field.AutoBA = Orde.AutoBA;
++ pAdapter->CommonCfg.BACapability.field.Policy = IMMED_BA; // we only support immediate BA.
++ pAdapter->CommonCfg.BACapability.field.MpduDensity = Orde.MpduDensity;
++ pAdapter->CommonCfg.DesiredHtPhy.MpduDensity = Orde.MpduDensity;
++ pAdapter->CommonCfg.DesiredHtPhy.AmsduEnable = Orde.AmsduEnable;
++ pAdapter->CommonCfg.DesiredHtPhy.AmsduSize= Orde.AmsduSize;
++ pAdapter->CommonCfg.DesiredHtPhy.MimoPs = Orde.MMPSmode;
++ pAdapter->CommonCfg.BACapability.field.MMPSmode = Orde.MMPSmode;
++
++ // UPdata to HT IE
++ pAdapter->CommonCfg.HtCapability.HtCapInfo.MimoPs = Orde.MMPSmode;
++ pAdapter->CommonCfg.HtCapability.HtCapInfo.AMsduSize = Orde.AmsduSize;
++ pAdapter->CommonCfg.HtCapability.HtCapParm.MpduDensity = Orde.MpduDensity;
++
++ if (pAdapter->CommonCfg.BACapability.field.RxBAWinLimit > MAX_RX_REORDERBUF)
++ pAdapter->CommonCfg.BACapability.field.RxBAWinLimit = MAX_RX_REORDERBUF;
++
++ }
++
++ pAdapter->CommonCfg.REGBACapability.word = pAdapter->CommonCfg.BACapability.word;
++ DBGPRINT(RT_DEBUG_TRACE, ("Set::(Orde.AutoBA = %d) (Policy=%d)(ReBAWinLimit=%d)(TxBAWinLimit=%d)(AutoMode=%d)\n",Orde.AutoBA, pAdapter->CommonCfg.BACapability.field.Policy,
++ pAdapter->CommonCfg.BACapability.field.RxBAWinLimit,pAdapter->CommonCfg.BACapability.field.TxBAWinLimit, pAdapter->CommonCfg.BACapability.field.AutoBA));
++ DBGPRINT(RT_DEBUG_TRACE, ("Set::(MimoPs = %d)(AmsduEnable = %d) (AmsduSize=%d)(MpduDensity=%d)\n",pAdapter->CommonCfg.DesiredHtPhy.MimoPs, pAdapter->CommonCfg.DesiredHtPhy.AmsduEnable,
++ pAdapter->CommonCfg.DesiredHtPhy.AmsduSize, pAdapter->CommonCfg.DesiredHtPhy.MpduDensity));
++ }
++
++ break;
++ case RT_OID_802_11_ADD_IMME_BA:
++ DBGPRINT(RT_DEBUG_TRACE, (" Set :: RT_OID_802_11_ADD_IMME_BA \n"));
++ if (wrq->u.data.length != sizeof(OID_ADD_BA_ENTRY))
++ Status = -EINVAL;
++ else
++ {
++ UCHAR index;
++ OID_ADD_BA_ENTRY BA;
++ MAC_TABLE_ENTRY *pEntry;
++
++ Status = copy_from_user(&BA, wrq->u.data.pointer, wrq->u.data.length);
++ if (BA.TID > 15)
++ {
++ Status = NDIS_STATUS_INVALID_DATA;
++ break;
++ }
++ else
++ {
++ //BATableInsertEntry
++ //As ad-hoc mode, BA pair is not limited to only BSSID. so add via OID.
++ index = BA.TID;
++ // in ad hoc mode, when adding BA pair, we should insert this entry into MACEntry too
++ pEntry = MacTableLookup(pAdapter, BA.MACAddr);
++ if (!pEntry)
++ {
++ DBGPRINT(RT_DEBUG_TRACE, ("RT_OID_802_11_ADD_IMME_BA. break on no connection.----:%x:%x\n", BA.MACAddr[4], BA.MACAddr[5]));
++ break;
++ }
++ if (BA.IsRecipient == FALSE)
++ {
++ if (pEntry->bIAmBadAtheros == TRUE)
++ pAdapter->CommonCfg.BACapability.field.RxBAWinLimit = 0x10;
++
++ BAOriSessionSetUp(pAdapter, pEntry, index, 0, 100, TRUE);
++ }
++ else
++ {
++ //BATableInsertEntry(pAdapter, pEntry->Aid, BA.MACAddr, 0, 0xffff, BA.TID, BA.nMSDU, BA.IsRecipient);
++ }
++
++ DBGPRINT(RT_DEBUG_TRACE, ("Set::RT_OID_802_11_ADD_IMME_BA. Rec = %d. Mac = %x:%x:%x:%x:%x:%x . \n",
++ BA.IsRecipient, BA.MACAddr[0], BA.MACAddr[1], BA.MACAddr[2], BA.MACAddr[2]
++ , BA.MACAddr[4], BA.MACAddr[5]));
++ }
++ }
++ break;
++
++ case RT_OID_802_11_TEAR_IMME_BA:
++ DBGPRINT(RT_DEBUG_TRACE, ("Set :: RT_OID_802_11_TEAR_IMME_BA \n"));
++ if (wrq->u.data.length != sizeof(OID_ADD_BA_ENTRY))
++ Status = -EINVAL;
++ else
++ {
++ POID_ADD_BA_ENTRY pBA;
++ MAC_TABLE_ENTRY *pEntry;
++
++ pBA = kmalloc(wrq->u.data.length, MEM_ALLOC_FLAG);
++
++ if (pBA == NULL)
++ {
++ DBGPRINT(RT_DEBUG_TRACE, ("Set :: RT_OID_802_11_TEAR_IMME_BA kmalloc() can't allocate enough memory\n"));
++ Status = NDIS_STATUS_FAILURE;
++ }
++ else
++ {
++ Status = copy_from_user(pBA, wrq->u.data.pointer, wrq->u.data.length);
++ DBGPRINT(RT_DEBUG_TRACE, ("Set :: RT_OID_802_11_TEAR_IMME_BA(TID=%d, bAllTid=%d)\n", pBA->TID, pBA->bAllTid));
++
++ if (!pBA->bAllTid && (pBA->TID > NUM_OF_TID))
++ {
++ Status = NDIS_STATUS_INVALID_DATA;
++ break;
++ }
++
++ if (pBA->IsRecipient == FALSE)
++ {
++ pEntry = MacTableLookup(pAdapter, pBA->MACAddr);
++ DBGPRINT(RT_DEBUG_TRACE, (" pBA->IsRecipient == FALSE\n"));
++ if (pEntry)
++ {
++ DBGPRINT(RT_DEBUG_TRACE, (" pBA->pEntry\n"));
++ BAOriSessionTearDown(pAdapter, pEntry->Aid, pBA->TID, FALSE, TRUE);
++ }
++ else
++ DBGPRINT(RT_DEBUG_TRACE, ("Set :: Not found pEntry \n"));
++ }
++ else
++ {
++ pEntry = MacTableLookup(pAdapter, pBA->MACAddr);
++ if (pEntry)
++ {
++ BARecSessionTearDown( pAdapter, (UCHAR)pEntry->Aid, pBA->TID, TRUE);
++ }
++ else
++ DBGPRINT(RT_DEBUG_TRACE, ("Set :: Not found pEntry \n"));
++ }
++ kfree(pBA);
++ }
++ }
++ break;
++#endif // DOT11_N_SUPPORT //
++
++ // For WPA_SUPPLICANT to set static wep key
++ case OID_802_11_ADD_WEP:
++ pWepKey = kmalloc(wrq->u.data.length, MEM_ALLOC_FLAG);
++
++ if(pWepKey == NULL)
++ {
++ Status = -ENOMEM;
++ DBGPRINT(RT_DEBUG_TRACE, ("Set::OID_802_11_ADD_WEP, Failed!!\n"));
++ break;
++ }
++ Status = copy_from_user(pWepKey, wrq->u.data.pointer, wrq->u.data.length);
++ if (Status)
++ {
++ Status = -EINVAL;
++ DBGPRINT(RT_DEBUG_TRACE, ("Set::OID_802_11_ADD_WEP, Failed (length mismatch)!!\n"));
++ }
++ else
++ {
++ KeyIdx = pWepKey->KeyIndex & 0x0fffffff;
++ // KeyIdx must be 0 ~ 3
++ if (KeyIdx > 4)
++ {
++ Status = -EINVAL;
++ DBGPRINT(RT_DEBUG_TRACE, ("Set::OID_802_11_ADD_WEP, Failed (KeyIdx must be smaller than 4)!!\n"));
++ }
++ else
++ {
++ UCHAR CipherAlg = 0;
++ PUCHAR Key;
++
++ // set key material and key length
++ NdisZeroMemory(pAdapter->SharedKey[BSS0][KeyIdx].Key, 16);
++ pAdapter->SharedKey[BSS0][KeyIdx].KeyLen = (UCHAR) pWepKey->KeyLength;
++ NdisMoveMemory(pAdapter->SharedKey[BSS0][KeyIdx].Key, &pWepKey->KeyMaterial, pWepKey->KeyLength);
++
++ switch(pWepKey->KeyLength)
++ {
++ case 5:
++ CipherAlg = CIPHER_WEP64;
++ break;
++ case 13:
++ CipherAlg = CIPHER_WEP128;
++ break;
++ default:
++ DBGPRINT(RT_DEBUG_TRACE, ("Set::OID_802_11_ADD_WEP, only support CIPHER_WEP64(len:5) & CIPHER_WEP128(len:13)!!\n"));
++ Status = -EINVAL;
++ break;
++ }
++ pAdapter->SharedKey[BSS0][KeyIdx].CipherAlg = CipherAlg;
++
++ // Default key for tx (shared key)
++ if (pWepKey->KeyIndex & 0x80000000)
++ {
++#ifdef WPA_SUPPLICANT_SUPPORT
++ // set key material and key length
++ NdisZeroMemory(pAdapter->StaCfg.DesireSharedKey[KeyIdx].Key, 16);
++ pAdapter->StaCfg.DesireSharedKey[KeyIdx].KeyLen = (UCHAR) pWepKey->KeyLength;
++ NdisMoveMemory(pAdapter->StaCfg.DesireSharedKey[KeyIdx].Key, &pWepKey->KeyMaterial, pWepKey->KeyLength);
++ pAdapter->StaCfg.DesireSharedKeyId = KeyIdx;
++ pAdapter->StaCfg.DesireSharedKey[KeyIdx].CipherAlg = CipherAlg;
++#endif // WPA_SUPPLICANT_SUPPORT //
++ pAdapter->StaCfg.DefaultKeyId = (UCHAR) KeyIdx;
++ }
++
++#ifdef WPA_SUPPLICANT_SUPPORT
++ if (pAdapter->StaCfg.PortSecured == WPA_802_1X_PORT_SECURED)
++#endif // WPA_SUPPLICANT_SUPPORT
++ {
++ Key = pAdapter->SharedKey[BSS0][KeyIdx].Key;
++
++ // Set key material and cipherAlg to Asic
++ AsicAddSharedKeyEntry(pAdapter, BSS0, KeyIdx, CipherAlg, Key, NULL, NULL);
++
++ if (pWepKey->KeyIndex & 0x80000000)
++ {
++ PMAC_TABLE_ENTRY pEntry = &pAdapter->MacTab.Content[BSSID_WCID];
++ // Assign group key info
++ RTMPAddWcidAttributeEntry(pAdapter, BSS0, KeyIdx, CipherAlg, NULL);
++ // Assign pairwise key info
++ RTMPAddWcidAttributeEntry(pAdapter, BSS0, KeyIdx, CipherAlg, pEntry);
++ }
++ }
++ DBGPRINT(RT_DEBUG_TRACE, ("Set::OID_802_11_ADD_WEP (id=0x%x, Len=%d-byte), %s\n", pWepKey->KeyIndex, pWepKey->KeyLength, (pAdapter->StaCfg.PortSecured == WPA_802_1X_PORT_SECURED) ? "Port Secured":"Port NOT Secured"));
++ }
++ }
++ kfree(pWepKey);
++ break;
++#ifdef WPA_SUPPLICANT_SUPPORT
++ case OID_SET_COUNTERMEASURES:
++ if (wrq->u.data.length != sizeof(int))
++ Status = -EINVAL;
++ else
++ {
++ int enabled = 0;
++ Status = copy_from_user(&enabled, wrq->u.data.pointer, wrq->u.data.length);
++ if (enabled == 1)
++ pAdapter->StaCfg.bBlockAssoc = TRUE;
++ else
++ // WPA MIC error should block association attempt for 60 seconds
++ pAdapter->StaCfg.bBlockAssoc = FALSE;
++ DBGPRINT(RT_DEBUG_TRACE, ("Set::OID_SET_COUNTERMEASURES bBlockAssoc=%s\n", pAdapter->StaCfg.bBlockAssoc ? "TRUE":"FALSE"));
++ }
++ break;
++ case RT_OID_WPA_SUPPLICANT_SUPPORT:
++ if (wrq->u.data.length != sizeof(UCHAR))
++ Status = -EINVAL;
++ else
++ {
++ Status = copy_from_user(&wpa_supplicant_enable, wrq->u.data.pointer, wrq->u.data.length);
++ pAdapter->StaCfg.WpaSupplicantUP = wpa_supplicant_enable;
++ DBGPRINT(RT_DEBUG_TRACE, ("Set::RT_OID_WPA_SUPPLICANT_SUPPORT (=%d)\n", pAdapter->StaCfg.WpaSupplicantUP));
++ }
++ break;
++ case OID_802_11_DEAUTHENTICATION:
++ if (wrq->u.data.length != sizeof(MLME_DEAUTH_REQ_STRUCT))
++ Status = -EINVAL;
++ else
++ {
++ MLME_DEAUTH_REQ_STRUCT *pInfo;
++ MLME_QUEUE_ELEM *MsgElem = (MLME_QUEUE_ELEM *) kmalloc(sizeof(MLME_QUEUE_ELEM), MEM_ALLOC_FLAG);
++
++ pInfo = (MLME_DEAUTH_REQ_STRUCT *) MsgElem->Msg;
++ Status = copy_from_user(pInfo, wrq->u.data.pointer, wrq->u.data.length);
++ MlmeDeauthReqAction(pAdapter, MsgElem);
++ kfree(MsgElem);
++
++ if (INFRA_ON(pAdapter))
++ {
++ LinkDown(pAdapter, FALSE);
++ pAdapter->Mlme.AssocMachine.CurrState = ASSOC_IDLE;
++ }
++ DBGPRINT(RT_DEBUG_TRACE, ("Set::OID_802_11_DEAUTHENTICATION (Reason=%d)\n", pInfo->Reason));
++ }
++ break;
++ case OID_802_11_DROP_UNENCRYPTED:
++ if (wrq->u.data.length != sizeof(int))
++ Status = -EINVAL;
++ else
++ {
++ int enabled = 0;
++ Status = copy_from_user(&enabled, wrq->u.data.pointer, wrq->u.data.length);
++ if (enabled == 1)
++ pAdapter->StaCfg.PortSecured = WPA_802_1X_PORT_NOT_SECURED;
++ else
++ pAdapter->StaCfg.PortSecured = WPA_802_1X_PORT_SECURED;
++ NdisAcquireSpinLock(&pAdapter->MacTabLock);
++ pAdapter->MacTab.Content[BSSID_WCID].PortSecured = pAdapter->StaCfg.PortSecured;
++ NdisReleaseSpinLock(&pAdapter->MacTabLock);
++ DBGPRINT(RT_DEBUG_TRACE, ("Set::OID_802_11_DROP_UNENCRYPTED (=%d)\n", enabled));
++ }
++ break;
++ case OID_802_11_SET_IEEE8021X:
++ if (wrq->u.data.length != sizeof(BOOLEAN))
++ Status = -EINVAL;
++ else
++ {
++ Status = copy_from_user(&IEEE8021xState, wrq->u.data.pointer, wrq->u.data.length);
++ pAdapter->StaCfg.IEEE8021X = IEEE8021xState;
++ DBGPRINT(RT_DEBUG_TRACE, ("Set::OID_802_11_SET_IEEE8021X (=%d)\n", IEEE8021xState));
++ }
++ break;
++ case OID_802_11_SET_IEEE8021X_REQUIRE_KEY:
++ if (wrq->u.data.length != sizeof(BOOLEAN))
++ Status = -EINVAL;
++ else
++ {
++ Status = copy_from_user(&IEEE8021x_required_keys, wrq->u.data.pointer, wrq->u.data.length);
++ pAdapter->StaCfg.IEEE8021x_required_keys = IEEE8021x_required_keys;
++ DBGPRINT(RT_DEBUG_TRACE, ("Set::OID_802_11_SET_IEEE8021X_REQUIRE_KEY (%d)\n", IEEE8021x_required_keys));
++ }
++ break;
++ case OID_802_11_PMKID:
++ pPmkId = kmalloc(wrq->u.data.length, MEM_ALLOC_FLAG);
++
++ if(pPmkId == NULL) {
++ Status = -ENOMEM;
++ break;
++ }
++ Status = copy_from_user(pPmkId, wrq->u.data.pointer, wrq->u.data.length);
++
++ // check the PMKID information
++ if (pPmkId->BSSIDInfoCount == 0)
++ NdisZeroMemory(pAdapter->StaCfg.SavedPMK, sizeof(BSSID_INFO)*PMKID_NO);
++ else
++ {
++ PBSSID_INFO pBssIdInfo;
++ UINT BssIdx;
++ UINT CachedIdx;
++
++ for (BssIdx = 0; BssIdx < pPmkId->BSSIDInfoCount; BssIdx++)
++ {
++ // point to the indexed BSSID_INFO structure
++ pBssIdInfo = (PBSSID_INFO) ((PUCHAR) pPmkId + 2 * sizeof(UINT) + BssIdx * sizeof(BSSID_INFO));
++ // Find the entry in the saved data base.
