drivers/staging/rtl8723bs/os_dep/ioctl_linux.c

   1 // SPDX-License-Identifier: GPL-2.0
   2 /******************************************************************************
   3  *
   4  * Copyright(c) 2007 - 2012 Realtek Corporation. All rights reserved.
   5  *
   6  ******************************************************************************/
   7 #define _IOCTL_LINUX_C_
   8
   9 #include <linux/etherdevice.h>
  10 #include <drv_types.h>
  11 #include <rtw_debug.h>
  12 #include <rtw_mp.h>
  13 #include <hal_btcoex.h>
  14 #include <linux/jiffies.h>
  15 #include <linux/kernel.h>
  16
  17 #define RTL_IOCTL_WPA_SUPPLICANT        (SIOCIWFIRSTPRIV+30)
  18
  19 #define SCAN_ITEM_SIZE 768
  20 #define MAX_CUSTOM_LEN 64
  21 #define RATE_COUNT 4
  22
  23 /*  combo scan */
  24 #define WEXT_CSCAN_HEADER               "CSCAN S\x01\x00\x00S\x00"
  25 #define WEXT_CSCAN_HEADER_SIZE          12
  26 #define WEXT_CSCAN_SSID_SECTION         'S'
  27 #define WEXT_CSCAN_CHANNEL_SECTION      'C'
  28 #define WEXT_CSCAN_ACTV_DWELL_SECTION   'A'
  29 #define WEXT_CSCAN_PASV_DWELL_SECTION   'P'
  30 #define WEXT_CSCAN_HOME_DWELL_SECTION   'H'
  31 #define WEXT_CSCAN_TYPE_SECTION         'T'
  32
  33 static u32 rtw_rates[] = {1000000, 2000000, 5500000, 11000000,
  34         6000000, 9000000, 12000000, 18000000, 24000000, 36000000, 48000000, 54000000};
  35
  36 static const char * const iw_operation_mode[] = {
  37         "Auto", "Ad-Hoc", "Managed",  "Master", "Repeater", "Secondary", "Monitor"
  38 };
  39
  40 void indicate_wx_scan_complete_event(struct adapter *padapter)
  41 {
  42         union iwreq_data wrqu;
  43
  44         memset(&wrqu, 0, sizeof(union iwreq_data));
  45
  46         /* DBG_871X("+rtw_indicate_wx_scan_complete_event\n"); */
  47 }
  48
  49
  50 void rtw_indicate_wx_assoc_event(struct adapter *padapter)
  51 {
  52         union iwreq_data wrqu;
  53         struct  mlme_priv *pmlmepriv = &padapter->mlmepriv;
  54         struct mlme_ext_priv *pmlmeext = &padapter->mlmeextpriv;
  55         struct mlme_ext_info *pmlmeinfo = &(pmlmeext->mlmext_info);
  56         struct wlan_bssid_ex            *pnetwork = (struct wlan_bssid_ex *)(&(pmlmeinfo->network));
  57
  58         memset(&wrqu, 0, sizeof(union iwreq_data));
  59
  60         wrqu.ap_addr.sa_family = ARPHRD_ETHER;
  61
  62         if (check_fwstate(pmlmepriv, WIFI_ADHOC_MASTER_STATE) ==true)
  63                 memcpy(wrqu.ap_addr.sa_data, pnetwork->MacAddress, ETH_ALEN);
  64         else
  65                 memcpy(wrqu.ap_addr.sa_data, pmlmepriv->cur_network.network.MacAddress, ETH_ALEN);
  66
  67         DBG_871X_LEVEL(_drv_always_, "assoc success\n");
  68 }
  69
  70 void rtw_indicate_wx_disassoc_event(struct adapter *padapter)
  71 {
  72         union iwreq_data wrqu;
  73
  74         memset(&wrqu, 0, sizeof(union iwreq_data));
  75
  76         wrqu.ap_addr.sa_family = ARPHRD_ETHER;
  77         eth_zero_addr(wrqu.ap_addr.sa_data);
  78 }
  79
  80 static char *translate_scan(struct adapter *padapter,
  81                                 struct iw_request_info* info, struct wlan_network *pnetwork,
  82                                 char *start, char *stop)
  83 {
  84         struct iw_event iwe;
  85         u16 cap;
  86         u32 ht_ielen = 0;
  87         char *custom = NULL;
  88         char *p;
  89         u16 max_rate = 0, rate, ht_cap =false, vht_cap = false;
  90         u32 i = 0;
  91         u8 bw_40MHz = 0, short_GI = 0;
  92         u16 mcs_rate = 0, vht_data_rate = 0;
  93         u8 ie_offset = (pnetwork->network.Reserved[0] == 2? 0:12);
  94         struct mlme_priv *pmlmepriv = &(padapter->mlmepriv);
  95         u8 ss, sq;
  96
  97         /*  AP MAC address  */
  98         iwe.cmd = SIOCGIWAP;
  99         iwe.u.ap_addr.sa_family = ARPHRD_ETHER;
 100
 101         memcpy(iwe.u.ap_addr.sa_data, pnetwork->network.MacAddress, ETH_ALEN);
 102         start = iwe_stream_add_event(info, start, stop, &iwe, IW_EV_ADDR_LEN);
 103
 104         /* Add the ESSID */
 105         iwe.cmd = SIOCGIWESSID;
 106         iwe.u.data.flags = 1;
 107         iwe.u.data.length = min((u16)pnetwork->network.Ssid.SsidLength, (u16)32);
 108         start = iwe_stream_add_point(info, start, stop, &iwe, pnetwork->network.Ssid.Ssid);
 109
 110         /* parsing HT_CAP_IE */
 111         if (pnetwork->network.Reserved[0] == 2) { /*  Probe Request */
 112                 p = rtw_get_ie(&pnetwork->network.IEs[0], _HT_CAPABILITY_IE_, &ht_ielen, pnetwork->network.IELength);
 113         } else {
 114                 p = rtw_get_ie(&pnetwork->network.IEs[12], _HT_CAPABILITY_IE_, &ht_ielen, pnetwork->network.IELength-12);
 115         }
 116         if (p && ht_ielen>0) {
 117                 struct rtw_ieee80211_ht_cap *pht_capie;
 118                 ht_cap = true;
 119                 pht_capie = (struct rtw_ieee80211_ht_cap *)(p+2);
 120                 memcpy(&mcs_rate , pht_capie->supp_mcs_set, 2);
 121                 bw_40MHz = (le16_to_cpu(pht_capie->cap_info) & IEEE80211_HT_CAP_SUP_WIDTH) ? 1 : 0;
 122                 short_GI = (le16_to_cpu(pht_capie->cap_info) & (IEEE80211_HT_CAP_SGI_20 | IEEE80211_HT_CAP_SGI_40)) ? 1 : 0;
 123         }
 124
 125         /* Add the protocol name */
 126         iwe.cmd = SIOCGIWNAME;
 127         if (rtw_is_cckratesonly_included((u8 *)&pnetwork->network.SupportedRates)) {
 128                 if (ht_cap)
 129                         snprintf(iwe.u.name, IFNAMSIZ, "IEEE 802.11bn");
 130                 else
 131                 snprintf(iwe.u.name, IFNAMSIZ, "IEEE 802.11b");
 132         } else if (rtw_is_cckrates_included((u8 *)&pnetwork->network.SupportedRates)) {
 133                 if (ht_cap)
 134                         snprintf(iwe.u.name, IFNAMSIZ, "IEEE 802.11bgn");
 135                 else
 136                         snprintf(iwe.u.name, IFNAMSIZ, "IEEE 802.11bg");
 137         } else {
 138                 if (pnetwork->network.Configuration.DSConfig > 14) {
 139                         if (vht_cap)
 140                                 snprintf(iwe.u.name, IFNAMSIZ, "IEEE 802.11AC");
 141                         else if (ht_cap)
 142                                 snprintf(iwe.u.name, IFNAMSIZ, "IEEE 802.11an");
 143                         else
 144                                 snprintf(iwe.u.name, IFNAMSIZ, "IEEE 802.11a");
 145                 } else {
 146                         if (ht_cap)
 147                                 snprintf(iwe.u.name, IFNAMSIZ, "IEEE 802.11gn");
 148                         else
 149                                 snprintf(iwe.u.name, IFNAMSIZ, "IEEE 802.11g");
 150                 }
 151         }
 152
 153         start = iwe_stream_add_event(info, start, stop, &iwe, IW_EV_CHAR_LEN);
 154
 155           /* Add mode */
 156         if (pnetwork->network.Reserved[0] == 2) { /*  Probe Request */
 157                 cap = 0;
 158         } else {
 159                 __le16 le_tmp;
 160
 161                 iwe.cmd = SIOCGIWMODE;
 162                 memcpy((u8 *)&le_tmp, rtw_get_capability_from_ie(pnetwork->network.IEs), 2);
 163                 cap = le16_to_cpu(le_tmp);
 164         }
 165
 166         if (cap & (WLAN_CAPABILITY_IBSS |WLAN_CAPABILITY_BSS)) {
 167                 if (cap & WLAN_CAPABILITY_BSS)
 168                         iwe.u.mode = IW_MODE_MASTER;
 169                 else
 170                         iwe.u.mode = IW_MODE_ADHOC;
 171
 172                 start = iwe_stream_add_event(info, start, stop, &iwe, IW_EV_UINT_LEN);
 173         }
 174
 175         if (pnetwork->network.Configuration.DSConfig<1 /*|| pnetwork->network.Configuration.DSConfig>14*/)
 176                 pnetwork->network.Configuration.DSConfig = 1;
 177
 178          /* Add frequency/channel */
 179         iwe.cmd = SIOCGIWFREQ;
 180         iwe.u.freq.m = rtw_ch2freq(pnetwork->network.Configuration.DSConfig) * 100000;
 181         iwe.u.freq.e = 1;
 182         iwe.u.freq.i = pnetwork->network.Configuration.DSConfig;
 183         start = iwe_stream_add_event(info, start, stop, &iwe, IW_EV_FREQ_LEN);
 184
 185         /* Add encryption capability */
 186         iwe.cmd = SIOCGIWENCODE;
 187         if (cap & WLAN_CAPABILITY_PRIVACY)
 188                 iwe.u.data.flags = IW_ENCODE_ENABLED | IW_ENCODE_NOKEY;
 189         else
 190                 iwe.u.data.flags = IW_ENCODE_DISABLED;
 191         iwe.u.data.length = 0;
 192         start = iwe_stream_add_point(info, start, stop, &iwe, pnetwork->network.Ssid.Ssid);
 193
 194         /*Add basic and extended rates */
 195         max_rate = 0;
 196         custom = kzalloc(MAX_CUSTOM_LEN, GFP_ATOMIC);
 197         if (!custom)
 198                 return start;
 199         p = custom;
 200         p += snprintf(p, MAX_CUSTOM_LEN - (p - custom), " Rates (Mb/s): ");
 201         while (pnetwork->network.SupportedRates[i]!= 0) {
 202                 rate = pnetwork->network.SupportedRates[i]&0x7F;
 203                 if (rate > max_rate)
 204                         max_rate = rate;
 205                 p += snprintf(p, MAX_CUSTOM_LEN - (p - custom),
 206                               "%d%s ", rate >> 1, (rate & 1) ? ".5" : "");
 207                 i++;
 208         }
 209
 210         if (vht_cap) {
 211                 max_rate = vht_data_rate;
 212         } else if (ht_cap) {
 213                 if (mcs_rate&0x8000) { /* MCS15 */
 214                         max_rate = (bw_40MHz) ? ((short_GI)?300:270):((short_GI)?144:130);
 215                 } else { /* default MCS7 */
 216                         /* DBG_871X("wx_get_scan, mcs_rate_bitmap = 0x%x\n", mcs_rate); */
 217                         max_rate = (bw_40MHz) ? ((short_GI)?150:135):((short_GI)?72:65);
 218                 }
 219
 220                 max_rate = max_rate*2;/* Mbps/2; */
 221         }
 222
 223         iwe.cmd = SIOCGIWRATE;
 224         iwe.u.bitrate.fixed = iwe.u.bitrate.disabled = 0;
 225         iwe.u.bitrate.value = max_rate * 500000;
 226         start = iwe_stream_add_event(info, start, stop, &iwe, IW_EV_PARAM_LEN);
 227
 228         /* parsing WPA/WPA2 IE */
 229         if (pnetwork->network.Reserved[0] != 2) { /*  Probe Request */
 230                 u8 *buf;
 231                 u8 wpa_ie[255], rsn_ie[255];
 232                 u16 wpa_len = 0, rsn_len = 0;
 233                 u8 *p;
 234                 rtw_get_sec_ie(pnetwork->network.IEs, pnetwork->network.IELength, rsn_ie, &rsn_len, wpa_ie, &wpa_len);
 235                 RT_TRACE(_module_rtl871x_mlme_c_, _drv_info_, ("rtw_wx_get_scan: ssid =%s\n", pnetwork->network.Ssid.Ssid));
 236                 RT_TRACE(_module_rtl871x_mlme_c_, _drv_info_, ("rtw_wx_get_scan: wpa_len =%d rsn_len =%d\n", wpa_len, rsn_len));
 237
 238                 buf = kzalloc(MAX_WPA_IE_LEN*2, GFP_ATOMIC);
 239                 if (!buf)
 240                         return start;
 241                 if (wpa_len > 0) {
 242                         p =buf;
 243                         p += sprintf(p, "wpa_ie =");
 244                         for (i = 0; i < wpa_len; i++)
 245                                 p += sprintf(p, "%02x", wpa_ie[i]);
 246
 247                         if (wpa_len > 100) {
 248                                 printk("-----------------Len %d----------------\n", wpa_len);
 249                                 for (i = 0; i < wpa_len; i++)
 250                                         printk("%02x ", wpa_ie[i]);
 251                                 printk("\n");
 252                                 printk("-----------------Len %d----------------\n", wpa_len);
 253                         }
 254
 255                         memset(&iwe, 0, sizeof(iwe));
 256                         iwe.cmd = IWEVCUSTOM;
 257                         iwe.u.data.length = strlen(buf);
 258                         start = iwe_stream_add_point(info, start, stop, &iwe, buf);
 259
 260                         memset(&iwe, 0, sizeof(iwe));
 261                         iwe.cmd =IWEVGENIE;
 262                         iwe.u.data.length = wpa_len;
 263                         start = iwe_stream_add_point(info, start, stop, &iwe, wpa_ie);
 264                 }
 265                 if (rsn_len > 0) {
 266                         p = buf;
 267                         memset(buf, 0, MAX_WPA_IE_LEN*2);
 268                         p += sprintf(p, "rsn_ie =");
 269                         for (i = 0; i < rsn_len; i++)
 270                                 p += sprintf(p, "%02x", rsn_ie[i]);
 271                         memset(&iwe, 0, sizeof(iwe));
 272                         iwe.cmd = IWEVCUSTOM;
 273                         iwe.u.data.length = strlen(buf);
 274                         start = iwe_stream_add_point(info, start, stop, &iwe, buf);
 275
 276                         memset(&iwe, 0, sizeof(iwe));
 277                         iwe.cmd =IWEVGENIE;
 278                         iwe.u.data.length = rsn_len;
 279                         start = iwe_stream_add_point(info, start, stop, &iwe, rsn_ie);
 280                 }
 281                 kfree(buf);
 282         }
 283
 284         { /* parsing WPS IE */
 285                 uint cnt = 0, total_ielen;
 286                 u8 *wpsie_ptr = NULL;
 287                 uint wps_ielen = 0;
 288
 289                 u8 *ie_ptr;
 290                 total_ielen = pnetwork->network.IELength - ie_offset;
 291
 292                 if (pnetwork->network.Reserved[0] == 2) { /*  Probe Request */
 293                         ie_ptr = pnetwork->network.IEs;
 294                         total_ielen = pnetwork->network.IELength;
 295                 } else {    /*  Beacon or Probe Respones */
 296                         ie_ptr = pnetwork->network.IEs + _FIXED_IE_LENGTH_;
 297                         total_ielen = pnetwork->network.IELength - _FIXED_IE_LENGTH_;
 298                 }
 299
 300                 while (cnt < total_ielen) {
 301                         if (rtw_is_wps_ie(&ie_ptr[cnt], &wps_ielen) && (wps_ielen>2)) {
 302                                 wpsie_ptr = &ie_ptr[cnt];
 303                                 iwe.cmd =IWEVGENIE;
 304                                 iwe.u.data.length = (u16)wps_ielen;
 305                                 start = iwe_stream_add_point(info, start, stop, &iwe, wpsie_ptr);
 306                         }
 307                         cnt+=ie_ptr[cnt+1]+2; /* goto next */
 308                 }
 309         }
 310
 311         /* Add quality statistics */
 312         iwe.cmd = IWEVQUAL;
 313         iwe.u.qual.updated = IW_QUAL_QUAL_UPDATED | IW_QUAL_LEVEL_UPDATED
 314         #if defined(CONFIG_SIGNAL_DISPLAY_DBM) && defined(CONFIG_BACKGROUND_NOISE_MONITOR)
 315                 | IW_QUAL_NOISE_UPDATED
 316         #else
 317                 | IW_QUAL_NOISE_INVALID
 318         #endif
 319         #ifdef CONFIG_SIGNAL_DISPLAY_DBM
 320                 | IW_QUAL_DBM
 321         #endif
 322         ;
 323
 324         if (check_fwstate(pmlmepriv, _FW_LINKED) == true &&
 325                 is_same_network(&pmlmepriv->cur_network.network, &pnetwork->network, 0)) {
 326                 ss = padapter->recvpriv.signal_strength;
 327                 sq = padapter->recvpriv.signal_qual;
 328         } else {
 329                 ss = pnetwork->network.PhyInfo.SignalStrength;
 330                 sq = pnetwork->network.PhyInfo.SignalQuality;
 331         }
 332
 333
 334         #ifdef CONFIG_SIGNAL_DISPLAY_DBM
 335         iwe.u.qual.level = (u8)translate_percentage_to_dbm(ss);/* dbm */
 336         #else
 337         #ifdef CONFIG_SKIP_SIGNAL_SCALE_MAPPING
 338         {
 339                 /* Do signal scale mapping when using percentage as the unit of signal strength, since the scale mapping is skipped in odm */
 340
 341                 struct hal_com_data *pHal = GET_HAL_DATA(padapter);
 342
 343                 iwe.u.qual.level = (u8)odm_SignalScaleMapping(&pHal->odmpriv, ss);
 344         }
 345         #else
 346         iwe.u.qual.level = (u8)ss;/*  */
 347         #endif
 348         #endif
 349
 350         iwe.u.qual.qual = (u8)sq;   /*  signal quality */
 351
 352         #if defined(CONFIG_SIGNAL_DISPLAY_DBM) && defined(CONFIG_BACKGROUND_NOISE_MONITOR)
 353         {
 354                 s16 tmp_noise = 0;
 355                 rtw_hal_get_odm_var(padapter, HAL_ODM_NOISE_MONITOR,&(pnetwork->network.Configuration.DSConfig), &(tmp_noise));
 356                 iwe.u.qual.noise = tmp_noise ;
 357         }
 358         #else
 359         iwe.u.qual.noise = 0; /*  noise level */
 360         #endif
 361
 362         /* DBG_871X("iqual =%d, ilevel =%d, inoise =%d, iupdated =%d\n", iwe.u.qual.qual, iwe.u.qual.level , iwe.u.qual.noise, iwe.u.qual.updated); */
 363
 364         start = iwe_stream_add_event(info, start, stop, &iwe, IW_EV_QUAL_LEN);
 365
 366         {
 367                 u8 *buf;
 368                 u8 *p, *pos;
 369
 370                 buf = kzalloc(MAX_WPA_IE_LEN, GFP_ATOMIC);
 371                 if (!buf)
 372                         goto exit;
 373                 p = buf;
 374                 pos = pnetwork->network.Reserved;
 375                 p += sprintf(p, "fm =%02X%02X", pos[1], pos[0]);
 376                 memset(&iwe, 0, sizeof(iwe));
 377                 iwe.cmd = IWEVCUSTOM;
 378                 iwe.u.data.length = strlen(buf);
 379                 start = iwe_stream_add_point(info, start, stop, &iwe, buf);
 380                 kfree(buf);
 381         }
 382 exit:
 383         kfree(custom);
 384
 385         return start;
 386 }
 387
 388 static int wpa_set_auth_algs(struct net_device *dev, u32 value)
 389 {
 390         struct adapter *padapter = (struct adapter *)rtw_netdev_priv(dev);
 391         int ret = 0;
 392
 393         if ((value & WLAN_AUTH_SHARED_KEY) && (value & WLAN_AUTH_OPEN)) {
 394                 DBG_871X("wpa_set_auth_algs, WLAN_AUTH_SHARED_KEY and WLAN_AUTH_OPEN [value:0x%x]\n", value);
 395                 padapter->securitypriv.ndisencryptstatus = Ndis802_11Encryption1Enabled;
 396                 padapter->securitypriv.ndisauthtype = Ndis802_11AuthModeAutoSwitch;
 397                 padapter->securitypriv.dot11AuthAlgrthm = dot11AuthAlgrthm_Auto;
 398         } else if (value & WLAN_AUTH_SHARED_KEY)        {
 399                 DBG_871X("wpa_set_auth_algs, WLAN_AUTH_SHARED_KEY  [value:0x%x]\n", value);
 400                 padapter->securitypriv.ndisencryptstatus = Ndis802_11Encryption1Enabled;
 401
 402                 padapter->securitypriv.ndisauthtype = Ndis802_11AuthModeShared;
 403                 padapter->securitypriv.dot11AuthAlgrthm = dot11AuthAlgrthm_Shared;
 404         } else if (value & WLAN_AUTH_OPEN) {
 405                 DBG_871X("wpa_set_auth_algs, WLAN_AUTH_OPEN\n");
 406                 /* padapter->securitypriv.ndisencryptstatus = Ndis802_11EncryptionDisabled; */
 407                 if (padapter->securitypriv.ndisauthtype < Ndis802_11AuthModeWPAPSK) {
 408                         padapter->securitypriv.ndisauthtype = Ndis802_11AuthModeOpen;
 409                         padapter->securitypriv.dot11AuthAlgrthm = dot11AuthAlgrthm_Open;
 410                 }
 411         } else if (value & WLAN_AUTH_LEAP) {
 412                 DBG_871X("wpa_set_auth_algs, WLAN_AUTH_LEAP\n");
 413         } else {
 414                 DBG_871X("wpa_set_auth_algs, error!\n");
 415                 ret = -EINVAL;
 416         }
 417
 418         return ret;
 419
 420 }
 421
 422 static int wpa_set_encryption(struct net_device *dev, struct ieee_param *param, u32 param_len)
 423 {
 424         int ret = 0;
 425         u32 wep_key_idx, wep_key_len, wep_total_len;
 426         struct ndis_802_11_wep   *pwep = NULL;
 427         struct adapter *padapter = (struct adapter *)rtw_netdev_priv(dev);
 428         struct mlme_priv *pmlmepriv = &padapter->mlmepriv;
 429         struct security_priv *psecuritypriv = &padapter->securitypriv;
 430
 431         param->u.crypt.err = 0;
 432         param->u.crypt.alg[IEEE_CRYPT_ALG_NAME_LEN - 1] = '\0';
 433
 434         if (param_len < (u32)((u8 *)param->u.crypt.key - (u8 *)param) + param->u.crypt.key_len) {
 435                 ret =  -EINVAL;
 436                 goto exit;
 437         }
 438
 439         if (param->sta_addr[0] == 0xff && param->sta_addr[1] == 0xff &&
 440             param->sta_addr[2] == 0xff && param->sta_addr[3] == 0xff &&
 441             param->sta_addr[4] == 0xff && param->sta_addr[5] == 0xff) {
 442                 if (param->u.crypt.idx >= WEP_KEYS ||
 443                     param->u.crypt.idx >= BIP_MAX_KEYID) {
 444                         ret = -EINVAL;
 445                         goto exit;
 446                 }
 447         } else {
 448                 {
 449                         ret = -EINVAL;
 450                         goto exit;
 451                 }
 452         }
 453
 454         if (strcmp(param->u.crypt.alg, "WEP") == 0) {
 455                 RT_TRACE(_module_rtl871x_ioctl_os_c, _drv_err_, ("wpa_set_encryption, crypt.alg = WEP\n"));
 456                 DBG_871X("wpa_set_encryption, crypt.alg = WEP\n");
 457
 458                 padapter->securitypriv.ndisencryptstatus = Ndis802_11Encryption1Enabled;
 459                 padapter->securitypriv.dot11PrivacyAlgrthm = _WEP40_;
 460                 padapter->securitypriv.dot118021XGrpPrivacy = _WEP40_;
 461
 462                 wep_key_idx = param->u.crypt.idx;
 463                 wep_key_len = param->u.crypt.key_len;
 464
 465                 RT_TRACE(_module_rtl871x_ioctl_os_c, _drv_info_, ("(1)wep_key_idx =%d\n", wep_key_idx));
 466                 DBG_871X("(1)wep_key_idx =%d\n", wep_key_idx);
 467
 468                 if (wep_key_idx > WEP_KEYS)
 469                         return -EINVAL;
 470
 471                 RT_TRACE(_module_rtl871x_ioctl_os_c, _drv_info_, ("(2)wep_key_idx =%d\n", wep_key_idx));
 472
 473                 if (wep_key_len > 0) {
 474                         wep_key_len = wep_key_len <= 5 ? 5 : 13;
 475                         wep_total_len = wep_key_len + FIELD_OFFSET(struct ndis_802_11_wep, KeyMaterial);
 476                         pwep = kzalloc(wep_total_len, GFP_KERNEL);
 477                         if (pwep == NULL) {
 478                                 RT_TRACE(_module_rtl871x_ioctl_os_c, _drv_err_, (" wpa_set_encryption: pwep allocate fail !!!\n"));
 479                                 goto exit;
 480                         }
 481
 482                         pwep->KeyLength = wep_key_len;
 483                         pwep->Length = wep_total_len;
 484
 485                         if (wep_key_len == 13) {
 486                                 padapter->securitypriv.dot11PrivacyAlgrthm = _WEP104_;
 487                                 padapter->securitypriv.dot118021XGrpPrivacy = _WEP104_;
 488                         }
 489                 } else {
 490                         ret = -EINVAL;
 491                         goto exit;
 492                 }
 493
 494                 pwep->KeyIndex = wep_key_idx;
 495                 pwep->KeyIndex |= 0x80000000;
 496
 497                 memcpy(pwep->KeyMaterial,  param->u.crypt.key, pwep->KeyLength);
 498
 499                 if (param->u.crypt.set_tx) {
 500                         DBG_871X("wep, set_tx = 1\n");
 501
 502                         if (rtw_set_802_11_add_wep(padapter, pwep) == (u8)_FAIL)
 503                                 ret = -EOPNOTSUPP ;
 504                 } else {
 505                         DBG_871X("wep, set_tx = 0\n");
 506
 507                         /* don't update "psecuritypriv->dot11PrivacyAlgrthm" and */
 508                         /* psecuritypriv->dot11PrivacyKeyIndex =keyid", but can rtw_set_key to fw/cam */
 509
 510                         if (wep_key_idx >= WEP_KEYS) {
 511                                 ret = -EOPNOTSUPP ;
 512                                 goto exit;
 513                         }
 514
 515                         memcpy(&(psecuritypriv->dot11DefKey[wep_key_idx].skey[0]), pwep->KeyMaterial, pwep->KeyLength);
 516                         psecuritypriv->dot11DefKeylen[wep_key_idx]=pwep->KeyLength;
 517                         rtw_set_key(padapter, psecuritypriv, wep_key_idx, 0, true);
 518                 }
 519
 520                 goto exit;
 521         }
 522
 523         if (padapter->securitypriv.dot11AuthAlgrthm == dot11AuthAlgrthm_8021X) { /*  802_1x */
 524                 struct sta_info *psta, *pbcmc_sta;
 525                 struct sta_priv *pstapriv = &padapter->stapriv;
 526
 527                 if (check_fwstate(pmlmepriv, WIFI_STATION_STATE | WIFI_MP_STATE) == true) { /* sta mode */
 528                         psta = rtw_get_stainfo(pstapriv, get_bssid(pmlmepriv));
 529                         if (psta == NULL) {
 530                                 /* DEBUG_ERR(("Set wpa_set_encryption: Obtain Sta_info fail\n")); */
 531                         } else {
 532                                 /* Jeff: don't disable ieee8021x_blocked while clearing key */
 533                                 if (strcmp(param->u.crypt.alg, "none") != 0)
 534                                         psta->ieee8021x_blocked = false;
 535
 536                                 if ((padapter->securitypriv.ndisencryptstatus == Ndis802_11Encryption2Enabled)||
 537                                                 (padapter->securitypriv.ndisencryptstatus ==  Ndis802_11Encryption3Enabled)) {
 538                                         psta->dot118021XPrivacy = padapter->securitypriv.dot11PrivacyAlgrthm;
 539                                 }
 540
 541                                 if (param->u.crypt.set_tx == 1) { /* pairwise key */
 542                                         memcpy(psta->dot118021x_UncstKey.skey,  param->u.crypt.key, (param->u.crypt.key_len>16 ?16:param->u.crypt.key_len));
 543
 544                                         if (strcmp(param->u.crypt.alg, "TKIP") == 0) { /* set mic key */
 545                                                 /* DEBUG_ERR(("\nset key length :param->u.crypt.key_len =%d\n", param->u.crypt.key_len)); */