++ for (CachedIdx = 0; CachedIdx < pAdapter->StaCfg.SavedPMKNum; CachedIdx++)
++ {
++ // compare the BSSID
++ if (NdisEqualMemory(pBssIdInfo->BSSID, pAdapter->StaCfg.SavedPMK[CachedIdx].BSSID, sizeof(NDIS_802_11_MAC_ADDRESS)))
++ break;
++ }
++
++ // Found, replace it
++ if (CachedIdx < PMKID_NO)
++ {
++ DBGPRINT(RT_DEBUG_OFF, ("Update OID_802_11_PMKID, idx = %d\n", CachedIdx));
++ NdisMoveMemory(&pAdapter->StaCfg.SavedPMK[CachedIdx], pBssIdInfo, sizeof(BSSID_INFO));
++ pAdapter->StaCfg.SavedPMKNum++;
++ }
++ // Not found, replace the last one
++ else
++ {
++ // Randomly replace one
++ CachedIdx = (pBssIdInfo->BSSID[5] % PMKID_NO);
++ DBGPRINT(RT_DEBUG_OFF, ("Update OID_802_11_PMKID, idx = %d\n", CachedIdx));
++ NdisMoveMemory(&pAdapter->StaCfg.SavedPMK[CachedIdx], pBssIdInfo, sizeof(BSSID_INFO));
++ }
++ }
++ }
++ if(pPmkId)
++ kfree(pPmkId);
++ break;
++#endif // WPA_SUPPLICANT_SUPPORT //
++
++
++
++#ifdef SNMP_SUPPORT
++ case OID_802_11_SHORTRETRYLIMIT:
++ if (wrq->u.data.length != sizeof(ULONG))
++ Status = -EINVAL;
++ else
++ {
++ Status = copy_from_user(&ShortRetryLimit, wrq->u.data.pointer, wrq->u.data.length);
++ RTMP_IO_READ32(pAdapter, TX_RTY_CFG, &tx_rty_cfg.word);
++ tx_rty_cfg.field.ShortRtyLimit = ShortRetryLimit;
++ RTMP_IO_WRITE32(pAdapter, TX_RTY_CFG, tx_rty_cfg.word);
++ DBGPRINT(RT_DEBUG_TRACE, ("Set::OID_802_11_SHORTRETRYLIMIT (tx_rty_cfg.field.ShortRetryLimit=%d, ShortRetryLimit=%ld)\n", tx_rty_cfg.field.ShortRtyLimit, ShortRetryLimit));
++ }
++ break;
++
++ case OID_802_11_LONGRETRYLIMIT:
++ DBGPRINT(RT_DEBUG_TRACE, ("Set::OID_802_11_LONGRETRYLIMIT \n"));
++ if (wrq->u.data.length != sizeof(ULONG))
++ Status = -EINVAL;
++ else
++ {
++ Status = copy_from_user(&LongRetryLimit, wrq->u.data.pointer, wrq->u.data.length);
++ RTMP_IO_READ32(pAdapter, TX_RTY_CFG, &tx_rty_cfg.word);
++ tx_rty_cfg.field.LongRtyLimit = LongRetryLimit;
++ RTMP_IO_WRITE32(pAdapter, TX_RTY_CFG, tx_rty_cfg.word);
++ DBGPRINT(RT_DEBUG_TRACE, ("Set::OID_802_11_LONGRETRYLIMIT (tx_rty_cfg.field.LongRetryLimit= %d,LongRetryLimit=%ld)\n", tx_rty_cfg.field.LongRtyLimit, LongRetryLimit));
++ }
++ break;
++
++ case OID_802_11_WEPDEFAULTKEYVALUE:
++ DBGPRINT(RT_DEBUG_TRACE, ("Set::OID_802_11_WEPDEFAULTKEYVALUE\n"));
++ pKey = kmalloc(wrq->u.data.length, GFP_KERNEL);
++ Status = copy_from_user(pKey, wrq->u.data.pointer, wrq->u.data.length);
++ //pKey = &WepKey;
++
++ if ( pKey->Length != wrq->u.data.length)
++ {
++ Status = -EINVAL;
++ DBGPRINT(RT_DEBUG_TRACE, ("Set::OID_802_11_WEPDEFAULTKEYVALUE, Failed!!\n"));
++ }
++ KeyIdx = pKey->KeyIndex & 0x0fffffff;
++ DBGPRINT(RT_DEBUG_TRACE,("pKey->KeyIndex =%d, pKey->KeyLength=%d\n", pKey->KeyIndex, pKey->KeyLength));
++
++ // it is a shared key
++ if (KeyIdx > 4)
++ Status = -EINVAL;
++ else
++ {
++ pAdapter->SharedKey[BSS0][pAdapter->StaCfg.DefaultKeyId].KeyLen = (UCHAR) pKey->KeyLength;
++ NdisMoveMemory(&pAdapter->SharedKey[BSS0][pAdapter->StaCfg.DefaultKeyId].Key, &pKey->KeyMaterial, pKey->KeyLength);
++ if (pKey->KeyIndex & 0x80000000)
++ {
++ // Default key for tx (shared key)
++ pAdapter->StaCfg.DefaultKeyId = (UCHAR) KeyIdx;
++ }
++ //RestartAPIsRequired = TRUE;
++ }
++ break;
++
++
++ case OID_802_11_WEPDEFAULTKEYID:
++ DBGPRINT(RT_DEBUG_TRACE, ("Set::OID_802_11_WEPDEFAULTKEYID \n"));
++
++ if (wrq->u.data.length != sizeof(UCHAR))
++ Status = -EINVAL;
++ else
++ Status = copy_from_user(&pAdapter->StaCfg.DefaultKeyId, wrq->u.data.pointer, wrq->u.data.length);
++
++ break;
++
++
++ case OID_802_11_CURRENTCHANNEL:
++ DBGPRINT(RT_DEBUG_TRACE, ("Set::OID_802_11_CURRENTCHANNEL \n"));
++ if (wrq->u.data.length != sizeof(UCHAR))
++ Status = -EINVAL;
++ else
++ {
++ Status = copy_from_user(&ctmp, wrq->u.data.pointer, wrq->u.data.length);
++ sprintf(&ctmp,"%d", ctmp);
++ Set_Channel_Proc(pAdapter, &ctmp);
++ }
++ break;
++#endif
++
++
++
++ default:
++ DBGPRINT(RT_DEBUG_TRACE, ("Set::unknown IOCTL's subcmd = 0x%08x\n", cmd));
++ Status = -EOPNOTSUPP;
++ break;
++ }
++
++
++ return Status;
++}
++
++INT RTMPQueryInformation(
++ IN PRTMP_ADAPTER pAdapter,
++ IN OUT struct ifreq *rq,
++ IN INT cmd)
++{
++ struct iwreq *wrq = (struct iwreq *) rq;
++ NDIS_802_11_BSSID_LIST_EX *pBssidList = NULL;
++ PNDIS_WLAN_BSSID_EX pBss;
++ NDIS_802_11_SSID Ssid;
++ NDIS_802_11_CONFIGURATION *pConfiguration = NULL;
++ RT_802_11_LINK_STATUS *pLinkStatus = NULL;
++ RT_802_11_STA_CONFIG *pStaConfig = NULL;
++ NDIS_802_11_STATISTICS *pStatistics = NULL;
++ NDIS_802_11_RTS_THRESHOLD RtsThresh;
++ NDIS_802_11_FRAGMENTATION_THRESHOLD FragThresh;
++ NDIS_802_11_POWER_MODE PowerMode;
++ NDIS_802_11_NETWORK_INFRASTRUCTURE BssType;
++ RT_802_11_PREAMBLE PreamType;
++ NDIS_802_11_AUTHENTICATION_MODE AuthMode;
++ NDIS_802_11_WEP_STATUS WepStatus;
++ NDIS_MEDIA_STATE MediaState;
++ ULONG BssBufSize, ulInfo=0, NetworkTypeList[4], apsd = 0;
++ USHORT BssLen = 0;
++ PUCHAR pBuf = NULL, pPtr;
++ INT Status = NDIS_STATUS_SUCCESS;
++ UINT we_version_compiled;
++ UCHAR i, Padding = 0;
++ BOOLEAN RadioState;
++ UCHAR driverVersion[8];
++ OID_SET_HT_PHYMODE *pHTPhyMode = NULL;
++
++
++#ifdef SNMP_SUPPORT
++ //for snmp, kathy
++ DefaultKeyIdxValue *pKeyIdxValue;
++ INT valueLen;
++ TX_RTY_CFG_STRUC tx_rty_cfg;
++ ULONG ShortRetryLimit, LongRetryLimit;
++ UCHAR tmp[64];
++#endif //SNMP
++
++ switch(cmd)
++ {
++ case RT_OID_DEVICE_NAME:
++ wrq->u.data.length = sizeof(STA_NIC_DEVICE_NAME);
++ Status = copy_to_user(wrq->u.data.pointer, STA_NIC_DEVICE_NAME, wrq->u.data.length);
++ break;
++ case RT_OID_VERSION_INFO:
++ DBGPRINT(RT_DEBUG_TRACE, ("Query::RT_OID_VERSION_INFO \n"));
++ wrq->u.data.length = 8*sizeof(UCHAR);
++ sprintf(&driverVersion[0], "%s", STA_DRIVER_VERSION);
++ driverVersion[7] = '\0';
++ if (copy_to_user(wrq->u.data.pointer, &driverVersion, wrq->u.data.length))
++ {
++ Status = -EFAULT;
++ }
++ break;
++#ifdef RALINK_ATE
++ case RT_QUERY_ATE_TXDONE_COUNT:
++ DBGPRINT(RT_DEBUG_TRACE, ("Query::RT_QUERY_ATE_TXDONE_COUNT \n"));
++ wrq->u.data.length = sizeof(UINT32);
++ if (copy_to_user(wrq->u.data.pointer, &pAdapter->ate.TxDoneCount, wrq->u.data.length))
++ {
++ Status = -EFAULT;
++ }
++ break;
++#endif // RALINK_ATE //
++ case OID_802_11_BSSID_LIST:
++ if (RTMP_TEST_FLAG(pAdapter, fRTMP_ADAPTER_BSS_SCAN_IN_PROGRESS))
++ {
++ /*
++ * Still scanning, indicate the caller should try again.
++ */
++ DBGPRINT(RT_DEBUG_TRACE, ("Query::OID_802_11_BSSID_LIST (Still scanning)\n"));
++ return -EAGAIN;
++ }
++ DBGPRINT(RT_DEBUG_TRACE, ("Query::OID_802_11_BSSID_LIST (%d BSS returned)\n",pAdapter->ScanTab.BssNr));
++ pAdapter->StaCfg.bScanReqIsFromWebUI = FALSE;
++ // Claculate total buffer size required
++ BssBufSize = sizeof(ULONG);
++
++ for (i = 0; i < pAdapter->ScanTab.BssNr; i++)
++ {
++ // Align pointer to 4 bytes boundary.
++ //Padding = 4 - (pAdapter->ScanTab.BssEntry[i].VarIELen & 0x0003);
++ //if (Padding == 4)
++ // Padding = 0;
++ BssBufSize += (sizeof(NDIS_WLAN_BSSID_EX) - 1 + sizeof(NDIS_802_11_FIXED_IEs) + pAdapter->ScanTab.BssEntry[i].VarIELen + Padding);
++ }
++
++ // For safety issue, we add 256 bytes just in case
++ BssBufSize += 256;
++ // Allocate the same size as passed from higher layer
++ pBuf = kmalloc(BssBufSize, MEM_ALLOC_FLAG);
++ if(pBuf == NULL)
++ {
++ Status = -ENOMEM;
++ break;
++ }
++ // Init 802_11_BSSID_LIST_EX structure
++ NdisZeroMemory(pBuf, BssBufSize);
++ pBssidList = (PNDIS_802_11_BSSID_LIST_EX) pBuf;
++ pBssidList->NumberOfItems = pAdapter->ScanTab.BssNr;
++
++ // Calculate total buffer length
++ BssLen = 4; // Consist of NumberOfItems
++ // Point to start of NDIS_WLAN_BSSID_EX
++ // pPtr = pBuf + sizeof(ULONG);
++ pPtr = (PUCHAR) &pBssidList->Bssid[0];
++ for (i = 0; i < pAdapter->ScanTab.BssNr; i++)
++ {
++ pBss = (PNDIS_WLAN_BSSID_EX) pPtr;
++ NdisMoveMemory(&pBss->MacAddress, &pAdapter->ScanTab.BssEntry[i].Bssid, MAC_ADDR_LEN);
++ if ((pAdapter->ScanTab.BssEntry[i].Hidden == 1) && (pAdapter->StaCfg.bShowHiddenSSID == FALSE))
++ {
++ //
++ // We must return this SSID during 4way handshaking, otherwise Aegis will failed to parse WPA infomation
++ // and then failed to send EAPOl farame.
++ //
++ if ((pAdapter->StaCfg.AuthMode >= Ndis802_11AuthModeWPA) && (pAdapter->StaCfg.PortSecured != WPA_802_1X_PORT_SECURED))
++ {
++ pBss->Ssid.SsidLength = pAdapter->ScanTab.BssEntry[i].SsidLen;
++ NdisMoveMemory(pBss->Ssid.Ssid, pAdapter->ScanTab.BssEntry[i].Ssid, pAdapter->ScanTab.BssEntry[i].SsidLen);
++ }
++ else
++ pBss->Ssid.SsidLength = 0;
++ }
++ else
++ {
++ pBss->Ssid.SsidLength = pAdapter->ScanTab.BssEntry[i].SsidLen;
++ NdisMoveMemory(pBss->Ssid.Ssid, pAdapter->ScanTab.BssEntry[i].Ssid, pAdapter->ScanTab.BssEntry[i].SsidLen);
++ }
++ pBss->Privacy = pAdapter->ScanTab.BssEntry[i].Privacy;
++ pBss->Rssi = pAdapter->ScanTab.BssEntry[i].Rssi - pAdapter->BbpRssiToDbmDelta;
++ pBss->NetworkTypeInUse = NetworkTypeInUseSanity(&pAdapter->ScanTab.BssEntry[i]);
++ pBss->Configuration.Length = sizeof(NDIS_802_11_CONFIGURATION);
++ pBss->Configuration.BeaconPeriod = pAdapter->ScanTab.BssEntry[i].BeaconPeriod;
++ pBss->Configuration.ATIMWindow = pAdapter->ScanTab.BssEntry[i].AtimWin;
++
++ MAP_CHANNEL_ID_TO_KHZ(pAdapter->ScanTab.BssEntry[i].Channel, pBss->Configuration.DSConfig);
++
++ if (pAdapter->ScanTab.BssEntry[i].BssType == BSS_INFRA)
++ pBss->InfrastructureMode = Ndis802_11Infrastructure;
++ else
++ pBss->InfrastructureMode = Ndis802_11IBSS;
++
++ NdisMoveMemory(pBss->SupportedRates, pAdapter->ScanTab.BssEntry[i].SupRate, pAdapter->ScanTab.BssEntry[i].SupRateLen);
++ NdisMoveMemory(pBss->SupportedRates + pAdapter->ScanTab.BssEntry[i].SupRateLen,
++ pAdapter->ScanTab.BssEntry[i].ExtRate,
++ pAdapter->ScanTab.BssEntry[i].ExtRateLen);
++
++ if (pAdapter->ScanTab.BssEntry[i].VarIELen == 0)
++ {
++ pBss->IELength = sizeof(NDIS_802_11_FIXED_IEs);
++ NdisMoveMemory(pBss->IEs, &pAdapter->ScanTab.BssEntry[i].FixIEs, sizeof(NDIS_802_11_FIXED_IEs));
++ pPtr = pPtr + sizeof(NDIS_WLAN_BSSID_EX) - 1 + sizeof(NDIS_802_11_FIXED_IEs);
++ }
++ else
++ {
++ pBss->IELength = (ULONG)(sizeof(NDIS_802_11_FIXED_IEs) + pAdapter->ScanTab.BssEntry[i].VarIELen);
++ pPtr = pPtr + sizeof(NDIS_WLAN_BSSID_EX) - 1 + sizeof(NDIS_802_11_FIXED_IEs);
++ NdisMoveMemory(pBss->IEs, &pAdapter->ScanTab.BssEntry[i].FixIEs, sizeof(NDIS_802_11_FIXED_IEs));
++ NdisMoveMemory(pBss->IEs + sizeof(NDIS_802_11_FIXED_IEs), pAdapter->ScanTab.BssEntry[i].VarIEs, pAdapter->ScanTab.BssEntry[i].VarIELen);
++ pPtr += pAdapter->ScanTab.BssEntry[i].VarIELen;
++ }
++ pBss->Length = (ULONG)(sizeof(NDIS_WLAN_BSSID_EX) - 1 + sizeof(NDIS_802_11_FIXED_IEs) + pAdapter->ScanTab.BssEntry[i].VarIELen + Padding);
++
++#if WIRELESS_EXT < 17
++ if ((BssLen + pBss->Length) < wrq->u.data.length)
++ BssLen += pBss->Length;
++ else
++ {
++ pBssidList->NumberOfItems = i;
++ break;
++ }
++#else
++ BssLen += pBss->Length;
++#endif
++ }
++
++#if WIRELESS_EXT < 17
++ wrq->u.data.length = BssLen;
++#else
++ if (BssLen > wrq->u.data.length)
++ {
++ kfree(pBssidList);
++ return -E2BIG;
++ }
++ else
++ wrq->u.data.length = BssLen;
++#endif
++ Status = copy_to_user(wrq->u.data.pointer, pBssidList, BssLen);
++ kfree(pBssidList);
++ break;
++ case OID_802_3_CURRENT_ADDRESS:
++ wrq->u.data.length = MAC_ADDR_LEN;
++ Status = copy_to_user(wrq->u.data.pointer, &pAdapter->CurrentAddress, wrq->u.data.length);
++ break;
++ case OID_GEN_MEDIA_CONNECT_STATUS:
++ if (pAdapter->IndicateMediaState == NdisMediaStateConnected)
++ MediaState = NdisMediaStateConnected;
++ else
++ MediaState = NdisMediaStateDisconnected;
++
++ wrq->u.data.length = sizeof(NDIS_MEDIA_STATE);
++ Status = copy_to_user(wrq->u.data.pointer, &MediaState, wrq->u.data.length);
++ break;
++ case OID_802_11_BSSID:
++#ifdef RALINK_ATE
++ if (ATE_ON(pAdapter))
++ {
++ DBGPRINT(RT_DEBUG_TRACE, ("The driver is in ATE mode now\n"));
++ Status = NDIS_STATUS_RESOURCES;
++ break;
++ }
++#endif // RALINK_ATE //
++ if (INFRA_ON(pAdapter) || ADHOC_ON(pAdapter))
++ {
++ Status = copy_to_user(wrq->u.data.pointer, &pAdapter->CommonCfg.Bssid, sizeof(NDIS_802_11_MAC_ADDRESS));
++
++ }
++ else
++ {
++ DBGPRINT(RT_DEBUG_TRACE, ("Query::OID_802_11_BSSID(=EMPTY)\n"));
++ Status = -ENOTCONN;
++ }
++ break;
++ case OID_802_11_SSID:
++ NdisZeroMemory(&Ssid, sizeof(NDIS_802_11_SSID));
++ NdisZeroMemory(Ssid.Ssid, MAX_LEN_OF_SSID);
++ Ssid.SsidLength = pAdapter->CommonCfg.SsidLen;
++ memcpy(Ssid.Ssid, pAdapter->CommonCfg.Ssid, Ssid.SsidLength);
++ wrq->u.data.length = sizeof(NDIS_802_11_SSID);
++ Status = copy_to_user(wrq->u.data.pointer, &Ssid, wrq->u.data.length);
++ DBGPRINT(RT_DEBUG_TRACE, ("Query::OID_802_11_SSID (Len=%d, ssid=%s)\n", Ssid.SsidLength,Ssid.Ssid));
++ break;
++ case RT_OID_802_11_QUERY_LINK_STATUS:
++ pLinkStatus = (RT_802_11_LINK_STATUS *) kmalloc(sizeof(RT_802_11_LINK_STATUS), MEM_ALLOC_FLAG);
++ if (pLinkStatus)
++ {
++ pLinkStatus->CurrTxRate = RateIdTo500Kbps[pAdapter->CommonCfg.TxRate]; // unit : 500 kbps
++ pLinkStatus->ChannelQuality = pAdapter->Mlme.ChannelQuality;
++ pLinkStatus->RxByteCount = pAdapter->RalinkCounters.ReceivedByteCount;
++ pLinkStatus->TxByteCount = pAdapter->RalinkCounters.TransmittedByteCount;
++ pLinkStatus->CentralChannel = pAdapter->CommonCfg.CentralChannel;
++ wrq->u.data.length = sizeof(RT_802_11_LINK_STATUS);
++ Status = copy_to_user(wrq->u.data.pointer, pLinkStatus, wrq->u.data.length);
++ kfree(pLinkStatus);
++ DBGPRINT(RT_DEBUG_TRACE, ("Query::RT_OID_802_11_QUERY_LINK_STATUS\n"));
++ }
++ else
++ {
++ DBGPRINT(RT_DEBUG_TRACE, ("Query::RT_OID_802_11_QUERY_LINK_STATUS(kmalloc failed)\n"));
++ Status = -EFAULT;
++ }
++ break;
++ case OID_802_11_CONFIGURATION:
++ pConfiguration = (NDIS_802_11_CONFIGURATION *) kmalloc(sizeof(NDIS_802_11_CONFIGURATION), MEM_ALLOC_FLAG);
++ if (pConfiguration)
++ {
++ pConfiguration->Length = sizeof(NDIS_802_11_CONFIGURATION);
++ pConfiguration->BeaconPeriod = pAdapter->CommonCfg.BeaconPeriod;
++ pConfiguration->ATIMWindow = pAdapter->StaActive.AtimWin;
++ MAP_CHANNEL_ID_TO_KHZ(pAdapter->CommonCfg.Channel, pConfiguration->DSConfig);
++ wrq->u.data.length = sizeof(NDIS_802_11_CONFIGURATION);
++ Status = copy_to_user(wrq->u.data.pointer, pConfiguration, wrq->u.data.length);
++ DBGPRINT(RT_DEBUG_TRACE, ("Query::OID_802_11_CONFIGURATION(BeaconPeriod=%ld,AtimW=%ld,Channel=%d) \n",
++ pConfiguration->BeaconPeriod, pConfiguration->ATIMWindow, pAdapter->CommonCfg.Channel));
++ kfree(pConfiguration);
++ }
++ else
++ {
++ DBGPRINT(RT_DEBUG_TRACE, ("Query::OID_802_11_CONFIGURATION(kmalloc failed)\n"));
++ Status = -EFAULT;
++ }
++ break;
++ case RT_OID_802_11_SNR_0:
++ if ((pAdapter->StaCfg.LastSNR0 > 0))
++ {
++ ulInfo = ((0xeb - pAdapter->StaCfg.LastSNR0) * 3) / 16 ;
++ wrq->u.data.length = sizeof(ulInfo);
++ Status = copy_to_user(wrq->u.data.pointer, &ulInfo, wrq->u.data.length);
++ DBGPRINT(RT_DEBUG_TRACE, ("Query::RT_OID_802_11_SNR_0(0x=%lx)\n", ulInfo));
++ }
++ else
++ Status = -EFAULT;
++ break;
++ case RT_OID_802_11_SNR_1:
++ if ((pAdapter->Antenna.field.RxPath > 1) &&
++ (pAdapter->StaCfg.LastSNR1 > 0))
++ {
++ ulInfo = ((0xeb - pAdapter->StaCfg.LastSNR1) * 3) / 16 ;
++ wrq->u.data.length = sizeof(ulInfo);
++ Status = copy_to_user(wrq->u.data.pointer, &ulInfo, wrq->u.data.length);
++ DBGPRINT(RT_DEBUG_TRACE,("Query::RT_OID_802_11_SNR_1(0x=%lx)\n",ulInfo));
++ }
++ else
++ Status = -EFAULT;
++ DBGPRINT(RT_DEBUG_TRACE,("Query::RT_OID_802_11_SNR_1(pAdapter->StaCfg.LastSNR1=%d)\n",pAdapter->StaCfg.LastSNR1));
++ break;
++ case OID_802_11_RSSI_TRIGGER:
++ ulInfo = pAdapter->StaCfg.RssiSample.LastRssi0 - pAdapter->BbpRssiToDbmDelta;
++ wrq->u.data.length = sizeof(ulInfo);
++ Status = copy_to_user(wrq->u.data.pointer, &ulInfo, wrq->u.data.length);
++ DBGPRINT(RT_DEBUG_TRACE, ("Query::OID_802_11_RSSI_TRIGGER(=%ld)\n", ulInfo));
++ break;
++ case OID_802_11_RSSI:
++ case RT_OID_802_11_RSSI:
++ ulInfo = pAdapter->StaCfg.RssiSample.LastRssi0;
++ wrq->u.data.length = sizeof(ulInfo);
++ Status = copy_to_user(wrq->u.data.pointer, &ulInfo, wrq->u.data.length);
++ break;
++ case RT_OID_802_11_RSSI_1:
++ ulInfo = pAdapter->StaCfg.RssiSample.LastRssi1;
++ wrq->u.data.length = sizeof(ulInfo);
++ Status = copy_to_user(wrq->u.data.pointer, &ulInfo, wrq->u.data.length);
++ break;
++ case RT_OID_802_11_RSSI_2:
++ ulInfo = pAdapter->StaCfg.RssiSample.LastRssi2;
++ wrq->u.data.length = sizeof(ulInfo);
++ Status = copy_to_user(wrq->u.data.pointer, &ulInfo, wrq->u.data.length);
++ break;
++ case OID_802_11_STATISTICS:
++ pStatistics = (NDIS_802_11_STATISTICS *) kmalloc(sizeof(NDIS_802_11_STATISTICS), MEM_ALLOC_FLAG);
++ if (pStatistics)
++ {
++ DBGPRINT(RT_DEBUG_TRACE, ("Query::OID_802_11_STATISTICS \n"));
++ // add the most up-to-date h/w raw counters into software counters
++ NICUpdateRawCounters(pAdapter);
++
++ // Sanity check for calculation of sucessful count
++ if (pAdapter->WlanCounters.TransmittedFragmentCount.QuadPart < pAdapter->WlanCounters.RetryCount.QuadPart)
++ pAdapter->WlanCounters.TransmittedFragmentCount.QuadPart = pAdapter->WlanCounters.RetryCount.QuadPart;
++
++ pStatistics->TransmittedFragmentCount.QuadPart = pAdapter->WlanCounters.TransmittedFragmentCount.QuadPart;
++ pStatistics->MulticastTransmittedFrameCount.QuadPart = pAdapter->WlanCounters.MulticastTransmittedFrameCount.QuadPart;
++ pStatistics->FailedCount.QuadPart = pAdapter->WlanCounters.FailedCount.QuadPart;
++ pStatistics->RetryCount.QuadPart = pAdapter->WlanCounters.RetryCount.QuadPart;
++ pStatistics->MultipleRetryCount.QuadPart = pAdapter->WlanCounters.MultipleRetryCount.QuadPart;
++ pStatistics->RTSSuccessCount.QuadPart = pAdapter->WlanCounters.RTSSuccessCount.QuadPart;
++ pStatistics->RTSFailureCount.QuadPart = pAdapter->WlanCounters.RTSFailureCount.QuadPart;
++ pStatistics->ACKFailureCount.QuadPart = pAdapter->WlanCounters.ACKFailureCount.QuadPart;
++ pStatistics->FrameDuplicateCount.QuadPart = pAdapter->WlanCounters.FrameDuplicateCount.QuadPart;
++ pStatistics->ReceivedFragmentCount.QuadPart = pAdapter->WlanCounters.ReceivedFragmentCount.QuadPart;
++ pStatistics->MulticastReceivedFrameCount.QuadPart = pAdapter->WlanCounters.MulticastReceivedFrameCount.QuadPart;
++#ifdef DBG
++ pStatistics->FCSErrorCount = pAdapter->RalinkCounters.RealFcsErrCount;
++#else
++ pStatistics->FCSErrorCount.QuadPart = pAdapter->WlanCounters.FCSErrorCount.QuadPart;
++ pStatistics->FrameDuplicateCount.u.LowPart = pAdapter->WlanCounters.FrameDuplicateCount.u.LowPart / 100;
++#endif
++ wrq->u.data.length = sizeof(NDIS_802_11_STATISTICS);
++ Status = copy_to_user(wrq->u.data.pointer, pStatistics, wrq->u.data.length);
++ kfree(pStatistics);
++ }
++ else
++ {
++ DBGPRINT(RT_DEBUG_TRACE, ("Query::OID_802_11_STATISTICS(kmalloc failed)\n"));
++ Status = -EFAULT;
++ }
++ break;
++ case OID_GEN_RCV_OK:
++ ulInfo = pAdapter->Counters8023.GoodReceives;
++ wrq->u.data.length = sizeof(ulInfo);
++ Status = copy_to_user(wrq->u.data.pointer, &ulInfo, wrq->u.data.length);
++ break;
++ case OID_GEN_RCV_NO_BUFFER:
++ ulInfo = pAdapter->Counters8023.RxNoBuffer;
++ wrq->u.data.length = sizeof(ulInfo);
++ Status = copy_to_user(wrq->u.data.pointer, &ulInfo, wrq->u.data.length);
++ break;
++ case RT_OID_802_11_PHY_MODE:
++ ulInfo = (ULONG)pAdapter->CommonCfg.PhyMode;
++ wrq->u.data.length = sizeof(ulInfo);
++ Status = copy_to_user(wrq->u.data.pointer, &ulInfo, wrq->u.data.length);
++ DBGPRINT(RT_DEBUG_TRACE, ("Query::RT_OID_802_11_PHY_MODE (=%ld)\n", ulInfo));
++ break;
++ case RT_OID_802_11_STA_CONFIG:
++ pStaConfig = (RT_802_11_STA_CONFIG *) kmalloc(sizeof(RT_802_11_STA_CONFIG), MEM_ALLOC_FLAG);
++ if (pStaConfig)
++ {
++ DBGPRINT(RT_DEBUG_TRACE, ("Query::RT_OID_802_11_STA_CONFIG\n"));
++ pStaConfig->EnableTxBurst = pAdapter->CommonCfg.bEnableTxBurst;
++ pStaConfig->EnableTurboRate = 0;
++ pStaConfig->UseBGProtection = pAdapter->CommonCfg.UseBGProtection;
++ pStaConfig->UseShortSlotTime = pAdapter->CommonCfg.bUseShortSlotTime;
++ //pStaConfig->AdhocMode = pAdapter->StaCfg.AdhocMode;
++ pStaConfig->HwRadioStatus = (pAdapter->StaCfg.bHwRadio == TRUE) ? 1 : 0;
++ pStaConfig->Rsv1 = 0;
++ pStaConfig->SystemErrorBitmap = pAdapter->SystemErrorBitmap;
++ wrq->u.data.length = sizeof(RT_802_11_STA_CONFIG);
++ Status = copy_to_user(wrq->u.data.pointer, pStaConfig, wrq->u.data.length);
++ kfree(pStaConfig);
++ }
++ else
++ {
++ DBGPRINT(RT_DEBUG_TRACE, ("Query::RT_OID_802_11_STA_CONFIG(kmalloc failed)\n"));
++ Status = -EFAULT;
++ }
++ break;
++ case OID_802_11_RTS_THRESHOLD:
++ RtsThresh = pAdapter->CommonCfg.RtsThreshold;
++ wrq->u.data.length = sizeof(RtsThresh);
++ Status = copy_to_user(wrq->u.data.pointer, &RtsThresh, wrq->u.data.length);
++ DBGPRINT(RT_DEBUG_TRACE, ("Query::OID_802_11_RTS_THRESHOLD(=%ld)\n", RtsThresh));
++ break;
++ case OID_802_11_FRAGMENTATION_THRESHOLD:
++ FragThresh = pAdapter->CommonCfg.FragmentThreshold;
++ if (pAdapter->CommonCfg.bUseZeroToDisableFragment == TRUE)
++ FragThresh = 0;
++ wrq->u.data.length = sizeof(FragThresh);
++ Status = copy_to_user(wrq->u.data.pointer, &FragThresh, wrq->u.data.length);
++ DBGPRINT(RT_DEBUG_TRACE, ("Query::OID_802_11_FRAGMENTATION_THRESHOLD(=%ld)\n", FragThresh));
++ break;
++ case OID_802_11_POWER_MODE:
++ PowerMode = pAdapter->StaCfg.WindowsPowerMode;
++ wrq->u.data.length = sizeof(PowerMode);
++ Status = copy_to_user(wrq->u.data.pointer, &PowerMode, wrq->u.data.length);
++ DBGPRINT(RT_DEBUG_TRACE, ("Query::OID_802_11_POWER_MODE(=%d)\n", PowerMode));
++ break;
++ case RT_OID_802_11_RADIO:
++ RadioState = (BOOLEAN) pAdapter->StaCfg.bSwRadio;
++ wrq->u.data.length = sizeof(RadioState);
++ Status = copy_to_user(wrq->u.data.pointer, &RadioState, wrq->u.data.length);
++ DBGPRINT(RT_DEBUG_TRACE, ("Query::RT_OID_802_11_QUERY_RADIO (=%d)\n", RadioState));
++ break;
++ case OID_802_11_INFRASTRUCTURE_MODE:
++ if (pAdapter->StaCfg.BssType == BSS_ADHOC)
++ BssType = Ndis802_11IBSS;
++ else if (pAdapter->StaCfg.BssType == BSS_INFRA)
++ BssType = Ndis802_11Infrastructure;
++ else if (pAdapter->StaCfg.BssType == BSS_MONITOR)
++ BssType = Ndis802_11Monitor;
++ else
++ BssType = Ndis802_11AutoUnknown;
++
++ wrq->u.data.length = sizeof(BssType);
++ Status = copy_to_user(wrq->u.data.pointer, &BssType, wrq->u.data.length);
++ DBGPRINT(RT_DEBUG_TRACE, ("Query::OID_802_11_INFRASTRUCTURE_MODE(=%d)\n", BssType));
++ break;
++ case RT_OID_802_11_PREAMBLE:
++ PreamType = pAdapter->CommonCfg.TxPreamble;
++ wrq->u.data.length = sizeof(PreamType);
++ Status = copy_to_user(wrq->u.data.pointer, &PreamType, wrq->u.data.length);
++ DBGPRINT(RT_DEBUG_TRACE, ("Query::RT_OID_802_11_PREAMBLE(=%d)\n", PreamType));
++ break;
++ case OID_802_11_AUTHENTICATION_MODE:
++ AuthMode = pAdapter->StaCfg.AuthMode;
++ wrq->u.data.length = sizeof(AuthMode);
++ Status = copy_to_user(wrq->u.data.pointer, &AuthMode, wrq->u.data.length);
++ DBGPRINT(RT_DEBUG_TRACE, ("Query::OID_802_11_AUTHENTICATION_MODE(=%d)\n", AuthMode));
++ break;
++ case OID_802_11_WEP_STATUS:
++ WepStatus = pAdapter->StaCfg.WepStatus;
++ wrq->u.data.length = sizeof(WepStatus);
++ Status = copy_to_user(wrq->u.data.pointer, &WepStatus, wrq->u.data.length);
++ DBGPRINT(RT_DEBUG_TRACE, ("Query::OID_802_11_WEP_STATUS(=%d)\n", WepStatus));
++ break;
++ case OID_802_11_TX_POWER_LEVEL:
++ wrq->u.data.length = sizeof(ULONG);
++ Status = copy_to_user(wrq->u.data.pointer, &pAdapter->CommonCfg.TxPower, wrq->u.data.length);
++ DBGPRINT(RT_DEBUG_TRACE, ("Query::OID_802_11_TX_POWER_LEVEL %x\n",pAdapter->CommonCfg.TxPower));
++ break;
++ case RT_OID_802_11_TX_POWER_LEVEL_1:
++ wrq->u.data.length = sizeof(ULONG);
++ Status = copy_to_user(wrq->u.data.pointer, &pAdapter->CommonCfg.TxPowerPercentage, wrq->u.data.length);
++ DBGPRINT(RT_DEBUG_TRACE, ("Query::RT_OID_802_11_TX_POWER_LEVEL_1 (=%ld)\n", pAdapter->CommonCfg.TxPowerPercentage));
++ break;
++ case OID_802_11_NETWORK_TYPES_SUPPORTED:
++ if ((pAdapter->RfIcType == RFIC_2850) || (pAdapter->RfIcType == RFIC_2750))
++ {
++ NetworkTypeList[0] = 3; // NumberOfItems = 3
++ NetworkTypeList[1] = Ndis802_11DS; // NetworkType[1] = 11b
++ NetworkTypeList[2] = Ndis802_11OFDM24; // NetworkType[2] = 11g
++ NetworkTypeList[3] = Ndis802_11OFDM5; // NetworkType[3] = 11a
++ wrq->u.data.length = 16;
++ Status = copy_to_user(wrq->u.data.pointer, &NetworkTypeList[0], wrq->u.data.length);
++ }
++ else
++ {
++ NetworkTypeList[0] = 2; // NumberOfItems = 2
++ NetworkTypeList[1] = Ndis802_11DS; // NetworkType[1] = 11b
++ NetworkTypeList[2] = Ndis802_11OFDM24; // NetworkType[2] = 11g
++ wrq->u.data.length = 12;
++ Status = copy_to_user(wrq->u.data.pointer, &NetworkTypeList[0], wrq->u.data.length);
++ }
++ DBGPRINT(RT_DEBUG_TRACE, ("Query::OID_802_11_NETWORK_TYPES_SUPPORTED\n"));
++ break;
++ case OID_802_11_NETWORK_TYPE_IN_USE:
++ wrq->u.data.length = sizeof(ULONG);
++ if (pAdapter->CommonCfg.PhyMode == PHY_11A)
++ ulInfo = Ndis802_11OFDM5;
++ else if ((pAdapter->CommonCfg.PhyMode == PHY_11BG_MIXED) || (pAdapter->CommonCfg.PhyMode == PHY_11G))
++ ulInfo = Ndis802_11OFDM24;
++ else
++ ulInfo = Ndis802_11DS;
++ Status = copy_to_user(wrq->u.data.pointer, &ulInfo, wrq->u.data.length);
++ break;
++ case RT_OID_802_11_QUERY_LAST_RX_RATE:
++ ulInfo = (ULONG)pAdapter->LastRxRate;
++ wrq->u.data.length = sizeof(ulInfo);
++ Status = copy_to_user(wrq->u.data.pointer, &ulInfo, wrq->u.data.length);
++ DBGPRINT(RT_DEBUG_TRACE, ("Query::RT_OID_802_11_QUERY_LAST_RX_RATE (=%ld)\n", ulInfo));
++ break;
++ case RT_OID_802_11_QUERY_LAST_TX_RATE:
++ //ulInfo = (ULONG)pAdapter->LastTxRate;
++ ulInfo = (ULONG)pAdapter->MacTab.Content[BSSID_WCID].HTPhyMode.word;
++ wrq->u.data.length = sizeof(ulInfo);
++ Status = copy_to_user(wrq->u.data.pointer, &ulInfo, wrq->u.data.length);
++ DBGPRINT(RT_DEBUG_TRACE, ("Query::RT_OID_802_11_QUERY_LAST_TX_RATE (=%lx)\n", ulInfo));
++ break;
++ case RT_OID_802_11_QUERY_EEPROM_VERSION:
++ wrq->u.data.length = sizeof(ULONG);
++ Status = copy_to_user(wrq->u.data.pointer, &pAdapter->EepromVersion, wrq->u.data.length);
++ break;
++ case RT_OID_802_11_QUERY_FIRMWARE_VERSION:
++ wrq->u.data.length = sizeof(ULONG);
++ Status = copy_to_user(wrq->u.data.pointer, &pAdapter->FirmwareVersion, wrq->u.data.length);
++ break;
++ case RT_OID_802_11_QUERY_NOISE_LEVEL:
++ wrq->u.data.length = sizeof(UCHAR);
++ Status = copy_to_user(wrq->u.data.pointer, &pAdapter->BbpWriteLatch[66], wrq->u.data.length);
++ DBGPRINT(RT_DEBUG_TRACE, ("Query::RT_OID_802_11_QUERY_NOISE_LEVEL (=%d)\n", pAdapter->BbpWriteLatch[66]));
++ break;
++ case RT_OID_802_11_EXTRA_INFO:
++ wrq->u.data.length = sizeof(ULONG);
++ Status = copy_to_user(wrq->u.data.pointer, &pAdapter->ExtraInfo, wrq->u.data.length);
++ DBGPRINT(RT_DEBUG_TRACE, ("Query::RT_OID_802_11_EXTRA_INFO (=%ld)\n", pAdapter->ExtraInfo));
++ break;
++ case RT_OID_WE_VERSION_COMPILED:
++ wrq->u.data.length = sizeof(UINT);
++ we_version_compiled = WIRELESS_EXT;
++ Status = copy_to_user(wrq->u.data.pointer, &we_version_compiled, wrq->u.data.length);
++ break;
++ case RT_OID_802_11_QUERY_APSD_SETTING:
++ apsd = (pAdapter->CommonCfg.bAPSDCapable | (pAdapter->CommonCfg.bAPSDAC_BE << 1) | (pAdapter->CommonCfg.bAPSDAC_BK << 2)
++ | (pAdapter->CommonCfg.bAPSDAC_VI << 3) | (pAdapter->CommonCfg.bAPSDAC_VO << 4) | (pAdapter->CommonCfg.MaxSPLength << 5));
++
++ wrq->u.data.length = sizeof(ULONG);
++ Status = copy_to_user(wrq->u.data.pointer, &apsd, wrq->u.data.length);
++ DBGPRINT(RT_DEBUG_TRACE, ("Query::RT_OID_802_11_QUERY_APSD_SETTING (=0x%lx,APSDCap=%d,AC_BE=%d,AC_BK=%d,AC_VI=%d,AC_VO=%d,MAXSPLen=%d)\n",
++ apsd,pAdapter->CommonCfg.bAPSDCapable,pAdapter->CommonCfg.bAPSDAC_BE,pAdapter->CommonCfg.bAPSDAC_BK,pAdapter->CommonCfg.bAPSDAC_VI,pAdapter->CommonCfg.bAPSDAC_VO,pAdapter->CommonCfg.MaxSPLength));
++ break;
++ case RT_OID_802_11_QUERY_APSD_PSM:
++ wrq->u.data.length = sizeof(ULONG);
++ Status = copy_to_user(wrq->u.data.pointer, &pAdapter->CommonCfg.bAPSDForcePowerSave, wrq->u.data.length);
++ DBGPRINT(RT_DEBUG_TRACE, ("Query::RT_OID_802_11_QUERY_APSD_PSM (=%d)\n", pAdapter->CommonCfg.bAPSDForcePowerSave));
++ break;
++ case RT_OID_802_11_QUERY_WMM:
++ wrq->u.data.length = sizeof(BOOLEAN);
++ Status = copy_to_user(wrq->u.data.pointer, &pAdapter->CommonCfg.bWmmCapable, wrq->u.data.length);
++ DBGPRINT(RT_DEBUG_TRACE, ("Query::RT_OID_802_11_QUERY_WMM (=%d)\n", pAdapter->CommonCfg.bWmmCapable));
++ break;
++#ifdef WPA_SUPPLICANT_SUPPORT
++ case RT_OID_NEW_DRIVER:
++ {