 546                                                 memcpy(psta->dot11tkiptxmickey.skey, &(param->u.crypt.key[16]), 8);
 547                                                 memcpy(psta->dot11tkiprxmickey.skey, &(param->u.crypt.key[24]), 8);
 548
 549                                                 padapter->securitypriv.busetkipkey =false;
 550                                                 /* _set_timer(&padapter->securitypriv.tkip_timer, 50); */
 551                                         }
 552
 553                                         /* DEBUG_ERR((" param->u.crypt.key_len =%d\n", param->u.crypt.key_len)); */
 554                                         DBG_871X(" ~~~~set sta key:unicastkey\n");
 555
 556                                         rtw_setstakey_cmd(padapter, psta, true, true);
 557                                 } else { /* group key */
 558                                         if (strcmp(param->u.crypt.alg, "TKIP") == 0 || strcmp(param->u.crypt.alg, "CCMP") == 0) {
 559                                                 memcpy(padapter->securitypriv.dot118021XGrpKey[param->u.crypt.idx].skey,  param->u.crypt.key, (param->u.crypt.key_len>16 ?16:param->u.crypt.key_len));
 560                                                 /* only TKIP group key need to install this */
 561                                                 if (param->u.crypt.key_len > 16) {
 562                                                         memcpy(padapter->securitypriv.dot118021XGrptxmickey[param->u.crypt.idx].skey,&(param->u.crypt.key[16]), 8);
 563                                                         memcpy(padapter->securitypriv.dot118021XGrprxmickey[param->u.crypt.idx].skey,&(param->u.crypt.key[24]), 8);
 564                                                 }
 565                                                 padapter->securitypriv.binstallGrpkey = true;
 566                                                 /* DEBUG_ERR((" param->u.crypt.key_len =%d\n", param->u.crypt.key_len)); */
 567                                                 DBG_871X(" ~~~~set sta key:groupkey\n");
 568
 569                                                 padapter->securitypriv.dot118021XGrpKeyid = param->u.crypt.idx;
 570
 571                                                 rtw_set_key(padapter,&padapter->securitypriv, param->u.crypt.idx, 1, true);
 572                                         } else if (strcmp(param->u.crypt.alg, "BIP") == 0) {
 573                                                 /* printk("BIP key_len =%d , index =%d @@@@@@@@@@@@@@@@@@\n", param->u.crypt.key_len, param->u.crypt.idx); */
 574                                                 /* save the IGTK key, length 16 bytes */
 575                                                 memcpy(padapter->securitypriv.dot11wBIPKey[param->u.crypt.idx].skey,  param->u.crypt.key, (param->u.crypt.key_len>16 ?16:param->u.crypt.key_len));
 576                                                 /*printk("IGTK key below:\n");
 577                                                 for (no = 0;no<16;no++)
 578                                                         printk(" %02x ", padapter->securitypriv.dot11wBIPKey[param->u.crypt.idx].skey[no]);
 579                                                 printk("\n");*/
 580                                                 padapter->securitypriv.dot11wBIPKeyid = param->u.crypt.idx;
 581                                                 padapter->securitypriv.binstallBIPkey = true;
 582                                                 DBG_871X(" ~~~~set sta key:IGKT\n");
 583                                         }
 584                                 }
 585                         }
 586
 587                         pbcmc_sta =rtw_get_bcmc_stainfo(padapter);
 588                         if (pbcmc_sta == NULL) {
 589                                 /* DEBUG_ERR(("Set OID_802_11_ADD_KEY: bcmc stainfo is null\n")); */
 590                         } else {
 591                                 /* Jeff: don't disable ieee8021x_blocked while clearing key */
 592                                 if (strcmp(param->u.crypt.alg, "none") != 0)
 593                                         pbcmc_sta->ieee8021x_blocked = false;
 594
 595                                 if ((padapter->securitypriv.ndisencryptstatus == Ndis802_11Encryption2Enabled)||
 596                                                 (padapter->securitypriv.ndisencryptstatus ==  Ndis802_11Encryption3Enabled)) {
 597                                         pbcmc_sta->dot118021XPrivacy = padapter->securitypriv.dot11PrivacyAlgrthm;
 598                                 }
 599                         }
 600                 } else if (check_fwstate(pmlmepriv, WIFI_ADHOC_STATE)) {
 601                         /* adhoc mode */
 602                 }
 603         }
 604
 605 exit:
 606
 607         kfree(pwep);
 608         return ret;
 609 }
 610
 611 static int rtw_set_wpa_ie(struct adapter *padapter, char *pie, unsigned short ielen)
 612 {
 613         u8 *buf = NULL;
 614         int group_cipher = 0, pairwise_cipher = 0;
 615         int ret = 0;
 616         u8 null_addr[]= {0, 0, 0, 0, 0, 0};
 617
 618         if ((ielen > MAX_WPA_IE_LEN) || (pie == NULL)) {
 619                 _clr_fwstate_(&padapter->mlmepriv, WIFI_UNDER_WPS);
 620                 if (pie == NULL)
 621                         return ret;
 622                 else
 623                         return -EINVAL;
 624         }
 625
 626         if (ielen) {
 627                 buf = rtw_zmalloc(ielen);
 628                 if (buf == NULL) {
 629                         ret =  -ENOMEM;
 630                         goto exit;
 631                 }
 632
 633                 memcpy(buf, pie , ielen);
 634
 635                 /* dump */
 636                 {
 637                         int i;
 638                         DBG_871X("\n wpa_ie(length:%d):\n", ielen);
 639                         for (i = 0;i<ielen;i =i+8)
 640                                 DBG_871X("0x%.2x 0x%.2x 0x%.2x 0x%.2x 0x%.2x 0x%.2x 0x%.2x 0x%.2x\n", buf[i], buf[i+1], buf[i+2], buf[i+3], buf[i+4], buf[i+5], buf[i+6], buf[i+7]);
 641                 }
 642
 643                 if (ielen < RSN_HEADER_LEN) {
 644                         RT_TRACE(_module_rtl871x_ioctl_os_c, _drv_err_, ("Ie len too short %d\n", ielen));
 645                         ret  = -1;
 646                         goto exit;
 647                 }
 648
 649                 if (rtw_parse_wpa_ie(buf, ielen, &group_cipher, &pairwise_cipher, NULL) == _SUCCESS) {
 650                         padapter->securitypriv.dot11AuthAlgrthm = dot11AuthAlgrthm_8021X;
 651                         padapter->securitypriv.ndisauthtype =Ndis802_11AuthModeWPAPSK;
 652                         memcpy(padapter->securitypriv.supplicant_ie, &buf[0], ielen);
 653                 }
 654
 655                 if (rtw_parse_wpa2_ie(buf, ielen, &group_cipher, &pairwise_cipher, NULL) == _SUCCESS) {
 656                         padapter->securitypriv.dot11AuthAlgrthm = dot11AuthAlgrthm_8021X;
 657                         padapter->securitypriv.ndisauthtype =Ndis802_11AuthModeWPA2PSK;
 658                         memcpy(padapter->securitypriv.supplicant_ie, &buf[0], ielen);
 659                 }
 660
 661                 if (group_cipher == 0)
 662                         group_cipher = WPA_CIPHER_NONE;
 663                 if (pairwise_cipher == 0)
 664                         pairwise_cipher = WPA_CIPHER_NONE;
 665
 666                 switch (group_cipher) {
 667                         case WPA_CIPHER_NONE:
 668                                 padapter->securitypriv.dot118021XGrpPrivacy = _NO_PRIVACY_;
 669                                 padapter->securitypriv.ndisencryptstatus =Ndis802_11EncryptionDisabled;
 670                                 break;
 671                         case WPA_CIPHER_WEP40:
 672                                 padapter->securitypriv.dot118021XGrpPrivacy = _WEP40_;
 673                                 padapter->securitypriv.ndisencryptstatus = Ndis802_11Encryption1Enabled;
 674                                 break;
 675                         case WPA_CIPHER_TKIP:
 676                                 padapter->securitypriv.dot118021XGrpPrivacy = _TKIP_;
 677                                 padapter->securitypriv.ndisencryptstatus = Ndis802_11Encryption2Enabled;
 678                                 break;
 679                         case WPA_CIPHER_CCMP:
 680                                 padapter->securitypriv.dot118021XGrpPrivacy = _AES_;
 681                                 padapter->securitypriv.ndisencryptstatus = Ndis802_11Encryption3Enabled;
 682                                 break;
 683                         case WPA_CIPHER_WEP104:
 684                                 padapter->securitypriv.dot118021XGrpPrivacy = _WEP104_;
 685                                 padapter->securitypriv.ndisencryptstatus = Ndis802_11Encryption1Enabled;
 686                                 break;
 687                 }
 688
 689                 switch (pairwise_cipher) {
 690                         case WPA_CIPHER_NONE:
 691                                 padapter->securitypriv.dot11PrivacyAlgrthm = _NO_PRIVACY_;
 692                                 padapter->securitypriv.ndisencryptstatus =Ndis802_11EncryptionDisabled;
 693                                 break;
 694                         case WPA_CIPHER_WEP40:
 695                                 padapter->securitypriv.dot11PrivacyAlgrthm = _WEP40_;
 696                                 padapter->securitypriv.ndisencryptstatus = Ndis802_11Encryption1Enabled;
 697                                 break;
 698                         case WPA_CIPHER_TKIP:
 699                                 padapter->securitypriv.dot11PrivacyAlgrthm = _TKIP_;
 700                                 padapter->securitypriv.ndisencryptstatus = Ndis802_11Encryption2Enabled;
 701                                 break;
 702                         case WPA_CIPHER_CCMP:
 703                                 padapter->securitypriv.dot11PrivacyAlgrthm = _AES_;
 704                                 padapter->securitypriv.ndisencryptstatus = Ndis802_11Encryption3Enabled;
 705                                 break;
 706                         case WPA_CIPHER_WEP104:
 707                                 padapter->securitypriv.dot11PrivacyAlgrthm = _WEP104_;
 708                                 padapter->securitypriv.ndisencryptstatus = Ndis802_11Encryption1Enabled;
 709                                 break;
 710                 }
 711
 712                 _clr_fwstate_(&padapter->mlmepriv, WIFI_UNDER_WPS);
 713                 {/* set wps_ie */
 714                         u16 cnt = 0;
 715                         u8 eid, wps_oui[4]={0x0, 0x50, 0xf2, 0x04};
 716
 717                         while (cnt < ielen) {
 718                                 eid = buf[cnt];
 719
 720                                 if ((eid == _VENDOR_SPECIFIC_IE_) && (!memcmp(&buf[cnt+2], wps_oui, 4))) {
 721                                         DBG_871X("SET WPS_IE\n");
 722
 723                                         padapter->securitypriv.wps_ie_len = ((buf[cnt+1]+2) < MAX_WPS_IE_LEN) ? (buf[cnt+1]+2):MAX_WPS_IE_LEN;
 724
 725                                         memcpy(padapter->securitypriv.wps_ie, &buf[cnt], padapter->securitypriv.wps_ie_len);
 726
 727                                         set_fwstate(&padapter->mlmepriv, WIFI_UNDER_WPS);
 728
 729                                         cnt += buf[cnt+1]+2;
 730
 731                                         break;
 732                                 } else {
 733                                         cnt += buf[cnt+1]+2; /* goto next */
 734                                 }
 735                         }
 736                 }
 737         }
 738
 739         /* TKIP and AES disallow multicast packets until installing group key */
 740         if (padapter->securitypriv.dot11PrivacyAlgrthm == _TKIP_
 741                 || padapter->securitypriv.dot11PrivacyAlgrthm == _TKIP_WTMIC_
 742                 || padapter->securitypriv.dot11PrivacyAlgrthm == _AES_)
 743                 /* WPS open need to enable multicast */
 744                 /*  check_fwstate(&padapter->mlmepriv, WIFI_UNDER_WPS) == true) */
 745                 rtw_hal_set_hwreg(padapter, HW_VAR_OFF_RCR_AM, null_addr);
 746
 747         RT_TRACE(_module_rtl871x_ioctl_os_c, _drv_info_,
 748                  ("rtw_set_wpa_ie: pairwise_cipher = 0x%08x padapter->securitypriv.ndisencryptstatus =%d padapter->securitypriv.ndisauthtype =%d\n",
 749                   pairwise_cipher, padapter->securitypriv.ndisencryptstatus, padapter->securitypriv.ndisauthtype));
 750
 751 exit:
 752
 753         kfree(buf);
 754
 755         return ret;
 756 }
 757
 758 static int rtw_wx_get_name(struct net_device *dev,
 759                              struct iw_request_info *info,
 760                              union iwreq_data *wrqu, char *extra)
 761 {
 762         struct adapter *padapter = (struct adapter *)rtw_netdev_priv(dev);
 763         u32 ht_ielen = 0;
 764         char *p;
 765         u8 ht_cap =false, vht_cap =false;
 766         struct  mlme_priv *pmlmepriv = &(padapter->mlmepriv);
 767         struct wlan_bssid_ex  *pcur_bss = &pmlmepriv->cur_network.network;
 768         NDIS_802_11_RATES_EX* prates = NULL;
 769
 770         RT_TRACE(_module_rtl871x_mlme_c_, _drv_info_, ("cmd_code =%x\n", info->cmd));
 771
 772         if (check_fwstate(pmlmepriv, _FW_LINKED|WIFI_ADHOC_MASTER_STATE) == true) {
 773                 /* parsing HT_CAP_IE */
 774                 p = rtw_get_ie(&pcur_bss->IEs[12], _HT_CAPABILITY_IE_, &ht_ielen, pcur_bss->IELength-12);
 775                 if (p && ht_ielen>0)
 776                         ht_cap = true;
 777
 778                 prates = &pcur_bss->SupportedRates;
 779
 780                 if (rtw_is_cckratesonly_included((u8 *)prates)) {
 781                         if (ht_cap)
 782                                 snprintf(wrqu->name, IFNAMSIZ, "IEEE 802.11bn");
 783                         else
 784                                 snprintf(wrqu->name, IFNAMSIZ, "IEEE 802.11b");
 785                 } else if (rtw_is_cckrates_included((u8 *)prates)) {
 786                         if (ht_cap)
 787                                 snprintf(wrqu->name, IFNAMSIZ, "IEEE 802.11bgn");
 788                         else
 789                                 snprintf(wrqu->name, IFNAMSIZ, "IEEE 802.11bg");
 790                 } else {
 791                         if (pcur_bss->Configuration.DSConfig > 14) {
 792                                 if (vht_cap)
 793                                         snprintf(wrqu->name, IFNAMSIZ, "IEEE 802.11AC");
 794                                 else if (ht_cap)
 795                                         snprintf(wrqu->name, IFNAMSIZ, "IEEE 802.11an");
 796                                 else
 797                                         snprintf(wrqu->name, IFNAMSIZ, "IEEE 802.11a");
 798                         } else {
 799                                 if (ht_cap)
 800                                         snprintf(wrqu->name, IFNAMSIZ, "IEEE 802.11gn");
 801                                 else
 802                                         snprintf(wrqu->name, IFNAMSIZ, "IEEE 802.11g");
 803                         }
 804                 }
 805         } else {
 806                 /* prates = &padapter->registrypriv.dev_network.SupportedRates; */
 807                 /* snprintf(wrqu->name, IFNAMSIZ, "IEEE 802.11g"); */
 808                 snprintf(wrqu->name, IFNAMSIZ, "unassociated");
 809         }
 810         return 0;
 811 }
 812
 813 static int rtw_wx_set_freq(struct net_device *dev,
 814                              struct iw_request_info *info,
 815                              union iwreq_data *wrqu, char *extra)
 816 {
 817         RT_TRACE(_module_rtl871x_mlme_c_, _drv_notice_, ("+rtw_wx_set_freq\n"));
 818
 819         return 0;
 820 }
 821
 822 static int rtw_wx_get_freq(struct net_device *dev,
 823                              struct iw_request_info *info,
 824                              union iwreq_data *wrqu, char *extra)
 825 {
 826         struct adapter *padapter = (struct adapter *)rtw_netdev_priv(dev);
 827         struct  mlme_priv *pmlmepriv = &(padapter->mlmepriv);
 828         struct wlan_bssid_ex  *pcur_bss = &pmlmepriv->cur_network.network;
 829
 830         if (check_fwstate(pmlmepriv, _FW_LINKED) == true) {
 831                 /* wrqu->freq.m = ieee80211_wlan_frequencies[pcur_bss->Configuration.DSConfig-1] * 100000; */
 832                 wrqu->freq.m = rtw_ch2freq(pcur_bss->Configuration.DSConfig) * 100000;
 833                 wrqu->freq.e = 1;
 834                 wrqu->freq.i = pcur_bss->Configuration.DSConfig;
 835
 836         } else {
 837                 wrqu->freq.m = rtw_ch2freq(padapter->mlmeextpriv.cur_channel) * 100000;
 838                 wrqu->freq.e = 1;
 839                 wrqu->freq.i = padapter->mlmeextpriv.cur_channel;
 840         }
 841
 842         return 0;
 843 }
 844
 845 static int rtw_wx_set_mode(struct net_device *dev, struct iw_request_info *a,
 846                              union iwreq_data *wrqu, char *b)
 847 {
 848         struct adapter *padapter = (struct adapter *)rtw_netdev_priv(dev);
 849         enum NDIS_802_11_NETWORK_INFRASTRUCTURE networkType ;
 850         int ret = 0;
 851
 852         if (_FAIL == rtw_pwr_wakeup(padapter)) {
 853                 ret = -EPERM;
 854                 goto exit;
 855         }
 856
 857         if (!padapter->hw_init_completed) {
 858                 ret = -EPERM;
 859                 goto exit;
 860         }
 861
 862         switch (wrqu->mode) {
 863                 case IW_MODE_AUTO:
 864                         networkType = Ndis802_11AutoUnknown;
 865                         DBG_871X("set_mode = IW_MODE_AUTO\n");
 866                         break;
 867                 case IW_MODE_ADHOC:
 868                         networkType = Ndis802_11IBSS;
 869                         DBG_871X("set_mode = IW_MODE_ADHOC\n");
 870                         break;
 871                 case IW_MODE_MASTER:
 872                         networkType = Ndis802_11APMode;
 873                         DBG_871X("set_mode = IW_MODE_MASTER\n");
 874                         /* rtw_setopmode_cmd(padapter, networkType, true); */
 875                         break;
 876                 case IW_MODE_INFRA:
 877                         networkType = Ndis802_11Infrastructure;
 878                         DBG_871X("set_mode = IW_MODE_INFRA\n");
 879                         break;
 880
 881                 default :
 882                         ret = -EINVAL;
 883                         RT_TRACE(_module_rtl871x_ioctl_os_c, _drv_err_, ("\n Mode: %s is not supported \n", iw_operation_mode[wrqu->mode]));
 884                         goto exit;
 885         }
 886
 887 /*
 888         if (Ndis802_11APMode == networkType)
 889         {
 890                 rtw_setopmode_cmd(padapter, networkType, true);
 891         }
 892         else
 893         {
 894                 rtw_setopmode_cmd(padapter, Ndis802_11AutoUnknown, true);
 895         }
 896 */
 897
 898         if (rtw_set_802_11_infrastructure_mode(padapter, networkType) ==false) {
 899
 900                 ret = -EPERM;
 901                 goto exit;
 902
 903         }
 904
 905         rtw_setopmode_cmd(padapter, networkType, true);
 906
 907 exit:
 908         return ret;
 909 }
 910
 911 static int rtw_wx_get_mode(struct net_device *dev, struct iw_request_info *a,
 912                              union iwreq_data *wrqu, char *b)
 913 {
 914         struct adapter *padapter = (struct adapter *)rtw_netdev_priv(dev);
 915         struct  mlme_priv *pmlmepriv = &(padapter->mlmepriv);
 916
 917         RT_TRACE(_module_rtl871x_mlme_c_, _drv_info_, (" rtw_wx_get_mode\n"));
 918
 919         if (check_fwstate(pmlmepriv, WIFI_STATION_STATE) == true) {
 920                 wrqu->mode = IW_MODE_INFRA;
 921         } else if  ((check_fwstate(pmlmepriv, WIFI_ADHOC_MASTER_STATE) == true) ||
 922                        (check_fwstate(pmlmepriv, WIFI_ADHOC_STATE) == true)) {
 923                 wrqu->mode = IW_MODE_ADHOC;
 924         } else if (check_fwstate(pmlmepriv, WIFI_AP_STATE) == true) {
 925                 wrqu->mode = IW_MODE_MASTER;
 926         } else {
 927                 wrqu->mode = IW_MODE_AUTO;
 928         }
 929         return 0;
 930 }
 931
 932
 933 static int rtw_wx_set_pmkid(struct net_device *dev,
 934                              struct iw_request_info *a,
 935                              union iwreq_data *wrqu, char *extra)
 936 {
 937         struct adapter *padapter = (struct adapter *)rtw_netdev_priv(dev);
 938         u8          j, blInserted = false;
 939         int         intReturn = false;
 940         struct security_priv *psecuritypriv = &padapter->securitypriv;
 941         struct iw_pmksa*  pPMK = (struct iw_pmksa *)extra;
 942         u8     strZeroMacAddress[ ETH_ALEN ] = { 0x00 };
 943         u8     strIssueBssid[ ETH_ALEN ] = { 0x00 };
 944
 945         /*
 946         There are the BSSID information in the bssid.sa_data array.
 947         If cmd is IW_PMKSA_FLUSH, it means the wpa_suppplicant wants to clear all the PMKID information.
 948         If cmd is IW_PMKSA_ADD, it means the wpa_supplicant wants to add a PMKID/BSSID to driver.
 949         If cmd is IW_PMKSA_REMOVE, it means the wpa_supplicant wants to remove a PMKID/BSSID from driver.
 950         */
 951
 952         memcpy(strIssueBssid, pPMK->bssid.sa_data, ETH_ALEN);
 953         if (pPMK->cmd == IW_PMKSA_ADD) {
 954                 DBG_871X("[rtw_wx_set_pmkid] IW_PMKSA_ADD!\n");
 955                 if (!memcmp(strIssueBssid, strZeroMacAddress, ETH_ALEN))
 956                         return intReturn;
 957                 else
 958                     intReturn = true;
 959
 960                 blInserted = false;
 961
 962                 /* overwrite PMKID */
 963                 for (j = 0 ; j<NUM_PMKID_CACHE; j++) {
 964                         if (!memcmp(psecuritypriv->PMKIDList[j].Bssid, strIssueBssid, ETH_ALEN)) {
 965                                 /*  BSSID is matched, the same AP => rewrite with new PMKID. */
 966                                 DBG_871X("[rtw_wx_set_pmkid] BSSID exists in the PMKList.\n");
 967
 968                                 memcpy(psecuritypriv->PMKIDList[j].PMKID, pPMK->pmkid, IW_PMKID_LEN);
 969                                 psecuritypriv->PMKIDList[ j ].bUsed = true;
 970                                 psecuritypriv->PMKIDIndex = j+1;
 971                                 blInserted = true;
 972                                 break;
 973                         }
 974                 }
 975
 976                 if (!blInserted) {
 977                     /*  Find a new entry */
 978                     DBG_871X("[rtw_wx_set_pmkid] Use the new entry index = %d for this PMKID.\n",
 979                             psecuritypriv->PMKIDIndex);
 980
 981                     memcpy(psecuritypriv->PMKIDList[psecuritypriv->PMKIDIndex].Bssid, strIssueBssid, ETH_ALEN);
 982                     memcpy(psecuritypriv->PMKIDList[psecuritypriv->PMKIDIndex].PMKID, pPMK->pmkid, IW_PMKID_LEN);
 983
 984                     psecuritypriv->PMKIDList[ psecuritypriv->PMKIDIndex ].bUsed = true;
 985                     psecuritypriv->PMKIDIndex++ ;
 986                     if (psecuritypriv->PMKIDIndex == 16)
 987                         psecuritypriv->PMKIDIndex = 0;
 988                 }
 989         } else if (pPMK->cmd == IW_PMKSA_REMOVE) {
 990                 DBG_871X("[rtw_wx_set_pmkid] IW_PMKSA_REMOVE!\n");
 991                 intReturn = true;
 992                 for (j = 0 ; j<NUM_PMKID_CACHE; j++) {
 993                         if (!memcmp(psecuritypriv->PMKIDList[j].Bssid, strIssueBssid, ETH_ALEN)) {
 994                                 /*  BSSID is matched, the same AP => Remove this PMKID information and reset it. */
 995                                 eth_zero_addr(psecuritypriv->PMKIDList[j].Bssid);
 996                                 psecuritypriv->PMKIDList[ j ].bUsed = false;
 997                                 break;
 998                         }
 999                 }
1000         } else if (pPMK->cmd == IW_PMKSA_FLUSH) {
1001             DBG_871X("[rtw_wx_set_pmkid] IW_PMKSA_FLUSH!\n");
1002             memset(&psecuritypriv->PMKIDList[ 0 ], 0x00, sizeof(RT_PMKID_LIST) * NUM_PMKID_CACHE);
1003             psecuritypriv->PMKIDIndex = 0;
1004             intReturn = true;
1005         }
1006         return intReturn;
1007 }
1008
1009 static int rtw_wx_get_sens(struct net_device *dev,
1010                              struct iw_request_info *info,
1011                              union iwreq_data *wrqu, char *extra)
1012 {
1013         {
1014                 wrqu->sens.value = 0;
1015                 wrqu->sens.fixed = 0;   /* no auto select */
1016                 wrqu->sens.disabled = 1;
1017         }
1018         return 0;
1019 }
1020
1021 static int rtw_wx_get_range(struct net_device *dev,
1022                                 struct iw_request_info *info,
1023                                 union iwreq_data *wrqu, char *extra)
1024 {
1025         struct iw_range *range = (struct iw_range *)extra;
1026         struct adapter *padapter = (struct adapter *)rtw_netdev_priv(dev);
1027         struct mlme_ext_priv *pmlmeext = &padapter->mlmeextpriv;
1028
1029         u16 val;
1030         int i;
1031
1032         RT_TRACE(_module_rtl871x_mlme_c_, _drv_info_, ("rtw_wx_get_range. cmd_code =%x\n", info->cmd));
1033
1034         wrqu->data.length = sizeof(*range);
1035         memset(range, 0, sizeof(*range));
1036
1037         /* Let's try to keep this struct in the same order as in
1038          * linux/include/wireless.h
1039          */
1040
1041         /* TODO: See what values we can set, and remove the ones we can't
1042          * set, or fill them with some default data.