++ UCHAR enabled = 1;
++ wrq->u.data.length = sizeof(UCHAR);
++ Status = copy_to_user(wrq->u.data.pointer, &enabled, wrq->u.data.length);
++ DBGPRINT(RT_DEBUG_TRACE, ("Query::RT_OID_NEW_DRIVER (=%d)\n", enabled));
++ }
++ break;
++ case RT_OID_WPA_SUPPLICANT_SUPPORT:
++ wrq->u.data.length = sizeof(UCHAR);
++ Status = copy_to_user(wrq->u.data.pointer, &pAdapter->StaCfg.WpaSupplicantUP, wrq->u.data.length);
++ DBGPRINT(RT_DEBUG_TRACE, ("Query::RT_OID_WPA_SUPPLICANT_SUPPORT (=%d)\n", pAdapter->StaCfg.WpaSupplicantUP));
++ break;
++#endif // WPA_SUPPLICANT_SUPPORT //
++
++ case RT_OID_DRIVER_DEVICE_NAME:
++ DBGPRINT(RT_DEBUG_TRACE, ("Query::RT_OID_DRIVER_DEVICE_NAME \n"));
++ wrq->u.data.length = 16;
++ if (copy_to_user(wrq->u.data.pointer, pAdapter->StaCfg.dev_name, wrq->u.data.length))
++ {
++ Status = -EFAULT;
++ }
++ break;
++ case RT_OID_802_11_QUERY_HT_PHYMODE:
++ pHTPhyMode = (OID_SET_HT_PHYMODE *) kmalloc(sizeof(OID_SET_HT_PHYMODE), MEM_ALLOC_FLAG);
++ if (pHTPhyMode)
++ {
++ pHTPhyMode->PhyMode = pAdapter->CommonCfg.PhyMode;
++ pHTPhyMode->HtMode = (UCHAR)pAdapter->MacTab.Content[BSSID_WCID].HTPhyMode.field.MODE;
++ pHTPhyMode->BW = (UCHAR)pAdapter->MacTab.Content[BSSID_WCID].HTPhyMode.field.BW;
++ pHTPhyMode->MCS= (UCHAR)pAdapter->MacTab.Content[BSSID_WCID].HTPhyMode.field.MCS;
++ pHTPhyMode->SHORTGI= (UCHAR)pAdapter->MacTab.Content[BSSID_WCID].HTPhyMode.field.ShortGI;
++ pHTPhyMode->STBC= (UCHAR)pAdapter->MacTab.Content[BSSID_WCID].HTPhyMode.field.STBC;
++
++ pHTPhyMode->ExtOffset = ((pAdapter->CommonCfg.CentralChannel < pAdapter->CommonCfg.Channel) ? (EXTCHA_BELOW) : (EXTCHA_ABOVE));
++ wrq->u.data.length = sizeof(OID_SET_HT_PHYMODE);
++ if (copy_to_user(wrq->u.data.pointer, pHTPhyMode, wrq->u.data.length))
++ {
++ Status = -EFAULT;
++ }
++ DBGPRINT(RT_DEBUG_TRACE, ("Query::RT_OID_802_11_QUERY_HT_PHYMODE (PhyMode = %d, MCS =%d, BW = %d, STBC = %d, ExtOffset=%d)\n",
++ pHTPhyMode->HtMode, pHTPhyMode->MCS, pHTPhyMode->BW, pHTPhyMode->STBC, pHTPhyMode->ExtOffset));
++ DBGPRINT(RT_DEBUG_TRACE, (" MlmeUpdateTxRates (.word = %x )\n", pAdapter->MacTab.Content[BSSID_WCID].HTPhyMode.word));
++ }
++ else
++ {
++ DBGPRINT(RT_DEBUG_TRACE, ("Query::RT_OID_802_11_STA_CONFIG(kmalloc failed)\n"));
++ Status = -EFAULT;
++ }
++ break;
++ case RT_OID_802_11_COUNTRY_REGION:
++ DBGPRINT(RT_DEBUG_TRACE, ("Query::RT_OID_802_11_COUNTRY_REGION \n"));
++ wrq->u.data.length = sizeof(ulInfo);
++ ulInfo = pAdapter->CommonCfg.CountryRegionForABand;
++ ulInfo = (ulInfo << 8)|(pAdapter->CommonCfg.CountryRegion);
++ if (copy_to_user(wrq->u.data.pointer, &ulInfo, wrq->u.data.length))
++ {
++ Status = -EFAULT;
++ }
++ break;
++ case RT_OID_802_11_QUERY_DAT_HT_PHYMODE:
++ pHTPhyMode = (OID_SET_HT_PHYMODE *) kmalloc(sizeof(OID_SET_HT_PHYMODE), MEM_ALLOC_FLAG);
++ if (pHTPhyMode)
++ {
++ pHTPhyMode->PhyMode = pAdapter->CommonCfg.PhyMode;
++ pHTPhyMode->HtMode = (UCHAR)pAdapter->CommonCfg.RegTransmitSetting.field.HTMODE;
++ pHTPhyMode->BW = (UCHAR)pAdapter->CommonCfg.RegTransmitSetting.field.BW;
++ pHTPhyMode->MCS= (UCHAR)pAdapter->StaCfg.DesiredTransmitSetting.field.MCS;
++ pHTPhyMode->SHORTGI= (UCHAR)pAdapter->CommonCfg.RegTransmitSetting.field.ShortGI;
++ pHTPhyMode->STBC= (UCHAR)pAdapter->CommonCfg.RegTransmitSetting.field.STBC;
++
++ wrq->u.data.length = sizeof(OID_SET_HT_PHYMODE);
++ if (copy_to_user(wrq->u.data.pointer, pHTPhyMode, wrq->u.data.length))
++ {
++ Status = -EFAULT;
++ }
++ DBGPRINT(RT_DEBUG_TRACE, ("Query::RT_OID_802_11_QUERY_HT_PHYMODE (PhyMode = %d, MCS =%d, BW = %d, STBC = %d, ExtOffset=%d)\n",
++ pHTPhyMode->HtMode, pHTPhyMode->MCS, pHTPhyMode->BW, pHTPhyMode->STBC, pHTPhyMode->ExtOffset));
++ DBGPRINT(RT_DEBUG_TRACE, (" MlmeUpdateTxRates (.word = %x )\n", pAdapter->MacTab.Content[BSSID_WCID].HTPhyMode.word));
++ }
++ else
++ {
++ DBGPRINT(RT_DEBUG_TRACE, ("Query::RT_OID_802_11_STA_CONFIG(kmalloc failed)\n"));
++ Status = -EFAULT;
++ }
++ break;
++ case RT_OID_QUERY_MULTIPLE_CARD_SUPPORT:
++ wrq->u.data.length = sizeof(UCHAR);
++ i = 0;
++#ifdef MULTIPLE_CARD_SUPPORT
++ i = 1;
++#endif // MULTIPLE_CARD_SUPPORT //
++ if (copy_to_user(wrq->u.data.pointer, &i, wrq->u.data.length))
++ {
++ Status = -EFAULT;
++ }
++ DBGPRINT(RT_DEBUG_TRACE, ("Query::RT_OID_QUERY_MULTIPLE_CARD_SUPPORT(=%d) \n", i));
++ break;
++#ifdef SNMP_SUPPORT
++ case RT_OID_802_11_MAC_ADDRESS:
++ wrq->u.data.length = MAC_ADDR_LEN;
++ Status = copy_to_user(wrq->u.data.pointer, &pAdapter->CurrentAddress, wrq->u.data.length);
++ break;
++
++ case RT_OID_802_11_MANUFACTUREROUI:
++ DBGPRINT(RT_DEBUG_TRACE, ("Query::RT_OID_802_11_MANUFACTUREROUI \n"));
++ wrq->u.data.length = ManufacturerOUI_LEN;
++ Status = copy_to_user(wrq->u.data.pointer, &pAdapter->CurrentAddress, wrq->u.data.length);
++ break;
++
++ case RT_OID_802_11_MANUFACTURERNAME:
++ DBGPRINT(RT_DEBUG_TRACE, ("Query::RT_OID_802_11_MANUFACTURERNAME \n"));
++ wrq->u.data.length = strlen(ManufacturerNAME);
++ Status = copy_to_user(wrq->u.data.pointer, ManufacturerNAME, wrq->u.data.length);
++ break;
++
++ case RT_OID_802_11_RESOURCETYPEIDNAME:
++ DBGPRINT(RT_DEBUG_TRACE, ("Query::RT_OID_802_11_RESOURCETYPEIDNAME \n"));
++ wrq->u.data.length = strlen(ResourceTypeIdName);
++ Status = copy_to_user(wrq->u.data.pointer, ResourceTypeIdName, wrq->u.data.length);
++ break;
++
++ case RT_OID_802_11_PRIVACYOPTIONIMPLEMENTED:
++ DBGPRINT(RT_DEBUG_TRACE, ("Query::RT_OID_802_11_PRIVACYOPTIONIMPLEMENTED \n"));
++ ulInfo = 1; // 1 is support wep else 2 is not support.
++ wrq->u.data.length = sizeof(ulInfo);
++ Status = copy_to_user(wrq->u.data.pointer, &ulInfo, wrq->u.data.length);
++ break;
++
++ case RT_OID_802_11_POWERMANAGEMENTMODE:
++ DBGPRINT(RT_DEBUG_TRACE, ("Query::RT_OID_802_11_POWERMANAGEMENTMODE \n"));
++ if (pAdapter->StaCfg.Psm == PSMP_ACTION)
++ ulInfo = 1; // 1 is power active else 2 is power save.
++ else
++ ulInfo = 2;
++
++ wrq->u.data.length = sizeof(ulInfo);
++ Status = copy_to_user(wrq->u.data.pointer, &ulInfo, wrq->u.data.length);
++ break;
++
++ case OID_802_11_WEPDEFAULTKEYVALUE:
++ DBGPRINT(RT_DEBUG_TRACE, ("Query::OID_802_11_WEPDEFAULTKEYVALUE \n"));
++ //KeyIdxValue.KeyIdx = pAd->PortCfg.MBSSID[pAd->IoctlIF].DefaultKeyId;
++ pKeyIdxValue = wrq->u.data.pointer;
++ DBGPRINT(RT_DEBUG_TRACE,("KeyIdxValue.KeyIdx = %d, \n",pKeyIdxValue->KeyIdx));
++ valueLen = pAdapter->SharedKey[BSS0][pAdapter->StaCfg.DefaultKeyId].KeyLen;
++ NdisMoveMemory(pKeyIdxValue->Value,
++ &pAdapter->SharedKey[BSS0][pAdapter->StaCfg.DefaultKeyId].Key,
++ valueLen);
++ pKeyIdxValue->Value[valueLen]='\0';
++
++ wrq->u.data.length = sizeof(DefaultKeyIdxValue);
++
++ Status = copy_to_user(wrq->u.data.pointer, pKeyIdxValue, wrq->u.data.length);
++ DBGPRINT(RT_DEBUG_TRACE,("DefaultKeyId = %d, total len = %d, str len=%d, KeyValue= %02x %02x %02x %02x \n", pAdapter->StaCfg.DefaultKeyId, wrq->u.data.length, pAdapter->SharedKey[BSS0][pAdapter->StaCfg.DefaultKeyId].KeyLen,
++ pAdapter->SharedKey[BSS0][0].Key[0],
++ pAdapter->SharedKey[BSS0][1].Key[0],
++ pAdapter->SharedKey[BSS0][2].Key[0],
++ pAdapter->SharedKey[BSS0][3].Key[0]));
++ break;
++
++ case OID_802_11_WEPDEFAULTKEYID:
++ DBGPRINT(RT_DEBUG_TRACE, ("Query::RT_OID_802_11_WEPDEFAULTKEYID \n"));
++ wrq->u.data.length = sizeof(UCHAR);
++ Status = copy_to_user(wrq->u.data.pointer, &pAdapter->StaCfg.DefaultKeyId, wrq->u.data.length);
++ DBGPRINT(RT_DEBUG_TRACE, ("DefaultKeyId =%d \n", pAdapter->StaCfg.DefaultKeyId));
++ break;
++
++ case RT_OID_802_11_WEPKEYMAPPINGLENGTH:
++ DBGPRINT(RT_DEBUG_TRACE, ("Query::RT_OID_802_11_WEPKEYMAPPINGLENGTH \n"));
++ wrq->u.data.length = sizeof(UCHAR);
++ Status = copy_to_user(wrq->u.data.pointer,
++ &pAdapter->SharedKey[BSS0][pAdapter->StaCfg.DefaultKeyId].KeyLen,
++ wrq->u.data.length);
++ break;
++
++ case OID_802_11_SHORTRETRYLIMIT:
++ DBGPRINT(RT_DEBUG_TRACE, ("Query::OID_802_11_SHORTRETRYLIMIT \n"));
++ wrq->u.data.length = sizeof(ULONG);
++ RTMP_IO_READ32(pAdapter, TX_RTY_CFG, &tx_rty_cfg.word);
++ ShortRetryLimit = tx_rty_cfg.field.ShortRtyLimit;
++ DBGPRINT(RT_DEBUG_TRACE, ("ShortRetryLimit =%ld, tx_rty_cfg.field.ShortRetryLimit=%d\n", ShortRetryLimit, tx_rty_cfg.field.ShortRtyLimit));
++ Status = copy_to_user(wrq->u.data.pointer, &ShortRetryLimit, wrq->u.data.length);
++ break;
++
++ case OID_802_11_LONGRETRYLIMIT:
++ DBGPRINT(RT_DEBUG_TRACE, ("Query::OID_802_11_LONGRETRYLIMIT \n"));
++ wrq->u.data.length = sizeof(ULONG);
++ RTMP_IO_READ32(pAdapter, TX_RTY_CFG, &tx_rty_cfg.word);
++ LongRetryLimit = tx_rty_cfg.field.LongRtyLimit;
++ DBGPRINT(RT_DEBUG_TRACE, ("LongRetryLimit =%ld, tx_rty_cfg.field.LongRtyLimit=%d\n", LongRetryLimit, tx_rty_cfg.field.LongRtyLimit));
++ Status = copy_to_user(wrq->u.data.pointer, &LongRetryLimit, wrq->u.data.length);
++ break;
++
++ case RT_OID_802_11_PRODUCTID:
++ DBGPRINT(RT_DEBUG_TRACE, ("Query::RT_OID_802_11_PRODUCTID \n"));
++
++#ifdef RT2870
++ sprintf(tmp, "%04x %04x\n", ((POS_COOKIE)pAdapter->OS_Cookie)->pUsb_Dev->descriptor.idVendor ,((POS_COOKIE)pAdapter->OS_Cookie)->pUsb_Dev->descriptor.idProduct);
++
++#endif // RT2870 //
++ wrq->u.data.length = strlen(tmp);
++ Status = copy_to_user(wrq->u.data.pointer, tmp, wrq->u.data.length);
++ break;
++
++ case RT_OID_802_11_MANUFACTUREID:
++ DBGPRINT(RT_DEBUG_TRACE, ("Query::RT_OID_802_11_MANUFACTUREID \n"));
++ wrq->u.data.length = strlen(ManufacturerNAME);
++ Status = copy_to_user(wrq->u.data.pointer, ManufacturerNAME, wrq->u.data.length);
++ break;
++
++ case OID_802_11_CURRENTCHANNEL:
++ DBGPRINT(RT_DEBUG_TRACE, ("Query::OID_802_11_CURRENTCHANNEL \n"));
++ wrq->u.data.length = sizeof(UCHAR);
++ DBGPRINT(RT_DEBUG_TRACE, ("sizeof UCHAR=%d, channel=%d \n", sizeof(UCHAR), pAdapter->CommonCfg.Channel));
++ Status = copy_to_user(wrq->u.data.pointer, &pAdapter->CommonCfg.Channel, wrq->u.data.length);
++ DBGPRINT(RT_DEBUG_TRACE, ("Status=%d\n", Status));
++ break;
++#endif //SNMP_SUPPORT
++
++ case OID_802_11_BUILD_CHANNEL_EX:
++ {
++ UCHAR value;
++ DBGPRINT(RT_DEBUG_TRACE, ("Query::OID_802_11_BUILD_CHANNEL_EX \n"));
++ wrq->u.data.length = sizeof(UCHAR);
++#ifdef EXT_BUILD_CHANNEL_LIST
++ DBGPRINT(RT_DEBUG_TRACE, ("Support EXT_BUILD_CHANNEL_LIST.\n"));
++ value = 1;
++#else
++ DBGPRINT(RT_DEBUG_TRACE, ("Doesn't support EXT_BUILD_CHANNEL_LIST.\n"));
++ value = 0;
++#endif // EXT_BUILD_CHANNEL_LIST //
++ Status = copy_to_user(wrq->u.data.pointer, &value, 1);
++ DBGPRINT(RT_DEBUG_TRACE, ("Status=%d\n", Status));
++ }
++ break;
++
++ case OID_802_11_GET_CH_LIST:
++ {
++ PRT_CHANNEL_LIST_INFO pChListBuf;
++
++ DBGPRINT(RT_DEBUG_TRACE, ("Query::OID_802_11_GET_CH_LIST \n"));
++ if (pAdapter->ChannelListNum == 0)
++ {
++ wrq->u.data.length = 0;
++ break;
++ }
++
++ pChListBuf = (RT_CHANNEL_LIST_INFO *) kmalloc(sizeof(RT_CHANNEL_LIST_INFO), MEM_ALLOC_FLAG);
++ if (pChListBuf == NULL)
++ {
++ wrq->u.data.length = 0;
++ break;
++ }
++
++ pChListBuf->ChannelListNum = pAdapter->ChannelListNum;
++ for (i = 0; i < pChListBuf->ChannelListNum; i++)
++ pChListBuf->ChannelList[i] = pAdapter->ChannelList[i].Channel;
++
++ wrq->u.data.length = sizeof(RT_CHANNEL_LIST_INFO);
++ Status = copy_to_user(wrq->u.data.pointer, pChListBuf, sizeof(RT_CHANNEL_LIST_INFO));
++ DBGPRINT(RT_DEBUG_TRACE, ("Status=%d\n", Status));
++
++ if (pChListBuf)
++ kfree(pChListBuf);
++ }
++ break;
++
++ case OID_802_11_GET_COUNTRY_CODE:
++ DBGPRINT(RT_DEBUG_TRACE, ("Query::OID_802_11_GET_COUNTRY_CODE \n"));
++ wrq->u.data.length = 2;
++ Status = copy_to_user(wrq->u.data.pointer, &pAdapter->CommonCfg.CountryCode, 2);
++ DBGPRINT(RT_DEBUG_TRACE, ("Status=%d\n", Status));
++ break;
++
++ case OID_802_11_GET_CHANNEL_GEOGRAPHY:
++ DBGPRINT(RT_DEBUG_TRACE, ("Query::OID_802_11_GET_CHANNEL_GEOGRAPHY \n"));
++ wrq->u.data.length = 1;
++ Status = copy_to_user(wrq->u.data.pointer, &pAdapter->CommonCfg.Geography, 1);
++ DBGPRINT(RT_DEBUG_TRACE, ("Status=%d\n", Status));
++ break;
++
++
++#ifdef QOS_DLS_SUPPORT
++ case RT_OID_802_11_QUERY_DLS:
++ wrq->u.data.length = sizeof(BOOLEAN);
++ Status = copy_to_user(wrq->u.data.pointer, &pAdapter->CommonCfg.bDLSCapable, wrq->u.data.length);
++ DBGPRINT(RT_DEBUG_TRACE, ("Query::RT_OID_802_11_QUERY_DLS(=%d)\n", pAdapter->CommonCfg.bDLSCapable));
++ break;
++
++ case RT_OID_802_11_QUERY_DLS_PARAM:
++ {
++ PRT_802_11_DLS_INFO pDlsInfo = kmalloc(sizeof(RT_802_11_DLS_INFO), GFP_ATOMIC);
++ if (pDlsInfo == NULL)
++ break;
++
++ for (i=0; i<MAX_NUM_OF_DLS_ENTRY; i++)
++ {
++ RTMPMoveMemory(&pDlsInfo->Entry[i], &pAdapter->StaCfg.DLSEntry[i], sizeof(RT_802_11_DLS_UI));
++ }
++
++ pDlsInfo->num = MAX_NUM_OF_DLS_ENTRY;
++ wrq->u.data.length = sizeof(RT_802_11_DLS_INFO);
++ Status = copy_to_user(wrq->u.data.pointer, pDlsInfo, wrq->u.data.length);
++ DBGPRINT(RT_DEBUG_TRACE, ("Query::RT_OID_802_11_QUERY_DLS_PARAM\n"));
++
++ if (pDlsInfo)
++ kfree(pDlsInfo);
++ }
++ break;
++#endif // QOS_DLS_SUPPORT //
++ default:
++ DBGPRINT(RT_DEBUG_TRACE, ("Query::unknown IOCTL's subcmd = 0x%08x\n", cmd));
++ Status = -EOPNOTSUPP;
++ break;
++ }
++ return Status;
++}
++
++INT rt28xx_sta_ioctl(
++ IN struct net_device *net_dev,
++ IN OUT struct ifreq *rq,
++ IN INT cmd)
++{
++ POS_COOKIE pObj;
++ VIRTUAL_ADAPTER *pVirtualAd = NULL;
++ RTMP_ADAPTER *pAd = NULL;
++ struct iwreq *wrq = (struct iwreq *) rq;
++ BOOLEAN StateMachineTouched = FALSE;
++ INT Status = NDIS_STATUS_SUCCESS;
++ USHORT subcmd;
++
++ if (net_dev->priv_flags == INT_MAIN)
++ {
++ pAd = net_dev->priv;
++ }
++ else
++ {
++ pVirtualAd = net_dev->priv;
++ pAd = pVirtualAd->RtmpDev->priv;
++ }
++ pObj = (POS_COOKIE) pAd->OS_Cookie;
++
++ if (pAd == NULL)
++ {
++ /* if 1st open fail, pAd will be free;
++ So the net_dev->priv will be NULL in 2rd open */
++ return -ENETDOWN;
++ }
++
++ //check if the interface is down
++ if(!RTMP_TEST_FLAG(pAd, fRTMP_ADAPTER_INTERRUPT_IN_USE))
++ {
++#ifdef CONFIG_APSTA_MIXED_SUPPORT
++ if (wrq->u.data.pointer == NULL)
++ {
++ return Status;
++ }
++
++ if (strstr(wrq->u.data.pointer, "OpMode") == NULL)
++#endif // CONFIG_APSTA_MIXED_SUPPORT //
++ {
++ DBGPRINT(RT_DEBUG_TRACE, ("INFO::Network is down!\n"));
++ return -ENETDOWN;
++ }
++ }
++
++ { // determine this ioctl command is comming from which interface.
++ pObj->ioctl_if_type = INT_MAIN;
++ pObj->ioctl_if = MAIN_MBSSID;
++ }
++
++ switch(cmd)
++ {
++#ifdef RALINK_ATE
++#ifdef RALINK_28xx_QA
++ case RTPRIV_IOCTL_ATE:
++ {
++ RtmpDoAte(pAd, wrq);
++ }
++ break;
++#endif // RALINK_28xx_QA //
++#endif // RALINK_ATE //
++ case SIOCGIFHWADDR:
++ DBGPRINT(RT_DEBUG_TRACE, ("IOCTL::SIOCGIFHWADDR\n"));
++ memcpy(wrq->u.name, pAd->CurrentAddress, ETH_ALEN);
++ break;
++ case SIOCGIWNAME:
++ {
++ char *name=&wrq->u.name[0];
++ rt_ioctl_giwname(net_dev, NULL, name, NULL);
++ break;
++ }
++ case SIOCGIWESSID: //Get ESSID
++ {
++ struct iw_point *essid=&wrq->u.essid;
++ rt_ioctl_giwessid(net_dev, NULL, essid, essid->pointer);
++ break;
++ }
++ case SIOCSIWESSID: //Set ESSID
++ {
++ struct iw_point *essid=&wrq->u.essid;
++ rt_ioctl_siwessid(net_dev, NULL, essid, essid->pointer);
++ break;
++ }
++ case SIOCSIWNWID: // set network id (the cell)
++ case SIOCGIWNWID: // get network id
++ Status = -EOPNOTSUPP;
++ break;
++ case SIOCSIWFREQ: //set channel/frequency (Hz)
++ {
++ struct iw_freq *freq=&wrq->u.freq;
++ rt_ioctl_siwfreq(net_dev, NULL, freq, NULL);
++ break;
++ }
++ case SIOCGIWFREQ: // get channel/frequency (Hz)
++ {
++ struct iw_freq *freq=&wrq->u.freq;
++ rt_ioctl_giwfreq(net_dev, NULL, freq, NULL);
++ break;
++ }
++ case SIOCSIWNICKN: //set node name/nickname
++ {
++ struct iw_point *data=&wrq->u.data;
++ rt_ioctl_siwnickn(net_dev, NULL, data, NULL);
++ break;
++ }
++ case SIOCGIWNICKN: //get node name/nickname
++ {
++ struct iw_point *data=&wrq->u.data;
++ rt_ioctl_giwnickn(net_dev, NULL, data, NULL);
++ break;
++ }
++ case SIOCGIWRATE: //get default bit rate (bps)
++ rt_ioctl_giwrate(net_dev, NULL, &wrq->u, NULL);
++ break;
++ case SIOCSIWRATE: //set default bit rate (bps)
++ rt_ioctl_siwrate(net_dev, NULL, &wrq->u, NULL);
++ break;
++ case SIOCGIWRTS: // get RTS/CTS threshold (bytes)
++ {
++ struct iw_param *rts=&wrq->u.rts;
++ rt_ioctl_giwrts(net_dev, NULL, rts, NULL);
++ break;
++ }
++ case SIOCSIWRTS: //set RTS/CTS threshold (bytes)
++ {
++ struct iw_param *rts=&wrq->u.rts;
++ rt_ioctl_siwrts(net_dev, NULL, rts, NULL);
++ break;
++ }
++ case SIOCGIWFRAG: //get fragmentation thr (bytes)
++ {
++ struct iw_param *frag=&wrq->u.frag;
++ rt_ioctl_giwfrag(net_dev, NULL, frag, NULL);
++ break;
++ }
++ case SIOCSIWFRAG: //set fragmentation thr (bytes)
++ {
++ struct iw_param *frag=&wrq->u.frag;
++ rt_ioctl_siwfrag(net_dev, NULL, frag, NULL);
++ break;
++ }
++ case SIOCGIWENCODE: //get encoding token & mode
++ {
++ struct iw_point *erq=&wrq->u.encoding;
++ if(erq->pointer)
++ rt_ioctl_giwencode(net_dev, NULL, erq, erq->pointer);
++ break;
++ }
++ case SIOCSIWENCODE: //set encoding token & mode
++ {
++ struct iw_point *erq=&wrq->u.encoding;
++ if(erq->pointer)
++ rt_ioctl_siwencode(net_dev, NULL, erq, erq->pointer);
++ break;
++ }
++ case SIOCGIWAP: //get access point MAC addresses
++ {
++ struct sockaddr *ap_addr=&wrq->u.ap_addr;
++ rt_ioctl_giwap(net_dev, NULL, ap_addr, ap_addr->sa_data);
++ break;
++ }
++ case SIOCSIWAP: //set access point MAC addresses
++ {
++ struct sockaddr *ap_addr=&wrq->u.ap_addr;
++ rt_ioctl_siwap(net_dev, NULL, ap_addr, ap_addr->sa_data);
++ break;
++ }
++ case SIOCGIWMODE: //get operation mode
++ {
++ __u32 *mode=&wrq->u.mode;
++ rt_ioctl_giwmode(net_dev, NULL, mode, NULL);
++ break;
++ }
++ case SIOCSIWMODE: //set operation mode
++ {
++ __u32 *mode=&wrq->u.mode;
++ rt_ioctl_siwmode(net_dev, NULL, mode, NULL);
++ break;
++ }
++ case SIOCGIWSENS: //get sensitivity (dBm)
++ case SIOCSIWSENS: //set sensitivity (dBm)
++ case SIOCGIWPOWER: //get Power Management settings
++ case SIOCSIWPOWER: //set Power Management settings
++ case SIOCGIWTXPOW: //get transmit power (dBm)
++ case SIOCSIWTXPOW: //set transmit power (dBm)
++ case SIOCGIWRANGE: //Get range of parameters
++ case SIOCGIWRETRY: //get retry limits and lifetime
++ case SIOCSIWRETRY: //set retry limits and lifetime
++ Status = -EOPNOTSUPP;
++ break;
++ case RT_PRIV_IOCTL:
++ subcmd = wrq->u.data.flags;
++ if( subcmd & OID_GET_SET_TOGGLE)
++ Status = RTMPSetInformation(pAd, rq, subcmd);
++ else
++ Status = RTMPQueryInformation(pAd, rq, subcmd);
++ break;
++ case SIOCGIWPRIV:
++ if (wrq->u.data.pointer)
++ {
++ if ( access_ok(VERIFY_WRITE, wrq->u.data.pointer, sizeof(privtab)) != TRUE)
++ break;
++ wrq->u.data.length = sizeof(privtab) / sizeof(privtab[0]);
++ if (copy_to_user(wrq->u.data.pointer, privtab, sizeof(privtab)))
++ Status = -EFAULT;
++ }
++ break;
++ case RTPRIV_IOCTL_SET:
++ if(access_ok(VERIFY_READ, wrq->u.data.pointer, wrq->u.data.length) != TRUE)
++ break;
++ rt_ioctl_setparam(net_dev, NULL, NULL, wrq->u.data.pointer);
++ break;
++ case RTPRIV_IOCTL_GSITESURVEY:
++ RTMPIoctlGetSiteSurvey(pAd, wrq);
++ break;
++#ifdef DBG
++ case RTPRIV_IOCTL_MAC:
++ RTMPIoctlMAC(pAd, wrq);
++ break;
++ case RTPRIV_IOCTL_E2P:
++ RTMPIoctlE2PROM(pAd, wrq);
++ break;
++#endif // DBG //
++ case SIOCETHTOOL:
++ break;
++ default:
++ DBGPRINT(RT_DEBUG_ERROR, ("IOCTL::unknown IOCTL's cmd = 0x%08x\n", cmd));
++ Status = -EOPNOTSUPP;
++ break;
++ }
++
++ if(StateMachineTouched) // Upper layer sent a MLME-related operations
++ RT28XX_MLME_HANDLER(pAd);
++
++ return Status;
++}
++
++/*
++ ==========================================================================
++ Description:
++ Set SSID
++ Return:
++ TRUE if all parameters are OK, FALSE otherwise
++ ==========================================================================
++*/
++INT Set_SSID_Proc(
++ IN PRTMP_ADAPTER pAdapter,
++ IN PUCHAR arg)
++{
++ NDIS_802_11_SSID Ssid, *pSsid=NULL;
++ BOOLEAN StateMachineTouched = FALSE;
++ int success = TRUE;
++
++ if( strlen(arg) <= MAX_LEN_OF_SSID)
++ {
++ NdisZeroMemory(&Ssid, sizeof(NDIS_802_11_SSID));
++ if (strlen(arg) != 0)
++ {
++ NdisMoveMemory(Ssid.Ssid, arg, strlen(arg));
++ Ssid.SsidLength = strlen(arg);
++ }
++ else //ANY ssid
++ {
++ Ssid.SsidLength = 0;
++ memcpy(Ssid.Ssid, "", 0);
++ pAdapter->StaCfg.BssType = BSS_INFRA;
++ pAdapter->StaCfg.AuthMode = Ndis802_11AuthModeOpen;
++ pAdapter->StaCfg.WepStatus = Ndis802_11EncryptionDisabled;
++ }
++ pSsid = &Ssid;
++
++ if (pAdapter->Mlme.CntlMachine.CurrState != CNTL_IDLE)
++ {
++ RT28XX_MLME_RESET_STATE_MACHINE(pAdapter);
++ DBGPRINT(RT_DEBUG_TRACE, ("!!! MLME busy, reset MLME state machine !!!\n"));
++ }
++
++ pAdapter->MlmeAux.CurrReqIsFromNdis = TRUE;
++ pAdapter->StaCfg.bScanReqIsFromWebUI = FALSE;
++ pAdapter->bConfigChanged = TRUE;
++
++ MlmeEnqueue(pAdapter,
++ MLME_CNTL_STATE_MACHINE,
++ OID_802_11_SSID,
++ sizeof(NDIS_802_11_SSID),
++ (VOID *)pSsid);
++
++ StateMachineTouched = TRUE;
++ DBGPRINT(RT_DEBUG_TRACE, ("Set_SSID_Proc::(Len=%d,Ssid=%s)\n", Ssid.SsidLength, Ssid.Ssid));
++ }
++ else
++ success = FALSE;
++
++ if (StateMachineTouched) // Upper layer sent a MLME-related operations
++ RT28XX_MLME_HANDLER(pAdapter);
++
++ return success;
++}
++
++#ifdef WMM_SUPPORT
++/*
++ ==========================================================================
++ Description:
++ Set WmmCapable Enable or Disable
++ Return:
++ TRUE if all parameters are OK, FALSE otherwise
++ ==========================================================================
++*/
++INT Set_WmmCapable_Proc(
++ IN PRTMP_ADAPTER pAd,
++ IN PUCHAR arg)
++{
++ BOOLEAN bWmmCapable;
++
++ bWmmCapable = simple_strtol(arg, 0, 10);
++
++ if ((bWmmCapable == 1)
++#ifdef RT2870
++ && (pAd->NumberOfPipes >= 5)
++#endif // RT2870 //
++ )
++ pAd->CommonCfg.bWmmCapable = TRUE;
++ else if (bWmmCapable == 0)
++ pAd->CommonCfg.bWmmCapable = FALSE;
++ else
++ return FALSE; //Invalid argument
++
++ DBGPRINT(RT_DEBUG_TRACE, ("Set_WmmCapable_Proc::(bWmmCapable=%d)\n",
++ pAd->CommonCfg.bWmmCapable));
++
++ return TRUE;
++}
++#endif // WMM_SUPPORT //
++
++/*
++ ==========================================================================
++ Description:
++ Set Network Type(Infrastructure/Adhoc mode)
++ Return:
++ TRUE if all parameters are OK, FALSE otherwise
++ ==========================================================================
++*/
++INT Set_NetworkType_Proc(
++ IN PRTMP_ADAPTER pAdapter,
++ IN PUCHAR arg)
++{
++ UINT32 Value = 0;
++
++ if (strcmp(arg, "Adhoc") == 0)
++ {
++ if (pAdapter->StaCfg.BssType != BSS_ADHOC)
++ {
++ // Config has changed
++ pAdapter->bConfigChanged = TRUE;
++ if (MONITOR_ON(pAdapter))
++ {
++ RTMP_IO_WRITE32(pAdapter, RX_FILTR_CFG, STANORMAL);
++ RTMP_IO_READ32(pAdapter, MAC_SYS_CTRL, &Value);
++ Value &= (~0x80);
++ RTMP_IO_WRITE32(pAdapter, MAC_SYS_CTRL, Value);
++ OPSTATUS_CLEAR_FLAG(pAdapter, fOP_STATUS_MEDIA_STATE_CONNECTED);
++ pAdapter->StaCfg.bAutoReconnect = TRUE;
++ LinkDown(pAdapter, FALSE);
++ }
++ if (INFRA_ON(pAdapter))
++ {
++ //BOOLEAN Cancelled;
++ // Set the AutoReconnectSsid to prevent it reconnect to old SSID
++ // Since calling this indicate user don't want to connect to that SSID anymore.
++ pAdapter->MlmeAux.AutoReconnectSsidLen= 32;
++ NdisZeroMemory(pAdapter->MlmeAux.AutoReconnectSsid, pAdapter->MlmeAux.AutoReconnectSsidLen);
++
++ LinkDown(pAdapter, FALSE);
++
++ DBGPRINT(RT_DEBUG_TRACE, ("NDIS_STATUS_MEDIA_DISCONNECT Event BB!\n"));
++ }
++ }
++ pAdapter->StaCfg.BssType = BSS_ADHOC;
++ pAdapter->net_dev->type = pAdapter->StaCfg.OriDevType;
++ DBGPRINT(RT_DEBUG_TRACE, ("===>Set_NetworkType_Proc::(AD-HOC)\n"));
++ }
++ else if (strcmp(arg, "Infra") == 0)
++ {
++ if (pAdapter->StaCfg.BssType != BSS_INFRA)
++ {
++ // Config has changed
++ pAdapter->bConfigChanged = TRUE;
++ if (MONITOR_ON(pAdapter))
++ {
++ RTMP_IO_WRITE32(pAdapter, RX_FILTR_CFG, STANORMAL);
++ RTMP_IO_READ32(pAdapter, MAC_SYS_CTRL, &Value);
++ Value &= (~0x80);
++ RTMP_IO_WRITE32(pAdapter, MAC_SYS_CTRL, Value);
++ OPSTATUS_CLEAR_FLAG(pAdapter, fOP_STATUS_MEDIA_STATE_CONNECTED);
++ pAdapter->StaCfg.bAutoReconnect = TRUE;
++ LinkDown(pAdapter, FALSE);
++ }
++ if (ADHOC_ON(pAdapter))
++ {
++ // Set the AutoReconnectSsid to prevent it reconnect to old SSID
++ // Since calling this indicate user don't want to connect to that SSID anymore.
++ pAdapter->MlmeAux.AutoReconnectSsidLen= 32;
++ NdisZeroMemory(pAdapter->MlmeAux.AutoReconnectSsid, pAdapter->MlmeAux.AutoReconnectSsidLen);
++
++ LinkDown(pAdapter, FALSE);
++ }
++ }
++ pAdapter->StaCfg.BssType = BSS_INFRA;
++ pAdapter->net_dev->type = pAdapter->StaCfg.OriDevType;
++ DBGPRINT(RT_DEBUG_TRACE, ("===>Set_NetworkType_Proc::(INFRA)\n"));
++
++ pAdapter->StaCfg.BssType = BSS_INFRA;
++ }
++ else if (strcmp(arg, "Monitor") == 0)
++ {
++ UCHAR bbpValue = 0;
++ BCN_TIME_CFG_STRUC csr;
++ OPSTATUS_CLEAR_FLAG(pAdapter, fOP_STATUS_INFRA_ON);
++ OPSTATUS_CLEAR_FLAG(pAdapter, fOP_STATUS_ADHOC_ON);
++ OPSTATUS_SET_FLAG(pAdapter, fOP_STATUS_MEDIA_STATE_CONNECTED);
++ // disable all periodic state machine
++ pAdapter->StaCfg.bAutoReconnect = FALSE;
++ // reset all mlme state machine
++ RT28XX_MLME_RESET_STATE_MACHINE(pAdapter);
++ DBGPRINT(RT_DEBUG_TRACE, ("fOP_STATUS_MEDIA_STATE_CONNECTED \n"));
++ if (pAdapter->CommonCfg.CentralChannel == 0)
++ {
++#ifdef DOT11_N_SUPPORT
++ if (pAdapter->CommonCfg.PhyMode == PHY_11AN_MIXED)
++ pAdapter->CommonCfg.CentralChannel = 36;
++ else
++#endif // DOT11_N_SUPPORT //
++ pAdapter->CommonCfg.CentralChannel = 6;
++ }
++#ifdef DOT11_N_SUPPORT
++ else
++ N_ChannelCheck(pAdapter);
++#endif // DOT11_N_SUPPORT //
++
++#ifdef DOT11_N_SUPPORT
++ if (pAdapter->CommonCfg.PhyMode >= PHY_11ABGN_MIXED &&
++ pAdapter->CommonCfg.RegTransmitSetting.field.BW == BW_40 &&
++ pAdapter->CommonCfg.RegTransmitSetting.field.EXTCHA == EXTCHA_ABOVE)
++ {
++ // 40MHz ,control channel at lower
++ RTMP_BBP_IO_READ8_BY_REG_ID(pAdapter, BBP_R4, &bbpValue);
++ bbpValue &= (~0x18);
++ bbpValue |= 0x10;
++ RTMP_BBP_IO_WRITE8_BY_REG_ID(pAdapter, BBP_R4, bbpValue);
++ pAdapter->CommonCfg.BBPCurrentBW = BW_40;
++ // RX : control channel at lower
++ RTMP_BBP_IO_READ8_BY_REG_ID(pAdapter, BBP_R3, &bbpValue);
++ bbpValue &= (~0x20);
++ RTMP_BBP_IO_WRITE8_BY_REG_ID(pAdapter, BBP_R3, bbpValue);
++
++ RTMP_IO_READ32(pAdapter, TX_BAND_CFG, &Value);
++ Value &= 0xfffffffe;
++ RTMP_IO_WRITE32(pAdapter, TX_BAND_CFG, Value);
++ pAdapter->CommonCfg.CentralChannel = pAdapter->CommonCfg.Channel + 2;
++ AsicSwitchChannel(pAdapter, pAdapter->CommonCfg.CentralChannel, FALSE);
++ AsicLockChannel(pAdapter, pAdapter->CommonCfg.CentralChannel);
++ DBGPRINT(RT_DEBUG_TRACE, ("BW_40 ,control_channel(%d), CentralChannel(%d) \n",
++ pAdapter->CommonCfg.Channel,
++ pAdapter->CommonCfg.CentralChannel));
++ }
++ else if (pAdapter->CommonCfg.PhyMode >= PHY_11ABGN_MIXED &&
++ pAdapter->CommonCfg.RegTransmitSetting.field.BW == BW_40 &&
++ pAdapter->CommonCfg.RegTransmitSetting.field.EXTCHA == EXTCHA_BELOW)
++ {
++ // 40MHz ,control channel at upper
++ RTMP_BBP_IO_READ8_BY_REG_ID(pAdapter, BBP_R4, &bbpValue);
++ bbpValue &= (~0x18);
++ bbpValue |= 0x10;
++ RTMP_BBP_IO_WRITE8_BY_REG_ID(pAdapter, BBP_R4, bbpValue);
++ pAdapter->CommonCfg.BBPCurrentBW = BW_40;
++ RTMP_IO_READ32(pAdapter, TX_BAND_CFG, &Value);
++ Value |= 0x1;
++ RTMP_IO_WRITE32(pAdapter, TX_BAND_CFG, Value);
++
++ RTMP_BBP_IO_READ8_BY_REG_ID(pAdapter, BBP_R3, &bbpValue);
++ bbpValue |= (0x20);
++ RTMP_BBP_IO_WRITE8_BY_REG_ID(pAdapter, BBP_R3, bbpValue);
++ pAdapter->CommonCfg.CentralChannel = pAdapter->CommonCfg.Channel - 2;
++ AsicSwitchChannel(pAdapter, pAdapter->CommonCfg.CentralChannel, FALSE);
++ AsicLockChannel(pAdapter, pAdapter->CommonCfg.CentralChannel);
++ DBGPRINT(RT_DEBUG_TRACE, ("BW_40 ,control_channel(%d), CentralChannel(%d) \n",
++ pAdapter->CommonCfg.Channel,
++ pAdapter->CommonCfg.CentralChannel));
++ }
++ else
++#endif // DOT11_N_SUPPORT //
++ {
++ // 20MHz
++ RTMP_BBP_IO_READ8_BY_REG_ID(pAdapter, BBP_R4, &bbpValue);
++ bbpValue &= (~0x18);
++ RTMP_BBP_IO_WRITE8_BY_REG_ID(pAdapter, BBP_R4, bbpValue);
++ pAdapter->CommonCfg.BBPCurrentBW = BW_20;
++ AsicSwitchChannel(pAdapter, pAdapter->CommonCfg.Channel, FALSE);
++ AsicLockChannel(pAdapter, pAdapter->CommonCfg.Channel);
++ DBGPRINT(RT_DEBUG_TRACE, ("BW_20, Channel(%d)\n", pAdapter->CommonCfg.Channel));
++ }
++ // Enable Rx with promiscuous reception
++ RTMP_IO_WRITE32(pAdapter, RX_FILTR_CFG, 0x3);
++ // ASIC supporsts sniffer function with replacing RSSI with timestamp.