1043          */
1044
1045         /* ~5 Mb/s real (802.11b) */
1046         range->throughput = 5 * 1000 * 1000;
1047
1048         /* signal level threshold range */
1049
1050         /* percent values between 0 and 100. */
1051         range->max_qual.qual = 100;
1052         range->max_qual.level = 100;
1053         range->max_qual.noise = 100;
1054         range->max_qual.updated = 7; /* Updated all three */
1055
1056
1057         range->avg_qual.qual = 92; /* > 8% missed beacons is 'bad' */
1058         /* TODO: Find real 'good' to 'bad' threshol value for RSSI */
1059         range->avg_qual.level = 256 - 78;
1060         range->avg_qual.noise = 0;
1061         range->avg_qual.updated = 7; /* Updated all three */
1062
1063         range->num_bitrates = RATE_COUNT;
1064
1065         for (i = 0; i < RATE_COUNT && i < IW_MAX_BITRATES; i++)
1066                 range->bitrate[i] = rtw_rates[i];
1067
1068         range->min_frag = MIN_FRAG_THRESHOLD;
1069         range->max_frag = MAX_FRAG_THRESHOLD;
1070
1071         range->pm_capa = 0;
1072
1073         range->we_version_compiled = WIRELESS_EXT;
1074         range->we_version_source = 16;
1075
1076         for (i = 0, val = 0; i < MAX_CHANNEL_NUM; i++) {
1077
1078                 /*  Include only legal frequencies for some countries */
1079                 if (pmlmeext->channel_set[i].ChannelNum != 0) {
1080                         range->freq[val].i = pmlmeext->channel_set[i].ChannelNum;
1081                         range->freq[val].m = rtw_ch2freq(pmlmeext->channel_set[i].ChannelNum) * 100000;
1082                         range->freq[val].e = 1;
1083                         val++;
1084                 }
1085
1086                 if (val == IW_MAX_FREQUENCIES)
1087                         break;
1088         }
1089
1090         range->num_channels = val;
1091         range->num_frequency = val;
1092
1093 /*  Commented by Albert 2009/10/13 */
1094 /*  The following code will proivde the security capability to network manager. */
1095 /*  If the driver doesn't provide this capability to network manager, */
1096 /*  the WPA/WPA2 routers can't be choosen in the network manager. */
1097
1098 /*
1099 #define IW_SCAN_CAPA_NONE               0x00
1100 #define IW_SCAN_CAPA_ESSID              0x01
1101 #define IW_SCAN_CAPA_BSSID              0x02
1102 #define IW_SCAN_CAPA_CHANNEL    0x04
1103 #define IW_SCAN_CAPA_MODE               0x08
1104 #define IW_SCAN_CAPA_RATE               0x10
1105 #define IW_SCAN_CAPA_TYPE               0x20
1106 #define IW_SCAN_CAPA_TIME               0x40
1107 */
1108
1109         range->enc_capa = IW_ENC_CAPA_WPA|IW_ENC_CAPA_WPA2|
1110                           IW_ENC_CAPA_CIPHER_TKIP|IW_ENC_CAPA_CIPHER_CCMP;
1111
1112         range->scan_capa = IW_SCAN_CAPA_ESSID | IW_SCAN_CAPA_TYPE |IW_SCAN_CAPA_BSSID|
1113                                         IW_SCAN_CAPA_CHANNEL|IW_SCAN_CAPA_MODE|IW_SCAN_CAPA_RATE;
1114
1115         return 0;
1116 }
1117
1118 /* set bssid flow */
1119 /* s1. rtw_set_802_11_infrastructure_mode() */
1120 /* s2. rtw_set_802_11_authentication_mode() */
1121 /* s3. set_802_11_encryption_mode() */
1122 /* s4. rtw_set_802_11_bssid() */
1123 static int rtw_wx_set_wap(struct net_device *dev,
1124                          struct iw_request_info *info,
1125                          union iwreq_data *awrq,
1126                          char *extra)
1127 {
1128         uint ret = 0;
1129         struct adapter *padapter = (struct adapter *)rtw_netdev_priv(dev);
1130         struct sockaddr *temp = (struct sockaddr *)awrq;
1131         struct  mlme_priv *pmlmepriv = &(padapter->mlmepriv);
1132         struct list_head        *phead;
1133         u8 *dst_bssid, *src_bssid;
1134         struct __queue  *queue  = &(pmlmepriv->scanned_queue);
1135         struct  wlan_network    *pnetwork = NULL;
1136         enum NDIS_802_11_AUTHENTICATION_MODE    authmode;
1137
1138         rtw_ps_deny(padapter, PS_DENY_JOIN);
1139         if (_FAIL == rtw_pwr_wakeup(padapter)) {
1140                 ret = -1;
1141                 goto exit;
1142         }
1143
1144         if (!padapter->bup) {
1145                 ret = -1;
1146                 goto exit;
1147         }
1148
1149
1150         if (temp->sa_family != ARPHRD_ETHER) {
1151                 ret = -EINVAL;
1152                 goto exit;
1153         }
1154
1155         authmode = padapter->securitypriv.ndisauthtype;
1156         spin_lock_bh(&queue->lock);
1157         phead = get_list_head(queue);
1158         pmlmepriv->pscanned = get_next(phead);
1159
1160         while (1) {
1161                 if (phead == pmlmepriv->pscanned)
1162                         break;
1163
1164                 pnetwork = LIST_CONTAINOR(pmlmepriv->pscanned, struct wlan_network, list);
1165
1166                 pmlmepriv->pscanned = get_next(pmlmepriv->pscanned);
1167
1168                 dst_bssid = pnetwork->network.MacAddress;
1169
1170                 src_bssid = temp->sa_data;
1171
1172                 if ((!memcmp(dst_bssid, src_bssid, ETH_ALEN))) {
1173                         if (!rtw_set_802_11_infrastructure_mode(padapter, pnetwork->network.InfrastructureMode)) {
1174                                 ret = -1;
1175                                 spin_unlock_bh(&queue->lock);
1176                                 goto exit;
1177                         }
1178                         break;
1179                 }
1180
1181         }
1182         spin_unlock_bh(&queue->lock);
1183
1184         rtw_set_802_11_authentication_mode(padapter, authmode);
1185         /* set_802_11_encryption_mode(padapter, padapter->securitypriv.ndisencryptstatus); */
1186         if (rtw_set_802_11_bssid(padapter, temp->sa_data) == false) {
1187                 ret = -1;
1188                 goto exit;
1189         }
1190
1191 exit:
1192
1193         rtw_ps_deny_cancel(padapter, PS_DENY_JOIN);
1194
1195         return ret;
1196 }
1197
1198 static int rtw_wx_get_wap(struct net_device *dev,
1199                             struct iw_request_info *info,
1200                             union iwreq_data *wrqu, char *extra)
1201 {
1202
1203         struct adapter *padapter = (struct adapter *)rtw_netdev_priv(dev);
1204         struct  mlme_priv *pmlmepriv = &(padapter->mlmepriv);
1205         struct wlan_bssid_ex  *pcur_bss = &pmlmepriv->cur_network.network;
1206
1207         wrqu->ap_addr.sa_family = ARPHRD_ETHER;
1208
1209         eth_zero_addr(wrqu->ap_addr.sa_data);
1210
1211         RT_TRACE(_module_rtl871x_mlme_c_, _drv_info_, ("rtw_wx_get_wap\n"));
1212
1213         if  (((check_fwstate(pmlmepriv, _FW_LINKED)) == true) ||
1214                         ((check_fwstate(pmlmepriv, WIFI_ADHOC_MASTER_STATE)) == true) ||
1215                         ((check_fwstate(pmlmepriv, WIFI_AP_STATE)) == true)) {
1216                 memcpy(wrqu->ap_addr.sa_data, pcur_bss->MacAddress, ETH_ALEN);
1217         } else {
1218                 eth_zero_addr(wrqu->ap_addr.sa_data);
1219         }
1220
1221         return 0;
1222 }
1223
1224 static int rtw_wx_set_mlme(struct net_device *dev,
1225                              struct iw_request_info *info,
1226                              union iwreq_data *wrqu, char *extra)
1227 {
1228         int ret = 0;
1229         u16 reason;
1230         struct adapter *padapter = (struct adapter *)rtw_netdev_priv(dev);
1231         struct iw_mlme *mlme = (struct iw_mlme *)extra;
1232
1233
1234         if (mlme == NULL)
1235                 return -1;
1236
1237         DBG_871X("%s\n", __func__);
1238
1239         reason = mlme->reason_code;
1240
1241         DBG_871X("%s, cmd =%d, reason =%d\n", __func__, mlme->cmd, reason);
1242
1243         switch (mlme->cmd) {
1244         case IW_MLME_DEAUTH:
1245                 if (!rtw_set_802_11_disassociate(padapter))
1246                         ret = -1;
1247                 break;
1248         case IW_MLME_DISASSOC:
1249                 if (!rtw_set_802_11_disassociate(padapter))
1250                         ret = -1;
1251                 break;
1252         default:
1253                 return -EOPNOTSUPP;
1254         }
1255
1256         return ret;
1257 }
1258
1259 static int rtw_wx_set_scan(struct net_device *dev, struct iw_request_info *a,
1260                              union iwreq_data *wrqu, char *extra)
1261 {
1262         u8 _status = false;
1263         int ret = 0;
1264         struct adapter *padapter = (struct adapter *)rtw_netdev_priv(dev);
1265         struct mlme_priv *pmlmepriv = &padapter->mlmepriv;
1266         struct ndis_802_11_ssid ssid[RTW_SSID_SCAN_AMOUNT];
1267         RT_TRACE(_module_rtl871x_mlme_c_, _drv_info_, ("rtw_wx_set_scan\n"));
1268
1269         #ifdef DBG_IOCTL
1270         DBG_871X("DBG_IOCTL %s:%d\n", __func__, __LINE__);
1271         #endif
1272
1273         rtw_ps_deny(padapter, PS_DENY_SCAN);
1274         if (_FAIL == rtw_pwr_wakeup(padapter)) {
1275                 ret = -1;
1276                 goto exit;
1277         }
1278
1279         if (padapter->bDriverStopped) {
1280                 DBG_871X("bDriverStopped =%d\n", padapter->bDriverStopped);
1281                 ret = -1;
1282                 goto exit;
1283         }
1284
1285         if (!padapter->bup) {
1286                 ret = -1;
1287                 goto exit;
1288         }
1289
1290         if (!padapter->hw_init_completed ) {
1291                 ret = -1;
1292                 goto exit;
1293         }
1294
1295         /*  When Busy Traffic, driver do not site survey. So driver return success. */
1296         /*  wpa_supplicant will not issue SIOCSIWSCAN cmd again after scan timeout. */
1297         /*  modify by thomas 2011-02-22. */
1298         if (pmlmepriv->LinkDetectInfo.bBusyTraffic) {
1299                 indicate_wx_scan_complete_event(padapter);
1300                 goto exit;
1301         }
1302
1303         if (check_fwstate(pmlmepriv, _FW_UNDER_SURVEY|_FW_UNDER_LINKING) == true) {
1304                 indicate_wx_scan_complete_event(padapter);
1305                 goto exit;
1306         }
1307
1308         memset(ssid, 0, sizeof(struct ndis_802_11_ssid)*RTW_SSID_SCAN_AMOUNT);
1309
1310         if (wrqu->data.length == sizeof(struct iw_scan_req)) {
1311                 struct iw_scan_req *req = (struct iw_scan_req *)extra;
1312
1313                 if (wrqu->data.flags & IW_SCAN_THIS_ESSID) {
1314                         int len = min((int)req->essid_len, IW_ESSID_MAX_SIZE);
1315
1316                         memcpy(ssid[0].Ssid, req->essid, len);
1317                         ssid[0].SsidLength = len;
1318
1319                         DBG_871X("IW_SCAN_THIS_ESSID, ssid =%s, len =%d\n", req->essid, req->essid_len);
1320
1321                         spin_lock_bh(&pmlmepriv->lock);
1322
1323                         _status = rtw_sitesurvey_cmd(padapter, ssid, 1, NULL, 0);
1324
1325                         spin_unlock_bh(&pmlmepriv->lock);
1326
1327                 } else if (req->scan_type == IW_SCAN_TYPE_PASSIVE) {
1328                         DBG_871X("rtw_wx_set_scan, req->scan_type == IW_SCAN_TYPE_PASSIVE\n");
1329                 }
1330
1331         } else if (wrqu->data.length >= WEXT_CSCAN_HEADER_SIZE
1332                 && !memcmp(extra, WEXT_CSCAN_HEADER, WEXT_CSCAN_HEADER_SIZE)) {
1333                 int len = wrqu->data.length -WEXT_CSCAN_HEADER_SIZE;
1334                 char *pos = extra+WEXT_CSCAN_HEADER_SIZE;
1335                 char section;
1336                 char sec_len;
1337                 int ssid_index = 0;
1338
1339                 /* DBG_871X("%s COMBO_SCAN header is recognized\n", __func__); */
1340
1341                 while (len >= 1) {
1342                         section = *(pos++); len-= 1;
1343
1344                         switch (section) {
1345                                 case WEXT_CSCAN_SSID_SECTION:
1346                                         /* DBG_871X("WEXT_CSCAN_SSID_SECTION\n"); */
1347                                         if (len < 1) {
1348                                                 len = 0;
1349                                                 break;
1350                                         }
1351
1352                                         sec_len = *(pos++); len-= 1;
1353
1354                                         if (sec_len>0 && sec_len<=len) {
1355                                                 ssid[ssid_index].SsidLength = sec_len;
1356                                                 memcpy(ssid[ssid_index].Ssid, pos, ssid[ssid_index].SsidLength);
1357                                                 /* DBG_871X("%s COMBO_SCAN with specific ssid:%s, %d\n", __func__ */
1358                                                 /*      , ssid[ssid_index].Ssid, ssid[ssid_index].SsidLength); */
1359                                                 ssid_index++;
1360                                         }
1361
1362                                         pos+=sec_len; len-=sec_len;
1363                                         break;
1364
1365
1366                                 case WEXT_CSCAN_CHANNEL_SECTION:
1367                                         /* DBG_871X("WEXT_CSCAN_CHANNEL_SECTION\n"); */
1368                                         pos+= 1; len-= 1;
1369                                         break;
1370                                 case WEXT_CSCAN_ACTV_DWELL_SECTION:
1371                                         /* DBG_871X("WEXT_CSCAN_ACTV_DWELL_SECTION\n"); */
1372                                         pos+=2; len-=2;
1373                                         break;
1374                                 case WEXT_CSCAN_PASV_DWELL_SECTION:
1375                                         /* DBG_871X("WEXT_CSCAN_PASV_DWELL_SECTION\n"); */
1376                                         pos+=2; len-=2;
1377                                         break;
1378                                 case WEXT_CSCAN_HOME_DWELL_SECTION:
1379                                         /* DBG_871X("WEXT_CSCAN_HOME_DWELL_SECTION\n"); */
1380                                         pos+=2; len-=2;
1381                                         break;
1382                                 case WEXT_CSCAN_TYPE_SECTION:
1383                                         /* DBG_871X("WEXT_CSCAN_TYPE_SECTION\n"); */
1384                                         pos+= 1; len-= 1;
1385                                         break;
1386                                 default:
1387                                         /* DBG_871X("Unknown CSCAN section %c\n", section); */
1388                                         len = 0; /*  stop parsing */
1389                         }
1390                         /* DBG_871X("len:%d\n", len); */
1391
1392                 }
1393
1394                 /* jeff: it has still some scan paramater to parse, we only do this now... */
1395                 _status = rtw_set_802_11_bssid_list_scan(padapter, ssid, RTW_SSID_SCAN_AMOUNT);
1396
1397         } else {
1398                 _status = rtw_set_802_11_bssid_list_scan(padapter, NULL, 0);
1399         }
1400
1401         if (_status == false)
1402                 ret = -1;
1403
1404 exit:
1405
1406         rtw_ps_deny_cancel(padapter, PS_DENY_SCAN);
1407
1408         #ifdef DBG_IOCTL
1409         DBG_871X("DBG_IOCTL %s:%d return %d\n", __func__, __LINE__, ret);
1410         #endif
1411
1412         return ret;
1413 }
1414
1415 static int rtw_wx_get_scan(struct net_device *dev, struct iw_request_info *a,
1416                              union iwreq_data *wrqu, char *extra)
1417 {
1418         struct list_head                                        *plist, *phead;
1419         struct adapter *padapter = (struct adapter *)rtw_netdev_priv(dev);
1420         struct  mlme_priv *pmlmepriv = &(padapter->mlmepriv);
1421         struct __queue                          *queue  = &(pmlmepriv->scanned_queue);
1422         struct  wlan_network    *pnetwork = NULL;
1423         char *ev = extra;
1424         char *stop = ev + wrqu->data.length;
1425         u32 ret = 0;
1426         sint wait_status;
1427
1428         RT_TRACE(_module_rtl871x_mlme_c_, _drv_info_, ("rtw_wx_get_scan\n"));
1429         RT_TRACE(_module_rtl871x_ioctl_os_c, _drv_info_, (" Start of Query SIOCGIWSCAN .\n"));
1430
1431         #ifdef DBG_IOCTL
1432         DBG_871X("DBG_IOCTL %s:%d\n", __func__, __LINE__);
1433         #endif
1434
1435         if (adapter_to_pwrctl(padapter)->brfoffbyhw && padapter->bDriverStopped) {
1436                 ret = -EINVAL;
1437                 goto exit;
1438         }
1439
1440         wait_status = _FW_UNDER_SURVEY | _FW_UNDER_LINKING;
1441
1442         if (check_fwstate(pmlmepriv, wait_status))
1443                 return -EAGAIN;
1444
1445         spin_lock_bh(&(pmlmepriv->scanned_queue.lock));
1446
1447         phead = get_list_head(queue);
1448         plist = get_next(phead);
1449
1450         while (1) {
1451                 if (phead == plist)
1452                         break;
1453
1454                 if ((stop - ev) < SCAN_ITEM_SIZE) {
1455                         ret = -E2BIG;
1456                         break;
1457                 }
1458
1459                 pnetwork = LIST_CONTAINOR(plist, struct wlan_network, list);
1460
1461                 /* report network only if the current channel set contains the channel to which this network belongs */
1462                 if (rtw_ch_set_search_ch(padapter->mlmeextpriv.channel_set, pnetwork->network.Configuration.DSConfig) >= 0
1463                         && rtw_mlme_band_check(padapter, pnetwork->network.Configuration.DSConfig) == true
1464                         && true == rtw_validate_ssid(&(pnetwork->network.Ssid))) {
1465
1466                         ev =translate_scan(padapter, a, pnetwork, ev, stop);
1467                 }
1468
1469                 plist = get_next(plist);
1470
1471         }
1472
1473         spin_unlock_bh(&(pmlmepriv->scanned_queue.lock));
1474
1475         wrqu->data.length = ev-extra;
1476         wrqu->data.flags = 0;
1477
1478 exit:
1479
1480         #ifdef DBG_IOCTL
1481         DBG_871X("DBG_IOCTL %s:%d return %d\n", __func__, __LINE__, ret);
1482         #endif
1483
1484         return ret ;
1485
1486 }
1487
1488 /* set ssid flow */
1489 /* s1. rtw_set_802_11_infrastructure_mode() */
1490 /* s2. set_802_11_authenticaion_mode() */
1491 /* s3. set_802_11_encryption_mode() */
1492 /* s4. rtw_set_802_11_ssid() */
1493 static int rtw_wx_set_essid(struct net_device *dev,
1494                               struct iw_request_info *a,
1495                               union iwreq_data *wrqu, char *extra)
1496 {
1497         struct adapter *padapter = (struct adapter *)rtw_netdev_priv(dev);
1498         struct mlme_priv *pmlmepriv = &padapter->mlmepriv;
1499         struct __queue *queue = &pmlmepriv->scanned_queue;
1500         struct list_head *phead;
1501         struct wlan_network *pnetwork = NULL;
1502         enum NDIS_802_11_AUTHENTICATION_MODE authmode;
1503         struct ndis_802_11_ssid ndis_ssid;
1504         u8 *dst_ssid, *src_ssid;
1505
1506         uint ret = 0, len;
1507
1508         #ifdef DBG_IOCTL
1509         DBG_871X("DBG_IOCTL %s:%d\n", __func__, __LINE__);
1510         #endif
1511
1512         RT_TRACE(_module_rtl871x_ioctl_os_c, _drv_info_,
1513                  ("+rtw_wx_set_essid: fw_state = 0x%08x\n", get_fwstate(pmlmepriv)));
1514
1515         rtw_ps_deny(padapter, PS_DENY_JOIN);
1516         if (_FAIL == rtw_pwr_wakeup(padapter)) {
1517                 ret = -1;
1518                 goto exit;
1519         }
1520
1521         if (!padapter->bup) {
1522                 ret = -1;
1523                 goto exit;
1524         }
1525
1526         if (wrqu->essid.length > IW_ESSID_MAX_SIZE) {
1527                 ret = -E2BIG;
1528                 goto exit;
1529         }
1530
1531         if (check_fwstate(pmlmepriv, WIFI_AP_STATE)) {
1532                 ret = -1;
1533                 goto exit;
1534         }
1535
1536         authmode = padapter->securitypriv.ndisauthtype;
1537         DBG_871X("=>%s\n", __func__);
1538         if (wrqu->essid.flags && wrqu->essid.length) {
1539                 len = (wrqu->essid.length < IW_ESSID_MAX_SIZE) ? wrqu->essid.length : IW_ESSID_MAX_SIZE;
1540
1541                 if (wrqu->essid.length != 33)
1542                         DBG_871X("ssid =%s, len =%d\n", extra, wrqu->essid.length);
1543
1544                 memset(&ndis_ssid, 0, sizeof(struct ndis_802_11_ssid));
1545                 ndis_ssid.SsidLength = len;
1546                 memcpy(ndis_ssid.Ssid, extra, len);
1547                 src_ssid = ndis_ssid.Ssid;
1548
1549                 RT_TRACE(_module_rtl871x_ioctl_os_c, _drv_info_, ("rtw_wx_set_essid: ssid =[%s]\n", src_ssid));
1550                 spin_lock_bh(&queue->lock);
1551                 phead = get_list_head(queue);
1552                 pmlmepriv->pscanned = get_next(phead);
1553
1554                 while (1) {
1555                         if (phead == pmlmepriv->pscanned) {
1556                                 RT_TRACE(_module_rtl871x_ioctl_os_c, _drv_warning_,
1557                                          ("rtw_wx_set_essid: scan_q is empty, set ssid to check if scanning again!\n"));
1558
1559                                 break;
1560                         }
1561
1562                         pnetwork = LIST_CONTAINOR(pmlmepriv->pscanned, struct wlan_network, list);
1563
1564                         pmlmepriv->pscanned = get_next(pmlmepriv->pscanned);
1565
1566                         dst_ssid = pnetwork->network.Ssid.Ssid;
1567
1568                         RT_TRACE(_module_rtl871x_ioctl_os_c, _drv_info_,
1569                                  ("rtw_wx_set_essid: dst_ssid =%s\n",
1570                                   pnetwork->network.Ssid.Ssid));
1571
1572                         if ((!memcmp(dst_ssid, src_ssid, ndis_ssid.SsidLength)) &&
1573                                 (pnetwork->network.Ssid.SsidLength ==ndis_ssid.SsidLength)) {
1574                                 RT_TRACE(_module_rtl871x_ioctl_os_c, _drv_info_,
1575                                          ("rtw_wx_set_essid: find match, set infra mode\n"));
1576
1577                                 if (check_fwstate(pmlmepriv, WIFI_ADHOC_STATE) == true) {
1578                                         if (pnetwork->network.InfrastructureMode != pmlmepriv->cur_network.network.InfrastructureMode)
1579                                                 continue;
1580                                 }
1581
1582                                 if (rtw_set_802_11_infrastructure_mode(padapter, pnetwork->network.InfrastructureMode) == false) {
1583                                         ret = -1;
1584                                         spin_unlock_bh(&queue->lock);
1585                                         goto exit;
1586                                 }
1587
1588                                 break;
1589                         }
1590                 }
1591                 spin_unlock_bh(&queue->lock);
1592                 RT_TRACE(_module_rtl871x_ioctl_os_c, _drv_info_,
1593                          ("set ssid: set_802_11_auth. mode =%d\n", authmode));
1594                 rtw_set_802_11_authentication_mode(padapter, authmode);
1595                 /* set_802_11_encryption_mode(padapter, padapter->securitypriv.ndisencryptstatus); */
1596                 if (rtw_set_802_11_ssid(padapter, &ndis_ssid) == false) {
1597                         ret = -1;
1598                         goto exit;
1599                 }
1600         }
1601
1602 exit:
1603
1604         rtw_ps_deny_cancel(padapter, PS_DENY_JOIN);
1605
1606         DBG_871X("<=%s, ret %d\n", __func__, ret);
1607
1608         #ifdef DBG_IOCTL
1609         DBG_871X("DBG_IOCTL %s:%d return %d\n", __func__, __LINE__, ret);
1610         #endif
1611
1612         return ret;
1613 }
1614
1615 static int rtw_wx_get_essid(struct net_device *dev,
1616                               struct iw_request_info *a,
1617                               union iwreq_data *wrqu, char *extra)
1618 {
1619         u32 len, ret = 0;
1620         struct adapter *padapter = (struct adapter *)rtw_netdev_priv(dev);
1621         struct  mlme_priv *pmlmepriv = &(padapter->mlmepriv);
1622         struct wlan_bssid_ex  *pcur_bss = &pmlmepriv->cur_network.network;
1623
1624         RT_TRACE(_module_rtl871x_mlme_c_, _drv_info_, ("rtw_wx_get_essid\n"));
1625
1626         if ((check_fwstate(pmlmepriv, _FW_LINKED) == true) ||
1627               (check_fwstate(pmlmepriv, WIFI_ADHOC_MASTER_STATE) == true)) {
1628                 len = pcur_bss->Ssid.SsidLength;
1629
1630                 wrqu->essid.length = len;
1631
1632                 memcpy(extra, pcur_bss->Ssid.Ssid, len);
1633
1634                 wrqu->essid.flags = 1;
1635         } else {
1636                 ret = -1;
1637                 goto exit;
1638         }
1639
1640 exit:
1641         return ret;
1642 }
1643
1644 static int rtw_wx_set_rate(struct net_device *dev,
1645                               struct iw_request_info *a,
1646                               union iwreq_data *wrqu, char *extra)
1647 {
1648         int     i, ret = 0;
1649         struct adapter *padapter = (struct adapter *)rtw_netdev_priv(dev);
1650         u8 datarates[NumRates];
1651         u32 target_rate = wrqu->bitrate.value;
1652         u32 fixed = wrqu->bitrate.fixed;
1653         u32 ratevalue = 0;
1654         u8 mpdatarate[NumRates]={11, 10, 9, 8, 7, 6, 5, 4, 3, 2, 1, 0, 0xff};
1655
1656         RT_TRACE(_module_rtl871x_mlme_c_, _drv_info_, (" rtw_wx_set_rate\n"));
1657         RT_TRACE(_module_rtl871x_ioctl_os_c, _drv_info_, ("target_rate = %d, fixed = %d\n", target_rate, fixed));
1658
1659         if (target_rate == -1) {
1660                 ratevalue = 11;
1661                 goto set_rate;
1662         }
1663         target_rate = target_rate/100000;
1664
1665         switch (target_rate) {
1666         case 10:
1667                 ratevalue = 0;
1668                 break;
1669         case 20:
1670                 ratevalue = 1;
1671                 break;
1672         case 55:
1673                 ratevalue = 2;
1674                 break;
1675         case 60:
1676                 ratevalue = 3;
1677                 break;
1678         case 90:
1679                 ratevalue = 4;
1680                 break;
1681         case 110:
1682                 ratevalue = 5;
1683                 break;
1684         case 120:
1685                 ratevalue = 6;
1686                 break;
1687         case 180:
1688                 ratevalue = 7;
1689                 break;
1690         case 240:
1691                 ratevalue = 8;
1692                 break;
1693         case 360:
1694                 ratevalue = 9;
1695                 break;
1696         case 480:
1697                 ratevalue = 10;
1698                 break;
1699         case 540:
1700                 ratevalue = 11;
1701                 break;
1702         default:
1703                 ratevalue = 11;
1704                 break;
1705         }
1706
1707 set_rate:
1708
1709         for (i = 0; i<NumRates; i++) {
1710                 if (ratevalue ==mpdatarate[i]) {
1711                         datarates[i] = mpdatarate[i];
1712                         if (fixed == 0)
1713                                 break;
1714                 } else {
1715                         datarates[i] = 0xff;
1716                 }
1717
1718                 RT_TRACE(_module_rtl871x_ioctl_os_c, _drv_info_, ("datarate_inx =%d\n", datarates[i]));
1719         }
1720
1721         if (rtw_setdatarate_cmd(padapter, datarates) != _SUCCESS) {
1722                 RT_TRACE(_module_rtl871x_ioctl_os_c, _drv_err_, ("rtw_wx_set_rate Fail!!!\n"));