++ //RTMP_IO_READ32(pAdapter, MAC_SYS_CTRL, &Value);
++ //Value |= (0x80);
++ //RTMP_IO_WRITE32(pAdapter, MAC_SYS_CTRL, Value);
++ // disable sync
++ RTMP_IO_READ32(pAdapter, BCN_TIME_CFG, &csr.word);
++ csr.field.bBeaconGen = 0;
++ csr.field.bTBTTEnable = 0;
++ csr.field.TsfSyncMode = 0;
++ RTMP_IO_WRITE32(pAdapter, BCN_TIME_CFG, csr.word);
++
++ pAdapter->StaCfg.BssType = BSS_MONITOR;
++ pAdapter->net_dev->type = ARPHRD_IEEE80211_PRISM; //ARPHRD_IEEE80211; // IEEE80211
++ DBGPRINT(RT_DEBUG_TRACE, ("===>Set_NetworkType_Proc::(MONITOR)\n"));
++ }
++
++ // Reset Ralink supplicant to not use, it will be set to start when UI set PMK key
++ pAdapter->StaCfg.WpaState = SS_NOTUSE;
++
++ DBGPRINT(RT_DEBUG_TRACE, ("Set_NetworkType_Proc::(NetworkType=%d)\n", pAdapter->StaCfg.BssType));
++
++ return TRUE;
++}
++
++/*
++ ==========================================================================
++ Description:
++ Set Authentication mode
++ Return:
++ TRUE if all parameters are OK, FALSE otherwise
++ ==========================================================================
++*/
++INT Set_AuthMode_Proc(
++ IN PRTMP_ADAPTER pAdapter,
++ IN PUCHAR arg)
++{
++ if ((strcmp(arg, "WEPAUTO") == 0) || (strcmp(arg, "wepauto") == 0))
++ pAdapter->StaCfg.AuthMode = Ndis802_11AuthModeAutoSwitch;
++ else if ((strcmp(arg, "OPEN") == 0) || (strcmp(arg, "open") == 0))
++ pAdapter->StaCfg.AuthMode = Ndis802_11AuthModeOpen;
++ else if ((strcmp(arg, "SHARED") == 0) || (strcmp(arg, "shared") == 0))
++ pAdapter->StaCfg.AuthMode = Ndis802_11AuthModeShared;
++ else if ((strcmp(arg, "WPAPSK") == 0) || (strcmp(arg, "wpapsk") == 0))
++ pAdapter->StaCfg.AuthMode = Ndis802_11AuthModeWPAPSK;
++ else if ((strcmp(arg, "WPANONE") == 0) || (strcmp(arg, "wpanone") == 0))
++ pAdapter->StaCfg.AuthMode = Ndis802_11AuthModeWPANone;
++ else if ((strcmp(arg, "WPA2PSK") == 0) || (strcmp(arg, "wpa2psk") == 0))
++ pAdapter->StaCfg.AuthMode = Ndis802_11AuthModeWPA2PSK;
++#ifdef WPA_SUPPLICANT_SUPPORT
++ else if ((strcmp(arg, "WPA") == 0) || (strcmp(arg, "wpa") == 0))
++ pAdapter->StaCfg.AuthMode = Ndis802_11AuthModeWPA;
++ else if ((strcmp(arg, "WPA2") == 0) || (strcmp(arg, "wpa2") == 0))
++ pAdapter->StaCfg.AuthMode = Ndis802_11AuthModeWPA2;
++#endif // WPA_SUPPLICANT_SUPPORT //
++ else
++ return FALSE;
++
++ pAdapter->StaCfg.PortSecured = WPA_802_1X_PORT_NOT_SECURED;
++
++ DBGPRINT(RT_DEBUG_TRACE, ("Set_AuthMode_Proc::(AuthMode=%d)\n", pAdapter->StaCfg.AuthMode));
++
++ return TRUE;
++}
++
++/*
++ ==========================================================================
++ Description:
++ Set Encryption Type
++ Return:
++ TRUE if all parameters are OK, FALSE otherwise
++ ==========================================================================
++*/
++INT Set_EncrypType_Proc(
++ IN PRTMP_ADAPTER pAdapter,
++ IN PUCHAR arg)
++{
++ if ((strcmp(arg, "NONE") == 0) || (strcmp(arg, "none") == 0))
++ {
++ if (pAdapter->StaCfg.AuthMode >= Ndis802_11AuthModeWPA)
++ return TRUE; // do nothing
++
++ pAdapter->StaCfg.WepStatus = Ndis802_11WEPDisabled;
++ pAdapter->StaCfg.PairCipher = Ndis802_11WEPDisabled;
++ pAdapter->StaCfg.GroupCipher = Ndis802_11WEPDisabled;
++ }
++ else if ((strcmp(arg, "WEP") == 0) || (strcmp(arg, "wep") == 0))
++ {
++ if (pAdapter->StaCfg.AuthMode >= Ndis802_11AuthModeWPA)
++ return TRUE; // do nothing
++
++ pAdapter->StaCfg.WepStatus = Ndis802_11WEPEnabled;
++ pAdapter->StaCfg.PairCipher = Ndis802_11WEPEnabled;
++ pAdapter->StaCfg.GroupCipher = Ndis802_11WEPEnabled;
++ }
++ else if ((strcmp(arg, "TKIP") == 0) || (strcmp(arg, "tkip") == 0))
++ {
++ if (pAdapter->StaCfg.AuthMode < Ndis802_11AuthModeWPA)
++ return TRUE; // do nothing
++
++ pAdapter->StaCfg.WepStatus = Ndis802_11Encryption2Enabled;
++ pAdapter->StaCfg.PairCipher = Ndis802_11Encryption2Enabled;
++ pAdapter->StaCfg.GroupCipher = Ndis802_11Encryption2Enabled;
++ }
++ else if ((strcmp(arg, "AES") == 0) || (strcmp(arg, "aes") == 0))
++ {
++ if (pAdapter->StaCfg.AuthMode < Ndis802_11AuthModeWPA)
++ return TRUE; // do nothing
++
++ pAdapter->StaCfg.WepStatus = Ndis802_11Encryption3Enabled;
++ pAdapter->StaCfg.PairCipher = Ndis802_11Encryption3Enabled;
++ pAdapter->StaCfg.GroupCipher = Ndis802_11Encryption3Enabled;
++ }
++ else
++ return FALSE;
++
++ pAdapter->StaCfg.OrigWepStatus = pAdapter->StaCfg.WepStatus;
++
++ DBGPRINT(RT_DEBUG_TRACE, ("Set_EncrypType_Proc::(EncrypType=%d)\n", pAdapter->StaCfg.WepStatus));
++
++ return TRUE;
++}
++
++/*
++ ==========================================================================
++ Description:
++ Set Default Key ID
++ Return:
++ TRUE if all parameters are OK, FALSE otherwise
++ ==========================================================================
++*/
++INT Set_DefaultKeyID_Proc(
++ IN PRTMP_ADAPTER pAdapter,
++ IN PUCHAR arg)
++{
++ ULONG KeyIdx;
++
++ KeyIdx = simple_strtol(arg, 0, 10);
++ if((KeyIdx >= 1 ) && (KeyIdx <= 4))
++ pAdapter->StaCfg.DefaultKeyId = (UCHAR) (KeyIdx - 1 );
++ else
++ return FALSE; //Invalid argument
++
++ DBGPRINT(RT_DEBUG_TRACE, ("Set_DefaultKeyID_Proc::(DefaultKeyID=%d)\n", pAdapter->StaCfg.DefaultKeyId));
++
++ return TRUE;
++}
++
++/*
++ ==========================================================================
++ Description:
++ Set WEP KEY1
++ Return:
++ TRUE if all parameters are OK, FALSE otherwise
++ ==========================================================================
++*/
++INT Set_Key1_Proc(
++ IN PRTMP_ADAPTER pAdapter,
++ IN PUCHAR arg)
++{
++ int KeyLen;
++ int i;
++ UCHAR CipherAlg=CIPHER_WEP64;
++
++ if (pAdapter->StaCfg.AuthMode >= Ndis802_11AuthModeWPA)
++ return TRUE; // do nothing
++
++ KeyLen = strlen(arg);
++
++ switch (KeyLen)
++ {
++ case 5: //wep 40 Ascii type
++ pAdapter->SharedKey[BSS0][0].KeyLen = KeyLen;
++ memcpy(pAdapter->SharedKey[BSS0][0].Key, arg, KeyLen);
++ CipherAlg = CIPHER_WEP64;
++ DBGPRINT(RT_DEBUG_TRACE, ("Set_Key1_Proc::(Key1=%s and type=%s)\n", arg, "Ascii"));
++ break;
++ case 10: //wep 40 Hex type
++ for(i=0; i < KeyLen; i++)
++ {
++ if( !isxdigit(*(arg+i)) )
++ return FALSE; //Not Hex value;
++ }
++ pAdapter->SharedKey[BSS0][0].KeyLen = KeyLen / 2 ;
++ AtoH(arg, pAdapter->SharedKey[BSS0][0].Key, KeyLen / 2);
++ CipherAlg = CIPHER_WEP64;
++ DBGPRINT(RT_DEBUG_TRACE, ("Set_Key1_Proc::(Key1=%s and type=%s)\n", arg, "Hex"));
++ break;
++ case 13: //wep 104 Ascii type
++ pAdapter->SharedKey[BSS0][0].KeyLen = KeyLen;
++ memcpy(pAdapter->SharedKey[BSS0][0].Key, arg, KeyLen);
++ CipherAlg = CIPHER_WEP128;
++ DBGPRINT(RT_DEBUG_TRACE, ("Set_Key1_Proc::(Key1=%s and type=%s)\n", arg, "Ascii"));
++ break;
++ case 26: //wep 104 Hex type
++ for(i=0; i < KeyLen; i++)
++ {
++ if( !isxdigit(*(arg+i)) )
++ return FALSE; //Not Hex value;
++ }
++ pAdapter->SharedKey[BSS0][0].KeyLen = KeyLen / 2 ;
++ AtoH(arg, pAdapter->SharedKey[BSS0][0].Key, KeyLen / 2);
++ CipherAlg = CIPHER_WEP128;
++ DBGPRINT(RT_DEBUG_TRACE, ("Set_Key1_Proc::(Key1=%s and type=%s)\n", arg, "Hex"));
++ break;
++ default: //Invalid argument
++ DBGPRINT(RT_DEBUG_TRACE, ("Set_Key1_Proc::Invalid argument (=%s)\n", arg));
++ return FALSE;
++ }
++
++ pAdapter->SharedKey[BSS0][0].CipherAlg = CipherAlg;
++
++ // Set keys (into ASIC)
++ if (pAdapter->StaCfg.AuthMode >= Ndis802_11AuthModeWPA)
++ ; // not support
++ else // Old WEP stuff
++ {
++ AsicAddSharedKeyEntry(pAdapter,
++ 0,
++ 0,
++ pAdapter->SharedKey[BSS0][0].CipherAlg,
++ pAdapter->SharedKey[BSS0][0].Key,
++ NULL,
++ NULL);
++ }
++
++ return TRUE;
++}
++/*
++ ==========================================================================
++
++ Description:
++ Set WEP KEY2
++ Return:
++ TRUE if all parameters are OK, FALSE otherwise
++ ==========================================================================
++*/
++INT Set_Key2_Proc(
++ IN PRTMP_ADAPTER pAdapter,
++ IN PUCHAR arg)
++{
++ int KeyLen;
++ int i;
++ UCHAR CipherAlg=CIPHER_WEP64;
++
++ if (pAdapter->StaCfg.AuthMode >= Ndis802_11AuthModeWPA)
++ return TRUE; // do nothing
++
++ KeyLen = strlen(arg);
++
++ switch (KeyLen)
++ {
++ case 5: //wep 40 Ascii type
++ pAdapter->SharedKey[BSS0][1].KeyLen = KeyLen;
++ memcpy(pAdapter->SharedKey[BSS0][1].Key, arg, KeyLen);
++ CipherAlg = CIPHER_WEP64;
++ DBGPRINT(RT_DEBUG_TRACE, ("Set_Key2_Proc::(Key2=%s and type=%s)\n", arg, "Ascii"));
++ break;
++ case 10: //wep 40 Hex type
++ for(i=0; i < KeyLen; i++)
++ {
++ if( !isxdigit(*(arg+i)) )
++ return FALSE; //Not Hex value;
++ }
++ pAdapter->SharedKey[BSS0][1].KeyLen = KeyLen / 2 ;
++ AtoH(arg, pAdapter->SharedKey[BSS0][1].Key, KeyLen / 2);
++ CipherAlg = CIPHER_WEP64;
++ DBGPRINT(RT_DEBUG_TRACE, ("Set_Key2_Proc::(Key2=%s and type=%s)\n", arg, "Hex"));
++ break;
++ case 13: //wep 104 Ascii type
++ pAdapter->SharedKey[BSS0][1].KeyLen = KeyLen;
++ memcpy(pAdapter->SharedKey[BSS0][1].Key, arg, KeyLen);
++ CipherAlg = CIPHER_WEP128;
++ DBGPRINT(RT_DEBUG_TRACE, ("Set_Key2_Proc::(Key2=%s and type=%s)\n", arg, "Ascii"));
++ break;
++ case 26: //wep 104 Hex type
++ for(i=0; i < KeyLen; i++)
++ {
++ if( !isxdigit(*(arg+i)) )
++ return FALSE; //Not Hex value;
++ }
++ pAdapter->SharedKey[BSS0][1].KeyLen = KeyLen / 2 ;
++ AtoH(arg, pAdapter->SharedKey[BSS0][1].Key, KeyLen / 2);
++ CipherAlg = CIPHER_WEP128;
++ DBGPRINT(RT_DEBUG_TRACE, ("Set_Key2_Proc::(Key2=%s and type=%s)\n", arg, "Hex"));
++ break;
++ default: //Invalid argument
++ DBGPRINT(RT_DEBUG_TRACE, ("Set_Key2_Proc::Invalid argument (=%s)\n", arg));
++ return FALSE;
++ }
++ pAdapter->SharedKey[BSS0][1].CipherAlg = CipherAlg;
++
++ // Set keys (into ASIC)
++ if (pAdapter->StaCfg.AuthMode >= Ndis802_11AuthModeWPA)
++ ; // not support
++ else // Old WEP stuff
++ {
++ AsicAddSharedKeyEntry(pAdapter,
++ 0,
++ 1,
++ pAdapter->SharedKey[BSS0][1].CipherAlg,
++ pAdapter->SharedKey[BSS0][1].Key,
++ NULL,
++ NULL);
++ }
++
++ return TRUE;
++}
++/*
++ ==========================================================================
++ Description:
++ Set WEP KEY3
++ Return:
++ TRUE if all parameters are OK, FALSE otherwise
++ ==========================================================================
++*/
++INT Set_Key3_Proc(
++ IN PRTMP_ADAPTER pAdapter,
++ IN PUCHAR arg)
++{
++ int KeyLen;
++ int i;
++ UCHAR CipherAlg=CIPHER_WEP64;
++
++ if (pAdapter->StaCfg.AuthMode >= Ndis802_11AuthModeWPA)
++ return TRUE; // do nothing
++
++ KeyLen = strlen(arg);
++
++ switch (KeyLen)
++ {
++ case 5: //wep 40 Ascii type
++ pAdapter->SharedKey[BSS0][2].KeyLen = KeyLen;
++ memcpy(pAdapter->SharedKey[BSS0][2].Key, arg, KeyLen);
++ CipherAlg = CIPHER_WEP64;
++ DBGPRINT(RT_DEBUG_TRACE, ("Set_Key3_Proc::(Key3=%s and type=Ascii)\n", arg));
++ break;
++ case 10: //wep 40 Hex type
++ for(i=0; i < KeyLen; i++)
++ {
++ if( !isxdigit(*(arg+i)) )
++ return FALSE; //Not Hex value;
++ }
++ pAdapter->SharedKey[BSS0][2].KeyLen = KeyLen / 2 ;
++ AtoH(arg, pAdapter->SharedKey[BSS0][2].Key, KeyLen / 2);
++ CipherAlg = CIPHER_WEP64;
++ DBGPRINT(RT_DEBUG_TRACE, ("Set_Key3_Proc::(Key3=%s and type=Hex)\n", arg));
++ break;
++ case 13: //wep 104 Ascii type
++ pAdapter->SharedKey[BSS0][2].KeyLen = KeyLen;
++ memcpy(pAdapter->SharedKey[BSS0][2].Key, arg, KeyLen);
++ CipherAlg = CIPHER_WEP128;
++ DBGPRINT(RT_DEBUG_TRACE, ("Set_Key3_Proc::(Key3=%s and type=Ascii)\n", arg));
++ break;
++ case 26: //wep 104 Hex type
++ for(i=0; i < KeyLen; i++)
++ {
++ if( !isxdigit(*(arg+i)) )
++ return FALSE; //Not Hex value;
++ }
++ pAdapter->SharedKey[BSS0][2].KeyLen = KeyLen / 2 ;
++ AtoH(arg, pAdapter->SharedKey[BSS0][2].Key, KeyLen / 2);
++ CipherAlg = CIPHER_WEP128;
++ DBGPRINT(RT_DEBUG_TRACE, ("Set_Key3_Proc::(Key3=%s and type=Hex)\n", arg));
++ break;
++ default: //Invalid argument
++ DBGPRINT(RT_DEBUG_TRACE, ("Set_Key3_Proc::Invalid argument (=%s)\n", arg));
++ return FALSE;
++ }
++ pAdapter->SharedKey[BSS0][2].CipherAlg = CipherAlg;
++
++ // Set keys (into ASIC)
++ if (pAdapter->StaCfg.AuthMode >= Ndis802_11AuthModeWPA)
++ ; // not support
++ else // Old WEP stuff
++ {
++ AsicAddSharedKeyEntry(pAdapter,
++ 0,
++ 2,
++ pAdapter->SharedKey[BSS0][2].CipherAlg,
++ pAdapter->SharedKey[BSS0][2].Key,
++ NULL,
++ NULL);
++ }
++
++ return TRUE;
++}
++/*
++ ==========================================================================
++ Description:
++ Set WEP KEY4
++ Return:
++ TRUE if all parameters are OK, FALSE otherwise
++ ==========================================================================
++*/
++INT Set_Key4_Proc(
++ IN PRTMP_ADAPTER pAdapter,
++ IN PUCHAR arg)
++{
++ int KeyLen;
++ int i;
++ UCHAR CipherAlg=CIPHER_WEP64;
++
++ if (pAdapter->StaCfg.AuthMode >= Ndis802_11AuthModeWPA)
++ return TRUE; // do nothing
++
++ KeyLen = strlen(arg);
++
++ switch (KeyLen)
++ {
++ case 5: //wep 40 Ascii type
++ pAdapter->SharedKey[BSS0][3].KeyLen = KeyLen;
++ memcpy(pAdapter->SharedKey[BSS0][3].Key, arg, KeyLen);
++ CipherAlg = CIPHER_WEP64;
++ DBGPRINT(RT_DEBUG_TRACE, ("Set_Key4_Proc::(Key4=%s and type=%s)\n", arg, "Ascii"));
++ break;
++ case 10: //wep 40 Hex type
++ for(i=0; i < KeyLen; i++)
++ {
++ if( !isxdigit(*(arg+i)) )
++ return FALSE; //Not Hex value;
++ }
++ pAdapter->SharedKey[BSS0][3].KeyLen = KeyLen / 2 ;
++ AtoH(arg, pAdapter->SharedKey[BSS0][3].Key, KeyLen / 2);
++ CipherAlg = CIPHER_WEP64;
++ DBGPRINT(RT_DEBUG_TRACE, ("Set_Key4_Proc::(Key4=%s and type=%s)\n", arg, "Hex"));
++ break;
++ case 13: //wep 104 Ascii type
++ pAdapter->SharedKey[BSS0][3].KeyLen = KeyLen;
++ memcpy(pAdapter->SharedKey[BSS0][3].Key, arg, KeyLen);
++ CipherAlg = CIPHER_WEP128;
++ DBGPRINT(RT_DEBUG_TRACE, ("Set_Key4_Proc::(Key4=%s and type=%s)\n", arg, "Ascii"));
++ break;
++ case 26: //wep 104 Hex type
++ for(i=0; i < KeyLen; i++)
++ {
++ if( !isxdigit(*(arg+i)) )
++ return FALSE; //Not Hex value;
++ }
++ pAdapter->SharedKey[BSS0][3].KeyLen = KeyLen / 2 ;
++ AtoH(arg, pAdapter->SharedKey[BSS0][3].Key, KeyLen / 2);
++ CipherAlg = CIPHER_WEP128;
++ DBGPRINT(RT_DEBUG_TRACE, ("Set_Key4_Proc::(Key4=%s and type=%s)\n", arg, "Hex"));
++ break;
++ default: //Invalid argument
++ DBGPRINT(RT_DEBUG_TRACE, ("Set_Key4_Proc::Invalid argument (=%s)\n", arg));
++ return FALSE;
++ }
++ pAdapter->SharedKey[BSS0][3].CipherAlg = CipherAlg;
++
++ // Set keys (into ASIC)
++ if (pAdapter->StaCfg.AuthMode >= Ndis802_11AuthModeWPA)
++ ; // not support
++ else // Old WEP stuff
++ {
++ AsicAddSharedKeyEntry(pAdapter,
++ 0,
++ 3,
++ pAdapter->SharedKey[BSS0][3].CipherAlg,
++ pAdapter->SharedKey[BSS0][3].Key,
++ NULL,
++ NULL);
++ }
++
++ return TRUE;
++}
++
++/*
++ ==========================================================================
++ Description:
++ Set WPA PSK key
++ Return:
++ TRUE if all parameters are OK, FALSE otherwise
++ ==========================================================================
++*/
++INT Set_WPAPSK_Proc(
++ IN PRTMP_ADAPTER pAdapter,
++ IN PUCHAR arg)
++{
++ UCHAR keyMaterial[40];
++
++ if ((pAdapter->StaCfg.AuthMode != Ndis802_11AuthModeWPAPSK) &&
++ (pAdapter->StaCfg.AuthMode != Ndis802_11AuthModeWPA2PSK) &&
++ (pAdapter->StaCfg.AuthMode != Ndis802_11AuthModeWPANone)
++ )
++ return TRUE; // do nothing
++
++ DBGPRINT(RT_DEBUG_TRACE, ("Set_WPAPSK_Proc::(WPAPSK=%s)\n", arg));
++
++ NdisZeroMemory(keyMaterial, 40);
++
++ if ((strlen(arg) < 8) || (strlen(arg) > 64))
++ {
++ DBGPRINT(RT_DEBUG_TRACE, ("Set failed!!(WPAPSK=%s), WPAPSK key-string required 8 ~ 64 characters \n", arg));
++ return FALSE;
++ }
++
++ if (strlen(arg) == 64)
++ {
++ AtoH(arg, keyMaterial, 32);
++ NdisMoveMemory(pAdapter->StaCfg.PMK, keyMaterial, 32);
++
++ }
++ else
++ {
++ PasswordHash((char *)arg, pAdapter->MlmeAux.Ssid, pAdapter->MlmeAux.SsidLen, keyMaterial);
++ NdisMoveMemory(pAdapter->StaCfg.PMK, keyMaterial, 32);
++ }
++
++
++
++ if(pAdapter->StaCfg.BssType == BSS_ADHOC &&
++ pAdapter->StaCfg.AuthMode == Ndis802_11AuthModeWPANone)
++ {
++ pAdapter->StaCfg.WpaState = SS_NOTUSE;
++ }
++ else
++ {
++ // Start STA supplicant state machine
++ pAdapter->StaCfg.WpaState = SS_START;
++ }
++
++ return TRUE;
++}
++
++/*
++ ==========================================================================
++ Description:
++ Set Power Saving mode
++ Return:
++ TRUE if all parameters are OK, FALSE otherwise
++ ==========================================================================
++*/
++INT Set_PSMode_Proc(
++ IN PRTMP_ADAPTER pAdapter,
++ IN PUCHAR arg)
++{
++ if (pAdapter->StaCfg.BssType == BSS_INFRA)
++ {
++ if ((strcmp(arg, "Max_PSP") == 0) ||
++ (strcmp(arg, "max_psp") == 0) ||
++ (strcmp(arg, "MAX_PSP") == 0))
++ {
++ // do NOT turn on PSM bit here, wait until MlmeCheckForPsmChange()
++ // to exclude certain situations.
++ if (pAdapter->StaCfg.bWindowsACCAMEnable == FALSE)
++ pAdapter->StaCfg.WindowsPowerMode = Ndis802_11PowerModeMAX_PSP;
++ pAdapter->StaCfg.WindowsBatteryPowerMode = Ndis802_11PowerModeMAX_PSP;
++ OPSTATUS_SET_FLAG(pAdapter, fOP_STATUS_RECEIVE_DTIM);
++ pAdapter->StaCfg.DefaultListenCount = 5;
++
++ }
++ else if ((strcmp(arg, "Fast_PSP") == 0) ||
++ (strcmp(arg, "fast_psp") == 0) ||
++ (strcmp(arg, "FAST_PSP") == 0))
++ {
++ // do NOT turn on PSM bit here, wait until MlmeCheckForPsmChange()
++ // to exclude certain situations.
++ OPSTATUS_SET_FLAG(pAdapter, fOP_STATUS_RECEIVE_DTIM);
++ if (pAdapter->StaCfg.bWindowsACCAMEnable == FALSE)
++ pAdapter->StaCfg.WindowsPowerMode = Ndis802_11PowerModeFast_PSP;
++ pAdapter->StaCfg.WindowsBatteryPowerMode = Ndis802_11PowerModeFast_PSP;
++ pAdapter->StaCfg.DefaultListenCount = 3;
++ }
++ else if ((strcmp(arg, "Legacy_PSP") == 0) ||
++ (strcmp(arg, "legacy_psp") == 0) ||
++ (strcmp(arg, "LEGACY_PSP") == 0))
++ {
++ // do NOT turn on PSM bit here, wait until MlmeCheckForPsmChange()
++ // to exclude certain situations.
++ OPSTATUS_SET_FLAG(pAdapter, fOP_STATUS_RECEIVE_DTIM);
++ if (pAdapter->StaCfg.bWindowsACCAMEnable == FALSE)
++ pAdapter->StaCfg.WindowsPowerMode = Ndis802_11PowerModeLegacy_PSP;
++ pAdapter->StaCfg.WindowsBatteryPowerMode = Ndis802_11PowerModeLegacy_PSP;
++ pAdapter->StaCfg.DefaultListenCount = 3;
++ }
++ else
++ {
++ //Default Ndis802_11PowerModeCAM
++ // clear PSM bit immediately
++ MlmeSetPsmBit(pAdapter, PWR_ACTIVE);
++ OPSTATUS_SET_FLAG(pAdapter, fOP_STATUS_RECEIVE_DTIM);
++ if (pAdapter->StaCfg.bWindowsACCAMEnable == FALSE)
++ pAdapter->StaCfg.WindowsPowerMode = Ndis802_11PowerModeCAM;
++ pAdapter->StaCfg.WindowsBatteryPowerMode = Ndis802_11PowerModeCAM;
++ }
++
++ DBGPRINT(RT_DEBUG_TRACE, ("Set_PSMode_Proc::(PSMode=%ld)\n", pAdapter->StaCfg.WindowsPowerMode));
++ }
++ else
++ return FALSE;
++
++
++ return TRUE;
++}
++
++#ifdef WPA_SUPPLICANT_SUPPORT
++/*
++ ==========================================================================
++ Description:
++ Set WpaSupport flag.
++ Value:
++ 0: Driver ignore wpa_supplicant.
++ 1: wpa_supplicant initiates scanning and AP selection.
++ 2: driver takes care of scanning, AP selection, and IEEE 802.11 association parameters.
++ Return:
++ TRUE if all parameters are OK, FALSE otherwise
++ ==========================================================================
++*/
++INT Set_Wpa_Support(
++ IN PRTMP_ADAPTER pAd,
++ IN PUCHAR arg)
++{
++
++ if ( simple_strtol(arg, 0, 10) == 0)
++ pAd->StaCfg.WpaSupplicantUP = WPA_SUPPLICANT_DISABLE;
++ else if ( simple_strtol(arg, 0, 10) == 1)
++ pAd->StaCfg.WpaSupplicantUP = WPA_SUPPLICANT_ENABLE;
++ else if ( simple_strtol(arg, 0, 10) == 2)
++ pAd->StaCfg.WpaSupplicantUP = WPA_SUPPLICANT_ENABLE_WITH_WEB_UI;
++ else
++ pAd->StaCfg.WpaSupplicantUP = WPA_SUPPLICANT_DISABLE;
++
++ DBGPRINT(RT_DEBUG_TRACE, ("Set_Wpa_Support::(WpaSupplicantUP=%d)\n", pAd->StaCfg.WpaSupplicantUP));
++
++ return TRUE;
++}
++#endif // WPA_SUPPLICANT_SUPPORT //
++
++#ifdef DBG
++/*
++ ==========================================================================
++ Description:
++ Read / Write MAC
++ Arguments:
++ pAdapter Pointer to our adapter
++ wrq Pointer to the ioctl argument
++
++ Return Value:
++ None
++
++ Note:
++ Usage:
++ 1.) iwpriv ra0 mac 0 ==> read MAC where Addr=0x0
++ 2.) iwpriv ra0 mac 0=12 ==> write MAC where Addr=0x0, value=12
++ ==========================================================================
++*/
++VOID RTMPIoctlMAC(
++ IN PRTMP_ADAPTER pAdapter,
++ IN struct iwreq *wrq)
++{
++ CHAR *this_char;
++ CHAR *value;
++ INT j = 0, k = 0;
++ CHAR msg[1024];
++ CHAR arg[255];
++ ULONG macAddr = 0;
++ UCHAR temp[16], temp2[16];
++ UINT32 macValue = 0;
++ INT Status;
++
++
++ memset(msg, 0x00, 1024);
++ if (wrq->u.data.length > 1) //No parameters.
++ {
++ Status = copy_from_user(arg, wrq->u.data.pointer, (wrq->u.data.length > 255) ? 255 : wrq->u.data.length);
++ sprintf(msg, "\n");
++
++ //Parsing Read or Write
++ this_char = arg;
++ if (!*this_char)
++ goto next;
++
++ if ((value = rtstrchr(this_char, '=')) != NULL)
++ *value++ = 0;
++
++ if (!value || !*value)
++ { //Read
++ // Sanity check
++ if(strlen(this_char) > 4)
++ goto next;
++
++ j = strlen(this_char);
++ while(j-- > 0)
++ {
++ if(this_char[j] > 'f' || this_char[j] < '0')
++ return;
++ }
++
++ // Mac Addr
++ k = j = strlen(this_char);
++ while(j-- > 0)
++ {
++ this_char[4-k+j] = this_char[j];
++ }
++
++ while(k < 4)
++ this_char[3-k++]='0';
++ this_char[4]='\0';
++
++ if(strlen(this_char) == 4)
++ {
++ AtoH(this_char, temp, 2);
++ macAddr = *temp*256 + temp[1];
++ if (macAddr < 0xFFFF)
++ {
++ RTMP_IO_READ32(pAdapter, macAddr, &macValue);
++ DBGPRINT(RT_DEBUG_TRACE, ("MacAddr=%lx, MacValue=%x\n", macAddr, macValue));
++ sprintf(msg+strlen(msg), "[0x%08lX]:%08X ", macAddr , macValue);
++ }
++ else
++ {//Invalid parametes, so default printk all bbp
++ goto next;
++ }
++ }
++ }
++ else
++ { //Write
++ memcpy(&temp2, value, strlen(value));
++ temp2[strlen(value)] = '\0';
++
++ // Sanity check
++ if((strlen(this_char) > 4) || strlen(temp2) > 8)
++ goto next;
++
++ j = strlen(this_char);
++ while(j-- > 0)
++ {
++ if(this_char[j] > 'f' || this_char[j] < '0')
++ return;
++ }
++
++ j = strlen(temp2);
++ while(j-- > 0)
++ {
++ if(temp2[j] > 'f' || temp2[j] < '0')
++ return;
++ }
++
++ //MAC Addr
++ k = j = strlen(this_char);
++ while(j-- > 0)
++ {
++ this_char[4-k+j] = this_char[j];
++ }
++
++ while(k < 4)
++ this_char[3-k++]='0';
++ this_char[4]='\0';
++
++ //MAC value
++ k = j = strlen(temp2);
++ while(j-- > 0)
++ {
++ temp2[8-k+j] = temp2[j];
++ }
++
++ while(k < 8)
++ temp2[7-k++]='0';
++ temp2[8]='\0';
++
++ {
++ AtoH(this_char, temp, 2);
++ macAddr = *temp*256 + temp[1];
++
++ AtoH(temp2, temp, 4);
++ macValue = *temp*256*256*256 + temp[1]*256*256 + temp[2]*256 + temp[3];
++
++ // debug mode
++ if (macAddr == (HW_DEBUG_SETTING_BASE + 4))
++ {
++ // 0x2bf4: byte0 non-zero: enable R17 tuning, 0: disable R17 tuning
++ if (macValue & 0x000000ff)
++ {
++ pAdapter->BbpTuning.bEnable = TRUE;
++ DBGPRINT(RT_DEBUG_TRACE,("turn on R17 tuning\n"));
++ }
++ else
++ {
++ UCHAR R66;
++ pAdapter->BbpTuning.bEnable = FALSE;
++ R66 = 0x26 + GET_LNA_GAIN(pAdapter);
++#ifdef RALINK_ATE
++ if (ATE_ON(pAdapter))
++ {
++ ATE_BBP_IO_WRITE8_BY_REG_ID(pAdapter, BBP_R66, (0x26 + GET_LNA_GAIN(pAdapter)));
++ }
++ else
++#endif // RALINK_ATE //
++ RTMP_BBP_IO_WRITE8_BY_REG_ID(pAdapter, BBP_R66, (0x26 + GET_LNA_GAIN(pAdapter)));
++ DBGPRINT(RT_DEBUG_TRACE,("turn off R17 tuning, restore to 0x%02x\n", R66));
++ }
++ return;
++ }
++
++ DBGPRINT(RT_DEBUG_TRACE, ("MacAddr=%02lx, MacValue=0x%x\n", macAddr, macValue));
++
++ RTMP_IO_WRITE32(pAdapter, macAddr, macValue);
++ sprintf(msg+strlen(msg), "[0x%08lX]:%08X ", macAddr, macValue);
++ }
++ }
++ }
++next:
++ if(strlen(msg) == 1)
++ sprintf(msg+strlen(msg), "===>Error command format!");
++
++ // Copy the information into the user buffer
++ wrq->u.data.length = strlen(msg);
++ Status = copy_to_user(wrq->u.data.pointer, msg, wrq->u.data.length);
++
++ DBGPRINT(RT_DEBUG_TRACE, ("<==RTMPIoctlMAC\n\n"));
++}
++
++/*
++ ==========================================================================
++ Description:
++ Read / Write E2PROM
++ Arguments:
++ pAdapter Pointer to our adapter
++ wrq Pointer to the ioctl argument
++
++ Return Value:
++ None
++
++ Note:
++ Usage:
++ 1.) iwpriv ra0 e2p 0 ==> read E2PROM where Addr=0x0
++ 2.) iwpriv ra0 e2p 0=1234 ==> write E2PROM where Addr=0x0, value=1234
++ ==========================================================================
++*/
++VOID RTMPIoctlE2PROM(
++ IN PRTMP_ADAPTER pAdapter,
++ IN struct iwreq *wrq)
++{
++ CHAR *this_char;
++ CHAR *value;
++ INT j = 0, k = 0;
++ CHAR msg[1024];
++ CHAR arg[255];
++ USHORT eepAddr = 0;
++ UCHAR temp[16], temp2[16];
++ USHORT eepValue;
++ int Status;
++
++
++ memset(msg, 0x00, 1024);
++ if (wrq->u.data.length > 1) //No parameters.