1723                 ret = -1;
1724         }
1725         return ret;
1726 }
1727
1728 static int rtw_wx_get_rate(struct net_device *dev,
1729                              struct iw_request_info *info,
1730                              union iwreq_data *wrqu, char *extra)
1731 {
1732         u16 max_rate = 0;
1733
1734         max_rate = rtw_get_cur_max_rate((struct adapter *)rtw_netdev_priv(dev));
1735
1736         if (max_rate == 0)
1737                 return -EPERM;
1738
1739         wrqu->bitrate.fixed = 0;        /* no auto select */
1740         wrqu->bitrate.value = max_rate * 100000;
1741
1742         return 0;
1743 }
1744
1745 static int rtw_wx_set_rts(struct net_device *dev,
1746                              struct iw_request_info *info,
1747                              union iwreq_data *wrqu, char *extra)
1748 {
1749         struct adapter *padapter = (struct adapter *)rtw_netdev_priv(dev);
1750
1751         if (wrqu->rts.disabled)
1752                 padapter->registrypriv.rts_thresh = 2347;
1753         else {
1754                 if (wrqu->rts.value < 0 ||
1755                     wrqu->rts.value > 2347)
1756                         return -EINVAL;
1757
1758                 padapter->registrypriv.rts_thresh = wrqu->rts.value;
1759         }
1760
1761         DBG_871X("%s, rts_thresh =%d\n", __func__, padapter->registrypriv.rts_thresh);
1762
1763         return 0;
1764 }
1765
1766 static int rtw_wx_get_rts(struct net_device *dev,
1767                              struct iw_request_info *info,
1768                              union iwreq_data *wrqu, char *extra)
1769 {
1770         struct adapter *padapter = (struct adapter *)rtw_netdev_priv(dev);
1771
1772         DBG_871X("%s, rts_thresh =%d\n", __func__, padapter->registrypriv.rts_thresh);
1773
1774         wrqu->rts.value = padapter->registrypriv.rts_thresh;
1775         wrqu->rts.fixed = 0;    /* no auto select */
1776         /* wrqu->rts.disabled = (wrqu->rts.value == DEFAULT_RTS_THRESHOLD); */
1777
1778         return 0;
1779 }
1780
1781 static int rtw_wx_set_frag(struct net_device *dev,
1782                              struct iw_request_info *info,
1783                              union iwreq_data *wrqu, char *extra)
1784 {
1785         struct adapter *padapter = (struct adapter *)rtw_netdev_priv(dev);
1786
1787         if (wrqu->frag.disabled)
1788                 padapter->xmitpriv.frag_len = MAX_FRAG_THRESHOLD;
1789         else {
1790                 if (wrqu->frag.value < MIN_FRAG_THRESHOLD ||
1791                     wrqu->frag.value > MAX_FRAG_THRESHOLD)
1792                         return -EINVAL;
1793
1794                 padapter->xmitpriv.frag_len = wrqu->frag.value & ~0x1;
1795         }
1796
1797         DBG_871X("%s, frag_len =%d\n", __func__, padapter->xmitpriv.frag_len);
1798
1799         return 0;
1800
1801 }
1802
1803 static int rtw_wx_get_frag(struct net_device *dev,
1804                              struct iw_request_info *info,
1805                              union iwreq_data *wrqu, char *extra)
1806 {
1807         struct adapter *padapter = (struct adapter *)rtw_netdev_priv(dev);
1808
1809         DBG_871X("%s, frag_len =%d\n", __func__, padapter->xmitpriv.frag_len);
1810
1811         wrqu->frag.value = padapter->xmitpriv.frag_len;
1812         wrqu->frag.fixed = 0;   /* no auto select */
1813         /* wrqu->frag.disabled = (wrqu->frag.value == DEFAULT_FRAG_THRESHOLD); */
1814
1815         return 0;
1816 }
1817
1818 static int rtw_wx_get_retry(struct net_device *dev,
1819                              struct iw_request_info *info,
1820                              union iwreq_data *wrqu, char *extra)
1821 {
1822         /* struct adapter *padapter = (struct adapter *)rtw_netdev_priv(dev); */
1823
1824
1825         wrqu->retry.value = 7;
1826         wrqu->retry.fixed = 0;  /* no auto select */
1827         wrqu->retry.disabled = 1;
1828
1829         return 0;
1830
1831 }
1832
1833 static int rtw_wx_set_enc(struct net_device *dev,
1834                             struct iw_request_info *info,
1835                             union iwreq_data *wrqu, char *keybuf)
1836 {
1837         u32 key, ret = 0;
1838         u32 keyindex_provided;
1839         struct ndis_802_11_wep   wep;
1840         enum NDIS_802_11_AUTHENTICATION_MODE authmode;
1841
1842         struct iw_point *erq = &(wrqu->encoding);
1843         struct adapter *padapter = (struct adapter *)rtw_netdev_priv(dev);
1844         struct pwrctrl_priv *pwrpriv = adapter_to_pwrctl(padapter);
1845         DBG_871X("+rtw_wx_set_enc, flags = 0x%x\n", erq->flags);
1846
1847         memset(&wep, 0, sizeof(struct ndis_802_11_wep));
1848
1849         key = erq->flags & IW_ENCODE_INDEX;
1850
1851         if (erq->flags & IW_ENCODE_DISABLED) {
1852                 DBG_871X("EncryptionDisabled\n");
1853                 padapter->securitypriv.ndisencryptstatus = Ndis802_11EncryptionDisabled;
1854                 padapter->securitypriv.dot11PrivacyAlgrthm = _NO_PRIVACY_;
1855                 padapter->securitypriv.dot118021XGrpPrivacy = _NO_PRIVACY_;
1856                 padapter->securitypriv.dot11AuthAlgrthm = dot11AuthAlgrthm_Open; /* open system */
1857                 authmode = Ndis802_11AuthModeOpen;
1858                 padapter->securitypriv.ndisauthtype =authmode;
1859
1860                 goto exit;
1861         }
1862
1863         if (key) {
1864                 if (key > WEP_KEYS)
1865                         return -EINVAL;
1866                 key--;
1867                 keyindex_provided = 1;
1868         } else {
1869                 keyindex_provided = 0;
1870                 key = padapter->securitypriv.dot11PrivacyKeyIndex;
1871                 DBG_871X("rtw_wx_set_enc, key =%d\n", key);
1872         }
1873
1874         /* set authentication mode */
1875         if (erq->flags & IW_ENCODE_OPEN) {
1876                 DBG_871X("rtw_wx_set_enc():IW_ENCODE_OPEN\n");
1877                 padapter->securitypriv.ndisencryptstatus = Ndis802_11Encryption1Enabled;/* Ndis802_11EncryptionDisabled; */
1878
1879                 padapter->securitypriv.dot11AuthAlgrthm = dot11AuthAlgrthm_Open;
1880
1881                 padapter->securitypriv.dot11PrivacyAlgrthm = _NO_PRIVACY_;
1882                 padapter->securitypriv.dot118021XGrpPrivacy = _NO_PRIVACY_;
1883                 authmode = Ndis802_11AuthModeOpen;
1884                 padapter->securitypriv.ndisauthtype =authmode;
1885         } else if (erq->flags & IW_ENCODE_RESTRICTED) {
1886                 DBG_871X("rtw_wx_set_enc():IW_ENCODE_RESTRICTED\n");
1887                 padapter->securitypriv.ndisencryptstatus = Ndis802_11Encryption1Enabled;
1888
1889                 padapter->securitypriv.dot11AuthAlgrthm = dot11AuthAlgrthm_Shared;
1890
1891                 padapter->securitypriv.dot11PrivacyAlgrthm = _WEP40_;
1892                 padapter->securitypriv.dot118021XGrpPrivacy = _WEP40_;
1893                 authmode = Ndis802_11AuthModeShared;
1894                 padapter->securitypriv.ndisauthtype =authmode;
1895         } else {
1896                 DBG_871X("rtw_wx_set_enc():erq->flags = 0x%x\n", erq->flags);
1897
1898                 padapter->securitypriv.ndisencryptstatus = Ndis802_11Encryption1Enabled;/* Ndis802_11EncryptionDisabled; */
1899                 padapter->securitypriv.dot11AuthAlgrthm = dot11AuthAlgrthm_Open; /* open system */
1900                 padapter->securitypriv.dot11PrivacyAlgrthm = _NO_PRIVACY_;
1901                 padapter->securitypriv.dot118021XGrpPrivacy = _NO_PRIVACY_;
1902                 authmode = Ndis802_11AuthModeOpen;
1903                 padapter->securitypriv.ndisauthtype =authmode;
1904         }
1905
1906         wep.KeyIndex = key;
1907         if (erq->length > 0) {
1908                 wep.KeyLength = erq->length <= 5 ? 5 : 13;
1909
1910                 wep.Length = wep.KeyLength + FIELD_OFFSET(struct ndis_802_11_wep, KeyMaterial);
1911         } else {
1912                 wep.KeyLength = 0 ;
1913
1914                 if (keyindex_provided == 1) { /*  set key_id only, no given KeyMaterial(erq->length == 0). */
1915                         padapter->securitypriv.dot11PrivacyKeyIndex = key;
1916
1917                         DBG_871X("(keyindex_provided == 1), keyid =%d, key_len =%d\n", key, padapter->securitypriv.dot11DefKeylen[key]);
1918
1919                         switch (padapter->securitypriv.dot11DefKeylen[key]) {
1920                                 case 5:
1921                                         padapter->securitypriv.dot11PrivacyAlgrthm = _WEP40_;
1922                                         break;
1923                                 case 13:
1924                                         padapter->securitypriv.dot11PrivacyAlgrthm = _WEP104_;
1925                                         break;
1926                                 default:
1927                                         padapter->securitypriv.dot11PrivacyAlgrthm = _NO_PRIVACY_;
1928                                         break;
1929                         }
1930
1931                         goto exit;
1932
1933                 }
1934
1935         }
1936
1937         wep.KeyIndex |= 0x80000000;
1938
1939         memcpy(wep.KeyMaterial, keybuf, wep.KeyLength);
1940
1941         if (rtw_set_802_11_add_wep(padapter, &wep) == false) {
1942                 if (rf_on == pwrpriv->rf_pwrstate)
1943                         ret = -EOPNOTSUPP;
1944                 goto exit;
1945         }
1946
1947 exit:
1948         return ret;
1949 }
1950
1951 static int rtw_wx_get_enc(struct net_device *dev,
1952                             struct iw_request_info *info,
1953                             union iwreq_data *wrqu, char *keybuf)
1954 {
1955         uint key, ret = 0;
1956         struct adapter *padapter = (struct adapter *)rtw_netdev_priv(dev);
1957         struct iw_point *erq = &(wrqu->encoding);
1958         struct  mlme_priv *pmlmepriv = &(padapter->mlmepriv);
1959
1960         if (check_fwstate(pmlmepriv, _FW_LINKED) != true) {
1961                  if (check_fwstate(pmlmepriv, WIFI_ADHOC_MASTER_STATE) != true) {
1962                          erq->length = 0;
1963                          erq->flags |= IW_ENCODE_DISABLED;
1964                          return 0;
1965                  }
1966         }
1967
1968
1969         key = erq->flags & IW_ENCODE_INDEX;
1970
1971         if (key) {
1972                 if (key > WEP_KEYS)
1973                         return -EINVAL;
1974                 key--;
1975         } else {
1976                 key = padapter->securitypriv.dot11PrivacyKeyIndex;
1977         }
1978
1979         erq->flags = key + 1;
1980
1981         /* if (padapter->securitypriv.ndisauthtype == Ndis802_11AuthModeOpen) */
1982         /*  */
1983         /*       erq->flags |= IW_ENCODE_OPEN; */
1984         /*  */
1985
1986         switch (padapter->securitypriv.ndisencryptstatus) {
1987         case Ndis802_11EncryptionNotSupported:
1988         case Ndis802_11EncryptionDisabled:
1989                 erq->length = 0;
1990                 erq->flags |= IW_ENCODE_DISABLED;
1991                 break;
1992         case Ndis802_11Encryption1Enabled:
1993                 erq->length = padapter->securitypriv.dot11DefKeylen[key];
1994
1995                 if (erq->length) {
1996                         memcpy(keybuf, padapter->securitypriv.dot11DefKey[key].skey, padapter->securitypriv.dot11DefKeylen[key]);
1997
1998                         erq->flags |= IW_ENCODE_ENABLED;
1999
2000                         if (padapter->securitypriv.ndisauthtype == Ndis802_11AuthModeOpen)
2001                                 erq->flags |= IW_ENCODE_OPEN;
2002                         else if (padapter->securitypriv.ndisauthtype == Ndis802_11AuthModeShared)
2003                                 erq->flags |= IW_ENCODE_RESTRICTED;
2004                 } else {
2005                         erq->length = 0;
2006                         erq->flags |= IW_ENCODE_DISABLED;
2007                 }
2008                 break;
2009         case Ndis802_11Encryption2Enabled:
2010         case Ndis802_11Encryption3Enabled:
2011                 erq->length = 16;
2012                 erq->flags |= (IW_ENCODE_ENABLED | IW_ENCODE_OPEN | IW_ENCODE_NOKEY);
2013                 break;
2014         default:
2015                 erq->length = 0;
2016                 erq->flags |= IW_ENCODE_DISABLED;
2017                 break;
2018         }
2019         return ret;
2020 }
2021
2022 static int rtw_wx_get_power(struct net_device *dev,
2023                              struct iw_request_info *info,
2024                              union iwreq_data *wrqu, char *extra)
2025 {
2026         /* struct adapter *padapter = (struct adapter *)rtw_netdev_priv(dev); */
2027
2028         wrqu->power.value = 0;
2029         wrqu->power.fixed = 0;  /* no auto select */
2030         wrqu->power.disabled = 1;
2031
2032         return 0;
2033 }
2034
2035 static int rtw_wx_set_gen_ie(struct net_device *dev,
2036                              struct iw_request_info *info,
2037                              union iwreq_data *wrqu, char *extra)
2038 {
2039         struct adapter *padapter = (struct adapter *)rtw_netdev_priv(dev);
2040
2041         return rtw_set_wpa_ie(padapter, extra, wrqu->data.length);
2042 }
2043
2044 static int rtw_wx_set_auth(struct net_device *dev,
2045                            struct iw_request_info *info,
2046                            union iwreq_data *wrqu, char *extra)
2047 {
2048         struct adapter *padapter = (struct adapter *)rtw_netdev_priv(dev);
2049         struct iw_param *param = (struct iw_param *)&(wrqu->param);
2050         int ret = 0;
2051
2052         switch (param->flags & IW_AUTH_INDEX) {
2053         case IW_AUTH_WPA_VERSION:
2054                 break;
2055         case IW_AUTH_CIPHER_PAIRWISE:
2056                 break;
2057         case IW_AUTH_CIPHER_GROUP:
2058                 break;
2059         case IW_AUTH_KEY_MGMT:
2060                 /*
2061                  *  ??? does not use these parameters
2062                  */
2063                 break;
2064         case IW_AUTH_TKIP_COUNTERMEASURES:
2065                 /* wpa_supplicant is setting the tkip countermeasure. */
2066                 if (param->value) /* enabling */
2067                         padapter->securitypriv.btkip_countermeasure = true;
2068                 else /* disabling */
2069                         padapter->securitypriv.btkip_countermeasure = false;
2070                 break;
2071         case IW_AUTH_DROP_UNENCRYPTED:
2072                 /* HACK:
2073                  *
2074                  * wpa_supplicant calls set_wpa_enabled when the driver
2075                  * is loaded and unloaded, regardless of if WPA is being
2076                  * used.  No other calls are made which can be used to
2077                  * determine if encryption will be used or not prior to
2078                  * association being expected.  If encryption is not being
2079                  * used, drop_unencrypted is set to false, else true -- we
2080                  * can use this to determine if the CAP_PRIVACY_ON bit should
2081                  * be set.
2082                  */
2083
2084                 /*
2085                  * This means init value, or using wep, ndisencryptstatus =
2086                  * Ndis802_11Encryption1Enabled, then it needn't reset it;
2087                  */
2088                 if (padapter->securitypriv.ndisencryptstatus == Ndis802_11Encryption1Enabled)
2089                         break;
2090
2091                 if (param->value) {
2092                         padapter->securitypriv.ndisencryptstatus = Ndis802_11EncryptionDisabled;
2093                         padapter->securitypriv.dot11PrivacyAlgrthm = _NO_PRIVACY_;
2094                         padapter->securitypriv.dot118021XGrpPrivacy = _NO_PRIVACY_;
2095                         padapter->securitypriv.dot11AuthAlgrthm = dot11AuthAlgrthm_Open; /* open system */
2096                         padapter->securitypriv.ndisauthtype =Ndis802_11AuthModeOpen;
2097                 }
2098
2099                 break;
2100         case IW_AUTH_80211_AUTH_ALG:
2101                 /*
2102                  *  It's the starting point of a link layer connection using wpa_supplicant
2103                  */
2104                 if (check_fwstate(&padapter->mlmepriv, _FW_LINKED)) {
2105                         LeaveAllPowerSaveMode(padapter);
2106                         rtw_disassoc_cmd(padapter, 500, false);
2107                         DBG_871X("%s...call rtw_indicate_disconnect\n ", __func__);
2108                         rtw_indicate_disconnect(padapter);
2109                         rtw_free_assoc_resources(padapter, 1);
2110                 }
2111
2112                 ret = wpa_set_auth_algs(dev, (u32)param->value);
2113                 break;
2114         case IW_AUTH_WPA_ENABLED:
2115                 break;
2116         case IW_AUTH_RX_UNENCRYPTED_EAPOL:
2117                 break;
2118         case IW_AUTH_PRIVACY_INVOKED:
2119                 break;
2120         default:
2121                 return -EOPNOTSUPP;
2122         }
2123
2124         return ret;
2125 }
2126
2127 static int rtw_wx_set_enc_ext(struct net_device *dev,
2128                              struct iw_request_info *info,
2129                              union iwreq_data *wrqu, char *extra)
2130 {
2131         char *alg_name;
2132         u32 param_len;
2133         struct ieee_param *param = NULL;
2134         struct iw_point *pencoding = &wrqu->encoding;
2135         struct iw_encode_ext *pext = (struct iw_encode_ext *)extra;
2136         int ret = 0;
2137
2138         param_len = sizeof(struct ieee_param) + pext->key_len;
2139         param = kzalloc(param_len, GFP_KERNEL);
2140         if (param == NULL)
2141                 return -1;
2142
2143         param->cmd = IEEE_CMD_SET_ENCRYPTION;
2144         memset(param->sta_addr, 0xff, ETH_ALEN);
2145
2146
2147         switch (pext->alg) {
2148         case IW_ENCODE_ALG_NONE:
2149                 /* todo: remove key */
2150                 /* remove = 1; */
2151                 alg_name = "none";
2152                 break;
2153         case IW_ENCODE_ALG_WEP:
2154                 alg_name = "WEP";
2155                 break;
2156         case IW_ENCODE_ALG_TKIP:
2157                 alg_name = "TKIP";
2158                 break;
2159         case IW_ENCODE_ALG_CCMP:
2160                 alg_name = "CCMP";
2161                 break;
2162         case IW_ENCODE_ALG_AES_CMAC:
2163                 alg_name = "BIP";
2164                 break;
2165         default:
2166                 ret = -1;
2167                 goto exit;
2168         }
2169
2170         strncpy((char *)param->u.crypt.alg, alg_name, IEEE_CRYPT_ALG_NAME_LEN);
2171
2172         if (pext->ext_flags & IW_ENCODE_EXT_SET_TX_KEY)
2173                 param->u.crypt.set_tx = 1;
2174
2175         /* cliW: WEP does not have group key
2176          * just not checking GROUP key setting
2177          */
2178         if ((pext->alg != IW_ENCODE_ALG_WEP) &&
2179                 ((pext->ext_flags & IW_ENCODE_EXT_GROUP_KEY)
2180                 || (pext->ext_flags & IW_ENCODE_ALG_AES_CMAC))) {
2181                 param->u.crypt.set_tx = 0;
2182         }
2183
2184         param->u.crypt.idx = (pencoding->flags&0x00FF) -1 ;
2185
2186         if (pext->ext_flags & IW_ENCODE_EXT_RX_SEQ_VALID)
2187                 memcpy(param->u.crypt.seq, pext->rx_seq, 8);
2188
2189         if (pext->key_len) {
2190                 param->u.crypt.key_len = pext->key_len;
2191                 /* memcpy(param + 1, pext + 1, pext->key_len); */
2192                 memcpy(param->u.crypt.key, pext + 1, pext->key_len);
2193         }
2194
2195         if (pencoding->flags & IW_ENCODE_DISABLED) {
2196                 /* todo: remove key */
2197                 /* remove = 1; */
2198         }
2199
2200         ret =  wpa_set_encryption(dev, param, param_len);
2201
2202 exit:
2203         kfree(param);
2204
2205         return ret;
2206 }
2207
2208
2209 static int rtw_wx_get_nick(struct net_device *dev,
2210                              struct iw_request_info *info,
2211                              union iwreq_data *wrqu, char *extra)
2212 {
2213         /* struct adapter *padapter = (struct adapter *)rtw_netdev_priv(dev); */
2214          /* struct mlme_priv *pmlmepriv = &(padapter->mlmepriv); */
2215          /* struct security_priv *psecuritypriv = &padapter->securitypriv; */
2216
2217         if (extra) {
2218                 wrqu->data.length = 14;
2219                 wrqu->data.flags = 1;
2220                 memcpy(extra, "<WIFI@REALTEK>", 14);
2221         }
2222         return 0;
2223 }
2224
2225 static int rtw_wx_read32(struct net_device *dev,
2226                             struct iw_request_info *info,
2227                             union iwreq_data *wrqu, char *extra)
2228 {
2229         struct adapter *padapter;
2230         struct iw_point *p;
2231         u16 len;
2232         u32 addr;
2233         u32 data32;
2234         u32 bytes;
2235         u8 *ptmp;
2236         int ret;
2237
2238
2239         ret = 0;
2240         padapter = (struct adapter *)rtw_netdev_priv(dev);
2241         p = &wrqu->data;
2242         len = p->length;
2243         if (0 == len)
2244                 return -EINVAL;
2245
2246         ptmp = rtw_malloc(len);
2247         if (NULL == ptmp)
2248                 return -ENOMEM;
2249
2250         if (copy_from_user(ptmp, p->pointer, len)) {
2251                 ret = -EFAULT;
2252                 goto exit;
2253         }
2254
2255         bytes = 0;
2256         addr = 0;
2257         sscanf(ptmp, "%d,%x", &bytes, &addr);
2258
2259         switch (bytes) {
2260         case 1:
2261                 data32 = rtw_read8(padapter, addr);
2262                 sprintf(extra, "0x%02X", data32);
2263                 break;
2264         case 2:
2265                 data32 = rtw_read16(padapter, addr);
2266                 sprintf(extra, "0x%04X", data32);
2267                 break;
2268         case 4:
2269                 data32 = rtw_read32(padapter, addr);
2270                 sprintf(extra, "0x%08X", data32);
2271                 break;
2272         default:
2273                 DBG_871X(KERN_INFO "%s: usage> read [bytes],[address(hex)]\n", __func__);
2274                 ret = -EINVAL;
2275                 goto exit;
2276         }
2277         DBG_871X(KERN_INFO "%s: addr = 0x%08X data =%s\n", __func__, addr, extra);
2278
2279 exit:
2280         kfree(ptmp);
2281
2282         return ret;
2283 }
2284
2285 static int rtw_wx_write32(struct net_device *dev,
2286                             struct iw_request_info *info,
2287                             union iwreq_data *wrqu, char *extra)
2288 {
2289         struct adapter *padapter = (struct adapter *)rtw_netdev_priv(dev);
2290
2291         u32 addr;
2292         u32 data32;
2293         u32 bytes;
2294
2295
2296         bytes = 0;
2297         addr = 0;
2298         data32 = 0;
2299         sscanf(extra, "%d,%x,%x", &bytes, &addr, &data32);
2300
2301         switch (bytes) {
2302         case 1:
2303                 rtw_write8(padapter, addr, (u8)data32);
2304                 DBG_871X(KERN_INFO "%s: addr = 0x%08X data = 0x%02X\n", __func__, addr, (u8)data32);
2305                 break;
2306         case 2:
2307                 rtw_write16(padapter, addr, (u16)data32);
2308                 DBG_871X(KERN_INFO "%s: addr = 0x%08X data = 0x%04X\n", __func__, addr, (u16)data32);
2309                 break;
2310         case 4:
2311                 rtw_write32(padapter, addr, data32);
2312                 DBG_871X(KERN_INFO "%s: addr = 0x%08X data = 0x%08X\n", __func__, addr, data32);
2313                 break;
2314         default:
2315                 DBG_871X(KERN_INFO "%s: usage> write [bytes],[address(hex)],[data(hex)]\n", __func__);
2316                 return -EINVAL;
2317         }
2318
2319         return 0;
2320 }
2321
2322 static int rtw_wx_read_rf(struct net_device *dev,
2323                             struct iw_request_info *info,
2324                             union iwreq_data *wrqu, char *extra)
2325 {
2326         struct adapter *padapter = (struct adapter *)rtw_netdev_priv(dev);
2327         u32 path, addr, data32;
2328
2329
2330         path = *(u32 *)extra;
2331         addr = *((u32 *)extra + 1);
2332         data32 = rtw_hal_read_rfreg(padapter, path, addr, 0xFFFFF);
2333         /*
2334          * IMPORTANT!!
2335          * Only when wireless private ioctl is at odd order,
2336          * "extra" would be copied to user space.
2337          */
2338         sprintf(extra, "0x%05x", data32);
2339
2340         return 0;
2341 }
2342
2343 static int rtw_wx_write_rf(struct net_device *dev,
2344                             struct iw_request_info *info,
2345                             union iwreq_data *wrqu, char *extra)
2346 {
2347         struct adapter *padapter = (struct adapter *)rtw_netdev_priv(dev);
2348         u32 path, addr, data32;
2349
2350
2351         path = *(u32 *)extra;
2352         addr = *((u32 *)extra + 1);
2353         data32 = *((u32 *)extra + 2);
2354 /*      DBG_871X("%s: path =%d addr = 0x%02x data = 0x%05x\n", __func__, path, addr, data32); */
2355         rtw_hal_write_rfreg(padapter, path, addr, 0xFFFFF, data32);
2356
2357         return 0;
2358 }
2359
2360 static int rtw_wx_priv_null(struct net_device *dev, struct iw_request_info *a,
2361                  union iwreq_data *wrqu, char *b)
2362 {
2363         return -1;
2364 }
2365
2366 static int dummy(struct net_device *dev, struct iw_request_info *a,
2367                  union iwreq_data *wrqu, char *b)
2368 {
2369         /* struct adapter *padapter = (struct adapter *)rtw_netdev_priv(dev); */
2370         /* struct mlme_priv *pmlmepriv = &(padapter->mlmepriv); */
2371
2372         /* DBG_871X("cmd_code =%x, fwstate = 0x%x\n", a->cmd, get_fwstate(pmlmepriv)); */
2373
2374         return -1;
2375
2376 }
2377
2378 static int rtw_wx_set_channel_plan(struct net_device *dev,
2379                                struct iw_request_info *info,
2380                                union iwreq_data *wrqu, char *extra)
2381 {
2382         struct adapter *padapter = (struct adapter *)rtw_netdev_priv(dev);
2383         u8 channel_plan_req = (u8)(*((int *)wrqu));
2384
2385         if (_SUCCESS == rtw_set_chplan_cmd(padapter, channel_plan_req, 1, 1))
2386                 DBG_871X("%s set channel_plan = 0x%02X\n", __func__, channel_plan_req);
2387          else
2388                 return -EPERM;
2389
2390         return 0;
2391 }
2392
2393 static int rtw_wx_set_mtk_wps_probe_ie(struct net_device *dev,
2394                 struct iw_request_info *a,
2395                 union iwreq_data *wrqu, char *b)
2396 {
2397         return 0;
2398 }
2399
2400 static int rtw_wx_get_sensitivity(struct net_device *dev,
2401                                 struct iw_request_info *info,
2402                                 union iwreq_data *wrqu, char *buf)
2403 {
2404         return 0;
2405 }
2406
2407 static int rtw_wx_set_mtk_wps_ie(struct net_device *dev,
2408                                 struct iw_request_info *info,
2409                                 union iwreq_data *wrqu, char *extra)
2410 {
2411         return 0;
2412 }
2413
2414 /*
2415 typedef int (*iw_handler)(struct net_device *dev, struct iw_request_info *info,
2416                           union iwreq_data *wrqu, char *extra);
2417 */
2418 /*
2419  *For all data larger than 16 octets, we need to use a
2420  *pointer to memory allocated in user space.
2421  */
2422 static  int rtw_drvext_hdl(struct net_device *dev, struct iw_request_info *info,
2423                                                 union iwreq_data *wrqu, char *extra)
2424 {
2425         return 0;
2426 }
2427
2428 static int rtw_mp_ioctl_hdl(struct net_device *dev, struct iw_request_info *info,
2429                                                 union iwreq_data *wrqu, char *extra)
2430 {
2431         int ret = 0;
2432         return ret;
2433 }
2434
2435 static int rtw_get_ap_info(struct net_device *dev,
2436                                struct iw_request_info *info,
2437                                union iwreq_data *wrqu, char *extra)
2438 {
2439         int ret = 0;
2440         u32 cnt = 0, wpa_ielen;
2441         struct list_head        *plist, *phead;
2442         unsigned char *pbuf;
2443         u8 bssid[ETH_ALEN];
2444         char data[32];
2445         struct wlan_network *pnetwork = NULL;
2446         struct adapter *padapter = (struct adapter *)rtw_netdev_priv(dev);
2447         struct mlme_priv *pmlmepriv = &(padapter->mlmepriv);
2448         struct __queue *queue = &(pmlmepriv->scanned_queue);
2449         struct iw_point *pdata = &wrqu->data;
2450
2451         DBG_871X("+rtw_get_aplist_info\n");
2452
2453         if ((padapter->bDriverStopped) || (pdata == NULL)) {
2454                 ret = -EINVAL;
2455                 goto exit;
2456         }
2457
2458         while ((check_fwstate(pmlmepriv, (_FW_UNDER_SURVEY|_FW_UNDER_LINKING))) == true) {
2459                 msleep(30);
2460                 cnt++;
2461                 if (cnt > 100)
2462                         break;
2463         }
2464
2465
2466         /* pdata->length = 0;? */
2467         pdata->flags = 0;
2468         if (pdata->length>=32) {
2469                 if (copy_from_user(data, pdata->pointer, 32)) {
2470                         ret = -EINVAL;
2471                         goto exit;
2472                 }
2473         } else {
2474                 ret = -EINVAL;
2475                 goto exit;
2476         }
2477
2478         spin_lock_bh(&(pmlmepriv->scanned_queue.lock));
2479
2480         phead = get_list_head(queue);
2481         plist = get_next(phead);
2482
2483         while (1) {
2484                 if (phead == plist)
2485                         break;
2486
2487
2488                 pnetwork = LIST_CONTAINOR(plist, struct wlan_network, list);
2489
2490                 if (!mac_pton(data, bssid)) {
2491                         DBG_871X("Invalid BSSID '%s'.\n", (u8 *)data);
2492                         spin_unlock_bh(&(pmlmepriv->scanned_queue.lock));
2493                         return -EINVAL;
2494                 }
2495
2496
2497                 if (!memcmp(bssid, pnetwork->network.MacAddress, ETH_ALEN)) { /* BSSID match, then check if supporting wpa/wpa2 */
2498                         DBG_871X("BSSID:" MAC_FMT "\n", MAC_ARG(bssid));
2499
2500                         pbuf = rtw_get_wpa_ie(&pnetwork->network.IEs[12], &wpa_ielen, pnetwork->network.IELength-12);
2501                         if (pbuf && (wpa_ielen>0)) {
2502                                 pdata->flags = 1;
2503                                 break;
2504                         }
2505
2506                         pbuf = rtw_get_wpa2_ie(&pnetwork->network.IEs[12], &wpa_ielen, pnetwork->network.IELength-12);
2507                         if (pbuf && (wpa_ielen>0)) {
2508                                 pdata->flags = 2;
2509                                 break;
2510                         }
2511                 }
2512
2513                 plist = get_next(plist);
2514
2515         }
2516
2517         spin_unlock_bh(&(pmlmepriv->scanned_queue.lock));
2518
2519         if (pdata->length>=34) {
2520                 if (copy_to_user((u8 __force __user *)pdata->pointer+32, (u8 *)&pdata->flags, 1)) {
2521                         ret = -EINVAL;
2522                         goto exit;
2523                 }
2524         }
2525
2526 exit:
2527
2528         return ret;
2529
2530 }
2531
2532 static int rtw_set_pid(struct net_device *dev,
2533                                struct iw_request_info *info,
2534                                union iwreq_data *wrqu, char *extra)
2535 {
2536
2537         int ret = 0;
2538         struct adapter *padapter = rtw_netdev_priv(dev);
2539         int *pdata = (int *)wrqu;
2540         int selector;
2541
2542         if ((padapter->bDriverStopped) || (pdata == NULL)) {
2543                 ret = -EINVAL;
2544                 goto exit;
2545         }
2546
2547         selector = *pdata;
2548         if (selector < 3 && selector >= 0) {
2549                 padapter->pid[selector] = *(pdata+1);
2550                 DBG_871X("%s set pid[%d]=%d\n", __func__, selector , padapter->pid[selector]);
2551         }
2552         else
2553                 DBG_871X("%s selector %d error\n", __func__, selector);
2554
2555 exit:
2556
2557         return ret;
2558
2559 }
2560
2561 static int rtw_wps_start(struct net_device *dev,
2562                                struct iw_request_info *info,
2563                                union iwreq_data *wrqu, char *extra)
2564 {
2565
2566         int ret = 0;
2567         struct adapter *padapter = (struct adapter *)rtw_netdev_priv(dev);
2568         struct iw_point *pdata = &wrqu->data;
2569         u32   u32wps_start = 0;
2570         unsigned int uintRet = 0;
2571
2572         if ((true == padapter->bDriverStopped) ||(true ==padapter->bSurpriseRemoved) || (NULL == pdata)) {
2573                 ret = -EINVAL;
2574                 goto exit;
2575         }
2576
2577         uintRet = copy_from_user((void *)&u32wps_start, pdata->pointer, 4);
2578         if (u32wps_start == 0)
2579                 u32wps_start = *extra;
2580
2581         DBG_871X("[%s] wps_start = %d\n", __func__, u32wps_start);
2582
2583 exit:
2584
2585         return ret;
2586
2587 }
2588
2589 static int rtw_p2p_set(struct net_device *dev,
2590                                struct iw_request_info *info,
2591                                union iwreq_data *wrqu, char *extra)
2592 {
2593
2594         return 0;
2595
2596 }
2597
2598 static int rtw_p2p_get(struct net_device *dev,
2599                                struct iw_request_info *info,
2600                                union iwreq_data *wrqu, char *extra)
2601 {
2602
2603         return 0;
2604
2605 }
2606
2607 static int rtw_p2p_get2(struct net_device *dev,
2608                                                 struct iw_request_info *info,
2609                                                 union iwreq_data *wrqu, char *extra)
2610 {
2611
2612         return 0;
2613
2614 }
2615
2616 static int rtw_rereg_nd_name(struct net_device *dev,
2617                                struct iw_request_info *info,
2618                                union iwreq_data *wrqu, char *extra)
2619 {
2620         int ret = 0;
2621         struct adapter *padapter = rtw_netdev_priv(dev);
2622         struct rereg_nd_name_data *rereg_priv = &padapter->rereg_nd_name_priv;
2623         char new_ifname[IFNAMSIZ];
2624
2625         if (rereg_priv->old_ifname[0] == 0) {
2626                 char *reg_ifname;
2627                 reg_ifname = padapter->registrypriv.ifname;
2628
2629                 strncpy(rereg_priv->old_ifname, reg_ifname, IFNAMSIZ);
2630                 rereg_priv->old_ifname[IFNAMSIZ-1] = 0;
2631         }
2632
2633         /* DBG_871X("%s wrqu->data.length:%d\n", __func__, wrqu->data.length); */
2634         if (wrqu->data.length > IFNAMSIZ)
2635                 return -EFAULT;
2636
2637         if (copy_from_user(new_ifname, wrqu->data.pointer, IFNAMSIZ))
2638                 return -EFAULT;
2639
2640         if (0 == strcmp(rereg_priv->old_ifname, new_ifname))
2641                 return ret;
2642
2643         DBG_871X("%s new_ifname:%s\n", __func__, new_ifname);
2644         if (0 != (ret = rtw_change_ifname(padapter, new_ifname)))
2645                 goto exit;
2646
2647         strncpy(rereg_priv->old_ifname, new_ifname, IFNAMSIZ);
2648         rereg_priv->old_ifname[IFNAMSIZ-1] = 0;
2649
2650         if (!memcmp(new_ifname, "disable%d", 9)) {
2651
2652                 DBG_871X("%s disable\n", __func__);
2653                 /*  free network queue for Android's timming issue */
2654                 rtw_free_network_queue(padapter, true);
2655
2656                 /*  the interface is being "disabled", we can do deeper IPS */
2657                 /* rereg_priv->old_ips_mode = rtw_get_ips_mode_req(&padapter->pwrctrlpriv); */
2658                 /* rtw_ips_mode_req(&padapter->pwrctrlpriv, IPS_NORMAL); */
2659         }
2660 exit:
2661         return ret;
2662
2663 }
2664
2665 static int rtw_dbg_port(struct net_device *dev,
2666                                struct iw_request_info *info,
2667                                union iwreq_data *wrqu, char *extra)
2668 {
2669         u8 major_cmd, minor_cmd;
2670         u16 arg;
2671         u32 extra_arg, *pdata, val32;
2672         struct sta_info *psta;
2673         struct adapter *padapter = (struct adapter *)rtw_netdev_priv(dev);
2674         struct mlme_priv *pmlmepriv = &(padapter->mlmepriv);
2675         struct mlme_ext_priv *pmlmeext = &padapter->mlmeextpriv;
2676         struct mlme_ext_info *pmlmeinfo = &(pmlmeext->mlmext_info);
2677         struct wlan_network *cur_network = &(pmlmepriv->cur_network);
2678         struct sta_priv *pstapriv = &padapter->stapriv;
2679
2680
2681         pdata = (u32 *)&wrqu->data;
2682
2683         val32 = *pdata;
2684         arg = (u16)(val32&0x0000ffff);
2685         major_cmd = (u8)(val32>>24);
2686         minor_cmd = (u8)((val32>>16)&0x00ff);
2687
2688         extra_arg = *(pdata+1);
2689
2690         switch (major_cmd) {
2691                 case 0x70:/* read_reg */
2692                         switch (minor_cmd) {
2693                                 case 1:
2694                                         DBG_871X("rtw_read8(0x%x) = 0x%02x\n", arg, rtw_read8(padapter, arg));
2695                                         break;
2696                                 case 2:
2697                                         DBG_871X("rtw_read16(0x%x) = 0x%04x\n", arg, rtw_read16(padapter, arg));
2698                                         break;
2699                                 case 4:
2700                                         DBG_871X("rtw_read32(0x%x) = 0x%08x\n", arg, rtw_read32(padapter, arg));
2701                                         break;
2702                         }
2703                         break;
2704                 case 0x71:/* write_reg */
2705                         switch (minor_cmd) {
2706                                 case 1:
2707                                         rtw_write8(padapter, arg, extra_arg);
2708                                         DBG_871X("rtw_write8(0x%x) = 0x%02x\n", arg, rtw_read8(padapter, arg));
2709                                         break;
2710                                 case 2:
2711                                         rtw_write16(padapter, arg, extra_arg);
2712                                         DBG_871X("rtw_write16(0x%x) = 0x%04x\n", arg, rtw_read16(padapter, arg));
2713                                         break;
2714                                 case 4:
2715                                         rtw_write32(padapter, arg, extra_arg);
2716                                         DBG_871X("rtw_write32(0x%x) = 0x%08x\n", arg, rtw_read32(padapter, arg));
2717                                         break;
2718                         }
2719                         break;
2720                 case 0x72:/* read_bb */
2721                         DBG_871X("read_bbreg(0x%x) = 0x%x\n", arg, rtw_hal_read_bbreg(padapter, arg, 0xffffffff));
2722                         break;
2723                 case 0x73:/* write_bb */
2724                         rtw_hal_write_bbreg(padapter, arg, 0xffffffff, extra_arg);
2725                         DBG_871X("write_bbreg(0x%x) = 0x%x\n", arg, rtw_hal_read_bbreg(padapter, arg, 0xffffffff));
2726                         break;
2727                 case 0x74:/* read_rf */
2728                         DBG_871X("read RF_reg path(0x%02x), offset(0x%x), value(0x%08x)\n", minor_cmd, arg, rtw_hal_read_rfreg(padapter, minor_cmd, arg, 0xffffffff));
2729                         break;
2730                 case 0x75:/* write_rf */
2731                         rtw_hal_write_rfreg(padapter, minor_cmd, arg, 0xffffffff, extra_arg);
2732                         DBG_871X("write RF_reg path(0x%02x), offset(0x%x), value(0x%08x)\n", minor_cmd, arg, rtw_hal_read_rfreg(padapter, minor_cmd, arg, 0xffffffff));
2733                         break;
2734
2735                 case 0x76:
2736                         switch (minor_cmd) {
2737                                 case 0x00: /* normal mode, */
2738                                         padapter->recvpriv.is_signal_dbg = 0;
2739                                         break;
2740                                 case 0x01: /* dbg mode */
2741                                         padapter->recvpriv.is_signal_dbg = 1;
2742                                         extra_arg = extra_arg>100?100:extra_arg;
2743                                         padapter->recvpriv.signal_strength_dbg =extra_arg;
2744                                         break;
2745                         }
2746                         break;
2747                 case 0x78: /* IOL test */
2748                         break;
2749                 case 0x79:
2750                         {
2751                                 /*
2752                                 * dbg 0x79000000 [value], set RESP_TXAGC to + value, value:0~15
2753                                 * dbg 0x79010000 [value], set RESP_TXAGC to - value, value:0~15
2754                                 */
2755                                 u8 value =  extra_arg & 0x0f;
2756                                 u8 sign = minor_cmd;
2757                                 u16 write_value = 0;
2758
2759                                 DBG_871X("%s set RESP_TXAGC to %s %u\n", __func__, sign?"minus":"plus", value);
2760
2761                                 if (sign)
2762                                         value = value | 0x10;
2763
2764                                 write_value = value | (value << 5);
2765                                 rtw_write16(padapter, 0x6d9, write_value);
2766                         }
2767                         break;
2768                 case 0x7a:
2769                         receive_disconnect(padapter, pmlmeinfo->network.MacAddress
2770                                 , WLAN_REASON_EXPIRATION_CHK);
2771                         break;
2772                 case 0x7F:
2773                         switch (minor_cmd) {
2774                                 case 0x0:
2775                                         DBG_871X("fwstate = 0x%x\n", get_fwstate(pmlmepriv));
2776                                         break;
2777                                 case 0x01:
2778                                         DBG_871X("minor_cmd 0x%x\n", minor_cmd);
2779                                         break;
2780                                 case 0x02:
2781                                         DBG_871X("pmlmeinfo->state = 0x%x\n", pmlmeinfo->state);
2782                                         DBG_871X("DrvBcnEarly =%d\n", pmlmeext->DrvBcnEarly);
2783                                         DBG_871X("DrvBcnTimeOut =%d\n", pmlmeext->DrvBcnTimeOut);
2784                                         break;
2785                                 case 0x03:
2786                                         DBG_871X("qos_option =%d\n", pmlmepriv->qospriv.qos_option);
2787                                         DBG_871X("ht_option =%d\n", pmlmepriv->htpriv.ht_option);
2788                                         break;
2789                                 case 0x04:
2790                                         DBG_871X("cur_ch =%d\n", pmlmeext->cur_channel);
2791                                         DBG_871X("cur_bw =%d\n", pmlmeext->cur_bwmode);
2792                                         DBG_871X("cur_ch_off =%d\n", pmlmeext->cur_ch_offset);
2793
2794                                         DBG_871X("oper_ch =%d\n", rtw_get_oper_ch(padapter));
2795                                         DBG_871X("oper_bw =%d\n", rtw_get_oper_bw(padapter));
2796                                         DBG_871X("oper_ch_offet =%d\n", rtw_get_oper_choffset(padapter));
2797
2798                                         break;
2799                                 case 0x05:
2800                                         psta = rtw_get_stainfo(pstapriv, cur_network->network.MacAddress);
2801                                         if (psta) {
2802                                                 int i;
2803                                                 struct recv_reorder_ctrl *preorder_ctrl;
2804
2805                                                 DBG_871X("SSID =%s\n", cur_network->network.Ssid.Ssid);
2806                                                 DBG_871X("sta's macaddr:" MAC_FMT "\n", MAC_ARG(psta->hwaddr));
2807                                                 DBG_871X("cur_channel =%d, cur_bwmode =%d, cur_ch_offset =%d\n", pmlmeext->cur_channel, pmlmeext->cur_bwmode, pmlmeext->cur_ch_offset);
2808                                                 DBG_871X("rtsen =%d, cts2slef =%d\n", psta->rtsen, psta->cts2self);
2809                                                 DBG_871X("state = 0x%x, aid =%d, macid =%d, raid =%d\n", psta->state, psta->aid, psta->mac_id, psta->raid);
2810                                                 DBG_871X("qos_en =%d, ht_en =%d, init_rate =%d\n", psta->qos_option, psta->htpriv.ht_option, psta->init_rate);
2811                                                 DBG_871X("bwmode =%d, ch_offset =%d, sgi_20m =%d, sgi_40m =%d\n", psta->bw_mode, psta->htpriv.ch_offset, psta->htpriv.sgi_20m, psta->htpriv.sgi_40m);
2812                                                 DBG_871X("ampdu_enable = %d\n", psta->htpriv.ampdu_enable);
2813                                                 DBG_871X("agg_enable_bitmap =%x, candidate_tid_bitmap =%x\n", psta->htpriv.agg_enable_bitmap, psta->htpriv.candidate_tid_bitmap);
2814
2815                                                 for (i = 0;i<16;i++) {
2816                                                         preorder_ctrl = &psta->recvreorder_ctrl[i];
2817                                                         if (preorder_ctrl->enable)
2818                                                                 DBG_871X("tid =%d, indicate_seq =%d\n", i, preorder_ctrl->indicate_seq);
2819                                                 }
2820
2821                                         } else {
2822                                                 DBG_871X("can't get sta's macaddr, cur_network's macaddr:" MAC_FMT "\n", MAC_ARG(cur_network->network.MacAddress));
2823                                         }
2824                                         break;
2825                                 case 0x06:
2826                                         {
2827                                                 u32 ODMFlag;
2828                                                 rtw_hal_get_hwreg(padapter, HW_VAR_DM_FLAG, (u8 *)(&ODMFlag));
2829                                                 DBG_871X("(B)DMFlag = 0x%x, arg = 0x%x\n", ODMFlag, arg);
2830                                                 ODMFlag = (u32)(0x0f&arg);
2831                                                 DBG_871X("(A)DMFlag = 0x%x\n", ODMFlag);
2832                                                 rtw_hal_set_hwreg(padapter, HW_VAR_DM_FLAG, (u8 *)(&ODMFlag));
2833                                         }
2834                                         break;
2835                                 case 0x07:
2836                                         DBG_871X("bSurpriseRemoved =%d, bDriverStopped =%d\n",
2837                                                 padapter->bSurpriseRemoved, padapter->bDriverStopped);
2838                                         break;
2839                                 case 0x08:
2840                                         {
2841                                                 DBG_871X("minor_cmd 0x%x\n", minor_cmd);
2842                                         }
2843                                         break;
2844                                 case 0x09:
2845                                         {
2846                                                 int i, j;
2847                                                 struct list_head        *plist, *phead;
2848                                                 struct recv_reorder_ctrl *preorder_ctrl;
2849
2850                                                 DBG_871X("sta_dz_bitmap = 0x%x, tim_bitmap = 0x%x\n", pstapriv->sta_dz_bitmap, pstapriv->tim_bitmap);
2851
2852                                                 spin_lock_bh(&pstapriv->sta_hash_lock);
2853
2854                                                 for (i = 0; i< NUM_STA; i++) {
2855                                                         phead = &(pstapriv->sta_hash[i]);
2856                                                         plist = get_next(phead);
2857
2858                                                         while (phead != plist) {
2859                                                                 psta = LIST_CONTAINOR(plist, struct sta_info, hash_list);
2860
2861                                                                 plist = get_next(plist);
2862
2863                                                                 if (extra_arg == psta->aid) {
2864                                                                         DBG_871X("sta's macaddr:" MAC_FMT "\n", MAC_ARG(psta->hwaddr));
2865                                                                         DBG_871X("rtsen =%d, cts2slef =%d\n", psta->rtsen, psta->cts2self);
2866                                                                         DBG_871X("state = 0x%x, aid =%d, macid =%d, raid =%d\n", psta->state, psta->aid, psta->mac_id, psta->raid);
2867                                                                         DBG_871X("qos_en =%d, ht_en =%d, init_rate =%d\n", psta->qos_option, psta->htpriv.ht_option, psta->init_rate);
2868                                                                         DBG_871X("bwmode =%d, ch_offset =%d, sgi_20m =%d, sgi_40m =%d\n", psta->bw_mode, psta->htpriv.ch_offset, psta->htpriv.sgi_20m, psta->htpriv.sgi_40m);
2869                                                                         DBG_871X("ampdu_enable = %d\n", psta->htpriv.ampdu_enable);
2870                                                                         DBG_871X("agg_enable_bitmap =%x, candidate_tid_bitmap =%x\n", psta->htpriv.agg_enable_bitmap, psta->htpriv.candidate_tid_bitmap);
2871                                                                         DBG_871X("capability = 0x%x\n", psta->capability);
2872                                                                         DBG_871X("flags = 0x%x\n", psta->flags);
2873                                                                         DBG_871X("wpa_psk = 0x%x\n", psta->wpa_psk);
2874                                                                         DBG_871X("wpa2_group_cipher = 0x%x\n", psta->wpa2_group_cipher);
2875                                                                         DBG_871X("wpa2_pairwise_cipher = 0x%x\n", psta->wpa2_pairwise_cipher);
2876                                                                         DBG_871X("qos_info = 0x%x\n", psta->qos_info);
2877                                                                         DBG_871X("dot118021XPrivacy = 0x%x\n", psta->dot118021XPrivacy);
2878
2879
2880
2881                                                                         for (j = 0;j<16;j++) {
2882                                                                                 preorder_ctrl = &psta->recvreorder_ctrl[j];
2883                                                                                 if (preorder_ctrl->enable)
2884                                                                                         DBG_871X("tid =%d, indicate_seq =%d\n", j, preorder_ctrl->indicate_seq);
2885                                                                         }
2886                                                                 }
2887                                                         }
2888                                                 }
2889
2890                                                 spin_unlock_bh(&pstapriv->sta_hash_lock);
2891
2892                                         }
2893                                         break;
2894                                 case 0x0a:
2895                                         {
2896                                                 int max_mac_id = 0;
2897                                                 max_mac_id = rtw_search_max_mac_id(padapter);
2898                                                 printk("%s ==> max_mac_id = %d\n", __func__, max_mac_id);
2899                                         }
2900                                         break;
2901                                 case 0x0b: /* Enable = 1, Disable = 0 driver control vrtl_carrier_sense. */
2902                                         if (arg == 0) {
2903                                                 DBG_871X("disable driver ctrl vcs\n");
2904                                                 padapter->driver_vcs_en = 0;
2905                                         } else if (arg == 1) {
2906                                                 DBG_871X("enable driver ctrl vcs = %d\n", extra_arg);
2907                                                 padapter->driver_vcs_en = 1;
2908
2909                                                 if (extra_arg>2)
2910                                                         padapter->driver_vcs_type = 1;
2911                                                 else
2912                                                         padapter->driver_vcs_type = extra_arg;
2913                                         }
2914                                         break;
2915                                 case 0x0c:/* dump rx/tx packet */
2916                                         {
2917                                                 if (arg == 0) {
2918                                                         DBG_871X("dump rx packet (%d)\n", extra_arg);
2919                                                         /* pHalData->bDumpRxPkt =extra_arg; */
2920                                                         rtw_hal_set_def_var(padapter, HAL_DEF_DBG_DUMP_RXPKT, &(extra_arg));
2921                                                 } else if (arg == 1) {
2922                                                         DBG_871X("dump tx packet (%d)\n", extra_arg);
2923                                                         rtw_hal_set_def_var(padapter, HAL_DEF_DBG_DUMP_TXPKT, &(extra_arg));
2924                                                 }
2925                                         }
2926                                         break;
2927                                 case 0x0e:
2928                                         {
2929                                                 if (arg == 0) {
2930                                                         DBG_871X("disable driver ctrl rx_ampdu_factor\n");
2931                                                         padapter->driver_rx_ampdu_factor = 0xFF;
2932                                                 } else if (arg == 1) {
2933
2934                                                         DBG_871X("enable driver ctrl rx_ampdu_factor = %d\n", extra_arg);
2935
2936                                                         if ((extra_arg & 0x03) > 0x03)
2937                                                                 padapter->driver_rx_ampdu_factor = 0xFF;
2938                                                         else
2939                                                                 padapter->driver_rx_ampdu_factor = extra_arg;
2940                                                 }
2941                                         }
2942                                         break;
2943
2944                                 case 0x10:/*  driver version display */
2945                                         dump_drv_version(RTW_DBGDUMP);
2946                                         break;
2947                                 case 0x11:/* dump linked status */
2948                                         {
2949                                                  linked_info_dump(padapter, extra_arg);
2950                                         }
2951                                         break;
2952                                 case 0x12: /* set rx_stbc */
2953                                 {
2954                                         struct registry_priv *pregpriv = &padapter->registrypriv;
2955                                         /*  0: disable, bit(0):enable 2.4g, bit(1):enable 5g, 0x3: enable both 2.4g and 5g */
2956                                         /* default is set to enable 2.4GHZ for IOT issue with bufflao's AP at 5GHZ */
2957                                         if (extra_arg == 0 || extra_arg == 1 || extra_arg == 2 || extra_arg == 3) {
2958                                                 pregpriv->rx_stbc = extra_arg;
2959                                                 DBG_871X("set rx_stbc =%d\n", pregpriv->rx_stbc);
2960                                         } else
2961                                                 DBG_871X("get rx_stbc =%d\n", pregpriv->rx_stbc);
2962
2963                                 }
2964                                 break;
2965                                 case 0x13: /* set ampdu_enable */
2966                                 {
2967                                         struct registry_priv *pregpriv = &padapter->registrypriv;
2968                                         /*  0: disable, 0x1:enable (but wifi_spec should be 0), 0x2: force enable (don't care wifi_spec) */
2969                                         if (extra_arg < 3) {
2970                                                 pregpriv->ampdu_enable = extra_arg;
2971                                                 DBG_871X("set ampdu_enable =%d\n", pregpriv->ampdu_enable);
2972                                         } else
2973                                                 DBG_871X("get ampdu_enable =%d\n", pregpriv->ampdu_enable);
2974
2975                                 }
2976                                 break;
2977                                 case 0x14:
2978                                 {
2979                                         DBG_871X("minor_cmd 0x%x\n", minor_cmd);
2980                                 }
2981                                 break;
2982                                 case 0x16:
2983                                 {
2984                                         if (arg == 0xff) {
2985                                                 rtw_odm_dbg_comp_msg(RTW_DBGDUMP, padapter);
2986                                         } else {
2987                                                 u64 dbg_comp = (u64)extra_arg;
2988                                                 rtw_odm_dbg_comp_set(padapter, dbg_comp);
2989                                         }
2990                                 }
2991                                         break;
2992 #ifdef DBG_FIXED_CHAN
2993                                 case 0x17:
2994                                         {
2995                                                 struct mlme_ext_priv *pmlmeext = &(padapter->mlmeextpriv);
2996                                                 printk("===>  Fixed channel to %d\n", extra_arg);
2997                                                 pmlmeext->fixed_chan = extra_arg;
2998
2999                                         }
3000                                         break;
3001 #endif
3002                                 case 0x18:
3003                                         {
3004                                                 printk("===>  Switch USB Mode %d\n", extra_arg);
3005                                                 rtw_hal_set_hwreg(padapter, HW_VAR_USB_MODE, (u8 *)&extra_arg);
3006                                         }
3007                                         break;
3008                                 case 0x19:
3009                                         {
3010                                                 struct registry_priv *pregistrypriv = &padapter->registrypriv;
3011                                                 /*  extra_arg : */
3012                                                 /*  BIT0: Enable VHT LDPC Rx, BIT1: Enable VHT LDPC Tx, */
3013                                                 /*  BIT4: Enable HT LDPC Rx, BIT5: Enable HT LDPC Tx */
3014                                                 if (arg == 0) {
3015                                                         DBG_871X("driver disable LDPC\n");
3016                                                         pregistrypriv->ldpc_cap = 0x00;
3017                                                 } else if (arg == 1) {
3018                                                         DBG_871X("driver set LDPC cap = 0x%x\n", extra_arg);
3019                                                         pregistrypriv->ldpc_cap = (u8)(extra_arg&0x33);
3020                                                 }
3021                                         }
3022                                         break;
3023                                 case 0x1a:
3024                                         {
3025                                                 struct registry_priv *pregistrypriv = &padapter->registrypriv;
3026                                                 /*  extra_arg : */
3027                                                 /*  BIT0: Enable VHT STBC Rx, BIT1: Enable VHT STBC Tx, */
3028                                                 /*  BIT4: Enable HT STBC Rx, BIT5: Enable HT STBC Tx */
3029                                                 if (arg == 0) {
3030                                                         DBG_871X("driver disable STBC\n");
3031                                                         pregistrypriv->stbc_cap = 0x00;
3032                                                 } else if (arg == 1) {
3033                                                         DBG_871X("driver set STBC cap = 0x%x\n", extra_arg);
3034                                                         pregistrypriv->stbc_cap = (u8)(extra_arg&0x33);
3035                                                 }
3036                                         }
3037                                         break;
3038                                 case 0x1b:
3039                                         {
3040                                                 struct registry_priv *pregistrypriv = &padapter->registrypriv;
3041
3042                                                 if (arg == 0) {
3043                                                         DBG_871X("disable driver ctrl max_rx_rate, reset to default_rate_set\n");
3044                                                         init_mlme_default_rate_set(padapter);
3045                                                         pregistrypriv->ht_enable = (u8)rtw_ht_enable;
3046                                                 } else if (arg == 1) {
3047
3048                                                         int i;
3049                                                         u8 max_rx_rate;
3050
3051                                                         DBG_871X("enable driver ctrl max_rx_rate = 0x%x\n", extra_arg);
3052
3053                                                         max_rx_rate = (u8)extra_arg;
3054
3055                                                         if (max_rx_rate < 0xc) { /*  max_rx_rate < MSC0 -> B or G -> disable HT */
3056                                                                 pregistrypriv->ht_enable = 0;
3057                                                                 for (i = 0; i<NumRates; i++) {
3058                                                                         if (pmlmeext->datarate[i] > max_rx_rate)
3059                                                                                 pmlmeext->datarate[i] = 0xff;
3060                                                                 }
3061
3062                                                         }
3063                                                         else if (max_rx_rate < 0x1c) { /*  mcs0~mcs15 */
3064                                                                 u32 mcs_bitmap = 0x0;
3065
3066                                                                 for (i = 0; i<((max_rx_rate+1)-0xc); i++)
3067                                                                         mcs_bitmap |= BIT(i);
3068
3069                                                                 set_mcs_rate_by_mask(pmlmeext->default_supported_mcs_set, mcs_bitmap);
3070                                                         }
3071                                                 }
3072                                         }
3073                                         break;
3074                                 case 0x1c: /* enable/disable driver control AMPDU Density for peer sta's rx */
3075                                         {
3076                                                 if (arg == 0) {
3077                                                         DBG_871X("disable driver ctrl ampdu density\n");
3078                                                         padapter->driver_ampdu_spacing = 0xFF;
3079                                                 } else if (arg == 1) {
3080
3081                                                         DBG_871X("enable driver ctrl ampdu density = %d\n", extra_arg);
3082
3083                                                         if (extra_arg > 0x07)
3084                                                                 padapter->driver_ampdu_spacing = 0xFF;
3085                                                         else
3086                                                                 padapter->driver_ampdu_spacing = extra_arg;
3087                                                 }
3088                                         }
3089                                         break;
3090 #ifdef CONFIG_BACKGROUND_NOISE_MONITOR
3091                                 case 0x1e:
3092                                         {
3093                                                 struct hal_com_data     *pHalData = GET_HAL_DATA(padapter);
3094                                                 PDM_ODM_T pDM_Odm = &pHalData->odmpriv;
3095                                                 u8 chan = rtw_get_oper_ch(padapter);
3096                                                 DBG_871X("===========================================\n");
3097                                                 ODM_InbandNoise_Monitor(pDM_Odm, true, 0x1e, 100);
3098                                                 DBG_871X("channel(%d), noise_a = %d, noise_b = %d , noise_all:%d\n",
3099                                                         chan, pDM_Odm->noise_level.noise[ODM_RF_PATH_A],
3100                                                         pDM_Odm->noise_level.noise[ODM_RF_PATH_B],
3101                                                         pDM_Odm->noise_level.noise_all);
3102                                                 DBG_871X("===========================================\n");
3103
3104                                         }
3105                                         break;
3106 #endif
3107                                 case 0x23:
3108                                         {
3109                                                 DBG_871X("turn %s the bNotifyChannelChange Variable\n", (extra_arg == 1)?"on":"off");
3110                                                 padapter->bNotifyChannelChange = extra_arg;
3111                                                 break;
3112                                         }
3113                                 case 0x24:
3114                                         {
3115                                                 break;
3116                                         }
3117 #ifdef CONFIG_GPIO_API
3118                             case 0x25: /* Get GPIO register */
3119                                     {
3120                                             /*
3121                                             * dbg 0x7f250000 [gpio_num], Get gpio value, gpio_num:0~7
3122                                             */
3123
3124                                             int value;
3125                                             DBG_871X("Read GPIO Value  extra_arg = %d\n", extra_arg);
3126                                             value = rtw_get_gpio(dev, extra_arg);
3127                                             DBG_871X("Read GPIO Value = %d\n", value);
3128                                             break;
3129                                     }
3130                             case 0x26: /* Set GPIO direction */
3131                                     {
3132
3133                                             /* dbg 0x7f26000x [y], Set gpio direction,
3134                                             * x: gpio_num, 4~7  y: indicate direction, 0~1
3135                                             */
3136
3137                                             int value;
3138                                             DBG_871X("Set GPIO Direction! arg = %d , extra_arg =%d\n", arg , extra_arg);
3139                                             value = rtw_config_gpio(dev, arg, extra_arg);
3140                                             DBG_871X("Set GPIO Direction %s\n", (value ==-1)?"Fail!!!":"Success");
3141                                             break;
3142                                         }
3143                                 case 0x27: /* Set GPIO output direction value */
3144                                         {
3145                                                 /*
3146                                                 * dbg 0x7f27000x [y], Set gpio output direction value,
3147                                                 * x: gpio_num, 4~7  y: indicate direction, 0~1
3148                                                 */
3149
3150                                                 int value;
3151                                                 DBG_871X("Set GPIO Value! arg = %d , extra_arg =%d\n", arg , extra_arg);
3152                                                 value = rtw_set_gpio_output_value(dev, arg, extra_arg);
3153                                                 DBG_871X("Set GPIO Value %s\n", (value ==-1)?"Fail!!!":"Success");
3154                                                 break;
3155                                         }
3156 #endif
3157                                 case 0xaa:
3158                                         {
3159                                                 if ((extra_arg & 0x7F)> 0x3F) extra_arg = 0xFF;
3160                                                 DBG_871X("chang data rate to :0x%02x\n", extra_arg);
3161                                                 padapter->fix_rate = extra_arg;
3162                                         }
3163                                         break;
3164                                 case 0xdd:/* registers dump , 0 for mac reg, 1 for bb reg, 2 for rf reg */
3165                                         {
3166                                                 if (extra_arg == 0)
3167                                                         mac_reg_dump(RTW_DBGDUMP, padapter);
3168                                                 else if (extra_arg == 1)
3169                                                         bb_reg_dump(RTW_DBGDUMP, padapter);
3170                                                 else if (extra_arg ==2)
3171                                                         rf_reg_dump(RTW_DBGDUMP, padapter);
3172                                         }
3173                                         break;
3174
3175                                 case 0xee:/* turn on/off dynamic funcs */
3176                                         {
3177                                                 u32 odm_flag;
3178
3179                                                 if (0xf ==extra_arg) {
3180                                                         rtw_hal_get_def_var(padapter, HAL_DEF_DBG_DM_FUNC,&odm_flag);
3181                                                         DBG_871X(" === DMFlag(0x%08x) ===\n", odm_flag);
3182                                                         DBG_871X("extra_arg = 0  - disable all dynamic func\n");
3183                                                         DBG_871X("extra_arg = 1  - disable DIG- BIT(0)\n");
3184                                                         DBG_871X("extra_arg = 2  - disable High power - BIT(1)\n");
3185                                                         DBG_871X("extra_arg = 3  - disable tx power tracking - BIT(2)\n");
3186                                                         DBG_871X("extra_arg = 4  - disable BT coexistence - BIT(3)\n");
3187                                                         DBG_871X("extra_arg = 5  - disable antenna diversity - BIT(4)\n");
3188                                                         DBG_871X("extra_arg = 6  - enable all dynamic func\n");
3189                                                 } else {
3190                                                         /*extra_arg = 0  - disable all dynamic func
3191                                                                 extra_arg = 1  - disable DIG
3192                                                                 extra_arg = 2  - disable tx power tracking
3193                                                                 extra_arg = 3  - turn on all dynamic func
3194                                                         */
3195                                                         rtw_hal_set_def_var(padapter, HAL_DEF_DBG_DM_FUNC, &(extra_arg));
3196                                                         rtw_hal_get_def_var(padapter, HAL_DEF_DBG_DM_FUNC,&odm_flag);
3197                                                         DBG_871X(" === DMFlag(0x%08x) ===\n", odm_flag);
3198                                                 }
3199                                         }
3200                                         break;
3201
3202                                 case 0xfd:
3203                                         rtw_write8(padapter, 0xc50, arg);
3204                                         DBG_871X("wr(0xc50) = 0x%x\n", rtw_read8(padapter, 0xc50));
3205                                         rtw_write8(padapter, 0xc58, arg);
3206                                         DBG_871X("wr(0xc58) = 0x%x\n", rtw_read8(padapter, 0xc58));
3207                                         break;
3208                                 case 0xfe:
3209                                         DBG_871X("rd(0xc50) = 0x%x\n", rtw_read8(padapter, 0xc50));
3210                                         DBG_871X("rd(0xc58) = 0x%x\n", rtw_read8(padapter, 0xc58));
3211                                         break;
3212                                 case 0xff:
3213                                         {
3214                                                 DBG_871X("dbg(0x210) = 0x%x\n", rtw_read32(padapter, 0x210));
3215                                                 DBG_871X("dbg(0x608) = 0x%x\n", rtw_read32(padapter, 0x608));
3216                                                 DBG_871X("dbg(0x280) = 0x%x\n", rtw_read32(padapter, 0x280));
3217                                                 DBG_871X("dbg(0x284) = 0x%x\n", rtw_read32(padapter, 0x284));
3218                                                 DBG_871X("dbg(0x288) = 0x%x\n", rtw_read32(padapter, 0x288));
3219
3220                                                 DBG_871X("dbg(0x664) = 0x%x\n", rtw_read32(padapter, 0x664));
3221
3222
3223                                                 DBG_871X("\n");
3224
3225                                                 DBG_871X("dbg(0x430) = 0x%x\n", rtw_read32(padapter, 0x430));
3226                                                 DBG_871X("dbg(0x438) = 0x%x\n", rtw_read32(padapter, 0x438));
3227
3228                                                 DBG_871X("dbg(0x440) = 0x%x\n", rtw_read32(padapter, 0x440));
3229
3230                                                 DBG_871X("dbg(0x458) = 0x%x\n", rtw_read32(padapter, 0x458));
3231
3232                                                 DBG_871X("dbg(0x484) = 0x%x\n", rtw_read32(padapter, 0x484));
3233                                                 DBG_871X("dbg(0x488) = 0x%x\n", rtw_read32(padapter, 0x488));
3234
3235                                                 DBG_871X("dbg(0x444) = 0x%x\n", rtw_read32(padapter, 0x444));
3236                                                 DBG_871X("dbg(0x448) = 0x%x\n", rtw_read32(padapter, 0x448));
3237                                                 DBG_871X("dbg(0x44c) = 0x%x\n", rtw_read32(padapter, 0x44c));
3238                                                 DBG_871X("dbg(0x450) = 0x%x\n", rtw_read32(padapter, 0x450));
3239                                         }
3240                                         break;
3241                         }
3242                         break;
3243                 default:
3244                         DBG_871X("error dbg cmd!\n");
3245                         break;
3246         }
3247
3248
3249         return 0;
3250
3251 }
3252
3253 static int wpa_set_param(struct net_device *dev, u8 name, u32 value)
3254 {
3255         uint ret = 0;
3256         struct adapter *padapter = (struct adapter *)rtw_netdev_priv(dev);
3257
3258         switch (name) {
3259         case IEEE_PARAM_WPA_ENABLED:
3260
3261                 padapter->securitypriv.dot11AuthAlgrthm = dot11AuthAlgrthm_8021X; /* 802.1x */
3262
3263                 /* ret = ieee80211_wpa_enable(ieee, value); */
3264
3265                 switch ((value)&0xff) {
3266                 case 1 : /* WPA */
3267                         padapter->securitypriv.ndisauthtype = Ndis802_11AuthModeWPAPSK; /* WPA_PSK */
3268                         padapter->securitypriv.ndisencryptstatus = Ndis802_11Encryption2Enabled;
3269                         break;
3270                 case 2: /* WPA2 */
3271                         padapter->securitypriv.ndisauthtype = Ndis802_11AuthModeWPA2PSK; /* WPA2_PSK */
3272                         padapter->securitypriv.ndisencryptstatus = Ndis802_11Encryption3Enabled;
3273                         break;
3274                 }
3275
3276                 RT_TRACE(_module_rtl871x_ioctl_os_c, _drv_info_, ("wpa_set_param:padapter->securitypriv.ndisauthtype =%d\n", padapter->securitypriv.ndisauthtype));
3277
3278                 break;
3279
3280         case IEEE_PARAM_TKIP_COUNTERMEASURES:
3281                 /* ieee->tkip_countermeasures =value; */
3282                 break;
3283
3284         case IEEE_PARAM_DROP_UNENCRYPTED:
3285         {
3286                 /* HACK:
3287                  *
3288                  * wpa_supplicant calls set_wpa_enabled when the driver
3289                  * is loaded and unloaded, regardless of if WPA is being
3290                  * used.  No other calls are made which can be used to
3291                  * determine if encryption will be used or not prior to
3292                  * association being expected.  If encryption is not being
3293                  * used, drop_unencrypted is set to false, else true -- we
3294                  * can use this to determine if the CAP_PRIVACY_ON bit should
3295                  * be set.