++ {
++ Status = copy_from_user(arg, wrq->u.data.pointer, (wrq->u.data.length > 255) ? 255 : wrq->u.data.length);
++ sprintf(msg, "\n");
++
++ //Parsing Read or Write
++ this_char = arg;
++
++
++ if (!*this_char)
++ goto next;
++
++ if ((value = rtstrchr(this_char, '=')) != NULL)
++ *value++ = 0;
++
++ if (!value || !*value)
++ { //Read
++
++ // Sanity check
++ if(strlen(this_char) > 4)
++ goto next;
++
++ j = strlen(this_char);
++ while(j-- > 0)
++ {
++ if(this_char[j] > 'f' || this_char[j] < '0')
++ return;
++ }
++
++ // E2PROM addr
++ k = j = strlen(this_char);
++ while(j-- > 0)
++ {
++ this_char[4-k+j] = this_char[j];
++ }
++
++ while(k < 4)
++ this_char[3-k++]='0';
++ this_char[4]='\0';
++
++ if(strlen(this_char) == 4)
++ {
++ AtoH(this_char, temp, 2);
++ eepAddr = *temp*256 + temp[1];
++ if (eepAddr < 0xFFFF)
++ {
++ RT28xx_EEPROM_READ16(pAdapter, eepAddr, eepValue);
++ sprintf(msg+strlen(msg), "[0x%04X]:0x%04X ", eepAddr , eepValue);
++ }
++ else
++ {//Invalid parametes, so default printk all bbp
++ goto next;
++ }
++ }
++ }
++ else
++ { //Write
++ memcpy(&temp2, value, strlen(value));
++ temp2[strlen(value)] = '\0';
++
++ // Sanity check
++ if((strlen(this_char) > 4) || strlen(temp2) > 8)
++ goto next;
++
++ j = strlen(this_char);
++ while(j-- > 0)
++ {
++ if(this_char[j] > 'f' || this_char[j] < '0')
++ return;
++ }
++ j = strlen(temp2);
++ while(j-- > 0)
++ {
++ if(temp2[j] > 'f' || temp2[j] < '0')
++ return;
++ }
++
++ //MAC Addr
++ k = j = strlen(this_char);
++ while(j-- > 0)
++ {
++ this_char[4-k+j] = this_char[j];
++ }
++
++ while(k < 4)
++ this_char[3-k++]='0';
++ this_char[4]='\0';
++
++ //MAC value
++ k = j = strlen(temp2);
++ while(j-- > 0)
++ {
++ temp2[4-k+j] = temp2[j];
++ }
++
++ while(k < 4)
++ temp2[3-k++]='0';
++ temp2[4]='\0';
++
++ AtoH(this_char, temp, 2);
++ eepAddr = *temp*256 + temp[1];
++
++ AtoH(temp2, temp, 2);
++ eepValue = *temp*256 + temp[1];
++
++ RT28xx_EEPROM_WRITE16(pAdapter, eepAddr, eepValue);
++ sprintf(msg+strlen(msg), "[0x%02X]:%02X ", eepAddr, eepValue);
++ }
++ }
++next:
++ if(strlen(msg) == 1)
++ sprintf(msg+strlen(msg), "===>Error command format!");
++
++
++ // Copy the information into the user buffer
++ wrq->u.data.length = strlen(msg);
++ Status = copy_to_user(wrq->u.data.pointer, msg, wrq->u.data.length);
++
++ DBGPRINT(RT_DEBUG_TRACE, ("<==RTMPIoctlE2PROM\n"));
++}
++#endif // DBG //
++
++
++
++
++INT Set_TGnWifiTest_Proc(
++ IN PRTMP_ADAPTER pAd,
++ IN PUCHAR arg)
++{
++ if (simple_strtol(arg, 0, 10) == 0)
++ pAd->StaCfg.bTGnWifiTest = FALSE;
++ else
++ pAd->StaCfg.bTGnWifiTest = TRUE;
++
++ DBGPRINT(RT_DEBUG_TRACE, ("IF Set_TGnWifiTest_Proc::(bTGnWifiTest=%d)\n", pAd->StaCfg.bTGnWifiTest));
++ return TRUE;
++}
++
++INT Set_LongRetryLimit_Proc(
++ IN PRTMP_ADAPTER pAdapter,
++ IN PUCHAR arg)
++{
++ TX_RTY_CFG_STRUC tx_rty_cfg;
++ UCHAR LongRetryLimit = (UCHAR)simple_strtol(arg, 0, 10);
++
++ RTMP_IO_READ32(pAdapter, TX_RTY_CFG, &tx_rty_cfg.word);
++ tx_rty_cfg.field.LongRtyLimit = LongRetryLimit;
++ RTMP_IO_WRITE32(pAdapter, TX_RTY_CFG, tx_rty_cfg.word);
++ DBGPRINT(RT_DEBUG_TRACE, ("IF Set_LongRetryLimit_Proc::(tx_rty_cfg=0x%x)\n", tx_rty_cfg.word));
++ return TRUE;
++}
++
++INT Set_ShortRetryLimit_Proc(
++ IN PRTMP_ADAPTER pAdapter,
++ IN PUCHAR arg)
++{
++ TX_RTY_CFG_STRUC tx_rty_cfg;
++ UCHAR ShortRetryLimit = (UCHAR)simple_strtol(arg, 0, 10);
++
++ RTMP_IO_READ32(pAdapter, TX_RTY_CFG, &tx_rty_cfg.word);
++ tx_rty_cfg.field.ShortRtyLimit = ShortRetryLimit;
++ RTMP_IO_WRITE32(pAdapter, TX_RTY_CFG, tx_rty_cfg.word);
++ DBGPRINT(RT_DEBUG_TRACE, ("IF Set_ShortRetryLimit_Proc::(tx_rty_cfg=0x%x)\n", tx_rty_cfg.word));
++ return TRUE;
++}
++
++#ifdef EXT_BUILD_CHANNEL_LIST
++INT Set_Ieee80211dClientMode_Proc(
++ IN PRTMP_ADAPTER pAdapter,
++ IN PUCHAR arg)
++{
++ if (simple_strtol(arg, 0, 10) == 0)
++ pAdapter->StaCfg.IEEE80211dClientMode = Rt802_11_D_None;
++ else if (simple_strtol(arg, 0, 10) == 1)
++ pAdapter->StaCfg.IEEE80211dClientMode = Rt802_11_D_Flexible;
++ else if (simple_strtol(arg, 0, 10) == 2)
++ pAdapter->StaCfg.IEEE80211dClientMode = Rt802_11_D_Strict;
++ else
++ return FALSE;
++
++ DBGPRINT(RT_DEBUG_TRACE, ("Set_Ieee802dMode_Proc::(IEEEE0211dMode=%d)\n", pAdapter->StaCfg.IEEE80211dClientMode));
++ return TRUE;
++}
++#endif // EXT_BUILD_CHANNEL_LIST //
++
++#ifdef CARRIER_DETECTION_SUPPORT
++INT Set_CarrierDetect_Proc(
++ IN PRTMP_ADAPTER pAd,
++ IN PUCHAR arg)
++{
++ if (simple_strtol(arg, 0, 10) == 0)
++ pAd->CommonCfg.CarrierDetect.Enable = FALSE;
++ else
++ pAd->CommonCfg.CarrierDetect.Enable = TRUE;
++
++ DBGPRINT(RT_DEBUG_TRACE, ("IF Set_CarrierDetect_Proc::(CarrierDetect.Enable=%d)\n", pAd->CommonCfg.CarrierDetect.Enable));
++ return TRUE;
++}
++#endif // CARRIER_DETECTION_SUPPORT //
++
++
++INT Show_Adhoc_MacTable_Proc(
++ IN PRTMP_ADAPTER pAd,
++ IN PCHAR extra)
++{
++ INT i;
++
++ sprintf(extra, "\n");
++
++#ifdef DOT11_N_SUPPORT
++ sprintf(extra, "%sHT Operating Mode : %d\n", extra, pAd->CommonCfg.AddHTInfo.AddHtInfo2.OperaionMode);
++#endif // DOT11_N_SUPPORT //
++
++ sprintf(extra, "%s\n%-19s%-4s%-4s%-7s%-7s%-7s%-10s%-6s%-6s%-6s%-6s\n", extra,
++ "MAC", "AID", "BSS", "RSSI0", "RSSI1", "RSSI2", "PhMd", "BW", "MCS", "SGI", "STBC");
++
++ for (i=1; i<MAX_LEN_OF_MAC_TABLE; i++)
++ {
++ PMAC_TABLE_ENTRY pEntry = &pAd->MacTab.Content[i];
++
++ if (strlen(extra) > (IW_PRIV_SIZE_MASK - 30))
++ break;
++ if ((pEntry->ValidAsCLI || pEntry->ValidAsApCli) && (pEntry->Sst == SST_ASSOC))
++ {
++ sprintf(extra, "%s%02X:%02X:%02X:%02X:%02X:%02X ", extra,
++ pEntry->Addr[0], pEntry->Addr[1], pEntry->Addr[2],
++ pEntry->Addr[3], pEntry->Addr[4], pEntry->Addr[5]);
++ sprintf(extra, "%s%-4d", extra, (int)pEntry->Aid);
++ sprintf(extra, "%s%-4d", extra, (int)pEntry->apidx);
++ sprintf(extra, "%s%-7d", extra, pEntry->RssiSample.AvgRssi0);
++ sprintf(extra, "%s%-7d", extra, pEntry->RssiSample.AvgRssi1);
++ sprintf(extra, "%s%-7d", extra, pEntry->RssiSample.AvgRssi2);
++ sprintf(extra, "%s%-10s", extra, GetPhyMode(pEntry->HTPhyMode.field.MODE));
++ sprintf(extra, "%s%-6s", extra, GetBW(pEntry->HTPhyMode.field.BW));
++ sprintf(extra, "%s%-6d", extra, pEntry->HTPhyMode.field.MCS);
++ sprintf(extra, "%s%-6d", extra, pEntry->HTPhyMode.field.ShortGI);
++ sprintf(extra, "%s%-6d", extra, pEntry->HTPhyMode.field.STBC);
++ sprintf(extra, "%s%-10d, %d, %d%%\n", extra, pEntry->DebugFIFOCount, pEntry->DebugTxCount,
++ (pEntry->DebugTxCount) ? ((pEntry->DebugTxCount-pEntry->DebugFIFOCount)*100/pEntry->DebugTxCount) : 0);
++ sprintf(extra, "%s\n", extra);
++ }
++ }
++
++ return TRUE;
++}
++
++
+--- /dev/null
++++ b/drivers/staging/rt2870/TODO
+@@ -0,0 +1,10 @@
++TODO:
++ - checkpatch.pl clean
++ - sparse clean
++ - port to in-kernel 80211 stack
++ - remove reading from /etc/ config files
++ - review by the wireless developer community
++
++Please send any patches or complaints about this driver to Greg
++Kroah-Hartman <greg@kroah.com> and don't bother the upstream wireless
++kernel developers about it, they want nothing to do with it.
+--- /dev/null
++++ b/drivers/staging/rt2870/wpa.h
+@@ -0,0 +1,357 @@
++/*
++ *************************************************************************
++ * Ralink Tech Inc.
++ * 5F., No.36, Taiyuan St., Jhubei City,
++ * Hsinchu County 302,
++ * Taiwan, R.O.C.
++ *
++ * (c) Copyright 2002-2007, Ralink Technology, Inc.
++ *
++ * This program is free software; you can redistribute it and/or modify *
++ * it under the terms of the GNU General Public License as published by *
++ * the Free Software Foundation; either version 2 of the License, or *
++ * (at your option) any later version. *
++ * *
++ * This program is distributed in the hope that it will be useful, *
++ * but WITHOUT ANY WARRANTY; without even the implied warranty of *
++ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the *
++ * GNU General Public License for more details. *
++ * *
++ * You should have received a copy of the GNU General Public License *
++ * along with this program; if not, write to the *
++ * Free Software Foundation, Inc., *
++ * 59 Temple Place - Suite 330, Boston, MA 02111-1307, USA. *
++ * *
++ *************************************************************************
++
++ Module Name:
++ wpa.h
++
++ Abstract:
++
++ Revision History:
++ Who When What
++ -------- ---------- ----------------------------------------------
++ Name Date Modification logs
++*/
++
++#ifndef __WPA_H__
++#define __WPA_H__
++
++// EAPOL Key descripter frame format related length
++#define LEN_KEY_DESC_NONCE 32
++#define LEN_KEY_DESC_IV 16
++#define LEN_KEY_DESC_RSC 8
++#define LEN_KEY_DESC_ID 8
++#define LEN_KEY_DESC_REPLAY 8
++#define LEN_KEY_DESC_MIC 16
++
++// The length is the EAPoL-Key frame except key data field.
++// Please refer to 802.11i-2004 ,Figure 43u in p.78
++#define LEN_EAPOL_KEY_MSG (sizeof(KEY_DESCRIPTER) - MAX_LEN_OF_RSNIE)
++
++// EAP Code Type.
++#define EAP_CODE_REQUEST 1
++#define EAP_CODE_RESPONSE 2
++#define EAP_CODE_SUCCESS 3
++#define EAP_CODE_FAILURE 4
++
++// EAPOL frame Protocol Version
++#define EAPOL_VER 1
++#define EAPOL_VER2 2
++
++// EAPOL-KEY Descriptor Type
++#define WPA1_KEY_DESC 0xfe
++#define WPA2_KEY_DESC 0x02
++
++// Key Descriptor Version of Key Information
++#define DESC_TYPE_TKIP 1
++#define DESC_TYPE_AES 2
++#define DESC_TYPE_MESH 3
++
++#define LEN_MSG1_2WAY 0x7f
++#define MAX_LEN_OF_EAP_HS 256
++
++#define LEN_MASTER_KEY 32
++
++// EAPOL EK, MK
++#define LEN_EAP_EK 16
++#define LEN_EAP_MICK 16
++#define LEN_EAP_KEY ((LEN_EAP_EK)+(LEN_EAP_MICK))
++// TKIP key related
++#define LEN_PMKID 16
++#define LEN_TKIP_EK 16
++#define LEN_TKIP_RXMICK 8
++#define LEN_TKIP_TXMICK 8
++#define LEN_AES_EK 16
++#define LEN_AES_KEY LEN_AES_EK
++#define LEN_TKIP_KEY ((LEN_TKIP_EK)+(LEN_TKIP_RXMICK)+(LEN_TKIP_TXMICK))
++#define TKIP_AP_TXMICK_OFFSET ((LEN_EAP_KEY)+(LEN_TKIP_EK))
++#define TKIP_AP_RXMICK_OFFSET (TKIP_AP_TXMICK_OFFSET+LEN_TKIP_TXMICK)
++#define TKIP_GTK_LENGTH ((LEN_TKIP_EK)+(LEN_TKIP_RXMICK)+(LEN_TKIP_TXMICK))
++#define LEN_PTK ((LEN_EAP_KEY)+(LEN_TKIP_KEY))
++#define MIN_LEN_OF_GTK 5
++
++// RSN IE Length definition
++#define MAX_LEN_OF_RSNIE 90
++#define MIN_LEN_OF_RSNIE 8
++
++//EAP Packet Type
++#define EAPPacket 0
++#define EAPOLStart 1
++#define EAPOLLogoff 2
++#define EAPOLKey 3
++#define EAPOLASFAlert 4
++#define EAPTtypeMax 5
++
++#define EAPOL_MSG_INVALID 0
++#define EAPOL_PAIR_MSG_1 1
++#define EAPOL_PAIR_MSG_2 2
++#define EAPOL_PAIR_MSG_3 3
++#define EAPOL_PAIR_MSG_4 4
++#define EAPOL_GROUP_MSG_1 5
++#define EAPOL_GROUP_MSG_2 6
++
++#define PAIRWISEKEY 1
++#define GROUPKEY 0
++
++// Retry timer counter initial value
++#define PEER_MSG1_RETRY_TIMER_CTR 0
++#define PEER_MSG3_RETRY_TIMER_CTR 10
++#define GROUP_MSG1_RETRY_TIMER_CTR 20
++
++
++#define EAPOL_START_DISABLE 0
++#define EAPOL_START_PSK 1
++#define EAPOL_START_1X 2
++
++#define MIX_CIPHER_WPA_TKIP_ON(x) (((x) & 0x08) != 0)
++#define MIX_CIPHER_WPA_AES_ON(x) (((x) & 0x04) != 0)
++#define MIX_CIPHER_WPA2_TKIP_ON(x) (((x) & 0x02) != 0)
++#define MIX_CIPHER_WPA2_AES_ON(x) (((x) & 0x01) != 0)
++
++#define ROUND_UP(__x, __y) \
++ (((ULONG)((__x)+((__y)-1))) & ((ULONG)~((__y)-1)))
++
++#define ADD_ONE_To_64BIT_VAR(_V) \
++{ \
++ UCHAR cnt = LEN_KEY_DESC_REPLAY; \
++ do \
++ { \
++ cnt--; \
++ _V[cnt]++; \
++ if (cnt == 0) \
++ break; \
++ }while (_V[cnt] == 0); \
++}
++
++#define IS_WPA_CAPABILITY(a) (((a) >= Ndis802_11AuthModeWPA) && ((a) <= Ndis802_11AuthModeWPA1PSKWPA2PSK))
++
++// EAPOL Key Information definition within Key descriptor format
++typedef struct PACKED _KEY_INFO
++{
++#ifdef RT_BIG_ENDIAN
++ UCHAR KeyAck:1;
++ UCHAR Install:1;
++ UCHAR KeyIndex:2;
++ UCHAR KeyType:1;
++ UCHAR KeyDescVer:3;
++ UCHAR Rsvd:3;
++ UCHAR EKD_DL:1; // EKD for AP; DL for STA
++ UCHAR Request:1;
++ UCHAR Error:1;
++ UCHAR Secure:1;
++ UCHAR KeyMic:1;
++#else
++ UCHAR KeyMic:1;
++ UCHAR Secure:1;
++ UCHAR Error:1;
++ UCHAR Request:1;
++ UCHAR EKD_DL:1; // EKD for AP; DL for STA
++ UCHAR Rsvd:3;
++ UCHAR KeyDescVer:3;
++ UCHAR KeyType:1;
++ UCHAR KeyIndex:2;
++ UCHAR Install:1;
++ UCHAR KeyAck:1;
++#endif
++} KEY_INFO, *PKEY_INFO;
++
++// EAPOL Key descriptor format
++typedef struct PACKED _KEY_DESCRIPTER
++{
++ UCHAR Type;
++ KEY_INFO KeyInfo;
++ UCHAR KeyLength[2];
++ UCHAR ReplayCounter[LEN_KEY_DESC_REPLAY];
++ UCHAR KeyNonce[LEN_KEY_DESC_NONCE];
++ UCHAR KeyIv[LEN_KEY_DESC_IV];
++ UCHAR KeyRsc[LEN_KEY_DESC_RSC];
++ UCHAR KeyId[LEN_KEY_DESC_ID];
++ UCHAR KeyMic[LEN_KEY_DESC_MIC];
++ UCHAR KeyDataLen[2];
++ UCHAR KeyData[MAX_LEN_OF_RSNIE];
++} KEY_DESCRIPTER, *PKEY_DESCRIPTER;
++
++typedef struct PACKED _EAPOL_PACKET
++{
++ UCHAR ProVer;
++ UCHAR ProType;
++ UCHAR Body_Len[2];
++ KEY_DESCRIPTER KeyDesc;
++} EAPOL_PACKET, *PEAPOL_PACKET;
++
++//802.11i D10 page 83
++typedef struct PACKED _GTK_ENCAP
++{
++#ifndef RT_BIG_ENDIAN
++ UCHAR Kid:2;
++ UCHAR tx:1;
++ UCHAR rsv:5;
++ UCHAR rsv1;
++#else
++ UCHAR rsv:5;
++ UCHAR tx:1;
++ UCHAR Kid:2;
++ UCHAR rsv1;
++#endif
++ UCHAR GTK[TKIP_GTK_LENGTH];
++} GTK_ENCAP, *PGTK_ENCAP;
++
++typedef struct PACKED _KDE_ENCAP
++{
++ UCHAR Type;
++ UCHAR Len;
++ UCHAR OUI[3];
++ UCHAR DataType;
++ GTK_ENCAP GTKEncap;
++} KDE_ENCAP, *PKDE_ENCAP;
++
++// For WPA1
++typedef struct PACKED _RSNIE {
++ UCHAR oui[4];
++ USHORT version;
++ UCHAR mcast[4];
++ USHORT ucount;
++ struct PACKED {
++ UCHAR oui[4];
++ }ucast[1];
++} RSNIE, *PRSNIE;
++
++// For WPA2
++typedef struct PACKED _RSNIE2 {
++ USHORT version;
++ UCHAR mcast[4];
++ USHORT ucount;
++ struct PACKED {
++ UCHAR oui[4];
++ }ucast[1];
++} RSNIE2, *PRSNIE2;
++
++// AKM Suite
++typedef struct PACKED _RSNIE_AUTH {
++ USHORT acount;
++ struct PACKED {
++ UCHAR oui[4];
++ }auth[1];
++} RSNIE_AUTH,*PRSNIE_AUTH;
++
++typedef union PACKED _RSN_CAPABILITIES {
++ struct PACKED {
++#ifdef RT_BIG_ENDIAN
++ USHORT Rsvd:10;
++ USHORT GTKSA_R_Counter:2;
++ USHORT PTKSA_R_Counter:2;
++ USHORT No_Pairwise:1;
++ USHORT PreAuth:1;
++#else
++ USHORT PreAuth:1;
++ USHORT No_Pairwise:1;
++ USHORT PTKSA_R_Counter:2;
++ USHORT GTKSA_R_Counter:2;
++ USHORT Rsvd:10;
++#endif
++ } field;
++ USHORT word;
++} RSN_CAPABILITIES, *PRSN_CAPABILITIES;
++
++typedef struct PACKED _EAP_HDR {
++ UCHAR ProVer;
++ UCHAR ProType;
++ UCHAR Body_Len[2];
++ UCHAR code;
++ UCHAR identifier;
++ UCHAR length[2]; // including code and identifier, followed by length-2 octets of data
++} EAP_HDR, *PEAP_HDR;
++
++// For supplicant state machine states. 802.11i Draft 4.1, p. 97
++// We simplified it
++typedef enum _WpaState
++{
++ SS_NOTUSE, // 0
++ SS_START, // 1
++ SS_WAIT_MSG_3, // 2
++ SS_WAIT_GROUP, // 3
++ SS_FINISH, // 4
++ SS_KEYUPDATE, // 5
++} WPA_STATE;
++
++//
++// The definition of the cipher combination
++//
++// bit3 bit2 bit1 bit0
++// +------------+------------+
++// | WPA | WPA2 |
++// +------+-----+------+-----+
++// | TKIP | AES | TKIP | AES |
++// | 0 | 1 | 1 | 0 | -> 0x06
++// | 0 | 1 | 1 | 1 | -> 0x07
++// | 1 | 0 | 0 | 1 | -> 0x09
++// | 1 | 0 | 1 | 1 | -> 0x0B
++// | 1 | 1 | 0 | 1 | -> 0x0D
++// | 1 | 1 | 1 | 0 | -> 0x0E
++// | 1 | 1 | 1 | 1 | -> 0x0F
++// +------+-----+------+-----+
++//
++typedef enum _WpaMixPairCipher
++{
++ MIX_CIPHER_NOTUSE = 0x00,
++ WPA_NONE_WPA2_TKIPAES = 0x03, // WPA2-TKIPAES
++ WPA_AES_WPA2_TKIP = 0x06,
++ WPA_AES_WPA2_TKIPAES = 0x07,
++ WPA_TKIP_WPA2_AES = 0x09,
++ WPA_TKIP_WPA2_TKIPAES = 0x0B,
++ WPA_TKIPAES_WPA2_NONE = 0x0C, // WPA-TKIPAES
++ WPA_TKIPAES_WPA2_AES = 0x0D,
++ WPA_TKIPAES_WPA2_TKIP = 0x0E,
++ WPA_TKIPAES_WPA2_TKIPAES = 0x0F,
++} WPA_MIX_PAIR_CIPHER;
++
++typedef struct PACKED _RSN_IE_HEADER_STRUCT {
++ UCHAR Eid;
++ UCHAR Length;
++ USHORT Version; // Little endian format
++} RSN_IE_HEADER_STRUCT, *PRSN_IE_HEADER_STRUCT;
++
++// Cipher suite selector types
++typedef struct PACKED _CIPHER_SUITE_STRUCT {
++ UCHAR Oui[3];
++ UCHAR Type;
++} CIPHER_SUITE_STRUCT, *PCIPHER_SUITE_STRUCT;
++
++// Authentication and Key Management suite selector
++typedef struct PACKED _AKM_SUITE_STRUCT {
++ UCHAR Oui[3];
++ UCHAR Type;
++} AKM_SUITE_STRUCT, *PAKM_SUITE_STRUCT;
++
++// RSN capability
++typedef struct PACKED _RSN_CAPABILITY {
++ USHORT Rsv:10;
++ USHORT GTKSAReplayCnt:2;
++ USHORT PTKSAReplayCnt:2;
++ USHORT NoPairwise:1;
++ USHORT PreAuth:1;
++} RSN_CAPABILITY, *PRSN_CAPABILITY;
++
++#endif
projects / ipfire-2.x.git / blobdiff