3296                  */
3297                 break;
3298
3299         }
3300         case IEEE_PARAM_PRIVACY_INVOKED:
3301
3302                 /* ieee->privacy_invoked =value; */
3303
3304                 break;
3305
3306         case IEEE_PARAM_AUTH_ALGS:
3307
3308                 ret = wpa_set_auth_algs(dev, value);
3309
3310                 break;
3311
3312         case IEEE_PARAM_IEEE_802_1X:
3313
3314                 /* ieee->ieee802_1x =value; */
3315
3316                 break;
3317
3318         case IEEE_PARAM_WPAX_SELECT:
3319
3320                 /*  added for WPA2 mixed mode */
3321                 /* DBG_871X(KERN_WARNING "------------------------>wpax value = %x\n", value); */
3322                 /*
3323                 spin_lock_irqsave(&ieee->wpax_suitlist_lock, flags);
3324                 ieee->wpax_type_set = 1;
3325                 ieee->wpax_type_notify = value;
3326                 spin_unlock_irqrestore(&ieee->wpax_suitlist_lock, flags);
3327                 */
3328
3329                 break;
3330
3331         default:
3332
3333
3334
3335                 ret = -EOPNOTSUPP;
3336
3337
3338                 break;
3339
3340         }
3341
3342         return ret;
3343
3344 }
3345
3346 static int wpa_mlme(struct net_device *dev, u32 command, u32 reason)
3347 {
3348         int ret = 0;
3349         struct adapter *padapter = (struct adapter *)rtw_netdev_priv(dev);
3350
3351         switch (command) {
3352         case IEEE_MLME_STA_DEAUTH:
3353
3354                 if (!rtw_set_802_11_disassociate(padapter))
3355                         ret = -1;
3356
3357                 break;
3358
3359         case IEEE_MLME_STA_DISASSOC:
3360
3361                 if (!rtw_set_802_11_disassociate(padapter))
3362                         ret = -1;
3363
3364                 break;
3365
3366         default:
3367                 ret = -EOPNOTSUPP;
3368                 break;
3369         }
3370
3371         return ret;
3372
3373 }
3374
3375 static int wpa_supplicant_ioctl(struct net_device *dev, struct iw_point *p)
3376 {
3377         struct ieee_param *param;
3378         uint ret = 0;
3379
3380         /* down(&ieee->wx_sem); */
3381
3382         if (p->length < sizeof(struct ieee_param) || !p->pointer) {
3383                 ret = -EINVAL;
3384                 goto out;
3385         }
3386
3387         param = rtw_malloc(p->length);
3388         if (param == NULL) {
3389                 ret = -ENOMEM;
3390                 goto out;
3391         }
3392
3393         if (copy_from_user(param, p->pointer, p->length)) {
3394                 kfree(param);
3395                 ret = -EFAULT;
3396                 goto out;
3397         }
3398
3399         switch (param->cmd) {
3400
3401         case IEEE_CMD_SET_WPA_PARAM:
3402                 ret = wpa_set_param(dev, param->u.wpa_param.name, param->u.wpa_param.value);
3403                 break;
3404
3405         case IEEE_CMD_SET_WPA_IE:
3406                 /* ret = wpa_set_wpa_ie(dev, param, p->length); */
3407                 ret =  rtw_set_wpa_ie((struct adapter *)rtw_netdev_priv(dev), (char *)param->u.wpa_ie.data, (u16)param->u.wpa_ie.len);
3408                 break;
3409
3410         case IEEE_CMD_SET_ENCRYPTION:
3411                 ret = wpa_set_encryption(dev, param, p->length);
3412                 break;
3413
3414         case IEEE_CMD_MLME:
3415                 ret = wpa_mlme(dev, param->u.mlme.command, param->u.mlme.reason_code);
3416                 break;
3417
3418         default:
3419                 DBG_871X("Unknown WPA supplicant request: %d\n", param->cmd);
3420                 ret = -EOPNOTSUPP;
3421                 break;
3422
3423         }
3424
3425         if (ret == 0 && copy_to_user(p->pointer, param, p->length))
3426                 ret = -EFAULT;
3427
3428         kfree(param);
3429
3430 out:
3431
3432         /* up(&ieee->wx_sem); */
3433
3434         return ret;
3435
3436 }
3437
3438 static int rtw_set_encryption(struct net_device *dev, struct ieee_param *param, u32 param_len)
3439 {
3440         int ret = 0;
3441         u32 wep_key_idx, wep_key_len, wep_total_len;
3442         struct ndis_802_11_wep   *pwep = NULL;
3443         struct sta_info *psta = NULL, *pbcmc_sta = NULL;
3444         struct adapter *padapter = (struct adapter *)rtw_netdev_priv(dev);
3445         struct mlme_priv *pmlmepriv = &padapter->mlmepriv;
3446         struct security_priv* psecuritypriv =&(padapter->securitypriv);
3447         struct sta_priv *pstapriv = &padapter->stapriv;
3448
3449         DBG_871X("%s\n", __func__);
3450
3451         param->u.crypt.err = 0;
3452         param->u.crypt.alg[IEEE_CRYPT_ALG_NAME_LEN - 1] = '\0';
3453
3454         /* sizeof(struct ieee_param) = 64 bytes; */
3455         /* if (param_len !=  (u32) ((u8 *) param->u.crypt.key - (u8 *) param) + param->u.crypt.key_len) */
3456         if (param_len !=  sizeof(struct ieee_param) + param->u.crypt.key_len) {
3457                 ret =  -EINVAL;
3458                 goto exit;
3459         }
3460
3461         if (param->sta_addr[0] == 0xff && param->sta_addr[1] == 0xff &&
3462             param->sta_addr[2] == 0xff && param->sta_addr[3] == 0xff &&
3463             param->sta_addr[4] == 0xff && param->sta_addr[5] == 0xff) {
3464                 if (param->u.crypt.idx >= WEP_KEYS) {
3465                         ret = -EINVAL;
3466                         goto exit;
3467                 }
3468         } else {
3469                 psta = rtw_get_stainfo(pstapriv, param->sta_addr);
3470                 if (!psta) {
3471                         /* ret = -EINVAL; */
3472                         DBG_871X("rtw_set_encryption(), sta has already been removed or never been added\n");
3473                         goto exit;
3474                 }
3475         }
3476
3477         if (strcmp(param->u.crypt.alg, "none") == 0 && (psta == NULL)) {
3478                 /* todo:clear default encryption keys */
3479
3480                 psecuritypriv->dot11AuthAlgrthm = dot11AuthAlgrthm_Open;
3481                 psecuritypriv->ndisencryptstatus = Ndis802_11EncryptionDisabled;
3482                 psecuritypriv->dot11PrivacyAlgrthm = _NO_PRIVACY_;
3483                 psecuritypriv->dot118021XGrpPrivacy = _NO_PRIVACY_;
3484
3485                 DBG_871X("clear default encryption keys, keyid =%d\n", param->u.crypt.idx);
3486
3487                 goto exit;
3488         }
3489
3490
3491         if (strcmp(param->u.crypt.alg, "WEP") == 0 && (psta == NULL)) {
3492                 DBG_871X("r871x_set_encryption, crypt.alg = WEP\n");
3493
3494                 wep_key_idx = param->u.crypt.idx;
3495                 wep_key_len = param->u.crypt.key_len;
3496
3497                 DBG_871X("r871x_set_encryption, wep_key_idx =%d, len =%d\n", wep_key_idx, wep_key_len);
3498
3499                 if ((wep_key_idx >= WEP_KEYS) || (wep_key_len<= 0)) {
3500                         ret = -EINVAL;
3501                         goto exit;
3502                 }
3503
3504
3505                 if (wep_key_len > 0) {
3506                         wep_key_len = wep_key_len <= 5 ? 5 : 13;
3507                         wep_total_len = wep_key_len + FIELD_OFFSET(struct ndis_802_11_wep, KeyMaterial);
3508                         pwep = kzalloc(wep_total_len, GFP_KERNEL);
3509                         if (pwep == NULL) {
3510                                 DBG_871X(" r871x_set_encryption: pwep allocate fail !!!\n");
3511                                 goto exit;
3512                         }
3513
3514                         pwep->KeyLength = wep_key_len;
3515                         pwep->Length = wep_total_len;
3516
3517                 }
3518
3519                 pwep->KeyIndex = wep_key_idx;
3520
3521                 memcpy(pwep->KeyMaterial,  param->u.crypt.key, pwep->KeyLength);
3522
3523                 if (param->u.crypt.set_tx) {
3524                         DBG_871X("wep, set_tx = 1\n");
3525
3526                         psecuritypriv->dot11AuthAlgrthm = dot11AuthAlgrthm_Auto;
3527                         psecuritypriv->ndisencryptstatus = Ndis802_11Encryption1Enabled;
3528                         psecuritypriv->dot11PrivacyAlgrthm = _WEP40_;
3529                         psecuritypriv->dot118021XGrpPrivacy = _WEP40_;
3530
3531                         if (pwep->KeyLength == 13) {
3532                                 psecuritypriv->dot11PrivacyAlgrthm = _WEP104_;
3533                                 psecuritypriv->dot118021XGrpPrivacy = _WEP104_;
3534                         }
3535
3536
3537                         psecuritypriv->dot11PrivacyKeyIndex = wep_key_idx;
3538
3539                         memcpy(&(psecuritypriv->dot11DefKey[wep_key_idx].skey[0]), pwep->KeyMaterial, pwep->KeyLength);
3540
3541                         psecuritypriv->dot11DefKeylen[wep_key_idx]=pwep->KeyLength;
3542
3543                         rtw_ap_set_wep_key(padapter, pwep->KeyMaterial, pwep->KeyLength, wep_key_idx, 1);
3544                 } else {
3545                         DBG_871X("wep, set_tx = 0\n");
3546
3547                         /* don't update "psecuritypriv->dot11PrivacyAlgrthm" and */
3548                         /* psecuritypriv->dot11PrivacyKeyIndex =keyid", but can rtw_set_key to cam */
3549
3550                         memcpy(&(psecuritypriv->dot11DefKey[wep_key_idx].skey[0]), pwep->KeyMaterial, pwep->KeyLength);
3551
3552                         psecuritypriv->dot11DefKeylen[wep_key_idx] = pwep->KeyLength;
3553
3554                         rtw_ap_set_wep_key(padapter, pwep->KeyMaterial, pwep->KeyLength, wep_key_idx, 0);
3555                 }
3556
3557                 goto exit;
3558
3559         }
3560
3561
3562         if (!psta && check_fwstate(pmlmepriv, WIFI_AP_STATE)) { /*  group key */
3563                 if (param->u.crypt.set_tx == 1) {
3564                         if (strcmp(param->u.crypt.alg, "WEP") == 0) {
3565                                 DBG_871X("%s, set group_key, WEP\n", __func__);
3566
3567                                 memcpy(psecuritypriv->dot118021XGrpKey[param->u.crypt.idx].skey,  param->u.crypt.key, (param->u.crypt.key_len>16 ?16:param->u.crypt.key_len));
3568
3569                                 psecuritypriv->dot118021XGrpPrivacy = _WEP40_;
3570                                 if (param->u.crypt.key_len == 13)
3571                                                 psecuritypriv->dot118021XGrpPrivacy = _WEP104_;
3572
3573                         } else if (strcmp(param->u.crypt.alg, "TKIP") == 0) {
3574                                 DBG_871X("%s, set group_key, TKIP\n", __func__);
3575
3576                                 psecuritypriv->dot118021XGrpPrivacy = _TKIP_;
3577
3578                                 memcpy(psecuritypriv->dot118021XGrpKey[param->u.crypt.idx].skey,  param->u.crypt.key, (param->u.crypt.key_len>16 ?16:param->u.crypt.key_len));
3579
3580                                 /* DEBUG_ERR("set key length :param->u.crypt.key_len =%d\n", param->u.crypt.key_len); */
3581                                 /* set mic key */
3582                                 memcpy(psecuritypriv->dot118021XGrptxmickey[param->u.crypt.idx].skey, &(param->u.crypt.key[16]), 8);
3583                                 memcpy(psecuritypriv->dot118021XGrprxmickey[param->u.crypt.idx].skey, &(param->u.crypt.key[24]), 8);
3584
3585                                 psecuritypriv->busetkipkey = true;
3586
3587                         }
3588                         else if (strcmp(param->u.crypt.alg, "CCMP") == 0) {
3589                                 DBG_871X("%s, set group_key, CCMP\n", __func__);
3590
3591                                 psecuritypriv->dot118021XGrpPrivacy = _AES_;
3592
3593                                 memcpy(psecuritypriv->dot118021XGrpKey[param->u.crypt.idx].skey,  param->u.crypt.key, (param->u.crypt.key_len>16 ?16:param->u.crypt.key_len));
3594                         } else {
3595                                 DBG_871X("%s, set group_key, none\n", __func__);
3596
3597                                 psecuritypriv->dot118021XGrpPrivacy = _NO_PRIVACY_;
3598                         }
3599
3600                         psecuritypriv->dot118021XGrpKeyid = param->u.crypt.idx;
3601
3602                         psecuritypriv->binstallGrpkey = true;
3603
3604                         psecuritypriv->dot11PrivacyAlgrthm = psecuritypriv->dot118021XGrpPrivacy;/*  */
3605
3606                         rtw_ap_set_group_key(padapter, param->u.crypt.key, psecuritypriv->dot118021XGrpPrivacy, param->u.crypt.idx);
3607
3608                         pbcmc_sta =rtw_get_bcmc_stainfo(padapter);
3609                         if (pbcmc_sta) {
3610                                 pbcmc_sta->ieee8021x_blocked = false;
3611                                 pbcmc_sta->dot118021XPrivacy = psecuritypriv->dot118021XGrpPrivacy;/* rx will use bmc_sta's dot118021XPrivacy */
3612                         }
3613                 }
3614
3615                 goto exit;
3616
3617         }
3618
3619         if (psecuritypriv->dot11AuthAlgrthm == dot11AuthAlgrthm_8021X && psta) { /*  psk/802_1x */
3620                 if (check_fwstate(pmlmepriv, WIFI_AP_STATE)) {
3621                         if (param->u.crypt.set_tx == 1) {
3622                                 memcpy(psta->dot118021x_UncstKey.skey,  param->u.crypt.key, (param->u.crypt.key_len>16 ?16:param->u.crypt.key_len));
3623
3624                                 if (strcmp(param->u.crypt.alg, "WEP") == 0) {
3625                                         DBG_871X("%s, set pairwise key, WEP\n", __func__);
3626
3627                                         psta->dot118021XPrivacy = _WEP40_;
3628                                         if (param->u.crypt.key_len == 13)
3629                                                 psta->dot118021XPrivacy = _WEP104_;
3630                                 } else if (strcmp(param->u.crypt.alg, "TKIP") == 0) {
3631                                         DBG_871X("%s, set pairwise key, TKIP\n", __func__);
3632
3633                                         psta->dot118021XPrivacy = _TKIP_;
3634
3635                                         /* DEBUG_ERR("set key length :param->u.crypt.key_len =%d\n", param->u.crypt.key_len); */
3636                                         /* set mic key */
3637                                         memcpy(psta->dot11tkiptxmickey.skey, &(param->u.crypt.key[16]), 8);
3638                                         memcpy(psta->dot11tkiprxmickey.skey, &(param->u.crypt.key[24]), 8);
3639
3640                                         psecuritypriv->busetkipkey = true;
3641
3642                                 } else if (strcmp(param->u.crypt.alg, "CCMP") == 0) {
3643
3644                                         DBG_871X("%s, set pairwise key, CCMP\n", __func__);
3645
3646                                         psta->dot118021XPrivacy = _AES_;
3647                                 } else {
3648                                         DBG_871X("%s, set pairwise key, none\n", __func__);
3649
3650                                         psta->dot118021XPrivacy = _NO_PRIVACY_;
3651                                 }
3652
3653                                 rtw_ap_set_pairwise_key(padapter, psta);
3654
3655                                 psta->ieee8021x_blocked = false;
3656
3657                         } else { /* group key??? */
3658                                 if (strcmp(param->u.crypt.alg, "WEP") == 0) {
3659                                         memcpy(psecuritypriv->dot118021XGrpKey[param->u.crypt.idx].skey,  param->u.crypt.key, (param->u.crypt.key_len>16 ?16:param->u.crypt.key_len));
3660
3661                                         psecuritypriv->dot118021XGrpPrivacy = _WEP40_;
3662                                         if (param->u.crypt.key_len == 13)
3663                                                 psecuritypriv->dot118021XGrpPrivacy = _WEP104_;
3664                                 } else if (strcmp(param->u.crypt.alg, "TKIP") == 0) {
3665                                         psecuritypriv->dot118021XGrpPrivacy = _TKIP_;
3666
3667                                         memcpy(psecuritypriv->dot118021XGrpKey[param->u.crypt.idx].skey,  param->u.crypt.key, (param->u.crypt.key_len>16 ?16:param->u.crypt.key_len));
3668
3669                                         /* DEBUG_ERR("set key length :param->u.crypt.key_len =%d\n", param->u.crypt.key_len); */
3670                                         /* set mic key */
3671                                         memcpy(psecuritypriv->dot118021XGrptxmickey[param->u.crypt.idx].skey, &(param->u.crypt.key[16]), 8);
3672                                         memcpy(psecuritypriv->dot118021XGrprxmickey[param->u.crypt.idx].skey, &(param->u.crypt.key[24]), 8);
3673
3674                                         psecuritypriv->busetkipkey = true;
3675
3676                                 } else if (strcmp(param->u.crypt.alg, "CCMP") == 0) {
3677                                         psecuritypriv->dot118021XGrpPrivacy = _AES_;
3678
3679                                         memcpy(psecuritypriv->dot118021XGrpKey[param->u.crypt.idx].skey,  param->u.crypt.key, (param->u.crypt.key_len>16 ?16:param->u.crypt.key_len));
3680                                 } else {
3681                                         psecuritypriv->dot118021XGrpPrivacy = _NO_PRIVACY_;
3682                                 }
3683
3684                                 psecuritypriv->dot118021XGrpKeyid = param->u.crypt.idx;
3685
3686                                 psecuritypriv->binstallGrpkey = true;
3687
3688                                 psecuritypriv->dot11PrivacyAlgrthm = psecuritypriv->dot118021XGrpPrivacy;/*  */
3689
3690                                 rtw_ap_set_group_key(padapter, param->u.crypt.key, psecuritypriv->dot118021XGrpPrivacy, param->u.crypt.idx);
3691
3692                                 pbcmc_sta =rtw_get_bcmc_stainfo(padapter);
3693                                 if (pbcmc_sta) {
3694                                         pbcmc_sta->ieee8021x_blocked = false;
3695                                         pbcmc_sta->dot118021XPrivacy = psecuritypriv->dot118021XGrpPrivacy;/* rx will use bmc_sta's dot118021XPrivacy */
3696                                 }
3697                         }
3698                 }
3699         }
3700
3701 exit:
3702         kfree(pwep);
3703
3704         return ret;
3705
3706 }
3707
3708 static int rtw_set_beacon(struct net_device *dev, struct ieee_param *param, int len)
3709 {
3710         int ret = 0;
3711         struct adapter *padapter = (struct adapter *)rtw_netdev_priv(dev);
3712         struct mlme_priv *pmlmepriv = &(padapter->mlmepriv);
3713         struct sta_priv *pstapriv = &padapter->stapriv;
3714         unsigned char *pbuf = param->u.bcn_ie.buf;
3715
3716
3717         DBG_871X("%s, len =%d\n", __func__, len);
3718
3719         if (check_fwstate(pmlmepriv, WIFI_AP_STATE) != true)
3720                 return -EINVAL;
3721
3722         memcpy(&pstapriv->max_num_sta, param->u.bcn_ie.reserved, 2);
3723
3724         if ((pstapriv->max_num_sta>NUM_STA) || (pstapriv->max_num_sta<= 0))
3725                 pstapriv->max_num_sta = NUM_STA;
3726
3727
3728         if (rtw_check_beacon_data(padapter, pbuf,  (len-12-2)) == _SUCCESS)/*  12 = param header, 2:no packed */
3729                 ret = 0;
3730         else
3731                 ret = -EINVAL;
3732
3733
3734         return ret;
3735
3736 }
3737
3738 static void rtw_hostapd_sta_flush(struct net_device *dev)
3739 {
3740         /* _irqL irqL; */
3741         /* struct list_head     *phead, *plist; */
3742         /* struct sta_info *psta = NULL; */
3743         struct adapter *padapter = (struct adapter *)rtw_netdev_priv(dev);
3744         /* struct sta_priv *pstapriv = &padapter->stapriv; */
3745
3746         DBG_871X("%s\n", __func__);
3747
3748         flush_all_cam_entry(padapter);  /* clear CAM */
3749
3750         rtw_sta_flush(padapter);
3751 }
3752
3753 static int rtw_add_sta(struct net_device *dev, struct ieee_param *param)
3754 {
3755         int ret = 0;
3756         struct sta_info *psta = NULL;
3757         struct adapter *padapter = (struct adapter *)rtw_netdev_priv(dev);
3758         struct mlme_priv *pmlmepriv = &(padapter->mlmepriv);
3759         struct sta_priv *pstapriv = &padapter->stapriv;
3760
3761         DBG_871X("rtw_add_sta(aid =%d) =" MAC_FMT "\n", param->u.add_sta.aid, MAC_ARG(param->sta_addr));
3762
3763         if (check_fwstate(pmlmepriv, (_FW_LINKED|WIFI_AP_STATE)) != true)
3764                 return -EINVAL;
3765
3766         if (param->sta_addr[0] == 0xff && param->sta_addr[1] == 0xff &&
3767             param->sta_addr[2] == 0xff && param->sta_addr[3] == 0xff &&
3768             param->sta_addr[4] == 0xff && param->sta_addr[5] == 0xff) {
3769                 return -EINVAL;
3770         }
3771
3772 /*
3773         psta = rtw_get_stainfo(pstapriv, param->sta_addr);
3774         if (psta)
3775         {
3776                 DBG_871X("rtw_add_sta(), free has been added psta =%p\n", psta);
3777                 spin_lock_bh(&(pstapriv->sta_hash_lock));
3778                 rtw_free_stainfo(padapter,  psta);
3779                 spin_unlock_bh(&(pstapriv->sta_hash_lock));
3780
3781                 psta = NULL;
3782         }
3783 */
3784         /* psta = rtw_alloc_stainfo(pstapriv, param->sta_addr); */
3785         psta = rtw_get_stainfo(pstapriv, param->sta_addr);
3786         if (psta) {
3787                 int flags = param->u.add_sta.flags;
3788
3789                 /* DBG_871X("rtw_add_sta(), init sta's variables, psta =%p\n", psta); */
3790
3791                 psta->aid = param->u.add_sta.aid;/* aid = 1~2007 */
3792
3793                 memcpy(psta->bssrateset, param->u.add_sta.tx_supp_rates, 16);
3794
3795
3796                 /* check wmm cap. */
3797                 if (WLAN_STA_WME&flags)
3798                         psta->qos_option = 1;
3799                 else
3800                         psta->qos_option = 0;
3801
3802                 if (pmlmepriv->qospriv.qos_option == 0)
3803                         psta->qos_option = 0;
3804
3805                 /* chec 802.11n ht cap. */
3806                 if (WLAN_STA_HT&flags) {
3807                         psta->htpriv.ht_option = true;
3808                         psta->qos_option = 1;
3809                         memcpy((void *)&psta->htpriv.ht_cap, (void *)&param->u.add_sta.ht_cap, sizeof(struct rtw_ieee80211_ht_cap));
3810                 } else {
3811                         psta->htpriv.ht_option = false;
3812                 }
3813
3814                 if (pmlmepriv->htpriv.ht_option == false)
3815                         psta->htpriv.ht_option = false;
3816
3817                 update_sta_info_apmode(padapter, psta);
3818
3819
3820         } else {
3821                 ret = -ENOMEM;
3822         }
3823
3824         return ret;
3825
3826 }
3827
3828 static int rtw_del_sta(struct net_device *dev, struct ieee_param *param)
3829 {
3830         int ret = 0;
3831         struct sta_info *psta = NULL;
3832         struct adapter *padapter = (struct adapter *)rtw_netdev_priv(dev);
3833         struct mlme_priv *pmlmepriv = &(padapter->mlmepriv);
3834         struct sta_priv *pstapriv = &padapter->stapriv;
3835
3836         DBG_871X("rtw_del_sta =" MAC_FMT "\n", MAC_ARG(param->sta_addr));
3837
3838         if (check_fwstate(pmlmepriv, (_FW_LINKED|WIFI_AP_STATE)) != true)
3839                 return -EINVAL;
3840
3841         if (param->sta_addr[0] == 0xff && param->sta_addr[1] == 0xff &&
3842             param->sta_addr[2] == 0xff && param->sta_addr[3] == 0xff &&
3843             param->sta_addr[4] == 0xff && param->sta_addr[5] == 0xff) {
3844                 return -EINVAL;
3845         }
3846
3847         psta = rtw_get_stainfo(pstapriv, param->sta_addr);
3848         if (psta) {
3849                 u8 updated =false;
3850
3851                 /* DBG_871X("free psta =%p, aid =%d\n", psta, psta->aid); */
3852
3853                 spin_lock_bh(&pstapriv->asoc_list_lock);
3854                 if (list_empty(&psta->asoc_list) ==false) {
3855                         list_del_init(&psta->asoc_list);
3856                         pstapriv->asoc_list_cnt--;
3857                         updated = ap_free_sta(padapter, psta, true, WLAN_REASON_DEAUTH_LEAVING);
3858
3859                 }
3860                 spin_unlock_bh(&pstapriv->asoc_list_lock);
3861
3862                 associated_clients_update(padapter, updated);
3863
3864                 psta = NULL;
3865
3866         } else {
3867                 DBG_871X("rtw_del_sta(), sta has already been removed or never been added\n");
3868
3869                 /* ret = -1; */
3870         }
3871
3872
3873         return ret;
3874
3875 }
3876
3877 static int rtw_ioctl_get_sta_data(struct net_device *dev, struct ieee_param *param, int len)
3878 {
3879         int ret = 0;
3880         struct sta_info *psta = NULL;
3881         struct adapter *padapter = (struct adapter *)rtw_netdev_priv(dev);
3882         struct mlme_priv *pmlmepriv = &(padapter->mlmepriv);
3883         struct sta_priv *pstapriv = &padapter->stapriv;
3884         struct ieee_param_ex *param_ex = (struct ieee_param_ex *)param;
3885         struct sta_data *psta_data = (struct sta_data *)param_ex->data;
3886
3887         DBG_871X("rtw_ioctl_get_sta_info, sta_addr: " MAC_FMT "\n", MAC_ARG(param_ex->sta_addr));
3888
3889         if (check_fwstate(pmlmepriv, (_FW_LINKED|WIFI_AP_STATE)) != true)
3890                 return -EINVAL;
3891
3892         if (param_ex->sta_addr[0] == 0xff && param_ex->sta_addr[1] == 0xff &&
3893             param_ex->sta_addr[2] == 0xff && param_ex->sta_addr[3] == 0xff &&
3894             param_ex->sta_addr[4] == 0xff && param_ex->sta_addr[5] == 0xff) {
3895                 return -EINVAL;
3896         }
3897
3898         psta = rtw_get_stainfo(pstapriv, param_ex->sta_addr);
3899         if (psta) {
3900                 psta_data->aid = (u16)psta->aid;
3901                 psta_data->capability = psta->capability;
3902                 psta_data->flags = psta->flags;
3903
3904 /*
3905                 nonerp_set : BIT(0)
3906                 no_short_slot_time_set : BIT(1)
3907                 no_short_preamble_set : BIT(2)
3908                 no_ht_gf_set : BIT(3)
3909                 no_ht_set : BIT(4)
3910                 ht_20mhz_set : BIT(5)
3911 */
3912
3913                 psta_data->sta_set =((psta->nonerp_set) |
3914                                                         (psta->no_short_slot_time_set <<1) |
3915                                                         (psta->no_short_preamble_set <<2) |
3916                                                         (psta->no_ht_gf_set <<3) |
3917                                                         (psta->no_ht_set <<4) |
3918                                                         (psta->ht_20mhz_set <<5));
3919
3920                 psta_data->tx_supp_rates_len =  psta->bssratelen;
3921                 memcpy(psta_data->tx_supp_rates, psta->bssrateset, psta->bssratelen);
3922                 memcpy(&psta_data->ht_cap, &psta->htpriv.ht_cap, sizeof(struct rtw_ieee80211_ht_cap));
3923                 psta_data->rx_pkts = psta->sta_stats.rx_data_pkts;
3924                 psta_data->rx_bytes = psta->sta_stats.rx_bytes;
3925                 psta_data->rx_drops = psta->sta_stats.rx_drops;
3926
3927                 psta_data->tx_pkts = psta->sta_stats.tx_pkts;
3928                 psta_data->tx_bytes = psta->sta_stats.tx_bytes;
3929                 psta_data->tx_drops = psta->sta_stats.tx_drops;
3930
3931
3932         } else {
3933                 ret = -1;
3934         }
3935
3936         return ret;
3937
3938 }
3939
3940 static int rtw_get_sta_wpaie(struct net_device *dev, struct ieee_param *param)
3941 {
3942         int ret = 0;
3943         struct sta_info *psta = NULL;
3944         struct adapter *padapter = (struct adapter *)rtw_netdev_priv(dev);
3945         struct mlme_priv *pmlmepriv = &(padapter->mlmepriv);
3946         struct sta_priv *pstapriv = &padapter->stapriv;
3947
3948         DBG_871X("rtw_get_sta_wpaie, sta_addr: " MAC_FMT "\n", MAC_ARG(param->sta_addr));
3949
3950         if (check_fwstate(pmlmepriv, (_FW_LINKED|WIFI_AP_STATE)) != true)
3951                 return -EINVAL;
3952
3953         if (param->sta_addr[0] == 0xff && param->sta_addr[1] == 0xff &&
3954             param->sta_addr[2] == 0xff && param->sta_addr[3] == 0xff &&
3955             param->sta_addr[4] == 0xff && param->sta_addr[5] == 0xff) {
3956                 return -EINVAL;
3957         }
3958
3959         psta = rtw_get_stainfo(pstapriv, param->sta_addr);
3960         if (psta) {
3961                 if ((psta->wpa_ie[0] == WLAN_EID_RSN) || (psta->wpa_ie[0] == WLAN_EID_GENERIC)) {
3962                         int wpa_ie_len;
3963                         int copy_len;
3964
3965                         wpa_ie_len = psta->wpa_ie[1];
3966
3967                         copy_len = ((wpa_ie_len+2) > sizeof(psta->wpa_ie)) ? (sizeof(psta->wpa_ie)):(wpa_ie_len+2);
3968
3969                         param->u.wpa_ie.len = copy_len;
3970
3971                         memcpy(param->u.wpa_ie.reserved, psta->wpa_ie, copy_len);
3972                 } else {
3973                         /* ret = -1; */
3974                         DBG_871X("sta's wpa_ie is NONE\n");
3975                 }
3976         } else {
3977                 ret = -1;
3978         }
3979
3980         return ret;
3981
3982 }
3983
3984 static int rtw_set_wps_beacon(struct net_device *dev, struct ieee_param *param, int len)
3985 {
3986         int ret = 0;
3987         unsigned char wps_oui[4]={0x0, 0x50, 0xf2, 0x04};
3988         struct adapter *padapter = (struct adapter *)rtw_netdev_priv(dev);
3989         struct mlme_priv *pmlmepriv = &(padapter->mlmepriv);
3990         struct mlme_ext_priv *pmlmeext = &(padapter->mlmeextpriv);
3991         int ie_len;
3992
3993         DBG_871X("%s, len =%d\n", __func__, len);
3994
3995         if (check_fwstate(pmlmepriv, WIFI_AP_STATE) != true)
3996                 return -EINVAL;
3997
3998         ie_len = len-12-2;/*  12 = param header, 2:no packed */
3999
4000
4001         kfree(pmlmepriv->wps_beacon_ie);
4002         pmlmepriv->wps_beacon_ie = NULL;
4003
4004         if (ie_len>0) {
4005                 pmlmepriv->wps_beacon_ie = rtw_malloc(ie_len);
4006                 pmlmepriv->wps_beacon_ie_len = ie_len;
4007                 if (pmlmepriv->wps_beacon_ie == NULL) {
4008                         DBG_871X("%s()-%d: rtw_malloc() ERROR!\n", __func__, __LINE__);
4009                         return -EINVAL;
4010                 }
4011
4012                 memcpy(pmlmepriv->wps_beacon_ie, param->u.bcn_ie.buf, ie_len);
4013
4014                 update_beacon(padapter, _VENDOR_SPECIFIC_IE_, wps_oui, true);
4015
4016                 pmlmeext->bstart_bss = true;
4017         }
4018
4019
4020         return ret;
4021
4022 }
4023
4024 static int rtw_set_wps_probe_resp(struct net_device *dev, struct ieee_param *param, int len)
4025 {
4026         int ret = 0;
4027         struct adapter *padapter = (struct adapter *)rtw_netdev_priv(dev);
4028         struct mlme_priv *pmlmepriv = &(padapter->mlmepriv);
4029         int ie_len;
4030
4031         DBG_871X("%s, len =%d\n", __func__, len);
4032
4033         if (check_fwstate(pmlmepriv, WIFI_AP_STATE) != true)
4034                 return -EINVAL;
4035
4036         ie_len = len-12-2;/*  12 = param header, 2:no packed */
4037
4038
4039         kfree(pmlmepriv->wps_probe_resp_ie);
4040         pmlmepriv->wps_probe_resp_ie = NULL;
4041
4042         if (ie_len>0) {
4043                 pmlmepriv->wps_probe_resp_ie = rtw_malloc(ie_len);
4044                 pmlmepriv->wps_probe_resp_ie_len = ie_len;
4045                 if (pmlmepriv->wps_probe_resp_ie == NULL) {
4046                         DBG_871X("%s()-%d: rtw_malloc() ERROR!\n", __func__, __LINE__);
4047                         return -EINVAL;
4048                 }
4049                 memcpy(pmlmepriv->wps_probe_resp_ie, param->u.bcn_ie.buf, ie_len);
4050         }
4051
4052
4053         return ret;
4054
4055 }
4056
4057 static int rtw_set_wps_assoc_resp(struct net_device *dev, struct ieee_param *param, int len)
4058 {
4059         int ret = 0;
4060         struct adapter *padapter = (struct adapter *)rtw_netdev_priv(dev);
4061         struct mlme_priv *pmlmepriv = &(padapter->mlmepriv);
4062         int ie_len;
4063
4064         DBG_871X("%s, len =%d\n", __func__, len);
4065
4066         if (check_fwstate(pmlmepriv, WIFI_AP_STATE) != true)
4067                 return -EINVAL;
4068
4069         ie_len = len-12-2;/*  12 = param header, 2:no packed */
4070
4071
4072         kfree(pmlmepriv->wps_assoc_resp_ie);
4073         pmlmepriv->wps_assoc_resp_ie = NULL;
4074
4075         if (ie_len>0) {
4076                 pmlmepriv->wps_assoc_resp_ie = rtw_malloc(ie_len);
4077                 pmlmepriv->wps_assoc_resp_ie_len = ie_len;
4078                 if (pmlmepriv->wps_assoc_resp_ie == NULL) {
4079                         DBG_871X("%s()-%d: rtw_malloc() ERROR!\n", __func__, __LINE__);
4080                         return -EINVAL;
4081                 }
4082
4083                 memcpy(pmlmepriv->wps_assoc_resp_ie, param->u.bcn_ie.buf, ie_len);
4084         }
4085
4086
4087         return ret;
4088
4089 }
4090
4091 static int rtw_set_hidden_ssid(struct net_device *dev, struct ieee_param *param, int len)
4092 {
4093         int ret = 0;
4094         struct adapter *adapter = (struct adapter *)rtw_netdev_priv(dev);
4095         struct mlme_priv *mlmepriv = &(adapter->mlmepriv);
4096         struct mlme_ext_priv *mlmeext = &(adapter->mlmeextpriv);
4097         struct mlme_ext_info *mlmeinfo = &(mlmeext->mlmext_info);
4098         int ie_len;
4099         u8 *ssid_ie;
4100         char ssid[NDIS_802_11_LENGTH_SSID + 1];
4101         sint ssid_len;
4102         u8 ignore_broadcast_ssid;
4103
4104         if (check_fwstate(mlmepriv, WIFI_AP_STATE) != true)
4105                 return -EPERM;
4106
4107         if (param->u.bcn_ie.reserved[0] != 0xea)
4108                 return -EINVAL;
4109
4110         mlmeinfo->hidden_ssid_mode = ignore_broadcast_ssid = param->u.bcn_ie.reserved[1];
4111
4112         ie_len = len-12-2;/*  12 = param header, 2:no packed */
4113         ssid_ie = rtw_get_ie(param->u.bcn_ie.buf,  WLAN_EID_SSID, &ssid_len, ie_len);
4114
4115         if (ssid_ie && ssid_len > 0 && ssid_len <= NDIS_802_11_LENGTH_SSID) {
4116                 struct wlan_bssid_ex *pbss_network = &mlmepriv->cur_network.network;
4117                 struct wlan_bssid_ex *pbss_network_ext = &mlmeinfo->network;
4118
4119                 memcpy(ssid, ssid_ie+2, ssid_len);
4120                 ssid[ssid_len] = 0x0;
4121
4122                 if (0)
4123                         DBG_871X(FUNC_ADPT_FMT" ssid:(%s,%d), from ie:(%s,%d), (%s,%d)\n", FUNC_ADPT_ARG(adapter),
4124                                  ssid, ssid_len,
4125                                  pbss_network->Ssid.Ssid, pbss_network->Ssid.SsidLength,
4126                                  pbss_network_ext->Ssid.Ssid, pbss_network_ext->Ssid.SsidLength);
4127
4128                 memcpy(pbss_network->Ssid.Ssid, (void *)ssid, ssid_len);
4129                 pbss_network->Ssid.SsidLength = ssid_len;
4130                 memcpy(pbss_network_ext->Ssid.Ssid, (void *)ssid, ssid_len);
4131                 pbss_network_ext->Ssid.SsidLength = ssid_len;
4132
4133                 if (0)
4134                         DBG_871X(FUNC_ADPT_FMT" after ssid:(%s,%d), (%s,%d)\n", FUNC_ADPT_ARG(adapter),
4135                                  pbss_network->Ssid.Ssid, pbss_network->Ssid.SsidLength,
4136                                  pbss_network_ext->Ssid.Ssid, pbss_network_ext->Ssid.SsidLength);
4137         }
4138
4139         DBG_871X(FUNC_ADPT_FMT" ignore_broadcast_ssid:%d, %s,%d\n", FUNC_ADPT_ARG(adapter),
4140                 ignore_broadcast_ssid, ssid, ssid_len);
4141
4142         return ret;
4143 }
4144
4145 static int rtw_ioctl_acl_remove_sta(struct net_device *dev, struct ieee_param *param, int len)
4146 {
4147         struct adapter *padapter = (struct adapter *)rtw_netdev_priv(dev);
4148         struct mlme_priv *pmlmepriv = &(padapter->mlmepriv);
4149
4150         if (check_fwstate(pmlmepriv, WIFI_AP_STATE) != true)
4151                 return -EINVAL;
4152
4153         if (param->sta_addr[0] == 0xff && param->sta_addr[1] == 0xff &&
4154             param->sta_addr[2] == 0xff && param->sta_addr[3] == 0xff &&
4155             param->sta_addr[4] == 0xff && param->sta_addr[5] == 0xff) {
4156                 return -EINVAL;
4157         }
4158
4159         rtw_acl_remove_sta(padapter, param->sta_addr);
4160         return 0;
4161
4162 }
4163
4164 static int rtw_ioctl_acl_add_sta(struct net_device *dev, struct ieee_param *param, int len)
4165 {
4166         struct adapter *padapter = (struct adapter *)rtw_netdev_priv(dev);
4167         struct mlme_priv *pmlmepriv = &(padapter->mlmepriv);
4168
4169         if (check_fwstate(pmlmepriv, WIFI_AP_STATE) != true)
4170                 return -EINVAL;
4171
4172         if (param->sta_addr[0] == 0xff && param->sta_addr[1] == 0xff &&
4173             param->sta_addr[2] == 0xff && param->sta_addr[3] == 0xff &&
4174             param->sta_addr[4] == 0xff && param->sta_addr[5] == 0xff) {
4175                 return -EINVAL;
4176         }
4177
4178         return rtw_acl_add_sta(padapter, param->sta_addr);
4179
4180 }
4181
4182 static int rtw_ioctl_set_macaddr_acl(struct net_device *dev, struct ieee_param *param, int len)
4183 {
4184         int ret = 0;
4185         struct adapter *padapter = (struct adapter *)rtw_netdev_priv(dev);
4186         struct mlme_priv *pmlmepriv = &(padapter->mlmepriv);
4187
4188         if (check_fwstate(pmlmepriv, WIFI_AP_STATE) != true)
4189                 return -EINVAL;
4190
4191         rtw_set_macaddr_acl(padapter, param->u.mlme.command);
4192
4193         return ret;
4194 }
4195
4196 static int rtw_hostapd_ioctl(struct net_device *dev, struct iw_point *p)
4197 {
4198         struct ieee_param *param;
4199         int ret = 0;
4200         struct adapter *padapter = (struct adapter *)rtw_netdev_priv(dev);
4201
4202         /* DBG_871X("%s\n", __func__); */
4203
4204         /*
4205         * this function is expect to call in master mode, which allows no power saving
4206         * so, we just check hw_init_completed
4207         */
4208
4209         if (!padapter->hw_init_completed) {
4210                 ret = -EPERM;
4211                 goto out;
4212         }
4213
4214
4215         /* if (p->length < sizeof(struct ieee_param) || !p->pointer) { */
4216         if (!p->pointer) {
4217                 ret = -EINVAL;
4218                 goto out;
4219         }
4220
4221         param = rtw_malloc(p->length);
4222         if (param == NULL) {
4223                 ret = -ENOMEM;
4224                 goto out;
4225         }
4226
4227         if (copy_from_user(param, p->pointer, p->length)) {
4228                 kfree(param);
4229                 ret = -EFAULT;
4230                 goto out;
4231         }
4232
4233         /* DBG_871X("%s, cmd =%d\n", __func__, param->cmd); */
4234
4235         switch (param->cmd) {
4236         case RTL871X_HOSTAPD_FLUSH:
4237
4238                 rtw_hostapd_sta_flush(dev);
4239
4240                 break;
4241
4242         case RTL871X_HOSTAPD_ADD_STA:
4243
4244                 ret = rtw_add_sta(dev, param);
4245
4246                 break;
4247
4248         case RTL871X_HOSTAPD_REMOVE_STA:
4249
4250                 ret = rtw_del_sta(dev, param);
4251
4252                 break;
4253
4254         case RTL871X_HOSTAPD_SET_BEACON:
4255
4256                 ret = rtw_set_beacon(dev, param, p->length);
4257
4258                 break;
4259
4260         case RTL871X_SET_ENCRYPTION:
4261
4262                 ret = rtw_set_encryption(dev, param, p->length);
4263
4264                 break;
4265
4266         case RTL871X_HOSTAPD_GET_WPAIE_STA:
4267
4268                 ret = rtw_get_sta_wpaie(dev, param);
4269
4270                 break;
4271
4272         case RTL871X_HOSTAPD_SET_WPS_BEACON:
4273
4274                 ret = rtw_set_wps_beacon(dev, param, p->length);
4275
4276                 break;
4277
4278         case RTL871X_HOSTAPD_SET_WPS_PROBE_RESP:
4279
4280                 ret = rtw_set_wps_probe_resp(dev, param, p->length);
4281
4282                 break;
4283
4284         case RTL871X_HOSTAPD_SET_WPS_ASSOC_RESP:
4285
4286                 ret = rtw_set_wps_assoc_resp(dev, param, p->length);
4287
4288                 break;
4289
4290         case RTL871X_HOSTAPD_SET_HIDDEN_SSID:
4291
4292                 ret = rtw_set_hidden_ssid(dev, param, p->length);
4293
4294                 break;
4295
4296         case RTL871X_HOSTAPD_GET_INFO_STA:
4297
4298                 ret = rtw_ioctl_get_sta_data(dev, param, p->length);
4299
4300                 break;
4301
4302         case RTL871X_HOSTAPD_SET_MACADDR_ACL:
4303
4304                 ret = rtw_ioctl_set_macaddr_acl(dev, param, p->length);
4305
4306                 break;
4307
4308         case RTL871X_HOSTAPD_ACL_ADD_STA:
4309
4310                 ret = rtw_ioctl_acl_add_sta(dev, param, p->length);
4311
4312                 break;
4313
4314         case RTL871X_HOSTAPD_ACL_REMOVE_STA:
4315
4316                 ret = rtw_ioctl_acl_remove_sta(dev, param, p->length);
4317
4318                 break;
4319
4320         default:
4321                 DBG_871X("Unknown hostapd request: %d\n", param->cmd);
4322                 ret = -EOPNOTSUPP;
4323                 break;
4324
4325         }
4326
4327         if (ret == 0 && copy_to_user(p->pointer, param, p->length))
4328                 ret = -EFAULT;
4329
4330
4331         kfree(param);
4332
4333 out:
4334
4335         return ret;
4336
4337 }
4338
4339 static int rtw_wx_set_priv(struct net_device *dev,
4340                                 struct iw_request_info *info,
4341                                 union iwreq_data *awrq,
4342                                 char *extra)
4343 {
4344
4345 #ifdef DEBUG_RTW_WX_SET_PRIV
4346         char *ext_dbg;
4347 #endif
4348
4349         int ret = 0;
4350         int len = 0;
4351         char *ext;
4352
4353         struct adapter *padapter = (struct adapter *)rtw_netdev_priv(dev);
4354         struct iw_point *dwrq = (struct iw_point *)awrq;
4355
4356         /* RT_TRACE(_module_rtl871x_ioctl_os_c, _drv_notice_, ("+rtw_wx_set_priv\n")); */
4357         if (dwrq->length == 0)
4358                 return -EFAULT;
4359
4360         len = dwrq->length;
4361         if (!(ext = vmalloc(len)))
4362                 return -ENOMEM;
4363
4364         if (copy_from_user(ext, dwrq->pointer, len)) {
4365                 vfree(ext);
4366                 return -EFAULT;
4367         }
4368
4369
4370         /* RT_TRACE(_module_rtl871x_ioctl_os_c, _drv_notice_, */
4371         /*       ("rtw_wx_set_priv: %s req =%s\n", */
4372         /*        dev->name, ext)); */
4373
4374         #ifdef DEBUG_RTW_WX_SET_PRIV
4375         if (!(ext_dbg = vmalloc(len))) {
4376                 vfree(ext, len);
4377                 return -ENOMEM;
4378         }
4379
4380         memcpy(ext_dbg, ext, len);
4381         #endif
4382
4383         /* added for wps2.0 @20110524 */
4384         if (dwrq->flags == 0x8766 && len > 8) {
4385                 u32 cp_sz;
4386                 struct mlme_priv *pmlmepriv = &(padapter->mlmepriv);
4387                 u8 *probereq_wpsie = ext;
4388                 int probereq_wpsie_len = len;
4389                 u8 wps_oui[4]={0x0, 0x50, 0xf2, 0x04};
4390
4391                 if ((_VENDOR_SPECIFIC_IE_ == probereq_wpsie[0]) &&
4392                         (!memcmp(&probereq_wpsie[2], wps_oui, 4))) {
4393                         cp_sz = probereq_wpsie_len>MAX_WPS_IE_LEN ? MAX_WPS_IE_LEN:probereq_wpsie_len;
4394
4395                         if (pmlmepriv->wps_probe_req_ie) {
4396                                 pmlmepriv->wps_probe_req_ie_len = 0;
4397                                 kfree(pmlmepriv->wps_probe_req_ie);
4398                                 pmlmepriv->wps_probe_req_ie = NULL;
4399                         }
4400
4401                         pmlmepriv->wps_probe_req_ie = rtw_malloc(cp_sz);
4402                         if (pmlmepriv->wps_probe_req_ie == NULL) {
4403                                 printk("%s()-%d: rtw_malloc() ERROR!\n", __func__, __LINE__);
4404                                 ret =  -EINVAL;
4405                                 goto FREE_EXT;
4406
4407                         }
4408
4409                         memcpy(pmlmepriv->wps_probe_req_ie, probereq_wpsie, cp_sz);
4410                         pmlmepriv->wps_probe_req_ie_len = cp_sz;
4411
4412                 }
4413
4414                 goto FREE_EXT;
4415
4416         }
4417
4418         if (len >= WEXT_CSCAN_HEADER_SIZE
4419                 && !memcmp(ext, WEXT_CSCAN_HEADER, WEXT_CSCAN_HEADER_SIZE)) {
4420                 ret = rtw_wx_set_scan(dev, info, awrq, ext);
4421                 goto FREE_EXT;
4422         }
4423
4424 FREE_EXT:
4425
4426         vfree(ext);
4427         #ifdef DEBUG_RTW_WX_SET_PRIV
4428         vfree(ext_dbg);
4429         #endif
4430
4431         /* DBG_871X("rtw_wx_set_priv: (SIOCSIWPRIV) %s ret =%d\n", */
4432         /*              dev->name, ret); */
4433
4434         return ret;
4435
4436 }
4437
4438 static int rtw_pm_set(struct net_device *dev,
4439                                struct iw_request_info *info,
4440                                union iwreq_data *wrqu, char *extra)
4441 {
4442         int ret = 0;
4443         unsigned        mode = 0;
4444         struct adapter *padapter = (struct adapter *)rtw_netdev_priv(dev);
4445
4446         DBG_871X("[%s] extra = %s\n", __func__, extra);
4447
4448         if (!memcmp(extra, "lps =", 4)) {
4449                 sscanf(extra+4, "%u", &mode);
4450                 ret = rtw_pm_set_lps(padapter, mode);
4451         } else if (!memcmp(extra, "ips =", 4)) {
4452                 sscanf(extra+4, "%u", &mode);
4453                 ret = rtw_pm_set_ips(padapter, mode);
4454         } else {
4455                 ret = -EINVAL;
4456         }
4457
4458         return ret;
4459 }
4460
4461 static int rtw_mp_efuse_get(struct net_device *dev,
4462                         struct iw_request_info *info,
4463                         union iwreq_data *wdata, char *extra)
4464 {
4465         int err = 0;
4466         return err;
4467 }
4468
4469 static int rtw_mp_efuse_set(struct net_device *dev,
4470                         struct iw_request_info *info,
4471                         union iwreq_data *wdata, char *extra)
4472 {
4473         int err = 0;
4474         return err;
4475 }
4476
4477 static int rtw_tdls(struct net_device *dev,
4478                                 struct iw_request_info *info,
4479                                 union iwreq_data *wrqu, char *extra)
4480 {
4481         int ret = 0;
4482         return ret;
4483 }
4484
4485
4486 static int rtw_tdls_get(struct net_device *dev,
4487                                 struct iw_request_info *info,
4488                                 union iwreq_data *wrqu, char *extra)
4489 {
4490         int ret = 0;
4491         return ret;
4492 }
4493
4494
4495
4496
4497
4498 static int rtw_test(
4499         struct net_device *dev,
4500         struct iw_request_info *info,
4501         union iwreq_data *wrqu, char *extra)
4502 {
4503         u32 len;
4504         u8 *pbuf, *pch;
4505         char *ptmp;
4506         u8 *delim = ",";
4507         struct adapter *padapter = rtw_netdev_priv(dev);
4508
4509
4510         DBG_871X("+%s\n", __func__);
4511         len = wrqu->data.length;
4512
4513         pbuf = rtw_zmalloc(len);
4514         if (pbuf == NULL) {
4515                 DBG_871X("%s: no memory!\n", __func__);
4516                 return -ENOMEM;
4517         }
4518
4519         if (copy_from_user(pbuf, wrqu->data.pointer, len)) {
4520                 kfree(pbuf);
4521                 DBG_871X("%s: copy from user fail!\n", __func__);
4522                 return -EFAULT;
4523         }
4524         DBG_871X("%s: string =\"%s\"\n", __func__, pbuf);
4525
4526         ptmp = (char *)pbuf;
4527         pch = strsep(&ptmp, delim);
4528         if ((pch == NULL) || (strlen(pch) == 0)) {
4529                 kfree(pbuf);
4530                 DBG_871X("%s: parameter error(level 1)!\n", __func__);
4531                 return -EFAULT;
4532         }
4533
4534         if (strcmp(pch, "bton") == 0)
4535                 hal_btcoex_SetManualControl(padapter, false);
4536
4537         if (strcmp(pch, "btoff") == 0)
4538                 hal_btcoex_SetManualControl(padapter, true);
4539
4540         if (strcmp(pch, "h2c") == 0) {
4541                 u8 param[8];
4542                 u8 count = 0;
4543                 u32 tmp;
4544                 u8 i;
4545                 u32 pos;
4546                 s32 ret;
4547
4548
4549                 do {
4550                         pch = strsep(&ptmp, delim);
4551                         if ((pch == NULL) || (strlen(pch) == 0))
4552                                 break;
4553
4554                         sscanf(pch, "%x", &tmp);
4555                         param[count++] = (u8)tmp;
4556                 } while (count < 8);
4557
4558                 if (count == 0) {
4559                         kfree(pbuf);
4560                         DBG_871X("%s: parameter error(level 2)!\n", __func__);
4561                         return -EFAULT;
4562                 }
4563
4564                 ret = rtw_hal_fill_h2c_cmd(padapter, param[0], count-1, &param[1]);
4565
4566                 pos = sprintf(extra, "H2C ID = 0x%02x content =", param[0]);
4567                 for (i = 1; i<count; i++)
4568                         pos += sprintf(extra+pos, "%02x,", param[i]);
4569                 extra[pos] = 0;
4570                 pos--;
4571                 pos += sprintf(extra+pos, " %s", ret == _FAIL?"FAIL":"OK");
4572
4573                 wrqu->data.length = strlen(extra) + 1;
4574         }
4575
4576         kfree(pbuf);
4577         return 0;
4578 }
4579
4580 static iw_handler rtw_handlers[] = {
4581         NULL,                                   /* SIOCSIWCOMMIT */
4582         rtw_wx_get_name,                /* SIOCGIWNAME */
4583         dummy,                                  /* SIOCSIWNWID */
4584         dummy,                                  /* SIOCGIWNWID */
4585         rtw_wx_set_freq,                /* SIOCSIWFREQ */
4586         rtw_wx_get_freq,                /* SIOCGIWFREQ */
4587         rtw_wx_set_mode,                /* SIOCSIWMODE */
4588         rtw_wx_get_mode,                /* SIOCGIWMODE */
4589         dummy,                                  /* SIOCSIWSENS */
4590         rtw_wx_get_sens,                /* SIOCGIWSENS */
4591         NULL,                                   /* SIOCSIWRANGE */
4592         rtw_wx_get_range,               /* SIOCGIWRANGE */
4593         rtw_wx_set_priv,                /* SIOCSIWPRIV */
4594         NULL,                                   /* SIOCGIWPRIV */
4595         NULL,                                   /* SIOCSIWSTATS */
4596         NULL,                                   /* SIOCGIWSTATS */
4597         dummy,                                  /* SIOCSIWSPY */
4598         dummy,                                  /* SIOCGIWSPY */
4599         NULL,                                   /* SIOCGIWTHRSPY */
4600         NULL,                                   /* SIOCWIWTHRSPY */
4601         rtw_wx_set_wap,         /* SIOCSIWAP */
4602         rtw_wx_get_wap,         /* SIOCGIWAP */
4603         rtw_wx_set_mlme,                /* request MLME operation; uses struct iw_mlme */
4604         dummy,                                  /* SIOCGIWAPLIST -- depricated */
4605         rtw_wx_set_scan,                /* SIOCSIWSCAN */
4606         rtw_wx_get_scan,                /* SIOCGIWSCAN */
4607         rtw_wx_set_essid,               /* SIOCSIWESSID */
4608         rtw_wx_get_essid,               /* SIOCGIWESSID */
4609         dummy,                                  /* SIOCSIWNICKN */
4610         rtw_wx_get_nick,                /* SIOCGIWNICKN */
4611         NULL,                                   /* -- hole -- */
4612         NULL,                                   /* -- hole -- */
4613         rtw_wx_set_rate,                /* SIOCSIWRATE */
4614         rtw_wx_get_rate,                /* SIOCGIWRATE */
4615         rtw_wx_set_rts,                 /* SIOCSIWRTS */
4616         rtw_wx_get_rts,                 /* SIOCGIWRTS */
4617         rtw_wx_set_frag,                /* SIOCSIWFRAG */
4618         rtw_wx_get_frag,                /* SIOCGIWFRAG */
4619         dummy,                                  /* SIOCSIWTXPOW */
4620         dummy,                                  /* SIOCGIWTXPOW */
4621         dummy,                                  /* SIOCSIWRETRY */
4622         rtw_wx_get_retry,               /* SIOCGIWRETRY */
4623         rtw_wx_set_enc,                 /* SIOCSIWENCODE */
4624         rtw_wx_get_enc,                 /* SIOCGIWENCODE */
4625         dummy,                                  /* SIOCSIWPOWER */
4626         rtw_wx_get_power,               /* SIOCGIWPOWER */
4627         NULL,                                   /*---hole---*/
4628         NULL,                                   /*---hole---*/
4629         rtw_wx_set_gen_ie,              /* SIOCSIWGENIE */
4630         NULL,                                   /* SIOCGWGENIE */
4631         rtw_wx_set_auth,                /* SIOCSIWAUTH */
4632         NULL,                                   /* SIOCGIWAUTH */
4633         rtw_wx_set_enc_ext,             /* SIOCSIWENCODEEXT */
4634         NULL,                                   /* SIOCGIWENCODEEXT */
4635         rtw_wx_set_pmkid,               /* SIOCSIWPMKSA */
4636         NULL,                                   /*---hole---*/
4637 };
4638
4639 static const struct iw_priv_args rtw_private_args[] = {
4640         {
4641                 SIOCIWFIRSTPRIV + 0x0,
4642                 IW_PRIV_TYPE_CHAR | 0x7FF, 0, "write"
4643         },
4644         {
4645                 SIOCIWFIRSTPRIV + 0x1,
4646                 IW_PRIV_TYPE_CHAR | 0x7FF,
4647                 IW_PRIV_TYPE_CHAR | IW_PRIV_SIZE_FIXED | IFNAMSIZ, "read"
4648         },
4649         {
4650                 SIOCIWFIRSTPRIV + 0x2, 0, 0, "driver_ext"
4651         },
4652         {
4653                 SIOCIWFIRSTPRIV + 0x3, 0, 0, "mp_ioctl"
4654         },
4655         {
4656                 SIOCIWFIRSTPRIV + 0x4,
4657                 IW_PRIV_TYPE_INT | IW_PRIV_SIZE_FIXED | 1, 0, "apinfo"
4658         },
4659         {
4660                 SIOCIWFIRSTPRIV + 0x5,
4661                 IW_PRIV_TYPE_INT | IW_PRIV_SIZE_FIXED | 2, 0, "setpid"
4662         },
4663         {
4664                 SIOCIWFIRSTPRIV + 0x6,
4665                 IW_PRIV_TYPE_INT | IW_PRIV_SIZE_FIXED | 1, 0, "wps_start"
4666         },
4667 /* for PLATFORM_MT53XX */
4668         {
4669                 SIOCIWFIRSTPRIV + 0x7,
4670                 IW_PRIV_TYPE_INT | IW_PRIV_SIZE_FIXED | 1, 0, "get_sensitivity"
4671         },
4672         {
4673                 SIOCIWFIRSTPRIV + 0x8,
4674                 IW_PRIV_TYPE_INT | IW_PRIV_SIZE_FIXED | 1, 0, "wps_prob_req_ie"
4675         },
4676         {
4677                 SIOCIWFIRSTPRIV + 0x9,
4678                 IW_PRIV_TYPE_INT | IW_PRIV_SIZE_FIXED | 1, 0, "wps_assoc_req_ie"
4679         },
4680
4681 /* for RTK_DMP_PLATFORM */
4682         {
4683                 SIOCIWFIRSTPRIV + 0xA,
4684                 IW_PRIV_TYPE_INT | IW_PRIV_SIZE_FIXED | 1, 0, "channel_plan"
4685         },
4686
4687         {
4688                 SIOCIWFIRSTPRIV + 0xB,
4689                 IW_PRIV_TYPE_INT | IW_PRIV_SIZE_FIXED | 2, 0, "dbg"
4690         },
4691         {
4692                 SIOCIWFIRSTPRIV + 0xC,
4693                 IW_PRIV_TYPE_INT | IW_PRIV_SIZE_FIXED | 3, 0, "rfw"
4694         },
4695         {
4696                 SIOCIWFIRSTPRIV + 0xD,
4697                 IW_PRIV_TYPE_INT | IW_PRIV_SIZE_FIXED | 2, IW_PRIV_TYPE_CHAR | IW_PRIV_SIZE_FIXED | IFNAMSIZ, "rfr"
4698         },
4699         {
4700                 SIOCIWFIRSTPRIV + 0x10,
4701                 IW_PRIV_TYPE_CHAR | 1024, 0, "p2p_set"
4702         },
4703         {
4704                 SIOCIWFIRSTPRIV + 0x11,
4705                 IW_PRIV_TYPE_CHAR | 1024, IW_PRIV_TYPE_CHAR | IW_PRIV_SIZE_MASK , "p2p_get"
4706         },
4707         {
4708                 SIOCIWFIRSTPRIV + 0x12, 0, 0, "NULL"
4709         },
4710         {
4711                 SIOCIWFIRSTPRIV + 0x13,
4712                 IW_PRIV_TYPE_CHAR | 64, IW_PRIV_TYPE_CHAR | 64 , "p2p_get2"
4713         },
4714         {
4715                 SIOCIWFIRSTPRIV + 0x14,
4716                 IW_PRIV_TYPE_CHAR  | 64, 0, "tdls"
4717         },
4718         {
4719                 SIOCIWFIRSTPRIV + 0x15,
4720                 IW_PRIV_TYPE_CHAR | 1024, IW_PRIV_TYPE_CHAR | 1024 , "tdls_get"
4721         },
4722         {
4723                 SIOCIWFIRSTPRIV + 0x16,
4724                 IW_PRIV_TYPE_CHAR | 64, 0, "pm_set"
4725         },
4726
4727         {SIOCIWFIRSTPRIV + 0x18, IW_PRIV_TYPE_CHAR | IFNAMSIZ , 0 , "rereg_nd_name"},
4728         {SIOCIWFIRSTPRIV + 0x1A, IW_PRIV_TYPE_CHAR | 1024, 0, "efuse_set"},
4729         {SIOCIWFIRSTPRIV + 0x1B, IW_PRIV_TYPE_CHAR | 128, IW_PRIV_TYPE_CHAR | IW_PRIV_SIZE_MASK, "efuse_get"},
4730         {
4731                 SIOCIWFIRSTPRIV + 0x1D,
4732                 IW_PRIV_TYPE_CHAR | 40, IW_PRIV_TYPE_CHAR | 0x7FF, "test"
4733         },
4734
4735 #ifdef CONFIG_WOWLAN
4736                 { MP_WOW_ENABLE , IW_PRIV_TYPE_CHAR | 1024, 0, "wow_mode" }, /* set */
4737 #endif
4738 #ifdef CONFIG_AP_WOWLAN
4739                 { MP_AP_WOW_ENABLE , IW_PRIV_TYPE_CHAR | 1024, 0, "ap_wow_mode" }, /* set */
4740 #endif
4741 };
4742
4743 static iw_handler rtw_private_handler[] = {
4744         rtw_wx_write32,                                 /* 0x00 */
4745         rtw_wx_read32,                                  /* 0x01 */
4746         rtw_drvext_hdl,                                 /* 0x02 */
4747         rtw_mp_ioctl_hdl,                               /* 0x03 */
4748
4749 /*  for MM DTV platform */
4750         rtw_get_ap_info,                                        /* 0x04 */
4751
4752         rtw_set_pid,                                            /* 0x05 */
4753         rtw_wps_start,                                  /* 0x06 */
4754
4755 /*  for PLATFORM_MT53XX */
4756         rtw_wx_get_sensitivity,                 /* 0x07 */
4757         rtw_wx_set_mtk_wps_probe_ie,    /* 0x08 */
4758         rtw_wx_set_mtk_wps_ie,                  /* 0x09 */
4759
4760 /*  for RTK_DMP_PLATFORM */
4761 /*  Set Channel depend on the country code */
4762         rtw_wx_set_channel_plan,                /* 0x0A */
4763
4764         rtw_dbg_port,                                   /* 0x0B */
4765         rtw_wx_write_rf,                                        /* 0x0C */
4766         rtw_wx_read_rf,                                 /* 0x0D */
4767         rtw_wx_priv_null,                               /* 0x0E */
4768         rtw_wx_priv_null,                               /* 0x0F */
4769         rtw_p2p_set,                                    /* 0x10 */
4770         rtw_p2p_get,                                    /* 0x11 */
4771         NULL,                                                   /* 0x12 */
4772         rtw_p2p_get2,                                   /* 0x13 */
4773
4774         rtw_tdls,                                               /* 0x14 */
4775         rtw_tdls_get,                                   /* 0x15 */
4776
4777         rtw_pm_set,                                             /* 0x16 */
4778         rtw_wx_priv_null,                               /* 0x17 */
4779         rtw_rereg_nd_name,                              /* 0x18 */
4780         rtw_wx_priv_null,                               /* 0x19 */
4781         rtw_mp_efuse_set,                               /* 0x1A */
4782         rtw_mp_efuse_get,                               /* 0x1B */
4783         NULL,                                                   /*  0x1C is reserved for hostapd */
4784         rtw_test,                                               /*  0x1D */
4785 };
4786
4787 static struct iw_statistics *rtw_get_wireless_stats(struct net_device *dev)
4788 {
4789         struct adapter *padapter = (struct adapter *)rtw_netdev_priv(dev);
4790         struct iw_statistics *piwstats =&padapter->iwstats;
4791         int tmp_level = 0;
4792         int tmp_qual = 0;
4793         int tmp_noise = 0;
4794
4795         if (check_fwstate(&padapter->mlmepriv, _FW_LINKED) != true) {
4796                 piwstats->qual.qual = 0;
4797                 piwstats->qual.level = 0;
4798                 piwstats->qual.noise = 0;
4799                 /* DBG_871X("No link  level:%d, qual:%d, noise:%d\n", tmp_level, tmp_qual, tmp_noise); */
4800         } else {
4801                 #ifdef CONFIG_SIGNAL_DISPLAY_DBM
4802                 tmp_level = translate_percentage_to_dbm(padapter->recvpriv.signal_strength);
4803                 #else
4804                 #ifdef CONFIG_SKIP_SIGNAL_SCALE_MAPPING
4805                 {
4806                         /* Do signal scale mapping when using percentage as the unit of signal strength, since the scale mapping is skipped in odm */
4807
4808                         struct hal_com_data *pHal = GET_HAL_DATA(padapter);
4809
4810                         tmp_level = (u8)odm_SignalScaleMapping(&pHal->odmpriv, padapter->recvpriv.signal_strength);
4811                 }
4812                 #else
4813                 tmp_level = padapter->recvpriv.signal_strength;
4814                 #endif
4815                 #endif
4816
4817                 tmp_qual = padapter->recvpriv.signal_qual;
4818 #if defined(CONFIG_SIGNAL_DISPLAY_DBM) && defined(CONFIG_BACKGROUND_NOISE_MONITOR)
4819                 if (rtw_linked_check(padapter)) {
4820                         struct mlme_ext_priv *pmlmeext = &padapter->mlmeextpriv;
4821                         struct noise_info info;
4822                         info.bPauseDIG = true;
4823                         info.IGIValue = 0x1e;
4824                         info.max_time = 100;/* ms */
4825                         info.chan = pmlmeext->cur_channel ;/* rtw_get_oper_ch(padapter); */
4826                         rtw_ps_deny(padapter, PS_DENY_IOCTL);
4827                         LeaveAllPowerSaveModeDirect(padapter);
4828
4829                         rtw_hal_set_odm_var(padapter, HAL_ODM_NOISE_MONITOR,&info, false);
4830                         /* ODM_InbandNoise_Monitor(podmpriv, true, 0x20, 100); */
4831                         rtw_ps_deny_cancel(padapter, PS_DENY_IOCTL);
4832                         rtw_hal_get_odm_var(padapter, HAL_ODM_NOISE_MONITOR,&(info.chan), &(padapter->recvpriv.noise));
4833                         DBG_871X("chan:%d, noise_level:%d\n", info.chan, padapter->recvpriv.noise);
4834                 }
4835 #endif
4836                 tmp_noise = padapter->recvpriv.noise;
4837                 DBG_871X("level:%d, qual:%d, noise:%d, rssi (%d)\n", tmp_level, tmp_qual, tmp_noise, padapter->recvpriv.rssi);
4838
4839                 piwstats->qual.level = tmp_level;
4840                 piwstats->qual.qual = tmp_qual;
4841                 piwstats->qual.noise = tmp_noise;
4842         }
4843         piwstats->qual.updated = IW_QUAL_ALL_UPDATED ;/* IW_QUAL_DBM; */
4844
4845         #ifdef CONFIG_SIGNAL_DISPLAY_DBM
4846         piwstats->qual.updated = piwstats->qual.updated | IW_QUAL_DBM;
4847         #endif
4848
4849         return &padapter->iwstats;
4850 }
4851
4852 struct iw_handler_def rtw_handlers_def = {
4853         .standard = rtw_handlers,
4854         .num_standard = ARRAY_SIZE(rtw_handlers),
4855 #if defined(CONFIG_WEXT_PRIV)
4856         .private = rtw_private_handler,
4857         .private_args = (struct iw_priv_args *)rtw_private_args,
4858         .num_private = ARRAY_SIZE(rtw_private_handler),
4859         .num_private_args = ARRAY_SIZE(rtw_private_args),
4860 #endif
4861         .get_wireless_stats = rtw_get_wireless_stats,
4862 };
4863
4864 /*  copy from net/wireless/wext.c start */
4865 /* ---------------------------------------------------------------- */
4866 /*
4867  * Calculate size of private arguments
4868  */
4869 static const char iw_priv_type_size[] = {
4870         0,                              /* IW_PRIV_TYPE_NONE */
4871         1,                              /* IW_PRIV_TYPE_BYTE */
4872         1,                              /* IW_PRIV_TYPE_CHAR */
4873         0,                              /* Not defined */
4874         sizeof(__u32),                  /* IW_PRIV_TYPE_INT */
4875         sizeof(struct iw_freq),         /* IW_PRIV_TYPE_FLOAT */
4876         sizeof(struct sockaddr),        /* IW_PRIV_TYPE_ADDR */
4877         0,                              /* Not defined */
4878 };
4879
4880 static int get_priv_size(__u16 args)
4881 {
4882         int num = args & IW_PRIV_SIZE_MASK;
4883         int type = (args & IW_PRIV_TYPE_MASK) >> 12;
4884
4885         return num * iw_priv_type_size[type];
4886 }
4887 /*  copy from net/wireless/wext.c end */
4888
4889 static int rtw_ioctl_wext_private(struct net_device *dev, union iwreq_data *wrq_data)
4890 {
4891         int err = 0;
4892         u8 *input = NULL;
4893         u32 input_len = 0;
4894         const char delim[] = " ";
4895         u8 *output = NULL;
4896         u32 output_len = 0;
4897         u32 count = 0;
4898         u8 *buffer = NULL;
4899         u32 buffer_len = 0;
4900         char *ptr = NULL;
4901         u8 cmdname[17] = {0}; /*  IFNAMSIZ+1 */
4902         u32 cmdlen;
4903         s32 len;
4904         u8 *extra = NULL;
4905         u32 extra_size = 0;
4906
4907         s32 k;
4908         const iw_handler *priv;         /* Private ioctl */
4909         const struct iw_priv_args *priv_args;   /* Private ioctl description */
4910         u32 num_priv_args;                      /* Number of descriptions */
4911         iw_handler handler;
4912         int temp;
4913         int subcmd = 0;                         /* sub-ioctl index */
4914         int offset = 0;                         /* Space for sub-ioctl index */
4915
4916         union iwreq_data wdata;
4917
4918
4919         memcpy(&wdata, wrq_data, sizeof(wdata));
4920
4921         input_len = 2048;
4922         input = rtw_zmalloc(input_len);
4923         if (NULL == input)
4924                 return -ENOMEM;
4925         if (copy_from_user(input, wdata.data.pointer, input_len)) {
4926                 err = -EFAULT;
4927                 goto exit;
4928         }
4929         ptr = input;
4930         len = strlen(input);
4931
4932         sscanf(ptr, "%16s", cmdname);
4933         cmdlen = strlen(cmdname);
4934         DBG_8192C("%s: cmd =%s\n", __func__, cmdname);
4935
4936         /*  skip command string */
4937         if (cmdlen > 0)
4938                 cmdlen += 1; /*  skip one space */
4939         ptr += cmdlen;
4940         len -= cmdlen;
4941         DBG_8192C("%s: parameters =%s\n", __func__, ptr);
4942
4943         priv = rtw_private_handler;
4944         priv_args = rtw_private_args;
4945         num_priv_args = ARRAY_SIZE(rtw_private_args);
4946
4947         if (num_priv_args == 0) {
4948                 err = -EOPNOTSUPP;
4949                 goto exit;
4950         }
4951
4952         /* Search the correct ioctl */
4953         k = -1;
4954         while ((++k < num_priv_args) && strcmp(priv_args[k].name, cmdname));
4955
4956         /* If not found... */
4957         if (k == num_priv_args) {
4958                 err = -EOPNOTSUPP;
4959                 goto exit;
4960         }
4961
4962         /* Watch out for sub-ioctls ! */
4963         if (priv_args[k].cmd < SIOCDEVPRIVATE) {
4964                 int j = -1;
4965
4966                 /* Find the matching *real* ioctl */
4967                 while ((++j < num_priv_args) && ((priv_args[j].name[0] != '\0') ||
4968                         (priv_args[j].set_args != priv_args[k].set_args) ||
4969                         (priv_args[j].get_args != priv_args[k].get_args)));
4970
4971                 /* If not found... */
4972                 if (j == num_priv_args) {
4973                         err = -EINVAL;
4974                         goto exit;
4975                 }
4976
4977                 /* Save sub-ioctl number */
4978                 subcmd = priv_args[k].cmd;
4979                 /* Reserve one int (simplify alignment issues) */
4980                 offset = sizeof(__u32);
4981                 /* Use real ioctl definition from now on */
4982                 k = j;
4983         }
4984
4985         buffer = rtw_zmalloc(4096);
4986         if (NULL == buffer) {
4987                 err = -ENOMEM;
4988                 goto exit;
4989         }
4990
4991         /* If we have to set some data */
4992         if ((priv_args[k].set_args & IW_PRIV_TYPE_MASK) &&
4993                 (priv_args[k].set_args & IW_PRIV_SIZE_MASK)) {
4994                 u8 *str;
4995
4996                 switch (priv_args[k].set_args & IW_PRIV_TYPE_MASK) {
4997                 case IW_PRIV_TYPE_BYTE:
4998                         /* Fetch args */
4999                         count = 0;
5000                         do {
5001                                 str = strsep(&ptr, delim);
5002                                 if (NULL == str) break;
5003                                 sscanf(str, "%i", &temp);
5004                                 buffer[count++] = (u8)temp;
5005                         } while (1);
5006                         buffer_len = count;
5007
5008                         /* Number of args to fetch */
5009                         wdata.data.length = count;
5010                         if (wdata.data.length > (priv_args[k].set_args & IW_PRIV_SIZE_MASK))
5011                                 wdata.data.length = priv_args[k].set_args & IW_PRIV_SIZE_MASK;
5012
5013                         break;
5014
5015                 case IW_PRIV_TYPE_INT:
5016                         /* Fetch args */
5017                         count = 0;
5018                         do {
5019                                 str = strsep(&ptr, delim);
5020                                 if (NULL == str) break;
5021                                 sscanf(str, "%i", &temp);
5022                                 ((s32 *)buffer)[count++] = (s32)temp;
5023                         } while (1);
5024                         buffer_len = count * sizeof(s32);
5025
5026                         /* Number of args to fetch */
5027                         wdata.data.length = count;
5028                         if (wdata.data.length > (priv_args[k].set_args & IW_PRIV_SIZE_MASK))
5029                                 wdata.data.length = priv_args[k].set_args & IW_PRIV_SIZE_MASK;
5030
5031                         break;
5032
5033                 case IW_PRIV_TYPE_CHAR:
5034                         if (len > 0) {
5035                                 /* Size of the string to fetch */
5036                                 wdata.data.length = len;
5037                                 if (wdata.data.length > (priv_args[k].set_args & IW_PRIV_SIZE_MASK))
5038                                         wdata.data.length = priv_args[k].set_args & IW_PRIV_SIZE_MASK;
5039
5040                                 /* Fetch string */
5041                                 memcpy(buffer, ptr, wdata.data.length);
5042                         } else {
5043                                 wdata.data.length = 1;
5044                                 buffer[0] = '\0';
5045                         }
5046                         buffer_len = wdata.data.length;
5047                         break;
5048
5049                 default:
5050                         DBG_8192C("%s: Not yet implemented...\n", __func__);
5051                         err = -1;
5052                         goto exit;
5053                 }
5054
5055                 if ((priv_args[k].set_args & IW_PRIV_SIZE_FIXED) &&
5056                         (wdata.data.length != (priv_args[k].set_args & IW_PRIV_SIZE_MASK))) {
5057                         DBG_8192C("%s: The command %s needs exactly %d argument(s)...\n",
5058                                         __func__, cmdname, priv_args[k].set_args & IW_PRIV_SIZE_MASK);
5059                         err = -EINVAL;
5060                         goto exit;
5061                 }
5062         } else { /* if args to set */
5063                 wdata.data.length = 0L;
5064         }
5065
5066         /* Those two tests are important. They define how the driver
5067         * will have to handle the data */
5068         if ((priv_args[k].set_args & IW_PRIV_SIZE_FIXED) &&
5069                 ((get_priv_size(priv_args[k].set_args) + offset) <= IFNAMSIZ)) {
5070                 /* First case : all SET args fit within wrq */
5071                 if (offset)
5072                         wdata.mode = subcmd;
5073                 memcpy(wdata.name + offset, buffer, IFNAMSIZ - offset);
5074         } else {
5075                 if ((priv_args[k].set_args == 0) &&
5076                         (priv_args[k].get_args & IW_PRIV_SIZE_FIXED) &&
5077                         (get_priv_size(priv_args[k].get_args) <= IFNAMSIZ)) {
5078                         /* Second case : no SET args, GET args fit within wrq */
5079                         if (offset)
5080                                 wdata.mode = subcmd;
5081                 } else {
5082                         /* Third case : args won't fit in wrq, or variable number of args */
5083                         if (copy_to_user(wdata.data.pointer, buffer, buffer_len)) {
5084                                 err = -EFAULT;
5085                                 goto exit;
5086                         }
5087                         wdata.data.flags = subcmd;
5088                 }
5089         }
5090
5091         kfree(input);
5092         input = NULL;
5093
5094         extra_size = 0;
5095         if (IW_IS_SET(priv_args[k].cmd)) {
5096                 /* Size of set arguments */
5097                 extra_size = get_priv_size(priv_args[k].set_args);
5098
5099                 /* Does it fits in iwr ? */
5100                 if ((priv_args[k].set_args & IW_PRIV_SIZE_FIXED) &&
5101                         ((extra_size + offset) <= IFNAMSIZ))
5102                         extra_size = 0;
5103         } else {
5104                 /* Size of get arguments */
5105                 extra_size = get_priv_size(priv_args[k].get_args);
5106
5107                 /* Does it fits in iwr ? */
5108                 if ((priv_args[k].get_args & IW_PRIV_SIZE_FIXED) &&
5109                         (extra_size <= IFNAMSIZ))
5110                         extra_size = 0;
5111         }
5112
5113         if (extra_size == 0) {
5114                 extra = (u8 *)&wdata;
5115                 kfree(buffer);
5116                 buffer = NULL;
5117         } else
5118                 extra = buffer;
5119
5120         handler = priv[priv_args[k].cmd - SIOCIWFIRSTPRIV];
5121         err = handler(dev, NULL, &wdata, extra);
5122
5123         /* If we have to get some data */
5124         if ((priv_args[k].get_args & IW_PRIV_TYPE_MASK) &&
5125                 (priv_args[k].get_args & IW_PRIV_SIZE_MASK)) {
5126                 int j;
5127                 int n = 0;      /* number of args */
5128                 u8 str[20] = {0};
5129
5130                 /* Check where is the returned data */
5131                 if ((priv_args[k].get_args & IW_PRIV_SIZE_FIXED) &&
5132                         (get_priv_size(priv_args[k].get_args) <= IFNAMSIZ))
5133                         n = priv_args[k].get_args & IW_PRIV_SIZE_MASK;
5134                 else
5135                         n = wdata.data.length;
5136
5137                 output = rtw_zmalloc(4096);
5138                 if (NULL == output) {
5139                         err =  -ENOMEM;
5140                         goto exit;
5141                 }
5142
5143                 switch (priv_args[k].get_args & IW_PRIV_TYPE_MASK) {
5144                 case IW_PRIV_TYPE_BYTE:
5145                         /* Display args */
5146                         for (j = 0; j < n; j++) {
5147                                 sprintf(str, "%d  ", extra[j]);
5148                                 len = strlen(str);
5149                                 output_len = strlen(output);
5150                                 if ((output_len + len + 1) > 4096) {
5151                                         err = -E2BIG;
5152                                         goto exit;
5153                                 }
5154                                 memcpy(output+output_len, str, len);
5155                         }
5156                         break;
5157
5158                 case IW_PRIV_TYPE_INT:
5159                         /* Display args */
5160                         for (j = 0; j < n; j++) {
5161                                 sprintf(str, "%d  ", ((__s32 *)extra)[j]);
5162                                 len = strlen(str);
5163                                 output_len = strlen(output);
5164                                 if ((output_len + len + 1) > 4096) {
5165                                         err = -E2BIG;
5166                                         goto exit;
5167                                 }
5168                                 memcpy(output+output_len, str, len);
5169                         }
5170                         break;
5171
5172                 case IW_PRIV_TYPE_CHAR:
5173                         /* Display args */
5174                         memcpy(output, extra, n);
5175                         break;
5176
5177                 default:
5178                         DBG_8192C("%s: Not yet implemented...\n", __func__);
5179                         err = -1;
5180                         goto exit;
5181                 }
5182
5183                 output_len = strlen(output) + 1;
5184                 wrq_data->data.length = output_len;
5185                 if (copy_to_user(wrq_data->data.pointer, output, output_len)) {
5186                         err = -EFAULT;
5187                         goto exit;
5188                 }
5189         } else { /* if args to set */
5190                 wrq_data->data.length = 0;
5191         }
5192
5193 exit:
5194         kfree(input);
5195         kfree(buffer);
5196         kfree(output);
5197
5198         return err;
5199 }
5200
5201 int rtw_ioctl(struct net_device *dev, struct ifreq *rq, int cmd)
5202 {
5203         struct iwreq *wrq = (struct iwreq *)rq;
5204         int ret = 0;
5205
5206         switch (cmd) {
5207         case RTL_IOCTL_WPA_SUPPLICANT:
5208                 ret = wpa_supplicant_ioctl(dev, &wrq->u.data);
5209                 break;
5210         case RTL_IOCTL_HOSTAPD:
5211                 ret = rtw_hostapd_ioctl(dev, &wrq->u.data);
5212                 break;
5213         case SIOCDEVPRIVATE:
5214                 ret = rtw_ioctl_wext_private(dev, &wrq->u);
5215                 break;
5216         default:
5217                 ret = -EOPNOTSUPP;
5218                 break;
5219         }
5220
5221         return ret;
5222 }